@lunora/codegen 1.0.0-alpha.25 → 1.0.0-alpha.250

package/dist/packem_shared/shard-runtime-CyEbIjPA.mjs

@@ -0,0 +1,321 @@
+import{s as v}from"./ir-DBSvhNa-.mjs";import{r as x}from"./json-data-Chfs2Cz5.mjs";import{C as k}from"./capabilities-CqnIsyA9.mjs";import{a as c,G as f}from"./shared-DjUziztz.mjs";const P=e=>e?{importFragment:"serveRelationFanout, ",override:`
+        protected override async runRelationFanoutRead(functionPath: string, args: Record<string, unknown>): Promise<unknown> {
+            this.ensureMigrated();
+
+            const { db } = this.buildCtx({ functionPath }) as { db: DatabaseWriterLike };
+
+            return serveRelationFanout(schema as unknown as SchemaLike, db, functionPath, args);
+        }
+`}:{importFragment:"",override:""},y=(e,r,t,{cast:n="",sync:o=[]}={})=>{const i=t.map(u=>`    ${u}: ${o.includes(u)?"":"async "}() => {
+        ${r}
+    },`).join(`
+`);return`
+const ${e} = {
+${i}
+}${n};
+`},h={build:"",configField:"",contextField:"",importLines:[],stub:""},W=e=>e.size===0?{configField:"",constant:"",override:""}:{configField:"\n    /** The `ShardRegistryDO` namespace (typically `env.SHARD_REGISTRY`). This shard registers its key for each `.shardBy()` table it writes, so cross-shard export, sync and migrations reach it. */\n    shardRegistry?: (env: Record<string, unknown>) => unknown;",constant:`
+/** The \`.shardBy()\` tables this shard registers with the shard registry when it writes them. */
+const SHARDED_TABLES: ReadonlySet<string> = new Set([${[...e].map(r=>JSON.stringify(r)).join(", ")}]);
+`,override:`
+        protected override shardRegistry(): undefined | { namespace: unknown; shardedTables: ReadonlySet<string> } {
+            const namespace = config.shardRegistry?.((this.env ?? {}) as Record<string, unknown>);
+
+            return namespace === undefined ? undefined : { namespace, shardedTables: SHARDED_TABLES };
+        }
+`},I=(e,r)=>e?{build:`
+            const flags: import("${r}").LunoraFlags = createFlags(flagsConfig, env, {
+                provider: () => config.flags?.(env),
+                targetingKey: () => flagsConfig.identify?.({ identity: identity ?? null, userId: userId ?? null }),
+            });
+`,configField:`
+    flags?: (env: Record<string, unknown>) => import("${r}").Provider;`,contextField:`
+                flags,`,importLines:[`import { createFlags } from "${r}";`,'import flagsConfig from "../flags.js";'],stub:""}:h,T=e=>e?{build:`
+            const { notify, push } = createNotify(notifyConfig, env, { log, metrics });
+`,configField:"",contextField:`
+                notify,
+                push,`,importLines:['import { createNotify } from "@lunora/notify";','import notifyConfig from "../notify.js";'],stub:""}:h,q=e=>e?{build:`
+            const envConfig = lunoraEnvContract.${e.exportName}(env);
+`,configField:"",contextField:`
+                env: envConfig,`,importLines:['import * as lunoraEnvContract from "../env.js";'],stub:""}:h,B=(e,r,t)=>{if(!r)return{constant:"",evaluateOverride:"",subscriptionOverride:""};const n=s=>`
+            const env = (this.env ?? {}) as Record<string, unknown>;
+            const flags: import("${t}").LunoraFlags = createFlags(flagsConfig, env, {
+                provider: () => config.flags?.(env),
+                targetingKey: ${s},
+            });`,o=`
+/** Statically-discovered feature flags (\`ctx.flags.<type>("key")\` reads) served via \`__lunora_admin__:listFlags\` + the reactive \`__lunora_flags__:\` channel. */
+const LUNORA_FLAG_KEYS = ${x(e,'ReadonlyArray<{ key: string; type: "boolean" | "number" | "object" | "string" }>')};
+`,i=`
+        protected override async evaluateFlags(context?: Record<string, unknown>): Promise<FlagsResult> {${n("undefined")}
+            const evalContext = context as import("${t}").EvaluationContext | undefined;
+            const evaluations: FlagsResult["flags"] = [];
+
+            for (const entry of LUNORA_FLAG_KEYS) {
+                // eslint-disable-next-line no-await-in-loop -- flags evaluate sequentially; each shares the single memoized provider client
+                const details =
+                    entry.type === "boolean"
+                        ? await flags.details.boolean(entry.key, false, evalContext)
+                        : entry.type === "number"
+                          ? await flags.details.number(entry.key, 0, evalContext)
+                          : entry.type === "string"
+                            ? await flags.details.string(entry.key, "", evalContext)
+                            : await flags.details.object(entry.key, {}, evalContext);
+
+                evaluations.push({ errorCode: details.errorCode, key: entry.key, reason: details.reason, type: entry.type, value: details.value, variant: details.variant });
+            }
+
+            return { configured: true, flags: evaluations };
+        }
+`,u=`
+        protected override runFlagSubscriptionRead(_functionPath: string, args: Record<string, unknown>, identity?: SubscriptionIdentity): Promise<unknown> {${n("() => flagsConfig.identify?.({ identity: identity?.identity ?? null, userId: identity?.userId ?? null })")}
+            const key = typeof args.key === "string" ? args.key : "";
+
+            // SECURITY: the reactive channel is public (any socket, no auth). Serve
+            // ONLY statically-discovered flag keys — an arbitrary client-supplied key
+            // would let a subscriber probe the value of internal/unreleased flags the
+            // app never exposes. Unknown key ⇒ the "nothing to deliver" sentinel.
+            // eslint-disable-next-line unicorn/no-null -- the base hook's "nothing to deliver" sentinel
+            if (key.length === 0 || !LUNORA_FLAG_KEYS.some((entry) => entry.key === key)) {
+                return Promise.resolve(null);
+            }
+
+            // SECURITY: evaluate under the socket's server-verified identity ONLY
+            // (the targetingKey resolved above). Client-supplied targeting context is
+            // NOT honored on this public channel — otherwise a subscriber could spoof
+            // targeting attributes (e.g. plan/role) to unlock a flag gated on them.
+            const context = undefined;
+
+            if (args.type === "number") {
+                return flags.number(key, typeof args.default === "number" ? args.default : 0, context);
+            }
+
+            if (args.type === "string") {
+                return flags.string(key, typeof args.default === "string" ? args.default : "", context);
+            }
+
+            if (args.type === "object") {
+                return flags.object(key, (args.default ?? {}) as import("${t}").JsonValue, context);
+            }
+
+            return flags.boolean(key, typeof args.default === "boolean" ? args.default : false, context);
+        }
+`;return{constant:o,evaluateOverride:i,subscriptionOverride:u}},R=()=>({build:`
+            const aiBinding = config.ai?.(env) ?? (env as Record<string, unknown>).AI;
+            // Correlate AI-Gateway-routed calls with the Lunora trace: thread the
+            // function path + trace id into createAi, which folds them into the
+            // gateway's \`metadata\`. Mirror the tracer's anchor guard — a deferred
+            // subscription re-run must not borrow a concurrent dispatch's trace, so
+            // read \`getCurrentTrace()\` only on the synchronous (non-threaded-identity) path.
+            const aiTrace = options.identity ? undefined : this.getCurrentTrace();
+            // \`telemetry\` gives every model call an \`ai.generate\` / \`ai.stream\` span
+            // and \`gen_ai.usage.*\` token + cost counters attributed to this function.
+            const ai: LunoraAi = createAi({
+                binding: aiBinding as AiBindingLike | undefined,
+                env: env as Record<string, unknown>,
+                metadata: { functionPath: options.functionPath, traceId: aiTrace?.traceId },
+                telemetry: { metrics, trace },
+            });
+`,configField:`
+    ai?: (env: Record<string, unknown>) => AiBindingLike;`,importLines:['import type { AiBindingLike, LunoraAi } from "@lunora/ai";','import { createAi } from "@lunora/ai";'],stub:""}),N=()=>({build:`
+            const access = accessFacade(identity, userId);
+`,configField:"",importLines:['import { accessFacade } from "@lunora/cloudflare-access/context";'],stub:""}),S=()=>({build:`
+            const r2sqlEnv = env as Record<string, unknown>;
+            const r2sqlAccountId = (r2sqlEnv.R2_SQL_ACCOUNT_ID ?? r2sqlEnv.CLOUDFLARE_ACCOUNT_ID) as string | undefined;
+            const r2sqlToken = r2sqlEnv.R2_SQL_TOKEN as string | undefined;
+            const r2sqlBucket = r2sqlEnv.R2_SQL_BUCKET as string | undefined;
+            const r2sql: R2SqlClient = config.r2sql
+                ? config.r2sql(env)
+                : r2sqlAccountId && r2sqlToken && r2sqlBucket
+                  ? createR2Sql({ accountId: r2sqlAccountId, apiToken: r2sqlToken, bucket: r2sqlBucket })
+                  : r2sqlStub;
+`,configField:`
+    r2sql?: (env: Record<string, unknown>) => R2SqlClient;`,importLines:['import type { R2SqlClient } from "@lunora/bindings/r2sql";','import { createR2Sql } from "@lunora/bindings/r2sql";'],stub:y("r2sqlStub: R2SqlClient",'throw new Error("ctx.r2sql: no R2 SQL credentials found. Set \\`R2_SQL_TOKEN\\`, \\`R2_SQL_ACCOUNT_ID\\` (or \\`CLOUDFLARE_ACCOUNT_ID\\`), and \\`R2_SQL_BUCKET\\` in your env/.dev.vars, or pass an \\`r2sql\\` config thunk to createShardDO().");',["describe","explain","from","query","showDatabases","showTables"],{sync:["from"]})}),b={access:N,ai:R,r2sql:S},d="            ",w=(e,r,t)=>{const n=`${e}Binding`,{factory:o}=t;let i=`(${n} as ${r})`;if(o!==void 0){const u=`${n} as ${t.bindingType??r}`;i=o.option===void 0?`${o.name}(${u})`:`${o.name}({ ${o.option}: ${u} })`}return`${n} ? ${i} : ${e}Stub`},L=(e,r,t)=>{const n=w(e,r,t),o=`${d}const ${e}Binding = config.${e}?.(env) ?? (env as Record<string, unknown>).${t.envName};
+`,i=t.unvouchableReads??[];return i.length===0?`
+${o}${d}const ${e}: ${r} = ${n};
+`:`
+${o}${d}// ${t.envName} is not this shard's SQLite, so nothing appends a \`__cdc_log\` entry
+${d}// when a value changes — a subscription that read one can never be proven
+${d}// current on reconnect and must re-snapshot. Reads only; writes stay unstamped.
+${d}const ${e}: ${r} = markUnvouchableReads(${n}, options.onRead, [
+${i.map(u=>`${d}    ${JSON.stringify(u)},`).join(`
+`)}
+${d}]);
+`},C=(e,r,t)=>{const{binding:n,clientType:o}=t,i=y(`${e}Stub: ${o}`,`throw new Error("${t.missingMessage}");`,t.stubMethods,{sync:t.syncStubMethods});if(n===void 0)return{build:`
+${d}const ${e}: ${o} = config.${e} ? config.${e}(env) : ${e}Stub;
+`,configField:`
+    ${e}?: (env: Record<string, unknown>) => ${o};`,importLines:[`import type { ${o} } from "${r}";`],stub:i};const u=n.bindingType??o,s=[...new Set([u,o])].toSorted((l,a)=>l.localeCompare(a));return{build:L(e,o,n),configField:`
+    ${e}?: (env: Record<string, unknown>) => ${u};`,importLines:[`import type { ${s.join(", ")} } from "${r}";`,...n.factory===void 0?[]:[`import { ${n.factory.name} } from "${r}";`]],stub:i}},A=e=>Object.hasOwn(b,e),D=e=>{const r=[],t=[];let n="",o="",i="",u="",s="";for(const l of k){const{key:a,shardBinding:m}=l;if(m===void 0||!e.has(a))continue;const g=l.contextProperty;let p;A(a)?p=b[a]():m!=="bespoke"&&(p=C(g,l.moduleSpecifier,m)),p!==void 0&&(t.push(...p.importLines),o+=p.configField,s+=p.stub,l.tier==="every"?(i+=p.build,u+=`
+                ${g},`):(n+=p.build,r.push(g)))}return{actionBuild:n,actionFields:r,configFields:o,everyBuild:i,everyFields:u,importLines:t,stubs:s}},U=(e,r)=>{if(e.length===0)return"";const t=r?`, ${JSON.stringify(r)}`:"",n=e.map(a=>{c(a.exportName,`container export "${a.exportName}"`),c(a.className,`container class "${a.className}"`);const m=a.sandbox===!0?"LunoraSandboxContainer":"LunoraContainer";return`/** Container DO for the \`${a.exportName}\` definition (binding \`${a.bindingName}\`). */
+export class ${a.className} extends ${m} {
+    public constructor(ctx: ConstructorParameters<typeof ${m}>[0], env: Record<string, unknown>) {
+        super(ctx, env, ${a.exportName}, "${a.exportName}"${t});
+    }
+}
+`}).join(`
+`),o=e.map(a=>a.exportName).join(", "),i=e.some(a=>a.sandbox===!0),u=e.some(a=>a.sandbox!==!0)?`import { LunoraContainer } from "@lunora/container/do";
+`:"";return`${f}/**
+ * Container-enabled Durable Object classes for the containers declared in
+ * \`lunora/containers.ts\`. Re-export them from your worker entry — wrangler
+ * requires each \`containers[].class_name\` to be exported by the worker:
+ *
+ * \`export * from "./lunora/_generated/containers.js";\`
+ *
+ * \`ContainerProxy\` is re-exported alongside them: the egress-interception path
+ * (\`allowedHosts\`/\`deniedHosts\`/\`interceptHttps\` and the runtime
+ * \`handle.egress\` controls) routes container outbound traffic through this
+ * WorkerEntrypoint, so it too must be exported by the deployed worker.
+ */
+${u}${i?`import { LunoraSandboxContainer } from "@lunora/container/sandbox";
+`:""}
+import { ${o} } from "../containers.js";
+
+export { ContainerProxy } from "@lunora/container/do";
+${i?`
+/**
+ * \`DirectoryBackup\` and \`S3Mount\` route a \`sandbox: true\` container's storage
+ * traffic through these WorkerEntrypoints, so the deployed worker must export them.
+ */
+export { DirectoryBackupGateway, S3Gateway } from "@lunora/container/sandbox";
+`:""}
+${n}`},j=(e,r)=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const n of e)c(n.exportName,`container export "${n.exportName}"`),c(n.bindingName,`container binding "${n.bindingName}"`);const t=e.map(n=>{const o=n.schedulingPolicy!==void 0||n.maxInstances===void 0?"":`, maxInstances: ${String(n.maxInstances)}`;return`    { binding: "${n.bindingName}", exportName: "${n.exportName}"${o} },`}).join(`
+`);return{build:`
+            const containers = createContainerContext(env, LUNORA_CONTAINERS, ${r?JSON.stringify(r):"undefined"}, this.getCurrentTraceparent(), this.getCurrentSampleErrors());
+`,contextField:`
+                containers,`,importLines:['import type { ContainerBindingSpec } from "@lunora/container";','import { createContainerContext } from "@lunora/container";'],specs:`
+/** Wiring specs for \`ctx.containers\` (codegen-derived from \`lunora/containers.ts\`). */
+const LUNORA_CONTAINERS: ReadonlyArray<ContainerBindingSpec> = [
+${t}
+];
+`}},Q=e=>{if(e.length===0)return"";const r=e.map(n=>(c(n.exportName,`workflow export "${n.exportName}"`),c(n.className,`workflow class "${n.className}"`),`/** WorkflowEntrypoint for the \`${n.exportName}\` definition, reached as \`ctx.exports.${n.className}\`. */
+export class ${n.className} extends LunoraWorkflow<WorkflowParamsOf<typeof ${n.exportName}>, WorkflowOutputOf<typeof ${n.exportName}>> {
+    public constructor(ctx: ConstructorParameters<typeof LunoraWorkflow>[0], env: Record<string, unknown>) {
+        super(ctx, env, ${n.exportName}, "${n.exportName}");
+    }
+}
+`)).join(`
+`),t=e.map(n=>n.exportName).join(", ");return`${f}/**
+ * WorkflowEntrypoint classes for the workflows declared in
+ * \`lunora/workflows.ts\`. Re-export them from your worker entry — wrangler
+ * requires each \`workflows[].class_name\` to be exported by the worker:
+ *
+ * \`export * from "./lunora/_generated/workflows.js";\`
+ */
+import LunoraWorkflow from "@lunora/workflow/do";
+
+import { ${t} } from "../workflows.js";
+
+/** Params type carried by a \`defineWorkflow\` definition (its phantom \`__params\`), so each entrypoint keeps the authored \`ctx.params\` type. */
+type WorkflowParamsOf<Definition> = Definition extends { __params?: infer Params }
+    ? unknown extends Params
+        ? Record<string, unknown>
+        : NonNullable<Params>
+    : Record<string, unknown>;
+
+/** Output type carried by a \`defineWorkflow\` definition (its phantom \`__output\`), so each entrypoint keeps the authored return type. */
+type WorkflowOutputOf<Definition> = Definition extends { __output?: infer Output } ? Output : unknown;
+
+${r}`},M=e=>{if(e.length===0)return"";const t=e.filter(s=>s.voice).length>0,n=e.map(s=>{c(s.exportName,`agent export "${s.exportName}"`),c(s.className,`agent class "${s.className}"`);const l=`/** WorkflowEntrypoint for the \`${s.exportName}\` agent, reached as \`ctx.exports.${s.className}\`. */
+export class ${s.className} extends LunoraWorkflow<AgentRunInput, AgentRunResult> {
+    public constructor(ctx: ConstructorParameters<typeof LunoraWorkflow>[0], env: Record<string, unknown>) {
+        super(ctx, env, compileAgentWorkflow(${s.exportName}, "${s.exportName}"), "${s.exportName}");
+    }
+}
+`;if(!s.voice)return l;const a=s.voiceClassName??"",m=s.voiceBindingName??"";c(a,`agent voice class "${a}"`);const g=`
+/** Voice-session Durable Object for the \`${s.exportName}\` agent (binding \`${m}\`). */
+export class ${a} extends VoiceSessionDO {
+    public constructor(ctx: ConstructorParameters<typeof VoiceSessionDO>[0], env: Record<string, unknown>) {
+        super(ctx, env, ${s.exportName}, "${s.exportName}");
+    }
+}
+`;return`${l}${g}`}).join(`
+`),o=e.map(s=>s.exportName).join(", ");return`${f}/**
+ * WorkflowEntrypoint classes for the agents declared in \`lunora/agents.ts\`.
+ * Each \`defineAgent\` compiles a replay-safe tool-loop onto a Cloudflare
+ * Workflow. Re-export them from your worker entry — wrangler requires each
+ * \`workflows[].class_name\` to be exported by the worker:
+ *
+ * \`export * from "./lunora/_generated/agents.js";\`${t?"\n *\n * Voice-enabled agents ALSO get a `VoiceSessionDO` subclass here — a real\n * Durable Object (unlike the Workflow), so wrangler needs both its\n * `durable_objects` binding and its `class_name` export (the same re-export\n * line covers it).":""}
+ */
+import LunoraWorkflow from "@lunora/workflow/do";
+${t?'import { compileAgentWorkflow, VoiceSessionDO } from "@lunora/agent";':'import { compileAgentWorkflow } from "@lunora/agent";'}
+import type { AgentRunInput, AgentRunResult } from "@lunora/agent";
+
+import { ${o} } from "../agents.js";
+
+${n}`},K=e=>{const r=e.filter(o=>o.mode==="push");if(r.length===0)return"";for(const o of r)c(o.exportName,`queue export "${o.exportName}"`);const t=r.map(o=>o.exportName).join(", "),n=r.map(o=>`    ${JSON.stringify(o.name)}: { binding: ${JSON.stringify(o.bindingName)}, definition: ${o.exportName}, exportName: ${JSON.stringify(o.exportName)} },`).join(`
+`);return`${f}/**
+ * Push-consumer registry for the queues declared in \`lunora/queues.ts\`. The
+ * composed worker's \`queue(batch, env, ctx)\` entry routes each delivered batch
+ * by \`batch.queue\` to the matching \`defineQueue\` handler. Wired automatically
+ * by \`defineApp\` — you don't import this directly.
+ */
+import type { QueueRegistry } from "@lunora/queue";
+
+import { ${t} } from "../queues.js";
+
+/** Stable wrangler queue name → { binding, definition, exportName } for batch routing. */
+export const LUNORA_QUEUE_REGISTRY: QueueRegistry = {
+${n}
+};
+`},G=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const t of e)c(t.exportName,`workflow export "${t.exportName}"`),c(t.className,`workflow class "${t.className}"`);const r=e.map(t=>`    { className: "${t.className}", exportName: "${t.exportName}" },`).join(`
+`);return{build:`
+            const workflows = createWorkflowContext(env, LUNORA_WORKFLOWS, this.state.exports);
+`,contextField:`
+                workflows,`,importLines:['import type { WorkflowBindingSpec } from "@lunora/workflow";','import { createWorkflowContext } from "@lunora/workflow";'],specs:`
+/** Wiring specs for \`ctx.workflows\` (codegen-derived from \`lunora/workflows.ts\`). */
+const LUNORA_WORKFLOWS: ReadonlyArray<WorkflowBindingSpec> = [
+${r}
+];
+`}},H=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const t of e)c(t.exportName,`queue export "${t.exportName}"`),c(t.bindingName,`queue binding "${t.bindingName}"`);const r=e.map(t=>`    { binding: "${t.bindingName}", exportName: "${t.exportName}", name: ${JSON.stringify(t.name)} },`).join(`
+`);return{build:`
+            const queues = createQueueContext(env, LUNORA_QUEUES);
+`,contextField:`
+                queues,`,importLines:['import type { QueueBindingSpec } from "@lunora/queue";','import { createQueueContext } from "@lunora/queue";'],specs:`
+/** Wiring specs for \`ctx.queues\` (codegen-derived from \`lunora/queues.ts\`). */
+const LUNORA_QUEUES: ReadonlyArray<QueueBindingSpec> = [
+${r}
+];
+`}},V=(e,r)=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};const t=e.map(n=>{c(n.exportName,`topic export "${n.exportName}"`);const o=v(r,n.exportName).map(i=>`{ binding: "${i.bindingName}", exportName: "${i.exportName}" }`).join(", ");return`    { exportName: "${n.exportName}", subscriptions: [${o}] },`}).join(`
+`);return{build:`
+            const topics = createTopicContext(env, LUNORA_TOPICS);
+`,contextField:`
+                topics,`,importLines:['import type { TopicBindingSpec } from "@lunora/queue";','import { createTopicContext } from "@lunora/queue";'],specs:`
+/** Wiring specs for \`ctx.topics\` (codegen-derived from \`lunora/queues.ts\`): each topic's subscription queues. */
+const LUNORA_TOPICS: ReadonlyArray<TopicBindingSpec> = [
+${t}
+];
+`}},J=(e,r)=>{if(e.length===0)return{build:"",importLines:[],specs:""};const t=e.map(n=>(c(n.name,`service "${n.name}"`),c(n.binding,`service binding "${n.binding}"`),`    { binding: "${n.binding}", name: "${n.name}"${n.rpcEntrypoint===void 0?"":", rpc: true"} },`)).join(`
+`);return{build:`
+            const services = createServices(env, LUNORA_SERVICES);
+`,importLines:[`import type { ServiceBindingSpec } from "${r}";`,`import { createServices } from "${r}";`],specs:`
+/** Wiring specs for \`ctx.services\` (codegen-derived from \`lunora.config\` \`services\`). */
+const LUNORA_SERVICES: ReadonlyArray<ServiceBindingSpec> = [
+${t}
+];
+`}},Y=e=>{if(e.length===0)return{build:"",contextField:"",importLines:[],specs:""};for(const t of e)c(t.exportName,`agent export "${t.exportName}"`),c(t.className,`agent class "${t.className}"`);const r=e.map(t=>`    { className: "${t.className}", exportName: "${t.exportName}"${t.publicRun===!0?", publicRun: true":""} },`).join(`
+`);return{build:`
+            const agents = createAgentContext(env, LUNORA_AGENTS, { exports: this.state.exports });
+`,contextField:`
+                agents,`,importLines:['import { createAgentContext } from "@lunora/agent";','import type { AgentBindingSpec } from "@lunora/agent";'],specs:`
+/** Wiring specs for \`ctx.agents\` (codegen-derived from \`lunora/agents.ts\`). */
+const LUNORA_AGENTS: ReadonlyArray<AgentBindingSpec> = [
+${r}
+];
+`}},$=(e,r,t,n,o)=>({constant:`
+${o}
+const ${e} = ${x(n,r)};
+`,override:`
+        protected override ${t}(): ${r} {
+            return ${e};
+        }
+`}),X=e=>{if(e.length===0)return{constant:"",override:""};const r={workflows:e.map(t=>({className:t.className,exportName:t.exportName,name:t.name}))};return $("LUNORA_WORKFLOWS_INFO","WorkflowsResult","workflowsMetadata",r,"/** Read-only declared-workflow metadata (discovered from `lunora/workflows.ts`) served via `__lunora_admin__:listWorkflows` for the studio's workflows view. */")},z=e=>{if(e.length===0)return{constant:"",override:""};const r={queues:e.map(t=>({binding:t.bindingName,...t.tuning.deadLetterQueue===void 0?{}:{deadLetterQueue:t.tuning.deadLetterQueue},exportName:t.exportName,mode:t.mode,name:t.name,...t.topic===void 0?{}:{topic:t.topic}}))};return $("LUNORA_QUEUES_INFO","QueuesResult","queuesMetadata",r,"/** Read-only declared-queue metadata (discovered from `lunora/queues.ts`) served via `__lunora_admin__:listQueues` for the studio's queues view. */")},Z=e=>e?{imports:['import type { LunoraDatabaseLike as LunoraPaymentDbLike, LunoraPayment, PaymentsFromContextOptions } from "@lunora/payment";','import { paymentsFromContext } from "@lunora/payment";'],build:`
+            const payments: LunoraPayment = config.payment
+                ? paymentsFromContext({ auth: { userId: userId ?? null }, db: db as unknown as LunoraPaymentDbLike }, config.payment(env))
+                : paymentStub;
+`,configField:`
+    payment?: (env: Record<string, unknown>) => PaymentsFromContextOptions;`,contextField:`
+                payments,`,stub:y("paymentStub: LunoraPayment",'throw new Error("ctx.payments: no payment configured. Pass \\`payment\\` to createShardDO().");',["attach","cancelSubscription","check","createCheckout","createPortalSession","handleWebhook","listBalances","listSubscriptions","track"],{cast:" as unknown as LunoraPayment",sync:["attach","cancelSubscription","check","createCheckout","createPortalSession","handleWebhook","listBalances","listSubscriptions","track"]})}:{build:"",configField:"",contextField:"",imports:[],stub:""},ee=e=>e?{imports:['import type { X402Pay, X402PayConfig } from "@lunora/x402/pay";','import { lazyX402Pay } from "@lunora/x402/pay";'],build:`
+            const x402: X402Pay = config.x402
+                ? lazyX402Pay(config.x402(env), { getSecret: (name: string) => secrets.get(name) })
+                : x402Stub;
+`,configField:`
+    x402?: (env: Record<string, unknown>) => X402PayConfig;`,stub:y("x402Stub: X402Pay",'throw new Error("ctx.x402: no pay rail configured. Pass \\`x402\\` to createShardDO().");',["fetch"],{cast:" as unknown as X402Pay",sync:["fetch"]})}:{build:"",configField:"",imports:[],stub:""},te=(e,r,t,n,o)=>["AdvisorProcedure","AdvisoryFinding","DatabaseWriterLike","DataMigrationLike","DispatchBookmark","ExportRow",...n?["FlagsResult"]:[],"ImportShardResult","KeyRange","MaskPoliciesResult","MigrationRunResult","QueryReadScope",...t?["QueuesResult"]:[],"RelatedPage","RunShardApplyCdcArgs","RunShardExportArgs","RunShardFindRelatedArgs","RunShardImportArgs","RunShardMigrationArgs","RlsPoliciesResult","RunShardRankBeforeArgs","RunShardRankPageArgs","RunShardWriteArgs","RunShardWriteResult","SchedulerLike",...o?["SearchBackfillProgress"]:[],"TransactionHeadroomTracker","SchemaLike","ShardDOState","ShardRankPageResult","SqlExec","StorageRulesResult","StudioFeaturesResult","SubscriptionIdentity","SystemReaderStorageLike","TelemetrySink",...e?["VectorBackfillProgress"]:[],...r?["WorkflowsResult"]:[],...e?["WriteHook"]:[]];export{I as a,B as b,q as c,H as d,D as e,V as f,J as g,j as h,G as i,Y as j,Z as k,ee as l,X as m,z as n,W as o,te as p,P as q,y as r,T as s,M as t,U as u,Q as v,K as w};

package/dist/packem_shared/shared-DjUziztz.mjs

@@ -0,0 +1,9 @@
+import{LunoraError as l}from"@lunora/errors";import{acceptsAbsentIr as $}from"./LUNORA_ERROR_CODES-C2s0xWQD.mjs";const b=/^(?:"(?:[^"\\]|\\(?:["\\/bfnrt]|u[0-9A-Fa-f]{4}))*"|'[^'\\]*'|-?\d+(?:\.\d+)?|true|false|null)$/u,_=`// GENERATED by @lunora/codegen — do not edit.
+// Run \`lunora codegen\` to regenerate.
+
+`,w=(e=!1)=>e?{client:"lunorash/client",do:"lunorash/do",flags:"lunorash/flags",server:"lunorash/server",serverDataModel:"lunorash/server/data-model",serverDrizzle:"lunorash/server/drizzle",serverTypes:"lunorash/server/types",values:"lunorash/values"}:{client:"@lunora/client",do:"@lunora/do",flags:"@lunora/flags",server:"@lunora/server",serverDataModel:"@lunora/server/data-model",serverDrizzle:"@lunora/server/drizzle",serverTypes:"@lunora/server/types",values:"@lunora/values"},p=/^[A-Za-z_$][\w$]*$/u,A=/^[\w./-]+$/u,y=(e,n)=>{if(!p.test(e))throw new l("INTERNAL",`@lunora/codegen: ${n} is not a valid JS identifier: ${JSON.stringify(e)}`)},I=e=>e.charAt(0).toUpperCase()+e.slice(1),u=e=>p.test(e)?e:JSON.stringify(e),R=e=>e==="__proto__"?`[${JSON.stringify(e)}]`:u(e),g={any:"unknown",bigint:"bigint",boolean:"boolean",bytes:"ArrayBuffer",date:"number",geoPoint:"{ lat: number; lng: number }",null:"null",number:"number",storage:"string",string:"string",timestamp:"number"},T=e=>{if(e===void 0)return"unknown";if(!b.test(e))throw new l("INTERNAL",`@lunora/codegen: v.literal() argument is not a parseable string/number/boolean/null literal: ${JSON.stringify(e)}`);return e},t=e=>e.column?.notNull===!1?`${a(e)} | null`:a(e),a=e=>{const n=g[e.kind];if(n!==void 0)return n;switch(e.kind){case"array":return`Array<${e.inner?t(e.inner):"unknown"}>`;case"from":return e.tsType??"unknown";case"id":{const r=e.tableName??"_unknown_";return y(r,"v.id() table name"),`Id<"${r}">`}case"literal":return T(e.literalValue);case"object":return e.shape?`{ ${Object.entries(e.shape).map(([s,o])=>m(s,o)).join("; ")} }`:"Record<string, unknown>";case"optional":return`${e.inner?t(e.inner):"unknown"} | undefined`;case"record":{const r=e.keyType?t(e.keyType):"string",s=e.valueType?t(e.valueType):"unknown";return`Record<${r}, ${s}>`}case"union":return e.members&&e.members.length>0?e.members.map(r=>t(r)).join(" | "):"never";default:return"unknown"}},m=(e,n)=>{const r=u(e);if(n.kind==="optional"){const s=n.inner?t(n.inner):"unknown";return`${r}?: ${s}`}return $(n)?`${r}?: ${t(n)}`:`${r}: ${t(n)}`},O=e=>{const n=Object.entries(e);return n.length===0?"{}":`{ ${n.map(([r,s])=>m(r,s)).join("; ")} }`},d=e=>e.kind==="optional"||!!e.column?.hasDefault,E=e=>e.kind==="optional"&&e.inner?e.inner:e,N=e=>{y(e.name,"table name");const n=Object.entries(e.shape).map(([s,o])=>{const f=E(o),c=t(f),i=u(s);return d(o)?`    ${i}?: ${c};`:`    ${i}: ${c};`}).join(`
+`),r=n?`
+${n}
+`:"";return`export interface Insert_${e.name} {
+    _id?: Id<"${e.name}">;
+    _creationTime?: number;${r}}`};export{_ as G,A as I,b as L,y as a,u as b,R as c,w as d,N as e,d as i,I as p,O as r,E as u,t as v};

package/dist/packem_shared/unwrap-handler-return-DVY_kFF7.mjs

@@ -0,0 +1 @@
+import{Node as l,SyntaxKind as g}from"ts-morph";import{lunoraRelativePath as L}from"./listLunoraSourceFiles-CSlcBYlo.mjs";import{posix as D}from"node:path";let S,v;const Ae=e=>{const t=S,n=[];S=n;try{return{erased:n,value:e()}}finally{S=t}},Te=e=>{S?.push(...e)},j=e=>{for(const t of e.getAncestors())if(l.isVariableDeclaration(t))return t.getName()},w=(e,t)=>{S?.push({exportName:j(e),filePath:e.getSourceFile().getFilePath(),line:e.getStartLineNumber(),rendered:t})},Ne=e=>{v!==void 0&&w(v,e)},xe=(e,t)=>{const n=v;v=e;try{return t()}finally{v=n}},k=(e,t)=>{const n=e.exportName??`line ${e.line.toString()}`;return{cacheKey:`procedure_return_type_erased:${t}:${n}`,categories:["SCHEMA"],description:"Codegen renders a procedure's return type into `_generated/`, where only names that resolve from that directory may appear. A type it can neither name nor reproduce structurally — a class instance, a call or index signature, a recursive or very deeply nested shape — is emitted as `unknown` instead, so callers lose the shape while the runtime still returns it.",detail:`\`${n}\` in \`${t}\` (line ${e.line.toString()}) returns \`${e.rendered}\`, which codegen could not reproduce — its generated type is \`unknown\`.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:e.exportName,filePath:t,line:e.line,rendered:e.rendered},name:"procedure_return_type_erased",remediation:"Declare the shape explicitly with `.output(...)`, or export the type from the module that declares it so codegen can name it. A class instance cannot cross the wire at all — return a plain object.",title:"Procedure return type is missing from the generated type"}},De=(e,t)=>{const n=new Map;for(const r of e){const s=k(r,L(t,r.filePath));n.set(s.cacheKey,s)}return[...n.values()].toSorted((r,s)=>r.cacheKey.localeCompare(s.cacheKey))},P=/\bany\b(?!\s*(?:\?\s*)?:)/u,U=/"(?:[^"\\]|\\.)*"|'(?:[^'\\]|\\.)*'|`(?:[^`\\]|\\.)*`/gu,O=e=>P.test(e.replaceAll(U,"")),K="/_generated/",B=e=>{const t=[e.getSymbol(),e.getAliasSymbol()].flatMap(n=>n?.getDeclarations()??[]);return t.length>0&&t.every(n=>n.getSourceFile().getSymbol()===void 0)},F=/^(?<quote>["'])(?<specifier>.*)\k<quote>$/su,T=e=>{for(const t of e.getAncestors())if(l.isModuleDeclaration(t)){const n=F.exec(t.getName());if(n?.groups?.specifier!==void 0)return n.groups.specifier}},h=new WeakMap,V=(e,t)=>{const n=e.getSymbol();if(n===void 0)return;let r=h.get(n.compilerSymbol);return r===void 0&&(r=new Map,h.set(n.compilerSymbol,r)),r.has(t)||r.set(t,n.getExport(t)??e.getExportSymbols().find(s=>s.getName()===t)),r.get(t)},_=(e,t)=>e.getNamespaceImport()!==void 0||e.getNamedImports().some(n=>n.getName()===t),W=(e,t,n)=>e.getModuleSpecifierValue()===t&&_(e,n)?n:void 0,q=(e,t)=>{const n=e.getDefaultImport();if(n===void 0)return;const r=n.getSymbol();return(r?.getAliasedSymbol()??r)?.getDeclarations().includes(t)===!0?"default":void 0},G=(e,t,n)=>{if(!_(e,n))return;const r=e.getModuleSpecifierSourceFile(),s=r===void 0?void 0:V(r,n);return(s?.getAliasedSymbol()??s)?.getDeclarations().includes(t)===!0?n:void 0},X=/^\.\.?(?:$|\/)/u,H=new Map([[".cjs",".cjs"],[".cts",".cjs"],[".d.ts",".js"],[".js",".js"],[".jsx",".jsx"],[".mjs",".mjs"],[".mts",".mjs"],[".ts",".js"],[".tsx",".js"]]),Y=(e,t)=>{const n=t.getModuleSpecifierValue();if(!X.test(n))return;const r=t.getModuleSpecifierSourceFile(),s=r===void 0?void 0:H.get(r.getExtension());if(r===void 0||s===void 0)return;const i=`${D.join(r.getDirectoryPath(),r.getBaseNameWithoutExtension())}${s}`,o=D.relative(e.getDirectoryPath(),i);return o.startsWith(".")?o:`./${o}`},J=(e,t,n)=>{const r=T(t);for(const s of e.getImportDeclarations()){const i=r===void 0?q(s,t)??G(s,t,n):W(s,r,n);if(i!==void 0)return{exportName:i,specifier:Y(e,s)??s.getModuleSpecifierValue()}}},z=(e,t)=>Object.keys(t.getProject().getCompilerOptions().paths??{}).some(n=>{const r=n.indexOf("*");return r===-1?e===n:e.startsWith(n.slice(0,r))&&e.endsWith(n.slice(r+1))}),m={kind:"verbatim"},p={kind:"expand"},Q=new Set([g.ClassDeclaration,g.EnumDeclaration,g.EnumMember,g.InterfaceDeclaration,g.TypeAliasDeclaration]),Z=e=>T(e)!==void 0||l.isExportable(e)&&e.isExported(),ee=(e,t)=>new RegExp(String.raw`(?<![$\w])${t.replaceAll(/[$()*+.?[\\\]^{|}]/gu,String.raw`\$&`)}(?![$\w])`,"u").test(e),M=(e,t,n,r)=>{const s=e.getSourceFile();if(s.getSymbol()===void 0&&T(e)===void 0||!Q.has(e.getKind()))return m;const i=s.getFilePath();if(i.includes(K))return m;if(i===n)return p;const o=l.isEnumMember(e)?e.getParent():e;if(!l.hasName(o))return p;const a=J(t.getSourceFile(),o,o.getName());return a===void 0?Z(o)||!ee(r(),o.getName())?m:p:z(a.specifier,t)?p:{kind:"qualify",qualified:a}},te=new Set([g.ClassDeclaration,g.EnumDeclaration,g.FunctionDeclaration,g.ModuleDeclaration]),I=e=>{const t=e?.getDeclarations()??[];return t.length>0&&t.every(n=>n.getSourceFile().getSymbol()===void 0)},ne=e=>{for(const t of e.getDeclarations()){const n=t.getFirstChildByKind(g.ComputedPropertyName);if(n!==void 0){let r=n.getExpression();for(;l.isPropertyAccessExpression(r);)r=r.getExpression();return r}}},re=(e,t)=>{if(e.getProperties().some(s=>{if(!s.getName().startsWith("__@"))return!1;const i=ne(s);return i===void 0||!I(i.getSymbol())}))return!0;const r=e.getSymbol();return r!==void 0&&r.getDeclarations().some(s=>te.has(s.getKind()))&&!I(r)&&t().startsWith("typeof ")},R=(e,t,n)=>{const r=e.getAliasSymbol(),s=e.getSymbol(),i=new Set((r??s)?.getDeclarations());let o=!1,a;const c=()=>(a??=e.getText(t),a);for(const u of[s,r].flatMap(d=>d?.getDeclarations()??[])){const d=M(u,t,n,c);if(d.kind==="qualify"&&i.has(u))return d;o||=d.kind!=="verbatim"}return o||re(e,c)?p:m},se=(e,t,n)=>{const r=l.isPropertySignature(e)||l.isPropertyDeclaration(e)?e.getTypeNode():void 0;if(r===void 0)return m;let s=!1;for(const i of[r,...r.getDescendantsOfKind(g.TypeReference)].filter(o=>l.isTypeReference(o))){const o=i.getTypeName().getSymbol();for(const a of(o?.getAliasedSymbol()??o)?.getDeclarations()??[]){const c=M(a,t,n,()=>i.getText());if(c.kind==="qualify")return c;s||=c.kind!=="verbatim"}}return s?p:m},oe=/^[A-Za-z_$][\w$]*$/u,ie=e=>oe.test(e)?e:JSON.stringify(e),$=e=>{const t=[...e.getTypeArguments()];return e.isUnion()&&t.push(...e.getUnionTypes()),e.isIntersection()&&t.push(...e.getIntersectionTypes()),t},y=e=>!e.isObject()||e.isArray()||e.isTuple()||e.getCallSignatures().length>0||e.getConstructSignatures().length>0?!1:e.getStringIndexType()===void 0&&e.getNumberIndexType()===void 0&&!e.getProperties().some(t=>t.getName().startsWith("__@")),E=(e,t,n,r=new Set)=>r.has(e)?!1:(r.add(e),R(e,t,n).kind!=="verbatim"||$(e).some(s=>E(s,t,n,r))?!0:y(e)?e.getProperties().some(s=>s.getDeclarations().some(i=>se(i,t,n).kind!=="verbatim")?!0:E(s.getTypeAtLocation(t),t,n,r)):!1),ae=(e,t)=>{const n=e.getValueDeclaration()??e.getDeclarations()[0];return n&&(l.isPropertySignature(n)||l.isPropertyDeclaration(n))&&n.hasQuestionToken()?!0:t.isUnion()&&t.getUnionTypes().some(r=>r.isUndefined())},C=(e,t)=>e!==void 0&&(y(e)||e.isString()||e.isNumber()||e.isBigInt()||e.isBoolean()||e.isLiteral()||e.isBooleanLiteral()||e.isEnumLiteral()||e.isTemplateLiteral()||e.isNull()||e.isUndefined()||e.isAny()||e.isUnknown()||e.isNever()||e.isVoid())?t:`(${t})`,ce=32,ue=8,le=(e,t,n,r,s,i)=>{const o=e.getArrayElementType(),a=o?i(o,t,n,r,s):void 0;if(a!==void 0)return`${C(o,a)}[]`},ge=(e,t,n,r,s,i)=>{const o=[];for(const a of e.getUnionTypes()){const c=i(a,t,n,r,s);if(c===void 0)return;o.push(c)}return o.join(" | ")},de=(e,t,n,r,s,i)=>{const o=[];for(const a of e.getIntersectionTypes()){const c=i(a,t,n,r,s);if(c===void 0)return;o.push(C(a,c))}return o.join(" & ")},me=(e,t,n,r,s,i)=>{if(!y(e))return;const o=[];for(const a of e.getProperties()){const c=a.getTypeAtLocation(t),u=ae(a,c),d=u&&c.isUnion()?c.getUnionTypes().filter(A=>!A.isUndefined()):[c],N=[];for(const A of d){const x=i(A,t,n,r+1,s);if(x===void 0)return;N.push(x)}o.push(`${ie(a.getName())}${u?"?":""}: ${N.join(" | ")}`)}return o.length>0?`{ ${o.join("; ")} }`:"{}"},fe=e=>{const t=e.getLiteralValue();return typeof t=="string"?JSON.stringify(t):typeof t=="number"?String(t):void 0},pe=e=>[e.getSymbol(),e.getAliasSymbol()].flatMap(t=>t?.getDeclarations()??[]).some(t=>l.isClassDeclaration(t)||l.isClassExpression(t)),b=(e,t,n,r,s=new Set)=>{if(r.has(e)||s.has(e))return!1;if(n>ce)return!0;const i=new Set(r).add(e);if($(e).some(u=>b(u,t,n+1,i,s)))return!0;const o=e.getArrayElementType();if(o!==void 0)return b(o,t,n+1,i,s);if(B(e))return s.add(e),!1;if(e.getCallSignatures().length>0||e.getConstructSignatures().length>0||[e.getSymbol(),e.getAliasSymbol()].flatMap(u=>u?.getDeclarations()??[]).some(u=>l.isClassDeclaration(u)||l.isClassExpression(u)))return!0;const c=y(e)&&e.getProperties().some(u=>b(u.getTypeAtLocation(t),t,n+1,i,s));return c||s.add(e),c},Se=(e,t,n,r,s,i,o)=>{const a=[];for(const c of t.getAliasSymbol()===void 0?t.getTypeArguments():t.getAliasTypeArguments()){const u=o(c,n,r,s+1,i);if(u===void 0)return;a.push(u)}return`import("${e.specifier}").${e.exportName}${a.length>0?`<${a.join(", ")}>`:""}`},ve=e=>[e.getSymbol(),e.getAliasSymbol()].flatMap(t=>t?.getDeclarations()??[]).some(t=>l.isEnumDeclaration(t)||l.isEnumMember(t)),f=(e,t,n,r,s)=>{if(r>ue||s.has(e))return;const i=R(e,t,n);if(i.kind==="verbatim"&&!E(e,t,n))return e.getText(t);const o=new Set(s).add(e);if(!pe(e)){if(e.isEnumLiteral())return fe(e);if(i.kind==="qualify"&&!ve(e)){const a=Se(i.qualified,e,t,n,r,o,f);if(a!==void 0)return a}return e.isArray()?le(e,t,n,r,o,f):e.isUnion()?ge(e,t,n,r,o,f):e.isIntersection()?de(e,t,n,r,o,f):me(e,t,n,r,o,f)}},he=e=>{const t=e.getType().getCallSignatures()[0];if(!t)return"unknown";let n=t.getReturnType();const s=(n.getSymbol()??n.getAliasSymbol())?.getName();if(s==="Promise"||s==="AsyncIterable"||s==="AsyncIterableIterator"||s==="AsyncGenerator"){const a=n.getTypeArguments()[0];a&&(n=a)}const i=n.getText(e);if(!i||i==="any"||i==="never"||O(i)||b(n,e,0,new Set))return"unknown";const o=e.getSourceFile().getFilePath();if(E(n,e,o)){const a=f(n,e,o,0,new Set);return a===void 0&&w(e,i),a??"unknown"}return i};export{E as a,Ne as b,Ae as c,De as d,f as e,O as i,xe as p,Te as r,he as u};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/codegen",
-  "version": "1.0.0-alpha.25",
+  "version": "1.0.0-alpha.250",
   "description": "Code generator for Lunora: emits _generated/{api,server,dataModel}.ts from your schema",
   "keywords": [
     "cloudflare",
@@ -46,14 +46,23 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/advisor": "1.0.0-alpha.14",
-    "@lunora/container": "1.0.0-alpha.5",
-    "@lunora/queue": "1.0.0-alpha.2",
-    "@lunora/scheduler": "1.0.0-alpha.4",
-    "@lunora/values": "1.0.0-alpha.3",
-    "@lunora/workflow": "1.0.0-alpha.5",
+    "@lunora/advisor": "1.0.0-alpha.181",
+    "@lunora/agent": "1.0.0-alpha.163",
+    "@lunora/container": "1.0.0-alpha.66",
+    "@lunora/errors": "1.0.0-alpha.49",
+    "@lunora/platform": "1.0.0-alpha.50",
+    "@lunora/queue": "1.0.0-alpha.86",
+    "@lunora/scheduler": "1.0.0-alpha.104",
+    "@lunora/values": "1.0.0-alpha.59",
+    "@lunora/workflow": "1.0.0-alpha.70",
+    "jiti": "^2.7.0",
+    "quicktype-core": "^26.0.0",
     "ts-morph": "^28.0.0"
   },
+  "peerDependencies": {
+    "@lunora/server": ">=1.0.0-alpha.91 <2.0.0-0",
+    "@lunora/shard-engine": ">=1.0.0-alpha.45 <2.0.0-0"
+  },
   "engines": {
     "node": "^22.15.0 || >=24.11.0"
   }

package/dist/packem_shared/CONTAINERS_FILENAME-DlP6YM_Q.mjs

@@ -1,224 +0,0 @@
-import { existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { containerClassName, containerBindingName, normalizeContainerImage } from '@lunora/container';
-import { SyntaxKind, Node } from 'ts-morph';
-import { diagnosticAt } from './CodegenDiagnosticError-DeblMkzO.mjs';
-
-const CONTAINERS_FILENAME = "containers.ts";
-const isDefineContainer = (identifier) => {
-  const symbol = identifier.getSymbol();
-  if (!symbol) {
-    return identifier.getText() === "defineContainer";
-  }
-  for (const declaration of symbol.getDeclarations()) {
-    if (!Node.isImportSpecifier(declaration)) {
-      continue;
-    }
-    if (declaration.getImportDeclaration().getModuleSpecifierValue() !== "@lunora/container") {
-      return false;
-    }
-    return declaration.getNameNode().getText() === "defineContainer";
-  }
-  return false;
-};
-const stringProperty = (expression, exportName, property) => {
-  if (Node.isStringLiteral(expression) || Node.isNoSubstitutionTemplateLiteral(expression)) {
-    return expression.getLiteralValue();
-  }
-  throw diagnosticAt(
-    expression,
-    `container "${exportName}": \`${property}\` must be a static string literal — it is deploy configuration codegen writes into wrangler.jsonc`
-  );
-};
-const numberProperty = (expression, exportName, property) => {
-  if (Node.isNumericLiteral(expression)) {
-    return expression.getLiteralValue();
-  }
-  throw diagnosticAt(
-    expression,
-    `container "${exportName}": \`${property}\` must be a static number literal — it is deploy configuration codegen writes into wrangler.jsonc`
-  );
-};
-const imageFromExpression = (expression, exportName) => {
-  if (Node.isStringLiteral(expression) || Node.isNoSubstitutionTemplateLiteral(expression)) {
-    return normalizeContainerImage(expression.getLiteralValue());
-  }
-  if (Node.isObjectLiteralExpression(expression)) {
-    const registry = expression.getProperty("registry");
-    if (registry && Node.isPropertyAssignment(registry)) {
-      const initializer = registry.getInitializerOrThrow();
-      return normalizeContainerImage({ registry: stringProperty(initializer, exportName, "image.registry") });
-    }
-    const build = expression.getProperty("build");
-    if (build && Node.isPropertyAssignment(build)) {
-      const initializer = build.getInitializerOrThrow();
-      return normalizeContainerImage({ build: stringProperty(initializer, exportName, "image.build") });
-    }
-  }
-  throw diagnosticAt(expression, `container "${exportName}": \`image\` must be a static string path, { registry: "…" }, or { build: "…" } literal`);
-};
-const stringRecordLiteral = (expression) => {
-  if (!Node.isObjectLiteralExpression(expression)) {
-    return void 0;
-  }
-  const record = {};
-  for (const property of expression.getProperties()) {
-    if (!Node.isPropertyAssignment(property)) {
-      continue;
-    }
-    const value = property.getInitializerOrThrow();
-    if (Node.isStringLiteral(value) || Node.isNoSubstitutionTemplateLiteral(value)) {
-      record[property.getName()] = value.getLiteralValue();
-    }
-  }
-  return Object.keys(record).length > 0 ? record : void 0;
-};
-const rolloutLiteral = (expression) => {
-  if (!Node.isObjectLiteralExpression(expression)) {
-    return void 0;
-  }
-  const rollout = {};
-  for (const property of expression.getProperties()) {
-    if (!Node.isPropertyAssignment(property)) {
-      continue;
-    }
-    const key = property.getName();
-    const value = property.getInitializerOrThrow();
-    if (Node.isNumericLiteral(value) && (key === "gracePeriodSeconds" || key === "stepPercentage")) {
-      rollout[key] = value.getLiteralValue();
-    }
-  }
-  return rollout.gracePeriodSeconds === void 0 && rollout.stepPercentage === void 0 ? void 0 : rollout;
-};
-const booleanLiteral = (expression) => {
-  if (Node.isTrueLiteral(expression)) {
-    return true;
-  }
-  if (Node.isFalseLiteral(expression)) {
-    return false;
-  }
-  return void 0;
-};
-const stringOrNumberLiteral = (expression) => {
-  if (Node.isStringLiteral(expression) || Node.isNoSubstitutionTemplateLiteral(expression)) {
-    return expression.getLiteralValue();
-  }
-  if (Node.isNumericLiteral(expression)) {
-    return expression.getLiteralValue();
-  }
-  return void 0;
-};
-const instanceTypeFromExpression = (expression, exportName) => {
-  if (Node.isStringLiteral(expression)) {
-    return expression.getLiteralValue();
-  }
-  if (Node.isObjectLiteralExpression(expression)) {
-    const custom = {};
-    for (const property of expression.getProperties()) {
-      if (!Node.isPropertyAssignment(property)) {
-        throw diagnosticAt(property, `container "${exportName}": \`instanceType\` must be an object of static number literals`);
-      }
-      const key = property.getName();
-      if (key !== "diskMb" && key !== "memoryMib" && key !== "vcpu") {
-        throw diagnosticAt(property, `container "${exportName}": unknown \`instanceType\` field "${key}" — expected vcpu, memoryMib, or diskMb`);
-      }
-      custom[key] = numberProperty(property.getInitializerOrThrow(), exportName, `instanceType.${key}`);
-    }
-    return custom;
-  }
-  throw diagnosticAt(expression, `container "${exportName}": \`instanceType\` must be a static string or { vcpu, memoryMib, diskMb } literal`);
-};
-const containerFromCall = (call, exportName) => {
-  const argument = call.getArguments()[0];
-  if (!argument || !Node.isObjectLiteralExpression(argument)) {
-    throw diagnosticAt(call, `container "${exportName}": defineContainer must be passed an inline object literal`);
-  }
-  const ir = {
-    bindingName: containerBindingName(exportName),
-    className: containerClassName(exportName),
-    exportName,
-    image: { buildContext: ".", dockerfilePath: "./Dockerfile", kind: "dockerfile" }
-  };
-  let sawImage = false;
-  for (const property of argument.getProperties()) {
-    if (!Node.isPropertyAssignment(property)) {
-      continue;
-    }
-    const key = property.getName();
-    const initializer = property.getInitializerOrThrow();
-    switch (key) {
-      case "buildArgs": {
-        ir.buildArgs = stringRecordLiteral(initializer);
-        break;
-      }
-      case "enableInternet": {
-        ir.enableInternet = booleanLiteral(initializer);
-        break;
-      }
-      case "image": {
-        ir.image = imageFromExpression(initializer, exportName);
-        sawImage = true;
-        break;
-      }
-      case "instanceType": {
-        ir.instanceType = instanceTypeFromExpression(initializer, exportName);
-        break;
-      }
-      case "maxInstances": {
-        ir.maxInstances = numberProperty(initializer, exportName, "maxInstances");
-        break;
-      }
-      case "name": {
-        ir.name = stringProperty(initializer, exportName, "name");
-        break;
-      }
-      case "rollout": {
-        ir.rollout = rolloutLiteral(initializer);
-        break;
-      }
-      case "sleepAfter": {
-        ir.sleepAfter = stringOrNumberLiteral(initializer);
-        break;
-      }
-    }
-  }
-  if (!sawImage) {
-    throw diagnosticAt(argument, `container "${exportName}": defineContainer requires a static \`image\` property`);
-  }
-  return ir;
-};
-const containersFromSource = (source) => {
-  const containers = [];
-  for (const declaration of source.getVariableDeclarations()) {
-    if (!declaration.isExported()) {
-      continue;
-    }
-    const initializer = declaration.getInitializer();
-    if (initializer?.getKind() !== SyntaxKind.CallExpression) {
-      continue;
-    }
-    const call = initializer;
-    const callee = call.getExpression();
-    if (!Node.isIdentifier(callee) || !isDefineContainer(callee)) {
-      continue;
-    }
-    const nameNode = declaration.getNameNode();
-    if (!Node.isIdentifier(nameNode)) {
-      throw diagnosticAt(nameNode, "defineContainer exports must be plain named exports (no destructuring)");
-    }
-    containers.push(containerFromCall(call, nameNode.getText()));
-  }
-  return containers;
-};
-const discoverContainers = (project, lunoraDirectory) => {
-  const containersPath = join(lunoraDirectory, CONTAINERS_FILENAME);
-  if (!existsSync(containersPath)) {
-    return [];
-  }
-  const source = project.getSourceFile(containersPath) ?? project.addSourceFileAtPath(containersPath);
-  const containers = containersFromSource(source);
-  containers.sort((a, b) => a.exportName.localeCompare(b.exportName));
-  return containers;
-};
-
-export { CONTAINERS_FILENAME, discoverContainers };