@lumerahq/cli 0.24.5 → 0.24.7-dev.0

package/dist/{chunk-VL5GDJKU.js → chunk-GFLMEXIK.js}

@@ -1,14 +1,21 @@
 import {
-  getBaseUrl
+  userContextHeaders
+} from "./chunk-FHHWIV4C.js";
+import {
+  getBaseUrl,
+  getProjectId,
+  getToken,
+  init_auth
 } from "./chunk-JLVVHTBY.js";
 import {
   fetchWithRetry
 } from "./chunk-FJFIWC7G.js";
 
 // src/lib/skills.ts
+init_auth();
 import { createHash } from "crypto";
-import { existsSync, mkdirSync, readdirSync, readFileSync, symlinkSync, lstatSync, statSync, writeFileSync } from "fs";
-import { join, relative } from "path";
+import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, symlinkSync, lstatSync, statSync, writeFileSync } from "fs";
+import { dirname, join, relative } from "path";
 import pc from "picocolors";
 function slugToDirName(slug) {
   return slug.replace(/-/g, "_");
@@ -20,7 +27,19 @@ function slugToFilename(slug) {
   return `${slug.replace(/-/g, "_")}.md`;
 }
 function hashContent(content) {
-  return createHash("md5").update(content).digest("hex");
+  return createHash("sha256").update(content).digest("hex");
+}
+var SKILLS_HASH_MANIFEST_PATH = join(".lumera", "skills-hashes.json");
+function writeSkillsHashManifest(projectRoot, skills) {
+  const hashes = {};
+  for (const skill of [...skills].sort((a, b) => a.slug < b.slug ? -1 : a.slug > b.slug ? 1 : 0)) {
+    hashes[skill.slug] = hashContent(skill.content);
+  }
+  const manifestPath = join(projectRoot, SKILLS_HASH_MANIFEST_PATH);
+  mkdirSync(dirname(manifestPath), { recursive: true });
+  writeFileSync(manifestPath, `${JSON.stringify({ version: 1, skills: hashes }, null, 2)}
+`);
+  rmSync(join(projectRoot, ".lumera", "skills-content-hash"), { force: true });
 }
 async function fetchSkillsList() {
   const baseUrl = getBaseUrl();
@@ -44,6 +63,58 @@ async function fetchSkillContent(slug) {
   }
   return mdRes.text();
 }
+async function fetchEffectiveSkills(projectRoot) {
+  const baseUrl = getBaseUrl();
+  const token = getToken(projectRoot);
+  const projectId = getProjectId(projectRoot)?.trim();
+  const url = new URL(`${baseUrl}/api/skills/effective`);
+  if (projectId) url.searchParams.set("project_id", projectId);
+  const response = await fetchWithRetry(url.toString(), {
+    headers: {
+      Authorization: `Bearer ${token}`,
+      "X-Lumera-Client": "lumera-cli",
+      ...userContextHeaders()
+    }
+  });
+  if (!response.ok) {
+    const detail = (await response.text()).trim();
+    throw new Error(`Failed to fetch effective skills: ${response.status}${detail ? ` ${detail}` : ""}`);
+  }
+  const payload = await response.json();
+  return (payload.skills ?? []).map((skill) => ({
+    ...skill,
+    summary: skill.summary || skill.name,
+    content_hash: skill.content_hash || hashContent(skill.content)
+  }));
+}
+async function fetchPublicSkillFiles() {
+  const skills = await fetchSkillsList();
+  const results = await Promise.allSettled(
+    skills.map(async (skill) => ({
+      ...skill,
+      content: await fetchSkillContent(skill.slug)
+    }))
+  );
+  const out = [];
+  for (const result of results) {
+    if (result.status !== "fulfilled" || !result.value.content) continue;
+    out.push({
+      ...result.value,
+      content: result.value.content,
+      content_hash: hashContent(result.value.content),
+      managed: true
+    });
+  }
+  return out;
+}
+async function fetchSkillsForProject(projectRoot) {
+  try {
+    getToken(projectRoot);
+  } catch {
+    return fetchPublicSkillFiles();
+  }
+  return fetchEffectiveSkills(projectRoot);
+}
 function getLocalSkills(skillsDir) {
   const localSkills = /* @__PURE__ */ new Map();
   if (!existsSync(skillsDir)) {
@@ -126,37 +197,30 @@ function ensureSkillSymlinks(projectRoot) {
 }
 async function installAllSkills(targetDir, options) {
   const verbose = options?.verbose ?? false;
-  const skills = await fetchSkillsList();
+  const skills = await fetchSkillsForProject(targetDir);
   const skillsDir = join(targetDir, ".agents", "skills");
   mkdirSync(skillsDir, { recursive: true });
-  const results = await Promise.allSettled(
-    skills.map(async (skill) => {
-      const content = await fetchSkillContent(skill.slug);
-      return { skill, content };
-    })
-  );
   let installed = 0;
   let failed = 0;
-  for (const result of results) {
-    if (result.status === "fulfilled" && result.value.content) {
-      const { skill, content } = result.value;
-      const dirName = slugToDirName(skill.slug);
-      const skillDir = join(skillsDir, dirName);
-      mkdirSync(skillDir, { recursive: true });
-      writeFileSync(join(skillDir, "SKILL.md"), content);
-      if (verbose) {
-        console.log(pc.green("  \u2713"), pc.dim(`${dirName}/SKILL.md`));
-      }
-      installed++;
-    } else {
+  for (const skill of skills) {
+    if (!skill.content) {
+      failed++;
       if (verbose) {
-        const slug = result.status === "fulfilled" ? result.value.skill.slug : "unknown";
-        console.log(pc.yellow("  \u26A0"), pc.dim(`Failed to fetch ${slug}`));
+        console.log(pc.yellow("  \u26A0"), pc.dim(`Missing content for ${skill.slug}`));
       }
-      failed++;
+      continue;
+    }
+    const dirName = slugToDirName(skill.slug);
+    const skillDir = join(skillsDir, dirName);
+    mkdirSync(skillDir, { recursive: true });
+    writeFileSync(join(skillDir, "SKILL.md"), skill.content);
+    if (verbose) {
+      console.log(pc.green("  \u2713"), pc.dim(`${dirName}/SKILL.md`));
     }
+    installed++;
   }
   ensureSkillSymlinks(targetDir);
+  if (failed === 0) writeSkillsHashManifest(targetDir, skills);
   return { installed, failed };
 }
 var SKILLS_START_MARKER = "<!-- LUMERA_SKILLS_START -->";
@@ -217,8 +281,9 @@ export {
   slugToDirName,
   slugToFilename,
   hashContent,
+  writeSkillsHashManifest,
   fetchSkillsList,
-  fetchSkillContent,
+  fetchSkillsForProject,
   getLocalSkills,
   ensureSkillSymlinks,
   installAllSkills,

package/dist/index.js

@@ -227,25 +227,25 @@ async function main() {
     switch (command) {
       // Resource commands
       case "plan":
-        await import("./resources-XQHHIQYV.js").then((m) => m.plan(args.slice(1)));
+        await import("./resources-R53XKJL2.js").then((m) => m.plan(args.slice(1)));
         break;
       case "apply":
-        await import("./resources-XQHHIQYV.js").then((m) => m.apply(args.slice(1)));
+        await import("./resources-R53XKJL2.js").then((m) => m.apply(args.slice(1)));
         break;
       case "pull":
-        await import("./resources-XQHHIQYV.js").then((m) => m.pull(args.slice(1)));
+        await import("./resources-R53XKJL2.js").then((m) => m.pull(args.slice(1)));
         break;
       case "destroy":
-        await import("./resources-XQHHIQYV.js").then((m) => m.destroy(args.slice(1)));
+        await import("./resources-R53XKJL2.js").then((m) => m.destroy(args.slice(1)));
         break;
       case "list":
-        await import("./resources-XQHHIQYV.js").then((m) => m.list(args.slice(1)));
+        await import("./resources-R53XKJL2.js").then((m) => m.list(args.slice(1)));
         break;
       case "show":
-        await import("./resources-XQHHIQYV.js").then((m) => m.show(args.slice(1)));
+        await import("./resources-R53XKJL2.js").then((m) => m.show(args.slice(1)));
         break;
       case "diff":
-        await import("./resources-XQHHIQYV.js").then((m) => m.diff(args.slice(1)));
+        await import("./resources-R53XKJL2.js").then((m) => m.diff(args.slice(1)));
         break;
       // Development
       case "dev":
@@ -256,7 +256,7 @@ async function main() {
         break;
       // Project
       case "init":
-        await import("./init-B4DXTC7L.js").then((m) => m.init(args.slice(1)));
+        await import("./init-TRZMDKYB.js").then((m) => m.init(args.slice(1)));
         break;
       case "register":
         await import("./register-HRLBT4FI.js").then((m) => m.register(args.slice(1)));
@@ -272,7 +272,7 @@ async function main() {
         break;
       // Skills
       case "skills":
-        await import("./skills-PXZHERAS.js").then((m) => m.skills(subcommand, args.slice(2)));
+        await import("./skills-O3NZFM7V.js").then((m) => m.skills(subcommand, args.slice(2)));
         break;
       // Dependencies
       case "deps":

package/dist/{init-B4DXTC7L.js → init-TRZMDKYB.js}

@@ -1,7 +1,7 @@
 import {
   installAllSkills,
   syncClaudeMd
-} from "./chunk-VL5GDJKU.js";
+} from "./chunk-GFLMEXIK.js";
 import {
   spinner
 } from "./chunk-BHYDYR75.js";
@@ -456,6 +456,18 @@ async function init(args) {
       setProjectId(targetDir, project.id);
       stopRegister(pc.green("\u2713") + pc.dim(` Project registered (${project.id})`));
       registered = true;
+      const stopProjectSkills = spinner("Syncing project skills...");
+      try {
+        const { installed, failed } = await installAllSkills(targetDir);
+        syncClaudeMd(targetDir);
+        if (failed > 0) {
+          stopProjectSkills(pc.yellow("\u26A0") + pc.dim(` Synced ${installed} project skills (${failed} failed)`));
+        } else {
+          stopProjectSkills(pc.green("\u2713") + pc.dim(` ${installed} project skills synced`));
+        }
+      } catch (skillError) {
+        stopProjectSkills(pc.yellow("\u26A0") + pc.dim(` Failed to sync project skills: ${skillError}`));
+      }
     } catch (e) {
       stopRegister(pc.yellow("\u26A0") + pc.dim(` Could not register project: ${e instanceof Error ? e.message : e}`));
     }

package/dist/{resources-XQHHIQYV.js → resources-R53XKJL2.js}

@@ -1667,10 +1667,12 @@ function normalizeCollectionSearch(search) {
     } : {}
   });
 }
-async function planCollections(api, localCollections, appName) {
+async function planCollections(api, localCollections, appName, projectId) {
   const changes = [];
   const remoteCollections = await api.listCollections();
-  const remoteById = new Map(remoteCollections.map((c) => [c.id, c]));
+  const remoteById = new Map(
+    remoteCollections.filter((collection) => !projectId || !collection.project_id || collection.project_id === projectId).map((collection) => [collection.id, collection])
+  );
   for (const local of localCollections) {
     let remote = remoteById.get(local.id);
     if (!remote) {
@@ -1684,7 +1686,7 @@ async function planCollections(api, localCollections, appName) {
             break;
           }
         } catch (error3) {
-          if (!isApiErrorStatus(error3, 404)) throw error3;
+          if (!isApiErrorStatus(error3, 404) && !isApiErrorStatus(error3, 403)) throw error3;
         }
       }
     }
@@ -3281,7 +3283,7 @@ async function plan(args) {
   if (!type || type === "collections") {
     const localCollections = loadLocalCollections(platformDir, name || void 0);
     if (localCollections.length > 0) {
-      const changes = await planCollections(api, localCollections, appName);
+      const changes = await planCollections(api, localCollections, appName, projectId);
       allChanges.push(...changes);
     }
   }
@@ -3428,7 +3430,7 @@ async function apply(args) {
   const localHooks = !type || type === "hooks" ? loadLocalHooks(platformDir, name || void 0, appName) : [];
   const localAgents = !type || type === "agents" ? loadLocalAgents(platformDir, name || void 0, appName) : [];
   const localMailboxes = !type || type === "mailboxes" ? loadLocalMailboxes(platformDir, name || void 0) : [];
-  if (localCollections.length > 0) allChanges.push(...await planCollections(api, localCollections, appName));
+  if (localCollections.length > 0) allChanges.push(...await planCollections(api, localCollections, appName, projectId));
   if (localAutomations.length > 0) allChanges.push(...await planAutomations(api, localAutomations, projectId));
   if (localHooks.length > 0) allChanges.push(...await planHooks(api, localHooks, collections, projectId));
   if (localAgents.length > 0) allChanges.push(...await planAgents(api, localAgents, projectId));

package/dist/{skills-PXZHERAS.js → skills-O3NZFM7V.js}

@@ -1,14 +1,16 @@
 import {
   ensureSkillSymlinks,
-  fetchSkillContent,
+  fetchSkillsForProject,
   fetchSkillsList,
   getLocalSkills,
   hashContent,
   installAllSkills,
   slugToDirName,
   slugToFilename,
-  syncClaudeMd
-} from "./chunk-VL5GDJKU.js";
+  syncClaudeMd,
+  writeSkillsHashManifest
+} from "./chunk-GFLMEXIK.js";
+import "./chunk-FHHWIV4C.js";
 import "./chunk-JLVVHTBY.js";
 import "./chunk-FJFIWC7G.js";
 import "./chunk-PNKVD2UK.js";
@@ -27,32 +29,25 @@ function findProjectRoot() {
   }
   return null;
 }
-async function computeDiff(skillsDir, filterSlug) {
-  const skills2 = await fetchSkillsList();
+async function computeDiff(projectRoot, skillsDir, filterSlug) {
+  const skills2 = await fetchSkillsForProject(projectRoot);
   const localSkills = getLocalSkills(skillsDir);
   const remoteSkillSlugs = /* @__PURE__ */ new Set();
   const diff = {
+    resolved: skills2,
     added: [],
     updated: [],
     removed: [],
     unchanged: []
   };
   const skillsToCheck = filterSlug ? skills2.filter((skill) => skill.slug === filterSlug) : skills2;
-  const remoteResults = await Promise.allSettled(
-    skillsToCheck.map(async (skill) => {
-      const content = await fetchSkillContent(skill.slug);
-      return { skill, content };
-    })
-  );
-  for (const result of remoteResults) {
-    if (result.status !== "fulfilled" || !result.value.content) continue;
-    const { skill, content } = result.value;
+  for (const skill of skillsToCheck) {
     remoteSkillSlugs.add(skill.slug);
     const localHash = localSkills.get(skill.slug);
     if (!localHash) {
       diff.added.push(skill);
     } else {
-      const remoteHash = hashContent(content);
+      const remoteHash = hashContent(skill.content);
       if (localHash !== remoteHash) {
         diff.updated.push(skill);
       } else {
@@ -261,10 +256,7 @@ async function update(args, flags) {
   }
   const skillsDir = join(projectRoot, ".agents", "skills");
   if (!existsSync(skillsDir)) {
-    console.log(pc.yellow("  \u26A0"), "No skills installed yet");
-    console.log(pc.dim('  Run "lumera skills install" first'));
-    console.log();
-    return;
+    mkdirSync(skillsDir, { recursive: true });
   }
   if (verbose) {
     console.log(pc.dim(`  Project root: ${projectRoot}`));
@@ -275,13 +267,14 @@ async function update(args, flags) {
     console.log();
   }
   try {
-    const diff = await computeDiff(skillsDir, filterSlug);
+    const diff = await computeDiff(projectRoot, skillsDir, filterSlug);
     const hasChanges = diff.added.length > 0 || diff.updated.length > 0 || diff.removed.length > 0;
     if (!hasChanges) {
       console.log(pc.green("  \u2713"), "All skills are up to date");
       if (verbose && diff.unchanged.length > 0) {
         console.log(pc.dim(`  ${diff.unchanged.length} skills unchanged`));
       }
+      if (!filterSlug) writeSkillsHashManifest(projectRoot, diff.resolved);
       syncClaudeMd(projectRoot);
       console.log();
       return;
@@ -329,20 +322,11 @@ async function update(args, flags) {
     }
     console.log(pc.dim("  Applying changes..."));
     console.log();
-    const toFetch = [...diff.added, ...diff.updated];
-    const fetchResults = await Promise.allSettled(
-      toFetch.map(async (skill) => {
-        const content = await fetchSkillContent(skill.slug);
-        return { skill, content };
-      })
-    );
-    for (const result of fetchResults) {
-      if (result.status !== "fulfilled" || !result.value.content) continue;
-      const { skill, content } = result.value;
+    for (const skill of [...diff.added, ...diff.updated]) {
       const dirName = slugToDirName(skill.slug);
       const skillDir = join(skillsDir, dirName);
       mkdirSync(skillDir, { recursive: true });
-      writeFileSync(join(skillDir, "SKILL.md"), content);
+      writeFileSync(join(skillDir, "SKILL.md"), skill.content);
       const legacyFile = join(skillsDir, slugToFilename(skill.slug));
       if (existsSync(legacyFile)) {
         rmSync(legacyFile);
@@ -369,6 +353,7 @@ async function update(args, flags) {
     }
     console.log();
     console.log(pc.green("  \u2713"), `Update complete (${changes.join(", ")})`);
+    if (!filterSlug) writeSkillsHashManifest(projectRoot, diff.resolved);
     syncClaudeMd(projectRoot);
     ensureSkillSymlinks(projectRoot);
     console.log();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumerahq/cli",
-  "version": "0.24.5",
+  "version": "0.24.7-dev.0",
   "description": "CLI for building and deploying Lumera apps",
   "type": "module",
   "engines": {