@lunora/cli 1.0.0-alpha.248 → 1.0.0-alpha.249

package/dist/packem_chunks/handler5.mjs

@@ -1 +1 @@
-import{d as s}from"../packem_shared/command-CrAs0XG_.mjs";import{o as c}from"../packem_shared/open-url-EnKy--w-.mjs";const n="https://lunora.sh/docs",l=r=>{let e=0,t=r.length;for(;e<t&&r[e]==="/";)e+=1;for(;t>e&&r[t-1]==="/";)t-=1;return r.slice(e,t)},i=r=>{if(!r||r.length===0)return n;const e=l(r);return e.length===0?n:`${n}/${e}`},a=async r=>{const e=i(r.section);r.logger.info(`opening ${e}`);try{await c(e,{opener:r.opener})}catch(t){const o=t instanceof Error?t.message:String(t);return r.logger.error(`docs: failed to open URL: ${o}`),{code:1,url:e}}return{code:0,url:e}},m=s(({argument:r,logger:e})=>a({logger:e,section:r[0]}));export{m as execute,a as runDocsCommand};
+import{d as s}from"../packem_shared/command-Mmxzxyr5.mjs";import{o as c}from"../packem_shared/open-url-EnKy--w-.mjs";const n="https://lunora.sh/docs",l=r=>{let e=0,t=r.length;for(;e<t&&r[e]==="/";)e+=1;for(;t>e&&r[t-1]==="/";)t-=1;return r.slice(e,t)},i=r=>{if(!r||r.length===0)return n;const e=l(r);return e.length===0?n:`${n}/${e}`},a=async r=>{const e=i(r.section);r.logger.info(`opening ${e}`);try{await c(e,{opener:r.opener})}catch(t){const o=t instanceof Error?t.message:String(t);return r.logger.error(`docs: failed to open URL: ${o}`),{code:1,url:e}}return{code:0,url:e}},m=s(({argument:r,logger:e})=>a({logger:e,section:r[0]}));export{m as execute,a as runDocsCommand};

package/dist/packem_chunks/handler6.mjs

@@ -1 +1 @@
-import{existsSync as p,readFileSync as w,realpathSync as h}from"node:fs";import{join as u}from"node:path";import{isPlaceholderValue as k,DEV_VARS_FILE as g,parseDevVariableEntries as b,discoverSchemaInfo as x,inferLunoraBindings as y}from"@lunora/config";import{findWranglerFile as _,readWranglerJsonc as $,validateWranglerProject as R,UNEXPORTED_CLASS_MARKER as v,collectExportGaps as S}from"@lunora/config/cloudflare";import{i as L,m as N,c as A}from"../packem_shared/vectorize-metadata-dXpl2_Ar.mjs";import{r as j,d as I}from"../packem_shared/admin-token-VdUnvnKW.mjs";import{d as E}from"../packem_shared/command-CrAs0XG_.mjs";import{v as O,l as D,i as C,p as P}from"../packem_shared/output-format-B91O3X28.mjs";import{i as U}from"../packem_shared/path-containment-CgxYZggb.mjs";const F=a=>{const e=a.trim();if(e==="")return!0;const r=e.toLowerCase();return r.includes("replace")||r.startsWith("<")&&r.endsWith(">")},V=a=>{const e=_(a);if(e===void 0)return{parsed:void 0,path:void 0};const{parsed:r}=$(e);return{parsed:r,path:e}},M=(a,e,r,n)=>{if(r===void 0){n.push({code:"wrangler-missing",fix:"Run `lunora init` (or `lunora dev`) to scaffold and reconcile wrangler.jsonc.",level:"fail",message:"wrangler.jsonc not found."});return}if(e===void 0){n.push({code:"wrangler-unparseable",fix:`Check ${r} is valid JSONC.`,level:"fail",message:`Could not parse ${r}.`});return}const{report:t}=R({projectRoot:a});for(const i of t.errors.filter(l=>l.includes(v)))n.push({code:"wrangler-class-unexported",level:"fail",message:i});for(const i of t.warnings.filter(l=>l.includes("LUNORA_ORIGIN_URL")))n.push({code:"scheduler-origin-missing",fix:"Set LUNORA_ORIGIN_URL in wrangler vars to the worker's public URL (or `wrangler secret put LUNORA_ORIGIN_URL`).",level:"warn",message:i});const o=i=>i.includes(v)||i.includes("SHARD");for(const i of t.errors.filter(l=>!o(l)))n.push({code:"wrangler-invalid",fix:"Fix the reported wrangler.jsonc problem; `lunora verify` reports the same set.",level:"fail",message:i});for(const i of t.warnings.filter(l=>!l.includes("LUNORA_ORIGIN_URL")))n.push({code:"wrangler-advisory",level:"warn",message:i});const c=t.errors.find(i=>i.includes("SHARD"));c===void 0?n.push({code:"wrangler-shard-binding-ok",level:"pass",message:"wrangler.jsonc present with a SHARD durable-object binding."}):n.push({code:"wrangler-shard-binding-missing",fix:"Run `lunora dev` to auto-reconcile, or add the binding manually.",level:"fail",message:c})},T=(a,e)=>{p(u(a,"lunora.json"))&&e.push({code:"stale-lunora-json",fix:'Move `target` / `remote` into `lunora.config.ts` (`export default { target: "…" }`), then delete lunora.json.',level:"warn",message:"lunora.json is present but no longer read — lunora.config.* replaced it, so any `target` or `remote` in it is being ignored."})},W=(a,e)=>{a===void 0||a.limits?.cpu_ms!==void 0||e.push({code:"cpu-limit-missing",fix:'Add `"limits": { "cpu_ms": 30000 }` to wrangler.jsonc, tuned to your slowest legitimate handler.',level:"info",message:"no limits.cpu_ms is set — a runaway handler can burn CPU up to the platform default before anything stops it."})},G=(a,e)=>{const r=(a?.r2_buckets??[]).map(n=>n?.bucket_name).filter(n=>typeof n=="string"&&n.length>0);r.length!==0&&e.push({code:"r2-lifecycle-unset",fix:"wrangler r2 bucket lifecycle list <bucket> — add an abort-incomplete-multipart rule if none exists.",level:"info",message:`R2 bucket(s) ${r.join(", ")}: verify a lifecycle rule aborts incomplete multipart uploads — orphaned parts are billed but invisible in a listing.`})},z=(a,e)=>{const{error:r,info:n}=x(a,"lunora");if(r!==void 0){e.push({code:"schema-unreadable",fix:"Fix the parse error, then re-run `lunora doctor`. `lunora codegen` reports the same failure with the offending source.",level:"fail",message:`lunora/schema.ts could not be parsed, so every schema-derived check was skipped: ${r}`});return}for(const t of n?.vectorMetadata??[]){const o=N(t.kind);if(o===void 0){e.push({code:"vector-metadata-unfilterable",fix:"Filter on a string, number or boolean column, or drop it from `metadata`.",level:"warn",message:`vector index "${t.index}" declares metadata "${t.property}", whose type Vectorize cannot filter on.`});continue}e.push({code:"vector-metadata-index-required",fix:`wrangler ${A({index:t.index,property:t.property,type:o}).join(" ")}`,level:"info",message:`vector index "${t.index}" filters on metadata "${t.property}" — that needs a Vectorize metadata index (\`lunora deploy\` creates it).`})}},K=(a,e)=>{if(a===void 0)return;const r=(a.d1_databases??[]).filter(Boolean);for(const n of r){const t=typeof n.database_id=="string"?n.database_id:"";if(F(t)){const o=typeof n.binding=="string"&&n.binding.length>0?n.binding:"<unnamed>";e.push({code:"d1-placeholder-id",fix:"Run `wrangler d1 create <name>` and paste the returned database_id into wrangler.jsonc.",level:"fail",message:`D1 binding "${o}" has a placeholder database_id ("${t||"<empty>"}").`})}}},B=(a,e)=>{if(a===void 0)return;const r=(a.send_email??[]).filter(Boolean);for(const n of r){const t=typeof n.destination_address=="string"?n.destination_address:"";if(t!==""&&k(t)){const o=typeof n.name=="string"&&n.name.length>0?n.name:"send_email";e.push({code:"email-destination-placeholder",fix:"Set destination_address to a verified Cloudflare Email Routing address.",level:"warn",message:`send_email binding "${o}" has a placeholder destination_address ("${t}").`})}}},J=(a,e)=>{const r=u(a,g);if(!p(r))return;let n;try{n=w(r,"utf8")}catch{return}const t=b(n).filter(o=>L(o.key)&&k(o.value)).map(o=>o.key);t.length>0&&e.push({code:"dev-vars-missing-secret",fix:"Run `lunora dev` to auto-generate secrets, or fill them in by hand.",level:"warn",message:`${g} has unfilled secret value(s): ${t.join(", ")}.`})},H=(a,e)=>{const{source:r}=j({cwd:a});r===void 0?e.push({code:"admin-token-missing",fix:"Set LUNORA_ADMIN_TOKEN (env or `.dev.vars`) to enable admin RPCs / studio.",level:"info",message:"LUNORA_ADMIN_TOKEN is not set."}):e.push({code:"admin-token-set",level:"pass",message:`LUNORA_ADMIN_TOKEN is set (${I(r)}).`})},q=async(a,e)=>{let r;try{r=await y({projectRoot:a})}catch(o){e.push({code:"declared-export-unchecked",fix:"Make sure the worker entry resolves (see `lunora codegen`), then re-run.",level:"warn",message:`could not check whether declared containers/workflows/agents are re-exported by the worker entry: ${o instanceof Error?o.message:String(o)}`});return}const n=S(r),t=[...r.containers.map(o=>({...o,kind:"container"})),...r.workflows.map(o=>({...o,kind:"workflow"})),...r.agents.map(o=>({...o,kind:"agent"}))];for(const o of t.filter(c=>c.exported))e.push({code:"declared-export-ok",level:"pass",message:`${o.kind} "${o.exportName}" is exported by the worker entry.`});for(const o of n)e.push({code:"declared-export-missing",fix:`Add \`export * from "./lunora/_generated/${o.module}"\` to your worker entry (or re-run \`vis generate lunora-${o.kind}\`).`,level:"fail",message:`${o.kind} "${o.exportName}" is declared but ${o.className} is not exported by the worker entry.`})},X=/^[\^~><= ]+/u,Q=/^(?<core>\d+\.\d+\.\d+)(?:-(?<channel>[a-z]+)\.(?<counter>\d+))?$/u,Y=a=>{const e=a.replace(X,"").trim(),r=Q.exec(e);if(!r?.groups)return;const{channel:n,core:t,counter:o}=r.groups;return{channel:n??"",core:t??"",counter:o===void 0?void 0:Number.parseInt(o,10),raw:e}},Z=(a,e)=>{const r=u(a,"package.json");if(!p(r))return;let n;try{n=JSON.parse(w(r,"utf8"))}catch{return}const t={...n.devDependencies,...n.dependencies},o=[];for(const[s,d]of Object.entries(t)){if(s!=="lunorash"&&!s.startsWith("@lunora/"))continue;const m=Y(d);m&&o.push({name:s,version:m})}if(o.length<2)return;const c=s=>s.map(d=>`${d.name}@${d.version.raw}`).join(", "),i=new Set(o.map(s=>s.version.core)),l=new Set(o.map(s=>s.version.channel));if(i.size>1){e.push({code:"version-skew-cores",fix:'Run `pnpm update "@lunora/*" lunorash` (or `npm`/`yarn` equivalent) so every Lunora package moves to the same release.',level:"warn",message:`Lunora packages span ${String(i.size)} different versions: ${c(o)}.`});return}if(l.size>1){e.push({code:"version-skew-channels",fix:"Pick one channel (all stable, or all alpha/beta) and update the odd package out.",level:"warn",message:`Lunora packages mix release channels (${[...l].map(s=>s===""?"stable":s).join(" + ")}): ${c(o)}.`});return}const f=o.map(s=>s.version.counter).filter(s=>s!==void 0);if(f.length>1){const s=Math.min(...f),d=Math.max(...f);e.push({code:"version-counter-spread",level:"info",message:f.length===o.length&&s===d?`Lunora packages are all at ${[...l][0]??""}.${String(d)}.`:`Lunora pre-release counters span ${String(s)}–${String(d)}: ${c(o)}.`})}},ee=[u("@lunora","cli"),"lunorash"],re=(a,e,r)=>{if(e===void 0)return;const n=[];for(const o of ee){const c=u(a,"node_modules",o);if(p(c))try{n.push(h(c))}catch{}}if(n.length===0)return;let t;try{t=h(e)}catch{return}n.some(o=>U(o,t))||r.push({code:"cli-shadowed",fix:"Run the project's own CLI: `pnpm exec lunora …` (or `npx lunora …`).",level:"warn",message:`the running lunora (${t}) is not the project's own install (${n.join(", ")}).`})},ne=async a=>{const e=a.cwd??process.cwd(),r=[],{parsed:n,path:t}=V(e);M(e,n,t,r),K(n,r),B(n,r),W(n,r),G(n,r),J(e,r),H(e,r),Z(e,r),z(e,r),T(e,r),re(e,a.executablePath??process.argv[1],r),await q(e,r);const o={fail:0,info:0,pass:0,warn:0};for(const i of r)o[i.level]+=1;const c=o.fail>0?1:0;return{code:c,findings:r,ok:c===0,summary:o}},oe={fail:"FAIL",info:"INFO",pass:"PASS",warn:"WARN"},ae=(a,e)=>{e.info("lunora doctor — project preflight");for(const t of a.findings){const o=`[${oe[t.level]}] ${t.message}`;t.level==="fail"?e.error(o):t.level==="warn"?e.warn(o):e.info(o),t.fix!==void 0&&t.level!=="pass"&&e.info(`       fix: ${t.fix}`)}const{fail:r,warn:n}=a.summary;r>0?e.error(`${String(r)} failure(s), ${String(n)} warning(s).`):n>0?e.warn(`0 failures, ${String(n)} warning(s).`):e.success("all checks passed.")},te=async a=>{const e=O("doctor",a.format);if(e!==void 0)return a.logger.error(e),{code:1,findings:[],ok:!1,summary:{fail:0,info:0,pass:0,warn:0}};const r=D(a.format,a.logger),n=await ne({...a});return ae(n,r),C(a.format)&&P(n),n},he=E(async({cwd:a,logger:e,options:r})=>({code:(await te({cwd:a,format:r.format,logger:e})).code}));export{he as execute,ne as runDoctor,te as runDoctorCommand};
+import{existsSync as p,readFileSync as w,realpathSync as h}from"node:fs";import{join as u}from"node:path";import{isPlaceholderValue as b,DEV_VARS_FILE as g,parseDevVariableEntries as k,discoverSchemaInfo as x,inferLunoraBindings as y}from"@lunora/config";import{findWranglerFile as _,readWranglerJsonc as $,validateWranglerProject as R,UNEXPORTED_CLASS_MARKER as v,collectExportGaps as S}from"@lunora/config/cloudflare";import{i as L,m as N,c as A}from"../packem_shared/vectorize-metadata-dXpl2_Ar.mjs";import{r as j,d as I}from"../packem_shared/admin-token-VdUnvnKW.mjs";import{d as E}from"../packem_shared/command-Mmxzxyr5.mjs";import{i as O}from"../packem_shared/path-containment-CgxYZggb.mjs";const D=a=>{const e=a.trim();if(e==="")return!0;const r=e.toLowerCase();return r.includes("replace")||r.startsWith("<")&&r.endsWith(">")},C=a=>{const e=_(a);if(e===void 0)return{parsed:void 0,path:void 0};const{parsed:r}=$(e);return{parsed:r,path:e}},P=(a,e,r,n)=>{if(r===void 0){n.push({code:"wrangler-missing",fix:"Run `lunora init` (or `lunora dev`) to scaffold and reconcile wrangler.jsonc.",level:"fail",message:"wrangler.jsonc not found."});return}if(e===void 0){n.push({code:"wrangler-unparseable",fix:`Check ${r} is valid JSONC.`,level:"fail",message:`Could not parse ${r}.`});return}const{report:t}=R({projectRoot:a});for(const i of t.errors.filter(l=>l.includes(v)))n.push({code:"wrangler-class-unexported",level:"fail",message:i});for(const i of t.warnings.filter(l=>l.includes("LUNORA_ORIGIN_URL")))n.push({code:"scheduler-origin-missing",fix:"Set LUNORA_ORIGIN_URL in wrangler vars to the worker's public URL (or `wrangler secret put LUNORA_ORIGIN_URL`).",level:"warn",message:i});const o=i=>i.includes(v)||i.includes("SHARD");for(const i of t.errors.filter(l=>!o(l)))n.push({code:"wrangler-invalid",fix:"Fix the reported wrangler.jsonc problem; `lunora verify` reports the same set.",level:"fail",message:i});for(const i of t.warnings.filter(l=>!l.includes("LUNORA_ORIGIN_URL")))n.push({code:"wrangler-advisory",level:"warn",message:i});const c=t.errors.find(i=>i.includes("SHARD"));c===void 0?n.push({code:"wrangler-shard-binding-ok",level:"pass",message:"wrangler.jsonc present with a SHARD durable-object binding."}):n.push({code:"wrangler-shard-binding-missing",fix:"Run `lunora dev` to auto-reconcile, or add the binding manually.",level:"fail",message:c})},U=(a,e)=>{p(u(a,"lunora.json"))&&e.push({code:"stale-lunora-json",fix:'Move `target` / `remote` into `lunora.config.ts` (`export default { target: "…" }`), then delete lunora.json.',level:"warn",message:"lunora.json is present but no longer read — lunora.config.* replaced it, so any `target` or `remote` in it is being ignored."})},V=(a,e)=>{a===void 0||a.limits?.cpu_ms!==void 0||e.push({code:"cpu-limit-missing",fix:'Add `"limits": { "cpu_ms": 30000 }` to wrangler.jsonc, tuned to your slowest legitimate handler.',level:"info",message:"no limits.cpu_ms is set — a runaway handler can burn CPU up to the platform default before anything stops it."})},M=(a,e)=>{const r=(a?.r2_buckets??[]).map(n=>n?.bucket_name).filter(n=>typeof n=="string"&&n.length>0);r.length!==0&&e.push({code:"r2-lifecycle-unset",fix:"wrangler r2 bucket lifecycle list <bucket> — add an abort-incomplete-multipart rule if none exists.",level:"info",message:`R2 bucket(s) ${r.join(", ")}: verify a lifecycle rule aborts incomplete multipart uploads — orphaned parts are billed but invisible in a listing.`})},F=(a,e)=>{const{error:r,info:n}=x(a,"lunora");if(r!==void 0){e.push({code:"schema-unreadable",fix:"Fix the parse error, then re-run `lunora doctor`. `lunora codegen` reports the same failure with the offending source.",level:"fail",message:`lunora/schema.ts could not be parsed, so every schema-derived check was skipped: ${r}`});return}for(const t of n?.vectorMetadata??[]){const o=N(t.kind);if(o===void 0){e.push({code:"vector-metadata-unfilterable",fix:"Filter on a string, number or boolean column, or drop it from `metadata`.",level:"warn",message:`vector index "${t.index}" declares metadata "${t.property}", whose type Vectorize cannot filter on.`});continue}e.push({code:"vector-metadata-index-required",fix:`wrangler ${A({index:t.index,property:t.property,type:o}).join(" ")}`,level:"info",message:`vector index "${t.index}" filters on metadata "${t.property}" — that needs a Vectorize metadata index (\`lunora deploy\` creates it).`})}},T=(a,e)=>{if(a===void 0)return;const r=(a.d1_databases??[]).filter(Boolean);for(const n of r){const t=typeof n.database_id=="string"?n.database_id:"";if(D(t)){const o=typeof n.binding=="string"&&n.binding.length>0?n.binding:"<unnamed>";e.push({code:"d1-placeholder-id",fix:"Run `wrangler d1 create <name>` and paste the returned database_id into wrangler.jsonc.",level:"fail",message:`D1 binding "${o}" has a placeholder database_id ("${t||"<empty>"}").`})}}},W=(a,e)=>{if(a===void 0)return;const r=(a.send_email??[]).filter(Boolean);for(const n of r){const t=typeof n.destination_address=="string"?n.destination_address:"";if(t!==""&&b(t)){const o=typeof n.name=="string"&&n.name.length>0?n.name:"send_email";e.push({code:"email-destination-placeholder",fix:"Set destination_address to a verified Cloudflare Email Routing address.",level:"warn",message:`send_email binding "${o}" has a placeholder destination_address ("${t}").`})}}},G=(a,e)=>{const r=u(a,g);if(!p(r))return;let n;try{n=w(r,"utf8")}catch{return}const t=k(n).filter(o=>L(o.key)&&b(o.value)).map(o=>o.key);t.length>0&&e.push({code:"dev-vars-missing-secret",fix:"Run `lunora dev` to auto-generate secrets, or fill them in by hand.",level:"warn",message:`${g} has unfilled secret value(s): ${t.join(", ")}.`})},z=(a,e)=>{const{source:r}=j({cwd:a});r===void 0?e.push({code:"admin-token-missing",fix:"Set LUNORA_ADMIN_TOKEN (env or `.dev.vars`) to enable admin RPCs / studio.",level:"info",message:"LUNORA_ADMIN_TOKEN is not set."}):e.push({code:"admin-token-set",level:"pass",message:`LUNORA_ADMIN_TOKEN is set (${I(r)}).`})},K=async(a,e)=>{let r;try{r=await y({projectRoot:a})}catch(o){e.push({code:"declared-export-unchecked",fix:"Make sure the worker entry resolves (see `lunora codegen`), then re-run.",level:"warn",message:`could not check whether declared containers/workflows/agents are re-exported by the worker entry: ${o instanceof Error?o.message:String(o)}`});return}const n=S(r),t=[...r.containers.map(o=>({...o,kind:"container"})),...r.workflows.map(o=>({...o,kind:"workflow"})),...r.agents.map(o=>({...o,kind:"agent"}))];for(const o of t.filter(c=>c.exported))e.push({code:"declared-export-ok",level:"pass",message:`${o.kind} "${o.exportName}" is exported by the worker entry.`});for(const o of n)e.push({code:"declared-export-missing",fix:`Add \`export * from "./lunora/_generated/${o.module}"\` to your worker entry (or re-run \`vis generate lunora-${o.kind}\`).`,level:"fail",message:`${o.kind} "${o.exportName}" is declared but ${o.className} is not exported by the worker entry.`})},B=/^[\^~><= ]+/u,H=/^(?<core>\d+\.\d+\.\d+)(?:-(?<channel>[a-z]+)\.(?<counter>\d+))?$/u,J=a=>{const e=a.replace(B,"").trim(),r=H.exec(e);if(!r?.groups)return;const{channel:n,core:t,counter:o}=r.groups;return{channel:n??"",core:t??"",counter:o===void 0?void 0:Number.parseInt(o,10),raw:e}},q=(a,e)=>{const r=u(a,"package.json");if(!p(r))return;let n;try{n=JSON.parse(w(r,"utf8"))}catch{return}const t={...n.devDependencies,...n.dependencies},o=[];for(const[s,d]of Object.entries(t)){if(s!=="lunorash"&&!s.startsWith("@lunora/"))continue;const m=J(d);m&&o.push({name:s,version:m})}if(o.length<2)return;const c=s=>s.map(d=>`${d.name}@${d.version.raw}`).join(", "),i=new Set(o.map(s=>s.version.core)),l=new Set(o.map(s=>s.version.channel));if(i.size>1){e.push({code:"version-skew-cores",fix:'Run `pnpm update "@lunora/*" lunorash` (or `npm`/`yarn` equivalent) so every Lunora package moves to the same release.',level:"warn",message:`Lunora packages span ${String(i.size)} different versions: ${c(o)}.`});return}if(l.size>1){e.push({code:"version-skew-channels",fix:"Pick one channel (all stable, or all alpha/beta) and update the odd package out.",level:"warn",message:`Lunora packages mix release channels (${[...l].map(s=>s===""?"stable":s).join(" + ")}): ${c(o)}.`});return}const f=o.map(s=>s.version.counter).filter(s=>s!==void 0);if(f.length>1){const s=Math.min(...f),d=Math.max(...f);e.push({code:"version-counter-spread",level:"info",message:f.length===o.length&&s===d?`Lunora packages are all at ${[...l][0]??""}.${String(d)}.`:`Lunora pre-release counters span ${String(s)}–${String(d)}: ${c(o)}.`})}},X=[u("@lunora","cli"),"lunorash"],Q=(a,e,r)=>{if(e===void 0)return;const n=[];for(const o of X){const c=u(a,"node_modules",o);if(p(c))try{n.push(h(c))}catch{}}if(n.length===0)return;let t;try{t=h(e)}catch{return}n.some(o=>O(o,t))||r.push({code:"cli-shadowed",fix:"Run the project's own CLI: `pnpm exec lunora …` (or `npx lunora …`).",level:"warn",message:`the running lunora (${t}) is not the project's own install (${n.join(", ")}).`})},Y=async a=>{const e=a.cwd??process.cwd(),r=[],{parsed:n,path:t}=C(e);P(e,n,t,r),T(n,r),W(n,r),V(n,r),M(n,r),G(e,r),z(e,r),q(e,r),F(e,r),U(e,r),Q(e,a.executablePath??process.argv[1],r),await K(e,r);const o={fail:0,info:0,pass:0,warn:0};for(const i of r)o[i.level]+=1;const c=o.fail>0?1:0;return{code:c,findings:r,ok:c===0,summary:o}},Z={fail:"FAIL",info:"INFO",pass:"PASS",warn:"WARN"},ee=(a,e)=>{e.info("lunora doctor — project preflight");for(const t of a.findings){const o=`[${Z[t.level]}] ${t.message}`;t.level==="fail"?e.error(o):t.level==="warn"?e.warn(o):e.info(o),t.fix!==void 0&&t.level!=="pass"&&e.info(`       fix: ${t.fix}`)}const{fail:r,warn:n}=a.summary;r>0?e.error(`${String(r)} failure(s), ${String(n)} warning(s).`):n>0?e.warn(`0 failures, ${String(n)} warning(s).`):e.success("all checks passed.")},re=async a=>{const{logger:e}=a,r=await Y({...a});return ee(r,e),r},de=E(async({cwd:a,format:e,logger:r})=>{const n=await re({cwd:a,format:e,logger:r});return{code:n.code,data:{findings:n.findings,summary:n.summary}}});export{de as execute,Y as runDoctor,re as runDoctorCommand};

package/dist/packem_chunks/handler7.mjs

@@ -1,3 +1,3 @@
-import{existsSync as h,readFileSync as V}from"node:fs";import{join as P}from"node:path";import{DEV_VARS_FILE as u,DEV_VARS_KEY_PATTERN as k,writeDevVariablesFileAtomically as $,removeDevVariableLine as K,upsertDevVariableLine as A,isPlaceholderValue as w,detectPackageManager as N,resolveDeployDriver as U,resolveProjectTarget as z,execArgsFor as j,generateSecretValue as M,DEV_VARS_EXAMPLE_FILE as p,parseDevVariableEntries as L,packageNamesFromBindings as Y,inferLunoraBindings as x,requiredSecrets as C,isMintableSecretKey as S}from"@lunora/config";import{d as q}from"../packem_shared/command-CrAs0XG_.mjs";import{defaultSpawner as F}from"../packem_shared/createRecordingSpawner-DJlNacZ6.mjs";import{l as T}from"../packem_shared/wrangler-secrets-CCdt0mUl.mjs";const Z=/[\r\n]/u,B=/["\\]/u,_=r=>new Map(L(r).map(o=>[o.key,o])),y=r=>h(r)?V(r,"utf8"):"",R=r=>r.length<=4?"****":`${r.slice(0,4)}${"*".repeat(Math.min(8,r.length-4))}`,f=r=>_(y(r)),D=r=>r.env??(r.prod===!0?"production":void 0),G=r=>{const o=f(r.devVariablesPath);if(o.size===0)return r.logger.info(`${u}: (empty)`),{code:0,descriptors:[]};for(const t of o.values())r.logger.info(`${t.key}=${R(t.value)}`);return{code:0,descriptors:[]}},I=r=>{const{devVariablesPath:o,logger:t,options:e}=r;if(!e.key)return t.error("env get requires a key. Usage: lunora env get <KEY>"),{code:1,descriptors:[]};const s=f(o).get(e.key);return s?(process.stdout.write(`${s.value}
-`),{code:0,descriptors:[]}):(t.error(`env: ${e.key} is not set in ${u}`),{code:1,descriptors:[]})},O=r=>{const{devVariablesPath:o,logger:t,options:e}=r;if(!e.key)return t.error("env set requires a key. Usage: lunora env set <KEY> <VALUE>"),{code:1,descriptors:[]};if(!k.test(e.key))return t.error(`env: invalid key "${e.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:1,descriptors:[]};if(e.value===void 0)return t.error("env set requires a value. Usage: lunora env set <KEY> <VALUE>"),{code:1,descriptors:[]};if(Z.test(e.value))return t.error(`env: value for "${e.key}" contains a newline, which .dev.vars cannot represent`),{code:1,descriptors:[]};if(B.test(e.value))return t.error(`env: value for "${e.key}" contains a double-quote or backslash, which .dev.vars cannot round-trip`),{code:1,descriptors:[]};const s=y(o);return $(o,A(s,e.key,e.value)),t.success(`env: set ${e.key} (${R(e.value)}) in ${u}`),{code:0,descriptors:[]}},H=r=>{const{devVariablesPath:o,logger:t,options:e}=r;if(!e.key)return t.error("env unset requires a key. Usage: lunora env unset <KEY>"),{code:1,descriptors:[]};if(!k.test(e.key))return t.error(`env: invalid key "${e.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:1,descriptors:[]};const s=y(o);return _(s).has(e.key)?($(o,K(s,e.key)),t.success(`env: unset ${e.key} in ${u}`),{code:0,descriptors:[]}):(t.warn(`env: ${e.key} was not set in ${u}`),{code:0,descriptors:[]})},W=async r=>{const{devVariablesPath:o,logger:t,options:e}=r;if(!e.yes)return t.error("env push uploads secrets to Cloudflare. Re-run with --yes to confirm."),{code:1,descriptors:[]};const s=f(o);if(s.size===0)return t.warn(`${u}: nothing to push (empty)`),{code:0,descriptors:[]};const n=[...s.values()].filter(a=>w(a.value)).map(a=>a.key);if(n.length>0)return t.error(`env push: refusing to upload placeholder value(s) for ${n.join(", ")} — run \`lunora env doctor\` to review, and \`lunora env generate --set\` (or \`lunora env set <KEY> <VALUE>\`) to fill them, then re-run.`),{code:1,descriptors:[]};const i=e.spawner??F,l=e.cwd??process.cwd(),d=N(l),c=[],v=D(e);for(const a of s.values()){const m=U(z(l)).toolchain?.secretPut({environment:v,key:a.key,temporary:e.temporary});if(m===void 0)return t.error("deploy target has no command-line toolchain; cannot push secrets"),{code:1,descriptors:[]};const E=j(d,m.tool,m.args),b={args:E.args,command:E.command,cwd:l,input:a.value};c.push(b),t.info(`pushing ${a.key} -> wrangler secret${v===void 0?"":` (${v})`}`);const g=await i(b);if(g.code!==0)return t.error(`env push: failed at ${a.key} (exit ${String(g.code)})`),{code:g.code,descriptors:c}}return t.success(`env: pushed ${String(s.size)} secret(s)`),{code:0,descriptors:c}},X=r=>(r.options.secretLister??T)({cwd:r.cwd,env:D(r.options),temporary:r.options.temporary}),J=async r=>{const{devVariablesPath:o,logger:t}=r,e=await X(r);if(!e.ok)return t.error(`env diff: ${e.error??"failed to list remote secrets"}`),{code:1,descriptors:[]};const s=new Set(f(o).keys()),n=new Set(e.names),i=[...s].filter(c=>!n.has(c)).toSorted((c,v)=>c.localeCompare(v)),l=e.names.filter(c=>!s.has(c)),d=[...s].filter(c=>n.has(c)).toSorted((c,v)=>c.localeCompare(v));for(const c of i)t.info(`local only (run \`lunora env push\`): ${c}`);for(const c of l)t.info(`remote only (in Cloudflare, not ${u}): ${c}`);return t.info(`in both: ${String(d.length)} secret(s)`),i.length===0&&l.length===0&&t.success("env diff: local and remote secret names match"),{code:0,descriptors:[]}},Q=r=>{const{cwd:o,devVariablesPath:t,logger:e}=r,s=P(o,p);if(!h(s))return e.info(`env doctor: no ${p} to check against — nothing to validate.`),{code:0,descriptors:[]};const n=L(V(s,"utf8")).map(a=>a.key),i=f(t);if(!h(t))return e.error(`env doctor: ${u} is missing. Run \`lunora dev\` to scaffold it, or \`lunora env set <KEY> <VALUE>\`.`),e.info(`expected (from ${p}): ${n.join(", ")}`),{code:1,descriptors:[]};const l=n.filter(a=>!i.has(a)),d=[...i.values()].filter(a=>w(a.value)).map(a=>a.key),c=new Set(n),v=[...i.keys()].filter(a=>!c.has(a));for(const a of l)e.error(`missing: ${a} is in ${p} but not ${u}`);for(const a of d)e.error(`unset: ${a} still has a placeholder value`);for(const a of v)e.info(`extra: ${a} is set locally but not listed in ${p}`);return l.length===0&&d.length===0?(e.success(`env doctor: ${u} looks good (${String(i.size)} var(s)).`),{code:0,descriptors:[]}):{code:1,descriptors:[]}},ee=async r=>{let o=[];try{o=Y(await x({projectRoot:r.cwd}))}catch{}const t=C(o).map(s=>s.key).filter(s=>S(s)),e=[...f(r.devVariablesPath).keys()].filter(s=>S(s));return[...new Set([...t,...e])]},re=(r,o,t)=>{const e=f(r),s=n=>{const i=e.get(n);return i!==void 0&&i.value!==""&&!w(i.value)};return{live:o.filter(n=>s(n.key)).map(n=>n.key),writable:t?o:o.filter(n=>!s(n.key))}},te=(r,o)=>{const{devVariablesPath:t,logger:e,options:s}=r,{live:n,writable:i}=re(t,o,s.yes===!0);if(i.length===0)return e.error(`env generate --set: ${n.join(", ")} already hold(s) a live secret and rotating it is irreversible (outstanding signed URLs and bearers stop verifying). Re-run with --yes to rotate anyway.`),{code:1,descriptors:[]};n.length>0&&e.warn(`env generate --set: left ${n.join(", ")} untouched (already set) — re-run with --yes to rotate them too`);let l=y(t);for(const d of i)l=A(l,d.key,d.value);return $(t,l),e.success(`env: generated ${String(i.length)} secret(s) into ${u}: ${i.map(d=>d.key).join(", ")}`),{code:0,descriptors:[]}},oe=async r=>{const{logger:o,options:t}=r;let e;if(t.key===void 0){if(e=await ee(r),e.length===0)return o.info("env generate: no locally-generatable secrets for this project. Name one explicitly: lunora env generate <KEY>"),{code:0,descriptors:[]}}else{if(!k.test(t.key))return o.error(`env: invalid key "${t.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:1,descriptors:[]};e=[t.key]}const s=e.map(n=>({key:n,value:M()}));if(t.set===!0)return te(r,s);for(const n of s)process.stdout.write(`${n.key}=${n.value}
-`);return{code:0,descriptors:[]}},se=async r=>{const o=r.cwd??process.cwd(),t={cwd:o,devVariablesPath:P(o,u),logger:r.logger,options:r};switch(r.subcommand){case"diff":return J(t);case"doctor":return Q(t);case"generate":return oe(t);case"get":return I(t);case"list":return G(t);case"push":return W(t);case"set":return O(t);case"unset":return H(t);default:return r.logger.error(`env: unknown subcommand "${r.subcommand}"`),{code:1,descriptors:[]}}},ne=new Set(["diff","doctor","generate","get","list","push","set","unset"]),ae=r=>typeof r=="string"&&ne.has(r),fe=q(({argument:r,cwd:o,logger:t,options:e})=>{const s=r[0];return ae(s)?se({cwd:o,env:e.env,key:r[1],logger:t,prod:e.prod===!0,set:e.set===!0,subcommand:s,temporary:e.temporary===!0,value:r[2],yes:e.yes===!0}):(t.error(`env: unknown subcommand "${s??""}" — expected list | get | set | unset | push | diff | doctor | generate`),{code:1})});export{fe as execute,se as runEnvCommand};
+import{existsSync as E,readFileSync as U}from"node:fs";import{join as P}from"node:path";import{DEV_VARS_FILE as m,DEV_VARS_KEY_PATTERN as b,writeDevVariablesFileAtomically as w,removeDevVariableLine as N,upsertDevVariableLine as _,isPlaceholderValue as S,detectPackageManager as R,resolveDeployDriver as K,resolveProjectTarget as j,execArgsFor as z,generateSecretValue as M,DEV_VARS_EXAMPLE_FILE as g,parseDevVariableEntries as D,packageNamesFromBindings as T,inferLunoraBindings as C,requiredSecrets as F,isMintableSecretKey as V}from"@lunora/config";import{d as O}from"../packem_shared/command-Mmxzxyr5.mjs";import{EXIT_CODE as d}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{defaultSpawner as Y}from"../packem_shared/createRecordingSpawner-sS7LEN7x.mjs";import{l as q}from"../packem_shared/wrangler-secrets-C9lJnd5N.mjs";const Z=/[\r\n]/u,B=/["\\]/u,G=e=>new Map(D(e).map(o=>[o.key,o])),h=e=>E(e)?U(e,"utf8"):"",L=e=>e.length<=4?"****":`${e.slice(0,4)}${"*".repeat(Math.min(8,e.length-4))}`,f=e=>G(h(e)),$=e=>e.env??(e.prod===!0?"production":void 0),I=e=>{const o=f(e.devVariablesPath),t={file:m,keys:[...o.keys()],subcommand:"list"};if(o.size===0)return e.logger.info(`${m}: (empty)`),{code:0,data:t,descriptors:[]};for(const r of o.values())e.logger.info(`${r.key}=${L(r.value)}`);return{code:0,data:t,descriptors:[]}},X=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env get requires a key. Usage: lunora env get <KEY>"),{code:d.USAGE,descriptors:[]};const s=f(o).get(r.key);return s?(r.format!=="json"&&process.stdout.write(`${s.value}
+`),{code:0,data:{key:r.key,subcommand:"get",value:s.value},descriptors:[]}):(t.error(`env: ${r.key} is not set in ${m}`),{code:d.NOT_FOUND,descriptors:[]})},H=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env set requires a key. Usage: lunora env set <KEY> <VALUE>"),{code:d.USAGE,descriptors:[]};if(!b.test(r.key))return t.error(`env: invalid key "${r.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};if(r.value===void 0)return t.error("env set requires a value. Usage: lunora env set <KEY> <VALUE>"),{code:d.USAGE,descriptors:[]};if(Z.test(r.value))return t.error(`env: value for "${r.key}" contains a newline, which .dev.vars cannot represent`),{code:d.USAGE,descriptors:[]};if(B.test(r.value))return t.error(`env: value for "${r.key}" contains a double-quote or backslash, which .dev.vars cannot round-trip`),{code:d.USAGE,descriptors:[]};const s=h(o);return w(o,_(s,r.key,r.value)),t.success(`env: set ${r.key} (${L(r.value)}) in ${m}`),{code:0,data:{key:r.key,subcommand:"set"},descriptors:[]}},W=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env unset requires a key. Usage: lunora env unset <KEY>"),{code:d.USAGE,descriptors:[]};if(!b.test(r.key))return t.error(`env: invalid key "${r.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};const s=h(o);return G(s).has(r.key)?(w(o,N(s,r.key)),t.success(`env: unset ${r.key} in ${m}`),{code:0,data:{key:r.key,removed:!0,subcommand:"unset"},descriptors:[]}):(t.warn(`env: ${r.key} was not set in ${m}`),{code:0,data:{key:r.key,removed:!1,subcommand:"unset"},descriptors:[]})},J=async e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.yes)return t.error("env push uploads secrets to Cloudflare. Re-run with --yes to confirm."),{code:d.USAGE,descriptors:[]};const s=f(o);if(s.size===0)return t.warn(`${m}: nothing to push (empty)`),{code:0,data:{pushed:[],subcommand:"push",target:$(r)},descriptors:[]};const n=[...s.values()].filter(p=>S(p.value)).map(p=>p.key);if(n.length>0)return t.error(`env push: refusing to upload placeholder value(s) for ${n.join(", ")} — run \`lunora env doctor\` to review, and \`lunora env generate --set\` (or \`lunora env set <KEY> <VALUE>\`) to fill them, then re-run.`),{code:d.USAGE,descriptors:[]};const a=r.spawner??Y,u=r.cwd??process.cwd(),l=R(u),c=[],v=$(r);for(const p of s.values()){const y=K(j(u)).toolchain?.secretPut({environment:v,key:p.key,temporary:r.temporary});if(y===void 0)return t.error("deploy target has no command-line toolchain; cannot push secrets"),{code:d.USAGE,descriptors:[]};const i=z(l,y.tool,y.args),A={args:i.args,command:i.command,cwd:u,input:p.value};c.push(A),t.info(`pushing ${p.key} -> wrangler secret${v===void 0?"":` (${v})`}`);const k=await a(A);if(k.code!==0)return t.error(`env push: failed at ${p.key} (exit ${String(k.code)})`),{code:k.code,descriptors:c}}return t.success(`env: pushed ${String(s.size)} secret(s)`),{code:0,data:{pushed:[...s.keys()],subcommand:"push",target:v},descriptors:c}},Q=e=>(e.options.secretLister??q)({cwd:e.cwd,env:$(e.options),temporary:e.options.temporary}),x=async e=>{const{devVariablesPath:o,logger:t}=e,r=await Q(e);if(!r.ok)return t.error(`env diff: ${r.error??"failed to list remote secrets"}`),{code:1,descriptors:[]};const s=new Set(f(o).keys()),n=new Set(r.names),a=[...s].filter(c=>!n.has(c)).toSorted((c,v)=>c.localeCompare(v)),u=r.names.filter(c=>!s.has(c)),l=[...s].filter(c=>n.has(c)).toSorted((c,v)=>c.localeCompare(v));for(const c of a)t.info(`local only (run \`lunora env push\`): ${c}`);for(const c of u)t.info(`remote only (in Cloudflare, not ${m}): ${c}`);return t.info(`in both: ${String(l.length)} secret(s)`),a.length===0&&u.length===0&&t.success("env diff: local and remote secret names match"),{code:0,data:{both:l,localOnly:a,remoteOnly:u,subcommand:"diff"},descriptors:[]}},ee=e=>{const{cwd:o,devVariablesPath:t,logger:r}=e,s=P(o,g);if(!E(s))return r.info(`env doctor: no ${g} to check against — nothing to validate.`),{code:0,data:{extra:[],missing:[],ok:!0,placeholders:[],subcommand:"doctor"},descriptors:[]};const n=D(U(s,"utf8")).map(i=>i.key),a=f(t);if(!E(t))return r.error(`env doctor: ${m} is missing. Run \`lunora dev\` to scaffold it, or \`lunora env set <KEY> <VALUE>\`.`),r.info(`expected (from ${g}): ${n.join(", ")}`),{code:d.NOT_FOUND,descriptors:[]};const u=n.filter(i=>!a.has(i)),l=[...a.values()].filter(i=>S(i.value)).map(i=>i.key),c=new Set(n),v=[...a.keys()].filter(i=>!c.has(i));for(const i of u)r.error(`missing: ${i} is in ${g} but not ${m}`);for(const i of l)r.error(`unset: ${i} still has a placeholder value`);for(const i of v)r.info(`extra: ${i} is set locally but not listed in ${g}`);const p=u.length===0&&l.length===0,y={extra:v,missing:u,ok:p,placeholders:l,subcommand:"doctor"};return p?(r.success(`env doctor: ${m} looks good (${String(a.size)} var(s)).`),{code:0,data:y,descriptors:[]}):{code:1,data:y,descriptors:[]}},re=async e=>{let o=[];try{o=T(await C({projectRoot:e.cwd}))}catch{}const t=F(o).map(s=>s.key).filter(s=>V(s)),r=[...f(e.devVariablesPath).keys()].filter(s=>V(s));return[...new Set([...t,...r])]},te=(e,o,t)=>{const r=f(e),s=n=>{const a=r.get(n);return a!==void 0&&a.value!==""&&!S(a.value)};return{live:o.filter(n=>s(n.key)).map(n=>n.key),writable:t?o:o.filter(n=>!s(n.key))}},se=(e,o)=>{const{devVariablesPath:t,logger:r,options:s}=e,{live:n,writable:a}=te(t,o,s.yes===!0);if(a.length===0)return r.error(`env generate --set: ${n.join(", ")} already hold(s) a live secret and rotating it is irreversible (outstanding signed URLs and bearers stop verifying). Re-run with --yes to rotate anyway.`),{code:d.USAGE,descriptors:[]};n.length>0&&r.warn(`env generate --set: left ${n.join(", ")} untouched (already set) — re-run with --yes to rotate them too`);let u=h(t);for(const l of a)u=_(u,l.key,l.value);return w(t,u),r.success(`env: generated ${String(a.length)} secret(s) into ${m}: ${a.map(l=>l.key).join(", ")}`),{code:0,data:{subcommand:"generate",written:a.map(l=>l.key)},descriptors:[]}},oe=async e=>{const{logger:o,options:t}=e;let r;if(t.key===void 0){if(r=await re(e),r.length===0)return o.info("env generate: no locally-generatable secrets for this project. Name one explicitly: lunora env generate <KEY>"),{code:0,data:{secrets:[],subcommand:"generate"},descriptors:[]}}else{if(!b.test(t.key))return o.error(`env: invalid key "${t.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};r=[t.key]}const s=r.map(n=>({key:n,value:M()}));if(t.set===!0)return se(e,s);if(t.format!=="json")for(const n of s)process.stdout.write(`${n.key}=${n.value}
+`);return{code:0,data:{secrets:s,subcommand:"generate"},descriptors:[]}},ne=async e=>{const{options:o}=e;switch(o.subcommand){case"diff":return x(e);case"doctor":return ee(e);case"generate":return oe(e);case"get":return X(e);case"list":return I(e);case"push":return J(e);case"set":return H(e);case"unset":return W(e);default:return e.logger.error(`env: unknown subcommand "${o.subcommand}"`),{code:d.USAGE,descriptors:[]}}},ae=async e=>{const o=e.cwd??process.cwd(),t={cwd:o,devVariablesPath:P(o,m),logger:e.logger,options:e};return ne(t)},ce=new Set(["diff","doctor","generate","get","list","push","set","unset"]),ie=e=>typeof e=="string"&&ce.has(e),ye=O(({argument:e,cwd:o,format:t,logger:r,options:s})=>{const n=e[0];if(!ie(n)){const a=`env: unknown subcommand "${n??""}" — expected list | get | set | unset | push | diff | doctor | generate`;return r.error(a),{code:d.USAGE,error:a}}return ae({cwd:o,env:s.env,format:t,key:e[1],logger:r,prod:s.prod===!0,set:s.set===!0,subcommand:n,temporary:s.temporary===!0,value:e[2],yes:s.yes===!0})});export{ye as execute,ae as runEnvCommand};

package/dist/packem_chunks/handler8.mjs

@@ -1 +1 @@
-import{d as u}from"../packem_shared/command-CrAs0XG_.mjs";import{r as d}from"../packem_shared/resolve-target-BRvw8Pf7.mjs";import{runExportCommand as l}from"../packem_shared/runExportCommand-Dq-SpjAe.mjs";const p=u(({argument:o,cwd:e,logger:t,options:r})=>l({cwd:e,logger:t,out:o[0]??r.out,prod:r.prod===!0,tables:r.tables,token:r.token,url:d({cwd:e,prod:r.prod===!0,url:r.url})}));export{p as execute};
+import{d}from"../packem_shared/command-Mmxzxyr5.mjs";import{a as l}from"../packem_shared/resolve-target-C_ZloTvd.mjs";import{runExportCommand as m}from"../packem_shared/runExportCommand-LEwEr8p0.mjs";const k=d(({argument:o,cwd:e,format:t,logger:u,options:r})=>m({cwd:e,format:t,logger:u,out:o[0]??r.out,prod:r.prod===!0,tables:r.tables,token:r.token,url:l({cwd:e,prod:r.prod===!0,url:r.url})}));export{k as execute};

package/dist/packem_chunks/handler9.mjs

@@ -1 +1 @@
-import{d as o}from"../packem_shared/command-CrAs0XG_.mjs";import{r as f}from"../packem_shared/resolve-target-BRvw8Pf7.mjs";import{I as u,r as d}from"../packem_shared/import-Dqd1MOOv.mjs";const n=o(({argument:m,cwd:a,logger:e,options:r})=>{const t=m[0];return t?r.from!==void 0&&!u.includes(r.from)?(e.error(`--from ${r.from} is not a known source. Expected one of: ${u.join(", ")}.`),{code:1}):d({batchSize:r.batchSize,cwd:a,file:t,from:r.from,logger:e,prod:r.prod===!0,scan:r.scan===!0,storageDir:r.storageDir,table:r.table,token:r.token,url:f({cwd:a,prod:r.prod===!0,url:r.url}),verify:r.verify===!0,withStorage:r.withStorage===!0,yes:r.yes===!0}):(e.error("import requires a path. Usage: lunora import <file.ndjson | convex-export-dir> [--table <name>]"),{code:1})});export{n as execute};
+import{d}from"../packem_shared/command-Mmxzxyr5.mjs";import{EXIT_CODE as m}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{a as n}from"../packem_shared/resolve-target-C_ZloTvd.mjs";import{I as u,r as i}from"../packem_shared/import-D7qdpSmJ.mjs";const b=d(({argument:f,cwd:a,format:c,logger:t,options:r})=>{const o=f[0];if(!o){const e="import requires a path. Usage: lunora import <file.ndjson | convex-export-dir> [--table <name>]";return t.error(e),{code:m.USAGE,error:e}}if(r.from!==void 0&&!u.includes(r.from)){const e=`--from ${r.from} is not a known source. Expected one of: ${u.join(", ")}.`;return t.error(e),{code:m.USAGE,error:e}}return i({batchSize:r.batchSize,cwd:a,file:o,format:c,from:r.from,logger:t,prod:r.prod===!0,scan:r.scan===!0,storageDir:r.storageDir,table:r.table,token:r.token,url:n({cwd:a,prod:r.prod===!0,url:r.url}),verify:r.verify===!0,withStorage:r.withStorage===!0,yes:r.yes===!0})});export{b as execute};

package/dist/packem_chunks/planDevCommand.mjs

@@ -1,7 +1,7 @@
-import{spawnSync as N,spawn as ne}from"node:child_process";import{existsSync as C,watch as Pe,readFileSync as M,mkdirSync as Te,openSync as oe,closeSync as ie,statSync as _e,readSync as Re}from"node:fs";import{join as E,dirname as Ie}from"node:path";import{runCodegen as se}from"@lunora/codegen";import{runPostCodegenHook as Le,detectAgentRules as ae,updateDevServerState as x,readDevServerState as L,claimDevServerState as ce,DEV_HANDOFF_ENV as T,clearDevServerState as y,readLiveDevServerState as O,isDevServerReady as W,detectFramework as de,readProjectDependencyNames as Oe,DEV_LOG_FILE_ENV as le,DEV_DAEMON_ENV as F,detectPackageManager as ue,execArgsFor as $,isRecordedProcessCurrent as De,DEV_LOG_FILE as Ae,CODEGEN_ENV as fe,isCodegenDisabled as $e,detectAiAgent as Ne,readProjectRemotePreference as Ce,inferLunoraBindings as Me,packageNamesFromBindings as xe,ensureDevVarsExample as Fe,ensureDevVariables as je,isInteractive as Ge,DEV_VARS_FILE as _,DEV_VARS_EXAMPLE_FILE as Ue,fillDevSecrets as Ve,DEV_BINDINGS_FILE as We,DEV_STATE_FILE as ge,claimAgentRulesHint as He,AGENT_RULES_HINT as Be,resolveDeployDriver as Ke,resolveProjectTarget as Ye,runScriptCommand as Je,discoverContainerInfo as Xe,streamContainerLogs as ze,parseDevVariableEntries as Qe,formatLunoraEvent as Ze}from"@lunora/config";import{resolveRemoteEnabled as qe,findWranglerFile as j,readWranglerJsonc as G,materializeRemoteWranglerConfig as er}from"@lunora/config/cloudflare";import{p as rr,a as tr}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{w as nr}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{a as or}from"../packem_shared/codegen-error-AmH54ofi.mjs";import{a as ir}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{d as sr}from"../packem_shared/command-CrAs0XG_.mjs";import{createServer as ar,connect as cr}from"node:net";import{forceJsonLogging as dr}from"../packem_shared/createLogger-Cl18I8AX.mjs";import{networkInterfaces as lr}from"node:os";import{spawnShellCompat as ve}from"../packem_shared/createRecordingSpawner-DJlNacZ6.mjs";import{createServer as ur,request as fr}from"node:http";import{pipeline as gr}from"node:stream";import{loadStudioAssets as H,studioAssetsStamp as B,renderStudioHtml as vr,resolveAdminToken as mr,transportRejectionReason as K,SCHEMA_EDIT_ENDPOINT as pr,POLICY_SCAFFOLD_ENDPOINT as wr,SEED_ENDPOINT as hr,sendStudioDocument as Sr,serveJsonHandler as yr,isStandaloneModulePath as kr,readStandaloneAsset as Er,assetContentType as br,handleSchemaEditRequest as Pr,handlePolicyScaffoldRequest as Tr,handleSeedRequest as _r,applyStudioAssetCache as Rr}from"@lunora/config/studio-host";import{c as Ir}from"../packem_shared/tui-prompts-DzYd2fL3.mjs";import{setTimeout as R}from"node:timers/promises";import{provisionBindings as Lr}from"./runDeployCommand.mjs";import{p as k}from"../packem_shared/output-format-B91O3X28.mjs";const Or=100,Dr=300,Ar=/[/\\]/u,$r=(e,r,n)=>{const{apiSpec:t,logger:o,projectRoot:i,target:s}=e;try{const a=se({apiSpec:t,lunoraDirectory:r,projectRoot:i,target:s});o.success(`codegen: wrote ${r}/_generated (${n})`),ir(a.platformDiagnostics,o)}catch(a){return o.error(or(a,n)),!1}return!0},Nr=e=>{const r=e.lunoraDirectory??"lunora",n=E(e.projectRoot,r),t=e.debounceMs??Or;let o=!1,i=!1,s=!1,a,d=0,u=Promise.resolve(),g;const m=new Promise(v=>{g=v}),p=v=>{o||(a=v,!i&&(i=!0,u=(async()=>{try{for(;a!==void 0;){const h=a;if(a=void 0,!!$r(e,r,h)){s=!0;try{(await Le({cwd:e.projectRoot,logger:e.logger,spawner:e.spawner,stdoutToStderr:e.jsonLogs})).ran&&(d=Date.now())}finally{s=!1}}}}catch(h){e.logger.error(`codegen watch: ${h instanceof Error?h.message:String(h)}`)}finally{i=!1,g()}})()))};p("startup");const l=v=>(e.logger.warn(`codegen watch unavailable (${v}) — schema edits will NOT auto-regenerate. Run \`lunora codegen\` manually after each edit.`),{close:()=>(o=!0,a=void 0,u),ready:m,watchAvailable:!1});let c,f;if(!C(n))return l(`no such directory: ${n}`);try{f=Pe(n,{recursive:!0},(v,h)=>{if(!(typeof h=="string"&&h.split(Ar).includes("_generated"))){if(s||Date.now()-d<Dr){c&&(clearTimeout(c),c=void 0);return}c&&clearTimeout(c),c=setTimeout(()=>{p(`change: ${h??"?"}`)},t)}})}catch(v){return l(v instanceof Error?v.message:String(v))}const w=f;return{close:()=>(o=!0,a=void 0,c&&clearTimeout(c),w.close(),u),ready:m,watchAvailable:!0}},Cr=64,me="127.0.0.1",Mr=65535,xr=(e,r=me)=>new Promise(n=>{const t=ar();t.once("error",()=>{n(!1)}),t.once("listening",()=>{t.close(()=>{n(!0)})}),t.listen(e,r)}),Fr=async(e,r=me,n=Cr)=>{for(let t=e;t<e+n&&t<=Mr;t+=1)if(await xr(t,r))return t;return e},Y=(e=lr)=>Object.values(e()).some(r=>r?.some(n=>n.internal&&n.address==="::1")),J="/_lunora",X=e=>{const r=e.indexOf("?");return r===-1?e:e.slice(0,r)},z=3e4,Q=(e,r,n)=>{const t=fr({headers:{...e.headers,host:n.host},hostname:n.hostname,method:e.method,path:e.url,port:n.port},o=>{r.writeHead(o.statusCode??502,o.headers),gr(o,r,()=>{})});t.setTimeout(z,()=>{t.destroy(new Error(`no response within ${String(z)}ms`))}),t.on("error",o=>{if(r.headersSent){r.destroy();return}r.statusCode=o.message.startsWith("no response within")?504:502,r.end(`lunora dev: worker unreachable (${o.message})`)}),r.on("close",()=>{r.writableFinished||t.destroy()}),e.pipe(t)},jr=5e3,Gr=(e,r,n,t)=>{const o=cr({host:t.hostname,port:Number(t.port)},()=>{o.setTimeout(0);const i=[`${e.method??"GET"} ${e.url??"/"} HTTP/1.1`];for(const[s,a]of Object.entries(e.headers))if(s!=="host")for(const d of Array.isArray(a)?a:[a])d!==void 0&&i.push(`${s}: ${d}`);i.push(`host: ${t.host}`,"",""),o.write(i.join(`\r
-`)),n.length>0&&o.write(n),o.pipe(r),r.pipe(o)});o.setTimeout(jr,()=>o.destroy()),o.on("error",()=>r.destroy()),r.on("error",()=>o.destroy())},Ur=async e=>{const r=e.host??"127.0.0.1",n=r==="127.0.0.1"||r==="localhost"||r==="::1",t=new URL(e.workerOrigin);let o=H(e.logger,import.meta.url),i=B(import.meta.url);const s=vr({adminToken:n?mr(e.cwd):void 0,basePath:"/",dataEditable:n,rulesInstalled:ae(e.cwd).installed,runAsIdentity:n,schemaEditable:n,scriptSrc:"/studio.js",styleHref:"/styles.css"}),a=(l,c,f,w,v)=>{Rr(l,c,v,i)||(c.statusCode=200,c.setHeader("Content-Type",w),c.end(f))},d=(l,c,f)=>{l.statusCode=c,l.setHeader("Content-Type","text/plain"),l.end(f)},u=(l,c,f,w)=>{if(n){yr(l,c,f,e.cwd,{apiSpec:e.apiSpec});return}d(c,403,w)},g=(l,c,f)=>{const w=l==="/styles.css",v=kr(l);if(!w&&!v)return!1;const h=B(import.meta.url);if(h!==i&&(o=H(e.logger,import.meta.url),i=h),o===void 0)return d(f,501,"Lunora studio assets not found — install and build @lunora/studio."),!0;if(w)return a(c,f,o.styles,"text/css; charset=utf-8","styles.css"),!0;const b=l.slice(l.lastIndexOf("/")+1),V=Er(b,import.meta.url);return V===void 0?(d(f,404,"Not found"),!0):(a(c,f,V,br(b),b),!0)},m=Buffer.from(s),p=ur((l,c)=>{const f=X(l.url??"/");if(n){const v=K(l,e.logger);if(v!==void 0){d(c,403,v);return}}if(f.startsWith(J)){if(!n){d(c,403,"Lunora studio: the worker admin proxy is only available on a loopback bind.");return}Q(l,c,t);return}if(f===pr){u(l,c,Pr,"Lunora schema editing is only available on loopback hosts in dev.");return}if(f===wr){u(l,c,Tr,"Lunora policy scaffolding is only available on loopback hosts in dev.");return}if(f===hr){u(l,c,_r,"Lunora data seeding is only available on loopback hosts in dev.");return}if(g(f,l,c))return;const w=l.headers["sec-fetch-mode"];if(n&&typeof w=="string"&&w!=="navigate"){Q(l,c,t);return}Sr(c,m)});return p.on("upgrade",(l,c,f)=>{if(!n||K(l,e.logger)!==void 0){c.destroy();return}X(l.url??"").startsWith(J)?Gr(l,c,f,t):c.destroy()}),await new Promise((l,c)=>{p.once("error",f=>{f.code==="EADDRINUSE"?c(new Error(`studio port ${String(e.port)} is already in use — pass a different port with --port, or stop the process using it`,{cause:f})):c(f)}),p.listen(e.port,r,()=>{l()})}),{close:()=>new Promise(l=>{p.close(()=>{l()})}),url:`http://${r==="0.0.0.0"||r==="::"?"localhost":r}:${String(e.port)}`}},Vr=12e4,U=250,Wr=1e3,Hr="LUNORA_DEV_READY_TIMEOUT_MS",pe=e=>{if(e!==void 0)return e;const r=Number(process.env[Hr]??"");return Number.isFinite(r)&&r>0?r:Vr},we=async(e,r)=>{try{const n=AbortSignal.timeout(Wr);return await(await fetch(new URL("/_lunora/status",e),{redirect:"manual",signal:r===void 0?n:AbortSignal.any([r,n])})).body?.cancel(),!0}catch{return!1}},Br=async e=>{const{cwd:r,logger:n,origin:t,signal:o}=e,i=e.probe??we,s=pe(e.readyTimeoutMs),a=Date.now()+s,d=()=>o.aborted;for(;!d()&&Date.now()<a;){let u=!1;try{u=await i(t,o)}catch{}if(d()||Date.now()>=a)break;if(u)return x(r,{readyAt:new Date().toISOString()},{expectedPid:process.pid}),L(r)?.readyAt!==void 0;try{await R(U,void 0,{signal:o})}catch{}}return d()||n.warn(`server did not answer on ${t} within ${String(Math.round(s/1e3))}s — .lunora/dev.json will have no readyAt, so anything polling for readiness will keep waiting. The server itself is unaffected; raise LUNORA_DEV_READY_TIMEOUT_MS if it is just slow to boot.`),!1},Kr=1e4,Yr=100,Jr=40,P=256*1024,Xr=new Set(["nuxt","sveltekit"]),D=e=>Xr.has(de(e).framework)?"framework-worker":Oe(e).has("@lunora/vite")?"vite":"wrangler",he=e=>{const r=ue(e);let n;try{const t=M(E(e,"package.json"),"utf8");n=JSON.parse(t).scripts?.dev}catch{}if(n===void 0||n.trim()===""||n.includes("lunora")){const t=$(r,"vite",["dev"]);return{args:t.args,command:t.command}}return{args:["run","dev"],command:r}},zr=e=>{Te(Ie(e.logPath),{recursive:!0});const r=oe(e.logPath,"w",384);let n;const t=ve(e.command,e.args);try{n=ne(t.command,t.args,{cwd:e.cwd,detached:!0,env:e.env,shell:t.shell,stdio:["ignore",r,r],windowsHide:!0})}finally{ie(r)}return n.unref(),{exited:new Promise(o=>{n.on("error",()=>{o(1)}),n.on("exit",(i,s)=>{o(i??(s?1:0))})}),pid:n.pid}},Qr=e=>{try{const{size:r}=_e(e);if(r<=P)return M(e,"utf8");const n=oe(e,"r");try{const t=Buffer.alloc(P),o=Re(n,t,0,P,r-P),i=t.toString("utf8",0,o);return i.slice(i.indexOf(`
-`)+1)}finally{ie(n)}}catch{return}},Se=(e,r)=>{const n=Qr(e);if(n===void 0)return[];const t=n.split(`
-`);return t.at(-1)===""&&t.pop(),r>0?t.slice(-r):t},ye=(e,r)=>r?.logFile??E(e,Ae),ke=e=>{e.info("  Stop:   lunora dev stop"),e.info("  Status: lunora dev status"),e.info("  Logs:   lunora dev logs")},I=(e,r)=>{e.warn(`Dev server already running at ${r.url} (pid ${String(r.pid)})`),ke(e)},Zr=(e,r)=>{e.success(`Dev server running at ${r.url} (pid ${String(r.pid)})`),r.studioUrl!==void 0&&e.info(`  Studio: ${r.studioUrl}`),ke(e)},qr=async e=>{const{child:r,cwd:n,deadline:t,pollIntervalMs:o,probe:i}=e,s=r.exited.then(a=>({exitCode:a}));for(;Date.now()<t;){const a=O(n);if(a!==void 0&&a.pid!==process.pid&&await i(a.url))return{state:a,status:"ready"};const d=await Promise.race([s,R(o)]);if(d!==void 0)return{...d,status:"exited"}}return{status:"timeout"}},et=async e=>{const{cwd:r,logger:n}=e,t=ye(r,void 0),o=pe(e.readyTimeoutMs),i=(e.spawnDetached??zr)({args:e.command.args,command:e.command.command,cwd:r,env:{...process.env,...e.env,[F]:"1",[le]:t,...process.env.FORCE_COLOR===void 0?{NO_COLOR:"1"}:{},...e.json?{LUNORA_LOG_JSON:"1"}:{}},logPath:t}),s=await qr({child:i,cwd:r,deadline:Date.now()+o,pollIntervalMs:e.pollIntervalMs??U,probe:e.probe??we});if(s.status==="ready")return Zr(n,s.state),{code:0};if(s.status==="exited"){n.error(`dev server exited before becoming ready (exit code ${String(s.exitCode)}). Last output:`);for(const d of Se(t,Jr))n.error(`  ${d}`);return y(r,i.pid??process.pid),{code:s.exitCode===0?1:s.exitCode}}i.pid!==void 0&&L(r)?.pid===process.pid&&x(r,{logFile:t,pid:i.pid});const a=i.pid===void 0?"":` (pid ${String(i.pid)})`;return n.warn(`dev server did not confirm ready within ${String(Math.round(o/1e3))}s — it may still be compiling${a}. Check \`lunora dev status\` and \`lunora dev logs\`; \`lunora dev stop\` shuts it down.`),{code:1}},Ee=e=>e.codegen!==!1&&!$e(process.env[fe]),be=e=>{const r={...e.remote===!0?{LUNORA_REMOTE:"1"}:{},...e.codegen===!1?{[fe]:"0"}:{}};return Object.keys(r).length>0?{env:r}:{}},rt=(e,r)=>{const n=["dev"];return e.apiSpec!==void 0&&n.push("--api-spec",e.apiSpec),e.port!==void 0&&n.push("--port",String(e.port)),e.workerPort!==void 0&&n.push("--worker-port",String(e.workerPort)),e.inspectorPort!==void 0&&n.push("--inspector-port",String(e.inspectorPort)),e.emitBindings!==void 0&&n.push("--emit-bindings",e.emitBindings),e.codegen===!1&&n.push("--no-codegen"),e.studio===!1&&n.push("--no-studio"),e.worker===!1&&n.push("--no-worker"),e.target!==void 0&&n.push("--target",e.target),r&&n.push("--remote"),n},tt=async e=>{const{cwd:r,jsonLogs:n,logger:t,options:o,remote:i}=e,s=e.run??et,a=D(r),d=a==="wrangler"?`http://localhost:${String(o.workerPort??8787)}`:"http://localhost:5173",u=ce(r,{background:!0,mode:"cli",pid:process.pid,startedAt:new Date().toISOString(),url:d});if(!u.ok)return u.existing!==void 0&&I(t,u.existing),{code:0};const g={[T]:String(process.pid)};try{return a==="vite"?await s({command:he(r),cwd:r,env:{...be({...o,remote:i}).env,...g},json:n,logger:t}):await s({command:{args:[process.argv[1]??"lunora",...rt(o,i)],command:process.execPath},cwd:r,env:g,json:n,logger:t})}finally{y(r,process.pid)}},nt=e=>{try{const r=N("ps",["-o","pgid=","-p",String(e)],{encoding:"utf8"}),n=Number.parseInt(r.stdout.trim(),10);return Number.isInteger(n)&&n>0?n:void 0}catch{return}},ot=(e,r,n=process.platform,t=N)=>{if(n==="win32"){try{t("taskkill",["/pid",String(e.pid),"/T","/F"],{stdio:"ignore"})}catch{}return}if(e.background===!0)try{r(-(nt(e.pid)??e.pid),"SIGKILL");return}catch{}try{r(e.pid,"SIGKILL")}catch{}},it=(e,r)=>(r.json?k({pid:e.pid,stopped:!1}):r.logger.error(`dev server (pid ${String(e.pid)}) survived the force-kill — record kept; retry \`lunora dev stop\` or kill the process manually.`),{code:1}),st=async e=>{const{cwd:r,logger:n}=e,t=L(r),o=e.alive??(m=>m===t?.pid&&De(t)),i=e.signal??((m,p)=>{process.kill(m,p)}),s=e.pollIntervalMs??U,a=e.stopGraceMs??Kr,d=e.platform??process.platform,u=e.spawnSyncImpl??N;if(t===void 0||!o(t.pid))return t!==void 0&&y(r,t.pid),e.json?k({running:!1,stopped:!1}):n.info("No dev server running."),{code:0};try{i(t.pid,"SIGTERM")}catch{}const g=Date.now()+a;for(;o(t.pid)&&Date.now()<g;)await R(s);return o(t.pid)&&(ot(t,i,d,u),await R(s),o(t.pid))?it(t,e):(y(r,t.pid),e.json?k({pid:t.pid,stopped:!0}):n.success(`Stopped dev server (pid ${String(t.pid)}).`),{code:0})},at=e=>{const{cwd:r,logger:n}=e,t=O(r);if(t===void 0)return e.json?k({running:!1}):n.info("No dev server running."),{code:0};const o=e.now??Date.now,i=t.startedAt===void 0?Number.NaN:Date.parse(t.startedAt),s=Number.isFinite(i)?Math.max(0,Math.round((o()-i)/1e3)):void 0;if(e.json)return k({background:t.background===!0,logFile:t.logFile,mode:t.mode,pid:t.pid,ready:W(t),readyAt:t.readyAt,running:!0,startedAt:t.startedAt,studioUrl:t.studioUrl,uptimeSeconds:s,url:t.url}),{code:0};const a=[`pid ${String(t.pid)}`,...s===void 0?[]:[`uptime ${String(s)}s`],t.background===!0?"background":"foreground",W(t)?"ready":"starting"];return n.success(`Dev server running at ${t.url} (${a.join(", ")})`),t.studioUrl!==void 0&&n.info(`  Studio: ${t.studioUrl}`),t.logFile!==void 0&&n.info(`  Logs:   lunora dev logs (${t.logFile})`),{code:0}},ct=e=>{const{cwd:r,logger:n}=e,t=L(r),o=ye(r,t);if(!C(o))return n.info("No dev server logs found — output is captured when the server runs in background mode (`lunora dev --background`)."),{code:0};const i=Se(o,e.lines??Yr);return i.length>0&&process.stdout.write(`${i.join(`
+import{spawnSync as N,spawn as oe}from"node:child_process";import{existsSync as C,watch as Te,readFileSync as M,mkdirSync as _e,openSync as ie,closeSync as se,statSync as Ie,readSync as Le}from"node:fs";import{join as k,dirname as Re}from"node:path";import{runCodegen as ae}from"@lunora/codegen";import{runPostCodegenHook as Ae,detectAgentRules as ce,updateDevServerState as x,readDevServerState as R,claimDevServerState as de,DEV_HANDOFF_ENV as T,clearDevServerState as y,readLiveDevServerState as A,isDevServerReady as B,detectFramework as le,readProjectDependencyNames as Oe,DEV_LOG_FILE_ENV as ue,DEV_DAEMON_ENV as F,detectPackageManager as fe,execArgsFor as $,isRecordedProcessCurrent as De,DEV_LOG_FILE as $e,CODEGEN_ENV as ge,isCodegenDisabled as Ne,detectAiAgent as Ce,readProjectRemotePreference as Me,inferLunoraBindings as xe,packageNamesFromBindings as Fe,ensureDevVarsExample as je,ensureDevVariables as Ge,isInteractive as Ue,DEV_VARS_FILE as _,DEV_VARS_EXAMPLE_FILE as Ve,fillDevSecrets as We,DEV_BINDINGS_FILE as Be,DEV_STATE_FILE as ve,claimAgentRulesHint as He,AGENT_RULES_HINT as Ke,resolveDeployDriver as Ye,resolveProjectTarget as Je,runScriptCommand as Xe,discoverContainerInfo as ze,streamContainerLogs as Qe,parseDevVariableEntries as Ze,formatLunoraEvent as qe}from"@lunora/config";import{resolveRemoteEnabled as er,findWranglerFile as j,readWranglerJsonc as G,materializeRemoteWranglerConfig as rr}from"@lunora/config/cloudflare";import{p as tr,a as nr}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{w as or}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{a as ir}from"../packem_shared/codegen-error-AmH54ofi.mjs";import{a as sr}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{d as ar}from"../packem_shared/command-Mmxzxyr5.mjs";import{EXIT_CODE as U}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{createServer as cr,connect as dr}from"node:net";import{forceJsonLogging as lr}from"../packem_shared/createLogger-Cl18I8AX.mjs";import{networkInterfaces as ur}from"node:os";import{spawnShellCompat as me}from"../packem_shared/createRecordingSpawner-sS7LEN7x.mjs";import{createServer as fr,request as gr}from"node:http";import{pipeline as vr}from"node:stream";import{loadStudioAssets as H,studioAssetsStamp as K,renderStudioHtml as mr,resolveAdminToken as pr,transportRejectionReason as Y,SCHEMA_EDIT_ENDPOINT as wr,POLICY_SCAFFOLD_ENDPOINT as hr,SEED_ENDPOINT as Sr,sendStudioDocument as yr,serveJsonHandler as Er,isStandaloneModulePath as kr,readStandaloneAsset as br,assetContentType as Pr,handleSchemaEditRequest as Tr,handlePolicyScaffoldRequest as _r,handleSeedRequest as Ir,applyStudioAssetCache as Lr}from"@lunora/config/studio-host";import{c as Rr}from"../packem_shared/tui-prompts-B3YwUhGw.mjs";import{setTimeout as I}from"node:timers/promises";import{provisionBindings as Ar}from"./runDeployCommand.mjs";import{a as E}from"../packem_shared/render-lunora-error--4tmM6mt.mjs";const Or=100,Dr=300,$r=/[/\\]/u,Nr=(e,r,n)=>{const{apiSpec:t,logger:o,projectRoot:i,target:s}=e;try{const a=ae({apiSpec:t,lunoraDirectory:r,projectRoot:i,target:s});o.success(`codegen: wrote ${r}/_generated (${n})`),sr(a.platformDiagnostics,o)}catch(a){return o.error(ir(a,n)),!1}return!0},Cr=e=>{const r=e.lunoraDirectory??"lunora",n=k(e.projectRoot,r),t=e.debounceMs??Or;let o=!1,i=!1,s=!1,a,d=0,u=Promise.resolve(),g;const m=new Promise(v=>{g=v}),p=v=>{o||(a=v,!i&&(i=!0,u=(async()=>{try{for(;a!==void 0;){const h=a;if(a=void 0,!!Nr(e,r,h)){s=!0;try{(await Ae({cwd:e.projectRoot,logger:e.logger,spawner:e.spawner,stdoutToStderr:e.jsonLogs})).ran&&(d=Date.now())}finally{s=!1}}}}catch(h){e.logger.error(`codegen watch: ${h instanceof Error?h.message:String(h)}`)}finally{i=!1,g()}})()))};p("startup");const l=v=>(e.logger.warn(`codegen watch unavailable (${v}) — schema edits will NOT auto-regenerate. Run \`lunora codegen\` manually after each edit.`),{close:()=>(o=!0,a=void 0,u),ready:m,watchAvailable:!1});let c,f;if(!C(n))return l(`no such directory: ${n}`);try{f=Te(n,{recursive:!0},(v,h)=>{if(!(typeof h=="string"&&h.split($r).includes("_generated"))){if(s||Date.now()-d<Dr){c&&(clearTimeout(c),c=void 0);return}c&&clearTimeout(c),c=setTimeout(()=>{p(`change: ${h??"?"}`)},t)}})}catch(v){return l(v instanceof Error?v.message:String(v))}const w=f;return{close:()=>(o=!0,a=void 0,c&&clearTimeout(c),w.close(),u),ready:m,watchAvailable:!0}},Mr=64,pe="127.0.0.1",xr=65535,Fr=(e,r=pe)=>new Promise(n=>{const t=cr();t.once("error",()=>{n(!1)}),t.once("listening",()=>{t.close(()=>{n(!0)})}),t.listen(e,r)}),jr=async(e,r=pe,n=Mr)=>{for(let t=e;t<e+n&&t<=xr;t+=1)if(await Fr(t,r))return t;return e},J=(e=ur)=>Object.values(e()).some(r=>r?.some(n=>n.internal&&n.address==="::1")),X="/_lunora",z=e=>{const r=e.indexOf("?");return r===-1?e:e.slice(0,r)},Q=3e4,Z=(e,r,n)=>{const t=gr({headers:{...e.headers,host:n.host},hostname:n.hostname,method:e.method,path:e.url,port:n.port},o=>{r.writeHead(o.statusCode??502,o.headers),vr(o,r,()=>{})});t.setTimeout(Q,()=>{t.destroy(new Error(`no response within ${String(Q)}ms`))}),t.on("error",o=>{if(r.headersSent){r.destroy();return}r.statusCode=o.message.startsWith("no response within")?504:502,r.end(`lunora dev: worker unreachable (${o.message})`)}),r.on("close",()=>{r.writableFinished||t.destroy()}),e.pipe(t)},Gr=5e3,Ur=(e,r,n,t)=>{const o=dr({host:t.hostname,port:Number(t.port)},()=>{o.setTimeout(0);const i=[`${e.method??"GET"} ${e.url??"/"} HTTP/1.1`];for(const[s,a]of Object.entries(e.headers))if(s!=="host")for(const d of Array.isArray(a)?a:[a])d!==void 0&&i.push(`${s}: ${d}`);i.push(`host: ${t.host}`,"",""),o.write(i.join(`\r
+`)),n.length>0&&o.write(n),o.pipe(r),r.pipe(o)});o.setTimeout(Gr,()=>o.destroy()),o.on("error",()=>r.destroy()),r.on("error",()=>o.destroy())},Vr=async e=>{const r=e.host??"127.0.0.1",n=r==="127.0.0.1"||r==="localhost"||r==="::1",t=new URL(e.workerOrigin);let o=H(e.logger,import.meta.url),i=K(import.meta.url);const s=mr({adminToken:n?pr(e.cwd):void 0,basePath:"/",dataEditable:n,rulesInstalled:ce(e.cwd).installed,runAsIdentity:n,schemaEditable:n,scriptSrc:"/studio.js",styleHref:"/styles.css"}),a=(l,c,f,w,v)=>{Lr(l,c,v,i)||(c.statusCode=200,c.setHeader("Content-Type",w),c.end(f))},d=(l,c,f)=>{l.statusCode=c,l.setHeader("Content-Type","text/plain"),l.end(f)},u=(l,c,f,w)=>{if(n){Er(l,c,f,e.cwd,{apiSpec:e.apiSpec});return}d(c,403,w)},g=(l,c,f)=>{const w=l==="/styles.css",v=kr(l);if(!w&&!v)return!1;const h=K(import.meta.url);if(h!==i&&(o=H(e.logger,import.meta.url),i=h),o===void 0)return d(f,501,"Lunora studio assets not found — install and build @lunora/studio."),!0;if(w)return a(c,f,o.styles,"text/css; charset=utf-8","styles.css"),!0;const b=l.slice(l.lastIndexOf("/")+1),W=br(b,import.meta.url);return W===void 0?(d(f,404,"Not found"),!0):(a(c,f,W,Pr(b),b),!0)},m=Buffer.from(s),p=fr((l,c)=>{const f=z(l.url??"/");if(n){const v=Y(l,e.logger);if(v!==void 0){d(c,403,v);return}}if(f.startsWith(X)){if(!n){d(c,403,"Lunora studio: the worker admin proxy is only available on a loopback bind.");return}Z(l,c,t);return}if(f===wr){u(l,c,Tr,"Lunora schema editing is only available on loopback hosts in dev.");return}if(f===hr){u(l,c,_r,"Lunora policy scaffolding is only available on loopback hosts in dev.");return}if(f===Sr){u(l,c,Ir,"Lunora data seeding is only available on loopback hosts in dev.");return}if(g(f,l,c))return;const w=l.headers["sec-fetch-mode"];if(n&&typeof w=="string"&&w!=="navigate"){Z(l,c,t);return}yr(c,m)});return p.on("upgrade",(l,c,f)=>{if(!n||Y(l,e.logger)!==void 0){c.destroy();return}z(l.url??"").startsWith(X)?Ur(l,c,f,t):c.destroy()}),await new Promise((l,c)=>{p.once("error",f=>{f.code==="EADDRINUSE"?c(new Error(`studio port ${String(e.port)} is already in use — pass a different port with --port, or stop the process using it`,{cause:f})):c(f)}),p.listen(e.port,r,()=>{l()})}),{close:()=>new Promise(l=>{p.close(()=>{l()})}),url:`http://${r==="0.0.0.0"||r==="::"?"localhost":r}:${String(e.port)}`}},Wr=12e4,V=250,Br=1e3,Hr="LUNORA_DEV_READY_TIMEOUT_MS",we=e=>{if(e!==void 0)return e;const r=Number(process.env[Hr]??"");return Number.isFinite(r)&&r>0?r:Wr},he=async(e,r)=>{try{const n=AbortSignal.timeout(Br);return await(await fetch(new URL("/_lunora/status",e),{redirect:"manual",signal:r===void 0?n:AbortSignal.any([r,n])})).body?.cancel(),!0}catch{return!1}},Kr=async e=>{const{cwd:r,logger:n,origin:t,signal:o}=e,i=e.probe??he,s=we(e.readyTimeoutMs),a=Date.now()+s,d=()=>o.aborted;for(;!d()&&Date.now()<a;){let u=!1;try{u=await i(t,o)}catch{}if(d()||Date.now()>=a)break;if(u)return x(r,{readyAt:new Date().toISOString()},{expectedPid:process.pid}),R(r)?.readyAt!==void 0;try{await I(V,void 0,{signal:o})}catch{}}return d()||n.warn(`server did not answer on ${t} within ${String(Math.round(s/1e3))}s — .lunora/dev.json will have no readyAt, so anything polling for readiness will keep waiting. The server itself is unaffected; raise LUNORA_DEV_READY_TIMEOUT_MS if it is just slow to boot.`),!1},Yr=1e4,Jr=100,Xr=40,P=256*1024,zr=new Set(["nuxt","sveltekit"]),O=e=>zr.has(le(e).framework)?"framework-worker":Oe(e).has("@lunora/vite")?"vite":"wrangler",Se=e=>{const r=fe(e);let n;try{const t=M(k(e,"package.json"),"utf8");n=JSON.parse(t).scripts?.dev}catch{}if(n===void 0||n.trim()===""||n.includes("lunora")){const t=$(r,"vite",["dev"]);return{args:t.args,command:t.command}}return{args:["run","dev"],command:r}},Qr=e=>{_e(Re(e.logPath),{recursive:!0});const r=ie(e.logPath,"w",384);let n;const t=me(e.command,e.args);try{n=oe(t.command,t.args,{cwd:e.cwd,detached:!0,env:e.env,shell:t.shell,stdio:["ignore",r,r],windowsHide:!0})}finally{se(r)}return n.unref(),{exited:new Promise(o=>{n.on("error",()=>{o(1)}),n.on("exit",(i,s)=>{o(i??(s?1:0))})}),pid:n.pid}},Zr=e=>{try{const{size:r}=Ie(e);if(r<=P)return M(e,"utf8");const n=ie(e,"r");try{const t=Buffer.alloc(P),o=Le(n,t,0,P,r-P),i=t.toString("utf8",0,o);return i.slice(i.indexOf(`
+`)+1)}finally{se(n)}}catch{return}},ye=(e,r)=>{const n=Zr(e);if(n===void 0)return[];const t=n.split(`
+`);return t.at(-1)===""&&t.pop(),r>0?t.slice(-r):t},Ee=(e,r)=>r?.logFile??k(e,$e),ke=e=>{e.info("  Stop:   lunora dev stop"),e.info("  Status: lunora dev status"),e.info("  Logs:   lunora dev logs")},L=(e,r)=>{e.warn(`Dev server already running at ${r.url} (pid ${String(r.pid)})`),ke(e)},qr=(e,r)=>{e.success(`Dev server running at ${r.url} (pid ${String(r.pid)})`),r.studioUrl!==void 0&&e.info(`  Studio: ${r.studioUrl}`),ke(e)},et=async e=>{const{child:r,cwd:n,deadline:t,pollIntervalMs:o,probe:i}=e,s=r.exited.then(a=>({exitCode:a}));for(;Date.now()<t;){const a=A(n);if(a!==void 0&&a.pid!==process.pid&&await i(a.url))return{state:a,status:"ready"};const d=await Promise.race([s,I(o)]);if(d!==void 0)return{...d,status:"exited"}}return{status:"timeout"}},rt=async e=>{const{cwd:r,logger:n}=e,t=Ee(r,void 0),o=we(e.readyTimeoutMs),i=(e.spawnDetached??Qr)({args:e.command.args,command:e.command.command,cwd:r,env:{...process.env,...e.env,[F]:"1",[ue]:t,...process.env.FORCE_COLOR===void 0?{NO_COLOR:"1"}:{},...e.json?{LUNORA_LOG_JSON:"1"}:{}},logPath:t}),s=await et({child:i,cwd:r,deadline:Date.now()+o,pollIntervalMs:e.pollIntervalMs??V,probe:e.probe??he});if(s.status==="ready")return qr(n,s.state),{code:0};if(s.status==="exited"){n.error(`dev server exited before becoming ready (exit code ${String(s.exitCode)}). Last output:`);for(const d of ye(t,Xr))n.error(`  ${d}`);return y(r,i.pid??process.pid),{code:s.exitCode===0?1:s.exitCode}}i.pid!==void 0&&R(r)?.pid===process.pid&&x(r,{logFile:t,pid:i.pid});const a=i.pid===void 0?"":` (pid ${String(i.pid)})`;return n.warn(`dev server did not confirm ready within ${String(Math.round(o/1e3))}s — it may still be compiling${a}. Check \`lunora dev status\` and \`lunora dev logs\`; \`lunora dev stop\` shuts it down.`),{code:U.UNAVAILABLE}},be=e=>e.codegen!==!1&&!Ne(process.env[ge]),Pe=e=>{const r={...e.remote===!0?{LUNORA_REMOTE:"1"}:{},...e.codegen===!1?{[ge]:"0"}:{}};return Object.keys(r).length>0?{env:r}:{}},tt=(e,r)=>{const n=["dev"];return e.apiSpec!==void 0&&n.push("--api-spec",e.apiSpec),e.port!==void 0&&n.push("--port",String(e.port)),e.workerPort!==void 0&&n.push("--worker-port",String(e.workerPort)),e.inspectorPort!==void 0&&n.push("--inspector-port",String(e.inspectorPort)),e.emitBindings!==void 0&&n.push("--emit-bindings",e.emitBindings),e.codegen===!1&&n.push("--no-codegen"),e.studio===!1&&n.push("--no-studio"),e.worker===!1&&n.push("--no-worker"),e.target!==void 0&&n.push("--target",e.target),r&&n.push("--remote"),n},nt=async e=>{const{cwd:r,jsonLogs:n,logger:t,options:o,remote:i}=e,s=e.run??rt,a=O(r),d=a==="wrangler"?`http://localhost:${String(o.workerPort??8787)}`:"http://localhost:5173",u=de(r,{background:!0,mode:"cli",pid:process.pid,startedAt:new Date().toISOString(),url:d});if(!u.ok)return u.existing!==void 0&&L(t,u.existing),{code:0};const g={[T]:String(process.pid)};try{return a==="vite"?await s({command:Se(r),cwd:r,env:{...Pe({...o,remote:i}).env,...g},json:n,logger:t}):await s({command:{args:[process.argv[1]??"lunora",...tt(o,i)],command:process.execPath},cwd:r,env:g,json:n,logger:t})}finally{y(r,process.pid)}},ot=e=>{try{const r=N("ps",["-o","pgid=","-p",String(e)],{encoding:"utf8"}),n=Number.parseInt(r.stdout.trim(),10);return Number.isInteger(n)&&n>0?n:void 0}catch{return}},it=(e,r,n=process.platform,t=N)=>{if(n==="win32"){try{t("taskkill",["/pid",String(e.pid),"/T","/F"],{stdio:"ignore"})}catch{}return}if(e.background===!0)try{r(-(ot(e.pid)??e.pid),"SIGKILL");return}catch{}try{r(e.pid,"SIGKILL")}catch{}},st=(e,r)=>(r.json?E({pid:e.pid,stopped:!1}):r.logger.error(`dev server (pid ${String(e.pid)}) survived the force-kill — record kept; retry \`lunora dev stop\` or kill the process manually.`),{code:1}),at=async e=>{const{cwd:r,logger:n}=e,t=R(r),o=e.alive??(m=>m===t?.pid&&De(t)),i=e.signal??((m,p)=>{process.kill(m,p)}),s=e.pollIntervalMs??V,a=e.stopGraceMs??Yr,d=e.platform??process.platform,u=e.spawnSyncImpl??N;if(t===void 0||!o(t.pid))return t!==void 0&&y(r,t.pid),e.json?E({running:!1,stopped:!1}):n.info("No dev server running."),{code:0};try{i(t.pid,"SIGTERM")}catch{}const g=Date.now()+a;for(;o(t.pid)&&Date.now()<g;)await I(s);return o(t.pid)&&(it(t,i,d,u),await I(s),o(t.pid))?st(t,e):(y(r,t.pid),e.json?E({pid:t.pid,stopped:!0}):n.success(`Stopped dev server (pid ${String(t.pid)}).`),{code:0})},ct=e=>{const{cwd:r,logger:n}=e,t=A(r);if(t===void 0)return e.json?E({running:!1}):n.info("No dev server running."),{code:0};const o=e.now??Date.now,i=t.startedAt===void 0?Number.NaN:Date.parse(t.startedAt),s=Number.isFinite(i)?Math.max(0,Math.round((o()-i)/1e3)):void 0;if(e.json)return E({background:t.background===!0,logFile:t.logFile,mode:t.mode,pid:t.pid,ready:B(t),readyAt:t.readyAt,running:!0,startedAt:t.startedAt,studioUrl:t.studioUrl,uptimeSeconds:s,url:t.url}),{code:0};const a=[`pid ${String(t.pid)}`,...s===void 0?[]:[`uptime ${String(s)}s`],t.background===!0?"background":"foreground",B(t)?"ready":"starting"];return n.success(`Dev server running at ${t.url} (${a.join(", ")})`),t.studioUrl!==void 0&&n.info(`  Studio: ${t.studioUrl}`),t.logFile!==void 0&&n.info(`  Logs:   lunora dev logs (${t.logFile})`),{code:0}},dt=e=>{const{cwd:r,logger:n}=e,t=R(r),o=Ee(r,t);if(!C(o))return n.info("No dev server logs found — output is captured when the server runs in background mode (`lunora dev --background`)."),{code:0};const i=ye(o,e.lines??Jr);return i.length>0&&process.stdout.write(`${i.join(`
 `)}
-`),{code:0}},dt=e=>{const{cwd:r,json:n,lines:t,logger:o,subcommand:i}=e;if(i==="stop")return st({cwd:r,json:n,logger:o});if(i==="status")return at({cwd:r,json:n,logger:o});if(i==="logs")return ct({cwd:r,lines:t,logger:o});if(i!==void 0)return o.error(`dev: unknown subcommand "${i}" — expected stop | status | logs (or no subcommand to start the dev server)`),{code:1}},A="wrangler.dev.jsonc",Z=6173,S=8787,q=5173,lt=5e3,ut=(e,r)=>{const n=()=>{};if(!e.remote)return{args:[],plan:{bindings:[],cleanup:n,enabled:!1}};const o=(e.materializeRemote??er)({enabled:!0,projectRoot:r}),i=o.remoteBindings.map(a=>`${a.binding} (${a.kind})`),{cleanup:s}=o;return o.configPath===void 0?{args:[],plan:{bindings:i,cleanup:s,enabled:!0,reason:o.reason}}:{args:["--config",o.configPath],plan:{bindings:i,cleanup:s,enabled:!0}}},ee=e=>G(e).parsed?.dev?.ip,re=(e,r,n)=>{if(n!==void 0){const o=E(e,n);if(C(o)&&ee(o)!==void 0)return[]}const t=j(e);return t!==void 0&&ee(t)!==void 0?[]:r()?[]:["--ip","127.0.0.1"]},ft=new Set(["127.0.0.1","::1","[::1]","localhost"]),gt=(e,r)=>{let n;try{n=M(E(e,_),"utf8")}catch{return[]}const t=[];for(const o of Qe(n)){let i;try{i=new URL(o.value)}catch{continue}ft.has(i.hostname)&&i.port===String(r)&&t.push(o.key)}return t},vt=async(e,r)=>{if(e.workerPort!==void 0)return e.workerPort;const n=j(r);if(n!==void 0){const{parsed:i}=G(n);if(typeof i?.dev?.port=="number")return i.dev.port}const t=await(e.findFreePort??Fr)(S);if(t===S)return t;const o=gt(r,S);if(o.length>0)throw new Error(`port ${String(S)} is in use, but ${_} pins the worker origin to it (${o.join(", ")}). Serving on ${String(t)} would leave those URLs pointing at nothing. Stop whatever holds ${String(S)}, or run \`lunora dev --worker-port ${String(t)}\` and update those values to match.`);return t},mt=(e,r)=>{if(e.inspectorPort!==void 0)return e.inspectorPort;const n=j(r);if(n===void 0)return;const{parsed:t}=G(n),o=t?.dev?.inspector_port;return typeof o=="number"?o:void 0},pt=e=>{const r=e.cwd??process.cwd(),n=ue(r),t=e.flavor??D(r);if(t==="vite"||t==="framework-worker"){const m=he(r);let p;if(t==="framework-worker"){const l=re(r,e.hasIpv6Loopback??Y,A),c=Ke(Ye(r)).toolchain?.dev({configPath:A,extraArgs:[...l,"--var","WORKER_ENV:development"]}),f=$(n,c?.tool??"wrangler",c?.args??[]);p={args:f.args,command:f.command,cwd:r,tag:"worker"}}return e.worker===!1&&e.logger.warn(`--no-worker does not apply to the ${t} flavor: Vite owns the worker, codegen and studio in-process. Run your framework's dev script instead.`),e.inspectorPort!==void 0&&e.logger.warn(t==="framework-worker"?`--inspector-port does not apply to the ${t} flavor: pin \`dev.inspector_port\` in ${A} — that is the config the worker sidecar runs.`:`--inspector-port does not apply to the ${t} flavor: Vite owns the worker. Pin it in vite.config — \`lunora({ cloudflare: { inspectorPort: ${String(e.inspectorPort)} } })\`.`),{runsCodegenWatch:!1,flavor:t,ipv4LoopbackForced:!1,remote:{bindings:[],cleanup:()=>{},enabled:e.remote===!0},...p?{sidecar:p}:{},studioEnabled:!1,studioPort:e.port??Z,workerEnabled:!0,workerOrigin:`http://localhost:${String(q)}`,workerPort:q,wrangler:{args:m.args,command:m.command,cwd:r,...be(e),tag:"vite"}}}const o=de(r),i=o.framework==="none"?void 0:`this project uses ${o.framework} — the worker runs inside Vite there. run \`${Je(n,"dev")}\` for the full app (frontend + HMR); \`lunora dev\` starts only the worker.`,s=e.workerPort??S,a=ut(e,r),d=re(r,e.hasIpv6Loopback??Y),u=e.inspectorPort===void 0?[]:["--inspector-port",String(e.inspectorPort)],g=$(n,"wrangler",["dev","--port",String(s),...u,...d,"--var","WORKER_ENV:development",...a.args]);return{runsCodegenWatch:Ee(e),flavor:t,frameworkHint:i,ipv4LoopbackForced:d.length>0,remote:a.plan,studioEnabled:e.studio!==!1,studioPort:e.port??Z,workerEnabled:e.worker!==!1,workerOrigin:`http://localhost:${String(s)}`,workerPort:s,wrangler:{args:g.args,command:g.command,cwd:r,tag:"wrangler"}}},te=(e,r,n,t)=>{if(e.length===0)return;const o=Ze(e);if(o){t[o.level](`[lunora] ${o.text}`);return}const i=`[${r}] ${e}`;n==="stderr"?t.warn(i):t.info(i)},wt=(e,r,n)=>{const t=(o,i)=>{if(!o)return;let s="";o.on("data",a=>{s+=a.toString("utf8");const d=s.split(`
-`);s=d.pop()??"";for(const u of d)te(u.trimEnd(),r,i,n)}),o.on("end",()=>{te(s.trimEnd(),r,i,n),s=""})};t(e.stdout,"stdout"),t(e.stderr,"stderr")},ht=(e,r)=>{const n=ve(e.command,e.args),t=ne(n.command,n.args,{cwd:e.cwd??process.cwd(),env:e.env?{...process.env,...e.env}:process.env,shell:n.shell,stdio:["inherit","pipe","pipe"]});return wt(t,e.tag,r),{exited:new Promise(o=>{t.on("error",i=>{r.error(`[${e.tag}] failed to start: ${i.message}`),o(1)}),t.on("exit",(i,s)=>{o(i??(s?1:0))})}),kill:o=>{try{t.kill(o)}catch{}}}},St=(e,r,n,t)=>{e.info(""),e.success("Lunora dev"),e.info(`  ➜  Worker:     ${r.workerOrigin}`),n!==void 0&&e.info(`  ➜  Studio:     ${n}`),r.runsCodegenWatch&&e.info("  ➜  Codegen:    watching lunora/"),t!==void 0&&e.info(`  ➜  Supervisor: ${t} (needs) · ${ge} (status)`),r.remote.enabled&&(r.remote.bindings.length>0?e.info(`  ➜  Remote:     ${r.remote.bindings.join(", ")} → deployed worker`):e.warn(`  ➜  Remote:     requested but inactive (${r.remote.reason??"no eligible bindings"}) — running fully local`)),e.info("")},yt=(e,r)=>{ae(r).installed||!He()||(e.info(`  ⓘ  ${Be}`),e.info(""))},kt=(e,r)=>{if(process.env.LUNORA_CONTAINER_LOGS==="0")return;const t=Xe(e,"lunora").containers.map(o=>({className:o.className,exportName:o.exportName}));if(t.length!==0)return ze({containers:t,onLine:o=>{const i=`[container:${o.name}] ${o.text}`;o.level==="error"?r.warn(i):r.info(i)},onUnavailable:o=>{r.warn(`[container] Docker engine unreachable — container logs unavailable (${o})`)}})},Et=async e=>{e.readyProbe?.abort(),await e.codegen?.close().catch(()=>{}),e.containerLogs?.close(),await e.studio?.close().catch(()=>{});try{e.remoteCleanup?.()}catch{}},bt=async(e,r)=>{try{const t=await Me({projectRoot:r}),o=xe(t),i=(e.ensureExample??Fe)(r,o);i.length>0&&e.logger.info(`Updated .dev.vars.example with secrets for: ${o.join(", ")} (${i.join(", ")})`)}catch{}(await(e.ensureEnv??je)({confirm:Ir(),cwd:r,info:t=>{e.logger.info(t)}})).status==="declined"&&!Ge()&&e.logger.info(`hint: ${_} was not scaffolded (non-interactive run). Copy ${Ue} → ${_} and fill in secrets, or run \`lunora dev\` in an interactive terminal to scaffold automatically.`);try{(e.fillSecrets??Ve)({cwd:r,info:t=>{e.logger.info(t)}})}catch{}},Pt=(e,r,n,t,o)=>{if(e.flavor!=="wrangler")return;t!==void 0&&x(r,{studioUrl:t});let i;try{i=kt(r,n)}catch{}return St(n,e,t,o),i},Tt=(e,r)=>{const n=Number(process.env[T]),t=ce(r,{background:process.env[F]==="1",logFile:process.env[le],mode:"cli",pid:process.pid,startedAt:new Date().toISOString(),url:e.workerOrigin},Number.isInteger(n)&&n>0?{supersedePid:n}:void 0);return t.ok?void 0:t.existing},_t=e=>{const{cwd:r,destination:n,logger:t,plan:o}=e,i=n!==void 0,s=n??We,a=nr({destination:s,dev:{...o.flavor==="wrangler"?{origin:o.workerOrigin}:{},statusFile:ge},logger:i?t:{...t,success:()=>{},warn:()=>{}},projectRoot:r});return a.error!==void 0?i?a:(t.debug?.(`skipped the default binding manifest: ${a.error}`),{}):{written:s}},Rt=async e=>{const r=e.cwd??process.cwd(),n=e.flavor??D(r),t=n==="wrangler"?await vt(e,r):e.workerPort,o=n==="wrangler"?mt(e,r):e.inspectorPort;return pt({...e,cwd:r,flavor:n,inspectorPort:o,workerPort:t})},It=async e=>await new Promise(r=>{const n={},t=s=>{e.info(`received ${s} — shutting down`),n.sigint&&process.off("SIGINT",n.sigint),n.sigterm&&process.off("SIGTERM",n.sigterm),r(0)},o=()=>{t("SIGINT")},i=()=>{t("SIGTERM")};n.sigint=o,n.sigterm=i,process.on("SIGINT",o),process.on("SIGTERM",i)}),Lt=async(e,r,n)=>{let t=0,o;const i=u=>{e.kill(u),r?.kill(u)},s=()=>{t+=1,t===1?(n.info("received SIGINT — shutting down (press Ctrl-C again to force-kill)"),i("SIGTERM"),o=setTimeout(()=>{i("SIGKILL")},lt),o.unref()):i("SIGKILL")},a=()=>{i("SIGTERM")};process.on("SIGINT",s),process.on("SIGTERM",a);const d=await Promise.race([e.exited.then(u=>({code:u,who:"worker"})),...r===void 0?[]:[r.exited.then(u=>({code:u,who:"sidecar"}))]]);return r!==void 0&&(d.who==="sidecar"?(n.warn("[worker] the Lunora sidecar (wrangler dev) exited — shutting down the framework dev server"),e.kill("SIGTERM")):r.kill("SIGTERM"),await Promise.allSettled([e.exited,r.exited])),o&&clearTimeout(o),process.off("SIGINT",s),process.off("SIGTERM",a),d.code},Ot=async(e,r,n,t)=>{if(r.studioEnabled)try{return await(e.startStudio??Ur)({apiSpec:e.apiSpec,cwd:n,logger:{warnOnce:o=>{t.warn(o)}},port:r.studioPort,workerOrigin:r.workerOrigin})}catch(o){t.warn(`studio server failed to start (${o instanceof Error?o.message:String(o)}) — continuing without it`);return}},Dt=e=>{const r=[e.runsCodegenWatch?"codegen watch":void 0,e.studioEnabled?"studio":void 0].filter(t=>t!==void 0);return`--no-worker: not starting wrangler. ${r.length>0?`${r.join(" + ")} running`:"nothing else to run"}; your task runner owns the worker on ${e.workerOrigin}.`},At=(e,r,n,t,o)=>{if(!(e.sidecar===void 0||!Ee(r)))try{se({apiSpec:r.apiSpec,lunoraDirectory:"lunora",projectRoot:n,target:o})}catch(i){t.warn(`codegen (pre-sidecar) failed: ${i instanceof Error?i.message:String(i)} — the framework dev server will retry`)}},$t=async e=>{const{logger:r}=e,n=e.cwd??process.cwd(),t=e.flavor??D(n),o=tr(n,e.target);if(o.target===void 0)throw new Error(o.error??"unknown deploy target");const{target:i}=o;t==="wrangler"&&await Lr(n,r,void 0,i,void 0);const s=await Rt({...e,flavor:t}),a={remoteCleanup:s.remote.cleanup};try{const d=Number(process.env[T]),u=O(n);if(u!==void 0&&u.pid!==process.pid&&u.pid!==d)return I(r,u),{code:0,plan:s};const g=Tt(s,n);if(g!==void 0)return I(r,g),{code:0,plan:s};(s.flavor==="vite"||s.flavor==="framework-worker")&&(s.wrangler.env={...s.wrangler.env,[T]:String(process.pid)}),await bt(e,n),r.info(s.flavor==="vite"?"starting vite dev (worker + studio + codegen run inside Vite via @lunora/vite)":"starting wrangler dev + studio"),s.ipv4LoopbackForced&&r.info("no IPv6 loopback (::1) on this host — binding the worker to 127.0.0.1 (--ip) so wrangler dev doesn't crash. Pin `dev.ip` in wrangler.jsonc to override."),s.runsCodegenWatch&&(a.codegen=(e.startCodegen??Nr)({apiSpec:e.apiSpec,jsonLogs:e.jsonLogs,logger:r,projectRoot:n,target:i})),a.studio=await Ot(e,s,n,r);const m=_t({cwd:n,destination:e.emitBindings,logger:r,plan:s});if(m.error!==void 0)return r.error(m.error),{code:1,plan:s};await a.codegen?.ready;const p=a.studio?.url;s.frameworkHint!==void 0&&r.warn(s.frameworkHint);const l=()=>{s.flavor==="wrangler"&&(a.readyProbe=new AbortController,Br({cwd:n,logger:r,origin:s.workerOrigin,probe:e.probeReady,signal:a.readyProbe.signal}))};if(!s.workerEnabled)return l(),r.info(Dt(s)),{code:await(e.waitForInterrupt??It)(r),plan:s};At(s,e,n,r,i);const c=e.startWorker??ht,f=c(s.wrangler,r),w=s.sidecar===void 0?void 0:c(s.sidecar,r);return l(),a.containerLogs=Pt(s,n,r,p,m.written),yt(r,n),{code:await Lt(f,w,r),plan:s}}finally{a.readyProbe?.abort(),y(n,process.pid),await Et(a)}},Nt=e=>({codegen:e.codegen===!1?!1:void 0,studio:e.studio===!1?!1:void 0,worker:e.worker===!1?!1:void 0}),nn=sr(async({argument:e,cwd:r,logger:n,options:t})=>{const o=t.json===!0,i=dt({cwd:r,json:o,lines:t.lines,logger:n,subcommand:e[0]});if(i!==void 0)return i;const s=process.env[F]==="1",a=s?void 0:Ne(),d=o||a!==void 0;d&&dr(),a!==void 0&&t.background!==!0&&n.info(`AI agent detected (${a.name} via ${a.variable}) — starting the dev server in background mode with JSON logs. Set LUNORA_AGENT_MODE=0 to opt out.`);const u=qe({configPreference:Ce(r),envValue:process.env.LUNORA_REMOTE,flag:t.remote});if(!s&&(t.background===!0||a!==void 0)){const g=O(r);return g!==void 0?(I(n,g),{code:0}):tt({cwd:r,jsonLogs:d,logger:n,options:t,remote:u})}return $t({apiSpec:rr(t.apiSpec),cwd:r,emitBindings:t.emitBindings,inspectorPort:t.inspectorPort,jsonLogs:d,logger:n,port:t.port,remote:u,target:t.target,workerPort:t.workerPort,...Nt(t)})});export{ht as defaultWorkerSpawner,D as detectDevFlavor,nn as execute,Nt as negatableDevFlags,pt as planDevCommand,mt as resolveInspectorPort,vt as resolveWorkerPort,$t as runDevCommand};
+`),{code:0}},lt=e=>{const{cwd:r,json:n,lines:t,logger:o,subcommand:i}=e;if(i==="stop")return at({cwd:r,json:n,logger:o});if(i==="status")return ct({cwd:r,json:n,logger:o});if(i==="logs")return dt({cwd:r,lines:t,logger:o});if(i!==void 0)return o.error(`dev: unknown subcommand "${i}" — expected stop | status | logs (or no subcommand to start the dev server)`),{code:U.USAGE}},D="wrangler.dev.jsonc",q=6173,S=8787,ee=5173,ut=5e3,ft=(e,r)=>{const n=()=>{};if(!e.remote)return{args:[],plan:{bindings:[],cleanup:n,enabled:!1}};const o=(e.materializeRemote??rr)({enabled:!0,projectRoot:r}),i=o.remoteBindings.map(a=>`${a.binding} (${a.kind})`),{cleanup:s}=o;return o.configPath===void 0?{args:[],plan:{bindings:i,cleanup:s,enabled:!0,reason:o.reason}}:{args:["--config",o.configPath],plan:{bindings:i,cleanup:s,enabled:!0}}},re=e=>G(e).parsed?.dev?.ip,te=(e,r,n)=>{if(n!==void 0){const o=k(e,n);if(C(o)&&re(o)!==void 0)return[]}const t=j(e);return t!==void 0&&re(t)!==void 0?[]:r()?[]:["--ip","127.0.0.1"]},gt=new Set(["127.0.0.1","::1","[::1]","localhost"]),vt=(e,r)=>{let n;try{n=M(k(e,_),"utf8")}catch{return[]}const t=[];for(const o of Ze(n)){let i;try{i=new URL(o.value)}catch{continue}gt.has(i.hostname)&&i.port===String(r)&&t.push(o.key)}return t},mt=async(e,r)=>{if(e.workerPort!==void 0)return e.workerPort;const n=j(r);if(n!==void 0){const{parsed:i}=G(n);if(typeof i?.dev?.port=="number")return i.dev.port}const t=await(e.findFreePort??jr)(S);if(t===S)return t;const o=vt(r,S);if(o.length>0)throw new Error(`port ${String(S)} is in use, but ${_} pins the worker origin to it (${o.join(", ")}). Serving on ${String(t)} would leave those URLs pointing at nothing. Stop whatever holds ${String(S)}, or run \`lunora dev --worker-port ${String(t)}\` and update those values to match.`);return t},pt=(e,r)=>{if(e.inspectorPort!==void 0)return e.inspectorPort;const n=j(r);if(n===void 0)return;const{parsed:t}=G(n),o=t?.dev?.inspector_port;return typeof o=="number"?o:void 0},wt=e=>{const r=e.cwd??process.cwd(),n=fe(r),t=e.flavor??O(r);if(t==="vite"||t==="framework-worker"){const m=Se(r);let p;if(t==="framework-worker"){const l=te(r,e.hasIpv6Loopback??J,D),c=Ye(Je(r)).toolchain?.dev({configPath:D,extraArgs:[...l,"--var","WORKER_ENV:development"]}),f=$(n,c?.tool??"wrangler",c?.args??[]);p={args:f.args,command:f.command,cwd:r,tag:"worker"}}return e.worker===!1&&e.logger.warn(`--no-worker does not apply to the ${t} flavor: Vite owns the worker, codegen and studio in-process. Run your framework's dev script instead.`),e.inspectorPort!==void 0&&e.logger.warn(t==="framework-worker"?`--inspector-port does not apply to the ${t} flavor: pin \`dev.inspector_port\` in ${D} — that is the config the worker sidecar runs.`:`--inspector-port does not apply to the ${t} flavor: Vite owns the worker. Pin it in vite.config — \`lunora({ cloudflare: { inspectorPort: ${String(e.inspectorPort)} } })\`.`),{runsCodegenWatch:!1,flavor:t,ipv4LoopbackForced:!1,remote:{bindings:[],cleanup:()=>{},enabled:e.remote===!0},...p?{sidecar:p}:{},studioEnabled:!1,studioPort:e.port??q,workerEnabled:!0,workerOrigin:`http://localhost:${String(ee)}`,workerPort:ee,wrangler:{args:m.args,command:m.command,cwd:r,...Pe(e),tag:"vite"}}}const o=le(r),i=o.framework==="none"?void 0:`this project uses ${o.framework} — the worker runs inside Vite there. run \`${Xe(n,"dev")}\` for the full app (frontend + HMR); \`lunora dev\` starts only the worker.`,s=e.workerPort??S,a=ft(e,r),d=te(r,e.hasIpv6Loopback??J),u=e.inspectorPort===void 0?[]:["--inspector-port",String(e.inspectorPort)],g=$(n,"wrangler",["dev","--port",String(s),...u,...d,"--var","WORKER_ENV:development",...a.args]);return{runsCodegenWatch:be(e),flavor:t,frameworkHint:i,ipv4LoopbackForced:d.length>0,remote:a.plan,studioEnabled:e.studio!==!1,studioPort:e.port??q,workerEnabled:e.worker!==!1,workerOrigin:`http://localhost:${String(s)}`,workerPort:s,wrangler:{args:g.args,command:g.command,cwd:r,tag:"wrangler"}}},ne=(e,r,n,t)=>{if(e.length===0)return;const o=qe(e);if(o){t[o.level](`[lunora] ${o.text}`);return}const i=`[${r}] ${e}`;n==="stderr"?t.warn(i):t.info(i)},ht=(e,r,n)=>{const t=(o,i)=>{if(!o)return;let s="";o.on("data",a=>{s+=a.toString("utf8");const d=s.split(`
+`);s=d.pop()??"";for(const u of d)ne(u.trimEnd(),r,i,n)}),o.on("end",()=>{ne(s.trimEnd(),r,i,n),s=""})};t(e.stdout,"stdout"),t(e.stderr,"stderr")},St=(e,r)=>{const n=me(e.command,e.args),t=oe(n.command,n.args,{cwd:e.cwd??process.cwd(),env:e.env?{...process.env,...e.env}:process.env,shell:n.shell,stdio:["inherit","pipe","pipe"]});return ht(t,e.tag,r),{exited:new Promise(o=>{t.on("error",i=>{r.error(`[${e.tag}] failed to start: ${i.message}`),o(1)}),t.on("exit",(i,s)=>{o(i??(s?1:0))})}),kill:o=>{try{t.kill(o)}catch{}}}},yt=(e,r,n,t)=>{e.info(""),e.success("Lunora dev"),e.info(`  ➜  Worker:     ${r.workerOrigin}`),n!==void 0&&e.info(`  ➜  Studio:     ${n}`),r.runsCodegenWatch&&e.info("  ➜  Codegen:    watching lunora/"),t!==void 0&&e.info(`  ➜  Supervisor: ${t} (needs) · ${ve} (status)`),r.remote.enabled&&(r.remote.bindings.length>0?e.info(`  ➜  Remote:     ${r.remote.bindings.join(", ")} → deployed worker`):e.warn(`  ➜  Remote:     requested but inactive (${r.remote.reason??"no eligible bindings"}) — running fully local`)),e.info("")},Et=(e,r)=>{ce(r).installed||!He()||(e.info(`  ⓘ  ${Ke}`),e.info(""))},kt=(e,r)=>{if(process.env.LUNORA_CONTAINER_LOGS==="0")return;const t=ze(e,"lunora").containers.map(o=>({className:o.className,exportName:o.exportName}));if(t.length!==0)return Qe({containers:t,onLine:o=>{const i=`[container:${o.name}] ${o.text}`;o.level==="error"?r.warn(i):r.info(i)},onUnavailable:o=>{r.warn(`[container] Docker engine unreachable — container logs unavailable (${o})`)}})},bt=async e=>{e.readyProbe?.abort(),await e.codegen?.close().catch(()=>{}),e.containerLogs?.close(),await e.studio?.close().catch(()=>{});try{e.remoteCleanup?.()}catch{}},Pt=async(e,r)=>{try{const t=await xe({projectRoot:r}),o=Fe(t),i=(e.ensureExample??je)(r,o);i.length>0&&e.logger.info(`Updated .dev.vars.example with secrets for: ${o.join(", ")} (${i.join(", ")})`)}catch{}(await(e.ensureEnv??Ge)({confirm:Rr(),cwd:r,info:t=>{e.logger.info(t)}})).status==="declined"&&!Ue()&&e.logger.info(`hint: ${_} was not scaffolded (non-interactive run). Copy ${Ve} → ${_} and fill in secrets, or run \`lunora dev\` in an interactive terminal to scaffold automatically.`);try{(e.fillSecrets??We)({cwd:r,info:t=>{e.logger.info(t)}})}catch{}},Tt=(e,r,n,t,o)=>{if(e.flavor!=="wrangler")return;t!==void 0&&x(r,{studioUrl:t});let i;try{i=kt(r,n)}catch{}return yt(n,e,t,o),i},_t=(e,r)=>{const n=Number(process.env[T]),t=de(r,{background:process.env[F]==="1",logFile:process.env[ue],mode:"cli",pid:process.pid,startedAt:new Date().toISOString(),url:e.workerOrigin},Number.isInteger(n)&&n>0?{supersedePid:n}:void 0);return t.ok?void 0:t.existing},It=e=>{const{cwd:r,destination:n,logger:t,plan:o}=e,i=n!==void 0,s=n??Be,a=or({destination:s,dev:{...o.flavor==="wrangler"?{origin:o.workerOrigin}:{},statusFile:ve},logger:i?t:{...t,success:()=>{},warn:()=>{}},projectRoot:r});return a.error!==void 0?i?a:(t.debug?.(`skipped the default binding manifest: ${a.error}`),{}):{written:s}},Lt=async e=>{const r=e.cwd??process.cwd(),n=e.flavor??O(r),t=n==="wrangler"?await mt(e,r):e.workerPort,o=n==="wrangler"?pt(e,r):e.inspectorPort;return wt({...e,cwd:r,flavor:n,inspectorPort:o,workerPort:t})},Rt=async e=>await new Promise(r=>{const n={},t=s=>{e.info(`received ${s} — shutting down`),n.sigint&&process.off("SIGINT",n.sigint),n.sigterm&&process.off("SIGTERM",n.sigterm),r(0)},o=()=>{t("SIGINT")},i=()=>{t("SIGTERM")};n.sigint=o,n.sigterm=i,process.on("SIGINT",o),process.on("SIGTERM",i)}),At=async(e,r,n)=>{let t=0,o;const i=u=>{e.kill(u),r?.kill(u)},s=()=>{t+=1,t===1?(n.info("received SIGINT — shutting down (press Ctrl-C again to force-kill)"),i("SIGTERM"),o=setTimeout(()=>{i("SIGKILL")},ut),o.unref()):i("SIGKILL")},a=()=>{i("SIGTERM")};process.on("SIGINT",s),process.on("SIGTERM",a);const d=await Promise.race([e.exited.then(u=>({code:u,who:"worker"})),...r===void 0?[]:[r.exited.then(u=>({code:u,who:"sidecar"}))]]);return r!==void 0&&(d.who==="sidecar"?(n.warn("[worker] the Lunora sidecar (wrangler dev) exited — shutting down the framework dev server"),e.kill("SIGTERM")):r.kill("SIGTERM"),await Promise.allSettled([e.exited,r.exited])),o&&clearTimeout(o),process.off("SIGINT",s),process.off("SIGTERM",a),d.code},Ot=async(e,r,n,t)=>{if(r.studioEnabled)try{return await(e.startStudio??Vr)({apiSpec:e.apiSpec,cwd:n,logger:{warnOnce:o=>{t.warn(o)}},port:r.studioPort,workerOrigin:r.workerOrigin})}catch(o){t.warn(`studio server failed to start (${o instanceof Error?o.message:String(o)}) — continuing without it`);return}},Dt=e=>{const r=[e.runsCodegenWatch?"codegen watch":void 0,e.studioEnabled?"studio":void 0].filter(t=>t!==void 0);return`--no-worker: not starting wrangler. ${r.length>0?`${r.join(" + ")} running`:"nothing else to run"}; your task runner owns the worker on ${e.workerOrigin}.`},$t=(e,r,n,t,o)=>{if(!(e.sidecar===void 0||!be(r)))try{ae({apiSpec:r.apiSpec,lunoraDirectory:"lunora",projectRoot:n,target:o})}catch(i){t.warn(`codegen (pre-sidecar) failed: ${i instanceof Error?i.message:String(i)} — the framework dev server will retry`)}},Nt=async e=>{const{logger:r}=e,n=e.cwd??process.cwd(),t=e.flavor??O(n),o=nr(n,e.target);if(o.target===void 0)throw new Error(o.error??"unknown deploy target");const{target:i}=o;t==="wrangler"&&await Ar(n,r,void 0,i,void 0);const s=await Lt({...e,flavor:t}),a={remoteCleanup:s.remote.cleanup};try{const d=Number(process.env[T]),u=A(n);if(u!==void 0&&u.pid!==process.pid&&u.pid!==d)return L(r,u),{code:0,plan:s};const g=_t(s,n);if(g!==void 0)return L(r,g),{code:0,plan:s};(s.flavor==="vite"||s.flavor==="framework-worker")&&(s.wrangler.env={...s.wrangler.env,[T]:String(process.pid)}),await Pt(e,n),r.info(s.flavor==="vite"?"starting vite dev (worker + studio + codegen run inside Vite via @lunora/vite)":"starting wrangler dev + studio"),s.ipv4LoopbackForced&&r.info("no IPv6 loopback (::1) on this host — binding the worker to 127.0.0.1 (--ip) so wrangler dev doesn't crash. Pin `dev.ip` in wrangler.jsonc to override."),s.runsCodegenWatch&&(a.codegen=(e.startCodegen??Cr)({apiSpec:e.apiSpec,jsonLogs:e.jsonLogs,logger:r,projectRoot:n,target:i})),a.studio=await Ot(e,s,n,r);const m=It({cwd:n,destination:e.emitBindings,logger:r,plan:s});if(m.error!==void 0)return r.error(m.error),{code:U.USAGE,plan:s};await a.codegen?.ready;const p=a.studio?.url;s.frameworkHint!==void 0&&r.warn(s.frameworkHint);const l=()=>{s.flavor==="wrangler"&&(a.readyProbe=new AbortController,Kr({cwd:n,logger:r,origin:s.workerOrigin,probe:e.probeReady,signal:a.readyProbe.signal}))};if(!s.workerEnabled)return l(),r.info(Dt(s)),{code:await(e.waitForInterrupt??Rt)(r),plan:s};$t(s,e,n,r,i);const c=e.startWorker??St,f=c(s.wrangler,r),w=s.sidecar===void 0?void 0:c(s.sidecar,r);return l(),a.containerLogs=Tt(s,n,r,p,m.written),Et(r,n),{code:await At(f,w,r),plan:s}}finally{a.readyProbe?.abort(),y(n,process.pid),await bt(a)}},Ct=e=>({codegen:e.codegen===!1?!1:void 0,studio:e.studio===!1?!1:void 0,worker:e.worker===!1?!1:void 0}),sn=ar(async({argument:e,cwd:r,logger:n,options:t})=>{const o=t.json===!0,i=lt({cwd:r,json:o,lines:t.lines,logger:n,subcommand:e[0]});if(i!==void 0)return i;const s=process.env[F]==="1",a=s?void 0:Ce(),d=o||a!==void 0;d&&lr(),a!==void 0&&t.background!==!0&&n.info(`AI agent detected (${a.name} via ${a.variable}) — starting the dev server in background mode with JSON logs. Set LUNORA_AGENT_MODE=0 to opt out.`);const u=er({configPreference:Me(r),envValue:process.env.LUNORA_REMOTE,flag:t.remote});if(!s&&(t.background===!0||a!==void 0)){const g=A(r);return g!==void 0?(L(n,g),{code:0}):nt({cwd:r,jsonLogs:d,logger:n,options:t,remote:u})}return Nt({apiSpec:tr(t.apiSpec),cwd:r,emitBindings:t.emitBindings,inspectorPort:t.inspectorPort,jsonLogs:d,logger:n,port:t.port,remote:u,target:t.target,workerPort:t.workerPort,...Ct(t)})});export{St as defaultWorkerSpawner,O as detectDevFlavor,sn as execute,Ct as negatableDevFlags,wt as planDevCommand,pt as resolveInspectorPort,mt as resolveWorkerPort,Nt as runDevCommand};

package/dist/packem_chunks/runCodegenCommand.mjs

@@ -1,4 +1,4 @@
-import{runCodegen as y}from"@lunora/codegen";import{applyLintIgnores as A,detectLintTools as x,inferLunoraBindings as S}from"@lunora/config";import{collectWranglerSecretVariables as T,collectExportGaps as k}from"@lunora/config/cloudflare";import{r as b,a as D,e as R}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as C,r as E}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{d as L}from"../packem_shared/command-CrAs0XG_.mjs";import{r as j}from"../packem_shared/lint-ignore-report-DKZagpqk.mjs";import{l as f,v as I,p as O,i as G}from"../packem_shared/output-format-B91O3X28.mjs";const p=3,F=r=>{const t=r.cwd??process.cwd(),o=G(r.format),e=f(r.format,r.logger),a=I("codegen",r.format);if(a!==void 0)return r.logger.error(a),{advisories:[],cronTriggers:[],error:a,failedAdvisories:0,outputDirectory:""};const g=b(r),n=E(t,r.target);if(n.target===void 0)return r.logger.error(n.error??"unknown deploy target"),{advisories:[],cronTriggers:[],error:n.error??"unknown deploy target",failedAdvisories:0,outputDirectory:""};const{target:v}=n,s=y({apiSpec:r.apiSpec,projectRoot:t,target:v,wranglerVariables:T(t)}),l={advisories:s.advisories.map(i=>({detail:i.detail,level:i.level,name:i.name,remediation:i.remediation})),cronTriggers:s.cronTriggers,failedAdvisories:0,outputDirectory:s.outputDirectory};if(e.success(`codegen wrote dataModel.ts, api.ts, server.ts to ${s.outputDirectory}`),s.advisories.length>0){const i=s.advisories.length,$=s.advisories.map(c=>`  [${c.level}] ${c.name} — ${c.detail}
-      ↳ ${c.remediation}`);e.warn(`${i.toString()} schema ${i===1?"advisory":"advisories"}:
-${$.join(`
-`)}`)}const m=D(s.platformDiagnostics,e);m.errors.length>0&&(l.error=m.errors.join("; "));const{errorAdvisories:d,names:h,shouldBlock:w}=R(l.advisories,g);w&&e.error(`${d.length.toString()} ERROR-level ${d.length===1?"advisory":"advisories"} (${h.join(", ")}). Codegen wrote its output; this exit code is the gate. Pass --no-strict-advisories to downgrade it to a warning.`),s.cronTriggers.length>p&&e.warn(`${s.cronTriggers.length.toString()} distinct cron expressions declared — Cloudflare allows at most ${p.toString()} Cron Triggers per Worker. Consolidate schedules (jobs can share one expression) or move finer-grained work to Durable Object alarms via @lunora/scheduler (runAfter/runAt).`);const u={...l,failedAdvisories:g?d.length:0};return o&&O(u),u},N=async(r,t)=>{let o;try{o=k(await S({projectRoot:r}))}catch(e){t.warn(`could not check whether declared containers/workflows/agents are re-exported by the worker entry: ${e instanceof Error?e.message:String(e)}. Run \`lunora doctor\` to check explicitly.`);return}for(const e of o)t.warn(`${e.kind} "${e.exportName}" is declared but ${e.className} is not exported by the worker entry — add \`export * from "./lunora/_generated/${e.module}"\` so wrangler can provision its binding. Until then it deploys with nothing to run.`)},_=(r,t)=>{try{j(A(r,x(r)),t)}catch{}},q=L(async({cwd:r,logger:t,options:o})=>{const e=F({apiSpec:C(o.apiSpec),cwd:r,format:o.format,logger:t,strictAdvisories:o.strictAdvisories,target:o.target});if(e.outputDirectory!==""){const a=f(o.format,t);_(r,a),await N(r,a)}return{code:e.error===void 0&&e.failedAdvisories===0?0:1}});export{q as execute,F as runCodegenCommand};
+import{runCodegen as f}from"@lunora/codegen";import{applyLintIgnores as h,detectLintTools as w,inferLunoraBindings as y}from"@lunora/config";import{collectWranglerSecretVariables as $,collectExportGaps as A}from"@lunora/config/cloudflare";import{r as T,a as S,e as x}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as k,r as D}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{d as b}from"../packem_shared/command-Mmxzxyr5.mjs";import{EXIT_CODE as C}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{r as E}from"../packem_shared/lint-ignore-report-DKZagpqk.mjs";const p=3,R=r=>{const i=r.cwd??process.cwd(),{logger:t}=r,e=T(r),o=D(i,r.target);if(o.target===void 0)return r.logger.error(o.error??"unknown deploy target"),{advisories:[],code:C.USAGE,cronTriggers:[],error:o.error??"unknown deploy target",failedAdvisories:0,outputDirectory:""};const{target:a}=o,s=f({apiSpec:r.apiSpec,projectRoot:i,target:a,wranglerVariables:$(i)}),d={advisories:s.advisories.map(n=>({detail:n.detail,level:n.level,name:n.name,remediation:n.remediation})),cronTriggers:s.cronTriggers,failedAdvisories:0,outputDirectory:s.outputDirectory};if(t.success(`codegen wrote dataModel.ts, api.ts, server.ts to ${s.outputDirectory}`),s.advisories.length>0){const n=s.advisories.length,v=s.advisories.map(c=>`  [${c.level}] ${c.name} — ${c.detail}
+      ↳ ${c.remediation}`);t.warn(`${n.toString()} schema ${n===1?"advisory":"advisories"}:
+${v.join(`
+`)}`)}const g=S(s.platformDiagnostics,t);g.errors.length>0&&(d.error=g.errors.join("; "));const{errorAdvisories:l,names:u,shouldBlock:m}=x(d.advisories,e);return m&&t.error(`${l.length.toString()} ERROR-level ${l.length===1?"advisory":"advisories"} (${u.join(", ")}). Codegen wrote its output; this exit code is the gate. Pass --no-strict-advisories to downgrade it to a warning.`),s.cronTriggers.length>p&&t.warn(`${s.cronTriggers.length.toString()} distinct cron expressions declared — Cloudflare allows at most ${p.toString()} Cron Triggers per Worker. Consolidate schedules (jobs can share one expression) or move finer-grained work to Durable Object alarms via @lunora/scheduler (runAfter/runAt).`),{...d,failedAdvisories:e?l.length:0}},I=async(r,i)=>{let t;try{t=A(await y({projectRoot:r}))}catch(e){i.warn(`could not check whether declared containers/workflows/agents are re-exported by the worker entry: ${e instanceof Error?e.message:String(e)}. Run \`lunora doctor\` to check explicitly.`);return}for(const e of t)i.warn(`${e.kind} "${e.exportName}" is declared but ${e.className} is not exported by the worker entry — add \`export * from "./lunora/_generated/${e.module}"\` so wrangler can provision its binding. Until then it deploys with nothing to run.`)},L=(r,i)=>{try{E(h(r,w(r)),i)}catch{}},U=b(async({cwd:r,format:i,logger:t,options:e})=>{const o=R({apiSpec:k(e.apiSpec),cwd:r,format:i,logger:t,strictAdvisories:e.strictAdvisories,target:e.target});if(o.outputDirectory!==""){const a=t;L(r,a),await I(r,a)}return{code:o.code??(o.error===void 0&&o.failedAdvisories===0?0:1),data:{advisories:o.advisories,cronTriggers:o.cronTriggers,failedAdvisories:o.failedAdvisories,outputDirectory:o.outputDirectory},error:o.error}});export{U as execute,R as runCodegenCommand};

package/dist/packem_chunks/runDeployCommand.mjs

@@ -1,7 +1,7 @@
-import{readFileSync as p,writeFileSync as T,existsSync as v}from"node:fs";import{runCodegen as B,discoverMigrations as V}from"@lunora/codegen";import{readLinkedProject as L,writeLinkedProject as K,execArgsFor as k,detectPackageManager as b,discoverContainerInfo as I,DEV_VARS_FILE as y,parseDevVariableEntries as U,isMintableSecretKey as P,runPostCodegenHook as q,resolveDeployDriver as R,inferLunoraBindings as F,packageNamesFromBindings as Y,requiredSecrets as G,generateSecretValue as z,upsertDevVariableLine as J,writeDevVariablesFileAtomically as Q,COMPOSED_WORKER_ENTRY as _,discoverSchemaInfo as X}from"@lunora/config";import{findWranglerFile as W,validateWranglerProject as Z,reconcileWranglerBindings as ee,reconcileWranglerCompatibilityDate as re,reconcileWranglerCrons as te,describePreservedCrons as ne,readWranglerJsonc as ae,mergeWranglerEnvironment as oe}from"@lunora/config/cloudflare";import{join as h}from"@visulima/path";import{Spinner as ie}from"@visulima/spinner";import{Project as se}from"ts-morph";import{i as ce,m as le,e as de}from"../packem_shared/vectorize-metadata-dXpl2_Ar.mjs";import{r as ue,a as ge,e as me}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as fe,a as he}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{r as E}from"../packem_shared/wrangler-name-Dsk5K1f-.mjs";import{w as ve}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{d as ye}from"../packem_shared/command-CrAs0XG_.mjs";import{a as pe,i as we}from"../packem_shared/docker-DpVxvYpL.mjs";import{r as ke,p as be,H as $e,a as Se}from"../packem_shared/schema-drift-gate-BDCkQ1S6.mjs";import{v as De,l as Re,i as $,p as Ee}from"../packem_shared/output-format-B91O3X28.mjs";import{containerBuildTag as Ae}from"@lunora/container";import{defaultSpawner as S}from"../packem_shared/createRecordingSpawner-DJlNacZ6.mjs";import{a as O}from"../packem_shared/resolve-target-BRvw8Pf7.mjs";import{c as Ce}from"../packem_shared/tui-prompts-DzYd2fL3.mjs";import{l as Pe}from"../packem_shared/wrangler-secrets-CCdt0mUl.mjs";import{runMigrateDataCommand as _e}from"./runMigrateGenerateCommand.mjs";const xe=/https?:\/\/[^\s"'<>]+\.workers\.dev[^\s"'<>]*/u,je=/https:\/\/[^\s"'<>]+/u,Ne=e=>{if(e===void 0)return;const r=xe.exec(e);return r?r[0]:je.exec(e)?.[0]},x=e=>e===void 0?"":` (--env ${e})`,Te=({cwd:e,env:r,logger:n,now:t,url:a})=>{if(a!==void 0)try{const o=L(e);if(o!==void 0){if(o.workerUrl===a&&o.env===r)return;n.warn(`link: .lunora/project.json records ${o.workerUrl??"(no url)"}${x(o.env)}, but this deploy published ${a}${x(r)}. Keeping the recorded value — run \`lunora link --url ${a}${r===void 0?"":` --env ${r}`}\` to update it.`);return}const i=(t??(()=>new Date().toISOString()))();K(e,{env:r,linkedAt:i,workerName:E(e),workerUrl:a}),n.success(`link: recorded ${a} in .lunora/project.json (run \`lunora link\` to change)`)}catch{}},Le=e=>{const{cwd:r,env:n,logger:t,mintedSecretsFile:a}=e;try{const o=L(r),i=o?.workerName??E(r),s=e.url??o?.workerUrl;t.success("deploy complete"),t.info(`  worker:  ${i??"(see wrangler output above)"}`),n!==void 0&&t.info(`  env:     ${n}`),s===void 0?t.info("  url:     run `lunora link --url <https://your-worker>` to record it"):t.info(`  url:     ${s}`),a!==void 0&&t.info(`  secrets: generated value(s) recorded in ${a}`),t.info("  logs:    lunora logs")}catch{}},Ie=async e=>{if(e.targets.length===0)return{builtTags:[],code:0};if(!(e.railpackAvailable??pe)()){const t="deploy blocked: a container uses `image: { build }` (Railpack), but Railpack isn't ready. Install the `railpack` CLI and start a BuildKit instance, e.g. `docker run --rm --privileged -d --name buildkit moby/buildkit` then `export BUILDKIT_HOST=docker-container://buildkit`. Alternatively switch the container's `image` to a Dockerfile path or a pre-built registry reference.";return e.logger.error(t),{builtTags:[],code:1,error:t}}const r=e.spawner??S,n=[];for(const t of e.targets){const a=Ae(t.exportName),o={args:["build",t.buildDir,"--name",a],command:"railpack",cwd:e.cwd},i=k(b(e.cwd),"wrangler",["containers","push",a]),s={args:i.args,command:i.command,cwd:e.cwd};e.logger.info(`railpack: building "${t.exportName}" → ${a} from ${t.buildDir}`);const c=await r(o);if(c.code!==0){const d=`railpack build failed for container "${t.exportName}" (${t.buildDir})`;return e.logger.error(d),{builtTags:n,code:c.code,error:d}}e.logger.info(`railpack: pushing ${a} to the Cloudflare Registry`);const l=await r(s);if(l.code!==0){const d=`wrangler containers push failed for "${t.exportName}" (${a})`;return e.logger.error(d),{builtTags:n,code:l.code,error:d}}n.push(a)}return{builtTags:n,code:0}},Ue=e=>{const r=W(e),n=r===void 0?void 0:p(r,"utf8");return()=>{r!==void 0&&n!==void 0&&T(r,n,"utf8")}},H="<replace-with-d1-create-id>",j=e=>Array.isArray(e)?e.filter(r=>r!=null):void 0,A=(e,r)=>{const n=W(e);if(!n)return;const{parsed:t}=ae(n);if(t===void 0)return;const{error:a,merged:o}=oe(t,r),i=a===void 0?o:t,{containers:s,d1_databases:c,vars:l}=i;return{containers:j(s),d1_databases:j(c),vars:typeof l=="object"&&l!==null&&!Array.isArray(l)?l:void 0}},Fe=["LUNORA_ORIGIN_URL","AUTH_URL"],We=e=>{try{const{hostname:r}=new URL(e);return r==="localhost"||r==="127.0.0.1"||r==="::1"||r==="[::1]"}catch{return!1}},Oe=e=>e.startsWith("./")||e.startsWith("../")||e.startsWith("/")||e.includes("Dockerfile"),He=(e,r,n,t="deploy",a)=>{const o=(A(e,a)?.containers??[]).filter(s=>typeof s?.image=="string"&&Oe(s.image));if(o.length===0||n())return;const i=`${t} blocked: wrangler.jsonc declares ${String(o.length)} container(s) built from a local Dockerfile, but no Docker-compatible engine is available. Start Docker (or Colima), or point the container's \`image\` at a pre-built registry reference. Note: container images must target linux/amd64.`;return r.error(i),i},Me=e=>v(h(e,_))?_:void 0,Be=(e,r,n="deploy")=>{for(const t of I(e,"lunora").containers){const{image:a}=t;if(a.kind==="dockerfile"&&!v(h(e,a.dockerfilePath))){const o=`${n} blocked: container "${t.exportName}" references a Dockerfile at "${a.dockerfilePath}" that does not exist. Create it or fix the \`image\` path in lunora/containers.ts.`;return r.error(o),o}if(a.kind==="build"&&!v(h(e,a.buildDir))){const o=`${n} blocked: container "${t.exportName}" references a Railpack build directory "${a.buildDir}" that does not exist. Create it or fix the \`image.build\` path in lunora/containers.ts.`;return r.error(o),o}}},M=e=>$(e.format)?!1:e.interactive!==void 0?e.interactive:process.stdout.isTTY&&!process.env.CI,Ve=(e,r)=>(A(e,r)?.d1_databases??[]).find(n=>n.database_id===H)?.binding,Ke=async(e,r)=>{if(r.dryRun===!0)return;const n=I(e,"lunora").containers.filter(a=>a.image.kind==="build").map(a=>({buildDir:a.image.buildDir,exportName:a.exportName}));if(n.length===0)return;const t=await Ie({cwd:e,logger:r.logger,railpackAvailable:r.railpackAvailable,spawner:r.spawner,targets:n});return t.code===0?void 0:t.error??"railpack build failed"},qe=(e,r,n)=>{if(n!==void 0)try{const t=te(e,n);t.changed&&r.success(`synced ${String(n.length)} cron trigger(s) → ${t.wranglerPath??"wrangler.jsonc"}`);for(const o of t.warnings)r.warn(o);const a=ne(t.preserved);a!==void 0&&r.info(a)}catch(t){const a=t instanceof Error?t.message:String(t);r.warn(`cron trigger sync skipped: ${a}`)}},Ye=async(e,r,n,t,a)=>{try{R(t);const o=await F({projectRoot:e}),i=ee(e,o,a);i.changed&&r.success(`provisioned bindings: ${i.added.join(", ")} → ${i.wranglerPath??"wrangler.jsonc"}`);for(const s of i.warnings)r.warn(s)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`binding inference skipped: ${i}`)}try{const o=re(e);o.changed&&r.success(`bumped compatibility_date to ${o.date??"unknown"} (Workers Cache enabled) → ${o.wranglerPath??"wrangler.jsonc"}`)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`compatibility date sync skipped: ${i}`)}qe(e,r,n)},Ge=(e,r)=>{const n=h(e,y);if(!v(n))return;let t;try{t=U(p(n,"utf8")).length}catch{return}t!==0&&r.warn(`Note: \`lunora deploy\` does not push secrets. ${y} has ${String(t)} key(s); if you changed them, run \`lunora env push --yes\` to update the deployed secrets.`)},ze=async e=>{let r=[];try{r=Y(await F({projectRoot:e}))}catch{}const n=G(r).map(a=>a.key);let t=[];try{const a=h(e,y);v(a)&&(t=U(p(a,"utf8")).map(o=>o.key).filter(o=>ce(o)))}catch{}return[...new Set([...n,...t])]},Je=async(e,r,n,t)=>{const{logger:a}=r,o=r.spawner??S,i=b(e),s=r.env===void 0?"":` --env ${r.env}`,{toolchain:c}=R(t);if(c===void 0)return a.error("deploy target has no command-line toolchain; cannot push secrets"),{minted:[],ok:!1};const l=[];for(const d of n){const g=z(),u=c.secretPut({environment:r.env,key:d,temporary:r.temporary}),m=k(i,u.tool,u.args),f=await o({args:m.args,command:m.command,cwd:e,input:g});if(f.code!==0)return a.error(`failed to push secret ${d} (exit ${String(f.code)}); set it manually with \`wrangler secret put ${d}${s}\`.`),{minted:l,ok:!1};l.push({key:d,value:g}),a.success(`generated + pushed ${d}`)}return{minted:l,ok:!0}},Qe=/^[\w-]+$/u,D=[".dev.vars",".dev.vars.*","!.dev.vars.example"],Xe=/\r?\n/u,Ze=(e,r)=>{const n=h(e,".gitignore");try{const t=v(n)?p(n,"utf8"):"",a=new Set(t.split(Xe).map(c=>c.trim())),o=D.filter(c=>!a.has(c));if(o.length===0)return;const i=o.some(c=>!c.startsWith("!"))?[...o.filter(c=>!c.startsWith("!")),...D.filter(c=>c.startsWith("!"))]:o,s=t.length>0&&!t.endsWith(`
+import{readFileSync as w,writeFileSync as T,existsSync as y}from"node:fs";import{runCodegen as H,discoverMigrations as V}from"@lunora/codegen";import{readLinkedProject as L,writeLinkedProject as G,execArgsFor as k,detectPackageManager as b,discoverContainerInfo as I,DEV_VARS_FILE as p,parseDevVariableEntries as U,isMintableSecretKey as P,runPostCodegenHook as K,resolveDeployDriver as R,inferLunoraBindings as W,packageNamesFromBindings as q,requiredSecrets as Y,generateSecretValue as z,upsertDevVariableLine as J,writeDevVariablesFileAtomically as X,COMPOSED_WORKER_ENTRY as j,discoverSchemaInfo as Q}from"@lunora/config";import{findWranglerFile as O,validateWranglerProject as Z,reconcileWranglerBindings as ee,reconcileWranglerCompatibilityDate as re,reconcileWranglerCrons as te,describePreservedCrons as ne,readWranglerJsonc as ae,mergeWranglerEnvironment as oe}from"@lunora/config/cloudflare";import{join as v}from"@visulima/path";import{Spinner as ie}from"@visulima/spinner";import{Project as se}from"ts-morph";import{i as ce,m as le,e as de}from"../packem_shared/vectorize-metadata-dXpl2_Ar.mjs";import{r as ue,a as ge,e as me}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as fe,a as he}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{r as E}from"../packem_shared/wrangler-name-Dsk5K1f-.mjs";import{w as ve}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{d as ye}from"../packem_shared/command-Mmxzxyr5.mjs";import{a as pe,i as we}from"../packem_shared/docker-DpVxvYpL.mjs";import{EXIT_CODE as h}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{r as ke,p as be,H as $e,a as Se}from"../packem_shared/schema-drift-gate-BDCkQ1S6.mjs";import{containerBuildTag as De}from"@lunora/container";import{defaultSpawner as $}from"../packem_shared/createRecordingSpawner-sS7LEN7x.mjs";import{r as F}from"../packem_shared/resolve-target-C_ZloTvd.mjs";import{c as Re}from"../packem_shared/tui-prompts-B3YwUhGw.mjs";import{l as Ee}from"../packem_shared/wrangler-secrets-C9lJnd5N.mjs";import{runMigrateDataCommand as Ae}from"../packem_shared/runMigrateGenerateCommand-BMS_KnVC.mjs";const Ce=/https?:\/\/[^\s"'<>]+\.workers\.dev[^\s"'<>]*/u,Pe=/https:\/\/[^\s"'<>]+/u,je=e=>{if(e===void 0)return;const r=Ce.exec(e);return r?r[0]:Pe.exec(e)?.[0]},N=e=>e===void 0?"":` (--env ${e})`,Ne=({cwd:e,env:r,logger:a,now:t,url:n})=>{if(n!==void 0)try{const o=L(e);if(o!==void 0){if(o.workerUrl===n&&o.env===r)return;a.warn(`link: .lunora/project.json records ${o.workerUrl??"(no url)"}${N(o.env)}, but this deploy published ${n}${N(r)}. Keeping the recorded value — run \`lunora link --url ${n}${r===void 0?"":` --env ${r}`}\` to update it.`);return}const i=(t??(()=>new Date().toISOString()))();G(e,{env:r,linkedAt:i,workerName:E(e),workerUrl:n}),a.success(`link: recorded ${n} in .lunora/project.json (run \`lunora link\` to change)`)}catch{}},_e=e=>{const{cwd:r,env:a,logger:t,mintedSecretsFile:n}=e;try{const o=L(r),i=o?.workerName??E(r),s=e.url??o?.workerUrl;t.success("deploy complete"),t.info(`  worker:  ${i??"(see wrangler output above)"}`),a!==void 0&&t.info(`  env:     ${a}`),s===void 0?t.info("  url:     run `lunora link --url <https://your-worker>` to record it"):t.info(`  url:     ${s}`),n!==void 0&&t.info(`  secrets: generated value(s) recorded in ${n}`),t.info("  logs:    lunora logs")}catch{}},xe=async e=>{if(e.targets.length===0)return{builtTags:[],code:0};if(!(e.railpackAvailable??pe)()){const t="deploy blocked: a container uses `image: { build }` (Railpack), but Railpack isn't ready. Install the `railpack` CLI and start a BuildKit instance, e.g. `docker run --rm --privileged -d --name buildkit moby/buildkit` then `export BUILDKIT_HOST=docker-container://buildkit`. Alternatively switch the container's `image` to a Dockerfile path or a pre-built registry reference.";return e.logger.error(t),{builtTags:[],code:1,error:t}}const r=e.spawner??$,a=[];for(const t of e.targets){const n=De(t.exportName),o={args:["build",t.buildDir,"--name",n],command:"railpack",cwd:e.cwd},i=k(b(e.cwd),"wrangler",["containers","push",n]),s={args:i.args,command:i.command,cwd:e.cwd};e.logger.info(`railpack: building "${t.exportName}" → ${n} from ${t.buildDir}`);const c=await r(o);if(c.code!==0){const d=`railpack build failed for container "${t.exportName}" (${t.buildDir})`;return e.logger.error(d),{builtTags:a,code:c.code,error:d}}e.logger.info(`railpack: pushing ${n} to the Cloudflare Registry`);const l=await r(s);if(l.code!==0){const d=`wrangler containers push failed for "${t.exportName}" (${n})`;return e.logger.error(d),{builtTags:a,code:l.code,error:d}}a.push(n)}return{builtTags:a,code:0}},Te=e=>{const r=O(e),a=r===void 0?void 0:w(r,"utf8");return()=>{r!==void 0&&a!==void 0&&T(r,a,"utf8")}},M="<replace-with-d1-create-id>",_=e=>Array.isArray(e)?e.filter(r=>r!=null):void 0,A=(e,r)=>{const a=O(e);if(!a)return;const{parsed:t}=ae(a);if(t===void 0)return;const{error:n,merged:o}=oe(t,r),i=n===void 0?o:t,{containers:s,d1_databases:c,vars:l}=i;return{containers:_(s),d1_databases:_(c),vars:typeof l=="object"&&l!==null&&!Array.isArray(l)?l:void 0}},Le=["LUNORA_ORIGIN_URL","AUTH_URL"],Ie=e=>{try{const{hostname:r}=new URL(e);return r==="localhost"||r==="127.0.0.1"||r==="::1"||r==="[::1]"}catch{return!1}},Ue=e=>e.startsWith("./")||e.startsWith("../")||e.startsWith("/")||e.includes("Dockerfile"),We=(e,r,a,t="deploy",n)=>{const o=(A(e,n)?.containers??[]).filter(s=>typeof s?.image=="string"&&Ue(s.image));if(o.length===0||a())return;const i=`${t} blocked: wrangler.jsonc declares ${String(o.length)} container(s) built from a local Dockerfile, but no Docker-compatible engine is available. Start Docker (or Colima), or point the container's \`image\` at a pre-built registry reference. Note: container images must target linux/amd64.`;return r.error(i),i},Oe=e=>y(v(e,j))?j:void 0,Fe=(e,r,a="deploy")=>{for(const t of I(e,"lunora").containers){const{image:n}=t;if(n.kind==="dockerfile"&&!y(v(e,n.dockerfilePath))){const o=`${a} blocked: container "${t.exportName}" references a Dockerfile at "${n.dockerfilePath}" that does not exist. Create it or fix the \`image\` path in lunora/containers.ts.`;return r.error(o),o}if(n.kind==="build"&&!y(v(e,n.buildDir))){const o=`${a} blocked: container "${t.exportName}" references a Railpack build directory "${n.buildDir}" that does not exist. Create it or fix the \`image.build\` path in lunora/containers.ts.`;return r.error(o),o}}},B=e=>e.format==="json"?!1:e.interactive!==void 0?e.interactive:process.stdout.isTTY&&!process.env.CI,Me=(e,r)=>(A(e,r)?.d1_databases??[]).find(a=>a.database_id===M)?.binding,Be=async(e,r)=>{if(r.dryRun===!0)return;const a=I(e,"lunora").containers.filter(n=>n.image.kind==="build").map(n=>({buildDir:n.image.buildDir,exportName:n.exportName}));if(a.length===0)return;const t=await xe({cwd:e,logger:r.logger,railpackAvailable:r.railpackAvailable,spawner:r.spawner,targets:a});return t.code===0?void 0:t.error??"railpack build failed"},He=(e,r,a)=>{if(a!==void 0)try{const t=te(e,a);t.changed&&r.success(`synced ${String(a.length)} cron trigger(s) → ${t.wranglerPath??"wrangler.jsonc"}`);for(const o of t.warnings)r.warn(o);const n=ne(t.preserved);n!==void 0&&r.info(n)}catch(t){const n=t instanceof Error?t.message:String(t);r.warn(`cron trigger sync skipped: ${n}`)}},Ve=async(e,r,a,t,n)=>{try{R(t);const o=await W({projectRoot:e}),i=ee(e,o,n);i.changed&&r.success(`provisioned bindings: ${i.added.join(", ")} → ${i.wranglerPath??"wrangler.jsonc"}`);for(const s of i.warnings)r.warn(s)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`binding inference skipped: ${i}`)}try{const o=re(e);o.changed&&r.success(`bumped compatibility_date to ${o.date??"unknown"} (Workers Cache enabled) → ${o.wranglerPath??"wrangler.jsonc"}`)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`compatibility date sync skipped: ${i}`)}He(e,r,a)},Ge=(e,r)=>{const a=v(e,p);if(!y(a))return;let t;try{t=U(w(a,"utf8")).length}catch{return}t!==0&&r.warn(`Note: \`lunora deploy\` does not push secrets. ${p} has ${String(t)} key(s); if you changed them, run \`lunora env push --yes\` to update the deployed secrets.`)},Ke=async e=>{let r=[];try{r=q(await W({projectRoot:e}))}catch{}const a=Y(r).map(n=>n.key);let t=[];try{const n=v(e,p);y(n)&&(t=U(w(n,"utf8")).map(o=>o.key).filter(o=>ce(o)))}catch{}return[...new Set([...a,...t])]},qe=async(e,r,a,t)=>{const{logger:n}=r,o=r.spawner??$,i=b(e),s=r.env===void 0?"":` --env ${r.env}`,{toolchain:c}=R(t);if(c===void 0)return n.error("deploy target has no command-line toolchain; cannot push secrets"),{minted:[],ok:!1};const l=[];for(const d of a){const g=z(),u=c.secretPut({environment:r.env,key:d,temporary:r.temporary}),m=k(i,u.tool,u.args),f=await o({args:m.args,command:m.command,cwd:e,input:g});if(f.code!==0)return n.error(`failed to push secret ${d} (exit ${String(f.code)}); set it manually with \`wrangler secret put ${d}${s}\`.`),{minted:l,ok:!1};l.push({key:d,value:g}),n.success(`generated + pushed ${d}`)}return{minted:l,ok:!0}},Ye=/^[\w-]+$/u,S=[".dev.vars",".dev.vars.*","!.dev.vars.example"],ze=/\r?\n/u,Je=(e,r)=>{const a=v(e,".gitignore");try{const t=y(a)?w(a,"utf8"):"",n=new Set(t.split(ze).map(c=>c.trim())),o=S.filter(c=>!n.has(c));if(o.length===0)return;const i=o.some(c=>!c.startsWith("!"))?[...o.filter(c=>!c.startsWith("!")),...S.filter(c=>c.startsWith("!"))]:o,s=t.length>0&&!t.endsWith(`
 `)?`
-`:"";T(n,`${t}${s}
+`:"";T(a,`${t}${s}
 # Lunora — never commit a minted secret
 ${i.join(`
 `)}
-`,"utf8"),r.info(`.gitignore: added ${o.join(", ")} so the recorded secret cannot be committed`)}catch(t){r.warn(`could not update .gitignore (${t instanceof Error?t.message:String(t)}) — add \`${D.join("` and `")}\` by hand before committing.`)}},er=(e,r,n)=>{if(n.length===0)return;const t=n.map(s=>s.key).join(", ");if(r.env!==void 0&&!Qe.test(r.env)){r.logger.warn(`${t}: minted and pushed for --env ${r.env}, but "${r.env}" isn't a safe filename fragment — the value could not be recorded. Capture it manually if you need it again.`);return}const a=r.env===void 0?y:`${y}.${r.env}`;Ze(e,r.logger);const o=h(e,a);let i=v(o)?p(o,"utf8"):"";for(const s of n)i=J(i,s.key,s.value);return Q(o,i),r.logger.success(r.env===void 0?`${t}: value(s) recorded in ${a}`:`${t}: value(s) recorded in ${a} (kept separate from ${y} so \`lunora dev\` and a plain \`lunora env push\` don't inherit the --env ${r.env} value)`),a},rr=async(e,r,n,t)=>{if(r.dryRun===!0||r.preview===!0)return{};const{logger:a}=r,o=r.env===void 0?"":` --env ${r.env}`;let i;try{i=await(r.secretLister??Pe)({cwd:e,env:r.env,temporary:r.temporary})}catch{return{}}if(!i.ok)return{};const s=new Set(i.names),l=(await ze(e)).filter(u=>!s.has(u));if(l.length===0)return{};if(!n)return{error:`missing required secret(s) on the deploy target: ${l.join(", ")}. Set them with \`wrangler secret put <KEY>${o}\` (or \`lunora env generate --set\` then \`lunora env push --yes${o}\`), then re-deploy.`};for(const u of l.filter(m=>!P(m)))a.warn(`required secret ${u} is not set on the target — set it with: wrangler secret put ${u}${o}`);const d=l.filter(u=>P(u));if(d.length===0)return{};if(await(r.secretConfirm??Ce())(`${String(d.length)} required secret(s) not set on the target (${d.join(", ")}). Generate strong values and push them now?`)){const{minted:u,ok:m}=await Je(e,r,d,t),f=er(e,r,u);return m?{mintedSecretsFile:f}:{error:"failed to push required secret(s) — set them manually and re-deploy",mintedSecretsFile:f}}return a.warn(`${String(d.length)} required secret(s) not set on the target: ${d.join(", ")}. Generate + push with \`lunora env generate --set\` then \`lunora env push --yes${o}\`.`),{}},tr=async(e,r)=>{const n=new se({skipAddingFilesFromTsConfig:!0}),t=h(r,"lunora");let a;try{a=V(n,t)}catch(o){const i=o instanceof Error?o.message:String(o);return e.logger.warn(`--migrate: could not discover migrations (${i}); skipping`),0}if(a.length===0)return e.logger.info("--migrate: no data migrations declared in lunora/"),0;e.logger.info(`--migrate: running ${String(a.length)} migration(s) against deployed worker`);for(const o of a){e.logger.info(`--migrate: up "${o.id}" (table "${o.table}")`);const i={cwd:r,fetchImpl:e.fetchImpl,id:o.id,logger:e.logger,prod:!0,subcommand:"up",token:e.migrateToken,url:e.migrateUrl,yes:e.migrateYes===!0},s=await _e(i);if(s.code!==0)return e.logger.error(`--migrate: migration "${o.id}" failed — see output above`),s.code;e.logger.success(`--migrate: "${o.id}" applied`)}return 0},nr=e=>{if(!e.migrate||e.dryRun||e.preview)return;if(e.migrateUrl===void 0){const n="--migrate requires --migrate-url <https://your-worker> — the deploy target URL is only known after wrangler runs, and this gate runs before it; refusing to default to localhost";return e.logger.error(n),n}if(e.migrateYes!==!0){const n="--migrate runs production data migrations after deploy. Re-run with --migrate-yes to confirm.";return e.logger.error(n),n}const r=e.migrateToken??process.env.LUNORA_ADMIN_TOKEN;if(r===void 0||r===""){const n="admin token required for --migrate — pass --migrate-token or set LUNORA_ADMIN_TOKEN";return e.logger.error(n),n}},ar=async(e,r,n,t,a,o,i,s)=>{let c;r?(c=new ie({name:"dots"}),c.start("running codegen")):n.info("running codegen");try{const l=B({apiSpec:t,projectRoot:e,target:a});c?.succeed("codegen complete"),c||n.success("codegen complete");const d=ge(l.platformDiagnostics,n);if(d.errors.length>0)return{error:d.errors.join("; ")};const{errorAdvisories:g,names:u,shouldBlock:m}=me(l.advisories,s);if(m){const C=`${g.length.toString()} ERROR-level ${g.length===1?"advisory":"advisories"} (${u.join(", ")}). Pass --no-strict-advisories to downgrade this to a warning and continue.`;return n.error(C),{error:C}}const f=await q({cwd:e,logger:n,spawner:o,stdoutToStderr:i});return f.error!==void 0?{error:f.error}:{result:l}}catch(l){c?.failed("codegen failed");const d=l instanceof Error?l.message:String(l);return n.error(`codegen failed: ${d}`),{error:`codegen failed: ${d}`}}},or=(e,r,n="deploy",t)=>{const a=Ve(e,t);if(a===void 0)return;const o=`${n} blocked: the "${a}" D1 binding has a placeholder database_id ("${H}"). Run \`wrangler d1 create <name>\` to create the database, then replace the placeholder in wrangler.jsonc with the real id before deploying.`;return r.error(o),o},ir=(e,r,n="deploy",t)=>{const a=A(e,t)?.vars;if(!a)return;const o=Fe.filter(s=>typeof a[s]=="string"&&We(a[s]));if(o.length===0)return;const i=`${n} blocked: ${o.join(", ")} in wrangler.jsonc point at localhost. A deployed Worker can't reach a loopback address, so this silently breaks scheduled-job dispatch, reverse cross-shard relations, and auth callbacks. Set each to the deployed worker's public URL (or move it to a secret with \`wrangler secret put\`) before deploying.`;return r.error(i),i},sr=async(e,r)=>{const{info:n}=X(r,"lunora"),t=n?.vectorMetadata??[];if(t.length===0)return;const a=[];for(const s of t){const c=le(s.kind);if(c===void 0){e.logger.warn(`vector index "${s.index}" declares metadata "${s.property}", whose column type cannot be filtered on in Vectorize — it is stored with each vector but no filter will match it.`);continue}a.push({index:s.index,property:s.property,type:c})}if(a.length===0)return;const i=(await de({cwd:r,entries:a,exec:k(b(r),"wrangler",[]),logger:e.logger,spawner:e.spawner??S})).filter(s=>s.status!=="failed").length;i>0&&e.logger.success(`vectorize metadata indexes ready: ${String(i)}/${String(a.length)}`)},N=5,cr=2e3,lr=async(e,r,n)=>{if(e.healthCheck!==!0)return;const t=n??O({cwd:r,env:e.env});if(t===void 0){const o="--health-check: the deploy succeeded, but no URL to probe could be resolved — wrangler's output carried none and this checkout has no link for this environment. Run `lunora link --url <https://your-worker>` and re-deploy, or drop --health-check.";return e.logger.error(o),{error:o,ok:!1,url:""}}const a=await be({attempts:N,baseUrl:t,delayMs:cr,fetchImpl:e.healthFetch,paths:[$e,Se],sleep:e.healthSleep});return a.error===void 0?(e.logger.success(`health check ok (${a.url})`),{ok:!0,url:a.url}):(e.logger.error(`--health-check: the deploy succeeded, but the new version did not answer after ${String(N)} attempt(s) — ${a.error}`),{error:a.error,ok:!1,url:a.url})},dr=async(e,r,n,t,a,o)=>{await sr(e,r);const i=e.migrate?await tr(e,r):0;return i===0&&a?.(),{code:i,descriptor:n,mintedSecretsFile:o,validation:t}},ur=(e,r,n)=>{const t=or(e,r.logger,n,r.env);if(t!==void 0)return t;const a=ir(e,r.logger,n,r.env);if(a!==void 0)return a;const o=Be(e,r.logger,n);return o!==void 0?o:He(e,r.logger,r.dockerAvailable??we,n,r.env)},gr=(e,r,n)=>{const t=Me(e);t!==void 0&&r.logger.info(`class-B composition: deploying ${t} (overrides wrangler main)`),r.temporary&&r.logger.info("temporary account: deploying to a short-lived Cloudflare account (~60min); wrangler will print a claim URL"),r.dryRun&&r.logger.info("dry run: validating + bundling without publishing"),r.outDir!==void 0&&r.logger.info(`build artifact: emitting bundle to ${r.outDir}`);const a=R(n),o={dryRun:r.dryRun,entry:t,environment:r.env,outDir:r.outDir,preview:r.preview,temporary:r.temporary};if(a.toolchain===void 0)throw new Error(`deploy target "${a.id}" has no command-line toolchain`);return a.toolchain.deploy(o)},w=(e,r)=>({code:1,descriptor:void 0,error:e,validation:{problems:[],wranglerPath:void 0},...r}),mr=(e,r)=>{for(const n of e.report?.warnings??[])r.warn(`wrangler.jsonc: ${n}`);if(e.problems.length===0)return!1;r.error("wrangler.jsonc validation failed:");for(const n of e.problems)r.error(`  - ${n}`);return!0},fr=(e,r,n)=>{const t=$(r.format),a=r.dryRun!==!0,o=gr(e,r,n),i=k(b(e),o.tool,o.args);return{args:i.args,captureStdout:a&&!t,captureStdoutSilently:a&&t,command:i.command,cwd:e,stdoutToStderr:t&&!a}},hr=async({cwd:e,descriptor:r,mintedSecretsFile:n,options:t,reblessSchemaBaseline:a,stdout:o,validation:i})=>{const s={deployedAt:new Date().toISOString(),dryRun:t.dryRun===!0,env:t.env,preview:t.preview===!0,url:t.dryRun===!0?void 0:Ne(o),workerName:E(e)};if(t.dryRun===!0||t.preview===!0)return t.healthCheck===!0&&t.logger.warn(`--health-check skipped: ${t.dryRun===!0?"a dry run publishes nothing":"a preview version serves no live traffic"}`),{code:0,deployment:s,descriptor:r,mintedSecretsFile:n,validation:i};t.temporary!==!0&&Te({cwd:e,env:t.env,logger:t.logger,url:s.url});const c=await lr(t,e,s.url);return c?.error!==void 0?{code:1,deployment:s,descriptor:r,healthCheck:c,mintedSecretsFile:n,validation:i}:{...await dr(t,e,r,i,a,n),deployment:s,healthCheck:c}},vr=async(e,r)=>{const n=e.cwd??process.cwd(),t=M(e),a=ue(e),o={problems:[],wranglerPath:void 0},i=he(n,e.target);if(i.target===void 0){const u=i.error??"unknown deploy target";return e.logger.error(u),{error:u,validation:o}}const{target:s}=i;let c;if(!e.skipCodegen){const u=await ar(n,t,e.logger,e.apiSpec,s,e.spawner,$(e.format),a);if(u.error!==void 0)return{error:u.error,target:s,validation:o};c=u.result}let l;if(c!==void 0){const u=ke({allowDrift:e.allowSchemaDrift===!0,codegen:c,command:r,logger:e.logger,updateBaseline:e.updateSchemaBaseline===!0});if(u.blocked)return{error:`schema drift gate blocked ${r}`,schemaDrift:{blocked:!0,reason:u.reason},target:s,validation:o};l=u.rebless}await Ye(n,e.logger,c?.cronTriggers,s,e.env);const d=ur(n,e,r);if(d!==void 0)return{error:d,target:s,validation:o};const g=Z({environment:e.env,projectRoot:n});return mr(g,e.logger)?{error:"wrangler validation failed",target:s,validation:g}:{codegen:c,reblessSchemaBaseline:l,target:s,validation:g}},yr=async e=>{const r=e.cwd??process.cwd(),n=M(e),t=await vr(e,e.commandName??"deploy");if(t.error!==void 0){if(t.validation.problems.length>0)return{code:1,descriptor:void 0,error:t.error,validation:t.validation};const f=t.schemaDrift===void 0?void 0:{schemaDrift:t.schemaDrift};return w(t.error,f)}const{reblessSchemaBaseline:a,validation:o}=t,i=t.target,s=nr(e);if(s!==void 0)return w(s);const c=await Ke(r,e);if(c!==void 0)return w(c);Ge(r,e.logger);const{error:l,mintedSecretsFile:d}=await rr(r,e,n,i);if(l!==void 0)return e.logger.error(l),{code:1,descriptor:void 0,error:l,mintedSecretsFile:d,validation:o};const g=fr(r,e,i);e.logger.info(`deploying via ${g.command} ${g.args.join(" ")}`);const m=await(e.spawner??S)(g);return g.captureStdoutSilently===!0&&m.stdout!==void 0&&m.stdout!==""&&process.stderr.write(m.stdout),m.code!==0?{code:m.code,descriptor:g,mintedSecretsFile:d,validation:o}:hr({cwd:r,descriptor:g,mintedSecretsFile:d,options:e,reblessSchemaBaseline:a,stdout:m.stdout,validation:o})},pr=async e=>{const r=De("deploy",e.format);if(r!==void 0)return e.logger.error(r),w(r);const n=Re(e.format,e.logger),t=e.dryRun===!0?Ue(e.cwd??process.cwd()):void 0;let a;try{if(a=await yr({...e,logger:n}),a.code===0&&e.emitBindings!==void 0){const{error:o}=ve({destination:e.emitBindings,logger:n,projectRoot:e.cwd??process.cwd()});o!==void 0&&(n.error(o),a={...a,code:1})}}finally{t?.()}if($(e.format))return Ee(a),a;if(a.code===0&&e.dryRun!==!0&&e.preview!==!0)Le({cwd:e.cwd??process.cwd(),env:e.env,logger:e.logger,mintedSecretsFile:a.mintedSecretsFile,url:a.deployment?.url});else if(a.code===0&&e.preview===!0){const o=a.deployment?.url;e.logger.success(o===void 0?"preview version uploaded":`preview version uploaded — ${o}`)}return a},Hr=ye(async({cwd:e,logger:r,options:n})=>({code:(await pr({allowSchemaDrift:n.allowSchemaDrift===!0,apiSpec:fe(n.apiSpec),cwd:e,dryRun:n.dryRun===!0,env:n.env,format:n.format,healthCheck:n.healthCheck===!0,logger:r,migrate:n.migrate===!0,migrateToken:n.migrateToken,migrateUrl:O({cwd:e,env:n.env,url:n.migrateUrl}),migrateYes:n.migrateYes===!0,preview:n.preview===!0,skipCodegen:n.prebuilt===!0,strictAdvisories:n.strictAdvisories,target:n.target,temporary:n.temporary===!0,updateSchemaBaseline:n.updateSchemaBaseline===!0})).code}));export{Hr as execute,Ye as provisionBindings,pr as runDeployCommand,vr as runPreDeployPipeline};
+`,"utf8"),r.info(`.gitignore: added ${o.join(", ")} so the recorded secret cannot be committed`)}catch(t){r.warn(`could not update .gitignore (${t instanceof Error?t.message:String(t)}) — add \`${S.join("` and `")}\` by hand before committing.`)}},Xe=(e,r,a)=>{if(a.length===0)return;const t=a.map(s=>s.key).join(", ");if(r.env!==void 0&&!Ye.test(r.env)){r.logger.warn(`${t}: minted and pushed for --env ${r.env}, but "${r.env}" isn't a safe filename fragment — the value could not be recorded. Capture it manually if you need it again.`);return}const n=r.env===void 0?p:`${p}.${r.env}`;Je(e,r.logger);const o=v(e,n);let i=y(o)?w(o,"utf8"):"";for(const s of a)i=J(i,s.key,s.value);return X(o,i),r.logger.success(r.env===void 0?`${t}: value(s) recorded in ${n}`:`${t}: value(s) recorded in ${n} (kept separate from ${p} so \`lunora dev\` and a plain \`lunora env push\` don't inherit the --env ${r.env} value)`),n},Qe=async(e,r,a,t)=>{if(r.dryRun===!0||r.preview===!0)return{};const{logger:n}=r,o=r.env===void 0?"":` --env ${r.env}`;let i;try{i=await(r.secretLister??Ee)({cwd:e,env:r.env,temporary:r.temporary})}catch{return{}}if(!i.ok)return{};const s=new Set(i.names),l=(await Ke(e)).filter(u=>!s.has(u));if(l.length===0)return{};if(!a)return{error:`missing required secret(s) on the deploy target: ${l.join(", ")}. Set them with \`wrangler secret put <KEY>${o}\` (or \`lunora env generate --set\` then \`lunora env push --yes${o}\`), then re-deploy.`};for(const u of l.filter(m=>!P(m)))n.warn(`required secret ${u} is not set on the target — set it with: wrangler secret put ${u}${o}`);const d=l.filter(u=>P(u));if(d.length===0)return{};if(await(r.secretConfirm??Re())(`${String(d.length)} required secret(s) not set on the target (${d.join(", ")}). Generate strong values and push them now?`)){const{minted:u,ok:m}=await qe(e,r,d,t),f=Xe(e,r,u);return m?{mintedSecretsFile:f}:{error:"failed to push required secret(s) — set them manually and re-deploy",mintedSecretsFile:f}}return n.warn(`${String(d.length)} required secret(s) not set on the target: ${d.join(", ")}. Generate + push with \`lunora env generate --set\` then \`lunora env push --yes${o}\`.`),{}},Ze=async(e,r)=>{const a=new se({skipAddingFilesFromTsConfig:!0}),t=v(r,"lunora");let n;try{n=V(a,t)}catch(o){const i=o instanceof Error?o.message:String(o);return e.logger.warn(`--migrate: could not discover migrations (${i}); skipping`),0}if(n.length===0)return e.logger.info("--migrate: no data migrations declared in lunora/"),0;e.logger.info(`--migrate: running ${String(n.length)} migration(s) against deployed worker`);for(const o of n){e.logger.info(`--migrate: up "${o.id}" (table "${o.table}")`);const i={cwd:r,fetchImpl:e.fetchImpl,id:o.id,logger:e.logger,prod:!0,subcommand:"up",token:e.migrateToken,url:e.migrateUrl,yes:e.migrateYes===!0},s=await Ae(i);if(s.code!==0)return e.logger.error(`--migrate: migration "${o.id}" failed — see output above`),s.code;e.logger.success(`--migrate: "${o.id}" applied`)}return 0},er=e=>{if(!e.migrate||e.dryRun||e.preview)return;if(e.migrateUrl===void 0){const a="--migrate requires --migrate-url <https://your-worker> — the deploy target URL is only known after wrangler runs, and this gate runs before it; refusing to default to localhost";return e.logger.error(a),a}if(e.migrateYes!==!0){const a="--migrate runs production data migrations after deploy. Re-run with --migrate-yes to confirm.";return e.logger.error(a),a}const r=e.migrateToken??process.env.LUNORA_ADMIN_TOKEN;if(r===void 0||r===""){const a="admin token required for --migrate — pass --migrate-token or set LUNORA_ADMIN_TOKEN";return e.logger.error(a),a}},rr=async(e,r,a,t,n,o,i,s)=>{let c;r?(c=new ie({name:"dots"}),c.start("running codegen")):a.info("running codegen");try{const l=H({apiSpec:t,projectRoot:e,target:n});c?.succeed("codegen complete"),c||a.success("codegen complete");const d=ge(l.platformDiagnostics,a);if(d.errors.length>0)return{error:d.errors.join("; ")};const{errorAdvisories:g,names:u,shouldBlock:m}=me(l.advisories,s);if(m){const C=`${g.length.toString()} ERROR-level ${g.length===1?"advisory":"advisories"} (${u.join(", ")}). Pass --no-strict-advisories to downgrade this to a warning and continue.`;return a.error(C),{error:C}}const f=await K({cwd:e,logger:a,spawner:o,stdoutToStderr:i});return f.error!==void 0?{error:f.error}:{result:l}}catch(l){c?.failed("codegen failed");const d=l instanceof Error?l.message:String(l);return a.error(`codegen failed: ${d}`),{error:`codegen failed: ${d}`}}},tr=(e,r,a="deploy",t)=>{const n=Me(e,t);if(n===void 0)return;const o=`${a} blocked: the "${n}" D1 binding has a placeholder database_id ("${M}"). Run \`wrangler d1 create <name>\` to create the database, then replace the placeholder in wrangler.jsonc with the real id before deploying.`;return r.error(o),o},nr=(e,r,a="deploy",t)=>{const n=A(e,t)?.vars;if(!n)return;const o=Le.filter(s=>typeof n[s]=="string"&&Ie(n[s]));if(o.length===0)return;const i=`${a} blocked: ${o.join(", ")} in wrangler.jsonc point at localhost. A deployed Worker can't reach a loopback address, so this silently breaks scheduled-job dispatch, reverse cross-shard relations, and auth callbacks. Set each to the deployed worker's public URL (or move it to a secret with \`wrangler secret put\`) before deploying.`;return r.error(i),i},ar=async(e,r)=>{const{info:a}=Q(r,"lunora"),t=a?.vectorMetadata??[];if(t.length===0)return;const n=[];for(const s of t){const c=le(s.kind);if(c===void 0){e.logger.warn(`vector index "${s.index}" declares metadata "${s.property}", whose column type cannot be filtered on in Vectorize — it is stored with each vector but no filter will match it.`);continue}n.push({index:s.index,property:s.property,type:c})}if(n.length===0)return;const i=(await de({cwd:r,entries:n,exec:k(b(r),"wrangler",[]),logger:e.logger,spawner:e.spawner??$})).filter(s=>s.status!=="failed").length;i>0&&e.logger.success(`vectorize metadata indexes ready: ${String(i)}/${String(n.length)}`)},x=5,or=2e3,ir=async(e,r,a)=>{if(e.healthCheck!==!0)return;const t=a??F({cwd:r,env:e.env});if(t===void 0){const o="--health-check: the deploy succeeded, but no URL to probe could be resolved — wrangler's output carried none and this checkout has no link for this environment. Run `lunora link --url <https://your-worker>` and re-deploy, or drop --health-check.";return e.logger.error(o),{error:o,ok:!1,url:""}}const n=await be({attempts:x,baseUrl:t,delayMs:or,fetchImpl:e.healthFetch,paths:[$e,Se],sleep:e.healthSleep});return n.error===void 0?(e.logger.success(`health check ok (${n.url})`),{ok:!0,url:n.url}):(e.logger.error(`--health-check: the deploy succeeded, but the new version did not answer after ${String(x)} attempt(s) — ${n.error}`),{error:n.error,ok:!1,url:n.url})},sr=async(e,r,a,t,n,o)=>{await ar(e,r);const i=e.migrate?await Ze(e,r):0;return i===0&&n?.(),{code:i,descriptor:a,mintedSecretsFile:o,validation:t}},cr=(e,r,a)=>{const t=tr(e,r.logger,a,r.env);if(t!==void 0)return{code:h.USAGE,error:t};const n=nr(e,r.logger,a,r.env);if(n!==void 0)return{code:h.USAGE,error:n};const o=Fe(e,r.logger,a);if(o!==void 0)return{code:h.USAGE,error:o};const i=We(e,r.logger,r.dockerAvailable??we,a,r.env);return i===void 0?void 0:{code:h.MISSING_DEPENDENCY,error:i}},lr=(e,r,a)=>{const t=Oe(e);t!==void 0&&r.logger.info(`class-B composition: deploying ${t} (overrides wrangler main)`),r.temporary&&r.logger.info("temporary account: deploying to a short-lived Cloudflare account (~60min); wrangler will print a claim URL"),r.dryRun&&r.logger.info("dry run: validating + bundling without publishing"),r.outDir!==void 0&&r.logger.info(`build artifact: emitting bundle to ${r.outDir}`);const n=R(a),o={dryRun:r.dryRun,entry:t,environment:r.env,outDir:r.outDir,preview:r.preview,temporary:r.temporary};if(n.toolchain===void 0)throw new Error(`deploy target "${n.id}" has no command-line toolchain`);return n.toolchain.deploy(o)},D=(e,r)=>({code:h.USAGE,descriptor:void 0,error:e,validation:{problems:[],wranglerPath:void 0},...r}),dr=(e,r)=>{for(const a of e.report?.warnings??[])r.warn(`wrangler.jsonc: ${a}`);if(e.problems.length===0)return!1;r.error("wrangler.jsonc validation failed:");for(const a of e.problems)r.error(`  - ${a}`);return!0},ur=(e,r,a)=>{const t=r.format==="json",n=r.dryRun!==!0,o=lr(e,r,a),i=k(b(e),o.tool,o.args);return{args:i.args,captureStdout:n&&!t,captureStdoutSilently:n&&t,command:i.command,cwd:e,stdoutToStderr:t&&!n}},gr=async({cwd:e,descriptor:r,mintedSecretsFile:a,options:t,reblessSchemaBaseline:n,stdout:o,validation:i})=>{const s={deployedAt:new Date().toISOString(),dryRun:t.dryRun===!0,env:t.env,preview:t.preview===!0,url:t.dryRun===!0?void 0:je(o),workerName:E(e)};if(t.dryRun===!0||t.preview===!0)return t.healthCheck===!0&&t.logger.warn(`--health-check skipped: ${t.dryRun===!0?"a dry run publishes nothing":"a preview version serves no live traffic"}`),{code:0,deployment:s,descriptor:r,mintedSecretsFile:a,validation:i};t.temporary!==!0&&Ne({cwd:e,env:t.env,logger:t.logger,url:s.url});const c=await ir(t,e,s.url);return c?.error!==void 0?{code:h.UNAVAILABLE,deployment:s,descriptor:r,healthCheck:c,mintedSecretsFile:a,validation:i}:{...await sr(t,e,r,i,n,a),deployment:s,healthCheck:c}},mr=async(e,r)=>{const a=e.cwd??process.cwd(),t=B(e),n=ue(e),o={problems:[],wranglerPath:void 0},i=he(a,e.target);if(i.target===void 0){const u=i.error??"unknown deploy target";return e.logger.error(u),{error:u,validation:o}}const{target:s}=i;let c;if(!e.skipCodegen){const u=await rr(a,t,e.logger,e.apiSpec,s,e.spawner,e.format==="json",n);if(u.error!==void 0)return{error:u.error,target:s,validation:o};c=u.result}let l;if(c!==void 0){const u=ke({allowDrift:e.allowSchemaDrift===!0,codegen:c,command:r,logger:e.logger,updateBaseline:e.updateSchemaBaseline===!0});if(u.blocked)return{error:`schema drift gate blocked ${r}`,schemaDrift:{blocked:!0,reason:u.reason},target:s,validation:o};l=u.rebless}await Ve(a,e.logger,c?.cronTriggers,s,e.env);const d=cr(a,e,r);if(d!==void 0)return{code:d.code,error:d.error,target:s,validation:o};const g=Z({environment:e.env,projectRoot:a});return dr(g,e.logger)?{error:"wrangler validation failed",target:s,validation:g}:{codegen:c,reblessSchemaBaseline:l,target:s,validation:g}},fr=async e=>{const r=e.cwd??process.cwd(),a=B(e),t=await mr(e,e.commandName??"deploy");if(t.error!==void 0){if(t.validation.problems.length>0)return{code:h.USAGE,descriptor:void 0,error:t.error,validation:t.validation};const f=t.schemaDrift===void 0?void 0:{schemaDrift:t.schemaDrift};return D(t.error,{...f,...t.code===void 0?{}:{code:t.code}})}const{reblessSchemaBaseline:n,validation:o}=t,i=t.target,s=er(e);if(s!==void 0)return D(s);const c=await Be(r,e);if(c!==void 0)return D(c);Ge(r,e.logger);const{error:l,mintedSecretsFile:d}=await Qe(r,e,a,i);if(l!==void 0)return e.logger.error(l),{code:h.USAGE,descriptor:void 0,error:l,mintedSecretsFile:d,validation:o};const g=ur(r,e,i);e.logger.info(`deploying via ${g.command} ${g.args.join(" ")}`);const m=await(e.spawner??$)(g);return g.captureStdoutSilently===!0&&m.stdout!==void 0&&m.stdout!==""&&process.stderr.write(m.stdout),m.code!==0?{code:m.code,descriptor:g,mintedSecretsFile:d,validation:o}:gr({cwd:r,descriptor:g,mintedSecretsFile:d,options:e,reblessSchemaBaseline:n,stdout:m.stdout,validation:o})},hr=async e=>{const{logger:r}=e,a=e.dryRun===!0?Te(e.cwd??process.cwd()):void 0;let t;try{if(t=await fr({...e,logger:r}),t.code===0&&e.emitBindings!==void 0){const{error:n}=ve({destination:e.emitBindings,logger:r,projectRoot:e.cwd??process.cwd()});n!==void 0&&(r.error(n),t={...t,code:h.USAGE})}}finally{a?.()}if(e.format==="json")return t;if(t.code===0&&e.dryRun!==!0&&e.preview!==!0)_e({cwd:e.cwd??process.cwd(),env:e.env,logger:e.logger,mintedSecretsFile:t.mintedSecretsFile,url:t.deployment?.url});else if(t.code===0&&e.preview===!0){const n=t.deployment?.url;e.logger.success(n===void 0?"preview version uploaded":`preview version uploaded — ${n}`)}return t},Wr=ye(async({cwd:e,format:r,logger:a,options:t})=>{const n=await hr({allowSchemaDrift:t.allowSchemaDrift===!0,apiSpec:fe(t.apiSpec),cwd:e,dryRun:t.dryRun===!0,env:t.env,format:r,healthCheck:t.healthCheck===!0,logger:a,migrate:t.migrate===!0,migrateToken:t.migrateToken,migrateUrl:F({cwd:e,env:t.env,url:t.migrateUrl}),migrateYes:t.migrateYes===!0,preview:t.preview===!0,skipCodegen:t.prebuilt===!0,strictAdvisories:t.strictAdvisories,target:t.target,temporary:t.temporary===!0,updateSchemaBaseline:t.updateSchemaBaseline===!0});return{code:n.code,data:{deployment:n.deployment,healthCheck:n.healthCheck,mintedSecretsFile:n.mintedSecretsFile,schemaDrift:n.schemaDrift,validation:n.validation},error:n.error}});export{Wr as execute,Ve as provisionBindings,hr as runDeployCommand,mr as runPreDeployPipeline};