@lumerahq/cli 0.19.20 → 0.19.22

package/dist/{chunk-ML7XB7Z2.js → chunk-JMRD5WIY.js}

@@ -7,6 +7,55 @@ import {
   fetchWithRetry
 } from "./chunk-FJFIWC7G.js";
 
+// src/lib/name-limits.ts
+var MAX_PROJECT_NAME_LENGTH = 30;
+var MAX_COLLECTION_NAME_LENGTH = 30;
+var MAX_POSTGRES_IDENTIFIER_BYTES = 63;
+var PROJECT_EXTERNAL_ID_REGEX = /^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/;
+var RESERVED_PROJECT_EXTERNAL_IDS = /* @__PURE__ */ new Set([
+  "collection",
+  "collections",
+  "default",
+  "admin",
+  "api",
+  "system",
+  "internal",
+  "platform",
+  "lumera",
+  "lm"
+]);
+function lengthOf(value) {
+  return Array.from(value).length;
+}
+function validateProjectNameLength(name, label = "App name") {
+  if (lengthOf(name.trim()) > MAX_PROJECT_NAME_LENGTH) {
+    return `${label} must be ${MAX_PROJECT_NAME_LENGTH} characters or less`;
+  }
+  return null;
+}
+function validateProjectExternalId(externalId) {
+  const trimmed = externalId.trim();
+  const lengthError = validateProjectNameLength(trimmed, "App ID");
+  if (lengthError) return lengthError;
+  if (!PROJECT_EXTERNAL_ID_REGEX.test(trimmed)) {
+    return "App ID must use lowercase letters, numbers, and hyphens only";
+  }
+  if (RESERVED_PROJECT_EXTERNAL_IDS.has(trimmed)) {
+    return `App ID "${trimmed}" is a reserved name`;
+  }
+  return null;
+}
+function validateCollectionNameLength(name) {
+  const trimmed = name.trim();
+  if (lengthOf(trimmed) > MAX_COLLECTION_NAME_LENGTH) {
+    return `collection name must be ${MAX_COLLECTION_NAME_LENGTH} characters or less`;
+  }
+  if (new TextEncoder().encode(trimmed).byteLength > MAX_POSTGRES_IDENTIFIER_BYTES) {
+    return `collection name must be ${MAX_POSTGRES_IDENTIFIER_BYTES} bytes or less`;
+  }
+  return null;
+}
+
 // src/lib/api.ts
 init_auth();
 import { readFileSync } from "fs";
@@ -282,6 +331,10 @@ var ApiClient = class {
   // Projects — register/lookup via PocketBase records API
   async registerProject(name, externalId) {
     const extId = externalId || name;
+    const nameError = validateProjectNameLength(name, "App name");
+    if (nameError) throw new Error(nameError);
+    const externalIdError = validateProjectExternalId(extId);
+    if (externalIdError) throw new Error(externalIdError);
     const existing = await this.getProjectByExternalId(extId);
     if (existing) {
       return existing;
@@ -364,6 +417,9 @@ function createApiClient(token, baseUrl, projectExternalId) {
 }
 
 export {
+  validateProjectNameLength,
+  validateProjectExternalId,
+  validateCollectionNameLength,
   userContextHeaders,
   ApiError,
   isApiErrorStatus,

package/dist/{chunk-S7FJU4GM.js → chunk-RH4FQF6O.js}

@@ -4,7 +4,7 @@ import {
 import {
   createApiClient,
   isApiErrorStatus
-} from "./chunk-ML7XB7Z2.js";
+} from "./chunk-JMRD5WIY.js";
 import {
   findProjectRoot,
   getAppName

package/dist/{chunk-PY4J2U2M.js → chunk-XT4EGGK7.js}

@@ -1,6 +1,8 @@
 import {
-  userContextHeaders
-} from "./chunk-ML7XB7Z2.js";
+  userContextHeaders,
+  validateProjectExternalId,
+  validateProjectNameLength
+} from "./chunk-JMRD5WIY.js";
 import {
   fetchWithRetry
 } from "./chunk-FJFIWC7G.js";
@@ -63,6 +65,10 @@ async function createTarball(distDir) {
   });
 }
 async function ensureAppRecord(apiBase, token, appName, appTitle) {
+  const appIdError = validateProjectExternalId(appName);
+  if (appIdError) throw new Error(appIdError);
+  const appNameError = validateProjectNameLength(appTitle, "App name");
+  if (appNameError) throw new Error(appNameError);
   const filterParam = encodeURIComponent(JSON.stringify({ external_id: appName }));
   const searchRes = await fetchWithRetry(
     `${apiBase}/pb/collections/lm_custom_apps/records?filter=${filterParam}`,

package/dist/{deps-H4QYLGM7.js → deps-VTLXKCQ7.js}

@@ -1,9 +1,9 @@
 import {
   deps,
   syncDeps
-} from "./chunk-S7FJU4GM.js";
+} from "./chunk-RH4FQF6O.js";
 import "./chunk-2CR762KB.js";
-import "./chunk-ML7XB7Z2.js";
+import "./chunk-JMRD5WIY.js";
 import "./chunk-ZH3NVYEQ.js";
 import "./chunk-FJFIWC7G.js";
 import "./chunk-PNKVD2UK.js";

package/dist/{dev-O6TXHGAK.js → dev-EQK27BUM.js}

@@ -1,15 +1,15 @@
 import {
   dev
-} from "./chunk-PY4J2U2M.js";
+} from "./chunk-XT4EGGK7.js";
 import {
   syncDeps
-} from "./chunk-S7FJU4GM.js";
+} from "./chunk-RH4FQF6O.js";
 import {
   loadEnv
 } from "./chunk-2CR762KB.js";
 import {
   createApiClient
-} from "./chunk-ML7XB7Z2.js";
+} from "./chunk-JMRD5WIY.js";
 import {
   findProjectRoot,
   getApiUrl,

package/dist/index.js

@@ -219,39 +219,39 @@ async function main() {
     switch (command) {
       // Resource commands
       case "plan":
-        await import("./resources-FLFD64X2.js").then((m) => m.plan(args.slice(1)));
+        await import("./resources-Z5ZMPWTK.js").then((m) => m.plan(args.slice(1)));
         break;
       case "apply":
-        await import("./resources-FLFD64X2.js").then((m) => m.apply(args.slice(1)));
+        await import("./resources-Z5ZMPWTK.js").then((m) => m.apply(args.slice(1)));
         break;
       case "pull":
-        await import("./resources-FLFD64X2.js").then((m) => m.pull(args.slice(1)));
+        await import("./resources-Z5ZMPWTK.js").then((m) => m.pull(args.slice(1)));
         break;
       case "destroy":
-        await import("./resources-FLFD64X2.js").then((m) => m.destroy(args.slice(1)));
+        await import("./resources-Z5ZMPWTK.js").then((m) => m.destroy(args.slice(1)));
         break;
       case "list":
-        await import("./resources-FLFD64X2.js").then((m) => m.list(args.slice(1)));
+        await import("./resources-Z5ZMPWTK.js").then((m) => m.list(args.slice(1)));
         break;
       case "show":
-        await import("./resources-FLFD64X2.js").then((m) => m.show(args.slice(1)));
+        await import("./resources-Z5ZMPWTK.js").then((m) => m.show(args.slice(1)));
         break;
       case "diff":
-        await import("./resources-FLFD64X2.js").then((m) => m.diff(args.slice(1)));
+        await import("./resources-Z5ZMPWTK.js").then((m) => m.diff(args.slice(1)));
         break;
       // Development
       case "dev":
-        await import("./dev-O6TXHGAK.js").then((m) => m.dev(args.slice(1)));
+        await import("./dev-EQK27BUM.js").then((m) => m.dev(args.slice(1)));
         break;
       case "run":
-        await import("./run-NR3725J2.js").then((m) => m.run(args.slice(1)));
+        await import("./run-LHHX7UBN.js").then((m) => m.run(args.slice(1)));
         break;
       // Project
       case "init":
-        await import("./init-HUV5ZJAE.js").then((m) => m.init(args.slice(1)));
+        await import("./init-UF4JYQSQ.js").then((m) => m.init(args.slice(1)));
         break;
       case "register":
-        await import("./register-OZDOFUPF.js").then((m) => m.register(args.slice(1)));
+        await import("./register-BQCVUPWS.js").then((m) => m.register(args.slice(1)));
         break;
       case "templates":
         await import("./templates-LNUOTNLN.js").then((m) => m.templates(subcommand, args.slice(2)));
@@ -268,7 +268,7 @@ async function main() {
         break;
       // Dependencies
       case "deps":
-        await import("./deps-H4QYLGM7.js").then((m) => m.deps(args.slice(1)));
+        await import("./deps-VTLXKCQ7.js").then((m) => m.deps(args.slice(1)));
         break;
       // Auth
       case "login":

package/dist/{init-HUV5ZJAE.js → init-UF4JYQSQ.js}

@@ -6,8 +6,9 @@ import {
   spinner
 } from "./chunk-BHYDYR75.js";
 import {
-  createApiClient
-} from "./chunk-ML7XB7Z2.js";
+  createApiClient,
+  validateProjectNameLength
+} from "./chunk-JMRD5WIY.js";
 import {
   getToken,
   init_auth,
@@ -280,6 +281,8 @@ async function init(args) {
       initial: "my-app",
       validate: (value) => {
         if (!value) return "Project name is required";
+        const lengthError = validateProjectNameLength(value, "Project name");
+        if (lengthError) return lengthError;
         if (!/^[a-z0-9-]+$/.test(value)) {
           return "Use lowercase letters, numbers, and hyphens only";
         }
@@ -301,6 +304,11 @@ async function init(args) {
     console.log(pc.red("  Error: Project name must use lowercase letters, numbers, and hyphens only"));
     process.exit(1);
   }
+  const projectNameLengthError = validateProjectNameLength(finalProjectName, "Project name");
+  if (projectNameLengthError) {
+    console.log(pc.red(`  Error: ${projectNameLengthError}`));
+    process.exit(1);
+  }
   if (!directory) {
     if (nonInteractive) {
       directory = finalProjectName;

package/dist/{register-OZDOFUPF.js → register-BQCVUPWS.js}

@@ -5,8 +5,9 @@ import {
   spinner
 } from "./chunk-BHYDYR75.js";
 import {
-  createApiClient
-} from "./chunk-ML7XB7Z2.js";
+  createApiClient,
+  validateProjectExternalId
+} from "./chunk-JMRD5WIY.js";
 import {
   findProjectRoot,
   getAppName,
@@ -45,6 +46,11 @@ async function register(args) {
   const projectRoot = findProjectRoot();
   loadEnv(projectRoot);
   const appName = getAppName(projectRoot);
+  const appNameError = validateProjectExternalId(appName);
+  if (appNameError) {
+    console.error(pc.red(`  ${appNameError}`));
+    process.exit(1);
+  }
   const existingId = getProjectId(projectRoot);
   if (existingId && !force) {
     console.log();

package/dist/{resources-FLFD64X2.js → resources-Z5ZMPWTK.js}

@@ -1,16 +1,17 @@
 import {
   deploy
-} from "./chunk-PY4J2U2M.js";
+} from "./chunk-XT4EGGK7.js";
 import {
   syncDeps
-} from "./chunk-S7FJU4GM.js";
+} from "./chunk-RH4FQF6O.js";
 import {
   loadEnv
 } from "./chunk-2CR762KB.js";
 import {
   ApiError,
-  createApiClient
-} from "./chunk-ML7XB7Z2.js";
+  createApiClient,
+  validateCollectionNameLength
+} from "./chunk-JMRD5WIY.js";
 import {
   findProjectRoot,
   getApiUrl,
@@ -1261,6 +1262,11 @@ function loadLocalCollections(platformDir, filterName) {
         errors.push(`${file}: missing name field`);
         continue;
       }
+      const collectionNameError = validateCollectionNameLength(collection.name);
+      if (collectionNameError) {
+        errors.push(`${file}: ${collectionNameError}`);
+        continue;
+      }
       if (/\s/.test(collection.name)) {
         errors.push(`${file}: collection name "${collection.name}" contains spaces - use underscores instead`);
         continue;

package/dist/{run-NR3725J2.js → run-LHHX7UBN.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2CR762KB.js";
 import {
   createApiClient
-} from "./chunk-ML7XB7Z2.js";
+} from "./chunk-JMRD5WIY.js";
 import {
   findProjectRoot,
   getApiUrl,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumerahq/cli",
-  "version": "0.19.20",
+  "version": "0.19.22",
   "description": "CLI for building and deploying Lumera apps",
   "type": "module",
   "engines": {

package/templates/default/pnpm-lock.yaml

@@ -12,8 +12,8 @@ importers:
   .:
     dependencies:
       '@lumerahq/ui':
-        specifier: ^0.9.1
-        version: 0.9.1(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+        specifier: ^0.10.0
+        version: 0.10.0(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/react-query':
         specifier: ^5.90.11
         version: 5.101.0(react@19.2.7)
@@ -457,8 +457,8 @@ packages:
   '@jridgewell/trace-mapping@0.3.31':
     resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
 
-  '@lumerahq/ui@0.9.1':
-    resolution: {integrity: sha512-Mp/Yg5kD71UMniFNchZF7t3E9pz2+G+cUiXOdVgyjMNfvmsVnOH5/jQ5ytNWEol01mVa1QAbo1rCHU78fB/Edw==}
+  '@lumerahq/ui@0.10.0':
+    resolution: {integrity: sha512-dWz7J9jXJBtHiAy7SFWWWhsoLOQ8TXVu7/FWvkW3wIkeTWRUdDreIaYIrOhpnvkH+PrTafiLGybSGrLQP+knSw==}
     peerDependencies:
       react: ^18.0.0 || ^19.0.0
       react-dom: ^18.0.0 || ^19.0.0
@@ -2311,7 +2311,7 @@ snapshots:
       '@jridgewell/resolve-uri': 3.1.2
       '@jridgewell/sourcemap-codec': 1.5.5
 
-  '@lumerahq/ui@0.9.1(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
+  '@lumerahq/ui@0.10.0(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@base-ui/react': 1.5.0(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/react-query': 5.101.0(react@19.2.7)