@lumerahq/cli 0.19.16-dev.0 → 0.19.17-dev.0

package/dist/{chunk-TPQGGLSD.js → chunk-4WZMUFC7.js}

@@ -4,7 +4,7 @@ import {
 import {
   createApiClient,
   isApiErrorStatus
-} from "./chunk-WIX3DUD5.js";
+} from "./chunk-MDCAEFUH.js";
 import {
   findProjectRoot,
   getAppName

package/dist/{chunk-WIX3DUD5.js → chunk-MDCAEFUH.js}

@@ -25,12 +25,6 @@ while (__pkgDir !== "/") {
 }
 var pkg = JSON.parse(readFileSync(resolve(__pkgDir, "package.json"), "utf-8"));
 var CLI_USER_AGENT = `lumera-cli/${pkg.version}`;
-var USER_CONTEXT_ENV = "LUMERA_USER_ID";
-var USER_CONTEXT_HEADER = "X-Lumera-User-Id";
-function userContextHeaders() {
-  const userID = process.env[USER_CONTEXT_ENV]?.trim();
-  return userID ? { [USER_CONTEXT_HEADER]: userID } : {};
-}
 var ApiError = class extends Error {
   status;
   body;
@@ -73,7 +67,6 @@ var ApiClient = class {
       "User-Agent": CLI_USER_AGENT,
       "X-Lumera-Client": "lumera-cli",
       ...this.projectExternalId ? { "X-Lumera-Project": this.projectExternalId } : {},
-      ...userContextHeaders(),
       ...options.headers
     };
     const method = (options.method || "GET").toUpperCase();

package/dist/{chunk-VM5YR3HF.js → chunk-VOIZWYZD.js}

@@ -9,12 +9,6 @@ import { existsSync, readFileSync } from "fs";
 import { resolve, dirname } from "path";
 import archiver from "archiver";
 import pc from "picocolors";
-var USER_CONTEXT_ENV = "LUMERA_USER_ID";
-var USER_CONTEXT_HEADER = "X-Lumera-User-Id";
-function userContextHeaders() {
-  const userID = process.env[USER_CONTEXT_ENV]?.trim();
-  return userID ? { [USER_CONTEXT_HEADER]: userID } : {};
-}
 function formatTimestampVersion(date = /* @__PURE__ */ new Date()) {
   const pad = (value) => String(value).padStart(2, "0");
   return [
@@ -62,8 +56,7 @@ async function ensureAppRecord(apiBase, token, appName, appTitle) {
     {
       headers: {
         Authorization: `Bearer ${token}`,
-        "X-Lumera-Client": "lumera-cli",
-        ...userContextHeaders()
+        "X-Lumera-Client": "lumera-cli"
       }
     }
   );
@@ -82,8 +75,7 @@ async function ensureAppRecord(apiBase, token, appName, appTitle) {
     headers: {
       Authorization: `Bearer ${token}`,
       "Content-Type": "application/json",
-      "X-Lumera-Client": "lumera-cli",
-      ...userContextHeaders()
+      "X-Lumera-Client": "lumera-cli"
     },
     body: JSON.stringify(appData)
   });
@@ -116,8 +108,7 @@ async function deploy(options) {
     method: "POST",
     headers: {
       Authorization: `Bearer ${token}`,
-      "X-Lumera-Client": "lumera-cli",
-      ...userContextHeaders()
+      "X-Lumera-Client": "lumera-cli"
     },
     body: formData
   });

package/dist/{deps-ALKBN6UT.js → deps-KVHWZARX.js}

@@ -1,9 +1,9 @@
 import {
   deps,
   syncDeps
-} from "./chunk-TPQGGLSD.js";
+} from "./chunk-4WZMUFC7.js";
 import "./chunk-2CR762KB.js";
-import "./chunk-WIX3DUD5.js";
+import "./chunk-MDCAEFUH.js";
 import "./chunk-ZH3NVYEQ.js";
 import "./chunk-FJFIWC7G.js";
 import "./chunk-PNKVD2UK.js";

package/dist/{dev-33OLPWUK.js → dev-PONRO7VN.js}

@@ -1,15 +1,15 @@
 import {
   dev
-} from "./chunk-VM5YR3HF.js";
+} from "./chunk-VOIZWYZD.js";
 import {
   syncDeps
-} from "./chunk-TPQGGLSD.js";
+} from "./chunk-4WZMUFC7.js";
 import {
   loadEnv
 } from "./chunk-2CR762KB.js";
 import {
   createApiClient
-} from "./chunk-WIX3DUD5.js";
+} from "./chunk-MDCAEFUH.js";
 import {
   findProjectRoot,
   getApiUrl,

package/dist/index.js

@@ -219,39 +219,39 @@ async function main() {
     switch (command) {
       // Resource commands
       case "plan":
-        await import("./resources-EZQGSI5L.js").then((m) => m.plan(args.slice(1)));
+        await import("./resources-M6R2RFSW.js").then((m) => m.plan(args.slice(1)));
         break;
       case "apply":
-        await import("./resources-EZQGSI5L.js").then((m) => m.apply(args.slice(1)));
+        await import("./resources-M6R2RFSW.js").then((m) => m.apply(args.slice(1)));
         break;
       case "pull":
-        await import("./resources-EZQGSI5L.js").then((m) => m.pull(args.slice(1)));
+        await import("./resources-M6R2RFSW.js").then((m) => m.pull(args.slice(1)));
         break;
       case "destroy":
-        await import("./resources-EZQGSI5L.js").then((m) => m.destroy(args.slice(1)));
+        await import("./resources-M6R2RFSW.js").then((m) => m.destroy(args.slice(1)));
         break;
       case "list":
-        await import("./resources-EZQGSI5L.js").then((m) => m.list(args.slice(1)));
+        await import("./resources-M6R2RFSW.js").then((m) => m.list(args.slice(1)));
         break;
       case "show":
-        await import("./resources-EZQGSI5L.js").then((m) => m.show(args.slice(1)));
+        await import("./resources-M6R2RFSW.js").then((m) => m.show(args.slice(1)));
         break;
       case "diff":
-        await import("./resources-EZQGSI5L.js").then((m) => m.diff(args.slice(1)));
+        await import("./resources-M6R2RFSW.js").then((m) => m.diff(args.slice(1)));
         break;
       // Development
       case "dev":
-        await import("./dev-33OLPWUK.js").then((m) => m.dev(args.slice(1)));
+        await import("./dev-PONRO7VN.js").then((m) => m.dev(args.slice(1)));
         break;
       case "run":
-        await import("./run-BQPH6BIK.js").then((m) => m.run(args.slice(1)));
+        await import("./run-R6MO23U7.js").then((m) => m.run(args.slice(1)));
         break;
       // Project
       case "init":
-        await import("./init-EBNELAZA.js").then((m) => m.init(args.slice(1)));
+        await import("./init-KJOWD2KQ.js").then((m) => m.init(args.slice(1)));
         break;
       case "register":
-        await import("./register-EQ5KYVLV.js").then((m) => m.register(args.slice(1)));
+        await import("./register-QBRKXWNX.js").then((m) => m.register(args.slice(1)));
         break;
       case "templates":
         await import("./templates-LNUOTNLN.js").then((m) => m.templates(subcommand, args.slice(2)));
@@ -268,7 +268,7 @@ async function main() {
         break;
       // Dependencies
       case "deps":
-        await import("./deps-ALKBN6UT.js").then((m) => m.deps(args.slice(1)));
+        await import("./deps-KVHWZARX.js").then((m) => m.deps(args.slice(1)));
         break;
       // Auth
       case "login":

package/dist/{init-EBNELAZA.js → init-KJOWD2KQ.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-BHYDYR75.js";
 import {
   createApiClient
-} from "./chunk-WIX3DUD5.js";
+} from "./chunk-MDCAEFUH.js";
 import {
   getToken,
   init_auth,

package/dist/{register-EQ5KYVLV.js → register-QBRKXWNX.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-BHYDYR75.js";
 import {
   createApiClient
-} from "./chunk-WIX3DUD5.js";
+} from "./chunk-MDCAEFUH.js";
 import {
   findProjectRoot,
   getAppName,

package/dist/{resources-EZQGSI5L.js → resources-M6R2RFSW.js}

@@ -1,16 +1,16 @@
 import {
   deploy
-} from "./chunk-VM5YR3HF.js";
+} from "./chunk-VOIZWYZD.js";
 import {
   syncDeps
-} from "./chunk-TPQGGLSD.js";
+} from "./chunk-4WZMUFC7.js";
 import {
   loadEnv
 } from "./chunk-2CR762KB.js";
 import {
   ApiError,
   createApiClient
-} from "./chunk-WIX3DUD5.js";
+} from "./chunk-MDCAEFUH.js";
 import {
   findProjectRoot,
   getApiUrl,
@@ -3073,7 +3073,7 @@ async function plan(args) {
     showPlanHelp();
     return;
   }
-  const jsonOutput = args.includes("--json");
+  const jsonOutput = process.env.LUMERA_JSON === "1";
   const projectRoot = findProjectRoot();
   loadEnv(projectRoot);
   const platformDir = getPlatformDir();
@@ -3081,7 +3081,7 @@ async function plan(args) {
   const api = createApiClient(void 0, void 0, appName);
   const projectId = getProjectId(projectRoot);
   const positionalArgs = args.filter((a) => !a.startsWith("-"));
-  const { type, name } = parseResource(positionalArgs.filter((a) => a !== "--json")[0]);
+  const { type, name } = parseResource(positionalArgs[0]);
   console.log();
   console.log(pc2.cyan(pc2.bold("  Plan")));
   console.log(pc2.dim("  Comparing local files to remote state..."));

package/dist/{run-BQPH6BIK.js → run-R6MO23U7.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2CR762KB.js";
 import {
   createApiClient
-} from "./chunk-WIX3DUD5.js";
+} from "./chunk-MDCAEFUH.js";
 import {
   findProjectRoot,
   getApiUrl,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumerahq/cli",
-  "version": "0.19.16-dev.0",
+  "version": "0.19.17-dev.0",
   "description": "CLI for building and deploying Lumera apps",
   "type": "module",
   "engines": {

package/templates/default/AGENTS.md

@@ -41,9 +41,9 @@ All resources use **external IDs** in the format `<app-name>:<resource-name>` (a
 **All collection names are automatically namespaced by project.** Always use bare names (e.g. `orders`, not `myproject__orders`) everywhere — in collection JSON files, Python SDK calls, JavaScript hooks, and frontend queries. The platform resolves bare names to the project-scoped version transparently.
 
 - `pb.ensure_collection("orders", ...)` → stored as `{project}__orders`
-- `pb.search("orders", ...)` → resolves to `{project}__orders`
+- `query_sql("SELECT id FROM orders")` → resolves to `{project}__orders`
 - `ctx.dao.find("orders", ...)` → resolves to `{project}__orders`
-- `pbList("orders", ...)` in frontend → resolves via `X-Lumera-Project` header
+- `pbSql({ sql: "SELECT id FROM orders" })` in frontend → resolves via `X-Lumera-Project` header
 
 **Never manually prefix collection names with `{project}__`.** Two projects can each have an `orders` collection — they are fully isolated.
 
@@ -96,10 +96,16 @@ Custom apps run in an **iframe**. **Always use the `@lumerahq/ui` bridge for API
 
 ```ts
 // ✅ Correct — uses postMessage bridge, no CORS issues
-import { pbSql, pbList, pbCreate, pbUpdate, pbDelete } from '@lumerahq/ui/lib';
+import { pbSql, pbCreate, pbUpdate, pbDelete } from '@lumerahq/ui/lib';
+
+// New read queries: use SQL for collection access, including lookups, lists, reports, joins, ordering, and filters
+const result = await pbSql<{ id: string; amount: number }>({
+  sql: 'SELECT id, amount FROM orders WHERE status = {:status} ORDER BY updated DESC LIMIT 100',
+  params: { status: 'pending' },
+});
+const records = result.rows;
 
 // CRUD
-const records = await pbList('orders', { filter: JSON.stringify({ status: "pending" }) });
 await pbCreate('orders', { amount: 100 });
 await pbUpdate('orders', recordId, { status: 'done' });
 await pbDelete('orders', recordId);
@@ -113,6 +119,9 @@ fetch('https://app.lumerahq.com/api/pb/sql', ...);
 
 **Rules:**
 - Always import from `@lumerahq/ui/lib` — never write a custom `apiFetch` with raw `fetch()`
+- Use `pbSql()` for new read-only collection access
+- Existing `pbList()` / `pbSearch()` filter code remains supported for simple existing list/search reads; do not rewrite working code just because SQL exists
+- Use record helpers such as `pbCreate()`, `pbUpdate()`, and `pbDelete()` for mutations
 - Token is not needed — the bridge handles auth via the parent session
 - `X-Lumera-Project` header is not needed — the parent adds it automatically