@lunora/codegen 1.0.0-alpha.249 → 1.0.0-alpha.250

package/dist/packem_shared/{emitApp-D7U-51na.mjs → emitApp-T_My13i6.mjs}

@@ -1,9 +1,9 @@
-import{A as w}from"./capabilities-DJJWVEtk.mjs";import{i as k}from"./ir-DBSvhNa-.mjs";import{G as S}from"./shared-DjUziztz.mjs";const E=e=>`has${e.charAt(0).toUpperCase()}${e.slice(1)}`,g=w.map(({appMethod:e,key:t})=>[E(t),e.method,e.configKey,e.doc]),m=e=>g.some(([t])=>e[t]),D=e=>e?['import * as lunoraIdentityContract from "../identity.js";']:[],R=(e,t)=>e?['import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";',`import { createAccessResolver${t?", composeResolvers":""} } from "@lunora/cloudflare-access";`]:[],x=e=>e?['import { createKvIntrospectorFromEnv } from "@lunora/bindings/kv";']:[],A=e=>e?['import { createVectorAdminIntrospector } from "@lunora/bindings/vectors";']:[],C=e=>e?['import type { D1CtxDbOptions, D1DatabaseLike, D1Exec } from "@lunora/d1";','import { applyCdcChanges, createD1CtxDb, emitD1QueryCost, exportGlobalRows, facetGlobalColumn, importGlobalRows, listGlobalTables, readD1CdcChanges, readGlobalTablePage, retryingExec } from "@lunora/d1";']:[],O=e=>e?['import notifyConfig from "../notify.js";']:[],v=e=>(e.emailAgents?.length??0)>0,T=e=>v(e)?['import { dispatchAgentEmail } from "@lunora/agent/inbound";']:[],N=e=>v(e)?['import * as lunoraAgentDefinitions from "../agents.js";']:[],d=e=>e.tables.some(t=>k(t)),I=e=>{const{hasFramework:t,hasGlobal:r,hasHyperdriveGlobal:a,hasQueue:n,useUmbrella:i}=e,o=i?"lunorash/runtime":"@lunora/runtime",l=["ExecutionContextLike","HttpRouterLike","LunoraWorker","Route","ScheduledControllerLike","ShardNamespaceLike","WorkerOptions",...n?["TriggerTrace"]:[],...r?["GlobalIntrospector"]:[],...e.tables.length>0?["ShardingInfo"]:[],...t?["FrameworkHostHandler"]:[]],s=[...r||a?["createCrossShardRelationCapabilities"]:[],...d(e)?["createDynamicShardRegistry","createQueryCoordinator"]:[],"createWorker",...e.jurisdiction?["declareAppJurisdiction"]:[],"resolveLogArchiveFromEnv",...t?["withFrameworkWorker"]:[]].join(", ");return[`import type { ${[...l].toSorted((c,h)=>c.localeCompare(h)).join(", ")} } from "${o}";`,`import { ${s} } from "${o}";`]},L=e=>{const{hasAccess:t,hasAuth:r,hasGlobal:a,hasHyperdriveGlobal:n,hasKvIntrospector:i,hasQueue:o,hasScheduler:l,hasStorage:s,hasWorkflow:c,wantsOpenApi:h,wantsOpenRpc:u}=e;return[...r?['import type { AuthNamespaceLike, LunoraAuth, LunoraAuthOptions } from "@lunora/auth";','import { createAuth, createAuthAdmin, createAuthAuditReader, createDoAuthWiring, d1Executor, ensureMigrated, handleAuthRequest, lunoraD1Adapter } from "@lunora/auth";']:[],...R(t,r),...C(a),...n?['import type { HyperdriveEngine } from "@lunora/hyperdrive/global";','import { createHyperdriveGlobalCtxDb } from "@lunora/hyperdrive/global";','import type { SqlCtxDbOptions, SqlExec } from "@lunora/sql-store";']:[],...x(i),...A(e.hasVectors===!0),...l?['import type { DurableObjectNamespaceLike } from "@lunora/scheduler";','import { createScheduler } from "@lunora/scheduler";']:[],...s?['import type { R2BucketLike, R2S3Credentials, Storage } from "@lunora/storage";','import { createBucketStorage, createStorage } from "@lunora/storage";']:[],...c?['import { createWorkflowsRestClient } from "@lunora/workflow";']:[],...T(e),...I(e),"",...D(e.identity),...N(e),...a||n?['import schema from "../schema.js";']:[],...O(e.hasNotify),'import { LUNORA_CRONS } from "./crons.js";','import { LUNORA_FUNCTIONS } from "./functions.js";',...o?['import { createQueueCaptureSink, dispatchQueueBatch, shouldCaptureQueue } from "@lunora/queue";','import { LUNORA_QUEUE_REGISTRY } from "./queues.js";']:[],...e.wantsArchitecture?['import { architecture } from "./architecture.js";']:[],...h?['import { openApiSpec } from "./openapi.js";']:[],...u?['import { openRpcSpec } from "./openrpc.js";']:[],'import { createShardDO } from "./shard.js";',...e.hasVectors===!0?['import { LUNORA_VECTOR_INDEXES } from "./vectors.js";']:[]]},q=e=>[...e.hasStorage?["/** `.storage(...)` declaration — one bucket (required) plus optional extra named buckets and signed-URL config. Backs `ctx.storage` AND the studio file browser. */\ninterface StorageDeclaration<Env> {\n    /** The default R2 bucket binding (the bare `ctx.storage`). */\n    bucket: Selector<Env, R2BucketLike>;\n    /** Extra named buckets, reached via `ctx.storage.bucket(\"name\")` and the studio's bucket picker. */\n    buckets?: Record<string, Selector<Env, R2BucketLike>>;\n    /** Public base URL signed/public object URLs resolve against. Omit it and `ctx.storage` in a mutation, action or HTTP handler (and the studio's copy-URL) signs against the origin the request reached the worker on — no per-environment value to ship. Queries get no such fallback (a live query re-runs with no request behind it), so a query that signs URLs needs this set. */\n    publicBaseUrl?: Selector<Env, string>;\n    /** R2 S3-API credentials (`{ accountId, accessKeyId, secretAccessKey, bucket, jurisdiction? }`) enabling `ctx.storage.getPresignedUrl` — native S3 presigned URLs that hit R2 directly, bypassing the worker. Omit to use only the worker-signed `getSignedUrl` path. */\n    s3?: Selector<Env, R2S3Credentials>;\n    /** HMAC secret for signed URLs. */\n    signingSecret?: Selector<Env, string>;\n}"]:[],...e.hasScheduler?["/** `.scheduler(...)` declaration — the `SchedulerDO` namespace. Backs `ctx.scheduler` AND the studio's scheduled-jobs view. The origin its callbacks dispatch back to is not declared here: the DO reads `env.LUNORA_ORIGIN_URL` at fire time, because a caller-supplied dispatch target would be an SSRF vector. */\ninterface SchedulerDeclaration<Env> {\n    /** The `SchedulerDO` namespace binding (typically `env.SCHEDULER`). */\n    namespace: Selector<Env, DurableObjectNamespaceLike & ShardNamespaceLike>;\n}"]:[],...e.hasGlobal?["/** `.global(...)` declaration — the D1 binding backing `.global()` tables. Backs cross-tenant `ctx.db` reads/writes AND the studio's global data browser. */\ninterface GlobalDeclaration<Env> {\n    /** The D1 binding (typically `env.DB`). */\n    d1: Selector<Env, D1DatabaseLike>;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}"]:[],...e.hasHyperdriveGlobal?['/** `.hyperdriveGlobal(...)` declaration — backs `.global({ backend: "hyperdrive" })` tables on a Postgres/MySQL database via Hyperdrive. Stays reactive: the writer is injected as `globalDb` and the broadcast hook drives live queries. */\ninterface HyperdriveGlobalDeclaration<Env> {\n    /** The Hyperdrive engine — selects the Postgres or MySQL dialect. */\n    engine: HyperdriveEngine;\n    /** Build the `SqlExec` from `env` — e.g. `buildPgExec(fromPostgresJs(postgres(env.HYPERDRIVE.connectionString)))`. Cache the driver on the DO instance; rebuild lazily after hibernation. */\n    exec: (env: Env) => SqlExec;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}']:[],...e.hasAuth?['/** `.auth(...)` declaration — better-auth options plus the storage the adapter reads. Give it `d1` (the default) or `namespace` (a Durable Object that hosts the auth tables), never both. The builder owns the lazy build + `ensureMigrated` dance and wires `authHandler` / `resolveIdentity` / `authAdmin`. */\ninterface AuthDeclaration<Env> {\n    /** The D1 binding the auth SQL adapter is wired over (via `lunoraD1Adapter`). Omit only when using `namespace`. */\n    d1?: Selector<Env, unknown>;\n    /** Shared secret the worker presents on the object\'s internal session route. REQUIRED with `namespace`: the binding is reachable from any worker bound to it, so the secret — not the binding — is the authorization boundary. Without it identity resolution fails closed. */\n    internalSecret?: Selector<Env, string>;\n    /** Name of the Durable Object instance holding the auth tables. Defaults to `"auth"`. Set it to run separate auth objects (per deployment, per tenant) off one namespace. */\n    objectName?: Selector<Env, string>;\n    /** The auth Durable Object namespace — the DO-backed mode. Needed for `@better-auth/scim`, which requires native transactions that D1 has none of. The object owns the auth tables, so `/api/auth/*` and identity resolution both go through it. Typed as `AuthNamespaceLike` because `createDoAuthWiring` resolves through `idFromName` + `get` and has no `getByName` fallback — both members are load-bearing here, and `ShardNamespaceLike` leaves both optional. */\n    namespace?: Selector<Env, AuthNamespaceLike>;\n    /** Build the better-auth options from `env` (secret, plugins, email/password, …). */\n    options: (env: Env) => LunoraAuthOptions;\n}']:[]],j=e=>[...e.hasAccess?["    private accessSelector?: Selector<Env, CreateAccessResolverOptions | undefined>;"]:[],"    private adminToken?: Selector<Env, string>;",...e.hasAuth?["    private authDeclaration?: AuthDeclaration<Env>;"]:[],"    private cdcEnabled = false;","    private reactiveCacheConfig: boolean | { maxBytes?: number; maxEntries?: number } = false;",'    private maxRelationKeysLimit?: ShardConfig["maxRelationKeys"];','    private observabilitySink?: ShardConfig["observability"];','    private relationExistsPushDownMode?: ShardConfig["relationExistsPushDown"];',"    private readonly extendFns: ((env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>)[] = [];",...e.hasGlobal?["    private globalDeclaration?: GlobalDeclaration<Env>;"]:[],...e.hasHyperdriveGlobal?["    private hyperdriveGlobalDeclaration?: HyperdriveGlobalDeclaration<Env>;"]:[],"    private httpRouterApp?: HttpRouterLike;","    private readonly routeMap: Record<string, Route> = {};",...e.hasScheduler?["    private schedulerDeclaration?: SchedulerDeclaration<Env>;"]:[],...m(e)?["    private readonly shardExtras: Partial<ShardConfig> = {};"]:[],...d(e)?["    private shardRegistrySelector?: Selector<Env, ShardNamespaceLike>;"]:[],"    private shardSelector?: Selector<Env, ShardNamespaceLike>;",...e.hasSourcedTables?['    private sourceClientFactory?: NonNullable<ShardConfig["sourceClient"]>;']:[],...e.hasStorage?["    private storageDeclaration?: StorageDeclaration<Env>;"]:[]],G=e=>g.filter(([t])=>e[t]).map(([,t,r,a])=>`    /** ${a} */
-    public ${t}(factory: (env: Env) => ReturnType<NonNullable<ShardConfig["${r}"]>>): this {
+import{A as k}from"./capabilities-CqnIsyA9.mjs";import{i as S}from"./ir-DBSvhNa-.mjs";import{G as E}from"./shared-DjUziztz.mjs";const g=e=>k.filter(({key:r})=>e.capabilities.has(r)),D=(e,r)=>{const t=new Set([...e].filter(a=>a!=="vectors"));return r&&t.add("vectors"),t},m=e=>g(e).length>0,R=e=>e?['import * as lunoraIdentityContract from "../identity.js";']:[],x=(e,r)=>e?['import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";',`import { createAccessResolver${r?", composeResolvers":""} } from "@lunora/cloudflare-access";`]:[],A=e=>e?['import { createKvIntrospectorFromEnv } from "@lunora/bindings/kv";']:[],C=e=>e?['import { createVectorAdminIntrospector } from "@lunora/bindings/vectors";']:[],O=e=>e?['import type { D1CtxDbOptions, D1DatabaseLike, D1Exec } from "@lunora/d1";','import { applyCdcChanges, createD1CtxDb, emitD1QueryCost, exportGlobalRows, facetGlobalColumn, importGlobalRows, listGlobalTables, readD1CdcChanges, readGlobalTablePage, retryingExec } from "@lunora/d1";']:[],T=e=>e?['import notifyConfig from "../notify.js";']:[],v=e=>(e.emailAgents?.length??0)>0,N=e=>v(e)?['import { dispatchAgentEmail } from "@lunora/agent/inbound";']:[],q=e=>v(e)?['import * as lunoraAgentDefinitions from "../agents.js";']:[],d=e=>e.tables.some(r=>S(r)),I=e=>{const{hasFramework:r,hasGlobal:t,hasHyperdriveGlobal:a,hasQueue:n,useUmbrella:o}=e,i=o?"lunorash/runtime":"@lunora/runtime",l=["ExecutionContextLike","HttpRouterLike","LunoraWorker","Route","ScheduledControllerLike","ShardNamespaceLike","WorkerOptions",...n?["TriggerTrace"]:[],...t?["GlobalIntrospector"]:[],...e.tables.length>0?["ShardingInfo"]:[],...r?["FrameworkHostHandler"]:[]],c=[...t||a?["createCrossShardRelationCapabilities"]:[],...d(e)?["createDynamicShardRegistry","createQueryCoordinator"]:[],"createWorker",...e.jurisdiction?["declareAppJurisdiction"]:[],"resolveLogArchiveFromEnv",...r?["withFrameworkWorker"]:[]].join(", ");return[`import type { ${[...l].toSorted((s,h)=>s.localeCompare(h)).join(", ")} } from "${i}";`,`import { ${c} } from "${i}";`]},L=e=>{const{hasAccess:r,hasAuth:t,hasGlobal:a,hasHyperdriveGlobal:n,hasKvIntrospector:o,hasQueue:i,hasScheduler:l,hasStorage:c,hasWorkflow:s,wantsOpenApi:h,wantsOpenRpc:u}=e;return[...t?['import type { AuthNamespaceLike, LunoraAuth, LunoraAuthOptions } from "@lunora/auth";','import { authDiscoveryPathsFor, createAuth, createAuthAdmin, createAuthAuditReader, createDoAuthWiring, d1Executor, ensureMigrated, handleAuthDiscoveryRequest, handleAuthRequest, lunoraD1Adapter } from "@lunora/auth";']:[],...x(r,t),...O(a),...n?['import type { HyperdriveEngine } from "@lunora/hyperdrive/global";','import { createHyperdriveGlobalCtxDb } from "@lunora/hyperdrive/global";','import type { SqlCtxDbOptions, SqlExec } from "@lunora/sql-store";']:[],...A(o),...C(e.hasVectors===!0),...l?['import type { DurableObjectNamespaceLike } from "@lunora/scheduler";','import { createScheduler } from "@lunora/scheduler";']:[],...c?['import type { R2BucketLike, R2S3Credentials, Storage } from "@lunora/storage";','import { createBucketStorage, createStorage } from "@lunora/storage";']:[],...s?['import { createWorkflowsRestClient } from "@lunora/workflow";']:[],...N(e),...I(e),"",...R(e.identity),...q(e),...a||n?['import schema from "../schema.js";']:[],...T(e.hasNotify),'import { LUNORA_CRONS } from "./crons.js";','import { LUNORA_FUNCTIONS } from "./functions.js";',...i?['import { createQueueCaptureSink, dispatchQueueBatch, shouldCaptureQueue } from "@lunora/queue";','import { LUNORA_QUEUE_REGISTRY } from "./queues.js";']:[],...e.wantsArchitecture?['import { architecture } from "./architecture.js";']:[],...h?['import { openApiSpec } from "./openapi.js";']:[],...u?['import { openRpcSpec } from "./openrpc.js";']:[],'import { createShardDO } from "./shard.js";',...e.hasVectors===!0?['import { LUNORA_VECTOR_INDEXES } from "./vectors.js";']:[]]},j=e=>[...e.hasStorage?["/** `.storage(...)` declaration — one bucket (required) plus optional extra named buckets and signed-URL config. Backs `ctx.storage` AND the studio file browser. */\ninterface StorageDeclaration<Env> {\n    /** The default R2 bucket binding (the bare `ctx.storage`). */\n    bucket: Selector<Env, R2BucketLike>;\n    /** Extra named buckets, reached via `ctx.storage.bucket(\"name\")` and the studio's bucket picker. */\n    buckets?: Record<string, Selector<Env, R2BucketLike>>;\n    /** Public base URL signed/public object URLs resolve against. Omit it and `ctx.storage` in a mutation, action or HTTP handler (and the studio's copy-URL) signs against the origin the request reached the worker on — no per-environment value to ship. Queries get no such fallback (a live query re-runs with no request behind it), so a query that signs URLs needs this set. */\n    publicBaseUrl?: Selector<Env, string>;\n    /** R2 S3-API credentials (`{ accountId, accessKeyId, secretAccessKey, bucket, jurisdiction? }`) enabling `ctx.storage.getPresignedUrl` — native S3 presigned URLs that hit R2 directly, bypassing the worker. Omit to use only the worker-signed `getSignedUrl` path. */\n    s3?: Selector<Env, R2S3Credentials>;\n    /** HMAC secret for signed URLs. */\n    signingSecret?: Selector<Env, string>;\n}"]:[],...e.hasScheduler?["/** `.scheduler(...)` declaration — the `SchedulerDO` namespace. Backs `ctx.scheduler` AND the studio's scheduled-jobs view. The origin its callbacks dispatch back to is not declared here: the DO reads `env.LUNORA_ORIGIN_URL` at fire time, because a caller-supplied dispatch target would be an SSRF vector. */\ninterface SchedulerDeclaration<Env> {\n    /** The `SchedulerDO` namespace binding (typically `env.SCHEDULER`). */\n    namespace: Selector<Env, DurableObjectNamespaceLike & ShardNamespaceLike>;\n}"]:[],...e.hasGlobal?["/** `.global(...)` declaration — the D1 binding backing `.global()` tables. Backs cross-tenant `ctx.db` reads/writes AND the studio's global data browser. */\ninterface GlobalDeclaration<Env> {\n    /** The D1 binding (typically `env.DB`). */\n    d1: Selector<Env, D1DatabaseLike>;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}"]:[],...e.hasHyperdriveGlobal?['/** `.hyperdriveGlobal(...)` declaration — backs `.global({ backend: "hyperdrive" })` tables on a Postgres/MySQL database via Hyperdrive. Stays reactive: the writer is injected as `globalDb` and the broadcast hook drives live queries. */\ninterface HyperdriveGlobalDeclaration<Env> {\n    /** The Hyperdrive engine — selects the Postgres or MySQL dialect. */\n    engine: HyperdriveEngine;\n    /** Build the `SqlExec` from `env` — e.g. `buildPgExec(fromPostgresJs(postgres(env.HYPERDRIVE.connectionString)))`. Cache the driver on the DO instance; rebuild lazily after hibernation. */\n    exec: (env: Env) => SqlExec;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}']:[],...e.hasAuth?['/** `.auth(...)` declaration — better-auth options plus the storage the adapter reads. Give it `d1` (the default) or `namespace` (a Durable Object that hosts the auth tables), never both. The builder owns the lazy build + `ensureMigrated` dance and wires `authHandler` / `resolveIdentity` / `authAdmin`. */\ninterface AuthDeclaration<Env> {\n    /** The D1 binding the auth SQL adapter is wired over (via `lunoraD1Adapter`). Omit only when using `namespace`. */\n    d1?: Selector<Env, unknown>;\n    /** Shared secret the worker presents on the object\'s internal session route. REQUIRED with `namespace`: the binding is reachable from any worker bound to it, so the secret — not the binding — is the authorization boundary. Without it identity resolution fails closed. */\n    internalSecret?: Selector<Env, string>;\n    /** Name of the Durable Object instance holding the auth tables. Defaults to `"auth"`. Set it to run separate auth objects (per deployment, per tenant) off one namespace. */\n    objectName?: Selector<Env, string>;\n    /** The auth Durable Object namespace — the DO-backed mode. Needed for `@better-auth/scim`, which requires native transactions that D1 has none of. The object owns the auth tables, so `/api/auth/*` and identity resolution both go through it. Typed as `AuthNamespaceLike` because `createDoAuthWiring` resolves through `idFromName` + `get` and has no `getByName` fallback — both members are load-bearing here, and `ShardNamespaceLike` leaves both optional. */\n    namespace?: Selector<Env, AuthNamespaceLike>;\n    /** Build the better-auth options from `env` (secret, plugins, email/password, …). */\n    options: (env: Env) => LunoraAuthOptions;\n}']:[]],G=e=>[...e.hasAccess?["    private accessSelector?: Selector<Env, CreateAccessResolverOptions | undefined>;"]:[],"    private adminToken?: Selector<Env, string>;",...e.hasAuth?["    private authDeclaration?: AuthDeclaration<Env>;"]:[],"    private cdcEnabled = false;","    private reactiveCacheConfig: boolean | { maxBytes?: number; maxEntries?: number } = false;",'    private maxRelationKeysLimit?: ShardConfig["maxRelationKeys"];','    private observabilitySink?: ShardConfig["observability"];','    private relationExistsPushDownMode?: ShardConfig["relationExistsPushDown"];',"    private readonly extendFns: ((env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>)[] = [];",...e.hasGlobal?["    private globalDeclaration?: GlobalDeclaration<Env>;"]:[],...e.hasHyperdriveGlobal?["    private hyperdriveGlobalDeclaration?: HyperdriveGlobalDeclaration<Env>;"]:[],"    private httpRouterApp?: HttpRouterLike;","    private readonly routeMap: Record<string, Route> = {};",...e.hasScheduler?["    private schedulerDeclaration?: SchedulerDeclaration<Env>;"]:[],...m(e)?["    private readonly shardExtras: Partial<ShardConfig> = {};"]:[],...d(e)?["    private shardRegistrySelector?: Selector<Env, ShardNamespaceLike>;"]:[],"    private shardSelector?: Selector<Env, ShardNamespaceLike>;",...e.hasSourcedTables?['    private sourceClientFactory?: NonNullable<ShardConfig["sourceClient"]>;']:[],...e.hasStorage?["    private storageDeclaration?: StorageDeclaration<Env>;"]:[]],B=e=>g(e).map(({appMethod:{configKey:r,doc:t,method:a}})=>`    /** ${t} */
+    public ${a}(factory: (env: Env) => ReturnType<NonNullable<ShardConfig["${r}"]>>): this {
         this.shardExtras.${r} = factory as NonNullable<ShardConfig["${r}"]>;
 
         return this;
-    }`),B=e=>[...e.hasAccess?["    /** Wire Cloudflare Access (Zero Trust) — feeds the verified Access identity into `ctx.auth` / RLS via `resolveIdentity`. Call it with no argument when the Access policy is attached to the Worker (the identity arrives on the execution context; nothing to configure); pass `teamDomain` + `aud` for a hostname-scoped Access application, whose `Cf-Access-Jwt-Assertion` JWT is verified against your team JWKS. When `.auth(...)` is also configured, Access is composed ahead of it (Access wins when it authenticated the caller; everyone else falls through to the app session). */\n    public access(selector?: Selector<Env, CreateAccessResolverOptions>): this {\n        this.accessSelector = selector ?? (() => undefined);\n\n        return this;\n    }"]:[],`    /** Bearer token gating the \`/_lunora/admin/*\` endpoints the studio calls. */
+    }`),P=e=>[...e.hasAccess?["    /** Wire Cloudflare Access (Zero Trust) — feeds the verified Access identity into `ctx.auth` / RLS via `resolveIdentity`. Call it with no argument when the Access policy is attached to the Worker (the identity arrives on the execution context; nothing to configure); pass `teamDomain` + `aud` for a hostname-scoped Access application, whose `Cf-Access-Jwt-Assertion` JWT is verified against your team JWKS. When `.auth(...)` is also configured, Access is composed ahead of it (Access wins when it authenticated the caller; everyone else falls through to the app session). */\n    public access(selector?: Selector<Env, CreateAccessResolverOptions>): this {\n        this.accessSelector = selector ?? (() => undefined);\n\n        return this;\n    }"]:[],`    /** Bearer token gating the \`/_lunora/admin/*\` endpoints the studio calls. */
     public admin(selector: Selector<Env, string>): this {
         this.adminToken = selector;
 
@@ -62,8 +62,8 @@ import{A as w}from"./capabilities-DJJWVEtk.mjs";import{i as k}from"./ir-DBSvhNa-
         this.storageDeclaration = declaration;
 
         return this;
-    }`]:[],...G(e)],P=e=>{const t=a=>e.hasScheduler?`
-                              ...(this.schedulerDeclaration ? { scheduler: this.resolveScheduler(env) as unknown as ${a}["scheduler"] } : {}),`:"",r=["            cdc: this.cdcEnabled,","            reactiveCache: this.reactiveCacheConfig,","            ...(this.maxRelationKeysLimit === undefined ? {} : { maxRelationKeys: this.maxRelationKeysLimit }),","            ...(this.observabilitySink === undefined ? {} : { observability: this.observabilitySink }),","            ...(this.relationExistsPushDownMode === undefined ? {} : { relationExistsPushDown: this.relationExistsPushDownMode }),",...e.hasGlobal?[`            ...(this.globalDeclaration
+    }`]:[],...B(e)],W=e=>{const r=a=>e.hasScheduler?`
+                              ...(this.schedulerDeclaration ? { scheduler: this.resolveScheduler(env) as unknown as ${a}["scheduler"] } : {}),`:"",t=["            cdc: this.cdcEnabled,","            reactiveCache: this.reactiveCacheConfig,","            ...(this.maxRelationKeysLimit === undefined ? {} : { maxRelationKeys: this.maxRelationKeysLimit }),","            ...(this.observabilitySink === undefined ? {} : { observability: this.observabilitySink }),","            ...(this.relationExistsPushDownMode === undefined ? {} : { relationExistsPushDown: this.relationExistsPushDownMode }),",...e.hasGlobal?[`            ...(this.globalDeclaration
                 ? {
                       d1: (rawEnv: Record<string, unknown>, request?: { bookmark?: string; cdc?: boolean; cdcRetentionMs?: number; identity?: Record<string, unknown>; onBookmark?: (bookmark: string | undefined) => void; userId?: string | null }) => {
                           const env = rawEnv as Env;
@@ -79,7 +79,7 @@ import{A as w}from"./capabilities-DJJWVEtk.mjs";import{i as k}from"./ir-DBSvhNa-
                               : undefined;
 
                           return createD1CtxDb({
-                              ...(crossShard ? { crossShardCounter: crossShard.crossShardCounter, crossShardReader: crossShard.crossShardReader } : {}),${t("D1CtxDbOptions")}
+                              ...(crossShard ? { crossShardCounter: crossShard.crossShardCounter, crossShardReader: crossShard.crossShardReader } : {}),${r("D1CtxDbOptions")}
                               ...(request?.cdcRetentionMs === undefined ? {} : { cdcRetentionMs: request.cdcRetentionMs }),
                               auth: { identity: request?.identity ?? null, userId: request?.userId ?? null },
                               // Forwarded from the shard's own \`cdc\` config, so ONE
@@ -113,7 +113,7 @@ import{A as w}from"./capabilities-DJJWVEtk.mjs";import{i as k}from"./ir-DBSvhNa-
                               : undefined;
 
                           return createHyperdriveGlobalCtxDb({
-                              ...(crossShard ? { crossShardCounter: crossShard.crossShardCounter, crossShardReader: crossShard.crossShardReader } : {}),${t("SqlCtxDbOptions")}
+                              ...(crossShard ? { crossShardCounter: crossShard.crossShardCounter, crossShardReader: crossShard.crossShardReader } : {}),${r("SqlCtxDbOptions")}
                               ...(request?.cdcRetentionMs === undefined ? {} : { cdcRetentionMs: request.cdcRetentionMs }),
                               auth: { identity: request?.identity ?? null, userId: request?.userId ?? null },
                               // See the D1 twin: one \`cdc\` switch, both changelogs.
@@ -134,13 +134,13 @@ import{A as w}from"./capabilities-DJJWVEtk.mjs";import{i as k}from"./ir-DBSvhNa-
                 ? {
                       scheduler: (rawEnv: Record<string, unknown>) => this.resolveScheduler(rawEnv as Env),
                   }
-                : {}),`]:[],...d(e)?["            ...(this.shardRegistrySelector ? { shardRegistry: (rawEnv: Record<string, unknown>) => this.shardRegistrySelector?.(rawEnv as Env) } : {}),"]:[],...e.hasSourcedTables?["            ...(this.sourceClientFactory === undefined ? {} : { sourceClient: this.sourceClientFactory }),"]:[],...e.hasStorage?["            ...(this.storageDeclaration ? { storage: (rawEnv: Record<string, unknown>, origin?: string) => this.resolveStorage(rawEnv as Env, origin) } : {}),"]:[],...m(e)?["            ...this.shardExtras,"]:[]];return r.length>0?`
-${r.join(`
+                : {}),`]:[],...d(e)?["            ...(this.shardRegistrySelector ? { shardRegistry: (rawEnv: Record<string, unknown>) => this.shardRegistrySelector?.(rawEnv as Env) } : {}),"]:[],...e.hasSourcedTables?["            ...(this.sourceClientFactory === undefined ? {} : { sourceClient: this.sourceClientFactory }),"]:[],...e.hasStorage?["            ...(this.storageDeclaration ? { storage: (rawEnv: Record<string, unknown>, origin?: string) => this.resolveStorage(rawEnv as Env, origin) } : {}),"]:[],...m(e)?["            ...this.shardExtras,"]:[]];return t.length>0?`
+${t.join(`
 `)}
-        `:""},W=e=>e.jurisdiction&&e.jurisdictionPinsAuth===!0?`
+        `:""},_=e=>e.jurisdiction&&e.jurisdictionPinsAuth===!0?`
                 // The schema's jurisdiction pins the auth object like every other DO.
-                jurisdiction: ${JSON.stringify(e.jurisdiction)},`:"",_=e=>typeof e=="string"?`{ mode: { kind: ${JSON.stringify(e)} } }`:`{ mode: { field: ${JSON.stringify(e.field)}, kind: "shardBy" } }`,$=e=>[...e.tables.length>0?[`        const tableSharding = new Map<string, ShardingInfo>([
-${e.tables.map(t=>`            [${JSON.stringify(t.name)}, ${_(t.shardMode)}],`).join(`
+                jurisdiction: ${JSON.stringify(e.jurisdiction)},`:"",$=e=>typeof e=="string"?`{ mode: { kind: ${JSON.stringify(e)} } }`:`{ mode: { field: ${JSON.stringify(e.field)}, kind: "shardBy" } }`,H=e=>[...e.tables.length>0?[`        const tableSharding = new Map<string, ShardingInfo>([
+${e.tables.map(r=>`            [${JSON.stringify(r.name)}, ${$(r.shardMode)}],`).join(`
 `)}
         ]);
 
@@ -149,7 +149,7 @@ ${e.tables.map(t=>`            [${JSON.stringify(t.name)}, ${_(t.shardMode)}],`)
 
         if (shardRegistry) {
             options.queryCoordinator = createQueryCoordinator({ registry: createDynamicShardRegistry({ ${e.jurisdiction?`jurisdiction: ${JSON.stringify(e.jurisdiction)}, `:""}namespace: shardRegistry }) });
-        }`]:[]],H=e=>[...$(e),...e.hasScheduler?[`        if (this.schedulerDeclaration) {
+        }`]:[]],U=e=>[...H(e),...e.hasScheduler?[`        if (this.schedulerDeclaration) {
             options.schedulerDO = this.schedulerDeclaration.namespace(env);
         }`]:[],...e.hasWorkflow?[`        options.workflowsClient = (workflowEnv) => {
             const source = workflowEnv as Record<string, unknown>;
@@ -211,12 +211,19 @@ ${e.tables.map(t=>`            [${JSON.stringify(t.name)}, ${_(t.shardMode)}],`)
             // than more emitted code: request-path logic in generated output can only be
             // typechecked, never unit-tested.
             const authWiring = createDoAuthWiring({
-                internalSecret: authDeclaration.internalSecret?.(env),${W(e)}
+                // The OAuth discovery documents (an \`mcp()\` resource's metadata, the
+                // issuer's) are derived here from the declared options, so the worker
+                // forwards only those exact paths and no other probe reaches the object.
+                // Memoised on the declaration: a framework-hosted worker rebuilds these
+                // options per request, and \`options(env)\` rebuilds every plugin.
+                discoveryPaths: authDiscoveryPathsFor(authDeclaration, env),
+                internalSecret: authDeclaration.internalSecret?.(env),${_(e)}
                 namespace: authNamespace(env),
                 objectName: authDeclaration.objectName?.(env),
             });
 
             options.authHandler = authWiring.authHandler;
+            options.authDiscoveryHandler = authWiring.discoveryHandler;
             options.resolveIdentity = authWiring.resolveIdentity;
             // The audit log lives in the object like every other auth table, so the feed
             // reads through it rather than querying D1.
@@ -234,6 +241,13 @@ ${e.tables.map(t=>`            [${JSON.stringify(t.name)}, ${_(t.shardMode)}],`)
 
                 return auth ? handleAuthRequest(auth, request) : Promise.resolve(undefined);
             };
+            // The OAuth discovery documents outside \`/api/auth\` (served only with an
+            // \`mcp()\` or \`oauthProvider()\` plugin, and only after the app's own routes).
+            options.authDiscoveryHandler = (request) => {
+                const auth = getAuth();
+
+                return auth ? handleAuthDiscoveryRequest(auth, request) : Promise.resolve(undefined);
+            };
             options.resolveIdentity = async (request) => {
                 const auth = getAuth();
 
@@ -287,16 +301,16 @@ ${e.tables.map(t=>`            [${JSON.stringify(t.name)}, ${_(t.shardMode)}],`)
         }`:`        if (this.accessSelector) {
             options.resolveIdentity = createAccessResolver(this.accessSelector(env));
         }`]:[],...e.voiceAgents&&e.voiceAgents.length>0?[`        options.voiceAgents = {
-${e.voiceAgents.map(t=>`            ${JSON.stringify(t.exportName)}: (env as Record<string, unknown>)[${JSON.stringify(t.bindingName)}] as ShardNamespaceLike,`).join(`
+${e.voiceAgents.map(r=>`            ${JSON.stringify(r.exportName)}: (env as Record<string, unknown>)[${JSON.stringify(r.bindingName)}] as ShardNamespaceLike,`).join(`
 `)}
-        };`]:[]],U=e=>["            cronJobs: LUNORA_CRONS,","            functions: LUNORA_FUNCTIONS,",...e.identity?[`            identity: lunoraIdentityContract.${e.identity.exportName},`]:[],...e.jurisdiction?[`            jurisdiction: ${JSON.stringify(e.jurisdiction)},`]:[],...e.wantsArchitecture?["            architecture,"]:[],...e.wantsOpenApi?["            openApiSpec,"]:[],...e.wantsOpenRpc?["            openRpcSpec,"]:[],...e.hasQueue?["            queue: (batch: unknown, queueEnv: unknown, _context: ExecutionContextLike, trigger: TriggerTrace): Promise<void> =>","                dispatchQueueBatch(batch as Parameters<typeof dispatchQueueBatch>[0], LUNORA_QUEUE_REGISTRY, {","                    capture: shouldCaptureQueue(queueEnv as Record<string, unknown>)",`                        ? createQueueCaptureSink(queueEnv as Record<string, unknown>${e.jurisdiction?`, { jurisdiction: ${JSON.stringify(e.jurisdiction)} }`:""})`,"                        : undefined,","                    env: queueEnv as Record<string, unknown>,","                    traceparent: trigger.traceparent,","                }),"]:[],"            ...(this.httpRouterApp ? { httpRouter: this.httpRouterApp } : {}),","            routes: this.routeMap,","            shardDO: this.shardSelector?.(env) ?? (undefined as unknown as ShardNamespaceLike),"],F=e=>e.hasScheduler?`
+        };`]:[]],F=e=>["            cronJobs: LUNORA_CRONS,","            functions: LUNORA_FUNCTIONS,",...e.identity?[`            identity: lunoraIdentityContract.${e.identity.exportName},`]:[],...e.jurisdiction?[`            jurisdiction: ${JSON.stringify(e.jurisdiction)},`]:[],...e.wantsArchitecture?["            architecture,"]:[],...e.wantsOpenApi?["            openApiSpec,"]:[],...e.wantsOpenRpc?["            openRpcSpec,"]:[],...e.hasQueue?["            queue: (batch: unknown, queueEnv: unknown, _context: ExecutionContextLike, trigger: TriggerTrace): Promise<void> =>","                dispatchQueueBatch(batch as Parameters<typeof dispatchQueueBatch>[0], LUNORA_QUEUE_REGISTRY, {","                    capture: shouldCaptureQueue(queueEnv as Record<string, unknown>)",`                        ? createQueueCaptureSink(queueEnv as Record<string, unknown>${e.jurisdiction?`, { jurisdiction: ${JSON.stringify(e.jurisdiction)} }`:""})`,"                        : undefined,","                    env: queueEnv as Record<string, unknown>,","                    traceparent: trigger.traceparent,","                }),"]:[],"            ...(this.httpRouterApp ? { httpRouter: this.httpRouterApp } : {}),","            routes: this.routeMap,","            shardDO: this.shardSelector?.(env) ?? (undefined as unknown as ShardNamespaceLike),"],M=e=>e.hasScheduler?`
     /** Resolve the \`SchedulerDO\`-backed scheduler for this env; \`undefined\` until the namespace is wired. */
     private resolveScheduler(env: Env): ReturnType<typeof createScheduler> | undefined {
         const namespace = this.schedulerDeclaration?.namespace(env);
 
         return namespace ? createScheduler({${e.jurisdiction?` jurisdiction: ${JSON.stringify(e.jurisdiction)},`:""} namespace }) : undefined;
     }
-`:"",M=e=>e?`
+`:"",Q=e=>e?`
     /**
      * One bucket's \`Storage\`, signing under the name it is registered as.
      *
@@ -401,7 +415,7 @@ ${e.voiceAgents.map(t=>`            ${JSON.stringify(t.exportName)}: (env as Rec
             storageUpload: (key: string, body: ArrayBuffer, opts?: { bucket?: string; contentType?: string; sha256?: string }) => pick(opts?.bucket).upload(key, body, opts),
         };
     }
-`:"",Q=e=>e?`
+`:"",J=e=>e?`
 /**
  * Adapt the raw D1 binding to \`@lunora/d1\`'s \`D1Exec\` (reads via \`all\`, writes via \`run\`, and — when the binding exposes it — several writes in one round trip via \`batch\`).
  *
@@ -623,9 +637,9 @@ const buildGlobalCdcApplier =
 
         return request.changes.length;
     };
-`:"",K=e=>[...e.hasAuth?["AuthDeclaration"]:[],"ComposedApp",...e.hasGlobal?["GlobalDeclaration"]:[],"LunoraConfig",...e.hasScheduler?["SchedulerDeclaration"]:[],"Selector",...e.hasStorage?["StorageDeclaration"]:[]].toSorted((t,r)=>t.localeCompare(r)).join(", "),Y=e=>{const t={...e,hasVectors:(e.hasVectors??!0)&&(e.vectorIndexCount??0)>0},{hasAuth:r}=t,a=q(t),n=H(t),i=r?`        let auth: LunoraAuth | null = null;
+`:"",K=e=>[...e.hasAuth?["AuthDeclaration"]:[],"ComposedApp",...e.hasGlobal?["GlobalDeclaration"]:[],"LunoraConfig",...e.hasScheduler?["SchedulerDeclaration"]:[],"Selector",...e.hasStorage?["StorageDeclaration"]:[]].toSorted((r,t)=>r.localeCompare(t)).join(", "),X=e=>{const r=(e.hasVectors??!0)&&(e.vectorIndexCount??0)>0,t={...e,capabilities:D(e.capabilities,r),hasVectors:r},{hasAuth:a}=t,n=j(t),o=U(t),i=a?`        let auth: LunoraAuth | null = null;
         let authInit: Promise<void> | null = null;
-`:"",o=r?`
+`:"",l=a?`
         const initAuth = async (env: Env): Promise<void> => {
             if (!this.authDeclaration) {
                 return;
@@ -674,17 +688,17 @@ const buildGlobalCdcApplier =
                 authInit = null;
                 throw error;
             }));
-`:"",l=r?`
-                await ensureAuth(env);`:"",s=r?"() => auth":"() => null",c=r?"getAuth: () => LunoraAuth | null":"_getAuth: () => null",h=t.hasFramework?`        const buildWorker = (env: Env): LunoraWorker =>
-            host ? withFrameworkWorker(host, (hostEnv) => this.buildWorkerOptions(hostEnv as Env, ${s})) : createWorker(this.buildWorkerOptions(env, ${s}));`:`        const buildWorker = (env: Env): LunoraWorker => createWorker(this.buildWorkerOptions(env, ${s}));`,u=t.hasFramework?"host?: FrameworkHostHandler":"",p=t.emailAgents??[],y=p.length>0?`        composed.email = dispatchAgentEmail([
+`:"",c=a?`
+                await ensureAuth(env);`:"",s=a?"() => auth":"() => null",h=a?"getAuth: () => LunoraAuth | null":"_getAuth: () => null",u=t.hasFramework?`        const buildWorker = (env: Env): LunoraWorker =>
+            host ? withFrameworkWorker(host, (hostEnv) => this.buildWorkerOptions(hostEnv as Env, ${s})) : createWorker(this.buildWorkerOptions(env, ${s}));`:`        const buildWorker = (env: Env): LunoraWorker => createWorker(this.buildWorkerOptions(env, ${s}));`,y=t.hasFramework?"host?: FrameworkHostHandler":"",p=t.emailAgents??[],f=p.length>0?`        composed.email = dispatchAgentEmail([
 ${p.map(b=>`            { agent: lunoraAgentDefinitions.${b.exportName}, className: ${JSON.stringify(b.className)} },`).join(`
 `)}
         ]);
 
-`:"",f=`    /** Materialise the standalone Cloudflare worker + \`ShardDO\` class. */
+`:"",w=`    /** Materialise the standalone Cloudflare worker + \`ShardDO\` class. */
     public build(): ComposedApp {
         return this.assemble();
-    }${t.hasFramework?"\n\n    /** Compose Lunora's realtime plane INTO a meta-framework's Cloudflare handler (SvelteKit/Astro/Nuxt). The framework `host` serves everything except the reserved `/_lunora/*` endpoints; pass the adapter-emitted worker (e.g. SvelteKit's `_worker.js`, Astro's `handle`). */\n    public buildFrameworkWorker(host: FrameworkHostHandler): ComposedApp {\n        return this.assemble(host);\n    }":""}`;return`${S}${L(t).join(`
+    }${t.hasFramework?"\n\n    /** Compose Lunora's realtime plane INTO a meta-framework's Cloudflare handler (SvelteKit/Astro/Nuxt). The framework `host` serves everything except the reserved `/_lunora/*` endpoints; pass the adapter-emitted worker (e.g. SvelteKit's `_worker.js`, Astro's `handle`). */\n    public buildFrameworkWorker(host: FrameworkHostHandler): ComposedApp {\n        return this.assemble(host);\n    }":""}`;return`${E}${L(t).join(`
 `)}
 
 /** Read a value off the per-request \`env\`. Returns \`undefined\` to leave the capability unconfigured (its \`ctx.*\`/admin surface stays a clear-error stub). */
@@ -698,9 +712,9 @@ ${t.jurisdiction?`
 // \`@lunora/mail\` reads it to pin its shard RPC like every other DO path.
 declareAppJurisdiction(${JSON.stringify(t.jurisdiction)});
 `:""}
-${a.join(`
+${n.join(`
 
-`)}${a.length>0?`
+`)}${n.length>0?`
 
 `:""}/** The composed app: a Cloudflare module worker (\`fetch\` / \`scheduled\` / optional \`email\`) plus the \`ShardDO\` class binding. */
 interface ComposedApp extends LunoraWorker {
@@ -717,32 +731,32 @@ interface ComposedApp extends LunoraWorker {
  * first request so per-isolate singletons are built once.
  */
 class AppBuilder<Env extends object> {
-${j(t).join(`
+${G(t).join(`
 `)}
 
     private emailHandler?: (env: Env) => (message: unknown, env: unknown, context: ExecutionContextLike) => Promise<void>;
 
-${B(t).join(`
+${P(t).join(`
 
 `)}
 
-${f}
+${w}
 
     /** Build the shard DO + compose the worker (standalone or framework-hosted), wrapping the lazy per-isolate singletons + auth init. */
-    private assemble(${u}): ComposedApp {
-        const ShardDO = createShardDO({${P(t)}});
+    private assemble(${y}): ComposedApp {
+        const ShardDO = createShardDO({${W(t)}});
 
         // Per-isolate singletons: the worker (and auth instance) are expensive to
         // build, so the first request constructs them and every later request on
         // the same isolate reuses them.
         let worker: LunoraWorker | null = null;
-${i}${o}
-${h}
+${i}${l}
+${u}
 
         const composed: ComposedApp = {
             ShardDO,
             fetch: async (request: Request, rawEnv: unknown, context: ExecutionContextLike): Promise<Response> => {
-                const env = rawEnv as Env;${l}
+                const env = rawEnv as Env;${c}
                 worker ??= buildWorker(env);
 
                 return worker.fetch(request, rawEnv, context);
@@ -764,7 +778,7 @@ ${h}
             },`:""}
         };
 
-${y}        if (this.emailHandler) {
+${f}        if (this.emailHandler) {
             const handler = this.emailHandler;
 
             composed.email = (message, rawEnv, context) => handler(rawEnv as Env)(message, rawEnv, context);
@@ -784,11 +798,11 @@ ${t.hasFramework?`
 `:""}
         return composed;
     }
-${F(t)}${M(t.hasStorage)}
+${M(t)}${Q(t.hasStorage)}
     /** Fan the recorded declarations into the worker-side \`createWorker\` options. */
-    private buildWorkerOptions(env: Env, ${c}): WorkerOptions {
+    private buildWorkerOptions(env: Env, ${h}): WorkerOptions {
         const options: WorkerOptions = {
-${U(t).join(`
+${F(t).join(`
 `)}
         };
 
@@ -796,9 +810,9 @@ ${U(t).join(`
             options.adminToken = this.adminToken(env);
         }
 
-${n.join(`
+${o.join(`
 
-`)}${n.length>0?`
+`)}${o.length>0?`
 
 `:""}        for (const fn of this.extendFns) {
             Object.assign(options, fn(env, { ...options }));
@@ -807,7 +821,7 @@ ${n.join(`
         return options;
     }
 }
-${Q(t.hasGlobal)}
+${J(t.hasGlobal)}
 /**
  * Shape of the project's root \`lunora.config.*\`.
  *
@@ -843,4 +857,4 @@ const defineApp = <Env extends object>(): AppBuilder<Env> => new AppBuilder<Env>
 
 export { AppBuilder, defineApp };
 export type { ${K(t)} };
-`};export{Y as emitApp};
+`};export{X as emitApp};

package/dist/packem_shared/{emitServer-CptcZOTQ.mjs → emitServer-DQxwHVPM.mjs}

@@ -1,17 +1,17 @@
-import{relative as Ve,isAbsolute as Ge,sep as He}from"node:path";import{LunoraError as D}from"@lunora/errors";import{S as ze}from"./capabilities-DJJWVEtk.mjs";import{p as Ue}from"./ir-DBSvhNa-.mjs";import{a as h,G as Xe,u as Je,d as Ke}from"./shared-DjUziztz.mjs";const Ye=/\.([cm]?)tsx?$/u,Ze=(u,n=[])=>{const t=new Set;for(const a of u.tables)for(const s of Object.values(a.shape)){const d=Je(s);d.kind==="storage"&&typeof d.bucket=="string"&&d.bucket!==""&&t.add(d.bucket)}for(const a of n)a!==""&&a!=="default"&&t.add(a);return["default",...[...t].toSorted((a,s)=>a.localeCompare(s))]},st=({agents:u=[],containers:n=[],env:t,hasAccessFacade:a=!1,hasAi:s=!1,hasAnalytics:d=!1,hasBrowser:J=!1,hasVectors:K=!0,hasFlags:Y=!1,hasHyperdrive:Z=!1,hasImages:ee=!1,hasKv:te=!1,hasNotify:ae=!1,hasPayments:M=!1,hasPipelines:re=!1,hasR2sql:oe=!1,hasX402:S=!1,identity:l,queues:F=[],schema:W,generatedDirectory:Q="",services:b=[],storageRuleBuckets:ne=[],topics:E=[],useUmbrella:se=!1,workflows:j=[]}={})=>{const r=Ke(se),ie=Ze(W??{tables:[]},ne).map(e=>JSON.stringify(e)).join(" | "),de=s?`import type { LunoraAi } from "@lunora/ai";
-`:"",le=s?`
-    readonly ai: LunoraAi;`:"",ce=M?`import type { LunoraPayment } from "@lunora/payment";
-`:"",ue=M?`
-    readonly payments: LunoraPayment;`:"",pe=S?`import type { X402Pay } from "@lunora/x402/pay";
-`:"",ye=S?`
-    readonly x402: X402Pay;`:"",P=e=>e.sandbox===!0?"SandboxContainerAccessor":"ContainerAccessor",me=[...new Set(n.map(e=>P(e)))].toSorted((e,o)=>e.localeCompare(o)),he=n.length>0?`import type { ${me.join(", ")} } from "@lunora/container";
-`:"",be=n.length>0?`
-    readonly containers: {${n.map(e=>`
-        readonly ${e.exportName}: ${P(e)};`).join("")}
-    };`:"",L=[...s?["    /** Workers AI binding (the conventional `env.AI`), narrowing `ctx.ai`. */\n    readonly AI?: unknown;"]:[],...n.map(e=>(h(e.bindingName,`container binding "${e.bindingName}"`),`    /** Durable Object namespace for the \`${e.exportName}\` container. */
-    readonly ${e.bindingName}?: unknown;`)),...F.map(e=>(h(e.bindingName,`queue binding "${e.bindingName}"`),`    /** Queue producer binding for the \`${e.exportName}\` queue. */
+import{relative as Ne,isAbsolute as Me,sep as Ae}from"node:path";import{LunoraError as z}from"@lunora/errors";import{C as De}from"./capabilities-CqnIsyA9.mjs";import{p as Se}from"./ir-DBSvhNa-.mjs";import{a as p,G as Fe,u as We,d as Qe}from"./shared-DjUziztz.mjs";const Pe=/\.([cm]?)tsx?$/u,je=(l,n=[])=>{const r=new Set;for(const t of l.tables)for(const d of Object.values(t.shape)){const s=We(d);s.kind==="storage"&&typeof s.bucket=="string"&&s.bucket!==""&&r.add(s.bucket)}for(const t of n)t!==""&&t!=="default"&&r.add(t);return["default",...[...r].toSorted((t,d)=>t.localeCompare(d))]},He=({agents:l=[],capabilities:n=new Set,containers:r=[],env:t,hasVectors:d=!0,hasFlags:s=!1,hasNotify:U=!1,identity:i,queues:O=[],schema:C,generatedDirectory:N="",services:y=[],storageRuleBuckets:X=[],topics:M=[],useUmbrella:J=!1,workflows:A=[]}={})=>{const o=Qe(J),m=n.has("ai"),D=n.has("payments"),S=n.has("x402"),K=je(C??{tables:[]},X).map(e=>JSON.stringify(e)).join(" | "),Y=m?`import type { LunoraAi } from "@lunora/ai";
+`:"",Z=m?`
+    readonly ai: LunoraAi;`:"",ee=D?`import type { LunoraPayment } from "@lunora/payment";
+`:"",te=D?`
+    readonly payments: LunoraPayment;`:"",ae=S?`import type { X402Pay } from "@lunora/x402/pay";
+`:"",re=S?`
+    readonly x402: X402Pay;`:"",F=e=>e.sandbox===!0?"SandboxContainerAccessor":"ContainerAccessor",oe=[...new Set(r.map(e=>F(e)))].toSorted((e,a)=>e.localeCompare(a)),ne=r.length>0?`import type { ${oe.join(", ")} } from "@lunora/container";
+`:"",se=r.length>0?`
+    readonly containers: {${r.map(e=>`
+        readonly ${e.exportName}: ${F(e)};`).join("")}
+    };`:"",W=[...m?["    /** Workers AI binding (the conventional `env.AI`), narrowing `ctx.ai`. */\n    readonly AI?: unknown;"]:[],...r.map(e=>(p(e.bindingName,`container binding "${e.bindingName}"`),`    /** Durable Object namespace for the \`${e.exportName}\` container. */
+    readonly ${e.bindingName}?: unknown;`)),...O.map(e=>(p(e.bindingName,`queue binding "${e.bindingName}"`),`    /** Queue producer binding for the \`${e.exportName}\` queue. */
     readonly ${e.bindingName}?: unknown;`))].join(`
-`),fe=`
+`),ie=`
 
 /**
  * This project's Cloudflare bindings, as far as codegen can discover them from
@@ -24,26 +24,24 @@ import{relative as Ve,isAbsolute as Ge,sep as He}from"node:path";import{LunoraEr
  * surface, so treat them as \`Fetcher\`/\`Service<unknown>\` and cast.
  */
 export interface CloudflareBindings {
-    readonly [binding: string]: unknown;${L?`
-${L}`:""}
+    readonly [binding: string]: unknown;${W?`
+${W}`:""}
 }
 
 /** Alias for {@link CloudflareBindings} — the typed shape of \`env\`. */
-export type Env = CloudflareBindings;`,i=(e,o,c)=>{const m=ze.get(e);if(m!==void 0&&m.tier!==c)throw new D("INTERNAL",`@lunora/codegen: capability "${e}" declares tier "${m.tier}" in SERVER_CTX_FIELDS but is emitted onto the "${c}" context — update whichever is wrong.`);return o?m?.field??"":""},f=i("kv",te,"every"),x=i("analytics",d,"every"),xe=i("hyperdrive",Z,"action"),ge=i("browser",J,"action"),Te=i("images",ee,"action"),ve=i("pipelines",re,"action"),we=i("r2sql",oe,"action"),p=K&&(W?.vectorIndexes.length??0)>0,g=p?' | "vectors"':"",q=p?`
-    readonly vectors: VectorSearch<VectorIndexName>;`:"",$e=p?`
-    readonly vectors: VectorSearchReader<VectorIndexName>;`:"",ke=p?`import type { VectorSearch, VectorSearchReader } from "${r.server}";
+export type Env = CloudflareBindings;`,Q=e=>De.map(a=>a.serverCtxField!==void 0&&e.includes(a.tier)&&n.has(a.key)?a.serverCtxField:"").join(""),P=Q(["every"]),de=Q(["every","action"]),c=d&&(C?.vectorIndexes.length??0)>0,h=c?' | "vectors"':"",j=c?`
+    readonly vectors: VectorSearch<VectorIndexName>;`:"",le=c?`
+    readonly vectors: VectorSearchReader<VectorIndexName>;`:"",ce=c?`import type { VectorSearch, VectorSearchReader } from "${o.server}";
 import type { VectorIndexName } from "./dataModel.js";
-`:"",T=a?`
-    /** Verified Cloudflare Access identity — a synchronous facade over the resolved claims (email / groups / hasGroup / claims). Anonymous when no Access token is present. */
-    readonly access: import("@lunora/cloudflare-access/context").AccessFacade;`:"",v=Y?`
+`:"",b=s?`
     /** Feature-flag evaluation (OpenFeature). Reads are memoized per request; evaluations never throw — a provider error resolves to the supplied default. */
-    readonly flags: import("${r.flags}").LunoraFlags;`:"",w=ae?`
+    readonly flags: import("${o.flags}").LunoraFlags;`:"",f=U?`
     /** Multi-channel notifications (@lunora/notify): send / chat / inApp / webhook plus the push device sub-facade. Sends are external I/O — confine them to action handlers. */
     readonly notify: import("@lunora/notify").LunoraNotify;
     /** Device push sub-facade — the same object as ctx.notify.push (register / send / broadcast). Sends belong in action handlers. */
-    readonly push: import("@lunora/notify").LunoraPush;`:"",y=j.length>0,Ie=y?`import type { WorkflowHandle } from "@lunora/workflow";
+    readonly push: import("@lunora/notify").LunoraPush;`:"",u=A.length>0,ue=u?`import type { WorkflowHandle } from "@lunora/workflow";
 import type * as lunoraWorkflowDefinitions from "../workflows.js";
-`:"",Re=y?`
+`:"",pe=u?`
 
 /** Params type carried by a \`defineWorkflow\` definition (its phantom \`__params\`). */
 type WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params }
@@ -54,56 +52,56 @@ type WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params
 
 /** This project's declared workflows, addressable from \`ctx.workflows\` by their \`lunora/workflows.ts\` export name. */
 export interface LunoraWorkflows {
-${j.map(e=>`    get(name: ${JSON.stringify(e.exportName)}): WorkflowHandle<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${e.exportName}>>;`).join(`
+${A.map(e=>`    get(name: ${JSON.stringify(e.exportName)}): WorkflowHandle<WorkflowParamsOf<typeof lunoraWorkflowDefinitions.${e.exportName}>>;`).join(`
 `)}
-}`:"",_=y?' | "workflows"':"",V=y?`
-    readonly workflows: LunoraWorkflows;`:"",G=Ue(F),$=G.length>0,k=E.length>0,I=[...$?["QueueProducer"]:[],...k?["TopicPublisher"]:[]],Be=I.length>0?`import type { ${I.join(", ")} } from "@lunora/queue";
+}`:"",E=u?' | "workflows"':"",L=u?`
+    readonly workflows: LunoraWorkflows;`:"",q=Se(O),x=q.length>0,g=M.length>0,T=[...x?["QueueProducer"]:[],...g?["TopicPublisher"]:[]],ye=T.length>0?`import type { ${T.join(", ")} } from "@lunora/queue";
 import type * as lunoraQueueDefinitions from "../queues.js";
-`:"",Oe=I.length>0?"\n\n/** Message body type carried by a `defineQueue` / `defineTopic` definition (its phantom `__lunoraBody`). */\ntype QueueBodyOf<Definition> = Definition extends { __lunoraBody?: infer Body } ? (unknown extends Body ? unknown : NonNullable<Body>) : unknown;":"",Ae=$?`
+`:"",me=T.length>0?"\n\n/** Message body type carried by a `defineQueue` / `defineTopic` definition (its phantom `__lunoraBody`). */\ntype QueueBodyOf<Definition> = Definition extends { __lunoraBody?: infer Body } ? (unknown extends Body ? unknown : NonNullable<Body>) : unknown;":"",he=x?`
 
 /** This project's declared queues, addressable from \`ctx.queues\` by their \`lunora/queues.ts\` export name. */
 export interface LunoraQueues {
-${G.map(e=>`    readonly ${e.exportName}: QueueProducer<QueueBodyOf<typeof lunoraQueueDefinitions.${e.exportName}>>;`).join(`
+${q.map(e=>`    readonly ${e.exportName}: QueueProducer<QueueBodyOf<typeof lunoraQueueDefinitions.${e.exportName}>>;`).join(`
 `)}
-}`:"",Ne=k?`
+}`:"",be=g?`
 
 /** This project's declared topics, addressable from \`ctx.topics\` by their \`lunora/queues.ts\` export name. */
 export interface LunoraTopics {
-${E.map(e=>`    readonly ${e.exportName}: TopicPublisher<QueueBodyOf<typeof lunoraQueueDefinitions.${e.exportName}>>;`).join(`
+${M.map(e=>`    readonly ${e.exportName}: TopicPublisher<QueueBodyOf<typeof lunoraQueueDefinitions.${e.exportName}>>;`).join(`
 `)}
-}`:"",Ce=`${Oe}${Ae}${Ne}`,H=$?`
-    readonly queues: LunoraQueues;`:"",z=k?`
-    readonly topics: LunoraTopics;`:"",R=b.length>0,De=e=>{if(Q==="")throw new D("INTERNAL","@lunora/codegen: emitServer needs `generatedDirectory` to import an RPC service's types");const o=Ve(Q,e);if(Ge(o))throw new D("INTERNAL",`@lunora/codegen: an RPC service's entry (${e}) must be on the same drive as the app`);const c=o.split(He).join("/").replace(Ye,".$1js");return c.startsWith(".")?c:`./${c}`},U=b.filter(e=>e.rpcEntrypoint!==void 0),Me=U.length>0?"ServiceFetcher, ServiceRpc":"ServiceFetcher",Se=R?`import type { ${Me} } from "${r.server}";
-${U.map(e=>`import type * as lunoraService_${e.name} from ${JSON.stringify(De(e.main))};
-`).join("")}`:"",Fe=R?`
+}`:"",fe=`${me}${he}${be}`,G=x?`
+    readonly queues: LunoraQueues;`:"",V=g?`
+    readonly topics: LunoraTopics;`:"",v=y.length>0,xe=e=>{if(N==="")throw new z("INTERNAL","@lunora/codegen: emitServer needs `generatedDirectory` to import an RPC service's types");const a=Ne(N,e);if(Me(a))throw new z("INTERNAL",`@lunora/codegen: an RPC service's entry (${e}) must be on the same drive as the app`);const R=a.split(Ae).join("/").replace(Pe,".$1js");return R.startsWith(".")?R:`./${R}`},_=y.filter(e=>e.rpcEntrypoint!==void 0),ge=_.length>0?"ServiceFetcher, ServiceRpc":"ServiceFetcher",Te=v?`import type { ${ge} } from "${o.server}";
+${_.map(e=>`import type * as lunoraService_${e.name} from ${JSON.stringify(xe(e.main))};
+`).join("")}`:"",ve=v?`
 
 /** This project's service bindings (\`lunora.config\` \`services\`), addressable from \`ctx.services\` in actions. */
 export interface LunoraServices {
-${b.map(e=>{h(e.name,`service "${e.name}"`);const o=e.rpcEntrypoint===void 0?"ServiceFetcher":`ServiceRpc<typeof lunoraService_${e.name}.${e.rpcEntrypoint}>`;return`    readonly ${e.name}: ${o};`}).join(`
+${y.map(e=>{p(e.name,`service "${e.name}"`);const a=e.rpcEntrypoint===void 0?"ServiceFetcher":`ServiceRpc<typeof lunoraService_${e.name}.${e.rpcEntrypoint}>`;return`    readonly ${e.name}: ${a};`}).join(`
 `)}
-}`:"",We=R?`
-    readonly services: LunoraServices;`:"",B=u.length>0,Qe=B?`import type { AgentHandle } from "@lunora/agent";
-`:"",Ee=B?`
+}`:"",ke=v?`
+    readonly services: LunoraServices;`:"",k=l.length>0,we=k?`import type { AgentHandle } from "@lunora/agent";
+`:"",Ie=k?`
 
 /** This project's declared agents, addressable from \`ctx.agents\` by their \`lunora/agents.ts\` export name. */
 export interface LunoraAgents {
-${u.map(e=>(h(e.exportName,`agent export "${e.exportName}"`),`    readonly ${e.exportName}: AgentHandle;`)).join(`
+${l.map(e=>(p(e.exportName,`agent export "${e.exportName}"`),`    readonly ${e.exportName}: AgentHandle;`)).join(`
 `)}
-}`:"",X=B?`
-    readonly agents: LunoraAgents;`:"",je=l?`import type { InferIdentity } from "${r.server}";
+}`:"",H=k?`
+    readonly agents: LunoraAgents;`:"",$e=i?`import type { InferIdentity } from "${o.server}";
 import type * as lunoraIdentityContract from "../identity.js";
-`:"",Pe=l?`
+`:"",Be=i?`
 
 /** This app's declared identity claim contract (\`defineIdentity\` in \`lunora/identity.ts\`) — the typed shape of \`ctx.auth.getIdentity()\`, the RLS policy \`ctx.auth.identity\`, and the \`authorizeShard\`/\`authorizeFanOut\` identity argument. */
-export type Identity = InferIdentity<typeof lunoraIdentityContract.${l.exportName}>;
+export type Identity = InferIdentity<typeof lunoraIdentityContract.${i.exportName}>;
 
 /** \`ctx.auth\` narrowed so \`getIdentity()\` resolves the declared {@link Identity} contract instead of the untyped claim bag. */
-type NarrowedAuth = Omit<QueryCtxBase["auth"], "getIdentity"> & { getIdentity: () => Promise<Identity | null> };`:"",O=l?' | "auth"':"",A=l?`
-    readonly auth: NarrowedAuth;`:"",Le=l?", Identity":"",qe=t?`import type * as lunoraEnvContract from "../env.js";
-`:"",_e=t?`
+type NarrowedAuth = Omit<QueryCtxBase["auth"], "getIdentity"> & { getIdentity: () => Promise<Identity | null> };`:"",w=i?' | "auth"':"",I=i?`
+    readonly auth: NarrowedAuth;`:"",Re=i?", Identity":"",Oe=t?`import type * as lunoraEnvContract from "../env.js";
+`:"",Ce=t?`
 
 /** This app's declared env contract (\`defineEnv\` in \`lunora/env.ts\`) — the validated, coercion-aware shape of \`ctx.env\`. */
-export type LunoraEnv = ReturnType<typeof lunoraEnvContract.${t.exportName}>;`:"",N=t?' | "env"':"",C=t?"\n    /** Validated, typed environment declared by `defineEnv` in `lunora/env.ts` — parsed & coercion-aware config values (`ctx.env.STRIPE_KEY`); a missing or invalid value throws at read time. */\n    readonly env: LunoraEnv;":"";return`${Xe}import { createPolicyDsl, defineMutator as defineMutatorBase, initLunora, v as vBase } from "${r.server}";
+export type LunoraEnv = ReturnType<typeof lunoraEnvContract.${t.exportName}>;`:"",$=t?' | "env"':"",B=t?"\n    /** Validated, typed environment declared by `defineEnv` in `lunora/env.ts` — parsed & coercion-aware config values (`ctx.env.STRIPE_KEY`); a missing or invalid value throws at read time. */\n    readonly env: LunoraEnv;":"";return`${Fe}import { createPolicyDsl, defineMutator as defineMutatorBase, initLunora, v as vBase } from "${o.server}";
 import type {
     ActionBuilder,
     ActionCtx as ActionCtxBase,
@@ -125,7 +123,7 @@ import type {
     Storage as StorageBase,
     TableReader,
     Validator,
-} from "${r.server}";
+} from "${o.server}";
 
 import type {
     DatabaseReaderFacade as DatabaseReaderFacadeOf,
@@ -134,7 +132,7 @@ import type {
     TableReaderFacade as TableReaderFacadeOf,
     TableWriterFacade as TableWriterFacadeOf,
     WithArg as WithArgOf,
-} from "${r.serverDataModel}";
+} from "${o.serverDataModel}";
 
 export type {
     AggregateOp,
@@ -157,10 +155,10 @@ export type {
     Where,
     WhereOf,
     WhereOperators,
-} from "${r.serverDataModel}";
+} from "${o.serverDataModel}";
 
 import type { DataModel, Doc, GeoIndexNamesByTable, Id as IdOfTable, IndexNamesByTable, Insert, InsertModel, RankIndexNamesByTable, Relations, SearchIndexNamesByTable, TableName } from "./dataModel.js";
-${ke}${de}${ce}${pe}${he}${Ie}${Be}${Se}${Qe}${je}${qe}
+${ce}${Y}${ee}${ae}${ne}${ue}${ye}${Te}${we}${$e}${Oe}
 export type { AppTableName, DataModel, Doc, Id, TableName } from "./dataModel.js";
 
 /**
@@ -220,7 +218,7 @@ export interface OrmWriter extends OrmReader {
 }
 
 /** Storage buckets this schema declares (\`v.storage("name")\`), narrowing \`ctx.storage.bucket(name)\`. */
-export type StorageBucketName = ${ie};${fe}${Re}${Ce}${Fe}${Ee}${Pe}${_e}
+export type StorageBucketName = ${K};${ie}${pe}${fe}${ve}${Ie}${Be}${Ce}
 
 /**
  * Project-typed contexts. The base contexts from \`@lunora/server\` are
@@ -283,22 +281,22 @@ type AsIdTable<T extends string> = T extends TableName ? T : string extends T ?
  */
 type TypedAsId = <T extends string>(tableName: AsIdTable<T>, id: string) => IdOfTable<T & TableName>;
 
-export interface QueryCtx extends Omit<QueryCtxBase, "db" | "storage"${g}${O}${N}> {
+export interface QueryCtx extends Omit<QueryCtxBase, "db" | "storage"${h}${w}${$}> {
     readonly db: Omit<DatabaseReader, "asId" | "query" | "get"> & DatabaseReaderFacade & { asId: TypedAsId; query: TypedTableQuery; get: TypedTableGet };
     readonly orm: OrmReader;
-    readonly storage: ReadOnlyStorage<StorageBucketName>;${$e}${T}${f}${v}${w}${x}${C}${A}
+    readonly storage: ReadOnlyStorage<StorageBucketName>;${le}${P}${b}${f}${B}${I}
 }
 
-export interface MutationCtx extends Omit<MutationCtxBase, "db" | "storage"${g}${_}${O}${N}> {
+export interface MutationCtx extends Omit<MutationCtxBase, "db" | "storage"${h}${E}${w}${$}> {
     readonly db: Omit<DatabaseWriter, "asId" | "query" | "get"> & DatabaseWriterFacade & { asId: TypedAsId; query: TypedTableQuery; get: TypedTableGet };
     readonly orm: OrmWriter;
-    readonly storage: MutationStorage<StorageBucketName>;${q}${T}${f}${v}${w}${x}${C}${V}${H}${z}${X}${A}
+    readonly storage: MutationStorage<StorageBucketName>;${j}${P}${b}${f}${B}${L}${G}${V}${H}${I}
 }
 
-export interface ActionCtx extends Omit<ActionCtxBase, "db" | "storage"${g}${_}${O}${N}> {
+export interface ActionCtx extends Omit<ActionCtxBase, "db" | "storage"${h}${E}${w}${$}> {
     readonly db: Omit<DatabaseWriter, "asId" | "query" | "get"> & DatabaseWriterFacade & { asId: TypedAsId; query: TypedTableQuery; get: TypedTableGet };
     readonly orm: OrmWriter;
-    readonly storage: StorageBase<StorageBucketName>;${q}${T}${le}${ue}${ye}${be}${f}${v}${w}${xe}${ge}${Te}${x}${ve}${we}${We}${C}${V}${H}${z}${X}${A}
+    readonly storage: StorageBase<StorageBucketName>;${j}${de}${Z}${te}${re}${se}${b}${f}${ke}${B}${L}${G}${V}${H}${I}
 }
 
 /**
@@ -331,7 +329,7 @@ export const internalAction = lunoraBuilders.internalAction as unknown as Intern
 /**
  * \`defineMutator\` bound to this project's typed {@link MutationCtx} — declare
  * custom mutators (\`lunora/mutators.ts\`) with it instead of importing from
- * \`${r.server}\`, and the authoritative \`server\` impl's \`ctx\` carries the
+ * \`${o.server}\`, and the authoritative \`server\` impl's \`ctx\` carries the
  * schema-typed \`ctx.db\` (\`ctx.db.query("nodes")\` resolves \`Doc<"nodes">\`,
  * \`ctx.db.patch(id, …)\` takes an \`Id<"nodes">\`) with no hand-written ctx type and
  * no \`as unknown as\` cast. Runtime-identical to the package export; only the
@@ -356,7 +354,7 @@ export const defineMutator = defineMutatorBase as unknown as <Args extends Recor
  * Runtime-identical to \`@lunora/server\`'s \`definePolicy\`; only the types narrow,
  * so the \`rls()\` chain discovers a policy authored either way the same.
  */
-export const definePolicy = createPolicyDsl<DataModel, Relations${Le}>();
+export const definePolicy = createPolicyDsl<DataModel, Relations${Re}>();
 
 /**
  * The validator builder \`v\`, with \`v.id(...)\` constrained to THIS schema's
@@ -373,4 +371,4 @@ export const definePolicy = createPolicyDsl<DataModel, Relations${Le}>();
 export const v = vBase as unknown as Omit<typeof vBase, "id"> & {
     id: <T extends TableName>(table: T) => ColumnValidator<IdOfTable<T>, IdOfTable<T>>;
 };
-`};export{st as default};
+`};export{He as default};

package/dist/packem_shared/{emitShard-Bo9uyTJF.mjs → emitShard-BDfiH_JF.mjs}

@@ -1 +1 @@
-import"./SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import"./isD1GlobalTable-udvHAAzD.mjs";import"./ir-DBSvhNa-.mjs";import"./json-data-Chfs2Cz5.mjs";import{e as f}from"./shard-C0OSxk7u.mjs";import"./shard-runtime-DvqfDuYO.mjs";import"./shared-DjUziztz.mjs";export{f as default};
+import"./SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import"./isD1GlobalTable-udvHAAzD.mjs";import"./ir-DBSvhNa-.mjs";import"./json-data-Chfs2Cz5.mjs";import{e as f}from"./shard-f7coQFS9.mjs";import"./shard-runtime-CyEbIjPA.mjs";import"./shared-DjUziztz.mjs";export{f as default};