@lunora/codegen 1.0.0-alpha.163 → 1.0.0-alpha.165

package/dist/packem_shared/{emitApp-CxmA4W3C.mjs → emitApp-9dMkNu6n.mjs}

@@ -1,4 +1,4 @@
-import{A as f,G as w}from"./emit-BNdsZPcd.mjs";const y=e=>`has${e.charAt(0).toUpperCase()}${e.slice(1)}`,g=f.map(({appMethod:e,key:t})=>[y(t),e.method,e.configKey,e.doc]),u=e=>g.some(([t])=>e[t]),S=e=>e?['import * as lunoraIdentityContract from "../identity.js";']:[],E=(e,t)=>e?['import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";',`import { createAccessResolver${t?", composeResolvers":""} } from "@lunora/cloudflare-access";`]:[],D=e=>e?['import { createKvIntrospectorFromEnv } from "@lunora/bindings/kv";']:[],x=e=>e?['import { createVectorAdminIntrospector } from "@lunora/bindings/vectors";']:[],A=e=>e?['import type { D1CtxDbOptions, D1DatabaseLike, D1Exec } from "@lunora/d1";','import { applyCdcChanges, createD1CtxDb, exportGlobalRows, facetGlobalColumn, importGlobalRows, listGlobalTables, readD1CdcChanges, readGlobalTablePage, retryingExec } from "@lunora/d1";']:[],R=e=>e?['import notifyConfig from "../notify.js";']:[],m=e=>(e.emailAgents?.length??0)>0,C=e=>m(e)?['import { dispatchAgentEmail } from "@lunora/agent/inbound";']:[],O=e=>m(e)?['import * as lunoraAgentDefinitions from "../agents.js";']:[],T=e=>{const{hasFramework:t,hasGlobal:a,hasHyperdriveGlobal:r,hasQueue:n,useUmbrella:i}=e,o=i?"lunorash/runtime":"@lunora/runtime",c=["ExecutionContextLike","HttpRouterLike","LunoraWorker","Route","ScheduledControllerLike","ShardNamespaceLike","WorkerOptions",...n?["TriggerTrace"]:[],...a?["GlobalIntrospector","AdminTableResolver"]:[],...t?["FrameworkHostHandler"]:[]],s=[...a||r?["createCrossShardRelationCapabilities"]:[],"createWorker","resolveLogArchiveFromEnv",...t?["withFrameworkWorker"]:[]].join(", ");return[`import type { ${[...c].toSorted((l,d)=>l.localeCompare(d)).join(", ")} } from "${o}";`,`import { ${s} } from "${o}";`]},I=e=>{const{hasAccess:t,hasAuth:a,hasGlobal:r,hasHyperdriveGlobal:n,hasKvIntrospector:i,hasQueue:o,hasScheduler:c,hasStorage:s,hasWorkflow:l,wantsOpenApi:d,wantsOpenRpc:h}=e;return[...a?['import type { AuthNamespaceLike, LunoraAuth, LunoraAuthOptions } from "@lunora/auth";','import { createAuth, createAuthAdmin, createAuthAuditReader, createDoAuthWiring, d1Executor, ensureMigrated, handleAuthRequest, lunoraD1Adapter } from "@lunora/auth";']:[],...E(t,a),...A(r),...n?['import type { HyperdriveEngine } from "@lunora/hyperdrive/global";','import { createHyperdriveGlobalCtxDb } from "@lunora/hyperdrive/global";','import type { SqlCtxDbOptions, SqlExec } from "@lunora/sql-store";']:[],...D(i),...x(e.hasVectors===!0),...c?['import type { DurableObjectNamespaceLike } from "@lunora/scheduler";','import { createScheduler } from "@lunora/scheduler";']:[],...s?['import type { R2BucketLike, R2S3Credentials, Storage } from "@lunora/storage";','import { createBucketStorage, createStorage } from "@lunora/storage";']:[],...l?['import { createWorkflowsRestClient } from "@lunora/workflow";']:[],...C(e),...T(e),"",...S(e.identity),...O(e),...r||n?['import schema from "../schema.js";']:[],...R(e.hasNotify),'import { LUNORA_CRONS } from "./crons.js";','import { LUNORA_FUNCTIONS } from "./functions.js";',...o?['import { createQueueCaptureSink, dispatchQueueBatch, shouldCaptureQueue } from "@lunora/queue";','import { LUNORA_QUEUE_REGISTRY } from "./queues.js";']:[],...d?['import { openApiSpec } from "./openapi.js";']:[],...h?['import { openRpcSpec } from "./openrpc.js";']:[],'import { createShardDO } from "./shard.js";',...e.hasVectors===!0?['import { LUNORA_VECTOR_INDEXES } from "./vectors.js";']:[]]},L=e=>[...e.hasStorage?['/** `.storage(...)` declaration — one bucket (required) plus optional extra named buckets and signed-URL config. Backs `ctx.storage` AND the studio file browser. */\ninterface StorageDeclaration<Env> {\n    /** The default R2 bucket binding (the bare `ctx.storage`). */\n    bucket: Selector<Env, R2BucketLike>;\n    /** Extra named buckets, reached via `ctx.storage.bucket("name")` and the studio\'s bucket picker. */\n    buckets?: Record<string, Selector<Env, R2BucketLike>>;\n    /** Public base URL signed/public object URLs resolve against. */\n    publicBaseUrl?: Selector<Env, string>;\n    /** R2 S3-API credentials (`{ accountId, accessKeyId, secretAccessKey, bucket, jurisdiction? }`) enabling `ctx.storage.getPresignedUrl` — native S3 presigned URLs that hit R2 directly, bypassing the worker. Omit to use only the worker-signed `getSignedUrl` path. */\n    s3?: Selector<Env, R2S3Credentials>;\n    /** HMAC secret for signed URLs. */\n    signingSecret?: Selector<Env, string>;\n}']:[],...e.hasScheduler?["/** `.scheduler(...)` declaration — the `SchedulerDO` namespace. Backs `ctx.scheduler` AND the studio's scheduled-jobs view. The origin its callbacks dispatch back to is not declared here: the DO reads `env.LUNORA_ORIGIN_URL` at fire time, because a caller-supplied dispatch target would be an SSRF vector. */\ninterface SchedulerDeclaration<Env> {\n    /** The `SchedulerDO` namespace binding (typically `env.SCHEDULER`). */\n    namespace: Selector<Env, DurableObjectNamespaceLike & ShardNamespaceLike>;\n}"]:[],...e.hasGlobal?["/** `.global(...)` declaration — the D1 binding backing `.global()` tables. Backs cross-tenant `ctx.db` reads/writes AND the studio's global data browser. */\ninterface GlobalDeclaration<Env> {\n    /** The D1 binding (typically `env.DB`). */\n    d1: Selector<Env, D1DatabaseLike>;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}"]:[],...e.hasHyperdriveGlobal?['/** `.hyperdriveGlobal(...)` declaration — backs `.global({ backend: "hyperdrive" })` tables on a Postgres/MySQL database via Hyperdrive. Stays reactive: the writer is injected as `globalDb` and the broadcast hook drives live queries. */\ninterface HyperdriveGlobalDeclaration<Env> {\n    /** The Hyperdrive engine — selects the Postgres or MySQL dialect. */\n    engine: HyperdriveEngine;\n    /** Build the `SqlExec` from `env` — e.g. `buildPgExec(fromPostgresJs(postgres(env.HYPERDRIVE.connectionString)))`. Cache the driver on the DO instance; rebuild lazily after hibernation. */\n    exec: (env: Env) => SqlExec;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}']:[],...e.hasAuth?['/** `.auth(...)` declaration — better-auth options plus the storage the adapter reads. Give it `d1` (the default) or `namespace` (a Durable Object that hosts the auth tables), never both. The builder owns the lazy build + `ensureMigrated` dance and wires `authHandler` / `resolveIdentity` / `authAdmin`. */\ninterface AuthDeclaration<Env> {\n    /** The D1 binding the auth SQL adapter is wired over (via `lunoraD1Adapter`). Omit only when using `namespace`. */\n    d1?: Selector<Env, unknown>;\n    /** Shared secret the worker presents on the object\'s internal session route. REQUIRED with `namespace`: the binding is reachable from any worker bound to it, so the secret — not the binding — is the authorization boundary. Without it identity resolution fails closed. */\n    internalSecret?: Selector<Env, string>;\n    /** Name of the Durable Object instance holding the auth tables. Defaults to `"auth"`. Set it to run separate auth objects (per deployment, per tenant) off one namespace. */\n    objectName?: Selector<Env, string>;\n    /** The auth Durable Object namespace — the DO-backed mode. Needed for `@better-auth/scim`, which requires native transactions that D1 has none of. The object owns the auth tables, so `/api/auth/*` and identity resolution both go through it. Typed as `AuthNamespaceLike` because `createDoAuthWiring` resolves through `idFromName` + `get` and has no `getByName` fallback — both members are load-bearing here, and `ShardNamespaceLike` leaves both optional. */\n    namespace?: Selector<Env, AuthNamespaceLike>;\n    /** Build the better-auth options from `env` (secret, plugins, email/password, …). */\n    options: (env: Env) => LunoraAuthOptions;\n}']:[]],q=e=>[...e.hasAccess?["    private accessSelector?: Selector<Env, CreateAccessResolverOptions | undefined>;"]:[],"    private adminToken?: Selector<Env, string>;",...e.hasAuth?["    private authDeclaration?: AuthDeclaration<Env>;"]:[],"    private cdcEnabled = false;","    private reactiveCacheConfig: boolean | { maxBytes?: number; maxEntries?: number } = false;","    private readonly extendFns: ((env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>)[] = [];",...e.hasGlobal?["    private globalDeclaration?: GlobalDeclaration<Env>;"]:[],...e.hasHyperdriveGlobal?["    private hyperdriveGlobalDeclaration?: HyperdriveGlobalDeclaration<Env>;"]:[],"    private httpRouterApp?: HttpRouterLike;","    private readonly routeMap: Record<string, Route> = {};",...e.hasScheduler?["    private schedulerDeclaration?: SchedulerDeclaration<Env>;"]:[],...u(e)?["    private readonly shardExtras: Partial<ShardConfig> = {};"]:[],"    private shardSelector?: Selector<Env, ShardNamespaceLike>;",...e.hasStorage?["    private storageDeclaration?: StorageDeclaration<Env>;"]:[]],N=e=>g.filter(([t])=>e[t]).map(([,t,a,r])=>`    /** ${r} */
+import{A as w,G as k}from"./emit-Lx7UkoGn.mjs";const y=e=>`has${e.charAt(0).toUpperCase()}${e.slice(1)}`,b=w.map(({appMethod:e,key:t})=>[y(t),e.method,e.configKey,e.doc]),m=e=>b.some(([t])=>e[t]),S=e=>e?['import * as lunoraIdentityContract from "../identity.js";']:[],E=(e,t)=>e?['import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";',`import { createAccessResolver${t?", composeResolvers":""} } from "@lunora/cloudflare-access";`]:[],D=e=>e?['import { createKvIntrospectorFromEnv } from "@lunora/bindings/kv";']:[],x=e=>e?['import { createVectorAdminIntrospector } from "@lunora/bindings/vectors";']:[],R=e=>e?['import type { D1CtxDbOptions, D1DatabaseLike, D1Exec } from "@lunora/d1";','import { applyCdcChanges, createD1CtxDb, exportGlobalRows, facetGlobalColumn, importGlobalRows, listGlobalTables, readD1CdcChanges, readGlobalTablePage, retryingExec } from "@lunora/d1";']:[],A=e=>e?['import notifyConfig from "../notify.js";']:[],g=e=>(e.emailAgents?.length??0)>0,C=e=>g(e)?['import { dispatchAgentEmail } from "@lunora/agent/inbound";']:[],O=e=>g(e)?['import * as lunoraAgentDefinitions from "../agents.js";']:[],T=e=>{const{hasFramework:t,hasGlobal:a,hasHyperdriveGlobal:r,hasQueue:n,useUmbrella:i}=e,o=i?"lunorash/runtime":"@lunora/runtime",l=["ExecutionContextLike","HttpRouterLike","LunoraWorker","Route","ScheduledControllerLike","ShardNamespaceLike","WorkerOptions",...n?["TriggerTrace"]:[],...a?["GlobalIntrospector","AdminTableResolver"]:[],...t?["FrameworkHostHandler"]:[]],s=[...a||r?["createCrossShardRelationCapabilities"]:[],"createWorker","resolveLogArchiveFromEnv",...t?["withFrameworkWorker"]:[]].join(", ");return[`import type { ${[...l].toSorted((c,h)=>c.localeCompare(h)).join(", ")} } from "${o}";`,`import { ${s} } from "${o}";`]},I=e=>{const{hasAccess:t,hasAuth:a,hasGlobal:r,hasHyperdriveGlobal:n,hasKvIntrospector:i,hasQueue:o,hasScheduler:l,hasStorage:s,hasWorkflow:c,wantsOpenApi:h,wantsOpenRpc:d}=e;return[...a?['import type { AuthNamespaceLike, LunoraAuth, LunoraAuthOptions } from "@lunora/auth";','import { createAuth, createAuthAdmin, createAuthAuditReader, createDoAuthWiring, d1Executor, ensureMigrated, handleAuthRequest, lunoraD1Adapter } from "@lunora/auth";']:[],...E(t,a),...R(r),...n?['import type { HyperdriveEngine } from "@lunora/hyperdrive/global";','import { createHyperdriveGlobalCtxDb } from "@lunora/hyperdrive/global";','import type { SqlCtxDbOptions, SqlExec } from "@lunora/sql-store";']:[],...D(i),...x(e.hasVectors===!0),...l?['import type { DurableObjectNamespaceLike } from "@lunora/scheduler";','import { createScheduler } from "@lunora/scheduler";']:[],...s?['import type { R2BucketLike, R2S3Credentials, Storage } from "@lunora/storage";','import { createBucketStorage, createStorage } from "@lunora/storage";']:[],...c?['import { createWorkflowsRestClient } from "@lunora/workflow";']:[],...C(e),...T(e),"",...S(e.identity),...O(e),...r||n?['import schema from "../schema.js";']:[],...A(e.hasNotify),'import { LUNORA_CRONS } from "./crons.js";','import { LUNORA_FUNCTIONS } from "./functions.js";',...o?['import { createQueueCaptureSink, dispatchQueueBatch, shouldCaptureQueue } from "@lunora/queue";','import { LUNORA_QUEUE_REGISTRY } from "./queues.js";']:[],...h?['import { openApiSpec } from "./openapi.js";']:[],...d?['import { openRpcSpec } from "./openrpc.js";']:[],'import { createShardDO } from "./shard.js";',...e.hasVectors===!0?['import { LUNORA_VECTOR_INDEXES } from "./vectors.js";']:[]]},L=e=>[...e.hasStorage?['/** `.storage(...)` declaration — one bucket (required) plus optional extra named buckets and signed-URL config. Backs `ctx.storage` AND the studio file browser. */\ninterface StorageDeclaration<Env> {\n    /** The default R2 bucket binding (the bare `ctx.storage`). */\n    bucket: Selector<Env, R2BucketLike>;\n    /** Extra named buckets, reached via `ctx.storage.bucket("name")` and the studio\'s bucket picker. */\n    buckets?: Record<string, Selector<Env, R2BucketLike>>;\n    /** Public base URL signed/public object URLs resolve against. */\n    publicBaseUrl?: Selector<Env, string>;\n    /** R2 S3-API credentials (`{ accountId, accessKeyId, secretAccessKey, bucket, jurisdiction? }`) enabling `ctx.storage.getPresignedUrl` — native S3 presigned URLs that hit R2 directly, bypassing the worker. Omit to use only the worker-signed `getSignedUrl` path. */\n    s3?: Selector<Env, R2S3Credentials>;\n    /** HMAC secret for signed URLs. */\n    signingSecret?: Selector<Env, string>;\n}']:[],...e.hasScheduler?["/** `.scheduler(...)` declaration — the `SchedulerDO` namespace. Backs `ctx.scheduler` AND the studio's scheduled-jobs view. The origin its callbacks dispatch back to is not declared here: the DO reads `env.LUNORA_ORIGIN_URL` at fire time, because a caller-supplied dispatch target would be an SSRF vector. */\ninterface SchedulerDeclaration<Env> {\n    /** The `SchedulerDO` namespace binding (typically `env.SCHEDULER`). */\n    namespace: Selector<Env, DurableObjectNamespaceLike & ShardNamespaceLike>;\n}"]:[],...e.hasGlobal?["/** `.global(...)` declaration — the D1 binding backing `.global()` tables. Backs cross-tenant `ctx.db` reads/writes AND the studio's global data browser. */\ninterface GlobalDeclaration<Env> {\n    /** The D1 binding (typically `env.DB`). */\n    d1: Selector<Env, D1DatabaseLike>;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}"]:[],...e.hasHyperdriveGlobal?['/** `.hyperdriveGlobal(...)` declaration — backs `.global({ backend: "hyperdrive" })` tables on a Postgres/MySQL database via Hyperdrive. Stays reactive: the writer is injected as `globalDb` and the broadcast hook drives live queries. */\ninterface HyperdriveGlobalDeclaration<Env> {\n    /** The Hyperdrive engine — selects the Postgres or MySQL dialect. */\n    engine: HyperdriveEngine;\n    /** Build the `SqlExec` from `env` — e.g. `buildPgExec(fromPostgresJs(postgres(env.HYPERDRIVE.connectionString)))`. Cache the driver on the DO instance; rebuild lazily after hibernation. */\n    exec: (env: Env) => SqlExec;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}']:[],...e.hasAuth?['/** `.auth(...)` declaration — better-auth options plus the storage the adapter reads. Give it `d1` (the default) or `namespace` (a Durable Object that hosts the auth tables), never both. The builder owns the lazy build + `ensureMigrated` dance and wires `authHandler` / `resolveIdentity` / `authAdmin`. */\ninterface AuthDeclaration<Env> {\n    /** The D1 binding the auth SQL adapter is wired over (via `lunoraD1Adapter`). Omit only when using `namespace`. */\n    d1?: Selector<Env, unknown>;\n    /** Shared secret the worker presents on the object\'s internal session route. REQUIRED with `namespace`: the binding is reachable from any worker bound to it, so the secret — not the binding — is the authorization boundary. Without it identity resolution fails closed. */\n    internalSecret?: Selector<Env, string>;\n    /** Name of the Durable Object instance holding the auth tables. Defaults to `"auth"`. Set it to run separate auth objects (per deployment, per tenant) off one namespace. */\n    objectName?: Selector<Env, string>;\n    /** The auth Durable Object namespace — the DO-backed mode. Needed for `@better-auth/scim`, which requires native transactions that D1 has none of. The object owns the auth tables, so `/api/auth/*` and identity resolution both go through it. Typed as `AuthNamespaceLike` because `createDoAuthWiring` resolves through `idFromName` + `get` and has no `getByName` fallback — both members are load-bearing here, and `ShardNamespaceLike` leaves both optional. */\n    namespace?: Selector<Env, AuthNamespaceLike>;\n    /** Build the better-auth options from `env` (secret, plugins, email/password, …). */\n    options: (env: Env) => LunoraAuthOptions;\n}']:[]],N=e=>[...e.hasAccess?["    private accessSelector?: Selector<Env, CreateAccessResolverOptions | undefined>;"]:[],"    private adminToken?: Selector<Env, string>;",...e.hasAuth?["    private authDeclaration?: AuthDeclaration<Env>;"]:[],"    private cdcEnabled = false;","    private reactiveCacheConfig: boolean | { maxBytes?: number; maxEntries?: number } = false;",'    private maxRelationKeysLimit?: ShardConfig["maxRelationKeys"];','    private observabilitySink?: ShardConfig["observability"];','    private relationExistsPushDownMode?: ShardConfig["relationExistsPushDown"];',"    private readonly extendFns: ((env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>)[] = [];",...e.hasGlobal?["    private globalDeclaration?: GlobalDeclaration<Env>;"]:[],...e.hasHyperdriveGlobal?["    private hyperdriveGlobalDeclaration?: HyperdriveGlobalDeclaration<Env>;"]:[],"    private httpRouterApp?: HttpRouterLike;","    private readonly routeMap: Record<string, Route> = {};",...e.hasScheduler?["    private schedulerDeclaration?: SchedulerDeclaration<Env>;"]:[],...m(e)?["    private readonly shardExtras: Partial<ShardConfig> = {};"]:[],"    private shardSelector?: Selector<Env, ShardNamespaceLike>;",...e.hasStorage?["    private storageDeclaration?: StorageDeclaration<Env>;"]:[]],q=e=>b.filter(([t])=>e[t]).map(([,t,a,r])=>`    /** ${r} */
     public ${t}(factory: NonNullable<ShardConfig["${a}"]>): this {
         this.shardExtras.${a} = factory;
 
@@ -17,7 +17,12 @@ import{A as f,G as w}from"./emit-BNdsZPcd.mjs";const y=e=>`has${e.charAt(0).toUp
         this.reactiveCacheConfig = config;
 
         return this;
-    }`,...e.hasAuth?['    /** Wire better-auth — the builder lazily builds the instance, runs `ensureMigrated`, and dispatches `/api/auth/*` inside the worker (instrumented for the auth-failure SLO). Pass `d1` for the D1-backed default, or `namespace` + `internalSecret` to host the auth tables in a Durable Object (what `@better-auth/scim` needs). */\n    public auth(declaration: AuthDeclaration<Env>): this {\n        // Reject the ambiguous and the empty shapes here rather than at the first\n        // request: with neither storage set, auth would silently never answer, and\n        // with both it is unclear which one owns the tables.\n        if (declaration.d1 && declaration.namespace) {\n            throw new Error(".auth(): pass either `d1` or `namespace`, not both — they are two different homes for the same tables.");\n        }\n\n        if (!declaration.d1 && !declaration.namespace) {\n            throw new Error(".auth(): needs `d1` (D1-backed) or `namespace` (Durable-Object-backed) to know where the auth tables live.");\n        }\n\n        if (declaration.namespace && !declaration.internalSecret) {\n            throw new Error(\n                ".auth(): `namespace` requires `internalSecret` — the auth DO binding is reachable from any worker bound to it, so identity resolution is gated on a shared secret and would otherwise fail closed on every request.",\n            );\n        }\n\n        this.authDeclaration = declaration;\n\n        return this;\n    }']:[],"    /** Escape hatch — merge raw `WorkerOptions` (anything not yet sugared) over the derived options at build time. The second `derived` argument is a snapshot of the options assembled so far (after `.auth(...)` etc.), so you can compose rather than clobber — e.g. wrap `derived.resolveIdentity` instead of replacing it. */\n    public extend(fn: (env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>): this {\n        this.extendFns.push(fn);\n\n        return this;\n    }",...e.hasGlobal?[`    /** Back \`.global()\` (cross-tenant) tables with D1 — wires \`ctx.db\` routing, the studio global browser, and reverse cross-shard relations. */
+    }`,`    /** Ceiling on the join keys ONE relation-crossing \`where\` predicate may pre-resolve via semijoin before failing closed. Omit for the engine default. */
+    public maxRelationKeys(limit: NonNullable<ShardConfig["maxRelationKeys"]>): this {
+        this.maxRelationKeysLimit = limit;
+
+        return this;
+    }`,"    /**\n     * Route the shard's `ctx.log` lines, `ctx.trace` spans and `ctx.metrics` measurements to a telemetry sink.\n     *\n     * The DO half of observability: without it every in-handler signal stays in the shard's local ring buffer (the studio Logs panel) and reaches no collector. The worker half — one `onRpc` event per dispatched RPC — is a `createWorker` option; pass the SAME sink to both via `.extend((env) => ({ observability: sink(env) }))` to correlate them.\n     */\n    public observability(selector: NonNullable<ShardConfig[\"observability\"]>): this {\n        this.observabilitySink = selector;\n\n        return this;\n    }",'    /** Resolution policy for a relation-crossing `where` whose child is co-located in this shard: `"auto"` (cost-based, the engine default), `"always"` (inline correlated EXISTS) or `"never"` (universal semijoin). All three return identical rows. */\n    public relationExistsPushDown(mode: NonNullable<ShardConfig["relationExistsPushDown"]>): this {\n        this.relationExistsPushDownMode = mode;\n\n        return this;\n    }',...e.hasAuth?['    /** Wire better-auth — the builder lazily builds the instance, runs `ensureMigrated`, and dispatches `/api/auth/*` inside the worker (instrumented for the auth-failure SLO). Pass `d1` for the D1-backed default, or `namespace` + `internalSecret` to host the auth tables in a Durable Object (what `@better-auth/scim` needs). */\n    public auth(declaration: AuthDeclaration<Env>): this {\n        // Reject the ambiguous and the empty shapes here rather than at the first\n        // request: with neither storage set, auth would silently never answer, and\n        // with both it is unclear which one owns the tables.\n        if (declaration.d1 && declaration.namespace) {\n            throw new Error(".auth(): pass either `d1` or `namespace`, not both — they are two different homes for the same tables.");\n        }\n\n        if (!declaration.d1 && !declaration.namespace) {\n            throw new Error(".auth(): needs `d1` (D1-backed) or `namespace` (Durable-Object-backed) to know where the auth tables live.");\n        }\n\n        if (declaration.namespace && !declaration.internalSecret) {\n            throw new Error(\n                ".auth(): `namespace` requires `internalSecret` — the auth DO binding is reachable from any worker bound to it, so identity resolution is gated on a shared secret and would otherwise fail closed on every request.",\n            );\n        }\n\n        this.authDeclaration = declaration;\n\n        return this;\n    }']:[],"    /** Escape hatch — merge raw `WorkerOptions` (anything not yet sugared) over the derived options at build time. The second `derived` argument is a snapshot of the options assembled so far (after `.auth(...)` etc.), so you can compose rather than clobber — e.g. wrap `derived.resolveIdentity` instead of replacing it. */\n    public extend(fn: (env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>): this {\n        this.extendFns.push(fn);\n\n        return this;\n    }",...e.hasGlobal?[`    /** Back \`.global()\` (cross-tenant) tables with D1 — wires \`ctx.db\` routing, the studio global browser, and reverse cross-shard relations. */
     public global(declaration: GlobalDeclaration<Env>): this {
         this.globalDeclaration = declaration;
 
@@ -52,8 +57,8 @@ import{A as f,G as w}from"./emit-BNdsZPcd.mjs";const y=e=>`has${e.charAt(0).toUp
         this.storageDeclaration = declaration;
 
         return this;
-    }`]:[],...N(e)],G=e=>{const t=r=>e.hasScheduler?`
-                              ...(this.schedulerDeclaration ? { scheduler: this.resolveScheduler(env) as unknown as ${r}["scheduler"] } : {}),`:"",a=["            cdc: this.cdcEnabled,","            reactiveCache: this.reactiveCacheConfig,",...e.hasGlobal?[`            ...(this.globalDeclaration
+    }`]:[],...q(e)],G=e=>{const t=r=>e.hasScheduler?`
+                              ...(this.schedulerDeclaration ? { scheduler: this.resolveScheduler(env) as unknown as ${r}["scheduler"] } : {}),`:"",a=["            cdc: this.cdcEnabled,","            reactiveCache: this.reactiveCacheConfig,","            ...(this.maxRelationKeysLimit === undefined ? {} : { maxRelationKeys: this.maxRelationKeysLimit }),","            ...(this.observabilitySink === undefined ? {} : { observability: this.observabilitySink }),","            ...(this.relationExistsPushDownMode === undefined ? {} : { relationExistsPushDown: this.relationExistsPushDownMode }),",...e.hasGlobal?[`            ...(this.globalDeclaration
                 ? {
                       d1: (rawEnv: Record<string, unknown>, request?: { bookmark?: string; cdc?: boolean; cdcRetentionMs?: number; identity?: Record<string, unknown>; onBookmark?: (bookmark: string | undefined) => void; userId?: string | null }) => {
                           const env = rawEnv as Env;
@@ -124,10 +129,10 @@ import{A as f,G as w}from"./emit-BNdsZPcd.mjs";const y=e=>`has${e.charAt(0).toUp
                 ? {
                       scheduler: (rawEnv: Record<string, unknown>) => this.resolveScheduler(rawEnv as Env),
                   }
-                : {}),`]:[],...e.hasStorage?["            ...(this.storageDeclaration ? { storage: (rawEnv: Record<string, unknown>) => this.resolveStorage(rawEnv as Env) } : {}),"]:[],...u(e)?["            ...this.shardExtras,"]:[]];return a.length>0?`
+                : {}),`]:[],...e.hasStorage?["            ...(this.storageDeclaration ? { storage: (rawEnv: Record<string, unknown>) => this.resolveStorage(rawEnv as Env) } : {}),"]:[],...m(e)?["            ...this.shardExtras,"]:[]];return a.length>0?`
 ${a.join(`
 `)}
-        `:""},B=e=>[...e.tableNames.length>0?[`        options.listSchemaTables = () => [${e.tableNames.map(t=>JSON.stringify(t)).join(", ")}];`]:[],...e.hasScheduler?[`        if (this.schedulerDeclaration) {
+        `:""},W=e=>[...e.tableNames.length>0?[`        options.listSchemaTables = () => [${e.tableNames.map(t=>JSON.stringify(t)).join(", ")}];`]:[],...e.hasScheduler?[`        if (this.schedulerDeclaration) {
             options.schedulerDO = this.schedulerDeclaration.namespace(env);
         }`]:[],...e.hasWorkflow?[`        options.workflowsClient = (workflowEnv) => {
             const source = workflowEnv as Record<string, unknown>;
@@ -269,7 +274,7 @@ ${a.join(`
         }`]:[],...e.voiceAgents&&e.voiceAgents.length>0?[`        options.voiceAgents = {
 ${e.voiceAgents.map(t=>`            ${JSON.stringify(t.exportName)}: (env as Record<string, unknown>)[${JSON.stringify(t.bindingName)}] as ShardNamespaceLike,`).join(`
 `)}
-        };`]:[]],W=e=>["            cronJobs: LUNORA_CRONS,","            functions: LUNORA_FUNCTIONS,",...e.identity?[`            identity: lunoraIdentityContract.${e.identity.exportName},`]:[],...e.jurisdiction?[`            jurisdiction: ${JSON.stringify(e.jurisdiction)},`]:[],...e.wantsOpenApi?["            openApiSpec,"]:[],...e.wantsOpenRpc?["            openRpcSpec,"]:[],...e.hasQueue?["            queue: (batch: unknown, queueEnv: unknown, _context: ExecutionContextLike, trigger: TriggerTrace): Promise<void> =>","                dispatchQueueBatch(batch as Parameters<typeof dispatchQueueBatch>[0], LUNORA_QUEUE_REGISTRY, {","                    capture: shouldCaptureQueue(queueEnv as Record<string, unknown>)",`                        ? createQueueCaptureSink(queueEnv as Record<string, unknown>${e.jurisdiction?`, { jurisdiction: ${JSON.stringify(e.jurisdiction)} }`:""})`,"                        : undefined,","                    env: queueEnv as Record<string, unknown>,","                    traceparent: trigger.traceparent,","                }),"]:[],"            ...(this.httpRouterApp ? { httpRouter: this.httpRouterApp } : {}),","            routes: this.routeMap,","            shardDO: this.shardSelector?.(env) ?? (undefined as unknown as ShardNamespaceLike),"],P=e=>e.hasScheduler?`
+        };`]:[]],B=e=>["            cronJobs: LUNORA_CRONS,","            functions: LUNORA_FUNCTIONS,",...e.identity?[`            identity: lunoraIdentityContract.${e.identity.exportName},`]:[],...e.jurisdiction?[`            jurisdiction: ${JSON.stringify(e.jurisdiction)},`]:[],...e.wantsOpenApi?["            openApiSpec,"]:[],...e.wantsOpenRpc?["            openRpcSpec,"]:[],...e.hasQueue?["            queue: (batch: unknown, queueEnv: unknown, _context: ExecutionContextLike, trigger: TriggerTrace): Promise<void> =>","                dispatchQueueBatch(batch as Parameters<typeof dispatchQueueBatch>[0], LUNORA_QUEUE_REGISTRY, {","                    capture: shouldCaptureQueue(queueEnv as Record<string, unknown>)",`                        ? createQueueCaptureSink(queueEnv as Record<string, unknown>${e.jurisdiction?`, { jurisdiction: ${JSON.stringify(e.jurisdiction)} }`:""})`,"                        : undefined,","                    env: queueEnv as Record<string, unknown>,","                    traceparent: trigger.traceparent,","                }),"]:[],"            ...(this.httpRouterApp ? { httpRouter: this.httpRouterApp } : {}),","            routes: this.routeMap,","            shardDO: this.shardSelector?.(env) ?? (undefined as unknown as ShardNamespaceLike),"],P=e=>e.hasScheduler?`
     /** Resolve the \`SchedulerDO\`-backed scheduler for this env; \`undefined\` until the namespace is wired. */
     private resolveScheduler(env: Env): ReturnType<typeof createScheduler> | undefined {
         const namespace = this.schedulerDeclaration?.namespace(env);
@@ -386,8 +391,8 @@ ${e.voiceAgents.map(t=>`            ${JSON.stringify(t.exportName)}: (env as Rec
  * Opens a D1 Sessions API session pinned to \`bookmark\` (the caller's own
  * last-known write, when supplied) so reads observe it — read-your-writes
  * across replicas. \`onBookmark\`, when supplied, is invoked with the bookmark
- * produced by each write so the caller (the generated DO) can record it via
- * \`setOutboundBookmark\` and echo \`x-d1-bookmark\` on the response.
+ * produced by each write so the caller (the generated DO) can record it on the
+ * dispatch's bookmark sink and echo \`x-d1-bookmark\` on the response.
  *
  * Wrapped in \`retryingExec\` so D1's documented baseline of transient failures
  * (storage-object resets, isolate memory evictions, dropped connections) does
@@ -422,8 +427,8 @@ const buildExec = (database: D1DatabaseLike, bookmark?: string, onBookmark?: (bo
             // read could pin a replica that has not seen them: read-your-writes
             // lost on the exact path the bookmark exists for. Reporting it after
             // a plain \`SELECT\` too is harmless and correct — the session's
-            // bookmark only ever moves forward, and \`setOutboundBookmark\` takes
-            // the last value.
+            // bookmark only ever moves forward, and the sink takes the last
+            // value.
             onBookmark?.(session?.getBookmark() ?? undefined);
 
             return result.results;
@@ -583,7 +588,7 @@ const buildGlobalCdcApplier =
 
         return request.changes.length;
     };
-`:"",H=e=>[...e.hasAuth?["AuthDeclaration"]:[],"ComposedApp",...e.hasGlobal?["GlobalDeclaration"]:[],...e.hasScheduler?["SchedulerDeclaration"]:[],"Selector",...e.hasStorage?["StorageDeclaration"]:[]].toSorted((t,a)=>t.localeCompare(a)).join(", "),F=e=>{const t={...e,hasVectors:(e.hasVectors??!0)&&(e.vectorIndexCount??0)>0},{hasAuth:a}=t,r=L(t),n=B(t),i=a?`        let auth: LunoraAuth | null = null;
+`:"",H=e=>[...e.hasAuth?["AuthDeclaration"]:[],"ComposedApp",...e.hasGlobal?["GlobalDeclaration"]:[],...e.hasScheduler?["SchedulerDeclaration"]:[],"Selector",...e.hasStorage?["StorageDeclaration"]:[]].toSorted((t,a)=>t.localeCompare(a)).join(", "),F=e=>{const t={...e,hasVectors:(e.hasVectors??!0)&&(e.vectorIndexCount??0)>0},{hasAuth:a}=t,r=L(t),n=W(t),i=a?`        let auth: LunoraAuth | null = null;
         let authInit: Promise<void> | null = null;
 `:"",o=a?`
         const initAuth = async (env: Env): Promise<void> => {
@@ -624,22 +629,25 @@ const buildGlobalCdcApplier =
                 authInit = null;
                 throw error;
             }));
-`:"",c=a?`
-                await ensureAuth(env);`:"",s=a?"() => auth":"() => null",l=a?"getAuth: () => LunoraAuth | null":"_getAuth: () => null",d=t.hasFramework?`        const buildWorker = (env: Env): LunoraWorker =>
-            host ? withFrameworkWorker(host, (hostEnv) => this.buildWorkerOptions(hostEnv as Env, ${s})) : createWorker(this.buildWorkerOptions(env, ${s}));`:`        const buildWorker = (env: Env): LunoraWorker => createWorker(this.buildWorkerOptions(env, ${s}));`,h=t.hasFramework?"host?: FrameworkHostHandler":"",p=t.emailAgents??[],v=p.length>0?`        composed.email = dispatchAgentEmail([
-${p.map(b=>`            { agent: lunoraAgentDefinitions.${b.exportName}, binding: ${JSON.stringify(b.bindingName)} },`).join(`
+`:"",l=a?`
+                await ensureAuth(env);`:"",s=a?"() => auth":"() => null",c=a?"getAuth: () => LunoraAuth | null":"_getAuth: () => null",h=t.hasFramework?`        const buildWorker = (env: Env): LunoraWorker =>
+            host ? withFrameworkWorker(host, (hostEnv) => this.buildWorkerOptions(hostEnv as Env, ${s})) : createWorker(this.buildWorkerOptions(env, ${s}));`:`        const buildWorker = (env: Env): LunoraWorker => createWorker(this.buildWorkerOptions(env, ${s}));`,d=t.hasFramework?"host?: FrameworkHostHandler":"",u=t.emailAgents??[],v=u.length>0?`        composed.email = dispatchAgentEmail([
+${u.map(p=>`            { agent: lunoraAgentDefinitions.${p.exportName}, binding: ${JSON.stringify(p.bindingName)} },`).join(`
 `)}
         ]);
 
-`:"",k=`    /** Materialise the standalone Cloudflare worker + \`ShardDO\` class. */
+`:"",f=`    /** Materialise the standalone Cloudflare worker + \`ShardDO\` class. */
     public build(): ComposedApp {
         return this.assemble();
-    }${t.hasFramework?"\n\n    /** Compose Lunora's realtime plane INTO a meta-framework's Cloudflare handler (SvelteKit/Astro/Nuxt). The framework `host` serves everything except the reserved `/_lunora/*` endpoints; pass the adapter-emitted worker (e.g. SvelteKit's `_worker.js`, Astro's `handle`). */\n    public buildFrameworkWorker(host: FrameworkHostHandler): ComposedApp {\n        return this.assemble(host);\n    }":""}`;return`${w}${I(t).join(`
+    }${t.hasFramework?"\n\n    /** Compose Lunora's realtime plane INTO a meta-framework's Cloudflare handler (SvelteKit/Astro/Nuxt). The framework `host` serves everything except the reserved `/_lunora/*` endpoints; pass the adapter-emitted worker (e.g. SvelteKit's `_worker.js`, Astro's `handle`). */\n    public buildFrameworkWorker(host: FrameworkHostHandler): ComposedApp {\n        return this.assemble(host);\n    }":""}`;return`${k}${I(t).join(`
 `)}
 
 /** Read a value off the per-request \`env\`. Returns \`undefined\` to leave the capability unconfigured (its \`ctx.*\`/admin surface stays a clear-error stub). */
 type Selector<Env, T> = (env: Env) => T | undefined;
-${u(t)?"\n/** The generated `createShardDO` config — the long-tail `.ai()` / `.kv()` / … methods pass straight through to it. */\ntype ShardConfig = NonNullable<Parameters<typeof createShardDO>[0]>;\n":""}
+
+/** The generated \`createShardDO\` config — \`.observability()\`, \`.maxRelationKeys()\` and the long-tail \`.ai()\` / \`.kv()\` / … methods pass straight through to it. */
+type ShardConfig = NonNullable<Parameters<typeof createShardDO>[0]>;
+
 ${r.join(`
 
 `)}${r.length>0?`
@@ -659,7 +667,7 @@ interface ComposedApp extends LunoraWorker {
  * first request so per-isolate singletons are built once.
  */
 class AppBuilder<Env extends object> {
-${q(t).join(`
+${N(t).join(`
 `)}
 
     private emailHandler?: (env: Env) => (message: unknown, env: unknown, context: ExecutionContextLike) => Promise<void>;
@@ -668,10 +676,10 @@ ${j(t).join(`
 
 `)}
 
-${k}
+${f}
 
     /** Build the shard DO + compose the worker (standalone or framework-hosted), wrapping the lazy per-isolate singletons + auth init. */
-    private assemble(${h}): ComposedApp {
+    private assemble(${d}): ComposedApp {
         const ShardDO = createShardDO({${G(t)}});
 
         // Per-isolate singletons: the worker (and auth instance) are expensive to
@@ -679,12 +687,12 @@ ${k}
         // the same isolate reuses them.
         let worker: LunoraWorker | null = null;
 ${i}${o}
-${d}
+${h}
 
         const composed: ComposedApp = {
             ShardDO,
             fetch: async (request: Request, rawEnv: unknown, context: ExecutionContextLike): Promise<Response> => {
-                const env = rawEnv as Env;${c}
+                const env = rawEnv as Env;${l}
                 worker ??= buildWorker(env);
 
                 return worker.fetch(request, rawEnv, context);
@@ -698,7 +706,7 @@ ${d}
                 worker ??= buildWorker(rawEnv as Env);
 
                 return worker.serverQuery(request, rawEnv, reference, args, options);
-            },${t.hasQueue?`
+            },${t.hasQueue||t.hasFramework?`
             queue: async (batch: unknown, rawEnv: unknown, context: ExecutionContextLike): Promise<void> => {
                 worker ??= buildWorker(rawEnv as Env);
 
@@ -711,14 +719,26 @@ ${v}        if (this.emailHandler) {
 
             composed.email = (message, rawEnv, context) => handler(rawEnv as Env)(message, rawEnv, context);
         }
+${t.hasFramework?`
+        // A framework host may export its own \`email\` (Nitro's \`cloudflare-module\`
+        // does). Nothing in Lunora serves one, so when the app registered no handler
+        // of its own the host's is the only one there is — forward to it rather than
+        // dropping the entry.
+        if (!composed.email && host && typeof host === "object" && typeof host.email === "function") {
+            composed.email = (message, rawEnv, context) => {
+                worker ??= buildWorker(rawEnv as Env);
 
+                return worker.email?.(message, rawEnv, context) ?? Promise.resolve();
+            };
+        }
+`:""}
         return composed;
     }
 ${P(t)}${_(t.hasStorage)}
     /** Fan the recorded declarations into the worker-side \`createWorker\` options. */
-    private buildWorkerOptions(env: Env, ${l}): WorkerOptions {
+    private buildWorkerOptions(env: Env, ${c}): WorkerOptions {
         const options: WorkerOptions = {
-${W(t).join(`
+${B(t).join(`
 `)}
         };
 

package/dist/packem_shared/{exported-procedure-chains-Cmt3Pr92.mjs → exported-procedure-chains-CH_Ce-wL.mjs}

@@ -1 +1 @@
-import{Node as a}from"ts-morph";import{c as n}from"./classify-procedure-call-CRm5Etni.mjs";const f=s=>{const i=[];for(const r of s.getVariableStatements())if(r.isExported())for(const t of r.getDeclarations()){const e=t.getInitializer(),o=e&&a.isCallExpression(e)?n(e):void 0;o?.receiver&&i.push({name:t.getName(),receiver:o.receiver})}return i};export{f as e};
+import{Node as a}from"ts-morph";import{c as n}from"./classify-procedure-call-C5BOBVM7.mjs";const f=s=>{const i=[];for(const r of s.getVariableStatements())if(r.isExported())for(const t of r.getDeclarations()){const e=t.getInitializer(),o=e&&a.isCallExpression(e)?n(e):void 0;o?.receiver&&i.push({name:t.getName(),receiver:o.receiver})}return i};export{f as e};

package/dist/packem_shared/{index-BsVoa-4F.mjs → index-D322boXY.mjs}

@@ -1 +1 @@
-import{Node as r}from"ts-morph";import{listLunoraSourceFiles as f,lunoraRelativePath as m,tablesAccessedIn as d}from"./listLunoraSourceFiles-BvqYMy81.mjs";import{w as g,c as p}from"./classify-procedure-call-CRm5Etni.mjs";const u=e=>{if(!r.isPropertyAssignment(e)&&!r.isShorthandPropertyAssignment(e)&&!r.isMethodDeclaration(e)&&!r.isGetAccessorDeclaration(e))return;const t=e.getNameNode();return r.isStringLiteral(t)?t.getLiteralValue():e.getName()},h=e=>g(e,"use","mask"),x=e=>{if(r.isPropertyAssignment(e)){const t=e.getInitializer();if(t&&r.isStringLiteral(t)){const s=t.getLiteralText();if(s==="redact"||s==="hash")return s}}return"custom"},k=e=>{const t=e.getArguments()[0];if(!t||!r.isObjectLiteralExpression(t))return[];const s=[];for(const i of t.getProperties()){const n=u(i);if(n===void 0||!r.isPropertyAssignment(i))continue;const o=i.getInitializer();if(!(!o||!r.isObjectLiteralExpression(o)))for(const a of o.getProperties()){const c=u(a);c!==void 0&&s.push({column:c,table:n})}}return s},v=e=>{const t=h(e);return{maskColumns:t.flatMap(s=>k(s)),usesMask:t.length>0}},P=new Set(["findFirst","findFirstOrThrow","findMany","get","query"]),C=new Set(["delete","insert","patch","replace"]),M=(e,t)=>{if(!r.isVariableDeclaration(e))return;const s=e.getInitializer();if(!s||!r.isCallExpression(s))return;const i=p(s);if(!i)return;const n=i.receiver?v(i.receiver):{maskColumns:[],usesMask:!1},{tablesRead:o,tablesWritten:a}=d(e,P,C);return{exportName:e.getName(),file:t,maskColumns:n.maskColumns,tablesRead:o,tablesWritten:a,usesMask:n.usesMask,visibility:i.visibility}},E=(e,t)=>{const s=[];for(const i of f(t)){const n=e.getSourceFile(i)??e.addSourceFileAtPath(i),o=m(t,i);for(const a of n.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations()){const l=M(c,o);l&&s.push(l)}}return s};export{u as a,E as d,h as m,x as s};
+import{Node as r}from"ts-morph";import{listLunoraSourceFiles as f,lunoraRelativePath as m,tablesAccessedIn as d}from"./listLunoraSourceFiles-lHrzFhbX.mjs";import{w as g,c as p}from"./classify-procedure-call-C5BOBVM7.mjs";const u=e=>{if(!r.isPropertyAssignment(e)&&!r.isShorthandPropertyAssignment(e)&&!r.isMethodDeclaration(e)&&!r.isGetAccessorDeclaration(e))return;const t=e.getNameNode();return r.isStringLiteral(t)?t.getLiteralValue():e.getName()},h=e=>g(e,"use","mask"),x=e=>{if(r.isPropertyAssignment(e)){const t=e.getInitializer();if(t&&r.isStringLiteral(t)){const s=t.getLiteralText();if(s==="redact"||s==="hash")return s}}return"custom"},k=e=>{const t=e.getArguments()[0];if(!t||!r.isObjectLiteralExpression(t))return[];const s=[];for(const i of t.getProperties()){const n=u(i);if(n===void 0||!r.isPropertyAssignment(i))continue;const o=i.getInitializer();if(!(!o||!r.isObjectLiteralExpression(o)))for(const a of o.getProperties()){const c=u(a);c!==void 0&&s.push({column:c,table:n})}}return s},v=e=>{const t=h(e);return{maskColumns:t.flatMap(s=>k(s)),usesMask:t.length>0}},P=new Set(["findFirst","findFirstOrThrow","findMany","get","query"]),C=new Set(["delete","insert","patch","replace"]),M=(e,t)=>{if(!r.isVariableDeclaration(e))return;const s=e.getInitializer();if(!s||!r.isCallExpression(s))return;const i=p(s);if(!i)return;const n=i.receiver?v(i.receiver):{maskColumns:[],usesMask:!1},{tablesRead:o,tablesWritten:a}=d(e,P,C);return{exportName:e.getName(),file:t,maskColumns:n.maskColumns,tablesRead:o,tablesWritten:a,usesMask:n.usesMask,visibility:i.visibility}},E=(e,t)=>{const s=[];for(const i of f(t)){const n=e.getSourceFile(i)??e.addSourceFileAtPath(i),o=m(t,i);for(const a of n.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations()){const l=M(c,o);l&&s.push(l)}}return s};export{u as a,E as d,h as m,x as s};

package/dist/packem_shared/listLunoraSourceFiles-lHrzFhbX.mjs

@@ -0,0 +1 @@
+import{readdirSync as E,realpathSync as A,lstatSync as P,statSync as b}from"node:fs";import{dirname as v,join as g,relative as O,sep as L,extname as x}from"node:path";import{Node as r,SyntaxKind as m}from"ts-morph";import{diagnosticAt as F}from"./CodegenDiagnosticError-BUXlG3P-.mjs";const R=/\.ts$/u,f=(t,e)=>O(t,e).split(L).join("/").replace(R,""),N=new Set(["_generated","node_modules"]),T=(t,e,s)=>t==="schema.ts"&&e===s,I=t=>{try{return b(t)}catch{console.warn(`@lunora/codegen: skipping ${t} — it is a symlink that does not resolve (or vanished mid-scan).`);return}},S=(t,e,s,n)=>{let i,o;try{i=E(t),o=A(t)}catch{return e}if(n.has(o))return e;n.add(o);for(const a of i){const l=g(t,a),c=I(l);c!==void 0&&(c.isDirectory()?N.has(a)||S(l,e,s,n):c.isFile()&&x(a)===".ts"&&!T(a,t,s)&&e.push(l))}return e},h=t=>S(t,[],t,new Set),D=["src/server","src/index.ts","src/worker.ts"],_=new Set([".ts",".tsx"]),y=(t,e=[])=>{let s;try{s=P(t)}catch{return e}if(s.isFile())return _.has(x(t))&&e.push(t),e;if(!s.isDirectory())return e;for(const n of E(t))n==="_generated"||n==="node_modules"||y(g(t,n),e);return e},C=t=>{const e=v(t),s=h(t).map(i=>({displayPath:f(t,i),filePath:i})),n=new Set(s.map(i=>i.filePath));for(const i of D)for(const o of y(g(e,i)))n.has(o)||(n.add(o),s.push({displayPath:f(e,o),filePath:o}));return s},w=(t,e,s)=>{const n=[];for(const{displayPath:i,filePath:o}of e){const a=t.getSourceFile(o)??t.addSourceFileAtPath(o);for(const l of a.getDescendantsOfKind(m.CallExpression)){const c=s(l,i);c!==void 0&&n.push(c)}}return n},W=(t,e,s)=>w(t,h(e).map(n=>({displayPath:f(e,n),filePath:n})),s),M=(t,e,s)=>w(t,C(e),s),X=t=>{for(const e of t.getAncestors())if(r.isVariableDeclaration(e)&&e.getVariableStatement()?.hasExportKeyword()===!0)return e.getName();return""},Y=(t,e)=>{if(e){const o=t.getArguments()[0];return o&&(r.isArrowFunction(o)||r.isFunctionExpression(o))?o:void 0}const s=t.getArguments()[0];if(!s||!r.isObjectLiteralExpression(s))return;const n=s.getProperty("handler");if(!n||!r.isPropertyAssignment(n))return;const i=n.getInitializer();return i&&(r.isArrowFunction(i)||r.isFunctionExpression(i))?i:void 0},q=(t,e)=>{if(!t||!r.isObjectLiteralExpression(t))return;const s=t.getProperty(e);return s&&r.isPropertyAssignment(s)?s.getInitializer():void 0},p=t=>r.isPropertyAccessExpression(t)&&t.getName()==="db"||r.isIdentifier(t)&&t.getText()==="db",z=new Set(["findFirst","findFirstOrThrow","findMany"]),H=t=>{const e=t.getExpression();if(!r.isPropertyAccessExpression(e)||!z.has(e.getName()))return;const s=e.getExpression();if(p(s)){const n=t.getArguments()[0];return{options:t.getArguments()[1],table:n&&r.isStringLiteral(n)?n.getLiteralText():""}}if(r.isPropertyAccessExpression(s)){const n=s.getExpression();if(p(n))return{options:t.getArguments()[0],table:s.getName()}}},u=(t,e)=>{const s=t.getExpression();return!r.isPropertyAccessExpression(s)||!e.has(s.getName())?!1:p(s.getExpression())},d=t=>{const e=t.getArguments()[0];return e&&r.isStringLiteral(e)?e.getLiteralText():""},G=(t,e,s)=>{const n=new Set,i=new Set;for(const o of t.getDescendantsOfKind(m.CallExpression))if(u(o,e)){const a=d(o);a!==""&&n.add(a)}else if(u(o,s)){const a=d(o);a!==""&&i.add(a)}return{tablesRead:[...n],tablesWritten:[...i]}},j=t=>{let e=t;for(;e&&(r.isAsExpression(e)||r.isSatisfiesExpression(e)||r.isParenthesizedExpression(e)||r.isNonNullExpression(e));)e=e.getExpression();return e},J=t=>{const e=j(t);return e&&r.isCallExpression(e)?e:void 0},Q=t=>{const e=t.getExportAssignment(i=>!i.isExportEquals());if(!e)return;const s=e.getExpression();if(!r.isIdentifier(s))return s;const n=s.getSymbol()?.getValueDeclaration();return n&&r.isVariableDeclaration(n)?n.getInitializer():s},U=t=>{const e=t.getArguments()[1];return e&&r.isStringLiteral(e)?e.getLiteralValue():""},Z=(t,e)=>{if(!r.isObjectLiteralExpression(t))return;const s=t.getProperty(e);if(!s||!r.isPropertyAssignment(s))return;const n=s.getInitializer();return n&&r.isStringLiteral(n)?n.getLiteralText():void 0},k=t=>{const e=t.getStatements(),[s]=e;if(e.length!==1||s===void 0||!r.isReturnStatement(s))return;const n=s.getExpression();return n!==void 0&&r.isObjectLiteralExpression(n)?n:void 0},tt=t=>{if(r.isObjectLiteralExpression(t))return t;if(r.isParenthesizedExpression(t)){const e=t.getExpression();return r.isObjectLiteralExpression(e)?e:void 0}return r.isBlock(t)?k(t):void 0},et=t=>r.isIdentifier(t)&&t.getText()==="ctx",st=t=>(e,s,n)=>{if(r.isStringLiteral(e)||r.isNoSubstitutionTemplateLiteral(e))return e.getLiteralValue();throw F(e,`${t} "${s}": \`${n}\` must be a static string literal — it is deploy configuration codegen writes into wrangler.jsonc`)};export{R as TS_EXTENSION_RE,W as collectCallRows,M as collectSecurityCallRows,Q as defaultExportExpression,X as enclosingExportName,Y as handlerOf,et as isContextIdentifier,p as isDatabaseAccessor,U as limitNameOf,h as listLunoraSourceFiles,C as listSecurityScanFiles,f as lunoraRelativePath,tt as objectLiteralFromCallbackBody,q as propertyInitializer,H as readTargetOf,st as stringPropertyFor,Z as stringPropertyOf,d as tableArgumentOf,G as tablesAccessedIn,j as unwrapExpression,J as unwrapToCallExpression};

package/dist/packem_shared/{queries-D8DheHbi.mjs → queries-C3PDsG0y.mjs}

@@ -1 +1 @@
-import{Node as r,SyntaxKind as f}from"ts-morph";import{listLunoraSourceFiles as P,lunoraRelativePath as h,isDatabaseAccessor as A}from"./listLunoraSourceFiles-BvqYMy81.mjs";const m=(t,e)=>{if(t.getText()!==e)return!1;const s=t.getParent();return r.isPropertyAccessExpression(s)&&s.getNameNode()===t?!1:!(r.isPropertyAssignment(s)&&s.getNameNode()===t)},x=(t,e)=>r.isIdentifier(t)?m(t,e):t.getDescendantsOfKind(f.Identifier).some(s=>m(s,e)),g=t=>x(t,"ctx"),I=t=>{let e=t;for(;r.isPropertyAccessExpression(e)||r.isElementAccessExpression(e)||r.isNonNullExpression(e);)e=e.getExpression();return r.isIdentifier(e)?e:void 0},E=t=>x(t,"args"),u=t=>{if(!r.isIdentifier(t))return;const e=t.getText(),s=t.getFirstAncestor(o=>r.isArrowFunction(o)||r.isFunctionExpression(o)||r.isFunctionDeclaration(o));if(s===void 0)return;const i=t.getStart();let n,a=-1;for(const o of s.getDescendantsOfKind(f.VariableDeclaration)){if(o.getName()!==e)continue;const c=o.getInitializer(),l=o.getStart();c!==void 0&&l<i&&l>a&&(n=c,a=l)}return n},C=t=>{if(E(t))return!0;const e=u(t);return e!==void 0&&E(e)},K=t=>{if(r.isCallExpression(t)||r.isNewExpression(t))return!1;const e=u(t);return e===void 0||!(r.isCallExpression(e)||r.isNewExpression(e))},O=t=>{if(g(t))return!0;const e=u(t);if(e!==void 0&&g(e))return!0;const s=e??t;return(r.isIdentifier(s)?[s]:s.getDescendantsOfKind(f.Identifier)).some(n=>{const a=u(n);return a!==void 0&&g(a)})},p=(t,e)=>x(t,e),T=(t,e)=>{if(p(t,e))return!0;const s=u(t);if(s!==void 0&&p(s,e))return!0;const i=I(t);if(i!==void 0){const n=u(i);return n!==void 0&&p(n,e)}return!1},v=t=>{for(const e of t.getAncestors())if(r.isVariableDeclaration(e)&&e.getVariableStatement()?.hasExportKeyword()===!0)return e.getName();return"<module>"},N=new Set(["withGeoIndex","withIndex","withSearchIndex"]),S=new Set(["collect","collectWithScores","first","paginate","take","unique"]),b=t=>{const e=t.getExpression();if(!r.isPropertyAccessExpression(e)||e.getName()!=="query")return!1;const s=e.getExpression();return A(s)},y=t=>{const e=[];let s=t;for(;;){const i=s.getParent();if(!i||!r.isPropertyAccessExpression(i))break;const n=i.getParent();if(!n||!r.isCallExpression(n))break;e.push(i.getName()),s=n}return e},D=/\b[A-Za-z_$][\w$]*\._id\s*===?[^=]/u,w=t=>{let e=t;for(;;){const s=e.getParent();if(!s||!r.isPropertyAccessExpression(s))return!1;const i=s.getParent();if(!i||!r.isCallExpression(i))return!1;if(s.getName()==="filter"){const n=i.getArguments()[0];if(n&&D.test(n.getText()))return!0}e=i}},R=t=>{const e=t.getArguments()[0];return e&&r.isStringLiteral(e)?e.getLiteralText():""},_=(t,e)=>{const s=[];for(const i of P(e)){const n=t.getSourceFile(i)??t.addSourceFileAtPath(i),a=h(e,i);for(const o of n.getDescendantsOfKind(f.CallExpression)){if(!b(o))continue;const c=y(o),l=c.includes("filter");s.push({exportName:v(o),file:a,filtersPrimaryKey:l&&w(o),hasFilter:l,hasIndex:c.some(d=>N.has(d)),line:o.getStartLineNumber(),table:R(o),terminal:c.findLast(d=>S.has(d))})}}return s};export{O as a,K as b,T as c,_ as d,v as e,p as f,C as i,E as r,u as s};
+import{Node as r,SyntaxKind as f}from"ts-morph";import{listLunoraSourceFiles as P,lunoraRelativePath as h,isDatabaseAccessor as A}from"./listLunoraSourceFiles-lHrzFhbX.mjs";const m=(t,e)=>{if(t.getText()!==e)return!1;const s=t.getParent();return r.isPropertyAccessExpression(s)&&s.getNameNode()===t?!1:!(r.isPropertyAssignment(s)&&s.getNameNode()===t)},x=(t,e)=>r.isIdentifier(t)?m(t,e):t.getDescendantsOfKind(f.Identifier).some(s=>m(s,e)),g=t=>x(t,"ctx"),I=t=>{let e=t;for(;r.isPropertyAccessExpression(e)||r.isElementAccessExpression(e)||r.isNonNullExpression(e);)e=e.getExpression();return r.isIdentifier(e)?e:void 0},E=t=>x(t,"args"),u=t=>{if(!r.isIdentifier(t))return;const e=t.getText(),s=t.getFirstAncestor(o=>r.isArrowFunction(o)||r.isFunctionExpression(o)||r.isFunctionDeclaration(o));if(s===void 0)return;const i=t.getStart();let n,a=-1;for(const o of s.getDescendantsOfKind(f.VariableDeclaration)){if(o.getName()!==e)continue;const c=o.getInitializer(),l=o.getStart();c!==void 0&&l<i&&l>a&&(n=c,a=l)}return n},C=t=>{if(E(t))return!0;const e=u(t);return e!==void 0&&E(e)},K=t=>{if(r.isCallExpression(t)||r.isNewExpression(t))return!1;const e=u(t);return e===void 0||!(r.isCallExpression(e)||r.isNewExpression(e))},O=t=>{if(g(t))return!0;const e=u(t);if(e!==void 0&&g(e))return!0;const s=e??t;return(r.isIdentifier(s)?[s]:s.getDescendantsOfKind(f.Identifier)).some(n=>{const a=u(n);return a!==void 0&&g(a)})},p=(t,e)=>x(t,e),T=(t,e)=>{if(p(t,e))return!0;const s=u(t);if(s!==void 0&&p(s,e))return!0;const i=I(t);if(i!==void 0){const n=u(i);return n!==void 0&&p(n,e)}return!1},v=t=>{for(const e of t.getAncestors())if(r.isVariableDeclaration(e)&&e.getVariableStatement()?.hasExportKeyword()===!0)return e.getName();return"<module>"},N=new Set(["withGeoIndex","withIndex","withSearchIndex"]),S=new Set(["collect","collectWithScores","first","paginate","take","unique"]),b=t=>{const e=t.getExpression();if(!r.isPropertyAccessExpression(e)||e.getName()!=="query")return!1;const s=e.getExpression();return A(s)},y=t=>{const e=[];let s=t;for(;;){const i=s.getParent();if(!i||!r.isPropertyAccessExpression(i))break;const n=i.getParent();if(!n||!r.isCallExpression(n))break;e.push(i.getName()),s=n}return e},D=/\b[A-Za-z_$][\w$]*\._id\s*===?[^=]/u,w=t=>{let e=t;for(;;){const s=e.getParent();if(!s||!r.isPropertyAccessExpression(s))return!1;const i=s.getParent();if(!i||!r.isCallExpression(i))return!1;if(s.getName()==="filter"){const n=i.getArguments()[0];if(n&&D.test(n.getText()))return!0}e=i}},R=t=>{const e=t.getArguments()[0];return e&&r.isStringLiteral(e)?e.getLiteralText():""},_=(t,e)=>{const s=[];for(const i of P(e)){const n=t.getSourceFile(i)??t.addSourceFileAtPath(i),a=h(e,i);for(const o of n.getDescendantsOfKind(f.CallExpression)){if(!b(o))continue;const c=y(o),l=c.includes("filter");s.push({exportName:v(o),file:a,filtersPrimaryKey:l&&w(o),hasFilter:l,hasIndex:c.some(d=>N.has(d)),line:o.getStartLineNumber(),table:R(o),terminal:c.findLast(d=>S.has(d))})}}return s};export{O as a,K as b,T as c,_ as d,v as e,p as f,C as i,E as r,u as s};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/codegen",
-  "version": "1.0.0-alpha.163",
+  "version": "1.0.0-alpha.165",
   "description": "Code generator for Lunora: emits _generated/{api,server,dataModel}.ts from your schema",
   "keywords": [
     "cloudflare",
@@ -46,15 +46,15 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/advisor": "1.0.0-alpha.114",
-    "@lunora/agent": "1.0.0-alpha.94",
-    "@lunora/container": "1.0.0-alpha.47",
-    "@lunora/errors": "1.0.0-alpha.34",
+    "@lunora/advisor": "1.0.0-alpha.115",
+    "@lunora/agent": "1.0.0-alpha.95",
+    "@lunora/container": "1.0.0-alpha.48",
+    "@lunora/errors": "1.0.0-alpha.35",
     "@lunora/platform": "1.0.0-alpha.27",
-    "@lunora/queue": "1.0.0-alpha.50",
-    "@lunora/scheduler": "1.0.0-alpha.57",
-    "@lunora/values": "1.0.0-alpha.42",
-    "@lunora/workflow": "1.0.0-alpha.48",
+    "@lunora/queue": "1.0.0-alpha.51",
+    "@lunora/scheduler": "1.0.0-alpha.58",
+    "@lunora/values": "1.0.0-alpha.43",
+    "@lunora/workflow": "1.0.0-alpha.49",
     "jsonc-parser": "^3.3.1",
     "quicktype-core": "^26.0.0",
     "ts-morph": "^28.0.0"

package/dist/packem_shared/SCHEMA_SNAPSHOT_FILENAME-B9S14dpw.mjs

@@ -1,9 +0,0 @@
-import{existsSync as P,mkdirSync as ls,readFileSync as Pt,writeFileSync as us,rmSync as ds}from"node:fs";import{join as f,dirname as Z}from"node:path";import{performance as me}from"node:perf_hooks";import{runAdvisor as fs}from"@lunora/advisor";import{LunoraError as k}from"@lunora/errors";import{SyntaxKind as l,Node as i,Project as et}from"ts-morph";import{serializeSchemaSnapshot as gs}from"./SCHEMA_SNAPSHOT_VERSION-CWESEYLi.mjs";import{toAdvisorContext as ps}from"./formatAdvisories-CkEu1eye.mjs";import{s as ms}from"./paths-C-9fwEgQ.mjs";import{discoverAgents as hs}from"./AGENTS_FILENAME-CRdh_pOr.mjs";import{discoverContainers as xs}from"./CONTAINERS_FILENAME-BssQL6eI.mjs";import Es from"./discoverCrons-c0ig327z.mjs";import{diagnosticAt as oe}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{b as ie}from"./module-specifiers-WF8iAydP.mjs";import{C as he,n as It,i as vs,f as Ss,j as ys,b as As,c as Ns,l as bs,e as Ps,o as Is,d as ws,k as Ts,g as Cs,p as Fs,m as Os,a as Rs,h as Ls}from"./emit-BNdsZPcd.mjs";import{listLunoraSourceFiles as m,unwrapExpression as V,lunoraRelativePath as v,collectCallRows as w,collectSecurityCallRows as Ds,propertyInitializer as b,listSecurityScanFiles as wt,limitNameOf as Tt,isContextIdentifier as Se,handlerOf as ks,isDatabaseAccessor as M,readTargetOf as Ct,enclosingExportName as Ms}from"./listLunoraSourceFiles-BvqYMy81.mjs";import Ks from"./readPackageDependencies-C6h6FZuP.mjs";import{discoverQueues as _s}from"./QUEUES_FILENAME-CIfuMMG3.mjs";import{discoverSandboxUsage as zs}from"./discoverSandboxUsage-BJHLHZR_.mjs";import Us from"./discoverStorageRulesMetadata-CUa2Dtb4.mjs";import{discoverWorkflows as Bs}from"./WORKFLOWS_FILENAME-CSqONfHS.mjs";import{gatePlatformFeatures as $s,resolveCodegenTarget as qs}from"./DEFAULT_TARGET-lPq34YeN.mjs";import{i as R,a as _,e as E,r as js,b as Vs,s as ae,c as Ws,f as Hs,d as Gs}from"./queries-D8DheHbi.mjs";import{a as y,c as z,d as Ft,e as Ys}from"./classify-procedure-call-CRm5Etni.mjs";import Xs from"./discoverAuthApiCalls-B5Qmjmyk.mjs";import tt from"./discoverFunctions-DeuEs6Ce.mjs";import{i as Qs,r as Zs,e as Js}from"./unwrap-handler-return-CmIWbykC.mjs";import st from"./discoverHttpRoutes-zWSSyyOj.mjs";import en from"./discoverHyperdriveCalls-C6kV2CPz.mjs";import tn from"./discoverInserts-BB7o_8pU.mjs";import{m as Pe,a as ee,s as Ot,d as sn}from"./index-BsVoa-4F.mjs";import{e as Rt}from"./exported-procedure-chains-Cmt3Pr92.mjs";import nn from"./discoverMigrations-CQjGLKW-.mjs";import{MUTATORS_FILENAME as rn,isDefineMutatorCallee as on,discoverMutators as nt}from"./MUTATORS_FILENAME-DHX1qUP5.mjs";import an from"./discoverNondeterministicCalls-B07wjsd2.mjs";import{discoverNotifyConfig as cn,discoverNotifyCalls as ln}from"./NOTIFY_FILENAME-BH0djo6F.mjs";import un from"./discoverR2sqlCalls-CuHe5smg.mjs";import dn from"./discoverRlsProcedures-DXdr9YHi.mjs";import fn from"./discoverRlsMetadata-CXWVNLk4.mjs";import gn from"./discoverSchema-C4znXEB-.mjs";import{secretKindOf as pn,redact as mn,isHeuristicSecretKind as hn,isSecretishName as xn}from"./redact-Cy14LEnc.mjs";import{discoverShapes as En}from"./SHAPES_FILENAME-DhZ3JkkH.mjs";import{emitApp as vn}from"./emitApp-CxmA4W3C.mjs";import{buildOpenApiDocument as Sn,emitOpenApiModule as yn}from"./buildOpenApiDocument-qYjkmRTX.mjs";import{buildOpenRpcDocument as An,emitOpenRpcModule as Nn}from"./OPENRPC_VERSION-BgLkvCYK.mjs";import{s as bn}from"./parse-validator-CMV0eq2a.mjs";import{buildSchemaSnapshot as Pn}from"./SchemaSnapshotParseError-yrVM8bTa.mjs";const rt=(e,t="api")=>{const s=new Map;for(const n of e){const o=ms(n),r=s.get(o);if(r===void 0){s.set(o,n);continue}if(r!==n){const a=t==="api"?`the generated api.ts would declare "${o}" twice and the dispatch key "${o}:<fn>" would be ambiguous`:`the generated api.ts would declare "${o}" twice in HttpStreamsRef and again in the httpStreams object literal`;throw new k("INTERNAL",`@lunora/codegen: "${r}" and "${n}" both map to the ${t} namespace "${o}" — ${a}. Rename one file so the two differ by more than a non-identifier character (\`-\`, \`.\`, \`/\` and \`_\` all sanitize to \`_\`).`,{status:500})}}},In=(e,t={})=>{const{hasVectors:s=!0,scheduler:n=!1,storage:o=!1}=t,r=[],a=e.tables.filter(c=>c.shardMode==="global");return a.some(c=>c.globalBackend!=="hyperdrive")&&r.push({name:"@lunora/d1",reason:"`.global()` tables are D1-backed, so `_generated/app.ts` imports the D1 `ctx.db` adapter"}),a.some(c=>c.globalBackend==="hyperdrive")&&r.push({name:"@lunora/hyperdrive",reason:'`.global({ backend: "hyperdrive" })` tables route through `@lunora/hyperdrive/global`'},{name:"@lunora/sql-store",reason:'`.global({ backend: "hyperdrive" })` makes `_generated/app.ts` import the `SqlCtxDbOptions` / `SqlExec` types'}),n&&r.push({name:"@lunora/scheduler",reason:"a declared cron (or `ctx.scheduler` use) makes `_generated/app.ts` import `createScheduler`"}),o&&r.push({name:"@lunora/storage",reason:"a `v.storage()` column, a storage access rule (or `ctx.storage` use) makes `_generated/app.ts` import `createStorage`"}),e.vectorIndexes.length>0&&s&&r.push({name:"@lunora/bindings",reason:"`.vectorize()` indexes make `_generated/shard.ts` import `@lunora/bindings/vectors`"}),r},wn=(e,t,s={})=>{if(t===void 0)return;const n=In(e,s).filter(r=>!t.has(r.name));if(n.length===0)return;const o=n.map(r=>`  - ${r.name} — ${r.reason}`).join(`
-`);throw new k("INTERNAL",`@lunora/codegen: this schema's generated code imports packages the project does not declare:
-${o}
-
-Install them with your package manager, then re-run codegen.`)},Tn="env.ts",Cn=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineEnv";for(const s of t.getDeclarations())if(i.isImportSpecifier(s))return ie(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineEnv":!1;return!1},Fn=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!i.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&ie(n.getModuleSpecifierValue())}return!1},On=e=>{if(i.isIdentifier(e))return Cn(e);if(i.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineEnv"&&i.isIdentifier(t)&&Fn(t)}return!1},Rn=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!On(n.getExpression()))continue;const r=s.getNameNode();if(!i.isIdentifier(r))throw oe(r,"defineEnv exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},Ln=(e,t)=>{const s=f(t,Tn);if(!P(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),o=Rn(n);if(o.length!==0){if(o.length>1)throw oe(n,`lunora/env.ts declares ${o.length.toString()} defineEnv() contracts (${o.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return o[0]}},ot="ctx",Lt=e=>{const t=new Set,s=new Set([ot]),n=r=>{if(i.isObjectBindingPattern(r))for(const a of r.getElements()){const c=a.getPropertyNameNode()?.getText()??a.getName();c&&t.add(c)}};for(const r of e.getDescendantsOfKind(l.BindingElement)){if((r.getPropertyNameNode()?.getText()??r.getName())!==ot)continue;const a=r.getNameNode();i.isIdentifier(a)?s.add(a.getText()):n(a)}const o=r=>i.isIdentifier(r)&&s.has(r.getText());for(const r of e.getDescendantsOfKind(l.PropertyAccessExpression))o(r.getExpression())&&t.add(r.getName());for(const r of e.getDescendantsOfKind(l.VariableDeclaration)){const a=r.getInitializer();a!==void 0&&o(a)&&n(r.getNameNode())}return t},Dn=(e,t)=>{const s=Object.fromEntries(he.map(n=>[n.key,!1]));for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=new Set(o.getImportDeclarations().map(c=>c.getModuleSpecifierValue())),a=Lt(o);for(const c of he)if(!s[c.key]){if(r.has(c.moduleSpecifier)){s[c.key]=!0;continue}c.contextProperty!==void 0&&a.has(c.contextProperty)&&(s[c.key]=!0)}if(he.every(c=>s[c.key]))break}return s},Dt="identity.ts",kn=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineIdentity";for(const s of t.getDeclarations())if(i.isImportSpecifier(s))return ie(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineIdentity":!1;return!1},Mn=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!i.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&ie(n.getModuleSpecifierValue())}return!1},Kn=e=>{if(i.isIdentifier(e))return kn(e);if(i.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineIdentity"&&i.isIdentifier(t)&&Mn(t)}return!1},_n=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!Kn(n.getExpression()))continue;const r=s.getNameNode();if(!i.isIdentifier(r))throw oe(r,"defineIdentity exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},zn=(e,t)=>{const s=f(t,Dt);if(!P(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),o=_n(n);if(o.length!==0){if(o.length>1)throw oe(n,`lunora/identity.ts declares ${o.length.toString()} defineIdentity() contracts (${o.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return o[0]}},Un=(e,t)=>{const s=V(t);if(s===void 0||!i.isIdentifier(s))return s;const n=s.getText();return V(e.getDescendantsOfKind(l.VariableDeclaration).find(o=>o.getName()===n)?.getInitializer())},Bn=e=>e!==void 0&&i.isObjectLiteralExpression(e)&&e.getProperties().some(t=>{if(i.isShorthandPropertyAssignment(t))return t.getName()==="durable";if(!i.isPropertyAssignment(t)||t.getName()!=="durable")return!1;const s=t.getInitializer();return s===void 0||V(s)?.getText()!=="false"}),$n=(e,t)=>{const s={durableStreams:!1,secrets:!1};for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);if(s.secrets||(s.secrets=Lt(o).has("secrets")),s.durableStreams||(s.durableStreams=o.getDescendantsOfKind(l.CallExpression).some(r=>{const a=r.getExpression();return(i.isPropertyAccessExpression(a)?a.getName():a.getText())==="stream"&&r.getArguments().some(u=>Bn(Un(o,u)))})),s.durableStreams&&s.secrets)break}return s},qn=(e,t)=>{const s=new Map,n=new Map,o=new Map;for(const r of e)s.set(r.name,`workflow "${r.exportName}"`),n.set(r.bindingName,`workflow "${r.exportName}"`),o.set(r.className,`workflow "${r.exportName}"`);for(const r of t){const a=s.get(r.name);if(a!==void 0)throw new k("DUPLICATE_WORKFLOW_NAME",`Duplicate deployed name "${r.name}": produced by both ${a} and agent "${r.exportName}". Workflow and agent names share the same wrangler workflows[] array and must be unique together.`,{status:500});const c=n.get(r.bindingName);if(c!==void 0)throw new k("DUPLICATE_WORKFLOW_BINDING",`Duplicate binding "${r.bindingName}": produced by both ${c} and agent "${r.exportName}". Workflow and agent bindings share the same wrangler workflows[] array and must be unique together.`,{status:500});const u=o.get(r.className);if(u!==void 0)throw new k("DUPLICATE_WORKFLOW_CLASS",`Duplicate generated class "${r.className}": produced by both ${u} and agent "${r.exportName}". Workflow and agent export names must yield unique generated class names.`,{status:500})}},jn=e=>{const{lunoraDirectory:t,project:s,projectRoot:n,schema:o}=e,r=zn(s,t),a=Ln(s,t),c=Bs(s,t),u=_s(s,t),d=hs(s,t);qn(c,d);const S=xs(s,t),x=Us(s,t),I=Es(s,t,c,d),p=$n(s,t),N=zs(s,t),C=Dn(s,t);C.browser=C.browser||N.usesSandboxBrowser;const L=$s(C,qs(n,e.target),{agents:d.length>0,commitOrderedTables:o.tables.some(g=>g.commitOrdered===!0),cronTriggers:I.length>0,crossShardFanout:o.tables.some(g=>typeof g.shardMode=="object"),durableStreams:p.durableStreams,globalTables:o.tables.some(g=>g.shardMode==="global"),queues:u.length>0,secrets:p.secrets,vectorStore:o.vectorIndexes.length>0}),A=L.usage,D=L.signals.vectorStore!==!1,U=Ks(n),$=U??new Set,H=$.has("lunorash");wn(o,U,{hasVectors:D,scheduler:A.scheduler||I.length>0,storage:A.storage||x.rules.length>0||Object.keys(It(o)).length>0});const K=P(f(t,"flags.ts")),F=P(f(t,"notify.ts"));return{agents:d,containers:S,crons:I,dataModelContent:Ss(o),declaredDependencies:U,dependencies:$,env:a,featureUsage:A,hasFlags:K,hasNotify:F,identity:r,platformGate:L,queues:u,serverContent:vs({agents:d,containers:S,env:a,hasAccessFacade:A.access,hasAi:A.ai,hasAnalytics:A.analytics,hasBrowser:A.browser,hasVectors:D,hasFlags:K,hasHyperdrive:A.hyperdrive,hasImages:A.images,hasKv:A.kv,hasNotify:F,hasPayments:A.payments,hasPipelines:A.pipelines,hasR2sql:A.r2sql,hasX402:A.x402,identity:r,queues:u,schema:o,storageRuleBuckets:x.rules.map(g=>g.bucket),useUmbrella:H,workflows:c}),storageRulesMetadata:x,usesSandbox:N.usesSandboxBrowser||N.usesSandboxContainer||N.usesSandboxFs,useUmbrella:H,workflows:c}},kt=new Set(["delete","get","head","options","patch","post","put"]),Vn=new Set(["handler","stream"]),Wn=/\/(?:_|admin|internal|superuser|sudo|root|debug)/iu,it=new Set(["ADMIN_TOKEN","adminToken","assertAdmin","assertAuth","auth","Authorization","getSession","identity","isAdmin","requireAdmin","requireAuth","requireRole","verifyAdmin"]),Hn=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!kt.has(t.getName()))return;const s=t.getExpression();if(!i.isIdentifier(s)||s.getText()!=="httpRoute")return;const n=e.getArguments()[0];if(!(!n||!i.isStringLiteral(n)))return{method:t.getName().toUpperCase(),path:n.getLiteralValue()}},Gn=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;let s=t.getExpression();for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n)||kt.has(n.getName()))break;s=n.getExpression()}return Hn(s)},Yn=e=>{for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression))if(it.has(t.getName()))return!0;for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=t.getExpression();if(i.isIdentifier(s)&&it.has(s.getText()))return!0}return!1},Xn=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=s.getExpression();if(!i.isPropertyAccessExpression(n)||!Vn.has(n.getName()))return;const o=Gn(s);if(!o||!Wn.test(o.path))return;const r=s.getArguments()[0],a=r!==void 0&&(i.isArrowFunction(r)||i.isFunctionExpression(r))&&Yn(r);return{exportName:e.getName(),file:t,method:o.method,path:o.path,usesGuard:a}},Qn=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=Xn(o,t);r&&s.push(r)}return s},Zn=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Qn(o,v(t,n)))}return s},Jn=e=>!i.isPropertyAccessExpression(e)||e.getName()!=="run"?!1:e.getExpression().getText()==="ctx.ai",er=(e,t)=>{if(!Jn(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!R(s)||_(s)))return{exportName:E(e),file:t,line:e.getStartLineNumber()}},tr=(e,t)=>w(e,t,er),sr=new Set(["generateText","streamText"]),nr=new Set(["messages","prompt","system"]),rr=[{methods:new Set(["delete","insert","insertManyUnsafe","patch","replace"]),prefixes:["context.db","ctx.db"]},{methods:new Set(["run","runAction","runMutation"]),prefixes:["context","ctx"]},{methods:new Set(["fetch"]),prefixes:["context","ctx"]},{methods:new Set(["queue","send"]),prefixes:["context.email","context.mail","ctx.email","ctx.mail"]}],or=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=t.getName(),n=t.getExpression().getText();for(const o of rr)if(o.methods.has(s)&&o.prefixes.some(r=>n===r||n.startsWith(`${r}.`)))return`${n}.${s}`},ir=e=>{for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=or(t);if(s!==void 0)return s}},ar=e=>{const t=new Set,s=e.getFirstAncestor(r=>i.isArrowFunction(r)||i.isFunctionExpression(r)||i.isFunctionDeclaration(r)),[n]=s?.getParameters()??[],o=n?.getNameNode();if(o===void 0||!i.isObjectBindingPattern(o))return t;for(const r of o.getElements()){const a=r.getPropertyNameNode()?.getText()??r.getName(),c=r.getNameNode();if(a==="args"&&i.isObjectBindingPattern(c))for(const u of c.getElements())t.add(u.getName())}return t},cr=e=>{if(js(e))return!0;const t=ar(e);return t.size===0?!1:e.getDescendantsOfKind(l.Identifier).some(s=>t.has(s.getText()))},lr=e=>{for(const t of e.getProperties()){if(!i.isPropertyAssignment(t)||!nr.has(t.getName()))continue;const s=t.getInitializer();if(s!==void 0&&cr(s))return!0}return!1},ur=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=y(n.getExpression());if(o===void 0||!sr.has(o))continue;const[r]=n.getArguments();if(r===void 0||!i.isObjectLiteralExpression(r))continue;let a;for(const c of r.getDescendantsOfKind(l.CallExpression))if(y(c.getExpression())==="tool"&&(a=ir(c),a!==void 0))break;a!==void 0&&s.push({exportName:E(n),file:t,line:n.getStartLineNumber(),method:o,sideEffect:a,userInputDerived:lr(r)})}return s},dr=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...ur(o,v(t,n)))}return s},fr=e=>{if(!i.isPropertyAccessExpression(e)||e.getName()!=="fetch")return!1;const t=e.getExpression();return i.isIdentifier(t)&&t.getText()==="ctx"},gr=(e,t)=>{if(!fr(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!R(s)))return{exportName:E(e),file:t,line:e.getStartLineNumber()}},pr=(e,t)=>w(e,t,gr),Mt=e=>e.getProperties().some(t=>i.isSpreadAssignment(t)),mr=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return{objects:[],opaque:!0};const s=t.getProperty("args");if(!s)return{objects:[],opaque:!1};if(!i.isPropertyAssignment(s))return{objects:[],opaque:!0};const n=s.getInitializer();return!n||!i.isObjectLiteralExpression(n)?{objects:[],opaque:!0}:{objects:[n],opaque:Mt(n)}},hr=e=>{const t=[];let s=!1,n=e;for(;i.isCallExpression(n);){const o=n.getExpression();if(!i.isPropertyAccessExpression(o))break;if(o.getName()==="input"){const r=n.getArguments()[0];r&&i.isObjectLiteralExpression(r)?(t.push(r),s||=Mt(r)):s=!0}n=o.getExpression()}return{objects:t,opaque:s}},Kt=(e,t)=>t?hr(t):mr(e),xr=e=>e.flatMap(t=>t.getProperties().filter(s=>i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)).map(s=>s.getName())),Er=new Set(["check","length","max"]),ye=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(!(!i.isPropertyAccessExpression(t)||t.getExpression().getText()!=="v"))return t.getName()},vr=e=>[e,...e.getDescendants()].filter(t=>ye(t)!==void 0),Sr=e=>{let t=e;for(;;){const s=t.getParent();if(!s||!i.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;const n=s.getParent();if(!n||!i.isCallExpression(n)||n.getExpression()!==s)return!1;if(Er.has(s.getName()))return!0;t=n}},yr=e=>{const t=[],s=[];for(const n of e)for(const o of n.getProperties()){if(!i.isPropertyAssignment(o))continue;const r=o.getInitializer();if(!r)continue;const a=vr(r),c=o.getName();a.some(u=>ye(u)==="any")?t.push(c):a.some(u=>ye(u)==="string"&&!Sr(u))&&s.push(c)}return{anyArgs:t,unboundedStringArgs:s}},Ar=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=z(s);if(n?.visibility!=="public")return;const{objects:o}=Kt(s,n.receiver),{anyArgs:r,unboundedStringArgs:a}=yr(o);if(!(r.length===0&&a.length===0))return{anyArgs:r,exportName:e.getName(),file:t,line:s.getStartLineNumber(),unboundedStringArgs:a}},Nr=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=Ar(o,t);r&&s.push(r)}return s},br=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Nr(o,v(t,n)))}return s},xe=e=>e?.getKind()===l.TrueKeyword,Pr=e=>e?.getKind()===l.FalseKeyword,Ir=e=>e!==void 0&&i.isNumericLiteral(e)&&e.getLiteralValue()===0,wr=new Set(["lunoraAuthAdapter","lunoraD1Adapter"]),Tr=e=>!e||!i.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>i.isCallExpression(t)&&y(t.getExpression())==="scim"),Cr=e=>e!==void 0&&i.isCallExpression(e)&&wr.has(y(e.getExpression())??""),Fr=e=>!e||!i.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>i.isStringLiteral(t)&&t.getLiteralText()==="*"),Or=e=>{const t=b(e,"advanced"),s=b(e,"emailAndPassword"),n=b(e,"session");return{analyzable:!0,disableCsrfCheck:xe(b(t,"disableCSRFCheck")),emailPasswordEnabled:xe(b(s,"enabled")),requireEmailVerification:xe(b(s,"requireEmailVerification")),scimOnNonTransactionalAdapter:Tr(b(e,"plugins"))&&Cr(b(e,"database")),secureCookiesDisabled:Pr(b(t,"useSecureCookies")),sessionFreshAgeZero:Ir(b(n,"freshAge")),trustedOriginsWildcard:Fr(b(e,"trustedOrigins"))}},Rr=()=>({analyzable:!1,disableCsrfCheck:!1,emailPasswordEnabled:!1,requireEmailVerification:!1,scimOnNonTransactionalAdapter:!1,secureCookiesDisabled:!1,sessionFreshAgeZero:!1,trustedOriginsWildcard:!1}),Lr=(e,t)=>{if(y(e.getExpression())!=="createAuth")return;const s=e.getArguments()[0],n=s!==void 0&&i.isObjectLiteralExpression(s)&&s.getProperties().some(r=>i.isSpreadAssignment(r)),o=s!==void 0&&i.isObjectLiteralExpression(s)&&!n?Or(s):Rr();return{exportName:E(e),file:t,line:e.getStartLineNumber(),...o}},Dr=(e,t)=>Ds(e,t,Lr),kr=(e,t)=>{if(!i.isPropertyAccessExpression(e))return;const s=e.getName();if(t.methods.has(s))return t.matchReceiver(e.getExpression().getText())?s:void 0},Mr=(e,t,s)=>{const n=kr(e.getExpression(),s);if(n===void 0)return;const o=e.getArguments()[s.argIndex];if(!(!o||!R(o)||_(o))&&!(s.requireUnmodifiedReach===!0&&!Vs(o)))return{exportName:E(e),file:t,line:e.getStartLineNumber(),method:n}},Kr=(e,t,s)=>{const n=[];for(const o of e.getDescendantsOfKind(l.CallExpression)){const r=Mr(o,t,s);r&&n.push(r)}return n},ce=(e,t,s)=>{const n=[];for(const o of m(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);n.push(...Kr(r,v(t,o),s))}return n},_r=new Set(["content","pdf","scrape","screenshot"]),zr=(e,t)=>ce(e,t,{argIndex:0,matchReceiver:s=>s==="ctx.browser",methods:_r}),Ur=new Set(["createBrowser","createInboundEmailHandler","createPayment"]),Br=new Set(["RateLimiter"]),$r=new Set(["extend"]),at="lunora",qr=["vite.config.ts","vite.config.mts","vite.config.js","vite.config.mjs"],_t=e=>{const t=[],s=[];let n=!1;for(const o of e.getProperties()){if(i.isSpreadAssignment(o)){n=!0;continue}if(i.isPropertyAssignment(o)){const r=o.getName();t.push(r),o.getInitializer()?.getKind()===l.TrueKeyword&&s.push(r);continue}(i.isShorthandPropertyAssignment(o)||i.isMethodDeclaration(o))&&t.push(o.getName())}return{analyzable:!n,presentKeys:t,trueKeys:s}},Ae=e=>e&&i.isObjectLiteralExpression(e)?_t(e):{analyzable:!1,presentKeys:[],trueKeys:[]},jr=e=>{const t=e.getStatements(),[s]=t;if(t.length!==1||s===void 0||!i.isReturnStatement(s))return;const n=s.getExpression();return n!==void 0&&i.isObjectLiteralExpression(n)?n:void 0},Vr=e=>{if(i.isObjectLiteralExpression(e))return e;if(i.isParenthesizedExpression(e)){const t=e.getExpression();return i.isObjectLiteralExpression(t)?t:void 0}return i.isBlock(e)?jr(e):void 0},Wr=e=>{const t=e&&(i.isArrowFunction(e)||i.isFunctionExpression(e))?e:void 0,s=t&&Vr(t.getBody());return s?_t(s):{analyzable:!1,presentKeys:[],trueKeys:[]}},Hr=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=y(n.getExpression());o!==void 0&&(Ur.has(o)?s.push({callee:o,file:t,line:n.getStartLineNumber(),...Ae(n.getArguments()[0])}):$r.has(o)&&s.push({callee:o,file:t,line:n.getStartLineNumber(),...Wr(n.getArguments()[0])}))}for(const n of e.getDescendantsOfKind(l.NewExpression)){const o=y(n.getExpression());o===void 0||!Br.has(o)||s.push({callee:o,file:t,line:n.getStartLineNumber(),...Ae(n.getArguments()[0])})}return s},Gr=(e,t)=>{for(const s of qr){const n=f(t,s);if(!P(n))continue;const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=[];for(const a of o.getDescendantsOfKind(l.CallExpression))y(a.getExpression())===at&&r.push({callee:at,file:s,line:a.getStartLineNumber(),...Ae(a.getArguments()[0])});return r}return[]},Yr=(e,t)=>{const s=[];for(const{displayPath:n,filePath:o}of wt(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);s.push(...Hr(r,n))}return s.push(...Gr(e,Z(t))),s},ct="ctx.containers.",Xr=e=>{if(!e.startsWith(ct))return!1;const t=e.slice(ct.length);return t.length>0&&!t.includes(".")},Qr=(e,t)=>ce(e,t,{argIndex:0,matchReceiver:Xr,methods:new Set(["get"])}),Zr=new Set(["allow","deny","setAllowed"]),Jr=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return!1;const s=t.getProperty("enableInternet");return s!==void 0&&i.isPropertyAssignment(s)&&i.isTrueLiteral(s.getInitializerOrThrow())},eo=(e,t)=>{const s=e.getExpression();if(!(!i.isPropertyAccessExpression(s)||s.getName()!=="start"||!Jr(e)))return{detail:"enableInternet: true",exportName:E(e),file:t,kind:"enable_internet",line:e.getStartLineNumber()}},to=(e,t)=>{const s=e.getExpression();if(!i.isPropertyAccessExpression(s)||!Zr.has(s.getName()))return;const n=s.getExpression();if(!(!i.isPropertyAccessExpression(n)||n.getName()!=="egress"))return{detail:s.getName(),exportName:E(e),file:t,kind:"egress_relaxation",line:e.getStartLineNumber()}},so=(e,t)=>eo(e,t)??to(e,t),no=(e,t)=>w(e,t,so),ro=new Set(["defineExportSink","r2Sink","webhookExportSink"]),oo=e=>{const t=e.getExpression();if(!i.isIdentifier(t))return;const s=t.getText();return ro.has(s)?s:void 0},io=e=>{const t=[],s=[];for(const n of e.getProperties()){if(i.isSpreadAssignment(n))return{analyzable:!1,emptyKeys:[],presentKeys:[]};if(i.isPropertyAssignment(n)){const o=n.getName();t.push(o);const r=n.getInitializer();r&&i.isStringLiteral(r)&&r.getLiteralText()===""&&s.push(o);continue}(i.isShorthandPropertyAssignment(n)||i.isMethodDeclaration(n)||i.isGetAccessorDeclaration(n))&&t.push(n.getName())}return{analyzable:!0,emptyKeys:s,presentKeys:t}},ao=(e,t)=>{const s=[];for(const{displayPath:n,filePath:o}of wt(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);for(const a of r.getDescendantsOfKind(l.CallExpression)){const c=oo(a);if(c===void 0)continue;const u=a.getArguments()[0],d=u&&i.isObjectLiteralExpression(u)?io(u):{analyzable:!1,emptyKeys:[],presentKeys:[]};s.push({analyzable:d.analyzable,emptyKeys:d.emptyKeys,factory:c,file:n,line:a.getStartLineNumber(),presentKeys:d.presentKeys})}}return s},co=new Map([["dbRateLimit",2],["rateLimit",2],["verifyTurnstileMiddleware",0]]),lo=new Set(["dbRateLimit","rateLimit"]),uo=e=>{if(!e||!i.isObjectLiteralExpression(e))return!1;const t=e.getProperty("failOpen");return t!==void 0&&i.isPropertyAssignment(t)&&t.getInitializer()?.getKind()===l.TrueKeyword},fo=(e,t)=>{const s=y(e.getExpression());if(s===void 0)return;const n=co.get(s);if(n!==void 0)return{callee:s,exportName:E(e),failOpen:uo(e.getArguments()[n]),file:t,limitName:lo.has(s)?Tt(e):"",line:e.getStartLineNumber()}},go=(e,t)=>w(e,t,fo),po=new Set(["boolean","number","object","string"]),mo=e=>{const t=e.getName();if(!po.has(t))return;const s=e.getExpression();if(!i.isPropertyAccessExpression(s))return;if(s.getName()==="flags"&&Se(s.getExpression()))return t;const n=s.getExpression();if(s.getName()==="details"&&i.isPropertyAccessExpression(n)&&n.getName()==="flags"&&Se(n.getExpression()))return t},ho=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=mo(t);if(s===void 0)return;const n=e.getArguments()[0];if(!n||!(i.isStringLiteral(n)||i.isNoSubstitutionTemplateLiteral(n)))return;const o=n.getLiteralValue();return o.length>0?{key:o,type:s}:void 0},xo=(e,t)=>{const s=new Map;for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of o.getDescendantsOfKind(l.CallExpression)){const a=ho(r);a&&!s.has(a.key)&&s.set(a.key,a.type)}}return[...s.entries()].map(([n,o])=>({key:n,type:o})).toSorted((n,o)=>n.key.localeCompare(o.key))},Eo=e=>{const t=e.getInitializer();if(!t||!i.isCallExpression(t))return;const s=z(t);if(s?.kind!=="query")return;const n=ks(t,s.receiver);return n?{exportName:e.getName(),handler:n}:void 0},lt=e=>{const t=e.getParent();return t&&i.isPropertyAccessExpression(t)&&t.getExpression()===e?t:void 0},vo=e=>{if(!i.isPropertyAccessExpression(e)||e.getName()!=="flags")return;const t=e.getExpression();if(!i.isIdentifier(t)||t.getText()!=="ctx")return;const s=lt(e);if(!s)return"ctx.flags";if(s.getName()==="details"){const n=lt(s);return n?`ctx.flags.details.${n.getName()}`:"ctx.flags.details"}return`ctx.flags.${s.getName()}`},So=(e,t)=>{const s=[];for(const n of e.handler.getDescendantsOfKind(l.PropertyAccessExpression)){const o=vo(n);o!==void 0&&s.push({callee:o,exportName:e.exportName,file:t,line:n.getStartLineNumber()})}return s},yo=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=Eo(o);r&&s.push(...So(r,t))}return s},Ao=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...yo(o,v(t,n)))}return s},No=e=>{if(!i.isPropertyAccessExpression(e)||e.getName()!=="boolean")return!1;const t=e.getExpression();return i.isPropertyAccessExpression(t)&&t.getName()==="flags"&&Se(t.getExpression())},bo=e=>{if(e?.getKind()===l.TrueKeyword)return!0;if(e?.getKind()===l.FalseKeyword)return!1},Po=(e,t)=>{if(!No(e.getExpression()))return;const[s,n]=e.getArguments();if(!s||!(i.isStringLiteral(s)||i.isNoSubstitutionTemplateLiteral(s)))return;const o=s.getLiteralValue(),r=bo(n);if(!(o.length===0||r===void 0))return{defaultValue:r,exportName:E(e),file:t,key:o,line:e.getStartLineNumber()}},Io=(e,t)=>w(e,t,Po),wo=e=>{const t=e.getType().getProperty("~standard");if(!t)return;const s=t.getTypeAtLocation(e).getProperty("types");if(!s)return;const n=s.getTypeAtLocation(e).getNonNullableType().getProperty("output");if(!n)return;const o=n.getTypeAtLocation(e),r=o.getText(e);if(!r||r==="any"||r==="never"||Qs(r))return;const a=e.getSourceFile().getFilePath();return Zs(o,e,a)?Js(o,e,a,0,new Set):r},To=e=>{const t=e.getExpression();return i.isPropertyAccessExpression(t)&&t.getName()==="withGeoIndex"},Co=e=>{const t=e.getArguments()[0];return t&&i.isStringLiteral(t)?t.getLiteralText():""},Fo=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of o.getDescendantsOfKind(l.CallExpression))To(a)&&s.push({file:r,indexName:Co(a),line:a.getStartLineNumber()})}return s},W=e=>e!==void 0&&(i.isArrowFunction(e)||i.isFunctionExpression(e))?e:void 0,zt=e=>{const t=e.getArguments()[0],s=W(t);if(s!==void 0)return s;if(t===void 0||!i.isObjectLiteralExpression(t))return;const n=t.getProperty("handler");return n!==void 0&&i.isPropertyAssignment(n)?W(n.getInitializer()):void 0},Oo=new Set(["delete","get","head","options","patch","post","put"]),Ro=new Set(["handler","stream"]),Lo=new Set(["runAction","runMutation"]),Do=new Set(["delete","insert","insertManyUnsafe","patch","replace"]),te=(e,t)=>e!==void 0&&i.isIdentifier(e)&&e.getText()===t,ut=(e,t)=>{const s=e.getParameters()[0];if(s===void 0)return;const n=s.getNameNode();if(t)return i.isIdentifier(n)?n.getText():void 0;if(i.isObjectBindingPattern(n)){for(const o of n.getElements())if((o.getPropertyNameNode()?.getText()??o.getNameNode().getText())==="ctx"){const a=o.getNameNode();return i.isIdentifier(a)?a.getText():void 0}}},dt=(e,t)=>{const s=e.getBody(),n=s.getDescendantsOfKind(l.CallExpression);i.isCallExpression(s)&&n.unshift(s);for(const o of n){const r=o.getExpression();if(!i.isPropertyAccessExpression(r))continue;const a=r.getName(),c=r.getExpression();if(Lo.has(a)&&te(c,t))return a;if(Do.has(a)&&i.isPropertyAccessExpression(c)&&c.getName()==="db"&&te(c.getExpression(),t))return`db.${a}`}},ft=(e,t)=>{const s=e.getBody();for(const n of s.getDescendantsOfKind(l.PropertyAccessExpression))if(n.getName()==="auth"&&te(n.getExpression(),t))return!0;for(const n of s.getDescendantsOfKind(l.VariableDeclaration)){const o=n.getNameNode();if(!(!i.isObjectBindingPattern(o)||!te(n.getInitializer(),t))){for(const r of o.getElements())if((r.getPropertyNameNode()?.getText()??r.getNameNode().getText())==="auth")return!0}}return!1},ko=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!Ro.has(t.getName()))return;let s=t.getExpression();for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))return;const o=n.getName();if(Oo.has(o)){const r=n.getExpression();return i.isIdentifier(r)&&r.getText()==="httpRoute"?o.toUpperCase():void 0}s=n.getExpression()}},Mo=(e,t)=>{const s=e.getExpression();if(i.isIdentifier(s)&&s.getText()==="httpAction"){const c=W(e.getArguments()[0]),u=c&&ut(c,!0);if(!c||u===void 0)return;const d=dt(c,u);return d===void 0?void 0:{exportName:E(e),file:t,kind:"httpAction",line:e.getStartLineNumber(),readsAuth:ft(c,u),sideEffect:d}}const n=ko(e);if(n===void 0)return;const o=W(e.getArguments()[0]),r=o&&ut(o,!1);if(!o||r===void 0)return;const a=dt(o,r);return a===void 0?void 0:{exportName:E(e),file:t,kind:"httpRoute",line:e.getStartLineNumber(),method:n,readsAuth:ft(o,r),sideEffect:a}},Ko=(e,t)=>w(e,t,Mo),_o=new Set(["btoa","encodeURI","encodeURIComponent","isSafeHeaderValue","Number","parseFloat","parseInt"]),zo=new Set(["append","set"]),Ut=e=>e!==void 0&&(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))?e.getLiteralText():"",gt=(e,t)=>(i.isCallExpression(e)?[e,...e.getDescendantsOfKind(l.CallExpression)]:e.getDescendantsOfKind(l.CallExpression)).some(n=>_o.has(y(n.getExpression())??"")&&Hs(n,t)),Uo=(e,t)=>{if(gt(e,t))return!0;const s=ae(e);return s!==void 0&&gt(s,t)},Ne=(e,t)=>Ws(e,t)&&!Uo(e,t),Bo=e=>{if(i.isPropertyAccessExpression(e)&&e.getName()==="headers")return!0;const t=ae(e);return t!==void 0&&i.isNewExpression(t)&&y(t.getExpression())==="Headers"},se=e=>{if(e===void 0)return;if(i.isObjectLiteralExpression(e))return e;const t=ae(e);return t!==void 0&&i.isObjectLiteralExpression(t)?t:void 0},Ie=(e,t,s)=>{for(const n of e.getProperties())if(i.isPropertyAssignment(n)){const o=n.getInitializer();o!==void 0&&Ne(o,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:Ut(n.getNameNode()),line:o.getStartLineNumber(),via:t})}else if(i.isShorthandPropertyAssignment(n)){const o=n.getNameNode();Ne(o,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:n.getName(),line:o.getStartLineNumber(),via:t})}else if(i.isSpreadAssignment(n)){const o=se(n.getExpression());o!==void 0&&Ie(o,t,s)}},Bt=(e,t)=>{const s=se(e);if(s===void 0)return;const n=s.getProperty("headers");if(n===void 0||!i.isPropertyAssignment(n))return;const o=se(n.getInitializer());o!==void 0&&Ie(o,"response-init",t)},$o=(e,t)=>{const s=y(e.getExpression());if(s==="Response")Bt(e.getArguments()[1],t);else if(s==="Headers"){const n=se(e.getArguments()[0]);n!==void 0&&Ie(n,"headers-ctor",t)}},qo=(e,t)=>{const s=e.getExpression();if(!i.isPropertyAccessExpression(s))return;const n=s.getName(),o=s.getExpression();if(n==="json"&&i.isIdentifier(o)&&o.getText()==="Response"){Bt(e.getArguments()[1],t);return}if(zo.has(n)&&Bo(o)){const r=e.getArguments()[1];r!==void 0&&Ne(r,t.requestName)&&t.rows.push({exportName:t.exportName,file:t.relativePath,headerName:Ut(e.getArguments()[0]),line:r.getStartLineNumber(),via:n==="set"?"headers-set":"headers-append"})}},jo=(e,t)=>{for(const s of e.getDescendantsOfKind(l.NewExpression))$o(s,t);for(const s of e.getDescendantsOfKind(l.CallExpression))qo(s,t)},Vo=(e,t)=>{const s=e.getExpression();if(!i.isIdentifier(s)||s.getText()!=="httpAction")return[];const n=W(e.getArguments()[0]);if(n===void 0)return[];const o=n.getParameters()[1];if(o===void 0)return[];const r=o.getNameNode();if(!i.isIdentifier(r))return[];const a=[];return jo(n,{exportName:E(e),relativePath:t,requestName:r.getText(),rows:a}),a},Wo=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression))s.push(...Vo(n,t));return s},Ho=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Wo(o,v(t,n)))}return s},Go=new Set(["auth","context.auth","ctx.auth"]),Yo="userId",Xo=e=>{const t=new Set;for(const s of e.getProperties()){if(i.isSpreadAssignment(s))return;(i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)||i.isMethodDeclaration(s))&&t.add(s.getName())}return t},Qo=(e,t)=>{const s=f(t,Dt);if(!P(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const o of n.getDescendantsOfKind(l.CallExpression)){if(y(o.getExpression())!=="defineIdentity")continue;const[r]=o.getArguments();return r&&i.isObjectLiteralExpression(r)?Xo(r):void 0}},pt=e=>{if(!(e===void 0||!i.isPropertyAccessExpression(e)||e.getName()!=="identity"))return Go.has(e.getExpression().getText())?e:void 0},Zo=e=>{if(i.isPropertyAccessExpression(e)&&pt(e.getExpression())!==void 0)return e.getName();if(i.isElementAccessExpression(e)&&pt(e.getExpression())!==void 0){const t=e.getArgumentExpression();return t&&i.isStringLiteral(t)?t.getLiteralValue():void 0}},Jo=(e,t,s)=>{const n=[];for(const o of e.getDescendants()){const r=Zo(o);r!==void 0&&n.push({declared:r===Yo||s.has(r),exportName:E(o),file:t,key:r,line:o.getStartLineNumber()})}return n},ei=(e,t)=>{const s=Qo(e,t);if(s===void 0)return[];const n=[];for(const o of m(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);n.push(...Jo(r,v(t,o),s))}return n},ti=(e,t)=>{if(y(e.getExpression())!=="buildImageDeliveryUrl")return;const s=e.getArguments()[0];if(!s)return;const n=b(s,"key");if(!(!n||!R(n)||_(n)))return{exportName:E(e),file:t,line:e.getStartLineNumber()}},si=(e,t)=>w(e,t,ti),ni=new Set(["delete","get","getRaw","getWithMetadata","put"]),ri=(e,t,s=[])=>{const n=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));return ce(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.kv"||r.startsWith("ctx.kv."),methods:ni}).map(r=>{const a=n.get(`${r.file}:${r.exportName}`);return a===void 0?r:{...r,visibility:a}})},oi=new Set(["queue","send"]),mt=new Set(["bcc","cc","to"]),ii=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(!oi.has(t))return;const s=e.getExpression().getText();return s==="ctx.mail"||s==="ctx.email"?t:void 0},ai=e=>i.isObjectLiteralExpression(e)?e.getProperties().some(t=>{if(i.isShorthandPropertyAssignment(t)){const n=t.getNameNode();return mt.has(t.getName())&&R(n)&&!_(n)}if(!i.isPropertyAssignment(t)||!mt.has(t.getName()))return!1;const s=t.getInitializer();return s!==void 0&&R(s)&&!_(s)}):!1,ci=(e,t)=>{const s=ii(e.getExpression());if(s===void 0)return;const n=e.getArguments()[0];if(!(!n||!ai(n)))return{exportName:E(e),file:t,line:e.getStartLineNumber(),method:s}},li=(e,t)=>w(e,t,ci),ui=e=>i.isPropertyAssignment(e)||i.isMethodDeclaration(e)||i.isGetAccessorDeclaration(e)?i.isComputedPropertyName(e.getNameNode()):!1,di=e=>i.isPropertyAssignment(e)||i.isShorthandPropertyAssignment(e)||i.isMethodDeclaration(e)||i.isGetAccessorDeclaration(e)?ui(e):!0,$t=(e,t=!1)=>{for(const s of e.getProperties()){if(di(s))return!0;if(t)continue;if(!i.isPropertyAssignment(s))return!0;const n=s.getInitializer();if(!n||!i.isObjectLiteralExpression(n)||$t(n,!0))return!0}return!1},fi=(e,t)=>{for(const s of m(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const{receiver:o}of Rt(n))for(const r of Pe(o)){const a=r.getArguments()[0];if(a!==void 0&&(!i.isObjectLiteralExpression(a)||$t(a)))return!0}}return!1},gi=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return[];const s=[];for(const n of t.getProperties()){const o=ee(n);if(o===void 0||!i.isPropertyAssignment(n))continue;const r=n.getInitializer();if(!(!r||!i.isObjectLiteralExpression(r)))for(const a of r.getProperties()){const c=ee(a);c!==void 0&&s.push({column:c,strategy:Ot(a),table:o})}}return s},pi=(e,t)=>{const s=new Map;for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const{receiver:r}of Rt(o))for(const a of Pe(r))for(const c of gi(a)){const u=`${c.table}\0${c.column}`;s.has(u)||s.set(u,c)}}return{columns:[...s.values()]}},mi=(e,t,s)=>{const n=e.getArguments()[0];if(!n||!i.isObjectLiteralExpression(n))return[];const o=[];for(const r of n.getProperties()){const a=ee(r);if(a===void 0||!i.isPropertyAssignment(r))continue;const c=r.getInitializer();if(!(!c||!i.isObjectLiteralExpression(c)))for(const u of c.getProperties()){const d=ee(u);if(d===void 0)continue;const S=Ot(u);S!=="custom"&&o.push({column:d,exportName:t,file:s,line:u.getStartLineNumber(),strategy:S,table:a})}}return o},hi=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?z(s):void 0;return n?.receiver?Pe(n.receiver).flatMap(o=>mi(o,e.getName(),t)):[]},xi=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...hi(c,r))}return s},Ei=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="replace")return!1;const s=t.getExpression();return M(s)},vi=e=>{const t=e.getArguments()[0];if(t===void 0||!i.isObjectLiteralExpression(t))return;const s=t.getProperty("server");if(s!==void 0)return i.isPropertyAssignment(s)?s.getInitializer():s},Si=e=>{if(!e.isExported())return;const t=e.getInitializer();if(t?.getKind()!==l.CallExpression)return;const s=t;return on(s.getExpression())?s:void 0},yi=e=>{const t=Si(e),s=t===void 0?void 0:vi(t);if(s===void 0)return[];const n=e.getNameNode(),o=i.isIdentifier(n)?n.getText():"";return s.getDescendantsOfKind(l.CallExpression).filter(r=>Ei(r)).map(r=>({exportName:o,file:"lunora/mutators.ts",line:r.getStartLineNumber()}))},Ai=e=>e.getVariableDeclarations().flatMap(t=>yi(t)),Ni=(e,t)=>{const s=f(t,rn);if(!P(s))return[];const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);return Ai(n)},bi=new Set(["delete","get","patch"]),Pi=new Set(["accountId","authorId","companyId","createdBy","createdById","customerId","groupId","memberId","organizationId","orgId","ownerId","projectId","teamId","tenantId","userId","workspaceId"]),Ii=new Set(["auth","identity","session","user"]),wi=new Set([l.EqualsEqualsEqualsToken,l.EqualsEqualsToken,l.ExclamationEqualsEqualsToken,l.ExclamationEqualsToken]),Ti=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="normalizeId"||!M(t.getExpression()))return;const s=e.getArguments()[0];return s&&i.isStringLiteral(s)?s.getLiteralText():""},Ci=e=>{let t=e,s=t.getParent();for(;s!==void 0&&(i.isAsExpression(s)||i.isParenthesizedExpression(s)||i.isNonNullExpression(s));)t=s,s=t.getParent();if(s===void 0||!i.isVariableDeclaration(s))return;const n=s.getNameNode();return i.isIdentifier(n)?n.getText():void 0},Fi=(e,t)=>e.getDescendantsOfKind(l.Identifier).some(s=>s.getText()===t),Oi=e=>i.isThrowStatement(e)||i.isReturnStatement(e)||e.getDescendantsOfKind(l.ThrowStatement).length>0||e.getDescendantsOfKind(l.ReturnStatement).length>0,Ri=(e,t)=>e.getDescendantsOfKind(l.IfStatement).some(s=>Fi(s.getExpression(),t)&&Oi(s.getThenStatement())),Li=(e,t)=>{for(const s of e.getDescendantsOfKind(l.CallExpression)){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))continue;const o=n.getName();if(!bi.has(o))continue;const r=n.getExpression();if(!(M(r)||i.isPropertyAccessExpression(r)&&M(r.getExpression())))continue;const c=s.getArguments()[0];if(c!==void 0&&i.isIdentifier(c)&&c.getText()===t)return o}},Di=e=>{let t=e;for(;i.isPropertyAccessExpression(t)||i.isElementAccessExpression(t)||i.isNonNullExpression(t)||i.isParenthesizedExpression(t)||i.isAsExpression(t)||i.isAwaitExpression(t);)t=t.getExpression();return i.isIdentifier(t)?t.getText():void 0},ki=e=>e.getDescendantsOfKind(l.CallExpression).some(t=>t.getArguments().some(s=>Di(s)==="ctx")),Mi=e=>e.getDescendantsOfKind(l.BinaryExpression).some(t=>wi.has(t.getOperatorToken().getKind())?i.isPropertyAccessExpression(t.getLeft())||i.isPropertyAccessExpression(t.getRight()):!1),Ki=e=>{for(const t of e.getDescendantsOfKind(l.Identifier))if(Pi.has(t.getText()))return!0;for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression)){const s=t.getExpression();if(i.isIdentifier(s)&&s.getText()==="ctx"&&Ii.has(t.getName()))return!0}return ki(e)||Mi(e)},_i=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!i.isCallExpression(s))return[];const n=z(s);if(n?.kind!=="query"&&n?.kind!=="mutation")return[];const o=zt(s);if(o===void 0)return[];const r=n.receiver!==void 0&&Ft(n.receiver,"use","rls"),a=Ki(o),c=new Set,u=[];for(const d of o.getDescendantsOfKind(l.CallExpression)){const S=Ti(d);if(S===void 0)continue;const x=Ci(d);if(x===void 0||c.has(x)||!Ri(o,x))continue;const I=Li(o,x);I!==void 0&&(c.add(x),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),mentionsOwnership:a,sinkMethod:I,table:S,usesRls:r,visibility:n.visibility}))}return u},zi=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(..._i(c,r))}return s},Ui=new Set(["accountId","authorId","createdBy","createdById","organizationId","orgId","ownerId","tenantId","updatedBy","userId","workspaceId"]),Bi=new Set(["insert","insertManyUnsafe","patch","replace"]),$i=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(!Bi.has(t))return;const s=e.getExpression();if(!i.isPropertyAccessExpression(s)||s.getName()!=="db")return;const n=s.getExpression();return i.isIdentifier(n)&&n.getText()==="ctx"?t:void 0},qi=(e,t)=>{if(t!=="insertManyUnsafe")return i.isObjectLiteralExpression(e)?[e]:[];if(!i.isArrayLiteralExpression(e))return[];const s=[];for(const n of e.getElements())i.isObjectLiteralExpression(n)&&s.push(n);return s},ji=(e,t,s,n)=>{const o=[];for(const r of e.getProperties()){let a,c;i.isPropertyAssignment(r)?(a=r.getName(),c=r.getInitializer()):i.isShorthandPropertyAssignment(r)&&(a=r.getName(),c=r.getNameNode()),!(a===void 0||c===void 0||!Ui.has(a))&&R(c)&&!_(c)&&o.push({exportName:E(s),field:a,file:n,line:s.getStartLineNumber(),method:t})}return o},Vi=(e,t)=>{const s=$i(e.getExpression());if(s===void 0)return[];const n=e.getArguments()[1];return n?qi(n,s).flatMap(o=>ji(o,s,e,t)):[]},Wi=(e,t,s)=>{const n=[];for(const o of e.getDescendantsOfKind(l.CallExpression))for(const r of Vi(o,t)){const a=s(r.exportName);n.push(a===void 0?r:{...r,visibility:a})}return n},Hi=(e,t,s=[])=>{const n=[],o=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));for(const r of m(t)){const a=e.getSourceFile(r)??e.addSourceFileAtPath(r),c=v(t,r);n.push(...Wi(a,c,u=>o.get(`${c}:${u}`)))}return n},Gi=["providerSubscriptionId","state"],Yi=["providerEventId","processedAt"],ht=(e,t)=>t.every(s=>s in e.shape),Xi=e=>{const t=e.find(n=>n.name==="subscriptions"),s=e.find(n=>n.name==="events");return t!==void 0&&s!==void 0&&ht(t,Gi)&&ht(s,Yi)},Qi=new Set(["createAutumnAdapter","createDodoPaymentsAdapter","createPolarAdapter","createStripeAdapter"]),Zi=e=>e&&i.isNumericLiteral(e)?Number(e.getText()):void 0,Ji=e=>{const t=e.getProperty("webhookToleranceSeconds");return t&&i.isPropertyAssignment(t)?Zi(t.getInitializer()):void 0},ea=(e,t)=>{const s=y(e.getExpression());if(s===void 0||!Qi.has(s))return;const[n]=e.getArguments(),o=n&&i.isObjectLiteralExpression(n)?Ji(n):void 0;return{callee:s,exportName:E(e),file:t,line:e.getStartLineNumber(),...o===void 0?{}:{toleranceSeconds:o}}},ta=(e,t)=>w(e,t,ea),sa=new Set(["defineQueue","defineWorkflow"]),na=new Set(["run","runAction","runMutation","runQuery"]),ra=new Set(["api","internal"]),oa=e=>{const t=e.getExpression();return i.isIdentifier(t)?t.getText():void 0},ia=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return;const s=t.getProperty("handler");if(s===void 0||!i.isPropertyAssignment(s))return;const n=s.getInitializer();if(n&&(i.isArrowFunction(n)||i.isFunctionExpression(n)))return n},qt=(e,t)=>{const s=e.getParameters()[t]?.getNameNode();return s&&i.isIdentifier(s)?s.getText():void 0},jt=(e,t)=>e===t||e.startsWith(`${t}.`),Vt=e=>{const t=e.getDescendantsOfKind(l.PropertyAccessExpression);return i.isPropertyAccessExpression(e)&&t.push(e),t},xt=e=>{const t=e.getParent();return i.isPropertyAccessExpression(t)&&t.getNameNode()===e||i.isPropertyAssignment(t)&&t.getNameNode()===e?!1:!(i.isBindingElement(t)&&t.getNameNode()===e)},Wt=e=>{const t=e.getDescendantsOfKind(l.Identifier).filter(s=>xt(s));return i.isIdentifier(e)&&xt(e)&&t.push(e),t},aa=e=>{if(!i.isVariableDeclaration(e))return[];const t=e.getNameNode();return i.isIdentifier(t)?[t.getText()]:t.getDescendantsOfKind(l.BindingElement).map(s=>s.getName())},ca=e=>{const t=qt(e,1);if(t===void 0)return[];const s=[`${t}.messages`];for(const n of e.getDescendantsOfKind(l.ForOfStatement)){if(n.getExpression().getText()!==`${t}.messages`)continue;const o=n.getInitializer(),r=i.isVariableDeclarationList(o)?o.getDeclarations()[0]?.getNameNode():void 0;r&&i.isIdentifier(r)&&s.push(`${r.getText()}.body`)}return s},la=(e,t,s)=>{const n=t==="workflow"?[`${s}.params`]:ca(e),o=new Set,r=a=>Vt(a).some(c=>n.some(u=>jt(c.getText(),u)))?!0:Wt(a).some(c=>o.has(c.getText()));for(const a of e.getDescendantsOfKind(l.VariableDeclaration)){const c=a.getInitializer();if(c&&r(c))for(const u of aa(a))o.add(u)}return{names:o,prefixes:n}},ua=(e,t)=>Vt(e).some(s=>t.prefixes.some(n=>jt(s.getText(),n)))?!0:Wt(e).some(s=>t.names.has(s.getText())),da=e=>{if(e===void 0||!i.isPropertyAccessExpression(e))return;const t=[];let s=e;for(;i.isPropertyAccessExpression(s);)t.unshift(s.getName()),s=s.getExpression();const n=t.at(-1);if(!(n===void 0||!i.isIdentifier(s)||!ra.has(s.getText())||t.length<2))return{exportName:n,file:t.slice(0,-1).join("/")}},fa=(e,t,s)=>{const n=qt(e,0);if(n===void 0)return[];const o=la(e,t,n),r=[];for(const a of e.getDescendantsOfKind(l.CallExpression)){const c=a.getExpression();if(!i.isPropertyAccessExpression(c)||!na.has(c.getName())||c.getExpression().getText()!==n)continue;const u=a.getArguments()[1];if(!u||!ua(u,o))continue;const d=da(a.getArguments()[0]);d!==void 0&&r.push({dispatchKind:t,file:s,handlerExport:E(a),line:a.getStartLineNumber(),targetExport:d.exportName,targetFile:d.file})}return r},ga=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=oa(n);if(o===void 0||!sa.has(o))continue;const r=ia(n);r!==void 0&&s.push(...fa(r,o==="defineQueue"?"queue":"workflow",t))}return s},pa=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...ga(o,v(t,n)))}return s},Et={dbRateLimit:"usesRateLimit",emailGateMiddleware:"usesEmailGate",mask:"usesMask",rateLimit:"usesRateLimit",rls:"usesRls",verifyTurnstileMiddleware:"usesCaptcha"},vt=new Set(["account","credential","member","passkey","session","user"]),ma=e=>e.replaceAll(/[-_]/gu," ").replaceAll(/([a-z0-9])([A-Z])/gu,"$1 $2").split(" ").filter(Boolean).map(t=>t.toLowerCase()),ha=e=>{const s=ma(e).at(-1);if(!s)return!1;const n=s.endsWith("s")?s.slice(0,-1):s;return vt.has(s)||vt.has(n)},xa=e=>{const t=e.replaceAll(/[^a-z0-9]/giu,"").toLowerCase();return t.endsWith("email")||t.endsWith("emailaddress")},Ea=(e,t)=>{const{objects:s,opaque:n}=Kt(e,t);return xr(s).some(o=>xa(o))?!0:n?void 0:!1},va=e=>{const t=e.getArguments()[0];return!t||!i.isObjectLiteralExpression(t)?{usesCaptcha:!1,usesRateLimit:!1}:{usesCaptcha:!!t.getProperty("captcha"),usesRateLimit:!!t.getProperty("rateLimit")}},Sa=e=>{if(i.isCallExpression(e))return e;if(!i.isIdentifier(e))return;const s=e.getSourceFile().getVariableDeclaration(e.getText())?.getInitializer();return s&&i.isCallExpression(s)?s:void 0},J={usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},ya=e=>{const t=Sa(e),s=t?y(t.getExpression()):void 0;if(t&&s==="protectPublic"){const n=va(t);return{...J,usesCaptcha:n.usesCaptcha,usesRateLimit:n.usesRateLimit}}return s!==void 0&&s in Et?{...J,[Et[s]]:!0}:J},Aa=e=>{const t={...J};let s=e;for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))break;const o=n.getName()==="use"?s.getArguments()[0]:void 0;if(o){const r=ya(o);t.usesCaptcha||=r.usesCaptcha,t.usesEmailGate||=r.usesEmailGate,t.usesMask||=r.usesMask,t.usesRateLimit||=r.usesRateLimit,t.usesRls||=r.usesRls}s=n.getExpression()}return t},Na=new Set(["insert","insertMany","insertManyUnsafe","replace"]),ba=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!Na.has(t.getName()))return!1;const s=t.getExpression();if(!M(s))return!1;const o=e.getArguments()[0];return!o||!(i.isStringLiteral(o)||i.isNoSubstitutionTemplateLiteral(o))?!1:ha(o.getLiteralText())},Pa=new Set(["create","runAfter","runAt","send","sendBatch"]),Ia=new Set(["queues","scheduler","workflows"]),wa=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!Pa.has(t.getName()))return!1;let s=t.getExpression();for(;i.isCallExpression(s)||i.isElementAccessExpression(s)||i.isPropertyAccessExpression(s);){if(i.isPropertyAccessExpression(s)&&Ia.has(s.getName())){const n=s.getExpression();if(i.isIdentifier(n)&&n.getText()==="ctx")return!0}s=s.getExpression()}return!1},Ta=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="insertManyUnsafe")return!1;const s=t.getExpression();return M(s)},Ht=new Set(["generateObject","generateText","streamObject","streamText"]),Ca=e=>{const t=y(e.getExpression());return t!==void 0&&Ht.has(t)},Fa=e=>{const t=y(e.getExpression());if(t===void 0||!Ht.has(t))return!1;const s=e.getArguments()[0];return!s||!i.isObjectLiteralExpression(s)||s.getProperties().some(n=>i.isSpreadAssignment(n))?!1:!s.getProperty("maxOutputTokens")},Oa=new Set(["log","span","trace"]),Ra=new Set(["ai"]),La=new Set(["email","mail"]),Da=new Set(["ai","browser","fetch","mail","notify","queues","sql","storage","workflows"]),Ee=(e,t)=>e.getDescendantsOfKind(l.PropertyAccessExpression).some(s=>{if(!t.has(s.getName()))return!1;const n=s.getExpression();return i.isIdentifier(n)&&n.getText()==="ctx"}),ka=new Set([l.ArrowFunction,l.FunctionDeclaration,l.FunctionExpression,l.GetAccessor,l.MethodDeclaration,l.SetAccessor]),Ma=new Set(["every","filter","flatMap","forEach","map","some"]),Ka=new Set(["all","allSettled","race"]),_a=e=>{const t=e.getParent();if(!t||!i.isCallExpression(t)||!t.getArguments().includes(e))return;const s=t.getExpression();if(!i.isPropertyAccessExpression(s))return;const n=s.getName();if(Ma.has(n))return t;const o=s.getExpression();if(i.isIdentifier(o)&&o.getText()==="Promise"&&Ka.has(n))return t},za=e=>{let t=e.getParent();for(;t;){if(i.isTryStatement(t)){const s=t.getTryBlock();if(e.getPos()>=s.getPos()&&e.getEnd()<=s.getEnd())return!0}if(ka.has(t.getKind())){const s=_a(t);if(!s)return!1;t=s;continue}t=t.getParent()}return!1},Ua=e=>{let t=e;for(;;){const s=t.getParent();if(!i.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;if(s.getName()==="catch")return!0;if(s.getName()!=="then"&&s.getName()!=="finally")return!1;const n=s.getParent();if(!i.isCallExpression(n)||n.getExpression()!==s)return!1;t=n}},Ba=e=>{let t=e;for(;;){const s=t.getParent();if(i.isPropertyAccessExpression(s)&&s.getExpression()===t){t=s;continue}return i.isCallExpression(s)&&s.getExpression()===t?s:void 0}},$a=e=>{let t=!1,s=!0;for(const n of e.getDescendantsOfKind(l.PropertyAccessExpression)){if(!Da.has(n.getName()))continue;const o=n.getExpression();if(!i.isIdentifier(o)||o.getText()!=="ctx")continue;const r=Ba(n);r&&(t=!0,!za(r)&&!Ua(r)&&(s=!1))}return{handlesErrors:t&&s,reachesOutbound:t}},qa=e=>e.getDescendantsOfKind(l.ThrowStatement).some(t=>{const s=t.getExpression();if(!i.isNewExpression(s))return!1;const n=s.getExpression();return i.isIdentifier(n)&&n.getText()==="Error"}),St="lunora-advisor-exempt",ja=/^[\s*/]+/u,Va=/[\w-]/u,Wa=e=>{const s=(e.getFirstAncestorByKind(l.VariableStatement)??e).getLeadingCommentRanges().map(n=>n.getText()).join(`
-`);for(const n of s.split(`
-`)){const o=n.replace(ja,"");if(!o.startsWith(St))continue;const r=o.slice(St.length);if(Va.test(r.charAt(0)))continue;const a=r.indexOf("--");return{exempt:!0,exemptReason:(a===-1?"":r.slice(a+2).split("*")[0]??"").trim()}}return{exempt:!1,exemptReason:""}},Ha=e=>{const[t]=e.getArguments();if(t){if(i.isObjectLiteralExpression(t)){const s=t.getProperty("handler");return s?i.isPropertyAssignment(s)?s.getInitializer():i.isShorthandPropertyAssignment(s)?s.getNameNode():i.isMethodDeclaration(s)?s:void 0:void 0}return t}},Ga=(e,t)=>{const s=Ha(t);if(!s)return;if(i.isArrowFunction(s)||i.isFunctionExpression(s)||i.isMethodDeclaration(s))return e;if(!i.isIdentifier(s))return;const n=s.getSourceFile(),o=s.getText(),r=n.getVariableDeclaration(o)?.getInitializer();return r&&(i.isArrowFunction(r)||i.isFunctionExpression(r))?r:n.getFunction(o)},Ya=e=>{let t=!1,s=!1,n=!1,o=!1,r=!1;for(const u of e.getDescendantsOfKind(l.CallExpression))if(ba(u)&&(r=!0),wa(u)&&(t=!0),Ta(u)&&(o=!0),Ca(u)&&(s=!0),Fa(u)&&(n=!0),r&&t&&o&&n)break;const{handlesErrors:a,reachesOutbound:c}=$a(e);return{callsMail:Ee(e,La),emitsEvent:Ee(e,Oa),fanOut:t,handlesErrors:a,reachesOutbound:c,runsAiGeneration:s||Ee(e,Ra),throwsBareError:qa(e),unboundedAiGeneration:n,usesInsertManyUnsafe:o,writesUserTable:r}},Xa=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=z(s);if(!n||n.kind!=="query"&&n.kind!=="mutation"&&n.kind!=="action")return;const o=n.receiver?Aa(n.receiver):{usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},r=Ga(e,s);return{...r?Ya(r):{},...Wa(e),...o,analyzableBody:r!==void 0,exportName:e.getName(),file:t,hasEmailArg:Ea(s,n.receiver),kind:n.kind,visibility:n.visibility}},Qa=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=Xa(o,t);r&&s.push(r)}return s},Za=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Qa(o,v(t,n)))}return s},Ja=new Set(["dbRateLimit","rateLimit"]),ec=e=>i.isArrowFunction(e)?e.getBody():e,tc=(e,t)=>{const s=y(e.getExpression());if(s===void 0||!Ja.has(s))return;const n=e.getArguments()[2];if(!n)return;const o=b(n,"key");if(!o)return;const r=ec(o);if(!(!R(r)||_(r)))return{callee:s,exportName:E(e),file:t,limitName:Tt(e),line:e.getStartLineNumber()}},sc=(e,t)=>w(e,t,tc),nc=new Set(["findFirst","findFirstOrThrow","findMany","get"]),rc=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!nc.has(t.getName()))return;const s=t.getExpression();if(M(s)){const n=e.getArguments()[0];return n&&i.isStringLiteral(n)?n.getLiteralText():""}if(i.isPropertyAccessExpression(s)&&M(s.getExpression()))return s.getName()},oc=e=>{let t=e;for(;i.isCallExpression(t);){const s=t.getExpression();if(!i.isPropertyAccessExpression(s))return;if(s.getName()==="query"&&M(s.getExpression())){const n=t.getArguments()[0];return n&&i.isStringLiteral(n)?n.getLiteralText():""}t=s.getExpression()}},ic=e=>{let t=V(e)??e;for(;i.isAwaitExpression(t);)t=V(t.getExpression())??t.getExpression();return t},Gt=(e,t=!1)=>{const s=ic(e);if(i.isIdentifier(s)){if(t)return;const n=ae(s);return n===void 0?void 0:Gt(n,!0)}if(i.isCallExpression(s))return rc(s)??oc(s)},ac=e=>{const t=e.getBody();if(!i.isBlock(t))return[t];const s=[];for(const n of e.getDescendantsOfKind(l.ReturnStatement)){const o=n.getFirstAncestor(a=>i.isArrowFunction(a)||i.isFunctionExpression(a)||i.isFunctionDeclaration(a)),r=n.getExpression();o===e&&r!==void 0&&s.push(r)}return s},cc=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!i.isCallExpression(s))return[];const n=z(s);if(n?.kind!=="query")return[];const o=zt(s);if(o===void 0)return[];const r=n.receiver!==void 0&&Ys(n.receiver,"output"),a=n.receiver!==void 0&&Ft(n.receiver,"use","mask"),c=new Set,u=[];for(const d of ac(o)){const S=Gt(d);S===void 0||c.has(S)||(c.add(S),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),table:S,usesMask:a,usesOutput:r,visibility:n.visibility}))}return u},lc=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...cc(c,r))}return s},uc=e=>{if(!e||!i.isObjectLiteralExpression(e))return[];const t=[];for(const s of e.getProperties())(i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)||i.isMethodDeclaration(s)||i.isGetAccessorDeclaration(s))&&t.push(s.getName());return t},dc=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?z(s):void 0;if(!n)return[];const o=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=Ct(r);if(a===void 0)continue;const c=uc(b(a.options,"with"));c.length!==0&&o.push({exportName:e.getName(),file:t,line:r.getStartLineNumber(),parentTable:a.table,relations:c,visibility:n.visibility})}return o},fc=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...dc(c,r))}return s},ne=e=>{if(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))return e.getLiteralText();if(i.isBinaryExpression(e)&&e.getOperatorToken().getKind()===l.PlusToken){const t=ne(e.getLeft()),s=ne(e.getRight());return t!==void 0&&s!==void 0?t+s:void 0}},gc=e=>{let t=e,s=t.getParent();for(;s!==void 0&&i.isBinaryExpression(s)&&s.getOperatorToken().getKind()===l.PlusToken;)t=s,s=t.getParent();return t!==e&&ne(t)!==void 0},pc=/(?:^|\/)__tests__\//u,mc=/\.(?:spec|test)$/u,hc=e=>pc.test(e)||mc.test(e),xc=e=>{const t=e.getParent();if(t!==void 0){if(i.isVariableDeclaration(t)||i.isPropertyAssignment(t)||i.isPropertySignature(t))return t.getName();if(i.isBinaryExpression(t)&&t.getOperatorToken().getKind()===l.EqualsToken)return t.getLeft().getText()}},Ec=(e,t,s)=>hn(e)?!hc(s)&&xn(xc(t)):!0,vc=(e,t)=>{const s=[],n=[...e.getDescendantsOfKind(l.BinaryExpression),...e.getDescendantsOfKind(l.StringLiteral),...e.getDescendantsOfKind(l.NoSubstitutionTemplateLiteral)],o=new Set;for(const r of n){if(gc(r))continue;const a=ne(r);if(a===void 0)continue;const c=pn(a);if(c===void 0||!Ec(c,r,t))continue;const u=r.getStartLineNumber(),d=`${String(u)}:${c}`;o.has(d)||(o.add(d),s.push({file:t,kind:c,line:u,preview:mn(a)}))}return s},Sc=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...vc(o,v(t,n)))}return s},yc=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?z(s):void 0;if(!n)return[];const o=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=Ct(r);if(a===void 0)continue;const c=b(a.options,"includeDeleted");if(c===void 0)continue;const u=i.isTrueLiteral(c),d=!u&&R(c);!u&&!d||o.push({exportName:e.getName(),file:t,fromArgs:d,hardcodedTrue:u,line:r.getStartLineNumber(),table:a.table,visibility:n.visibility})}return o},Ac=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...yc(c,r))}return s},Nc=new Set(["query","unsafe"]),bc=e=>{if(!i.isPropertyAccessExpression(e)||!Nc.has(e.getName()))return!1;const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="sql")return!1;const s=t.getExpression();return i.isIdentifier(s)&&s.getText()==="ctx"},Pc=e=>i.isBinaryExpression(e)||i.isTemplateExpression(e),Ic=e=>e.getFirstAncestorByKind(l.VariableDeclaration)?.getName()??"<module>",wc=(e,t)=>{if(!bc(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!Pc(s)))return{exportName:Ic(e),file:t,line:s.getStartLineNumber()}},Tc=(e,t)=>w(e,t,wc),Cc=[["convex",["convex","@convex-dev/"]],["supabase",["@supabase/"]],["firebase",["firebase","@firebase/","firebase-admin"]]],Fc=e=>{for(const[t,s]of Cc)for(const n of s)if(e===n||e.startsWith(n.endsWith("/")?n:`${n}/`))return t},Oc=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of o.getImportDeclarations()){const a=r.getModuleSpecifierValue(),c=Fc(a);c!==void 0&&s.push({file:v(t,n),line:r.getStartLineNumber(),moduleSpecifier:a,platform:c})}}return s},Rc=new Set(["createMultipartUpload","delete","download","generateUploadUrl","get","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","put","resumeMultipartUpload","store","upload"]),Lc=(e,t,s=[])=>{const n=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));return ce(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.storage"||r.startsWith("ctx.storage."),methods:Rc,requireUnmodifiedReach:!0}).map(r=>{const a=n.get(`${r.file}:${r.exportName}`);return a===void 0?r:{...r,visibility:a}})},Dc=new Map([["generateUploadUrl",1],["getPresignedUrl",1],["getSignedUrl",1],["store",2],["upload",2]]),kc=e=>e&&i.isNumericLiteral(e)?Number(e.getText()):void 0,Mc=e=>{if(e===void 0)return{analyzable:!0,presentKeys:[]};if(!i.isObjectLiteralExpression(e))return{analyzable:!1,presentKeys:[]};const t=[];let s,n=!1;for(const o of e.getProperties()){if(i.isSpreadAssignment(o)){n=!0;continue}if(i.isPropertyAssignment(o)){const r=o.getName();t.push(r),r==="expiresInSeconds"&&(s=kc(o.getInitializer()));continue}(i.isShorthandPropertyAssignment(o)||i.isMethodDeclaration(o))&&t.push(o.getName())}return{analyzable:!n,expiresInSeconds:s,presentKeys:t}},Kc=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName(),s=Dc.get(t);if(s===void 0)return;const n=e.getExpression().getText();return n==="ctx.storage"||n.startsWith("ctx.storage.")?{method:t,optionsIndex:s}:void 0},_c=(e,t)=>{const s=Kc(e.getExpression());if(s!==void 0)return{exportName:E(e),file:t,line:e.getStartLineNumber(),method:s.method,...Mc(e.getArguments()[s.optionsIndex])}},zc=(e,t)=>w(e,t,_c),Uc=(e,t)=>({analytics:e.analytics||t.dependencies.has("@lunora/bindings"),auth:t.dependencies.has("@lunora/auth"),containers:e.container||t.containerCount>0||t.dependencies.has("@lunora/container"),flags:e.flags||t.dependencies.has("@lunora/flags"),kv:e.kv||t.dependencies.has("@lunora/bindings"),mail:e.mail||t.dependencies.has("@lunora/mail"),notifications:e.notify||t.dependencies.has("@lunora/notify"),payments:e.payments||t.hasPaymentTables,queues:t.queueCount>0||t.dependencies.has("@lunora/queue"),scheduler:e.scheduler||t.cronCount>0||t.dependencies.has("@lunora/scheduler"),storage:e.storage||t.storageRuleCount>0||t.storageColumnCount>0||t.dependencies.has("@lunora/storage"),vectors:t.vectorStoreSupported&&t.vectorIndexCount>0,workflows:e.workflows||t.workflowCount>0||t.dependencies.has("@lunora/workflow")}),Bc=new Set(["RegisteredAction","RegisteredMutation","RegisteredQuery"]),we=e=>{const t=e.getType(),s=t.getAliasSymbol()?.getName()??t.getSymbol()?.getName();return s!==void 0&&Bc.has(s)?s:void 0},Yt=e=>{const t=e.getInitializer();return t===void 0?!1:i.isCallExpression(t)||i.isIdentifier(t)||i.isPropertyAccessExpression(t)},Xt={cause:"codegen recognises a procedure only when the initializer is a builder chain, and this one is produced by a call or an alias",remediation:"A factory that returns a procedure cannot be read statically — inline it, or export the chain the factory builds."},$c={cause:"the binding is exported by a separate `export { … }` statement, and codegen reads the `export` keyword on the declaration itself",remediation:"Move the keyword onto the declaration and drop the separate export statement."},Te=(e,t,s,n,o)=>({cacheKey:`procedure_not_registered:${e}:${t}`,categories:["SCHEMA"],description:"Codegen registers an export only when the declaration carries `export` and its initializer is literally a builder chain. A procedure written any other way exists at runtime but never reaches `_generated/api.ts`, so no caller can address it.",detail:`\`${t}\` in \`${e}\` (line ${n.toString()}) has type \`${s}\` but was not registered — ${o.cause}.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:n,typeName:s},name:"procedure_not_registered",remediation:`Assign the builder chain directly: \`export const ${t} = query.input({ … }).query(handler);\`. ${o.remediation}`,title:"Procedure exists at runtime but is missing from the generated API"}),qc=(e,t,s)=>{const n=[];for(const o of e.getVariableStatements().filter(r=>r.isExported()))for(const r of o.getDeclarations()){const a=r.getName();if(s.has(`${t}:${a}`)||!Yt(r))continue;const c=we(r);c!==void 0&&n.push(Te(t,a,c,r.getStartLineNumber(),Xt))}return n},jc=(e,t,s)=>{if(s.has(`${t}:default`))return[];const n=[];for(const o of e.getExportAssignments().filter(r=>!r.isExportEquals())){const r=we(o.getExpression());r!==void 0&&n.push(Te(t,"default",r,o.getStartLineNumber(),Xt))}return n},Vc=(e,t,s)=>{const n=[];for(const o of e.getExportDeclarations().filter(r=>r.getModuleSpecifier()===void 0))for(const r of o.getNamedExports()){const a=r.getAliasNode()?.getText()??r.getName();if(s.has(`${t}:${a}`))continue;const c=r.getLocalTargetDeclarations().find(d=>i.isVariableDeclaration(d));if(c===void 0||!Yt(c))continue;const u=we(c);u!==void 0&&n.push(Te(t,a,u,r.getStartLineNumber(),$c))}return n},Wc=(e,t,s)=>[...qc(e,t,s),...jc(e,t,s),...Vc(e,t,s)],Hc=(e,t,s)=>{const n=new Set(s.map(r=>`${r.filePath}:${r.exportName}`)),o=[];for(const r of m(t)){const a=e.getSourceFile(r);a!==void 0&&o.push(...Wc(a,v(t,r),n))}return o.toSorted((r,a)=>r.cacheKey.localeCompare(a.cacheKey))},Gc=new Set(["when","where"]),ve=new Set(["definePolicy","defineShape"]),Yc=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(i.isPropertyAccessExpression(t)){const n=t.getName();return ve.has(n)?n:void 0}if(!i.isIdentifier(t))return;for(const n of t.getSymbol()?.getDeclarations()??[])if(i.isImportSpecifier(n)){const o=n.getNameNode().getText();return ve.has(o)?o:void 0}const s=t.getText();return ve.has(s)?s:void 0},Xc=e=>i.isObjectLiteralExpression(e)&&e.getProperties().length===0,Qt=e=>{if(e!==void 0){if(i.isReturnStatement(e)&&e.getExpression()===void 0||e.getKind()===l.UndefinedKeyword||e.getText()==="undefined")return"undefined";if(Xc(e))return"empty-object";if(i.isParenthesizedExpression(e))return Qt(e.getExpression())}},Ce=e=>e.getAncestors().find(t=>i.isArrowFunction(t)||i.isFunctionExpression(t)||i.isFunctionDeclaration(t)),Qc=e=>e.getDescendantsOfKind(l.ReturnStatement).filter(t=>Ce(t)===e),Zt=e=>e.getDescendantsOfKind(l.ConditionalExpression).filter(t=>Ce(t)===e),Zc=e=>{const t=Qc(e);return t.length>1?!0:t.some(s=>s.getFirstAncestorByKind(l.IfStatement)!==void 0)||Zt(e).length>0},Jc=e=>e.getDescendantsOfKind(l.IfStatement).filter(t=>Ce(t)===e),be=e=>e.getKind()===l.NullKeyword||e.getKind()===l.FalseKeyword||i.isIdentifier(e)&&e.getText()==="undefined"?!0:i.isNumericLiteral(e)?e.getLiteralValue()===0:i.isStringLiteral(e)&&e.getLiteralValue()==="",el=(e,t)=>be(e)||be(t),tl=new Map([[l.EqualsEqualsEqualsToken,"positive"],[l.EqualsEqualsToken,"positive"],[l.ExclamationEqualsEqualsToken,"negative"],[l.ExclamationEqualsToken,"negative"]]),yt=e=>!be(e)&&(i.isLiteralExpression(e)||e.getKind()===l.TrueKeyword),sl=(e,t,s)=>{const n=tl.get(e);if(n!==void 0)return el(t,s)?n==="positive"?"negative":"positive":yt(t)||yt(s)?void 0:n},j=e=>{if(i.isParenthesizedExpression(e))return j(e.getExpression());if(i.isPrefixUnaryExpression(e)&&e.getOperatorToken()===l.ExclamationToken)return"negative";if(i.isBinaryExpression(e)){const t=e.getOperatorToken().getKind(),s=sl(t,e.getLeft(),e.getRight());if(s!==void 0)return s;if(t===l.AmpersandAmpersandToken||t===l.BarBarToken){const n=j(e.getLeft()),o=j(e.getRight());return n===o?n:"indeterminate"}}return i.isIdentifier(e)||i.isPropertyAccessExpression(e)||i.isElementAccessExpression(e)||i.isCallExpression(e)?"positive":"indeterminate"},At=e=>{if(e!==void 0){if(i.isReturnStatement(e))return e;if(i.isBlock(e)){const t=e.getStatements().at(-1);return t!==void 0&&i.isReturnStatement(t)?t:void 0}}},nl=e=>{if(e.getElseStatement()!==void 0)return;const t=e.getNextSiblingIfKind(l.ReturnStatement);return t!==void 0&&t.getNextSibling()===void 0?t:void 0},rl=e=>i.isReturnStatement(e)?e.getExpression()??e:e,ol=e=>{const t=[];for(const s of Zt(e)){const n=j(s.getCondition());n==="positive"?t.push(s.getWhenFalse()):n==="negative"&&t.push(s.getWhenTrue())}for(const s of Jc(e)){const n=j(s.getExpression());if(n==="indeterminate")continue;const o=n==="negative"?At(s.getThenStatement()):At(s.getElseStatement())??nl(s);o!==void 0&&t.push(rl(o))}return t},il=e=>{for(const t of e.getAncestors())if(i.isVariableDeclaration(t)){const s=t.getNameNode();if(i.isIdentifier(s))return s.getText()}return"<anonymous>"},al=(e,t,s)=>{if(!i.isCallExpression(e))return[];const[n]=e.getArguments();if(!n||!i.isObjectLiteralExpression(n))return[];const o=[];for(const r of n.getProperties()){if(!i.isPropertyAssignment(r)||!Gc.has(r.getName()))continue;const a=r.getInitializer();if(!(!a||!(i.isArrowFunction(a)||i.isFunctionExpression(a)))&&Zc(a))for(const c of ol(a)){const u=Qt(c);u!==void 0&&o.push({exportName:il(e),file:s,form:u,key:r.getName(),line:c.getStartLineNumber(),owner:t})}}return o},cl=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=Yc(n);o!==void 0&&s.push(...al(n,o,t))}return s},ll=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...cl(o,v(t,n)))}return s},ul=new Set(["query","upsert","upsertMany"]),dl=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(ul.has(t))return e.getExpression().getText()==="ctx.vectors"?t:void 0},fl=(e,t)=>{const s=dl(e.getExpression());if(s===void 0)return;const n=e.getArguments()[1];if(!n)return;const o=b(n,"namespace");if(!(!o||!R(o)||_(o)))return{exportName:E(e),file:t,line:e.getStartLineNumber(),method:s}},gl=(e,t)=>w(e,t,fl),pl=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="get")return!1;const s=t.getExpression();return i.isPropertyAccessExpression(s)?s.getName()==="workflows":i.isIdentifier(s)&&s.getText()==="workflows"},ml=e=>{const t=e.getArguments()[0];return t&&i.isStringLiteral(t)?t.getLiteralText():""},hl=(e,t)=>{const s=[];for(const n of m(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=v(t,n);for(const a of o.getDescendantsOfKind(l.CallExpression)){if(!pl(a))continue;const c=Ms(a);c!==""&&s.push({exportName:c,file:r,line:a.getStartLineNumber(),workflow:ml(a)})}}return s},xl=".lunora-schema.json",T=(e,t)=>{P(e)&&Pt(e,"utf8")===t||us(e,t,"utf8")},O=(e,t)=>{if(t===""){ds(e,{force:!0});return}T(e,t)},El=e=>{const t=f(e,"package.json");if(P(t))try{const s=JSON.parse(Pt(t,"utf8"));return typeof s.version=="string"&&s.version!==""?s.version:void 0}catch{return}},vl=()=>{const e=process.env.LUNORA_CODEGEN_TIMING;return e!==void 0&&e!==""},Sl=e=>{let t=P(e)?e:Z(e);for(;t&&t!==Z(t);){const s=f(t,"tsconfig.json");if(P(s))return s;t=Z(t)}},Nt=e=>e.replaceAll("\\","/"),yl=(e,t,s)=>{if(s&&e.length>0){const r=e.map(a=>`"${a.exportName}"`).join(", ");throw new k("MASK_UNSUPPORTED",`This project declares a \`mask(...)\` policy whose argument isn't a plain object literal (e.g. \`mask(sharedPolicies)\` referencing a hoisted variable), or contains a spread (\`...shared\`) or computed key (\`[name]:\`) codegen can't enumerate, so codegen can't tell which columns it masks. Because the project also declares replication shape(s) (${r}), codegen can't verify none of them replicate a table that policy masks — inline every table and column as literal keys so codegen can verify it, or remove the affected shape(s).`,{status:422})}const n=new Map;for(const r of t.columns){const a=n.get(r.table)??[];a.push(r.column),n.set(r.table,a)}const o=t.columns.length>0;for(const r of e){if(r.table===void 0){if(o)throw new k("MASK_UNSUPPORTED",`defineShape "${r.exportName}" has a non-literal \`table\` (a variable or expression, not a string literal), so codegen can't statically verify it doesn't replicate a table that masks a column. This project masks at least one column elsewhere, so the combination can't be proven safe — change "${r.exportName}"'s \`table\` to a plain string literal so codegen can verify it, or remove the mask(s) on the table it targets.`,{status:422});continue}const a=n.get(r.table);if(a===void 0)continue;const c=a.map(u=>`"${u}"`).join(", ");throw new k("MASK_UNSUPPORTED",`defineShape "${r.exportName}" replicates table "${r.table}", which masks column(s) ${c} on at least one procedure. A shape runs no procedure, so \`.use(mask(...))\` never applies to its replicated rows — remove the shape, unmask the table, or wait for shape-masking support.`,{status:422})}},re=(e,t,s)=>{const n=e.getSourceFile(t);if(n===void 0){e.createSourceFile(t,s,{overwrite:!0});return}n.getFullText()!==s&&n.replaceWithText(s)},bt=(e,t,s)=>e.getSourceFile(t)?.getFullText()===s,Al=8,Nl=e=>{const{agents:t,apiPath:s,generatedFunctionsPath:n,lunoraDirectory:o,migrations:r,project:a,shapes:c,usesSandbox:u,useUmbrella:d,workflows:S}=e;let x=tt(a,o),I=nt(a,o),p=st(a,o);rt([...x,...I].map(N=>N.filePath)),rt(p.filter(N=>N.stream).map(N=>N.filePath),"http-stream");for(let N=1;;N+=1){const C=Rs({agents:t,functions:x,httpRoutes:p,mutators:I,useUmbrella:d,workflows:S}),L=Ls({agents:t,functions:x,migrations:r,mutators:I,shapes:c,useUmbrella:d,usesSandbox:u});if(N>=Al||bt(a,s,C)&&bt(a,n,L))return{apiContent:C,functions:x,functionsContent:L,httpRoutes:p,mutators:I};re(a,s,C),re(a,n,L),x=tt(a,o),I=nt(a,o),p=st(a,o)}},bl=e=>{const t=Sl(e);return t?new et({skipAddingFilesFromTsConfig:!1,tsConfigFilePath:t,useInMemoryFileSystem:!1}):new et({skipAddingFilesFromTsConfig:!0,useInMemoryFileSystem:!1})},Eu=(e,t)=>{const s=m(t),n=f(t,"schema.ts");P(n)&&s.push(n);for(const c of s){const u=e.getSourceFile(c);u===void 0?e.addSourceFileAtPath(c):u.refreshFromFileSystemSync()}const o=new Set(s.map(c=>Nt(c))),r=Nt(t),a=`${r}/`;for(const c of e.getSourceFiles()){const u=c.getFilePath();(u===r||u.startsWith(a))&&!o.has(u)&&e.removeSourceFile(c)}for(const c of e.getSourceFiles()){const u=c.getFilePath();if(!(u===r||u.startsWith(a)||u.includes("/node_modules/")))try{c.refreshFromFileSystemSync()}catch{e.removeSourceFile(c)}}},vu=e=>{const t=vl(),s=t?me.now():0,n=f(e.projectRoot,e.lunoraDirectory??"lunora"),o=f(n,"schema.ts");if(!P(o))throw new k("INTERNAL",`schema.ts not found at ${o}`);const r=e.project??bl(n);bn(wo);const a=gn(r,o,e.projectRoot),{agents:c,containers:u,crons:d,dataModelContent:S,dependencies:x,env:I,featureUsage:p,hasFlags:N,hasNotify:C,identity:L,platformGate:A,queues:D,serverContent:U,storageRulesMetadata:$,usesSandbox:H,useUmbrella:K,workflows:F}=jn({lunoraDirectory:n,project:r,projectRoot:e.projectRoot,schema:a,target:e.target}),g=f(n,"_generated"),Fe=f(g,"dataModel.ts"),Oe=f(g,"server.ts"),Jt=f(g,"api.ts"),es=f(g,"functions.ts");re(r,Fe,S),re(r,Oe,U);const le=nn(r,n),q=En(r,n),{apiContent:Re,functions:B,functionsContent:Le,httpRoutes:ts,mutators:ss}=Nl({agents:c,apiPath:Jt,generatedFunctionsPath:es,lunoraDirectory:n,migrations:le,project:r,shapes:q,useUmbrella:K,usesSandbox:H,workflows:F}),G=e.lint===!1?void 0:ps({adminRoutes:Zn(r,n),aiRawRuns:tr(r,n),aiToolSideEffects:dr(r,n),argumentDerivedFetches:pr(r,n),argumentValidators:br(r,n),authApiCalls:Xs(r,n),authConfigs:Dr(r,n),browserUrlAccesses:zr(r,n),configCalls:Yr(r,n),containerKeyAccesses:Qr(r,n),containerOverrides:no(r,n),containers:u,exportSinks:ao(r,n),staleMigrationImports:Oc(r,n),failOpenGuards:go(r,n),flagReads:Ao(r,n),flagSecurityDefaults:Io(r,n),geoIndexUsages:Fo(r,n),httpActionGuards:Ko(r,n),httpHeaderWrites:Ho(r,n),hyperdriveCalls:en(r,n),identityClaimReads:ei(r,n),imageDeliveryUrlAccesses:si(r,n),inserts:tn(r,n),kvKeyAccesses:ri(r,n,B),mailRecipientAccesses:li(r,n),maskProcedures:sn(r,n),maskStrategies:xi(r,n),mutatorWrites:Ni(r,n),nondeterministicCalls:an(r,n),normalizeIdAuthorizations:zi(r,n),notifyCalls:ln(r,n),notifyConfig:cn(r,n),ownerFieldWrites:Hi(r,n,B),unrestrictedWhereBranches:ll(r,n),paymentWebhooks:ta(r,n),privilegedDispatches:pa(r,n),procedureProtections:Za(r,n),queries:Gs(r,n),queues:D,r2sqlCalls:un(r,n),ratelimitKeySelectors:sc(r,n),rawRowReturns:lc(r,n),relationLoads:fc(r,n),rlsProcedures:dn(r,n),schema:a,secretLiterals:Sc(r,n),shapes:q,softDeleteReads:Ac(r,n),sqlInterpolations:Tc(r,n),storageKeyAccesses:Lc(r,n,B),storageUploads:zc(r,n),vectorNamespaceAccesses:gl(r,n),workflowCalls:hl(r,n),workflows:F,wranglerVariables:e.wranglerVariables}),De=G===void 0?[]:[...fs(G,{source:"static"}),...Hc(r,n,B)],ns=fn(r,n),ke=pi(r,n);yl(q,ke,fi(r,n));const rs=N?xo(r,n):[],ue=A.signals.vectorStore!==!1,Y=Uc(p,{containerCount:u.length,cronCount:d.length,dependencies:x,hasPaymentTables:Xi(a.tables),queueCount:D.length,storageColumnCount:Object.keys(It(a)).length,storageRuleCount:$.rules.length,vectorIndexCount:a.vectorIndexes.length,vectorStoreSupported:ue,workflowCount:F.length}),Me=t?me.now():0,de=Pn(a,le.map(h=>h.id)),Ke=ys({advisories:De,advisorProcedures:G?.procedureProtections??[],agents:c,containers:u,env:I,flagKeys:rs,hasAccessFacade:p.access,hasAi:p.ai,hasAnalytics:p.analytics,hasBrowser:p.browser,hasFlags:N,hasHyperdrive:p.hyperdrive,hasImages:p.images,hasKv:p.kv,hasNotify:C,hasPayments:p.payments,hasPipelines:p.pipelines,hasR2sql:p.r2sql,hasVectors:ue,hasX402:p.x402,maskMetadata:ke,mutators:ss,queues:D,rlsMetadata:ns,schema:a,schemaSnapshot:de,shapes:q,storageRules:$,studioFeatures:Y,useUmbrella:K,workflows:F}),_e=As(q,x.has("@lunora/db"),K),ze=Ns(u,a.jurisdiction),Ue=bs(F),Be=Ps(c),$e=Is(D),qe=ws(d),je=Ts(a.vectorIndexes),X=Cs(a,K),Ve=Fs(x.has("@lunora/seed")),Q=e.apiSpec??"openapi",fe=Q==="openapi"||Q==="both",ge=Q==="openrpc"||Q==="both",We=vn({emailAgents:c.filter(h=>h.onEmail===!0).map(h=>({bindingName:h.bindingName,exportName:h.exportName})),hasAccess:x.has("@lunora/cloudflare-access"),hasAi:p.ai,hasAnalytics:p.analytics,hasAuth:x.has("@lunora/auth"),hasBrowser:p.browser,hasFramework:x.has("@lunora/astro")||x.has("@lunora/svelte")||x.has("@lunora/vue"),hasGlobal:a.tables.some(h=>h.shardMode==="global"&&h.globalBackend!=="hyperdrive"),hasHyperdrive:p.hyperdrive,hasHyperdriveGlobal:a.tables.some(h=>h.shardMode==="global"&&h.globalBackend==="hyperdrive"),hasImages:p.images,hasKv:p.kv,hasKvIntrospector:Y.kv,hasNotify:C,hasPayments:p.payments,hasR2sql:p.r2sql,hasQueue:D.some(h=>h.mode==="push"),hasScheduler:Y.scheduler,hasStorage:Y.storage,hasVectors:ue,hasWorkflow:F.length>0,hasX402:p.x402,identity:L,jurisdiction:a.jurisdiction,tableNames:a.tables.map(h=>h.name),useUmbrella:K,vectorIndexCount:a.vectorIndexes.length,voiceAgents:c.filter(h=>h.voice===!0&&h.voiceBindingName!==void 0).map(h=>({bindingName:h.voiceBindingName,exportName:h.exportName})),wantsOpenApi:fe,wantsOpenRpc:ge}),He=El(e.projectRoot),Ge=Sn({functions:B,httpRoutes:ts,version:He}),Ye=An({functions:B,version:He}),Xe=`${JSON.stringify(Ge,void 0,2)}
-`,Qe=`${JSON.stringify(Ye,void 0,2)}
-`,Ze=yn(Ge),Je=Nn(Ye),pe=f(n,xl),os=P(pe);if(e.dryRun||(P(g)||ls(g,{recursive:!0}),T(f(g,"app.ts"),We),T(Fe,S),T(f(g,"api.ts"),Re),T(Oe,U),T(f(g,"functions.ts"),Le),T(f(g,"shard.ts"),Ke),T(f(g,"crons.ts"),qe),T(f(g,"vectors.ts"),je),T(f(g,"drizzle.global.ts"),X.global),T(f(g,"drizzle.shard.ts"),X.shard),O(f(g,"containers.ts"),ze),O(f(g,"workflows.ts"),Ue),O(f(g,"agents.ts"),Be),O(f(g,"queues.ts"),$e),O(f(g,"seed.ts"),Ve),O(f(g,"collections.ts"),_e),O(f(g,"openapi.json"),fe?Xe:""),O(f(g,"openapi.ts"),fe?Ze:""),O(f(g,"openrpc.json"),ge?Qe:""),O(f(g,"openrpc.ts"),ge?Je:""),(!os||e.updateSchemaBaseline===!0)&&T(pe,gs(de))),t){const h=me.now(),is=Math.round(h-s),as=Math.round(Me-s),cs=Math.round(h-Me);console.error(`@lunora/codegen: codegen took ${is.toString()}ms (discovery ${as.toString()}ms, emit ${cs.toString()}ms)`)}return{advisories:De,advisorContext:G,agents:c,containers:u,cronTriggers:Os(d),generated:{agents:Be,api:Re,app:We,collections:_e,containers:ze,crons:qe,dataModel:S,drizzleGlobal:X.global,drizzleShard:X.shard,functions:Le,openApi:Xe,openApiModule:Ze,openRpc:Qe,openRpcModule:Je,queues:$e,seed:Ve,server:U,shard:Ke,vectors:je,workflows:Ue},migrations:le,outputDirectory:g,platformDiagnostics:A.diagnostics,queues:D,schemaSnapshot:de,schemaSnapshotPath:pe,workflows:F}};export{xl as SCHEMA_SNAPSHOT_FILENAME,bl as createCodegenProject,Sl as findTsconfig,Eu as refreshCodegenProject,vu as runCodegen};

package/dist/packem_shared/chain-DboeOxBl.mjs

@@ -1 +0,0 @@
-import{w as a}from"./classify-procedure-call-CRm5Etni.mjs";const l=s=>a(s,"use","rls");export{l as r};

package/dist/packem_shared/discoverHyperdriveCalls-C6kV2CPz.mjs

@@ -1 +0,0 @@
-import{d as o}from"./context-property-calls-CBUh7oAY.mjs";const t=(r,e)=>o(r,e,"sql");export{t as default};

package/dist/packem_shared/discoverMaskProcedures-CNqwOwXv.mjs

@@ -1 +0,0 @@
-import"./listLunoraSourceFiles-BvqYMy81.mjs";import"./classify-procedure-call-CRm5Etni.mjs";import{d as p}from"./index-BsVoa-4F.mjs";export{p as default};

package/dist/packem_shared/discoverQueries-Dz2vDpE9.mjs

@@ -1 +0,0 @@
-import{d as a}from"./queries-D8DheHbi.mjs";import"./listLunoraSourceFiles-BvqYMy81.mjs";export{a as default};

package/dist/packem_shared/discoverR2sqlCalls-CuHe5smg.mjs

@@ -1 +0,0 @@
-import{d as r}from"./context-property-calls-CBUh7oAY.mjs";const t=(s,o)=>r(s,o,"r2sql");export{t as default};