@lunora/codegen 1.0.0-alpha.191 → 1.0.0-alpha.193

package/dist/index.d.mts

@@ -633,6 +633,16 @@ interface MutatorIR {
   exportName: string;
   /** Path relative to `<projectRoot>/lunora/` without extension — always `"mutators"`. */
   filePath: string;
+  /** 1-based line of the `defineMutator(...)` call, for diagnostics and advisor findings. */
+  line: number;
+  /**
+   * The ownership column the declaration scopes the write to
+   * (`defineMutator({ owner: "userId" })`), or `undefined` when it declares
+   * none — which is also what the `mutator_without_owner_scope` lint reports,
+   * since an unowned mutator is a public write endpoint. Only a string-literal
+   * `owner` is lifted; a computed one reads as `undefined` rather than guessed.
+   */
+  owner?: string;
   /**
    * Serialized TS source for the authoritative `server` impl's return type,
    * `Promise<T>` unwrapped. `"unknown"` when ts-morph can't resolve it — same
@@ -1484,6 +1494,23 @@ interface OwnerFieldWriteIR {
   line: number;
   /** The `ctx.db` write method (`insert` / `replace` / `patch` / `insertManyUnsafe`). */
   method: string;
+  /**
+   * The enclosing `defineMutator` declared this very column as its `owner`, AND
+   * the value written resolves to that same `args[owner]`.
+   *
+   * `applyOwnerScope` requires a verified identity, rejects a client-supplied
+   * value that disagrees with it, and overwrites the column with the verified
+   * one before `server` runs — so on this exact shape `args[owner]` IS the
+   * server identity, and it is what the docs prescribe. Recorded rather than
+   * dropped at discovery: the write did happen, and the feeder is otherwise the
+   * only place that knows. `owner_field_from_args_not_auth` is what declines to
+   * report it.
+   *
+   * Deliberately NOT set when only the column NAME matches: `owner: "userId"`
+   * launders `args.userId` and nothing else, so `{ userId: args.targetUserId }`
+   * is a real IDOR and stays reportable.
+   */
+  ownerScoped?: true;
   /**
    * Visibility of the enclosing procedure. `internal` procedures are not
    * reachable by a caller, so the lint's premise ("any caller can write rows
@@ -2157,6 +2184,7 @@ interface LintSchemaOptions {
   mailRecipientAccesses?: ReadonlyArray<MailRecipientAccessIR>;
   maskProcedures?: ReadonlyArray<MaskProcedureIR>;
   maskStrategies?: ReadonlyArray<MaskStrategyIR>;
+  mutators?: ReadonlyArray<MutatorIR>;
   mutatorWrites?: ReadonlyArray<MutatorWriteIR>;
   nondeterministicCalls?: ReadonlyArray<NondeterministicCallIR>;
   normalizeIdAuthorizations?: ReadonlyArray<NormalizeIdAuthorizationIR>;
@@ -3451,6 +3479,30 @@ interface EmitAppOptions {
  * it can import the add-on packages the app installed (`@lunora/auth`,
  * `@lunora/storage`, …) directly.
  */
+/**
+ * Why the auth request instance is constructed before `ensureMigrated` (the
+ * emitted comment is deliberately short — it ships into every user's generated
+ * tree, where a description of another package's internals would rot unnoticed).
+ *
+ * `ensureMigrated` finishes by calling better-auth's
+ * `invalidateSchemaChecks(database)`. That call is a NO-OP until something has
+ * registered a schema check for the binding: it reads a `WeakMap` entry only
+ * `createSchemaCheck` writes, and returns silently when there is none.
+ *
+ * The adapter-backed request instance is the only thing that registers one
+ * (`@lunora/auth`'s `withAuthSchemaCheck`, keyed on the raw D1 binding — the same
+ * object `ensureMigrated` invalidates). Building it AFTER the migration therefore
+ * left that invalidation inert: a mismatch verdict observed against the
+ * pre-migration schema stayed cached for the life of the isolate even though the
+ * migration had just fixed it.
+ *
+ * The cost of the reorder is one pre-migration introspection sweep, and the
+ * `console.error` better-auth's eager check logs on a first boot against an
+ * unmigrated database. That is noise on a healthy cold start, not a fault.
+ *
+ * Verified against better-auth 1.7.3; `@better-auth/core/db/internal` is an
+ * internal subpath, so re-check on a minor bump.
+ */
 declare const emitApp: (rawOptions: EmitAppOptions) => string;
 /** A `.global()` table backed by D1 — the default when no `backend` is named. */
 declare const isD1GlobalTable: (table: TableIR) => boolean;

package/dist/index.d.ts

@@ -633,6 +633,16 @@ interface MutatorIR {
   exportName: string;
   /** Path relative to `<projectRoot>/lunora/` without extension — always `"mutators"`. */
   filePath: string;
+  /** 1-based line of the `defineMutator(...)` call, for diagnostics and advisor findings. */
+  line: number;
+  /**
+   * The ownership column the declaration scopes the write to
+   * (`defineMutator({ owner: "userId" })`), or `undefined` when it declares
+   * none — which is also what the `mutator_without_owner_scope` lint reports,
+   * since an unowned mutator is a public write endpoint. Only a string-literal
+   * `owner` is lifted; a computed one reads as `undefined` rather than guessed.
+   */
+  owner?: string;
   /**
    * Serialized TS source for the authoritative `server` impl's return type,
    * `Promise<T>` unwrapped. `"unknown"` when ts-morph can't resolve it — same
@@ -1484,6 +1494,23 @@ interface OwnerFieldWriteIR {
   line: number;
   /** The `ctx.db` write method (`insert` / `replace` / `patch` / `insertManyUnsafe`). */
   method: string;
+  /**
+   * The enclosing `defineMutator` declared this very column as its `owner`, AND
+   * the value written resolves to that same `args[owner]`.
+   *
+   * `applyOwnerScope` requires a verified identity, rejects a client-supplied
+   * value that disagrees with it, and overwrites the column with the verified
+   * one before `server` runs — so on this exact shape `args[owner]` IS the
+   * server identity, and it is what the docs prescribe. Recorded rather than
+   * dropped at discovery: the write did happen, and the feeder is otherwise the
+   * only place that knows. `owner_field_from_args_not_auth` is what declines to
+   * report it.
+   *
+   * Deliberately NOT set when only the column NAME matches: `owner: "userId"`
+   * launders `args.userId` and nothing else, so `{ userId: args.targetUserId }`
+   * is a real IDOR and stays reportable.
+   */
+  ownerScoped?: true;
   /**
    * Visibility of the enclosing procedure. `internal` procedures are not
    * reachable by a caller, so the lint's premise ("any caller can write rows
@@ -2157,6 +2184,7 @@ interface LintSchemaOptions {
   mailRecipientAccesses?: ReadonlyArray<MailRecipientAccessIR>;
   maskProcedures?: ReadonlyArray<MaskProcedureIR>;
   maskStrategies?: ReadonlyArray<MaskStrategyIR>;
+  mutators?: ReadonlyArray<MutatorIR>;
   mutatorWrites?: ReadonlyArray<MutatorWriteIR>;
   nondeterministicCalls?: ReadonlyArray<NondeterministicCallIR>;
   normalizeIdAuthorizations?: ReadonlyArray<NormalizeIdAuthorizationIR>;
@@ -3451,6 +3479,30 @@ interface EmitAppOptions {
  * it can import the add-on packages the app installed (`@lunora/auth`,
  * `@lunora/storage`, …) directly.
  */
+/**
+ * Why the auth request instance is constructed before `ensureMigrated` (the
+ * emitted comment is deliberately short — it ships into every user's generated
+ * tree, where a description of another package's internals would rot unnoticed).
+ *
+ * `ensureMigrated` finishes by calling better-auth's
+ * `invalidateSchemaChecks(database)`. That call is a NO-OP until something has
+ * registered a schema check for the binding: it reads a `WeakMap` entry only
+ * `createSchemaCheck` writes, and returns silently when there is none.
+ *
+ * The adapter-backed request instance is the only thing that registers one
+ * (`@lunora/auth`'s `withAuthSchemaCheck`, keyed on the raw D1 binding — the same
+ * object `ensureMigrated` invalidates). Building it AFTER the migration therefore
+ * left that invalidation inert: a mismatch verdict observed against the
+ * pre-migration schema stayed cached for the life of the isolate even though the
+ * migration had just fixed it.
+ *
+ * The cost of the reorder is one pre-migration introspection sweep, and the
+ * `console.error` better-auth's eager check logs on a first boot against an
+ * unmigrated database. That is noise on a healthy cold start, not a fault.
+ *
+ * Verified against better-auth 1.7.3; `@better-auth/core/db/internal` is an
+ * internal subpath, so re-check on a minor bump.
+ */
 declare const emitApp: (rawOptions: EmitAppOptions) => string;
 /** A `.global()` table backed by D1 — the default when no `backend` is named. */
 declare const isD1GlobalTable: (table: TableIR) => boolean;

package/dist/index.mjs

@@ -1 +1 @@
-import{SCHEMA_SNAPSHOT_VERSION as t,diffSchemaSnapshots as s,serializeSchemaSnapshot as a}from"./packem_shared/SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import{formatAdvisories as m,lintSchema as d,toAdvisorContext as f}from"./packem_shared/formatAdvisories-CkEu1eye.mjs";import{describeErrorLevelFindings as c,errorAdvisoryNames as n,errorPlatformDiagnosticNames as l}from"./packem_shared/describeErrorLevelFindings-D23VSkFP.mjs";import{CodegenDiagnosticError as x,diagnosticAt as E}from"./packem_shared/CodegenDiagnosticError-BUXlG3P-.mjs";import{AGENTS_FILENAME as u,discoverAgents as v}from"./packem_shared/AGENTS_FILENAME-B78F7DuQ.mjs";import{listLunoraSourceFiles as g}from"./packem_shared/listLunoraSourceFiles-D4xthUf-.mjs";import{default as O}from"./packem_shared/discoverAuthApiCalls-DoblmzUW.mjs";import{CONTAINERS_FILENAME as M,discoverContainers as T}from"./packem_shared/CONTAINERS_FILENAME-CQoUu7n7.mjs";import{default as h}from"./packem_shared/discoverCrons-CMu0sA8k.mjs";import{FLAGS_FILENAME as F,discoverFlags as I}from"./packem_shared/FLAGS_FILENAME-CoTJH0-7.mjs";import{default as D}from"./packem_shared/discoverFunctions-C9O2RBTz.mjs";import{default as U}from"./packem_shared/discoverHttpRoutes-S81Iv_iB.mjs";import{default as H}from"./packem_shared/discoverHyperdriveCalls-DP3Vb0HC.mjs";import{default as y}from"./packem_shared/discoverInserts-COk-Sm_n.mjs";import{d as W}from"./packem_shared/index-C4eKBBMk.mjs";import{default as V}from"./packem_shared/discoverMigrations-B_sYrTyE.mjs";import{MUTATORS_FILENAME as Q,discoverMutators as w}from"./packem_shared/MUTATORS_FILENAME-CTHlZ1j6.mjs";import{default as q}from"./packem_shared/discoverNondeterministicCalls-Dy6k2aPS.mjs";import{NOTIFY_FILENAME as Y,discoverNotifyCalls as X,discoverNotifyConfig as Z}from"./packem_shared/NOTIFY_FILENAME-Bgq52CnU.mjs";import{default as ee}from"./packem_shared/readPackageDependencies-C6h6FZuP.mjs";import{d as oe}from"./packem_shared/queries-CPlxXagL.mjs";import{QUEUES_FILENAME as se,discoverQueues as ae}from"./packem_shared/QUEUES_FILENAME-Q3CF3uYr.mjs";import{default as me}from"./packem_shared/discoverR2sqlCalls-FaK1-wbV.mjs";import{default as fe}from"./packem_shared/discoverRlsProcedures-D_J8cH-m.mjs";import{default as ce}from"./packem_shared/discoverRlsMetadata-DwULXx5T.mjs";import{discoverSandboxUsage as le}from"./packem_shared/discoverSandboxUsage-DskdDbkM.mjs";import{default as xe}from"./packem_shared/discoverSchema-DoZtXwLg.mjs";import{SHAPES_FILENAME as Ae,discoverShapes as ue}from"./packem_shared/SHAPES_FILENAME-Bvd5kgsF.mjs";import{default as Ne}from"./packem_shared/discoverStorageRulesMetadata-C3ywuLJd.mjs";import{WORKFLOWS_FILENAME as Ce,discoverWorkflows as Oe}from"./packem_shared/WORKFLOWS_FILENAME-BaSbufF2.mjs";import{G as Me,e as Te,a as _e,b as he,c as Le,d as Fe,f as Ie,g as Pe,h as De,i as Ge,j as Ue,k as be,l as He,m as je,n as ye}from"./packem_shared/emit-CTDEkEXh.mjs";import{emitApp as We}from"./packem_shared/emitApp-DLEEN6Yy.mjs";import{isD1GlobalTable as Ve,isHyperdriveGlobalTable as ze}from"./packem_shared/isD1GlobalTable-udvHAAzD.mjs";import{buildOpenApiDocument as we,emitOpenApi as Je,emitOpenApiModule as qe}from"./packem_shared/buildOpenApiDocument-D_-3ZGH1.mjs";import{OPENRPC_VERSION as Ye,buildOpenRpcDocument as Xe,emitOpenRpc as Ze,emitOpenRpcModule as $e}from"./packem_shared/OPENRPC_VERSION-COQLvoDY.mjs";import{DEFAULT_TARGET as rr,platformMatrixIds as or,readProjectTarget as tr,resolveCodegenTarget as sr}from"./packem_shared/DEFAULT_TARGET-DtzlGawL.mjs";import{PROJECT_CONFIG_FILENAMES as ir,findProjectConfigFile as mr,loadProjectConfig as dr,readProjectConfigLiterals as fr}from"./packem_shared/PROJECT_CONFIG_FILENAMES-D29yBg5X.mjs";import{SCHEMA_SNAPSHOT_FILENAME as cr,createCodegenProject as nr,findTsconfig as lr,refreshCodegenProject as Sr,runCodegen as xr}from"./packem_shared/SCHEMA_SNAPSHOT_FILENAME-CuWCb603.mjs";import{SchemaSnapshotParseError as Ar,buildSchemaSnapshot as ur,evaluateSchemaDrift as vr,parseSchemaSnapshot as Nr}from"./packem_shared/SchemaSnapshotParseError-lUWe6lPo.mjs";import{schemaFromIr as Cr}from"./packem_shared/schemaFromIr-BWFnvCVg.mjs";import{LUNORA_ERROR_CODES as Rr,validatorIrToJsonSchema as Mr}from"./packem_shared/LUNORA_ERROR_CODES-C2s0xWQD.mjs";import{SDK_LANGUAGES as _r,SDK_TARGETS as hr,generateSdk as Lr}from"./packem_shared/SDK_LANGUAGES-CFyux-74.mjs";import{redact as Ir,secretKindOf as Pr}from"./packem_shared/redact-Cy14LEnc.mjs";import{MESSAGE_SOLUTIONS as Gr,findSolutionByMessage as Ur}from"@lunora/errors";import{isTypedSchema as Hr}from"./packem_shared/isTypedSchema-B_qlBbE-.mjs";const e="0.0.0";export{u as AGENTS_FILENAME,M as CONTAINERS_FILENAME,x as CodegenDiagnosticError,rr as DEFAULT_TARGET,F as FLAGS_FILENAME,Me as GENERATED_HEADER,Rr as LUNORA_ERROR_CODES,Gr as LUNORA_SOLUTION_RULES,Q as MUTATORS_FILENAME,Y as NOTIFY_FILENAME,Ye as OPENRPC_VERSION,ir as PROJECT_CONFIG_FILENAMES,se as QUEUES_FILENAME,cr as SCHEMA_SNAPSHOT_FILENAME,t as SCHEMA_SNAPSHOT_VERSION,_r as SDK_LANGUAGES,hr as SDK_TARGETS,Ae as SHAPES_FILENAME,Ar as SchemaSnapshotParseError,e as VERSION,Ce as WORKFLOWS_FILENAME,we as buildOpenApiDocument,Xe as buildOpenRpcDocument,ur as buildSchemaSnapshot,nr as createCodegenProject,c as describeErrorLevelFindings,E as diagnosticAt,s as diffSchemaSnapshots,v as discoverAgents,O as discoverAuthApiCalls,T as discoverContainers,h as discoverCrons,I as discoverFlags,D as discoverFunctions,U as discoverHttpRoutes,H as discoverHyperdriveCalls,y as discoverInserts,W as discoverMaskProcedures,V as discoverMigrations,w as discoverMutators,q as discoverNondeterministicCalls,X as discoverNotifyCalls,Z as discoverNotifyConfig,oe as discoverQueries,ae as discoverQueues,me as discoverR2sqlCalls,ce as discoverRlsMetadata,fe as discoverRlsProcedures,le as discoverSandboxUsage,xe as discoverSchema,ue as discoverShapes,Ne as discoverStorageRulesMetadata,Oe as discoverWorkflows,Te as emitAgents,_e as emitApi,We as emitApp,he as emitCollections,Le as emitContainers,Fe as emitCrons,Ie as emitDataModel,Pe as emitDrizzleSchema,De as emitFunctions,Je as emitOpenApi,qe as emitOpenApiModule,Ze as emitOpenRpc,$e as emitOpenRpcModule,Ge as emitScheduler,Ue as emitServer,be as emitShard,He as emitVectors,je as emitWorkflows,ye as emitWranglerCronTriggers,n as errorAdvisoryNames,l as errorPlatformDiagnosticNames,vr as evaluateSchemaDrift,Ur as findLunoraSolution,mr as findProjectConfigFile,lr as findTsconfig,m as formatAdvisories,Lr as generateSdk,Ve as isD1GlobalTable,ze as isHyperdriveGlobalTable,Hr as isTypedSchema,d as lintSchema,g as listLunoraSourceFiles,dr as loadProjectConfig,Nr as parseSchemaSnapshot,or as platformMatrixIds,ee as readPackageDependencies,fr as readProjectConfigLiterals,tr as readProjectTarget,Ir as redact,Sr as refreshCodegenProject,sr as resolveCodegenTarget,xr as runCodegen,Cr as schemaFromIr,Pr as secretKindOf,a as serializeSchemaSnapshot,f as toAdvisorContext,Mr as validatorIrToJsonSchema};
+import{SCHEMA_SNAPSHOT_VERSION as t,diffSchemaSnapshots as s,serializeSchemaSnapshot as a}from"./packem_shared/SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import{formatAdvisories as m,lintSchema as d,toAdvisorContext as f}from"./packem_shared/formatAdvisories-DwmUKYuc.mjs";import{describeErrorLevelFindings as c,errorAdvisoryNames as n,errorPlatformDiagnosticNames as l}from"./packem_shared/describeErrorLevelFindings-D23VSkFP.mjs";import{CodegenDiagnosticError as x,diagnosticAt as E}from"./packem_shared/CodegenDiagnosticError-BUXlG3P-.mjs";import{AGENTS_FILENAME as u,discoverAgents as v}from"./packem_shared/AGENTS_FILENAME-B78F7DuQ.mjs";import{listLunoraSourceFiles as g}from"./packem_shared/listLunoraSourceFiles-D4xthUf-.mjs";import{default as O}from"./packem_shared/discoverAuthApiCalls-DoblmzUW.mjs";import{CONTAINERS_FILENAME as M,discoverContainers as T}from"./packem_shared/CONTAINERS_FILENAME-CQoUu7n7.mjs";import{default as h}from"./packem_shared/discoverCrons-CMu0sA8k.mjs";import{FLAGS_FILENAME as F,discoverFlags as I}from"./packem_shared/FLAGS_FILENAME-CoTJH0-7.mjs";import{default as D}from"./packem_shared/discoverFunctions-C9O2RBTz.mjs";import{default as U}from"./packem_shared/discoverHttpRoutes-S81Iv_iB.mjs";import{default as H}from"./packem_shared/discoverHyperdriveCalls-DP3Vb0HC.mjs";import{default as y}from"./packem_shared/discoverInserts-COk-Sm_n.mjs";import{d as W}from"./packem_shared/index-C4eKBBMk.mjs";import{default as V}from"./packem_shared/discoverMigrations-B_sYrTyE.mjs";import{MUTATORS_FILENAME as Q,discoverMutators as w}from"./packem_shared/MUTATORS_FILENAME-Cm2-NfDm.mjs";import{default as q}from"./packem_shared/discoverNondeterministicCalls-Dy6k2aPS.mjs";import{NOTIFY_FILENAME as Y,discoverNotifyCalls as X,discoverNotifyConfig as Z}from"./packem_shared/NOTIFY_FILENAME-Bgq52CnU.mjs";import{default as ee}from"./packem_shared/readPackageDependencies-C6h6FZuP.mjs";import{d as oe}from"./packem_shared/queries-CPlxXagL.mjs";import{QUEUES_FILENAME as se,discoverQueues as ae}from"./packem_shared/QUEUES_FILENAME-Q3CF3uYr.mjs";import{default as me}from"./packem_shared/discoverR2sqlCalls-FaK1-wbV.mjs";import{default as fe}from"./packem_shared/discoverRlsProcedures-D_J8cH-m.mjs";import{default as ce}from"./packem_shared/discoverRlsMetadata-DwULXx5T.mjs";import{discoverSandboxUsage as le}from"./packem_shared/discoverSandboxUsage-DskdDbkM.mjs";import{default as xe}from"./packem_shared/discoverSchema-DoZtXwLg.mjs";import{SHAPES_FILENAME as Ae,discoverShapes as ue}from"./packem_shared/SHAPES_FILENAME-Bvd5kgsF.mjs";import{default as Ne}from"./packem_shared/discoverStorageRulesMetadata-C3ywuLJd.mjs";import{WORKFLOWS_FILENAME as Ce,discoverWorkflows as Oe}from"./packem_shared/WORKFLOWS_FILENAME-BaSbufF2.mjs";import{G as Me,e as Te,a as _e,b as he,c as Le,d as Fe,f as Ie,g as Pe,h as De,i as Ge,j as Ue,k as be,l as He,m as je,n as ye}from"./packem_shared/emit-CTDEkEXh.mjs";import{emitApp as We}from"./packem_shared/emitApp-dpkp-O2j.mjs";import{isD1GlobalTable as Ve,isHyperdriveGlobalTable as ze}from"./packem_shared/isD1GlobalTable-udvHAAzD.mjs";import{buildOpenApiDocument as we,emitOpenApi as Je,emitOpenApiModule as qe}from"./packem_shared/buildOpenApiDocument-D_-3ZGH1.mjs";import{OPENRPC_VERSION as Ye,buildOpenRpcDocument as Xe,emitOpenRpc as Ze,emitOpenRpcModule as $e}from"./packem_shared/OPENRPC_VERSION-COQLvoDY.mjs";import{DEFAULT_TARGET as rr,platformMatrixIds as or,readProjectTarget as tr,resolveCodegenTarget as sr}from"./packem_shared/DEFAULT_TARGET-DtzlGawL.mjs";import{PROJECT_CONFIG_FILENAMES as ir,findProjectConfigFile as mr,loadProjectConfig as dr,readProjectConfigLiterals as fr}from"./packem_shared/PROJECT_CONFIG_FILENAMES-D29yBg5X.mjs";import{SCHEMA_SNAPSHOT_FILENAME as cr,createCodegenProject as nr,findTsconfig as lr,refreshCodegenProject as Sr,runCodegen as xr}from"./packem_shared/SCHEMA_SNAPSHOT_FILENAME-D4JKkyfD.mjs";import{SchemaSnapshotParseError as Ar,buildSchemaSnapshot as ur,evaluateSchemaDrift as vr,parseSchemaSnapshot as Nr}from"./packem_shared/SchemaSnapshotParseError-lUWe6lPo.mjs";import{schemaFromIr as Cr}from"./packem_shared/schemaFromIr-BWFnvCVg.mjs";import{LUNORA_ERROR_CODES as Rr,validatorIrToJsonSchema as Mr}from"./packem_shared/LUNORA_ERROR_CODES-C2s0xWQD.mjs";import{SDK_LANGUAGES as _r,SDK_TARGETS as hr,generateSdk as Lr}from"./packem_shared/SDK_LANGUAGES-CFyux-74.mjs";import{redact as Ir,secretKindOf as Pr}from"./packem_shared/redact-Cy14LEnc.mjs";import{MESSAGE_SOLUTIONS as Gr,findSolutionByMessage as Ur}from"@lunora/errors";import{isTypedSchema as Hr}from"./packem_shared/isTypedSchema-B_qlBbE-.mjs";const e="0.0.0";export{u as AGENTS_FILENAME,M as CONTAINERS_FILENAME,x as CodegenDiagnosticError,rr as DEFAULT_TARGET,F as FLAGS_FILENAME,Me as GENERATED_HEADER,Rr as LUNORA_ERROR_CODES,Gr as LUNORA_SOLUTION_RULES,Q as MUTATORS_FILENAME,Y as NOTIFY_FILENAME,Ye as OPENRPC_VERSION,ir as PROJECT_CONFIG_FILENAMES,se as QUEUES_FILENAME,cr as SCHEMA_SNAPSHOT_FILENAME,t as SCHEMA_SNAPSHOT_VERSION,_r as SDK_LANGUAGES,hr as SDK_TARGETS,Ae as SHAPES_FILENAME,Ar as SchemaSnapshotParseError,e as VERSION,Ce as WORKFLOWS_FILENAME,we as buildOpenApiDocument,Xe as buildOpenRpcDocument,ur as buildSchemaSnapshot,nr as createCodegenProject,c as describeErrorLevelFindings,E as diagnosticAt,s as diffSchemaSnapshots,v as discoverAgents,O as discoverAuthApiCalls,T as discoverContainers,h as discoverCrons,I as discoverFlags,D as discoverFunctions,U as discoverHttpRoutes,H as discoverHyperdriveCalls,y as discoverInserts,W as discoverMaskProcedures,V as discoverMigrations,w as discoverMutators,q as discoverNondeterministicCalls,X as discoverNotifyCalls,Z as discoverNotifyConfig,oe as discoverQueries,ae as discoverQueues,me as discoverR2sqlCalls,ce as discoverRlsMetadata,fe as discoverRlsProcedures,le as discoverSandboxUsage,xe as discoverSchema,ue as discoverShapes,Ne as discoverStorageRulesMetadata,Oe as discoverWorkflows,Te as emitAgents,_e as emitApi,We as emitApp,he as emitCollections,Le as emitContainers,Fe as emitCrons,Ie as emitDataModel,Pe as emitDrizzleSchema,De as emitFunctions,Je as emitOpenApi,qe as emitOpenApiModule,Ze as emitOpenRpc,$e as emitOpenRpcModule,Ge as emitScheduler,Ue as emitServer,be as emitShard,He as emitVectors,je as emitWorkflows,ye as emitWranglerCronTriggers,n as errorAdvisoryNames,l as errorPlatformDiagnosticNames,vr as evaluateSchemaDrift,Ur as findLunoraSolution,mr as findProjectConfigFile,lr as findTsconfig,m as formatAdvisories,Lr as generateSdk,Ve as isD1GlobalTable,ze as isHyperdriveGlobalTable,Hr as isTypedSchema,d as lintSchema,g as listLunoraSourceFiles,dr as loadProjectConfig,Nr as parseSchemaSnapshot,or as platformMatrixIds,ee as readPackageDependencies,fr as readProjectConfigLiterals,tr as readProjectTarget,Ir as redact,Sr as refreshCodegenProject,sr as resolveCodegenTarget,xr as runCodegen,Cr as schemaFromIr,Pr as secretKindOf,a as serializeSchemaSnapshot,f as toAdvisorContext,Mr as validatorIrToJsonSchema};

package/dist/packem_shared/MUTATORS_FILENAME-Cm2-NfDm.mjs

@@ -0,0 +1 @@
+import{existsSync as p}from"node:fs";import{join as f}from"node:path";import{Node as o,SyntaxKind as c}from"ts-morph";import{diagnosticAt as l}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{a as g}from"./module-specifiers-WF8iAydP.mjs";import{a as d}from"./parse-validator-tdRHHDzh.mjs";import{u as x}from"./unwrap-handler-return-CmIWbykC.mjs";const y="mutators.ts",m=g,M=r=>{const t=r.getSymbol();if(!t)return r.getText()==="defineMutator";for(const e of t.getDeclarations())if(o.isImportSpecifier(e))return m(e.getImportDeclaration().getModuleSpecifierValue())?e.getNameNode().getText()==="defineMutator":!1;return!1},S=r=>{const t=r.getSymbol();if(!t)return!1;for(const e of t.getDeclarations()){if(!o.isNamespaceImport(e))continue;const i=e.getFirstAncestorByKind(c.ImportDeclaration);return i!==void 0&&m(i.getModuleSpecifierValue())}return!1},N=r=>{if(o.isIdentifier(r))return M(r);if(o.isPropertyAccessExpression(r)){const t=r.getExpression();return r.getName()==="defineMutator"&&o.isIdentifier(t)&&S(t)}return!1},I=r=>{const t=r.getArguments()[0];return t&&o.isObjectLiteralExpression(t)?t:void 0},P=r=>{const t=r?.getProperty("args");if(!t||!o.isPropertyAssignment(t))return{};const e=t.getInitializer();return e&&o.isObjectLiteralExpression(e)?d(e):{}},b=r=>{const t=r?.getProperty("server");if(!t||!o.isPropertyAssignment(t))return"unknown";const e=t.getInitializer();return!e||!(o.isArrowFunction(e)||o.isFunctionExpression(e))?"unknown":x(e)},A=r=>{const t=r?.getProperty("owner");if(!t||!o.isPropertyAssignment(t))return;const e=t.getInitializer();return e&&o.isStringLiteral(e)?e.getLiteralValue():void 0},E=r=>{const t=[];for(const e of r.getVariableDeclarations()){if(!e.isExported())continue;const i=e.getInitializer();if(i?.getKind()!==c.CallExpression)continue;const n=i,a=n.getExpression();if(!N(a))continue;const s=e.getNameNode();if(!o.isIdentifier(s))throw l(s,"defineMutator exports must be plain named exports (no destructuring)");const u=I(n);t.push({args:P(u),exportName:s.getText(),filePath:"mutators",line:n.getStartLineNumber(),owner:A(u),returnType:b(u)})}return t},h=(r,t)=>{const e=f(t,y);if(!p(e))return[];const i=r.getSourceFile(e)??r.addSourceFileAtPath(e),n=E(i);return n.sort((a,s)=>a.exportName.localeCompare(s.exportName)),n};export{y as MUTATORS_FILENAME,h as discoverMutators,N as isDefineMutatorCallee};

package/dist/packem_shared/SCHEMA_SNAPSHOT_FILENAME-D4JKkyfD.mjs

@@ -0,0 +1,9 @@
+import{existsSync as b,mkdirSync as Is,readFileSync as _t,writeFileSync as ws,rmSync as Ts}from"node:fs";import{join as E,dirname as ne}from"node:path";import{performance as Ae}from"node:perf_hooks";import{runAdvisor as Cs}from"@lunora/advisor";import{LunoraError as L}from"@lunora/errors";import{SyntaxKind as l,Node as o,VariableDeclarationKind as Fs,Project as ct}from"ts-morph";import{serializeSchemaSnapshot as Os}from"./SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import{toAdvisorContext as Rs}from"./formatAdvisories-DwmUKYuc.mjs";import{s as Ls}from"./paths-C-9fwEgQ.mjs";import{C as re,o as zt,j as Ds,f as ks,k as Ms,b as Ks,c as _s,m as zs,e as $s,p as Us,d as qs,i as Bs,l as Vs,g as Ws,q as js,n as Hs,a as Gs,h as Ys}from"./emit-CTDEkEXh.mjs";import{isD1GlobalTable as $t,isHyperdriveGlobalTable as Ut}from"./isD1GlobalTable-udvHAAzD.mjs";import{discoverAgents as Qs}from"./AGENTS_FILENAME-B78F7DuQ.mjs";import{discoverContainers as Xs}from"./CONTAINERS_FILENAME-CQoUu7n7.mjs";import Zs from"./discoverCrons-CMu0sA8k.mjs";import{diagnosticAt as ue}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{b as de}from"./module-specifiers-WF8iAydP.mjs";import{listLunoraSourceFiles as p,unwrapExpression as G,listSecurityScanFiles as Re,objectLiteralFromCallbackBody as qt,propertyInitializer as A,lunoraRelativePath as x,collectCallRows as w,collectSecurityCallRows as Js,limitNameOf as Bt,isContextIdentifier as Ie,handlerOf as en,isDatabaseAccessor as D,readTargetOf as Vt,enclosingExportName as tn}from"./listLunoraSourceFiles-D4xthUf-.mjs";import sn from"./readPackageDependencies-C6h6FZuP.mjs";import{discoverQueues as nn}from"./QUEUES_FILENAME-Q3CF3uYr.mjs";import{discoverSandboxUsage as rn}from"./discoverSandboxUsage-DskdDbkM.mjs";import on from"./discoverStorageRulesMetadata-C3ywuLJd.mjs";import{a as y,c as k,d as Wt,e as an}from"./classify-procedure-call-BIlyTUBD.mjs";import{discoverWorkflows as cn}from"./WORKFLOWS_FILENAME-BaSbufF2.mjs";import{gatePlatformFeatures as ln,resolveCodegenTarget as un,readTargetDiagnostics as dn}from"./DEFAULT_TARGET-DtzlGawL.mjs";import{i as R,a as _,e as v,r as fn,b as gn,s as fe,c as pn,f as mn,d as hn}from"./queries-CPlxXagL.mjs";import{r as ge,s as xn}from"./parse-validator-tdRHHDzh.mjs";import vn from"./discoverAuthApiCalls-DoblmzUW.mjs";import lt from"./discoverFunctions-C9O2RBTz.mjs";import{i as En,r as yn,e as Sn}from"./unwrap-handler-return-CmIWbykC.mjs";import ut from"./discoverHttpRoutes-S81Iv_iB.mjs";import An from"./discoverHyperdriveCalls-DP3Vb0HC.mjs";import Nn from"./discoverInserts-COk-Sm_n.mjs";import{m as Le,a as oe,s as jt,d as bn}from"./index-C4eKBBMk.mjs";import{e as Ht}from"./exported-procedure-chains-Bqdp4ywr.mjs";import Pn from"./discoverMigrations-B_sYrTyE.mjs";import{MUTATORS_FILENAME as In,isDefineMutatorCallee as wn,discoverMutators as dt}from"./MUTATORS_FILENAME-Cm2-NfDm.mjs";import Tn from"./discoverNondeterministicCalls-Dy6k2aPS.mjs";import{discoverNotifyConfig as Cn,discoverNotifyCalls as Fn}from"./NOTIFY_FILENAME-Bgq52CnU.mjs";import On from"./discoverR2sqlCalls-FaK1-wbV.mjs";import Rn from"./discoverRlsProcedures-D_J8cH-m.mjs";import Ln from"./discoverRlsMetadata-DwULXx5T.mjs";import Dn from"./discoverSchema-DoZtXwLg.mjs";import{secretKindOf as kn,redact as Mn,isHeuristicSecretKind as Kn,isSecretishName as _n}from"./redact-Cy14LEnc.mjs";import{discoverShapes as zn}from"./SHAPES_FILENAME-Bvd5kgsF.mjs";import{emitApp as $n}from"./emitApp-dpkp-O2j.mjs";import{buildOpenApiDocument as Un,emitOpenApiModule as qn}from"./buildOpenApiDocument-D_-3ZGH1.mjs";import{buildOpenRpcDocument as Bn,emitOpenRpcModule as Vn}from"./OPENRPC_VERSION-COQLvoDY.mjs";import{buildSchemaSnapshot as Wn}from"./SchemaSnapshotParseError-lUWe6lPo.mjs";const ft=(e,t="api")=>{const s=new Map;for(const n of e){const i=Ls(n),r=s.get(i);if(r===void 0){s.set(i,n);continue}if(r!==n){const a=t==="api"?`the generated api.ts would declare "${i}" twice and the dispatch key "${i}:<fn>" would be ambiguous`:`the generated api.ts would declare "${i}" twice in HttpStreamsRef and again in the httpStreams object literal`;throw new L("INTERNAL",`@lunora/codegen: "${r}" and "${n}" both map to the ${t} namespace "${i}" — ${a}. Rename one file so the two differ by more than a non-identifier character (\`-\`, \`.\`, \`/\` and \`_\` all sanitize to \`_\`).`,{status:500})}}},jn=(e,t={})=>{const{hasVectors:s=!0,scheduler:n=!1,storage:i=!1,usage:r}=t,a=[];e.tables.some(c=>$t(c))&&a.push({name:"@lunora/d1",reason:"`.global()` tables are D1-backed, so `_generated/app.ts` imports the D1 `ctx.db` adapter"}),e.tables.some(c=>Ut(c))&&a.push({name:"@lunora/hyperdrive",reason:'`.global({ backend: "hyperdrive" })` tables route through `@lunora/hyperdrive/global`'},{name:"@lunora/sql-store",reason:'`.global({ backend: "hyperdrive" })` makes `_generated/app.ts` import the `SqlCtxDbOptions` / `SqlExec` types'}),n&&a.push({name:"@lunora/scheduler",reason:"a declared cron (or `ctx.scheduler` use) makes `_generated/app.ts` import `createScheduler`"}),i&&a.push({name:"@lunora/storage",reason:"a `v.storage()` column, a storage access rule (or `ctx.storage` use) makes `_generated/app.ts` import `createStorage`"}),e.vectorIndexes.length>0&&s&&a.push({name:"@lunora/bindings",reason:"`.vectorize()` indexes make `_generated/shard.ts` import `@lunora/bindings/vectors`"});for(const c of r===void 0?[]:re)c.requiredPackage!==void 0&&r?.[c.key]===!0&&a.push({name:c.requiredPackage,reason:`\`ctx.${c.contextProperty??c.key}\` usage makes \`_generated/\` import \`${c.moduleSpecifier}\``});return a.filter((c,u)=>a.findIndex(d=>d.name===c.name)===u)},Hn=(e,t,s={})=>{if(t===void 0)return;const n=jn(e,s).filter(r=>!t.has(r.name));if(n.length===0)return;const i=n.map(r=>`  - ${r.name} — ${r.reason}`).join(`
+`);throw new L("INTERNAL",`@lunora/codegen: this schema's generated code imports packages the project does not declare:
+${i}
+
+Install them with your package manager, then re-run codegen.`)},Gn="env.ts",Yn=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineEnv";for(const s of t.getDeclarations())if(o.isImportSpecifier(s))return de(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineEnv":!1;return!1},Qn=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!o.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&de(n.getModuleSpecifierValue())}return!1},Xn=e=>{if(o.isIdentifier(e))return Yn(e);if(o.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineEnv"&&o.isIdentifier(t)&&Qn(t)}return!1},Zn=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!Xn(n.getExpression()))continue;const r=s.getNameNode();if(!o.isIdentifier(r))throw ue(r,"defineEnv exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},Jn=(e,t)=>{const s=E(t,Gn);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),i=Zn(n);if(i.length!==0){if(i.length>1)throw ue(n,`lunora/env.ts declares ${i.length.toString()} defineEnv() contracts (${i.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return i[0]}},gt="ctx",Gt=e=>{const t=new Set,s=new Set([gt]),n=r=>{if(o.isObjectBindingPattern(r))for(const a of r.getElements()){const c=a.getPropertyNameNode()?.getText()??a.getName();c&&t.add(c)}};for(const r of e.getDescendantsOfKind(l.BindingElement)){if((r.getPropertyNameNode()?.getText()??r.getName())!==gt)continue;const a=r.getNameNode();o.isIdentifier(a)?s.add(a.getText()):n(a)}const i=r=>o.isIdentifier(r)&&s.has(r.getText());for(const r of e.getDescendantsOfKind(l.PropertyAccessExpression))i(r.getExpression())&&t.add(r.getName());for(const r of e.getDescendantsOfKind(l.VariableDeclaration)){const a=r.getInitializer();a!==void 0&&i(a)&&n(r.getNameNode())}return t},er=(e,t)=>{const s=Object.fromEntries(re.map(n=>[n.key,!1]));for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=new Set(i.getImportDeclarations().map(c=>c.getModuleSpecifierValue())),a=Gt(i);for(const c of re)if(!s[c.key]){if(r.has(c.moduleSpecifier)){s[c.key]=!0;continue}c.contextProperty!==void 0&&a.has(c.contextProperty)&&(s[c.key]=!0)}if(re.every(c=>s[c.key]))break}return s},Yt="identity.ts",tr=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineIdentity";for(const s of t.getDeclarations())if(o.isImportSpecifier(s))return de(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineIdentity":!1;return!1},sr=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!o.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&de(n.getModuleSpecifierValue())}return!1},nr=e=>{if(o.isIdentifier(e))return tr(e);if(o.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineIdentity"&&o.isIdentifier(t)&&sr(t)}return!1},rr=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!nr(n.getExpression()))continue;const r=s.getNameNode();if(!o.isIdentifier(r))throw ue(r,"defineIdentity exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},ir=(e,t)=>{const s=E(t,Yt);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),i=rr(n);if(i.length!==0){if(i.length>1)throw ue(n,`lunora/identity.ts declares ${i.length.toString()} defineIdentity() contracts (${i.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return i[0]}},or=(e,t)=>{const s=G(t);if(s===void 0||!o.isIdentifier(s))return s;const n=s.getText();return G(e.getDescendantsOfKind(l.VariableDeclaration).find(i=>i.getName()===n)?.getInitializer())},ar=e=>e!==void 0&&o.isObjectLiteralExpression(e)&&e.getProperties().some(t=>{if(o.isShorthandPropertyAssignment(t))return t.getName()==="durable";if(!o.isPropertyAssignment(t)||t.getName()!=="durable")return!1;const s=t.getInitializer();return s===void 0||G(s)?.getText()!=="false"}),cr=(e,t)=>{const s={durableStreams:!1,secrets:!1};for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);if(s.secrets||(s.secrets=Gt(i).has("secrets")),s.durableStreams||(s.durableStreams=i.getDescendantsOfKind(l.CallExpression).some(r=>{const a=r.getExpression();return(o.isPropertyAccessExpression(a)?a.getName():a.getText())==="stream"&&r.getArguments().some(u=>ar(or(i,u)))})),s.durableStreams&&s.secrets)break}return s},lr="createWorker",ur="extend",pt=e=>e!==void 0&&(o.isStringLiteral(e)||o.isNoSubstitutionTemplateLiteral(e))?e.getLiteralValue():void 0,mt=e=>{const t=[],s=pt(A(e,"backupCron"));s!==void 0&&t.push(s);const n=A(e,"crons");if(n===void 0||!o.isObjectLiteralExpression(n))return t;for(const i of n.getProperties()){if(!o.isPropertyAssignment(i)&&!o.isMethodDeclaration(i))continue;const r=pt(i.getNameNode());r!==void 0&&t.push(r)}return t},dr=e=>{const t=y(e.getExpression()),[s]=e.getArguments();if(s===void 0)return[];if(t===lr)return o.isObjectLiteralExpression(s)?mt(s):[];if(t!==ur||!(o.isArrowFunction(s)||o.isFunctionExpression(s)))return[];const n=qt(s.getBody());return n===void 0?[]:mt(n)},fr=(e,t)=>{const s=[];for(const{filePath:n}of Re(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of i.getDescendantsOfKind(l.CallExpression))s.push(...dr(r))}return[...new Set(s)]},Qt=e=>{if(e.kind==="id")return e.tableName;if(!(e.kind!=="array"&&e.kind!=="optional"))return e.inner===void 0?void 0:Qt(e.inner)},gr=e=>{const t=new Set(e.tables.map(s=>s.name));return e.tables.some(s=>Object.values(s.shape).some(n=>{const i=Qt(n);return i!==void 0&&t.has(i)}))},pr=(e,t)=>{const s=new Map,n=new Map,i=new Map;for(const r of e)s.set(r.name,`workflow "${r.exportName}"`),n.set(r.bindingName,`workflow "${r.exportName}"`),i.set(r.className,`workflow "${r.exportName}"`);for(const r of t){const a=s.get(r.name);if(a!==void 0)throw new L("DUPLICATE_WORKFLOW_NAME",`Duplicate deployed name "${r.name}": produced by both ${a} and agent "${r.exportName}". Workflow and agent names share the same wrangler workflows[] array and must be unique together.`,{status:500});const c=n.get(r.bindingName);if(c!==void 0)throw new L("DUPLICATE_WORKFLOW_BINDING",`Duplicate binding "${r.bindingName}": produced by both ${c} and agent "${r.exportName}". Workflow and agent bindings share the same wrangler workflows[] array and must be unique together.`,{status:500});const u=i.get(r.className);if(u!==void 0)throw new L("DUPLICATE_WORKFLOW_CLASS",`Duplicate generated class "${r.className}": produced by both ${u} and agent "${r.exportName}". Workflow and agent export names must yield unique generated class names.`,{status:500})}},mr=e=>{const{lunoraDirectory:t,project:s,projectRoot:n,schema:i}=e,r=ir(s,t),a=Jn(s,t),c=cn(s,t),u=nn(s,t),d=Qs(s,t);pr(c,d);const h=Xs(s,t),m=on(s,t),P=Zs(s,t,c,d),M=fr(s,t),g=cr(s,t),T=rn(s,t),F=er(s,t);F.browser=F.browser||T.usesSandboxBrowser;const U=ln(F,un(n,e.target),{agents:d.length>0,commitOrderedTables:i.tables.some(N=>N.commitOrdered===!0),cronTriggers:P.length>0,crossShardFanout:i.tables.some(N=>typeof N.shardMode=="object"),durableStreams:g.durableStreams,globalTables:i.tables.some(N=>N.shardMode==="global"),queues:u.length>0,relationGraph:gr(i),secrets:g.secrets,vectorStore:i.vectorIndexes.length>0}),S=U.usage,O=U.signals.vectorStore!==!1,z=sn(n),W=z??new Set,X=W.has("lunorash");Hn(i,z,{hasVectors:O,scheduler:S.scheduler||P.length>0,storage:S.storage||m.rules.length>0||Object.keys(zt(i)).length>0,usage:S});const K=b(E(t,"flags.ts")),C=b(E(t,"notify.ts"));return{agents:d,containers:h,crons:P,dataModelContent:ks(i),declaredDependencies:z,dependencies:W,entryCronTriggers:M,env:a,featureUsage:S,hasFlags:K,hasNotify:C,identity:r,platformGate:{...U,diagnostics:[...dn(n,e.target),...U.diagnostics]},queues:u,serverContent:Ds({agents:d,containers:h,env:a,hasAccessFacade:S.access,hasAi:S.ai,hasAnalytics:S.analytics,hasBrowser:S.browser,hasVectors:O,hasFlags:K,hasHyperdrive:S.hyperdrive,hasImages:S.images,hasKv:S.kv,hasNotify:C,hasPayments:S.payments,hasPipelines:S.pipelines,hasR2sql:S.r2sql,hasX402:S.x402,identity:r,queues:u,schema:i,storageRuleBuckets:m.rules.map(N=>N.bucket),useUmbrella:X,workflows:c}),storageRulesMetadata:m,usesSandbox:T.usesSandboxBrowser||T.usesSandboxContainer||T.usesSandboxFs,useUmbrella:X,workflows:c}},Xt=new Set(["delete","get","head","options","patch","post","put"]),hr=new Set(["handler","stream"]),xr=/\/(?:_|admin|internal|superuser|sudo|root|debug)/iu,ht=new Set(["ADMIN_TOKEN","adminToken","assertAdmin","assertAuth","auth","Authorization","getSession","identity","isAdmin","requireAdmin","requireAuth","requireRole","verifyAdmin"]),vr=e=>{if(!o.isCallExpression(e))return;const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!Xt.has(t.getName()))return;const s=t.getExpression();if(!o.isIdentifier(s)||s.getText()!=="httpRoute")return;const n=e.getArguments()[0];if(!(!n||!o.isStringLiteral(n)))return{method:t.getName().toUpperCase(),path:n.getLiteralValue()}},Er=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t))return;let s=t.getExpression();for(;o.isCallExpression(s);){const n=s.getExpression();if(!o.isPropertyAccessExpression(n)||Xt.has(n.getName()))break;s=n.getExpression()}return vr(s)},yr=e=>{for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression))if(ht.has(t.getName()))return!0;for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=t.getExpression();if(o.isIdentifier(s)&&ht.has(s.getText()))return!0}return!1},Sr=(e,t)=>{const s=e.getInitializer();if(!s||!o.isCallExpression(s))return;const n=s.getExpression();if(!o.isPropertyAccessExpression(n)||!hr.has(n.getName()))return;const i=Er(s);if(!i||!xr.test(i.path))return;const r=s.getArguments()[0],a=r!==void 0&&(o.isArrowFunction(r)||o.isFunctionExpression(r))&&yr(r);return{exportName:e.getName(),file:t,method:i.method,path:i.path,usesGuard:a}},Ar=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const i of n.getDeclarations()){const r=Sr(i,t);r&&s.push(r)}return s},Nr=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Ar(i,x(t,n)))}return s},br=e=>!o.isPropertyAccessExpression(e)||e.getName()!=="run"?!1:e.getExpression().getText()==="ctx.ai",Pr=(e,t)=>{if(!br(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!R(s)||_(s)))return{exportName:v(e),file:t,line:e.getStartLineNumber()}},Ir=(e,t)=>w(e,t,Pr),wr=new Set(["generateText","streamText"]),Tr=new Set(["messages","prompt","system"]),Cr=[{methods:new Set(["delete","insert","insertManyUnsafe","patch","replace"]),prefixes:["context.db","ctx.db"]},{methods:new Set(["run","runAction","runMutation"]),prefixes:["context","ctx"]},{methods:new Set(["fetch"]),prefixes:["context","ctx"]},{methods:new Set(["queue","send"]),prefixes:["context.email","context.mail","ctx.email","ctx.mail"]}],Fr=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t))return;const s=t.getName(),n=t.getExpression().getText();for(const i of Cr)if(i.methods.has(s)&&i.prefixes.some(r=>n===r||n.startsWith(`${r}.`)))return`${n}.${s}`},Or=e=>{for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=Fr(t);if(s!==void 0)return s}},Rr=e=>{const t=new Set,s=e.getFirstAncestor(r=>o.isArrowFunction(r)||o.isFunctionExpression(r)||o.isFunctionDeclaration(r)),[n]=s?.getParameters()??[],i=n?.getNameNode();if(i===void 0||!o.isObjectBindingPattern(i))return t;for(const r of i.getElements()){const a=r.getPropertyNameNode()?.getText()??r.getName(),c=r.getNameNode();if(a==="args"&&o.isObjectBindingPattern(c))for(const u of c.getElements())t.add(u.getName())}return t},Lr=e=>{if(fn(e))return!0;const t=Rr(e);return t.size===0?!1:e.getDescendantsOfKind(l.Identifier).some(s=>t.has(s.getText()))},Dr=e=>{for(const t of e.getProperties()){if(!o.isPropertyAssignment(t)||!Tr.has(t.getName()))continue;const s=t.getInitializer();if(s!==void 0&&Lr(s))return!0}return!1},kr=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const i=y(n.getExpression());if(i===void 0||!wr.has(i))continue;const[r]=n.getArguments();if(r===void 0||!o.isObjectLiteralExpression(r))continue;let a;for(const c of r.getDescendantsOfKind(l.CallExpression))if(y(c.getExpression())==="tool"&&(a=Or(c),a!==void 0))break;a!==void 0&&s.push({exportName:v(n),file:t,line:n.getStartLineNumber(),method:i,sideEffect:a,userInputDerived:Dr(r)})}return s},Mr=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...kr(i,x(t,n)))}return s},Kr=e=>{if(!o.isPropertyAccessExpression(e)||e.getName()!=="fetch")return!1;const t=e.getExpression();return o.isIdentifier(t)&&t.getText()==="ctx"},_r=(e,t)=>{if(!Kr(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!R(s)))return{exportName:v(e),file:t,line:e.getStartLineNumber()}},zr=(e,t)=>w(e,t,_r),De=(e,t=new Set)=>{if(t.has(e))return!0;t.add(e);try{return e.getProperties().some(s=>{if(!o.isSpreadAssignment(s))return!1;const n=ge(s.getExpression());return n===void 0||De(n,t)})}finally{t.delete(e)}},$r=e=>{const t=e.getArguments()[0];if(!t||!o.isObjectLiteralExpression(t))return{objects:[],opaque:!0};const s=t.getProperty("args");if(!s)return{objects:[],opaque:!1};if(!o.isPropertyAssignment(s))return{objects:[],opaque:!0};const n=s.getInitializer(),i=n===void 0?void 0:ge(n);return i===void 0?{objects:[],opaque:!0}:{objects:[i],opaque:De(i)}},Ur=e=>{const t=[];let s=!1,n=e;for(;o.isCallExpression(n);){const i=n.getExpression();if(!o.isPropertyAccessExpression(i))break;if(i.getName()==="input"){const r=n.getArguments()[0],a=r!==void 0&&o.isExpression(r)?ge(r):void 0;a===void 0?s=!0:(t.push(a),s||=De(a))}n=i.getExpression()}return{objects:t,opaque:s}},ke=(e,t)=>t?Ur(t):$r(e),Zt=(e,t)=>{if(t.has(e))return[];t.add(e);try{return e.getProperties().flatMap(s=>{if(o.isSpreadAssignment(s)){const n=ge(s.getExpression());return n===void 0?[]:Zt(n,t)}return o.isPropertyAssignment(s)||o.isShorthandPropertyAssignment(s)?[s.getName()]:[]})}finally{t.delete(e)}},qr=e=>e.flatMap(t=>Zt(t,new Set)),Br=new Set(["check","length","max"]),we=e=>{if(!o.isCallExpression(e))return;const t=e.getExpression();if(!(!o.isPropertyAccessExpression(t)||t.getExpression().getText()!=="v"))return t.getName()},Vr=e=>[e,...e.getDescendants()].filter(t=>we(t)!==void 0),Wr=e=>{let t=e;for(;;){const s=t.getParent();if(!s||!o.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;const n=s.getParent();if(!n||!o.isCallExpression(n)||n.getExpression()!==s)return!1;if(Br.has(s.getName()))return!0;t=n}},jr=e=>{const t=[],s=[];for(const n of e)for(const i of n.getProperties()){if(!o.isPropertyAssignment(i))continue;const r=i.getInitializer();if(!r)continue;const a=Vr(r),c=i.getName();a.some(u=>we(u)==="any")?t.push(c):a.some(u=>we(u)==="string"&&!Wr(u))&&s.push(c)}return{anyArgs:t,unboundedStringArgs:s}},Hr=(e,t)=>{const s=e.getInitializer();if(!s||!o.isCallExpression(s))return;const n=k(s);if(n?.visibility!=="public")return;const{objects:i}=ke(s,n.receiver),{anyArgs:r,unboundedStringArgs:a}=jr(i);if(!(r.length===0&&a.length===0))return{anyArgs:r,exportName:e.getName(),file:t,line:s.getStartLineNumber(),unboundedStringArgs:a}},Gr=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const i of n.getDeclarations()){const r=Hr(i,t);r&&s.push(r)}return s},Yr=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Gr(i,x(t,n)))}return s},Ne=e=>e?.getKind()===l.TrueKeyword,Qr=e=>e?.getKind()===l.FalseKeyword,Xr=e=>e!==void 0&&o.isNumericLiteral(e)&&e.getLiteralValue()===0,Zr=new Set(["lunoraAuthAdapter","lunoraD1Adapter"]),Jr=e=>!e||!o.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>o.isCallExpression(t)&&y(t.getExpression())==="scim"),ei=e=>e!==void 0&&o.isCallExpression(e)&&Zr.has(y(e.getExpression())??""),ti=e=>!e||!o.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>o.isStringLiteral(t)&&t.getLiteralText()==="*"),si=e=>{const t=A(e,"advanced"),s=A(e,"emailAndPassword"),n=A(e,"session");return{analyzable:!0,disableCsrfCheck:Ne(A(t,"disableCSRFCheck")),emailPasswordEnabled:Ne(A(s,"enabled")),requireEmailVerification:Ne(A(s,"requireEmailVerification")),scimOnNonTransactionalAdapter:Jr(A(e,"plugins"))&&ei(A(e,"database")),secureCookiesDisabled:Qr(A(t,"useSecureCookies")),sessionFreshAgeZero:Xr(A(n,"freshAge")),trustedOriginsWildcard:ti(A(e,"trustedOrigins"))}},ni=()=>({analyzable:!1,disableCsrfCheck:!1,emailPasswordEnabled:!1,requireEmailVerification:!1,scimOnNonTransactionalAdapter:!1,secureCookiesDisabled:!1,sessionFreshAgeZero:!1,trustedOriginsWildcard:!1}),ri=(e,t)=>{if(y(e.getExpression())!=="createAuth")return;const s=e.getArguments()[0],n=s!==void 0&&o.isObjectLiteralExpression(s)&&s.getProperties().some(r=>o.isSpreadAssignment(r)),i=s!==void 0&&o.isObjectLiteralExpression(s)&&!n?si(s):ni();return{exportName:v(e),file:t,line:e.getStartLineNumber(),...i}},ii=(e,t)=>Js(e,t,ri),oi=(e,t)=>{if(!o.isPropertyAccessExpression(e))return;const s=e.getName();if(t.methods.has(s))return t.matchReceiver(e.getExpression().getText())?s:void 0},ai=(e,t,s)=>{const n=oi(e.getExpression(),s);if(n===void 0)return;const i=e.getArguments()[s.argIndex];if(!(!i||!R(i)||_(i))&&!(s.requireUnmodifiedReach===!0&&!gn(i)))return{exportName:v(e),file:t,line:e.getStartLineNumber(),method:n}},ci=(e,t,s)=>{const n=[];for(const i of e.getDescendantsOfKind(l.CallExpression)){const r=ai(i,t,s);r&&n.push(r)}return n},pe=(e,t,s)=>{const n=[];for(const i of p(t)){const r=e.getSourceFile(i)??e.addSourceFileAtPath(i);n.push(...ci(r,x(t,i),s))}return n},li=new Set(["content","pdf","scrape","screenshot"]),ui=(e,t)=>pe(e,t,{argIndex:0,matchReceiver:s=>s==="ctx.browser",methods:li}),di=new Set(["createBrowser","createInboundEmailHandler","createPayment"]),fi=new Set(["RateLimiter"]),gi=new Set(["extend"]),xt="lunora",pi=["vite.config.ts","vite.config.mts","vite.config.js","vite.config.mjs"],Jt=e=>{const t=[],s=[];let n=!1;for(const i of e.getProperties()){if(o.isSpreadAssignment(i)){n=!0;continue}if(o.isPropertyAssignment(i)){const r=i.getName();t.push(r),i.getInitializer()?.getKind()===l.TrueKeyword&&s.push(r);continue}(o.isShorthandPropertyAssignment(i)||o.isMethodDeclaration(i))&&t.push(i.getName())}return{analyzable:!n,presentKeys:t,trueKeys:s}},Te=e=>e&&o.isObjectLiteralExpression(e)?Jt(e):{analyzable:!1,presentKeys:[],trueKeys:[]},mi=e=>{const t=e&&(o.isArrowFunction(e)||o.isFunctionExpression(e))?e:void 0,s=t&&qt(t.getBody());return s?Jt(s):{analyzable:!1,presentKeys:[],trueKeys:[]}},hi=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const i=y(n.getExpression());i!==void 0&&(di.has(i)?s.push({callee:i,file:t,line:n.getStartLineNumber(),...Te(n.getArguments()[0])}):gi.has(i)&&s.push({callee:i,file:t,line:n.getStartLineNumber(),...mi(n.getArguments()[0])}))}for(const n of e.getDescendantsOfKind(l.NewExpression)){const i=y(n.getExpression());i===void 0||!fi.has(i)||s.push({callee:i,file:t,line:n.getStartLineNumber(),...Te(n.getArguments()[0])})}return s},xi=(e,t)=>{for(const s of pi){const n=E(t,s);if(!b(n))continue;const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=[];for(const a of i.getDescendantsOfKind(l.CallExpression))y(a.getExpression())===xt&&r.push({callee:xt,file:s,line:a.getStartLineNumber(),...Te(a.getArguments()[0])});return r}return[]},vi=(e,t)=>{const s=[];for(const{displayPath:n,filePath:i}of Re(t)){const r=e.getSourceFile(i)??e.addSourceFileAtPath(i);s.push(...hi(r,n))}return s.push(...xi(e,ne(t))),s},vt="ctx.containers.",Ei=e=>{if(!e.startsWith(vt))return!1;const t=e.slice(vt.length);return t.length>0&&!t.includes(".")},yi=(e,t)=>pe(e,t,{argIndex:0,matchReceiver:Ei,methods:new Set(["get"])}),Si=new Set(["allow","deny","setAllowed"]),Ai=e=>{const t=e.getArguments()[0];if(!t||!o.isObjectLiteralExpression(t))return!1;const s=t.getProperty("enableInternet");return s!==void 0&&o.isPropertyAssignment(s)&&o.isTrueLiteral(s.getInitializerOrThrow())},Ni=(e,t)=>{const s=e.getExpression();if(!(!o.isPropertyAccessExpression(s)||s.getName()!=="start"||!Ai(e)))return{detail:"enableInternet: true",exportName:v(e),file:t,kind:"enable_internet",line:e.getStartLineNumber()}},bi=(e,t)=>{const s=e.getExpression();if(!o.isPropertyAccessExpression(s)||!Si.has(s.getName()))return;const n=s.getExpression();if(!(!o.isPropertyAccessExpression(n)||n.getName()!=="egress"))return{detail:s.getName(),exportName:v(e),file:t,kind:"egress_relaxation",line:e.getStartLineNumber()}},Pi=(e,t)=>Ni(e,t)??bi(e,t),Ii=(e,t)=>w(e,t,Pi),wi=new Set(["defineExportSink","r2Sink","webhookExportSink"]),Ti=e=>{const t=e.getExpression();if(!o.isIdentifier(t))return;const s=t.getText();return wi.has(s)?s:void 0},Ci=e=>{const t=[],s=[];for(const n of e.getProperties()){if(o.isSpreadAssignment(n))return{analyzable:!1,emptyKeys:[],presentKeys:[]};if(o.isPropertyAssignment(n)){const i=n.getName();t.push(i);const r=n.getInitializer();r&&o.isStringLiteral(r)&&r.getLiteralText()===""&&s.push(i);continue}(o.isShorthandPropertyAssignment(n)||o.isMethodDeclaration(n)||o.isGetAccessorDeclaration(n))&&t.push(n.getName())}return{analyzable:!0,emptyKeys:s,presentKeys:t}},Fi=(e,t)=>{const s=[];for(const{displayPath:n,filePath:i}of Re(t)){const r=e.getSourceFile(i)??e.addSourceFileAtPath(i);for(const a of r.getDescendantsOfKind(l.CallExpression)){const c=Ti(a);if(c===void 0)continue;const u=a.getArguments()[0],d=u&&o.isObjectLiteralExpression(u)?Ci(u):{analyzable:!1,emptyKeys:[],presentKeys:[]};s.push({analyzable:d.analyzable,emptyKeys:d.emptyKeys,factory:c,file:n,line:a.getStartLineNumber(),presentKeys:d.presentKeys})}}return s},Oi=new Map([["dbRateLimit",2],["rateLimit",2],["verifyTurnstileMiddleware",0]]),Ri=new Set(["dbRateLimit","rateLimit"]),Li=e=>{if(!e||!o.isObjectLiteralExpression(e))return!1;const t=e.getProperty("failOpen");return t!==void 0&&o.isPropertyAssignment(t)&&t.getInitializer()?.getKind()===l.TrueKeyword},Di=(e,t)=>{const s=y(e.getExpression());if(s===void 0)return;const n=Oi.get(s);if(n!==void 0)return{callee:s,exportName:v(e),failOpen:Li(e.getArguments()[n]),file:t,limitName:Ri.has(s)?Bt(e):"",line:e.getStartLineNumber()}},ki=(e,t)=>w(e,t,Di),Mi=new Set(["boolean","number","object","string"]),Ki=e=>{const t=e.getName();if(!Mi.has(t))return;const s=e.getExpression();if(!o.isPropertyAccessExpression(s))return;if(s.getName()==="flags"&&Ie(s.getExpression()))return t;const n=s.getExpression();if(s.getName()==="details"&&o.isPropertyAccessExpression(n)&&n.getName()==="flags"&&Ie(n.getExpression()))return t},_i=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t))return;const s=Ki(t);if(s===void 0)return;const n=e.getArguments()[0];if(!n||!(o.isStringLiteral(n)||o.isNoSubstitutionTemplateLiteral(n)))return;const i=n.getLiteralValue();return i.length>0?{key:i,type:s}:void 0},zi=(e,t)=>{const s=new Map;for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of i.getDescendantsOfKind(l.CallExpression)){const a=_i(r);a&&!s.has(a.key)&&s.set(a.key,a.type)}}return[...s.entries()].map(([n,i])=>({key:n,type:i})).toSorted((n,i)=>n.key.localeCompare(i.key))},$i=e=>{const t=e.getInitializer();if(!t||!o.isCallExpression(t))return;const s=k(t);if(s?.kind!=="query")return;const n=en(t,s.receiver);return n?{exportName:e.getName(),handler:n}:void 0},Et=e=>{const t=e.getParent();return t&&o.isPropertyAccessExpression(t)&&t.getExpression()===e?t:void 0},Ui=e=>{if(!o.isPropertyAccessExpression(e)||e.getName()!=="flags")return;const t=e.getExpression();if(!o.isIdentifier(t)||t.getText()!=="ctx")return;const s=Et(e);if(!s)return"ctx.flags";if(s.getName()==="details"){const n=Et(s);return n?`ctx.flags.details.${n.getName()}`:"ctx.flags.details"}return`ctx.flags.${s.getName()}`},qi=(e,t)=>{const s=[];for(const n of e.handler.getDescendantsOfKind(l.PropertyAccessExpression)){const i=Ui(n);i!==void 0&&s.push({callee:i,exportName:e.exportName,file:t,line:n.getStartLineNumber()})}return s},Bi=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const i of n.getDeclarations()){const r=$i(i);r&&s.push(...qi(r,t))}return s},Vi=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Bi(i,x(t,n)))}return s},Wi=e=>{if(!o.isPropertyAccessExpression(e)||e.getName()!=="boolean")return!1;const t=e.getExpression();return o.isPropertyAccessExpression(t)&&t.getName()==="flags"&&Ie(t.getExpression())},ji=e=>{if(e?.getKind()===l.TrueKeyword)return!0;if(e?.getKind()===l.FalseKeyword)return!1},Hi=(e,t)=>{if(!Wi(e.getExpression()))return;const[s,n]=e.getArguments();if(!s||!(o.isStringLiteral(s)||o.isNoSubstitutionTemplateLiteral(s)))return;const i=s.getLiteralValue(),r=ji(n);if(!(i.length===0||r===void 0))return{defaultValue:r,exportName:v(e),file:t,key:i,line:e.getStartLineNumber()}},Gi=(e,t)=>w(e,t,Hi),Yi=e=>{const t=e.getType().getProperty("~standard");if(!t)return;const s=t.getTypeAtLocation(e).getProperty("types");if(!s)return;const n=s.getTypeAtLocation(e).getNonNullableType().getProperty("output");if(!n)return;const i=n.getTypeAtLocation(e),r=i.getText(e);if(!r||r==="any"||r==="never"||En(r))return;const a=e.getSourceFile().getFilePath();return yn(i,e,a)?Sn(i,e,a,0,new Set):r},Qi=e=>{const t=e.getExpression();return o.isPropertyAccessExpression(t)&&t.getName()==="withGeoIndex"},Xi=e=>{const t=e.getArguments()[0];return t&&o.isStringLiteral(t)?t.getLiteralText():""},Zi=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of i.getDescendantsOfKind(l.CallExpression))Qi(a)&&s.push({file:r,indexName:Xi(a),line:a.getStartLineNumber()})}return s},Y=e=>e!==void 0&&(o.isArrowFunction(e)||o.isFunctionExpression(e))?e:void 0,es=e=>{const t=e.getArguments()[0],s=Y(t);if(s!==void 0)return s;if(t===void 0||!o.isObjectLiteralExpression(t))return;const n=t.getProperty("handler");return n!==void 0&&o.isPropertyAssignment(n)?Y(n.getInitializer()):void 0},Ji=new Set(["delete","get","head","options","patch","post","put"]),eo=new Set(["handler","stream"]),to=new Set(["runAction","runMutation"]),so=new Set(["delete","insert","insertManyUnsafe","patch","replace"]),Q=(e,t)=>e!==void 0&&o.isIdentifier(e)&&e.getText()===t,ts=(e,t)=>{if(!(e===void 0||!o.isObjectBindingPattern(e))){for(const s of e.getElements())if((s.getPropertyNameNode()?.getText()??s.getNameNode().getText())===t){const i=s.getNameNode();return o.isIdentifier(i)?i.getText():void 0}}},yt=(e,t)=>{const s=e.getParameters()[0]?.getNameNode();if(s!==void 0)return t?o.isIdentifier(s)?s.getText():void 0:ts(s,"ctx")},St=(e,t)=>{const s=e.getParameters()[t?1:0]?.getNameNode();return t?s!==void 0&&o.isIdentifier(s)?s.getText():void 0:ts(s,"request")},At=(e,t)=>{const s=e.getBody(),n=s.getDescendantsOfKind(l.CallExpression);o.isCallExpression(s)&&n.unshift(s);for(const i of n){const r=i.getExpression();if(!o.isPropertyAccessExpression(r))continue;const a=r.getName(),c=r.getExpression();if(to.has(a)&&Q(c,t))return a;if(so.has(a)&&o.isPropertyAccessExpression(c)&&c.getName()==="db"&&Q(c.getExpression(),t))return`db.${a}`}},Nt=(e,t)=>{const s=e.getBody();for(const n of s.getDescendantsOfKind(l.PropertyAccessExpression))if(n.getName()==="auth"&&Q(n.getExpression(),t))return!0;for(const n of s.getDescendantsOfKind(l.VariableDeclaration)){const i=n.getNameNode();if(!(!o.isObjectBindingPattern(i)||!Q(n.getInitializer(),t))){for(const r of i.getElements())if((r.getPropertyNameNode()?.getText()??r.getNameNode().getText())==="auth")return!0}}return!1},no=/signature|hmac|digest|(?:^|[_-])sig(?:[_-]|$)/i,ro=(e,t)=>{const s=e.getExpression();if(!o.isPropertyAccessExpression(s)||s.getName()!=="get"&&s.getName()!=="has")return!1;const n=s.getExpression();return o.isPropertyAccessExpression(n)&&n.getName()==="headers"&&Q(n.getExpression(),t)},io=e=>[...o.isStringLiteral(e)?[e.getLiteralText()]:[],...e.getDescendantsOfKind(l.StringLiteral).map(t=>t.getLiteralText())],ss=(e,t)=>{const s=e.getVariableDeclaration(t)?.getInitializer();return s===void 0?[]:io(s)},oo=(e,t)=>{const s=e.getText();for(let n=e.getParent();n!==void 0;n=n.getParent()){if(!o.isArrowFunction(n)&&!o.isFunctionExpression(n)||!n.getParameters().some(c=>c.getName()===s))continue;const i=n.getParent();if(!o.isCallExpression(i))return[];const r=i.getExpression();if(!o.isPropertyAccessExpression(r))return[];const a=r.getExpression();return o.isIdentifier(a)?ss(t,a.getText()):[]}return[]},ao=e=>{const t=e.getArguments()[0];if(t===void 0)return[];if(o.isStringLiteral(t))return[t.getLiteralText()];if(!o.isIdentifier(t))return[];const s=e.getSourceFile(),n=ss(s,t.getText());return n.length>0?n:oo(t,s)},bt=(e,t)=>{if(t===void 0)return!1;const s=e.getBody(),n=s.getDescendantsOfKind(l.CallExpression);return o.isCallExpression(s)&&n.unshift(s),n.some(i=>ro(i,t)&&ao(i).some(r=>no.test(r)))},co=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!eo.has(t.getName()))return;let s=t.getExpression();for(;o.isCallExpression(s);){const n=s.getExpression();if(!o.isPropertyAccessExpression(n))return;const i=n.getName();if(Ji.has(i)){const r=n.getExpression();return o.isIdentifier(r)&&r.getText()==="httpRoute"?i.toUpperCase():void 0}s=n.getExpression()}},lo=(e,t)=>{const s=e.getExpression();if(o.isIdentifier(s)&&s.getText()==="httpAction"){const c=Y(e.getArguments()[0]),u=c&&yt(c,!0);if(!c||u===void 0||bt(c,St(c,!0)))return;const d=At(c,u);return d===void 0?void 0:{exportName:v(e),file:t,kind:"httpAction",line:e.getStartLineNumber(),readsAuth:Nt(c,u),sideEffect:d}}const n=co(e);if(n===void 0)return;const i=Y(e.getArguments()[0]),r=i&&yt(i,!1);if(!i||r===void 0||bt(i,St(i,!1)))return;const a=At(i,r);return a===void 0?void 0:{exportName:v(e),file:t,kind:"httpRoute",line:e.getStartLineNumber(),method:n,readsAuth:Nt(i,r),sideEffect:a}},uo=(e,t)=>w(e,t,lo),fo=new Set(["btoa","encodeURI","encodeURIComponent","isSafeHeaderValue","Number","parseFloat","parseInt"]),go=new Set(["append","set"]),ns=e=>e!==void 0&&(o.isStringLiteral(e)||o.isNoSubstitutionTemplateLiteral(e))?e.getLiteralText():"",Pt=(e,t)=>(o.isCallExpression(e)?[e,...e.getDescendantsOfKind(l.CallExpression)]:e.getDescendantsOfKind(l.CallExpression)).some(n=>fo.has(y(n.getExpression())??"")&&mn(n,t)),po=(e,t)=>{if(Pt(e,t))return!0;const s=fe(e);return s!==void 0&&Pt(s,t)},Ce=(e,t)=>pn(e,t)&&!po(e,t),mo=e=>{if(o.isPropertyAccessExpression(e)&&e.getName()==="headers")return!0;const t=fe(e);return t!==void 0&&o.isNewExpression(t)&&y(t.getExpression())==="Headers"},ae=e=>{if(e===void 0)return;if(o.isObjectLiteralExpression(e))return e;const t=fe(e);return t!==void 0&&o.isObjectLiteralExpression(t)?t:void 0},Me=(e,t,s)=>{for(const n of e.getProperties())if(o.isPropertyAssignment(n)){const i=n.getInitializer();i!==void 0&&Ce(i,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:ns(n.getNameNode()),line:i.getStartLineNumber(),via:t})}else if(o.isShorthandPropertyAssignment(n)){const i=n.getNameNode();Ce(i,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:n.getName(),line:i.getStartLineNumber(),via:t})}else if(o.isSpreadAssignment(n)){const i=ae(n.getExpression());i!==void 0&&Me(i,t,s)}},rs=(e,t)=>{const s=ae(e);if(s===void 0)return;const n=s.getProperty("headers");if(n===void 0||!o.isPropertyAssignment(n))return;const i=ae(n.getInitializer());i!==void 0&&Me(i,"response-init",t)},ho=(e,t)=>{const s=y(e.getExpression());if(s==="Response")rs(e.getArguments()[1],t);else if(s==="Headers"){const n=ae(e.getArguments()[0]);n!==void 0&&Me(n,"headers-ctor",t)}},xo=(e,t)=>{const s=e.getExpression();if(!o.isPropertyAccessExpression(s))return;const n=s.getName(),i=s.getExpression();if(n==="json"&&o.isIdentifier(i)&&i.getText()==="Response"){rs(e.getArguments()[1],t);return}if(go.has(n)&&mo(i)){const r=e.getArguments()[1];r!==void 0&&Ce(r,t.requestName)&&t.rows.push({exportName:t.exportName,file:t.relativePath,headerName:ns(e.getArguments()[0]),line:r.getStartLineNumber(),via:n==="set"?"headers-set":"headers-append"})}},vo=(e,t)=>{for(const s of e.getDescendantsOfKind(l.NewExpression))ho(s,t);for(const s of e.getDescendantsOfKind(l.CallExpression))xo(s,t)},Eo=(e,t)=>{const s=e.getExpression();if(!o.isIdentifier(s)||s.getText()!=="httpAction")return[];const n=Y(e.getArguments()[0]);if(n===void 0)return[];const i=n.getParameters()[1];if(i===void 0)return[];const r=i.getNameNode();if(!o.isIdentifier(r))return[];const a=[];return vo(n,{exportName:v(e),relativePath:t,requestName:r.getText(),rows:a}),a},yo=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression))s.push(...Eo(n,t));return s},So=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...yo(i,x(t,n)))}return s},Ao=new Set(["auth","context.auth","ctx.auth"]),No="userId",bo=e=>{const t=new Set;for(const s of e.getProperties()){if(o.isSpreadAssignment(s))return;(o.isPropertyAssignment(s)||o.isShorthandPropertyAssignment(s)||o.isMethodDeclaration(s))&&t.add(s.getName())}return t},Po=(e,t)=>{const s=E(t,Yt);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const i of n.getDescendantsOfKind(l.CallExpression)){if(y(i.getExpression())!=="defineIdentity")continue;const[r]=i.getArguments();return r&&o.isObjectLiteralExpression(r)?bo(r):void 0}},It=e=>{if(!(e===void 0||!o.isPropertyAccessExpression(e)||e.getName()!=="identity"))return Ao.has(e.getExpression().getText())?e:void 0},Io=e=>{if(o.isPropertyAccessExpression(e)&&It(e.getExpression())!==void 0)return e.getName();if(o.isElementAccessExpression(e)&&It(e.getExpression())!==void 0){const t=e.getArgumentExpression();return t&&o.isStringLiteral(t)?t.getLiteralValue():void 0}},wo=(e,t,s)=>{const n=[];for(const i of e.getDescendants()){const r=Io(i);r!==void 0&&n.push({declared:r===No||s.has(r),exportName:v(i),file:t,key:r,line:i.getStartLineNumber()})}return n},To=(e,t)=>{const s=Po(e,t);if(s===void 0)return[];const n=[];for(const i of p(t)){const r=e.getSourceFile(i)??e.addSourceFileAtPath(i);n.push(...wo(r,x(t,i),s))}return n},Co=(e,t)=>{if(y(e.getExpression())!=="buildImageDeliveryUrl")return;const s=e.getArguments()[0];if(!s)return;const n=A(s,"key");if(!(!n||!R(n)||_(n)))return{exportName:v(e),file:t,line:e.getStartLineNumber()}},Fo=(e,t)=>w(e,t,Co),Oo=new Set(["delete","get","getRaw","getWithMetadata","put"]),Ro=(e,t,s=[])=>{const n=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));return pe(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.kv"||r.startsWith("ctx.kv."),methods:Oo}).map(r=>{const a=n.get(`${r.file}:${r.exportName}`);return a===void 0?r:{...r,visibility:a}})},Lo=new Set(["queue","send"]),wt=new Set(["bcc","cc","to"]),Do=e=>{if(!o.isPropertyAccessExpression(e))return;const t=e.getName();if(!Lo.has(t))return;const s=e.getExpression().getText();return s==="ctx.mail"||s==="ctx.email"?t:void 0},ko=e=>o.isObjectLiteralExpression(e)?e.getProperties().some(t=>{if(o.isShorthandPropertyAssignment(t)){const n=t.getNameNode();return wt.has(t.getName())&&R(n)&&!_(n)}if(!o.isPropertyAssignment(t)||!wt.has(t.getName()))return!1;const s=t.getInitializer();return s!==void 0&&R(s)&&!_(s)}):!1,Mo=(e,t)=>{const s=Do(e.getExpression());if(s===void 0)return;const n=e.getArguments()[0];if(!(!n||!ko(n)))return{exportName:v(e),file:t,line:e.getStartLineNumber(),method:s}},Ko=(e,t)=>w(e,t,Mo),_o=e=>o.isPropertyAssignment(e)||o.isMethodDeclaration(e)||o.isGetAccessorDeclaration(e)?o.isComputedPropertyName(e.getNameNode()):!1,zo=e=>o.isPropertyAssignment(e)||o.isShorthandPropertyAssignment(e)||o.isMethodDeclaration(e)||o.isGetAccessorDeclaration(e)?_o(e):!0,is=(e,t=!1)=>{for(const s of e.getProperties()){if(zo(s))return!0;if(t)continue;if(!o.isPropertyAssignment(s))return!0;const n=s.getInitializer();if(!n||!o.isObjectLiteralExpression(n)||is(n,!0))return!0}return!1},$o=(e,t)=>{for(const s of p(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const{receiver:i}of Ht(n))for(const r of Le(i)){const a=r.getArguments()[0];if(a!==void 0&&(!o.isObjectLiteralExpression(a)||is(a)))return!0}}return!1},Uo=e=>{const t=e.getArguments()[0];if(!t||!o.isObjectLiteralExpression(t))return[];const s=[];for(const n of t.getProperties()){const i=oe(n);if(i===void 0||!o.isPropertyAssignment(n))continue;const r=n.getInitializer();if(!(!r||!o.isObjectLiteralExpression(r)))for(const a of r.getProperties()){const c=oe(a);c!==void 0&&s.push({column:c,strategy:jt(a),table:i})}}return s},qo=(e,t)=>{const s=new Map;for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const{receiver:r}of Ht(i))for(const a of Le(r))for(const c of Uo(a)){const u=`${c.table}\0${c.column}`;s.has(u)||s.set(u,c)}}return{columns:[...s.values()]}},Bo=(e,t,s)=>{const n=e.getArguments()[0];if(!n||!o.isObjectLiteralExpression(n))return[];const i=[];for(const r of n.getProperties()){const a=oe(r);if(a===void 0||!o.isPropertyAssignment(r))continue;const c=r.getInitializer();if(!(!c||!o.isObjectLiteralExpression(c)))for(const u of c.getProperties()){const d=oe(u);if(d===void 0)continue;const h=jt(u);h!=="custom"&&i.push({column:d,exportName:t,file:s,line:u.getStartLineNumber(),strategy:h,table:a})}}return i},Vo=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&o.isCallExpression(s)?k(s):void 0;return n?.receiver?Le(n.receiver).flatMap(i=>Bo(i,e.getName(),t)):[]},Wo=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...Vo(c,r))}return s},jo=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="replace")return!1;const s=t.getExpression();return D(s)},Ho=e=>{const t=e.getArguments()[0];if(t===void 0||!o.isObjectLiteralExpression(t))return;const s=t.getProperty("server");if(s!==void 0)return o.isPropertyAssignment(s)?s.getInitializer():s},Go=e=>{if(!e.isExported())return;const t=e.getInitializer();if(t?.getKind()!==l.CallExpression)return;const s=t;return wn(s.getExpression())?s:void 0},Yo=e=>{const t=Go(e),s=t===void 0?void 0:Ho(t);if(s===void 0)return[];const n=e.getNameNode(),i=o.isIdentifier(n)?n.getText():"";return s.getDescendantsOfKind(l.CallExpression).filter(r=>jo(r)).map(r=>({exportName:i,file:"lunora/mutators.ts",line:r.getStartLineNumber()}))},Qo=e=>e.getVariableDeclarations().flatMap(t=>Yo(t)),Xo=(e,t)=>{const s=E(t,In);if(!b(s))return[];const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);return Qo(n)},Zo=new Set(["delete","get","patch"]),Jo=new Set(["accountId","authorId","companyId","createdBy","createdById","customerId","groupId","memberId","organizationId","orgId","ownerId","projectId","teamId","tenantId","userId","workspaceId"]),ea=new Set(["auth","identity","session","user"]),ta=new Set([l.EqualsEqualsEqualsToken,l.EqualsEqualsToken,l.ExclamationEqualsEqualsToken,l.ExclamationEqualsToken]),sa=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="normalizeId"||!D(t.getExpression()))return;const s=e.getArguments()[0];return s&&o.isStringLiteral(s)?s.getLiteralText():""},na=e=>{let t=e,s=t.getParent();for(;s!==void 0&&(o.isAsExpression(s)||o.isParenthesizedExpression(s)||o.isNonNullExpression(s));)t=s,s=t.getParent();if(s===void 0||!o.isVariableDeclaration(s))return;const n=s.getNameNode();return o.isIdentifier(n)?n.getText():void 0},ra=(e,t)=>e.getDescendantsOfKind(l.Identifier).some(s=>s.getText()===t),ia=e=>o.isThrowStatement(e)||o.isReturnStatement(e)||e.getDescendantsOfKind(l.ThrowStatement).length>0||e.getDescendantsOfKind(l.ReturnStatement).length>0,oa=(e,t)=>e.getDescendantsOfKind(l.IfStatement).some(s=>ra(s.getExpression(),t)&&ia(s.getThenStatement())),aa=(e,t)=>{for(const s of e.getDescendantsOfKind(l.CallExpression)){const n=s.getExpression();if(!o.isPropertyAccessExpression(n))continue;const i=n.getName();if(!Zo.has(i))continue;const r=n.getExpression();if(!(D(r)||o.isPropertyAccessExpression(r)&&D(r.getExpression())))continue;const c=s.getArguments()[0];if(c!==void 0&&o.isIdentifier(c)&&c.getText()===t)return i}},ca=e=>{let t=e;for(;o.isPropertyAccessExpression(t)||o.isElementAccessExpression(t)||o.isNonNullExpression(t)||o.isParenthesizedExpression(t)||o.isAsExpression(t)||o.isAwaitExpression(t);)t=t.getExpression();return o.isIdentifier(t)?t.getText():void 0},la=e=>e.getDescendantsOfKind(l.CallExpression).some(t=>t.getArguments().some(s=>ca(s)==="ctx")),ua=e=>e.getDescendantsOfKind(l.BinaryExpression).some(t=>ta.has(t.getOperatorToken().getKind())?o.isPropertyAccessExpression(t.getLeft())||o.isPropertyAccessExpression(t.getRight()):!1),da=e=>{for(const t of e.getDescendantsOfKind(l.Identifier))if(Jo.has(t.getText()))return!0;for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression)){const s=t.getExpression();if(o.isIdentifier(s)&&s.getText()==="ctx"&&ea.has(t.getName()))return!0}return la(e)||ua(e)},fa=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!o.isCallExpression(s))return[];const n=k(s);if(n?.kind!=="query"&&n?.kind!=="mutation")return[];const i=es(s);if(i===void 0)return[];const r=n.receiver!==void 0&&Wt(n.receiver,"use","rls"),a=da(i),c=new Set,u=[];for(const d of i.getDescendantsOfKind(l.CallExpression)){const h=sa(d);if(h===void 0)continue;const m=na(d);if(m===void 0||c.has(m)||!oa(i,m))continue;const P=aa(i,m);P!==void 0&&(c.add(m),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),mentionsOwnership:a,sinkMethod:P,table:h,usesRls:r,visibility:n.visibility}))}return u},ga=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...fa(c,r))}return s},pa=new Set(["accountId","authorId","createdBy","createdById","organizationId","orgId","ownerId","tenantId","updatedBy","userId","workspaceId"]),ma=new Set(["insert","insertManyUnsafe","patch","replace"]),ha=e=>{if(!o.isPropertyAccessExpression(e))return;const t=e.getName();if(!ma.has(t))return;const s=e.getExpression();if(!o.isPropertyAccessExpression(s)||s.getName()!=="db")return;const n=s.getExpression();return o.isIdentifier(n)&&n.getText()==="ctx"?t:void 0},xa=(e,t)=>{if(t!=="insertManyUnsafe")return o.isObjectLiteralExpression(e)?[e]:[];if(!o.isArrayLiteralExpression(e))return[];const s=[];for(const n of e.getElements())o.isObjectLiteralExpression(n)&&s.push(n);return s},Tt=(e,t)=>{if(o.isPropertyAccessExpression(e)){const s=e.getExpression();return o.isIdentifier(s)&&s.getText()==="args"&&e.getName()===t}if(o.isElementAccessExpression(e)){const s=e.getExpression(),n=e.getArgumentExpression();return o.isIdentifier(s)&&s.getText()==="args"&&n!==void 0&&o.isStringLiteral(n)&&n.getLiteralValue()===t}return!1},va=e=>{if(!o.isIdentifier(e))return;const t=e.getText(),s=e.getFirstAncestor(a=>o.isArrowFunction(a)||o.isFunctionExpression(a)||o.isFunctionDeclaration(a));if(s===void 0)return;for(const a of s.getDescendantsOfKind(l.BinaryExpression)){const c=a.getLeft();if(o.isIdentifier(c)&&c.getText()===t&&a.getOperatorToken().getText().endsWith("="))return}const n=e.getStart();let i,r=-1;for(const a of s.getDescendantsOfKind(l.VariableDeclaration)){if(a.getName()!==t)continue;const c=a.getParent();if(!o.isVariableDeclarationList(c)||c.getDeclarationKind()!==Fs.Const)continue;const u=a.getInitializer(),d=a.getStart();u!==void 0&&d<n&&d>r&&(i=u,r=d)}return i},Ea=(e,t)=>{if(Tt(e,t))return!0;const s=va(e);return s!==void 0&&Tt(s,t)},ya=(e,t,s,n,i)=>{const r=[];for(const a of e.getProperties()){let c,u;if(o.isPropertyAssignment(a)?(c=a.getName(),u=a.getInitializer()):o.isShorthandPropertyAssignment(a)&&(c=a.getName(),u=a.getNameNode()),!(c===void 0||u===void 0||!pa.has(c))&&R(u)&&!_(u)){const d=v(s),h=i(d)===c&&Ea(u,c);r.push({exportName:d,field:c,file:n,line:s.getStartLineNumber(),method:t,...h&&{ownerScoped:!0}})}}return r},Sa=(e,t,s)=>{const n=ha(e.getExpression());if(n===void 0)return[];const i=e.getArguments()[1];return i?xa(i,n).flatMap(r=>ya(r,n,e,t,s)):[]},Aa=(e,t,s)=>{const n=[];for(const i of e.getDescendantsOfKind(l.CallExpression))for(const r of Sa(i,t,a=>s(a).owner)){const{visibility:a}=s(r.exportName);n.push(a===void 0?r:{...r,visibility:a})}return n},Na=(e,t,s=[],n=[])=>{const i=[],r=new Map;for(const a of s)r.set(`${a.filePath}:${a.exportName}`,{visibility:a.visibility});for(const a of n){const c=`${a.filePath}:${a.exportName}`;r.set(c,{...r.get(c),owner:a.owner})}for(const a of p(t)){const c=e.getSourceFile(a)??e.addSourceFileAtPath(a),u=x(t,a);i.push(...Aa(c,u,d=>r.get(`${u}:${d}`)??{}))}return i},ba=["providerSubscriptionId","state"],Pa=["providerEventId","processedAt"],Ct=(e,t)=>t.every(s=>s in e.shape),Ia=e=>{const t=e.find(n=>n.name==="subscriptions"),s=e.find(n=>n.name==="events");return t!==void 0&&s!==void 0&&Ct(t,ba)&&Ct(s,Pa)},wa=new Set(["createAutumnAdapter","createDodoPaymentsAdapter","createPolarAdapter","createStripeAdapter"]),Ta=e=>e&&o.isNumericLiteral(e)?Number(e.getText()):void 0,Ca=e=>{const t=e.getProperty("webhookToleranceSeconds");return t&&o.isPropertyAssignment(t)?Ta(t.getInitializer()):void 0},Fa=(e,t)=>{const s=y(e.getExpression());if(s===void 0||!wa.has(s))return;const[n]=e.getArguments(),i=n&&o.isObjectLiteralExpression(n)?Ca(n):void 0;return{callee:s,exportName:v(e),file:t,line:e.getStartLineNumber(),...i===void 0?{}:{toleranceSeconds:i}}},Oa=(e,t)=>w(e,t,Fa),Ra=new Set(["defineQueue","defineWorkflow"]),La=new Set(["run","runAction","runMutation","runQuery"]),Da=new Set(["api","internal"]),ka=e=>{const t=e.getExpression();return o.isIdentifier(t)?t.getText():void 0},Ma=e=>{const t=e.getArguments()[0];if(!t||!o.isObjectLiteralExpression(t))return;const s=t.getProperty("handler");if(s===void 0||!o.isPropertyAssignment(s))return;const n=s.getInitializer();if(n&&(o.isArrowFunction(n)||o.isFunctionExpression(n)))return n},os=(e,t)=>{const s=e.getParameters()[t]?.getNameNode();return s&&o.isIdentifier(s)?s.getText():void 0},as=(e,t)=>e===t||e.startsWith(`${t}.`),cs=e=>{const t=e.getDescendantsOfKind(l.PropertyAccessExpression);return o.isPropertyAccessExpression(e)&&t.push(e),t},Ft=e=>{const t=e.getParent();return o.isPropertyAccessExpression(t)&&t.getNameNode()===e||o.isPropertyAssignment(t)&&t.getNameNode()===e?!1:!(o.isBindingElement(t)&&t.getNameNode()===e)},ls=e=>{const t=e.getDescendantsOfKind(l.Identifier).filter(s=>Ft(s));return o.isIdentifier(e)&&Ft(e)&&t.push(e),t},Ka=e=>{if(!o.isVariableDeclaration(e))return[];const t=e.getNameNode();return o.isIdentifier(t)?[t.getText()]:t.getDescendantsOfKind(l.BindingElement).map(s=>s.getName())},_a=e=>{const t=os(e,1);if(t===void 0)return[];const s=[`${t}.messages`];for(const n of e.getDescendantsOfKind(l.ForOfStatement)){if(n.getExpression().getText()!==`${t}.messages`)continue;const i=n.getInitializer(),r=o.isVariableDeclarationList(i)?i.getDeclarations()[0]?.getNameNode():void 0;r&&o.isIdentifier(r)&&s.push(`${r.getText()}.body`)}return s},za=(e,t,s)=>{const n=t==="workflow"?[`${s}.params`]:_a(e),i=new Set,r=a=>cs(a).some(c=>n.some(u=>as(c.getText(),u)))?!0:ls(a).some(c=>i.has(c.getText()));for(const a of e.getDescendantsOfKind(l.VariableDeclaration)){const c=a.getInitializer();if(c&&r(c))for(const u of Ka(a))i.add(u)}return{names:i,prefixes:n}},$a=(e,t)=>cs(e).some(s=>t.prefixes.some(n=>as(s.getText(),n)))?!0:ls(e).some(s=>t.names.has(s.getText())),Ua=e=>{if(e===void 0||!o.isPropertyAccessExpression(e))return;const t=[];let s=e;for(;o.isPropertyAccessExpression(s);)t.unshift(s.getName()),s=s.getExpression();const n=t.at(-1);if(!(n===void 0||!o.isIdentifier(s)||!Da.has(s.getText())||t.length<2))return{exportName:n,file:t.slice(0,-1).join("/")}},qa=(e,t,s)=>{const n=os(e,0);if(n===void 0)return[];const i=za(e,t,n),r=[];for(const a of e.getDescendantsOfKind(l.CallExpression)){const c=a.getExpression();if(!o.isPropertyAccessExpression(c)||!La.has(c.getName())||c.getExpression().getText()!==n)continue;const u=a.getArguments()[1];if(!u||!$a(u,i))continue;const d=Ua(a.getArguments()[0]);d!==void 0&&r.push({dispatchKind:t,file:s,handlerExport:v(a),line:a.getStartLineNumber(),targetExport:d.exportName,targetFile:d.file})}return r},Ba=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const i=ka(n);if(i===void 0||!Ra.has(i))continue;const r=Ma(n);r!==void 0&&s.push(...qa(r,i==="defineQueue"?"queue":"workflow",t))}return s},Va=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Ba(i,x(t,n)))}return s},Ot={dbRateLimit:"usesRateLimit",emailGateMiddleware:"usesEmailGate",mask:"usesMask",rateLimit:"usesRateLimit",rls:"usesRls",verifyTurnstileMiddleware:"usesCaptcha"},Rt=new Set(["account","credential","member","passkey","session","user"]),Wa=e=>e.replaceAll(/[-_]/gu," ").replaceAll(/([a-z0-9])([A-Z])/gu,"$1 $2").split(" ").filter(Boolean).map(t=>t.toLowerCase()),ja=e=>{const s=Wa(e).at(-1);if(!s)return!1;const n=s.endsWith("s")?s.slice(0,-1):s;return Rt.has(s)||Rt.has(n)},Ha=e=>{const t=e.replaceAll(/[^a-z0-9]/giu,"").toLowerCase();return t.endsWith("email")||t.endsWith("emailaddress")},Ga=(e,t)=>{const{objects:s,opaque:n}=ke(e,t);return qr(s).some(i=>Ha(i))?!0:n?void 0:!1},Ya=e=>{const t=e.getArguments()[0];return!t||!o.isObjectLiteralExpression(t)?{usesCaptcha:!1,usesRateLimit:!1}:{usesCaptcha:!!t.getProperty("captcha"),usesRateLimit:!!t.getProperty("rateLimit")}},Qa=e=>{if(o.isCallExpression(e))return e;if(!o.isIdentifier(e))return;const s=e.getSourceFile().getVariableDeclaration(e.getText())?.getInitializer();return s&&o.isCallExpression(s)?s:void 0},ie={usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},Xa=e=>{const t=Qa(e),s=t?y(t.getExpression()):void 0;if(t&&s==="protectPublic"){const n=Ya(t);return{...ie,usesCaptcha:n.usesCaptcha,usesRateLimit:n.usesRateLimit}}return s!==void 0&&s in Ot?{...ie,[Ot[s]]:!0}:ie},Za=e=>{const t={...ie};let s=e;for(;o.isCallExpression(s);){const n=s.getExpression();if(!o.isPropertyAccessExpression(n))break;const i=n.getName()==="use"?s.getArguments()[0]:void 0;if(i){const r=Xa(i);t.usesCaptcha||=r.usesCaptcha,t.usesEmailGate||=r.usesEmailGate,t.usesMask||=r.usesMask,t.usesRateLimit||=r.usesRateLimit,t.usesRls||=r.usesRls}s=n.getExpression()}return t},Ja=new Set(["insert","insertMany","insertManyUnsafe","replace"]),ec=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!Ja.has(t.getName()))return!1;const s=t.getExpression();if(!D(s))return!1;const i=e.getArguments()[0];return!i||!(o.isStringLiteral(i)||o.isNoSubstitutionTemplateLiteral(i))?!1:ja(i.getLiteralText())},tc=new Set(["create","runAfter","runAt","send","sendBatch"]),sc=new Set(["queues","scheduler","workflows"]),nc=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!tc.has(t.getName()))return!1;let s=t.getExpression();for(;o.isCallExpression(s)||o.isElementAccessExpression(s)||o.isPropertyAccessExpression(s);){if(o.isPropertyAccessExpression(s)&&sc.has(s.getName())){const n=s.getExpression();if(o.isIdentifier(n)&&n.getText()==="ctx")return!0}s=s.getExpression()}return!1},rc=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="insertManyUnsafe")return!1;const s=t.getExpression();return D(s)},us=new Set(["generateObject","generateText","streamObject","streamText"]),ic=e=>{const t=y(e.getExpression());return t!==void 0&&us.has(t)},oc=e=>{const t=y(e.getExpression());if(t===void 0||!us.has(t))return!1;const s=e.getArguments()[0];return!s||!o.isObjectLiteralExpression(s)||s.getProperties().some(n=>o.isSpreadAssignment(n))?!1:!s.getProperty("maxOutputTokens")},ac=new Set(["log","span","trace"]),cc=new Set(["ai"]),lc=new Set(["email","mail"]),uc=new Set(["ai","browser","fetch","mail","notify","queues","sql","storage","workflows"]),be=(e,t)=>e.getDescendantsOfKind(l.PropertyAccessExpression).some(s=>{if(!t.has(s.getName()))return!1;const n=s.getExpression();return o.isIdentifier(n)&&n.getText()==="ctx"}),dc=new Set([l.ArrowFunction,l.FunctionDeclaration,l.FunctionExpression,l.GetAccessor,l.MethodDeclaration,l.SetAccessor]),fc=new Set(["every","filter","flatMap","forEach","map","some"]),gc=new Set(["all","allSettled","race"]),pc=e=>{const t=e.getParent();if(!t||!o.isCallExpression(t)||!t.getArguments().includes(e))return;const s=t.getExpression();if(!o.isPropertyAccessExpression(s))return;const n=s.getName();if(fc.has(n))return t;const i=s.getExpression();if(o.isIdentifier(i)&&i.getText()==="Promise"&&gc.has(n))return t},mc=e=>{let t=e.getParent();for(;t;){if(o.isTryStatement(t)){const s=t.getTryBlock();if(e.getPos()>=s.getPos()&&e.getEnd()<=s.getEnd())return!0}if(dc.has(t.getKind())){const s=pc(t);if(!s)return!1;t=s;continue}t=t.getParent()}return!1},hc=e=>{let t=e;for(;;){const s=t.getParent();if(!o.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;if(s.getName()==="catch")return!0;if(s.getName()!=="then"&&s.getName()!=="finally")return!1;const n=s.getParent();if(!o.isCallExpression(n)||n.getExpression()!==s)return!1;t=n}},xc=e=>{let t=e;for(;;){const s=t.getParent();if(o.isPropertyAccessExpression(s)&&s.getExpression()===t){t=s;continue}return o.isCallExpression(s)&&s.getExpression()===t?s:void 0}},vc=e=>{let t=!1,s=!0;for(const n of e.getDescendantsOfKind(l.PropertyAccessExpression)){if(!uc.has(n.getName()))continue;const i=n.getExpression();if(!o.isIdentifier(i)||i.getText()!=="ctx")continue;const r=xc(n);r&&(t=!0,!mc(r)&&!hc(r)&&(s=!1))}return{handlesErrors:t&&s,reachesOutbound:t}},Ec=e=>e.getDescendantsOfKind(l.ThrowStatement).some(t=>{const s=t.getExpression();if(!o.isNewExpression(s))return!1;const n=s.getExpression();return o.isIdentifier(n)&&n.getText()==="Error"}),Lt="lunora-advisor-exempt",yc=/^[\s*/]+/u,Sc=/[\w-]/u,Ac=e=>{const s=(e.getFirstAncestorByKind(l.VariableStatement)??e).getLeadingCommentRanges().map(n=>n.getText()).join(`
+`);for(const n of s.split(`
+`)){const i=n.replace(yc,"");if(!i.startsWith(Lt))continue;const r=i.slice(Lt.length);if(Sc.test(r.charAt(0)))continue;const a=r.indexOf("--");return{exempt:!0,exemptReason:(a===-1?"":r.slice(a+2).split("*")[0]??"").trim()}}return{exempt:!1,exemptReason:""}},Nc=e=>{const[t]=e.getArguments();if(t){if(o.isObjectLiteralExpression(t)){const s=t.getProperty("handler");return s?o.isPropertyAssignment(s)?s.getInitializer():o.isShorthandPropertyAssignment(s)?s.getNameNode():o.isMethodDeclaration(s)?s:void 0:void 0}return t}},bc=(e,t)=>{const s=Nc(t);if(!s)return;if(o.isArrowFunction(s)||o.isFunctionExpression(s)||o.isMethodDeclaration(s))return e;if(!o.isIdentifier(s))return;const n=s.getSourceFile(),i=s.getText(),r=n.getVariableDeclaration(i)?.getInitializer();return r&&(o.isArrowFunction(r)||o.isFunctionExpression(r))?r:n.getFunction(i)},Pc=e=>{let t=!1,s=!1,n=!1,i=!1,r=!1;for(const u of e.getDescendantsOfKind(l.CallExpression))if(ec(u)&&(r=!0),nc(u)&&(t=!0),rc(u)&&(i=!0),ic(u)&&(s=!0),oc(u)&&(n=!0),r&&t&&i&&n)break;const{handlesErrors:a,reachesOutbound:c}=vc(e);return{callsMail:be(e,lc),emitsEvent:be(e,ac),fanOut:t,handlesErrors:a,reachesOutbound:c,runsAiGeneration:s||be(e,cc),throwsBareError:Ec(e),unboundedAiGeneration:n,usesInsertManyUnsafe:i,writesUserTable:r}},Ic=(e,t)=>{const s=e.getInitializer();if(!s||!o.isCallExpression(s))return;const n=k(s);if(!n||n.kind!=="query"&&n.kind!=="mutation"&&n.kind!=="action")return;const i=n.receiver?Za(n.receiver):{usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},r=bc(e,s);return{...r?Pc(r):{},...Ac(e),...i,analyzableBody:r!==void 0,exportName:e.getName(),file:t,hasEmailArg:Ga(s,n.receiver),kind:n.kind,visibility:n.visibility}},wc=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const i of n.getDeclarations()){const r=Ic(i,t);r&&s.push(r)}return s},Tc=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...wc(i,x(t,n)))}return s},Cc=new Set(["dbRateLimit","rateLimit"]),Fc=e=>o.isArrowFunction(e)?e.getBody():e,Oc=(e,t)=>{const s=y(e.getExpression());if(s===void 0||!Cc.has(s))return;const n=e.getArguments()[2];if(!n)return;const i=A(n,"key");if(!i)return;const r=Fc(i);if(!(!R(r)||_(r)))return{callee:s,exportName:v(e),file:t,limitName:Bt(e),line:e.getStartLineNumber()}},Rc=(e,t)=>w(e,t,Oc),Lc=new Set(["findFirst","findFirstOrThrow","findMany","findUnique","get"]),Dc=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||!Lc.has(t.getName()))return;const s=t.getExpression();if(D(s)){const n=e.getArguments()[0];return n&&o.isStringLiteral(n)?n.getLiteralText():""}if(o.isPropertyAccessExpression(s)&&D(s.getExpression()))return s.getName()},kc=e=>{let t=e;for(;o.isCallExpression(t);){const s=t.getExpression();if(!o.isPropertyAccessExpression(s))return;if(s.getName()==="query"&&D(s.getExpression())){const n=t.getArguments()[0];return n&&o.isStringLiteral(n)?n.getLiteralText():""}t=s.getExpression()}},Mc=e=>{let t=G(e)??e;for(;o.isAwaitExpression(t);)t=G(t.getExpression())??t.getExpression();return t},ds=(e,t=!1)=>{const s=Mc(e);if(o.isIdentifier(s)){if(t)return;const n=fe(s);return n===void 0?void 0:ds(n,!0)}if(o.isCallExpression(s))return Dc(s)??kc(s)},Kc=e=>{const t=e.getBody();if(!o.isBlock(t))return[t];const s=[];for(const n of e.getDescendantsOfKind(l.ReturnStatement)){const i=n.getFirstAncestor(a=>o.isArrowFunction(a)||o.isFunctionExpression(a)||o.isFunctionDeclaration(a)),r=n.getExpression();i===e&&r!==void 0&&s.push(r)}return s},_c=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!o.isCallExpression(s))return[];const n=k(s);if(n?.kind!=="query")return[];const i=es(s);if(i===void 0)return[];const r=n.receiver!==void 0&&an(n.receiver,"output"),a=n.receiver!==void 0&&Wt(n.receiver,"use","mask"),c=new Set,u=[];for(const d of Kc(i)){const h=ds(d);h===void 0||c.has(h)||(c.add(h),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),table:h,usesMask:a,usesOutput:r,visibility:n.visibility}))}return u},zc=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(..._c(c,r))}return s},$c=e=>{if(!e||!o.isObjectLiteralExpression(e))return[];const t=[];for(const s of e.getProperties())(o.isPropertyAssignment(s)||o.isShorthandPropertyAssignment(s)||o.isMethodDeclaration(s)||o.isGetAccessorDeclaration(s))&&t.push(s.getName());return t},Uc=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&o.isCallExpression(s)?k(s):void 0;if(!n)return[];const i=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=Vt(r);if(a===void 0)continue;const c=$c(A(a.options,"with"));c.length!==0&&i.push({exportName:e.getName(),file:t,line:r.getStartLineNumber(),parentTable:a.table,relations:c,visibility:n.visibility})}return i},qc=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...Uc(c,r))}return s},ce=e=>{if(o.isStringLiteral(e)||o.isNoSubstitutionTemplateLiteral(e))return e.getLiteralText();if(o.isBinaryExpression(e)&&e.getOperatorToken().getKind()===l.PlusToken){const t=ce(e.getLeft()),s=ce(e.getRight());return t!==void 0&&s!==void 0?t+s:void 0}},Bc=e=>{let t=e,s=t.getParent();for(;s!==void 0&&o.isBinaryExpression(s)&&s.getOperatorToken().getKind()===l.PlusToken;)t=s,s=t.getParent();return t!==e&&ce(t)!==void 0},Vc=/(?:^|\/)__tests__\//u,Wc=/\.(?:spec|test)$/u,jc=e=>Vc.test(e)||Wc.test(e),Hc=e=>{const t=e.getParent();if(t!==void 0){if(o.isVariableDeclaration(t)||o.isPropertyAssignment(t)||o.isPropertySignature(t))return t.getName();if(o.isBinaryExpression(t)&&t.getOperatorToken().getKind()===l.EqualsToken)return t.getLeft().getText()}},Gc=(e,t,s)=>Kn(e)?!jc(s)&&_n(Hc(t)):!0,Yc=(e,t)=>{const s=[],n=[...e.getDescendantsOfKind(l.BinaryExpression),...e.getDescendantsOfKind(l.StringLiteral),...e.getDescendantsOfKind(l.NoSubstitutionTemplateLiteral)],i=new Set;for(const r of n){if(Bc(r))continue;const a=ce(r);if(a===void 0)continue;const c=kn(a);if(c===void 0||!Gc(c,r,t))continue;const u=r.getStartLineNumber(),d=`${String(u)}:${c}`;i.has(d)||(i.add(d),s.push({file:t,kind:c,line:u,preview:Mn(a)}))}return s},Qc=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Yc(i,x(t,n)))}return s},Xc=(e,t)=>{if(!o.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&o.isCallExpression(s)?k(s):void 0;if(!n)return[];const i=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=Vt(r);if(a===void 0)continue;const c=A(a.options,"includeDeleted");if(c===void 0)continue;const u=o.isTrueLiteral(c),d=!u&&R(c);!u&&!d||i.push({exportName:e.getName(),file:t,fromArgs:d,hardcodedTrue:u,line:r.getStartLineNumber(),table:a.table,visibility:n.visibility})}return i},Zc=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of i.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...Xc(c,r))}return s},Jc=new Set(["query","unsafe"]),el=e=>{if(!o.isPropertyAccessExpression(e)||!Jc.has(e.getName()))return!1;const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="sql")return!1;const s=t.getExpression();return o.isIdentifier(s)&&s.getText()==="ctx"},tl=e=>o.isBinaryExpression(e)||o.isTemplateExpression(e),sl=e=>e.getFirstAncestorByKind(l.VariableDeclaration)?.getName()??"<module>",nl=(e,t)=>{if(!el(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!tl(s)))return{exportName:sl(e),file:t,line:s.getStartLineNumber()}},rl=(e,t)=>w(e,t,nl),il=[["convex",["convex","@convex-dev/"]],["supabase",["@supabase/"]],["firebase",["firebase","@firebase/","firebase-admin"]]],ol=e=>{for(const[t,s]of il)for(const n of s)if(e===n||e.startsWith(n.endsWith("/")?n:`${n}/`))return t},al=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of i.getImportDeclarations()){const a=r.getModuleSpecifierValue(),c=ol(a);c!==void 0&&s.push({file:x(t,n),line:r.getStartLineNumber(),moduleSpecifier:a,platform:c})}}return s},cl=new Set(["createMultipartUpload","delete","download","generateUploadUrl","get","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","put","resumeMultipartUpload","store","upload"]),ll=(e,t,s=[])=>{const n=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));return pe(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.storage"||r.startsWith("ctx.storage."),methods:cl,requireUnmodifiedReach:!0}).map(r=>{const a=n.get(`${r.file}:${r.exportName}`);return a===void 0?r:{...r,visibility:a}})},ul=new Map([["generateUploadUrl",1],["getPresignedUrl",1],["getSignedUrl",1],["store",2],["upload",2]]),dl=e=>e&&o.isNumericLiteral(e)?Number(e.getText()):void 0,fl=e=>{if(e===void 0)return{analyzable:!0,presentKeys:[]};if(!o.isObjectLiteralExpression(e))return{analyzable:!1,presentKeys:[]};const t=[];let s,n=!1;for(const i of e.getProperties()){if(o.isSpreadAssignment(i)){n=!0;continue}if(o.isPropertyAssignment(i)){const r=i.getName();t.push(r),r==="expiresInSeconds"&&(s=dl(i.getInitializer()));continue}(o.isShorthandPropertyAssignment(i)||o.isMethodDeclaration(i))&&t.push(i.getName())}return{analyzable:!n,expiresInSeconds:s,presentKeys:t}},gl=e=>{if(!o.isPropertyAccessExpression(e))return;const t=e.getName(),s=ul.get(t);if(s===void 0)return;const n=e.getExpression().getText();return n==="ctx.storage"||n.startsWith("ctx.storage.")?{method:t,optionsIndex:s}:void 0},pl=(e,t)=>{const s=gl(e.getExpression());if(s!==void 0)return{exportName:v(e),file:t,line:e.getStartLineNumber(),method:s.method,...fl(e.getArguments()[s.optionsIndex])}},ml=(e,t)=>w(e,t,pl),hl=(e,t)=>({analytics:e.analytics||t.dependencies.has("@lunora/bindings"),auth:t.dependencies.has("@lunora/auth"),containers:e.container||t.containerCount>0||t.dependencies.has("@lunora/container"),flags:e.flags||t.dependencies.has("@lunora/flags"),kv:e.kv||t.dependencies.has("@lunora/bindings"),mail:e.mail||t.dependencies.has("@lunora/mail"),notifications:e.notify||t.dependencies.has("@lunora/notify"),payments:e.payments||t.hasPaymentTables,queues:t.queueCount>0||t.dependencies.has("@lunora/queue"),scheduler:e.scheduler||t.cronCount>0||t.dependencies.has("@lunora/scheduler"),storage:e.storage||t.storageRuleCount>0||t.storageColumnCount>0||t.dependencies.has("@lunora/storage"),vectors:t.vectorStoreSupported&&t.vectorIndexCount>0,workflows:e.workflows||t.workflowCount>0||t.dependencies.has("@lunora/workflow")}),xl=(e,t,s)=>({cacheKey:`procedure_arguments_unreadable:${e}:${t}`,categories:["SCHEMA"],description:"Codegen reads an argument record statically. One built at runtime — a factory call, or a property off a value it cannot follow — has no literal to read, so the generated `FunctionReference` carries only the arguments it could see while the runtime validator still enforces all of them.",detail:`\`${t}\` in \`${e}\` (line ${s.toString()}) declares arguments codegen could not read, so its generated type is missing some of them.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:s},name:"procedure_arguments_unreadable",remediation:`Declare the arguments as an object literal, or as a \`const\` object literal the chain names — \`const ${t}Args = { … };\` then \`.input(${t}Args)\`. Both resolve; a record returned by a call does not.`,title:"Procedure arguments are missing from the generated type"}),vl=(e,t)=>{if(t===void 0){const s=e.getArguments()[0];if(s===void 0||!o.isObjectLiteralExpression(s)||s.getProperty("args")===void 0)return!1}return ke(e,t).opaque},El=(e,t)=>{const s=[],n=(i,r)=>{const a=i.getInitializer();if(a===void 0||!o.isCallExpression(a))return;const c=k(a);c!==void 0&&vl(a,c.receiver)&&s.push(xl(t,r,a.getStartLineNumber()))};for(const i of e.getVariableStatements().filter(r=>r.isExported()))for(const r of i.getDeclarations())n(r,r.getName());return s},yl=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n);i!==void 0&&s.push(...El(i,x(t,n)))}return s.toSorted((n,i)=>n.cacheKey.localeCompare(i.cacheKey))},Sl=new Map([["AgentDefinition",{call:"defineAgent({ … })",file:"agents"}],["ContainerDefinition",{call:"defineContainer({ … })",file:"containers"}],["QueueDefinition",{call:"defineQueue({ … })",file:"queues",note:"A dropped queue has no caller to fail — its consumer is simply never wired."}],["RegisteredAction",{call:"action.input({ … }).action(handler)"}],["RegisteredLifecycleHook",{call:"onConnect(handler)",note:"Substitute the hook you called: `onConnect`, `onDisconnect` and `onShardInit` share one type, so codegen cannot tell which you wrote. A dropped hook has no caller to fail — it silently never fires."}],["RegisteredMigration",{call:"defineMigration({ … })",note:"A dropped migration never runs, so `lunora migrate up` reports nothing to do."}],["RegisteredMutation",{call:"mutation.input({ … }).mutation(handler)"}],["RegisteredMutator",{call:"defineMutator({ … })",file:"mutators"}],["RegisteredQuery",{call:"query.input({ … }).query(handler)"}],["RegisteredReactor",{call:"onQueryChange(select, handler)",note:"A dropped reactor has no caller to fail — it silently never runs."}],["RegisteredShape",{call:"defineShape({ … })",file:"shapes"}],["RegisteredStream",{call:"query.input({ … }).stream(handler)"}],["RegisteredWhisperAuthorizer",{call:"onWhisper(handler)",note:"A dropped authorizer has no caller to fail — the whisper topics it was meant to gate silently stay open to every socket on the shard."}],["WorkflowDefinition",{call:"defineWorkflow({ … })",file:"workflows"}]]),me=({byName:e,byPath:t},s,n)=>t.has(`${s}:${n}`)||e.has(n),fs=e=>!e.isAny(),Ke=e=>{const t=e.getType();if(!fs(t))return;const s=t.getAliasSymbol()?.getName()??t.getSymbol()?.getName(),n=s===void 0?void 0:Sl.get(s);return n===void 0||s===void 0?void 0:{...n,typeName:s}},gs=e=>{const t=e.getInitializer();return t===void 0?!1:o.isCallExpression(t)||o.isIdentifier(t)||o.isPropertyAccessExpression(t)},ps={cause:"codegen recognises a registration only when the initializer is the registering call itself, and this one comes from a factory or an alias",remediation:"A factory that returns a registration cannot be read statically — inline it, or export what the factory builds."},Al=e=>({cause:`codegen reads this kind of registration only from \`lunora/${e}.ts\`, and this is a different module`,remediation:`Move it into \`lunora/${e}.ts\` — the declaration itself is fine.`}),Nl={cause:"the binding is exported by a separate `export { … }` statement, and codegen reads the `export` keyword on the declaration itself",remediation:"Move the keyword onto the declaration and drop the separate export statement."},_e=(e,t,s,n,i)=>{const{call:r,file:a,note:c,typeName:u}=s,d=a!==void 0&&e!==a?a:void 0,h=d===void 0?i:Al(d),m=c===void 0?h.remediation:`${c} ${h.remediation}`;return{cacheKey:`procedure_not_registered:${e}:${t}`,categories:["SCHEMA"],description:"Codegen registers an export only when the declaration carries `export` and its initializer is literally the registering call. Written any other way it exists at runtime but never reaches the generated output — `_generated/api.ts` for a procedure, the lifecycle manifest for a hook or reactor — so a caller cannot address it and a hook never fires.",detail:`\`${t}\` in \`${e}\` (line ${n.toString()}) has type \`${u}\` but was not registered — ${h.cause}.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:n,typeName:u},name:"procedure_not_registered",remediation:d===void 0?`Assign the registration directly: \`export const ${t} = ${r};\`. ${m}`:m,title:"Procedure exists at runtime but is missing from the generated API"}},bl=(e,t,s)=>{const n=[];for(const i of e.getVariableStatements().filter(r=>r.isExported()))for(const r of i.getDeclarations()){const a=r.getName();if(me(s,t,a)||!gs(r))continue;const c=Ke(r);c!==void 0&&n.push(_e(t,a,c,r.getStartLineNumber(),ps))}return n},Pl=(e,t,s)=>{if(me(s,t,"default"))return[];const n=[];for(const i of e.getExportAssignments().filter(r=>!r.isExportEquals())){const r=Ke(i.getExpression());r!==void 0&&n.push(_e(t,"default",r,i.getStartLineNumber(),ps))}return n},Il=(e,t,s)=>{const n=[];for(const i of e.getExportDeclarations().filter(r=>r.getModuleSpecifier()===void 0))for(const r of i.getNamedExports()){const a=r.getAliasNode()?.getText()??r.getName();if(me(s,t,a))continue;const c=r.getLocalTargetDeclarations().find(d=>o.isVariableDeclaration(d));if(c===void 0||!gs(c))continue;const u=Ke(c);u!==void 0&&n.push(_e(t,a,u,r.getStartLineNumber(),Nl))}return n},wl=(e,t,s)=>[...bl(e,t,s),...Pl(e,t,s),...Il(e,t,s)],Tl=(e,t,s)=>e.getVariableStatements().filter(n=>n.isExported()).flatMap(n=>n.getDeclarations()).filter(n=>me(s,t,n.getName())).filter(n=>{const i=n.getInitializer();return i!==void 0&&o.isCallExpression(i)&&o.isPropertyAccessExpression(i.getExpression())}).map(n=>({declaration:n,exportName:n.getName(),relativePath:t})),Cl=({exportName:e,relativePath:t})=>({cacheKey:"procedure_type_check_unavailable",categories:["SCHEMA"],description:"Codegen cross-checks every export in `lunora/` against its TYPE to catch a procedure the syntactic scan dropped — a factory-assigned export, an alias, a separate `export { … }`. That check needs the type checker to resolve `@lunora/server`; when it cannot, the check reports nothing regardless of what the code does.",detail:`Type resolution for \`lunora/\` is unavailable — the registered procedure \`${e}\` in \`${t}\` types as \`any\`, as does every other one — so codegen cannot tell you when an export is dropped from \`_generated/api.ts\`. A dropped procedure will surface as \`Property '<name>' does not exist\` at its call site instead.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:e,filePath:t},name:"procedure_type_check_unavailable",remediation:`Check what codegen sees: \`${e}\` should have a procedure type, not \`any\`. It needs a \`tsconfig.json\` at or above \`lunora/\` — the one codegen finds walking up from there, which is not necessarily the one your editor uses — resolving \`lunorash\` / \`@lunora/server\` to declarations that exist on disk (a workspace dependency has to be built first).`,title:"Codegen cannot type-check `lunora/`, so dropped procedures go unreported"}),Fl=(e,t,s)=>{const n=[],i=[];for(const a of p(t)){const c=e.getSourceFile(a);if(c===void 0)continue;const u=x(t,a);n.push(...wl(c,u,s)),i.push(...Tl(c,u,s))}const[r]=i;return r!==void 0&&i.every(({declaration:a})=>!fs(a.getType()))&&n.push(Cl(r)),n.toSorted((a,c)=>a.cacheKey.localeCompare(c.cacheKey))},Ol=new Set(["when","where"]),Pe=new Set(["definePolicy","defineShape"]),Rl=e=>{if(!o.isCallExpression(e))return;const t=e.getExpression();if(o.isPropertyAccessExpression(t)){const n=t.getName();return Pe.has(n)?n:void 0}if(!o.isIdentifier(t))return;for(const n of t.getSymbol()?.getDeclarations()??[])if(o.isImportSpecifier(n)){const i=n.getNameNode().getText();return Pe.has(i)?i:void 0}const s=t.getText();return Pe.has(s)?s:void 0},Ll=e=>o.isObjectLiteralExpression(e)&&e.getProperties().length===0,ms=e=>{if(e!==void 0){if(o.isReturnStatement(e)&&e.getExpression()===void 0||e.getKind()===l.UndefinedKeyword||e.getText()==="undefined")return"undefined";if(Ll(e))return"empty-object";if(o.isParenthesizedExpression(e))return ms(e.getExpression())}},ze=e=>e.getAncestors().find(t=>o.isArrowFunction(t)||o.isFunctionExpression(t)||o.isFunctionDeclaration(t)),Dl=e=>e.getDescendantsOfKind(l.ReturnStatement).filter(t=>ze(t)===e),hs=e=>e.getDescendantsOfKind(l.ConditionalExpression).filter(t=>ze(t)===e),kl=e=>{const t=Dl(e);return t.length>1?!0:t.some(s=>s.getFirstAncestorByKind(l.IfStatement)!==void 0)||hs(e).length>0},Ml=e=>e.getDescendantsOfKind(l.IfStatement).filter(t=>ze(t)===e),Fe=e=>e.getKind()===l.NullKeyword||e.getKind()===l.FalseKeyword||o.isIdentifier(e)&&e.getText()==="undefined"?!0:o.isNumericLiteral(e)?e.getLiteralValue()===0:o.isStringLiteral(e)&&e.getLiteralValue()==="",Kl=(e,t)=>Fe(e)||Fe(t),_l=new Map([[l.EqualsEqualsEqualsToken,"positive"],[l.EqualsEqualsToken,"positive"],[l.ExclamationEqualsEqualsToken,"negative"],[l.ExclamationEqualsToken,"negative"]]),Dt=e=>!Fe(e)&&(o.isLiteralExpression(e)||e.getKind()===l.TrueKeyword),zl=(e,t,s)=>{const n=_l.get(e);if(n!==void 0)return Kl(t,s)?n==="positive"?"negative":"positive":Dt(t)||Dt(s)?void 0:n},H=e=>{if(o.isParenthesizedExpression(e))return H(e.getExpression());if(o.isPrefixUnaryExpression(e)&&e.getOperatorToken()===l.ExclamationToken)return"negative";if(o.isBinaryExpression(e)){const t=e.getOperatorToken().getKind(),s=zl(t,e.getLeft(),e.getRight());if(s!==void 0)return s;if(t===l.AmpersandAmpersandToken||t===l.BarBarToken){const n=H(e.getLeft()),i=H(e.getRight());return n===i?n:"indeterminate"}}return o.isIdentifier(e)||o.isPropertyAccessExpression(e)||o.isElementAccessExpression(e)||o.isCallExpression(e)?"positive":"indeterminate"},kt=e=>{if(e!==void 0){if(o.isReturnStatement(e))return e;if(o.isBlock(e)){const t=e.getStatements().at(-1);return t!==void 0&&o.isReturnStatement(t)?t:void 0}}},$l=e=>{if(e.getElseStatement()!==void 0)return;const t=e.getNextSiblingIfKind(l.ReturnStatement);return t!==void 0&&t.getNextSibling()===void 0?t:void 0},Ul=e=>o.isReturnStatement(e)?e.getExpression()??e:e,ql=e=>{const t=[];for(const s of hs(e)){const n=H(s.getCondition());n==="positive"?t.push(s.getWhenFalse()):n==="negative"&&t.push(s.getWhenTrue())}for(const s of Ml(e)){const n=H(s.getExpression());if(n==="indeterminate")continue;const i=n==="negative"?kt(s.getThenStatement()):kt(s.getElseStatement())??$l(s);i!==void 0&&t.push(Ul(i))}return t},Bl=e=>{for(const t of e.getAncestors())if(o.isVariableDeclaration(t)){const s=t.getNameNode();if(o.isIdentifier(s))return s.getText()}return"<anonymous>"},Vl=(e,t,s)=>{if(!o.isCallExpression(e))return[];const[n]=e.getArguments();if(!n||!o.isObjectLiteralExpression(n))return[];const i=[];for(const r of n.getProperties()){if(!o.isPropertyAssignment(r)||!Ol.has(r.getName()))continue;const a=r.getInitializer();if(!(!a||!(o.isArrowFunction(a)||o.isFunctionExpression(a)))&&kl(a))for(const c of ql(a)){const u=ms(c);u!==void 0&&i.push({exportName:Bl(e),file:s,form:u,key:r.getName(),line:c.getStartLineNumber(),owner:t})}}return i},Wl=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const i=Rl(n);i!==void 0&&s.push(...Vl(n,i,t))}return s},jl=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Wl(i,x(t,n)))}return s},Hl=new Set(["query","upsert","upsertMany"]),Gl=e=>{if(!o.isPropertyAccessExpression(e))return;const t=e.getName();if(Hl.has(t))return e.getExpression().getText()==="ctx.vectors"?t:void 0},Yl=(e,t)=>{const s=Gl(e.getExpression());if(s===void 0)return;const n=e.getArguments()[1];if(!n)return;const i=A(n,"namespace");if(!(!i||!R(i)||_(i)))return{exportName:v(e),file:t,line:e.getStartLineNumber(),method:s}},Ql=(e,t)=>w(e,t,Yl),Xl=e=>{const t=e.getExpression();if(!o.isPropertyAccessExpression(t)||t.getName()!=="get")return!1;const s=t.getExpression();return o.isPropertyAccessExpression(s)?s.getName()==="workflows":o.isIdentifier(s)&&s.getText()==="workflows"},Zl=e=>{const t=e.getArguments()[0];return t&&o.isStringLiteral(t)?t.getLiteralText():""},Jl=(e,t)=>{const s=[];for(const n of p(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of i.getDescendantsOfKind(l.CallExpression)){if(!Xl(a))continue;const c=tn(a);c!==""&&s.push({exportName:c,file:r,line:a.getStartLineNumber(),workflow:Zl(a)})}}return s},eu=".lunora-schema.json",Oe=(e,t)=>{b(e)&&_t(e,"utf8")===t||ws(e,t,"utf8")},tu=(e,t)=>{if(t===""){Ts(e,{force:!0});return}Oe(e,t)},su=e=>{const t=E(e,"package.json");if(b(t))try{const s=JSON.parse(_t(t,"utf8"));return typeof s.version=="string"&&s.version!==""?s.version:void 0}catch{return}},nu=()=>{const e=process.env.LUNORA_CODEGEN_TIMING;return e!==void 0&&e!==""},ru=e=>{let t=b(e)?e:ne(e);for(;t&&t!==ne(t);){const s=E(t,"tsconfig.json");if(b(s))return s;t=ne(t)}},Mt=e=>e.replaceAll("\\","/"),iu=(e,t,s)=>{if(s&&e.length>0){const r=e.map(a=>`"${a.exportName}"`).join(", ");throw new L("MASK_UNSUPPORTED",`This project declares a \`mask(...)\` policy whose argument isn't a plain object literal (e.g. \`mask(sharedPolicies)\` referencing a hoisted variable), or contains a spread (\`...shared\`) or computed key (\`[name]:\`) codegen can't enumerate, so codegen can't tell which columns it masks. Because the project also declares replication shape(s) (${r}), codegen can't verify none of them replicate a table that policy masks — inline every table and column as literal keys so codegen can verify it, or remove the affected shape(s).`,{status:422})}const n=new Map;for(const r of t.columns){const a=n.get(r.table)??[];a.push(r.column),n.set(r.table,a)}const i=t.columns.length>0;for(const r of e){if(r.table===void 0){if(i)throw new L("MASK_UNSUPPORTED",`defineShape "${r.exportName}" has a non-literal \`table\` (a variable or expression, not a string literal), so codegen can't statically verify it doesn't replicate a table that masks a column. This project masks at least one column elsewhere, so the combination can't be proven safe — change "${r.exportName}"'s \`table\` to a plain string literal so codegen can verify it, or remove the mask(s) on the table it targets.`,{status:422});continue}const a=n.get(r.table);if(a===void 0)continue;const c=a.map(u=>`"${u}"`).join(", ");throw new L("MASK_UNSUPPORTED",`defineShape "${r.exportName}" replicates table "${r.table}", which masks column(s) ${c} on at least one procedure. A shape runs no procedure, so \`.use(mask(...))\` never applies to its replicated rows — remove the shape, unmask the table, or wait for shape-masking support.`,{status:422})}},le=(e,t,s)=>{const n=e.getSourceFile(t);if(n===void 0){e.createSourceFile(t,s,{overwrite:!0});return}n.getFullText()!==s&&n.replaceWithText(s)},Kt=(e,t,s)=>e.getSourceFile(t)?.getFullText()===s,ou=8,au=e=>{const{agents:t,apiPath:s,generatedFunctionsPath:n,lunoraDirectory:i,migrations:r,project:a,shapes:c,usesSandbox:u,useUmbrella:d,workflows:h}=e;let m=lt(a,i),P=dt(a,i),M=ut(a,i);ft([...m,...P].map(g=>g.filePath)),ft(M.filter(g=>g.stream).map(g=>g.filePath),"http-stream");for(let g=1;;g+=1){const T=Gs({agents:t,functions:m,httpRoutes:M,mutators:P,useUmbrella:d,workflows:h}),F=Ys({agents:t,functions:m,migrations:r,mutators:P,shapes:c,useUmbrella:d,usesSandbox:u});if(g>=ou||Kt(a,s,T)&&Kt(a,n,F))return{apiContent:T,functions:m,functionsContent:F,httpRoutes:M,mutators:P};le(a,s,T),le(a,n,F),m=lt(a,i),P=dt(a,i),M=ut(a,i)}},cu=e=>{const t=ru(e);return t?new ct({skipAddingFilesFromTsConfig:!1,tsConfigFilePath:t,useInMemoryFileSystem:!1}):new ct({skipAddingFilesFromTsConfig:!0,useInMemoryFileSystem:!1})},nd=(e,t)=>{const s=p(t),n=E(t,"schema.ts");b(n)&&s.push(n);for(const c of s){const u=e.getSourceFile(c);u===void 0?e.addSourceFileAtPath(c):u.refreshFromFileSystemSync()}const i=new Set(s.map(c=>Mt(c))),r=Mt(t),a=`${r}/`;for(const c of e.getSourceFiles()){const u=c.getFilePath();(u===r||u.startsWith(a))&&!i.has(u)&&e.removeSourceFile(c)}for(const c of e.getSourceFiles()){const u=c.getFilePath();if(!(u===r||u.startsWith(a)||u.includes("/node_modules/")))try{c.refreshFromFileSystemSync()}catch{e.removeSourceFile(c)}}},rd=e=>{const t=nu(),s=t?Ae.now():0,n=E(e.projectRoot,e.lunoraDirectory??"lunora"),i=E(n,"schema.ts");if(!b(i))throw new L("INTERNAL",`schema.ts not found at ${i}`);const r=e.project??cu(n);xn(Yi);const a=Dn(r,i,e.projectRoot),{agents:c,containers:u,crons:d,dataModelContent:h,dependencies:m,entryCronTriggers:P,env:M,featureUsage:g,hasFlags:T,hasNotify:F,identity:U,platformGate:S,queues:O,serverContent:z,storageRulesMetadata:W,usesSandbox:X,useUmbrella:K,workflows:C}=mr({lunoraDirectory:n,project:r,projectRoot:e.projectRoot,schema:a,target:e.target}),N=E(n,"_generated"),xs=E(N,"dataModel.ts"),vs=E(N,"server.ts"),Es=E(N,"api.ts"),ys=E(N,"functions.ts");le(r,xs,h),le(r,vs,z);const Z=Pn(r,n),q=zn(r,n),{apiContent:$e,functions:B,functionsContent:Ue,httpRoutes:Ss,mutators:J}=au({agents:c,apiPath:Es,generatedFunctionsPath:ys,lunoraDirectory:n,migrations:Z,project:r,shapes:q,useUmbrella:K,usesSandbox:X,workflows:C}),ee=e.lint===!1?void 0:Rs({adminRoutes:Nr(r,n),aiRawRuns:Ir(r,n),aiToolSideEffects:Mr(r,n),argumentDerivedFetches:zr(r,n),argumentValidators:Yr(r,n),authApiCalls:vn(r,n),authConfigs:ii(r,n),browserUrlAccesses:ui(r,n),configCalls:vi(r,n),containerKeyAccesses:yi(r,n),containerOverrides:Ii(r,n),containers:u,exportSinks:Fi(r,n),staleMigrationImports:al(r,n),failOpenGuards:ki(r,n),flagReads:Vi(r,n),flagSecurityDefaults:Gi(r,n),geoIndexUsages:Zi(r,n),httpActionGuards:uo(r,n),httpHeaderWrites:So(r,n),hyperdriveCalls:An(r,n),identityClaimReads:To(r,n),imageDeliveryUrlAccesses:Fo(r,n),inserts:Nn(r,n),kvKeyAccesses:Ro(r,n,B),mailRecipientAccesses:Ko(r,n),maskProcedures:bn(r,n),maskStrategies:Wo(r,n),mutatorWrites:Xo(r,n),nondeterministicCalls:Tn(r,n),normalizeIdAuthorizations:ga(r,n),notifyCalls:Fn(r,n),notifyConfig:Cn(r,n),mutators:J,ownerFieldWrites:Na(r,n,B,J),unrestrictedWhereBranches:jl(r,n),paymentWebhooks:Oa(r,n),privilegedDispatches:Va(r,n),procedureProtections:Tc(r,n),queries:hn(r,n),queues:O,r2sqlCalls:On(r,n),ratelimitKeySelectors:Rc(r,n),rawRowReturns:zc(r,n),relationLoads:qc(r,n),rlsProcedures:Rn(r,n),schema:a,secretLiterals:Qc(r,n),shapes:q,softDeleteReads:Zc(r,n),sqlInterpolations:rl(r,n),storageKeyAccesses:ll(r,n,B),storageUploads:ml(r,n),vectorNamespaceAccesses:Ql(r,n),workflowCalls:Jl(r,n),workflows:C,wranglerVariables:e.wranglerVariables}),qe=ee===void 0?[]:[...Cs(ee,{source:"static"}),...Fl(r,n,{byName:new Set([...C,...O,...c,...u].map(f=>f.exportName)),byPath:new Set([...B,...J,...q,...Z].map(f=>`${f.filePath}:${f.exportName}`))}),...yl(r,n)],As=Ln(r,n),Be=qo(r,n);iu(q,Be,$o(r,n));const Ns=T?zi(r,n):[],he=S.signals.vectorStore!==!1,j=hl(g,{containerCount:u.length,cronCount:d.length,dependencies:m,hasPaymentTables:Ia(a.tables),queueCount:O.length,storageColumnCount:Object.keys(zt(a)).length,storageRuleCount:W.rules.length,vectorIndexCount:a.vectorIndexes.length,vectorStoreSupported:he,workflowCount:C.length}),Ve=t?Ae.now():0,xe=Wn(a,Z.map(f=>f.id)),We=Ms({advisories:qe.filter(f=>f.name!=="procedure_type_check_unavailable"),advisorProcedures:ee?.procedureProtections??[],agents:c,containers:u,env:M,flagKeys:Ns,hasAccessFacade:g.access,hasAi:g.ai,hasAnalytics:g.analytics,hasBrowser:g.browser,hasFlags:T,hasHyperdrive:g.hyperdrive,hasImages:g.images,hasKv:g.kv,hasNotify:F,hasPayments:g.payments,hasPipelines:g.pipelines,hasR2sql:g.r2sql,hasVectors:he,hasX402:g.x402,maskMetadata:Be,mutators:J,queues:O,rlsMetadata:As,schema:a,schemaSnapshot:xe,shapes:q,storageRules:W,studioFeatures:j,useUmbrella:K,workflows:C}),je=Ks(q,m.has("@lunora/db"),K),He=_s(u,a.jurisdiction),Ge=zs(C),Ye=$s(c),Qe=Us(O),Xe=qs(d),bs=Bs(j.scheduler),Ze=Vs(a.vectorIndexes),te=Ws(a,K),Je=js(m.has("@lunora/seed")),se=e.apiSpec??"openapi",ve=se==="openapi"||se==="both",Ee=se==="openrpc"||se==="both",et=$n({emailAgents:c.filter(f=>f.onEmail===!0).map(f=>({bindingName:f.bindingName,exportName:f.exportName})),hasAccess:m.has("@lunora/cloudflare-access"),hasAi:g.ai,hasAnalytics:g.analytics,hasAuth:m.has("@lunora/auth"),hasBrowser:g.browser,hasFramework:m.has("@lunora/astro")||m.has("@lunora/svelte")||m.has("@lunora/vue"),hasGlobal:a.tables.some(f=>$t(f)),hasHyperdrive:g.hyperdrive,hasHyperdriveGlobal:a.tables.some(f=>Ut(f)),hasImages:g.images,hasKv:g.kv,hasKvIntrospector:j.kv,hasNotify:F,hasPayments:g.payments,hasR2sql:g.r2sql,hasQueue:O.some(f=>f.mode==="push"),hasScheduler:j.scheduler,hasStorage:j.storage,hasVectors:he,hasWorkflow:C.length>0,hasX402:g.x402,identity:U,jurisdiction:a.jurisdiction,tableNames:a.tables.map(f=>f.name),useUmbrella:K,vectorIndexCount:a.vectorIndexes.length,voiceAgents:c.filter(f=>f.voice===!0&&f.voiceBindingName!==void 0).map(f=>({bindingName:f.voiceBindingName,exportName:f.exportName})),wantsOpenApi:ve,wantsOpenRpc:Ee}),tt=su(e.projectRoot),st=Un({functions:B,httpRoutes:Ss,version:tt}),nt=Bn({functions:B,version:tt}),rt=`${JSON.stringify(st,void 0,2)}
+`,it=`${JSON.stringify(nt,void 0,2)}
+`,ot=qn(st),at=Vn(nt),ye=E(n,eu),Ps=b(ye),Se=[];if(!e.dryRun){b(N)||Is(N,{recursive:!0});const f=($,V)=>{Oe(E(N,$),V),Se.push($)},I=($,V)=>{tu(E(N,$),V),V!==""&&Se.push($)};f("app.ts",et),f("dataModel.ts",h),f("api.ts",$e),f("server.ts",z),f("functions.ts",Ue),f("shard.ts",We),f("crons.ts",Xe),f("vectors.ts",Ze),f("drizzle.global.ts",te.global),f("drizzle.shard.ts",te.shard),I("containers.ts",He),I("workflows.ts",Ge),I("agents.ts",Ye),I("queues.ts",Qe),I("scheduler.ts",bs),I("seed.ts",Je),I("collections.ts",je),I("openapi.json",ve?rt:""),I("openapi.ts",ve?ot:""),I("openrpc.json",Ee?it:""),I("openrpc.ts",Ee?at:""),(!Ps||e.updateSchemaBaseline===!0)&&Oe(ye,Os(xe))}if(t){const f=Ae.now(),I=Math.round(f-s),$=Math.round(Ve-s),V=Math.round(f-Ve);console.error(`@lunora/codegen: codegen took ${I.toString()}ms (discovery ${$.toString()}ms, emit ${V.toString()}ms)`)}return{advisories:qe,advisorContext:ee,agents:c,containers:u,cronTriggers:[...new Set([...Hs(d),...P])],generated:{agents:Ye,api:$e,app:et,collections:je,containers:He,crons:Xe,dataModel:h,drizzleGlobal:te.global,drizzleShard:te.shard,functions:Ue,openApi:rt,openApiModule:ot,openRpc:it,openRpcModule:at,queues:Qe,seed:Je,server:z,shard:We,vectors:Ze,workflows:Ge},migrations:Z,outputDirectory:N,platformDiagnostics:S.diagnostics,queues:O,schemaSnapshot:xe,schemaSnapshotPath:ye,workflows:C,writtenFiles:Se}};export{eu as SCHEMA_SNAPSHOT_FILENAME,cu as createCodegenProject,ru as findTsconfig,nd as refreshCodegenProject,rd as runCodegen};

package/dist/packem_shared/{emitApp-DLEEN6Yy.mjs → emitApp-dpkp-O2j.mjs}

@@ -619,7 +619,7 @@ const buildGlobalCdcApplier =
 
         return request.changes.length;
     };
-`:"",H=e=>[...e.hasAuth?["AuthDeclaration"]:[],"ComposedApp",...e.hasGlobal?["GlobalDeclaration"]:[],"LunoraConfig",...e.hasScheduler?["SchedulerDeclaration"]:[],"Selector",...e.hasStorage?["StorageDeclaration"]:[]].toSorted((t,a)=>t.localeCompare(a)).join(", "),M=e=>{const t={...e,hasVectors:(e.hasVectors??!0)&&(e.vectorIndexCount??0)>0},{hasAuth:a}=t,r=L(t),n=B(t),i=a?`        let auth: LunoraAuth | null = null;
+`:"",H=e=>[...e.hasAuth?["AuthDeclaration"]:[],"ComposedApp",...e.hasGlobal?["GlobalDeclaration"]:[],"LunoraConfig",...e.hasScheduler?["SchedulerDeclaration"]:[],"Selector",...e.hasStorage?["StorageDeclaration"]:[]].toSorted((t,a)=>t.localeCompare(a)).join(", "),F=e=>{const t={...e,hasVectors:(e.hasVectors??!0)&&(e.vectorIndexCount??0)>0},{hasAuth:a}=t,r=L(t),n=B(t),i=a?`        let auth: LunoraAuth | null = null;
         let authInit: Promise<void> | null = null;
 `:"",o=a?`
         const initAuth = async (env: Env): Promise<void> => {
@@ -640,12 +640,22 @@ const buildGlobalCdcApplier =
             // migrator). For production run the migrate command ahead of deploy.
             // The migration instance takes the RAW binding: better-auth migrates
             // only through Kysely and rejects the adapter the request instance uses.
+            //
+            // CONSTRUCTED BEFORE THE MIGRATION, ASSIGNED AFTER IT. Both halves matter:
+            // building it first gives \`ensureMigrated\`'s schema-check invalidation a
+            // registered check to invalidate, and assigning it only afterwards keeps a
+            // concurrent request from serving \`/api/auth/*\` against tables the
+            // migrator has not created yet. See \`emit-app.ts\` in @lunora/codegen for
+            // the full reasoning.
+            //
+            // On a first boot against an unmigrated database this means better-auth's
+            // eager schema check runs BEFORE the migration, so one
+            // "the auth tables do not match…" line on a cold start is expected.
+            const requestAuth = createAuth({ ...this.authDeclaration.options(env), database: lunoraD1Adapter(d1(env) as never) });
+
             await ensureMigrated(createAuth({ ...this.authDeclaration.options(env), database: d1(env) as never }));
-            // Assigned after the schema exists, never before. Assigning first is
-            // what let a concurrent request see a non-null \`auth\` and serve
-            // \`/api/auth/*\` against tables the migrator had not created yet —
-            // \`no such table: rateLimit\`, from the isolate that was mid-migration.
-            auth = createAuth({ ...this.authDeclaration.options(env), database: lunoraD1Adapter(d1(env) as never) });
+
+            auth = requestAuth;
         };
 
         // Single-flighted on the PROMISE, not on \`auth\`. Every \`fetch\` awaits this
@@ -820,4 +830,4 @@ const defineApp = <Env extends object>(): AppBuilder<Env> => new AppBuilder<Env>
 
 export { AppBuilder, defineApp };
 export type { ${H(t)} };
-`};export{M as emitApp};
+`};export{F as emitApp};

package/dist/packem_shared/{formatAdvisories-CkEu1eye.mjs → formatAdvisories-DwmUKYuc.mjs}

@@ -1,2 +1,2 @@
-import{runAdvisor as t}from"@lunora/advisor";const i=n=>[...n.indexes.map(e=>({fields:e.fields,kind:"index",name:e.name,unique:e.unique})),...n.searchIndexes.map(e=>({fields:[e.field,...e.filterFields??[]],kind:"search",name:e.name})),...n.rankIndexes.map(e=>({fields:[...e.sortBy.map(r=>r.field),...e.partitionBy??[]],kind:"rank",name:e.name})),...n.vectorIndexes.filter(e=>e.field!==void 0).map(e=>({fields:[e.field],kind:"vector",name:e.name})),...(n.geoIndexes??[]).map(e=>({fields:[e.field],kind:"geo",name:e.name}))],d=n=>{const e={};for(const[r,s]of Object.entries(n.shape))e[r]=s.kind==="optional"?s.inner?.kind??"optional":s.kind;return e},l=n=>({rlsMode:n.rlsMode,tables:n.tables.map(e=>({externallyManaged:e.externallyManaged??!1,externalSource:e.externalSource?{hasReconcile:e.externalSource.hasReconcile??!1,hasSoftDelete:e.externalSource.hasSoftDelete??!1,hasTenantBy:e.externalSource.hasTenantBy,mode:e.externalSource.mode,unanalyzable:e.externalSource.unanalyzable}:void 0,columnKinds:d(e),fields:Object.keys(e.shape),indexes:i(e),isPublic:e.isPublic??!1,name:e.name,relations:e.relations.map(r=>({field:r.field,kind:r.kind,name:r.name,onDelete:r.onDelete,references:r.references,table:r.table})),commitOrdered:e.commitOrdered,shardKind:typeof e.shardMode=="string"?e.shardMode:"shardBy",softDelete:e.softDelete,ttl:e.ttl}))}),c=n=>n.map(e=>({exportName:e.exportName,file:`lunora/${e.filePath}.ts`,table:e.table})),m=n=>{const{argumentValidators:e,queries:r,schema:s,shapes:a,...o}=n;return{...o,argValidators:e,queries:r??[],schema:l(s),shapes:a===void 0?void 0:c(a)}},f=n=>t(m(n),{source:"static"}),h=n=>{if(n.length===0)return"";const e=`@lunora/codegen: ${String(n.length)} schema advisor finding${n.length===1?"":"s"}`,r=n.map(s=>`  [${s.level}] ${s.name}: ${s.detail}`);return[e,...r].join(`
-`)};export{h as formatAdvisories,f as lintSchema,m as toAdvisorContext};
+import{runAdvisor as i}from"@lunora/advisor";const d=n=>[...n.indexes.map(e=>({fields:e.fields,kind:"index",name:e.name,unique:e.unique})),...n.searchIndexes.map(e=>({fields:[e.field,...e.filterFields??[]],kind:"search",name:e.name})),...n.rankIndexes.map(e=>({fields:[...e.sortBy.map(r=>r.field),...e.partitionBy??[]],kind:"rank",name:e.name})),...n.vectorIndexes.filter(e=>e.field!==void 0).map(e=>({fields:[e.field],kind:"vector",name:e.name})),...(n.geoIndexes??[]).map(e=>({fields:[e.field],kind:"geo",name:e.name}))],l=n=>{const e={};for(const[r,s]of Object.entries(n.shape))e[r]=s.kind==="optional"?s.inner?.kind??"optional":s.kind;return e},m=n=>({rlsMode:n.rlsMode,tables:n.tables.map(e=>({externallyManaged:e.externallyManaged??!1,externalSource:e.externalSource?{hasReconcile:e.externalSource.hasReconcile??!1,hasSoftDelete:e.externalSource.hasSoftDelete??!1,hasTenantBy:e.externalSource.hasTenantBy,mode:e.externalSource.mode,unanalyzable:e.externalSource.unanalyzable}:void 0,columnKinds:l(e),fields:Object.keys(e.shape),indexes:d(e),isPublic:e.isPublic??!1,name:e.name,relations:e.relations.map(r=>({field:r.field,kind:r.kind,name:r.name,onDelete:r.onDelete,references:r.references,table:r.table})),commitOrdered:e.commitOrdered,shardKind:typeof e.shardMode=="string"?e.shardMode:"shardBy",softDelete:e.softDelete,ttl:e.ttl}))}),c=n=>n.map(e=>({exportName:e.exportName,file:`lunora/${e.filePath}.ts`,table:e.table})),u=n=>n.map(e=>({exportName:e.exportName,file:`lunora/${e.filePath}.ts`,line:e.line,owner:e.owner})),f=n=>{const{argumentValidators:e,mutators:r,queries:s,schema:t,shapes:o,...a}=n;return{...a,argValidators:e,mutators:r===void 0?void 0:u(r),queries:s??[],schema:m(t),shapes:o===void 0?void 0:c(o)}},p=n=>i(f(n),{source:"static"}),v=n=>{if(n.length===0)return"";const e=`@lunora/codegen: ${String(n.length)} schema advisor finding${n.length===1?"":"s"}`,r=n.map(s=>`  [${s.level}] ${s.name}: ${s.detail}`);return[e,...r].join(`
+`)};export{v as formatAdvisories,p as lintSchema,f as toAdvisorContext};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/codegen",
-  "version": "1.0.0-alpha.191",
+  "version": "1.0.0-alpha.193",
   "description": "Code generator for Lunora: emits _generated/{api,server,dataModel}.ts from your schema",
   "keywords": [
     "cloudflare",
@@ -46,15 +46,15 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/advisor": "1.0.0-alpha.140",
-    "@lunora/agent": "1.0.0-alpha.118",
+    "@lunora/advisor": "1.0.0-alpha.142",
+    "@lunora/agent": "1.0.0-alpha.119",
     "@lunora/container": "1.0.0-alpha.52",
     "@lunora/errors": "1.0.0-alpha.39",
     "@lunora/platform": "1.0.0-alpha.32",
     "@lunora/queue": "1.0.0-alpha.59",
     "@lunora/scheduler": "1.0.0-alpha.76",
     "@lunora/values": "1.0.0-alpha.49",
-    "@lunora/workflow": "1.0.0-alpha.55",
+    "@lunora/workflow": "1.0.0-alpha.56",
     "jiti": "^2.7.0",
     "quicktype-core": "^26.0.0",
     "ts-morph": "^28.0.0"

package/dist/packem_shared/MUTATORS_FILENAME-CTHlZ1j6.mjs

@@ -1 +0,0 @@
-import{existsSync as f}from"node:fs";import{join as p}from"node:path";import{Node as o,SyntaxKind as c}from"ts-morph";import{diagnosticAt as l}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{a as g}from"./module-specifiers-WF8iAydP.mjs";import{a as d}from"./parse-validator-tdRHHDzh.mjs";import{u as x}from"./unwrap-handler-return-CmIWbykC.mjs";const M="mutators.ts",m=g,y=r=>{const t=r.getSymbol();if(!t)return r.getText()==="defineMutator";for(const e of t.getDeclarations())if(o.isImportSpecifier(e))return m(e.getImportDeclaration().getModuleSpecifierValue())?e.getNameNode().getText()==="defineMutator":!1;return!1},S=r=>{const t=r.getSymbol();if(!t)return!1;for(const e of t.getDeclarations()){if(!o.isNamespaceImport(e))continue;const i=e.getFirstAncestorByKind(c.ImportDeclaration);return i!==void 0&&m(i.getModuleSpecifierValue())}return!1},N=r=>{if(o.isIdentifier(r))return y(r);if(o.isPropertyAccessExpression(r)){const t=r.getExpression();return r.getName()==="defineMutator"&&o.isIdentifier(t)&&S(t)}return!1},I=r=>{const t=r.getArguments()[0];return t&&o.isObjectLiteralExpression(t)?t:void 0},b=r=>{const t=r?.getProperty("args");if(!t||!o.isPropertyAssignment(t))return{};const e=t.getInitializer();return e&&o.isObjectLiteralExpression(e)?d(e):{}},A=r=>{const t=r?.getProperty("server");if(!t||!o.isPropertyAssignment(t))return"unknown";const e=t.getInitializer();return!e||!(o.isArrowFunction(e)||o.isFunctionExpression(e))?"unknown":x(e)},E=r=>{const t=[];for(const e of r.getVariableDeclarations()){if(!e.isExported())continue;const i=e.getInitializer();if(i?.getKind()!==c.CallExpression)continue;const n=i,a=n.getExpression();if(!N(a))continue;const s=e.getNameNode();if(!o.isIdentifier(s))throw l(s,"defineMutator exports must be plain named exports (no destructuring)");const u=I(n);t.push({args:b(u),exportName:s.getText(),filePath:"mutators",returnType:A(u)})}return t},w=(r,t)=>{const e=p(t,M);if(!f(e))return[];const i=r.getSourceFile(e)??r.addSourceFileAtPath(e),n=E(i);return n.sort((a,s)=>a.exportName.localeCompare(s.exportName)),n};export{M as MUTATORS_FILENAME,w as discoverMutators,N as isDefineMutatorCallee};

package/dist/packem_shared/SCHEMA_SNAPSHOT_FILENAME-CuWCb603.mjs

@@ -1,9 +0,0 @@
-import{existsSync as b,mkdirSync as Ps,readFileSync as _t,writeFileSync as Is,rmSync as ws}from"node:fs";import{join as E,dirname as se}from"node:path";import{performance as Se}from"node:perf_hooks";import{runAdvisor as Ts}from"@lunora/advisor";import{LunoraError as L}from"@lunora/errors";import{SyntaxKind as l,Node as i,Project as ct}from"ts-morph";import{serializeSchemaSnapshot as Cs}from"./SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import{toAdvisorContext as Fs}from"./formatAdvisories-CkEu1eye.mjs";import{s as Os}from"./paths-C-9fwEgQ.mjs";import{C as ne,o as Kt,j as Rs,f as Ls,k as Ds,b as ks,c as Ms,m as _s,e as Ks,p as zs,d as $s,i as Us,l as qs,g as Bs,q as Vs,n as Ws,a as js,h as Hs}from"./emit-CTDEkEXh.mjs";import{isD1GlobalTable as zt,isHyperdriveGlobalTable as $t}from"./isD1GlobalTable-udvHAAzD.mjs";import{discoverAgents as Gs}from"./AGENTS_FILENAME-B78F7DuQ.mjs";import{discoverContainers as Ys}from"./CONTAINERS_FILENAME-CQoUu7n7.mjs";import Qs from"./discoverCrons-CMu0sA8k.mjs";import{diagnosticAt as le}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{b as ue}from"./module-specifiers-WF8iAydP.mjs";import{listLunoraSourceFiles as p,unwrapExpression as G,listSecurityScanFiles as Oe,objectLiteralFromCallbackBody as Ut,propertyInitializer as A,lunoraRelativePath as x,collectCallRows as w,collectSecurityCallRows as Xs,limitNameOf as qt,isContextIdentifier as Pe,handlerOf as Zs,isDatabaseAccessor as D,readTargetOf as Bt,enclosingExportName as Js}from"./listLunoraSourceFiles-D4xthUf-.mjs";import en from"./readPackageDependencies-C6h6FZuP.mjs";import{discoverQueues as tn}from"./QUEUES_FILENAME-Q3CF3uYr.mjs";import{discoverSandboxUsage as sn}from"./discoverSandboxUsage-DskdDbkM.mjs";import nn from"./discoverStorageRulesMetadata-C3ywuLJd.mjs";import{a as y,c as k,d as Vt,e as rn}from"./classify-procedure-call-BIlyTUBD.mjs";import{discoverWorkflows as on}from"./WORKFLOWS_FILENAME-BaSbufF2.mjs";import{gatePlatformFeatures as an,resolveCodegenTarget as cn,readTargetDiagnostics as ln}from"./DEFAULT_TARGET-DtzlGawL.mjs";import{i as R,a as K,e as v,r as un,b as dn,s as de,c as fn,f as gn,d as pn}from"./queries-CPlxXagL.mjs";import{r as fe,s as mn}from"./parse-validator-tdRHHDzh.mjs";import hn from"./discoverAuthApiCalls-DoblmzUW.mjs";import lt from"./discoverFunctions-C9O2RBTz.mjs";import{i as xn,r as vn,e as En}from"./unwrap-handler-return-CmIWbykC.mjs";import ut from"./discoverHttpRoutes-S81Iv_iB.mjs";import yn from"./discoverHyperdriveCalls-DP3Vb0HC.mjs";import Sn from"./discoverInserts-COk-Sm_n.mjs";import{m as Re,a as oe,s as Wt,d as An}from"./index-C4eKBBMk.mjs";import{e as jt}from"./exported-procedure-chains-Bqdp4ywr.mjs";import Nn from"./discoverMigrations-B_sYrTyE.mjs";import{MUTATORS_FILENAME as bn,isDefineMutatorCallee as Pn,discoverMutators as dt}from"./MUTATORS_FILENAME-CTHlZ1j6.mjs";import In from"./discoverNondeterministicCalls-Dy6k2aPS.mjs";import{discoverNotifyConfig as wn,discoverNotifyCalls as Tn}from"./NOTIFY_FILENAME-Bgq52CnU.mjs";import Cn from"./discoverR2sqlCalls-FaK1-wbV.mjs";import Fn from"./discoverRlsProcedures-D_J8cH-m.mjs";import On from"./discoverRlsMetadata-DwULXx5T.mjs";import Rn from"./discoverSchema-DoZtXwLg.mjs";import{secretKindOf as Ln,redact as Dn,isHeuristicSecretKind as kn,isSecretishName as Mn}from"./redact-Cy14LEnc.mjs";import{discoverShapes as _n}from"./SHAPES_FILENAME-Bvd5kgsF.mjs";import{emitApp as Kn}from"./emitApp-DLEEN6Yy.mjs";import{buildOpenApiDocument as zn,emitOpenApiModule as $n}from"./buildOpenApiDocument-D_-3ZGH1.mjs";import{buildOpenRpcDocument as Un,emitOpenRpcModule as qn}from"./OPENRPC_VERSION-COQLvoDY.mjs";import{buildSchemaSnapshot as Bn}from"./SchemaSnapshotParseError-lUWe6lPo.mjs";const ft=(e,t="api")=>{const s=new Map;for(const n of e){const o=Os(n),r=s.get(o);if(r===void 0){s.set(o,n);continue}if(r!==n){const a=t==="api"?`the generated api.ts would declare "${o}" twice and the dispatch key "${o}:<fn>" would be ambiguous`:`the generated api.ts would declare "${o}" twice in HttpStreamsRef and again in the httpStreams object literal`;throw new L("INTERNAL",`@lunora/codegen: "${r}" and "${n}" both map to the ${t} namespace "${o}" — ${a}. Rename one file so the two differ by more than a non-identifier character (\`-\`, \`.\`, \`/\` and \`_\` all sanitize to \`_\`).`,{status:500})}}},Vn=(e,t={})=>{const{hasVectors:s=!0,scheduler:n=!1,storage:o=!1,usage:r}=t,a=[];e.tables.some(c=>zt(c))&&a.push({name:"@lunora/d1",reason:"`.global()` tables are D1-backed, so `_generated/app.ts` imports the D1 `ctx.db` adapter"}),e.tables.some(c=>$t(c))&&a.push({name:"@lunora/hyperdrive",reason:'`.global({ backend: "hyperdrive" })` tables route through `@lunora/hyperdrive/global`'},{name:"@lunora/sql-store",reason:'`.global({ backend: "hyperdrive" })` makes `_generated/app.ts` import the `SqlCtxDbOptions` / `SqlExec` types'}),n&&a.push({name:"@lunora/scheduler",reason:"a declared cron (or `ctx.scheduler` use) makes `_generated/app.ts` import `createScheduler`"}),o&&a.push({name:"@lunora/storage",reason:"a `v.storage()` column, a storage access rule (or `ctx.storage` use) makes `_generated/app.ts` import `createStorage`"}),e.vectorIndexes.length>0&&s&&a.push({name:"@lunora/bindings",reason:"`.vectorize()` indexes make `_generated/shard.ts` import `@lunora/bindings/vectors`"});for(const c of r===void 0?[]:ne)c.requiredPackage!==void 0&&r?.[c.key]===!0&&a.push({name:c.requiredPackage,reason:`\`ctx.${c.contextProperty??c.key}\` usage makes \`_generated/\` import \`${c.moduleSpecifier}\``});return a.filter((c,u)=>a.findIndex(d=>d.name===c.name)===u)},Wn=(e,t,s={})=>{if(t===void 0)return;const n=Vn(e,s).filter(r=>!t.has(r.name));if(n.length===0)return;const o=n.map(r=>`  - ${r.name} — ${r.reason}`).join(`
-`);throw new L("INTERNAL",`@lunora/codegen: this schema's generated code imports packages the project does not declare:
-${o}
-
-Install them with your package manager, then re-run codegen.`)},jn="env.ts",Hn=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineEnv";for(const s of t.getDeclarations())if(i.isImportSpecifier(s))return ue(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineEnv":!1;return!1},Gn=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!i.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&ue(n.getModuleSpecifierValue())}return!1},Yn=e=>{if(i.isIdentifier(e))return Hn(e);if(i.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineEnv"&&i.isIdentifier(t)&&Gn(t)}return!1},Qn=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!Yn(n.getExpression()))continue;const r=s.getNameNode();if(!i.isIdentifier(r))throw le(r,"defineEnv exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},Xn=(e,t)=>{const s=E(t,jn);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),o=Qn(n);if(o.length!==0){if(o.length>1)throw le(n,`lunora/env.ts declares ${o.length.toString()} defineEnv() contracts (${o.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return o[0]}},gt="ctx",Ht=e=>{const t=new Set,s=new Set([gt]),n=r=>{if(i.isObjectBindingPattern(r))for(const a of r.getElements()){const c=a.getPropertyNameNode()?.getText()??a.getName();c&&t.add(c)}};for(const r of e.getDescendantsOfKind(l.BindingElement)){if((r.getPropertyNameNode()?.getText()??r.getName())!==gt)continue;const a=r.getNameNode();i.isIdentifier(a)?s.add(a.getText()):n(a)}const o=r=>i.isIdentifier(r)&&s.has(r.getText());for(const r of e.getDescendantsOfKind(l.PropertyAccessExpression))o(r.getExpression())&&t.add(r.getName());for(const r of e.getDescendantsOfKind(l.VariableDeclaration)){const a=r.getInitializer();a!==void 0&&o(a)&&n(r.getNameNode())}return t},Zn=(e,t)=>{const s=Object.fromEntries(ne.map(n=>[n.key,!1]));for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=new Set(o.getImportDeclarations().map(c=>c.getModuleSpecifierValue())),a=Ht(o);for(const c of ne)if(!s[c.key]){if(r.has(c.moduleSpecifier)){s[c.key]=!0;continue}c.contextProperty!==void 0&&a.has(c.contextProperty)&&(s[c.key]=!0)}if(ne.every(c=>s[c.key]))break}return s},Gt="identity.ts",Jn=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineIdentity";for(const s of t.getDeclarations())if(i.isImportSpecifier(s))return ue(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineIdentity":!1;return!1},er=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!i.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&ue(n.getModuleSpecifierValue())}return!1},tr=e=>{if(i.isIdentifier(e))return Jn(e);if(i.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineIdentity"&&i.isIdentifier(t)&&er(t)}return!1},sr=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!tr(n.getExpression()))continue;const r=s.getNameNode();if(!i.isIdentifier(r))throw le(r,"defineIdentity exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},nr=(e,t)=>{const s=E(t,Gt);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),o=sr(n);if(o.length!==0){if(o.length>1)throw le(n,`lunora/identity.ts declares ${o.length.toString()} defineIdentity() contracts (${o.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return o[0]}},rr=(e,t)=>{const s=G(t);if(s===void 0||!i.isIdentifier(s))return s;const n=s.getText();return G(e.getDescendantsOfKind(l.VariableDeclaration).find(o=>o.getName()===n)?.getInitializer())},or=e=>e!==void 0&&i.isObjectLiteralExpression(e)&&e.getProperties().some(t=>{if(i.isShorthandPropertyAssignment(t))return t.getName()==="durable";if(!i.isPropertyAssignment(t)||t.getName()!=="durable")return!1;const s=t.getInitializer();return s===void 0||G(s)?.getText()!=="false"}),ir=(e,t)=>{const s={durableStreams:!1,secrets:!1};for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);if(s.secrets||(s.secrets=Ht(o).has("secrets")),s.durableStreams||(s.durableStreams=o.getDescendantsOfKind(l.CallExpression).some(r=>{const a=r.getExpression();return(i.isPropertyAccessExpression(a)?a.getName():a.getText())==="stream"&&r.getArguments().some(u=>or(rr(o,u)))})),s.durableStreams&&s.secrets)break}return s},ar="createWorker",cr="extend",pt=e=>e!==void 0&&(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))?e.getLiteralValue():void 0,mt=e=>{const t=[],s=pt(A(e,"backupCron"));s!==void 0&&t.push(s);const n=A(e,"crons");if(n===void 0||!i.isObjectLiteralExpression(n))return t;for(const o of n.getProperties()){if(!i.isPropertyAssignment(o)&&!i.isMethodDeclaration(o))continue;const r=pt(o.getNameNode());r!==void 0&&t.push(r)}return t},lr=e=>{const t=y(e.getExpression()),[s]=e.getArguments();if(s===void 0)return[];if(t===ar)return i.isObjectLiteralExpression(s)?mt(s):[];if(t!==cr||!(i.isArrowFunction(s)||i.isFunctionExpression(s)))return[];const n=Ut(s.getBody());return n===void 0?[]:mt(n)},ur=(e,t)=>{const s=[];for(const{filePath:n}of Oe(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of o.getDescendantsOfKind(l.CallExpression))s.push(...lr(r))}return[...new Set(s)]},Yt=e=>{if(e.kind==="id")return e.tableName;if(!(e.kind!=="array"&&e.kind!=="optional"))return e.inner===void 0?void 0:Yt(e.inner)},dr=e=>{const t=new Set(e.tables.map(s=>s.name));return e.tables.some(s=>Object.values(s.shape).some(n=>{const o=Yt(n);return o!==void 0&&t.has(o)}))},fr=(e,t)=>{const s=new Map,n=new Map,o=new Map;for(const r of e)s.set(r.name,`workflow "${r.exportName}"`),n.set(r.bindingName,`workflow "${r.exportName}"`),o.set(r.className,`workflow "${r.exportName}"`);for(const r of t){const a=s.get(r.name);if(a!==void 0)throw new L("DUPLICATE_WORKFLOW_NAME",`Duplicate deployed name "${r.name}": produced by both ${a} and agent "${r.exportName}". Workflow and agent names share the same wrangler workflows[] array and must be unique together.`,{status:500});const c=n.get(r.bindingName);if(c!==void 0)throw new L("DUPLICATE_WORKFLOW_BINDING",`Duplicate binding "${r.bindingName}": produced by both ${c} and agent "${r.exportName}". Workflow and agent bindings share the same wrangler workflows[] array and must be unique together.`,{status:500});const u=o.get(r.className);if(u!==void 0)throw new L("DUPLICATE_WORKFLOW_CLASS",`Duplicate generated class "${r.className}": produced by both ${u} and agent "${r.exportName}". Workflow and agent export names must yield unique generated class names.`,{status:500})}},gr=e=>{const{lunoraDirectory:t,project:s,projectRoot:n,schema:o}=e,r=nr(s,t),a=Xn(s,t),c=on(s,t),u=tn(s,t),d=Gs(s,t);fr(c,d);const h=Ys(s,t),m=nn(s,t),P=Qs(s,t,c,d),M=ur(s,t),g=ir(s,t),T=sn(s,t),F=Zn(s,t);F.browser=F.browser||T.usesSandboxBrowser;const U=an(F,cn(n,e.target),{agents:d.length>0,commitOrderedTables:o.tables.some(N=>N.commitOrdered===!0),cronTriggers:P.length>0,crossShardFanout:o.tables.some(N=>typeof N.shardMode=="object"),durableStreams:g.durableStreams,globalTables:o.tables.some(N=>N.shardMode==="global"),queues:u.length>0,relationGraph:dr(o),secrets:g.secrets,vectorStore:o.vectorIndexes.length>0}),S=U.usage,O=U.signals.vectorStore!==!1,z=en(n),W=z??new Set,X=W.has("lunorash");Wn(o,z,{hasVectors:O,scheduler:S.scheduler||P.length>0,storage:S.storage||m.rules.length>0||Object.keys(Kt(o)).length>0,usage:S});const _=b(E(t,"flags.ts")),C=b(E(t,"notify.ts"));return{agents:d,containers:h,crons:P,dataModelContent:Ls(o),declaredDependencies:z,dependencies:W,entryCronTriggers:M,env:a,featureUsage:S,hasFlags:_,hasNotify:C,identity:r,platformGate:{...U,diagnostics:[...ln(n,e.target),...U.diagnostics]},queues:u,serverContent:Rs({agents:d,containers:h,env:a,hasAccessFacade:S.access,hasAi:S.ai,hasAnalytics:S.analytics,hasBrowser:S.browser,hasVectors:O,hasFlags:_,hasHyperdrive:S.hyperdrive,hasImages:S.images,hasKv:S.kv,hasNotify:C,hasPayments:S.payments,hasPipelines:S.pipelines,hasR2sql:S.r2sql,hasX402:S.x402,identity:r,queues:u,schema:o,storageRuleBuckets:m.rules.map(N=>N.bucket),useUmbrella:X,workflows:c}),storageRulesMetadata:m,usesSandbox:T.usesSandboxBrowser||T.usesSandboxContainer||T.usesSandboxFs,useUmbrella:X,workflows:c}},Qt=new Set(["delete","get","head","options","patch","post","put"]),pr=new Set(["handler","stream"]),mr=/\/(?:_|admin|internal|superuser|sudo|root|debug)/iu,ht=new Set(["ADMIN_TOKEN","adminToken","assertAdmin","assertAuth","auth","Authorization","getSession","identity","isAdmin","requireAdmin","requireAuth","requireRole","verifyAdmin"]),hr=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!Qt.has(t.getName()))return;const s=t.getExpression();if(!i.isIdentifier(s)||s.getText()!=="httpRoute")return;const n=e.getArguments()[0];if(!(!n||!i.isStringLiteral(n)))return{method:t.getName().toUpperCase(),path:n.getLiteralValue()}},xr=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;let s=t.getExpression();for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n)||Qt.has(n.getName()))break;s=n.getExpression()}return hr(s)},vr=e=>{for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression))if(ht.has(t.getName()))return!0;for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=t.getExpression();if(i.isIdentifier(s)&&ht.has(s.getText()))return!0}return!1},Er=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=s.getExpression();if(!i.isPropertyAccessExpression(n)||!pr.has(n.getName()))return;const o=xr(s);if(!o||!mr.test(o.path))return;const r=s.getArguments()[0],a=r!==void 0&&(i.isArrowFunction(r)||i.isFunctionExpression(r))&&vr(r);return{exportName:e.getName(),file:t,method:o.method,path:o.path,usesGuard:a}},yr=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=Er(o,t);r&&s.push(r)}return s},Sr=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...yr(o,x(t,n)))}return s},Ar=e=>!i.isPropertyAccessExpression(e)||e.getName()!=="run"?!1:e.getExpression().getText()==="ctx.ai",Nr=(e,t)=>{if(!Ar(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!R(s)||K(s)))return{exportName:v(e),file:t,line:e.getStartLineNumber()}},br=(e,t)=>w(e,t,Nr),Pr=new Set(["generateText","streamText"]),Ir=new Set(["messages","prompt","system"]),wr=[{methods:new Set(["delete","insert","insertManyUnsafe","patch","replace"]),prefixes:["context.db","ctx.db"]},{methods:new Set(["run","runAction","runMutation"]),prefixes:["context","ctx"]},{methods:new Set(["fetch"]),prefixes:["context","ctx"]},{methods:new Set(["queue","send"]),prefixes:["context.email","context.mail","ctx.email","ctx.mail"]}],Tr=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=t.getName(),n=t.getExpression().getText();for(const o of wr)if(o.methods.has(s)&&o.prefixes.some(r=>n===r||n.startsWith(`${r}.`)))return`${n}.${s}`},Cr=e=>{for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=Tr(t);if(s!==void 0)return s}},Fr=e=>{const t=new Set,s=e.getFirstAncestor(r=>i.isArrowFunction(r)||i.isFunctionExpression(r)||i.isFunctionDeclaration(r)),[n]=s?.getParameters()??[],o=n?.getNameNode();if(o===void 0||!i.isObjectBindingPattern(o))return t;for(const r of o.getElements()){const a=r.getPropertyNameNode()?.getText()??r.getName(),c=r.getNameNode();if(a==="args"&&i.isObjectBindingPattern(c))for(const u of c.getElements())t.add(u.getName())}return t},Or=e=>{if(un(e))return!0;const t=Fr(e);return t.size===0?!1:e.getDescendantsOfKind(l.Identifier).some(s=>t.has(s.getText()))},Rr=e=>{for(const t of e.getProperties()){if(!i.isPropertyAssignment(t)||!Ir.has(t.getName()))continue;const s=t.getInitializer();if(s!==void 0&&Or(s))return!0}return!1},Lr=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=y(n.getExpression());if(o===void 0||!Pr.has(o))continue;const[r]=n.getArguments();if(r===void 0||!i.isObjectLiteralExpression(r))continue;let a;for(const c of r.getDescendantsOfKind(l.CallExpression))if(y(c.getExpression())==="tool"&&(a=Cr(c),a!==void 0))break;a!==void 0&&s.push({exportName:v(n),file:t,line:n.getStartLineNumber(),method:o,sideEffect:a,userInputDerived:Rr(r)})}return s},Dr=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Lr(o,x(t,n)))}return s},kr=e=>{if(!i.isPropertyAccessExpression(e)||e.getName()!=="fetch")return!1;const t=e.getExpression();return i.isIdentifier(t)&&t.getText()==="ctx"},Mr=(e,t)=>{if(!kr(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!R(s)))return{exportName:v(e),file:t,line:e.getStartLineNumber()}},_r=(e,t)=>w(e,t,Mr),Le=(e,t=new Set)=>{if(t.has(e))return!0;t.add(e);try{return e.getProperties().some(s=>{if(!i.isSpreadAssignment(s))return!1;const n=fe(s.getExpression());return n===void 0||Le(n,t)})}finally{t.delete(e)}},Kr=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return{objects:[],opaque:!0};const s=t.getProperty("args");if(!s)return{objects:[],opaque:!1};if(!i.isPropertyAssignment(s))return{objects:[],opaque:!0};const n=s.getInitializer(),o=n===void 0?void 0:fe(n);return o===void 0?{objects:[],opaque:!0}:{objects:[o],opaque:Le(o)}},zr=e=>{const t=[];let s=!1,n=e;for(;i.isCallExpression(n);){const o=n.getExpression();if(!i.isPropertyAccessExpression(o))break;if(o.getName()==="input"){const r=n.getArguments()[0],a=r!==void 0&&i.isExpression(r)?fe(r):void 0;a===void 0?s=!0:(t.push(a),s||=Le(a))}n=o.getExpression()}return{objects:t,opaque:s}},De=(e,t)=>t?zr(t):Kr(e),Xt=(e,t)=>{if(t.has(e))return[];t.add(e);try{return e.getProperties().flatMap(s=>{if(i.isSpreadAssignment(s)){const n=fe(s.getExpression());return n===void 0?[]:Xt(n,t)}return i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)?[s.getName()]:[]})}finally{t.delete(e)}},$r=e=>e.flatMap(t=>Xt(t,new Set)),Ur=new Set(["check","length","max"]),Ie=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(!(!i.isPropertyAccessExpression(t)||t.getExpression().getText()!=="v"))return t.getName()},qr=e=>[e,...e.getDescendants()].filter(t=>Ie(t)!==void 0),Br=e=>{let t=e;for(;;){const s=t.getParent();if(!s||!i.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;const n=s.getParent();if(!n||!i.isCallExpression(n)||n.getExpression()!==s)return!1;if(Ur.has(s.getName()))return!0;t=n}},Vr=e=>{const t=[],s=[];for(const n of e)for(const o of n.getProperties()){if(!i.isPropertyAssignment(o))continue;const r=o.getInitializer();if(!r)continue;const a=qr(r),c=o.getName();a.some(u=>Ie(u)==="any")?t.push(c):a.some(u=>Ie(u)==="string"&&!Br(u))&&s.push(c)}return{anyArgs:t,unboundedStringArgs:s}},Wr=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=k(s);if(n?.visibility!=="public")return;const{objects:o}=De(s,n.receiver),{anyArgs:r,unboundedStringArgs:a}=Vr(o);if(!(r.length===0&&a.length===0))return{anyArgs:r,exportName:e.getName(),file:t,line:s.getStartLineNumber(),unboundedStringArgs:a}},jr=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=Wr(o,t);r&&s.push(r)}return s},Hr=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...jr(o,x(t,n)))}return s},Ae=e=>e?.getKind()===l.TrueKeyword,Gr=e=>e?.getKind()===l.FalseKeyword,Yr=e=>e!==void 0&&i.isNumericLiteral(e)&&e.getLiteralValue()===0,Qr=new Set(["lunoraAuthAdapter","lunoraD1Adapter"]),Xr=e=>!e||!i.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>i.isCallExpression(t)&&y(t.getExpression())==="scim"),Zr=e=>e!==void 0&&i.isCallExpression(e)&&Qr.has(y(e.getExpression())??""),Jr=e=>!e||!i.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>i.isStringLiteral(t)&&t.getLiteralText()==="*"),eo=e=>{const t=A(e,"advanced"),s=A(e,"emailAndPassword"),n=A(e,"session");return{analyzable:!0,disableCsrfCheck:Ae(A(t,"disableCSRFCheck")),emailPasswordEnabled:Ae(A(s,"enabled")),requireEmailVerification:Ae(A(s,"requireEmailVerification")),scimOnNonTransactionalAdapter:Xr(A(e,"plugins"))&&Zr(A(e,"database")),secureCookiesDisabled:Gr(A(t,"useSecureCookies")),sessionFreshAgeZero:Yr(A(n,"freshAge")),trustedOriginsWildcard:Jr(A(e,"trustedOrigins"))}},to=()=>({analyzable:!1,disableCsrfCheck:!1,emailPasswordEnabled:!1,requireEmailVerification:!1,scimOnNonTransactionalAdapter:!1,secureCookiesDisabled:!1,sessionFreshAgeZero:!1,trustedOriginsWildcard:!1}),so=(e,t)=>{if(y(e.getExpression())!=="createAuth")return;const s=e.getArguments()[0],n=s!==void 0&&i.isObjectLiteralExpression(s)&&s.getProperties().some(r=>i.isSpreadAssignment(r)),o=s!==void 0&&i.isObjectLiteralExpression(s)&&!n?eo(s):to();return{exportName:v(e),file:t,line:e.getStartLineNumber(),...o}},no=(e,t)=>Xs(e,t,so),ro=(e,t)=>{if(!i.isPropertyAccessExpression(e))return;const s=e.getName();if(t.methods.has(s))return t.matchReceiver(e.getExpression().getText())?s:void 0},oo=(e,t,s)=>{const n=ro(e.getExpression(),s);if(n===void 0)return;const o=e.getArguments()[s.argIndex];if(!(!o||!R(o)||K(o))&&!(s.requireUnmodifiedReach===!0&&!dn(o)))return{exportName:v(e),file:t,line:e.getStartLineNumber(),method:n}},io=(e,t,s)=>{const n=[];for(const o of e.getDescendantsOfKind(l.CallExpression)){const r=oo(o,t,s);r&&n.push(r)}return n},ge=(e,t,s)=>{const n=[];for(const o of p(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);n.push(...io(r,x(t,o),s))}return n},ao=new Set(["content","pdf","scrape","screenshot"]),co=(e,t)=>ge(e,t,{argIndex:0,matchReceiver:s=>s==="ctx.browser",methods:ao}),lo=new Set(["createBrowser","createInboundEmailHandler","createPayment"]),uo=new Set(["RateLimiter"]),fo=new Set(["extend"]),xt="lunora",go=["vite.config.ts","vite.config.mts","vite.config.js","vite.config.mjs"],Zt=e=>{const t=[],s=[];let n=!1;for(const o of e.getProperties()){if(i.isSpreadAssignment(o)){n=!0;continue}if(i.isPropertyAssignment(o)){const r=o.getName();t.push(r),o.getInitializer()?.getKind()===l.TrueKeyword&&s.push(r);continue}(i.isShorthandPropertyAssignment(o)||i.isMethodDeclaration(o))&&t.push(o.getName())}return{analyzable:!n,presentKeys:t,trueKeys:s}},we=e=>e&&i.isObjectLiteralExpression(e)?Zt(e):{analyzable:!1,presentKeys:[],trueKeys:[]},po=e=>{const t=e&&(i.isArrowFunction(e)||i.isFunctionExpression(e))?e:void 0,s=t&&Ut(t.getBody());return s?Zt(s):{analyzable:!1,presentKeys:[],trueKeys:[]}},mo=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=y(n.getExpression());o!==void 0&&(lo.has(o)?s.push({callee:o,file:t,line:n.getStartLineNumber(),...we(n.getArguments()[0])}):fo.has(o)&&s.push({callee:o,file:t,line:n.getStartLineNumber(),...po(n.getArguments()[0])}))}for(const n of e.getDescendantsOfKind(l.NewExpression)){const o=y(n.getExpression());o===void 0||!uo.has(o)||s.push({callee:o,file:t,line:n.getStartLineNumber(),...we(n.getArguments()[0])})}return s},ho=(e,t)=>{for(const s of go){const n=E(t,s);if(!b(n))continue;const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=[];for(const a of o.getDescendantsOfKind(l.CallExpression))y(a.getExpression())===xt&&r.push({callee:xt,file:s,line:a.getStartLineNumber(),...we(a.getArguments()[0])});return r}return[]},xo=(e,t)=>{const s=[];for(const{displayPath:n,filePath:o}of Oe(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);s.push(...mo(r,n))}return s.push(...ho(e,se(t))),s},vt="ctx.containers.",vo=e=>{if(!e.startsWith(vt))return!1;const t=e.slice(vt.length);return t.length>0&&!t.includes(".")},Eo=(e,t)=>ge(e,t,{argIndex:0,matchReceiver:vo,methods:new Set(["get"])}),yo=new Set(["allow","deny","setAllowed"]),So=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return!1;const s=t.getProperty("enableInternet");return s!==void 0&&i.isPropertyAssignment(s)&&i.isTrueLiteral(s.getInitializerOrThrow())},Ao=(e,t)=>{const s=e.getExpression();if(!(!i.isPropertyAccessExpression(s)||s.getName()!=="start"||!So(e)))return{detail:"enableInternet: true",exportName:v(e),file:t,kind:"enable_internet",line:e.getStartLineNumber()}},No=(e,t)=>{const s=e.getExpression();if(!i.isPropertyAccessExpression(s)||!yo.has(s.getName()))return;const n=s.getExpression();if(!(!i.isPropertyAccessExpression(n)||n.getName()!=="egress"))return{detail:s.getName(),exportName:v(e),file:t,kind:"egress_relaxation",line:e.getStartLineNumber()}},bo=(e,t)=>Ao(e,t)??No(e,t),Po=(e,t)=>w(e,t,bo),Io=new Set(["defineExportSink","r2Sink","webhookExportSink"]),wo=e=>{const t=e.getExpression();if(!i.isIdentifier(t))return;const s=t.getText();return Io.has(s)?s:void 0},To=e=>{const t=[],s=[];for(const n of e.getProperties()){if(i.isSpreadAssignment(n))return{analyzable:!1,emptyKeys:[],presentKeys:[]};if(i.isPropertyAssignment(n)){const o=n.getName();t.push(o);const r=n.getInitializer();r&&i.isStringLiteral(r)&&r.getLiteralText()===""&&s.push(o);continue}(i.isShorthandPropertyAssignment(n)||i.isMethodDeclaration(n)||i.isGetAccessorDeclaration(n))&&t.push(n.getName())}return{analyzable:!0,emptyKeys:s,presentKeys:t}},Co=(e,t)=>{const s=[];for(const{displayPath:n,filePath:o}of Oe(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);for(const a of r.getDescendantsOfKind(l.CallExpression)){const c=wo(a);if(c===void 0)continue;const u=a.getArguments()[0],d=u&&i.isObjectLiteralExpression(u)?To(u):{analyzable:!1,emptyKeys:[],presentKeys:[]};s.push({analyzable:d.analyzable,emptyKeys:d.emptyKeys,factory:c,file:n,line:a.getStartLineNumber(),presentKeys:d.presentKeys})}}return s},Fo=new Map([["dbRateLimit",2],["rateLimit",2],["verifyTurnstileMiddleware",0]]),Oo=new Set(["dbRateLimit","rateLimit"]),Ro=e=>{if(!e||!i.isObjectLiteralExpression(e))return!1;const t=e.getProperty("failOpen");return t!==void 0&&i.isPropertyAssignment(t)&&t.getInitializer()?.getKind()===l.TrueKeyword},Lo=(e,t)=>{const s=y(e.getExpression());if(s===void 0)return;const n=Fo.get(s);if(n!==void 0)return{callee:s,exportName:v(e),failOpen:Ro(e.getArguments()[n]),file:t,limitName:Oo.has(s)?qt(e):"",line:e.getStartLineNumber()}},Do=(e,t)=>w(e,t,Lo),ko=new Set(["boolean","number","object","string"]),Mo=e=>{const t=e.getName();if(!ko.has(t))return;const s=e.getExpression();if(!i.isPropertyAccessExpression(s))return;if(s.getName()==="flags"&&Pe(s.getExpression()))return t;const n=s.getExpression();if(s.getName()==="details"&&i.isPropertyAccessExpression(n)&&n.getName()==="flags"&&Pe(n.getExpression()))return t},_o=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=Mo(t);if(s===void 0)return;const n=e.getArguments()[0];if(!n||!(i.isStringLiteral(n)||i.isNoSubstitutionTemplateLiteral(n)))return;const o=n.getLiteralValue();return o.length>0?{key:o,type:s}:void 0},Ko=(e,t)=>{const s=new Map;for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of o.getDescendantsOfKind(l.CallExpression)){const a=_o(r);a&&!s.has(a.key)&&s.set(a.key,a.type)}}return[...s.entries()].map(([n,o])=>({key:n,type:o})).toSorted((n,o)=>n.key.localeCompare(o.key))},zo=e=>{const t=e.getInitializer();if(!t||!i.isCallExpression(t))return;const s=k(t);if(s?.kind!=="query")return;const n=Zs(t,s.receiver);return n?{exportName:e.getName(),handler:n}:void 0},Et=e=>{const t=e.getParent();return t&&i.isPropertyAccessExpression(t)&&t.getExpression()===e?t:void 0},$o=e=>{if(!i.isPropertyAccessExpression(e)||e.getName()!=="flags")return;const t=e.getExpression();if(!i.isIdentifier(t)||t.getText()!=="ctx")return;const s=Et(e);if(!s)return"ctx.flags";if(s.getName()==="details"){const n=Et(s);return n?`ctx.flags.details.${n.getName()}`:"ctx.flags.details"}return`ctx.flags.${s.getName()}`},Uo=(e,t)=>{const s=[];for(const n of e.handler.getDescendantsOfKind(l.PropertyAccessExpression)){const o=$o(n);o!==void 0&&s.push({callee:o,exportName:e.exportName,file:t,line:n.getStartLineNumber()})}return s},qo=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=zo(o);r&&s.push(...Uo(r,t))}return s},Bo=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...qo(o,x(t,n)))}return s},Vo=e=>{if(!i.isPropertyAccessExpression(e)||e.getName()!=="boolean")return!1;const t=e.getExpression();return i.isPropertyAccessExpression(t)&&t.getName()==="flags"&&Pe(t.getExpression())},Wo=e=>{if(e?.getKind()===l.TrueKeyword)return!0;if(e?.getKind()===l.FalseKeyword)return!1},jo=(e,t)=>{if(!Vo(e.getExpression()))return;const[s,n]=e.getArguments();if(!s||!(i.isStringLiteral(s)||i.isNoSubstitutionTemplateLiteral(s)))return;const o=s.getLiteralValue(),r=Wo(n);if(!(o.length===0||r===void 0))return{defaultValue:r,exportName:v(e),file:t,key:o,line:e.getStartLineNumber()}},Ho=(e,t)=>w(e,t,jo),Go=e=>{const t=e.getType().getProperty("~standard");if(!t)return;const s=t.getTypeAtLocation(e).getProperty("types");if(!s)return;const n=s.getTypeAtLocation(e).getNonNullableType().getProperty("output");if(!n)return;const o=n.getTypeAtLocation(e),r=o.getText(e);if(!r||r==="any"||r==="never"||xn(r))return;const a=e.getSourceFile().getFilePath();return vn(o,e,a)?En(o,e,a,0,new Set):r},Yo=e=>{const t=e.getExpression();return i.isPropertyAccessExpression(t)&&t.getName()==="withGeoIndex"},Qo=e=>{const t=e.getArguments()[0];return t&&i.isStringLiteral(t)?t.getLiteralText():""},Xo=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of o.getDescendantsOfKind(l.CallExpression))Yo(a)&&s.push({file:r,indexName:Qo(a),line:a.getStartLineNumber()})}return s},Y=e=>e!==void 0&&(i.isArrowFunction(e)||i.isFunctionExpression(e))?e:void 0,Jt=e=>{const t=e.getArguments()[0],s=Y(t);if(s!==void 0)return s;if(t===void 0||!i.isObjectLiteralExpression(t))return;const n=t.getProperty("handler");return n!==void 0&&i.isPropertyAssignment(n)?Y(n.getInitializer()):void 0},Zo=new Set(["delete","get","head","options","patch","post","put"]),Jo=new Set(["handler","stream"]),ei=new Set(["runAction","runMutation"]),ti=new Set(["delete","insert","insertManyUnsafe","patch","replace"]),Q=(e,t)=>e!==void 0&&i.isIdentifier(e)&&e.getText()===t,es=(e,t)=>{if(!(e===void 0||!i.isObjectBindingPattern(e))){for(const s of e.getElements())if((s.getPropertyNameNode()?.getText()??s.getNameNode().getText())===t){const o=s.getNameNode();return i.isIdentifier(o)?o.getText():void 0}}},yt=(e,t)=>{const s=e.getParameters()[0]?.getNameNode();if(s!==void 0)return t?i.isIdentifier(s)?s.getText():void 0:es(s,"ctx")},St=(e,t)=>{const s=e.getParameters()[t?1:0]?.getNameNode();return t?s!==void 0&&i.isIdentifier(s)?s.getText():void 0:es(s,"request")},At=(e,t)=>{const s=e.getBody(),n=s.getDescendantsOfKind(l.CallExpression);i.isCallExpression(s)&&n.unshift(s);for(const o of n){const r=o.getExpression();if(!i.isPropertyAccessExpression(r))continue;const a=r.getName(),c=r.getExpression();if(ei.has(a)&&Q(c,t))return a;if(ti.has(a)&&i.isPropertyAccessExpression(c)&&c.getName()==="db"&&Q(c.getExpression(),t))return`db.${a}`}},Nt=(e,t)=>{const s=e.getBody();for(const n of s.getDescendantsOfKind(l.PropertyAccessExpression))if(n.getName()==="auth"&&Q(n.getExpression(),t))return!0;for(const n of s.getDescendantsOfKind(l.VariableDeclaration)){const o=n.getNameNode();if(!(!i.isObjectBindingPattern(o)||!Q(n.getInitializer(),t))){for(const r of o.getElements())if((r.getPropertyNameNode()?.getText()??r.getNameNode().getText())==="auth")return!0}}return!1},si=/signature|hmac|digest|(?:^|[_-])sig(?:[_-]|$)/i,ni=(e,t)=>{const s=e.getExpression();if(!i.isPropertyAccessExpression(s)||s.getName()!=="get"&&s.getName()!=="has")return!1;const n=s.getExpression();return i.isPropertyAccessExpression(n)&&n.getName()==="headers"&&Q(n.getExpression(),t)},ri=e=>[...i.isStringLiteral(e)?[e.getLiteralText()]:[],...e.getDescendantsOfKind(l.StringLiteral).map(t=>t.getLiteralText())],ts=(e,t)=>{const s=e.getVariableDeclaration(t)?.getInitializer();return s===void 0?[]:ri(s)},oi=(e,t)=>{const s=e.getText();for(let n=e.getParent();n!==void 0;n=n.getParent()){if(!i.isArrowFunction(n)&&!i.isFunctionExpression(n)||!n.getParameters().some(c=>c.getName()===s))continue;const o=n.getParent();if(!i.isCallExpression(o))return[];const r=o.getExpression();if(!i.isPropertyAccessExpression(r))return[];const a=r.getExpression();return i.isIdentifier(a)?ts(t,a.getText()):[]}return[]},ii=e=>{const t=e.getArguments()[0];if(t===void 0)return[];if(i.isStringLiteral(t))return[t.getLiteralText()];if(!i.isIdentifier(t))return[];const s=e.getSourceFile(),n=ts(s,t.getText());return n.length>0?n:oi(t,s)},bt=(e,t)=>{if(t===void 0)return!1;const s=e.getBody(),n=s.getDescendantsOfKind(l.CallExpression);return i.isCallExpression(s)&&n.unshift(s),n.some(o=>ni(o,t)&&ii(o).some(r=>si.test(r)))},ai=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!Jo.has(t.getName()))return;let s=t.getExpression();for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))return;const o=n.getName();if(Zo.has(o)){const r=n.getExpression();return i.isIdentifier(r)&&r.getText()==="httpRoute"?o.toUpperCase():void 0}s=n.getExpression()}},ci=(e,t)=>{const s=e.getExpression();if(i.isIdentifier(s)&&s.getText()==="httpAction"){const c=Y(e.getArguments()[0]),u=c&&yt(c,!0);if(!c||u===void 0||bt(c,St(c,!0)))return;const d=At(c,u);return d===void 0?void 0:{exportName:v(e),file:t,kind:"httpAction",line:e.getStartLineNumber(),readsAuth:Nt(c,u),sideEffect:d}}const n=ai(e);if(n===void 0)return;const o=Y(e.getArguments()[0]),r=o&&yt(o,!1);if(!o||r===void 0||bt(o,St(o,!1)))return;const a=At(o,r);return a===void 0?void 0:{exportName:v(e),file:t,kind:"httpRoute",line:e.getStartLineNumber(),method:n,readsAuth:Nt(o,r),sideEffect:a}},li=(e,t)=>w(e,t,ci),ui=new Set(["btoa","encodeURI","encodeURIComponent","isSafeHeaderValue","Number","parseFloat","parseInt"]),di=new Set(["append","set"]),ss=e=>e!==void 0&&(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))?e.getLiteralText():"",Pt=(e,t)=>(i.isCallExpression(e)?[e,...e.getDescendantsOfKind(l.CallExpression)]:e.getDescendantsOfKind(l.CallExpression)).some(n=>ui.has(y(n.getExpression())??"")&&gn(n,t)),fi=(e,t)=>{if(Pt(e,t))return!0;const s=de(e);return s!==void 0&&Pt(s,t)},Te=(e,t)=>fn(e,t)&&!fi(e,t),gi=e=>{if(i.isPropertyAccessExpression(e)&&e.getName()==="headers")return!0;const t=de(e);return t!==void 0&&i.isNewExpression(t)&&y(t.getExpression())==="Headers"},ie=e=>{if(e===void 0)return;if(i.isObjectLiteralExpression(e))return e;const t=de(e);return t!==void 0&&i.isObjectLiteralExpression(t)?t:void 0},ke=(e,t,s)=>{for(const n of e.getProperties())if(i.isPropertyAssignment(n)){const o=n.getInitializer();o!==void 0&&Te(o,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:ss(n.getNameNode()),line:o.getStartLineNumber(),via:t})}else if(i.isShorthandPropertyAssignment(n)){const o=n.getNameNode();Te(o,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:n.getName(),line:o.getStartLineNumber(),via:t})}else if(i.isSpreadAssignment(n)){const o=ie(n.getExpression());o!==void 0&&ke(o,t,s)}},ns=(e,t)=>{const s=ie(e);if(s===void 0)return;const n=s.getProperty("headers");if(n===void 0||!i.isPropertyAssignment(n))return;const o=ie(n.getInitializer());o!==void 0&&ke(o,"response-init",t)},pi=(e,t)=>{const s=y(e.getExpression());if(s==="Response")ns(e.getArguments()[1],t);else if(s==="Headers"){const n=ie(e.getArguments()[0]);n!==void 0&&ke(n,"headers-ctor",t)}},mi=(e,t)=>{const s=e.getExpression();if(!i.isPropertyAccessExpression(s))return;const n=s.getName(),o=s.getExpression();if(n==="json"&&i.isIdentifier(o)&&o.getText()==="Response"){ns(e.getArguments()[1],t);return}if(di.has(n)&&gi(o)){const r=e.getArguments()[1];r!==void 0&&Te(r,t.requestName)&&t.rows.push({exportName:t.exportName,file:t.relativePath,headerName:ss(e.getArguments()[0]),line:r.getStartLineNumber(),via:n==="set"?"headers-set":"headers-append"})}},hi=(e,t)=>{for(const s of e.getDescendantsOfKind(l.NewExpression))pi(s,t);for(const s of e.getDescendantsOfKind(l.CallExpression))mi(s,t)},xi=(e,t)=>{const s=e.getExpression();if(!i.isIdentifier(s)||s.getText()!=="httpAction")return[];const n=Y(e.getArguments()[0]);if(n===void 0)return[];const o=n.getParameters()[1];if(o===void 0)return[];const r=o.getNameNode();if(!i.isIdentifier(r))return[];const a=[];return hi(n,{exportName:v(e),relativePath:t,requestName:r.getText(),rows:a}),a},vi=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression))s.push(...xi(n,t));return s},Ei=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...vi(o,x(t,n)))}return s},yi=new Set(["auth","context.auth","ctx.auth"]),Si="userId",Ai=e=>{const t=new Set;for(const s of e.getProperties()){if(i.isSpreadAssignment(s))return;(i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)||i.isMethodDeclaration(s))&&t.add(s.getName())}return t},Ni=(e,t)=>{const s=E(t,Gt);if(!b(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const o of n.getDescendantsOfKind(l.CallExpression)){if(y(o.getExpression())!=="defineIdentity")continue;const[r]=o.getArguments();return r&&i.isObjectLiteralExpression(r)?Ai(r):void 0}},It=e=>{if(!(e===void 0||!i.isPropertyAccessExpression(e)||e.getName()!=="identity"))return yi.has(e.getExpression().getText())?e:void 0},bi=e=>{if(i.isPropertyAccessExpression(e)&&It(e.getExpression())!==void 0)return e.getName();if(i.isElementAccessExpression(e)&&It(e.getExpression())!==void 0){const t=e.getArgumentExpression();return t&&i.isStringLiteral(t)?t.getLiteralValue():void 0}},Pi=(e,t,s)=>{const n=[];for(const o of e.getDescendants()){const r=bi(o);r!==void 0&&n.push({declared:r===Si||s.has(r),exportName:v(o),file:t,key:r,line:o.getStartLineNumber()})}return n},Ii=(e,t)=>{const s=Ni(e,t);if(s===void 0)return[];const n=[];for(const o of p(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);n.push(...Pi(r,x(t,o),s))}return n},wi=(e,t)=>{if(y(e.getExpression())!=="buildImageDeliveryUrl")return;const s=e.getArguments()[0];if(!s)return;const n=A(s,"key");if(!(!n||!R(n)||K(n)))return{exportName:v(e),file:t,line:e.getStartLineNumber()}},Ti=(e,t)=>w(e,t,wi),Ci=new Set(["delete","get","getRaw","getWithMetadata","put"]),Fi=(e,t,s=[])=>{const n=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));return ge(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.kv"||r.startsWith("ctx.kv."),methods:Ci}).map(r=>{const a=n.get(`${r.file}:${r.exportName}`);return a===void 0?r:{...r,visibility:a}})},Oi=new Set(["queue","send"]),wt=new Set(["bcc","cc","to"]),Ri=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(!Oi.has(t))return;const s=e.getExpression().getText();return s==="ctx.mail"||s==="ctx.email"?t:void 0},Li=e=>i.isObjectLiteralExpression(e)?e.getProperties().some(t=>{if(i.isShorthandPropertyAssignment(t)){const n=t.getNameNode();return wt.has(t.getName())&&R(n)&&!K(n)}if(!i.isPropertyAssignment(t)||!wt.has(t.getName()))return!1;const s=t.getInitializer();return s!==void 0&&R(s)&&!K(s)}):!1,Di=(e,t)=>{const s=Ri(e.getExpression());if(s===void 0)return;const n=e.getArguments()[0];if(!(!n||!Li(n)))return{exportName:v(e),file:t,line:e.getStartLineNumber(),method:s}},ki=(e,t)=>w(e,t,Di),Mi=e=>i.isPropertyAssignment(e)||i.isMethodDeclaration(e)||i.isGetAccessorDeclaration(e)?i.isComputedPropertyName(e.getNameNode()):!1,_i=e=>i.isPropertyAssignment(e)||i.isShorthandPropertyAssignment(e)||i.isMethodDeclaration(e)||i.isGetAccessorDeclaration(e)?Mi(e):!0,rs=(e,t=!1)=>{for(const s of e.getProperties()){if(_i(s))return!0;if(t)continue;if(!i.isPropertyAssignment(s))return!0;const n=s.getInitializer();if(!n||!i.isObjectLiteralExpression(n)||rs(n,!0))return!0}return!1},Ki=(e,t)=>{for(const s of p(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const{receiver:o}of jt(n))for(const r of Re(o)){const a=r.getArguments()[0];if(a!==void 0&&(!i.isObjectLiteralExpression(a)||rs(a)))return!0}}return!1},zi=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return[];const s=[];for(const n of t.getProperties()){const o=oe(n);if(o===void 0||!i.isPropertyAssignment(n))continue;const r=n.getInitializer();if(!(!r||!i.isObjectLiteralExpression(r)))for(const a of r.getProperties()){const c=oe(a);c!==void 0&&s.push({column:c,strategy:Wt(a),table:o})}}return s},$i=(e,t)=>{const s=new Map;for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const{receiver:r}of jt(o))for(const a of Re(r))for(const c of zi(a)){const u=`${c.table}\0${c.column}`;s.has(u)||s.set(u,c)}}return{columns:[...s.values()]}},Ui=(e,t,s)=>{const n=e.getArguments()[0];if(!n||!i.isObjectLiteralExpression(n))return[];const o=[];for(const r of n.getProperties()){const a=oe(r);if(a===void 0||!i.isPropertyAssignment(r))continue;const c=r.getInitializer();if(!(!c||!i.isObjectLiteralExpression(c)))for(const u of c.getProperties()){const d=oe(u);if(d===void 0)continue;const h=Wt(u);h!=="custom"&&o.push({column:d,exportName:t,file:s,line:u.getStartLineNumber(),strategy:h,table:a})}}return o},qi=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?k(s):void 0;return n?.receiver?Re(n.receiver).flatMap(o=>Ui(o,e.getName(),t)):[]},Bi=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...qi(c,r))}return s},Vi=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="replace")return!1;const s=t.getExpression();return D(s)},Wi=e=>{const t=e.getArguments()[0];if(t===void 0||!i.isObjectLiteralExpression(t))return;const s=t.getProperty("server");if(s!==void 0)return i.isPropertyAssignment(s)?s.getInitializer():s},ji=e=>{if(!e.isExported())return;const t=e.getInitializer();if(t?.getKind()!==l.CallExpression)return;const s=t;return Pn(s.getExpression())?s:void 0},Hi=e=>{const t=ji(e),s=t===void 0?void 0:Wi(t);if(s===void 0)return[];const n=e.getNameNode(),o=i.isIdentifier(n)?n.getText():"";return s.getDescendantsOfKind(l.CallExpression).filter(r=>Vi(r)).map(r=>({exportName:o,file:"lunora/mutators.ts",line:r.getStartLineNumber()}))},Gi=e=>e.getVariableDeclarations().flatMap(t=>Hi(t)),Yi=(e,t)=>{const s=E(t,bn);if(!b(s))return[];const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);return Gi(n)},Qi=new Set(["delete","get","patch"]),Xi=new Set(["accountId","authorId","companyId","createdBy","createdById","customerId","groupId","memberId","organizationId","orgId","ownerId","projectId","teamId","tenantId","userId","workspaceId"]),Zi=new Set(["auth","identity","session","user"]),Ji=new Set([l.EqualsEqualsEqualsToken,l.EqualsEqualsToken,l.ExclamationEqualsEqualsToken,l.ExclamationEqualsToken]),ea=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="normalizeId"||!D(t.getExpression()))return;const s=e.getArguments()[0];return s&&i.isStringLiteral(s)?s.getLiteralText():""},ta=e=>{let t=e,s=t.getParent();for(;s!==void 0&&(i.isAsExpression(s)||i.isParenthesizedExpression(s)||i.isNonNullExpression(s));)t=s,s=t.getParent();if(s===void 0||!i.isVariableDeclaration(s))return;const n=s.getNameNode();return i.isIdentifier(n)?n.getText():void 0},sa=(e,t)=>e.getDescendantsOfKind(l.Identifier).some(s=>s.getText()===t),na=e=>i.isThrowStatement(e)||i.isReturnStatement(e)||e.getDescendantsOfKind(l.ThrowStatement).length>0||e.getDescendantsOfKind(l.ReturnStatement).length>0,ra=(e,t)=>e.getDescendantsOfKind(l.IfStatement).some(s=>sa(s.getExpression(),t)&&na(s.getThenStatement())),oa=(e,t)=>{for(const s of e.getDescendantsOfKind(l.CallExpression)){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))continue;const o=n.getName();if(!Qi.has(o))continue;const r=n.getExpression();if(!(D(r)||i.isPropertyAccessExpression(r)&&D(r.getExpression())))continue;const c=s.getArguments()[0];if(c!==void 0&&i.isIdentifier(c)&&c.getText()===t)return o}},ia=e=>{let t=e;for(;i.isPropertyAccessExpression(t)||i.isElementAccessExpression(t)||i.isNonNullExpression(t)||i.isParenthesizedExpression(t)||i.isAsExpression(t)||i.isAwaitExpression(t);)t=t.getExpression();return i.isIdentifier(t)?t.getText():void 0},aa=e=>e.getDescendantsOfKind(l.CallExpression).some(t=>t.getArguments().some(s=>ia(s)==="ctx")),ca=e=>e.getDescendantsOfKind(l.BinaryExpression).some(t=>Ji.has(t.getOperatorToken().getKind())?i.isPropertyAccessExpression(t.getLeft())||i.isPropertyAccessExpression(t.getRight()):!1),la=e=>{for(const t of e.getDescendantsOfKind(l.Identifier))if(Xi.has(t.getText()))return!0;for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression)){const s=t.getExpression();if(i.isIdentifier(s)&&s.getText()==="ctx"&&Zi.has(t.getName()))return!0}return aa(e)||ca(e)},ua=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!i.isCallExpression(s))return[];const n=k(s);if(n?.kind!=="query"&&n?.kind!=="mutation")return[];const o=Jt(s);if(o===void 0)return[];const r=n.receiver!==void 0&&Vt(n.receiver,"use","rls"),a=la(o),c=new Set,u=[];for(const d of o.getDescendantsOfKind(l.CallExpression)){const h=ea(d);if(h===void 0)continue;const m=ta(d);if(m===void 0||c.has(m)||!ra(o,m))continue;const P=oa(o,m);P!==void 0&&(c.add(m),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),mentionsOwnership:a,sinkMethod:P,table:h,usesRls:r,visibility:n.visibility}))}return u},da=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...ua(c,r))}return s},fa=new Set(["accountId","authorId","createdBy","createdById","organizationId","orgId","ownerId","tenantId","updatedBy","userId","workspaceId"]),ga=new Set(["insert","insertManyUnsafe","patch","replace"]),pa=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(!ga.has(t))return;const s=e.getExpression();if(!i.isPropertyAccessExpression(s)||s.getName()!=="db")return;const n=s.getExpression();return i.isIdentifier(n)&&n.getText()==="ctx"?t:void 0},ma=(e,t)=>{if(t!=="insertManyUnsafe")return i.isObjectLiteralExpression(e)?[e]:[];if(!i.isArrayLiteralExpression(e))return[];const s=[];for(const n of e.getElements())i.isObjectLiteralExpression(n)&&s.push(n);return s},ha=(e,t,s,n)=>{const o=[];for(const r of e.getProperties()){let a,c;i.isPropertyAssignment(r)?(a=r.getName(),c=r.getInitializer()):i.isShorthandPropertyAssignment(r)&&(a=r.getName(),c=r.getNameNode()),!(a===void 0||c===void 0||!fa.has(a))&&R(c)&&!K(c)&&o.push({exportName:v(s),field:a,file:n,line:s.getStartLineNumber(),method:t})}return o},xa=(e,t)=>{const s=pa(e.getExpression());if(s===void 0)return[];const n=e.getArguments()[1];return n?ma(n,s).flatMap(o=>ha(o,s,e,t)):[]},va=(e,t,s)=>{const n=[];for(const o of e.getDescendantsOfKind(l.CallExpression))for(const r of xa(o,t)){const a=s(r.exportName);n.push(a===void 0?r:{...r,visibility:a})}return n},Ea=(e,t,s=[])=>{const n=[],o=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));for(const r of p(t)){const a=e.getSourceFile(r)??e.addSourceFileAtPath(r),c=x(t,r);n.push(...va(a,c,u=>o.get(`${c}:${u}`)))}return n},ya=["providerSubscriptionId","state"],Sa=["providerEventId","processedAt"],Tt=(e,t)=>t.every(s=>s in e.shape),Aa=e=>{const t=e.find(n=>n.name==="subscriptions"),s=e.find(n=>n.name==="events");return t!==void 0&&s!==void 0&&Tt(t,ya)&&Tt(s,Sa)},Na=new Set(["createAutumnAdapter","createDodoPaymentsAdapter","createPolarAdapter","createStripeAdapter"]),ba=e=>e&&i.isNumericLiteral(e)?Number(e.getText()):void 0,Pa=e=>{const t=e.getProperty("webhookToleranceSeconds");return t&&i.isPropertyAssignment(t)?ba(t.getInitializer()):void 0},Ia=(e,t)=>{const s=y(e.getExpression());if(s===void 0||!Na.has(s))return;const[n]=e.getArguments(),o=n&&i.isObjectLiteralExpression(n)?Pa(n):void 0;return{callee:s,exportName:v(e),file:t,line:e.getStartLineNumber(),...o===void 0?{}:{toleranceSeconds:o}}},wa=(e,t)=>w(e,t,Ia),Ta=new Set(["defineQueue","defineWorkflow"]),Ca=new Set(["run","runAction","runMutation","runQuery"]),Fa=new Set(["api","internal"]),Oa=e=>{const t=e.getExpression();return i.isIdentifier(t)?t.getText():void 0},Ra=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return;const s=t.getProperty("handler");if(s===void 0||!i.isPropertyAssignment(s))return;const n=s.getInitializer();if(n&&(i.isArrowFunction(n)||i.isFunctionExpression(n)))return n},os=(e,t)=>{const s=e.getParameters()[t]?.getNameNode();return s&&i.isIdentifier(s)?s.getText():void 0},is=(e,t)=>e===t||e.startsWith(`${t}.`),as=e=>{const t=e.getDescendantsOfKind(l.PropertyAccessExpression);return i.isPropertyAccessExpression(e)&&t.push(e),t},Ct=e=>{const t=e.getParent();return i.isPropertyAccessExpression(t)&&t.getNameNode()===e||i.isPropertyAssignment(t)&&t.getNameNode()===e?!1:!(i.isBindingElement(t)&&t.getNameNode()===e)},cs=e=>{const t=e.getDescendantsOfKind(l.Identifier).filter(s=>Ct(s));return i.isIdentifier(e)&&Ct(e)&&t.push(e),t},La=e=>{if(!i.isVariableDeclaration(e))return[];const t=e.getNameNode();return i.isIdentifier(t)?[t.getText()]:t.getDescendantsOfKind(l.BindingElement).map(s=>s.getName())},Da=e=>{const t=os(e,1);if(t===void 0)return[];const s=[`${t}.messages`];for(const n of e.getDescendantsOfKind(l.ForOfStatement)){if(n.getExpression().getText()!==`${t}.messages`)continue;const o=n.getInitializer(),r=i.isVariableDeclarationList(o)?o.getDeclarations()[0]?.getNameNode():void 0;r&&i.isIdentifier(r)&&s.push(`${r.getText()}.body`)}return s},ka=(e,t,s)=>{const n=t==="workflow"?[`${s}.params`]:Da(e),o=new Set,r=a=>as(a).some(c=>n.some(u=>is(c.getText(),u)))?!0:cs(a).some(c=>o.has(c.getText()));for(const a of e.getDescendantsOfKind(l.VariableDeclaration)){const c=a.getInitializer();if(c&&r(c))for(const u of La(a))o.add(u)}return{names:o,prefixes:n}},Ma=(e,t)=>as(e).some(s=>t.prefixes.some(n=>is(s.getText(),n)))?!0:cs(e).some(s=>t.names.has(s.getText())),_a=e=>{if(e===void 0||!i.isPropertyAccessExpression(e))return;const t=[];let s=e;for(;i.isPropertyAccessExpression(s);)t.unshift(s.getName()),s=s.getExpression();const n=t.at(-1);if(!(n===void 0||!i.isIdentifier(s)||!Fa.has(s.getText())||t.length<2))return{exportName:n,file:t.slice(0,-1).join("/")}},Ka=(e,t,s)=>{const n=os(e,0);if(n===void 0)return[];const o=ka(e,t,n),r=[];for(const a of e.getDescendantsOfKind(l.CallExpression)){const c=a.getExpression();if(!i.isPropertyAccessExpression(c)||!Ca.has(c.getName())||c.getExpression().getText()!==n)continue;const u=a.getArguments()[1];if(!u||!Ma(u,o))continue;const d=_a(a.getArguments()[0]);d!==void 0&&r.push({dispatchKind:t,file:s,handlerExport:v(a),line:a.getStartLineNumber(),targetExport:d.exportName,targetFile:d.file})}return r},za=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=Oa(n);if(o===void 0||!Ta.has(o))continue;const r=Ra(n);r!==void 0&&s.push(...Ka(r,o==="defineQueue"?"queue":"workflow",t))}return s},$a=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...za(o,x(t,n)))}return s},Ft={dbRateLimit:"usesRateLimit",emailGateMiddleware:"usesEmailGate",mask:"usesMask",rateLimit:"usesRateLimit",rls:"usesRls",verifyTurnstileMiddleware:"usesCaptcha"},Ot=new Set(["account","credential","member","passkey","session","user"]),Ua=e=>e.replaceAll(/[-_]/gu," ").replaceAll(/([a-z0-9])([A-Z])/gu,"$1 $2").split(" ").filter(Boolean).map(t=>t.toLowerCase()),qa=e=>{const s=Ua(e).at(-1);if(!s)return!1;const n=s.endsWith("s")?s.slice(0,-1):s;return Ot.has(s)||Ot.has(n)},Ba=e=>{const t=e.replaceAll(/[^a-z0-9]/giu,"").toLowerCase();return t.endsWith("email")||t.endsWith("emailaddress")},Va=(e,t)=>{const{objects:s,opaque:n}=De(e,t);return $r(s).some(o=>Ba(o))?!0:n?void 0:!1},Wa=e=>{const t=e.getArguments()[0];return!t||!i.isObjectLiteralExpression(t)?{usesCaptcha:!1,usesRateLimit:!1}:{usesCaptcha:!!t.getProperty("captcha"),usesRateLimit:!!t.getProperty("rateLimit")}},ja=e=>{if(i.isCallExpression(e))return e;if(!i.isIdentifier(e))return;const s=e.getSourceFile().getVariableDeclaration(e.getText())?.getInitializer();return s&&i.isCallExpression(s)?s:void 0},re={usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},Ha=e=>{const t=ja(e),s=t?y(t.getExpression()):void 0;if(t&&s==="protectPublic"){const n=Wa(t);return{...re,usesCaptcha:n.usesCaptcha,usesRateLimit:n.usesRateLimit}}return s!==void 0&&s in Ft?{...re,[Ft[s]]:!0}:re},Ga=e=>{const t={...re};let s=e;for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))break;const o=n.getName()==="use"?s.getArguments()[0]:void 0;if(o){const r=Ha(o);t.usesCaptcha||=r.usesCaptcha,t.usesEmailGate||=r.usesEmailGate,t.usesMask||=r.usesMask,t.usesRateLimit||=r.usesRateLimit,t.usesRls||=r.usesRls}s=n.getExpression()}return t},Ya=new Set(["insert","insertMany","insertManyUnsafe","replace"]),Qa=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!Ya.has(t.getName()))return!1;const s=t.getExpression();if(!D(s))return!1;const o=e.getArguments()[0];return!o||!(i.isStringLiteral(o)||i.isNoSubstitutionTemplateLiteral(o))?!1:qa(o.getLiteralText())},Xa=new Set(["create","runAfter","runAt","send","sendBatch"]),Za=new Set(["queues","scheduler","workflows"]),Ja=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!Xa.has(t.getName()))return!1;let s=t.getExpression();for(;i.isCallExpression(s)||i.isElementAccessExpression(s)||i.isPropertyAccessExpression(s);){if(i.isPropertyAccessExpression(s)&&Za.has(s.getName())){const n=s.getExpression();if(i.isIdentifier(n)&&n.getText()==="ctx")return!0}s=s.getExpression()}return!1},ec=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="insertManyUnsafe")return!1;const s=t.getExpression();return D(s)},ls=new Set(["generateObject","generateText","streamObject","streamText"]),tc=e=>{const t=y(e.getExpression());return t!==void 0&&ls.has(t)},sc=e=>{const t=y(e.getExpression());if(t===void 0||!ls.has(t))return!1;const s=e.getArguments()[0];return!s||!i.isObjectLiteralExpression(s)||s.getProperties().some(n=>i.isSpreadAssignment(n))?!1:!s.getProperty("maxOutputTokens")},nc=new Set(["log","span","trace"]),rc=new Set(["ai"]),oc=new Set(["email","mail"]),ic=new Set(["ai","browser","fetch","mail","notify","queues","sql","storage","workflows"]),Ne=(e,t)=>e.getDescendantsOfKind(l.PropertyAccessExpression).some(s=>{if(!t.has(s.getName()))return!1;const n=s.getExpression();return i.isIdentifier(n)&&n.getText()==="ctx"}),ac=new Set([l.ArrowFunction,l.FunctionDeclaration,l.FunctionExpression,l.GetAccessor,l.MethodDeclaration,l.SetAccessor]),cc=new Set(["every","filter","flatMap","forEach","map","some"]),lc=new Set(["all","allSettled","race"]),uc=e=>{const t=e.getParent();if(!t||!i.isCallExpression(t)||!t.getArguments().includes(e))return;const s=t.getExpression();if(!i.isPropertyAccessExpression(s))return;const n=s.getName();if(cc.has(n))return t;const o=s.getExpression();if(i.isIdentifier(o)&&o.getText()==="Promise"&&lc.has(n))return t},dc=e=>{let t=e.getParent();for(;t;){if(i.isTryStatement(t)){const s=t.getTryBlock();if(e.getPos()>=s.getPos()&&e.getEnd()<=s.getEnd())return!0}if(ac.has(t.getKind())){const s=uc(t);if(!s)return!1;t=s;continue}t=t.getParent()}return!1},fc=e=>{let t=e;for(;;){const s=t.getParent();if(!i.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;if(s.getName()==="catch")return!0;if(s.getName()!=="then"&&s.getName()!=="finally")return!1;const n=s.getParent();if(!i.isCallExpression(n)||n.getExpression()!==s)return!1;t=n}},gc=e=>{let t=e;for(;;){const s=t.getParent();if(i.isPropertyAccessExpression(s)&&s.getExpression()===t){t=s;continue}return i.isCallExpression(s)&&s.getExpression()===t?s:void 0}},pc=e=>{let t=!1,s=!0;for(const n of e.getDescendantsOfKind(l.PropertyAccessExpression)){if(!ic.has(n.getName()))continue;const o=n.getExpression();if(!i.isIdentifier(o)||o.getText()!=="ctx")continue;const r=gc(n);r&&(t=!0,!dc(r)&&!fc(r)&&(s=!1))}return{handlesErrors:t&&s,reachesOutbound:t}},mc=e=>e.getDescendantsOfKind(l.ThrowStatement).some(t=>{const s=t.getExpression();if(!i.isNewExpression(s))return!1;const n=s.getExpression();return i.isIdentifier(n)&&n.getText()==="Error"}),Rt="lunora-advisor-exempt",hc=/^[\s*/]+/u,xc=/[\w-]/u,vc=e=>{const s=(e.getFirstAncestorByKind(l.VariableStatement)??e).getLeadingCommentRanges().map(n=>n.getText()).join(`
-`);for(const n of s.split(`
-`)){const o=n.replace(hc,"");if(!o.startsWith(Rt))continue;const r=o.slice(Rt.length);if(xc.test(r.charAt(0)))continue;const a=r.indexOf("--");return{exempt:!0,exemptReason:(a===-1?"":r.slice(a+2).split("*")[0]??"").trim()}}return{exempt:!1,exemptReason:""}},Ec=e=>{const[t]=e.getArguments();if(t){if(i.isObjectLiteralExpression(t)){const s=t.getProperty("handler");return s?i.isPropertyAssignment(s)?s.getInitializer():i.isShorthandPropertyAssignment(s)?s.getNameNode():i.isMethodDeclaration(s)?s:void 0:void 0}return t}},yc=(e,t)=>{const s=Ec(t);if(!s)return;if(i.isArrowFunction(s)||i.isFunctionExpression(s)||i.isMethodDeclaration(s))return e;if(!i.isIdentifier(s))return;const n=s.getSourceFile(),o=s.getText(),r=n.getVariableDeclaration(o)?.getInitializer();return r&&(i.isArrowFunction(r)||i.isFunctionExpression(r))?r:n.getFunction(o)},Sc=e=>{let t=!1,s=!1,n=!1,o=!1,r=!1;for(const u of e.getDescendantsOfKind(l.CallExpression))if(Qa(u)&&(r=!0),Ja(u)&&(t=!0),ec(u)&&(o=!0),tc(u)&&(s=!0),sc(u)&&(n=!0),r&&t&&o&&n)break;const{handlesErrors:a,reachesOutbound:c}=pc(e);return{callsMail:Ne(e,oc),emitsEvent:Ne(e,nc),fanOut:t,handlesErrors:a,reachesOutbound:c,runsAiGeneration:s||Ne(e,rc),throwsBareError:mc(e),unboundedAiGeneration:n,usesInsertManyUnsafe:o,writesUserTable:r}},Ac=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=k(s);if(!n||n.kind!=="query"&&n.kind!=="mutation"&&n.kind!=="action")return;const o=n.receiver?Ga(n.receiver):{usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},r=yc(e,s);return{...r?Sc(r):{},...vc(e),...o,analyzableBody:r!==void 0,exportName:e.getName(),file:t,hasEmailArg:Va(s,n.receiver),kind:n.kind,visibility:n.visibility}},Nc=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=Ac(o,t);r&&s.push(r)}return s},bc=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Nc(o,x(t,n)))}return s},Pc=new Set(["dbRateLimit","rateLimit"]),Ic=e=>i.isArrowFunction(e)?e.getBody():e,wc=(e,t)=>{const s=y(e.getExpression());if(s===void 0||!Pc.has(s))return;const n=e.getArguments()[2];if(!n)return;const o=A(n,"key");if(!o)return;const r=Ic(o);if(!(!R(r)||K(r)))return{callee:s,exportName:v(e),file:t,limitName:qt(e),line:e.getStartLineNumber()}},Tc=(e,t)=>w(e,t,wc),Cc=new Set(["findFirst","findFirstOrThrow","findMany","findUnique","get"]),Fc=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!Cc.has(t.getName()))return;const s=t.getExpression();if(D(s)){const n=e.getArguments()[0];return n&&i.isStringLiteral(n)?n.getLiteralText():""}if(i.isPropertyAccessExpression(s)&&D(s.getExpression()))return s.getName()},Oc=e=>{let t=e;for(;i.isCallExpression(t);){const s=t.getExpression();if(!i.isPropertyAccessExpression(s))return;if(s.getName()==="query"&&D(s.getExpression())){const n=t.getArguments()[0];return n&&i.isStringLiteral(n)?n.getLiteralText():""}t=s.getExpression()}},Rc=e=>{let t=G(e)??e;for(;i.isAwaitExpression(t);)t=G(t.getExpression())??t.getExpression();return t},us=(e,t=!1)=>{const s=Rc(e);if(i.isIdentifier(s)){if(t)return;const n=de(s);return n===void 0?void 0:us(n,!0)}if(i.isCallExpression(s))return Fc(s)??Oc(s)},Lc=e=>{const t=e.getBody();if(!i.isBlock(t))return[t];const s=[];for(const n of e.getDescendantsOfKind(l.ReturnStatement)){const o=n.getFirstAncestor(a=>i.isArrowFunction(a)||i.isFunctionExpression(a)||i.isFunctionDeclaration(a)),r=n.getExpression();o===e&&r!==void 0&&s.push(r)}return s},Dc=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!i.isCallExpression(s))return[];const n=k(s);if(n?.kind!=="query")return[];const o=Jt(s);if(o===void 0)return[];const r=n.receiver!==void 0&&rn(n.receiver,"output"),a=n.receiver!==void 0&&Vt(n.receiver,"use","mask"),c=new Set,u=[];for(const d of Lc(o)){const h=us(d);h===void 0||c.has(h)||(c.add(h),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),table:h,usesMask:a,usesOutput:r,visibility:n.visibility}))}return u},kc=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...Dc(c,r))}return s},Mc=e=>{if(!e||!i.isObjectLiteralExpression(e))return[];const t=[];for(const s of e.getProperties())(i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)||i.isMethodDeclaration(s)||i.isGetAccessorDeclaration(s))&&t.push(s.getName());return t},_c=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?k(s):void 0;if(!n)return[];const o=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=Bt(r);if(a===void 0)continue;const c=Mc(A(a.options,"with"));c.length!==0&&o.push({exportName:e.getName(),file:t,line:r.getStartLineNumber(),parentTable:a.table,relations:c,visibility:n.visibility})}return o},Kc=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(..._c(c,r))}return s},ae=e=>{if(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))return e.getLiteralText();if(i.isBinaryExpression(e)&&e.getOperatorToken().getKind()===l.PlusToken){const t=ae(e.getLeft()),s=ae(e.getRight());return t!==void 0&&s!==void 0?t+s:void 0}},zc=e=>{let t=e,s=t.getParent();for(;s!==void 0&&i.isBinaryExpression(s)&&s.getOperatorToken().getKind()===l.PlusToken;)t=s,s=t.getParent();return t!==e&&ae(t)!==void 0},$c=/(?:^|\/)__tests__\//u,Uc=/\.(?:spec|test)$/u,qc=e=>$c.test(e)||Uc.test(e),Bc=e=>{const t=e.getParent();if(t!==void 0){if(i.isVariableDeclaration(t)||i.isPropertyAssignment(t)||i.isPropertySignature(t))return t.getName();if(i.isBinaryExpression(t)&&t.getOperatorToken().getKind()===l.EqualsToken)return t.getLeft().getText()}},Vc=(e,t,s)=>kn(e)?!qc(s)&&Mn(Bc(t)):!0,Wc=(e,t)=>{const s=[],n=[...e.getDescendantsOfKind(l.BinaryExpression),...e.getDescendantsOfKind(l.StringLiteral),...e.getDescendantsOfKind(l.NoSubstitutionTemplateLiteral)],o=new Set;for(const r of n){if(zc(r))continue;const a=ae(r);if(a===void 0)continue;const c=Ln(a);if(c===void 0||!Vc(c,r,t))continue;const u=r.getStartLineNumber(),d=`${String(u)}:${c}`;o.has(d)||(o.add(d),s.push({file:t,kind:c,line:u,preview:Dn(a)}))}return s},jc=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Wc(o,x(t,n)))}return s},Hc=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?k(s):void 0;if(!n)return[];const o=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=Bt(r);if(a===void 0)continue;const c=A(a.options,"includeDeleted");if(c===void 0)continue;const u=i.isTrueLiteral(c),d=!u&&R(c);!u&&!d||o.push({exportName:e.getName(),file:t,fromArgs:d,hardcodedTrue:u,line:r.getStartLineNumber(),table:a.table,visibility:n.visibility})}return o},Gc=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...Hc(c,r))}return s},Yc=new Set(["query","unsafe"]),Qc=e=>{if(!i.isPropertyAccessExpression(e)||!Yc.has(e.getName()))return!1;const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="sql")return!1;const s=t.getExpression();return i.isIdentifier(s)&&s.getText()==="ctx"},Xc=e=>i.isBinaryExpression(e)||i.isTemplateExpression(e),Zc=e=>e.getFirstAncestorByKind(l.VariableDeclaration)?.getName()??"<module>",Jc=(e,t)=>{if(!Qc(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!Xc(s)))return{exportName:Zc(e),file:t,line:s.getStartLineNumber()}},el=(e,t)=>w(e,t,Jc),tl=[["convex",["convex","@convex-dev/"]],["supabase",["@supabase/"]],["firebase",["firebase","@firebase/","firebase-admin"]]],sl=e=>{for(const[t,s]of tl)for(const n of s)if(e===n||e.startsWith(n.endsWith("/")?n:`${n}/`))return t},nl=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of o.getImportDeclarations()){const a=r.getModuleSpecifierValue(),c=sl(a);c!==void 0&&s.push({file:x(t,n),line:r.getStartLineNumber(),moduleSpecifier:a,platform:c})}}return s},rl=new Set(["createMultipartUpload","delete","download","generateUploadUrl","get","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","put","resumeMultipartUpload","store","upload"]),ol=(e,t,s=[])=>{const n=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));return ge(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.storage"||r.startsWith("ctx.storage."),methods:rl,requireUnmodifiedReach:!0}).map(r=>{const a=n.get(`${r.file}:${r.exportName}`);return a===void 0?r:{...r,visibility:a}})},il=new Map([["generateUploadUrl",1],["getPresignedUrl",1],["getSignedUrl",1],["store",2],["upload",2]]),al=e=>e&&i.isNumericLiteral(e)?Number(e.getText()):void 0,cl=e=>{if(e===void 0)return{analyzable:!0,presentKeys:[]};if(!i.isObjectLiteralExpression(e))return{analyzable:!1,presentKeys:[]};const t=[];let s,n=!1;for(const o of e.getProperties()){if(i.isSpreadAssignment(o)){n=!0;continue}if(i.isPropertyAssignment(o)){const r=o.getName();t.push(r),r==="expiresInSeconds"&&(s=al(o.getInitializer()));continue}(i.isShorthandPropertyAssignment(o)||i.isMethodDeclaration(o))&&t.push(o.getName())}return{analyzable:!n,expiresInSeconds:s,presentKeys:t}},ll=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName(),s=il.get(t);if(s===void 0)return;const n=e.getExpression().getText();return n==="ctx.storage"||n.startsWith("ctx.storage.")?{method:t,optionsIndex:s}:void 0},ul=(e,t)=>{const s=ll(e.getExpression());if(s!==void 0)return{exportName:v(e),file:t,line:e.getStartLineNumber(),method:s.method,...cl(e.getArguments()[s.optionsIndex])}},dl=(e,t)=>w(e,t,ul),fl=(e,t)=>({analytics:e.analytics||t.dependencies.has("@lunora/bindings"),auth:t.dependencies.has("@lunora/auth"),containers:e.container||t.containerCount>0||t.dependencies.has("@lunora/container"),flags:e.flags||t.dependencies.has("@lunora/flags"),kv:e.kv||t.dependencies.has("@lunora/bindings"),mail:e.mail||t.dependencies.has("@lunora/mail"),notifications:e.notify||t.dependencies.has("@lunora/notify"),payments:e.payments||t.hasPaymentTables,queues:t.queueCount>0||t.dependencies.has("@lunora/queue"),scheduler:e.scheduler||t.cronCount>0||t.dependencies.has("@lunora/scheduler"),storage:e.storage||t.storageRuleCount>0||t.storageColumnCount>0||t.dependencies.has("@lunora/storage"),vectors:t.vectorStoreSupported&&t.vectorIndexCount>0,workflows:e.workflows||t.workflowCount>0||t.dependencies.has("@lunora/workflow")}),gl=(e,t,s)=>({cacheKey:`procedure_arguments_unreadable:${e}:${t}`,categories:["SCHEMA"],description:"Codegen reads an argument record statically. One built at runtime — a factory call, or a property off a value it cannot follow — has no literal to read, so the generated `FunctionReference` carries only the arguments it could see while the runtime validator still enforces all of them.",detail:`\`${t}\` in \`${e}\` (line ${s.toString()}) declares arguments codegen could not read, so its generated type is missing some of them.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:s},name:"procedure_arguments_unreadable",remediation:`Declare the arguments as an object literal, or as a \`const\` object literal the chain names — \`const ${t}Args = { … };\` then \`.input(${t}Args)\`. Both resolve; a record returned by a call does not.`,title:"Procedure arguments are missing from the generated type"}),pl=(e,t)=>{if(t===void 0){const s=e.getArguments()[0];if(s===void 0||!i.isObjectLiteralExpression(s)||s.getProperty("args")===void 0)return!1}return De(e,t).opaque},ml=(e,t)=>{const s=[],n=(o,r)=>{const a=o.getInitializer();if(a===void 0||!i.isCallExpression(a))return;const c=k(a);c!==void 0&&pl(a,c.receiver)&&s.push(gl(t,r,a.getStartLineNumber()))};for(const o of e.getVariableStatements().filter(r=>r.isExported()))for(const r of o.getDeclarations())n(r,r.getName());return s},hl=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n);o!==void 0&&s.push(...ml(o,x(t,n)))}return s.toSorted((n,o)=>n.cacheKey.localeCompare(o.cacheKey))},xl=new Map([["AgentDefinition",{call:"defineAgent({ … })",file:"agents"}],["ContainerDefinition",{call:"defineContainer({ … })",file:"containers"}],["QueueDefinition",{call:"defineQueue({ … })",file:"queues",note:"A dropped queue has no caller to fail — its consumer is simply never wired."}],["RegisteredAction",{call:"action.input({ … }).action(handler)"}],["RegisteredLifecycleHook",{call:"onConnect(handler)",note:"Substitute the hook you called: `onConnect`, `onDisconnect` and `onShardInit` share one type, so codegen cannot tell which you wrote. A dropped hook has no caller to fail — it silently never fires."}],["RegisteredMigration",{call:"defineMigration({ … })",note:"A dropped migration never runs, so `lunora migrate up` reports nothing to do."}],["RegisteredMutation",{call:"mutation.input({ … }).mutation(handler)"}],["RegisteredMutator",{call:"defineMutator({ … })",file:"mutators"}],["RegisteredQuery",{call:"query.input({ … }).query(handler)"}],["RegisteredReactor",{call:"onQueryChange(select, handler)",note:"A dropped reactor has no caller to fail — it silently never runs."}],["RegisteredShape",{call:"defineShape({ … })",file:"shapes"}],["RegisteredStream",{call:"query.input({ … }).stream(handler)"}],["RegisteredWhisperAuthorizer",{call:"onWhisper(handler)",note:"A dropped authorizer has no caller to fail — the whisper topics it was meant to gate silently stay open to every socket on the shard."}],["WorkflowDefinition",{call:"defineWorkflow({ … })",file:"workflows"}]]),pe=({byName:e,byPath:t},s,n)=>t.has(`${s}:${n}`)||e.has(n),ds=e=>!e.isAny(),Me=e=>{const t=e.getType();if(!ds(t))return;const s=t.getAliasSymbol()?.getName()??t.getSymbol()?.getName(),n=s===void 0?void 0:xl.get(s);return n===void 0||s===void 0?void 0:{...n,typeName:s}},fs=e=>{const t=e.getInitializer();return t===void 0?!1:i.isCallExpression(t)||i.isIdentifier(t)||i.isPropertyAccessExpression(t)},gs={cause:"codegen recognises a registration only when the initializer is the registering call itself, and this one comes from a factory or an alias",remediation:"A factory that returns a registration cannot be read statically — inline it, or export what the factory builds."},vl=e=>({cause:`codegen reads this kind of registration only from \`lunora/${e}.ts\`, and this is a different module`,remediation:`Move it into \`lunora/${e}.ts\` — the declaration itself is fine.`}),El={cause:"the binding is exported by a separate `export { … }` statement, and codegen reads the `export` keyword on the declaration itself",remediation:"Move the keyword onto the declaration and drop the separate export statement."},_e=(e,t,s,n,o)=>{const{call:r,file:a,note:c,typeName:u}=s,d=a!==void 0&&e!==a?a:void 0,h=d===void 0?o:vl(d),m=c===void 0?h.remediation:`${c} ${h.remediation}`;return{cacheKey:`procedure_not_registered:${e}:${t}`,categories:["SCHEMA"],description:"Codegen registers an export only when the declaration carries `export` and its initializer is literally the registering call. Written any other way it exists at runtime but never reaches the generated output — `_generated/api.ts` for a procedure, the lifecycle manifest for a hook or reactor — so a caller cannot address it and a hook never fires.",detail:`\`${t}\` in \`${e}\` (line ${n.toString()}) has type \`${u}\` but was not registered — ${h.cause}.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:n,typeName:u},name:"procedure_not_registered",remediation:d===void 0?`Assign the registration directly: \`export const ${t} = ${r};\`. ${m}`:m,title:"Procedure exists at runtime but is missing from the generated API"}},yl=(e,t,s)=>{const n=[];for(const o of e.getVariableStatements().filter(r=>r.isExported()))for(const r of o.getDeclarations()){const a=r.getName();if(pe(s,t,a)||!fs(r))continue;const c=Me(r);c!==void 0&&n.push(_e(t,a,c,r.getStartLineNumber(),gs))}return n},Sl=(e,t,s)=>{if(pe(s,t,"default"))return[];const n=[];for(const o of e.getExportAssignments().filter(r=>!r.isExportEquals())){const r=Me(o.getExpression());r!==void 0&&n.push(_e(t,"default",r,o.getStartLineNumber(),gs))}return n},Al=(e,t,s)=>{const n=[];for(const o of e.getExportDeclarations().filter(r=>r.getModuleSpecifier()===void 0))for(const r of o.getNamedExports()){const a=r.getAliasNode()?.getText()??r.getName();if(pe(s,t,a))continue;const c=r.getLocalTargetDeclarations().find(d=>i.isVariableDeclaration(d));if(c===void 0||!fs(c))continue;const u=Me(c);u!==void 0&&n.push(_e(t,a,u,r.getStartLineNumber(),El))}return n},Nl=(e,t,s)=>[...yl(e,t,s),...Sl(e,t,s),...Al(e,t,s)],bl=(e,t,s)=>e.getVariableStatements().filter(n=>n.isExported()).flatMap(n=>n.getDeclarations()).filter(n=>pe(s,t,n.getName())).filter(n=>{const o=n.getInitializer();return o!==void 0&&i.isCallExpression(o)&&i.isPropertyAccessExpression(o.getExpression())}).map(n=>({declaration:n,exportName:n.getName(),relativePath:t})),Pl=({exportName:e,relativePath:t})=>({cacheKey:"procedure_type_check_unavailable",categories:["SCHEMA"],description:"Codegen cross-checks every export in `lunora/` against its TYPE to catch a procedure the syntactic scan dropped — a factory-assigned export, an alias, a separate `export { … }`. That check needs the type checker to resolve `@lunora/server`; when it cannot, the check reports nothing regardless of what the code does.",detail:`Type resolution for \`lunora/\` is unavailable — the registered procedure \`${e}\` in \`${t}\` types as \`any\`, as does every other one — so codegen cannot tell you when an export is dropped from \`_generated/api.ts\`. A dropped procedure will surface as \`Property '<name>' does not exist\` at its call site instead.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:e,filePath:t},name:"procedure_type_check_unavailable",remediation:`Check what codegen sees: \`${e}\` should have a procedure type, not \`any\`. It needs a \`tsconfig.json\` at or above \`lunora/\` — the one codegen finds walking up from there, which is not necessarily the one your editor uses — resolving \`lunorash\` / \`@lunora/server\` to declarations that exist on disk (a workspace dependency has to be built first).`,title:"Codegen cannot type-check `lunora/`, so dropped procedures go unreported"}),Il=(e,t,s)=>{const n=[],o=[];for(const a of p(t)){const c=e.getSourceFile(a);if(c===void 0)continue;const u=x(t,a);n.push(...Nl(c,u,s)),o.push(...bl(c,u,s))}const[r]=o;return r!==void 0&&o.every(({declaration:a})=>!ds(a.getType()))&&n.push(Pl(r)),n.toSorted((a,c)=>a.cacheKey.localeCompare(c.cacheKey))},wl=new Set(["when","where"]),be=new Set(["definePolicy","defineShape"]),Tl=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(i.isPropertyAccessExpression(t)){const n=t.getName();return be.has(n)?n:void 0}if(!i.isIdentifier(t))return;for(const n of t.getSymbol()?.getDeclarations()??[])if(i.isImportSpecifier(n)){const o=n.getNameNode().getText();return be.has(o)?o:void 0}const s=t.getText();return be.has(s)?s:void 0},Cl=e=>i.isObjectLiteralExpression(e)&&e.getProperties().length===0,ps=e=>{if(e!==void 0){if(i.isReturnStatement(e)&&e.getExpression()===void 0||e.getKind()===l.UndefinedKeyword||e.getText()==="undefined")return"undefined";if(Cl(e))return"empty-object";if(i.isParenthesizedExpression(e))return ps(e.getExpression())}},Ke=e=>e.getAncestors().find(t=>i.isArrowFunction(t)||i.isFunctionExpression(t)||i.isFunctionDeclaration(t)),Fl=e=>e.getDescendantsOfKind(l.ReturnStatement).filter(t=>Ke(t)===e),ms=e=>e.getDescendantsOfKind(l.ConditionalExpression).filter(t=>Ke(t)===e),Ol=e=>{const t=Fl(e);return t.length>1?!0:t.some(s=>s.getFirstAncestorByKind(l.IfStatement)!==void 0)||ms(e).length>0},Rl=e=>e.getDescendantsOfKind(l.IfStatement).filter(t=>Ke(t)===e),Ce=e=>e.getKind()===l.NullKeyword||e.getKind()===l.FalseKeyword||i.isIdentifier(e)&&e.getText()==="undefined"?!0:i.isNumericLiteral(e)?e.getLiteralValue()===0:i.isStringLiteral(e)&&e.getLiteralValue()==="",Ll=(e,t)=>Ce(e)||Ce(t),Dl=new Map([[l.EqualsEqualsEqualsToken,"positive"],[l.EqualsEqualsToken,"positive"],[l.ExclamationEqualsEqualsToken,"negative"],[l.ExclamationEqualsToken,"negative"]]),Lt=e=>!Ce(e)&&(i.isLiteralExpression(e)||e.getKind()===l.TrueKeyword),kl=(e,t,s)=>{const n=Dl.get(e);if(n!==void 0)return Ll(t,s)?n==="positive"?"negative":"positive":Lt(t)||Lt(s)?void 0:n},H=e=>{if(i.isParenthesizedExpression(e))return H(e.getExpression());if(i.isPrefixUnaryExpression(e)&&e.getOperatorToken()===l.ExclamationToken)return"negative";if(i.isBinaryExpression(e)){const t=e.getOperatorToken().getKind(),s=kl(t,e.getLeft(),e.getRight());if(s!==void 0)return s;if(t===l.AmpersandAmpersandToken||t===l.BarBarToken){const n=H(e.getLeft()),o=H(e.getRight());return n===o?n:"indeterminate"}}return i.isIdentifier(e)||i.isPropertyAccessExpression(e)||i.isElementAccessExpression(e)||i.isCallExpression(e)?"positive":"indeterminate"},Dt=e=>{if(e!==void 0){if(i.isReturnStatement(e))return e;if(i.isBlock(e)){const t=e.getStatements().at(-1);return t!==void 0&&i.isReturnStatement(t)?t:void 0}}},Ml=e=>{if(e.getElseStatement()!==void 0)return;const t=e.getNextSiblingIfKind(l.ReturnStatement);return t!==void 0&&t.getNextSibling()===void 0?t:void 0},_l=e=>i.isReturnStatement(e)?e.getExpression()??e:e,Kl=e=>{const t=[];for(const s of ms(e)){const n=H(s.getCondition());n==="positive"?t.push(s.getWhenFalse()):n==="negative"&&t.push(s.getWhenTrue())}for(const s of Rl(e)){const n=H(s.getExpression());if(n==="indeterminate")continue;const o=n==="negative"?Dt(s.getThenStatement()):Dt(s.getElseStatement())??Ml(s);o!==void 0&&t.push(_l(o))}return t},zl=e=>{for(const t of e.getAncestors())if(i.isVariableDeclaration(t)){const s=t.getNameNode();if(i.isIdentifier(s))return s.getText()}return"<anonymous>"},$l=(e,t,s)=>{if(!i.isCallExpression(e))return[];const[n]=e.getArguments();if(!n||!i.isObjectLiteralExpression(n))return[];const o=[];for(const r of n.getProperties()){if(!i.isPropertyAssignment(r)||!wl.has(r.getName()))continue;const a=r.getInitializer();if(!(!a||!(i.isArrowFunction(a)||i.isFunctionExpression(a)))&&Ol(a))for(const c of Kl(a)){const u=ps(c);u!==void 0&&o.push({exportName:zl(e),file:s,form:u,key:r.getName(),line:c.getStartLineNumber(),owner:t})}}return o},Ul=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=Tl(n);o!==void 0&&s.push(...$l(n,o,t))}return s},ql=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Ul(o,x(t,n)))}return s},Bl=new Set(["query","upsert","upsertMany"]),Vl=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(Bl.has(t))return e.getExpression().getText()==="ctx.vectors"?t:void 0},Wl=(e,t)=>{const s=Vl(e.getExpression());if(s===void 0)return;const n=e.getArguments()[1];if(!n)return;const o=A(n,"namespace");if(!(!o||!R(o)||K(o)))return{exportName:v(e),file:t,line:e.getStartLineNumber(),method:s}},jl=(e,t)=>w(e,t,Wl),Hl=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="get")return!1;const s=t.getExpression();return i.isPropertyAccessExpression(s)?s.getName()==="workflows":i.isIdentifier(s)&&s.getText()==="workflows"},Gl=e=>{const t=e.getArguments()[0];return t&&i.isStringLiteral(t)?t.getLiteralText():""},Yl=(e,t)=>{const s=[];for(const n of p(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=x(t,n);for(const a of o.getDescendantsOfKind(l.CallExpression)){if(!Hl(a))continue;const c=Js(a);c!==""&&s.push({exportName:c,file:r,line:a.getStartLineNumber(),workflow:Gl(a)})}}return s},Ql=".lunora-schema.json",Fe=(e,t)=>{b(e)&&_t(e,"utf8")===t||Is(e,t,"utf8")},Xl=(e,t)=>{if(t===""){ws(e,{force:!0});return}Fe(e,t)},Zl=e=>{const t=E(e,"package.json");if(b(t))try{const s=JSON.parse(_t(t,"utf8"));return typeof s.version=="string"&&s.version!==""?s.version:void 0}catch{return}},Jl=()=>{const e=process.env.LUNORA_CODEGEN_TIMING;return e!==void 0&&e!==""},eu=e=>{let t=b(e)?e:se(e);for(;t&&t!==se(t);){const s=E(t,"tsconfig.json");if(b(s))return s;t=se(t)}},kt=e=>e.replaceAll("\\","/"),tu=(e,t,s)=>{if(s&&e.length>0){const r=e.map(a=>`"${a.exportName}"`).join(", ");throw new L("MASK_UNSUPPORTED",`This project declares a \`mask(...)\` policy whose argument isn't a plain object literal (e.g. \`mask(sharedPolicies)\` referencing a hoisted variable), or contains a spread (\`...shared\`) or computed key (\`[name]:\`) codegen can't enumerate, so codegen can't tell which columns it masks. Because the project also declares replication shape(s) (${r}), codegen can't verify none of them replicate a table that policy masks — inline every table and column as literal keys so codegen can verify it, or remove the affected shape(s).`,{status:422})}const n=new Map;for(const r of t.columns){const a=n.get(r.table)??[];a.push(r.column),n.set(r.table,a)}const o=t.columns.length>0;for(const r of e){if(r.table===void 0){if(o)throw new L("MASK_UNSUPPORTED",`defineShape "${r.exportName}" has a non-literal \`table\` (a variable or expression, not a string literal), so codegen can't statically verify it doesn't replicate a table that masks a column. This project masks at least one column elsewhere, so the combination can't be proven safe — change "${r.exportName}"'s \`table\` to a plain string literal so codegen can verify it, or remove the mask(s) on the table it targets.`,{status:422});continue}const a=n.get(r.table);if(a===void 0)continue;const c=a.map(u=>`"${u}"`).join(", ");throw new L("MASK_UNSUPPORTED",`defineShape "${r.exportName}" replicates table "${r.table}", which masks column(s) ${c} on at least one procedure. A shape runs no procedure, so \`.use(mask(...))\` never applies to its replicated rows — remove the shape, unmask the table, or wait for shape-masking support.`,{status:422})}},ce=(e,t,s)=>{const n=e.getSourceFile(t);if(n===void 0){e.createSourceFile(t,s,{overwrite:!0});return}n.getFullText()!==s&&n.replaceWithText(s)},Mt=(e,t,s)=>e.getSourceFile(t)?.getFullText()===s,su=8,nu=e=>{const{agents:t,apiPath:s,generatedFunctionsPath:n,lunoraDirectory:o,migrations:r,project:a,shapes:c,usesSandbox:u,useUmbrella:d,workflows:h}=e;let m=lt(a,o),P=dt(a,o),M=ut(a,o);ft([...m,...P].map(g=>g.filePath)),ft(M.filter(g=>g.stream).map(g=>g.filePath),"http-stream");for(let g=1;;g+=1){const T=js({agents:t,functions:m,httpRoutes:M,mutators:P,useUmbrella:d,workflows:h}),F=Hs({agents:t,functions:m,migrations:r,mutators:P,shapes:c,useUmbrella:d,usesSandbox:u});if(g>=su||Mt(a,s,T)&&Mt(a,n,F))return{apiContent:T,functions:m,functionsContent:F,httpRoutes:M,mutators:P};ce(a,s,T),ce(a,n,F),m=lt(a,o),P=dt(a,o),M=ut(a,o)}},ru=e=>{const t=eu(e);return t?new ct({skipAddingFilesFromTsConfig:!1,tsConfigFilePath:t,useInMemoryFileSystem:!1}):new ct({skipAddingFilesFromTsConfig:!0,useInMemoryFileSystem:!1})},Ju=(e,t)=>{const s=p(t),n=E(t,"schema.ts");b(n)&&s.push(n);for(const c of s){const u=e.getSourceFile(c);u===void 0?e.addSourceFileAtPath(c):u.refreshFromFileSystemSync()}const o=new Set(s.map(c=>kt(c))),r=kt(t),a=`${r}/`;for(const c of e.getSourceFiles()){const u=c.getFilePath();(u===r||u.startsWith(a))&&!o.has(u)&&e.removeSourceFile(c)}for(const c of e.getSourceFiles()){const u=c.getFilePath();if(!(u===r||u.startsWith(a)||u.includes("/node_modules/")))try{c.refreshFromFileSystemSync()}catch{e.removeSourceFile(c)}}},ed=e=>{const t=Jl(),s=t?Se.now():0,n=E(e.projectRoot,e.lunoraDirectory??"lunora"),o=E(n,"schema.ts");if(!b(o))throw new L("INTERNAL",`schema.ts not found at ${o}`);const r=e.project??ru(n);mn(Go);const a=Rn(r,o,e.projectRoot),{agents:c,containers:u,crons:d,dataModelContent:h,dependencies:m,entryCronTriggers:P,env:M,featureUsage:g,hasFlags:T,hasNotify:F,identity:U,platformGate:S,queues:O,serverContent:z,storageRulesMetadata:W,usesSandbox:X,useUmbrella:_,workflows:C}=gr({lunoraDirectory:n,project:r,projectRoot:e.projectRoot,schema:a,target:e.target}),N=E(n,"_generated"),hs=E(N,"dataModel.ts"),xs=E(N,"server.ts"),vs=E(N,"api.ts"),Es=E(N,"functions.ts");ce(r,hs,h),ce(r,xs,z);const Z=Nn(r,n),q=_n(r,n),{apiContent:ze,functions:B,functionsContent:$e,httpRoutes:ys,mutators:Ue}=nu({agents:c,apiPath:vs,generatedFunctionsPath:Es,lunoraDirectory:n,migrations:Z,project:r,shapes:q,useUmbrella:_,usesSandbox:X,workflows:C}),J=e.lint===!1?void 0:Fs({adminRoutes:Sr(r,n),aiRawRuns:br(r,n),aiToolSideEffects:Dr(r,n),argumentDerivedFetches:_r(r,n),argumentValidators:Hr(r,n),authApiCalls:hn(r,n),authConfigs:no(r,n),browserUrlAccesses:co(r,n),configCalls:xo(r,n),containerKeyAccesses:Eo(r,n),containerOverrides:Po(r,n),containers:u,exportSinks:Co(r,n),staleMigrationImports:nl(r,n),failOpenGuards:Do(r,n),flagReads:Bo(r,n),flagSecurityDefaults:Ho(r,n),geoIndexUsages:Xo(r,n),httpActionGuards:li(r,n),httpHeaderWrites:Ei(r,n),hyperdriveCalls:yn(r,n),identityClaimReads:Ii(r,n),imageDeliveryUrlAccesses:Ti(r,n),inserts:Sn(r,n),kvKeyAccesses:Fi(r,n,B),mailRecipientAccesses:ki(r,n),maskProcedures:An(r,n),maskStrategies:Bi(r,n),mutatorWrites:Yi(r,n),nondeterministicCalls:In(r,n),normalizeIdAuthorizations:da(r,n),notifyCalls:Tn(r,n),notifyConfig:wn(r,n),ownerFieldWrites:Ea(r,n,B),unrestrictedWhereBranches:ql(r,n),paymentWebhooks:wa(r,n),privilegedDispatches:$a(r,n),procedureProtections:bc(r,n),queries:pn(r,n),queues:O,r2sqlCalls:Cn(r,n),ratelimitKeySelectors:Tc(r,n),rawRowReturns:kc(r,n),relationLoads:Kc(r,n),rlsProcedures:Fn(r,n),schema:a,secretLiterals:jc(r,n),shapes:q,softDeleteReads:Gc(r,n),sqlInterpolations:el(r,n),storageKeyAccesses:ol(r,n,B),storageUploads:dl(r,n),vectorNamespaceAccesses:jl(r,n),workflowCalls:Yl(r,n),workflows:C,wranglerVariables:e.wranglerVariables}),qe=J===void 0?[]:[...Ts(J,{source:"static"}),...Il(r,n,{byName:new Set([...C,...O,...c,...u].map(f=>f.exportName)),byPath:new Set([...B,...Ue,...q,...Z].map(f=>`${f.filePath}:${f.exportName}`))}),...hl(r,n)],Ss=On(r,n),Be=$i(r,n);tu(q,Be,Ki(r,n));const As=T?Ko(r,n):[],me=S.signals.vectorStore!==!1,j=fl(g,{containerCount:u.length,cronCount:d.length,dependencies:m,hasPaymentTables:Aa(a.tables),queueCount:O.length,storageColumnCount:Object.keys(Kt(a)).length,storageRuleCount:W.rules.length,vectorIndexCount:a.vectorIndexes.length,vectorStoreSupported:me,workflowCount:C.length}),Ve=t?Se.now():0,he=Bn(a,Z.map(f=>f.id)),We=Ds({advisories:qe.filter(f=>f.name!=="procedure_type_check_unavailable"),advisorProcedures:J?.procedureProtections??[],agents:c,containers:u,env:M,flagKeys:As,hasAccessFacade:g.access,hasAi:g.ai,hasAnalytics:g.analytics,hasBrowser:g.browser,hasFlags:T,hasHyperdrive:g.hyperdrive,hasImages:g.images,hasKv:g.kv,hasNotify:F,hasPayments:g.payments,hasPipelines:g.pipelines,hasR2sql:g.r2sql,hasVectors:me,hasX402:g.x402,maskMetadata:Be,mutators:Ue,queues:O,rlsMetadata:Ss,schema:a,schemaSnapshot:he,shapes:q,storageRules:W,studioFeatures:j,useUmbrella:_,workflows:C}),je=ks(q,m.has("@lunora/db"),_),He=Ms(u,a.jurisdiction),Ge=_s(C),Ye=Ks(c),Qe=zs(O),Xe=$s(d),Ns=Us(j.scheduler),Ze=qs(a.vectorIndexes),ee=Bs(a,_),Je=Vs(m.has("@lunora/seed")),te=e.apiSpec??"openapi",xe=te==="openapi"||te==="both",ve=te==="openrpc"||te==="both",et=Kn({emailAgents:c.filter(f=>f.onEmail===!0).map(f=>({bindingName:f.bindingName,exportName:f.exportName})),hasAccess:m.has("@lunora/cloudflare-access"),hasAi:g.ai,hasAnalytics:g.analytics,hasAuth:m.has("@lunora/auth"),hasBrowser:g.browser,hasFramework:m.has("@lunora/astro")||m.has("@lunora/svelte")||m.has("@lunora/vue"),hasGlobal:a.tables.some(f=>zt(f)),hasHyperdrive:g.hyperdrive,hasHyperdriveGlobal:a.tables.some(f=>$t(f)),hasImages:g.images,hasKv:g.kv,hasKvIntrospector:j.kv,hasNotify:F,hasPayments:g.payments,hasR2sql:g.r2sql,hasQueue:O.some(f=>f.mode==="push"),hasScheduler:j.scheduler,hasStorage:j.storage,hasVectors:me,hasWorkflow:C.length>0,hasX402:g.x402,identity:U,jurisdiction:a.jurisdiction,tableNames:a.tables.map(f=>f.name),useUmbrella:_,vectorIndexCount:a.vectorIndexes.length,voiceAgents:c.filter(f=>f.voice===!0&&f.voiceBindingName!==void 0).map(f=>({bindingName:f.voiceBindingName,exportName:f.exportName})),wantsOpenApi:xe,wantsOpenRpc:ve}),tt=Zl(e.projectRoot),st=zn({functions:B,httpRoutes:ys,version:tt}),nt=Un({functions:B,version:tt}),rt=`${JSON.stringify(st,void 0,2)}
-`,ot=`${JSON.stringify(nt,void 0,2)}
-`,it=$n(st),at=qn(nt),Ee=E(n,Ql),bs=b(Ee),ye=[];if(!e.dryRun){b(N)||Ps(N,{recursive:!0});const f=($,V)=>{Fe(E(N,$),V),ye.push($)},I=($,V)=>{Xl(E(N,$),V),V!==""&&ye.push($)};f("app.ts",et),f("dataModel.ts",h),f("api.ts",ze),f("server.ts",z),f("functions.ts",$e),f("shard.ts",We),f("crons.ts",Xe),f("vectors.ts",Ze),f("drizzle.global.ts",ee.global),f("drizzle.shard.ts",ee.shard),I("containers.ts",He),I("workflows.ts",Ge),I("agents.ts",Ye),I("queues.ts",Qe),I("scheduler.ts",Ns),I("seed.ts",Je),I("collections.ts",je),I("openapi.json",xe?rt:""),I("openapi.ts",xe?it:""),I("openrpc.json",ve?ot:""),I("openrpc.ts",ve?at:""),(!bs||e.updateSchemaBaseline===!0)&&Fe(Ee,Cs(he))}if(t){const f=Se.now(),I=Math.round(f-s),$=Math.round(Ve-s),V=Math.round(f-Ve);console.error(`@lunora/codegen: codegen took ${I.toString()}ms (discovery ${$.toString()}ms, emit ${V.toString()}ms)`)}return{advisories:qe,advisorContext:J,agents:c,containers:u,cronTriggers:[...new Set([...Ws(d),...P])],generated:{agents:Ye,api:ze,app:et,collections:je,containers:He,crons:Xe,dataModel:h,drizzleGlobal:ee.global,drizzleShard:ee.shard,functions:$e,openApi:rt,openApiModule:it,openRpc:ot,openRpcModule:at,queues:Qe,seed:Je,server:z,shard:We,vectors:Ze,workflows:Ge},migrations:Z,outputDirectory:N,platformDiagnostics:S.diagnostics,queues:O,schemaSnapshot:he,schemaSnapshotPath:Ee,workflows:C,writtenFiles:ye}};export{Ql as SCHEMA_SNAPSHOT_FILENAME,ru as createCodegenProject,eu as findTsconfig,Ju as refreshCodegenProject,ed as runCodegen};