@lumerahq/cli 0.30.15 → 0.31.0-dev.0

package/dist/{chunk-ASPEK3I6.js → chunk-2K4ZYGCE.js}

@@ -1,6 +1,6 @@
 import {
   userContextHeaders
-} from "./chunk-KZEOP5YF.js";
+} from "./chunk-E7YZ6QS6.js";
 import {
   fetchWithRetry
 } from "./chunk-FJFIWC7G.js";

package/dist/{chunk-KZEOP5YF.js → chunk-E7YZ6QS6.js}

@@ -275,6 +275,11 @@ var ApiClient = class {
       body: JSON.stringify(def)
     });
   }
+  async deleteMailbox(id) {
+    await this.request(`/api/mailboxes/${encodeURIComponent(id)}`, {
+      method: "DELETE"
+    });
+  }
   // Agents
   async listAgents(opts) {
     const params = new URLSearchParams({ limit: "100" });

package/dist/{chunk-2K2LYH5O.js → chunk-ODANFLL7.js}

@@ -4,7 +4,7 @@ import {
 import {
   createApiClient,
   isApiErrorStatus
-} from "./chunk-KZEOP5YF.js";
+} from "./chunk-E7YZ6QS6.js";
 import {
   findProjectRoot,
   getAppName

package/dist/{deps-22CUIP2M.js → deps-ZDRNDMUF.js}

@@ -1,9 +1,9 @@
 import {
   deps,
   syncDeps
-} from "./chunk-2K2LYH5O.js";
+} from "./chunk-ODANFLL7.js";
 import "./chunk-2CR762KB.js";
-import "./chunk-KZEOP5YF.js";
+import "./chunk-E7YZ6QS6.js";
 import "./chunk-JLVVHTBY.js";
 import "./chunk-FJFIWC7G.js";
 import "./chunk-PNKVD2UK.js";

package/dist/{dev-XBOHUDPR.js → dev-S5JVAXDD.js}

@@ -1,15 +1,15 @@
 import {
   dev
-} from "./chunk-ASPEK3I6.js";
+} from "./chunk-2K4ZYGCE.js";
 import {
   syncDeps
-} from "./chunk-2K2LYH5O.js";
+} from "./chunk-ODANFLL7.js";
 import {
   loadEnv
 } from "./chunk-2CR762KB.js";
 import {
   createApiClient
-} from "./chunk-KZEOP5YF.js";
+} from "./chunk-E7YZ6QS6.js";
 import {
   findProjectRoot,
   getApiUrl,

package/dist/index.js

@@ -240,32 +240,32 @@ async function main() {
     switch (command) {
       // Resource commands
       case "plan":
-        await import("./resources-TZD6KV4M.js").then((m) => m.plan(args.slice(1)));
+        await import("./resources-I6JSKGOX.js").then((m) => m.plan(args.slice(1)));
         break;
       case "apply":
-        await import("./resources-TZD6KV4M.js").then((m) => m.apply(args.slice(1)));
+        await import("./resources-I6JSKGOX.js").then((m) => m.apply(args.slice(1)));
         break;
       case "pull":
-        await import("./resources-TZD6KV4M.js").then((m) => m.pull(args.slice(1)));
+        await import("./resources-I6JSKGOX.js").then((m) => m.pull(args.slice(1)));
         break;
       case "destroy":
-        await import("./resources-TZD6KV4M.js").then((m) => m.destroy(args.slice(1)));
+        await import("./resources-I6JSKGOX.js").then((m) => m.destroy(args.slice(1)));
         break;
       case "list":
-        await import("./resources-TZD6KV4M.js").then((m) => m.list(args.slice(1)));
+        await import("./resources-I6JSKGOX.js").then((m) => m.list(args.slice(1)));
         break;
       case "show":
-        await import("./resources-TZD6KV4M.js").then((m) => m.show(args.slice(1)));
+        await import("./resources-I6JSKGOX.js").then((m) => m.show(args.slice(1)));
         break;
       case "diff":
-        await import("./resources-TZD6KV4M.js").then((m) => m.diff(args.slice(1)));
+        await import("./resources-I6JSKGOX.js").then((m) => m.diff(args.slice(1)));
         break;
       // Development
       case "dev":
-        await import("./dev-XBOHUDPR.js").then((m) => m.dev(args.slice(1)));
+        await import("./dev-S5JVAXDD.js").then((m) => m.dev(args.slice(1)));
         break;
       case "run":
-        await import("./run-EBTA3FKD.js").then((m) => m.run(args.slice(1)));
+        await import("./run-MSAMUYQH.js").then((m) => m.run(args.slice(1)));
         break;
       case "functions":
         await import("./functions-DZCNHDRJ.js").then(
@@ -279,10 +279,10 @@ async function main() {
         break;
       // Project
       case "init":
-        await import("./init-L6D5OHMY.js").then((m) => m.init(args.slice(1)));
+        await import("./init-QVR42DUW.js").then((m) => m.init(args.slice(1)));
         break;
       case "register":
-        await import("./register-SBXONOFY.js").then((m) => m.register(args.slice(1)));
+        await import("./register-G3YK77HE.js").then((m) => m.register(args.slice(1)));
         break;
       case "templates":
         await import("./templates-LNUOTNLN.js").then((m) => m.templates(subcommand, args.slice(2)));
@@ -299,7 +299,7 @@ async function main() {
         break;
       // Dependencies
       case "deps":
-        await import("./deps-22CUIP2M.js").then((m) => m.deps(args.slice(1)));
+        await import("./deps-ZDRNDMUF.js").then((m) => m.deps(args.slice(1)));
         break;
       // Feature flags (read the in-sandbox snapshot)
       case "flags":

package/dist/{init-L6D5OHMY.js → init-QVR42DUW.js}

@@ -12,7 +12,7 @@ import {
 import {
   createApiClient,
   validateProjectNameLength
-} from "./chunk-KZEOP5YF.js";
+} from "./chunk-E7YZ6QS6.js";
 import {
   getToken,
   init_auth,

package/dist/{register-SBXONOFY.js → register-G3YK77HE.js}

@@ -7,7 +7,7 @@ import {
 import {
   createApiClient,
   validateProjectExternalId
-} from "./chunk-KZEOP5YF.js";
+} from "./chunk-E7YZ6QS6.js";
 import {
   findProjectRoot,
   getAppName,

package/dist/{resources-TZD6KV4M.js → resources-I6JSKGOX.js}

@@ -1,9 +1,9 @@
 import {
   deploy
-} from "./chunk-ASPEK3I6.js";
+} from "./chunk-2K4ZYGCE.js";
 import {
   syncDeps
-} from "./chunk-2K2LYH5O.js";
+} from "./chunk-ODANFLL7.js";
 import {
   loadEnv
 } from "./chunk-2CR762KB.js";
@@ -12,7 +12,7 @@ import {
   createApiClient,
   isApiErrorStatus,
   validateCollectionNameLength
-} from "./chunk-KZEOP5YF.js";
+} from "./chunk-E7YZ6QS6.js";
 import {
   findProjectRoot,
   getApiUrl,
@@ -1529,6 +1529,8 @@ ${pc2.dim("Resources:")}
   agents/<name>       Destroy single agent
   skills              Destroy only project skills
   skills/<slug>       Destroy single project skill
+  mailboxes           Destroy only mailboxes
+  mailboxes/<slug>    Destroy single mailbox
   app                 Delete app registration
 
 ${pc2.dim("Options:")}
@@ -1538,6 +1540,7 @@ ${pc2.dim("Options:")}
 ${pc2.dim("Examples:")}
   lumera destroy                     # Destroy everything
   lumera destroy collections/users   # Destroy single collection
+  lumera destroy mailboxes/support   # Destroy single mailbox
   lumera destroy app                 # Delete app registration
 `);
 }
@@ -2161,7 +2164,7 @@ async function planMailboxes(api, localMailboxes) {
         resource: "mailbox",
         id: existing.id,
         name: mb.slug,
-        details: "description differs (read-only remotely; update in UI or DB)"
+        details: "description differs (no update endpoint)"
       });
     }
   }
@@ -2178,7 +2181,7 @@ async function applyMailboxes(api, localMailboxes) {
       const localDesc = (mb.description ?? "").trim();
       const remoteDesc = (existing.description ?? "").trim();
       if (localDesc !== remoteDesc) {
-        console.log(pc2.yellow("  \u26A0"), `mailbox ${mb.slug}: description drift not reconcilable by CLI (no PATCH endpoint yet) \u2014 update in the UI or DB`);
+        console.log(pc2.yellow("  \u26A0"), `mailbox ${mb.slug}: description drift not reconcilable by CLI (no PATCH endpoint yet)`);
       } else {
         console.log(pc2.green("  \u2713"), pc2.dim(`mailbox ${mb.slug} already exists (${existing.email})`));
       }
@@ -2925,6 +2928,14 @@ function loadLocalAgents(platformDir, filterName, appName) {
           continue;
         }
       }
+      if (config.allowed_user_tags !== void 0) {
+        const tags = config.allowed_user_tags;
+        if (!Array.isArray(tags) || tags.length > 100 || tags.some((tag) => typeof tag !== "string" || !tag || Buffer.byteLength(tag) > 64 || tag !== tag.trim() || tag !== tag.toLowerCase())) {
+          errors.push(`${entry.name}: allowed_user_tags must be an array of at most 100 canonical tag keys (1\u201364 bytes each)`);
+          continue;
+        }
+        config.allowed_user_tags = [...new Set(tags)].sort();
+      }
       let systemPrompt = readFileSync2(promptPath, "utf-8");
       let policyScript = existsSync2(policyPath) ? readFileSync2(policyPath, "utf-8") : "";
       if (appName) {
@@ -2945,6 +2956,9 @@ function loadLocalAgents(platformDir, filterName, appName) {
   }
   return agents;
 }
+function allowedUserTagsChanged(local, remote) {
+  return local.allowed_user_tags !== void 0 && JSON.stringify([...new Set(local.allowed_user_tags)].sort()) !== JSON.stringify([...new Set(remote.allowed_user_tags ?? [])].sort());
+}
 async function planAgents(api, localAgents, projectId, localSourceSkillSlugs = /* @__PURE__ */ new Set(), pendingLocalSkillSlugs = /* @__PURE__ */ new Set(), appName) {
   const changes = [];
   let validationErrors = 0;
@@ -2997,6 +3011,7 @@ async function planAgents(api, localAgents, projectId, localSourceSkillSlugs = /
       if ((remote.system_prompt || "").trim() !== systemPrompt.trim()) diffs.push("system_prompt");
       if ((remote.model || "") !== (agent.model || "")) diffs.push("model");
       if (agent.thinking_level !== void 0 && (remote.thinking_level || "") !== agent.thinking_level) diffs.push("thinking_level");
+      if (allowedUserTagsChanged(agent, remote)) diffs.push("allowed_user_tags");
       if ((remote.idle_reap_timeout_seconds ?? 0) !== (agent.idle_reap_timeout_seconds ?? 0)) diffs.push("idle_reap_timeout_seconds");
       if ((remote.policy_script || "").trim() !== (policyScript || "").trim()) diffs.push("policy_script");
       if ((remote.policy_enabled || false) !== (agent.policy_enabled || false)) diffs.push("policy_enabled");
@@ -3100,6 +3115,7 @@ async function applyAgents(api, localAgents, projectId, localSourceSkillSlugs =
       system_prompt: systemPrompt,
       model: agent.model || "",
       ...agent.thinking_level !== void 0 ? { thinking_level: agent.thinking_level } : {},
+      ...agent.allowed_user_tags !== void 0 ? { allowed_user_tags: agent.allowed_user_tags } : {},
       idle_reap_timeout_seconds: agent.idle_reap_timeout_seconds ?? 0,
       skill_ids: skillIds,
       policy_script: policyScript || "",
@@ -3161,6 +3177,7 @@ async function pullAgents(api, platformDir, filterName, projectId, appName) {
     if (agent.description) config.description = agent.description;
     if (agent.model) config.model = agent.model;
     if (agent.thinking_level) config.thinking_level = agent.thinking_level;
+    if (agent.allowed_user_tags != null) config.allowed_user_tags = agent.allowed_user_tags;
     if (agent.idle_reap_timeout_seconds) config.idle_reap_timeout_seconds = agent.idle_reap_timeout_seconds;
     if (skillSlugs.length > 0) config.skills = skillSlugs;
     if (agent.policy_enabled) config.policy_enabled = true;
@@ -3471,6 +3488,17 @@ async function destroyResources(api, platformDir, resourceType, resourceName, sk
       }
     }
   }
+  if (!resourceType || resourceType === "mailboxes") {
+    const localMailboxes = loadLocalMailboxes(platformDir, resourceName || void 0);
+    const remoteMailboxes = await api.listMailboxes();
+    const remoteBySlug = new Map(remoteMailboxes.map((mailbox) => [mailbox.slug, mailbox]));
+    for (const local of localMailboxes) {
+      const remote = remoteBySlug.get(local.slug);
+      if (remote) {
+        toDelete.push({ type: "mailbox", id: local.slug, name: local.slug, remoteId: remote.id });
+      }
+    }
+  }
   if (toDelete.length === 0) {
     console.log(pc2.green("  \u2713 No resources found to delete"));
     return;
@@ -3497,6 +3525,7 @@ async function destroyResources(api, platformDir, resourceType, resourceName, sk
   const skills = toDelete.filter((r) => r.type === "skill");
   const hooks = toDelete.filter((r) => r.type === "hook");
   const automations = toDelete.filter((r) => r.type === "automation");
+  const mailboxes = toDelete.filter((r) => r.type === "mailbox");
   const collections = toDelete.filter((r) => r.type === "collection");
   let errors = 0;
   for (const resource of agents) {
@@ -3535,6 +3564,15 @@ async function destroyResources(api, platformDir, resourceType, resourceName, sk
       errors++;
     }
   }
+  for (const resource of mailboxes) {
+    try {
+      await api.deleteMailbox(resource.remoteId);
+      console.log(pc2.green("  \u2713"), `Deleted mailbox: ${resource.name}`);
+    } catch (e) {
+      console.log(pc2.red("  \u2717"), `Failed to delete mailbox ${resource.name}: ${e}`);
+      errors++;
+    }
+  }
   const deletePlan = planCollectionDelete(collections, platformDir);
   if (deletePlan.cycleNames.length > 0 && !forceCycles) {
     console.log();
@@ -4559,7 +4597,11 @@ async function diff(args) {
     const promptChanged = (remote.system_prompt || "").trim() !== local.systemPrompt.trim();
     const policyChanged = (remote.policy_script || "").trim() !== (local.policyScript || "").trim();
     const thinkingLevelChanged = local.agent.thinking_level !== void 0 && (remote.thinking_level || "") !== local.agent.thinking_level;
-    if (!promptChanged && !policyChanged && !thinkingLevelChanged && remote.name === local.agent.name && (remote.description || "") === (local.agent.description || "") && (remote.model || "") === (local.agent.model || "") && (remote.idle_reap_timeout_seconds ?? 0) === (local.agent.idle_reap_timeout_seconds ?? 0) && (remote.policy_enabled || false) === (local.agent.policy_enabled || false)) {
+    const userTagsChanged = allowedUserTagsChanged(local.agent, remote);
+    if (userTagsChanged) {
+      console.log(`  allowed_user_tags: ${pc2.red(JSON.stringify(remote.allowed_user_tags ?? []))} \u2192 ${pc2.green(JSON.stringify(local.agent.allowed_user_tags))}`);
+    }
+    if (!promptChanged && !policyChanged && !thinkingLevelChanged && !userTagsChanged && remote.name === local.agent.name && (remote.description || "") === (local.agent.description || "") && (remote.model || "") === (local.agent.model || "") && (remote.idle_reap_timeout_seconds ?? 0) === (local.agent.idle_reap_timeout_seconds ?? 0) && (remote.policy_enabled || false) === (local.agent.policy_enabled || false)) {
       console.log(pc2.green(`  \u2713 No changes`));
     } else {
       if (promptChanged) renderFullDiff("system_prompt.md", remote.system_prompt || "", local.systemPrompt);
@@ -4682,6 +4724,7 @@ export {
   destroy,
   diff,
   list,
+  loadLocalAgents,
   loadLocalCollections,
   loadLocalSkills,
   localProjectSkillSlug,
@@ -4691,6 +4734,7 @@ export {
   planSkills,
   projectSkillRefCandidates,
   pull,
+  pullAgents,
   pullCollections,
   pullSkills,
   resolveAgentSkillRefs,

package/dist/{run-EBTA3FKD.js → run-MSAMUYQH.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2CR762KB.js";
 import {
   createApiClient
-} from "./chunk-KZEOP5YF.js";
+} from "./chunk-E7YZ6QS6.js";
 import {
   findProjectRoot,
   getApiUrl,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumerahq/cli",
-  "version": "0.30.15",
+  "version": "0.31.0-dev.0",
   "description": "CLI for building and deploying Lumera apps",
   "type": "module",
   "engines": {