@lunora/codegen 1.0.0-alpha.144 → 1.0.0-alpha.146

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (54) hide show
  1. package/README.md +1 -1
  2. package/dist/index.d.mts +75 -12
  3. package/dist/index.d.ts +75 -12
  4. package/dist/index.mjs +1 -1
  5. package/dist/packem_shared/{AGENTS_FILENAME-D1qA0h5m.mjs → AGENTS_FILENAME-B1Abt3Gl.mjs} +1 -1
  6. package/dist/packem_shared/{CONTAINERS_FILENAME-oKaARMoA.mjs → CONTAINERS_FILENAME-CtcysaKS.mjs} +1 -1
  7. package/dist/packem_shared/DEFAULT_TARGET-BvzxeWRZ.mjs +1 -0
  8. package/dist/packem_shared/FLAGS_FILENAME-B3VZ6vTw.mjs +1 -0
  9. package/dist/packem_shared/{GENERATED_HEADER-F2VhjmJG.mjs → GENERATED_HEADER-Dfc3qlLQ.mjs} +1 -1
  10. package/dist/packem_shared/{NOTIFY_FILENAME-B-eIjru_.mjs → NOTIFY_FILENAME-CKO5gtGe.mjs} +1 -1
  11. package/dist/packem_shared/{OPENRPC_VERSION-C30LtXay.mjs → OPENRPC_VERSION-CdKqq_QT.mjs} +1 -1
  12. package/dist/packem_shared/{QUEUES_FILENAME-D229WtRm.mjs → QUEUES_FILENAME-C-pzLGy4.mjs} +1 -1
  13. package/dist/packem_shared/SCHEMA_SNAPSHOT_FILENAME-CeOctEWC.mjs +9 -0
  14. package/dist/packem_shared/SCHEMA_SNAPSHOT_VERSION-CTWRkAF5.mjs +2 -0
  15. package/dist/packem_shared/SchemaSnapshotParseError-qXCOA7dD.mjs +18 -0
  16. package/dist/packem_shared/{WORKFLOWS_FILENAME-DRaiCNa6.mjs → WORKFLOWS_FILENAME-BfvqsG9Z.mjs} +1 -1
  17. package/dist/packem_shared/ast-BYoSZlae.mjs +1 -0
  18. package/dist/packem_shared/{buildOpenApiDocument-CmLfuJpW.mjs → buildOpenApiDocument-D40ZeYsu.mjs} +1 -1
  19. package/dist/packem_shared/chain-Dygm2apY.mjs +1 -0
  20. package/dist/packem_shared/{classify-procedure-call-AKeIK05y.mjs → classify-procedure-call-Ib2EMtFH.mjs} +1 -1
  21. package/dist/packem_shared/{context-property-calls-DXH-4MTZ.mjs → context-property-calls-Br0sVv8E.mjs} +1 -1
  22. package/dist/packem_shared/{discoverAuthApiCalls-C35kkayg.mjs → discoverAuthApiCalls-DoNQSgso.mjs} +1 -1
  23. package/dist/packem_shared/{discoverCrons-wXBfQcfn.mjs → discoverCrons-DCxl4hty.mjs} +1 -1
  24. package/dist/packem_shared/{discoverFunctions-DglkHRlt.mjs → discoverFunctions-C29Tvxas.mjs} +1 -1
  25. package/dist/packem_shared/{discoverHttpRoutes-B60GWv_I.mjs → discoverHttpRoutes-CFIXlUy4.mjs} +1 -1
  26. package/dist/packem_shared/discoverHyperdriveCalls-DTq4PKT5.mjs +1 -0
  27. package/dist/packem_shared/{discoverInserts-C5l2INmE.mjs → discoverInserts-qU5F4W4g.mjs} +1 -1
  28. package/dist/packem_shared/discoverMaskProcedures-BZsC5dHd.mjs +1 -0
  29. package/dist/packem_shared/{discoverMigrations-CWH7T6qz.mjs → discoverMigrations-BFkJQ8Sy.mjs} +1 -1
  30. package/dist/packem_shared/{discoverNondeterministicCalls-JsO91i57.mjs → discoverNondeterministicCalls-B-NNzzPW.mjs} +1 -1
  31. package/dist/packem_shared/discoverQueries-B4emAFn5.mjs +1 -0
  32. package/dist/packem_shared/discoverR2sqlCalls-C2GtrFnl.mjs +1 -0
  33. package/dist/packem_shared/{discoverRlsMetadata-DGUGYgWs.mjs → discoverRlsMetadata-BKcUnSNr.mjs} +1 -1
  34. package/dist/packem_shared/{discoverRlsProcedures-CRshfYZE.mjs → discoverRlsProcedures-fAhxiIyD.mjs} +1 -1
  35. package/dist/packem_shared/discoverSandboxUsage-CJhnKA0_.mjs +1 -0
  36. package/dist/packem_shared/{discoverStorageRulesMetadata-gyO60A5S.mjs → discoverStorageRulesMetadata-C7XmORWp.mjs} +1 -1
  37. package/dist/packem_shared/{emit-EJw8shd_.mjs → emit-BcAkLUfn.mjs} +179 -199
  38. package/dist/packem_shared/{emitApp-DftAzAA2.mjs → emitApp-DoR55vKV.mjs} +1 -1
  39. package/dist/packem_shared/{exported-procedure-chains-MlZRKqSD.mjs → exported-procedure-chains-M40rbSYM.mjs} +1 -1
  40. package/dist/packem_shared/{index-CCDlo9L7.mjs → index-xGhyK9J_.mjs} +1 -1
  41. package/dist/packem_shared/{queries-B_xEHIeL.mjs → queries-Ddvo5dCs.mjs} +1 -1
  42. package/package.json +10 -10
  43. package/dist/packem_shared/DEFAULT_TARGET-CwB3hjFH.mjs +0 -1
  44. package/dist/packem_shared/FLAGS_FILENAME-BasxlnVS.mjs +0 -1
  45. package/dist/packem_shared/SCHEMA_SNAPSHOT_FILENAME-D7qF6qrd.mjs +0 -9
  46. package/dist/packem_shared/SCHEMA_SNAPSHOT_VERSION-DLXXalg2.mjs +0 -2
  47. package/dist/packem_shared/SchemaSnapshotParseError-CvPTjDrT.mjs +0 -16
  48. package/dist/packem_shared/ast-CjWtsS6S.mjs +0 -1
  49. package/dist/packem_shared/chain-CtC3-wwZ.mjs +0 -1
  50. package/dist/packem_shared/discoverHyperdriveCalls-De_QiFIl.mjs +0 -1
  51. package/dist/packem_shared/discoverMaskProcedures-Df4JQp_2.mjs +0 -1
  52. package/dist/packem_shared/discoverQueries-iypfwfdZ.mjs +0 -1
  53. package/dist/packem_shared/discoverR2sqlCalls-BdkZw-D2.mjs +0 -1
  54. package/dist/packem_shared/discoverSandboxUsage-DdewAOuj.mjs +0 -1
@@ -1,4 +1,4 @@
1
- import{A as S,G as D}from"./emit-EJw8shd_.mjs";const E=e=>`has${e.charAt(0).toUpperCase()}${e.slice(1)}`,v=S.map(({appMethod:e,key:t})=>[E(t),e.method,e.configKey,e.doc]),m=e=>v.some(([t])=>e[t]),A=e=>e?['import * as lunoraIdentityContract from "../identity.js";']:[],x=(e,t)=>e?['import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";',`import { createAccessResolver${t?", composeResolvers":""} } from "@lunora/cloudflare-access";`]:[],R=e=>e?['import { createKvIntrospectorFromEnv } from "@lunora/bindings/kv";']:[],C=e=>e?['import notifyConfig from "../notify.js";']:[],k=e=>(e.emailAgents?.length??0)>0,O=e=>k(e)?['import { dispatchAgentEmail } from "@lunora/agent/inbound";']:[],T=e=>k(e)?['import * as lunoraAgentDefinitions from "../agents.js";']:[],L=e=>{const{hasAccess:t,hasAuth:a,hasFramework:r,hasGlobal:n,hasHyperdriveGlobal:s,hasKvIntrospector:l,hasQueue:o,hasScheduler:d,hasStorage:h,hasWorkflow:u,useUmbrella:c,wantsOpenApi:p,wantsOpenRpc:b}=e,i=c?"lunorash/runtime":"@lunora/runtime",g=["ExecutionContextLike","HttpRouterLike","LunoraWorker","Route","ScheduledControllerLike","ShardNamespaceLike","WorkerOptions"];n&&g.push("GlobalIntrospector","AdminTableResolver"),r&&g.push("FrameworkHostHandler");const f=[...n||s?["createCrossShardRelationCapabilities"]:[],"createWorker","resolveLogArchiveFromEnv",...r?["withFrameworkWorker"]:[]].join(", ");return[...a?['import type { AuthNamespaceLike, LunoraAuth, LunoraAuthOptions } from "@lunora/auth";','import { createAuth, createAuthAdmin, createAuthAuditReader, createDoAuthWiring, d1Executor, ensureMigrated, handleAuthRequest, lunoraD1Adapter } from "@lunora/auth";']:[],...x(t,a),...n?['import type { D1CtxDbOptions, D1DatabaseLike, D1Exec } from "@lunora/d1";','import { applyCdcChanges, createD1CtxDb, exportGlobalRows, facetGlobalColumn, importGlobalRows, listGlobalTables, readD1CdcChanges, readGlobalTablePage, retryingExec } from "@lunora/d1";']:[],...s?['import type { HyperdriveEngine } from "@lunora/hyperdrive/global";','import { createHyperdriveGlobalCtxDb } from "@lunora/hyperdrive/global";','import type { SqlCtxDbOptions, SqlExec } from "@lunora/sql-store";']:[],...R(l),...d?['import type { DurableObjectNamespaceLike } from "@lunora/scheduler";','import { createScheduler } from "@lunora/scheduler";']:[],...h?['import type { R2BucketLike, R2S3Credentials, Storage } from "@lunora/storage";','import { createBucketStorage, createStorage } from "@lunora/storage";']:[],...u?['import { createWorkflowsRestClient } from "@lunora/workflow";']:[],...O(e),`import type { ${[...g].toSorted((w,y)=>w.localeCompare(y)).join(", ")} } from "${i}";`,`import { ${f} } from "${i}";`,"",...A(e.identity),...T(e),...n||s?['import schema from "../schema.js";']:[],...C(e.hasNotify),'import { LUNORA_CRONS } from "./crons.js";','import { LUNORA_FUNCTIONS } from "./functions.js";',...o?['import { createQueueCaptureSink, dispatchQueueBatch, shouldCaptureQueue } from "@lunora/queue";','import { LUNORA_QUEUE_REGISTRY } from "./queues.js";']:[],...p?['import { openApiSpec } from "./openapi.js";']:[],...b?['import { openRpcSpec } from "./openrpc.js";']:[],'import { createShardDO } from "./shard.js";']},I=e=>[...e.hasStorage?['/** `.storage(...)` declaration — one bucket (required) plus optional extra named buckets and signed-URL config. Backs `ctx.storage` AND the studio file browser. */\ninterface StorageDeclaration<Env> {\n /** The default R2 bucket binding (the bare `ctx.storage`). */\n bucket: Selector<Env, R2BucketLike>;\n /** Extra named buckets, reached via `ctx.storage.bucket("name")` and the studio\'s bucket picker. */\n buckets?: Record<string, Selector<Env, R2BucketLike>>;\n /** Public base URL signed/public object URLs resolve against. */\n publicBaseUrl?: Selector<Env, string>;\n /** R2 S3-API credentials (`{ accountId, accessKeyId, secretAccessKey, bucket, jurisdiction? }`) enabling `ctx.storage.getPresignedUrl` — native S3 presigned URLs that hit R2 directly, bypassing the worker. Omit to use only the worker-signed `getSignedUrl` path. */\n s3?: Selector<Env, R2S3Credentials>;\n /** HMAC secret for signed URLs. */\n signingSecret?: Selector<Env, string>;\n}']:[],...e.hasScheduler?["/** `.scheduler(...)` declaration — the `SchedulerDO` namespace plus the worker origin its callbacks dispatch back to. Backs `ctx.scheduler` AND the studio's scheduled-jobs view. */\ninterface SchedulerDeclaration<Env> {\n /** The `SchedulerDO` namespace binding (typically `env.SCHEDULER`). */\n namespace: Selector<Env, DurableObjectNamespaceLike & ShardNamespaceLike>;\n /** The worker origin the `SchedulerDO` dispatches HTTP job callbacks back to. */\n origin?: Selector<Env, string>;\n}"]:[],...e.hasGlobal?["/** `.global(...)` declaration — the D1 binding backing `.global()` tables. Backs cross-tenant `ctx.db` reads/writes AND the studio's global data browser. */\ninterface GlobalDeclaration<Env> {\n /** The D1 binding (typically `env.DB`). */\n d1: Selector<Env, D1DatabaseLike>;\n /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n origin?: Selector<Env, string>;\n}"]:[],...e.hasHyperdriveGlobal?['/** `.hyperdriveGlobal(...)` declaration — backs `.global({ backend: "hyperdrive" })` tables on a Postgres/MySQL database via Hyperdrive. Stays reactive: the writer is injected as `globalDb` and the broadcast hook drives live queries. */\ninterface HyperdriveGlobalDeclaration<Env> {\n /** The Hyperdrive engine — selects the Postgres or MySQL dialect. */\n engine: HyperdriveEngine;\n /** Build the `SqlExec` from `env` — e.g. `buildPgExec(fromPostgresJs(postgres(env.HYPERDRIVE.connectionString)))`. Cache the driver on the DO instance; rebuild lazily after hibernation. */\n exec: (env: Env) => SqlExec;\n /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n origin?: Selector<Env, string>;\n}']:[],...e.hasAuth?['/** `.auth(...)` declaration — better-auth options plus the storage the adapter reads. Give it `d1` (the default) or `namespace` (a Durable Object that hosts the auth tables), never both. The builder owns the lazy build + `ensureMigrated` dance and wires `authHandler` / `resolveIdentity` / `authAdmin`. */\ninterface AuthDeclaration<Env> {\n /** The D1 binding the auth SQL adapter is wired over (via `lunoraD1Adapter`). Omit only when using `namespace`. */\n d1?: Selector<Env, unknown>;\n /** Shared secret the worker presents on the object\'s internal session route. REQUIRED with `namespace`: the binding is reachable from any worker bound to it, so the secret — not the binding — is the authorization boundary. Without it identity resolution fails closed. */\n internalSecret?: Selector<Env, string>;\n /** Name of the Durable Object instance holding the auth tables. Defaults to `"auth"`. Set it to run separate auth objects (per deployment, per tenant) off one namespace. */\n objectName?: Selector<Env, string>;\n /** The auth Durable Object namespace — the DO-backed mode. Needed for `@better-auth/scim`, which requires native transactions that D1 has none of. The object owns the auth tables, so `/api/auth/*` and identity resolution both go through it. Typed as `AuthNamespaceLike` because `createDoAuthWiring` resolves through `idFromName` + `get` and has no `getByName` fallback — both members are load-bearing here, and `ShardNamespaceLike` leaves both optional. */\n namespace?: Selector<Env, AuthNamespaceLike>;\n /** Build the better-auth options from `env` (secret, plugins, email/password, …). */\n options: (env: Env) => LunoraAuthOptions;\n}']:[]],q=e=>[...e.hasAccess?[" private accessSelector?: Selector<Env, CreateAccessResolverOptions | undefined>;"]:[]," private adminToken?: Selector<Env, string>;",...e.hasAuth?[" private authDeclaration?: AuthDeclaration<Env>;"]:[]," private cdcEnabled = false;"," private reactiveCacheConfig: boolean | { maxBytes?: number; maxEntries?: number } = false;"," private readonly extendFns: ((env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>)[] = [];",...e.hasGlobal?[" private globalDeclaration?: GlobalDeclaration<Env>;"]:[],...e.hasHyperdriveGlobal?[" private hyperdriveGlobalDeclaration?: HyperdriveGlobalDeclaration<Env>;"]:[]," private httpRouterApp?: HttpRouterLike;"," private readonly routeMap: Record<string, Route> = {};",...e.hasScheduler?[" private schedulerDeclaration?: SchedulerDeclaration<Env>;"]:[],...m(e)?[" private readonly shardExtras: Partial<ShardConfig> = {};"]:[]," private shardSelector?: Selector<Env, ShardNamespaceLike>;",...e.hasStorage?[" private storageDeclaration?: StorageDeclaration<Env>;"]:[]],N=e=>v.filter(([t])=>e[t]).map(([,t,a,r])=>` /** ${r} */
1
+ import{A as S,G as D}from"./emit-BcAkLUfn.mjs";const E=e=>`has${e.charAt(0).toUpperCase()}${e.slice(1)}`,v=S.map(({appMethod:e,key:t})=>[E(t),e.method,e.configKey,e.doc]),m=e=>v.some(([t])=>e[t]),A=e=>e?['import * as lunoraIdentityContract from "../identity.js";']:[],x=(e,t)=>e?['import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";',`import { createAccessResolver${t?", composeResolvers":""} } from "@lunora/cloudflare-access";`]:[],R=e=>e?['import { createKvIntrospectorFromEnv } from "@lunora/bindings/kv";']:[],C=e=>e?['import notifyConfig from "../notify.js";']:[],k=e=>(e.emailAgents?.length??0)>0,O=e=>k(e)?['import { dispatchAgentEmail } from "@lunora/agent/inbound";']:[],T=e=>k(e)?['import * as lunoraAgentDefinitions from "../agents.js";']:[],L=e=>{const{hasAccess:t,hasAuth:a,hasFramework:r,hasGlobal:n,hasHyperdriveGlobal:s,hasKvIntrospector:l,hasQueue:o,hasScheduler:d,hasStorage:h,hasWorkflow:u,useUmbrella:c,wantsOpenApi:p,wantsOpenRpc:b}=e,i=c?"lunorash/runtime":"@lunora/runtime",g=["ExecutionContextLike","HttpRouterLike","LunoraWorker","Route","ScheduledControllerLike","ShardNamespaceLike","WorkerOptions"];n&&g.push("GlobalIntrospector","AdminTableResolver"),r&&g.push("FrameworkHostHandler");const f=[...n||s?["createCrossShardRelationCapabilities"]:[],"createWorker","resolveLogArchiveFromEnv",...r?["withFrameworkWorker"]:[]].join(", ");return[...a?['import type { AuthNamespaceLike, LunoraAuth, LunoraAuthOptions } from "@lunora/auth";','import { createAuth, createAuthAdmin, createAuthAuditReader, createDoAuthWiring, d1Executor, ensureMigrated, handleAuthRequest, lunoraD1Adapter } from "@lunora/auth";']:[],...x(t,a),...n?['import type { D1CtxDbOptions, D1DatabaseLike, D1Exec } from "@lunora/d1";','import { applyCdcChanges, createD1CtxDb, exportGlobalRows, facetGlobalColumn, importGlobalRows, listGlobalTables, readD1CdcChanges, readGlobalTablePage, retryingExec } from "@lunora/d1";']:[],...s?['import type { HyperdriveEngine } from "@lunora/hyperdrive/global";','import { createHyperdriveGlobalCtxDb } from "@lunora/hyperdrive/global";','import type { SqlCtxDbOptions, SqlExec } from "@lunora/sql-store";']:[],...R(l),...d?['import type { DurableObjectNamespaceLike } from "@lunora/scheduler";','import { createScheduler } from "@lunora/scheduler";']:[],...h?['import type { R2BucketLike, R2S3Credentials, Storage } from "@lunora/storage";','import { createBucketStorage, createStorage } from "@lunora/storage";']:[],...u?['import { createWorkflowsRestClient } from "@lunora/workflow";']:[],...O(e),`import type { ${[...g].toSorted((w,y)=>w.localeCompare(y)).join(", ")} } from "${i}";`,`import { ${f} } from "${i}";`,"",...A(e.identity),...T(e),...n||s?['import schema from "../schema.js";']:[],...C(e.hasNotify),'import { LUNORA_CRONS } from "./crons.js";','import { LUNORA_FUNCTIONS } from "./functions.js";',...o?['import { createQueueCaptureSink, dispatchQueueBatch, shouldCaptureQueue } from "@lunora/queue";','import { LUNORA_QUEUE_REGISTRY } from "./queues.js";']:[],...p?['import { openApiSpec } from "./openapi.js";']:[],...b?['import { openRpcSpec } from "./openrpc.js";']:[],'import { createShardDO } from "./shard.js";']},I=e=>[...e.hasStorage?['/** `.storage(...)` declaration — one bucket (required) plus optional extra named buckets and signed-URL config. Backs `ctx.storage` AND the studio file browser. */\ninterface StorageDeclaration<Env> {\n /** The default R2 bucket binding (the bare `ctx.storage`). */\n bucket: Selector<Env, R2BucketLike>;\n /** Extra named buckets, reached via `ctx.storage.bucket("name")` and the studio\'s bucket picker. */\n buckets?: Record<string, Selector<Env, R2BucketLike>>;\n /** Public base URL signed/public object URLs resolve against. */\n publicBaseUrl?: Selector<Env, string>;\n /** R2 S3-API credentials (`{ accountId, accessKeyId, secretAccessKey, bucket, jurisdiction? }`) enabling `ctx.storage.getPresignedUrl` — native S3 presigned URLs that hit R2 directly, bypassing the worker. Omit to use only the worker-signed `getSignedUrl` path. */\n s3?: Selector<Env, R2S3Credentials>;\n /** HMAC secret for signed URLs. */\n signingSecret?: Selector<Env, string>;\n}']:[],...e.hasScheduler?["/** `.scheduler(...)` declaration — the `SchedulerDO` namespace plus the worker origin its callbacks dispatch back to. Backs `ctx.scheduler` AND the studio's scheduled-jobs view. */\ninterface SchedulerDeclaration<Env> {\n /** The `SchedulerDO` namespace binding (typically `env.SCHEDULER`). */\n namespace: Selector<Env, DurableObjectNamespaceLike & ShardNamespaceLike>;\n /** The worker origin the `SchedulerDO` dispatches HTTP job callbacks back to. */\n origin?: Selector<Env, string>;\n}"]:[],...e.hasGlobal?["/** `.global(...)` declaration — the D1 binding backing `.global()` tables. Backs cross-tenant `ctx.db` reads/writes AND the studio's global data browser. */\ninterface GlobalDeclaration<Env> {\n /** The D1 binding (typically `env.DB`). */\n d1: Selector<Env, D1DatabaseLike>;\n /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n origin?: Selector<Env, string>;\n}"]:[],...e.hasHyperdriveGlobal?['/** `.hyperdriveGlobal(...)` declaration — backs `.global({ backend: "hyperdrive" })` tables on a Postgres/MySQL database via Hyperdrive. Stays reactive: the writer is injected as `globalDb` and the broadcast hook drives live queries. */\ninterface HyperdriveGlobalDeclaration<Env> {\n /** The Hyperdrive engine — selects the Postgres or MySQL dialect. */\n engine: HyperdriveEngine;\n /** Build the `SqlExec` from `env` — e.g. `buildPgExec(fromPostgresJs(postgres(env.HYPERDRIVE.connectionString)))`. Cache the driver on the DO instance; rebuild lazily after hibernation. */\n exec: (env: Env) => SqlExec;\n /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n origin?: Selector<Env, string>;\n}']:[],...e.hasAuth?['/** `.auth(...)` declaration — better-auth options plus the storage the adapter reads. Give it `d1` (the default) or `namespace` (a Durable Object that hosts the auth tables), never both. The builder owns the lazy build + `ensureMigrated` dance and wires `authHandler` / `resolveIdentity` / `authAdmin`. */\ninterface AuthDeclaration<Env> {\n /** The D1 binding the auth SQL adapter is wired over (via `lunoraD1Adapter`). Omit only when using `namespace`. */\n d1?: Selector<Env, unknown>;\n /** Shared secret the worker presents on the object\'s internal session route. REQUIRED with `namespace`: the binding is reachable from any worker bound to it, so the secret — not the binding — is the authorization boundary. Without it identity resolution fails closed. */\n internalSecret?: Selector<Env, string>;\n /** Name of the Durable Object instance holding the auth tables. Defaults to `"auth"`. Set it to run separate auth objects (per deployment, per tenant) off one namespace. */\n objectName?: Selector<Env, string>;\n /** The auth Durable Object namespace — the DO-backed mode. Needed for `@better-auth/scim`, which requires native transactions that D1 has none of. The object owns the auth tables, so `/api/auth/*` and identity resolution both go through it. Typed as `AuthNamespaceLike` because `createDoAuthWiring` resolves through `idFromName` + `get` and has no `getByName` fallback — both members are load-bearing here, and `ShardNamespaceLike` leaves both optional. */\n namespace?: Selector<Env, AuthNamespaceLike>;\n /** Build the better-auth options from `env` (secret, plugins, email/password, …). */\n options: (env: Env) => LunoraAuthOptions;\n}']:[]],q=e=>[...e.hasAccess?[" private accessSelector?: Selector<Env, CreateAccessResolverOptions | undefined>;"]:[]," private adminToken?: Selector<Env, string>;",...e.hasAuth?[" private authDeclaration?: AuthDeclaration<Env>;"]:[]," private cdcEnabled = false;"," private reactiveCacheConfig: boolean | { maxBytes?: number; maxEntries?: number } = false;"," private readonly extendFns: ((env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>)[] = [];",...e.hasGlobal?[" private globalDeclaration?: GlobalDeclaration<Env>;"]:[],...e.hasHyperdriveGlobal?[" private hyperdriveGlobalDeclaration?: HyperdriveGlobalDeclaration<Env>;"]:[]," private httpRouterApp?: HttpRouterLike;"," private readonly routeMap: Record<string, Route> = {};",...e.hasScheduler?[" private schedulerDeclaration?: SchedulerDeclaration<Env>;"]:[],...m(e)?[" private readonly shardExtras: Partial<ShardConfig> = {};"]:[]," private shardSelector?: Selector<Env, ShardNamespaceLike>;",...e.hasStorage?[" private storageDeclaration?: StorageDeclaration<Env>;"]:[]],N=e=>v.filter(([t])=>e[t]).map(([,t,a,r])=>` /** ${r} */
2
2
  public ${t}(factory: NonNullable<ShardConfig["${a}"]>): this {
3
3
  this.shardExtras.${a} = factory;
4
4
 
@@ -1 +1 @@
1
- import{Node as a}from"ts-morph";import{c as n}from"./classify-procedure-call-AKeIK05y.mjs";const f=s=>{const i=[];for(const r of s.getVariableStatements())if(r.isExported())for(const t of r.getDeclarations()){const e=t.getInitializer(),o=e&&a.isCallExpression(e)?n(e):void 0;o?.receiver&&i.push({name:t.getName(),receiver:o.receiver})}return i};export{f as e};
1
+ import{Node as a}from"ts-morph";import{c as n}from"./classify-procedure-call-Ib2EMtFH.mjs";const f=s=>{const i=[];for(const r of s.getVariableStatements())if(r.isExported())for(const t of r.getDeclarations()){const e=t.getInitializer(),o=e&&a.isCallExpression(e)?n(e):void 0;o?.receiver&&i.push({name:t.getName(),receiver:o.receiver})}return i};export{f as e};
@@ -1 +1 @@
1
- import{Node as r}from"ts-morph";import{l as f,a as m,t as d}from"./ast-CjWtsS6S.mjs";import{w as g,c as p}from"./classify-procedure-call-AKeIK05y.mjs";const u=e=>{if(!r.isPropertyAssignment(e)&&!r.isShorthandPropertyAssignment(e)&&!r.isMethodDeclaration(e)&&!r.isGetAccessorDeclaration(e))return;const t=e.getNameNode();return r.isStringLiteral(t)?t.getLiteralValue():e.getName()},h=e=>g(e,"use","mask"),x=e=>{if(r.isPropertyAssignment(e)){const t=e.getInitializer();if(t&&r.isStringLiteral(t)){const s=t.getLiteralText();if(s==="redact"||s==="hash")return s}}return"custom"},k=e=>{const t=e.getArguments()[0];if(!t||!r.isObjectLiteralExpression(t))return[];const s=[];for(const i of t.getProperties()){const n=u(i);if(n===void 0||!r.isPropertyAssignment(i))continue;const o=i.getInitializer();if(!(!o||!r.isObjectLiteralExpression(o)))for(const a of o.getProperties()){const c=u(a);c!==void 0&&s.push({column:c,table:n})}}return s},v=e=>{const t=h(e);return{maskColumns:t.flatMap(s=>k(s)),usesMask:t.length>0}},P=new Set(["findFirst","findFirstOrThrow","findMany","get","query"]),C=new Set(["delete","insert","patch","replace"]),M=(e,t)=>{if(!r.isVariableDeclaration(e))return;const s=e.getInitializer();if(!s||!r.isCallExpression(s))return;const i=p(s);if(!i)return;const n=i.receiver?v(i.receiver):{maskColumns:[],usesMask:!1},{tablesRead:o,tablesWritten:a}=d(e,P,C);return{exportName:e.getName(),file:t,maskColumns:n.maskColumns,tablesRead:o,tablesWritten:a,usesMask:n.usesMask,visibility:i.visibility}},E=(e,t)=>{const s=[];for(const i of f(t)){const n=e.getSourceFile(i)??e.addSourceFileAtPath(i),o=m(t,i);for(const a of n.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations()){const l=M(c,o);l&&s.push(l)}}return s};export{u as a,E as d,h as m,x as s};
1
+ import{Node as r}from"ts-morph";import{l as f,a as m,t as d}from"./ast-BYoSZlae.mjs";import{w as g,c as p}from"./classify-procedure-call-Ib2EMtFH.mjs";const u=e=>{if(!r.isPropertyAssignment(e)&&!r.isShorthandPropertyAssignment(e)&&!r.isMethodDeclaration(e)&&!r.isGetAccessorDeclaration(e))return;const t=e.getNameNode();return r.isStringLiteral(t)?t.getLiteralValue():e.getName()},h=e=>g(e,"use","mask"),x=e=>{if(r.isPropertyAssignment(e)){const t=e.getInitializer();if(t&&r.isStringLiteral(t)){const s=t.getLiteralText();if(s==="redact"||s==="hash")return s}}return"custom"},k=e=>{const t=e.getArguments()[0];if(!t||!r.isObjectLiteralExpression(t))return[];const s=[];for(const i of t.getProperties()){const n=u(i);if(n===void 0||!r.isPropertyAssignment(i))continue;const o=i.getInitializer();if(!(!o||!r.isObjectLiteralExpression(o)))for(const a of o.getProperties()){const c=u(a);c!==void 0&&s.push({column:c,table:n})}}return s},v=e=>{const t=h(e);return{maskColumns:t.flatMap(s=>k(s)),usesMask:t.length>0}},P=new Set(["findFirst","findFirstOrThrow","findMany","get","query"]),C=new Set(["delete","insert","patch","replace"]),M=(e,t)=>{if(!r.isVariableDeclaration(e))return;const s=e.getInitializer();if(!s||!r.isCallExpression(s))return;const i=p(s);if(!i)return;const n=i.receiver?v(i.receiver):{maskColumns:[],usesMask:!1},{tablesRead:o,tablesWritten:a}=d(e,P,C);return{exportName:e.getName(),file:t,maskColumns:n.maskColumns,tablesRead:o,tablesWritten:a,usesMask:n.usesMask,visibility:i.visibility}},E=(e,t)=>{const s=[];for(const i of f(t)){const n=e.getSourceFile(i)??e.addSourceFileAtPath(i),o=m(t,i);for(const a of n.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations()){const l=M(c,o);l&&s.push(l)}}return s};export{u as a,E as d,h as m,x as s};
@@ -1 +1 @@
1
- import{Node as r,SyntaxKind as f}from"ts-morph";import{l as P,a as h,i as A}from"./ast-CjWtsS6S.mjs";const m=(t,e)=>{if(t.getText()!==e)return!1;const s=t.getParent();return r.isPropertyAccessExpression(s)&&s.getNameNode()===t?!1:!(r.isPropertyAssignment(s)&&s.getNameNode()===t)},x=(t,e)=>r.isIdentifier(t)?m(t,e):t.getDescendantsOfKind(f.Identifier).some(s=>m(s,e)),g=t=>x(t,"ctx"),I=t=>{let e=t;for(;r.isPropertyAccessExpression(e)||r.isElementAccessExpression(e)||r.isNonNullExpression(e);)e=e.getExpression();return r.isIdentifier(e)?e:void 0},E=t=>x(t,"args"),u=t=>{if(!r.isIdentifier(t))return;const e=t.getText(),s=t.getFirstAncestor(o=>r.isArrowFunction(o)||r.isFunctionExpression(o)||r.isFunctionDeclaration(o));if(s===void 0)return;const i=t.getStart();let n,a=-1;for(const o of s.getDescendantsOfKind(f.VariableDeclaration)){if(o.getName()!==e)continue;const c=o.getInitializer(),l=o.getStart();c!==void 0&&l<i&&l>a&&(n=c,a=l)}return n},C=t=>{if(E(t))return!0;const e=u(t);return e!==void 0&&E(e)},K=t=>{if(r.isCallExpression(t)||r.isNewExpression(t))return!1;const e=u(t);return e===void 0||!(r.isCallExpression(e)||r.isNewExpression(e))},O=t=>{if(g(t))return!0;const e=u(t);if(e!==void 0&&g(e))return!0;const s=e??t;return(r.isIdentifier(s)?[s]:s.getDescendantsOfKind(f.Identifier)).some(n=>{const a=u(n);return a!==void 0&&g(a)})},p=(t,e)=>x(t,e),T=(t,e)=>{if(p(t,e))return!0;const s=u(t);if(s!==void 0&&p(s,e))return!0;const i=I(t);if(i!==void 0){const n=u(i);return n!==void 0&&p(n,e)}return!1},v=t=>{for(const e of t.getAncestors())if(r.isVariableDeclaration(e)&&e.getVariableStatement()?.hasExportKeyword()===!0)return e.getName();return"<module>"},N=new Set(["withGeoIndex","withIndex","withSearchIndex"]),S=new Set(["collect","collectWithScores","first","paginate","take","unique"]),b=t=>{const e=t.getExpression();if(!r.isPropertyAccessExpression(e)||e.getName()!=="query")return!1;const s=e.getExpression();return A(s)},y=t=>{const e=[];let s=t;for(;;){const i=s.getParent();if(!i||!r.isPropertyAccessExpression(i))break;const n=i.getParent();if(!n||!r.isCallExpression(n))break;e.push(i.getName()),s=n}return e},D=/\b[A-Za-z_$][\w$]*\._id\s*===?[^=]/u,w=t=>{let e=t;for(;;){const s=e.getParent();if(!s||!r.isPropertyAccessExpression(s))return!1;const i=s.getParent();if(!i||!r.isCallExpression(i))return!1;if(s.getName()==="filter"){const n=i.getArguments()[0];if(n&&D.test(n.getText()))return!0}e=i}},R=t=>{const e=t.getArguments()[0];return e&&r.isStringLiteral(e)?e.getLiteralText():""},_=(t,e)=>{const s=[];for(const i of P(e)){const n=t.getSourceFile(i)??t.addSourceFileAtPath(i),a=h(e,i);for(const o of n.getDescendantsOfKind(f.CallExpression)){if(!b(o))continue;const c=y(o),l=c.includes("filter");s.push({exportName:v(o),file:a,filtersPrimaryKey:l&&w(o),hasFilter:l,hasIndex:c.some(d=>N.has(d)),line:o.getStartLineNumber(),table:R(o),terminal:c.findLast(d=>S.has(d))})}}return s};export{O as a,K as b,T as c,_ as d,v as e,p as f,C as i,E as r,u as s};
1
+ import{Node as r,SyntaxKind as f}from"ts-morph";import{l as P,a as h,i as A}from"./ast-BYoSZlae.mjs";const m=(t,e)=>{if(t.getText()!==e)return!1;const s=t.getParent();return r.isPropertyAccessExpression(s)&&s.getNameNode()===t?!1:!(r.isPropertyAssignment(s)&&s.getNameNode()===t)},x=(t,e)=>r.isIdentifier(t)?m(t,e):t.getDescendantsOfKind(f.Identifier).some(s=>m(s,e)),g=t=>x(t,"ctx"),I=t=>{let e=t;for(;r.isPropertyAccessExpression(e)||r.isElementAccessExpression(e)||r.isNonNullExpression(e);)e=e.getExpression();return r.isIdentifier(e)?e:void 0},E=t=>x(t,"args"),u=t=>{if(!r.isIdentifier(t))return;const e=t.getText(),s=t.getFirstAncestor(o=>r.isArrowFunction(o)||r.isFunctionExpression(o)||r.isFunctionDeclaration(o));if(s===void 0)return;const i=t.getStart();let n,a=-1;for(const o of s.getDescendantsOfKind(f.VariableDeclaration)){if(o.getName()!==e)continue;const c=o.getInitializer(),l=o.getStart();c!==void 0&&l<i&&l>a&&(n=c,a=l)}return n},C=t=>{if(E(t))return!0;const e=u(t);return e!==void 0&&E(e)},K=t=>{if(r.isCallExpression(t)||r.isNewExpression(t))return!1;const e=u(t);return e===void 0||!(r.isCallExpression(e)||r.isNewExpression(e))},O=t=>{if(g(t))return!0;const e=u(t);if(e!==void 0&&g(e))return!0;const s=e??t;return(r.isIdentifier(s)?[s]:s.getDescendantsOfKind(f.Identifier)).some(n=>{const a=u(n);return a!==void 0&&g(a)})},p=(t,e)=>x(t,e),T=(t,e)=>{if(p(t,e))return!0;const s=u(t);if(s!==void 0&&p(s,e))return!0;const i=I(t);if(i!==void 0){const n=u(i);return n!==void 0&&p(n,e)}return!1},v=t=>{for(const e of t.getAncestors())if(r.isVariableDeclaration(e)&&e.getVariableStatement()?.hasExportKeyword()===!0)return e.getName();return"<module>"},N=new Set(["withGeoIndex","withIndex","withSearchIndex"]),S=new Set(["collect","collectWithScores","first","paginate","take","unique"]),b=t=>{const e=t.getExpression();if(!r.isPropertyAccessExpression(e)||e.getName()!=="query")return!1;const s=e.getExpression();return A(s)},y=t=>{const e=[];let s=t;for(;;){const i=s.getParent();if(!i||!r.isPropertyAccessExpression(i))break;const n=i.getParent();if(!n||!r.isCallExpression(n))break;e.push(i.getName()),s=n}return e},D=/\b[A-Za-z_$][\w$]*\._id\s*===?[^=]/u,w=t=>{let e=t;for(;;){const s=e.getParent();if(!s||!r.isPropertyAccessExpression(s))return!1;const i=s.getParent();if(!i||!r.isCallExpression(i))return!1;if(s.getName()==="filter"){const n=i.getArguments()[0];if(n&&D.test(n.getText()))return!0}e=i}},R=t=>{const e=t.getArguments()[0];return e&&r.isStringLiteral(e)?e.getLiteralText():""},_=(t,e)=>{const s=[];for(const i of P(e)){const n=t.getSourceFile(i)??t.addSourceFileAtPath(i),a=h(e,i);for(const o of n.getDescendantsOfKind(f.CallExpression)){if(!b(o))continue;const c=y(o),l=c.includes("filter");s.push({exportName:v(o),file:a,filtersPrimaryKey:l&&w(o),hasFilter:l,hasIndex:c.some(d=>N.has(d)),line:o.getStartLineNumber(),table:R(o),terminal:c.findLast(d=>S.has(d))})}}return s};export{O as a,K as b,T as c,_ as d,v as e,p as f,C as i,E as r,u as s};
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@lunora/codegen",
3
- "version": "1.0.0-alpha.144",
3
+ "version": "1.0.0-alpha.146",
4
4
  "description": "Code generator for Lunora: emits _generated/{api,server,dataModel}.ts from your schema",
5
5
  "keywords": [
6
6
  "cloudflare",
@@ -46,15 +46,15 @@
46
46
  "access": "public"
47
47
  },
48
48
  "dependencies": {
49
- "@lunora/advisor": "1.0.0-alpha.101",
50
- "@lunora/agent": "1.0.0-alpha.77",
51
- "@lunora/container": "1.0.0-alpha.37",
52
- "@lunora/errors": "1.0.0-alpha.26",
53
- "@lunora/platform": "1.0.0-alpha.22",
54
- "@lunora/queue": "1.0.0-alpha.39",
55
- "@lunora/scheduler": "1.0.0-alpha.45",
56
- "@lunora/values": "1.0.0-alpha.34",
57
- "@lunora/workflow": "1.0.0-alpha.38",
49
+ "@lunora/advisor": "1.0.0-alpha.102",
50
+ "@lunora/agent": "1.0.0-alpha.78",
51
+ "@lunora/container": "1.0.0-alpha.38",
52
+ "@lunora/errors": "1.0.0-alpha.27",
53
+ "@lunora/platform": "1.0.0-alpha.23",
54
+ "@lunora/queue": "1.0.0-alpha.40",
55
+ "@lunora/scheduler": "1.0.0-alpha.46",
56
+ "@lunora/values": "1.0.0-alpha.35",
57
+ "@lunora/workflow": "1.0.0-alpha.39",
58
58
  "jsonc-parser": "^3.3.1",
59
59
  "quicktype-core": "^26.0.0",
60
60
  "ts-morph": "^28.0.0"
@@ -1 +0,0 @@
1
- import{existsSync as d,readFileSync as p}from"node:fs";import{join as m}from"node:path";import{NODE_CAPABILITIES as f,CLOUDFLARE_CAPABILITIES as h}from"@lunora/platform";import{parse as g}from"jsonc-parser";const v="cloudflare",y="lunora.json",b=a=>{const e=m(a,y);if(!d(e))return;let r;try{r=p(e,"utf8")}catch{return}const s=[],n=g(r,s,{allowTrailingComma:!0});if(s.length>0||n===null||typeof n!="object")return;const{target:o}=n;return typeof o=="string"&&o.length>0?o:void 0},E=(a,e)=>e??b(a)??v,i={cloudflare:h,node:f},L=()=>Object.keys(i).toSorted((a,e)=>a.localeCompare(e)),_={access:null,ai:"ai",analytics:"analytics",browser:"browser",container:"containers",flags:null,hyperdrive:"hyperdrive",images:"images",kv:"keyValueStore",mail:"mail",notify:null,payments:null,pipelines:"pipelines",r2sql:null,scheduler:"scheduler",storage:"objectStorage",vectors:"vectorStore",workflows:"workflows",x402:null},T=["crossShardFanout","durableStreams","globalTables","queues","secrets"],c={crossShardFanout:"cross-shard fan-out queries (a `.shardBy(...)` schema)",durableStreams:"durable streams (`.stream(handler, { durable: true })`)",globalTables:"global tables (`.global()`)",queues:"queues (`defineQueue`)",secrets:"the secrets store (`ctx.secrets`)"},$=(a,e,r,s={})=>{const n={...a},o=[];for(const[t,l]of Object.entries(_)){if(l===null||!a[t])continue;const u=e.features[l]?.level;u==="unsupported"?(n[t]=!1,o.push({feature:t,level:"error",message:`${e.name} does not support "${t}" (ctx.${t}). Its surface was omitted from the generated types.`,name:"platform_unsupported_feature",remediation:`Remove the ctx.${t} usage, or deploy to a target whose capability matrix marks "${l}" as native or emulated.`,target:r})):u===void 0&&(n[t]=!1,o.push({feature:t,level:"error",message:`${e.name}'s capability matrix does not declare a support level for "${t}" (ctx.${t}). Treated as unsupported and its surface was omitted from the generated types.`,name:"platform_undeclared_feature",remediation:`Rate "${l}" in the ${e.name} capability matrix as "native", "emulated", or "unsupported" — an undeclared feature fails closed rather than shipping a surface the host may not provide.`,target:r}))}for(const t of T){if(s[t]!==!0)continue;const l=e.features[t]?.level;l==="unsupported"?o.push({level:"error",message:`${e.name} does not support ${c[t]}, which this app declares.`,name:"platform_unsupported_feature",remediation:`Remove the declaration, or deploy to a target whose capability matrix marks "${t}" as native or emulated.`,target:r}):l===void 0&&o.push({level:"error",message:`${e.name}'s capability matrix does not declare a support level for ${c[t]}, which this app declares. Treated as unsupported.`,name:"platform_undeclared_feature",remediation:`Rate "${t}" in the ${e.name} capability matrix as "native", "emulated", or "unsupported" — an undeclared feature fails closed rather than letting the app deploy onto a primitive the host may not provide.`,target:r})}return{diagnostics:o,usage:n}},k=(a,e,r={})=>{const s=i[e];return s===void 0?{diagnostics:[{level:"error",message:`Unknown deploy target "${e}" — no capability matrix is registered for it. Codegen emitted the full Cloudflare surface un-gated.`,name:"platform_unknown_target",remediation:`Use a registered target (${Object.keys(i).join(", ")}) or install the target's @lunora/platform-${e} package.`,target:e}],usage:{...a}}:$(a,s,e,r)};export{_ as CAPABILITY_TO_FEATURE,v as DEFAULT_TARGET,y as PROJECT_CONFIG_FILE,$ as gateAgainstMatrix,k as gatePlatformFeatures,L as platformMatrixIds,b as readProjectTarget,E as resolveCodegenTarget};
@@ -1 +0,0 @@
1
- import{existsSync as l}from"node:fs";import{join as p}from"node:path";import{Node as i}from"ts-morph";import{d as g,p as d}from"./ast-CjWtsS6S.mjs";const c="flags.ts",f="@lunora/flags/providers/flagship",u=e=>{const t=e.getSymbol();if(!t)return e.getText()==="flagshipProvider";for(const r of t.getDeclarations())if(i.isImportSpecifier(r))return r.getImportDeclaration().getModuleSpecifierValue()!==f?!1:r.getNameNode().getText()==="flagshipProvider";return!1},m=(e,t)=>{const r=e.getProperty(t);if(!r||!i.isPropertyAssignment(r))return;const o=r.getInitializerOrThrow();if(i.isStringLiteral(o)||i.isNoSubstitutionTemplateLiteral(o))return o.getLiteralValue()},v=e=>{const t=e.getArguments()[0];if(t&&i.isObjectLiteralExpression(t)){const r=m(t,"binding");if(r!==void 0&&r.length>0)return{bindingName:r,mode:"binding",provider:"flagship"}}return{mode:"http",provider:"flagship"}},h=e=>d(e.getArguments()[0],"provider"),S=(e,t)=>{const r=p(t,c);if(!l(r))return;const o=e.getSourceFile(r)??e.addSourceFileAtPath(r),n=g(o);if(!n||!i.isCallExpression(n))return{provider:"custom"};const s=h(n);if(s&&i.isCallExpression(s)){const a=s.getExpression();if(i.isIdentifier(a)&&u(a))return v(s)}return{provider:"custom"}};export{c as FLAGS_FILENAME,S as discoverFlags};
@@ -1,9 +0,0 @@
1
- import{existsSync as b,mkdirSync as ss,readFileSync as At,writeFileSync as ns,rmSync as rs}from"node:fs";import{join as f,dirname as fe}from"node:path";import{performance as pe}from"node:perf_hooks";import{runAdvisor as is}from"@lunora/advisor";import{LunoraError as L}from"@lunora/errors";import{SyntaxKind as l,Node as o,Project as Xe}from"ts-morph";import{serializeSchemaSnapshot as os}from"./SCHEMA_SNAPSHOT_VERSION-DLXXalg2.mjs";import{toAdvisorContext as as}from"./formatAdvisories-CkEu1eye.mjs";import{s as cs}from"./paths-C-9fwEgQ.mjs";import{discoverAgents as ls}from"./AGENTS_FILENAME-D1qA0h5m.mjs";import{discoverContainers as us}from"./CONTAINERS_FILENAME-oKaARMoA.mjs";import{diagnosticAt as ne}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{b as re}from"./module-specifiers-WF8iAydP.mjs";import{C as ge,i as ds,f as fs,n as ps,j as gs,b as ms,c as hs,l as xs,e as Es,o as vs,d as Ss,k as As,g as ys,p as Ns,m as bs,a as Ps,h as Is}from"./emit-EJw8shd_.mjs";import{l as g,a as E,f as P,p as N,g as yt,j as Ee,h as ws,i as D,b as Ze,r as Nt,e as Ts}from"./ast-CjWtsS6S.mjs";import Cs from"./readPackageDependencies-C6h6FZuP.mjs";import{discoverQueues as Fs}from"./QUEUES_FILENAME-D229WtRm.mjs";import{discoverSandboxUsage as Os}from"./discoverSandboxUsage-DdewAOuj.mjs";import Rs from"./discoverStorageRulesMetadata-gyO60A5S.mjs";import{discoverWorkflows as Ls}from"./WORKFLOWS_FILENAME-DRaiCNa6.mjs";import{gatePlatformFeatures as Ds,resolveCodegenTarget as ks}from"./DEFAULT_TARGET-CwB3hjFH.mjs";import{i as F,a as K,e as v,r as Ms,b as Ks,s as ie,c as _s,f as zs,d as Us}from"./queries-B_xEHIeL.mjs";import{a as A,c as _,d as bt,e as Bs}from"./classify-procedure-call-AKeIK05y.mjs";import qs from"./discoverAuthApiCalls-C35kkayg.mjs";import $s from"./discoverCrons-wXBfQcfn.mjs";import Je from"./discoverFunctions-DglkHRlt.mjs";import{i as js,r as Vs,e as Ws}from"./unwrap-handler-return-CmIWbykC.mjs";import et from"./discoverHttpRoutes-B60GWv_I.mjs";import Hs from"./discoverHyperdriveCalls-De_QiFIl.mjs";import Gs from"./discoverInserts-C5l2INmE.mjs";import{m as Ae,a as Z,s as Pt,d as Ys}from"./index-CCDlo9L7.mjs";import{e as It}from"./exported-procedure-chains-MlZRKqSD.mjs";import Qs from"./discoverMigrations-CWH7T6qz.mjs";import{MUTATORS_FILENAME as Xs,isDefineMutatorCallee as Zs,discoverMutators as tt}from"./MUTATORS_FILENAME-BKSzaCkq.mjs";import Js from"./discoverNondeterministicCalls-JsO91i57.mjs";import{discoverNotifyConfig as en,discoverNotifyCalls as tn}from"./NOTIFY_FILENAME-B-eIjru_.mjs";import sn from"./discoverR2sqlCalls-BdkZw-D2.mjs";import nn from"./discoverRlsProcedures-CRshfYZE.mjs";import rn from"./discoverRlsMetadata-DGUGYgWs.mjs";import on from"./discoverSchema-CubSTjtY.mjs";import{secretKindOf as an,redact as cn,isHeuristicSecretKind as ln,isSecretishName as un}from"./redact-Cy14LEnc.mjs";import{discoverShapes as dn}from"./SHAPES_FILENAME-D3N7xcEk.mjs";import{emitApp as fn}from"./emitApp-DftAzAA2.mjs";import{buildOpenApiDocument as pn,emitOpenApiModule as gn}from"./buildOpenApiDocument-CmLfuJpW.mjs";import{buildOpenRpcDocument as mn,emitOpenRpcModule as hn}from"./OPENRPC_VERSION-C30LtXay.mjs";import{s as xn}from"./parse-validator-Q58kladC.mjs";import{buildSchemaSnapshot as En}from"./SchemaSnapshotParseError-CvPTjDrT.mjs";const vn=e=>{const t=new Map;for(const s of e){const n=cs(s),i=t.get(n);if(i===void 0){t.set(n,s);continue}if(i!==s)throw new L("INTERNAL",`@lunora/codegen: "${i}" and "${s}" both map to the api namespace "${n}" — the generated api.ts would declare "${n}" twice and the dispatch key "${n}:<fn>" would be ambiguous. Rename one file so the two differ by more than a non-identifier character (\`-\`, \`.\`, \`/\` and \`_\` all sanitize to \`_\`).`,{status:500})}},Sn=e=>{const t=[],s=e.tables.filter(n=>n.shardMode==="global");return s.some(n=>n.globalBackend!=="hyperdrive")&&t.push({name:"@lunora/d1",reason:"`.global()` tables are D1-backed, so `_generated/app.ts` imports the D1 `ctx.db` adapter"}),s.some(n=>n.globalBackend==="hyperdrive")&&t.push({name:"@lunora/hyperdrive",reason:'`.global({ backend: "hyperdrive" })` tables route through `@lunora/hyperdrive/global`'}),e.vectorIndexes.length>0&&t.push({name:"@lunora/bindings",reason:"`.vectorize()` indexes make `_generated/vectors.ts` import `@lunora/bindings/vectors`"}),t},An=(e,t)=>{if(t===void 0)return;const s=Sn(e).filter(i=>!t.has(i.name));if(s.length===0)return;const n=s.map(i=>` - ${i.name} — ${i.reason}`).join(`
2
- `);throw new L("INTERNAL",`@lunora/codegen: this schema's generated code imports packages the project does not declare:
3
- ${n}
4
-
5
- Install them with your package manager, then re-run codegen.`)},yn="env.ts",Nn=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineEnv";for(const s of t.getDeclarations())if(o.isImportSpecifier(s))return re(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineEnv":!1;return!1},bn=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!o.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&re(n.getModuleSpecifierValue())}return!1},Pn=e=>{if(o.isIdentifier(e))return Nn(e);if(o.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineEnv"&&o.isIdentifier(t)&&bn(t)}return!1},In=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!Pn(n.getExpression()))continue;const r=s.getNameNode();if(!o.isIdentifier(r))throw ne(r,"defineEnv exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},wn=(e,t)=>{const s=f(t,yn);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),i=In(n);if(i.length!==0){if(i.length>1)throw ne(n,`lunora/env.ts declares ${i.length.toString()} defineEnv() contracts (${i.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return i[0]}},Tn=e=>{const t=n=>o.isIdentifier(n)&&n.getText()==="ctx",s=new Set;for(const n of e.getDescendantsOfKind(l.PropertyAccessExpression))t(n.getExpression())&&s.add(n.getName());for(const n of e.getDescendantsOfKind(l.VariableDeclaration)){const i=n.getInitializer(),r=n.getNameNode();if(!(i===void 0||!t(i)||!o.isObjectBindingPattern(r)))for(const a of r.getElements()){const c=a.getPropertyNameNode()?.getText()??a.getName();c&&s.add(c)}}return s},Cn=(e,t)=>{const s=Object.fromEntries(ge.map(n=>[n.key,!1]));for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=new Set(i.getImportDeclarations().map(c=>c.getModuleSpecifierValue())),a=Tn(i);for(const c of ge)if(!s[c.key]){if(r.has(c.moduleSpecifier)){s[c.key]=!0;continue}c.contextProperty!==void 0&&a.has(c.contextProperty)&&(s[c.key]=!0)}if(ge.every(c=>s[c.key]))break}return s},wt="identity.ts",Fn=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineIdentity";for(const s of t.getDeclarations())if(o.isImportSpecifier(s))return re(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineIdentity":!1;return!1},On=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!o.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&re(n.getModuleSpecifierValue())}return!1},Rn=e=>{if(o.isIdentifier(e))return Fn(e);if(o.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineIdentity"&&o.isIdentifier(t)&&On(t)}return!1},Ln=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!Rn(n.getExpression()))continue;const r=s.getNameNode();if(!o.isIdentifier(r))throw ne(r,"defineIdentity exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},Dn=(e,t)=>{const s=f(t,wt);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),i=Ln(n);if(i.length!==0){if(i.length>1)throw ne(n,`lunora/identity.ts declares ${i.length.toString()} defineIdentity() contracts (${i.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return i[0]}},kn=e=>o.isObjectLiteralExpression(e)&&e.getProperties().some(t=>(o.isPropertyAssignment(t)||o.isShorthandPropertyAssignment(t))&&t.getName()==="durable"),Mn=(e,t)=>{const s={durableStreams:!1,secrets:!1};for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);if(s.secrets||(s.secrets=i.getDescendantsOfKind(l.PropertyAccessExpression).some(r=>r.getName()==="secrets"&&o.isIdentifier(r.getExpression())&&r.getExpression().getText()==="ctx")),s.durableStreams||(s.durableStreams=i.getDescendantsOfKind(l.CallExpression).some(r=>{const a=r.getExpression();return(o.isPropertyAccessExpression(a)?a.getName():a.getText())==="stream"&&r.getArguments().some(u=>kn(u))})),s.durableStreams&&s.secrets)break}return s},Kn=(e,t)=>{const s=new Map,n=new Map,i=new Map;for(const r of e)s.set(r.name,`workflow "${r.exportName}"`),n.set(r.bindingName,`workflow "${r.exportName}"`),i.set(r.className,`workflow "${r.exportName}"`);for(const r of t){const a=s.get(r.name);if(a!==void 0)throw new L("DUPLICATE_WORKFLOW_NAME",`Duplicate deployed name "${r.name}": produced by both ${a} and agent "${r.exportName}". Workflow and agent names share the same wrangler workflows[] array and must be unique together.`,{status:500});const c=n.get(r.bindingName);if(c!==void 0)throw new L("DUPLICATE_WORKFLOW_BINDING",`Duplicate binding "${r.bindingName}": produced by both ${c} and agent "${r.exportName}". Workflow and agent bindings share the same wrangler workflows[] array and must be unique together.`,{status:500});const u=i.get(r.className);if(u!==void 0)throw new L("DUPLICATE_WORKFLOW_CLASS",`Duplicate generated class "${r.className}": produced by both ${u} and agent "${r.exportName}". Workflow and agent export names must yield unique generated class names.`,{status:500})}},_n=e=>{const{lunoraDirectory:t,project:s,projectRoot:n,schema:i}=e,r=Dn(s,t),a=wn(s,t),c=Ls(s,t),u=Fs(s,t),d=ls(s,t);Kn(c,d);const x=us(s,t),y=Rs(s,t),p=Mn(s,t),O=Ds(Cn(s,t),ks(n,e.target),{crossShardFanout:i.tables.some(w=>typeof w.shardMode=="object"),durableStreams:p.durableStreams,globalTables:i.tables.some(w=>w.shardMode==="global"),queues:u.length>0,secrets:p.secrets}),S=O.usage,T=Os(s,t),k=S.browser||T.usesSandboxBrowser,U=Cs(n),R=U??new Set,z=R.has("lunorash");An(i,U);const B=b(f(t,"flags.ts")),W=b(f(t,"notify.ts"));return{agents:d,containers:x,dataModelContent:fs(i),declaredDependencies:U,dependencies:R,env:a,featureUsage:S,hasBrowser:k,hasFlags:B,hasNotify:W,identity:r,platformGate:O,queues:u,serverContent:ds({agents:d,containers:x,env:a,hasAccessFacade:S.access,hasAi:S.ai,hasAnalytics:S.analytics,hasBrowser:k,hasFlags:B,hasHyperdrive:S.hyperdrive,hasImages:S.images,hasKv:S.kv,hasNotify:W,hasPayments:S.payments,hasPipelines:S.pipelines,hasR2sql:S.r2sql,hasX402:S.x402,identity:r,queues:u,schema:i,storageRuleBuckets:y.rules.map(w=>w.bucket),useUmbrella:z,workflows:c}),storageRulesMetadata:y,usesSandbox:T.usesSandboxBrowser||T.usesSandboxContainer,useUmbrella:z,workflows:c}},Tt=new Set(["delete","get","head","options","patch","post","put"]),zn=new Set(["handler","stream"]),Un=/\/(?:_|admin|internal|superuser|sudo|root|debug)/iu,st=new Set(["ADMIN_TOKEN","adminToken","assertAdmin","assertAuth","auth","Authorization","getSession","identity","isAdmin","requireAdmin","requireAuth","requireRole","verifyAdmin"]),Bn=e=>{if(!o.isCallExpression(e))return;const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!Tt.has(t.getName()))return;const s=t.getExpression();if(!o.isIdentifier(s)||s.getText()!=="httpRoute")return;const n=e.getArguments()[0];if(!(!n||!o.isStringLiteral(n)))return{method:t.getName().toUpperCase(),path:n.getLiteralValue()}},qn=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t))return;let s=t.getExpression();for(;o.isCallExpression(s);){const n=s.getExpression();if(!o.isPropertyAccessExpression(n)||Tt.has(n.getName()))break;s=n.getExpression()}return Bn(s)},$n=e=>{for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression))if(st.has(t.getName()))return!0;for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=t.getExpression();if(o.isIdentifier(s)&&st.has(s.getText()))return!0}return!1},jn=(e,t)=>{const s=e.getInitializer();if(!s||!o.isCallExpression(s))return;const n=s.getExpression();if(!o.isPropertyAccessExpression(n)||!zn.has(n.getName()))return;const i=qn(s);if(!i||!Un.test(i.path))return;const r=s.getArguments()[0],a=r!==void 0&&(o.isArrowFunction(r)||o.isFunctionExpression(r))&&$n(r);return{exportName:e.getName(),file:t,method:i.method,path:i.path,usesGuard:a}},Vn=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const i of n.getDeclarations()){const r=jn(i,t);r&&s.push(r)}return s},Wn=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Vn(i,E(t,n)))}return s},Hn=e=>!o.isPropertyAccessExpression(e)||e.getName()!=="run"?!1:e.getExpression().getText()==="ctx.ai",Gn=(e,t)=>{if(!Hn(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!F(s)||K(s)))return{exportName:v(e),file:t,line:e.getStartLineNumber()}},Yn=(e,t)=>P(e,t,Gn),Qn=new Set(["generateText","streamText"]),Xn=new Set(["messages","prompt","system"]),Zn=[{methods:new Set(["delete","insert","insertManyUnsafe","patch","replace"]),prefixes:["context.db","ctx.db"]},{methods:new Set(["run","runAction","runMutation"]),prefixes:["context","ctx"]},{methods:new Set(["fetch"]),prefixes:["context","ctx"]},{methods:new Set(["queue","send"]),prefixes:["context.email","context.mail","ctx.email","ctx.mail"]}],Jn=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t))return;const s=t.getName(),n=t.getExpression().getText();for(const i of Zn)if(i.methods.has(s)&&i.prefixes.some(r=>n===r||n.startsWith(`${r}.`)))return`${n}.${s}`},er=e=>{for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=Jn(t);if(s!==void 0)return s}},tr=e=>{const t=new Set,s=e.getFirstAncestor(r=>o.isArrowFunction(r)||o.isFunctionExpression(r)||o.isFunctionDeclaration(r)),[n]=s?.getParameters()??[],i=n?.getNameNode();if(i===void 0||!o.isObjectBindingPattern(i))return t;for(const r of i.getElements()){const a=r.getPropertyNameNode()?.getText()??r.getName(),c=r.getNameNode();if(a==="args"&&o.isObjectBindingPattern(c))for(const u of c.getElements())t.add(u.getName())}return t},sr=e=>{if(Ms(e))return!0;const t=tr(e);return t.size===0?!1:e.getDescendantsOfKind(l.Identifier).some(s=>t.has(s.getText()))},nr=e=>{for(const t of e.getProperties()){if(!o.isPropertyAssignment(t)||!Xn.has(t.getName()))continue;const s=t.getInitializer();if(s!==void 0&&sr(s))return!0}return!1},rr=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const i=A(n.getExpression());if(i===void 0||!Qn.has(i))continue;const[r]=n.getArguments();if(r===void 0||!o.isObjectLiteralExpression(r))continue;let a;for(const c of r.getDescendantsOfKind(l.CallExpression))if(A(c.getExpression())==="tool"&&(a=er(c),a!==void 0))break;a!==void 0&&s.push({exportName:v(n),file:t,line:n.getStartLineNumber(),method:i,sideEffect:a,userInputDerived:nr(r)})}return s},ir=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...rr(i,E(t,n)))}return s},or=e=>{if(!o.isPropertyAccessExpression(e)||e.getName()!=="fetch")return!1;const t=e.getExpression();return o.isIdentifier(t)&&t.getText()==="ctx"},ar=(e,t)=>{if(!or(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!F(s)))return{exportName:v(e),file:t,line:e.getStartLineNumber()}},cr=(e,t)=>P(e,t,ar),Ct=e=>e.getProperties().some(t=>o.isSpreadAssignment(t)),lr=e=>{const t=e.getArguments()[0];if(!t||!o.isObjectLiteralExpression(t))return{objects:[],opaque:!0};const s=t.getProperty("args");if(!s)return{objects:[],opaque:!1};if(!o.isPropertyAssignment(s))return{objects:[],opaque:!0};const n=s.getInitializer();return!n||!o.isObjectLiteralExpression(n)?{objects:[],opaque:!0}:{objects:[n],opaque:Ct(n)}},ur=e=>{const t=[];let s=!1,n=e;for(;o.isCallExpression(n);){const i=n.getExpression();if(!o.isPropertyAccessExpression(i))break;if(i.getName()==="input"){const r=n.getArguments()[0];r&&o.isObjectLiteralExpression(r)?(t.push(r),s||=Ct(r)):s=!0}n=i.getExpression()}return{objects:t,opaque:s}},Ft=(e,t)=>t?ur(t):lr(e),dr=e=>e.flatMap(t=>t.getProperties().filter(s=>o.isPropertyAssignment(s)||o.isShorthandPropertyAssignment(s)).map(s=>s.getName())),fr=/\.check\(|\.meta\(|length|max/iu,pr=/\bv\.any\s*\(/u,gr=/\bv\.string\s*\(/u,mr=e=>pr.test(e),hr=e=>gr.test(e)&&!fr.test(e),xr=e=>{const t=[],s=[];for(const n of e)for(const i of n.getProperties()){if(!o.isPropertyAssignment(i))continue;const r=i.getInitializer();if(!r)continue;const a=r.getText(),c=i.getName();mr(a)?t.push(c):hr(a)&&s.push(c)}return{anyArgs:t,unboundedStringArgs:s}},Er=(e,t)=>{const s=e.getInitializer();if(!s||!o.isCallExpression(s))return;const n=_(s);if(n?.visibility!=="public")return;const{objects:i}=Ft(s,n.receiver),{anyArgs:r,unboundedStringArgs:a}=xr(i);if(!(r.length===0&&a.length===0))return{anyArgs:r,exportName:e.getName(),file:t,line:s.getStartLineNumber(),unboundedStringArgs:a}},vr=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const i of n.getDeclarations()){const r=Er(i,t);r&&s.push(r)}return s},Sr=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...vr(i,E(t,n)))}return s},me=e=>e?.getKind()===l.TrueKeyword,Ar=e=>e?.getKind()===l.FalseKeyword,yr=e=>e!==void 0&&o.isNumericLiteral(e)&&e.getLiteralValue()===0,Nr=new Set(["lunoraAuthAdapter","lunoraD1Adapter"]),br=e=>!e||!o.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>o.isCallExpression(t)&&A(t.getExpression())==="scim"),Pr=e=>e!==void 0&&o.isCallExpression(e)&&Nr.has(A(e.getExpression())??""),Ir=e=>!e||!o.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>o.isStringLiteral(t)&&t.getLiteralText()==="*"),wr=e=>{const t=N(e,"advanced"),s=N(e,"emailAndPassword"),n=N(e,"session");return{analyzable:!0,disableCsrfCheck:me(N(t,"disableCSRFCheck")),emailPasswordEnabled:me(N(s,"enabled")),requireEmailVerification:me(N(s,"requireEmailVerification")),scimOnNonTransactionalAdapter:br(N(e,"plugins"))&&Pr(N(e,"database")),secureCookiesDisabled:Ar(N(t,"useSecureCookies")),sessionFreshAgeZero:yr(N(n,"freshAge")),trustedOriginsWildcard:Ir(N(e,"trustedOrigins"))}},Tr=()=>({analyzable:!1,disableCsrfCheck:!1,emailPasswordEnabled:!1,requireEmailVerification:!1,scimOnNonTransactionalAdapter:!1,secureCookiesDisabled:!1,sessionFreshAgeZero:!1,trustedOriginsWildcard:!1}),Cr=(e,t)=>{if(A(e.getExpression())!=="createAuth")return;const s=e.getArguments()[0],n=s!==void 0&&o.isObjectLiteralExpression(s)&&s.getProperties().some(r=>o.isSpreadAssignment(r)),i=s!==void 0&&o.isObjectLiteralExpression(s)&&!n?wr(s):Tr();return{exportName:v(e),file:t,line:e.getStartLineNumber(),...i}},Fr=(e,t)=>P(e,t,Cr),Or=(e,t)=>{if(!o.isPropertyAccessExpression(e))return;const s=e.getName();if(t.methods.has(s))return t.matchReceiver(e.getExpression().getText())?s:void 0},Rr=(e,t,s)=>{const n=Or(e.getExpression(),s);if(n===void 0)return;const i=e.getArguments()[s.argIndex];if(!(!i||!F(i)||K(i))&&!(s.requireUnmodifiedReach===!0&&!Ks(i)))return{exportName:v(e),file:t,line:e.getStartLineNumber(),method:n}},Lr=(e,t,s)=>{const n=[];for(const i of e.getDescendantsOfKind(l.CallExpression)){const r=Rr(i,t,s);r&&n.push(r)}return n},oe=(e,t,s)=>{const n=[];for(const i of g(t)){const r=e.getSourceFile(i)??e.addSourceFileAtPath(i);n.push(...Lr(r,E(t,i),s))}return n},Dr=new Set(["content","pdf","scrape","screenshot"]),kr=(e,t)=>oe(e,t,{argIndex:0,matchReceiver:s=>s==="ctx.browser",methods:Dr}),Mr=new Set(["createBrowser","createInboundEmailHandler","createPayment"]),Kr=new Set(["RateLimiter"]),_r=new Set(["extend"]),Ot=e=>{const t=[],s=[];let n=!1;for(const i of e.getProperties()){if(o.isSpreadAssignment(i)){n=!0;continue}if(o.isPropertyAssignment(i)){const r=i.getName();t.push(r),i.getInitializer()?.getKind()===l.TrueKeyword&&s.push(r);continue}(o.isShorthandPropertyAssignment(i)||o.isMethodDeclaration(i))&&t.push(i.getName())}return{analyzable:!n,presentKeys:t,trueKeys:s}},nt=e=>e&&o.isObjectLiteralExpression(e)?Ot(e):{analyzable:!1,presentKeys:[],trueKeys:[]},zr=e=>{const t=e.getStatements(),[s]=t;if(t.length!==1||s===void 0||!o.isReturnStatement(s))return;const n=s.getExpression();return n!==void 0&&o.isObjectLiteralExpression(n)?n:void 0},Ur=e=>{if(o.isObjectLiteralExpression(e))return e;if(o.isParenthesizedExpression(e)){const t=e.getExpression();return o.isObjectLiteralExpression(t)?t:void 0}return o.isBlock(e)?zr(e):void 0},Br=e=>{const t=e&&(o.isArrowFunction(e)||o.isFunctionExpression(e))?e:void 0,s=t&&Ur(t.getBody());return s?Ot(s):{analyzable:!1,presentKeys:[],trueKeys:[]}},qr=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const i=A(n.getExpression());i!==void 0&&(Mr.has(i)?s.push({callee:i,file:t,line:n.getStartLineNumber(),...nt(n.getArguments()[0])}):_r.has(i)&&s.push({callee:i,file:t,line:n.getStartLineNumber(),...Br(n.getArguments()[0])}))}for(const n of e.getDescendantsOfKind(l.NewExpression)){const i=A(n.getExpression());i===void 0||!Kr.has(i)||s.push({callee:i,file:t,line:n.getStartLineNumber(),...nt(n.getArguments()[0])})}return s},$r=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...qr(i,E(t,n)))}return s},rt="ctx.containers.",jr=e=>{if(!e.startsWith(rt))return!1;const t=e.slice(rt.length);return t.length>0&&!t.includes(".")},Vr=(e,t)=>oe(e,t,{argIndex:0,matchReceiver:jr,methods:new Set(["get"])}),Wr=new Set(["allow","deny","setAllowed"]),Hr=e=>{const t=e.getArguments()[0];if(!t||!o.isObjectLiteralExpression(t))return!1;const s=t.getProperty("enableInternet");return s!==void 0&&o.isPropertyAssignment(s)&&o.isTrueLiteral(s.getInitializerOrThrow())},Gr=(e,t)=>{const s=e.getExpression();if(!(!o.isPropertyAccessExpression(s)||s.getName()!=="start"||!Hr(e)))return{detail:"enableInternet: true",exportName:v(e),file:t,kind:"enable_internet",line:e.getStartLineNumber()}},Yr=(e,t)=>{const s=e.getExpression();if(!o.isPropertyAccessExpression(s)||!Wr.has(s.getName()))return;const n=s.getExpression();if(!(!o.isPropertyAccessExpression(n)||n.getName()!=="egress"))return{detail:s.getName(),exportName:v(e),file:t,kind:"egress_relaxation",line:e.getStartLineNumber()}},Qr=(e,t)=>Gr(e,t)??Yr(e,t),Xr=(e,t)=>P(e,t,Qr),Zr=new Set(["defineExportSink","r2Sink","webhookExportSink"]),Jr=e=>{const t=e.getExpression();if(!o.isIdentifier(t))return;const s=t.getText();return Zr.has(s)?s:void 0},ei=e=>{const t=[],s=[];for(const n of e.getProperties()){if(o.isSpreadAssignment(n))return{analyzable:!1,emptyKeys:[],presentKeys:[]};if(o.isPropertyAssignment(n)){const i=n.getName();t.push(i);const r=n.getInitializer();r&&o.isStringLiteral(r)&&r.getLiteralText()===""&&s.push(i);continue}(o.isShorthandPropertyAssignment(n)||o.isMethodDeclaration(n)||o.isGetAccessorDeclaration(n))&&t.push(n.getName())}return{analyzable:!0,emptyKeys:s,presentKeys:t}},ti=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of i.getDescendantsOfKind(l.CallExpression)){const c=Jr(a);if(c===void 0)continue;const u=a.getArguments()[0],d=u&&o.isObjectLiteralExpression(u)?ei(u):{analyzable:!1,emptyKeys:[],presentKeys:[]};s.push({analyzable:d.analyzable,emptyKeys:d.emptyKeys,factory:c,file:r,line:a.getStartLineNumber(),presentKeys:d.presentKeys})}}return s},si=new Map([["dbRateLimit",2],["rateLimit",2],["verifyTurnstileMiddleware",0]]),ni=new Set(["dbRateLimit","rateLimit"]),ri=e=>{if(!e||!o.isObjectLiteralExpression(e))return!1;const t=e.getProperty("failOpen");return t!==void 0&&o.isPropertyAssignment(t)&&t.getInitializer()?.getKind()===l.TrueKeyword},ii=(e,t)=>{const s=A(e.getExpression());if(s===void 0)return;const n=si.get(s);if(n!==void 0)return{callee:s,exportName:v(e),failOpen:ri(e.getArguments()[n]),file:t,limitName:ni.has(s)?yt(e):"",line:e.getStartLineNumber()}},oi=(e,t)=>P(e,t,ii),ai=new Set(["boolean","number","object","string"]),ci=e=>{const t=e.getName();if(!ai.has(t))return;const s=e.getExpression();if(!o.isPropertyAccessExpression(s))return;if(s.getName()==="flags"&&Ee(s.getExpression()))return t;const n=s.getExpression();if(s.getName()==="details"&&o.isPropertyAccessExpression(n)&&n.getName()==="flags"&&Ee(n.getExpression()))return t},li=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t))return;const s=ci(t);if(s===void 0)return;const n=e.getArguments()[0];if(!n||!(o.isStringLiteral(n)||o.isNoSubstitutionTemplateLiteral(n)))return;const i=n.getLiteralValue();return i.length>0?{key:i,type:s}:void 0},ui=(e,t)=>{const s=new Map;for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of i.getDescendantsOfKind(l.CallExpression)){const a=li(r);a&&!s.has(a.key)&&s.set(a.key,a.type)}}return[...s.entries()].map(([n,i])=>({key:n,type:i})).toSorted((n,i)=>n.key.localeCompare(i.key))},di=e=>{const t=e.getInitializer();if(!t||!o.isCallExpression(t))return;const s=_(t);if(s?.kind!=="query")return;const n=ws(t,s.receiver);return n?{exportName:e.getName(),handler:n}:void 0},it=e=>{const t=e.getParent();return t&&o.isPropertyAccessExpression(t)&&t.getExpression()===e?t:void 0},fi=e=>{if(!o.isPropertyAccessExpression(e)||e.getName()!=="flags")return;const t=e.getExpression();if(!o.isIdentifier(t)||t.getText()!=="ctx")return;const s=it(e);if(!s)return"ctx.flags";if(s.getName()==="details"){const n=it(s);return n?`ctx.flags.details.${n.getName()}`:"ctx.flags.details"}return`ctx.flags.${s.getName()}`},pi=(e,t)=>{const s=[];for(const n of e.handler.getDescendantsOfKind(l.PropertyAccessExpression)){const i=fi(n);i!==void 0&&s.push({callee:i,exportName:e.exportName,file:t,line:n.getStartLineNumber()})}return s},gi=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const i of n.getDeclarations()){const r=di(i);r&&s.push(...pi(r,t))}return s},mi=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...gi(i,E(t,n)))}return s},hi=e=>{if(!o.isPropertyAccessExpression(e)||e.getName()!=="boolean")return!1;const t=e.getExpression();return o.isPropertyAccessExpression(t)&&t.getName()==="flags"&&Ee(t.getExpression())},xi=e=>{if(e?.getKind()===l.TrueKeyword)return!0;if(e?.getKind()===l.FalseKeyword)return!1},Ei=(e,t)=>{if(!hi(e.getExpression()))return;const[s,n]=e.getArguments();if(!s||!(o.isStringLiteral(s)||o.isNoSubstitutionTemplateLiteral(s)))return;const i=s.getLiteralValue(),r=xi(n);if(!(i.length===0||r===void 0))return{defaultValue:r,exportName:v(e),file:t,key:i,line:e.getStartLineNumber()}},vi=(e,t)=>P(e,t,Ei),Si=e=>{const t=e.getType().getProperty("~standard");if(!t)return;const s=t.getTypeAtLocation(e).getProperty("types");if(!s)return;const n=s.getTypeAtLocation(e).getNonNullableType().getProperty("output");if(!n)return;const i=n.getTypeAtLocation(e),r=i.getText(e);if(!r||r==="any"||r==="never"||js(r))return;const a=e.getSourceFile().getFilePath();return Vs(i,e,a)?Ws(i,e,a,0,new Set):r},Ai=e=>{const t=e.getExpression();return o.isPropertyAccessExpression(t)&&t.getName()==="withGeoIndex"},yi=e=>{const t=e.getArguments()[0];return t&&o.isStringLiteral(t)?t.getLiteralText():""},Ni=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of i.getDescendantsOfKind(l.CallExpression))Ai(a)&&s.push({file:r,indexName:yi(a),line:a.getStartLineNumber()})}return s},V=e=>e!==void 0&&(o.isArrowFunction(e)||o.isFunctionExpression(e))?e:void 0,Rt=e=>{const t=e.getArguments()[0],s=V(t);if(s!==void 0)return s;if(t===void 0||!o.isObjectLiteralExpression(t))return;const n=t.getProperty("handler");return n!==void 0&&o.isPropertyAssignment(n)?V(n.getInitializer()):void 0},bi=new Set(["delete","get","head","options","patch","post","put"]),Pi=new Set(["handler","stream"]),Ii=new Set(["runAction","runMutation"]),wi=new Set(["delete","insert","insertManyUnsafe","patch","replace"]),J=(e,t)=>e!==void 0&&o.isIdentifier(e)&&e.getText()===t,ot=(e,t)=>{const s=e.getParameters()[0];if(s===void 0)return;const n=s.getNameNode();if(t)return o.isIdentifier(n)?n.getText():void 0;if(o.isObjectBindingPattern(n)){for(const i of n.getElements())if((i.getPropertyNameNode()?.getText()??i.getNameNode().getText())==="ctx"){const a=i.getNameNode();return o.isIdentifier(a)?a.getText():void 0}}},at=(e,t)=>{const s=e.getBody(),n=s.getDescendantsOfKind(l.CallExpression);o.isCallExpression(s)&&n.unshift(s);for(const i of n){const r=i.getExpression();if(!o.isPropertyAccessExpression(r))continue;const a=r.getName(),c=r.getExpression();if(Ii.has(a)&&J(c,t))return a;if(wi.has(a)&&o.isPropertyAccessExpression(c)&&c.getName()==="db"&&J(c.getExpression(),t))return`db.${a}`}},ct=(e,t)=>{const s=e.getBody();for(const n of s.getDescendantsOfKind(l.PropertyAccessExpression))if(n.getName()==="auth"&&J(n.getExpression(),t))return!0;for(const n of s.getDescendantsOfKind(l.VariableDeclaration)){const i=n.getNameNode();if(!(!o.isObjectBindingPattern(i)||!J(n.getInitializer(),t))){for(const r of i.getElements())if((r.getPropertyNameNode()?.getText()??r.getNameNode().getText())==="auth")return!0}}return!1},Ti=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!Pi.has(t.getName()))return;let s=t.getExpression();for(;o.isCallExpression(s);){const n=s.getExpression();if(!o.isPropertyAccessExpression(n))return;const i=n.getName();if(bi.has(i)){const r=n.getExpression();return o.isIdentifier(r)&&r.getText()==="httpRoute"?i.toUpperCase():void 0}s=n.getExpression()}},Ci=(e,t)=>{const s=e.getExpression();if(o.isIdentifier(s)&&s.getText()==="httpAction"){const c=V(e.getArguments()[0]),u=c&&ot(c,!0);if(!c||u===void 0)return;const d=at(c,u);return d===void 0?void 0:{exportName:v(e),file:t,kind:"httpAction",line:e.getStartLineNumber(),readsAuth:ct(c,u),sideEffect:d}}const n=Ti(e);if(n===void 0)return;const i=V(e.getArguments()[0]),r=i&&ot(i,!1);if(!i||r===void 0)return;const a=at(i,r);return a===void 0?void 0:{exportName:v(e),file:t,kind:"httpRoute",line:e.getStartLineNumber(),method:n,readsAuth:ct(i,r),sideEffect:a}},Fi=(e,t)=>P(e,t,Ci),Oi=new Set(["btoa","encodeURI","encodeURIComponent","isSafeHeaderValue","Number","parseFloat","parseInt"]),Ri=new Set(["append","set"]),Lt=e=>e!==void 0&&(o.isStringLiteral(e)||o.isNoSubstitutionTemplateLiteral(e))?e.getLiteralText():"",lt=(e,t)=>(o.isCallExpression(e)?[e,...e.getDescendantsOfKind(l.CallExpression)]:e.getDescendantsOfKind(l.CallExpression)).some(n=>Oi.has(A(n.getExpression())??"")&&zs(n,t)),Li=(e,t)=>{if(lt(e,t))return!0;const s=ie(e);return s!==void 0&&lt(s,t)},ve=(e,t)=>_s(e,t)&&!Li(e,t),Di=e=>{if(o.isPropertyAccessExpression(e)&&e.getName()==="headers")return!0;const t=ie(e);return t!==void 0&&o.isNewExpression(t)&&A(t.getExpression())==="Headers"},ee=e=>{if(e===void 0)return;if(o.isObjectLiteralExpression(e))return e;const t=ie(e);return t!==void 0&&o.isObjectLiteralExpression(t)?t:void 0},ye=(e,t,s)=>{for(const n of e.getProperties())if(o.isPropertyAssignment(n)){const i=n.getInitializer();i!==void 0&&ve(i,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:Lt(n.getNameNode()),line:i.getStartLineNumber(),via:t})}else if(o.isShorthandPropertyAssignment(n)){const i=n.getNameNode();ve(i,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:n.getName(),line:i.getStartLineNumber(),via:t})}else if(o.isSpreadAssignment(n)){const i=ee(n.getExpression());i!==void 0&&ye(i,t,s)}},Dt=(e,t)=>{const s=ee(e);if(s===void 0)return;const n=s.getProperty("headers");if(n===void 0||!o.isPropertyAssignment(n))return;const i=ee(n.getInitializer());i!==void 0&&ye(i,"response-init",t)},ki=(e,t)=>{const s=A(e.getExpression());if(s==="Response")Dt(e.getArguments()[1],t);else if(s==="Headers"){const n=ee(e.getArguments()[0]);n!==void 0&&ye(n,"headers-ctor",t)}},Mi=(e,t)=>{const s=e.getExpression();if(!o.isPropertyAccessExpression(s))return;const n=s.getName(),i=s.getExpression();if(n==="json"&&o.isIdentifier(i)&&i.getText()==="Response"){Dt(e.getArguments()[1],t);return}if(Ri.has(n)&&Di(i)){const r=e.getArguments()[1];r!==void 0&&ve(r,t.requestName)&&t.rows.push({exportName:t.exportName,file:t.relativePath,headerName:Lt(e.getArguments()[0]),line:r.getStartLineNumber(),via:n==="set"?"headers-set":"headers-append"})}},Ki=(e,t)=>{for(const s of e.getDescendantsOfKind(l.NewExpression))ki(s,t);for(const s of e.getDescendantsOfKind(l.CallExpression))Mi(s,t)},_i=(e,t)=>{const s=e.getExpression();if(!o.isIdentifier(s)||s.getText()!=="httpAction")return[];const n=V(e.getArguments()[0]);if(n===void 0)return[];const i=n.getParameters()[1];if(i===void 0)return[];const r=i.getNameNode();if(!o.isIdentifier(r))return[];const a=[];return Ki(n,{exportName:v(e),relativePath:t,requestName:r.getText(),rows:a}),a},zi=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression))s.push(..._i(n,t));return s},Ui=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...zi(i,E(t,n)))}return s},Bi=new Set(["auth","context.auth","ctx.auth"]),qi="userId",$i=e=>{const t=new Set;for(const s of e.getProperties()){if(o.isSpreadAssignment(s))return;(o.isPropertyAssignment(s)||o.isShorthandPropertyAssignment(s)||o.isMethodDeclaration(s))&&t.add(s.getName())}return t},ji=(e,t)=>{const s=f(t,wt);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const i of n.getDescendantsOfKind(l.CallExpression)){if(A(i.getExpression())!=="defineIdentity")continue;const[r]=i.getArguments();return r&&o.isObjectLiteralExpression(r)?$i(r):void 0}},ut=e=>{if(!(e===void 0||!o.isPropertyAccessExpression(e)||e.getName()!=="identity"))return Bi.has(e.getExpression().getText())?e:void 0},Vi=e=>{if(o.isPropertyAccessExpression(e)&&ut(e.getExpression())!==void 0)return e.getName();if(o.isElementAccessExpression(e)&&ut(e.getExpression())!==void 0){const t=e.getArgumentExpression();return t&&o.isStringLiteral(t)?t.getLiteralValue():void 0}},Wi=(e,t,s)=>{const n=[];for(const i of e.getDescendants()){const r=Vi(i);r!==void 0&&n.push({declared:r===qi||s.has(r),exportName:v(i),file:t,key:r,line:i.getStartLineNumber()})}return n},Hi=(e,t)=>{const s=ji(e,t);if(s===void 0)return[];const n=[];for(const i of g(t)){const r=e.getSourceFile(i)??e.addSourceFileAtPath(i);n.push(...Wi(r,E(t,i),s))}return n},Gi=(e,t)=>{if(A(e.getExpression())!=="buildImageDeliveryUrl")return;const s=e.getArguments()[0];if(!s)return;const n=N(s,"key");if(!(!n||!F(n)||K(n)))return{exportName:v(e),file:t,line:e.getStartLineNumber()}},Yi=(e,t)=>P(e,t,Gi),Qi=new Set(["delete","get","getRaw","getWithMetadata","put"]),Xi=(e,t)=>oe(e,t,{argIndex:0,matchReceiver:s=>s==="ctx.kv"||s.startsWith("ctx.kv."),methods:Qi}),Zi=new Set(["queue","send"]),dt=new Set(["bcc","cc","to"]),Ji=e=>{if(!o.isPropertyAccessExpression(e))return;const t=e.getName();if(!Zi.has(t))return;const s=e.getExpression().getText();return s==="ctx.mail"||s==="ctx.email"?t:void 0},eo=e=>o.isObjectLiteralExpression(e)?e.getProperties().some(t=>{if(o.isShorthandPropertyAssignment(t)){const n=t.getNameNode();return dt.has(t.getName())&&F(n)&&!K(n)}if(!o.isPropertyAssignment(t)||!dt.has(t.getName()))return!1;const s=t.getInitializer();return s!==void 0&&F(s)&&!K(s)}):!1,to=(e,t)=>{const s=Ji(e.getExpression());if(s===void 0)return;const n=e.getArguments()[0];if(!(!n||!eo(n)))return{exportName:v(e),file:t,line:e.getStartLineNumber(),method:s}},so=(e,t)=>P(e,t,to),no=e=>o.isPropertyAssignment(e)||o.isMethodDeclaration(e)||o.isGetAccessorDeclaration(e)?o.isComputedPropertyName(e.getNameNode()):!1,ro=e=>o.isPropertyAssignment(e)||o.isShorthandPropertyAssignment(e)||o.isMethodDeclaration(e)||o.isGetAccessorDeclaration(e)?no(e):!0,kt=(e,t=!1)=>{for(const s of e.getProperties()){if(ro(s))return!0;if(t)continue;if(!o.isPropertyAssignment(s))return!0;const n=s.getInitializer();if(!n||!o.isObjectLiteralExpression(n)||kt(n,!0))return!0}return!1},io=(e,t)=>{for(const s of g(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const{receiver:i}of It(n))for(const r of Ae(i)){const a=r.getArguments()[0];if(a!==void 0&&(!o.isObjectLiteralExpression(a)||kt(a)))return!0}}return!1},oo=e=>{const t=e.getArguments()[0];if(!t||!o.isObjectLiteralExpression(t))return[];const s=[];for(const n of t.getProperties()){const i=Z(n);if(i===void 0||!o.isPropertyAssignment(n))continue;const r=n.getInitializer();if(!(!r||!o.isObjectLiteralExpression(r)))for(const a of r.getProperties()){const c=Z(a);c!==void 0&&s.push({column:c,strategy:Pt(a),table:i})}}return s},ao=(e,t)=>{const s=new Map;for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const{receiver:r}of It(i))for(const a of Ae(r))for(const c of oo(a)){const u=`${c.table}\0${c.column}`;s.has(u)||s.set(u,c)}}return{columns:[...s.values()]}},co=(e,t,s)=>{const n=e.getArguments()[0];if(!n||!o.isObjectLiteralExpression(n))return[];const i=[];for(const r of n.getProperties()){const a=Z(r);if(a===void 0||!o.isPropertyAssignment(r))continue;const c=r.getInitializer();if(!(!c||!o.isObjectLiteralExpression(c)))for(const u of c.getProperties()){const d=Z(u);if(d===void 0)continue;const x=Pt(u);x!=="custom"&&i.push({column:d,exportName:t,file:s,line:u.getStartLineNumber(),strategy:x,table:a})}}return i},lo=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&o.isCallExpression(s)?_(s):void 0;return n?.receiver?Ae(n.receiver).flatMap(i=>co(i,e.getName(),t)):[]},uo=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...lo(c,r))}return s},fo=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="replace")return!1;const s=t.getExpression();return D(s)},po=e=>{const t=e.getArguments()[0];if(t===void 0||!o.isObjectLiteralExpression(t))return;const s=t.getProperty("server");if(s!==void 0)return o.isPropertyAssignment(s)?s.getInitializer():s},go=e=>{if(!e.isExported())return;const t=e.getInitializer();if(t?.getKind()!==l.CallExpression)return;const s=t;return Zs(s.getExpression())?s:void 0},mo=e=>{const t=go(e),s=t===void 0?void 0:po(t);if(s===void 0)return[];const n=e.getNameNode(),i=o.isIdentifier(n)?n.getText():"";return s.getDescendantsOfKind(l.CallExpression).filter(r=>fo(r)).map(r=>({exportName:i,file:"lunora/mutators.ts",line:r.getStartLineNumber()}))},ho=e=>e.getVariableDeclarations().flatMap(t=>mo(t)),xo=(e,t)=>{const s=f(t,Xs);if(!b(s))return[];const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);return ho(n)},Eo=new Set(["delete","get","patch"]),vo=new Set(["accountId","authorId","companyId","createdBy","createdById","customerId","groupId","memberId","organizationId","orgId","ownerId","projectId","teamId","tenantId","userId","workspaceId"]),So=new Set(["auth","identity","session","user"]),Ao=new Set([l.EqualsEqualsEqualsToken,l.EqualsEqualsToken,l.ExclamationEqualsEqualsToken,l.ExclamationEqualsToken]),yo=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="normalizeId"||!D(t.getExpression()))return;const s=e.getArguments()[0];return s&&o.isStringLiteral(s)?s.getLiteralText():""},No=e=>{let t=e,s=t.getParent();for(;s!==void 0&&(o.isAsExpression(s)||o.isParenthesizedExpression(s)||o.isNonNullExpression(s));)t=s,s=t.getParent();if(s===void 0||!o.isVariableDeclaration(s))return;const n=s.getNameNode();return o.isIdentifier(n)?n.getText():void 0},bo=(e,t)=>e.getDescendantsOfKind(l.Identifier).some(s=>s.getText()===t),Po=e=>o.isThrowStatement(e)||o.isReturnStatement(e)||e.getDescendantsOfKind(l.ThrowStatement).length>0||e.getDescendantsOfKind(l.ReturnStatement).length>0,Io=(e,t)=>e.getDescendantsOfKind(l.IfStatement).some(s=>bo(s.getExpression(),t)&&Po(s.getThenStatement())),wo=(e,t)=>{for(const s of e.getDescendantsOfKind(l.CallExpression)){const n=s.getExpression();if(!o.isPropertyAccessExpression(n))continue;const i=n.getName();if(!Eo.has(i))continue;const r=n.getExpression();if(!(D(r)||o.isPropertyAccessExpression(r)&&D(r.getExpression())))continue;const c=s.getArguments()[0];if(c!==void 0&&o.isIdentifier(c)&&c.getText()===t)return i}},To=e=>{let t=e;for(;o.isPropertyAccessExpression(t)||o.isElementAccessExpression(t)||o.isNonNullExpression(t)||o.isParenthesizedExpression(t)||o.isAsExpression(t)||o.isAwaitExpression(t);)t=t.getExpression();return o.isIdentifier(t)?t.getText():void 0},Co=e=>e.getDescendantsOfKind(l.CallExpression).some(t=>t.getArguments().some(s=>To(s)==="ctx")),Fo=e=>e.getDescendantsOfKind(l.BinaryExpression).some(t=>Ao.has(t.getOperatorToken().getKind())?o.isPropertyAccessExpression(t.getLeft())||o.isPropertyAccessExpression(t.getRight()):!1),Oo=e=>{for(const t of e.getDescendantsOfKind(l.Identifier))if(vo.has(t.getText()))return!0;for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression)){const s=t.getExpression();if(o.isIdentifier(s)&&s.getText()==="ctx"&&So.has(t.getName()))return!0}return Co(e)||Fo(e)},Ro=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!o.isCallExpression(s))return[];const n=_(s);if(n?.kind!=="query"&&n?.kind!=="mutation")return[];const i=Rt(s);if(i===void 0)return[];const r=n.receiver!==void 0&&bt(n.receiver,"use","rls"),a=Oo(i),c=new Set,u=[];for(const d of i.getDescendantsOfKind(l.CallExpression)){const x=yo(d);if(x===void 0)continue;const y=No(d);if(y===void 0||c.has(y)||!Io(i,y))continue;const p=wo(i,y);p!==void 0&&(c.add(y),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),mentionsOwnership:a,sinkMethod:p,table:x,usesRls:r,visibility:n.visibility}))}return u},Lo=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...Ro(c,r))}return s},Do=new Set(["accountId","authorId","createdBy","createdById","organizationId","orgId","ownerId","tenantId","updatedBy","userId","workspaceId"]),ko=new Set(["insert","insertManyUnsafe","patch","replace"]),Mo=e=>{if(!o.isPropertyAccessExpression(e))return;const t=e.getName();if(!ko.has(t))return;const s=e.getExpression();if(!o.isPropertyAccessExpression(s)||s.getName()!=="db")return;const n=s.getExpression();return o.isIdentifier(n)&&n.getText()==="ctx"?t:void 0},Ko=(e,t)=>{if(t!=="insertManyUnsafe")return o.isObjectLiteralExpression(e)?[e]:[];if(!o.isArrayLiteralExpression(e))return[];const s=[];for(const n of e.getElements())o.isObjectLiteralExpression(n)&&s.push(n);return s},_o=(e,t,s,n)=>{const i=[];for(const r of e.getProperties()){let a,c;o.isPropertyAssignment(r)?(a=r.getName(),c=r.getInitializer()):o.isShorthandPropertyAssignment(r)&&(a=r.getName(),c=r.getNameNode()),!(a===void 0||c===void 0||!Do.has(a))&&F(c)&&!K(c)&&i.push({exportName:v(s),field:a,file:n,line:s.getStartLineNumber(),method:t})}return i},zo=(e,t)=>{const s=Mo(e.getExpression());if(s===void 0)return[];const n=e.getArguments()[1];return n?Ko(n,s).flatMap(i=>_o(i,s,e,t)):[]},Uo=(e,t,s)=>{const n=[];for(const i of e.getDescendantsOfKind(l.CallExpression))for(const r of zo(i,t)){const a=s(r.exportName);n.push(a===void 0?r:{...r,visibility:a})}return n},Bo=(e,t,s=[])=>{const n=[],i=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));for(const r of g(t)){const a=e.getSourceFile(r)??e.addSourceFileAtPath(r),c=E(t,r);n.push(...Uo(a,c,u=>i.get(`${c}:${u}`)))}return n},qo=["providerSubscriptionId","state"],$o=["providerEventId","processedAt"],ft=(e,t)=>t.every(s=>s in e.shape),jo=e=>{const t=e.find(n=>n.name==="subscriptions"),s=e.find(n=>n.name==="events");return t!==void 0&&s!==void 0&&ft(t,qo)&&ft(s,$o)},Vo=new Set(["createAutumnAdapter","createDodoPaymentsAdapter","createPolarAdapter","createStripeAdapter"]),Wo=e=>e&&o.isNumericLiteral(e)?Number(e.getText()):void 0,Ho=e=>{const t=e.getProperty("webhookToleranceSeconds");return t&&o.isPropertyAssignment(t)?Wo(t.getInitializer()):void 0},Go=(e,t)=>{const s=A(e.getExpression());if(s===void 0||!Vo.has(s))return;const[n]=e.getArguments(),i=n&&o.isObjectLiteralExpression(n)?Ho(n):void 0;return{callee:s,exportName:v(e),file:t,line:e.getStartLineNumber(),...i===void 0?{}:{toleranceSeconds:i}}},Yo=(e,t)=>P(e,t,Go),Qo=new Set(["defineQueue","defineWorkflow"]),Xo=new Set(["run","runAction","runMutation","runQuery"]),Zo=new Set(["api","internal"]),Jo=e=>{const t=e.getExpression();return o.isIdentifier(t)?t.getText():void 0},ea=e=>{const t=e.getArguments()[0];if(!t||!o.isObjectLiteralExpression(t))return;const s=t.getProperty("handler");if(s===void 0||!o.isPropertyAssignment(s))return;const n=s.getInitializer();if(n&&(o.isArrowFunction(n)||o.isFunctionExpression(n)))return n},Mt=(e,t)=>{const s=e.getParameters()[t]?.getNameNode();return s&&o.isIdentifier(s)?s.getText():void 0},Kt=(e,t)=>e===t||e.startsWith(`${t}.`),_t=e=>{const t=e.getDescendantsOfKind(l.PropertyAccessExpression);return o.isPropertyAccessExpression(e)&&t.push(e),t},pt=e=>{const t=e.getParent();return o.isPropertyAccessExpression(t)&&t.getNameNode()===e||o.isPropertyAssignment(t)&&t.getNameNode()===e?!1:!(o.isBindingElement(t)&&t.getNameNode()===e)},zt=e=>{const t=e.getDescendantsOfKind(l.Identifier).filter(s=>pt(s));return o.isIdentifier(e)&&pt(e)&&t.push(e),t},ta=e=>{if(!o.isVariableDeclaration(e))return[];const t=e.getNameNode();return o.isIdentifier(t)?[t.getText()]:t.getDescendantsOfKind(l.BindingElement).map(s=>s.getName())},sa=e=>{const t=Mt(e,1);if(t===void 0)return[];const s=[`${t}.messages`];for(const n of e.getDescendantsOfKind(l.ForOfStatement)){if(n.getExpression().getText()!==`${t}.messages`)continue;const i=n.getInitializer(),r=o.isVariableDeclarationList(i)?i.getDeclarations()[0]?.getNameNode():void 0;r&&o.isIdentifier(r)&&s.push(`${r.getText()}.body`)}return s},na=(e,t,s)=>{const n=t==="workflow"?[`${s}.params`]:sa(e),i=new Set,r=a=>_t(a).some(c=>n.some(u=>Kt(c.getText(),u)))?!0:zt(a).some(c=>i.has(c.getText()));for(const a of e.getDescendantsOfKind(l.VariableDeclaration)){const c=a.getInitializer();if(c&&r(c))for(const u of ta(a))i.add(u)}return{names:i,prefixes:n}},ra=(e,t)=>_t(e).some(s=>t.prefixes.some(n=>Kt(s.getText(),n)))?!0:zt(e).some(s=>t.names.has(s.getText())),ia=e=>{if(e===void 0||!o.isPropertyAccessExpression(e))return;const t=[];let s=e;for(;o.isPropertyAccessExpression(s);)t.unshift(s.getName()),s=s.getExpression();const n=t.at(-1);if(!(n===void 0||!o.isIdentifier(s)||!Zo.has(s.getText())||t.length<2))return{exportName:n,file:t.slice(0,-1).join("/")}},oa=(e,t,s)=>{const n=Mt(e,0);if(n===void 0)return[];const i=na(e,t,n),r=[];for(const a of e.getDescendantsOfKind(l.CallExpression)){const c=a.getExpression();if(!o.isPropertyAccessExpression(c)||!Xo.has(c.getName())||c.getExpression().getText()!==n)continue;const u=a.getArguments()[1];if(!u||!ra(u,i))continue;const d=ia(a.getArguments()[0]);d!==void 0&&r.push({dispatchKind:t,file:s,handlerExport:v(a),line:a.getStartLineNumber(),targetExport:d.exportName,targetFile:d.file})}return r},aa=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const i=Jo(n);if(i===void 0||!Qo.has(i))continue;const r=ea(n);r!==void 0&&s.push(...oa(r,i==="defineQueue"?"queue":"workflow",t))}return s},ca=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...aa(i,E(t,n)))}return s},gt={dbRateLimit:"usesRateLimit",emailGateMiddleware:"usesEmailGate",mask:"usesMask",rateLimit:"usesRateLimit",rls:"usesRls",verifyTurnstile:"usesCaptcha",verifyTurnstileMiddleware:"usesCaptcha"},mt=new Set(["account","credential","member","passkey","session","user"]),la=e=>e.replaceAll(/[-_]/gu," ").replaceAll(/([a-z0-9])([A-Z])/gu,"$1 $2").split(" ").filter(Boolean).map(t=>t.toLowerCase()),ua=e=>{const s=la(e).at(-1);if(!s)return!1;const n=s.endsWith("s")?s.slice(0,-1):s;return mt.has(s)||mt.has(n)},da=e=>{const t=e.replaceAll(/[^a-z0-9]/giu,"").toLowerCase();return t.endsWith("email")||t.endsWith("emailaddress")},fa=(e,t)=>{const{objects:s,opaque:n}=Ft(e,t);return dr(s).some(i=>da(i))?!0:n?void 0:!1},pa=e=>{const t=e.getArguments()[0];return!t||!o.isObjectLiteralExpression(t)?{usesCaptcha:!1,usesRateLimit:!1}:{usesCaptcha:!!t.getProperty("captcha"),usesRateLimit:!!t.getProperty("rateLimit")}},ga=e=>{if(o.isCallExpression(e))return e;if(!o.isIdentifier(e))return;const s=e.getSourceFile().getVariableDeclaration(e.getText())?.getInitializer();return s&&o.isCallExpression(s)?s:void 0},X={usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},ma=e=>{const t=ga(e),s=t?A(t.getExpression()):void 0;if(t&&s==="protectPublic"){const n=pa(t);return{...X,usesCaptcha:n.usesCaptcha,usesRateLimit:n.usesRateLimit}}return s!==void 0&&s in gt?{...X,[gt[s]]:!0}:X},ha=e=>{const t={...X};let s=e;for(;o.isCallExpression(s);){const n=s.getExpression();if(!o.isPropertyAccessExpression(n))break;const i=n.getName()==="use"?s.getArguments()[0]:void 0;if(i){const r=ma(i);t.usesCaptcha||=r.usesCaptcha,t.usesEmailGate||=r.usesEmailGate,t.usesMask||=r.usesMask,t.usesRateLimit||=r.usesRateLimit,t.usesRls||=r.usesRls}s=n.getExpression()}return t},xa=new Set(["insert","insertMany","insertManyUnsafe","replace"]),Ea=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!xa.has(t.getName()))return!1;const s=t.getExpression();if(!D(s))return!1;const i=e.getArguments()[0];return!i||!(o.isStringLiteral(i)||o.isNoSubstitutionTemplateLiteral(i))?!1:ua(i.getLiteralText())},va=new Set(["create","runAfter","runAt","send","sendBatch"]),Sa=new Set(["queues","scheduler","workflows"]),Aa=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!va.has(t.getName()))return!1;let s=t.getExpression();for(;o.isCallExpression(s)||o.isElementAccessExpression(s)||o.isPropertyAccessExpression(s);){if(o.isPropertyAccessExpression(s)&&Sa.has(s.getName())){const n=s.getExpression();if(o.isIdentifier(n)&&n.getText()==="ctx")return!0}s=s.getExpression()}return!1},ya=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="insertManyUnsafe")return!1;const s=t.getExpression();return D(s)},Ut=new Set(["generateObject","generateText","streamObject","streamText"]),Na=e=>{const t=A(e.getExpression());return t!==void 0&&Ut.has(t)},ba=e=>{const t=A(e.getExpression());if(t===void 0||!Ut.has(t))return!1;const s=e.getArguments()[0];return!s||!o.isObjectLiteralExpression(s)||s.getProperties().some(n=>o.isSpreadAssignment(n))?!1:!s.getProperty("maxOutputTokens")},Pa=new Set(["log","span","trace"]),Ia=new Set(["ai"]),wa=new Set(["email","mail"]),Ta=new Set(["ai","browser","fetch","mail","notify","queues","sql","storage","workflows"]),he=(e,t)=>e.getDescendantsOfKind(l.PropertyAccessExpression).some(s=>{if(!t.has(s.getName()))return!1;const n=s.getExpression();return o.isIdentifier(n)&&n.getText()==="ctx"}),Ca=new Set([l.ArrowFunction,l.FunctionDeclaration,l.FunctionExpression,l.GetAccessor,l.MethodDeclaration,l.SetAccessor]),Fa=new Set(["every","filter","flatMap","forEach","map","some"]),Oa=new Set(["all","allSettled","race"]),Ra=e=>{const t=e.getParent();if(!t||!o.isCallExpression(t)||!t.getArguments().includes(e))return;const s=t.getExpression();if(!o.isPropertyAccessExpression(s))return;const n=s.getName();if(Fa.has(n))return t;const i=s.getExpression();if(o.isIdentifier(i)&&i.getText()==="Promise"&&Oa.has(n))return t},La=e=>{let t=e.getParent();for(;t;){if(o.isTryStatement(t)){const s=t.getTryBlock();if(e.getPos()>=s.getPos()&&e.getEnd()<=s.getEnd())return!0}if(Ca.has(t.getKind())){const s=Ra(t);if(!s)return!1;t=s;continue}t=t.getParent()}return!1},Da=e=>{let t=e;for(;;){const s=t.getParent();if(!o.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;if(s.getName()==="catch")return!0;if(s.getName()!=="then"&&s.getName()!=="finally")return!1;const n=s.getParent();if(!o.isCallExpression(n)||n.getExpression()!==s)return!1;t=n}},ka=e=>{let t=e;for(;;){const s=t.getParent();if(o.isPropertyAccessExpression(s)&&s.getExpression()===t){t=s;continue}return o.isCallExpression(s)&&s.getExpression()===t?s:void 0}},Ma=e=>{let t=!1,s=!0;for(const n of e.getDescendantsOfKind(l.PropertyAccessExpression)){if(!Ta.has(n.getName()))continue;const i=n.getExpression();if(!o.isIdentifier(i)||i.getText()!=="ctx")continue;const r=ka(n);r&&(t=!0,!La(r)&&!Da(r)&&(s=!1))}return{handlesErrors:t&&s,reachesOutbound:t}},Ka=e=>e.getDescendantsOfKind(l.ThrowStatement).some(t=>{const s=t.getExpression();if(!o.isNewExpression(s))return!1;const n=s.getExpression();return o.isIdentifier(n)&&n.getText()==="Error"}),ht="lunora-advisor-exempt",_a=/^[\s*/]+/u,za=/[\w-]/u,Ua=e=>{const s=(e.getFirstAncestorByKind(l.VariableStatement)??e).getLeadingCommentRanges().map(n=>n.getText()).join(`
6
- `);for(const n of s.split(`
7
- `)){const i=n.replace(_a,"");if(!i.startsWith(ht))continue;const r=i.slice(ht.length);if(za.test(r.charAt(0)))continue;const a=r.indexOf("--");return{exempt:!0,exemptReason:(a===-1?"":r.slice(a+2).split("*")[0]??"").trim()}}return{exempt:!1,exemptReason:""}},Ba=e=>{const[t]=e.getArguments();if(t){if(o.isObjectLiteralExpression(t)){const s=t.getProperty("handler");return s?o.isPropertyAssignment(s)?s.getInitializer():o.isShorthandPropertyAssignment(s)?s.getNameNode():o.isMethodDeclaration(s)?s:void 0:void 0}return t}},qa=(e,t)=>{const s=Ba(t);if(!s)return;if(o.isArrowFunction(s)||o.isFunctionExpression(s)||o.isMethodDeclaration(s))return e;if(!o.isIdentifier(s))return;const n=s.getSourceFile(),i=s.getText(),r=n.getVariableDeclaration(i)?.getInitializer();return r&&(o.isArrowFunction(r)||o.isFunctionExpression(r))?r:n.getFunction(i)},$a=e=>{let t=!1,s=!1,n=!1,i=!1,r=!1;for(const u of e.getDescendantsOfKind(l.CallExpression))if(Ea(u)&&(r=!0),Aa(u)&&(t=!0),ya(u)&&(i=!0),Na(u)&&(s=!0),ba(u)&&(n=!0),r&&t&&i&&n)break;const{handlesErrors:a,reachesOutbound:c}=Ma(e);return{callsMail:he(e,wa),emitsEvent:he(e,Pa),fanOut:t,handlesErrors:a,reachesOutbound:c,runsAiGeneration:s||he(e,Ia),throwsBareError:Ka(e),unboundedAiGeneration:n,usesInsertManyUnsafe:i,writesUserTable:r}},ja=(e,t)=>{const s=e.getInitializer();if(!s||!o.isCallExpression(s))return;const n=_(s);if(!n||n.kind!=="query"&&n.kind!=="mutation"&&n.kind!=="action")return;const i=n.receiver?ha(n.receiver):{usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},r=qa(e,s);return{...r?$a(r):{},...Ua(e),...i,analyzableBody:r!==void 0,exportName:e.getName(),file:t,hasEmailArg:fa(s,n.receiver),kind:n.kind,visibility:n.visibility}},Va=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const i of n.getDeclarations()){const r=ja(i,t);r&&s.push(r)}return s},Wa=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Va(i,E(t,n)))}return s},Ha=new Set(["dbRateLimit","rateLimit"]),Ga=e=>o.isArrowFunction(e)?e.getBody():e,Ya=(e,t)=>{const s=A(e.getExpression());if(s===void 0||!Ha.has(s))return;const n=e.getArguments()[2];if(!n)return;const i=N(n,"key");if(!i)return;const r=Ga(i);if(!(!F(r)||K(r)))return{callee:s,exportName:v(e),file:t,limitName:yt(e),line:e.getStartLineNumber()}},Qa=(e,t)=>P(e,t,Ya),Xa=new Set(["findFirst","findFirstOrThrow","findMany","get"]),Za=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!Xa.has(t.getName()))return;const s=t.getExpression();if(D(s)){const n=e.getArguments()[0];return n&&o.isStringLiteral(n)?n.getLiteralText():""}if(o.isPropertyAccessExpression(s)&&D(s.getExpression()))return s.getName()},Ja=e=>{let t=e;for(;o.isCallExpression(t);){const s=t.getExpression();if(!o.isPropertyAccessExpression(s))return;if(s.getName()==="query"&&D(s.getExpression())){const n=t.getArguments()[0];return n&&o.isStringLiteral(n)?n.getLiteralText():""}t=s.getExpression()}},ec=e=>{let t=Ze(e)??e;for(;o.isAwaitExpression(t);)t=Ze(t.getExpression())??t.getExpression();return t},Bt=(e,t=!1)=>{const s=ec(e);if(o.isIdentifier(s)){if(t)return;const n=ie(s);return n===void 0?void 0:Bt(n,!0)}if(o.isCallExpression(s))return Za(s)??Ja(s)},tc=e=>{const t=e.getBody();if(!o.isBlock(t))return[t];const s=[];for(const n of e.getDescendantsOfKind(l.ReturnStatement)){const i=n.getFirstAncestor(a=>o.isArrowFunction(a)||o.isFunctionExpression(a)||o.isFunctionDeclaration(a)),r=n.getExpression();i===e&&r!==void 0&&s.push(r)}return s},sc=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!o.isCallExpression(s))return[];const n=_(s);if(n?.kind!=="query")return[];const i=Rt(s);if(i===void 0)return[];const r=n.receiver!==void 0&&Bs(n.receiver,"output"),a=n.receiver!==void 0&&bt(n.receiver,"use","mask"),c=new Set,u=[];for(const d of tc(i)){const x=Bt(d);x===void 0||c.has(x)||(c.add(x),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),table:x,usesMask:a,usesOutput:r,visibility:n.visibility}))}return u},nc=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...sc(c,r))}return s},rc=e=>{if(!e||!o.isObjectLiteralExpression(e))return[];const t=[];for(const s of e.getProperties())(o.isPropertyAssignment(s)||o.isShorthandPropertyAssignment(s)||o.isMethodDeclaration(s)||o.isGetAccessorDeclaration(s))&&t.push(s.getName());return t},ic=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&o.isCallExpression(s)?_(s):void 0;if(!n)return[];const i=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=Nt(r);if(a===void 0)continue;const c=rc(N(a.options,"with"));c.length!==0&&i.push({exportName:e.getName(),file:t,line:r.getStartLineNumber(),parentTable:a.table,relations:c,visibility:n.visibility})}return i},oc=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...ic(c,r))}return s},te=e=>{if(o.isStringLiteral(e)||o.isNoSubstitutionTemplateLiteral(e))return e.getLiteralText();if(o.isBinaryExpression(e)&&e.getOperatorToken().getKind()===l.PlusToken){const t=te(e.getLeft()),s=te(e.getRight());return t!==void 0&&s!==void 0?t+s:void 0}},ac=e=>{let t=e,s=t.getParent();for(;s!==void 0&&o.isBinaryExpression(s)&&s.getOperatorToken().getKind()===l.PlusToken;)t=s,s=t.getParent();return t!==e&&te(t)!==void 0},cc=/(?:^|\/)__tests__\//u,lc=/\.(?:spec|test)$/u,uc=e=>cc.test(e)||lc.test(e),dc=e=>{const t=e.getParent();if(t!==void 0){if(o.isVariableDeclaration(t)||o.isPropertyAssignment(t)||o.isPropertySignature(t))return t.getName();if(o.isBinaryExpression(t)&&t.getOperatorToken().getKind()===l.EqualsToken)return t.getLeft().getText()}},fc=(e,t,s)=>ln(e)?!uc(s)&&un(dc(t)):!0,pc=(e,t)=>{const s=[],n=[...e.getDescendantsOfKind(l.BinaryExpression),...e.getDescendantsOfKind(l.StringLiteral),...e.getDescendantsOfKind(l.NoSubstitutionTemplateLiteral)],i=new Set;for(const r of n){if(ac(r))continue;const a=te(r);if(a===void 0)continue;const c=an(a);if(c===void 0||!fc(c,r,t))continue;const u=r.getStartLineNumber(),d=`${String(u)}:${c}`;i.has(d)||(i.add(d),s.push({file:t,kind:c,line:u,preview:cn(a)}))}return s},gc=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...pc(i,E(t,n)))}return s},mc=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&o.isCallExpression(s)?_(s):void 0;if(!n)return[];const i=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=Nt(r);if(a===void 0)continue;const c=N(a.options,"includeDeleted");if(c===void 0)continue;const u=o.isTrueLiteral(c),d=!u&&F(c);!u&&!d||i.push({exportName:e.getName(),file:t,fromArgs:d,hardcodedTrue:u,line:r.getStartLineNumber(),table:a.table,visibility:n.visibility})}return i},hc=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...mc(c,r))}return s},xc=new Set(["query","unsafe"]),Ec=e=>{if(!o.isPropertyAccessExpression(e)||!xc.has(e.getName()))return!1;const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="sql")return!1;const s=t.getExpression();return o.isIdentifier(s)&&s.getText()==="ctx"},vc=e=>o.isBinaryExpression(e)||o.isTemplateExpression(e),Sc=e=>e.getFirstAncestorByKind(l.VariableDeclaration)?.getName()??"<module>",Ac=(e,t)=>{if(!Ec(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!vc(s)))return{exportName:Sc(e),file:t,line:s.getStartLineNumber()}},yc=(e,t)=>P(e,t,Ac),Nc=[["convex",["convex","@convex-dev/"]],["supabase",["@supabase/"]],["firebase",["firebase","@firebase/","firebase-admin"]]],bc=e=>{for(const[t,s]of Nc)for(const n of s)if(e===n||e.startsWith(n.endsWith("/")?n:`${n}/`))return t},Pc=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of i.getImportDeclarations()){const a=r.getModuleSpecifierValue(),c=bc(a);c!==void 0&&s.push({file:E(t,n),line:r.getStartLineNumber(),moduleSpecifier:a,platform:c})}}return s},Ic=new Set(["createMultipartUpload","delete","download","generateUploadUrl","get","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","put","resumeMultipartUpload","store","upload"]),wc=(e,t,s=[])=>{const n=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));return oe(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.storage"||r.startsWith("ctx.storage."),methods:Ic,requireUnmodifiedReach:!0}).map(r=>{const a=n.get(`${r.file}:${r.exportName}`);return a===void 0?r:{...r,visibility:a}})},Tc=new Map([["generateUploadUrl",1],["getPresignedUrl",1],["getSignedUrl",1],["store",2],["upload",2]]),Cc=e=>e&&o.isNumericLiteral(e)?Number(e.getText()):void 0,Fc=e=>{if(e===void 0)return{analyzable:!0,presentKeys:[]};if(!o.isObjectLiteralExpression(e))return{analyzable:!1,presentKeys:[]};const t=[];let s,n=!1;for(const i of e.getProperties()){if(o.isSpreadAssignment(i)){n=!0;continue}if(o.isPropertyAssignment(i)){const r=i.getName();t.push(r),r==="expiresInSeconds"&&(s=Cc(i.getInitializer()));continue}(o.isShorthandPropertyAssignment(i)||o.isMethodDeclaration(i))&&t.push(i.getName())}return{analyzable:!n,expiresInSeconds:s,presentKeys:t}},Oc=e=>{if(!o.isPropertyAccessExpression(e))return;const t=e.getName(),s=Tc.get(t);if(s===void 0)return;const n=e.getExpression().getText();return n==="ctx.storage"||n.startsWith("ctx.storage.")?{method:t,optionsIndex:s}:void 0},Rc=(e,t)=>{const s=Oc(e.getExpression());if(s!==void 0)return{exportName:v(e),file:t,line:e.getStartLineNumber(),method:s.method,...Fc(e.getArguments()[s.optionsIndex])}},Lc=(e,t)=>P(e,t,Rc),Dc=(e,t)=>({analytics:e.analytics||t.dependencies.has("@lunora/bindings"),auth:t.dependencies.has("@lunora/auth"),containers:e.container||t.containerCount>0||t.dependencies.has("@lunora/container"),flags:e.flags||t.dependencies.has("@lunora/flags"),kv:e.kv||t.dependencies.has("@lunora/bindings"),mail:e.mail||t.dependencies.has("@lunora/mail"),notifications:e.notify||t.dependencies.has("@lunora/notify"),payments:e.payments||t.hasPaymentTables,queues:t.queueCount>0||t.dependencies.has("@lunora/queue"),scheduler:e.scheduler||t.cronCount>0||t.dependencies.has("@lunora/scheduler"),storage:e.storage||t.storageRuleCount>0||t.storageColumnCount>0||t.dependencies.has("@lunora/storage"),vectors:e.vectors||t.vectorIndexCount>0||t.dependencies.has("@lunora/bindings"),workflows:e.workflows||t.workflowCount>0||t.dependencies.has("@lunora/workflow")}),kc=new Set(["RegisteredAction","RegisteredMutation","RegisteredQuery"]),Ne=e=>{const t=e.getType(),s=t.getAliasSymbol()?.getName()??t.getSymbol()?.getName();return s!==void 0&&kc.has(s)?s:void 0},qt=e=>{const t=e.getInitializer();return t===void 0?!1:o.isCallExpression(t)||o.isIdentifier(t)||o.isPropertyAccessExpression(t)},$t={cause:"codegen recognises a procedure only when the initializer is a builder chain, and this one is produced by a call or an alias",remediation:"A factory that returns a procedure cannot be read statically — inline it, or export the chain the factory builds."},Mc={cause:"the binding is exported by a separate `export { … }` statement, and codegen reads the `export` keyword on the declaration itself",remediation:"Move the keyword onto the declaration and drop the separate export statement."},be=(e,t,s,n,i)=>({cacheKey:`procedure_not_registered:${e}:${t}`,categories:["SCHEMA"],description:"Codegen registers an export only when the declaration carries `export` and its initializer is literally a builder chain. A procedure written any other way exists at runtime but never reaches `_generated/api.ts`, so no caller can address it.",detail:`\`${t}\` in \`${e}\` (line ${n.toString()}) has type \`${s}\` but was not registered — ${i.cause}.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:n,typeName:s},name:"procedure_not_registered",remediation:`Assign the builder chain directly: \`export const ${t} = query.input({ … }).query(handler);\`. ${i.remediation}`,title:"Procedure exists at runtime but is missing from the generated API"}),Kc=(e,t,s)=>{const n=[];for(const i of e.getVariableStatements().filter(r=>r.isExported()))for(const r of i.getDeclarations()){const a=r.getName();if(s.has(`${t}:${a}`)||!qt(r))continue;const c=Ne(r);c!==void 0&&n.push(be(t,a,c,r.getStartLineNumber(),$t))}return n},_c=(e,t,s)=>{if(s.has(`${t}:default`))return[];const n=[];for(const i of e.getExportAssignments().filter(r=>!r.isExportEquals())){const r=Ne(i.getExpression());r!==void 0&&n.push(be(t,"default",r,i.getStartLineNumber(),$t))}return n},zc=(e,t,s)=>{const n=[];for(const i of e.getExportDeclarations().filter(r=>r.getModuleSpecifier()===void 0))for(const r of i.getNamedExports()){const a=r.getAliasNode()?.getText()??r.getName();if(s.has(`${t}:${a}`))continue;const c=r.getLocalTargetDeclarations().find(d=>o.isVariableDeclaration(d));if(c===void 0||!qt(c))continue;const u=Ne(c);u!==void 0&&n.push(be(t,a,u,r.getStartLineNumber(),Mc))}return n},Uc=(e,t,s)=>[...Kc(e,t,s),..._c(e,t,s),...zc(e,t,s)],Bc=(e,t,s)=>{const n=new Set(s.map(r=>`${r.filePath}:${r.exportName}`)),i=[];for(const r of g(t)){const a=e.getSourceFile(r);a!==void 0&&i.push(...Uc(a,E(t,r),n))}return i.toSorted((r,a)=>r.cacheKey.localeCompare(a.cacheKey))},qc=new Set(["when","where"]),xe=new Set(["definePolicy","defineShape"]),$c=e=>{if(!o.isCallExpression(e))return;const t=e.getExpression();if(o.isPropertyAccessExpression(t)){const n=t.getName();return xe.has(n)?n:void 0}if(!o.isIdentifier(t))return;for(const n of t.getSymbol()?.getDeclarations()??[])if(o.isImportSpecifier(n)){const i=n.getNameNode().getText();return xe.has(i)?i:void 0}const s=t.getText();return xe.has(s)?s:void 0},jc=e=>o.isObjectLiteralExpression(e)&&e.getProperties().length===0,jt=e=>{if(e!==void 0){if(o.isReturnStatement(e)&&e.getExpression()===void 0||e.getKind()===l.UndefinedKeyword||e.getText()==="undefined")return"undefined";if(jc(e))return"empty-object";if(o.isParenthesizedExpression(e))return jt(e.getExpression())}},Pe=e=>e.getAncestors().find(t=>o.isArrowFunction(t)||o.isFunctionExpression(t)||o.isFunctionDeclaration(t)),Vc=e=>e.getDescendantsOfKind(l.ReturnStatement).filter(t=>Pe(t)===e),Vt=e=>e.getDescendantsOfKind(l.ConditionalExpression).filter(t=>Pe(t)===e),Wc=e=>{const t=Vc(e);return t.length>1?!0:t.some(s=>s.getFirstAncestorByKind(l.IfStatement)!==void 0)||Vt(e).length>0},Hc=e=>e.getDescendantsOfKind(l.IfStatement).filter(t=>Pe(t)===e),Se=e=>e.getKind()===l.NullKeyword||e.getKind()===l.FalseKeyword||o.isIdentifier(e)&&e.getText()==="undefined"?!0:o.isNumericLiteral(e)?e.getLiteralValue()===0:o.isStringLiteral(e)&&e.getLiteralValue()==="",Gc=(e,t)=>Se(e)||Se(t),Yc=new Map([[l.EqualsEqualsEqualsToken,"positive"],[l.EqualsEqualsToken,"positive"],[l.ExclamationEqualsEqualsToken,"negative"],[l.ExclamationEqualsToken,"negative"]]),xt=e=>!Se(e)&&(o.isLiteralExpression(e)||e.getKind()===l.TrueKeyword),Qc=(e,t,s)=>{const n=Yc.get(e);if(n!==void 0)return Gc(t,s)?n==="positive"?"negative":"positive":xt(t)||xt(s)?void 0:n},j=e=>{if(o.isParenthesizedExpression(e))return j(e.getExpression());if(o.isPrefixUnaryExpression(e)&&e.getOperatorToken()===l.ExclamationToken)return"negative";if(o.isBinaryExpression(e)){const t=e.getOperatorToken().getKind(),s=Qc(t,e.getLeft(),e.getRight());if(s!==void 0)return s;if(t===l.AmpersandAmpersandToken||t===l.BarBarToken){const n=j(e.getLeft()),i=j(e.getRight());return n===i?n:"indeterminate"}}return o.isIdentifier(e)||o.isPropertyAccessExpression(e)||o.isElementAccessExpression(e)||o.isCallExpression(e)?"positive":"indeterminate"},Et=e=>{if(e!==void 0){if(o.isReturnStatement(e))return e;if(o.isBlock(e)){const t=e.getStatements().at(-1);return t!==void 0&&o.isReturnStatement(t)?t:void 0}}},Xc=e=>{if(e.getElseStatement()!==void 0)return;const t=e.getNextSiblingIfKind(l.ReturnStatement);return t!==void 0&&t.getNextSibling()===void 0?t:void 0},Zc=e=>o.isReturnStatement(e)?e.getExpression()??e:e,Jc=e=>{const t=[];for(const s of Vt(e)){const n=j(s.getCondition());n==="positive"?t.push(s.getWhenFalse()):n==="negative"&&t.push(s.getWhenTrue())}for(const s of Hc(e)){const n=j(s.getExpression());if(n==="indeterminate")continue;const i=n==="negative"?Et(s.getThenStatement()):Et(s.getElseStatement())??Xc(s);i!==void 0&&t.push(Zc(i))}return t},el=e=>{for(const t of e.getAncestors())if(o.isVariableDeclaration(t)){const s=t.getNameNode();if(o.isIdentifier(s))return s.getText()}return"<anonymous>"},tl=(e,t,s)=>{if(!o.isCallExpression(e))return[];const[n]=e.getArguments();if(!n||!o.isObjectLiteralExpression(n))return[];const i=[];for(const r of n.getProperties()){if(!o.isPropertyAssignment(r)||!qc.has(r.getName()))continue;const a=r.getInitializer();if(!(!a||!(o.isArrowFunction(a)||o.isFunctionExpression(a)))&&Wc(a))for(const c of Jc(a)){const u=jt(c);u!==void 0&&i.push({exportName:el(e),file:s,form:u,key:r.getName(),line:c.getStartLineNumber(),owner:t})}}return i},sl=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const i=$c(n);i!==void 0&&s.push(...tl(n,i,t))}return s},nl=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...sl(i,E(t,n)))}return s},rl=new Set(["query","upsert","upsertMany"]),il=e=>{if(!o.isPropertyAccessExpression(e))return;const t=e.getName();if(rl.has(t))return e.getExpression().getText()==="ctx.vectors"?t:void 0},ol=(e,t)=>{const s=il(e.getExpression());if(s===void 0)return;const n=e.getArguments()[1];if(!n)return;const i=N(n,"namespace");if(!(!i||!F(i)||K(i)))return{exportName:v(e),file:t,line:e.getStartLineNumber(),method:s}},al=(e,t)=>P(e,t,ol),cl=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="get")return!1;const s=t.getExpression();return o.isPropertyAccessExpression(s)?s.getName()==="workflows":o.isIdentifier(s)&&s.getText()==="workflows"},ll=e=>{const t=e.getArguments()[0];return t&&o.isStringLiteral(t)?t.getLiteralText():""},ul=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of i.getDescendantsOfKind(l.CallExpression)){if(!cl(a))continue;const c=Ts(a);c!==""&&s.push({exportName:c,file:r,line:a.getStartLineNumber(),workflow:ll(a)})}}return s},dl=".lunora-schema.json",I=(e,t)=>{b(e)&&At(e,"utf8")===t||ns(e,t,"utf8")},C=(e,t)=>{if(t===""){rs(e,{force:!0});return}I(e,t)},fl=e=>{const t=f(e,"package.json");if(b(t))try{const s=JSON.parse(At(t,"utf8"));return typeof s.version=="string"&&s.version!==""?s.version:void 0}catch{return}},pl=()=>{const e=process.env.LUNORA_CODEGEN_TIMING;return e!==void 0&&e!==""},gl=e=>{let t=b(e)?e:fe(e);for(;t&&t!==fe(t);){const s=f(t,"tsconfig.json");if(b(s))return s;t=fe(t)}},vt=e=>e.replaceAll("\\","/"),ml=(e,t,s)=>{if(s&&e.length>0){const r=e.map(a=>`"${a.exportName}"`).join(", ");throw new L("MASK_UNSUPPORTED",`This project declares a \`mask(...)\` policy whose argument isn't a plain object literal (e.g. \`mask(sharedPolicies)\` referencing a hoisted variable), or contains a spread (\`...shared\`) or computed key (\`[name]:\`) codegen can't enumerate, so codegen can't tell which columns it masks. Because the project also declares replication shape(s) (${r}), codegen can't verify none of them replicate a table that policy masks — inline every table and column as literal keys so codegen can verify it, or remove the affected shape(s).`,{status:422})}const n=new Map;for(const r of t.columns){const a=n.get(r.table)??[];a.push(r.column),n.set(r.table,a)}const i=t.columns.length>0;for(const r of e){if(r.table===void 0){if(i)throw new L("MASK_UNSUPPORTED",`defineShape "${r.exportName}" has a non-literal \`table\` (a variable or expression, not a string literal), so codegen can't statically verify it doesn't replicate a table that masks a column. This project masks at least one column elsewhere, so the combination can't be proven safe — change "${r.exportName}"'s \`table\` to a plain string literal so codegen can verify it, or remove the mask(s) on the table it targets.`,{status:422});continue}const a=n.get(r.table);if(a===void 0)continue;const c=a.map(u=>`"${u}"`).join(", ");throw new L("MASK_UNSUPPORTED",`defineShape "${r.exportName}" replicates table "${r.table}", which masks column(s) ${c} on at least one procedure. A shape runs no procedure, so \`.use(mask(...))\` never applies to its replicated rows — remove the shape, unmask the table, or wait for shape-masking support.`,{status:422})}},se=(e,t,s)=>{const n=e.getSourceFile(t);if(n===void 0){e.createSourceFile(t,s,{overwrite:!0});return}n.getFullText()!==s&&n.replaceWithText(s)},St=(e,t,s)=>e.getSourceFile(t)?.getFullText()===s,hl=8,xl=e=>{const{agents:t,apiPath:s,generatedFunctionsPath:n,lunoraDirectory:i,migrations:r,project:a,shapes:c,usesSandbox:u,useUmbrella:d,workflows:x}=e;let y=Je(a,i),p=tt(a,i),O=et(a,i);vn([...y,...p].map(S=>S.filePath));for(let S=1;;S+=1){const T=Ps({agents:t,functions:y,httpRoutes:O,mutators:p,useUmbrella:d,workflows:x}),k=Is({agents:t,functions:y,migrations:r,mutators:p,shapes:c,useUmbrella:d,usesSandbox:u});if(S>=hl||St(a,s,T)&&St(a,n,k))return{apiContent:T,functions:y,functionsContent:k,httpRoutes:O,mutators:p};se(a,s,T),se(a,n,k),y=Je(a,i),p=tt(a,i),O=et(a,i)}},El=e=>{const t=gl(e);return t?new Xe({skipAddingFilesFromTsConfig:!1,tsConfigFilePath:t,useInMemoryFileSystem:!1}):new Xe({skipAddingFilesFromTsConfig:!0,useInMemoryFileSystem:!1})},fu=(e,t)=>{const s=g(t),n=f(t,"schema.ts");b(n)&&s.push(n);for(const c of s){const u=e.getSourceFile(c);u===void 0?e.addSourceFileAtPath(c):u.refreshFromFileSystemSync()}const i=new Set(s.map(c=>vt(c))),r=vt(t),a=`${r}/`;for(const c of e.getSourceFiles()){const u=c.getFilePath();(u===r||u.startsWith(a))&&!i.has(u)&&e.removeSourceFile(c)}for(const c of e.getSourceFiles()){const u=c.getFilePath();if(!(u===r||u.startsWith(a)||u.includes("/node_modules/")))try{c.refreshFromFileSystemSync()}catch{e.removeSourceFile(c)}}},pu=e=>{const t=pl(),s=t?pe.now():0,n=f(e.projectRoot,e.lunoraDirectory??"lunora"),i=f(n,"schema.ts");if(!b(i))throw new L("INTERNAL",`schema.ts not found at ${i}`);const r=e.project??El(n);xn(Si);const a=on(r,i,e.projectRoot),{agents:c,containers:u,dataModelContent:d,dependencies:x,env:y,featureUsage:p,hasBrowser:O,hasFlags:S,hasNotify:T,identity:k,platformGate:U,queues:R,serverContent:z,storageRulesMetadata:B,usesSandbox:W,useUmbrella:w,workflows:M}=_n({lunoraDirectory:n,project:r,projectRoot:e.projectRoot,schema:a,target:e.target}),m=f(n,"_generated"),Ie=f(m,"dataModel.ts"),we=f(m,"server.ts"),Wt=f(m,"api.ts"),Ht=f(m,"functions.ts");se(r,Ie,d),se(r,we,z);const Te=Qs(r,n),q=dn(r,n),{apiContent:Ce,functions:$,functionsContent:Fe,httpRoutes:Gt,mutators:Yt}=xl({agents:c,apiPath:Wt,generatedFunctionsPath:Ht,lunoraDirectory:n,migrations:Te,project:r,shapes:q,useUmbrella:w,usesSandbox:W,workflows:M}),ae=$s(r,n,M,c),H=e.lint===!1?void 0:as({adminRoutes:Wn(r,n),aiRawRuns:Yn(r,n),aiToolSideEffects:ir(r,n),argumentDerivedFetches:cr(r,n),argumentValidators:Sr(r,n),authApiCalls:qs(r,n),authConfigs:Fr(r,n),browserUrlAccesses:kr(r,n),configCalls:$r(r,n),containerKeyAccesses:Vr(r,n),containerOverrides:Xr(r,n),containers:u,exportSinks:ti(r,n),staleMigrationImports:Pc(r,n),failOpenGuards:oi(r,n),flagReads:mi(r,n),flagSecurityDefaults:vi(r,n),geoIndexUsages:Ni(r,n),httpActionGuards:Fi(r,n),httpHeaderWrites:Ui(r,n),hyperdriveCalls:Hs(r,n),identityClaimReads:Hi(r,n),imageDeliveryUrlAccesses:Yi(r,n),inserts:Gs(r,n),kvKeyAccesses:Xi(r,n),mailRecipientAccesses:so(r,n),maskProcedures:Ys(r,n),maskStrategies:uo(r,n),mutatorWrites:xo(r,n),nondeterministicCalls:Js(r,n),normalizeIdAuthorizations:Lo(r,n),notifyCalls:tn(r,n),notifyConfig:en(r,n),ownerFieldWrites:Bo(r,n,$),unrestrictedWhereBranches:nl(r,n),paymentWebhooks:Yo(r,n),privilegedDispatches:ca(r,n),procedureProtections:Wa(r,n),queries:Us(r,n),queues:R,r2sqlCalls:sn(r,n),ratelimitKeySelectors:Qa(r,n),rawRowReturns:nc(r,n),relationLoads:oc(r,n),rlsProcedures:nn(r,n),schema:a,secretLiterals:gc(r,n),shapes:q,softDeleteReads:hc(r,n),sqlInterpolations:yc(r,n),storageKeyAccesses:wc(r,n,$),storageUploads:Lc(r,n),vectorNamespaceAccesses:al(r,n),workflowCalls:ul(r,n),workflows:M,wranglerVariables:e.wranglerVariables}),Oe=H===void 0?[]:[...is(H,{source:"static"}),...Bc(r,n,$)],Qt=rn(r,n),Re=ao(r,n);ml(q,Re,io(r,n));const Xt=S?ui(r,n):[],G=Dc(p,{containerCount:u.length,cronCount:ae.length,dependencies:x,hasPaymentTables:jo(a.tables),queueCount:R.length,storageColumnCount:Object.keys(ps(a)).length,storageRuleCount:B.rules.length,vectorIndexCount:a.vectorIndexes.length,workflowCount:M.length}),Le=t?pe.now():0,ce=En(a,Te.map(h=>h.id)),De=gs({advisories:Oe,advisorProcedures:H?.procedureProtections??[],agents:c,containers:u,env:y,flagKeys:Xt,hasAccessFacade:p.access,hasAi:p.ai,hasAnalytics:p.analytics,hasBrowser:O,hasFlags:S,hasHyperdrive:p.hyperdrive,hasImages:p.images,hasKv:p.kv,hasNotify:T,hasPayments:p.payments,hasPipelines:p.pipelines,hasR2sql:p.r2sql,hasX402:p.x402,maskMetadata:Re,mutators:Yt,queues:R,rlsMetadata:Qt,schema:a,schemaSnapshot:ce,shapes:q,storageRules:B,studioFeatures:G,useUmbrella:w,workflows:M}),ke=ms(q,x.has("@lunora/db"),w),Me=hs(u,a.jurisdiction),Ke=xs(M),_e=Es(c),ze=vs(R),Ue=Ss(ae),Be=As(a.vectorIndexes),Y=ys(a,w),qe=Ns(x.has("@lunora/seed")),Q=e.apiSpec??"openapi",le=Q==="openapi"||Q==="both",ue=Q==="openrpc"||Q==="both",$e=fn({emailAgents:c.filter(h=>h.onEmail===!0).map(h=>({bindingName:h.bindingName,exportName:h.exportName})),hasAccess:x.has("@lunora/cloudflare-access"),hasAi:p.ai,hasAnalytics:p.analytics,hasAuth:x.has("@lunora/auth"),hasBrowser:O,hasFramework:x.has("@lunora/astro")||x.has("@lunora/svelte")||x.has("@lunora/vue"),hasGlobal:a.tables.some(h=>h.shardMode==="global"&&h.globalBackend!=="hyperdrive"),hasHyperdrive:p.hyperdrive,hasHyperdriveGlobal:a.tables.some(h=>h.shardMode==="global"&&h.globalBackend==="hyperdrive"),hasImages:p.images,hasKv:p.kv,hasKvIntrospector:G.kv,hasNotify:T,hasPayments:p.payments,hasR2sql:p.r2sql,hasQueue:R.some(h=>h.mode==="push"),hasScheduler:G.scheduler,hasStorage:G.storage,hasVectors:a.vectorIndexes.length>0,hasWorkflow:M.length>0,hasX402:p.x402,identity:k,jurisdiction:a.jurisdiction,tableNames:a.tables.map(h=>h.name),useUmbrella:w,voiceAgents:c.filter(h=>h.voice===!0&&h.voiceBindingName!==void 0).map(h=>({bindingName:h.voiceBindingName,exportName:h.exportName})),wantsOpenApi:le,wantsOpenRpc:ue}),je=fl(e.projectRoot),Ve=pn({functions:$,httpRoutes:Gt,version:je}),We=mn({functions:$,version:je}),He=`${JSON.stringify(Ve,void 0,2)}
8
- `,Ge=`${JSON.stringify(We,void 0,2)}
9
- `,Ye=gn(Ve),Qe=hn(We),de=f(n,dl),Zt=b(de);if(e.dryRun||(b(m)||ss(m,{recursive:!0}),I(f(m,"app.ts"),$e),I(Ie,d),I(f(m,"api.ts"),Ce),I(we,z),I(f(m,"functions.ts"),Fe),I(f(m,"shard.ts"),De),I(f(m,"crons.ts"),Ue),I(f(m,"vectors.ts"),Be),I(f(m,"drizzle.global.ts"),Y.global),I(f(m,"drizzle.shard.ts"),Y.shard),C(f(m,"containers.ts"),Me),C(f(m,"workflows.ts"),Ke),C(f(m,"agents.ts"),_e),C(f(m,"queues.ts"),ze),C(f(m,"seed.ts"),qe),C(f(m,"collections.ts"),ke),C(f(m,"openapi.json"),le?He:""),C(f(m,"openapi.ts"),le?Ye:""),C(f(m,"openrpc.json"),ue?Ge:""),C(f(m,"openrpc.ts"),ue?Qe:""),(!Zt||e.updateSchemaBaseline===!0)&&I(de,os(ce))),t){const h=pe.now(),Jt=Math.round(h-s),es=Math.round(Le-s),ts=Math.round(h-Le);console.error(`@lunora/codegen: codegen took ${Jt.toString()}ms (discovery ${es.toString()}ms, emit ${ts.toString()}ms)`)}return{advisories:Oe,advisorContext:H,agents:c,containers:u,cronTriggers:bs(ae),generated:{agents:_e,api:Ce,app:$e,collections:ke,containers:Me,crons:Ue,dataModel:d,drizzleGlobal:Y.global,drizzleShard:Y.shard,functions:Fe,openApi:He,openApiModule:Ye,openRpc:Ge,openRpcModule:Qe,queues:ze,seed:qe,server:z,shard:De,vectors:Be,workflows:Ke},outputDirectory:m,platformDiagnostics:U.diagnostics,queues:R,schemaSnapshot:ce,schemaSnapshotPath:de,workflows:M}};export{dl as SCHEMA_SNAPSHOT_FILENAME,El as createCodegenProject,gl as findTsconfig,fu as refreshCodegenProject,pu as runCodegen};
@@ -1,2 +0,0 @@
1
- const r=(e,i=2166136261)=>{let t=i;for(let s=0;s<e.length;s+=1)t^=e.codePointAt(s)??0,t=Math.imul(t,16777619);return(t>>>0).toString(16).padStart(8,"0")},l=e=>`${r(e,2166136261)}${r(e,16777619)}`,g=1;function S(e){const i={},t=Object.keys(e);t.sort();for(const s of t)i[s]=e[s];return i}const c=e=>`${JSON.stringify(e,void 0,2)}
2
- `,$=e=>l(c(e)),a=e=>typeof e=="object"&&e!==null,p=e=>a(e)&&a(e.fields)&&a(e.indexes)&&a(e.relations)&&typeof e.shardMode=="string",O=e=>{if(e===void 0||e.trim()==="")return{status:"absent"};let i;try{i=JSON.parse(e)}catch(s){return{error:`baseline is not valid JSON: ${s instanceof Error?s.message:String(s)}`,status:"invalid"}}if(!a(i)||i.version!==1||!a(i.tables))return{error:`baseline is malformed or written by an incompatible version (expected version ${String(1)})`,status:"invalid"};for(const[s,o]of Object.entries(i.tables))if(!p(o))return{error:`baseline table "${s}" has an invalid structure`,status:"invalid"};return{snapshot:{jurisdiction:typeof i.jurisdiction=="string"?i.jurisdiction:void 0,migrationIds:Array.isArray(i.migrationIds)?i.migrationIds:[],tables:i.tables,version:1},status:"ok"}},f=(e,i)=>e.unique===i.unique&&e.fields.length===i.fields.length&&e.fields.every((t,s)=>t===i.fields[s]),h=(e,i,t,s)=>{const o=[];return t.kind!==s.kind&&o.push({severity:"breaking",summary:`field ${e}.${i} changed type: ${t.kind} → ${s.kind} — add a data migration to convert existing values`,table:e,scope:"table",type:"changedFieldKind"}),t.optional&&!s.optional?o.push({severity:"breaking",summary:`field ${e}.${i} became required — rows missing it would be invalid; add a data migration to backfill it`,table:e,scope:"table",type:"fieldOptionalToRequired"}):!t.optional&&s.optional&&o.push({scope:"table",severity:"safe",summary:`field ${e}.${i} became optional`,table:e,type:"fieldRequiredToOptional"}),o},u=(e,i,t)=>t.optional?{scope:"table",severity:"safe",summary:`added optional field ${e}.${i}`,table:e,type:"addedOptionalField"}:{severity:"breaking",summary:`added required field ${e}.${i} — existing rows have no value; add a data migration to backfill it`,table:e,scope:"table",type:"addedRequiredField"},y=(e,i,t,s)=>{for(const[o,d]of Object.entries(t.fields)){const n=i.fields[o];n===void 0?s.push(u(e,o,d)):s.push(...h(e,o,n,d))}for(const o of Object.keys(i.fields))t.fields[o]===void 0&&s.push({severity:"breaking",summary:`removed field ${e}.${o} — add a data migration if stored data must be cleaned up`,table:e,scope:"table",type:"removedField"})},m=(e,i,t,s)=>{for(const[o,d]of Object.entries(t.indexes)){const n=i.indexes[o];if(n===void 0){s.push({scope:"table",severity:"safe",summary:`added index ${o} on ${e}`,table:e,type:"addedIndex"});continue}f(n,d)||s.push({severity:"breaking",summary:`index ${o} on ${e} changed shape — a query may have relied on the old index`,table:e,scope:"table",type:"changedIndex"})}for(const o of Object.keys(i.indexes))t.indexes[o]===void 0&&s.push({severity:"breaking",summary:`removed index ${o} on ${e} — a query that used \`.withIndex("${o}")\` would break`,table:e,scope:"table",type:"removedIndex"})},v=(e,i,t,s)=>{for(const o of Object.keys(t.relations))i.relations[o]===void 0&&s.push({scope:"schema",severity:"safe",summary:`added relation ${e}.${o}`,table:e,type:"addedRelation"});for(const o of Object.keys(i.relations))t.relations[o]===void 0&&s.push({scope:"schema",severity:"breaking",summary:`removed relation ${e}.${o}`,table:e,type:"removedRelation"})},b=(e,i,t,s)=>{i.shardMode!==t.shardMode&&s.push({severity:"breaking",summary:`table ${e} changed shard mode: ${i.shardMode} → ${t.shardMode} — its physical storage moves, and existing rows do NOT follow the schema; re-home them with an export/import round trip (https://lunora.sh/docs/concepts/sharding#migrating-a-populated-table)`,table:e,scope:"table",type:"changedShardMode"}),y(e,i,t,s),m(e,i,t,s),v(e,i,t,s)},x=(e,i)=>{const t=[],s=e?.tables??{};for(const[o,d]of Object.entries(i.tables)){const n=s[o];if(n===void 0){t.push({scope:"table",severity:"safe",summary:`added table ${o}`,table:o,type:"addedTable"});continue}b(o,n,d,t)}for(const o of Object.keys(s))i.tables[o]===void 0&&t.push({scope:"table",severity:"breaking",summary:`removed table ${o} — add a data migration if its data must be archived/cleaned up`,table:o,type:"removedTable"});if(e!==void 0&&e.jurisdiction!==i.jurisdiction){const o=e.jurisdiction??"(none)",d=i.jurisdiction??"(none)";t.push({scope:"schema",severity:"breaking",summary:`Durable Object jurisdiction changed from ${o} to ${d} — this re-homes every DO and strands all existing shard, scheduler, and session-DO data in the old region (no in-place migration; export then import to move it). Revert the change, or override the gate to proceed intentionally.`,type:"changedJurisdiction"})}return{changes:t}};export{g as SCHEMA_SNAPSHOT_VERSION,x as diffSchemaSnapshots,$ as hashSchemaSnapshot,p as isValidTableSnapshot,O as parseSnapshotJson,c as serializeSchemaSnapshot,S as sortKeys};
@@ -1,16 +0,0 @@
1
- import{LunoraError as g}from"@lunora/errors";import{SCHEMA_SNAPSHOT_VERSION as m,sortKeys as b,diffSchemaSnapshots as S,parseSnapshotJson as k}from"./SCHEMA_SNAPSHOT_VERSION-DLXXalg2.mjs";import{serializeSchemaSnapshot as O}from"./SCHEMA_SNAPSHOT_VERSION-DLXXalg2.mjs";const w=e=>e==="global"||e==="root"?e:`shardBy:${e.field}`,$=e=>e.kind==="optional"?{kind:e.inner?.kind??"unknown",optional:!0}:{kind:e.kind,optional:!1},v=e=>{const t={};for(const[n,o]of Object.entries(e.shape))t[n]=$(o);const a={};for(const n of e.indexes)a[n.name]={fields:[...n.fields],unique:n.unique??!1};const s={};for(const n of e.relations)s[n.name]={field:n.field,kind:n.kind,table:n.table};return{fields:t,indexes:a,relations:s,shardMode:w(e.shardMode)}},D=(e,t)=>{const a={};for(const n of e.tables)a[n.name]=v(n);const s=[...t].sort();return{jurisdiction:e.jurisdiction,migrationIds:s,tables:b(a),version:m}};class y extends g{constructor(t){super("SCHEMA_SNAPSHOT_PARSE",t,{name:"SchemaSnapshotParseError"})}}const L=e=>{const t=k(e);if(t.status==="invalid")throw new y(t.error);return t.status==="ok"?t.snapshot:void 0},E={deploy:{allowDrift:!0,updateBaseline:!0},prepare:{allowDrift:!0,updateBaseline:!0},verify:{allowDrift:!0,updateBaseline:!1}},f=" • For backward-compatible changes (e.g. adding an optional field): pass `--allow-schema-drift` to skip the block.",p=" • To accept the new shape without a migration (you know data is compatible): pass `--update-schema-baseline`.",I=e=>{const t=e===void 0?void 0:E[e];if(e===void 0||t===void 0)return`${f}
2
- ${p}
3
- `;const a=t.updateBaseline?p:` • To accept the new shape without a migration, run \`lunora prepare --update-schema-baseline\` — \`lunora ${e}\` does not take that flag.`;return`${f}
4
- ${a}
5
- `},T=e=>{const{allowDrift:t=!1,baseline:a,command:s,current:n}=e,o=S(a,n),d=o.changes.filter(r=>r.severity==="breaking"),l=n.migrationIds.filter(r=>!(a?.migrationIds??[]).includes(r)),i=(r,c)=>({blocked:r,changes:o.changes,newMigrationIds:l,reason:c});if(o.changes.length===0||a===void 0)return i(!1,"");if(d.length===0){const r=o.changes.map(c=>` - ${c.summary}`).join(`
6
- `);return i(!1,`schema drift detected (all additive/safe):
7
- ${r}`)}const u=d.map(r=>` - ${r.summary}`).join(`
8
- `);if(l.length>0)return i(!1,`breaking schema drift detected, but ${String(l.length)} new migration(s) were added (${l.join(", ")}):
9
- ${u}`);const h=`deploy blocked: ${String(d.length)} breaking schema change(s) detected since the last blessed schema baseline — these changes are incompatible with existing data without a migration:
10
- ${u}
11
-
12
- To fix:
13
- • For breaking changes: add a \`defineMigration({ id, table, up })\` in lunora/ for each affected table, then run \`lunora migrate\` (or \`lunora codegen\`) to apply and re-bless the baseline.
14
- ${I(s)}Docs: https://lunora.dev/docs/migrations`;return t?i(!1,`${h}
15
-
16
- (overridden by --allow-schema-drift)`):i(!0,h)};export{m as SCHEMA_SNAPSHOT_VERSION,y as SchemaSnapshotParseError,D as buildSchemaSnapshot,S as diffSchemaSnapshots,T as evaluateSchemaDrift,L as parseSchemaSnapshot,O as serializeSchemaSnapshot};
@@ -1 +0,0 @@
1
- import{readdirSync as x,lstatSync as E}from"node:fs";import{join as m,extname as A,relative as b,sep as y}from"node:path";import{Node as r,SyntaxKind as p}from"ts-morph";import{diagnosticAt as S}from"./CodegenDiagnosticError-BUXlG3P-.mjs";const h=/\.ts$/u,P=(e,t)=>b(e,t).split(y).join("/").replace(h,""),f=(e,t=[],s=e)=>{let n;try{n=x(e)}catch{return t}for(const i of n){const o=m(e,i),a=E(o);if(a.isDirectory()){if(i==="_generated"||i==="node_modules")continue;f(o,t,s)}else if(a.isFile()&&A(i)===".ts"){if(i==="schema.ts"&&e===s)continue;t.push(o)}}return t},T=(e,t,s)=>{const n=[];for(const i of f(t)){const o=e.getSourceFile(i)??e.addSourceFileAtPath(i),a=P(t,i);for(const d of o.getDescendantsOfKind(p.CallExpression)){const c=s(d,a);c!==void 0&&n.push(c)}}return n},D=e=>{for(const t of e.getAncestors())if(r.isVariableDeclaration(t)&&t.getVariableStatement()?.hasExportKeyword()===!0)return t.getName();return""},I=(e,t)=>{if(t){const o=e.getArguments()[0];return o&&(r.isArrowFunction(o)||r.isFunctionExpression(o))?o:void 0}const s=e.getArguments()[0];if(!s||!r.isObjectLiteralExpression(s))return;const n=s.getProperty("handler");if(!n||!r.isPropertyAssignment(n))return;const i=n.getInitializer();return i&&(r.isArrowFunction(i)||r.isFunctionExpression(i))?i:void 0},z=(e,t)=>{if(!e||!r.isObjectLiteralExpression(e))return;const s=e.getProperty(t);return s&&r.isPropertyAssignment(s)?s.getInitializer():void 0},l=e=>r.isPropertyAccessExpression(e)&&e.getName()==="db"||r.isIdentifier(e)&&e.getText()==="db",w=new Set(["findFirst","findFirstOrThrow","findMany"]),C=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||!w.has(t.getName()))return;const s=t.getExpression();if(l(s)){const n=e.getArguments()[0];return{options:e.getArguments()[1],table:n&&r.isStringLiteral(n)?n.getLiteralText():""}}if(r.isPropertyAccessExpression(s)){const n=s.getExpression();if(l(n))return{options:e.getArguments()[0],table:s.getName()}}},g=(e,t)=>{const s=e.getExpression();return!r.isPropertyAccessExpression(s)||!t.has(s.getName())?!1:l(s.getExpression())},u=e=>{const t=e.getArguments()[0];return t&&r.isStringLiteral(t)?t.getLiteralText():""},R=(e,t,s)=>{const n=new Set,i=new Set;for(const o of e.getDescendantsOfKind(p.CallExpression))if(g(o,t)){const a=u(o);a!==""&&n.add(a)}else if(g(o,s)){const a=u(o);a!==""&&i.add(a)}return{tablesRead:[...n],tablesWritten:[...i]}},v=e=>{let t=e;for(;t&&(r.isAsExpression(t)||r.isSatisfiesExpression(t)||r.isParenthesizedExpression(t)||r.isNonNullExpression(t));)t=t.getExpression();return t},V=e=>{const t=v(e);return t&&r.isCallExpression(t)?t:void 0},_=e=>{const t=e.getExportAssignment(i=>!i.isExportEquals());if(!t)return;const s=t.getExpression();if(!r.isIdentifier(s))return s;const n=s.getSymbol()?.getValueDeclaration();return n&&r.isVariableDeclaration(n)?n.getInitializer():s},K=e=>{const t=e.getArguments()[1];return t&&r.isStringLiteral(t)?t.getLiteralValue():""},$=(e,t)=>{if(!r.isObjectLiteralExpression(e))return;const s=e.getProperty(t);if(!s||!r.isPropertyAssignment(s))return;const n=s.getInitializer();return n&&r.isStringLiteral(n)?n.getLiteralText():void 0},j=e=>r.isIdentifier(e)&&e.getText()==="ctx",M=e=>(t,s,n)=>{if(r.isStringLiteral(t)||r.isNoSubstitutionTemplateLiteral(t))return t.getLiteralValue();throw S(t,`${e} "${s}": \`${n}\` must be a static string literal — it is deploy configuration codegen writes into wrangler.jsonc`)};export{P as a,v as b,$ as c,_ as d,D as e,T as f,K as g,I as h,l as i,j,f as l,z as p,C as r,M as s,R as t,V as u};
@@ -1 +0,0 @@
1
- import{w as a}from"./classify-procedure-call-AKeIK05y.mjs";const l=s=>a(s,"use","rls");export{l as r};
@@ -1 +0,0 @@
1
- import{d as o}from"./context-property-calls-DXH-4MTZ.mjs";const t=(r,e)=>o(r,e,"sql");export{t as default};
@@ -1 +0,0 @@
1
- import"./ast-CjWtsS6S.mjs";import"./classify-procedure-call-AKeIK05y.mjs";import{d as p}from"./index-CCDlo9L7.mjs";export{p as default};
@@ -1 +0,0 @@
1
- import{d as a}from"./queries-B_xEHIeL.mjs";import"./ast-CjWtsS6S.mjs";export{a as default};
@@ -1 +0,0 @@
1
- import{d as r}from"./context-property-calls-DXH-4MTZ.mjs";const t=(s,o)=>r(s,o,"r2sql");export{t as default};
@@ -1 +0,0 @@
1
- import{l as u}from"./ast-CjWtsS6S.mjs";const i=new Set(["@lunora/agent","@lunora/agent/sandbox"]),d=o=>{const s={usesSandboxBrowser:!1,usesSandboxContainer:!1};if(!i.has(o.getModuleSpecifierValue())||o.isTypeOnly())return s;for(const e of o.getNamedImports()){if(e.isTypeOnly())continue;const n=e.getNameNode().getText();n==="browserTool"?s.usesSandboxBrowser=!0:n==="containerTool"&&(s.usesSandboxContainer=!0)}return s},S=(o,s)=>{const e={usesSandboxBrowser:!1,usesSandboxContainer:!1};for(const n of u(s)){const a=o.getSourceFile(n)??o.addSourceFileAtPath(n);for(const t of a.getImportDeclarations()){const r=d(t);e.usesSandboxBrowser||=r.usesSandboxBrowser,e.usesSandboxContainer||=r.usesSandboxContainer}if(e.usesSandboxBrowser&&e.usesSandboxContainer)break}return e};export{S as discoverSandboxUsage};