@lumerahq/cli 0.19.8 → 0.19.9-dev.1

package/dist/{chunk-SMZESQV2.js → chunk-EDRAYUWN.js}

@@ -195,6 +195,12 @@ var ApiClient = class {
       body: JSON.stringify(def)
     });
   }
+  async compileHook(script) {
+    await this.request("/api/pb/hooks/compile", {
+      method: "POST",
+      body: JSON.stringify({ script })
+    });
+  }
   async updateHook(id, def) {
     return this.request(`/api/pb/hooks/${id}`, {
       method: "PATCH",
@@ -355,6 +361,7 @@ function createApiClient(token, baseUrl, projectExternalId) {
 }
 
 export {
+  ApiError,
   isApiErrorStatus,
   createApiClient
 };

package/dist/{chunk-2WDZ3QKS.js → chunk-WWEIOMW6.js}

@@ -4,7 +4,7 @@ import {
 import {
   createApiClient,
   isApiErrorStatus
-} from "./chunk-SMZESQV2.js";
+} from "./chunk-EDRAYUWN.js";
 import {
   findProjectRoot,
   getAppName

package/dist/{deps-53AOYHH2.js → deps-WSZGH35V.js}

@@ -2,9 +2,9 @@ import {
   deps,
   projectResourceDepsEnabled,
   syncDeps
-} from "./chunk-2WDZ3QKS.js";
+} from "./chunk-WWEIOMW6.js";
 import "./chunk-2CR762KB.js";
-import "./chunk-SMZESQV2.js";
+import "./chunk-EDRAYUWN.js";
 import "./chunk-ZH3NVYEQ.js";
 import "./chunk-FJFIWC7G.js";
 import "./chunk-PNKVD2UK.js";

package/dist/{dev-RENAXSGD.js → dev-3SDNIPWA.js}

@@ -4,13 +4,13 @@ import {
 import {
   projectResourceDepsEnabled,
   syncDeps
-} from "./chunk-2WDZ3QKS.js";
+} from "./chunk-WWEIOMW6.js";
 import {
   loadEnv
 } from "./chunk-2CR762KB.js";
 import {
   createApiClient
-} from "./chunk-SMZESQV2.js";
+} from "./chunk-EDRAYUWN.js";
 import {
   findProjectRoot,
   getApiUrl,

package/dist/index.js

@@ -219,39 +219,39 @@ async function main() {
     switch (command) {
       // Resource commands
       case "plan":
-        await import("./resources-EPCEYCFY.js").then((m) => m.plan(args.slice(1)));
+        await import("./resources-5ELZGJOH.js").then((m) => m.plan(args.slice(1)));
         break;
       case "apply":
-        await import("./resources-EPCEYCFY.js").then((m) => m.apply(args.slice(1)));
+        await import("./resources-5ELZGJOH.js").then((m) => m.apply(args.slice(1)));
         break;
       case "pull":
-        await import("./resources-EPCEYCFY.js").then((m) => m.pull(args.slice(1)));
+        await import("./resources-5ELZGJOH.js").then((m) => m.pull(args.slice(1)));
         break;
       case "destroy":
-        await import("./resources-EPCEYCFY.js").then((m) => m.destroy(args.slice(1)));
+        await import("./resources-5ELZGJOH.js").then((m) => m.destroy(args.slice(1)));
         break;
       case "list":
-        await import("./resources-EPCEYCFY.js").then((m) => m.list(args.slice(1)));
+        await import("./resources-5ELZGJOH.js").then((m) => m.list(args.slice(1)));
         break;
       case "show":
-        await import("./resources-EPCEYCFY.js").then((m) => m.show(args.slice(1)));
+        await import("./resources-5ELZGJOH.js").then((m) => m.show(args.slice(1)));
         break;
       case "diff":
-        await import("./resources-EPCEYCFY.js").then((m) => m.diff(args.slice(1)));
+        await import("./resources-5ELZGJOH.js").then((m) => m.diff(args.slice(1)));
         break;
       // Development
       case "dev":
-        await import("./dev-RENAXSGD.js").then((m) => m.dev(args.slice(1)));
+        await import("./dev-3SDNIPWA.js").then((m) => m.dev(args.slice(1)));
         break;
       case "run":
-        await import("./run-XWXUBWWH.js").then((m) => m.run(args.slice(1)));
+        await import("./run-YUL73K5O.js").then((m) => m.run(args.slice(1)));
         break;
       // Project
       case "init":
-        await import("./init-J5BNFCSP.js").then((m) => m.init(args.slice(1)));
+        await import("./init-FW4RFXLL.js").then((m) => m.init(args.slice(1)));
         break;
       case "register":
-        await import("./register-ZYUFXURK.js").then((m) => m.register(args.slice(1)));
+        await import("./register-HR2QQFWX.js").then((m) => m.register(args.slice(1)));
         break;
       case "templates":
         await import("./templates-LNUOTNLN.js").then((m) => m.templates(subcommand, args.slice(2)));
@@ -268,7 +268,7 @@ async function main() {
         break;
       // Dependencies
       case "deps":
-        await import("./deps-53AOYHH2.js").then((m) => m.deps(args.slice(1)));
+        await import("./deps-WSZGH35V.js").then((m) => m.deps(args.slice(1)));
         break;
       // Auth
       case "login":

package/dist/{init-J5BNFCSP.js → init-FW4RFXLL.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-BHYDYR75.js";
 import {
   createApiClient
-} from "./chunk-SMZESQV2.js";
+} from "./chunk-EDRAYUWN.js";
 import {
   getToken,
   init_auth,

package/dist/{register-ZYUFXURK.js → register-HR2QQFWX.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-BHYDYR75.js";
 import {
   createApiClient
-} from "./chunk-SMZESQV2.js";
+} from "./chunk-EDRAYUWN.js";
 import {
   findProjectRoot,
   getAppName,

package/dist/{resources-EPCEYCFY.js → resources-5ELZGJOH.js}

@@ -4,13 +4,14 @@ import {
 import {
   projectResourceDepsEnabled,
   syncDeps
-} from "./chunk-2WDZ3QKS.js";
+} from "./chunk-WWEIOMW6.js";
 import {
   loadEnv
 } from "./chunk-2CR762KB.js";
 import {
+  ApiError,
   createApiClient
-} from "./chunk-SMZESQV2.js";
+} from "./chunk-EDRAYUWN.js";
 import {
   findProjectRoot,
   getApiUrl,
@@ -119,6 +120,212 @@ var collectionSchemaRule = {
   }
 };
 
+// src/lib/hooks-parse.ts
+var VALID_HOOK_TRIGGERS = [
+  "before_create",
+  "after_create",
+  "before_update",
+  "after_update",
+  "before_delete",
+  "after_delete"
+];
+var KNOWN_HOOK_CONFIG_KEYS = /* @__PURE__ */ new Set([
+  "external_id",
+  "collection",
+  "trigger",
+  "name",
+  "enabled",
+  "metadata"
+]);
+var CONFIG_BLOCK_RE = /export\s+const\s+config\s*[=:]\s*(\{[\s\S]*?\});?/;
+function extractConfigBody(content) {
+  const m = content.match(CONFIG_BLOCK_RE);
+  return m ? m[1] : null;
+}
+function extractTopLevelConfigKeys(configBody) {
+  if (!configBody.startsWith("{") || !configBody.endsWith("}")) return [];
+  const inner = configBody.slice(1, -1);
+  let stripped = "";
+  let depth = 0;
+  let inString = null;
+  let prev = "";
+  for (const ch of inner) {
+    if (inString) {
+      if (ch === inString && prev !== "\\") inString = null;
+      prev = ch;
+      continue;
+    }
+    if (ch === '"' || ch === "'" || ch === "`") {
+      inString = ch;
+      prev = ch;
+      continue;
+    }
+    if (ch === "{" || ch === "[") {
+      depth++;
+      prev = ch;
+      continue;
+    }
+    if (ch === "}" || ch === "]") {
+      depth--;
+      prev = ch;
+      continue;
+    }
+    if (depth === 0) stripped += ch;
+    prev = ch;
+  }
+  const keys = [];
+  const keyRe = /(?:^|,)\s*(?:['"]([^'"]+)['"]|(\w+))\s*:/g;
+  let m;
+  while ((m = keyRe.exec(stripped)) !== null) {
+    keys.push(m[1] || m[2]);
+  }
+  return keys;
+}
+function parseHookConfig(content) {
+  const configMatch = content.match(CONFIG_BLOCK_RE);
+  if (!configMatch) return null;
+  const externalId = configMatch[1].match(/external_id\s*:\s*['"]([^'"]+)['"]/)?.[1];
+  const collection = configMatch[1].match(/collection\s*:\s*['"]([^'"]+)['"]/)?.[1];
+  const trigger = configMatch[1].match(/trigger\s*:\s*['"]([^'"]+)['"]/)?.[1];
+  const enabled = configMatch[1].match(/enabled\s*:\s*(true|false)/)?.[1];
+  const name = configMatch[1].match(/name\s*:\s*['"]([^'"]+)['"]/)?.[1];
+  if (!collection || !trigger) return null;
+  const hook = {
+    external_id: externalId || "",
+    collection,
+    trigger,
+    enabled: enabled !== "false"
+  };
+  if (name) hook.name = name;
+  const metadataMatch = configMatch[1].match(/metadata\s*:\s*(\{[^}]*\})/);
+  if (metadataMatch) {
+    try {
+      const metaStr = metadataMatch[1].replace(/'/g, '"').replace(/(\w+)\s*:/g, '"$1":').replace(/,\s*}/g, "}");
+      hook.metadata = JSON.parse(metaStr);
+    } catch {
+    }
+  }
+  return hook;
+}
+function extractHookScript(content) {
+  const handlerMatch = content.match(
+    /export\s+default\s+(?:async\s+)?function\s*(?:\w+)?\s*\([^)]*\)\s*\{([\s\S]*)\}[\s\n]*$/
+  );
+  if (handlerMatch) {
+    return handlerMatch[1].trim();
+  }
+  const simpleMatch = content.match(
+    /export\s+default\s+async\s+function[^{]*\{([\s\S]*)\}[\s\n]*$/
+  );
+  if (simpleMatch) {
+    return simpleMatch[1].trim();
+  }
+  return content.replace(/export\s+const\s+config[\s\S]*?;/, "").trim();
+}
+function hasDefaultHandler(content) {
+  return /export\s+default\s+(?:async\s+)?function\b/.test(content);
+}
+
+// src/lib/lint/rules/hook-verify.ts
+function error2(target, message) {
+  return {
+    ruleId: "hook-verify",
+    target,
+    severity: "error",
+    message
+  };
+}
+var hookVerifyRule = {
+  id: "hook-verify",
+  description: "Validates hook file structure (config export, trigger, known keys, default handler) and verifies the script compiles via the backend.",
+  appliesTo: ["hook"],
+  async check(target, ctx) {
+    const config = parseHookConfig(target.source);
+    if (!config) {
+      return [
+        error2(
+          target,
+          "Missing or unparseable `export const config = {...}`. Hook files must export a config object with at least `collection` and `trigger`."
+        )
+      ];
+    }
+    const errors = [];
+    if (!config.external_id && !ctx.appName) {
+      errors.push(
+        error2(
+          target,
+          "Hook config is missing `external_id` and no app name is configured to derive one from the file name."
+        )
+      );
+    }
+    if (!hasDefaultHandler(target.source)) {
+      errors.push(
+        error2(
+          target,
+          "Missing default exported handler. Hook files must `export default function(ctx) { ... }` (async allowed)."
+        )
+      );
+    }
+    if (!VALID_HOOK_TRIGGERS.includes(config.trigger)) {
+      errors.push(
+        error2(
+          target,
+          `Invalid trigger '${config.trigger}'. Must be one of: ${VALID_HOOK_TRIGGERS.join(", ")}.`
+        )
+      );
+    }
+    const configBody = extractConfigBody(target.source);
+    if (configBody) {
+      const keys = extractTopLevelConfigKeys(configBody);
+      for (const key of keys) {
+        if (!KNOWN_HOOK_CONFIG_KEYS.has(key)) {
+          errors.push(
+            error2(
+              target,
+              `Unknown config key '${key}'. Known keys: ${[...KNOWN_HOOK_CONFIG_KEYS].join(", ")}.`
+            )
+          );
+        }
+      }
+      if (keys.includes("enabled")) {
+        const m = configBody.match(/enabled\s*:\s*([^,}\n]+)/);
+        const raw = m ? m[1].trim().replace(/,\s*$/, "").trim() : "";
+        if (raw !== "true" && raw !== "false") {
+          errors.push(
+            error2(
+              target,
+              `Invalid 'enabled' value '${raw}'. Must be a literal \`true\` or \`false\`.`
+            )
+          );
+        }
+      }
+      if (keys.includes("metadata") && !config.metadata) {
+        errors.push(
+          error2(
+            target,
+            "Could not parse 'metadata'. It must be an inline object literal with simple key/value pairs (e.g. `{ threshold: 100 }`); nested objects and non-literal values are not supported."
+          )
+        );
+      }
+    }
+    if (errors.length > 0) return errors;
+    let script = extractHookScript(target.source);
+    if (ctx.appName) {
+      script = script.replaceAll("{{app}}", ctx.appName);
+    }
+    if (!ctx.api) {
+      return [];
+    }
+    try {
+      await ctx.api.compileHook(script);
+    } catch (err) {
+      const detail = err instanceof ApiError ? err.body.trim() : err instanceof Error ? err.message : String(err);
+      return [error2(target, `Hook failed to compile on the backend: ${detail}`)];
+    }
+    return [];
+  }
+};
+
 // src/lib/lint/rules/llm-import.ts
 var FROM_LUMERA_IMPORT_LLM = /^\s*from\s+lumera\s+import\s+\(?\s*(?:[\w\s,]*?\b)?llm\b/;
 var LUMERA_LLM_SUBMODULE = /^\s*(?:from\s+lumera\.llm\b|import\s+lumera\.llm\b)/;
@@ -162,7 +369,7 @@ var llmImportRule = {
 };
 
 // src/lib/lint/registry.ts
-var ALL_RULES = [collectionSchemaRule, llmImportRule];
+var ALL_RULES = [collectionSchemaRule, hookVerifyRule, llmImportRule];
 
 // src/lib/lint/format.ts
 import { relative } from "path";
@@ -207,13 +414,14 @@ function serializeLintWarnings(warnings, projectRoot) {
 }
 
 // src/lib/lint/index.ts
-function runLint(ctx) {
+async function runLint(ctx) {
   const out = [];
   for (const rule of ALL_RULES) {
     for (const t of ctx.targets) {
       if (!rule.appliesTo.includes(t.kind)) continue;
       try {
-        out.push(...rule.check(t, ctx));
+        const result = await rule.check(t, ctx);
+        out.push(...result);
       } catch (err) {
         if (process.env.LUMERA_DEBUG) {
           console.error(`[lint] rule "${rule.id}" threw on ${t.filePath}:`, err);
@@ -247,12 +455,31 @@ function buildCollectionTargets(platformDir, _filterName) {
   }
   return targets;
 }
+function buildHookTargets(platformDir, filterName) {
+  const hooksDir = join(platformDir, "hooks");
+  if (!existsSync(hooksDir)) return [];
+  const targets = [];
+  for (const entry of readdirSync(hooksDir, { withFileTypes: true })) {
+    if (!entry.isFile()) continue;
+    if (!entry.name.endsWith(".js") && !entry.name.endsWith(".ts")) continue;
+    const base = entry.name.replace(/\.(js|ts)$/, "");
+    if (filterName && base !== filterName) continue;
+    const filePath = join(hooksDir, entry.name);
+    targets.push({
+      kind: "hook",
+      name: base,
+      filePath,
+      source: readFileSync(filePath, "utf-8")
+    });
+  }
+  return targets;
+}
 
 // src/commands/resources.ts
 init_auth();
-function safeLint(projectRoot, localAutomations) {
+async function safeLint(projectRoot, localAutomations) {
   try {
-    return runLint({ projectRoot, targets: buildAutomationTargets(localAutomations) });
+    return await runLint({ projectRoot, targets: buildAutomationTargets(localAutomations) });
   } catch (err) {
     if (process.env.LUMERA_DEBUG) console.error("[lint] pass failed:", err);
     return [];
@@ -265,13 +492,22 @@ function safePrintLint(warnings, projectRoot) {
     if (process.env.LUMERA_DEBUG) console.error("[lint] print failed:", err);
   }
 }
-function lintCollectionFiles(projectRoot, platformDir, filterName) {
-  const issues = runLint({ projectRoot, targets: buildCollectionTargets(platformDir, filterName) });
+async function lintCollectionFiles(projectRoot, platformDir, filterName) {
+  const issues = await runLint({ projectRoot, targets: buildCollectionTargets(platformDir, filterName) });
   const errors = issues.filter((issue) => issue.severity === "error");
   if (errors.length === 0) return;
   printLintWarnings(issues, projectRoot);
   throw new Error(`Found ${errors.length} collection lint error(s)`);
 }
+async function lintHookFiles(api, projectRoot, platformDir, appName, filterName) {
+  const targets = buildHookTargets(platformDir, filterName);
+  if (targets.length === 0) return;
+  const issues = await runLint({ projectRoot, targets, api, appName });
+  const errors = issues.filter((issue) => issue.severity === "error");
+  if (errors.length === 0) return;
+  printLintWarnings(issues, projectRoot);
+  throw new Error(`Found ${errors.length} hook lint error(s)`);
+}
 var PACKAGE_MANAGERS = ["bun", "pnpm", "yarn", "npm"];
 var PACKAGE_MANAGER_VALUE_FLAGS = /* @__PURE__ */ new Set(["--package-manager"]);
 function isPackageManager(value) {
@@ -970,47 +1206,6 @@ function loadLocalHooks(platformDir, filterName, appName) {
   }
   return hooks;
 }
-function parseHookConfig(content) {
-  const configMatch = content.match(/export\s+const\s+config\s*[=:]\s*(\{[\s\S]*?\});?/);
-  if (!configMatch) return null;
-  const externalId = configMatch[1].match(/external_id\s*:\s*['"]([^'"]+)['"]/)?.[1];
-  const collection = configMatch[1].match(/collection\s*:\s*['"]([^'"]+)['"]/)?.[1];
-  const trigger = configMatch[1].match(/trigger\s*:\s*['"]([^'"]+)['"]/)?.[1];
-  const enabled = configMatch[1].match(/enabled\s*:\s*(true|false)/)?.[1];
-  const name = configMatch[1].match(/name\s*:\s*['"]([^'"]+)['"]/)?.[1];
-  if (!collection || !trigger) return null;
-  const hook = {
-    external_id: externalId || "",
-    collection,
-    trigger,
-    enabled: enabled !== "false"
-  };
-  if (name) hook.name = name;
-  const metadataMatch = configMatch[1].match(/metadata\s*:\s*(\{[^}]*\})/);
-  if (metadataMatch) {
-    try {
-      const metaStr = metadataMatch[1].replace(/'/g, '"').replace(/(\w+)\s*:/g, '"$1":').replace(/,\s*}/g, "}");
-      hook.metadata = JSON.parse(metaStr);
-    } catch {
-    }
-  }
-  return hook;
-}
-function extractHookScript(content) {
-  const handlerMatch = content.match(
-    /export\s+default\s+(?:async\s+)?function\s*(?:\w+)?\s*\([^)]*\)\s*\{([\s\S]*)\}[\s\n]*$/
-  );
-  if (handlerMatch) {
-    return handlerMatch[1].trim();
-  }
-  const simpleMatch = content.match(
-    /export\s+default\s+async\s+function[^{]*\{([\s\S]*)\}[\s\n]*$/
-  );
-  if (simpleMatch) {
-    return simpleMatch[1].trim();
-  }
-  return content.replace(/export\s+const\s+config[\s\S]*?;/, "").trim();
-}
 function convertCollectionToApiFormat(local) {
   const schema = local.fields.map((field) => {
     const apiField = {
@@ -2686,7 +2881,10 @@ async function plan(args) {
   console.log(pc2.dim("  Comparing local files to remote state..."));
   console.log();
   if (!type || type === "collections") {
-    lintCollectionFiles(projectRoot, platformDir, name || void 0);
+    await lintCollectionFiles(projectRoot, platformDir, name || void 0);
+  }
+  if (!type || type === "hooks") {
+    await lintHookFiles(api, projectRoot, platformDir, appName, name || void 0);
   }
   await syncDeps(projectRoot, { ignorePermissionDenied: true });
   const allChanges = [];
@@ -2733,7 +2931,7 @@ async function plan(args) {
       allChanges.push(...changes);
     }
   }
-  const lintWarnings = safeLint(projectRoot, localAutomations);
+  const lintWarnings = await safeLint(projectRoot, localAutomations);
   if (allChanges.length === 0) {
     if (jsonOutput) {
       console.log(JSON.stringify({ changes: [], warnings: [], lintWarnings: serializeLintWarnings(lintWarnings, projectRoot) }));
@@ -2828,7 +3026,10 @@ async function apply(args) {
     return;
   }
   if (!type || type === "collections") {
-    lintCollectionFiles(projectRoot, platformDir, name || void 0);
+    await lintCollectionFiles(projectRoot, platformDir, name || void 0);
+  }
+  if (!type || type === "hooks") {
+    await lintHookFiles(api, projectRoot, platformDir, appName, name || void 0);
   }
   await syncDeps(projectRoot, { ignorePermissionDenied: true });
   let collections;
@@ -2870,7 +3071,7 @@ async function apply(args) {
     console.log();
     console.log(pc2.green("  \u2713 Nothing to apply \u2014 local and remote are in sync."));
     console.log();
-    safePrintLint(safeLint(projectRoot, localAutomations), projectRoot);
+    safePrintLint(await safeLint(projectRoot, localAutomations), projectRoot);
     return;
   }
   console.log();
@@ -2898,7 +3099,7 @@ async function apply(args) {
     console.log(pc2.dim("  No infrastructure changes \u2014 deploying app only."));
     console.log();
   }
-  safePrintLint(safeLint(projectRoot, localAutomations), projectRoot);
+  safePrintLint(await safeLint(projectRoot, localAutomations), projectRoot);
   if (!autoConfirm && allChanges.length > 0) {
     const { confirm } = await prompts({
       type: "confirm",

package/dist/{run-XWXUBWWH.js → run-YUL73K5O.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2CR762KB.js";
 import {
   createApiClient
-} from "./chunk-SMZESQV2.js";
+} from "./chunk-EDRAYUWN.js";
 import {
   findProjectRoot,
   getApiUrl,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumerahq/cli",
-  "version": "0.19.8",
+  "version": "0.19.9-dev.1",
   "description": "CLI for building and deploying Lumera apps",
   "type": "module",
   "engines": {