@lunora/cli 1.0.0-alpha.324 → 1.0.0-alpha.326

package/dist/packem_chunks/handler25.mjs

@@ -1,4 +1,4 @@
-import{existsSync as O,readFileSync as I}from"node:fs";import{writeFile as M,mkdir as U}from"node:fs/promises";import{join as E}from"@visulima/path";import{d as B}from"../packem_shared/command-Mmxzxyr5.mjs";import{EXIT_CODE as L}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{createRequire as F}from"node:module";import{LunoraError as N}from"@lunora/errors";import{addArgsFor as Y,detectPackageManager as q,parseSchema as P,applyAdditiveEdit as H}from"@lunora/config";const K=/^\//,j=(e,t)=>{try{const{args:n,command:r}=Y(q(e),[t],{dev:!0});return`${r} ${n.join(" ")}`}catch{return`<your-package-manager> add -D ${t}`}},T=(e,t,n)=>{const r=F(E(n,"noop.cjs"));try{r.resolve(e)}catch{throw new N("INTERNAL",`\`lunora introspect\` needs the \`${t}\` driver to read this database, and it isn't installed.
+import{existsSync as O,readFileSync as I}from"node:fs";import{writeFile as M,mkdir as U}from"node:fs/promises";import{join as E}from"@visulima/path";import{d as B}from"../packem_shared/command-B--jgXSc.mjs";import{EXIT_CODE as L}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{createRequire as F}from"node:module";import{LunoraError as N}from"@lunora/errors";import{addArgsFor as Y,detectPackageManager as q,parseSchema as P,applyAdditiveEdit as H}from"@lunora/config";const K=/^\//,j=(e,t)=>{try{const{args:n,command:r}=Y(q(e),[t],{dev:!0});return`${r} ${n.join(" ")}`}catch{return`<your-package-manager> add -D ${t}`}},T=(e,t,n)=>{const r=F(E(n,"noop.cjs"));try{r.resolve(e)}catch{throw new N("INTERNAL",`\`lunora introspect\` needs the \`${t}\` driver to read this database, and it isn't installed.
 
 Install it in your project:
 

package/dist/packem_chunks/handler26.mjs

@@ -1,4 +1,4 @@
-import{V as R}from"../packem_shared/cli-DOpChqUe.mjs";import{d as G}from"../packem_shared/command-Mmxzxyr5.mjs";import{EXIT_CODE as d}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{existsSync as f,readFileSync as h,mkdirSync as J,realpathSync as W,statSync as V,writeFileSync as z,chmodSync as H,renameSync as K,unlinkSync as q}from"node:fs";import{homedir as w}from"node:os";import{findWranglerFile as X}from"@lunora/config/cloudflare";import{join as s,dirname as B,relative as Z}from"@visulima/path";import{stringify as Q}from"smol-toml";import{parse as Y,modify as ee,applyEdits as re}from"jsonc-parser";import{detectPackageManager as te,execArgsFor as ne,readLiveDevServerState as S,DEV_STATE_DIR as oe}from"@lunora/config";import{resolveAdminToken as ae}from"@lunora/config/studio-host";import{connectLocalStdio as le}from"@lunora/mcp";import{resolve as y}from"node:path";import{i as ce}from"../packem_shared/path-containment-CgxYZggb.mjs";const m=e=>({args:[...e.args],command:e.command,...e.env===void 0?{}:{env:e.env}}),b=e=>e.transport==="http"?{type:"http",url:e.url}:m(e),se=e=>e.transport==="http"?{httpUrl:e.url}:m(e),ie=e=>e.transport==="http"?{serverUrl:e.url}:m(e),de=e=>({args:["-y","mcp-remote",e],command:"npx"}),ue=e=>e.transport==="http"?de(e.url):m(e),fe=e=>e.transport==="http"?{url:e.url}:m(e),me=e=>e.transport==="http"?{enabled:!0,type:"remote",url:e.url}:{command:[e.command,...e.args],enabled:!0,type:"local",...e.env===void 0?{}:{environment:e.env}},pe=e=>e.transport==="http"?{disabled:!1,type:"streamableHttp",url:e.url}:{disabled:!1,...m(e)},ge=({home:e,platform:r})=>{if(r==="darwin")return{global:s(e,"Library","Application Support","Claude","claude_desktop_config.json")};if(r==="win32"){const t=process.env.APPDATA;return t===void 0||t===""?{}:{global:s(t,"Claude","claude_desktop_config.json")}}return r==="linux"?{global:s(e,".config","Claude","claude_desktop_config.json")}:{}},ve=(e,r)=>Q({mcp_servers:{[e]:r.transport==="http"?{url:r.url}:{args:[...r.args],command:r.command,...r.env===void 0?{}:{env:r.env}}}}),v=[{buildEntry:b,paths:({projectRoot:e})=>({project:s(e,".mcp.json")}),format:"json",id:"claude-code",key:"mcpServers",label:"Claude Code"},{buildEntry:b,paths:({home:e,projectRoot:r})=>({global:s(e,".cursor","mcp.json"),project:s(r,".cursor","mcp.json")}),format:"json",id:"cursor",key:"mcpServers",label:"Cursor"},{buildEntry:b,paths:({projectRoot:e})=>({project:s(e,".vscode","mcp.json")}),format:"json",id:"vscode",key:"servers",label:"VS Code (GitHub Copilot)"},{buildEntry:se,paths:({home:e,projectRoot:r})=>({global:s(e,".gemini","settings.json"),project:s(r,".gemini","settings.json")}),format:"json",id:"gemini",key:"mcpServers",label:"Gemini CLI"},{buildEntry:ue,paths:ge,format:"json",id:"claude-desktop",key:"mcpServers",label:"Claude Desktop"},{buildEntry:ie,paths:({home:e})=>({global:s(e,".codeium","windsurf","mcp_config.json")}),format:"json",id:"windsurf",key:"mcpServers",label:"Windsurf"},{buildEntry:me,paths:({home:e,projectRoot:r})=>({global:s(e,".config","opencode","opencode.json"),project:s(r,"opencode.json")}),format:"json",id:"opencode",key:"mcp",label:"OpenCode"},{buildEntry:pe,paths:({home:e})=>({global:s(e,".cline","mcp.json")}),format:"json",id:"cline",key:"mcpServers",label:"Cline"},{buildEntry:fe,paths:({home:e})=>({global:s(e,".config","zed","settings.json")}),format:"json",id:"zed",key:"context_servers",label:"Zed"},{paths:({home:e,projectRoot:r})=>({global:s(e,".codex","config.toml"),project:s(r,".codex","config.toml")}),format:"manual",id:"codex",label:"Codex CLI",renderSnippet:ve}],x=v.map(e=>e.id),he=e=>v.find(r=>r.id===e.toLowerCase()),M=(e,r)=>{let t=e,n;try{t=W(e),n=V(t).mode}catch{}const a=`${t}.lunora-${Math.random().toString(36).slice(2,10)}.tmp`;try{z(a,r,"utf8"),n!==void 0&&H(a,n),K(a,t)}catch(o){try{q(a)}catch{}throw o}},ye={formattingOptions:{insertSpaces:!0,tabSize:4}},k=e=>{const r=[],t=Y(e,r,{allowTrailingComma:!0});return{errors:r,value:t}},g=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),E=(e,r,t)=>{if(!g(e))return;const n=e[r];return g(n)?n[t]:void 0},L=e=>{if(!f(e.path))return"absent";let r;try{r=h(e.path,"utf8")}catch{return"invalid"}if(r.trim().length===0)return"absent";const{errors:t,value:n}=k(r);return t.length>0||!g(n)?"invalid":E(n,e.key,e.name)===void 0?"absent":"present"},be=e=>L(e)==="present",U=(e,r,t,n,a)=>{try{const o=ee(e,[t,n],a,ye);o.length>0&&M(r,re(e,o));return}catch(o){return o instanceof Error?o.message:String(o)}},Se=e=>{const{entry:r,force:t=!1,key:n,name:a,path:o}=e,l=f(o)?h(o,"utf8"):"";if(l.trim().length===0)return J(B(o),{recursive:!0}),M(o,`${JSON.stringify({[n]:{[a]:r}},void 0,4)}
+import{V as R}from"../packem_shared/cli-D1ZleZMH.mjs";import{d as G}from"../packem_shared/command-B--jgXSc.mjs";import{EXIT_CODE as d}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{existsSync as f,readFileSync as h,mkdirSync as J,realpathSync as W,statSync as V,writeFileSync as z,chmodSync as H,renameSync as K,unlinkSync as q}from"node:fs";import{homedir as w}from"node:os";import{findWranglerFile as X}from"@lunora/config/cloudflare";import{join as s,dirname as B,relative as Z}from"@visulima/path";import{stringify as Q}from"smol-toml";import{parse as Y,modify as ee,applyEdits as re}from"jsonc-parser";import{detectPackageManager as te,execArgsFor as ne,readLiveDevServerState as S,DEV_STATE_DIR as oe}from"@lunora/config";import{resolveAdminToken as ae}from"@lunora/config/studio-host";import{connectLocalStdio as le}from"@lunora/mcp";import{resolve as y}from"node:path";import{i as ce}from"../packem_shared/path-containment-CgxYZggb.mjs";const m=e=>({args:[...e.args],command:e.command,...e.env===void 0?{}:{env:e.env}}),b=e=>e.transport==="http"?{type:"http",url:e.url}:m(e),se=e=>e.transport==="http"?{httpUrl:e.url}:m(e),ie=e=>e.transport==="http"?{serverUrl:e.url}:m(e),de=e=>({args:["-y","mcp-remote",e],command:"npx"}),ue=e=>e.transport==="http"?de(e.url):m(e),fe=e=>e.transport==="http"?{url:e.url}:m(e),me=e=>e.transport==="http"?{enabled:!0,type:"remote",url:e.url}:{command:[e.command,...e.args],enabled:!0,type:"local",...e.env===void 0?{}:{environment:e.env}},pe=e=>e.transport==="http"?{disabled:!1,type:"streamableHttp",url:e.url}:{disabled:!1,...m(e)},ge=({home:e,platform:r})=>{if(r==="darwin")return{global:s(e,"Library","Application Support","Claude","claude_desktop_config.json")};if(r==="win32"){const t=process.env.APPDATA;return t===void 0||t===""?{}:{global:s(t,"Claude","claude_desktop_config.json")}}return r==="linux"?{global:s(e,".config","Claude","claude_desktop_config.json")}:{}},ve=(e,r)=>Q({mcp_servers:{[e]:r.transport==="http"?{url:r.url}:{args:[...r.args],command:r.command,...r.env===void 0?{}:{env:r.env}}}}),v=[{buildEntry:b,paths:({projectRoot:e})=>({project:s(e,".mcp.json")}),format:"json",id:"claude-code",key:"mcpServers",label:"Claude Code"},{buildEntry:b,paths:({home:e,projectRoot:r})=>({global:s(e,".cursor","mcp.json"),project:s(r,".cursor","mcp.json")}),format:"json",id:"cursor",key:"mcpServers",label:"Cursor"},{buildEntry:b,paths:({projectRoot:e})=>({project:s(e,".vscode","mcp.json")}),format:"json",id:"vscode",key:"servers",label:"VS Code (GitHub Copilot)"},{buildEntry:se,paths:({home:e,projectRoot:r})=>({global:s(e,".gemini","settings.json"),project:s(r,".gemini","settings.json")}),format:"json",id:"gemini",key:"mcpServers",label:"Gemini CLI"},{buildEntry:ue,paths:ge,format:"json",id:"claude-desktop",key:"mcpServers",label:"Claude Desktop"},{buildEntry:ie,paths:({home:e})=>({global:s(e,".codeium","windsurf","mcp_config.json")}),format:"json",id:"windsurf",key:"mcpServers",label:"Windsurf"},{buildEntry:me,paths:({home:e,projectRoot:r})=>({global:s(e,".config","opencode","opencode.json"),project:s(r,"opencode.json")}),format:"json",id:"opencode",key:"mcp",label:"OpenCode"},{buildEntry:pe,paths:({home:e})=>({global:s(e,".cline","mcp.json")}),format:"json",id:"cline",key:"mcpServers",label:"Cline"},{buildEntry:fe,paths:({home:e})=>({global:s(e,".config","zed","settings.json")}),format:"json",id:"zed",key:"context_servers",label:"Zed"},{paths:({home:e,projectRoot:r})=>({global:s(e,".codex","config.toml"),project:s(r,".codex","config.toml")}),format:"manual",id:"codex",label:"Codex CLI",renderSnippet:ve}],x=v.map(e=>e.id),he=e=>v.find(r=>r.id===e.toLowerCase()),M=(e,r)=>{let t=e,n;try{t=W(e),n=V(t).mode}catch{}const a=`${t}.lunora-${Math.random().toString(36).slice(2,10)}.tmp`;try{z(a,r,"utf8"),n!==void 0&&H(a,n),K(a,t)}catch(o){try{q(a)}catch{}throw o}},ye={formattingOptions:{insertSpaces:!0,tabSize:4}},k=e=>{const r=[],t=Y(e,r,{allowTrailingComma:!0});return{errors:r,value:t}},g=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),E=(e,r,t)=>{if(!g(e))return;const n=e[r];return g(n)?n[t]:void 0},L=e=>{if(!f(e.path))return"absent";let r;try{r=h(e.path,"utf8")}catch{return"invalid"}if(r.trim().length===0)return"absent";const{errors:t,value:n}=k(r);return t.length>0||!g(n)?"invalid":E(n,e.key,e.name)===void 0?"absent":"present"},be=e=>L(e)==="present",U=(e,r,t,n,a)=>{try{const o=ee(e,[t,n],a,ye);o.length>0&&M(r,re(e,o));return}catch(o){return o instanceof Error?o.message:String(o)}},Se=e=>{const{entry:r,force:t=!1,key:n,name:a,path:o}=e,l=f(o)?h(o,"utf8"):"";if(l.trim().length===0)return J(B(o),{recursive:!0}),M(o,`${JSON.stringify({[n]:{[a]:r}},void 0,4)}
 `),{action:"created",path:o};const{errors:c,value:i}=k(l);if(c.length>0)return{action:"invalid",error:`parse error at offset ${String(c[0]?.offset??0)}`,path:o};if(!g(i))return{action:"invalid",error:"the file's root is not a JSON object",path:o};const p=i[n];if(p!==void 0&&!g(p))return{action:"invalid",error:`"${n}" is not an object`,path:o};if(E(i,n,a)!==void 0&&!t)return{action:"skipped",path:o};const $=U(l,o,n,a,r);return $===void 0?{action:"updated",path:o}:{action:"invalid",error:$,path:o}},we=e=>{const{key:r,name:t,path:n}=e;if(!f(n))return{action:"absent",path:n};let a;try{a=h(n,"utf8")}catch(i){return{action:"invalid",error:i instanceof Error?i.message:String(i),path:n}}const{errors:o,value:l}=k(a);if(o.length>0)return{action:"invalid",error:`parse error at offset ${String(o[0]?.offset??0)}`,path:n};if(E(l,r,t)===void 0)return{action:"absent",path:n};const c=U(a,n,r,t,void 0);return c===void 0?{action:"removed",path:n}:{action:"invalid",error:c,path:n}},ke=["global","project"],u=(e,r)=>{const t=Z(r,e);return t.length>0&&!t.startsWith("..")?t:e},Ee=(e,r)=>{const t=e.paths(r);return ke.flatMap(n=>{const a=t[n];return a===void 0?[]:[{client:e,path:a,scope:n}]})},$e=(e,r,t,n)=>{const a=e.paths(r),o=t==="global"?"project":"global",l=a[t]??(n?void 0:a[o]);if(l!==void 0)return{client:e,path:l,scope:a[t]===void 0?o:t}},je=e=>v.filter(r=>Object.values(r.paths(e)).some(t=>f(t))),A=(e,r,t,n)=>{if(e.length===0)return r();const a=[];for(const o of e){const l=he(o);if(l===void 0){t.error(`mcp ${n}: unknown client "${o}". Known clients: ${x.join(", ")}.`);return}a.push(l)}return a},Oe=e=>e.client.format==="json",Ce="https://lunora.sh/mcp",N="lunora-docs",D="lunora",_e=e=>f(s(e,"lunora"))&&X(e)!==void 0,xe=e=>{const{args:r,command:t}=ne(e,"lunora",["mcp","serve"]);return{args:r,command:t,transport:"stdio"}},Me=e=>({transport:"http",url:e}),Le=e=>({home:e.home,platform:e.platform,projectRoot:e.cwd}),T=(e,r,t)=>$e(e,Le(t),t.scope??r.preferredScope,t.scope!==void 0||!r.allowScopeFallback),Ue=(e,r,t)=>{const n=T(e,r,t);if(n===void 0){t.logger.warn(`${e.label}: has no ${t.scope??r.preferredScope}-scoped config — skipped "${r.name}".`);return}const{path:a}=n,o=e.buildEntry(r.spec);if(t.print===!0){const i=u(a,t.cwd);return t.force!==!0&&be({key:e.key,name:r.name,path:a})?(t.logger.info(`${e.label}: "${r.name}" already configured in ${i} — a real install would skip it (re-run with --force to replace).`),{action:"printed",path:a}):(t.logger.info(`${e.label} → ${i}
 ${JSON.stringify({[e.key]:{[r.name]:o}},void 0,4)}`),{action:"printed",path:a})}const l=Se({entry:o,force:t.force===!0,key:e.key,name:r.name,path:a}),c=u(a,t.cwd);return l.action==="invalid"?t.logger.error(`${e.label}: ${c} is not valid JSON (${l.error??"unknown error"}) — left untouched.`):l.action==="skipped"?t.logger.info(`${e.label}: "${r.name}" already configured in ${c} — re-run with --force to replace it.`):t.logger.success(`${e.label}: ${l.action==="created"?"created":"updated"} ${c} with "${r.name}".`),{action:l.action,path:a}},Ae=(e,r,t)=>{const n=T(e,r,t)?.path;if(n===void 0){t.logger.warn(`${e.label}: no known config location on ${t.platform} — skipped.`);return}return t.logger.info(`${e.label}: add this to ${u(n,t.cwd)}
 

package/dist/packem_chunks/handler3.mjs

@@ -1 +1 @@
-import{d as h}from"../packem_shared/command-Mmxzxyr5.mjs";import{i as p}from"../packem_shared/docker-DpVxvYpL.mjs";import{EXIT_CODE as m}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{defaultSpawner as S}from"../packem_shared/createRecordingSpawner-sS7LEN7x.mjs";import{execArgsFor as w,detectPackageManager as v}from"@lunora/config";const u=new Set(["build","delete","images","info","list","push"]),b=new Set(["build","push"]),f=new Set(["images list","info","list"]),E=async e=>{const[r,...t]=e.argument;if(r===void 0||!u.has(r)){const n=`lunora containers requires a subcommand: ${[...u].toSorted((i,d)=>i.localeCompare(d)).join(" | ")}. Example: lunora containers build ./containers/app --tag app:v1 --push`;return e.logger.error(n),{code:m.USAGE,error:n}}const o=e.format==="json",s=r==="images"?`images ${t[0]??""}`.trim():r;if(o&&!f.has(s)){const n=`containers ${s}: --format json is only available for the read subcommands (${[...f].toSorted((i,d)=>i.localeCompare(d)).join(" | ")}) — wrangler has no JSON rendering for the rest.`;return e.logger.error(n),{code:m.USAGE,error:n}}if(b.has(r)&&!(e.dockerAvailable??p)()){const n=`containers ${r} needs a running Docker-compatible engine (it builds/pushes images locally). Start Docker or Colima and retry. Note: container images must target linux/amd64.`;return e.logger.error(n),{code:m.MISSING_DEPENDENCY,error:n}}const a=["containers",r,...t];o&&a.push("--json"),e.tag!==void 0&&a.push("--tag",e.tag),e.push===!0&&a.push("--push"),e.env!==void 0&&a.push("--env",e.env);const l=e.cwd??process.cwd(),g=w(v(l),"wrangler",a),c={args:g.args,command:g.command,cwd:l};return e.logger.info(`running ${c.command} ${c.args.join(" ")}`),{code:(await(e.spawner??S)(c)).code,delegated:o,descriptor:c}},k=h(async({argument:e,cwd:r,format:t,logger:o,options:s})=>{const a=await E({argument:e,cwd:r,env:s.env,format:t,logger:o,push:s.push===!0,tag:s.tag});return{code:a.code,delegated:a.delegated,error:a.error}});export{k as execute,E as runContainersCommand};
+import{d as h}from"../packem_shared/command-B--jgXSc.mjs";import{i as p}from"../packem_shared/docker-DpVxvYpL.mjs";import{EXIT_CODE as m}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{defaultSpawner as S}from"../packem_shared/createRecordingSpawner-sS7LEN7x.mjs";import{execArgsFor as w,detectPackageManager as v}from"@lunora/config";const u=new Set(["build","delete","images","info","list","push"]),b=new Set(["build","push"]),f=new Set(["images list","info","list"]),E=async e=>{const[r,...t]=e.argument;if(r===void 0||!u.has(r)){const n=`lunora containers requires a subcommand: ${[...u].toSorted((i,d)=>i.localeCompare(d)).join(" | ")}. Example: lunora containers build ./containers/app --tag app:v1 --push`;return e.logger.error(n),{code:m.USAGE,error:n}}const o=e.format==="json",s=r==="images"?`images ${t[0]??""}`.trim():r;if(o&&!f.has(s)){const n=`containers ${s}: --format json is only available for the read subcommands (${[...f].toSorted((i,d)=>i.localeCompare(d)).join(" | ")}) — wrangler has no JSON rendering for the rest.`;return e.logger.error(n),{code:m.USAGE,error:n}}if(b.has(r)&&!(e.dockerAvailable??p)()){const n=`containers ${r} needs a running Docker-compatible engine (it builds/pushes images locally). Start Docker or Colima and retry. Note: container images must target linux/amd64.`;return e.logger.error(n),{code:m.MISSING_DEPENDENCY,error:n}}const a=["containers",r,...t];o&&a.push("--json"),e.tag!==void 0&&a.push("--tag",e.tag),e.push===!0&&a.push("--push"),e.env!==void 0&&a.push("--env",e.env);const l=e.cwd??process.cwd(),g=w(v(l),"wrangler",a),c={args:g.args,command:g.command,cwd:l};return e.logger.info(`running ${c.command} ${c.args.join(" ")}`),{code:(await(e.spawner??S)(c)).code,delegated:o,descriptor:c}},k=h(async({argument:e,cwd:r,format:t,logger:o,options:s})=>{const a=await E({argument:e,cwd:r,env:s.env,format:t,logger:o,push:s.push===!0,tag:s.tag});return{code:a.code,delegated:a.delegated,error:a.error}});export{k as execute,E as runContainersCommand};

package/dist/packem_chunks/handler4.mjs

@@ -1 +1 @@
-import{d as i}from"../packem_shared/command-Mmxzxyr5.mjs";import{EXIT_CODE as c}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{defaultSpawner as l}from"../packem_shared/createRecordingSpawner-sS7LEN7x.mjs";import{execArgsFor as u,detectPackageManager as g}from"@lunora/config";const a=(e,r)=>(r!==void 0&&e.push("--env",r),e),f=e=>{const r=a(["deployments","list"],e.env);return e.format==="json"&&r.push("--json"),r},v=e=>{switch(e.subcommand){case"inspect":return e.versionId===void 0?{error:"deployments inspect requires a version id. Usage: lunora deployments inspect <version-id>"}:{args:a(["versions","view",e.versionId],e.env)};case"list":return{args:f(e)};case"promote":{if(e.versionId===void 0)return{error:"deployments promote requires a version id. Usage: lunora deployments promote <version-id> --yes"};if(!e.yes)return{error:"deployments promote shifts 100% of live traffic. Re-run with --yes to confirm."};const r=a(["versions","deploy",`${e.versionId}@100%`,"--yes"],e.env);return e.message!==void 0&&r.push("--message",e.message),{args:r}}case"rollback":{if(!e.yes)return{error:"deployments rollback changes the live version. Re-run with --yes to confirm."};const r=a(["rollback"],e.env);return e.versionId!==void 0&&r.push(e.versionId),r.push("--yes"),e.message!==void 0&&r.push("--message",e.message),{args:r}}default:return{error:`deployments: unknown subcommand "${e.subcommand}"`}}},y=async e=>{if(e.format==="json"&&e.subcommand!=="list"){const m=`deployments ${e.subcommand}: --format json is only available for \`deployments list\` — wrangler has no JSON rendering for the others.`;return e.logger.error(m),{code:c.USAGE,descriptor:void 0,error:m}}const{args:r,error:t}=v(e);if(t!==void 0||r===void 0)return e.logger.error(t??"deployments: nothing to run"),{code:c.USAGE,descriptor:void 0,error:t};const{logger:d}=e,n=e.cwd??process.cwd(),o=u(g(n),"wrangler",r),s={args:o.args,command:o.command,cwd:n};return d.info(`${s.command} ${s.args.join(" ")}`),{code:(await(e.spawner??l)(s)).code,delegated:e.format==="json",descriptor:s}},p=e=>e==="list"||e==="inspect"||e==="rollback"||e==="promote",A=i(({argument:e,cwd:r,format:t,logger:d,options:n})=>{const o=e[0];if(!p(o)){const s=`deployments: unknown subcommand "${o??""}" — expected list | inspect | rollback | promote`;return d.error(s),{code:c.USAGE,error:s}}return y({cwd:r,env:n.env,format:t,logger:d,message:n.message,subcommand:o,versionId:e[1],yes:n.yes===!0})});export{A as execute,y as runDeploymentsCommand};
+import{d as i}from"../packem_shared/command-B--jgXSc.mjs";import{EXIT_CODE as c}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{defaultSpawner as l}from"../packem_shared/createRecordingSpawner-sS7LEN7x.mjs";import{execArgsFor as u,detectPackageManager as g}from"@lunora/config";const a=(e,r)=>(r!==void 0&&e.push("--env",r),e),f=e=>{const r=a(["deployments","list"],e.env);return e.format==="json"&&r.push("--json"),r},v=e=>{switch(e.subcommand){case"inspect":return e.versionId===void 0?{error:"deployments inspect requires a version id. Usage: lunora deployments inspect <version-id>"}:{args:a(["versions","view",e.versionId],e.env)};case"list":return{args:f(e)};case"promote":{if(e.versionId===void 0)return{error:"deployments promote requires a version id. Usage: lunora deployments promote <version-id> --yes"};if(!e.yes)return{error:"deployments promote shifts 100% of live traffic. Re-run with --yes to confirm."};const r=a(["versions","deploy",`${e.versionId}@100%`,"--yes"],e.env);return e.message!==void 0&&r.push("--message",e.message),{args:r}}case"rollback":{if(!e.yes)return{error:"deployments rollback changes the live version. Re-run with --yes to confirm."};const r=a(["rollback"],e.env);return e.versionId!==void 0&&r.push(e.versionId),r.push("--yes"),e.message!==void 0&&r.push("--message",e.message),{args:r}}default:return{error:`deployments: unknown subcommand "${e.subcommand}"`}}},y=async e=>{if(e.format==="json"&&e.subcommand!=="list"){const m=`deployments ${e.subcommand}: --format json is only available for \`deployments list\` — wrangler has no JSON rendering for the others.`;return e.logger.error(m),{code:c.USAGE,descriptor:void 0,error:m}}const{args:r,error:t}=v(e);if(t!==void 0||r===void 0)return e.logger.error(t??"deployments: nothing to run"),{code:c.USAGE,descriptor:void 0,error:t};const{logger:d}=e,n=e.cwd??process.cwd(),o=u(g(n),"wrangler",r),s={args:o.args,command:o.command,cwd:n};return d.info(`${s.command} ${s.args.join(" ")}`),{code:(await(e.spawner??l)(s)).code,delegated:e.format==="json",descriptor:s}},p=e=>e==="list"||e==="inspect"||e==="rollback"||e==="promote",A=i(({argument:e,cwd:r,format:t,logger:d,options:n})=>{const o=e[0];if(!p(o)){const s=`deployments: unknown subcommand "${o??""}" — expected list | inspect | rollback | promote`;return d.error(s),{code:c.USAGE,error:s}}return y({cwd:r,env:n.env,format:t,logger:d,message:n.message,subcommand:o,versionId:e[1],yes:n.yes===!0})});export{A as execute,y as runDeploymentsCommand};

package/dist/packem_chunks/handler5.mjs

@@ -1 +1 @@
-import{d as s}from"../packem_shared/command-Mmxzxyr5.mjs";import{o as c}from"../packem_shared/open-url-EnKy--w-.mjs";const n="https://lunora.sh/docs",l=r=>{let e=0,t=r.length;for(;e<t&&r[e]==="/";)e+=1;for(;t>e&&r[t-1]==="/";)t-=1;return r.slice(e,t)},i=r=>{if(!r||r.length===0)return n;const e=l(r);return e.length===0?n:`${n}/${e}`},a=async r=>{const e=i(r.section);r.logger.info(`opening ${e}`);try{await c(e,{opener:r.opener})}catch(t){const o=t instanceof Error?t.message:String(t);return r.logger.error(`docs: failed to open URL: ${o}`),{code:1,url:e}}return{code:0,url:e}},m=s(({argument:r,logger:e})=>a({logger:e,section:r[0]}));export{m as execute,a as runDocsCommand};
+import{d as s}from"../packem_shared/command-B--jgXSc.mjs";import{o as c}from"../packem_shared/open-url-EnKy--w-.mjs";const n="https://lunora.sh/docs",l=r=>{let e=0,t=r.length;for(;e<t&&r[e]==="/";)e+=1;for(;t>e&&r[t-1]==="/";)t-=1;return r.slice(e,t)},i=r=>{if(!r||r.length===0)return n;const e=l(r);return e.length===0?n:`${n}/${e}`},a=async r=>{const e=i(r.section);r.logger.info(`opening ${e}`);try{await c(e,{opener:r.opener})}catch(t){const o=t instanceof Error?t.message:String(t);return r.logger.error(`docs: failed to open URL: ${o}`),{code:1,url:e}}return{code:0,url:e}},m=s(({argument:r,logger:e})=>a({logger:e,section:r[0]}));export{m as execute,a as runDocsCommand};

package/dist/packem_chunks/handler6.mjs

@@ -1 +1 @@
-import{existsSync as p,readFileSync as w,realpathSync as h}from"node:fs";import{join as u}from"node:path";import{isPlaceholderValue as b,DEV_VARS_FILE as g,parseDevVariableEntries as k,discoverSchemaInfo as x,inferLunoraBindings as y}from"@lunora/config";import{findWranglerFile as _,readWranglerJsonc as $,validateWranglerProject as R,UNEXPORTED_CLASS_MARKER as v,collectExportGaps as S}from"@lunora/config/cloudflare";import{i as L,m as N,c as A}from"../packem_shared/vectorize-metadata-dXpl2_Ar.mjs";import{r as j,d as I}from"../packem_shared/admin-token-VdUnvnKW.mjs";import{d as E}from"../packem_shared/command-Mmxzxyr5.mjs";import{i as O}from"../packem_shared/path-containment-CgxYZggb.mjs";const D=a=>{const e=a.trim();if(e==="")return!0;const r=e.toLowerCase();return r.includes("replace")||r.startsWith("<")&&r.endsWith(">")},C=a=>{const e=_(a);if(e===void 0)return{parsed:void 0,path:void 0};const{parsed:r}=$(e);return{parsed:r,path:e}},P=(a,e,r,n)=>{if(r===void 0){n.push({code:"wrangler-missing",fix:"Run `lunora init` (or `lunora dev`) to scaffold and reconcile wrangler.jsonc.",level:"fail",message:"wrangler.jsonc not found."});return}if(e===void 0){n.push({code:"wrangler-unparseable",fix:`Check ${r} is valid JSONC.`,level:"fail",message:`Could not parse ${r}.`});return}const{report:t}=R({projectRoot:a});for(const i of t.errors.filter(l=>l.includes(v)))n.push({code:"wrangler-class-unexported",level:"fail",message:i});for(const i of t.warnings.filter(l=>l.includes("LUNORA_ORIGIN_URL")))n.push({code:"scheduler-origin-missing",fix:"Set LUNORA_ORIGIN_URL in wrangler vars to the worker's public URL (or `wrangler secret put LUNORA_ORIGIN_URL`).",level:"warn",message:i});const o=i=>i.includes(v)||i.includes("SHARD");for(const i of t.errors.filter(l=>!o(l)))n.push({code:"wrangler-invalid",fix:"Fix the reported wrangler.jsonc problem; `lunora verify` reports the same set.",level:"fail",message:i});for(const i of t.warnings.filter(l=>!l.includes("LUNORA_ORIGIN_URL")))n.push({code:"wrangler-advisory",level:"warn",message:i});const c=t.errors.find(i=>i.includes("SHARD"));c===void 0?n.push({code:"wrangler-shard-binding-ok",level:"pass",message:"wrangler.jsonc present with a SHARD durable-object binding."}):n.push({code:"wrangler-shard-binding-missing",fix:"Run `lunora dev` to auto-reconcile, or add the binding manually.",level:"fail",message:c})},U=(a,e)=>{p(u(a,"lunora.json"))&&e.push({code:"stale-lunora-json",fix:'Move `target` / `remote` into `lunora.config.ts` (`export default { target: "…" }`), then delete lunora.json.',level:"warn",message:"lunora.json is present but no longer read — lunora.config.* replaced it, so any `target` or `remote` in it is being ignored."})},V=(a,e)=>{a===void 0||a.limits?.cpu_ms!==void 0||e.push({code:"cpu-limit-missing",fix:'Add `"limits": { "cpu_ms": 30000 }` to wrangler.jsonc, tuned to your slowest legitimate handler.',level:"info",message:"no limits.cpu_ms is set — a runaway handler can burn CPU up to the platform default before anything stops it."})},M=(a,e)=>{const r=(a?.r2_buckets??[]).map(n=>n?.bucket_name).filter(n=>typeof n=="string"&&n.length>0);r.length!==0&&e.push({code:"r2-lifecycle-unset",fix:"wrangler r2 bucket lifecycle list <bucket> — add an abort-incomplete-multipart rule if none exists.",level:"info",message:`R2 bucket(s) ${r.join(", ")}: verify a lifecycle rule aborts incomplete multipart uploads — orphaned parts are billed but invisible in a listing.`})},F=(a,e)=>{const{error:r,info:n}=x(a,"lunora");if(r!==void 0){e.push({code:"schema-unreadable",fix:"Fix the parse error, then re-run `lunora doctor`. `lunora codegen` reports the same failure with the offending source.",level:"fail",message:`lunora/schema.ts could not be parsed, so every schema-derived check was skipped: ${r}`});return}for(const t of n?.vectorMetadata??[]){const o=N(t.kind);if(o===void 0){e.push({code:"vector-metadata-unfilterable",fix:"Filter on a string, number or boolean column, or drop it from `metadata`.",level:"warn",message:`vector index "${t.index}" declares metadata "${t.property}", whose type Vectorize cannot filter on.`});continue}e.push({code:"vector-metadata-index-required",fix:`wrangler ${A({index:t.index,property:t.property,type:o}).join(" ")}`,level:"info",message:`vector index "${t.index}" filters on metadata "${t.property}" — that needs a Vectorize metadata index (\`lunora deploy\` creates it).`})}},T=(a,e)=>{if(a===void 0)return;const r=(a.d1_databases??[]).filter(Boolean);for(const n of r){const t=typeof n.database_id=="string"?n.database_id:"";if(D(t)){const o=typeof n.binding=="string"&&n.binding.length>0?n.binding:"<unnamed>";e.push({code:"d1-placeholder-id",fix:"Run `wrangler d1 create <name>` and paste the returned database_id into wrangler.jsonc.",level:"fail",message:`D1 binding "${o}" has a placeholder database_id ("${t||"<empty>"}").`})}}},W=(a,e)=>{if(a===void 0)return;const r=(a.send_email??[]).filter(Boolean);for(const n of r){const t=typeof n.destination_address=="string"?n.destination_address:"";if(t!==""&&b(t)){const o=typeof n.name=="string"&&n.name.length>0?n.name:"send_email";e.push({code:"email-destination-placeholder",fix:"Set destination_address to a verified Cloudflare Email Routing address.",level:"warn",message:`send_email binding "${o}" has a placeholder destination_address ("${t}").`})}}},G=(a,e)=>{const r=u(a,g);if(!p(r))return;let n;try{n=w(r,"utf8")}catch{return}const t=k(n).filter(o=>L(o.key)&&b(o.value)).map(o=>o.key);t.length>0&&e.push({code:"dev-vars-missing-secret",fix:"Run `lunora dev` to auto-generate secrets, or fill them in by hand.",level:"warn",message:`${g} has unfilled secret value(s): ${t.join(", ")}.`})},z=(a,e)=>{const{source:r}=j({cwd:a});r===void 0?e.push({code:"admin-token-missing",fix:"Set LUNORA_ADMIN_TOKEN (env or `.dev.vars`) to enable admin RPCs / studio.",level:"info",message:"LUNORA_ADMIN_TOKEN is not set."}):e.push({code:"admin-token-set",level:"pass",message:`LUNORA_ADMIN_TOKEN is set (${I(r)}).`})},K=async(a,e)=>{let r;try{r=await y({projectRoot:a})}catch(o){e.push({code:"declared-export-unchecked",fix:"Make sure the worker entry resolves (see `lunora codegen`), then re-run.",level:"warn",message:`could not check whether declared containers/workflows/agents are re-exported by the worker entry: ${o instanceof Error?o.message:String(o)}`});return}const n=S(r),t=[...r.containers.map(o=>({...o,kind:"container"})),...r.workflows.map(o=>({...o,kind:"workflow"})),...r.agents.map(o=>({...o,kind:"agent"}))];for(const o of t.filter(c=>c.exported))e.push({code:"declared-export-ok",level:"pass",message:`${o.kind} "${o.exportName}" is exported by the worker entry.`});for(const o of n)e.push({code:"declared-export-missing",fix:`Add \`export * from "./lunora/_generated/${o.module}"\` to your worker entry (or re-run \`vis generate lunora-${o.kind}\`).`,level:"fail",message:`${o.kind} "${o.exportName}" is declared but ${o.className} is not exported by the worker entry.`})},B=/^[\^~><= ]+/u,H=/^(?<core>\d+\.\d+\.\d+)(?:-(?<channel>[a-z]+)\.(?<counter>\d+))?$/u,J=a=>{const e=a.replace(B,"").trim(),r=H.exec(e);if(!r?.groups)return;const{channel:n,core:t,counter:o}=r.groups;return{channel:n??"",core:t??"",counter:o===void 0?void 0:Number.parseInt(o,10),raw:e}},q=(a,e)=>{const r=u(a,"package.json");if(!p(r))return;let n;try{n=JSON.parse(w(r,"utf8"))}catch{return}const t={...n.devDependencies,...n.dependencies},o=[];for(const[s,d]of Object.entries(t)){if(s!=="lunorash"&&!s.startsWith("@lunora/"))continue;const m=J(d);m&&o.push({name:s,version:m})}if(o.length<2)return;const c=s=>s.map(d=>`${d.name}@${d.version.raw}`).join(", "),i=new Set(o.map(s=>s.version.core)),l=new Set(o.map(s=>s.version.channel));if(i.size>1){e.push({code:"version-skew-cores",fix:'Run `pnpm update "@lunora/*" lunorash` (or `npm`/`yarn` equivalent) so every Lunora package moves to the same release.',level:"warn",message:`Lunora packages span ${String(i.size)} different versions: ${c(o)}.`});return}if(l.size>1){e.push({code:"version-skew-channels",fix:"Pick one channel (all stable, or all alpha/beta) and update the odd package out.",level:"warn",message:`Lunora packages mix release channels (${[...l].map(s=>s===""?"stable":s).join(" + ")}): ${c(o)}.`});return}const f=o.map(s=>s.version.counter).filter(s=>s!==void 0);if(f.length>1){const s=Math.min(...f),d=Math.max(...f);e.push({code:"version-counter-spread",level:"info",message:f.length===o.length&&s===d?`Lunora packages are all at ${[...l][0]??""}.${String(d)}.`:`Lunora pre-release counters span ${String(s)}–${String(d)}: ${c(o)}.`})}},X=[u("@lunora","cli"),"lunorash"],Q=(a,e,r)=>{if(e===void 0)return;const n=[];for(const o of X){const c=u(a,"node_modules",o);if(p(c))try{n.push(h(c))}catch{}}if(n.length===0)return;let t;try{t=h(e)}catch{return}n.some(o=>O(o,t))||r.push({code:"cli-shadowed",fix:"Run the project's own CLI: `pnpm exec lunora …` (or `npx lunora …`).",level:"warn",message:`the running lunora (${t}) is not the project's own install (${n.join(", ")}).`})},Y=async a=>{const e=a.cwd??process.cwd(),r=[],{parsed:n,path:t}=C(e);P(e,n,t,r),T(n,r),W(n,r),V(n,r),M(n,r),G(e,r),z(e,r),q(e,r),F(e,r),U(e,r),Q(e,a.executablePath??process.argv[1],r),await K(e,r);const o={fail:0,info:0,pass:0,warn:0};for(const i of r)o[i.level]+=1;const c=o.fail>0?1:0;return{code:c,findings:r,ok:c===0,summary:o}},Z={fail:"FAIL",info:"INFO",pass:"PASS",warn:"WARN"},ee=(a,e)=>{e.info("lunora doctor — project preflight");for(const t of a.findings){const o=`[${Z[t.level]}] ${t.message}`;t.level==="fail"?e.error(o):t.level==="warn"?e.warn(o):e.info(o),t.fix!==void 0&&t.level!=="pass"&&e.info(`       fix: ${t.fix}`)}const{fail:r,warn:n}=a.summary;r>0?e.error(`${String(r)} failure(s), ${String(n)} warning(s).`):n>0?e.warn(`0 failures, ${String(n)} warning(s).`):e.success("all checks passed.")},re=async a=>{const{logger:e}=a,r=await Y({...a});return ee(r,e),r},de=E(async({cwd:a,format:e,logger:r})=>{const n=await re({cwd:a,format:e,logger:r});return{code:n.code,data:{findings:n.findings,summary:n.summary}}});export{de as execute,Y as runDoctor,re as runDoctorCommand};
+import{existsSync as p,readFileSync as w,realpathSync as h}from"node:fs";import{join as u}from"node:path";import{isPlaceholderValue as b,DEV_VARS_FILE as g,parseDevVariableEntries as k,discoverSchemaInfo as x,inferLunoraBindings as y}from"@lunora/config";import{findWranglerFile as _,readWranglerJsonc as $,validateWranglerProject as R,UNEXPORTED_CLASS_MARKER as v,collectExportGaps as S}from"@lunora/config/cloudflare";import{i as L,m as N,c as A}from"../packem_shared/secret-key-DsMeUoEg.mjs";import{r as j,d as I}from"../packem_shared/admin-token-VdUnvnKW.mjs";import{d as E}from"../packem_shared/command-B--jgXSc.mjs";import{i as O}from"../packem_shared/path-containment-CgxYZggb.mjs";const D=a=>{const e=a.trim();if(e==="")return!0;const r=e.toLowerCase();return r.includes("replace")||r.startsWith("<")&&r.endsWith(">")},C=a=>{const e=_(a);if(e===void 0)return{parsed:void 0,path:void 0};const{parsed:r}=$(e);return{parsed:r,path:e}},P=(a,e,r,n)=>{if(r===void 0){n.push({code:"wrangler-missing",fix:"Run `lunora init` (or `lunora dev`) to scaffold and reconcile wrangler.jsonc.",level:"fail",message:"wrangler.jsonc not found."});return}if(e===void 0){n.push({code:"wrangler-unparseable",fix:`Check ${r} is valid JSONC.`,level:"fail",message:`Could not parse ${r}.`});return}const{report:t}=R({projectRoot:a});for(const i of t.errors.filter(l=>l.includes(v)))n.push({code:"wrangler-class-unexported",level:"fail",message:i});for(const i of t.warnings.filter(l=>l.includes("LUNORA_ORIGIN_URL")))n.push({code:"scheduler-origin-missing",fix:"Set LUNORA_ORIGIN_URL in wrangler vars to the worker's public URL (or `wrangler secret put LUNORA_ORIGIN_URL`).",level:"warn",message:i});const o=i=>i.includes(v)||i.includes("SHARD");for(const i of t.errors.filter(l=>!o(l)))n.push({code:"wrangler-invalid",fix:"Fix the reported wrangler.jsonc problem; `lunora verify` reports the same set.",level:"fail",message:i});for(const i of t.warnings.filter(l=>!l.includes("LUNORA_ORIGIN_URL")))n.push({code:"wrangler-advisory",level:"warn",message:i});const c=t.errors.find(i=>i.includes("SHARD"));c===void 0?n.push({code:"wrangler-shard-binding-ok",level:"pass",message:"wrangler.jsonc present with a SHARD durable-object binding."}):n.push({code:"wrangler-shard-binding-missing",fix:"Run `lunora dev` to auto-reconcile, or add the binding manually.",level:"fail",message:c})},U=(a,e)=>{p(u(a,"lunora.json"))&&e.push({code:"stale-lunora-json",fix:'Move `target` / `remote` into `lunora.config.ts` (`export default { target: "…" }`), then delete lunora.json.',level:"warn",message:"lunora.json is present but no longer read — lunora.config.* replaced it, so any `target` or `remote` in it is being ignored."})},V=(a,e)=>{a===void 0||a.limits?.cpu_ms!==void 0||e.push({code:"cpu-limit-missing",fix:'Add `"limits": { "cpu_ms": 30000 }` to wrangler.jsonc, tuned to your slowest legitimate handler.',level:"info",message:"no limits.cpu_ms is set — a runaway handler can burn CPU up to the platform default before anything stops it."})},M=(a,e)=>{const r=(a?.r2_buckets??[]).map(n=>n?.bucket_name).filter(n=>typeof n=="string"&&n.length>0);r.length!==0&&e.push({code:"r2-lifecycle-unset",fix:"wrangler r2 bucket lifecycle list <bucket> — add an abort-incomplete-multipart rule if none exists.",level:"info",message:`R2 bucket(s) ${r.join(", ")}: verify a lifecycle rule aborts incomplete multipart uploads — orphaned parts are billed but invisible in a listing.`})},F=(a,e)=>{const{error:r,info:n}=x(a,"lunora");if(r!==void 0){e.push({code:"schema-unreadable",fix:"Fix the parse error, then re-run `lunora doctor`. `lunora codegen` reports the same failure with the offending source.",level:"fail",message:`lunora/schema.ts could not be parsed, so every schema-derived check was skipped: ${r}`});return}for(const t of n?.vectorMetadata??[]){const o=N(t.kind);if(o===void 0){e.push({code:"vector-metadata-unfilterable",fix:"Filter on a string, number or boolean column, or drop it from `metadata`.",level:"warn",message:`vector index "${t.index}" declares metadata "${t.property}", whose type Vectorize cannot filter on.`});continue}e.push({code:"vector-metadata-index-required",fix:`wrangler ${A({index:t.index,property:t.property,type:o}).join(" ")}`,level:"info",message:`vector index "${t.index}" filters on metadata "${t.property}" — that needs a Vectorize metadata index (\`lunora deploy\` creates it).`})}},T=(a,e)=>{if(a===void 0)return;const r=(a.d1_databases??[]).filter(Boolean);for(const n of r){const t=typeof n.database_id=="string"?n.database_id:"";if(D(t)){const o=typeof n.binding=="string"&&n.binding.length>0?n.binding:"<unnamed>";e.push({code:"d1-placeholder-id",fix:"Run `wrangler d1 create <name>` and paste the returned database_id into wrangler.jsonc.",level:"fail",message:`D1 binding "${o}" has a placeholder database_id ("${t||"<empty>"}").`})}}},W=(a,e)=>{if(a===void 0)return;const r=(a.send_email??[]).filter(Boolean);for(const n of r){const t=typeof n.destination_address=="string"?n.destination_address:"";if(t!==""&&b(t)){const o=typeof n.name=="string"&&n.name.length>0?n.name:"send_email";e.push({code:"email-destination-placeholder",fix:"Set destination_address to a verified Cloudflare Email Routing address.",level:"warn",message:`send_email binding "${o}" has a placeholder destination_address ("${t}").`})}}},G=(a,e)=>{const r=u(a,g);if(!p(r))return;let n;try{n=w(r,"utf8")}catch{return}const t=k(n).filter(o=>L(o.key)&&b(o.value)).map(o=>o.key);t.length>0&&e.push({code:"dev-vars-missing-secret",fix:"Run `lunora dev` to auto-generate secrets, or fill them in by hand.",level:"warn",message:`${g} has unfilled secret value(s): ${t.join(", ")}.`})},z=(a,e)=>{const{source:r}=j({cwd:a});r===void 0?e.push({code:"admin-token-missing",fix:"Set LUNORA_ADMIN_TOKEN (env or `.dev.vars`) to enable admin RPCs / studio.",level:"info",message:"LUNORA_ADMIN_TOKEN is not set."}):e.push({code:"admin-token-set",level:"pass",message:`LUNORA_ADMIN_TOKEN is set (${I(r)}).`})},K=async(a,e)=>{let r;try{r=await y({projectRoot:a})}catch(o){e.push({code:"declared-export-unchecked",fix:"Make sure the worker entry resolves (see `lunora codegen`), then re-run.",level:"warn",message:`could not check whether declared containers/workflows/agents are re-exported by the worker entry: ${o instanceof Error?o.message:String(o)}`});return}const n=S(r),t=[...r.containers.map(o=>({...o,kind:"container"})),...r.workflows.map(o=>({...o,kind:"workflow"})),...r.agents.map(o=>({...o,kind:"agent"}))];for(const o of t.filter(c=>c.exported))e.push({code:"declared-export-ok",level:"pass",message:`${o.kind} "${o.exportName}" is exported by the worker entry.`});for(const o of n)e.push({code:"declared-export-missing",fix:`Add \`export * from "./lunora/_generated/${o.module}"\` to your worker entry (or re-run \`vis generate lunora-${o.kind}\`).`,level:"fail",message:`${o.kind} "${o.exportName}" is declared but ${o.className} is not exported by the worker entry.`})},B=/^[\^~><= ]+/u,H=/^(?<core>\d+\.\d+\.\d+)(?:-(?<channel>[a-z]+)\.(?<counter>\d+))?$/u,J=a=>{const e=a.replace(B,"").trim(),r=H.exec(e);if(!r?.groups)return;const{channel:n,core:t,counter:o}=r.groups;return{channel:n??"",core:t??"",counter:o===void 0?void 0:Number.parseInt(o,10),raw:e}},q=(a,e)=>{const r=u(a,"package.json");if(!p(r))return;let n;try{n=JSON.parse(w(r,"utf8"))}catch{return}const t={...n.devDependencies,...n.dependencies},o=[];for(const[s,d]of Object.entries(t)){if(s!=="lunorash"&&!s.startsWith("@lunora/"))continue;const m=J(d);m&&o.push({name:s,version:m})}if(o.length<2)return;const c=s=>s.map(d=>`${d.name}@${d.version.raw}`).join(", "),i=new Set(o.map(s=>s.version.core)),l=new Set(o.map(s=>s.version.channel));if(i.size>1){e.push({code:"version-skew-cores",fix:'Run `pnpm update "@lunora/*" lunorash` (or `npm`/`yarn` equivalent) so every Lunora package moves to the same release.',level:"warn",message:`Lunora packages span ${String(i.size)} different versions: ${c(o)}.`});return}if(l.size>1){e.push({code:"version-skew-channels",fix:"Pick one channel (all stable, or all alpha/beta) and update the odd package out.",level:"warn",message:`Lunora packages mix release channels (${[...l].map(s=>s===""?"stable":s).join(" + ")}): ${c(o)}.`});return}const f=o.map(s=>s.version.counter).filter(s=>s!==void 0);if(f.length>1){const s=Math.min(...f),d=Math.max(...f);e.push({code:"version-counter-spread",level:"info",message:f.length===o.length&&s===d?`Lunora packages are all at ${[...l][0]??""}.${String(d)}.`:`Lunora pre-release counters span ${String(s)}–${String(d)}: ${c(o)}.`})}},X=[u("@lunora","cli"),"lunorash"],Q=(a,e,r)=>{if(e===void 0)return;const n=[];for(const o of X){const c=u(a,"node_modules",o);if(p(c))try{n.push(h(c))}catch{}}if(n.length===0)return;let t;try{t=h(e)}catch{return}n.some(o=>O(o,t))||r.push({code:"cli-shadowed",fix:"Run the project's own CLI: `pnpm exec lunora …` (or `npx lunora …`).",level:"warn",message:`the running lunora (${t}) is not the project's own install (${n.join(", ")}).`})},Y=async a=>{const e=a.cwd??process.cwd(),r=[],{parsed:n,path:t}=C(e);P(e,n,t,r),T(n,r),W(n,r),V(n,r),M(n,r),G(e,r),z(e,r),q(e,r),F(e,r),U(e,r),Q(e,a.executablePath??process.argv[1],r),await K(e,r);const o={fail:0,info:0,pass:0,warn:0};for(const i of r)o[i.level]+=1;const c=o.fail>0?1:0;return{code:c,findings:r,ok:c===0,summary:o}},Z={fail:"FAIL",info:"INFO",pass:"PASS",warn:"WARN"},ee=(a,e)=>{e.info("lunora doctor — project preflight");for(const t of a.findings){const o=`[${Z[t.level]}] ${t.message}`;t.level==="fail"?e.error(o):t.level==="warn"?e.warn(o):e.info(o),t.fix!==void 0&&t.level!=="pass"&&e.info(`       fix: ${t.fix}`)}const{fail:r,warn:n}=a.summary;r>0?e.error(`${String(r)} failure(s), ${String(n)} warning(s).`):n>0?e.warn(`0 failures, ${String(n)} warning(s).`):e.success("all checks passed.")},re=async a=>{const{logger:e}=a,r=await Y({...a});return ee(r,e),r},de=E(async({cwd:a,format:e,logger:r})=>{const n=await re({cwd:a,format:e,logger:r});return{code:n.code,data:{findings:n.findings,summary:n.summary}}});export{de as execute,Y as runDoctor,re as runDoctorCommand};

package/dist/packem_chunks/handler7.mjs

@@ -1,3 +1,3 @@
-import{existsSync as E,readFileSync as U}from"node:fs";import{join as P}from"node:path";import{DEV_VARS_FILE as m,DEV_VARS_KEY_PATTERN as b,writeDevVariablesFileAtomically as w,removeDevVariableLine as N,upsertDevVariableLine as _,isPlaceholderValue as S,detectPackageManager as R,resolveDeployDriver as K,resolveProjectTarget as j,execArgsFor as z,generateSecretValue as M,DEV_VARS_EXAMPLE_FILE as g,parseDevVariableEntries as D,packageNamesFromBindings as T,inferLunoraBindings as C,requiredSecrets as F,isMintableSecretKey as V}from"@lunora/config";import{d as O}from"../packem_shared/command-Mmxzxyr5.mjs";import{EXIT_CODE as d}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{defaultSpawner as Y}from"../packem_shared/createRecordingSpawner-sS7LEN7x.mjs";import{l as q}from"../packem_shared/wrangler-secrets-C9lJnd5N.mjs";const Z=/[\r\n]/u,B=/["\\]/u,G=e=>new Map(D(e).map(o=>[o.key,o])),h=e=>E(e)?U(e,"utf8"):"",L=e=>e.length<=4?"****":`${e.slice(0,4)}${"*".repeat(Math.min(8,e.length-4))}`,f=e=>G(h(e)),$=e=>e.env??(e.prod===!0?"production":void 0),I=e=>{const o=f(e.devVariablesPath),t={file:m,keys:[...o.keys()],subcommand:"list"};if(o.size===0)return e.logger.info(`${m}: (empty)`),{code:0,data:t,descriptors:[]};for(const r of o.values())e.logger.info(`${r.key}=${L(r.value)}`);return{code:0,data:t,descriptors:[]}},X=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env get requires a key. Usage: lunora env get <KEY>"),{code:d.USAGE,descriptors:[]};const s=f(o).get(r.key);return s?(r.format!=="json"&&process.stdout.write(`${s.value}
-`),{code:0,data:{key:r.key,subcommand:"get",value:s.value},descriptors:[]}):(t.error(`env: ${r.key} is not set in ${m}`),{code:d.NOT_FOUND,descriptors:[]})},H=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env set requires a key. Usage: lunora env set <KEY> <VALUE>"),{code:d.USAGE,descriptors:[]};if(!b.test(r.key))return t.error(`env: invalid key "${r.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};if(r.value===void 0)return t.error("env set requires a value. Usage: lunora env set <KEY> <VALUE>"),{code:d.USAGE,descriptors:[]};if(Z.test(r.value))return t.error(`env: value for "${r.key}" contains a newline, which .dev.vars cannot represent`),{code:d.USAGE,descriptors:[]};if(B.test(r.value))return t.error(`env: value for "${r.key}" contains a double-quote or backslash, which .dev.vars cannot round-trip`),{code:d.USAGE,descriptors:[]};const s=h(o);return w(o,_(s,r.key,r.value)),t.success(`env: set ${r.key} (${L(r.value)}) in ${m}`),{code:0,data:{key:r.key,subcommand:"set"},descriptors:[]}},W=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env unset requires a key. Usage: lunora env unset <KEY>"),{code:d.USAGE,descriptors:[]};if(!b.test(r.key))return t.error(`env: invalid key "${r.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};const s=h(o);return G(s).has(r.key)?(w(o,N(s,r.key)),t.success(`env: unset ${r.key} in ${m}`),{code:0,data:{key:r.key,removed:!0,subcommand:"unset"},descriptors:[]}):(t.warn(`env: ${r.key} was not set in ${m}`),{code:0,data:{key:r.key,removed:!1,subcommand:"unset"},descriptors:[]})},J=async e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.yes)return t.error("env push uploads secrets to Cloudflare. Re-run with --yes to confirm."),{code:d.USAGE,descriptors:[]};const s=f(o);if(s.size===0)return t.warn(`${m}: nothing to push (empty)`),{code:0,data:{pushed:[],subcommand:"push",target:$(r)},descriptors:[]};const n=[...s.values()].filter(p=>S(p.value)).map(p=>p.key);if(n.length>0)return t.error(`env push: refusing to upload placeholder value(s) for ${n.join(", ")} — run \`lunora env doctor\` to review, and \`lunora env generate --set\` (or \`lunora env set <KEY> <VALUE>\`) to fill them, then re-run.`),{code:d.USAGE,descriptors:[]};const a=r.spawner??Y,u=r.cwd??process.cwd(),l=R(u),c=[],v=$(r);for(const p of s.values()){const y=K(j(u)).toolchain?.secretPut({environment:v,key:p.key,temporary:r.temporary});if(y===void 0)return t.error("deploy target has no command-line toolchain; cannot push secrets"),{code:d.USAGE,descriptors:[]};const i=z(l,y.tool,y.args),A={args:i.args,command:i.command,cwd:u,input:p.value};c.push(A),t.info(`pushing ${p.key} -> wrangler secret${v===void 0?"":` (${v})`}`);const k=await a(A);if(k.code!==0)return t.error(`env push: failed at ${p.key} (exit ${String(k.code)})`),{code:k.code,descriptors:c}}return t.success(`env: pushed ${String(s.size)} secret(s)`),{code:0,data:{pushed:[...s.keys()],subcommand:"push",target:v},descriptors:c}},Q=e=>(e.options.secretLister??q)({cwd:e.cwd,env:$(e.options),temporary:e.options.temporary}),x=async e=>{const{devVariablesPath:o,logger:t}=e,r=await Q(e);if(!r.ok)return t.error(`env diff: ${r.error??"failed to list remote secrets"}`),{code:1,descriptors:[]};const s=new Set(f(o).keys()),n=new Set(r.names),a=[...s].filter(c=>!n.has(c)).toSorted((c,v)=>c.localeCompare(v)),u=r.names.filter(c=>!s.has(c)),l=[...s].filter(c=>n.has(c)).toSorted((c,v)=>c.localeCompare(v));for(const c of a)t.info(`local only (run \`lunora env push\`): ${c}`);for(const c of u)t.info(`remote only (in Cloudflare, not ${m}): ${c}`);return t.info(`in both: ${String(l.length)} secret(s)`),a.length===0&&u.length===0&&t.success("env diff: local and remote secret names match"),{code:0,data:{both:l,localOnly:a,remoteOnly:u,subcommand:"diff"},descriptors:[]}},ee=e=>{const{cwd:o,devVariablesPath:t,logger:r}=e,s=P(o,g);if(!E(s))return r.info(`env doctor: no ${g} to check against — nothing to validate.`),{code:0,data:{extra:[],missing:[],ok:!0,placeholders:[],subcommand:"doctor"},descriptors:[]};const n=D(U(s,"utf8")).map(i=>i.key),a=f(t);if(!E(t))return r.error(`env doctor: ${m} is missing. Run \`lunora dev\` to scaffold it, or \`lunora env set <KEY> <VALUE>\`.`),r.info(`expected (from ${g}): ${n.join(", ")}`),{code:d.NOT_FOUND,descriptors:[]};const u=n.filter(i=>!a.has(i)),l=[...a.values()].filter(i=>S(i.value)).map(i=>i.key),c=new Set(n),v=[...a.keys()].filter(i=>!c.has(i));for(const i of u)r.error(`missing: ${i} is in ${g} but not ${m}`);for(const i of l)r.error(`unset: ${i} still has a placeholder value`);for(const i of v)r.info(`extra: ${i} is set locally but not listed in ${g}`);const p=u.length===0&&l.length===0,y={extra:v,missing:u,ok:p,placeholders:l,subcommand:"doctor"};return p?(r.success(`env doctor: ${m} looks good (${String(a.size)} var(s)).`),{code:0,data:y,descriptors:[]}):{code:1,data:y,descriptors:[]}},re=async e=>{let o=[];try{o=T(await C({projectRoot:e.cwd}))}catch{}const t=F(o).map(s=>s.key).filter(s=>V(s)),r=[...f(e.devVariablesPath).keys()].filter(s=>V(s));return[...new Set([...t,...r])]},te=(e,o,t)=>{const r=f(e),s=n=>{const a=r.get(n);return a!==void 0&&a.value!==""&&!S(a.value)};return{live:o.filter(n=>s(n.key)).map(n=>n.key),writable:t?o:o.filter(n=>!s(n.key))}},se=(e,o)=>{const{devVariablesPath:t,logger:r,options:s}=e,{live:n,writable:a}=te(t,o,s.yes===!0);if(a.length===0)return r.error(`env generate --set: ${n.join(", ")} already hold(s) a live secret and rotating it is irreversible (outstanding signed URLs and bearers stop verifying). Re-run with --yes to rotate anyway.`),{code:d.USAGE,descriptors:[]};n.length>0&&r.warn(`env generate --set: left ${n.join(", ")} untouched (already set) — re-run with --yes to rotate them too`);let u=h(t);for(const l of a)u=_(u,l.key,l.value);return w(t,u),r.success(`env: generated ${String(a.length)} secret(s) into ${m}: ${a.map(l=>l.key).join(", ")}`),{code:0,data:{subcommand:"generate",written:a.map(l=>l.key)},descriptors:[]}},oe=async e=>{const{logger:o,options:t}=e;let r;if(t.key===void 0){if(r=await re(e),r.length===0)return o.info("env generate: no locally-generatable secrets for this project. Name one explicitly: lunora env generate <KEY>"),{code:0,data:{secrets:[],subcommand:"generate"},descriptors:[]}}else{if(!b.test(t.key))return o.error(`env: invalid key "${t.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};r=[t.key]}const s=r.map(n=>({key:n,value:M()}));if(t.set===!0)return se(e,s);if(t.format!=="json")for(const n of s)process.stdout.write(`${n.key}=${n.value}
-`);return{code:0,data:{secrets:s,subcommand:"generate"},descriptors:[]}},ne=async e=>{const{options:o}=e;switch(o.subcommand){case"diff":return x(e);case"doctor":return ee(e);case"generate":return oe(e);case"get":return X(e);case"list":return I(e);case"push":return J(e);case"set":return H(e);case"unset":return W(e);default:return e.logger.error(`env: unknown subcommand "${o.subcommand}"`),{code:d.USAGE,descriptors:[]}}},ae=async e=>{const o=e.cwd??process.cwd(),t={cwd:o,devVariablesPath:P(o,m),logger:e.logger,options:e};return ne(t)},ce=new Set(["diff","doctor","generate","get","list","push","set","unset"]),ie=e=>typeof e=="string"&&ce.has(e),ye=O(({argument:e,cwd:o,format:t,logger:r,options:s})=>{const n=e[0];if(!ie(n)){const a=`env: unknown subcommand "${n??""}" — expected list | get | set | unset | push | diff | doctor | generate`;return r.error(a),{code:d.USAGE,error:a}}return ae({cwd:o,env:s.env,format:t,key:e[1],logger:r,prod:s.prod===!0,set:s.set===!0,subcommand:n,temporary:s.temporary===!0,value:e[2],yes:s.yes===!0})});export{ye as execute,ae as runEnvCommand};
+import{existsSync as E,readFileSync as P}from"node:fs";import{join as _}from"node:path";import{DEV_VARS_FILE as m,DEV_VARS_KEY_PATTERN as b,writeDevVariablesFileAtomically as w,removeDevVariableLine as K,upsertDevVariableLine as D,isPlaceholderValue as S,detectPackageManager as j,resolveDeployDriver as z,resolveProjectTarget as M,toolchainExecArgs as T,generateSecretValue as C,DEV_VARS_EXAMPLE_FILE as g,parseDevVariableEntries as G,packageNamesFromBindings as O,inferLunoraBindings as Y,requiredSecrets as F,isMintableSecretKey as U}from"@lunora/config";import{d as q}from"../packem_shared/command-B--jgXSc.mjs";import{EXIT_CODE as d}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{defaultSpawner as Z}from"../packem_shared/createRecordingSpawner-sS7LEN7x.mjs";import{l as B}from"../packem_shared/wrangler-secrets-CuUdFBaA.mjs";const I=/[\r\n]/u,X=/["\\]/u,L=e=>new Map(G(e).map(o=>[o.key,o])),h=e=>E(e)?P(e,"utf8"):"",N=e=>e.length<=4?"****":`${e.slice(0,4)}${"*".repeat(Math.min(8,e.length-4))}`,p=e=>L(h(e)),$=e=>e.env??(e.prod===!0?"production":void 0),H=e=>{const o=p(e.devVariablesPath),t={file:m,keys:[...o.keys()],subcommand:"list"};if(o.size===0)return e.logger.info(`${m}: (empty)`),{code:0,data:t,descriptors:[]};for(const r of o.values())e.logger.info(`${r.key}=${N(r.value)}`);return{code:0,data:t,descriptors:[]}},W=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env get requires a key. Usage: lunora env get <KEY>"),{code:d.USAGE,descriptors:[]};const s=p(o).get(r.key);return s?(r.format!=="json"&&process.stdout.write(`${s.value}
+`),{code:0,data:{key:r.key,subcommand:"get",value:s.value},descriptors:[]}):(t.error(`env: ${r.key} is not set in ${m}`),{code:d.NOT_FOUND,descriptors:[]})},J=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env set requires a key. Usage: lunora env set <KEY> <VALUE>"),{code:d.USAGE,descriptors:[]};if(!b.test(r.key))return t.error(`env: invalid key "${r.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};if(r.value===void 0)return t.error("env set requires a value. Usage: lunora env set <KEY> <VALUE>"),{code:d.USAGE,descriptors:[]};if(I.test(r.value))return t.error(`env: value for "${r.key}" contains a newline, which .dev.vars cannot represent`),{code:d.USAGE,descriptors:[]};if(X.test(r.value))return t.error(`env: value for "${r.key}" contains a double-quote or backslash, which .dev.vars cannot round-trip`),{code:d.USAGE,descriptors:[]};const s=h(o);return w(o,D(s,r.key,r.value)),t.success(`env: set ${r.key} (${N(r.value)}) in ${m}`),{code:0,data:{key:r.key,subcommand:"set"},descriptors:[]}},Q=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env unset requires a key. Usage: lunora env unset <KEY>"),{code:d.USAGE,descriptors:[]};if(!b.test(r.key))return t.error(`env: invalid key "${r.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};const s=h(o);return L(s).has(r.key)?(w(o,K(s,r.key)),t.success(`env: unset ${r.key} in ${m}`),{code:0,data:{key:r.key,removed:!0,subcommand:"unset"},descriptors:[]}):(t.warn(`env: ${r.key} was not set in ${m}`),{code:0,data:{key:r.key,removed:!1,subcommand:"unset"},descriptors:[]})},x=async e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.yes)return t.error("env push uploads secrets to Cloudflare. Re-run with --yes to confirm."),{code:d.USAGE,descriptors:[]};const s=p(o);if(s.size===0)return t.warn(`${m}: nothing to push (empty)`),{code:0,data:{pushed:[],subcommand:"push",target:$(r)},descriptors:[]};const n=[...s.values()].filter(a=>S(a.value)).map(a=>a.key);if(n.length>0)return t.error(`env push: refusing to upload placeholder value(s) for ${n.join(", ")} — run \`lunora env doctor\` to review, and \`lunora env generate --set\` (or \`lunora env set <KEY> <VALUE>\`) to fill them, then re-run.`),{code:d.USAGE,descriptors:[]};const c=r.spawner??Z,u=r.cwd??process.cwd(),l=j(u),i=[],v=$(r),f=z(M(u)),y=f.toolchain?.secretPut;if(y===void 0)return t.error(`deploy target "${f.id}" has no secret store; cannot push secrets`),{code:d.USAGE,descriptors:[]};for(const a of s.values()){const R=y({environment:v,key:a.key,temporary:r.temporary}),A=T(l,R),V={args:A.args,command:A.command,cwd:u,input:a.value};i.push(V),t.info(`pushing ${a.key} -> wrangler secret${v===void 0?"":` (${v})`}`);const k=await c(V);if(k.code!==0)return t.error(`env push: failed at ${a.key} (exit ${String(k.code)})`),{code:k.code,descriptors:i}}return t.success(`env: pushed ${String(s.size)} secret(s)`),{code:0,data:{pushed:[...s.keys()],subcommand:"push",target:v},descriptors:i}},ee=e=>(e.options.secretLister??B)({cwd:e.cwd,env:$(e.options),temporary:e.options.temporary}),re=async e=>{const{devVariablesPath:o,logger:t}=e,r=await ee(e);if(!r.ok)return t.error(`env diff: ${r.error??"failed to list remote secrets"}`),{code:1,descriptors:[]};const s=new Set(p(o).keys()),n=new Set(r.names),c=[...s].filter(i=>!n.has(i)).toSorted((i,v)=>i.localeCompare(v)),u=r.names.filter(i=>!s.has(i)),l=[...s].filter(i=>n.has(i)).toSorted((i,v)=>i.localeCompare(v));for(const i of c)t.info(`local only (run \`lunora env push\`): ${i}`);for(const i of u)t.info(`remote only (in Cloudflare, not ${m}): ${i}`);return t.info(`in both: ${String(l.length)} secret(s)`),c.length===0&&u.length===0&&t.success("env diff: local and remote secret names match"),{code:0,data:{both:l,localOnly:c,remoteOnly:u,subcommand:"diff"},descriptors:[]}},te=e=>{const{cwd:o,devVariablesPath:t,logger:r}=e,s=_(o,g);if(!E(s))return r.info(`env doctor: no ${g} to check against — nothing to validate.`),{code:0,data:{extra:[],missing:[],ok:!0,placeholders:[],subcommand:"doctor"},descriptors:[]};const n=G(P(s,"utf8")).map(a=>a.key),c=p(t);if(!E(t))return r.error(`env doctor: ${m} is missing. Run \`lunora dev\` to scaffold it, or \`lunora env set <KEY> <VALUE>\`.`),r.info(`expected (from ${g}): ${n.join(", ")}`),{code:d.NOT_FOUND,descriptors:[]};const u=n.filter(a=>!c.has(a)),l=[...c.values()].filter(a=>S(a.value)).map(a=>a.key),i=new Set(n),v=[...c.keys()].filter(a=>!i.has(a));for(const a of u)r.error(`missing: ${a} is in ${g} but not ${m}`);for(const a of l)r.error(`unset: ${a} still has a placeholder value`);for(const a of v)r.info(`extra: ${a} is set locally but not listed in ${g}`);const f=u.length===0&&l.length===0,y={extra:v,missing:u,ok:f,placeholders:l,subcommand:"doctor"};return f?(r.success(`env doctor: ${m} looks good (${String(c.size)} var(s)).`),{code:0,data:y,descriptors:[]}):{code:1,data:y,descriptors:[]}},se=async e=>{let o=[];try{o=O(await Y({projectRoot:e.cwd}))}catch{}const t=F(o).map(s=>s.key).filter(s=>U(s)),r=[...p(e.devVariablesPath).keys()].filter(s=>U(s));return[...new Set([...t,...r])]},oe=(e,o,t)=>{const r=p(e),s=n=>{const c=r.get(n);return c!==void 0&&c.value!==""&&!S(c.value)};return{live:o.filter(n=>s(n.key)).map(n=>n.key),writable:t?o:o.filter(n=>!s(n.key))}},ne=(e,o)=>{const{devVariablesPath:t,logger:r,options:s}=e,{live:n,writable:c}=oe(t,o,s.yes===!0);if(c.length===0)return r.error(`env generate --set: ${n.join(", ")} already hold(s) a live secret and rotating it is irreversible (outstanding signed URLs and bearers stop verifying). Re-run with --yes to rotate anyway.`),{code:d.USAGE,descriptors:[]};n.length>0&&r.warn(`env generate --set: left ${n.join(", ")} untouched (already set) — re-run with --yes to rotate them too`);let u=h(t);for(const l of c)u=D(u,l.key,l.value);return w(t,u),r.success(`env: generated ${String(c.length)} secret(s) into ${m}: ${c.map(l=>l.key).join(", ")}`),{code:0,data:{subcommand:"generate",written:c.map(l=>l.key)},descriptors:[]}},ae=async e=>{const{logger:o,options:t}=e;let r;if(t.key===void 0){if(r=await se(e),r.length===0)return o.info("env generate: no locally-generatable secrets for this project. Name one explicitly: lunora env generate <KEY>"),{code:0,data:{secrets:[],subcommand:"generate"},descriptors:[]}}else{if(!b.test(t.key))return o.error(`env: invalid key "${t.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};r=[t.key]}const s=r.map(n=>({key:n,value:C()}));if(t.set===!0)return ne(e,s);if(t.format!=="json")for(const n of s)process.stdout.write(`${n.key}=${n.value}
+`);return{code:0,data:{secrets:s,subcommand:"generate"},descriptors:[]}},ce=async e=>{const{options:o}=e;switch(o.subcommand){case"diff":return re(e);case"doctor":return te(e);case"generate":return ae(e);case"get":return W(e);case"list":return H(e);case"push":return x(e);case"set":return J(e);case"unset":return Q(e);default:return e.logger.error(`env: unknown subcommand "${o.subcommand}"`),{code:d.USAGE,descriptors:[]}}},ie=async e=>{const o=e.cwd??process.cwd(),t={cwd:o,devVariablesPath:_(o,m),logger:e.logger,options:e};return ce(t)},de=new Set(["diff","doctor","generate","get","list","push","set","unset"]),ue=e=>typeof e=="string"&&de.has(e),he=q(({argument:e,cwd:o,format:t,logger:r,options:s})=>{const n=e[0];if(!ue(n)){const c=`env: unknown subcommand "${n??""}" — expected list | get | set | unset | push | diff | doctor | generate`;return r.error(c),{code:d.USAGE,error:c}}return ie({cwd:o,env:s.env,format:t,key:e[1],logger:r,prod:s.prod===!0,set:s.set===!0,subcommand:n,temporary:s.temporary===!0,value:e[2],yes:s.yes===!0})});export{he as execute,ie as runEnvCommand};

package/dist/packem_chunks/handler8.mjs

@@ -1 +1 @@
-import{d}from"../packem_shared/command-Mmxzxyr5.mjs";import{a as l}from"../packem_shared/resolve-target-C_ZloTvd.mjs";import{runExportCommand as m}from"../packem_shared/runExportCommand-DxsJHYZt.mjs";const k=d(({argument:o,cwd:e,format:t,logger:u,options:r})=>m({cwd:e,format:t,logger:u,out:o[0]??r.out,prod:r.prod===!0,tables:r.tables,token:r.token,url:l({cwd:e,prod:r.prod===!0,url:r.url})}));export{k as execute};
+import{d}from"../packem_shared/command-B--jgXSc.mjs";import{a as l}from"../packem_shared/resolve-target-C_ZloTvd.mjs";import{runExportCommand as m}from"../packem_shared/runExportCommand-DxsJHYZt.mjs";const k=d(({argument:o,cwd:e,format:t,logger:u,options:r})=>m({cwd:e,format:t,logger:u,out:o[0]??r.out,prod:r.prod===!0,tables:r.tables,token:r.token,url:l({cwd:e,prod:r.prod===!0,url:r.url})}));export{k as execute};

package/dist/packem_chunks/handler9.mjs

@@ -1 +1 @@
-import{d}from"../packem_shared/command-Mmxzxyr5.mjs";import{EXIT_CODE as m}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{a as n}from"../packem_shared/resolve-target-C_ZloTvd.mjs";import{I as u,r as i}from"../packem_shared/import-D7qdpSmJ.mjs";const b=d(({argument:f,cwd:a,format:c,logger:t,options:r})=>{const o=f[0];if(!o){const e="import requires a path. Usage: lunora import <file.ndjson | convex-export-dir> [--table <name>]";return t.error(e),{code:m.USAGE,error:e}}if(r.from!==void 0&&!u.includes(r.from)){const e=`--from ${r.from} is not a known source. Expected one of: ${u.join(", ")}.`;return t.error(e),{code:m.USAGE,error:e}}return i({batchSize:r.batchSize,cwd:a,file:o,format:c,from:r.from,logger:t,prod:r.prod===!0,scan:r.scan===!0,storageDir:r.storageDir,table:r.table,token:r.token,url:n({cwd:a,prod:r.prod===!0,url:r.url}),verify:r.verify===!0,withStorage:r.withStorage===!0,yes:r.yes===!0})});export{b as execute};
+import{d}from"../packem_shared/command-B--jgXSc.mjs";import{EXIT_CODE as m}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{a as n}from"../packem_shared/resolve-target-C_ZloTvd.mjs";import{I as u,r as i}from"../packem_shared/import-D7qdpSmJ.mjs";const b=d(({argument:f,cwd:a,format:c,logger:t,options:r})=>{const o=f[0];if(!o){const e="import requires a path. Usage: lunora import <file.ndjson | convex-export-dir> [--table <name>]";return t.error(e),{code:m.USAGE,error:e}}if(r.from!==void 0&&!u.includes(r.from)){const e=`--from ${r.from} is not a known source. Expected one of: ${u.join(", ")}.`;return t.error(e),{code:m.USAGE,error:e}}return i({batchSize:r.batchSize,cwd:a,file:o,format:c,from:r.from,logger:t,prod:r.prod===!0,scan:r.scan===!0,storageDir:r.storageDir,table:r.table,token:r.token,url:n({cwd:a,prod:r.prod===!0,url:r.url}),verify:r.verify===!0,withStorage:r.withStorage===!0,yes:r.yes===!0})});export{b as execute};

package/dist/packem_chunks/runCodegenCommand.mjs

@@ -1,4 +1,4 @@
-import{runCodegen as v}from"@lunora/codegen";import{applyLintIgnores as h,detectLintTools as w,inferLunoraBindings as $}from"@lunora/config";import{collectWranglerSecretVariables as y,collectExportGaps as A}from"@lunora/config/cloudflare";import{r as T,a as S,e as x}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as k,r as D}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{d as b}from"../packem_shared/command-Mmxzxyr5.mjs";import{EXIT_CODE as C}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{r as E}from"../packem_shared/lint-ignore-report-DKZagpqk.mjs";const u=3,R=r=>{const s=r.cwd??process.cwd(),{logger:t}=r,e=T(r),o=D(s,r.target);if(o.target===void 0)return r.logger.error(o.error??"unknown deploy target"),{advisories:[],code:C.USAGE,cronTriggers:[],error:o.error??"unknown deploy target",failedAdvisories:0,outputDirectory:""};const{target:a}=o,i=v({apiSpec:r.apiSpec,projectRoot:s,target:a,wranglerVariables:y(s)}),d={advisories:i.advisories.map(n=>({detail:n.detail,level:n.level,name:n.name,remediation:n.remediation})),cronTriggers:i.cronTriggers,failedAdvisories:0,outputDirectory:i.outputDirectory};if(t.success(`codegen wrote ${i.writtenFiles.join(", ")} to ${i.outputDirectory}`),i.advisories.length>0){const n=i.advisories.length,f=i.advisories.map(c=>`  [${c.level}] ${c.name} — ${c.detail}
+import{runCodegen as v}from"@lunora/codegen";import{applyLintIgnores as h,detectLintTools as w,inferLunoraBindings as $}from"@lunora/config";import{collectWranglerSecretVariables as y,collectExportGaps as A}from"@lunora/config/cloudflare";import{r as T,a as S,e as x}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as k,r as D}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{d as b}from"../packem_shared/command-B--jgXSc.mjs";import{EXIT_CODE as C}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{r as E}from"../packem_shared/lint-ignore-report-DKZagpqk.mjs";const u=3,R=r=>{const s=r.cwd??process.cwd(),{logger:t}=r,e=T(r),o=D(s,r.target);if(o.target===void 0)return r.logger.error(o.error??"unknown deploy target"),{advisories:[],code:C.USAGE,cronTriggers:[],error:o.error??"unknown deploy target",failedAdvisories:0,outputDirectory:""};const{target:a}=o,i=v({apiSpec:r.apiSpec,projectRoot:s,target:a,wranglerVariables:y(s)}),d={advisories:i.advisories.map(n=>({detail:n.detail,level:n.level,name:n.name,remediation:n.remediation})),cronTriggers:i.cronTriggers,failedAdvisories:0,outputDirectory:i.outputDirectory};if(t.success(`codegen wrote ${i.writtenFiles.join(", ")} to ${i.outputDirectory}`),i.advisories.length>0){const n=i.advisories.length,f=i.advisories.map(c=>`  [${c.level}] ${c.name} — ${c.detail}
       ↳ ${c.remediation}`);t.warn(`${n.toString()} schema ${n===1?"advisory":"advisories"}:
 ${f.join(`
 `)}`)}const g=S(i.platformDiagnostics,t);g.errors.length>0&&(d.error=g.errors.join("; "));const{errorAdvisories:l,names:p,shouldBlock:m}=x(d.advisories,e);return m&&t.error(`${l.length.toString()} ERROR-level ${l.length===1?"advisory":"advisories"} (${p.join(", ")}). Codegen wrote its output; this exit code is the gate. Pass --no-strict-advisories to downgrade it to a warning.`),i.cronTriggers.length>u&&t.warn(`${i.cronTriggers.length.toString()} distinct cron expressions declared — Cloudflare allows at most ${u.toString()} Cron Triggers per Worker. Consolidate schedules (jobs can share one expression) or move finer-grained work to Durable Object alarms via @lunora/scheduler (runAfter/runAt).`),{...d,failedAdvisories:e?l.length:0}},I=async(r,s)=>{let t;try{t=A(await $({projectRoot:r}))}catch(e){s.warn(`could not check whether declared containers/workflows/agents are re-exported by the worker entry: ${e instanceof Error?e.message:String(e)}. Run \`lunora doctor\` to check explicitly.`);return}for(const e of t)s.warn(`${e.kind} "${e.exportName}" is declared but ${e.className} is not exported by the worker entry — add \`export * from "./lunora/_generated/${e.module}"\` so wrangler can provision its binding. Until then it deploys with nothing to run.`)},L=(r,s)=>{try{E(h(r,w(r)),s)}catch{}},V=b(async({cwd:r,format:s,logger:t,options:e})=>{const o=R({apiSpec:k(e.apiSpec),cwd:r,format:s,logger:t,strictAdvisories:e.strictAdvisories,target:e.target});if(o.outputDirectory!==""){const a=t;L(r,a),await I(r,a)}return{code:o.code??(o.error===void 0&&o.failedAdvisories===0?0:1),data:{advisories:o.advisories,cronTriggers:o.cronTriggers,failedAdvisories:o.failedAdvisories,outputDirectory:o.outputDirectory},error:o.error}});export{V as execute,R as runCodegenCommand};

package/dist/packem_chunks/runDeployCommand.mjs

@@ -1,7 +1,7 @@
-import{readFileSync as w,writeFileSync as _,existsSync as p}from"node:fs";import{runCodegen as V,discoverMigrations as H}from"@lunora/codegen";import{readLinkedProject as L,writeLinkedProject as G,execArgsFor as k,detectPackageManager as b,discoverContainerInfo as I,DEV_VARS_FILE as y,parseDevVariableEntries as U,isMintableSecretKey as P,runPostCodegenHook as K,resolveDeployDriver as E,inferLunoraBindings as W,packageNamesFromBindings as q,requiredSecrets as Y,generateSecretValue as z,upsertDevVariableLine as J,writeDevVariablesFileAtomically as X,COMPOSED_WORKER_ENTRY as j,discoverSchemaInfo as Q}from"@lunora/config";import{findWranglerFile as O,validateWranglerProject as Z,reconcileWranglerBindings as ee,reconcileWranglerCompatibilityDate as re,reconcileWranglerCrons as te,describePreservedCrons as ne,readWranglerJsonc as ae,mergeWranglerEnvironment as oe}from"@lunora/config/cloudflare";import{join as v}from"@visulima/path";import{Spinner as ie}from"@visulima/spinner";import{Project as se}from"ts-morph";import{i as ce,m as le,e as de}from"../packem_shared/vectorize-metadata-dXpl2_Ar.mjs";import{r as ue,a as ge,e as me}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as fe,a as he}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{r as R}from"../packem_shared/wrangler-name-Dsk5K1f-.mjs";import{w as ve}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{d as pe}from"../packem_shared/command-Mmxzxyr5.mjs";import{a as ye,i as we}from"../packem_shared/docker-DpVxvYpL.mjs";import{EXIT_CODE as h}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{r as ke,p as be,H as $e,a as Se}from"../packem_shared/schema-drift-gate-BDCkQ1S6.mjs";import{containerBuildTag as De}from"@lunora/container";import{defaultSpawner as $}from"../packem_shared/createRecordingSpawner-sS7LEN7x.mjs";import{r as F}from"../packem_shared/resolve-target-C_ZloTvd.mjs";import{c as Ee}from"../packem_shared/tui-prompts-B3YwUhGw.mjs";import{l as Re}from"../packem_shared/wrangler-secrets-C9lJnd5N.mjs";import{runMigrateDataCommand as Ae}from"../packem_shared/runMigrateGenerateCommand-CDHswpMU.mjs";const Ce=/https?:\/\/[^\s"'<>]+\.workers\.dev[^\s"'<>]*/u,Pe=/https:\/\/[^\s"'<>]+/u,je=e=>{if(e===void 0)return;const r=Ce.exec(e);return r?r[0]:Pe.exec(e)?.[0]},x=e=>e===void 0?"":` (--env ${e})`,xe=({cwd:e,env:r,logger:a,now:t,url:n})=>{if(n!==void 0)try{const o=L(e);if(o!==void 0){if(o.workerUrl===n&&o.env===r)return;a.warn(`link: .lunora/project.json records ${o.workerUrl??"(no url)"}${x(o.env)}, but this deploy published ${n}${x(r)}. Keeping the recorded value — run \`lunora link --url ${n}${r===void 0?"":` --env ${r}`}\` to update it.`);return}const i=(t??(()=>new Date().toISOString()))();G(e,{env:r,linkedAt:i,workerName:R(e),workerUrl:n}),a.success(`link: recorded ${n} in .lunora/project.json (run \`lunora link\` to change)`)}catch{}},Te=e=>{const{cwd:r,env:a,logger:t,mintedSecretsFile:n}=e;try{const o=L(r),i=o?.workerName??R(r),s=e.url??o?.workerUrl;t.success("deploy complete"),t.info(`  worker:  ${i??"(see wrangler output above)"}`),a!==void 0&&t.info(`  env:     ${a}`),s===void 0?t.info("  url:     run `lunora link --url <https://your-worker>` to record it"):t.info(`  url:     ${s}`),n!==void 0&&t.info(`  secrets: generated value(s) recorded in ${n}`),t.info("  logs:    lunora logs")}catch{}},Ne=async e=>{if(e.targets.length===0)return{builtTags:[],code:0};if(!(e.railpackAvailable??ye)()){const t="deploy blocked: a container uses `image: { build }` (Railpack), but Railpack isn't ready. Install the `railpack` CLI and start a BuildKit instance, e.g. `docker run --rm --privileged -d --name buildkit moby/buildkit` then `export BUILDKIT_HOST=docker-container://buildkit`. Alternatively switch the container's `image` to a Dockerfile path or a pre-built registry reference.";return e.logger.error(t),{builtTags:[],code:1,error:t}}const r=e.spawner??$,a=[];for(const t of e.targets){const n=De(t.exportName),o={args:["build",t.buildDir,"--name",n],command:"railpack",cwd:e.cwd},i=k(b(e.cwd),"wrangler",["containers","push",n]),s={args:i.args,command:i.command,cwd:e.cwd};e.logger.info(`railpack: building "${t.exportName}" → ${n} from ${t.buildDir}`);const c=await r(o);if(c.code!==0){const d=`railpack build failed for container "${t.exportName}" (${t.buildDir})`;return e.logger.error(d),{builtTags:a,code:c.code,error:d}}e.logger.info(`railpack: pushing ${n} to the Cloudflare Registry`);const l=await r(s);if(l.code!==0){const d=`wrangler containers push failed for "${t.exportName}" (${n})`;return e.logger.error(d),{builtTags:a,code:l.code,error:d}}a.push(n)}return{builtTags:a,code:0}},_e=e=>{const r=O(e),a=r===void 0?void 0:w(r,"utf8");return()=>{r!==void 0&&a!==void 0&&_(r,a,"utf8")}},B="<replace-with-d1-create-id>",T=e=>Array.isArray(e)?e.filter(r=>r!=null):void 0,A=(e,r)=>{const a=O(e);if(!a)return;const{parsed:t}=ae(a);if(t===void 0)return;const{error:n,merged:o}=oe(t,r),i=n===void 0?o:t,{containers:s,d1_databases:c,vars:l}=i;return{containers:T(s),d1_databases:T(c),vars:typeof l=="object"&&l!==null&&!Array.isArray(l)?l:void 0}},Le=/^127(?:\.\d{1,3}){3}$/,Ie=e=>{try{const{hostname:r}=new URL(e);return r==="localhost"||Le.test(r)||r==="::1"||r==="[::1]"}catch{return!1}},Ue=e=>e.startsWith("./")||e.startsWith("../")||e.startsWith("/")||e.includes("Dockerfile"),We=(e,r,a,t="deploy",n)=>{const o=(A(e,n)?.containers??[]).filter(s=>typeof s?.image=="string"&&Ue(s.image));if(o.length===0||a())return;const i=`${t} blocked: wrangler.jsonc declares ${String(o.length)} container(s) built from a local Dockerfile, but no Docker-compatible engine is available. Start Docker (or Colima), or point the container's \`image\` at a pre-built registry reference. Note: container images must target linux/amd64.`;return r.error(i),i},Oe=e=>p(v(e,j))?j:void 0,Fe=(e,r,a="deploy")=>{for(const t of I(e,"lunora").containers){const{image:n}=t;if(n.kind==="dockerfile"&&!p(v(e,n.dockerfilePath))){const o=`${a} blocked: container "${t.exportName}" references a Dockerfile at "${n.dockerfilePath}" that does not exist. Create it or fix the \`image\` path in lunora/containers.ts.`;return r.error(o),o}if(n.kind==="build"&&!p(v(e,n.buildDir))){const o=`${a} blocked: container "${t.exportName}" references a Railpack build directory "${n.buildDir}" that does not exist. Create it or fix the \`image.build\` path in lunora/containers.ts.`;return r.error(o),o}}},M=e=>e.format==="json"?!1:e.interactive!==void 0?e.interactive:process.stdout.isTTY&&!process.env.CI,Be=(e,r)=>(A(e,r)?.d1_databases??[]).find(a=>a.database_id===B)?.binding,Me=async(e,r)=>{if(r.dryRun===!0)return;const a=I(e,"lunora").containers.filter(n=>n.image.kind==="build").map(n=>({buildDir:n.image.buildDir,exportName:n.exportName}));if(a.length===0)return;const t=await Ne({cwd:e,logger:r.logger,railpackAvailable:r.railpackAvailable,spawner:r.spawner,targets:a});return t.code===0?void 0:t.error??"railpack build failed"},Ve=(e,r,a)=>{if(a!==void 0)try{const t=te(e,a);t.changed&&r.success(`synced ${String(a.length)} cron trigger(s) → ${t.wranglerPath??"wrangler.jsonc"}`);for(const o of t.warnings)r.warn(o);const n=ne(t.preserved);n!==void 0&&r.info(n)}catch(t){const n=t instanceof Error?t.message:String(t);r.warn(`cron trigger sync skipped: ${n}`)}},He=async(e,r,a,t,n)=>{try{E(t);const o=await W({projectRoot:e}),i=ee(e,o,n),s=i.wranglerPath??"wrangler.jsonc";i.added.length>0&&r.success(`provisioned bindings: ${i.added.join(", ")} → ${s}`),i.updated.length>0&&r.success(`updated bindings: ${i.updated.join(", ")} → ${s}`);for(const c of i.warnings)r.warn(c)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`binding inference skipped: ${i}`)}try{const o=re(e);o.changed&&r.success(`bumped compatibility_date to ${o.date??"unknown"} (Workers Cache enabled) → ${o.wranglerPath??"wrangler.jsonc"}`)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`compatibility date sync skipped: ${i}`)}Ve(e,r,a)},Ge=(e,r)=>{const a=v(e,y);if(!p(a))return;let t;try{t=U(w(a,"utf8")).length}catch{return}t!==0&&r.warn(`Note: \`lunora deploy\` does not push secrets. ${y} has ${String(t)} key(s); if you changed them, run \`lunora env push --yes\` to update the deployed secrets.`)},Ke=async e=>{let r=[];try{r=q(await W({projectRoot:e}))}catch{}const a=Y(r).map(n=>n.key);let t=[];try{const n=v(e,y);p(n)&&(t=U(w(n,"utf8")).map(o=>o.key).filter(o=>ce(o)))}catch{}return[...new Set([...a,...t])]},qe=async(e,r,a,t)=>{const{logger:n}=r,o=r.spawner??$,i=b(e),s=r.env===void 0?"":` --env ${r.env}`,{toolchain:c}=E(t);if(c===void 0)return n.error("deploy target has no command-line toolchain; cannot push secrets"),{minted:[],ok:!1};const l=[];for(const d of a){const g=z(),u=c.secretPut({environment:r.env,key:d,temporary:r.temporary}),m=k(i,u.tool,u.args),f=await o({args:m.args,command:m.command,cwd:e,input:g});if(f.code!==0)return n.error(`failed to push secret ${d} (exit ${String(f.code)}); set it manually with \`wrangler secret put ${d}${s}\`.`),{minted:l,ok:!1};l.push({key:d,value:g}),n.success(`generated + pushed ${d}`)}return{minted:l,ok:!0}},Ye=/^[\w-]+$/u,S=[".dev.vars",".dev.vars.*","!.dev.vars.example"],ze=/\r?\n/u,Je=(e,r)=>{const a=v(e,".gitignore");try{const t=p(a)?w(a,"utf8"):"",n=new Set(t.split(ze).map(c=>c.trim())),o=S.filter(c=>!n.has(c));if(o.length===0)return;const i=o.some(c=>!c.startsWith("!"))?[...o.filter(c=>!c.startsWith("!")),...S.filter(c=>c.startsWith("!"))]:o,s=t.length>0&&!t.endsWith(`
+import{discoverMigrations as K,runCodegen as q}from"@lunora/codegen";import{readLinkedProject as N,execArgsFor as _,detectPackageManager as b,discoverContainerInfo as I,COMPOSED_WORKER_ENTRY as C,writeLinkedProject as Y,discoverSchemaInfo as z,DEV_VARS_FILE as p,parseDevVariableEntries as L,isMintableSecretKey as j,packageNamesFromBindings as J,inferLunoraBindings as U,requiredSecrets as X,generateSecretValue as Q,toolchainExecArgs as W,upsertDevVariableLine as Z,writeDevVariablesFileAtomically as ee,resolveDeployDriver as E,planToolchainInvocation as re,runPostCodegenHook as te}from"@lunora/config";import{findWranglerFile as F,readWranglerJsonc as ne,mergeWranglerEnvironment as ae,validateWranglerProject as oe,reconcileWranglerBindings as ie,reconcileWranglerCompatibilityDate as se,reconcileWranglerCrons as ce,describePreservedCrons as le}from"@lunora/config/cloudflare";import{Spinner as de}from"@visulima/spinner";import{r as ue,a as ge,e as me}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as fe,a as he}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{w as ve}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{d as pe}from"../packem_shared/command-B--jgXSc.mjs";import{r as R}from"../packem_shared/wrangler-name-Dsk5K1f-.mjs";import{EXIT_CODE as h}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{containerBuildTag as ye}from"@lunora/container";import{a as we,i as ke}from"../packem_shared/docker-DpVxvYpL.mjs";import{defaultSpawner as $}from"../packem_shared/createRecordingSpawner-sS7LEN7x.mjs";import{r as O}from"../packem_shared/resolve-target-C_ZloTvd.mjs";import{p as be,H as $e,a as Se,r as De}from"../packem_shared/health-probe-Bw9JFfIy.mjs";import{readFileSync as w,writeFileSync as B,existsSync as y}from"node:fs";import{join as v}from"@visulima/path";import{Project as Ee}from"ts-morph";import{m as Re,e as Ae,i as Ce}from"../packem_shared/secret-key-DsMeUoEg.mjs";import{runMigrateDataCommand as je}from"../packem_shared/runMigrateGenerateCommand-CDHswpMU.mjs";import{c as Pe}from"../packem_shared/tui-prompts-B3YwUhGw.mjs";import{l as xe}from"../packem_shared/wrangler-secrets-CuUdFBaA.mjs";const Te=e=>{const{cwd:r,env:a,logger:t,mintedSecretsFile:n}=e;try{const o=N(r),i=o?.workerName??R(r),s=e.url??o?.workerUrl;t.success("deploy complete"),t.info(`  worker:  ${i??"(see wrangler output above)"}`),a!==void 0&&t.info(`  env:     ${a}`),s===void 0?t.info("  url:     run `lunora link --url <https://your-worker>` to record it"):t.info(`  url:     ${s}`),n!==void 0&&t.info(`  secrets: generated value(s) recorded in ${n}`),e.logsAvailable&&t.info("  logs:    lunora logs")}catch{}},Ne=async e=>{if(e.targets.length===0)return{builtTags:[],code:0};if(!(e.railpackAvailable??we)()){const t="deploy blocked: a container uses `image: { build }` (Railpack), but Railpack isn't ready. Install the `railpack` CLI and start a BuildKit instance, e.g. `docker run --rm --privileged -d --name buildkit moby/buildkit` then `export BUILDKIT_HOST=docker-container://buildkit`. Alternatively switch the container's `image` to a Dockerfile path or a pre-built registry reference.";return e.logger.error(t),{builtTags:[],code:1,error:t}}const r=e.spawner??$,a=[];for(const t of e.targets){const n=ye(t.exportName),o={args:["build",t.buildDir,"--name",n],command:"railpack",cwd:e.cwd},i=_(b(e.cwd),"wrangler",["containers","push",n]),s={args:i.args,command:i.command,cwd:e.cwd};e.logger.info(`railpack: building "${t.exportName}" → ${n} from ${t.buildDir}`);const c=await r(o);if(c.code!==0){const d=`railpack build failed for container "${t.exportName}" (${t.buildDir})`;return e.logger.error(d),{builtTags:a,code:c.code,error:d}}e.logger.info(`railpack: pushing ${n} to the Cloudflare Registry`);const l=await r(s);if(l.code!==0){const d=`wrangler containers push failed for "${t.exportName}" (${n})`;return e.logger.error(d),{builtTags:a,code:l.code,error:d}}a.push(n)}return{builtTags:a,code:0}},_e=e=>{const r=F(e),a=r===void 0?void 0:w(r,"utf8");return()=>{r!==void 0&&a!==void 0&&B(r,a,"utf8")}},M="<replace-with-d1-create-id>",P=e=>Array.isArray(e)?e.filter(r=>r!=null):void 0,A=(e,r)=>{const a=F(e);if(!a)return;const{parsed:t}=ne(a);if(t===void 0)return;const{error:n,merged:o}=ae(t,r),i=n===void 0?o:t,{containers:s,d1_databases:c,vars:l}=i;return{containers:P(s),d1_databases:P(c),vars:typeof l=="object"&&l!==null&&!Array.isArray(l)?l:void 0}},Ie=/^127(?:\.\d{1,3}){3}$/,Le=e=>{try{const{hostname:r}=new URL(e);return r==="localhost"||Ie.test(r)||r==="::1"||r==="[::1]"}catch{return!1}},Ue=e=>e.startsWith("./")||e.startsWith("../")||e.startsWith("/")||e.includes("Dockerfile"),We=(e,r,a,t="deploy",n)=>{const o=(A(e,n)?.containers??[]).filter(s=>typeof s?.image=="string"&&Ue(s.image));if(o.length===0||a())return;const i=`${t} blocked: wrangler.jsonc declares ${String(o.length)} container(s) built from a local Dockerfile, but no Docker-compatible engine is available. Start Docker (or Colima), or point the container's \`image\` at a pre-built registry reference. Note: container images must target linux/amd64.`;return r.error(i),i},V=e=>y(v(e,C))?C:void 0,Fe=(e,r,a="deploy")=>{for(const t of I(e,"lunora").containers){const{image:n}=t;if(n.kind==="dockerfile"&&!y(v(e,n.dockerfilePath))){const o=`${a} blocked: container "${t.exportName}" references a Dockerfile at "${n.dockerfilePath}" that does not exist. Create it or fix the \`image\` path in lunora/containers.ts.`;return r.error(o),o}if(n.kind==="build"&&!y(v(e,n.buildDir))){const o=`${a} blocked: container "${t.exportName}" references a Railpack build directory "${n.buildDir}" that does not exist. Create it or fix the \`image.build\` path in lunora/containers.ts.`;return r.error(o),o}}},Oe=(e,r)=>(A(e,r)?.d1_databases??[]).find(a=>a.database_id===M)?.binding,Be=e=>{if(!e.migrate||e.dryRun||e.preview)return;if(e.migrateUrl===void 0){const a="--migrate requires --migrate-url <https://your-worker> — the deploy target URL is only known after wrangler runs, and this gate runs before it; refusing to default to localhost";return e.logger.error(a),a}if(e.migrateYes!==!0){const a="--migrate runs production data migrations after deploy. Re-run with --migrate-yes to confirm.";return e.logger.error(a),a}const r=e.migrateToken??process.env.LUNORA_ADMIN_TOKEN;if(r===void 0||r===""){const a="admin token required for --migrate — pass --migrate-token or set LUNORA_ADMIN_TOKEN";return e.logger.error(a),a}},Me=(e,r,a="deploy",t)=>{const n=Oe(e,t);if(n===void 0)return;const o=`${a} blocked: the "${n}" D1 binding has a placeholder database_id ("${M}"). Run \`wrangler d1 create <name>\` to create the database, then replace the placeholder in wrangler.jsonc with the real id before deploying.`;return r.error(o),o},Ve=(e,r,a="deploy",t)=>{const n=A(e,t)?.vars;if(!n)return;const o=Object.entries(n).filter(([,s])=>typeof s=="string"&&Le(s)).map(([s])=>s).toSorted((s,c)=>s.localeCompare(c));if(o.length===0)return;const i=`${a} blocked: ${o.join(", ")} in wrangler.jsonc point at localhost. A deployed Worker can't reach a loopback address, so this silently breaks scheduled-job dispatch, reverse cross-shard relations, and auth callbacks. Set each to the deployed worker's public URL (or move it to a secret with \`wrangler secret put\`) before deploying.`;return r.error(i),i},He=(e,r,a)=>{const t=Me(e,r.logger,a,r.env);if(t!==void 0)return{code:h.USAGE,error:t};const n=Ve(e,r.logger,a,r.env);if(n!==void 0)return{code:h.USAGE,error:n};const o=Fe(e,r.logger,a);if(o!==void 0)return{code:h.USAGE,error:o};const i=We(e,r.logger,r.dockerAvailable??ke,a,r.env);return i===void 0?void 0:{code:h.MISSING_DEPENDENCY,error:i}},Ge=/https?:\/\/[^\s"'<>]+\.workers\.dev[^\s"'<>]*/u,Ke=/https:\/\/[^\s"'<>]+/u,qe=e=>{if(e===void 0)return;const r=Ge.exec(e);return r?r[0]:Ke.exec(e)?.[0]},x=e=>e===void 0?"":` (--env ${e})`,Ye=({cwd:e,env:r,logger:a,now:t,url:n})=>{if(n!==void 0)try{const o=N(e);if(o!==void 0){if(o.workerUrl===n&&o.env===r)return;a.warn(`link: .lunora/project.json records ${o.workerUrl??"(no url)"}${x(o.env)}, but this deploy published ${n}${x(r)}. Keeping the recorded value — run \`lunora link --url ${n}${r===void 0?"":` --env ${r}`}\` to update it.`);return}const i=(t??(()=>new Date().toISOString()))();Y(e,{env:r,linkedAt:i,workerName:R(e),workerUrl:n}),a.success(`link: recorded ${n} in .lunora/project.json (run \`lunora link\` to change)`)}catch{}},ze=async(e,r)=>{const a=new Ee({skipAddingFilesFromTsConfig:!0}),t=v(r,"lunora");let n;try{n=K(a,t)}catch(o){const i=o instanceof Error?o.message:String(o);return e.logger.warn(`--migrate: could not discover migrations (${i}); skipping`),0}if(n.length===0)return e.logger.info("--migrate: no data migrations declared in lunora/"),0;e.logger.info(`--migrate: running ${String(n.length)} migration(s) against deployed worker`);for(const o of n){e.logger.info(`--migrate: up "${o.id}" (table "${o.table}")`);const i={cwd:r,fetchImpl:e.fetchImpl,id:o.id,logger:e.logger,prod:!0,subcommand:"up",token:e.migrateToken,url:e.migrateUrl,yes:e.migrateYes===!0},s=await je(i);if(s.code!==0)return e.logger.error(`--migrate: migration "${o.id}" failed — see output above`),s.code;e.logger.success(`--migrate: "${o.id}" applied`)}return 0},Je=async(e,r)=>{const{info:a}=z(r,"lunora"),t=a?.vectorMetadata??[];if(t.length===0)return;const n=[];for(const s of t){const c=Re(s.kind);if(c===void 0){e.logger.warn(`vector index "${s.index}" declares metadata "${s.property}", whose column type cannot be filtered on in Vectorize — it is stored with each vector but no filter will match it.`);continue}n.push({index:s.index,property:s.property,type:c})}if(n.length===0)return;const i=(await Ae({cwd:r,entries:n,exec:_(b(r),"wrangler",[]),logger:e.logger,spawner:e.spawner??$})).filter(s=>s.status!=="failed").length;i>0&&e.logger.success(`vectorize metadata indexes ready: ${String(i)}/${String(n.length)}`)},T=5,Xe=2e3,Qe=async(e,r,a)=>{if(e.healthCheck!==!0)return;const t=a??O({cwd:r,env:e.env});if(t===void 0){const o="--health-check: the deploy succeeded, but no URL to probe could be resolved — wrangler's output carried none and this checkout has no link for this environment. Run `lunora link --url <https://your-worker>` and re-deploy, or drop --health-check.";return e.logger.error(o),{error:o,ok:!1,url:""}}const n=await be({attempts:T,baseUrl:t,delayMs:Xe,fetchImpl:e.healthFetch,paths:[$e,Se],sleep:e.healthSleep});return n.error===void 0?(e.logger.success(`health check ok (${n.url})`),{ok:!0,url:n.url}):(e.logger.error(`--health-check: the deploy succeeded, but the new version did not answer after ${String(T)} attempt(s) — ${n.error}`),{error:n.error,ok:!1,url:n.url})},Ze=async(e,r,a,t,n,o)=>{await Je(e,r);const i=e.migrate?await ze(e,r):0;return i===0&&n?.(),{code:i,descriptor:a,mintedSecretsFile:o,validation:t}},er=async({cwd:e,descriptor:r,mintedSecretsFile:a,options:t,reblessSchemaBaseline:n,stdout:o,validation:i})=>{const s={deployedAt:new Date().toISOString(),dryRun:t.dryRun===!0,env:t.env,preview:t.preview===!0,url:t.dryRun===!0?void 0:qe(o),workerName:R(e)};if(t.dryRun===!0||t.preview===!0)return t.healthCheck===!0&&t.logger.warn(`--health-check skipped: ${t.dryRun===!0?"a dry run publishes nothing":"a preview version serves no live traffic"}`),{code:0,deployment:s,descriptor:r,mintedSecretsFile:a,validation:i};t.temporary!==!0&&Ye({cwd:e,env:t.env,logger:t.logger,url:s.url});const c=await Qe(t,e,s.url);return c?.error!==void 0?{code:h.UNAVAILABLE,deployment:s,descriptor:r,healthCheck:c,mintedSecretsFile:a,validation:i}:{...await Ze(t,e,r,i,n,a),deployment:s,healthCheck:c}},rr=(e,r,a)=>{const t=v(e,p);if(!y(t))return;let n;try{n=L(w(t,"utf8")).length}catch{return}if(n===0)return;const o=a.toolchain?.secretPut!==void 0;r.warn(o?`Note: \`lunora deploy\` does not push secrets. ${p} has ${String(n)} key(s); if you changed them, run \`lunora env push --yes\` to update the deployed secrets.`:`Note: ${a.name} deploys read no secrets. ${p} has ${String(n)} key(s) that only the dev server sees; put the values the deployed worker needs in wrangler \`vars\`.`)},tr=async e=>{let r=[];try{r=J(await U({projectRoot:e}))}catch{}const a=X(r).map(n=>n.key);let t=[];try{const n=v(e,p);y(n)&&(t=L(w(n,"utf8")).map(o=>o.key).filter(o=>Ce(o)))}catch{}return[...new Set([...a,...t])]},nr=async(e,r,a,t)=>{const{logger:n}=r,o=r.spawner??$,i=b(e),s=r.env===void 0?"":` --env ${r.env}`,c=t.toolchain?.secretPut;if(c===void 0)return n.error(`deploy target "${t.id}" has no secret store; cannot push secrets`),{minted:[],ok:!1};const l=[];for(const d of a){const m=Q(),u=c({environment:r.env,key:d,temporary:r.temporary}),g=W(i,u),f=await o({args:g.args,command:g.command,cwd:e,input:m});if(f.code!==0)return n.error(`failed to push secret ${d} (exit ${String(f.code)}); set it manually with \`wrangler secret put ${d}${s}\`.`),{minted:l,ok:!1};l.push({key:d,value:m}),n.success(`generated + pushed ${d}`)}return{minted:l,ok:!0}},ar=/^[\w-]+$/u,S=[".dev.vars",".dev.vars.*","!.dev.vars.example"],or=/\r?\n/u,ir=(e,r)=>{const a=v(e,".gitignore");try{const t=y(a)?w(a,"utf8"):"",n=new Set(t.split(or).map(c=>c.trim())),o=S.filter(c=>!n.has(c));if(o.length===0)return;const i=o.some(c=>!c.startsWith("!"))?[...o.filter(c=>!c.startsWith("!")),...S.filter(c=>c.startsWith("!"))]:o,s=t.length>0&&!t.endsWith(`
 `)?`
-`:"";_(a,`${t}${s}
+`:"";B(a,`${t}${s}
 # Lunora — never commit a minted secret
 ${i.join(`
 `)}
-`,"utf8"),r.info(`.gitignore: added ${o.join(", ")} so the recorded secret cannot be committed`)}catch(t){r.warn(`could not update .gitignore (${t instanceof Error?t.message:String(t)}) — add \`${S.join("` and `")}\` by hand before committing.`)}},Xe=(e,r,a)=>{if(a.length===0)return;const t=a.map(s=>s.key).join(", ");if(r.env!==void 0&&!Ye.test(r.env)){r.logger.warn(`${t}: minted and pushed for --env ${r.env}, but "${r.env}" isn't a safe filename fragment — the value could not be recorded. Capture it manually if you need it again.`);return}const n=r.env===void 0?y:`${y}.${r.env}`;Je(e,r.logger);const o=v(e,n);let i=p(o)?w(o,"utf8"):"";for(const s of a)i=J(i,s.key,s.value);return X(o,i),r.logger.success(r.env===void 0?`${t}: value(s) recorded in ${n}`:`${t}: value(s) recorded in ${n} (kept separate from ${y} so \`lunora dev\` and a plain \`lunora env push\` don't inherit the --env ${r.env} value)`),n},Qe=async(e,r,a,t)=>{if(r.dryRun===!0||r.preview===!0)return{};const{logger:n}=r,o=r.env===void 0?"":` --env ${r.env}`;let i;try{i=await(r.secretLister??Re)({cwd:e,env:r.env,temporary:r.temporary})}catch{return{}}if(!i.ok)return{};const s=new Set(i.names),l=(await Ke(e)).filter(u=>!s.has(u));if(l.length===0)return{};if(!a)return{error:`missing required secret(s) on the deploy target: ${l.join(", ")}. Set them with \`wrangler secret put <KEY>${o}\` (or \`lunora env generate --set\` then \`lunora env push --yes${o}\`), then re-deploy.`};for(const u of l.filter(m=>!P(m)))n.warn(`required secret ${u} is not set on the target — set it with: wrangler secret put ${u}${o}`);const d=l.filter(u=>P(u));if(d.length===0)return{};if(await(r.secretConfirm??Ee())(`${String(d.length)} required secret(s) not set on the target (${d.join(", ")}). Generate strong values and push them now?`)){const{minted:u,ok:m}=await qe(e,r,d,t),f=Xe(e,r,u);return m?{mintedSecretsFile:f}:{error:"failed to push required secret(s) — set them manually and re-deploy",mintedSecretsFile:f}}return n.warn(`${String(d.length)} required secret(s) not set on the target: ${d.join(", ")}. Generate + push with \`lunora env generate --set\` then \`lunora env push --yes${o}\`.`),{}},Ze=async(e,r)=>{const a=new se({skipAddingFilesFromTsConfig:!0}),t=v(r,"lunora");let n;try{n=H(a,t)}catch(o){const i=o instanceof Error?o.message:String(o);return e.logger.warn(`--migrate: could not discover migrations (${i}); skipping`),0}if(n.length===0)return e.logger.info("--migrate: no data migrations declared in lunora/"),0;e.logger.info(`--migrate: running ${String(n.length)} migration(s) against deployed worker`);for(const o of n){e.logger.info(`--migrate: up "${o.id}" (table "${o.table}")`);const i={cwd:r,fetchImpl:e.fetchImpl,id:o.id,logger:e.logger,prod:!0,subcommand:"up",token:e.migrateToken,url:e.migrateUrl,yes:e.migrateYes===!0},s=await Ae(i);if(s.code!==0)return e.logger.error(`--migrate: migration "${o.id}" failed — see output above`),s.code;e.logger.success(`--migrate: "${o.id}" applied`)}return 0},er=e=>{if(!e.migrate||e.dryRun||e.preview)return;if(e.migrateUrl===void 0){const a="--migrate requires --migrate-url <https://your-worker> — the deploy target URL is only known after wrangler runs, and this gate runs before it; refusing to default to localhost";return e.logger.error(a),a}if(e.migrateYes!==!0){const a="--migrate runs production data migrations after deploy. Re-run with --migrate-yes to confirm.";return e.logger.error(a),a}const r=e.migrateToken??process.env.LUNORA_ADMIN_TOKEN;if(r===void 0||r===""){const a="admin token required for --migrate — pass --migrate-token or set LUNORA_ADMIN_TOKEN";return e.logger.error(a),a}},rr=async(e,r,a,t,n,o,i,s)=>{let c;r?(c=new ie({name:"dots"}),c.start("running codegen")):a.info("running codegen");try{const l=V({apiSpec:t,projectRoot:e,target:n});c?.succeed("codegen complete"),c||a.success("codegen complete");const d=ge(l.platformDiagnostics,a);if(d.errors.length>0)return{error:d.errors.join("; ")};const{errorAdvisories:g,names:u,shouldBlock:m}=me(l.advisories,s);if(m){const C=`${g.length.toString()} ERROR-level ${g.length===1?"advisory":"advisories"} (${u.join(", ")}). Pass --no-strict-advisories to downgrade this to a warning and continue.`;return a.error(C),{error:C}}const f=await K({cwd:e,logger:a,spawner:o,stdoutToStderr:i});return f.error!==void 0?{error:f.error}:{result:l}}catch(l){c?.failed("codegen failed");const d=l instanceof Error?l.message:String(l);return a.error(`codegen failed: ${d}`),{error:`codegen failed: ${d}`}}},tr=(e,r,a="deploy",t)=>{const n=Be(e,t);if(n===void 0)return;const o=`${a} blocked: the "${n}" D1 binding has a placeholder database_id ("${B}"). Run \`wrangler d1 create <name>\` to create the database, then replace the placeholder in wrangler.jsonc with the real id before deploying.`;return r.error(o),o},nr=(e,r,a="deploy",t)=>{const n=A(e,t)?.vars;if(!n)return;const o=Object.entries(n).filter(([,s])=>typeof s=="string"&&Ie(s)).map(([s])=>s).toSorted((s,c)=>s.localeCompare(c));if(o.length===0)return;const i=`${a} blocked: ${o.join(", ")} in wrangler.jsonc point at localhost. A deployed Worker can't reach a loopback address, so this silently breaks scheduled-job dispatch, reverse cross-shard relations, and auth callbacks. Set each to the deployed worker's public URL (or move it to a secret with \`wrangler secret put\`) before deploying.`;return r.error(i),i},ar=async(e,r)=>{const{info:a}=Q(r,"lunora"),t=a?.vectorMetadata??[];if(t.length===0)return;const n=[];for(const s of t){const c=le(s.kind);if(c===void 0){e.logger.warn(`vector index "${s.index}" declares metadata "${s.property}", whose column type cannot be filtered on in Vectorize — it is stored with each vector but no filter will match it.`);continue}n.push({index:s.index,property:s.property,type:c})}if(n.length===0)return;const i=(await de({cwd:r,entries:n,exec:k(b(r),"wrangler",[]),logger:e.logger,spawner:e.spawner??$})).filter(s=>s.status!=="failed").length;i>0&&e.logger.success(`vectorize metadata indexes ready: ${String(i)}/${String(n.length)}`)},N=5,or=2e3,ir=async(e,r,a)=>{if(e.healthCheck!==!0)return;const t=a??F({cwd:r,env:e.env});if(t===void 0){const o="--health-check: the deploy succeeded, but no URL to probe could be resolved — wrangler's output carried none and this checkout has no link for this environment. Run `lunora link --url <https://your-worker>` and re-deploy, or drop --health-check.";return e.logger.error(o),{error:o,ok:!1,url:""}}const n=await be({attempts:N,baseUrl:t,delayMs:or,fetchImpl:e.healthFetch,paths:[$e,Se],sleep:e.healthSleep});return n.error===void 0?(e.logger.success(`health check ok (${n.url})`),{ok:!0,url:n.url}):(e.logger.error(`--health-check: the deploy succeeded, but the new version did not answer after ${String(N)} attempt(s) — ${n.error}`),{error:n.error,ok:!1,url:n.url})},sr=async(e,r,a,t,n,o)=>{await ar(e,r);const i=e.migrate?await Ze(e,r):0;return i===0&&n?.(),{code:i,descriptor:a,mintedSecretsFile:o,validation:t}},cr=(e,r,a)=>{const t=tr(e,r.logger,a,r.env);if(t!==void 0)return{code:h.USAGE,error:t};const n=nr(e,r.logger,a,r.env);if(n!==void 0)return{code:h.USAGE,error:n};const o=Fe(e,r.logger,a);if(o!==void 0)return{code:h.USAGE,error:o};const i=We(e,r.logger,r.dockerAvailable??we,a,r.env);return i===void 0?void 0:{code:h.MISSING_DEPENDENCY,error:i}},lr=(e,r,a)=>{const t=Oe(e);t!==void 0&&r.logger.info(`class-B composition: deploying ${t} (overrides wrangler main)`),r.temporary&&r.logger.info("temporary account: deploying to a short-lived Cloudflare account (~60min); wrangler will print a claim URL"),r.dryRun&&r.logger.info("dry run: validating + bundling without publishing"),r.outDir!==void 0&&r.logger.info(`build artifact: emitting bundle to ${r.outDir}`);const n=E(a),o={dryRun:r.dryRun,entry:t,environment:r.env,outDir:r.outDir,preview:r.preview,temporary:r.temporary};if(n.toolchain===void 0)throw new Error(`deploy target "${n.id}" has no command-line toolchain`);return n.toolchain.deploy(o)},D=(e,r)=>({code:h.USAGE,descriptor:void 0,error:e,validation:{problems:[],wranglerPath:void 0},...r}),dr=(e,r)=>{for(const a of e.report?.warnings??[])r.warn(`wrangler.jsonc: ${a}`);if(e.problems.length===0)return!1;r.error("wrangler.jsonc validation failed:");for(const a of e.problems)r.error(`  - ${a}`);return!0},ur=(e,r,a)=>{const t=r.format==="json",n=r.dryRun!==!0,o=lr(e,r,a),i=k(b(e),o.tool,o.args);return{args:i.args,captureStdout:n&&!t,captureStdoutSilently:n&&t,command:i.command,cwd:e,stdoutToStderr:t&&!n}},gr=async({cwd:e,descriptor:r,mintedSecretsFile:a,options:t,reblessSchemaBaseline:n,stdout:o,validation:i})=>{const s={deployedAt:new Date().toISOString(),dryRun:t.dryRun===!0,env:t.env,preview:t.preview===!0,url:t.dryRun===!0?void 0:je(o),workerName:R(e)};if(t.dryRun===!0||t.preview===!0)return t.healthCheck===!0&&t.logger.warn(`--health-check skipped: ${t.dryRun===!0?"a dry run publishes nothing":"a preview version serves no live traffic"}`),{code:0,deployment:s,descriptor:r,mintedSecretsFile:a,validation:i};t.temporary!==!0&&xe({cwd:e,env:t.env,logger:t.logger,url:s.url});const c=await ir(t,e,s.url);return c?.error!==void 0?{code:h.UNAVAILABLE,deployment:s,descriptor:r,healthCheck:c,mintedSecretsFile:a,validation:i}:{...await sr(t,e,r,i,n,a),deployment:s,healthCheck:c}},mr=async(e,r)=>{const a=e.cwd??process.cwd(),t=M(e),n=ue(e),o={problems:[],wranglerPath:void 0},i=he(a,e.target);if(i.target===void 0){const u=i.error??"unknown deploy target";return e.logger.error(u),{error:u,validation:o}}const{target:s}=i;let c;if(!e.skipCodegen){const u=await rr(a,t,e.logger,e.apiSpec,s,e.spawner,e.format==="json",n);if(u.error!==void 0)return{error:u.error,target:s,validation:o};c=u.result}let l;if(c!==void 0){const u=ke({allowDrift:e.allowSchemaDrift===!0,codegen:c,command:r,logger:e.logger,updateBaseline:e.updateSchemaBaseline===!0});if(u.blocked)return{error:`schema drift gate blocked ${r}`,schemaDrift:{blocked:!0,reason:u.reason},target:s,validation:o};l=u.rebless}await He(a,e.logger,c?.cronTriggers,s,e.env);const d=cr(a,e,r);if(d!==void 0)return{code:d.code,error:d.error,target:s,validation:o};const g=Z({environment:e.env,projectRoot:a});return dr(g,e.logger)?{error:"wrangler validation failed",target:s,validation:g}:{codegen:c,reblessSchemaBaseline:l,target:s,validation:g}},fr=async e=>{const r=e.cwd??process.cwd(),a=M(e),t=await mr(e,e.commandName??"deploy");if(t.error!==void 0){if(t.validation.problems.length>0)return{code:h.USAGE,descriptor:void 0,error:t.error,validation:t.validation};const f=t.schemaDrift===void 0?void 0:{schemaDrift:t.schemaDrift};return D(t.error,{...f,...t.code===void 0?{}:{code:t.code}})}const{reblessSchemaBaseline:n,validation:o}=t,i=t.target,s=er(e);if(s!==void 0)return D(s);const c=await Me(r,e);if(c!==void 0)return D(c);Ge(r,e.logger);const{error:l,mintedSecretsFile:d}=await Qe(r,e,a,i);if(l!==void 0)return e.logger.error(l),{code:h.USAGE,descriptor:void 0,error:l,mintedSecretsFile:d,validation:o};const g=ur(r,e,i);e.logger.info(`deploying via ${g.command} ${g.args.join(" ")}`);const m=await(e.spawner??$)(g);return g.captureStdoutSilently===!0&&m.stdout!==void 0&&m.stdout!==""&&process.stderr.write(m.stdout),m.code!==0?{code:m.code,descriptor:g,mintedSecretsFile:d,validation:o}:gr({cwd:r,descriptor:g,mintedSecretsFile:d,options:e,reblessSchemaBaseline:n,stdout:m.stdout,validation:o})},hr=async e=>{const{logger:r}=e,a=e.dryRun===!0?_e(e.cwd??process.cwd()):void 0;let t;try{if(t=await fr({...e,logger:r}),t.code===0&&e.emitBindings!==void 0){const{error:n}=ve({destination:e.emitBindings,logger:r,projectRoot:e.cwd??process.cwd()});n!==void 0&&(r.error(n),t={...t,code:h.USAGE})}}finally{a?.()}if(e.format==="json")return t;if(t.code===0&&e.dryRun!==!0&&e.preview!==!0)Te({cwd:e.cwd??process.cwd(),env:e.env,logger:e.logger,mintedSecretsFile:t.mintedSecretsFile,url:t.deployment?.url});else if(t.code===0&&e.preview===!0){const n=t.deployment?.url;e.logger.success(n===void 0?"preview version uploaded":`preview version uploaded — ${n}`)}return t},Wr=pe(async({cwd:e,format:r,logger:a,options:t})=>{const n=await hr({allowSchemaDrift:t.allowSchemaDrift===!0,apiSpec:fe(t.apiSpec),cwd:e,dryRun:t.dryRun===!0,env:t.env,format:r,healthCheck:t.healthCheck===!0,logger:a,migrate:t.migrate===!0,migrateToken:t.migrateToken,migrateUrl:F({cwd:e,env:t.env,url:t.migrateUrl}),migrateYes:t.migrateYes===!0,preview:t.preview===!0,skipCodegen:t.prebuilt===!0,strictAdvisories:t.strictAdvisories,target:t.target,temporary:t.temporary===!0,updateSchemaBaseline:t.updateSchemaBaseline===!0});return{code:n.code,data:{deployment:n.deployment,healthCheck:n.healthCheck,mintedSecretsFile:n.mintedSecretsFile,schemaDrift:n.schemaDrift,validation:n.validation},error:n.error}});export{Wr as execute,He as provisionBindings,hr as runDeployCommand,mr as runPreDeployPipeline};
+`,"utf8"),r.info(`.gitignore: added ${o.join(", ")} so the recorded secret cannot be committed`)}catch(t){r.warn(`could not update .gitignore (${t instanceof Error?t.message:String(t)}) — add \`${S.join("` and `")}\` by hand before committing.`)}},sr=(e,r,a)=>{if(a.length===0)return;const t=a.map(s=>s.key).join(", ");if(r.env!==void 0&&!ar.test(r.env)){r.logger.warn(`${t}: minted and pushed for --env ${r.env}, but "${r.env}" isn't a safe filename fragment — the value could not be recorded. Capture it manually if you need it again.`);return}const n=r.env===void 0?p:`${p}.${r.env}`;ir(e,r.logger);const o=v(e,n);let i=y(o)?w(o,"utf8"):"";for(const s of a)i=Z(i,s.key,s.value);return ee(o,i),r.logger.success(r.env===void 0?`${t}: value(s) recorded in ${n}`:`${t}: value(s) recorded in ${n} (kept separate from ${p} so \`lunora dev\` and a plain \`lunora env push\` don't inherit the --env ${r.env} value)`),n},cr=async(e,r,a,t)=>{if(r.dryRun===!0||r.preview===!0)return{};const{logger:n}=r,o=r.env===void 0?"":` --env ${r.env}`;let i;try{i=await(r.secretLister??xe)({cwd:e,env:r.env,temporary:r.temporary})}catch{return{}}if(!i.ok)return{};const s=new Set(i.names),l=(await tr(e)).filter(u=>!s.has(u));if(l.length===0)return{};if(!a)return{error:`missing required secret(s) on the deploy target: ${l.join(", ")}. Set them with \`wrangler secret put <KEY>${o}\` (or \`lunora env generate --set\` then \`lunora env push --yes${o}\`), then re-deploy.`};for(const u of l.filter(g=>!j(g)))n.warn(`required secret ${u} is not set on the target — set it with: wrangler secret put ${u}${o}`);const d=l.filter(u=>j(u));if(d.length===0)return{};if(await(r.secretConfirm??Pe())(`${String(d.length)} required secret(s) not set on the target (${d.join(", ")}). Generate strong values and push them now?`)){const{minted:u,ok:g}=await nr(e,r,d,t),f=sr(e,r,u);return g?{mintedSecretsFile:f}:{error:"failed to push required secret(s) — set them manually and re-deploy",mintedSecretsFile:f}}return n.warn(`${String(d.length)} required secret(s) not set on the target: ${d.join(", ")}. Generate + push with \`lunora env generate --set\` then \`lunora env push --yes${o}\`.`),{}},H=e=>e.format==="json"?!1:e.interactive!==void 0?e.interactive:process.stdout.isTTY&&!process.env.CI,lr=async(e,r)=>{if(r.dryRun===!0)return;const a=I(e,"lunora").containers.filter(n=>n.image.kind==="build").map(n=>({buildDir:n.image.buildDir,exportName:n.exportName}));if(a.length===0)return;const t=await Ne({cwd:e,logger:r.logger,railpackAvailable:r.railpackAvailable,spawner:r.spawner,targets:a});return t.code===0?void 0:t.error??"railpack build failed"},dr=(e,r,a)=>{if(a!==void 0)try{const t=ce(e,a);t.changed&&r.success(`synced ${String(a.length)} cron trigger(s) → ${t.wranglerPath??"wrangler.jsonc"}`);for(const o of t.warnings)r.warn(o);const n=le(t.preserved);n!==void 0&&r.info(n)}catch(t){const n=t instanceof Error?t.message:String(t);r.warn(`cron trigger sync skipped: ${n}`)}},ur=async(e,r,a,t,n)=>{try{E(t);const o=await U({projectRoot:e}),i=ie(e,o,n),s=i.wranglerPath??"wrangler.jsonc";i.added.length>0&&r.success(`provisioned bindings: ${i.added.join(", ")} → ${s}`),i.updated.length>0&&r.success(`updated bindings: ${i.updated.join(", ")} → ${s}`);for(const c of i.warnings)r.warn(c)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`binding inference skipped: ${i}`)}try{const o=se(e);o.changed&&r.success(`bumped compatibility_date to ${o.date??"unknown"} (Workers Cache enabled) → ${o.wranglerPath??"wrangler.jsonc"}`)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`compatibility date sync skipped: ${i}`)}dr(e,r,a)},gr=async(e,r,a,t,n,o,i,s)=>{let c;r?(c=new de({name:"dots"}),c.start("running codegen")):a.info("running codegen");try{const l=q({apiSpec:t,projectRoot:e,target:n});c?.succeed("codegen complete"),c||a.success("codegen complete");const d=ge(l.platformDiagnostics,a);if(d.errors.length>0)return{error:d.errors.join("; ")};const{errorAdvisories:m,names:u,shouldBlock:g}=me(l.advisories,s);if(g){const k=`${m.length.toString()} ERROR-level ${m.length===1?"advisory":"advisories"} (${u.join(", ")}). Pass --no-strict-advisories to downgrade this to a warning and continue.`;return a.error(k),{error:k}}const f=await te({cwd:e,logger:a,spawner:o,stdoutToStderr:i});return f.error!==void 0?{error:f.error}:{result:l}}catch(l){c?.failed("codegen failed");const d=l instanceof Error?l.message:String(l);return a.error(`codegen failed: ${d}`),{error:`codegen failed: ${d}`}}},mr=(e,r)=>({dryRun:r.dryRun,entry:V(e),environment:r.env,outDir:r.outDir,preview:r.preview,temporary:r.temporary}),G=(e,r,a)=>{const{toolchain:t}=a;if(t===void 0)throw new Error(`deploy target "${a.id}" has no command-line toolchain`);const n=mr(e,r);return re(a,e,"deploy",o=>t.deploy({...n,configPath:o}))},fr=(e,r,a)=>{const t=G(e,r,a),n=V(e);return n!==void 0&&r.logger.info(`class-B composition: deploying ${n} (overrides wrangler main)`),r.temporary&&r.logger.info("temporary account: deploying to a short-lived Cloudflare account (~60min); wrangler will print a claim URL"),r.dryRun&&r.logger.info("dry run: validating + bundling without publishing"),r.outDir!==void 0&&r.logger.info(`build artifact: emitting bundle to ${r.outDir}`),t.commit(),t.projection!==void 0&&t.projection.dropped.length>0&&r.logger.warn(`${a.name} ignores these wrangler keys, so they were left out of ${t.projection.configPath}: ${t.projection.dropped.join(", ")}`),t.command},D=(e,r)=>({code:h.USAGE,descriptor:void 0,error:e,validation:{problems:[],wranglerPath:void 0},...r}),hr=(e,r)=>{for(const a of e.report?.warnings??[])r.warn(`wrangler.jsonc: ${a}`);if(e.problems.length===0)return!1;r.error("wrangler.jsonc validation failed:");for(const a of e.problems)r.error(`  - ${a}`);return!0},vr=(e,r,a)=>{const t=r.format==="json",n=r.dryRun!==!0,o=fr(e,r,a),i=W(b(e),o);return{args:i.args,captureStdout:n&&!t,captureStdoutSilently:n&&t,command:i.command,cwd:e,stdoutToStderr:t&&!n}},pr=async(e,r)=>{const a=e.cwd??process.cwd(),t=H(e),n=ue(e),o={problems:[],wranglerPath:void 0},i=he(a,e.target);if(i.target===void 0){const u=i.error??"unknown deploy target";return e.logger.error(u),{error:u,validation:o}}const{target:s}=i;try{G(a,e,E(s))}catch(u){const g=u instanceof Error?u.message:String(u);return e.logger.error(g),{error:g,target:s,validation:o}}let c;if(!e.skipCodegen){const u=await gr(a,t,e.logger,e.apiSpec,s,e.spawner,e.format==="json",n);if(u.error!==void 0)return{error:u.error,target:s,validation:o};c=u.result}let l;if(c!==void 0){const u=De({allowDrift:e.allowSchemaDrift===!0,codegen:c,command:r,logger:e.logger,updateBaseline:e.updateSchemaBaseline===!0});if(u.blocked)return{error:`schema drift gate blocked ${r}`,schemaDrift:{blocked:!0,reason:u.reason},target:s,validation:o};l=u.rebless}await ur(a,e.logger,c?.cronTriggers,s,e.env);const d=He(a,e,r);if(d!==void 0)return{code:d.code,error:d.error,target:s,validation:o};const m=oe({environment:e.env,projectRoot:a});return hr(m,e.logger)?{error:"wrangler validation failed",target:s,validation:m}:{codegen:c,reblessSchemaBaseline:l,target:s,validation:m}},yr=async e=>{const r=e.cwd??process.cwd(),a=H(e),t=await pr(e,e.commandName??"deploy");if(t.error!==void 0){if(t.validation.problems.length>0)return{code:h.USAGE,descriptor:void 0,error:t.error,validation:t.validation};const k=t.schemaDrift===void 0?void 0:{schemaDrift:t.schemaDrift};return D(t.error,{...k,...t.code===void 0?{}:{code:t.code}})}const{reblessSchemaBaseline:n,validation:o}=t,i=E(t.target),s=Be(e);if(s!==void 0)return D(s);const c=i.toolchain?.prebuildsContainerImages===!0?await lr(r,e):void 0;if(c!==void 0)return D(c);rr(r,e.logger,i);const{error:l,mintedSecretsFile:d}=await cr(r,e,a,i);if(l!==void 0)return e.logger.error(l),{code:h.USAGE,descriptor:void 0,error:l,mintedSecretsFile:d,validation:o};const m=vr(r,e,i);e.logger.info(`deploying via ${m.command} ${m.args.join(" ")}`);const g=await(e.spawner??$)(m);return m.captureStdoutSilently===!0&&g.stdout!==void 0&&g.stdout!==""&&process.stderr.write(g.stdout),g.code!==0?{code:g.code,descriptor:m,mintedSecretsFile:d,validation:o}:{...await er({cwd:r,descriptor:m,mintedSecretsFile:d,options:e,reblessSchemaBaseline:n,stdout:g.stdout,validation:o}),logsAvailable:i.toolchain?.tail!==void 0}},wr=async e=>{const{logger:r}=e,a=e.dryRun===!0?_e(e.cwd??process.cwd()):void 0;let t;try{if(t=await yr({...e,logger:r}),t.code===0&&e.emitBindings!==void 0){const{error:n}=ve({destination:e.emitBindings,logger:r,projectRoot:e.cwd??process.cwd()});n!==void 0&&(r.error(n),t={...t,code:h.USAGE})}}finally{a?.()}if(e.format==="json")return t;if(t.code===0&&e.dryRun!==!0&&e.preview!==!0)Te({cwd:e.cwd??process.cwd(),env:e.env,logger:e.logger,logsAvailable:t.logsAvailable===!0,mintedSecretsFile:t.mintedSecretsFile,url:t.deployment?.url});else if(t.code===0&&e.preview===!0){const n=t.deployment?.url;e.logger.success(n===void 0?"preview version uploaded":`preview version uploaded — ${n}`)}return t},Mr=pe(async({cwd:e,format:r,logger:a,options:t})=>{const n=await wr({allowSchemaDrift:t.allowSchemaDrift===!0,apiSpec:fe(t.apiSpec),cwd:e,dryRun:t.dryRun===!0,env:t.env,format:r,healthCheck:t.healthCheck===!0,logger:a,migrate:t.migrate===!0,migrateToken:t.migrateToken,migrateUrl:O({cwd:e,env:t.env,url:t.migrateUrl}),migrateYes:t.migrateYes===!0,preview:t.preview===!0,skipCodegen:t.prebuilt===!0,strictAdvisories:t.strictAdvisories,target:t.target,temporary:t.temporary===!0,updateSchemaBaseline:t.updateSchemaBaseline===!0});return{code:n.code,data:{deployment:n.deployment,healthCheck:n.healthCheck,mintedSecretsFile:n.mintedSecretsFile,schemaDrift:n.schemaDrift,validation:n.validation},error:n.error}});export{Mr as execute,ur as provisionBindings,wr as runDeployCommand,pr as runPreDeployPipeline};

package/dist/packem_chunks/runDevCommand.mjs

@@ -0,0 +1,3 @@
+import{runCodegen as P}from"@lunora/codegen";import{runPostCodegenHook as G,detectAgentRules as O,updateDevServerState as $,readDevServerState as j,discoverContainerInfo as F,streamContainerLogs as H,formatLunoraEvent as V,DEV_DAEMON_ENV as C,detectAiAgent as B,readProjectRemotePreference as U,readLiveDevServerState as M,DEV_HANDOFF_ENV as y,clearDevServerState as W,claimDevServerState as X,DEV_LOG_FILE_ENV as K,inferLunoraBindings as Y,packageNamesFromBindings as J,ensureDevVarsExample as z,ensureDevVariables as Q,isInteractive as Z,DEV_VARS_FILE as T,DEV_VARS_EXAMPLE_FILE as q,fillDevSecrets as ee,DEV_BINDINGS_FILE as te,DEV_STATE_FILE as x,claimAgentRulesHint as re,AGENT_RULES_HINT as oe}from"@lunora/config";import{resolveRemoteEnabled as ne}from"@lunora/config/cloudflare";import{p as ie,a as ae}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{w as se}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{existsSync as ce,watch as de}from"node:fs";import{join as le}from"node:path";import{a as ue}from"../packem_shared/codegen-error-AmH54ofi.mjs";import{a as fe}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{d as me}from"../packem_shared/command-B--jgXSc.mjs";import{EXIT_CODE as ge}from"../packem_shared/EXIT_CODE-08cwt3MK.mjs";import{forceJsonLogging as ve}from"../packem_shared/createLogger-Cl18I8AX.mjs";import{createServer as we,request as he}from"node:http";import{connect as pe}from"node:net";import{pipeline as Se}from"node:stream";import{loadStudioAssets as k,studioAssetsStamp as I,renderStudioHtml as ye,resolveAdminToken as Ee,requestPathname as R,transportRejectionReason as D,SCHEMA_EDIT_ENDPOINT as be,POLICY_SCAFFOLD_ENDPOINT as Te,SEED_ENDPOINT as ke,sendStudioDocument as Ie,serveJsonHandler as Re,isStandaloneModulePath as De,readStandaloneAsset as _e,assetContentType as Le,handleSchemaEditRequest as Ne,handlePolicyScaffoldRequest as Ae,handleSeedRequest as Pe,applyStudioAssetCache as Oe}from"@lunora/config/studio-host";import{c as $e}from"../packem_shared/tui-prompts-B3YwUhGw.mjs";import{setTimeout as Ce}from"node:timers/promises";import{r as Me,d as xe,P as Ge,a as je,b as E,s as Fe,c as He,e as Ve,f as Be,g as Ue}from"../packem_shared/plan-B-KsxVne.mjs";import{provisionBindings as We}from"./runDeployCommand.mjs";import{spawn as Xe}from"node:child_process";import{spawnShellCompat as Ke}from"../packem_shared/createRecordingSpawner-sS7LEN7x.mjs";const Ye=100,Je=300,ze=/[/\\]/u,Qe=(e,t,r)=>{const{apiSpec:n,logger:o,projectRoot:a,target:c}=e;try{const i=P({apiSpec:n,lunoraDirectory:t,projectRoot:a,target:c});o.success(`codegen: wrote ${t}/_generated (${r})`),fe(i.platformDiagnostics,o)}catch(i){return o.error(ue(i,r)),!1}return!0},Ze=e=>{const t=e.lunoraDirectory??"lunora",r=le(e.projectRoot,t),n=e.debounceMs??Ye;let o=!1,a=!1,c=!1,i,d=0,f=Promise.resolve(),w;const p=new Promise(m=>{w=m}),h=m=>{o||(i=m,!a&&(a=!0,f=(async()=>{try{for(;i!==void 0;){const v=i;if(i=void 0,!!Qe(e,t,v)){c=!0;try{(await G({cwd:e.projectRoot,logger:e.logger,spawner:e.spawner,stdoutToStderr:e.jsonLogs})).ran&&(d=Date.now())}finally{c=!1}}}}catch(v){e.logger.error(`codegen watch: ${v instanceof Error?v.message:String(v)}`)}finally{a=!1,w()}})()))};h("startup");const l=m=>(e.logger.warn(`codegen watch unavailable (${m}) — schema edits will NOT auto-regenerate. Run \`lunora codegen\` manually after each edit.`),{close:()=>(o=!0,i=void 0,f),ready:p,watchAvailable:!1});let s,u;if(!ce(r))return l(`no such directory: ${r}`);try{u=de(r,{recursive:!0},(m,v)=>{if(!(typeof v=="string"&&v.split(ze).includes("_generated"))){if(c||Date.now()-d<Je){s&&(clearTimeout(s),s=void 0);return}s&&clearTimeout(s),s=setTimeout(()=>{h(`change: ${v??"?"}`)},n)}})}catch(m){return l(m instanceof Error?m.message:String(m))}const g=u;return{close:()=>(o=!0,i=void 0,s&&clearTimeout(s),g.close(),f),ready:p,watchAvailable:!0}},_="/_lunora",L=3e4,N=(e,t,r)=>{const n=he({headers:{...e.headers,host:r.host},hostname:r.hostname,method:e.method,path:e.url,port:r.port},o=>{t.writeHead(o.statusCode??502,o.headers),Se(o,t,()=>{})});n.setTimeout(L,()=>{n.destroy(new Error(`no response within ${String(L)}ms`))}),n.on("error",o=>{if(t.headersSent){t.destroy();return}t.statusCode=o.message.startsWith("no response within")?504:502,t.end(`lunora dev: worker unreachable (${o.message})`)}),t.on("close",()=>{t.writableFinished||n.destroy()}),e.pipe(n)},qe=5e3,et=(e,t,r,n)=>{const o=pe({host:n.hostname,port:Number(n.port)},()=>{o.setTimeout(0);const a=[`${e.method??"GET"} ${e.url??"/"} HTTP/1.1`];for(const[c,i]of Object.entries(e.headers))if(c!=="host")for(const d of Array.isArray(i)?i:[i])d!==void 0&&a.push(`${c}: ${d}`);a.push(`host: ${n.host}`,"",""),o.write(a.join(`\r
+`)),r.length>0&&o.write(r),o.pipe(t),t.pipe(o)});o.setTimeout(qe,()=>o.destroy()),o.on("error",()=>t.destroy()),t.on("error",()=>o.destroy())},tt=async e=>{const t=e.host??"127.0.0.1",r=t==="127.0.0.1"||t==="localhost"||t==="::1",n=new URL(e.workerOrigin);let o=k(e.logger,import.meta.url),a=I(import.meta.url);const c=ye({adminToken:r?Ee(e.cwd):void 0,basePath:"/",dataEditable:r,rulesInstalled:O(e.cwd).installed,runAsIdentity:r,schemaEditable:r,scriptSrc:"/studio.js",styleHref:"/styles.css"}),i=(l,s,u,g,m)=>{Oe(l,s,m,a)||(s.statusCode=200,s.setHeader("Content-Type",g),s.end(u))},d=(l,s,u)=>{l.statusCode=s,l.setHeader("Content-Type","text/plain"),l.end(u)},f=(l,s,u,g)=>{if(r){Re(l,s,u,e.cwd,{apiSpec:e.apiSpec});return}d(s,403,g)},w=(l,s,u)=>{const g=l==="/styles.css",m=De(l);if(!g&&!m)return!1;const v=I(import.meta.url);if(v!==a&&(o=k(e.logger,import.meta.url),a=v),o===void 0)return d(u,501,"Lunora studio assets not found — install and build @lunora/studio."),!0;if(g)return i(s,u,o.styles,"text/css; charset=utf-8","styles.css"),!0;const S=l.slice(l.lastIndexOf("/")+1),b=_e(S,import.meta.url);return b===void 0?(d(u,404,"Not found"),!0):(i(s,u,b,Le(S),S),!0)},p=Buffer.from(c),h=we((l,s)=>{const u=R(l.url??"/");if(r){const m=D(l,e.logger);if(m!==void 0){d(s,403,m);return}}if(u.startsWith(_)){if(!r){d(s,403,"Lunora studio: the worker admin proxy is only available on a loopback bind.");return}N(l,s,n);return}if(u===be){f(l,s,Ne,"Lunora schema editing is only available on loopback hosts in dev.");return}if(u===Te){f(l,s,Ae,"Lunora policy scaffolding is only available on loopback hosts in dev.");return}if(u===ke){f(l,s,Pe,"Lunora data seeding is only available on loopback hosts in dev.");return}if(w(u,l,s))return;const g=l.headers["sec-fetch-mode"];if(r&&typeof g=="string"&&g!=="navigate"){N(l,s,n);return}Ie(s,p)});return h.on("upgrade",(l,s,u)=>{if(!r||D(l,e.logger)!==void 0){s.destroy();return}R(l.url??"").startsWith(_)?et(l,s,u,n):s.destroy()}),await new Promise((l,s)=>{h.once("error",u=>{u.code==="EADDRINUSE"?s(new Error(`studio port ${String(e.port)} is already in use — pass a different port with --port, or stop the process using it`,{cause:u})):s(u)}),h.listen(e.port,t,()=>{l()})}),{close:()=>new Promise(l=>{h.close(()=>{l()})}),url:`http://${t==="0.0.0.0"||t==="::"?"localhost":t}:${String(e.port)}`}},rt=async e=>{const{cwd:t,logger:r,origin:n,signal:o}=e,a=e.probe??xe,c=Me(e.readyTimeoutMs),i=Date.now()+c,d=()=>o.aborted;for(;!d()&&Date.now()<i;){let f=!1;try{f=await a(n,o)}catch{}if(d()||Date.now()>=i)break;if(f)return $(t,{readyAt:new Date().toISOString()},{expectedPid:process.pid}),j(t)?.readyAt!==void 0;try{await Ce(Ge,void 0,{signal:o})}catch{}}return d()||r.warn(`server did not answer on ${n} within ${String(Math.round(c/1e3))}s — .lunora/dev.json will have no readyAt, so anything polling for readiness will keep waiting. The server itself is unaffected; raise LUNORA_DEV_READY_TIMEOUT_MS if it is just slow to boot.`),!1},ot=5e3,A=(e,t,r,n)=>{if(e.length===0)return;const o=V(e);if(o){n[o.level](`[lunora] ${o.text}`);return}const a=`[${t}] ${e}`;r==="stderr"?n.warn(a):n.info(a)},nt=(e,t,r)=>{const n=(o,a)=>{if(!o)return;let c="";o.on("data",i=>{c+=i.toString("utf8");const d=c.split(`
+`);c=d.pop()??"";for(const f of d)A(f.trimEnd(),t,a,r)}),o.on("end",()=>{A(c.trimEnd(),t,a,r),c=""})};n(e.stdout,"stdout"),n(e.stderr,"stderr")},it=(e,t)=>{const r=Ke(e.command,e.args),n=Xe(r.command,r.args,{cwd:e.cwd??process.cwd(),env:e.env?{...process.env,...e.env}:process.env,shell:r.shell,stdio:["inherit","pipe","pipe"]});return nt(n,e.tag,t),{exited:new Promise(o=>{n.on("error",a=>{t.error(`[${e.tag}] failed to start: ${a.message}`),o(1)}),n.on("exit",(a,c)=>{o(a??(c?1:0))})}),kill:o=>{try{n.kill(o)}catch{}}}},at=(e,t)=>{if(process.env.LUNORA_CONTAINER_LOGS==="0")return;const n=F(e,"lunora").containers.map(o=>({className:o.className,exportName:o.exportName}));if(n.length!==0)return H({containers:n,onLine:o=>{const a=`[container:${o.name}] ${o.text}`;o.level==="error"?t.warn(a):t.info(a)},onUnavailable:o=>{t.warn(`[container] Docker engine unreachable — container logs unavailable (${o})`)}})},st=async e=>{e.readyProbe?.abort(),await e.codegen?.close().catch(()=>{}),e.containerLogs?.close(),await e.studio?.close().catch(()=>{});try{e.remoteCleanup?.()}catch{}},ct=async e=>await new Promise(t=>{const r={},n=c=>{e.info(`received ${c} — shutting down`),r.sigint&&process.off("SIGINT",r.sigint),r.sigterm&&process.off("SIGTERM",r.sigterm),t(0)},o=()=>{n("SIGINT")},a=()=>{n("SIGTERM")};r.sigint=o,r.sigterm=a,process.on("SIGINT",o),process.on("SIGTERM",a)}),dt=async(e,t,r)=>{let n=0,o;const a=f=>{e.kill(f),t?.kill(f)},c=()=>{n+=1,n===1?(r.info("received SIGINT — shutting down (press Ctrl-C again to force-kill)"),a("SIGTERM"),o=setTimeout(()=>{a("SIGKILL")},ot),o.unref()):a("SIGKILL")},i=()=>{a("SIGTERM")};process.on("SIGINT",c),process.on("SIGTERM",i);const d=await Promise.race([e.exited.then(f=>({code:f,who:"worker"})),...t===void 0?[]:[t.exited.then(f=>({code:f,who:"sidecar"}))]]);return t!==void 0&&(d.who==="sidecar"?(r.warn("[worker] the Lunora sidecar (wrangler dev) exited — shutting down the framework dev server"),e.kill("SIGTERM")):t.kill("SIGTERM"),await Promise.allSettled([e.exited,t.exited])),o&&clearTimeout(o),process.off("SIGINT",c),process.off("SIGTERM",i),d.code},lt=(e,t,r,n)=>{e.info(""),e.success("Lunora dev"),e.info(`  ➜  Worker:     ${t.workerOrigin}`),r!==void 0&&e.info(`  ➜  Studio:     ${r}`),t.runsCodegenWatch&&e.info("  ➜  Codegen:    watching lunora/"),n!==void 0&&e.info(`  ➜  Supervisor: ${n} (needs) · ${x} (status)`),t.remote.enabled&&(t.remote.bindings.length>0?e.info(`  ➜  Remote:     ${t.remote.bindings.join(", ")} → deployed worker`):e.warn(`  ➜  Remote:     requested but inactive (${t.remote.reason??"no eligible bindings"}) — running fully local`)),e.info("")},ut=(e,t)=>{O(t).installed||!re()||(e.info(`  ⓘ  ${oe}`),e.info(""))},ft=async(e,t)=>{try{const n=await Y({projectRoot:t}),o=J(n),a=(e.ensureExample??z)(t,o);a.length>0&&e.logger.info(`Updated .dev.vars.example with secrets for: ${o.join(", ")} (${a.join(", ")})`)}catch{}(await(e.ensureEnv??Q)({confirm:$e(),cwd:t,info:n=>{e.logger.info(n)}})).status==="declined"&&!Z()&&e.logger.info(`hint: ${T} was not scaffolded (non-interactive run). Copy ${q} → ${T} and fill in secrets, or run \`lunora dev\` in an interactive terminal to scaffold automatically.`);try{(e.fillSecrets??ee)({cwd:t,info:n=>{e.logger.info(n)}})}catch{}},mt=(e,t,r,n,o)=>{if(e.flavor!=="wrangler")return;n!==void 0&&$(t,{studioUrl:n});let a;try{a=at(t,r)}catch{}return lt(r,e,n,o),a},gt=(e,t)=>{const r=Number(process.env[y]),n=X(t,{background:process.env[C]==="1",logFile:process.env[K],mode:"cli",pid:process.pid,startedAt:new Date().toISOString(),url:e.workerOrigin},Number.isInteger(r)&&r>0?{supersedePid:r}:void 0);return n.ok?void 0:n.existing},vt=e=>{const{cwd:t,destination:r,logger:n,plan:o}=e,a=r!==void 0,c=r??te,i=se({destination:c,dev:{...o.flavor==="wrangler"?{origin:o.workerOrigin}:{},statusFile:x},logger:a?n:{...n,success:()=>{},warn:()=>{}},projectRoot:t});return i.error!==void 0?a?i:(n.debug?.(`skipped the default binding manifest: ${i.error}`),{}):{written:c}},wt=async(e,t,r,n)=>{if(t.studioEnabled)try{return await(e.startStudio??tt)({apiSpec:e.apiSpec,cwd:r,logger:{warnOnce:o=>{n.warn(o)}},port:t.studioPort,workerOrigin:t.workerOrigin})}catch(o){n.warn(`studio server failed to start (${o instanceof Error?o.message:String(o)}) — continuing without it`);return}},ht=e=>{const t=[e.runsCodegenWatch?"codegen watch":void 0,e.studioEnabled?"studio":void 0].filter(n=>n!==void 0);return`--no-worker: not starting wrangler. ${t.length>0?`${t.join(" + ")} running`:"nothing else to run"}; your task runner owns the worker on ${e.workerOrigin}.`},pt=(e,t,r,n,o)=>{if(!(e.sidecar===void 0||!Ue(t)))try{P({apiSpec:t.apiSpec,lunoraDirectory:"lunora",projectRoot:r,target:o})}catch(a){n.warn(`codegen (pre-sidecar) failed: ${a instanceof Error?a.message:String(a)} — the framework dev server will retry`)}},St=e=>e.flavor==="vite"?"starting vite dev (worker + studio + codegen run inside Vite via @lunora/vite)":`starting ${e.wrangler.tag} dev + studio`,yt=async e=>{const{logger:t}=e,r=e.cwd??process.cwd(),n=e.flavor??He(r),o=ae(r,e.target);if(o.target===void 0)throw new Error(o.error??"unknown deploy target");const{target:a}=o,c=Ve(a,n,t);c==="wrangler"&&await We(r,t,void 0,a,void 0);const i=await Be({...e,flavor:c,target:a}),d={remoteCleanup:i.remote.cleanup};try{const f=Number(process.env[y]),w=M(r);if(w!==void 0&&w.pid!==process.pid&&w.pid!==f)return E(t,w),{code:0,plan:i};const p=gt(i,r);if(p!==void 0)return E(t,p),{code:0,plan:i};(i.flavor==="vite"||i.flavor==="framework-worker")&&(i.wrangler.env={...i.wrangler.env,[y]:String(process.pid)}),await ft(e,r),t.info(St(i)),i.ipv4LoopbackForced&&t.info("no IPv6 loopback (::1) on this host — binding the worker to 127.0.0.1 (--ip) so wrangler dev doesn't crash. Pin `dev.ip` in wrangler.jsonc to override."),i.runsCodegenWatch&&(d.codegen=(e.startCodegen??Ze)({apiSpec:e.apiSpec,jsonLogs:e.jsonLogs,logger:t,projectRoot:r,target:a})),d.studio=await wt(e,i,r,t);const h=vt({cwd:r,destination:e.emitBindings,logger:t,plan:i});if(h.error!==void 0)return t.error(h.error),{code:ge.USAGE,plan:i};await d.codegen?.ready;const l=d.studio?.url;i.frameworkHint!==void 0&&t.warn(i.frameworkHint);const s=()=>{i.flavor==="wrangler"&&(d.readyProbe=new AbortController,rt({cwd:r,logger:t,origin:i.workerOrigin,probe:e.probeReady,signal:d.readyProbe.signal}))};if(!i.workerEnabled)return s(),t.info(ht(i)),{code:await(e.waitForInterrupt??ct)(t),plan:i};pt(i,e,r,t,a);const u=e.startWorker??it,g=u(i.wrangler,t),m=i.sidecar===void 0?void 0:u(i.sidecar,t);return s(),d.containerLogs=mt(i,r,t,l,h.written),ut(t,r),{code:await dt(g,m,t),plan:i}}finally{d.readyProbe?.abort(),W(r,process.pid),await st(d)}},Et=e=>({codegen:e.codegen===!1?!1:void 0,studio:e.studio===!1?!1:void 0,worker:e.worker===!1?!1:void 0}),Ut=me(async({argument:e,cwd:t,logger:r,options:n})=>{const o=n.json===!0,a=je({cwd:t,json:o,lines:n.lines,logger:r,subcommand:e[0]});if(a!==void 0)return a;const c=process.env[C]==="1",i=c?void 0:B(),d=o||i!==void 0;d&&ve(),i!==void 0&&n.background!==!0&&r.info(`AI agent detected (${i.name} via ${i.variable}) — starting the dev server in background mode with JSON logs. Set LUNORA_AGENT_MODE=0 to opt out.`);const f=ne({configPreference:U(t),envValue:process.env.LUNORA_REMOTE,flag:n.remote});if(!c&&(n.background===!0||i!==void 0)){const w=M(t);return w!==void 0?(E(r,w),{code:0}):Fe({cwd:t,jsonLogs:d,logger:r,options:n,remote:f})}return yt({apiSpec:ie(n.apiSpec),cwd:t,emitBindings:n.emitBindings,inspectorPort:n.inspectorPort,jsonLogs:d,logger:r,port:n.port,remote:f,target:n.target,workerPort:n.workerPort,...Et(n)})});export{Ut as execute,Et as negatableDevFlags,yt as runDevCommand};