@liquidmetal-ai/raindrop 0.6.4 → 0.8.0

package/bundle/index.js

@@ -0,0 +1,51 @@
+import {
+  EPOCH_TS,
+  annotationService,
+  bucketApiService,
+  catalogService,
+  configFromAppFile,
+  createAuthenticateInterceptor,
+  createTraceInterceptor,
+  dnsService,
+  ensureDirectory,
+  eventStreamService,
+  getCurrentVersion,
+  import_core,
+  joinPath,
+  objectService,
+  rainbowAuthService,
+  readState,
+  replaceState,
+  riverjackService,
+  searchAgentService,
+  selectedOrganization,
+  serviceClient,
+  versionInterceptor,
+  workosIntegrationService
+} from "./chunk-G6NE675D.js";
+var export_run = import_core.run;
+export {
+  EPOCH_TS,
+  annotationService,
+  bucketApiService,
+  catalogService,
+  configFromAppFile,
+  createAuthenticateInterceptor,
+  createTraceInterceptor,
+  dnsService,
+  ensureDirectory,
+  eventStreamService,
+  getCurrentVersion,
+  joinPath,
+  objectService,
+  rainbowAuthService,
+  readState,
+  replaceState,
+  riverjackService,
+  export_run as run,
+  searchAgentService,
+  selectedOrganization,
+  serviceClient,
+  versionInterceptor,
+  workosIntegrationService
+};

package/dist/base-command.d.ts

@@ -8,6 +8,7 @@ import { AnnotationService } from '@liquidmetal-ai/drizzle/liquidmetal/v1alpha1/
 import { EventStreamService } from '@liquidmetal-ai/drizzle/liquidmetal/v1alpha1/events_pb';
 import { RiverjackService } from '@liquidmetal-ai/drizzle/liquidmetal/v1alpha1/riverjack_pb';
 import { S3CredentialService } from '@liquidmetal-ai/drizzle/liquidmetal/v1alpha1/bucket_api_pb';
+import { WorkOSIntegrationService } from '@liquidmetal-ai/drizzle/liquidmetal/v1alpha1/workos_integration_pb';
 import { Command, Interfaces } from '@oclif/core';
 import { Config } from './config.js';
 import { ServiceIdentity } from './index.js';
@@ -79,6 +80,11 @@ export declare abstract class BaseCommand<T extends typeof Command> extends Comm
         organizationId: string;
         userId: string;
     }>;
+    workosIntegrationService(configDir?: string): Promise<{
+        client: StrictClient<typeof WorkOSIntegrationService>;
+        userId: string;
+        organizationId: string;
+    }>;
     protected rainbowAuthService(): Promise<{
         client: StrictClient<typeof RainbowAuthService>;
     }>;

package/dist/base-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-command.d.ts","sourceRoot":"","sources":["../src/base-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAEnE,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,qDAAqD,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,wDAAwD,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,kBAAkB,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,MAAM,4DAA4D,CAAC;AAC/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,wDAAwD,CAAC;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,2DAA2D,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AAGjG,OAAO,EAAE,OAAO,EAAS,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzD,OAAO,EAAE,MAAM,EAA0B,MAAM,aAAa,CAAC;AAC7D,OAAO,EAOL,eAAe,EAKhB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,KAAK,CAAC,CAAC,SAAS,OAAO,OAAO,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACvH,MAAM,MAAM,IAAI,CAAC,CAAC,SAAS,OAAO,OAAO,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAEhF,8BAAsB,WAAW,CAAC,CAAC,SAAS,OAAO,OAAO,CAAE,SAAQ,OAAO;IACzE,MAAM,CAAC,YAAY;;;;;;;;MAsCjB;IAEF,MAAM,CAAC,SAAS,KAAM;IACtB,MAAM,CAAC,QAAQ,KAAM;IAErB,SAAS,CAAC,KAAK,EAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,SAAS,CAAC,IAAI,EAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAEzB,SAAS,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAErB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;cAclB,KAAK,CAAC,GAAG,EAAE,KAAK,GAAG;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;cAKvD,OAAO,CAAC,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC;IAIrD,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAK7B,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,YAAY,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAuB5C,SAAS,CAAC,SAAS,IAAI,MAAM;cAIb,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC;IA6BrD,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAChD,MAAM,EAAE,YAAY,CAAC,OAAO,cAAc,CAAC,CAAC;QAC5C,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IAeI,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAC5C,MAAM,EAAE,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;QACxC,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;cAec,kBAAkB,IAAI,OAAO,CAAC;QAC5C,MAAM,EAAE,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;QAChD,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;cAmBc,aAAa,IAAI,OAAO,CAAC;QACvC,MAAM,EAAE,YAAY,CAAC,OAAO,aAAa,CAAC,CAAC;QAC3C,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;cAkBc,iBAAiB,IAAI,OAAO,CAAC;QAC3C,MAAM,EAAE,YAAY,CAAC,OAAO,iBAAiB,CAAC,CAAC;QAC/C,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;cAiBc,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAC9D,MAAM,EAAE,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;cAec,sBAAsB,IAAI,OAAO,CAAC;QAChD,MAAM,EAAE,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;QAC9C,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;cAiBc,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QACzD,MAAM,EAAE,YAAY,CAAC,OAAO,mBAAmB,CAAC,CAAC;QACjD,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;cAgBc,kBAAkB,IAAI,OAAO,CAAC;QAC5C,MAAM,EAAE,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;KACjD,CAAC;IAMI,wBAAwB,IAAI,OAAO,CAAC,MAAM,CAAC;IAWjD,GAAG,CAAC,OAAO,GAAE,MAAW,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;CAGhD"}
+{"version":3,"file":"base-command.d.ts","sourceRoot":"","sources":["../src/base-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAC;AAEnE,OAAO,EAAE,cAAc,EAAE,MAAM,yDAAyD,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,qDAAqD,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,wDAAwD,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,kBAAkB,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,MAAM,4DAA4D,CAAC;AAC/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,wDAAwD,CAAC;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,2DAA2D,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AACjG,OAAO,EAAE,wBAAwB,EAAE,MAAM,oEAAoE,CAAC;AAG9G,OAAO,EAAE,OAAO,EAAS,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzD,OAAO,EAAE,MAAM,EAA0B,MAAM,aAAa,CAAC;AAC7D,OAAO,EAOL,eAAe,EAMhB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,KAAK,CAAC,CAAC,SAAS,OAAO,OAAO,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACvH,MAAM,MAAM,IAAI,CAAC,CAAC,SAAS,OAAO,OAAO,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAEhF,8BAAsB,WAAW,CAAC,CAAC,SAAS,OAAO,OAAO,CAAE,SAAQ,OAAO;IACzE,MAAM,CAAC,YAAY;;;;;;;;MAsCjB;IAEF,MAAM,CAAC,SAAS,KAAM;IACtB,MAAM,CAAC,QAAQ,KAAM;IAErB,SAAS,CAAC,KAAK,EAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,SAAS,CAAC,IAAI,EAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAEzB,SAAS,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAErB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;cAclB,KAAK,CAAC,GAAG,EAAE,KAAK,GAAG;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;cAKvD,OAAO,CAAC,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC;IAIrD,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAK7B,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,YAAY,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAuB5C,SAAS,CAAC,SAAS,IAAI,MAAM;cAIb,eAAe,IAAI,OAAO,CAAC,eAAe,CAAC;IA6BrD,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAChD,MAAM,EAAE,YAAY,CAAC,OAAO,cAAc,CAAC,CAAC;QAC5C,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;IAeI,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAC5C,MAAM,EAAE,YAAY,CAAC,OAAO,UAAU,CAAC,CAAC;QACxC,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;cAec,kBAAkB,IAAI,OAAO,CAAC;QAC5C,MAAM,EAAE,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;QAChD,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;cAmBc,aAAa,IAAI,OAAO,CAAC;QACvC,MAAM,EAAE,YAAY,CAAC,OAAO,aAAa,CAAC,CAAC;QAC3C,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;cAkBc,iBAAiB,IAAI,OAAO,CAAC;QAC3C,MAAM,EAAE,YAAY,CAAC,OAAO,iBAAiB,CAAC,CAAC;QAC/C,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;cAiBc,kBAAkB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAC9D,MAAM,EAAE,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;cAec,sBAAsB,IAAI,OAAO,CAAC;QAChD,MAAM,EAAE,YAAY,CAAC,OAAO,gBAAgB,CAAC,CAAC;QAC9C,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;cAiBc,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QACzD,MAAM,EAAE,YAAY,CAAC,OAAO,mBAAmB,CAAC,CAAC;QACjD,cAAc,EAAE,MAAM,CAAC;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IAgBI,wBAAwB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAC1D,MAAM,EAAE,YAAY,CAAC,OAAO,wBAAwB,CAAC,CAAC;QACtD,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;cAec,kBAAkB,IAAI,OAAO,CAAC;QAC5C,MAAM,EAAE,YAAY,CAAC,OAAO,kBAAkB,CAAC,CAAC;KACjD,CAAC;IAMI,wBAAwB,IAAI,OAAO,CAAC,MAAM,CAAC;IAWjD,GAAG,CAAC,OAAO,GAAE,MAAW,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;CAGhD"}

package/dist/base-command.js

@@ -5,7 +5,7 @@ import { Command, Flags } from '@oclif/core';
 import * as fs from 'node:fs/promises';
 import path from 'node:path';
 import { loadConfig, saveConfig } from './config.js';
-import { catalogService, dnsService, objectService, rainbowAuthService, searchAgentService, selectedOrganization, annotationService, eventStreamService, riverjackService, bucketApiService, } from './index.js';
+import { catalogService, dnsService, objectService, rainbowAuthService, searchAgentService, selectedOrganization, annotationService, eventStreamService, riverjackService, bucketApiService, workosIntegrationService, } from './index.js';
 export class BaseCommand extends Command {
     static HIDDEN_FLAGS = {
         config: Flags.string({
@@ -151,7 +151,7 @@ export class BaseCommand extends Command {
             identity: await this.catalogIdentity(),
             overrideAuthToken: this.flags.rainbowAuthToken,
             logger: this,
-            enableSendVersion: this.flags.sendVersionMetadata === 'true',
+            enableSendVersion: false,
         });
     }
     async searchAgentService() {
@@ -166,7 +166,7 @@ export class BaseCommand extends Command {
                 baseUrl,
             },
             logger: this,
-            enableSendVersion: this.flags.sendVersionMetadata === 'true',
+            enableSendVersion: false,
         });
         return result;
     }
@@ -182,7 +182,7 @@ export class BaseCommand extends Command {
                 baseUrl,
             },
             logger: this,
-            enableSendVersion: this.flags.sendVersionMetadata === 'true',
+            enableSendVersion: false,
         });
         return result;
     }
@@ -198,7 +198,7 @@ export class BaseCommand extends Command {
                 baseUrl,
             },
             logger: this,
-            enableSendVersion: this.flags.sendVersionMetadata === 'true',
+            enableSendVersion: false,
         });
         return result;
     }
@@ -212,7 +212,7 @@ export class BaseCommand extends Command {
             identity: await this.catalogIdentity(),
             overrideAuthToken: this.flags.rainbowAuthToken,
             logger: this,
-            enableSendVersion: this.flags.sendVersionMetadata === 'true',
+            enableSendVersion: false,
         });
     }
     async tenantRiverjackService() {
@@ -227,7 +227,7 @@ export class BaseCommand extends Command {
                 baseUrl,
             },
             logger: this,
-            enableSendVersion: this.flags.sendVersionMetadata === 'true',
+            enableSendVersion: false,
         });
         return result;
     }
@@ -242,10 +242,23 @@ export class BaseCommand extends Command {
                 baseUrl,
             },
             logger: this,
-            enableSendVersion: this.flags.sendVersionMetadata === 'true',
+            enableSendVersion: false,
         });
         return result;
     }
+    async workosIntegrationService(configDir) {
+        if (this.flags.raindropCatalogService) {
+            this.log(`[DEBUG] Using workos-integration-service: ${this.flags.raindropCatalogService}`);
+        }
+        return workosIntegrationService({
+            rainbowAuth: (await this.rainbowAuthService()).client,
+            configDir: configDir ?? this.config.configDir,
+            identity: await this.catalogIdentity(),
+            overrideAuthToken: this.flags.rainbowAuthToken,
+            logger: this,
+            enableSendVersion: false,
+        });
+    }
     async rainbowAuthService() {
         const baseUrl = this.flags.rainbowAuthService;
         return rainbowAuthService(baseUrl);

package/dist/build.d.ts

@@ -3,8 +3,9 @@ import { PrettyPrintableError } from '@oclif/core/interfaces';
 import * as esbuild from 'esbuild';
 export default function build(options: {
     root: string;
-    entryPoints: string[];
+    handlerDir: string;
     outdir: string;
+    isProtected: boolean;
 }): Promise<esbuild.BuildResult>;
 export interface Cmd {
     log: (message?: string, ...args: any[]) => void;

package/dist/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAW,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AAqBnC,wBAA8B,KAAK,CAAC,OAAO,EAAE;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAwE/B;AAED,MAAM,WAAW,GAAG;IAGlB,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC;IAChD,KAAK,CACH,KAAK,EAAE,KAAK,GAAG,MAAM,EACrB,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,oBAAoB,GACvB,KAAK,CAAC;CACV;AAGD,wBAAsB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,iBAgDhG"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,WAAW,EAAoB,MAAM,sCAAsC,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AA0GnC,wBAA8B,KAAK,CAAC,OAAO,EAAE;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAuE/B;AAED,MAAM,WAAW,GAAG;IAGlB,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC;IAChD,KAAK,CACH,KAAK,EAAE,KAAK,GAAG,MAAM,EACrB,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,oBAAoB,GACvB,KAAK,CAAC;CACV;AAGD,wBAAsB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,iBAoHhG"}

package/dist/build.js

@@ -1,49 +1,113 @@
-import { valueOf } from '@liquidmetal-ai/drizzle/appify/build';
+import { Actor, Service, valueOf } from '@liquidmetal-ai/drizzle/appify/build';
+import { init, parse } from 'es-module-lexer';
 import * as esbuild from 'esbuild';
-import { exec } from 'node:child_process';
+import { exec, spawn } from 'node:child_process';
 import fs from 'node:fs/promises';
 import * as path from 'node:path';
 import { promisify } from 'node:util';
 import { HANDLERS_DIR } from './codegen.js';
 const execAsync = promisify(exec);
-async function typeCheck(cwd) {
+// Plugin to selectively rewrite raindrop-framework imports
+function raindropFrameworkPlugin() {
+    return {
+        name: 'raindrop-framework-resolver',
+        setup(build) {
+            // Handle bare package imports - rewrite to ./runtime.js
+            build.onResolve({ filter: /^@liquidmetal-ai\/raindrop-framework$/ }, (_args) => {
+                return {
+                    path: './runtime.js',
+                    external: true,
+                };
+            });
+            // Handle subpath imports - bundle them.
+            build.onResolve({ filter: /^@liquidmetal-ai\/raindrop-framework\/.+/ }, (_args) => {
+                // Let esbuild handle these normally (will bundle them)
+                return undefined;
+            });
+        },
+    };
+}
+// Analyze what exports the user has in their index.ts using es-module-lexer
+async function analyzeExports(indexPath) {
     try {
-        await execAsync('npx tsc --noEmit', {
-            cwd,
-        });
-        return true;
+        // Initialize es-module-lexer (required once)
+        await init;
+        // Read the source file
+        const content = await fs.readFile(indexPath, 'utf-8');
+        // Parse to get exports
+        const [, exports] = parse(content);
+        // Convert export names to a Set
+        const exportNames = new Set();
+        for (const exp of exports) {
+            if (exp.n) {
+                // Named export
+                exportNames.add(exp.n);
+            }
+        }
+        return exportNames;
+    }
+    catch (_error) {
+        // If we can't read or parse the file, assume no exports
+        return new Set();
+    }
+}
+// Generate the entry point content based on what the user has exported
+async function generateEntryPoint(handlerDir, isProtected) {
+    const indexPath = path.join(handlerDir, 'index.ts');
+    const userExports = await analyzeExports(indexPath);
+    let content = '';
+    // Only inject auth exports for protected handlers
+    if (isProtected) {
+        const authExports = ['verify', 'authorize'];
+        const missingAuthExports = authExports.filter(exp => !userExports.has(exp));
+        // Only export auth functions that the user hasn't already exported
+        if (missingAuthExports.length > 0) {
+            content += `export { ${missingAuthExports.join(', ')} } from '../_app/auth.js';\n`;
+        }
     }
-    catch (err) {
-        console.error(err);
-        return false;
+    // Inject cors export if user hasn't exported it
+    // CORS is available for all handlers (not just protected ones)
+    if (!userExports.has('cors')) {
+        // Try to check if _app/cors.ts exists to avoid import errors
+        content += `export { cors } from '../_app/cors.js';\n`;
     }
+    // Explicitly export all user's exports to ensure they get bundled
+    content += `export * from './index.js';\n`;
+    content += `import * as userDefault from './index.js';\n`;
+    content += `export default userDefault.default;\n`;
+    return content;
+}
+async function typeCheck(cwd) {
+    return new Promise((resolve) => {
+        const tsc = spawn('npx', ['tsc', '--noEmit'], {
+            cwd,
+            stdio: 'inherit', // Inherit stdio to show compiler output in real-time
+        });
+        tsc.on('exit', (code) => {
+            resolve(code === 0);
+        });
+    });
 }
 export default async function build(options) {
     // Ensure that TypeScript errors are fixed before building
     const typeCheckPassed = await typeCheck(options.root);
     if (!typeCheckPassed) {
-        throw new Error(`TypeScript type checking failed. Run 'raindrop build validate' and fix all errors before building.`);
+        throw new Error(`TypeScript type checking failed.Run 'raindrop build validate' and fix all errors before building.`);
     }
     // Customize outbase so that even when only one entryPoint is provided,
     // the output file is placed in the same directory as it would if
     // another entryPoint were provided later.
-    let outbase;
-    if (options.entryPoints.length === 1) {
-        outbase = path.join(options.root, HANDLERS_DIR);
-    }
     const gitCommitSha = await currentGitCommitSha();
+    // Generate entry point dynamically based on user's exports and handler visibility
+    const entryPointContent = await generateEntryPoint(options.handlerDir, options.isProtected);
     const buildResult = await esbuild.build({
-        entryPoints: options.entryPoints,
-        external: ['node:crypto', 'crypto', '@liquidmetal-ai/raindrop-framework', './runtime.js'],
-        alias: {
-            '@liquidmetal-ai/raindrop-framework': './runtime.js',
-        },
+        external: ['node:crypto', 'crypto', './runtime.js'],
+        plugins: [raindropFrameworkPlugin()],
         banner: {
-            js: `globalThis.__RAINDROP_GIT_COMMIT_SHA = "${gitCommitSha}";`,
+            js: `globalThis.__RAINDROP_GIT_COMMIT_SHA = "${gitCommitSha}"; `,
         },
         bundle: true,
-        outdir: options.outdir,
-        outbase,
+        outfile: `${options.outdir}/index.js`,
         tsconfig: `${options.root}/tsconfig.json`,
         // TODO [bosgood] Add support for middleware/code injection from wrangler
         inject: [],
@@ -51,7 +115,11 @@ export default async function build(options) {
         // Until we switch to fflate for compression, we need to disable
         // sourcemaps (JSZip uses ~10x memory).
         sourcemap: false,
-        sourceRoot: options.outdir,
+        stdin: {
+            contents: entryPointContent,
+            loader: 'ts',
+            resolveDir: options.handlerDir,
+        },
         // Experiment: let's see how far we can get without minification because:
         // 1) It should be slightly faster to build
         // 2) It should be easier to debug
@@ -82,46 +150,96 @@ export async function buildHandlers(cmd, apps, buildDir, root) {
     // Wipe out the output directory then rebuild
     await fs.rm(buildDir, { force: true, recursive: true });
     cmd.log(`Building to ${buildDir}`);
-    // Discover entrypoints from manifest
-    let entryPoints = [];
+    const buildTasks = [];
     for (const app of apps) {
-        entryPoints = entryPoints.concat(app.handlers().map((handler) => path.join(root, HANDLERS_DIR, valueOf(handler.name), 'index.ts')));
-    }
-    if (entryPoints.length === 0) {
-        cmd.log('Nothing to build');
-        return;
+        for (const handler of app.handlers()) {
+            const handlerName = valueOf(handler.name);
+            // Check if this handler is protected (only for Service and Actor types)
+            let isProtected = false;
+            if (handler instanceof Service || handler instanceof Actor) {
+                isProtected = handler.visibility !== undefined && valueOf(handler.visibility) === 'protected';
+            }
+            buildTasks.push({
+                handlerName,
+                isProtected,
+                handlerDir: `${root}/${HANDLERS_DIR}/${handlerName}`,
+                outdir: path.join(buildDir, handlerName),
+            });
+        }
     }
-    cmd.log(`Building entry points:\n${entryPoints.join('\n')}`);
-    try {
+    // Run all builds in parallel
+    const results = await Promise.allSettled(buildTasks.map(async (task) => {
         const buildResult = await build({
             root: root,
-            entryPoints,
-            outdir: buildDir,
+            handlerDir: task.handlerDir,
+            outdir: task.outdir,
+            isProtected: task.isProtected,
         });
-        if (buildResult.errors.length > 0 || buildResult.warnings.length > 0) {
-            cmd.log('Build results');
+        return { task, buildResult };
+    }));
+    // Aggregate results
+    const successful = [];
+    const failed = [];
+    for (const result of results) {
+        if (result.status === 'fulfilled') {
+            const { task, buildResult } = result.value;
+            if (buildResult.errors.length === 0) {
+                successful.push({ task, buildResult });
+            }
+            else {
+                failed.push({ task, error: buildResult });
+            }
         }
-        if (buildResult.errors.length > 0) {
-            cmd.log(buildResult.errors.map((e) => e.text).join('\n'));
-        }
-        if (buildResult.warnings.length > 0) {
-            cmd.log(buildResult.warnings.map((w) => w.text).join('\n'));
+        else {
+            // Extract task from the rejection - this is tricky, we need to match by index
+            const index = results.indexOf(result);
+            const task = buildTasks[index];
+            failed.push({ task, error: result.reason });
         }
-        if (buildResult.errors.length === 0) {
-            cmd.log('Build successful');
+    }
+    // Log results
+    cmd.log(`\nBuild Summary: ${successful.length}/${buildTasks.length} handlers built successfully`);
+    // Log successful builds
+    if (successful.length > 0) {
+        cmd.log('\nSuccessful builds:');
+        for (const { task } of successful) {
+            cmd.log(`  ✓ ${task.handlerName}`);
         }
-        else {
-            cmd.error('Build failed', { exit: 1 });
+    }
+    // Log warnings across all builds
+    const buildsWithWarnings = [];
+    for (const { task, buildResult } of successful) {
+        if (buildResult.warnings.length > 0) {
+            buildsWithWarnings.push({ handler: task.handlerName, warnings: buildResult.warnings });
         }
     }
-    catch (error) {
-        if (error instanceof Error) {
-            cmd.error(`Build failed: ${error.message}`, { exit: 1 });
+    if (buildsWithWarnings.length > 0) {
+        cmd.log('\nWarnings:');
+        for (const { handler, warnings } of buildsWithWarnings) {
+            cmd.log(`  ${handler}:`);
+            for (const warning of warnings) {
+                cmd.log(`    ${warning.text}`);
+            }
         }
-        else {
-            cmd.error('Build failed with unknown error', { exit: 1 });
+    }
+    // Log errors
+    if (failed.length > 0) {
+        cmd.log('\nFailed builds:');
+        for (const { task, error } of failed) {
+            cmd.log(`  ✗ ${task.handlerName}:`);
+            if (error instanceof Error) {
+                cmd.log(`    ${error.message}`);
+            }
+            else {
+                // esbuild.BuildResult with errors
+                for (const err of error.errors) {
+                    cmd.log(`    ${err.text}`);
+                }
+            }
         }
+        cmd.error(`Build failed for ${failed.length} handler(s)`, { exit: 1 });
     }
+    cmd.log('\nBuild completed successfully');
 }
 async function currentGitCommitSha() {
     try {

package/dist/codegen.d.ts

@@ -39,7 +39,7 @@ export declare function codegenPlan(apps: Application[]): CodegenPlan;
 export declare function gatherEnvForHandler(handler: Actor | Service | Observer | Task, app: Application): string;
 export declare function fileExists(path: string): Promise<boolean>;
 export type DirWalkCallback = (relPath: string) => void | Promise<void>;
-export declare function dirWalk(dir: string, visitFn: DirWalkCallback): Promise<void>;
+export declare function dirWalk(dir: string, visitFn: DirWalkCallback, relativeBase?: string): Promise<void>;
 export declare function kebabCaseToConstantCase(s: string): string;
 export declare function kebabCaseToCamelCase(s: string): string;
 export declare function kebabCaseToUpperCamelCase(s: string): string;

package/dist/codegen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codegen.d.ts","sourceRoot":"","sources":["../src/codegen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAW,MAAM,sCAAsC,CAAC;AAK5G,eAAO,MAAM,SAAS,mBAAmB,CAAC;AAC1C,eAAO,MAAM,aAAa,QAA6E,CAAC;AACxG,eAAO,MAAM,aAAa,SAAS,CAAC;AACpC,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAC1C,eAAO,MAAM,YAAY,QAAQ,CAAC;AAClC,eAAO,MAAM,UAAU,WAAW,CAAC;AACnC,eAAO,MAAM,MAAM,OAAO,CAAC;AAC3B,eAAO,MAAM,UAAU,WAAW,CAAC;AACnC,eAAO,MAAM,aAAa,YAAY,CAAC;AACvC,eAAO,MAAM,uBAAuB,oBAAoB,CAAC;AAoBzD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,KAAK,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;AAEvD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,MAAM,CAG3F;AAED,wBAAsB,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5G;AAqBD,wBAAsB,4BAA4B,CAAC,EACjD,YAAY,EACZ,OAAO,EACP,OAAO,EACP,IAAI,GACL,EAAE;IACD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,eAAe,CAAC;IACzB,IAAI,EAAE,cAAc,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8ChB;AAGD,KAAK,YAAY,GAEb,aAAa,GAEb,iBAAiB,GAEjB,qBAAqB,CAAC;AAE1B,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CAQ1D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAYlF;AAED,MAAM,MAAM,cAAc,GACtB;IACA,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,2BAA2B,CAAC,EAAE,OAAO,CAAC;IAEtC,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GACC,SAAS,CAAC;AAEd,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,GAAG,SAAqB,EACvC,IAAI,EAAE,cAAc,EACpB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B,EAAE,CAAC;AAGJ,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,WAAW,CAgF5D;AAoBD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,IAAI,EAAE,GAAG,EAAE,WAAW,GAAG,MAAM,CAyGxG;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO/D;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAGxE,wBAAsB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBlF;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3D"}
+{"version":3,"file":"codegen.d.ts","sourceRoot":"","sources":["../src/codegen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAW,MAAM,sCAAsC,CAAC;AAK5G,eAAO,MAAM,SAAS,mBAAmB,CAAC;AAC1C,eAAO,MAAM,aAAa,QAA6E,CAAC;AACxG,eAAO,MAAM,aAAa,SAAS,CAAC;AACpC,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAC1C,eAAO,MAAM,YAAY,QAAQ,CAAC;AAClC,eAAO,MAAM,UAAU,WAAW,CAAC;AACnC,eAAO,MAAM,MAAM,OAAO,CAAC;AAC3B,eAAO,MAAM,UAAU,WAAW,CAAC;AACnC,eAAO,MAAM,aAAa,YAAY,CAAC;AACvC,eAAO,MAAM,uBAAuB,oBAAoB,CAAC;AAoBzD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,KAAK,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;AAEvD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,MAAM,CAG3F;AAED,wBAAsB,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5G;AAqBD,wBAAsB,4BAA4B,CAAC,EACjD,YAAY,EACZ,OAAO,EACP,OAAO,EACP,IAAI,GACL,EAAE;IACD,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,eAAe,CAAC;IACzB,IAAI,EAAE,cAAc,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CA8ChB;AAGD,KAAK,YAAY,GAEb,aAAa,GAEb,iBAAiB,GAEjB,qBAAqB,CAAC;AAE1B,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CAQ1D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAYlF;AAED,MAAM,MAAM,cAAc,GACtB;IACA,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,2BAA2B,CAAC,EAAE,OAAO,CAAC;IAEtC,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GACC,SAAS,CAAC;AAEd,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,GAAG,SAAqB,EACvC,IAAI,EAAE,cAAc,EACpB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAaf;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,eAAe,CAAC;CAC3B,EAAE,CAAC;AAGJ,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,WAAW,CAgF5D;AAoBD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,IAAI,EAAE,GAAG,EAAE,WAAW,GAAG,MAAM,CA2HxG;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO/D;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAGxE,wBAAsB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,GAAE,MAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB7G;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3D"}

package/dist/codegen.js

@@ -301,6 +301,19 @@ export function gatherEnvForHandler(handler, app) {
     for (const env of handler.env) {
         bindings[kebabCaseToConstantCase(valueOf(env.name))] = 'string';
     }
+    // Add auth environment variables for protected handlers
+    if ('visibility' in handler && handler.visibility && valueOf(handler.visibility) === 'protected') {
+        // Core auth bindings (provider-agnostic)
+        bindings['LM_AUTH_ALLOWED_ORIGINS'] = 'string';
+        bindings['LM_AUTH_ALLOWED_ISSUERS'] = 'string';
+        // WorkOS provider-specific bindings (optional)
+        bindings['LM_PROVIDER_WORKOS_ORG_ID?'] = 'string';
+        bindings['LM_PROVIDER_WORKOS_CLIENT_ID?'] = 'string';
+        bindings['LM_PROVIDER_WORKOS_API_KEY?'] = 'string';
+        // Add optional jwt field populated by auth middleware
+        bindings['jwt?'] = 'JWTVerifyResult';
+        types.add('JWTVerifyResult');
+    }
     //
     // (nothing to do for Tasks)
     //
@@ -312,6 +325,9 @@ export function gatherEnvForHandler(handler, app) {
     bindings['annotation'] = `Annotation<Omit<MRNObject, 'type' | 'applicationName' | 'versionId'>>`;
     types.add('Annotation');
     types.add('MRNObject');
+    // Add mem binding (automatic KV cache)
+    bindings['mem'] = 'KvCache';
+    types.add('KvCache');
     // Add logger binding.
     bindings['logger'] = 'Logger';
     types.add('Logger');
@@ -339,15 +355,16 @@ export async function fileExists(path) {
     }
 }
 // dirWalk walks a directory tree and calls the callback for each file it encounters
-export async function dirWalk(dir, visitFn) {
+export async function dirWalk(dir, visitFn, relativeBase = '') {
     const entries = await fs.readdir(dir, { withFileTypes: true });
     const tasks = entries.map(async (entry) => {
+        const relativePath = relativeBase ? path.join(relativeBase, entry.name) : entry.name;
         if (entry.isDirectory()) {
-            await dirWalk(path.join(dir, entry.name), visitFn);
+            await dirWalk(path.join(dir, entry.name), visitFn, relativePath);
         }
         else {
             // Process encountered file
-            await visitFn(entry.name);
+            await visitFn(relativePath);
         }
     });
     const settled = await Promise.allSettled(tasks);

package/dist/codegen.test.js

@@ -3,7 +3,7 @@ import * as fs from 'node:fs/promises';
 import * as os from 'node:os';
 import * as path from 'node:path';
 import { expect, test } from 'vitest';
-import { codegenPlan, gatherEnvForHandler, renderTemplatesFromDirectory, shouldWriteTemplate, trimTemplateSuffix, kebabCaseToConstantCase, kebabCaseToCamelCase, kebabCaseToUpperCamelCase, } from './codegen.js';
+import { codegenPlan, gatherEnvForHandler, kebabCaseToCamelCase, kebabCaseToConstantCase, kebabCaseToUpperCamelCase, renderTemplatesFromDirectory, shouldWriteTemplate, trimTemplateSuffix, } from './codegen.js';
 test('trims handlebars suffix', async () => {
     expect(trimTemplateSuffix('index.ts.hbs')).toEqual('index.ts');
 });
@@ -121,6 +121,14 @@ test('codegens template files', async () => {
             renderNonUserModifiableCode: true,
         },
     });
+    // Verify nested directory structure is preserved
+    const authFilePath = path.join(outPath, 'src', '_app', 'auth.ts');
+    const authFileExists = await fs.access(authFilePath).then(() => true, () => false);
+    expect(authFileExists).toBe(true);
+    // Verify the file content was copied correctly
+    const authFileContent = await fs.readFile(authFilePath, 'utf-8');
+    expect(authFileContent).toContain('verifyIssuer');
+    expect(authFileContent).toContain('requireAuthenticated');
 });
 test('kebabCaseToConstantCase', () => {
     expect(kebabCaseToConstantCase('my-variable')).toEqual('MY_VARIABLE');
@@ -163,3 +171,53 @@ test('generates SmartBucket type bindings', async () => {
     // Should include SmartBucket type binding with constant case naming
     expect(generated).toMatch(/DATA_BUCKET:\s*SmartBucket/);
 });
+test('always includes mem KvCache binding', async () => {
+    const apps = await mustManifestFromString(`
+    application "test-app" {
+      service "test-service" {}
+    }
+  `);
+    const app = apps[0];
+    const service = app.service[0];
+    const generated = gatherEnvForHandler(service, app);
+    // Should include KvCache import
+    expect(generated).toMatch(/import\s+{[^}]*KvCache[^}]*}\s+from\s+'@liquidmetal-ai\/raindrop-framework'/);
+    // Should include mem type binding
+    expect(generated).toMatch(/mem:\s*KvCache/);
+});
+test('includes auth env vars for protected service', async () => {
+    const apps = await mustManifestFromString(`
+    application "test-app" {
+      service "protected-service" {
+        visibility = "protected"
+      }
+    }
+  `);
+    const app = apps[0];
+    const service = app.service[0];
+    const generated = gatherEnvForHandler(service, app);
+    // Should include core auth bindings and WorkOS provider bindings for protected services
+    expect(generated).toMatch(/LM_AUTH_ALLOWED_ORIGINS:\s*string/);
+    expect(generated).toMatch(/LM_AUTH_ALLOWED_ISSUERS:\s*string/);
+    expect(generated).toMatch(/LM_PROVIDER_WORKOS_ORG_ID\?:\s*string/);
+    expect(generated).toMatch(/LM_PROVIDER_WORKOS_CLIENT_ID\?:\s*string/);
+    expect(generated).toMatch(/LM_PROVIDER_WORKOS_API_KEY\?:\s*string/);
+});
+test('does not include auth env vars for public service', async () => {
+    const apps = await mustManifestFromString(`
+    application "test-app" {
+      service "public-service" {
+        visibility = "public"
+      }
+    }
+  `);
+    const app = apps[0];
+    const service = app.service[0];
+    const generated = gatherEnvForHandler(service, app);
+    // Should NOT include auth env vars for non-protected services
+    expect(generated).not.toMatch(/LM_AUTH_ALLOWED_ORIGINS/);
+    expect(generated).not.toMatch(/LM_AUTH_ALLOWED_ISSUERS/);
+    expect(generated).not.toMatch(/LM_PROVIDER_WORKOS_ORG_ID/);
+    expect(generated).not.toMatch(/LM_PROVIDER_WORKOS_CLIENT_ID/);
+    expect(generated).not.toMatch(/LM_PROVIDER_WORKOS_API_KEY/);
+});

package/dist/commands/build/checkout.d.ts

@@ -1,4 +1,12 @@
+import { ApplicationsResponse_Application } from '@liquidmetal-ai/drizzle/liquidmetal/v1alpha1/catalog_pb';
 import { BaseCommand } from '../../base-command.js';
+interface VersionNode {
+    versionId: string;
+    previousVersionId: string | null;
+    application: ApplicationsResponse_Application;
+    children: VersionNode[];
+    branch?: string;
+}
 export default class Branch extends BaseCommand<typeof Branch> {
     static args: {
         version: import("@oclif/core/interfaces").Arg<string | undefined, Record<string, unknown>>;
@@ -7,6 +15,8 @@ export default class Branch extends BaseCommand<typeof Branch> {
     static examples: string[];
     static flags: {
         output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        manifest: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        impersonate: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         config: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         rainbowAuthService: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         raindropCatalogService: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
@@ -15,6 +25,13 @@ export default class Branch extends BaseCommand<typeof Branch> {
         rainbowUserId: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
         sendVersionMetadata: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
     };
+    buildVersionTree(applications: ApplicationsResponse_Application[]): {
+        rootNodes: VersionNode[];
+        nodesMap: Map<string, VersionNode>;
+    };
+    fetchApplicationVersions(applicationName: string, userId: string, organizationId: string): Promise<ApplicationsResponse_Application[]>;
+    promptVersionSelection(versions: ApplicationsResponse_Application[]): Promise<string | undefined>;
     run(): Promise<void>;
 }
+export {};
 //# sourceMappingURL=checkout.d.ts.map