@standards/cli 1.0.0-alpha.442 → 1.0.0-alpha.444

package/dist/bin.mjs

@@ -3,7 +3,7 @@
 import { t as discoverBundles } from "./discover-bundles-DPpEZVv0.mjs";
 import { createRequire } from "node:module";
 import { styleText } from "node:util";
-import { BundleConflictError, StandardsRequestError, createTransport, syncBundle } from "@standards/client";
+import { BundleConflictError, StandardsRequestError, createTransport, previewBundleSync, syncBundle } from "@standards/client";
 import { Command, Option } from "commander";
 import { BUNDLE_LOCALES, COUNT_MODES, DECISION_TYPE_AGENT_SETUP, DECISION_TYPE_BUNDLE_SETUP, ENVIRONMENT_HARNESSES, ENVIRONMENT_IMAGES, ENVIRONMENT_SIZES, LINK_MAX_MS, NotFoundError, PROVIDER_NAMES, RECORD_ACCESS_ROLES, RESOURCE_VISIBILITIES, SchemaError, SchemaErrorCode, ValidationError, canonicalStringify, diffSchemaState, environmentHarness, formatByteSize, formatDecisionLink, isEnvironmentHarnessId, isPlainRecord, isSkillRepository, parseRecordAccessRole, parseSchemaState, parseSkillSource, schemaStateSourcePayload } from "@standards/schema";
 import { createWriteStream } from "node:fs";
@@ -287,13 +287,107 @@ async function run(body) {
 		process.exit(1);
 	}
 }
-async function syncDiscovered(cmd, cwd) {
+/**
+* A refused confirmation carries no counts, and a bundle sync's refusal does
+* not even keep its details, so the plan is previewed again: when its
+* fingerprint or its record total is no longer what was sent, the plan is
+* stale and the message names the total to confirm. Anything else, or a
+* caller who cannot count, gets the refusal as the server sent it.
+*/
+async function refuseStale(error, bundle, sent, currentPlan) {
+	if (!(error instanceof StandardsRequestError) || error.status !== 400) throw error;
+	const current = await currentPlan().catch(() => void 0);
+	if (current === void 0) throw error;
+	const { fingerprint, total } = current;
+	if (!(fingerprint !== sent.fingerprint || sent.confirmedRecords !== void 0 && total !== sent.confirmedRecords) || total === void 0) throw error;
+	throw new Error(`${messageOf(error)}\n${bundle}: ${total} records`);
+}
+/** Every record the removal of a bundle deletes. */
+function removalTotal(preview) {
+	return preview.objects.reduce((total, object) => total + object.records, 0);
+}
+/** `<bundle>=<value>`, one per bundle, with a message naming the flag when it is malformed. */
+function parseKeyed(flag, shape, value) {
+	const separator = value.indexOf("=");
+	if (separator > 0 && separator < value.length - 1) return [value.slice(0, separator), value.slice(separator + 1)];
+	throw new ValidationError(`${flag} must read ${shape} (received: ${value})`, []);
+}
+function collectFingerprint(value, fingerprints) {
+	const [bundle, fingerprint] = parseKeyed("--fingerprint", "<bundle>=<fingerprint>", value);
+	return {
+		...fingerprints,
+		[bundle]: fingerprint
+	};
+}
+function collectConfirmRecords(value, confirmations) {
+	const [bundle, count] = parseKeyed("--confirm-records", "<bundle>=<n>", value);
+	if (!/^\d+$/.test(count)) throw new ValidationError(`--confirm-records must read <bundle>=<n> with n a whole number (received: ${value})`, []);
+	return {
+		...confirmations,
+		[bundle]: Number(count)
+	};
+}
+/** The records confirmed for the one bundle a command acts on; another bundle's confirmation is refused. */
+function confirmedFor(name, confirmations, { required }) {
+	const others = Object.keys(confirmations).filter((bundle) => bundle !== name);
+	const confirmed = confirmations[name];
+	if (others.length === 0 && (confirmed !== void 0 || !required)) return confirmed;
+	throw new ValidationError(`Pass --confirm-records ${name}=<n> with the records "${name}" removes: run "bundles ${required ? "remove" : "update"} ${name} --dry-run" first.`, []);
+}
+/** Each confirmed bundle needs the fingerprint of its own sync preview, and the bundle must be one being synced. */
+function checkSyncConfirmations(names, opts) {
+	for (const bundle of Object.keys(opts.confirmRecords)) {
+		if (!names.includes(bundle)) throw new ValidationError(`--confirm-records names "${bundle}", which is not a discovered bundle`, []);
+		if (opts.fingerprint[bundle] === void 0) throw new ValidationError(`Pass --fingerprint ${bundle}=<fingerprint> with --confirm-records ${bundle}=<n>: run "bundles sync --dry-run" first.`, []);
+	}
+}
+function pendingRemovalsLine(bundle, removals) {
+	if (removals.length === 0) return void 0;
+	const records = removals.reduce((total, removal) => total + (removal.records ?? 0), 0);
+	const counted = removals.some((removal) => removal.records !== void 0);
+	return `${bundle}: ${removals.length} removal${removals.length === 1 ? "" : "s"} held${counted ? `, ${records} records` : ""} (run with --dry-run, then --fingerprint and --confirm-records)`;
+}
+async function syncDiscovered(cmd, opts) {
 	const transport = getClientFromCommand(cmd);
-	for (const { bundle } of await orderByUses(await discoverBundles({ cwd }))) try {
-		const { applied, hash } = await syncBundle(transport, bundle);
-		console.info(`${bundle.name} ${applied ? "applied" : "unchanged"} ${shortHash(hash)}`);
-	} catch (error) {
-		throw new Error(describeFailure(bundle.name, error));
+	const ordered = await orderByUses(await discoverBundles({ cwd: opts.cwd }));
+	checkSyncConfirmations(ordered.map(({ bundle }) => bundle.name), opts);
+	if (opts.dryRun) {
+		const plans = [];
+		for (const { bundle } of ordered) try {
+			plans.push({
+				bundle: bundle.name,
+				...await previewBundleSync(transport, bundle)
+			});
+		} catch (error) {
+			throw new Error(describeFailure(bundle.name, error));
+		}
+		formatOutput(plans, getFormat(cmd));
+		return;
+	}
+	for (const { bundle } of ordered) {
+		const confirmedRecords = opts.confirmRecords[bundle.name];
+		const fingerprint = opts.fingerprint[bundle.name];
+		try {
+			const { applied, hash, pendingRemovals } = await syncBundle(transport, bundle, { ...confirmedRecords === void 0 || fingerprint === void 0 ? {} : {
+				fingerprint,
+				confirmedRecords
+			} });
+			console.info(`${bundle.name} ${applied ? "applied" : "unchanged"} ${shortHash(hash)}`);
+			const held = pendingRemovalsLine(bundle.name, pendingRemovals);
+			if (held) console.info(held);
+		} catch (error) {
+			const refused = confirmedRecords === void 0 || fingerprint === void 0 ? error : await refuseStale(error, bundle.name, {
+				fingerprint,
+				confirmedRecords
+			}, async () => {
+				const { fingerprint: current, totalRecords } = await previewBundleSync(transport, bundle);
+				return {
+					fingerprint: current,
+					total: totalRecords
+				};
+			}).catch((stale) => stale);
+			throw new Error(describeFailure(bundle.name, refused));
+		}
 	}
 }
 /** Reject a locale typo instead of letting the API answer a 400 on a bare enum. */
@@ -350,7 +444,7 @@ function withAddOptions(command) {
 */
 function registerBundlesCommand(program) {
 	const bundles = program.command("bundles").description("Sync and manage the workspace's bundles");
-	bundles.command("sync").description("Discover the project's bundles (standards/bundles/*.ts) and sync each one").option("--cwd <dir>", "project root to discover bundles in").action((opts, cmd) => run(() => syncDiscovered(cmd, opts.cwd)));
+	bundles.command("sync").description("Discover the project's bundles (standards/bundles/*.ts) and sync each one; a removal is held until confirmed").option("--cwd <dir>", "project root to discover bundles in").option("--dry-run", "print each bundle's pieces, the removals it would make with their record counts, and its fingerprint").option("--fingerprint <bundle=fingerprint>", "the fingerprint `bundles sync --dry-run` printed for a bundle (repeatable)", collectFingerprint, {}).option("--confirm-records <bundle=n>", "apply the removals a bundle's sync holds, confirming the records they delete (repeatable); without it they are held", collectConfirmRecords, {}).action((opts, cmd) => run(() => syncDiscovered(cmd, opts)));
 	bundles.command("list").description("List the bundles installed in the workspace").action((_opts, cmd) => run(async () => {
 		const { installed } = await getAppClientFromCommand(cmd).bundles.list({});
 		formatOutput(installed.map((row) => ({
@@ -379,7 +473,7 @@ function registerBundlesCommand(program) {
 			}), getFormat(cmd));
 		});
 	});
-	bundles.command("update").description("Update an added bundle as its plan showed; nothing is removed (--dry-run prints the plan)").argument("<name>", "bundle name").option("--dry-run", "print the update plan, piece by piece, and its fingerprint").option("--fingerprint <fingerprint>", "the fingerprint `bundles update --dry-run` printed").option("--take <pieceId>", "take the new version of a piece you changed (repeatable)", collectPieceId, []).option("--skip-missing <pieceId>", "do not reinstall a missing piece (repeatable)", collectPieceId, []).option("--decision <pieceId=choice>", "how to settle a collision: bind, skip or rename:<name> (repeatable)", collectDecision, {}).action((name, opts, cmd) => {
+	bundles.command("update").description("Update an added bundle as its plan showed; a piece the plan removes goes with its records only when --confirm-records matches (--dry-run prints the plan)").argument("<name>", "bundle name").option("--dry-run", "print the update plan, piece by piece, and its fingerprint").option("--fingerprint <fingerprint>", "the fingerprint `bundles update --dry-run` printed").option("--confirm-records <bundle=n>", "the records the plan's removals delete, as `--dry-run` counted them (only when it removes)", collectConfirmRecords, {}).option("--take <pieceId>", "take the new version of a piece you changed (repeatable)", collectPieceId, []).option("--skip-missing <pieceId>", "do not reinstall a missing piece (repeatable)", collectPieceId, []).option("--decision <pieceId=choice>", "how to settle a collision: bind, skip or rename:<name> (repeatable)", collectDecision, {}).action((name, opts, cmd) => {
 		const fingerprint = opts.dryRun ? void 0 : requireFingerprint(opts.fingerprint, `bundles update ${name} --dry-run`);
 		return run(async () => {
 			const client = getAppClientFromCommand(cmd);
@@ -387,20 +481,60 @@ function registerBundlesCommand(program) {
 				formatOutput(await client.bundles.updatePreview({ name }), getFormat(cmd));
 				return;
 			}
-			const { applied } = await client.bundles.update({
-				name,
-				fingerprint,
-				take: opts.take,
-				skipMissing: opts.skipMissing,
-				decisions: opts.decision
-			});
-			console.info(`${name} updated, ${applied} applied`);
+			const confirmedRecords = confirmedFor(name, opts.confirmRecords, { required: false });
+			try {
+				const { applied } = await client.bundles.update({
+					name,
+					fingerprint,
+					take: opts.take,
+					skipMissing: opts.skipMissing,
+					decisions: opts.decision,
+					...confirmedRecords === void 0 ? {} : { confirmedRecords }
+				});
+				console.info(`${name} updated, ${applied} applied`);
+			} catch (error) {
+				await refuseStale(error, name, {
+					fingerprint,
+					confirmedRecords
+				}, async () => {
+					const { fingerprint: current, totalRecords } = await client.bundles.updatePreview({ name });
+					return {
+						fingerprint: current,
+						total: totalRecords
+					};
+				});
+			}
 		});
 	});
-	bundles.command("remove").description("Remove a synced bundle; its pieces are demoted, never deleted. An added bundle is refused: uninstall it from the Bundles window").argument("<name>", "bundle name").option("--yes", "remove without confirmation").action((name, opts, cmd) => run(async () => {
-		requireConfirmation(opts.yes, `Removing bundle "${name}" demotes its objects to workspace-owned. Re-run with "--yes" to confirm.`);
-		await getAppClientFromCommand(cmd).bundles.remove({ name });
-		console.info(`${name} removed`);
+	bundles.command("remove").description("Remove a synced bundle: its objects are deleted with their records, only when --confirm-records matches the count (--dry-run prints it). An added bundle is removed the same way").argument("<name>", "bundle name").option("--dry-run", "print what the removal deletes, its record counts and the fingerprint").option("--fingerprint <fingerprint>", "the fingerprint `bundles remove --dry-run` printed").option("--confirm-records <bundle=n>", "the records the removal deletes, as `--dry-run` counted them", collectConfirmRecords, {}).action((name, opts, cmd) => run(async () => {
+		const client = getAppClientFromCommand(cmd);
+		if (opts.dryRun) {
+			const preview = await client.bundles.removalPreview({ name });
+			formatOutput({
+				...preview,
+				totalRecords: removalTotal(preview)
+			}, getFormat(cmd));
+			return;
+		}
+		const confirmation = {
+			confirmedRecords: confirmedFor(name, opts.confirmRecords, { required: true }),
+			fingerprint: requireFingerprint(opts.fingerprint, `bundles remove ${name} --dry-run`)
+		};
+		try {
+			await client.bundles.remove({
+				name,
+				...confirmation
+			});
+			console.info(`${name} removed`);
+		} catch (error) {
+			await refuseStale(error, name, confirmation, async () => {
+				const preview = await client.bundles.removalPreview({ name });
+				return {
+					fingerprint: preview.fingerprint,
+					total: removalTotal(preview)
+				};
+			});
+		}
 	}));
 }
 // src/commands/connectors.ts
@@ -412,10 +546,7 @@ const PROVIDERS = Object.keys({
 	"google-calendar": true,
 	"outlook-calendar": true
 });
-const CAPABILITIES = Object.keys({
-	modify: true,
-	send: true
-});
+const CAPABILITIES = Object.keys({ modify: true });
 const MAIL_PROVIDERS = ["gmail", "outlook"];
 const CALENDAR_PROVIDERS = ["google-calendar", "outlook-calendar"];
 /**
@@ -424,14 +555,9 @@ const CALENDAR_PROVIDERS = ["google-calendar", "outlook-calendar"];
 */
 function connectDisclosure(provider, capabilities = []) {
 	const modify = capabilities.includes("modify");
-	const send = capabilities.includes("send");
 	const lines = ["Standards will be able to:"];
-	if (MAIL_PROVIDERS.includes(provider)) {
-		lines.push("- read your emails and their attachments");
-		if (modify || send && provider === "outlook") lines.push("- change your emails");
-		if (send) lines.push("- send emails from this address");
-		lines.push("It shows them in the workspace, links them to records and makes them searchable.", "AI providers process your email automatically: new emails are classified, your email history is indexed for search by meaning, and important exchanges feed memory. The default assistant can read this mailbox, and AI providers also process your email whenever an agent works on it.");
-	} else if (CALENDAR_PROVIDERS.includes(provider)) {
+	if (MAIL_PROVIDERS.includes(provider)) lines.push("- read your emails and their attachments", "- change your emails", "- send emails from this address", "It shows them in the workspace, links them to records and makes them searchable.", "AI providers process your email automatically: new emails are classified, your email history is indexed for search by meaning, and important exchanges feed memory. The default assistant can read this mailbox, and AI providers also process your email whenever an agent works on it.");
+	else if (CALENDAR_PROVIDERS.includes(provider)) {
 		lines.push("- read your events, their guests and their details");
 		if (modify) lines.push("- create, change and delete your events");
 		lines.push("It shows them in the workspace, links them to records and makes them searchable.", "The default assistant can read this calendar, and AI providers process your events whenever an agent works on them.");
@@ -458,20 +584,29 @@ function registerConnectorsCommand(program) {
 	connectors.command("list").description("List connector connections").option("--scope <scope>", "connection scope (tenant or actor)", "tenant").action(async (opts, cmd) => {
 		formatOutput(await getAppClientFromCommand(cmd).connectors.list({ scope: resolveScope(opts.scope) }), getFormat(cmd));
 	});
-	connectors.command("connect").description("Check a provider and capabilities; the account itself is connected from the app").requiredOption("--provider <provider>", `connector provider (${PROVIDERS.join(", ")}); run "connectors providers" for the ones this deployment configured`).option("--scope <scope>", "connection scope (tenant or actor)", "tenant").option("--capabilities <list>", `comma-separated capability tiers beyond read (${CAPABILITIES.join(", ")})`).option("--yes", "confirm the access a mailbox or calendar connection gives Standards").action((opts) => {
+	connectors.command("connect").description("Check a provider and capabilities; the account itself is connected from the app").requiredOption("--provider <provider>", `connector provider (${PROVIDERS.join(", ")}); run "connectors providers" for the ones this deployment configured`).option("--scope <scope>", "connection scope (tenant or actor)", "tenant").option("--capabilities <list>", `calendar capability tiers beyond read (${CAPABILITIES.join(", ")}); a mailbox takes none`).option("--yes", "confirm the access a mailbox or calendar connection gives Standards").action((opts) => {
 		if (!PROVIDERS.includes(opts.provider)) throw new ValidationError(`--provider must be one of: ${PROVIDERS.join(", ")}`, []);
 		const capabilities = parseCapabilities(opts.capabilities);
+		if (capabilities && MAIL_PROVIDERS.includes(opts.provider)) throw new ValidationError("--capabilities applies to calendars only: a mailbox always asks for reading, changing and sending", []);
 		const disclosure = connectDisclosure(opts.provider, capabilities);
 		if (disclosure && !opts.yes) throw new Error(`${disclosure}\n\nRe-run with "--yes" to continue.`);
 		process.stdout.write(`${opts.provider} is connected from the Standards app: open Connectors in the sidebar and connect it there.\n`);
 	});
-	connectors.command("disconnect").description("Disconnect (delete) a connector connection").argument("<id>", "connection ID").option("--yes", "disconnect without confirmation").option("--remove-imported", "also remove what a mail or calendar connection imported (kept by default)").action(async (id, opts, cmd) => {
-		if (!opts.yes) throw new Error("Disconnecting a connector is explicit. Re-run with \"--yes\" to confirm.");
+	connectors.command("disconnect").description("Disconnect a connector connection: it stops syncing, and everything it imported stays. Reconnect it from the app").argument("<id>", "connection ID").action(async (id, _opts, cmd) => {
+		await getAppClientFromCommand(cmd).connectors.disconnect({ id });
+		printDone(`Connector connection ${id} disconnected. Everything it imported stays.`);
+	});
+	connectors.command("retry").description("Retry a failing connector connection now: its backoff is lifted and one sync pass is scheduled. A connection that does not sync (disconnected, waiting for a reconnect) is left as it is").argument("<id>", "connection ID").action(async (id, _opts, cmd) => {
+		await getAppClientFromCommand(cmd).connectors.retrySync({ id });
+		printDone(`Connector connection ${id}: retry requested. A connection that syncs gets a pass now; one that does not is left as it is.`);
+	});
+	connectors.command("delete").description("Delete a connector connection. Deleting a mailbox's connection deletes its mail: every email no other connected mailbox holds").argument("<id>", "connection ID").option("--yes", "delete without confirmation").option("--remove-imported", "also remove the meetings a calendar connection imported (kept by default)").action(async (id, opts, cmd) => {
+		if (!opts.yes) throw new Error("This deletes the connection. With a mailbox it also deletes its mail: every email no other connected mailbox holds. Re-run with \"--yes\" to confirm.");
 		await getAppClientFromCommand(cmd).connectors.delete({
 			id,
 			...opts.removeImported ? { removeImported: "true" } : {}
 		});
-		printDone(`Connector connection ${id} disconnected.`);
+		printDone(`Connector connection ${id} deleted. A mailbox's mail is removed in the background.`);
 	});
 }
 // src/commands/decisions.ts

package/guide/core.md

@@ -50,7 +50,7 @@ One exception: `standards schema diff` exits 0 when equal, 1 when there are diff
 - Pipe JSON into `jq`: `standards records list contacts | jq '.data[].id'`.
 - Collections are `{ data, page: { hasMore, total, countMode } }`. For a row table, select `.data` first.
 - Single-quote JSON arguments: `--data '{"email":"a@b.com"}'`.
-- Destructive commands refuse without `--yes`. Preview first with `--dry-run` where it exists.
+- Destructive commands refuse without `--yes`. Preview first with `--dry-run` where it exists. A bundle removal confirms with `--confirm-records <bundle>=<n>`, the record count its `--dry-run` printed, instead.
 - Never put a secret in argv. Pipe it: `printf %s "$VALUE" | standards secrets set KEY`.
 
 ## Command groups
@@ -62,7 +62,7 @@ One exception: `standards schema diff` exits 0 when equal, 1 when there are diff
 | `files` | upload, list, download and delete uploaded files | `records` |
 | `meetings` | read meetings and their transcripts | `records` |
 | `schema` | inspect objects; `pull` and `diff` deployed source vs runtime | `schema-and-bundles` |
-| `bundles` | sync, add and update bundles | `schema-and-bundles` |
+| `bundles` | sync, add, update and remove bundles | `schema-and-bundles` |
 | `skills` | pull, push, search, add workspace skills | `schema-and-bundles` |
 | `mcp` | remote MCP servers mounted into agents | `schema-and-bundles` |
 | `connectors` | mail and calendar connections | `schema-and-bundles` |

package/guide/schema-and-bundles.md

@@ -26,22 +26,33 @@ standards bundles status                     # current, update or repair, and wh
 standards bundles available --locale fr      # bundles the workspace may add as copies it owns
 ```
 
+A sync holds its removals (an attribute, option, view or object a bundle no longer declares) and prints `<name>: <n> removals held, <r> records`. Confirm them with the dry run's fingerprint and `totalRecords`, one pair per bundle:
+
+```bash
+standards bundles sync --dry-run                                         # per bundle: pieces, removals with record counts, totalRecords, fingerprint
+standards bundles sync --fingerprint crm=<fp> --confirm-records crm=<n>  # applies crm's removals: values and records go
+```
+
 Add and update in two steps: plan with `--dry-run`, then apply with the plan's `fingerprint`.
 
 ```bash
 standards bundles add crm --with-samples --dry-run          # plan: new and colliding pieces + fingerprint
 standards bundles add crm --with-samples --fingerprint <fp> \
   --decision <pieceId>=bind --decision <pieceId>=rename:opportunities --decision <pieceId>=skip
-standards bundles update crm --dry-run                      # pieces by group + fingerprint
+standards bundles update crm --dry-run                      # pieces by group, removals, totalRecords + fingerprint
 standards bundles update crm --fingerprint <fp> --take deals --skip-missing notes --decision companies=bind
-standards bundles remove <name> --yes
+standards bundles update crm --fingerprint <fp> --confirm-records crm=<n>   # when the plan removes pieces
+standards bundles remove <name> --dry-run                   # objects with their records, totalRecords + fingerprint
+standards bundles remove <name> --fingerprint <fp> --confirm-records <name>=<n>
 ```
 
 - Without `--dry-run`, `--fingerprint` is required. Pass the same names and flags as the plan.
 - The server refuses a stale fingerprint: the workspace changed since the plan. Plan again.
 - `--decision` settles one collision: `bind`, `skip` or `rename:<name>`.
-- `update` keeps a piece you changed unless `--take` names it, restores a missing piece unless `--skip-missing` names it, and never removes a piece.
-- `remove` demotes a synced bundle's objects to workspace-owned and deletes nothing. An added bundle is uninstalled from the app's Bundles window.
+- `--fingerprint` is `<bundle>=<fp>` on `sync` (it pushes several bundles, repeatable) and a plain value on `add`, `update` and `remove`. `--confirm-records` is always `<bundle>=<n>`.
+- `update` keeps a piece you changed unless `--take` names it, restores a missing piece unless `--skip-missing` names it, and removes a piece the new version dropped only with `--confirm-records`.
+- `remove` deletes the bundle's objects with every record (private and trashed included) and its views, synced or added alike. It needs `architect:delete`.
+- A count other than the server's own recount, or a workspace changed since the dry run, is refused with `The workspace changed since the preview; preview again` and the total to confirm now. Nothing is deleted.
 - `sync` prints `<name> applied|unchanged <hash7>` per bundle. A 409 names the owner of the conflicting piece.
 
 ## Skills
@@ -87,8 +98,11 @@ Mail and calendar connections. The account itself is connected from the app (Con
 ```bash
 standards connectors providers                   # providers this deployment can connect
 standards connectors list [--scope tenant|actor]
-standards connectors connect --provider gmail [--capabilities modify,send] [--yes]   # checks, then points to the app
-standards connectors disconnect <id> --yes [--remove-imported]
+standards connectors connect --provider gmail [--yes]                        # checks, then points to the app
+standards connectors connect --provider google-calendar [--capabilities modify] [--yes]   # a calendar may also ask to write
+standards connectors retry <id>                             # a failing connection syncs again now
+standards connectors disconnect <id>                        # stops syncing, keeps everything
+standards connectors delete <id> --yes [--remove-imported]
 ```
 
-`disconnect` keeps what the connection imported unless `--remove-imported` is passed.
+`retry` lifts a failing connection's backoff and schedules one sync pass; a connection that does not sync is left as it is. `disconnect` stops a connection syncing and keeps everything it imported. `delete` deletes it: deleting a mailbox's connection deletes its mail, every email no other connected mailbox holds, removed in the background once the command answers. A workspace mailbox is deleted from the app only (an API key never holds `workspace-mailboxes:delete`). A calendar keeps the meetings it imported unless `--remove-imported` is passed.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@standards/cli",
-  "version": "1.0.0-alpha.442",
+  "version": "1.0.0-alpha.444",
   "description": "CLI tool to interact with Standards API",
   "type": "module",
   "bin": {
@@ -24,9 +24,9 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@standards/client": "1.0.0-alpha.442",
-    "@standards/constants": "1.0.0-alpha.442",
-    "@standards/schema": "1.0.0-alpha.442",
+    "@standards/client": "1.0.0-alpha.444",
+    "@standards/constants": "1.0.0-alpha.444",
+    "@standards/schema": "1.0.0-alpha.444",
     "cli-table3": "^0.6.5",
     "commander": "^13.1.0",
     "jiti": "2.7.0",