@lumerahq/cli 0.31.0-dev.1 → 0.31.1

package/dist/index.js

@@ -240,25 +240,25 @@ async function main() {
     switch (command) {
       // Resource commands
       case "plan":
-        await import("./resources-GM2OWDKP.js").then((m) => m.plan(args.slice(1)));
+        await import("./resources-FHL4IUQD.js").then((m) => m.plan(args.slice(1)));
         break;
       case "apply":
-        await import("./resources-GM2OWDKP.js").then((m) => m.apply(args.slice(1)));
+        await import("./resources-FHL4IUQD.js").then((m) => m.apply(args.slice(1)));
         break;
       case "pull":
-        await import("./resources-GM2OWDKP.js").then((m) => m.pull(args.slice(1)));
+        await import("./resources-FHL4IUQD.js").then((m) => m.pull(args.slice(1)));
         break;
       case "destroy":
-        await import("./resources-GM2OWDKP.js").then((m) => m.destroy(args.slice(1)));
+        await import("./resources-FHL4IUQD.js").then((m) => m.destroy(args.slice(1)));
         break;
       case "list":
-        await import("./resources-GM2OWDKP.js").then((m) => m.list(args.slice(1)));
+        await import("./resources-FHL4IUQD.js").then((m) => m.list(args.slice(1)));
         break;
       case "show":
-        await import("./resources-GM2OWDKP.js").then((m) => m.show(args.slice(1)));
+        await import("./resources-FHL4IUQD.js").then((m) => m.show(args.slice(1)));
         break;
       case "diff":
-        await import("./resources-GM2OWDKP.js").then((m) => m.diff(args.slice(1)));
+        await import("./resources-FHL4IUQD.js").then((m) => m.diff(args.slice(1)));
         break;
       // Development
       case "dev":

package/dist/{resources-GM2OWDKP.js → resources-FHL4IUQD.js}

@@ -2661,6 +2661,9 @@ var SKILL_RESOURCE_CONTENT_TYPES = {
 function skillResourceContentType(path) {
   return SKILL_RESOURCE_CONTENT_TYPES[path.split(".").pop()?.toLowerCase() ?? ""] ?? "application/octet-stream";
 }
+function foldSkillResourcePathPart(value) {
+  return value.toUpperCase();
+}
 function skillResourcePathError(value) {
   if (!value || Buffer.byteLength(value) > SKILL_RESOURCE_MAX_PATH_BYTES) {
     return `path must be at most ${SKILL_RESOURCE_MAX_PATH_BYTES} bytes`;
@@ -2675,7 +2678,7 @@ function skillResourcePathError(value) {
     if (Buffer.byteLength(part) > SKILL_RESOURCE_MAX_PATH_PART_BYTES) {
       return `path segments must be at most ${SKILL_RESOURCE_MAX_PATH_PART_BYTES} bytes`;
     }
-    if (part.toLowerCase() === "skill.md") return "SKILL.md is reserved";
+    if (foldSkillResourcePathPart(part) === "SKILL.MD") return "SKILL.md is reserved";
   }
   return null;
 }
@@ -2685,7 +2688,7 @@ function skillResourcePathsCollide(left, right) {
   const limit = Math.min(leftParts.length, rightParts.length);
   for (let i = 0; i < limit; i++) {
     if (leftParts[i] === rightParts[i]) continue;
-    return leftParts[i]?.toLowerCase() === rightParts[i]?.toLowerCase();
+    return foldSkillResourcePathPart(leftParts[i] ?? "") === foldSkillResourcePathPart(rightParts[i] ?? "");
   }
   return true;
 }
@@ -2844,6 +2847,13 @@ ${skill.summary}
 ${skill.instructions}
 `;
 }
+function skillMetadataChanges(local, remote) {
+  const changes = [];
+  if (local.name !== remote.name) changes.push("name");
+  if (local.summary.trim() !== (remote.summary || "").trim()) changes.push("summary");
+  if (local.instructions.trim() !== (remote.instructions || "").trim()) changes.push("instructions");
+  return changes;
+}
 function scopedProjectSkillSlug(appName, localSlug) {
   return appName ? `${appName}:${localSlug}` : localSlug;
 }
@@ -2945,10 +2955,7 @@ async function planSkills(api, localSkills, projectId, appName) {
       });
       continue;
     }
-    const changed = [];
-    if (remote.name !== skill.name) changed.push("name");
-    if ((remote.summary || "").trim() !== skill.summary.trim()) changed.push("summary");
-    if ((remote.instructions || "").trim() !== skill.instructions.trim()) changed.push("instructions");
+    const changed = skillMetadataChanges(skill, remote);
     const resourceChanges = compareSkillResources(skill.resources, remote.resources ?? []);
     if (!skillResourceChangesEmpty(resourceChanges)) {
       changed.push(`resources (${skillResourceChangesSummary(resourceChanges)})`);
@@ -3066,6 +3073,15 @@ function validateRemoteSkillResources(resources) {
   }
   if (totalBytes > SKILL_RESOURCES_MAX_TOTAL_BYTES) throw new Error("remote skill resources exceed 100 MiB");
 }
+function writeVerifiedSkillResource(resource, bytes, skillDir, source) {
+  if (bytes.byteLength !== resource.size) throw new Error(`${resource.path}: ${source} size does not match`);
+  if (createHash("sha256").update(bytes).digest("hex") !== resource.sha256) {
+    throw new Error(`${resource.path}: ${source} checksum does not match`);
+  }
+  const destination = join2(skillDir, ...resource.path.split("/"));
+  mkdirSync(dirname2(destination), { recursive: true });
+  writeFileSync(destination, bytes);
+}
 async function downloadSkillResource(resource, skillDir) {
   if (!resource.url) throw new Error(`${resource.path}: download URL is unavailable`);
   let response;
@@ -3075,14 +3091,7 @@ async function downloadSkillResource(resource, skillDir) {
     throw new Error(`${resource.path}: download failed`);
   }
   if (!response.ok) throw new Error(`${resource.path}: download failed with HTTP ${response.status}`);
-  const bytes = Buffer.from(await response.arrayBuffer());
-  if (bytes.byteLength !== resource.size) throw new Error(`${resource.path}: downloaded size does not match`);
-  if (createHash("sha256").update(bytes).digest("hex") !== resource.sha256) {
-    throw new Error(`${resource.path}: downloaded checksum does not match`);
-  }
-  const destination = join2(skillDir, ...resource.path.split("/"));
-  mkdirSync(dirname2(destination), { recursive: true });
-  writeFileSync(destination, bytes);
+  writeVerifiedSkillResource(resource, Buffer.from(await response.arrayBuffer()), skillDir, "downloaded");
 }
 function replaceSkillDirectory(stagingDir, skillDir) {
   const backupDir = `${stagingDir}.previous`;
@@ -3096,7 +3105,7 @@ function replaceSkillDirectory(stagingDir, skillDir) {
   }
   if (hadExisting) rmSync(backupDir, { recursive: true, force: true });
 }
-async function pullSkills(api, platformDir, filterName, projectId, appName) {
+async function pullSkills(api, platformDir, filterName, projectId, appName, checkedLocalSkills) {
   if (!projectId) {
     console.log(pc2.dim("  Skipped \u2014 project not registered (run `lumera register`)"));
     return;
@@ -3108,12 +3117,26 @@ async function pullSkills(api, platformDir, filterName, projectId, appName) {
     appName
   );
   const resolvedFilter = resolveProjectSkillLocalSlug(remoteSkills, filterName);
+  const checkedLocalSkillsBySlug = new Map(checkedLocalSkills?.map((skill) => [skill.slug, skill]) ?? []);
   for (const [localSlug, listedSkill] of remoteSkills) {
     if (!SKILL_SLUG_RE.test(localSlug)) {
       console.log(pc2.yellow(`  \u26A0 Skipping ${listedSkill.name}: skill slug ${listedSkill.slug} cannot be represented in platform/skills`));
       continue;
     }
     if (resolvedFilter && localSlug !== resolvedFilter) continue;
+    const listedResources = [...listedSkill.resources ?? []].sort((a, b) => a.path.localeCompare(b.path));
+    validateRemoteSkillResources(listedResources);
+    let local = checkedLocalSkillsBySlug.get(localSlug);
+    if (!checkedLocalSkills) {
+      try {
+        [local] = loadLocalSkills(platformDir, localSlug);
+      } catch {
+      }
+    }
+    if (local && skillMetadataChanges(local, listedSkill).length === 0 && skillResourceChangesEmpty(compareSkillResources(local.resources, listedResources))) {
+      console.log(pc2.green("  \u2713"), `${listedSkill.name} (unchanged)`);
+      continue;
+    }
     const skill = await api.getAgentSkill(listedSkill.id, { resource_urls: "attachment" });
     if (!(skill.summary || "").trim() || !(skill.instructions || "").trim()) {
       console.log(pc2.yellow(`  \u26A0 Skipping ${skill.name}: source-managed skills require both summary and instructions`));
@@ -3121,6 +3144,7 @@ async function pullSkills(api, platformDir, filterName, projectId, appName) {
     }
     const resources = [...skill.resources ?? []].sort((a, b) => a.path.localeCompare(b.path));
     validateRemoteSkillResources(resources);
+    const localResources = new Map(local?.resources.map((resource) => [resource.path, resource]) ?? []);
     const skillDir = join2(skillsDir, localSlug);
     mkdirSync(skillsDir, { recursive: true });
     const stagingDir = mkdtempSync(join2(platformDir, `.skill-${localSlug}-pull-`));
@@ -3130,7 +3154,14 @@ async function pullSkills(api, platformDir, filterName, projectId, appName) {
         summary: skill.summary || "",
         instructions: skill.instructions || ""
       }));
-      for (const resource of resources) await downloadSkillResource(resource, stagingDir);
+      for (const resource of resources) {
+        const localResource = localResources.get(resource.path);
+        if (localResource?.size === resource.size && localResource.sha256 === resource.sha256) {
+          writeVerifiedSkillResource(resource, readFileSync2(localResource.filePath), stagingDir, "local");
+        } else {
+          await downloadSkillResource(resource, stagingDir);
+        }
+      }
       replaceSkillDirectory(stagingDir, skillDir);
     } finally {
       rmSync(stagingDir, { recursive: true, force: true });
@@ -3565,7 +3596,7 @@ async function listResources(api, platformDir, filterType, appName, projectId) {
       } else {
         const resourceChanges = compareSkillResources(skill.resources, remote.resources ?? []);
         const details = [
-          remote.name !== skill.name || (remote.summary || "").trim() !== skill.summary.trim() || (remote.instructions || "").trim() !== skill.instructions.trim() ? "SKILL.md" : "",
+          skillMetadataChanges(skill, remote).length > 0 ? "SKILL.md" : "",
           skillResourceChangesEmpty(resourceChanges) ? "" : `resources (${skillResourceChangesSummary(resourceChanges)})`
         ].filter(Boolean).join(", ");
         results.push(details ? { name: skill.name, type: "skills", status: "changed", details } : { name: skill.name, type: "skills", status: "synced" });
@@ -4077,7 +4108,7 @@ async function showResource(api, platformDir, resourceType, resourceName, appNam
     console.log();
     if (local && remote) {
       const resourceChanges = compareSkillResources(local.resources, remote.resources ?? []);
-      const changed = local.name !== remote.name || local.summary.trim() !== (remote.summary || "").trim() || local.instructions.trim() !== (remote.instructions || "").trim() || !skillResourceChangesEmpty(resourceChanges);
+      const changed = skillMetadataChanges(local, remote).length > 0 || !skillResourceChangesEmpty(resourceChanges);
       console.log(`  Status: ${changed ? pc2.yellow("changed") : pc2.green("synced")}`);
       if (!skillResourceChangesEmpty(resourceChanges)) {
         console.log(`  Resources: ${skillResourceChangesSummary(resourceChanges)}`);
@@ -4525,6 +4556,7 @@ async function pull(args) {
   const api = createApiClient(void 0, void 0, appName);
   const projectId = getProjectId(projectRoot);
   const { type, name } = parseResource(filteredArgs[0]);
+  let checkedLocalSkills;
   if (!force) {
     const conflicts = [];
     let collections;
@@ -4539,16 +4571,16 @@ async function pull(args) {
         await api.listAgentSkills({ project_id: projectId }),
         appName
       );
-      const localSkills = loadLocalSkills(
+      checkedLocalSkills = loadLocalSkills(
         platformDir,
         resolveProjectSkillLocalSlug(remoteBySlug, name || void 0)
       );
-      if (localSkills.length > 0) {
-        for (const skill of localSkills) {
+      if (checkedLocalSkills.length > 0) {
+        for (const skill of checkedLocalSkills) {
           const remote = remoteBySlug.get(skill.slug);
           if (!remote) continue;
           const resourceChanges = compareSkillResources(skill.resources, remote.resources ?? []);
-          if (remote.name !== skill.name || (remote.summary || "").trim() !== skill.summary.trim() || (remote.instructions || "").trim() !== skill.instructions.trim() || resourceChanges.added.length > 0 || resourceChanges.replaced.length > 0) {
+          if (skillMetadataChanges(skill, remote).length > 0 || resourceChanges.added.length > 0 || resourceChanges.replaced.length > 0) {
             conflicts.push(`skills/${skill.slug}`);
           }
         }
@@ -4628,7 +4660,7 @@ async function pull(args) {
   }
   if (!type || type === "skills") {
     console.log(pc2.bold("  Skills:"));
-    await pullSkills(api, platformDir, name || void 0, projectId, appName);
+    await pullSkills(api, platformDir, name || void 0, projectId, appName, checkedLocalSkills);
     console.log();
   }
   if (!type || type === "agents") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumerahq/cli",
-  "version": "0.31.0-dev.1",
+  "version": "0.31.1",
   "description": "CLI for building and deploying Lumera apps",
   "type": "module",
   "engines": {

package/templates/default/package.json

@@ -31,7 +31,7 @@
     "check:ci": "biome check . && tsr generate && tsc --noEmit"
   },
   "dependencies": {
-    "@lumerahq/ui": "^0.19.5",
+    "@lumerahq/ui": "^0.19.6",
     "@tanstack/react-query": "^5.90.11",
     "@tanstack/react-router": "1.155.0",
     "clsx": "^2.1.1",

package/templates/default/pnpm-lock.yaml

@@ -19,8 +19,8 @@ importers:
   .:
     dependencies:
       '@lumerahq/ui':
-        specifier: ^0.19.5
-        version: 0.19.5(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+        specifier: ^0.19.6
+        version: 0.19.6(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/react-query':
         specifier: ^5.90.11
         version: 5.101.0(react@19.2.7)
@@ -221,24 +221,28 @@ packages:
     engines: {node: '>=14.21.3'}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@biomejs/cli-linux-arm64@2.5.6':
     resolution: {integrity: sha512-6XsYwCFkp5sMxl85ffhgeGpGgs6A7dRYFnkceZ7WVxvycuTnGdD5xa534Z3xfrBQ0JCMK/mujT6ZNPJoghedwg==}
     engines: {node: '>=14.21.3'}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@biomejs/cli-linux-x64-musl@2.5.6':
     resolution: {integrity: sha512-2Vp13QdKysH3HIWLaYLhUUwbK+jbZonJD1K+Lr0d0RO4wH7mkYd43vJixEDm8cUWrowoRz4UUHF1nm9Ae7ym8A==}
     engines: {node: '>=14.21.3'}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@biomejs/cli-linux-x64@2.5.6':
     resolution: {integrity: sha512-Pop9VXCFUhFTMfFefZ39S+u2rOPyNp5iHlxbZRwXGACHLy2r0jjiRgJHmaEKJzL3SyxlVeGShXhvvElvWowonA==}
     engines: {node: '>=14.21.3'}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@biomejs/cli-win32-arm64@2.5.6':
     resolution: {integrity: sha512-tDGshcm6BdkZOCGnTDX0Y8/U4IfBSlnUU7T56nNDuPEfed+aHg+u8G36NB43fJVl0Os6+QURXIE1yuD7AaEofA==}
@@ -460,8 +464,8 @@ packages:
   '@jridgewell/trace-mapping@0.3.31':
     resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
 
-  '@lumerahq/ui@0.19.5':
-    resolution: {integrity: sha512-AkX13UMMEkkHLRktms6Gh6vrygcQbMWxq1Du07qNbiVcVCcAPMWr68chkLdUOM0/00Bgb7JfLu1jrodhtFlrGA==}
+  '@lumerahq/ui@0.19.6':
+    resolution: {integrity: sha512-ojnHO9T7lt/dvkAQ+ZDuDIrZp/1pDtTvsxePJVc3e9qWI7voUuJlE6QoUYH9FBMkjK5KO34+wNyfktSYGgTRng==}
     peerDependencies:
       react: ^18.0.0 || ^19.0.0
       react-dom: ^18.0.0 || ^19.0.0
@@ -513,36 +517,42 @@ packages:
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@rolldown/binding-linux-arm64-musl@1.0.3':
     resolution: {integrity: sha512-VWkUHwWriDciit80wleYwKILoR/KMvxh/IdwS/paX+ZgpuRpCrKLUdadJbc0NpBEiyhpYawsJ73j9aCvOH+f7Q==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@rolldown/binding-linux-ppc64-gnu@1.0.3':
     resolution: {integrity: sha512-5f1laC0SlIR0yDbFCd8acUhvJIag6N3zC5P7oUPN6wX0aOma+uKJ0wBDH5aq7I1PVI2ttTlhJwzwRIBnLiSGEg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [ppc64]
     os: [linux]
+    libc: [glibc]
 
   '@rolldown/binding-linux-s390x-gnu@1.0.3':
     resolution: {integrity: sha512-Iq4ko0r4XsgbrF/LunNgHtAGLRRVE2kXonAXQ/MV0mC6jQpMOhW1SvtZja2EhC/kd05++bP78dsqBeIQyYJ6Yg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [s390x]
     os: [linux]
+    libc: [glibc]
 
   '@rolldown/binding-linux-x64-gnu@1.0.3':
     resolution: {integrity: sha512-B8m6tD5+/N5FeNQFbKlLA/2yVq9ycQP1SeedyEYYKWBNR3ZQbkvIUcNnDNM03lO1l5F2roiiFJGgvoLLyZXtSg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@rolldown/binding-linux-x64-musl@1.0.3':
     resolution: {integrity: sha512-pSdpdUJHkuCxun9LE7jvgUB9qsRgaiyNNCX7m/AvHTcq67AiT/Yhoxvw5zPfhrM8k/BfP8ce/hMOpthKDpEUow==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@rolldown/binding-openharmony-arm64@1.0.3':
     resolution: {integrity: sha512-OXXS3RKJgX2uLwM+gYyuH5omcH8fL1LJs96pZGgtetVCahON57+d4SJHzTgZiOjxgGkSnpXpOsWuPDGAKAigEg==}
@@ -608,24 +618,28 @@ packages:
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@tailwindcss/oxide-linux-arm64-musl@4.3.0':
     resolution: {integrity: sha512-Z6sukiQsngnWO+l39X4pPbiWT81IC+PLKF+PHxIlyZbGNb9MODfYlXEVlFvej5BOZInWX01kVyzeLvHsXhfczQ==}
     engines: {node: '>= 20'}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@tailwindcss/oxide-linux-x64-gnu@4.3.0':
     resolution: {integrity: sha512-DRNdQRpSGzRGfARVuVkxvM8Q12nh19l4BF/G7zGA1oe+9wcC6saFBHTISrpIcKzhiXtSrlSrluCfvMuledoCTQ==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@tailwindcss/oxide-linux-x64-musl@4.3.0':
     resolution: {integrity: sha512-Z0IADbDo8bh6I7h2IQMx601AdXBLfFpEdUotft86evd/8ZPflZe9COPO8Q1vw+pfLWIUo9zN/JGZvwuAJqduqg==}
     engines: {node: '>= 20'}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@tailwindcss/oxide-wasm32-wasi@4.3.0':
     resolution: {integrity: sha512-HNZGOUxEmElksYR7S6sC5jTeNGpobAsy9u7Gu0AskJ8/20FR9GqebUyB+HBcU/ax6BHuiuJi+Oda4B+YX6H1yA==}
@@ -1419,24 +1433,28 @@ packages:
     engines: {node: '>= 12.0.0'}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   lightningcss-linux-arm64-musl@1.32.0:
     resolution: {integrity: sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==}
     engines: {node: '>= 12.0.0'}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   lightningcss-linux-x64-gnu@1.32.0:
     resolution: {integrity: sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==}
     engines: {node: '>= 12.0.0'}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   lightningcss-linux-x64-musl@1.32.0:
     resolution: {integrity: sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==}
     engines: {node: '>= 12.0.0'}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   lightningcss-win32-arm64-msvc@1.32.0:
     resolution: {integrity: sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==}
@@ -2300,7 +2318,7 @@ snapshots:
       '@jridgewell/resolve-uri': 3.1.2
       '@jridgewell/sourcemap-codec': 1.5.5
 
-  '@lumerahq/ui@0.19.5(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
+  '@lumerahq/ui@0.19.6(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
     dependencies:
       '@base-ui/react': 1.5.0(@types/react@19.2.16)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       '@tanstack/react-query': 5.101.0(react@19.2.7)