@lunora/cli 1.0.0-alpha.345 → 1.0.0-alpha.347

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.mjs CHANGED
@@ -1 +1 @@
1
- import{C as o,V as a,r as n}from"./packem_shared/cli-CG_JgNKu.mjs";import{runCodegenCommand as m}from"./packem_chunks/runCodegenCommand.mjs";import{runDeployCommand as p}from"./packem_chunks/runDeployCommand.mjs";import{runDevCommand as f}from"./packem_chunks/runDevCommand.mjs";import{p as i}from"./packem_shared/plan-Cqn2uvTo.mjs";import{runInitCommand as l}from"./packem_chunks/runInitCommand.mjs";import{runMigrateGenerateCommand as I}from"./packem_shared/runMigrateGenerateCommand-Ii_WMZEA.mjs";import{runResetCommand as g}from"./packem_chunks/runResetCommand.mjs";import{runRpcCommand as T}from"./packem_chunks/runRpcCommand.mjs";import{EXIT_CODE as S,exitCodeForCode as A,exitCodeForError as c,exitCodeForStatus as M}from"./packem_shared/EXIT_CODE-D_XCixv8.mjs";import{insertSchemaExtension as v}from"./packem_shared/insertSchemaExtension-DuiV6cba.mjs";import{createLogger as b,pail as O}from"./packem_shared/createLogger-Cl18I8AX.mjs";import{diffSnapshots as y,renderAddColumn as L,renderCreateIndex as w,renderCreateTable as B,renderDropIndex as P,renderDropTable as U,renderMigrationFile as V,validatorKindToSqlType as W}from"./packem_shared/diffSnapshots-WWwx-KvZ.mjs";import{default as N}from"./packem_shared/schemaIrToSnapshot-BjK-0IRo.mjs";import{createRecordingSpawner as j,defaultSpawner as q}from"./packem_shared/createRecordingSpawner-CYhdPBD5.mjs";import{default as K}from"./packem_shared/parseManifest-CwPTKdtS.mjs";import{D as Y,r as Z}from"./packem_shared/import-BRM1hs7j.mjs";import{REQUIRED_COMPATIBILITY_DATE as z,REQUIRED_FLAG as J,validateWranglerProject as $,validateWranglerConfig as rr}from"@lunora/config/cloudflare";import{b as or}from"./packem_shared/catalog-CahzmDLV.mjs";import{r as nr,a as tr,b as mr}from"./packem_shared/commands-Cg06JNO2.mjs";import{runExportCommand as pr}from"./packem_shared/runExportCommand-slAq5BCF.mjs";export{o as COMMANDS,Y as DEFAULT_IMPORT_BATCH_SIZE,S as EXIT_CODE,z as REQUIRED_COMPATIBILITY_DATE,J as REQUIRED_FLAG,a as VERSION,or as buildRegistryIndex,b as createLogger,j as createRecordingSpawner,q as defaultSpawner,y as diffSnapshots,A as exitCodeForCode,c as exitCodeForError,M as exitCodeForStatus,v as insertSchemaExtension,O as pail,K as parseManifest,i as planDevCommand,L as renderAddColumn,w as renderCreateIndex,B as renderCreateTable,P as renderDropIndex,U as renderDropTable,V as renderMigrationFile,nr as runAddCommand,tr as runBuildIndexCommand,n as runCli,m as runCodegenCommand,p as runDeployCommand,f as runDevCommand,pr as runExportCommand,Z as runImportCommand,l as runInitCommand,I as runMigrateGenerateCommand,mr as runRegistryViewCommand,g as runResetCommand,T as runRpcCommand,N as schemaIrToSnapshot,$ as validateWrangler,rr as validateWranglerConfig,W as validatorKindToSqlType};
1
+ import{C as o,V as a,r as n}from"./packem_shared/cli-CG_JgNKu.mjs";import{runCodegenCommand as m}from"./packem_chunks/runCodegenCommand.mjs";import{runDeployCommand as p}from"./packem_chunks/runDeployCommand.mjs";import{runDevCommand as f}from"./packem_chunks/runDevCommand.mjs";import{p as i}from"./packem_shared/plan-TuKFsXOj.mjs";import{runInitCommand as l}from"./packem_chunks/runInitCommand.mjs";import{runMigrateGenerateCommand as I}from"./packem_shared/runMigrateGenerateCommand-Ii_WMZEA.mjs";import{runResetCommand as g}from"./packem_chunks/runResetCommand.mjs";import{runRpcCommand as T}from"./packem_chunks/runRpcCommand.mjs";import{EXIT_CODE as S,exitCodeForCode as A,exitCodeForError as c,exitCodeForStatus as M}from"./packem_shared/EXIT_CODE-D_XCixv8.mjs";import{insertSchemaExtension as v}from"./packem_shared/insertSchemaExtension-DuiV6cba.mjs";import{createLogger as b,pail as O}from"./packem_shared/createLogger-Cl18I8AX.mjs";import{diffSnapshots as y,renderAddColumn as L,renderCreateIndex as w,renderCreateTable as B,renderDropIndex as P,renderDropTable as U,renderMigrationFile as V,validatorKindToSqlType as W}from"./packem_shared/diffSnapshots-WWwx-KvZ.mjs";import{default as N}from"./packem_shared/schemaIrToSnapshot-BjK-0IRo.mjs";import{createRecordingSpawner as j,defaultSpawner as q}from"./packem_shared/createRecordingSpawner-CYhdPBD5.mjs";import{default as K}from"./packem_shared/parseManifest-CwPTKdtS.mjs";import{D as Y,r as Z}from"./packem_shared/import-BRM1hs7j.mjs";import{REQUIRED_COMPATIBILITY_DATE as z,REQUIRED_FLAG as J,validateWranglerProject as $,validateWranglerConfig as rr}from"@lunora/config/cloudflare";import{b as or}from"./packem_shared/catalog-CahzmDLV.mjs";import{r as nr,a as tr,b as mr}from"./packem_shared/commands-Cg06JNO2.mjs";import{runExportCommand as pr}from"./packem_shared/runExportCommand-slAq5BCF.mjs";export{o as COMMANDS,Y as DEFAULT_IMPORT_BATCH_SIZE,S as EXIT_CODE,z as REQUIRED_COMPATIBILITY_DATE,J as REQUIRED_FLAG,a as VERSION,or as buildRegistryIndex,b as createLogger,j as createRecordingSpawner,q as defaultSpawner,y as diffSnapshots,A as exitCodeForCode,c as exitCodeForError,M as exitCodeForStatus,v as insertSchemaExtension,O as pail,K as parseManifest,i as planDevCommand,L as renderAddColumn,w as renderCreateIndex,B as renderCreateTable,P as renderDropIndex,U as renderDropTable,V as renderMigrationFile,nr as runAddCommand,tr as runBuildIndexCommand,n as runCli,m as runCodegenCommand,p as runDeployCommand,f as runDevCommand,pr as runExportCommand,Z as runImportCommand,l as runInitCommand,I as runMigrateGenerateCommand,mr as runRegistryViewCommand,g as runResetCommand,T as runRpcCommand,N as schemaIrToSnapshot,$ as validateWrangler,rr as validateWranglerConfig,W as validatorKindToSqlType};
@@ -1 +1 @@
1
- import{existsSync as f,readFileSync as v,realpathSync as w}from"node:fs";import{join as u}from"node:path";import{DEV_VARS_FILE as h,parseDevVariableEntries as $,isPlaceholderValue as A,discoverSchemaInfo as R,inferLunoraBindings as S,resolveSchemaDirectory as j}from"@lunora/config";import{GLOBAL_FETCH_STRICTLY_PUBLIC_FLAG as m,resolveObservabilitySampling as L,findWranglerFile as I,readWranglerJsonc as O,validateWranglerProject as N,UNEXPORTED_CLASS_MARKER as y,collectExportGaps as E}from"@lunora/config/cloudflare";import{i as C,m as D,c as P}from"../packem_shared/secret-key-DsMeUoEg.mjs";import{r as V,d as F}from"../packem_shared/admin-token-VdUnvnKW.mjs";import{d as U}from"../packem_shared/command-CAXl2A1S.mjs";import{i as G}from"../packem_shared/path-containment-CgxYZggb.mjs";import{b as k,c as x,a as g}from"../packem_shared/variables-acxcvVQa.mjs";import{readServiceBindings as T}from"@lunora/codegen";const W=(o,r)=>{const e=new Set,n=s=>{for(const[a,i]of Object.entries(s??{}))typeof i=="string"&&i.trim().length>0&&e.add(a)};n(o.vars);for(const s of Object.values(o.env??{}))n(s.vars);const t=u(r,h);if(f(t))try{n(Object.fromEntries($(v(t,"utf8")).map(s=>[s.key,s.value])))}catch{}return e},M=(o,r,e,n)=>{if(o===void 0||!e)return;const t=W(o,r),s=t.has(k),a=o.ai?.binding;!s&&(typeof a!="string"||a.length===0)&&n.push({code:"ai-binding-missing",fix:`Run \`lunora dev\` (it adds the binding), add \`"ai": { "binding": "AI" }\` to wrangler.jsonc, or set ${k} to an OpenAI-compatible proxy.`,level:"warn",message:"the project uses ctx.ai (@lunora/ai / env.AI) but wrangler.jsonc declares no `ai` binding — model calls will fail at runtime."}),t.has(x)&&n.push({code:"ai-gateway-token-unused",fix:"Make the gateway unauthenticated for ctx.ai, or remove the token. A bring-your-own AI SDK provider built with `resolveAiGateway` does send it.",level:"warn",message:`${x} is set, but ctx.ai's Workers AI binding cannot send a gateway token — it is ignored on that path.`}),!s&&!t.has(g)&&n.push({code:"ai-gateway-default",fix:`Run \`lunora ai gateway\` to create a gateway for this app and write ${g} into wrangler vars.`,level:"info",message:`no ${g} in vars or ${h} — \`<provider>/<model>\` slugs route through the account's \`default\` AI Gateway.`})},B=(o,r,e)=>{if(o===void 0||!r)return;const n=[];(o.compatibility_flags??[]).includes(m)||n.push("the top level");for(const[t,s]of Object.entries(o.env??{}))s.compatibility_flags!==void 0&&!s.compatibility_flags.includes(m)&&n.push(`env.${t}`);n.length>0&&e.push({code:"cimd-fetch-not-strictly-public",fix:`Add "${m}" to "compatibility_flags" in wrangler.jsonc.`,level:"warn",message:`@lunora/auth/cimd/workers is imported, but ${n.join(", ")} of wrangler.jsonc lacks the ${m} compatibility flag — workersCimdFetch() refuses to build without it.`})},_=o=>{const{logs:r,traces:e}=L(o);return Object.entries({logs:r,traces:e}).filter(([,n])=>n.enabled&&n.headSamplingRate>=1).map(([n])=>n)},K=(o,r)=>{if(o===void 0)return;const e=[],n=_(o.observability);n.length>0&&e.push(`${n.join(" + ")} (top level)`);for(const[t,s]of Object.entries(o.env??{})){if(s.observability===void 0)continue;const a=_(s.observability);a.length>0&&e.push(`${a.join(" + ")} (env.${t})`)}e.length!==0&&r.push({code:"observability-full-sampling",fix:"For a high-traffic Worker, lower head_sampling_rate in wrangler.jsonc: under observability for logs, under observability.traces for traces — e.g. 0.1 keeps 10% of requests. Lunora never changes a rate you set.",level:"info",message:`observability samples every request (head_sampling_rate 1) for ${e.join(", ")}. From 2026-12-01 Workers Observability is billed: Free caps ingestion at 0.5 GB/day; Paid includes 50 GB per billing cycle, then $0.25/GB.`})},z=(o,r)=>{for(const e of T(o).services)for(const n of e.publicScopes){const t=n===""?"":` (env.${n})`;r.push({code:"service-workers-dev",fix:`Set \`"workers_dev": false\`${t} in ${e.wranglerPath} — the app's service binding is its only way in, so internal auth (HMAC) can go too.`,level:"warn",message:`service ${e.name} (${e.worker}) is bound by the app but still public on workers.dev${t}.`})}},H=o=>{const r=o.trim();if(r==="")return!0;const e=r.toLowerCase();return e.includes("replace")||e.startsWith("<")&&e.endsWith(">")},q=o=>{const r=I(o);if(r===void 0)return{parsed:void 0,path:void 0};const{parsed:e}=O(r);return{parsed:e,path:r}},Y=(o,r,e,n)=>{if(e===void 0){n.push({code:"wrangler-missing",fix:"Run `lunora init` (or `lunora dev`) to scaffold and reconcile wrangler.jsonc.",level:"fail",message:"wrangler.jsonc not found."});return}if(r===void 0){n.push({code:"wrangler-unparseable",fix:`Check ${e} is valid JSONC.`,level:"fail",message:`Could not parse ${e}.`});return}const{report:t}=N({projectRoot:o});for(const i of t.errors.filter(l=>l.includes(y)))n.push({code:"wrangler-class-unexported",level:"fail",message:i});for(const i of t.warnings.filter(l=>l.includes("LUNORA_ORIGIN_URL")))n.push({code:"scheduler-origin-missing",fix:"Set LUNORA_ORIGIN_URL in wrangler vars to the worker's public URL (or `wrangler secret put LUNORA_ORIGIN_URL`).",level:"warn",message:i});const s=i=>i.includes(y)||i.includes("SHARD");for(const i of t.errors.filter(l=>!s(l)))n.push({code:"wrangler-invalid",fix:"Fix the reported wrangler.jsonc problem; `lunora verify` reports the same set.",level:"fail",message:i});for(const i of t.warnings.filter(l=>!l.includes("LUNORA_ORIGIN_URL")))n.push({code:"wrangler-advisory",level:"warn",message:i});const a=t.errors.find(i=>i.includes("SHARD"));a===void 0?n.push({code:"wrangler-shard-binding-ok",level:"pass",message:"wrangler.jsonc present with a SHARD durable-object binding."}):n.push({code:"wrangler-shard-binding-missing",fix:"Run `lunora dev` to auto-reconcile, or add the binding manually.",level:"fail",message:a})},J=(o,r)=>{f(u(o,"lunora.json"))&&r.push({code:"stale-lunora-json",fix:'Move `target` / `remote` into `lunora.config.ts` (`export default { target: "…" }`), then delete lunora.json.',level:"warn",message:"lunora.json is present but no longer read — lunora.config.* replaced it, so any `target` or `remote` in it is being ignored."})},X=(o,r)=>{o===void 0||o.limits?.cpu_ms!==void 0||r.push({code:"cpu-limit-missing",fix:'Add `"limits": { "cpu_ms": 30000 }` to wrangler.jsonc, tuned to your slowest legitimate handler.',level:"info",message:"no limits.cpu_ms is set — a runaway handler can burn CPU up to the platform default before anything stops it."})},Q=(o,r)=>{const e=(o?.r2_buckets??[]).map(n=>n?.bucket_name).filter(n=>typeof n=="string"&&n.length>0);e.length!==0&&r.push({code:"r2-lifecycle-unset",fix:"wrangler r2 bucket lifecycle list <bucket> — add an abort-incomplete-multipart rule if none exists.",level:"info",message:`R2 bucket(s) ${e.join(", ")}: verify a lifecycle rule aborts incomplete multipart uploads — orphaned parts are billed but invisible in a listing.`})},Z=(o,r)=>{const{error:e,info:n}=R(o,"lunora");if(e!==void 0){r.push({code:"schema-unreadable",fix:"Fix the parse error, then re-run `lunora doctor`. `lunora codegen` reports the same failure with the offending source.",level:"fail",message:`lunora/schema.ts could not be parsed, so every schema-derived check was skipped: ${e}`});return}for(const t of n?.vectorMetadata??[]){const s=D(t.kind);if(s===void 0){r.push({code:"vector-metadata-unfilterable",fix:"Filter on a string, number or boolean column, or drop it from `metadata`.",level:"warn",message:`vector index "${t.index}" declares metadata "${t.property}", whose type Vectorize cannot filter on.`});continue}r.push({code:"vector-metadata-index-required",fix:`wrangler ${P({index:t.index,property:t.property,type:s}).join(" ")}`,level:"info",message:`vector index "${t.index}" filters on metadata "${t.property}" — that needs a Vectorize metadata index (\`lunora deploy\` creates it).`})}},ee=(o,r)=>{if(o===void 0)return;const e=(o.d1_databases??[]).filter(Boolean);for(const n of e){const t=typeof n.database_id=="string"?n.database_id:"";if(H(t)){const s=typeof n.binding=="string"&&n.binding.length>0?n.binding:"<unnamed>";r.push({code:"d1-placeholder-id",fix:"Run `wrangler d1 create <name>` and paste the returned database_id into wrangler.jsonc.",level:"fail",message:`D1 binding "${s}" has a placeholder database_id ("${t||"<empty>"}").`})}}},ne=(o,r)=>{if(o===void 0)return;const e=(o.send_email??[]).filter(Boolean);for(const n of e){const t=typeof n.destination_address=="string"?n.destination_address:"";if(t!==""&&A(t)){const s=typeof n.name=="string"&&n.name.length>0?n.name:"send_email";r.push({code:"email-destination-placeholder",fix:"Set destination_address to a verified Cloudflare Email Routing address.",level:"warn",message:`send_email binding "${s}" has a placeholder destination_address ("${t}").`})}}},re=(o,r)=>{const e=u(o,h);if(!f(e))return;let n;try{n=v(e,"utf8")}catch{return}const t=$(n).filter(s=>C(s.key)&&A(s.value)).map(s=>s.key);t.length>0&&r.push({code:"dev-vars-missing-secret",fix:"Run `lunora dev` to auto-generate secrets, or fill them in by hand.",level:"warn",message:`${h} has unfilled secret value(s): ${t.join(", ")}.`})},te=(o,r)=>{const{source:e}=V({cwd:o});e===void 0?r.push({code:"admin-token-missing",fix:"Set LUNORA_ADMIN_TOKEN (env or `.dev.vars`) to enable admin RPCs / studio.",level:"info",message:"LUNORA_ADMIN_TOKEN is not set."}):r.push({code:"admin-token-set",level:"pass",message:`LUNORA_ADMIN_TOKEN is set (${F(e)}).`})},oe=async(o,r)=>{try{return await S({projectRoot:o,schemaDir:j(o)})}catch(e){r.push({code:"declared-export-unchecked",fix:"Make sure the worker entry resolves (see `lunora codegen`), then re-run.",level:"warn",message:`could not check whether declared containers/workflows/agents are re-exported by the worker entry: ${e instanceof Error?e.message:String(e)}`});return}},se=(o,r)=>{const e=E(o),n=[...o.containers.map(t=>({...t,kind:"container"})),...o.workflows.map(t=>({...t,kind:"workflow"})),...o.agents.map(t=>({...t,kind:"agent"}))];for(const t of n.filter(s=>s.exported))r.push({code:"declared-export-ok",level:"pass",message:`${t.kind} "${t.exportName}" is exported by the worker entry.`});for(const t of e)r.push({code:"declared-export-missing",fix:`Add \`export * from "./lunora/_generated/${t.module}"\` to your worker entry (or re-run \`vis generate lunora-${t.kind}\`).`,level:"fail",message:`${t.kind} "${t.exportName}" is declared but ${t.className} is not exported by the worker entry.`})},ae=/^[\^~><= ]+/u,ie=/^(?<core>\d+\.\d+\.\d+)(?:-(?<channel>[a-z]+)\.(?<counter>\d+))?$/u,ce=o=>{const r=o.replace(ae,"").trim(),e=ie.exec(r);if(!e?.groups)return;const{channel:n,core:t,counter:s}=e.groups;return{channel:n??"",core:t??"",counter:s===void 0?void 0:Number.parseInt(s,10),raw:r}},le=(o,r)=>{const e=u(o,"package.json");if(!f(e))return;let n;try{n=JSON.parse(v(e,"utf8"))}catch{return}const t={...n.devDependencies,...n.dependencies},s=[];for(const[c,d]of Object.entries(t)){if(c!=="lunorash"&&!c.startsWith("@lunora/"))continue;const b=ce(d);b&&s.push({name:c,version:b})}if(s.length<2)return;const a=c=>c.map(d=>`${d.name}@${d.version.raw}`).join(", "),i=new Set(s.map(c=>c.version.core)),l=new Set(s.map(c=>c.version.channel));if(i.size>1){r.push({code:"version-skew-cores",fix:'Run `pnpm update "@lunora/*" lunorash` (or `npm`/`yarn` equivalent) so every Lunora package moves to the same release.',level:"warn",message:`Lunora packages span ${String(i.size)} different versions: ${a(s)}.`});return}if(l.size>1){r.push({code:"version-skew-channels",fix:"Pick one channel (all stable, or all alpha/beta) and update the odd package out.",level:"warn",message:`Lunora packages mix release channels (${[...l].map(c=>c===""?"stable":c).join(" + ")}): ${a(s)}.`});return}const p=s.map(c=>c.version.counter).filter(c=>c!==void 0);if(p.length>1){const c=Math.min(...p),d=Math.max(...p);r.push({code:"version-counter-spread",level:"info",message:p.length===s.length&&c===d?`Lunora packages are all at ${[...l][0]??""}.${String(d)}.`:`Lunora pre-release counters span ${String(c)}–${String(d)}: ${a(s)}.`})}},de=[u("@lunora","cli"),"lunorash"],ue=(o,r,e)=>{if(r===void 0)return;const n=[];for(const s of de){const a=u(o,"node_modules",s);if(f(a))try{n.push(w(a))}catch{}}if(n.length===0)return;let t;try{t=w(r)}catch{return}n.some(s=>G(s,t))||e.push({code:"cli-shadowed",fix:"Run the project's own CLI: `pnpm exec lunora …` (or `npx lunora …`).",level:"warn",message:`the running lunora (${t}) is not the project's own install (${n.join(", ")}).`})},fe=async o=>{const r=o.cwd??process.cwd(),e=[],{parsed:n,path:t}=q(r);Y(r,n,t,e),ee(n,e),ne(n,e),X(n,e),Q(n,e),K(n,e),re(r,e),te(r,e),le(r,e),Z(r,e),J(r,e),ue(r,o.executablePath??process.argv[1],e),z(r,e);const s=await oe(r,e);s!==void 0&&se(s,e),M(n,r,s?.usesAi===!0,e),B(n,s?.usesCimdWorkers===!0,e);const a={fail:0,info:0,pass:0,warn:0};for(const l of e)a[l.level]+=1;const i=a.fail>0?1:0;return{code:i,findings:e,ok:i===0,summary:a}},pe={fail:"FAIL",info:"INFO",pass:"PASS",warn:"WARN"},me=(o,r)=>{r.info("lunora doctor — project preflight");for(const t of o.findings){const s=`[${pe[t.level]}] ${t.message}`;t.level==="fail"?r.error(s):t.level==="warn"?r.warn(s):r.info(s),t.fix!==void 0&&t.level!=="pass"&&r.info(` fix: ${t.fix}`)}const{fail:e,warn:n}=o.summary;e>0?r.error(`${String(e)} failure(s), ${String(n)} warning(s).`):n>0?r.warn(`0 failures, ${String(n)} warning(s).`):r.success("all checks passed.")},he=async o=>{const{logger:r}=o,e=await fe({...o});return me(e,r),e},Re=U(async({cwd:o,format:r,logger:e})=>{const n=await he({cwd:o,format:r,logger:e});return{code:n.code,data:{findings:n.findings,summary:n.summary}}});export{Re as execute,fe as runDoctor,he as runDoctorCommand};
1
+ import{existsSync as f,readFileSync as v,realpathSync as w}from"node:fs";import{join as u}from"node:path";import{DEV_VARS_FILE as h,parseDevVariableEntries as $,isPlaceholderValue as A,discoverSchemaInfo as R,inferLunoraBindings as S,resolveSchemaDirectory as j}from"@lunora/config";import{GLOBAL_FETCH_STRICTLY_PUBLIC_FLAG as m,resolveObservabilitySampling as L,findWranglerFile as I,readWranglerJsonc as O,validateWranglerProject as N,UNEXPORTED_CLASS_MARKER as y,detectCloudflareCliConfig as C,collectExportGaps as E}from"@lunora/config/cloudflare";import{i as D,m as P,c as V}from"../packem_shared/secret-key-DsMeUoEg.mjs";import{r as F,d as U}from"../packem_shared/admin-token-VdUnvnKW.mjs";import{d as G}from"../packem_shared/command-CAXl2A1S.mjs";import{i as T}from"../packem_shared/path-containment-CgxYZggb.mjs";import{b as k,c as x,a as g}from"../packem_shared/variables-acxcvVQa.mjs";import{readServiceBindings as W}from"@lunora/codegen";const M=(t,r)=>{const e=new Set,n=s=>{for(const[a,i]of Object.entries(s??{}))typeof i=="string"&&i.trim().length>0&&e.add(a)};n(t.vars);for(const s of Object.values(t.env??{}))n(s.vars);const o=u(r,h);if(f(o))try{n(Object.fromEntries($(v(o,"utf8")).map(s=>[s.key,s.value])))}catch{}return e},B=(t,r,e,n)=>{if(t===void 0||!e)return;const o=M(t,r),s=o.has(k),a=t.ai?.binding;!s&&(typeof a!="string"||a.length===0)&&n.push({code:"ai-binding-missing",fix:`Run \`lunora dev\` (it adds the binding), add \`"ai": { "binding": "AI" }\` to wrangler.jsonc, or set ${k} to an OpenAI-compatible proxy.`,level:"warn",message:"the project uses ctx.ai (@lunora/ai / env.AI) but wrangler.jsonc declares no `ai` binding — model calls will fail at runtime."}),o.has(x)&&n.push({code:"ai-gateway-token-unused",fix:"Make the gateway unauthenticated for ctx.ai, or remove the token. A bring-your-own AI SDK provider built with `resolveAiGateway` does send it.",level:"warn",message:`${x} is set, but ctx.ai's Workers AI binding cannot send a gateway token — it is ignored on that path.`}),!s&&!o.has(g)&&n.push({code:"ai-gateway-default",fix:`Run \`lunora ai gateway\` to create a gateway for this app and write ${g} into wrangler vars.`,level:"info",message:`no ${g} in vars or ${h} — \`<provider>/<model>\` slugs route through the account's \`default\` AI Gateway.`})},K=(t,r,e)=>{if(t===void 0||!r)return;const n=[];(t.compatibility_flags??[]).includes(m)||n.push("the top level");for(const[o,s]of Object.entries(t.env??{}))s.compatibility_flags!==void 0&&!s.compatibility_flags.includes(m)&&n.push(`env.${o}`);n.length>0&&e.push({code:"cimd-fetch-not-strictly-public",fix:`Add "${m}" to "compatibility_flags" in wrangler.jsonc.`,level:"warn",message:`@lunora/auth/cimd/workers is imported, but ${n.join(", ")} of wrangler.jsonc lacks the ${m} compatibility flag — workersCimdFetch() refuses to build without it.`})},_=t=>{const{logs:r,traces:e}=L(t);return Object.entries({logs:r,traces:e}).filter(([,n])=>n.enabled&&n.headSamplingRate>=1).map(([n])=>n)},z=(t,r)=>{if(t===void 0)return;const e=[],n=_(t.observability);n.length>0&&e.push(`${n.join(" + ")} (top level)`);for(const[o,s]of Object.entries(t.env??{})){if(s.observability===void 0)continue;const a=_(s.observability);a.length>0&&e.push(`${a.join(" + ")} (env.${o})`)}e.length!==0&&r.push({code:"observability-full-sampling",fix:"For a high-traffic Worker, lower head_sampling_rate in wrangler.jsonc: under observability for logs, under observability.traces for traces — e.g. 0.1 keeps 10% of requests. Lunora never changes a rate you set.",level:"info",message:`observability samples every request (head_sampling_rate 1) for ${e.join(", ")}. From 2026-12-01 Workers Observability is billed: Free caps ingestion at 0.5 GB/day; Paid includes 50 GB per billing cycle, then $0.25/GB.`})},H=(t,r)=>{for(const e of W(t).services)for(const n of e.publicScopes){const o=n===""?"":` (env.${n})`;r.push({code:"service-workers-dev",fix:`Set \`"workers_dev": false\`${o} in ${e.wranglerPath} — the app's service binding is its only way in, so internal auth (HMAC) can go too.`,level:"warn",message:`service ${e.name} (${e.worker}) is bound by the app but still public on workers.dev${o}.`})}},q=t=>{const r=t.trim();if(r==="")return!0;const e=r.toLowerCase();return e.includes("replace")||e.startsWith("<")&&e.endsWith(">")},Y=t=>{const r=I(t);if(r===void 0)return{parsed:void 0,path:void 0};const{parsed:e}=O(r);return{parsed:e,path:r}},J=(t,r,e,n)=>{if(e===void 0){n.push({code:"wrangler-missing",fix:"Run `lunora init` (or `lunora dev`) to scaffold and reconcile wrangler.jsonc.",level:"fail",message:"wrangler.jsonc not found."});return}if(r===void 0){n.push({code:"wrangler-unparseable",fix:`Check ${e} is valid JSONC.`,level:"fail",message:`Could not parse ${e}.`});return}const{report:o}=N({projectRoot:t});for(const i of o.errors.filter(l=>l.includes(y)))n.push({code:"wrangler-class-unexported",level:"fail",message:i});for(const i of o.warnings.filter(l=>l.includes("LUNORA_ORIGIN_URL")))n.push({code:"scheduler-origin-missing",fix:"Set LUNORA_ORIGIN_URL in wrangler vars to the worker's public URL (or `wrangler secret put LUNORA_ORIGIN_URL`).",level:"warn",message:i});const s=i=>i.includes(y)||i.includes("SHARD");for(const i of o.errors.filter(l=>!s(l)))n.push({code:"wrangler-invalid",fix:"Fix the reported wrangler.jsonc problem; `lunora verify` reports the same set.",level:"fail",message:i});for(const i of o.warnings.filter(l=>!l.includes("LUNORA_ORIGIN_URL")))n.push({code:"wrangler-advisory",level:"warn",message:i});const a=o.errors.find(i=>i.includes("SHARD"));a===void 0?n.push({code:"wrangler-shard-binding-ok",level:"pass",message:"wrangler.jsonc present with a SHARD durable-object binding."}):n.push({code:"wrangler-shard-binding-missing",fix:"Run `lunora dev` to auto-reconcile, or add the binding manually.",level:"fail",message:a})},X=(t,r)=>{f(u(t,"lunora.json"))&&r.push({code:"stale-lunora-json",fix:'Move `target` / `remote` into `lunora.config.ts` (`export default { target: "…" }`), then delete lunora.json.',level:"warn",message:"lunora.json is present but no longer read — lunora.config.* replaced it, so any `target` or `remote` in it is being ignored."})},Q=(t,r)=>{const e=C(t);e!==void 0&&r.push({code:"cf-config-present",fix:e.fix,level:"warn",message:e.message})},Z=(t,r)=>{t===void 0||t.limits?.cpu_ms!==void 0||r.push({code:"cpu-limit-missing",fix:'Add `"limits": { "cpu_ms": 30000 }` to wrangler.jsonc, tuned to your slowest legitimate handler.',level:"info",message:"no limits.cpu_ms is set — a runaway handler can burn CPU up to the platform default before anything stops it."})},ee=(t,r)=>{const e=(t?.r2_buckets??[]).map(n=>n?.bucket_name).filter(n=>typeof n=="string"&&n.length>0);e.length!==0&&r.push({code:"r2-lifecycle-unset",fix:"wrangler r2 bucket lifecycle list <bucket> — add an abort-incomplete-multipart rule if none exists.",level:"info",message:`R2 bucket(s) ${e.join(", ")}: verify a lifecycle rule aborts incomplete multipart uploads — orphaned parts are billed but invisible in a listing.`})},ne=(t,r)=>{const{error:e,info:n}=R(t,"lunora");if(e!==void 0){r.push({code:"schema-unreadable",fix:"Fix the parse error, then re-run `lunora doctor`. `lunora codegen` reports the same failure with the offending source.",level:"fail",message:`lunora/schema.ts could not be parsed, so every schema-derived check was skipped: ${e}`});return}for(const o of n?.vectorMetadata??[]){const s=P(o.kind);if(s===void 0){r.push({code:"vector-metadata-unfilterable",fix:"Filter on a string, number or boolean column, or drop it from `metadata`.",level:"warn",message:`vector index "${o.index}" declares metadata "${o.property}", whose type Vectorize cannot filter on.`});continue}r.push({code:"vector-metadata-index-required",fix:`wrangler ${V({index:o.index,property:o.property,type:s}).join(" ")}`,level:"info",message:`vector index "${o.index}" filters on metadata "${o.property}" — that needs a Vectorize metadata index (\`lunora deploy\` creates it).`})}},re=(t,r)=>{if(t===void 0)return;const e=(t.d1_databases??[]).filter(Boolean);for(const n of e){const o=typeof n.database_id=="string"?n.database_id:"";if(q(o)){const s=typeof n.binding=="string"&&n.binding.length>0?n.binding:"<unnamed>";r.push({code:"d1-placeholder-id",fix:"Run `wrangler d1 create <name>` and paste the returned database_id into wrangler.jsonc.",level:"fail",message:`D1 binding "${s}" has a placeholder database_id ("${o||"<empty>"}").`})}}},te=(t,r)=>{if(t===void 0)return;const e=(t.send_email??[]).filter(Boolean);for(const n of e){const o=typeof n.destination_address=="string"?n.destination_address:"";if(o!==""&&A(o)){const s=typeof n.name=="string"&&n.name.length>0?n.name:"send_email";r.push({code:"email-destination-placeholder",fix:"Set destination_address to a verified Cloudflare Email Routing address.",level:"warn",message:`send_email binding "${s}" has a placeholder destination_address ("${o}").`})}}},oe=(t,r)=>{const e=u(t,h);if(!f(e))return;let n;try{n=v(e,"utf8")}catch{return}const o=$(n).filter(s=>D(s.key)&&A(s.value)).map(s=>s.key);o.length>0&&r.push({code:"dev-vars-missing-secret",fix:"Run `lunora dev` to auto-generate secrets, or fill them in by hand.",level:"warn",message:`${h} has unfilled secret value(s): ${o.join(", ")}.`})},se=(t,r)=>{const{source:e}=F({cwd:t});e===void 0?r.push({code:"admin-token-missing",fix:"Set LUNORA_ADMIN_TOKEN (env or `.dev.vars`) to enable admin RPCs / studio.",level:"info",message:"LUNORA_ADMIN_TOKEN is not set."}):r.push({code:"admin-token-set",level:"pass",message:`LUNORA_ADMIN_TOKEN is set (${U(e)}).`})},ae=async(t,r)=>{try{return await S({projectRoot:t,schemaDir:j(t)})}catch(e){r.push({code:"declared-export-unchecked",fix:"Make sure the worker entry resolves (see `lunora codegen`), then re-run.",level:"warn",message:`could not check whether declared containers/workflows/agents are re-exported by the worker entry: ${e instanceof Error?e.message:String(e)}`});return}},ie=(t,r)=>{const e=E(t),n=[...t.containers.map(o=>({...o,kind:"container"})),...t.workflows.map(o=>({...o,kind:"workflow"})),...t.agents.map(o=>({...o,kind:"agent"}))];for(const o of n.filter(s=>s.exported))r.push({code:"declared-export-ok",level:"pass",message:`${o.kind} "${o.exportName}" is exported by the worker entry.`});for(const o of e)r.push({code:"declared-export-missing",fix:`Add \`export * from "./lunora/_generated/${o.module}"\` to your worker entry (or re-run \`vis generate lunora-${o.kind}\`).`,level:"fail",message:`${o.kind} "${o.exportName}" is declared but ${o.className} is not exported by the worker entry.`})},ce=/^[\^~><= ]+/u,le=/^(?<core>\d+\.\d+\.\d+)(?:-(?<channel>[a-z]+)\.(?<counter>\d+))?$/u,de=t=>{const r=t.replace(ce,"").trim(),e=le.exec(r);if(!e?.groups)return;const{channel:n,core:o,counter:s}=e.groups;return{channel:n??"",core:o??"",counter:s===void 0?void 0:Number.parseInt(s,10),raw:r}},ue=(t,r)=>{const e=u(t,"package.json");if(!f(e))return;let n;try{n=JSON.parse(v(e,"utf8"))}catch{return}const o={...n.devDependencies,...n.dependencies},s=[];for(const[c,d]of Object.entries(o)){if(c!=="lunorash"&&!c.startsWith("@lunora/"))continue;const b=de(d);b&&s.push({name:c,version:b})}if(s.length<2)return;const a=c=>c.map(d=>`${d.name}@${d.version.raw}`).join(", "),i=new Set(s.map(c=>c.version.core)),l=new Set(s.map(c=>c.version.channel));if(i.size>1){r.push({code:"version-skew-cores",fix:'Run `pnpm update "@lunora/*" lunorash` (or `npm`/`yarn` equivalent) so every Lunora package moves to the same release.',level:"warn",message:`Lunora packages span ${String(i.size)} different versions: ${a(s)}.`});return}if(l.size>1){r.push({code:"version-skew-channels",fix:"Pick one channel (all stable, or all alpha/beta) and update the odd package out.",level:"warn",message:`Lunora packages mix release channels (${[...l].map(c=>c===""?"stable":c).join(" + ")}): ${a(s)}.`});return}const p=s.map(c=>c.version.counter).filter(c=>c!==void 0);if(p.length>1){const c=Math.min(...p),d=Math.max(...p);r.push({code:"version-counter-spread",level:"info",message:p.length===s.length&&c===d?`Lunora packages are all at ${[...l][0]??""}.${String(d)}.`:`Lunora pre-release counters span ${String(c)}–${String(d)}: ${a(s)}.`})}},fe=[u("@lunora","cli"),"lunorash"],pe=(t,r,e)=>{if(r===void 0)return;const n=[];for(const s of fe){const a=u(t,"node_modules",s);if(f(a))try{n.push(w(a))}catch{}}if(n.length===0)return;let o;try{o=w(r)}catch{return}n.some(s=>T(s,o))||e.push({code:"cli-shadowed",fix:"Run the project's own CLI: `pnpm exec lunora …` (or `npx lunora …`).",level:"warn",message:`the running lunora (${o}) is not the project's own install (${n.join(", ")}).`})},me=async t=>{const r=t.cwd??process.cwd(),e=[],{parsed:n,path:o}=Y(r);J(r,n,o,e),Q(r,e),re(n,e),te(n,e),Z(n,e),ee(n,e),z(n,e),oe(r,e),se(r,e),ue(r,e),ne(r,e),X(r,e),pe(r,t.executablePath??process.argv[1],e),H(r,e);const s=await ae(r,e);s!==void 0&&ie(s,e),B(n,r,s?.usesAi===!0,e),K(n,s?.usesCimdWorkers===!0,e);const a={fail:0,info:0,pass:0,warn:0};for(const l of e)a[l.level]+=1;const i=a.fail>0?1:0;return{code:i,findings:e,ok:i===0,summary:a}},he={fail:"FAIL",info:"INFO",pass:"PASS",warn:"WARN"},ge=(t,r)=>{r.info("lunora doctor — project preflight");for(const o of t.findings){const s=`[${he[o.level]}] ${o.message}`;o.level==="fail"?r.error(s):o.level==="warn"?r.warn(s):r.info(s),o.fix!==void 0&&o.level!=="pass"&&r.info(` fix: ${o.fix}`)}const{fail:e,warn:n}=t.summary;e>0?r.error(`${String(e)} failure(s), ${String(n)} warning(s).`):n>0?r.warn(`0 failures, ${String(n)} warning(s).`):r.success("all checks passed.")},ve=async t=>{const{logger:r}=t,e=await me({...t});return ge(e,r),e},je=G(async({cwd:t,format:r,logger:e})=>{const n=await ve({cwd:t,format:r,logger:e});return{code:n.code,data:{findings:n.findings,summary:n.summary}}});export{je as execute,me as runDoctor,ve as runDoctorCommand};
@@ -1,4 +1,4 @@
1
- import{runCodegen as f}from"@lunora/codegen";import{applyLintIgnores as h,detectLintTools as w,inferLunoraBindings as y,resolveSchemaDirectory as $}from"@lunora/config";import{collectWranglerSecretVariables as A,collectExportGaps as S}from"@lunora/config/cloudflare";import{r as T,a as D,e as x}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as k,r as b}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{d as C}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as E}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{r as I}from"../packem_shared/lint-ignore-report-DKZagpqk.mjs";const u=3,L=r=>{const s=r.cwd??process.cwd(),{logger:t}=r,e=T(r),o=b(s,r.target);if(o.target===void 0)return r.logger.error(o.error??"unknown deploy target"),{advisories:[],code:E.USAGE,cronTriggers:[],error:o.error??"unknown deploy target",failedAdvisories:0,outputDirectory:""};const{target:a}=o,i=f({apiSpec:r.apiSpec,projectRoot:s,target:a,wranglerVariables:A(s)}),d={advisories:i.advisories.map(n=>({detail:n.detail,level:n.level,name:n.name,remediation:n.remediation})),cronTriggers:i.cronTriggers,failedAdvisories:0,outputDirectory:i.outputDirectory};if(t.success(`codegen wrote ${i.writtenFiles.join(", ")} to ${i.outputDirectory}`),i.advisories.length>0){const n=i.advisories.length,v=i.advisories.map(c=>` [${c.level}] ${c.name} — ${c.detail}
2
- ↳ ${c.remediation}`);t.warn(`${n.toString()} schema ${n===1?"advisory":"advisories"}:
3
- ${v.join(`
4
- `)}`)}const g=D(i.platformDiagnostics,t);g.errors.length>0&&(d.error=g.errors.join("; "));const{errorAdvisories:l,names:p,shouldBlock:m}=x(d.advisories,e);return m&&t.error(`${l.length.toString()} ERROR-level ${l.length===1?"advisory":"advisories"} (${p.join(", ")}). Codegen wrote its output; this exit code is the gate. Pass --no-strict-advisories to downgrade it to a warning.`),i.cronTriggers.length>u&&t.warn(`${i.cronTriggers.length.toString()} distinct cron expressions declared — Cloudflare allows at most ${u.toString()} Cron Triggers per Worker. Consolidate schedules (jobs can share one expression) or move finer-grained work to Durable Object alarms via @lunora/scheduler (runAfter/runAt).`),{...d,failedAdvisories:e?l.length:0}},R=async(r,s)=>{let t;try{t=S(await y({projectRoot:r,schemaDir:$(r)}))}catch(e){s.warn(`could not check whether declared containers/workflows/agents are re-exported by the worker entry: ${e instanceof Error?e.message:String(e)}. Run \`lunora doctor\` to check explicitly.`);return}for(const e of t)s.warn(`${e.kind} "${e.exportName}" is declared but ${e.className} is not exported by the worker entry — add \`export * from "./lunora/_generated/${e.module}"\` so wrangler can provision its binding. Until then it deploys with nothing to run.`)},G=(r,s)=>{try{I(h(r,w(r)),s)}catch{}},W=C(async({cwd:r,format:s,logger:t,options:e})=>{const o=L({apiSpec:k(e.apiSpec),cwd:r,format:s,logger:t,strictAdvisories:e.strictAdvisories,target:e.target});if(o.outputDirectory!==""){const a=t;G(r,a),await R(r,a)}return{code:o.code??(o.error===void 0&&o.failedAdvisories===0?0:1),data:{advisories:o.advisories,cronTriggers:o.cronTriggers,failedAdvisories:o.failedAdvisories,outputDirectory:o.outputDirectory},error:o.error}});export{W as execute,L as runCodegenCommand};
1
+ import{runCodegen as v}from"@lunora/codegen";import{applyLintIgnores as h,detectLintTools as w,inferLunoraBindings as y,resolveSchemaDirectory as $}from"@lunora/config";import{warnCloudflareCliConfigOnce as A,collectWranglerSecretVariables as S,collectExportGaps as T}from"@lunora/config/cloudflare";import{r as D,a as x,e as C}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as k,r as b}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{d as E}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as I}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{r as L}from"../packem_shared/lint-ignore-report-DKZagpqk.mjs";const u=3,O=r=>{const s=r.cwd??process.cwd(),{logger:i}=r,e=D(r),o=b(s,r.target);if(o.target===void 0)return r.logger.error(o.error??"unknown deploy target"),{advisories:[],code:I.USAGE,cronTriggers:[],error:o.error??"unknown deploy target",failedAdvisories:0,outputDirectory:""};const{target:a}=o,t=v({apiSpec:r.apiSpec,projectRoot:s,target:a,wranglerVariables:S(s)}),l={advisories:t.advisories.map(n=>({detail:n.detail,level:n.level,name:n.name,remediation:n.remediation})),cronTriggers:t.cronTriggers,failedAdvisories:0,outputDirectory:t.outputDirectory};if(i.success(`codegen wrote ${t.writtenFiles.join(", ")} to ${t.outputDirectory}`),t.advisories.length>0){const n=t.advisories.length,f=t.advisories.map(c=>` [${c.level}] ${c.name} — ${c.detail}
2
+ ↳ ${c.remediation}`);i.warn(`${n.toString()} schema ${n===1?"advisory":"advisories"}:
3
+ ${f.join(`
4
+ `)}`)}const g=x(t.platformDiagnostics,i);g.errors.length>0&&(l.error=g.errors.join("; "));const{errorAdvisories:d,names:p,shouldBlock:m}=C(l.advisories,e);return m&&i.error(`${d.length.toString()} ERROR-level ${d.length===1?"advisory":"advisories"} (${p.join(", ")}). Codegen wrote its output; this exit code is the gate. Pass --no-strict-advisories to downgrade it to a warning.`),t.cronTriggers.length>u&&i.warn(`${t.cronTriggers.length.toString()} distinct cron expressions declared — Cloudflare allows at most ${u.toString()} Cron Triggers per Worker. Consolidate schedules (jobs can share one expression) or move finer-grained work to Durable Object alarms via @lunora/scheduler (runAfter/runAt).`),{...l,failedAdvisories:e?d.length:0}},R=async(r,s)=>{let i;try{i=T(await y({projectRoot:r,schemaDir:$(r)}))}catch(e){s.warn(`could not check whether declared containers/workflows/agents are re-exported by the worker entry: ${e instanceof Error?e.message:String(e)}. Run \`lunora doctor\` to check explicitly.`);return}for(const e of i)s.warn(`${e.kind} "${e.exportName}" is declared but ${e.className} is not exported by the worker entry — add \`export * from "./lunora/_generated/${e.module}"\` so wrangler can provision its binding. Until then it deploys with nothing to run.`)},G=(r,s)=>{try{L(h(r,w(r)),s)}catch{}},F=E(async({cwd:r,format:s,logger:i,options:e})=>{const o=O({apiSpec:k(e.apiSpec),cwd:r,format:s,logger:i,strictAdvisories:e.strictAdvisories,target:e.target});if(o.outputDirectory!==""){const a=i;G(r,a),await R(r,a),A(r,t=>{a.warn(t)})}return{code:o.code??(o.error===void 0&&o.failedAdvisories===0?0:1),data:{advisories:o.advisories,cronTriggers:o.cronTriggers,failedAdvisories:o.failedAdvisories,outputDirectory:o.outputDirectory},error:o.error}});export{F as execute,O as runCodegenCommand};
@@ -1,7 +1,7 @@
1
- import{join as z,dirname as J}from"node:path";import{discoverMigrations as X,readServiceBindings as Q,runCodegen as Z}from"@lunora/codegen";import{readLinkedProject as N,execArgsFor as I,detectPackageManager as b,discoverContainerInfo as L,COMPOSED_WORKER_ENTRY as C,writeLinkedProject as ee,discoverSchemaInfo as re,DEV_VARS_FILE as w,parseDevVariableEntries as U,isMintableSecretKey as P,packageNamesFromBindings as te,inferLunoraBindings as F,resolveSchemaDirectory as O,requiredSecrets as ne,generateSecretValue as ae,toolchainExecArgs as E,upsertDevVariableLine as oe,writeDevVariablesFileAtomically as ie,resolveDeployDriver as R,planToolchainInvocation as W,runPostCodegenHook as se}from"@lunora/config";import{findWranglerFile as M,readWranglerJsonc as ce,mergeWranglerEnvironment as le,validateWranglerProject as de,reconcileWranglerBindings as ue,reconcileWranglerCompatibilityDate as ge,reconcileWranglerCrons as me,describePreservedCrons as fe}from"@lunora/config/cloudflare";import{Spinner as he}from"@visulima/spinner";import{r as ve,a as pe,e as ye}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as we,a as ke}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{w as be}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{d as $e}from"../packem_shared/command-CAXl2A1S.mjs";import{r as A}from"../packem_shared/wrangler-name-Dsk5K1f-.mjs";import{EXIT_CODE as h}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{containerBuildTag as Se}from"@lunora/container";import{a as De,i as Ee}from"../packem_shared/docker-DpVxvYpL.mjs";import{defaultSpawner as $}from"../packem_shared/createRecordingSpawner-CYhdPBD5.mjs";import{r as B}from"../packem_shared/resolve-target-C_ZloTvd.mjs";import{p as Re,H as Ae,a as je,r as Ce}from"../packem_shared/health-probe-Bw9JFfIy.mjs";import{existsSync as p,readFileSync as k,writeFileSync as V}from"node:fs";import{join as y}from"@visulima/path";import{Project as Pe}from"ts-morph";import{m as xe,e as Te,i as _e}from"../packem_shared/secret-key-DsMeUoEg.mjs";import{runMigrateDataCommand as Ne}from"../packem_shared/runMigrateGenerateCommand-Ii_WMZEA.mjs";import{c as Ie}from"../packem_shared/tui-prompts-B3YwUhGw.mjs";import{l as Le}from"../packem_shared/wrangler-secrets-Bqi6kLuq.mjs";const Ue=e=>{const{cwd:r,env:a,logger:t,mintedSecretsFile:n}=e;try{const o=N(r),i=o?.workerName??A(r),s=e.url??o?.workerUrl;t.success("deploy complete"),t.info(` worker: ${i??"(see wrangler output above)"}`),a!==void 0&&t.info(` env: ${a}`),s===void 0?t.info(" url: run `lunora link --url <https://your-worker>` to record it"):t.info(` url: ${s}`),n!==void 0&&t.info(` secrets: generated value(s) recorded in ${n}`),e.logsAvailable&&t.info(" logs: lunora logs")}catch{}},Fe=async e=>{if(e.targets.length===0)return{builtTags:[],code:0};if(!(e.railpackAvailable??De)()){const t="deploy blocked: a container uses `image: { build }` (Railpack), but Railpack isn't ready. Install the `railpack` CLI and start a BuildKit instance, e.g. `docker run --rm --privileged -d --name buildkit moby/buildkit` then `export BUILDKIT_HOST=docker-container://buildkit`. Alternatively switch the container's `image` to a Dockerfile path or a pre-built registry reference.";return e.logger.error(t),{builtTags:[],code:1,error:t}}const r=e.spawner??$,a=[];for(const t of e.targets){const n=Se(t.exportName),o={args:["build",t.buildDir,"--name",n],command:"railpack",cwd:e.cwd},i=I(b(e.cwd),"wrangler",["containers","push",n]),s={args:i.args,command:i.command,cwd:e.cwd};e.logger.info(`railpack: building "${t.exportName}" → ${n} from ${t.buildDir}`);const c=await r(o);if(c.code!==0){const l=`railpack build failed for container "${t.exportName}" (${t.buildDir})`;return e.logger.error(l),{builtTags:a,code:c.code,error:l}}e.logger.info(`railpack: pushing ${n} to the Cloudflare Registry`);const d=await r(s);if(d.code!==0){const l=`wrangler containers push failed for "${t.exportName}" (${n})`;return e.logger.error(l),{builtTags:a,code:d.code,error:l}}a.push(n)}return{builtTags:a,code:0}},Oe=e=>{const a=[M(e),z(e,"package.json")].filter(t=>t!==void 0&&p(t)).map(t=>[t,k(t,"utf8")]);return()=>{for(const[t,n]of a)k(t,"utf8")!==n&&V(t,n,"utf8")}},H="<replace-with-d1-create-id>",x=e=>Array.isArray(e)?e.filter(r=>r!=null):void 0,j=(e,r)=>{const a=M(e);if(!a)return;const{parsed:t}=ce(a);if(t===void 0)return;const{error:n,merged:o}=le(t,r),i=n===void 0?o:t,{containers:s,d1_databases:c,vars:d}=i;return{containers:x(s),d1_databases:x(c),vars:typeof d=="object"&&d!==null&&!Array.isArray(d)?d:void 0}},We=/^127(?:\.\d{1,3}){3}$/,Me=e=>{try{const{hostname:r}=new URL(e);return r==="localhost"||We.test(r)||r==="::1"||r==="[::1]"}catch{return!1}},Be=e=>e.startsWith("./")||e.startsWith("../")||e.startsWith("/")||e.includes("Dockerfile"),Ve=(e,r,a,t="deploy",n)=>{const o=(j(e,n)?.containers??[]).filter(s=>typeof s?.image=="string"&&Be(s.image));if(o.length===0||a())return;const i=`${t} blocked: wrangler.jsonc declares ${String(o.length)} container(s) built from a local Dockerfile, but no Docker-compatible engine is available. Start Docker (or Colima), or point the container's \`image\` at a pre-built registry reference. Note: container images must target linux/amd64.`;return r.error(i),i},G=e=>p(y(e,C))?C:void 0,He=(e,r,a="deploy")=>{for(const t of L(e,"lunora").containers){const n=t.schedulingPolicy===void 0?t.image:void 0,i=[...n?.kind==="dockerfile"?[{field:"image",path:n.dockerfilePath}]:[],...Object.entries(t.schedulingPolicy==="durable_object"?t.images??{}:{}).flatMap(([s,c])=>c.kind==="dockerfile"?[{field:`images["${s}"]`,path:c.dockerfilePath}]:[])].find(s=>!p(y(e,s.path)));if(i!==void 0){const s=`${a} blocked: container "${t.exportName}" references a Dockerfile at "${i.path}" that does not exist. Create it or fix the \`${i.field}\` path in lunora/containers.ts.`;return r.error(s),s}if(n?.kind==="build"&&!p(y(e,n.buildDir))){const s=`${a} blocked: container "${t.exportName}" references a Railpack build directory "${n.buildDir}" that does not exist. Create it or fix the \`image.build\` path in lunora/containers.ts.`;return r.error(s),s}}},Ge=(e,r)=>(j(e,r)?.d1_databases??[]).find(a=>a.database_id===H)?.binding,Ke=e=>{if(!e.migrate||e.dryRun||e.preview)return;if(e.migrateUrl===void 0){const a="--migrate requires --migrate-url <https://your-worker> — the deploy target URL is only known after wrangler runs, and this gate runs before it; refusing to default to localhost";return e.logger.error(a),a}if(e.migrateYes!==!0){const a="--migrate runs production data migrations after deploy. Re-run with --migrate-yes to confirm.";return e.logger.error(a),a}const r=e.migrateToken??process.env.LUNORA_ADMIN_TOKEN;if(r===void 0||r===""){const a="admin token required for --migrate — pass --migrate-token or set LUNORA_ADMIN_TOKEN";return e.logger.error(a),a}},qe=(e,r,a="deploy",t)=>{const n=Ge(e,t);if(n===void 0)return;const o=`${a} blocked: the "${n}" D1 binding has a placeholder database_id ("${H}"). Run \`wrangler d1 create <name>\` to create the database, then replace the placeholder in wrangler.jsonc with the real id before deploying.`;return r.error(o),o},Ye=(e,r,a="deploy",t)=>{const n=j(e,t)?.vars;if(!n)return;const o=Object.entries(n).filter(([,s])=>typeof s=="string"&&Me(s)).map(([s])=>s).toSorted((s,c)=>s.localeCompare(c));if(o.length===0)return;const i=`${a} blocked: ${o.join(", ")} in wrangler.jsonc point at localhost. A deployed Worker can't reach a loopback address, so this silently breaks scheduled-job dispatch, reverse cross-shard relations, and auth callbacks. Set each to the deployed worker's public URL (or move it to a secret with \`wrangler secret put\`) before deploying.`;return r.error(i),i},ze=(e,r,a)=>{const t=qe(e,r.logger,a,r.env);if(t!==void 0)return{code:h.USAGE,error:t};const n=Ye(e,r.logger,a,r.env);if(n!==void 0)return{code:h.USAGE,error:n};const o=He(e,r.logger,a);if(o!==void 0)return{code:h.USAGE,error:o};const i=Ve(e,r.logger,r.dockerAvailable??Ee,a,r.env);return i===void 0?void 0:{code:h.MISSING_DEPENDENCY,error:i}},Je=/https?:\/\/[^\s"'<>]+\.workers\.dev[^\s"'<>]*/u,Xe=/https:\/\/[^\s"'<>]+/u,Qe=e=>{if(e===void 0)return;const r=Je.exec(e);return r?r[0]:Xe.exec(e)?.[0]},T=e=>e===void 0?"":` (--env ${e})`,Ze=({cwd:e,env:r,logger:a,now:t,url:n})=>{if(n!==void 0)try{const o=N(e);if(o!==void 0){if(o.workerUrl===n&&o.env===r)return;a.warn(`link: .lunora/project.json records ${o.workerUrl??"(no url)"}${T(o.env)}, but this deploy published ${n}${T(r)}. Keeping the recorded value — run \`lunora link --url ${n}${r===void 0?"":` --env ${r}`}\` to update it.`);return}const i=(t??(()=>new Date().toISOString()))();ee(e,{env:r,linkedAt:i,workerName:A(e),workerUrl:n}),a.success(`link: recorded ${n} in .lunora/project.json (run \`lunora link\` to change)`)}catch{}},er=async(e,r)=>{const a=new Pe({skipAddingFilesFromTsConfig:!0}),t=y(r,"lunora");let n;try{n=X(a,t)}catch(o){const i=o instanceof Error?o.message:String(o);return e.logger.warn(`--migrate: could not discover migrations (${i}); skipping`),0}if(n.length===0)return e.logger.info("--migrate: no data migrations declared in lunora/"),0;e.logger.info(`--migrate: running ${String(n.length)} migration(s) against deployed worker`);for(const o of n){e.logger.info(`--migrate: up "${o.id}" (table "${o.table}")`);const i={cwd:r,fetchImpl:e.fetchImpl,id:o.id,logger:e.logger,prod:!0,subcommand:"up",token:e.migrateToken,url:e.migrateUrl,yes:e.migrateYes===!0},s=await Ne(i);if(s.code!==0)return e.logger.error(`--migrate: migration "${o.id}" failed — see output above`),s.code;e.logger.success(`--migrate: "${o.id}" applied`)}return 0},rr=async(e,r)=>{const{info:a}=re(r,"lunora"),t=a?.vectorMetadata??[];if(t.length===0)return;const n=[];for(const s of t){const c=xe(s.kind);if(c===void 0){e.logger.warn(`vector index "${s.index}" declares metadata "${s.property}", whose column type cannot be filtered on in Vectorize — it is stored with each vector but no filter will match it.`);continue}n.push({index:s.index,property:s.property,type:c})}if(n.length===0)return;const i=(await Te({cwd:r,entries:n,exec:I(b(r),"wrangler",[]),logger:e.logger,spawner:e.spawner??$})).filter(s=>s.status!=="failed").length;i>0&&e.logger.success(`vectorize metadata indexes ready: ${String(i)}/${String(n.length)}`)},_=5,tr=2e3,nr=async(e,r,a)=>{if(e.healthCheck!==!0)return;const t=a??B({cwd:r,env:e.env});if(t===void 0){const o="--health-check: the deploy succeeded, but no URL to probe could be resolved — wrangler's output carried none and this checkout has no link for this environment. Run `lunora link --url <https://your-worker>` and re-deploy, or drop --health-check.";return e.logger.error(o),{error:o,ok:!1,url:""}}const n=await Re({attempts:_,baseUrl:t,delayMs:tr,fetchImpl:e.healthFetch,paths:[Ae,je],sleep:e.healthSleep});return n.error===void 0?(e.logger.success(`health check ok (${n.url})`),{ok:!0,url:n.url}):(e.logger.error(`--health-check: the deploy succeeded, but the new version did not answer after ${String(_)} attempt(s) — ${n.error}`),{error:n.error,ok:!1,url:n.url})},ar=async(e,r,a,t,n,o)=>{await rr(e,r);const i=e.migrate?await er(e,r):0;return i===0&&n?.(),{code:i,descriptor:a,mintedSecretsFile:o,validation:t}},or=async({cwd:e,descriptor:r,mintedSecretsFile:a,options:t,reblessSchemaBaseline:n,stdout:o,validation:i})=>{const s={deployedAt:new Date().toISOString(),dryRun:t.dryRun===!0,env:t.env,preview:t.preview===!0,url:t.dryRun===!0?void 0:Qe(o),workerName:A(e)};if(t.dryRun===!0||t.preview===!0)return t.healthCheck===!0&&t.logger.warn(`--health-check skipped: ${t.dryRun===!0?"a dry run publishes nothing":"a preview version serves no live traffic"}`),{code:0,deployment:s,descriptor:r,mintedSecretsFile:a,validation:i};t.temporary!==!0&&Ze({cwd:e,env:t.env,logger:t.logger,url:s.url});const c=await nr(t,e,s.url);return c?.error!==void 0?{code:h.UNAVAILABLE,deployment:s,descriptor:r,healthCheck:c,mintedSecretsFile:a,validation:i}:{...await ar(t,e,r,i,n,a),deployment:s,healthCheck:c}},ir=(e,r,a)=>{const t=y(e,w);if(!p(t))return;let n;try{n=U(k(t,"utf8")).length}catch{return}if(n===0)return;const o=a.toolchain?.secretPut!==void 0;r.warn(o?`Note: \`lunora deploy\` does not push secrets. ${w} has ${String(n)} key(s); if you changed them, run \`lunora env push --yes\` to update the deployed secrets.`:`Note: ${a.name} deploys read no secrets. ${w} has ${String(n)} key(s) that only the dev server sees; put the values the deployed worker needs in wrangler \`vars\`.`)},sr=async e=>{let r=[];try{r=te(await F({projectRoot:e,schemaDir:O(e)}))}catch{}const a=ne(r).map(n=>n.key);let t=[];try{const n=y(e,w);p(n)&&(t=U(k(n,"utf8")).map(o=>o.key).filter(o=>_e(o)))}catch{}return[...new Set([...a,...t])]},cr=async(e,r,a,t)=>{const{logger:n}=r,o=r.spawner??$,i=b(e),s=r.env===void 0?"":` --env ${r.env}`,c=t.toolchain?.secretPut;if(c===void 0)return n.error(`deploy target "${t.id}" has no secret store; cannot push secrets`),{minted:[],ok:!1};const d=[];for(const l of a){const m=ae(),u=c({environment:r.env,key:l,temporary:r.temporary}),g=E(i,u),f=await o({args:g.args,command:g.command,cwd:e,input:m});if(f.code!==0)return n.error(`failed to push secret ${l} (exit ${String(f.code)}); set it manually with \`wrangler secret put ${l}${s}\`.`),{minted:d,ok:!1};d.push({key:l,value:m}),n.success(`generated + pushed ${l}`)}return{minted:d,ok:!0}},lr=/^[\w-]+$/u,S=[".dev.vars",".dev.vars.*","!.dev.vars.example"],dr=/\r?\n/u,ur=(e,r)=>{const a=y(e,".gitignore");try{const t=p(a)?k(a,"utf8"):"",n=new Set(t.split(dr).map(c=>c.trim())),o=S.filter(c=>!n.has(c));if(o.length===0)return;const i=o.some(c=>!c.startsWith("!"))?[...o.filter(c=>!c.startsWith("!")),...S.filter(c=>c.startsWith("!"))]:o,s=t.length>0&&!t.endsWith(`
1
+ import{join as z,dirname as J}from"node:path";import{discoverMigrations as X,readServiceBindings as Q,runCodegen as Z}from"@lunora/codegen";import{readLinkedProject as I,execArgsFor as L,detectPackageManager as b,discoverContainerInfo as U,COMPOSED_WORKER_ENTRY as P,writeLinkedProject as ee,discoverSchemaInfo as re,DEV_VARS_FILE as w,parseDevVariableEntries as O,isMintableSecretKey as x,packageNamesFromBindings as te,inferLunoraBindings as F,resolveSchemaDirectory as W,requiredSecrets as ne,generateSecretValue as ae,toolchainExecArgs as R,upsertDevVariableLine as oe,writeDevVariablesFileAtomically as ie,resolveDeployDriver as A,planToolchainInvocation as M,runPostCodegenHook as se}from"@lunora/config";import{findWranglerFile as B,readWranglerJsonc as ce,mergeWranglerEnvironment as le,warnCloudflareCliConfigOnce as de,validateWranglerProject as ue,reconcileWranglerBindings as ge,reconcileWranglerCompatibilityDate as me,reconcileWranglerCrons as fe,describePreservedCrons as he}from"@lunora/config/cloudflare";import{Spinner as ve}from"@visulima/spinner";import{r as pe,a as ye,e as we}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as ke,a as be}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{w as $e}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{d as Se}from"../packem_shared/command-CAXl2A1S.mjs";import{r as C}from"../packem_shared/wrangler-name-Dsk5K1f-.mjs";import{EXIT_CODE as h}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{containerBuildTag as De}from"@lunora/container";import{a as Ee,i as Re}from"../packem_shared/docker-DpVxvYpL.mjs";import{defaultSpawner as $}from"../packem_shared/createRecordingSpawner-CYhdPBD5.mjs";import{r as V}from"../packem_shared/resolve-target-C_ZloTvd.mjs";import{p as Ae,H as Ce,a as je,r as Pe}from"../packem_shared/health-probe-Bw9JFfIy.mjs";import{existsSync as p,readFileSync as k,writeFileSync as H}from"node:fs";import{join as y}from"@visulima/path";import{Project as xe}from"ts-morph";import{m as Te,e as _e,i as Ne}from"../packem_shared/secret-key-DsMeUoEg.mjs";import{runMigrateDataCommand as Ie}from"../packem_shared/runMigrateGenerateCommand-Ii_WMZEA.mjs";import{c as Le}from"../packem_shared/tui-prompts-B3YwUhGw.mjs";import{l as Ue}from"../packem_shared/wrangler-secrets-Bqi6kLuq.mjs";const Oe=e=>{const{cwd:r,env:a,logger:t,mintedSecretsFile:n}=e;try{const o=I(r),i=o?.workerName??C(r),s=e.url??o?.workerUrl;t.success("deploy complete"),t.info(` worker: ${i??"(see wrangler output above)"}`),a!==void 0&&t.info(` env: ${a}`),s===void 0?t.info(" url: run `lunora link --url <https://your-worker>` to record it"):t.info(` url: ${s}`),n!==void 0&&t.info(` secrets: generated value(s) recorded in ${n}`),e.logsAvailable&&t.info(" logs: lunora logs")}catch{}},Fe=async e=>{if(e.targets.length===0)return{builtTags:[],code:0};if(!(e.railpackAvailable??Ee)()){const t="deploy blocked: a container uses `image: { build }` (Railpack), but Railpack isn't ready. Install the `railpack` CLI and start a BuildKit instance, e.g. `docker run --rm --privileged -d --name buildkit moby/buildkit` then `export BUILDKIT_HOST=docker-container://buildkit`. Alternatively switch the container's `image` to a Dockerfile path or a pre-built registry reference.";return e.logger.error(t),{builtTags:[],code:1,error:t}}const r=e.spawner??$,a=[];for(const t of e.targets){const n=De(t.exportName),o={args:["build",t.buildDir,"--name",n],command:"railpack",cwd:e.cwd},i=L(b(e.cwd),"wrangler",["containers","push",n]),s={args:i.args,command:i.command,cwd:e.cwd};e.logger.info(`railpack: building "${t.exportName}" → ${n} from ${t.buildDir}`);const c=await r(o);if(c.code!==0){const l=`railpack build failed for container "${t.exportName}" (${t.buildDir})`;return e.logger.error(l),{builtTags:a,code:c.code,error:l}}e.logger.info(`railpack: pushing ${n} to the Cloudflare Registry`);const d=await r(s);if(d.code!==0){const l=`wrangler containers push failed for "${t.exportName}" (${n})`;return e.logger.error(l),{builtTags:a,code:d.code,error:l}}a.push(n)}return{builtTags:a,code:0}},We=e=>{const a=[B(e),z(e,"package.json")].filter(t=>t!==void 0&&p(t)).map(t=>[t,k(t,"utf8")]);return()=>{for(const[t,n]of a)k(t,"utf8")!==n&&H(t,n,"utf8")}},G="<replace-with-d1-create-id>",T=e=>Array.isArray(e)?e.filter(r=>r!=null):void 0,j=(e,r)=>{const a=B(e);if(!a)return;const{parsed:t}=ce(a);if(t===void 0)return;const{error:n,merged:o}=le(t,r),i=n===void 0?o:t,{containers:s,d1_databases:c,vars:d}=i;return{containers:T(s),d1_databases:T(c),vars:typeof d=="object"&&d!==null&&!Array.isArray(d)?d:void 0}},Me=/^127(?:\.\d{1,3}){3}$/,Be=e=>{try{const{hostname:r}=new URL(e);return r==="localhost"||Me.test(r)||r==="::1"||r==="[::1]"}catch{return!1}},Ve=e=>e.startsWith("./")||e.startsWith("../")||e.startsWith("/")||e.includes("Dockerfile"),He=(e,r,a,t="deploy",n)=>{const o=(j(e,n)?.containers??[]).filter(s=>typeof s?.image=="string"&&Ve(s.image));if(o.length===0||a())return;const i=`${t} blocked: wrangler.jsonc declares ${String(o.length)} container(s) built from a local Dockerfile, but no Docker-compatible engine is available. Start Docker (or Colima), or point the container's \`image\` at a pre-built registry reference. Note: container images must target linux/amd64.`;return r.error(i),i},K=e=>p(y(e,P))?P:void 0,Ge=(e,r,a="deploy")=>{for(const t of U(e,"lunora").containers){const n=t.schedulingPolicy===void 0?t.image:void 0,i=[...n?.kind==="dockerfile"?[{field:"image",path:n.dockerfilePath}]:[],...Object.entries(t.schedulingPolicy==="durable_object"?t.images??{}:{}).flatMap(([s,c])=>c.kind==="dockerfile"?[{field:`images["${s}"]`,path:c.dockerfilePath}]:[])].find(s=>!p(y(e,s.path)));if(i!==void 0){const s=`${a} blocked: container "${t.exportName}" references a Dockerfile at "${i.path}" that does not exist. Create it or fix the \`${i.field}\` path in lunora/containers.ts.`;return r.error(s),s}if(n?.kind==="build"&&!p(y(e,n.buildDir))){const s=`${a} blocked: container "${t.exportName}" references a Railpack build directory "${n.buildDir}" that does not exist. Create it or fix the \`image.build\` path in lunora/containers.ts.`;return r.error(s),s}}},Ke=(e,r)=>(j(e,r)?.d1_databases??[]).find(a=>a.database_id===G)?.binding,qe=e=>{if(!e.migrate||e.dryRun||e.preview)return;if(e.migrateUrl===void 0){const a="--migrate requires --migrate-url <https://your-worker> — the deploy target URL is only known after wrangler runs, and this gate runs before it; refusing to default to localhost";return e.logger.error(a),a}if(e.migrateYes!==!0){const a="--migrate runs production data migrations after deploy. Re-run with --migrate-yes to confirm.";return e.logger.error(a),a}const r=e.migrateToken??process.env.LUNORA_ADMIN_TOKEN;if(r===void 0||r===""){const a="admin token required for --migrate — pass --migrate-token or set LUNORA_ADMIN_TOKEN";return e.logger.error(a),a}},Ye=(e,r,a="deploy",t)=>{const n=Ke(e,t);if(n===void 0)return;const o=`${a} blocked: the "${n}" D1 binding has a placeholder database_id ("${G}"). Run \`wrangler d1 create <name>\` to create the database, then replace the placeholder in wrangler.jsonc with the real id before deploying.`;return r.error(o),o},ze=(e,r,a="deploy",t)=>{const n=j(e,t)?.vars;if(!n)return;const o=Object.entries(n).filter(([,s])=>typeof s=="string"&&Be(s)).map(([s])=>s).toSorted((s,c)=>s.localeCompare(c));if(o.length===0)return;const i=`${a} blocked: ${o.join(", ")} in wrangler.jsonc point at localhost. A deployed Worker can't reach a loopback address, so this silently breaks scheduled-job dispatch, reverse cross-shard relations, and auth callbacks. Set each to the deployed worker's public URL (or move it to a secret with \`wrangler secret put\`) before deploying.`;return r.error(i),i},Je=(e,r,a)=>{const t=Ye(e,r.logger,a,r.env);if(t!==void 0)return{code:h.USAGE,error:t};const n=ze(e,r.logger,a,r.env);if(n!==void 0)return{code:h.USAGE,error:n};const o=Ge(e,r.logger,a);if(o!==void 0)return{code:h.USAGE,error:o};const i=He(e,r.logger,r.dockerAvailable??Re,a,r.env);return i===void 0?void 0:{code:h.MISSING_DEPENDENCY,error:i}},Xe=/https?:\/\/[^\s"'<>]+\.workers\.dev[^\s"'<>]*/u,Qe=/https:\/\/[^\s"'<>]+/u,Ze=e=>{if(e===void 0)return;const r=Xe.exec(e);return r?r[0]:Qe.exec(e)?.[0]},_=e=>e===void 0?"":` (--env ${e})`,er=({cwd:e,env:r,logger:a,now:t,url:n})=>{if(n!==void 0)try{const o=I(e);if(o!==void 0){if(o.workerUrl===n&&o.env===r)return;a.warn(`link: .lunora/project.json records ${o.workerUrl??"(no url)"}${_(o.env)}, but this deploy published ${n}${_(r)}. Keeping the recorded value — run \`lunora link --url ${n}${r===void 0?"":` --env ${r}`}\` to update it.`);return}const i=(t??(()=>new Date().toISOString()))();ee(e,{env:r,linkedAt:i,workerName:C(e),workerUrl:n}),a.success(`link: recorded ${n} in .lunora/project.json (run \`lunora link\` to change)`)}catch{}},rr=async(e,r)=>{const a=new xe({skipAddingFilesFromTsConfig:!0}),t=y(r,"lunora");let n;try{n=X(a,t)}catch(o){const i=o instanceof Error?o.message:String(o);return e.logger.warn(`--migrate: could not discover migrations (${i}); skipping`),0}if(n.length===0)return e.logger.info("--migrate: no data migrations declared in lunora/"),0;e.logger.info(`--migrate: running ${String(n.length)} migration(s) against deployed worker`);for(const o of n){e.logger.info(`--migrate: up "${o.id}" (table "${o.table}")`);const i={cwd:r,fetchImpl:e.fetchImpl,id:o.id,logger:e.logger,prod:!0,subcommand:"up",token:e.migrateToken,url:e.migrateUrl,yes:e.migrateYes===!0},s=await Ie(i);if(s.code!==0)return e.logger.error(`--migrate: migration "${o.id}" failed — see output above`),s.code;e.logger.success(`--migrate: "${o.id}" applied`)}return 0},tr=async(e,r)=>{const{info:a}=re(r,"lunora"),t=a?.vectorMetadata??[];if(t.length===0)return;const n=[];for(const s of t){const c=Te(s.kind);if(c===void 0){e.logger.warn(`vector index "${s.index}" declares metadata "${s.property}", whose column type cannot be filtered on in Vectorize — it is stored with each vector but no filter will match it.`);continue}n.push({index:s.index,property:s.property,type:c})}if(n.length===0)return;const i=(await _e({cwd:r,entries:n,exec:L(b(r),"wrangler",[]),logger:e.logger,spawner:e.spawner??$})).filter(s=>s.status!=="failed").length;i>0&&e.logger.success(`vectorize metadata indexes ready: ${String(i)}/${String(n.length)}`)},N=5,nr=2e3,ar=async(e,r,a)=>{if(e.healthCheck!==!0)return;const t=a??V({cwd:r,env:e.env});if(t===void 0){const o="--health-check: the deploy succeeded, but no URL to probe could be resolved — wrangler's output carried none and this checkout has no link for this environment. Run `lunora link --url <https://your-worker>` and re-deploy, or drop --health-check.";return e.logger.error(o),{error:o,ok:!1,url:""}}const n=await Ae({attempts:N,baseUrl:t,delayMs:nr,fetchImpl:e.healthFetch,paths:[Ce,je],sleep:e.healthSleep});return n.error===void 0?(e.logger.success(`health check ok (${n.url})`),{ok:!0,url:n.url}):(e.logger.error(`--health-check: the deploy succeeded, but the new version did not answer after ${String(N)} attempt(s) — ${n.error}`),{error:n.error,ok:!1,url:n.url})},or=async(e,r,a,t,n,o)=>{await tr(e,r);const i=e.migrate?await rr(e,r):0;return i===0&&n?.(),{code:i,descriptor:a,mintedSecretsFile:o,validation:t}},ir=async({cwd:e,descriptor:r,mintedSecretsFile:a,options:t,reblessSchemaBaseline:n,stdout:o,validation:i})=>{const s={deployedAt:new Date().toISOString(),dryRun:t.dryRun===!0,env:t.env,preview:t.preview===!0,url:t.dryRun===!0?void 0:Ze(o),workerName:C(e)};if(t.dryRun===!0||t.preview===!0)return t.healthCheck===!0&&t.logger.warn(`--health-check skipped: ${t.dryRun===!0?"a dry run publishes nothing":"a preview version serves no live traffic"}`),{code:0,deployment:s,descriptor:r,mintedSecretsFile:a,validation:i};t.temporary!==!0&&er({cwd:e,env:t.env,logger:t.logger,url:s.url});const c=await ar(t,e,s.url);return c?.error!==void 0?{code:h.UNAVAILABLE,deployment:s,descriptor:r,healthCheck:c,mintedSecretsFile:a,validation:i}:{...await or(t,e,r,i,n,a),deployment:s,healthCheck:c}},sr=(e,r,a)=>{const t=y(e,w);if(!p(t))return;let n;try{n=O(k(t,"utf8")).length}catch{return}if(n===0)return;const o=a.toolchain?.secretPut!==void 0;r.warn(o?`Note: \`lunora deploy\` does not push secrets. ${w} has ${String(n)} key(s); if you changed them, run \`lunora env push --yes\` to update the deployed secrets.`:`Note: ${a.name} deploys read no secrets. ${w} has ${String(n)} key(s) that only the dev server sees; put the values the deployed worker needs in wrangler \`vars\`.`)},cr=async e=>{let r=[];try{r=te(await F({projectRoot:e,schemaDir:W(e)}))}catch{}const a=ne(r).map(n=>n.key);let t=[];try{const n=y(e,w);p(n)&&(t=O(k(n,"utf8")).map(o=>o.key).filter(o=>Ne(o)))}catch{}return[...new Set([...a,...t])]},lr=async(e,r,a,t)=>{const{logger:n}=r,o=r.spawner??$,i=b(e),s=r.env===void 0?"":` --env ${r.env}`,c=t.toolchain?.secretPut;if(c===void 0)return n.error(`deploy target "${t.id}" has no secret store; cannot push secrets`),{minted:[],ok:!1};const d=[];for(const l of a){const m=ae(),u=c({environment:r.env,key:l,temporary:r.temporary}),g=R(i,u),f=await o({args:g.args,command:g.command,cwd:e,input:m});if(f.code!==0)return n.error(`failed to push secret ${l} (exit ${String(f.code)}); set it manually with \`wrangler secret put ${l}${s}\`.`),{minted:d,ok:!1};d.push({key:l,value:m}),n.success(`generated + pushed ${l}`)}return{minted:d,ok:!0}},dr=/^[\w-]+$/u,D=[".dev.vars",".dev.vars.*","!.dev.vars.example"],ur=/\r?\n/u,gr=(e,r)=>{const a=y(e,".gitignore");try{const t=p(a)?k(a,"utf8"):"",n=new Set(t.split(ur).map(c=>c.trim())),o=D.filter(c=>!n.has(c));if(o.length===0)return;const i=o.some(c=>!c.startsWith("!"))?[...o.filter(c=>!c.startsWith("!")),...D.filter(c=>c.startsWith("!"))]:o,s=t.length>0&&!t.endsWith(`
2
2
  `)?`
3
- `:"";V(a,`${t}${s}
3
+ `:"";H(a,`${t}${s}
4
4
  # Lunora — never commit a minted secret
5
5
  ${i.join(`
6
6
  `)}
7
- `,"utf8"),r.info(`.gitignore: added ${o.join(", ")} so the recorded secret cannot be committed`)}catch(t){r.warn(`could not update .gitignore (${t instanceof Error?t.message:String(t)}) — add \`${S.join("` and `")}\` by hand before committing.`)}},gr=(e,r,a)=>{if(a.length===0)return;const t=a.map(s=>s.key).join(", ");if(r.env!==void 0&&!lr.test(r.env)){r.logger.warn(`${t}: minted and pushed for --env ${r.env}, but "${r.env}" isn't a safe filename fragment — the value could not be recorded. Capture it manually if you need it again.`);return}const n=r.env===void 0?w:`${w}.${r.env}`;ur(e,r.logger);const o=y(e,n);let i=p(o)?k(o,"utf8"):"";for(const s of a)i=oe(i,s.key,s.value);return ie(o,i),r.logger.success(r.env===void 0?`${t}: value(s) recorded in ${n}`:`${t}: value(s) recorded in ${n} (kept separate from ${w} so \`lunora dev\` and a plain \`lunora env push\` don't inherit the --env ${r.env} value)`),n},mr=async(e,r,a,t)=>{if(r.dryRun===!0||r.preview===!0)return{};const{logger:n}=r,o=r.env===void 0?"":` --env ${r.env}`;let i;try{i=await(r.secretLister??Le)({cwd:e,env:r.env,temporary:r.temporary})}catch{return{}}if(!i.ok)return{};const s=new Set(i.names),d=(await sr(e)).filter(u=>!s.has(u));if(d.length===0)return{};if(!a)return{error:`missing required secret(s) on the deploy target: ${d.join(", ")}. Set them with \`wrangler secret put <KEY>${o}\` (or \`lunora env generate --set\` then \`lunora env push --yes${o}\`), then re-deploy.`};for(const u of d.filter(g=>!P(g)))n.warn(`required secret ${u} is not set on the target — set it with: wrangler secret put ${u}${o}`);const l=d.filter(u=>P(u));if(l.length===0)return{};if(await(r.secretConfirm??Ie())(`${String(l.length)} required secret(s) not set on the target (${l.join(", ")}). Generate strong values and push them now?`)){const{minted:u,ok:g}=await cr(e,r,l,t),f=gr(e,r,u);return g?{mintedSecretsFile:f}:{error:"failed to push required secret(s) — set them manually and re-deploy",mintedSecretsFile:f}}return n.warn(`${String(l.length)} required secret(s) not set on the target: ${l.join(", ")}. Generate + push with \`lunora env generate --set\` then \`lunora env push --yes${o}\`.`),{}},K=e=>e.format==="json"?!1:e.interactive!==void 0?e.interactive:process.stdout.isTTY&&!process.env.CI,fr=async(e,r)=>{if(r.dryRun===!0)return;const a=L(e,"lunora").containers.flatMap(n=>n.schedulingPolicy===void 0&&n.image.kind==="build"?[{buildDir:n.image.buildDir,exportName:n.exportName}]:[]);if(a.length===0)return;const t=await Fe({cwd:e,logger:r.logger,railpackAvailable:r.railpackAvailable,spawner:r.spawner,targets:a});return t.code===0?void 0:t.error??"railpack build failed"},hr=(e,r,a)=>{if(a!==void 0)try{const t=me(e,a);t.changed&&r.success(`synced ${String(a.length)} cron trigger(s) → ${t.wranglerPath??"wrangler.jsonc"}`);for(const o of t.warnings)r.warn(o);const n=fe(t.preserved);n!==void 0&&r.info(n)}catch(t){const n=t instanceof Error?t.message:String(t);r.warn(`cron trigger sync skipped: ${n}`)}},vr=async(e,r,a,t,n)=>{try{R(t);const o=await F({projectRoot:e,schemaDir:O(e)}),i=ue(e,o,n),s=i.wranglerPath??"wrangler.jsonc";if(i.added.length>0&&r.success(`provisioned bindings: ${i.added.join(", ")} → ${s}`),i.updated.length>0&&r.success(`updated bindings: ${i.updated.join(", ")} → ${s}`),i.devConfig!==void 0){const{added:c,path:d,updated:l}=i.devConfig;r.success(`dev sidecar bindings: ${[...c,...l].join(", ")} → ${d}`)}for(const c of i.warnings)r.warn(c)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`binding inference skipped: ${i}`)}try{const o=ge(e);o.changed&&r.success(`bumped compatibility_date to ${o.date??"unknown"} (Workers Cache enabled) → ${o.wranglerPath??"wrangler.jsonc"}`)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`compatibility date sync skipped: ${i}`)}hr(e,r,a)},pr=async(e,r,a,t,n,o,i,s)=>{let c;r?(c=new he({name:"dots"}),c.start("running codegen")):a.info("running codegen");try{const d=Z({apiSpec:t,projectRoot:e,target:n});c?.succeed("codegen complete"),c||a.success("codegen complete");const l=pe(d.platformDiagnostics,a);if(l.errors.length>0)return{error:l.errors.join("; ")};const{errorAdvisories:m,names:u,shouldBlock:g}=ye(d.advisories,s);if(g){const v=`${m.length.toString()} ERROR-level ${m.length===1?"advisory":"advisories"} (${u.join(", ")}). Pass --no-strict-advisories to downgrade this to a warning and continue.`;return a.error(v),{error:v}}const f=await se({cwd:e,logger:a,spawner:o,stdoutToStderr:i});return f.error!==void 0?{error:f.error}:{result:d}}catch(d){c?.failed("codegen failed");const l=d instanceof Error?d.message:String(d);return a.error(`codegen failed: ${l}`),{error:`codegen failed: ${l}`}}},yr=(e,r)=>({dryRun:r.dryRun,entry:G(e),environment:r.env,outDir:r.outDir,preview:r.preview,temporary:r.temporary}),q=(e,r,a)=>{const{toolchain:t}=a;if(t===void 0)throw new Error(`deploy target "${a.id}" has no command-line toolchain`);const n=yr(e,r);return W(a,e,"deploy",o=>t.deploy({...n,configPath:o}))},wr=(e,r,a)=>{const t=q(e,r,a),n=G(e);return n!==void 0&&r.logger.info(`class-B composition: deploying ${n} (overrides wrangler main)`),r.temporary&&r.logger.info("temporary account: deploying to a short-lived Cloudflare account (~60min); wrangler will print a claim URL"),r.dryRun&&r.logger.info("dry run: validating + bundling without publishing"),r.outDir!==void 0&&r.logger.info(`build artifact: emitting bundle to ${r.outDir}`),t.commit(),t.projection!==void 0&&t.projection.dropped.length>0&&r.logger.warn(`${a.name} ignores these wrangler keys, so they were left out of ${t.projection.configPath}: ${t.projection.dropped.join(", ")}`),t.command},D=(e,r)=>({code:h.USAGE,descriptor:void 0,error:e,validation:{problems:[],wranglerPath:void 0},...r}),kr=(e,r)=>{for(const a of e.report?.warnings??[])r.warn(`wrangler.jsonc: ${a}`);if(e.problems.length===0)return!1;r.error("wrangler.jsonc validation failed:");for(const a of e.problems)r.error(` - ${a}`);return!0},br=(e,r,a)=>{const t=r.format==="json",n=r.dryRun!==!0,o=wr(e,r,a),i=E(b(e),o);return{args:i.args,captureStdout:n&&!t,captureStdoutSilently:n&&t,command:i.command,cwd:e,stdoutToStderr:t&&!n}},$r=async(e,r)=>{const a=e.cwd??process.cwd(),t=K(e),n=ve(e),o={problems:[],wranglerPath:void 0},i=ke(a,e.target);if(i.target===void 0){const u=i.error??"unknown deploy target";return e.logger.error(u),{error:u,validation:o}}const{target:s}=i;try{q(a,e,R(s))}catch(u){const g=u instanceof Error?u.message:String(u);return e.logger.error(g),{error:g,target:s,validation:o}}let c;if(!e.skipCodegen){const u=await pr(a,t,e.logger,e.apiSpec,s,e.spawner,e.format==="json",n);if(u.error!==void 0)return{error:u.error,target:s,validation:o};c=u.result}let d;if(c!==void 0){const u=Ce({allowDrift:e.allowSchemaDrift===!0,codegen:c,command:r,logger:e.logger,updateBaseline:e.updateSchemaBaseline===!0});if(u.blocked)return{error:`schema drift gate blocked ${r}`,schemaDrift:{blocked:!0,reason:u.reason},target:s,validation:o};d=u.rebless}await vr(a,e.logger,c?.cronTriggers,s,e.env);const l=ze(a,e,r);if(l!==void 0)return{code:l.code,error:l.error,target:s,validation:o};const m=de({environment:e.env,projectRoot:a});return kr(m,e.logger)?{error:"wrangler validation failed",target:s,validation:m}:{codegen:c,reblessSchemaBaseline:d,target:s,validation:m}},Sr=e=>{if(e.skipServices===!0)return"--skip-services";if(e.preview===!0)return"--preview uploads the app version only";if(e.temporary===!0)return"--temporary deploys the app to a throwaway account"},Dr=async(e,r,a,t)=>{const{error:n,services:o}=Q(e);if(n!==void 0)return n;if(o.length===0)return;const{toolchain:i}=a,s=i===void 0?`target "${a.id}" has no deploy command`:Sr(r);if(s!==void 0||i===void 0){const l=o.map(m=>m.worker).join(", ");r.logger.warn(`services not deployed (${s??""}): ${l} — deploy them yourself if the app calls anything new`);return}const c=b(e),d=[...new Map(o.map(l=>[l.wranglerPath,l])).values()];for(const l of d){const m=J(l.wranglerPath);let u;try{u=W(a,m,"deploy",v=>i.deploy({configPath:v??l.wranglerPath,dryRun:r.dryRun===!0,environment:r.env}))}catch(v){return`service ${l.name} (${l.worker}): ${v instanceof Error?v.message:String(v)}`}u.commit();const g=E(c,u.command);r.logger.info(`deploying service ${l.name} (${l.worker}) via ${g.command} ${g.args.join(" ")}`);const f=await t({args:g.args,command:g.command,cwd:m,stdoutToStderr:r.format==="json"});if(f.code!==0)return`service ${l.name} (${l.worker}): ${g.command} ${g.args.join(" ")} exited ${String(f.code)} — stopping before the app`}},Er=async e=>{const r=e.cwd??process.cwd(),a=K(e),t=await $r(e,e.commandName??"deploy");if(t.error!==void 0){if(t.validation.problems.length>0)return{code:h.USAGE,descriptor:void 0,error:t.error,validation:t.validation};const Y=t.schemaDrift===void 0?void 0:{schemaDrift:t.schemaDrift};return D(t.error,{...Y,...t.code===void 0?{}:{code:t.code}})}const{reblessSchemaBaseline:n,validation:o}=t,i=R(t.target),s=Ke(e);if(s!==void 0)return D(s);const c=i.toolchain?.prebuildsContainerImages===!0?await fr(r,e):void 0;if(c!==void 0)return D(c);ir(r,e.logger,i);const{error:d,mintedSecretsFile:l}=await mr(r,e,a,i);if(d!==void 0)return e.logger.error(d),{code:h.USAGE,descriptor:void 0,error:d,mintedSecretsFile:l,validation:o};const m=e.spawner??$,u=await Dr(r,e,i,m);if(u!==void 0)return{code:h.FAILURE,descriptor:void 0,error:u,mintedSecretsFile:l,validation:o};const g=br(r,e,i);e.logger.info(`deploying via ${g.command} ${g.args.join(" ")}`);const f=await m(g);return g.captureStdoutSilently===!0&&f.stdout!==void 0&&f.stdout!==""&&process.stderr.write(f.stdout),f.code!==0?{code:f.code,descriptor:g,mintedSecretsFile:l,validation:o}:{...await or({cwd:r,descriptor:g,mintedSecretsFile:l,options:e,reblessSchemaBaseline:n,stdout:f.stdout,validation:o}),logsAvailable:i.toolchain?.tail!==void 0}},Rr=async e=>{const{logger:r}=e,a=e.dryRun===!0?Oe(e.cwd??process.cwd()):void 0;let t;try{if(t=await Er({...e,logger:r}),t.code===0&&e.emitBindings!==void 0){const{error:n}=be({destination:e.emitBindings,logger:r,projectRoot:e.cwd??process.cwd()});n!==void 0&&(r.error(n),t={...t,code:h.USAGE})}}finally{a?.()}if(e.format==="json")return t;if(t.code===0&&e.dryRun!==!0&&e.preview!==!0)Ue({cwd:e.cwd??process.cwd(),env:e.env,logger:e.logger,logsAvailable:t.logsAvailable===!0,mintedSecretsFile:t.mintedSecretsFile,url:t.deployment?.url});else if(t.code===0&&e.preview===!0){const n=t.deployment?.url;e.logger.success(n===void 0?"preview version uploaded":`preview version uploaded — ${n}`)}return t},Jr=$e(async({cwd:e,format:r,logger:a,options:t})=>{const n=await Rr({allowSchemaDrift:t.allowSchemaDrift===!0,apiSpec:we(t.apiSpec),cwd:e,dryRun:t.dryRun===!0,env:t.env,format:r,healthCheck:t.healthCheck===!0,logger:a,migrate:t.migrate===!0,migrateToken:t.migrateToken,migrateUrl:B({cwd:e,env:t.env,url:t.migrateUrl}),migrateYes:t.migrateYes===!0,preview:t.preview===!0,skipCodegen:t.prebuilt===!0,skipServices:t.skipServices===!0,strictAdvisories:t.strictAdvisories,target:t.target,temporary:t.temporary===!0,updateSchemaBaseline:t.updateSchemaBaseline===!0});return{code:n.code,data:{deployment:n.deployment,healthCheck:n.healthCheck,mintedSecretsFile:n.mintedSecretsFile,schemaDrift:n.schemaDrift,validation:n.validation},error:n.error}});export{Jr as execute,vr as provisionBindings,Rr as runDeployCommand,$r as runPreDeployPipeline};
7
+ `,"utf8"),r.info(`.gitignore: added ${o.join(", ")} so the recorded secret cannot be committed`)}catch(t){r.warn(`could not update .gitignore (${t instanceof Error?t.message:String(t)}) — add \`${D.join("` and `")}\` by hand before committing.`)}},mr=(e,r,a)=>{if(a.length===0)return;const t=a.map(s=>s.key).join(", ");if(r.env!==void 0&&!dr.test(r.env)){r.logger.warn(`${t}: minted and pushed for --env ${r.env}, but "${r.env}" isn't a safe filename fragment — the value could not be recorded. Capture it manually if you need it again.`);return}const n=r.env===void 0?w:`${w}.${r.env}`;gr(e,r.logger);const o=y(e,n);let i=p(o)?k(o,"utf8"):"";for(const s of a)i=oe(i,s.key,s.value);return ie(o,i),r.logger.success(r.env===void 0?`${t}: value(s) recorded in ${n}`:`${t}: value(s) recorded in ${n} (kept separate from ${w} so \`lunora dev\` and a plain \`lunora env push\` don't inherit the --env ${r.env} value)`),n},fr=async(e,r,a,t)=>{if(r.dryRun===!0||r.preview===!0)return{};const{logger:n}=r,o=r.env===void 0?"":` --env ${r.env}`;let i;try{i=await(r.secretLister??Ue)({cwd:e,env:r.env,temporary:r.temporary})}catch{return{}}if(!i.ok)return{};const s=new Set(i.names),d=(await cr(e)).filter(u=>!s.has(u));if(d.length===0)return{};if(!a)return{error:`missing required secret(s) on the deploy target: ${d.join(", ")}. Set them with \`wrangler secret put <KEY>${o}\` (or \`lunora env generate --set\` then \`lunora env push --yes${o}\`), then re-deploy.`};for(const u of d.filter(g=>!x(g)))n.warn(`required secret ${u} is not set on the target — set it with: wrangler secret put ${u}${o}`);const l=d.filter(u=>x(u));if(l.length===0)return{};if(await(r.secretConfirm??Le())(`${String(l.length)} required secret(s) not set on the target (${l.join(", ")}). Generate strong values and push them now?`)){const{minted:u,ok:g}=await lr(e,r,l,t),f=mr(e,r,u);return g?{mintedSecretsFile:f}:{error:"failed to push required secret(s) — set them manually and re-deploy",mintedSecretsFile:f}}return n.warn(`${String(l.length)} required secret(s) not set on the target: ${l.join(", ")}. Generate + push with \`lunora env generate --set\` then \`lunora env push --yes${o}\`.`),{}},q=e=>e.format==="json"?!1:e.interactive!==void 0?e.interactive:process.stdout.isTTY&&!process.env.CI,hr=async(e,r)=>{if(r.dryRun===!0)return;const a=U(e,"lunora").containers.flatMap(n=>n.schedulingPolicy===void 0&&n.image.kind==="build"?[{buildDir:n.image.buildDir,exportName:n.exportName}]:[]);if(a.length===0)return;const t=await Fe({cwd:e,logger:r.logger,railpackAvailable:r.railpackAvailable,spawner:r.spawner,targets:a});return t.code===0?void 0:t.error??"railpack build failed"},vr=(e,r,a)=>{if(a!==void 0)try{const t=fe(e,a);t.changed&&r.success(`synced ${String(a.length)} cron trigger(s) → ${t.wranglerPath??"wrangler.jsonc"}`);for(const o of t.warnings)r.warn(o);const n=he(t.preserved);n!==void 0&&r.info(n)}catch(t){const n=t instanceof Error?t.message:String(t);r.warn(`cron trigger sync skipped: ${n}`)}},pr=async(e,r,a,t,n)=>{try{A(t);const o=await F({projectRoot:e,schemaDir:W(e)}),i=ge(e,o,n),s=i.wranglerPath??"wrangler.jsonc";if(i.added.length>0&&r.success(`provisioned bindings: ${i.added.join(", ")} → ${s}`),i.updated.length>0&&r.success(`updated bindings: ${i.updated.join(", ")} → ${s}`),i.devConfig!==void 0){const{added:c,path:d,updated:l}=i.devConfig;r.success(`dev sidecar bindings: ${[...c,...l].join(", ")} → ${d}`)}for(const c of i.warnings)r.warn(c)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`binding inference skipped: ${i}`)}try{const o=me(e);o.changed&&r.success(`bumped compatibility_date to ${o.date??"unknown"} (Workers Cache enabled) → ${o.wranglerPath??"wrangler.jsonc"}`)}catch(o){const i=o instanceof Error?o.message:String(o);r.warn(`compatibility date sync skipped: ${i}`)}vr(e,r,a)},yr=async(e,r,a,t,n,o,i,s)=>{let c;r?(c=new ve({name:"dots"}),c.start("running codegen")):a.info("running codegen");try{const d=Z({apiSpec:t,projectRoot:e,target:n});c?.succeed("codegen complete"),c||a.success("codegen complete");const l=ye(d.platformDiagnostics,a);if(l.errors.length>0)return{error:l.errors.join("; ")};const{errorAdvisories:m,names:u,shouldBlock:g}=we(d.advisories,s);if(g){const v=`${m.length.toString()} ERROR-level ${m.length===1?"advisory":"advisories"} (${u.join(", ")}). Pass --no-strict-advisories to downgrade this to a warning and continue.`;return a.error(v),{error:v}}const f=await se({cwd:e,logger:a,spawner:o,stdoutToStderr:i});return f.error!==void 0?{error:f.error}:{result:d}}catch(d){c?.failed("codegen failed");const l=d instanceof Error?d.message:String(d);return a.error(`codegen failed: ${l}`),{error:`codegen failed: ${l}`}}},wr=(e,r)=>({dryRun:r.dryRun,entry:K(e),environment:r.env,outDir:r.outDir,preview:r.preview,temporary:r.temporary}),Y=(e,r,a)=>{const{toolchain:t}=a;if(t===void 0)throw new Error(`deploy target "${a.id}" has no command-line toolchain`);const n=wr(e,r);return M(a,e,"deploy",o=>t.deploy({...n,configPath:o}))},kr=(e,r,a)=>{const t=Y(e,r,a),n=K(e);return n!==void 0&&r.logger.info(`class-B composition: deploying ${n} (overrides wrangler main)`),r.temporary&&r.logger.info("temporary account: deploying to a short-lived Cloudflare account (~60min); wrangler will print a claim URL"),r.dryRun&&r.logger.info("dry run: validating + bundling without publishing"),r.outDir!==void 0&&r.logger.info(`build artifact: emitting bundle to ${r.outDir}`),t.commit(),t.projection!==void 0&&t.projection.dropped.length>0&&r.logger.warn(`${a.name} ignores these wrangler keys, so they were left out of ${t.projection.configPath}: ${t.projection.dropped.join(", ")}`),t.command},E=(e,r)=>({code:h.USAGE,descriptor:void 0,error:e,validation:{problems:[],wranglerPath:void 0},...r}),br=(e,r)=>{for(const a of e.report?.warnings??[])r.warn(`wrangler.jsonc: ${a}`);if(e.problems.length===0)return!1;r.error("wrangler.jsonc validation failed:");for(const a of e.problems)r.error(` - ${a}`);return!0},$r=(e,r,a)=>{const t=r.format==="json",n=r.dryRun!==!0,o=kr(e,r,a),i=R(b(e),o);return{args:i.args,captureStdout:n&&!t,captureStdoutSilently:n&&t,command:i.command,cwd:e,stdoutToStderr:t&&!n}},Sr=async(e,r)=>{const a=e.cwd??process.cwd(),t=q(e),n=pe(e),o={problems:[],wranglerPath:void 0},i=be(a,e.target);if(i.target===void 0){const u=i.error??"unknown deploy target";return e.logger.error(u),{error:u,validation:o}}const{target:s}=i;try{Y(a,e,A(s))}catch(u){const g=u instanceof Error?u.message:String(u);return e.logger.error(g),{error:g,target:s,validation:o}}let c;if(!e.skipCodegen){const u=await yr(a,t,e.logger,e.apiSpec,s,e.spawner,e.format==="json",n);if(u.error!==void 0)return{error:u.error,target:s,validation:o};c=u.result}let d;if(c!==void 0){const u=Pe({allowDrift:e.allowSchemaDrift===!0,codegen:c,command:r,logger:e.logger,updateBaseline:e.updateSchemaBaseline===!0});if(u.blocked)return{error:`schema drift gate blocked ${r}`,schemaDrift:{blocked:!0,reason:u.reason},target:s,validation:o};d=u.rebless}await pr(a,e.logger,c?.cronTriggers,s,e.env);const l=Je(a,e,r);if(l!==void 0)return{code:l.code,error:l.error,target:s,validation:o};const m=ue({environment:e.env,projectRoot:a});return br(m,e.logger)?{error:"wrangler validation failed",target:s,validation:m}:{codegen:c,reblessSchemaBaseline:d,target:s,validation:m}},Dr=e=>{if(e.skipServices===!0)return"--skip-services";if(e.preview===!0)return"--preview uploads the app version only";if(e.temporary===!0)return"--temporary deploys the app to a throwaway account"},Er=async(e,r,a,t)=>{const{error:n,services:o}=Q(e);if(n!==void 0)return n;if(o.length===0)return;const{toolchain:i}=a,s=i===void 0?`target "${a.id}" has no deploy command`:Dr(r);if(s!==void 0||i===void 0){const l=o.map(m=>m.worker).join(", ");r.logger.warn(`services not deployed (${s??""}): ${l} — deploy them yourself if the app calls anything new`);return}const c=b(e),d=[...new Map(o.map(l=>[l.wranglerPath,l])).values()];for(const l of d){const m=J(l.wranglerPath);let u;try{u=M(a,m,"deploy",v=>i.deploy({configPath:v??l.wranglerPath,dryRun:r.dryRun===!0,environment:r.env}))}catch(v){return`service ${l.name} (${l.worker}): ${v instanceof Error?v.message:String(v)}`}u.commit();const g=R(c,u.command);r.logger.info(`deploying service ${l.name} (${l.worker}) via ${g.command} ${g.args.join(" ")}`);const f=await t({args:g.args,command:g.command,cwd:m,stdoutToStderr:r.format==="json"});if(f.code!==0)return`service ${l.name} (${l.worker}): ${g.command} ${g.args.join(" ")} exited ${String(f.code)} — stopping before the app`}},Rr=async e=>{const r=e.cwd??process.cwd(),a=q(e),t=await Sr(e,e.commandName??"deploy");if(t.error!==void 0){if(t.validation.problems.length>0)return{code:h.USAGE,descriptor:void 0,error:t.error,validation:t.validation};const S=t.schemaDrift===void 0?void 0:{schemaDrift:t.schemaDrift};return E(t.error,{...S,...t.code===void 0?{}:{code:t.code}})}const{reblessSchemaBaseline:n,validation:o}=t,i=A(t.target),s=qe(e);if(s!==void 0)return E(s);const c=i.toolchain?.prebuildsContainerImages===!0?await hr(r,e):void 0;if(c!==void 0)return E(c);sr(r,e.logger,i),de(r,S=>{e.logger.warn(S)});const{error:d,mintedSecretsFile:l}=await fr(r,e,a,i);if(d!==void 0)return e.logger.error(d),{code:h.USAGE,descriptor:void 0,error:d,mintedSecretsFile:l,validation:o};const m=e.spawner??$,u=await Er(r,e,i,m);if(u!==void 0)return{code:h.FAILURE,descriptor:void 0,error:u,mintedSecretsFile:l,validation:o};const g=$r(r,e,i);e.logger.info(`deploying via ${g.command} ${g.args.join(" ")}`);const f=await m(g);return g.captureStdoutSilently===!0&&f.stdout!==void 0&&f.stdout!==""&&process.stderr.write(f.stdout),f.code!==0?{code:f.code,descriptor:g,mintedSecretsFile:l,validation:o}:{...await ir({cwd:r,descriptor:g,mintedSecretsFile:l,options:e,reblessSchemaBaseline:n,stdout:f.stdout,validation:o}),logsAvailable:i.toolchain?.tail!==void 0}},Ar=async e=>{const{logger:r}=e,a=e.dryRun===!0?We(e.cwd??process.cwd()):void 0;let t;try{if(t=await Rr({...e,logger:r}),t.code===0&&e.emitBindings!==void 0){const{error:n}=$e({destination:e.emitBindings,logger:r,projectRoot:e.cwd??process.cwd()});n!==void 0&&(r.error(n),t={...t,code:h.USAGE})}}finally{a?.()}if(e.format==="json")return t;if(t.code===0&&e.dryRun!==!0&&e.preview!==!0)Oe({cwd:e.cwd??process.cwd(),env:e.env,logger:e.logger,logsAvailable:t.logsAvailable===!0,mintedSecretsFile:t.mintedSecretsFile,url:t.deployment?.url});else if(t.code===0&&e.preview===!0){const n=t.deployment?.url;e.logger.success(n===void 0?"preview version uploaded":`preview version uploaded — ${n}`)}return t},Xr=Se(async({cwd:e,format:r,logger:a,options:t})=>{const n=await Ar({allowSchemaDrift:t.allowSchemaDrift===!0,apiSpec:ke(t.apiSpec),cwd:e,dryRun:t.dryRun===!0,env:t.env,format:r,healthCheck:t.healthCheck===!0,logger:a,migrate:t.migrate===!0,migrateToken:t.migrateToken,migrateUrl:V({cwd:e,env:t.env,url:t.migrateUrl}),migrateYes:t.migrateYes===!0,preview:t.preview===!0,skipCodegen:t.prebuilt===!0,skipServices:t.skipServices===!0,strictAdvisories:t.strictAdvisories,target:t.target,temporary:t.temporary===!0,updateSchemaBaseline:t.updateSchemaBaseline===!0});return{code:n.code,data:{deployment:n.deployment,healthCheck:n.healthCheck,mintedSecretsFile:n.mintedSecretsFile,schemaDrift:n.schemaDrift,validation:n.validation},error:n.error}});export{Xr as execute,pr as provisionBindings,Ar as runDeployCommand,Sr as runPreDeployPipeline};
@@ -1,2 +1,2 @@
1
- import{runCodegen as C}from"@lunora/codegen";import{runPostCodegenHook as H,detectAgentRules as N,updateDevServerState as I,readDevServerState as V,DEV_DAEMON_ENV as M,detectAiAgent as W,readProjectRemotePreference as B,readLiveDevServerState as j,DEV_HANDOFF_ENV as p,clearDevServerState as U,claimDevServerState as G,DEV_LOG_FILE_ENV as X,inferLunoraBindings as Y,resolveSchemaDirectory as J,packageNamesFromBindings as K,ensureDevVarsExample as z,ensureDevVariables as Q,isInteractive as Z,DEV_VARS_FILE as D,DEV_VARS_EXAMPLE_FILE as q,fillDevSecrets as ee,DEV_BINDINGS_FILE as re,DEV_STATE_FILE as F,claimAgentRulesHint as te,AGENT_RULES_HINT as ne}from"@lunora/config";import{resolveRemoteEnabled as oe}from"@lunora/config/cloudflare";import{p as ae,a as ie}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{w as se}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{existsSync as ce,watch as de}from"node:fs";import{join as le}from"node:path";import{a as ue}from"../packem_shared/codegen-error-AmH54ofi.mjs";import{a as fe}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{d as ge}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as E}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{forceJsonLogging as ve}from"../packem_shared/createLogger-Cl18I8AX.mjs";import{createServer as me,request as we}from"node:http";import{connect as he}from"node:net";import{pipeline as Se}from"node:stream";import{loadStudioAssets as T,studioAssetsStamp as A,renderStudioHtml as ye,resolveAdminToken as pe,requestPathname as _,transportRejectionReason as P,SCHEMA_EDIT_ENDPOINT as Ee,POLICY_SCAFFOLD_ENDPOINT as be,SEED_ENDPOINT as ke,sendStudioDocument as De,serveJsonHandler as Te,isStandaloneModulePath as Ae,readStandaloneAsset as _e,assetContentType as Pe,handleSchemaEditRequest as Re,handlePolicyScaffoldRequest as Oe,handleSeedRequest as $e,applyStudioAssetCache as Le}from"@lunora/config/studio-host";import{c as Ce}from"../packem_shared/tui-prompts-B3YwUhGw.mjs";import{setTimeout as Ne}from"node:timers/promises";import{r as Ie,d as Me,P as je,a as Fe,b,c as xe,s as He,n as x,e as Ve,f as We,g as Be,h as R,w as Ue,i as Ge,j as Xe,t as Ye,k as Je,l as Ke,m as ze}from"../packem_shared/plan-Cqn2uvTo.mjs";import{provisionBindings as Qe}from"./runDeployCommand.mjs";const Ze=100,qe=300,er=/[/\\]/u,rr=(e,r,t)=>{const{apiSpec:n,logger:a,projectRoot:i,target:u}=e;try{const o=C({apiSpec:n,lunoraDirectory:r,projectRoot:i,target:u});a.success(`codegen: wrote ${r}/_generated (${t})`),fe(o.platformDiagnostics,a)}catch(o){return a.error(ue(o,t)),!1}return!0},tr=e=>{const r=e.lunoraDirectory??"lunora",t=le(e.projectRoot,r),n=e.debounceMs??Ze;let a=!1,i=!1,u=!1,o,d=0,g=Promise.resolve(),h;const S=new Promise(f=>{h=f}),v=f=>{a||(o=f,!i&&(i=!0,g=(async()=>{try{for(;o!==void 0;){const w=o;if(o=void 0,!!rr(e,r,w)){u=!0;try{(await H({cwd:e.projectRoot,logger:e.logger,spawner:e.spawner,stdoutToStderr:e.jsonLogs})).ran&&(d=Date.now())}finally{u=!1}}}}catch(w){e.logger.error(`codegen watch: ${w instanceof Error?w.message:String(w)}`)}finally{i=!1,h()}})()))};v("startup");const c=f=>(e.logger.warn(`codegen watch unavailable (${f}) — schema edits will NOT auto-regenerate. Run \`lunora codegen\` manually after each edit.`),{close:()=>(a=!0,o=void 0,g),ready:S,watchAvailable:!1});let s,l;if(!ce(t))return c(`no such directory: ${t}`);try{l=de(t,{recursive:!0},(f,w)=>{if(!(typeof w=="string"&&w.split(er).includes("_generated"))){if(u||Date.now()-d<qe){s&&(clearTimeout(s),s=void 0);return}s&&clearTimeout(s),s=setTimeout(()=>{v(`change: ${w??"?"}`)},n)}})}catch(f){return c(f instanceof Error?f.message:String(f))}const m=l;return{close:()=>(a=!0,o=void 0,s&&clearTimeout(s),m.close(),g),ready:S,watchAvailable:!0}},O="/_lunora",$=3e4,L=(e,r,t)=>{const n=we({headers:{...e.headers,host:t.host},hostname:t.hostname,method:e.method,path:e.url,port:t.port},a=>{r.writeHead(a.statusCode??502,a.headers),Se(a,r,()=>{})});n.setTimeout($,()=>{n.destroy(new Error(`no response within ${String($)}ms`))}),n.on("error",a=>{if(r.headersSent){r.destroy();return}r.statusCode=a.message.startsWith("no response within")?504:502,r.end(`lunora dev: worker unreachable (${a.message})`)}),r.on("close",()=>{r.writableFinished||n.destroy()}),e.pipe(n)},nr=5e3,or=(e,r,t,n)=>{const a=he({host:n.hostname,port:Number(n.port)},()=>{a.setTimeout(0);const i=[`${e.method??"GET"} ${e.url??"/"} HTTP/1.1`];for(const[u,o]of Object.entries(e.headers))if(u!=="host")for(const d of Array.isArray(o)?o:[o])d!==void 0&&i.push(`${u}: ${d}`);i.push(`host: ${n.host}`,"",""),a.write(i.join(`\r
2
- `)),t.length>0&&a.write(t),a.pipe(r),r.pipe(a)});a.setTimeout(nr,()=>a.destroy()),a.on("error",()=>r.destroy()),r.on("error",()=>a.destroy())},ar=async e=>{const r=e.host??"127.0.0.1",t=r==="127.0.0.1"||r==="localhost"||r==="::1",n=new URL(e.workerOrigin);let a=T(e.logger,import.meta.url),i=A(import.meta.url);const u=ye({adminToken:t?pe(e.cwd):void 0,basePath:"/",dataEditable:t,rulesInstalled:N(e.cwd).installed,runAsIdentity:t,schemaEditable:t,scriptSrc:"/studio.js",styleHref:"/styles.css"}),o=(c,s,l,m,f)=>{Le(c,s,f,i)||(s.statusCode=200,s.setHeader("Content-Type",m),s.end(l))},d=(c,s,l)=>{c.statusCode=s,c.setHeader("Content-Type","text/plain"),c.end(l)},g=(c,s,l,m)=>{if(t){Te(c,s,l,e.cwd,{apiSpec:e.apiSpec});return}d(s,403,m)},h=(c,s,l)=>{const m=c==="/styles.css",f=Ae(c);if(!m&&!f)return!1;const w=A(import.meta.url);if(w!==i&&(a=T(e.logger,import.meta.url),i=w),a===void 0)return d(l,501,"Lunora studio assets not found — install and build @lunora/studio."),!0;if(m)return o(s,l,a.styles,"text/css; charset=utf-8","styles.css"),!0;const y=c.slice(c.lastIndexOf("/")+1),k=_e(y,import.meta.url);return k===void 0?(d(l,404,"Not found"),!0):(o(s,l,k,Pe(y),y),!0)},S=Buffer.from(u),v=me((c,s)=>{const l=_(c.url??"/");if(t){const f=P(c,e.logger);if(f!==void 0){d(s,403,f);return}}if(l.startsWith(O)){if(!t){d(s,403,"Lunora studio: the worker admin proxy is only available on a loopback bind.");return}L(c,s,n);return}if(l===Ee){g(c,s,Re,"Lunora schema editing is only available on loopback hosts in dev.");return}if(l===be){g(c,s,Oe,"Lunora policy scaffolding is only available on loopback hosts in dev.");return}if(l===ke){g(c,s,$e,"Lunora data seeding is only available on loopback hosts in dev.");return}if(h(l,c,s))return;const m=c.headers["sec-fetch-mode"];if(t&&typeof m=="string"&&m!=="navigate"){L(c,s,n);return}De(s,S)});return v.on("upgrade",(c,s,l)=>{if(!t||P(c,e.logger)!==void 0){s.destroy();return}_(c.url??"").startsWith(O)?or(c,s,l,n):s.destroy()}),await new Promise((c,s)=>{v.once("error",l=>{l.code==="EADDRINUSE"?s(new Error(`studio port ${String(e.port)} is already in use — pass a different port with --port, or stop the process using it`,{cause:l})):s(l)}),v.listen(e.port,r,()=>{c()})}),{close:()=>new Promise(c=>{v.close(()=>{c()})}),url:`http://${r==="0.0.0.0"||r==="::"?"localhost":r}:${String(e.port)}`}},ir=async e=>{const{cwd:r,logger:t,origin:n,signal:a}=e,i=e.probe??Me,u=Ie(e.readyTimeoutMs),o=Date.now()+u,d=()=>a.aborted;for(;!d()&&Date.now()<o;){let g=!1;try{g=await i(n,a)}catch{}if(d()||Date.now()>=o)break;if(g)return I(r,{readyAt:new Date().toISOString()},{expectedPid:process.pid}),V(r)?.readyAt!==void 0;try{await Ne(je,void 0,{signal:a})}catch{}}return d()||t.warn(`server did not answer on ${n} within ${String(Math.round(u/1e3))}s — .lunora/dev.json will have no readyAt, so anything polling for readiness will keep waiting. The server itself is unaffected; raise LUNORA_DEV_READY_TIMEOUT_MS if it is just slow to boot.`),!1},sr=(e,r,t,n)=>{e.info(""),e.success("Lunora dev"),e.info(` ➜ Worker: ${r.workerOrigin}`),t!==void 0&&e.info(` ➜ Studio: ${t}`),r.runsCodegenWatch&&e.info(" ➜ Codegen: watching lunora/"),n!==void 0&&e.info(` ➜ Supervisor: ${n} (needs) · ${F} (status)`),r.remote.enabled&&(r.remote.bindings.length>0?e.info(` ➜ Remote: ${r.remote.bindings.join(", ")} → deployed worker`):e.warn(` ➜ Remote: requested but inactive (${r.remote.reason??"no eligible bindings"}) — running fully local`)),e.info("")},cr=(e,r)=>{N(r).installed||!te()||(e.info(` ⓘ ${ne}`),e.info(""))},dr=async(e,r)=>{try{const n=await Y({projectRoot:r,schemaDir:J(r)}),a=K(n),i=(e.ensureExample??z)(r,a);i.length>0&&e.logger.info(`Updated .dev.vars.example with secrets for: ${a.join(", ")} (${i.join(", ")})`)}catch{}(await(e.ensureEnv??Q)({confirm:Ce(),cwd:r,info:n=>{e.logger.info(n)}})).status==="declined"&&!Z()&&e.logger.info(`hint: ${D} was not scaffolded (non-interactive run). Copy ${q} → ${D} and fill in secrets, or run \`lunora dev\` in an interactive terminal to scaffold automatically.`);try{(e.fillSecrets??ee)({cwd:r,info:n=>{e.logger.info(n)}})}catch{}},lr=(e,r,t,n,a)=>{if(e.flavor!=="wrangler")return;n!==void 0&&I(r,{studioUrl:n});let i;try{i=ze(r,t)}catch{}return sr(t,e,n,a),i},ur=(e,r)=>{const t=Number(process.env[p]),n=G(r,{background:process.env[M]==="1",logFile:process.env[X],mode:"cli",pid:process.pid,startedAt:new Date().toISOString(),url:e.workerOrigin},Number.isInteger(t)&&t>0?{supersedePid:t}:void 0);return n.ok?void 0:n.existing},fr=e=>{const{cwd:r,destination:t,logger:n,plan:a}=e,i=t!==void 0,u=t??re,o=se({destination:u,dev:{...a.flavor==="wrangler"?{origin:a.workerOrigin}:{},statusFile:F},logger:i?n:{...n,success:()=>{},warn:()=>{}},projectRoot:r});return o.error!==void 0?i?o:(n.debug?.(`skipped the default binding manifest: ${o.error}`),{}):{written:u}},gr=async(e,r,t,n)=>{if(r.studioEnabled)try{return await(e.startStudio??ar)({apiSpec:e.apiSpec,cwd:t,logger:{warnOnce:a=>{n.warn(a)}},port:r.studioPort,workerOrigin:r.workerOrigin})}catch(a){n.warn(`studio server failed to start (${a instanceof Error?a.message:String(a)}) — continuing without it`);return}},vr=e=>{const r=[e.runsCodegenWatch?"codegen watch":void 0,e.studioEnabled?"studio":void 0].filter(n=>n!==void 0);return`--no-worker: not starting wrangler. ${r.length>0?`${r.join(" + ")} running`:"nothing else to run"}; your task runner owns the worker on ${e.workerOrigin}.`},mr=(e,r,t,n,a)=>{if(!(e.sidecar===void 0||!Je(r)))try{C({apiSpec:r.apiSpec,lunoraDirectory:"lunora",projectRoot:t,target:a})}catch(i){n.warn(`codegen (pre-sidecar) failed: ${i instanceof Error?i.message:String(i)} — the framework dev server will retry`)}},wr=e=>e.flavor==="vite"?"starting vite dev (worker + studio + codegen run inside Vite via @lunora/vite)":`starting ${e.wrangler.tag} dev + studio`,hr=async(e,r,t,n,a)=>{try{return e.celldSession===!0?await Ke({logger:a,port:e.workerPort,projectRoot:n,start:r.startCelldSession}):t(e.wrangler,a)}catch(i){a.error(`could not start the worker: ${i instanceof Error?i.message:String(i)}`);return}},Sr=async e=>{const{logger:r}=e,t=e.cwd??process.cwd(),n=e.flavor??Ve(t),a=ie(t,e.target);if(a.target===void 0)throw new Error(a.error??"unknown deploy target");const{target:i}=a,u=We(i,n,r);u==="wrangler"&&await Qe(t,r,void 0,i,void 0);const o=await Be({...e,flavor:u,target:i}),d={remoteCleanup:o.remote.cleanup,serviceConfigCleanup:o.serviceConfigCleanup};try{const g=Number(process.env[p]),h=j(t);if(h!==void 0&&h.pid!==process.pid&&h.pid!==g)return b(r,h),{code:0,plan:o};const S=ur(o,t);if(S!==void 0)return b(r,S),{code:0,plan:o};(o.flavor==="vite"||o.flavor==="framework-worker")&&(o.wrangler.env={...o.wrangler.env,[p]:String(process.pid)}),await dr(e,t),r.info(wr(o)),o.ipv4LoopbackForced&&r.info("no IPv6 loopback (::1) on this host — binding the worker to 127.0.0.1 (--ip) so wrangler dev doesn't crash. Pin `dev.ip` in wrangler.jsonc to override."),o.runsCodegenWatch&&(d.codegen=(e.startCodegen??tr)({apiSpec:e.apiSpec,jsonLogs:e.jsonLogs,logger:r,projectRoot:t,target:i})),d.studio=await gr(e,o,t,r);const v=fr({cwd:t,destination:e.emitBindings,logger:r,plan:o});if(v.error!==void 0)return r.error(v.error),{code:E.USAGE,plan:o};await d.codegen?.ready;const c=d.studio?.url;o.frameworkHint!==void 0&&r.warn(o.frameworkHint);const s=()=>{o.flavor==="wrangler"&&(d.readyProbe=new AbortController,ir({cwd:t,logger:r,origin:o.workerOrigin,probe:e.probeReady,signal:d.readyProbe.signal}))};if(!o.workerEnabled)return s(),r.info(vr(o)),d.tunnel=R({cwd:t,logger:r,plan:o,tunnel:e.tunnel}),{code:await(e.waitForInterrupt??Ue)(r),plan:o};mr(o,e,t,r,i);const l=e.startWorker??Ge,m=await hr(o,e,l,t,r);if(m===void 0)return{code:E.FAILURE,plan:o};const f=o.sidecar===void 0?void 0:l(o.sidecar,r);return s(),d.containerLogs=lr(o,t,r,c,v.written),d.tunnel=R({cwd:t,logger:r,plan:o,tunnel:e.tunnel}),cr(r,t),{code:await Xe(m,f,r),plan:o}}finally{d.readyProbe?.abort(),U(t,process.pid),await Ye(d)}},yr=e=>({codegen:e.codegen===!1?!1:void 0,studio:e.studio===!1?!1:void 0,worker:e.worker===!1?!1:void 0}),pr=e=>{if(e.local===!0&&e.remote===!0)return"`--local` and `--remote` are mutually exclusive — pass at most one.";const{entries:r,invalid:t}=x(e.allowMail);if(t.length>0)return`\`--allow-mail\` takes email addresses or '*@domain' — not ${t.map(n=>`"${n}"`).join(", ")}.`;if(r.length>0&&e.tunnel!==!0)return"`--allow-mail` only applies to a tunnel — add `--tunnel`."},Er=e=>e.tunnel===!0?{allowMail:x(e.allowMail).entries}:void 0,Wr=ge(async({argument:e,cwd:r,logger:t,options:n})=>{const a=n.json===!0,i=Fe({cwd:r,json:a,lines:n.lines,logger:t,subcommand:e[0]});if(i!==void 0)return i;const u=process.env[M]==="1",o=u?void 0:W(),d=a||o!==void 0;d&&ve(),o!==void 0&&n.background!==!0&&t.info(`AI agent detected (${o.name} via ${o.variable}) — starting the dev server in background mode with JSON logs. Set LUNORA_AGENT_MODE=0 to opt out.`);const g=pr(n);if(g!==void 0)return t.error(`dev: ${g}`),{code:E.USAGE};const h=Er(n),S=n.local===!0?!1:oe({configPreference:B(r),envValue:process.env.LUNORA_REMOTE,flag:n.remote});if(!u&&(n.background===!0||o!==void 0)){const v=j(r);return v!==void 0?(b(t,v),{code:0}):(h?.allowMail.length===0&&xe(t),He({cwd:r,jsonLogs:d,logger:t,options:n,remote:S}))}return Sr({apiSpec:ae(n.apiSpec),cwd:r,emitBindings:n.emitBindings,inspectorPort:n.inspectorPort,jsonLogs:d,local:n.local,logger:t,port:n.port,remote:S,target:n.target,tunnel:h,workerPort:n.workerPort,...yr(n)})});export{pr as devFlagConflict,Wr as execute,yr as negatableDevFlags,Sr as runDevCommand};
1
+ import{runCodegen as L}from"@lunora/codegen";import{runPostCodegenHook as H,detectAgentRules as N,updateDevServerState as I,readDevServerState as V,DEV_DAEMON_ENV as M,detectAiAgent as W,readProjectRemotePreference as B,readLiveDevServerState as j,DEV_HANDOFF_ENV as p,clearDevServerState as U,claimDevServerState as G,DEV_LOG_FILE_ENV as X,inferLunoraBindings as Y,resolveSchemaDirectory as J,packageNamesFromBindings as K,ensureDevVarsExample as z,ensureDevVariables as Q,isInteractive as Z,DEV_VARS_FILE as D,DEV_VARS_EXAMPLE_FILE as q,fillDevSecrets as ee,DEV_BINDINGS_FILE as re,DEV_STATE_FILE as F,claimAgentRulesHint as te,AGENT_RULES_HINT as ne}from"@lunora/config";import{resolveRemoteEnabled as oe}from"@lunora/config/cloudflare";import{p as ae,a as ie}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{w as se}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{existsSync as ce,watch as de}from"node:fs";import{join as le}from"node:path";import{a as ue}from"../packem_shared/codegen-error-AmH54ofi.mjs";import{a as fe}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{d as ge}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as E}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{forceJsonLogging as ve}from"../packem_shared/createLogger-Cl18I8AX.mjs";import{createServer as me,request as we}from"node:http";import{connect as he}from"node:net";import{pipeline as Se}from"node:stream";import{loadStudioAssets as T,studioAssetsStamp as A,renderStudioHtml as ye,resolveAdminToken as pe,requestPathname as _,transportRejectionReason as P,SCHEMA_EDIT_ENDPOINT as Ee,POLICY_SCAFFOLD_ENDPOINT as be,SEED_ENDPOINT as ke,sendStudioDocument as De,serveJsonHandler as Te,isStandaloneModulePath as Ae,readStandaloneAsset as _e,assetContentType as Pe,handleSchemaEditRequest as Re,handlePolicyScaffoldRequest as Oe,handleSeedRequest as $e,applyStudioAssetCache as Ce}from"@lunora/config/studio-host";import{c as Le}from"../packem_shared/tui-prompts-B3YwUhGw.mjs";import{setTimeout as Ne}from"node:timers/promises";import{r as Ie,d as Me,P as je,a as Fe,b,c as xe,s as He,n as x,e as Ve,f as We,g as Be,h as Ue,i as R,w as Ge,j as Xe,k as Ye,t as Je,l as Ke,m as ze,o as Qe}from"../packem_shared/plan-TuKFsXOj.mjs";import{provisionBindings as Ze}from"./runDeployCommand.mjs";const qe=100,er=300,rr=/[/\\]/u,tr=(e,r,t)=>{const{apiSpec:n,logger:a,projectRoot:i,target:u}=e;try{const o=L({apiSpec:n,lunoraDirectory:r,projectRoot:i,target:u});a.success(`codegen: wrote ${r}/_generated (${t})`),fe(o.platformDiagnostics,a)}catch(o){return a.error(ue(o,t)),!1}return!0},nr=e=>{const r=e.lunoraDirectory??"lunora",t=le(e.projectRoot,r),n=e.debounceMs??qe;let a=!1,i=!1,u=!1,o,d=0,g=Promise.resolve(),h;const S=new Promise(f=>{h=f}),v=f=>{a||(o=f,!i&&(i=!0,g=(async()=>{try{for(;o!==void 0;){const w=o;if(o=void 0,!!tr(e,r,w)){u=!0;try{(await H({cwd:e.projectRoot,logger:e.logger,spawner:e.spawner,stdoutToStderr:e.jsonLogs})).ran&&(d=Date.now())}finally{u=!1}}}}catch(w){e.logger.error(`codegen watch: ${w instanceof Error?w.message:String(w)}`)}finally{i=!1,h()}})()))};v("startup");const c=f=>(e.logger.warn(`codegen watch unavailable (${f}) — schema edits will NOT auto-regenerate. Run \`lunora codegen\` manually after each edit.`),{close:()=>(a=!0,o=void 0,g),ready:S,watchAvailable:!1});let s,l;if(!ce(t))return c(`no such directory: ${t}`);try{l=de(t,{recursive:!0},(f,w)=>{if(!(typeof w=="string"&&w.split(rr).includes("_generated"))){if(u||Date.now()-d<er){s&&(clearTimeout(s),s=void 0);return}s&&clearTimeout(s),s=setTimeout(()=>{v(`change: ${w??"?"}`)},n)}})}catch(f){return c(f instanceof Error?f.message:String(f))}const m=l;return{close:()=>(a=!0,o=void 0,s&&clearTimeout(s),m.close(),g),ready:S,watchAvailable:!0}},O="/_lunora",$=3e4,C=(e,r,t)=>{const n=we({headers:{...e.headers,host:t.host},hostname:t.hostname,method:e.method,path:e.url,port:t.port},a=>{r.writeHead(a.statusCode??502,a.headers),Se(a,r,()=>{})});n.setTimeout($,()=>{n.destroy(new Error(`no response within ${String($)}ms`))}),n.on("error",a=>{if(r.headersSent){r.destroy();return}r.statusCode=a.message.startsWith("no response within")?504:502,r.end(`lunora dev: worker unreachable (${a.message})`)}),r.on("close",()=>{r.writableFinished||n.destroy()}),e.pipe(n)},or=5e3,ar=(e,r,t,n)=>{const a=he({host:n.hostname,port:Number(n.port)},()=>{a.setTimeout(0);const i=[`${e.method??"GET"} ${e.url??"/"} HTTP/1.1`];for(const[u,o]of Object.entries(e.headers))if(u!=="host")for(const d of Array.isArray(o)?o:[o])d!==void 0&&i.push(`${u}: ${d}`);i.push(`host: ${n.host}`,"",""),a.write(i.join(`\r
2
+ `)),t.length>0&&a.write(t),a.pipe(r),r.pipe(a)});a.setTimeout(or,()=>a.destroy()),a.on("error",()=>r.destroy()),r.on("error",()=>a.destroy())},ir=async e=>{const r=e.host??"127.0.0.1",t=r==="127.0.0.1"||r==="localhost"||r==="::1",n=new URL(e.workerOrigin);let a=T(e.logger,import.meta.url),i=A(import.meta.url);const u=ye({adminToken:t?pe(e.cwd):void 0,basePath:"/",dataEditable:t,rulesInstalled:N(e.cwd).installed,runAsIdentity:t,schemaEditable:t,scriptSrc:"/studio.js",styleHref:"/styles.css"}),o=(c,s,l,m,f)=>{Ce(c,s,f,i)||(s.statusCode=200,s.setHeader("Content-Type",m),s.end(l))},d=(c,s,l)=>{c.statusCode=s,c.setHeader("Content-Type","text/plain"),c.end(l)},g=(c,s,l,m)=>{if(t){Te(c,s,l,e.cwd,{apiSpec:e.apiSpec});return}d(s,403,m)},h=(c,s,l)=>{const m=c==="/styles.css",f=Ae(c);if(!m&&!f)return!1;const w=A(import.meta.url);if(w!==i&&(a=T(e.logger,import.meta.url),i=w),a===void 0)return d(l,501,"Lunora studio assets not found — install and build @lunora/studio."),!0;if(m)return o(s,l,a.styles,"text/css; charset=utf-8","styles.css"),!0;const y=c.slice(c.lastIndexOf("/")+1),k=_e(y,import.meta.url);return k===void 0?(d(l,404,"Not found"),!0):(o(s,l,k,Pe(y),y),!0)},S=Buffer.from(u),v=me((c,s)=>{const l=_(c.url??"/");if(t){const f=P(c,e.logger);if(f!==void 0){d(s,403,f);return}}if(l.startsWith(O)){if(!t){d(s,403,"Lunora studio: the worker admin proxy is only available on a loopback bind.");return}C(c,s,n);return}if(l===Ee){g(c,s,Re,"Lunora schema editing is only available on loopback hosts in dev.");return}if(l===be){g(c,s,Oe,"Lunora policy scaffolding is only available on loopback hosts in dev.");return}if(l===ke){g(c,s,$e,"Lunora data seeding is only available on loopback hosts in dev.");return}if(h(l,c,s))return;const m=c.headers["sec-fetch-mode"];if(t&&typeof m=="string"&&m!=="navigate"){C(c,s,n);return}De(s,S)});return v.on("upgrade",(c,s,l)=>{if(!t||P(c,e.logger)!==void 0){s.destroy();return}_(c.url??"").startsWith(O)?ar(c,s,l,n):s.destroy()}),await new Promise((c,s)=>{v.once("error",l=>{l.code==="EADDRINUSE"?s(new Error(`studio port ${String(e.port)} is already in use — pass a different port with --port, or stop the process using it`,{cause:l})):s(l)}),v.listen(e.port,r,()=>{c()})}),{close:()=>new Promise(c=>{v.close(()=>{c()})}),url:`http://${r==="0.0.0.0"||r==="::"?"localhost":r}:${String(e.port)}`}},sr=async e=>{const{cwd:r,logger:t,origin:n,signal:a}=e,i=e.probe??Me,u=Ie(e.readyTimeoutMs),o=Date.now()+u,d=()=>a.aborted;for(;!d()&&Date.now()<o;){let g=!1;try{g=await i(n,a)}catch{}if(d()||Date.now()>=o)break;if(g)return I(r,{readyAt:new Date().toISOString()},{expectedPid:process.pid}),V(r)?.readyAt!==void 0;try{await Ne(je,void 0,{signal:a})}catch{}}return d()||t.warn(`server did not answer on ${n} within ${String(Math.round(u/1e3))}s — .lunora/dev.json will have no readyAt, so anything polling for readiness will keep waiting. The server itself is unaffected; raise LUNORA_DEV_READY_TIMEOUT_MS if it is just slow to boot.`),!1},cr=(e,r,t,n)=>{e.info(""),e.success("Lunora dev"),e.info(` ➜ Worker: ${r.workerOrigin}`),t!==void 0&&e.info(` ➜ Studio: ${t}`),r.runsCodegenWatch&&e.info(" ➜ Codegen: watching lunora/"),n!==void 0&&e.info(` ➜ Supervisor: ${n} (needs) · ${F} (status)`),r.remote.enabled&&(r.remote.bindings.length>0?e.info(` ➜ Remote: ${r.remote.bindings.join(", ")} → deployed worker`):e.warn(` ➜ Remote: requested but inactive (${r.remote.reason??"no eligible bindings"}) — running fully local`)),e.info("")},dr=(e,r)=>{N(r).installed||!te()||(e.info(` ⓘ ${ne}`),e.info(""))},lr=async(e,r)=>{try{const n=await Y({projectRoot:r,schemaDir:J(r)}),a=K(n),i=(e.ensureExample??z)(r,a);i.length>0&&e.logger.info(`Updated .dev.vars.example with secrets for: ${a.join(", ")} (${i.join(", ")})`)}catch{}(await(e.ensureEnv??Q)({confirm:Le(),cwd:r,info:n=>{e.logger.info(n)}})).status==="declined"&&!Z()&&e.logger.info(`hint: ${D} was not scaffolded (non-interactive run). Copy ${q} → ${D} and fill in secrets, or run \`lunora dev\` in an interactive terminal to scaffold automatically.`);try{(e.fillSecrets??ee)({cwd:r,info:n=>{e.logger.info(n)}})}catch{}},ur=(e,r,t,n,a)=>{if(e.flavor!=="wrangler")return;n!==void 0&&I(r,{studioUrl:n});let i;try{i=Qe(r,t)}catch{}return cr(t,e,n,a),i},fr=(e,r)=>{const t=Number(process.env[p]),n=G(r,{background:process.env[M]==="1",logFile:process.env[X],mode:"cli",pid:process.pid,startedAt:new Date().toISOString(),url:e.workerOrigin},Number.isInteger(t)&&t>0?{supersedePid:t}:void 0);return n.ok?void 0:n.existing},gr=e=>{const{cwd:r,destination:t,logger:n,plan:a}=e,i=t!==void 0,u=t??re,o=se({destination:u,dev:{...a.flavor==="wrangler"?{origin:a.workerOrigin}:{},statusFile:F},logger:i?n:{...n,success:()=>{},warn:()=>{}},projectRoot:r});return o.error!==void 0?i?o:(n.debug?.(`skipped the default binding manifest: ${o.error}`),{}):{written:u}},vr=async(e,r,t,n)=>{if(r.studioEnabled)try{return await(e.startStudio??ir)({apiSpec:e.apiSpec,cwd:t,logger:{warnOnce:a=>{n.warn(a)}},port:r.studioPort,workerOrigin:r.workerOrigin})}catch(a){n.warn(`studio server failed to start (${a instanceof Error?a.message:String(a)}) — continuing without it`);return}},mr=e=>{const r=[e.runsCodegenWatch?"codegen watch":void 0,e.studioEnabled?"studio":void 0].filter(n=>n!==void 0);return`--no-worker: not starting wrangler. ${r.length>0?`${r.join(" + ")} running`:"nothing else to run"}; your task runner owns the worker on ${e.workerOrigin}.`},wr=(e,r,t,n,a)=>{if(!(e.sidecar===void 0||!Ke(r)))try{L({apiSpec:r.apiSpec,lunoraDirectory:"lunora",projectRoot:t,target:a})}catch(i){n.warn(`codegen (pre-sidecar) failed: ${i instanceof Error?i.message:String(i)} — the framework dev server will retry`)}},hr=e=>e.flavor==="vite"?"starting vite dev (worker + studio + codegen run inside Vite via @lunora/vite)":`starting ${e.wrangler.tag} dev + studio`,Sr=async(e,r,t,n,a)=>{try{return e.celldSession===!0?await ze({logger:a,port:e.workerPort,projectRoot:n,start:r.startCelldSession}):t(e.wrangler,a)}catch(i){a.error(`could not start the worker: ${i instanceof Error?i.message:String(i)}`);return}},yr=async e=>{const{logger:r}=e,t=e.cwd??process.cwd(),n=e.flavor??Ve(t),a=ie(t,e.target);if(a.target===void 0)throw new Error(a.error??"unknown deploy target");const{target:i}=a,u=We(i,n,r);u==="wrangler"&&await Ze(t,r,void 0,i,void 0);const o=await Be({...e,flavor:u,target:i}),d={remoteCleanup:o.remote.cleanup,serviceConfigCleanup:o.serviceConfigCleanup};try{const g=Number(process.env[p]),h=j(t);if(h!==void 0&&h.pid!==process.pid&&h.pid!==g)return b(r,h),{code:0,plan:o};const S=fr(o,t);if(S!==void 0)return b(r,S),{code:0,plan:o};(o.flavor==="vite"||o.flavor==="framework-worker")&&(o.wrangler.env={...o.wrangler.env,[p]:String(process.pid)}),await lr(e,t),r.info(hr(o)),Ue(r,t),o.ipv4LoopbackForced&&r.info("no IPv6 loopback (::1) on this host — binding the worker to 127.0.0.1 (--ip) so wrangler dev doesn't crash. Pin `dev.ip` in wrangler.jsonc to override."),o.runsCodegenWatch&&(d.codegen=(e.startCodegen??nr)({apiSpec:e.apiSpec,jsonLogs:e.jsonLogs,logger:r,projectRoot:t,target:i})),d.studio=await vr(e,o,t,r);const v=gr({cwd:t,destination:e.emitBindings,logger:r,plan:o});if(v.error!==void 0)return r.error(v.error),{code:E.USAGE,plan:o};await d.codegen?.ready;const c=d.studio?.url;o.frameworkHint!==void 0&&r.warn(o.frameworkHint);const s=()=>{o.flavor==="wrangler"&&(d.readyProbe=new AbortController,sr({cwd:t,logger:r,origin:o.workerOrigin,probe:e.probeReady,signal:d.readyProbe.signal}))};if(!o.workerEnabled)return s(),r.info(mr(o)),d.tunnel=R({cwd:t,logger:r,plan:o,tunnel:e.tunnel}),{code:await(e.waitForInterrupt??Ge)(r),plan:o};wr(o,e,t,r,i);const l=e.startWorker??Xe,m=await Sr(o,e,l,t,r);if(m===void 0)return{code:E.FAILURE,plan:o};const f=o.sidecar===void 0?void 0:l(o.sidecar,r);return s(),d.containerLogs=ur(o,t,r,c,v.written),d.tunnel=R({cwd:t,logger:r,plan:o,tunnel:e.tunnel}),dr(r,t),{code:await Ye(m,f,r),plan:o}}finally{d.readyProbe?.abort(),U(t,process.pid),await Je(d)}},pr=e=>({codegen:e.codegen===!1?!1:void 0,studio:e.studio===!1?!1:void 0,worker:e.worker===!1?!1:void 0}),Er=e=>{if(e.local===!0&&e.remote===!0)return"`--local` and `--remote` are mutually exclusive — pass at most one.";const{entries:r,invalid:t}=x(e.allowMail);if(t.length>0)return`\`--allow-mail\` takes email addresses or '*@domain' — not ${t.map(n=>`"${n}"`).join(", ")}.`;if(r.length>0&&e.tunnel!==!0)return"`--allow-mail` only applies to a tunnel — add `--tunnel`."},br=e=>e.tunnel===!0?{allowMail:x(e.allowMail).entries}:void 0,Br=ge(async({argument:e,cwd:r,logger:t,options:n})=>{const a=n.json===!0,i=Fe({cwd:r,json:a,lines:n.lines,logger:t,subcommand:e[0]});if(i!==void 0)return i;const u=process.env[M]==="1",o=u?void 0:W(),d=a||o!==void 0;d&&ve(),o!==void 0&&n.background!==!0&&t.info(`AI agent detected (${o.name} via ${o.variable}) — starting the dev server in background mode with JSON logs. Set LUNORA_AGENT_MODE=0 to opt out.`);const g=Er(n);if(g!==void 0)return t.error(`dev: ${g}`),{code:E.USAGE};const h=br(n),S=n.local===!0?!1:oe({configPreference:B(r),envValue:process.env.LUNORA_REMOTE,flag:n.remote});if(!u&&(n.background===!0||o!==void 0)){const v=j(r);return v!==void 0?(b(t,v),{code:0}):(h?.allowMail.length===0&&xe(t),He({cwd:r,jsonLogs:d,logger:t,options:n,remote:S}))}return yr({apiSpec:ae(n.apiSpec),cwd:r,emitBindings:n.emitBindings,inspectorPort:n.inspectorPort,jsonLogs:d,local:n.local,logger:t,port:n.port,remote:S,target:n.target,tunnel:h,workerPort:n.workerPort,...pr(n)})});export{Er as devFlagConflict,Br as execute,pr as negatableDevFlags,yr as runDevCommand};
@@ -0,0 +1,5 @@
1
+ import{existsSync as q,readFileSync as N,mkdirSync as Le,openSync as X,closeSync as Q,statSync as Te,readSync as Pe}from"node:fs";import{join as L,dirname as be}from"node:path";import{readServiceBindings as _e}from"@lunora/codegen";import{readLiveDevServerState as O,discoverContainerInfo as Re,streamContainerLogs as $e,formatLunoraEvent as Ce,updateDevServerState as _,targetRunsOwnDevServer as D,resolveProjectTarget as Z,claimDevServerState as Ne,DEV_HANDOFF_ENV as Oe,clearDevServerState as y,readDevServerState as A,isDevServerReady as V,detectFramework as ee,readProjectDependencyNames as De,DEV_LOG_FILE_ENV as Ae,DEV_DAEMON_ENV as xe,detectPackageManager as x,execArgsFor as re,isRecordedProcessCurrent as Me,DEV_LOG_FILE as Ue,CODEGEN_ENV as te,isCodegenDisabled as Ge,planToolchainInvocation as Fe,toolchainExecArgs as ne,startCelldDevSession as je,resolveDeployDriver as oe,DEV_VARS_FILE as se,runScriptCommand as Ve,parseDevVariableEntries as We}from"@lunora/config";import{warnCloudflareCliConfigOnce as Be,findWranglerFile as T,readWranglerJsonc as M,materializeRemoteWranglerConfig as Ke,materializeServiceDevConfigs as He}from"@lunora/config/cloudflare";import{createServer as ze}from"node:net";import{networkInterfaces as Ye}from"node:os";import{spawn as ie,spawnSync as P}from"node:child_process";import{setTimeout as w}from"node:timers/promises";import{EXIT_CODE as ae}from"./EXIT_CODE-D_XCixv8.mjs";import{a as h}from"./output-format-B4eQHi5y.mjs";import{spawnShellCompat as ce,defaultSpawner as Je}from"./createRecordingSpawner-CYhdPBD5.mjs";import{isLunoraError as qe}from"@lunora/errors";import{s as W}from"./index-oHZBGBwB.mjs";import{createInterface as Xe}from"node:readline";const Qe=12e4,R=250,Ze=1e3,er="LUNORA_DEV_READY_TIMEOUT_MS",rr=e=>{if(e!==void 0)return e;const r=Number(process.env[er]??"");return Number.isFinite(r)&&r>0?r:Qe},tr=async(e,r)=>{try{const n=AbortSignal.timeout(Ze);return await(await fetch(new URL("/_lunora/status",e),{redirect:"manual",signal:r===void 0?n:AbortSignal.any([r,n])})).body?.cancel(),!0}catch{return!1}},le=async(e,r,n)=>{const t=Date.now()+n.timeoutMs;for(;n.signal?.aborted!==!0;){const o=r(O(e));if(o!==void 0)return o;if(Date.now()>=t)return;try{await w(n.intervalMs??500,void 0,{signal:n.signal})}catch{return}}},B=(e,r)=>{Xe({crlfDelay:Number.POSITIVE_INFINITY,input:e}).on("line",r)},nr=5e3,de=(e,r,n,t)=>{if(e.length===0)return;const o=Ce(e);if(o){t[o.level](`[lunora] ${o.text}`);return}const s=`[${r}] ${e}`;n==="stderr"?t.warn(s):t.info(s)},or=(e,r,n=process.platform,t=P)=>{try{if(r==="SIGKILL"&&n==="win32"&&e.pid!==void 0){t("taskkill",["/pid",String(e.pid),"/T","/F"],{stdio:"ignore"});return}e.kill(r)}catch{}},ue=(e,r,n)=>{const t=e.direct===!0?{args:[...e.args],command:e.command,shell:!1}:ce(e.command,e.args),o=ie(t.command,t.args,{cwd:e.cwd??process.cwd(),env:e.env?{...process.env,...e.env}:process.env,shell:t.shell,stdio:[e.direct===!0?"ignore":"inherit","pipe","pipe"]});return B(o.stdout,s=>{r(s,"stdout")}),B(o.stderr,s=>{r(s,"stderr")}),{exited:new Promise(s=>{o.on("error",i=>{n?.(i),s(1)}),o.on("exit",(i,a)=>{s(i??(a?1:0))})}),kill:s=>{or(o,s)}}},vt=(e,r)=>ue(e,(n,t)=>{de(n.trimEnd(),e.tag,t,r)},n=>{r.error(`[${e.tag}] failed to start: ${n.message}`)}),gt=(e,r)=>{if(process.env.LUNORA_CONTAINER_LOGS==="0")return;const t=Re(e,"lunora").containers.map(o=>({className:o.className,exportName:o.exportName}));if(t.length!==0)return $e({containers:t,onLine:o=>{const s=`[container:${o.name}] ${o.text}`;o.level==="error"?r.warn(s):r.info(s)},onUnavailable:o=>{r.warn(`[container] Docker engine unreachable — container logs unavailable (${o})`)}})},pt=async e=>{e.readyProbe?.abort(),await e.tunnel?.close(),await e.codegen?.close().catch(()=>{}),e.containerLogs?.close(),await e.studio?.close().catch(()=>{});try{e.remoteCleanup?.(),e.serviceConfigCleanup?.()}catch{}},mt=async e=>await new Promise(r=>{const n={},t=i=>{e.info(`received ${i} — shutting down`),n.sigint&&process.off("SIGINT",n.sigint),n.sigterm&&process.off("SIGTERM",n.sigterm),r(0)},o=()=>{t("SIGINT")},s=()=>{t("SIGTERM")};n.sigint=o,n.sigterm=s,process.on("SIGINT",o),process.on("SIGTERM",s)}),wt=async(e,r,n)=>{let t=0,o;const s=l=>{e.kill(l),r?.kill(l)},i=()=>{t+=1,t===1?(n.info("received SIGINT — shutting down (press Ctrl-C again to force-kill)"),s("SIGTERM"),o=setTimeout(()=>{s("SIGKILL")},nr),o.unref()):s("SIGKILL")},a=()=>{s("SIGTERM")};process.on("SIGINT",i),process.on("SIGTERM",a);const c=await Promise.race([e.exited.then(l=>({code:l,who:"worker"})),...r===void 0?[]:[r.exited.then(l=>({code:l,who:"sidecar"}))]]);return r!==void 0&&(c.who==="sidecar"?(n.warn("[worker] the Lunora sidecar (wrangler dev) exited — shutting down the framework dev server"),e.kill("SIGTERM")):r.kill("SIGTERM"),await Promise.allSettled([e.exited,r.exited])),o&&clearTimeout(o),process.off("SIGINT",i),process.off("SIGTERM",a),c.code},E="2026.9.3",sr="https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/downloads/",ir=/version (\S+)/u,K=/https:\/\/[\da-z-]+\.trycloudflare\.com/u,ar="1s",cr=5e3,H=async(e,r)=>await Promise.race([e.then(()=>!0),w(r,!1,{ref:!1})]),lr=6e4,dr='Vite answers 403 for hosts it does not know — add `server: { allowedHosts: [".trycloudflare.com"] }` to vite.config if the URL is blocked.',ur=async e=>{const r=`Install or update it: ${sr} (macOS: \`brew install cloudflared\`).`;let n;try{const o=await e({args:["--version"],captureStdoutSilently:!0,command:"cloudflared"});if(o.code!==0)return{message:`\`cloudflared --version\` exited ${String(o.code)}. ${r}`,ok:!1};n=o.stdout??""}catch(o){return qe(o)&&o.code==="LOCAL_DEPENDENCY_MISSING"?{message:`--tunnel needs \`cloudflared\` ${E} or newer, and it is not on your PATH. ${r}`,ok:!1}:{message:`\`cloudflared --version\` could not run: ${o instanceof Error?o.message:String(o)}. ${r}`,ok:!1}}const t=W.coerce(ir.exec(n)?.[1])?.version;return t===void 0?{ok:!0,version:void 0}:W.gte(t,E)?{ok:!0,version:t}:{message:`--tunnel needs \`cloudflared\` ${E} or newer (protected quick tunnels); found ${t}. ${r}`,ok:!1}},fr=e=>{const r=[],n=[];for(const t of e??[]){const o=t.split(",").map(s=>s.trim()).filter(s=>s.length>0);o.length>0&&(n.push(...o.filter(s=>!s.includes("@"))),r.push(o.join(",")))}return{entries:r,invalid:n}},vr=(e,r)=>["tunnel","--url",e,"--output","json","--grace-period",ar,...r.flatMap(n=>["--allowed-mail",n])],gr=e=>{let r;try{r=JSON.parse(e)}catch{r=void 0}if(typeof r=="object"&&r!==null){const n=r,t=typeof n.message=="string"?n.message:"";return{level:typeof n.level=="string"?n.level:void 0,text:t,url:K.exec(t)?.[0]}}return{level:void 0,text:e,url:K.exec(e)?.[0]}},pr=e=>{e.warn(" ⚠ PUBLIC TUNNEL: anyone with the tunnel URL can reach this dev server — there is no sign-in in front of it."),e.warn(" Protect it with a one-time-PIN email allow-list: lunora dev --tunnel --allow-mail you@example.com"),e.warn(" (repeat --allow-mail, pass a comma-separated list, or allow a whole domain with '*@example.com')")},mr=async(e,r,n,{intervalMs:t,timeoutMs:o=lr}={})=>{const s=await le(e,i=>i?.mode==="vite"?{origin:i.url,ownerPid:i.pid}:void 0,{intervalMs:t,signal:n,timeoutMs:o});return s===void 0&&!n.aborted&&r.warn(`--tunnel: the Vite dev server did not report its URL within ${String(o/1e3)}s — continuing without a tunnel.`),s},wr=e=>{const{allowMail:r,cwd:n,logger:t}=e,o=r.length===0,s=new AbortController,{signal:i}=s,a=()=>i.aborted,c=e.closeTimeoutMs??cr;let l;const d=()=>{s.abort()};process.once("SIGINT",d),process.once("SIGTERM",d);const v=(async()=>{const u=await ur(e.spawner??Je);if(!u.ok){t.error(u.message),t.warn("continuing without a tunnel.");return}u.version===void 0&&t.warn(`could not read the cloudflared version — --tunnel needs ${E} or newer; trying anyway.`);const g=e.origin.kind==="fixed"?{origin:e.origin.origin,ownerPid:process.pid}:await mr(n,t,i);if(g===void 0||i.aborted)return;o&&pr(t),t.info(`starting a Cloudflare quick tunnel to ${g.origin}${o?"":" (email one-time-PIN protected)"}…`);let S;const G={failedToStart:!1},ye=k=>{if(k.length===0)return;const p=gr(k);if(p.url!==void 0&&S===void 0){S=p.url,t.success(` ➜ Tunnel: ${p.url}${o?" (PUBLIC)":""}`),o||t.info(` Allowed: ${r.join(", ")} — visitors confirm with a one-time PIN; a session lasts up to 4 hours`),e.origin.kind==="vite"&&t.info(` ${dr}`),_(n,{tunnelUrl:p.url},{expectedPid:g.ownerPid});return}p.level==="error"||p.level==="fatal"?t.warn(`[cloudflared] ${p.text}`):t.debug?.(`[cloudflared] ${p.text}`)},b=(e.startChild??ue)({args:vr(g.origin,r),command:"cloudflared",direct:!0},ye,k=>{G.failedToStart=!0,t.error(`could not start cloudflared (${k.message}) — continuing without a tunnel.`)});l=b;const F=()=>{b.kill("SIGTERM")};i.addEventListener("abort",F,{once:!0});const j=await b.exited;i.removeEventListener("abort",F),l=void 0,S!==void 0&&_(n,{tunnelUrl:void 0},{expectedPid:g.ownerPid}),!(a()||G.failedToStart)&&t.warn(S===void 0?`cloudflared exited (${String(j)}) before a tunnel URL was assigned — continuing without a tunnel.`:`cloudflared exited (${String(j)}) — the tunnel is closed; the dev server keeps running.`)})().catch(u=>{t.error(`--tunnel failed (${u instanceof Error?u.message:String(u)}) — continuing without a tunnel.`)});return{close:async()=>{if(process.off("SIGINT",d),process.off("SIGTERM",d),s.abort(),await H(v,c))return;const u=l;u!==void 0&&(t.warn(`cloudflared did not exit within ${String(c/1e3)}s of SIGTERM — force-killing it.`),u.kill("SIGKILL"),!await H(u.exited,c)&&t.error(`could not confirm that cloudflared stopped — ${o?"the PUBLIC tunnel":"the tunnel"} may still be reachable. Stop the \`cloudflared\` process manually.`))}}},ht=e=>{const{cwd:r,logger:n,plan:t,tunnel:o}=e;if(o!==void 0)return wr({allowMail:o.allowMail,cwd:r,logger:n,origin:t.flavor==="wrangler"?{kind:"fixed",origin:t.workerOrigin}:{kind:"vite"},spawner:o.spawner,startChild:o.startChild})},hr=(e,r)=>{const n=["dev"];if(e.apiSpec!==void 0&&n.push("--api-spec",e.apiSpec),e.port!==void 0&&n.push("--port",String(e.port)),e.workerPort!==void 0&&n.push("--worker-port",String(e.workerPort)),e.inspectorPort!==void 0&&n.push("--inspector-port",String(e.inspectorPort)),e.emitBindings!==void 0&&n.push("--emit-bindings",e.emitBindings),e.codegen===!1&&n.push("--no-codegen"),e.studio===!1&&n.push("--no-studio"),e.worker===!1&&n.push("--no-worker"),e.target!==void 0&&n.push("--target",e.target),e.tunnel===!0){n.push("--tunnel");for(const t of fr(e.allowMail).entries)n.push("--allow-mail",t)}return r&&n.push("--remote"),e.local===!0&&n.push("--local"),n},Sr=1e4,kr=100,Ir=40,I=256*1024,Er=new Set(["nuxt","sveltekit"]),yr=["@lunora/rspack","@lunora/vite"],U=e=>{if(Er.has(ee(e).framework))return"framework-worker";const r=De(e);return yr.some(n=>r.has(n))?"vite":"wrangler"},fe=e=>{const r=x(e);let n;try{const t=N(L(e,"package.json"),"utf8");n=JSON.parse(t).scripts?.dev}catch{}if(n===void 0||n.trim()===""||n.includes("lunora")){const t=re(r,"vite",["dev"]);return{args:t.args,command:t.command}}return{args:["run","dev"],command:r}},Lr=e=>{Le(be(e.logPath),{recursive:!0});const r=X(e.logPath,"w",384);let n;const t=ce(e.command,e.args);try{n=ie(t.command,t.args,{cwd:e.cwd,detached:!0,env:e.env,shell:t.shell,stdio:["ignore",r,r],windowsHide:!0})}finally{Q(r)}return n.unref(),{exited:new Promise(o=>{n.on("error",()=>{o(1)}),n.on("exit",(s,i)=>{o(s??(i?1:0))})}),pid:n.pid}},Tr=e=>{try{const{size:r}=Te(e);if(r<=I)return N(e,"utf8");const n=X(e,"r");try{const t=Buffer.alloc(I),o=Pe(n,t,0,I,r-I),s=t.toString("utf8",0,o);return s.slice(s.indexOf(`
2
+ `)+1)}finally{Q(n)}}catch{return}},ve=(e,r)=>{const n=Tr(e);if(n===void 0)return[];const t=n.split(`
3
+ `);return t.at(-1)===""&&t.pop(),r>0?t.slice(-r):t},ge=(e,r)=>r?.logFile??L(e,Ue),pe=e=>{e.info(" Stop: lunora dev stop"),e.info(" Status: lunora dev status"),e.info(" Logs: lunora dev logs")},Pr=(e,r)=>{Be(r,n=>{e.warn(n)})},br=(e,r)=>{e.warn(`Dev server already running at ${r.url} (pid ${String(r.pid)})`),pe(e)},_r=(e,r)=>{e.success(`Dev server running at ${r.url} (pid ${String(r.pid)})`),r.studioUrl!==void 0&&e.info(` Studio: ${r.studioUrl}`),r.tunnelUrl!==void 0&&e.info(` Tunnel: ${r.tunnelUrl}`),pe(e)},Rr=3e4,$r=async(e,r,n,t)=>{const o=await le(e,s=>s?.tunnelUrl,{intervalMs:n,timeoutMs:t});o===void 0?r.warn(" Tunnel: no URL yet — `lunora dev status` shows it once cloudflared reports one; `lunora dev logs` says why if it does not."):r.success(` Tunnel: ${o}`)},Cr=async e=>{const{child:r,cwd:n,deadline:t,pollIntervalMs:o,probe:s}=e,i=r.exited.then(a=>({exitCode:a}));for(;Date.now()<t;){const a=O(n);if(a!==void 0&&a.pid!==process.pid&&await s(a.url))return{state:a,status:"ready"};const c=await Promise.race([i,w(o)]);if(c!==void 0)return{...c,status:"exited"}}return{status:"timeout"}},Nr=async e=>{const{cwd:r,logger:n}=e,t=ge(r,void 0),o=rr(e.readyTimeoutMs),s=(e.spawnDetached??Lr)({args:e.command.args,command:e.command.command,cwd:r,env:{...process.env,...e.env,[xe]:"1",[Ae]:t,...process.env.FORCE_COLOR===void 0?{NO_COLOR:"1"}:{},...e.json?{LUNORA_LOG_JSON:"1"}:{}},logPath:t}),i=await Cr({child:s,cwd:r,deadline:Date.now()+o,pollIntervalMs:e.pollIntervalMs??R,probe:e.probe??tr});if(i.status==="ready")return _r(n,i.state),e.tunnel===!0&&i.state.tunnelUrl===void 0&&await $r(r,n,e.pollIntervalMs??R,e.tunnelUrlTimeoutMs??Rr),{code:0};if(i.status==="exited"){n.error(`dev server exited before becoming ready (exit code ${String(i.exitCode)}). Last output:`);for(const c of ve(t,Ir))n.error(` ${c}`);return y(r,s.pid??process.pid),{code:i.exitCode===0?1:i.exitCode}}s.pid!==void 0&&A(r)?.pid===process.pid&&_(r,{logFile:t,pid:s.pid});const a=s.pid===void 0?"":` (pid ${String(s.pid)})`;return n.warn(`dev server did not confirm ready within ${String(Math.round(o/1e3))}s — it may still be compiling${a}. Check \`lunora dev status\` and \`lunora dev logs\`; \`lunora dev stop\` shuts it down.`),{code:ae.UNAVAILABLE}},me=e=>e.codegen!==!1&&!Ge(process.env[te]),we=e=>{const r={...e.remote===!0?{LUNORA_REMOTE:"1"}:{},...e.codegen===!1?{[te]:"0"}:{}};return Object.keys(r).length>0?{env:r}:{}},St=async e=>{const{cwd:r,jsonLogs:n,logger:t,options:o,remote:s}=e,i=e.run??Nr,a=U(r),c=a==="vite"&&D(o.target??Z(r))?"wrangler":a,l=c==="wrangler"?`http://localhost:${String(o.workerPort??8787)}`:"http://localhost:5173",d=Ne(r,{background:!0,mode:"cli",pid:process.pid,startedAt:new Date().toISOString(),url:l});if(!d.ok)return d.existing!==void 0&&br(t,d.existing),{code:0};const f={[Oe]:String(process.pid)};Pr(t,r);try{return c==="vite"&&o.tunnel!==!0?await i({command:fe(r),cwd:r,env:{...we({...o,remote:s}).env,...f},json:n,logger:t}):await i({command:{args:[process.argv[1]??"lunora",...hr(o,s)],command:process.execPath},cwd:r,env:f,json:n,logger:t,tunnel:o.tunnel===!0})}finally{y(r,process.pid)}},Or=e=>{try{const r=P("ps",["-o","pgid=","-p",String(e)],{encoding:"utf8"}),n=Number.parseInt(r.stdout.trim(),10);return Number.isInteger(n)&&n>0?n:void 0}catch{return}},Dr=(e,r,n=process.platform,t=P)=>{if(n==="win32"){try{t("taskkill",["/pid",String(e.pid),"/T","/F"],{stdio:"ignore"})}catch{}return}if(e.background===!0)try{r(-(Or(e.pid)??e.pid),"SIGKILL");return}catch{}try{r(e.pid,"SIGKILL")}catch{}},Ar=(e,r)=>(r.json?h({pid:e.pid,stopped:!1}):r.logger.error(`dev server (pid ${String(e.pid)}) survived the force-kill — record kept; retry \`lunora dev stop\` or kill the process manually.`),{code:1}),xr=async e=>{const{cwd:r,logger:n}=e,t=A(r),o=e.alive??(f=>f===t?.pid&&Me(t)),s=e.signal??((f,v)=>{process.kill(f,v)}),i=e.pollIntervalMs??R,a=e.stopGraceMs??Sr,c=e.platform??process.platform,l=e.spawnSyncImpl??P;if(t===void 0||!o(t.pid))return t!==void 0&&y(r,t.pid),e.json?h({running:!1,stopped:!1}):n.info("No dev server running."),{code:0};try{s(t.pid,"SIGTERM")}catch{}const d=Date.now()+a;for(;o(t.pid)&&Date.now()<d;)await w(i);return o(t.pid)&&(Dr(t,s,c,l),await w(i),o(t.pid))?Ar(t,e):(y(r,t.pid),e.json?h({pid:t.pid,stopped:!0}):n.success(`Stopped dev server (pid ${String(t.pid)}).`),{code:0})},Mr=e=>{const{cwd:r,logger:n}=e,t=O(r);if(t===void 0)return e.json?h({running:!1}):n.info("No dev server running."),{code:0};const o=e.now??Date.now,s=t.startedAt===void 0?Number.NaN:Date.parse(t.startedAt),i=Number.isFinite(s)?Math.max(0,Math.round((o()-s)/1e3)):void 0;if(e.json)return h({background:t.background===!0,logFile:t.logFile,mode:t.mode,pid:t.pid,ready:V(t),readyAt:t.readyAt,running:!0,startedAt:t.startedAt,studioUrl:t.studioUrl,tunnelUrl:t.tunnelUrl,uptimeSeconds:i,url:t.url}),{code:0};const a=[`pid ${String(t.pid)}`,...i===void 0?[]:[`uptime ${String(i)}s`],t.background===!0?"background":"foreground",V(t)?"ready":"starting"];return n.success(`Dev server running at ${t.url} (${a.join(", ")})`),t.studioUrl!==void 0&&n.info(` Studio: ${t.studioUrl}`),t.tunnelUrl!==void 0&&n.info(` Tunnel: ${t.tunnelUrl}`),t.logFile!==void 0&&n.info(` Logs: lunora dev logs (${t.logFile})`),{code:0}},Ur=e=>{const{cwd:r,logger:n}=e,t=A(r),o=ge(r,t);if(!q(o))return n.info("No dev server logs found — output is captured when the server runs in background mode (`lunora dev --background`)."),{code:0};const s=ve(o,e.lines??kr);return s.length>0&&process.stdout.write(`${s.join(`
4
+ `)}
5
+ `),{code:0}},kt=e=>{const{cwd:r,json:n,lines:t,logger:o,subcommand:s}=e;if(s==="stop")return xr({cwd:r,json:n,logger:o});if(s==="status")return Mr({cwd:r,json:n,logger:o});if(s==="logs")return Ur({cwd:r,lines:t,logger:o});if(s!==void 0)return o.error(`dev: unknown subcommand "${s}" — expected stop | status | logs (or no subcommand to start the dev server)`),{code:ae.USAGE}},It=(e,r,n)=>D(e)?(r!=="wrangler"&&n.info(`target ${e} runs its own dev server, so lunora dev serves the worker on it — start the frontend's dev server separately`),"wrangler"):r,Et=async e=>{const{logger:r}=e,n=await(e.start??je)({log:(s,{stream:i,tag:a})=>{de(s,a,i,r)},port:e.port,projectRoot:e.projectRoot});let t=()=>{};const o=new Promise(s=>{t=s});return{exited:Promise.race([o,n.exited]),kill:()=>{n.stop().then(()=>0,()=>1).then(t).catch(()=>{})}}},Gr=e=>{const{cwd:r,driver:n,options:t,studioPort:o,workerPort:s}=e,{projectConfig:i,toolchain:a}=n;if(i===void 0||a===void 0)throw new Error(`deploy target "${n.id}" runs its own dev server but ships no config projection or toolchain for it`);if(t.remote===!0)throw new Error(`--remote proxies bindings to Cloudflare; ${n.name} has no remote bindings to proxy to`);t.inspectorPort!==void 0&&t.logger.warn(`--inspector-port is a wrangler dev flag; ${n.name} dev has no inspector to pin`);const{command:c,commit:l,projection:d}=Fe(n,r,"dev",v=>a.dev({configPath:v,extraArgs:["--port",String(s)]}));l(),d!==void 0&&d.dropped.length>0&&t.logger.info(`${n.name} ignores these wrangler keys, so its dev server runs without them: ${d.dropped.join(", ")}`);const f=ne(x(r),c);return{flavor:"wrangler",ipv4LoopbackForced:!1,remote:{bindings:[],cleanup:()=>{},enabled:!1},runsCodegenWatch:me(t),celldSession:!0,studioEnabled:t.studio!==!1,studioPort:o,workerEnabled:t.worker!==!1,workerOrigin:`http://localhost:${String(s)}`,workerPort:s,wrangler:{args:f.args,command:f.command,cwd:r,tag:c.tool}}},Fr=64,he="127.0.0.1",jr=65535,Vr=(e,r=he)=>new Promise(n=>{const t=ze();t.once("error",()=>{n(!1)}),t.once("listening",()=>{t.close(()=>{n(!0)})}),t.listen(e,r)}),Wr=async(e,r=he,n=Fr)=>{for(let t=e;t<e+n&&t<=jr;t+=1)if(await Vr(t,r))return t;return e},Se=(e=Ye)=>Object.values(e()).some(r=>r?.some(n=>n.internal&&n.address==="::1")),$="wrangler.dev.jsonc",C=6173,m=8787,z=5173,Br=(e,r)=>{const n=()=>{};if(!e.remote)return{args:[],plan:{bindings:[],cleanup:n,enabled:!1}};const o=(e.materializeRemote??Ke)({enabled:!0,projectRoot:r}),s=o.remoteBindings.map(a=>`${a.binding} (${a.kind})`),{cleanup:i}=o;return o.configPath===void 0?{args:[],plan:{bindings:s,cleanup:i,enabled:!0,reason:o.reason}}:{args:["--config",o.configPath],plan:{bindings:s,cleanup:i,enabled:!0}}},ke=(e,r)=>{const n=[...new Set(_e(r).services.map(s=>s.wranglerPath))],{cleanup:t,configPaths:o}=(e.materializeServiceConfigs??He)(n);return{args:o.flatMap(s=>["--config",s]),cleanup:t}},Kr=(e,r,n)=>{const t=T(e);return r.length===0||t===void 0?[]:[...n.length>0?[]:["--config",t],...r]},Ie=e=>e.local===!0?["--local"]:[],Y=e=>M(e).parsed?.dev?.ip,Ee=(e,r,n)=>{if(n!==void 0){const o=L(e,n);if(q(o)&&Y(o)!==void 0)return[]}const t=T(e);return t!==void 0&&Y(t)!==void 0?[]:r()?[]:["--ip","127.0.0.1"]},Hr=new Set(["127.0.0.1","::1","[::1]","localhost"]),zr=(e,r)=>{let n;try{n=N(L(e,se),"utf8")}catch{return[]}const t=[];for(const o of We(n)){let s;try{s=new URL(o.value)}catch{continue}Hr.has(s.hostname)&&s.port===String(r)&&t.push(o.key)}return t},J=async(e,r)=>{if(e.workerPort!==void 0)return e.workerPort;const n=T(r);if(n!==void 0){const{parsed:s}=M(n);if(typeof s?.dev?.port=="number")return s.dev.port}const t=await(e.findFreePort??Wr)(m);if(t===m)return t;const o=zr(r,m);if(o.length>0)throw new Error(`port ${String(m)} is in use, but ${se} pins the worker origin to it (${o.join(", ")}). Serving on ${String(t)} would leave those URLs pointing at nothing. Stop whatever holds ${String(m)}, or run \`lunora dev --worker-port ${String(t)}\` and update those values to match.`);return t},Yr=(e,r)=>{if(e.inspectorPort!==void 0)return e.inspectorPort;const n=T(r);if(n===void 0)return;const{parsed:t}=M(n),o=t?.dev?.inspector_port;return typeof o=="number"?o:void 0},Jr=(e,r,n)=>{const t=Ee(r,e.hasIpv6Loopback??Se,$),o=oe(e.target??Z(r));if(o.toolchain===void 0)throw new Error(`deploy target "${o.id}" has no dev server to run the worker sidecar`);const s=ke(e,r),i=o.toolchain.dev({configPath:$,extraArgs:[...t,...Ie(e),"--var","WORKER_ENV:development",...s.args]}),a=ne(n,i);return{cleanup:s.cleanup,sidecar:{args:a.args,command:a.command,cwd:r,tag:"worker"}}},qr=(e,r)=>{e.worker===!1&&e.logger.warn(`--no-worker does not apply to the ${r} flavor: Vite owns the worker, codegen and studio in-process. Run your framework's dev script instead.`),e.inspectorPort!==void 0&&e.logger.warn(r==="framework-worker"?`--inspector-port does not apply to the ${r} flavor: pin \`dev.inspector_port\` in ${$} — that is the config the worker sidecar runs.`:`--inspector-port does not apply to the ${r} flavor: Vite owns the worker. Pin it in vite.config — \`lunora({ cloudflare: { inspectorPort: ${String(e.inspectorPort)} } })\`.`),e.local===!0&&r==="vite"&&e.logger.warn("--local does not apply to the vite flavor: Vite owns the worker. Turn remote bindings off in vite.config — `lunora({ cloudflare: { remoteBindings: false } })`.")},Xr=e=>{const r=e.cwd??process.cwd(),n=x(r),t=e.flavor??U(r);if(t==="vite"||t==="framework-worker"){const v=fe(r),u=t==="framework-worker"?Jr(e,r,n):void 0,g=u?.sidecar;return qr(e,t),{runsCodegenWatch:!1,flavor:t,ipv4LoopbackForced:!1,remote:{bindings:[],cleanup:()=>{},enabled:e.remote===!0},...u?{serviceConfigCleanup:u.cleanup}:{},...g?{sidecar:g}:{},studioEnabled:!1,studioPort:e.port??C,workerEnabled:!0,workerOrigin:`http://localhost:${String(z)}`,workerPort:z,wrangler:{args:v.args,command:v.command,cwd:r,...we(e),tag:"vite"}}}const o=ee(r),s=o.framework==="none"?void 0:`this project uses ${o.framework} — the worker runs inside Vite there. run \`${Ve(n,"dev")}\` for the full app (frontend + HMR); \`lunora dev\` starts only the worker.`,i=e.workerPort??m,a=Br(e,r),c=Ee(r,e.hasIpv6Loopback??Se),l=e.inspectorPort===void 0?[]:["--inspector-port",String(e.inspectorPort)],d=ke(e,r),f=re(n,"wrangler",["dev","--port",String(i),...l,...c,...Ie(e),"--var","WORKER_ENV:development",...a.args,...Kr(r,d.args,a.args)]);return{runsCodegenWatch:me(e),flavor:t,frameworkHint:s,ipv4LoopbackForced:c.length>0,remote:a.plan,serviceConfigCleanup:d.cleanup,studioEnabled:e.studio!==!1,studioPort:e.port??C,workerEnabled:e.worker!==!1,workerOrigin:`http://localhost:${String(i)}`,workerPort:i,wrangler:{args:f.args,command:f.command,cwd:r,tag:"wrangler"}}},yt=async e=>{const r=e.cwd??process.cwd();if(e.target!==void 0&&D(e.target))return Gr({cwd:r,driver:oe(e.target),options:e,studioPort:e.port??C,workerPort:await J(e,r)});const n=e.flavor??U(r),t=n==="wrangler"?await J(e,r):e.workerPort,o=n==="wrangler"?Yr(e,r):e.inspectorPort;return Xr({...e,cwd:r,flavor:n,inspectorPort:o,workerPort:t})};export{R as P,kt as a,br as b,pr as c,tr as d,U as e,It as f,yt as g,Pr as h,ht as i,vt as j,wt as k,me as l,Et as m,fr as n,gt as o,Xr as p,Yr as q,rr as r,St as s,pt as t,J as u,mt as w};
@@ -1 +1 @@
1
- import{g as r,p as a,o as s,q as l}from"./plan-Cqn2uvTo.mjs";export{r as buildDevPlan,a as planDevCommand,s as resolveInspectorPort,l as resolveWorkerPort};
1
+ import{g as r,p as a,q as s,u as l}from"./plan-TuKFsXOj.mjs";export{r as buildDevPlan,a as planDevCommand,s as resolveInspectorPort,l as resolveWorkerPort};
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@lunora/cli",
3
- "version": "1.0.0-alpha.345",
3
+ "version": "1.0.0-alpha.347",
4
4
  "description": "The Lunora CLI: init, dev, deploy, codegen, migrate, seed, doctor, insights, logs, registry, and the rest of the project commands",
5
5
  "keywords": [
6
6
  "agent-skills",
@@ -54,14 +54,14 @@
54
54
  "@bomb.sh/tab": "0.0.22",
55
55
  "@lunora/advisor": "1.0.0-alpha.189",
56
56
  "@lunora/bindings": "1.0.0-alpha.96",
57
- "@lunora/codegen": "1.0.0-alpha.260",
58
- "@lunora/config": "1.0.0-alpha.303",
57
+ "@lunora/codegen": "1.0.0-alpha.262",
58
+ "@lunora/config": "1.0.0-alpha.305",
59
59
  "@lunora/container": "1.0.0-alpha.69",
60
60
  "@lunora/d1": "1.0.0-alpha.162",
61
61
  "@lunora/errors": "1.0.0-alpha.50",
62
- "@lunora/mcp": "1.0.0-alpha.210",
62
+ "@lunora/mcp": "1.0.0-alpha.212",
63
63
  "@lunora/runtime": "1.0.0-alpha.176",
64
- "@lunora/seed": "1.0.0-alpha.188",
64
+ "@lunora/seed": "1.0.0-alpha.190",
65
65
  "@visulima/cerebro": "3.1.1",
66
66
  "@visulima/error": "6.1.0",
67
67
  "@visulima/fs": "6.0.7",
@@ -167,6 +167,14 @@ secret put` for every prod secret.
167
167
  with no migration — stage the change (`lunora-migration-helper`) instead.
168
168
  5. **Deploying with uncommitted codegen.** Commit `lunora/_generated/` and
169
169
  `lunora/.lunora-schema.json` so CI and the gate see the same baseline.
170
+ 6. **Using the Cloudflare CLI (`cf`) lifecycle commands.** Lunora manages
171
+ `wrangler.jsonc` and doesn't support `cf` yet
172
+ ([#964](https://github.com/anolilab/lunora/issues/964)). `cf` resource
173
+ commands (zones, DNS, KV, …) are fine, but never `cf dev` / `cf build` /
174
+ `cf deploy`: they read `cloudflare.config.ts`, which Lunora never updates.
175
+ `lunora doctor` reports one as `cf-config-present` on every run; deploy,
176
+ codegen, `lunora dev` and the Vite/Rspack plugins (dev and build) warn once
177
+ per process tree.
170
178
 
171
179
  ## Checklist
172
180
 
@@ -1,5 +0,0 @@
1
- import{existsSync as q,readFileSync as O,mkdirSync as Le,openSync as X,closeSync as Q,statSync as Te,readSync as Pe}from"node:fs";import{join as L,dirname as be}from"node:path";import{readServiceBindings as _e}from"@lunora/codegen";import{readLiveDevServerState as D,discoverContainerInfo as Re,streamContainerLogs as $e,formatLunoraEvent as Ne,updateDevServerState as _,targetRunsOwnDevServer as C,resolveProjectTarget as Z,claimDevServerState as Oe,DEV_HANDOFF_ENV as De,clearDevServerState as y,readDevServerState as A,isDevServerReady as V,detectFramework as ee,readProjectDependencyNames as Ce,DEV_LOG_FILE_ENV as Ae,DEV_DAEMON_ENV as xe,detectPackageManager as x,execArgsFor as re,isRecordedProcessCurrent as Me,DEV_LOG_FILE as Ue,CODEGEN_ENV as te,isCodegenDisabled as Ge,planToolchainInvocation as Fe,toolchainExecArgs as ne,startCelldDevSession as je,resolveDeployDriver as oe,DEV_VARS_FILE as se,runScriptCommand as Ve,parseDevVariableEntries as We}from"@lunora/config";import{findWranglerFile as T,readWranglerJsonc as M,materializeRemoteWranglerConfig as Be,materializeServiceDevConfigs as Ke}from"@lunora/config/cloudflare";import{createServer as He}from"node:net";import{networkInterfaces as ze}from"node:os";import{spawn as ie,spawnSync as P}from"node:child_process";import{setTimeout as w}from"node:timers/promises";import{EXIT_CODE as ae}from"./EXIT_CODE-D_XCixv8.mjs";import{a as h}from"./output-format-B4eQHi5y.mjs";import{spawnShellCompat as ce,defaultSpawner as Ye}from"./createRecordingSpawner-CYhdPBD5.mjs";import{isLunoraError as Je}from"@lunora/errors";import{s as W}from"./index-oHZBGBwB.mjs";import{createInterface as qe}from"node:readline";const Xe=12e4,R=250,Qe=1e3,Ze="LUNORA_DEV_READY_TIMEOUT_MS",er=e=>{if(e!==void 0)return e;const r=Number(process.env[Ze]??"");return Number.isFinite(r)&&r>0?r:Xe},rr=async(e,r)=>{try{const n=AbortSignal.timeout(Qe);return await(await fetch(new URL("/_lunora/status",e),{redirect:"manual",signal:r===void 0?n:AbortSignal.any([r,n])})).body?.cancel(),!0}catch{return!1}},le=async(e,r,n)=>{const t=Date.now()+n.timeoutMs;for(;n.signal?.aborted!==!0;){const o=r(D(e));if(o!==void 0)return o;if(Date.now()>=t)return;try{await w(n.intervalMs??500,void 0,{signal:n.signal})}catch{return}}},B=(e,r)=>{qe({crlfDelay:Number.POSITIVE_INFINITY,input:e}).on("line",r)},tr=5e3,de=(e,r,n,t)=>{if(e.length===0)return;const o=Ne(e);if(o){t[o.level](`[lunora] ${o.text}`);return}const s=`[${r}] ${e}`;n==="stderr"?t.warn(s):t.info(s)},nr=(e,r,n=process.platform,t=P)=>{try{if(r==="SIGKILL"&&n==="win32"&&e.pid!==void 0){t("taskkill",["/pid",String(e.pid),"/T","/F"],{stdio:"ignore"});return}e.kill(r)}catch{}},ue=(e,r,n)=>{const t=e.direct===!0?{args:[...e.args],command:e.command,shell:!1}:ce(e.command,e.args),o=ie(t.command,t.args,{cwd:e.cwd??process.cwd(),env:e.env?{...process.env,...e.env}:process.env,shell:t.shell,stdio:[e.direct===!0?"ignore":"inherit","pipe","pipe"]});return B(o.stdout,s=>{r(s,"stdout")}),B(o.stderr,s=>{r(s,"stderr")}),{exited:new Promise(s=>{o.on("error",i=>{n?.(i),s(1)}),o.on("exit",(i,a)=>{s(i??(a?1:0))})}),kill:s=>{nr(o,s)}}},ut=(e,r)=>ue(e,(n,t)=>{de(n.trimEnd(),e.tag,t,r)},n=>{r.error(`[${e.tag}] failed to start: ${n.message}`)}),ft=(e,r)=>{if(process.env.LUNORA_CONTAINER_LOGS==="0")return;const t=Re(e,"lunora").containers.map(o=>({className:o.className,exportName:o.exportName}));if(t.length!==0)return $e({containers:t,onLine:o=>{const s=`[container:${o.name}] ${o.text}`;o.level==="error"?r.warn(s):r.info(s)},onUnavailable:o=>{r.warn(`[container] Docker engine unreachable — container logs unavailable (${o})`)}})},vt=async e=>{e.readyProbe?.abort(),await e.tunnel?.close(),await e.codegen?.close().catch(()=>{}),e.containerLogs?.close(),await e.studio?.close().catch(()=>{});try{e.remoteCleanup?.(),e.serviceConfigCleanup?.()}catch{}},gt=async e=>await new Promise(r=>{const n={},t=i=>{e.info(`received ${i} — shutting down`),n.sigint&&process.off("SIGINT",n.sigint),n.sigterm&&process.off("SIGTERM",n.sigterm),r(0)},o=()=>{t("SIGINT")},s=()=>{t("SIGTERM")};n.sigint=o,n.sigterm=s,process.on("SIGINT",o),process.on("SIGTERM",s)}),pt=async(e,r,n)=>{let t=0,o;const s=l=>{e.kill(l),r?.kill(l)},i=()=>{t+=1,t===1?(n.info("received SIGINT — shutting down (press Ctrl-C again to force-kill)"),s("SIGTERM"),o=setTimeout(()=>{s("SIGKILL")},tr),o.unref()):s("SIGKILL")},a=()=>{s("SIGTERM")};process.on("SIGINT",i),process.on("SIGTERM",a);const c=await Promise.race([e.exited.then(l=>({code:l,who:"worker"})),...r===void 0?[]:[r.exited.then(l=>({code:l,who:"sidecar"}))]]);return r!==void 0&&(c.who==="sidecar"?(n.warn("[worker] the Lunora sidecar (wrangler dev) exited — shutting down the framework dev server"),e.kill("SIGTERM")):r.kill("SIGTERM"),await Promise.allSettled([e.exited,r.exited])),o&&clearTimeout(o),process.off("SIGINT",i),process.off("SIGTERM",a),c.code},E="2026.9.3",or="https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/downloads/",sr=/version (\S+)/u,K=/https:\/\/[\da-z-]+\.trycloudflare\.com/u,ir="1s",ar=5e3,H=async(e,r)=>await Promise.race([e.then(()=>!0),w(r,!1,{ref:!1})]),cr=6e4,lr='Vite answers 403 for hosts it does not know — add `server: { allowedHosts: [".trycloudflare.com"] }` to vite.config if the URL is blocked.',dr=async e=>{const r=`Install or update it: ${or} (macOS: \`brew install cloudflared\`).`;let n;try{const o=await e({args:["--version"],captureStdoutSilently:!0,command:"cloudflared"});if(o.code!==0)return{message:`\`cloudflared --version\` exited ${String(o.code)}. ${r}`,ok:!1};n=o.stdout??""}catch(o){return Je(o)&&o.code==="LOCAL_DEPENDENCY_MISSING"?{message:`--tunnel needs \`cloudflared\` ${E} or newer, and it is not on your PATH. ${r}`,ok:!1}:{message:`\`cloudflared --version\` could not run: ${o instanceof Error?o.message:String(o)}. ${r}`,ok:!1}}const t=W.coerce(sr.exec(n)?.[1])?.version;return t===void 0?{ok:!0,version:void 0}:W.gte(t,E)?{ok:!0,version:t}:{message:`--tunnel needs \`cloudflared\` ${E} or newer (protected quick tunnels); found ${t}. ${r}`,ok:!1}},ur=e=>{const r=[],n=[];for(const t of e??[]){const o=t.split(",").map(s=>s.trim()).filter(s=>s.length>0);o.length>0&&(n.push(...o.filter(s=>!s.includes("@"))),r.push(o.join(",")))}return{entries:r,invalid:n}},fr=(e,r)=>["tunnel","--url",e,"--output","json","--grace-period",ir,...r.flatMap(n=>["--allowed-mail",n])],vr=e=>{let r;try{r=JSON.parse(e)}catch{r=void 0}if(typeof r=="object"&&r!==null){const n=r,t=typeof n.message=="string"?n.message:"";return{level:typeof n.level=="string"?n.level:void 0,text:t,url:K.exec(t)?.[0]}}return{level:void 0,text:e,url:K.exec(e)?.[0]}},gr=e=>{e.warn(" ⚠ PUBLIC TUNNEL: anyone with the tunnel URL can reach this dev server — there is no sign-in in front of it."),e.warn(" Protect it with a one-time-PIN email allow-list: lunora dev --tunnel --allow-mail you@example.com"),e.warn(" (repeat --allow-mail, pass a comma-separated list, or allow a whole domain with '*@example.com')")},pr=async(e,r,n,{intervalMs:t,timeoutMs:o=cr}={})=>{const s=await le(e,i=>i?.mode==="vite"?{origin:i.url,ownerPid:i.pid}:void 0,{intervalMs:t,signal:n,timeoutMs:o});return s===void 0&&!n.aborted&&r.warn(`--tunnel: the Vite dev server did not report its URL within ${String(o/1e3)}s — continuing without a tunnel.`),s},mr=e=>{const{allowMail:r,cwd:n,logger:t}=e,o=r.length===0,s=new AbortController,{signal:i}=s,a=()=>i.aborted,c=e.closeTimeoutMs??ar;let l;const d=()=>{s.abort()};process.once("SIGINT",d),process.once("SIGTERM",d);const v=(async()=>{const u=await dr(e.spawner??Ye);if(!u.ok){t.error(u.message),t.warn("continuing without a tunnel.");return}u.version===void 0&&t.warn(`could not read the cloudflared version — --tunnel needs ${E} or newer; trying anyway.`);const g=e.origin.kind==="fixed"?{origin:e.origin.origin,ownerPid:process.pid}:await pr(n,t,i);if(g===void 0||i.aborted)return;o&&gr(t),t.info(`starting a Cloudflare quick tunnel to ${g.origin}${o?"":" (email one-time-PIN protected)"}…`);let S;const G={failedToStart:!1},ye=k=>{if(k.length===0)return;const p=vr(k);if(p.url!==void 0&&S===void 0){S=p.url,t.success(` ➜ Tunnel: ${p.url}${o?" (PUBLIC)":""}`),o||t.info(` Allowed: ${r.join(", ")} — visitors confirm with a one-time PIN; a session lasts up to 4 hours`),e.origin.kind==="vite"&&t.info(` ${lr}`),_(n,{tunnelUrl:p.url},{expectedPid:g.ownerPid});return}p.level==="error"||p.level==="fatal"?t.warn(`[cloudflared] ${p.text}`):t.debug?.(`[cloudflared] ${p.text}`)},b=(e.startChild??ue)({args:fr(g.origin,r),command:"cloudflared",direct:!0},ye,k=>{G.failedToStart=!0,t.error(`could not start cloudflared (${k.message}) — continuing without a tunnel.`)});l=b;const F=()=>{b.kill("SIGTERM")};i.addEventListener("abort",F,{once:!0});const j=await b.exited;i.removeEventListener("abort",F),l=void 0,S!==void 0&&_(n,{tunnelUrl:void 0},{expectedPid:g.ownerPid}),!(a()||G.failedToStart)&&t.warn(S===void 0?`cloudflared exited (${String(j)}) before a tunnel URL was assigned — continuing without a tunnel.`:`cloudflared exited (${String(j)}) — the tunnel is closed; the dev server keeps running.`)})().catch(u=>{t.error(`--tunnel failed (${u instanceof Error?u.message:String(u)}) — continuing without a tunnel.`)});return{close:async()=>{if(process.off("SIGINT",d),process.off("SIGTERM",d),s.abort(),await H(v,c))return;const u=l;u!==void 0&&(t.warn(`cloudflared did not exit within ${String(c/1e3)}s of SIGTERM — force-killing it.`),u.kill("SIGKILL"),!await H(u.exited,c)&&t.error(`could not confirm that cloudflared stopped — ${o?"the PUBLIC tunnel":"the tunnel"} may still be reachable. Stop the \`cloudflared\` process manually.`))}}},mt=e=>{const{cwd:r,logger:n,plan:t,tunnel:o}=e;if(o!==void 0)return mr({allowMail:o.allowMail,cwd:r,logger:n,origin:t.flavor==="wrangler"?{kind:"fixed",origin:t.workerOrigin}:{kind:"vite"},spawner:o.spawner,startChild:o.startChild})},wr=(e,r)=>{const n=["dev"];if(e.apiSpec!==void 0&&n.push("--api-spec",e.apiSpec),e.port!==void 0&&n.push("--port",String(e.port)),e.workerPort!==void 0&&n.push("--worker-port",String(e.workerPort)),e.inspectorPort!==void 0&&n.push("--inspector-port",String(e.inspectorPort)),e.emitBindings!==void 0&&n.push("--emit-bindings",e.emitBindings),e.codegen===!1&&n.push("--no-codegen"),e.studio===!1&&n.push("--no-studio"),e.worker===!1&&n.push("--no-worker"),e.target!==void 0&&n.push("--target",e.target),e.tunnel===!0){n.push("--tunnel");for(const t of ur(e.allowMail).entries)n.push("--allow-mail",t)}return r&&n.push("--remote"),e.local===!0&&n.push("--local"),n},hr=1e4,Sr=100,kr=40,I=256*1024,Ir=new Set(["nuxt","sveltekit"]),Er=["@lunora/rspack","@lunora/vite"],U=e=>{if(Ir.has(ee(e).framework))return"framework-worker";const r=Ce(e);return Er.some(n=>r.has(n))?"vite":"wrangler"},fe=e=>{const r=x(e);let n;try{const t=O(L(e,"package.json"),"utf8");n=JSON.parse(t).scripts?.dev}catch{}if(n===void 0||n.trim()===""||n.includes("lunora")){const t=re(r,"vite",["dev"]);return{args:t.args,command:t.command}}return{args:["run","dev"],command:r}},yr=e=>{Le(be(e.logPath),{recursive:!0});const r=X(e.logPath,"w",384);let n;const t=ce(e.command,e.args);try{n=ie(t.command,t.args,{cwd:e.cwd,detached:!0,env:e.env,shell:t.shell,stdio:["ignore",r,r],windowsHide:!0})}finally{Q(r)}return n.unref(),{exited:new Promise(o=>{n.on("error",()=>{o(1)}),n.on("exit",(s,i)=>{o(s??(i?1:0))})}),pid:n.pid}},Lr=e=>{try{const{size:r}=Te(e);if(r<=I)return O(e,"utf8");const n=X(e,"r");try{const t=Buffer.alloc(I),o=Pe(n,t,0,I,r-I),s=t.toString("utf8",0,o);return s.slice(s.indexOf(`
2
- `)+1)}finally{Q(n)}}catch{return}},ve=(e,r)=>{const n=Lr(e);if(n===void 0)return[];const t=n.split(`
3
- `);return t.at(-1)===""&&t.pop(),r>0?t.slice(-r):t},ge=(e,r)=>r?.logFile??L(e,Ue),pe=e=>{e.info(" Stop: lunora dev stop"),e.info(" Status: lunora dev status"),e.info(" Logs: lunora dev logs")},Tr=(e,r)=>{e.warn(`Dev server already running at ${r.url} (pid ${String(r.pid)})`),pe(e)},Pr=(e,r)=>{e.success(`Dev server running at ${r.url} (pid ${String(r.pid)})`),r.studioUrl!==void 0&&e.info(` Studio: ${r.studioUrl}`),r.tunnelUrl!==void 0&&e.info(` Tunnel: ${r.tunnelUrl}`),pe(e)},br=3e4,_r=async(e,r,n,t)=>{const o=await le(e,s=>s?.tunnelUrl,{intervalMs:n,timeoutMs:t});o===void 0?r.warn(" Tunnel: no URL yet — `lunora dev status` shows it once cloudflared reports one; `lunora dev logs` says why if it does not."):r.success(` Tunnel: ${o}`)},Rr=async e=>{const{child:r,cwd:n,deadline:t,pollIntervalMs:o,probe:s}=e,i=r.exited.then(a=>({exitCode:a}));for(;Date.now()<t;){const a=D(n);if(a!==void 0&&a.pid!==process.pid&&await s(a.url))return{state:a,status:"ready"};const c=await Promise.race([i,w(o)]);if(c!==void 0)return{...c,status:"exited"}}return{status:"timeout"}},$r=async e=>{const{cwd:r,logger:n}=e,t=ge(r,void 0),o=er(e.readyTimeoutMs),s=(e.spawnDetached??yr)({args:e.command.args,command:e.command.command,cwd:r,env:{...process.env,...e.env,[xe]:"1",[Ae]:t,...process.env.FORCE_COLOR===void 0?{NO_COLOR:"1"}:{},...e.json?{LUNORA_LOG_JSON:"1"}:{}},logPath:t}),i=await Rr({child:s,cwd:r,deadline:Date.now()+o,pollIntervalMs:e.pollIntervalMs??R,probe:e.probe??rr});if(i.status==="ready")return Pr(n,i.state),e.tunnel===!0&&i.state.tunnelUrl===void 0&&await _r(r,n,e.pollIntervalMs??R,e.tunnelUrlTimeoutMs??br),{code:0};if(i.status==="exited"){n.error(`dev server exited before becoming ready (exit code ${String(i.exitCode)}). Last output:`);for(const c of ve(t,kr))n.error(` ${c}`);return y(r,s.pid??process.pid),{code:i.exitCode===0?1:i.exitCode}}s.pid!==void 0&&A(r)?.pid===process.pid&&_(r,{logFile:t,pid:s.pid});const a=s.pid===void 0?"":` (pid ${String(s.pid)})`;return n.warn(`dev server did not confirm ready within ${String(Math.round(o/1e3))}s — it may still be compiling${a}. Check \`lunora dev status\` and \`lunora dev logs\`; \`lunora dev stop\` shuts it down.`),{code:ae.UNAVAILABLE}},me=e=>e.codegen!==!1&&!Ge(process.env[te]),we=e=>{const r={...e.remote===!0?{LUNORA_REMOTE:"1"}:{},...e.codegen===!1?{[te]:"0"}:{}};return Object.keys(r).length>0?{env:r}:{}},wt=async e=>{const{cwd:r,jsonLogs:n,logger:t,options:o,remote:s}=e,i=e.run??$r,a=U(r),c=a==="vite"&&C(o.target??Z(r))?"wrangler":a,l=c==="wrangler"?`http://localhost:${String(o.workerPort??8787)}`:"http://localhost:5173",d=Oe(r,{background:!0,mode:"cli",pid:process.pid,startedAt:new Date().toISOString(),url:l});if(!d.ok)return d.existing!==void 0&&Tr(t,d.existing),{code:0};const f={[De]:String(process.pid)};try{return c==="vite"&&o.tunnel!==!0?await i({command:fe(r),cwd:r,env:{...we({...o,remote:s}).env,...f},json:n,logger:t}):await i({command:{args:[process.argv[1]??"lunora",...wr(o,s)],command:process.execPath},cwd:r,env:f,json:n,logger:t,tunnel:o.tunnel===!0})}finally{y(r,process.pid)}},Nr=e=>{try{const r=P("ps",["-o","pgid=","-p",String(e)],{encoding:"utf8"}),n=Number.parseInt(r.stdout.trim(),10);return Number.isInteger(n)&&n>0?n:void 0}catch{return}},Or=(e,r,n=process.platform,t=P)=>{if(n==="win32"){try{t("taskkill",["/pid",String(e.pid),"/T","/F"],{stdio:"ignore"})}catch{}return}if(e.background===!0)try{r(-(Nr(e.pid)??e.pid),"SIGKILL");return}catch{}try{r(e.pid,"SIGKILL")}catch{}},Dr=(e,r)=>(r.json?h({pid:e.pid,stopped:!1}):r.logger.error(`dev server (pid ${String(e.pid)}) survived the force-kill — record kept; retry \`lunora dev stop\` or kill the process manually.`),{code:1}),Cr=async e=>{const{cwd:r,logger:n}=e,t=A(r),o=e.alive??(f=>f===t?.pid&&Me(t)),s=e.signal??((f,v)=>{process.kill(f,v)}),i=e.pollIntervalMs??R,a=e.stopGraceMs??hr,c=e.platform??process.platform,l=e.spawnSyncImpl??P;if(t===void 0||!o(t.pid))return t!==void 0&&y(r,t.pid),e.json?h({running:!1,stopped:!1}):n.info("No dev server running."),{code:0};try{s(t.pid,"SIGTERM")}catch{}const d=Date.now()+a;for(;o(t.pid)&&Date.now()<d;)await w(i);return o(t.pid)&&(Or(t,s,c,l),await w(i),o(t.pid))?Dr(t,e):(y(r,t.pid),e.json?h({pid:t.pid,stopped:!0}):n.success(`Stopped dev server (pid ${String(t.pid)}).`),{code:0})},Ar=e=>{const{cwd:r,logger:n}=e,t=D(r);if(t===void 0)return e.json?h({running:!1}):n.info("No dev server running."),{code:0};const o=e.now??Date.now,s=t.startedAt===void 0?Number.NaN:Date.parse(t.startedAt),i=Number.isFinite(s)?Math.max(0,Math.round((o()-s)/1e3)):void 0;if(e.json)return h({background:t.background===!0,logFile:t.logFile,mode:t.mode,pid:t.pid,ready:V(t),readyAt:t.readyAt,running:!0,startedAt:t.startedAt,studioUrl:t.studioUrl,tunnelUrl:t.tunnelUrl,uptimeSeconds:i,url:t.url}),{code:0};const a=[`pid ${String(t.pid)}`,...i===void 0?[]:[`uptime ${String(i)}s`],t.background===!0?"background":"foreground",V(t)?"ready":"starting"];return n.success(`Dev server running at ${t.url} (${a.join(", ")})`),t.studioUrl!==void 0&&n.info(` Studio: ${t.studioUrl}`),t.tunnelUrl!==void 0&&n.info(` Tunnel: ${t.tunnelUrl}`),t.logFile!==void 0&&n.info(` Logs: lunora dev logs (${t.logFile})`),{code:0}},xr=e=>{const{cwd:r,logger:n}=e,t=A(r),o=ge(r,t);if(!q(o))return n.info("No dev server logs found — output is captured when the server runs in background mode (`lunora dev --background`)."),{code:0};const s=ve(o,e.lines??Sr);return s.length>0&&process.stdout.write(`${s.join(`
4
- `)}
5
- `),{code:0}},ht=e=>{const{cwd:r,json:n,lines:t,logger:o,subcommand:s}=e;if(s==="stop")return Cr({cwd:r,json:n,logger:o});if(s==="status")return Ar({cwd:r,json:n,logger:o});if(s==="logs")return xr({cwd:r,lines:t,logger:o});if(s!==void 0)return o.error(`dev: unknown subcommand "${s}" — expected stop | status | logs (or no subcommand to start the dev server)`),{code:ae.USAGE}},St=(e,r,n)=>C(e)?(r!=="wrangler"&&n.info(`target ${e} runs its own dev server, so lunora dev serves the worker on it — start the frontend's dev server separately`),"wrangler"):r,kt=async e=>{const{logger:r}=e,n=await(e.start??je)({log:(s,{stream:i,tag:a})=>{de(s,a,i,r)},port:e.port,projectRoot:e.projectRoot});let t=()=>{};const o=new Promise(s=>{t=s});return{exited:Promise.race([o,n.exited]),kill:()=>{n.stop().then(()=>0,()=>1).then(t).catch(()=>{})}}},Mr=e=>{const{cwd:r,driver:n,options:t,studioPort:o,workerPort:s}=e,{projectConfig:i,toolchain:a}=n;if(i===void 0||a===void 0)throw new Error(`deploy target "${n.id}" runs its own dev server but ships no config projection or toolchain for it`);if(t.remote===!0)throw new Error(`--remote proxies bindings to Cloudflare; ${n.name} has no remote bindings to proxy to`);t.inspectorPort!==void 0&&t.logger.warn(`--inspector-port is a wrangler dev flag; ${n.name} dev has no inspector to pin`);const{command:c,commit:l,projection:d}=Fe(n,r,"dev",v=>a.dev({configPath:v,extraArgs:["--port",String(s)]}));l(),d!==void 0&&d.dropped.length>0&&t.logger.info(`${n.name} ignores these wrangler keys, so its dev server runs without them: ${d.dropped.join(", ")}`);const f=ne(x(r),c);return{flavor:"wrangler",ipv4LoopbackForced:!1,remote:{bindings:[],cleanup:()=>{},enabled:!1},runsCodegenWatch:me(t),celldSession:!0,studioEnabled:t.studio!==!1,studioPort:o,workerEnabled:t.worker!==!1,workerOrigin:`http://localhost:${String(s)}`,workerPort:s,wrangler:{args:f.args,command:f.command,cwd:r,tag:c.tool}}},Ur=64,he="127.0.0.1",Gr=65535,Fr=(e,r=he)=>new Promise(n=>{const t=He();t.once("error",()=>{n(!1)}),t.once("listening",()=>{t.close(()=>{n(!0)})}),t.listen(e,r)}),jr=async(e,r=he,n=Ur)=>{for(let t=e;t<e+n&&t<=Gr;t+=1)if(await Fr(t,r))return t;return e},Se=(e=ze)=>Object.values(e()).some(r=>r?.some(n=>n.internal&&n.address==="::1")),$="wrangler.dev.jsonc",N=6173,m=8787,z=5173,Vr=(e,r)=>{const n=()=>{};if(!e.remote)return{args:[],plan:{bindings:[],cleanup:n,enabled:!1}};const o=(e.materializeRemote??Be)({enabled:!0,projectRoot:r}),s=o.remoteBindings.map(a=>`${a.binding} (${a.kind})`),{cleanup:i}=o;return o.configPath===void 0?{args:[],plan:{bindings:s,cleanup:i,enabled:!0,reason:o.reason}}:{args:["--config",o.configPath],plan:{bindings:s,cleanup:i,enabled:!0}}},ke=(e,r)=>{const n=[...new Set(_e(r).services.map(s=>s.wranglerPath))],{cleanup:t,configPaths:o}=(e.materializeServiceConfigs??Ke)(n);return{args:o.flatMap(s=>["--config",s]),cleanup:t}},Wr=(e,r,n)=>{const t=T(e);return r.length===0||t===void 0?[]:[...n.length>0?[]:["--config",t],...r]},Ie=e=>e.local===!0?["--local"]:[],Y=e=>M(e).parsed?.dev?.ip,Ee=(e,r,n)=>{if(n!==void 0){const o=L(e,n);if(q(o)&&Y(o)!==void 0)return[]}const t=T(e);return t!==void 0&&Y(t)!==void 0?[]:r()?[]:["--ip","127.0.0.1"]},Br=new Set(["127.0.0.1","::1","[::1]","localhost"]),Kr=(e,r)=>{let n;try{n=O(L(e,se),"utf8")}catch{return[]}const t=[];for(const o of We(n)){let s;try{s=new URL(o.value)}catch{continue}Br.has(s.hostname)&&s.port===String(r)&&t.push(o.key)}return t},J=async(e,r)=>{if(e.workerPort!==void 0)return e.workerPort;const n=T(r);if(n!==void 0){const{parsed:s}=M(n);if(typeof s?.dev?.port=="number")return s.dev.port}const t=await(e.findFreePort??jr)(m);if(t===m)return t;const o=Kr(r,m);if(o.length>0)throw new Error(`port ${String(m)} is in use, but ${se} pins the worker origin to it (${o.join(", ")}). Serving on ${String(t)} would leave those URLs pointing at nothing. Stop whatever holds ${String(m)}, or run \`lunora dev --worker-port ${String(t)}\` and update those values to match.`);return t},Hr=(e,r)=>{if(e.inspectorPort!==void 0)return e.inspectorPort;const n=T(r);if(n===void 0)return;const{parsed:t}=M(n),o=t?.dev?.inspector_port;return typeof o=="number"?o:void 0},zr=(e,r,n)=>{const t=Ee(r,e.hasIpv6Loopback??Se,$),o=oe(e.target??Z(r));if(o.toolchain===void 0)throw new Error(`deploy target "${o.id}" has no dev server to run the worker sidecar`);const s=ke(e,r),i=o.toolchain.dev({configPath:$,extraArgs:[...t,...Ie(e),"--var","WORKER_ENV:development",...s.args]}),a=ne(n,i);return{cleanup:s.cleanup,sidecar:{args:a.args,command:a.command,cwd:r,tag:"worker"}}},Yr=(e,r)=>{e.worker===!1&&e.logger.warn(`--no-worker does not apply to the ${r} flavor: Vite owns the worker, codegen and studio in-process. Run your framework's dev script instead.`),e.inspectorPort!==void 0&&e.logger.warn(r==="framework-worker"?`--inspector-port does not apply to the ${r} flavor: pin \`dev.inspector_port\` in ${$} — that is the config the worker sidecar runs.`:`--inspector-port does not apply to the ${r} flavor: Vite owns the worker. Pin it in vite.config — \`lunora({ cloudflare: { inspectorPort: ${String(e.inspectorPort)} } })\`.`),e.local===!0&&r==="vite"&&e.logger.warn("--local does not apply to the vite flavor: Vite owns the worker. Turn remote bindings off in vite.config — `lunora({ cloudflare: { remoteBindings: false } })`.")},Jr=e=>{const r=e.cwd??process.cwd(),n=x(r),t=e.flavor??U(r);if(t==="vite"||t==="framework-worker"){const v=fe(r),u=t==="framework-worker"?zr(e,r,n):void 0,g=u?.sidecar;return Yr(e,t),{runsCodegenWatch:!1,flavor:t,ipv4LoopbackForced:!1,remote:{bindings:[],cleanup:()=>{},enabled:e.remote===!0},...u?{serviceConfigCleanup:u.cleanup}:{},...g?{sidecar:g}:{},studioEnabled:!1,studioPort:e.port??N,workerEnabled:!0,workerOrigin:`http://localhost:${String(z)}`,workerPort:z,wrangler:{args:v.args,command:v.command,cwd:r,...we(e),tag:"vite"}}}const o=ee(r),s=o.framework==="none"?void 0:`this project uses ${o.framework} — the worker runs inside Vite there. run \`${Ve(n,"dev")}\` for the full app (frontend + HMR); \`lunora dev\` starts only the worker.`,i=e.workerPort??m,a=Vr(e,r),c=Ee(r,e.hasIpv6Loopback??Se),l=e.inspectorPort===void 0?[]:["--inspector-port",String(e.inspectorPort)],d=ke(e,r),f=re(n,"wrangler",["dev","--port",String(i),...l,...c,...Ie(e),"--var","WORKER_ENV:development",...a.args,...Wr(r,d.args,a.args)]);return{runsCodegenWatch:me(e),flavor:t,frameworkHint:s,ipv4LoopbackForced:c.length>0,remote:a.plan,serviceConfigCleanup:d.cleanup,studioEnabled:e.studio!==!1,studioPort:e.port??N,workerEnabled:e.worker!==!1,workerOrigin:`http://localhost:${String(i)}`,workerPort:i,wrangler:{args:f.args,command:f.command,cwd:r,tag:"wrangler"}}},It=async e=>{const r=e.cwd??process.cwd();if(e.target!==void 0&&C(e.target))return Mr({cwd:r,driver:oe(e.target),options:e,studioPort:e.port??N,workerPort:await J(e,r)});const n=e.flavor??U(r),t=n==="wrangler"?await J(e,r):e.workerPort,o=n==="wrangler"?Hr(e,r):e.inspectorPort;return Jr({...e,cwd:r,flavor:n,inspectorPort:o,workerPort:t})};export{R as P,ht as a,Tr as b,gr as c,rr as d,U as e,St as f,It as g,mt as h,ut as i,pt as j,me as k,kt as l,ft as m,ur as n,Hr as o,Jr as p,J as q,er as r,wt as s,vt as t,gt as w};