@lunora/cli 1.0.0-alpha.218 → 1.0.0-alpha.219

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1 +1 @@
1
- import{existsSync as p,readFileSync as v,realpathSync as h}from"node:fs";import{join as u}from"node:path";import{isPlaceholderValue as w,DEV_VARS_FILE as g,parseDevVariableEntries as k,discoverSchemaInfo as x,inferLunoraBindings as b}from"@lunora/config";import{findWranglerFile as y,readWranglerJsonc as $,validateWranglerConfig as S,collectExportGaps as _}from"@lunora/config/cloudflare";import{i as A,m as N,c as R}from"../packem_shared/vectorize-metadata-Br1QnnS8.mjs";import{r as L,d as E}from"../packem_shared/admin-token-VdUnvnKW.mjs";import{d as I}from"../packem_shared/command-DwC11Cwe.mjs";import{v as j,i as D,p as O,l as V}from"../packem_shared/output-format-DfogXx0p.mjs";import{i as C}from"../packem_shared/path-containment-CgxYZggb.mjs";const F=o=>{const e=o.trim();if(e==="")return!0;const n=e.toLowerCase();return n.includes("replace")||n.startsWith("<")&&n.endsWith(">")},P=o=>{const e=y(o);if(e===void 0)return{parsed:void 0,path:void 0};const{parsed:n}=$(e);return{parsed:n,path:e}},W=(o,e,n)=>{if(e===void 0){n.push({code:"wrangler-missing",fix:"Run `lunora init` (or `lunora dev`) to scaffold and reconcile wrangler.jsonc.",level:"fail",message:"wrangler.jsonc not found."});return}if(o===void 0){n.push({code:"wrangler-unparseable",fix:`Check ${e} is valid JSONC.`,level:"fail",message:`Could not parse ${e}.`});return}const t=S(o).errors.find(r=>r.includes("SHARD"));t===void 0?n.push({code:"wrangler-shard-binding-ok",level:"pass",message:"wrangler.jsonc present with a SHARD durable-object binding."}):n.push({code:"wrangler-shard-binding-missing",fix:"Run `lunora dev` to auto-reconcile, or add the binding manually.",level:"fail",message:t})},M=(o,e)=>{const{info:n}=x(o,"lunora");for(const a of n?.vectorMetadata??[]){const t=N(a.kind);if(t===void 0){e.push({code:"vector-metadata-unfilterable",fix:"Filter on a string, number or boolean column, or drop it from `metadata`.",level:"warn",message:`vector index "${a.index}" declares metadata "${a.property}", whose type Vectorize cannot filter on.`});continue}e.push({code:"vector-metadata-index-required",fix:`wrangler ${R({index:a.index,property:a.property,type:t}).join(" ")}`,level:"info",message:`vector index "${a.index}" filters on metadata "${a.property}" — that needs a Vectorize metadata index (\`lunora deploy\` creates it).`})}},T=(o,e)=>{if(o===void 0)return;const n=(o.d1_databases??[]).filter(Boolean);for(const a of n){const t=typeof a.database_id=="string"?a.database_id:"";if(F(t)){const r=typeof a.binding=="string"&&a.binding.length>0?a.binding:"<unnamed>";e.push({code:"d1-placeholder-id",fix:"Run `wrangler d1 create <name>` and paste the returned database_id into wrangler.jsonc.",level:"fail",message:`D1 binding "${r}" has a placeholder database_id ("${t||"<empty>"}").`})}}},z=(o,e)=>{if(o===void 0)return;const n=(o.send_email??[]).filter(Boolean);for(const a of n){const t=typeof a.destination_address=="string"?a.destination_address:"";if(t!==""&&w(t)){const r=typeof a.name=="string"&&a.name.length>0?a.name:"send_email";e.push({code:"email-destination-placeholder",fix:"Set destination_address to a verified Cloudflare Email Routing address.",level:"warn",message:`send_email binding "${r}" has a placeholder destination_address ("${t}").`})}}},B=(o,e)=>{const n=u(o,g);if(!p(n))return;let a;try{a=v(n,"utf8")}catch{return}const t=k(a).filter(r=>A(r.key)&&w(r.value)).map(r=>r.key);t.length>0&&e.push({code:"dev-vars-missing-secret",fix:"Run `lunora dev` to auto-generate secrets, or fill them in by hand.",level:"warn",message:`${g} has unfilled secret value(s): ${t.join(", ")}.`})},J=(o,e)=>{const{source:n}=L({cwd:o});n===void 0?e.push({code:"admin-token-missing",fix:"Set LUNORA_ADMIN_TOKEN (env or `.dev.vars`) to enable admin RPCs / studio.",level:"info",message:"LUNORA_ADMIN_TOKEN is not set."}):e.push({code:"admin-token-set",level:"pass",message:`LUNORA_ADMIN_TOKEN is set (${E(n)}).`})},K=async(o,e)=>{let n;try{n=await b({projectRoot:o})}catch{return}const a=_(n),t=[...n.containers.map(r=>({...r,kind:"container"})),...n.workflows.map(r=>({...r,kind:"workflow"})),...n.agents.map(r=>({...r,kind:"agent"}))];for(const r of t.filter(i=>i.exported))e.push({code:"declared-export-ok",level:"pass",message:`${r.kind} "${r.exportName}" is exported by the worker entry.`});for(const r of a)e.push({code:"declared-export-missing",fix:`Add \`export * from "./lunora/_generated/${r.module}"\` to your worker entry (or re-run \`vis generate lunora-${r.kind}\`).`,level:"fail",message:`${r.kind} "${r.exportName}" is declared but ${r.className} is not exported by the worker entry.`})},U=/^[\^~><= ]+/u,G=/^(?<core>\d+\.\d+\.\d+)(?:-(?<channel>[a-z]+)\.(?<counter>\d+))?$/u,H=o=>{const e=o.replace(U,"").trim(),n=G.exec(e);if(!n?.groups)return;const{channel:a,core:t,counter:r}=n.groups;return{channel:a??"",core:t??"",counter:r===void 0?void 0:Number.parseInt(r,10),raw:e}},q=(o,e)=>{const n=u(o,"package.json");if(!p(n))return;let a;try{a=JSON.parse(v(n,"utf8"))}catch{return}const t={...a.devDependencies,...a.dependencies},r=[];for(const[s,c]of Object.entries(t)){if(s!=="lunorash"&&!s.startsWith("@lunora/"))continue;const m=H(c);m&&r.push({name:s,version:m})}if(r.length<2)return;const i=s=>s.map(c=>`${c.name}@${c.version.raw}`).join(", "),l=new Set(r.map(s=>s.version.core)),f=new Set(r.map(s=>s.version.channel));if(l.size>1){e.push({code:"version-skew-cores",fix:'Run `pnpm update "@lunora/*" lunorash` (or `npm`/`yarn` equivalent) so every Lunora package moves to the same release.',level:"warn",message:`Lunora packages span ${String(l.size)} different versions: ${i(r)}.`});return}if(f.size>1){e.push({code:"version-skew-channels",fix:"Pick one channel (all stable, or all alpha/beta) and update the odd package out.",level:"warn",message:`Lunora packages mix release channels (${[...f].map(s=>s===""?"stable":s).join(" + ")}): ${i(r)}.`});return}const d=r.map(s=>s.version.counter).filter(s=>s!==void 0);if(d.length>1){const s=Math.min(...d),c=Math.max(...d);e.push({code:"version-counter-spread",level:"info",message:d.length===r.length&&s===c?`Lunora packages are all at ${[...f][0]??""}.${String(c)}.`:`Lunora pre-release counters span ${String(s)}–${String(c)}: ${i(r)}.`})}},X=[u("@lunora","cli"),"lunorash"],Q=(o,e,n)=>{if(e===void 0)return;const a=[];for(const r of X){const i=u(o,"node_modules",r);if(p(i))try{a.push(h(i))}catch{}}if(a.length===0)return;let t;try{t=h(e)}catch{return}a.some(r=>C(r,t))||n.push({code:"cli-shadowed",fix:"Run the project's own CLI: `pnpm exec lunora …` (or `npx lunora …`).",level:"warn",message:`the running lunora (${t}) is not the project's own install (${a.join(", ")}).`})},Y=async o=>{const e=o.cwd??process.cwd(),n=[],{parsed:a,path:t}=P(e);W(a,t,n),T(a,n),z(a,n),B(e,n),J(e,n),q(e,n),M(e,n),Q(e,o.executablePath??process.argv[1],n),await K(e,n);const r={fail:0,info:0,pass:0,warn:0};for(const l of n)r[l.level]+=1;const i=r.fail>0?1:0;return{code:i,findings:n,ok:i===0,summary:r}},Z={fail:"FAIL",info:"INFO",pass:"PASS",warn:"WARN"},ee=(o,e)=>{e.info("lunora doctor — project preflight");for(const t of o.findings){const r=`[${Z[t.level]}] ${t.message}`;t.level==="fail"?e.error(r):t.level==="warn"?e.warn(r):e.info(r),t.fix!==void 0&&t.level!=="pass"&&e.info(` fix: ${t.fix}`)}const{fail:n,warn:a}=o.summary;n>0?e.error(`${String(n)} failure(s), ${String(a)} warning(s).`):a>0?e.warn(`0 failures, ${String(a)} warning(s).`):e.success("all checks passed.")},ne=async o=>{const e=j("doctor",o.format);if(e!==void 0)return o.logger.error(e),{code:1,findings:[],ok:!1,summary:{fail:0,info:0,pass:0,warn:0}};const n=V(o.format,o.logger),a=await Y({...o});return ee(a,n),D(o.format)&&O(a),a},ue=I(async({cwd:o,logger:e,options:n})=>({code:(await ne({cwd:o,format:n.format,logger:e})).code}));export{ue as execute,Y as runDoctor,ne as runDoctorCommand};
1
+ import{existsSync as p,readFileSync as v,realpathSync as h}from"node:fs";import{join as u}from"node:path";import{isPlaceholderValue as w,DEV_VARS_FILE as g,parseDevVariableEntries as k,discoverSchemaInfo as x,inferLunoraBindings as b}from"@lunora/config";import{findWranglerFile as y,readWranglerJsonc as $,validateWranglerConfig as S,collectExportGaps as _}from"@lunora/config/cloudflare";import{i as A,m as N,c as R}from"../packem_shared/vectorize-metadata-dXpl2_Ar.mjs";import{r as L,d as E}from"../packem_shared/admin-token-VdUnvnKW.mjs";import{d as I}from"../packem_shared/command-DwC11Cwe.mjs";import{v as j,i as D,p as O,l as V}from"../packem_shared/output-format-DfogXx0p.mjs";import{i as C}from"../packem_shared/path-containment-CgxYZggb.mjs";const F=o=>{const e=o.trim();if(e==="")return!0;const n=e.toLowerCase();return n.includes("replace")||n.startsWith("<")&&n.endsWith(">")},P=o=>{const e=y(o);if(e===void 0)return{parsed:void 0,path:void 0};const{parsed:n}=$(e);return{parsed:n,path:e}},W=(o,e,n)=>{if(e===void 0){n.push({code:"wrangler-missing",fix:"Run `lunora init` (or `lunora dev`) to scaffold and reconcile wrangler.jsonc.",level:"fail",message:"wrangler.jsonc not found."});return}if(o===void 0){n.push({code:"wrangler-unparseable",fix:`Check ${e} is valid JSONC.`,level:"fail",message:`Could not parse ${e}.`});return}const t=S(o).errors.find(r=>r.includes("SHARD"));t===void 0?n.push({code:"wrangler-shard-binding-ok",level:"pass",message:"wrangler.jsonc present with a SHARD durable-object binding."}):n.push({code:"wrangler-shard-binding-missing",fix:"Run `lunora dev` to auto-reconcile, or add the binding manually.",level:"fail",message:t})},M=(o,e)=>{const{info:n}=x(o,"lunora");for(const a of n?.vectorMetadata??[]){const t=N(a.kind);if(t===void 0){e.push({code:"vector-metadata-unfilterable",fix:"Filter on a string, number or boolean column, or drop it from `metadata`.",level:"warn",message:`vector index "${a.index}" declares metadata "${a.property}", whose type Vectorize cannot filter on.`});continue}e.push({code:"vector-metadata-index-required",fix:`wrangler ${R({index:a.index,property:a.property,type:t}).join(" ")}`,level:"info",message:`vector index "${a.index}" filters on metadata "${a.property}" — that needs a Vectorize metadata index (\`lunora deploy\` creates it).`})}},T=(o,e)=>{if(o===void 0)return;const n=(o.d1_databases??[]).filter(Boolean);for(const a of n){const t=typeof a.database_id=="string"?a.database_id:"";if(F(t)){const r=typeof a.binding=="string"&&a.binding.length>0?a.binding:"<unnamed>";e.push({code:"d1-placeholder-id",fix:"Run `wrangler d1 create <name>` and paste the returned database_id into wrangler.jsonc.",level:"fail",message:`D1 binding "${r}" has a placeholder database_id ("${t||"<empty>"}").`})}}},z=(o,e)=>{if(o===void 0)return;const n=(o.send_email??[]).filter(Boolean);for(const a of n){const t=typeof a.destination_address=="string"?a.destination_address:"";if(t!==""&&w(t)){const r=typeof a.name=="string"&&a.name.length>0?a.name:"send_email";e.push({code:"email-destination-placeholder",fix:"Set destination_address to a verified Cloudflare Email Routing address.",level:"warn",message:`send_email binding "${r}" has a placeholder destination_address ("${t}").`})}}},B=(o,e)=>{const n=u(o,g);if(!p(n))return;let a;try{a=v(n,"utf8")}catch{return}const t=k(a).filter(r=>A(r.key)&&w(r.value)).map(r=>r.key);t.length>0&&e.push({code:"dev-vars-missing-secret",fix:"Run `lunora dev` to auto-generate secrets, or fill them in by hand.",level:"warn",message:`${g} has unfilled secret value(s): ${t.join(", ")}.`})},J=(o,e)=>{const{source:n}=L({cwd:o});n===void 0?e.push({code:"admin-token-missing",fix:"Set LUNORA_ADMIN_TOKEN (env or `.dev.vars`) to enable admin RPCs / studio.",level:"info",message:"LUNORA_ADMIN_TOKEN is not set."}):e.push({code:"admin-token-set",level:"pass",message:`LUNORA_ADMIN_TOKEN is set (${E(n)}).`})},K=async(o,e)=>{let n;try{n=await b({projectRoot:o})}catch{return}const a=_(n),t=[...n.containers.map(r=>({...r,kind:"container"})),...n.workflows.map(r=>({...r,kind:"workflow"})),...n.agents.map(r=>({...r,kind:"agent"}))];for(const r of t.filter(i=>i.exported))e.push({code:"declared-export-ok",level:"pass",message:`${r.kind} "${r.exportName}" is exported by the worker entry.`});for(const r of a)e.push({code:"declared-export-missing",fix:`Add \`export * from "./lunora/_generated/${r.module}"\` to your worker entry (or re-run \`vis generate lunora-${r.kind}\`).`,level:"fail",message:`${r.kind} "${r.exportName}" is declared but ${r.className} is not exported by the worker entry.`})},U=/^[\^~><= ]+/u,G=/^(?<core>\d+\.\d+\.\d+)(?:-(?<channel>[a-z]+)\.(?<counter>\d+))?$/u,H=o=>{const e=o.replace(U,"").trim(),n=G.exec(e);if(!n?.groups)return;const{channel:a,core:t,counter:r}=n.groups;return{channel:a??"",core:t??"",counter:r===void 0?void 0:Number.parseInt(r,10),raw:e}},q=(o,e)=>{const n=u(o,"package.json");if(!p(n))return;let a;try{a=JSON.parse(v(n,"utf8"))}catch{return}const t={...a.devDependencies,...a.dependencies},r=[];for(const[s,c]of Object.entries(t)){if(s!=="lunorash"&&!s.startsWith("@lunora/"))continue;const m=H(c);m&&r.push({name:s,version:m})}if(r.length<2)return;const i=s=>s.map(c=>`${c.name}@${c.version.raw}`).join(", "),l=new Set(r.map(s=>s.version.core)),f=new Set(r.map(s=>s.version.channel));if(l.size>1){e.push({code:"version-skew-cores",fix:'Run `pnpm update "@lunora/*" lunorash` (or `npm`/`yarn` equivalent) so every Lunora package moves to the same release.',level:"warn",message:`Lunora packages span ${String(l.size)} different versions: ${i(r)}.`});return}if(f.size>1){e.push({code:"version-skew-channels",fix:"Pick one channel (all stable, or all alpha/beta) and update the odd package out.",level:"warn",message:`Lunora packages mix release channels (${[...f].map(s=>s===""?"stable":s).join(" + ")}): ${i(r)}.`});return}const d=r.map(s=>s.version.counter).filter(s=>s!==void 0);if(d.length>1){const s=Math.min(...d),c=Math.max(...d);e.push({code:"version-counter-spread",level:"info",message:d.length===r.length&&s===c?`Lunora packages are all at ${[...f][0]??""}.${String(c)}.`:`Lunora pre-release counters span ${String(s)}–${String(c)}: ${i(r)}.`})}},X=[u("@lunora","cli"),"lunorash"],Q=(o,e,n)=>{if(e===void 0)return;const a=[];for(const r of X){const i=u(o,"node_modules",r);if(p(i))try{a.push(h(i))}catch{}}if(a.length===0)return;let t;try{t=h(e)}catch{return}a.some(r=>C(r,t))||n.push({code:"cli-shadowed",fix:"Run the project's own CLI: `pnpm exec lunora …` (or `npx lunora …`).",level:"warn",message:`the running lunora (${t}) is not the project's own install (${a.join(", ")}).`})},Y=async o=>{const e=o.cwd??process.cwd(),n=[],{parsed:a,path:t}=P(e);W(a,t,n),T(a,n),z(a,n),B(e,n),J(e,n),q(e,n),M(e,n),Q(e,o.executablePath??process.argv[1],n),await K(e,n);const r={fail:0,info:0,pass:0,warn:0};for(const l of n)r[l.level]+=1;const i=r.fail>0?1:0;return{code:i,findings:n,ok:i===0,summary:r}},Z={fail:"FAIL",info:"INFO",pass:"PASS",warn:"WARN"},ee=(o,e)=>{e.info("lunora doctor — project preflight");for(const t of o.findings){const r=`[${Z[t.level]}] ${t.message}`;t.level==="fail"?e.error(r):t.level==="warn"?e.warn(r):e.info(r),t.fix!==void 0&&t.level!=="pass"&&e.info(` fix: ${t.fix}`)}const{fail:n,warn:a}=o.summary;n>0?e.error(`${String(n)} failure(s), ${String(a)} warning(s).`):a>0?e.warn(`0 failures, ${String(a)} warning(s).`):e.success("all checks passed.")},ne=async o=>{const e=j("doctor",o.format);if(e!==void 0)return o.logger.error(e),{code:1,findings:[],ok:!1,summary:{fail:0,info:0,pass:0,warn:0}};const n=V(o.format,o.logger),a=await Y({...o});return ee(a,n),D(o.format)&&O(a),a},ue=I(async({cwd:o,logger:e,options:n})=>({code:(await ne({cwd:o,format:n.format,logger:e})).code}));export{ue as execute,Y as runDoctor,ne as runDoctorCommand};
@@ -1 +1 @@
1
- import{readFileSync as w,writeFileSync as O,existsSync as y}from"node:fs";import{runCodegen as H,discoverMigrations as B}from"@lunora/codegen";import{readLinkedProject as N,writeLinkedProject as M,execArgsFor as k,detectPackageManager as b,discoverContainerInfo as L,DEV_VARS_FILE as v,parseDevVariableEntries as T,isMintableSecretKey as E,runPostCodegenHook as W,resolveDeployDriver as D,inferLunoraBindings as _,packageNamesFromBindings as V,requiredSecrets as K,generateSecretValue as q,upsertDevVariableLine as Y,writeDevVariablesFileAtomically as G,discoverSchemaInfo as z}from"@lunora/config";import{findWranglerFile as j,validateWranglerProject as J,reconcileWranglerBindings as Q,reconcileWranglerCompatibilityDate as X,reconcileWranglerCrons as Z,readWranglerJsonc as ee}from"@lunora/config/cloudflare";import{join as h}from"@visulima/path";import{Spinner as re}from"@visulima/spinner";import{Project as te}from"ts-morph";import{i as ae,m as ne,e as oe}from"../packem_shared/vectorize-metadata-Br1QnnS8.mjs";import{r as ie,e as se}from"../packem_shared/advisory-gate-Cl8IEFIj.mjs";import{p as ce,a as le}from"../packem_shared/deploy-target-B0Xcb2jV.mjs";import{r as R}from"../packem_shared/wrangler-name-Dsk5K1f-.mjs";import{w as de}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{d as ue}from"../packem_shared/command-DwC11Cwe.mjs";import{a as ge,i as me}from"../packem_shared/docker-DpVxvYpL.mjs";import{r as fe,p as he,H as ve,a as ye}from"../packem_shared/schema-drift-gate-BDCkQ1S6.mjs";import{v as pe,i as $,p as we,l as ke}from"../packem_shared/output-format-DfogXx0p.mjs";import{r as be}from"../packem_shared/platform-diagnostics-D0YzAdXm.mjs";import{containerBuildTag as $e}from"@lunora/container";import{defaultSpawner as S}from"../packem_shared/createRecordingSpawner-DJlNacZ6.mjs";import{a as I}from"../packem_shared/resolve-target-BRvw8Pf7.mjs";import{c as Se}from"../packem_shared/tui-prompts-Dd0pDuNr.mjs";import{l as De}from"../packem_shared/wrangler-secrets-CCdt0mUl.mjs";import{runMigrateDataCommand as Re}from"./runMigrateGenerateCommand.mjs";const Ce=/https?:\/\/[^\s"'<>]+\.workers\.dev[^\s"'<>]*/u,Ae=/https:\/\/[^\s"'<>]+/u,Ee=e=>{if(e===void 0)return;const r=Ce.exec(e);return r?r[0]:Ae.exec(e)?.[0]},P=e=>e===void 0?"":` (--env ${e})`,Pe=({cwd:e,env:r,logger:t,now:a,url:n})=>{if(n!==void 0)try{const o=N(e);if(o!==void 0){if(o.workerUrl===n&&o.env===r)return;t.warn(`link: .lunora/project.json records ${o.workerUrl??"(no url)"}${P(o.env)}, but this deploy published ${n}${P(r)}. Keeping the recorded value — run \`lunora link --url ${n}${r===void 0?"":` --env ${r}`}\` to update it.`);return}const i=(a??(()=>new Date().toISOString()))();M(e,{env:r,linkedAt:i,workerName:R(e),workerUrl:n}),t.success(`link: recorded ${n} in .lunora/project.json (run \`lunora link\` to change)`)}catch{}},xe=e=>{const{cwd:r,env:t,logger:a,mintedSecretsFile:n}=e;try{const o=N(r),i=o?.workerName??R(r),s=e.url??o?.workerUrl;a.success("deploy complete"),a.info(` worker: ${i??"(see wrangler output above)"}`),t!==void 0&&a.info(` env: ${t}`),s===void 0?a.info(" url: run `lunora link --url <https://your-worker>` to record it"):a.info(` url: ${s}`),n!==void 0&&a.info(` secrets: generated value(s) recorded in ${n}`),a.info(" logs: lunora logs")}catch{}},Ne=async e=>{if(e.targets.length===0)return{builtTags:[],code:0};if(!(e.railpackAvailable??ge)()){const a="deploy blocked: a container uses `image: { build }` (Railpack), but Railpack isn't ready. Install the `railpack` CLI and start a BuildKit instance, e.g. `docker run --rm --privileged -d --name buildkit moby/buildkit` then `export BUILDKIT_HOST=docker-container://buildkit`. Alternatively switch the container's `image` to a Dockerfile path or a pre-built registry reference.";return e.logger.error(a),{builtTags:[],code:1,error:a}}const r=e.spawner??S,t=[];for(const a of e.targets){const n=$e(a.exportName),o={args:["build",a.buildDir,"--name",n],command:"railpack",cwd:e.cwd},i=k(b(e.cwd),"wrangler",["containers","push",n]),s={args:i.args,command:i.command,cwd:e.cwd};e.logger.info(`railpack: building "${a.exportName}" → ${n} from ${a.buildDir}`);const l=await r(o);if(l.code!==0){const c=`railpack build failed for container "${a.exportName}" (${a.buildDir})`;return e.logger.error(c),{builtTags:t,code:l.code,error:c}}e.logger.info(`railpack: pushing ${n} to the Cloudflare Registry`);const d=await r(s);if(d.code!==0){const c=`wrangler containers push failed for "${a.exportName}" (${n})`;return e.logger.error(c),{builtTags:t,code:d.code,error:c}}t.push(n)}return{builtTags:t,code:0}},Le=e=>{const r=j(e),t=r===void 0?void 0:w(r,"utf8");return()=>{r!==void 0&&t!==void 0&&O(r,t,"utf8")}},U="<replace-with-d1-create-id>",C=e=>{const r=j(e);return r?ee(r).parsed:void 0},Te=["LUNORA_ORIGIN_URL","LUNORA_WORKER_ORIGIN","AUTH_URL"],_e=e=>{try{const{hostname:r}=new URL(e);return r==="localhost"||r==="127.0.0.1"||r==="::1"||r==="[::1]"}catch{return!1}},je=e=>e.startsWith("./")||e.startsWith("../")||e.startsWith("/")||e.includes("Dockerfile"),Ie=(e,r,t,a="deploy")=>{const n=(C(e)?.containers??[]).filter(i=>typeof i?.image=="string"&&je(i.image));if(n.length===0||t())return;const o=`${a} blocked: wrangler.jsonc declares ${String(n.length)} container(s) built from a local Dockerfile, but no Docker-compatible engine is available. Start Docker (or Colima), or point the container's \`image\` at a pre-built registry reference. Note: container images must target linux/amd64.`;return r.error(o),o},Ue=e=>y(h(e,"src","worker.ts"))?"src/worker.ts":void 0,Fe=(e,r,t="deploy")=>{for(const a of L(e,"lunora").containers){const{image:n}=a;if(n.kind==="dockerfile"&&!y(h(e,n.dockerfilePath))){const o=`${t} blocked: container "${a.exportName}" references a Dockerfile at "${n.dockerfilePath}" that does not exist. Create it or fix the \`image\` path in lunora/containers.ts.`;return r.error(o),o}if(n.kind==="build"&&!y(h(e,n.buildDir))){const o=`${t} blocked: container "${a.exportName}" references a Railpack build directory "${n.buildDir}" that does not exist. Create it or fix the \`image.build\` path in lunora/containers.ts.`;return r.error(o),o}}},F=e=>$(e.format)?!1:e.interactive!==void 0?e.interactive:process.stdout.isTTY&&!process.env.CI,Oe=e=>(C(e)?.d1_databases??[]).find(r=>r.database_id===U)?.binding,He=async(e,r)=>{if(r.dryRun===!0)return;const t=L(e,"lunora").containers.filter(n=>n.image.kind==="build").map(n=>({buildDir:n.image.buildDir,exportName:n.exportName}));if(t.length===0)return;const a=await Ne({cwd:e,logger:r.logger,railpackAvailable:r.railpackAvailable,spawner:r.spawner,targets:t});return a.code===0?void 0:a.error??"railpack build failed"},Be=(e,r,t)=>{if(t!==void 0)try{const a=Z(e,t);a.changed&&r.success(`synced ${String(t.length)} cron trigger(s) → ${a.wranglerPath??"wrangler.jsonc"}`)}catch(a){const n=a instanceof Error?a.message:String(a);r.warn(`cron trigger sync skipped: ${n}`)}},Me=async(e,r,t,a,n)=>{try{D(a);const o=await _({projectRoot:e}),i=Q(e,o,n);i.changed&&r.success(`provisioned bindings: ${i.added.join(", ")} → ${i.wranglerPath??"wrangler.jsonc"}`);for(const s of i.warnings)r.warn(s)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`binding inference skipped: ${i}`)}try{const o=X(e);o.changed&&r.success(`bumped compatibility_date to ${o.date??"unknown"} (Workers Cache enabled) → ${o.wranglerPath??"wrangler.jsonc"}`)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`compatibility date sync skipped: ${i}`)}Be(e,r,t)},We=(e,r)=>{const t=h(e,v);if(!y(t))return;let a;try{a=T(w(t,"utf8")).length}catch{return}a!==0&&r.warn(`Note: \`lunora deploy\` does not push secrets. ${v} has ${String(a)} key(s); if you changed them, run \`lunora env push --yes\` to update the deployed secrets.`)},Ve=async e=>{let r=[];try{r=V(await _({projectRoot:e}))}catch{}const t=K(r).map(n=>n.key);let a=[];try{const n=h(e,v);y(n)&&(a=T(w(n,"utf8")).map(o=>o.key).filter(o=>ae(o)))}catch{}return[...new Set([...t,...a])]},Ke=async(e,r,t,a)=>{const{logger:n}=r,o=r.spawner??S,i=b(e),s=r.env===void 0?"":` --env ${r.env}`,{toolchain:l}=D(a);if(l===void 0)return n.error("deploy target has no command-line toolchain; cannot push secrets"),{minted:[],ok:!1};const d=[];for(const c of t){const g=q(),u=l.secretPut({environment:r.env,key:c,temporary:r.temporary}),m=k(i,u.tool,u.args),f=await o({args:m.args,command:m.command,cwd:e,input:g});if(f.code!==0)return n.error(`failed to push secret ${c} (exit ${String(f.code)}); set it manually with \`wrangler secret put ${c}${s}\`.`),{minted:d,ok:!1};d.push({key:c,value:g}),n.success(`generated + pushed ${c}`)}return{minted:d,ok:!0}},qe=/^[\w-]+$/u,Ye=(e,r,t)=>{if(t.length===0)return;const a=t.map(s=>s.key).join(", ");if(r.env!==void 0&&!qe.test(r.env)){r.logger.warn(`${a}: minted and pushed for --env ${r.env}, but "${r.env}" isn't a safe filename fragment — the value could not be recorded. Capture it manually if you need it again.`);return}const n=r.env===void 0?v:`${v}.${r.env}`,o=h(e,n);let i=y(o)?w(o,"utf8"):"";for(const s of t)i=Y(i,s.key,s.value);return G(o,i),r.logger.success(r.env===void 0?`${a}: value(s) recorded in ${n}`:`${a}: value(s) recorded in ${n} (kept separate from ${v} so \`lunora dev\` and a plain \`lunora env push\` don't inherit the --env ${r.env} value)`),n},Ge=async(e,r,t,a)=>{if(r.dryRun===!0||r.preview===!0)return{};const{logger:n}=r,o=r.env===void 0?"":` --env ${r.env}`;let i;try{i=await(r.secretLister??De)({cwd:e,env:r.env,temporary:r.temporary})}catch{return{}}if(!i.ok)return{};const s=new Set(i.names),d=(await Ve(e)).filter(u=>!s.has(u));if(d.length===0)return{};if(!t)return{error:`missing required secret(s) on the deploy target: ${d.join(", ")}. Set them with \`wrangler secret put <KEY>${o}\` (or \`lunora env generate --set\` then \`lunora env push --yes${o}\`), then re-deploy.`};for(const u of d.filter(m=>!E(m)))n.warn(`required secret ${u} is not set on the target — set it with: wrangler secret put ${u}${o}`);const c=d.filter(u=>E(u));if(c.length===0)return{};if(await(r.secretConfirm??Se())(`${String(c.length)} required secret(s) not set on the target (${c.join(", ")}). Generate strong values and push them now?`)){const{minted:u,ok:m}=await Ke(e,r,c,a),f=Ye(e,r,u);return m?{mintedSecretsFile:f}:{error:"failed to push required secret(s) — set them manually and re-deploy",mintedSecretsFile:f}}return n.warn(`${String(c.length)} required secret(s) not set on the target: ${c.join(", ")}. Generate + push with \`lunora env generate --set\` then \`lunora env push --yes${o}\`.`),{}},ze=async(e,r)=>{const t=new te({skipAddingFilesFromTsConfig:!0}),a=h(r,"lunora");let n;try{n=B(t,a)}catch(o){const i=o instanceof Error?o.message:String(o);return e.logger.warn(`--migrate: could not discover migrations (${i}); skipping`),0}if(n.length===0)return e.logger.info("--migrate: no data migrations declared in lunora/"),0;e.logger.info(`--migrate: running ${String(n.length)} migration(s) against deployed worker`);for(const o of n){e.logger.info(`--migrate: up "${o.id}" (table "${o.table}")`);const i={cwd:r,fetchImpl:e.fetchImpl,id:o.id,logger:e.logger,prod:!0,subcommand:"up",token:e.migrateToken,url:e.migrateUrl,yes:e.migrateYes===!0},s=await Re(i);if(s.code!==0)return e.logger.error(`--migrate: migration "${o.id}" failed — see output above`),s.code;e.logger.success(`--migrate: "${o.id}" applied`)}return 0},Je=e=>{if(!e.migrate||e.dryRun||e.preview)return;if(e.migrateUrl===void 0){const t="--migrate requires --migrate-url <https://your-worker> — the deploy target URL is only known after wrangler runs, and this gate runs before it; refusing to default to localhost";return e.logger.error(t),t}if(e.migrateYes!==!0){const t="--migrate runs production data migrations after deploy. Re-run with --migrate-yes to confirm.";return e.logger.error(t),t}const r=e.migrateToken??process.env.LUNORA_ADMIN_TOKEN;if(r===void 0||r===""){const t="admin token required for --migrate — pass --migrate-token or set LUNORA_ADMIN_TOKEN";return e.logger.error(t),t}},Qe=async(e,r,t,a,n,o,i,s)=>{let l;r?(l=new re({name:"dots"}),l.start("running codegen")):t.info("running codegen");try{const d=H({apiSpec:a,projectRoot:e,target:n});l?.succeed("codegen complete"),l||t.success("codegen complete");const c=be(d.platformDiagnostics,t);if(c.errors.length>0)return{error:c.errors.join("; ")};const{errorAdvisories:g,names:u,shouldBlock:m}=se(d.advisories,s);if(m){const A=`${g.length.toString()} ERROR-level ${g.length===1?"advisory":"advisories"} (${u.join(", ")}). Pass --no-strict-advisories to downgrade this to a warning and deploy anyway.`;return t.error(A),{error:A}}const f=await W({cwd:e,logger:t,spawner:o,stdoutToStderr:i});return f.error!==void 0?{error:f.error}:{result:d}}catch(d){l?.failed("codegen failed");const c=d instanceof Error?d.message:String(d);return t.error(`codegen failed: ${c}`),{error:`codegen failed: ${c}`}}},Xe=(e,r,t="deploy")=>{const a=Oe(e);if(a===void 0)return;const n=`${t} blocked: the "${a}" D1 binding has a placeholder database_id ("${U}"). Run \`wrangler d1 create <name>\` to create the database, then replace the placeholder in wrangler.jsonc with the real id before deploying.`;return r.error(n),n},Ze=(e,r,t="deploy")=>{const a=C(e)?.vars;if(!a)return;const n=Te.filter(i=>typeof a[i]=="string"&&_e(a[i]));if(n.length===0)return;const o=`${t} blocked: ${n.join(", ")} in wrangler.jsonc point at localhost. A deployed Worker can't reach a loopback address, so this silently breaks scheduled-job dispatch / auth callbacks. Set each to the deployed worker's public URL (or move it to a secret with \`wrangler secret put\`) before deploying.`;return r.error(o),o},er=async(e,r)=>{const{info:t}=z(r,"lunora"),a=t?.vectorMetadata??[];if(a.length===0)return;const n=[];for(const s of a){const l=ne(s.kind);if(l===void 0){e.logger.warn(`vector index "${s.index}" declares metadata "${s.property}", whose column type cannot be filtered on in Vectorize — it is stored with each vector but no filter will match it.`);continue}n.push({index:s.index,property:s.property,type:l})}if(n.length===0)return;const i=(await oe({cwd:r,entries:n,exec:k(b(r),"wrangler",[]),logger:e.logger,spawner:e.spawner??S})).filter(s=>s.status!=="failed").length;i>0&&e.logger.success(`vectorize metadata indexes ready: ${String(i)}/${String(n.length)}`)},x=5,rr=2e3,tr=async(e,r,t)=>{if(e.healthCheck!==!0)return;const a=t??I({cwd:r,env:e.env});if(a===void 0){const o="--health-check: the deploy succeeded, but no URL to probe could be resolved — wrangler's output carried none and this checkout has no link for this environment. Run `lunora link --url <https://your-worker>` and re-deploy, or drop --health-check.";return e.logger.error(o),{error:o,ok:!1,url:""}}const n=await he({attempts:x,baseUrl:a,delayMs:rr,fetchImpl:e.healthFetch,paths:[ve,ye],sleep:e.healthSleep});return n.error===void 0?(e.logger.success(`health check ok (${n.url})`),{ok:!0,url:n.url}):(e.logger.error(`--health-check: the deploy succeeded, but the new version did not answer after ${String(x)} attempt(s) — ${n.error}`),{error:n.error,ok:!1,url:n.url})},ar=async(e,r,t,a,n,o)=>{await er(e,r);const i=e.migrate?await ze(e,r):0;return i===0&&n?.(),{code:i,descriptor:t,mintedSecretsFile:o,validation:a}},nr=(e,r,t)=>{const a=Xe(e,r.logger,t);if(a!==void 0)return a;const n=Ze(e,r.logger,t);if(n!==void 0)return n;const o=Fe(e,r.logger,t);return o!==void 0?o:Ie(e,r.logger,r.dockerAvailable??me,t)},or=(e,r,t)=>{const a=Ue(e);a!==void 0&&r.logger.info(`class-B composition: deploying ${a} (overrides wrangler main)`),r.temporary&&r.logger.info("temporary account: deploying to a short-lived Cloudflare account (~60min); wrangler will print a claim URL"),r.dryRun&&r.logger.info("dry run: validating + bundling without publishing"),r.outDir!==void 0&&r.logger.info(`build artifact: emitting bundle to ${r.outDir}`);const n=D(t),o={dryRun:r.dryRun,entry:a,environment:r.env,outDir:r.outDir,preview:r.preview,temporary:r.temporary};if(n.toolchain===void 0)throw new Error(`deploy target "${n.id}" has no command-line toolchain`);return n.toolchain.deploy(o)},p=(e,r)=>({code:1,descriptor:void 0,error:e,validation:{problems:[],wranglerPath:void 0},...r}),ir=(e,r)=>{if(e.problems.length===0)return!1;r.error("wrangler.jsonc validation failed:");for(const t of e.problems)r.error(` - ${t}`);return!0},sr=(e,r,t)=>{const a=$(r.format),n=r.dryRun!==!0,o=or(e,r,t),i=k(b(e),o.tool,o.args);return{args:i.args,captureStdout:n&&!a,captureStdoutSilently:n&&a,command:i.command,cwd:e,stdoutToStderr:a&&!n}},cr=async({cwd:e,descriptor:r,mintedSecretsFile:t,options:a,reblessSchemaBaseline:n,stdout:o,validation:i})=>{const s={deployedAt:new Date().toISOString(),dryRun:a.dryRun===!0,env:a.env,preview:a.preview===!0,url:a.dryRun===!0?void 0:Ee(o),workerName:R(e)};if(a.dryRun===!0||a.preview===!0)return a.healthCheck===!0&&a.logger.warn(`--health-check skipped: ${a.dryRun===!0?"a dry run publishes nothing":"a preview version serves no live traffic"}`),{code:0,deployment:s,descriptor:r,mintedSecretsFile:t,validation:i};a.temporary!==!0&&Pe({cwd:e,env:a.env,logger:a.logger,url:s.url});const l=await tr(a,e,s.url);return l?.error!==void 0?{code:1,deployment:s,descriptor:r,healthCheck:l,mintedSecretsFile:t,validation:i}:{...await ar(a,e,r,i,n,t),deployment:s,healthCheck:l}},lr=async(e,r)=>{const t=e.cwd??process.cwd(),a=F(e),n=ie(e),o={problems:[],wranglerPath:void 0},i=le(t,e.target);if(i.target===void 0){const u=i.error??"unknown deploy target";return e.logger.error(u),{error:u,validation:o}}const{target:s}=i;let l;if(!e.skipCodegen){const u=await Qe(t,a,e.logger,e.apiSpec,s,e.spawner,$(e.format),n);if(u.error!==void 0)return{error:u.error,target:s,validation:o};l=u.result}let d;if(l!==void 0){const u=fe({allowDrift:e.allowSchemaDrift===!0,codegen:l,command:r,logger:e.logger,updateBaseline:e.updateSchemaBaseline===!0});if(u.blocked)return{error:`schema drift gate blocked ${r}`,schemaDrift:{blocked:!0,reason:u.reason},target:s,validation:o};d=u.rebless}await Me(t,e.logger,l?.cronTriggers,s,e.env);const c=nr(t,e,r);if(c!==void 0)return{error:c,target:s,validation:o};const g=J({environment:e.env,projectRoot:t});return ir(g,e.logger)?{error:"wrangler validation failed",target:s,validation:g}:{codegen:l,reblessSchemaBaseline:d,target:s,validation:g}},dr=async e=>{const r=e.cwd??process.cwd(),t=F(e),a=await lr(e,e.commandName??"deploy");if(a.error!==void 0){if(a.validation.problems.length>0)return{code:1,descriptor:void 0,error:a.error,validation:a.validation};const f=a.schemaDrift===void 0?void 0:{schemaDrift:a.schemaDrift};return p(a.error,f)}const{reblessSchemaBaseline:n,validation:o}=a,i=a.target,s=Je(e);if(s!==void 0)return p(s);const l=await He(r,e);if(l!==void 0)return p(l);We(r,e.logger);const{error:d,mintedSecretsFile:c}=await Ge(r,e,t,i);if(d!==void 0)return e.logger.error(d),{code:1,descriptor:void 0,error:d,mintedSecretsFile:c,validation:o};const g=sr(r,e,i);e.logger.info(`deploying via ${g.command} ${g.args.join(" ")}`);const m=await(e.spawner??S)(g);return g.captureStdoutSilently===!0&&m.stdout!==void 0&&m.stdout!==""&&process.stderr.write(m.stdout),m.code!==0?{code:m.code,descriptor:g,mintedSecretsFile:c,validation:o}:cr({cwd:r,descriptor:g,mintedSecretsFile:c,options:e,reblessSchemaBaseline:n,stdout:m.stdout,validation:o})},ur=async e=>{const r=pe("deploy",e.format);if(r!==void 0)return e.logger.error(r),p(r);const t=ke(e.format,e.logger),a=e.dryRun===!0?Le(e.cwd??process.cwd()):void 0;let n;try{if(n=await dr({...e,logger:t}),n.code===0&&e.emitBindings!==void 0){const{error:o}=de({destination:e.emitBindings,logger:t,projectRoot:e.cwd??process.cwd()});o!==void 0&&(t.error(o),n={...n,code:1})}}finally{a?.()}if($(e.format))return we(n),n;if(n.code===0&&e.dryRun!==!0&&e.preview!==!0)xe({cwd:e.cwd??process.cwd(),env:e.env,logger:e.logger,mintedSecretsFile:n.mintedSecretsFile,url:n.deployment?.url});else if(n.code===0&&e.preview===!0){const o=n.deployment?.url;e.logger.success(o===void 0?"preview version uploaded":`preview version uploaded — ${o}`)}return n},jr=ue(async({cwd:e,logger:r,options:t})=>({code:(await ur({allowSchemaDrift:t.allowSchemaDrift===!0,apiSpec:ce(t.apiSpec),cwd:e,dryRun:t.dryRun===!0,env:t.env,format:t.format,healthCheck:t.healthCheck===!0,logger:r,migrate:t.migrate===!0,migrateToken:t.migrateToken,migrateUrl:I({cwd:e,env:t.env,url:t.migrateUrl}),migrateYes:t.migrateYes===!0,preview:t.preview===!0,skipCodegen:t.prebuilt===!0,strictAdvisories:t.strictAdvisories,target:t.target,temporary:t.temporary===!0,updateSchemaBaseline:t.updateSchemaBaseline===!0})).code}));export{jr as execute,ur as runDeployCommand,lr as runPreDeployPipeline};
1
+ import{readFileSync as w,writeFileSync as O,existsSync as y}from"node:fs";import{runCodegen as H,discoverMigrations as B}from"@lunora/codegen";import{readLinkedProject as N,writeLinkedProject as M,execArgsFor as k,detectPackageManager as b,discoverContainerInfo as L,DEV_VARS_FILE as v,parseDevVariableEntries as T,isMintableSecretKey as E,runPostCodegenHook as W,resolveDeployDriver as D,inferLunoraBindings as _,packageNamesFromBindings as V,requiredSecrets as K,generateSecretValue as q,upsertDevVariableLine as Y,writeDevVariablesFileAtomically as G,discoverSchemaInfo as z}from"@lunora/config";import{findWranglerFile as j,validateWranglerProject as J,reconcileWranglerBindings as Q,reconcileWranglerCompatibilityDate as X,reconcileWranglerCrons as Z,readWranglerJsonc as ee}from"@lunora/config/cloudflare";import{join as h}from"@visulima/path";import{Spinner as re}from"@visulima/spinner";import{Project as te}from"ts-morph";import{i as ae,m as ne,e as oe}from"../packem_shared/vectorize-metadata-dXpl2_Ar.mjs";import{r as ie,e as se}from"../packem_shared/advisory-gate-Cl8IEFIj.mjs";import{p as ce,a as le}from"../packem_shared/deploy-target-B0Xcb2jV.mjs";import{r as R}from"../packem_shared/wrangler-name-Dsk5K1f-.mjs";import{w as de}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{d as ue}from"../packem_shared/command-DwC11Cwe.mjs";import{a as ge,i as me}from"../packem_shared/docker-DpVxvYpL.mjs";import{r as fe,p as he,H as ve,a as ye}from"../packem_shared/schema-drift-gate-BDCkQ1S6.mjs";import{v as pe,i as $,p as we,l as ke}from"../packem_shared/output-format-DfogXx0p.mjs";import{r as be}from"../packem_shared/platform-diagnostics-D0YzAdXm.mjs";import{containerBuildTag as $e}from"@lunora/container";import{defaultSpawner as S}from"../packem_shared/createRecordingSpawner-DJlNacZ6.mjs";import{a as I}from"../packem_shared/resolve-target-BRvw8Pf7.mjs";import{c as Se}from"../packem_shared/tui-prompts-Dd0pDuNr.mjs";import{l as De}from"../packem_shared/wrangler-secrets-CCdt0mUl.mjs";import{runMigrateDataCommand as Re}from"./runMigrateGenerateCommand.mjs";const Ce=/https?:\/\/[^\s"'<>]+\.workers\.dev[^\s"'<>]*/u,Ae=/https:\/\/[^\s"'<>]+/u,Ee=e=>{if(e===void 0)return;const r=Ce.exec(e);return r?r[0]:Ae.exec(e)?.[0]},P=e=>e===void 0?"":` (--env ${e})`,Pe=({cwd:e,env:r,logger:t,now:a,url:n})=>{if(n!==void 0)try{const o=N(e);if(o!==void 0){if(o.workerUrl===n&&o.env===r)return;t.warn(`link: .lunora/project.json records ${o.workerUrl??"(no url)"}${P(o.env)}, but this deploy published ${n}${P(r)}. Keeping the recorded value — run \`lunora link --url ${n}${r===void 0?"":` --env ${r}`}\` to update it.`);return}const i=(a??(()=>new Date().toISOString()))();M(e,{env:r,linkedAt:i,workerName:R(e),workerUrl:n}),t.success(`link: recorded ${n} in .lunora/project.json (run \`lunora link\` to change)`)}catch{}},xe=e=>{const{cwd:r,env:t,logger:a,mintedSecretsFile:n}=e;try{const o=N(r),i=o?.workerName??R(r),s=e.url??o?.workerUrl;a.success("deploy complete"),a.info(` worker: ${i??"(see wrangler output above)"}`),t!==void 0&&a.info(` env: ${t}`),s===void 0?a.info(" url: run `lunora link --url <https://your-worker>` to record it"):a.info(` url: ${s}`),n!==void 0&&a.info(` secrets: generated value(s) recorded in ${n}`),a.info(" logs: lunora logs")}catch{}},Ne=async e=>{if(e.targets.length===0)return{builtTags:[],code:0};if(!(e.railpackAvailable??ge)()){const a="deploy blocked: a container uses `image: { build }` (Railpack), but Railpack isn't ready. Install the `railpack` CLI and start a BuildKit instance, e.g. `docker run --rm --privileged -d --name buildkit moby/buildkit` then `export BUILDKIT_HOST=docker-container://buildkit`. Alternatively switch the container's `image` to a Dockerfile path or a pre-built registry reference.";return e.logger.error(a),{builtTags:[],code:1,error:a}}const r=e.spawner??S,t=[];for(const a of e.targets){const n=$e(a.exportName),o={args:["build",a.buildDir,"--name",n],command:"railpack",cwd:e.cwd},i=k(b(e.cwd),"wrangler",["containers","push",n]),s={args:i.args,command:i.command,cwd:e.cwd};e.logger.info(`railpack: building "${a.exportName}" → ${n} from ${a.buildDir}`);const l=await r(o);if(l.code!==0){const c=`railpack build failed for container "${a.exportName}" (${a.buildDir})`;return e.logger.error(c),{builtTags:t,code:l.code,error:c}}e.logger.info(`railpack: pushing ${n} to the Cloudflare Registry`);const d=await r(s);if(d.code!==0){const c=`wrangler containers push failed for "${a.exportName}" (${n})`;return e.logger.error(c),{builtTags:t,code:d.code,error:c}}t.push(n)}return{builtTags:t,code:0}},Le=e=>{const r=j(e),t=r===void 0?void 0:w(r,"utf8");return()=>{r!==void 0&&t!==void 0&&O(r,t,"utf8")}},U="<replace-with-d1-create-id>",C=e=>{const r=j(e);return r?ee(r).parsed:void 0},Te=["LUNORA_ORIGIN_URL","LUNORA_WORKER_ORIGIN","AUTH_URL"],_e=e=>{try{const{hostname:r}=new URL(e);return r==="localhost"||r==="127.0.0.1"||r==="::1"||r==="[::1]"}catch{return!1}},je=e=>e.startsWith("./")||e.startsWith("../")||e.startsWith("/")||e.includes("Dockerfile"),Ie=(e,r,t,a="deploy")=>{const n=(C(e)?.containers??[]).filter(i=>typeof i?.image=="string"&&je(i.image));if(n.length===0||t())return;const o=`${a} blocked: wrangler.jsonc declares ${String(n.length)} container(s) built from a local Dockerfile, but no Docker-compatible engine is available. Start Docker (or Colima), or point the container's \`image\` at a pre-built registry reference. Note: container images must target linux/amd64.`;return r.error(o),o},Ue=e=>y(h(e,"src","worker.ts"))?"src/worker.ts":void 0,Fe=(e,r,t="deploy")=>{for(const a of L(e,"lunora").containers){const{image:n}=a;if(n.kind==="dockerfile"&&!y(h(e,n.dockerfilePath))){const o=`${t} blocked: container "${a.exportName}" references a Dockerfile at "${n.dockerfilePath}" that does not exist. Create it or fix the \`image\` path in lunora/containers.ts.`;return r.error(o),o}if(n.kind==="build"&&!y(h(e,n.buildDir))){const o=`${t} blocked: container "${a.exportName}" references a Railpack build directory "${n.buildDir}" that does not exist. Create it or fix the \`image.build\` path in lunora/containers.ts.`;return r.error(o),o}}},F=e=>$(e.format)?!1:e.interactive!==void 0?e.interactive:process.stdout.isTTY&&!process.env.CI,Oe=e=>(C(e)?.d1_databases??[]).find(r=>r.database_id===U)?.binding,He=async(e,r)=>{if(r.dryRun===!0)return;const t=L(e,"lunora").containers.filter(n=>n.image.kind==="build").map(n=>({buildDir:n.image.buildDir,exportName:n.exportName}));if(t.length===0)return;const a=await Ne({cwd:e,logger:r.logger,railpackAvailable:r.railpackAvailable,spawner:r.spawner,targets:t});return a.code===0?void 0:a.error??"railpack build failed"},Be=(e,r,t)=>{if(t!==void 0)try{const a=Z(e,t);a.changed&&r.success(`synced ${String(t.length)} cron trigger(s) → ${a.wranglerPath??"wrangler.jsonc"}`)}catch(a){const n=a instanceof Error?a.message:String(a);r.warn(`cron trigger sync skipped: ${n}`)}},Me=async(e,r,t,a,n)=>{try{D(a);const o=await _({projectRoot:e}),i=Q(e,o,n);i.changed&&r.success(`provisioned bindings: ${i.added.join(", ")} → ${i.wranglerPath??"wrangler.jsonc"}`);for(const s of i.warnings)r.warn(s)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`binding inference skipped: ${i}`)}try{const o=X(e);o.changed&&r.success(`bumped compatibility_date to ${o.date??"unknown"} (Workers Cache enabled) → ${o.wranglerPath??"wrangler.jsonc"}`)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`compatibility date sync skipped: ${i}`)}Be(e,r,t)},We=(e,r)=>{const t=h(e,v);if(!y(t))return;let a;try{a=T(w(t,"utf8")).length}catch{return}a!==0&&r.warn(`Note: \`lunora deploy\` does not push secrets. ${v} has ${String(a)} key(s); if you changed them, run \`lunora env push --yes\` to update the deployed secrets.`)},Ve=async e=>{let r=[];try{r=V(await _({projectRoot:e}))}catch{}const t=K(r).map(n=>n.key);let a=[];try{const n=h(e,v);y(n)&&(a=T(w(n,"utf8")).map(o=>o.key).filter(o=>ae(o)))}catch{}return[...new Set([...t,...a])]},Ke=async(e,r,t,a)=>{const{logger:n}=r,o=r.spawner??S,i=b(e),s=r.env===void 0?"":` --env ${r.env}`,{toolchain:l}=D(a);if(l===void 0)return n.error("deploy target has no command-line toolchain; cannot push secrets"),{minted:[],ok:!1};const d=[];for(const c of t){const g=q(),u=l.secretPut({environment:r.env,key:c,temporary:r.temporary}),m=k(i,u.tool,u.args),f=await o({args:m.args,command:m.command,cwd:e,input:g});if(f.code!==0)return n.error(`failed to push secret ${c} (exit ${String(f.code)}); set it manually with \`wrangler secret put ${c}${s}\`.`),{minted:d,ok:!1};d.push({key:c,value:g}),n.success(`generated + pushed ${c}`)}return{minted:d,ok:!0}},qe=/^[\w-]+$/u,Ye=(e,r,t)=>{if(t.length===0)return;const a=t.map(s=>s.key).join(", ");if(r.env!==void 0&&!qe.test(r.env)){r.logger.warn(`${a}: minted and pushed for --env ${r.env}, but "${r.env}" isn't a safe filename fragment — the value could not be recorded. Capture it manually if you need it again.`);return}const n=r.env===void 0?v:`${v}.${r.env}`,o=h(e,n);let i=y(o)?w(o,"utf8"):"";for(const s of t)i=Y(i,s.key,s.value);return G(o,i),r.logger.success(r.env===void 0?`${a}: value(s) recorded in ${n}`:`${a}: value(s) recorded in ${n} (kept separate from ${v} so \`lunora dev\` and a plain \`lunora env push\` don't inherit the --env ${r.env} value)`),n},Ge=async(e,r,t,a)=>{if(r.dryRun===!0||r.preview===!0)return{};const{logger:n}=r,o=r.env===void 0?"":` --env ${r.env}`;let i;try{i=await(r.secretLister??De)({cwd:e,env:r.env,temporary:r.temporary})}catch{return{}}if(!i.ok)return{};const s=new Set(i.names),d=(await Ve(e)).filter(u=>!s.has(u));if(d.length===0)return{};if(!t)return{error:`missing required secret(s) on the deploy target: ${d.join(", ")}. Set them with \`wrangler secret put <KEY>${o}\` (or \`lunora env generate --set\` then \`lunora env push --yes${o}\`), then re-deploy.`};for(const u of d.filter(m=>!E(m)))n.warn(`required secret ${u} is not set on the target — set it with: wrangler secret put ${u}${o}`);const c=d.filter(u=>E(u));if(c.length===0)return{};if(await(r.secretConfirm??Se())(`${String(c.length)} required secret(s) not set on the target (${c.join(", ")}). Generate strong values and push them now?`)){const{minted:u,ok:m}=await Ke(e,r,c,a),f=Ye(e,r,u);return m?{mintedSecretsFile:f}:{error:"failed to push required secret(s) — set them manually and re-deploy",mintedSecretsFile:f}}return n.warn(`${String(c.length)} required secret(s) not set on the target: ${c.join(", ")}. Generate + push with \`lunora env generate --set\` then \`lunora env push --yes${o}\`.`),{}},ze=async(e,r)=>{const t=new te({skipAddingFilesFromTsConfig:!0}),a=h(r,"lunora");let n;try{n=B(t,a)}catch(o){const i=o instanceof Error?o.message:String(o);return e.logger.warn(`--migrate: could not discover migrations (${i}); skipping`),0}if(n.length===0)return e.logger.info("--migrate: no data migrations declared in lunora/"),0;e.logger.info(`--migrate: running ${String(n.length)} migration(s) against deployed worker`);for(const o of n){e.logger.info(`--migrate: up "${o.id}" (table "${o.table}")`);const i={cwd:r,fetchImpl:e.fetchImpl,id:o.id,logger:e.logger,prod:!0,subcommand:"up",token:e.migrateToken,url:e.migrateUrl,yes:e.migrateYes===!0},s=await Re(i);if(s.code!==0)return e.logger.error(`--migrate: migration "${o.id}" failed — see output above`),s.code;e.logger.success(`--migrate: "${o.id}" applied`)}return 0},Je=e=>{if(!e.migrate||e.dryRun||e.preview)return;if(e.migrateUrl===void 0){const t="--migrate requires --migrate-url <https://your-worker> — the deploy target URL is only known after wrangler runs, and this gate runs before it; refusing to default to localhost";return e.logger.error(t),t}if(e.migrateYes!==!0){const t="--migrate runs production data migrations after deploy. Re-run with --migrate-yes to confirm.";return e.logger.error(t),t}const r=e.migrateToken??process.env.LUNORA_ADMIN_TOKEN;if(r===void 0||r===""){const t="admin token required for --migrate — pass --migrate-token or set LUNORA_ADMIN_TOKEN";return e.logger.error(t),t}},Qe=async(e,r,t,a,n,o,i,s)=>{let l;r?(l=new re({name:"dots"}),l.start("running codegen")):t.info("running codegen");try{const d=H({apiSpec:a,projectRoot:e,target:n});l?.succeed("codegen complete"),l||t.success("codegen complete");const c=be(d.platformDiagnostics,t);if(c.errors.length>0)return{error:c.errors.join("; ")};const{errorAdvisories:g,names:u,shouldBlock:m}=se(d.advisories,s);if(m){const A=`${g.length.toString()} ERROR-level ${g.length===1?"advisory":"advisories"} (${u.join(", ")}). Pass --no-strict-advisories to downgrade this to a warning and deploy anyway.`;return t.error(A),{error:A}}const f=await W({cwd:e,logger:t,spawner:o,stdoutToStderr:i});return f.error!==void 0?{error:f.error}:{result:d}}catch(d){l?.failed("codegen failed");const c=d instanceof Error?d.message:String(d);return t.error(`codegen failed: ${c}`),{error:`codegen failed: ${c}`}}},Xe=(e,r,t="deploy")=>{const a=Oe(e);if(a===void 0)return;const n=`${t} blocked: the "${a}" D1 binding has a placeholder database_id ("${U}"). Run \`wrangler d1 create <name>\` to create the database, then replace the placeholder in wrangler.jsonc with the real id before deploying.`;return r.error(n),n},Ze=(e,r,t="deploy")=>{const a=C(e)?.vars;if(!a)return;const n=Te.filter(i=>typeof a[i]=="string"&&_e(a[i]));if(n.length===0)return;const o=`${t} blocked: ${n.join(", ")} in wrangler.jsonc point at localhost. A deployed Worker can't reach a loopback address, so this silently breaks scheduled-job dispatch / auth callbacks. Set each to the deployed worker's public URL (or move it to a secret with \`wrangler secret put\`) before deploying.`;return r.error(o),o},er=async(e,r)=>{const{info:t}=z(r,"lunora"),a=t?.vectorMetadata??[];if(a.length===0)return;const n=[];for(const s of a){const l=ne(s.kind);if(l===void 0){e.logger.warn(`vector index "${s.index}" declares metadata "${s.property}", whose column type cannot be filtered on in Vectorize — it is stored with each vector but no filter will match it.`);continue}n.push({index:s.index,property:s.property,type:l})}if(n.length===0)return;const i=(await oe({cwd:r,entries:n,exec:k(b(r),"wrangler",[]),logger:e.logger,spawner:e.spawner??S})).filter(s=>s.status!=="failed").length;i>0&&e.logger.success(`vectorize metadata indexes ready: ${String(i)}/${String(n.length)}`)},x=5,rr=2e3,tr=async(e,r,t)=>{if(e.healthCheck!==!0)return;const a=t??I({cwd:r,env:e.env});if(a===void 0){const o="--health-check: the deploy succeeded, but no URL to probe could be resolved — wrangler's output carried none and this checkout has no link for this environment. Run `lunora link --url <https://your-worker>` and re-deploy, or drop --health-check.";return e.logger.error(o),{error:o,ok:!1,url:""}}const n=await he({attempts:x,baseUrl:a,delayMs:rr,fetchImpl:e.healthFetch,paths:[ve,ye],sleep:e.healthSleep});return n.error===void 0?(e.logger.success(`health check ok (${n.url})`),{ok:!0,url:n.url}):(e.logger.error(`--health-check: the deploy succeeded, but the new version did not answer after ${String(x)} attempt(s) — ${n.error}`),{error:n.error,ok:!1,url:n.url})},ar=async(e,r,t,a,n,o)=>{await er(e,r);const i=e.migrate?await ze(e,r):0;return i===0&&n?.(),{code:i,descriptor:t,mintedSecretsFile:o,validation:a}},nr=(e,r,t)=>{const a=Xe(e,r.logger,t);if(a!==void 0)return a;const n=Ze(e,r.logger,t);if(n!==void 0)return n;const o=Fe(e,r.logger,t);return o!==void 0?o:Ie(e,r.logger,r.dockerAvailable??me,t)},or=(e,r,t)=>{const a=Ue(e);a!==void 0&&r.logger.info(`class-B composition: deploying ${a} (overrides wrangler main)`),r.temporary&&r.logger.info("temporary account: deploying to a short-lived Cloudflare account (~60min); wrangler will print a claim URL"),r.dryRun&&r.logger.info("dry run: validating + bundling without publishing"),r.outDir!==void 0&&r.logger.info(`build artifact: emitting bundle to ${r.outDir}`);const n=D(t),o={dryRun:r.dryRun,entry:a,environment:r.env,outDir:r.outDir,preview:r.preview,temporary:r.temporary};if(n.toolchain===void 0)throw new Error(`deploy target "${n.id}" has no command-line toolchain`);return n.toolchain.deploy(o)},p=(e,r)=>({code:1,descriptor:void 0,error:e,validation:{problems:[],wranglerPath:void 0},...r}),ir=(e,r)=>{if(e.problems.length===0)return!1;r.error("wrangler.jsonc validation failed:");for(const t of e.problems)r.error(` - ${t}`);return!0},sr=(e,r,t)=>{const a=$(r.format),n=r.dryRun!==!0,o=or(e,r,t),i=k(b(e),o.tool,o.args);return{args:i.args,captureStdout:n&&!a,captureStdoutSilently:n&&a,command:i.command,cwd:e,stdoutToStderr:a&&!n}},cr=async({cwd:e,descriptor:r,mintedSecretsFile:t,options:a,reblessSchemaBaseline:n,stdout:o,validation:i})=>{const s={deployedAt:new Date().toISOString(),dryRun:a.dryRun===!0,env:a.env,preview:a.preview===!0,url:a.dryRun===!0?void 0:Ee(o),workerName:R(e)};if(a.dryRun===!0||a.preview===!0)return a.healthCheck===!0&&a.logger.warn(`--health-check skipped: ${a.dryRun===!0?"a dry run publishes nothing":"a preview version serves no live traffic"}`),{code:0,deployment:s,descriptor:r,mintedSecretsFile:t,validation:i};a.temporary!==!0&&Pe({cwd:e,env:a.env,logger:a.logger,url:s.url});const l=await tr(a,e,s.url);return l?.error!==void 0?{code:1,deployment:s,descriptor:r,healthCheck:l,mintedSecretsFile:t,validation:i}:{...await ar(a,e,r,i,n,t),deployment:s,healthCheck:l}},lr=async(e,r)=>{const t=e.cwd??process.cwd(),a=F(e),n=ie(e),o={problems:[],wranglerPath:void 0},i=le(t,e.target);if(i.target===void 0){const u=i.error??"unknown deploy target";return e.logger.error(u),{error:u,validation:o}}const{target:s}=i;let l;if(!e.skipCodegen){const u=await Qe(t,a,e.logger,e.apiSpec,s,e.spawner,$(e.format),n);if(u.error!==void 0)return{error:u.error,target:s,validation:o};l=u.result}let d;if(l!==void 0){const u=fe({allowDrift:e.allowSchemaDrift===!0,codegen:l,command:r,logger:e.logger,updateBaseline:e.updateSchemaBaseline===!0});if(u.blocked)return{error:`schema drift gate blocked ${r}`,schemaDrift:{blocked:!0,reason:u.reason},target:s,validation:o};d=u.rebless}await Me(t,e.logger,l?.cronTriggers,s,e.env);const c=nr(t,e,r);if(c!==void 0)return{error:c,target:s,validation:o};const g=J({environment:e.env,projectRoot:t});return ir(g,e.logger)?{error:"wrangler validation failed",target:s,validation:g}:{codegen:l,reblessSchemaBaseline:d,target:s,validation:g}},dr=async e=>{const r=e.cwd??process.cwd(),t=F(e),a=await lr(e,e.commandName??"deploy");if(a.error!==void 0){if(a.validation.problems.length>0)return{code:1,descriptor:void 0,error:a.error,validation:a.validation};const f=a.schemaDrift===void 0?void 0:{schemaDrift:a.schemaDrift};return p(a.error,f)}const{reblessSchemaBaseline:n,validation:o}=a,i=a.target,s=Je(e);if(s!==void 0)return p(s);const l=await He(r,e);if(l!==void 0)return p(l);We(r,e.logger);const{error:d,mintedSecretsFile:c}=await Ge(r,e,t,i);if(d!==void 0)return e.logger.error(d),{code:1,descriptor:void 0,error:d,mintedSecretsFile:c,validation:o};const g=sr(r,e,i);e.logger.info(`deploying via ${g.command} ${g.args.join(" ")}`);const m=await(e.spawner??S)(g);return g.captureStdoutSilently===!0&&m.stdout!==void 0&&m.stdout!==""&&process.stderr.write(m.stdout),m.code!==0?{code:m.code,descriptor:g,mintedSecretsFile:c,validation:o}:cr({cwd:r,descriptor:g,mintedSecretsFile:c,options:e,reblessSchemaBaseline:n,stdout:m.stdout,validation:o})},ur=async e=>{const r=pe("deploy",e.format);if(r!==void 0)return e.logger.error(r),p(r);const t=ke(e.format,e.logger),a=e.dryRun===!0?Le(e.cwd??process.cwd()):void 0;let n;try{if(n=await dr({...e,logger:t}),n.code===0&&e.emitBindings!==void 0){const{error:o}=de({destination:e.emitBindings,logger:t,projectRoot:e.cwd??process.cwd()});o!==void 0&&(t.error(o),n={...n,code:1})}}finally{a?.()}if($(e.format))return we(n),n;if(n.code===0&&e.dryRun!==!0&&e.preview!==!0)xe({cwd:e.cwd??process.cwd(),env:e.env,logger:e.logger,mintedSecretsFile:n.mintedSecretsFile,url:n.deployment?.url});else if(n.code===0&&e.preview===!0){const o=n.deployment?.url;e.logger.success(o===void 0?"preview version uploaded":`preview version uploaded — ${o}`)}return n},jr=ue(async({cwd:e,logger:r,options:t})=>({code:(await ur({allowSchemaDrift:t.allowSchemaDrift===!0,apiSpec:ce(t.apiSpec),cwd:e,dryRun:t.dryRun===!0,env:t.env,format:t.format,healthCheck:t.healthCheck===!0,logger:r,migrate:t.migrate===!0,migrateToken:t.migrateToken,migrateUrl:I({cwd:e,env:t.env,url:t.migrateUrl}),migrateYes:t.migrateYes===!0,preview:t.preview===!0,skipCodegen:t.prebuilt===!0,strictAdvisories:t.strictAdvisories,target:t.target,temporary:t.temporary===!0,updateSchemaBaseline:t.updateSchemaBaseline===!0})).code}));export{jr as execute,ur as runDeployCommand,lr as runPreDeployPipeline};
@@ -0,0 +1 @@
1
+ const i=e=>e.endsWith("S")?e.slice(0,-1):e,d=e=>e.replaceAll(/([a-z\d])([A-Z])/gu,"$1_$2").toUpperCase().split(/[_-]+/u).filter(t=>t.length>0),l=new Set(["CREDENTIAL","DSN","PASSPHRASE","PASSWD","PASSWORD","SECRET","TOKEN"]),S=["ACCESS_KEY","API_KEY","ENCRYPTION_KEY","PRIVATE_KEY","SIGNING_KEY"],m=new RegExp(`(?:${[...l,...S.map(e=>e.replaceAll("_",""))].join("|")})S?$`,"iu"),g=e=>d(e).some(t=>t==="PUBLIC"||t==="PUBLISHABLE"),h=e=>{if(g(e))return!1;const t=d(e);if(t.some(s=>l.has(i(s))))return!0;const r=i(t.join("_"));return S.some(s=>r===s||r.endsWith(`_${s}`))||m.test(e)},x=e=>{switch(e){case"boolean":return"boolean";case"date":case"number":case"timestamp":return"number";case"id":case"literal":case"string":return"string";default:return}},A=/already (?:exists|indexed)|duplicate/iu,u=e=>["vectorize","create-metadata-index",e.index,`--property-name=${e.property}`,`--type=${e.type}`],_=async(e,t)=>{try{return await e(t)}catch(r){return{code:1,stderr:r instanceof Error?r.message:String(r)}}},I=async e=>{const{cwd:t,entries:r,exec:s,logger:E,spawner:p}=e,a=[];for(const n of r){const o=await _(p,{args:[...s.args,...u(n)],captureStderr:!0,command:s.command,cwd:t,stdoutToStderr:!0});if(o.code===0){a.push({entry:n,status:"created"});continue}const c=`${o.stderr??""}${o.stdout??""}`;if(A.test(c)){a.push({entry:n,status:"exists"});continue}a.push({entry:n,error:c.trim()||`exit code ${String(o.code)}`,status:"failed"}),E.warn(`could not create the Vectorize metadata index for "${n.property}" on "${n.index}" — filters on that property will match nothing until it exists. Run: wrangler ${u(n).join(" ")}`)}return a};export{u as c,I as e,h as i,x as m};
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@lunora/cli",
3
- "version": "1.0.0-alpha.218",
3
+ "version": "1.0.0-alpha.219",
4
4
  "description": "The Lunora CLI: init, dev, deploy, codegen, migrate, seed, doctor, insights, logs, registry, and the rest of the project commands",
5
5
  "keywords": [
6
6
  "agent-skills",
@@ -52,16 +52,16 @@
52
52
  },
53
53
  "dependencies": {
54
54
  "@bomb.sh/tab": "0.0.22",
55
- "@lunora/advisor": "1.0.0-alpha.106",
55
+ "@lunora/advisor": "1.0.0-alpha.107",
56
56
  "@lunora/bindings": "1.0.0-alpha.47",
57
- "@lunora/codegen": "1.0.0-alpha.151",
58
- "@lunora/config": "1.0.0-alpha.185",
57
+ "@lunora/codegen": "1.0.0-alpha.152",
58
+ "@lunora/config": "1.0.0-alpha.186",
59
59
  "@lunora/container": "1.0.0-alpha.41",
60
- "@lunora/d1": "1.0.0-alpha.104",
60
+ "@lunora/d1": "1.0.0-alpha.105",
61
61
  "@lunora/errors": "1.0.0-alpha.30",
62
- "@lunora/mcp": "1.0.0-alpha.106",
63
- "@lunora/runtime": "1.0.0-alpha.89",
64
- "@lunora/seed": "1.0.0-alpha.102",
62
+ "@lunora/mcp": "1.0.0-alpha.107",
63
+ "@lunora/runtime": "1.0.0-alpha.90",
64
+ "@lunora/seed": "1.0.0-alpha.103",
65
65
  "@visulima/cerebro": "3.0.6",
66
66
  "@visulima/error": "6.1.0",
67
67
  "@visulima/fs": "6.0.0",
@@ -1 +0,0 @@
1
- const d=e=>e.replaceAll(/([a-z\d])([A-Z])/gu,"$1_$2").toUpperCase().split(/[_-]+/u).filter(t=>t.length>0),E=new Set(["CREDENTIAL","CREDENTIALS","DSN","PASSPHRASE","PASSWD","PASSWORD","SECRET","TOKEN"]),S=["ACCESS_KEY","API_KEY","ENCRYPTION_KEY","PRIVATE_KEY","SIGNING_KEY"],l=/(?:apikey|passphrase|passwd|password|secret|token)$/iu,m=e=>d(e).some(t=>t==="PUBLIC"||t==="PUBLISHABLE"),g=e=>{if(m(e))return!1;const t=d(e);if(t.some(s=>E.has(s)))return!0;const r=t.join("_");return S.some(s=>r===s||r.endsWith(`_${s}`))||l.test(e)},I=e=>{switch(e){case"boolean":return"boolean";case"date":case"number":case"timestamp":return"number";case"id":case"literal":case"string":return"string";default:return}},A=/already (?:exists|indexed)|duplicate/iu,i=e=>["vectorize","create-metadata-index",e.index,`--property-name=${e.property}`,`--type=${e.type}`],_=async(e,t)=>{try{return await e(t)}catch(r){return{code:1,stderr:r instanceof Error?r.message:String(r)}}},T=async e=>{const{cwd:t,entries:r,exec:s,logger:u,spawner:p}=e,n=[];for(const a of r){const o=await _(p,{args:[...s.args,...i(a)],captureStderr:!0,command:s.command,cwd:t,stdoutToStderr:!0});if(o.code===0){n.push({entry:a,status:"created"});continue}const c=`${o.stderr??""}${o.stdout??""}`;if(A.test(c)){n.push({entry:a,status:"exists"});continue}n.push({entry:a,error:c.trim()||`exit code ${String(o.code)}`,status:"failed"}),u.warn(`could not create the Vectorize metadata index for "${a.property}" on "${a.index}" — filters on that property will match nothing until it exists. Run: wrangler ${i(a).join(" ")}`)}return n};export{i as c,T as e,g as i,I as m};