@lunora/codegen 1.0.0-alpha.1 → 1.0.0-alpha.10

package/dist/packem_shared/{emitApi-hRVC-kE7.mjs → GENERATED_HEADER-BiFXNUvo.mjs}

@@ -1,5 +1,174 @@
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 
+const LITERAL_VALUE_RE = /^(?:"[^"\\]*"|'[^'\\]*'|-?\d+(?:\.\d+)?|true|false|null)$/u;
+
+const PASS_THROUGH_KINDS = /* @__PURE__ */ new Set(["any", "bigint", "boolean", "date", "id", "null", "number", "storage", "string", "timestamp"]);
+const hasColumnModifier = (node) => node.column !== void 0;
+const emitScalarGuard = (kind, inExpr) => {
+  switch (kind) {
+    case "bigint": {
+      return `if (typeof ${inExpr} !== "bigint") return DEFER;
+`;
+    }
+    case "boolean": {
+      return `if (typeof ${inExpr} !== "boolean") return DEFER;
+`;
+    }
+    case "date":
+    case "number":
+    case "timestamp": {
+      return `if (typeof ${inExpr} !== "number" || !Number.isFinite(${inExpr})) return DEFER;
+`;
+    }
+    case "null": {
+      return `if (${inExpr} !== null) return DEFER;
+`;
+    }
+    // string / id / storage all parse as a bare string at runtime.
+    default: {
+      return `if (typeof ${inExpr} !== "string") return DEFER;
+`;
+    }
+  }
+};
+const compileLiteral = (node, inExpr) => {
+  const literal = node.literalValue?.trim();
+  if (literal === void 0 || !LITERAL_VALUE_RE.test(literal)) {
+    return void 0;
+  }
+  return { out: inExpr, pre: `if (${inExpr} !== ${literal}) return DEFER;
+` };
+};
+const compileNode = (node, inExpr, context) => {
+  if (hasColumnModifier(node)) {
+    return void 0;
+  }
+  if (node.hasRefinement || node.sourceText !== void 0) {
+    return void 0;
+  }
+  if (PASS_THROUGH_KINDS.has(node.kind)) {
+    if (node.kind === "any") {
+      return { out: inExpr, pre: "" };
+    }
+    return { out: inExpr, pre: emitScalarGuard(node.kind, inExpr) };
+  }
+  switch (node.kind) {
+    case "array": {
+      return compileArray(node, inExpr, context);
+    }
+    case "literal": {
+      return compileLiteral(node, inExpr);
+    }
+    case "object": {
+      return compileObject(node, inExpr, context);
+    }
+    default: {
+      return void 0;
+    }
+  }
+};
+const compileArray = (node, inExpr, context) => {
+  const { inner } = node;
+  if (!inner) {
+    return void 0;
+  }
+  const id = context.next();
+  const array = `__arr${String(id)}`;
+  const index = `__i${String(id)}`;
+  const element = `__e${String(id)}`;
+  const innerEmit = compileNode(inner, element, context);
+  if (!innerEmit) {
+    return void 0;
+  }
+  const pre = `if (!Array.isArray(${inExpr})) return DEFER;
+const ${array} = new Array(${inExpr}.length);
+for (let ${index} = 0; ${index} < ${inExpr}.length; ${index}++) {
+const ${element} = ${inExpr}[${index}];
+${innerEmit.pre}${array}[${index}] = ${innerEmit.out};
+}
+`;
+  return { out: array, pre };
+};
+const compileField = (key, node, access, context) => {
+  const keyLiteral = JSON.stringify(key);
+  if (node.kind === "optional") {
+    if (node.hasRefinement || node.sourceText !== void 0 || hasColumnModifier(node)) {
+      return void 0;
+    }
+    const { inner } = node;
+    if (!inner) {
+      return void 0;
+    }
+    const innerEmit = compileNode(inner, access, context);
+    if (!innerEmit) {
+      return void 0;
+    }
+    const id = context.next();
+    const has = `__has${String(id)}`;
+    const value = `__val${String(id)}`;
+    const pre = `let ${has} = false;
+let ${value};
+if (${access} !== undefined) {
+${innerEmit.pre}${value} = ${innerEmit.out};
+${has} = true;
+}
+`;
+    return { entry: `...(${has} ? { ${keyLiteral}: ${value} } : {})`, pre };
+  }
+  const emit = compileNode(node, access, context);
+  if (!emit) {
+    return void 0;
+  }
+  return { entry: `${keyLiteral}: ${emit.out}`, pre: emit.pre };
+};
+const compileFields = (shape, accessFor, context) => {
+  let pre = "";
+  const entries = [];
+  for (const key of Object.keys(shape)) {
+    const node = shape[key];
+    if (!node) {
+      return void 0;
+    }
+    const field = compileField(key, node, accessFor(key), context);
+    if (!field) {
+      return void 0;
+    }
+    pre += field.pre;
+    entries.push(field.entry);
+  }
+  return { entries: entries.join(", "), pre };
+};
+const compileObject = (node, inExpr, context) => {
+  const shape = node.shape ?? {};
+  const fields = compileFields(shape, (key) => `${inExpr}[${JSON.stringify(key)}]`, context);
+  if (!fields) {
+    return void 0;
+  }
+  const id = context.next();
+  const object = `__obj${String(id)}`;
+  const pre = `if (typeof ${inExpr} !== "object" || ${inExpr} === null || Array.isArray(${inExpr})) return DEFER;
+${fields.pre}const ${object} = { ${fields.entries} };
+`;
+  return { out: object, pre };
+};
+const compileArgsValidator = (args) => {
+  let counter = 0;
+  const context = {
+    next: () => {
+      counter += 1;
+      return counter;
+    }
+  };
+  const fields = compileFields(args, (key) => `source[${JSON.stringify(key)}]`, context);
+  if (!fields) {
+    return void 0;
+  }
+  return `(source) => {
+if (typeof source !== "object" || source === null || Array.isArray(source)) return DEFER;
+${fields.pre}return { ${fields.entries} };
+}`;
+};
+
 const GENERATED_HEADER = "// GENERATED by @lunora/codegen — do not edit.\n// Run `lunora codegen` to regenerate.\n\n";
 const baseSpecifiers = (useUmbrella = false) => useUmbrella ? {
   client: "lunorash/client",
@@ -7,17 +176,18 @@ const baseSpecifiers = (useUmbrella = false) => useUmbrella ? {
   server: "lunorash/server",
   serverDataModel: "lunorash/server/data-model",
   serverDrizzle: "lunorash/server/drizzle",
-  serverTypes: "lunorash/server/types"
+  serverTypes: "lunorash/server/types",
+  values: "lunorash/values"
 } : {
   client: "@lunora/client",
   do: "@lunora/do",
   server: "@lunora/server",
   serverDataModel: "@lunora/server/data-model",
   serverDrizzle: "@lunora/server/drizzle",
-  serverTypes: "@lunora/server/types"
+  serverTypes: "@lunora/server/types",
+  values: "@lunora/values"
 };
 const IDENTIFIER_RE = /^[A-Za-z_$][\w$]*$/u;
-const LITERAL_VALUE_RE = /^(?:"[^"\\]*"|'[^'\\]*'|-?\d+(?:\.\d+)?|true|false|null)$/u;
 const IMPORT_PATH_RE = /^[\w./-]+$/u;
 const assertIdentifier = (value, context) => {
   if (!IDENTIFIER_RE.test(value)) {
@@ -469,6 +639,17 @@ const renderFunctionRegistry = (functions, migrations) => {
   const migrationEntries = migrations.map(
     (migration) => `    ${JSON.stringify(migration.id)}: ${aliasByPath.get(migration.filePath) ?? ""}.${migration.exportName} as unknown as RegisteredDataMigration,`
   ).join("\n");
+  const installLines = functions.map((definition) => {
+    if (definition.lifecycle || Object.keys(definition.args).length === 0) {
+      return void 0;
+    }
+    const compiled = compileArgsValidator(definition.args);
+    if (compiled === void 0) {
+      return void 0;
+    }
+    const alias = aliasByPath.get(definition.filePath) ?? "";
+    return `installCompiledValidatorMap(${alias}.${definition.exportName}.args, ${compiled});`;
+  }).filter((line) => line !== void 0).join("\n");
   return {
     dispatchBody: dispatchEntries.length > 0 ? `
 ${dispatchEntries}
@@ -476,6 +657,7 @@ ${dispatchEntries}
     importBlock: importLines.length > 0 ? `${importLines}
 
 ` : "",
+    installBlock: installLines,
     migrationBody: migrationEntries.length > 0 ? `
 ${migrationEntries}
 ` : ""
@@ -539,6 +721,7 @@ const emitServer = ({
   hasKv = false,
   hasPayments = false,
   hasPipelines = false,
+  hasR2sql = false,
   schema,
   storageRuleBuckets = [],
   useUmbrella = false,
@@ -612,6 +795,11 @@ export type Env = CloudflareBindings;`;
   const pipelinesActionField = hasPipelines ? `
     /** Pipelines ingestion sink (durable, R2-backed). Fire-and-forget and batched; do not read it back in-handler. */
     readonly pipelines: import("@lunora/pipelines").PipelineClient;` : "";
+  const r2sqlActionField = hasR2sql ? `
+    /**
+     * R2 SQL over Apache Iceberg tables (window functions, DISTINCT, set operations). Non-deterministic — available only in actions. Reads here are NOT tracked by Lunora live queries.
+     */
+    readonly r2sql: import("@lunora/r2sql").R2SqlClient;` : "";
   const hasWorkflows = workflows.length > 0;
   const workflowsTypeImport = hasWorkflows ? `import type { WorkflowHandle } from "@lunora/workflow";
 import type * as lunoraWorkflowDefinitions from "../workflows.js";
@@ -701,7 +889,7 @@ export interface MutationCtx extends Omit<MutationCtxBase, "db" | "storage"${wor
 export interface ActionCtx extends Omit<ActionCtxBase, "db" | "storage"${workflowsOmit}> {
     readonly db: Omit<DatabaseWriter, "query" | "get"> & DatabaseWriterFacade & { query: TypedTableQuery; get: TypedTableGet };
     readonly orm: OrmWriter;
-    readonly storage: StorageBase<StorageBucketName>;${aiActionField}${paymentsActionField}${containersActionField}${kvContextField}${hyperdriveActionField}${browserActionField}${imagesActionField}${analyticsContextField}${pipelinesActionField}${workflowsContextField}
+    readonly storage: StorageBase<StorageBucketName>;${aiActionField}${paymentsActionField}${containersActionField}${kvContextField}${hyperdriveActionField}${browserActionField}${imagesActionField}${analyticsContextField}${pipelinesActionField}${r2sqlActionField}${workflowsContextField}
 }
 
 /**
@@ -771,10 +959,21 @@ const renderLifecycleManifest = (functions) => {
   }
   return manifest;
 };
-const emitFunctions = (functions, migrations = []) => {
+const emitFunctions = (functions, migrations = [], useUmbrella = false) => {
   const hasFunctions = functions.length > 0;
-  const { dispatchBody, importBlock, migrationBody } = renderFunctionRegistry(functions, migrations);
+  const base = baseSpecifiers(useUmbrella);
+  const { dispatchBody, importBlock, installBlock, migrationBody } = renderFunctionRegistry(functions, migrations);
   const lifecycleHooks = renderLifecycleManifest(functions);
+  const compiledArgsImport = installBlock.length > 0 ? `import { DEFER_VALIDATION as DEFER, installCompiledValidatorMap } from "${base.values}";
+` : "";
+  const compiledArgsInstall = installBlock.length > 0 ? `
+/**
+ * AOT-compiled argument validators (Worker-safe, no \`eval\`). Each is installed
+ * onto its function's live \`.args\` object and consulted by the interpreted
+ * parser as a zero-allocation fast path; anything it can't model is deferred.
+ */
+${installBlock}
+` : "";
   const caller = renderCaller(functions);
   const callerTypes = caller.types ? `
 ${caller.types}
@@ -789,7 +988,7 @@ ${caller.implementation}
   const callRegisteredHelper = hasFunctions ? `${CALL_REGISTERED_HELPER}
 
 ` : "";
-  return `${GENERATED_HEADER}${importBlock}import type { ActionCtx, MutationCtx, QueryCtx } from "./server.js";
+  return `${GENERATED_HEADER}${importBlock}${compiledArgsImport}import type { ActionCtx, MutationCtx, QueryCtx } from "./server.js";
 ${dataModelImport}
 /**
  * Single registered function, narrowed to the shape \`handleRpc\` needs.
@@ -815,7 +1014,7 @@ export interface RegisteredLunoraFunction {
  * emits (\`api[namespace][fn].__lunoraRef === "namespace:fn"\`).
  */
 export const LUNORA_FUNCTIONS: Record<string, RegisteredLunoraFunction> = {${dispatchBody}};
-
+${compiledArgsInstall}
 /**
  * Connection-lifecycle manifest: the function paths the generated ShardDO
  * dispatches when a client's WebSocket connects (\`connect\`) or disconnects
@@ -1183,17 +1382,68 @@ const browserStub: Browser = {
 `
   };
 };
-const emitContainers = (containers) => {
+const emitR2sqlFragments = (hasR2sql) => {
+  if (!hasR2sql) {
+    return EMPTY_HELPER_FRAGMENTS;
+  }
+  const r2sqlMissing = `throw new Error("ctx.r2sql: no R2 SQL credentials found. Set \\\`R2_SQL_TOKEN\\\`, \\\`R2_SQL_ACCOUNT_ID\\\` (or \\\`CLOUDFLARE_ACCOUNT_ID\\\`), and \\\`R2_SQL_BUCKET\\\` in your env/.dev.vars, or pass an \\\`r2sql\\\` config thunk to createShardDO().");`;
+  return {
+    build: `
+            const r2sqlEnv = env as Record<string, unknown>;
+            const r2sqlAccountId = (r2sqlEnv.R2_SQL_ACCOUNT_ID ?? r2sqlEnv.CLOUDFLARE_ACCOUNT_ID) as string | undefined;
+            const r2sqlToken = r2sqlEnv.R2_SQL_TOKEN as string | undefined;
+            const r2sqlBucket = r2sqlEnv.R2_SQL_BUCKET as string | undefined;
+            const r2sql: R2SqlClient = config.r2sql
+                ? config.r2sql(env)
+                : r2sqlAccountId && r2sqlToken && r2sqlBucket
+                  ? createR2Sql({ accountId: r2sqlAccountId, apiToken: r2sqlToken, bucket: r2sqlBucket })
+                  : r2sqlStub;
+`,
+    configField: `
+    r2sql?: (env: Record<string, unknown>) => R2SqlClient;`,
+    // ActionCtx-only: attached via the \`ctx.r2sql = r2sql\` assignment in the
+    // \`isAction\` block, never the every-ctx object literal.
+    contextField: "",
+    importLines: [`import type { R2SqlClient } from "@lunora/r2sql";`, `import { createR2Sql } from "@lunora/r2sql";`],
+    // The stub is typed `R2SqlClient`, so TS flags a missing method at build
+    // time — but it must stay structurally in sync with that interface
+    // (`@lunora/r2sql` client.ts) when a method is added there.
+    stub: `
+const r2sqlStub: R2SqlClient = {
+    describe: async () => {
+        ${r2sqlMissing}
+    },
+    explain: async () => {
+        ${r2sqlMissing}
+    },
+    from: () => {
+        ${r2sqlMissing}
+    },
+    query: async () => {
+        ${r2sqlMissing}
+    },
+    showDatabases: async () => {
+        ${r2sqlMissing}
+    },
+    showTables: async () => {
+        ${r2sqlMissing}
+    },
+};
+`
+  };
+};
+const emitContainers = (containers, jurisdiction) => {
   if (containers.length === 0) {
     return "";
   }
+  const jurisdictionArgument = jurisdiction ? `, ${JSON.stringify(jurisdiction)}` : "";
   const classes = containers.map((container) => {
     assertIdentifier(container.exportName, `container export "${container.exportName}"`);
     assertIdentifier(container.className, `container class "${container.className}"`);
     return `/** Container DO for the \`${container.exportName}\` definition (binding \`${container.bindingName}\`). */
 export class ${container.className} extends LunoraContainer {
     public constructor(ctx: ConstructorParameters<typeof LunoraContainer>[0], env: Record<string, unknown>) {
-        super(ctx, env, ${container.exportName}, "${container.exportName}");
+        super(ctx, env, ${container.exportName}, "${container.exportName}"${jurisdictionArgument});
     }
 }
 `;
@@ -1212,7 +1462,7 @@ import { ${imports} } from "../containers.js";
 
 ${classes}`;
 };
-const emitContainerFragments = (containers) => {
+const emitContainerFragments = (containers, jurisdiction) => {
   if (containers.length === 0) {
     return { build: "", contextField: "", importLines: [], specs: "" };
   }
@@ -1225,8 +1475,11 @@ const emitContainerFragments = (containers) => {
     return `    { binding: "${container.bindingName}", exportName: "${container.exportName}"${maxInstances} },`;
   }).join("\n");
   return {
+    // Schema `.jurisdiction("…")` pins every container DO this shard reaches
+    // to the data-residency region; the arg is omitted when undeclared so
+    // existing generated output is unchanged.
     build: `
-            const containers = createContainerContext(env, LUNORA_CONTAINERS);
+            const containers = createContainerContext(env, LUNORA_CONTAINERS${jurisdiction ? `, ${JSON.stringify(jurisdiction)}` : ""});
 `,
     contextField: `
                 containers,`,
@@ -1420,6 +1673,7 @@ const emitShard = ({
   hasImages = false,
   hasKv = false,
   hasPayments = false,
+  hasR2sql = false,
   maskMetadata,
   rlsMetadata,
   schema,
@@ -1435,12 +1689,13 @@ const emitShard = ({
   const imagesFragments = emitImagesFragments(hasImages);
   const hyperdriveFragments = emitHyperdriveFragments(hasHyperdrive);
   const browserFragments = emitBrowserFragments(hasBrowser);
+  const r2sqlFragments = emitR2sqlFragments(hasR2sql);
   const {
     build: containersBuild,
     contextField: containersContextField,
     importLines: containerImportLines,
     specs: containerSpecs
-  } = emitContainerFragments(containers);
+  } = emitContainerFragments(containers, schema.jurisdiction);
   const {
     build: workflowsBuild,
     contextField: workflowsContextField,
@@ -1509,6 +1764,7 @@ const emitShard = ({
     ...imagesFragments.importLines,
     ...hyperdriveFragments.importLines,
     ...browserFragments.importLines,
+    ...r2sqlFragments.importLines,
     ...containerImportLines,
     ...workflowImportLines,
     ...paymentsImports,
@@ -1654,15 +1910,16 @@ ${schema.tables.map(
 ` : "";
   const everyContextBuild = `${kvFragments.build}${analyticsFragments.build}`;
   const everyContextField = `${kvFragments.contextField}${analyticsFragments.contextField}`;
-  const actionOnlyHasAny = hasImages || hasHyperdrive || hasBrowser;
+  const actionOnlyHasAny = hasImages || hasHyperdrive || hasBrowser || hasR2sql;
   const actionOnlyBlock = actionOnlyHasAny ? `
             // ActionCtx-only helpers (external, non-deterministic I/O): constructed
             // and attached only for an \`action\` so query/mutation ctx never carry them.
             if (isAction) {
-${imagesFragments.build}${hyperdriveFragments.build}${browserFragments.build}${[
+${imagesFragments.build}${hyperdriveFragments.build}${browserFragments.build}${r2sqlFragments.build}${[
     ...hasImages ? ["                ctx.images = images;"] : [],
     ...hasHyperdrive ? ["                ctx.sql = sql;"] : [],
-    ...hasBrowser ? ["                ctx.browser = browser;"] : []
+    ...hasBrowser ? ["                ctx.browser = browser;"] : [],
+    ...hasR2sql ? ["                ctx.r2sql = r2sql;"] : []
   ].join("\n")}
             }
 ` : "";
@@ -1709,7 +1966,7 @@ export interface ShardDOConfig {
     /** Optional telemetry sink. When supplied, each \`ctx.log.*\` call is forwarded to \`sink.onLog\`. Pass the SAME sink you give \`createWorker({ observability })\` (which drives \`onRpc\`) to route both RPC and log events. */
     observability?: (env: Record<string, unknown>) => LogSink | undefined;
     scheduler?: (env: Record<string, unknown>) => unknown;
-    storage?: (env: Record<string, unknown>) => unknown;${vectorsConfigField}${aiConfigField}${kvFragments.configField}${analyticsFragments.configField}${imagesFragments.configField}${hyperdriveFragments.configField}${browserFragments.configField}${paymentsConfigField}${d1ConfigField}${hyperdriveGlobalConfigField}
+    storage?: (env: Record<string, unknown>) => unknown;${vectorsConfigField}${aiConfigField}${kvFragments.configField}${analyticsFragments.configField}${imagesFragments.configField}${hyperdriveFragments.configField}${browserFragments.configField}${r2sqlFragments.configField}${paymentsConfigField}${d1ConfigField}${hyperdriveGlobalConfigField}
 }
 
 const schedulerStub = {
@@ -1747,7 +2004,7 @@ const storageStub = {
         throw new Error("ctx.storage: no storage configured. Pass \`storage\` to createShardDO().");
     },
 };
-${globalDatabaseStub}${vectorsStub}${aiStub}${kvFragments.stub}${analyticsFragments.stub}${imagesFragments.stub}${hyperdriveFragments.stub}${browserFragments.stub}${paymentStub}${bindTableHelper}
+${globalDatabaseStub}${vectorsStub}${aiStub}${kvFragments.stub}${analyticsFragments.stub}${imagesFragments.stub}${hyperdriveFragments.stub}${browserFragments.stub}${r2sqlFragments.stub}${paymentStub}${bindTableHelper}
 // Bound in-process \`ctx.run*\` composition depth so a self- or cyclically-
 // referencing call fails loudly with a clear error instead of overflowing the
 // stack. Tracked across the awaited handler chain (one DO invocation is
@@ -2149,6 +2406,14 @@ ${facadeBlock}${paymentsBuild}
                 warn: (...args: unknown[]) => { this.recordUserLog(logFunctionPath, "warn", args, observability); },
             };
 
+            // \`ctx.now\`: the wall-clock instant (epoch ms) this function began,
+            // captured ONCE so the whole handler body sees a single stable value.
+            // Query/mutation handlers must be deterministic (they may be re-run on
+            // OCC retry / subscription re-eval), so they must read time through
+            // \`ctx.now\` instead of \`Date.now()\` — the \`nondeterministic_query_mutation\`
+            // advisor flags the latter. Actions may still use ambient \`Date.now()\`.
+            const now = Date.now();
+
             const ctx: Record<string, unknown> = {
                 auth: {
                     getIdentity: async () => identity ?? null,
@@ -2157,7 +2422,8 @@ ${facadeBlock}${paymentsBuild}
                 db,
                 fetch: globalThis.fetch.bind(globalThis),
                 ip: this.getCurrentIp(),
-                log,${ormContextField}
+                log,
+                now,${ormContextField}
                 scheduler,
                 storage,${vectorsContextField}${aiContextField}${everyContextField}${paymentsContextField}${containersContextField}${workflowsContextField}
             };

package/dist/packem_shared/{buildOpenRpcDocument-BZGY1-jT.mjs → OPENRPC_VERSION-B4i9Qp3v.mjs}

@@ -1,4 +1,4 @@
-import { GENERATED_HEADER } from './emitApi-hRVC-kE7.mjs';
+import { GENERATED_HEADER } from './GENERATED_HEADER-BiFXNUvo.mjs';
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 import { argsObjectSchema, LUNORA_ERROR_CODES } from './LUNORA_ERROR_CODES-CySpQPD3.mjs';