@lunora/cli 1.0.0-alpha.10 → 1.0.0-alpha.101

package/dist/packem_shared/{parseManifest--vZf2FY1.mjs → parseManifest-Dbp-Q2q3.mjs}

@@ -1,17 +1,21 @@
+import { LunoraError } from '@lunora/errors';
+
 const NEWLINE_PRESENT = /[\r\n]/u;
 const VALID_ENV_NAME = /^[A-Za-z_]\w*$/u;
 const VALID_ITEM_NAME = /^[A-Za-z0-9][\w-]*$/u;
+const VALID_MODULE_PATH = /^[\w.-]+(?:\/[\w.-]+)*$/u;
 const parseManifest = (raw, itemName) => {
   if (typeof raw !== "object" || raw === null) {
-    throw new Error(`registry.json for "${itemName}" is not an object`);
+    throw new LunoraError("INTERNAL", `registry.json for "${itemName}" is not an object`);
   }
   const record = raw;
   const { name } = record;
   if (typeof name !== "string" || name.length === 0) {
-    throw new Error(`registry.json for "${itemName}" is missing a string "name"`);
+    throw new LunoraError("INTERNAL", `registry.json for "${itemName}" is missing a string "name"`);
   }
   if (!VALID_ITEM_NAME.test(name)) {
-    throw new Error(
+    throw new LunoraError(
+      "INTERNAL",
       `registry.json for "${itemName}": name "${name}" must match ${VALID_ITEM_NAME.source} (letters, digits, "-", "_"; no path separators, "..", or code)`
     );
   }
@@ -21,7 +25,7 @@ const parseManifest = (raw, itemName) => {
   }
   const files = filesRaw.map((entry, index) => {
     if (typeof entry !== "object" || entry === null) {
-      throw new Error(`registry.json "${itemName}": files[${String(index)}] is not an object`);
+      throw new LunoraError("INTERNAL", `registry.json "${itemName}": files[${String(index)}] is not an object`);
     }
     const fileRecord = entry;
     const { from } = fileRecord;
@@ -31,14 +35,17 @@ const parseManifest = (raw, itemName) => {
       throw new TypeError(`registry.json "${itemName}": files[${String(index)}] needs string "from" and "to"`);
     }
     if (merge !== "create-or-skip" && merge !== "schema-extension") {
-      throw new Error(`registry.json "${itemName}": files[${String(index)}].merge must be "create-or-skip" or "schema-extension"`);
+      throw new LunoraError("INTERNAL", `registry.json "${itemName}": files[${String(index)}].merge must be "create-or-skip" or "schema-extension"`);
     }
     for (const [field, value] of [
       ["from", from],
       ["to", to]
     ]) {
       if (value.includes("..") || value.startsWith("/")) {
-        throw new Error(`registry.json "${itemName}": files[${String(index)}].${field} "${value}" must be a relative path without ".."`);
+        throw new LunoraError(
+          "INTERNAL",
+          `registry.json "${itemName}": files[${String(index)}].${field} "${value}" must be a relative path without ".."`
+        );
       }
     }
     return { from, merge, to };
@@ -54,20 +61,39 @@ const parseManifest = (raw, itemName) => {
     const bindingRecord = value;
     return Array.isArray(bindingRecord.path) && bindingRecord.path.every((segment) => typeof segment === "string");
   }) : void 0;
+  const entrypointReexports = Array.isArray(record.entrypointReexports) ? record.entrypointReexports.filter(
+    (value) => typeof value === "object" && value !== null && typeof value.module === "string"
+  ).map((entry) => {
+    if (entry.module.includes("..") || entry.module.startsWith("/") || !VALID_MODULE_PATH.test(entry.module)) {
+      throw new LunoraError(
+        "INTERNAL",
+        `registry.json "${itemName}": entrypointReexports[].module "${entry.module}" must be a safe relative module path without path traversal or unsafe characters`
+      );
+    }
+    const reexport = { module: entry.module };
+    if (typeof entry.comment === "string") {
+      if (NEWLINE_PRESENT.test(entry.comment)) {
+        throw new LunoraError("INTERNAL", `registry.json "${itemName}": entrypointReexports[].comment must not contain a newline`);
+      }
+      reexport.comment = entry.comment;
+    }
+    return reexport;
+  }) : void 0;
   const envVariables = Array.isArray(record.envVars) ? record.envVars.filter(
     (value) => typeof value === "object" && value !== null && typeof value.name === "string"
   ).map((entry) => {
     const hasValue = typeof entry.value === "string";
     if (!VALID_ENV_NAME.test(entry.name)) {
-      throw new Error(
+      throw new LunoraError(
+        "INTERNAL",
         `registry.json "${itemName}": envVars["${entry.name}"].name must match ${VALID_ENV_NAME.source} (letters, digits, underscore; no "=" or newline)`
       );
     }
     if (hasValue && NEWLINE_PRESENT.test(entry.value)) {
-      throw new Error(`registry.json "${itemName}": envVars["${entry.name}"].value must not contain a newline`);
+      throw new LunoraError("INTERNAL", `registry.json "${itemName}": envVars["${entry.name}"].value must not contain a newline`);
     }
     if (typeof entry.description === "string" && NEWLINE_PRESENT.test(entry.description)) {
-      throw new Error(`registry.json "${itemName}": envVars["${entry.name}"].description must not contain a newline`);
+      throw new LunoraError("INTERNAL", `registry.json "${itemName}": envVars["${entry.name}"].description must not contain a newline`);
     }
     return {
       ...typeof entry.description === "string" ? { description: entry.description } : {},
@@ -83,6 +109,7 @@ const parseManifest = (raw, itemName) => {
     description: typeof record.description === "string" ? record.description : void 0,
     devDependencies,
     docs: typeof record.docs === "string" ? record.docs : void 0,
+    entrypointReexports,
     envVars: envVariables,
     files,
     name,

package/dist/packem_shared/prompt-cancelled-APzX1Im-.mjs

@@ -0,0 +1,9 @@
+class PromptCancelledError extends Error {
+  constructor() {
+    super("cancelled");
+    this.name = "PromptCancelledError";
+  }
+}
+const PROMPT_CANCEL_EXIT_CODE = 130;
+
+export { PromptCancelledError as P, PROMPT_CANCEL_EXIT_CODE as a };

package/dist/packem_shared/runAddCommand-D1hgfqFQ.mjs

@@ -0,0 +1,4 @@
+import 'node:fs';
+import '@visulima/path';
+export { r as runAddCommand, a as runBuildIndexCommand, g as runListCommand, b as runRegistryViewCommand } from './commands-D5Yxt9VY.mjs';
+import './buildRegistryIndex-BS5ig822.mjs';

package/dist/packem_shared/{storage-2RJBhUC4.mjs → storage-BXU4ax4O.mjs}

@@ -1,4 +1,4 @@
-import { s as setBindingField } from './commands-DPKWlqqX.mjs';
+import { s as setBindingField } from './commands-D5Yxt9VY.mjs';
 
 const INVALID_SLUG_CHARS = /[^a-z0-9]+/u;
 const toKebabSlug = (input, min, max) => {

package/dist/packem_shared/{tui-prompts-DEiPCKV-.mjs → tui-prompts-BjEN8XgP.mjs}

@@ -1,5 +1,5 @@
 import { jsx, jsxs } from 'react/jsx-runtime';
-import { isInteractive, ACCENT, LUNA_ART, LUNA_NAME, LUNA_SIGNOFF, badgeLead, padBadge, badgeWidth } from '@lunora/config';
+import { isInteractive, ACCENT, LUNA_ART, LUNA_NAME, LUNA_SIGNOFF, BADGE_COLUMN_WIDTH, badgeLead, padBadge, badgeWidth } from '@lunora/config';
 import { render } from '@visulima/tui';
 import '@visulima/tui/components/big-text';
 import { Box } from '@visulima/tui/components/box';
@@ -13,6 +13,7 @@ import { useApp } from '@visulima/tui/hooks/use-app';
 import { useInput } from '@visulima/tui/hooks/use-input';
 import { useInterval } from '@visulima/tui/hooks/use-interval';
 import { useEffect, useState } from 'react';
+import { P as PromptCancelledError } from './prompt-cancelled-APzX1Im-.mjs';
 
 let listenerCapRaised = false;
 const raiseListenerCap = () => {
@@ -24,12 +25,6 @@ const raiseListenerCap = () => {
     process.setMaxListeners(64);
   }
 };
-class PromptCancelledError extends Error {
-  constructor() {
-    super("cancelled");
-    this.name = "PromptCancelledError";
-  }
-}
 const CtrlCGuard = ({ children, onCancel }) => {
   const { exit } = useApp();
   useInput((input, key) => {
@@ -57,7 +52,7 @@ const PromptHeader = ({ badge, message }) => badge === void 0 ? jsx(Text, { bold
   jsx(Text, { bold: true, children: ` ${message}` })
 ] });
 const BODY_INDENT = 2;
-const HEADER_INDENT = " ".repeat(6);
+const HEADER_INDENT = " ".repeat(BADGE_COLUMN_WIDTH - 1);
 const badgeIndent = (badge) => " ".repeat(badgeWidth(badge) + 1);
 const bodyIndent = (badge) => badge === void 0 ? BODY_INDENT : badgeWidth(badge) + 1;
 const PromptShell = ({
@@ -449,7 +444,7 @@ const tuiNextSteps = async (badge, header, steps, help) => {
     ] })
   );
 };
-const TASK_INDENT = " ".repeat(9);
+const TASK_INDENT = " ".repeat(BADGE_COLUMN_WIDTH - 1);
 const SPINNER_FIRST = "#a855f7";
 const SPINNER_LAST = "#06b6d4";
 const SPINNER_COLORS = [SPINNER_FIRST, "#9b51f6", "#8a5cf6", "#6f86f6", "#4aa6ef", "#2bb6dd", "#12bcd0", SPINNER_LAST];
@@ -465,6 +460,7 @@ const SPINNER_FRAMES = SPINNER_STRIP.map((_, offset) => {
   const window = SPINNER_STRIP.slice(offset, offset + SPINNER_BAR_WIDTH);
   return [...window, ...repeatColor(SPINNER_BAR_WIDTH - window.length, SPINNER_FIRST)];
 });
+const SPINNER_LEAD = " ".repeat(Math.max(0, BADGE_COLUMN_WIDTH - SPINNER_BAR_WIDTH));
 const GradientSpinner = ({ label }) => {
   const [index, setIndex] = useState(0);
   useInterval(() => {
@@ -472,11 +468,12 @@ const GradientSpinner = ({ label }) => {
   }, 90);
   const colors = SPINNER_FRAMES[index % SPINNER_FRAMES.length] ?? [];
   return jsxs(Text, { children: [
+    SPINNER_LEAD,
     colors.map((color, blockIndex) => (
       // eslint-disable-next-line react-x/no-array-index-key -- fixed-length gradient bar that never reorders.
       jsx(Text, { color, children: "█" }, blockIndex)
     )),
-    `  ${label}`
+    ` ${label}`
   ] });
 };
 const TaskRow = ({ label, status }) => {
@@ -536,7 +533,7 @@ const TasksView = ({ end, onSettle, start, tasks }) => {
   return jsxs(Box, { flexDirection: "column", children: [
     allDone ? jsxs(Box, { children: [
       jsx(Text, { bold: true, color: "green", children: `${HEADER_INDENT}✔` }),
-      jsx(Text, { bold: true, color: "green", children: `  ${end}` })
+      jsx(Text, { bold: true, color: "green", children: ` ${end}` })
     ] }) : jsx(GradientSpinner, { label: start }),
     tasks.map((task, index) => jsx(TaskRow, { label: task.label, status: statuses[index] ?? "pending" }, task.label))
   ] });
@@ -658,4 +655,4 @@ const withTuiBadgeProgress = async (badge, steps, done) => {
   return outcome.values;
 };
 
-export { PromptCancelledError as P, tuiSelect as a, tuiConfirm as b, createTuiConfirm as c, tuiMascot as d, tuiStep as e, tuiMoonrise as f, tuiHeadline as g, tuiInfo as h, tuiNextSteps as i, tuiTasks as j, tuiMultiSelect as k, withTuiBadgeProgress as l, tuiText as t, withTuiSpinner as w };
+export { tuiSelect as a, tuiConfirm as b, createTuiConfirm as c, tuiMascot as d, tuiStep as e, tuiMoonrise as f, tuiHeadline as g, tuiInfo as h, tuiNextSteps as i, tuiTasks as j, tuiMultiSelect as k, withTuiBadgeProgress as l, tuiText as t, withTuiSpinner as w };

package/dist/packem_shared/wrangler-secrets-Coni-mER.mjs

@@ -0,0 +1,49 @@
+import { execFile } from 'node:child_process';
+import { e as execArgsFor, d as detectPackageManager } from './detect-package-manager-v4hHpQd0.mjs';
+
+const execCode = (error) => {
+  if (!error) {
+    return 0;
+  }
+  return typeof error.code === "number" ? error.code : 1;
+};
+const defaultRunner = (command, args, cwd) => new Promise((resolve) => {
+  execFile(command, [...args], { cwd }, (error, stdout, stderr) => {
+    resolve({ code: execCode(error), stderr, stdout });
+  });
+});
+const parseSecretNames = (stdout) => {
+  let parsed;
+  try {
+    parsed = JSON.parse(stdout);
+  } catch {
+    return void 0;
+  }
+  if (!Array.isArray(parsed)) {
+    return void 0;
+  }
+  const names = parsed.map((entry) => entry !== null && typeof entry === "object" ? entry.name : void 0).filter((name) => typeof name === "string" && name.length > 0);
+  return [...names].toSorted((a, b) => a.localeCompare(b));
+};
+const listRemoteSecrets = async (inputs) => {
+  const wranglerArgs = ["secret", "list", "--format", "json"];
+  if (inputs.env !== void 0) {
+    wranglerArgs.push("--env", inputs.env);
+  }
+  if (inputs.temporary) {
+    wranglerArgs.push("--temporary");
+  }
+  const { args, command } = execArgsFor(detectPackageManager(inputs.cwd), "wrangler", wranglerArgs);
+  const runner = inputs.runner ?? defaultRunner;
+  const result = await runner(command, args, inputs.cwd);
+  if (result.code !== 0) {
+    return { error: result.stderr.trim() || `wrangler secret list exited ${String(result.code)}`, names: [], ok: false };
+  }
+  const names = parseSecretNames(result.stdout);
+  if (names === void 0) {
+    return { error: "could not parse `wrangler secret list --format json` output", names: [], ok: false };
+  }
+  return { names, ok: true };
+};
+
+export { listRemoteSecrets as l };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/cli",
-  "version": "1.0.0-alpha.10",
+  "version": "1.0.0-alpha.101",
   "description": "The Lunora CLI: init, dev, deploy, codegen, run, reset, and migrate commands",
   "keywords": [
     "agent-skills",
@@ -51,22 +51,27 @@
     "access": "public"
   },
   "dependencies": {
-    "@bomb.sh/tab": "0.0.16",
-    "@lunora/codegen": "1.0.0-alpha.3",
-    "@lunora/config": "1.0.0-alpha.5",
-    "@lunora/container": "1.0.0-alpha.1",
-    "@lunora/d1": "1.0.0-alpha.4",
-    "@lunora/seed": "1.0.0-alpha.1",
-    "@visulima/cerebro": "3.0.0-alpha.32",
-    "@visulima/fs": "5.0.0-alpha.32",
-    "@visulima/pail": "4.0.0-alpha.22",
-    "@visulima/path": "3.0.0-alpha.13",
-    "@visulima/spinner": "1.0.0-alpha.4",
-    "@visulima/tui": "1.0.0-alpha.26",
+    "@bomb.sh/tab": "0.0.19",
+    "@lunora/bindings": "1.0.0-alpha.11",
+    "@lunora/codegen": "1.0.0-alpha.55",
+    "@lunora/config": "1.0.0-alpha.81",
+    "@lunora/container": "1.0.0-alpha.16",
+    "@lunora/d1": "1.0.0-alpha.40",
+    "@lunora/errors": "1.0.0-alpha.8",
+    "@lunora/runtime": "1.0.0-alpha.37",
+    "@lunora/seed": "1.0.0-alpha.30",
+    "@visulima/cerebro": "3.0.0",
+    "@visulima/error": "6.0.0",
+    "@visulima/fs": "5.0.4",
+    "@visulima/package": "5.0.4",
+    "@visulima/pail": "4.0.0",
+    "@visulima/path": "3.0.0",
+    "@visulima/spinner": "1.0.0",
+    "@visulima/tui": "1.0.4",
     "cfonts": "^3.3.1",
     "giget": "3.3.0",
     "jsonc-parser": "^3.3.1",
-    "magic-string": "^0.30.21",
+    "magic-string": "^1.0.0",
     "react": "^19.2.7",
     "react-reconciler": "^0.33.0",
     "ts-morph": "^28.0.0"

package/skills/lunora-quickstart/SKILL.md

@@ -31,9 +31,12 @@ Set up a working Lunora project as fast as possible.
    Lunora into the current project.
 4. Run `lunora codegen` to generate `lunora/_generated/` and typecheck the
    schema + functions. This is the agent's feedback loop.
-5. Start the dev loop with `lunora dev` (ask the user to run it locally, or
-   start it in the background for cloud/headless agents — it is long-running and
-   does not exit).
+5. Start the dev loop. As an agent, run `lunora dev --background` — it starts
+   the server as a managed detached process, blocks until it accepts requests,
+   prints the URL + PID, and returns (under a detected AI agent, plain
+   `lunora dev` does this automatically, with JSON logs). Never leave a bare
+   `lunora dev` running in your own shell — it is long-running and does not
+   exit.
 6. Verify a query/mutation round-trip works end to end.
 
 ## Path 1: New Project (Recommended)
@@ -54,6 +57,7 @@ pnpm install
 | `vite`                 | React + Vite (the simplest full-stack starter) |
 | `standalone`           | Worker-only Lunora backend, no frontend        |
 | `astro`                | Astro integration                              |
+| `next`                 | Next.js (App Router, OpenNext on Cloudflare)   |
 | `nuxt`                 | Nuxt (Vue)                                     |
 | `sveltekit`            | SvelteKit                                      |
 | `tanstack-start-react` | TanStack Start (React)                         |
@@ -87,7 +91,23 @@ not exit, so:
 
 - **Local development (user at the keyboard):** ask the user to run `lunora dev`
   in a terminal.
-- **Cloud or headless agents:** start `lunora dev` in the background.
+- **Agents:** run `lunora dev --background`. It detaches the server, waits until
+  it answers HTTP, prints `Dev server running at <url> (pid <n>)`, and exits —
+  no orphaned shell, no PID bookkeeping. When Lunora detects an AI agent
+  (Claude Code, Cursor, Codex, …), plain `lunora dev` flips into this mode
+  automatically with JSON logs; `LUNORA_AGENT_MODE=0` opts out.
+
+Manage the running server afterwards:
+
+```bash
+lunora dev status --json   # machine-readable: url, pid, uptime, logFile
+lunora dev logs --lines 50 # tail the captured output (.lunora/dev.log)
+lunora dev stop            # idempotent — succeeds even if nothing runs
+```
+
+A second `lunora dev` never double-starts: it reports the existing instance
+(`.lunora/dev.json` is the lockfile). Probe readiness or liveness at
+`GET /_lunora/status` (`{"ok":true}`).
 
 Vite serves on `http://localhost:5173` by default; the Worker is served on the
 same origin via `@cloudflare/vite-plugin`.
@@ -236,5 +256,6 @@ ids, `.dev.vars` secrets, and container exports.
 - [ ] New project: scaffolded with `lunora init --template <t>`.
 - [ ] Existing app: ran `lunora init --here` and wired `LunoraProvider`.
 - [ ] Ran `lunora codegen`: `lunora/_generated/` exists and typecheck is clean.
-- [ ] `lunora dev` is running — user terminal, or background for cloud agents.
+- [ ] Dev server is running — user terminal, or `lunora dev --background`
+      (check with `lunora dev status`).
 - [ ] Verified a query/mutation round-trip re-renders the client live.

package/dist/packem_shared/detect-package-manager-DYp7n3mJ.mjs

@@ -1,61 +0,0 @@
-import { spawnSync } from 'node:child_process';
-import { existsSync, readFileSync } from 'node:fs';
-import { dirname, join } from '@visulima/path';
-
-const FALLBACK = "pnpm";
-const KNOWN_MANAGERS = ["pnpm", "yarn", "npm", "bun"];
-const INSTALL_PREFERENCE = ["pnpm", "bun", "yarn", "npm"];
-const isManagerInstalled = (manager) => {
-  try {
-    return spawnSync(manager, ["--version"], { stdio: "ignore", timeout: 5e3 }).status === 0;
-  } catch {
-    return false;
-  }
-};
-const detectInstalledManagers = (probe = isManagerInstalled) => INSTALL_PREFERENCE.filter((manager) => probe(manager));
-const installArgsFor = (manager) => {
-  return { args: ["install"], command: manager };
-};
-const parseDeclaredManager = (declared) => {
-  if (typeof declared !== "string") {
-    return void 0;
-  }
-  return KNOWN_MANAGERS.find((manager) => declared.startsWith(`${manager}@`));
-};
-const readDeclaredManager = (directory) => {
-  const candidate = join(directory, "package.json");
-  if (!existsSync(candidate)) {
-    return void 0;
-  }
-  try {
-    const parsed = JSON.parse(readFileSync(candidate, "utf8"));
-    return parseDeclaredManager(parsed.packageManager);
-  } catch {
-    return void 0;
-  }
-};
-const detectPackageManager = (startDirectory) => {
-  let directory = startDirectory;
-  while (directory && directory !== dirname(directory)) {
-    const declared = readDeclaredManager(directory);
-    if (declared !== void 0) {
-      return declared;
-    }
-    directory = dirname(directory);
-  }
-  return FALLBACK;
-};
-const execArgsFor = (manager, command, args) => {
-  if (manager === "yarn") {
-    return { args: [command, ...args], command: "yarn" };
-  }
-  if (manager === "bun") {
-    return { args: ["x", command, ...args], command: "bun" };
-  }
-  if (manager === "npm") {
-    return { args: ["--", command, ...args], command: "npx" };
-  }
-  return { args: ["exec", command, ...args], command: "pnpm" };
-};
-
-export { detectInstalledManagers as a, detectPackageManager as d, execArgsFor as e, installArgsFor as i };

package/dist/packem_shared/parseArgs-YXFuKdEk.mjs

@@ -1,56 +0,0 @@
-const consumeLongOption = (body, next, booleanFlags, accumulator) => {
-  const eqIndex = body.indexOf("=");
-  if (eqIndex !== -1) {
-    accumulator.options[body.slice(0, eqIndex)] = body.slice(eqIndex + 1);
-    return 1;
-  }
-  if (booleanFlags.has(body)) {
-    accumulator.flags[body] = true;
-    return 1;
-  }
-  if (next !== void 0 && !next.startsWith("-")) {
-    accumulator.options[body] = next;
-    return 2;
-  }
-  accumulator.flags[body] = true;
-  return 1;
-};
-const consumeShortOption = (body, next, accumulator) => {
-  if (body.length > 1) {
-    accumulator.options[body[0]] = body.slice(1);
-    return 1;
-  }
-  if (next !== void 0 && !next.startsWith("-")) {
-    accumulator.options[body] = next;
-    return 2;
-  }
-  accumulator.flags[body] = true;
-  return 1;
-};
-const parseArgs = (argv, booleanFlags = /* @__PURE__ */ new Set()) => {
-  const accumulator = { flags: {}, options: {}, positional: [] };
-  let index = 0;
-  let terminated = false;
-  while (index < argv.length) {
-    const token = argv[index];
-    if (token === void 0) {
-      index += 1;
-      continue;
-    }
-    if (terminated || !token.startsWith("-") || token.length === 1) {
-      accumulator.positional.push(token);
-      index += 1;
-      continue;
-    }
-    if (token === "--") {
-      terminated = true;
-      index += 1;
-      continue;
-    }
-    const next = argv[index + 1];
-    index += token.startsWith("--") ? consumeLongOption(token.slice(2), next, booleanFlags, accumulator) : consumeShortOption(token.slice(1), next, accumulator);
-  }
-  return { flags: accumulator.flags, options: accumulator.options, positional: accumulator.positional };
-};
-
-export { parseArgs as default };

package/dist/packem_shared/runAddCommand-CTRA_JlL.mjs

@@ -1,4 +0,0 @@
-import 'node:fs';
-import '@visulima/path';
-export { r as runAddCommand, a as runBuildIndexCommand, e as runListCommand, b as runRegistryViewCommand } from './commands-DPKWlqqX.mjs';
-import './buildRegistryIndex-BcYe607_.mjs';