[nxtman123]

Define the CLI directly with Commander instead of translating a separate command schema and dispatching by path strings. Each group in src/cli-commands/ owns its command declarations, arguments, options, descriptions, validation hooks, and concrete handler bindings. Human and JSON help read that same tree.

Remove COMMAND_SPECS, the option/description registries, the top-level dispatcher, group routers, and duplicate positional-count validation. The entry point awaits native actions through parseAsync; shared handler setup handles configuration, operation logging, and authentication before execution. Existing command names, aliases, outputs, and explicit negated-switch behavior are preserved.

The shared authentication path also gives app update, media generate, and media upload-batch consistent not-enrolled/pending/disconnected guidance before local preparation. These commands previously missed the centralized recovery check.

Validation:

• All 67 existing command leaves and the playlist get alias remain available.
• New regressions verify awaited transport success/failure, one final envelope, and authentication before mutation preparation.
• Full local suite: 569 passed, five existing compositor failures caused by missing Liberation fonts, one skipped. CI installs those fonts.
• Clean install, public scan, vendor consistency/source drift, typecheck, lint, mock smoke, package dry run, release artifact verification, and clean package-install smoke passed.
• No vendor hashes or runtime dependencies changed. Live-server, plugin, and Player validation were not run.