Michal also asks, "Do CLI's have deps on specific versions of cordova-lib-*, so an apache release means pushing updated package.json deps?"
I think Cordova CLI should explicitly lock versions in package.json to stuff from cordova-ilb. Plugman too. (For now. Once things get stable more liberal versioning is fine.) I could totally see something like this: "dependencies": { "cordova-lib-app-create":"0.1.0", "cordova-lib-app-info":"0.1.0", "cordova-lib-app-platform-add":"0.1.0", "cordova-lib-app-platform-remove":"0.1.0", ...etc }