@lunora/codegen 1.0.0-alpha.143 → 1.0.0-alpha.145

package/dist/index.d.mts

@@ -75,15 +75,38 @@ interface SchemaSnapshot {
  * UI-disagrees-with-the-deploy-gate divergence this module exists to prevent.
  */
 type DriftScope = "schema" | "table";
+/**
+ * What actually fixes a change, so a consumer can name the right tool.
+ *
+ * - `"backfill"` — a `defineMigration` transform rewrites the affected rows.
+ *   The ONLY value for which a data migration is the answer.
+ * - `"rehome"` — the rows' physical storage moves (a different Durable Object,
+ *   or a different region). The per-shard runner only ever replaces a row inside
+ *   the shard it was handed, so no transform reaches these; the fix is an
+ *   export/import round trip, or a revert.
+ * - `"code"` — nothing happens to stored data; a query or a call site has to
+ *   change (a dropped index, a dropped relation).
+ * - `"none"` — additive, nothing to do.
+ *
+ * This lives HERE, next to the change union, for the same reason {@link DriftScope}
+ * does: a hand-maintained set of type names in the consumer gives zero
+ * compile-time pressure, so a new variant would silently default to whatever the
+ * set omits. The deploy gate uses this to decide both what a data migration may
+ * excuse and which tables it offers to scaffold one for — a wrong default there
+ * sends the operator to a tool that cannot work.
+ */
+type DriftRemediation = "backfill" | "code" | "none" | "rehome";
 /** One classified structural change between two snapshots. */
 interface DriftChange {
+  /** What fixes this change — see {@link DriftRemediation}. `"none"` for every `safe` change. */
+  remediation: DriftRemediation;
   /**
    * `"table"` means this table's own DDL moved (fields, indexes, shard mode) —
    * a relation whose foreign key lives on the OTHER table stays `"schema"`, so
    * the "changed" signal keeps meaning "this table's shape moved".
    */
   scope: DriftScope;
-  /** `"breaking"` changes need a data migration; `"safe"` changes are additive. */
+  /** `"breaking"` changes need attention before deploy; `"safe"` changes are additive. */
   severity: "breaking" | "safe";
   /** Human-readable, actionable description (used in the gate message). */
   summary: string;
@@ -436,8 +459,10 @@ interface FunctionIR {
 /**
  * A `defineMigration({...})` declaration discovered in the user's lunora
  * sources. The emitted `LUNORA_MIGRATIONS` registry keys on {@link MigrationIR.id}; the
- * import wiring needs {@link MigrationIR.exportName}/{@link MigrationIR.filePath}. {@link MigrationIR.table} is
- * informational (the runtime object carries the authoritative value).
+ * import wiring needs {@link MigrationIR.exportName}/{@link MigrationIR.filePath}. The runtime object
+ * carries the authoritative {@link MigrationIR.table}, but the lifted value is
+ * load-bearing at build time: the schema-drift gate matches it against the
+ * tables with breaking drift, so a migration left at `""` covers nothing.
  */
 interface MigrationIR {
   /** Export binding name, used to reference the module member in generated imports. */
@@ -905,15 +930,18 @@ interface NondeterministicCallIR {
   line: number;
 }
 /**
- * One `ctx.r2sql` access lexically inside a `query`/`mutation` handler — the
- * `r2sql_outside_action` advisor lint input. Structurally identical to the
- * advisor's `AdvisorR2sqlCall` (same field set) so values pass straight through
- * `lintSchema` without conversion, exactly as `NondeterministicCallIR` does.
- * Only `query`/`mutation` handlers are recorded; `action(...)` is the intended
- * home for `ctx.r2sql` and is skipped.
+ * One `ctx.<property>` access lexically inside a `query`/`mutation` handler —
+ * the feeder shape behind every "action-only surface used outside an action"
+ * advisor lint (`hyperdrive_outside_action` for `ctx.sql`,
+ * `r2sql_outside_action` for `ctx.r2sql`). Structurally identical to the
+ * advisor's `AdvisorHyperdriveCall` / `AdvisorR2sqlCall` (same field set) so
+ * values pass straight through `lintSchema` without conversion, exactly as
+ * {@link NondeterministicCallIR} does. Only `query`/`mutation` handlers are
+ * recorded; `action(...)` is the only context where these surfaces are even
+ * typed, so it is the intended home and is skipped.
  */
-interface R2sqlCallIR {
-  /** The accessed `ctx.r2sql` surface, e.g. `ctx.r2sql.query` / `ctx.r2sql.from`. */
+interface ContextPropertyCallIR {
+  /** The accessed surface, e.g. `ctx.sql.query` / `ctx.r2sql.from` — the property, suffixed with the method when one is called on it. */
   callee: string;
   /** Export binding name of the function performing the access. */
   exportName: string;
@@ -921,7 +949,7 @@ interface R2sqlCallIR {
   file: string;
   /** Which procedure kind the access lives in — only `query`/`mutation` handlers are recorded. */
   kind: "mutation" | "query";
-  /** 1-based line of the access, or `0` when unknown. */
+  /** 1-based line of the access. */
   line: number;
 }
 /**
@@ -1773,9 +1801,9 @@ interface FlagSecurityDefaultIR {
  * `__cdc_log`, so a subscribed query is never re-run when a flag flips and keeps
  * serving the branch it last picked; `useFlag` is the reactive path. Structurally
  * identical to the advisor's `AdvisorFlagRead` (same field set) so values pass
- * straight through `lintSchema` without conversion, exactly as `R2sqlCallIR` does.
+ * straight through `lintSchema` without conversion, exactly as `ContextPropertyCallIR` does.
  *
- * Only `query` handlers are recorded — unlike `R2sqlCallIR` / `NondeterministicCallIR`
+ * Only `query` handlers are recorded — unlike `ContextPropertyCallIR` / `NondeterministicCallIR`
  * there is no `kind` field, because `mutation`/`action` handlers run once and have
  * no subscription staleness to warn about, so the feeder drops them rather than
  * handing the lint rows it would discard.
@@ -2026,6 +2054,7 @@ interface LintSchemaOptions {
   geoIndexUsages?: ReadonlyArray<AdvisorGeoIndexUsage>;
   httpActionGuards?: ReadonlyArray<HttpActionGuardIR>;
   httpHeaderWrites?: ReadonlyArray<HttpHeaderWriteIR>;
+  hyperdriveCalls?: ReadonlyArray<ContextPropertyCallIR>;
   identityClaimReads?: ReadonlyArray<IdentityClaimReadIR>;
   imageDeliveryUrlAccesses?: ReadonlyArray<ImageDeliveryUrlAccessIR>;
   inserts?: ReadonlyArray<InsertWriteIR>;
@@ -2044,7 +2073,7 @@ interface LintSchemaOptions {
   procedureProtections?: ReadonlyArray<ProcedureMiddlewareIR>;
   queries?: ReadonlyArray<QueryReadIR>;
   queues?: ReadonlyArray<QueueIR>;
-  r2sqlCalls?: ReadonlyArray<R2sqlCallIR>;
+  r2sqlCalls?: ReadonlyArray<ContextPropertyCallIR>;
   ratelimitKeySelectors?: ReadonlyArray<RatelimitKeySelectorIR>;
   rawRowReturns?: ReadonlyArray<RawRowReturnIR>;
   relationLoads?: ReadonlyArray<RelationLoadIR>;
@@ -2306,12 +2335,13 @@ declare const resolveCodegenTarget: (projectRoot: string, explicit?: string) =>
  * `@lunora/config`'s driver registry (`deployTargetIds`) used to assert
  * equality against this — "two id spaces for one concept" — on the theory that
  * a target with a matrix but no driver "gates a surface nothing can deploy."
- * Plan 234 found that reasoning incomplete by registering `node` here: a
- * codegen-gateable target and a deployable target are genuinely different
- * questions, and a spike/dev-only host answers the first "yes" and the second
- * "not yet" without that being a bug in either registry. See
- * `plans/234-node-host-findings.md` for the finding and `@lunora/config`'s
- * `project-config.test.ts` for where the now-relaxed invariant lives.
+ * Both registries list `cloudflare` and `node` today, so they happen to agree;
+ * the assertion stays relaxed because agreement is a coincidence of timing, not
+ * an invariant. "Codegen can gate capabilities for this target" and "the CLI can
+ * deploy to it" are different questions, and a new host answers the first the
+ * moment its capability matrix lands — before its deploy driver exists. See
+ * `@lunora/config`'s `project-config.test.ts` for where that relaxed invariant
+ * lives.
  * @returns the registered matrix ids, sorted.
  */
 declare const platformMatrixIds: () => ReadonlyArray<string>;
@@ -2541,6 +2571,13 @@ interface CodegenResult {
     /** WorkflowEntrypoint classes (`_generated/workflows.ts`); `""` (and not written) when no workflows are declared. */
     workflows: string;
   };
+  /**
+   * Data migrations discovered from `defineMigration` exports under `lunora/`,
+   * each with the table it iterates. The drift gate matches a NEW id against
+   * its table so a backfill only excuses breaking drift on the table it
+   * actually visits. Empty when the project declares none.
+   */
+  migrations: ReadonlyArray<MigrationIR>;
   outputDirectory: string;
   /**
    * Portability diagnostics for the requested {@link CodegenOptions.target}:
@@ -2681,6 +2718,17 @@ declare const discoverFunctions: (project: Project, lunoraDirectory: string) =>
  * These are the headline OpenAPI target: each becomes a real `paths` entry.
  */
 declare const discoverHttpRoutes: (project: Project, lunoraDirectory: string) => HttpRouteIR[];
+/**
+ * Discover Hyperdrive `ctx.sql` accesses inside exported `query(...)` /
+ * `mutation(...)` handlers — the `hyperdrive_outside_action` lint input.
+ *
+ * The lint shipped with no feeder at all: it returns `[]` unless
+ * `context.hyperdriveCalls` is set, and nothing set it, so the one guardrail
+ * against non-deterministic external SQL in a reactive handler never fired.
+ * `ctx.sql` is typed on `ActionCtx` only, so `action(...)` bodies are skipped by
+ * the shared walker — an access there is correct usage, not a finding.
+ */
+declare const discoverHyperdriveCalls: (project: Project, lunoraDirectory: string) => ContextPropertyCallIR[];
 /**
  * Discover `ctx.db.insert("table", …)` writes under the lunora source directory
  * and attribute each to the exported function (and file) performing it. Calls
@@ -2786,18 +2834,11 @@ declare const QUEUES_FILENAME = "queues.ts";
  */
 declare const discoverQueues: (project: Project, lunoraDirectory: string) => QueueIR[];
 /**
- * Discover `ctx.r2sql` accesses lexically inside the handler body of every
- * exported `query(...)` / `mutation(...)` registration under the lunora source
- * directory — the `r2sql_outside_action` lint input. `action(...)` (and
- * `stream(...)`) registrations are intentionally skipped: R2 SQL is the
- * external, non-reactive surface that belongs in actions.
- *
- * Traversal is scoped to the handler node (not the whole declaration), mirroring
- * `discoverNondeterministicCalls` — so a `ctx.r2sql` touch in a sibling helper
- * outside the handler is not attributed to the query/mutation. One
- * {@link R2sqlCallIR} is produced per access site.
+ * Discover `ctx.r2sql` accesses inside exported `query(...)` / `mutation(...)`
+ * handlers — the `r2sql_outside_action` lint input. `action(...)` is the
+ * intended home for R2 SQL and is skipped by the shared walker.
  */
-declare const discoverR2sqlCalls: (project: Project, lunoraDirectory: string) => R2sqlCallIR[];
+declare const discoverR2sqlCalls: (project: Project, lunoraDirectory: string) => ContextPropertyCallIR[];
 declare const discoverRlsProcedures: (project: Project, lunoraDirectory: string) => RlsProcedureIR[];
 /**
  * Aggregate the schema-wide RLS metadata the studio's read-only inspector reads:
@@ -3160,8 +3201,19 @@ interface EmitAppOptions {
   hasHyperdriveGlobal: boolean;
   /** App uses `@lunora/bindings/images` / `ctx.images` → emit `.images()`. */
   hasImages: boolean;
-  /** App uses `@lunora/bindings/kv` / `ctx.kv` → emit `.kv()`. */
+  /** App uses `@lunora/bindings/kv` / `ctx.kv` → emit `.kv()`. Usage-only, because the method's parameter type reads `ShardConfig["kv"]`, and that config field is emitted on the same usage signal. */
   hasKv: boolean;
+  /**
+   * Wire the studio's zero-config KV introspector. Gated on `studioFeatures.kv`
+   * (usage OR a declared `@lunora/bindings` dependency), NOT on {@link EmitAppOptions.hasKv},
+   * so a visible KV tab always has a working backend — never the reverse.
+   *
+   * Kept separate from `hasKv` deliberately: the two were accidentally equal
+   * while the dependency arm in `discover/studio-features.ts` matched a subpath
+   * and could never fire. Fixing that arm made them diverge, and the shared flag
+   * emitted a `.kv()` builder whose `ShardConfig["kv"]` type did not exist.
+   */
+  hasKvIntrospector: boolean;
   /** App declares `lunora/notify.ts` (`@lunora/notify`) → wire `options.notifySubscriptionStore` so the studio Notifications page can read registered devices. */
   hasNotify: boolean;
   /** App uses `@lunora/payment` / `ctx.payments` → emit `.payment()`. */
@@ -3345,11 +3397,15 @@ declare class SchemaSnapshotParseError extends LunoraError {
 declare const parseSchemaSnapshot: (content: string | undefined) => SchemaSnapshot | undefined;
 /** The decision the pre-deploy gate returns. */
 interface SchemaDriftDecision {
-  /** True when the deploy must be blocked (breaking drift with no new migration, and no override). */
+  /** True when the deploy must be blocked (breaking drift no new migration covers, and no override). */
   blocked: boolean;
   /** Every classified change (both severities), for reporting. */
   changes: ReadonlyArray<DriftChange>;
-  /** Migration ids declared now but absent from the baseline — proof a migration was added. */
+  /**
+   * Migration ids declared now but absent from the baseline. Reported for
+   * context; the gate acts on which of them cover an affected TABLE, not on how
+   * many there are.
+   */
   newMigrationIds: ReadonlyArray<string>;
   /**
    * A multi-line, actionable explanation. Always present; empty string when
@@ -3361,9 +3417,22 @@ interface SchemaDriftDecision {
  * Decide whether breaking schema drift should block a deploy.
  *
  * Blocks only when the baseline exists (a first-ever capture is never blocking),
- * there is at least one `breaking` change, no NEW migration id was added since
- * the baseline, and the `allowDrift` override is not set. Safe-only drift (or
- * breaking drift accompanied by a new migration id) passes.
+ * there is at least one `breaking` change, no new migration COVERS it, and the
+ * `allowDrift` override is not set. Safe-only drift passes.
+ *
+ * "Covers" is per-table, not per-run: a new migration excuses breaking drift on
+ * the table it iterates, and nothing else. Counting new ids alone let a backfill
+ * on `messages` unblock a required field added to `users` — the gate reported
+ * "accompanied by a migration" for a change that migration would never visit.
+ * The shard-mode diff cites this block to justify the studio not shipping a
+ * stranded-rows detector (see `shared/schema-snapshot.ts`), and that claim only
+ * holds if an unrelated migration cannot wave it through.
+ *
+ * Only a `"backfill"` change is coverable at all. A `"rehome"` change moves rows
+ * to another Durable Object or region and a `"code"` change breaks a call site;
+ * rewriting rows fixes neither, so a migration must not excuse them however well
+ * its table matches. Those are cleared by fixing the code or accepting the new
+ * shape (`--allow-schema-drift` / `--update-schema-baseline`).
  */
 declare const evaluateSchemaDrift: (options: {
   allowDrift?: boolean;
@@ -3371,6 +3440,8 @@ declare const evaluateSchemaDrift: (options: {
   /** The command printing the remediation, so it names only flags that command accepts. */
   command?: string;
   current: SchemaSnapshot;
+  /** This run's declared migrations, so a new one is matched to the table it iterates. */
+  migrations: ReadonlyArray<Pick<MigrationIR, "id" | "table">>;
 }) => SchemaDriftDecision;
 /**
  * Convert a {@link SchemaIR} into a synthetic runtime {@link Schema} carrying just
@@ -3687,4 +3758,4 @@ declare const secretKindOf: (value: string) => string | undefined;
 /** A redacted preview of a secret value — first 4 chars plus its length, never the full value. */
 declare const redact: (value: string) => string;
 declare const VERSION = "0.0.0";
-export { AGENTS_FILENAME, type AgentIR, type AuthApiCallIR, CONTAINERS_FILENAME, CodegenDiagnosticError, type CodegenOptions, type CodegenResult, type ContainerIR, type CronJobIR, DEFAULT_TARGET, type DriftChange, type DriftScope, type EmitAppOptions, FLAGS_FILENAME, type FieldSnapshot, type FlagsIR, type FunctionIR, GENERATED_HEADER, type HttpRouteIR, type IndexIR, type IndexSnapshot, type InsertWriteIR, LUNORA_ERROR_CODES, type LintSchemaOptions, MUTATORS_FILENAME, type MaskProcedureIR, type MigrationIR, type MutatorIR, NOTIFY_FILENAME, OPENRPC_VERSION, type OpenApiEmitInput, type OpenRpcDocument, type OpenRpcEmitInput, type OpenRpcMethod, type PlatformDiagnostic, type ProjectIR, QUEUES_FILENAME, type QueryReadIR, type QueueIR, type R2sqlCallIR, type RelationSnapshot, type RlsMetadataIR, type RlsPolicyIR, type RlsProcedureIR, type RlsRoleIR, type RuntimeVerb, SCHEMA_SNAPSHOT_FILENAME, SCHEMA_SNAPSHOT_VERSION, SDK_LANGUAGES, SDK_TARGETS, SHAPES_FILENAME, type SandboxUsage, type SchemaDrift, type SchemaDriftDecision, type SchemaIR, type SchemaSnapshot, SchemaSnapshotParseError, type SdkFiles, type SdkMethod, type SdkNamespace, type SdkRenderInput, type SdkResult, type SdkTarget, type ShapeIR, type StorageRuleIR, type StorageRulesMetadataIR, type TableIR, type TableSnapshot, VERSION, type ValidatorIR, type VectorIndexIR, WORKFLOWS_FILENAME, type WorkflowIR, type WranglerVariableIR, buildOpenApiDocument, buildOpenRpcDocument, buildSchemaSnapshot, createCodegenProject, describeErrorLevelFindings, diagnosticAt, diffSchemaSnapshots, discoverAgents, discoverAuthApiCalls, discoverContainers, discoverCrons, discoverFlags, discoverFunctions, discoverHttpRoutes, discoverInserts, discoverMaskProcedures, discoverMigrations, discoverMutators, discoverNondeterministicCalls, discoverNotifyCalls, discoverNotifyConfig, discoverQueries, discoverQueues, discoverR2sqlCalls, discoverRlsMetadata, discoverRlsProcedures, discoverSandboxUsage, discoverSchema, discoverShapes, discoverStorageRulesMetadata, discoverWorkflows, emitAgents, emitApi, emitApp, emitCollections, emitContainers, emitCrons, emitDataModel, emitDrizzleSchema, emitFunctions, emitOpenApi, emitOpenApiModule, emitOpenRpc, emitOpenRpcModule, emitServer, emitShard, emitVectors, emitWorkflows, emitWranglerCronTriggers, errorAdvisoryNames, errorPlatformDiagnosticNames, evaluateSchemaDrift, findTsconfig, formatAdvisories, generateSdk, isTypedSchema, lintSchema, parseSchemaSnapshot, platformMatrixIds, readPackageDependencies, readProjectTarget, redact, refreshCodegenProject, resolveCodegenTarget, runCodegen, schemaFromIr, secretKindOf, serializeSchemaSnapshot, toAdvisorContext, validatorIrToJsonSchema };
+export { AGENTS_FILENAME, type AgentIR, type AuthApiCallIR, CONTAINERS_FILENAME, CodegenDiagnosticError, type CodegenOptions, type CodegenResult, type ContainerIR, type ContextPropertyCallIR, type CronJobIR, DEFAULT_TARGET, type DriftChange, type DriftRemediation, type DriftScope, type EmitAppOptions, FLAGS_FILENAME, type FieldSnapshot, type FlagsIR, type FunctionIR, GENERATED_HEADER, type HttpRouteIR, type IndexIR, type IndexSnapshot, type InsertWriteIR, LUNORA_ERROR_CODES, type LintSchemaOptions, MUTATORS_FILENAME, type MaskProcedureIR, type MigrationIR, type MutatorIR, NOTIFY_FILENAME, OPENRPC_VERSION, type OpenApiEmitInput, type OpenRpcDocument, type OpenRpcEmitInput, type OpenRpcMethod, type PlatformDiagnostic, type ProjectIR, QUEUES_FILENAME, type QueryReadIR, type QueueIR, type RelationSnapshot, type RlsMetadataIR, type RlsPolicyIR, type RlsProcedureIR, type RlsRoleIR, type RuntimeVerb, SCHEMA_SNAPSHOT_FILENAME, SCHEMA_SNAPSHOT_VERSION, SDK_LANGUAGES, SDK_TARGETS, SHAPES_FILENAME, type SandboxUsage, type SchemaDrift, type SchemaDriftDecision, type SchemaIR, type SchemaSnapshot, SchemaSnapshotParseError, type SdkFiles, type SdkMethod, type SdkNamespace, type SdkRenderInput, type SdkResult, type SdkTarget, type ShapeIR, type StorageRuleIR, type StorageRulesMetadataIR, type TableIR, type TableSnapshot, VERSION, type ValidatorIR, type VectorIndexIR, WORKFLOWS_FILENAME, type WorkflowIR, type WranglerVariableIR, buildOpenApiDocument, buildOpenRpcDocument, buildSchemaSnapshot, createCodegenProject, describeErrorLevelFindings, diagnosticAt, diffSchemaSnapshots, discoverAgents, discoverAuthApiCalls, discoverContainers, discoverCrons, discoverFlags, discoverFunctions, discoverHttpRoutes, discoverHyperdriveCalls, discoverInserts, discoverMaskProcedures, discoverMigrations, discoverMutators, discoverNondeterministicCalls, discoverNotifyCalls, discoverNotifyConfig, discoverQueries, discoverQueues, discoverR2sqlCalls, discoverRlsMetadata, discoverRlsProcedures, discoverSandboxUsage, discoverSchema, discoverShapes, discoverStorageRulesMetadata, discoverWorkflows, emitAgents, emitApi, emitApp, emitCollections, emitContainers, emitCrons, emitDataModel, emitDrizzleSchema, emitFunctions, emitOpenApi, emitOpenApiModule, emitOpenRpc, emitOpenRpcModule, emitServer, emitShard, emitVectors, emitWorkflows, emitWranglerCronTriggers, errorAdvisoryNames, errorPlatformDiagnosticNames, evaluateSchemaDrift, findTsconfig, formatAdvisories, generateSdk, isTypedSchema, lintSchema, parseSchemaSnapshot, platformMatrixIds, readPackageDependencies, readProjectTarget, redact, refreshCodegenProject, resolveCodegenTarget, runCodegen, schemaFromIr, secretKindOf, serializeSchemaSnapshot, toAdvisorContext, validatorIrToJsonSchema };

package/dist/index.d.ts

@@ -75,15 +75,38 @@ interface SchemaSnapshot {
  * UI-disagrees-with-the-deploy-gate divergence this module exists to prevent.
  */
 type DriftScope = "schema" | "table";
+/**
+ * What actually fixes a change, so a consumer can name the right tool.
+ *
+ * - `"backfill"` — a `defineMigration` transform rewrites the affected rows.
+ *   The ONLY value for which a data migration is the answer.
+ * - `"rehome"` — the rows' physical storage moves (a different Durable Object,
+ *   or a different region). The per-shard runner only ever replaces a row inside
+ *   the shard it was handed, so no transform reaches these; the fix is an
+ *   export/import round trip, or a revert.
+ * - `"code"` — nothing happens to stored data; a query or a call site has to
+ *   change (a dropped index, a dropped relation).
+ * - `"none"` — additive, nothing to do.
+ *
+ * This lives HERE, next to the change union, for the same reason {@link DriftScope}
+ * does: a hand-maintained set of type names in the consumer gives zero
+ * compile-time pressure, so a new variant would silently default to whatever the
+ * set omits. The deploy gate uses this to decide both what a data migration may
+ * excuse and which tables it offers to scaffold one for — a wrong default there
+ * sends the operator to a tool that cannot work.
+ */
+type DriftRemediation = "backfill" | "code" | "none" | "rehome";
 /** One classified structural change between two snapshots. */
 interface DriftChange {
+  /** What fixes this change — see {@link DriftRemediation}. `"none"` for every `safe` change. */
+  remediation: DriftRemediation;
   /**
    * `"table"` means this table's own DDL moved (fields, indexes, shard mode) —
    * a relation whose foreign key lives on the OTHER table stays `"schema"`, so
    * the "changed" signal keeps meaning "this table's shape moved".
    */
   scope: DriftScope;
-  /** `"breaking"` changes need a data migration; `"safe"` changes are additive. */
+  /** `"breaking"` changes need attention before deploy; `"safe"` changes are additive. */
   severity: "breaking" | "safe";
   /** Human-readable, actionable description (used in the gate message). */
   summary: string;
@@ -436,8 +459,10 @@ interface FunctionIR {
 /**
  * A `defineMigration({...})` declaration discovered in the user's lunora
  * sources. The emitted `LUNORA_MIGRATIONS` registry keys on {@link MigrationIR.id}; the
- * import wiring needs {@link MigrationIR.exportName}/{@link MigrationIR.filePath}. {@link MigrationIR.table} is
- * informational (the runtime object carries the authoritative value).
+ * import wiring needs {@link MigrationIR.exportName}/{@link MigrationIR.filePath}. The runtime object
+ * carries the authoritative {@link MigrationIR.table}, but the lifted value is
+ * load-bearing at build time: the schema-drift gate matches it against the
+ * tables with breaking drift, so a migration left at `""` covers nothing.
  */
 interface MigrationIR {
   /** Export binding name, used to reference the module member in generated imports. */
@@ -905,15 +930,18 @@ interface NondeterministicCallIR {
   line: number;
 }
 /**
- * One `ctx.r2sql` access lexically inside a `query`/`mutation` handler — the
- * `r2sql_outside_action` advisor lint input. Structurally identical to the
- * advisor's `AdvisorR2sqlCall` (same field set) so values pass straight through
- * `lintSchema` without conversion, exactly as `NondeterministicCallIR` does.
- * Only `query`/`mutation` handlers are recorded; `action(...)` is the intended
- * home for `ctx.r2sql` and is skipped.
+ * One `ctx.<property>` access lexically inside a `query`/`mutation` handler —
+ * the feeder shape behind every "action-only surface used outside an action"
+ * advisor lint (`hyperdrive_outside_action` for `ctx.sql`,
+ * `r2sql_outside_action` for `ctx.r2sql`). Structurally identical to the
+ * advisor's `AdvisorHyperdriveCall` / `AdvisorR2sqlCall` (same field set) so
+ * values pass straight through `lintSchema` without conversion, exactly as
+ * {@link NondeterministicCallIR} does. Only `query`/`mutation` handlers are
+ * recorded; `action(...)` is the only context where these surfaces are even
+ * typed, so it is the intended home and is skipped.
  */
-interface R2sqlCallIR {
-  /** The accessed `ctx.r2sql` surface, e.g. `ctx.r2sql.query` / `ctx.r2sql.from`. */
+interface ContextPropertyCallIR {
+  /** The accessed surface, e.g. `ctx.sql.query` / `ctx.r2sql.from` — the property, suffixed with the method when one is called on it. */
   callee: string;
   /** Export binding name of the function performing the access. */
   exportName: string;
@@ -921,7 +949,7 @@ interface R2sqlCallIR {
   file: string;
   /** Which procedure kind the access lives in — only `query`/`mutation` handlers are recorded. */
   kind: "mutation" | "query";
-  /** 1-based line of the access, or `0` when unknown. */
+  /** 1-based line of the access. */
   line: number;
 }
 /**
@@ -1773,9 +1801,9 @@ interface FlagSecurityDefaultIR {
  * `__cdc_log`, so a subscribed query is never re-run when a flag flips and keeps
  * serving the branch it last picked; `useFlag` is the reactive path. Structurally
  * identical to the advisor's `AdvisorFlagRead` (same field set) so values pass
- * straight through `lintSchema` without conversion, exactly as `R2sqlCallIR` does.
+ * straight through `lintSchema` without conversion, exactly as `ContextPropertyCallIR` does.
  *
- * Only `query` handlers are recorded — unlike `R2sqlCallIR` / `NondeterministicCallIR`
+ * Only `query` handlers are recorded — unlike `ContextPropertyCallIR` / `NondeterministicCallIR`
  * there is no `kind` field, because `mutation`/`action` handlers run once and have
  * no subscription staleness to warn about, so the feeder drops them rather than
  * handing the lint rows it would discard.
@@ -2026,6 +2054,7 @@ interface LintSchemaOptions {
   geoIndexUsages?: ReadonlyArray<AdvisorGeoIndexUsage>;
   httpActionGuards?: ReadonlyArray<HttpActionGuardIR>;
   httpHeaderWrites?: ReadonlyArray<HttpHeaderWriteIR>;
+  hyperdriveCalls?: ReadonlyArray<ContextPropertyCallIR>;
   identityClaimReads?: ReadonlyArray<IdentityClaimReadIR>;
   imageDeliveryUrlAccesses?: ReadonlyArray<ImageDeliveryUrlAccessIR>;
   inserts?: ReadonlyArray<InsertWriteIR>;
@@ -2044,7 +2073,7 @@ interface LintSchemaOptions {
   procedureProtections?: ReadonlyArray<ProcedureMiddlewareIR>;
   queries?: ReadonlyArray<QueryReadIR>;
   queues?: ReadonlyArray<QueueIR>;
-  r2sqlCalls?: ReadonlyArray<R2sqlCallIR>;
+  r2sqlCalls?: ReadonlyArray<ContextPropertyCallIR>;
   ratelimitKeySelectors?: ReadonlyArray<RatelimitKeySelectorIR>;
   rawRowReturns?: ReadonlyArray<RawRowReturnIR>;
   relationLoads?: ReadonlyArray<RelationLoadIR>;
@@ -2306,12 +2335,13 @@ declare const resolveCodegenTarget: (projectRoot: string, explicit?: string) =>
  * `@lunora/config`'s driver registry (`deployTargetIds`) used to assert
  * equality against this — "two id spaces for one concept" — on the theory that
  * a target with a matrix but no driver "gates a surface nothing can deploy."
- * Plan 234 found that reasoning incomplete by registering `node` here: a
- * codegen-gateable target and a deployable target are genuinely different
- * questions, and a spike/dev-only host answers the first "yes" and the second
- * "not yet" without that being a bug in either registry. See
- * `plans/234-node-host-findings.md` for the finding and `@lunora/config`'s
- * `project-config.test.ts` for where the now-relaxed invariant lives.
+ * Both registries list `cloudflare` and `node` today, so they happen to agree;
+ * the assertion stays relaxed because agreement is a coincidence of timing, not
+ * an invariant. "Codegen can gate capabilities for this target" and "the CLI can
+ * deploy to it" are different questions, and a new host answers the first the
+ * moment its capability matrix lands — before its deploy driver exists. See
+ * `@lunora/config`'s `project-config.test.ts` for where that relaxed invariant
+ * lives.
  * @returns the registered matrix ids, sorted.
  */
 declare const platformMatrixIds: () => ReadonlyArray<string>;
@@ -2541,6 +2571,13 @@ interface CodegenResult {
     /** WorkflowEntrypoint classes (`_generated/workflows.ts`); `""` (and not written) when no workflows are declared. */
     workflows: string;
   };
+  /**
+   * Data migrations discovered from `defineMigration` exports under `lunora/`,
+   * each with the table it iterates. The drift gate matches a NEW id against
+   * its table so a backfill only excuses breaking drift on the table it
+   * actually visits. Empty when the project declares none.
+   */
+  migrations: ReadonlyArray<MigrationIR>;
   outputDirectory: string;
   /**
    * Portability diagnostics for the requested {@link CodegenOptions.target}:
@@ -2681,6 +2718,17 @@ declare const discoverFunctions: (project: Project, lunoraDirectory: string) =>
  * These are the headline OpenAPI target: each becomes a real `paths` entry.
  */
 declare const discoverHttpRoutes: (project: Project, lunoraDirectory: string) => HttpRouteIR[];
+/**
+ * Discover Hyperdrive `ctx.sql` accesses inside exported `query(...)` /
+ * `mutation(...)` handlers — the `hyperdrive_outside_action` lint input.
+ *
+ * The lint shipped with no feeder at all: it returns `[]` unless
+ * `context.hyperdriveCalls` is set, and nothing set it, so the one guardrail
+ * against non-deterministic external SQL in a reactive handler never fired.
+ * `ctx.sql` is typed on `ActionCtx` only, so `action(...)` bodies are skipped by
+ * the shared walker — an access there is correct usage, not a finding.
+ */
+declare const discoverHyperdriveCalls: (project: Project, lunoraDirectory: string) => ContextPropertyCallIR[];
 /**
  * Discover `ctx.db.insert("table", …)` writes under the lunora source directory
  * and attribute each to the exported function (and file) performing it. Calls
@@ -2786,18 +2834,11 @@ declare const QUEUES_FILENAME = "queues.ts";
  */
 declare const discoverQueues: (project: Project, lunoraDirectory: string) => QueueIR[];
 /**
- * Discover `ctx.r2sql` accesses lexically inside the handler body of every
- * exported `query(...)` / `mutation(...)` registration under the lunora source
- * directory — the `r2sql_outside_action` lint input. `action(...)` (and
- * `stream(...)`) registrations are intentionally skipped: R2 SQL is the
- * external, non-reactive surface that belongs in actions.
- *
- * Traversal is scoped to the handler node (not the whole declaration), mirroring
- * `discoverNondeterministicCalls` — so a `ctx.r2sql` touch in a sibling helper
- * outside the handler is not attributed to the query/mutation. One
- * {@link R2sqlCallIR} is produced per access site.
+ * Discover `ctx.r2sql` accesses inside exported `query(...)` / `mutation(...)`
+ * handlers — the `r2sql_outside_action` lint input. `action(...)` is the
+ * intended home for R2 SQL and is skipped by the shared walker.
  */
-declare const discoverR2sqlCalls: (project: Project, lunoraDirectory: string) => R2sqlCallIR[];
+declare const discoverR2sqlCalls: (project: Project, lunoraDirectory: string) => ContextPropertyCallIR[];
 declare const discoverRlsProcedures: (project: Project, lunoraDirectory: string) => RlsProcedureIR[];
 /**
  * Aggregate the schema-wide RLS metadata the studio's read-only inspector reads:
@@ -3160,8 +3201,19 @@ interface EmitAppOptions {
   hasHyperdriveGlobal: boolean;
   /** App uses `@lunora/bindings/images` / `ctx.images` → emit `.images()`. */
   hasImages: boolean;
-  /** App uses `@lunora/bindings/kv` / `ctx.kv` → emit `.kv()`. */
+  /** App uses `@lunora/bindings/kv` / `ctx.kv` → emit `.kv()`. Usage-only, because the method's parameter type reads `ShardConfig["kv"]`, and that config field is emitted on the same usage signal. */
   hasKv: boolean;
+  /**
+   * Wire the studio's zero-config KV introspector. Gated on `studioFeatures.kv`
+   * (usage OR a declared `@lunora/bindings` dependency), NOT on {@link EmitAppOptions.hasKv},
+   * so a visible KV tab always has a working backend — never the reverse.
+   *
+   * Kept separate from `hasKv` deliberately: the two were accidentally equal
+   * while the dependency arm in `discover/studio-features.ts` matched a subpath
+   * and could never fire. Fixing that arm made them diverge, and the shared flag
+   * emitted a `.kv()` builder whose `ShardConfig["kv"]` type did not exist.
+   */
+  hasKvIntrospector: boolean;
   /** App declares `lunora/notify.ts` (`@lunora/notify`) → wire `options.notifySubscriptionStore` so the studio Notifications page can read registered devices. */
   hasNotify: boolean;
   /** App uses `@lunora/payment` / `ctx.payments` → emit `.payment()`. */
@@ -3345,11 +3397,15 @@ declare class SchemaSnapshotParseError extends LunoraError {
 declare const parseSchemaSnapshot: (content: string | undefined) => SchemaSnapshot | undefined;
 /** The decision the pre-deploy gate returns. */
 interface SchemaDriftDecision {
-  /** True when the deploy must be blocked (breaking drift with no new migration, and no override). */
+  /** True when the deploy must be blocked (breaking drift no new migration covers, and no override). */
   blocked: boolean;
   /** Every classified change (both severities), for reporting. */
   changes: ReadonlyArray<DriftChange>;
-  /** Migration ids declared now but absent from the baseline — proof a migration was added. */
+  /**
+   * Migration ids declared now but absent from the baseline. Reported for
+   * context; the gate acts on which of them cover an affected TABLE, not on how
+   * many there are.
+   */
   newMigrationIds: ReadonlyArray<string>;
   /**
    * A multi-line, actionable explanation. Always present; empty string when
@@ -3361,9 +3417,22 @@ interface SchemaDriftDecision {
  * Decide whether breaking schema drift should block a deploy.
  *
  * Blocks only when the baseline exists (a first-ever capture is never blocking),
- * there is at least one `breaking` change, no NEW migration id was added since
- * the baseline, and the `allowDrift` override is not set. Safe-only drift (or
- * breaking drift accompanied by a new migration id) passes.
+ * there is at least one `breaking` change, no new migration COVERS it, and the
+ * `allowDrift` override is not set. Safe-only drift passes.
+ *
+ * "Covers" is per-table, not per-run: a new migration excuses breaking drift on
+ * the table it iterates, and nothing else. Counting new ids alone let a backfill
+ * on `messages` unblock a required field added to `users` — the gate reported
+ * "accompanied by a migration" for a change that migration would never visit.
+ * The shard-mode diff cites this block to justify the studio not shipping a
+ * stranded-rows detector (see `shared/schema-snapshot.ts`), and that claim only
+ * holds if an unrelated migration cannot wave it through.
+ *
+ * Only a `"backfill"` change is coverable at all. A `"rehome"` change moves rows
+ * to another Durable Object or region and a `"code"` change breaks a call site;
+ * rewriting rows fixes neither, so a migration must not excuse them however well
+ * its table matches. Those are cleared by fixing the code or accepting the new
+ * shape (`--allow-schema-drift` / `--update-schema-baseline`).
  */
 declare const evaluateSchemaDrift: (options: {
   allowDrift?: boolean;
@@ -3371,6 +3440,8 @@ declare const evaluateSchemaDrift: (options: {
   /** The command printing the remediation, so it names only flags that command accepts. */
   command?: string;
   current: SchemaSnapshot;
+  /** This run's declared migrations, so a new one is matched to the table it iterates. */
+  migrations: ReadonlyArray<Pick<MigrationIR, "id" | "table">>;
 }) => SchemaDriftDecision;
 /**
  * Convert a {@link SchemaIR} into a synthetic runtime {@link Schema} carrying just
@@ -3687,4 +3758,4 @@ declare const secretKindOf: (value: string) => string | undefined;
 /** A redacted preview of a secret value — first 4 chars plus its length, never the full value. */
 declare const redact: (value: string) => string;
 declare const VERSION = "0.0.0";
-export { AGENTS_FILENAME, type AgentIR, type AuthApiCallIR, CONTAINERS_FILENAME, CodegenDiagnosticError, type CodegenOptions, type CodegenResult, type ContainerIR, type CronJobIR, DEFAULT_TARGET, type DriftChange, type DriftScope, type EmitAppOptions, FLAGS_FILENAME, type FieldSnapshot, type FlagsIR, type FunctionIR, GENERATED_HEADER, type HttpRouteIR, type IndexIR, type IndexSnapshot, type InsertWriteIR, LUNORA_ERROR_CODES, type LintSchemaOptions, MUTATORS_FILENAME, type MaskProcedureIR, type MigrationIR, type MutatorIR, NOTIFY_FILENAME, OPENRPC_VERSION, type OpenApiEmitInput, type OpenRpcDocument, type OpenRpcEmitInput, type OpenRpcMethod, type PlatformDiagnostic, type ProjectIR, QUEUES_FILENAME, type QueryReadIR, type QueueIR, type R2sqlCallIR, type RelationSnapshot, type RlsMetadataIR, type RlsPolicyIR, type RlsProcedureIR, type RlsRoleIR, type RuntimeVerb, SCHEMA_SNAPSHOT_FILENAME, SCHEMA_SNAPSHOT_VERSION, SDK_LANGUAGES, SDK_TARGETS, SHAPES_FILENAME, type SandboxUsage, type SchemaDrift, type SchemaDriftDecision, type SchemaIR, type SchemaSnapshot, SchemaSnapshotParseError, type SdkFiles, type SdkMethod, type SdkNamespace, type SdkRenderInput, type SdkResult, type SdkTarget, type ShapeIR, type StorageRuleIR, type StorageRulesMetadataIR, type TableIR, type TableSnapshot, VERSION, type ValidatorIR, type VectorIndexIR, WORKFLOWS_FILENAME, type WorkflowIR, type WranglerVariableIR, buildOpenApiDocument, buildOpenRpcDocument, buildSchemaSnapshot, createCodegenProject, describeErrorLevelFindings, diagnosticAt, diffSchemaSnapshots, discoverAgents, discoverAuthApiCalls, discoverContainers, discoverCrons, discoverFlags, discoverFunctions, discoverHttpRoutes, discoverInserts, discoverMaskProcedures, discoverMigrations, discoverMutators, discoverNondeterministicCalls, discoverNotifyCalls, discoverNotifyConfig, discoverQueries, discoverQueues, discoverR2sqlCalls, discoverRlsMetadata, discoverRlsProcedures, discoverSandboxUsage, discoverSchema, discoverShapes, discoverStorageRulesMetadata, discoverWorkflows, emitAgents, emitApi, emitApp, emitCollections, emitContainers, emitCrons, emitDataModel, emitDrizzleSchema, emitFunctions, emitOpenApi, emitOpenApiModule, emitOpenRpc, emitOpenRpcModule, emitServer, emitShard, emitVectors, emitWorkflows, emitWranglerCronTriggers, errorAdvisoryNames, errorPlatformDiagnosticNames, evaluateSchemaDrift, findTsconfig, formatAdvisories, generateSdk, isTypedSchema, lintSchema, parseSchemaSnapshot, platformMatrixIds, readPackageDependencies, readProjectTarget, redact, refreshCodegenProject, resolveCodegenTarget, runCodegen, schemaFromIr, secretKindOf, serializeSchemaSnapshot, toAdvisorContext, validatorIrToJsonSchema };
+export { AGENTS_FILENAME, type AgentIR, type AuthApiCallIR, CONTAINERS_FILENAME, CodegenDiagnosticError, type CodegenOptions, type CodegenResult, type ContainerIR, type ContextPropertyCallIR, type CronJobIR, DEFAULT_TARGET, type DriftChange, type DriftRemediation, type DriftScope, type EmitAppOptions, FLAGS_FILENAME, type FieldSnapshot, type FlagsIR, type FunctionIR, GENERATED_HEADER, type HttpRouteIR, type IndexIR, type IndexSnapshot, type InsertWriteIR, LUNORA_ERROR_CODES, type LintSchemaOptions, MUTATORS_FILENAME, type MaskProcedureIR, type MigrationIR, type MutatorIR, NOTIFY_FILENAME, OPENRPC_VERSION, type OpenApiEmitInput, type OpenRpcDocument, type OpenRpcEmitInput, type OpenRpcMethod, type PlatformDiagnostic, type ProjectIR, QUEUES_FILENAME, type QueryReadIR, type QueueIR, type RelationSnapshot, type RlsMetadataIR, type RlsPolicyIR, type RlsProcedureIR, type RlsRoleIR, type RuntimeVerb, SCHEMA_SNAPSHOT_FILENAME, SCHEMA_SNAPSHOT_VERSION, SDK_LANGUAGES, SDK_TARGETS, SHAPES_FILENAME, type SandboxUsage, type SchemaDrift, type SchemaDriftDecision, type SchemaIR, type SchemaSnapshot, SchemaSnapshotParseError, type SdkFiles, type SdkMethod, type SdkNamespace, type SdkRenderInput, type SdkResult, type SdkTarget, type ShapeIR, type StorageRuleIR, type StorageRulesMetadataIR, type TableIR, type TableSnapshot, VERSION, type ValidatorIR, type VectorIndexIR, WORKFLOWS_FILENAME, type WorkflowIR, type WranglerVariableIR, buildOpenApiDocument, buildOpenRpcDocument, buildSchemaSnapshot, createCodegenProject, describeErrorLevelFindings, diagnosticAt, diffSchemaSnapshots, discoverAgents, discoverAuthApiCalls, discoverContainers, discoverCrons, discoverFlags, discoverFunctions, discoverHttpRoutes, discoverHyperdriveCalls, discoverInserts, discoverMaskProcedures, discoverMigrations, discoverMutators, discoverNondeterministicCalls, discoverNotifyCalls, discoverNotifyConfig, discoverQueries, discoverQueues, discoverR2sqlCalls, discoverRlsMetadata, discoverRlsProcedures, discoverSandboxUsage, discoverSchema, discoverShapes, discoverStorageRulesMetadata, discoverWorkflows, emitAgents, emitApi, emitApp, emitCollections, emitContainers, emitCrons, emitDataModel, emitDrizzleSchema, emitFunctions, emitOpenApi, emitOpenApiModule, emitOpenRpc, emitOpenRpcModule, emitServer, emitShard, emitVectors, emitWorkflows, emitWranglerCronTriggers, errorAdvisoryNames, errorPlatformDiagnosticNames, evaluateSchemaDrift, findTsconfig, formatAdvisories, generateSdk, isTypedSchema, lintSchema, parseSchemaSnapshot, platformMatrixIds, readPackageDependencies, readProjectTarget, redact, refreshCodegenProject, resolveCodegenTarget, runCodegen, schemaFromIr, secretKindOf, serializeSchemaSnapshot, toAdvisorContext, validatorIrToJsonSchema };

package/dist/index.mjs

@@ -1 +1 @@
-import{SCHEMA_SNAPSHOT_VERSION as t,diffSchemaSnapshots as s,serializeSchemaSnapshot as a}from"./packem_shared/SCHEMA_SNAPSHOT_VERSION-DLXXalg2.mjs";import{formatAdvisories as m,lintSchema as d,toAdvisorContext as f}from"./packem_shared/formatAdvisories-CkEu1eye.mjs";import{describeErrorLevelFindings as c,errorAdvisoryNames as n,errorPlatformDiagnosticNames as S}from"./packem_shared/describeErrorLevelFindings-D23VSkFP.mjs";import{CodegenDiagnosticError as E,diagnosticAt as x}from"./packem_shared/CodegenDiagnosticError-BUXlG3P-.mjs";import{AGENTS_FILENAME as u,discoverAgents as v}from"./packem_shared/AGENTS_FILENAME-D1qA0h5m.mjs";import{default as g}from"./packem_shared/discoverAuthApiCalls-C35kkayg.mjs";import{CONTAINERS_FILENAME as R,discoverContainers as M}from"./packem_shared/CONTAINERS_FILENAME-oKaARMoA.mjs";import{default as C}from"./packem_shared/discoverCrons-wXBfQcfn.mjs";import{FLAGS_FILENAME as T,discoverFlags as I}from"./packem_shared/FLAGS_FILENAME-BasxlnVS.mjs";import{default as F}from"./packem_shared/discoverFunctions-DglkHRlt.mjs";import{default as P}from"./packem_shared/discoverHttpRoutes-B60GWv_I.mjs";import{default as G}from"./packem_shared/discoverInserts-C5l2INmE.mjs";import{d as b}from"./packem_shared/index-CCDlo9L7.mjs";import{default as y}from"./packem_shared/discoverMigrations-CWH7T6qz.mjs";import{MUTATORS_FILENAME as j,discoverMutators as K}from"./packem_shared/MUTATORS_FILENAME-BKSzaCkq.mjs";import{default as z}from"./packem_shared/discoverNondeterministicCalls-JsO91i57.mjs";import{NOTIFY_FILENAME as w,discoverNotifyCalls as q,discoverNotifyConfig as B}from"./packem_shared/NOTIFY_FILENAME-B-eIjru_.mjs";import{default as Y}from"./packem_shared/readPackageDependencies-C6h6FZuP.mjs";import{d as Z}from"./packem_shared/queries-B_xEHIeL.mjs";import{QUEUES_FILENAME as ee,discoverQueues as re}from"./packem_shared/QUEUES_FILENAME-D229WtRm.mjs";import{default as te}from"./packem_shared/discoverR2sqlCalls-BbfOpwE4.mjs";import{default as ae}from"./packem_shared/discoverRlsProcedures-CRshfYZE.mjs";import{default as me}from"./packem_shared/discoverRlsMetadata-DGUGYgWs.mjs";import{discoverSandboxUsage as fe}from"./packem_shared/discoverSandboxUsage-DdewAOuj.mjs";import{default as ce}from"./packem_shared/discoverSchema-CubSTjtY.mjs";import{SHAPES_FILENAME as Se,discoverShapes as le}from"./packem_shared/SHAPES_FILENAME-D3N7xcEk.mjs";import{default as xe}from"./packem_shared/discoverStorageRulesMetadata-gyO60A5S.mjs";import{WORKFLOWS_FILENAME as ue,discoverWorkflows as ve}from"./packem_shared/WORKFLOWS_FILENAME-DRaiCNa6.mjs";import{G as ge,e as Oe,a as Re,b as Me,c as he,d as Ce,f as _e,g as Te,h as Ie,i as Le,j as Fe,k as De,l as Pe,m as Ue}from"./packem_shared/emit-s6mHBmXu.mjs";import{emitApp as He}from"./packem_shared/emitApp-D1qxNeh1.mjs";import{buildOpenApiDocument as ke,emitOpenApi as ye,emitOpenApiModule as We}from"./packem_shared/buildOpenApiDocument-DLEWgA5Y.mjs";import{OPENRPC_VERSION as Ke,buildOpenRpcDocument as Ve,emitOpenRpc as ze,emitOpenRpcModule as Qe}from"./packem_shared/OPENRPC_VERSION-B9ZC0SrC.mjs";import{DEFAULT_TARGET as qe,platformMatrixIds as Be,readProjectTarget as Je,resolveCodegenTarget as Ye}from"./packem_shared/DEFAULT_TARGET-CrhWLUK7.mjs";import{SCHEMA_SNAPSHOT_FILENAME as Ze,createCodegenProject as $e,findTsconfig as er,refreshCodegenProject as rr,runCodegen as or}from"./packem_shared/SCHEMA_SNAPSHOT_FILENAME-lbo63hy2.mjs";import{SchemaSnapshotParseError as sr,buildSchemaSnapshot as ar,evaluateSchemaDrift as ir,parseSchemaSnapshot as mr}from"./packem_shared/SchemaSnapshotParseError-CvPTjDrT.mjs";import{schemaFromIr as fr}from"./packem_shared/schemaFromIr-BWFnvCVg.mjs";import{LUNORA_ERROR_CODES as cr,validatorIrToJsonSchema as nr}from"./packem_shared/LUNORA_ERROR_CODES-BYg8Lpgb.mjs";import{SDK_LANGUAGES as lr,SDK_TARGETS as Er,generateSdk as xr}from"./packem_shared/SDK_LANGUAGES-CFyux-74.mjs";import{redact as ur,secretKindOf as vr}from"./packem_shared/redact-Cy14LEnc.mjs";import{MESSAGE_SOLUTIONS as gr,findSolutionByMessage as Or}from"@lunora/errors";import{isTypedSchema as Mr}from"./packem_shared/isTypedSchema-B_qlBbE-.mjs";const e="0.0.0";export{u as AGENTS_FILENAME,R as CONTAINERS_FILENAME,E as CodegenDiagnosticError,qe as DEFAULT_TARGET,T as FLAGS_FILENAME,ge as GENERATED_HEADER,cr as LUNORA_ERROR_CODES,gr as LUNORA_SOLUTION_RULES,j as MUTATORS_FILENAME,w as NOTIFY_FILENAME,Ke as OPENRPC_VERSION,ee as QUEUES_FILENAME,Ze as SCHEMA_SNAPSHOT_FILENAME,t as SCHEMA_SNAPSHOT_VERSION,lr as SDK_LANGUAGES,Er as SDK_TARGETS,Se as SHAPES_FILENAME,sr as SchemaSnapshotParseError,e as VERSION,ue as WORKFLOWS_FILENAME,ke as buildOpenApiDocument,Ve as buildOpenRpcDocument,ar as buildSchemaSnapshot,$e as createCodegenProject,c as describeErrorLevelFindings,x as diagnosticAt,s as diffSchemaSnapshots,v as discoverAgents,g as discoverAuthApiCalls,M as discoverContainers,C as discoverCrons,I as discoverFlags,F as discoverFunctions,P as discoverHttpRoutes,G as discoverInserts,b as discoverMaskProcedures,y as discoverMigrations,K as discoverMutators,z as discoverNondeterministicCalls,q as discoverNotifyCalls,B as discoverNotifyConfig,Z as discoverQueries,re as discoverQueues,te as discoverR2sqlCalls,me as discoverRlsMetadata,ae as discoverRlsProcedures,fe as discoverSandboxUsage,ce as discoverSchema,le as discoverShapes,xe as discoverStorageRulesMetadata,ve as discoverWorkflows,Oe as emitAgents,Re as emitApi,He as emitApp,Me as emitCollections,he as emitContainers,Ce as emitCrons,_e as emitDataModel,Te as emitDrizzleSchema,Ie as emitFunctions,ye as emitOpenApi,We as emitOpenApiModule,ze as emitOpenRpc,Qe as emitOpenRpcModule,Le as emitServer,Fe as emitShard,De as emitVectors,Pe as emitWorkflows,Ue as emitWranglerCronTriggers,n as errorAdvisoryNames,S as errorPlatformDiagnosticNames,ir as evaluateSchemaDrift,Or as findLunoraSolution,er as findTsconfig,m as formatAdvisories,xr as generateSdk,Mr as isTypedSchema,d as lintSchema,mr as parseSchemaSnapshot,Be as platformMatrixIds,Y as readPackageDependencies,Je as readProjectTarget,ur as redact,rr as refreshCodegenProject,Ye as resolveCodegenTarget,or as runCodegen,fr as schemaFromIr,vr as secretKindOf,a as serializeSchemaSnapshot,f as toAdvisorContext,nr as validatorIrToJsonSchema};
+import{SCHEMA_SNAPSHOT_VERSION as t,diffSchemaSnapshots as s,serializeSchemaSnapshot as a}from"./packem_shared/SCHEMA_SNAPSHOT_VERSION-CTWRkAF5.mjs";import{formatAdvisories as m,lintSchema as d,toAdvisorContext as f}from"./packem_shared/formatAdvisories-CkEu1eye.mjs";import{describeErrorLevelFindings as c,errorAdvisoryNames as n,errorPlatformDiagnosticNames as l}from"./packem_shared/describeErrorLevelFindings-D23VSkFP.mjs";import{CodegenDiagnosticError as x,diagnosticAt as E}from"./packem_shared/CodegenDiagnosticError-BUXlG3P-.mjs";import{AGENTS_FILENAME as u,discoverAgents as v}from"./packem_shared/AGENTS_FILENAME-D1qA0h5m.mjs";import{default as g}from"./packem_shared/discoverAuthApiCalls-C35kkayg.mjs";import{CONTAINERS_FILENAME as R,discoverContainers as C}from"./packem_shared/CONTAINERS_FILENAME-oKaARMoA.mjs";import{default as h}from"./packem_shared/discoverCrons-wXBfQcfn.mjs";import{FLAGS_FILENAME as T,discoverFlags as I}from"./packem_shared/FLAGS_FILENAME-BasxlnVS.mjs";import{default as F}from"./packem_shared/discoverFunctions-DglkHRlt.mjs";import{default as P}from"./packem_shared/discoverHttpRoutes-B60GWv_I.mjs";import{default as G}from"./packem_shared/discoverHyperdriveCalls-De_QiFIl.mjs";import{default as b}from"./packem_shared/discoverInserts-C5l2INmE.mjs";import{d as y}from"./packem_shared/index-CCDlo9L7.mjs";import{default as j}from"./packem_shared/discoverMigrations-CWH7T6qz.mjs";import{MUTATORS_FILENAME as V,discoverMutators as z}from"./packem_shared/MUTATORS_FILENAME-BKSzaCkq.mjs";import{default as w}from"./packem_shared/discoverNondeterministicCalls-JsO91i57.mjs";import{NOTIFY_FILENAME as B,discoverNotifyCalls as J,discoverNotifyConfig as Y}from"./packem_shared/NOTIFY_FILENAME-B-eIjru_.mjs";import{default as Z}from"./packem_shared/readPackageDependencies-C6h6FZuP.mjs";import{d as ee}from"./packem_shared/queries-B_xEHIeL.mjs";import{QUEUES_FILENAME as oe,discoverQueues as te}from"./packem_shared/QUEUES_FILENAME-D229WtRm.mjs";import{default as ae}from"./packem_shared/discoverR2sqlCalls-BdkZw-D2.mjs";import{default as me}from"./packem_shared/discoverRlsProcedures-CRshfYZE.mjs";import{default as fe}from"./packem_shared/discoverRlsMetadata-DGUGYgWs.mjs";import{discoverSandboxUsage as ce}from"./packem_shared/discoverSandboxUsage-DdewAOuj.mjs";import{default as le}from"./packem_shared/discoverSchema-CubSTjtY.mjs";import{SHAPES_FILENAME as xe,discoverShapes as Ee}from"./packem_shared/SHAPES_FILENAME-D3N7xcEk.mjs";import{default as ue}from"./packem_shared/discoverStorageRulesMetadata-gyO60A5S.mjs";import{WORKFLOWS_FILENAME as Ne,discoverWorkflows as ge}from"./packem_shared/WORKFLOWS_FILENAME-DRaiCNa6.mjs";import{G as Re,e as Ce,a as Me,b as he,c as _e,d as Te,f as Ie,g as Le,h as Fe,i as De,j as Pe,k as Ue,l as Ge,m as He}from"./packem_shared/emit-Bo3kao_A.mjs";import{emitApp as ke}from"./packem_shared/emitApp-CPXPVz9b.mjs";import{buildOpenApiDocument as We,emitOpenApi as je,emitOpenApiModule as Ke}from"./packem_shared/buildOpenApiDocument-CU1yw_t3.mjs";import{OPENRPC_VERSION as ze,buildOpenRpcDocument as Qe,emitOpenRpc as we,emitOpenRpcModule as qe}from"./packem_shared/OPENRPC_VERSION-CJwwFY8T.mjs";import{DEFAULT_TARGET as Je,platformMatrixIds as Ye,readProjectTarget as Xe,resolveCodegenTarget as Ze}from"./packem_shared/DEFAULT_TARGET-CwB3hjFH.mjs";import{SCHEMA_SNAPSHOT_FILENAME as er,createCodegenProject as rr,findTsconfig as or,refreshCodegenProject as tr,runCodegen as sr}from"./packem_shared/SCHEMA_SNAPSHOT_FILENAME-BtWckBME.mjs";import{SchemaSnapshotParseError as ir,buildSchemaSnapshot as mr,evaluateSchemaDrift as dr,parseSchemaSnapshot as fr}from"./packem_shared/SchemaSnapshotParseError-qXCOA7dD.mjs";import{schemaFromIr as cr}from"./packem_shared/schemaFromIr-BWFnvCVg.mjs";import{LUNORA_ERROR_CODES as lr,validatorIrToJsonSchema as Sr}from"./packem_shared/LUNORA_ERROR_CODES-BYg8Lpgb.mjs";import{SDK_LANGUAGES as Er,SDK_TARGETS as Ar,generateSdk as ur}from"./packem_shared/SDK_LANGUAGES-CFyux-74.mjs";import{redact as Nr,secretKindOf as gr}from"./packem_shared/redact-Cy14LEnc.mjs";import{MESSAGE_SOLUTIONS as Rr,findSolutionByMessage as Cr}from"@lunora/errors";import{isTypedSchema as hr}from"./packem_shared/isTypedSchema-B_qlBbE-.mjs";const e="0.0.0";export{u as AGENTS_FILENAME,R as CONTAINERS_FILENAME,x as CodegenDiagnosticError,Je as DEFAULT_TARGET,T as FLAGS_FILENAME,Re as GENERATED_HEADER,lr as LUNORA_ERROR_CODES,Rr as LUNORA_SOLUTION_RULES,V as MUTATORS_FILENAME,B as NOTIFY_FILENAME,ze as OPENRPC_VERSION,oe as QUEUES_FILENAME,er as SCHEMA_SNAPSHOT_FILENAME,t as SCHEMA_SNAPSHOT_VERSION,Er as SDK_LANGUAGES,Ar as SDK_TARGETS,xe as SHAPES_FILENAME,ir as SchemaSnapshotParseError,e as VERSION,Ne as WORKFLOWS_FILENAME,We as buildOpenApiDocument,Qe as buildOpenRpcDocument,mr as buildSchemaSnapshot,rr as createCodegenProject,c as describeErrorLevelFindings,E as diagnosticAt,s as diffSchemaSnapshots,v as discoverAgents,g as discoverAuthApiCalls,C as discoverContainers,h as discoverCrons,I as discoverFlags,F as discoverFunctions,P as discoverHttpRoutes,G as discoverHyperdriveCalls,b as discoverInserts,y as discoverMaskProcedures,j as discoverMigrations,z as discoverMutators,w as discoverNondeterministicCalls,J as discoverNotifyCalls,Y as discoverNotifyConfig,ee as discoverQueries,te as discoverQueues,ae as discoverR2sqlCalls,fe as discoverRlsMetadata,me as discoverRlsProcedures,ce as discoverSandboxUsage,le as discoverSchema,Ee as discoverShapes,ue as discoverStorageRulesMetadata,ge as discoverWorkflows,Ce as emitAgents,Me as emitApi,ke as emitApp,he as emitCollections,_e as emitContainers,Te as emitCrons,Ie as emitDataModel,Le as emitDrizzleSchema,Fe as emitFunctions,je as emitOpenApi,Ke as emitOpenApiModule,we as emitOpenRpc,qe as emitOpenRpcModule,De as emitServer,Pe as emitShard,Ue as emitVectors,Ge as emitWorkflows,He as emitWranglerCronTriggers,n as errorAdvisoryNames,l as errorPlatformDiagnosticNames,dr as evaluateSchemaDrift,Cr as findLunoraSolution,or as findTsconfig,m as formatAdvisories,ur as generateSdk,hr as isTypedSchema,d as lintSchema,fr as parseSchemaSnapshot,Ye as platformMatrixIds,Z as readPackageDependencies,Xe as readProjectTarget,Nr as redact,tr as refreshCodegenProject,Ze as resolveCodegenTarget,sr as runCodegen,cr as schemaFromIr,gr as secretKindOf,a as serializeSchemaSnapshot,f as toAdvisorContext,Sr as validatorIrToJsonSchema};

package/dist/packem_shared/DEFAULT_TARGET-CwB3hjFH.mjs

@@ -0,0 +1 @@
+import{existsSync as d,readFileSync as p}from"node:fs";import{join as m}from"node:path";import{NODE_CAPABILITIES as f,CLOUDFLARE_CAPABILITIES as h}from"@lunora/platform";import{parse as g}from"jsonc-parser";const v="cloudflare",y="lunora.json",b=a=>{const e=m(a,y);if(!d(e))return;let r;try{r=p(e,"utf8")}catch{return}const s=[],n=g(r,s,{allowTrailingComma:!0});if(s.length>0||n===null||typeof n!="object")return;const{target:o}=n;return typeof o=="string"&&o.length>0?o:void 0},E=(a,e)=>e??b(a)??v,i={cloudflare:h,node:f},L=()=>Object.keys(i).toSorted((a,e)=>a.localeCompare(e)),_={access:null,ai:"ai",analytics:"analytics",browser:"browser",container:"containers",flags:null,hyperdrive:"hyperdrive",images:"images",kv:"keyValueStore",mail:"mail",notify:null,payments:null,pipelines:"pipelines",r2sql:null,scheduler:"scheduler",storage:"objectStorage",vectors:"vectorStore",workflows:"workflows",x402:null},T=["crossShardFanout","durableStreams","globalTables","queues","secrets"],c={crossShardFanout:"cross-shard fan-out queries (a `.shardBy(...)` schema)",durableStreams:"durable streams (`.stream(handler, { durable: true })`)",globalTables:"global tables (`.global()`)",queues:"queues (`defineQueue`)",secrets:"the secrets store (`ctx.secrets`)"},$=(a,e,r,s={})=>{const n={...a},o=[];for(const[t,l]of Object.entries(_)){if(l===null||!a[t])continue;const u=e.features[l]?.level;u==="unsupported"?(n[t]=!1,o.push({feature:t,level:"error",message:`${e.name} does not support "${t}" (ctx.${t}). Its surface was omitted from the generated types.`,name:"platform_unsupported_feature",remediation:`Remove the ctx.${t} usage, or deploy to a target whose capability matrix marks "${l}" as native or emulated.`,target:r})):u===void 0&&(n[t]=!1,o.push({feature:t,level:"error",message:`${e.name}'s capability matrix does not declare a support level for "${t}" (ctx.${t}). Treated as unsupported and its surface was omitted from the generated types.`,name:"platform_undeclared_feature",remediation:`Rate "${l}" in the ${e.name} capability matrix as "native", "emulated", or "unsupported" — an undeclared feature fails closed rather than shipping a surface the host may not provide.`,target:r}))}for(const t of T){if(s[t]!==!0)continue;const l=e.features[t]?.level;l==="unsupported"?o.push({level:"error",message:`${e.name} does not support ${c[t]}, which this app declares.`,name:"platform_unsupported_feature",remediation:`Remove the declaration, or deploy to a target whose capability matrix marks "${t}" as native or emulated.`,target:r}):l===void 0&&o.push({level:"error",message:`${e.name}'s capability matrix does not declare a support level for ${c[t]}, which this app declares. Treated as unsupported.`,name:"platform_undeclared_feature",remediation:`Rate "${t}" in the ${e.name} capability matrix as "native", "emulated", or "unsupported" — an undeclared feature fails closed rather than letting the app deploy onto a primitive the host may not provide.`,target:r})}return{diagnostics:o,usage:n}},k=(a,e,r={})=>{const s=i[e];return s===void 0?{diagnostics:[{level:"error",message:`Unknown deploy target "${e}" — no capability matrix is registered for it. Codegen emitted the full Cloudflare surface un-gated.`,name:"platform_unknown_target",remediation:`Use a registered target (${Object.keys(i).join(", ")}) or install the target's @lunora/platform-${e} package.`,target:e}],usage:{...a}}:$(a,s,e,r)};export{_ as CAPABILITY_TO_FEATURE,v as DEFAULT_TARGET,y as PROJECT_CONFIG_FILE,$ as gateAgainstMatrix,k as gatePlatformFeatures,L as platformMatrixIds,b as readProjectTarget,E as resolveCodegenTarget};

package/dist/packem_shared/{GENERATED_HEADER-BgmuZY9e.mjs → GENERATED_HEADER-D4WIATth.mjs}

@@ -1 +1 @@
-import"./SCHEMA_SNAPSHOT_VERSION-DLXXalg2.mjs";import{G as t,U as m,n as r,e as o,a as n,b as l,c as A,d as E,f as S,g,h as C,o as c,p as d,i as p,j as u,k as D,l as f,m as h}from"./emit-s6mHBmXu.mjs";import"./paths-C-9fwEgQ.mjs";export{t as GENERATED_HEADER,m as UMBRELLA_BASE_PACKAGES,r as buildStorageColumns,o as emitAgents,n as emitApi,l as emitCollections,A as emitContainers,E as emitCrons,S as emitDataModel,g as emitDrizzleSchema,C as emitFunctions,c as emitQueues,d as emitSeed,p as emitServer,u as emitShard,D as emitVectors,f as emitWorkflows,h as emitWranglerCronTriggers};
+import"./SCHEMA_SNAPSHOT_VERSION-CTWRkAF5.mjs";import{G as t,U as m,n as r,e as o,a as n,b as l,c as A,d as E,f as S,g,h as C,o as c,p as d,i as p,j as u,k as D,l as f,m as h}from"./emit-Bo3kao_A.mjs";import"./paths-C-9fwEgQ.mjs";export{t as GENERATED_HEADER,m as UMBRELLA_BASE_PACKAGES,r as buildStorageColumns,o as emitAgents,n as emitApi,l as emitCollections,A as emitContainers,E as emitCrons,S as emitDataModel,g as emitDrizzleSchema,C as emitFunctions,c as emitQueues,d as emitSeed,p as emitServer,u as emitShard,D as emitVectors,f as emitWorkflows,h as emitWranglerCronTriggers};