@lumerahq/cli 0.34.4 → 0.35.1

package/dist/{chunk-W57NUJFJ.js → chunk-2A2DSLIE.js}

@@ -148,8 +148,26 @@ var ApiClient = class {
   }
   async listCollections() {
     const result = await this.request("/api/pb/collections");
+    return result.items.filter((collection) => collection.type !== "view");
+  }
+  async listViews() {
+    const result = await this.request("/api/pb/views");
     return result.items;
   }
+  async publishView(project, view, expectedHash) {
+    const task = await this.request(`/api/projects/${encodeURIComponent(project)}/views`, { method: "POST", body: JSON.stringify({ config: view.config, query: view.query, expected_definition_hash: expectedHash }) });
+    const deadline = Date.now() + 18e4;
+    while (Date.now() < deadline) {
+      const status = await this.request(task.status_url);
+      if (status.terminal) {
+        if (status.state !== "completed") throw new Error(`View publishing failed: ${JSON.stringify(status.failure)}. Task: ${task.task_id}`);
+        if (status.result?.value?.status === "superseded") throw new Error("View source changed before publishing. Refresh and retry.");
+        return;
+      }
+      await new Promise((resolve2) => setTimeout(resolve2, 1e3));
+    }
+    throw new Error(`View publishing continues in the background. Task: ${task.task_id}`);
+  }
   async getCollection(id) {
     return this.request(`/api/pb/collections/${id}`);
   }

package/dist/{chunk-P6GDSHYC.js → chunk-5TQ3BQ2X.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-2EHJH2QU.js";
 import {
   userContextHeaders
-} from "./chunk-W57NUJFJ.js";
+} from "./chunk-2A2DSLIE.js";
 import {
   fetchWithRetry
 } from "./chunk-FJFIWC7G.js";

package/dist/{chunk-5JNNUIVJ.js → chunk-A27HZEU6.js}

@@ -4,7 +4,7 @@ import {
 import {
   createApiClient,
   isApiErrorStatus
-} from "./chunk-W57NUJFJ.js";
+} from "./chunk-2A2DSLIE.js";
 import {
   findProjectRoot,
   getAppName
@@ -16,6 +16,7 @@ import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync } from
 import { join } from "path";
 var SHARED_COLLECTIONS_DIR = "platform/collections/shared";
 var SHARED_FUNCTIONS_DIR = "platform/functions/shared";
+var SHARED_VIEWS_DIR = "platform/views/shared";
 function sharedCollectionsDir(projectRoot) {
   return join(projectRoot, SHARED_COLLECTIONS_DIR);
 }
@@ -96,7 +97,7 @@ function declarationForFunctionImport(item, existing) {
 }
 async function listIncomingCollectionShares(api, projectExternalId) {
   const result = await api.listProjectResourceShares(projectExternalId, "incoming");
-  return (result.shares ?? []).filter((share) => share.object_type === "collection").sort((a, b) => {
+  return (result.shares ?? []).filter((share) => share.object_type === "collection" || share.object_type === "view").sort((a, b) => {
     const bySource = a.source_project.external_id.localeCompare(b.source_project.external_id);
     if (bySource !== 0) return bySource;
     return shareCollectionName(a).localeCompare(shareCollectionName(b));
@@ -137,10 +138,12 @@ async function syncResourceShareDeps(projectRoot, api, projectExternalId, opts)
   }
   const dir = sharedCollectionsDir(projectRoot);
   const functionsDir = sharedFunctionsDir(projectRoot);
+  const viewsDir = join(projectRoot, SHARED_VIEWS_DIR);
   const missing = [];
   if (opts.write) {
     mkdirSync(dir, { recursive: true });
     mkdirSync(functionsDir, { recursive: true });
+    mkdirSync(viewsDir, { recursive: true });
   }
   for (const item of functionImports) {
     const fileName = functionImportFileName(item);
@@ -159,19 +162,20 @@ async function syncResourceShareDeps(projectRoot, api, projectExternalId, opts)
     }
   }
   for (const share of shares) {
+    const isView = share.object_type === "view";
     const fileName = shareFileName(share);
-    const filePath = join(dir, fileName);
+    const filePath = join(isView ? viewsDir : dir, fileName);
     const exists = existsSync(filePath);
     if (!opts.write) {
-      if (!exists) missing.push(fileName);
+      if (!exists) missing.push(`${isView ? "views" : "collections"}/shared/${fileName}`);
       continue;
     }
     const existing = exists ? readSharedCollectionFile(filePath) ?? void 0 : void 0;
-    const declaration = declarationForShare(share, existing);
+    const declaration = isView ? { source_project: share.source_project.external_id, view: shareCollectionName(share), privilege: "view.read", reason: existing?.reason ?? "" } : declarationForShare(share, existing);
     writeFileSync(filePath, JSON.stringify(declaration, null, 2) + "\n");
     if (!opts.quiet) {
       const action = exists ? pc.yellow("\u21BB") : pc.green("+");
-      console.log(`  ${action} collections/shared/${fileName}`);
+      console.log(`  ${action} ${isView ? "views" : "collections"}/shared/${fileName}`);
     }
   }
   if (!opts.write && missing.length > 0) {
@@ -209,7 +213,7 @@ async function deps(args) {
   if (sub === "sync") {
     console.log();
     console.log(pc.cyan(pc.bold("  Deps Sync")));
-    console.log(pc.dim("  Syncing incoming resource shares into platform/collections/shared..."));
+    console.log(pc.dim("  Syncing incoming resource shares into platform/*/shared..."));
     console.log();
     const ok = await syncDeps(projectRoot, { write: true });
     if (!ok) {
@@ -225,7 +229,9 @@ async function deps(args) {
     const sharedDeps = loadSharedCollectionDeps(projectRoot);
     const functionDir = sharedFunctionsDir(projectRoot);
     const functionFiles = existsSync(functionDir) ? readdirSync(functionDir).filter((entry) => entry.endsWith(".json")).sort() : [];
-    if (sharedDeps.length === 0 && functionFiles.length === 0) {
+    const viewsDir = join(projectRoot, SHARED_VIEWS_DIR);
+    const viewFiles = existsSync(viewsDir) ? readdirSync(viewsDir).filter((entry) => entry.endsWith(".json")).sort() : [];
+    if (sharedDeps.length === 0 && functionFiles.length === 0 && viewFiles.length === 0) {
       console.log(pc.dim("  No shared resource declarations in platform/*/shared"));
       return;
     }
@@ -246,13 +252,19 @@ async function deps(args) {
         `    ${dep?.source_project ?? "unknown-source"}/${dep?.function ?? "unknown-function"} ${pc.dim(`(${dep?.alias ?? "unknown-alias"})`)}`
       );
     }
+    for (const file of viewFiles) {
+      const dep = JSON.parse(readFileSync(join(viewsDir, file), "utf8"));
+      console.log(`  ${pc.bold(file)}`);
+      console.log(`    ${dep.source_project}/${dep.view} ${pc.dim("(view.read)")}`);
+    }
     console.log();
     return;
   }
   if (sub === "init") {
     mkdirSync(sharedCollectionsDir(projectRoot), { recursive: true });
     mkdirSync(sharedFunctionsDir(projectRoot), { recursive: true });
-    console.log(pc.green("  \u2713"), "Created platform/collections/shared/ and platform/functions/shared/");
+    mkdirSync(join(projectRoot, SHARED_VIEWS_DIR), { recursive: true });
+    console.log(pc.green("  \u2713"), "Created shared collection, view, and function dependency folders");
     return;
   }
   console.log(`
@@ -263,7 +275,7 @@ async function deps(args) {
     list    Show declared dependencies
     init    Create dependency storage
 
-  ${pc.bold("Dependencies:")} platform/collections/shared/*.json and platform/functions/shared/*.json
+  ${pc.bold("Dependencies:")} platform/{collections,views,functions}/shared/*.json
   `);
 }
 

package/dist/{deps-TNGT6JVD.js → deps-DLJUDFNK.js}

@@ -2,9 +2,9 @@ import {
   deps,
   syncDeps,
   syncResourceShareDeps
-} from "./chunk-5JNNUIVJ.js";
+} from "./chunk-A27HZEU6.js";
 import "./chunk-2CR762KB.js";
-import "./chunk-W57NUJFJ.js";
+import "./chunk-2A2DSLIE.js";
 import "./chunk-JLVVHTBY.js";
 import "./chunk-FJFIWC7G.js";
 import "./chunk-PNKVD2UK.js";

package/dist/{dev-24PCZUAT.js → dev-E2O6R7WW.js}

@@ -1,19 +1,19 @@
 import {
   dev
-} from "./chunk-P6GDSHYC.js";
+} from "./chunk-5TQ3BQ2X.js";
 import "./chunk-UGAIWMQV.js";
 import "./chunk-2EHJH2QU.js";
 import "./chunk-XZ5VCTGY.js";
 import "./chunk-5FGDEZSJ.js";
 import {
   syncDeps
-} from "./chunk-5JNNUIVJ.js";
+} from "./chunk-A27HZEU6.js";
 import {
   loadEnv
 } from "./chunk-2CR762KB.js";
 import {
   createApiClient
-} from "./chunk-W57NUJFJ.js";
+} from "./chunk-2A2DSLIE.js";
 import {
   findProjectRoot,
   getApiUrl,

package/dist/index.js

@@ -197,7 +197,8 @@ ${pc.dim("Resource Types:")}
   app-api                  FastAPI application backend
 
 ${pc.dim("Examples:")}
-  lumera apply                        # Apply all resources
+  lumera apply                        # Apply resources and app (excludes views)
+  lumera apply views                  # Publish views (human source admin)
   lumera apply collections/users      # Apply single collection
   lumera apply app                    # Deploy frontend and App API
   lumera apply app-api                # Deploy only the App API
@@ -242,32 +243,32 @@ async function main() {
     switch (command) {
       // Resource commands
       case "plan":
-        await import("./resources-IGHWATTH.js").then((m) => m.plan(args.slice(1)));
+        await import("./resources-X7K436TK.js").then((m) => m.plan(args.slice(1)));
         break;
       case "apply":
-        await import("./resources-IGHWATTH.js").then((m) => m.apply(args.slice(1)));
+        await import("./resources-X7K436TK.js").then((m) => m.apply(args.slice(1)));
         break;
       case "pull":
-        await import("./resources-IGHWATTH.js").then((m) => m.pull(args.slice(1)));
+        await import("./resources-X7K436TK.js").then((m) => m.pull(args.slice(1)));
         break;
       case "destroy":
-        await import("./resources-IGHWATTH.js").then((m) => m.destroy(args.slice(1)));
+        await import("./resources-X7K436TK.js").then((m) => m.destroy(args.slice(1)));
         break;
       case "list":
-        await import("./resources-IGHWATTH.js").then((m) => m.list(args.slice(1)));
+        await import("./resources-X7K436TK.js").then((m) => m.list(args.slice(1)));
         break;
       case "show":
-        await import("./resources-IGHWATTH.js").then((m) => m.show(args.slice(1)));
+        await import("./resources-X7K436TK.js").then((m) => m.show(args.slice(1)));
         break;
       case "diff":
-        await import("./resources-IGHWATTH.js").then((m) => m.diff(args.slice(1)));
+        await import("./resources-X7K436TK.js").then((m) => m.diff(args.slice(1)));
         break;
       // Development
       case "dev":
-        await import("./dev-24PCZUAT.js").then((m) => m.dev(args.slice(1)));
+        await import("./dev-E2O6R7WW.js").then((m) => m.dev(args.slice(1)));
         break;
       case "run":
-        await import("./run-4XFA5ZDJ.js").then((m) => m.run(args.slice(1)));
+        await import("./run-BJ7PXSEH.js").then((m) => m.run(args.slice(1)));
         break;
       case "functions":
         await import("./functions-5OOHGQT7.js").then(
@@ -281,10 +282,10 @@ async function main() {
         break;
       // Project
       case "init":
-        await import("./init-S42P4A5J.js").then((m) => m.init(args.slice(1)));
+        await import("./init-MJEVA5HK.js").then((m) => m.init(args.slice(1)));
         break;
       case "register":
-        await import("./register-GMWA4D4C.js").then((m) => m.register(args.slice(1)));
+        await import("./register-RUDM4ITV.js").then((m) => m.register(args.slice(1)));
         break;
       case "templates":
         await import("./templates-LNUOTNLN.js").then((m) => m.templates(subcommand, args.slice(2)));
@@ -301,7 +302,7 @@ async function main() {
         break;
       // Dependencies
       case "deps":
-        await import("./deps-TNGT6JVD.js").then((m) => m.deps(args.slice(1)));
+        await import("./deps-DLJUDFNK.js").then((m) => m.deps(args.slice(1)));
         break;
       // Feature flags (read the in-sandbox snapshot)
       case "flags":

package/dist/{init-S42P4A5J.js → init-MJEVA5HK.js}

@@ -12,7 +12,7 @@ import {
 import {
   createApiClient,
   validateProjectNameLength
-} from "./chunk-W57NUJFJ.js";
+} from "./chunk-2A2DSLIE.js";
 import {
   getToken,
   init_auth,

package/dist/{register-GMWA4D4C.js → register-RUDM4ITV.js}

@@ -7,7 +7,7 @@ import {
 import {
   createApiClient,
   validateProjectExternalId
-} from "./chunk-W57NUJFJ.js";
+} from "./chunk-2A2DSLIE.js";
 import {
   findProjectRoot,
   getAppName,

package/dist/{resources-IGHWATTH.js → resources-X7K436TK.js}

@@ -1,14 +1,14 @@
 import {
   deploy,
   deployAppAPI
-} from "./chunk-P6GDSHYC.js";
+} from "./chunk-5TQ3BQ2X.js";
 import "./chunk-UGAIWMQV.js";
 import "./chunk-2EHJH2QU.js";
 import "./chunk-XZ5VCTGY.js";
 import "./chunk-5FGDEZSJ.js";
 import {
   syncDeps
-} from "./chunk-5JNNUIVJ.js";
+} from "./chunk-A27HZEU6.js";
 import {
   loadEnv
 } from "./chunk-2CR762KB.js";
@@ -17,7 +17,7 @@ import {
   createApiClient,
   isApiErrorStatus,
   validateCollectionNameLength
-} from "./chunk-W57NUJFJ.js";
+} from "./chunk-2A2DSLIE.js";
 import {
   findProjectRoot,
   getApiUrl,
@@ -34,15 +34,98 @@ import "./chunk-PNKVD2UK.js";
 
 // src/commands/resources.ts
 import pc2 from "picocolors";
+
+// src/lib/views.ts
+import { createHash } from "crypto";
+import { existsSync, readdirSync, readFileSync } from "fs";
+import { join } from "path";
+function loadLocalViews(platformDir, filterName) {
+  const directory = join(platformDir, "views");
+  if (!existsSync(directory)) return [];
+  const result = [];
+  for (const entry of readdirSync(directory, { withFileTypes: true })) {
+    if (!entry.isDirectory() || entry.name === "shared" || filterName && entry.name !== filterName)
+      continue;
+    const configPath = join(directory, entry.name, "config.json");
+    const queryPath = join(directory, entry.name, "query.sql");
+    if (!existsSync(configPath) || !existsSync(queryPath))
+      throw new Error(`View ${entry.name} requires config.json and query.sql`);
+    const config = JSON.parse(readFileSync(configPath, "utf8"));
+    if (config.schema_version !== 1 || config.name !== entry.name || !/^[a-z][a-z0-9_]{0,29}$/.test(config.name) || config.name.startsWith("lm_") || config.name.includes("__"))
+      throw new Error(
+        `Invalid view config for ${entry.name}; schema_version must be 1 and name must match the folder`
+      );
+    result.push({ config, query: readFileSync(queryPath, "utf8").trim() });
+  }
+  return result.sort((a, b) => a.config.name.localeCompare(b.config.name));
+}
+function viewDefinitionHash(view) {
+  const config = { schema_version: 1, name: view.config.name };
+  if (view.config.display_name) config.display_name = view.config.display_name;
+  if (view.config.description) config.description = view.config.description;
+  if (view.config.row_key) config.row_key = view.config.row_key;
+  const encoded = JSON.stringify(config).replace(
+    /[<>&\u2028\u2029]/g,
+    (character) => `\\u${character.charCodeAt(0).toString(16).padStart(4, "0")}`
+  );
+  return createHash("sha256").update(encoded + "\n" + view.query.trim()).digest("hex");
+}
+async function planViews(api, local, projectId) {
+  const remote = (await api.listViews()).filter(
+    (view) => !projectId || view.project_id === projectId
+  );
+  return local.flatMap((view) => {
+    const current = remote.find(
+      (candidate) => candidate.name === view.config.name
+    );
+    if (current?.definition_hash === viewDefinitionHash(view)) return [];
+    return [
+      {
+        type: current ? "update" : "create",
+        resource: "view",
+        id: current?.id ?? "",
+        name: view.config.name,
+        details: "Git-owned, read only; publishing requires a human source-project admin",
+        textDiffs: [
+          { field: "SQL", oldText: current?.query ?? "", newText: view.query }
+        ]
+      }
+    ];
+  });
+}
+async function applyViews(api, local, projectKey, projectId) {
+  const remote = (await api.listViews()).filter(
+    (view) => !projectId || view.project_id === projectId
+  );
+  let errors = 0;
+  for (const view of local) {
+    const current = remote.find(
+      (candidate) => candidate.name === view.config.name
+    );
+    if (current?.definition_hash === viewDefinitionHash(view)) continue;
+    try {
+      await api.publishView(projectKey, view, current?.definition_hash ?? "");
+      console.log(`  \u2713 Published view ${view.config.name}`);
+    } catch (error3) {
+      errors++;
+      console.error(
+        `  \u2717 ${view.config.name}: ${error3 instanceof Error ? error3.message : String(error3)}. A source-project admin can publish the definition through Resource shares.`
+      );
+    }
+  }
+  return errors;
+}
+
+// src/commands/resources.ts
 import prompts from "prompts";
 import { execFileSync, execSync } from "child_process";
-import { createHash } from "crypto";
-import { existsSync as existsSync2, lstatSync, mkdirSync, mkdtempSync, readdirSync as readdirSync2, readFileSync as readFileSync2, renameSync, rmSync, writeFileSync } from "fs";
-import { dirname as dirname2, join as join2, resolve } from "path";
+import { createHash as createHash2 } from "crypto";
+import { existsSync as existsSync3, lstatSync, mkdirSync, mkdtempSync, readdirSync as readdirSync3, readFileSync as readFileSync3, renameSync, rmSync, writeFileSync } from "fs";
+import { dirname as dirname2, join as join3, resolve } from "path";
 
 // src/lib/lint/index.ts
-import { existsSync, readFileSync, readdirSync } from "fs";
-import { basename, dirname, join } from "path";
+import { existsSync as existsSync2, readFileSync as readFileSync2, readdirSync as readdirSync2 } from "fs";
+import { basename, dirname, join as join2 } from "path";
 
 // src/lib/lint/rules/agent-deprecated-model.ts
 function configuredModel(config) {
@@ -762,7 +845,7 @@ function messageForIssue(issue) {
 }
 var hookVerifyRule = {
   id: "hook-verify",
-  description: "Validates hook file structure (config export, trigger, known keys, default handler) and verifies the script compiles via the backend.",
+  description: "Validates hook file structure (config export, trigger, known keys, default handler) and checks on the backend that the script compiles and uses only what the hook runtime provides.",
   appliesTo: ["hook"],
   async check(target, ctx) {
     if (target.filePath.endsWith(".ts")) {
@@ -835,7 +918,7 @@ var hookVerifyRule = {
           const position = line ? ` at line ${line}${diagnostic.column ? `, column ${diagnostic.column}` : ""}` : "";
           return error2(
             target,
-            `Hook failed to compile on the backend${position}: ${diagnostic.message}`,
+            `Hook script is invalid${position}: ${diagnostic.message}`,
             line
           );
         })
@@ -966,59 +1049,59 @@ function buildAutomationTargets(localAutomations) {
     source: a.code,
     config: a.automation.inputs?.schema,
     // a.filePath is main.py; config.json is its sibling.
-    configFilePath: join(dirname(a.filePath), "config.json")
+    configFilePath: join2(dirname(a.filePath), "config.json")
   }));
 }
 function buildCollectionTargets(platformDir, _filterName) {
-  const collectionsDir = join(platformDir, "collections");
-  if (!existsSync(collectionsDir)) return [];
+  const collectionsDir = join2(platformDir, "collections");
+  if (!existsSync2(collectionsDir)) return [];
   const targets = [];
-  for (const entry of readdirSync(collectionsDir, { withFileTypes: true })) {
+  for (const entry of readdirSync2(collectionsDir, { withFileTypes: true })) {
     if (!entry.isFile() || !entry.name.endsWith(".json")) continue;
-    const filePath = join(collectionsDir, entry.name);
+    const filePath = join2(collectionsDir, entry.name);
     targets.push({
       kind: "collection",
       name: basename(entry.name, ".json"),
       filePath,
-      source: readFileSync(filePath, "utf-8")
+      source: readFileSync2(filePath, "utf-8")
     });
   }
   return targets;
 }
 function buildHookTargets(platformDir, filterName) {
-  const hooksDir = join(platformDir, "hooks");
-  if (!existsSync(hooksDir)) return [];
+  const hooksDir = join2(platformDir, "hooks");
+  if (!existsSync2(hooksDir)) return [];
   const targets = [];
-  for (const entry of readdirSync(hooksDir, { withFileTypes: true })) {
+  for (const entry of readdirSync2(hooksDir, { withFileTypes: true })) {
     if (!entry.isFile()) continue;
     if (!entry.name.endsWith(".js") && !entry.name.endsWith(".ts")) continue;
     const base = entry.name.replace(/\.(js|ts)$/, "");
     if (filterName && base !== filterName) continue;
-    const filePath = join(hooksDir, entry.name);
+    const filePath = join2(hooksDir, entry.name);
     targets.push({
       kind: "hook",
       name: base,
       filePath,
-      source: readFileSync(filePath, "utf-8")
+      source: readFileSync2(filePath, "utf-8")
     });
   }
   return targets;
 }
 function resolveAgentLintFiles(platformDir, filterName, appName) {
-  const agentsDir = join(platformDir, "agents");
-  if (!existsSync(agentsDir)) return [];
+  const agentsDir = join2(platformDir, "agents");
+  if (!existsSync2(agentsDir)) return [];
   const agents = [];
-  for (const entry of readdirSync(agentsDir, { withFileTypes: true })) {
+  for (const entry of readdirSync2(agentsDir, { withFileTypes: true })) {
     if (!entry.isDirectory()) continue;
-    const directoryPath = join(agentsDir, entry.name);
-    const configPath = join(directoryPath, "config.json");
+    const directoryPath = join2(agentsDir, entry.name);
+    const configPath = join2(directoryPath, "config.json");
     let configSource;
     let config;
     let externalID = appName ? `${appName}:${entry.name}` : "";
     let displayName = "";
     let policyEnabled = false;
-    if (existsSync(configPath)) {
-      configSource = readFileSync(configPath, "utf-8");
+    if (existsSync2(configPath)) {
+      configSource = readFileSync2(configPath, "utf-8");
       try {
         config = JSON.parse(configSource);
         if (typeof config === "object" && config !== null && !Array.isArray(config)) {
@@ -1065,14 +1148,14 @@ function agentConfigTargets(agents) {
 function agentPolicyTargets(agents) {
   const targets = [];
   for (const agent of agents) {
-    const policyPath = join(agent.directoryPath, "policy.js");
-    const hasPolicyFile = existsSync(policyPath);
+    const policyPath = join2(agent.directoryPath, "policy.js");
+    const hasPolicyFile = existsSync2(policyPath);
     if (!hasPolicyFile && !agent.policyEnabled) continue;
     targets.push({
       kind: "agent-policy",
       name: agent.name,
       filePath: policyPath,
-      source: hasPolicyFile ? readFileSync(policyPath, "utf-8") : "",
+      source: hasPolicyFile ? readFileSync2(policyPath, "utf-8") : "",
       config: { policyEnabled: agent.policyEnabled }
     });
   }
@@ -1179,7 +1262,7 @@ function parsePackageManagerSpecifier(value) {
 }
 function packageManagerFromPackageJson(projectRoot) {
   try {
-    const pkg = JSON.parse(readFileSync2(join2(projectRoot, "package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync3(join3(projectRoot, "package.json"), "utf-8"));
     return parsePackageManagerSpecifier(pkg.packageManager);
   } catch {
     return void 0;
@@ -1230,7 +1313,7 @@ function detectPackageManager(projectRoot, override) {
     { pm: "npm", file: "package-lock.json" }
   ];
   for (const { pm, file } of lockfileManagers) {
-    if (existsSync2(join2(projectRoot, file)) && commandAvailable(pm)) return pm;
+    if (existsSync3(join3(projectRoot, file)) && commandAvailable(pm)) return pm;
   }
   for (const pm of ["pnpm", "bun", "yarn", "npm"]) {
     if (commandAvailable(pm)) return pm;
@@ -1523,6 +1606,8 @@ ${pc2.dim("Resources:")}
   (none)              Plan all resources
   collections         Plan only collections
   collections/<name>  Plan single collection
+  views               Plan Git-owned SQL views
+  views/<name>        Plan a single view
   automations         Plan only automations
   automations/<name>  Plan single automation
   hooks               Plan only hooks
@@ -1550,9 +1635,11 @@ ${pc2.dim("Description:")}
   Create or update resources from local files.
 
 ${pc2.dim("Resources:")}
-  (none)              Apply all resources
+  (none)              Apply resources and app; views require an explicit target
   collections         Apply only collections
   collections/<name>  Apply single collection
+  views               Publish Git-owned views (human source admin)
+  views/<name>        Publish a single view
   automations         Apply only automations
   automations/<name>  Apply single automation
   hooks               Apply only hooks
@@ -1574,7 +1661,8 @@ ${pc2.dim("Options:")}
   --package-manager   Package manager for app builds (pnpm, bun, yarn, npm)
 
 ${pc2.dim("Examples:")}
-  lumera apply                       # Apply everything (shows plan, asks to confirm)
+  lumera apply                       # Apply resources and app (excludes views)
+  lumera apply views                 # Publish views with human-admin credentials
   lumera apply collections           # Apply all collections
   lumera apply collections/users     # Apply single collection
   lumera apply agents -y             # Apply agents without confirmation
@@ -1593,6 +1681,7 @@ ${pc2.dim("Usage:")}
 
 ${pc2.dim("Description:")}
   Download remote state to local files.
+  Views remain Git-owned. Use git pull to sync their source files.
   Refuses to overwrite local files that have uncommitted changes
   (use --force to override, or 'lumera diff' to inspect first).
 
@@ -1710,7 +1799,7 @@ function parseResource(resourcePath) {
   const parts = resourcePath.split("/");
   const type = parts[0];
   const name = parts.slice(1).join("/") || null;
-  const validTypes = ["collections", "automations", "hooks", "agents", "skills", "mailboxes", "app"];
+  const validTypes = ["collections", "automations", "hooks", "agents", "skills", "mailboxes", "app", "views"];
   if (!validTypes.includes(type)) {
     console.log(pc2.red(`  Unknown resource type "${type}". Valid types: ${validTypes.join(", ")}`));
     process.exit(1);
@@ -1718,29 +1807,29 @@ function parseResource(resourcePath) {
   return { type, name };
 }
 function getPlatformDir() {
-  if (existsSync2(join2(process.cwd(), "platform"))) {
-    return join2(process.cwd(), "platform");
+  if (existsSync3(join3(process.cwd(), "platform"))) {
+    return join3(process.cwd(), "platform");
   }
-  if (existsSync2(join2(process.cwd(), "lumera_platform"))) {
-    return join2(process.cwd(), "lumera_platform");
+  if (existsSync3(join3(process.cwd(), "lumera_platform"))) {
+    return join3(process.cwd(), "lumera_platform");
   }
-  return join2(process.cwd(), "platform");
+  return join3(process.cwd(), "platform");
 }
 function toSafeFilename(name) {
   return name.replace(/\s+/g, "_").replace(/[^a-zA-Z0-9_-]/g, "").toLowerCase();
 }
 function loadLocalCollections(platformDir, filterName) {
-  const collectionsDir = join2(platformDir, "collections");
-  if (!existsSync2(collectionsDir)) {
+  const collectionsDir = join3(platformDir, "collections");
+  if (!existsSync3(collectionsDir)) {
     return [];
   }
   const collections = [];
   const errors = [];
-  for (const file of readdirSync2(collectionsDir)) {
+  for (const file of readdirSync3(collectionsDir)) {
     if (!file.endsWith(".json")) continue;
-    const filePath = join2(collectionsDir, file);
+    const filePath = join3(collectionsDir, file);
     try {
-      const content = readFileSync2(filePath, "utf-8");
+      const content = readFileSync3(filePath, "utf-8");
       const collection = JSON.parse(content);
       if (filterName && collection.name !== filterName && collection.id !== filterName) {
         continue;
@@ -1816,27 +1905,27 @@ function loadLocalCollections(platformDir, filterName) {
   return collections;
 }
 function loadLocalAutomations(platformDir, filterName, appName) {
-  const automationsDir = join2(platformDir, "automations");
-  if (!existsSync2(automationsDir)) {
+  const automationsDir = join3(platformDir, "automations");
+  if (!existsSync3(automationsDir)) {
     return [];
   }
   const automations = [];
   const errors = [];
-  for (const entry of readdirSync2(automationsDir, { withFileTypes: true })) {
+  for (const entry of readdirSync3(automationsDir, { withFileTypes: true })) {
     if (!entry.isDirectory()) continue;
-    const automationDir = join2(automationsDir, entry.name);
-    const configPath = join2(automationDir, "config.json");
-    const mainPath = join2(automationDir, "main.py");
-    if (!existsSync2(configPath)) {
+    const automationDir = join3(automationsDir, entry.name);
+    const configPath = join3(automationDir, "config.json");
+    const mainPath = join3(automationDir, "main.py");
+    if (!existsSync3(configPath)) {
       errors.push(`${entry.name}: missing config.json`);
       continue;
     }
-    if (!existsSync2(mainPath)) {
+    if (!existsSync3(mainPath)) {
       errors.push(`${entry.name}: missing main.py`);
       continue;
     }
     try {
-      const configContent = readFileSync2(configPath, "utf-8");
+      const configContent = readFileSync3(configPath, "utf-8");
       const rawConfig = JSON.parse(configContent);
       if (filterName && rawConfig.external_id !== filterName && rawConfig.name !== filterName && entry.name !== filterName) {
         continue;
@@ -1863,7 +1952,7 @@ function loadLocalAutomations(platformDir, filterName, appName) {
         errors.push(`${entry.name}: duplicate external_id "${config.external_id}" (also defined in ${existingByExtId.automation.name})`);
         continue;
       }
-      let code = readFileSync2(mainPath, "utf-8");
+      let code = readFileSync3(mainPath, "utf-8");
       if (appName) {
         code = code.replaceAll("{{app}}", appName);
       }
@@ -1882,15 +1971,15 @@ function loadLocalAutomations(platformDir, filterName, appName) {
   return automations;
 }
 function loadLocalHooks(platformDir, filterName, appName) {
-  const hooksDir = join2(platformDir, "hooks");
-  if (!existsSync2(hooksDir)) {
+  const hooksDir = join3(platformDir, "hooks");
+  if (!existsSync3(hooksDir)) {
     return [];
   }
   const hooks = [];
-  for (const file of readdirSync2(hooksDir)) {
+  for (const file of readdirSync3(hooksDir)) {
     if (!file.endsWith(".js") && !file.endsWith(".ts")) continue;
-    const filePath = join2(hooksDir, file);
-    const content = readFileSync2(filePath, "utf-8");
+    const filePath = join3(hooksDir, file);
+    const content = readFileSync3(filePath, "utf-8");
     const config = parseHookConfig(content);
     if (!config) {
       console.log(pc2.yellow(`  \u26A0 Skipping ${file}: could not parse config export`));
@@ -2221,12 +2310,12 @@ async function planAutomations(api, localAutomations, projectId) {
   return changes;
 }
 function loadLocalMailboxes(platformDir, filterName) {
-  const mailboxesDir = join2(platformDir, "mailboxes");
-  if (!existsSync2(mailboxesDir)) {
+  const mailboxesDir = join3(platformDir, "mailboxes");
+  if (!existsSync3(mailboxesDir)) {
     return [];
   }
   const mailboxes = [];
-  for (const file of readdirSync2(mailboxesDir)) {
+  for (const file of readdirSync3(mailboxesDir)) {
     if (!file.endsWith(".json")) continue;
     const slug = file.replace(/\.json$/, "").trim();
     if (!slug) {
@@ -2236,10 +2325,10 @@ function loadLocalMailboxes(platformDir, filterName) {
     if (filterName && slug !== filterName) {
       continue;
     }
-    const filePath = join2(mailboxesDir, file);
+    const filePath = join3(mailboxesDir, file);
     let raw;
     try {
-      raw = JSON.parse(readFileSync2(filePath, "utf-8"));
+      raw = JSON.parse(readFileSync3(filePath, "utf-8"));
     } catch (e) {
       console.log(pc2.yellow(`  \u26A0 Skipping ${file}: invalid JSON (${e.message})`));
       continue;
@@ -2318,8 +2407,8 @@ async function pullMailboxes(api, platformDir, filterName) {
     console.log(pc2.dim("  (no mailboxes)"));
     return;
   }
-  const outDir = join2(platformDir, "mailboxes");
-  if (!existsSync2(outDir)) {
+  const outDir = join3(platformDir, "mailboxes");
+  if (!existsSync3(outDir)) {
     mkdirSync(outDir, { recursive: true });
   }
   let count = 0;
@@ -2327,7 +2416,7 @@ async function pullMailboxes(api, platformDir, filterName) {
     if (filterName && mb.slug !== filterName) continue;
     const body = {};
     if (mb.description) body.description = mb.description;
-    const file = join2(outDir, `${toSafeFilename(mb.slug)}.json`);
+    const file = join3(outDir, `${toSafeFilename(mb.slug)}.json`);
     writeFileSync(file, JSON.stringify(body, null, 2) + "\n");
     console.log(pc2.green("  \u2713"), `pulled mailbox ${mb.slug} ${pc2.dim(`\u2192 ${file}`)}`);
     count++;
@@ -2634,7 +2723,7 @@ async function applyAppAPI(projectRoot) {
   });
 }
 async function pullCollections(api, platformDir, filterName, projectId) {
-  const collectionsDir = join2(platformDir, "collections");
+  const collectionsDir = join3(platformDir, "collections");
   mkdirSync(collectionsDir, { recursive: true });
   const collections = await api.listCollections();
   for (const collection of collections) {
@@ -2660,13 +2749,13 @@ async function pullCollections(api, platformDir, filterName, projectId) {
       search: collection.search
     };
     const fileName = toSafeFilename(localName);
-    const filePath = join2(collectionsDir, `${fileName}.json`);
+    const filePath = join3(collectionsDir, `${fileName}.json`);
     writeFileSync(filePath, JSON.stringify(localFormat, null, 2) + "\n");
     console.log(pc2.green("  \u2713"), `${localName} \u2192 collections/${fileName}.json`);
   }
 }
 async function pullAutomations(api, platformDir, filterName, projectId) {
-  const automationsDir = join2(platformDir, "automations");
+  const automationsDir = join3(platformDir, "automations");
   mkdirSync(automationsDir, { recursive: true });
   const automations = await api.listAutomations({
     include_code: true,
@@ -2680,7 +2769,7 @@ async function pullAutomations(api, platformDir, filterName, projectId) {
       continue;
     }
     const dirName = automation.external_id.replace(/[^a-zA-Z0-9_-]/g, "_");
-    const automationDir = join2(automationsDir, dirName);
+    const automationDir = join3(automationsDir, dirName);
     mkdirSync(automationDir, { recursive: true });
     const config = {
       external_id: automation.external_id,
@@ -2713,13 +2802,13 @@ async function pullAutomations(api, platformDir, filterName, projectId) {
       }
     } catch {
     }
-    writeFileSync(join2(automationDir, "config.json"), JSON.stringify(config, null, 2) + "\n");
-    writeFileSync(join2(automationDir, "main.py"), automation.code || "");
+    writeFileSync(join3(automationDir, "config.json"), JSON.stringify(config, null, 2) + "\n");
+    writeFileSync(join3(automationDir, "main.py"), automation.code || "");
     console.log(pc2.green("  \u2713"), `${automation.name} \u2192 automations/${dirName}/`);
   }
 }
 async function pullHooks(api, platformDir, filterName, appName, projectId) {
-  const hooksDir = join2(platformDir, "hooks");
+  const hooksDir = join3(platformDir, "hooks");
   mkdirSync(hooksDir, { recursive: true });
   const hooks = await api.listHooks(projectId ? { project_id: projectId } : void 0);
   for (const hook of hooks) {
@@ -2741,7 +2830,7 @@ export default async function handler({ record, app, http }) {
 ${hook.script.split("\n").map((line) => "  " + line).join("\n")}
 }
 `;
-    writeFileSync(join2(hooksDir, fileName), content);
+    writeFileSync(join3(hooksDir, fileName), content);
     console.log(pc2.green("  \u2713"), `${hook.name} \u2192 hooks/${fileName}`);
   }
 }
@@ -2804,7 +2893,7 @@ function localSkillResources(skillDir) {
   let fileCount = 0;
   const decoder = new TextDecoder("utf-8", { fatal: true });
   const scan = (directory, parentParts) => {
-    const names = readdirSync2(directory, { encoding: "buffer" }).map((rawName) => {
+    const names = readdirSync3(directory, { encoding: "buffer" }).map((rawName) => {
       try {
         return decoder.decode(rawName);
       } catch {
@@ -2816,7 +2905,7 @@ function localSkillResources(skillDir) {
       if (parentParts.length === 0 && name === "SKILL.md") continue;
       const parts = [...parentParts, name];
       const resourcePath = parts.join("/");
-      const filePath = join2(directory, name);
+      const filePath = join3(directory, name);
       const stat = lstatSync(filePath);
       if (stat.isSymbolicLink()) {
         errors.push(`${resourcePath}: symlinks are not supported`);
@@ -2846,7 +2935,7 @@ function localSkillResources(skillDir) {
         errors.push(`${resourcePath}: path conflicts ignoring letter case with ${conflict.path}`);
         continue;
       }
-      const sha256 = createHash("sha256").update(readFileSync2(filePath)).digest("hex");
+      const sha256 = createHash2("sha256").update(readFileSync3(filePath)).digest("hex");
       resources.push({ path: resourcePath, filePath, size: stat.size, sha256 });
     }
   };
@@ -2877,20 +2966,20 @@ function skillResourceChangesSummary(changes) {
   ].join(", ");
 }
 function loadLocalSkills(platformDir, filterName) {
-  const skillsDir = join2(platformDir, "skills");
-  if (!existsSync2(skillsDir)) return [];
+  const skillsDir = join3(platformDir, "skills");
+  if (!existsSync3(skillsDir)) return [];
   const skills = [];
   const errors = [];
-  for (const entry of readdirSync2(skillsDir, { withFileTypes: true })) {
+  for (const entry of readdirSync3(skillsDir, { withFileTypes: true })) {
     if (!entry.isDirectory() || entry.name.startsWith(".")) continue;
     if (filterName && entry.name !== filterName) continue;
     if (!SKILL_SLUG_RE.test(entry.name)) {
       errors.push(`${entry.name}: directory name must be a lowercase slug`);
       continue;
     }
-    const skillDir = join2(skillsDir, entry.name);
-    const path = join2(skillDir, "SKILL.md");
-    if (!existsSync2(path)) {
+    const skillDir = join3(skillsDir, entry.name);
+    const path = join3(skillDir, "SKILL.md");
+    if (!existsSync3(path)) {
       errors.push(`${entry.name}: missing SKILL.md`);
       continue;
     }
@@ -2901,7 +2990,7 @@ function loadLocalSkills(platformDir, filterName) {
     }
     const { resources, errors: resourceErrors } = localSkillResources(skillDir);
     errors.push(...resourceErrors.map((error3) => `${entry.name}: ${error3}`));
-    const content = readFileSync2(path, "utf-8");
+    const content = readFileSync3(path, "utf-8");
     const separator = /\r?\n---\r?\n/.exec(content);
     const parts = separator ? [content.slice(0, separator.index), content.slice(separator.index + separator[0].length)] : [content];
     if (parts.length !== 2) {
@@ -3079,8 +3168,8 @@ async function planSkills(api, localSkills, projectId, appName) {
   return changes;
 }
 async function uploadSkillResource(api, skillID, resource) {
-  const bytes = readFileSync2(resource.filePath);
-  const sha256 = createHash("sha256").update(bytes).digest("hex");
+  const bytes = readFileSync3(resource.filePath);
+  const sha256 = createHash2("sha256").update(bytes).digest("hex");
   if (bytes.byteLength !== resource.size || sha256 !== resource.sha256) {
     throw new Error(`${resource.path} changed while apply was running`);
   }
@@ -3180,10 +3269,10 @@ function validateRemoteSkillResources(resources) {
 }
 function writeVerifiedSkillResource(resource, bytes, skillDir, source) {
   if (bytes.byteLength !== resource.size) throw new Error(`${resource.path}: ${source} size does not match`);
-  if (createHash("sha256").update(bytes).digest("hex") !== resource.sha256) {
+  if (createHash2("sha256").update(bytes).digest("hex") !== resource.sha256) {
     throw new Error(`${resource.path}: ${source} checksum does not match`);
   }
-  const destination = join2(skillDir, ...resource.path.split("/"));
+  const destination = join3(skillDir, ...resource.path.split("/"));
   mkdirSync(dirname2(destination), { recursive: true });
   writeFileSync(destination, bytes);
 }
@@ -3200,12 +3289,12 @@ async function downloadSkillResource(resource, skillDir) {
 }
 function replaceSkillDirectory(stagingDir, skillDir) {
   const backupDir = `${stagingDir}.previous`;
-  const hadExisting = existsSync2(skillDir);
+  const hadExisting = existsSync3(skillDir);
   if (hadExisting) renameSync(skillDir, backupDir);
   try {
     renameSync(stagingDir, skillDir);
   } catch (error3) {
-    if (hadExisting && !existsSync2(skillDir)) renameSync(backupDir, skillDir);
+    if (hadExisting && !existsSync3(skillDir)) renameSync(backupDir, skillDir);
     throw error3;
   }
   if (hadExisting) rmSync(backupDir, { recursive: true, force: true });
@@ -3216,7 +3305,7 @@ async function pullSkills(api, platformDir, filterName, projectId, appName, chec
     return;
   }
   const scopedProjectID = requireProjectSkillsProjectID(projectId);
-  const skillsDir = join2(platformDir, "skills");
+  const skillsDir = join3(platformDir, "skills");
   const remoteSkills = remoteSkillsByLocalSlug(
     await api.listAgentSkills({ project_id: scopedProjectID }),
     appName
@@ -3250,11 +3339,11 @@ async function pullSkills(api, platformDir, filterName, projectId, appName, chec
     const resources = [...skill.resources ?? []].sort((a, b) => a.path.localeCompare(b.path));
     validateRemoteSkillResources(resources);
     const localResources = new Map(local?.resources.map((resource) => [resource.path, resource]) ?? []);
-    const skillDir = join2(skillsDir, localSlug);
+    const skillDir = join3(skillsDir, localSlug);
     mkdirSync(skillsDir, { recursive: true });
-    const stagingDir = mkdtempSync(join2(platformDir, `.skill-${localSlug}-pull-`));
+    const stagingDir = mkdtempSync(join3(platformDir, `.skill-${localSlug}-pull-`));
     try {
-      writeFileSync(join2(stagingDir, "SKILL.md"), skillMarkdown({
+      writeFileSync(join3(stagingDir, "SKILL.md"), skillMarkdown({
         name: skill.name,
         summary: skill.summary || "",
         instructions: skill.instructions || ""
@@ -3262,7 +3351,7 @@ async function pullSkills(api, platformDir, filterName, projectId, appName, chec
       for (const resource of resources) {
         const localResource = localResources.get(resource.path);
         if (localResource?.size === resource.size && localResource.sha256 === resource.sha256) {
-          writeVerifiedSkillResource(resource, readFileSync2(localResource.filePath), stagingDir, "local");
+          writeVerifiedSkillResource(resource, readFileSync3(localResource.filePath), stagingDir, "local");
         } else {
           await downloadSkillResource(resource, stagingDir);
         }
@@ -3275,26 +3364,26 @@ async function pullSkills(api, platformDir, filterName, projectId, appName, chec
   }
 }
 function loadLocalAgents(platformDir, filterName, appName) {
-  const agentsDir = join2(platformDir, "agents");
-  if (!existsSync2(agentsDir)) return [];
+  const agentsDir = join3(platformDir, "agents");
+  if (!existsSync3(agentsDir)) return [];
   const agents = [];
   const errors = [];
-  for (const entry of readdirSync2(agentsDir, { withFileTypes: true })) {
+  for (const entry of readdirSync3(agentsDir, { withFileTypes: true })) {
     if (!entry.isDirectory()) continue;
-    const agentDir = join2(agentsDir, entry.name);
-    const configPath = join2(agentDir, "config.json");
-    const promptPath = join2(agentDir, "system_prompt.md");
-    const policyPath = join2(agentDir, "policy.js");
-    if (!existsSync2(configPath)) {
+    const agentDir = join3(agentsDir, entry.name);
+    const configPath = join3(agentDir, "config.json");
+    const promptPath = join3(agentDir, "system_prompt.md");
+    const policyPath = join3(agentDir, "policy.js");
+    if (!existsSync3(configPath)) {
       errors.push(`${entry.name}: missing config.json`);
       continue;
     }
-    if (!existsSync2(promptPath)) {
+    if (!existsSync3(promptPath)) {
       errors.push(`${entry.name}: missing system_prompt.md`);
       continue;
     }
     try {
-      const config = JSON.parse(readFileSync2(configPath, "utf-8"));
+      const config = JSON.parse(readFileSync3(configPath, "utf-8"));
       if (filterName && config.external_id !== filterName && config.name !== filterName && entry.name !== filterName) {
         continue;
       }
@@ -3324,8 +3413,8 @@ function loadLocalAgents(platformDir, filterName, appName) {
           continue;
         }
       }
-      let systemPrompt = readFileSync2(promptPath, "utf-8");
-      let policyScript = existsSync2(policyPath) ? readFileSync2(policyPath, "utf-8") : "";
+      let systemPrompt = readFileSync3(promptPath, "utf-8");
+      let policyScript = existsSync3(policyPath) ? readFileSync3(policyPath, "utf-8") : "";
       if (appName) {
         systemPrompt = systemPrompt.replaceAll("{{app}}", appName);
         policyScript = policyScript.replaceAll("{{app}}", appName);
@@ -3528,7 +3617,7 @@ function allowedFunctionsChanged(remote, local) {
   return JSON.stringify([...remote ?? []].sort()) !== JSON.stringify([...local].sort());
 }
 async function pullAgents(api, platformDir, filterName, projectId, appName) {
-  const agentsDir = join2(platformDir, "agents");
+  const agentsDir = join3(platformDir, "agents");
   mkdirSync(agentsDir, { recursive: true });
   const agents = await api.listAgents(projectId ? { project_id: projectId } : void 0);
   const skillIdToSlug = /* @__PURE__ */ new Map();
@@ -3550,7 +3639,7 @@ async function pullAgents(api, platformDir, filterName, projectId, appName) {
       continue;
     }
     const dirName = agent.external_id.replace(/[^a-zA-Z0-9_-]/g, "_");
-    const agentDir = join2(agentsDir, dirName);
+    const agentDir = join3(agentsDir, dirName);
     mkdirSync(agentDir, { recursive: true });
     const skillSlugs = [];
     if (agent.skill_ids) {
@@ -3570,16 +3659,27 @@ async function pullAgents(api, platformDir, filterName, projectId, appName) {
     if (agent.idle_reap_timeout_seconds) config.idle_reap_timeout_seconds = agent.idle_reap_timeout_seconds;
     if (skillSlugs.length > 0) config.skills = skillSlugs;
     if (agent.policy_enabled) config.policy_enabled = true;
-    writeFileSync(join2(agentDir, "config.json"), JSON.stringify(config, null, 2) + "\n");
-    writeFileSync(join2(agentDir, "system_prompt.md"), agent.system_prompt || "");
+    writeFileSync(join3(agentDir, "config.json"), JSON.stringify(config, null, 2) + "\n");
+    writeFileSync(join3(agentDir, "system_prompt.md"), agent.system_prompt || "");
     if (agent.policy_script) {
-      writeFileSync(join2(agentDir, "policy.js"), agent.policy_script);
+      writeFileSync(join3(agentDir, "policy.js"), agent.policy_script);
     }
     console.log(pc2.green("  \u2713"), `${agent.name} \u2192 agents/${dirName}/`);
   }
 }
 async function listResources(api, platformDir, filterType, appName, projectId) {
   const results = [];
+  if (!filterType || filterType === "views") {
+    const local = loadLocalViews(platformDir);
+    const remote = (await api.listViews()).filter((view) => !projectId || view.project_id === projectId);
+    for (const view of local) {
+      const deployed = remote.find((candidate) => candidate.name === view.config.name);
+      let status = "local-only";
+      if (deployed) status = deployed.definition_hash === viewDefinitionHash(view) ? "synced" : "changed";
+      results.push({ name: view.config.name, type: "views", status });
+    }
+    for (const view of remote) if (!local.some((candidate) => candidate.config.name === view.name)) results.push({ name: view.name, type: "views", status: "remote-only" });
+  }
   if (!filterType || filterType === "collections") {
     const localCollections = loadLocalCollections(platformDir);
     const remoteCollections = await api.listCollections();
@@ -4067,6 +4167,13 @@ async function destroyApp(skipConfirm) {
   console.log(pc2.green("  \u2713"), `App "${appRecord.name}" deleted from Lumera.`);
 }
 async function showResource(api, platformDir, resourceType, resourceName, appName, projectId) {
+  if (resourceType === "views") {
+    const local = loadLocalViews(platformDir, resourceName)[0];
+    const remote = (await api.listViews()).find((view) => view.name === resourceName && (!projectId || view.project_id === projectId));
+    if (!local && !remote) throw new Error(`View ${resourceName} not found`);
+    console.log(JSON.stringify({ local, deployed: remote }, null, 2));
+    return;
+  }
   if (resourceType === "collections") {
     const localCollections = loadLocalCollections(platformDir, resourceName);
     const remoteCollections = await api.listCollections();
@@ -4349,6 +4456,10 @@ async function plan(args) {
       allChanges.push(...changes);
     }
   }
+  if (!type || type === "views") {
+    const views = loadLocalViews(platformDir, name || void 0);
+    if (views.length) allChanges.push(...await planViews(api, views, projectId));
+  }
   let localAutomations = [];
   if (!type || type === "automations") {
     localAutomations = loadLocalAutomations(platformDir, name || void 0, appName);
@@ -4530,6 +4641,11 @@ async function apply(args) {
   const allChanges = [];
   let planValidationErrors = 0;
   const localCollections = !type || type === "collections" ? loadLocalCollections(platformDir, name || void 0) : [];
+  const localViews = type === "views" ? loadLocalViews(platformDir, name || void 0) : [];
+  const viewsDir = join3(platformDir, "views");
+  if (!type && existsSync3(viewsDir) && readdirSync3(viewsDir, { withFileTypes: true }).some((entry) => entry.isDirectory() && entry.name !== "shared")) {
+    console.log(pc2.dim("  View publishing skipped. A human source-project admin can use lumera apply views or Resource shares."));
+  }
   const localAutomations = !type || type === "automations" ? loadLocalAutomations(platformDir, name || void 0, appName) : [];
   const localHooks = !type || type === "hooks" ? loadLocalHooks(platformDir, name || void 0, appName) : [];
   const localSkills = !type || type === "skills" ? loadLocalSkills(platformDir, name || void 0) : [];
@@ -4539,6 +4655,7 @@ async function apply(args) {
   const localAgents = !type || type === "agents" ? loadLocalAgents(platformDir, name || void 0, appName) : [];
   const localMailboxes = !type || type === "mailboxes" ? loadLocalMailboxes(platformDir, name || void 0) : [];
   if (localCollections.length > 0) allChanges.push(...await planCollections(api, localCollections, appName, projectId));
+  if (localViews.length > 0) allChanges.push(...await planViews(api, localViews, projectId));
   if (localAutomations.length > 0) allChanges.push(...await planAutomations(api, localAutomations, projectId));
   if (localHooks.length > 0) allChanges.push(...await planHooks(api, localHooks, collections, projectId));
   if (localSkills.length > 0) allChanges.push(...await planSkills(api, localSkills, projectId, appName));
@@ -4549,7 +4666,7 @@ async function apply(args) {
   }
   if (localMailboxes.length > 0) allChanges.push(...await planMailboxes(api, localMailboxes));
   if (name) {
-    const hasLocal = localCollections.length > 0 || localAutomations.length > 0 || localHooks.length > 0 || localSkills.length > 0 || localAgents.length > 0 || localMailboxes.length > 0;
+    const hasLocal = localViews.length > 0 || localCollections.length > 0 || localAutomations.length > 0 || localHooks.length > 0 || localSkills.length > 0 || localAgents.length > 0 || localMailboxes.length > 0;
     if (!hasLocal) {
       console.log();
       console.log(pc2.red(`  Resource "${name}" not found locally`));
@@ -4565,7 +4682,7 @@ async function apply(args) {
   let willDeployApp = false;
   if (!type && !skipApp) {
     try {
-      if (existsSync2(join2(projectRoot, "dist")) || existsSync2(join2(projectRoot, "src"))) {
+      if (existsSync3(join3(projectRoot, "dist")) || existsSync3(join3(projectRoot, "src"))) {
         willDeployApp = true;
       }
     } catch {
@@ -4627,6 +4744,11 @@ async function apply(args) {
     totalErrors += await applyCollections(api, localCollections, appName);
     console.log();
   }
+  if (localViews.length > 0) {
+    if (!appName) throw new Error("View publishing requires a project context");
+    console.log(pc2.bold("  Views:"));
+    totalErrors += await applyViews(api, localViews, appName, projectId);
+  }
   try {
     const remoteCollections = await api.listCollections();
     collections = buildCollectionIdMap(remoteCollections, appName);
@@ -4693,6 +4815,10 @@ async function pull(args) {
   const api = createApiClient(void 0, void 0, appName);
   const projectId = getProjectId(projectRoot);
   const { type, name } = parseResource(filteredArgs[0]);
+  if (type === "views") {
+    console.log("  Views are authored in Git. Run git pull to sync platform/views and platform/project.json.");
+    return;
+  }
   let checkedLocalSkills;
   if (!force) {
     const conflicts = [];
@@ -4814,6 +4940,7 @@ async function pull(args) {
   console.log();
 }
 async function destroy(args) {
+  if (args[0]?.split("/")[0] === "views") throw new Error("Delete Git-owned views through project Resource shares so source and access are removed together.");
   if (args.includes("--help") || args.includes("-h")) {
     showDestroyHelp();
     return;

package/dist/{run-4XFA5ZDJ.js → run-BJ7PXSEH.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-2CR762KB.js";
 import {
   createApiClient
-} from "./chunk-W57NUJFJ.js";
+} from "./chunk-2A2DSLIE.js";
 import {
   findProjectRoot,
   getApiUrl,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumerahq/cli",
-  "version": "0.34.4",
+  "version": "0.35.1",
   "description": "CLI for building and deploying Lumera apps",
   "type": "module",
   "engines": {