@lunora/codegen 1.0.0-alpha.177 → 1.0.0-alpha.179

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,4 +1,4 @@
1
- import{A as w,G as k}from"./emit--q1dVF6Z.mjs";const y=e=>`has${e.charAt(0).toUpperCase()}${e.slice(1)}`,b=w.map(({appMethod:e,key:t})=>[y(t),e.method,e.configKey,e.doc]),m=e=>b.some(([t])=>e[t]),S=e=>e?['import * as lunoraIdentityContract from "../identity.js";']:[],E=(e,t)=>e?['import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";',`import { createAccessResolver${t?", composeResolvers":""} } from "@lunora/cloudflare-access";`]:[],D=e=>e?['import { createKvIntrospectorFromEnv } from "@lunora/bindings/kv";']:[],x=e=>e?['import { createVectorAdminIntrospector } from "@lunora/bindings/vectors";']:[],R=e=>e?['import type { D1CtxDbOptions, D1DatabaseLike, D1Exec } from "@lunora/d1";','import { applyCdcChanges, createD1CtxDb, emitD1QueryCost, exportGlobalRows, facetGlobalColumn, importGlobalRows, listGlobalTables, readD1CdcChanges, readGlobalTablePage, retryingExec } from "@lunora/d1";']:[],A=e=>e?['import notifyConfig from "../notify.js";']:[],g=e=>(e.emailAgents?.length??0)>0,C=e=>g(e)?['import { dispatchAgentEmail } from "@lunora/agent/inbound";']:[],O=e=>g(e)?['import * as lunoraAgentDefinitions from "../agents.js";']:[],T=e=>{const{hasFramework:t,hasGlobal:a,hasHyperdriveGlobal:r,hasQueue:n,useUmbrella:i}=e,o=i?"lunorash/runtime":"@lunora/runtime",l=["ExecutionContextLike","HttpRouterLike","LunoraWorker","Route","ScheduledControllerLike","ShardNamespaceLike","WorkerOptions",...n?["TriggerTrace"]:[],...a?["GlobalIntrospector","AdminTableResolver"]:[],...t?["FrameworkHostHandler"]:[]],s=[...a||r?["createCrossShardRelationCapabilities"]:[],"createWorker","resolveLogArchiveFromEnv",...t?["withFrameworkWorker"]:[]].join(", ");return[`import type { ${[...l].toSorted((c,d)=>c.localeCompare(d)).join(", ")} } from "${o}";`,`import { ${s} } from "${o}";`]},I=e=>{const{hasAccess:t,hasAuth:a,hasGlobal:r,hasHyperdriveGlobal:n,hasKvIntrospector:i,hasQueue:o,hasScheduler:l,hasStorage:s,hasWorkflow:c,wantsOpenApi:d,wantsOpenRpc:h}=e;return[...a?['import type { AuthNamespaceLike, LunoraAuth, LunoraAuthOptions } from "@lunora/auth";','import { createAuth, createAuthAdmin, createAuthAuditReader, createDoAuthWiring, d1Executor, ensureMigrated, handleAuthRequest, lunoraD1Adapter } from "@lunora/auth";']:[],...E(t,a),...R(r),...n?['import type { HyperdriveEngine } from "@lunora/hyperdrive/global";','import { createHyperdriveGlobalCtxDb } from "@lunora/hyperdrive/global";','import type { SqlCtxDbOptions, SqlExec } from "@lunora/sql-store";']:[],...D(i),...x(e.hasVectors===!0),...l?['import type { DurableObjectNamespaceLike } from "@lunora/scheduler";','import { createScheduler } from "@lunora/scheduler";']:[],...s?['import type { R2BucketLike, R2S3Credentials, Storage } from "@lunora/storage";','import { createBucketStorage, createStorage } from "@lunora/storage";']:[],...c?['import { createWorkflowsRestClient } from "@lunora/workflow";']:[],...C(e),...T(e),"",...S(e.identity),...O(e),...r||n?['import schema from "../schema.js";']:[],...A(e.hasNotify),'import { LUNORA_CRONS } from "./crons.js";','import { LUNORA_FUNCTIONS } from "./functions.js";',...o?['import { createQueueCaptureSink, dispatchQueueBatch, shouldCaptureQueue } from "@lunora/queue";','import { LUNORA_QUEUE_REGISTRY } from "./queues.js";']:[],...d?['import { openApiSpec } from "./openapi.js";']:[],...h?['import { openRpcSpec } from "./openrpc.js";']:[],'import { createShardDO } from "./shard.js";',...e.hasVectors===!0?['import { LUNORA_VECTOR_INDEXES } from "./vectors.js";']:[]]},L=e=>[...e.hasStorage?['/** `.storage(...)` declaration — one bucket (required) plus optional extra named buckets and signed-URL config. Backs `ctx.storage` AND the studio file browser. */\ninterface StorageDeclaration<Env> {\n /** The default R2 bucket binding (the bare `ctx.storage`). */\n bucket: Selector<Env, R2BucketLike>;\n /** Extra named buckets, reached via `ctx.storage.bucket("name")` and the studio\'s bucket picker. */\n buckets?: Record<string, Selector<Env, R2BucketLike>>;\n /** Public base URL signed/public object URLs resolve against. */\n publicBaseUrl?: Selector<Env, string>;\n /** R2 S3-API credentials (`{ accountId, accessKeyId, secretAccessKey, bucket, jurisdiction? }`) enabling `ctx.storage.getPresignedUrl` — native S3 presigned URLs that hit R2 directly, bypassing the worker. Omit to use only the worker-signed `getSignedUrl` path. */\n s3?: Selector<Env, R2S3Credentials>;\n /** HMAC secret for signed URLs. */\n signingSecret?: Selector<Env, string>;\n}']:[],...e.hasScheduler?["/** `.scheduler(...)` declaration — the `SchedulerDO` namespace. Backs `ctx.scheduler` AND the studio's scheduled-jobs view. The origin its callbacks dispatch back to is not declared here: the DO reads `env.LUNORA_ORIGIN_URL` at fire time, because a caller-supplied dispatch target would be an SSRF vector. */\ninterface SchedulerDeclaration<Env> {\n /** The `SchedulerDO` namespace binding (typically `env.SCHEDULER`). */\n namespace: Selector<Env, DurableObjectNamespaceLike & ShardNamespaceLike>;\n}"]:[],...e.hasGlobal?["/** `.global(...)` declaration — the D1 binding backing `.global()` tables. Backs cross-tenant `ctx.db` reads/writes AND the studio's global data browser. */\ninterface GlobalDeclaration<Env> {\n /** The D1 binding (typically `env.DB`). */\n d1: Selector<Env, D1DatabaseLike>;\n /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n origin?: Selector<Env, string>;\n}"]:[],...e.hasHyperdriveGlobal?['/** `.hyperdriveGlobal(...)` declaration — backs `.global({ backend: "hyperdrive" })` tables on a Postgres/MySQL database via Hyperdrive. Stays reactive: the writer is injected as `globalDb` and the broadcast hook drives live queries. */\ninterface HyperdriveGlobalDeclaration<Env> {\n /** The Hyperdrive engine — selects the Postgres or MySQL dialect. */\n engine: HyperdriveEngine;\n /** Build the `SqlExec` from `env` — e.g. `buildPgExec(fromPostgresJs(postgres(env.HYPERDRIVE.connectionString)))`. Cache the driver on the DO instance; rebuild lazily after hibernation. */\n exec: (env: Env) => SqlExec;\n /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n origin?: Selector<Env, string>;\n}']:[],...e.hasAuth?['/** `.auth(...)` declaration — better-auth options plus the storage the adapter reads. Give it `d1` (the default) or `namespace` (a Durable Object that hosts the auth tables), never both. The builder owns the lazy build + `ensureMigrated` dance and wires `authHandler` / `resolveIdentity` / `authAdmin`. */\ninterface AuthDeclaration<Env> {\n /** The D1 binding the auth SQL adapter is wired over (via `lunoraD1Adapter`). Omit only when using `namespace`. */\n d1?: Selector<Env, unknown>;\n /** Shared secret the worker presents on the object\'s internal session route. REQUIRED with `namespace`: the binding is reachable from any worker bound to it, so the secret — not the binding — is the authorization boundary. Without it identity resolution fails closed. */\n internalSecret?: Selector<Env, string>;\n /** Name of the Durable Object instance holding the auth tables. Defaults to `"auth"`. Set it to run separate auth objects (per deployment, per tenant) off one namespace. */\n objectName?: Selector<Env, string>;\n /** The auth Durable Object namespace — the DO-backed mode. Needed for `@better-auth/scim`, which requires native transactions that D1 has none of. The object owns the auth tables, so `/api/auth/*` and identity resolution both go through it. Typed as `AuthNamespaceLike` because `createDoAuthWiring` resolves through `idFromName` + `get` and has no `getByName` fallback — both members are load-bearing here, and `ShardNamespaceLike` leaves both optional. */\n namespace?: Selector<Env, AuthNamespaceLike>;\n /** Build the better-auth options from `env` (secret, plugins, email/password, …). */\n options: (env: Env) => LunoraAuthOptions;\n}']:[]],N=e=>[...e.hasAccess?[" private accessSelector?: Selector<Env, CreateAccessResolverOptions | undefined>;"]:[]," private adminToken?: Selector<Env, string>;",...e.hasAuth?[" private authDeclaration?: AuthDeclaration<Env>;"]:[]," private cdcEnabled = false;"," private reactiveCacheConfig: boolean | { maxBytes?: number; maxEntries?: number } = false;",' private maxRelationKeysLimit?: ShardConfig["maxRelationKeys"];',' private observabilitySink?: ShardConfig["observability"];',' private relationExistsPushDownMode?: ShardConfig["relationExistsPushDown"];'," private readonly extendFns: ((env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>)[] = [];",...e.hasGlobal?[" private globalDeclaration?: GlobalDeclaration<Env>;"]:[],...e.hasHyperdriveGlobal?[" private hyperdriveGlobalDeclaration?: HyperdriveGlobalDeclaration<Env>;"]:[]," private httpRouterApp?: HttpRouterLike;"," private readonly routeMap: Record<string, Route> = {};",...e.hasScheduler?[" private schedulerDeclaration?: SchedulerDeclaration<Env>;"]:[],...m(e)?[" private readonly shardExtras: Partial<ShardConfig> = {};"]:[]," private shardSelector?: Selector<Env, ShardNamespaceLike>;",...e.hasStorage?[" private storageDeclaration?: StorageDeclaration<Env>;"]:[]],q=e=>b.filter(([t])=>e[t]).map(([,t,a,r])=>` /** ${r} */
1
+ import{A as w,G as k}from"./emit-CBLJHtDY.mjs";const y=e=>`has${e.charAt(0).toUpperCase()}${e.slice(1)}`,b=w.map(({appMethod:e,key:t})=>[y(t),e.method,e.configKey,e.doc]),m=e=>b.some(([t])=>e[t]),S=e=>e?['import * as lunoraIdentityContract from "../identity.js";']:[],E=(e,t)=>e?['import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";',`import { createAccessResolver${t?", composeResolvers":""} } from "@lunora/cloudflare-access";`]:[],D=e=>e?['import { createKvIntrospectorFromEnv } from "@lunora/bindings/kv";']:[],x=e=>e?['import { createVectorAdminIntrospector } from "@lunora/bindings/vectors";']:[],R=e=>e?['import type { D1CtxDbOptions, D1DatabaseLike, D1Exec } from "@lunora/d1";','import { applyCdcChanges, createD1CtxDb, emitD1QueryCost, exportGlobalRows, facetGlobalColumn, importGlobalRows, listGlobalTables, readD1CdcChanges, readGlobalTablePage, retryingExec } from "@lunora/d1";']:[],A=e=>e?['import notifyConfig from "../notify.js";']:[],g=e=>(e.emailAgents?.length??0)>0,C=e=>g(e)?['import { dispatchAgentEmail } from "@lunora/agent/inbound";']:[],O=e=>g(e)?['import * as lunoraAgentDefinitions from "../agents.js";']:[],T=e=>{const{hasFramework:t,hasGlobal:a,hasHyperdriveGlobal:r,hasQueue:n,useUmbrella:i}=e,o=i?"lunorash/runtime":"@lunora/runtime",l=["ExecutionContextLike","HttpRouterLike","LunoraWorker","Route","ScheduledControllerLike","ShardNamespaceLike","WorkerOptions",...n?["TriggerTrace"]:[],...a?["GlobalIntrospector","AdminTableResolver"]:[],...t?["FrameworkHostHandler"]:[]],s=[...a||r?["createCrossShardRelationCapabilities"]:[],"createWorker","resolveLogArchiveFromEnv",...t?["withFrameworkWorker"]:[]].join(", ");return[`import type { ${[...l].toSorted((c,d)=>c.localeCompare(d)).join(", ")} } from "${o}";`,`import { ${s} } from "${o}";`]},I=e=>{const{hasAccess:t,hasAuth:a,hasGlobal:r,hasHyperdriveGlobal:n,hasKvIntrospector:i,hasQueue:o,hasScheduler:l,hasStorage:s,hasWorkflow:c,wantsOpenApi:d,wantsOpenRpc:h}=e;return[...a?['import type { AuthNamespaceLike, LunoraAuth, LunoraAuthOptions } from "@lunora/auth";','import { createAuth, createAuthAdmin, createAuthAuditReader, createDoAuthWiring, d1Executor, ensureMigrated, handleAuthRequest, lunoraD1Adapter } from "@lunora/auth";']:[],...E(t,a),...R(r),...n?['import type { HyperdriveEngine } from "@lunora/hyperdrive/global";','import { createHyperdriveGlobalCtxDb } from "@lunora/hyperdrive/global";','import type { SqlCtxDbOptions, SqlExec } from "@lunora/sql-store";']:[],...D(i),...x(e.hasVectors===!0),...l?['import type { DurableObjectNamespaceLike } from "@lunora/scheduler";','import { createScheduler } from "@lunora/scheduler";']:[],...s?['import type { R2BucketLike, R2S3Credentials, Storage } from "@lunora/storage";','import { createBucketStorage, createStorage } from "@lunora/storage";']:[],...c?['import { createWorkflowsRestClient } from "@lunora/workflow";']:[],...C(e),...T(e),"",...S(e.identity),...O(e),...r||n?['import schema from "../schema.js";']:[],...A(e.hasNotify),'import { LUNORA_CRONS } from "./crons.js";','import { LUNORA_FUNCTIONS } from "./functions.js";',...o?['import { createQueueCaptureSink, dispatchQueueBatch, shouldCaptureQueue } from "@lunora/queue";','import { LUNORA_QUEUE_REGISTRY } from "./queues.js";']:[],...d?['import { openApiSpec } from "./openapi.js";']:[],...h?['import { openRpcSpec } from "./openrpc.js";']:[],'import { createShardDO } from "./shard.js";',...e.hasVectors===!0?['import { LUNORA_VECTOR_INDEXES } from "./vectors.js";']:[]]},L=e=>[...e.hasStorage?['/** `.storage(...)` declaration — one bucket (required) plus optional extra named buckets and signed-URL config. Backs `ctx.storage` AND the studio file browser. */\ninterface StorageDeclaration<Env> {\n /** The default R2 bucket binding (the bare `ctx.storage`). */\n bucket: Selector<Env, R2BucketLike>;\n /** Extra named buckets, reached via `ctx.storage.bucket("name")` and the studio\'s bucket picker. */\n buckets?: Record<string, Selector<Env, R2BucketLike>>;\n /** Public base URL signed/public object URLs resolve against. */\n publicBaseUrl?: Selector<Env, string>;\n /** R2 S3-API credentials (`{ accountId, accessKeyId, secretAccessKey, bucket, jurisdiction? }`) enabling `ctx.storage.getPresignedUrl` — native S3 presigned URLs that hit R2 directly, bypassing the worker. Omit to use only the worker-signed `getSignedUrl` path. */\n s3?: Selector<Env, R2S3Credentials>;\n /** HMAC secret for signed URLs. */\n signingSecret?: Selector<Env, string>;\n}']:[],...e.hasScheduler?["/** `.scheduler(...)` declaration — the `SchedulerDO` namespace. Backs `ctx.scheduler` AND the studio's scheduled-jobs view. The origin its callbacks dispatch back to is not declared here: the DO reads `env.LUNORA_ORIGIN_URL` at fire time, because a caller-supplied dispatch target would be an SSRF vector. */\ninterface SchedulerDeclaration<Env> {\n /** The `SchedulerDO` namespace binding (typically `env.SCHEDULER`). */\n namespace: Selector<Env, DurableObjectNamespaceLike & ShardNamespaceLike>;\n}"]:[],...e.hasGlobal?["/** `.global(...)` declaration — the D1 binding backing `.global()` tables. Backs cross-tenant `ctx.db` reads/writes AND the studio's global data browser. */\ninterface GlobalDeclaration<Env> {\n /** The D1 binding (typically `env.DB`). */\n d1: Selector<Env, D1DatabaseLike>;\n /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n origin?: Selector<Env, string>;\n}"]:[],...e.hasHyperdriveGlobal?['/** `.hyperdriveGlobal(...)` declaration — backs `.global({ backend: "hyperdrive" })` tables on a Postgres/MySQL database via Hyperdrive. Stays reactive: the writer is injected as `globalDb` and the broadcast hook drives live queries. */\ninterface HyperdriveGlobalDeclaration<Env> {\n /** The Hyperdrive engine — selects the Postgres or MySQL dialect. */\n engine: HyperdriveEngine;\n /** Build the `SqlExec` from `env` — e.g. `buildPgExec(fromPostgresJs(postgres(env.HYPERDRIVE.connectionString)))`. Cache the driver on the DO instance; rebuild lazily after hibernation. */\n exec: (env: Env) => SqlExec;\n /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n origin?: Selector<Env, string>;\n}']:[],...e.hasAuth?['/** `.auth(...)` declaration — better-auth options plus the storage the adapter reads. Give it `d1` (the default) or `namespace` (a Durable Object that hosts the auth tables), never both. The builder owns the lazy build + `ensureMigrated` dance and wires `authHandler` / `resolveIdentity` / `authAdmin`. */\ninterface AuthDeclaration<Env> {\n /** The D1 binding the auth SQL adapter is wired over (via `lunoraD1Adapter`). Omit only when using `namespace`. */\n d1?: Selector<Env, unknown>;\n /** Shared secret the worker presents on the object\'s internal session route. REQUIRED with `namespace`: the binding is reachable from any worker bound to it, so the secret — not the binding — is the authorization boundary. Without it identity resolution fails closed. */\n internalSecret?: Selector<Env, string>;\n /** Name of the Durable Object instance holding the auth tables. Defaults to `"auth"`. Set it to run separate auth objects (per deployment, per tenant) off one namespace. */\n objectName?: Selector<Env, string>;\n /** The auth Durable Object namespace — the DO-backed mode. Needed for `@better-auth/scim`, which requires native transactions that D1 has none of. The object owns the auth tables, so `/api/auth/*` and identity resolution both go through it. Typed as `AuthNamespaceLike` because `createDoAuthWiring` resolves through `idFromName` + `get` and has no `getByName` fallback — both members are load-bearing here, and `ShardNamespaceLike` leaves both optional. */\n namespace?: Selector<Env, AuthNamespaceLike>;\n /** Build the better-auth options from `env` (secret, plugins, email/password, …). */\n options: (env: Env) => LunoraAuthOptions;\n}']:[]],N=e=>[...e.hasAccess?[" private accessSelector?: Selector<Env, CreateAccessResolverOptions | undefined>;"]:[]," private adminToken?: Selector<Env, string>;",...e.hasAuth?[" private authDeclaration?: AuthDeclaration<Env>;"]:[]," private cdcEnabled = false;"," private reactiveCacheConfig: boolean | { maxBytes?: number; maxEntries?: number } = false;",' private maxRelationKeysLimit?: ShardConfig["maxRelationKeys"];',' private observabilitySink?: ShardConfig["observability"];',' private relationExistsPushDownMode?: ShardConfig["relationExistsPushDown"];'," private readonly extendFns: ((env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>)[] = [];",...e.hasGlobal?[" private globalDeclaration?: GlobalDeclaration<Env>;"]:[],...e.hasHyperdriveGlobal?[" private hyperdriveGlobalDeclaration?: HyperdriveGlobalDeclaration<Env>;"]:[]," private httpRouterApp?: HttpRouterLike;"," private readonly routeMap: Record<string, Route> = {};",...e.hasScheduler?[" private schedulerDeclaration?: SchedulerDeclaration<Env>;"]:[],...m(e)?[" private readonly shardExtras: Partial<ShardConfig> = {};"]:[]," private shardSelector?: Selector<Env, ShardNamespaceLike>;",...e.hasStorage?[" private storageDeclaration?: StorageDeclaration<Env>;"]:[]],q=e=>b.filter(([t])=>e[t]).map(([,t,a,r])=>` /** ${r} */
2
2
  public ${t}(factory: (env: Env) => ReturnType<NonNullable<ShardConfig["${a}"]>>): this {
3
3
  this.shardExtras.${a} = factory as NonNullable<ShardConfig["${a}"]>;
4
4
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@lunora/codegen",
3
- "version": "1.0.0-alpha.177",
3
+ "version": "1.0.0-alpha.179",
4
4
  "description": "Code generator for Lunora: emits _generated/{api,server,dataModel}.ts from your schema",
5
5
  "keywords": [
6
6
  "cloudflare",
@@ -46,15 +46,15 @@
46
46
  "access": "public"
47
47
  },
48
48
  "dependencies": {
49
- "@lunora/advisor": "1.0.0-alpha.126",
50
- "@lunora/agent": "1.0.0-alpha.106",
51
- "@lunora/container": "1.0.0-alpha.48",
52
- "@lunora/errors": "1.0.0-alpha.35",
53
- "@lunora/platform": "1.0.0-alpha.29",
54
- "@lunora/queue": "1.0.0-alpha.53",
55
- "@lunora/scheduler": "1.0.0-alpha.69",
56
- "@lunora/values": "1.0.0-alpha.44",
57
- "@lunora/workflow": "1.0.0-alpha.50",
49
+ "@lunora/advisor": "1.0.0-alpha.128",
50
+ "@lunora/agent": "1.0.0-alpha.108",
51
+ "@lunora/container": "1.0.0-alpha.49",
52
+ "@lunora/errors": "1.0.0-alpha.36",
53
+ "@lunora/platform": "1.0.0-alpha.30",
54
+ "@lunora/queue": "1.0.0-alpha.54",
55
+ "@lunora/scheduler": "1.0.0-alpha.71",
56
+ "@lunora/values": "1.0.0-alpha.45",
57
+ "@lunora/workflow": "1.0.0-alpha.51",
58
58
  "jiti": "^2.7.0",
59
59
  "quicktype-core": "^26.0.0",
60
60
  "ts-morph": "^28.0.0"
@@ -1 +0,0 @@
1
- import{NODE_CAPABILITIES as f,CLOUDFLARE_CAPABILITIES as h}from"@lunora/platform";import{readProjectConfigLiterals as g}from"./PROJECT_CONFIG_FILENAMES-D29yBg5X.mjs";const c="cloudflare",v=t=>{const{target:e}=g(t);return e!==void 0&&e.length>0?e:void 0},x=(t,e)=>e??v(t)??c,L=(t,e)=>{if(e!==void 0)return[];const{target:a,unreadable:o}=g(t);return o!==!0||a!==void 0?[]:[{level:"warn",message:`lunora.config declares a \`target\` that codegen cannot read without evaluating it, so the "${c}" surface was emitted. \`runCodegen\` resolves the target synchronously, which means it reads literals only.`,name:"platform_unreadable_target",remediation:`Write \`target\` as a string literal on the config's default export (\`export default { target: "${c}" }\`), or pass \`--target\`.`,target:c}]},u={cloudflare:h,node:f},I=()=>Object.keys(u).toSorted((t,e)=>t.localeCompare(e)),b={access:null,ai:"ai",analytics:"analytics",browser:"browser",container:"containers",flags:null,hyperdrive:"hyperdrive",images:"images",kv:"keyValueStore",mail:"mail",notify:null,payments:null,pipelines:"pipelines",r2sql:null,scheduler:"scheduler",storage:"objectStorage",vectors:"vectorStore",workflows:"workflows",x402:null},y=["agents","commitOrderedTables","cronTriggers","crossShardFanout","durableStreams","globalTables","queues","secrets","vectorStore"],m={agents:"durable agents (`defineAgent`)",commitOrderedTables:"commit-ordered tables (`.commitOrdered()`)",cronTriggers:"declared cron triggers (`cronJobs()`)",crossShardFanout:"cross-shard fan-out queries (a `.shardBy(...)` schema)",durableStreams:"durable streams (`.stream(handler, { durable: true })`)",globalTables:"global tables (`.global()`)",queues:"queues (`defineQueue`)",secrets:"the secrets store (`ctx.secrets`)",vectorStore:"vector indexes (`.vectorize()`)"},S=(t,e,a)=>({level:"error",message:`${e.name} does not support ${m[t]}, which this app declares.`,name:"platform_unsupported_feature",remediation:`Remove the declaration, or deploy to a target whose capability matrix marks "${t}" as native or emulated.`,target:a}),T=(t,e,a)=>({level:"error",message:`${e.name}'s capability matrix does not declare a support level for ${m[t]}, which this app declares. Treated as unsupported.`,name:"platform_undeclared_feature",remediation:`Rate "${t}" in the ${e.name} capability matrix as "native", "emulated", or "unsupported" — an undeclared feature fails closed rather than letting the app deploy onto a primitive the host may not provide.`,target:a}),_=t=>{const{diagnostics:e,gatedSignals:a,matrix:o,reported:i,signals:d,target:n}=t;for(const s of y){if(d[s]!==!0)continue;const r=o.features[s]?.level;r!=="unsupported"&&r!==void 0||(a[s]=!1,!i.has(s)&&e.push(r==="unsupported"?S(s,o,n):T(s,o,n)))}},$=(t,e,a,o={})=>{const i={...t},d={...o},n=[],s=new Set;for(const[r,l]of Object.entries(b)){if(l===null||!t[r])continue;const p=e.features[l]?.level;p==="unsupported"?(i[r]=!1,s.add(l),n.push({feature:r,level:"error",message:`${e.name} does not support "${r}" (ctx.${r}).`,name:"platform_unsupported_feature",remediation:`Remove the ctx.${r} usage, or deploy to a target whose capability matrix marks "${l}" as native or emulated.`,target:a})):p===void 0&&(i[r]=!1,s.add(l),n.push({feature:r,level:"error",message:`${e.name}'s capability matrix does not declare a support level for "${r}" (ctx.${r}). Treated as unsupported.`,name:"platform_undeclared_feature",remediation:`Rate "${l}" in the ${e.name} capability matrix as "native", "emulated", or "unsupported" — an undeclared feature fails closed rather than shipping a surface the host may not provide.`,target:a}))}return _({diagnostics:n,gatedSignals:d,matrix:e,reported:s,signals:o,target:a}),{diagnostics:n,signals:d,usage:i}},O=(t,e,a={})=>{const o=u[e];return o===void 0?{diagnostics:[{level:"error",message:`Unknown deploy target "${e}" — no capability matrix is registered for it. Codegen emitted the full Cloudflare surface un-gated.`,name:"platform_unknown_target",remediation:`Use a registered target (${Object.keys(u).join(", ")}) or install the target's @lunora/platform-${e} package.`,target:e}],signals:{...a},usage:{...t}}:$(t,o,e,a)};export{b as CAPABILITY_TO_FEATURE,c as DEFAULT_TARGET,$ as gateAgainstMatrix,O as gatePlatformFeatures,I as platformMatrixIds,v as readProjectTarget,L as readTargetDiagnostics,x as resolveCodegenTarget};
@@ -1,9 +0,0 @@
1
- import{existsSync as b,mkdirSync as Ss,readFileSync as Dt,writeFileSync as ys,rmSync as As}from"node:fs";import{join as f,dirname as ee}from"node:path";import{performance as Ee}from"node:perf_hooks";import{runAdvisor as Ns}from"@lunora/advisor";import{LunoraError as D}from"@lunora/errors";import{SyntaxKind as l,Node as i,Project as at}from"ts-morph";import{serializeSchemaSnapshot as bs}from"./SCHEMA_SNAPSHOT_VERSION-CWESEYLi.mjs";import{toAdvisorContext as Ps}from"./formatAdvisories-CkEu1eye.mjs";import{s as Is}from"./paths-C-9fwEgQ.mjs";import{C as te,o as kt,j as ws,f as Ts,k as Cs,b as Fs,c as Os,m as Rs,e as Ls,p as Ds,d as ks,i as Ms,l as Ks,g as _s,q as zs,n as $s,a as Us,h as qs}from"./emit--q1dVF6Z.mjs";import{isD1GlobalTable as Mt,isHyperdriveGlobalTable as Kt}from"./isD1GlobalTable-udvHAAzD.mjs";import{discoverAgents as Bs}from"./AGENTS_FILENAME-B78F7DuQ.mjs";import{discoverContainers as Vs}from"./CONTAINERS_FILENAME-CQoUu7n7.mjs";import Ws from"./discoverCrons-CMu0sA8k.mjs";import{diagnosticAt as ce}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{b as le}from"./module-specifiers-WF8iAydP.mjs";import{listLunoraSourceFiles as h,unwrapExpression as H,listSecurityScanFiles as Te,objectLiteralFromCallbackBody as _t,propertyInitializer as N,lunoraRelativePath as E,collectCallRows as I,collectSecurityCallRows as js,limitNameOf as zt,isContextIdentifier as Ne,handlerOf as Hs,isDatabaseAccessor as k,readTargetOf as $t,enclosingExportName as Gs}from"./listLunoraSourceFiles-D4xthUf-.mjs";import Ys from"./readPackageDependencies-C6h6FZuP.mjs";import{discoverQueues as Qs}from"./QUEUES_FILENAME-Q3CF3uYr.mjs";import{discoverSandboxUsage as Xs}from"./discoverSandboxUsage-DskdDbkM.mjs";import Zs from"./discoverStorageRulesMetadata-xhxu-mkS.mjs";import{a as y,c as M,d as Ut,e as Js}from"./classify-procedure-call-C8jbo0IJ.mjs";import{discoverWorkflows as en}from"./WORKFLOWS_FILENAME-BaSbufF2.mjs";import{gatePlatformFeatures as tn,resolveCodegenTarget as sn,readTargetDiagnostics as nn}from"./DEFAULT_TARGET-Ek8LuFzn.mjs";import{i as L,a as z,e as S,r as rn,b as on,s as ue,c as an,f as cn,d as ln}from"./queries-CPlxXagL.mjs";import{r as de,s as un}from"./parse-validator-tdRHHDzh.mjs";import dn from"./discoverAuthApiCalls-DoblmzUW.mjs";import ct from"./discoverFunctions-DB9G_XrW.mjs";import{i as fn,r as gn,e as pn}from"./unwrap-handler-return-CmIWbykC.mjs";import lt from"./discoverHttpRoutes-S81Iv_iB.mjs";import mn from"./discoverHyperdriveCalls-DgAYcZRD.mjs";import hn from"./discoverInserts-COk-Sm_n.mjs";import{m as Ce,a as ne,s as qt,d as xn}from"./index-D_Z8rX-f.mjs";import{e as Bt}from"./exported-procedure-chains-C9FHwphy.mjs";import vn from"./discoverMigrations-B_sYrTyE.mjs";import{MUTATORS_FILENAME as En,isDefineMutatorCallee as Sn,discoverMutators as ut}from"./MUTATORS_FILENAME-CTHlZ1j6.mjs";import yn from"./discoverNondeterministicCalls-DkVVHe3U.mjs";import{discoverNotifyConfig as An,discoverNotifyCalls as Nn}from"./NOTIFY_FILENAME-CZh4jN4q.mjs";import bn from"./discoverR2sqlCalls-6u0OKy2N.mjs";import Pn from"./discoverRlsProcedures-vJZq3yhb.mjs";import In from"./discoverRlsMetadata-CwWRPb8N.mjs";import wn from"./discoverSchema-DoZtXwLg.mjs";import{secretKindOf as Tn,redact as Cn,isHeuristicSecretKind as Fn,isSecretishName as On}from"./redact-Cy14LEnc.mjs";import{discoverShapes as Rn}from"./SHAPES_FILENAME-Bvd5kgsF.mjs";import{emitApp as Ln}from"./emitApp-BvtMC-v2.mjs";import{buildOpenApiDocument as Dn,emitOpenApiModule as kn}from"./buildOpenApiDocument-CigTjXCT.mjs";import{buildOpenRpcDocument as Mn,emitOpenRpcModule as Kn}from"./OPENRPC_VERSION-aiXFn-WI.mjs";import{buildSchemaSnapshot as _n}from"./SchemaSnapshotParseError-yrVM8bTa.mjs";const dt=(e,t="api")=>{const s=new Map;for(const n of e){const o=Is(n),r=s.get(o);if(r===void 0){s.set(o,n);continue}if(r!==n){const a=t==="api"?`the generated api.ts would declare "${o}" twice and the dispatch key "${o}:<fn>" would be ambiguous`:`the generated api.ts would declare "${o}" twice in HttpStreamsRef and again in the httpStreams object literal`;throw new D("INTERNAL",`@lunora/codegen: "${r}" and "${n}" both map to the ${t} namespace "${o}" — ${a}. Rename one file so the two differ by more than a non-identifier character (\`-\`, \`.\`, \`/\` and \`_\` all sanitize to \`_\`).`,{status:500})}}},zn=(e,t={})=>{const{hasVectors:s=!0,scheduler:n=!1,storage:o=!1,usage:r}=t,a=[];e.tables.some(c=>Mt(c))&&a.push({name:"@lunora/d1",reason:"`.global()` tables are D1-backed, so `_generated/app.ts` imports the D1 `ctx.db` adapter"}),e.tables.some(c=>Kt(c))&&a.push({name:"@lunora/hyperdrive",reason:'`.global({ backend: "hyperdrive" })` tables route through `@lunora/hyperdrive/global`'},{name:"@lunora/sql-store",reason:'`.global({ backend: "hyperdrive" })` makes `_generated/app.ts` import the `SqlCtxDbOptions` / `SqlExec` types'}),n&&a.push({name:"@lunora/scheduler",reason:"a declared cron (or `ctx.scheduler` use) makes `_generated/app.ts` import `createScheduler`"}),o&&a.push({name:"@lunora/storage",reason:"a `v.storage()` column, a storage access rule (or `ctx.storage` use) makes `_generated/app.ts` import `createStorage`"}),e.vectorIndexes.length>0&&s&&a.push({name:"@lunora/bindings",reason:"`.vectorize()` indexes make `_generated/shard.ts` import `@lunora/bindings/vectors`"});for(const c of r===void 0?[]:te)c.requiredPackage!==void 0&&r?.[c.key]===!0&&a.push({name:c.requiredPackage,reason:`\`ctx.${c.contextProperty??c.key}\` usage makes \`_generated/\` import \`${c.moduleSpecifier}\``});return a.filter((c,u)=>a.findIndex(d=>d.name===c.name)===u)},$n=(e,t,s={})=>{if(t===void 0)return;const n=zn(e,s).filter(r=>!t.has(r.name));if(n.length===0)return;const o=n.map(r=>` - ${r.name} — ${r.reason}`).join(`
2
- `);throw new D("INTERNAL",`@lunora/codegen: this schema's generated code imports packages the project does not declare:
3
- ${o}
4
-
5
- Install them with your package manager, then re-run codegen.`)},Un="env.ts",qn=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineEnv";for(const s of t.getDeclarations())if(i.isImportSpecifier(s))return le(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineEnv":!1;return!1},Bn=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!i.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&le(n.getModuleSpecifierValue())}return!1},Vn=e=>{if(i.isIdentifier(e))return qn(e);if(i.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineEnv"&&i.isIdentifier(t)&&Bn(t)}return!1},Wn=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!Vn(n.getExpression()))continue;const r=s.getNameNode();if(!i.isIdentifier(r))throw ce(r,"defineEnv exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},jn=(e,t)=>{const s=f(t,Un);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),o=Wn(n);if(o.length!==0){if(o.length>1)throw ce(n,`lunora/env.ts declares ${o.length.toString()} defineEnv() contracts (${o.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return o[0]}},ft="ctx",Vt=e=>{const t=new Set,s=new Set([ft]),n=r=>{if(i.isObjectBindingPattern(r))for(const a of r.getElements()){const c=a.getPropertyNameNode()?.getText()??a.getName();c&&t.add(c)}};for(const r of e.getDescendantsOfKind(l.BindingElement)){if((r.getPropertyNameNode()?.getText()??r.getName())!==ft)continue;const a=r.getNameNode();i.isIdentifier(a)?s.add(a.getText()):n(a)}const o=r=>i.isIdentifier(r)&&s.has(r.getText());for(const r of e.getDescendantsOfKind(l.PropertyAccessExpression))o(r.getExpression())&&t.add(r.getName());for(const r of e.getDescendantsOfKind(l.VariableDeclaration)){const a=r.getInitializer();a!==void 0&&o(a)&&n(r.getNameNode())}return t},Hn=(e,t)=>{const s=Object.fromEntries(te.map(n=>[n.key,!1]));for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=new Set(o.getImportDeclarations().map(c=>c.getModuleSpecifierValue())),a=Vt(o);for(const c of te)if(!s[c.key]){if(r.has(c.moduleSpecifier)){s[c.key]=!0;continue}c.contextProperty!==void 0&&a.has(c.contextProperty)&&(s[c.key]=!0)}if(te.every(c=>s[c.key]))break}return s},Wt="identity.ts",Gn=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineIdentity";for(const s of t.getDeclarations())if(i.isImportSpecifier(s))return le(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineIdentity":!1;return!1},Yn=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!i.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&le(n.getModuleSpecifierValue())}return!1},Qn=e=>{if(i.isIdentifier(e))return Gn(e);if(i.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineIdentity"&&i.isIdentifier(t)&&Yn(t)}return!1},Xn=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!Qn(n.getExpression()))continue;const r=s.getNameNode();if(!i.isIdentifier(r))throw ce(r,"defineIdentity exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},Zn=(e,t)=>{const s=f(t,Wt);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),o=Xn(n);if(o.length!==0){if(o.length>1)throw ce(n,`lunora/identity.ts declares ${o.length.toString()} defineIdentity() contracts (${o.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return o[0]}},Jn=(e,t)=>{const s=H(t);if(s===void 0||!i.isIdentifier(s))return s;const n=s.getText();return H(e.getDescendantsOfKind(l.VariableDeclaration).find(o=>o.getName()===n)?.getInitializer())},er=e=>e!==void 0&&i.isObjectLiteralExpression(e)&&e.getProperties().some(t=>{if(i.isShorthandPropertyAssignment(t))return t.getName()==="durable";if(!i.isPropertyAssignment(t)||t.getName()!=="durable")return!1;const s=t.getInitializer();return s===void 0||H(s)?.getText()!=="false"}),tr=(e,t)=>{const s={durableStreams:!1,secrets:!1};for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);if(s.secrets||(s.secrets=Vt(o).has("secrets")),s.durableStreams||(s.durableStreams=o.getDescendantsOfKind(l.CallExpression).some(r=>{const a=r.getExpression();return(i.isPropertyAccessExpression(a)?a.getName():a.getText())==="stream"&&r.getArguments().some(u=>er(Jn(o,u)))})),s.durableStreams&&s.secrets)break}return s},sr="createWorker",nr="extend",gt=e=>e!==void 0&&(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))?e.getLiteralValue():void 0,pt=e=>{const t=[],s=gt(N(e,"backupCron"));s!==void 0&&t.push(s);const n=N(e,"crons");if(n===void 0||!i.isObjectLiteralExpression(n))return t;for(const o of n.getProperties()){if(!i.isPropertyAssignment(o)&&!i.isMethodDeclaration(o))continue;const r=gt(o.getNameNode());r!==void 0&&t.push(r)}return t},rr=e=>{const t=y(e.getExpression()),[s]=e.getArguments();if(s===void 0)return[];if(t===sr)return i.isObjectLiteralExpression(s)?pt(s):[];if(t!==nr||!(i.isArrowFunction(s)||i.isFunctionExpression(s)))return[];const n=_t(s.getBody());return n===void 0?[]:pt(n)},or=(e,t)=>{const s=[];for(const{filePath:n}of Te(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of o.getDescendantsOfKind(l.CallExpression))s.push(...rr(r))}return[...new Set(s)]},ir=(e,t)=>{const s=new Map,n=new Map,o=new Map;for(const r of e)s.set(r.name,`workflow "${r.exportName}"`),n.set(r.bindingName,`workflow "${r.exportName}"`),o.set(r.className,`workflow "${r.exportName}"`);for(const r of t){const a=s.get(r.name);if(a!==void 0)throw new D("DUPLICATE_WORKFLOW_NAME",`Duplicate deployed name "${r.name}": produced by both ${a} and agent "${r.exportName}". Workflow and agent names share the same wrangler workflows[] array and must be unique together.`,{status:500});const c=n.get(r.bindingName);if(c!==void 0)throw new D("DUPLICATE_WORKFLOW_BINDING",`Duplicate binding "${r.bindingName}": produced by both ${c} and agent "${r.exportName}". Workflow and agent bindings share the same wrangler workflows[] array and must be unique together.`,{status:500});const u=o.get(r.className);if(u!==void 0)throw new D("DUPLICATE_WORKFLOW_CLASS",`Duplicate generated class "${r.className}": produced by both ${u} and agent "${r.exportName}". Workflow and agent export names must yield unique generated class names.`,{status:500})}},ar=e=>{const{lunoraDirectory:t,project:s,projectRoot:n,schema:o}=e,r=Zn(s,t),a=jn(s,t),c=en(s,t),u=Qs(s,t),d=Bs(s,t);ir(c,d);const v=Vs(s,t),x=Zs(s,t),P=Ws(s,t,c,d),K=or(s,t),p=tr(s,t),T=Xs(s,t),O=Hn(s,t);O.browser=O.browser||T.usesSandboxBrowser;const U=tn(O,sn(n,e.target),{agents:d.length>0,commitOrderedTables:o.tables.some(g=>g.commitOrdered===!0),cronTriggers:P.length>0,crossShardFanout:o.tables.some(g=>typeof g.shardMode=="object"),durableStreams:p.durableStreams,globalTables:o.tables.some(g=>g.shardMode==="global"),queues:u.length>0,secrets:p.secrets,vectorStore:o.vectorIndexes.length>0}),A=U.usage,R=U.signals.vectorStore!==!1,$=Ys(n),V=$??new Set,Y=V.has("lunorash");$n(o,$,{hasVectors:R,scheduler:A.scheduler||P.length>0,storage:A.storage||x.rules.length>0||Object.keys(kt(o)).length>0,usage:A});const _=b(f(t,"flags.ts")),C=b(f(t,"notify.ts"));return{agents:d,containers:v,crons:P,dataModelContent:Ts(o),declaredDependencies:$,dependencies:V,entryCronTriggers:K,env:a,featureUsage:A,hasFlags:_,hasNotify:C,identity:r,platformGate:{...U,diagnostics:[...nn(n,e.target),...U.diagnostics]},queues:u,serverContent:ws({agents:d,containers:v,env:a,hasAccessFacade:A.access,hasAi:A.ai,hasAnalytics:A.analytics,hasBrowser:A.browser,hasVectors:R,hasFlags:_,hasHyperdrive:A.hyperdrive,hasImages:A.images,hasKv:A.kv,hasNotify:C,hasPayments:A.payments,hasPipelines:A.pipelines,hasR2sql:A.r2sql,hasX402:A.x402,identity:r,queues:u,schema:o,storageRuleBuckets:x.rules.map(g=>g.bucket),useUmbrella:Y,workflows:c}),storageRulesMetadata:x,usesSandbox:T.usesSandboxBrowser||T.usesSandboxContainer||T.usesSandboxFs,useUmbrella:Y,workflows:c}},jt=new Set(["delete","get","head","options","patch","post","put"]),cr=new Set(["handler","stream"]),lr=/\/(?:_|admin|internal|superuser|sudo|root|debug)/iu,mt=new Set(["ADMIN_TOKEN","adminToken","assertAdmin","assertAuth","auth","Authorization","getSession","identity","isAdmin","requireAdmin","requireAuth","requireRole","verifyAdmin"]),ur=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!jt.has(t.getName()))return;const s=t.getExpression();if(!i.isIdentifier(s)||s.getText()!=="httpRoute")return;const n=e.getArguments()[0];if(!(!n||!i.isStringLiteral(n)))return{method:t.getName().toUpperCase(),path:n.getLiteralValue()}},dr=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;let s=t.getExpression();for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n)||jt.has(n.getName()))break;s=n.getExpression()}return ur(s)},fr=e=>{for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression))if(mt.has(t.getName()))return!0;for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=t.getExpression();if(i.isIdentifier(s)&&mt.has(s.getText()))return!0}return!1},gr=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=s.getExpression();if(!i.isPropertyAccessExpression(n)||!cr.has(n.getName()))return;const o=dr(s);if(!o||!lr.test(o.path))return;const r=s.getArguments()[0],a=r!==void 0&&(i.isArrowFunction(r)||i.isFunctionExpression(r))&&fr(r);return{exportName:e.getName(),file:t,method:o.method,path:o.path,usesGuard:a}},pr=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=gr(o,t);r&&s.push(r)}return s},mr=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...pr(o,E(t,n)))}return s},hr=e=>!i.isPropertyAccessExpression(e)||e.getName()!=="run"?!1:e.getExpression().getText()==="ctx.ai",xr=(e,t)=>{if(!hr(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!L(s)||z(s)))return{exportName:S(e),file:t,line:e.getStartLineNumber()}},vr=(e,t)=>I(e,t,xr),Er=new Set(["generateText","streamText"]),Sr=new Set(["messages","prompt","system"]),yr=[{methods:new Set(["delete","insert","insertManyUnsafe","patch","replace"]),prefixes:["context.db","ctx.db"]},{methods:new Set(["run","runAction","runMutation"]),prefixes:["context","ctx"]},{methods:new Set(["fetch"]),prefixes:["context","ctx"]},{methods:new Set(["queue","send"]),prefixes:["context.email","context.mail","ctx.email","ctx.mail"]}],Ar=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=t.getName(),n=t.getExpression().getText();for(const o of yr)if(o.methods.has(s)&&o.prefixes.some(r=>n===r||n.startsWith(`${r}.`)))return`${n}.${s}`},Nr=e=>{for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=Ar(t);if(s!==void 0)return s}},br=e=>{const t=new Set,s=e.getFirstAncestor(r=>i.isArrowFunction(r)||i.isFunctionExpression(r)||i.isFunctionDeclaration(r)),[n]=s?.getParameters()??[],o=n?.getNameNode();if(o===void 0||!i.isObjectBindingPattern(o))return t;for(const r of o.getElements()){const a=r.getPropertyNameNode()?.getText()??r.getName(),c=r.getNameNode();if(a==="args"&&i.isObjectBindingPattern(c))for(const u of c.getElements())t.add(u.getName())}return t},Pr=e=>{if(rn(e))return!0;const t=br(e);return t.size===0?!1:e.getDescendantsOfKind(l.Identifier).some(s=>t.has(s.getText()))},Ir=e=>{for(const t of e.getProperties()){if(!i.isPropertyAssignment(t)||!Sr.has(t.getName()))continue;const s=t.getInitializer();if(s!==void 0&&Pr(s))return!0}return!1},wr=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=y(n.getExpression());if(o===void 0||!Er.has(o))continue;const[r]=n.getArguments();if(r===void 0||!i.isObjectLiteralExpression(r))continue;let a;for(const c of r.getDescendantsOfKind(l.CallExpression))if(y(c.getExpression())==="tool"&&(a=Nr(c),a!==void 0))break;a!==void 0&&s.push({exportName:S(n),file:t,line:n.getStartLineNumber(),method:o,sideEffect:a,userInputDerived:Ir(r)})}return s},Tr=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...wr(o,E(t,n)))}return s},Cr=e=>{if(!i.isPropertyAccessExpression(e)||e.getName()!=="fetch")return!1;const t=e.getExpression();return i.isIdentifier(t)&&t.getText()==="ctx"},Fr=(e,t)=>{if(!Cr(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!L(s)))return{exportName:S(e),file:t,line:e.getStartLineNumber()}},Or=(e,t)=>I(e,t,Fr),Fe=(e,t=new Set)=>{if(t.has(e))return!0;t.add(e);try{return e.getProperties().some(s=>{if(!i.isSpreadAssignment(s))return!1;const n=de(s.getExpression());return n===void 0||Fe(n,t)})}finally{t.delete(e)}},Rr=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return{objects:[],opaque:!0};const s=t.getProperty("args");if(!s)return{objects:[],opaque:!1};if(!i.isPropertyAssignment(s))return{objects:[],opaque:!0};const n=s.getInitializer(),o=n===void 0?void 0:de(n);return o===void 0?{objects:[],opaque:!0}:{objects:[o],opaque:Fe(o)}},Lr=e=>{const t=[];let s=!1,n=e;for(;i.isCallExpression(n);){const o=n.getExpression();if(!i.isPropertyAccessExpression(o))break;if(o.getName()==="input"){const r=n.getArguments()[0],a=r!==void 0&&i.isExpression(r)?de(r):void 0;a===void 0?s=!0:(t.push(a),s||=Fe(a))}n=o.getExpression()}return{objects:t,opaque:s}},Oe=(e,t)=>t?Lr(t):Rr(e),Ht=(e,t)=>{if(t.has(e))return[];t.add(e);try{return e.getProperties().flatMap(s=>{if(i.isSpreadAssignment(s)){const n=de(s.getExpression());return n===void 0?[]:Ht(n,t)}return i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)?[s.getName()]:[]})}finally{t.delete(e)}},Dr=e=>e.flatMap(t=>Ht(t,new Set)),kr=new Set(["check","length","max"]),be=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(!(!i.isPropertyAccessExpression(t)||t.getExpression().getText()!=="v"))return t.getName()},Mr=e=>[e,...e.getDescendants()].filter(t=>be(t)!==void 0),Kr=e=>{let t=e;for(;;){const s=t.getParent();if(!s||!i.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;const n=s.getParent();if(!n||!i.isCallExpression(n)||n.getExpression()!==s)return!1;if(kr.has(s.getName()))return!0;t=n}},_r=e=>{const t=[],s=[];for(const n of e)for(const o of n.getProperties()){if(!i.isPropertyAssignment(o))continue;const r=o.getInitializer();if(!r)continue;const a=Mr(r),c=o.getName();a.some(u=>be(u)==="any")?t.push(c):a.some(u=>be(u)==="string"&&!Kr(u))&&s.push(c)}return{anyArgs:t,unboundedStringArgs:s}},zr=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=M(s);if(n?.visibility!=="public")return;const{objects:o}=Oe(s,n.receiver),{anyArgs:r,unboundedStringArgs:a}=_r(o);if(!(r.length===0&&a.length===0))return{anyArgs:r,exportName:e.getName(),file:t,line:s.getStartLineNumber(),unboundedStringArgs:a}},$r=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=zr(o,t);r&&s.push(r)}return s},Ur=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...$r(o,E(t,n)))}return s},Se=e=>e?.getKind()===l.TrueKeyword,qr=e=>e?.getKind()===l.FalseKeyword,Br=e=>e!==void 0&&i.isNumericLiteral(e)&&e.getLiteralValue()===0,Vr=new Set(["lunoraAuthAdapter","lunoraD1Adapter"]),Wr=e=>!e||!i.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>i.isCallExpression(t)&&y(t.getExpression())==="scim"),jr=e=>e!==void 0&&i.isCallExpression(e)&&Vr.has(y(e.getExpression())??""),Hr=e=>!e||!i.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>i.isStringLiteral(t)&&t.getLiteralText()==="*"),Gr=e=>{const t=N(e,"advanced"),s=N(e,"emailAndPassword"),n=N(e,"session");return{analyzable:!0,disableCsrfCheck:Se(N(t,"disableCSRFCheck")),emailPasswordEnabled:Se(N(s,"enabled")),requireEmailVerification:Se(N(s,"requireEmailVerification")),scimOnNonTransactionalAdapter:Wr(N(e,"plugins"))&&jr(N(e,"database")),secureCookiesDisabled:qr(N(t,"useSecureCookies")),sessionFreshAgeZero:Br(N(n,"freshAge")),trustedOriginsWildcard:Hr(N(e,"trustedOrigins"))}},Yr=()=>({analyzable:!1,disableCsrfCheck:!1,emailPasswordEnabled:!1,requireEmailVerification:!1,scimOnNonTransactionalAdapter:!1,secureCookiesDisabled:!1,sessionFreshAgeZero:!1,trustedOriginsWildcard:!1}),Qr=(e,t)=>{if(y(e.getExpression())!=="createAuth")return;const s=e.getArguments()[0],n=s!==void 0&&i.isObjectLiteralExpression(s)&&s.getProperties().some(r=>i.isSpreadAssignment(r)),o=s!==void 0&&i.isObjectLiteralExpression(s)&&!n?Gr(s):Yr();return{exportName:S(e),file:t,line:e.getStartLineNumber(),...o}},Xr=(e,t)=>js(e,t,Qr),Zr=(e,t)=>{if(!i.isPropertyAccessExpression(e))return;const s=e.getName();if(t.methods.has(s))return t.matchReceiver(e.getExpression().getText())?s:void 0},Jr=(e,t,s)=>{const n=Zr(e.getExpression(),s);if(n===void 0)return;const o=e.getArguments()[s.argIndex];if(!(!o||!L(o)||z(o))&&!(s.requireUnmodifiedReach===!0&&!on(o)))return{exportName:S(e),file:t,line:e.getStartLineNumber(),method:n}},eo=(e,t,s)=>{const n=[];for(const o of e.getDescendantsOfKind(l.CallExpression)){const r=Jr(o,t,s);r&&n.push(r)}return n},fe=(e,t,s)=>{const n=[];for(const o of h(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);n.push(...eo(r,E(t,o),s))}return n},to=new Set(["content","pdf","scrape","screenshot"]),so=(e,t)=>fe(e,t,{argIndex:0,matchReceiver:s=>s==="ctx.browser",methods:to}),no=new Set(["createBrowser","createInboundEmailHandler","createPayment"]),ro=new Set(["RateLimiter"]),oo=new Set(["extend"]),ht="lunora",io=["vite.config.ts","vite.config.mts","vite.config.js","vite.config.mjs"],Gt=e=>{const t=[],s=[];let n=!1;for(const o of e.getProperties()){if(i.isSpreadAssignment(o)){n=!0;continue}if(i.isPropertyAssignment(o)){const r=o.getName();t.push(r),o.getInitializer()?.getKind()===l.TrueKeyword&&s.push(r);continue}(i.isShorthandPropertyAssignment(o)||i.isMethodDeclaration(o))&&t.push(o.getName())}return{analyzable:!n,presentKeys:t,trueKeys:s}},Pe=e=>e&&i.isObjectLiteralExpression(e)?Gt(e):{analyzable:!1,presentKeys:[],trueKeys:[]},ao=e=>{const t=e&&(i.isArrowFunction(e)||i.isFunctionExpression(e))?e:void 0,s=t&&_t(t.getBody());return s?Gt(s):{analyzable:!1,presentKeys:[],trueKeys:[]}},co=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=y(n.getExpression());o!==void 0&&(no.has(o)?s.push({callee:o,file:t,line:n.getStartLineNumber(),...Pe(n.getArguments()[0])}):oo.has(o)&&s.push({callee:o,file:t,line:n.getStartLineNumber(),...ao(n.getArguments()[0])}))}for(const n of e.getDescendantsOfKind(l.NewExpression)){const o=y(n.getExpression());o===void 0||!ro.has(o)||s.push({callee:o,file:t,line:n.getStartLineNumber(),...Pe(n.getArguments()[0])})}return s},lo=(e,t)=>{for(const s of io){const n=f(t,s);if(!b(n))continue;const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=[];for(const a of o.getDescendantsOfKind(l.CallExpression))y(a.getExpression())===ht&&r.push({callee:ht,file:s,line:a.getStartLineNumber(),...Pe(a.getArguments()[0])});return r}return[]},uo=(e,t)=>{const s=[];for(const{displayPath:n,filePath:o}of Te(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);s.push(...co(r,n))}return s.push(...lo(e,ee(t))),s},xt="ctx.containers.",fo=e=>{if(!e.startsWith(xt))return!1;const t=e.slice(xt.length);return t.length>0&&!t.includes(".")},go=(e,t)=>fe(e,t,{argIndex:0,matchReceiver:fo,methods:new Set(["get"])}),po=new Set(["allow","deny","setAllowed"]),mo=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return!1;const s=t.getProperty("enableInternet");return s!==void 0&&i.isPropertyAssignment(s)&&i.isTrueLiteral(s.getInitializerOrThrow())},ho=(e,t)=>{const s=e.getExpression();if(!(!i.isPropertyAccessExpression(s)||s.getName()!=="start"||!mo(e)))return{detail:"enableInternet: true",exportName:S(e),file:t,kind:"enable_internet",line:e.getStartLineNumber()}},xo=(e,t)=>{const s=e.getExpression();if(!i.isPropertyAccessExpression(s)||!po.has(s.getName()))return;const n=s.getExpression();if(!(!i.isPropertyAccessExpression(n)||n.getName()!=="egress"))return{detail:s.getName(),exportName:S(e),file:t,kind:"egress_relaxation",line:e.getStartLineNumber()}},vo=(e,t)=>ho(e,t)??xo(e,t),Eo=(e,t)=>I(e,t,vo),So=new Set(["defineExportSink","r2Sink","webhookExportSink"]),yo=e=>{const t=e.getExpression();if(!i.isIdentifier(t))return;const s=t.getText();return So.has(s)?s:void 0},Ao=e=>{const t=[],s=[];for(const n of e.getProperties()){if(i.isSpreadAssignment(n))return{analyzable:!1,emptyKeys:[],presentKeys:[]};if(i.isPropertyAssignment(n)){const o=n.getName();t.push(o);const r=n.getInitializer();r&&i.isStringLiteral(r)&&r.getLiteralText()===""&&s.push(o);continue}(i.isShorthandPropertyAssignment(n)||i.isMethodDeclaration(n)||i.isGetAccessorDeclaration(n))&&t.push(n.getName())}return{analyzable:!0,emptyKeys:s,presentKeys:t}},No=(e,t)=>{const s=[];for(const{displayPath:n,filePath:o}of Te(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);for(const a of r.getDescendantsOfKind(l.CallExpression)){const c=yo(a);if(c===void 0)continue;const u=a.getArguments()[0],d=u&&i.isObjectLiteralExpression(u)?Ao(u):{analyzable:!1,emptyKeys:[],presentKeys:[]};s.push({analyzable:d.analyzable,emptyKeys:d.emptyKeys,factory:c,file:n,line:a.getStartLineNumber(),presentKeys:d.presentKeys})}}return s},bo=new Map([["dbRateLimit",2],["rateLimit",2],["verifyTurnstileMiddleware",0]]),Po=new Set(["dbRateLimit","rateLimit"]),Io=e=>{if(!e||!i.isObjectLiteralExpression(e))return!1;const t=e.getProperty("failOpen");return t!==void 0&&i.isPropertyAssignment(t)&&t.getInitializer()?.getKind()===l.TrueKeyword},wo=(e,t)=>{const s=y(e.getExpression());if(s===void 0)return;const n=bo.get(s);if(n!==void 0)return{callee:s,exportName:S(e),failOpen:Io(e.getArguments()[n]),file:t,limitName:Po.has(s)?zt(e):"",line:e.getStartLineNumber()}},To=(e,t)=>I(e,t,wo),Co=new Set(["boolean","number","object","string"]),Fo=e=>{const t=e.getName();if(!Co.has(t))return;const s=e.getExpression();if(!i.isPropertyAccessExpression(s))return;if(s.getName()==="flags"&&Ne(s.getExpression()))return t;const n=s.getExpression();if(s.getName()==="details"&&i.isPropertyAccessExpression(n)&&n.getName()==="flags"&&Ne(n.getExpression()))return t},Oo=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=Fo(t);if(s===void 0)return;const n=e.getArguments()[0];if(!n||!(i.isStringLiteral(n)||i.isNoSubstitutionTemplateLiteral(n)))return;const o=n.getLiteralValue();return o.length>0?{key:o,type:s}:void 0},Ro=(e,t)=>{const s=new Map;for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of o.getDescendantsOfKind(l.CallExpression)){const a=Oo(r);a&&!s.has(a.key)&&s.set(a.key,a.type)}}return[...s.entries()].map(([n,o])=>({key:n,type:o})).toSorted((n,o)=>n.key.localeCompare(o.key))},Lo=e=>{const t=e.getInitializer();if(!t||!i.isCallExpression(t))return;const s=M(t);if(s?.kind!=="query")return;const n=Hs(t,s.receiver);return n?{exportName:e.getName(),handler:n}:void 0},vt=e=>{const t=e.getParent();return t&&i.isPropertyAccessExpression(t)&&t.getExpression()===e?t:void 0},Do=e=>{if(!i.isPropertyAccessExpression(e)||e.getName()!=="flags")return;const t=e.getExpression();if(!i.isIdentifier(t)||t.getText()!=="ctx")return;const s=vt(e);if(!s)return"ctx.flags";if(s.getName()==="details"){const n=vt(s);return n?`ctx.flags.details.${n.getName()}`:"ctx.flags.details"}return`ctx.flags.${s.getName()}`},ko=(e,t)=>{const s=[];for(const n of e.handler.getDescendantsOfKind(l.PropertyAccessExpression)){const o=Do(n);o!==void 0&&s.push({callee:o,exportName:e.exportName,file:t,line:n.getStartLineNumber()})}return s},Mo=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=Lo(o);r&&s.push(...ko(r,t))}return s},Ko=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Mo(o,E(t,n)))}return s},_o=e=>{if(!i.isPropertyAccessExpression(e)||e.getName()!=="boolean")return!1;const t=e.getExpression();return i.isPropertyAccessExpression(t)&&t.getName()==="flags"&&Ne(t.getExpression())},zo=e=>{if(e?.getKind()===l.TrueKeyword)return!0;if(e?.getKind()===l.FalseKeyword)return!1},$o=(e,t)=>{if(!_o(e.getExpression()))return;const[s,n]=e.getArguments();if(!s||!(i.isStringLiteral(s)||i.isNoSubstitutionTemplateLiteral(s)))return;const o=s.getLiteralValue(),r=zo(n);if(!(o.length===0||r===void 0))return{defaultValue:r,exportName:S(e),file:t,key:o,line:e.getStartLineNumber()}},Uo=(e,t)=>I(e,t,$o),qo=e=>{const t=e.getType().getProperty("~standard");if(!t)return;const s=t.getTypeAtLocation(e).getProperty("types");if(!s)return;const n=s.getTypeAtLocation(e).getNonNullableType().getProperty("output");if(!n)return;const o=n.getTypeAtLocation(e),r=o.getText(e);if(!r||r==="any"||r==="never"||fn(r))return;const a=e.getSourceFile().getFilePath();return gn(o,e,a)?pn(o,e,a,0,new Set):r},Bo=e=>{const t=e.getExpression();return i.isPropertyAccessExpression(t)&&t.getName()==="withGeoIndex"},Vo=e=>{const t=e.getArguments()[0];return t&&i.isStringLiteral(t)?t.getLiteralText():""},Wo=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of o.getDescendantsOfKind(l.CallExpression))Bo(a)&&s.push({file:r,indexName:Vo(a),line:a.getStartLineNumber()})}return s},G=e=>e!==void 0&&(i.isArrowFunction(e)||i.isFunctionExpression(e))?e:void 0,Yt=e=>{const t=e.getArguments()[0],s=G(t);if(s!==void 0)return s;if(t===void 0||!i.isObjectLiteralExpression(t))return;const n=t.getProperty("handler");return n!==void 0&&i.isPropertyAssignment(n)?G(n.getInitializer()):void 0},jo=new Set(["delete","get","head","options","patch","post","put"]),Ho=new Set(["handler","stream"]),Go=new Set(["runAction","runMutation"]),Yo=new Set(["delete","insert","insertManyUnsafe","patch","replace"]),re=(e,t)=>e!==void 0&&i.isIdentifier(e)&&e.getText()===t,Et=(e,t)=>{const s=e.getParameters()[0];if(s===void 0)return;const n=s.getNameNode();if(t)return i.isIdentifier(n)?n.getText():void 0;if(i.isObjectBindingPattern(n)){for(const o of n.getElements())if((o.getPropertyNameNode()?.getText()??o.getNameNode().getText())==="ctx"){const a=o.getNameNode();return i.isIdentifier(a)?a.getText():void 0}}},St=(e,t)=>{const s=e.getBody(),n=s.getDescendantsOfKind(l.CallExpression);i.isCallExpression(s)&&n.unshift(s);for(const o of n){const r=o.getExpression();if(!i.isPropertyAccessExpression(r))continue;const a=r.getName(),c=r.getExpression();if(Go.has(a)&&re(c,t))return a;if(Yo.has(a)&&i.isPropertyAccessExpression(c)&&c.getName()==="db"&&re(c.getExpression(),t))return`db.${a}`}},yt=(e,t)=>{const s=e.getBody();for(const n of s.getDescendantsOfKind(l.PropertyAccessExpression))if(n.getName()==="auth"&&re(n.getExpression(),t))return!0;for(const n of s.getDescendantsOfKind(l.VariableDeclaration)){const o=n.getNameNode();if(!(!i.isObjectBindingPattern(o)||!re(n.getInitializer(),t))){for(const r of o.getElements())if((r.getPropertyNameNode()?.getText()??r.getNameNode().getText())==="auth")return!0}}return!1},Qo=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!Ho.has(t.getName()))return;let s=t.getExpression();for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))return;const o=n.getName();if(jo.has(o)){const r=n.getExpression();return i.isIdentifier(r)&&r.getText()==="httpRoute"?o.toUpperCase():void 0}s=n.getExpression()}},Xo=(e,t)=>{const s=e.getExpression();if(i.isIdentifier(s)&&s.getText()==="httpAction"){const c=G(e.getArguments()[0]),u=c&&Et(c,!0);if(!c||u===void 0)return;const d=St(c,u);return d===void 0?void 0:{exportName:S(e),file:t,kind:"httpAction",line:e.getStartLineNumber(),readsAuth:yt(c,u),sideEffect:d}}const n=Qo(e);if(n===void 0)return;const o=G(e.getArguments()[0]),r=o&&Et(o,!1);if(!o||r===void 0)return;const a=St(o,r);return a===void 0?void 0:{exportName:S(e),file:t,kind:"httpRoute",line:e.getStartLineNumber(),method:n,readsAuth:yt(o,r),sideEffect:a}},Zo=(e,t)=>I(e,t,Xo),Jo=new Set(["btoa","encodeURI","encodeURIComponent","isSafeHeaderValue","Number","parseFloat","parseInt"]),ei=new Set(["append","set"]),Qt=e=>e!==void 0&&(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))?e.getLiteralText():"",At=(e,t)=>(i.isCallExpression(e)?[e,...e.getDescendantsOfKind(l.CallExpression)]:e.getDescendantsOfKind(l.CallExpression)).some(n=>Jo.has(y(n.getExpression())??"")&&cn(n,t)),ti=(e,t)=>{if(At(e,t))return!0;const s=ue(e);return s!==void 0&&At(s,t)},Ie=(e,t)=>an(e,t)&&!ti(e,t),si=e=>{if(i.isPropertyAccessExpression(e)&&e.getName()==="headers")return!0;const t=ue(e);return t!==void 0&&i.isNewExpression(t)&&y(t.getExpression())==="Headers"},oe=e=>{if(e===void 0)return;if(i.isObjectLiteralExpression(e))return e;const t=ue(e);return t!==void 0&&i.isObjectLiteralExpression(t)?t:void 0},Re=(e,t,s)=>{for(const n of e.getProperties())if(i.isPropertyAssignment(n)){const o=n.getInitializer();o!==void 0&&Ie(o,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:Qt(n.getNameNode()),line:o.getStartLineNumber(),via:t})}else if(i.isShorthandPropertyAssignment(n)){const o=n.getNameNode();Ie(o,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:n.getName(),line:o.getStartLineNumber(),via:t})}else if(i.isSpreadAssignment(n)){const o=oe(n.getExpression());o!==void 0&&Re(o,t,s)}},Xt=(e,t)=>{const s=oe(e);if(s===void 0)return;const n=s.getProperty("headers");if(n===void 0||!i.isPropertyAssignment(n))return;const o=oe(n.getInitializer());o!==void 0&&Re(o,"response-init",t)},ni=(e,t)=>{const s=y(e.getExpression());if(s==="Response")Xt(e.getArguments()[1],t);else if(s==="Headers"){const n=oe(e.getArguments()[0]);n!==void 0&&Re(n,"headers-ctor",t)}},ri=(e,t)=>{const s=e.getExpression();if(!i.isPropertyAccessExpression(s))return;const n=s.getName(),o=s.getExpression();if(n==="json"&&i.isIdentifier(o)&&o.getText()==="Response"){Xt(e.getArguments()[1],t);return}if(ei.has(n)&&si(o)){const r=e.getArguments()[1];r!==void 0&&Ie(r,t.requestName)&&t.rows.push({exportName:t.exportName,file:t.relativePath,headerName:Qt(e.getArguments()[0]),line:r.getStartLineNumber(),via:n==="set"?"headers-set":"headers-append"})}},oi=(e,t)=>{for(const s of e.getDescendantsOfKind(l.NewExpression))ni(s,t);for(const s of e.getDescendantsOfKind(l.CallExpression))ri(s,t)},ii=(e,t)=>{const s=e.getExpression();if(!i.isIdentifier(s)||s.getText()!=="httpAction")return[];const n=G(e.getArguments()[0]);if(n===void 0)return[];const o=n.getParameters()[1];if(o===void 0)return[];const r=o.getNameNode();if(!i.isIdentifier(r))return[];const a=[];return oi(n,{exportName:S(e),relativePath:t,requestName:r.getText(),rows:a}),a},ai=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression))s.push(...ii(n,t));return s},ci=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...ai(o,E(t,n)))}return s},li=new Set(["auth","context.auth","ctx.auth"]),ui="userId",di=e=>{const t=new Set;for(const s of e.getProperties()){if(i.isSpreadAssignment(s))return;(i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)||i.isMethodDeclaration(s))&&t.add(s.getName())}return t},fi=(e,t)=>{const s=f(t,Wt);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const o of n.getDescendantsOfKind(l.CallExpression)){if(y(o.getExpression())!=="defineIdentity")continue;const[r]=o.getArguments();return r&&i.isObjectLiteralExpression(r)?di(r):void 0}},Nt=e=>{if(!(e===void 0||!i.isPropertyAccessExpression(e)||e.getName()!=="identity"))return li.has(e.getExpression().getText())?e:void 0},gi=e=>{if(i.isPropertyAccessExpression(e)&&Nt(e.getExpression())!==void 0)return e.getName();if(i.isElementAccessExpression(e)&&Nt(e.getExpression())!==void 0){const t=e.getArgumentExpression();return t&&i.isStringLiteral(t)?t.getLiteralValue():void 0}},pi=(e,t,s)=>{const n=[];for(const o of e.getDescendants()){const r=gi(o);r!==void 0&&n.push({declared:r===ui||s.has(r),exportName:S(o),file:t,key:r,line:o.getStartLineNumber()})}return n},mi=(e,t)=>{const s=fi(e,t);if(s===void 0)return[];const n=[];for(const o of h(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);n.push(...pi(r,E(t,o),s))}return n},hi=(e,t)=>{if(y(e.getExpression())!=="buildImageDeliveryUrl")return;const s=e.getArguments()[0];if(!s)return;const n=N(s,"key");if(!(!n||!L(n)||z(n)))return{exportName:S(e),file:t,line:e.getStartLineNumber()}},xi=(e,t)=>I(e,t,hi),vi=new Set(["delete","get","getRaw","getWithMetadata","put"]),Ei=(e,t,s=[])=>{const n=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));return fe(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.kv"||r.startsWith("ctx.kv."),methods:vi}).map(r=>{const a=n.get(`${r.file}:${r.exportName}`);return a===void 0?r:{...r,visibility:a}})},Si=new Set(["queue","send"]),bt=new Set(["bcc","cc","to"]),yi=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(!Si.has(t))return;const s=e.getExpression().getText();return s==="ctx.mail"||s==="ctx.email"?t:void 0},Ai=e=>i.isObjectLiteralExpression(e)?e.getProperties().some(t=>{if(i.isShorthandPropertyAssignment(t)){const n=t.getNameNode();return bt.has(t.getName())&&L(n)&&!z(n)}if(!i.isPropertyAssignment(t)||!bt.has(t.getName()))return!1;const s=t.getInitializer();return s!==void 0&&L(s)&&!z(s)}):!1,Ni=(e,t)=>{const s=yi(e.getExpression());if(s===void 0)return;const n=e.getArguments()[0];if(!(!n||!Ai(n)))return{exportName:S(e),file:t,line:e.getStartLineNumber(),method:s}},bi=(e,t)=>I(e,t,Ni),Pi=e=>i.isPropertyAssignment(e)||i.isMethodDeclaration(e)||i.isGetAccessorDeclaration(e)?i.isComputedPropertyName(e.getNameNode()):!1,Ii=e=>i.isPropertyAssignment(e)||i.isShorthandPropertyAssignment(e)||i.isMethodDeclaration(e)||i.isGetAccessorDeclaration(e)?Pi(e):!0,Zt=(e,t=!1)=>{for(const s of e.getProperties()){if(Ii(s))return!0;if(t)continue;if(!i.isPropertyAssignment(s))return!0;const n=s.getInitializer();if(!n||!i.isObjectLiteralExpression(n)||Zt(n,!0))return!0}return!1},wi=(e,t)=>{for(const s of h(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const{receiver:o}of Bt(n))for(const r of Ce(o)){const a=r.getArguments()[0];if(a!==void 0&&(!i.isObjectLiteralExpression(a)||Zt(a)))return!0}}return!1},Ti=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return[];const s=[];for(const n of t.getProperties()){const o=ne(n);if(o===void 0||!i.isPropertyAssignment(n))continue;const r=n.getInitializer();if(!(!r||!i.isObjectLiteralExpression(r)))for(const a of r.getProperties()){const c=ne(a);c!==void 0&&s.push({column:c,strategy:qt(a),table:o})}}return s},Ci=(e,t)=>{const s=new Map;for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const{receiver:r}of Bt(o))for(const a of Ce(r))for(const c of Ti(a)){const u=`${c.table}\0${c.column}`;s.has(u)||s.set(u,c)}}return{columns:[...s.values()]}},Fi=(e,t,s)=>{const n=e.getArguments()[0];if(!n||!i.isObjectLiteralExpression(n))return[];const o=[];for(const r of n.getProperties()){const a=ne(r);if(a===void 0||!i.isPropertyAssignment(r))continue;const c=r.getInitializer();if(!(!c||!i.isObjectLiteralExpression(c)))for(const u of c.getProperties()){const d=ne(u);if(d===void 0)continue;const v=qt(u);v!=="custom"&&o.push({column:d,exportName:t,file:s,line:u.getStartLineNumber(),strategy:v,table:a})}}return o},Oi=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?M(s):void 0;return n?.receiver?Ce(n.receiver).flatMap(o=>Fi(o,e.getName(),t)):[]},Ri=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...Oi(c,r))}return s},Li=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="replace")return!1;const s=t.getExpression();return k(s)},Di=e=>{const t=e.getArguments()[0];if(t===void 0||!i.isObjectLiteralExpression(t))return;const s=t.getProperty("server");if(s!==void 0)return i.isPropertyAssignment(s)?s.getInitializer():s},ki=e=>{if(!e.isExported())return;const t=e.getInitializer();if(t?.getKind()!==l.CallExpression)return;const s=t;return Sn(s.getExpression())?s:void 0},Mi=e=>{const t=ki(e),s=t===void 0?void 0:Di(t);if(s===void 0)return[];const n=e.getNameNode(),o=i.isIdentifier(n)?n.getText():"";return s.getDescendantsOfKind(l.CallExpression).filter(r=>Li(r)).map(r=>({exportName:o,file:"lunora/mutators.ts",line:r.getStartLineNumber()}))},Ki=e=>e.getVariableDeclarations().flatMap(t=>Mi(t)),_i=(e,t)=>{const s=f(t,En);if(!b(s))return[];const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);return Ki(n)},zi=new Set(["delete","get","patch"]),$i=new Set(["accountId","authorId","companyId","createdBy","createdById","customerId","groupId","memberId","organizationId","orgId","ownerId","projectId","teamId","tenantId","userId","workspaceId"]),Ui=new Set(["auth","identity","session","user"]),qi=new Set([l.EqualsEqualsEqualsToken,l.EqualsEqualsToken,l.ExclamationEqualsEqualsToken,l.ExclamationEqualsToken]),Bi=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="normalizeId"||!k(t.getExpression()))return;const s=e.getArguments()[0];return s&&i.isStringLiteral(s)?s.getLiteralText():""},Vi=e=>{let t=e,s=t.getParent();for(;s!==void 0&&(i.isAsExpression(s)||i.isParenthesizedExpression(s)||i.isNonNullExpression(s));)t=s,s=t.getParent();if(s===void 0||!i.isVariableDeclaration(s))return;const n=s.getNameNode();return i.isIdentifier(n)?n.getText():void 0},Wi=(e,t)=>e.getDescendantsOfKind(l.Identifier).some(s=>s.getText()===t),ji=e=>i.isThrowStatement(e)||i.isReturnStatement(e)||e.getDescendantsOfKind(l.ThrowStatement).length>0||e.getDescendantsOfKind(l.ReturnStatement).length>0,Hi=(e,t)=>e.getDescendantsOfKind(l.IfStatement).some(s=>Wi(s.getExpression(),t)&&ji(s.getThenStatement())),Gi=(e,t)=>{for(const s of e.getDescendantsOfKind(l.CallExpression)){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))continue;const o=n.getName();if(!zi.has(o))continue;const r=n.getExpression();if(!(k(r)||i.isPropertyAccessExpression(r)&&k(r.getExpression())))continue;const c=s.getArguments()[0];if(c!==void 0&&i.isIdentifier(c)&&c.getText()===t)return o}},Yi=e=>{let t=e;for(;i.isPropertyAccessExpression(t)||i.isElementAccessExpression(t)||i.isNonNullExpression(t)||i.isParenthesizedExpression(t)||i.isAsExpression(t)||i.isAwaitExpression(t);)t=t.getExpression();return i.isIdentifier(t)?t.getText():void 0},Qi=e=>e.getDescendantsOfKind(l.CallExpression).some(t=>t.getArguments().some(s=>Yi(s)==="ctx")),Xi=e=>e.getDescendantsOfKind(l.BinaryExpression).some(t=>qi.has(t.getOperatorToken().getKind())?i.isPropertyAccessExpression(t.getLeft())||i.isPropertyAccessExpression(t.getRight()):!1),Zi=e=>{for(const t of e.getDescendantsOfKind(l.Identifier))if($i.has(t.getText()))return!0;for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression)){const s=t.getExpression();if(i.isIdentifier(s)&&s.getText()==="ctx"&&Ui.has(t.getName()))return!0}return Qi(e)||Xi(e)},Ji=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!i.isCallExpression(s))return[];const n=M(s);if(n?.kind!=="query"&&n?.kind!=="mutation")return[];const o=Yt(s);if(o===void 0)return[];const r=n.receiver!==void 0&&Ut(n.receiver,"use","rls"),a=Zi(o),c=new Set,u=[];for(const d of o.getDescendantsOfKind(l.CallExpression)){const v=Bi(d);if(v===void 0)continue;const x=Vi(d);if(x===void 0||c.has(x)||!Hi(o,x))continue;const P=Gi(o,x);P!==void 0&&(c.add(x),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),mentionsOwnership:a,sinkMethod:P,table:v,usesRls:r,visibility:n.visibility}))}return u},ea=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...Ji(c,r))}return s},ta=new Set(["accountId","authorId","createdBy","createdById","organizationId","orgId","ownerId","tenantId","updatedBy","userId","workspaceId"]),sa=new Set(["insert","insertManyUnsafe","patch","replace"]),na=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(!sa.has(t))return;const s=e.getExpression();if(!i.isPropertyAccessExpression(s)||s.getName()!=="db")return;const n=s.getExpression();return i.isIdentifier(n)&&n.getText()==="ctx"?t:void 0},ra=(e,t)=>{if(t!=="insertManyUnsafe")return i.isObjectLiteralExpression(e)?[e]:[];if(!i.isArrayLiteralExpression(e))return[];const s=[];for(const n of e.getElements())i.isObjectLiteralExpression(n)&&s.push(n);return s},oa=(e,t,s,n)=>{const o=[];for(const r of e.getProperties()){let a,c;i.isPropertyAssignment(r)?(a=r.getName(),c=r.getInitializer()):i.isShorthandPropertyAssignment(r)&&(a=r.getName(),c=r.getNameNode()),!(a===void 0||c===void 0||!ta.has(a))&&L(c)&&!z(c)&&o.push({exportName:S(s),field:a,file:n,line:s.getStartLineNumber(),method:t})}return o},ia=(e,t)=>{const s=na(e.getExpression());if(s===void 0)return[];const n=e.getArguments()[1];return n?ra(n,s).flatMap(o=>oa(o,s,e,t)):[]},aa=(e,t,s)=>{const n=[];for(const o of e.getDescendantsOfKind(l.CallExpression))for(const r of ia(o,t)){const a=s(r.exportName);n.push(a===void 0?r:{...r,visibility:a})}return n},ca=(e,t,s=[])=>{const n=[],o=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));for(const r of h(t)){const a=e.getSourceFile(r)??e.addSourceFileAtPath(r),c=E(t,r);n.push(...aa(a,c,u=>o.get(`${c}:${u}`)))}return n},la=["providerSubscriptionId","state"],ua=["providerEventId","processedAt"],Pt=(e,t)=>t.every(s=>s in e.shape),da=e=>{const t=e.find(n=>n.name==="subscriptions"),s=e.find(n=>n.name==="events");return t!==void 0&&s!==void 0&&Pt(t,la)&&Pt(s,ua)},fa=new Set(["createAutumnAdapter","createDodoPaymentsAdapter","createPolarAdapter","createStripeAdapter"]),ga=e=>e&&i.isNumericLiteral(e)?Number(e.getText()):void 0,pa=e=>{const t=e.getProperty("webhookToleranceSeconds");return t&&i.isPropertyAssignment(t)?ga(t.getInitializer()):void 0},ma=(e,t)=>{const s=y(e.getExpression());if(s===void 0||!fa.has(s))return;const[n]=e.getArguments(),o=n&&i.isObjectLiteralExpression(n)?pa(n):void 0;return{callee:s,exportName:S(e),file:t,line:e.getStartLineNumber(),...o===void 0?{}:{toleranceSeconds:o}}},ha=(e,t)=>I(e,t,ma),xa=new Set(["defineQueue","defineWorkflow"]),va=new Set(["run","runAction","runMutation","runQuery"]),Ea=new Set(["api","internal"]),Sa=e=>{const t=e.getExpression();return i.isIdentifier(t)?t.getText():void 0},ya=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return;const s=t.getProperty("handler");if(s===void 0||!i.isPropertyAssignment(s))return;const n=s.getInitializer();if(n&&(i.isArrowFunction(n)||i.isFunctionExpression(n)))return n},Jt=(e,t)=>{const s=e.getParameters()[t]?.getNameNode();return s&&i.isIdentifier(s)?s.getText():void 0},es=(e,t)=>e===t||e.startsWith(`${t}.`),ts=e=>{const t=e.getDescendantsOfKind(l.PropertyAccessExpression);return i.isPropertyAccessExpression(e)&&t.push(e),t},It=e=>{const t=e.getParent();return i.isPropertyAccessExpression(t)&&t.getNameNode()===e||i.isPropertyAssignment(t)&&t.getNameNode()===e?!1:!(i.isBindingElement(t)&&t.getNameNode()===e)},ss=e=>{const t=e.getDescendantsOfKind(l.Identifier).filter(s=>It(s));return i.isIdentifier(e)&&It(e)&&t.push(e),t},Aa=e=>{if(!i.isVariableDeclaration(e))return[];const t=e.getNameNode();return i.isIdentifier(t)?[t.getText()]:t.getDescendantsOfKind(l.BindingElement).map(s=>s.getName())},Na=e=>{const t=Jt(e,1);if(t===void 0)return[];const s=[`${t}.messages`];for(const n of e.getDescendantsOfKind(l.ForOfStatement)){if(n.getExpression().getText()!==`${t}.messages`)continue;const o=n.getInitializer(),r=i.isVariableDeclarationList(o)?o.getDeclarations()[0]?.getNameNode():void 0;r&&i.isIdentifier(r)&&s.push(`${r.getText()}.body`)}return s},ba=(e,t,s)=>{const n=t==="workflow"?[`${s}.params`]:Na(e),o=new Set,r=a=>ts(a).some(c=>n.some(u=>es(c.getText(),u)))?!0:ss(a).some(c=>o.has(c.getText()));for(const a of e.getDescendantsOfKind(l.VariableDeclaration)){const c=a.getInitializer();if(c&&r(c))for(const u of Aa(a))o.add(u)}return{names:o,prefixes:n}},Pa=(e,t)=>ts(e).some(s=>t.prefixes.some(n=>es(s.getText(),n)))?!0:ss(e).some(s=>t.names.has(s.getText())),Ia=e=>{if(e===void 0||!i.isPropertyAccessExpression(e))return;const t=[];let s=e;for(;i.isPropertyAccessExpression(s);)t.unshift(s.getName()),s=s.getExpression();const n=t.at(-1);if(!(n===void 0||!i.isIdentifier(s)||!Ea.has(s.getText())||t.length<2))return{exportName:n,file:t.slice(0,-1).join("/")}},wa=(e,t,s)=>{const n=Jt(e,0);if(n===void 0)return[];const o=ba(e,t,n),r=[];for(const a of e.getDescendantsOfKind(l.CallExpression)){const c=a.getExpression();if(!i.isPropertyAccessExpression(c)||!va.has(c.getName())||c.getExpression().getText()!==n)continue;const u=a.getArguments()[1];if(!u||!Pa(u,o))continue;const d=Ia(a.getArguments()[0]);d!==void 0&&r.push({dispatchKind:t,file:s,handlerExport:S(a),line:a.getStartLineNumber(),targetExport:d.exportName,targetFile:d.file})}return r},Ta=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=Sa(n);if(o===void 0||!xa.has(o))continue;const r=ya(n);r!==void 0&&s.push(...wa(r,o==="defineQueue"?"queue":"workflow",t))}return s},Ca=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Ta(o,E(t,n)))}return s},wt={dbRateLimit:"usesRateLimit",emailGateMiddleware:"usesEmailGate",mask:"usesMask",rateLimit:"usesRateLimit",rls:"usesRls",verifyTurnstileMiddleware:"usesCaptcha"},Tt=new Set(["account","credential","member","passkey","session","user"]),Fa=e=>e.replaceAll(/[-_]/gu," ").replaceAll(/([a-z0-9])([A-Z])/gu,"$1 $2").split(" ").filter(Boolean).map(t=>t.toLowerCase()),Oa=e=>{const s=Fa(e).at(-1);if(!s)return!1;const n=s.endsWith("s")?s.slice(0,-1):s;return Tt.has(s)||Tt.has(n)},Ra=e=>{const t=e.replaceAll(/[^a-z0-9]/giu,"").toLowerCase();return t.endsWith("email")||t.endsWith("emailaddress")},La=(e,t)=>{const{objects:s,opaque:n}=Oe(e,t);return Dr(s).some(o=>Ra(o))?!0:n?void 0:!1},Da=e=>{const t=e.getArguments()[0];return!t||!i.isObjectLiteralExpression(t)?{usesCaptcha:!1,usesRateLimit:!1}:{usesCaptcha:!!t.getProperty("captcha"),usesRateLimit:!!t.getProperty("rateLimit")}},ka=e=>{if(i.isCallExpression(e))return e;if(!i.isIdentifier(e))return;const s=e.getSourceFile().getVariableDeclaration(e.getText())?.getInitializer();return s&&i.isCallExpression(s)?s:void 0},se={usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},Ma=e=>{const t=ka(e),s=t?y(t.getExpression()):void 0;if(t&&s==="protectPublic"){const n=Da(t);return{...se,usesCaptcha:n.usesCaptcha,usesRateLimit:n.usesRateLimit}}return s!==void 0&&s in wt?{...se,[wt[s]]:!0}:se},Ka=e=>{const t={...se};let s=e;for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))break;const o=n.getName()==="use"?s.getArguments()[0]:void 0;if(o){const r=Ma(o);t.usesCaptcha||=r.usesCaptcha,t.usesEmailGate||=r.usesEmailGate,t.usesMask||=r.usesMask,t.usesRateLimit||=r.usesRateLimit,t.usesRls||=r.usesRls}s=n.getExpression()}return t},_a=new Set(["insert","insertMany","insertManyUnsafe","replace"]),za=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!_a.has(t.getName()))return!1;const s=t.getExpression();if(!k(s))return!1;const o=e.getArguments()[0];return!o||!(i.isStringLiteral(o)||i.isNoSubstitutionTemplateLiteral(o))?!1:Oa(o.getLiteralText())},$a=new Set(["create","runAfter","runAt","send","sendBatch"]),Ua=new Set(["queues","scheduler","workflows"]),qa=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!$a.has(t.getName()))return!1;let s=t.getExpression();for(;i.isCallExpression(s)||i.isElementAccessExpression(s)||i.isPropertyAccessExpression(s);){if(i.isPropertyAccessExpression(s)&&Ua.has(s.getName())){const n=s.getExpression();if(i.isIdentifier(n)&&n.getText()==="ctx")return!0}s=s.getExpression()}return!1},Ba=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="insertManyUnsafe")return!1;const s=t.getExpression();return k(s)},ns=new Set(["generateObject","generateText","streamObject","streamText"]),Va=e=>{const t=y(e.getExpression());return t!==void 0&&ns.has(t)},Wa=e=>{const t=y(e.getExpression());if(t===void 0||!ns.has(t))return!1;const s=e.getArguments()[0];return!s||!i.isObjectLiteralExpression(s)||s.getProperties().some(n=>i.isSpreadAssignment(n))?!1:!s.getProperty("maxOutputTokens")},ja=new Set(["log","span","trace"]),Ha=new Set(["ai"]),Ga=new Set(["email","mail"]),Ya=new Set(["ai","browser","fetch","mail","notify","queues","sql","storage","workflows"]),ye=(e,t)=>e.getDescendantsOfKind(l.PropertyAccessExpression).some(s=>{if(!t.has(s.getName()))return!1;const n=s.getExpression();return i.isIdentifier(n)&&n.getText()==="ctx"}),Qa=new Set([l.ArrowFunction,l.FunctionDeclaration,l.FunctionExpression,l.GetAccessor,l.MethodDeclaration,l.SetAccessor]),Xa=new Set(["every","filter","flatMap","forEach","map","some"]),Za=new Set(["all","allSettled","race"]),Ja=e=>{const t=e.getParent();if(!t||!i.isCallExpression(t)||!t.getArguments().includes(e))return;const s=t.getExpression();if(!i.isPropertyAccessExpression(s))return;const n=s.getName();if(Xa.has(n))return t;const o=s.getExpression();if(i.isIdentifier(o)&&o.getText()==="Promise"&&Za.has(n))return t},ec=e=>{let t=e.getParent();for(;t;){if(i.isTryStatement(t)){const s=t.getTryBlock();if(e.getPos()>=s.getPos()&&e.getEnd()<=s.getEnd())return!0}if(Qa.has(t.getKind())){const s=Ja(t);if(!s)return!1;t=s;continue}t=t.getParent()}return!1},tc=e=>{let t=e;for(;;){const s=t.getParent();if(!i.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;if(s.getName()==="catch")return!0;if(s.getName()!=="then"&&s.getName()!=="finally")return!1;const n=s.getParent();if(!i.isCallExpression(n)||n.getExpression()!==s)return!1;t=n}},sc=e=>{let t=e;for(;;){const s=t.getParent();if(i.isPropertyAccessExpression(s)&&s.getExpression()===t){t=s;continue}return i.isCallExpression(s)&&s.getExpression()===t?s:void 0}},nc=e=>{let t=!1,s=!0;for(const n of e.getDescendantsOfKind(l.PropertyAccessExpression)){if(!Ya.has(n.getName()))continue;const o=n.getExpression();if(!i.isIdentifier(o)||o.getText()!=="ctx")continue;const r=sc(n);r&&(t=!0,!ec(r)&&!tc(r)&&(s=!1))}return{handlesErrors:t&&s,reachesOutbound:t}},rc=e=>e.getDescendantsOfKind(l.ThrowStatement).some(t=>{const s=t.getExpression();if(!i.isNewExpression(s))return!1;const n=s.getExpression();return i.isIdentifier(n)&&n.getText()==="Error"}),Ct="lunora-advisor-exempt",oc=/^[\s*/]+/u,ic=/[\w-]/u,ac=e=>{const s=(e.getFirstAncestorByKind(l.VariableStatement)??e).getLeadingCommentRanges().map(n=>n.getText()).join(`
6
- `);for(const n of s.split(`
7
- `)){const o=n.replace(oc,"");if(!o.startsWith(Ct))continue;const r=o.slice(Ct.length);if(ic.test(r.charAt(0)))continue;const a=r.indexOf("--");return{exempt:!0,exemptReason:(a===-1?"":r.slice(a+2).split("*")[0]??"").trim()}}return{exempt:!1,exemptReason:""}},cc=e=>{const[t]=e.getArguments();if(t){if(i.isObjectLiteralExpression(t)){const s=t.getProperty("handler");return s?i.isPropertyAssignment(s)?s.getInitializer():i.isShorthandPropertyAssignment(s)?s.getNameNode():i.isMethodDeclaration(s)?s:void 0:void 0}return t}},lc=(e,t)=>{const s=cc(t);if(!s)return;if(i.isArrowFunction(s)||i.isFunctionExpression(s)||i.isMethodDeclaration(s))return e;if(!i.isIdentifier(s))return;const n=s.getSourceFile(),o=s.getText(),r=n.getVariableDeclaration(o)?.getInitializer();return r&&(i.isArrowFunction(r)||i.isFunctionExpression(r))?r:n.getFunction(o)},uc=e=>{let t=!1,s=!1,n=!1,o=!1,r=!1;for(const u of e.getDescendantsOfKind(l.CallExpression))if(za(u)&&(r=!0),qa(u)&&(t=!0),Ba(u)&&(o=!0),Va(u)&&(s=!0),Wa(u)&&(n=!0),r&&t&&o&&n)break;const{handlesErrors:a,reachesOutbound:c}=nc(e);return{callsMail:ye(e,Ga),emitsEvent:ye(e,ja),fanOut:t,handlesErrors:a,reachesOutbound:c,runsAiGeneration:s||ye(e,Ha),throwsBareError:rc(e),unboundedAiGeneration:n,usesInsertManyUnsafe:o,writesUserTable:r}},dc=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=M(s);if(!n||n.kind!=="query"&&n.kind!=="mutation"&&n.kind!=="action")return;const o=n.receiver?Ka(n.receiver):{usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},r=lc(e,s);return{...r?uc(r):{},...ac(e),...o,analyzableBody:r!==void 0,exportName:e.getName(),file:t,hasEmailArg:La(s,n.receiver),kind:n.kind,visibility:n.visibility}},fc=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=dc(o,t);r&&s.push(r)}return s},gc=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...fc(o,E(t,n)))}return s},pc=new Set(["dbRateLimit","rateLimit"]),mc=e=>i.isArrowFunction(e)?e.getBody():e,hc=(e,t)=>{const s=y(e.getExpression());if(s===void 0||!pc.has(s))return;const n=e.getArguments()[2];if(!n)return;const o=N(n,"key");if(!o)return;const r=mc(o);if(!(!L(r)||z(r)))return{callee:s,exportName:S(e),file:t,limitName:zt(e),line:e.getStartLineNumber()}},xc=(e,t)=>I(e,t,hc),vc=new Set(["findFirst","findFirstOrThrow","findMany","findUnique","get"]),Ec=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!vc.has(t.getName()))return;const s=t.getExpression();if(k(s)){const n=e.getArguments()[0];return n&&i.isStringLiteral(n)?n.getLiteralText():""}if(i.isPropertyAccessExpression(s)&&k(s.getExpression()))return s.getName()},Sc=e=>{let t=e;for(;i.isCallExpression(t);){const s=t.getExpression();if(!i.isPropertyAccessExpression(s))return;if(s.getName()==="query"&&k(s.getExpression())){const n=t.getArguments()[0];return n&&i.isStringLiteral(n)?n.getLiteralText():""}t=s.getExpression()}},yc=e=>{let t=H(e)??e;for(;i.isAwaitExpression(t);)t=H(t.getExpression())??t.getExpression();return t},rs=(e,t=!1)=>{const s=yc(e);if(i.isIdentifier(s)){if(t)return;const n=ue(s);return n===void 0?void 0:rs(n,!0)}if(i.isCallExpression(s))return Ec(s)??Sc(s)},Ac=e=>{const t=e.getBody();if(!i.isBlock(t))return[t];const s=[];for(const n of e.getDescendantsOfKind(l.ReturnStatement)){const o=n.getFirstAncestor(a=>i.isArrowFunction(a)||i.isFunctionExpression(a)||i.isFunctionDeclaration(a)),r=n.getExpression();o===e&&r!==void 0&&s.push(r)}return s},Nc=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!i.isCallExpression(s))return[];const n=M(s);if(n?.kind!=="query")return[];const o=Yt(s);if(o===void 0)return[];const r=n.receiver!==void 0&&Js(n.receiver,"output"),a=n.receiver!==void 0&&Ut(n.receiver,"use","mask"),c=new Set,u=[];for(const d of Ac(o)){const v=rs(d);v===void 0||c.has(v)||(c.add(v),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),table:v,usesMask:a,usesOutput:r,visibility:n.visibility}))}return u},bc=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...Nc(c,r))}return s},Pc=e=>{if(!e||!i.isObjectLiteralExpression(e))return[];const t=[];for(const s of e.getProperties())(i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)||i.isMethodDeclaration(s)||i.isGetAccessorDeclaration(s))&&t.push(s.getName());return t},Ic=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?M(s):void 0;if(!n)return[];const o=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=$t(r);if(a===void 0)continue;const c=Pc(N(a.options,"with"));c.length!==0&&o.push({exportName:e.getName(),file:t,line:r.getStartLineNumber(),parentTable:a.table,relations:c,visibility:n.visibility})}return o},wc=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...Ic(c,r))}return s},ie=e=>{if(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))return e.getLiteralText();if(i.isBinaryExpression(e)&&e.getOperatorToken().getKind()===l.PlusToken){const t=ie(e.getLeft()),s=ie(e.getRight());return t!==void 0&&s!==void 0?t+s:void 0}},Tc=e=>{let t=e,s=t.getParent();for(;s!==void 0&&i.isBinaryExpression(s)&&s.getOperatorToken().getKind()===l.PlusToken;)t=s,s=t.getParent();return t!==e&&ie(t)!==void 0},Cc=/(?:^|\/)__tests__\//u,Fc=/\.(?:spec|test)$/u,Oc=e=>Cc.test(e)||Fc.test(e),Rc=e=>{const t=e.getParent();if(t!==void 0){if(i.isVariableDeclaration(t)||i.isPropertyAssignment(t)||i.isPropertySignature(t))return t.getName();if(i.isBinaryExpression(t)&&t.getOperatorToken().getKind()===l.EqualsToken)return t.getLeft().getText()}},Lc=(e,t,s)=>Fn(e)?!Oc(s)&&On(Rc(t)):!0,Dc=(e,t)=>{const s=[],n=[...e.getDescendantsOfKind(l.BinaryExpression),...e.getDescendantsOfKind(l.StringLiteral),...e.getDescendantsOfKind(l.NoSubstitutionTemplateLiteral)],o=new Set;for(const r of n){if(Tc(r))continue;const a=ie(r);if(a===void 0)continue;const c=Tn(a);if(c===void 0||!Lc(c,r,t))continue;const u=r.getStartLineNumber(),d=`${String(u)}:${c}`;o.has(d)||(o.add(d),s.push({file:t,kind:c,line:u,preview:Cn(a)}))}return s},kc=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Dc(o,E(t,n)))}return s},Mc=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?M(s):void 0;if(!n)return[];const o=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=$t(r);if(a===void 0)continue;const c=N(a.options,"includeDeleted");if(c===void 0)continue;const u=i.isTrueLiteral(c),d=!u&&L(c);!u&&!d||o.push({exportName:e.getName(),file:t,fromArgs:d,hardcodedTrue:u,line:r.getStartLineNumber(),table:a.table,visibility:n.visibility})}return o},Kc=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...Mc(c,r))}return s},_c=new Set(["query","unsafe"]),zc=e=>{if(!i.isPropertyAccessExpression(e)||!_c.has(e.getName()))return!1;const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="sql")return!1;const s=t.getExpression();return i.isIdentifier(s)&&s.getText()==="ctx"},$c=e=>i.isBinaryExpression(e)||i.isTemplateExpression(e),Uc=e=>e.getFirstAncestorByKind(l.VariableDeclaration)?.getName()??"<module>",qc=(e,t)=>{if(!zc(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!$c(s)))return{exportName:Uc(e),file:t,line:s.getStartLineNumber()}},Bc=(e,t)=>I(e,t,qc),Vc=[["convex",["convex","@convex-dev/"]],["supabase",["@supabase/"]],["firebase",["firebase","@firebase/","firebase-admin"]]],Wc=e=>{for(const[t,s]of Vc)for(const n of s)if(e===n||e.startsWith(n.endsWith("/")?n:`${n}/`))return t},jc=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of o.getImportDeclarations()){const a=r.getModuleSpecifierValue(),c=Wc(a);c!==void 0&&s.push({file:E(t,n),line:r.getStartLineNumber(),moduleSpecifier:a,platform:c})}}return s},Hc=new Set(["createMultipartUpload","delete","download","generateUploadUrl","get","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","put","resumeMultipartUpload","store","upload"]),Gc=(e,t,s=[])=>{const n=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));return fe(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.storage"||r.startsWith("ctx.storage."),methods:Hc,requireUnmodifiedReach:!0}).map(r=>{const a=n.get(`${r.file}:${r.exportName}`);return a===void 0?r:{...r,visibility:a}})},Yc=new Map([["generateUploadUrl",1],["getPresignedUrl",1],["getSignedUrl",1],["store",2],["upload",2]]),Qc=e=>e&&i.isNumericLiteral(e)?Number(e.getText()):void 0,Xc=e=>{if(e===void 0)return{analyzable:!0,presentKeys:[]};if(!i.isObjectLiteralExpression(e))return{analyzable:!1,presentKeys:[]};const t=[];let s,n=!1;for(const o of e.getProperties()){if(i.isSpreadAssignment(o)){n=!0;continue}if(i.isPropertyAssignment(o)){const r=o.getName();t.push(r),r==="expiresInSeconds"&&(s=Qc(o.getInitializer()));continue}(i.isShorthandPropertyAssignment(o)||i.isMethodDeclaration(o))&&t.push(o.getName())}return{analyzable:!n,expiresInSeconds:s,presentKeys:t}},Zc=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName(),s=Yc.get(t);if(s===void 0)return;const n=e.getExpression().getText();return n==="ctx.storage"||n.startsWith("ctx.storage.")?{method:t,optionsIndex:s}:void 0},Jc=(e,t)=>{const s=Zc(e.getExpression());if(s!==void 0)return{exportName:S(e),file:t,line:e.getStartLineNumber(),method:s.method,...Xc(e.getArguments()[s.optionsIndex])}},el=(e,t)=>I(e,t,Jc),tl=(e,t)=>({analytics:e.analytics||t.dependencies.has("@lunora/bindings"),auth:t.dependencies.has("@lunora/auth"),containers:e.container||t.containerCount>0||t.dependencies.has("@lunora/container"),flags:e.flags||t.dependencies.has("@lunora/flags"),kv:e.kv||t.dependencies.has("@lunora/bindings"),mail:e.mail||t.dependencies.has("@lunora/mail"),notifications:e.notify||t.dependencies.has("@lunora/notify"),payments:e.payments||t.hasPaymentTables,queues:t.queueCount>0||t.dependencies.has("@lunora/queue"),scheduler:e.scheduler||t.cronCount>0||t.dependencies.has("@lunora/scheduler"),storage:e.storage||t.storageRuleCount>0||t.storageColumnCount>0||t.dependencies.has("@lunora/storage"),vectors:t.vectorStoreSupported&&t.vectorIndexCount>0,workflows:e.workflows||t.workflowCount>0||t.dependencies.has("@lunora/workflow")}),sl=(e,t,s)=>({cacheKey:`procedure_arguments_unreadable:${e}:${t}`,categories:["SCHEMA"],description:"Codegen reads an argument record statically. One built at runtime — a factory call, or a property off a value it cannot follow — has no literal to read, so the generated `FunctionReference` carries only the arguments it could see while the runtime validator still enforces all of them.",detail:`\`${t}\` in \`${e}\` (line ${s.toString()}) declares arguments codegen could not read, so its generated type is missing some of them.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:s},name:"procedure_arguments_unreadable",remediation:`Declare the arguments as an object literal, or as a \`const\` object literal the chain names — \`const ${t}Args = { … };\` then \`.input(${t}Args)\`. Both resolve; a record returned by a call does not.`,title:"Procedure arguments are missing from the generated type"}),nl=(e,t)=>{if(t===void 0){const s=e.getArguments()[0];if(s===void 0||!i.isObjectLiteralExpression(s)||s.getProperty("args")===void 0)return!1}return Oe(e,t).opaque},rl=(e,t)=>{const s=[],n=(o,r)=>{const a=o.getInitializer();if(a===void 0||!i.isCallExpression(a))return;const c=M(a);c!==void 0&&nl(a,c.receiver)&&s.push(sl(t,r,a.getStartLineNumber()))};for(const o of e.getVariableStatements().filter(r=>r.isExported()))for(const r of o.getDeclarations())n(r,r.getName());return s},ol=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n);o!==void 0&&s.push(...rl(o,E(t,n)))}return s.toSorted((n,o)=>n.cacheKey.localeCompare(o.cacheKey))},il=new Map([["AgentDefinition",{call:"defineAgent({ … })",file:"agents"}],["ContainerDefinition",{call:"defineContainer({ … })",file:"containers"}],["QueueDefinition",{call:"defineQueue({ … })",file:"queues",note:"A dropped queue has no caller to fail — its consumer is simply never wired."}],["RegisteredAction",{call:"action.input({ … }).action(handler)"}],["RegisteredLifecycleHook",{call:"onConnect(handler)",note:"Substitute the hook you called: `onConnect`, `onDisconnect` and `onShardInit` share one type, so codegen cannot tell which you wrote. A dropped hook has no caller to fail — it silently never fires."}],["RegisteredMigration",{call:"defineMigration({ … })",note:"A dropped migration never runs, so `lunora migrate up` reports nothing to do."}],["RegisteredMutation",{call:"mutation.input({ … }).mutation(handler)"}],["RegisteredMutator",{call:"defineMutator({ … })",file:"mutators"}],["RegisteredQuery",{call:"query.input({ … }).query(handler)"}],["RegisteredReactor",{call:"onQueryChange(select, handler)",note:"A dropped reactor has no caller to fail — it silently never runs."}],["RegisteredShape",{call:"defineShape({ … })",file:"shapes"}],["RegisteredStream",{call:"query.input({ … }).stream(handler)"}],["WorkflowDefinition",{call:"defineWorkflow({ … })",file:"workflows"}]]),ge=({byName:e,byPath:t},s,n)=>t.has(`${s}:${n}`)||e.has(n),os=e=>!e.isAny(),Le=e=>{const t=e.getType();if(!os(t))return;const s=t.getAliasSymbol()?.getName()??t.getSymbol()?.getName(),n=s===void 0?void 0:il.get(s);return n===void 0||s===void 0?void 0:{...n,typeName:s}},is=e=>{const t=e.getInitializer();return t===void 0?!1:i.isCallExpression(t)||i.isIdentifier(t)||i.isPropertyAccessExpression(t)},as={cause:"codegen recognises a registration only when the initializer is the registering call itself, and this one comes from a factory or an alias",remediation:"A factory that returns a registration cannot be read statically — inline it, or export what the factory builds."},al=e=>({cause:`codegen reads this kind of registration only from \`lunora/${e}.ts\`, and this is a different module`,remediation:`Move it into \`lunora/${e}.ts\` — the declaration itself is fine.`}),cl={cause:"the binding is exported by a separate `export { … }` statement, and codegen reads the `export` keyword on the declaration itself",remediation:"Move the keyword onto the declaration and drop the separate export statement."},De=(e,t,s,n,o)=>{const{call:r,file:a,note:c,typeName:u}=s,d=a!==void 0&&e!==a?a:void 0,v=d===void 0?o:al(d),x=c===void 0?v.remediation:`${c} ${v.remediation}`;return{cacheKey:`procedure_not_registered:${e}:${t}`,categories:["SCHEMA"],description:"Codegen registers an export only when the declaration carries `export` and its initializer is literally the registering call. Written any other way it exists at runtime but never reaches the generated output — `_generated/api.ts` for a procedure, the lifecycle manifest for a hook or reactor — so a caller cannot address it and a hook never fires.",detail:`\`${t}\` in \`${e}\` (line ${n.toString()}) has type \`${u}\` but was not registered — ${v.cause}.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:n,typeName:u},name:"procedure_not_registered",remediation:d===void 0?`Assign the registration directly: \`export const ${t} = ${r};\`. ${x}`:x,title:"Procedure exists at runtime but is missing from the generated API"}},ll=(e,t,s)=>{const n=[];for(const o of e.getVariableStatements().filter(r=>r.isExported()))for(const r of o.getDeclarations()){const a=r.getName();if(ge(s,t,a)||!is(r))continue;const c=Le(r);c!==void 0&&n.push(De(t,a,c,r.getStartLineNumber(),as))}return n},ul=(e,t,s)=>{if(ge(s,t,"default"))return[];const n=[];for(const o of e.getExportAssignments().filter(r=>!r.isExportEquals())){const r=Le(o.getExpression());r!==void 0&&n.push(De(t,"default",r,o.getStartLineNumber(),as))}return n},dl=(e,t,s)=>{const n=[];for(const o of e.getExportDeclarations().filter(r=>r.getModuleSpecifier()===void 0))for(const r of o.getNamedExports()){const a=r.getAliasNode()?.getText()??r.getName();if(ge(s,t,a))continue;const c=r.getLocalTargetDeclarations().find(d=>i.isVariableDeclaration(d));if(c===void 0||!is(c))continue;const u=Le(c);u!==void 0&&n.push(De(t,a,u,r.getStartLineNumber(),cl))}return n},fl=(e,t,s)=>[...ll(e,t,s),...ul(e,t,s),...dl(e,t,s)],gl=(e,t,s)=>e.getVariableStatements().filter(n=>n.isExported()).flatMap(n=>n.getDeclarations()).filter(n=>ge(s,t,n.getName())).filter(n=>{const o=n.getInitializer();return o!==void 0&&i.isCallExpression(o)&&i.isPropertyAccessExpression(o.getExpression())}).map(n=>({declaration:n,exportName:n.getName(),relativePath:t})),pl=({exportName:e,relativePath:t})=>({cacheKey:"procedure_type_check_unavailable",categories:["SCHEMA"],description:"Codegen cross-checks every export in `lunora/` against its TYPE to catch a procedure the syntactic scan dropped — a factory-assigned export, an alias, a separate `export { … }`. That check needs the type checker to resolve `@lunora/server`; when it cannot, the check reports nothing regardless of what the code does.",detail:`Type resolution for \`lunora/\` is unavailable — the registered procedure \`${e}\` in \`${t}\` types as \`any\`, as does every other one — so codegen cannot tell you when an export is dropped from \`_generated/api.ts\`. A dropped procedure will surface as \`Property '<name>' does not exist\` at its call site instead.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:e,filePath:t},name:"procedure_type_check_unavailable",remediation:`Check what codegen sees: \`${e}\` should have a procedure type, not \`any\`. It needs a \`tsconfig.json\` at or above \`lunora/\` — the one codegen finds walking up from there, which is not necessarily the one your editor uses — resolving \`lunorash\` / \`@lunora/server\` to declarations that exist on disk (a workspace dependency has to be built first).`,title:"Codegen cannot type-check `lunora/`, so dropped procedures go unreported"}),ml=(e,t,s)=>{const n=[],o=[];for(const a of h(t)){const c=e.getSourceFile(a);if(c===void 0)continue;const u=E(t,a);n.push(...fl(c,u,s)),o.push(...gl(c,u,s))}const[r]=o;return r!==void 0&&o.every(({declaration:a})=>!os(a.getType()))&&n.push(pl(r)),n.toSorted((a,c)=>a.cacheKey.localeCompare(c.cacheKey))},hl=new Set(["when","where"]),Ae=new Set(["definePolicy","defineShape"]),xl=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(i.isPropertyAccessExpression(t)){const n=t.getName();return Ae.has(n)?n:void 0}if(!i.isIdentifier(t))return;for(const n of t.getSymbol()?.getDeclarations()??[])if(i.isImportSpecifier(n)){const o=n.getNameNode().getText();return Ae.has(o)?o:void 0}const s=t.getText();return Ae.has(s)?s:void 0},vl=e=>i.isObjectLiteralExpression(e)&&e.getProperties().length===0,cs=e=>{if(e!==void 0){if(i.isReturnStatement(e)&&e.getExpression()===void 0||e.getKind()===l.UndefinedKeyword||e.getText()==="undefined")return"undefined";if(vl(e))return"empty-object";if(i.isParenthesizedExpression(e))return cs(e.getExpression())}},ke=e=>e.getAncestors().find(t=>i.isArrowFunction(t)||i.isFunctionExpression(t)||i.isFunctionDeclaration(t)),El=e=>e.getDescendantsOfKind(l.ReturnStatement).filter(t=>ke(t)===e),ls=e=>e.getDescendantsOfKind(l.ConditionalExpression).filter(t=>ke(t)===e),Sl=e=>{const t=El(e);return t.length>1?!0:t.some(s=>s.getFirstAncestorByKind(l.IfStatement)!==void 0)||ls(e).length>0},yl=e=>e.getDescendantsOfKind(l.IfStatement).filter(t=>ke(t)===e),we=e=>e.getKind()===l.NullKeyword||e.getKind()===l.FalseKeyword||i.isIdentifier(e)&&e.getText()==="undefined"?!0:i.isNumericLiteral(e)?e.getLiteralValue()===0:i.isStringLiteral(e)&&e.getLiteralValue()==="",Al=(e,t)=>we(e)||we(t),Nl=new Map([[l.EqualsEqualsEqualsToken,"positive"],[l.EqualsEqualsToken,"positive"],[l.ExclamationEqualsEqualsToken,"negative"],[l.ExclamationEqualsToken,"negative"]]),Ft=e=>!we(e)&&(i.isLiteralExpression(e)||e.getKind()===l.TrueKeyword),bl=(e,t,s)=>{const n=Nl.get(e);if(n!==void 0)return Al(t,s)?n==="positive"?"negative":"positive":Ft(t)||Ft(s)?void 0:n},j=e=>{if(i.isParenthesizedExpression(e))return j(e.getExpression());if(i.isPrefixUnaryExpression(e)&&e.getOperatorToken()===l.ExclamationToken)return"negative";if(i.isBinaryExpression(e)){const t=e.getOperatorToken().getKind(),s=bl(t,e.getLeft(),e.getRight());if(s!==void 0)return s;if(t===l.AmpersandAmpersandToken||t===l.BarBarToken){const n=j(e.getLeft()),o=j(e.getRight());return n===o?n:"indeterminate"}}return i.isIdentifier(e)||i.isPropertyAccessExpression(e)||i.isElementAccessExpression(e)||i.isCallExpression(e)?"positive":"indeterminate"},Ot=e=>{if(e!==void 0){if(i.isReturnStatement(e))return e;if(i.isBlock(e)){const t=e.getStatements().at(-1);return t!==void 0&&i.isReturnStatement(t)?t:void 0}}},Pl=e=>{if(e.getElseStatement()!==void 0)return;const t=e.getNextSiblingIfKind(l.ReturnStatement);return t!==void 0&&t.getNextSibling()===void 0?t:void 0},Il=e=>i.isReturnStatement(e)?e.getExpression()??e:e,wl=e=>{const t=[];for(const s of ls(e)){const n=j(s.getCondition());n==="positive"?t.push(s.getWhenFalse()):n==="negative"&&t.push(s.getWhenTrue())}for(const s of yl(e)){const n=j(s.getExpression());if(n==="indeterminate")continue;const o=n==="negative"?Ot(s.getThenStatement()):Ot(s.getElseStatement())??Pl(s);o!==void 0&&t.push(Il(o))}return t},Tl=e=>{for(const t of e.getAncestors())if(i.isVariableDeclaration(t)){const s=t.getNameNode();if(i.isIdentifier(s))return s.getText()}return"<anonymous>"},Cl=(e,t,s)=>{if(!i.isCallExpression(e))return[];const[n]=e.getArguments();if(!n||!i.isObjectLiteralExpression(n))return[];const o=[];for(const r of n.getProperties()){if(!i.isPropertyAssignment(r)||!hl.has(r.getName()))continue;const a=r.getInitializer();if(!(!a||!(i.isArrowFunction(a)||i.isFunctionExpression(a)))&&Sl(a))for(const c of wl(a)){const u=cs(c);u!==void 0&&o.push({exportName:Tl(e),file:s,form:u,key:r.getName(),line:c.getStartLineNumber(),owner:t})}}return o},Fl=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=xl(n);o!==void 0&&s.push(...Cl(n,o,t))}return s},Ol=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Fl(o,E(t,n)))}return s},Rl=new Set(["query","upsert","upsertMany"]),Ll=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(Rl.has(t))return e.getExpression().getText()==="ctx.vectors"?t:void 0},Dl=(e,t)=>{const s=Ll(e.getExpression());if(s===void 0)return;const n=e.getArguments()[1];if(!n)return;const o=N(n,"namespace");if(!(!o||!L(o)||z(o)))return{exportName:S(e),file:t,line:e.getStartLineNumber(),method:s}},kl=(e,t)=>I(e,t,Dl),Ml=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="get")return!1;const s=t.getExpression();return i.isPropertyAccessExpression(s)?s.getName()==="workflows":i.isIdentifier(s)&&s.getText()==="workflows"},Kl=e=>{const t=e.getArguments()[0];return t&&i.isStringLiteral(t)?t.getLiteralText():""},_l=(e,t)=>{const s=[];for(const n of h(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=E(t,n);for(const a of o.getDescendantsOfKind(l.CallExpression)){if(!Ml(a))continue;const c=Gs(a);c!==""&&s.push({exportName:c,file:r,line:a.getStartLineNumber(),workflow:Kl(a)})}}return s},zl=".lunora-schema.json",w=(e,t)=>{b(e)&&Dt(e,"utf8")===t||ys(e,t,"utf8")},F=(e,t)=>{if(t===""){As(e,{force:!0});return}w(e,t)},$l=e=>{const t=f(e,"package.json");if(b(t))try{const s=JSON.parse(Dt(t,"utf8"));return typeof s.version=="string"&&s.version!==""?s.version:void 0}catch{return}},Ul=()=>{const e=process.env.LUNORA_CODEGEN_TIMING;return e!==void 0&&e!==""},ql=e=>{let t=b(e)?e:ee(e);for(;t&&t!==ee(t);){const s=f(t,"tsconfig.json");if(b(s))return s;t=ee(t)}},Rt=e=>e.replaceAll("\\","/"),Bl=(e,t,s)=>{if(s&&e.length>0){const r=e.map(a=>`"${a.exportName}"`).join(", ");throw new D("MASK_UNSUPPORTED",`This project declares a \`mask(...)\` policy whose argument isn't a plain object literal (e.g. \`mask(sharedPolicies)\` referencing a hoisted variable), or contains a spread (\`...shared\`) or computed key (\`[name]:\`) codegen can't enumerate, so codegen can't tell which columns it masks. Because the project also declares replication shape(s) (${r}), codegen can't verify none of them replicate a table that policy masks — inline every table and column as literal keys so codegen can verify it, or remove the affected shape(s).`,{status:422})}const n=new Map;for(const r of t.columns){const a=n.get(r.table)??[];a.push(r.column),n.set(r.table,a)}const o=t.columns.length>0;for(const r of e){if(r.table===void 0){if(o)throw new D("MASK_UNSUPPORTED",`defineShape "${r.exportName}" has a non-literal \`table\` (a variable or expression, not a string literal), so codegen can't statically verify it doesn't replicate a table that masks a column. This project masks at least one column elsewhere, so the combination can't be proven safe — change "${r.exportName}"'s \`table\` to a plain string literal so codegen can verify it, or remove the mask(s) on the table it targets.`,{status:422});continue}const a=n.get(r.table);if(a===void 0)continue;const c=a.map(u=>`"${u}"`).join(", ");throw new D("MASK_UNSUPPORTED",`defineShape "${r.exportName}" replicates table "${r.table}", which masks column(s) ${c} on at least one procedure. A shape runs no procedure, so \`.use(mask(...))\` never applies to its replicated rows — remove the shape, unmask the table, or wait for shape-masking support.`,{status:422})}},ae=(e,t,s)=>{const n=e.getSourceFile(t);if(n===void 0){e.createSourceFile(t,s,{overwrite:!0});return}n.getFullText()!==s&&n.replaceWithText(s)},Lt=(e,t,s)=>e.getSourceFile(t)?.getFullText()===s,Vl=8,Wl=e=>{const{agents:t,apiPath:s,generatedFunctionsPath:n,lunoraDirectory:o,migrations:r,project:a,shapes:c,usesSandbox:u,useUmbrella:d,workflows:v}=e;let x=ct(a,o),P=ut(a,o),K=lt(a,o);dt([...x,...P].map(p=>p.filePath)),dt(K.filter(p=>p.stream).map(p=>p.filePath),"http-stream");for(let p=1;;p+=1){const T=Us({agents:t,functions:x,httpRoutes:K,mutators:P,useUmbrella:d,workflows:v}),O=qs({agents:t,functions:x,migrations:r,mutators:P,shapes:c,useUmbrella:d,usesSandbox:u});if(p>=Vl||Lt(a,s,T)&&Lt(a,n,O))return{apiContent:T,functions:x,functionsContent:O,httpRoutes:K,mutators:P};ae(a,s,T),ae(a,n,O),x=ct(a,o),P=ut(a,o),K=lt(a,o)}},jl=e=>{const t=ql(e);return t?new at({skipAddingFilesFromTsConfig:!1,tsConfigFilePath:t,useInMemoryFileSystem:!1}):new at({skipAddingFilesFromTsConfig:!0,useInMemoryFileSystem:!1})},Uu=(e,t)=>{const s=h(t),n=f(t,"schema.ts");b(n)&&s.push(n);for(const c of s){const u=e.getSourceFile(c);u===void 0?e.addSourceFileAtPath(c):u.refreshFromFileSystemSync()}const o=new Set(s.map(c=>Rt(c))),r=Rt(t),a=`${r}/`;for(const c of e.getSourceFiles()){const u=c.getFilePath();(u===r||u.startsWith(a))&&!o.has(u)&&e.removeSourceFile(c)}for(const c of e.getSourceFiles()){const u=c.getFilePath();if(!(u===r||u.startsWith(a)||u.includes("/node_modules/")))try{c.refreshFromFileSystemSync()}catch{e.removeSourceFile(c)}}},qu=e=>{const t=Ul(),s=t?Ee.now():0,n=f(e.projectRoot,e.lunoraDirectory??"lunora"),o=f(n,"schema.ts");if(!b(o))throw new D("INTERNAL",`schema.ts not found at ${o}`);const r=e.project??jl(n);un(qo);const a=wn(r,o,e.projectRoot),{agents:c,containers:u,crons:d,dataModelContent:v,dependencies:x,entryCronTriggers:P,env:K,featureUsage:p,hasFlags:T,hasNotify:O,identity:U,platformGate:A,queues:R,serverContent:$,storageRulesMetadata:V,usesSandbox:Y,useUmbrella:_,workflows:C}=ar({lunoraDirectory:n,project:r,projectRoot:e.projectRoot,schema:a,target:e.target}),g=f(n,"_generated"),Me=f(g,"dataModel.ts"),Ke=f(g,"server.ts"),us=f(g,"api.ts"),ds=f(g,"functions.ts");ae(r,Me,v),ae(r,Ke,$);const Q=vn(r,n),q=Rn(r,n),{apiContent:_e,functions:B,functionsContent:ze,httpRoutes:fs,mutators:$e}=Wl({agents:c,apiPath:us,generatedFunctionsPath:ds,lunoraDirectory:n,migrations:Q,project:r,shapes:q,useUmbrella:_,usesSandbox:Y,workflows:C}),X=e.lint===!1?void 0:Ps({adminRoutes:mr(r,n),aiRawRuns:vr(r,n),aiToolSideEffects:Tr(r,n),argumentDerivedFetches:Or(r,n),argumentValidators:Ur(r,n),authApiCalls:dn(r,n),authConfigs:Xr(r,n),browserUrlAccesses:so(r,n),configCalls:uo(r,n),containerKeyAccesses:go(r,n),containerOverrides:Eo(r,n),containers:u,exportSinks:No(r,n),staleMigrationImports:jc(r,n),failOpenGuards:To(r,n),flagReads:Ko(r,n),flagSecurityDefaults:Uo(r,n),geoIndexUsages:Wo(r,n),httpActionGuards:Zo(r,n),httpHeaderWrites:ci(r,n),hyperdriveCalls:mn(r,n),identityClaimReads:mi(r,n),imageDeliveryUrlAccesses:xi(r,n),inserts:hn(r,n),kvKeyAccesses:Ei(r,n,B),mailRecipientAccesses:bi(r,n),maskProcedures:xn(r,n),maskStrategies:Ri(r,n),mutatorWrites:_i(r,n),nondeterministicCalls:yn(r,n),normalizeIdAuthorizations:ea(r,n),notifyCalls:Nn(r,n),notifyConfig:An(r,n),ownerFieldWrites:ca(r,n,B),unrestrictedWhereBranches:Ol(r,n),paymentWebhooks:ha(r,n),privilegedDispatches:Ca(r,n),procedureProtections:gc(r,n),queries:ln(r,n),queues:R,r2sqlCalls:bn(r,n),ratelimitKeySelectors:xc(r,n),rawRowReturns:bc(r,n),relationLoads:wc(r,n),rlsProcedures:Pn(r,n),schema:a,secretLiterals:kc(r,n),shapes:q,softDeleteReads:Kc(r,n),sqlInterpolations:Bc(r,n),storageKeyAccesses:Gc(r,n,B),storageUploads:el(r,n),vectorNamespaceAccesses:kl(r,n),workflowCalls:_l(r,n),workflows:C,wranglerVariables:e.wranglerVariables}),Ue=X===void 0?[]:[...Ns(X,{source:"static"}),...ml(r,n,{byName:new Set([...C,...R,...c,...u].map(m=>m.exportName)),byPath:new Set([...B,...$e,...q,...Q].map(m=>`${m.filePath}:${m.exportName}`))}),...ol(r,n)],gs=In(r,n),qe=Ci(r,n);Bl(q,qe,wi(r,n));const ps=T?Ro(r,n):[],pe=A.signals.vectorStore!==!1,W=tl(p,{containerCount:u.length,cronCount:d.length,dependencies:x,hasPaymentTables:da(a.tables),queueCount:R.length,storageColumnCount:Object.keys(kt(a)).length,storageRuleCount:V.rules.length,vectorIndexCount:a.vectorIndexes.length,vectorStoreSupported:pe,workflowCount:C.length}),Be=t?Ee.now():0,me=_n(a,Q.map(m=>m.id)),Ve=Cs({advisories:Ue.filter(m=>m.name!=="procedure_type_check_unavailable"),advisorProcedures:X?.procedureProtections??[],agents:c,containers:u,env:K,flagKeys:ps,hasAccessFacade:p.access,hasAi:p.ai,hasAnalytics:p.analytics,hasBrowser:p.browser,hasFlags:T,hasHyperdrive:p.hyperdrive,hasImages:p.images,hasKv:p.kv,hasNotify:O,hasPayments:p.payments,hasPipelines:p.pipelines,hasR2sql:p.r2sql,hasVectors:pe,hasX402:p.x402,maskMetadata:qe,mutators:$e,queues:R,rlsMetadata:gs,schema:a,schemaSnapshot:me,shapes:q,storageRules:V,studioFeatures:W,useUmbrella:_,workflows:C}),We=Fs(q,x.has("@lunora/db"),_),je=Os(u,a.jurisdiction),He=Rs(C),Ge=Ls(c),Ye=Ds(R),Qe=ks(d),ms=Ms(W.scheduler),Xe=Ks(a.vectorIndexes),Z=_s(a,_),Ze=zs(x.has("@lunora/seed")),J=e.apiSpec??"openapi",he=J==="openapi"||J==="both",xe=J==="openrpc"||J==="both",Je=Ln({emailAgents:c.filter(m=>m.onEmail===!0).map(m=>({bindingName:m.bindingName,exportName:m.exportName})),hasAccess:x.has("@lunora/cloudflare-access"),hasAi:p.ai,hasAnalytics:p.analytics,hasAuth:x.has("@lunora/auth"),hasBrowser:p.browser,hasFramework:x.has("@lunora/astro")||x.has("@lunora/svelte")||x.has("@lunora/vue"),hasGlobal:a.tables.some(m=>Mt(m)),hasHyperdrive:p.hyperdrive,hasHyperdriveGlobal:a.tables.some(m=>Kt(m)),hasImages:p.images,hasKv:p.kv,hasKvIntrospector:W.kv,hasNotify:O,hasPayments:p.payments,hasR2sql:p.r2sql,hasQueue:R.some(m=>m.mode==="push"),hasScheduler:W.scheduler,hasStorage:W.storage,hasVectors:pe,hasWorkflow:C.length>0,hasX402:p.x402,identity:U,jurisdiction:a.jurisdiction,tableNames:a.tables.map(m=>m.name),useUmbrella:_,vectorIndexCount:a.vectorIndexes.length,voiceAgents:c.filter(m=>m.voice===!0&&m.voiceBindingName!==void 0).map(m=>({bindingName:m.voiceBindingName,exportName:m.exportName})),wantsOpenApi:he,wantsOpenRpc:xe}),et=$l(e.projectRoot),tt=Dn({functions:B,httpRoutes:fs,version:et}),st=Mn({functions:B,version:et}),nt=`${JSON.stringify(tt,void 0,2)}
8
- `,rt=`${JSON.stringify(st,void 0,2)}
9
- `,ot=kn(tt),it=Kn(st),ve=f(n,zl),hs=b(ve);if(e.dryRun||(b(g)||Ss(g,{recursive:!0}),w(f(g,"app.ts"),Je),w(Me,v),w(f(g,"api.ts"),_e),w(Ke,$),w(f(g,"functions.ts"),ze),w(f(g,"shard.ts"),Ve),w(f(g,"crons.ts"),Qe),w(f(g,"vectors.ts"),Xe),w(f(g,"drizzle.global.ts"),Z.global),w(f(g,"drizzle.shard.ts"),Z.shard),F(f(g,"containers.ts"),je),F(f(g,"workflows.ts"),He),F(f(g,"agents.ts"),Ge),F(f(g,"queues.ts"),Ye),F(f(g,"scheduler.ts"),ms),F(f(g,"seed.ts"),Ze),F(f(g,"collections.ts"),We),F(f(g,"openapi.json"),he?nt:""),F(f(g,"openapi.ts"),he?ot:""),F(f(g,"openrpc.json"),xe?rt:""),F(f(g,"openrpc.ts"),xe?it:""),(!hs||e.updateSchemaBaseline===!0)&&w(ve,bs(me))),t){const m=Ee.now(),xs=Math.round(m-s),vs=Math.round(Be-s),Es=Math.round(m-Be);console.error(`@lunora/codegen: codegen took ${xs.toString()}ms (discovery ${vs.toString()}ms, emit ${Es.toString()}ms)`)}return{advisories:Ue,advisorContext:X,agents:c,containers:u,cronTriggers:[...new Set([...$s(d),...P])],generated:{agents:Ge,api:_e,app:Je,collections:We,containers:je,crons:Qe,dataModel:v,drizzleGlobal:Z.global,drizzleShard:Z.shard,functions:ze,openApi:nt,openApiModule:ot,openRpc:rt,openRpcModule:it,queues:Ye,seed:Ze,server:$,shard:Ve,vectors:Xe,workflows:He},migrations:Q,outputDirectory:g,platformDiagnostics:A.diagnostics,queues:R,schemaSnapshot:me,schemaSnapshotPath:ve,workflows:C}};export{zl as SCHEMA_SNAPSHOT_FILENAME,jl as createCodegenProject,ql as findTsconfig,Uu as refreshCodegenProject,qu as runCodegen};