@lunora/codegen 1.0.0-alpha.24 → 1.0.0-alpha.26

package/dist/index.mjs

@@ -19,11 +19,11 @@ export { default as discoverSchema } from './packem_shared/discoverSchema-KYq55q
 export { SHAPES_FILENAME, discoverShapes } from './packem_shared/SHAPES_FILENAME-ChV7MqgE.mjs';
 export { default as discoverStorageRulesMetadata } from './packem_shared/discoverStorageRulesMetadata-Da8BKXcI.mjs';
 export { WORKFLOWS_FILENAME, discoverWorkflows } from './packem_shared/WORKFLOWS_FILENAME-CCisG0Vy.mjs';
-export { GENERATED_HEADER, emitApi, emitCollections, emitContainers, emitCrons, emitDataModel, emitDrizzleSchema, emitFunctions, emitServer, emitShard, emitVectors, emitWorkflows, emitWranglerCronTriggers } from './packem_shared/GENERATED_HEADER-DUkXYD5R.mjs';
-export { emitApp } from './packem_shared/emitApp-DD0i1ks0.mjs';
-export { buildOpenApiDocument, emitOpenApi, emitOpenApiModule } from './packem_shared/buildOpenApiDocument-WxYTLh11.mjs';
-export { OPENRPC_VERSION, buildOpenRpcDocument, emitOpenRpc, emitOpenRpcModule } from './packem_shared/OPENRPC_VERSION-CjBUaolx.mjs';
-export { SCHEMA_SNAPSHOT_FILENAME, createCodegenProject, refreshCodegenProject, runCodegen } from './packem_shared/SCHEMA_SNAPSHOT_FILENAME-BUcGCXi3.mjs';
+export { GENERATED_HEADER, emitApi, emitCollections, emitContainers, emitCrons, emitDataModel, emitDrizzleSchema, emitFunctions, emitServer, emitShard, emitVectors, emitWorkflows, emitWranglerCronTriggers } from './packem_shared/GENERATED_HEADER-CYaSI_qY.mjs';
+export { emitApp } from './packem_shared/emitApp-C38fHt_1.mjs';
+export { buildOpenApiDocument, emitOpenApi, emitOpenApiModule } from './packem_shared/buildOpenApiDocument-BlpXQe2K.mjs';
+export { OPENRPC_VERSION, buildOpenRpcDocument, emitOpenRpc, emitOpenRpcModule } from './packem_shared/OPENRPC_VERSION-CRe5l79E.mjs';
+export { SCHEMA_SNAPSHOT_FILENAME, createCodegenProject, refreshCodegenProject, runCodegen } from './packem_shared/SCHEMA_SNAPSHOT_FILENAME-cgOjZTVY.mjs';
 export { SCHEMA_SNAPSHOT_VERSION, SchemaSnapshotParseError, buildSchemaSnapshot, diffSchemaSnapshots, evaluateSchemaDrift, parseSchemaSnapshot, serializeSchemaSnapshot } from './packem_shared/SCHEMA_SNAPSHOT_VERSION-wWGP2_5E.mjs';
 export { schemaFromIr } from './packem_shared/schemaFromIr-DTYsLBaA.mjs';
 export { LUNORA_ERROR_CODES, validatorIrToJsonSchema } from './packem_shared/LUNORA_ERROR_CODES-CySpQPD3.mjs';

package/dist/packem_shared/{GENERATED_HEADER-DUkXYD5R.mjs → GENERATED_HEADER-CYaSI_qY.mjs}

@@ -173,6 +173,7 @@ const GENERATED_HEADER = "// GENERATED by @lunora/codegen — do not edit.\n// R
 const baseSpecifiers = (useUmbrella = false) => useUmbrella ? {
   client: "lunorash/client",
   do: "lunorash/do",
+  flags: "lunorash/flags",
   server: "lunorash/server",
   serverDataModel: "lunorash/server/data-model",
   serverDrizzle: "lunorash/server/drizzle",
@@ -181,6 +182,7 @@ const baseSpecifiers = (useUmbrella = false) => useUmbrella ? {
 } : {
   client: "@lunora/client",
   do: "@lunora/do",
+  flags: "@lunora/flags",
   server: "@lunora/server",
   serverDataModel: "@lunora/server/data-model",
   serverDrizzle: "@lunora/server/drizzle",
@@ -828,7 +830,7 @@ export type Env = CloudflareBindings;`;
     readonly access: import("@lunora/cloudflare-access/context").AccessFacade;` : "";
   const flagsContextField = hasFlags ? `
     /** Feature-flag evaluation (OpenFeature). Reads are memoized per request; evaluations never throw — a provider error resolves to the supplied default. */
-    readonly flags: import("@lunora/flags").LunoraFlags;` : "";
+    readonly flags: import("${base.flags}").LunoraFlags;` : "";
   const hyperdriveActionField = hasHyperdrive ? `
     /**
      * External database access via Hyperdrive. Non-deterministic — available only in actions. Writes here are NOT tracked by Lunora live queries; subscriptions will not re-run on external DB changes.
@@ -1359,13 +1361,13 @@ const kvStub: Kv = {
 `
   };
 };
-const emitFlagsFragments = (hasFlags) => {
+const emitFlagsFragments = (hasFlags, flagsSpecifier) => {
   if (!hasFlags) {
     return EMPTY_HELPER_FRAGMENTS;
   }
   return {
     build: `
-            const flags: import("@lunora/flags").LunoraFlags = createFlags({
+            const flags: import("${flagsSpecifier}").LunoraFlags = createFlags({
                 hooks: flagsConfig.hooks,
                 logger: flagsConfig.logger,
                 provider: () => config.flags?.(env) ?? flagsConfig.provider(env),
@@ -1373,10 +1375,10 @@ const emitFlagsFragments = (hasFlags) => {
             });
 `,
     configField: `
-    flags?: (env: Record<string, unknown>) => import("@lunora/flags").Provider;`,
+    flags?: (env: Record<string, unknown>) => import("${flagsSpecifier}").Provider;`,
     contextField: `
                 flags,`,
-    importLines: [`import { createFlags } from "@lunora/flags";`, `import flagsConfig from "../flags.js";`],
+    importLines: [`import { createFlags } from "${flagsSpecifier}";`, `import flagsConfig from "../flags.js";`],
     stub: ""
   };
 };
@@ -1395,13 +1397,13 @@ const emitAccessFragments = (hasAccessFacade) => {
     stub: ""
   };
 };
-const emitFlagsOverrides = (flagKeys, hasFlags) => {
+const emitFlagsOverrides = (flagKeys, hasFlags, flagsSpecifier) => {
   if (!hasFlags) {
     return { constant: "", evaluateOverride: "", subscriptionOverride: "" };
   }
   const clientBuild = (targetingKey) => `
             const env = (this.env ?? {}) as Record<string, unknown>;
-            const flags: import("@lunora/flags").LunoraFlags = createFlags({
+            const flags: import("${flagsSpecifier}").LunoraFlags = createFlags({
                 hooks: flagsConfig.hooks,
                 logger: flagsConfig.logger,
                 provider: () => config.flags?.(env) ?? flagsConfig.provider(env),
@@ -1413,7 +1415,7 @@ const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number"
 `;
   const evaluateOverride = `
         protected override async evaluateFlags(context?: Record<string, unknown>): Promise<FlagsResult> {${clientBuild("undefined")}
-            const evalContext = context as import("@lunora/flags").EvaluationContext | undefined;
+            const evalContext = context as import("${flagsSpecifier}").EvaluationContext | undefined;
             const evaluations: FlagsResult["flags"] = [];
 
             for (const entry of LUNORA_FLAG_KEYS) {
@@ -1436,19 +1438,22 @@ const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number"
   const subscriptionOverride = `
         protected override runFlagSubscriptionRead(_functionPath: string, args: Record<string, unknown>, identity?: { identity?: Record<string, unknown>; userId?: string }): Promise<unknown> {${clientBuild("() => flagsConfig.identify?.({ identity: identity?.identity ?? null, userId: identity?.userId ?? null })")}
             const key = typeof args.key === "string" ? args.key : "";
-            const rawContext = typeof args.context === "object" && args.context !== null ? (args.context as Record<string, unknown>) : undefined;
-            // The reactive channel is public (any socket, no auth required): never
-            // let a subscriber-supplied targetingKey override the verified identity
-            // resolved above, or a client could read another user's flags. Other
-            // (non-identity) targeting attributes pass through unchanged.
-            const { targetingKey: _clientTargetingKey, ...safeContext } = rawContext ?? {};
-            const context = (rawContext === undefined ? undefined : safeContext) as import("@lunora/flags").EvaluationContext | undefined;
 
+            // SECURITY: the reactive channel is public (any socket, no auth). Serve
+            // ONLY statically-discovered flag keys — an arbitrary client-supplied key
+            // would let a subscriber probe the value of internal/unreleased flags the
+            // app never exposes. Unknown key ⇒ the "nothing to deliver" sentinel.
             // eslint-disable-next-line unicorn/no-null -- the base hook's "nothing to deliver" sentinel
-            if (key.length === 0) {
+            if (key.length === 0 || !LUNORA_FLAG_KEYS.some((entry) => entry.key === key)) {
                 return Promise.resolve(null);
             }
 
+            // SECURITY: evaluate under the socket's server-verified identity ONLY
+            // (the targetingKey resolved above). Client-supplied targeting context is
+            // NOT honored on this public channel — otherwise a subscriber could spoof
+            // targeting attributes (e.g. plan/role) to unlock a flag gated on them.
+            const context = undefined;
+
             if (args.type === "number") {
                 return flags.number(key, typeof args.default === "number" ? args.default : 0, context);
             }
@@ -1458,7 +1463,7 @@ const LUNORA_FLAG_KEYS: ReadonlyArray<{ key: string; type: "boolean" | "number"
             }
 
             if (args.type === "object") {
-                return flags.object(key, (args.default ?? {}) as import("@lunora/flags").JsonValue, context);
+                return flags.object(key, (args.default ?? {}) as import("${flagsSpecifier}").JsonValue, context);
             }
 
             return flags.boolean(key, typeof args.default === "boolean" ? args.default : false, context);
@@ -2016,8 +2021,8 @@ const emitShard = ({
   const { build: aiBuild, configField: aiConfigField, contextField: aiContextField, stub: aiStub } = emitAiFragments(hasAi);
   const accessFragments = emitAccessFragments(hasAccessFacade);
   const kvFragments = emitKvFragments(hasKv);
-  const flagsFragments = emitFlagsFragments(hasFlags);
-  const flagsOverrides = emitFlagsOverrides(flagKeys, hasFlags);
+  const flagsFragments = emitFlagsFragments(hasFlags, base.flags);
+  const flagsOverrides = emitFlagsOverrides(flagKeys, hasFlags, base.flags);
   const analyticsFragments = emitAnalyticsFragments(hasAnalytics);
   const imagesFragments = emitImagesFragments(hasImages);
   const hyperdriveFragments = emitHyperdriveFragments(hasHyperdrive);
@@ -2049,7 +2054,10 @@ const emitShard = ({
   const maskData = maskMetadata ?? { columns: [] };
   const storageRulesData = storageRules ?? { rules: [] };
   const studioFeaturesData = studioFeatures ?? {
+    analytics: false,
+    auth: false,
     flags: false,
+    kv: false,
     mail: false,
     payments: false,
     queues: false,

package/dist/packem_shared/{OPENRPC_VERSION-CjBUaolx.mjs → OPENRPC_VERSION-CRe5l79E.mjs}

@@ -1,4 +1,4 @@
-import { GENERATED_HEADER } from './GENERATED_HEADER-DUkXYD5R.mjs';
+import { GENERATED_HEADER } from './GENERATED_HEADER-CYaSI_qY.mjs';
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 import { argsObjectSchema, LUNORA_ERROR_CODES } from './LUNORA_ERROR_CODES-CySpQPD3.mjs';
 

package/dist/packem_shared/{SCHEMA_SNAPSHOT_FILENAME-BUcGCXi3.mjs → SCHEMA_SNAPSHOT_FILENAME-cgOjZTVY.mjs}

@@ -24,10 +24,10 @@ import { discoverShapes } from './SHAPES_FILENAME-ChV7MqgE.mjs';
 import discoverStorageRulesMetadata from './discoverStorageRulesMetadata-Da8BKXcI.mjs';
 import { e as enclosingExportName$1 } from './discover-ast-CT6BgBr4.mjs';
 import { discoverWorkflows } from './WORKFLOWS_FILENAME-CCisG0Vy.mjs';
-import { buildStorageColumns, emitDataModel, emitApi, emitServer, emitFunctions, emitShard, emitCollections, emitContainers, emitWorkflows, emitQueues, emitCrons, emitVectors, emitDrizzleSchema, emitSeed, emitWranglerCronTriggers } from './GENERATED_HEADER-DUkXYD5R.mjs';
-import { emitApp } from './emitApp-DD0i1ks0.mjs';
-import { buildOpenApiDocument, emitOpenApiModule } from './buildOpenApiDocument-WxYTLh11.mjs';
-import { buildOpenRpcDocument, emitOpenRpcModule } from './OPENRPC_VERSION-CjBUaolx.mjs';
+import { buildStorageColumns, emitDataModel, emitApi, emitServer, emitFunctions, emitShard, emitCollections, emitContainers, emitWorkflows, emitQueues, emitCrons, emitVectors, emitDrizzleSchema, emitSeed, emitWranglerCronTriggers } from './GENERATED_HEADER-CYaSI_qY.mjs';
+import { emitApp } from './emitApp-C38fHt_1.mjs';
+import { buildOpenApiDocument, emitOpenApiModule } from './buildOpenApiDocument-BlpXQe2K.mjs';
+import { buildOpenRpcDocument, emitOpenRpcModule } from './OPENRPC_VERSION-CRe5l79E.mjs';
 import { buildSchemaSnapshot, serializeSchemaSnapshot } from './SCHEMA_SNAPSHOT_VERSION-wWGP2_5E.mjs';
 
 const HTTP_VERBS = /* @__PURE__ */ new Set(["delete", "get", "head", "options", "patch", "post", "put"]);
@@ -327,7 +327,10 @@ const discoverFeatureUsage = (project, lunoraDirectory) => {
 };
 const buildStudioFeatures = (usage, signals) => {
   return {
+    analytics: usage.analytics || signals.dependencies.has("@lunora/bindings/analytics"),
+    auth: signals.dependencies.has("@lunora/auth"),
     flags: usage.flags || signals.dependencies.has("@lunora/flags"),
+    kv: usage.kv || signals.dependencies.has("@lunora/bindings/kv"),
     mail: usage.mail || signals.dependencies.has("@lunora/mail"),
     payments: usage.payments || signals.dependencies.has("@lunora/payment"),
     queues: signals.queueCount > 0 || signals.dependencies.has("@lunora/queue"),
@@ -1021,7 +1024,11 @@ const runCodegen = (options) => {
     hasHyperdrive,
     hasHyperdriveGlobal: schema.tables.some((table) => table.shardMode === "global" && table.globalBackend === "hyperdrive"),
     hasImages,
-    hasKv,
+    // Auto-wire the studio's KV introspector on the SAME condition the nav
+    // gates its tab on (`studioFeatures.kv` = ctx.kv usage OR a declared
+    // `@lunora/bindings/kv` dep), so a visible KV tab always has a working
+    // backend — never the reverse. The `ctx.kv` type-seam stays usage-only.
+    hasKv: studioFeatures.kv,
     hasPayments,
     hasR2sql,
     hasQueue: queues.some((queue) => queue.mode === "push"),

package/dist/packem_shared/{buildOpenApiDocument-WxYTLh11.mjs → buildOpenApiDocument-BlpXQe2K.mjs}

@@ -1,4 +1,4 @@
-import { GENERATED_HEADER } from './GENERATED_HEADER-DUkXYD5R.mjs';
+import { GENERATED_HEADER } from './GENERATED_HEADER-CYaSI_qY.mjs';
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 import { LUNORA_ERROR_CODES, objectSchema, argsObjectSchema, validatorIrToJsonSchema } from './LUNORA_ERROR_CODES-CySpQPD3.mjs';
 

package/dist/packem_shared/{emitApp-DD0i1ks0.mjs → emitApp-C38fHt_1.mjs}

@@ -1,4 +1,4 @@
-import { GENERATED_HEADER } from './GENERATED_HEADER-DUkXYD5R.mjs';
+import { GENERATED_HEADER } from './GENERATED_HEADER-CYaSI_qY.mjs';
 
 const LONG_TAIL = [
   ["hasAi", "ai", "ai", "Override the Workers AI binding backing `ctx.ai` (defaults to `env.AI`)."],
@@ -27,6 +27,7 @@ const buildAccessImports = (hasAccess, hasAuth) => hasAccess ? [
   `import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";`,
   `import { createAccessResolver${hasAuth ? ", composeResolvers" : ""} } from "@lunora/cloudflare-access";`
 ] : [];
+const buildKvImports = (hasKv) => hasKv ? [`import { createKvIntrospectorFromEnv } from "@lunora/bindings/kv";`] : [];
 const buildImportLines = (options) => {
   const {
     hasAccess,
@@ -34,6 +35,7 @@ const buildImportLines = (options) => {
     hasFramework,
     hasGlobal,
     hasHyperdriveGlobal,
+    hasKv,
     hasQueue,
     hasScheduler,
     hasStorage,
@@ -70,6 +72,7 @@ const buildImportLines = (options) => {
       `import { createHyperdriveGlobalCtxDb } from "@lunora/hyperdrive/global";`,
       `import type { SqlCtxDbOptions, SqlExec } from "@lunora/sql-store";`
     ] : [],
+    ...buildKvImports(hasKv),
     ...hasScheduler ? [`import type { DurableObjectNamespaceLike } from "@lunora/scheduler";`, `import { createScheduler } from "@lunora/scheduler";`] : [],
     ...hasStorage ? [`import type { R2BucketLike, Storage } from "@lunora/storage";`, `import { createBucketStorage, createStorage } from "@lunora/storage";`] : [],
     ...hasWorkflow ? [`import { createWorkflowsRestClient } from "@lunora/workflow";`] : [],
@@ -351,6 +354,12 @@ const buildWorkerOptionLines = (options) => [
             Object.assign(options, this.buildStorageAdmin(env));
         }`
   ] : [],
+  // The studio's KV browser is wired zero-config: `createKvIntrospectorFromEnv`
+  // scans `env` for every bound Workers KV namespace, so each `kv_namespaces`
+  // entry in wrangler.jsonc appears under its binding name (any name, any count)
+  // with no manual `createKvIntrospector` call. A deployment with no KV binding
+  // yields an empty namespace list rather than crashing.
+  ...options.hasKv ? [`        options.kvIntrospector = createKvIntrospectorFromEnv(env);`] : [],
   ...options.hasAuth ? [
     `        if (this.authDeclaration) {
             options.authHandler = (request) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/codegen",
-  "version": "1.0.0-alpha.24",
+  "version": "1.0.0-alpha.26",
   "description": "Code generator for Lunora: emits _generated/{api,server,dataModel}.ts from your schema",
   "keywords": [
     "cloudflare",
@@ -46,9 +46,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/advisor": "1.0.0-alpha.13",
+    "@lunora/advisor": "1.0.0-alpha.14",
     "@lunora/container": "1.0.0-alpha.5",
-    "@lunora/queue": "1.0.0-alpha.1",
+    "@lunora/queue": "1.0.0-alpha.2",
     "@lunora/scheduler": "1.0.0-alpha.4",
     "@lunora/values": "1.0.0-alpha.3",
     "@lunora/workflow": "1.0.0-alpha.5",