@lunora/codegen 1.0.0-alpha.16 → 1.0.0-alpha.18

package/dist/packem_shared/{SCHEMA_SNAPSHOT_FILENAME-DsBxQ5C_.mjs → SCHEMA_SNAPSHOT_FILENAME-ExbveiC6.mjs}

@@ -2,7 +2,7 @@ import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'node:fs';
 import { join, dirname } from 'node:path';
 import { performance } from 'node:perf_hooks';
 import { Node, SyntaxKind, Project } from 'ts-morph';
-import { lintSchema } from './formatAdvisories-8NIv1k0I.mjs';
+import { lintSchema } from './formatAdvisories-LM8-Ixjw.mjs';
 import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall, discoverFunctions } from './discoverFunctions-BWMczzBx.mjs';
 import discoverAuthApiCalls from './discoverAuthApiCalls-CoirYbg6.mjs';
 import { discoverContainers } from './CONTAINERS_FILENAME-DlP6YM_Q.mjs';
@@ -12,19 +12,21 @@ import discoverHttpRoutes from './discoverHttpRoutes-CfP6cMzt.mjs';
 import discoverInserts from './discoverInserts-C7zxXkUf.mjs';
 import discoverMaskProcedures, { discoverMaskMetadata } from './discoverMaskProcedures-Cm81kwrb.mjs';
 import discoverMigrations from './discoverMigrations-Bi5nJ0mJ.mjs';
+import { MUTATORS_FILENAME, isDefineMutatorCallee, discoverMutators } from './MUTATORS_FILENAME-BhqdPtKp.mjs';
 import discoverNondeterministicCalls from './discoverNondeterministicCalls-C4M8AXmQ.mjs';
 import discoverQueries from './discoverQueries-B0wGT-xe.mjs';
 import { discoverQueues } from './QUEUES_FILENAME-B5_eWCRe.mjs';
 import discoverR2sqlCalls from './discoverR2sqlCalls-BVNMd428.mjs';
 import discoverRlsProcedures, { discoverRlsMetadata } from './discoverRlsMetadata-BS9GOGC5.mjs';
 import discoverSchema from './discoverSchema-BnWHHJ4T.mjs';
+import { discoverShapes } from './SHAPES_FILENAME-ChV7MqgE.mjs';
 import discoverStorageRulesMetadata from './discoverStorageRulesMetadata-Da8BKXcI.mjs';
 import { e as enclosingExportName$1 } from './discover-ast-CT6BgBr4.mjs';
 import { discoverWorkflows } from './WORKFLOWS_FILENAME-D62dcBGg.mjs';
-import { buildStorageColumns, emitDataModel, emitApi, emitServer, emitFunctions, emitShard, emitContainers, emitWorkflows, emitQueues, emitCrons, emitVectors, emitDrizzleSchema, emitSeed, emitWranglerCronTriggers } from './GENERATED_HEADER-CkZUgM4_.mjs';
-import { emitApp } from './emitApp-DGmlt5fq.mjs';
-import { buildOpenApiDocument, emitOpenApiModule } from './buildOpenApiDocument-BSoDzIn8.mjs';
-import { buildOpenRpcDocument, emitOpenRpcModule } from './OPENRPC_VERSION-VINwUAxf.mjs';
+import { buildStorageColumns, emitDataModel, emitApi, emitServer, emitFunctions, emitShard, emitCollections, emitContainers, emitWorkflows, emitQueues, emitCrons, emitVectors, emitDrizzleSchema, emitSeed, emitWranglerCronTriggers } from './GENERATED_HEADER-D-AbhmRh.mjs';
+import { emitApp } from './emitApp-CV81L74c.mjs';
+import { buildOpenApiDocument, emitOpenApiModule } from './buildOpenApiDocument-DoK7_x1g.mjs';
+import { buildOpenRpcDocument, emitOpenRpcModule } from './OPENRPC_VERSION-DDT4mIzD.mjs';
 import { buildSchemaSnapshot, serializeSchemaSnapshot } from './SCHEMA_SNAPSHOT_VERSION-wWGP2_5E.mjs';
 
 const HTTP_VERBS = /* @__PURE__ */ new Set(["delete", "get", "head", "options", "patch", "post", "put"]);
@@ -241,6 +243,11 @@ const discoverArgumentValidators = (project, lunoraDirectory) => {
 };
 
 const PROBES = {
+  // The middleware (`accessContext()` / `accessRoles()`) imports the `/context`
+  // and `/roles` subpaths, NOT the bare `@lunora/cloudflare-access` specifier —
+  // so the per-procedure middleware never trips the global `ctx.access` wiring.
+  // A handler reading `ctx.access` is the signal that wires it onto every ctx.
+  access: { contextProperty: "access", moduleSpecifier: "@lunora/cloudflare-access" },
   ai: { contextProperty: "ai", moduleSpecifier: "@lunora/ai" },
   analytics: { contextProperty: "analytics", moduleSpecifier: "@lunora/bindings/analytics" },
   browser: { contextProperty: "browser", moduleSpecifier: "@lunora/browser" },
@@ -277,6 +284,7 @@ const readsContextProperty = (sourceFile, property) => {
 };
 const discoverFeatureUsage = (project, lunoraDirectory) => {
   const usage = {
+    access: false,
     ai: false,
     analytics: false,
     browser: false,
@@ -329,6 +337,61 @@ const buildStudioFeatures = (usage, signals) => {
   };
 };
 
+const isDatabaseReplaceCall = (call) => {
+  const callee = call.getExpression();
+  if (!Node.isPropertyAccessExpression(callee) || callee.getName() !== "replace") {
+    return false;
+  }
+  const receiver = callee.getExpression();
+  if (Node.isPropertyAccessExpression(receiver)) {
+    return receiver.getName() === "db";
+  }
+  return Node.isIdentifier(receiver) && receiver.getText() === "db";
+};
+const serverImplNode = (call) => {
+  const argument = call.getArguments()[0];
+  if (argument === void 0 || !Node.isObjectLiteralExpression(argument)) {
+    return void 0;
+  }
+  const property = argument.getProperty("server");
+  if (property === void 0) {
+    return void 0;
+  }
+  return Node.isPropertyAssignment(property) ? property.getInitializer() : property;
+};
+const exportedDefineMutatorCall = (declaration) => {
+  if (!declaration.isExported()) {
+    return void 0;
+  }
+  const initializer = declaration.getInitializer();
+  if (initializer?.getKind() !== SyntaxKind.CallExpression) {
+    return void 0;
+  }
+  const call = initializer;
+  return isDefineMutatorCallee(call.getExpression()) ? call : void 0;
+};
+const writesFromDeclaration = (declaration) => {
+  const call = exportedDefineMutatorCall(declaration);
+  const serverImpl = call === void 0 ? void 0 : serverImplNode(call);
+  if (serverImpl === void 0) {
+    return [];
+  }
+  const nameNode = declaration.getNameNode();
+  const exportName = Node.isIdentifier(nameNode) ? nameNode.getText() : "";
+  return serverImpl.getDescendantsOfKind(SyntaxKind.CallExpression).filter((replaceCall) => isDatabaseReplaceCall(replaceCall)).map((replaceCall) => {
+    return { exportName, file: "lunora/mutators.ts", line: replaceCall.getStartLineNumber() };
+  });
+};
+const mutatorWritesFromSource = (source) => source.getVariableDeclarations().flatMap((declaration) => writesFromDeclaration(declaration));
+const discoverMutatorWrites = (project, lunoraDirectory) => {
+  const mutatorsPath = join(lunoraDirectory, MUTATORS_FILENAME);
+  if (!existsSync(mutatorsPath)) {
+    return [];
+  }
+  const source = project.getSourceFile(mutatorsPath) ?? project.addSourceFileAtPath(mutatorsPath);
+  return mutatorWritesFromSource(source);
+};
+
 const discoverPackageDependencies = (projectRoot) => {
   const manifestPath = join(projectRoot, "package.json");
   if (!existsSync(manifestPath)) {
@@ -743,6 +806,8 @@ const runCodegen = (options) => {
   const functions = discoverFunctions(project, lunoraDirectory);
   const httpRoutes = discoverHttpRoutes(project, lunoraDirectory);
   const migrations = discoverMigrations(project, lunoraDirectory);
+  const shapes = discoverShapes(project, lunoraDirectory);
+  const mutators = discoverMutators(project, lunoraDirectory);
   const workflows = discoverWorkflows(project, lunoraDirectory);
   const queues = discoverQueues(project, lunoraDirectory);
   const crons = discoverCrons(project, lunoraDirectory, workflows);
@@ -763,7 +828,9 @@ const runCodegen = (options) => {
     discoverSecrets(project, lunoraDirectory),
     discoverSqlInterpolation(project, lunoraDirectory),
     discoverAdminRoutes(project, lunoraDirectory),
-    discoverR2sqlCalls(project, lunoraDirectory)
+    discoverR2sqlCalls(project, lunoraDirectory),
+    shapes,
+    discoverMutatorWrites(project, lunoraDirectory)
   );
   const rlsMetadata = discoverRlsMetadata(project, lunoraDirectory);
   const maskMetadata = discoverMaskMetadata(project, lunoraDirectory);
@@ -772,6 +839,7 @@ const runCodegen = (options) => {
   const hasAi = featureUsage.ai;
   const hasPayments = featureUsage.payments;
   const hasKv = featureUsage.kv;
+  const hasAccessFacade = featureUsage.access;
   const hasFlags = existsSync(join(lunoraDirectory, "flags.ts"));
   const flagKeys = hasFlags ? discoverFlagKeys(project, lunoraDirectory) : [];
   const hasHyperdrive = featureUsage.hyperdrive;
@@ -796,6 +864,7 @@ const runCodegen = (options) => {
   const apiContent = emitApi(functions, workflows, useUmbrella);
   const serverContent = emitServer({
     containers,
+    hasAccessFacade,
     hasAi,
     hasAnalytics,
     hasBrowser,
@@ -812,11 +881,12 @@ const runCodegen = (options) => {
     useUmbrella,
     workflows
   });
-  const functionsContent = emitFunctions(functions, migrations, useUmbrella);
+  const functionsContent = emitFunctions(functions, migrations, useUmbrella, mutators, shapes);
   const shardContent = emitShard({
     advisories,
     containers,
     flagKeys,
+    hasAccessFacade,
     hasAi,
     hasAnalytics,
     hasBrowser,
@@ -828,14 +898,17 @@ const runCodegen = (options) => {
     hasPipelines,
     hasR2sql,
     maskMetadata,
+    mutators,
     queues,
     rlsMetadata,
     schema,
+    shapes,
     storageRules: storageRulesMetadata,
     studioFeatures,
     useUmbrella,
     workflows
   });
+  const collectionsContent = emitCollections(shapes, dependencies.has("@lunora/db"), useUmbrella);
   const containersContent = emitContainers(containers, schema.jurisdiction);
   const workflowsContent = emitWorkflows(workflows);
   const queuesContent = emitQueues(queues);
@@ -847,6 +920,7 @@ const runCodegen = (options) => {
   const wantsOpenApi = apiSpec === "openapi" || apiSpec === "both";
   const wantsOpenRpc = apiSpec === "openrpc" || apiSpec === "both";
   const appContent = emitApp({
+    hasAccess: dependencies.has("@lunora/cloudflare-access"),
     hasAi,
     hasAnalytics,
     hasAuth: dependencies.has("@lunora/auth"),
@@ -909,6 +983,7 @@ const runCodegen = (options) => {
     writeIfPresent(join(outputDirectory, "workflows.ts"), workflowsContent);
     writeIfPresent(join(outputDirectory, "queues.ts"), queuesContent);
     writeIfPresent(join(outputDirectory, "seed.ts"), seedContent);
+    writeIfPresent(join(outputDirectory, "collections.ts"), collectionsContent);
     if (wantsOpenApi) {
       writeIfChanged(join(outputDirectory, "openapi.json"), openApiContent);
       writeIfChanged(join(outputDirectory, "openapi.ts"), openApiModuleContent);
@@ -935,6 +1010,7 @@ const runCodegen = (options) => {
     generated: {
       api: apiContent,
       app: appContent,
+      collections: collectionsContent,
       containers: containersContent,
       crons: cronsContent,
       dataModel: dataModelContent,

package/dist/packem_shared/SHAPES_FILENAME-ChV7MqgE.mjs

@@ -0,0 +1,94 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { SyntaxKind, Node } from 'ts-morph';
+import { diagnosticAt } from './CodegenDiagnosticError-DeblMkzO.mjs';
+
+const SHAPES_FILENAME = "shapes.ts";
+const SHAPE_MODULE_SPECIFIERS = /* @__PURE__ */ new Set(["@lunora/server", "lunorash/server"]);
+const isDefineShape = (identifier) => {
+  const symbol = identifier.getSymbol();
+  if (!symbol) {
+    return identifier.getText() === "defineShape";
+  }
+  for (const declaration of symbol.getDeclarations()) {
+    if (!Node.isImportSpecifier(declaration)) {
+      continue;
+    }
+    if (!SHAPE_MODULE_SPECIFIERS.has(declaration.getImportDeclaration().getModuleSpecifierValue())) {
+      return false;
+    }
+    return declaration.getNameNode().getText() === "defineShape";
+  }
+  return false;
+};
+const isShapeNamespaceImport = (identifier) => {
+  const symbol = identifier.getSymbol();
+  if (!symbol) {
+    return false;
+  }
+  for (const declaration of symbol.getDeclarations()) {
+    if (!Node.isNamespaceImport(declaration)) {
+      continue;
+    }
+    const importDeclaration = declaration.getFirstAncestorByKind(SyntaxKind.ImportDeclaration);
+    return importDeclaration !== void 0 && SHAPE_MODULE_SPECIFIERS.has(importDeclaration.getModuleSpecifierValue());
+  }
+  return false;
+};
+const isDefineShapeCallee = (callee) => {
+  if (Node.isIdentifier(callee)) {
+    return isDefineShape(callee);
+  }
+  if (Node.isPropertyAccessExpression(callee)) {
+    const object = callee.getExpression();
+    return callee.getName() === "defineShape" && Node.isIdentifier(object) && isShapeNamespaceImport(object);
+  }
+  return false;
+};
+const tableLiteralFrom = (call) => {
+  const [config] = call.getArguments();
+  if (!config || !Node.isObjectLiteralExpression(config)) {
+    return void 0;
+  }
+  const tableProperty = config.getProperty("table");
+  if (!tableProperty || !Node.isPropertyAssignment(tableProperty)) {
+    return void 0;
+  }
+  const value = tableProperty.getInitializer();
+  return value && Node.isStringLiteral(value) ? value.getLiteralValue() : void 0;
+};
+const shapesFromSource = (source) => {
+  const shapes = [];
+  for (const declaration of source.getVariableDeclarations()) {
+    if (!declaration.isExported()) {
+      continue;
+    }
+    const initializer = declaration.getInitializer();
+    if (initializer?.getKind() !== SyntaxKind.CallExpression) {
+      continue;
+    }
+    const callExpression = initializer;
+    const callee = callExpression.getExpression();
+    if (!isDefineShapeCallee(callee)) {
+      continue;
+    }
+    const nameNode = declaration.getNameNode();
+    if (!Node.isIdentifier(nameNode)) {
+      throw diagnosticAt(nameNode, "defineShape exports must be plain named exports (no destructuring)");
+    }
+    shapes.push({ exportName: nameNode.getText(), filePath: "shapes", table: tableLiteralFrom(callExpression) });
+  }
+  return shapes;
+};
+const discoverShapes = (project, lunoraDirectory) => {
+  const shapesPath = join(lunoraDirectory, SHAPES_FILENAME);
+  if (!existsSync(shapesPath)) {
+    return [];
+  }
+  const source = project.getSourceFile(shapesPath) ?? project.addSourceFileAtPath(shapesPath);
+  const shapes = shapesFromSource(source);
+  shapes.sort((a, b) => a.exportName.localeCompare(b.exportName));
+  return shapes;
+};
+
+export { SHAPES_FILENAME, discoverShapes };

package/dist/packem_shared/{buildOpenApiDocument-BSoDzIn8.mjs → buildOpenApiDocument-DoK7_x1g.mjs}

@@ -1,4 +1,4 @@
-import { GENERATED_HEADER } from './GENERATED_HEADER-CkZUgM4_.mjs';
+import { GENERATED_HEADER } from './GENERATED_HEADER-D-AbhmRh.mjs';
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 import { LUNORA_ERROR_CODES, objectSchema, argsObjectSchema, validatorIrToJsonSchema } from './LUNORA_ERROR_CODES-CySpQPD3.mjs';
 

package/dist/packem_shared/{emitApp-DGmlt5fq.mjs → emitApp-CV81L74c.mjs}

@@ -1,4 +1,4 @@
-import { GENERATED_HEADER } from './GENERATED_HEADER-CkZUgM4_.mjs';
+import { GENERATED_HEADER } from './GENERATED_HEADER-D-AbhmRh.mjs';
 
 const LONG_TAIL = [
   ["hasAi", "ai", "ai", "Override the Workers AI binding backing `ctx.ai` (defaults to `env.AI`)."],
@@ -22,8 +22,25 @@ const LONG_TAIL = [
   ["hasVectors", "vectors", "vectors", "Wire the Vectorize index map backing `ctx.vectors`."]
 ];
 const hasAnyLongTail = (options) => LONG_TAIL.some(([flag]) => options[flag]);
+const buildAccessImports = (hasAccess, hasAuth) => hasAccess ? [
+  `import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";`,
+  `import { createAccessResolver${hasAuth ? ", composeResolvers" : ""} } from "@lunora/cloudflare-access";`
+] : [];
 const buildImportLines = (options) => {
-  const { hasAuth, hasFramework, hasGlobal, hasHyperdriveGlobal, hasQueue, hasScheduler, hasStorage, hasWorkflow, useUmbrella, wantsOpenApi, wantsOpenRpc } = options;
+  const {
+    hasAccess,
+    hasAuth,
+    hasFramework,
+    hasGlobal,
+    hasHyperdriveGlobal,
+    hasQueue,
+    hasScheduler,
+    hasStorage,
+    hasWorkflow,
+    useUmbrella,
+    wantsOpenApi,
+    wantsOpenRpc
+  } = options;
   const runtimeModule = useUmbrella ? "lunorash/runtime" : "@lunora/runtime";
   const runtimeTypeImports = ["ExecutionContextLike", "LunoraWorker", "Route", "ScheduledControllerLike", "ShardNamespaceLike", "WorkerOptions"];
   if (hasGlobal) {
@@ -42,6 +59,7 @@ const buildImportLines = (options) => {
       `import type { LunoraAuth, LunoraAuthOptions } from "@lunora/auth";`,
       `import { createAuth, createAuthAdmin, ensureMigrated, handleAuthRequest, lunoraD1Adapter } from "@lunora/auth";`
     ] : [],
+    ...buildAccessImports(hasAccess, hasAuth),
     ...hasGlobal ? [
       `import type { D1CtxDbOptions, D1DatabaseLike, D1Exec } from "@lunora/d1";`,
       `import { createD1CtxDb, facetGlobalColumn, listGlobalTables, readGlobalTablePage } from "@lunora/d1";`
@@ -120,9 +138,10 @@ interface AuthDeclaration<Env> {
   ] : []
 ];
 const buildFieldLines = (options) => [
+  ...options.hasAccess ? [`    private accessSelector?: Selector<Env, CreateAccessResolverOptions>;`] : [],
   `    private adminToken?: Selector<Env, string>;`,
   ...options.hasAuth ? [`    private authDeclaration?: AuthDeclaration<Env>;`] : [],
-  `    private readonly extendFns: ((env: Env) => Partial<WorkerOptions>)[] = [];`,
+  `    private readonly extendFns: ((env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>)[] = [];`,
   ...options.hasGlobal ? [`    private globalDeclaration?: GlobalDeclaration<Env>;`] : [],
   ...options.hasHyperdriveGlobal ? [`    private hyperdriveGlobalDeclaration?: HyperdriveGlobalDeclaration<Env>;`] : [],
   `    private readonly routeMap: Record<string, Route> = {};`,
@@ -140,6 +159,14 @@ const buildLongTailMethods = (options) => LONG_TAIL.filter(([flag]) => options[f
     }`
 );
 const buildMethodBlocks = (options) => [
+  ...options.hasAccess ? [
+    `    /** Wire Cloudflare Access (Zero Trust) — verifies the \`Cf-Access-Jwt-Assertion\` JWT and feeds the identity into \`ctx.auth\` / RLS via \`resolveIdentity\`. When \`.auth(...)\` is also configured, Access is composed ahead of it (Access wins when its JWT is present; everyone else falls through to the app session). */
+    public access(selector: Selector<Env, CreateAccessResolverOptions>): this {
+        this.accessSelector = selector;
+
+        return this;
+    }`
+  ] : [],
   `    /** Bearer token gating the \`/_lunora/admin/*\` endpoints the studio calls. */
     public admin(selector: Selector<Env, string>): this {
         this.adminToken = selector;
@@ -154,8 +181,8 @@ const buildMethodBlocks = (options) => [
         return this;
     }`
   ] : [],
-  `    /** Escape hatch — merge raw \`WorkerOptions\` (anything not yet sugared) over the derived options at build time. */
-    public extend(fn: (env: Env) => Partial<WorkerOptions>): this {
+  `    /** Escape hatch — merge raw \`WorkerOptions\` (anything not yet sugared) over the derived options at build time. The second \`derived\` argument is a snapshot of the options assembled so far (after \`.auth(...)\` etc.), so you can compose rather than clobber — e.g. wrap \`derived.resolveIdentity\` instead of replacing it. */
+    public extend(fn: (env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>): this {
         this.extendFns.push(fn);
 
         return this;
@@ -344,6 +371,21 @@ const buildWorkerOptionLines = (options) => [
 
             options.authAdmin = authInstance ? createAuthAdmin(authInstance) : undefined;
         }`
+  ] : [],
+  // Cloudflare Access — runs AFTER the auth block so it can compose ahead of
+  // the better-auth resolver rather than clobber it. With `.auth()` present,
+  // a request carrying a verified Access JWT is authenticated by Access and
+  // everyone else falls through to the app session; without it, Access is the
+  // sole resolver.
+  ...options.hasAccess ? [
+    options.hasAuth ? `        if (this.accessSelector) {
+            const accessResolver = createAccessResolver(this.accessSelector(env));
+            const fallback = options.resolveIdentity;
+
+            options.resolveIdentity = fallback ? composeResolvers(accessResolver, fallback) : accessResolver;
+        }` : `        if (this.accessSelector) {
+            options.resolveIdentity = createAccessResolver(this.accessSelector(env));
+        }`
   ] : []
 ];
 const buildBaseWorkerOptions = (options) => [
@@ -599,7 +641,7 @@ ${buildBaseWorkerOptions(options).join("\n")}
         }
 
 ${workerOptionLines.join("\n\n")}${workerOptionLines.length > 0 ? "\n\n" : ""}        for (const fn of this.extendFns) {
-            Object.assign(options, fn(env));
+            Object.assign(options, fn(env, { ...options }));
         }
 
         return options;

package/dist/packem_shared/{formatAdvisories-8NIv1k0I.mjs → formatAdvisories-LM8-Ixjw.mjs}

@@ -31,12 +31,16 @@ const toAdvisorSchema = (schema) => {
             references: relation.references,
             table: relation.table
           };
-        })
+        }),
+        shardKind: typeof table.shardMode === "string" ? table.shardMode : "shardBy"
       };
     })
   };
 };
-const lintSchema = (schema, queries = [], inserts, authApiCalls, rlsProcedures, containers, workflows, workflowCalls, maskProcedures, nondeterministicCalls, procedureProtections, argumentValidators, secretLiterals, sqlInterpolations, adminRoutes, r2sqlCalls) => runAdvisor(
+const toAdvisorShapes = (shapes) => shapes.map((shape) => {
+  return { exportName: shape.exportName, file: `lunora/${shape.filePath}.ts`, table: shape.table };
+});
+const lintSchema = (schema, queries = [], inserts, authApiCalls, rlsProcedures, containers, workflows, workflowCalls, maskProcedures, nondeterministicCalls, procedureProtections, argumentValidators, secretLiterals, sqlInterpolations, adminRoutes, r2sqlCalls, shapes, mutatorWrites) => runAdvisor(
   {
     adminRoutes,
     argValidators: argumentValidators,
@@ -44,6 +48,7 @@ const lintSchema = (schema, queries = [], inserts, authApiCalls, rlsProcedures,
     containers,
     inserts,
     maskProcedures,
+    mutatorWrites,
     nondeterministicCalls,
     procedureProtections,
     queries,
@@ -51,6 +56,7 @@ const lintSchema = (schema, queries = [], inserts, authApiCalls, rlsProcedures,
     rlsProcedures,
     schema: toAdvisorSchema(schema),
     secretLiterals,
+    shapes: shapes === void 0 ? void 0 : toAdvisorShapes(shapes),
     sqlInterpolations,
     workflowCalls,
     workflows

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/codegen",
-  "version": "1.0.0-alpha.16",
+  "version": "1.0.0-alpha.18",
   "description": "Code generator for Lunora: emits _generated/{api,server,dataModel}.ts from your schema",
   "keywords": [
     "cloudflare",
@@ -46,7 +46,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/advisor": "1.0.0-alpha.7",
+    "@lunora/advisor": "1.0.0-alpha.8",
     "@lunora/container": "1.0.0-alpha.5",
     "@lunora/queue": "1.0.0-alpha.1",
     "@lunora/scheduler": "1.0.0-alpha.3",