@lunora/codegen 1.0.0-alpha.24 → 1.0.0-alpha.25

package/dist/index.mjs

@@ -19,11 +19,11 @@ export { default as discoverSchema } from './packem_shared/discoverSchema-KYq55q
 export { SHAPES_FILENAME, discoverShapes } from './packem_shared/SHAPES_FILENAME-ChV7MqgE.mjs';
 export { default as discoverStorageRulesMetadata } from './packem_shared/discoverStorageRulesMetadata-Da8BKXcI.mjs';
 export { WORKFLOWS_FILENAME, discoverWorkflows } from './packem_shared/WORKFLOWS_FILENAME-CCisG0Vy.mjs';
-export { GENERATED_HEADER, emitApi, emitCollections, emitContainers, emitCrons, emitDataModel, emitDrizzleSchema, emitFunctions, emitServer, emitShard, emitVectors, emitWorkflows, emitWranglerCronTriggers } from './packem_shared/GENERATED_HEADER-DUkXYD5R.mjs';
-export { emitApp } from './packem_shared/emitApp-DD0i1ks0.mjs';
-export { buildOpenApiDocument, emitOpenApi, emitOpenApiModule } from './packem_shared/buildOpenApiDocument-WxYTLh11.mjs';
-export { OPENRPC_VERSION, buildOpenRpcDocument, emitOpenRpc, emitOpenRpcModule } from './packem_shared/OPENRPC_VERSION-CjBUaolx.mjs';
-export { SCHEMA_SNAPSHOT_FILENAME, createCodegenProject, refreshCodegenProject, runCodegen } from './packem_shared/SCHEMA_SNAPSHOT_FILENAME-BUcGCXi3.mjs';
+export { GENERATED_HEADER, emitApi, emitCollections, emitContainers, emitCrons, emitDataModel, emitDrizzleSchema, emitFunctions, emitServer, emitShard, emitVectors, emitWorkflows, emitWranglerCronTriggers } from './packem_shared/GENERATED_HEADER-BullHnLo.mjs';
+export { emitApp } from './packem_shared/emitApp-BUN7hhlY.mjs';
+export { buildOpenApiDocument, emitOpenApi, emitOpenApiModule } from './packem_shared/buildOpenApiDocument-Bm56LsBb.mjs';
+export { OPENRPC_VERSION, buildOpenRpcDocument, emitOpenRpc, emitOpenRpcModule } from './packem_shared/OPENRPC_VERSION-D7MAVX3K.mjs';
+export { SCHEMA_SNAPSHOT_FILENAME, createCodegenProject, refreshCodegenProject, runCodegen } from './packem_shared/SCHEMA_SNAPSHOT_FILENAME-BAcxxSdB.mjs';
 export { SCHEMA_SNAPSHOT_VERSION, SchemaSnapshotParseError, buildSchemaSnapshot, diffSchemaSnapshots, evaluateSchemaDrift, parseSchemaSnapshot, serializeSchemaSnapshot } from './packem_shared/SCHEMA_SNAPSHOT_VERSION-wWGP2_5E.mjs';
 export { schemaFromIr } from './packem_shared/schemaFromIr-DTYsLBaA.mjs';
 export { LUNORA_ERROR_CODES, validatorIrToJsonSchema } from './packem_shared/LUNORA_ERROR_CODES-CySpQPD3.mjs';

package/dist/packem_shared/{GENERATED_HEADER-DUkXYD5R.mjs → GENERATED_HEADER-BullHnLo.mjs}

@@ -173,6 +173,7 @@ const GENERATED_HEADER = "// GENERATED by @lunora/codegen — do not edit.\n// R
 const baseSpecifiers = (useUmbrella = false) => useUmbrella ? {
   client: "lunorash/client",
   do: "lunorash/do",
+  flags: "lunorash/flags",
   server: "lunorash/server",
   serverDataModel: "lunorash/server/data-model",
   serverDrizzle: "lunorash/server/drizzle",
@@ -181,6 +182,7 @@ const baseSpecifiers = (useUmbrella = false) => useUmbrella ? {
 } : {
   client: "@lunora/client",
   do: "@lunora/do",
+  flags: "@lunora/flags",
   server: "@lunora/server",
   serverDataModel: "@lunora/server/data-model",
   serverDrizzle: "@lunora/server/drizzle",
@@ -828,7 +830,7 @@ export type Env = CloudflareBindings;`;
     readonly access: import("@lunora/cloudflare-access/context").AccessFacade;` : "";
   const flagsContextField = hasFlags ? `
     /** Feature-flag evaluation (OpenFeature). Reads are memoized per request; evaluations never throw — a provider error resolves to the supplied default. */
-    readonly flags: import("@lunora/flags").LunoraFlags;` : "";
+    readonly flags: import("${base.flags}").LunoraFlags;` : "";
   const hyperdriveActionField = hasHyperdrive ? `
     /**
      * External database access via Hyperdrive. Non-deterministic — available only in actions. Writes here are NOT tracked by Lunora live queries; subscriptions will not re-run on external DB changes.
@@ -1359,13 +1361,13 @@ const kvStub: Kv = {
 `
   };
 };
-const emitFlagsFragments = (hasFlags) => {
+const emitFlagsFragments = (hasFlags, flagsSpecifier) => {
   if (!hasFlags) {
     return EMPTY_HELPER_FRAGMENTS;
   }
   return {
     build: `
-            const flags: import("@lunora/flags").LunoraFlags = createFlags({
+            const flags: import("${flagsSpecifier}").LunoraFlags = createFlags({
                 hooks: flagsConfig.hooks,
                 logger: flagsConfig.logger,
                 provider: () => config.flags?.(env) ?? flagsConfig.provider(env),
@@ -1373,10 +1375,10 @@ const emitFlagsFragments = (hasFlags) => {
             });
 `,
     configField: `
-    flags?: (env: Record<string, unknown>) => import("@lunora/flags").Provider;`,
+    flags?: (env: Record<string, unknown>) => import("${flagsSpecifier}").Provider;`,
     contextField: `
                 flags,`,
-    importLines: [`import { createFlags } from "@lunora/flags";`, `import flagsConfig from "../flags.js";`],
+    importLines: [`import { createFlags } from "${flagsSpecifier}";`, `import flagsConfig from "../flags.js";`],
     stub: ""
   };
 };
@@ -1395,13 +1397,13 @@ const emitAccessFragments = (hasAccessFacade) => {
     stub: ""
   };
 };
-const emitFlagsOverrides = (flagKeys, hasFlags) => {
+const emitFlagsOverrides = (flagKeys, hasFlags, flagsSpecifier) => {
   if (!hasFlags) {
     return { constant: "", evaluateOverride: "", subscriptionOverride: "" };
   }
   const clientBuild = (targetingKey) => `
             const env = (this.env ?? {}) as Record<string, unknown>;
-            const flags: import("@lunora/flags").LunoraFlags = createFlags({
+            const flags: import("${flagsSpecifier}").LunoraFlags = createFlags({
                 hooks: flagsConfig.hooks,
                 logger: flagsConfig.logger,
                 provider: () => config.flags?.(env) ?? flagsConfig.provider(env),
@@ -1413,7 +1415,7 @@ const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number"
 `;
   const evaluateOverride = `
         protected override async evaluateFlags(context?: Record<string, unknown>): Promise<FlagsResult> {${clientBuild("undefined")}
-            const evalContext = context as import("@lunora/flags").EvaluationContext | undefined;
+            const evalContext = context as import("${flagsSpecifier}").EvaluationContext | undefined;
             const evaluations: FlagsResult["flags"] = [];
 
             for (const entry of LUNORA_FLAG_KEYS) {
@@ -1436,19 +1438,22 @@ const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number"
   const subscriptionOverride = `
         protected override runFlagSubscriptionRead(_functionPath: string, args: Record<string, unknown>, identity?: { identity?: Record<string, unknown>; userId?: string }): Promise<unknown> {${clientBuild("() => flagsConfig.identify?.({ identity: identity?.identity ?? null, userId: identity?.userId ?? null })")}
             const key = typeof args.key === "string" ? args.key : "";
-            const rawContext = typeof args.context === "object" && args.context !== null ? (args.context as Record<string, unknown>) : undefined;
-            // The reactive channel is public (any socket, no auth required): never
-            // let a subscriber-supplied targetingKey override the verified identity
-            // resolved above, or a client could read another user's flags. Other
-            // (non-identity) targeting attributes pass through unchanged.
-            const { targetingKey: _clientTargetingKey, ...safeContext } = rawContext ?? {};
-            const context = (rawContext === undefined ? undefined : safeContext) as import("@lunora/flags").EvaluationContext | undefined;
 
+            // SECURITY: the reactive channel is public (any socket, no auth). Serve
+            // ONLY statically-discovered flag keys — an arbitrary client-supplied key
+            // would let a subscriber probe the value of internal/unreleased flags the
+            // app never exposes. Unknown key ⇒ the "nothing to deliver" sentinel.
             // eslint-disable-next-line unicorn/no-null -- the base hook's "nothing to deliver" sentinel
-            if (key.length === 0) {
+            if (key.length === 0 || !LUNORA_FLAG_KEYS.some((entry) => entry.key === key)) {
                 return Promise.resolve(null);
             }
 
+            // SECURITY: evaluate under the socket's server-verified identity ONLY
+            // (the targetingKey resolved above). Client-supplied targeting context is
+            // NOT honored on this public channel — otherwise a subscriber could spoof
+            // targeting attributes (e.g. plan/role) to unlock a flag gated on them.
+            const context = undefined;
+
             if (args.type === "number") {
                 return flags.number(key, typeof args.default === "number" ? args.default : 0, context);
             }
@@ -1458,7 +1463,7 @@ const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number"
             }
 
             if (args.type === "object") {
-                return flags.object(key, (args.default ?? {}) as import("@lunora/flags").JsonValue, context);
+                return flags.object(key, (args.default ?? {}) as import("${flagsSpecifier}").JsonValue, context);
             }
 
             return flags.boolean(key, typeof args.default === "boolean" ? args.default : false, context);
@@ -2016,8 +2021,8 @@ const emitShard = ({
   const { build: aiBuild, configField: aiConfigField, contextField: aiContextField, stub: aiStub } = emitAiFragments(hasAi);
   const accessFragments = emitAccessFragments(hasAccessFacade);
   const kvFragments = emitKvFragments(hasKv);
-  const flagsFragments = emitFlagsFragments(hasFlags);
-  const flagsOverrides = emitFlagsOverrides(flagKeys, hasFlags);
+  const flagsFragments = emitFlagsFragments(hasFlags, base.flags);
+  const flagsOverrides = emitFlagsOverrides(flagKeys, hasFlags, base.flags);
   const analyticsFragments = emitAnalyticsFragments(hasAnalytics);
   const imagesFragments = emitImagesFragments(hasImages);
   const hyperdriveFragments = emitHyperdriveFragments(hasHyperdrive);

package/dist/packem_shared/{OPENRPC_VERSION-CjBUaolx.mjs → OPENRPC_VERSION-D7MAVX3K.mjs}

@@ -1,4 +1,4 @@
-import { GENERATED_HEADER } from './GENERATED_HEADER-DUkXYD5R.mjs';
+import { GENERATED_HEADER } from './GENERATED_HEADER-BullHnLo.mjs';
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 import { argsObjectSchema, LUNORA_ERROR_CODES } from './LUNORA_ERROR_CODES-CySpQPD3.mjs';
 

package/dist/packem_shared/{SCHEMA_SNAPSHOT_FILENAME-BUcGCXi3.mjs → SCHEMA_SNAPSHOT_FILENAME-BAcxxSdB.mjs}

@@ -24,10 +24,10 @@ import { discoverShapes } from './SHAPES_FILENAME-ChV7MqgE.mjs';
 import discoverStorageRulesMetadata from './discoverStorageRulesMetadata-Da8BKXcI.mjs';
 import { e as enclosingExportName$1 } from './discover-ast-CT6BgBr4.mjs';
 import { discoverWorkflows } from './WORKFLOWS_FILENAME-CCisG0Vy.mjs';
-import { buildStorageColumns, emitDataModel, emitApi, emitServer, emitFunctions, emitShard, emitCollections, emitContainers, emitWorkflows, emitQueues, emitCrons, emitVectors, emitDrizzleSchema, emitSeed, emitWranglerCronTriggers } from './GENERATED_HEADER-DUkXYD5R.mjs';
-import { emitApp } from './emitApp-DD0i1ks0.mjs';
-import { buildOpenApiDocument, emitOpenApiModule } from './buildOpenApiDocument-WxYTLh11.mjs';
-import { buildOpenRpcDocument, emitOpenRpcModule } from './OPENRPC_VERSION-CjBUaolx.mjs';
+import { buildStorageColumns, emitDataModel, emitApi, emitServer, emitFunctions, emitShard, emitCollections, emitContainers, emitWorkflows, emitQueues, emitCrons, emitVectors, emitDrizzleSchema, emitSeed, emitWranglerCronTriggers } from './GENERATED_HEADER-BullHnLo.mjs';
+import { emitApp } from './emitApp-BUN7hhlY.mjs';
+import { buildOpenApiDocument, emitOpenApiModule } from './buildOpenApiDocument-Bm56LsBb.mjs';
+import { buildOpenRpcDocument, emitOpenRpcModule } from './OPENRPC_VERSION-D7MAVX3K.mjs';
 import { buildSchemaSnapshot, serializeSchemaSnapshot } from './SCHEMA_SNAPSHOT_VERSION-wWGP2_5E.mjs';
 
 const HTTP_VERBS = /* @__PURE__ */ new Set(["delete", "get", "head", "options", "patch", "post", "put"]);

package/dist/packem_shared/{buildOpenApiDocument-WxYTLh11.mjs → buildOpenApiDocument-Bm56LsBb.mjs}

@@ -1,4 +1,4 @@
-import { GENERATED_HEADER } from './GENERATED_HEADER-DUkXYD5R.mjs';
+import { GENERATED_HEADER } from './GENERATED_HEADER-BullHnLo.mjs';
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 import { LUNORA_ERROR_CODES, objectSchema, argsObjectSchema, validatorIrToJsonSchema } from './LUNORA_ERROR_CODES-CySpQPD3.mjs';
 

package/dist/packem_shared/{emitApp-DD0i1ks0.mjs → emitApp-BUN7hhlY.mjs}

@@ -1,4 +1,4 @@
-import { GENERATED_HEADER } from './GENERATED_HEADER-DUkXYD5R.mjs';
+import { GENERATED_HEADER } from './GENERATED_HEADER-BullHnLo.mjs';
 
 const LONG_TAIL = [
   ["hasAi", "ai", "ai", "Override the Workers AI binding backing `ctx.ai` (defaults to `env.AI`)."],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/codegen",
-  "version": "1.0.0-alpha.24",
+  "version": "1.0.0-alpha.25",
   "description": "Code generator for Lunora: emits _generated/{api,server,dataModel}.ts from your schema",
   "keywords": [
     "cloudflare",
@@ -46,9 +46,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/advisor": "1.0.0-alpha.13",
+    "@lunora/advisor": "1.0.0-alpha.14",
     "@lunora/container": "1.0.0-alpha.5",
-    "@lunora/queue": "1.0.0-alpha.1",
+    "@lunora/queue": "1.0.0-alpha.2",
     "@lunora/scheduler": "1.0.0-alpha.4",
     "@lunora/values": "1.0.0-alpha.3",
     "@lunora/workflow": "1.0.0-alpha.5",