@lunora/advisor 1.0.0-alpha.47 → 1.0.0-alpha.49
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.d.mts
CHANGED
|
@@ -133,6 +133,12 @@ interface AdvisorAuthConfig {
|
|
|
133
133
|
line: number;
|
|
134
134
|
/** `emailAndPassword.requireEmailVerification === true` present. */
|
|
135
135
|
requireEmailVerification: boolean;
|
|
136
|
+
/**
|
|
137
|
+
* `plugins` includes `scim(...)` while `database` is `lunoraD1Adapter` /
|
|
138
|
+
* `lunoraAuthAdapter` — neither exposes native transactions, which `@better-auth/scim`
|
|
139
|
+
* refuses to serve without.
|
|
140
|
+
*/
|
|
141
|
+
scimOnNonTransactionalAdapter: boolean;
|
|
136
142
|
/** `advanced.useSecureCookies === false`. */
|
|
137
143
|
secureCookiesDisabled: boolean;
|
|
138
144
|
/** `session.freshAge === 0` (explicit literal). */
|
|
@@ -2499,6 +2505,30 @@ declare const authSecureCookiesDisabled: Lint;
|
|
|
2499
2505
|
* call.
|
|
2500
2506
|
*/
|
|
2501
2507
|
declare const authSessionFreshageZero: Lint;
|
|
2508
|
+
/**
|
|
2509
|
+
* Flags a `createAuth({...})` call that loads `scim()` on an adapter with no native
|
|
2510
|
+
* transactions.
|
|
2511
|
+
*
|
|
2512
|
+
* `@better-auth/scim` refuses to serve at all unless its adapter exposes a
|
|
2513
|
+
* `transaction` function — its provisioning writes go through a read-then-conditional-write
|
|
2514
|
+
* decommission lease. `lunoraD1Adapter` and `lunoraAuthAdapter` are single-table CRUD,
|
|
2515
|
+
* and D1 has no interactive transactions to expose in the first place, so this pairing
|
|
2516
|
+
* throws on the first SCIM request:
|
|
2517
|
+
*
|
|
2518
|
+
* ```
|
|
2519
|
+
* BetterAuthError: The scim plugin requires a database adapter with native transaction support.
|
|
2520
|
+
* ```
|
|
2521
|
+
*
|
|
2522
|
+
* This exists because the combination shipped in real documentation once. It is not a
|
|
2523
|
+
* subtle misconfiguration — it is a deployment where directory sync cannot work at all —
|
|
2524
|
+
* and it is entirely visible at build time, so there is no reason for the first
|
|
2525
|
+
* indication to be a 500 from an IdP's provisioning call.
|
|
2526
|
+
*
|
|
2527
|
+
* Runs only when the codegen feeder supplies auth-config evidence
|
|
2528
|
+
* (`context.authConfigs`), and only for an analyzable config; an opaque one could pass
|
|
2529
|
+
* a different `database` and is skipped rather than guessed at.
|
|
2530
|
+
*/
|
|
2531
|
+
declare const authScimWithoutTransactions: Lint;
|
|
2502
2532
|
/**
|
|
2503
2533
|
* Flags a `createAuth({...})` call whose `trustedOrigins` array literal
|
|
2504
2534
|
* contains a `"*"` entry.
|
|
@@ -3966,4 +3996,4 @@ interface RunAdvisorOptions {
|
|
|
3966
3996
|
* `static` lints at build time and defer `runtime` lints to a live shard.
|
|
3967
3997
|
*/
|
|
3968
3998
|
declare const runAdvisor: (context: LintContext, options?: RunAdvisorOptions) => Finding[];
|
|
3969
|
-
export { AE_METRIC_EVENTS, ALL_LINTS, type AdvisorAdminRoute, type AdvisorAiRawRun, type AdvisorAiToolSideEffect, type AdvisorArgumentDerivedFetch, type AdvisorArgumentValidator, type AdvisorAuthApiCall, type AdvisorAuthConfig, type AdvisorBrowserUrlAccess, type AdvisorConfigCall, type AdvisorContainer, type AdvisorContainerKeyAccess, type AdvisorContainerOverride, type AdvisorExportSink, type AdvisorFailOpenGuard, type AdvisorFlagSecurityDefault, type AdvisorGeoIndexUsage, type AdvisorHttpActionGuard, type AdvisorHttpHeaderWrite, type AdvisorHyperdriveCall, type AdvisorIdentityClaimRead, type AdvisorImageDeliveryUrlAccess, type AdvisorIndex, type AdvisorIndexHit, type AdvisorInsertWrite, type AdvisorKvKeyAccess, type AdvisorMailRecipientAccess, type AdvisorMaskProcedure, type AdvisorMaskStrategy, type AdvisorMutatorWrite, type AdvisorNondeterministicCall, type AdvisorNormalizeIdAuthorization, type AdvisorNotifyCall, type AdvisorNotifyConfig, type AdvisorOwnerFieldWrite, type AdvisorPaymentWebhook, type AdvisorPrivilegedDispatch, type AdvisorProcedureProtection, type AdvisorQueryRead, type AdvisorQueue, type AdvisorQueueTuning, type AdvisorR2sqlCall, type AdvisorRatelimitKeySelector, type AdvisorRawRowReturn, type AdvisorRelation, type AdvisorRelationLoad, type AdvisorRlsProcedure, type AdvisorSchema, type AdvisorSecretLiteral, type AdvisorShape, type AdvisorShardTraffic, type AdvisorSoftDeleteRead, type AdvisorSqlInterpolation, type AdvisorStorageKeyAccess, type AdvisorStorageUpload, type AdvisorTable, type AdvisorTableSample, type AdvisorTableScan, type AdvisorVectorNamespaceAccess, type AdvisorWorkflow, type AdvisorWorkflowCall, type AdvisorWranglerVariable, type AnalyticsMetricsOptions, type AnalyticsMetricsSource, type AnalyticsRuntimeMetrics, type Category, type Facing, type Finding, type Level, type Lint, type LintContext, type LintSource, RUNTIME_LINTS, RunAdvisorOptions, STATIC_LINTS, actionFetchSsrf, adminRouteWithoutGuard, aiRawRunEscapeHatch, aiToolSideEffectPromptInjection, aiUnboundedGenerationPublic, allowUnauthenticatedShardAccessEnabled, authApiCallWithoutHeaders, authCsrfCheckDisabled, authEmailVerificationDisabled, authSecureCookiesDisabled, authSessionFreshageZero, authTrustedOriginsWildcard, browserAllowPrivateTargets, browserUserUrlWithoutAllowlist, circularFk, constraintValidator, containerInstanceKeyFromUserInput, containerOversizedInstance, containerPublicInternet, containerRuntimeEgressRelaxation, containerStartEnableInternetOverride, dedupeCacheKeys, duplicateIndex, emptyIndex, exportSinkMisconfigured, externalSourceIncrementalNoDeletePath, externalSourceOnGlobal, externalSourceUnscoped, filterWithoutIndex, flagGatesSecurityWithUnsafeDefault, fromServerSchema, geoIndexFieldNotGeopoint, geoIndexUnused, hardcodedSecret, hotShard, httpActionMissingAuthGuard, httpActionResponseHeaderInjection, hyperdriveOutsideAction, identityUndeclaredClaimTrusted, imagesUrlSourceFromUserInput, indexReferencesUnknownField, indexUtilization, insertManyUnsafeUserData, kvUnscopedUserKeyIdor, loadAnalyticsRuntimeMetrics, mailInboundDispatchWithoutVerify, mailRecipientFromRequestInput, maskUncoveredPiiColumn, maskWeakHashStrategyOnPii, maskedRelationLeakViaWith, mutatorFullRowReplace, nondeterministicQueryMutation, normalizeIdUsedAsAuthorization, notifyMissingPushConfig, notifySendOutsideAction, outputProjectionMissingOnPublicRead, ownerFieldFromArgsNotAuth, paymentCreateWithoutAuthorize, paymentWebhookWideTolerance, plaintextSecretInWranglerVariables, policyReferencesUnknownTable, privilegedDispatchUnvalidatedPayload, privilegedFanoutFromPublicProcedure, publicArgumentUsesAny, publicMutationWithoutRatelimit, publicTableRlsOptoutConfusion, queueWithoutDlq, r2sqlOutsideAction, ratelimitDefaultMemoryStore, ratelimitKeySpoofableOrGlobal, ratelimitMiddlewareFailOpen, relationReferencesUnknownField, relationReferencesUnknownTable, rlsUncoveredTable, runAdvisor, shapeTargetsGlobalTable, shapeUnknownTable, signupMutationWithoutDisposableGating, softDeleteIncludeDeletedFromArgs, sqlInjectionRisk, storageGenerateUploadUrlNoContentTypePin, storageKeyFromUserArgs, storagePresignedUrlForPrivateContent, storageUploadWithoutContentTypeAllowlist, storageUploadWithoutMaxSize, tableWithoutInsert, ttlFieldNotTimestamp, unboundedStringArgument, unindexedForeignKey, unindexedRelationTarget, unrestrictedWhereBranch, userCreatingMutationWithoutCaptcha, vectorsNamespaceFromUserInput, workflowDuplicateStepName, workflowUnknownTarget, workflowUnused };
|
|
3999
|
+
export { AE_METRIC_EVENTS, ALL_LINTS, type AdvisorAdminRoute, type AdvisorAiRawRun, type AdvisorAiToolSideEffect, type AdvisorArgumentDerivedFetch, type AdvisorArgumentValidator, type AdvisorAuthApiCall, type AdvisorAuthConfig, type AdvisorBrowserUrlAccess, type AdvisorConfigCall, type AdvisorContainer, type AdvisorContainerKeyAccess, type AdvisorContainerOverride, type AdvisorExportSink, type AdvisorFailOpenGuard, type AdvisorFlagSecurityDefault, type AdvisorGeoIndexUsage, type AdvisorHttpActionGuard, type AdvisorHttpHeaderWrite, type AdvisorHyperdriveCall, type AdvisorIdentityClaimRead, type AdvisorImageDeliveryUrlAccess, type AdvisorIndex, type AdvisorIndexHit, type AdvisorInsertWrite, type AdvisorKvKeyAccess, type AdvisorMailRecipientAccess, type AdvisorMaskProcedure, type AdvisorMaskStrategy, type AdvisorMutatorWrite, type AdvisorNondeterministicCall, type AdvisorNormalizeIdAuthorization, type AdvisorNotifyCall, type AdvisorNotifyConfig, type AdvisorOwnerFieldWrite, type AdvisorPaymentWebhook, type AdvisorPrivilegedDispatch, type AdvisorProcedureProtection, type AdvisorQueryRead, type AdvisorQueue, type AdvisorQueueTuning, type AdvisorR2sqlCall, type AdvisorRatelimitKeySelector, type AdvisorRawRowReturn, type AdvisorRelation, type AdvisorRelationLoad, type AdvisorRlsProcedure, type AdvisorSchema, type AdvisorSecretLiteral, type AdvisorShape, type AdvisorShardTraffic, type AdvisorSoftDeleteRead, type AdvisorSqlInterpolation, type AdvisorStorageKeyAccess, type AdvisorStorageUpload, type AdvisorTable, type AdvisorTableSample, type AdvisorTableScan, type AdvisorVectorNamespaceAccess, type AdvisorWorkflow, type AdvisorWorkflowCall, type AdvisorWranglerVariable, type AnalyticsMetricsOptions, type AnalyticsMetricsSource, type AnalyticsRuntimeMetrics, type Category, type Facing, type Finding, type Level, type Lint, type LintContext, type LintSource, RUNTIME_LINTS, RunAdvisorOptions, STATIC_LINTS, actionFetchSsrf, adminRouteWithoutGuard, aiRawRunEscapeHatch, aiToolSideEffectPromptInjection, aiUnboundedGenerationPublic, allowUnauthenticatedShardAccessEnabled, authApiCallWithoutHeaders, authCsrfCheckDisabled, authEmailVerificationDisabled, authScimWithoutTransactions, authSecureCookiesDisabled, authSessionFreshageZero, authTrustedOriginsWildcard, browserAllowPrivateTargets, browserUserUrlWithoutAllowlist, circularFk, constraintValidator, containerInstanceKeyFromUserInput, containerOversizedInstance, containerPublicInternet, containerRuntimeEgressRelaxation, containerStartEnableInternetOverride, dedupeCacheKeys, duplicateIndex, emptyIndex, exportSinkMisconfigured, externalSourceIncrementalNoDeletePath, externalSourceOnGlobal, externalSourceUnscoped, filterWithoutIndex, flagGatesSecurityWithUnsafeDefault, fromServerSchema, geoIndexFieldNotGeopoint, geoIndexUnused, hardcodedSecret, hotShard, httpActionMissingAuthGuard, httpActionResponseHeaderInjection, hyperdriveOutsideAction, identityUndeclaredClaimTrusted, imagesUrlSourceFromUserInput, indexReferencesUnknownField, indexUtilization, insertManyUnsafeUserData, kvUnscopedUserKeyIdor, loadAnalyticsRuntimeMetrics, mailInboundDispatchWithoutVerify, mailRecipientFromRequestInput, maskUncoveredPiiColumn, maskWeakHashStrategyOnPii, maskedRelationLeakViaWith, mutatorFullRowReplace, nondeterministicQueryMutation, normalizeIdUsedAsAuthorization, notifyMissingPushConfig, notifySendOutsideAction, outputProjectionMissingOnPublicRead, ownerFieldFromArgsNotAuth, paymentCreateWithoutAuthorize, paymentWebhookWideTolerance, plaintextSecretInWranglerVariables, policyReferencesUnknownTable, privilegedDispatchUnvalidatedPayload, privilegedFanoutFromPublicProcedure, publicArgumentUsesAny, publicMutationWithoutRatelimit, publicTableRlsOptoutConfusion, queueWithoutDlq, r2sqlOutsideAction, ratelimitDefaultMemoryStore, ratelimitKeySpoofableOrGlobal, ratelimitMiddlewareFailOpen, relationReferencesUnknownField, relationReferencesUnknownTable, rlsUncoveredTable, runAdvisor, shapeTargetsGlobalTable, shapeUnknownTable, signupMutationWithoutDisposableGating, softDeleteIncludeDeletedFromArgs, sqlInjectionRisk, storageGenerateUploadUrlNoContentTypePin, storageKeyFromUserArgs, storagePresignedUrlForPrivateContent, storageUploadWithoutContentTypeAllowlist, storageUploadWithoutMaxSize, tableWithoutInsert, ttlFieldNotTimestamp, unboundedStringArgument, unindexedForeignKey, unindexedRelationTarget, unrestrictedWhereBranch, userCreatingMutationWithoutCaptcha, vectorsNamespaceFromUserInput, workflowDuplicateStepName, workflowUnknownTarget, workflowUnused };
|
package/dist/index.d.ts
CHANGED
|
@@ -133,6 +133,12 @@ interface AdvisorAuthConfig {
|
|
|
133
133
|
line: number;
|
|
134
134
|
/** `emailAndPassword.requireEmailVerification === true` present. */
|
|
135
135
|
requireEmailVerification: boolean;
|
|
136
|
+
/**
|
|
137
|
+
* `plugins` includes `scim(...)` while `database` is `lunoraD1Adapter` /
|
|
138
|
+
* `lunoraAuthAdapter` — neither exposes native transactions, which `@better-auth/scim`
|
|
139
|
+
* refuses to serve without.
|
|
140
|
+
*/
|
|
141
|
+
scimOnNonTransactionalAdapter: boolean;
|
|
136
142
|
/** `advanced.useSecureCookies === false`. */
|
|
137
143
|
secureCookiesDisabled: boolean;
|
|
138
144
|
/** `session.freshAge === 0` (explicit literal). */
|
|
@@ -2499,6 +2505,30 @@ declare const authSecureCookiesDisabled: Lint;
|
|
|
2499
2505
|
* call.
|
|
2500
2506
|
*/
|
|
2501
2507
|
declare const authSessionFreshageZero: Lint;
|
|
2508
|
+
/**
|
|
2509
|
+
* Flags a `createAuth({...})` call that loads `scim()` on an adapter with no native
|
|
2510
|
+
* transactions.
|
|
2511
|
+
*
|
|
2512
|
+
* `@better-auth/scim` refuses to serve at all unless its adapter exposes a
|
|
2513
|
+
* `transaction` function — its provisioning writes go through a read-then-conditional-write
|
|
2514
|
+
* decommission lease. `lunoraD1Adapter` and `lunoraAuthAdapter` are single-table CRUD,
|
|
2515
|
+
* and D1 has no interactive transactions to expose in the first place, so this pairing
|
|
2516
|
+
* throws on the first SCIM request:
|
|
2517
|
+
*
|
|
2518
|
+
* ```
|
|
2519
|
+
* BetterAuthError: The scim plugin requires a database adapter with native transaction support.
|
|
2520
|
+
* ```
|
|
2521
|
+
*
|
|
2522
|
+
* This exists because the combination shipped in real documentation once. It is not a
|
|
2523
|
+
* subtle misconfiguration — it is a deployment where directory sync cannot work at all —
|
|
2524
|
+
* and it is entirely visible at build time, so there is no reason for the first
|
|
2525
|
+
* indication to be a 500 from an IdP's provisioning call.
|
|
2526
|
+
*
|
|
2527
|
+
* Runs only when the codegen feeder supplies auth-config evidence
|
|
2528
|
+
* (`context.authConfigs`), and only for an analyzable config; an opaque one could pass
|
|
2529
|
+
* a different `database` and is skipped rather than guessed at.
|
|
2530
|
+
*/
|
|
2531
|
+
declare const authScimWithoutTransactions: Lint;
|
|
2502
2532
|
/**
|
|
2503
2533
|
* Flags a `createAuth({...})` call whose `trustedOrigins` array literal
|
|
2504
2534
|
* contains a `"*"` entry.
|
|
@@ -3966,4 +3996,4 @@ interface RunAdvisorOptions {
|
|
|
3966
3996
|
* `static` lints at build time and defer `runtime` lints to a live shard.
|
|
3967
3997
|
*/
|
|
3968
3998
|
declare const runAdvisor: (context: LintContext, options?: RunAdvisorOptions) => Finding[];
|
|
3969
|
-
export { AE_METRIC_EVENTS, ALL_LINTS, type AdvisorAdminRoute, type AdvisorAiRawRun, type AdvisorAiToolSideEffect, type AdvisorArgumentDerivedFetch, type AdvisorArgumentValidator, type AdvisorAuthApiCall, type AdvisorAuthConfig, type AdvisorBrowserUrlAccess, type AdvisorConfigCall, type AdvisorContainer, type AdvisorContainerKeyAccess, type AdvisorContainerOverride, type AdvisorExportSink, type AdvisorFailOpenGuard, type AdvisorFlagSecurityDefault, type AdvisorGeoIndexUsage, type AdvisorHttpActionGuard, type AdvisorHttpHeaderWrite, type AdvisorHyperdriveCall, type AdvisorIdentityClaimRead, type AdvisorImageDeliveryUrlAccess, type AdvisorIndex, type AdvisorIndexHit, type AdvisorInsertWrite, type AdvisorKvKeyAccess, type AdvisorMailRecipientAccess, type AdvisorMaskProcedure, type AdvisorMaskStrategy, type AdvisorMutatorWrite, type AdvisorNondeterministicCall, type AdvisorNormalizeIdAuthorization, type AdvisorNotifyCall, type AdvisorNotifyConfig, type AdvisorOwnerFieldWrite, type AdvisorPaymentWebhook, type AdvisorPrivilegedDispatch, type AdvisorProcedureProtection, type AdvisorQueryRead, type AdvisorQueue, type AdvisorQueueTuning, type AdvisorR2sqlCall, type AdvisorRatelimitKeySelector, type AdvisorRawRowReturn, type AdvisorRelation, type AdvisorRelationLoad, type AdvisorRlsProcedure, type AdvisorSchema, type AdvisorSecretLiteral, type AdvisorShape, type AdvisorShardTraffic, type AdvisorSoftDeleteRead, type AdvisorSqlInterpolation, type AdvisorStorageKeyAccess, type AdvisorStorageUpload, type AdvisorTable, type AdvisorTableSample, type AdvisorTableScan, type AdvisorVectorNamespaceAccess, type AdvisorWorkflow, type AdvisorWorkflowCall, type AdvisorWranglerVariable, type AnalyticsMetricsOptions, type AnalyticsMetricsSource, type AnalyticsRuntimeMetrics, type Category, type Facing, type Finding, type Level, type Lint, type LintContext, type LintSource, RUNTIME_LINTS, RunAdvisorOptions, STATIC_LINTS, actionFetchSsrf, adminRouteWithoutGuard, aiRawRunEscapeHatch, aiToolSideEffectPromptInjection, aiUnboundedGenerationPublic, allowUnauthenticatedShardAccessEnabled, authApiCallWithoutHeaders, authCsrfCheckDisabled, authEmailVerificationDisabled, authSecureCookiesDisabled, authSessionFreshageZero, authTrustedOriginsWildcard, browserAllowPrivateTargets, browserUserUrlWithoutAllowlist, circularFk, constraintValidator, containerInstanceKeyFromUserInput, containerOversizedInstance, containerPublicInternet, containerRuntimeEgressRelaxation, containerStartEnableInternetOverride, dedupeCacheKeys, duplicateIndex, emptyIndex, exportSinkMisconfigured, externalSourceIncrementalNoDeletePath, externalSourceOnGlobal, externalSourceUnscoped, filterWithoutIndex, flagGatesSecurityWithUnsafeDefault, fromServerSchema, geoIndexFieldNotGeopoint, geoIndexUnused, hardcodedSecret, hotShard, httpActionMissingAuthGuard, httpActionResponseHeaderInjection, hyperdriveOutsideAction, identityUndeclaredClaimTrusted, imagesUrlSourceFromUserInput, indexReferencesUnknownField, indexUtilization, insertManyUnsafeUserData, kvUnscopedUserKeyIdor, loadAnalyticsRuntimeMetrics, mailInboundDispatchWithoutVerify, mailRecipientFromRequestInput, maskUncoveredPiiColumn, maskWeakHashStrategyOnPii, maskedRelationLeakViaWith, mutatorFullRowReplace, nondeterministicQueryMutation, normalizeIdUsedAsAuthorization, notifyMissingPushConfig, notifySendOutsideAction, outputProjectionMissingOnPublicRead, ownerFieldFromArgsNotAuth, paymentCreateWithoutAuthorize, paymentWebhookWideTolerance, plaintextSecretInWranglerVariables, policyReferencesUnknownTable, privilegedDispatchUnvalidatedPayload, privilegedFanoutFromPublicProcedure, publicArgumentUsesAny, publicMutationWithoutRatelimit, publicTableRlsOptoutConfusion, queueWithoutDlq, r2sqlOutsideAction, ratelimitDefaultMemoryStore, ratelimitKeySpoofableOrGlobal, ratelimitMiddlewareFailOpen, relationReferencesUnknownField, relationReferencesUnknownTable, rlsUncoveredTable, runAdvisor, shapeTargetsGlobalTable, shapeUnknownTable, signupMutationWithoutDisposableGating, softDeleteIncludeDeletedFromArgs, sqlInjectionRisk, storageGenerateUploadUrlNoContentTypePin, storageKeyFromUserArgs, storagePresignedUrlForPrivateContent, storageUploadWithoutContentTypeAllowlist, storageUploadWithoutMaxSize, tableWithoutInsert, ttlFieldNotTimestamp, unboundedStringArgument, unindexedForeignKey, unindexedRelationTarget, unrestrictedWhereBranch, userCreatingMutationWithoutCaptcha, vectorsNamespaceFromUserInput, workflowDuplicateStepName, workflowUnknownTarget, workflowUnused };
|
|
3999
|
+
export { AE_METRIC_EVENTS, ALL_LINTS, type AdvisorAdminRoute, type AdvisorAiRawRun, type AdvisorAiToolSideEffect, type AdvisorArgumentDerivedFetch, type AdvisorArgumentValidator, type AdvisorAuthApiCall, type AdvisorAuthConfig, type AdvisorBrowserUrlAccess, type AdvisorConfigCall, type AdvisorContainer, type AdvisorContainerKeyAccess, type AdvisorContainerOverride, type AdvisorExportSink, type AdvisorFailOpenGuard, type AdvisorFlagSecurityDefault, type AdvisorGeoIndexUsage, type AdvisorHttpActionGuard, type AdvisorHttpHeaderWrite, type AdvisorHyperdriveCall, type AdvisorIdentityClaimRead, type AdvisorImageDeliveryUrlAccess, type AdvisorIndex, type AdvisorIndexHit, type AdvisorInsertWrite, type AdvisorKvKeyAccess, type AdvisorMailRecipientAccess, type AdvisorMaskProcedure, type AdvisorMaskStrategy, type AdvisorMutatorWrite, type AdvisorNondeterministicCall, type AdvisorNormalizeIdAuthorization, type AdvisorNotifyCall, type AdvisorNotifyConfig, type AdvisorOwnerFieldWrite, type AdvisorPaymentWebhook, type AdvisorPrivilegedDispatch, type AdvisorProcedureProtection, type AdvisorQueryRead, type AdvisorQueue, type AdvisorQueueTuning, type AdvisorR2sqlCall, type AdvisorRatelimitKeySelector, type AdvisorRawRowReturn, type AdvisorRelation, type AdvisorRelationLoad, type AdvisorRlsProcedure, type AdvisorSchema, type AdvisorSecretLiteral, type AdvisorShape, type AdvisorShardTraffic, type AdvisorSoftDeleteRead, type AdvisorSqlInterpolation, type AdvisorStorageKeyAccess, type AdvisorStorageUpload, type AdvisorTable, type AdvisorTableSample, type AdvisorTableScan, type AdvisorVectorNamespaceAccess, type AdvisorWorkflow, type AdvisorWorkflowCall, type AdvisorWranglerVariable, type AnalyticsMetricsOptions, type AnalyticsMetricsSource, type AnalyticsRuntimeMetrics, type Category, type Facing, type Finding, type Level, type Lint, type LintContext, type LintSource, RUNTIME_LINTS, RunAdvisorOptions, STATIC_LINTS, actionFetchSsrf, adminRouteWithoutGuard, aiRawRunEscapeHatch, aiToolSideEffectPromptInjection, aiUnboundedGenerationPublic, allowUnauthenticatedShardAccessEnabled, authApiCallWithoutHeaders, authCsrfCheckDisabled, authEmailVerificationDisabled, authScimWithoutTransactions, authSecureCookiesDisabled, authSessionFreshageZero, authTrustedOriginsWildcard, browserAllowPrivateTargets, browserUserUrlWithoutAllowlist, circularFk, constraintValidator, containerInstanceKeyFromUserInput, containerOversizedInstance, containerPublicInternet, containerRuntimeEgressRelaxation, containerStartEnableInternetOverride, dedupeCacheKeys, duplicateIndex, emptyIndex, exportSinkMisconfigured, externalSourceIncrementalNoDeletePath, externalSourceOnGlobal, externalSourceUnscoped, filterWithoutIndex, flagGatesSecurityWithUnsafeDefault, fromServerSchema, geoIndexFieldNotGeopoint, geoIndexUnused, hardcodedSecret, hotShard, httpActionMissingAuthGuard, httpActionResponseHeaderInjection, hyperdriveOutsideAction, identityUndeclaredClaimTrusted, imagesUrlSourceFromUserInput, indexReferencesUnknownField, indexUtilization, insertManyUnsafeUserData, kvUnscopedUserKeyIdor, loadAnalyticsRuntimeMetrics, mailInboundDispatchWithoutVerify, mailRecipientFromRequestInput, maskUncoveredPiiColumn, maskWeakHashStrategyOnPii, maskedRelationLeakViaWith, mutatorFullRowReplace, nondeterministicQueryMutation, normalizeIdUsedAsAuthorization, notifyMissingPushConfig, notifySendOutsideAction, outputProjectionMissingOnPublicRead, ownerFieldFromArgsNotAuth, paymentCreateWithoutAuthorize, paymentWebhookWideTolerance, plaintextSecretInWranglerVariables, policyReferencesUnknownTable, privilegedDispatchUnvalidatedPayload, privilegedFanoutFromPublicProcedure, publicArgumentUsesAny, publicMutationWithoutRatelimit, publicTableRlsOptoutConfusion, queueWithoutDlq, r2sqlOutsideAction, ratelimitDefaultMemoryStore, ratelimitKeySpoofableOrGlobal, ratelimitMiddlewareFailOpen, relationReferencesUnknownField, relationReferencesUnknownTable, rlsUncoveredTable, runAdvisor, shapeTargetsGlobalTable, shapeUnknownTable, signupMutationWithoutDisposableGating, softDeleteIncludeDeletedFromArgs, sqlInjectionRisk, storageGenerateUploadUrlNoContentTypePin, storageKeyFromUserArgs, storagePresignedUrlForPrivateContent, storageUploadWithoutContentTypeAllowlist, storageUploadWithoutMaxSize, tableWithoutInsert, ttlFieldNotTimestamp, unboundedStringArgument, unindexedForeignKey, unindexedRelationTarget, unrestrictedWhereBranch, userCreatingMutationWithoutCaptcha, vectorsNamespaceFromUserInput, workflowDuplicateStepName, workflowUnknownTarget, workflowUnused };
|
package/dist/index.mjs
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
import{dedupeCacheKeys as a}from"./packem_shared/dedupeCacheKeys-7JgxaQWV.mjs";import m from"./packem_shared/constraintValidator-N339mfyx.mjs";import s from"./packem_shared/hotShard-DVs_U17R.mjs";import n from"./packem_shared/indexUtilization-QfbIH_w4.mjs";import p from"./packem_shared/actionFetchSsrf-BbWxy1Yf.mjs";import f from"./packem_shared/adminRouteWithoutGuard-DSo4t9j4.mjs";import l from"./packem_shared/aiRawRunEscapeHatch-DfhjYm43.mjs";import u from"./packem_shared/aiToolSideEffectPromptInjection-DnWQOoKi.mjs";import d from"./packem_shared/aiUnboundedGenerationPublic-D3HZrh5_.mjs";import c from"./packem_shared/allowUnauthenticatedShardAccessEnabled-D4aMNBb0.mjs";import $ from"./packem_shared/authApiCallWithoutHeaders-BItMMdZP.mjs";import h from"./packem_shared/authCsrfCheckDisabled-De9ammtV.mjs";import g from"./packem_shared/authEmailVerificationDisabled-BFKdJcx4.mjs";import U from"./packem_shared/authSecureCookiesDisabled-B4WIzvMm.mjs";import b from"./packem_shared/authSessionFreshageZero-Bpcaf_Pe.mjs";import I from"./packem_shared/authTrustedOriginsWildcard-DjU9NXEm.mjs";import S from"./packem_shared/browserAllowPrivateTargets-Dxyeh6lg.mjs";import A from"./packem_shared/browserUserUrlWithoutAllowlist-BHBS6b0N.mjs";import y from"./packem_shared/circularFk-BMuJKmuZ.mjs";import T from"./packem_shared/containerInstanceKeyFromUserInput-C8S4T3ty.mjs";import w from"./packem_shared/containerOversizedInstance-B9wW_sU5.mjs";import R from"./packem_shared/containerPublicInternet-Bx2J7tha.mjs";import k from"./packem_shared/containerRuntimeEgressRelaxation-BQ2ZD1aV.mjs";import F from"./packem_shared/containerStartEnableInternetOverride-B62WUura.mjs";import W from"./packem_shared/duplicateIndex-DFT7qLQD.mjs";import x from"./packem_shared/emptyIndex-BiXEfyfN.mjs";import C from"./packem_shared/exportSinkMisconfigured-DvpAaa6j.mjs";import P from"./packem_shared/externalSourceIncrementalNoDeletePath-DnoL64YY.mjs";import v from"./packem_shared/externalSourceOnGlobal-DNPLoNUg.mjs";import M from"./packem_shared/externalSourceUnscoped-DqBp5jYr.mjs";import D from"./packem_shared/filterWithoutIndex-ht2GZQWV.mjs";import N from"./packem_shared/flagGatesSecurityWithUnsafeDefault-DPGFEHTt.mjs";import O from"./packem_shared/geoIndexFieldNotGeopoint-DAGLZtaH.mjs";import E from"./packem_shared/geoIndexUnused-BgDE6_AR.mjs";import G from"./packem_shared/hardcodedSecret-rIRc3aNk.mjs";import z from"./packem_shared/httpActionMissingAuthGuard-BZDdeW_D.mjs";import K from"./packem_shared/httpActionResponseHeaderInjection-D063rB7U.mjs";import L from"./packem_shared/hyperdriveOutsideAction-CRmOQz67.mjs";import V from"./packem_shared/identityUndeclaredClaimTrusted-BYRYGQ74.mjs";import j from"./packem_shared/imagesUrlSourceFromUserInput-Cy5pc_dA.mjs";import q from"./packem_shared/indexReferencesUnknownField-r3QHlaz6.mjs";import _ from"./packem_shared/insertManyUnsafeUserData-DrH7PdRs.mjs";import H from"./packem_shared/kvUnscopedUserKeyIdor-B4lGxRxh.mjs";import B from"./packem_shared/mailInboundDispatchWithoutVerify-BivYJ5F9.mjs";import Q from"./packem_shared/mailRecipientFromRequestInput-BR_oSh65.mjs";import Z from"./packem_shared/maskUncoveredPiiColumn-DqPfZM2O.mjs";import J from"./packem_shared/maskWeakHashStrategyOnPii-CEiiGgT7.mjs";import X from"./packem_shared/maskedRelationLeakViaWith-CxYk0MDW.mjs";import Y from"./packem_shared/mutatorFullRowReplace-CEgecSGm.mjs";import rr from"./packem_shared/nondeterministicQueryMutation-BaMfbAk_.mjs";import or from"./packem_shared/normalizeIdUsedAsAuthorization-FjISSXJm.mjs";import tr from"./packem_shared/notifyMissingPushConfig-C_GbVw3S.mjs";import ir from"./packem_shared/notifySendOutsideAction-B0jZuUP3.mjs";import er from"./packem_shared/outputProjectionMissingOnPublicRead-9Pm9766s.mjs";import ar from"./packem_shared/ownerFieldFromArgsNotAuth-BoR9vvst.mjs";import mr from"./packem_shared/paymentCreateWithoutAuthorize-CurtqN8K.mjs";import sr from"./packem_shared/paymentWebhookWideTolerance-I7ingfR8.mjs";import nr from"./packem_shared/plaintextSecretInWranglerVariables-DXjKIm8H.mjs";import pr from"./packem_shared/policyReferencesUnknownTable-D3WelAQa.mjs";import fr from"./packem_shared/privilegedDispatchUnvalidatedPayload-74GuGye1.mjs";import lr from"./packem_shared/privilegedFanoutFromPublicProcedure-C2j2GSUN.mjs";import ur from"./packem_shared/publicArgumentUsesAny-BJb4cTqL.mjs";import dr from"./packem_shared/publicMutationWithoutRatelimit-D9phluHW.mjs";import cr from"./packem_shared/publicTableRlsOptoutConfusion-CaWtPGAn.mjs";import $r from"./packem_shared/queueWithoutDlq-BLY3iy9Q.mjs";import hr from"./packem_shared/r2sqlOutsideAction-CKK_I1Ms.mjs";import gr from"./packem_shared/ratelimitDefaultMemoryStore-mOdI3Jmb.mjs";import Ur from"./packem_shared/ratelimitKeySpoofableOrGlobal-DaGId_Fh.mjs";import br from"./packem_shared/ratelimitMiddlewareFailOpen-CTWVosEc.mjs";import Ir from"./packem_shared/relationReferencesUnknownField-clqyB69Y.mjs";import Sr from"./packem_shared/relationReferencesUnknownTable-CLdrhkmS.mjs";import Ar from"./packem_shared/rlsUncoveredTable-DYHgnoos.mjs";import yr from"./packem_shared/shapeTargetsGlobalTable-Blz-aSkg.mjs";import Tr from"./packem_shared/shapeUnknownTable-DFxtyFio.mjs";import wr from"./packem_shared/signupMutationWithoutDisposableGating-3ir808Vz.mjs";import Rr from"./packem_shared/softDeleteIncludeDeletedFromArgs-DgxpQHRA.mjs";import kr from"./packem_shared/sqlInjectionRisk-D2NaT-5c.mjs";import Fr from"./packem_shared/storageGenerateUploadUrlNoContentTypePin-C9cjl6Jh.mjs";import Wr from"./packem_shared/storageKeyFromUserArgs-BeS5cp56.mjs";import xr from"./packem_shared/storagePresignedUrlForPrivateContent-j7VhwIdu.mjs";import Cr from"./packem_shared/storageUploadWithoutContentTypeAllowlist-oxKLecuf.mjs";import Pr from"./packem_shared/storageUploadWithoutMaxSize-DUDxPutk.mjs";import vr from"./packem_shared/tableWithoutInsert-D3AhaNzR.mjs";import Mr from"./packem_shared/ttlFieldNotTimestamp-BFiRkSZD.mjs";import Dr from"./packem_shared/unboundedStringArgument-AkkIcr-S.mjs";import Nr from"./packem_shared/unindexedForeignKey-DK4eWXkb.mjs";import Or from"./packem_shared/unindexedRelationTarget-B5fFq1E8.mjs";import Er from"./packem_shared/unrestrictedWhereBranch-YKiydie4.mjs";import Gr from"./packem_shared/userCreatingMutationWithoutCaptcha-iDjRkUFO.mjs";import zr from"./packem_shared/vectorsNamespaceFromUserInput-Cyq5B2kF.mjs";import Kr from"./packem_shared/workflowDuplicateStepName-cXF6Rpvg.mjs";import Lr from"./packem_shared/workflowUnknownTarget-JF8rITLP.mjs";import Vr from"./packem_shared/workflowUnused-Dx_FQwGE.mjs";import{AE_METRIC_EVENTS as Nt,loadAnalyticsRuntimeMetrics as Ot}from"./packem_shared/AE_METRIC_EVENTS-LP_0D7Uw.mjs";import{fromServerSchema as Gt}from"./packem_shared/fromServerSchema-CJ-AQ2kw.mjs";const jr=[q,Sr,Ir,Lr,Kr,Tr,P,v,M,x,O,E,C,Mr,y,Nr,Or,W,vr,Vr,$r,D,yr,Y,rr,L,hr,$,pr,Ar,Z,J,w,R,dr,Er,Gr,wr,ur,Dr,G,kr,f,mr,B,gr,S,lr,_,d,p,ar,Wr,H,T,l,zr,Q,A,fr,F,k,I,h,U,g,b,j,Ur,cr,c,Cr,Pr,Fr,xr,z,K,br,N,u,V,sr,Rr,X,er,or,ir,tr,nr],qr=[s,n,m],_r=[...jr,...qr],vt=(i,r={})=>{const e=r.lints??_r,o=[];for(const t of e)r.source!==void 0&&t.source!==r.source||o.push(...t.run(i));return a(o)};export{Nt as AE_METRIC_EVENTS,_r as ALL_LINTS,qr as RUNTIME_LINTS,jr as STATIC_LINTS,p as actionFetchSsrf,f as adminRouteWithoutGuard,l as aiRawRunEscapeHatch,u as aiToolSideEffectPromptInjection,d as aiUnboundedGenerationPublic,c as allowUnauthenticatedShardAccessEnabled,$ as authApiCallWithoutHeaders,h as authCsrfCheckDisabled,g as authEmailVerificationDisabled,U as authSecureCookiesDisabled,b as authSessionFreshageZero,I as authTrustedOriginsWildcard,S as browserAllowPrivateTargets,A as browserUserUrlWithoutAllowlist,y as circularFk,m as constraintValidator,T as containerInstanceKeyFromUserInput,w as containerOversizedInstance,R as containerPublicInternet,k as containerRuntimeEgressRelaxation,F as containerStartEnableInternetOverride,a as dedupeCacheKeys,W as duplicateIndex,x as emptyIndex,C as exportSinkMisconfigured,P as externalSourceIncrementalNoDeletePath,v as externalSourceOnGlobal,M as externalSourceUnscoped,D as filterWithoutIndex,N as flagGatesSecurityWithUnsafeDefault,Gt as fromServerSchema,O as geoIndexFieldNotGeopoint,E as geoIndexUnused,G as hardcodedSecret,s as hotShard,z as httpActionMissingAuthGuard,K as httpActionResponseHeaderInjection,L as hyperdriveOutsideAction,V as identityUndeclaredClaimTrusted,j as imagesUrlSourceFromUserInput,q as indexReferencesUnknownField,n as indexUtilization,_ as insertManyUnsafeUserData,H as kvUnscopedUserKeyIdor,Ot as loadAnalyticsRuntimeMetrics,B as mailInboundDispatchWithoutVerify,Q as mailRecipientFromRequestInput,Z as maskUncoveredPiiColumn,J as maskWeakHashStrategyOnPii,X as maskedRelationLeakViaWith,Y as mutatorFullRowReplace,rr as nondeterministicQueryMutation,or as normalizeIdUsedAsAuthorization,tr as notifyMissingPushConfig,ir as notifySendOutsideAction,er as outputProjectionMissingOnPublicRead,ar as ownerFieldFromArgsNotAuth,mr as paymentCreateWithoutAuthorize,sr as paymentWebhookWideTolerance,nr as plaintextSecretInWranglerVariables,pr as policyReferencesUnknownTable,fr as privilegedDispatchUnvalidatedPayload,lr as privilegedFanoutFromPublicProcedure,ur as publicArgumentUsesAny,dr as publicMutationWithoutRatelimit,cr as publicTableRlsOptoutConfusion,$r as queueWithoutDlq,hr as r2sqlOutsideAction,gr as ratelimitDefaultMemoryStore,Ur as ratelimitKeySpoofableOrGlobal,br as ratelimitMiddlewareFailOpen,Ir as relationReferencesUnknownField,Sr as relationReferencesUnknownTable,Ar as rlsUncoveredTable,vt as runAdvisor,yr as shapeTargetsGlobalTable,Tr as shapeUnknownTable,wr as signupMutationWithoutDisposableGating,Rr as softDeleteIncludeDeletedFromArgs,kr as sqlInjectionRisk,Fr as storageGenerateUploadUrlNoContentTypePin,Wr as storageKeyFromUserArgs,xr as storagePresignedUrlForPrivateContent,Cr as storageUploadWithoutContentTypeAllowlist,Pr as storageUploadWithoutMaxSize,vr as tableWithoutInsert,Mr as ttlFieldNotTimestamp,Dr as unboundedStringArgument,Nr as unindexedForeignKey,Or as unindexedRelationTarget,Er as unrestrictedWhereBranch,Gr as userCreatingMutationWithoutCaptcha,zr as vectorsNamespaceFromUserInput,Kr as workflowDuplicateStepName,Lr as workflowUnknownTarget,Vr as workflowUnused};
|
|
1
|
+
import{dedupeCacheKeys as a}from"./packem_shared/dedupeCacheKeys-7JgxaQWV.mjs";import m from"./packem_shared/constraintValidator-N339mfyx.mjs";import s from"./packem_shared/hotShard-DVs_U17R.mjs";import n from"./packem_shared/indexUtilization-QfbIH_w4.mjs";import p from"./packem_shared/actionFetchSsrf-BbWxy1Yf.mjs";import f from"./packem_shared/adminRouteWithoutGuard-DSo4t9j4.mjs";import l from"./packem_shared/aiRawRunEscapeHatch-DfhjYm43.mjs";import u from"./packem_shared/aiToolSideEffectPromptInjection-DnWQOoKi.mjs";import d from"./packem_shared/aiUnboundedGenerationPublic-D3HZrh5_.mjs";import c from"./packem_shared/allowUnauthenticatedShardAccessEnabled-D4aMNBb0.mjs";import $ from"./packem_shared/authApiCallWithoutHeaders-BItMMdZP.mjs";import h from"./packem_shared/authCsrfCheckDisabled-De9ammtV.mjs";import g from"./packem_shared/authEmailVerificationDisabled-BFKdJcx4.mjs";import U from"./packem_shared/authSecureCookiesDisabled-B4WIzvMm.mjs";import b from"./packem_shared/authSessionFreshageZero-Bpcaf_Pe.mjs";import S from"./packem_shared/authScimWithoutTransactions-DCtLXzks.mjs";import I from"./packem_shared/authTrustedOriginsWildcard-DjU9NXEm.mjs";import A from"./packem_shared/browserAllowPrivateTargets-Dxyeh6lg.mjs";import T from"./packem_shared/browserUserUrlWithoutAllowlist-BHBS6b0N.mjs";import y from"./packem_shared/circularFk-BMuJKmuZ.mjs";import w from"./packem_shared/containerInstanceKeyFromUserInput-C8S4T3ty.mjs";import R from"./packem_shared/containerOversizedInstance-B9wW_sU5.mjs";import k from"./packem_shared/containerPublicInternet-Bx2J7tha.mjs";import W from"./packem_shared/containerRuntimeEgressRelaxation-BQ2ZD1aV.mjs";import F from"./packem_shared/containerStartEnableInternetOverride-B62WUura.mjs";import x from"./packem_shared/duplicateIndex-DFT7qLQD.mjs";import C from"./packem_shared/emptyIndex-BiXEfyfN.mjs";import P from"./packem_shared/exportSinkMisconfigured-DvpAaa6j.mjs";import v from"./packem_shared/externalSourceIncrementalNoDeletePath-DnoL64YY.mjs";import M from"./packem_shared/externalSourceOnGlobal-DNPLoNUg.mjs";import D from"./packem_shared/externalSourceUnscoped-DqBp5jYr.mjs";import N from"./packem_shared/filterWithoutIndex-ht2GZQWV.mjs";import O from"./packem_shared/flagGatesSecurityWithUnsafeDefault-DPGFEHTt.mjs";import E from"./packem_shared/geoIndexFieldNotGeopoint-DAGLZtaH.mjs";import G from"./packem_shared/geoIndexUnused-BgDE6_AR.mjs";import z from"./packem_shared/hardcodedSecret-rIRc3aNk.mjs";import K from"./packem_shared/httpActionMissingAuthGuard-BZDdeW_D.mjs";import L from"./packem_shared/httpActionResponseHeaderInjection-D063rB7U.mjs";import V from"./packem_shared/hyperdriveOutsideAction-CRmOQz67.mjs";import j from"./packem_shared/identityUndeclaredClaimTrusted-BYRYGQ74.mjs";import q from"./packem_shared/imagesUrlSourceFromUserInput-Cy5pc_dA.mjs";import _ from"./packem_shared/indexReferencesUnknownField-r3QHlaz6.mjs";import H from"./packem_shared/insertManyUnsafeUserData-DrH7PdRs.mjs";import B from"./packem_shared/kvUnscopedUserKeyIdor-B4lGxRxh.mjs";import Q from"./packem_shared/mailInboundDispatchWithoutVerify-BivYJ5F9.mjs";import Z from"./packem_shared/mailRecipientFromRequestInput-BR_oSh65.mjs";import J from"./packem_shared/maskUncoveredPiiColumn-DqPfZM2O.mjs";import X from"./packem_shared/maskWeakHashStrategyOnPii-CEiiGgT7.mjs";import Y from"./packem_shared/maskedRelationLeakViaWith-CxYk0MDW.mjs";import oo from"./packem_shared/mutatorFullRowReplace-CEgecSGm.mjs";import ro from"./packem_shared/nondeterministicQueryMutation-BaMfbAk_.mjs";import to from"./packem_shared/normalizeIdUsedAsAuthorization-FjISSXJm.mjs";import io from"./packem_shared/notifyMissingPushConfig-C_GbVw3S.mjs";import eo from"./packem_shared/notifySendOutsideAction-B0jZuUP3.mjs";import ao from"./packem_shared/outputProjectionMissingOnPublicRead-9Pm9766s.mjs";import mo from"./packem_shared/ownerFieldFromArgsNotAuth-BoR9vvst.mjs";import so from"./packem_shared/paymentCreateWithoutAuthorize-CurtqN8K.mjs";import no from"./packem_shared/paymentWebhookWideTolerance-I7ingfR8.mjs";import po from"./packem_shared/plaintextSecretInWranglerVariables-DXjKIm8H.mjs";import fo from"./packem_shared/policyReferencesUnknownTable-D3WelAQa.mjs";import lo from"./packem_shared/privilegedDispatchUnvalidatedPayload-74GuGye1.mjs";import uo from"./packem_shared/privilegedFanoutFromPublicProcedure-C2j2GSUN.mjs";import co from"./packem_shared/publicArgumentUsesAny-BJb4cTqL.mjs";import $o from"./packem_shared/publicMutationWithoutRatelimit-D9phluHW.mjs";import ho from"./packem_shared/publicTableRlsOptoutConfusion-CaWtPGAn.mjs";import go from"./packem_shared/queueWithoutDlq-BLY3iy9Q.mjs";import Uo from"./packem_shared/r2sqlOutsideAction-CKK_I1Ms.mjs";import bo from"./packem_shared/ratelimitDefaultMemoryStore-mOdI3Jmb.mjs";import So from"./packem_shared/ratelimitKeySpoofableOrGlobal-DaGId_Fh.mjs";import Io from"./packem_shared/ratelimitMiddlewareFailOpen-CTWVosEc.mjs";import Ao from"./packem_shared/relationReferencesUnknownField-clqyB69Y.mjs";import To from"./packem_shared/relationReferencesUnknownTable-CLdrhkmS.mjs";import yo from"./packem_shared/rlsUncoveredTable-DYHgnoos.mjs";import wo from"./packem_shared/shapeTargetsGlobalTable-Blz-aSkg.mjs";import Ro from"./packem_shared/shapeUnknownTable-DFxtyFio.mjs";import ko from"./packem_shared/signupMutationWithoutDisposableGating-3ir808Vz.mjs";import Wo from"./packem_shared/softDeleteIncludeDeletedFromArgs-DgxpQHRA.mjs";import Fo from"./packem_shared/sqlInjectionRisk-D2NaT-5c.mjs";import xo from"./packem_shared/storageGenerateUploadUrlNoContentTypePin-C9cjl6Jh.mjs";import Co from"./packem_shared/storageKeyFromUserArgs-BeS5cp56.mjs";import Po from"./packem_shared/storagePresignedUrlForPrivateContent-j7VhwIdu.mjs";import vo from"./packem_shared/storageUploadWithoutContentTypeAllowlist-oxKLecuf.mjs";import Mo from"./packem_shared/storageUploadWithoutMaxSize-DUDxPutk.mjs";import Do from"./packem_shared/tableWithoutInsert-D3AhaNzR.mjs";import No from"./packem_shared/ttlFieldNotTimestamp-BFiRkSZD.mjs";import Oo from"./packem_shared/unboundedStringArgument-AkkIcr-S.mjs";import Eo from"./packem_shared/unindexedForeignKey-DK4eWXkb.mjs";import Go from"./packem_shared/unindexedRelationTarget-B5fFq1E8.mjs";import zo from"./packem_shared/unrestrictedWhereBranch-YKiydie4.mjs";import Ko from"./packem_shared/userCreatingMutationWithoutCaptcha-iDjRkUFO.mjs";import Lo from"./packem_shared/vectorsNamespaceFromUserInput-Cyq5B2kF.mjs";import Vo from"./packem_shared/workflowDuplicateStepName-cXF6Rpvg.mjs";import jo from"./packem_shared/workflowUnknownTarget-JF8rITLP.mjs";import qo from"./packem_shared/workflowUnused-Dx_FQwGE.mjs";import{AE_METRIC_EVENTS as Et,loadAnalyticsRuntimeMetrics as Gt}from"./packem_shared/AE_METRIC_EVENTS-LP_0D7Uw.mjs";import{fromServerSchema as Kt}from"./packem_shared/fromServerSchema-CJ-AQ2kw.mjs";const _o=[_,To,Ao,jo,Vo,Ro,v,M,D,C,E,G,P,No,y,Eo,Go,x,Do,qo,go,N,wo,oo,ro,V,Uo,$,fo,yo,J,X,R,k,$o,zo,Ko,ko,co,Oo,z,Fo,f,so,Q,bo,A,uo,H,d,p,mo,Co,B,w,l,Lo,Z,T,lo,F,W,S,I,h,U,g,b,q,So,ho,c,vo,Mo,xo,Po,K,L,Io,O,u,j,no,Wo,Y,ao,to,eo,io,po],Ho=[s,n,m],Bo=[..._o,...Ho],Dt=(i,o={})=>{const e=o.lints??Bo,r=[];for(const t of e)o.source!==void 0&&t.source!==o.source||r.push(...t.run(i));return a(r)};export{Et as AE_METRIC_EVENTS,Bo as ALL_LINTS,Ho as RUNTIME_LINTS,_o as STATIC_LINTS,p as actionFetchSsrf,f as adminRouteWithoutGuard,l as aiRawRunEscapeHatch,u as aiToolSideEffectPromptInjection,d as aiUnboundedGenerationPublic,c as allowUnauthenticatedShardAccessEnabled,$ as authApiCallWithoutHeaders,h as authCsrfCheckDisabled,g as authEmailVerificationDisabled,S as authScimWithoutTransactions,U as authSecureCookiesDisabled,b as authSessionFreshageZero,I as authTrustedOriginsWildcard,A as browserAllowPrivateTargets,T as browserUserUrlWithoutAllowlist,y as circularFk,m as constraintValidator,w as containerInstanceKeyFromUserInput,R as containerOversizedInstance,k as containerPublicInternet,W as containerRuntimeEgressRelaxation,F as containerStartEnableInternetOverride,a as dedupeCacheKeys,x as duplicateIndex,C as emptyIndex,P as exportSinkMisconfigured,v as externalSourceIncrementalNoDeletePath,M as externalSourceOnGlobal,D as externalSourceUnscoped,N as filterWithoutIndex,O as flagGatesSecurityWithUnsafeDefault,Kt as fromServerSchema,E as geoIndexFieldNotGeopoint,G as geoIndexUnused,z as hardcodedSecret,s as hotShard,K as httpActionMissingAuthGuard,L as httpActionResponseHeaderInjection,V as hyperdriveOutsideAction,j as identityUndeclaredClaimTrusted,q as imagesUrlSourceFromUserInput,_ as indexReferencesUnknownField,n as indexUtilization,H as insertManyUnsafeUserData,B as kvUnscopedUserKeyIdor,Gt as loadAnalyticsRuntimeMetrics,Q as mailInboundDispatchWithoutVerify,Z as mailRecipientFromRequestInput,J as maskUncoveredPiiColumn,X as maskWeakHashStrategyOnPii,Y as maskedRelationLeakViaWith,oo as mutatorFullRowReplace,ro as nondeterministicQueryMutation,to as normalizeIdUsedAsAuthorization,io as notifyMissingPushConfig,eo as notifySendOutsideAction,ao as outputProjectionMissingOnPublicRead,mo as ownerFieldFromArgsNotAuth,so as paymentCreateWithoutAuthorize,no as paymentWebhookWideTolerance,po as plaintextSecretInWranglerVariables,fo as policyReferencesUnknownTable,lo as privilegedDispatchUnvalidatedPayload,uo as privilegedFanoutFromPublicProcedure,co as publicArgumentUsesAny,$o as publicMutationWithoutRatelimit,ho as publicTableRlsOptoutConfusion,go as queueWithoutDlq,Uo as r2sqlOutsideAction,bo as ratelimitDefaultMemoryStore,So as ratelimitKeySpoofableOrGlobal,Io as ratelimitMiddlewareFailOpen,Ao as relationReferencesUnknownField,To as relationReferencesUnknownTable,yo as rlsUncoveredTable,Dt as runAdvisor,wo as shapeTargetsGlobalTable,Ro as shapeUnknownTable,ko as signupMutationWithoutDisposableGating,Wo as softDeleteIncludeDeletedFromArgs,Fo as sqlInjectionRisk,xo as storageGenerateUploadUrlNoContentTypePin,Co as storageKeyFromUserArgs,Po as storagePresignedUrlForPrivateContent,vo as storageUploadWithoutContentTypeAllowlist,Mo as storageUploadWithoutMaxSize,Do as tableWithoutInsert,No as ttlFieldNotTimestamp,Oo as unboundedStringArgument,Eo as unindexedForeignKey,Go as unindexedRelationTarget,zo as unrestrictedWhereBranch,Ko as userCreatingMutationWithoutCaptcha,Lo as vectorsNamespaceFromUserInput,Vo as workflowDuplicateStepName,jo as workflowUnknownTarget,qo as workflowUnused};
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
import{i as t}from"./finding-BAVgqnCF.mjs";const i={categories:["SECURITY"],description:"A `createAuth({...})` call loads `scim()` with a `database` that has no native transactions (`lunoraD1Adapter` / `lunoraAuthAdapter`). `@better-auth/scim` refuses to serve on such an adapter, so every SCIM request fails.",facing:"EXTERNAL",level:"ERROR",name:"auth_scim_without_transactions",remediation:"Move the auth tables somewhere with real transactions: `.auth({ namespace })` with a `LunoraAuthDO` (Durable Object storage), or a Postgres/MySQL kysely dialect over `@lunora/hyperdrive` with `transaction: true`. D1 cannot host SCIM.",run:e=>e.authConfigs===void 0?[]:e.authConfigs.filter(a=>a.analyzable&&a.scimOnNonTransactionalAdapter).map(a=>t(i,{cacheKey:`auth_scim_without_transactions:${a.file}:${a.line.toString()}`,detail:`\`createAuth\` in \`${a.exportName}\` (${a.file}:${a.line.toString()}) loads \`scim()\` on an adapter without native transactions, so the SCIM plugin will refuse to serve and every provisioning request from your IdP fails. Host the auth tables in a Durable Object (\`.auth({ namespace })\`) or on Postgres/MySQL via \`@lunora/hyperdrive\`.`,metadata:{exportName:a.exportName,file:a.file,line:a.line}})),source:"static",title:"SCIM configured on an adapter without transactions"};export{i as default};
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@lunora/advisor",
|
|
3
|
-
"version": "1.0.0-alpha.
|
|
3
|
+
"version": "1.0.0-alpha.49",
|
|
4
4
|
"description": "Schema & query lints (splinter-style advisors) for Lunora, feeding the Studio Advisors view",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"advisor",
|
|
@@ -47,7 +47,7 @@
|
|
|
47
47
|
},
|
|
48
48
|
"dependencies": {
|
|
49
49
|
"@lunora/errors": "1.0.0-alpha.8",
|
|
50
|
-
"@lunora/server": "1.0.0-alpha.
|
|
50
|
+
"@lunora/server": "1.0.0-alpha.46"
|
|
51
51
|
},
|
|
52
52
|
"engines": {
|
|
53
53
|
"node": "^22.15.0 || >=24.11.0"
|