@lotics/cli 0.86.1 → 0.87.0

package/README.md

@@ -195,84 +195,6 @@ lotics ui link card --remove               # finalize: PR + publish, then drop t
 
 `app codegen` reads `package.json#lotics.queries` to decide which tables to put in `app_fields.ts`; widen the set with `package.json#lotics.codegen.tables` (an array of `tbl_…` ids) for tables the app only writes via workflows.
 
-## Packages
-
-A maintained, versioned package library: author once, install into many workspaces, upgrade per-workspace. A package carries an app, content (knowledge docs and/or document templates), or both. **Nothing starts as a package** — build a bespoke app first (the `lotics app` loop above), then first-release it as a package when it proves worth distributing. Any org authors its own packages (publishing is owner-org-only); Lotics-backed packages carry the `official` badge. See `docs/packages.md` for the model.
-
-```bash
-# 1. Make the app distributable — first-release it as a package (one call: extract
-#    an alias-keyed contract, create the registry package, publish v1 from the
-#    deployed source + dist, pin the app as installation #1). Blocking findings
-#    (a hardcoded fld_/opt_ id in src/ or a workflow body, a button field) → 409.
-lotics app publish                          # from the pulled app project (or: app publish app_...)
-lotics app publish --rename item=deal -m "v1"   # fix an auto-minted alias before v1 freezes it
-
-# 2. Iterate IN PLACE — the origin app is the permanent working copy
-lotics app pull app_...                     # the same loop as any app: pull, edit, dev
-lotics app deploy -m "Add quote drawer"     # commit a new app version
-
-# 3. Release the next package version from the origin you are happy with
-lotics app release -m "v2: adds deals"          # preview (new/changed aliases + findings)
-lotics app release -m "v2: adds deals" --yes    # publish v2 + re-pin the origin
-
-# Take it off the shelf (existing installations keep working + upgrading)
-lotics app unpublish app_... [--undo]       # by app id (resolves the package) or package id
-
-# Operate installations (workspace admin). The high-traffic verbs are top-level
-# (install / uninstall / upgrade); low-traffic ops live on `lotics package`.
-lotics package show apg_...                # registry metadata + version history (trust badge, yank)
-lotics install apg_... --version 2         # scaffold + materialize + deploy + pin
-lotics install apg_... --config heading="Ops board"           # per-knob overrides over contract defaults
-lotics package config app_... --set show_done=false           # edit a live installation's config (partial merge)
-lotics uninstall app_... [--archive-tables]                   # remove an installation; workflows stop firing
-lotics package doctor app_...              # version pin vs latest + drift + local edits (exit 1 on findings)
-lotics upgrade app_...                     # preview, then apply (additive; overlay preserved)
-lotics upgrade apg_...                      # APP package → FLEET: upgrade EVERY org installation (clean ones apply; findings skip, exit 1)
-lotics upgrade app_... --resolve fields.deal.stage=recreate   # resolve reported drift
-lotics upgrade app_... --resolve queries.tasks=keep           # consent for a local edit (or =revert)
-lotics upgrade app_... --resolve template.quote=revert        # a locally-edited template (clean ones auto-update; or =keep)
-lotics upgrade app_... --resolve knowledge.playbook=apply     # a bundled knowledge doc: apply|keep|archive|recreate|unbind
-lotics upgrade app_... --resolve roles.approver=grp_...       # re-point a LIVE package role at another group
-lotics package yank apg_... 3 [--undo]     # refuse new installs/upgrades of a broken version
-lotics package eject app_...               # one-way: sever the package link
-lotics workspace doctor                    # dangling schema references across the workspace (exit 1 on findings)
-```
-
-After the first publish **the origin is the master** — develop it in its workspace (`app pull` / `app deploy` / `app workflow set` / table tools), and `lotics app release` snapshots each version. Its **binding-aware re-extract** keeps aliases stable through the origin's current binding, so re-extraction never churns the upgrade diff (which is why extract-again is the loop, not a hazard). Release is also the **bundled-knowledge declaration surface**: run from the app project, the manifest's `lotics.knowledge` (`[{alias,doc_id}]`) re-declares which docs the package bundles — an alias added ships as a new doc, a bound alias dropped surfaces to consumers as `removed` (archive|keep), a present one re-snapshots; a bare id from elsewhere reconstructs the current corpus from the pin (never drops it). So a published app package evolves its bundled docs across versions without ejecting.
-
-### Content packages
-
-A **content** package ships **knowledge docs and/or document templates** — no app, just the artifacts. Knowledge is the reference corpus an agent looks up by name; templates are standalone document templates. Content comes two ways: bundled *with an app* (installing the app delivers its agents' docs) or as a standalone content package (a versioned corpus). Install delivers, upgrade refreshes — preserving stable `kdc_`/`tmpl_` ids + a version snapshot per change. See `docs/packages.md` § Content.
-
-```bash
-# Publish a content package from a SET of live knowledge docs + templates — the
-# publish_content tool (there is no content-package project). Aliases + shas are
-# computed from live content; v1 is created and the origin workspace is pinned.
-lotics run publish_content '{"name":"My SOPs","knowledge_doc_ids":["kdc_..."],"template_ids":["tmpl_..."]}'
-
-# Cut the next version after editing those docs/templates in place (add "dry_run":true to preview the diff)
-lotics run release_content '{"package_id":"apg_...","changelog":"v2: revised SOPs"}'
-
-# Install into a workspace (a same-named local DOC collides — consent with --bind-to; templates never collide)
-lotics install apg_...                          # app OR content, shape-branched
-lotics install apg_... --bind-to policy=kdc_... # adopt an existing doc as package-managed
-
-# Discover installed content (each row leads with the PACKAGE id)
-lotics package list-content                           # package id · package · version (standalone content installs)
-
-# Refresh this workspace's content install — addressed by PACKAGE id (one install per
-# package per workspace, so the package id is the address; one gate over docs + templates)
-lotics upgrade apg_...                          # CONTENT package → preview, then apply (this workspace's install)
-lotics upgrade apg_... --resolve knowledge.policy=apply   # a doc: apply|keep|archive|recreate|unbind
-lotics upgrade apg_... --resolve template.quote=revert    # a locally-edited template: revert|keep (clean ones auto-update)
-lotics upgrade apg_... --apply-all              # accept upstream for every doc + template (OVERWRITES local edits)
-lotics uninstall apg_... --keep-content            # remove the pin; keep docs + templates (default archives them)
-```
-
-A package's knowledge can also arrive **bundled with an app**. Upgrading such an app (`lotics upgrade <app_id>`) previews its bundled-knowledge changes alongside the plan and resolves them in the SAME namespaced grammar — `--resolve knowledge.<alias>=apply|keep|archive|recreate|unbind` (the flags pass to the server verbatim; no routing, no ambiguity), `--bind-to` consents an added-doc collision, `--apply-all` takes the package's version for every consent-requiring doc.
-
-To package the knowledge an existing app's agents route to, declare it in the app project's `package.json#lotics.knowledge` (`[{ alias, doc_id }]`, + `lotics.knowledge_expects` for docs the agents assume but the package doesn't own), then `lotics app publish` from the app project — it forwards the declaration, and the docs ship with the package.
-
 ## SDK
 
 ```typescript

package/dist/args.d.ts

@@ -36,45 +36,6 @@ export declare function parseArgs(argv: string[]): {
         printCreated: boolean;
         /** `--cleanup`: also delete the harvested created records (records only). */
         cleanup: boolean;
-        /**
-         * `--version <n>`: a package version number (`lotics install … --version 2`).
-         * Distinct from the boolean `version` flag below: `--version` followed by an
-         * integer captures the number; a bare `--version` (or `-v`) prints the CLI
-         * version. No other command takes a numeric value after `--version`, so the
-         * peek is unambiguous.
-         */
-        packageVersion?: string;
-        /**
-         * `--resolve <key>=recreate|revert|keep|<id>` (repeatable): upgrade
-         * resolutions — drift entries (`<namespace.alias>`) take `recreate` or an
-         * existing id; modified-core entries (`<kind>.<alias>`) take `revert` or
-         * `keep`. For a standalone KNOWLEDGE upgrade, `<alias>=apply|keep|archive|
-         * recreate|unbind`.
-         */
-        resolve: string[];
-        /**
-         * `--bind-to <alias>=<kdc_id>` (repeatable): consent to adopt an existing
-         * same-named doc as package-managed — resolves a knowledge name collision at
-         * install / a created-doc collision at upgrade.
-         */
-        bindTo: string[];
-        /** `--keep-content` (`package uninstall` of a content install): retain the package-bound docs instead of archiving them. */
-        keepContent: boolean;
-        /** `--apply-all` (knowledge `package upgrade`): accept the package's version for every consent entry. */
-        applyAll: boolean;
-        /**
-         * `--rename <old>=<new>` (repeatable, `lotics app publish`): fix an auto-minted
-         * alias before the package's v1 contract freezes it.
-         */
-        rename: string[];
-        /** `--config key=value` (repeatable): per-knob config overrides at `package install`. */
-        config: string[];
-        /** `--set key=value` (repeatable): per-knob config edits at `package config`. */
-        set: string[];
-        /** `--archive-tables` (`package uninstall` of an app install): also archive the scaffolded tables. */
-        archiveTables: boolean;
-        /** `--undo`: reverse a `package retire` / `package yank`. */
-        undo: boolean;
         version: boolean;
         help: boolean;
     };

package/dist/args.js

@@ -28,16 +28,6 @@ export function parseArgs(argv) {
         yes: false,
         printCreated: false,
         cleanup: false,
-        packageVersion: undefined,
-        resolve: [],
-        bindTo: [],
-        keepContent: false,
-        applyAll: false,
-        rename: [],
-        config: [],
-        set: [],
-        archiveTables: false,
-        undo: false,
         version: false,
         help: false,
     };
@@ -102,81 +92,10 @@ export function parseArgs(argv) {
             case "--cleanup":
                 flags.cleanup = true;
                 break;
-            case "--resolve": {
-                const value = argv[++i];
-                if (value === undefined || value.startsWith("-")) {
-                    throw new Error("--resolve requires a value: <key>=recreate|revert|keep or <key>=<existing_id> (drift: <namespace.alias>; modified core: <kind>.<alias>).");
-                }
-                flags.resolve.push(value);
-                break;
-            }
-            case "--bind-to": {
-                const value = argv[++i];
-                if (value === undefined || value.startsWith("-")) {
-                    throw new Error("--bind-to requires a value: <alias>=<kdc_id>.");
-                }
-                flags.bindTo.push(value);
-                break;
-            }
-            case "--keep-content":
-                flags.keepContent = true;
-                break;
-            case "--apply-all":
-                flags.applyAll = true;
-                break;
-            case "--rename": {
-                const value = argv[++i];
-                if (value === undefined || value.startsWith("-")) {
-                    throw new Error("--rename requires a value: old=new (an alias to rename before v1 freezes it).");
-                }
-                flags.rename.push(value);
-                break;
-            }
-            case "--config": {
-                const value = argv[++i];
-                if (value === undefined || value.startsWith("-")) {
-                    throw new Error("--config requires a value: key=value (repeatable).");
-                }
-                flags.config.push(value);
-                break;
-            }
-            case "--set": {
-                const value = argv[++i];
-                if (value === undefined || value.startsWith("-")) {
-                    throw new Error("--set requires a value: key=value (repeatable).");
-                }
-                flags.set.push(value);
-                break;
-            }
-            case "--archive-tables":
-                flags.archiveTables = true;
-                break;
-            case "--undo":
-                flags.undo = true;
-                break;
             case "--version":
-            case "-v": {
-                // For a package version-taking command (`package …`, or the top-level
-                // consumer verbs `install` / `upgrade`), `--version` carries a value
-                // (the package version) and the value is REQUIRED — a bare or malformed
-                // `--version` here must never fall back to the CLI-version early-exit
-                // boolean, which would print the CLI version and exit 0 (a provisioning
-                // script reads that as a successful install). The value is captured raw;
-                // the consuming command validates integer-ness with a loud error.
-                // Everywhere else, this is the CLI-version boolean.
-                const next = argv[i + 1];
-                if (command === "package" || command === "install" || command === "upgrade") {
-                    if (next === undefined || next.startsWith("-")) {
-                        throw new Error("--version requires a version number for install/upgrade/package commands (e.g. --version 2).");
-                    }
-                    flags.packageVersion = next;
-                    i++;
-                }
-                else {
-                    flags.version = true;
-                }
+            case "-v":
+                flags.version = true;
                 break;
-            }
             case "--help":
             case "-h":
                 flags.help = true;

package/dist/args.test.js

@@ -23,53 +23,13 @@ describe("parseArgs", () => {
         const r = parseArgs(["app", "deploy"]);
         expect(r.flags.message).toBeUndefined();
     });
-    it("captures --version <int> as packageVersion on the top-level install verb", () => {
-        const r = parseArgs(["install", "apg_123", "--version", "2"]);
-        expect(r.command).toBe("install");
-        expect(r.subcommand).toBe("apg_123");
-        expect(r.flags.packageVersion).toBe("2");
-        expect(r.flags.version).toBe(false);
-        expect(r.restArgs).toEqual([]);
-    });
-    it("captures --version <int> as packageVersion on the top-level upgrade verb", () => {
-        const r = parseArgs(["upgrade", "app_1", "--version", "3"]);
-        expect(r.command).toBe("upgrade");
-        expect(r.subcommand).toBe("app_1");
-        expect(r.flags.packageVersion).toBe("3");
-        expect(r.flags.version).toBe(false);
-    });
     it("treats a bare --version as the boolean CLI-version flag", () => {
         const r = parseArgs(["--version"]);
         expect(r.flags.version).toBe(true);
-        expect(r.flags.packageVersion).toBeUndefined();
     });
     it("treats -v as the boolean CLI-version flag", () => {
         const r = parseArgs(["-v"]);
         expect(r.flags.version).toBe(true);
-        expect(r.flags.packageVersion).toBeUndefined();
-    });
-    it("captures a non-integer --version value under version-taking commands for loud command-level validation", () => {
-        const r = parseArgs(["install", "apg_123", "--version", "2.0"]);
-        expect(r.flags.packageVersion).toBe("2.0");
-        expect(r.flags.version).toBe(false);
-    });
-    it("collects repeated --resolve values", () => {
-        const r = parseArgs([
-            "upgrade",
-            "app_1",
-            "--resolve",
-            "fields.deal.stage=recreate",
-            "--resolve",
-            "templates.quote=dtl_abc",
-        ]);
-        expect(r.flags.resolve).toEqual(["fields.deal.stage=recreate", "templates.quote=dtl_abc"]);
-    });
-    it("errors on --resolve without a value", () => {
-        expect(() => parseArgs(["upgrade", "app_1", "--resolve"])).toThrow(/--resolve requires a value/);
-    });
-    it("errors loudly on a bare --version under version-taking commands instead of printing the CLI version", () => {
-        expect(() => parseArgs(["install", "apg_123", "--version"])).toThrow(/requires a version number/);
-        expect(() => parseArgs(["install", "apg_123", "--version", "--json"])).toThrow(/requires a version number/);
     });
     it("parses --workspace as a value flag", () => {
         const r = parseArgs(["run", "query_tables", "{}", "--workspace", "wsp_123"]);
@@ -111,15 +71,6 @@ describe("parseArgs", () => {
         expect(parseArgs(["app", "workflow", "run", "wf"]).flags.cleanup).toBe(false);
         expect(parseArgs(["app", "workflow", "run", "wf"]).flags.printCreated).toBe(false);
     });
-    it("collects repeated --rename old=new flags (default empty)", () => {
-        const r = parseArgs(["app", "publish", ".", "--rename", "item=deal", "--rename", "don_hang=orders"]);
-        expect(r.flags.rename).toEqual(["item=deal", "don_hang=orders"]);
-        expect(r.toolArgs).toBe(".");
-        expect(parseArgs(["app", "publish"]).flags.rename).toEqual([]);
-    });
-    it("throws when --rename has no value", () => {
-        expect(() => parseArgs(["app", "publish", "--rename"])).toThrow(/--rename requires a value/);
-    });
     it("parses --yes and -y as the same boolean confirmation flag (default false)", () => {
         expect(parseArgs(["workspace", "delete", "wsp_1", "--yes"]).flags.yes).toBe(true);
         expect(parseArgs(["workspace", "delete", "wsp_1", "-y"]).flags.yes).toBe(true);

package/dist/cli.js

@@ -14,7 +14,6 @@ import { LoticsClient, API_BASE_URL } from "./client.js";
 import { resolveContext, deleteConfig, getConfigPath, loadGlobalConfig, saveGlobalConfig, loadLocalConfig, upsertProfile, removeProfile, setActiveOrg, setSelectedWorkspace, resolveProfileByNameOrId, checkForUpdate, } from "./config.js";
 import { VERSION } from "./version.js";
 import { appCreate, appPull, appDeploy, appDev, appSetSubdomain, appRename, appVersions, appCodegen, appExecuteWorkflow, appWorkflowSet, appWorkflowPull, appWorkflowCheck, appQuerySet, appUiLink, } from "./app_commands.js";
-import { packageInstall, packageUninstall, packageListContent, packageConfig, packageShow, parseInstallConfigFlags, packageEject, packageDoctor, packageUpgrade, packageUpgradeByPackageId, redirectContentPciForm, parseBindToFlags, appPublish, appRelease, appUnpublish, packageYank, } from "./package_commands.js";
 import { parseArgs } from "./args.js";
 import { ingestJsonArgs } from "./inputs.js";
 import { runXlsxCommand } from "./xlsx.js";
@@ -75,18 +74,6 @@ COMMANDS
                                        (-m is required — it's the version's audit trail;
                                        carries code + queries only — workflow bindings are
                                        managed by set_app_workflow / remove_app_workflow)
-  lotics app publish [app_id|.] [--rename old=new ...] [-m <changelog>] [--yes]
-                                       Make the app DISTRIBUTABLE — first-release it (v1) as a
-                                       package; later versions ship via "lotics app release".
-                                       Previews the auto-minted aliases + findings; --yes applies
-                                       (extract → create → publish v1 → pin origin). --rename fixes
-                                       an alias before v1 freezes; -m is an optional v1 changelog
-  lotics app release [app_id|.] -m <changelog> [--yes]
-                                       RELEASE the next package version from the origin app you
-                                       are happy with (preview; --yes publishes + re-pins)
-  lotics app unpublish <app_id|package_id> [--undo]
-                                       Take the published package off the shelf (installations
-                                       keep working); --undo restores it
   lotics app versions [app_id]         Show deploy history newest-first (version,
                                        timestamp, deployer, build status, -m message;
                                        * marks the currently served version)
@@ -108,42 +95,6 @@ COMMANDS
   lotics app subdomain <new-subdomain> Rename the app's public <slug>.lotics.app address
   lotics app rename "<new name>"       Rename the app's display name (launcher title)
   lotics app dev [path]                Run the app locally with HMR (RPC forwarded to prod)
-  # PACKAGES — consumer verbs are top-level; low-traffic ops live on "lotics package"
-  #            (author verbs live on "lotics app")
-  lotics install <package_id> [--version N] [--bind-to <alias>=<kdc_id> ...] [--config key=value ...]
-                                       Install a package (app: scaffolds/deploys/materializes,
-                                       --config sets its knobs; content: installs the doc corpus,
-                                       --bind-to consents to adopt a same-named doc on a collision)
-  lotics uninstall <app_id|package_id> [--archive-tables] [--keep-content]
-                                       Uninstall — dispatched by id. App (app_id): archives
-                                       artifacts (+ --archive-tables also archives scaffolded
-                                       tables). Content package (apg_): archives its package-bound
-                                       docs unless --keep-content
-  lotics upgrade <app_id|package_id> [--version N] [--resolve <key>=... ] [--bind-to ...] [--apply-all]
-                                       Preview-then-apply an upgrade, dispatched by id. App
-                                       (app_id): refuses while any drift/modified/bundled-knowledge
-                                       finding lacks a --resolve. Package (apg_): a CONTENT package
-                                       upgrades THIS workspace's install (--resolve
-                                       <alias>=apply|keep|archive|recreate|unbind); an APP package
-                                       FLEET-upgrades every installation across your org (clean
-                                       apply, findings skip). --apply-all accepts the package's version
-  lotics package doctor [app_id]       Installation health: version pin vs latest, binding
-                                       drift, locally modified core, knowledge drift/edits
-                                       (exit 1 on findings)
-  lotics package config <app_id> [--set key=value ...]
-                                       Show or edit an installation's config knobs
-  lotics package eject <app_id>        Sever an installation's package link
-                                       (re-deploys the pinned source as a bespoke app)
-  lotics package show <package_id>     Registry metadata + version history
-  lotics package list-content          List the workspace's content installations
-                                       (standalone content installs) — each row leads with
-                                       the package id for upgrade/uninstall
-  lotics package yank <package_id> <version> [--undo]
-                                       Refuse new installs/upgrades of a broken published
-                                       version (pinned installations keep running)
-  lotics run publish_content '{"name":"…","knowledge_doc_ids":[…],"template_ids":[…]}'
-                                       Publish a SET of live docs + templates as a content
-                                       package (v1 + origin pin); release_content cuts the next
   lotics ui link <component> [--ui-src <path>] [--remove]
                                        Dev-link @lotics/ui to packages/ui/src (Vite alias
                                        + tsc paths) for live HMR + typecheck. Monorepo apps
@@ -172,13 +123,6 @@ FLAGS
                      is_current_member / row-scoping resolve to them (also
                      LOTICS_VIEW_AS env; admin key only; writes stay yours)
   --local            Pin the current directory (lotics org use / auth api-key)
-  --rename <old>=<new> (lotics app publish, repeatable) Fix an auto-minted alias before
-                     the package's v1 contract freezes it
-  --bind-to <a>=<id> (lotics install/upgrade, repeatable) Adopt an existing
-                     same-named doc as package-managed (resolves a knowledge collision)
-  --keep-content     (lotics uninstall) Keep the docs instead of archiving them
-  --apply-all        (lotics upgrade, knowledge) Accept the package's version
-                     for every doc (overwrites local edits)
   --all              (lotics auth logout) Remove every saved credential
   --version          Show version
 
@@ -680,11 +624,7 @@ async function main() {
         command !== "run" &&
         command !== "download" &&
         command !== "workspace" &&
-        command !== "app" &&
-        command !== "package" &&
-        command !== "install" &&
-        command !== "uninstall" &&
-        command !== "upgrade") {
+        command !== "app") {
         console.error(`Unknown command: ${command}`);
         console.error('Run "lotics --help" for usage.');
         process.exit(1);
@@ -706,27 +646,6 @@ async function main() {
         console.error("  lotics app subdomain <new-subdomain> Rename the app's public <slug>.lotics.app address");
         console.error("  lotics app rename \"<new name>\"        Rename the app's display name (launcher title)");
         console.error("  lotics app dev [path]                Run the app locally with HMR + RPC forwarding");
-        console.error("  lotics app publish [app_id|.] [--rename old=new ...] [-m <changelog>] [--yes]   First-release the app as a package (v1; preview, --yes applies)");
-        console.error("  lotics app release [app_id|.] -m <changelog> [--yes]   Release the next package version from the origin");
-        console.error("  lotics app unpublish <app_id|package_id> [--undo]      Take a published package off the shelf (any kind — app or content)");
-        process.exit(1);
-    }
-    if (command === "package" && !subcommand) {
-        console.error("Usage (low-traffic consumer / registry ops — author verbs live on `lotics app`):");
-        console.error("  The high-traffic consumer verbs are top-level:");
-        console.error("    lotics install <package_id> [--version N] [--bind-to <alias>=<kdc_id>] [--config key=value ...]   Install a package (app or content)");
-        console.error("    lotics uninstall <app_id|package_id> [--archive-tables] [--keep-content]   Uninstall — dispatched by id (app vs content)");
-        console.error("    lotics upgrade <app_id|package_id> [--version N] [--resolve <key>=... ] [--bind-to ...] [--apply-all]   Upgrade — app install / content install / whole app fleet (apg_)");
-        console.error("  lotics package doctor [app_id]                   Health: version pin vs latest + binding/knowledge drift");
-        console.error("  lotics package config <app_id> [--set key=value ...]   Show or edit an installation's config knobs");
-        console.error("  lotics package eject <app_id>                    Sever an installation's package link");
-        console.error("  lotics package show <package_id>                 Registry metadata + version history (channel, yank, changelog)");
-        console.error("  lotics package list-content                      List the workspace's content installations (standalone content installs)");
-        console.error("  lotics package yank <package_id> <version> [--undo]       Refuse new installs/upgrades of a broken published version (pinned installations keep running)");
-        console.error("  A content package (a SET of live docs + templates) — publish + release with the tools, retire on `lotics app`:");
-        console.error("    lotics run publish_content '{\"name\":\"…\",\"knowledge_doc_ids\":[…],\"template_ids\":[…]}'   Publish v1 (a fixed set)");
-        console.error("    lotics run release_content '{\"package_id\":\"apg_…\",\"changelog\":\"…\"}'   Cut the next version (add \"dry_run\":true to preview)");
-        console.error("    lotics app unpublish <package_id>   Take the whole package off the shelf (kind-agnostic — retires content too)");
         process.exit(1);
     }
     if (command === "run" && !subcommand) {
@@ -873,173 +792,6 @@ async function main() {
     }
     // Ensure workspace is resolved for all remaining commands
     await resolveWorkspace(client, ctx);
-    // --- lotics install / uninstall / upgrade — top-level CONSUMER verbs ---
-    // The high-traffic operator surface reads noun-less: `lotics install <pkg>`,
-    // `lotics uninstall <id>`, `lotics upgrade <id>`. Low-traffic ops keep their
-    // `lotics package <verb>` home. The package id is the SECOND positional at top
-    // level, which the parser puts in `subcommand` (not `toolArgs`).
-    if (command === "install") {
-        const packageId = subcommand;
-        if (!packageId) {
-            console.error("Usage: lotics install <package_id> [--version N] [--bind-to <alias>=<kdc_id> ...] [--config key=value ...]");
-            process.exit(1);
-        }
-        let version;
-        if (flags.packageVersion !== undefined) {
-            version = Number(flags.packageVersion);
-            if (!Number.isInteger(version) || version <= 0) {
-                console.error(`Invalid --version "${flags.packageVersion}" — expected a positive integer.`);
-                process.exit(1);
-            }
-        }
-        const config = flags.config.length > 0 ? parseInstallConfigFlags(flags.config) : undefined;
-        await packageInstall(client, {
-            package_id: packageId,
-            version,
-            bind_to: parseBindToFlags(flags.bindTo),
-            ...(config !== undefined ? { config } : {}),
-        });
-        return;
-    }
-    if (command === "uninstall") {
-        const id = subcommand;
-        if (!id) {
-            console.error("Usage: lotics uninstall <app_id|package_id> [--archive-tables] [--keep-content]");
-            console.error("Dispatched by id: an app installation (app_id; --archive-tables to also archive its " +
-                "scaffolded tables) or a content package (apg_ id from `lotics install` / " +
-                "lotics package list-content; --keep-content to retain its docs).");
-            process.exit(1);
-        }
-        // A `pci_` resource id is retired from human sight — redirect to the package-id form.
-        if (id.startsWith("pci_")) {
-            await redirectContentPciForm(client, id, "uninstall");
-            return;
-        }
-        await packageUninstall(client, {
-            id,
-            keep_content: flags.keepContent,
-            archive_tables: flags.archiveTables,
-        });
-        return;
-    }
-    if (command === "upgrade") {
-        const target = subcommand;
-        if (!target) {
-            console.error("Usage: lotics upgrade <app_id | package_id> [--version N] [--resolve <key>=... ...] [--bind-to ...] [--apply-all]");
-            console.error("Dispatched by id: an app installation (app_id), or a package id (apg_) — a CONTENT package " +
-                "upgrades this workspace's install; an APP package fleet-upgrades every installation across your org.");
-            process.exit(1);
-        }
-        let version;
-        if (flags.packageVersion !== undefined) {
-            version = Number(flags.packageVersion);
-            if (!Number.isInteger(version) || version <= 0) {
-                console.error(`Invalid --version "${flags.packageVersion}" — expected a positive integer.`);
-                process.exit(1);
-            }
-        }
-        // A `pci_` resource id is retired from human sight — redirect to the package-id form.
-        if (target.startsWith("pci_")) {
-            await redirectContentPciForm(client, target, "upgrade");
-            return;
-        }
-        // A package id (apg_) is kind-branched: a content package upgrades THIS
-        // workspace's install; an app package fleet-upgrades the whole org.
-        if (target.startsWith("apg_")) {
-            await packageUpgradeByPackageId(client, {
-                package_id: target,
-                version,
-                resolve: flags.resolve,
-                bindTo: flags.bindTo,
-                applyAll: flags.applyAll,
-            });
-            return;
-        }
-        // Anything else is an app installation (addressed by its app id).
-        await packageUpgrade(client, {
-            app_id: target,
-            version,
-            resolve: flags.resolve,
-            bindTo: flags.bindTo,
-            applyAll: flags.applyAll,
-        });
-        return;
-    }
-    // lotics package <verb> — the low-traffic consumer / registry surface. The
-    // high-traffic install / uninstall / upgrade / fleet-upgrade verbs moved to
-    // the top level above; they are refused here (below) so the old forms fail
-    // loudly instead of silently doing nothing.
-    if (command === "package") {
-        if (subcommand === "list-content") {
-            await packageListContent(client);
-            return;
-        }
-        if (subcommand === "config") {
-            const appId = toolArgs;
-            if (!appId) {
-                console.error("Usage: lotics package config <app_id> [--set key=value ...]");
-                process.exit(1);
-            }
-            await packageConfig(client, { app_id: appId, sets: flags.set });
-            return;
-        }
-        if (subcommand === "show") {
-            const packageId = toolArgs;
-            if (!packageId) {
-                console.error("Usage: lotics package show <package_id>");
-                process.exit(1);
-            }
-            await packageShow(client, { package_id: packageId });
-            return;
-        }
-        if (subcommand === "eject") {
-            const appId = toolArgs;
-            if (!appId) {
-                console.error("Usage: lotics package eject <app_id>");
-                process.exit(1);
-            }
-            await packageEject(client, { app_id: appId });
-            return;
-        }
-        if (subcommand === "yank") {
-            const packageId = toolArgs;
-            const version = Number(restArgs[0]);
-            if (!packageId || !Number.isInteger(version) || version <= 0) {
-                console.error("Usage: lotics package yank <package_id> <version> [--undo]");
-                process.exit(1);
-            }
-            await packageYank(client, { package_id: packageId, version, undo: flags.undo });
-            return;
-        }
-        if (subcommand === "doctor") {
-            await packageDoctor(client, { app_id: toolArgs });
-            return;
-        }
-        // Re-pointing a live role rides the upgrade's ONE resolutions grammar —
-        // redirect the removed verb loudly, never a silent unknown-command fall-through.
-        if (subcommand === "rebind-role") {
-            const appId = toolArgs;
-            const [roleAlias, groupId] = restArgs;
-            console.error("`lotics package rebind-role` was folded into the upgrade grammar. Re-point a live role with:\n" +
-                `  lotics upgrade ${appId ?? "<app_id>"} --resolve roles.${roleAlias ?? "<alias>"}=${groupId ?? "<grp_id>"}`);
-            process.exit(1);
-        }
-        // The high-traffic consumer verbs moved to the top level. Refuse the old
-        // `lotics package <verb>` forms loudly with a redirect, never a silent no-op.
-        const movedVerbs = {
-            install: "lotics install <package_id>",
-            uninstall: "lotics uninstall <app_id|package_id>",
-            upgrade: "lotics upgrade <app_id|package_id>",
-            "fleet-upgrade": "lotics upgrade <package_id>",
-        };
-        if (subcommand !== undefined && subcommand in movedVerbs) {
-            console.error(`\`lotics package ${subcommand}\` moved to the top level — run \`${movedVerbs[subcommand]}\` instead.`);
-            process.exit(1);
-        }
-        console.error(`Unknown package subcommand: ${subcommand}`);
-        console.error("Run 'lotics package' for usage.");
-        process.exit(1);
-    }
     // lotics app create / pull / deploy
     if (command === "app") {
         if (subcommand === "create") {
@@ -1075,40 +827,6 @@ async function main() {
             await appDeploy(client, { message });
             return;
         }
-        if (subcommand === "publish") {
-            // First-release a bespoke app AS a package. Positional app id (`.`/omitted →
-            // the local app project manifest). Previews the minted aliases + findings,
-            // then applies only with `--yes` (mirrors `app release`). `--rename old=new`
-            // fixes an auto-minted alias before v1 freezes it; `-m` is an optional v1 changelog.
-            await appPublish(client, {
-                app_id: toolArgs,
-                renames: flags.rename,
-                changelog: flags.message,
-                yes: flags.yes,
-            });
-            return;
-        }
-        if (subcommand === "release") {
-            // -m <changelog> is REQUIRED — each release is a version row read back by
-            // `lotics package show`, so a blank changelog loses the audit trail.
-            if (!flags.message) {
-                console.error("Usage: lotics app release [app_id|.] -m <changelog> [--yes]");
-                console.error("Snapshots the origin app into its next package version (preview, then --yes to publish).");
-                process.exit(1);
-            }
-            await appRelease(client, { app_id: toolArgs, changelog: flags.message, yes: flags.yes });
-            return;
-        }
-        if (subcommand === "unpublish") {
-            const id = toolArgs;
-            if (!id) {
-                console.error("Usage: lotics app unpublish <app_id|package_id> [--undo]");
-                console.error("Takes a published package off the shelf; existing installations keep working.");
-                process.exit(1);
-            }
-            await appUnpublish(client, { id, undo: flags.undo });
-            return;
-        }
         if (subcommand === "subdomain") {
             const newSubdomain = toolArgs;
             if (!newSubdomain) {