@lumerahq/cli 0.14.0 → 0.15.1

package/dist/{auth-7RGL7GXU.js → auth-YQXLYQZZ.js}

@@ -1,12 +1,13 @@
 import {
+  getBaseUrl,
   getCredentials,
-  getTokenSource
-} from "./chunk-NDLYGKS6.js";
-import {
-  getBaseUrl
-} from "./chunk-D2BLSEGR.js";
+  getTokenSource,
+  init_auth
+} from "./chunk-WZMAQXDY.js";
+import "./chunk-PNKVD2UK.js";
 
 // src/commands/auth.ts
+init_auth();
 import pc from "picocolors";
 import { createServer } from "http";
 import { existsSync, mkdirSync, rmSync, writeFileSync } from "fs";
@@ -204,6 +205,7 @@ async function login(args) {
     const userInfo = await fetchUserInfo(result.token);
     const credentials = {
       token: result.token,
+      base_url: baseUrl,
       user: userInfo.email,
       company: userInfo.company,
       created: (/* @__PURE__ */ new Date()).toISOString()

package/dist/{chunk-UP3GV4HN.js → chunk-FZPONF23.js}

@@ -1,6 +1,6 @@
 import {
   getBaseUrl
-} from "./chunk-D2BLSEGR.js";
+} from "./chunk-WZMAQXDY.js";
 
 // src/lib/skills.ts
 import { createHash } from "crypto";

package/dist/chunk-PNKVD2UK.js

@@ -0,0 +1,26 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+export {
+  __esm,
+  __export,
+  __toCommonJS
+};

package/dist/{chunk-NL6MEHA3.js → chunk-RWPUF6L7.js}

@@ -1,8 +1,10 @@
 import {
-  getToken
-} from "./chunk-NDLYGKS6.js";
+  getToken,
+  init_auth
+} from "./chunk-WZMAQXDY.js";
 
 // src/lib/api.ts
+init_auth();
 import { readFileSync } from "fs";
 import { fileURLToPath } from "url";
 import { dirname, resolve } from "path";

package/dist/chunk-WZMAQXDY.js

@@ -0,0 +1,163 @@
+import {
+  __esm,
+  __export,
+  __toCommonJS
+} from "./chunk-PNKVD2UK.js";
+
+// src/lib/auth.ts
+var auth_exports = {};
+__export(auth_exports, {
+  getCredentials: () => getCredentials,
+  getToken: () => getToken,
+  getTokenSource: () => getTokenSource
+});
+import { existsSync, readFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+function getLocalCredsPath(cwd = process.cwd()) {
+  return join(cwd, ".lumera", "credentials.json");
+}
+function getToken(cwd = process.cwd()) {
+  if (process.env.LUMERA_TOKEN) {
+    return process.env.LUMERA_TOKEN;
+  }
+  const localCredsPath = getLocalCredsPath(cwd);
+  if (existsSync(localCredsPath)) {
+    try {
+      const creds = JSON.parse(readFileSync(localCredsPath, "utf-8"));
+      if (creds.token) return creds.token;
+    } catch {
+    }
+  }
+  if (existsSync(GLOBAL_CREDS_PATH)) {
+    try {
+      const creds = JSON.parse(readFileSync(GLOBAL_CREDS_PATH, "utf-8"));
+      if (creds.token) return creds.token;
+    } catch {
+    }
+  }
+  throw new Error(
+    "No Lumera token found.\n  Run `lumera login` to authenticate, or\n  Set LUMERA_TOKEN environment variable"
+  );
+}
+function getTokenSource(cwd = process.cwd()) {
+  if (process.env.LUMERA_TOKEN) {
+    return "environment (LUMERA_TOKEN)";
+  }
+  const localCredsPath = getLocalCredsPath(cwd);
+  if (existsSync(localCredsPath)) {
+    try {
+      const creds = JSON.parse(readFileSync(localCredsPath, "utf-8"));
+      if (creds.token) return `project (${localCredsPath})`;
+    } catch {
+    }
+  }
+  if (existsSync(GLOBAL_CREDS_PATH)) {
+    try {
+      const creds = JSON.parse(readFileSync(GLOBAL_CREDS_PATH, "utf-8"));
+      if (creds.token) return `global (${GLOBAL_CREDS_PATH})`;
+    } catch {
+    }
+  }
+  return null;
+}
+function getCredentials(cwd = process.cwd()) {
+  const localCredsPath = getLocalCredsPath(cwd);
+  if (existsSync(localCredsPath)) {
+    try {
+      const creds = JSON.parse(readFileSync(localCredsPath, "utf-8"));
+      if (creds.token) return creds;
+    } catch {
+    }
+  }
+  if (existsSync(GLOBAL_CREDS_PATH)) {
+    try {
+      const creds = JSON.parse(readFileSync(GLOBAL_CREDS_PATH, "utf-8"));
+      if (creds.token) return creds;
+    } catch {
+    }
+  }
+  return null;
+}
+var GLOBAL_CONFIG_DIR, GLOBAL_CREDS_PATH;
+var init_auth = __esm({
+  "src/lib/auth.ts"() {
+    "use strict";
+    GLOBAL_CONFIG_DIR = join(homedir(), ".config", "lumera");
+    GLOBAL_CREDS_PATH = join(GLOBAL_CONFIG_DIR, "credentials.json");
+  }
+});
+
+// src/lib/config.ts
+import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
+import { resolve, join as join2 } from "path";
+function findProjectRoot(startDir = process.cwd()) {
+  let dir = startDir;
+  while (dir !== "/") {
+    if (existsSync2(join2(dir, "package.json"))) {
+      return dir;
+    }
+    dir = resolve(dir, "..");
+  }
+  throw new Error("Could not find project root (no package.json found)");
+}
+function readPackageJson(projectRoot) {
+  const pkgPath = join2(projectRoot, "package.json");
+  if (!existsSync2(pkgPath)) {
+    throw new Error(`package.json not found at ${pkgPath}`);
+  }
+  return JSON.parse(readFileSync2(pkgPath, "utf-8"));
+}
+function getAppName(projectRoot) {
+  const pkg = readPackageJson(projectRoot);
+  return pkg.name;
+}
+function getAppTitle(projectRoot) {
+  const pkg = readPackageJson(projectRoot);
+  return pkg.lumera?.name || pkg.name;
+}
+function detectProjectVersion(projectRoot) {
+  const pkg = readPackageJson(projectRoot);
+  if (pkg.lumera?.version !== void 0) {
+    return pkg.lumera.version;
+  }
+  if (existsSync2(join2(projectRoot, "lumera_platform"))) {
+    return 0;
+  }
+  if (existsSync2(join2(projectRoot, "platform"))) {
+    return 1;
+  }
+  return 1;
+}
+function getBaseUrl() {
+  const envBase = process.env.LUMERA_BASE_URL || process.env.LUMERA_API_URL;
+  if (envBase) {
+    return envBase.replace(/\/api\/?$/, "").replace(/\/$/, "");
+  }
+  try {
+    const { getCredentials: getCredentials2 } = (init_auth(), __toCommonJS(auth_exports));
+    const creds = getCredentials2();
+    if (creds?.base_url) {
+      return creds.base_url.replace(/\/api\/?$/, "").replace(/\/$/, "");
+    }
+  } catch {
+  }
+  return "https://app.lumerahq.com";
+}
+function getApiUrl() {
+  return `${getBaseUrl()}/api`;
+}
+
+export {
+  getToken,
+  getTokenSource,
+  getCredentials,
+  init_auth,
+  findProjectRoot,
+  readPackageJson,
+  getAppName,
+  getAppTitle,
+  detectProjectVersion,
+  getBaseUrl,
+  getApiUrl
+};

package/dist/{dev-5EAZUQ2S.js → dev-NN766QJW.js}

@@ -4,22 +4,23 @@ import {
 import {
   createApiClient,
   loadEnv
-} from "./chunk-NL6MEHA3.js";
-import {
-  getToken
-} from "./chunk-NDLYGKS6.js";
+} from "./chunk-RWPUF6L7.js";
 import {
   findProjectRoot,
   getApiUrl,
   getAppName,
-  getAppTitle
-} from "./chunk-D2BLSEGR.js";
+  getAppTitle,
+  getToken,
+  init_auth
+} from "./chunk-WZMAQXDY.js";
+import "./chunk-PNKVD2UK.js";
 
 // src/commands/dev.ts
 import pc from "picocolors";
 import { execFileSync, execSync } from "child_process";
 import { existsSync } from "fs";
 import { join } from "path";
+init_auth();
 function parseFlags(args) {
   const result = {};
   for (let i = 0; i < args.length; i++) {

package/dist/index.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import "./chunk-PNKVD2UK.js";
 
 // src/index.ts
 import { readFileSync as readFileSync2 } from "fs";
@@ -212,59 +213,59 @@ async function main() {
     switch (command) {
       // Resource commands
       case "plan":
-        await import("./resources-QKEUX3C3.js").then((m) => m.plan(args.slice(1)));
+        await import("./resources-26TZX2XU.js").then((m) => m.plan(args.slice(1)));
         break;
       case "apply":
-        await import("./resources-QKEUX3C3.js").then((m) => m.apply(args.slice(1)));
+        await import("./resources-26TZX2XU.js").then((m) => m.apply(args.slice(1)));
         break;
       case "pull":
-        await import("./resources-QKEUX3C3.js").then((m) => m.pull(args.slice(1)));
+        await import("./resources-26TZX2XU.js").then((m) => m.pull(args.slice(1)));
         break;
       case "destroy":
-        await import("./resources-QKEUX3C3.js").then((m) => m.destroy(args.slice(1)));
+        await import("./resources-26TZX2XU.js").then((m) => m.destroy(args.slice(1)));
         break;
       case "list":
-        await import("./resources-QKEUX3C3.js").then((m) => m.list(args.slice(1)));
+        await import("./resources-26TZX2XU.js").then((m) => m.list(args.slice(1)));
         break;
       case "show":
-        await import("./resources-QKEUX3C3.js").then((m) => m.show(args.slice(1)));
+        await import("./resources-26TZX2XU.js").then((m) => m.show(args.slice(1)));
         break;
       case "diff":
-        await import("./resources-QKEUX3C3.js").then((m) => m.diff(args.slice(1)));
+        await import("./resources-26TZX2XU.js").then((m) => m.diff(args.slice(1)));
         break;
       // Development
       case "dev":
-        await import("./dev-5EAZUQ2S.js").then((m) => m.dev(args.slice(1)));
+        await import("./dev-NN766QJW.js").then((m) => m.dev(args.slice(1)));
         break;
       case "run":
-        await import("./run-SPC4YXWR.js").then((m) => m.run(args.slice(1)));
+        await import("./run-WD5CKV3S.js").then((m) => m.run(args.slice(1)));
         break;
       // Project
       case "init":
-        await import("./init-4JSHTLX2.js").then((m) => m.init(args.slice(1)));
+        await import("./init-ZI3FZSRE.js").then((m) => m.init(args.slice(1)));
         break;
       case "templates":
-        await import("./templates-6KMZWOYH.js").then((m) => m.templates(subcommand, args.slice(2)));
+        await import("./templates-ESFQ4QO4.js").then((m) => m.templates(subcommand, args.slice(2)));
         break;
       case "status":
-        await import("./status-E4IHEUKO.js").then((m) => m.status(args.slice(1)));
+        await import("./status-ZFEEIK4O.js").then((m) => m.status(args.slice(1)));
         break;
       case "migrate":
-        await import("./migrate-2DZ6RQ5K.js").then((m) => m.migrate(args.slice(1)));
+        await import("./migrate-MW5Q2HS6.js").then((m) => m.migrate(args.slice(1)));
         break;
       // Skills
       case "skills":
-        await import("./skills-LKXXSJJS.js").then((m) => m.skills(subcommand, args.slice(2)));
+        await import("./skills-6TSSUJYR.js").then((m) => m.skills(subcommand, args.slice(2)));
         break;
       // Auth
       case "login":
-        await import("./auth-7RGL7GXU.js").then((m) => m.login(args.slice(1)));
+        await import("./auth-YQXLYQZZ.js").then((m) => m.login(args.slice(1)));
         break;
       case "logout":
-        await import("./auth-7RGL7GXU.js").then((m) => m.logout(args.slice(1)));
+        await import("./auth-YQXLYQZZ.js").then((m) => m.logout(args.slice(1)));
         break;
       case "whoami":
-        await import("./auth-7RGL7GXU.js").then((m) => m.whoami());
+        await import("./auth-YQXLYQZZ.js").then((m) => m.whoami());
         break;
       // Convenience aliases
       case "help":

package/dist/{init-4JSHTLX2.js → init-ZI3FZSRE.js}

@@ -1,12 +1,13 @@
 import {
   installAllSkills,
   syncClaudeMd
-} from "./chunk-UP3GV4HN.js";
+} from "./chunk-FZPONF23.js";
 import {
   listAllTemplates,
   resolveTemplate
 } from "./chunk-CHRKCAIZ.js";
-import "./chunk-D2BLSEGR.js";
+import "./chunk-WZMAQXDY.js";
+import "./chunk-PNKVD2UK.js";
 
 // src/commands/init.ts
 import pc2 from "picocolors";

package/dist/{migrate-2DZ6RQ5K.js → migrate-MW5Q2HS6.js}

@@ -1,7 +1,8 @@
 import {
   detectProjectVersion,
   findProjectRoot
-} from "./chunk-D2BLSEGR.js";
+} from "./chunk-WZMAQXDY.js";
+import "./chunk-PNKVD2UK.js";
 
 // src/commands/migrate.ts
 import pc from "picocolors";

package/dist/{resources-QKEUX3C3.js → resources-26TZX2XU.js}

@@ -4,16 +4,16 @@ import {
 import {
   createApiClient,
   loadEnv
-} from "./chunk-NL6MEHA3.js";
-import {
-  getToken
-} from "./chunk-NDLYGKS6.js";
+} from "./chunk-RWPUF6L7.js";
 import {
   findProjectRoot,
   getApiUrl,
   getAppName,
-  getAppTitle
-} from "./chunk-D2BLSEGR.js";
+  getAppTitle,
+  getToken,
+  init_auth
+} from "./chunk-WZMAQXDY.js";
+import "./chunk-PNKVD2UK.js";
 
 // src/commands/resources.ts
 import pc from "picocolors";
@@ -21,6 +21,7 @@ import prompts from "prompts";
 import { execFileSync, execSync } from "child_process";
 import { existsSync, readdirSync, readFileSync, writeFileSync, mkdirSync } from "fs";
 import { join, resolve } from "path";
+init_auth();
 function detectPackageManager() {
   for (const pm of ["bun", "pnpm", "yarn", "npm"]) {
     try {
@@ -125,12 +126,14 @@ ${pc.dim("Resources:")}
   app                 Deploy the frontend app
 
 ${pc.dim("Options:")}
+  --yes, -y           Skip confirmation prompt (for CI/CD)
   --skip-build        Skip build step when applying app
 
 ${pc.dim("Examples:")}
-  lumera apply                       # Apply everything
+  lumera apply                       # Apply everything (shows plan, asks to confirm)
   lumera apply collections           # Apply all collections
   lumera apply collections/users     # Apply single collection
+  lumera apply agents -y             # Apply agents without confirmation
   lumera apply app                   # Deploy frontend
   lumera apply app --skip-build      # Deploy without rebuilding
 `);
@@ -482,6 +485,30 @@ function mapFieldType(type) {
   };
   return typeMap[type] || type;
 }
+function fieldsDiffer(local, remote) {
+  if (mapFieldType(local.type) !== remote.type) return true;
+  if ((local.required || false) !== (remote.required || false)) return true;
+  const opts = remote.options || {};
+  if (local.type === "select") {
+    const localValues = [...local.values || []].sort();
+    const remoteValues = [...opts.values || []].sort();
+    if (localValues.join(",") !== remoteValues.join(",")) return true;
+    const localMultiple = local.multiple || false;
+    const remoteMaxSelect = opts.maxSelect || 1;
+    if (localMultiple && remoteMaxSelect <= 1) return true;
+    if (!localMultiple && remoteMaxSelect > 1) return true;
+  }
+  if (local.type === "relation") {
+    if (local.collection && local.collection !== opts.collectionId) return true;
+    const localMultiple = local.multiple || false;
+    const remoteMaxSelect = opts.maxSelect || 1;
+    if (localMultiple && remoteMaxSelect <= 1) return true;
+    if (!localMultiple && remoteMaxSelect > 1) return true;
+  }
+  if (local.min !== void 0 && local.min !== opts.min) return true;
+  if (local.max !== void 0 && local.max !== opts.max) return true;
+  return false;
+}
 async function planCollections(api, localCollections) {
   const changes = [];
   const remoteCollections = await api.listCollections();
@@ -509,10 +536,20 @@ async function planCollections(api, localCollections) {
       const remoteFieldMap = new Map(remote.schema.map((f) => [f.name, f]));
       const added = [...localFieldNames].filter((n) => !remoteFieldNames.has(n));
       const removed = [...remoteFieldNames].filter((n) => !localFieldNames.has(n));
-      if (added.length > 0 || removed.length > 0) {
+      const modified = [];
+      for (const name of localFieldNames) {
+        if (!remoteFieldNames.has(name)) continue;
+        const localField = localFieldMap.get(name);
+        const remoteField = remoteFieldMap.get(name);
+        if (fieldsDiffer(localField, remoteField)) {
+          modified.push(name);
+        }
+      }
+      if (added.length > 0 || removed.length > 0 || modified.length > 0) {
         const details = [];
         if (added.length > 0) details.push(`+${added.length} field${added.length > 1 ? "s" : ""}`);
         if (removed.length > 0) details.push(`-${removed.length} field${removed.length > 1 ? "s" : ""}`);
+        if (modified.length > 0) details.push(`~${modified.length} field${modified.length > 1 ? "s" : ""} (${modified.join(", ")})`);
         const fieldDetails = [];
         for (const name of added) {
           const f = localFieldMap.get(name);
@@ -967,6 +1004,17 @@ async function planAgents(api, localAgents) {
   const remoteByExternalId = new Map(
     remoteAgents.filter((a) => a.external_id && !a.managed).map((a) => [a.external_id, a])
   );
+  let skillSlugToId = /* @__PURE__ */ new Map();
+  let skillIdToSlug = /* @__PURE__ */ new Map();
+  const hasSkillRefs = localAgents.some((a) => a.agent.skills && a.agent.skills.length > 0) || remoteAgents.some((a) => a.skill_ids && a.skill_ids.length > 0);
+  if (hasSkillRefs) {
+    try {
+      const skills = await api.listAgentSkills();
+      skillSlugToId = new Map(skills.map((s) => [s.slug, s.id]));
+      skillIdToSlug = new Map(skills.map((s) => [s.id, s.slug]));
+    } catch {
+    }
+  }
   for (const { agent, systemPrompt, policyScript } of localAgents) {
     const remote = remoteByExternalId.get(agent.external_id);
     if (!remote) {
@@ -979,6 +1027,16 @@ async function planAgents(api, localAgents) {
       if ((remote.model || "") !== (agent.model || "")) diffs.push("model");
       if ((remote.policy_script || "").trim() !== (policyScript || "").trim()) diffs.push("policy_script");
       if ((remote.policy_enabled || false) !== (agent.policy_enabled || false)) diffs.push("policy_enabled");
+      const localSkillIds = (agent.skills || []).map((s) => skillSlugToId.get(s) || s).sort();
+      const remoteSkillIds = [...remote.skill_ids || []].sort();
+      if (localSkillIds.join(",") !== remoteSkillIds.join(",")) {
+        const addedSlugs = localSkillIds.filter((id) => !remoteSkillIds.includes(id)).map((id) => skillIdToSlug.get(id) || id);
+        const removedSlugs = remoteSkillIds.filter((id) => !localSkillIds.includes(id)).map((id) => skillIdToSlug.get(id) || id);
+        const parts = [];
+        if (addedSlugs.length) parts.push(`+${addedSlugs.join(", +")}`);
+        if (removedSlugs.length) parts.push(`-${removedSlugs.join(", -")}`);
+        diffs.push(`skills (${parts.join(", ")})`);
+      }
       if (diffs.length > 0) {
         const textDiffs = [];
         if (diffs.includes("system_prompt")) {
@@ -1739,11 +1797,12 @@ async function apply(args) {
   const platformDir = getPlatformDir();
   const api = createApiClient();
   const appName = getAppName(projectRoot);
-  const { type, name } = parseResource(args[0]);
-  console.log();
-  console.log(pc.cyan(pc.bold("  Apply")));
-  console.log();
+  const { type, name } = parseResource(args.filter((a) => a !== "--yes" && a !== "-y")[0]);
+  const autoConfirm = args.includes("--yes") || args.includes("-y") || !!process.env.CI;
   if (type === "app") {
+    console.log();
+    console.log(pc.cyan(pc.bold("  Apply")));
+    console.log();
     console.log(pc.bold("  App:"));
     await applyApp(args);
     console.log();
@@ -1752,77 +1811,131 @@ async function apply(args) {
     return;
   }
   let collections;
-  let totalErrors = 0;
-  if (!type || type === "collections") {
-    const localCollections = loadLocalCollections(platformDir, name || void 0);
-    if (localCollections.length > 0) {
-      console.log(pc.bold("  Collections:"));
-      totalErrors += await applyCollections(api, localCollections);
-      console.log();
-    } else if (name) {
-      console.log(pc.red(`  Collection "${name}" not found locally`));
-      process.exit(1);
-    }
-  }
   try {
     const remoteCollections = await api.listCollections();
     collections = new Map(remoteCollections.map((c) => [c.name, c.id]));
-    for (const c of remoteCollections) {
-      collections.set(c.id, c.id);
-    }
+    for (const c of remoteCollections) collections.set(c.id, c.id);
   } catch {
     collections = /* @__PURE__ */ new Map();
   }
-  if (!type || type === "automations") {
-    const localAutomations = loadLocalAutomations(platformDir, name || void 0, appName);
-    if (localAutomations.length > 0) {
-      console.log(pc.bold("  Automations:"));
-      totalErrors += await applyAutomations(api, localAutomations);
-      console.log();
-    } else if (name) {
-      console.log(pc.red(`  Automation "${name}" not found locally`));
-      process.exit(1);
-    }
-  }
-  if (!type || type === "hooks") {
-    const localHooks = loadLocalHooks(platformDir, name || void 0, appName);
-    if (localHooks.length > 0) {
-      console.log(pc.bold("  Hooks:"));
-      totalErrors += await applyHooks(api, localHooks, collections);
-      console.log();
-    } else if (name) {
-      console.log(pc.red(`  Hook "${name}" not found locally`));
-      process.exit(1);
-    }
-  }
-  if (!type || type === "agents") {
-    const localAgents = loadLocalAgents(platformDir, name || void 0, appName);
-    if (localAgents.length > 0) {
-      console.log(pc.bold("  Agents:"));
-      totalErrors += await applyAgents(api, localAgents);
+  const allChanges = [];
+  const localCollections = !type || type === "collections" ? loadLocalCollections(platformDir, name || void 0) : [];
+  const localAutomations = !type || type === "automations" ? loadLocalAutomations(platformDir, name || void 0, appName) : [];
+  const localHooks = !type || type === "hooks" ? loadLocalHooks(platformDir, name || void 0, appName) : [];
+  const localAgents = !type || type === "agents" ? loadLocalAgents(platformDir, name || void 0, appName) : [];
+  if (localCollections.length > 0) allChanges.push(...await planCollections(api, localCollections));
+  if (localAutomations.length > 0) allChanges.push(...await planAutomations(api, localAutomations));
+  if (localHooks.length > 0) allChanges.push(...await planHooks(api, localHooks, collections));
+  if (localAgents.length > 0) allChanges.push(...await planAgents(api, localAgents));
+  if (name) {
+    const hasLocal = localCollections.length > 0 || localAutomations.length > 0 || localHooks.length > 0 || localAgents.length > 0;
+    if (!hasLocal) {
       console.log();
-    } else if (name) {
-      console.log(pc.red(`  Agent "${name}" not found locally`));
+      console.log(pc.red(`  Resource "${name}" not found locally`));
       process.exit(1);
     }
   }
+  let willDeployApp = false;
   if (!type) {
     try {
-      const projectRoot2 = findProjectRoot();
-      if (existsSync(join(projectRoot2, "dist")) || existsSync(join(projectRoot2, "src"))) {
-        console.log(pc.bold("  App:"));
-        await applyApp(args);
-        console.log();
+      if (existsSync(join(projectRoot, "dist")) || existsSync(join(projectRoot, "src"))) {
+        willDeployApp = true;
       }
     } catch {
     }
   }
+  if (allChanges.length === 0 && !willDeployApp) {
+    console.log();
+    console.log(pc.green("  \u2713 Nothing to apply \u2014 local and remote are in sync."));
+    console.log();
+    return;
+  }
+  console.log();
+  console.log(pc.cyan(pc.bold("  Apply")));
+  console.log();
+  const creates = allChanges.filter((c) => c.type === "create");
+  const updates = allChanges.filter((c) => c.type === "update");
+  if (allChanges.length > 0) {
+    console.log(pc.bold("  Plan:"));
+    for (const change of allChanges) {
+      const icon = change.type === "create" ? "+" : "~";
+      const color = change.type === "create" ? pc.green : pc.yellow;
+      const details = change.details ? ` (${change.details})` : "";
+      console.log(`  ${color(icon)} ${change.resource}: ${change.name}${pc.dim(details)}`);
+    }
+    if (willDeployApp) console.log(`  ${pc.blue("\u25CF")} app: frontend build + deploy`);
+    console.log();
+    const parts = [];
+    if (creates.length > 0) parts.push(pc.green(`${creates.length} create`));
+    if (updates.length > 0) parts.push(pc.yellow(`${updates.length} update`));
+    if (willDeployApp) parts.push(pc.blue("1 app deploy"));
+    console.log(`  ${parts.join(", ")}`);
+    console.log();
+  } else if (willDeployApp) {
+    console.log(pc.dim("  No infrastructure changes \u2014 deploying app only."));
+    console.log();
+  }
+  if (!autoConfirm && allChanges.length > 0) {
+    const { confirm } = await prompts({
+      type: "confirm",
+      name: "confirm",
+      message: "  Proceed with apply?",
+      initial: true
+    });
+    if (!confirm) {
+      console.log(pc.dim("  Cancelled."));
+      console.log();
+      return;
+    }
+    console.log();
+  }
+  let totalErrors = 0;
+  let totalCreated = 0;
+  let totalUpdated = 0;
+  let totalSkipped = 0;
+  if (localCollections.length > 0) {
+    console.log(pc.bold("  Collections:"));
+    totalErrors += await applyCollections(api, localCollections);
+    console.log();
+  }
+  try {
+    const remoteCollections = await api.listCollections();
+    collections = new Map(remoteCollections.map((c) => [c.name, c.id]));
+    for (const c of remoteCollections) collections.set(c.id, c.id);
+  } catch {
+  }
+  if (localAutomations.length > 0) {
+    console.log(pc.bold("  Automations:"));
+    totalErrors += await applyAutomations(api, localAutomations);
+    console.log();
+  }
+  if (localHooks.length > 0) {
+    console.log(pc.bold("  Hooks:"));
+    totalErrors += await applyHooks(api, localHooks, collections);
+    console.log();
+  }
+  if (localAgents.length > 0) {
+    console.log(pc.bold("  Agents:"));
+    totalErrors += await applyAgents(api, localAgents);
+    console.log();
+  }
+  if (willDeployApp) {
+    console.log(pc.bold("  App:"));
+    await applyApp(args);
+    console.log();
+  }
+  totalCreated = creates.length;
+  totalUpdated = updates.length;
   if (totalErrors > 0) {
-    console.log(pc.red(`  Failed with ${totalErrors} error${totalErrors > 1 ? "s" : ""}.`));
+    console.log(pc.red(`  \u2717 ${totalErrors} error${totalErrors > 1 ? "s" : ""} during apply.`));
     console.log();
     process.exit(1);
   }
-  console.log(pc.green("  Done!"));
+  const summary = [];
+  if (totalCreated > 0) summary.push(pc.green(`${totalCreated} created`));
+  if (totalUpdated > 0) summary.push(pc.yellow(`${totalUpdated} updated`));
+  if (willDeployApp) summary.push(pc.blue("app deployed"));
+  console.log(pc.green("  \u2713 Done!") + (summary.length > 0 ? ` ${pc.dim("\u2014")} ${summary.join(", ")}` : ""));
   console.log();
 }
 async function pull(args) {

package/dist/{run-SPC4YXWR.js → run-WD5CKV3S.js}

@@ -1,20 +1,21 @@
 import {
   createApiClient,
   loadEnv
-} from "./chunk-NL6MEHA3.js";
-import {
-  getToken
-} from "./chunk-NDLYGKS6.js";
+} from "./chunk-RWPUF6L7.js";
 import {
   findProjectRoot,
-  getApiUrl
-} from "./chunk-D2BLSEGR.js";
+  getApiUrl,
+  getToken,
+  init_auth
+} from "./chunk-WZMAQXDY.js";
+import "./chunk-PNKVD2UK.js";
 
 // src/commands/run.ts
 import pc from "picocolors";
 import { spawn } from "child_process";
 import { existsSync, readdirSync, readFileSync } from "fs";
 import { resolve, extname, join } from "path";
+init_auth();
 function showHelp() {
   console.log(`
 ${pc.dim("Usage:")}

package/dist/{skills-LKXXSJJS.js → skills-6TSSUJYR.js}

@@ -6,8 +6,9 @@ import {
   installAllSkills,
   slugToFilename,
   syncClaudeMd
-} from "./chunk-UP3GV4HN.js";
-import "./chunk-D2BLSEGR.js";
+} from "./chunk-FZPONF23.js";
+import "./chunk-WZMAQXDY.js";
+import "./chunk-PNKVD2UK.js";
 
 // src/commands/skills.ts
 import pc from "picocolors";

package/dist/{status-E4IHEUKO.js → status-ZFEEIK4O.js}

@@ -1,20 +1,21 @@
-import {
-  getToken,
-  getTokenSource
-} from "./chunk-NDLYGKS6.js";
 import {
   detectProjectVersion,
   findProjectRoot,
   getAppName,
   getAppTitle,
   getBaseUrl,
+  getToken,
+  getTokenSource,
+  init_auth,
   readPackageJson
-} from "./chunk-D2BLSEGR.js";
+} from "./chunk-WZMAQXDY.js";
+import "./chunk-PNKVD2UK.js";
 
 // src/commands/status.ts
 import pc from "picocolors";
 import { existsSync, readdirSync } from "fs";
 import { join } from "path";
+init_auth();
 async function validateToken(token) {
   const baseUrl = getBaseUrl();
   try {

package/dist/{templates-6KMZWOYH.js → templates-ESFQ4QO4.js}

@@ -1,6 +1,7 @@
 import {
   listAllTemplates
 } from "./chunk-CHRKCAIZ.js";
+import "./chunk-PNKVD2UK.js";
 
 // src/commands/templates.ts
 import pc from "picocolors";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumerahq/cli",
-  "version": "0.14.0",
+  "version": "0.15.1",
   "description": "CLI for building and deploying Lumera apps",
   "type": "module",
   "engines": {

package/dist/chunk-D2BLSEGR.js

@@ -1,59 +0,0 @@
-// src/lib/config.ts
-import { existsSync, readFileSync } from "fs";
-import { resolve, join } from "path";
-function findProjectRoot(startDir = process.cwd()) {
-  let dir = startDir;
-  while (dir !== "/") {
-    if (existsSync(join(dir, "package.json"))) {
-      return dir;
-    }
-    dir = resolve(dir, "..");
-  }
-  throw new Error("Could not find project root (no package.json found)");
-}
-function readPackageJson(projectRoot) {
-  const pkgPath = join(projectRoot, "package.json");
-  if (!existsSync(pkgPath)) {
-    throw new Error(`package.json not found at ${pkgPath}`);
-  }
-  return JSON.parse(readFileSync(pkgPath, "utf-8"));
-}
-function getAppName(projectRoot) {
-  const pkg = readPackageJson(projectRoot);
-  return pkg.name;
-}
-function getAppTitle(projectRoot) {
-  const pkg = readPackageJson(projectRoot);
-  return pkg.lumera?.name || pkg.name;
-}
-function detectProjectVersion(projectRoot) {
-  const pkg = readPackageJson(projectRoot);
-  if (pkg.lumera?.version !== void 0) {
-    return pkg.lumera.version;
-  }
-  if (existsSync(join(projectRoot, "lumera_platform"))) {
-    return 0;
-  }
-  if (existsSync(join(projectRoot, "platform"))) {
-    return 1;
-  }
-  return 1;
-}
-function getBaseUrl() {
-  let base = process.env.LUMERA_BASE_URL || process.env.LUMERA_API_URL || "https://app.lumerahq.com";
-  base = base.replace(/\/api\/?$/, "").replace(/\/$/, "");
-  return base;
-}
-function getApiUrl() {
-  return `${getBaseUrl()}/api`;
-}
-
-export {
-  findProjectRoot,
-  readPackageJson,
-  getAppName,
-  getAppTitle,
-  detectProjectVersion,
-  getBaseUrl,
-  getApiUrl
-};

package/dist/chunk-NDLYGKS6.js

@@ -1,77 +0,0 @@
-// src/lib/auth.ts
-import { existsSync, readFileSync } from "fs";
-import { homedir } from "os";
-import { join } from "path";
-var GLOBAL_CONFIG_DIR = join(homedir(), ".config", "lumera");
-var GLOBAL_CREDS_PATH = join(GLOBAL_CONFIG_DIR, "credentials.json");
-function getLocalCredsPath(cwd = process.cwd()) {
-  return join(cwd, ".lumera", "credentials.json");
-}
-function getToken(cwd = process.cwd()) {
-  if (process.env.LUMERA_TOKEN) {
-    return process.env.LUMERA_TOKEN;
-  }
-  const localCredsPath = getLocalCredsPath(cwd);
-  if (existsSync(localCredsPath)) {
-    try {
-      const creds = JSON.parse(readFileSync(localCredsPath, "utf-8"));
-      if (creds.token) return creds.token;
-    } catch {
-    }
-  }
-  if (existsSync(GLOBAL_CREDS_PATH)) {
-    try {
-      const creds = JSON.parse(readFileSync(GLOBAL_CREDS_PATH, "utf-8"));
-      if (creds.token) return creds.token;
-    } catch {
-    }
-  }
-  throw new Error(
-    "No Lumera token found.\n  Run `lumera login` to authenticate, or\n  Set LUMERA_TOKEN environment variable"
-  );
-}
-function getTokenSource(cwd = process.cwd()) {
-  if (process.env.LUMERA_TOKEN) {
-    return "environment (LUMERA_TOKEN)";
-  }
-  const localCredsPath = getLocalCredsPath(cwd);
-  if (existsSync(localCredsPath)) {
-    try {
-      const creds = JSON.parse(readFileSync(localCredsPath, "utf-8"));
-      if (creds.token) return `project (${localCredsPath})`;
-    } catch {
-    }
-  }
-  if (existsSync(GLOBAL_CREDS_PATH)) {
-    try {
-      const creds = JSON.parse(readFileSync(GLOBAL_CREDS_PATH, "utf-8"));
-      if (creds.token) return `global (${GLOBAL_CREDS_PATH})`;
-    } catch {
-    }
-  }
-  return null;
-}
-function getCredentials(cwd = process.cwd()) {
-  const localCredsPath = getLocalCredsPath(cwd);
-  if (existsSync(localCredsPath)) {
-    try {
-      const creds = JSON.parse(readFileSync(localCredsPath, "utf-8"));
-      if (creds.token) return creds;
-    } catch {
-    }
-  }
-  if (existsSync(GLOBAL_CREDS_PATH)) {
-    try {
-      const creds = JSON.parse(readFileSync(GLOBAL_CREDS_PATH, "utf-8"));
-      if (creds.token) return creds;
-    } catch {
-    }
-  }
-  return null;
-}
-
-export {
-  getToken,
-  getTokenSource,
-  getCredentials
-};