kollab 0.1.28 → 0.1.29

package/dist/index.js

@@ -12238,10 +12238,10 @@ function parseJsonErrorBody(raw) {
     return void 0;
   }
 }
-function buildCreditReservedHint(input) {
-  const reserved = input.code === KOLLAB_CREDIT_RESERVED_CODE || String(input.error ?? "").toLowerCase().includes("credits are temporarily reserved");
+function buildCreditReservedHint(input2) {
+  const reserved = input2.code === KOLLAB_CREDIT_RESERVED_CODE || String(input2.error ?? "").toLowerCase().includes("credits are temporarily reserved");
   if (!reserved) return void 0;
-  const wait = input.retryAfterSeconds ? `about ${input.retryAfterSeconds}s` : "a short while";
+  const wait = input2.retryAfterSeconds ? `about ${input2.retryAfterSeconds}s` : "a short while";
   return `Workspace credits are temporarily held by in-flight or just-interrupted requests in this space; this is not a balance problem. Wait ${wait} and retry the same command. If it keeps happening, check for other runs in this space.`;
 }
 
@@ -14175,67 +14175,67 @@ function registerTaskCreateCommand(task) {
 var import_promises2 = require("fs/promises");
 
 // src/lib/ask-command.ts
-function buildAskRequestBody(spaceId, input) {
+function buildAskRequestBody(spaceId, input2) {
   const qaQueryOption = {};
-  if (input.projectId) {
-    qaQueryOption.knowledgeBaseIds = [input.projectId];
+  if (input2.projectId) {
+    qaQueryOption.knowledgeBaseIds = [input2.projectId];
   }
-  if (input.fileIds && input.fileIds.length > 0) {
-    qaQueryOption.fileIds = input.fileIds;
+  if (input2.fileIds && input2.fileIds.length > 0) {
+    qaQueryOption.fileIds = input2.fileIds;
   }
   const body = {
-    question: input.question,
-    message: input.question,
+    question: input2.question,
+    message: input2.question,
     spaceId,
-    conversationId: input.conversationId ?? "",
+    conversationId: input2.conversationId ?? "",
     qaQueryOption,
-    agent_id: input.agentId ?? "default",
-    agent_mentioned: hasKollabAgentMention(input.question)
+    agent_id: input2.agentId ?? "default",
+    agent_mentioned: hasKollabAgentMention(input2.question)
   };
-  if (input.projectId) {
-    body.projectId = input.projectId;
+  if (input2.projectId) {
+    body.projectId = input2.projectId;
   }
-  if (input.modelTier) {
-    body.model_tier = input.modelTier;
+  if (input2.modelTier) {
+    body.model_tier = input2.modelTier;
   }
-  if (input.byokCredentialId) {
-    body.byok_credential_id = input.byokCredentialId;
+  if (input2.byokCredentialId) {
+    body.byok_credential_id = input2.byokCredentialId;
   }
-  if (input.mcpServerIds && input.mcpServerIds.length > 0) {
-    body.mcp_server_ids = input.mcpServerIds;
+  if (input2.mcpServerIds && input2.mcpServerIds.length > 0) {
+    body.mcp_server_ids = input2.mcpServerIds;
   }
-  if (input.uploadedFileKeys && input.uploadedFileKeys.length > 0) {
-    body.uploaded_file_keys = input.uploadedFileKeys;
+  if (input2.uploadedFileKeys && input2.uploadedFileKeys.length > 0) {
+    body.uploaded_file_keys = input2.uploadedFileKeys;
   }
-  if (Array.isArray(input.attachments) && input.attachments.length > 0) {
-    body.attachments = input.attachments;
+  if (Array.isArray(input2.attachments) && input2.attachments.length > 0) {
+    body.attachments = input2.attachments;
   }
-  if (input.quotedMessageId) {
-    body.quotedMessageId = input.quotedMessageId;
+  if (input2.quotedMessageId) {
+    body.quotedMessageId = input2.quotedMessageId;
   }
-  if (input.remixShareToken) {
+  if (input2.remixShareToken) {
     body.remix_source = {
       source_type: "share",
-      share_token: input.remixShareToken,
-      ...input.remixSourceTaskTitle ? { source_task_title: input.remixSourceTaskTitle } : {}
+      share_token: input2.remixShareToken,
+      ...input2.remixSourceTaskTitle ? { source_task_title: input2.remixSourceTaskTitle } : {}
     };
   }
-  if (input.composerMode) {
-    body.composer_mode = input.composerMode;
+  if (input2.composerMode) {
+    body.composer_mode = input2.composerMode;
   }
-  if (input.composerModeOptions && Object.keys(input.composerModeOptions).length > 0) {
-    body.composer_mode_options = input.composerModeOptions;
+  if (input2.composerModeOptions && Object.keys(input2.composerModeOptions).length > 0) {
+    body.composer_mode_options = input2.composerModeOptions;
   }
   return body;
 }
-function buildAnswerQuestionRequestBody(input) {
+function buildAnswerQuestionRequestBody(input2) {
   return {
-    conversationId: input.conversationId,
-    tool_use_id: input.toolUseId,
-    answers: input.answers,
-    agent_id: input.agentId ?? "default",
-    ...input.modelTier ? { model_tier: input.modelTier } : {},
-    ...input.byokCredentialId ? { byok_credential_id: input.byokCredentialId } : {}
+    conversationId: input2.conversationId,
+    tool_use_id: input2.toolUseId,
+    answers: input2.answers,
+    agent_id: input2.agentId ?? "default",
+    ...input2.modelTier ? { model_tier: input2.modelTier } : {},
+    ...input2.byokCredentialId ? { byok_credential_id: input2.byokCredentialId } : {}
   };
 }
 function hasKollabAgentMention(text2) {
@@ -14679,20 +14679,20 @@ function mimeFromPath2(filePath) {
   };
   return map[ext] ?? "application/octet-stream";
 }
-async function uploadTaskAttachmentBytes(creds, input) {
-  if (!input.conversationId.trim()) {
+async function uploadTaskAttachmentBytes(creds, input2) {
+  if (!input2.conversationId.trim()) {
     throw new Error("conversationId is required");
   }
-  if (input.content.byteLength > MAX_FILE_BYTES2) {
+  if (input2.content.byteLength > MAX_FILE_BYTES2) {
     throw new Error(
-      `File exceeds the 500 MB upload limit (${input.content.byteLength} bytes): ${input.fileName}`
+      `File exceeds the 500 MB upload limit (${input2.content.byteLength} bytes): ${input2.fileName}`
     );
   }
-  const fallbackMimeType = input.contentType || mimeFromPath2(input.fileName);
+  const fallbackMimeType = input2.contentType || mimeFromPath2(input2.fileName);
   const uploadUrlResult = await api(creds, "POST", "/skills/chat/upload-url", {
-    conversation_id: input.conversationId,
-    file_name: input.fileName,
-    file_size: input.content.byteLength
+    conversation_id: input2.conversationId,
+    file_name: input2.fileName,
+    file_size: input2.content.byteLength
   });
   if (!uploadUrlResult.ok || !uploadUrlResult.data) {
     throw new Error(uploadUrlResult.error ?? "Failed to get upload URL");
@@ -14706,11 +14706,11 @@ async function uploadTaskAttachmentBytes(creds, input) {
     file_name: uploadedFileName
   } = uploadUrlResult.data;
   const resolvedMimeType = contentType || fallbackMimeType;
-  const resolvedFileName = uploadedFileName || input.fileName;
+  const resolvedFileName = uploadedFileName || input2.fileName;
   const putResponse = await fetch(uploadUrl, {
     method: "PUT",
     headers: { "Content-Type": resolvedMimeType },
-    body: input.content
+    body: input2.content
   });
   if (!putResponse.ok) {
     throw new Error(
@@ -14722,12 +14722,12 @@ async function uploadTaskAttachmentBytes(creds, input) {
     const syncResult = await api(
       creds,
       "POST",
-      `/artifacts/conversation/${input.conversationId}/sync-upload`,
+      `/artifacts/conversation/${input2.conversationId}/sync-upload`,
       {
         file_name: resolvedFileName,
         s3_key: fileKey,
         s3_bucket: s3Bucket,
-        size: input.content.byteLength,
+        size: input2.content.byteLength,
         content_type: resolvedMimeType
       }
     );
@@ -14752,7 +14752,7 @@ async function uploadTaskAttachmentBytes(creds, input) {
     // ignores these extra fields, while existing scripts may still read them.
     file_key: fileKey,
     file_name: resolvedFileName,
-    file_size: input.content.byteLength,
+    file_size: input2.content.byteLength,
     mime_type: resolvedMimeType,
     download_url: downloadUrl,
     s3_bucket: s3Bucket,
@@ -14761,13 +14761,13 @@ async function uploadTaskAttachmentBytes(creds, input) {
   return {
     fileKey,
     filename: resolvedFileName,
-    size: input.content.byteLength,
+    size: input2.content.byteLength,
     mime: resolvedMimeType,
-    conversationId: input.conversationId,
+    conversationId: input2.conversationId,
     hint: "Pass fileKey to `task ask --uploaded-file-keys` and attachments to `task ask --attachments`.",
     attachments: [attachmentItem],
     uploadedFileKeys: [fileKey],
-    taskAskExample: `kollab task ask --conversation-id ${input.conversationId} --question "Analyse this file" --uploaded-file-keys '["${fileKey}"]' --attachments '${JSON.stringify([attachmentItem])}'`
+    taskAskExample: `kollab task ask --conversation-id ${input2.conversationId} --question "Analyse this file" --uploaded-file-keys '["${fileKey}"]' --attachments '${JSON.stringify([attachmentItem])}'`
   };
 }
 function registerTaskUploadCommand(task) {
@@ -14867,7 +14867,7 @@ function registerTaskAskCommand(task) {
         "--uploaded-file-keys"
       ) : void 0;
       const existingAttachments = opts.attachments !== void 0 ? parseJsonOption(opts.attachments, "--attachments") : void 0;
-      const input = {
+      const input2 = {
         question: resolvedQuestion.question,
         conversationId: opts.conversationId || process.env.CURRENT_CONVERSATION_ID || void 0,
         projectId: opts.projectId,
@@ -14890,13 +14890,13 @@ function registerTaskAskCommand(task) {
       await materializeLargeQuestionAsAttachment(
         creds,
         spaceId,
-        input,
+        input2,
         resolvedQuestion
       );
       const result = await runChatTurn(creds, {
         path: "/skills/chat/stream",
-        body: buildAskRequestBody(spaceId, input),
-        conversationId: input.conversationId
+        body: buildAskRequestBody(spaceId, input2),
+        conversationId: input2.conversationId
       });
       printResult(result);
     }
@@ -14917,34 +14917,34 @@ async function resolveAskQuestion(opts) {
   }
   return { question: opts.question ?? "" };
 }
-async function materializeLargeQuestionAsAttachment(creds, spaceId, input, resolvedQuestion) {
-  if (!shouldMaterializeLargeQuestion(input.question)) {
+async function materializeLargeQuestionAsAttachment(creds, spaceId, input2, resolvedQuestion) {
+  if (!shouldMaterializeLargeQuestion(input2.question)) {
     return;
   }
   const conversationId = await ensureConversationForLargeQuestion(
     creds,
     spaceId,
-    input
+    input2
   );
   const uploaded = await uploadTaskAttachmentBytes(creds, {
     conversationId,
     fileName: buildLargeQuestionFileName(resolvedQuestion.sourceFilePath),
-    content: new TextEncoder().encode(input.question),
+    content: new TextEncoder().encode(input2.question),
     contentType: "text/plain;charset=utf-8"
   });
-  input.conversationId = conversationId;
-  input.question = CLI_LARGE_QUESTION_ATTACHMENT_PROMPT;
-  input.uploadedFileKeys = [
-    ...input.uploadedFileKeys ?? [],
+  input2.conversationId = conversationId;
+  input2.question = CLI_LARGE_QUESTION_ATTACHMENT_PROMPT;
+  input2.uploadedFileKeys = [
+    ...input2.uploadedFileKeys ?? [],
     ...uploaded.uploadedFileKeys
   ];
-  input.attachments = [
-    ...normalizeAttachmentArray(input.attachments),
+  input2.attachments = [
+    ...normalizeAttachmentArray(input2.attachments),
     ...uploaded.attachments
   ];
 }
-async function ensureConversationForLargeQuestion(creds, spaceId, input) {
-  const existingConversationId = input.conversationId?.trim();
+async function ensureConversationForLargeQuestion(creds, spaceId, input2) {
+  const existingConversationId = input2.conversationId?.trim();
   if (existingConversationId) {
     return existingConversationId;
   }
@@ -14952,7 +14952,7 @@ async function ensureConversationForLargeQuestion(creds, spaceId, input) {
     creds,
     "POST",
     "/qa/conversation",
-    buildLargeQuestionConversationPayload(spaceId, input)
+    buildLargeQuestionConversationPayload(spaceId, input2)
   );
   if (!createResult.ok) {
     throw new Error(
@@ -14968,13 +14968,13 @@ async function ensureConversationForLargeQuestion(creds, spaceId, input) {
 function shouldMaterializeLargeQuestion(question) {
   return Buffer.byteLength(question, "utf8") > CLI_DIRECT_QUESTION_MAX_BYTES;
 }
-function buildLargeQuestionConversationPayload(spaceId, input) {
+function buildLargeQuestionConversationPayload(spaceId, input2) {
   return {
     question: "",
     spaceId,
-    ...input.projectId ? { parentId: input.projectId } : {},
-    ...input.modelTier ? { modelTier: input.modelTier } : {},
-    ...input.composerMode ? { composerMode: input.composerMode } : {}
+    ...input2.projectId ? { parentId: input2.projectId } : {},
+    ...input2.modelTier ? { modelTier: input2.modelTier } : {},
+    ...input2.composerMode ? { composerMode: input2.composerMode } : {}
   };
 }
 function buildLargeQuestionFileName(sourceFilePath) {
@@ -14996,7 +14996,7 @@ function registerTaskAnswerQuestionCommand(task) {
   ).requiredOption("--conversation-id <uuid>", "Conversation ID").requiredOption("--tool-use-id <id>", "Questionnaire tool_use_id").requiredOption("--answers <json>", "Answers JSON object").option("--model-tier <tier>", MODEL_SELECTION_OPTION_DESCRIPTION).option("--byok-credential-id <uuid>", "Opaque workspace BYOK credential ID").option("--agent-id <uuid>", "Agent override").action(
     async (opts) => {
       const answers = parseQuestionnaireAnswers(opts.answers);
-      const input = {
+      const input2 = {
         conversationId: opts.conversationId,
         toolUseId: opts.toolUseId,
         answers,
@@ -15007,7 +15007,7 @@ function registerTaskAnswerQuestionCommand(task) {
       const creds = requireCredentials();
       const result = await runChatTurn(creds, {
         path: "/skills/chat/answer-question",
-        body: buildAnswerQuestionRequestBody(input),
+        body: buildAnswerQuestionRequestBody(input2),
         conversationId: opts.conversationId
       });
       printResult(result);
@@ -15342,15 +15342,15 @@ async function fireRelay(creds, spaceId, conversationId, relayQuestion, projectI
   }
   return { accepted: false, attempts: RELAY_RETRY_MAX, ack: null, lastError };
 }
-async function runRelayTest(creds, spaceId, input) {
-  let conversationId = input.conversationId ?? null;
+async function runRelayTest(creds, spaceId, input2) {
+  let conversationId = input2.conversationId ?? null;
   if (!conversationId) {
     conversationId = await createConversation(
       creds,
       spaceId,
-      input.question,
-      input.projectId,
-      input.modelTier
+      input2.question,
+      input2.projectId,
+      input2.modelTier
     );
   }
   if (!conversationId) {
@@ -15371,10 +15371,10 @@ async function runRelayTest(creds, spaceId, input) {
   }
   const controller = new AbortController();
   const mainBody = buildAskRequestBody(spaceId, {
-    question: input.question,
+    question: input2.question,
     conversationId,
-    projectId: input.projectId,
-    modelTier: input.modelTier
+    projectId: input2.projectId,
+    modelTier: input2.modelTier
   });
   const startedAt = Date.now();
   let mainCompleted = false;
@@ -15390,7 +15390,7 @@ async function runRelayTest(creds, spaceId, input) {
   }).catch(() => {
     mainCompleted = mainCompleted || false;
   });
-  const generatingDeadline = Date.now() + input.generatingWaitMs;
+  const generatingDeadline = Date.now() + input2.generatingWaitMs;
   let sawGenerating = false;
   while (Date.now() <= generatingDeadline && !mainCompleted) {
     const status = await getGenerationStatus(creds, conversationId);
@@ -15400,11 +15400,11 @@ async function runRelayTest(creds, spaceId, input) {
     }
     await sleep4(STATUS_POLL_INTERVAL_MS);
   }
-  if (sawGenerating && input.relayAfterMs > 0) {
-    await sleep4(input.relayAfterMs);
+  if (sawGenerating && input2.relayAfterMs > 0) {
+    await sleep4(input2.relayAfterMs);
   }
-  const relayCount = Math.max(1, input.relayCount ?? 1);
-  const relayIntervalMs = input.relayIntervalMs ?? 1500;
+  const relayCount = Math.max(1, input2.relayCount ?? 1);
+  const relayIntervalMs = input2.relayIntervalMs ?? 1500;
   const relays = [];
   let relay = {
     accepted: false,
@@ -15414,14 +15414,14 @@ async function runRelayTest(creds, spaceId, input) {
   };
   const runId = (0, import_node_crypto2.randomUUID)();
   for (let i = 1; i <= relayCount; i += 1) {
-    const q = `${input.relayQuestion} [relay-${runId}-${i}]`;
+    const q = `${input2.relayQuestion} [relay-${runId}-${i}]`;
     const r = await fireRelay(
       creds,
       spaceId,
       conversationId,
       q,
-      input.projectId,
-      input.modelTier
+      input2.projectId,
+      input2.modelTier
     );
     if (i === 1) {
       relay = r;
@@ -15441,7 +15441,7 @@ async function runRelayTest(creds, spaceId, input) {
       await sleep4(relayIntervalMs);
     }
   }
-  const remainingMs = Math.max(0, input.maxWaitMs - (Date.now() - startedAt));
+  const remainingMs = Math.max(0, input2.maxWaitMs - (Date.now() - startedAt));
   let timeout;
   const winner = await Promise.race([
     mainPromise.then(() => "completed"),
@@ -15458,7 +15458,7 @@ async function runRelayTest(creds, spaceId, input) {
     assessRelayMessages(relays, messages);
     finalGenerationStatus = await getGenerationStatus(creds, conversationId);
     if (finalGenerationStatus !== "generating" && relays.every((r) => !r.accepted || r.answered || r.explicitlyFailed)) break;
-    const remaining = input.maxWaitMs - (Date.now() - startedAt);
+    const remaining = input2.maxWaitMs - (Date.now() - startedAt);
     if (remaining <= 0) break;
     await sleep4(Math.min(STATUS_POLL_INTERVAL_MS, remaining));
   } while (true);
@@ -17076,10 +17076,10 @@ function targetsSystemRoot(rest) {
     return t === "" || t === "/" || t === "~" || t === "/*" || /^[A-Za-z]:$/.test(t);
   });
 }
-function hasUnbalancedQuotes(input) {
+function hasUnbalancedQuotes(input2) {
   let quote = null;
-  for (let i = 0; i < input.length; i += 1) {
-    const ch = input[i];
+  for (let i = 0; i < input2.length; i += 1) {
+    const ch = input2[i];
     if (ch === "\\" && quote !== "'") {
       i += 1;
       continue;
@@ -19184,8 +19184,8 @@ function listTools() {
     outputSchema: MCP_TOOL_OUTPUT_SCHEMAS[name]
   }));
 }
-async function runMcpServer(input = process.stdin, output = process.stdout) {
-  const readline = (0, import_node_readline.createInterface)({ input, crlfDelay: Infinity });
+async function runMcpServer(input2 = process.stdin, output = process.stdout) {
+  const readline = (0, import_node_readline.createInterface)({ input: input2, crlfDelay: Infinity });
   const write = (message) => {
     output.write(`${JSON.stringify(message)}
 `);
@@ -20065,8 +20065,60 @@ function registerUserCommands(program2) {
   });
 }
 
+// src/commands/site-platform.ts
+var import_node_fs5 = require("fs");
+function input(file) {
+  return JSON.parse((0, import_node_fs5.readFileSync)(file === "-" ? 0 : file, "utf8"));
+}
+function registerSitePlatformCommands(program2) {
+  const data2 = program2.command("data").description("Space collections, records and committed change feed");
+  for (const action of ["collections", "configure", "list", "get", "save", "delete", "changes"]) {
+    const command = data2.command(action).requiredOption("--app <id>", "Hosted App ID");
+    if (action !== "collections") command.requiredOption("--collection <name>", "Collection name");
+    if (["get", "delete"].includes(action)) command.requiredOption("--id <id>", "Record ID");
+    if (["configure", "save"].includes(action)) command.requiredOption("--file <path>", "JSON file or - for stdin");
+    command.option("--after <cursor>").option("--upper <cursor>").option("--sort <field>").option("--order <direction>").option("--revision <revision>").option("--limit <count>");
+    command.action(async (options) => {
+      const credentials = requireCredentials();
+      const space = requireSpaceId(credentials);
+      const base = `/spaces/${encodeURIComponent(space)}/site-platform/apps/${encodeURIComponent(options.app)}/collections`;
+      const resource = `${base}/${encodeURIComponent(options.collection ?? "")}`;
+      const query = new URLSearchParams(Object.fromEntries(["after", "upper", "sort", "order", "revision", "limit"].filter((key) => options[key] !== void 0).map((key) => [key, options[key]])));
+      const path13 = action === "collections" ? base : action === "configure" ? resource : action === "changes" ? `${resource}/changes` : `${resource}/records${["get", "delete"].includes(action) ? `/${encodeURIComponent(options.id)}` : ""}`;
+      printResult(await api(credentials, ["configure"].includes(action) ? "PUT" : action === "save" ? "POST" : action === "delete" ? "DELETE" : "GET", `${path13}?${query}`, options.file ? input(options.file) : void 0));
+    });
+  }
+  const mail = program2.command("mail").description("Space mailbox, verified destinations, send and delivery records");
+  mail.command("mailbox").action(async () => {
+    const c = requireCredentials();
+    printResult(await api(c, "POST", `/spaces/${encodeURIComponent(requireSpaceId(c))}/site-platform/mailbox`));
+  });
+  for (const action of ["list", "get", "status", "send"]) {
+    const command = mail.command(action).requiredOption("--mailbox <id>", "Mailbox ID");
+    if (["get", "status"].includes(action)) command.requiredOption("--id <id>", "Message ID");
+    if (action === "send") command.requiredOption("--file <path>", "JSON: recipientIds, subject, text, idempotencyKey");
+    command.option("--after <cursor>").option("--limit <count>").action(async (options) => {
+      const c = requireCredentials();
+      const query = new URLSearchParams(Object.fromEntries(["after", "limit"].filter((key) => options[key] !== void 0).map((key) => [key, options[key]])));
+      const path13 = `/spaces/${encodeURIComponent(requireSpaceId(c))}/site-platform/mailboxes/${encodeURIComponent(options.mailbox)}/messages${options.id ? `/${encodeURIComponent(options.id)}` : ""}`;
+      printResult(await api(c, action === "send" ? "POST" : "GET", `${path13}?${query}`, options.file ? input(options.file) : void 0));
+    });
+  }
+  const recipient = mail.command("recipient");
+  for (const action of ["list", "request", "verify"]) {
+    const cmd = recipient.command(action);
+    if (action === "request") cmd.requiredOption("--address <address>");
+    if (action === "verify") cmd.requiredOption("--id <id>").requiredOption("--file <path>", "JSON containing code; - for stdin");
+    cmd.action(async (options) => {
+      const c = requireCredentials();
+      const path13 = `/spaces/${encodeURIComponent(requireSpaceId(c))}/site-platform/recipients${action === "verify" ? `/${encodeURIComponent(options.id)}/verify` : ""}`;
+      printResult(await api(c, action === "list" ? "GET" : "POST", path13, action === "request" ? { address: options.address } : options.file ? input(options.file) : void 0));
+    });
+  }
+}
+
 // src/commands/app.ts
-var import_node_fs6 = require("fs");
+var import_node_fs7 = require("fs");
 var import_node_path4 = require("path");
 
 // src/auth/hosted-app-credentials.ts
@@ -20091,7 +20143,7 @@ async function requireHostedAppCredentials() {
 }
 
 // src/commands/app-services.ts
-var import_node_fs5 = require("fs");
+var import_node_fs6 = require("fs");
 function registerHostedSiteCommands(app) {
   const services = app.command("services").description("Configure shared forms and news for a static site (no function or compute slot)");
   for (const action of ["info", "enable", "disable", "delete-data"]) {
@@ -20113,7 +20165,7 @@ function registerHostedSiteCommands(app) {
   services.command("restore").requiredOption("--id <appId>", "Empty destination App ID").requiredOption("--file <path>", "Exported site-services.json").action(async (options) => {
     try {
       const credentials = await requireHostedAppCredentials();
-      printResult(await api(credentials, "POST", `/hosted-apps/${encodeURIComponent(options.id)}/services/restore`, JSON.parse((0, import_node_fs5.readFileSync)(options.file, "utf8"))));
+      printResult(await api(credentials, "POST", `/hosted-apps/${encodeURIComponent(options.id)}/services/restore`, JSON.parse((0, import_node_fs6.readFileSync)(options.file, "utf8"))));
     } catch (error) {
       emitError(error instanceof Error ? error.message : String(error));
     }
@@ -20129,7 +20181,7 @@ function registerHostedSiteCommands(app) {
   form.command("verify").requiredOption("--id <appId>", "Hosted App ID").description("Read the six digit code from stdin").action(async (options) => {
     try {
       if (process.stdin.isTTY) throw new Error("Pass the verification code through stdin");
-      const code = (0, import_node_fs5.readFileSync)(0, "utf8").trim();
+      const code = (0, import_node_fs6.readFileSync)(0, "utf8").trim();
       printResult(await api(await requireHostedAppCredentials(), "POST", `/hosted-apps/${encodeURIComponent(options.id)}/services/forms/contact/verify`, { code }));
     } catch (error) {
       emitError(error instanceof Error ? error.message : String(error));
@@ -20151,7 +20203,7 @@ function registerHostedSiteCommands(app) {
   const news = app.command("news").description("Manage the news collection; public reads show published records only");
   news.command("save").requiredOption("--id <appId>", "Hosted App ID").requiredOption("--file <path>", "JSON: optional id, title, body, status (draft/published)").action(async (options) => {
     try {
-      printResult(await api(await requireHostedAppCredentials(), "PUT", `/hosted-apps/${encodeURIComponent(options.id)}/services/collections/news/documents`, JSON.parse((0, import_node_fs5.readFileSync)(options.file, "utf8"))));
+      printResult(await api(await requireHostedAppCredentials(), "PUT", `/hosted-apps/${encodeURIComponent(options.id)}/services/collections/news/documents`, JSON.parse((0, import_node_fs6.readFileSync)(options.file, "utf8"))));
     } catch (error) {
       emitError(error instanceof Error ? error.message : String(error));
     }
@@ -20352,12 +20404,12 @@ async function createBlankTask(creds, spaceId, projectId) {
   return readResourceId(requireApiData(result, "Create Hosted App task"), "task");
 }
 async function resolveHostedAppSource(creds, spaceId, options) {
-  const fileSize = (0, import_node_fs6.statSync)(options.file).size;
+  const fileSize = (0, import_node_fs7.statSync)(options.file).size;
   const kind = validateHostedAppFile(options.file, fileSize);
   const conversationId = options.conversationId?.trim();
   if (conversationId && options.projectId?.trim()) throw new Error("--project-id cannot be used with --conversation-id");
   const resolvedConversationId = conversationId || await createBlankTask(creds, spaceId, options.projectId?.trim());
-  const content = (0, import_node_fs6.readFileSync)(options.file);
+  const content = (0, import_node_fs7.readFileSync)(options.file);
   const upload = await uploadTaskAttachmentBytes(creds, {
     conversationId: resolvedConversationId,
     fileName: (0, import_node_path4.basename)(options.file),
@@ -20745,8 +20797,8 @@ var fs6 = __toESM(require("fs"));
 var path6 = __toESM(require("path"));
 var UNKNOWN_VERSION = "0.0.0";
 function injectedVersion() {
-  if ("0.1.28".length > 0) {
-    return "0.1.28";
+  if ("0.1.29".length > 0) {
+    return "0.1.29";
   }
   return null;
 }
@@ -21482,8 +21534,8 @@ function applyRememberRequest(message, authorized) {
 }
 async function performAction(message, scope, options) {
   const { command } = message;
-  const resolve4 = (input) => {
-    const check = authorizeTarget(scope, input);
+  const resolve4 = (input2) => {
+    const check = authorizeTarget(scope, input2);
     if (!check.ok) throw Object.assign(new Error(check.message), { code: check.code });
     return check.resolved;
   };
@@ -22521,6 +22573,18 @@ function isCliCommandAllowed(raw, groupName, subcommand) {
     if (subcommand && PUBLIC_MODEL_COMMANDS.has(subcommand)) return true;
     return allowed.get("model") === "all" || subcommand === "run" && allowed.get("model run") === "all";
   }
+  if (groupName === "data" || groupName === "mail") {
+    const entries = raw === void 0 ? process.env.KOLLAB_ALLOWED_CLI_COMMANDS : raw;
+    let scopes = [];
+    try {
+      const parsed = JSON.parse(entries || "[]");
+      if (Array.isArray(parsed) && parsed.every((s) => typeof s === "string")) scopes = parsed;
+    } catch {
+      return false;
+    }
+    const action = groupName === "data" ? ["collections", "list", "get", "changes"].includes(subcommand ?? "") ? "read" : subcommand === "configure" ? "manage" : "write" : subcommand === "send" ? "send" : ["mailbox", "recipient"].includes(subcommand ?? "") ? "manage" : "read";
+    return scopes.includes(`${groupName}:${action}`);
+  }
   const permission = allowed.get(groupName);
   if (!permission) return false;
   if (groupName !== "app" || permission === "all") return true;
@@ -22545,6 +22609,10 @@ function enforceCliCommandRestrictions(program2) {
   for (const cmd of program2.commands) {
     const groupName = cmd.name();
     if (UNRESTRICTED_COMMANDS.has(groupName)) continue;
+    if (groupName === "data" || groupName === "mail") {
+      for (const sub of cmd.commands) if (!isCliCommandAllowed(void 0, groupName, sub.name())) blockCommand(sub, `${groupName} ${sub.name()}`);
+      continue;
+    }
     if (groupName === "model") {
       for (const sub of cmd.commands) {
         if (!isCliCommandAllowed(void 0, "model", sub.name())) blockCommand(sub, `model ${sub.name()}`);
@@ -22614,6 +22682,7 @@ registerWorkspaceCommands(program);
 registerImagineCommands(program);
 registerUserCommands(program);
 registerHostedAppCommands(program);
+registerSitePlatformCommands(program);
 registerBrowserCommands(program);
 registerInviteCommands(program);
 registerModelCommands(program);