@lumerahq/cli 0.30.1 → 0.30.3-dev.0

package/dist/{chunk-YMWDIAUG.js → chunk-2K2LYH5O.js}

@@ -4,7 +4,7 @@ import {
 import {
   createApiClient,
   isApiErrorStatus
-} from "./chunk-U3ZLIXGD.js";
+} from "./chunk-KZEOP5YF.js";
 import {
   findProjectRoot,
   getAppName

package/dist/{chunk-LVIIWE44.js → chunk-ASPEK3I6.js}

@@ -1,6 +1,6 @@
 import {
   userContextHeaders
-} from "./chunk-U3ZLIXGD.js";
+} from "./chunk-KZEOP5YF.js";
 import {
   fetchWithRetry
 } from "./chunk-FJFIWC7G.js";

package/dist/{chunk-U3ZLIXGD.js → chunk-KZEOP5YF.js}

@@ -282,6 +282,12 @@ var ApiClient = class {
     const result = await this.request(`/api/agents?${params}`);
     return result.agents || [];
   }
+  async compileAgentPolicy(script) {
+    await this.request("/api/agents/policy/compile", {
+      method: "POST",
+      body: JSON.stringify({ script })
+    });
+  }
   async createAgent(def) {
     return this.request("/api/agents", {
       method: "POST",

package/dist/{deps-NHVL4DMD.js → deps-22CUIP2M.js}

@@ -1,9 +1,9 @@
 import {
   deps,
   syncDeps
-} from "./chunk-YMWDIAUG.js";
+} from "./chunk-2K2LYH5O.js";
 import "./chunk-2CR762KB.js";
-import "./chunk-U3ZLIXGD.js";
+import "./chunk-KZEOP5YF.js";
 import "./chunk-JLVVHTBY.js";
 import "./chunk-FJFIWC7G.js";
 import "./chunk-PNKVD2UK.js";

package/dist/{dev-IWTA5G5M.js → dev-XBOHUDPR.js}

@@ -1,15 +1,15 @@
 import {
   dev
-} from "./chunk-LVIIWE44.js";
+} from "./chunk-ASPEK3I6.js";
 import {
   syncDeps
-} from "./chunk-YMWDIAUG.js";
+} from "./chunk-2K2LYH5O.js";
 import {
   loadEnv
 } from "./chunk-2CR762KB.js";
 import {
   createApiClient
-} from "./chunk-U3ZLIXGD.js";
+} from "./chunk-KZEOP5YF.js";
 import {
   findProjectRoot,
   getApiUrl,

package/dist/index.js

@@ -240,32 +240,32 @@ async function main() {
     switch (command) {
       // Resource commands
       case "plan":
-        await import("./resources-5YWEX6DG.js").then((m) => m.plan(args.slice(1)));
+        await import("./resources-ZSFI5CJM.js").then((m) => m.plan(args.slice(1)));
         break;
       case "apply":
-        await import("./resources-5YWEX6DG.js").then((m) => m.apply(args.slice(1)));
+        await import("./resources-ZSFI5CJM.js").then((m) => m.apply(args.slice(1)));
         break;
       case "pull":
-        await import("./resources-5YWEX6DG.js").then((m) => m.pull(args.slice(1)));
+        await import("./resources-ZSFI5CJM.js").then((m) => m.pull(args.slice(1)));
         break;
       case "destroy":
-        await import("./resources-5YWEX6DG.js").then((m) => m.destroy(args.slice(1)));
+        await import("./resources-ZSFI5CJM.js").then((m) => m.destroy(args.slice(1)));
         break;
       case "list":
-        await import("./resources-5YWEX6DG.js").then((m) => m.list(args.slice(1)));
+        await import("./resources-ZSFI5CJM.js").then((m) => m.list(args.slice(1)));
         break;
       case "show":
-        await import("./resources-5YWEX6DG.js").then((m) => m.show(args.slice(1)));
+        await import("./resources-ZSFI5CJM.js").then((m) => m.show(args.slice(1)));
         break;
       case "diff":
-        await import("./resources-5YWEX6DG.js").then((m) => m.diff(args.slice(1)));
+        await import("./resources-ZSFI5CJM.js").then((m) => m.diff(args.slice(1)));
         break;
       // Development
       case "dev":
-        await import("./dev-IWTA5G5M.js").then((m) => m.dev(args.slice(1)));
+        await import("./dev-XBOHUDPR.js").then((m) => m.dev(args.slice(1)));
         break;
       case "run":
-        await import("./run-SLLDX3RF.js").then((m) => m.run(args.slice(1)));
+        await import("./run-EBTA3FKD.js").then((m) => m.run(args.slice(1)));
         break;
       case "functions":
         await import("./functions-55J6E2RF.js").then(
@@ -279,10 +279,10 @@ async function main() {
         break;
       // Project
       case "init":
-        await import("./init-I4FECTEL.js").then((m) => m.init(args.slice(1)));
+        await import("./init-L6D5OHMY.js").then((m) => m.init(args.slice(1)));
         break;
       case "register":
-        await import("./register-OBQZPOGC.js").then((m) => m.register(args.slice(1)));
+        await import("./register-SBXONOFY.js").then((m) => m.register(args.slice(1)));
         break;
       case "templates":
         await import("./templates-LNUOTNLN.js").then((m) => m.templates(subcommand, args.slice(2)));
@@ -299,7 +299,7 @@ async function main() {
         break;
       // Dependencies
       case "deps":
-        await import("./deps-NHVL4DMD.js").then((m) => m.deps(args.slice(1)));
+        await import("./deps-22CUIP2M.js").then((m) => m.deps(args.slice(1)));
         break;
       // Feature flags (read the in-sandbox snapshot)
       case "flags":

package/dist/{init-I4FECTEL.js → init-L6D5OHMY.js}

@@ -12,7 +12,7 @@ import {
 import {
   createApiClient,
   validateProjectNameLength
-} from "./chunk-U3ZLIXGD.js";
+} from "./chunk-KZEOP5YF.js";
 import {
   getToken,
   init_auth,

package/dist/{register-OBQZPOGC.js → register-SBXONOFY.js}

@@ -7,7 +7,7 @@ import {
 import {
   createApiClient,
   validateProjectExternalId
-} from "./chunk-U3ZLIXGD.js";
+} from "./chunk-KZEOP5YF.js";
 import {
   findProjectRoot,
   getAppName,

package/dist/{resources-5YWEX6DG.js → resources-ZSFI5CJM.js}

@@ -1,9 +1,9 @@
 import {
   deploy
-} from "./chunk-LVIIWE44.js";
+} from "./chunk-ASPEK3I6.js";
 import {
   syncDeps
-} from "./chunk-YMWDIAUG.js";
+} from "./chunk-2K2LYH5O.js";
 import {
   loadEnv
 } from "./chunk-2CR762KB.js";
@@ -12,7 +12,7 @@ import {
   createApiClient,
   isApiErrorStatus,
   validateCollectionNameLength
-} from "./chunk-U3ZLIXGD.js";
+} from "./chunk-KZEOP5YF.js";
 import {
   findProjectRoot,
   getApiUrl,
@@ -38,6 +38,32 @@ import { join as join2, resolve } from "path";
 import { existsSync, readFileSync, readdirSync } from "fs";
 import { basename, dirname, join } from "path";
 
+// src/lib/lint/rules/agent-policy-compile.ts
+function compileError(target, message) {
+  return {
+    ruleId: "agent-policy-compile",
+    target,
+    severity: "error",
+    message
+  };
+}
+var agentPolicyCompileRule = {
+  id: "agent-policy-compile",
+  description: "Verifies agent policy scripts compile with the backend runtime compiler.",
+  appliesTo: ["agent-policy"],
+  async check(target, ctx) {
+    if (!target.source.trim() || !ctx.api) return [];
+    const script = ctx.appName ? target.source.replaceAll("{{app}}", ctx.appName) : target.source;
+    try {
+      await ctx.api.compileAgentPolicy(script);
+    } catch (err) {
+      const detail = err instanceof ApiError ? err.body.trim() : err instanceof Error ? err.message : String(err);
+      return [compileError(target, `Agent policy failed to compile on the backend: ${detail}`)];
+    }
+    return [];
+  }
+};
+
 // src/lib/lint/rules/automation-config.ts
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -776,6 +802,7 @@ var llmImportRule = {
 
 // src/lib/lint/registry.ts
 var ALL_RULES = [
+  agentPolicyCompileRule,
   automationConfigRule,
   automationMainGuardRule,
   collectionSchemaRule,
@@ -889,6 +916,42 @@ function buildHookTargets(platformDir, filterName) {
   }
   return targets;
 }
+function buildAgentPolicyTargets(platformDir, filterName, appName) {
+  const agentsDir = join(platformDir, "agents");
+  if (!existsSync(agentsDir)) return [];
+  const targets = [];
+  for (const entry of readdirSync(agentsDir, { withFileTypes: true })) {
+    if (!entry.isDirectory()) continue;
+    const agentDir = join(agentsDir, entry.name);
+    const policyPath = join(agentDir, "policy.js");
+    if (!existsSync(policyPath)) continue;
+    let externalID = appName ? `${appName}:${entry.name}` : "";
+    let displayName = "";
+    const configPath = join(agentDir, "config.json");
+    if (existsSync(configPath)) {
+      try {
+        const config = JSON.parse(readFileSync(configPath, "utf-8"));
+        if (typeof config.external_id === "string" && config.external_id.trim()) {
+          externalID = config.external_id;
+        }
+        if (typeof config.name === "string") {
+          displayName = config.name;
+        }
+      } catch {
+      }
+    }
+    if (filterName && entry.name !== filterName && externalID !== filterName && displayName !== filterName) {
+      continue;
+    }
+    targets.push({
+      kind: "agent-policy",
+      name: externalID || displayName || entry.name,
+      filePath: policyPath,
+      source: readFileSync(policyPath, "utf-8")
+    });
+  }
+  return targets;
+}
 
 // src/commands/resources.ts
 init_auth();
@@ -940,6 +1003,18 @@ async function lintHookFiles(api, projectRoot, platformDir, appName, filterName)
     throw new Error(`Found ${result.errors.length} hook lint error(s)`);
   }
 }
+async function lintAgentPolicyFiles(api, projectRoot, platformDir, appName, filterName) {
+  const result = await safeLintPass("agent policy", async () => {
+    const targets = buildAgentPolicyTargets(platformDir, filterName, appName);
+    if (targets.length === 0) return [];
+    return runLint({ projectRoot, targets, api, appName });
+  });
+  if (!result || result.issues.length === 0) return;
+  safePrintLint(result.issues, projectRoot);
+  if (result.errors.length > 0) {
+    throw new Error(`Found ${result.errors.length} agent policy lint error(s)`);
+  }
+}
 var PACKAGE_MANAGERS = ["bun", "pnpm", "yarn", "npm"];
 var PACKAGE_MANAGER_VALUE_FLAGS = /* @__PURE__ */ new Set(["--package-manager"]);
 function isPackageManager(value) {
@@ -2177,6 +2252,8 @@ async function applyAutomations(api, localAutomations, projectId) {
   const remoteByExternalId = new Map(remoteAutomations.filter((a) => a.external_id).map((a) => [a.external_id, a]));
   for (const { automation, code } of localAutomations) {
     const remote = remoteByExternalId.get(automation.external_id);
+    const appliedAction = remote ? "updated" : "created";
+    let baseApplied = false;
     const payload = {
       external_id: automation.external_id,
       name: automation.name,
@@ -2194,35 +2271,35 @@ async function applyAutomations(api, localAutomations, projectId) {
       if (remote) {
         await api.updateAutomation(remote.id, payload);
         automationId = remote.id;
-        console.log(pc2.green("  \u2713"), `${automation.name} (updated)`);
       } else {
         const created = await api.createAutomation(payload);
         automationId = created.id;
-        console.log(pc2.green("  \u2713"), `${automation.name} (created)`);
       }
+      baseApplied = true;
       const localPresets = automation.inputs?.presets;
+      let current;
       if (localPresets) {
         await syncPresets(api, automationId, localPresets);
       }
       if (automation.schedule) {
-        await setSchedule(api, automationId, automation.schedule, localPresets || {});
+        current = await setSchedule(api, automationId, automation.schedule, localPresets || {});
       } else if (remote?.schedule) {
         await api.updateAutomation(automationId, { schedule: "", schedule_tz: "" });
         console.log(pc2.dim(`    Cleared schedule`));
       }
       if (localPresets) {
-        const current = await api.getAutomation(automationId).catch(() => null);
-        if (current) {
-          await deleteStalePresets(
-            api,
-            automationId,
-            localPresets,
-            current.schedule_preset_id ? /* @__PURE__ */ new Set([current.schedule_preset_id]) : /* @__PURE__ */ new Set()
-          );
-        }
+        current ??= await api.getAutomation(automationId);
+        await deleteStalePresets(
+          api,
+          automationId,
+          localPresets,
+          current.schedule_preset_id ? /* @__PURE__ */ new Set([current.schedule_preset_id]) : /* @__PURE__ */ new Set()
+        );
       }
+      console.log(pc2.green("  \u2713"), `${automation.name} (${appliedAction})`);
     } catch (e) {
-      console.log(pc2.red("  \u2717"), `${automation.name}: ${e}`);
+      const partialState = baseApplied ? ` (${appliedAction}, configuration failed)` : "";
+      console.log(pc2.red("  \u2717"), `${automation.name}${partialState}: ${e}`);
       errors++;
     }
   }
@@ -2234,16 +2311,20 @@ async function syncPresets(api, automationId, localPresets) {
   for (const [presetKey, preset] of Object.entries(localPresets)) {
     const presetName = preset.label || presetKey;
     const existing = remoteByName.get(presetName);
-    try {
-      if (existing) {
+    if (existing) {
+      try {
         await api.updatePreset(existing.id, { name: presetName, inputs: preset.inputs });
         console.log(pc2.dim(`    Updated preset: ${presetName}`));
-      } else {
+      } catch (e) {
+        throw new Error(`Failed to update preset '${presetName}': ${String(e)}`);
+      }
+    } else {
+      try {
         await api.createPreset(automationId, { name: presetName, inputs: preset.inputs });
         console.log(pc2.dim(`    Created preset: ${presetName}`));
+      } catch (e) {
+        throw new Error(`Failed to create preset '${presetName}': ${String(e)}`);
       }
-    } catch (e) {
-      console.log(pc2.yellow(`    \u26A0 Failed to sync preset ${presetName}: ${e}`));
     }
   }
 }
@@ -2260,7 +2341,7 @@ async function deleteStalePresets(api, automationId, localPresets, preservePrese
       await api.deletePreset(remote.id);
       console.log(pc2.dim(`    Deleted preset: ${remote.name}`));
     } catch (e) {
-      console.log(pc2.yellow(`    \u26A0 Failed to delete preset ${remote.name}: ${e}`));
+      throw new Error(`Failed to delete preset '${remote.name}': ${String(e)}`);
     }
   }
 }
@@ -2269,19 +2350,28 @@ async function setSchedule(api, automationId, schedule, localPresets) {
   const remotePresets = await api.listPresets(automationId);
   const preset = remotePresets.find((p) => p.name === presetName);
   if (!preset) {
-    console.log(pc2.yellow(`    \u26A0 Schedule preset '${schedule.preset}' not found, skipping schedule`));
-    return;
+    throw new Error(`Schedule preset '${presetName}' not found`);
   }
+  const expectedSchedule = {
+    schedule: schedule.cron,
+    schedule_tz: schedule.timezone || "UTC",
+    schedule_preset_id: preset.id
+  };
+  await api.updateAutomation(automationId, expectedSchedule);
+  let persisted;
   try {
-    await api.updateAutomation(automationId, {
-      schedule: schedule.cron,
-      schedule_tz: schedule.timezone || "UTC",
-      schedule_preset_id: preset.id
-    });
-    console.log(pc2.dim(`    Set schedule: ${schedule.cron}`));
+    persisted = await api.getAutomation(automationId);
   } catch (e) {
-    console.log(pc2.yellow(`    \u26A0 Failed to set schedule: ${e}`));
+    throw new Error(`Failed to verify persisted schedule: ${String(e)}`);
+  }
+  const mismatches = Object.keys(expectedSchedule).filter((field) => persisted[field] !== expectedSchedule[field]).map(
+    (field) => `${field} expected ${JSON.stringify(expectedSchedule[field])}, got ${JSON.stringify(persisted[field])}`
+  );
+  if (mismatches.length > 0) {
+    throw new Error(`Schedule update was not persisted: ${mismatches.join("; ")}`);
   }
+  console.log(pc2.dim(`    Set schedule: ${schedule.cron}`));
+  return persisted;
 }
 async function applyHooks(api, localHooks, collections, projectId) {
   let errors = 0;
@@ -3733,6 +3823,9 @@ async function plan(args) {
   if (!type || type === "hooks") {
     await lintHookFiles(api, projectRoot, platformDir, appName, name || void 0);
   }
+  if (!type || type === "agents") {
+    await lintAgentPolicyFiles(api, projectRoot, platformDir, appName, name || void 0);
+  }
   await syncDeps(projectRoot, { ignorePermissionDenied: true });
   const allChanges = [];
   let planValidationErrors = 0;
@@ -3900,6 +3993,9 @@ async function apply(args) {
   if (!type || type === "hooks") {
     await lintHookFiles(api, projectRoot, platformDir, appName, name || void 0);
   }
+  if (!type || type === "agents") {
+    await lintAgentPolicyFiles(api, projectRoot, platformDir, appName, name || void 0);
+  }
   await syncDeps(projectRoot, { ignorePermissionDenied: true });
   let collections;
   try {
@@ -4519,6 +4615,7 @@ async function diff(args) {
 export {
   apply,
   applyAgents,
+  applyAutomations,
   applyCollections,
   applySkills,
   convertCollectionToApiFormat,

package/dist/{run-SLLDX3RF.js → run-EBTA3FKD.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2CR762KB.js";
 import {
   createApiClient
-} from "./chunk-U3ZLIXGD.js";
+} from "./chunk-KZEOP5YF.js";
 import {
   findProjectRoot,
   getApiUrl,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumerahq/cli",
-  "version": "0.30.1",
+  "version": "0.30.3-dev.0",
   "description": "CLI for building and deploying Lumera apps",
   "type": "module",
   "engines": {

package/templates/default/pnpm-lock.yaml

@@ -12,8 +12,8 @@ importers:
   .:
     dependencies:
       '@lumerahq/ui':
-        specifier: ^0.14.0
-        version: 0.14.0(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+        specifier: ^0.14.1
+        version: 0.14.1(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/react-query':
         specifier: ^5.90.11
         version: 5.101.0(react@19.2.7)
@@ -457,8 +457,8 @@ packages:
   '@jridgewell/trace-mapping@0.3.31':
     resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
 
-  '@lumerahq/ui@0.14.0':
-    resolution: {integrity: sha512-zV3HaeNkUJwieStWVf44UJzb+BDES+Dhjr5DfBxqCcc2mlKPm19TjWCjett6GfweFe9NhSgoIOk1txUm76B/GA==}
+  '@lumerahq/ui@0.14.1':
+    resolution: {integrity: sha512-GCyW9xQJ9cQzYP2wBTogGdUGTwIcwQvz5YXAp2AafaKiNSCy9f72PeXdEjNJfcTDbpatTiECfwJiT5Kw+wzqoQ==}
     peerDependencies:
       react: ^18.0.0 || ^19.0.0
       react-dom: ^18.0.0 || ^19.0.0
@@ -2311,7 +2311,7 @@ snapshots:
       '@jridgewell/resolve-uri': 3.1.2
       '@jridgewell/sourcemap-codec': 1.5.5
 
-  '@lumerahq/ui@0.14.0(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
+  '@lumerahq/ui@0.14.1(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@base-ui/react': 1.5.0(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/react-query': 5.101.0(react@19.2.7)