licos-platform-cli 0.7.0__tar.gz → 0.8.1__tar.gz

licos_platform_cli-0.7.0/README.md → licos_platform_cli-0.8.1/PKG-INFO

@@ -1,7 +1,29 @@
+Metadata-Version: 2.5
+Name: licos-platform-cli
+Version: 0.8.1
+Summary: LICOS platform CLI
+Requires-Python: >=3.10
+Requires-Dist: licos-platform-sdk>=0.9.1
+Description-Content-Type: text/markdown
+
 # licos-platform-cli
 
 LICOS 平台命令行工具。`licos-platform help` 返回结构化 JSON 帮助。
 
+## 企业项目（0.8.1 起）
+
+```bash
+licos-platform help enterprise-projects
+licos-platform enterprise-projects list --all
+licos-platform enterprise-projects search --query 发票 --type AGENT --type AICODING_AGENT --all
+licos-platform enterprise-projects show RECORD_ID
+licos-platform enterprise-projects capability --tenant-id TENANT --workspace-id WORKSPACE --resource-type AICODING_WORKFLOW --resource-id RESOURCE
+```
+
+查询包含当前用户可见的在线低代码智能体、AI 编程智能体和 AI 编程工作流；`invocation` 保留关闭调用、未就绪等原因。`--all` 完整读取匹配页；默认一页，可用 `--page`、`--page-size`。精确发布契约使用 `capability --record-id RECORD_ID`，与稳定资源选择互斥。
+
+命令只做发现，业务代码查项目实际安装的 SDK 文档后接入。帮助中的 `sdk` 字段提供文档入口；命令身份遵循下文“当前使用者”规则。
+
 ## 当前使用者（0.5.1 起）
 
 ```bash
@@ -10,7 +32,7 @@ licos-platform user me --workspace-id <执行工作空间ID>
 licos-platform help user me
 ```
 
-用户接口默认使用 `LICOS_CURRENT_USER_ID` 指定的容器执行用户换取 Token。它不代表网页登录者。平台地址、服务凭证和项目工作空间沿用运行时配置。
+用户接口默认使用 `LICOS_CURRENT_USER_ID` 指定的当前命令用户换取 Token。编程助手执行命令时，由平台根据本次请求注入该标识；独立终端沿用其启动身份，不会自动跟随网页登录者变化。平台地址、服务凭证和项目工作空间沿用运行时配置。
 运行时使用 `AGENT_CURRENT_USER_ID` 注入当前用户时同样支持，不以项目负责人替代当前执行用户。企业和空间上下文沿用平台签发的认证结果。
 多用户请求可将当前使用者 Token 通过标准输入传入，不将 Token 放在命令行参数中：
 
@@ -57,6 +79,10 @@ result = subprocess.run(
 
 显式传入的 Token 鉴权失败时返回非零退出码，由调用方更新登录凭证，不切换到容器用户或项目所有者。项目所有者和工作空间等资源归属字段单独保留，不用它们冒充调用用户。
 
+## 本体正式版本
+
+0.8.0 起，`ontology package/bind --root-object-id <id>` 自动选择最新正式版；使用显式 release_id 固定版本。`ontology resolve --configuration-file ontology.json` 解析 `{versionPolicy, rootObjectId, binding}`，省略策略保持固定版本。新运行开始解析并保存输出绑定，query/function 及恢复执行复用它，不在每次查询时重新解析。新版缺少已选对象、属性或函数时直接失败。
+
 ## 编程项目登录身份
 
 - 有内置登录时使用内置登录会话；没有内置登录时使用当前 LICOS 网页登录。内置登录未登录或过期时不能切换成平台用户。

licos_platform_cli-0.7.0/PKG-INFO → licos_platform_cli-0.8.1/README.md

@@ -1,15 +1,21 @@
-Metadata-Version: 2.5
-Name: licos-platform-cli
-Version: 0.7.0
-Summary: LICOS platform CLI
-Requires-Python: >=3.10
-Requires-Dist: licos-platform-sdk>=0.8.0
-Description-Content-Type: text/markdown
-
 # licos-platform-cli
 
 LICOS 平台命令行工具。`licos-platform help` 返回结构化 JSON 帮助。
 
+## 企业项目（0.8.1 起）
+
+```bash
+licos-platform help enterprise-projects
+licos-platform enterprise-projects list --all
+licos-platform enterprise-projects search --query 发票 --type AGENT --type AICODING_AGENT --all
+licos-platform enterprise-projects show RECORD_ID
+licos-platform enterprise-projects capability --tenant-id TENANT --workspace-id WORKSPACE --resource-type AICODING_WORKFLOW --resource-id RESOURCE
+```
+
+查询包含当前用户可见的在线低代码智能体、AI 编程智能体和 AI 编程工作流；`invocation` 保留关闭调用、未就绪等原因。`--all` 完整读取匹配页；默认一页，可用 `--page`、`--page-size`。精确发布契约使用 `capability --record-id RECORD_ID`，与稳定资源选择互斥。
+
+命令只做发现，业务代码查项目实际安装的 SDK 文档后接入。帮助中的 `sdk` 字段提供文档入口；命令身份遵循下文“当前使用者”规则。
+
 ## 当前使用者（0.5.1 起）
 
 ```bash
@@ -18,7 +24,7 @@ licos-platform user me --workspace-id <执行工作空间ID>
 licos-platform help user me
 ```
 
-用户接口默认使用 `LICOS_CURRENT_USER_ID` 指定的容器执行用户换取 Token。它不代表网页登录者。平台地址、服务凭证和项目工作空间沿用运行时配置。
+用户接口默认使用 `LICOS_CURRENT_USER_ID` 指定的当前命令用户换取 Token。编程助手执行命令时，由平台根据本次请求注入该标识；独立终端沿用其启动身份，不会自动跟随网页登录者变化。平台地址、服务凭证和项目工作空间沿用运行时配置。
 运行时使用 `AGENT_CURRENT_USER_ID` 注入当前用户时同样支持，不以项目负责人替代当前执行用户。企业和空间上下文沿用平台签发的认证结果。
 多用户请求可将当前使用者 Token 通过标准输入传入，不将 Token 放在命令行参数中：
 
@@ -65,6 +71,10 @@ result = subprocess.run(
 
 显式传入的 Token 鉴权失败时返回非零退出码，由调用方更新登录凭证，不切换到容器用户或项目所有者。项目所有者和工作空间等资源归属字段单独保留，不用它们冒充调用用户。
 
+## 本体正式版本
+
+0.8.0 起，`ontology package/bind --root-object-id <id>` 自动选择最新正式版；使用显式 release_id 固定版本。`ontology resolve --configuration-file ontology.json` 解析 `{versionPolicy, rootObjectId, binding}`，省略策略保持固定版本。新运行开始解析并保存输出绑定，query/function 及恢复执行复用它，不在每次查询时重新解析。新版缺少已选对象、属性或函数时直接失败。
+
 ## 编程项目登录身份
 
 - 有内置登录时使用内置登录会话；没有内置登录时使用当前 LICOS 网页登录。内置登录未登录或过期时不能切换成平台用户。

{licos_platform_cli-0.7.0 → licos_platform_cli-0.8.1}/pyproject.toml

@@ -4,12 +4,12 @@ build-backend = "hatchling.build"
 
 [project]
 name = "licos-platform-cli"
-version = "0.7.0"
+version = "0.8.1"
 description = "LICOS platform CLI"
 readme = "README.md"
 requires-python = ">=3.10"
 dependencies = [
-    "licos-platform-sdk>=0.8.0",
+    "licos-platform-sdk>=0.9.1",
 ]
 
 [project.scripts]

licos_platform_cli-0.8.1/src/licos_platform_cli/enterprise_project_commands.py

@@ -0,0 +1,52 @@
+"""Read-only discovery of published enterprise agents and coding workflows."""
+from licos_platform_sdk import ConfigurationError, enterprise_projects
+
+from .identity import add_user_token_option, user_token
+
+
+def _list(args):
+    options = {"query": args.query, "resource_types": args.resource_types,
+               "page_size": args.page_size, "user_token": user_token(args)}
+    if args.all:
+        if args.page != 1:
+            raise ConfigurationError("--all starts at page 1; do not combine it with another --page")
+        return {"items": list(enterprise_projects.iter_projects(**options))}
+    return enterprise_projects.list_projects(page=args.page, **options)
+
+
+def _capability(args):
+    token = user_token(args)
+    if args.record_id:
+        if any((args.tenant_id, args.workspace_id, args.resource_type)):
+            raise ConfigurationError("--record-id cannot be combined with resource identity fields")
+        return enterprise_projects.capability(args.record_id, user_token=token)
+    resource = {"tenant_id": args.tenant_id, "workspace_id": args.workspace_id,
+                "resource_type": args.resource_type, "resource_id": args.resource_id}
+    return enterprise_projects.current_capability(resource, user_token=token)
+
+
+def add_enterprise_project_parser(subparsers):
+    group = subparsers.add_parser("enterprise-projects", help="Discover visible published enterprise agents and coding workflows")
+    commands = group.add_subparsers(dest="enterprise_project_command", required=True)
+    for name in ("list", "search"):
+        parser = commands.add_parser(name, help="List visible publications, including disabled or unready calls")
+        parser.add_argument("--query", required=name == "search", default="", help="Search published name and description")
+        parser.add_argument("--type", dest="resource_types", action="append", choices=enterprise_projects.RESOURCE_TYPES)
+        parser.add_argument("--page", type=int, default=1)
+        parser.add_argument("--page-size", type=int, default=50)
+        parser.add_argument("--all", action="store_true", help="Read all matching pages")
+        add_user_token_option(parser)
+        parser.set_defaults(handler=_list)
+    detail = commands.add_parser("show", help="Read a visible online publication and invocation availability")
+    detail.add_argument("record_id")
+    add_user_token_option(detail)
+    detail.set_defaults(handler=lambda args: enterprise_projects.get_project(args.record_id, user_token=user_token(args)))
+    capability = commands.add_parser("capability", help="Read the exact publication contract or resolve a stable resource to its current publication")
+    selector = capability.add_mutually_exclusive_group(required=True)
+    selector.add_argument("--record-id")
+    selector.add_argument("--resource-id")
+    capability.add_argument("--tenant-id")
+    capability.add_argument("--workspace-id")
+    capability.add_argument("--resource-type", choices=enterprise_projects.RESOURCE_TYPES)
+    add_user_token_option(capability)
+    capability.set_defaults(handler=_capability)

licos_platform_cli-0.8.1/src/licos_platform_cli/enterprise_project_help.py

@@ -0,0 +1,31 @@
+ENTERPRISE_PROJECT_HELP = {
+    "topic": "enterprise-projects",
+    "description": "查询当前用户可见的在线企业项目：低代码智能体、AI 编程智能体和 AI 编程工作流。",
+    "rules": [
+        "查询包含关闭调用及尚未就绪的可见项目；invocation 字段说明是否可调用及原因。",
+        "用 --all 读取全部匹配页。默认按当前用户查询全部可见范围，不限定当前开发工作空间。",
+        "先从列表取得完整 resource，再读取当前 capability 的输入输出 Schema，不按同名项目替换目标。",
+        "CLI 用于发现；业务代码查项目实际安装版本的 SDK 文档后接入 project-invocations。",
+        "新调用解析当前发布；已有任务恢复沿用原 invocation_id、record_id 和 contract_revision。",
+    ],
+    "sdk": {
+        "discovery": "Python licos-platform-sdk 的 enterprise_projects 模块；实际版本 README 的企业项目章节。",
+        "invocation": "Python licos-agent-runtime 包内 docs/enterprise-projects.md；先由项目 SDK.md 确认解释器。",
+        "locate": "from importlib.resources import files; print(files('licos_agent_runtime').joinpath('docs/enterprise-projects.md').read_text(encoding='utf-8'))",
+    },
+    "commands": {
+        "list": {"description": "读取一页在线可见项目，--all 读取全部页。", "example": "licos-platform enterprise-projects list --all"},
+        "search": {"description": "服务端按发布名称和描述搜索。", "example": "licos-platform enterprise-projects search --query 发票 --all"},
+        "show": {"description": "查看精确发布记录及调用状态。", "example": "licos-platform enterprise-projects show RECORD_ID"},
+        "capability": {"description": "读取精确发布契约，或按完整 resource 解析当前在线发布。",
+                       "example": "licos-platform enterprise-projects capability --tenant-id TENANT --workspace-id WORKSPACE --resource-type AGENT --resource-id RESOURCE"},
+    },
+    "parameters": {
+        "--type": "list/search 可重复指定 AGENT、AICODING_AGENT、AICODING_WORKFLOW。",
+        "--page": "从 1 开始；不能将 --all 与非 1 页组合。",
+        "--page-size": "1 到 100，默认 50。",
+        "--record-id": "capability 使用精确发布 ID；与资源选择互斥。",
+        "--resource-id": "capability 同时需要 --tenant-id、--workspace-id、--resource-type。",
+        "--token-stdin": "从 stdin 读取本次用户 Token；省略时使用当前 CLI 用户身份，不使用项目所有者替代。",
+    },
+}

{licos_platform_cli-0.7.0 → licos_platform_cli-0.8.1}/src/licos_platform_cli/help_commands.py

@@ -4,6 +4,7 @@ import argparse
 from typing import Any, Callable
 from .user_commands import USER_HELP
 from .ontology_package_commands import PACKAGE_HELP
+from .enterprise_project_help import ENTERPRISE_PROJECT_HELP
 
 
 Handler = Callable[[argparse.Namespace], Any]
@@ -799,7 +800,7 @@ ONTOLOGY_HELP = {
         "Resolve elements by stable IDs before querying context, model checks, or mapped data.",
         "elementId/objectElementId 是部署实例 ID；objectTypeId 从实例上下文读取，是对象模板 ID。",
         "函数使用目录中的 apiName 和 version，input 满足 inputSchema；objects 传对象导入描述，每组需明确部署实例。动作仍使用列表 id 作为 actionTypeId。",
-        "正式应用使用 ontology releases/package/bind/validate/query/function/diff；绑定只接受正式发布版本。函数版本与包版本分别固定，不能调用 CURRENT 或包外函数。",
+        "正式应用默认用 ontology package/bind --root-object-id 选择最新正式版；显式 release_id 固定版本。ontology resolve 在新运行开始解析配置，保存绑定供整轮及恢复复用。函数版本仍显式固定，不能调用 CURRENT 或包外函数。",
         "动作预览明确传入 objectElementId 和真实 objectKey；用户确认后用同一草稿的 confirmationId 执行。实例参数必须已在当前工具 schema 中声明，缺失时报告上游目录问题。",
         "READ tools query state, PREPARE tools validate a change draft, and PERSIST tools apply an explicitly confirmed draft.",
         "PERSIST commands require --confirm. Never reuse a catalog result after its catalogVersion changes.",
@@ -849,6 +850,7 @@ ONTOLOGY_HELP = {
 ONTOLOGY_HELP["commands"].update(PACKAGE_HELP)
 
 HELP_TOPICS = {
+    "enterprise-projects": ENTERPRISE_PROJECT_HELP,
     "user": USER_HELP,
     "storage": STORAGE_HELP,
     "database": DATABASE_HELP,
@@ -892,6 +894,7 @@ def _cmd_help(args: argparse.Namespace) -> dict[str, Any]:
                 "licos-platform help ontology",
                 "licos-platform help ontology search",
                 "licos-platform help user me",
+                "licos-platform help enterprise-projects",
             ],
             "topics": sorted(HELP_TOPICS),
         }

{licos_platform_cli-0.7.0 → licos_platform_cli-0.8.1}/src/licos_platform_cli/main.py

@@ -8,6 +8,7 @@ from typing import Any, Sequence
 from licos_platform_sdk import PlatformSdkError
 
 from .database_commands import add_database_parser
+from .enterprise_project_commands import add_enterprise_project_parser
 from .help_commands import add_help_parser
 from .knowledge_commands import add_knowledge_parser
 from .oauth_commands import add_oauth_parser
@@ -40,6 +41,7 @@ def _build_parser() -> argparse.ArgumentParser:
     add_project_config_parser(subparsers)
     add_ontology_parser(subparsers)
     add_user_parser(subparsers)
+    add_enterprise_project_parser(subparsers)
     return parser
 
 

{licos_platform_cli-0.7.0 → licos_platform_cli-0.8.1}/src/licos_platform_cli/ontology_package_commands.py

@@ -11,13 +11,18 @@ from .identity import add_user_token_option, user_token
 
 
 PACKAGE_HELP = {
+    "resolve": {"description": "Resolve a latestPublished/pinned selection once at run start. Persist the returned binding for all queries and resume.",
+                "parameters": [{"name": "--configuration-file", "required": True, "description": "JSON containing binding, versionPolicy and rootObjectId."}],
+                "example": "licos-platform ontology resolve --configuration-file ontology.json"},
     "releases": {"description": "List visible published releases using the current execution identity.", "parameters": [],
                  "example": "licos-platform ontology releases"},
     "package": {"description": "Inspect semantic metadata of a specific release; excludes physical mappings and implementation DSL.",
-                "parameters": [{"name": "release_id", "required": True, "description": "Release ID from releases."}],
+                "parameters": [{"name": "release_id", "required": False, "description": "Pinned release; mutually exclusive with --root-object-id."},
+                               {"name": "--root-object-id", "required": False, "description": "Inspect the latest formally published release of this ontology root."}],
                 "example": "licos-platform ontology package <release_id>"},
     "bind": {"description": "Create a binding JSON for a published release; save the output in trusted application configuration.",
-             "parameters": [{"name": "release_id", "required": True, "description": "Explicit published release ID."},
+             "parameters": [{"name": "release_id", "required": False, "description": "Pinned release; mutually exclusive with --root-object-id."},
+                            {"name": "--root-object-id", "required": False, "description": "Resolve latest formally published model once for this run."},
                             {"name": "--objects-file", "required": True, "description": "JSON array of elementId and attributeIds selections."},
                             {"name": "--functions-file", "required": False, "description": "JSON array of apiName/version selections. Omitted selects no functions."}],
              "example": "licos-platform ontology bind <release_id> --objects-file objects.json --functions-file functions.json"},
@@ -83,10 +88,14 @@ def _run(args: argparse.Namespace) -> Any:
     if operation == "releases":
         return ontology.list_releases(user_token=token)
     if operation == "package":
-        return ontology.get_package(args.release_id, user_token=token)
+        return (ontology.get_latest_package(args.root_object_id, user_token=token) if args.root_object_id
+                else ontology.get_package(args.release_id, user_token=token))
     if operation == "bind":
-        return ontology.create_binding(args.release_id, _file(args.objects_file),
+        bind = ontology.create_latest_binding if args.root_object_id else ontology.create_binding
+        return bind(args.root_object_id or args.release_id, _file(args.objects_file),
             _file(args.functions_file) if args.functions_file else [], user_token=token)
+    if operation == "resolve":
+        return ontology.resolve_binding(_file(args.configuration_file), user_token=token)
     if operation == "diff":
         before = ontology.get_package(args.before, user_token=token)
         after = ontology.get_package(args.after, user_token=token)
@@ -105,6 +114,7 @@ def add_package_commands(commands: argparse._SubParsersAction) -> None:
         ("releases", "List visible published ontology releases"),
         ("package", "Inspect semantic metadata of one release"),
         ("bind", "Create an explicit release and capability binding"),
+        ("resolve", "Resolve a saved version policy once at run start"),
         ("validate", "Verify a binding against its published artifact"),
         ("query", "Query business objects within a binding"),
         ("function", "Invoke a versioned read-only function within a binding"),
@@ -114,7 +124,11 @@ def add_package_commands(commands: argparse._SubParsersAction) -> None:
         add_user_token_option(parser)
         parser.set_defaults(handler=_run)
         if name in {"package", "bind"}:
-            parser.add_argument("release_id")
+            selection = parser.add_mutually_exclusive_group(required=True)
+            selection.add_argument("release_id", nargs="?")
+            selection.add_argument("--root-object-id", help="Use the latest formally published release of this stable ontology root")
+        if name == "resolve":
+            parser.add_argument("--configuration-file", required=True)
         if name in {"validate", "query", "function"}:
             parser.add_argument("--binding-file", required=True)
         if name == "bind":

{licos_platform_cli-0.7.0 → licos_platform_cli-0.8.1}/tests/test_cli.py

@@ -84,6 +84,7 @@ class PlatformCliTests(unittest.TestCase):
             payload["topics"],
             [
                 "database",
+                "enterprise-projects",
                 "knowledge",
                 "oauth",
                 "ontology",
@@ -136,7 +137,7 @@ class PlatformCliTests(unittest.TestCase):
         self.assertEqual(stderr, "")
         payload = json.loads(stdout)
         self.assertEqual(payload["topic"], "ontology")
-        self.assertEqual(set(payload["commands"]), {"search", "invoke", "releases", "package", "bind", "validate", "query", "function", "diff"})
+        self.assertEqual(set(payload["commands"]), {"search", "invoke", "releases", "package", "bind", "resolve", "validate", "query", "function", "diff"})
         self.assertTrue(any("catalogVersion" in rule for rule in payload["rules"]))
         sdk_help = "\n".join(payload["sdk"].values())
         self.assertNotIn("items[0]", sdk_help)

licos_platform_cli-0.8.1/tests/test_enterprise_projects.py

@@ -0,0 +1,57 @@
+import io
+import json
+import os
+import unittest
+from contextlib import redirect_stderr, redirect_stdout
+from unittest.mock import patch
+
+import httpx
+
+from licos_platform_cli.main import main
+
+
+def run(*args):
+    out, err = io.StringIO(), io.StringIO()
+    with redirect_stdout(out), redirect_stderr(err):
+        try:
+            status = main(list(args))
+        except SystemExit as error:
+            status = error.code
+    return status, out.getvalue(), err.getvalue()
+
+
+class EnterpriseProjectCommandTests(unittest.TestCase):
+    def test_cli_current_user_reaches_real_sdk_with_search_and_type(self):
+        response = httpx.Response(200, request=httpx.Request("GET", "https://platform.test/catalog"),
+                                  json={"code": 0, "data": {"records": [], "total": 0, "current": 1, "size": 50, "pages": 0}})
+        with patch.dict(os.environ, {"LICOS_CURRENT_USER_ID": "caller", "LICOS_USER_ID": "owner",
+                                     "LICOS_PLATFORM_API_BASE_URL": "https://platform.test"}, clear=True), \
+                patch("licos_platform_cli.identity.runtime_user_token", return_value="caller-token") as exchange, \
+                patch.object(httpx, "get", return_value=response) as get:
+            status, output, _ = run("enterprise-projects", "search", "--query", "发票", "--type", "AICODING_WORKFLOW", "--all")
+        self.assertEqual(status, 0)
+        self.assertEqual(json.loads(output), {"items": []})
+        exchange.assert_called_once_with("caller")
+        self.assertEqual(get.call_args.kwargs["params"]["resourceTypes"], "AICODING_WORKFLOW")
+        self.assertEqual(get.call_args.kwargs["headers"]["Authorization"], "Bearer caller-token")
+
+    def test_explicit_request_token_does_not_exchange_owner_identity(self):
+        with patch("sys.stdin", io.StringIO("request-token")), \
+                patch("licos_platform_cli.identity.runtime_user_token") as exchange, \
+                patch("licos_platform_cli.enterprise_project_commands.enterprise_projects.capability", return_value={"record_id": "record"}) as call:
+            status, _, _ = run("enterprise-projects", "capability", "--record-id", "record", "--token-stdin")
+        self.assertEqual(status, 0)
+        exchange.assert_not_called()
+        call.assert_called_once_with("record", user_token="request-token")
+
+    def test_help_explains_discovery_and_sdk_document_entry(self):
+        status, output, _ = run("help", "enterprise-projects")
+        self.assertEqual(status, 0)
+        value = json.loads(output)
+        self.assertIn("enterprise-projects.md", value["sdk"]["invocation"])
+        self.assertEqual(set(value["commands"]), {"list", "search", "show", "capability"})
+
+    def test_lowcode_workflow_and_incomplete_identity_fail(self):
+        self.assertEqual(run("enterprise-projects", "list", "--type", "WORKFLOW")[0], 2)
+        with patch("sys.stdin", io.StringIO("caller")):
+            self.assertEqual(run("enterprise-projects", "capability", "--resource-id", "id", "--token-stdin")[0], 1)

{licos_platform_cli-0.7.0 → licos_platform_cli-0.8.1}/tests/test_ontology_packages.py

@@ -16,7 +16,7 @@ from test_cli import run_cli
 
 class OntologyPackageCliTests(unittest.TestCase):
     def test_package_commands_have_structured_help(self):
-        for command in ("releases", "package", "bind", "validate", "query", "function", "diff"):
+        for command in ("releases", "package", "bind", "resolve", "validate", "query", "function", "diff"):
             code, output, error = run_cli("help", "ontology", command)
             self.assertEqual((code, error), (0, ""))
             self.assertIn("parameters", json.loads(output))
@@ -26,6 +26,15 @@ class OntologyPackageCliTests(unittest.TestCase):
         identity.start()
         self.addCleanup(identity.stop)
 
+    @patch("licos_platform_cli.identity.runtime_user_token", return_value="caller-token")
+    @patch("licos_platform_cli.ontology_package_commands.ontology.get_latest_package", return_value={"version": "V2"})
+    def test_latest_package_selects_by_root_and_rejects_ambiguous_input(self, latest, _identity):
+        code, _, error = run_cli("ontology", "package", "--root-object-id", "root-1")
+        self.assertEqual((code, error), (0, ""))
+        latest.assert_called_once_with("root-1", user_token="caller-token")
+        code, _, _ = run_cli("ontology", "package", "release-1", "--root-object-id", "root-1")
+        self.assertNotEqual(code, 0)
+
     @patch("licos_platform_cli.identity.runtime_user_token", return_value="caller-token")
     @patch("licos_platform_cli.ontology_package_commands.ontology.list_releases", return_value=[])
     def test_releases_forwards_runtime_identity(self, releases, _identity):