@lunora/cli 1.0.0-alpha.363 → 1.0.0-alpha.365

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1 +1 @@
1
- import{existsSync as m}from"node:fs";import{join as p}from"node:path";import{runCodegen as u}from"@lunora/codegen";import{a as v,e as g,r as y}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as w,r as S}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{r as k}from"../packem_shared/codegen-error-AmH54ofi.mjs";import{d as j}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as E}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{r as A,p as D}from"../packem_shared/health-probe-Bw9JFfIy.mjs";import{defaultSpawner as R}from"../packem_shared/createRecordingSpawner-Ch7zuQQE.mjs";import{validateWranglerProject as $}from"@lunora/config/cloudflare";import{execArgsFor as b,detectPackageManager as U}from"@lunora/config";const x=async(r,a,t)=>{if(!m(p(r,"tsconfig.json")))return{warning:"no tsconfig.json found — skipping TypeScript type-check"};const o=b(U(r),"tsc",["--noEmit","-p","tsconfig.json"]),e=await a({args:o.args,command:o.command,cwd:r,stdoutToStderr:t==="json"});return e.code===0?{}:{error:`type errors: tsc --noEmit exited ${String(e.code)}`}},P=async(r,a)=>{if(r.healthUrl===void 0||r.healthUrl==="")return;const t=await D({baseUrl:r.healthUrl,fetchImpl:r.healthFetch});if(t.error===void 0){a.success(`verify: health probe ok (${t.url})`);return}return t.error},T=(r,a)=>{const{errorAdvisories:t,names:o,shouldBlock:e}=g(r,y(a));if(e)return`${t.length.toString()} ERROR-level ${t.length===1?"advisory":"advisories"} (${o.join(", ")}). Pass --no-strict-advisories to downgrade this to a warning and continue.`},C=(r,a,t,o)=>{if(a.length===0&&t.length===0)return r.success("verify: project is valid"),{code:0,errors:[],warnings:[],wranglerPath:o};if(t.length>0){r.warn("verify: warnings:");for(const e of t)r.warn(` - ${e}`)}if(a.length>0){r.error("verify: errors:");for(const e of a){r.error(` - ${e}`);const n=k(e);n!==void 0&&r.error(n)}return{code:1,error:a[0],errors:a,warnings:t,wranglerPath:o}}return r.success("verify: project is valid (with warnings)"),{code:0,errors:[],warnings:t,wranglerPath:o}},H=async r=>{const a=r.cwd??process.cwd(),{logger:t}=r,o=$({environment:r.env,projectRoot:a}),e=[...o.report.errors],n=[...o.report.warnings];try{const s=S(a,r.target);if(s.target===void 0){const c=s.error??"unknown deploy target";return t.error(c),{code:E.USAGE,error:c,errors:[c],warnings:[],wranglerPath:void 0}}const i=u({apiSpec:r.apiSpec,dryRun:!0,projectRoot:a,target:s.target}),f=v(i.platformDiagnostics,t);e.push(...f.errors),n.push(...f.warnings);const l=T(i.advisories,r);l!==void 0&&e.push(l);const h=A({allowDrift:r.allowSchemaDrift===!0,codegen:i,command:"verify",logger:t,readOnly:!0});h.blocked&&e.push(h.reason)}catch(s){const i=s instanceof Error?s.message:String(s);e.push(`codegen failed: ${i}`)}if(r.typecheck!==!1){const s=await x(a,r.spawner??R,r.format??"pretty");s.error!==void 0&&e.push(s.error),s.warning!==void 0&&n.push(s.warning)}const d=await P(r,t);return d!==void 0&&e.push(d),C(t,e,n,o.wranglerPath)},J=j(async({cwd:r,format:a,logger:t,options:o})=>{const e=await H({allowSchemaDrift:o.allowSchemaDrift===!0,apiSpec:w(o.apiSpec),cwd:r,env:o.env,format:a,healthUrl:o.healthUrl,logger:t,strictAdvisories:o.strictAdvisories,target:o.target,typecheck:o.typecheck===!1?!1:void 0});return{code:e.code,data:{errors:e.errors,warnings:e.warnings,wranglerPath:e.wranglerPath},error:e.error}});export{J as execute,H as runVerifyCommand};
1
+ import{existsSync as p}from"node:fs";import{join as m}from"node:path";import{runCodegen as u}from"@lunora/codegen";import{validateWranglerProject as g,wranglerCodegenInputs as v}from"@lunora/config/cloudflare";import{a as w,e as y,r as S}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as k,r as j}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{r as E}from"../packem_shared/codegen-error-AmH54ofi.mjs";import{d as A}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as D}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{r as R,p as $}from"../packem_shared/health-probe-Bw9JFfIy.mjs";import{defaultSpawner as b}from"../packem_shared/createRecordingSpawner-Ch7zuQQE.mjs";import{execArgsFor as U,detectPackageManager as x}from"@lunora/config";const P=async(r,a,t)=>{if(!p(m(r,"tsconfig.json")))return{warning:"no tsconfig.json found — skipping TypeScript type-check"};const o=U(x(r),"tsc",["--noEmit","-p","tsconfig.json"]),e=await a({args:o.args,command:o.command,cwd:r,stdoutToStderr:t==="json"});return e.code===0?{}:{error:`type errors: tsc --noEmit exited ${String(e.code)}`}},T=async(r,a)=>{if(r.healthUrl===void 0||r.healthUrl==="")return;const t=await $({baseUrl:r.healthUrl,fetchImpl:r.healthFetch});if(t.error===void 0){a.success(`verify: health probe ok (${t.url})`);return}return t.error},C=(r,a)=>{const{errorAdvisories:t,names:o,shouldBlock:e}=y(r,S(a));if(e)return`${t.length.toString()} ERROR-level ${t.length===1?"advisory":"advisories"} (${o.join(", ")}). Pass --no-strict-advisories to downgrade this to a warning and continue.`},H=(r,a,t,o)=>{if(a.length===0&&t.length===0)return r.success("verify: project is valid"),{code:0,errors:[],warnings:[],wranglerPath:o};if(t.length>0){r.warn("verify: warnings:");for(const e of t)r.warn(` - ${e}`)}if(a.length>0){r.error("verify: errors:");for(const e of a){r.error(` - ${e}`);const s=E(e);s!==void 0&&r.error(s)}return{code:1,error:a[0],errors:a,warnings:t,wranglerPath:o}}return r.success("verify: project is valid (with warnings)"),{code:0,errors:[],warnings:t,wranglerPath:o}},I=async r=>{const a=r.cwd??process.cwd(),{logger:t}=r,o=g({environment:r.env,projectRoot:a}),e=[...o.report.errors],s=[...o.report.warnings];try{const n=j(a,r.target);if(n.target===void 0){const c=n.error??"unknown deploy target";return t.error(c),{code:D.USAGE,error:c,errors:[c],warnings:[],wranglerPath:void 0}}const i=u({apiSpec:r.apiSpec,dryRun:!0,projectRoot:a,target:n.target,...v(a)}),f=w(i.platformDiagnostics,t);e.push(...f.errors),s.push(...f.warnings);const l=C(i.advisories,r);l!==void 0&&e.push(l);const h=R({allowDrift:r.allowSchemaDrift===!0,codegen:i,command:"verify",logger:t,readOnly:!0});h.blocked&&e.push(h.reason)}catch(n){const i=n instanceof Error?n.message:String(n);e.push(`codegen failed: ${i}`)}if(r.typecheck!==!1){const n=await P(a,r.spawner??b,r.format??"pretty");n.error!==void 0&&e.push(n.error),n.warning!==void 0&&s.push(n.warning)}const d=await T(r,t);return d!==void 0&&e.push(d),H(t,e,s,o.wranglerPath)},K=A(async({cwd:r,format:a,logger:t,options:o})=>{const e=await I({allowSchemaDrift:o.allowSchemaDrift===!0,apiSpec:k(o.apiSpec),cwd:r,env:o.env,format:a,healthUrl:o.healthUrl,logger:t,strictAdvisories:o.strictAdvisories,target:o.target,typecheck:o.typecheck===!1?!1:void 0});return{code:e.code,data:{errors:e.errors,warnings:e.warnings,wranglerPath:e.wranglerPath},error:e.error}});export{K as execute,I as runVerifyCommand};
@@ -1,7 +1,7 @@
1
- import{writeFileSync as h,existsSync as S,readFileSync as p}from"node:fs";import{isAbsolute as v,join as w}from"node:path";import{byCodepoint as b,scoreAdvisor as y,parseAdvisorMap as x,compareToBaseline as j}from"@lunora/advisor";import{runCodegen as A}from"@lunora/codegen";import{d as M}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as D}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{D as u}from"../packem_shared/cli-6BRlq6nw.mjs";const l={clean:"·",exempt:"–",failing:"✗",warned:"!"},d=(e,r)=>e.length>=r?e:e+" ".repeat(r-e.length),E=e=>`${e.id} (${e.visibility} ${e.kind})`,f=e=>{let r=0;for(const n of e)r=Math.max(r,n.id.length);return r},g=(e,r)=>` ${d(String(e.score),3)} ${l[e.coverage]} ${d(e.id,r)} ${e.visibility} ${e.kind}`,R=e=>{if(!e.comparable)return[` baseline not comparable (${e.reason}) — regenerate it; this run cannot verify anything`];if(!e.regressed)return[` no regression against baseline (score ${e.scoreDelta>=0?"+":""}${String(e.scoreDelta)})`];const r=[` REGRESSED against baseline (score ${e.scoreDelta>=0?"+":""}${String(e.scoreDelta)})`];for(const n of e.dropped)r.push(` ${n.id}: ${String(n.before)} → ${String(n.after)}`);for(const n of e.newFailing)r.push(` ${n}: now failing`);for(const n of e.worsened)r.push(` ${n}: more findings than the baseline`);return e.projectRegressed&&r.push(" project: new schema/config rules fired"),r},F=(e,r)=>{const n=e.procedures.filter(i=>i.coverage!=="clean"&&i.coverage!=="exempt"),t=f(n),o=[`advisor health ${String(e.score)}/100 — ${e.grade}`,` ${String(e.summary.clean)} clean · ${String(e.summary.warned)} warned · ${String(e.summary.failing)} failing · ${String(e.summary.exempt)} exempt (${String(e.summary.procedures)} procedures, ${String(e.summary.rulesFired)} rules fired)`];return e.project.checks.length>0&&o.push("",` project ${String(e.project.score)}/100 — ${e.project.checks.map(i=>i.name).join(", ")}`),n.length>0&&o.push("",...n.map(i=>g(i,t)),""," run with --all for every procedure, or --entry <file#export> for one"),r!==void 0&&o.push("",...R(r)),o.join(`
2
- `)},k=e=>e.coverage==="exempt"?[` exempt: ${e.exemptReason===void 0||e.exemptReason===""?"no reason given":e.exemptReason}`]:e.checks.map(r=>{const n=r.occurrences>1?`, ×${String(r.occurrences)}`:"";return` ${r.name} (−${String(r.weight)}${n})`}),T=e=>{const r=new Map;for(const n of e){const t=r.get(n.file);t===void 0?r.set(n.file,[n]):t.push(n)}return[...r].toSorted(([n],[t])=>b(n,t))},B=e=>{const r=f(e.procedures),n=[`advisor health ${String(e.score)}/100 — ${e.grade}`,"",` legend: ${l.clean} clean ${l.warned} warned ${l.failing} failing ${l.exempt} exempt`];for(const[t,o]of T(e.procedures)){n.push("",` ${t}`);for(const i of o)n.push(g(i,r),...k(i))}return n.join(`
3
- `)},C=(e,r)=>{const n=e.procedures.find(o=>o.id===r);if(n===void 0){const o=e.procedures.slice(0,10).map(i=>` ${i.id}`);return[`no procedure ${r} in the map. Known ids:`,...o,e.procedures.length>10?" …":""].filter(Boolean).join(`
4
- `)}const t=[`${E(n)} — ${String(n.score)}/100, ${n.coverage}`,` weight in the global mean: ${String(n.weight)}`];if(n.checks.length===0)return t.push(""," no rule fired"),t.join(`
1
+ import{writeFileSync as h,existsSync as S,readFileSync as p}from"node:fs";import{isAbsolute as w,join as v}from"node:path";import{byCodepoint as b,scoreAdvisor as y,parseAdvisorMap as x,compareToBaseline as j}from"@lunora/advisor";import{runCodegen as A}from"@lunora/codegen";import{wranglerCodegenInputs as M}from"@lunora/config/cloudflare";import{d as D}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as E}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{D as u}from"../packem_shared/cli-6BRlq6nw.mjs";const l={clean:"·",exempt:"–",failing:"✗",warned:"!"},d=(e,r)=>e.length>=r?e:e+" ".repeat(r-e.length),R=e=>`${e.id} (${e.visibility} ${e.kind})`,f=e=>{let r=0;for(const n of e)r=Math.max(r,n.id.length);return r},g=(e,r)=>` ${d(String(e.score),3)} ${l[e.coverage]} ${d(e.id,r)} ${e.visibility} ${e.kind}`,F=e=>{if(!e.comparable)return[` baseline not comparable (${e.reason}) — regenerate it; this run cannot verify anything`];if(!e.regressed)return[` no regression against baseline (score ${e.scoreDelta>=0?"+":""}${String(e.scoreDelta)})`];const r=[` REGRESSED against baseline (score ${e.scoreDelta>=0?"+":""}${String(e.scoreDelta)})`];for(const n of e.dropped)r.push(` ${n.id}: ${String(n.before)} → ${String(n.after)}`);for(const n of e.newFailing)r.push(` ${n}: now failing`);for(const n of e.worsened)r.push(` ${n}: more findings than the baseline`);return e.projectRegressed&&r.push(" project: new schema/config rules fired"),r},k=(e,r)=>{const n=e.procedures.filter(i=>i.coverage!=="clean"&&i.coverage!=="exempt"),t=f(n),o=[`advisor health ${String(e.score)}/100 — ${e.grade}`,` ${String(e.summary.clean)} clean · ${String(e.summary.warned)} warned · ${String(e.summary.failing)} failing · ${String(e.summary.exempt)} exempt (${String(e.summary.procedures)} procedures, ${String(e.summary.rulesFired)} rules fired)`];return e.project.checks.length>0&&o.push("",` project ${String(e.project.score)}/100 — ${e.project.checks.map(i=>i.name).join(", ")}`),n.length>0&&o.push("",...n.map(i=>g(i,t)),""," run with --all for every procedure, or --entry <file#export> for one"),r!==void 0&&o.push("",...F(r)),o.join(`
2
+ `)},C=e=>e.coverage==="exempt"?[` exempt: ${e.exemptReason===void 0||e.exemptReason===""?"no reason given":e.exemptReason}`]:e.checks.map(r=>{const n=r.occurrences>1?`, ×${String(r.occurrences)}`:"";return` ${r.name} (−${String(r.weight)}${n})`}),T=e=>{const r=new Map;for(const n of e){const t=r.get(n.file);t===void 0?r.set(n.file,[n]):t.push(n)}return[...r].toSorted(([n],[t])=>b(n,t))},B=e=>{const r=f(e.procedures),n=[`advisor health ${String(e.score)}/100 — ${e.grade}`,"",` legend: ${l.clean} clean ${l.warned} warned ${l.failing} failing ${l.exempt} exempt`];for(const[t,o]of T(e.procedures)){n.push("",` ${t}`);for(const i of o)n.push(g(i,r),...C(i))}return n.join(`
3
+ `)},I=(e,r)=>{const n=e.procedures.find(o=>o.id===r);if(n===void 0){const o=e.procedures.slice(0,10).map(i=>` ${i.id}`);return[`no procedure ${r} in the map. Known ids:`,...o,e.procedures.length>10?" …":""].filter(Boolean).join(`
4
+ `)}const t=[`${R(n)} — ${String(n.score)}/100, ${n.coverage}`,` weight in the global mean: ${String(n.weight)}`];if(n.checks.length===0)return t.push(""," no rule fired"),t.join(`
5
5
  `);t.push(""," rules fired:");for(const o of n.checks)t.push(` [${o.level}] ${o.name} −${String(o.weight)}${o.occurrences>1?` (×${String(o.occurrences)})`:""}`);return t.join(`
6
- `)},I=new Date(0).toISOString(),m=(e,r)=>v(r)?r:w(e,r),L=e=>{if(e===void 0)return{value:void 0};if(e===null||e==="")return{error:"--min-score needs a value between 0 and 100"};const r=Number(e);return Number.isFinite(r)&&r>=0&&r<=100?{value:r}:{error:"--min-score must be a number between 0 and 100"}},N=(e,r,n)=>{const t=m(r,n===null||n===""?u:n);if(!S(t))return{error:`baseline not found at ${t} — generate one with \`lunora advisor\` and commit it`};const o=x(JSON.parse(p(t,"utf8")));return o===void 0?{error:`baseline at ${t} is malformed — regenerate it with \`lunora advisor\``}:{comparison:j(e,o)}},P=e=>`baseline is not comparable (${e}) — regenerate it; this run verified nothing`,_=(e,r,n)=>r.entry!==void 0?C(e,r.entry):r.all===!0?B(e):F(e,n),G=e=>{const r=e.cwd??process.cwd(),n=e.format==="json",{logger:t}=e,o=L(e.minScore);if("error"in o)return e.logger.error(o.error),{code:D.USAGE,error:o.error};const{advisorContext:i,advisories:$}=A({dryRun:!0,projectRoot:r}),a=y(i?.procedureProtections??[],$,{generatedAt:e.generatedAt??I}),s={map:a};if(e.baseline!==void 0){const c=N(a,r,e.baseline);if("error"in c)return e.logger.error(c.error),{...s,error:c.error};s.comparison=c.comparison,c.comparison.comparable||e.logger.error(P(c.comparison.reason))}if(e.write!==!1){const c=m(r,e.out??u);h(c,`${JSON.stringify(a,void 0,4)}
7
- `,"utf8"),s.written=c}return s.belowMinScore=o.value!==void 0&&a.score<o.value,s.belowMinScore&&t.error(`advisor score ${String(a.score)} is below the required ${String(o.value)}`),n||(t.info(_(a,e,s.comparison)),s.written!==void 0&&t.success(`wrote ${s.written}`)),s},H=e=>e.error!==void 0||e.belowMinScore===!0?!0:e.comparison!==void 0&&(!e.comparison.comparable||e.comparison.regressed),z=M(({cwd:e,format:r,logger:n,options:t})=>{const o=G({all:t.all,baseline:t.baseline,cwd:e,entry:t.entry,format:r,logger:n,minScore:t.minScore,out:t.out,write:t.write});return{code:o.code??(H(o)?1:0),data:{belowMinScore:o.belowMinScore,comparison:o.comparison,map:o.map,written:o.written},error:o.error}});export{z as execute,G as runAdvisorCommand};
6
+ `)},L=new Date(0).toISOString(),m=(e,r)=>w(r)?r:v(e,r),N=e=>{if(e===void 0)return{value:void 0};if(e===null||e==="")return{error:"--min-score needs a value between 0 and 100"};const r=Number(e);return Number.isFinite(r)&&r>=0&&r<=100?{value:r}:{error:"--min-score must be a number between 0 and 100"}},P=(e,r,n)=>{const t=m(r,n===null||n===""?u:n);if(!S(t))return{error:`baseline not found at ${t} — generate one with \`lunora advisor\` and commit it`};const o=x(JSON.parse(p(t,"utf8")));return o===void 0?{error:`baseline at ${t} is malformed — regenerate it with \`lunora advisor\``}:{comparison:j(e,o)}},_=e=>`baseline is not comparable (${e}) — regenerate it; this run verified nothing`,G=(e,r,n)=>r.entry!==void 0?I(e,r.entry):r.all===!0?B(e):k(e,n),H=e=>{const r=e.cwd??process.cwd(),n=e.format==="json",{logger:t}=e,o=N(e.minScore);if("error"in o)return e.logger.error(o.error),{code:E.USAGE,error:o.error};const{advisorContext:i,advisories:$}=A({dryRun:!0,projectRoot:r,...M(r)}),a=y(i?.procedureProtections??[],$,{generatedAt:e.generatedAt??L}),s={map:a};if(e.baseline!==void 0){const c=P(a,r,e.baseline);if("error"in c)return e.logger.error(c.error),{...s,error:c.error};s.comparison=c.comparison,c.comparison.comparable||e.logger.error(_(c.comparison.reason))}if(e.write!==!1){const c=m(r,e.out??u);h(c,`${JSON.stringify(a,void 0,4)}
7
+ `,"utf8"),s.written=c}return s.belowMinScore=o.value!==void 0&&a.score<o.value,s.belowMinScore&&t.error(`advisor score ${String(a.score)} is below the required ${String(o.value)}`),n||(t.info(G(a,e,s.comparison)),s.written!==void 0&&t.success(`wrote ${s.written}`)),s},J=e=>e.error!==void 0||e.belowMinScore===!0?!0:e.comparison!==void 0&&(!e.comparison.comparable||e.comparison.regressed),V=D(({cwd:e,format:r,logger:n,options:t})=>{const o=H({all:t.all,baseline:t.baseline,cwd:e,entry:t.entry,format:r,logger:n,minScore:t.minScore,out:t.out,write:t.write});return{code:o.code??(J(o)?1:0),data:{belowMinScore:o.belowMinScore,comparison:o.comparison,map:o.map,written:o.written},error:o.error}});export{V as execute,H as runAdvisorCommand};
@@ -1,3 +1,3 @@
1
- import{existsSync as E,readFileSync as P}from"node:fs";import{join as D}from"node:path";import{DEV_VARS_FILE as m,DEV_VARS_KEY_PATTERN as b,writeDevVariablesFileAtomically as w,removeDevVariableLine as K,upsertDevVariableLine as _,isPlaceholderValue as S,detectPackageManager as j,resolveDeployDriver as z,resolveProjectTarget as M,toolchainExecArgs as T,generateSecretValue as C,DEV_VARS_EXAMPLE_FILE as g,parseDevVariableEntries as G,packageNamesFromBindings as O,inferLunoraBindings as Y,resolveSchemaDirectory as F,requiredSecrets as q,isMintableSecretKey as U}from"@lunora/config";import{d as Z}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as d}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{defaultSpawner as B}from"../packem_shared/createRecordingSpawner-Ch7zuQQE.mjs";import{l as I}from"../packem_shared/wrangler-secrets-3chIVv3H.mjs";const X=/[\r\n]/u,H=/["\\]/u,L=e=>new Map(G(e).map(o=>[o.key,o])),h=e=>E(e)?P(e,"utf8"):"",N=e=>e.length<=4?"****":`${e.slice(0,4)}${"*".repeat(Math.min(8,e.length-4))}`,p=e=>L(h(e)),$=e=>e.env??(e.prod===!0?"production":void 0),W=e=>{const o=p(e.devVariablesPath),t={file:m,keys:[...o.keys()],subcommand:"list"};if(o.size===0)return e.logger.info(`${m}: (empty)`),{code:0,data:t,descriptors:[]};for(const r of o.values())e.logger.info(`${r.key}=${N(r.value)}`);return{code:0,data:t,descriptors:[]}},J=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env get requires a key. Usage: lunora env get <KEY>"),{code:d.USAGE,descriptors:[]};const s=p(o).get(r.key);return s?(r.format!=="json"&&process.stdout.write(`${s.value}
2
- `),{code:0,data:{key:r.key,subcommand:"get",value:s.value},descriptors:[]}):(t.error(`env: ${r.key} is not set in ${m}`),{code:d.NOT_FOUND,descriptors:[]})},Q=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env set requires a key. Usage: lunora env set <KEY> <VALUE>"),{code:d.USAGE,descriptors:[]};if(!b.test(r.key))return t.error(`env: invalid key "${r.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};if(r.value===void 0)return t.error("env set requires a value. Usage: lunora env set <KEY> <VALUE>"),{code:d.USAGE,descriptors:[]};if(X.test(r.value))return t.error(`env: value for "${r.key}" contains a newline, which .dev.vars cannot represent`),{code:d.USAGE,descriptors:[]};if(H.test(r.value))return t.error(`env: value for "${r.key}" contains a double-quote or backslash, which .dev.vars cannot round-trip`),{code:d.USAGE,descriptors:[]};const s=h(o);return w(o,_(s,r.key,r.value)),t.success(`env: set ${r.key} (${N(r.value)}) in ${m}`),{code:0,data:{key:r.key,subcommand:"set"},descriptors:[]}},x=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env unset requires a key. Usage: lunora env unset <KEY>"),{code:d.USAGE,descriptors:[]};if(!b.test(r.key))return t.error(`env: invalid key "${r.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};const s=h(o);return L(s).has(r.key)?(w(o,K(s,r.key)),t.success(`env: unset ${r.key} in ${m}`),{code:0,data:{key:r.key,removed:!0,subcommand:"unset"},descriptors:[]}):(t.warn(`env: ${r.key} was not set in ${m}`),{code:0,data:{key:r.key,removed:!1,subcommand:"unset"},descriptors:[]})},ee=async e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.yes)return t.error("env push uploads secrets to Cloudflare. Re-run with --yes to confirm."),{code:d.USAGE,descriptors:[]};const s=p(o);if(s.size===0)return t.warn(`${m}: nothing to push (empty)`),{code:0,data:{pushed:[],subcommand:"push",target:$(r)},descriptors:[]};const n=[...s.values()].filter(a=>S(a.value)).map(a=>a.key);if(n.length>0)return t.error(`env push: refusing to upload placeholder value(s) for ${n.join(", ")} — run \`lunora env doctor\` to review, and \`lunora env generate --set\` (or \`lunora env set <KEY> <VALUE>\`) to fill them, then re-run.`),{code:d.USAGE,descriptors:[]};const c=r.spawner??B,u=r.cwd??process.cwd(),l=j(u),i=[],v=$(r),f=z(M(u)),y=f.toolchain?.secretPut;if(y===void 0)return t.error(`deploy target "${f.id}" has no secret store; cannot push secrets`),{code:d.USAGE,descriptors:[]};for(const a of s.values()){const R=y({environment:v,key:a.key,temporary:r.temporary}),A=T(l,R),V={args:A.args,command:A.command,cwd:u,input:a.value};i.push(V),t.info(`pushing ${a.key} -> wrangler secret${v===void 0?"":` (${v})`}`);const k=await c(V);if(k.code!==0)return t.error(`env push: failed at ${a.key} (exit ${String(k.code)})`),{code:k.code,descriptors:i}}return t.success(`env: pushed ${String(s.size)} secret(s)`),{code:0,data:{pushed:[...s.keys()],subcommand:"push",target:v},descriptors:i}},re=e=>(e.options.secretLister??I)({cwd:e.cwd,env:$(e.options),temporary:e.options.temporary}),te=async e=>{const{devVariablesPath:o,logger:t}=e,r=await re(e);if(!r.ok)return t.error(`env diff: ${r.error??"failed to list remote secrets"}`),{code:1,descriptors:[]};const s=new Set(p(o).keys()),n=new Set(r.names),c=[...s].filter(i=>!n.has(i)).toSorted((i,v)=>i.localeCompare(v)),u=r.names.filter(i=>!s.has(i)),l=[...s].filter(i=>n.has(i)).toSorted((i,v)=>i.localeCompare(v));for(const i of c)t.info(`local only (run \`lunora env push\`): ${i}`);for(const i of u)t.info(`remote only (in Cloudflare, not ${m}): ${i}`);return t.info(`in both: ${String(l.length)} secret(s)`),c.length===0&&u.length===0&&t.success("env diff: local and remote secret names match"),{code:0,data:{both:l,localOnly:c,remoteOnly:u,subcommand:"diff"},descriptors:[]}},se=e=>{const{cwd:o,devVariablesPath:t,logger:r}=e,s=D(o,g);if(!E(s))return r.info(`env doctor: no ${g} to check against — nothing to validate.`),{code:0,data:{extra:[],missing:[],ok:!0,placeholders:[],subcommand:"doctor"},descriptors:[]};const n=G(P(s,"utf8")).map(a=>a.key),c=p(t);if(!E(t))return r.error(`env doctor: ${m} is missing. Run \`lunora dev\` to scaffold it, or \`lunora env set <KEY> <VALUE>\`.`),r.info(`expected (from ${g}): ${n.join(", ")}`),{code:d.NOT_FOUND,descriptors:[]};const u=n.filter(a=>!c.has(a)),l=[...c.values()].filter(a=>S(a.value)).map(a=>a.key),i=new Set(n),v=[...c.keys()].filter(a=>!i.has(a));for(const a of u)r.error(`missing: ${a} is in ${g} but not ${m}`);for(const a of l)r.error(`unset: ${a} still has a placeholder value`);for(const a of v)r.info(`extra: ${a} is set locally but not listed in ${g}`);const f=u.length===0&&l.length===0,y={extra:v,missing:u,ok:f,placeholders:l,subcommand:"doctor"};return f?(r.success(`env doctor: ${m} looks good (${String(c.size)} var(s)).`),{code:0,data:y,descriptors:[]}):{code:1,data:y,descriptors:[]}},oe=async e=>{let o=[];try{o=O(await Y({projectRoot:e.cwd,schemaDir:F(e.cwd)}))}catch{}const t=q(o).map(s=>s.key).filter(s=>U(s)),r=[...p(e.devVariablesPath).keys()].filter(s=>U(s));return[...new Set([...t,...r])]},ne=(e,o,t)=>{const r=p(e),s=n=>{const c=r.get(n);return c!==void 0&&c.value!==""&&!S(c.value)};return{live:o.filter(n=>s(n.key)).map(n=>n.key),writable:t?o:o.filter(n=>!s(n.key))}},ae=(e,o)=>{const{devVariablesPath:t,logger:r,options:s}=e,{live:n,writable:c}=ne(t,o,s.yes===!0);if(c.length===0)return r.error(`env generate --set: ${n.join(", ")} already hold(s) a live secret and rotating it is irreversible (outstanding signed URLs and bearers stop verifying). Re-run with --yes to rotate anyway.`),{code:d.USAGE,descriptors:[]};n.length>0&&r.warn(`env generate --set: left ${n.join(", ")} untouched (already set) — re-run with --yes to rotate them too`);let u=h(t);for(const l of c)u=_(u,l.key,l.value);return w(t,u),r.success(`env: generated ${String(c.length)} secret(s) into ${m}: ${c.map(l=>l.key).join(", ")}`),{code:0,data:{subcommand:"generate",written:c.map(l=>l.key)},descriptors:[]}},ce=async e=>{const{logger:o,options:t}=e;let r;if(t.key===void 0){if(r=await oe(e),r.length===0)return o.info("env generate: no locally-generatable secrets for this project. Name one explicitly: lunora env generate <KEY>"),{code:0,data:{secrets:[],subcommand:"generate"},descriptors:[]}}else{if(!b.test(t.key))return o.error(`env: invalid key "${t.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};r=[t.key]}const s=r.map(n=>({key:n,value:C()}));if(t.set===!0)return ae(e,s);if(t.format!=="json")for(const n of s)process.stdout.write(`${n.key}=${n.value}
1
+ import{existsSync as E,readFileSync as P}from"node:fs";import{join as D}from"node:path";import{DEV_VARS_FILE as m,DEV_VARS_KEY_PATTERN as b,writeDevVariablesFileAtomically as w,removeDevVariableLine as K,upsertDevVariableLine as _,isPlaceholderValue as S,detectPackageManager as j,resolveDeployDriver as z,resolveProjectTarget as M,toolchainExecArgs as T,generateSecretValue as C,DEV_VARS_EXAMPLE_FILE as g,parseDevVariableEntries as G,secretSourcesFromBindings as O,inferLunoraBindings as Y,resolveSchemaDirectory as F,requiredSecrets as q,isMintableSecretKey as U}from"@lunora/config";import{d as Z}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as d}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{defaultSpawner as B}from"../packem_shared/createRecordingSpawner-Ch7zuQQE.mjs";import{l as I}from"../packem_shared/wrangler-secrets-3chIVv3H.mjs";const X=/[\r\n]/u,H=/["\\]/u,L=e=>new Map(G(e).map(o=>[o.key,o])),h=e=>E(e)?P(e,"utf8"):"",R=e=>e.length<=4?"****":`${e.slice(0,4)}${"*".repeat(Math.min(8,e.length-4))}`,p=e=>L(h(e)),$=e=>e.env??(e.prod===!0?"production":void 0),W=e=>{const o=p(e.devVariablesPath),t={file:m,keys:[...o.keys()],subcommand:"list"};if(o.size===0)return e.logger.info(`${m}: (empty)`),{code:0,data:t,descriptors:[]};for(const r of o.values())e.logger.info(`${r.key}=${R(r.value)}`);return{code:0,data:t,descriptors:[]}},J=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env get requires a key. Usage: lunora env get <KEY>"),{code:d.USAGE,descriptors:[]};const s=p(o).get(r.key);return s?(r.format!=="json"&&process.stdout.write(`${s.value}
2
+ `),{code:0,data:{key:r.key,subcommand:"get",value:s.value},descriptors:[]}):(t.error(`env: ${r.key} is not set in ${m}`),{code:d.NOT_FOUND,descriptors:[]})},Q=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env set requires a key. Usage: lunora env set <KEY> <VALUE>"),{code:d.USAGE,descriptors:[]};if(!b.test(r.key))return t.error(`env: invalid key "${r.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};if(r.value===void 0)return t.error("env set requires a value. Usage: lunora env set <KEY> <VALUE>"),{code:d.USAGE,descriptors:[]};if(X.test(r.value))return t.error(`env: value for "${r.key}" contains a newline, which .dev.vars cannot represent`),{code:d.USAGE,descriptors:[]};if(H.test(r.value))return t.error(`env: value for "${r.key}" contains a double-quote or backslash, which .dev.vars cannot round-trip`),{code:d.USAGE,descriptors:[]};const s=h(o);return w(o,_(s,r.key,r.value)),t.success(`env: set ${r.key} (${R(r.value)}) in ${m}`),{code:0,data:{key:r.key,subcommand:"set"},descriptors:[]}},x=e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.key)return t.error("env unset requires a key. Usage: lunora env unset <KEY>"),{code:d.USAGE,descriptors:[]};if(!b.test(r.key))return t.error(`env: invalid key "${r.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};const s=h(o);return L(s).has(r.key)?(w(o,K(s,r.key)),t.success(`env: unset ${r.key} in ${m}`),{code:0,data:{key:r.key,removed:!0,subcommand:"unset"},descriptors:[]}):(t.warn(`env: ${r.key} was not set in ${m}`),{code:0,data:{key:r.key,removed:!1,subcommand:"unset"},descriptors:[]})},ee=async e=>{const{devVariablesPath:o,logger:t,options:r}=e;if(!r.yes)return t.error("env push uploads secrets to Cloudflare. Re-run with --yes to confirm."),{code:d.USAGE,descriptors:[]};const s=p(o);if(s.size===0)return t.warn(`${m}: nothing to push (empty)`),{code:0,data:{pushed:[],subcommand:"push",target:$(r)},descriptors:[]};const n=[...s.values()].filter(a=>S(a.value)).map(a=>a.key);if(n.length>0)return t.error(`env push: refusing to upload placeholder value(s) for ${n.join(", ")} — run \`lunora env doctor\` to review, and \`lunora env generate --set\` (or \`lunora env set <KEY> <VALUE>\`) to fill them, then re-run.`),{code:d.USAGE,descriptors:[]};const c=r.spawner??B,u=r.cwd??process.cwd(),l=j(u),i=[],v=$(r),f=z(M(u)),y=f.toolchain?.secretPut;if(y===void 0)return t.error(`deploy target "${f.id}" has no secret store; cannot push secrets`),{code:d.USAGE,descriptors:[]};for(const a of s.values()){const N=y({environment:v,key:a.key,temporary:r.temporary}),A=T(l,N),V={args:A.args,command:A.command,cwd:u,input:a.value};i.push(V),t.info(`pushing ${a.key} -> wrangler secret${v===void 0?"":` (${v})`}`);const k=await c(V);if(k.code!==0)return t.error(`env push: failed at ${a.key} (exit ${String(k.code)})`),{code:k.code,descriptors:i}}return t.success(`env: pushed ${String(s.size)} secret(s)`),{code:0,data:{pushed:[...s.keys()],subcommand:"push",target:v},descriptors:i}},re=e=>(e.options.secretLister??I)({cwd:e.cwd,env:$(e.options),temporary:e.options.temporary}),te=async e=>{const{devVariablesPath:o,logger:t}=e,r=await re(e);if(!r.ok)return t.error(`env diff: ${r.error??"failed to list remote secrets"}`),{code:1,descriptors:[]};const s=new Set(p(o).keys()),n=new Set(r.names),c=[...s].filter(i=>!n.has(i)).toSorted((i,v)=>i.localeCompare(v)),u=r.names.filter(i=>!s.has(i)),l=[...s].filter(i=>n.has(i)).toSorted((i,v)=>i.localeCompare(v));for(const i of c)t.info(`local only (run \`lunora env push\`): ${i}`);for(const i of u)t.info(`remote only (in Cloudflare, not ${m}): ${i}`);return t.info(`in both: ${String(l.length)} secret(s)`),c.length===0&&u.length===0&&t.success("env diff: local and remote secret names match"),{code:0,data:{both:l,localOnly:c,remoteOnly:u,subcommand:"diff"},descriptors:[]}},se=e=>{const{cwd:o,devVariablesPath:t,logger:r}=e,s=D(o,g);if(!E(s))return r.info(`env doctor: no ${g} to check against — nothing to validate.`),{code:0,data:{extra:[],missing:[],ok:!0,placeholders:[],subcommand:"doctor"},descriptors:[]};const n=G(P(s,"utf8")).map(a=>a.key),c=p(t);if(!E(t))return r.error(`env doctor: ${m} is missing. Run \`lunora dev\` to scaffold it, or \`lunora env set <KEY> <VALUE>\`.`),r.info(`expected (from ${g}): ${n.join(", ")}`),{code:d.NOT_FOUND,descriptors:[]};const u=n.filter(a=>!c.has(a)),l=[...c.values()].filter(a=>S(a.value)).map(a=>a.key),i=new Set(n),v=[...c.keys()].filter(a=>!i.has(a));for(const a of u)r.error(`missing: ${a} is in ${g} but not ${m}`);for(const a of l)r.error(`unset: ${a} still has a placeholder value`);for(const a of v)r.info(`extra: ${a} is set locally but not listed in ${g}`);const f=u.length===0&&l.length===0,y={extra:v,missing:u,ok:f,placeholders:l,subcommand:"doctor"};return f?(r.success(`env doctor: ${m} looks good (${String(c.size)} var(s)).`),{code:0,data:y,descriptors:[]}):{code:1,data:y,descriptors:[]}},oe=async e=>{let o=[];try{o=O(await Y({projectRoot:e.cwd,schemaDir:F(e.cwd)}))}catch{}const t=q(o).map(s=>s.key).filter(s=>U(s)),r=[...p(e.devVariablesPath).keys()].filter(s=>U(s));return[...new Set([...t,...r])]},ne=(e,o,t)=>{const r=p(e),s=n=>{const c=r.get(n);return c!==void 0&&c.value!==""&&!S(c.value)};return{live:o.filter(n=>s(n.key)).map(n=>n.key),writable:t?o:o.filter(n=>!s(n.key))}},ae=(e,o)=>{const{devVariablesPath:t,logger:r,options:s}=e,{live:n,writable:c}=ne(t,o,s.yes===!0);if(c.length===0)return r.error(`env generate --set: ${n.join(", ")} already hold(s) a live secret and rotating it is irreversible (outstanding signed URLs and bearers stop verifying). Re-run with --yes to rotate anyway.`),{code:d.USAGE,descriptors:[]};n.length>0&&r.warn(`env generate --set: left ${n.join(", ")} untouched (already set) — re-run with --yes to rotate them too`);let u=h(t);for(const l of c)u=_(u,l.key,l.value);return w(t,u),r.success(`env: generated ${String(c.length)} secret(s) into ${m}: ${c.map(l=>l.key).join(", ")}`),{code:0,data:{subcommand:"generate",written:c.map(l=>l.key)},descriptors:[]}},ce=async e=>{const{logger:o,options:t}=e;let r;if(t.key===void 0){if(r=await oe(e),r.length===0)return o.info("env generate: no locally-generatable secrets for this project. Name one explicitly: lunora env generate <KEY>"),{code:0,data:{secrets:[],subcommand:"generate"},descriptors:[]}}else{if(!b.test(t.key))return o.error(`env: invalid key "${t.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:d.USAGE,descriptors:[]};r=[t.key]}const s=r.map(n=>({key:n,value:C()}));if(t.set===!0)return ae(e,s);if(t.format!=="json")for(const n of s)process.stdout.write(`${n.key}=${n.value}
3
3
  `);return{code:0,data:{secrets:s,subcommand:"generate"},descriptors:[]}},ie=async e=>{const{options:o}=e;switch(o.subcommand){case"diff":return te(e);case"doctor":return se(e);case"generate":return ce(e);case"get":return J(e);case"list":return W(e);case"push":return ee(e);case"set":return Q(e);case"unset":return x(e);default:return e.logger.error(`env: unknown subcommand "${o.subcommand}"`),{code:d.USAGE,descriptors:[]}}},de=async e=>{const o=e.cwd??process.cwd(),t={cwd:o,devVariablesPath:D(o,m),logger:e.logger,options:e};return ie(t)},ue=new Set(["diff","doctor","generate","get","list","push","set","unset"]),le=e=>typeof e=="string"&&ue.has(e),ke=Z(({argument:e,cwd:o,format:t,logger:r,options:s})=>{const n=e[0];if(!le(n)){const c=`env: unknown subcommand "${n??""}" — expected list | get | set | unset | push | diff | doctor | generate`;return r.error(c),{code:d.USAGE,error:c}}return de({cwd:o,env:s.env,format:t,key:e[1],logger:r,prod:s.prod===!0,set:s.set===!0,subcommand:n,temporary:s.temporary===!0,value:e[2],yes:s.yes===!0})});export{ke as execute,de as runEnvCommand};
@@ -1,4 +1,4 @@
1
- import{runCodegen as v}from"@lunora/codegen";import{applyLintIgnores as h,detectLintTools as w,inferLunoraBindings as y,resolveSchemaDirectory as $}from"@lunora/config";import{warnCloudflareCliConfigOnce as A,collectWranglerSecretVariables as S,collectExportGaps as T}from"@lunora/config/cloudflare";import{r as D,a as x,e as C}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as k,r as b}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{d as E}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as I}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{r as L}from"../packem_shared/lint-ignore-report-DKZagpqk.mjs";const u=3,O=r=>{const s=r.cwd??process.cwd(),{logger:i}=r,e=D(r),o=b(s,r.target);if(o.target===void 0)return r.logger.error(o.error??"unknown deploy target"),{advisories:[],code:I.USAGE,cronTriggers:[],error:o.error??"unknown deploy target",failedAdvisories:0,outputDirectory:""};const{target:a}=o,t=v({apiSpec:r.apiSpec,projectRoot:s,target:a,wranglerVariables:S(s)}),l={advisories:t.advisories.map(n=>({detail:n.detail,level:n.level,name:n.name,remediation:n.remediation})),cronTriggers:t.cronTriggers,failedAdvisories:0,outputDirectory:t.outputDirectory};if(i.success(`codegen wrote ${t.writtenFiles.join(", ")} to ${t.outputDirectory}`),t.advisories.length>0){const n=t.advisories.length,f=t.advisories.map(c=>` [${c.level}] ${c.name} — ${c.detail}
1
+ import{runCodegen as v}from"@lunora/codegen";import{applyLintIgnores as h,detectLintTools as w,inferLunoraBindings as y,resolveSchemaDirectory as $}from"@lunora/config";import{warnCloudflareCliConfigOnce as A,wranglerCodegenInputs as T,collectExportGaps as C}from"@lunora/config/cloudflare";import{r as D,a as S,e as x}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as k,r as E}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{d as b}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as I}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{r as L}from"../packem_shared/lint-ignore-report-DKZagpqk.mjs";const u=3,O=r=>{const s=r.cwd??process.cwd(),{logger:i}=r,e=D(r),o=E(s,r.target);if(o.target===void 0)return r.logger.error(o.error??"unknown deploy target"),{advisories:[],code:I.USAGE,cronTriggers:[],error:o.error??"unknown deploy target",failedAdvisories:0,outputDirectory:""};const{target:a}=o,t=v({apiSpec:r.apiSpec,projectRoot:s,target:a,...T(s)}),d={advisories:t.advisories.map(n=>({detail:n.detail,level:n.level,name:n.name,remediation:n.remediation})),cronTriggers:t.cronTriggers,failedAdvisories:0,outputDirectory:t.outputDirectory};if(i.success(`codegen wrote ${t.writtenFiles.join(", ")} to ${t.outputDirectory}`),t.advisories.length>0){const n=t.advisories.length,f=t.advisories.map(c=>` [${c.level}] ${c.name} — ${c.detail}
2
2
  ↳ ${c.remediation}`);i.warn(`${n.toString()} schema ${n===1?"advisory":"advisories"}:
3
3
  ${f.join(`
4
- `)}`)}const g=x(t.platformDiagnostics,i);g.errors.length>0&&(l.error=g.errors.join("; "));const{errorAdvisories:d,names:p,shouldBlock:m}=C(l.advisories,e);return m&&i.error(`${d.length.toString()} ERROR-level ${d.length===1?"advisory":"advisories"} (${p.join(", ")}). Codegen wrote its output; this exit code is the gate. Pass --no-strict-advisories to downgrade it to a warning.`),t.cronTriggers.length>u&&i.warn(`${t.cronTriggers.length.toString()} distinct cron expressions declared — Cloudflare allows at most ${u.toString()} Cron Triggers per Worker. Consolidate schedules (jobs can share one expression) or move finer-grained work to Durable Object alarms via @lunora/scheduler (runAfter/runAt).`),{...l,failedAdvisories:e?d.length:0}},R=async(r,s)=>{let i;try{i=T(await y({projectRoot:r,schemaDir:$(r)}))}catch(e){s.warn(`could not check whether declared containers/workflows/agents are re-exported by the worker entry: ${e instanceof Error?e.message:String(e)}. Run \`lunora doctor\` to check explicitly.`);return}for(const e of i)s.warn(`${e.kind} "${e.exportName}" is declared but ${e.className} is not exported by the worker entry — add \`export * from "./lunora/_generated/${e.module}"\` so wrangler can provision its binding. Until then it deploys with nothing to run.`)},G=(r,s)=>{try{L(h(r,w(r)),s)}catch{}},F=E(async({cwd:r,format:s,logger:i,options:e})=>{const o=O({apiSpec:k(e.apiSpec),cwd:r,format:s,logger:i,strictAdvisories:e.strictAdvisories,target:e.target});if(o.outputDirectory!==""){const a=i;G(r,a),await R(r,a),A(r,t=>{a.warn(t)})}return{code:o.code??(o.error===void 0&&o.failedAdvisories===0?0:1),data:{advisories:o.advisories,cronTriggers:o.cronTriggers,failedAdvisories:o.failedAdvisories,outputDirectory:o.outputDirectory},error:o.error}});export{F as execute,O as runCodegenCommand};
4
+ `)}`)}const g=S(t.platformDiagnostics,i);g.errors.length>0&&(d.error=g.errors.join("; "));const{errorAdvisories:l,names:p,shouldBlock:m}=x(d.advisories,e);return m&&i.error(`${l.length.toString()} ERROR-level ${l.length===1?"advisory":"advisories"} (${p.join(", ")}). Codegen wrote its output; this exit code is the gate. Pass --no-strict-advisories to downgrade it to a warning.`),t.cronTriggers.length>u&&i.warn(`${t.cronTriggers.length.toString()} distinct cron expressions declared — Cloudflare allows at most ${u.toString()} Cron Triggers per Worker. Consolidate schedules (jobs can share one expression) or move finer-grained work to Durable Object alarms via @lunora/scheduler (runAfter/runAt).`),{...d,failedAdvisories:e?l.length:0}},R=async(r,s)=>{let i;try{i=C(await y({projectRoot:r,schemaDir:$(r)}))}catch(e){s.warn(`could not check whether declared containers/workflows/agents are re-exported by the worker entry: ${e instanceof Error?e.message:String(e)}. Run \`lunora doctor\` to check explicitly.`);return}for(const e of i)s.warn(`${e.kind} "${e.exportName}" is declared but ${e.className} is not exported by the worker entry — add \`export * from "./lunora/_generated/${e.module}"\` so wrangler can provision its binding. Until then it deploys with nothing to run.`)},G=(r,s)=>{try{L(h(r,w(r)),s)}catch{}},M=b(async({cwd:r,format:s,logger:i,options:e})=>{const o=O({apiSpec:k(e.apiSpec),cwd:r,format:s,logger:i,strictAdvisories:e.strictAdvisories,target:e.target});if(o.outputDirectory!==""){const a=i;G(r,a),await R(r,a),A(r,t=>{a.warn(t)})}return{code:o.code??(o.error===void 0&&o.failedAdvisories===0?0:1),data:{advisories:o.advisories,cronTriggers:o.cronTriggers,failedAdvisories:o.failedAdvisories,outputDirectory:o.outputDirectory},error:o.error}});export{M as execute,O as runCodegenCommand};
@@ -1,11 +1,11 @@
1
- import{dirname as F,join as B}from"node:path";import{discoverMigrations as te,readServiceBindings as ne,runCodegen as oe}from"@lunora/codegen";import{readLinkedProject as W,execArgsFor as H,detectPackageManager as b,discoverContainerInfo as V,COMPOSED_WORKER_ENTRY as N,writeLinkedProject as ae,discoverSchemaInfo as G,DEV_VARS_FILE as w,parseDevVariableEntries as K,isMintableSecretKey as I,packageNamesFromBindings as ie,inferLunoraBindings as q,resolveSchemaDirectory as R,requiredSecrets as se,generateSecretValue as ce,toolchainExecArgs as j,upsertDevVariableLine as de,writeDevVariablesFileAtomically as le,resolveDeployDriver as C,planToolchainInvocation as Y,runPostCodegenHook as ue}from"@lunora/config";import{findWranglerFile as z,readWranglerJsonc as P,mergeWranglerEnvironment as J,warnCloudflareCliConfigOnce as ge,validateWranglerProject as me,reconcileWranglerBindings as fe,reconcileWranglerCompatibilityDate as ve,reconcileWranglerCrons as he,describePreservedCrons as pe}from"@lunora/config/cloudflare";import{Spinner as ye}from"@visulima/spinner";import{r as we,a as ke,e as be}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as $e,a as Se}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{mkdirSync as De,writeFileSync as x,existsSync as p,readFileSync as k}from"node:fs";import{m as Ee,e as Ae,i as Re,b as je,a as Ce}from"../packem_shared/secret-key-BCrqNJ68.mjs";import{w as Pe}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{d as xe}from"../packem_shared/command-CAXl2A1S.mjs";import{r as _}from"../packem_shared/wrangler-name-Dsk5K1f-.mjs";import{EXIT_CODE as h}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{containerBuildTag as _e}from"@lunora/container";import{a as Te,i as Ne}from"../packem_shared/docker-DpVxvYpL.mjs";import{defaultSpawner as D}from"../packem_shared/createRecordingSpawner-Ch7zuQQE.mjs";import{r as X}from"../packem_shared/resolve-target-C_ZloTvd.mjs";import{p as Ie,H as Le,a as Me,r as Ue}from"../packem_shared/health-probe-Bw9JFfIy.mjs";import{join as y}from"@visulima/path";import{Project as Oe}from"ts-morph";import{runMigrateDataCommand as Fe}from"../packem_shared/runMigrateGenerateCommand-Ii_WMZEA.mjs";import{c as Be}from"../packem_shared/tui-prompts-B3YwUhGw.mjs";import{l as We}from"../packem_shared/wrangler-secrets-3chIVv3H.mjs";const He=Object.freeze({edges:[],nodes:[],modules:[],unresolved:[],version:1}),Ve=20,L=e=>`${e.from} -${e.kind}-> ${e.to}`,$=(e,r)=>{const o=new Set(e);return r.filter(t=>!o.has(t)).toSorted((t,n)=>t.localeCompare(n))},Ge=(e,r)=>{const o=e.modules.map(i=>i.name),t=r.modules.map(i=>i.name),n=e.edges.map(i=>L(i)),a=r.edges.map(i=>L(i));return{addedEdges:$(n,a),addedModules:$(o,t),removedEdges:$(a,n),removedModules:$(t,o)}},S=(e,r,o)=>{if(o.length===0)return[];const t=o.slice(0,Ve).map(a=>` ${e} ${a}`),n=o.length-t.length;return[`${r}:`,...t,...n>0?[` … and ${n.toString()} more`]:[]]},Ke=e=>{const r=[...S("+","modules added",e.addedModules),...S("-","modules removed",e.removedModules),...S("+","edges added",e.addedEdges),...S("-","edges removed",e.removedEdges)];return r.length===0?void 0:`architecture changes since the last deploy:
1
+ import{dirname as F,join as B}from"node:path";import{discoverMigrations as te,readServiceBindings as ne,runCodegen as oe}from"@lunora/codegen";import{readLinkedProject as W,execArgsFor as H,detectPackageManager as b,discoverContainerInfo as V,COMPOSED_WORKER_ENTRY as N,writeLinkedProject as ae,discoverSchemaInfo as G,DEV_VARS_FILE as w,parseDevVariableEntries as K,isMintableSecretKey as I,secretSourcesFromBindings as ie,inferLunoraBindings as q,resolveSchemaDirectory as R,requiredSecrets as se,generateSecretValue as ce,toolchainExecArgs as j,upsertDevVariableLine as de,writeDevVariablesFileAtomically as le,resolveDeployDriver as C,planToolchainInvocation as Y,runPostCodegenHook as ue}from"@lunora/config";import{findWranglerFile as z,readWranglerJsonc as P,mergeWranglerEnvironment as J,warnCloudflareCliConfigOnce as ge,validateWranglerProject as me,wranglerCodegenInputs as fe,reconcileWranglerBindings as ve,reconcileWranglerCompatibilityDate as he,reconcileWranglerCrons as pe,describePreservedCrons as ye}from"@lunora/config/cloudflare";import{Spinner as we}from"@visulima/spinner";import{r as ke,a as be,e as $e}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{p as Se,a as De}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{mkdirSync as Ee,writeFileSync as x,existsSync as p,readFileSync as k}from"node:fs";import{m as Ae,e as Re,i as je,b as Ce,a as Pe}from"../packem_shared/secret-key-BCrqNJ68.mjs";import{w as xe}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{d as _e}from"../packem_shared/command-CAXl2A1S.mjs";import{r as _}from"../packem_shared/wrangler-name-Dsk5K1f-.mjs";import{EXIT_CODE as h}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{containerBuildTag as Te}from"@lunora/container";import{a as Ne,i as Ie}from"../packem_shared/docker-DpVxvYpL.mjs";import{defaultSpawner as D}from"../packem_shared/createRecordingSpawner-Ch7zuQQE.mjs";import{r as X}from"../packem_shared/resolve-target-C_ZloTvd.mjs";import{p as Le,H as Me,a as Ue,r as Oe}from"../packem_shared/health-probe-Bw9JFfIy.mjs";import{join as y}from"@visulima/path";import{Project as Fe}from"ts-morph";import{runMigrateDataCommand as Be}from"../packem_shared/runMigrateGenerateCommand-Ii_WMZEA.mjs";import{c as We}from"../packem_shared/tui-prompts-B3YwUhGw.mjs";import{l as He}from"../packem_shared/wrangler-secrets-3chIVv3H.mjs";const Ve=Object.freeze({edges:[],nodes:[],modules:[],unresolved:[],version:1}),Ge=20,L=e=>`${e.from} -${e.kind}-> ${e.to}`,$=(e,r)=>{const o=new Set(e);return r.filter(t=>!o.has(t)).toSorted((t,n)=>t.localeCompare(n))},Ke=(e,r)=>{const o=e.modules.map(i=>i.name),t=r.modules.map(i=>i.name),n=e.edges.map(i=>L(i)),a=r.edges.map(i=>L(i));return{addedEdges:$(n,a),addedModules:$(o,t),removedEdges:$(a,n),removedModules:$(t,o)}},S=(e,r,o)=>{if(o.length===0)return[];const t=o.slice(0,Ge).map(a=>` ${e} ${a}`),n=o.length-t.length;return[`${r}:`,...t,...n>0?[` … and ${n.toString()} more`]:[]]},qe=e=>{const r=[...S("+","modules added",e.addedModules),...S("-","modules removed",e.removedModules),...S("+","edges added",e.addedEdges),...S("-","edges removed",e.removedEdges)];return r.length===0?void 0:`architecture changes since the last deploy:
2
2
  ${r.join(`
3
- `)}`},qe=(e,r)=>B(e,".lunora",r===void 0?"architecture.json":`architecture.${r}.json`),Ye=e=>{if(p(e))try{const r=JSON.parse(k(e,"utf8"));return r.version===1&&Array.isArray(r.modules)&&Array.isArray(r.edges)?r:void 0}catch{return}},ze=e=>{const{cwd:r,environment:o,logger:t}=e,n=qe(r,o),a=Ye(n),i=e.current??(a===void 0?void 0:He);if(i===void 0)return;const s=a===void 0?void 0:Ke(Ge(a,i));return s!==void 0&&t.info(s),()=>{try{De(F(n),{recursive:!0}),x(n,`${JSON.stringify(i,void 0,2)}
4
- `,"utf8")}catch(c){t.warn(`could not record the deployed architecture at ${n}: ${c instanceof Error?c.message:String(c)}`)}}},Je=e=>{const{cwd:r,env:o,logger:t,mintedSecretsFile:n}=e;try{const a=W(r),i=a?.workerName??_(r),s=e.url??a?.workerUrl;t.success("deploy complete"),t.info(` worker: ${i??"(see wrangler output above)"}`),o!==void 0&&t.info(` env: ${o}`),s===void 0?t.info(" url: run `lunora link --url <https://your-worker>` to record it"):t.info(` url: ${s}`),n!==void 0&&t.info(` secrets: generated value(s) recorded in ${n}`),e.logsAvailable&&t.info(" logs: lunora logs")}catch{}},Xe=async e=>{if(e.targets.length===0)return{builtTags:[],code:0};if(!(e.railpackAvailable??Te)()){const t="deploy blocked: a container uses `image: { build }` (Railpack), but Railpack isn't ready. Install the `railpack` CLI and start a BuildKit instance, e.g. `docker run --rm --privileged -d --name buildkit moby/buildkit` then `export BUILDKIT_HOST=docker-container://buildkit`. Alternatively switch the container's `image` to a Dockerfile path or a pre-built registry reference.";return e.logger.error(t),{builtTags:[],code:1,error:t}}const r=e.spawner??D,o=[];for(const t of e.targets){const n=_e(t.exportName),a={args:["build",t.buildDir,"--name",n],command:"railpack",cwd:e.cwd},i=H(b(e.cwd),"wrangler",["containers","push",n]),s={args:i.args,command:i.command,cwd:e.cwd};e.logger.info(`railpack: building "${t.exportName}" → ${n} from ${t.buildDir}`);const c=await r(a);if(c.code!==0){const d=`railpack build failed for container "${t.exportName}" (${t.buildDir})`;return e.logger.error(d),{builtTags:o,code:c.code,error:d}}e.logger.info(`railpack: pushing ${n} to the Cloudflare Registry`);const l=await r(s);if(l.code!==0){const d=`wrangler containers push failed for "${t.exportName}" (${n})`;return e.logger.error(d),{builtTags:o,code:l.code,error:d}}o.push(n)}return{builtTags:o,code:0}},Qe=e=>{const o=[z(e),B(e,"package.json")].filter(t=>t!==void 0&&p(t)).map(t=>[t,k(t,"utf8")]);return()=>{for(const[t,n]of o)k(t,"utf8")!==n&&x(t,n,"utf8")}},Q="<replace-with-d1-create-id>",M=e=>Array.isArray(e)?e.filter(r=>r!=null):void 0,T=(e,r)=>{const o=z(e);if(!o)return;const{parsed:t}=P(o);if(t===void 0)return;const{error:n,merged:a}=J(t,r),i=n===void 0?a:t,{containers:s,d1_databases:c,vars:l}=i;return{containers:M(s),d1_databases:M(c),vars:typeof l=="object"&&l!==null&&!Array.isArray(l)?l:void 0}},Ze=/^127(?:\.\d{1,3}){3}$/,er=e=>{try{const{hostname:r}=new URL(e);return r==="localhost"||Ze.test(r)||r==="::1"||r==="[::1]"}catch{return!1}},rr=e=>e.startsWith("./")||e.startsWith("../")||e.startsWith("/")||e.includes("Dockerfile"),tr=(e,r,o,t="deploy",n)=>{const a=(T(e,n)?.containers??[]).filter(s=>typeof s?.image=="string"&&rr(s.image));if(a.length===0||o())return;const i=`${t} blocked: wrangler.jsonc declares ${String(a.length)} container(s) built from a local Dockerfile, but no Docker-compatible engine is available. Start Docker (or Colima), or point the container's \`image\` at a pre-built registry reference. Note: container images must target linux/amd64.`;return r.error(i),i},Z=e=>p(y(e,N))?N:void 0,nr=(e,r,o="deploy")=>{for(const t of V(e,"lunora").containers){const n=t.schedulingPolicy===void 0?t.image:void 0,i=[...n?.kind==="dockerfile"?[{field:"image",path:n.dockerfilePath}]:[],...Object.entries(t.schedulingPolicy==="durable_object"?t.images??{}:{}).flatMap(([s,c])=>c.kind==="dockerfile"?[{field:`images["${s}"]`,path:c.dockerfilePath}]:[])].find(s=>!p(y(e,s.path)));if(i!==void 0){const s=`${o} blocked: container "${t.exportName}" references a Dockerfile at "${i.path}" that does not exist. Create it or fix the \`${i.field}\` path in lunora/containers.ts.`;return r.error(s),s}if(n?.kind==="build"&&!p(y(e,n.buildDir))){const s=`${o} blocked: container "${t.exportName}" references a Railpack build directory "${n.buildDir}" that does not exist. Create it or fix the \`image.build\` path in lunora/containers.ts.`;return r.error(s),s}}},or=(e,r)=>(T(e,r)?.d1_databases??[]).find(o=>o.database_id===Q)?.binding,ar=e=>{if(!e.migrate||e.dryRun||e.preview)return;if(e.migrateUrl===void 0){const o="--migrate requires --migrate-url <https://your-worker> — the deploy target URL is only known after wrangler runs, and this gate runs before it; refusing to default to localhost";return e.logger.error(o),o}if(e.migrateYes!==!0){const o="--migrate runs production data migrations after deploy. Re-run with --migrate-yes to confirm.";return e.logger.error(o),o}const r=e.migrateToken??process.env.LUNORA_ADMIN_TOKEN;if(r===void 0||r===""){const o="admin token required for --migrate — pass --migrate-token or set LUNORA_ADMIN_TOKEN";return e.logger.error(o),o}},ir=(e,r,o="deploy",t)=>{const n=or(e,t);if(n===void 0)return;const a=`${o} blocked: the "${n}" D1 binding has a placeholder database_id ("${Q}"). Run \`wrangler d1 create <name>\` to create the database, then replace the placeholder in wrangler.jsonc with the real id before deploying.`;return r.error(a),a},sr=(e,r,o="deploy",t)=>{const n=T(e,t)?.vars;if(!n)return;const a=Object.entries(n).filter(([,s])=>typeof s=="string"&&er(s)).map(([s])=>s).toSorted((s,c)=>s.localeCompare(c));if(a.length===0)return;const i=`${o} blocked: ${a.join(", ")} in wrangler.jsonc point at localhost. A deployed Worker can't reach a loopback address, so this silently breaks scheduled-job dispatch, reverse cross-shard relations, and auth callbacks. Set each to the deployed worker's public URL (or move it to a secret with \`wrangler secret put\`) before deploying.`;return r.error(i),i},cr=(e,r,o)=>{const t=ir(e,r.logger,o,r.env);if(t!==void 0)return{code:h.USAGE,error:t};const n=sr(e,r.logger,o,r.env);if(n!==void 0)return{code:h.USAGE,error:n};const a=nr(e,r.logger,o);if(a!==void 0)return{code:h.USAGE,error:a};const i=tr(e,r.logger,r.dockerAvailable??Ne,o,r.env);return i===void 0?void 0:{code:h.MISSING_DEPENDENCY,error:i}},dr=/https?:\/\/[^\s"'<>]+\.workers\.dev[^\s"'<>]*/u,lr=/https:\/\/[^\s"'<>]+/u,ur=e=>{if(e===void 0)return;const r=dr.exec(e);return r?r[0]:lr.exec(e)?.[0]},U=e=>e===void 0?"":` (--env ${e})`,gr=({cwd:e,env:r,logger:o,now:t,url:n})=>{if(n!==void 0)try{const a=W(e);if(a!==void 0){if(a.workerUrl===n&&a.env===r)return;o.warn(`link: .lunora/project.json records ${a.workerUrl??"(no url)"}${U(a.env)}, but this deploy published ${n}${U(r)}. Keeping the recorded value — run \`lunora link --url ${n}${r===void 0?"":` --env ${r}`}\` to update it.`);return}const i=(t??(()=>new Date().toISOString()))();ae(e,{env:r,linkedAt:i,workerName:_(e),workerUrl:n}),o.success(`link: recorded ${n} in .lunora/project.json (run \`lunora link\` to change)`)}catch{}},mr=async(e,r)=>{const o=new Oe({skipAddingFilesFromTsConfig:!0}),t=y(r,"lunora");let n;try{n=te(o,t)}catch(a){const i=a instanceof Error?a.message:String(a);return e.logger.warn(`--migrate: could not discover migrations (${i}); skipping`),0}if(n.length===0)return e.logger.info("--migrate: no data migrations declared in lunora/"),0;e.logger.info(`--migrate: running ${String(n.length)} migration(s) against deployed worker`);for(const a of n){e.logger.info(`--migrate: up "${a.id}" (table "${a.table}")`);const i={cwd:r,fetchImpl:e.fetchImpl,id:a.id,logger:e.logger,prod:!0,subcommand:"up",token:e.migrateToken,url:e.migrateUrl,yes:e.migrateYes===!0},s=await Fe(i);if(s.code!==0)return e.logger.error(`--migrate: migration "${a.id}" failed — see output above`),s.code;e.logger.success(`--migrate: "${a.id}" applied`)}return 0},fr=async(e,r)=>{const{info:o}=G(r,"lunora"),t=o?.vectorMetadata??[];if(t.length===0)return;const n=[];for(const s of t){const c=Ee(s.kind);if(c===void 0){e.logger.warn(`vector index "${s.index}" declares metadata "${s.property}", whose column type cannot be filtered on in Vectorize — it is stored with each vector but no filter will match it.`);continue}n.push({index:s.index,property:s.property,type:c})}if(n.length===0)return;const i=(await Ae({cwd:r,entries:n,exec:H(b(r),"wrangler",[]),logger:e.logger,spawner:e.spawner??D})).filter(s=>s.status!=="failed").length;i>0&&e.logger.success(`vectorize metadata indexes ready: ${String(i)}/${String(n.length)}`)},O=5,vr=2e3,hr=async(e,r,o)=>{if(e.healthCheck!==!0)return;const t=o??X({cwd:r,env:e.env});if(t===void 0){const a="--health-check: the deploy succeeded, but no URL to probe could be resolved — wrangler's output carried none and this checkout has no link for this environment. Run `lunora link --url <https://your-worker>` and re-deploy, or drop --health-check.";return e.logger.error(a),{error:a,ok:!1,url:""}}const n=await Ie({attempts:O,baseUrl:t,delayMs:vr,fetchImpl:e.healthFetch,paths:[Le,Me],sleep:e.healthSleep});return n.error===void 0?(e.logger.success(`health check ok (${n.url})`),{ok:!0,url:n.url}):(e.logger.error(`--health-check: the deploy succeeded, but the new version did not answer after ${String(O)} attempt(s) — ${n.error}`),{error:n.error,ok:!1,url:n.url})},pr=async(e,r,o,t,n,a)=>{await fr(e,r);const i=e.migrate?await mr(e,r):0;return i===0&&n?.(),{code:i,descriptor:o,mintedSecretsFile:a,validation:t}},yr=async({cwd:e,descriptor:r,mintedSecretsFile:o,options:t,reblessSchemaBaseline:n,recordArchitecture:a,stdout:i,validation:s})=>{const c={deployedAt:new Date().toISOString(),dryRun:t.dryRun===!0,env:t.env,preview:t.preview===!0,url:t.dryRun===!0?void 0:ur(i),workerName:_(e)};if(t.dryRun===!0||t.preview===!0)return t.healthCheck===!0&&t.logger.warn(`--health-check skipped: ${t.dryRun===!0?"a dry run publishes nothing":"a preview version serves no live traffic"}`),{code:0,deployment:c,descriptor:r,mintedSecretsFile:o,validation:s};t.temporary!==!0&&(a?.(),gr({cwd:e,env:t.env,logger:t.logger,url:c.url}));const l=await hr(t,e,c.url);return l?.error!==void 0?{code:h.UNAVAILABLE,deployment:c,descriptor:r,healthCheck:l,mintedSecretsFile:o,validation:s}:{...await pr(t,e,r,s,n,o),deployment:c,healthCheck:l}},wr=(e,r,o)=>{const t=y(e,w);if(!p(t))return;let n;try{n=K(k(t,"utf8")).length}catch{return}if(n===0)return;const a=o.toolchain?.secretPut!==void 0;r.warn(a?`Note: \`lunora deploy\` does not push secrets. ${w} has ${String(n)} key(s); if you changed them, run \`lunora env push --yes\` to update the deployed secrets.`:`Note: ${o.name} deploys read no secrets. ${w} has ${String(n)} key(s) that only the dev server sees; put the values the deployed worker needs in wrangler \`vars\`.`)},kr=async e=>{let r=[];try{r=ie(await q({projectRoot:e,schemaDir:R(e)}))}catch{}const o=se(r).map(n=>n.key);let t=[];try{const n=y(e,w);p(n)&&(t=K(k(n,"utf8")).map(a=>a.key).filter(a=>Re(a)))}catch{}return[...new Set([...o,...t])]},br=async(e,r,o,t)=>{const{logger:n}=r,a=r.spawner??D,i=b(e),s=r.env===void 0?"":` --env ${r.env}`,c=t.toolchain?.secretPut;if(c===void 0)return n.error(`deploy target "${t.id}" has no secret store; cannot push secrets`),{minted:[],ok:!1};const l=[];for(const d of o){const g=ce(),m=c({environment:r.env,key:d,temporary:r.temporary}),u=j(i,m),f=await a({args:u.args,command:u.command,cwd:e,input:g});if(f.code!==0)return n.error(`failed to push secret ${d} (exit ${String(f.code)}); set it manually with \`wrangler secret put ${d}${s}\`.`),{minted:l,ok:!1};l.push({key:d,value:g}),n.success(`generated + pushed ${d}`)}return{minted:l,ok:!0}},$r=/^[\w-]+$/u,E=[".dev.vars",".dev.vars.*","!.dev.vars.example"],Sr=/\r?\n/u,Dr=(e,r)=>{const o=y(e,".gitignore");try{const t=p(o)?k(o,"utf8"):"",n=new Set(t.split(Sr).map(c=>c.trim())),a=E.filter(c=>!n.has(c));if(a.length===0)return;const i=a.some(c=>!c.startsWith("!"))?[...a.filter(c=>!c.startsWith("!")),...E.filter(c=>c.startsWith("!"))]:a,s=t.length>0&&!t.endsWith(`
3
+ `)}`},Ye=(e,r)=>B(e,".lunora",r===void 0?"architecture.json":`architecture.${r}.json`),ze=e=>{if(p(e))try{const r=JSON.parse(k(e,"utf8"));return r.version===1&&Array.isArray(r.modules)&&Array.isArray(r.edges)?r:void 0}catch{return}},Je=e=>{const{cwd:r,environment:o,logger:t}=e,n=Ye(r,o),a=ze(n),i=e.current??(a===void 0?void 0:Ve);if(i===void 0)return;const s=a===void 0?void 0:qe(Ke(a,i));return s!==void 0&&t.info(s),()=>{try{Ee(F(n),{recursive:!0}),x(n,`${JSON.stringify(i,void 0,2)}
4
+ `,"utf8")}catch(c){t.warn(`could not record the deployed architecture at ${n}: ${c instanceof Error?c.message:String(c)}`)}}},Xe=e=>{const{cwd:r,env:o,logger:t,mintedSecretsFile:n}=e;try{const a=W(r),i=a?.workerName??_(r),s=e.url??a?.workerUrl;t.success("deploy complete"),t.info(` worker: ${i??"(see wrangler output above)"}`),o!==void 0&&t.info(` env: ${o}`),s===void 0?t.info(" url: run `lunora link --url <https://your-worker>` to record it"):t.info(` url: ${s}`),n!==void 0&&t.info(` secrets: generated value(s) recorded in ${n}`),e.logsAvailable&&t.info(" logs: lunora logs")}catch{}},Qe=async e=>{if(e.targets.length===0)return{builtTags:[],code:0};if(!(e.railpackAvailable??Ne)()){const t="deploy blocked: a container uses `image: { build }` (Railpack), but Railpack isn't ready. Install the `railpack` CLI and start a BuildKit instance, e.g. `docker run --rm --privileged -d --name buildkit moby/buildkit` then `export BUILDKIT_HOST=docker-container://buildkit`. Alternatively switch the container's `image` to a Dockerfile path or a pre-built registry reference.";return e.logger.error(t),{builtTags:[],code:1,error:t}}const r=e.spawner??D,o=[];for(const t of e.targets){const n=Te(t.exportName),a={args:["build",t.buildDir,"--name",n],command:"railpack",cwd:e.cwd},i=H(b(e.cwd),"wrangler",["containers","push",n]),s={args:i.args,command:i.command,cwd:e.cwd};e.logger.info(`railpack: building "${t.exportName}" → ${n} from ${t.buildDir}`);const c=await r(a);if(c.code!==0){const d=`railpack build failed for container "${t.exportName}" (${t.buildDir})`;return e.logger.error(d),{builtTags:o,code:c.code,error:d}}e.logger.info(`railpack: pushing ${n} to the Cloudflare Registry`);const l=await r(s);if(l.code!==0){const d=`wrangler containers push failed for "${t.exportName}" (${n})`;return e.logger.error(d),{builtTags:o,code:l.code,error:d}}o.push(n)}return{builtTags:o,code:0}},Ze=e=>{const o=[z(e),B(e,"package.json")].filter(t=>t!==void 0&&p(t)).map(t=>[t,k(t,"utf8")]);return()=>{for(const[t,n]of o)k(t,"utf8")!==n&&x(t,n,"utf8")}},Q="<replace-with-d1-create-id>",M=e=>Array.isArray(e)?e.filter(r=>r!=null):void 0,T=(e,r)=>{const o=z(e);if(!o)return;const{parsed:t}=P(o);if(t===void 0)return;const{error:n,merged:a}=J(t,r),i=n===void 0?a:t,{containers:s,d1_databases:c,vars:l}=i;return{containers:M(s),d1_databases:M(c),vars:typeof l=="object"&&l!==null&&!Array.isArray(l)?l:void 0}},er=/^127(?:\.\d{1,3}){3}$/,rr=e=>{try{const{hostname:r}=new URL(e);return r==="localhost"||er.test(r)||r==="::1"||r==="[::1]"}catch{return!1}},tr=e=>e.startsWith("./")||e.startsWith("../")||e.startsWith("/")||e.includes("Dockerfile"),nr=(e,r,o,t="deploy",n)=>{const a=(T(e,n)?.containers??[]).filter(s=>typeof s?.image=="string"&&tr(s.image));if(a.length===0||o())return;const i=`${t} blocked: wrangler.jsonc declares ${String(a.length)} container(s) built from a local Dockerfile, but no Docker-compatible engine is available. Start Docker (or Colima), or point the container's \`image\` at a pre-built registry reference. Note: container images must target linux/amd64.`;return r.error(i),i},Z=e=>p(y(e,N))?N:void 0,or=(e,r,o="deploy")=>{for(const t of V(e,"lunora").containers){const n=t.schedulingPolicy===void 0?t.image:void 0,i=[...n?.kind==="dockerfile"?[{field:"image",path:n.dockerfilePath}]:[],...Object.entries(t.schedulingPolicy==="durable_object"?t.images??{}:{}).flatMap(([s,c])=>c.kind==="dockerfile"?[{field:`images["${s}"]`,path:c.dockerfilePath}]:[])].find(s=>!p(y(e,s.path)));if(i!==void 0){const s=`${o} blocked: container "${t.exportName}" references a Dockerfile at "${i.path}" that does not exist. Create it or fix the \`${i.field}\` path in lunora/containers.ts.`;return r.error(s),s}if(n?.kind==="build"&&!p(y(e,n.buildDir))){const s=`${o} blocked: container "${t.exportName}" references a Railpack build directory "${n.buildDir}" that does not exist. Create it or fix the \`image.build\` path in lunora/containers.ts.`;return r.error(s),s}}},ar=(e,r)=>(T(e,r)?.d1_databases??[]).find(o=>o.database_id===Q)?.binding,ir=e=>{if(!e.migrate||e.dryRun||e.preview)return;if(e.migrateUrl===void 0){const o="--migrate requires --migrate-url <https://your-worker> — the deploy target URL is only known after wrangler runs, and this gate runs before it; refusing to default to localhost";return e.logger.error(o),o}if(e.migrateYes!==!0){const o="--migrate runs production data migrations after deploy. Re-run with --migrate-yes to confirm.";return e.logger.error(o),o}const r=e.migrateToken??process.env.LUNORA_ADMIN_TOKEN;if(r===void 0||r===""){const o="admin token required for --migrate — pass --migrate-token or set LUNORA_ADMIN_TOKEN";return e.logger.error(o),o}},sr=(e,r,o="deploy",t)=>{const n=ar(e,t);if(n===void 0)return;const a=`${o} blocked: the "${n}" D1 binding has a placeholder database_id ("${Q}"). Run \`wrangler d1 create <name>\` to create the database, then replace the placeholder in wrangler.jsonc with the real id before deploying.`;return r.error(a),a},cr=(e,r,o="deploy",t)=>{const n=T(e,t)?.vars;if(!n)return;const a=Object.entries(n).filter(([,s])=>typeof s=="string"&&rr(s)).map(([s])=>s).toSorted((s,c)=>s.localeCompare(c));if(a.length===0)return;const i=`${o} blocked: ${a.join(", ")} in wrangler.jsonc point at localhost. A deployed Worker can't reach a loopback address, so this silently breaks scheduled-job dispatch, reverse cross-shard relations, and auth callbacks. Set each to the deployed worker's public URL (or move it to a secret with \`wrangler secret put\`) before deploying.`;return r.error(i),i},dr=(e,r,o)=>{const t=sr(e,r.logger,o,r.env);if(t!==void 0)return{code:h.USAGE,error:t};const n=cr(e,r.logger,o,r.env);if(n!==void 0)return{code:h.USAGE,error:n};const a=or(e,r.logger,o);if(a!==void 0)return{code:h.USAGE,error:a};const i=nr(e,r.logger,r.dockerAvailable??Ie,o,r.env);return i===void 0?void 0:{code:h.MISSING_DEPENDENCY,error:i}},lr=/https?:\/\/[^\s"'<>]+\.workers\.dev[^\s"'<>]*/u,ur=/https:\/\/[^\s"'<>]+/u,gr=e=>{if(e===void 0)return;const r=lr.exec(e);return r?r[0]:ur.exec(e)?.[0]},U=e=>e===void 0?"":` (--env ${e})`,mr=({cwd:e,env:r,logger:o,now:t,url:n})=>{if(n!==void 0)try{const a=W(e);if(a!==void 0){if(a.workerUrl===n&&a.env===r)return;o.warn(`link: .lunora/project.json records ${a.workerUrl??"(no url)"}${U(a.env)}, but this deploy published ${n}${U(r)}. Keeping the recorded value — run \`lunora link --url ${n}${r===void 0?"":` --env ${r}`}\` to update it.`);return}const i=(t??(()=>new Date().toISOString()))();ae(e,{env:r,linkedAt:i,workerName:_(e),workerUrl:n}),o.success(`link: recorded ${n} in .lunora/project.json (run \`lunora link\` to change)`)}catch{}},fr=async(e,r)=>{const o=new Fe({skipAddingFilesFromTsConfig:!0}),t=y(r,"lunora");let n;try{n=te(o,t)}catch(a){const i=a instanceof Error?a.message:String(a);return e.logger.warn(`--migrate: could not discover migrations (${i}); skipping`),0}if(n.length===0)return e.logger.info("--migrate: no data migrations declared in lunora/"),0;e.logger.info(`--migrate: running ${String(n.length)} migration(s) against deployed worker`);for(const a of n){e.logger.info(`--migrate: up "${a.id}" (table "${a.table}")`);const i={cwd:r,fetchImpl:e.fetchImpl,id:a.id,logger:e.logger,prod:!0,subcommand:"up",token:e.migrateToken,url:e.migrateUrl,yes:e.migrateYes===!0},s=await Be(i);if(s.code!==0)return e.logger.error(`--migrate: migration "${a.id}" failed — see output above`),s.code;e.logger.success(`--migrate: "${a.id}" applied`)}return 0},vr=async(e,r)=>{const{info:o}=G(r,"lunora"),t=o?.vectorMetadata??[];if(t.length===0)return;const n=[];for(const s of t){const c=Ae(s.kind);if(c===void 0){e.logger.warn(`vector index "${s.index}" declares metadata "${s.property}", whose column type cannot be filtered on in Vectorize — it is stored with each vector but no filter will match it.`);continue}n.push({index:s.index,property:s.property,type:c})}if(n.length===0)return;const i=(await Re({cwd:r,entries:n,exec:H(b(r),"wrangler",[]),logger:e.logger,spawner:e.spawner??D})).filter(s=>s.status!=="failed").length;i>0&&e.logger.success(`vectorize metadata indexes ready: ${String(i)}/${String(n.length)}`)},O=5,hr=2e3,pr=async(e,r,o)=>{if(e.healthCheck!==!0)return;const t=o??X({cwd:r,env:e.env});if(t===void 0){const a="--health-check: the deploy succeeded, but no URL to probe could be resolved — wrangler's output carried none and this checkout has no link for this environment. Run `lunora link --url <https://your-worker>` and re-deploy, or drop --health-check.";return e.logger.error(a),{error:a,ok:!1,url:""}}const n=await Le({attempts:O,baseUrl:t,delayMs:hr,fetchImpl:e.healthFetch,paths:[Me,Ue],sleep:e.healthSleep});return n.error===void 0?(e.logger.success(`health check ok (${n.url})`),{ok:!0,url:n.url}):(e.logger.error(`--health-check: the deploy succeeded, but the new version did not answer after ${String(O)} attempt(s) — ${n.error}`),{error:n.error,ok:!1,url:n.url})},yr=async(e,r,o,t,n,a)=>{await vr(e,r);const i=e.migrate?await fr(e,r):0;return i===0&&n?.(),{code:i,descriptor:o,mintedSecretsFile:a,validation:t}},wr=async({cwd:e,descriptor:r,mintedSecretsFile:o,options:t,reblessSchemaBaseline:n,recordArchitecture:a,stdout:i,validation:s})=>{const c={deployedAt:new Date().toISOString(),dryRun:t.dryRun===!0,env:t.env,preview:t.preview===!0,url:t.dryRun===!0?void 0:gr(i),workerName:_(e)};if(t.dryRun===!0||t.preview===!0)return t.healthCheck===!0&&t.logger.warn(`--health-check skipped: ${t.dryRun===!0?"a dry run publishes nothing":"a preview version serves no live traffic"}`),{code:0,deployment:c,descriptor:r,mintedSecretsFile:o,validation:s};t.temporary!==!0&&(a?.(),mr({cwd:e,env:t.env,logger:t.logger,url:c.url}));const l=await pr(t,e,c.url);return l?.error!==void 0?{code:h.UNAVAILABLE,deployment:c,descriptor:r,healthCheck:l,mintedSecretsFile:o,validation:s}:{...await yr(t,e,r,s,n,o),deployment:c,healthCheck:l}},kr=(e,r,o)=>{const t=y(e,w);if(!p(t))return;let n;try{n=K(k(t,"utf8")).length}catch{return}if(n===0)return;const a=o.toolchain?.secretPut!==void 0;r.warn(a?`Note: \`lunora deploy\` does not push secrets. ${w} has ${String(n)} key(s); if you changed them, run \`lunora env push --yes\` to update the deployed secrets.`:`Note: ${o.name} deploys read no secrets. ${w} has ${String(n)} key(s) that only the dev server sees; put the values the deployed worker needs in wrangler \`vars\`.`)},br=async e=>{let r=[];try{r=ie(await q({projectRoot:e,schemaDir:R(e)}))}catch{}const o=se(r).map(n=>n.key);let t=[];try{const n=y(e,w);p(n)&&(t=K(k(n,"utf8")).map(a=>a.key).filter(a=>je(a)))}catch{}return[...new Set([...o,...t])]},$r=async(e,r,o,t)=>{const{logger:n}=r,a=r.spawner??D,i=b(e),s=r.env===void 0?"":` --env ${r.env}`,c=t.toolchain?.secretPut;if(c===void 0)return n.error(`deploy target "${t.id}" has no secret store; cannot push secrets`),{minted:[],ok:!1};const l=[];for(const d of o){const g=ce(),m=c({environment:r.env,key:d,temporary:r.temporary}),u=j(i,m),f=await a({args:u.args,command:u.command,cwd:e,input:g});if(f.code!==0)return n.error(`failed to push secret ${d} (exit ${String(f.code)}); set it manually with \`wrangler secret put ${d}${s}\`.`),{minted:l,ok:!1};l.push({key:d,value:g}),n.success(`generated + pushed ${d}`)}return{minted:l,ok:!0}},Sr=/^[\w-]+$/u,E=[".dev.vars",".dev.vars.*","!.dev.vars.example"],Dr=/\r?\n/u,Er=(e,r)=>{const o=y(e,".gitignore");try{const t=p(o)?k(o,"utf8"):"",n=new Set(t.split(Dr).map(c=>c.trim())),a=E.filter(c=>!n.has(c));if(a.length===0)return;const i=a.some(c=>!c.startsWith("!"))?[...a.filter(c=>!c.startsWith("!")),...E.filter(c=>c.startsWith("!"))]:a,s=t.length>0&&!t.endsWith(`
5
5
  `)?`
6
6
  `:"";x(o,`${t}${s}
7
7
  # Lunora — never commit a minted secret
8
8
  ${i.join(`
9
9
  `)}
10
- `,"utf8"),r.info(`.gitignore: added ${a.join(", ")} so the recorded secret cannot be committed`)}catch(t){r.warn(`could not update .gitignore (${t instanceof Error?t.message:String(t)}) — add \`${E.join("` and `")}\` by hand before committing.`)}},Er=(e,r,o)=>{if(o.length===0)return;const t=o.map(s=>s.key).join(", ");if(r.env!==void 0&&!$r.test(r.env)){r.logger.warn(`${t}: minted and pushed for --env ${r.env}, but "${r.env}" isn't a safe filename fragment — the value could not be recorded. Capture it manually if you need it again.`);return}const n=r.env===void 0?w:`${w}.${r.env}`;Dr(e,r.logger);const a=y(e,n);let i=p(a)?k(a,"utf8"):"";for(const s of o)i=de(i,s.key,s.value);return le(a,i),r.logger.success(r.env===void 0?`${t}: value(s) recorded in ${n}`:`${t}: value(s) recorded in ${n} (kept separate from ${w} so \`lunora dev\` and a plain \`lunora env push\` don't inherit the --env ${r.env} value)`),n},Ar=async(e,r,o,t)=>{if(r.dryRun===!0||r.preview===!0)return{};const{logger:n}=r,a=r.env===void 0?"":` --env ${r.env}`;let i;try{i=await(r.secretLister??We)({cwd:e,env:r.env,temporary:r.temporary})}catch{return{}}if(!i.ok)return{};const s=new Set(i.names),l=(await kr(e)).filter(m=>!s.has(m));if(l.length===0)return{};if(!o)return{error:`missing required secret(s) on the deploy target: ${l.join(", ")}. Set them with \`wrangler secret put <KEY>${a}\` (or \`lunora env generate --set\` then \`lunora env push --yes${a}\`), then re-deploy.`};for(const m of l.filter(u=>!I(u)))n.warn(`required secret ${m} is not set on the target — set it with: wrangler secret put ${m}${a}`);const d=l.filter(m=>I(m));if(d.length===0)return{};if(await(r.secretConfirm??Be())(`${String(d.length)} required secret(s) not set on the target (${d.join(", ")}). Generate strong values and push them now?`)){const{minted:m,ok:u}=await br(e,r,d,t),f=Er(e,r,m);return u?{mintedSecretsFile:f}:{error:"failed to push required secret(s) — set them manually and re-deploy",mintedSecretsFile:f}}return n.warn(`${String(d.length)} required secret(s) not set on the target: ${d.join(", ")}. Generate + push with \`lunora env generate --set\` then \`lunora env push --yes${a}\`.`),{}},ee=e=>e.format==="json"?!1:e.interactive!==void 0?e.interactive:process.stdout.isTTY&&!process.env.CI,Rr=async(e,r)=>{if(r.dryRun===!0)return;const o=V(e,"lunora").containers.flatMap(n=>n.schedulingPolicy===void 0&&n.image.kind==="build"?[{buildDir:n.image.buildDir,exportName:n.exportName}]:[]);if(o.length===0)return;const t=await Xe({cwd:e,logger:r.logger,railpackAvailable:r.railpackAvailable,spawner:r.spawner,targets:o});return t.code===0?void 0:t.error??"railpack build failed"},jr=(e,r,o)=>{if(o!==void 0)try{const t=he(e,o);t.changed&&r.success(`synced ${String(o.length)} cron trigger(s) → ${t.wranglerPath??"wrangler.jsonc"}`);for(const a of t.warnings)r.warn(a);const n=pe(t.preserved);n!==void 0&&r.info(n)}catch(t){const n=t instanceof Error?t.message:String(t);r.warn(`cron trigger sync skipped: ${n}`)}},Cr=async(e,r,o,t,n)=>{try{C(t);const a=await q({projectRoot:e,schemaDir:R(e)}),i=fe(e,a,n),s=i.wranglerPath??"wrangler.jsonc";if(i.added.length>0&&r.success(`provisioned bindings: ${i.added.join(", ")} → ${s}`),i.updated.length>0&&r.success(`updated bindings: ${i.updated.join(", ")} → ${s}`),i.devConfig!==void 0){const{added:c,path:l,updated:d}=i.devConfig;r.success(`dev sidecar bindings: ${[...c,...d].join(", ")} → ${l}`)}for(const c of i.warnings)r.warn(c)}catch(a){const i=a instanceof Error?a.message:String(a);r.warn(`binding inference skipped: ${i}`)}try{const a=ve(e);a.changed&&r.success(`bumped compatibility_date to ${a.date??"unknown"} (Workers Cache enabled) → ${a.wranglerPath??"wrangler.jsonc"}`)}catch(a){const i=a instanceof Error?a.message:String(a);r.warn(`compatibility date sync skipped: ${i}`)}jr(e,r,o)},Pr=async(e,r,o,t,n,a,i,s)=>{let c;r?(c=new ye({name:"dots"}),c.start("running codegen")):o.info("running codegen");try{const l=oe({apiSpec:t,projectRoot:e,target:n});c?.succeed("codegen complete"),c||o.success("codegen complete");const d=ke(l.platformDiagnostics,o);if(d.errors.length>0)return{error:d.errors.join("; ")};const{errorAdvisories:g,names:m,shouldBlock:u}=be(l.advisories,s);if(u){const v=`${g.length.toString()} ERROR-level ${g.length===1?"advisory":"advisories"} (${m.join(", ")}). Pass --no-strict-advisories to downgrade this to a warning and continue.`;return o.error(v),{error:v}}const f=await ue({cwd:e,logger:o,spawner:a,stdoutToStderr:i});return f.error!==void 0?{error:f.error}:{result:l}}catch(l){c?.failed("codegen failed");const d=l instanceof Error?l.message:String(l);return o.error(`codegen failed: ${d}`),{error:`codegen failed: ${d}`}}},xr=(e,r)=>({dryRun:r.dryRun,entry:Z(e),environment:r.env,outDir:r.outDir,preview:r.preview,temporary:r.temporary}),re=(e,r,o)=>{const{toolchain:t}=o;if(t===void 0)throw new Error(`deploy target "${o.id}" has no command-line toolchain`);const n=xr(e,r);return Y(o,e,"deploy",a=>t.deploy({...n,configPath:a}))},_r=(e,r,o)=>{const t=re(e,r,o),n=Z(e);return n!==void 0&&r.logger.info(`class-B composition: deploying ${n} (overrides wrangler main)`),r.temporary&&r.logger.info("temporary account: deploying to a short-lived Cloudflare account (~60min); wrangler will print a claim URL"),r.dryRun&&r.logger.info("dry run: validating + bundling without publishing"),r.outDir!==void 0&&r.logger.info(`build artifact: emitting bundle to ${r.outDir}`),t.commit(),t.projection!==void 0&&t.projection.dropped.length>0&&r.logger.warn(`${o.name} ignores these wrangler keys, so they were left out of ${t.projection.configPath}: ${t.projection.dropped.join(", ")}`),t.command},A=(e,r)=>({code:h.USAGE,descriptor:void 0,error:e,validation:{problems:[],wranglerPath:void 0},...r}),Tr=(e,r)=>{for(const o of e.report?.warnings??[])r.warn(`wrangler.jsonc: ${o}`);if(e.problems.length===0)return!1;r.error("wrangler.jsonc validation failed:");for(const o of e.problems)r.error(` - ${o}`);return!0},Nr=(e,r,o)=>{const t=r.format==="json",n=r.dryRun!==!0,a=_r(e,r,o),i=j(b(e),a);return{args:i.args,captureStdout:n&&!t,captureStdoutSilently:n&&t,command:i.command,cwd:e,stdoutToStderr:t&&!n}},Ir=async(e,r)=>{const o=e.cwd??process.cwd(),t=ee(e),n=we(e),a={problems:[],wranglerPath:void 0},i=Se(o,e.target);if(i.target===void 0){const u=i.error??"unknown deploy target";return e.logger.error(u),{error:u,validation:a}}const{target:s}=i;try{re(o,e,C(s))}catch(u){const f=u instanceof Error?u.message:String(u);return e.logger.error(f),{error:f,target:s,validation:a}}let c;if(!e.skipCodegen){const u=await Pr(o,t,e.logger,e.apiSpec,s,e.spawner,e.format==="json",n);if(u.error!==void 0)return{error:u.error,target:s,validation:a};c=u.result}let l;if(c!==void 0){const u=Ue({allowDrift:e.allowSchemaDrift===!0,codegen:c,command:r,logger:e.logger,updateBaseline:e.updateSchemaBaseline===!0});if(u.blocked)return{error:`schema drift gate blocked ${r}`,schemaDrift:{blocked:!0,reason:u.reason},target:s,validation:a};l=u.rebless}const d=c&&ze({current:c.architecture,cwd:o,environment:e.env,logger:e.logger});await Cr(o,e.logger,c?.cronTriggers,s,e.env);const g=cr(o,e,r);if(g!==void 0)return{code:g.code,error:g.error,target:s,validation:a};const m=me({environment:e.env,projectRoot:o});return Tr(m,e.logger)?{error:"wrangler validation failed",target:s,validation:m}:{codegen:c,reblessSchemaBaseline:l,recordArchitecture:d,target:s,validation:m}},Lr=e=>{if(e.skipServices===!0)return"--skip-services";if(e.preview===!0)return"--preview uploads the app version only";if(e.temporary===!0)return"--temporary deploys the app to a throwaway account"},Mr=async(e,r,o,t)=>{const{error:n,services:a}=ne(e);if(n!==void 0)return n;if(a.length===0)return;const{toolchain:i}=o,s=i===void 0?`target "${o.id}" has no deploy command`:Lr(r);if(s!==void 0||i===void 0){const d=a.map(g=>g.worker).join(", ");r.logger.warn(`services not deployed (${s??""}): ${d} — deploy them yourself if the app calls anything new`);return}const c=b(e),l=[...new Map(a.map(d=>[d.wranglerPath,d])).values()];for(const d of l){const g=F(d.wranglerPath);let m;try{m=Y(o,g,"deploy",v=>i.deploy({configPath:v??d.wranglerPath,dryRun:r.dryRun===!0,environment:r.env}))}catch(v){return`service ${d.name} (${d.worker}): ${v instanceof Error?v.message:String(v)}`}m.commit();const u=j(c,m.command);r.logger.info(`deploying service ${d.name} (${d.worker}) via ${u.command} ${u.args.join(" ")}`);const f=await t({args:u.args,command:u.command,cwd:g,stdoutToStderr:r.format==="json"});if(f.code!==0)return`service ${d.name} (${d.worker}): ${u.command} ${u.args.join(" ")} exited ${String(f.code)} — stopping before the app`}},Ur=async(e,r,o,t)=>{if(r!=="cloudflare")return;const n=e===void 0?void 0:P(e).parsed,a=(o===void 0?void 0:n?.env?.[o]?.account_id)??n?.account_id,i=await Ce({accountId:a});(i.verdict==="near"||i.verdict==="full")&&t.warn(i.fix===void 0?i.message:`${i.message} ${i.fix}`)},Or=async(e,r,o,t,n)=>{const a=o==="cloudflare"&&r!==void 0?P(r).parsed:void 0;if(a===void 0)return;const i=(J(a,t).merged.artifacts??[]).flatMap(g=>typeof g?.binding=="string"&&typeof g.namespace=="string"?[{binding:g.binding,namespace:g.namespace}]:[]),s=i.length===0?void 0:G(e,R(e)).info?.jurisdiction;if(s===void 0)return;const c=(t===void 0?void 0:a.env?.[t]?.account_id)??a.account_id,l=await Promise.all(i.map(async g=>je({...g,accountId:c,jurisdiction:s}))),d=[];for(const g of l){const m=g.fix===void 0?g.message:`${g.message} ${g.fix}`;g.verdict==="unchecked"?n.warn(m):g.verdict!=="ok"&&(n.error(m),d.push(m))}return d.length===0?void 0:d.join(`
11
- `)},Fr=async e=>{const r=e.cwd??process.cwd(),o=ee(e),t=await Ir(e,e.commandName??"deploy");if(t.error!==void 0){if(t.validation.problems.length>0)return{code:h.USAGE,descriptor:void 0,error:t.error,validation:t.validation};const v=t.schemaDrift===void 0?void 0:{schemaDrift:t.schemaDrift};return A(t.error,{...v,...t.code===void 0?{}:{code:t.code}})}const{validation:n}=t,a=C(t.target),i=ar(e)??await Or(r,n.wranglerPath,t.target,e.env,e.logger);if(i!==void 0)return A(i);const s=a.toolchain?.prebuildsContainerImages===!0?await Rr(r,e):void 0;if(s!==void 0)return A(s);wr(r,e.logger,a),ge(r,v=>{e.logger.warn(v)}),await Ur(n.wranglerPath,t.target,e.env,e.logger);const{error:c,mintedSecretsFile:l}=await Ar(r,e,o,a);if(c!==void 0)return e.logger.error(c),{code:h.USAGE,descriptor:void 0,error:c,mintedSecretsFile:l,validation:n};const d=e.spawner??D,g=await Mr(r,e,a,d);if(g!==void 0)return{code:h.FAILURE,descriptor:void 0,error:g,mintedSecretsFile:l,validation:n};const m=Nr(r,e,a);e.logger.info(`deploying via ${m.command} ${m.args.join(" ")}`);const u=await d(m);return m.captureStdoutSilently===!0&&u.stdout!==void 0&&u.stdout!==""&&process.stderr.write(u.stdout),u.code!==0?{code:u.code,descriptor:m,mintedSecretsFile:l,validation:n}:{...await yr({...t,cwd:r,descriptor:m,mintedSecretsFile:l,options:e,stdout:u.stdout}),logsAvailable:a.toolchain?.tail!==void 0}},Br=async e=>{const{logger:r}=e,o=e.dryRun===!0?Qe(e.cwd??process.cwd()):void 0;let t;try{if(t=await Fr({...e,logger:r}),t.code===0&&e.emitBindings!==void 0){const{error:n}=Pe({destination:e.emitBindings,logger:r,projectRoot:e.cwd??process.cwd()});n!==void 0&&(r.error(n),t={...t,code:h.USAGE})}}finally{o?.()}if(e.format==="json")return t;if(t.code===0&&e.dryRun!==!0&&e.preview!==!0)Je({cwd:e.cwd??process.cwd(),env:e.env,logger:e.logger,logsAvailable:t.logsAvailable===!0,mintedSecretsFile:t.mintedSecretsFile,url:t.deployment?.url});else if(t.code===0&&e.preview===!0){const n=t.deployment?.url;e.logger.success(n===void 0?"preview version uploaded":`preview version uploaded — ${n}`)}return t},ut=xe(async({cwd:e,format:r,logger:o,options:t})=>{const n=await Br({allowSchemaDrift:t.allowSchemaDrift===!0,apiSpec:$e(t.apiSpec),cwd:e,dryRun:t.dryRun===!0,env:t.env,format:r,healthCheck:t.healthCheck===!0,logger:o,migrate:t.migrate===!0,migrateToken:t.migrateToken,migrateUrl:X({cwd:e,env:t.env,url:t.migrateUrl}),migrateYes:t.migrateYes===!0,preview:t.preview===!0,skipCodegen:t.prebuilt===!0,skipServices:t.skipServices===!0,strictAdvisories:t.strictAdvisories,target:t.target,temporary:t.temporary===!0,updateSchemaBaseline:t.updateSchemaBaseline===!0});return{code:n.code,data:{deployment:n.deployment,healthCheck:n.healthCheck,mintedSecretsFile:n.mintedSecretsFile,schemaDrift:n.schemaDrift,validation:n.validation},error:n.error}});export{ut as execute,Cr as provisionBindings,Br as runDeployCommand,Ir as runPreDeployPipeline};
10
+ `,"utf8"),r.info(`.gitignore: added ${a.join(", ")} so the recorded secret cannot be committed`)}catch(t){r.warn(`could not update .gitignore (${t instanceof Error?t.message:String(t)}) — add \`${E.join("` and `")}\` by hand before committing.`)}},Ar=(e,r,o)=>{if(o.length===0)return;const t=o.map(s=>s.key).join(", ");if(r.env!==void 0&&!Sr.test(r.env)){r.logger.warn(`${t}: minted and pushed for --env ${r.env}, but "${r.env}" isn't a safe filename fragment — the value could not be recorded. Capture it manually if you need it again.`);return}const n=r.env===void 0?w:`${w}.${r.env}`;Er(e,r.logger);const a=y(e,n);let i=p(a)?k(a,"utf8"):"";for(const s of o)i=de(i,s.key,s.value);return le(a,i),r.logger.success(r.env===void 0?`${t}: value(s) recorded in ${n}`:`${t}: value(s) recorded in ${n} (kept separate from ${w} so \`lunora dev\` and a plain \`lunora env push\` don't inherit the --env ${r.env} value)`),n},Rr=async(e,r,o,t)=>{if(r.dryRun===!0||r.preview===!0)return{};const{logger:n}=r,a=r.env===void 0?"":` --env ${r.env}`;let i;try{i=await(r.secretLister??He)({cwd:e,env:r.env,temporary:r.temporary})}catch{return{}}if(!i.ok)return{};const s=new Set(i.names),l=(await br(e)).filter(m=>!s.has(m));if(l.length===0)return{};if(!o)return{error:`missing required secret(s) on the deploy target: ${l.join(", ")}. Set them with \`wrangler secret put <KEY>${a}\` (or \`lunora env generate --set\` then \`lunora env push --yes${a}\`), then re-deploy.`};for(const m of l.filter(u=>!I(u)))n.warn(`required secret ${m} is not set on the target — set it with: wrangler secret put ${m}${a}`);const d=l.filter(m=>I(m));if(d.length===0)return{};if(await(r.secretConfirm??We())(`${String(d.length)} required secret(s) not set on the target (${d.join(", ")}). Generate strong values and push them now?`)){const{minted:m,ok:u}=await $r(e,r,d,t),f=Ar(e,r,m);return u?{mintedSecretsFile:f}:{error:"failed to push required secret(s) — set them manually and re-deploy",mintedSecretsFile:f}}return n.warn(`${String(d.length)} required secret(s) not set on the target: ${d.join(", ")}. Generate + push with \`lunora env generate --set\` then \`lunora env push --yes${a}\`.`),{}},ee=e=>e.format==="json"?!1:e.interactive!==void 0?e.interactive:process.stdout.isTTY&&!process.env.CI,jr=async(e,r)=>{if(r.dryRun===!0)return;const o=V(e,"lunora").containers.flatMap(n=>n.schedulingPolicy===void 0&&n.image.kind==="build"?[{buildDir:n.image.buildDir,exportName:n.exportName}]:[]);if(o.length===0)return;const t=await Qe({cwd:e,logger:r.logger,railpackAvailable:r.railpackAvailable,spawner:r.spawner,targets:o});return t.code===0?void 0:t.error??"railpack build failed"},Cr=(e,r,o)=>{if(o!==void 0)try{const t=pe(e,o);t.changed&&r.success(`synced ${String(o.length)} cron trigger(s) → ${t.wranglerPath??"wrangler.jsonc"}`);for(const a of t.warnings)r.warn(a);const n=ye(t.preserved);n!==void 0&&r.info(n)}catch(t){const n=t instanceof Error?t.message:String(t);r.warn(`cron trigger sync skipped: ${n}`)}},Pr=async(e,r,o,t,n)=>{try{C(t);const a=await q({projectRoot:e,schemaDir:R(e)}),i=ve(e,a,n),s=i.wranglerPath??"wrangler.jsonc";if(i.added.length>0&&r.success(`provisioned bindings: ${i.added.join(", ")} → ${s}`),i.updated.length>0&&r.success(`updated bindings: ${i.updated.join(", ")} → ${s}`),i.devConfig!==void 0){const{added:c,path:l,updated:d}=i.devConfig;r.success(`dev sidecar bindings: ${[...c,...d].join(", ")} → ${l}`)}for(const c of i.warnings)r.warn(c)}catch(a){const i=a instanceof Error?a.message:String(a);r.warn(`binding inference skipped: ${i}`)}try{const a=he(e);a.changed&&r.success(`bumped compatibility_date to ${a.date??"unknown"} (Workers Cache enabled) → ${a.wranglerPath??"wrangler.jsonc"}`)}catch(a){const i=a instanceof Error?a.message:String(a);r.warn(`compatibility date sync skipped: ${i}`)}Cr(e,r,o)},xr=async(e,r,o,t,n,a,i,s)=>{let c;r?(c=new we({name:"dots"}),c.start("running codegen")):o.info("running codegen");try{const l=oe({apiSpec:t,projectRoot:e,target:n,...fe(e)});c?.succeed("codegen complete"),c||o.success("codegen complete");const d=be(l.platformDiagnostics,o);if(d.errors.length>0)return{error:d.errors.join("; ")};const{errorAdvisories:g,names:m,shouldBlock:u}=$e(l.advisories,s);if(u){const v=`${g.length.toString()} ERROR-level ${g.length===1?"advisory":"advisories"} (${m.join(", ")}). Pass --no-strict-advisories to downgrade this to a warning and continue.`;return o.error(v),{error:v}}const f=await ue({cwd:e,logger:o,spawner:a,stdoutToStderr:i});return f.error!==void 0?{error:f.error}:{result:l}}catch(l){c?.failed("codegen failed");const d=l instanceof Error?l.message:String(l);return o.error(`codegen failed: ${d}`),{error:`codegen failed: ${d}`}}},_r=(e,r)=>({dryRun:r.dryRun,entry:Z(e),environment:r.env,outDir:r.outDir,preview:r.preview,temporary:r.temporary}),re=(e,r,o)=>{const{toolchain:t}=o;if(t===void 0)throw new Error(`deploy target "${o.id}" has no command-line toolchain`);const n=_r(e,r);return Y(o,e,"deploy",a=>t.deploy({...n,configPath:a}))},Tr=(e,r,o)=>{const t=re(e,r,o),n=Z(e);return n!==void 0&&r.logger.info(`class-B composition: deploying ${n} (overrides wrangler main)`),r.temporary&&r.logger.info("temporary account: deploying to a short-lived Cloudflare account (~60min); wrangler will print a claim URL"),r.dryRun&&r.logger.info("dry run: validating + bundling without publishing"),r.outDir!==void 0&&r.logger.info(`build artifact: emitting bundle to ${r.outDir}`),t.commit(),t.projection!==void 0&&t.projection.dropped.length>0&&r.logger.warn(`${o.name} ignores these wrangler keys, so they were left out of ${t.projection.configPath}: ${t.projection.dropped.join(", ")}`),t.command},A=(e,r)=>({code:h.USAGE,descriptor:void 0,error:e,validation:{problems:[],wranglerPath:void 0},...r}),Nr=(e,r)=>{for(const o of e.report?.warnings??[])r.warn(`wrangler.jsonc: ${o}`);if(e.problems.length===0)return!1;r.error("wrangler.jsonc validation failed:");for(const o of e.problems)r.error(` - ${o}`);return!0},Ir=(e,r,o)=>{const t=r.format==="json",n=r.dryRun!==!0,a=Tr(e,r,o),i=j(b(e),a);return{args:i.args,captureStdout:n&&!t,captureStdoutSilently:n&&t,command:i.command,cwd:e,stdoutToStderr:t&&!n}},Lr=async(e,r)=>{const o=e.cwd??process.cwd(),t=ee(e),n=ke(e),a={problems:[],wranglerPath:void 0},i=De(o,e.target);if(i.target===void 0){const u=i.error??"unknown deploy target";return e.logger.error(u),{error:u,validation:a}}const{target:s}=i;try{re(o,e,C(s))}catch(u){const f=u instanceof Error?u.message:String(u);return e.logger.error(f),{error:f,target:s,validation:a}}let c;if(!e.skipCodegen){const u=await xr(o,t,e.logger,e.apiSpec,s,e.spawner,e.format==="json",n);if(u.error!==void 0)return{error:u.error,target:s,validation:a};c=u.result}let l;if(c!==void 0){const u=Oe({allowDrift:e.allowSchemaDrift===!0,codegen:c,command:r,logger:e.logger,updateBaseline:e.updateSchemaBaseline===!0});if(u.blocked)return{error:`schema drift gate blocked ${r}`,schemaDrift:{blocked:!0,reason:u.reason},target:s,validation:a};l=u.rebless}const d=c&&Je({current:c.architecture,cwd:o,environment:e.env,logger:e.logger});await Pr(o,e.logger,c?.cronTriggers,s,e.env);const g=dr(o,e,r);if(g!==void 0)return{code:g.code,error:g.error,target:s,validation:a};const m=me({environment:e.env,projectRoot:o});return Nr(m,e.logger)?{error:"wrangler validation failed",target:s,validation:m}:{codegen:c,reblessSchemaBaseline:l,recordArchitecture:d,target:s,validation:m}},Mr=e=>{if(e.skipServices===!0)return"--skip-services";if(e.preview===!0)return"--preview uploads the app version only";if(e.temporary===!0)return"--temporary deploys the app to a throwaway account"},Ur=async(e,r,o,t)=>{const{error:n,services:a}=ne(e);if(n!==void 0)return n;if(a.length===0)return;const{toolchain:i}=o,s=i===void 0?`target "${o.id}" has no deploy command`:Mr(r);if(s!==void 0||i===void 0){const d=a.map(g=>g.worker).join(", ");r.logger.warn(`services not deployed (${s??""}): ${d} — deploy them yourself if the app calls anything new`);return}const c=b(e),l=[...new Map(a.map(d=>[d.wranglerPath,d])).values()];for(const d of l){const g=F(d.wranglerPath);let m;try{m=Y(o,g,"deploy",v=>i.deploy({configPath:v??d.wranglerPath,dryRun:r.dryRun===!0,environment:r.env}))}catch(v){return`service ${d.name} (${d.worker}): ${v instanceof Error?v.message:String(v)}`}m.commit();const u=j(c,m.command);r.logger.info(`deploying service ${d.name} (${d.worker}) via ${u.command} ${u.args.join(" ")}`);const f=await t({args:u.args,command:u.command,cwd:g,stdoutToStderr:r.format==="json"});if(f.code!==0)return`service ${d.name} (${d.worker}): ${u.command} ${u.args.join(" ")} exited ${String(f.code)} — stopping before the app`}},Or=async(e,r,o,t)=>{if(r!=="cloudflare")return;const n=e===void 0?void 0:P(e).parsed,a=(o===void 0?void 0:n?.env?.[o]?.account_id)??n?.account_id,i=await Pe({accountId:a});(i.verdict==="near"||i.verdict==="full")&&t.warn(i.fix===void 0?i.message:`${i.message} ${i.fix}`)},Fr=async(e,r,o,t,n)=>{const a=o==="cloudflare"&&r!==void 0?P(r).parsed:void 0;if(a===void 0)return;const i=(J(a,t).merged.artifacts??[]).flatMap(g=>typeof g?.binding=="string"&&typeof g.namespace=="string"?[{binding:g.binding,namespace:g.namespace}]:[]),s=i.length===0?void 0:G(e,R(e)).info?.jurisdiction;if(s===void 0)return;const c=(t===void 0?void 0:a.env?.[t]?.account_id)??a.account_id,l=await Promise.all(i.map(async g=>Ce({...g,accountId:c,jurisdiction:s}))),d=[];for(const g of l){const m=g.fix===void 0?g.message:`${g.message} ${g.fix}`;g.verdict==="unchecked"?n.warn(m):g.verdict!=="ok"&&(n.error(m),d.push(m))}return d.length===0?void 0:d.join(`
11
+ `)},Br=async e=>{const r=e.cwd??process.cwd(),o=ee(e),t=await Lr(e,e.commandName??"deploy");if(t.error!==void 0){if(t.validation.problems.length>0)return{code:h.USAGE,descriptor:void 0,error:t.error,validation:t.validation};const v=t.schemaDrift===void 0?void 0:{schemaDrift:t.schemaDrift};return A(t.error,{...v,...t.code===void 0?{}:{code:t.code}})}const{validation:n}=t,a=C(t.target),i=ir(e)??await Fr(r,n.wranglerPath,t.target,e.env,e.logger);if(i!==void 0)return A(i);const s=a.toolchain?.prebuildsContainerImages===!0?await jr(r,e):void 0;if(s!==void 0)return A(s);kr(r,e.logger,a),ge(r,v=>{e.logger.warn(v)}),await Or(n.wranglerPath,t.target,e.env,e.logger);const{error:c,mintedSecretsFile:l}=await Rr(r,e,o,a);if(c!==void 0)return e.logger.error(c),{code:h.USAGE,descriptor:void 0,error:c,mintedSecretsFile:l,validation:n};const d=e.spawner??D,g=await Ur(r,e,a,d);if(g!==void 0)return{code:h.FAILURE,descriptor:void 0,error:g,mintedSecretsFile:l,validation:n};const m=Ir(r,e,a);e.logger.info(`deploying via ${m.command} ${m.args.join(" ")}`);const u=await d(m);return m.captureStdoutSilently===!0&&u.stdout!==void 0&&u.stdout!==""&&process.stderr.write(u.stdout),u.code!==0?{code:u.code,descriptor:m,mintedSecretsFile:l,validation:n}:{...await wr({...t,cwd:r,descriptor:m,mintedSecretsFile:l,options:e,stdout:u.stdout}),logsAvailable:a.toolchain?.tail!==void 0}},Wr=async e=>{const{logger:r}=e,o=e.dryRun===!0?Ze(e.cwd??process.cwd()):void 0;let t;try{if(t=await Br({...e,logger:r}),t.code===0&&e.emitBindings!==void 0){const{error:n}=xe({destination:e.emitBindings,logger:r,projectRoot:e.cwd??process.cwd()});n!==void 0&&(r.error(n),t={...t,code:h.USAGE})}}finally{o?.()}if(e.format==="json")return t;if(t.code===0&&e.dryRun!==!0&&e.preview!==!0)Xe({cwd:e.cwd??process.cwd(),env:e.env,logger:e.logger,logsAvailable:t.logsAvailable===!0,mintedSecretsFile:t.mintedSecretsFile,url:t.deployment?.url});else if(t.code===0&&e.preview===!0){const n=t.deployment?.url;e.logger.success(n===void 0?"preview version uploaded":`preview version uploaded — ${n}`)}return t},gt=_e(async({cwd:e,format:r,logger:o,options:t})=>{const n=await Wr({allowSchemaDrift:t.allowSchemaDrift===!0,apiSpec:Se(t.apiSpec),cwd:e,dryRun:t.dryRun===!0,env:t.env,format:r,healthCheck:t.healthCheck===!0,logger:o,migrate:t.migrate===!0,migrateToken:t.migrateToken,migrateUrl:X({cwd:e,env:t.env,url:t.migrateUrl}),migrateYes:t.migrateYes===!0,preview:t.preview===!0,skipCodegen:t.prebuilt===!0,skipServices:t.skipServices===!0,strictAdvisories:t.strictAdvisories,target:t.target,temporary:t.temporary===!0,updateSchemaBaseline:t.updateSchemaBaseline===!0});return{code:n.code,data:{deployment:n.deployment,healthCheck:n.healthCheck,mintedSecretsFile:n.mintedSecretsFile,schemaDrift:n.schemaDrift,validation:n.validation},error:n.error}});export{gt as execute,Pr as provisionBindings,Wr as runDeployCommand,Lr as runPreDeployPipeline};
@@ -1,2 +1,2 @@
1
- import{readServiceBindings as U,runCodegen as M}from"@lunora/codegen";import{runPostCodegenHook as G,detectAgentRules as F,updateDevServerState as W,readDevServerState as X,DEV_DAEMON_ENV as x,detectAiAgent as Y,readProjectRemotePreference as J,readLiveDevServerState as V,DEV_HANDOFF_ENV as k,clearDevServerState as K,claimDevServerState as z,DEV_LOG_FILE_ENV as Q,inferLunoraBindings as Z,resolveSchemaDirectory as q,packageNamesFromBindings as ee,ensureDevVarsExample as re,ensureDevVariables as te,isInteractive as ne,DEV_VARS_FILE as T,DEV_VARS_EXAMPLE_FILE as oe,fillDevSecrets as ae,DEV_BINDINGS_FILE as ie,DEV_STATE_FILE as H,claimAgentRulesHint as se,AGENT_RULES_HINT as ce}from"@lunora/config";import{resolveRemoteEnabled as de}from"@lunora/config/cloudflare";import{p as le,a as ue}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{w as fe}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{existsSync as ge,watch as R}from"node:fs";import{join as ve,dirname as me}from"node:path";import{a as we}from"../packem_shared/codegen-error-AmH54ofi.mjs";import{a as he}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{d as Se}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as D}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{forceJsonLogging as ye}from"../packem_shared/createLogger-Cl18I8AX.mjs";import{createServer as pe,request as Ee}from"node:http";import{connect as be}from"node:net";import{pipeline as ke}from"node:stream";import{loadStudioAssets as A,studioAssetsStamp as P,renderStudioHtml as De,resolveAdminToken as _e,requestPathname as O,transportRejectionReason as $,SCHEMA_EDIT_ENDPOINT as Te,POLICY_SCAFFOLD_ENDPOINT as Re,SEED_ENDPOINT as Ae,sendStudioDocument as Pe,serveJsonHandler as Oe,isStandaloneModulePath as $e,readStandaloneAsset as Ce,assetContentType as Le,handleSchemaEditRequest as Ne,handlePolicyScaffoldRequest as Ie,handleSeedRequest as je,applyStudioAssetCache as Me}from"@lunora/config/studio-host";import{c as Fe}from"../packem_shared/tui-prompts-B3YwUhGw.mjs";import{setTimeout as We}from"node:timers/promises";import{r as xe,d as Ve,P as He,a as Be,b as _,c as Ue,s as Ge,n as B,e as Xe,f as Ye,g as Je,h as Ke,i as C,w as ze,j as Qe,k as Ze,t as qe,l as er,m as rr,o as tr}from"../packem_shared/plan-DJeIwzFu.mjs";import{provisionBindings as nr}from"./runDeployCommand.mjs";const or=100,ar=/(?:\.[cm]?[jt]sx?|(?:^|[/\\])tsconfig(?:\..+)?\.json)$/u,ir=300,L=/[/\\]/u,sr=(e,r,t)=>{const{apiSpec:n,logger:a,projectRoot:i,target:u}=e;try{const o=M({apiSpec:n,lunoraDirectory:r,projectRoot:i,target:u});a.success(`codegen: wrote ${r}/_generated (${t})`),he(o.platformDiagnostics,a)}catch(o){return a.error(we(o,t)),!1}return!0},cr=e=>{const r=e.lunoraDirectory??"lunora",t=ve(e.projectRoot,r),n=e.debounceMs??or;let a=!1,i=!1,u=!1,o,d=0,v=Promise.resolve(),h;const y=new Promise(f=>{h=f}),w=f=>{a||(o=f,!i&&(i=!0,v=(async()=>{try{for(;o!==void 0;){const g=o;if(o=void 0,!!sr(e,r,g)){u=!0;try{(await G({cwd:e.projectRoot,logger:e.logger,spawner:e.spawner,stdoutToStderr:e.jsonLogs})).ran&&(d=Date.now())}finally{u=!1}}}}catch(g){e.logger.error(`codegen watch: ${g instanceof Error?g.message:String(g)}`)}finally{i=!1,h()}})()))};w("startup");const c=f=>(e.logger.warn(`codegen watch unavailable (${f}) — schema edits will NOT auto-regenerate. Run \`lunora codegen\` manually after each edit.`),{close:()=>(a=!0,o=void 0,v),ready:y,watchAvailable:!1});let s,l;if(!ge(t))return c(`no such directory: ${t}`);const m=f=>{if(u||Date.now()-d<ir){s&&(clearTimeout(s),s=void 0);return}s&&clearTimeout(s),s=setTimeout(()=>{w(`change: ${f??"?"}`)},n)},S=[];try{l=R(t,{recursive:!0},(f,g)=>{typeof g=="string"&&g.split(L).includes("_generated")||m(g)});for(const f of U(e.projectRoot).services)if(f.rpcEntrypoint!==void 0){const g=R(me(f.wranglerPath),{recursive:!0},(b,E)=>{typeof E=="string"&&ar.test(E)&&!E.split(L).includes("node_modules")&&m(E)});g.on("error",b=>{e.logger.warn(`codegen watch: stopped watching service "${f.name}" (${b.message})`),g.close()}),S.push(g)}}catch(f){l?.close();for(const g of S)g.close();return c(f instanceof Error?f.message:String(f))}const p=l;return{close:()=>{a=!0,o=void 0,s&&clearTimeout(s),p.close();for(const f of S)f.close();return v},ready:y,watchAvailable:!0}},N="/_lunora",I=3e4,j=(e,r,t)=>{const n=Ee({headers:{...e.headers,host:t.host},hostname:t.hostname,method:e.method,path:e.url,port:t.port},a=>{r.writeHead(a.statusCode??502,a.headers),ke(a,r,()=>{})});n.setTimeout(I,()=>{n.destroy(new Error(`no response within ${String(I)}ms`))}),n.on("error",a=>{if(r.headersSent){r.destroy();return}r.statusCode=a.message.startsWith("no response within")?504:502,r.end(`lunora dev: worker unreachable (${a.message})`)}),r.on("close",()=>{r.writableFinished||n.destroy()}),e.pipe(n)},dr=5e3,lr=(e,r,t,n)=>{const a=be({host:n.hostname,port:Number(n.port)},()=>{a.setTimeout(0);const i=[`${e.method??"GET"} ${e.url??"/"} HTTP/1.1`];for(const[u,o]of Object.entries(e.headers))if(u!=="host")for(const d of Array.isArray(o)?o:[o])d!==void 0&&i.push(`${u}: ${d}`);i.push(`host: ${n.host}`,"",""),a.write(i.join(`\r
2
- `)),t.length>0&&a.write(t),a.pipe(r),r.pipe(a)});a.setTimeout(dr,()=>a.destroy()),a.on("error",()=>r.destroy()),r.on("error",()=>a.destroy())},ur=async e=>{const r=e.host??"127.0.0.1",t=r==="127.0.0.1"||r==="localhost"||r==="::1",n=new URL(e.workerOrigin);let a=A(e.logger,import.meta.url),i=P(import.meta.url);const u=De({adminToken:t?_e(e.cwd):void 0,basePath:"/",dataEditable:t,rulesInstalled:F(e.cwd).installed,runAsIdentity:t,schemaEditable:t,scriptSrc:"/studio.js",styleHref:"/styles.css"}),o=(c,s,l,m,S)=>{Me(c,s,S,i)||(s.statusCode=200,s.setHeader("Content-Type",m),s.end(l))},d=(c,s,l)=>{c.statusCode=s,c.setHeader("Content-Type","text/plain"),c.end(l)},v=(c,s,l,m)=>{if(t){Oe(c,s,l,e.cwd,{apiSpec:e.apiSpec});return}d(s,403,m)},h=(c,s,l)=>{const m=c==="/styles.css",S=$e(c);if(!m&&!S)return!1;const p=P(import.meta.url);if(p!==i&&(a=A(e.logger,import.meta.url),i=p),a===void 0)return d(l,501,"Lunora studio assets not found — install and build @lunora/studio."),!0;if(m)return o(s,l,a.styles,"text/css; charset=utf-8","styles.css"),!0;const f=c.slice(c.lastIndexOf("/")+1),g=Ce(f,import.meta.url);return g===void 0?(d(l,404,"Not found"),!0):(o(s,l,g,Le(f),f),!0)},y=Buffer.from(u),w=pe((c,s)=>{const l=O(c.url??"/");if(t){const S=$(c,e.logger);if(S!==void 0){d(s,403,S);return}}if(l.startsWith(N)){if(!t){d(s,403,"Lunora studio: the worker admin proxy is only available on a loopback bind.");return}j(c,s,n);return}if(l===Te){v(c,s,Ne,"Lunora schema editing is only available on loopback hosts in dev.");return}if(l===Re){v(c,s,Ie,"Lunora policy scaffolding is only available on loopback hosts in dev.");return}if(l===Ae){v(c,s,je,"Lunora data seeding is only available on loopback hosts in dev.");return}if(h(l,c,s))return;const m=c.headers["sec-fetch-mode"];if(t&&typeof m=="string"&&m!=="navigate"){j(c,s,n);return}Pe(s,y)});return w.on("upgrade",(c,s,l)=>{if(!t||$(c,e.logger)!==void 0){s.destroy();return}O(c.url??"").startsWith(N)?lr(c,s,l,n):s.destroy()}),await new Promise((c,s)=>{w.once("error",l=>{l.code==="EADDRINUSE"?s(new Error(`studio port ${String(e.port)} is already in use — pass a different port with --port, or stop the process using it`,{cause:l})):s(l)}),w.listen(e.port,r,()=>{c()})}),{close:()=>new Promise(c=>{w.close(()=>{c()})}),url:`http://${r==="0.0.0.0"||r==="::"?"localhost":r}:${String(e.port)}`}},fr=async e=>{const{cwd:r,logger:t,origin:n,signal:a}=e,i=e.probe??Ve,u=xe(e.readyTimeoutMs),o=Date.now()+u,d=()=>a.aborted;for(;!d()&&Date.now()<o;){let v=!1;try{v=await i(n,a)}catch{}if(d()||Date.now()>=o)break;if(v)return W(r,{readyAt:new Date().toISOString()},{expectedPid:process.pid}),X(r)?.readyAt!==void 0;try{await We(He,void 0,{signal:a})}catch{}}return d()||t.warn(`server did not answer on ${n} within ${String(Math.round(u/1e3))}s — .lunora/dev.json will have no readyAt, so anything polling for readiness will keep waiting. The server itself is unaffected; raise LUNORA_DEV_READY_TIMEOUT_MS if it is just slow to boot.`),!1},gr=(e,r,t,n)=>{e.info(""),e.success("Lunora dev"),e.info(` ➜ Worker: ${r.workerOrigin}`),t!==void 0&&e.info(` ➜ Studio: ${t}`),r.runsCodegenWatch&&e.info(" ➜ Codegen: watching lunora/"),n!==void 0&&e.info(` ➜ Supervisor: ${n} (needs) · ${H} (status)`),r.remote.enabled&&(r.remote.bindings.length>0?e.info(` ➜ Remote: ${r.remote.bindings.join(", ")} → deployed worker`):e.warn(` ➜ Remote: requested but inactive (${r.remote.reason??"no eligible bindings"}) — running fully local`)),e.info("")},vr=(e,r)=>{F(r).installed||!se()||(e.info(` ⓘ ${ce}`),e.info(""))},mr=async(e,r)=>{try{const n=await Z({projectRoot:r,schemaDir:q(r)}),a=ee(n),i=(e.ensureExample??re)(r,a);i.length>0&&e.logger.info(`Updated .dev.vars.example with secrets for: ${a.join(", ")} (${i.join(", ")})`)}catch{}(await(e.ensureEnv??te)({confirm:Fe(),cwd:r,info:n=>{e.logger.info(n)}})).status==="declined"&&!ne()&&e.logger.info(`hint: ${T} was not scaffolded (non-interactive run). Copy ${oe} → ${T} and fill in secrets, or run \`lunora dev\` in an interactive terminal to scaffold automatically.`);try{(e.fillSecrets??ae)({cwd:r,info:n=>{e.logger.info(n)}})}catch{}},wr=(e,r,t,n,a)=>{if(e.flavor!=="wrangler")return;n!==void 0&&W(r,{studioUrl:n});let i;try{i=tr(r,t)}catch{}return gr(t,e,n,a),i},hr=(e,r)=>{const t=Number(process.env[k]),n=z(r,{background:process.env[x]==="1",logFile:process.env[Q],mode:"cli",pid:process.pid,startedAt:new Date().toISOString(),url:e.workerOrigin},Number.isInteger(t)&&t>0?{supersedePid:t}:void 0);return n.ok?void 0:n.existing},Sr=e=>{const{cwd:r,destination:t,logger:n,plan:a}=e,i=t!==void 0,u=t??ie,o=fe({destination:u,dev:{...a.flavor==="wrangler"?{origin:a.workerOrigin}:{},statusFile:H},logger:i?n:{...n,success:()=>{},warn:()=>{}},projectRoot:r});return o.error!==void 0?i?o:(n.debug?.(`skipped the default binding manifest: ${o.error}`),{}):{written:u}},yr=async(e,r,t,n)=>{if(r.studioEnabled)try{return await(e.startStudio??ur)({apiSpec:e.apiSpec,cwd:t,logger:{warnOnce:a=>{n.warn(a)}},port:r.studioPort,workerOrigin:r.workerOrigin})}catch(a){n.warn(`studio server failed to start (${a instanceof Error?a.message:String(a)}) — continuing without it`);return}},pr=e=>{const r=[e.runsCodegenWatch?"codegen watch":void 0,e.studioEnabled?"studio":void 0].filter(n=>n!==void 0);return`--no-worker: not starting wrangler. ${r.length>0?`${r.join(" + ")} running`:"nothing else to run"}; your task runner owns the worker on ${e.workerOrigin}.`},Er=(e,r,t,n,a)=>{if(!(e.sidecar===void 0||!er(r)))try{M({apiSpec:r.apiSpec,lunoraDirectory:"lunora",projectRoot:t,target:a})}catch(i){n.warn(`codegen (pre-sidecar) failed: ${i instanceof Error?i.message:String(i)} — the framework dev server will retry`)}},br=e=>e.flavor==="vite"?"starting vite dev (worker + studio + codegen run inside Vite via @lunora/vite)":`starting ${e.wrangler.tag} dev + studio`,kr=async(e,r,t,n,a)=>{try{return e.celldSession===!0?await rr({logger:a,port:e.workerPort,projectRoot:n,start:r.startCelldSession}):t(e.wrangler,a)}catch(i){a.error(`could not start the worker: ${i instanceof Error?i.message:String(i)}`);return}},Dr=async e=>{const{logger:r}=e,t=e.cwd??process.cwd(),n=e.flavor??Xe(t),a=ue(t,e.target);if(a.target===void 0)throw new Error(a.error??"unknown deploy target");const{target:i}=a,u=Ye(i,n,r);u==="wrangler"&&await nr(t,r,void 0,i,void 0);const o=await Je({...e,flavor:u,target:i}),d={remoteCleanup:o.remote.cleanup,serviceConfigCleanup:o.serviceConfigCleanup};try{const v=Number(process.env[k]),h=V(t);if(h!==void 0&&h.pid!==process.pid&&h.pid!==v)return _(r,h),{code:0,plan:o};const y=hr(o,t);if(y!==void 0)return _(r,y),{code:0,plan:o};(o.flavor==="vite"||o.flavor==="framework-worker")&&(o.wrangler.env={...o.wrangler.env,[k]:String(process.pid)}),await mr(e,t),r.info(br(o)),Ke(r,t),o.ipv4LoopbackForced&&r.info("no IPv6 loopback (::1) on this host — binding the worker to 127.0.0.1 (--ip) so wrangler dev doesn't crash. Pin `dev.ip` in wrangler.jsonc to override."),o.runsCodegenWatch&&(d.codegen=(e.startCodegen??cr)({apiSpec:e.apiSpec,jsonLogs:e.jsonLogs,logger:r,projectRoot:t,target:i})),d.studio=await yr(e,o,t,r);const w=Sr({cwd:t,destination:e.emitBindings,logger:r,plan:o});if(w.error!==void 0)return r.error(w.error),{code:D.USAGE,plan:o};await d.codegen?.ready;const c=d.studio?.url;o.frameworkHint!==void 0&&r.warn(o.frameworkHint);const s=()=>{o.flavor==="wrangler"&&(d.readyProbe=new AbortController,fr({cwd:t,logger:r,origin:o.workerOrigin,probe:e.probeReady,signal:d.readyProbe.signal}))};if(!o.workerEnabled)return s(),r.info(pr(o)),d.tunnel=C({cwd:t,logger:r,plan:o,tunnel:e.tunnel}),{code:await(e.waitForInterrupt??ze)(r),plan:o};Er(o,e,t,r,i);const l=e.startWorker??Qe,m=await kr(o,e,l,t,r);if(m===void 0)return{code:D.FAILURE,plan:o};const S=o.sidecar===void 0?void 0:l(o.sidecar,r);return s(),d.containerLogs=wr(o,t,r,c,w.written),d.tunnel=C({cwd:t,logger:r,plan:o,tunnel:e.tunnel}),vr(r,t),{code:await Ze(m,S,r),plan:o}}finally{d.readyProbe?.abort(),K(t,process.pid),await qe(d)}},_r=e=>({codegen:e.codegen===!1?!1:void 0,studio:e.studio===!1?!1:void 0,worker:e.worker===!1?!1:void 0}),Tr=e=>{if(e.local===!0&&e.remote===!0)return"`--local` and `--remote` are mutually exclusive — pass at most one.";const{entries:r,invalid:t}=B(e.allowMail);if(t.length>0)return`\`--allow-mail\` takes email addresses or '*@domain' — not ${t.map(n=>`"${n}"`).join(", ")}.`;if(r.length>0&&e.tunnel!==!0)return"`--allow-mail` only applies to a tunnel — add `--tunnel`."},Rr=e=>e.tunnel===!0?{allowMail:B(e.allowMail).entries}:void 0,Jr=Se(async({argument:e,cwd:r,logger:t,options:n})=>{const a=n.json===!0,i=Be({cwd:r,json:a,lines:n.lines,logger:t,subcommand:e[0]});if(i!==void 0)return i;const u=process.env[x]==="1",o=u?void 0:Y(),d=a||o!==void 0;d&&ye(),o!==void 0&&n.background!==!0&&t.info(`AI agent detected (${o.name} via ${o.variable}) — starting the dev server in background mode with JSON logs. Set LUNORA_AGENT_MODE=0 to opt out.`);const v=Tr(n);if(v!==void 0)return t.error(`dev: ${v}`),{code:D.USAGE};const h=Rr(n),y=n.local===!0?!1:de({configPreference:J(r),envValue:process.env.LUNORA_REMOTE,flag:n.remote});if(!u&&(n.background===!0||o!==void 0)){const w=V(r);return w!==void 0?(_(t,w),{code:0}):(h?.allowMail.length===0&&Ue(t),Ge({cwd:r,jsonLogs:d,logger:t,options:n,remote:y}))}return Dr({apiSpec:le(n.apiSpec),cwd:r,emitBindings:n.emitBindings,inspectorPort:n.inspectorPort,jsonLogs:d,local:n.local,logger:t,port:n.port,remote:y,target:n.target,tunnel:h,workerPort:n.workerPort,..._r(n)})});export{Tr as devFlagConflict,Jr as execute,_r as negatableDevFlags,Dr as runDevCommand};
1
+ import{readServiceBindings as G,runCodegen as M}from"@lunora/codegen";import{runPostCodegenHook as X,detectAgentRules as F,updateDevServerState as W,readDevServerState as Y,DEV_DAEMON_ENV as x,detectAiAgent as J,readProjectRemotePreference as K,readLiveDevServerState as V,DEV_HANDOFF_ENV as k,clearDevServerState as z,claimDevServerState as Q,DEV_LOG_FILE_ENV as Z,inferLunoraBindings as q,resolveSchemaDirectory as ee,secretSourcesFromBindings as re,ensureDevVarsExample as te,ensureDevVariables as ne,isInteractive as oe,DEV_VARS_FILE as T,DEV_VARS_EXAMPLE_FILE as ae,fillDevSecrets as ie,DEV_BINDINGS_FILE as se,DEV_STATE_FILE as H,claimAgentRulesHint as ce,AGENT_RULES_HINT as de}from"@lunora/config";import{wranglerCodegenInputs as B,resolveRemoteEnabled as le}from"@lunora/config/cloudflare";import{p as ue,a as fe}from"../packem_shared/deploy-target-DCWwiuAe.mjs";import{w as ge}from"../packem_shared/binding-manifest-file-CQ1eQYy1.mjs";import{existsSync as ve,watch as R}from"node:fs";import{join as me,dirname as we}from"node:path";import{a as he}from"../packem_shared/codegen-error-AmH54ofi.mjs";import{a as Se}from"../packem_shared/platform-diagnostics-Cn2g6Jh-.mjs";import{d as ye}from"../packem_shared/command-CAXl2A1S.mjs";import{EXIT_CODE as D}from"../packem_shared/EXIT_CODE-D_XCixv8.mjs";import{forceJsonLogging as pe}from"../packem_shared/createLogger-Cl18I8AX.mjs";import{createServer as Ee,request as be}from"node:http";import{connect as ke}from"node:net";import{pipeline as De}from"node:stream";import{loadStudioAssets as A,studioAssetsStamp as P,renderStudioHtml as _e,resolveAdminToken as Te,requestPathname as O,transportRejectionReason as $,SCHEMA_EDIT_ENDPOINT as Re,POLICY_SCAFFOLD_ENDPOINT as Ae,SEED_ENDPOINT as Pe,sendStudioDocument as Oe,serveJsonHandler as $e,isStandaloneModulePath as Ce,readStandaloneAsset as Le,assetContentType as Ne,handleSchemaEditRequest as Ie,handlePolicyScaffoldRequest as je,handleSeedRequest as Me,applyStudioAssetCache as Fe}from"@lunora/config/studio-host";import{c as We}from"../packem_shared/tui-prompts-B3YwUhGw.mjs";import{setTimeout as xe}from"node:timers/promises";import{r as Ve,d as He,P as Be,a as Ue,b as _,c as Ge,s as Xe,n as U,e as Ye,f as Je,g as Ke,h as ze,i as C,w as Qe,j as Ze,k as qe,t as er,l as rr,m as tr,o as nr}from"../packem_shared/plan-DJeIwzFu.mjs";import{provisionBindings as or}from"./runDeployCommand.mjs";const ar=100,ir=/(?:\.[cm]?[jt]sx?|(?:^|[/\\])tsconfig(?:\..+)?\.json)$/u,sr=300,L=/[/\\]/u,cr=(e,r,t)=>{const{apiSpec:n,logger:a,projectRoot:i,target:u}=e;try{const o=M({apiSpec:n,lunoraDirectory:r,projectRoot:i,target:u,...B(i)});a.success(`codegen: wrote ${r}/_generated (${t})`),Se(o.platformDiagnostics,a)}catch(o){return a.error(he(o,t)),!1}return!0},dr=e=>{const r=e.lunoraDirectory??"lunora",t=me(e.projectRoot,r),n=e.debounceMs??ar;let a=!1,i=!1,u=!1,o,d=0,v=Promise.resolve(),h;const y=new Promise(f=>{h=f}),w=f=>{a||(o=f,!i&&(i=!0,v=(async()=>{try{for(;o!==void 0;){const g=o;if(o=void 0,!!cr(e,r,g)){u=!0;try{(await X({cwd:e.projectRoot,logger:e.logger,spawner:e.spawner,stdoutToStderr:e.jsonLogs})).ran&&(d=Date.now())}finally{u=!1}}}}catch(g){e.logger.error(`codegen watch: ${g instanceof Error?g.message:String(g)}`)}finally{i=!1,h()}})()))};w("startup");const c=f=>(e.logger.warn(`codegen watch unavailable (${f}) — schema edits will NOT auto-regenerate. Run \`lunora codegen\` manually after each edit.`),{close:()=>(a=!0,o=void 0,v),ready:y,watchAvailable:!1});let s,l;if(!ve(t))return c(`no such directory: ${t}`);const m=f=>{if(u||Date.now()-d<sr){s&&(clearTimeout(s),s=void 0);return}s&&clearTimeout(s),s=setTimeout(()=>{w(`change: ${f??"?"}`)},n)},S=[];try{l=R(t,{recursive:!0},(f,g)=>{typeof g=="string"&&g.split(L).includes("_generated")||m(g)});for(const f of G(e.projectRoot).services)if(f.rpcEntrypoint!==void 0){const g=R(we(f.wranglerPath),{recursive:!0},(b,E)=>{typeof E=="string"&&ir.test(E)&&!E.split(L).includes("node_modules")&&m(E)});g.on("error",b=>{e.logger.warn(`codegen watch: stopped watching service "${f.name}" (${b.message})`),g.close()}),S.push(g)}}catch(f){l?.close();for(const g of S)g.close();return c(f instanceof Error?f.message:String(f))}const p=l;return{close:()=>{a=!0,o=void 0,s&&clearTimeout(s),p.close();for(const f of S)f.close();return v},ready:y,watchAvailable:!0}},N="/_lunora",I=3e4,j=(e,r,t)=>{const n=be({headers:{...e.headers,host:t.host},hostname:t.hostname,method:e.method,path:e.url,port:t.port},a=>{r.writeHead(a.statusCode??502,a.headers),De(a,r,()=>{})});n.setTimeout(I,()=>{n.destroy(new Error(`no response within ${String(I)}ms`))}),n.on("error",a=>{if(r.headersSent){r.destroy();return}r.statusCode=a.message.startsWith("no response within")?504:502,r.end(`lunora dev: worker unreachable (${a.message})`)}),r.on("close",()=>{r.writableFinished||n.destroy()}),e.pipe(n)},lr=5e3,ur=(e,r,t,n)=>{const a=ke({host:n.hostname,port:Number(n.port)},()=>{a.setTimeout(0);const i=[`${e.method??"GET"} ${e.url??"/"} HTTP/1.1`];for(const[u,o]of Object.entries(e.headers))if(u!=="host")for(const d of Array.isArray(o)?o:[o])d!==void 0&&i.push(`${u}: ${d}`);i.push(`host: ${n.host}`,"",""),a.write(i.join(`\r
2
+ `)),t.length>0&&a.write(t),a.pipe(r),r.pipe(a)});a.setTimeout(lr,()=>a.destroy()),a.on("error",()=>r.destroy()),r.on("error",()=>a.destroy())},fr=async e=>{const r=e.host??"127.0.0.1",t=r==="127.0.0.1"||r==="localhost"||r==="::1",n=new URL(e.workerOrigin);let a=A(e.logger,import.meta.url),i=P(import.meta.url);const u=_e({adminToken:t?Te(e.cwd):void 0,basePath:"/",dataEditable:t,rulesInstalled:F(e.cwd).installed,runAsIdentity:t,schemaEditable:t,scriptSrc:"/studio.js",styleHref:"/styles.css"}),o=(c,s,l,m,S)=>{Fe(c,s,S,i)||(s.statusCode=200,s.setHeader("Content-Type",m),s.end(l))},d=(c,s,l)=>{c.statusCode=s,c.setHeader("Content-Type","text/plain"),c.end(l)},v=(c,s,l,m)=>{if(t){$e(c,s,l,e.cwd,{apiSpec:e.apiSpec});return}d(s,403,m)},h=(c,s,l)=>{const m=c==="/styles.css",S=Ce(c);if(!m&&!S)return!1;const p=P(import.meta.url);if(p!==i&&(a=A(e.logger,import.meta.url),i=p),a===void 0)return d(l,501,"Lunora studio assets not found — install and build @lunora/studio."),!0;if(m)return o(s,l,a.styles,"text/css; charset=utf-8","styles.css"),!0;const f=c.slice(c.lastIndexOf("/")+1),g=Le(f,import.meta.url);return g===void 0?(d(l,404,"Not found"),!0):(o(s,l,g,Ne(f),f),!0)},y=Buffer.from(u),w=Ee((c,s)=>{const l=O(c.url??"/");if(t){const S=$(c,e.logger);if(S!==void 0){d(s,403,S);return}}if(l.startsWith(N)){if(!t){d(s,403,"Lunora studio: the worker admin proxy is only available on a loopback bind.");return}j(c,s,n);return}if(l===Re){v(c,s,Ie,"Lunora schema editing is only available on loopback hosts in dev.");return}if(l===Ae){v(c,s,je,"Lunora policy scaffolding is only available on loopback hosts in dev.");return}if(l===Pe){v(c,s,Me,"Lunora data seeding is only available on loopback hosts in dev.");return}if(h(l,c,s))return;const m=c.headers["sec-fetch-mode"];if(t&&typeof m=="string"&&m!=="navigate"){j(c,s,n);return}Oe(s,y)});return w.on("upgrade",(c,s,l)=>{if(!t||$(c,e.logger)!==void 0){s.destroy();return}O(c.url??"").startsWith(N)?ur(c,s,l,n):s.destroy()}),await new Promise((c,s)=>{w.once("error",l=>{l.code==="EADDRINUSE"?s(new Error(`studio port ${String(e.port)} is already in use — pass a different port with --port, or stop the process using it`,{cause:l})):s(l)}),w.listen(e.port,r,()=>{c()})}),{close:()=>new Promise(c=>{w.close(()=>{c()})}),url:`http://${r==="0.0.0.0"||r==="::"?"localhost":r}:${String(e.port)}`}},gr=async e=>{const{cwd:r,logger:t,origin:n,signal:a}=e,i=e.probe??He,u=Ve(e.readyTimeoutMs),o=Date.now()+u,d=()=>a.aborted;for(;!d()&&Date.now()<o;){let v=!1;try{v=await i(n,a)}catch{}if(d()||Date.now()>=o)break;if(v)return W(r,{readyAt:new Date().toISOString()},{expectedPid:process.pid}),Y(r)?.readyAt!==void 0;try{await xe(Be,void 0,{signal:a})}catch{}}return d()||t.warn(`server did not answer on ${n} within ${String(Math.round(u/1e3))}s — .lunora/dev.json will have no readyAt, so anything polling for readiness will keep waiting. The server itself is unaffected; raise LUNORA_DEV_READY_TIMEOUT_MS if it is just slow to boot.`),!1},vr=(e,r,t,n)=>{e.info(""),e.success("Lunora dev"),e.info(` ➜ Worker: ${r.workerOrigin}`),t!==void 0&&e.info(` ➜ Studio: ${t}`),r.runsCodegenWatch&&e.info(" ➜ Codegen: watching lunora/"),n!==void 0&&e.info(` ➜ Supervisor: ${n} (needs) · ${H} (status)`),r.remote.enabled&&(r.remote.bindings.length>0?e.info(` ➜ Remote: ${r.remote.bindings.join(", ")} → deployed worker`):e.warn(` ➜ Remote: requested but inactive (${r.remote.reason??"no eligible bindings"}) — running fully local`)),e.info("")},mr=(e,r)=>{F(r).installed||!ce()||(e.info(` ⓘ ${de}`),e.info(""))},wr=async(e,r)=>{try{const n=await q({projectRoot:r,schemaDir:ee(r)}),a=re(n),i=(e.ensureExample??te)(r,a);if(i.length>0){const u=a.map(o=>o.includes(":")?`${o.replace(":"," (")})`:o);e.logger.info(`Updated .dev.vars.example with secrets for: ${u.join(", ")} (${i.join(", ")})`)}}catch{}(await(e.ensureEnv??ne)({confirm:We(),cwd:r,info:n=>{e.logger.info(n)}})).status==="declined"&&!oe()&&e.logger.info(`hint: ${T} was not scaffolded (non-interactive run). Copy ${ae} → ${T} and fill in secrets, or run \`lunora dev\` in an interactive terminal to scaffold automatically.`);try{(e.fillSecrets??ie)({cwd:r,info:n=>{e.logger.info(n)}})}catch{}},hr=(e,r,t,n,a)=>{if(e.flavor!=="wrangler")return;n!==void 0&&W(r,{studioUrl:n});let i;try{i=nr(r,t)}catch{}return vr(t,e,n,a),i},Sr=(e,r)=>{const t=Number(process.env[k]),n=Q(r,{background:process.env[x]==="1",logFile:process.env[Z],mode:"cli",pid:process.pid,startedAt:new Date().toISOString(),url:e.workerOrigin},Number.isInteger(t)&&t>0?{supersedePid:t}:void 0);return n.ok?void 0:n.existing},yr=e=>{const{cwd:r,destination:t,logger:n,plan:a}=e,i=t!==void 0,u=t??se,o=ge({destination:u,dev:{...a.flavor==="wrangler"?{origin:a.workerOrigin}:{},statusFile:H},logger:i?n:{...n,success:()=>{},warn:()=>{}},projectRoot:r});return o.error!==void 0?i?o:(n.debug?.(`skipped the default binding manifest: ${o.error}`),{}):{written:u}},pr=async(e,r,t,n)=>{if(r.studioEnabled)try{return await(e.startStudio??fr)({apiSpec:e.apiSpec,cwd:t,logger:{warnOnce:a=>{n.warn(a)}},port:r.studioPort,workerOrigin:r.workerOrigin})}catch(a){n.warn(`studio server failed to start (${a instanceof Error?a.message:String(a)}) — continuing without it`);return}},Er=e=>{const r=[e.runsCodegenWatch?"codegen watch":void 0,e.studioEnabled?"studio":void 0].filter(n=>n!==void 0);return`--no-worker: not starting wrangler. ${r.length>0?`${r.join(" + ")} running`:"nothing else to run"}; your task runner owns the worker on ${e.workerOrigin}.`},br=(e,r,t,n,a)=>{if(!(e.sidecar===void 0||!rr(r)))try{M({apiSpec:r.apiSpec,lunoraDirectory:"lunora",projectRoot:t,target:a,...B(t)})}catch(i){n.warn(`codegen (pre-sidecar) failed: ${i instanceof Error?i.message:String(i)} — the framework dev server will retry`)}},kr=e=>e.flavor==="vite"?"starting vite dev (worker + studio + codegen run inside Vite via @lunora/vite)":`starting ${e.wrangler.tag} dev + studio`,Dr=async(e,r,t,n,a)=>{try{return e.celldSession===!0?await tr({logger:a,port:e.workerPort,projectRoot:n,start:r.startCelldSession}):t(e.wrangler,a)}catch(i){a.error(`could not start the worker: ${i instanceof Error?i.message:String(i)}`);return}},_r=async e=>{const{logger:r}=e,t=e.cwd??process.cwd(),n=e.flavor??Ye(t),a=fe(t,e.target);if(a.target===void 0)throw new Error(a.error??"unknown deploy target");const{target:i}=a,u=Je(i,n,r);u==="wrangler"&&await or(t,r,void 0,i,void 0);const o=await Ke({...e,flavor:u,target:i}),d={remoteCleanup:o.remote.cleanup,serviceConfigCleanup:o.serviceConfigCleanup};try{const v=Number(process.env[k]),h=V(t);if(h!==void 0&&h.pid!==process.pid&&h.pid!==v)return _(r,h),{code:0,plan:o};const y=Sr(o,t);if(y!==void 0)return _(r,y),{code:0,plan:o};(o.flavor==="vite"||o.flavor==="framework-worker")&&(o.wrangler.env={...o.wrangler.env,[k]:String(process.pid)}),await wr(e,t),r.info(kr(o)),ze(r,t),o.ipv4LoopbackForced&&r.info("no IPv6 loopback (::1) on this host — binding the worker to 127.0.0.1 (--ip) so wrangler dev doesn't crash. Pin `dev.ip` in wrangler.jsonc to override."),o.runsCodegenWatch&&(d.codegen=(e.startCodegen??dr)({apiSpec:e.apiSpec,jsonLogs:e.jsonLogs,logger:r,projectRoot:t,target:i})),d.studio=await pr(e,o,t,r);const w=yr({cwd:t,destination:e.emitBindings,logger:r,plan:o});if(w.error!==void 0)return r.error(w.error),{code:D.USAGE,plan:o};await d.codegen?.ready;const c=d.studio?.url;o.frameworkHint!==void 0&&r.warn(o.frameworkHint);const s=()=>{o.flavor==="wrangler"&&(d.readyProbe=new AbortController,gr({cwd:t,logger:r,origin:o.workerOrigin,probe:e.probeReady,signal:d.readyProbe.signal}))};if(!o.workerEnabled)return s(),r.info(Er(o)),d.tunnel=C({cwd:t,logger:r,plan:o,tunnel:e.tunnel}),{code:await(e.waitForInterrupt??Qe)(r),plan:o};br(o,e,t,r,i);const l=e.startWorker??Ze,m=await Dr(o,e,l,t,r);if(m===void 0)return{code:D.FAILURE,plan:o};const S=o.sidecar===void 0?void 0:l(o.sidecar,r);return s(),d.containerLogs=hr(o,t,r,c,w.written),d.tunnel=C({cwd:t,logger:r,plan:o,tunnel:e.tunnel}),mr(r,t),{code:await qe(m,S,r),plan:o}}finally{d.readyProbe?.abort(),z(t,process.pid),await er(d)}},Tr=e=>({codegen:e.codegen===!1?!1:void 0,studio:e.studio===!1?!1:void 0,worker:e.worker===!1?!1:void 0}),Rr=e=>{if(e.local===!0&&e.remote===!0)return"`--local` and `--remote` are mutually exclusive — pass at most one.";const{entries:r,invalid:t}=U(e.allowMail);if(t.length>0)return`\`--allow-mail\` takes email addresses or '*@domain' — not ${t.map(n=>`"${n}"`).join(", ")}.`;if(r.length>0&&e.tunnel!==!0)return"`--allow-mail` only applies to a tunnel — add `--tunnel`."},Ar=e=>e.tunnel===!0?{allowMail:U(e.allowMail).entries}:void 0,Kr=ye(async({argument:e,cwd:r,logger:t,options:n})=>{const a=n.json===!0,i=Ue({cwd:r,json:a,lines:n.lines,logger:t,subcommand:e[0]});if(i!==void 0)return i;const u=process.env[x]==="1",o=u?void 0:J(),d=a||o!==void 0;d&&pe(),o!==void 0&&n.background!==!0&&t.info(`AI agent detected (${o.name} via ${o.variable}) — starting the dev server in background mode with JSON logs. Set LUNORA_AGENT_MODE=0 to opt out.`);const v=Rr(n);if(v!==void 0)return t.error(`dev: ${v}`),{code:D.USAGE};const h=Ar(n),y=n.local===!0?!1:le({configPreference:K(r),envValue:process.env.LUNORA_REMOTE,flag:n.remote});if(!u&&(n.background===!0||o!==void 0)){const w=V(r);return w!==void 0?(_(t,w),{code:0}):(h?.allowMail.length===0&&Ge(t),Xe({cwd:r,jsonLogs:d,logger:t,options:n,remote:y}))}return _r({apiSpec:ue(n.apiSpec),cwd:r,emitBindings:n.emitBindings,inspectorPort:n.inspectorPort,jsonLogs:d,local:n.local,logger:t,port:n.port,remote:y,target:n.target,tunnel:h,workerPort:n.workerPort,...Tr(n)})});export{Rr as devFlagConflict,Kr as execute,Tr as negatableDevFlags,_r as runDevCommand};
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@lunora/cli",
3
- "version": "1.0.0-alpha.363",
3
+ "version": "1.0.0-alpha.365",
4
4
  "description": "The Lunora CLI: init, dev, deploy, codegen, migrate, seed, doctor, insights, logs, registry, and the rest of the project commands",
5
5
  "keywords": [
6
6
  "agent-skills",
@@ -52,16 +52,16 @@
52
52
  },
53
53
  "dependencies": {
54
54
  "@bomb.sh/tab": "0.0.22",
55
- "@lunora/advisor": "1.0.0-alpha.199",
56
- "@lunora/bindings": "1.0.0-alpha.101",
57
- "@lunora/codegen": "1.0.0-alpha.277",
58
- "@lunora/config": "1.0.0-alpha.322",
59
- "@lunora/container": "1.0.0-alpha.70",
60
- "@lunora/d1": "1.0.0-alpha.167",
61
- "@lunora/errors": "1.0.0-alpha.51",
62
- "@lunora/mcp": "1.0.0-alpha.223",
63
- "@lunora/runtime": "1.0.0-alpha.185",
64
- "@lunora/seed": "1.0.0-alpha.201",
55
+ "@lunora/advisor": "1.0.0-alpha.201",
56
+ "@lunora/bindings": "1.0.0-alpha.103",
57
+ "@lunora/codegen": "1.0.0-alpha.279",
58
+ "@lunora/config": "1.0.0-alpha.324",
59
+ "@lunora/container": "1.0.0-alpha.71",
60
+ "@lunora/d1": "1.0.0-alpha.169",
61
+ "@lunora/errors": ">=1.0.0-alpha.51 <2.0.0-0",
62
+ "@lunora/mcp": "1.0.0-alpha.225",
63
+ "@lunora/runtime": "1.0.0-alpha.187",
64
+ "@lunora/seed": "1.0.0-alpha.203",
65
65
  "@visulima/cerebro": "3.1.2",
66
66
  "@visulima/error": "6.1.0",
67
67
  "@visulima/fs": "6.0.28",