docs: keep single-page CLI layout, order browsers before managed auth

Revert the per-tag page split; restore the consolidated browsers/apps
pages and the single managed-auth page. Reorder the CLI nav and index
cards so Browsers comes before Managed Auth.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: masnwilliams

docs.json

@@ -259,66 +259,17 @@
       },
       {
         "tab": "CLI",
-        "groups": [
-          {
-            "group": "Get Started",
-            "pages": [
-              "reference/cli",
-              "reference/cli/create",
-              "reference/cli/auth",
-              "reference/cli/mcp"
-            ]
-          },
-          {
-            "group": "Browsers",
-            "pages": [
-              "reference/cli/browsers"
-            ]
-          },
-          {
-            "group": "Control the Browser",
-            "pages": [
-              "reference/cli/browsers-computer",
-              "reference/cli/browsers-playwright",
-              "reference/cli/browsers-filesystem",
-              "reference/cli/browsers-processes"
-            ]
-          },
-          {
-            "group": "Observe the Browser",
-            "pages": [
-              "reference/cli/browsers-replays",
-              "reference/cli/browsers-logs",
-              "reference/cli/browsers-telemetry"
-            ]
-          },
-          {
-            "group": "Configure Resources & Auth",
-            "pages": [
-              "reference/cli/profiles",
-              "reference/cli/proxies",
-              "reference/cli/extensions",
-              "reference/cli/browser-pools",
-              "reference/cli/managed-auth",
-              "reference/cli/credentials",
-              "reference/cli/credential-providers"
-            ]
-          },
-          {
-            "group": "Deploy Your Agent",
-            "pages": [
-              "reference/cli/apps",
-              "reference/cli/deployments",
-              "reference/cli/invocations"
-            ]
-          },
-          {
-            "group": "Organization",
-            "pages": [
-              "reference/cli/projects",
-              "reference/cli/api-keys"
-            ]
-          }
+        "pages": [
+          "reference/cli",
+          "reference/cli/create",
+          "reference/cli/auth",
+          "reference/cli/browsers",
+          "reference/cli/apps",
+          "reference/cli/managed-auth",
+          "reference/cli/projects",
+          "reference/cli/api-keys",
+          "reference/cli/mcp",
+          "reference/cli/extensions"
         ]
       },
       {

reference/cli.mdx

@@ -24,32 +24,33 @@ which kernel
 kernel --version
 ```
 
-This reference is organized to mirror the [API reference](https://kernel.sh/docs/api-reference): browser sessions, the controls to drive and observe them, the resources and auth they use, app deployment, and organization management.
-
 <Columns cols={2}>
   <Card icon="code" title="Create Kernel App" href="/reference/cli/create">
     Scaffold new Kernel apps from templates.
   </Card>
   <Card icon="key" title="Authentication" href="/reference/cli/auth">
-    Login, logout, and check CLI auth status.
+    Login, logout, and check auth status.
   </Card>
   <Card icon="browsers" title="Browsers" href="/reference/cli/browsers">
-    Create, view, and manage browser sessions — plus computer controls, Playwright, filesystem, processes, replays, logs, and telemetry.
+    Create, view, and manage Kernel browsers.
   </Card>
-  <Card icon="lock" title="Managed Auth" href="/reference/cli/managed-auth">
-    Auth connections, credentials, and credential providers.
+  <Card icon="rocket" title="Apps" href="/reference/cli/apps">
+    Deploy apps, invoke actions, and stream logs.
   </Card>
-  <Card icon="gear" title="Resources" href="/reference/cli/profiles">
-    Profiles, proxies, extensions, and browser pools.
+  <Card icon="lock" title="Managed Auth" href="/reference/cli/managed-auth">
+    Manage auth connections, credentials, and credential providers.
   </Card>
-  <Card icon="rocket" title="Deploy Your Agent" href="/reference/cli/deployments">
-    Apps, deployments, and invocations.
+  <Card icon="puzzle-piece" title="Extensions" href="/reference/cli/extensions">
+    Upload, download, and build browser extensions.
   </Card>
   <Card icon="code-fork" title="MCP" href="/reference/cli/mcp">
     Install Kernel MCP server configuration for AI tools.
   </Card>
-  <Card icon="folder-tree" title="Organization" href="/reference/cli/projects">
-    Manage projects and API keys.
+  <Card icon="folder-tree" title="Projects" href="/reference/cli/projects">
+    Manage projects and scope commands with `--project`.
+  </Card>
+  <Card icon="key" title="API Keys" href="/reference/cli/api-keys">
+    Create, list, rename, and delete API keys.
   </Card>
 </Columns>
 

reference/cli/apps.mdx

@@ -2,7 +2,49 @@
 title: "Apps"
 ---
 
-List applications and versions. To deploy an app, see [Deployments](/reference/cli/deployments); to run one, see [Invocations](/reference/cli/invocations).
+## `kernel deploy <file>`
+Deploy an app to Kernel from the current directory. The entrypoint file and dependency manifest must live in the project root.
+
+| Flag | Description |
+|------|-------------|
+| `--version <version>` | Use a specific version label (default: latest). |
+| `--force` | Overwrite an existing version with the same label. |
+| `--env <KEY=VALUE>`, `-e` | Set environment variables (repeatable). |
+| `--env-file <file>` | Load environment variables from a file (repeatable). |
+| `--output json`, `-o json` | Output JSONL (one JSON object per line for each deployment event). |
+
+<Info>`package.json` (JS/TS) or `pyproject.toml` (Python) must be present next to the entrypoint.</Info>
+
+## `kernel deploy logs <deployment_id>`
+Stream build and runtime logs for a deployment.
+
+| Flag | Description |
+|------|-------------|
+| `--follow`, `-f` | Continue streaming logs in real time. |
+| `--since <duration>`, `-s` | Fetch logs starting from a relative duration (e.g. `5m`, `1h`, `1h30m`) or timestamp (`2006-01-02T15:04`). |
+| `--with-timestamps`, `-t` | Prefix each line with an RFC3339 timestamp. |
+
+<Info>Log lines longer than 64 KiB are truncated. Emit bulky payloads to external storage and log references.</Info>
+
+## `kernel deploy history [app_name]`
+Show deployment history for all apps or a specific app.
+
+| Flag | Description |
+|------|-------------|
+| `--limit <n>` | Maximum number of deployments to return (default: 100, `0` = all). |
+| `--output json`, `-o json` | Output raw JSON array. |
+
+## `kernel invoke <app> <action>`
+Invoke an app action. By default the CLI returns immediately after the invocation is queued.
+
+| Flag | Description |
+|------|-------------|
+| `--version <version>`, `-v` | Target a specific app version (default: latest). |
+| `--payload <json>`, `-p` | Provide a JSON payload (stringified, max 64 KB). |
+| `--sync`, `-s` | Wait for completion (timeout after 60 s). |
+| `--output json`, `-o json` | Output JSONL (one JSON object per line for each invocation event). |
+
+<Info>Press `Ctrl+C` to cancel an in-flight invocation. The associated browser sessions are cleaned up automatically.</Info>
 
 ## `kernel app list`
 List deployed app versions.
@@ -21,14 +63,6 @@ Show deployment history for a specific app.
 | `--limit <n>` | Maximum number of deployments to return (default: 100, `0` = all). |
 | `--output json`, `-o json` | Output raw JSON array. |
 
-## `kernel app delete <app_name>`
-Delete an app and all of its deployments.
-
-| Flag | Description |
-|------|-------------|
-| `--version <version>` | Only delete deployments for this version (default: all versions). |
-| `--yes`, `-y` | Skip confirmation prompt. |
-
 ## `kernel logs <app_name>`
 Tail app logs.