@lunora/cli 1.0.0-alpha.130 → 1.0.0-alpha.132

package/dist/packem_chunks/runDeployCommand.mjs

@@ -1 +1 @@
-import{existsSync as h,readFileSync as T}from"node:fs";import{runCodegen as _,discoverMigrations as E}from"@lunora/codegen";import{readLinkedProject as S,writeLinkedProject as P,resolveDeployDriver as R,inferLunoraBindings as U,DEV_VARS_FILE as $,parseDevVariableEntries as A,isMintableSecretKey as j,discoverContainerInfo as C,packageNamesFromBindings as O,requiredSecrets as W,generateSecretValue as B,discoverSchemaInfo as K}from"@lunora/config";import{validateWranglerProject as M,reconcileWranglerBindings as q,reconcileWranglerCompatibilityDate as Y,reconcileWranglerCrons as F,findWranglerFile as D,readWranglerJsonc as x}from"@lunora/config/cloudflare";import{join as m}from"@visulima/path";import{Spinner as V}from"@visulima/spinner";import{Project as G}from"ts-morph";import{r as z}from"../packem_shared/api-spec-BENwiyUa.mjs";import{d as I}from"../packem_shared/wrangler-name-CHDf3rMP.mjs";import{i as H}from"../packem_shared/command-Bjv4VmYA.mjs";import{i as J}from"../packem_shared/deploy-target-Dvr9vxpR.mjs";import{M as v,P as y}from"../packem_shared/detect-package-manager-C4aS7HE4.mjs";import{o as Q,r as X}from"../packem_shared/docker-CKvYE9YF.mjs";import{i as Z,r as w,d as ee,s as re}from"../packem_shared/output-format-D7cKB-O5.mjs";import{m as te}from"../packem_shared/post-codegen-hook-CjhP1OmV.mjs";import{containerBuildTag as oe}from"@lunora/container";import{defaultSpawner as b}from"../packem_shared/createRecordingSpawner-ByIqBepG.mjs";import{t as ne}from"../packem_shared/resolve-target-vxaXHmvg.mjs";import{R as ie}from"../packem_shared/schema-drift-gate-d12lMICD.mjs";import{$ as ae}from"../packem_shared/tui-prompts-CCt3jm1k.mjs";import{m as se,p as ce}from"../packem_shared/vectorize-metadata-BvZbbqUD.mjs";import{R as le}from"../packem_shared/wrangler-secrets-DHpbsDN9.mjs";import{runMigrateDataCommand as de}from"./runMigrateGenerateCommand.mjs";const ge=/https?:\/\/[^\s"'<>]+\.workers\.dev[^\s"'<>]*/u,ue=/https:\/\/[^\s"'<>]+/u,pe=e=>{const r=ge.exec(e);return r?r[0]:ue.exec(e)?.[0]},me=({cwd:e,env:r,logger:t,now:n,output:o})=>{if(o===void 0||S(e)!==void 0)return;const i=pe(o);if(i!==void 0)try{const a=(n??(()=>new Date().toISOString()))();P(e,{env:r,linkedAt:a,workerName:I(e),workerUrl:i}),t.success(`link: recorded ${i} in .lunora/project.json (run \`lunora link\` to change)`)}catch{}},fe=e=>{const{cwd:r,env:t,logger:n,migrated:o}=e;try{const i=S(r),a=i?.workerName??I(r);n.success("deploy complete"),n.info(`  worker:  ${a??"(see wrangler output above)"}`),t!==void 0&&n.info(`  env:     ${t}`),i?.workerUrl===void 0?n.info("  url:     run `lunora link --url <https://your-worker>` to record it"):n.info(`  url:     ${i.workerUrl}`),o&&n.info("  migrations: applied"),n.info("  studio:  lunora view --remote"),n.info("  logs:    lunora logs")}catch{}},we=async e=>{if(e.targets.length===0)return{builtTags:[],code:0};if(!(e.railpackAvailable??Q)()){const n="deploy blocked: a container uses `image: { build }` (Railpack), but Railpack isn't ready. Install the `railpack` CLI and start a BuildKit instance, e.g. `docker run --rm --privileged -d --name buildkit moby/buildkit` then `export BUILDKIT_HOST=docker-container://buildkit`. Alternatively switch the container's `image` to a Dockerfile path or a pre-built registry reference.";return e.logger.error(n),{builtTags:[],code:1,error:n}}const r=e.spawner??b,t=[];for(const n of e.targets){const o=oe(n.exportName),i={args:["build",n.buildDir,"--name",o],command:"railpack",cwd:e.cwd},a=v(y(e.cwd),"wrangler",["containers","push",o]),c={args:a.args,command:a.command,cwd:e.cwd};e.logger.info(`railpack: building "${n.exportName}" → ${o} from ${n.buildDir}`);const l=await r(i);if(l.code!==0){const d=`railpack build failed for container "${n.exportName}" (${n.buildDir})`;return e.logger.error(d),{builtTags:t,code:l.code,error:d}}e.logger.info(`railpack: pushing ${o} to the Cloudflare Registry`);const s=await r(c);if(s.code!==0){const d=`wrangler containers push failed for "${n.exportName}" (${o})`;return e.logger.error(d),{builtTags:t,code:s.code,error:d}}t.push(o)}return{builtTags:t,code:0}},L="<replace-with-d1-create-id>",he=["LUNORA_ORIGIN_URL","LUNORA_WORKER_ORIGIN","AUTH_URL"],ve=e=>{try{const{hostname:r}=new URL(e);return r==="localhost"||r==="127.0.0.1"||r==="::1"||r==="[::1]"}catch{return!1}},ye=e=>e.startsWith("./")||e.startsWith("../")||e.startsWith("/")||e.includes("Dockerfile"),be=(e,r,t)=>{const n=D(e);if(!n)return;const{parsed:o}=x(n),i=(o?.containers??[]).filter(c=>typeof c?.image=="string"&&ye(c.image));if(i.length===0||t())return;const a=`deploy blocked: wrangler.jsonc declares ${String(i.length)} container(s) built from a local Dockerfile, but no Docker-compatible engine is available. Start Docker (or Colima), or point the container's \`image\` at a pre-built registry reference. Note: container images must target linux/amd64.`;return r.error(a),a},ke=e=>h(m(e,"src","worker.ts"))?"src/worker.ts":void 0,$e=(e,r)=>{for(const t of C(e,"lunora").containers){const{image:n}=t;if(n.kind==="dockerfile"&&!h(m(e,n.dockerfilePath))){const o=`deploy blocked: container "${t.exportName}" references a Dockerfile at "${n.dockerfilePath}" that does not exist. Create it or fix the \`image\` path in lunora/containers.ts.`;return r.error(o),o}if(n.kind==="build"&&!h(m(e,n.buildDir))){const o=`deploy blocked: container "${t.exportName}" references a Railpack build directory "${n.buildDir}" that does not exist. Create it or fix the \`image.build\` path in lunora/containers.ts.`;return r.error(o),o}}},Se=e=>w(e.format)?!1:e.interactive!==void 0?e.interactive:process.stdout.isTTY&&!process.env.CI,Re=e=>{const r=D(e);if(!r)return;const{parsed:t}=x(r);return t?(t.d1_databases??[]).find(n=>n.database_id===L)?.binding:void 0},De=async(e,r)=>{const t=C(e,"lunora").containers.filter(o=>o.image.kind==="build").map(o=>({buildDir:o.image.buildDir,exportName:o.exportName}));if(t.length===0)return;const n=await we({cwd:e,logger:r.logger,railpackAvailable:r.railpackAvailable,spawner:r.spawner,targets:t});return n.code===0?void 0:n.error??"railpack build failed"},xe=(e,r,t)=>{if(t!==void 0)try{const n=F(e,t);n.changed&&r.success(`synced ${String(t.length)} cron trigger(s) → ${n.wranglerPath??"wrangler.jsonc"}`)}catch(n){const o=n instanceof Error?n.message:String(n);r.warn(`cron trigger sync skipped: ${o}`)}},Ne=async(e,r,t,n)=>{try{R(n);const o=await U({projectRoot:e}),i=q(e,o);i.changed&&r.success(`provisioned bindings: ${i.added.join(", ")} → ${i.wranglerPath??"wrangler.jsonc"}`);for(const a of i.warnings)r.warn(a)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`binding inference skipped: ${i}`)}try{const o=Y(e);o.changed&&r.success(`bumped compatibility_date to ${o.date??"unknown"} (Workers Cache enabled) → ${o.wranglerPath??"wrangler.jsonc"}`)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`compatibility date sync skipped: ${i}`)}xe(e,r,t)},je=(e,r)=>{const t=m(e,$);if(!h(t))return;let n;try{n=A(T(t,"utf8")).length}catch{return}n!==0&&r.warn(`Note: \`lunora deploy\` does not push secrets. ${$} has ${String(n)} key(s); if you changed them, run \`lunora env push --yes\` to update the deployed secrets.`)},Te=/(?:KEY|PASSWORD|SECRET|TOKEN)$/u,Ue=async e=>{let r=[];try{r=O(await U({projectRoot:e}))}catch{}const t=W(r).map(o=>o.key);let n=[];try{const o=m(e,$);h(o)&&(n=A(T(o,"utf8")).map(i=>i.key).filter(i=>Te.test(i)))}catch{}return[...new Set([...t,...n])]},Ae=async(e,r,t,n)=>{const{logger:o}=r,i=r.spawner??b,a=y(e),c=r.env===void 0?"":` --env ${r.env}`,{toolchain:l}=R(n);if(l===void 0)return o.error("deploy target has no command-line toolchain; cannot push secrets"),!1;for(const s of t){const d=l.secretPut({environment:r.env,key:s,temporary:r.temporary}),p=v(a,d.tool,d.args),f=await i({args:p.args,command:p.command,cwd:e,input:B()});if(f.code!==0)return o.error(`failed to push secret ${s} (exit ${String(f.code)}); set it manually with \`wrangler secret put ${s}${c}\`.`),!1;o.success(`generated + pushed ${s}`)}return!0},Ce=async(e,r,t,n)=>{if(r.dryRun===!0||r.preview===!0)return;const{logger:o}=r,i=r.env===void 0?"":` --env ${r.env}`;let a;try{a=await(r.secretLister??le)({cwd:e,env:r.env,temporary:r.temporary})}catch{return}if(!a.ok)return;const c=new Set(a.names),l=(await Ue(e)).filter(d=>!c.has(d));if(l.length===0)return;if(!t)return`missing required secret(s) on the deploy target: ${l.join(", ")}. Set them with \`wrangler secret put <KEY>${i}\` (or \`lunora env generate --set\` then \`lunora env push --yes${r.env===void 0?"":" --prod"}\`), then re-deploy.`;for(const d of l.filter(p=>!j(p)))o.warn(`required secret ${d} is not set on the target — set it with: wrangler secret put ${d}${i}`);const s=l.filter(d=>j(d));if(s.length!==0){if(await(r.secretConfirm??ae())(`${String(s.length)} required secret(s) not set on the target (${s.join(", ")}). Generate strong values and push them now?`)){await Ae(e,r,s,n);return}o.warn(`${String(s.length)} required secret(s) not set on the target: ${s.join(", ")}. Generate + push with \`lunora env generate --set\` then \`lunora env push --yes${r.env===void 0?"":" --prod"}\`.`)}},Ie=async(e,r)=>{const t=new G({skipAddingFilesFromTsConfig:!0}),n=m(r,"lunora");let o;try{o=E(t,n)}catch(i){const a=i instanceof Error?i.message:String(i);return e.logger.warn(`--migrate: could not discover migrations (${a}); skipping`),0}if(o.length===0)return e.logger.info("--migrate: no data migrations declared in lunora/"),0;e.logger.info(`--migrate: running ${String(o.length)} migration(s) against deployed worker`);for(const i of o){e.logger.info(`--migrate: up "${i.id}" (table "${i.table}")`);const a={cwd:r,fetchImpl:e.fetchImpl,id:i.id,logger:e.logger,prod:!0,subcommand:"up",token:e.migrateToken,url:e.migrateUrl,yes:e.migrateYes===!0},c=await de(a);if(c.code!==0)return e.logger.error(`--migrate: migration "${i.id}" failed — see output above`),c.code;e.logger.success(`--migrate: "${i.id}" applied`)}return 0},Le=e=>{if(!(!e.migrate||e.dryRun||e.preview)){if(e.migrateUrl===void 0){const r="--migrate requires --migrate-url <https://your-worker> — the deploy target URL is not captured automatically, refusing to default to localhost";return e.logger.error(r),r}if(e.migrateYes!==!0){const r="--migrate runs production data migrations after deploy. Re-run with --migrate-yes to confirm.";return e.logger.error(r),r}if((e.migrateToken??process.env.LUNORA_ADMIN_TOKEN)===void 0||(e.migrateToken??process.env.LUNORA_ADMIN_TOKEN)===""){const r="admin token required for --migrate — pass --migrate-token or set LUNORA_ADMIN_TOKEN";return e.logger.error(r),r}}},_e=async(e,r,t,n,o,i,a)=>{let c;r?(c=new V({name:"dots"}),c.start("running codegen")):t.info("running codegen");try{const l=_({apiSpec:n,projectRoot:e,target:o});c?.succeed("codegen complete"),c||t.success("codegen complete");const s=await te({cwd:e,logger:t,spawner:i,stdoutToStderr:a});return s.error!==void 0?(t.error(s.error),{error:s.error}):{result:l}}catch(l){c?.failed("codegen failed");const s=l instanceof Error?l.message:String(l);return t.error(`codegen failed: ${s}`),{error:`codegen failed: ${s}`}}},Ee=(e,r)=>{const t=Re(e);if(t===void 0)return;const n=`deploy blocked: the "${t}" D1 binding has a placeholder database_id ("${L}"). Run \`wrangler d1 create <name>\` to create the database, then replace the placeholder in wrangler.jsonc with the real id before deploying.`;return r.error(n),n},Pe=(e,r)=>{const t=D(e);if(!t)return;const{parsed:n}=x(t),o=n?.vars;if(!o)return;const i=he.filter(c=>typeof o[c]=="string"&&ve(o[c]));if(i.length===0)return;const a=`deploy blocked: ${i.join(", ")} in wrangler.jsonc point at localhost. A deployed Worker can't reach a loopback address, so this silently breaks scheduled-job dispatch / auth callbacks. Set each to the deployed worker's public URL (or move it to a secret with \`wrangler secret put\`) before deploying.`;return r.error(a),a},Oe=async(e,r)=>{const{info:t}=K(r,"lunora"),n=t?.vectorMetadata??[];if(n.length===0)return;const o=[];for(const a of n){const c=ce(a.kind);if(c===void 0){e.logger.warn(`vector index "${a.index}" declares metadata "${a.property}", whose column type cannot be filtered on in Vectorize — it is stored with each vector but no filter will match it.`);continue}o.push({index:a.index,property:a.property,type:c})}if(o.length===0)return;const i=(await se({cwd:r,entries:o,exec:v(y(r),"wrangler",[]),logger:e.logger,spawner:e.spawner??b})).filter(a=>a.status!=="failed").length;i>0&&e.logger.success(`vectorize metadata indexes ready: ${String(i)}/${String(o.length)}`)},We=async(e,r,t,n,o)=>{if(await Oe(e,r),e.migrate){const i=await Ie(e,r);return i===0&&o?.(),{code:i,descriptor:t,validation:n}}return o?.(),{code:0,descriptor:t,validation:n}},Be=async(e,r)=>{const t=Ee(e,r.logger);if(t!==void 0)return t;const n=Pe(e,r.logger);if(n!==void 0)return n;const o=$e(e,r.logger);if(o!==void 0)return o;const i=be(e,r.logger,r.dockerAvailable??X);return i!==void 0?i:De(e,r)},Ke=(e,r,t)=>{const n=ke(e);n!==void 0&&r.logger.info(`class-B composition: deploying ${n} (overrides wrangler main)`),r.temporary&&r.logger.info("temporary account: deploying to a short-lived Cloudflare account (~60min); wrangler will print a claim URL"),r.dryRun&&r.logger.info("dry run: validating + bundling without publishing"),r.outDir!==void 0&&r.logger.info(`build artifact: emitting bundle to ${r.outDir}`);const o=R(t),i={dryRun:r.dryRun,entry:n,environment:r.env,outDir:r.outDir,preview:r.preview,temporary:r.temporary};if(o.toolchain===void 0)throw new Error(`deploy target "${o.id}" has no command-line toolchain`);return o.toolchain.deploy(i)},Me=(e,r)=>{if(e.problems.length===0)return!1;r.error("wrangler.jsonc validation failed:");for(const t of e.problems)r.error(`  - ${t}`);return!0},qe=async e=>{const r=e.cwd??process.cwd(),t=Se(e),n=J(r,e.target);if(n.target===void 0){const g=n.error??"unknown deploy target";return e.logger.error(g),{code:1,descriptor:void 0,error:g,validation:{problems:[],wranglerPath:void 0}}}const{target:o}=n;let i;if(!e.skipCodegen){const g=await _e(r,t,e.logger,e.apiSpec,o,e.spawner,w(e.format));if(g.error!==void 0)return{code:1,descriptor:void 0,error:g.error,validation:{problems:[],wranglerPath:void 0}};i=g.result}let a;if(i!==void 0){const g=ie({allowDrift:e.allowSchemaDrift===!0,codegen:i,command:"deploy",logger:e.logger,updateBaseline:e.updateSchemaBaseline===!0});if(g.blocked)return{code:1,descriptor:void 0,error:"schema drift gate blocked deploy",schemaDrift:{blocked:!0,reason:g.reason},validation:{problems:[],wranglerPath:void 0}};a=g.rebless}await Ne(r,e.logger,i?.cronTriggers,o);const c=Le(e);if(c!==void 0)return{code:1,descriptor:void 0,error:c,validation:{problems:[],wranglerPath:void 0}};const l=await Be(r,e);if(l!==void 0)return{code:1,descriptor:void 0,error:l,validation:{problems:[],wranglerPath:void 0}};const s=M({projectRoot:r});if(Me(s,e.logger))return{code:1,descriptor:void 0,error:"wrangler validation failed",validation:s};je(r,e.logger);const d=await Ce(r,e,t,o);if(d!==void 0)return e.logger.error(d),{code:1,descriptor:void 0,error:d,validation:s};const p=!w(e.format)&&e.dryRun!==!0&&e.preview!==!0&&S(r)===void 0,f=Ke(r,e,o),N=v(y(r),f.tool,f.args),u={args:N.args,captureStdout:p,command:N.command,cwd:r,stdoutToStderr:w(e.format)};e.logger.info(`deploying via ${u.command} ${u.args.join(" ")}`);const k=await(e.spawner??b)(u);return k.code!==0?{code:k.code,descriptor:u,validation:s}:e.dryRun?{code:0,descriptor:u,validation:s}:e.preview?{code:0,descriptor:u,validation:s}:(me({cwd:r,env:e.env,logger:e.logger,output:k.stdout}),We(e,r,u,s,a))},Ye=async e=>{const r=Z("deploy",e.format);if(r!==void 0)return e.logger.error(r),{code:1,descriptor:void 0,error:r,validation:{problems:[],wranglerPath:void 0}};const t=await qe({...e,logger:re(e.format,e.logger)});return w(e.format)?(ee(t),t):(t.code===0&&e.dryRun!==!0&&e.preview!==!0?fe({cwd:e.cwd??process.cwd(),env:e.env,logger:e.logger,migrated:e.migrate===!0}):t.code===0&&e.preview===!0&&e.logger.success("preview version uploaded — see the preview URL in the wrangler output above"),t)},mr=H(async({cwd:e,logger:r,options:t})=>({code:(await Ye({allowSchemaDrift:t.allowSchemaDrift===!0,apiSpec:z(t.apiSpec),cwd:e,dryRun:t.dryRun===!0,env:t.env,format:t.format,logger:r,migrate:t.migrate===!0,migrateToken:t.migrateToken,migrateUrl:ne({cwd:e,url:t.migrateUrl}),migrateYes:t.migrateYes===!0,preview:t.preview===!0,skipCodegen:t.prebuilt===!0,target:t.target,temporary:t.temporary===!0,updateSchemaBaseline:t.updateSchemaBaseline===!0})).code}));export{mr as execute,Ye as runDeployCommand};
+import{existsSync as y,readFileSync as N}from"node:fs";import{runCodegen as I,discoverMigrations as P}from"@lunora/codegen";import{readLinkedProject as j,writeLinkedProject as O,resolveDeployDriver as x,inferLunoraBindings as C,DEV_VARS_FILE as w,parseDevVariableEntries as L,isMintableSecretKey as U,discoverContainerInfo as _,packageNamesFromBindings as W,requiredSecrets as B,generateSecretValue as K,upsertDevVariableLine as q,writeDevVariablesFileAtomically as M,discoverSchemaInfo as V}from"@lunora/config";import{validateWranglerProject as Y,reconcileWranglerBindings as G,reconcileWranglerCompatibilityDate as z,reconcileWranglerCrons as H,findWranglerFile as T,readWranglerJsonc as A}from"@lunora/config/cloudflare";import{join as v}from"@visulima/path";import{Spinner as J}from"@visulima/spinner";import{Project as Q}from"ts-morph";import{n as X,t as Z}from"../packem_shared/advisory-gate-yaOOyUQl.mjs";import{r as ee}from"../packem_shared/api-spec-BENwiyUa.mjs";import{d as E}from"../packem_shared/wrangler-name-CHDf3rMP.mjs";import{i as re}from"../packem_shared/command-Bjv4VmYA.mjs";import{i as te}from"../packem_shared/deploy-target-Dvr9vxpR.mjs";import{M as b,l as S}from"../packem_shared/detect-package-manager-D9r2z_X6.mjs";import{o as oe,r as ie}from"../packem_shared/docker-CKvYE9YF.mjs";import{i as ne,r as k,d as ae,s as se}from"../packem_shared/output-format-D7cKB-O5.mjs";import{a as ce}from"../packem_shared/platform-diagnostics-C4TFj5Pu.mjs";import{m as le}from"../packem_shared/post-codegen-hook-reEtIN59.mjs";import{containerBuildTag as de}from"@lunora/container";import{defaultSpawner as R}from"../packem_shared/createRecordingSpawner-SKs4R1fc.mjs";import{i as ge}from"../packem_shared/resolve-target-CeiNrCAx.mjs";import{R as ue}from"../packem_shared/schema-drift-gate-d12lMICD.mjs";import{$ as pe}from"../packem_shared/tui-prompts-CCt3jm1k.mjs";import{m as me,p as fe}from"../packem_shared/vectorize-metadata-BvZbbqUD.mjs";import{f as ve}from"../packem_shared/wrangler-secrets-DzYgUxU-.mjs";import{runMigrateDataCommand as he}from"./runMigrateGenerateCommand.mjs";const we=/https?:\/\/[^\s"'<>]+\.workers\.dev[^\s"'<>]*/u,ye=/https:\/\/[^\s"'<>]+/u,$e=e=>{const r=we.exec(e);return r?r[0]:ye.exec(e)?.[0]},ke=({cwd:e,env:r,logger:t,now:o,output:i})=>{if(i===void 0||j(e)!==void 0)return;const n=$e(i);if(n!==void 0)try{const a=(o??(()=>new Date().toISOString()))();O(e,{env:r,linkedAt:a,workerName:E(e),workerUrl:n}),t.success(`link: recorded ${n} in .lunora/project.json (run \`lunora link\` to change)`)}catch{}},be=e=>{const{cwd:r,env:t,logger:o,migrated:i,mintedSecretsFile:n}=e;try{const a=j(r),c=a?.workerName??E(r);o.success("deploy complete"),o.info(`  worker:  ${c??"(see wrangler output above)"}`),t!==void 0&&o.info(`  env:     ${t}`),a?.workerUrl===void 0?o.info("  url:     run `lunora link --url <https://your-worker>` to record it"):o.info(`  url:     ${a.workerUrl}`),i&&o.info("  migrations: applied"),n!==void 0&&o.info(`  secrets: generated value(s) recorded in ${n}`),o.info("  studio:  lunora view --remote"),o.info("  logs:    lunora logs")}catch{}},Se=async e=>{if(e.targets.length===0)return{builtTags:[],code:0};if(!(e.railpackAvailable??oe)()){const o="deploy blocked: a container uses `image: { build }` (Railpack), but Railpack isn't ready. Install the `railpack` CLI and start a BuildKit instance, e.g. `docker run --rm --privileged -d --name buildkit moby/buildkit` then `export BUILDKIT_HOST=docker-container://buildkit`. Alternatively switch the container's `image` to a Dockerfile path or a pre-built registry reference.";return e.logger.error(o),{builtTags:[],code:1,error:o}}const r=e.spawner??R,t=[];for(const o of e.targets){const i=de(o.exportName),n={args:["build",o.buildDir,"--name",i],command:"railpack",cwd:e.cwd},a=b(S(e.cwd),"wrangler",["containers","push",i]),c={args:a.args,command:a.command,cwd:e.cwd};e.logger.info(`railpack: building "${o.exportName}" → ${i} from ${o.buildDir}`);const d=await r(n);if(d.code!==0){const s=`railpack build failed for container "${o.exportName}" (${o.buildDir})`;return e.logger.error(s),{builtTags:t,code:d.code,error:s}}e.logger.info(`railpack: pushing ${i} to the Cloudflare Registry`);const l=await r(c);if(l.code!==0){const s=`wrangler containers push failed for "${o.exportName}" (${i})`;return e.logger.error(s),{builtTags:t,code:l.code,error:s}}t.push(i)}return{builtTags:t,code:0}},F="<replace-with-d1-create-id>",Re=["LUNORA_ORIGIN_URL","LUNORA_WORKER_ORIGIN","AUTH_URL"],De=e=>{try{const{hostname:r}=new URL(e);return r==="localhost"||r==="127.0.0.1"||r==="::1"||r==="[::1]"}catch{return!1}},Ne=e=>e.startsWith("./")||e.startsWith("../")||e.startsWith("/")||e.includes("Dockerfile"),je=(e,r,t)=>{const o=T(e);if(!o)return;const{parsed:i}=A(o),n=(i?.containers??[]).filter(c=>typeof c?.image=="string"&&Ne(c.image));if(n.length===0||t())return;const a=`deploy blocked: wrangler.jsonc declares ${String(n.length)} container(s) built from a local Dockerfile, but no Docker-compatible engine is available. Start Docker (or Colima), or point the container's \`image\` at a pre-built registry reference. Note: container images must target linux/amd64.`;return r.error(a),a},xe=e=>y(v(e,"src","worker.ts"))?"src/worker.ts":void 0,Te=(e,r)=>{for(const t of _(e,"lunora").containers){const{image:o}=t;if(o.kind==="dockerfile"&&!y(v(e,o.dockerfilePath))){const i=`deploy blocked: container "${t.exportName}" references a Dockerfile at "${o.dockerfilePath}" that does not exist. Create it or fix the \`image\` path in lunora/containers.ts.`;return r.error(i),i}if(o.kind==="build"&&!y(v(e,o.buildDir))){const i=`deploy blocked: container "${t.exportName}" references a Railpack build directory "${o.buildDir}" that does not exist. Create it or fix the \`image.build\` path in lunora/containers.ts.`;return r.error(i),i}}},Ae=e=>k(e.format)?!1:e.interactive!==void 0?e.interactive:process.stdout.isTTY&&!process.env.CI,Ue=e=>{const r=T(e);if(!r)return;const{parsed:t}=A(r);return t?(t.d1_databases??[]).find(o=>o.database_id===F)?.binding:void 0},Ce=async(e,r)=>{const t=_(e,"lunora").containers.filter(i=>i.image.kind==="build").map(i=>({buildDir:i.image.buildDir,exportName:i.exportName}));if(t.length===0)return;const o=await Se({cwd:e,logger:r.logger,railpackAvailable:r.railpackAvailable,spawner:r.spawner,targets:t});return o.code===0?void 0:o.error??"railpack build failed"},Le=(e,r,t)=>{if(t!==void 0)try{const o=H(e,t);o.changed&&r.success(`synced ${String(t.length)} cron trigger(s) → ${o.wranglerPath??"wrangler.jsonc"}`)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`cron trigger sync skipped: ${i}`)}},_e=async(e,r,t,o,i)=>{try{x(o);const n=await C({projectRoot:e}),a=G(e,n,i);a.changed&&r.success(`provisioned bindings: ${a.added.join(", ")} → ${a.wranglerPath??"wrangler.jsonc"}`);for(const c of a.warnings)r.warn(c)}catch(n){const a=n instanceof Error?n.message:String(n);r.warn(`binding inference skipped: ${a}`)}try{const n=z(e);n.changed&&r.success(`bumped compatibility_date to ${n.date??"unknown"} (Workers Cache enabled) → ${n.wranglerPath??"wrangler.jsonc"}`)}catch(n){const a=n instanceof Error?n.message:String(n);r.warn(`compatibility date sync skipped: ${a}`)}Le(e,r,t)},Ee=(e,r)=>{const t=v(e,w);if(!y(t))return;let o;try{o=L(N(t,"utf8")).length}catch{return}o!==0&&r.warn(`Note: \`lunora deploy\` does not push secrets. ${w} has ${String(o)} key(s); if you changed them, run \`lunora env push --yes\` to update the deployed secrets.`)},Fe=/(?:KEY|PASSWORD|SECRET|TOKEN)$/u,Ie=async e=>{let r=[];try{r=W(await C({projectRoot:e}))}catch{}const t=B(r).map(i=>i.key);let o=[];try{const i=v(e,w);y(i)&&(o=L(N(i,"utf8")).map(n=>n.key).filter(n=>Fe.test(n)))}catch{}return[...new Set([...t,...o])]},Pe=async(e,r,t,o)=>{const{logger:i}=r,n=r.spawner??R,a=S(e),c=r.env===void 0?"":` --env ${r.env}`,{toolchain:d}=x(o);if(d===void 0)return i.error("deploy target has no command-line toolchain; cannot push secrets"),{minted:[],ok:!1};const l=[];for(const s of t){const g=K(),u=d.secretPut({environment:r.env,key:s,temporary:r.temporary}),h=b(a,u.tool,u.args),m=await n({args:h.args,command:h.command,cwd:e,input:g});if(m.code!==0)return i.error(`failed to push secret ${s} (exit ${String(m.code)}); set it manually with \`wrangler secret put ${s}${c}\`.`),{minted:l,ok:!1};l.push({key:s,value:g}),i.success(`generated + pushed ${s}`)}return{minted:l,ok:!0}},Oe=/^[\w-]+$/u,We=(e,r,t)=>{if(t.length===0)return;const o=t.map(c=>c.key).join(", ");if(r.env!==void 0&&!Oe.test(r.env)){r.logger.warn(`${o}: minted and pushed for --env ${r.env}, but "${r.env}" isn't a safe filename fragment — the value could not be recorded. Capture it manually if you need it again.`);return}const i=r.env===void 0?w:`${w}.${r.env}`,n=v(e,i);let a=y(n)?N(n,"utf8"):"";for(const c of t)a=q(a,c.key,c.value);return M(n,a),r.logger.success(r.env===void 0?`${o}: value(s) recorded in ${i}`:`${o}: value(s) recorded in ${i} (kept separate from ${w} so \`lunora dev\` and a plain \`lunora env push\` don't inherit the --env ${r.env} value)`),i},Be=async(e,r,t,o)=>{if(r.dryRun===!0||r.preview===!0)return{};const{logger:i}=r,n=r.env===void 0?"":` --env ${r.env}`;let a;try{a=await(r.secretLister??ve)({cwd:e,env:r.env,temporary:r.temporary})}catch{return{}}if(!a.ok)return{};const c=new Set(a.names),d=(await Ie(e)).filter(s=>!c.has(s));if(d.length===0)return{};if(!t)return{error:`missing required secret(s) on the deploy target: ${d.join(", ")}. Set them with \`wrangler secret put <KEY>${n}\` (or \`lunora env generate --set\` then \`lunora env push --yes${r.env===void 0?"":` --env ${r.env}`}\`), then re-deploy.`};for(const s of d.filter(g=>!U(g)))i.warn(`required secret ${s} is not set on the target — set it with: wrangler secret put ${s}${n}`);const l=d.filter(s=>U(s));if(l.length===0)return{};if(await(r.secretConfirm??pe())(`${String(l.length)} required secret(s) not set on the target (${l.join(", ")}). Generate strong values and push them now?`)){const{minted:s,ok:g}=await Pe(e,r,l,o),u=We(e,r,s);return g?{mintedSecretsFile:u}:{error:"failed to push required secret(s) — set them manually and re-deploy",mintedSecretsFile:u}}return i.warn(`${String(l.length)} required secret(s) not set on the target: ${l.join(", ")}. Generate + push with \`lunora env generate --set\` then \`lunora env push --yes${r.env===void 0?"":` --env ${r.env}`}\`.`),{}},Ke=async(e,r)=>{const t=new Q({skipAddingFilesFromTsConfig:!0}),o=v(r,"lunora");let i;try{i=P(t,o)}catch(n){const a=n instanceof Error?n.message:String(n);return e.logger.warn(`--migrate: could not discover migrations (${a}); skipping`),0}if(i.length===0)return e.logger.info("--migrate: no data migrations declared in lunora/"),0;e.logger.info(`--migrate: running ${String(i.length)} migration(s) against deployed worker`);for(const n of i){e.logger.info(`--migrate: up "${n.id}" (table "${n.table}")`);const a={cwd:r,fetchImpl:e.fetchImpl,id:n.id,logger:e.logger,prod:!0,subcommand:"up",token:e.migrateToken,url:e.migrateUrl,yes:e.migrateYes===!0},c=await he(a);if(c.code!==0)return e.logger.error(`--migrate: migration "${n.id}" failed — see output above`),c.code;e.logger.success(`--migrate: "${n.id}" applied`)}return 0},qe=e=>{if(!(!e.migrate||e.dryRun||e.preview)){if(e.migrateUrl===void 0){const r="--migrate requires --migrate-url <https://your-worker> — the deploy target URL is not captured automatically, refusing to default to localhost";return e.logger.error(r),r}if(e.migrateYes!==!0){const r="--migrate runs production data migrations after deploy. Re-run with --migrate-yes to confirm.";return e.logger.error(r),r}if((e.migrateToken??process.env.LUNORA_ADMIN_TOKEN)===void 0||(e.migrateToken??process.env.LUNORA_ADMIN_TOKEN)===""){const r="admin token required for --migrate — pass --migrate-token or set LUNORA_ADMIN_TOKEN";return e.logger.error(r),r}}},Me=async(e,r,t,o,i,n,a,c)=>{let d;r?(d=new J({name:"dots"}),d.start("running codegen")):t.info("running codegen");try{const l=I({apiSpec:o,projectRoot:e,target:i});d?.succeed("codegen complete"),d||t.success("codegen complete");const s=ce(l.platformDiagnostics,t);if(s!==void 0)return{error:s};const{errorAdvisories:g,names:u,shouldBlock:h}=X(l.advisories,c);if(h){const $=`${g.length.toString()} ERROR-level ${g.length===1?"advisory":"advisories"} (${u.join(", ")}). Pass --no-strict-advisories to downgrade this to a warning and deploy anyway.`;return t.error($),{error:$}}const m=await le({cwd:e,logger:t,spawner:n,stdoutToStderr:a});return m.error!==void 0?(t.error(m.error),{error:m.error}):{result:l}}catch(l){d?.failed("codegen failed");const s=l instanceof Error?l.message:String(l);return t.error(`codegen failed: ${s}`),{error:`codegen failed: ${s}`}}},Ve=(e,r)=>{const t=Ue(e);if(t===void 0)return;const o=`deploy blocked: the "${t}" D1 binding has a placeholder database_id ("${F}"). Run \`wrangler d1 create <name>\` to create the database, then replace the placeholder in wrangler.jsonc with the real id before deploying.`;return r.error(o),o},Ye=(e,r)=>{const t=T(e);if(!t)return;const{parsed:o}=A(t),i=o?.vars;if(!i)return;const n=Re.filter(c=>typeof i[c]=="string"&&De(i[c]));if(n.length===0)return;const a=`deploy blocked: ${n.join(", ")} in wrangler.jsonc point at localhost. A deployed Worker can't reach a loopback address, so this silently breaks scheduled-job dispatch / auth callbacks. Set each to the deployed worker's public URL (or move it to a secret with \`wrangler secret put\`) before deploying.`;return r.error(a),a},Ge=async(e,r)=>{const{info:t}=V(r,"lunora"),o=t?.vectorMetadata??[];if(o.length===0)return;const i=[];for(const a of o){const c=fe(a.kind);if(c===void 0){e.logger.warn(`vector index "${a.index}" declares metadata "${a.property}", whose column type cannot be filtered on in Vectorize — it is stored with each vector but no filter will match it.`);continue}i.push({index:a.index,property:a.property,type:c})}if(i.length===0)return;const n=(await me({cwd:r,entries:i,exec:b(S(r),"wrangler",[]),logger:e.logger,spawner:e.spawner??R})).filter(a=>a.status!=="failed").length;n>0&&e.logger.success(`vectorize metadata indexes ready: ${String(n)}/${String(i.length)}`)},ze=async(e,r,t,o,i,n)=>{if(await Ge(e,r),e.migrate){const a=await Ke(e,r);return a===0&&i?.(),{code:a,descriptor:t,mintedSecretsFile:n,validation:o}}return i?.(),{code:0,descriptor:t,mintedSecretsFile:n,validation:o}},He=async(e,r)=>{const t=Ve(e,r.logger);if(t!==void 0)return t;const o=Ye(e,r.logger);if(o!==void 0)return o;const i=Te(e,r.logger);if(i!==void 0)return i;const n=je(e,r.logger,r.dockerAvailable??ie);return n!==void 0?n:Ce(e,r)},Je=(e,r,t)=>{const o=xe(e);o!==void 0&&r.logger.info(`class-B composition: deploying ${o} (overrides wrangler main)`),r.temporary&&r.logger.info("temporary account: deploying to a short-lived Cloudflare account (~60min); wrangler will print a claim URL"),r.dryRun&&r.logger.info("dry run: validating + bundling without publishing"),r.outDir!==void 0&&r.logger.info(`build artifact: emitting bundle to ${r.outDir}`);const i=x(t),n={dryRun:r.dryRun,entry:o,environment:r.env,outDir:r.outDir,preview:r.preview,temporary:r.temporary};if(i.toolchain===void 0)throw new Error(`deploy target "${i.id}" has no command-line toolchain`);return i.toolchain.deploy(n)},Qe=(e,r)=>{if(e.problems.length===0)return!1;r.error("wrangler.jsonc validation failed:");for(const t of e.problems)r.error(`  - ${t}`);return!0},Xe=async e=>{const r=e.cwd??process.cwd(),t=Ae(e),o=Z(e),i=te(r,e.target);if(i.target===void 0){const p=i.error??"unknown deploy target";return e.logger.error(p),{code:1,descriptor:void 0,error:p,validation:{problems:[],wranglerPath:void 0}}}const{target:n}=i;let a;if(!e.skipCodegen){const p=await Me(r,t,e.logger,e.apiSpec,n,e.spawner,k(e.format),o);if(p.error!==void 0)return{code:1,descriptor:void 0,error:p.error,validation:{problems:[],wranglerPath:void 0}};a=p.result}let c;if(a!==void 0){const p=ue({allowDrift:e.allowSchemaDrift===!0,codegen:a,command:"deploy",logger:e.logger,updateBaseline:e.updateSchemaBaseline===!0});if(p.blocked)return{code:1,descriptor:void 0,error:"schema drift gate blocked deploy",schemaDrift:{blocked:!0,reason:p.reason},validation:{problems:[],wranglerPath:void 0}};c=p.rebless}await _e(r,e.logger,a?.cronTriggers,n,e.env);const d=qe(e);if(d!==void 0)return{code:1,descriptor:void 0,error:d,validation:{problems:[],wranglerPath:void 0}};const l=await He(r,e);if(l!==void 0)return{code:1,descriptor:void 0,error:l,validation:{problems:[],wranglerPath:void 0}};const s=Y({environment:e.env,projectRoot:r});if(Qe(s,e.logger))return{code:1,descriptor:void 0,error:"wrangler validation failed",validation:s};Ee(r,e.logger);const{error:g,mintedSecretsFile:u}=await Be(r,e,t,n);if(g!==void 0)return e.logger.error(g),{code:1,descriptor:void 0,error:g,mintedSecretsFile:u,validation:s};const h=!k(e.format)&&e.dryRun!==!0&&e.preview!==!0&&j(r)===void 0,m=Je(r,e,n),$=b(S(r),m.tool,m.args),f={args:$.args,captureStdout:h,command:$.command,cwd:r,stdoutToStderr:k(e.format)};e.logger.info(`deploying via ${f.command} ${f.args.join(" ")}`);const D=await(e.spawner??R)(f);return D.code!==0?{code:D.code,descriptor:f,mintedSecretsFile:u,validation:s}:e.dryRun?{code:0,descriptor:f,mintedSecretsFile:u,validation:s}:e.preview?{code:0,descriptor:f,mintedSecretsFile:u,validation:s}:(ke({cwd:r,env:e.env,logger:e.logger,output:D.stdout}),ze(e,r,f,s,c,u))},Ze=async e=>{const r=ne("deploy",e.format);if(r!==void 0)return e.logger.error(r),{code:1,descriptor:void 0,error:r,validation:{problems:[],wranglerPath:void 0}};const t=await Xe({...e,logger:se(e.format,e.logger)});return k(e.format)?(ae(t),t):(t.code===0&&e.dryRun!==!0&&e.preview!==!0?be({cwd:e.cwd??process.cwd(),env:e.env,logger:e.logger,migrated:e.migrate===!0,mintedSecretsFile:t.mintedSecretsFile}):t.code===0&&e.preview===!0&&e.logger.success("preview version uploaded — see the preview URL in the wrangler output above"),t)},Dr=re(async({cwd:e,logger:r,options:t})=>({code:(await Ze({allowSchemaDrift:t.allowSchemaDrift===!0,apiSpec:ee(t.apiSpec),cwd:e,dryRun:t.dryRun===!0,env:t.env,format:t.format,logger:r,migrate:t.migrate===!0,migrateToken:t.migrateToken,migrateUrl:ge({cwd:e,env:t.env,url:t.migrateUrl}),migrateYes:t.migrateYes===!0,preview:t.preview===!0,skipCodegen:t.prebuilt===!0,strictAdvisories:t.strictAdvisories,target:t.target,temporary:t.temporary===!0,updateSchemaBaseline:t.updateSchemaBaseline===!0})).code}));export{Dr as execute,Ze as runDeployCommand};