@lunora/cli 1.0.0-alpha.51 → 1.0.0-alpha.52

package/dist/index.mjs

@@ -16,4 +16,4 @@ export { createRecordingSpawner, defaultSpawner } from './packem_shared/createRe
 export { default as parseManifest } from './packem_shared/parseManifest--vZf2FY1.mjs';
 export { REQUIRED_COMPATIBILITY_DATE, REQUIRED_FLAG, validateWranglerProject as validateWrangler, validateWranglerConfig } from '@lunora/config';
 export { buildRegistryIndex } from './packem_shared/buildRegistryIndex-BcYe607_.mjs';
-export { r as runAddCommand, a as runBuildIndexCommand, b as runRegistryViewCommand } from './packem_shared/commands-B-gR09Z_.mjs';
+export { r as runAddCommand, a as runBuildIndexCommand, b as runRegistryViewCommand } from './packem_shared/commands-BK6Pt3Ni.mjs';

package/dist/packem_chunks/handler.mjs

@@ -4,8 +4,8 @@ import { join, basename } from '@visulima/path';
 import { d as defineHandler } from '../packem_shared/command-D3lB_4Az.mjs';
 import { v as validateOutputFormat, i as isJsonFormat, p as printJson, l as loggerForFormat } from '../packem_shared/output-format-wUvAN6AL.mjs';
 import { t as tuiText, a as tuiSelect } from '../packem_shared/tui-prompts-BjEN8XgP.mjs';
-import { n as normalizeFeature, E as EMAIL_ITEM, s as sanitizeBucketName, d as deriveBucketName, p as promptBucketName, r as resolveTypedDestination, M as MAIL_DESTINATION_PROMPT, a as sanitizeDatabaseName, b as deriveDatabaseName, c as promptDatabaseName, D as DEFAULT_AUTH_ITEM, e as promptAuthProvider, A as AUTH_PROVIDER_OPTIONS, w as withStorageBucketName, f as withMailDestination, g as withAuthDatabaseName } from '../packem_shared/storage-BIsph-Vk.mjs';
-import { r as runAddCommand } from '../packem_shared/commands-B-gR09Z_.mjs';
+import { n as normalizeFeature, E as EMAIL_ITEM, s as sanitizeBucketName, d as deriveBucketName, p as promptBucketName, r as resolveTypedDestination, M as MAIL_DESTINATION_PROMPT, a as sanitizeDatabaseName, b as deriveDatabaseName, c as promptDatabaseName, D as DEFAULT_AUTH_ITEM, e as promptAuthProvider, A as AUTH_PROVIDER_OPTIONS, w as withStorageBucketName, f as withMailDestination, g as withAuthDatabaseName } from '../packem_shared/storage-C8SAm5zu.mjs';
+import { r as runAddCommand } from '../packem_shared/commands-BK6Pt3Ni.mjs';
 
 const providerToItem = (provider) => {
   const value = provider.trim().toLowerCase();

package/dist/packem_chunks/handler17.mjs

@@ -1,5 +1,5 @@
 import { d as defineHandler } from '../packem_shared/command-D3lB_4Az.mjs';
-import { r as runAddCommand, b as runRegistryViewCommand, a as runBuildIndexCommand } from '../packem_shared/commands-B-gR09Z_.mjs';
+import { r as runAddCommand, b as runRegistryViewCommand, a as runBuildIndexCommand } from '../packem_shared/commands-BK6Pt3Ni.mjs';
 
 const execute = defineHandler(({ argument, cwd, logger, options }) => {
   const subcommand = argument[0];
@@ -26,6 +26,7 @@ const execute = defineHandler(({ argument, cwd, logger, options }) => {
   if (subcommand === "view") {
     return runRegistryViewCommand({
       allowUnsafeSource: options.allowUnsafeSource === true,
+      cwd,
       from: options.from,
       logger,
       names,

package/dist/packem_chunks/runInitCommand.mjs

@@ -1,4 +1,4 @@
-import { existsSync, mkdirSync, writeFileSync, readFileSync, readdirSync, rmSync, mkdtempSync, cpSync, renameSync } from 'node:fs';
+import { existsSync, mkdirSync, writeFileSync, readFileSync, readdirSync, rmSync, mkdtempSync, lstatSync, cpSync, renameSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { detectFramework as detectFramework$1, isInteractive, LUNA_ART, LUNA_NAME, LUNA_SIGNOFF, paintAnswer, BADGES } from '@lunora/config';
 import { walkSync } from '@visulima/fs';
@@ -11,11 +11,11 @@ import { a as detectInstalledManagers, i as installArgsFor } from '../packem_sha
 import MagicString from 'magic-string';
 import { Project, SyntaxKind } from 'ts-morph';
 import { P as PromptCancelledError } from '../packem_shared/prompt-cancelled-APzX1Im-.mjs';
-import { c as resolveTagVersions, d as resolveSourceRef, e as resolveDistTag, r as runAddCommand } from '../packem_shared/commands-B-gR09Z_.mjs';
+import { c as resolveTagVersions, d as resolveSourceRef, e as resolvePinnedSourceRef, f as resolveDistTag, r as runAddCommand } from '../packem_shared/commands-BK6Pt3Ni.mjs';
 import { defaultSpawner } from '../packem_shared/createRecordingSpawner-DxI3mebw.mjs';
 import { d as tuiMascot, e as tuiStep, f as tuiMoonrise, t as tuiText, g as tuiHeadline, h as tuiInfo, a as tuiSelect, b as tuiConfirm, w as withTuiSpinner, i as tuiNextSteps, j as tuiTasks, k as tuiMultiSelect, l as withTuiBadgeProgress } from '../packem_shared/tui-prompts-BjEN8XgP.mjs';
 import { logStep } from '../packem_shared/createLogger-B40gPzQo.mjs';
-import { E as EMAIL_ITEM, p as promptBucketName, w as withStorageBucketName, M as MAIL_DESTINATION_PROMPT, r as resolveTypedDestination, f as withMailDestination, e as promptAuthProvider, c as promptDatabaseName, g as withAuthDatabaseName } from '../packem_shared/storage-BIsph-Vk.mjs';
+import { E as EMAIL_ITEM, p as promptBucketName, w as withStorageBucketName, M as MAIL_DESTINATION_PROMPT, r as resolveTypedDestination, f as withMailDestination, e as promptAuthProvider, c as promptDatabaseName, g as withAuthDatabaseName } from '../packem_shared/storage-C8SAm5zu.mjs';
 import dns from 'node:dns/promises';
 
 const GITHUB_CONTENT = `name: Deploy
@@ -1829,6 +1829,9 @@ const pnpmWorkspaceYaml = () => [
 const collectFiles = (directory) => {
   const out = [];
   for (const entry of walkSync(directory, { includeDirs: false, includeFiles: true })) {
+    if (lstatSync(entry.path).isSymbolicLink()) {
+      continue;
+    }
     out.push(entry.path);
   }
   return out;
@@ -2028,7 +2031,8 @@ const scaffoldFromRemote = async (options) => {
   const stagingRoot = mkdtempSync(join$1(tmpdir(), "lunora-init-fetch-"));
   const stagingDirectory = join$1(stagingRoot, "template");
   try {
-    const remote = resolveTemplateSource(templateType, source, ref);
+    const pinnedRef = source !== void 0 && source.length > 0 ? ref : await resolvePinnedSourceRef(ref, logger);
+    const remote = resolveTemplateSource(templateType, source, pinnedRef);
     let downloaded;
     let written = [];
     await tuiTasks(

package/dist/packem_shared/{commands-B-gR09Z_.mjs → commands-BK6Pt3Ni.mjs}

@@ -60,6 +60,44 @@ const resolveSourceRef = (ref) => {
   }
   return resolveVersionRef(resolveCliVersion());
 };
+const SOURCE_REPO = "anolilab/lunora";
+const COMMIT_SHA = /^[0-9a-f]{40}$/iu;
+const SEMVER_BODY = String.raw`\d+\.\d+\.\d+(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)+)?(?:\+[0-9A-Za-z.-]+)?`;
+const LEADING_VERSION_TAG = new RegExp(String.raw`^v?${SEMVER_BODY}$`, "u");
+const PACKAGE_VERSION_TAG = new RegExp(String.raw`^(?:@[\w.-]+\/)?[\w.-]+@${SEMVER_BODY}$`, "u");
+const isImmutableRef = (ref) => COMMIT_SHA.test(ref) || LEADING_VERSION_TAG.test(ref) || PACKAGE_VERSION_TAG.test(ref);
+const githubAuthHeaders = () => {
+  const token = process.env["GITHUB_TOKEN"] ?? process.env["GH_TOKEN"];
+  return token !== void 0 && token.length > 0 ? { authorization: `Bearer ${token}` } : {};
+};
+const fetchBranchSha = async (branch) => {
+  try {
+    const response = await fetch(`https://api.github.com/repos/${SOURCE_REPO}/commits/${encodeURIComponent(branch)}`, {
+      headers: { accept: "application/vnd.github+json", "user-agent": "lunora-cli", ...githubAuthHeaders() },
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!response.ok) {
+      return void 0;
+    }
+    const body = await response.json();
+    return typeof body.sha === "string" && COMMIT_SHA.test(body.sha) ? body.sha : void 0;
+  } catch {
+    return void 0;
+  }
+};
+const resolvePinnedSourceRef = async (ref, logger) => {
+  const resolved = resolveSourceRef(ref);
+  if (isImmutableRef(resolved)) {
+    return resolved;
+  }
+  const sha = await fetchBranchSha(resolved);
+  if (sha === void 0) {
+    logger.warn(`could not pin ${SOURCE_REPO}#${resolved} to a commit — fetching the UNPINNED branch (set GITHUB_TOKEN if rate-limited).`);
+    return resolved;
+  }
+  logger.info(`pinned ${SOURCE_REPO}#${resolved} → ${sha}`);
+  return sha;
+};
 const STABLE_DIST_TAG = "latest";
 const resolveDistTag = () => {
   const ref = resolveVersionRef(resolveCliVersion());
@@ -548,6 +586,16 @@ const fetchToStaging = async (remote, label, logger) => {
     throw error;
   }
 };
+const remoteRefCache = /* @__PURE__ */ new WeakMap();
+const resolveRemoteRef = async (options) => {
+  const cached = remoteRefCache.get(options);
+  if (cached !== void 0) {
+    return cached;
+  }
+  const pending = options.source !== void 0 && options.source.length > 0 ? Promise.resolve(resolveSourceRef(options.ref)) : resolvePinnedSourceRef(options.ref, options.logger);
+  remoteRefCache.set(options, pending);
+  return pending;
+};
 const resolveItemDirectory = async (name, options) => {
   assertSafeItemName(name);
   if (options.from !== void 0) {
@@ -559,7 +607,7 @@ const resolveItemDirectory = async (name, options) => {
     }, directory };
   }
   const base = options.source ?? DEFAULT_SOURCE_BASE;
-  return fetchToStaging(`${base}/${name}#${resolveSourceRef(options.ref)}`, "item", options.logger);
+  return fetchToStaging(`${base}/${name}#${await resolveRemoteRef(options)}`, "item", options.logger);
 };
 const resolveRegistryRoot = async (options) => {
   if (options.from !== void 0) {
@@ -570,7 +618,7 @@ const resolveRegistryRoot = async (options) => {
     }, root: options.from };
   }
   const base = options.source ?? DEFAULT_SOURCE_BASE;
-  const { cleanup, directory } = await fetchToStaging(`${base}#${resolveSourceRef(options.ref)}`, "registry", options.logger);
+  const { cleanup, directory } = await fetchToStaging(`${base}#${await resolveRemoteRef(options)}`, "registry", options.logger);
   return { cleanup, root: directory };
 };
 const readManifest = (itemDirectory, name) => {
@@ -842,4 +890,4 @@ const runBuildIndexCommand = async (options) => {
   return empty;
 };
 
-export { runBuildIndexCommand as a, runRegistryViewCommand as b, resolveTagVersions as c, resolveSourceRef as d, resolveDistTag as e, runListCommand as f, runAddCommand as r, setBindingField as s };
+export { runBuildIndexCommand as a, runRegistryViewCommand as b, resolveTagVersions as c, resolveSourceRef as d, resolvePinnedSourceRef as e, resolveDistTag as f, runListCommand as g, runAddCommand as r, setBindingField as s };

package/dist/packem_shared/runAddCommand-DWjH0Heb.mjs

@@ -0,0 +1,4 @@
+import 'node:fs';
+import '@visulima/path';
+export { r as runAddCommand, a as runBuildIndexCommand, g as runListCommand, b as runRegistryViewCommand } from './commands-BK6Pt3Ni.mjs';
+import './buildRegistryIndex-BcYe607_.mjs';

package/dist/packem_shared/{storage-BIsph-Vk.mjs → storage-C8SAm5zu.mjs}

@@ -1,4 +1,4 @@
-import { s as setBindingField } from './commands-B-gR09Z_.mjs';
+import { s as setBindingField } from './commands-BK6Pt3Ni.mjs';
 
 const INVALID_SLUG_CHARS = /[^a-z0-9]+/u;
 const toKebabSlug = (input, min, max) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/cli",
-  "version": "1.0.0-alpha.51",
+  "version": "1.0.0-alpha.52",
   "description": "The Lunora CLI: init, dev, deploy, codegen, run, reset, and migrate commands",
   "keywords": [
     "agent-skills",
@@ -52,11 +52,11 @@
   },
   "dependencies": {
     "@bomb.sh/tab": "0.0.17",
-    "@lunora/codegen": "1.0.0-alpha.24",
-    "@lunora/config": "1.0.0-alpha.39",
+    "@lunora/codegen": "1.0.0-alpha.25",
+    "@lunora/config": "1.0.0-alpha.40",
     "@lunora/container": "1.0.0-alpha.5",
-    "@lunora/d1": "1.0.0-alpha.17",
-    "@lunora/seed": "1.0.0-alpha.11",
+    "@lunora/d1": "1.0.0-alpha.18",
+    "@lunora/seed": "1.0.0-alpha.12",
     "@visulima/cerebro": "3.0.0-alpha.32",
     "@visulima/error": "6.0.0-alpha.34",
     "@visulima/fs": "5.0.0-alpha.32",

package/dist/packem_shared/runAddCommand-bnY6-HKb.mjs

@@ -1,4 +0,0 @@
-import 'node:fs';
-import '@visulima/path';
-export { r as runAddCommand, a as runBuildIndexCommand, f as runListCommand, b as runRegistryViewCommand } from './commands-B-gR09Z_.mjs';
-import './buildRegistryIndex-BcYe607_.mjs';