@lunora/cli 1.0.0-alpha.74 → 1.0.0-alpha.76

package/dist/bin.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { runCli } from './packem_shared/COMMANDS-0BD3K1pb.mjs';
+import { runCli } from './packem_shared/COMMANDS-DW8lQmuW.mjs';
 
 try {
   const code = await runCli();

package/dist/index.d.mts

@@ -736,7 +736,7 @@ interface AddCommandResult {
 * sub-prompt or alias; every other value IS the registry item name applied
 * directly (`storage` → the `storage` registry item, etc.).
 */
-type StackFeature = "auth" | "backup" | "crons" | "email" | "presence" | "ratelimit" | "storage";
+type StackFeature = "ai" | "auth" | "backup" | "browser" | "cloudflare-access" | "crons" | "email" | "flags" | "hyperdrive" | "payment" | "presence" | "queue" | "storage" | "workflow";
 /** Customize a resolved manifest before it is written (e.g. inject the chosen R2 bucket name). */
 type OfferTransformManifest = (manifest: RegistryManifest) => RegistryManifest;
 /**
@@ -792,7 +792,9 @@ interface OfferDeps {
   }) => Promise<string>;
 }
 /**
-* Offer the stack features (auth, email, storage, rate limiting, crons,
+* Offer the stack features (ai, auth, backup, browser, cloudflare-access,
+* crons, email, flags, hyperdrive, payment, presence, queue, storage,
+* workflow) in ONE multi-select after a successful scaffold. Auth,
 * presence, backups) in ONE multi-select after a successful scaffold. Auth,
 * email, and storage run a follow-up prompt (provider / destination / bucket
 * name); every other feature value is applied as its registry item directly.
@@ -806,8 +808,8 @@ type Template = "analog" | "astro" | "next" | "nuxt" | "react-router" | "standal
 interface InitCommandOptions {
   /**
   * Add features non-interactively after scaffolding (the `--add` flag): a
-  * comma-separated list of `auth | email | storage | ratelimit | crons |
-  * presence | backup`. Bypasses the interactive multi-select and sub-prompts —
+  * comma-separated list of `ai | auth | backup | browser | cloudflare-access | crons | email | flags | hyperdrive | payment | presence | queue | storage | workflow`.
+  * Bypasses the interactive multi-select and sub-prompts —
   * each named feature is applied with its shipped defaults.
   */
   add?: string;

package/dist/index.d.ts

@@ -736,7 +736,7 @@ interface AddCommandResult {
 * sub-prompt or alias; every other value IS the registry item name applied
 * directly (`storage` → the `storage` registry item, etc.).
 */
-type StackFeature = "auth" | "backup" | "crons" | "email" | "presence" | "ratelimit" | "storage";
+type StackFeature = "ai" | "auth" | "backup" | "browser" | "cloudflare-access" | "crons" | "email" | "flags" | "hyperdrive" | "payment" | "presence" | "queue" | "storage" | "workflow";
 /** Customize a resolved manifest before it is written (e.g. inject the chosen R2 bucket name). */
 type OfferTransformManifest = (manifest: RegistryManifest) => RegistryManifest;
 /**
@@ -792,7 +792,9 @@ interface OfferDeps {
   }) => Promise<string>;
 }
 /**
-* Offer the stack features (auth, email, storage, rate limiting, crons,
+* Offer the stack features (ai, auth, backup, browser, cloudflare-access,
+* crons, email, flags, hyperdrive, payment, presence, queue, storage,
+* workflow) in ONE multi-select after a successful scaffold. Auth,
 * presence, backups) in ONE multi-select after a successful scaffold. Auth,
 * email, and storage run a follow-up prompt (provider / destination / bucket
 * name); every other feature value is applied as its registry item directly.
@@ -806,8 +808,8 @@ type Template = "analog" | "astro" | "next" | "nuxt" | "react-router" | "standal
 interface InitCommandOptions {
   /**
   * Add features non-interactively after scaffolding (the `--add` flag): a
-  * comma-separated list of `auth | email | storage | ratelimit | crons |
-  * presence | backup`. Bypasses the interactive multi-select and sub-prompts —
+  * comma-separated list of `ai | auth | backup | browser | cloudflare-access | crons | email | flags | hyperdrive | payment | presence | queue | storage | workflow`.
+  * Bypasses the interactive multi-select and sub-prompts —
   * each named feature is applied with its shipped defaults.
   */
   add?: string;

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { COMMANDS, VERSION, runCli } from './packem_shared/COMMANDS-0BD3K1pb.mjs';
+export { COMMANDS, VERSION, runCli } from './packem_shared/COMMANDS-DW8lQmuW.mjs';
 export { runCodegenCommand } from './packem_chunks/runCodegenCommand.mjs';
 export { DEFAULT_IMPORT_BATCH_SIZE, runExportCommand, runImportCommand } from './packem_shared/DEFAULT_IMPORT_BATCH_SIZE-CRQmmBZM.mjs';
 export { runDeployCommand } from './packem_chunks/runDeployCommand.mjs';
@@ -16,4 +16,4 @@ export { createRecordingSpawner, defaultSpawner } from './packem_shared/createRe
 export { default as parseManifest } from './packem_shared/parseManifest-Dbp-Q2q3.mjs';
 export { REQUIRED_COMPATIBILITY_DATE, REQUIRED_FLAG, validateWranglerProject as validateWrangler, validateWranglerConfig } from '@lunora/config';
 export { buildRegistryIndex } from './packem_shared/buildRegistryIndex-BS5ig822.mjs';
-export { r as runAddCommand, a as runBuildIndexCommand, b as runRegistryViewCommand } from './packem_shared/commands-CF2YHeFa.mjs';
+export { r as runAddCommand, a as runBuildIndexCommand, b as runRegistryViewCommand } from './packem_shared/commands-ClEvcz3V.mjs';

package/dist/packem_chunks/handler.mjs

@@ -4,8 +4,8 @@ import { join, basename } from '@visulima/path';
 import { d as defineHandler } from '../packem_shared/command-lYnl4QyF.mjs';
 import { v as validateOutputFormat, i as isJsonFormat, p as printJson, l as loggerForFormat } from '../packem_shared/output-format-B4642rjE.mjs';
 import { t as tuiText, a as tuiSelect } from '../packem_shared/tui-prompts-BjEN8XgP.mjs';
-import { n as normalizeFeature, E as EMAIL_ITEM, s as sanitizeBucketName, d as deriveBucketName, p as promptBucketName, r as resolveTypedDestination, M as MAIL_DESTINATION_PROMPT, a as sanitizeDatabaseName, b as deriveDatabaseName, c as promptDatabaseName, D as DEFAULT_AUTH_ITEM, e as promptAuthProvider, A as AUTH_PROVIDER_OPTIONS, w as withStorageBucketName, f as withMailDestination, g as withAuthDatabaseName } from '../packem_shared/storage-HRI1N4Ao.mjs';
-import { r as runAddCommand } from '../packem_shared/commands-CF2YHeFa.mjs';
+import { n as normalizeFeature, E as EMAIL_ITEM, s as sanitizeBucketName, d as deriveBucketName, p as promptBucketName, r as resolveTypedDestination, M as MAIL_DESTINATION_PROMPT, a as sanitizeDatabaseName, b as deriveDatabaseName, c as promptDatabaseName, D as DEFAULT_AUTH_ITEM, e as promptAuthProvider, A as AUTH_PROVIDER_OPTIONS, w as withStorageBucketName, f as withMailDestination, g as withAuthDatabaseName } from '../packem_shared/storage-DEXpJkXh.mjs';
+import { r as runAddCommand } from '../packem_shared/commands-ClEvcz3V.mjs';
 
 const providerToItem = (provider) => {
   const value = provider.trim().toLowerCase();

package/dist/packem_chunks/handler17.mjs

@@ -1,5 +1,5 @@
 import { d as defineHandler } from '../packem_shared/command-lYnl4QyF.mjs';
-import { r as runAddCommand, b as runRegistryViewCommand, a as runBuildIndexCommand } from '../packem_shared/commands-CF2YHeFa.mjs';
+import { r as runAddCommand, b as runRegistryViewCommand, a as runBuildIndexCommand } from '../packem_shared/commands-ClEvcz3V.mjs';
 
 const execute = defineHandler(({ argument, cwd, logger, options }) => {
   const subcommand = argument[0];

package/dist/packem_chunks/runInitCommand.mjs

@@ -11,11 +11,11 @@ import { d as detectPackageManager, a as detectInstalledManagers, i as installAr
 import MagicString from 'magic-string';
 import { Project, SyntaxKind } from 'ts-morph';
 import { P as PromptCancelledError } from '../packem_shared/prompt-cancelled-APzX1Im-.mjs';
-import { c as resolveTagVersions, d as resolveSourceRef, e as resolvePinnedSourceRef, f as resolveDistTag, r as runAddCommand } from '../packem_shared/commands-CF2YHeFa.mjs';
+import { c as resolveTagVersions, d as resolveSourceRef, e as resolvePinnedSourceRef, f as resolveDistTag, r as runAddCommand } from '../packem_shared/commands-ClEvcz3V.mjs';
 import { defaultSpawner } from '../packem_shared/createRecordingSpawner-Cw5Iu73G.mjs';
 import { d as tuiMascot, e as tuiStep, f as tuiMoonrise, t as tuiText, g as tuiHeadline, h as tuiInfo, a as tuiSelect, b as tuiConfirm, w as withTuiSpinner, i as tuiNextSteps, j as tuiTasks, k as tuiMultiSelect, l as withTuiBadgeProgress } from '../packem_shared/tui-prompts-BjEN8XgP.mjs';
 import { logStep } from '../packem_shared/createLogger-CIWSHrTL.mjs';
-import { E as EMAIL_ITEM, p as promptBucketName, w as withStorageBucketName, M as MAIL_DESTINATION_PROMPT, r as resolveTypedDestination, f as withMailDestination, e as promptAuthProvider, c as promptDatabaseName, g as withAuthDatabaseName } from '../packem_shared/storage-HRI1N4Ao.mjs';
+import { E as EMAIL_ITEM, p as promptBucketName, w as withStorageBucketName, M as MAIL_DESTINATION_PROMPT, r as resolveTypedDestination, f as withMailDestination, e as promptAuthProvider, c as promptDatabaseName, g as withAuthDatabaseName } from '../packem_shared/storage-DEXpJkXh.mjs';
 import dns from 'node:dns/promises';
 
 const GITHUB_CONTENT = `name: Deploy
@@ -343,13 +343,20 @@ ${LUNA_NAME}: ${LUNA_SIGNOFF}`);
 };
 
 const STACK_FEATURE_OPTIONS = [
+  { description: "LLMs via Workers AI (summarize, generate, stream)", label: "AI", value: "ai" },
   { description: "Sign-up / sign-in (asks which provider)", label: "Authentication", value: "auth" },
-  { description: "Cloudflare Email Workers + a dev mail catcher", label: "Transactional email", value: "email" },
-  { description: "Typed R2 buckets + signed URLs (@lunora/storage)", label: "File storage", value: "storage" },
-  { description: "Token-bucket / sliding-window limits (@lunora/ratelimit)", label: "Rate limiting", value: "ratelimit" },
+  { description: "Snapshot + restore your Durable Object data", label: "Backups", value: "backup" },
+  { description: "Headless browser screenshots + PDFs", label: "Browser rendering", value: "browser" },
+  { description: "Zero Trust identity via Cloudflare Access", label: "Cloudflare Access", value: "cloudflare-access" },
   { description: "Scheduled jobs via Cron Triggers (@lunora/scheduler)", label: "Cron jobs", value: "crons" },
+  { description: "Cloudflare Email Workers + a dev mail catcher", label: "Transactional email", value: "email" },
+  { description: "OpenFeature feature flags (ctx.flags)", label: "Feature flags", value: "flags" },
+  { description: "External Postgres/MySQL via Hyperdrive", label: "Hyperdrive", value: "hyperdrive" },
+  { description: "Stripe-first payments (checkout, subscription, webhooks)", label: "Payments", value: "payment" },
   { description: "Live presence / who's-online over hibernated WebSockets", label: "Presence", value: "presence" },
-  { description: "Snapshot + restore your Durable Object data", label: "Backups", value: "backup" }
+  { description: "Async message queues (push/pull consumers)", label: "Queues", value: "queue" },
+  { description: "Typed R2 buckets + signed URLs (@lunora/storage)", label: "File storage", value: "storage" },
+  { description: "Durable long-running workflows (step.do, sleep, branch)", label: "Workflows", value: "workflow" }
 ];
 const STACK_FEATURE_VALUES = STACK_FEATURE_OPTIONS.map((option) => option.value);
 const featureItem = (feature) => feature === "email" ? EMAIL_ITEM : feature;
@@ -401,7 +408,10 @@ const offerRegistryExtras = async (deps) => {
     return;
   }
   if (!deps.interactive) {
-    deps.logger.info("tip: add features later with `lunora add <auth|email|storage|ratelimit|crons|presence|backup>`.");
+    deps.logger.info(
+      // eslint-disable-next-line no-secrets/no-secrets -- the pipe-separated feature list in this tip is a UI prompt, not a credential
+      "tip: add features later with `lunora add <ai|auth|backup|browser|cloudflare-access|crons|email|flags|hyperdrive|payment|presence|queue|storage|workflow>`."
+    );
     return;
   }
   const picked = await deps.multiSelect("Which features do you want to add?", STACK_FEATURE_OPTIONS, { defaults: [] });
@@ -1470,7 +1480,49 @@ const ADAPTERS = {
 };
 const isOverlayFramework = (value) => Object.hasOwn(ADAPTERS, value);
 
-const LUNORA_SCHEMA = `import { defineSchema, defineTable, v } from "lunorash/server";
+const RATELIMIT_SCHEMA = `import type { Middleware } from "lunorash/server";
+import { defineSchemaExtension, defineTable, definePlugin, v } from "lunorash/server";
+import { createDbStore, RateLimiter } from "lunorash/ratelimit";
+import type { RateLimitConfigMap } from "lunorash/ratelimit";
+
+export const limits = {
+    default: { kind: "token bucket", period: 60_000, rate: 10 },
+} as const satisfies RateLimitConfigMap;
+
+export type LimitName = keyof typeof limits;
+
+export const makeRateLimiter = (ctx: { db: unknown }): RateLimiter<LimitName> =>
+    new RateLimiter<LimitName>({
+        config: limits,
+        store: createDbStore({ db: ctx.db as never, table: "ratelimit_buckets" }),
+    });
+
+const middleware: Middleware<{ api?: Record<string, unknown>; db: unknown }, { api: Record<string, unknown>; db: unknown }> = ({ ctx, next }) =>
+    next({
+        ctx: {
+            ...ctx,
+            api: { ...ctx.api, ratelimit: makeRateLimiter(ctx) },
+        },
+    });
+
+export const ratelimit = definePlugin("ratelimit", {
+    extension: defineSchemaExtension("ratelimit", {
+        tables: {
+            buckets: defineTable({
+                key: v.string(),
+                value: v.number(),
+                ts: v.number(),
+                prev: v.optional(v.number()),
+            })
+                .index("by_key", ["key"])
+                .externallyManaged(),
+        },
+    }),
+    middleware,
+});
+`;
+const LUNORA_SCHEMA = `import { ratelimit } from "./ratelimit/schema.js";
+import { defineSchema, defineTable, v } from "lunorash/server";
 
 export default defineSchema({
     messages: defineTable({
@@ -1479,22 +1531,17 @@ export default defineSchema({
     })
         .shardBy("channelId")
         .index("by_channel", ["channelId"]),
-});
+}).extend(ratelimit.extension);
 `;
-const LUNORA_MESSAGES = `import { RateLimiter, rateLimit } from "@lunora/ratelimit";
+const LUNORA_MESSAGES = `import { RateLimiter, rateLimit, createDbStore } from "lunorash/ratelimit";
 
 import { mutation, query, v } from "#lunora/_generated/server.js";
 
-/**
- * One in-memory limiter so the public \`send\` mutation isn't an open flood target
- * out of the box. The default store is in-memory (per-isolate, resets on
- * eviction) — fine for a starter; run \`lunora add ratelimit\` for the durable,
- * \`ctx.db\`-backed store when you ship to production.
- */
-const limiter = new RateLimiter({
+const limiter = (ctx: { db: unknown }) => new RateLimiter({
     config: {
         send: { kind: "token bucket", period: 60_000, rate: 30 },
     },
+    store: createDbStore({ db: ctx.db as never, table: "ratelimit_buckets" }),
 });
 
 export const list = query.input({ channelId: v.string().meta({ schema: { maxLength: 256 } }), limit: v.optional(v.number()) }).query(async ({ args, ctx }) => {
@@ -1620,6 +1667,7 @@ const patchBaseViteConfig = (target, logger) => {
 const applyLunoraOverlay = async (options) => {
   const { adapter, distTag, logger, name, target } = options;
   const written = [];
+  writeFile(target, join$1("lunora", "ratelimit", "schema.ts"), RATELIMIT_SCHEMA, written);
   writeFile(target, join$1("lunora", "schema.ts"), LUNORA_SCHEMA, written);
   writeFile(target, join$1("lunora", "messages.ts"), LUNORA_MESSAGES, written);
   writeFile(target, join$1("src", "server.ts"), SERVER_ENTRY, written);

package/dist/packem_shared/{COMMANDS-0BD3K1pb.mjs → COMMANDS-DW8lQmuW.mjs}

@@ -10,8 +10,12 @@ import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 
 const addCommand = {
-  argument: { description: "Feature or registry item: auth | email | storage | crons | presence | ratelimit | backup | …", name: "feature", type: String },
-  description: "Add a feature or registry item (auth, email, storage, crons, …) to the current Lunora project",
+  argument: {
+    description: "Feature or registry item: ai | auth | email | storage | crons | presence | queue | workflow | flags | backup | …",
+    name: "feature",
+    type: String
+  },
+  description: "Add a feature or registry item (ai, auth, email, storage, crons, …) to the current Lunora project",
   examples: [
     ["lunora add auth", "Add authentication (asks which provider)"],
     ["lunora add auth --provider clerk", "Add Clerk auth without prompting"],
@@ -446,7 +450,7 @@ const initCommand = {
       type: String
     },
     {
-      description: "Add features non-interactively after scaffolding (comma-separated): auth | email | storage | ratelimit | crons | presence | backup",
+      description: "Add features non-interactively after scaffolding (comma-separated): ai | auth | backup | browser | cloudflare-access | crons | email | flags | hyperdrive | payment | presence | queue | storage | workflow",
       name: "add",
       type: String
     },

package/dist/packem_shared/{commands-CF2YHeFa.mjs → commands-ClEvcz3V.mjs}

@@ -148,8 +148,8 @@ const resolveDepRange = (range) => {
   }
   return rest;
 };
-const UMBRELLA_REEXPORTED_DEPS = /* @__PURE__ */ new Set(["@lunora/client", "@lunora/do", "@lunora/runtime", "@lunora/server", "@lunora/values"]);
-const UMBRELLA_IMPORT_RE = /(['"])@lunora\/(client|do|runtime|server|values)(\/[^'"]*)?\1/gu;
+const UMBRELLA_REEXPORTED_DEPS = /* @__PURE__ */ new Set(["@lunora/client", "@lunora/do", "@lunora/ratelimit", "@lunora/runtime", "@lunora/server", "@lunora/values"]);
+const UMBRELLA_IMPORT_RE = /(['"])@lunora\/(client|do|ratelimit|runtime|server|values)(\/[^'"]*)?\1/gu;
 const projectUsesUmbrella = (projectRoot) => {
   const packageJsonPath = join(projectRoot, "package.json");
   if (!existsSync(packageJsonPath)) {

package/dist/packem_shared/{runAddCommand-BGvSitq5.mjs → runAddCommand-DGjFXGqa.mjs}

@@ -1,4 +1,4 @@
 import 'node:fs';
 import '@visulima/path';
-export { r as runAddCommand, a as runBuildIndexCommand, g as runListCommand, b as runRegistryViewCommand } from './commands-CF2YHeFa.mjs';
+export { r as runAddCommand, a as runBuildIndexCommand, g as runListCommand, b as runRegistryViewCommand } from './commands-ClEvcz3V.mjs';
 import './buildRegistryIndex-BS5ig822.mjs';

package/dist/packem_shared/{storage-HRI1N4Ao.mjs → storage-DEXpJkXh.mjs}

@@ -1,4 +1,4 @@
-import { s as setBindingField } from './commands-CF2YHeFa.mjs';
+import { s as setBindingField } from './commands-ClEvcz3V.mjs';
 
 const INVALID_SLUG_CHARS = /[^a-z0-9]+/u;
 const toKebabSlug = (input, min, max) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/cli",
-  "version": "1.0.0-alpha.74",
+  "version": "1.0.0-alpha.76",
   "description": "The Lunora CLI: init, dev, deploy, codegen, run, reset, and migrate commands",
   "keywords": [
     "agent-skills",