@lunora/codegen 1.0.0-alpha.147 → 1.0.0-alpha.149

package/dist/packem_shared/{emitApp-DoR55vKV.mjs → emitApp-DcrQNgaz.mjs}

@@ -1,4 +1,4 @@
-import{A as S,G as D}from"./emit-BcAkLUfn.mjs";const E=e=>`has${e.charAt(0).toUpperCase()}${e.slice(1)}`,v=S.map(({appMethod:e,key:t})=>[E(t),e.method,e.configKey,e.doc]),m=e=>v.some(([t])=>e[t]),A=e=>e?['import * as lunoraIdentityContract from "../identity.js";']:[],x=(e,t)=>e?['import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";',`import { createAccessResolver${t?", composeResolvers":""} } from "@lunora/cloudflare-access";`]:[],R=e=>e?['import { createKvIntrospectorFromEnv } from "@lunora/bindings/kv";']:[],C=e=>e?['import notifyConfig from "../notify.js";']:[],k=e=>(e.emailAgents?.length??0)>0,O=e=>k(e)?['import { dispatchAgentEmail } from "@lunora/agent/inbound";']:[],T=e=>k(e)?['import * as lunoraAgentDefinitions from "../agents.js";']:[],L=e=>{const{hasAccess:t,hasAuth:a,hasFramework:r,hasGlobal:n,hasHyperdriveGlobal:s,hasKvIntrospector:l,hasQueue:o,hasScheduler:d,hasStorage:h,hasWorkflow:u,useUmbrella:c,wantsOpenApi:p,wantsOpenRpc:b}=e,i=c?"lunorash/runtime":"@lunora/runtime",g=["ExecutionContextLike","HttpRouterLike","LunoraWorker","Route","ScheduledControllerLike","ShardNamespaceLike","WorkerOptions"];n&&g.push("GlobalIntrospector","AdminTableResolver"),r&&g.push("FrameworkHostHandler");const f=[...n||s?["createCrossShardRelationCapabilities"]:[],"createWorker","resolveLogArchiveFromEnv",...r?["withFrameworkWorker"]:[]].join(", ");return[...a?['import type { AuthNamespaceLike, LunoraAuth, LunoraAuthOptions } from "@lunora/auth";','import { createAuth, createAuthAdmin, createAuthAuditReader, createDoAuthWiring, d1Executor, ensureMigrated, handleAuthRequest, lunoraD1Adapter } from "@lunora/auth";']:[],...x(t,a),...n?['import type { D1CtxDbOptions, D1DatabaseLike, D1Exec } from "@lunora/d1";','import { applyCdcChanges, createD1CtxDb, exportGlobalRows, facetGlobalColumn, importGlobalRows, listGlobalTables, readD1CdcChanges, readGlobalTablePage, retryingExec } from "@lunora/d1";']:[],...s?['import type { HyperdriveEngine } from "@lunora/hyperdrive/global";','import { createHyperdriveGlobalCtxDb } from "@lunora/hyperdrive/global";','import type { SqlCtxDbOptions, SqlExec } from "@lunora/sql-store";']:[],...R(l),...d?['import type { DurableObjectNamespaceLike } from "@lunora/scheduler";','import { createScheduler } from "@lunora/scheduler";']:[],...h?['import type { R2BucketLike, R2S3Credentials, Storage } from "@lunora/storage";','import { createBucketStorage, createStorage } from "@lunora/storage";']:[],...u?['import { createWorkflowsRestClient } from "@lunora/workflow";']:[],...O(e),`import type { ${[...g].toSorted((w,y)=>w.localeCompare(y)).join(", ")} } from "${i}";`,`import { ${f} } from "${i}";`,"",...A(e.identity),...T(e),...n||s?['import schema from "../schema.js";']:[],...C(e.hasNotify),'import { LUNORA_CRONS } from "./crons.js";','import { LUNORA_FUNCTIONS } from "./functions.js";',...o?['import { createQueueCaptureSink, dispatchQueueBatch, shouldCaptureQueue } from "@lunora/queue";','import { LUNORA_QUEUE_REGISTRY } from "./queues.js";']:[],...p?['import { openApiSpec } from "./openapi.js";']:[],...b?['import { openRpcSpec } from "./openrpc.js";']:[],'import { createShardDO } from "./shard.js";']},I=e=>[...e.hasStorage?['/** `.storage(...)` declaration — one bucket (required) plus optional extra named buckets and signed-URL config. Backs `ctx.storage` AND the studio file browser. */\ninterface StorageDeclaration<Env> {\n    /** The default R2 bucket binding (the bare `ctx.storage`). */\n    bucket: Selector<Env, R2BucketLike>;\n    /** Extra named buckets, reached via `ctx.storage.bucket("name")` and the studio\'s bucket picker. */\n    buckets?: Record<string, Selector<Env, R2BucketLike>>;\n    /** Public base URL signed/public object URLs resolve against. */\n    publicBaseUrl?: Selector<Env, string>;\n    /** R2 S3-API credentials (`{ accountId, accessKeyId, secretAccessKey, bucket, jurisdiction? }`) enabling `ctx.storage.getPresignedUrl` — native S3 presigned URLs that hit R2 directly, bypassing the worker. Omit to use only the worker-signed `getSignedUrl` path. */\n    s3?: Selector<Env, R2S3Credentials>;\n    /** HMAC secret for signed URLs. */\n    signingSecret?: Selector<Env, string>;\n}']:[],...e.hasScheduler?["/** `.scheduler(...)` declaration — the `SchedulerDO` namespace plus the worker origin its callbacks dispatch back to. Backs `ctx.scheduler` AND the studio's scheduled-jobs view. */\ninterface SchedulerDeclaration<Env> {\n    /** The `SchedulerDO` namespace binding (typically `env.SCHEDULER`). */\n    namespace: Selector<Env, DurableObjectNamespaceLike & ShardNamespaceLike>;\n    /** The worker origin the `SchedulerDO` dispatches HTTP job callbacks back to. */\n    origin?: Selector<Env, string>;\n}"]:[],...e.hasGlobal?["/** `.global(...)` declaration — the D1 binding backing `.global()` tables. Backs cross-tenant `ctx.db` reads/writes AND the studio's global data browser. */\ninterface GlobalDeclaration<Env> {\n    /** The D1 binding (typically `env.DB`). */\n    d1: Selector<Env, D1DatabaseLike>;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}"]:[],...e.hasHyperdriveGlobal?['/** `.hyperdriveGlobal(...)` declaration — backs `.global({ backend: "hyperdrive" })` tables on a Postgres/MySQL database via Hyperdrive. Stays reactive: the writer is injected as `globalDb` and the broadcast hook drives live queries. */\ninterface HyperdriveGlobalDeclaration<Env> {\n    /** The Hyperdrive engine — selects the Postgres or MySQL dialect. */\n    engine: HyperdriveEngine;\n    /** Build the `SqlExec` from `env` — e.g. `buildPgExec(fromPostgresJs(postgres(env.HYPERDRIVE.connectionString)))`. Cache the driver on the DO instance; rebuild lazily after hibernation. */\n    exec: (env: Env) => SqlExec;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}']:[],...e.hasAuth?['/** `.auth(...)` declaration — better-auth options plus the storage the adapter reads. Give it `d1` (the default) or `namespace` (a Durable Object that hosts the auth tables), never both. The builder owns the lazy build + `ensureMigrated` dance and wires `authHandler` / `resolveIdentity` / `authAdmin`. */\ninterface AuthDeclaration<Env> {\n    /** The D1 binding the auth SQL adapter is wired over (via `lunoraD1Adapter`). Omit only when using `namespace`. */\n    d1?: Selector<Env, unknown>;\n    /** Shared secret the worker presents on the object\'s internal session route. REQUIRED with `namespace`: the binding is reachable from any worker bound to it, so the secret — not the binding — is the authorization boundary. Without it identity resolution fails closed. */\n    internalSecret?: Selector<Env, string>;\n    /** Name of the Durable Object instance holding the auth tables. Defaults to `"auth"`. Set it to run separate auth objects (per deployment, per tenant) off one namespace. */\n    objectName?: Selector<Env, string>;\n    /** The auth Durable Object namespace — the DO-backed mode. Needed for `@better-auth/scim`, which requires native transactions that D1 has none of. The object owns the auth tables, so `/api/auth/*` and identity resolution both go through it. Typed as `AuthNamespaceLike` because `createDoAuthWiring` resolves through `idFromName` + `get` and has no `getByName` fallback — both members are load-bearing here, and `ShardNamespaceLike` leaves both optional. */\n    namespace?: Selector<Env, AuthNamespaceLike>;\n    /** Build the better-auth options from `env` (secret, plugins, email/password, …). */\n    options: (env: Env) => LunoraAuthOptions;\n}']:[]],q=e=>[...e.hasAccess?["    private accessSelector?: Selector<Env, CreateAccessResolverOptions | undefined>;"]:[],"    private adminToken?: Selector<Env, string>;",...e.hasAuth?["    private authDeclaration?: AuthDeclaration<Env>;"]:[],"    private cdcEnabled = false;","    private reactiveCacheConfig: boolean | { maxBytes?: number; maxEntries?: number } = false;","    private readonly extendFns: ((env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>)[] = [];",...e.hasGlobal?["    private globalDeclaration?: GlobalDeclaration<Env>;"]:[],...e.hasHyperdriveGlobal?["    private hyperdriveGlobalDeclaration?: HyperdriveGlobalDeclaration<Env>;"]:[],"    private httpRouterApp?: HttpRouterLike;","    private readonly routeMap: Record<string, Route> = {};",...e.hasScheduler?["    private schedulerDeclaration?: SchedulerDeclaration<Env>;"]:[],...m(e)?["    private readonly shardExtras: Partial<ShardConfig> = {};"]:[],"    private shardSelector?: Selector<Env, ShardNamespaceLike>;",...e.hasStorage?["    private storageDeclaration?: StorageDeclaration<Env>;"]:[]],N=e=>v.filter(([t])=>e[t]).map(([,t,a,r])=>`    /** ${r} */
+import{A as S,G as D}from"./emit-CXfWb_pY.mjs";const E=e=>`has${e.charAt(0).toUpperCase()}${e.slice(1)}`,v=S.map(({appMethod:e,key:t})=>[E(t),e.method,e.configKey,e.doc]),m=e=>v.some(([t])=>e[t]),x=e=>e?['import * as lunoraIdentityContract from "../identity.js";']:[],A=(e,t)=>e?['import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";',`import { createAccessResolver${t?", composeResolvers":""} } from "@lunora/cloudflare-access";`]:[],R=e=>e?['import { createKvIntrospectorFromEnv } from "@lunora/bindings/kv";']:[],C=e=>e?['import notifyConfig from "../notify.js";']:[],k=e=>(e.emailAgents?.length??0)>0,O=e=>k(e)?['import { dispatchAgentEmail } from "@lunora/agent/inbound";']:[],T=e=>k(e)?['import * as lunoraAgentDefinitions from "../agents.js";']:[],L=e=>{const{hasAccess:t,hasAuth:a,hasFramework:r,hasGlobal:n,hasHyperdriveGlobal:s,hasKvIntrospector:c,hasQueue:o,hasScheduler:d,hasStorage:h,hasWorkflow:u,useUmbrella:l,wantsOpenApi:p,wantsOpenRpc:b}=e,i=l?"lunorash/runtime":"@lunora/runtime",g=["ExecutionContextLike","HttpRouterLike","LunoraWorker","Route","ScheduledControllerLike","ShardNamespaceLike","WorkerOptions"];n&&g.push("GlobalIntrospector","AdminTableResolver"),r&&g.push("FrameworkHostHandler");const f=[...n||s?["createCrossShardRelationCapabilities"]:[],"createWorker","resolveLogArchiveFromEnv",...r?["withFrameworkWorker"]:[]].join(", ");return[...a?['import type { AuthNamespaceLike, LunoraAuth, LunoraAuthOptions } from "@lunora/auth";','import { createAuth, createAuthAdmin, createAuthAuditReader, createDoAuthWiring, d1Executor, ensureMigrated, handleAuthRequest, lunoraD1Adapter } from "@lunora/auth";']:[],...A(t,a),...n?['import type { D1CtxDbOptions, D1DatabaseLike, D1Exec } from "@lunora/d1";','import { applyCdcChanges, createD1CtxDb, exportGlobalRows, facetGlobalColumn, importGlobalRows, listGlobalTables, readD1CdcChanges, readGlobalTablePage, retryingExec } from "@lunora/d1";']:[],...s?['import type { HyperdriveEngine } from "@lunora/hyperdrive/global";','import { createHyperdriveGlobalCtxDb } from "@lunora/hyperdrive/global";','import type { SqlCtxDbOptions, SqlExec } from "@lunora/sql-store";']:[],...R(c),...d?['import type { DurableObjectNamespaceLike } from "@lunora/scheduler";','import { createScheduler } from "@lunora/scheduler";']:[],...h?['import type { R2BucketLike, R2S3Credentials, Storage } from "@lunora/storage";','import { createBucketStorage, createStorage } from "@lunora/storage";']:[],...u?['import { createWorkflowsRestClient } from "@lunora/workflow";']:[],...O(e),`import type { ${[...g].toSorted((w,y)=>w.localeCompare(y)).join(", ")} } from "${i}";`,`import { ${f} } from "${i}";`,"",...x(e.identity),...T(e),...n||s?['import schema from "../schema.js";']:[],...C(e.hasNotify),'import { LUNORA_CRONS } from "./crons.js";','import { LUNORA_FUNCTIONS } from "./functions.js";',...o?['import { createQueueCaptureSink, dispatchQueueBatch, shouldCaptureQueue } from "@lunora/queue";','import { LUNORA_QUEUE_REGISTRY } from "./queues.js";']:[],...p?['import { openApiSpec } from "./openapi.js";']:[],...b?['import { openRpcSpec } from "./openrpc.js";']:[],'import { createShardDO } from "./shard.js";']},I=e=>[...e.hasStorage?['/** `.storage(...)` declaration — one bucket (required) plus optional extra named buckets and signed-URL config. Backs `ctx.storage` AND the studio file browser. */\ninterface StorageDeclaration<Env> {\n    /** The default R2 bucket binding (the bare `ctx.storage`). */\n    bucket: Selector<Env, R2BucketLike>;\n    /** Extra named buckets, reached via `ctx.storage.bucket("name")` and the studio\'s bucket picker. */\n    buckets?: Record<string, Selector<Env, R2BucketLike>>;\n    /** Public base URL signed/public object URLs resolve against. */\n    publicBaseUrl?: Selector<Env, string>;\n    /** R2 S3-API credentials (`{ accountId, accessKeyId, secretAccessKey, bucket, jurisdiction? }`) enabling `ctx.storage.getPresignedUrl` — native S3 presigned URLs that hit R2 directly, bypassing the worker. Omit to use only the worker-signed `getSignedUrl` path. */\n    s3?: Selector<Env, R2S3Credentials>;\n    /** HMAC secret for signed URLs. */\n    signingSecret?: Selector<Env, string>;\n}']:[],...e.hasScheduler?["/** `.scheduler(...)` declaration — the `SchedulerDO` namespace plus the worker origin its callbacks dispatch back to. Backs `ctx.scheduler` AND the studio's scheduled-jobs view. */\ninterface SchedulerDeclaration<Env> {\n    /** The `SchedulerDO` namespace binding (typically `env.SCHEDULER`). */\n    namespace: Selector<Env, DurableObjectNamespaceLike & ShardNamespaceLike>;\n    /** The worker origin the `SchedulerDO` dispatches HTTP job callbacks back to. */\n    origin?: Selector<Env, string>;\n}"]:[],...e.hasGlobal?["/** `.global(...)` declaration — the D1 binding backing `.global()` tables. Backs cross-tenant `ctx.db` reads/writes AND the studio's global data browser. */\ninterface GlobalDeclaration<Env> {\n    /** The D1 binding (typically `env.DB`). */\n    d1: Selector<Env, D1DatabaseLike>;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}"]:[],...e.hasHyperdriveGlobal?['/** `.hyperdriveGlobal(...)` declaration — backs `.global({ backend: "hyperdrive" })` tables on a Postgres/MySQL database via Hyperdrive. Stays reactive: the writer is injected as `globalDb` and the broadcast hook drives live queries. */\ninterface HyperdriveGlobalDeclaration<Env> {\n    /** The Hyperdrive engine — selects the Postgres or MySQL dialect. */\n    engine: HyperdriveEngine;\n    /** Build the `SqlExec` from `env` — e.g. `buildPgExec(fromPostgresJs(postgres(env.HYPERDRIVE.connectionString)))`. Cache the driver on the DO instance; rebuild lazily after hibernation. */\n    exec: (env: Env) => SqlExec;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}']:[],...e.hasAuth?['/** `.auth(...)` declaration — better-auth options plus the storage the adapter reads. Give it `d1` (the default) or `namespace` (a Durable Object that hosts the auth tables), never both. The builder owns the lazy build + `ensureMigrated` dance and wires `authHandler` / `resolveIdentity` / `authAdmin`. */\ninterface AuthDeclaration<Env> {\n    /** The D1 binding the auth SQL adapter is wired over (via `lunoraD1Adapter`). Omit only when using `namespace`. */\n    d1?: Selector<Env, unknown>;\n    /** Shared secret the worker presents on the object\'s internal session route. REQUIRED with `namespace`: the binding is reachable from any worker bound to it, so the secret — not the binding — is the authorization boundary. Without it identity resolution fails closed. */\n    internalSecret?: Selector<Env, string>;\n    /** Name of the Durable Object instance holding the auth tables. Defaults to `"auth"`. Set it to run separate auth objects (per deployment, per tenant) off one namespace. */\n    objectName?: Selector<Env, string>;\n    /** The auth Durable Object namespace — the DO-backed mode. Needed for `@better-auth/scim`, which requires native transactions that D1 has none of. The object owns the auth tables, so `/api/auth/*` and identity resolution both go through it. Typed as `AuthNamespaceLike` because `createDoAuthWiring` resolves through `idFromName` + `get` and has no `getByName` fallback — both members are load-bearing here, and `ShardNamespaceLike` leaves both optional. */\n    namespace?: Selector<Env, AuthNamespaceLike>;\n    /** Build the better-auth options from `env` (secret, plugins, email/password, …). */\n    options: (env: Env) => LunoraAuthOptions;\n}']:[]],q=e=>[...e.hasAccess?["    private accessSelector?: Selector<Env, CreateAccessResolverOptions | undefined>;"]:[],"    private adminToken?: Selector<Env, string>;",...e.hasAuth?["    private authDeclaration?: AuthDeclaration<Env>;"]:[],"    private cdcEnabled = false;","    private reactiveCacheConfig: boolean | { maxBytes?: number; maxEntries?: number } = false;","    private readonly extendFns: ((env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>)[] = [];",...e.hasGlobal?["    private globalDeclaration?: GlobalDeclaration<Env>;"]:[],...e.hasHyperdriveGlobal?["    private hyperdriveGlobalDeclaration?: HyperdriveGlobalDeclaration<Env>;"]:[],"    private httpRouterApp?: HttpRouterLike;","    private readonly routeMap: Record<string, Route> = {};",...e.hasScheduler?["    private schedulerDeclaration?: SchedulerDeclaration<Env>;"]:[],...m(e)?["    private readonly shardExtras: Partial<ShardConfig> = {};"]:[],"    private shardSelector?: Selector<Env, ShardNamespaceLike>;",...e.hasStorage?["    private storageDeclaration?: StorageDeclaration<Env>;"]:[]],N=e=>v.filter(([t])=>e[t]).map(([,t,a,r])=>`    /** ${r} */
     public ${t}(factory: NonNullable<ShardConfig["${a}"]>): this {
         this.shardExtras.${a} = factory;
 
@@ -197,7 +197,29 @@ ${a.join(`
 
                 const session = await auth.api.getSession({ headers: (request as Request).headers });
 
-                return session?.user?.id ? { userId: session.user.id } : null;
+                if (!session?.user?.id) {
+                    return null;
+                }
+
+                // \`role\` rides along so \`rls(policies, { roles })\` and \`auth.can(...)\`
+                // work on this wiring without a hand-written resolver. better-auth's
+                // \`admin()\` plugin owns that column (comma-joined for multiple roles)
+                // and only an administrator can write it; it is absent when the plugin
+                // is off, which reads as no roles.
+                //
+                // \`expiresAtMs\` is the socket credential expiry the runtime forwards
+                // as \`x-lunora-identity-exp\`. Without it the DO's expiry check never
+                // fires, so a signed-out, banned or lapsed user keeps streaming their
+                // RLS-scoped rows over an already-open WebSocket while every HTTP call
+                // is anonymous. better-auth hands back a \`Date\`; anything else means
+                // the adapter did not hydrate it, and omitting beats guessing.
+                const expiresAt = session.session.expiresAt;
+
+                return {
+                    ...(expiresAt instanceof Date ? { expiresAtMs: expiresAt.getTime() } : {}),
+                    role: (session.user as { role?: unknown }).role,
+                    userId: session.user.id,
+                };
             };
             const authInstance = getAuth();
 
@@ -350,6 +372,19 @@ const buildExec = (database: D1DatabaseLike, bookmark?: string, onBookmark?: (bo
                 .bind(...parameters)
                 .all<Record<string, unknown>>();
 
+            // \`all\` carries writes, not just reads: D1 runs
+            // \`UPDATE/DELETE … RETURNING\` through it exactly like \`.run()\`, and
+            // that is precisely what \`@lunora/sql-store\` issues for its
+            // optimistic-concurrency compare-and-swap — so \`patch\`, \`replace\`
+            // and \`delete\` all land here and nowhere else. Without this the
+            // bookmark those writes produced was never reported, and the next
+            // read could pin a replica that has not seen them: read-your-writes
+            // lost on the exact path the bookmark exists for. Reporting it after
+            // a plain \`SELECT\` too is harmless and correct — the session's
+            // bookmark only ever moves forward, and \`setOutboundBookmark\` takes
+            // the last value.
+            onBookmark?.(session?.getBookmark() ?? undefined);
+
             return result.results;
         },
         // D1's own \`batch\` runs the whole array as one atomic SQLite
@@ -507,7 +542,7 @@ const buildGlobalCdcApplier =
 
         return request.changes.length;
     };
-`:"",_=e=>[...e.hasAuth?["AuthDeclaration"]:[],"ComposedApp",...e.hasGlobal?["GlobalDeclaration"]:[],...e.hasScheduler?["SchedulerDeclaration"]:[],"Selector",...e.hasStorage?["StorageDeclaration"]:[]].toSorted((t,a)=>t.localeCompare(a)).join(", "),F=e=>{const{hasAuth:t}=e,a=I(e),r=B(e),n=t?`        let auth: LunoraAuth | null = null;
+`:"",U=e=>[...e.hasAuth?["AuthDeclaration"]:[],"ComposedApp",...e.hasGlobal?["GlobalDeclaration"]:[],...e.hasScheduler?["SchedulerDeclaration"]:[],"Selector",...e.hasStorage?["StorageDeclaration"]:[]].toSorted((t,a)=>t.localeCompare(a)).join(", "),F=e=>{const{hasAuth:t}=e,a=I(e),r=B(e),n=t?`        let auth: LunoraAuth | null = null;
 `:"",s=t?`
         const ensureAuth = async (env: Env): Promise<void> => {
             if (!this.authDeclaration || auth) {
@@ -528,10 +563,10 @@ const buildGlobalCdcApplier =
             // migrator). For production run the migrate command ahead of deploy.
             await ensureMigrated(createAuth({ ...this.authDeclaration.options(env), database: d1(env) as never }));
         };
-`:"",l=t?`
+`:"",c=t?`
                 await ensureAuth(env);`:"",o=t?"() => auth":"() => null",d=t?"getAuth: () => LunoraAuth | null":"_getAuth: () => null",h=e.hasFramework?`        const buildWorker = (env: Env): LunoraWorker =>
-            host ? withFrameworkWorker(host, (hostEnv) => this.buildWorkerOptions(hostEnv as Env, ${o})) : createWorker(this.buildWorkerOptions(env, ${o}));`:`        const buildWorker = (env: Env): LunoraWorker => createWorker(this.buildWorkerOptions(env, ${o}));`,u=e.hasFramework?"host?: FrameworkHostHandler":"",c=e.emailAgents??[],p=c.length>0?`        composed.email = dispatchAgentEmail([
-${c.map(i=>`            { agent: lunoraAgentDefinitions.${i.exportName}, binding: ${JSON.stringify(i.bindingName)} },`).join(`
+            host ? withFrameworkWorker(host, (hostEnv) => this.buildWorkerOptions(hostEnv as Env, ${o})) : createWorker(this.buildWorkerOptions(env, ${o}));`:`        const buildWorker = (env: Env): LunoraWorker => createWorker(this.buildWorkerOptions(env, ${o}));`,u=e.hasFramework?"host?: FrameworkHostHandler":"",l=e.emailAgents??[],p=l.length>0?`        composed.email = dispatchAgentEmail([
+${l.map(i=>`            { agent: lunoraAgentDefinitions.${i.exportName}, binding: ${JSON.stringify(i.bindingName)} },`).join(`
 `)}
         ]);
 
@@ -588,7 +623,7 @@ ${h}
         const composed: ComposedApp = {
             ShardDO,
             fetch: async (request: Request, rawEnv: unknown, context: ExecutionContextLike): Promise<Response> => {
-                const env = rawEnv as Env;${l}
+                const env = rawEnv as Env;${c}
                 worker ??= buildWorker(env);
 
                 return worker.fetch(request, rawEnv, context);
@@ -655,5 +690,5 @@ ${H(e.hasGlobal)}
 const defineApp = <Env extends object>(): AppBuilder<Env> => new AppBuilder<Env>();
 
 export { AppBuilder, defineApp };
-export type { ${_(e)} };
+export type { ${U(e)} };
 `};export{F as emitApp};

package/dist/packem_shared/parse-validator-CMV0eq2a.mjs

@@ -0,0 +1 @@
+import{LunoraError as m}from"@lunora/errors";import{Node as i}from"ts-morph";import{diagnosticAt as p}from"./CodegenDiagnosticError-BUXlG3P-.mjs";let d;const F=e=>{d=e},y=/^[A-Za-z_$][\w$]*$/u,f=new Set(["$defaultFn","$onUpdateFn","$type","default","defaultNow","nullable","serverDefault","unique"]),h=(e,r)=>{const t={notNull:!0,...e.column};switch(r){case"$defaultFn":case"default":case"defaultNow":case"serverDefault":{t.hasDefault=!0;break}case"$onUpdateFn":{t.hasOnUpdate=!0;break}case"$type":break;case"nullable":{t.notNull=!1;break}case"unique":{t.unique=!0;break}}return{...e,column:t}},S=new Set(["any","bigint","boolean","bytes","date","geoPoint","null","number","string","timestamp"]),g=new Set(["check","email","int","length","max","min","pattern","positive","url"]),b=new Set(["meta"]),k=new Set(["strip"]),c=new Set,N=e=>{const r=e.getSymbol();let t=(r?.getAliasedSymbol()??r)?.getValueDeclaration();if(t!==void 0&&i.isShorthandPropertyAssignment(t)){const n=t.getValueSymbol();t=(n?.getAliasedSymbol()??n)?.getValueDeclaration()}if(!(t===void 0||!i.isVariableDeclaration(t)))return t.getInitializer()},E="v",A=e=>{if(i.isIdentifier(e))return!0;let r=e;for(;i.isCallExpression(r);){const t=r.getExpression();if(!i.isPropertyAccessExpression(t))return!1;r=t.getExpression()}return i.isIdentifier(r)&&r.getText()===E},l=e=>{if(i.isIdentifier(e)&&!c.has(e)){const r=N(e);if(r!==void 0&&A(r)){c.add(e);try{return l(r)}finally{c.delete(e)}}}return i.isCallExpression(e)?w(e):{kind:"any",sourceText:e.getText()}},v=e=>{const r={};for(const t of e.getProperties()){const n=i.isShorthandPropertyAssignment(t);if(!n&&!i.isPropertyAssignment(t))continue;const o=t.getNameNode();if(i.isComputedPropertyName(o))continue;const a=n?t.getNameNode():t.getInitializer();if(!a)continue;const s=t.getName();if(!y.test(s))throw new m("INTERNAL",`@lunora/codegen: field name is not a valid JS identifier: ${JSON.stringify(s)}`);r[s]=l(a)}return r},u=(e,r)=>e&&i.isExpression(e)?l(e):r,T=e=>e===void 0?"undefined":i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e)?JSON.stringify(e.getLiteralValue()):e.getText(),I=e=>{const r=e&&d?d(e):void 0;return r===void 0?{kind:"from"}:{kind:"from",tsType:r}},L=(e,r,t)=>{if(S.has(e))return{kind:e};const[n,o]=r;switch(e){case"array":return{inner:u(n,{kind:"any"}),kind:"array"};case"from":return I(n);case"id":{if(!n||!i.isStringLiteral(n))throw p(n??t,`v.id(...) target table must be a string literal — codegen resolves foreign-key targets statically. Got ${n?n.getText():"no argument"}.`);return{kind:"id",tableName:n.getLiteralText()}}case"literal":return{kind:"literal",literalValue:T(n)};case"object":return n&&i.isObjectLiteralExpression(n)?{kind:"object",shape:v(n)}:{kind:"object",shape:{}};case"optional":return{inner:u(n,{kind:"any"}),kind:"optional"};case"record":return{keyType:u(n,{kind:"string"}),kind:"record",valueType:u(o,{kind:"any"})};case"storage":return n&&i.isStringLiteral(n)?{bucket:n.getLiteralText(),kind:"storage"}:{kind:"storage"};case"union":return{kind:"union",members:r.filter(a=>i.isExpression(a)).map(a=>l(a))};default:throw new m("INTERNAL",`Unsupported validator kind: ${e}`)}},x=e=>{const[r]=e;if(e.length!==1||r===void 0||!i.isNumericLiteral(r))return;const t=Number(r.getText().replaceAll("_",""));return Number.isSafeInteger(t)&&t>=0?t:void 0},w=e=>{const r=e.getExpression();if(!i.isPropertyAccessExpression(r))return{kind:"any",sourceText:e.getText()};const t=r.getName(),n=e.getArguments();if(f.has(t)||g.has(t)||b.has(t)||k.has(t)){const o=r.getExpression(),a=i.isExpression(o)?l(o):{kind:"any"};if(f.has(t))return h(a,t);if(!g.has(t))return a;const s=t==="max"&&a.kind==="string"?x(n):void 0;return s!==void 0?{...a,hasRefinement:!0,stringMaxLength:Math.min(a.stringMaxLength??s,s)}:{...a,hasRefinement:!0,unmodelledRefinement:!0}}return L(t,n,e)};export{v as a,l as p,F as s};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/codegen",
-  "version": "1.0.0-alpha.147",
+  "version": "1.0.0-alpha.149",
   "description": "Code generator for Lunora: emits _generated/{api,server,dataModel}.ts from your schema",
   "keywords": [
     "cloudflare",
@@ -46,15 +46,15 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/advisor": "1.0.0-alpha.103",
-    "@lunora/agent": "1.0.0-alpha.79",
-    "@lunora/container": "1.0.0-alpha.38",
-    "@lunora/errors": "1.0.0-alpha.27",
-    "@lunora/platform": "1.0.0-alpha.23",
-    "@lunora/queue": "1.0.0-alpha.40",
-    "@lunora/scheduler": "1.0.0-alpha.47",
-    "@lunora/values": "1.0.0-alpha.35",
-    "@lunora/workflow": "1.0.0-alpha.40",
+    "@lunora/advisor": "1.0.0-alpha.105",
+    "@lunora/agent": "1.0.0-alpha.81",
+    "@lunora/container": "1.0.0-alpha.40",
+    "@lunora/errors": "1.0.0-alpha.29",
+    "@lunora/platform": "1.0.0-alpha.24",
+    "@lunora/queue": "1.0.0-alpha.42",
+    "@lunora/scheduler": "1.0.0-alpha.49",
+    "@lunora/values": "1.0.0-alpha.37",
+    "@lunora/workflow": "1.0.0-alpha.42",
     "jsonc-parser": "^3.3.1",
     "quicktype-core": "^26.0.0",
     "ts-morph": "^28.0.0"

package/dist/packem_shared/DEFAULT_TARGET-BvzxeWRZ.mjs

@@ -1 +0,0 @@
-import{existsSync as c,readFileSync as p}from"node:fs";import{join as m}from"node:path";import{NODE_CAPABILITIES as f,CLOUDFLARE_CAPABILITIES as h}from"@lunora/platform";import{parse as g}from"jsonc-parser";const v="cloudflare",y="lunora.json",b=r=>{const e=m(r,y);if(!c(e))return;let a;try{a=p(e,"utf8")}catch{return}const s=[],n=g(a,s,{allowTrailingComma:!0});if(s.length>0||n===null||typeof n!="object")return;const{target:o}=n;return typeof o=="string"&&o.length>0?o:void 0},E=(r,e)=>e??b(r)??v,i={cloudflare:h,node:f},L=()=>Object.keys(i).toSorted((r,e)=>r.localeCompare(e)),T={access:null,ai:"ai",analytics:"analytics",browser:"browser",container:"containers",flags:null,hyperdrive:"hyperdrive",images:"images",kv:"keyValueStore",mail:"mail",notify:null,payments:null,pipelines:"pipelines",r2sql:null,scheduler:"scheduler",storage:"objectStorage",vectors:"vectorStore",workflows:"workflows",x402:null},_=["commitOrderedTables","crossShardFanout","durableStreams","globalTables","queues","secrets"],d={commitOrderedTables:"commit-ordered tables (`.commitOrdered()`)",crossShardFanout:"cross-shard fan-out queries (a `.shardBy(...)` schema)",durableStreams:"durable streams (`.stream(handler, { durable: true })`)",globalTables:"global tables (`.global()`)",queues:"queues (`defineQueue`)",secrets:"the secrets store (`ctx.secrets`)"},$=(r,e,a,s={})=>{const n={...r},o=[];for(const[t,l]of Object.entries(T)){if(l===null||!r[t])continue;const u=e.features[l]?.level;u==="unsupported"?(n[t]=!1,o.push({feature:t,level:"error",message:`${e.name} does not support "${t}" (ctx.${t}). Its surface was omitted from the generated types.`,name:"platform_unsupported_feature",remediation:`Remove the ctx.${t} usage, or deploy to a target whose capability matrix marks "${l}" as native or emulated.`,target:a})):u===void 0&&(n[t]=!1,o.push({feature:t,level:"error",message:`${e.name}'s capability matrix does not declare a support level for "${t}" (ctx.${t}). Treated as unsupported and its surface was omitted from the generated types.`,name:"platform_undeclared_feature",remediation:`Rate "${l}" in the ${e.name} capability matrix as "native", "emulated", or "unsupported" — an undeclared feature fails closed rather than shipping a surface the host may not provide.`,target:a}))}for(const t of _){if(s[t]!==!0)continue;const l=e.features[t]?.level;l==="unsupported"?o.push({level:"error",message:`${e.name} does not support ${d[t]}, which this app declares.`,name:"platform_unsupported_feature",remediation:`Remove the declaration, or deploy to a target whose capability matrix marks "${t}" as native or emulated.`,target:a}):l===void 0&&o.push({level:"error",message:`${e.name}'s capability matrix does not declare a support level for ${d[t]}, which this app declares. Treated as unsupported.`,name:"platform_undeclared_feature",remediation:`Rate "${t}" in the ${e.name} capability matrix as "native", "emulated", or "unsupported" — an undeclared feature fails closed rather than letting the app deploy onto a primitive the host may not provide.`,target:a})}return{diagnostics:o,usage:n}},O=(r,e,a={})=>{const s=i[e];return s===void 0?{diagnostics:[{level:"error",message:`Unknown deploy target "${e}" — no capability matrix is registered for it. Codegen emitted the full Cloudflare surface un-gated.`,name:"platform_unknown_target",remediation:`Use a registered target (${Object.keys(i).join(", ")}) or install the target's @lunora/platform-${e} package.`,target:e}],usage:{...r}}:$(r,s,e,a)};export{T as CAPABILITY_TO_FEATURE,v as DEFAULT_TARGET,y as PROJECT_CONFIG_FILE,$ as gateAgainstMatrix,O as gatePlatformFeatures,L as platformMatrixIds,b as readProjectTarget,E as resolveCodegenTarget};

package/dist/packem_shared/SCHEMA_SNAPSHOT_FILENAME-CeOctEWC.mjs

@@ -1,9 +0,0 @@
-import{existsSync as b,mkdirSync as ns,readFileSync as At,writeFileSync as rs,rmSync as is}from"node:fs";import{join as f,dirname as pe}from"node:path";import{performance as ge}from"node:perf_hooks";import{runAdvisor as os}from"@lunora/advisor";import{LunoraError as L}from"@lunora/errors";import{SyntaxKind as l,Node as o,Project as Xe}from"ts-morph";import{serializeSchemaSnapshot as as}from"./SCHEMA_SNAPSHOT_VERSION-CTWRkAF5.mjs";import{toAdvisorContext as cs}from"./formatAdvisories-CkEu1eye.mjs";import{s as ls}from"./paths-C-9fwEgQ.mjs";import{discoverAgents as us}from"./AGENTS_FILENAME-B1Abt3Gl.mjs";import{discoverContainers as ds}from"./CONTAINERS_FILENAME-CtcysaKS.mjs";import{diagnosticAt as ne}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{b as re}from"./module-specifiers-WF8iAydP.mjs";import{C as me,i as fs,f as ps,n as gs,j as ms,b as hs,c as xs,l as Es,e as vs,o as Ss,d as As,k as ys,g as Ns,p as bs,m as Ps,a as Is,h as ws}from"./emit-BcAkLUfn.mjs";import{l as g,a as v,f as P,p as N,g as yt,j as Nt,k as ve,h as Ts,i as D,b as Ze,r as bt,e as Cs}from"./ast-BYoSZlae.mjs";import Fs from"./readPackageDependencies-C6h6FZuP.mjs";import{discoverQueues as Os}from"./QUEUES_FILENAME-C-pzLGy4.mjs";import{discoverSandboxUsage as Rs}from"./discoverSandboxUsage-CJhnKA0_.mjs";import Ls from"./discoverStorageRulesMetadata-C7XmORWp.mjs";import{discoverWorkflows as Ds}from"./WORKFLOWS_FILENAME-BfvqsG9Z.mjs";import{gatePlatformFeatures as ks,resolveCodegenTarget as Ms}from"./DEFAULT_TARGET-BvzxeWRZ.mjs";import{i as F,a as K,e as E,r as Ks,b as _s,s as ie,c as zs,f as Us,d as Bs}from"./queries-Ddvo5dCs.mjs";import{a as A,c as _,d as Pt,e as qs}from"./classify-procedure-call-Ib2EMtFH.mjs";import $s from"./discoverAuthApiCalls-DoNQSgso.mjs";import js from"./discoverCrons-DCxl4hty.mjs";import Je from"./discoverFunctions-C29Tvxas.mjs";import{i as Vs,r as Ws,e as Hs}from"./unwrap-handler-return-CmIWbykC.mjs";import et from"./discoverHttpRoutes-CFIXlUy4.mjs";import Gs from"./discoverHyperdriveCalls-DTq4PKT5.mjs";import Ys from"./discoverInserts-qU5F4W4g.mjs";import{m as ye,a as Z,s as It,d as Qs}from"./index-xGhyK9J_.mjs";import{e as wt}from"./exported-procedure-chains-M40rbSYM.mjs";import Xs from"./discoverMigrations-BFkJQ8Sy.mjs";import{MUTATORS_FILENAME as Zs,isDefineMutatorCallee as Js,discoverMutators as tt}from"./MUTATORS_FILENAME-BKSzaCkq.mjs";import en from"./discoverNondeterministicCalls-B-NNzzPW.mjs";import{discoverNotifyConfig as tn,discoverNotifyCalls as sn}from"./NOTIFY_FILENAME-CKO5gtGe.mjs";import nn from"./discoverR2sqlCalls-C2GtrFnl.mjs";import rn from"./discoverRlsProcedures-fAhxiIyD.mjs";import on from"./discoverRlsMetadata-BKcUnSNr.mjs";import an from"./discoverSchema-CubSTjtY.mjs";import{secretKindOf as cn,redact as ln,isHeuristicSecretKind as un,isSecretishName as dn}from"./redact-Cy14LEnc.mjs";import{discoverShapes as fn}from"./SHAPES_FILENAME-D3N7xcEk.mjs";import{emitApp as pn}from"./emitApp-DoR55vKV.mjs";import{buildOpenApiDocument as gn,emitOpenApiModule as mn}from"./buildOpenApiDocument-D40ZeYsu.mjs";import{buildOpenRpcDocument as hn,emitOpenRpcModule as xn}from"./OPENRPC_VERSION-CdKqq_QT.mjs";import{s as En}from"./parse-validator-Q58kladC.mjs";import{buildSchemaSnapshot as vn}from"./SchemaSnapshotParseError-qXCOA7dD.mjs";const Sn=e=>{const t=new Map;for(const s of e){const n=ls(s),i=t.get(n);if(i===void 0){t.set(n,s);continue}if(i!==s)throw new L("INTERNAL",`@lunora/codegen: "${i}" and "${s}" both map to the api namespace "${n}" — the generated api.ts would declare "${n}" twice and the dispatch key "${n}:<fn>" would be ambiguous. Rename one file so the two differ by more than a non-identifier character (\`-\`, \`.\`, \`/\` and \`_\` all sanitize to \`_\`).`,{status:500})}},An=e=>{const t=[],s=e.tables.filter(n=>n.shardMode==="global");return s.some(n=>n.globalBackend!=="hyperdrive")&&t.push({name:"@lunora/d1",reason:"`.global()` tables are D1-backed, so `_generated/app.ts` imports the D1 `ctx.db` adapter"}),s.some(n=>n.globalBackend==="hyperdrive")&&t.push({name:"@lunora/hyperdrive",reason:'`.global({ backend: "hyperdrive" })` tables route through `@lunora/hyperdrive/global`'}),e.vectorIndexes.length>0&&t.push({name:"@lunora/bindings",reason:"`.vectorize()` indexes make `_generated/vectors.ts` import `@lunora/bindings/vectors`"}),t},yn=(e,t)=>{if(t===void 0)return;const s=An(e).filter(i=>!t.has(i.name));if(s.length===0)return;const n=s.map(i=>`  - ${i.name} — ${i.reason}`).join(`
-`);throw new L("INTERNAL",`@lunora/codegen: this schema's generated code imports packages the project does not declare:
-${n}
-
-Install them with your package manager, then re-run codegen.`)},Nn="env.ts",bn=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineEnv";for(const s of t.getDeclarations())if(o.isImportSpecifier(s))return re(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineEnv":!1;return!1},Pn=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!o.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&re(n.getModuleSpecifierValue())}return!1},In=e=>{if(o.isIdentifier(e))return bn(e);if(o.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineEnv"&&o.isIdentifier(t)&&Pn(t)}return!1},wn=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!In(n.getExpression()))continue;const r=s.getNameNode();if(!o.isIdentifier(r))throw ne(r,"defineEnv exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},Tn=(e,t)=>{const s=f(t,Nn);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),i=wn(n);if(i.length!==0){if(i.length>1)throw ne(n,`lunora/env.ts declares ${i.length.toString()} defineEnv() contracts (${i.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return i[0]}},Cn=e=>{const t=n=>o.isIdentifier(n)&&n.getText()==="ctx",s=new Set;for(const n of e.getDescendantsOfKind(l.PropertyAccessExpression))t(n.getExpression())&&s.add(n.getName());for(const n of e.getDescendantsOfKind(l.VariableDeclaration)){const i=n.getInitializer(),r=n.getNameNode();if(!(i===void 0||!t(i)||!o.isObjectBindingPattern(r)))for(const a of r.getElements()){const c=a.getPropertyNameNode()?.getText()??a.getName();c&&s.add(c)}}return s},Fn=(e,t)=>{const s=Object.fromEntries(me.map(n=>[n.key,!1]));for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=new Set(i.getImportDeclarations().map(c=>c.getModuleSpecifierValue())),a=Cn(i);for(const c of me)if(!s[c.key]){if(r.has(c.moduleSpecifier)){s[c.key]=!0;continue}c.contextProperty!==void 0&&a.has(c.contextProperty)&&(s[c.key]=!0)}if(me.every(c=>s[c.key]))break}return s},Tt="identity.ts",On=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineIdentity";for(const s of t.getDeclarations())if(o.isImportSpecifier(s))return re(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineIdentity":!1;return!1},Rn=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!o.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&re(n.getModuleSpecifierValue())}return!1},Ln=e=>{if(o.isIdentifier(e))return On(e);if(o.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineIdentity"&&o.isIdentifier(t)&&Rn(t)}return!1},Dn=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!Ln(n.getExpression()))continue;const r=s.getNameNode();if(!o.isIdentifier(r))throw ne(r,"defineIdentity exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},kn=(e,t)=>{const s=f(t,Tt);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),i=Dn(n);if(i.length!==0){if(i.length>1)throw ne(n,`lunora/identity.ts declares ${i.length.toString()} defineIdentity() contracts (${i.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return i[0]}},Mn=e=>o.isObjectLiteralExpression(e)&&e.getProperties().some(t=>(o.isPropertyAssignment(t)||o.isShorthandPropertyAssignment(t))&&t.getName()==="durable"),Kn=(e,t)=>{const s={durableStreams:!1,secrets:!1};for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);if(s.secrets||(s.secrets=i.getDescendantsOfKind(l.PropertyAccessExpression).some(r=>r.getName()==="secrets"&&o.isIdentifier(r.getExpression())&&r.getExpression().getText()==="ctx")),s.durableStreams||(s.durableStreams=i.getDescendantsOfKind(l.CallExpression).some(r=>{const a=r.getExpression();return(o.isPropertyAccessExpression(a)?a.getName():a.getText())==="stream"&&r.getArguments().some(u=>Mn(u))})),s.durableStreams&&s.secrets)break}return s},_n=(e,t)=>{const s=new Map,n=new Map,i=new Map;for(const r of e)s.set(r.name,`workflow "${r.exportName}"`),n.set(r.bindingName,`workflow "${r.exportName}"`),i.set(r.className,`workflow "${r.exportName}"`);for(const r of t){const a=s.get(r.name);if(a!==void 0)throw new L("DUPLICATE_WORKFLOW_NAME",`Duplicate deployed name "${r.name}": produced by both ${a} and agent "${r.exportName}". Workflow and agent names share the same wrangler workflows[] array and must be unique together.`,{status:500});const c=n.get(r.bindingName);if(c!==void 0)throw new L("DUPLICATE_WORKFLOW_BINDING",`Duplicate binding "${r.bindingName}": produced by both ${c} and agent "${r.exportName}". Workflow and agent bindings share the same wrangler workflows[] array and must be unique together.`,{status:500});const u=i.get(r.className);if(u!==void 0)throw new L("DUPLICATE_WORKFLOW_CLASS",`Duplicate generated class "${r.className}": produced by both ${u} and agent "${r.exportName}". Workflow and agent export names must yield unique generated class names.`,{status:500})}},zn=e=>{const{lunoraDirectory:t,project:s,projectRoot:n,schema:i}=e,r=kn(s,t),a=Tn(s,t),c=Ds(s,t),u=Os(s,t),d=us(s,t);_n(c,d);const x=ds(s,t),y=Ls(s,t),p=Kn(s,t),O=ks(Fn(s,t),Ms(n,e.target),{commitOrderedTables:i.tables.some(I=>I.commitOrdered===!0),crossShardFanout:i.tables.some(I=>typeof I.shardMode=="object"),durableStreams:p.durableStreams,globalTables:i.tables.some(I=>I.shardMode==="global"),queues:u.length>0,secrets:p.secrets}),S=O.usage,T=Rs(s,t),k=S.browser||T.usesSandboxBrowser,U=Fs(n),R=U??new Set,z=R.has("lunorash");yn(i,U);const B=b(f(t,"flags.ts")),W=b(f(t,"notify.ts"));return{agents:d,containers:x,dataModelContent:ps(i),declaredDependencies:U,dependencies:R,env:a,featureUsage:S,hasBrowser:k,hasFlags:B,hasNotify:W,identity:r,platformGate:O,queues:u,serverContent:fs({agents:d,containers:x,env:a,hasAccessFacade:S.access,hasAi:S.ai,hasAnalytics:S.analytics,hasBrowser:k,hasFlags:B,hasHyperdrive:S.hyperdrive,hasImages:S.images,hasKv:S.kv,hasNotify:W,hasPayments:S.payments,hasPipelines:S.pipelines,hasR2sql:S.r2sql,hasX402:S.x402,identity:r,queues:u,schema:i,storageRuleBuckets:y.rules.map(I=>I.bucket),useUmbrella:z,workflows:c}),storageRulesMetadata:y,usesSandbox:T.usesSandboxBrowser||T.usesSandboxContainer||T.usesSandboxFs,useUmbrella:z,workflows:c}},Ct=new Set(["delete","get","head","options","patch","post","put"]),Un=new Set(["handler","stream"]),Bn=/\/(?:_|admin|internal|superuser|sudo|root|debug)/iu,st=new Set(["ADMIN_TOKEN","adminToken","assertAdmin","assertAuth","auth","Authorization","getSession","identity","isAdmin","requireAdmin","requireAuth","requireRole","verifyAdmin"]),qn=e=>{if(!o.isCallExpression(e))return;const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!Ct.has(t.getName()))return;const s=t.getExpression();if(!o.isIdentifier(s)||s.getText()!=="httpRoute")return;const n=e.getArguments()[0];if(!(!n||!o.isStringLiteral(n)))return{method:t.getName().toUpperCase(),path:n.getLiteralValue()}},$n=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t))return;let s=t.getExpression();for(;o.isCallExpression(s);){const n=s.getExpression();if(!o.isPropertyAccessExpression(n)||Ct.has(n.getName()))break;s=n.getExpression()}return qn(s)},jn=e=>{for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression))if(st.has(t.getName()))return!0;for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=t.getExpression();if(o.isIdentifier(s)&&st.has(s.getText()))return!0}return!1},Vn=(e,t)=>{const s=e.getInitializer();if(!s||!o.isCallExpression(s))return;const n=s.getExpression();if(!o.isPropertyAccessExpression(n)||!Un.has(n.getName()))return;const i=$n(s);if(!i||!Bn.test(i.path))return;const r=s.getArguments()[0],a=r!==void 0&&(o.isArrowFunction(r)||o.isFunctionExpression(r))&&jn(r);return{exportName:e.getName(),file:t,method:i.method,path:i.path,usesGuard:a}},Wn=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const i of n.getDeclarations()){const r=Vn(i,t);r&&s.push(r)}return s},Hn=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Wn(i,v(t,n)))}return s},Gn=e=>!o.isPropertyAccessExpression(e)||e.getName()!=="run"?!1:e.getExpression().getText()==="ctx.ai",Yn=(e,t)=>{if(!Gn(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!F(s)||K(s)))return{exportName:E(e),file:t,line:e.getStartLineNumber()}},Qn=(e,t)=>P(e,t,Yn),Xn=new Set(["generateText","streamText"]),Zn=new Set(["messages","prompt","system"]),Jn=[{methods:new Set(["delete","insert","insertManyUnsafe","patch","replace"]),prefixes:["context.db","ctx.db"]},{methods:new Set(["run","runAction","runMutation"]),prefixes:["context","ctx"]},{methods:new Set(["fetch"]),prefixes:["context","ctx"]},{methods:new Set(["queue","send"]),prefixes:["context.email","context.mail","ctx.email","ctx.mail"]}],er=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t))return;const s=t.getName(),n=t.getExpression().getText();for(const i of Jn)if(i.methods.has(s)&&i.prefixes.some(r=>n===r||n.startsWith(`${r}.`)))return`${n}.${s}`},tr=e=>{for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=er(t);if(s!==void 0)return s}},sr=e=>{const t=new Set,s=e.getFirstAncestor(r=>o.isArrowFunction(r)||o.isFunctionExpression(r)||o.isFunctionDeclaration(r)),[n]=s?.getParameters()??[],i=n?.getNameNode();if(i===void 0||!o.isObjectBindingPattern(i))return t;for(const r of i.getElements()){const a=r.getPropertyNameNode()?.getText()??r.getName(),c=r.getNameNode();if(a==="args"&&o.isObjectBindingPattern(c))for(const u of c.getElements())t.add(u.getName())}return t},nr=e=>{if(Ks(e))return!0;const t=sr(e);return t.size===0?!1:e.getDescendantsOfKind(l.Identifier).some(s=>t.has(s.getText()))},rr=e=>{for(const t of e.getProperties()){if(!o.isPropertyAssignment(t)||!Zn.has(t.getName()))continue;const s=t.getInitializer();if(s!==void 0&&nr(s))return!0}return!1},ir=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const i=A(n.getExpression());if(i===void 0||!Xn.has(i))continue;const[r]=n.getArguments();if(r===void 0||!o.isObjectLiteralExpression(r))continue;let a;for(const c of r.getDescendantsOfKind(l.CallExpression))if(A(c.getExpression())==="tool"&&(a=tr(c),a!==void 0))break;a!==void 0&&s.push({exportName:E(n),file:t,line:n.getStartLineNumber(),method:i,sideEffect:a,userInputDerived:rr(r)})}return s},or=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...ir(i,v(t,n)))}return s},ar=e=>{if(!o.isPropertyAccessExpression(e)||e.getName()!=="fetch")return!1;const t=e.getExpression();return o.isIdentifier(t)&&t.getText()==="ctx"},cr=(e,t)=>{if(!ar(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!F(s)))return{exportName:E(e),file:t,line:e.getStartLineNumber()}},lr=(e,t)=>P(e,t,cr),Ft=e=>e.getProperties().some(t=>o.isSpreadAssignment(t)),ur=e=>{const t=e.getArguments()[0];if(!t||!o.isObjectLiteralExpression(t))return{objects:[],opaque:!0};const s=t.getProperty("args");if(!s)return{objects:[],opaque:!1};if(!o.isPropertyAssignment(s))return{objects:[],opaque:!0};const n=s.getInitializer();return!n||!o.isObjectLiteralExpression(n)?{objects:[],opaque:!0}:{objects:[n],opaque:Ft(n)}},dr=e=>{const t=[];let s=!1,n=e;for(;o.isCallExpression(n);){const i=n.getExpression();if(!o.isPropertyAccessExpression(i))break;if(i.getName()==="input"){const r=n.getArguments()[0];r&&o.isObjectLiteralExpression(r)?(t.push(r),s||=Ft(r)):s=!0}n=i.getExpression()}return{objects:t,opaque:s}},Ot=(e,t)=>t?dr(t):ur(e),fr=e=>e.flatMap(t=>t.getProperties().filter(s=>o.isPropertyAssignment(s)||o.isShorthandPropertyAssignment(s)).map(s=>s.getName())),pr=/\.check\(|\.meta\(|length|max/iu,gr=/\bv\.any\s*\(/u,mr=/\bv\.string\s*\(/u,hr=e=>gr.test(e),xr=e=>mr.test(e)&&!pr.test(e),Er=e=>{const t=[],s=[];for(const n of e)for(const i of n.getProperties()){if(!o.isPropertyAssignment(i))continue;const r=i.getInitializer();if(!r)continue;const a=r.getText(),c=i.getName();hr(a)?t.push(c):xr(a)&&s.push(c)}return{anyArgs:t,unboundedStringArgs:s}},vr=(e,t)=>{const s=e.getInitializer();if(!s||!o.isCallExpression(s))return;const n=_(s);if(n?.visibility!=="public")return;const{objects:i}=Ot(s,n.receiver),{anyArgs:r,unboundedStringArgs:a}=Er(i);if(!(r.length===0&&a.length===0))return{anyArgs:r,exportName:e.getName(),file:t,line:s.getStartLineNumber(),unboundedStringArgs:a}},Sr=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const i of n.getDeclarations()){const r=vr(i,t);r&&s.push(r)}return s},Ar=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Sr(i,v(t,n)))}return s},he=e=>e?.getKind()===l.TrueKeyword,yr=e=>e?.getKind()===l.FalseKeyword,Nr=e=>e!==void 0&&o.isNumericLiteral(e)&&e.getLiteralValue()===0,br=new Set(["lunoraAuthAdapter","lunoraD1Adapter"]),Pr=e=>!e||!o.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>o.isCallExpression(t)&&A(t.getExpression())==="scim"),Ir=e=>e!==void 0&&o.isCallExpression(e)&&br.has(A(e.getExpression())??""),wr=e=>!e||!o.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>o.isStringLiteral(t)&&t.getLiteralText()==="*"),Tr=e=>{const t=N(e,"advanced"),s=N(e,"emailAndPassword"),n=N(e,"session");return{analyzable:!0,disableCsrfCheck:he(N(t,"disableCSRFCheck")),emailPasswordEnabled:he(N(s,"enabled")),requireEmailVerification:he(N(s,"requireEmailVerification")),scimOnNonTransactionalAdapter:Pr(N(e,"plugins"))&&Ir(N(e,"database")),secureCookiesDisabled:yr(N(t,"useSecureCookies")),sessionFreshAgeZero:Nr(N(n,"freshAge")),trustedOriginsWildcard:wr(N(e,"trustedOrigins"))}},Cr=()=>({analyzable:!1,disableCsrfCheck:!1,emailPasswordEnabled:!1,requireEmailVerification:!1,scimOnNonTransactionalAdapter:!1,secureCookiesDisabled:!1,sessionFreshAgeZero:!1,trustedOriginsWildcard:!1}),Fr=(e,t)=>{if(A(e.getExpression())!=="createAuth")return;const s=e.getArguments()[0],n=s!==void 0&&o.isObjectLiteralExpression(s)&&s.getProperties().some(r=>o.isSpreadAssignment(r)),i=s!==void 0&&o.isObjectLiteralExpression(s)&&!n?Tr(s):Cr();return{exportName:E(e),file:t,line:e.getStartLineNumber(),...i}},Or=(e,t)=>P(e,t,Fr),Rr=(e,t)=>{if(!o.isPropertyAccessExpression(e))return;const s=e.getName();if(t.methods.has(s))return t.matchReceiver(e.getExpression().getText())?s:void 0},Lr=(e,t,s)=>{const n=Rr(e.getExpression(),s);if(n===void 0)return;const i=e.getArguments()[s.argIndex];if(!(!i||!F(i)||K(i))&&!(s.requireUnmodifiedReach===!0&&!_s(i)))return{exportName:E(e),file:t,line:e.getStartLineNumber(),method:n}},Dr=(e,t,s)=>{const n=[];for(const i of e.getDescendantsOfKind(l.CallExpression)){const r=Lr(i,t,s);r&&n.push(r)}return n},oe=(e,t,s)=>{const n=[];for(const i of g(t)){const r=e.getSourceFile(i)??e.addSourceFileAtPath(i);n.push(...Dr(r,v(t,i),s))}return n},kr=new Set(["content","pdf","scrape","screenshot"]),Mr=(e,t)=>oe(e,t,{argIndex:0,matchReceiver:s=>s==="ctx.browser",methods:kr}),Kr=new Set(["createBrowser","createInboundEmailHandler","createPayment"]),_r=new Set(["RateLimiter"]),zr=new Set(["extend"]),Rt=e=>{const t=[],s=[];let n=!1;for(const i of e.getProperties()){if(o.isSpreadAssignment(i)){n=!0;continue}if(o.isPropertyAssignment(i)){const r=i.getName();t.push(r),i.getInitializer()?.getKind()===l.TrueKeyword&&s.push(r);continue}(o.isShorthandPropertyAssignment(i)||o.isMethodDeclaration(i))&&t.push(i.getName())}return{analyzable:!n,presentKeys:t,trueKeys:s}},nt=e=>e&&o.isObjectLiteralExpression(e)?Rt(e):{analyzable:!1,presentKeys:[],trueKeys:[]},Ur=e=>{const t=e.getStatements(),[s]=t;if(t.length!==1||s===void 0||!o.isReturnStatement(s))return;const n=s.getExpression();return n!==void 0&&o.isObjectLiteralExpression(n)?n:void 0},Br=e=>{if(o.isObjectLiteralExpression(e))return e;if(o.isParenthesizedExpression(e)){const t=e.getExpression();return o.isObjectLiteralExpression(t)?t:void 0}return o.isBlock(e)?Ur(e):void 0},qr=e=>{const t=e&&(o.isArrowFunction(e)||o.isFunctionExpression(e))?e:void 0,s=t&&Br(t.getBody());return s?Rt(s):{analyzable:!1,presentKeys:[],trueKeys:[]}},$r=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const i=A(n.getExpression());i!==void 0&&(Kr.has(i)?s.push({callee:i,file:t,line:n.getStartLineNumber(),...nt(n.getArguments()[0])}):zr.has(i)&&s.push({callee:i,file:t,line:n.getStartLineNumber(),...qr(n.getArguments()[0])}))}for(const n of e.getDescendantsOfKind(l.NewExpression)){const i=A(n.getExpression());i===void 0||!_r.has(i)||s.push({callee:i,file:t,line:n.getStartLineNumber(),...nt(n.getArguments()[0])})}return s},jr=(e,t)=>{const s=[];for(const{displayPath:n,filePath:i}of yt(t)){const r=e.getSourceFile(i)??e.addSourceFileAtPath(i);s.push(...$r(r,n))}return s},rt="ctx.containers.",Vr=e=>{if(!e.startsWith(rt))return!1;const t=e.slice(rt.length);return t.length>0&&!t.includes(".")},Wr=(e,t)=>oe(e,t,{argIndex:0,matchReceiver:Vr,methods:new Set(["get"])}),Hr=new Set(["allow","deny","setAllowed"]),Gr=e=>{const t=e.getArguments()[0];if(!t||!o.isObjectLiteralExpression(t))return!1;const s=t.getProperty("enableInternet");return s!==void 0&&o.isPropertyAssignment(s)&&o.isTrueLiteral(s.getInitializerOrThrow())},Yr=(e,t)=>{const s=e.getExpression();if(!(!o.isPropertyAccessExpression(s)||s.getName()!=="start"||!Gr(e)))return{detail:"enableInternet: true",exportName:E(e),file:t,kind:"enable_internet",line:e.getStartLineNumber()}},Qr=(e,t)=>{const s=e.getExpression();if(!o.isPropertyAccessExpression(s)||!Hr.has(s.getName()))return;const n=s.getExpression();if(!(!o.isPropertyAccessExpression(n)||n.getName()!=="egress"))return{detail:s.getName(),exportName:E(e),file:t,kind:"egress_relaxation",line:e.getStartLineNumber()}},Xr=(e,t)=>Yr(e,t)??Qr(e,t),Zr=(e,t)=>P(e,t,Xr),Jr=new Set(["defineExportSink","r2Sink","webhookExportSink"]),ei=e=>{const t=e.getExpression();if(!o.isIdentifier(t))return;const s=t.getText();return Jr.has(s)?s:void 0},ti=e=>{const t=[],s=[];for(const n of e.getProperties()){if(o.isSpreadAssignment(n))return{analyzable:!1,emptyKeys:[],presentKeys:[]};if(o.isPropertyAssignment(n)){const i=n.getName();t.push(i);const r=n.getInitializer();r&&o.isStringLiteral(r)&&r.getLiteralText()===""&&s.push(i);continue}(o.isShorthandPropertyAssignment(n)||o.isMethodDeclaration(n)||o.isGetAccessorDeclaration(n))&&t.push(n.getName())}return{analyzable:!0,emptyKeys:s,presentKeys:t}},si=(e,t)=>{const s=[];for(const{displayPath:n,filePath:i}of yt(t)){const r=e.getSourceFile(i)??e.addSourceFileAtPath(i);for(const a of r.getDescendantsOfKind(l.CallExpression)){const c=ei(a);if(c===void 0)continue;const u=a.getArguments()[0],d=u&&o.isObjectLiteralExpression(u)?ti(u):{analyzable:!1,emptyKeys:[],presentKeys:[]};s.push({analyzable:d.analyzable,emptyKeys:d.emptyKeys,factory:c,file:n,line:a.getStartLineNumber(),presentKeys:d.presentKeys})}}return s},ni=new Map([["dbRateLimit",2],["rateLimit",2],["verifyTurnstileMiddleware",0]]),ri=new Set(["dbRateLimit","rateLimit"]),ii=e=>{if(!e||!o.isObjectLiteralExpression(e))return!1;const t=e.getProperty("failOpen");return t!==void 0&&o.isPropertyAssignment(t)&&t.getInitializer()?.getKind()===l.TrueKeyword},oi=(e,t)=>{const s=A(e.getExpression());if(s===void 0)return;const n=ni.get(s);if(n!==void 0)return{callee:s,exportName:E(e),failOpen:ii(e.getArguments()[n]),file:t,limitName:ri.has(s)?Nt(e):"",line:e.getStartLineNumber()}},ai=(e,t)=>P(e,t,oi),ci=new Set(["boolean","number","object","string"]),li=e=>{const t=e.getName();if(!ci.has(t))return;const s=e.getExpression();if(!o.isPropertyAccessExpression(s))return;if(s.getName()==="flags"&&ve(s.getExpression()))return t;const n=s.getExpression();if(s.getName()==="details"&&o.isPropertyAccessExpression(n)&&n.getName()==="flags"&&ve(n.getExpression()))return t},ui=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t))return;const s=li(t);if(s===void 0)return;const n=e.getArguments()[0];if(!n||!(o.isStringLiteral(n)||o.isNoSubstitutionTemplateLiteral(n)))return;const i=n.getLiteralValue();return i.length>0?{key:i,type:s}:void 0},di=(e,t)=>{const s=new Map;for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of i.getDescendantsOfKind(l.CallExpression)){const a=ui(r);a&&!s.has(a.key)&&s.set(a.key,a.type)}}return[...s.entries()].map(([n,i])=>({key:n,type:i})).toSorted((n,i)=>n.key.localeCompare(i.key))},fi=e=>{const t=e.getInitializer();if(!t||!o.isCallExpression(t))return;const s=_(t);if(s?.kind!=="query")return;const n=Ts(t,s.receiver);return n?{exportName:e.getName(),handler:n}:void 0},it=e=>{const t=e.getParent();return t&&o.isPropertyAccessExpression(t)&&t.getExpression()===e?t:void 0},pi=e=>{if(!o.isPropertyAccessExpression(e)||e.getName()!=="flags")return;const t=e.getExpression();if(!o.isIdentifier(t)||t.getText()!=="ctx")return;const s=it(e);if(!s)return"ctx.flags";if(s.getName()==="details"){const n=it(s);return n?`ctx.flags.details.${n.getName()}`:"ctx.flags.details"}return`ctx.flags.${s.getName()}`},gi=(e,t)=>{const s=[];for(const n of e.handler.getDescendantsOfKind(l.PropertyAccessExpression)){const i=pi(n);i!==void 0&&s.push({callee:i,exportName:e.exportName,file:t,line:n.getStartLineNumber()})}return s},mi=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const i of n.getDeclarations()){const r=fi(i);r&&s.push(...gi(r,t))}return s},hi=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...mi(i,v(t,n)))}return s},xi=e=>{if(!o.isPropertyAccessExpression(e)||e.getName()!=="boolean")return!1;const t=e.getExpression();return o.isPropertyAccessExpression(t)&&t.getName()==="flags"&&ve(t.getExpression())},Ei=e=>{if(e?.getKind()===l.TrueKeyword)return!0;if(e?.getKind()===l.FalseKeyword)return!1},vi=(e,t)=>{if(!xi(e.getExpression()))return;const[s,n]=e.getArguments();if(!s||!(o.isStringLiteral(s)||o.isNoSubstitutionTemplateLiteral(s)))return;const i=s.getLiteralValue(),r=Ei(n);if(!(i.length===0||r===void 0))return{defaultValue:r,exportName:E(e),file:t,key:i,line:e.getStartLineNumber()}},Si=(e,t)=>P(e,t,vi),Ai=e=>{const t=e.getType().getProperty("~standard");if(!t)return;const s=t.getTypeAtLocation(e).getProperty("types");if(!s)return;const n=s.getTypeAtLocation(e).getNonNullableType().getProperty("output");if(!n)return;const i=n.getTypeAtLocation(e),r=i.getText(e);if(!r||r==="any"||r==="never"||Vs(r))return;const a=e.getSourceFile().getFilePath();return Ws(i,e,a)?Hs(i,e,a,0,new Set):r},yi=e=>{const t=e.getExpression();return o.isPropertyAccessExpression(t)&&t.getName()==="withGeoIndex"},Ni=e=>{const t=e.getArguments()[0];return t&&o.isStringLiteral(t)?t.getLiteralText():""},bi=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of i.getDescendantsOfKind(l.CallExpression))yi(a)&&s.push({file:r,indexName:Ni(a),line:a.getStartLineNumber()})}return s},V=e=>e!==void 0&&(o.isArrowFunction(e)||o.isFunctionExpression(e))?e:void 0,Lt=e=>{const t=e.getArguments()[0],s=V(t);if(s!==void 0)return s;if(t===void 0||!o.isObjectLiteralExpression(t))return;const n=t.getProperty("handler");return n!==void 0&&o.isPropertyAssignment(n)?V(n.getInitializer()):void 0},Pi=new Set(["delete","get","head","options","patch","post","put"]),Ii=new Set(["handler","stream"]),wi=new Set(["runAction","runMutation"]),Ti=new Set(["delete","insert","insertManyUnsafe","patch","replace"]),J=(e,t)=>e!==void 0&&o.isIdentifier(e)&&e.getText()===t,ot=(e,t)=>{const s=e.getParameters()[0];if(s===void 0)return;const n=s.getNameNode();if(t)return o.isIdentifier(n)?n.getText():void 0;if(o.isObjectBindingPattern(n)){for(const i of n.getElements())if((i.getPropertyNameNode()?.getText()??i.getNameNode().getText())==="ctx"){const a=i.getNameNode();return o.isIdentifier(a)?a.getText():void 0}}},at=(e,t)=>{const s=e.getBody(),n=s.getDescendantsOfKind(l.CallExpression);o.isCallExpression(s)&&n.unshift(s);for(const i of n){const r=i.getExpression();if(!o.isPropertyAccessExpression(r))continue;const a=r.getName(),c=r.getExpression();if(wi.has(a)&&J(c,t))return a;if(Ti.has(a)&&o.isPropertyAccessExpression(c)&&c.getName()==="db"&&J(c.getExpression(),t))return`db.${a}`}},ct=(e,t)=>{const s=e.getBody();for(const n of s.getDescendantsOfKind(l.PropertyAccessExpression))if(n.getName()==="auth"&&J(n.getExpression(),t))return!0;for(const n of s.getDescendantsOfKind(l.VariableDeclaration)){const i=n.getNameNode();if(!(!o.isObjectBindingPattern(i)||!J(n.getInitializer(),t))){for(const r of i.getElements())if((r.getPropertyNameNode()?.getText()??r.getNameNode().getText())==="auth")return!0}}return!1},Ci=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!Ii.has(t.getName()))return;let s=t.getExpression();for(;o.isCallExpression(s);){const n=s.getExpression();if(!o.isPropertyAccessExpression(n))return;const i=n.getName();if(Pi.has(i)){const r=n.getExpression();return o.isIdentifier(r)&&r.getText()==="httpRoute"?i.toUpperCase():void 0}s=n.getExpression()}},Fi=(e,t)=>{const s=e.getExpression();if(o.isIdentifier(s)&&s.getText()==="httpAction"){const c=V(e.getArguments()[0]),u=c&&ot(c,!0);if(!c||u===void 0)return;const d=at(c,u);return d===void 0?void 0:{exportName:E(e),file:t,kind:"httpAction",line:e.getStartLineNumber(),readsAuth:ct(c,u),sideEffect:d}}const n=Ci(e);if(n===void 0)return;const i=V(e.getArguments()[0]),r=i&&ot(i,!1);if(!i||r===void 0)return;const a=at(i,r);return a===void 0?void 0:{exportName:E(e),file:t,kind:"httpRoute",line:e.getStartLineNumber(),method:n,readsAuth:ct(i,r),sideEffect:a}},Oi=(e,t)=>P(e,t,Fi),Ri=new Set(["btoa","encodeURI","encodeURIComponent","isSafeHeaderValue","Number","parseFloat","parseInt"]),Li=new Set(["append","set"]),Dt=e=>e!==void 0&&(o.isStringLiteral(e)||o.isNoSubstitutionTemplateLiteral(e))?e.getLiteralText():"",lt=(e,t)=>(o.isCallExpression(e)?[e,...e.getDescendantsOfKind(l.CallExpression)]:e.getDescendantsOfKind(l.CallExpression)).some(n=>Ri.has(A(n.getExpression())??"")&&Us(n,t)),Di=(e,t)=>{if(lt(e,t))return!0;const s=ie(e);return s!==void 0&&lt(s,t)},Se=(e,t)=>zs(e,t)&&!Di(e,t),ki=e=>{if(o.isPropertyAccessExpression(e)&&e.getName()==="headers")return!0;const t=ie(e);return t!==void 0&&o.isNewExpression(t)&&A(t.getExpression())==="Headers"},ee=e=>{if(e===void 0)return;if(o.isObjectLiteralExpression(e))return e;const t=ie(e);return t!==void 0&&o.isObjectLiteralExpression(t)?t:void 0},Ne=(e,t,s)=>{for(const n of e.getProperties())if(o.isPropertyAssignment(n)){const i=n.getInitializer();i!==void 0&&Se(i,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:Dt(n.getNameNode()),line:i.getStartLineNumber(),via:t})}else if(o.isShorthandPropertyAssignment(n)){const i=n.getNameNode();Se(i,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:n.getName(),line:i.getStartLineNumber(),via:t})}else if(o.isSpreadAssignment(n)){const i=ee(n.getExpression());i!==void 0&&Ne(i,t,s)}},kt=(e,t)=>{const s=ee(e);if(s===void 0)return;const n=s.getProperty("headers");if(n===void 0||!o.isPropertyAssignment(n))return;const i=ee(n.getInitializer());i!==void 0&&Ne(i,"response-init",t)},Mi=(e,t)=>{const s=A(e.getExpression());if(s==="Response")kt(e.getArguments()[1],t);else if(s==="Headers"){const n=ee(e.getArguments()[0]);n!==void 0&&Ne(n,"headers-ctor",t)}},Ki=(e,t)=>{const s=e.getExpression();if(!o.isPropertyAccessExpression(s))return;const n=s.getName(),i=s.getExpression();if(n==="json"&&o.isIdentifier(i)&&i.getText()==="Response"){kt(e.getArguments()[1],t);return}if(Li.has(n)&&ki(i)){const r=e.getArguments()[1];r!==void 0&&Se(r,t.requestName)&&t.rows.push({exportName:t.exportName,file:t.relativePath,headerName:Dt(e.getArguments()[0]),line:r.getStartLineNumber(),via:n==="set"?"headers-set":"headers-append"})}},_i=(e,t)=>{for(const s of e.getDescendantsOfKind(l.NewExpression))Mi(s,t);for(const s of e.getDescendantsOfKind(l.CallExpression))Ki(s,t)},zi=(e,t)=>{const s=e.getExpression();if(!o.isIdentifier(s)||s.getText()!=="httpAction")return[];const n=V(e.getArguments()[0]);if(n===void 0)return[];const i=n.getParameters()[1];if(i===void 0)return[];const r=i.getNameNode();if(!o.isIdentifier(r))return[];const a=[];return _i(n,{exportName:E(e),relativePath:t,requestName:r.getText(),rows:a}),a},Ui=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression))s.push(...zi(n,t));return s},Bi=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Ui(i,v(t,n)))}return s},qi=new Set(["auth","context.auth","ctx.auth"]),$i="userId",ji=e=>{const t=new Set;for(const s of e.getProperties()){if(o.isSpreadAssignment(s))return;(o.isPropertyAssignment(s)||o.isShorthandPropertyAssignment(s)||o.isMethodDeclaration(s))&&t.add(s.getName())}return t},Vi=(e,t)=>{const s=f(t,Tt);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const i of n.getDescendantsOfKind(l.CallExpression)){if(A(i.getExpression())!=="defineIdentity")continue;const[r]=i.getArguments();return r&&o.isObjectLiteralExpression(r)?ji(r):void 0}},ut=e=>{if(!(e===void 0||!o.isPropertyAccessExpression(e)||e.getName()!=="identity"))return qi.has(e.getExpression().getText())?e:void 0},Wi=e=>{if(o.isPropertyAccessExpression(e)&&ut(e.getExpression())!==void 0)return e.getName();if(o.isElementAccessExpression(e)&&ut(e.getExpression())!==void 0){const t=e.getArgumentExpression();return t&&o.isStringLiteral(t)?t.getLiteralValue():void 0}},Hi=(e,t,s)=>{const n=[];for(const i of e.getDescendants()){const r=Wi(i);r!==void 0&&n.push({declared:r===$i||s.has(r),exportName:E(i),file:t,key:r,line:i.getStartLineNumber()})}return n},Gi=(e,t)=>{const s=Vi(e,t);if(s===void 0)return[];const n=[];for(const i of g(t)){const r=e.getSourceFile(i)??e.addSourceFileAtPath(i);n.push(...Hi(r,v(t,i),s))}return n},Yi=(e,t)=>{if(A(e.getExpression())!=="buildImageDeliveryUrl")return;const s=e.getArguments()[0];if(!s)return;const n=N(s,"key");if(!(!n||!F(n)||K(n)))return{exportName:E(e),file:t,line:e.getStartLineNumber()}},Qi=(e,t)=>P(e,t,Yi),Xi=new Set(["delete","get","getRaw","getWithMetadata","put"]),Zi=(e,t)=>oe(e,t,{argIndex:0,matchReceiver:s=>s==="ctx.kv"||s.startsWith("ctx.kv."),methods:Xi}),Ji=new Set(["queue","send"]),dt=new Set(["bcc","cc","to"]),eo=e=>{if(!o.isPropertyAccessExpression(e))return;const t=e.getName();if(!Ji.has(t))return;const s=e.getExpression().getText();return s==="ctx.mail"||s==="ctx.email"?t:void 0},to=e=>o.isObjectLiteralExpression(e)?e.getProperties().some(t=>{if(o.isShorthandPropertyAssignment(t)){const n=t.getNameNode();return dt.has(t.getName())&&F(n)&&!K(n)}if(!o.isPropertyAssignment(t)||!dt.has(t.getName()))return!1;const s=t.getInitializer();return s!==void 0&&F(s)&&!K(s)}):!1,so=(e,t)=>{const s=eo(e.getExpression());if(s===void 0)return;const n=e.getArguments()[0];if(!(!n||!to(n)))return{exportName:E(e),file:t,line:e.getStartLineNumber(),method:s}},no=(e,t)=>P(e,t,so),ro=e=>o.isPropertyAssignment(e)||o.isMethodDeclaration(e)||o.isGetAccessorDeclaration(e)?o.isComputedPropertyName(e.getNameNode()):!1,io=e=>o.isPropertyAssignment(e)||o.isShorthandPropertyAssignment(e)||o.isMethodDeclaration(e)||o.isGetAccessorDeclaration(e)?ro(e):!0,Mt=(e,t=!1)=>{for(const s of e.getProperties()){if(io(s))return!0;if(t)continue;if(!o.isPropertyAssignment(s))return!0;const n=s.getInitializer();if(!n||!o.isObjectLiteralExpression(n)||Mt(n,!0))return!0}return!1},oo=(e,t)=>{for(const s of g(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const{receiver:i}of wt(n))for(const r of ye(i)){const a=r.getArguments()[0];if(a!==void 0&&(!o.isObjectLiteralExpression(a)||Mt(a)))return!0}}return!1},ao=e=>{const t=e.getArguments()[0];if(!t||!o.isObjectLiteralExpression(t))return[];const s=[];for(const n of t.getProperties()){const i=Z(n);if(i===void 0||!o.isPropertyAssignment(n))continue;const r=n.getInitializer();if(!(!r||!o.isObjectLiteralExpression(r)))for(const a of r.getProperties()){const c=Z(a);c!==void 0&&s.push({column:c,strategy:It(a),table:i})}}return s},co=(e,t)=>{const s=new Map;for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const{receiver:r}of wt(i))for(const a of ye(r))for(const c of ao(a)){const u=`${c.table}\0${c.column}`;s.has(u)||s.set(u,c)}}return{columns:[...s.values()]}},lo=(e,t,s)=>{const n=e.getArguments()[0];if(!n||!o.isObjectLiteralExpression(n))return[];const i=[];for(const r of n.getProperties()){const a=Z(r);if(a===void 0||!o.isPropertyAssignment(r))continue;const c=r.getInitializer();if(!(!c||!o.isObjectLiteralExpression(c)))for(const u of c.getProperties()){const d=Z(u);if(d===void 0)continue;const x=It(u);x!=="custom"&&i.push({column:d,exportName:t,file:s,line:u.getStartLineNumber(),strategy:x,table:a})}}return i},uo=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&o.isCallExpression(s)?_(s):void 0;return n?.receiver?ye(n.receiver).flatMap(i=>lo(i,e.getName(),t)):[]},fo=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...uo(c,r))}return s},po=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="replace")return!1;const s=t.getExpression();return D(s)},go=e=>{const t=e.getArguments()[0];if(t===void 0||!o.isObjectLiteralExpression(t))return;const s=t.getProperty("server");if(s!==void 0)return o.isPropertyAssignment(s)?s.getInitializer():s},mo=e=>{if(!e.isExported())return;const t=e.getInitializer();if(t?.getKind()!==l.CallExpression)return;const s=t;return Js(s.getExpression())?s:void 0},ho=e=>{const t=mo(e),s=t===void 0?void 0:go(t);if(s===void 0)return[];const n=e.getNameNode(),i=o.isIdentifier(n)?n.getText():"";return s.getDescendantsOfKind(l.CallExpression).filter(r=>po(r)).map(r=>({exportName:i,file:"lunora/mutators.ts",line:r.getStartLineNumber()}))},xo=e=>e.getVariableDeclarations().flatMap(t=>ho(t)),Eo=(e,t)=>{const s=f(t,Zs);if(!b(s))return[];const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);return xo(n)},vo=new Set(["delete","get","patch"]),So=new Set(["accountId","authorId","companyId","createdBy","createdById","customerId","groupId","memberId","organizationId","orgId","ownerId","projectId","teamId","tenantId","userId","workspaceId"]),Ao=new Set(["auth","identity","session","user"]),yo=new Set([l.EqualsEqualsEqualsToken,l.EqualsEqualsToken,l.ExclamationEqualsEqualsToken,l.ExclamationEqualsToken]),No=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="normalizeId"||!D(t.getExpression()))return;const s=e.getArguments()[0];return s&&o.isStringLiteral(s)?s.getLiteralText():""},bo=e=>{let t=e,s=t.getParent();for(;s!==void 0&&(o.isAsExpression(s)||o.isParenthesizedExpression(s)||o.isNonNullExpression(s));)t=s,s=t.getParent();if(s===void 0||!o.isVariableDeclaration(s))return;const n=s.getNameNode();return o.isIdentifier(n)?n.getText():void 0},Po=(e,t)=>e.getDescendantsOfKind(l.Identifier).some(s=>s.getText()===t),Io=e=>o.isThrowStatement(e)||o.isReturnStatement(e)||e.getDescendantsOfKind(l.ThrowStatement).length>0||e.getDescendantsOfKind(l.ReturnStatement).length>0,wo=(e,t)=>e.getDescendantsOfKind(l.IfStatement).some(s=>Po(s.getExpression(),t)&&Io(s.getThenStatement())),To=(e,t)=>{for(const s of e.getDescendantsOfKind(l.CallExpression)){const n=s.getExpression();if(!o.isPropertyAccessExpression(n))continue;const i=n.getName();if(!vo.has(i))continue;const r=n.getExpression();if(!(D(r)||o.isPropertyAccessExpression(r)&&D(r.getExpression())))continue;const c=s.getArguments()[0];if(c!==void 0&&o.isIdentifier(c)&&c.getText()===t)return i}},Co=e=>{let t=e;for(;o.isPropertyAccessExpression(t)||o.isElementAccessExpression(t)||o.isNonNullExpression(t)||o.isParenthesizedExpression(t)||o.isAsExpression(t)||o.isAwaitExpression(t);)t=t.getExpression();return o.isIdentifier(t)?t.getText():void 0},Fo=e=>e.getDescendantsOfKind(l.CallExpression).some(t=>t.getArguments().some(s=>Co(s)==="ctx")),Oo=e=>e.getDescendantsOfKind(l.BinaryExpression).some(t=>yo.has(t.getOperatorToken().getKind())?o.isPropertyAccessExpression(t.getLeft())||o.isPropertyAccessExpression(t.getRight()):!1),Ro=e=>{for(const t of e.getDescendantsOfKind(l.Identifier))if(So.has(t.getText()))return!0;for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression)){const s=t.getExpression();if(o.isIdentifier(s)&&s.getText()==="ctx"&&Ao.has(t.getName()))return!0}return Fo(e)||Oo(e)},Lo=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!o.isCallExpression(s))return[];const n=_(s);if(n?.kind!=="query"&&n?.kind!=="mutation")return[];const i=Lt(s);if(i===void 0)return[];const r=n.receiver!==void 0&&Pt(n.receiver,"use","rls"),a=Ro(i),c=new Set,u=[];for(const d of i.getDescendantsOfKind(l.CallExpression)){const x=No(d);if(x===void 0)continue;const y=bo(d);if(y===void 0||c.has(y)||!wo(i,y))continue;const p=To(i,y);p!==void 0&&(c.add(y),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),mentionsOwnership:a,sinkMethod:p,table:x,usesRls:r,visibility:n.visibility}))}return u},Do=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...Lo(c,r))}return s},ko=new Set(["accountId","authorId","createdBy","createdById","organizationId","orgId","ownerId","tenantId","updatedBy","userId","workspaceId"]),Mo=new Set(["insert","insertManyUnsafe","patch","replace"]),Ko=e=>{if(!o.isPropertyAccessExpression(e))return;const t=e.getName();if(!Mo.has(t))return;const s=e.getExpression();if(!o.isPropertyAccessExpression(s)||s.getName()!=="db")return;const n=s.getExpression();return o.isIdentifier(n)&&n.getText()==="ctx"?t:void 0},_o=(e,t)=>{if(t!=="insertManyUnsafe")return o.isObjectLiteralExpression(e)?[e]:[];if(!o.isArrayLiteralExpression(e))return[];const s=[];for(const n of e.getElements())o.isObjectLiteralExpression(n)&&s.push(n);return s},zo=(e,t,s,n)=>{const i=[];for(const r of e.getProperties()){let a,c;o.isPropertyAssignment(r)?(a=r.getName(),c=r.getInitializer()):o.isShorthandPropertyAssignment(r)&&(a=r.getName(),c=r.getNameNode()),!(a===void 0||c===void 0||!ko.has(a))&&F(c)&&!K(c)&&i.push({exportName:E(s),field:a,file:n,line:s.getStartLineNumber(),method:t})}return i},Uo=(e,t)=>{const s=Ko(e.getExpression());if(s===void 0)return[];const n=e.getArguments()[1];return n?_o(n,s).flatMap(i=>zo(i,s,e,t)):[]},Bo=(e,t,s)=>{const n=[];for(const i of e.getDescendantsOfKind(l.CallExpression))for(const r of Uo(i,t)){const a=s(r.exportName);n.push(a===void 0?r:{...r,visibility:a})}return n},qo=(e,t,s=[])=>{const n=[],i=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));for(const r of g(t)){const a=e.getSourceFile(r)??e.addSourceFileAtPath(r),c=v(t,r);n.push(...Bo(a,c,u=>i.get(`${c}:${u}`)))}return n},$o=["providerSubscriptionId","state"],jo=["providerEventId","processedAt"],ft=(e,t)=>t.every(s=>s in e.shape),Vo=e=>{const t=e.find(n=>n.name==="subscriptions"),s=e.find(n=>n.name==="events");return t!==void 0&&s!==void 0&&ft(t,$o)&&ft(s,jo)},Wo=new Set(["createAutumnAdapter","createDodoPaymentsAdapter","createPolarAdapter","createStripeAdapter"]),Ho=e=>e&&o.isNumericLiteral(e)?Number(e.getText()):void 0,Go=e=>{const t=e.getProperty("webhookToleranceSeconds");return t&&o.isPropertyAssignment(t)?Ho(t.getInitializer()):void 0},Yo=(e,t)=>{const s=A(e.getExpression());if(s===void 0||!Wo.has(s))return;const[n]=e.getArguments(),i=n&&o.isObjectLiteralExpression(n)?Go(n):void 0;return{callee:s,exportName:E(e),file:t,line:e.getStartLineNumber(),...i===void 0?{}:{toleranceSeconds:i}}},Qo=(e,t)=>P(e,t,Yo),Xo=new Set(["defineQueue","defineWorkflow"]),Zo=new Set(["run","runAction","runMutation","runQuery"]),Jo=new Set(["api","internal"]),ea=e=>{const t=e.getExpression();return o.isIdentifier(t)?t.getText():void 0},ta=e=>{const t=e.getArguments()[0];if(!t||!o.isObjectLiteralExpression(t))return;const s=t.getProperty("handler");if(s===void 0||!o.isPropertyAssignment(s))return;const n=s.getInitializer();if(n&&(o.isArrowFunction(n)||o.isFunctionExpression(n)))return n},Kt=(e,t)=>{const s=e.getParameters()[t]?.getNameNode();return s&&o.isIdentifier(s)?s.getText():void 0},_t=(e,t)=>e===t||e.startsWith(`${t}.`),zt=e=>{const t=e.getDescendantsOfKind(l.PropertyAccessExpression);return o.isPropertyAccessExpression(e)&&t.push(e),t},pt=e=>{const t=e.getParent();return o.isPropertyAccessExpression(t)&&t.getNameNode()===e||o.isPropertyAssignment(t)&&t.getNameNode()===e?!1:!(o.isBindingElement(t)&&t.getNameNode()===e)},Ut=e=>{const t=e.getDescendantsOfKind(l.Identifier).filter(s=>pt(s));return o.isIdentifier(e)&&pt(e)&&t.push(e),t},sa=e=>{if(!o.isVariableDeclaration(e))return[];const t=e.getNameNode();return o.isIdentifier(t)?[t.getText()]:t.getDescendantsOfKind(l.BindingElement).map(s=>s.getName())},na=e=>{const t=Kt(e,1);if(t===void 0)return[];const s=[`${t}.messages`];for(const n of e.getDescendantsOfKind(l.ForOfStatement)){if(n.getExpression().getText()!==`${t}.messages`)continue;const i=n.getInitializer(),r=o.isVariableDeclarationList(i)?i.getDeclarations()[0]?.getNameNode():void 0;r&&o.isIdentifier(r)&&s.push(`${r.getText()}.body`)}return s},ra=(e,t,s)=>{const n=t==="workflow"?[`${s}.params`]:na(e),i=new Set,r=a=>zt(a).some(c=>n.some(u=>_t(c.getText(),u)))?!0:Ut(a).some(c=>i.has(c.getText()));for(const a of e.getDescendantsOfKind(l.VariableDeclaration)){const c=a.getInitializer();if(c&&r(c))for(const u of sa(a))i.add(u)}return{names:i,prefixes:n}},ia=(e,t)=>zt(e).some(s=>t.prefixes.some(n=>_t(s.getText(),n)))?!0:Ut(e).some(s=>t.names.has(s.getText())),oa=e=>{if(e===void 0||!o.isPropertyAccessExpression(e))return;const t=[];let s=e;for(;o.isPropertyAccessExpression(s);)t.unshift(s.getName()),s=s.getExpression();const n=t.at(-1);if(!(n===void 0||!o.isIdentifier(s)||!Jo.has(s.getText())||t.length<2))return{exportName:n,file:t.slice(0,-1).join("/")}},aa=(e,t,s)=>{const n=Kt(e,0);if(n===void 0)return[];const i=ra(e,t,n),r=[];for(const a of e.getDescendantsOfKind(l.CallExpression)){const c=a.getExpression();if(!o.isPropertyAccessExpression(c)||!Zo.has(c.getName())||c.getExpression().getText()!==n)continue;const u=a.getArguments()[1];if(!u||!ia(u,i))continue;const d=oa(a.getArguments()[0]);d!==void 0&&r.push({dispatchKind:t,file:s,handlerExport:E(a),line:a.getStartLineNumber(),targetExport:d.exportName,targetFile:d.file})}return r},ca=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const i=ea(n);if(i===void 0||!Xo.has(i))continue;const r=ta(n);r!==void 0&&s.push(...aa(r,i==="defineQueue"?"queue":"workflow",t))}return s},la=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...ca(i,v(t,n)))}return s},gt={dbRateLimit:"usesRateLimit",emailGateMiddleware:"usesEmailGate",mask:"usesMask",rateLimit:"usesRateLimit",rls:"usesRls",verifyTurnstile:"usesCaptcha",verifyTurnstileMiddleware:"usesCaptcha"},mt=new Set(["account","credential","member","passkey","session","user"]),ua=e=>e.replaceAll(/[-_]/gu," ").replaceAll(/([a-z0-9])([A-Z])/gu,"$1 $2").split(" ").filter(Boolean).map(t=>t.toLowerCase()),da=e=>{const s=ua(e).at(-1);if(!s)return!1;const n=s.endsWith("s")?s.slice(0,-1):s;return mt.has(s)||mt.has(n)},fa=e=>{const t=e.replaceAll(/[^a-z0-9]/giu,"").toLowerCase();return t.endsWith("email")||t.endsWith("emailaddress")},pa=(e,t)=>{const{objects:s,opaque:n}=Ot(e,t);return fr(s).some(i=>fa(i))?!0:n?void 0:!1},ga=e=>{const t=e.getArguments()[0];return!t||!o.isObjectLiteralExpression(t)?{usesCaptcha:!1,usesRateLimit:!1}:{usesCaptcha:!!t.getProperty("captcha"),usesRateLimit:!!t.getProperty("rateLimit")}},ma=e=>{if(o.isCallExpression(e))return e;if(!o.isIdentifier(e))return;const s=e.getSourceFile().getVariableDeclaration(e.getText())?.getInitializer();return s&&o.isCallExpression(s)?s:void 0},X={usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},ha=e=>{const t=ma(e),s=t?A(t.getExpression()):void 0;if(t&&s==="protectPublic"){const n=ga(t);return{...X,usesCaptcha:n.usesCaptcha,usesRateLimit:n.usesRateLimit}}return s!==void 0&&s in gt?{...X,[gt[s]]:!0}:X},xa=e=>{const t={...X};let s=e;for(;o.isCallExpression(s);){const n=s.getExpression();if(!o.isPropertyAccessExpression(n))break;const i=n.getName()==="use"?s.getArguments()[0]:void 0;if(i){const r=ha(i);t.usesCaptcha||=r.usesCaptcha,t.usesEmailGate||=r.usesEmailGate,t.usesMask||=r.usesMask,t.usesRateLimit||=r.usesRateLimit,t.usesRls||=r.usesRls}s=n.getExpression()}return t},Ea=new Set(["insert","insertMany","insertManyUnsafe","replace"]),va=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!Ea.has(t.getName()))return!1;const s=t.getExpression();if(!D(s))return!1;const i=e.getArguments()[0];return!i||!(o.isStringLiteral(i)||o.isNoSubstitutionTemplateLiteral(i))?!1:da(i.getLiteralText())},Sa=new Set(["create","runAfter","runAt","send","sendBatch"]),Aa=new Set(["queues","scheduler","workflows"]),ya=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!Sa.has(t.getName()))return!1;let s=t.getExpression();for(;o.isCallExpression(s)||o.isElementAccessExpression(s)||o.isPropertyAccessExpression(s);){if(o.isPropertyAccessExpression(s)&&Aa.has(s.getName())){const n=s.getExpression();if(o.isIdentifier(n)&&n.getText()==="ctx")return!0}s=s.getExpression()}return!1},Na=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="insertManyUnsafe")return!1;const s=t.getExpression();return D(s)},Bt=new Set(["generateObject","generateText","streamObject","streamText"]),ba=e=>{const t=A(e.getExpression());return t!==void 0&&Bt.has(t)},Pa=e=>{const t=A(e.getExpression());if(t===void 0||!Bt.has(t))return!1;const s=e.getArguments()[0];return!s||!o.isObjectLiteralExpression(s)||s.getProperties().some(n=>o.isSpreadAssignment(n))?!1:!s.getProperty("maxOutputTokens")},Ia=new Set(["log","span","trace"]),wa=new Set(["ai"]),Ta=new Set(["email","mail"]),Ca=new Set(["ai","browser","fetch","mail","notify","queues","sql","storage","workflows"]),xe=(e,t)=>e.getDescendantsOfKind(l.PropertyAccessExpression).some(s=>{if(!t.has(s.getName()))return!1;const n=s.getExpression();return o.isIdentifier(n)&&n.getText()==="ctx"}),Fa=new Set([l.ArrowFunction,l.FunctionDeclaration,l.FunctionExpression,l.GetAccessor,l.MethodDeclaration,l.SetAccessor]),Oa=new Set(["every","filter","flatMap","forEach","map","some"]),Ra=new Set(["all","allSettled","race"]),La=e=>{const t=e.getParent();if(!t||!o.isCallExpression(t)||!t.getArguments().includes(e))return;const s=t.getExpression();if(!o.isPropertyAccessExpression(s))return;const n=s.getName();if(Oa.has(n))return t;const i=s.getExpression();if(o.isIdentifier(i)&&i.getText()==="Promise"&&Ra.has(n))return t},Da=e=>{let t=e.getParent();for(;t;){if(o.isTryStatement(t)){const s=t.getTryBlock();if(e.getPos()>=s.getPos()&&e.getEnd()<=s.getEnd())return!0}if(Fa.has(t.getKind())){const s=La(t);if(!s)return!1;t=s;continue}t=t.getParent()}return!1},ka=e=>{let t=e;for(;;){const s=t.getParent();if(!o.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;if(s.getName()==="catch")return!0;if(s.getName()!=="then"&&s.getName()!=="finally")return!1;const n=s.getParent();if(!o.isCallExpression(n)||n.getExpression()!==s)return!1;t=n}},Ma=e=>{let t=e;for(;;){const s=t.getParent();if(o.isPropertyAccessExpression(s)&&s.getExpression()===t){t=s;continue}return o.isCallExpression(s)&&s.getExpression()===t?s:void 0}},Ka=e=>{let t=!1,s=!0;for(const n of e.getDescendantsOfKind(l.PropertyAccessExpression)){if(!Ca.has(n.getName()))continue;const i=n.getExpression();if(!o.isIdentifier(i)||i.getText()!=="ctx")continue;const r=Ma(n);r&&(t=!0,!Da(r)&&!ka(r)&&(s=!1))}return{handlesErrors:t&&s,reachesOutbound:t}},_a=e=>e.getDescendantsOfKind(l.ThrowStatement).some(t=>{const s=t.getExpression();if(!o.isNewExpression(s))return!1;const n=s.getExpression();return o.isIdentifier(n)&&n.getText()==="Error"}),ht="lunora-advisor-exempt",za=/^[\s*/]+/u,Ua=/[\w-]/u,Ba=e=>{const s=(e.getFirstAncestorByKind(l.VariableStatement)??e).getLeadingCommentRanges().map(n=>n.getText()).join(`
-`);for(const n of s.split(`
-`)){const i=n.replace(za,"");if(!i.startsWith(ht))continue;const r=i.slice(ht.length);if(Ua.test(r.charAt(0)))continue;const a=r.indexOf("--");return{exempt:!0,exemptReason:(a===-1?"":r.slice(a+2).split("*")[0]??"").trim()}}return{exempt:!1,exemptReason:""}},qa=e=>{const[t]=e.getArguments();if(t){if(o.isObjectLiteralExpression(t)){const s=t.getProperty("handler");return s?o.isPropertyAssignment(s)?s.getInitializer():o.isShorthandPropertyAssignment(s)?s.getNameNode():o.isMethodDeclaration(s)?s:void 0:void 0}return t}},$a=(e,t)=>{const s=qa(t);if(!s)return;if(o.isArrowFunction(s)||o.isFunctionExpression(s)||o.isMethodDeclaration(s))return e;if(!o.isIdentifier(s))return;const n=s.getSourceFile(),i=s.getText(),r=n.getVariableDeclaration(i)?.getInitializer();return r&&(o.isArrowFunction(r)||o.isFunctionExpression(r))?r:n.getFunction(i)},ja=e=>{let t=!1,s=!1,n=!1,i=!1,r=!1;for(const u of e.getDescendantsOfKind(l.CallExpression))if(va(u)&&(r=!0),ya(u)&&(t=!0),Na(u)&&(i=!0),ba(u)&&(s=!0),Pa(u)&&(n=!0),r&&t&&i&&n)break;const{handlesErrors:a,reachesOutbound:c}=Ka(e);return{callsMail:xe(e,Ta),emitsEvent:xe(e,Ia),fanOut:t,handlesErrors:a,reachesOutbound:c,runsAiGeneration:s||xe(e,wa),throwsBareError:_a(e),unboundedAiGeneration:n,usesInsertManyUnsafe:i,writesUserTable:r}},Va=(e,t)=>{const s=e.getInitializer();if(!s||!o.isCallExpression(s))return;const n=_(s);if(!n||n.kind!=="query"&&n.kind!=="mutation"&&n.kind!=="action")return;const i=n.receiver?xa(n.receiver):{usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},r=$a(e,s);return{...r?ja(r):{},...Ba(e),...i,analyzableBody:r!==void 0,exportName:e.getName(),file:t,hasEmailArg:pa(s,n.receiver),kind:n.kind,visibility:n.visibility}},Wa=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const i of n.getDeclarations()){const r=Va(i,t);r&&s.push(r)}return s},Ha=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Wa(i,v(t,n)))}return s},Ga=new Set(["dbRateLimit","rateLimit"]),Ya=e=>o.isArrowFunction(e)?e.getBody():e,Qa=(e,t)=>{const s=A(e.getExpression());if(s===void 0||!Ga.has(s))return;const n=e.getArguments()[2];if(!n)return;const i=N(n,"key");if(!i)return;const r=Ya(i);if(!(!F(r)||K(r)))return{callee:s,exportName:E(e),file:t,limitName:Nt(e),line:e.getStartLineNumber()}},Xa=(e,t)=>P(e,t,Qa),Za=new Set(["findFirst","findFirstOrThrow","findMany","get"]),Ja=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!Za.has(t.getName()))return;const s=t.getExpression();if(D(s)){const n=e.getArguments()[0];return n&&o.isStringLiteral(n)?n.getLiteralText():""}if(o.isPropertyAccessExpression(s)&&D(s.getExpression()))return s.getName()},ec=e=>{let t=e;for(;o.isCallExpression(t);){const s=t.getExpression();if(!o.isPropertyAccessExpression(s))return;if(s.getName()==="query"&&D(s.getExpression())){const n=t.getArguments()[0];return n&&o.isStringLiteral(n)?n.getLiteralText():""}t=s.getExpression()}},tc=e=>{let t=Ze(e)??e;for(;o.isAwaitExpression(t);)t=Ze(t.getExpression())??t.getExpression();return t},qt=(e,t=!1)=>{const s=tc(e);if(o.isIdentifier(s)){if(t)return;const n=ie(s);return n===void 0?void 0:qt(n,!0)}if(o.isCallExpression(s))return Ja(s)??ec(s)},sc=e=>{const t=e.getBody();if(!o.isBlock(t))return[t];const s=[];for(const n of e.getDescendantsOfKind(l.ReturnStatement)){const i=n.getFirstAncestor(a=>o.isArrowFunction(a)||o.isFunctionExpression(a)||o.isFunctionDeclaration(a)),r=n.getExpression();i===e&&r!==void 0&&s.push(r)}return s},nc=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!o.isCallExpression(s))return[];const n=_(s);if(n?.kind!=="query")return[];const i=Lt(s);if(i===void 0)return[];const r=n.receiver!==void 0&&qs(n.receiver,"output"),a=n.receiver!==void 0&&Pt(n.receiver,"use","mask"),c=new Set,u=[];for(const d of sc(i)){const x=qt(d);x===void 0||c.has(x)||(c.add(x),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),table:x,usesMask:a,usesOutput:r,visibility:n.visibility}))}return u},rc=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...nc(c,r))}return s},ic=e=>{if(!e||!o.isObjectLiteralExpression(e))return[];const t=[];for(const s of e.getProperties())(o.isPropertyAssignment(s)||o.isShorthandPropertyAssignment(s)||o.isMethodDeclaration(s)||o.isGetAccessorDeclaration(s))&&t.push(s.getName());return t},oc=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&o.isCallExpression(s)?_(s):void 0;if(!n)return[];const i=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=bt(r);if(a===void 0)continue;const c=ic(N(a.options,"with"));c.length!==0&&i.push({exportName:e.getName(),file:t,line:r.getStartLineNumber(),parentTable:a.table,relations:c,visibility:n.visibility})}return i},ac=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...oc(c,r))}return s},te=e=>{if(o.isStringLiteral(e)||o.isNoSubstitutionTemplateLiteral(e))return e.getLiteralText();if(o.isBinaryExpression(e)&&e.getOperatorToken().getKind()===l.PlusToken){const t=te(e.getLeft()),s=te(e.getRight());return t!==void 0&&s!==void 0?t+s:void 0}},cc=e=>{let t=e,s=t.getParent();for(;s!==void 0&&o.isBinaryExpression(s)&&s.getOperatorToken().getKind()===l.PlusToken;)t=s,s=t.getParent();return t!==e&&te(t)!==void 0},lc=/(?:^|\/)__tests__\//u,uc=/\.(?:spec|test)$/u,dc=e=>lc.test(e)||uc.test(e),fc=e=>{const t=e.getParent();if(t!==void 0){if(o.isVariableDeclaration(t)||o.isPropertyAssignment(t)||o.isPropertySignature(t))return t.getName();if(o.isBinaryExpression(t)&&t.getOperatorToken().getKind()===l.EqualsToken)return t.getLeft().getText()}},pc=(e,t,s)=>un(e)?!dc(s)&&dn(fc(t)):!0,gc=(e,t)=>{const s=[],n=[...e.getDescendantsOfKind(l.BinaryExpression),...e.getDescendantsOfKind(l.StringLiteral),...e.getDescendantsOfKind(l.NoSubstitutionTemplateLiteral)],i=new Set;for(const r of n){if(cc(r))continue;const a=te(r);if(a===void 0)continue;const c=cn(a);if(c===void 0||!pc(c,r,t))continue;const u=r.getStartLineNumber(),d=`${String(u)}:${c}`;i.has(d)||(i.add(d),s.push({file:t,kind:c,line:u,preview:ln(a)}))}return s},mc=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...gc(i,v(t,n)))}return s},hc=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&o.isCallExpression(s)?_(s):void 0;if(!n)return[];const i=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=bt(r);if(a===void 0)continue;const c=N(a.options,"includeDeleted");if(c===void 0)continue;const u=o.isTrueLiteral(c),d=!u&&F(c);!u&&!d||i.push({exportName:e.getName(),file:t,fromArgs:d,hardcodedTrue:u,line:r.getStartLineNumber(),table:a.table,visibility:n.visibility})}return i},xc=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...hc(c,r))}return s},Ec=new Set(["query","unsafe"]),vc=e=>{if(!o.isPropertyAccessExpression(e)||!Ec.has(e.getName()))return!1;const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="sql")return!1;const s=t.getExpression();return o.isIdentifier(s)&&s.getText()==="ctx"},Sc=e=>o.isBinaryExpression(e)||o.isTemplateExpression(e),Ac=e=>e.getFirstAncestorByKind(l.VariableDeclaration)?.getName()??"<module>",yc=(e,t)=>{if(!vc(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!Sc(s)))return{exportName:Ac(e),file:t,line:s.getStartLineNumber()}},Nc=(e,t)=>P(e,t,yc),bc=[["convex",["convex","@convex-dev/"]],["supabase",["@supabase/"]],["firebase",["firebase","@firebase/","firebase-admin"]]],Pc=e=>{for(const[t,s]of bc)for(const n of s)if(e===n||e.startsWith(n.endsWith("/")?n:`${n}/`))return t},Ic=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of i.getImportDeclarations()){const a=r.getModuleSpecifierValue(),c=Pc(a);c!==void 0&&s.push({file:v(t,n),line:r.getStartLineNumber(),moduleSpecifier:a,platform:c})}}return s},wc=new Set(["createMultipartUpload","delete","download","generateUploadUrl","get","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","put","resumeMultipartUpload","store","upload"]),Tc=(e,t,s=[])=>{const n=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));return oe(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.storage"||r.startsWith("ctx.storage."),methods:wc,requireUnmodifiedReach:!0}).map(r=>{const a=n.get(`${r.file}:${r.exportName}`);return a===void 0?r:{...r,visibility:a}})},Cc=new Map([["generateUploadUrl",1],["getPresignedUrl",1],["getSignedUrl",1],["store",2],["upload",2]]),Fc=e=>e&&o.isNumericLiteral(e)?Number(e.getText()):void 0,Oc=e=>{if(e===void 0)return{analyzable:!0,presentKeys:[]};if(!o.isObjectLiteralExpression(e))return{analyzable:!1,presentKeys:[]};const t=[];let s,n=!1;for(const i of e.getProperties()){if(o.isSpreadAssignment(i)){n=!0;continue}if(o.isPropertyAssignment(i)){const r=i.getName();t.push(r),r==="expiresInSeconds"&&(s=Fc(i.getInitializer()));continue}(o.isShorthandPropertyAssignment(i)||o.isMethodDeclaration(i))&&t.push(i.getName())}return{analyzable:!n,expiresInSeconds:s,presentKeys:t}},Rc=e=>{if(!o.isPropertyAccessExpression(e))return;const t=e.getName(),s=Cc.get(t);if(s===void 0)return;const n=e.getExpression().getText();return n==="ctx.storage"||n.startsWith("ctx.storage.")?{method:t,optionsIndex:s}:void 0},Lc=(e,t)=>{const s=Rc(e.getExpression());if(s!==void 0)return{exportName:E(e),file:t,line:e.getStartLineNumber(),method:s.method,...Oc(e.getArguments()[s.optionsIndex])}},Dc=(e,t)=>P(e,t,Lc),kc=(e,t)=>({analytics:e.analytics||t.dependencies.has("@lunora/bindings"),auth:t.dependencies.has("@lunora/auth"),containers:e.container||t.containerCount>0||t.dependencies.has("@lunora/container"),flags:e.flags||t.dependencies.has("@lunora/flags"),kv:e.kv||t.dependencies.has("@lunora/bindings"),mail:e.mail||t.dependencies.has("@lunora/mail"),notifications:e.notify||t.dependencies.has("@lunora/notify"),payments:e.payments||t.hasPaymentTables,queues:t.queueCount>0||t.dependencies.has("@lunora/queue"),scheduler:e.scheduler||t.cronCount>0||t.dependencies.has("@lunora/scheduler"),storage:e.storage||t.storageRuleCount>0||t.storageColumnCount>0||t.dependencies.has("@lunora/storage"),vectors:e.vectors||t.vectorIndexCount>0||t.dependencies.has("@lunora/bindings"),workflows:e.workflows||t.workflowCount>0||t.dependencies.has("@lunora/workflow")}),Mc=new Set(["RegisteredAction","RegisteredMutation","RegisteredQuery"]),be=e=>{const t=e.getType(),s=t.getAliasSymbol()?.getName()??t.getSymbol()?.getName();return s!==void 0&&Mc.has(s)?s:void 0},$t=e=>{const t=e.getInitializer();return t===void 0?!1:o.isCallExpression(t)||o.isIdentifier(t)||o.isPropertyAccessExpression(t)},jt={cause:"codegen recognises a procedure only when the initializer is a builder chain, and this one is produced by a call or an alias",remediation:"A factory that returns a procedure cannot be read statically — inline it, or export the chain the factory builds."},Kc={cause:"the binding is exported by a separate `export { … }` statement, and codegen reads the `export` keyword on the declaration itself",remediation:"Move the keyword onto the declaration and drop the separate export statement."},Pe=(e,t,s,n,i)=>({cacheKey:`procedure_not_registered:${e}:${t}`,categories:["SCHEMA"],description:"Codegen registers an export only when the declaration carries `export` and its initializer is literally a builder chain. A procedure written any other way exists at runtime but never reaches `_generated/api.ts`, so no caller can address it.",detail:`\`${t}\` in \`${e}\` (line ${n.toString()}) has type \`${s}\` but was not registered — ${i.cause}.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:n,typeName:s},name:"procedure_not_registered",remediation:`Assign the builder chain directly: \`export const ${t} = query.input({ … }).query(handler);\`. ${i.remediation}`,title:"Procedure exists at runtime but is missing from the generated API"}),_c=(e,t,s)=>{const n=[];for(const i of e.getVariableStatements().filter(r=>r.isExported()))for(const r of i.getDeclarations()){const a=r.getName();if(s.has(`${t}:${a}`)||!$t(r))continue;const c=be(r);c!==void 0&&n.push(Pe(t,a,c,r.getStartLineNumber(),jt))}return n},zc=(e,t,s)=>{if(s.has(`${t}:default`))return[];const n=[];for(const i of e.getExportAssignments().filter(r=>!r.isExportEquals())){const r=be(i.getExpression());r!==void 0&&n.push(Pe(t,"default",r,i.getStartLineNumber(),jt))}return n},Uc=(e,t,s)=>{const n=[];for(const i of e.getExportDeclarations().filter(r=>r.getModuleSpecifier()===void 0))for(const r of i.getNamedExports()){const a=r.getAliasNode()?.getText()??r.getName();if(s.has(`${t}:${a}`))continue;const c=r.getLocalTargetDeclarations().find(d=>o.isVariableDeclaration(d));if(c===void 0||!$t(c))continue;const u=be(c);u!==void 0&&n.push(Pe(t,a,u,r.getStartLineNumber(),Kc))}return n},Bc=(e,t,s)=>[..._c(e,t,s),...zc(e,t,s),...Uc(e,t,s)],qc=(e,t,s)=>{const n=new Set(s.map(r=>`${r.filePath}:${r.exportName}`)),i=[];for(const r of g(t)){const a=e.getSourceFile(r);a!==void 0&&i.push(...Bc(a,v(t,r),n))}return i.toSorted((r,a)=>r.cacheKey.localeCompare(a.cacheKey))},$c=new Set(["when","where"]),Ee=new Set(["definePolicy","defineShape"]),jc=e=>{if(!o.isCallExpression(e))return;const t=e.getExpression();if(o.isPropertyAccessExpression(t)){const n=t.getName();return Ee.has(n)?n:void 0}if(!o.isIdentifier(t))return;for(const n of t.getSymbol()?.getDeclarations()??[])if(o.isImportSpecifier(n)){const i=n.getNameNode().getText();return Ee.has(i)?i:void 0}const s=t.getText();return Ee.has(s)?s:void 0},Vc=e=>o.isObjectLiteralExpression(e)&&e.getProperties().length===0,Vt=e=>{if(e!==void 0){if(o.isReturnStatement(e)&&e.getExpression()===void 0||e.getKind()===l.UndefinedKeyword||e.getText()==="undefined")return"undefined";if(Vc(e))return"empty-object";if(o.isParenthesizedExpression(e))return Vt(e.getExpression())}},Ie=e=>e.getAncestors().find(t=>o.isArrowFunction(t)||o.isFunctionExpression(t)||o.isFunctionDeclaration(t)),Wc=e=>e.getDescendantsOfKind(l.ReturnStatement).filter(t=>Ie(t)===e),Wt=e=>e.getDescendantsOfKind(l.ConditionalExpression).filter(t=>Ie(t)===e),Hc=e=>{const t=Wc(e);return t.length>1?!0:t.some(s=>s.getFirstAncestorByKind(l.IfStatement)!==void 0)||Wt(e).length>0},Gc=e=>e.getDescendantsOfKind(l.IfStatement).filter(t=>Ie(t)===e),Ae=e=>e.getKind()===l.NullKeyword||e.getKind()===l.FalseKeyword||o.isIdentifier(e)&&e.getText()==="undefined"?!0:o.isNumericLiteral(e)?e.getLiteralValue()===0:o.isStringLiteral(e)&&e.getLiteralValue()==="",Yc=(e,t)=>Ae(e)||Ae(t),Qc=new Map([[l.EqualsEqualsEqualsToken,"positive"],[l.EqualsEqualsToken,"positive"],[l.ExclamationEqualsEqualsToken,"negative"],[l.ExclamationEqualsToken,"negative"]]),xt=e=>!Ae(e)&&(o.isLiteralExpression(e)||e.getKind()===l.TrueKeyword),Xc=(e,t,s)=>{const n=Qc.get(e);if(n!==void 0)return Yc(t,s)?n==="positive"?"negative":"positive":xt(t)||xt(s)?void 0:n},j=e=>{if(o.isParenthesizedExpression(e))return j(e.getExpression());if(o.isPrefixUnaryExpression(e)&&e.getOperatorToken()===l.ExclamationToken)return"negative";if(o.isBinaryExpression(e)){const t=e.getOperatorToken().getKind(),s=Xc(t,e.getLeft(),e.getRight());if(s!==void 0)return s;if(t===l.AmpersandAmpersandToken||t===l.BarBarToken){const n=j(e.getLeft()),i=j(e.getRight());return n===i?n:"indeterminate"}}return o.isIdentifier(e)||o.isPropertyAccessExpression(e)||o.isElementAccessExpression(e)||o.isCallExpression(e)?"positive":"indeterminate"},Et=e=>{if(e!==void 0){if(o.isReturnStatement(e))return e;if(o.isBlock(e)){const t=e.getStatements().at(-1);return t!==void 0&&o.isReturnStatement(t)?t:void 0}}},Zc=e=>{if(e.getElseStatement()!==void 0)return;const t=e.getNextSiblingIfKind(l.ReturnStatement);return t!==void 0&&t.getNextSibling()===void 0?t:void 0},Jc=e=>o.isReturnStatement(e)?e.getExpression()??e:e,el=e=>{const t=[];for(const s of Wt(e)){const n=j(s.getCondition());n==="positive"?t.push(s.getWhenFalse()):n==="negative"&&t.push(s.getWhenTrue())}for(const s of Gc(e)){const n=j(s.getExpression());if(n==="indeterminate")continue;const i=n==="negative"?Et(s.getThenStatement()):Et(s.getElseStatement())??Zc(s);i!==void 0&&t.push(Jc(i))}return t},tl=e=>{for(const t of e.getAncestors())if(o.isVariableDeclaration(t)){const s=t.getNameNode();if(o.isIdentifier(s))return s.getText()}return"<anonymous>"},sl=(e,t,s)=>{if(!o.isCallExpression(e))return[];const[n]=e.getArguments();if(!n||!o.isObjectLiteralExpression(n))return[];const i=[];for(const r of n.getProperties()){if(!o.isPropertyAssignment(r)||!$c.has(r.getName()))continue;const a=r.getInitializer();if(!(!a||!(o.isArrowFunction(a)||o.isFunctionExpression(a)))&&Hc(a))for(const c of el(a)){const u=Vt(c);u!==void 0&&i.push({exportName:tl(e),file:s,form:u,key:r.getName(),line:c.getStartLineNumber(),owner:t})}}return i},nl=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const i=jc(n);i!==void 0&&s.push(...sl(n,i,t))}return s},rl=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...nl(i,v(t,n)))}return s},il=new Set(["query","upsert","upsertMany"]),ol=e=>{if(!o.isPropertyAccessExpression(e))return;const t=e.getName();if(il.has(t))return e.getExpression().getText()==="ctx.vectors"?t:void 0},al=(e,t)=>{const s=ol(e.getExpression());if(s===void 0)return;const n=e.getArguments()[1];if(!n)return;const i=N(n,"namespace");if(!(!i||!F(i)||K(i)))return{exportName:E(e),file:t,line:e.getStartLineNumber(),method:s}},cl=(e,t)=>P(e,t,al),ll=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="get")return!1;const s=t.getExpression();return o.isPropertyAccessExpression(s)?s.getName()==="workflows":o.isIdentifier(s)&&s.getText()==="workflows"},ul=e=>{const t=e.getArguments()[0];return t&&o.isStringLiteral(t)?t.getLiteralText():""},dl=(e,t)=>{const s=[];for(const n of g(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of i.getDescendantsOfKind(l.CallExpression)){if(!ll(a))continue;const c=Cs(a);c!==""&&s.push({exportName:c,file:r,line:a.getStartLineNumber(),workflow:ul(a)})}}return s},fl=".lunora-schema.json",w=(e,t)=>{b(e)&&At(e,"utf8")===t||rs(e,t,"utf8")},C=(e,t)=>{if(t===""){is(e,{force:!0});return}w(e,t)},pl=e=>{const t=f(e,"package.json");if(b(t))try{const s=JSON.parse(At(t,"utf8"));return typeof s.version=="string"&&s.version!==""?s.version:void 0}catch{return}},gl=()=>{const e=process.env.LUNORA_CODEGEN_TIMING;return e!==void 0&&e!==""},ml=e=>{let t=b(e)?e:pe(e);for(;t&&t!==pe(t);){const s=f(t,"tsconfig.json");if(b(s))return s;t=pe(t)}},vt=e=>e.replaceAll("\\","/"),hl=(e,t,s)=>{if(s&&e.length>0){const r=e.map(a=>`"${a.exportName}"`).join(", ");throw new L("MASK_UNSUPPORTED",`This project declares a \`mask(...)\` policy whose argument isn't a plain object literal (e.g. \`mask(sharedPolicies)\` referencing a hoisted variable), or contains a spread (\`...shared\`) or computed key (\`[name]:\`) codegen can't enumerate, so codegen can't tell which columns it masks. Because the project also declares replication shape(s) (${r}), codegen can't verify none of them replicate a table that policy masks — inline every table and column as literal keys so codegen can verify it, or remove the affected shape(s).`,{status:422})}const n=new Map;for(const r of t.columns){const a=n.get(r.table)??[];a.push(r.column),n.set(r.table,a)}const i=t.columns.length>0;for(const r of e){if(r.table===void 0){if(i)throw new L("MASK_UNSUPPORTED",`defineShape "${r.exportName}" has a non-literal \`table\` (a variable or expression, not a string literal), so codegen can't statically verify it doesn't replicate a table that masks a column. This project masks at least one column elsewhere, so the combination can't be proven safe — change "${r.exportName}"'s \`table\` to a plain string literal so codegen can verify it, or remove the mask(s) on the table it targets.`,{status:422});continue}const a=n.get(r.table);if(a===void 0)continue;const c=a.map(u=>`"${u}"`).join(", ");throw new L("MASK_UNSUPPORTED",`defineShape "${r.exportName}" replicates table "${r.table}", which masks column(s) ${c} on at least one procedure. A shape runs no procedure, so \`.use(mask(...))\` never applies to its replicated rows — remove the shape, unmask the table, or wait for shape-masking support.`,{status:422})}},se=(e,t,s)=>{const n=e.getSourceFile(t);if(n===void 0){e.createSourceFile(t,s,{overwrite:!0});return}n.getFullText()!==s&&n.replaceWithText(s)},St=(e,t,s)=>e.getSourceFile(t)?.getFullText()===s,xl=8,El=e=>{const{agents:t,apiPath:s,generatedFunctionsPath:n,lunoraDirectory:i,migrations:r,project:a,shapes:c,usesSandbox:u,useUmbrella:d,workflows:x}=e;let y=Je(a,i),p=tt(a,i),O=et(a,i);Sn([...y,...p].map(S=>S.filePath));for(let S=1;;S+=1){const T=Is({agents:t,functions:y,httpRoutes:O,mutators:p,useUmbrella:d,workflows:x}),k=ws({agents:t,functions:y,migrations:r,mutators:p,shapes:c,useUmbrella:d,usesSandbox:u});if(S>=xl||St(a,s,T)&&St(a,n,k))return{apiContent:T,functions:y,functionsContent:k,httpRoutes:O,mutators:p};se(a,s,T),se(a,n,k),y=Je(a,i),p=tt(a,i),O=et(a,i)}},vl=e=>{const t=ml(e);return t?new Xe({skipAddingFilesFromTsConfig:!1,tsConfigFilePath:t,useInMemoryFileSystem:!1}):new Xe({skipAddingFilesFromTsConfig:!0,useInMemoryFileSystem:!1})},pu=(e,t)=>{const s=g(t),n=f(t,"schema.ts");b(n)&&s.push(n);for(const c of s){const u=e.getSourceFile(c);u===void 0?e.addSourceFileAtPath(c):u.refreshFromFileSystemSync()}const i=new Set(s.map(c=>vt(c))),r=vt(t),a=`${r}/`;for(const c of e.getSourceFiles()){const u=c.getFilePath();(u===r||u.startsWith(a))&&!i.has(u)&&e.removeSourceFile(c)}for(const c of e.getSourceFiles()){const u=c.getFilePath();if(!(u===r||u.startsWith(a)||u.includes("/node_modules/")))try{c.refreshFromFileSystemSync()}catch{e.removeSourceFile(c)}}},gu=e=>{const t=gl(),s=t?ge.now():0,n=f(e.projectRoot,e.lunoraDirectory??"lunora"),i=f(n,"schema.ts");if(!b(i))throw new L("INTERNAL",`schema.ts not found at ${i}`);const r=e.project??vl(n);En(Ai);const a=an(r,i,e.projectRoot),{agents:c,containers:u,dataModelContent:d,dependencies:x,env:y,featureUsage:p,hasBrowser:O,hasFlags:S,hasNotify:T,identity:k,platformGate:U,queues:R,serverContent:z,storageRulesMetadata:B,usesSandbox:W,useUmbrella:I,workflows:M}=zn({lunoraDirectory:n,project:r,projectRoot:e.projectRoot,schema:a,target:e.target}),m=f(n,"_generated"),we=f(m,"dataModel.ts"),Te=f(m,"server.ts"),Ht=f(m,"api.ts"),Gt=f(m,"functions.ts");se(r,we,d),se(r,Te,z);const ae=Xs(r,n),q=fn(r,n),{apiContent:Ce,functions:$,functionsContent:Fe,httpRoutes:Yt,mutators:Qt}=El({agents:c,apiPath:Ht,generatedFunctionsPath:Gt,lunoraDirectory:n,migrations:ae,project:r,shapes:q,useUmbrella:I,usesSandbox:W,workflows:M}),ce=js(r,n,M,c),H=e.lint===!1?void 0:cs({adminRoutes:Hn(r,n),aiRawRuns:Qn(r,n),aiToolSideEffects:or(r,n),argumentDerivedFetches:lr(r,n),argumentValidators:Ar(r,n),authApiCalls:$s(r,n),authConfigs:Or(r,n),browserUrlAccesses:Mr(r,n),configCalls:jr(r,n),containerKeyAccesses:Wr(r,n),containerOverrides:Zr(r,n),containers:u,exportSinks:si(r,n),staleMigrationImports:Ic(r,n),failOpenGuards:ai(r,n),flagReads:hi(r,n),flagSecurityDefaults:Si(r,n),geoIndexUsages:bi(r,n),httpActionGuards:Oi(r,n),httpHeaderWrites:Bi(r,n),hyperdriveCalls:Gs(r,n),identityClaimReads:Gi(r,n),imageDeliveryUrlAccesses:Qi(r,n),inserts:Ys(r,n),kvKeyAccesses:Zi(r,n),mailRecipientAccesses:no(r,n),maskProcedures:Qs(r,n),maskStrategies:fo(r,n),mutatorWrites:Eo(r,n),nondeterministicCalls:en(r,n),normalizeIdAuthorizations:Do(r,n),notifyCalls:sn(r,n),notifyConfig:tn(r,n),ownerFieldWrites:qo(r,n,$),unrestrictedWhereBranches:rl(r,n),paymentWebhooks:Qo(r,n),privilegedDispatches:la(r,n),procedureProtections:Ha(r,n),queries:Bs(r,n),queues:R,r2sqlCalls:nn(r,n),ratelimitKeySelectors:Xa(r,n),rawRowReturns:rc(r,n),relationLoads:ac(r,n),rlsProcedures:rn(r,n),schema:a,secretLiterals:mc(r,n),shapes:q,softDeleteReads:xc(r,n),sqlInterpolations:Nc(r,n),storageKeyAccesses:Tc(r,n,$),storageUploads:Dc(r,n),vectorNamespaceAccesses:cl(r,n),workflowCalls:dl(r,n),workflows:M,wranglerVariables:e.wranglerVariables}),Oe=H===void 0?[]:[...os(H,{source:"static"}),...qc(r,n,$)],Xt=on(r,n),Re=co(r,n);hl(q,Re,oo(r,n));const Zt=S?di(r,n):[],G=kc(p,{containerCount:u.length,cronCount:ce.length,dependencies:x,hasPaymentTables:Vo(a.tables),queueCount:R.length,storageColumnCount:Object.keys(gs(a)).length,storageRuleCount:B.rules.length,vectorIndexCount:a.vectorIndexes.length,workflowCount:M.length}),Le=t?ge.now():0,le=vn(a,ae.map(h=>h.id)),De=ms({advisories:Oe,advisorProcedures:H?.procedureProtections??[],agents:c,containers:u,env:y,flagKeys:Zt,hasAccessFacade:p.access,hasAi:p.ai,hasAnalytics:p.analytics,hasBrowser:O,hasFlags:S,hasHyperdrive:p.hyperdrive,hasImages:p.images,hasKv:p.kv,hasNotify:T,hasPayments:p.payments,hasPipelines:p.pipelines,hasR2sql:p.r2sql,hasX402:p.x402,maskMetadata:Re,mutators:Qt,queues:R,rlsMetadata:Xt,schema:a,schemaSnapshot:le,shapes:q,storageRules:B,studioFeatures:G,useUmbrella:I,workflows:M}),ke=hs(q,x.has("@lunora/db"),I),Me=xs(u,a.jurisdiction),Ke=Es(M),_e=vs(c),ze=Ss(R),Ue=As(ce),Be=ys(a.vectorIndexes),Y=Ns(a,I),qe=bs(x.has("@lunora/seed")),Q=e.apiSpec??"openapi",ue=Q==="openapi"||Q==="both",de=Q==="openrpc"||Q==="both",$e=pn({emailAgents:c.filter(h=>h.onEmail===!0).map(h=>({bindingName:h.bindingName,exportName:h.exportName})),hasAccess:x.has("@lunora/cloudflare-access"),hasAi:p.ai,hasAnalytics:p.analytics,hasAuth:x.has("@lunora/auth"),hasBrowser:O,hasFramework:x.has("@lunora/astro")||x.has("@lunora/svelte")||x.has("@lunora/vue"),hasGlobal:a.tables.some(h=>h.shardMode==="global"&&h.globalBackend!=="hyperdrive"),hasHyperdrive:p.hyperdrive,hasHyperdriveGlobal:a.tables.some(h=>h.shardMode==="global"&&h.globalBackend==="hyperdrive"),hasImages:p.images,hasKv:p.kv,hasKvIntrospector:G.kv,hasNotify:T,hasPayments:p.payments,hasR2sql:p.r2sql,hasQueue:R.some(h=>h.mode==="push"),hasScheduler:G.scheduler,hasStorage:G.storage,hasVectors:a.vectorIndexes.length>0,hasWorkflow:M.length>0,hasX402:p.x402,identity:k,jurisdiction:a.jurisdiction,tableNames:a.tables.map(h=>h.name),useUmbrella:I,voiceAgents:c.filter(h=>h.voice===!0&&h.voiceBindingName!==void 0).map(h=>({bindingName:h.voiceBindingName,exportName:h.exportName})),wantsOpenApi:ue,wantsOpenRpc:de}),je=pl(e.projectRoot),Ve=gn({functions:$,httpRoutes:Yt,version:je}),We=hn({functions:$,version:je}),He=`${JSON.stringify(Ve,void 0,2)}
-`,Ge=`${JSON.stringify(We,void 0,2)}
-`,Ye=mn(Ve),Qe=xn(We),fe=f(n,fl),Jt=b(fe);if(e.dryRun||(b(m)||ns(m,{recursive:!0}),w(f(m,"app.ts"),$e),w(we,d),w(f(m,"api.ts"),Ce),w(Te,z),w(f(m,"functions.ts"),Fe),w(f(m,"shard.ts"),De),w(f(m,"crons.ts"),Ue),w(f(m,"vectors.ts"),Be),w(f(m,"drizzle.global.ts"),Y.global),w(f(m,"drizzle.shard.ts"),Y.shard),C(f(m,"containers.ts"),Me),C(f(m,"workflows.ts"),Ke),C(f(m,"agents.ts"),_e),C(f(m,"queues.ts"),ze),C(f(m,"seed.ts"),qe),C(f(m,"collections.ts"),ke),C(f(m,"openapi.json"),ue?He:""),C(f(m,"openapi.ts"),ue?Ye:""),C(f(m,"openrpc.json"),de?Ge:""),C(f(m,"openrpc.ts"),de?Qe:""),(!Jt||e.updateSchemaBaseline===!0)&&w(fe,as(le))),t){const h=ge.now(),es=Math.round(h-s),ts=Math.round(Le-s),ss=Math.round(h-Le);console.error(`@lunora/codegen: codegen took ${es.toString()}ms (discovery ${ts.toString()}ms, emit ${ss.toString()}ms)`)}return{advisories:Oe,advisorContext:H,agents:c,containers:u,cronTriggers:Ps(ce),generated:{agents:_e,api:Ce,app:$e,collections:ke,containers:Me,crons:Ue,dataModel:d,drizzleGlobal:Y.global,drizzleShard:Y.shard,functions:Fe,openApi:He,openApiModule:Ye,openRpc:Ge,openRpcModule:Qe,queues:ze,seed:qe,server:z,shard:De,vectors:Be,workflows:Ke},migrations:ae,outputDirectory:m,platformDiagnostics:U.diagnostics,queues:R,schemaSnapshot:le,schemaSnapshotPath:fe,workflows:M}};export{fl as SCHEMA_SNAPSHOT_FILENAME,vl as createCodegenProject,ml as findTsconfig,pu as refreshCodegenProject,gu as runCodegen};

package/dist/packem_shared/SCHEMA_SNAPSHOT_VERSION-CTWRkAF5.mjs

@@ -1,2 +0,0 @@
-const a=(e,i=2166136261)=>{let t=i;for(let o=0;o<e.length;o+=1)t^=e.codePointAt(o)??0,t=Math.imul(t,16777619);return(t>>>0).toString(16).padStart(8,"0")},l=e=>`${a(e,2166136261)}${a(e,16777619)}`,g=1;function S(e){const i={},t=Object.keys(e);t.sort();for(const o of t)i[o]=e[o];return i}const c=e=>`${JSON.stringify(e,void 0,2)}
-`,$=e=>l(c(e)),r=e=>typeof e=="object"&&e!==null,f=e=>r(e)&&r(e.fields)&&r(e.indexes)&&r(e.relations)&&typeof e.shardMode=="string",k=e=>{if(e===void 0||e.trim()==="")return{status:"absent"};let i;try{i=JSON.parse(e)}catch(o){return{error:`baseline is not valid JSON: ${o instanceof Error?o.message:String(o)}`,status:"invalid"}}if(!r(i)||i.version!==1||!r(i.tables))return{error:`baseline is malformed or written by an incompatible version (expected version ${String(1)})`,status:"invalid"};for(const[o,s]of Object.entries(i.tables))if(!f(s))return{error:`baseline table "${o}" has an invalid structure`,status:"invalid"};return{snapshot:{jurisdiction:typeof i.jurisdiction=="string"?i.jurisdiction:void 0,migrationIds:Array.isArray(i.migrationIds)?i.migrationIds:[],tables:i.tables,version:1},status:"ok"}},p=(e,i)=>e.unique===i.unique&&e.fields.length===i.fields.length&&e.fields.every((t,o)=>t===i.fields[o]),h=(e,i,t,o)=>{const s=[];return t.kind!==o.kind&&s.push({remediation:"backfill",severity:"breaking",summary:`field ${e}.${i} changed type: ${t.kind} → ${o.kind} — add a data migration to convert existing values`,table:e,scope:"table",type:"changedFieldKind"}),t.optional&&!o.optional?s.push({remediation:"backfill",severity:"breaking",summary:`field ${e}.${i} became required — rows missing it would be invalid; add a data migration to backfill it`,table:e,scope:"table",type:"fieldOptionalToRequired"}):!t.optional&&o.optional&&s.push({remediation:"none",scope:"table",severity:"safe",summary:`field ${e}.${i} became optional`,table:e,type:"fieldRequiredToOptional"}),s},m=(e,i,t)=>t.optional?{remediation:"none",scope:"table",severity:"safe",summary:`added optional field ${e}.${i}`,table:e,type:"addedOptionalField"}:{remediation:"backfill",severity:"breaking",summary:`added required field ${e}.${i} — existing rows have no value; add a data migration to backfill it`,table:e,scope:"table",type:"addedRequiredField"},u=(e,i,t,o)=>{for(const[s,n]of Object.entries(t.fields)){const d=i.fields[s];d===void 0?o.push(m(e,s,n)):o.push(...h(e,s,d,n))}for(const s of Object.keys(i.fields))t.fields[s]===void 0&&o.push({remediation:"backfill",severity:"breaking",summary:`removed field ${e}.${s} — add a data migration if stored data must be cleaned up`,table:e,scope:"table",type:"removedField"})},y=(e,i,t,o)=>{for(const[s,n]of Object.entries(t.indexes)){const d=i.indexes[s];if(d===void 0){o.push({remediation:"none",scope:"table",severity:"safe",summary:`added index ${s} on ${e}`,table:e,type:"addedIndex"});continue}p(d,n)||o.push({remediation:"code",severity:"breaking",summary:`index ${s} on ${e} changed shape — a query may have relied on the old index`,table:e,scope:"table",type:"changedIndex"})}for(const s of Object.keys(i.indexes))t.indexes[s]===void 0&&o.push({remediation:"code",severity:"breaking",summary:`removed index ${s} on ${e} — a query that used \`.withIndex("${s}")\` would break`,table:e,scope:"table",type:"removedIndex"})},b=(e,i,t,o)=>{for(const s of Object.keys(t.relations))i.relations[s]===void 0&&o.push({remediation:"none",scope:"schema",severity:"safe",summary:`added relation ${e}.${s}`,table:e,type:"addedRelation"});for(const s of Object.keys(i.relations))t.relations[s]===void 0&&o.push({remediation:"code",scope:"schema",severity:"breaking",summary:`removed relation ${e}.${s}`,table:e,type:"removedRelation"})},v=(e,i,t,o)=>{i.shardMode!==t.shardMode&&o.push({remediation:"rehome",severity:"breaking",summary:`table ${e} changed shard mode: ${i.shardMode} → ${t.shardMode} — its physical storage moves, and existing rows do NOT follow the schema; re-home them with an export/import round trip (https://lunora.sh/docs/concepts/sharding#migrating-a-populated-table)`,table:e,scope:"table",type:"changedShardMode"}),u(e,i,t,o),y(e,i,t,o),b(e,i,t,o)},O=(e,i)=>{const t=[],o=e?.tables??{};for(const[s,n]of Object.entries(i.tables)){const d=o[s];if(d===void 0){t.push({remediation:"none",scope:"table",severity:"safe",summary:`added table ${s}`,table:s,type:"addedTable"});continue}v(s,d,n,t)}for(const s of Object.keys(o))i.tables[s]===void 0&&t.push({remediation:"rehome",scope:"table",severity:"breaking",summary:`removed table ${s} — its rows stay in each shard's SQLite, unreachable through the schema; export the shard first if the data must be kept`,table:s,type:"removedTable"});if(e!==void 0&&e.jurisdiction!==i.jurisdiction){const s=e.jurisdiction??"(none)",n=i.jurisdiction??"(none)";t.push({remediation:"rehome",scope:"schema",severity:"breaking",summary:`Durable Object jurisdiction changed from ${s} to ${n} — this re-homes every DO and strands all existing shard, scheduler, and session-DO data in the old region (no in-place migration; export then import to move it). Revert the change, or override the gate to proceed intentionally.`,type:"changedJurisdiction"})}return{changes:t}};export{g as SCHEMA_SNAPSHOT_VERSION,O as diffSchemaSnapshots,$ as hashSchemaSnapshot,f as isValidTableSnapshot,k as parseSnapshotJson,c as serializeSchemaSnapshot,S as sortKeys};

package/dist/packem_shared/SchemaSnapshotParseError-qXCOA7dD.mjs

@@ -1,18 +0,0 @@
-import{LunoraError as $}from"@lunora/errors";import{SCHEMA_SNAPSHOT_VERSION as y,sortKeys as E,diffSchemaSnapshots as I,parseSnapshotJson as T}from"./SCHEMA_SNAPSHOT_VERSION-CTWRkAF5.mjs";import{serializeSchemaSnapshot as q}from"./SCHEMA_SNAPSHOT_VERSION-CTWRkAF5.mjs";const _=e=>e==="global"||e==="root"?e:`shardBy:${e.field}`,A=e=>e.kind==="optional"?{kind:e.inner?.kind??"unknown",optional:!0}:{kind:e.kind,optional:!1},L=e=>{const n={};for(const[t,i]of Object.entries(e.shape))n[t]=A(i);const s={};for(const t of e.indexes)s[t.name]={fields:[...t.fields],unique:t.unique??!1};const o={};for(const t of e.relations)o[t.name]={field:t.field,kind:t.kind,table:t.table};return{fields:n,indexes:s,relations:o,shardMode:_(e.shardMode)}},R=(e,n)=>{const s={};for(const t of e.tables)s[t.name]=L(t);const o=[...n].sort();return{jurisdiction:e.jurisdiction,migrationIds:o,tables:E(s),version:y}};class D extends ${constructor(n){super("SCHEMA_SNAPSHOT_PARSE",n,{name:"SchemaSnapshotParseError"})}}const F=e=>{const n=T(e);if(n.status==="invalid")throw new D(n.error);return n.status==="ok"?n.snapshot:void 0},M={deploy:{allowDrift:!0,updateBaseline:!0},prepare:{allowDrift:!0,updateBaseline:!0},verify:{allowDrift:!0,updateBaseline:!1}},g="  • For backward-compatible changes (e.g. adding an optional field): pass `--allow-schema-drift` to skip the block.",S="  • To accept the new shape without a migration (you know data is compatible): pass `--update-schema-baseline`.",j=e=>{const n=e===void 0?void 0:M[e];if(e===void 0||n===void 0)return`${g}
-${S}
-`;const s=n.updateBaseline?S:`  • To accept the new shape without a migration, run \`lunora prepare --update-schema-baseline\` — \`lunora ${e}\` does not take that flag.`;return`${g}
-${s}
-`},h=e=>e.map(n=>`  - ${n.summary}`).join(`
-`),w=e=>e.remediation==="backfill"&&e.table!==void 0,x=/^[A-Za-z_]\w*$/u,B=e=>`      lunora migrate create backfill_${e} --table ${e}`,O=(e,n,s)=>{const o=[...new Set(e.filter(i=>w(i)).map(i=>i.table))],t=[];if(o.length>0){t.push("  • Add a `defineMigration({ id, table, up })` in lunora/ for each affected table, then re-run this command — the baseline is re-blessed on a successful deploy, not by `lunora migrate` itself.\n");const i=o.filter(r=>x.test(r));i.length>0&&t.push(`
-    Scaffold the missing migration(s) — the generated \`up\` is an identity placeholder you must fill in:
-${i.map(r=>B(r)).join(`
-`)}
-
-`)}return n.length>0&&t.push(`  • Migration(s) ${n.join(", ")} declare a non-literal \`table\`, so codegen cannot tell which table they visit and they cover nothing. Use a string literal.
-`),t.push(j(s)),[`deploy blocked: ${String(e.length)} unresolved breaking schema change(s) since the last blessed schema baseline:`,h(e),"",`To fix:
-${t.join("")}Docs: https://lunora.dev/docs/migrations`].join(`
-`)},H=e=>{const{allowDrift:n=!1,baseline:s,command:o,current:t,migrations:i}=e,r=I(s,t),d=r.changes.filter(a=>a.severity==="breaking"),p=t.migrationIds.filter(a=>!(s?.migrationIds??[]).includes(a)),u=i.filter(a=>p.includes(a.id)),l=(a,f)=>({blocked:a,changes:r.changes,newMigrationIds:p,reason:f}),k=new Set(u.filter(a=>a.table!=="").map(a=>a.table)),v=u.filter(a=>a.table==="").map(a=>a.id);if(r.changes.length===0||s===void 0)return l(!1,"");if(d.length===0)return l(!1,`schema drift detected (all additive/safe):
-${h(r.changes)}`);const m=d.filter(a=>!w(a)||!k.has(a.table));if(m.length===0){const a=new Set(d.map(c=>c.table)),f=u.filter(c=>a.has(c.table)).map(c=>c.id);return l(!1,`breaking schema drift detected, covered by ${String(f.length)} new migration(s) (${f.join(", ")}):
-${h(d)}`)}const b=O(m,v,o);return n?l(!1,`${b}
-
-(overridden by --allow-schema-drift)`):l(!0,b)};export{y as SCHEMA_SNAPSHOT_VERSION,D as SchemaSnapshotParseError,R as buildSchemaSnapshot,I as diffSchemaSnapshots,H as evaluateSchemaDrift,F as parseSchemaSnapshot,q as serializeSchemaSnapshot};

package/dist/packem_shared/parse-validator-Q58kladC.mjs

@@ -1 +0,0 @@
-import{LunoraError as p}from"@lunora/errors";import{Node as i}from"ts-morph";import{diagnosticAt as m}from"./CodegenDiagnosticError-BUXlG3P-.mjs";let d;const F=e=>{d=e},y=/^[A-Za-z_$][\w$]*$/u,f=new Set(["$defaultFn","$onUpdateFn","$type","default","defaultNow","nullable","serverDefault","unique"]),S=(e,r)=>{const t={notNull:!0,...e.column};switch(r){case"$defaultFn":case"default":case"defaultNow":case"serverDefault":{t.hasDefault=!0;break}case"$onUpdateFn":{t.hasOnUpdate=!0;break}case"$type":break;case"nullable":{t.notNull=!1;break}case"unique":{t.unique=!0;break}}return{...e,column:t}},k=new Set(["any","bigint","boolean","bytes","date","geoPoint","null","number","string","timestamp"]),g=new Set(["check","email","int","length","max","min","pattern","positive","url"]),E=new Set(["meta"]),b=new Set(["strip"]),u=new Set,N=e=>{const r=e.getSymbol();let t=(r?.getAliasedSymbol()??r)?.getValueDeclaration();if(t!==void 0&&i.isShorthandPropertyAssignment(t)){const n=t.getValueSymbol();t=(n?.getAliasedSymbol()??n)?.getValueDeclaration()}if(!(t===void 0||!i.isVariableDeclaration(t)))return t.getInitializer()},h="v",A=e=>{if(i.isIdentifier(e))return!0;let r=e;for(;i.isCallExpression(r);){const t=r.getExpression();if(!i.isPropertyAccessExpression(t))return!1;r=t.getExpression()}return i.isIdentifier(r)&&r.getText()===h},o=e=>{if(i.isIdentifier(e)&&!u.has(e)){const r=N(e);if(r!==void 0&&A(r)){u.add(e);try{return o(r)}finally{u.delete(e)}}}return i.isCallExpression(e)?L(e):{kind:"any",sourceText:e.getText()}},v=e=>{const r={};for(const t of e.getProperties()){const n=i.isShorthandPropertyAssignment(t);if(!n&&!i.isPropertyAssignment(t))continue;const s=t.getNameNode();if(i.isComputedPropertyName(s))continue;const a=n?t.getNameNode():t.getInitializer();if(!a)continue;const c=t.getName();if(!y.test(c))throw new p("INTERNAL",`@lunora/codegen: field name is not a valid JS identifier: ${JSON.stringify(c)}`);r[c]=o(a)}return r},l=(e,r)=>e&&i.isExpression(e)?o(e):r,T=e=>e===void 0?"undefined":i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e)?JSON.stringify(e.getLiteralValue()):e.getText(),I=e=>{const r=e&&d?d(e):void 0;return r===void 0?{kind:"from"}:{kind:"from",tsType:r}},w=(e,r,t)=>{if(k.has(e))return{kind:e};const[n,s]=r;switch(e){case"array":return{inner:l(n,{kind:"any"}),kind:"array"};case"from":return I(n);case"id":{if(!n||!i.isStringLiteral(n))throw m(n??t,`v.id(...) target table must be a string literal — codegen resolves foreign-key targets statically. Got ${n?n.getText():"no argument"}.`);return{kind:"id",tableName:n.getLiteralText()}}case"literal":return{kind:"literal",literalValue:T(n)};case"object":return n&&i.isObjectLiteralExpression(n)?{kind:"object",shape:v(n)}:{kind:"object",shape:{}};case"optional":return{inner:l(n,{kind:"any"}),kind:"optional"};case"record":return{keyType:l(n,{kind:"string"}),kind:"record",valueType:l(s,{kind:"any"})};case"storage":return n&&i.isStringLiteral(n)?{bucket:n.getLiteralText(),kind:"storage"}:{kind:"storage"};case"union":return{kind:"union",members:r.filter(a=>i.isExpression(a)).map(a=>o(a))};default:throw new p("INTERNAL",`Unsupported validator kind: ${e}`)}},L=e=>{const r=e.getExpression();if(!i.isPropertyAccessExpression(r))return{kind:"any",sourceText:e.getText()};const t=r.getName(),n=e.getArguments();if(f.has(t)||g.has(t)||E.has(t)||b.has(t)){const s=r.getExpression(),a=i.isExpression(s)?o(s):{kind:"any"};return f.has(t)?S(a,t):g.has(t)?{...a,hasRefinement:!0}:a}return w(t,n,e)};export{v as a,o as p,F as s};