@lunora/codegen 1.0.0-alpha.250 → 1.0.0-alpha.252

package/dist/packem_shared/DEFAULT_TARGET-Co7ZXJ21.mjs

@@ -0,0 +1 @@
+import{NODE_CAPABILITIES as f,CLOUDFLARE_CAPABILITIES as h,CELLD_CAPABILITIES as b}from"@lunora/platform";import{readProjectConfigLiterals as g}from"./loadProjectConfig-nNIDOrlR.mjs";const d="cloudflare",v=t=>{const{target:e}=g(t);return e!==void 0&&e.length>0?e:void 0},A=(t,e)=>e??v(t)??d,L=(t,e)=>{if(e!==void 0)return[];const{target:a,unreadable:r}=g(t);return r!==!0||a!==void 0?[]:[{level:"warn",message:`lunora.config declares a \`target\` that codegen cannot read without evaluating it, so the "${d}" surface was emitted. \`runCodegen\` resolves the target synchronously, which means it reads literals only.`,name:"platform_unreadable_target",remediation:`Write \`target\` as a string literal on the config's default export (\`export default { target: "${d}" }\`), or pass \`--target\`.`,target:d}]},u={celld:b,cloudflare:h,node:f},C=()=>Object.keys(u).toSorted((t,e)=>t.localeCompare(e)),S={access:null,ai:"ai",aiSearch:"aiSearch",analytics:"analytics",analyticsSql:"analyticsSql",artifacts:"artifacts",browser:"browser",container:"containers",flags:null,hyperdrive:"hyperdrive",images:"images",kv:"keyValueStore",mail:"mail",notify:null,payments:null,pipelines:"pipelines",r2sql:null,scheduler:"scheduler",storage:"objectStorage",vectors:"vectorStore",workflows:"workflows",x402:null},w=["agents","commitOrderedTables","containerEgressPolicy","containerRuntimeScheduling","containerSandboxTools","cronTriggers","crossShardFanout","durableStreams","globalTables","queues","relationGraph","secrets","services","topics","vectorStore","workerLoaders","workflowRollback","workflowSchedules"],m={agents:"durable agents (`defineAgent`)",commitOrderedTables:"commit-ordered tables (`.commitOrdered()`)",containerEgressPolicy:"container egress policies (`defineContainer({ allowedHosts | deniedHosts | interceptHttps })`)",containerRuntimeScheduling:'per-instance container images and snapshots (`defineContainer({ schedulingPolicy: "durable_object" })`)',containerSandboxTools:"container sandbox helpers — files, directory backups, bucket mounts (`defineContainer({ sandbox: true })`)",cronTriggers:"declared cron triggers (`cronJobs()`)",crossShardFanout:"cross-shard fan-out queries (a `.shardBy(...)` schema)",durableStreams:"durable streams (`.stream(handler, { durable: true })`)",globalTables:"global tables (`.global()`)",queues:"queues (`defineQueue`)",relationGraph:"relation-graph traversal (`ctx.db.related`, derived from `v.id(...)` columns)",secrets:"the secrets store (`ctx.secrets`)",services:"service bindings to sibling Workers (`lunora.config` `services`)",topics:"pub/sub topics (`defineTopic` / `defineSubscription`)",vectorStore:"vector indexes (`.vectorize()`)",workerLoaders:"sandboxed agent scripts (`jsCodeTool`, on Worker Loaders)",workflowRollback:"workflow step rollback (`defineStep({ rollback })`)",workflowSchedules:"scheduled workflow instances (`defineWorkflow({ schedules })`)"},y=(t,e,a)=>({level:"error",message:`${e.name} does not support ${m[t]}, which this app declares.`,name:"platform_unsupported_feature",remediation:`Remove the declaration, or deploy to a target whose capability matrix marks "${t}" as native or emulated.`,target:a}),T=(t,e,a)=>({level:"error",message:`${e.name}'s capability matrix does not declare a support level for ${m[t]}, which this app declares. Treated as unsupported.`,name:"platform_undeclared_feature",remediation:`Rate "${t}" in the ${e.name} capability matrix as "native", "emulated", or "unsupported" — an undeclared feature fails closed rather than letting the app deploy onto a primitive the host may not provide.`,target:a}),k=t=>{const{diagnostics:e,gatedSignals:a,matrix:r,reported:n,signals:c,target:i}=t;for(const s of w){if(c[s]!==!0)continue;const o=r.features[s]?.level;o!=="unsupported"&&o!==void 0||(a[s]=!1,!n.has(s)&&e.push(o==="unsupported"?y(s,r,i):T(s,r,i)))}},_=(t,e,a,r={})=>{const n={...t},c={...r},i=[],s=new Set;for(const[o,l]of Object.entries(S)){if(l===null||!t[o])continue;const p=e.features[l]?.level;p==="unsupported"?(n[o]=!1,s.add(l),i.push({feature:o,level:"error",message:`${e.name} does not support "${o}" (ctx.${o}).`,name:"platform_unsupported_feature",remediation:`Remove the ctx.${o} usage, or deploy to a target whose capability matrix marks "${l}" as native or emulated.`,target:a})):p===void 0&&(n[o]=!1,s.add(l),i.push({feature:o,level:"error",message:`${e.name}'s capability matrix does not declare a support level for "${o}" (ctx.${o}). Treated as unsupported.`,name:"platform_undeclared_feature",remediation:`Rate "${l}" in the ${e.name} capability matrix as "native", "emulated", or "unsupported" — an undeclared feature fails closed rather than shipping a surface the host may not provide.`,target:a}))}return k({diagnostics:i,gatedSignals:c,matrix:e,reported:s,signals:r,target:a}),{diagnostics:i,signals:c,usage:n}},E=(t,e,a={})=>{const r=u[e];return r===void 0?{diagnostics:[{level:"error",message:`Unknown deploy target "${e}" — no capability matrix is registered for it. Codegen emitted the full Cloudflare surface un-gated.`,name:"platform_unknown_target",remediation:`Use a registered target (${Object.keys(u).join(", ")}) or install the target's @lunora/platform-${e} package.`,target:e}],signals:{...a},usage:{...t}}:_(t,r,e,a)},I=t=>{const e=u[t];if(e===void 0)return;const a=Object.entries(e.features).filter(([,r])=>r.level==="unsupported").map(([r])=>r).toSorted((r,n)=>r.localeCompare(n));return{id:e.id,name:e.name,unsupported:a}};export{S as CAPABILITY_TO_FEATURE,d as DEFAULT_TARGET,_ as gateAgainstMatrix,E as gatePlatformFeatures,C as platformMatrixIds,v as readProjectTarget,L as readTargetDiagnostics,A as resolveCodegenTarget,I as studioPlatformFor};

package/dist/packem_shared/SCHEMA_SNAPSHOT_FILENAME-DyKj7n2S.mjs

@@ -0,0 +1,11 @@
+import{existsSync as w,mkdirSync as rn,readFileSync as cs,writeFileSync as on,rmSync as an}from"node:fs";import{join as h,dirname as he}from"node:path";import{performance as Ke}from"node:perf_hooks";import{runAdvisor as cn}from"@lunora/advisor";import{LunoraError as U}from"@lunora/errors";import{SyntaxKind as l,Node as i,VariableDeclarationKind as ln,Project as Ot}from"ts-morph";import{serializeSchemaSnapshot as un}from"./SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import{toAdvisorContext as dn}from"./formatAdvisories-DwmUKYuc.mjs";import{readProjectConfigLiterals as fn}from"./loadProjectConfig-nNIDOrlR.mjs";import{a as Rt,d as pn,r as gn}from"./modules-DyCocr1e.mjs";import{QUEUES_FILENAME as mn,discoverQueueDeclarations as hn}from"./QUEUES_FILENAME-RGwht3Xu.mjs";import{WORKFLOWS_FILENAME as vn,discoverWorkflows as xn}from"./WORKFLOWS_FILENAME-4-ib4HH-.mjs";import{r as En}from"./json-data-Chfs2Cz5.mjs";import{s as be}from"./paths-C-9fwEgQ.mjs";import{G as Sn}from"./shared-DjUziztz.mjs";import{CAPABILITIES as yn,usedCapabilities as An}from"./CAPABILITY_PROBES-LYIlPWT3.mjs";import{isD1GlobalTable as ls,isHyperdriveGlobalTable as us}from"./isD1GlobalTable-udvHAAzD.mjs";import{discoverAgents as bn}from"./AGENTS_FILENAME-D8SgT3OR.mjs";import{discoverContainers as Nn}from"./CONTAINERS_FILENAME-C13yKxas.mjs";import wn from"./discoverCrons-BEALHx1S.mjs";import{diagnosticAt as ae}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{b as Ne}from"./module-specifiers-WF8iAydP.mjs";import{contextPropertiesRead as Pn,discoverFeatureUsage as In}from"./sourceCapabilitySignals-D5p3WRdM.mjs";import Tn from"./readPackageDependencies-C6h6FZuP.mjs";import{listLunoraSourceFiles as g,propertyKeyName as x,unwrapExpression as ne,listSecurityScanFiles as we,objectLiteralFromCallbackBody as ds,propertyInitializer as b,lunoraRelativePath as m,enclosingExportName as re,bindingKeyName as Pe,collectCallRows as F,findObjectProperty as C,collectSecurityCallRows as Cn,RUN_METHODS as fs,functionReferenceSegments as ps,limitNameOf as gs,optionsObjectLiteral as ms,isContextIdentifier as Ve,handlerOf as Fn,isDatabaseAccessor as k,readTargetOf as hs}from"./listLunoraSourceFiles-CSlcBYlo.mjs";import{discoverSandboxUsage as On}from"./discoverSandboxUsage-BnsPld5I.mjs";import{resolveServiceBindings as Rn}from"./readServiceBindings-CeQvSswr.mjs";import Ln from"./discoverStorageRulesMetadata-D3Ot9g5f.mjs";import{a as S,c as B,d as vs,e as kn}from"./classify-procedure-call-CmcShAze.mjs";import{i as Dn}from"./ir-DBSvhNa-.mjs";import{gatePlatformFeatures as Mn,resolveCodegenTarget as xs,readTargetDiagnostics as _n,studioPlatformFor as Kn}from"./DEFAULT_TARGET-Co7ZXJ21.mjs";import{b as Es,e as $n}from"./shard-DRdVWVi_.mjs";import zn from"./emitServer-CLJh410z.mjs";import{emitDataModel as Un}from"./emitDataModel-D3WuEZ4b.mjs";import{r as Ie,s as Bn}from"./parse-validator-C6fHL7OS.mjs";import qn from"./discoverAuthApiCalls-DoSN_yc3.mjs";import{i as jn,a as Wn,e as Vn,b as Hn,d as Gn,c as Yn}from"./unwrap-handler-return-DVY_kFF7.mjs";import Qn from"./discoverFunctions-BcBzcG5x.mjs";import Xn from"./discoverHttpRoutes-CJHS4llq.mjs";import Jn from"./discoverHyperdriveCalls-Bkbh4tG7.mjs";import Zn from"./discoverInserts-DpuLYPPd.mjs";import{m as Ze,a as Ee,s as Ss,d as er}from"./index-D7dKfGPh.mjs";import{e as ys}from"./exported-procedure-chains-D48EXUVQ.mjs";import tr from"./discoverMigrations-Dt7ywfZv.mjs";import{MUTATORS_FILENAME as sr,isDefineMutatorCallee as nr,discoverMutators as rr}from"./MUTATORS_FILENAME-DqWOgC5Z.mjs";import or from"./discoverNondeterministicCalls-CNJV2BiP.mjs";import{discoverNotifyConfig as ir,discoverNotifyCalls as ar}from"./NOTIFY_FILENAME-C1J_47et.mjs";import cr from"./discoverQueries-BcdqjYky.mjs";import lr from"./discoverR2sqlCalls-30Wtbc0P.mjs";import ur from"./discoverRlsProcedures-F4Cy-kSi.mjs";import dr from"./discoverRlsMetadata-mXBmPOGj.mjs";import fr from"./discoverSchema-D5R60b4F.mjs";import{secretKindOf as pr,redact as gr,isHeuristicSecretKind as mr,isSecretishName as hr}from"./redact-Cy14LEnc.mjs";import{discoverShapes as vr}from"./SHAPES_FILENAME-DRUFomCj.mjs";import{emitApp as xr}from"./emitApp-DPzAn_NF.mjs";import{buildOpenApiDocument as Er,emitOpenApiModule as Sr}from"./buildOpenApiDocument-SxfElVzK.mjs";import{buildOpenRpcDocument as yr,emitOpenRpcModule as Ar}from"./OPENRPC_VERSION-Cr7Zzp6s.mjs";import{buildSchemaSnapshot as br}from"./SchemaSnapshotParseError-CPOXlFhI.mjs";import{emitCollections as Nr,emitSeed as wr,emitApi as Pr}from"./emitApi-DdW9RyGG.mjs";import{t as Ir,u as Tr,s as Cr,v as Fr}from"./shard-runtime-B9wmfm43.mjs";import{emitCrons as Or,emitScheduler as Rr,emitShardRegistry as Lr,emitVectors as kr,emitWranglerCronTriggers as Dr}from"./emitCrons-BRKXFGFu.mjs";import Mr from"./emitDrizzleSchema-Cv0HtLR3.mjs";import _r from"./emitFunctions-BgNeOZt_.mjs";const Lt={error:"ERROR",info:"INFO",warn:"WARN"},kt={ERROR:2,INFO:0,WARN:1},Kr=e=>({cacheKey:"advisor_min_severity_invalid",categories:["SCHEMA"],description:"`advisor.minSeverity` in `lunora.config.*` sets the lowest advisory level codegen reports and writes into `_generated/shard.ts`. Codegen reads it by parsing the file, so it has to be a string literal.",detail:e,facing:"INTERNAL",level:"WARN",metadata:{},name:"advisor_min_severity_invalid",remediation:'Set `advisor: { minSeverity: "info" | "warn" | "error" }` as a literal on the config\'s default export.',title:"`advisor.minSeverity` is not a level codegen can read, so every advisory was reported"}),$r=(e,t)=>{const{advisor:s}=fn(e);if(s===void 0||s.minSeverity===void 0&&s.unreadable!==!0)return[...t];const{minSeverity:n}=s,o=n!==void 0&&Object.hasOwn(Lt,n)?Lt[n]:void 0;return o===void 0?[...t,Kr(n===void 0?"`advisor.minSeverity` is not a string literal codegen can read without evaluating the config: a computed value or key, or a spread that could set or override it.":`\`advisor.minSeverity\` is "${n}", which is not one of "info", "warn" or "error".`)]:t.filter(r=>kt[r.level]>=kt[o])},zr={call:"function",enqueue:"queue",invoke:"service",publish:"topic",schedule:"function"},As=mn.replace(/\.ts$/u,""),Ur="crons",Br=vn.replace(/\.ts$/u,""),te=(e,t)=>`${be(e)}:${t}`,$e=(e,t,s)=>t===""?{reason:`the ${s} is not a string literal`}:{to:`${e}:${t}`},qr=e=>[...e.callEdges.map(t=>{const s=t.target===void 0?{reason:t.reason??"unreadable target"}:{to:`${zr[t.kind]}:${t.target}`};return{exportName:t.exportName,file:t.file,kind:t.kind,line:t.line,...s}}),...e.queries.map(t=>({exportName:t.exportName,file:t.file,kind:"read",line:t.line,...$e("table",t.table,"table name")})),...[...e.inserts,...e.tableWrites].map(t=>({exportName:t.exportName,file:t.file,kind:"write",line:t.line,...$e("table",t.table,"written table")})),...e.workflowCalls.map(t=>({exportName:t.exportName,file:t.file,kind:"start",line:t.line,...$e("workflow",t.workflow,"workflow name")}))],jr=e=>[...e.queues.flatMap(t=>t.topic===void 0?[]:[{exportName:t.exportName,file:As,from:`topic:${t.topic}`,kind:"subscribe",line:0,to:`queue:${t.exportName}`}]),...e.crons.map(t=>{const s=t.workflow===void 0?void 0:`workflow:${t.workflow.exportName}`,n=t.functionPath===void 0?void 0:`function:${t.functionPath}`,o=s??n;return{exportName:t.name,file:Ur,from:`cron:${t.name}`,kind:"trigger",line:0,...o===void 0?{reason:"the cron has no target"}:{to:o}}})],Wr=e=>new Map(e.flatMap(t=>t.tables.map(s=>[s,t.name]))),ze=(e,t)=>t===void 0?e:{...e,module:t},Vr=e=>{const t=new Map,s=new Map,n=Wr(e.modules),o=(r,a)=>{t.set(r.id,r),a!==void 0&&s.set(a,r.id)};for(const r of e.functions){const a=te(r.filePath,r.exportName),c=`${be(r.filePath)}.${r.exportName}`;o(ze({detail:r.kind,id:`function:${a}`,kind:"function",name:c},Rt(e.modules,r.filePath)),a)}for(const r of e.httpRoutes){const a=te(r.filePath,r.exportName);o(ze({id:`http:${a}`,kind:"http",name:`${r.method} ${r.path}`},Rt(e.modules,r.filePath)),a)}for(const r of e.schema.tables)o(ze({id:`table:${r.name}`,kind:"table",name:r.name},n.get(r.name)));for(const r of e.queues){const a=r.topic===void 0?{}:{detail:"subscription"};o({...a,id:`queue:${r.exportName}`,kind:"queue",name:r.exportName},te(As,r.exportName))}for(const r of e.topics)o({id:`topic:${r.exportName}`,kind:"topic",name:r.exportName});for(const r of e.workflows)o({id:`workflow:${r.exportName}`,kind:"workflow",name:r.exportName},te(Br,r.exportName));for(const r of e.crons)o({detail:r.cron,id:`cron:${r.name}`,kind:"cron",name:r.name});for(const r of e.services){const a=r.rpcEntrypoint===void 0?"fetch":"rpc";o({detail:r.entrypoint===void 0?a:`${a} · ${r.entrypoint}`,id:`service:${r.name}`,kind:"service",name:r.worker})}return{nodes:t,sites:s}},Hr=e=>e===""?"inside a non-exported helper":e==="default"?"the default export is not a registered function":`"${e}" is not a registered function`,Gr=(e,t,s)=>{if("reason"in e)return{reason:e.reason};const n=e.from??t.get(te(e.file,e.exportName));return n===void 0?{reason:Hr(e.exportName)}:s.has(e.to)?{drawn:{from:n,kind:e.kind,to:e.to}}:{reason:`${e.to} is not declared`}},Ue=e=>`${e.from}|${e.kind}|${e.to}`,Yr=e=>`${e.file}|${String(e.line)}|${e.kind}|${e.reason}`,Qr=e=>{const{nodes:t,sites:s}=Vr(e),n=new Map,o=new Map;for(const r of[...jr(e),...qr(e)]){const a=Gr(r,s,t);if("drawn"in a)n.set(Ue(a.drawn),a.drawn);else{const c={file:r.file,kind:r.kind,line:r.line,reason:a.reason};o.set(Yr(c),c)}}return{edges:[...n.values()].toSorted((r,a)=>Ue(r).localeCompare(Ue(a))),nodes:[...t.values()].toSorted((r,a)=>r.id.localeCompare(a.id)),modules:e.modules.map(r=>({...r.description===void 0?{}:{description:r.description},...r.installed===!0?{installed:!0}:{},...r.ownsFolder===!1?{ownsFolder:!1}:{},name:r.name,tables:[...r.tables]})),unresolved:[...o.values()].toSorted((r,a)=>r.file.localeCompare(a.file)||r.line-a.line),version:1}},Xr=e=>`${Sn}export const architecture = ${En(e,"Record<string, unknown>")};
+`,Jr=(e,t)=>{if(!(!t||e.jurisdiction!=="fedramp"))throw new U("CODEGEN_DIAGNOSTIC",'@lunora/codegen: the schema pins data to the "fedramp" jurisdiction, but this app uses Cloudflare Artifacts (`ctx.artifacts`), which supports only the "eu" and "us" jurisdictions. Repo data would be stored outside the declared residency. Remove the `ctx.artifacts` usage, or pin the schema to a jurisdiction Artifacts supports.')},Dt=(e,t="api")=>{const s=new Map;for(const n of e){const o=be(n),r=s.get(o);if(r===void 0){s.set(o,n);continue}if(r!==n){const a=t==="api"?`the generated api.ts would declare "${o}" twice and the dispatch key "${o}:<fn>" would be ambiguous`:`the generated api.ts would declare "${o}" twice in HttpStreamsRef and again in the httpStreams object literal`;throw new U("INTERNAL",`@lunora/codegen: "${r}" and "${n}" both map to the ${t} namespace "${o}" — ${a}. Rename one file so the two differ by more than a non-identifier character (\`-\`, \`.\`, \`/\` and \`_\` all sanitize to \`_\`).`,{status:500})}}},Zr=(e,t={})=>{const{hasVectors:s=!0,scheduler:n=!1,storage:o=!1,usage:r}=t,a=[];e.tables.some(c=>ls(c))&&a.push({name:"@lunora/d1",reason:"`.global()` tables are D1-backed, so `_generated/app.ts` imports the D1 `ctx.db` adapter"}),e.tables.some(c=>us(c))&&a.push({name:"@lunora/hyperdrive",reason:'`.global({ backend: "hyperdrive" })` tables route through `@lunora/hyperdrive/global`'},{name:"@lunora/sql-store",reason:'`.global({ backend: "hyperdrive" })` makes `_generated/app.ts` import the `SqlCtxDbOptions` / `SqlExec` types'}),n&&a.push({name:"@lunora/scheduler",reason:"a declared cron (or `ctx.scheduler` use) makes `_generated/app.ts` import `createScheduler`"}),o&&a.push({name:"@lunora/storage",reason:"a `v.storage()` column, a storage access rule (or `ctx.storage` use) makes `_generated/app.ts` import `createStorage`"}),e.vectorIndexes.length>0&&s&&a.push({name:"@lunora/bindings",reason:"`.vectorize()` indexes make `_generated/shard.ts` import `@lunora/bindings/vectors`"});for(const c of r===void 0?[]:yn)c.requiredPackage!==void 0&&r?.[c.key]===!0&&a.push({name:c.requiredPackage,reason:`\`ctx.${c.contextProperty??c.key}\` usage makes \`_generated/\` import \`${c.moduleSpecifier}\``});return a.filter((c,u)=>a.findIndex(d=>d.name===c.name)===u)},eo=(e,t,s={})=>{if(t===void 0)return;const n=Zr(e,s).filter(r=>!t.has(r.name));if(n.length===0)return;const o=n.map(r=>`  - ${r.name} — ${r.reason}`).join(`
+`);throw new U("INTERNAL",`@lunora/codegen: this schema's generated code imports packages the project does not declare:
+${o}
+
+Install them with your package manager, then re-run codegen.`)},to="env.ts",so=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineEnv";for(const s of t.getDeclarations())if(i.isImportSpecifier(s))return Ne(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineEnv":!1;return!1},no=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!i.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&Ne(n.getModuleSpecifierValue())}return!1},ro=e=>{if(i.isIdentifier(e))return so(e);if(i.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineEnv"&&i.isIdentifier(t)&&no(t)}return!1},oo=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!ro(n.getExpression()))continue;const r=s.getNameNode();if(!i.isIdentifier(r))throw ae(r,"defineEnv exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},io=(e,t)=>{const s=h(t,to);if(!w(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),o=oo(n);if(o.length!==0){if(o.length>1)throw ae(n,`lunora/env.ts declares ${o.length.toString()} defineEnv() contracts (${o.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return o[0]}},bs="identity.ts",ao=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineIdentity";for(const s of t.getDeclarations())if(i.isImportSpecifier(s))return Ne(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineIdentity":!1;return!1},co=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!i.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(l.ImportDeclaration);return n!==void 0&&Ne(n.getModuleSpecifierValue())}return!1},lo=e=>{if(i.isIdentifier(e))return ao(e);if(i.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineIdentity"&&i.isIdentifier(t)&&co(t)}return!1},uo=e=>{const t=[];for(const s of e.getVariableDeclarations()){if(!s.isExported())continue;const n=s.getInitializer();if(n?.getKind()!==l.CallExpression||!lo(n.getExpression()))continue;const r=s.getNameNode();if(!i.isIdentifier(r))throw ae(r,"defineIdentity exports must be plain named exports (no destructuring)");t.push({exportName:r.getText()})}return t},fo=(e,t)=>{const s=h(t,bs);if(!w(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),o=uo(n);if(o.length!==0){if(o.length>1)throw ae(n,`lunora/identity.ts declares ${o.length.toString()} defineIdentity() contracts (${o.map(r=>r.exportName).join(", ")}); exactly one is allowed`);return o[0]}},po=new Set(["allowedHosts","deniedHosts","interceptHttps"]),go=(e,t)=>{const s=ne(t);if(s===void 0||!i.isIdentifier(s))return s;const n=s.getText();return ne(e.getDescendantsOfKind(l.VariableDeclaration).find(o=>o.getName()===n)?.getInitializer())},mo=(e,t)=>e!==void 0&&i.isObjectLiteralExpression(e)&&e.getProperties().some(s=>{if(i.isShorthandPropertyAssignment(s))return t.has(x(s));if(!i.isPropertyAssignment(s)||!t.has(x(s)))return!1;const n=ne(s.getInitializer())?.getText();return n!=="false"&&n!=="undefined"}),ho=new Set(["durable"]),vo=new Set(["rollback"]),xo=e=>{const t=e.getExpression();return i.isPropertyAccessExpression(t)?t.getName():t.getText()},Eo=new Map([["defineContainer",{keys:po,signal:"containerEgressPolicy"}],["defineStep",{keys:vo,signal:"workflowRollback"}],["stream",{keys:ho,signal:"durableStreams"}]]),So=(e,t)=>{const s=Eo.get(xo(t));if(s!==void 0)return t.getArguments().some(n=>mo(go(e,n),s.keys))?s.signal:void 0},yo=(e,t)=>{const s={containerEgressPolicy:!1,durableStreams:!1,secrets:!1,workflowRollback:!1};for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.secrets||(s.secrets=Pn(o).has("secrets"));for(const r of o.getDescendantsOfKind(l.CallExpression)){const a=So(o,r);a!==void 0&&(s[a]=!0)}if(Object.values(s).every(Boolean))break}return s},Ao="createWorker",bo="extend",Mt=e=>e!==void 0&&(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))?e.getLiteralValue():void 0,_t=e=>{const t=[],s=Mt(b(e,"backupCron"));s!==void 0&&t.push(s);const n=b(e,"crons");if(n===void 0||!i.isObjectLiteralExpression(n))return t;for(const o of n.getProperties()){if(!i.isPropertyAssignment(o)&&!i.isMethodDeclaration(o))continue;const r=Mt(o.getNameNode());r!==void 0&&t.push(r)}return t},No=e=>{const t=S(e.getExpression()),[s]=e.getArguments();if(s===void 0)return[];if(t===Ao)return i.isObjectLiteralExpression(s)?_t(s):[];if(t!==bo||!(i.isArrowFunction(s)||i.isFunctionExpression(s)))return[];const n=ds(s.getBody());return n===void 0?[]:_t(n)},wo=(e,t)=>{const s=[];for(const{filePath:n}of we(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of o.getDescendantsOfKind(l.CallExpression))s.push(...No(r))}return[...new Set(s)]},Ns=e=>{if(e.kind==="id")return e.tableName;if(!(e.kind!=="array"&&e.kind!=="optional"))return e.inner===void 0?void 0:Ns(e.inner)},Po=e=>{const t=new Set(e.tables.map(s=>s.name));return e.tables.some(s=>Object.values(s.shape).some(n=>{const o=Ns(n);return o!==void 0&&t.has(o)}))},Io=(e,t)=>{const s=new Map,n=new Map;for(const o of e)s.set(o.name,`workflow "${o.exportName}"`),n.set(o.className,`workflow "${o.exportName}"`);for(const o of t){const r=s.get(o.name);if(r!==void 0)throw new U("DUPLICATE_WORKFLOW_NAME",`Duplicate deployed name "${o.name}": produced by both ${r} and agent "${o.exportName}". Workflow and agent names share one account-wide namespace and must be unique together.`,{status:500});const a=n.get(o.className);if(a!==void 0)throw new U("DUPLICATE_WORKFLOW_CLASS",`Duplicate generated class "${o.className}": produced by both ${a} and agent "${o.exportName}". Workflow and agent export names must yield unique generated class names.`,{status:500})}},To=e=>{const{lunoraDirectory:t,project:s,projectRoot:n,schema:o}=e,r=fo(s,t),a=io(s,t),c=xn(s,t),{queues:u,topics:d}=hn(s,t),p=Rn(n),v=bn(s,t);Io(c,v);const y=Nn(s,t),L=Ln(s,t),D=wn(s,t,c,v),M=wo(s,t),A=yo(s,t),I=On(s,t),$=In(s,t);$.browser=$.browser||I.usesSandboxBrowser;const q=Mn($,xs(n,e.target),{agents:v.length>0,commitOrderedTables:o.tables.some(P=>P.commitOrdered===!0),cronTriggers:D.length>0,crossShardFanout:o.tables.some(P=>Dn(P)),containerEgressPolicy:A.containerEgressPolicy,containerRuntimeScheduling:y.some(P=>P.schedulingPolicy==="durable_object"),containerSandboxTools:y.some(P=>P.sandbox===!0),durableStreams:A.durableStreams,globalTables:o.tables.some(P=>P.shardMode==="global"),queues:u.length>0,relationGraph:Po(o),secrets:A.secrets,services:p.length>0,topics:d.length>0,vectorStore:o.vectorIndexes.length>0,workerLoaders:I.usesSandboxLoader,workflowRollback:A.workflowRollback,workflowSchedules:c.some(P=>P.schedules!==void 0)}),T=q.usage,G=An(T),J=q.signals.vectorStore!==!1,Z=q.signals.services===!1?[]:p,Y=Tn(n),ce=Y??new Set,z=ce.has("lunorash");eo(o,Y,{hasVectors:J,scheduler:T.scheduler||D.length>0,storage:T.storage||L.rules.length>0||Object.keys(Es(o)).length>0,usage:T});const O=w(h(t,"flags.ts")),R=w(h(t,"notify.ts"));return{agents:v,capabilities:G,containers:y,crons:D,dataModelContent:Un(o),declaredDependencies:Y,dependencies:ce,entryCronTriggers:M,env:a,featureUsage:T,hasFlags:O,hasNotify:R,identity:r,platformGate:{...q,diagnostics:[..._n(n,e.target),...q.diagnostics]},queues:u,serverContent:zn({agents:v,capabilities:G,containers:y,env:a,hasVectors:J,hasFlags:O,hasNotify:R,identity:r,queues:u,schema:o,generatedDirectory:h(t,"_generated"),services:Z,storageRuleBuckets:L.rules.map(P=>P.bucket),topics:d,useUmbrella:z,workflows:c}),services:Z,storageRulesMetadata:L,topics:d,usesSandbox:I.usesSandboxBrowser||I.usesSandboxContainer||I.usesSandboxFs,useUmbrella:z,workflows:c}},ws=new Set(["delete","get","head","options","patch","post","put"]),Co=new Set(["handler","stream"]),Fo=/\/(?:_|admin|internal|superuser|sudo|root|debug)/iu,Kt=new Set(["ADMIN_TOKEN","adminToken","assertAdmin","assertAuth","auth","Authorization","getSession","identity","isAdmin","requireAdmin","requireAuth","requireRole","verifyAdmin"]),Oo=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!ws.has(t.getName()))return;const s=t.getExpression();if(!i.isIdentifier(s)||s.getText()!=="httpRoute")return;const n=e.getArguments()[0];if(!(!n||!i.isStringLiteral(n)))return{method:t.getName().toUpperCase(),path:n.getLiteralValue()}},Ro=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;let s=t.getExpression();for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n)||ws.has(n.getName()))break;s=n.getExpression()}return Oo(s)},Lo=e=>{for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression))if(Kt.has(t.getName()))return!0;for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=t.getExpression();if(i.isIdentifier(s)&&Kt.has(s.getText()))return!0}return!1},ko=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=s.getExpression();if(!i.isPropertyAccessExpression(n)||!Co.has(n.getName()))return;const o=Ro(s);if(!o||!Fo.test(o.path))return;const r=s.getArguments()[0],a=r!==void 0&&(i.isArrowFunction(r)||i.isFunctionExpression(r))&&Lo(r);return{exportName:e.getName(),file:t,method:o.method,path:o.path,usesGuard:a}},Do=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=ko(o,t);r&&s.push(r)}return s},Mo=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Do(o,m(t,n)))}return s},_o=e=>{const t=e.getText(),s=n=>{const o=n.getNameNode();return i.isIdentifier(o)&&o.getText()===t};for(const n of e.getAncestors())if(!(!i.isArrowFunction(n)&&!i.isFunctionExpression(n)&&!i.isFunctionDeclaration(n)))for(const o of n.getParameters()){const r=o.getDescendantsOfKind(l.BindingElement).find(a=>s(a));if(r!==void 0)return r}},Ko=e=>{let t=e;for(;;){const s=t.getParent();if(!i.isObjectBindingPattern(s))return;const n=s.getParent();if(i.isBindingElement(n)){t=n;continue}return i.isParameterDeclaration(n)?Pe(t):void 0}},$t=(e,t)=>{const s=e.getParent();if(i.isPropertyAccessExpression(s)&&s.getNameNode()===e||i.isPropertyAssignment(s)&&s.getNameNode()===e)return!1;if(e.getText()===t)return!0;const n=_o(e);return n!==void 0&&Ko(n)===t},et=(e,t)=>i.isIdentifier(e)?$t(e,t):e.getDescendantsOfKind(l.Identifier).some(s=>$t(s,t)),Be=e=>et(e,"ctx"),$o=e=>{let t=e;for(;i.isPropertyAccessExpression(t)||i.isElementAccessExpression(t)||i.isNonNullExpression(t);)t=t.getExpression();return i.isIdentifier(t)?t:void 0},He=e=>et(e,"args"),_=e=>{if(!i.isIdentifier(e))return;const t=e.getText(),s=e.getFirstAncestor(a=>i.isArrowFunction(a)||i.isFunctionExpression(a)||i.isFunctionDeclaration(a));if(s===void 0)return;const n=e.getStart();let o,r=-1;for(const a of s.getDescendantsOfKind(l.VariableDeclaration)){if(a.getName()!==t)continue;const c=a.getInitializer(),u=a.getStart();c!==void 0&&u<n&&u>r&&(o=c,r=u)}return o},K=e=>{if(He(e))return!0;const t=_(e);return t!==void 0&&He(t)},zo=e=>{if(i.isCallExpression(e)||i.isNewExpression(e))return!1;const t=_(e);return t===void 0||!(i.isCallExpression(t)||i.isNewExpression(t))},W=e=>{if(Be(e))return!0;const t=_(e);if(t!==void 0&&Be(t))return!0;const s=t??e;return(i.isIdentifier(s)?[s]:s.getDescendantsOfKind(l.Identifier)).some(o=>{const r=_(o);return r!==void 0&&Be(r)})},ve=(e,t)=>et(e,t),Uo=(e,t)=>{if(ve(e,t))return!0;const s=_(e);if(s!==void 0&&ve(s,t))return!0;const n=$o(e);if(n!==void 0){const o=_(n);return o!==void 0&&ve(o,t)}return!1},E=e=>re(e)||"<module>",Bo=e=>!i.isPropertyAccessExpression(e)||e.getName()!=="run"?!1:e.getExpression().getText()==="ctx.ai",qo=(e,t)=>{if(!Bo(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!K(s)||W(s)))return{exportName:E(e),file:t,line:e.getStartLineNumber()}},jo=(e,t)=>F(e,t,qo),Wo=new Set(["generateText","streamText"]),Vo=new Set(["messages","prompt","system"]),Ho=[{methods:new Set(["delete","insert","insertManyUnsafe","patch","replace"]),prefixes:["context.db","ctx.db"]},{methods:new Set(["run","runAction","runMutation"]),prefixes:["context","ctx"]},{methods:new Set(["fetch"]),prefixes:["context","ctx"]},{methods:new Set(["queue","send"]),prefixes:["context.email","context.mail","ctx.email","ctx.mail"]}],Go=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=t.getName(),n=t.getExpression().getText();for(const o of Ho)if(o.methods.has(s)&&o.prefixes.some(r=>n===r||n.startsWith(`${r}.`)))return`${n}.${s}`},Yo=e=>{for(const t of e.getDescendantsOfKind(l.CallExpression)){const s=Go(t);if(s!==void 0)return s}},Qo=e=>{const t=new Set,s=e.getFirstAncestor(r=>i.isArrowFunction(r)||i.isFunctionExpression(r)||i.isFunctionDeclaration(r)),[n]=s?.getParameters()??[],o=n?.getNameNode();if(o===void 0||!i.isObjectBindingPattern(o))return t;for(const r of o.getElements()){const a=Pe(r),c=r.getNameNode();if(a==="args"&&i.isObjectBindingPattern(c))for(const u of c.getElements())t.add(u.getName())}return t},Xo=e=>{if(He(e))return!0;const t=Qo(e);return t.size===0?!1:e.getDescendantsOfKind(l.Identifier).some(s=>t.has(s.getText()))},Jo=e=>{for(const t of e.getProperties()){if(!i.isPropertyAssignment(t)||!Vo.has(x(t)))continue;const s=t.getInitializer();if(s!==void 0&&Xo(s))return!0}return!1},Zo=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=S(n.getExpression());if(o===void 0||!Wo.has(o))continue;const[r]=n.getArguments();if(r===void 0||!i.isObjectLiteralExpression(r))continue;let a;for(const c of r.getDescendantsOfKind(l.CallExpression))if(S(c.getExpression())==="tool"&&(a=Yo(c),a!==void 0))break;a!==void 0&&s.push({exportName:E(n),file:t,line:n.getStartLineNumber(),method:o,sideEffect:a,userInputDerived:Jo(r)})}return s},ei=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Zo(o,m(t,n)))}return s},ti=e=>{if(!i.isPropertyAccessExpression(e)||e.getName()!=="fetch")return!1;const t=e.getExpression();return i.isIdentifier(t)&&t.getText()==="ctx"},si=(e,t)=>{if(!ti(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!K(s)))return{exportName:E(e),file:t,line:e.getStartLineNumber()}},ni=(e,t)=>F(e,t,si),tt=(e,t=new Set)=>{if(t.has(e))return!0;t.add(e);try{return e.getProperties().some(s=>{if(!i.isSpreadAssignment(s))return!1;const n=Ie(s.getExpression());return n===void 0||tt(n,t)})}finally{t.delete(e)}},ri=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return{objects:[],opaque:!0};const s=C(t,"args");if(!s)return{objects:[],opaque:!1};if(!i.isPropertyAssignment(s))return{objects:[],opaque:!0};const n=s.getInitializer(),o=n===void 0?void 0:Ie(n);return o===void 0?{objects:[],opaque:!0}:{objects:[o],opaque:tt(o)}},oi=e=>{const t=[];let s=!1,n=e;for(;i.isCallExpression(n);){const o=n.getExpression();if(!i.isPropertyAccessExpression(o))break;if(o.getName()==="input"){const r=n.getArguments()[0],a=r!==void 0&&i.isExpression(r)?Ie(r):void 0;a===void 0?s=!0:(t.push(a),s||=tt(a))}n=o.getExpression()}return{objects:t,opaque:s}},st=(e,t)=>t?oi(t):ri(e),Ps=(e,t)=>{if(t.has(e))return[];t.add(e);try{return e.getProperties().flatMap(s=>{if(i.isSpreadAssignment(s)){const n=Ie(s.getExpression());return n===void 0?[]:Ps(n,t)}return i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)?[x(s)]:[]})}finally{t.delete(e)}},ii=e=>e.flatMap(t=>Ps(t,new Set)),ai=new Set(["check","length","max"]),Ge=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(!(!i.isPropertyAccessExpression(t)||t.getExpression().getText()!=="v"))return t.getName()},ci=e=>[e,...e.getDescendants()].filter(t=>Ge(t)!==void 0),li=e=>{let t=e;for(;;){const s=t.getParent();if(!s||!i.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;const n=s.getParent();if(!n||!i.isCallExpression(n)||n.getExpression()!==s)return!1;if(ai.has(s.getName()))return!0;t=n}},ui=e=>{const t=[],s=[];for(const n of e)for(const o of n.getProperties()){if(!i.isPropertyAssignment(o))continue;const r=o.getInitializer();if(!r)continue;const a=ci(r),c=x(o);a.some(u=>Ge(u)==="any")?t.push(c):a.some(u=>Ge(u)==="string"&&!li(u))&&s.push(c)}return{anyArgs:t,unboundedStringArgs:s}},di=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=B(s);if(n?.visibility!=="public")return;const{objects:o}=st(s,n.receiver),{anyArgs:r,unboundedStringArgs:a}=ui(o);if(!(r.length===0&&a.length===0))return{anyArgs:r,exportName:e.getName(),file:t,line:s.getStartLineNumber(),unboundedStringArgs:a}},fi=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=di(o,t);r&&s.push(r)}return s},pi=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...fi(o,m(t,n)))}return s},qe=e=>e?.getKind()===l.TrueKeyword,gi=e=>e?.getKind()===l.FalseKeyword,mi=e=>e!==void 0&&i.isNumericLiteral(e)&&e.getLiteralValue()===0,hi=new Set(["lunoraAuthAdapter","lunoraD1Adapter"]),vi=e=>!e||!i.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>i.isCallExpression(t)&&S(t.getExpression())==="scim"),xi=e=>e!==void 0&&i.isCallExpression(e)&&hi.has(S(e.getExpression())??""),Ei=e=>!e||!i.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>i.isStringLiteral(t)&&t.getLiteralText()==="*"),Si=e=>{const t=b(e,"advanced"),s=b(e,"emailAndPassword"),n=b(e,"session");return{analyzable:!0,disableCsrfCheck:qe(b(t,"disableCSRFCheck")),emailPasswordEnabled:qe(b(s,"enabled")),requireEmailVerification:qe(b(s,"requireEmailVerification")),scimOnNonTransactionalAdapter:vi(b(e,"plugins"))&&xi(b(e,"database")),secureCookiesDisabled:gi(b(t,"useSecureCookies")),sessionFreshAgeZero:mi(b(n,"freshAge")),trustedOriginsWildcard:Ei(b(e,"trustedOrigins"))}},yi=()=>({analyzable:!1,disableCsrfCheck:!1,emailPasswordEnabled:!1,requireEmailVerification:!1,scimOnNonTransactionalAdapter:!1,secureCookiesDisabled:!1,sessionFreshAgeZero:!1,trustedOriginsWildcard:!1}),Ai=(e,t)=>{if(S(e.getExpression())!=="createAuth")return;const s=e.getArguments()[0],n=s!==void 0&&i.isObjectLiteralExpression(s)&&s.getProperties().some(r=>i.isSpreadAssignment(r)),o=s!==void 0&&i.isObjectLiteralExpression(s)&&!n?Si(s):yi();return{exportName:E(e),file:t,line:e.getStartLineNumber(),...o}},bi=(e,t)=>Cn(e,t,Ai),Ni=(e,t)=>{if(!i.isPropertyAccessExpression(e))return;const s=e.getName();if(t.methods.has(s))return t.matchReceiver(e.getExpression().getText())?s:void 0},wi=(e,t,s)=>{const n=Ni(e.getExpression(),s);if(n===void 0)return;const o=e.getArguments()[s.argIndex];if(!(!o||!K(o)||W(o))&&!(s.requireUnmodifiedReach===!0&&!zo(o)))return{exportName:E(e),file:t,line:e.getStartLineNumber(),method:n}},Pi=(e,t,s)=>{const n=[];for(const o of e.getDescendantsOfKind(l.CallExpression)){const r=wi(o,t,s);r&&n.push(r)}return n},Te=(e,t,s)=>{const n=[];for(const o of g(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);n.push(...Pi(r,m(t,o),s))}return n},Ii=new Set(["content","pdf","scrape","screenshot"]),Ti=(e,t)=>Te(e,t,{argIndex:0,matchReceiver:s=>s==="ctx.browser",methods:Ii}),Is=e=>{const t=ps(e);return t===void 0?void 0:`${be(t.slice(0,-1).join("/"))}:${String(t.at(-1))}`},Ts=(e,t)=>{if(!i.isPropertyAccessExpression(e))return;const s=e.getExpression();if(!i.isPropertyAccessExpression(s))return;const n=s.getExpression();return i.isPropertyAccessExpression(n)&&n.getName()===t?s.getName():void 0},Ci=e=>{if(!i.isPropertyAccessExpression(e))return!1;const t=e.getExpression();return i.isPropertyAccessExpression(t)&&t.getName()==="scheduler"||i.isIdentifier(t)&&t.getText()==="scheduler"},Fi=new Map([["publish",{kind:"publish",surface:"topics"}],["publishBatch",{kind:"publish",surface:"topics"}],["send",{kind:"enqueue",surface:"queues"}],["sendBatch",{kind:"enqueue",surface:"queues"}]]),Oi=(e,t)=>{const s=Is(t);return s!==void 0?{kind:"call",target:s}:e!=="run"&&t!==void 0?{kind:"call",reason:"the function reference is not a static api.* / internal.* chain"}:void 0},Ri=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=t.getName(),[n,o]=e.getArguments();if(fs.has(s))return Oi(s,n);if((s==="runAfter"||s==="runAt")&&Ci(t)){const c=Is(o);return c===void 0?{kind:"schedule",reason:"the scheduled function is not a static api.* / internal.* chain"}:{kind:"schedule",target:c}}const r=Fi.get(s),a=r===void 0?void 0:Ts(t,r.surface);return r===void 0||a===void 0?void 0:{kind:r.kind,target:a}},Li=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=m(t,n);for(const a of o.getDescendantsOfKind(l.CallExpression)){const c=Ri(a);c!==void 0&&s.push({...c,exportName:re(a),file:r,line:a.getStartLineNumber()})}for(const a of o.getDescendantsOfKind(l.PropertyAccessExpression)){const c=Ts(a,"services");c!==void 0&&s.push({exportName:re(a),file:r,kind:"invoke",line:a.getStartLineNumber(),target:c})}}return s},ki=new Set(["createBrowser","createInboundEmailHandler","createPayment"]),Di=new Set(["RateLimiter"]),Mi=new Set(["extend"]),zt="lunora",_i=["vite.config.ts","vite.config.mts","vite.config.js","vite.config.mjs"],Cs=e=>{const t=[],s=[];let n=!1;for(const o of e.getProperties()){if(i.isSpreadAssignment(o)){n=!0;continue}if(i.isPropertyAssignment(o)){const r=x(o);t.push(r),o.getInitializer()?.getKind()===l.TrueKeyword&&s.push(r);continue}(i.isShorthandPropertyAssignment(o)||i.isMethodDeclaration(o))&&t.push(x(o))}return{analyzable:!n,presentKeys:t,trueKeys:s}},Ye=e=>e&&i.isObjectLiteralExpression(e)?Cs(e):{analyzable:!1,presentKeys:[],trueKeys:[]},Ki=e=>{const t=e&&(i.isArrowFunction(e)||i.isFunctionExpression(e))?e:void 0,s=t&&ds(t.getBody());return s?Cs(s):{analyzable:!1,presentKeys:[],trueKeys:[]}},$i=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=S(n.getExpression());o!==void 0&&(ki.has(o)?s.push({callee:o,file:t,line:n.getStartLineNumber(),...Ye(n.getArguments()[0])}):Mi.has(o)&&s.push({callee:o,file:t,line:n.getStartLineNumber(),...Ki(n.getArguments()[0])}))}for(const n of e.getDescendantsOfKind(l.NewExpression)){const o=S(n.getExpression());o===void 0||!Di.has(o)||s.push({callee:o,file:t,line:n.getStartLineNumber(),...Ye(n.getArguments()[0])})}return s},zi=(e,t)=>{for(const s of _i){const n=h(t,s);if(!w(n))continue;const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=[];for(const a of o.getDescendantsOfKind(l.CallExpression))S(a.getExpression())===zt&&r.push({callee:zt,file:s,line:a.getStartLineNumber(),...Ye(a.getArguments()[0])});return r}return[]},Ui=(e,t)=>{const s=[];for(const{displayPath:n,filePath:o}of we(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);s.push(...$i(r,n))}return s.push(...zi(e,he(t))),s},Ut="ctx.containers.",Bi=e=>{if(!e.startsWith(Ut))return!1;const t=e.slice(Ut.length);return t.length>0&&!t.includes(".")},qi=(e,t)=>Te(e,t,{argIndex:0,matchReceiver:Bi,methods:new Set(["get"])}),ji=new Set(["allow","deny","setAllowed"]),Wi=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return!1;const s=C(t,"enableInternet");return s!==void 0&&i.isPropertyAssignment(s)&&i.isTrueLiteral(s.getInitializerOrThrow())},Vi=(e,t)=>{const s=e.getExpression();if(!(!i.isPropertyAccessExpression(s)||s.getName()!=="start"||!Wi(e)))return{detail:"enableInternet: true",exportName:E(e),file:t,kind:"enable_internet",line:e.getStartLineNumber()}},Hi=(e,t)=>{const s=e.getExpression();if(!i.isPropertyAccessExpression(s)||!ji.has(s.getName()))return;const n=s.getExpression();if(!(!i.isPropertyAccessExpression(n)||n.getName()!=="egress"))return{detail:s.getName(),exportName:E(e),file:t,kind:"egress_relaxation",line:e.getStartLineNumber()}},Gi=(e,t)=>Vi(e,t)??Hi(e,t),Yi=(e,t)=>F(e,t,Gi),Qi=new Set(["defineExportSink","r2Sink","webhookExportSink"]),Xi=e=>{const t=e.getExpression();if(!i.isIdentifier(t))return;const s=t.getText();return Qi.has(s)?s:void 0},Ji=e=>{const t=[],s=[];for(const n of e.getProperties()){if(i.isSpreadAssignment(n))return{analyzable:!1,emptyKeys:[],presentKeys:[]};if(i.isPropertyAssignment(n)){const o=x(n);t.push(o);const r=n.getInitializer();r&&i.isStringLiteral(r)&&r.getLiteralText()===""&&s.push(o);continue}(i.isShorthandPropertyAssignment(n)||i.isMethodDeclaration(n)||i.isGetAccessorDeclaration(n))&&t.push(x(n))}return{analyzable:!0,emptyKeys:s,presentKeys:t}},Zi=(e,t)=>{const s=[];for(const{displayPath:n,filePath:o}of we(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);for(const a of r.getDescendantsOfKind(l.CallExpression)){const c=Xi(a);if(c===void 0)continue;const u=a.getArguments()[0],d=u&&i.isObjectLiteralExpression(u)?Ji(u):{analyzable:!1,emptyKeys:[],presentKeys:[]};s.push({analyzable:d.analyzable,emptyKeys:d.emptyKeys,factory:c,file:n,line:a.getStartLineNumber(),presentKeys:d.presentKeys})}}return s},ea=new Map([["dbRateLimit",2],["rateLimit",2],["verifyTurnstileMiddleware",0]]),ta=new Set(["dbRateLimit","rateLimit"]),sa=e=>{const t=ms(e);if(!t)return!1;const s=C(t,"failOpen");return s!==void 0&&i.isPropertyAssignment(s)&&s.getInitializer()?.getKind()===l.TrueKeyword},na=(e,t)=>{const s=S(e.getExpression());if(s===void 0)return;const n=ea.get(s);if(n!==void 0)return{callee:s,exportName:E(e),failOpen:sa(e.getArguments()[n]),file:t,limitName:ta.has(s)?gs(e):"",line:e.getStartLineNumber()}},ra=(e,t)=>F(e,t,na),oa=new Set(["boolean","number","object","string"]),ia=e=>{const t=e.getName();if(!oa.has(t))return;const s=e.getExpression();if(!i.isPropertyAccessExpression(s))return;if(s.getName()==="flags"&&Ve(s.getExpression()))return t;const n=s.getExpression();if(s.getName()==="details"&&i.isPropertyAccessExpression(n)&&n.getName()==="flags"&&Ve(n.getExpression()))return t},aa=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=ia(t);if(s===void 0)return;const n=e.getArguments()[0];if(!n||!(i.isStringLiteral(n)||i.isNoSubstitutionTemplateLiteral(n)))return;const o=n.getLiteralValue();return o.length>0?{key:o,type:s}:void 0},ca=(e,t)=>{const s=new Map;for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of o.getDescendantsOfKind(l.CallExpression)){const a=aa(r);a&&!s.has(a.key)&&s.set(a.key,a.type)}}return[...s.entries()].map(([n,o])=>({key:n,type:o})).toSorted((n,o)=>n.key.localeCompare(o.key))},la=e=>{const t=e.getInitializer();if(!t||!i.isCallExpression(t))return;const s=B(t);if(s?.kind!=="query")return;const n=Fn(t,s.receiver);return n?{exportName:e.getName(),handler:n}:void 0},Bt=e=>{const t=e.getParent();return t&&i.isPropertyAccessExpression(t)&&t.getExpression()===e?t:void 0},ua=e=>{if(!i.isPropertyAccessExpression(e)||e.getName()!=="flags")return;const t=e.getExpression();if(!i.isIdentifier(t)||t.getText()!=="ctx")return;const s=Bt(e);if(!s)return"ctx.flags";if(s.getName()==="details"){const n=Bt(s);return n?`ctx.flags.details.${n.getName()}`:"ctx.flags.details"}return`ctx.flags.${s.getName()}`},da=(e,t)=>{const s=[];for(const n of e.handler.getDescendantsOfKind(l.PropertyAccessExpression)){const o=ua(n);o!==void 0&&s.push({callee:o,exportName:e.exportName,file:t,line:n.getStartLineNumber()})}return s},fa=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=la(o);r&&s.push(...da(r,t))}return s},pa=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...fa(o,m(t,n)))}return s},ga=e=>{if(!i.isPropertyAccessExpression(e)||e.getName()!=="boolean")return!1;const t=e.getExpression();return i.isPropertyAccessExpression(t)&&t.getName()==="flags"&&Ve(t.getExpression())},ma=e=>{if(e?.getKind()===l.TrueKeyword)return!0;if(e?.getKind()===l.FalseKeyword)return!1},ha=(e,t)=>{if(!ga(e.getExpression()))return;const[s,n]=e.getArguments();if(!s||!(i.isStringLiteral(s)||i.isNoSubstitutionTemplateLiteral(s)))return;const o=s.getLiteralValue(),r=ma(n);if(!(o.length===0||r===void 0))return{defaultValue:r,exportName:E(e),file:t,key:o,line:e.getStartLineNumber()}},va=(e,t)=>F(e,t,ha),xa=e=>{const t=e.getType().getProperty("~standard");if(!t)return;const s=t.getTypeAtLocation(e).getProperty("types");if(!s)return;const n=s.getTypeAtLocation(e).getNonNullableType().getProperty("output");if(!n)return;const o=n.getTypeAtLocation(e),r=o.getText(e);if(!r||r==="any"||r==="never"||jn(r))return;const a=e.getSourceFile().getFilePath();if(Wn(o,e,a)){const c=Vn(o,e,a,0,new Set);return c===void 0&&Hn(r),c}return r},Ea=e=>{const t=e.getExpression();return i.isPropertyAccessExpression(t)&&t.getName()==="withGeoIndex"},Sa=e=>{const t=e.getArguments()[0];return t&&i.isStringLiteral(t)?t.getLiteralText():""},ya=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=m(t,n);for(const a of o.getDescendantsOfKind(l.CallExpression))Ea(a)&&s.push({file:r,indexName:Sa(a),line:a.getStartLineNumber()})}return s},oe=e=>e!==void 0&&(i.isArrowFunction(e)||i.isFunctionExpression(e))?e:void 0,Fs=e=>{const t=e.getArguments()[0],s=oe(t);if(s!==void 0)return s;if(t===void 0||!i.isObjectLiteralExpression(t))return;const n=C(t,"handler");return n!==void 0&&i.isPropertyAssignment(n)?oe(n.getInitializer()):void 0},Aa=new Set(["delete","get","head","options","patch","post","put"]),ba=new Set(["handler","stream"]),Na=new Set(["runAction","runMutation"]),wa=new Set(["delete","insert","insertManyUnsafe","patch","replace"]),ie=(e,t)=>e!==void 0&&i.isIdentifier(e)&&e.getText()===t,Os=(e,t)=>{if(!(e===void 0||!i.isObjectBindingPattern(e))){for(const s of e.getElements())if(Pe(s)===t){const o=s.getNameNode();return i.isIdentifier(o)?o.getText():void 0}}},qt=(e,t)=>{const s=e.getParameters()[0]?.getNameNode();if(s!==void 0)return t?i.isIdentifier(s)?s.getText():void 0:Os(s,"ctx")},jt=(e,t)=>{const s=e.getParameters()[t?1:0]?.getNameNode();return t?s!==void 0&&i.isIdentifier(s)?s.getText():void 0:Os(s,"request")},Wt=(e,t)=>{const s=e.getBody(),n=s.getDescendantsOfKind(l.CallExpression);i.isCallExpression(s)&&n.unshift(s);for(const o of n){const r=o.getExpression();if(!i.isPropertyAccessExpression(r))continue;const a=r.getName(),c=r.getExpression();if(Na.has(a)&&ie(c,t))return a;if(wa.has(a)&&i.isPropertyAccessExpression(c)&&c.getName()==="db"&&ie(c.getExpression(),t))return`db.${a}`}},Vt=(e,t)=>{const s=e.getBody();for(const n of s.getDescendantsOfKind(l.PropertyAccessExpression))if(n.getName()==="auth"&&ie(n.getExpression(),t))return!0;for(const n of s.getDescendantsOfKind(l.VariableDeclaration)){const o=n.getNameNode();if(!(!i.isObjectBindingPattern(o)||!ie(n.getInitializer(),t))){for(const r of o.getElements())if(Pe(r)==="auth")return!0}}return!1},Pa=/signature|hmac|digest|(?:^|[_-])sig(?:[_-]|$)/i,Ia=(e,t)=>{const s=e.getExpression();if(!i.isPropertyAccessExpression(s)||s.getName()!=="get"&&s.getName()!=="has")return!1;const n=s.getExpression();return i.isPropertyAccessExpression(n)&&n.getName()==="headers"&&ie(n.getExpression(),t)},Ta=e=>[...i.isStringLiteral(e)?[e.getLiteralText()]:[],...e.getDescendantsOfKind(l.StringLiteral).map(t=>t.getLiteralText())],Rs=(e,t)=>{const s=e.getVariableDeclaration(t)?.getInitializer();return s===void 0?[]:Ta(s)},Ca=(e,t)=>{const s=e.getText();for(let n=e.getParent();n!==void 0;n=n.getParent()){if(!i.isArrowFunction(n)&&!i.isFunctionExpression(n)||!n.getParameters().some(c=>c.getName()===s))continue;const o=n.getParent();if(!i.isCallExpression(o))return[];const r=o.getExpression();if(!i.isPropertyAccessExpression(r))return[];const a=r.getExpression();return i.isIdentifier(a)?Rs(t,a.getText()):[]}return[]},Fa=e=>{const t=e.getArguments()[0];if(t===void 0)return[];if(i.isStringLiteral(t))return[t.getLiteralText()];if(!i.isIdentifier(t))return[];const s=e.getSourceFile(),n=Rs(s,t.getText());return n.length>0?n:Ca(t,s)},Ht=(e,t)=>{if(t===void 0)return!1;const s=e.getBody(),n=s.getDescendantsOfKind(l.CallExpression);return i.isCallExpression(s)&&n.unshift(s),n.some(o=>Ia(o,t)&&Fa(o).some(r=>Pa.test(r)))},Oa=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!ba.has(t.getName()))return;let s=t.getExpression();for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))return;const o=n.getName();if(Aa.has(o)){const r=n.getExpression();return i.isIdentifier(r)&&r.getText()==="httpRoute"?o.toUpperCase():void 0}s=n.getExpression()}},Ra=(e,t)=>{const s=e.getExpression();if(i.isIdentifier(s)&&s.getText()==="httpAction"){const c=oe(e.getArguments()[0]),u=c&&qt(c,!0);if(!c||u===void 0||Ht(c,jt(c,!0)))return;const d=Wt(c,u);return d===void 0?void 0:{exportName:E(e),file:t,kind:"httpAction",line:e.getStartLineNumber(),readsAuth:Vt(c,u),sideEffect:d}}const n=Oa(e);if(n===void 0)return;const o=oe(e.getArguments()[0]),r=o&&qt(o,!1);if(!o||r===void 0||Ht(o,jt(o,!1)))return;const a=Wt(o,r);return a===void 0?void 0:{exportName:E(e),file:t,kind:"httpRoute",line:e.getStartLineNumber(),method:n,readsAuth:Vt(o,r),sideEffect:a}},La=(e,t)=>F(e,t,Ra),ka=new Set(["btoa","encodeURI","encodeURIComponent","isSafeHeaderValue","Number","parseFloat","parseInt"]),Da=new Set(["append","set"]),Ls=e=>e!==void 0&&(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))?e.getLiteralText():"",Gt=(e,t)=>(i.isCallExpression(e)?[e,...e.getDescendantsOfKind(l.CallExpression)]:e.getDescendantsOfKind(l.CallExpression)).some(n=>ka.has(S(n.getExpression())??"")&&ve(n,t)),Ma=(e,t)=>{if(Gt(e,t))return!0;const s=_(e);return s!==void 0&&Gt(s,t)},Qe=(e,t)=>Uo(e,t)&&!Ma(e,t),_a=e=>{if(i.isPropertyAccessExpression(e)&&e.getName()==="headers")return!0;const t=_(e);return t!==void 0&&i.isNewExpression(t)&&S(t.getExpression())==="Headers"},Se=e=>{if(e===void 0)return;if(i.isObjectLiteralExpression(e))return e;const t=_(e);return t!==void 0&&i.isObjectLiteralExpression(t)?t:void 0},nt=(e,t,s)=>{for(const n of e.getProperties())if(i.isPropertyAssignment(n)){const o=n.getInitializer();o!==void 0&&Qe(o,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:Ls(n.getNameNode()),line:o.getStartLineNumber(),via:t})}else if(i.isShorthandPropertyAssignment(n)){const o=n.getNameNode();Qe(o,s.requestName)&&s.rows.push({exportName:s.exportName,file:s.relativePath,headerName:x(n),line:o.getStartLineNumber(),via:t})}else if(i.isSpreadAssignment(n)){const o=Se(n.getExpression());o!==void 0&&nt(o,t,s)}},ks=(e,t)=>{const s=Se(e);if(s===void 0)return;const n=C(s,"headers");if(n===void 0||!i.isPropertyAssignment(n))return;const o=Se(n.getInitializer());o!==void 0&&nt(o,"response-init",t)},Ka=(e,t)=>{const s=S(e.getExpression());if(s==="Response")ks(e.getArguments()[1],t);else if(s==="Headers"){const n=Se(e.getArguments()[0]);n!==void 0&&nt(n,"headers-ctor",t)}},$a=(e,t)=>{const s=e.getExpression();if(!i.isPropertyAccessExpression(s))return;const n=s.getName(),o=s.getExpression();if(n==="json"&&i.isIdentifier(o)&&o.getText()==="Response"){ks(e.getArguments()[1],t);return}if(Da.has(n)&&_a(o)){const r=e.getArguments()[1];r!==void 0&&Qe(r,t.requestName)&&t.rows.push({exportName:t.exportName,file:t.relativePath,headerName:Ls(e.getArguments()[0]),line:r.getStartLineNumber(),via:n==="set"?"headers-set":"headers-append"})}},za=(e,t)=>{for(const s of e.getDescendantsOfKind(l.NewExpression))Ka(s,t);for(const s of e.getDescendantsOfKind(l.CallExpression))$a(s,t)},Ua=(e,t)=>{const s=e.getExpression();if(!i.isIdentifier(s)||s.getText()!=="httpAction")return[];const n=oe(e.getArguments()[0]);if(n===void 0)return[];const o=n.getParameters()[1];if(o===void 0)return[];const r=o.getNameNode();if(!i.isIdentifier(r))return[];const a=[];return za(n,{exportName:E(e),relativePath:t,requestName:r.getText(),rows:a}),a},Ba=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression))s.push(...Ua(n,t));return s},qa=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Ba(o,m(t,n)))}return s},ja=new Set(["auth","context.auth","ctx.auth"]),Wa="userId",Va=e=>{const t=new Set;for(const s of e.getProperties()){if(i.isSpreadAssignment(s))return;(i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)||i.isMethodDeclaration(s))&&t.add(x(s))}return t},Ha=(e,t)=>{const s=h(t,bs);if(!w(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const o of n.getDescendantsOfKind(l.CallExpression)){if(S(o.getExpression())!=="defineIdentity")continue;const[r]=o.getArguments();return r&&i.isObjectLiteralExpression(r)?Va(r):void 0}},Yt=e=>{if(!(e===void 0||!i.isPropertyAccessExpression(e)||e.getName()!=="identity"))return ja.has(e.getExpression().getText())?e:void 0},Ga=e=>{if(i.isPropertyAccessExpression(e)&&Yt(e.getExpression())!==void 0)return e.getName();if(i.isElementAccessExpression(e)&&Yt(e.getExpression())!==void 0){const t=e.getArgumentExpression();return t&&i.isStringLiteral(t)?t.getLiteralValue():void 0}},Ya=(e,t,s)=>{const n=[];for(const o of e.getDescendants()){const r=Ga(o);r!==void 0&&n.push({declared:r===Wa||s.has(r),exportName:E(o),file:t,key:r,line:o.getStartLineNumber()})}return n},Qa=(e,t)=>{const s=Ha(e,t);if(s===void 0)return[];const n=[];for(const o of g(t)){const r=e.getSourceFile(o)??e.addSourceFileAtPath(o);n.push(...Ya(r,m(t,o),s))}return n},Xa=(e,t)=>{if(S(e.getExpression())!=="buildImageDeliveryUrl")return;const s=e.getArguments()[0];if(!s)return;const n=b(s,"key");if(!(!n||!K(n)||W(n)))return{exportName:E(e),file:t,line:e.getStartLineNumber()}},Ja=(e,t)=>F(e,t,Xa),Za=e=>{if(i.isComputedPropertyName(e)){const t=e.getExpression();return i.isStringLiteral(t)||i.isNoSubstitutionTemplateLiteral(t)?t.getLiteralValue():void 0}return i.isStringLiteral(e)?e.getLiteralValue():e.getText()},ec=e=>e.getProperties().some(t=>{if(i.isSpreadAssignment(t))return!0;const s=Za(t.getNameNode());return s===void 0||s==="namespace"}),tc=(e,t)=>{for(const{filePath:s}of we(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const o of n.getDescendantsOfKind(l.CallExpression)){const r=o.getExpression(),[a]=o.getArguments();if(!(!i.isPropertyAccessExpression(r)||r.getName()!=="auth"||a===void 0)&&(!i.isObjectLiteralExpression(a)||ec(a)))return o}}},sc="https://lunora.sh/docs/concepts/data-residency#pinning-auth-and-voice",nc=(e,t)=>{if(!(e.jurisdiction===void 0||e.jurisdictionPinsAuth===!0||t===void 0))throw ae(t,`the schema pins Durable Objects to the "${e.jurisdiction}" jurisdiction, and this project also has DO-backed auth (users, sessions, accounts, credentials). Pinning the auth object resolves it to a NEW, EMPTY object: existing users stay in the unpinned one until you copy them across (${sc}). Acknowledge with \`.jurisdiction("${e.jurisdiction}", { pinAuth: true })\`, deploy, then run the copy. For D1-mode auth the acknowledgement changes nothing.`,{code:"JURISDICTION_MOVE",status:422})},rc=new Set(["delete","get","getRaw","getWithMetadata","put"]),oc=(e,t,s=[])=>{const n=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));return Te(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.kv"||r.startsWith("ctx.kv."),methods:rc}).map(r=>{const a=n.get(`${r.file}:${r.exportName}`);return a===void 0?r:{...r,visibility:a}})},ic=new Set(["queue","send"]),Qt=new Set(["bcc","cc","to"]),ac=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(!ic.has(t))return;const s=e.getExpression().getText();return s==="ctx.mail"||s==="ctx.email"?t:void 0},cc=e=>i.isObjectLiteralExpression(e)?e.getProperties().some(t=>{if(i.isShorthandPropertyAssignment(t)){const n=t.getNameNode();return Qt.has(x(t))&&K(n)&&!W(n)}if(!i.isPropertyAssignment(t)||!Qt.has(x(t)))return!1;const s=t.getInitializer();return s!==void 0&&K(s)&&!W(s)}):!1,lc=(e,t)=>{const s=ac(e.getExpression());if(s===void 0)return;const n=e.getArguments()[0];if(!(!n||!cc(n)))return{exportName:E(e),file:t,line:e.getStartLineNumber(),method:s}},uc=(e,t)=>F(e,t,lc),dc=e=>i.isPropertyAssignment(e)||i.isMethodDeclaration(e)||i.isGetAccessorDeclaration(e)?i.isComputedPropertyName(e.getNameNode()):!1,fc=e=>i.isPropertyAssignment(e)||i.isShorthandPropertyAssignment(e)||i.isMethodDeclaration(e)||i.isGetAccessorDeclaration(e)?dc(e):!0,Ds=(e,t=!1)=>{for(const s of e.getProperties()){if(fc(s))return!0;if(t)continue;if(!i.isPropertyAssignment(s))return!0;const n=s.getInitializer();if(!n||!i.isObjectLiteralExpression(n)||Ds(n,!0))return!0}return!1},pc=(e,t)=>{for(const s of g(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const{receiver:o}of ys(n))for(const r of Ze(o)){const a=r.getArguments()[0];if(a!==void 0&&(!i.isObjectLiteralExpression(a)||Ds(a)))return!0}}return!1},gc=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return[];const s=[];for(const n of t.getProperties()){const o=Ee(n);if(o===void 0||!i.isPropertyAssignment(n))continue;const r=n.getInitializer();if(!(!r||!i.isObjectLiteralExpression(r)))for(const a of r.getProperties()){const c=Ee(a);c!==void 0&&s.push({column:c,strategy:Ss(a),table:o})}}return s},mc=(e,t)=>{const s=new Map;for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const{receiver:r}of ys(o))for(const a of Ze(r))for(const c of gc(a)){const u=`${c.table}\0${c.column}`;s.has(u)||s.set(u,c)}}return{columns:[...s.values()]}},hc=(e,t,s)=>{const n=e.getArguments()[0];if(!n||!i.isObjectLiteralExpression(n))return[];const o=[];for(const r of n.getProperties()){const a=Ee(r);if(a===void 0||!i.isPropertyAssignment(r))continue;const c=r.getInitializer();if(!(!c||!i.isObjectLiteralExpression(c)))for(const u of c.getProperties()){const d=Ee(u);if(d===void 0)continue;const p=Ss(u);p!=="custom"&&o.push({column:d,exportName:t,file:s,line:u.getStartLineNumber(),strategy:p,table:a})}}return o},vc=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?B(s):void 0;return n?.receiver?Ze(n.receiver).flatMap(o=>hc(o,e.getName(),t)):[]},xc=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=m(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...vc(c,r))}return s},Ec=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="replace")return!1;const s=t.getExpression();return k(s)},Sc=e=>{const t=e.getArguments()[0];if(t===void 0||!i.isObjectLiteralExpression(t))return;const s=C(t,"server");if(s!==void 0)return i.isPropertyAssignment(s)?s.getInitializer():s},yc=e=>{if(!e.isExported())return;const t=e.getInitializer();if(t?.getKind()!==l.CallExpression)return;const s=t;return nr(s.getExpression())?s:void 0},Ac=e=>{const t=yc(e),s=t===void 0?void 0:Sc(t);if(s===void 0)return[];const n=e.getNameNode(),o=i.isIdentifier(n)?n.getText():"";return s.getDescendantsOfKind(l.CallExpression).filter(r=>Ec(r)).map(r=>({exportName:o,file:"lunora/mutators.ts",line:r.getStartLineNumber()}))},bc=e=>e.getVariableDeclarations().flatMap(t=>Ac(t)),Nc=(e,t)=>{const s=h(t,sr);if(!w(s))return[];const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);return bc(n)},wc=new Set(["delete","get","patch"]),Pc=new Set(["accountId","authorId","companyId","createdBy","createdById","customerId","groupId","memberId","organizationId","orgId","ownerId","projectId","teamId","tenantId","userId","workspaceId"]),Ic=new Set(["auth","identity","session","user"]),Tc=new Set([l.EqualsEqualsEqualsToken,l.EqualsEqualsToken,l.ExclamationEqualsEqualsToken,l.ExclamationEqualsToken]),Cc=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="normalizeId"||!k(t.getExpression()))return;const s=e.getArguments()[0];return s&&i.isStringLiteral(s)?s.getLiteralText():""},Fc=e=>{let t=e,s=t.getParent();for(;s!==void 0&&(i.isAsExpression(s)||i.isParenthesizedExpression(s)||i.isNonNullExpression(s));)t=s,s=t.getParent();if(s===void 0||!i.isVariableDeclaration(s))return;const n=s.getNameNode();return i.isIdentifier(n)?n.getText():void 0},Oc=(e,t)=>e.getDescendantsOfKind(l.Identifier).some(s=>s.getText()===t),Rc=e=>i.isThrowStatement(e)||i.isReturnStatement(e)||e.getDescendantsOfKind(l.ThrowStatement).length>0||e.getDescendantsOfKind(l.ReturnStatement).length>0,Lc=(e,t)=>e.getDescendantsOfKind(l.IfStatement).some(s=>Oc(s.getExpression(),t)&&Rc(s.getThenStatement())),kc=(e,t)=>{for(const s of e.getDescendantsOfKind(l.CallExpression)){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))continue;const o=n.getName();if(!wc.has(o))continue;const r=n.getExpression();if(!(k(r)||i.isPropertyAccessExpression(r)&&k(r.getExpression())))continue;const c=s.getArguments()[0];if(c!==void 0&&i.isIdentifier(c)&&c.getText()===t)return o}},Dc=e=>{let t=e;for(;i.isPropertyAccessExpression(t)||i.isElementAccessExpression(t)||i.isNonNullExpression(t)||i.isParenthesizedExpression(t)||i.isAsExpression(t)||i.isAwaitExpression(t);)t=t.getExpression();return i.isIdentifier(t)?t.getText():void 0},Mc=e=>e.getDescendantsOfKind(l.CallExpression).some(t=>t.getArguments().some(s=>Dc(s)==="ctx")),_c=e=>e.getDescendantsOfKind(l.BinaryExpression).some(t=>Tc.has(t.getOperatorToken().getKind())?i.isPropertyAccessExpression(t.getLeft())||i.isPropertyAccessExpression(t.getRight()):!1),Kc=e=>{for(const t of e.getDescendantsOfKind(l.Identifier))if(Pc.has(t.getText()))return!0;for(const t of e.getDescendantsOfKind(l.PropertyAccessExpression)){const s=t.getExpression();if(i.isIdentifier(s)&&s.getText()==="ctx"&&Ic.has(t.getName()))return!0}return Mc(e)||_c(e)},$c=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!i.isCallExpression(s))return[];const n=B(s);if(n?.kind!=="query"&&n?.kind!=="mutation")return[];const o=Fs(s);if(o===void 0)return[];const r=n.receiver!==void 0&&vs(n.receiver,"use","rls"),a=Kc(o),c=new Set,u=[];for(const d of o.getDescendantsOfKind(l.CallExpression)){const p=Cc(d);if(p===void 0)continue;const v=Fc(d);if(v===void 0||c.has(v)||!Lc(o,v))continue;const y=kc(o,v);y!==void 0&&(c.add(v),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),mentionsOwnership:a,sinkMethod:y,table:p,usesRls:r,visibility:n.visibility}))}return u},zc=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=m(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...$c(c,r))}return s},Uc=new Set(["accountId","authorId","createdBy","createdById","organizationId","orgId","ownerId","tenantId","updatedBy","userId","workspaceId"]),Bc=new Set(["insert","insertManyUnsafe","patch","replace"]),qc=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(!Bc.has(t))return;const s=e.getExpression();if(!i.isPropertyAccessExpression(s)||s.getName()!=="db")return;const n=s.getExpression();return i.isIdentifier(n)&&n.getText()==="ctx"?t:void 0},jc=(e,t)=>{if(t!=="insertManyUnsafe")return i.isObjectLiteralExpression(e)?[e]:[];if(!i.isArrayLiteralExpression(e))return[];const s=[];for(const n of e.getElements())i.isObjectLiteralExpression(n)&&s.push(n);return s},Xt=(e,t)=>{if(i.isPropertyAccessExpression(e)){const s=e.getExpression();return i.isIdentifier(s)&&s.getText()==="args"&&e.getName()===t}if(i.isElementAccessExpression(e)){const s=e.getExpression(),n=e.getArgumentExpression();return i.isIdentifier(s)&&s.getText()==="args"&&n!==void 0&&i.isStringLiteral(n)&&n.getLiteralValue()===t}return!1},Wc=e=>{if(!i.isIdentifier(e))return;const t=e.getText(),s=e.getFirstAncestor(a=>i.isArrowFunction(a)||i.isFunctionExpression(a)||i.isFunctionDeclaration(a));if(s===void 0)return;for(const a of s.getDescendantsOfKind(l.BinaryExpression)){const c=a.getLeft();if(i.isIdentifier(c)&&c.getText()===t&&a.getOperatorToken().getText().endsWith("="))return}const n=e.getStart();let o,r=-1;for(const a of s.getDescendantsOfKind(l.VariableDeclaration)){if(a.getName()!==t)continue;const c=a.getParent();if(!i.isVariableDeclarationList(c)||c.getDeclarationKind()!==ln.Const)continue;const u=a.getInitializer(),d=a.getStart();u!==void 0&&d<n&&d>r&&(o=u,r=d)}return o},Vc=(e,t)=>{if(Xt(e,t))return!0;const s=Wc(e);return s!==void 0&&Xt(s,t)},Hc=(e,t,s,n,o)=>{const r=[];for(const a of e.getProperties()){let c,u;if(i.isPropertyAssignment(a)?(c=x(a),u=a.getInitializer()):i.isShorthandPropertyAssignment(a)&&(c=x(a),u=a.getNameNode()),!(c===void 0||u===void 0||!Uc.has(c))&&K(u)&&!W(u)){const d=E(s),p=o(d)===c&&Vc(u,c);r.push({exportName:d,field:c,file:n,line:s.getStartLineNumber(),method:t,...p&&{ownerScoped:!0}})}}return r},Gc=(e,t,s)=>{const n=qc(e.getExpression());if(n===void 0)return[];const o=e.getArguments()[1];return o?jc(o,n).flatMap(r=>Hc(r,n,e,t,s)):[]},Yc=(e,t,s)=>{const n=[];for(const o of e.getDescendantsOfKind(l.CallExpression))for(const r of Gc(o,t,a=>s(a).owner)){const{visibility:a}=s(r.exportName);n.push(a===void 0?r:{...r,visibility:a})}return n},Qc=(e,t,s=[],n=[])=>{const o=[],r=new Map;for(const a of s)r.set(`${a.filePath}:${a.exportName}`,{visibility:a.visibility});for(const a of n){const c=`${a.filePath}:${a.exportName}`;r.set(c,{...r.get(c),owner:a.owner})}for(const a of g(t)){const c=e.getSourceFile(a)??e.addSourceFileAtPath(a),u=m(t,a);o.push(...Yc(c,u,d=>r.get(`${u}:${d}`)??{}))}return o},Xc=["providerSubscriptionId","state"],Jc=["providerEventId","processedAt"],Jt=(e,t)=>t.every(s=>s in e.shape),Zc=e=>{const t=e.find(n=>n.name==="subscriptions"),s=e.find(n=>n.name==="events");return t!==void 0&&s!==void 0&&Jt(t,Xc)&&Jt(s,Jc)},el=new Set(["createAutumnAdapter","createDodoPaymentsAdapter","createPolarAdapter","createStripeAdapter"]),tl=e=>e&&i.isNumericLiteral(e)?Number(e.getText()):void 0,sl=e=>{const t=C(e,"webhookToleranceSeconds");return t&&i.isPropertyAssignment(t)?tl(t.getInitializer()):void 0},nl=(e,t)=>{const s=S(e.getExpression());if(s===void 0||!el.has(s))return;const[n]=e.getArguments(),o=n&&i.isObjectLiteralExpression(n)?sl(n):void 0;return{callee:s,exportName:E(e),file:t,line:e.getStartLineNumber(),...o===void 0?{}:{toleranceSeconds:o}}},rl=(e,t)=>F(e,t,nl),ol=new Map([["defineQueue",0],["defineSubscription",1],["defineWorkflow",0]]),il=e=>{const t=e.getExpression();return i.isIdentifier(t)?t.getText():void 0},al=(e,t)=>{const s=e.getArguments()[t];if(!s||!i.isObjectLiteralExpression(s))return;const n=C(s,"handler");if(n===void 0||!i.isPropertyAssignment(n))return;const o=n.getInitializer();if(o&&(i.isArrowFunction(o)||i.isFunctionExpression(o)))return o},Ms=(e,t)=>{const s=e.getParameters()[t]?.getNameNode();return s&&i.isIdentifier(s)?s.getText():void 0},_s=(e,t)=>e===t||e.startsWith(`${t}.`),Ks=e=>{const t=e.getDescendantsOfKind(l.PropertyAccessExpression);return i.isPropertyAccessExpression(e)&&t.push(e),t},Zt=e=>{const t=e.getParent();return i.isPropertyAccessExpression(t)&&t.getNameNode()===e||i.isPropertyAssignment(t)&&t.getNameNode()===e?!1:!(i.isBindingElement(t)&&t.getNameNode()===e)},$s=e=>{const t=e.getDescendantsOfKind(l.Identifier).filter(s=>Zt(s));return i.isIdentifier(e)&&Zt(e)&&t.push(e),t},cl=e=>{if(!i.isVariableDeclaration(e))return[];const t=e.getNameNode();return i.isIdentifier(t)?[t.getText()]:t.getDescendantsOfKind(l.BindingElement).map(s=>s.getName())},ll=e=>{const t=Ms(e,1);if(t===void 0)return[];const s=[`${t}.messages`];for(const n of e.getDescendantsOfKind(l.ForOfStatement)){if(n.getExpression().getText()!==`${t}.messages`)continue;const o=n.getInitializer(),r=i.isVariableDeclarationList(o)?o.getDeclarations()[0]?.getNameNode():void 0;r&&i.isIdentifier(r)&&s.push(`${r.getText()}.body`)}return s},ul=(e,t,s)=>{const n=t==="workflow"?[`${s}.params`]:ll(e),o=new Set,r=a=>Ks(a).some(c=>n.some(u=>_s(c.getText(),u)))?!0:$s(a).some(c=>o.has(c.getText()));for(const a of e.getDescendantsOfKind(l.VariableDeclaration)){const c=a.getInitializer();if(c&&r(c))for(const u of cl(a))o.add(u)}return{names:o,prefixes:n}},dl=(e,t)=>Ks(e).some(s=>t.prefixes.some(n=>_s(s.getText(),n)))?!0:$s(e).some(s=>t.names.has(s.getText())),fl=e=>{const t=ps(e);return t===void 0?void 0:{exportName:String(t.at(-1)),file:t.slice(0,-1).join("/")}},pl=(e,t,s)=>{const n=Ms(e,0);if(n===void 0)return[];const o=ul(e,t,n),r=new Set([n,...o.prefixes.filter(c=>c.endsWith(".body")).map(c=>c.slice(0,-5))]),a=[];for(const c of e.getDescendantsOfKind(l.CallExpression)){const u=c.getExpression();if(!i.isPropertyAccessExpression(u)||!fs.has(u.getName())||!r.has(u.getExpression().getText()))continue;const d=c.getArguments()[1];if(!d||!dl(d,o))continue;const p=fl(c.getArguments()[0]);p!==void 0&&a.push({dispatchKind:t,file:s,handlerExport:E(c),line:c.getStartLineNumber(),targetExport:p.exportName,targetFile:p.file})}return a},gl=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=il(n),r=o===void 0?void 0:ol.get(o);if(r===void 0)continue;const a=al(n,r);a!==void 0&&s.push(...pl(a,o==="defineWorkflow"?"workflow":"queue",t))}return s},ml=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...gl(o,m(t,n)))}return s},es={dbRateLimit:"usesRateLimit",emailGateMiddleware:"usesEmailGate",mask:"usesMask",rateLimit:"usesRateLimit",rls:"usesRls",verifyTurnstileMiddleware:"usesCaptcha"},ts=new Set(["account","credential","member","passkey","session","user"]),hl=e=>e.replaceAll(/[-_]/gu," ").replaceAll(/([a-z0-9])([A-Z])/gu,"$1 $2").split(" ").filter(Boolean).map(t=>t.toLowerCase()),vl=e=>{const s=hl(e).at(-1);if(!s)return!1;const n=s.endsWith("s")?s.slice(0,-1):s;return ts.has(s)||ts.has(n)},xl=e=>{const t=e.replaceAll(/[^a-z0-9]/giu,"").toLowerCase();return t.endsWith("email")||t.endsWith("emailaddress")},El=(e,t)=>{const{objects:s,opaque:n}=st(e,t);return ii(s).some(o=>xl(o))?!0:n?void 0:!1},Sl=e=>{const t=e.getArguments()[0];return!t||!i.isObjectLiteralExpression(t)?{usesCaptcha:!1,usesRateLimit:!1}:{usesCaptcha:!!C(t,"captcha"),usesRateLimit:!!C(t,"rateLimit")}},yl=e=>{if(i.isCallExpression(e))return e;if(!i.isIdentifier(e))return;const s=e.getSourceFile().getVariableDeclaration(e.getText())?.getInitializer();return s&&i.isCallExpression(s)?s:void 0},xe={usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},Al=e=>{const t=yl(e),s=t?S(t.getExpression()):void 0;if(t&&s==="protectPublic"){const n=Sl(t);return{...xe,usesCaptcha:n.usesCaptcha,usesRateLimit:n.usesRateLimit}}return s!==void 0&&s in es?{...xe,[es[s]]:!0}:xe},bl=e=>{const t={...xe};let s=e;for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))break;const o=n.getName()==="use"?s.getArguments()[0]:void 0;if(o){const r=Al(o);t.usesCaptcha||=r.usesCaptcha,t.usesEmailGate||=r.usesEmailGate,t.usesMask||=r.usesMask,t.usesRateLimit||=r.usesRateLimit,t.usesRls||=r.usesRls}s=n.getExpression()}return t},Nl=new Set(["insert","insertMany","insertManyUnsafe","replace"]),wl=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!Nl.has(t.getName()))return!1;const s=t.getExpression();if(!k(s))return!1;const o=e.getArguments()[0];return!o||!(i.isStringLiteral(o)||i.isNoSubstitutionTemplateLiteral(o))?!1:vl(o.getLiteralText())},Pl=new Set(["create","publish","publishBatch","runAfter","runAt","send","sendBatch"]),Il=new Set(["queues","scheduler","topics","workflows"]),Tl=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!Pl.has(t.getName()))return!1;let s=t.getExpression();for(;i.isCallExpression(s)||i.isElementAccessExpression(s)||i.isPropertyAccessExpression(s);){if(i.isPropertyAccessExpression(s)&&Il.has(s.getName())){const n=s.getExpression();if(i.isIdentifier(n)&&n.getText()==="ctx")return!0}s=s.getExpression()}return!1},Cl=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="insertManyUnsafe")return!1;const s=t.getExpression();return k(s)},zs=new Set(["generateObject","generateText","streamObject","streamText"]),Fl=e=>{const t=S(e.getExpression());return t!==void 0&&zs.has(t)},Ol=e=>{const t=S(e.getExpression());if(t===void 0||!zs.has(t))return!1;const s=e.getArguments()[0];return!s||!i.isObjectLiteralExpression(s)||s.getProperties().some(n=>i.isSpreadAssignment(n))?!1:!C(s,"maxOutputTokens")},Rl=new Set(["log","span","trace"]),Ll=new Set(["ai"]),kl=new Set(["email","mail"]),Dl=new Set(["ai","browser","fetch","mail","notify","queues","sql","storage","topics","workflows"]),je=(e,t)=>e.getDescendantsOfKind(l.PropertyAccessExpression).some(s=>{if(!t.has(s.getName()))return!1;const n=s.getExpression();return i.isIdentifier(n)&&n.getText()==="ctx"}),Ml=new Set([l.ArrowFunction,l.FunctionDeclaration,l.FunctionExpression,l.GetAccessor,l.MethodDeclaration,l.SetAccessor]),_l=new Set(["every","filter","flatMap","forEach","map","some"]),Kl=new Set(["all","allSettled","race"]),$l=e=>{const t=e.getParent();if(!t||!i.isCallExpression(t)||!t.getArguments().includes(e))return;const s=t.getExpression();if(!i.isPropertyAccessExpression(s))return;const n=s.getName();if(_l.has(n))return t;const o=s.getExpression();if(i.isIdentifier(o)&&o.getText()==="Promise"&&Kl.has(n))return t},zl=e=>{let t=e.getParent();for(;t;){if(i.isTryStatement(t)){const s=t.getTryBlock();if(e.getPos()>=s.getPos()&&e.getEnd()<=s.getEnd())return!0}if(Ml.has(t.getKind())){const s=$l(t);if(!s)return!1;t=s;continue}t=t.getParent()}return!1},Ul=e=>{let t=e;for(;;){const s=t.getParent();if(!i.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;if(s.getName()==="catch")return!0;if(s.getName()!=="then"&&s.getName()!=="finally")return!1;const n=s.getParent();if(!i.isCallExpression(n)||n.getExpression()!==s)return!1;t=n}},Bl=e=>{let t=e;for(;;){const s=t.getParent();if(i.isPropertyAccessExpression(s)&&s.getExpression()===t){t=s;continue}return i.isCallExpression(s)&&s.getExpression()===t?s:void 0}},ql=e=>{let t=!1,s=!0;for(const n of e.getDescendantsOfKind(l.PropertyAccessExpression)){if(!Dl.has(n.getName()))continue;const o=n.getExpression();if(!i.isIdentifier(o)||o.getText()!=="ctx")continue;const r=Bl(n);r&&(t=!0,!zl(r)&&!Ul(r)&&(s=!1))}return{handlesErrors:t&&s,reachesOutbound:t}},jl=e=>e.getDescendantsOfKind(l.ThrowStatement).some(t=>{const s=t.getExpression();if(!i.isNewExpression(s))return!1;const n=s.getExpression();return i.isIdentifier(n)&&n.getText()==="Error"}),ss="lunora-advisor-exempt",Wl=/^[\s*/]+/u,Vl=/[\w-]/u,Hl=e=>{const s=(e.getFirstAncestorByKind(l.VariableStatement)??e).getLeadingCommentRanges().map(n=>n.getText()).join(`
+`);for(const n of s.split(`
+`)){const o=n.replace(Wl,"");if(!o.startsWith(ss))continue;const r=o.slice(ss.length);if(Vl.test(r.charAt(0)))continue;const a=r.indexOf("--");return{exempt:!0,exemptReason:(a===-1?"":r.slice(a+2).split("*")[0]??"").trim()}}return{exempt:!1,exemptReason:""}},Gl=e=>{const[t]=e.getArguments();if(t){if(i.isObjectLiteralExpression(t)){const s=C(t,"handler");return s?i.isPropertyAssignment(s)?s.getInitializer():i.isShorthandPropertyAssignment(s)?s.getNameNode():i.isMethodDeclaration(s)?s:void 0:void 0}return t}},Yl=(e,t)=>{const s=Gl(t);if(!s)return;if(i.isArrowFunction(s)||i.isFunctionExpression(s)||i.isMethodDeclaration(s))return e;if(!i.isIdentifier(s))return;const n=s.getSourceFile(),o=s.getText(),r=n.getVariableDeclaration(o)?.getInitializer();return r&&(i.isArrowFunction(r)||i.isFunctionExpression(r))?r:n.getFunction(o)},Ql=e=>{let t=!1,s=!1,n=!1,o=!1,r=!1;for(const u of e.getDescendantsOfKind(l.CallExpression))if(wl(u)&&(r=!0),Tl(u)&&(t=!0),Cl(u)&&(o=!0),Fl(u)&&(s=!0),Ol(u)&&(n=!0),r&&t&&o&&n)break;const{handlesErrors:a,reachesOutbound:c}=ql(e);return{callsMail:je(e,kl),emitsEvent:je(e,Rl),fanOut:t,handlesErrors:a,reachesOutbound:c,runsAiGeneration:s||je(e,Ll),throwsBareError:jl(e),unboundedAiGeneration:n,usesInsertManyUnsafe:o,writesUserTable:r}},Xl=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=B(s);if(!n||n.kind!=="query"&&n.kind!=="mutation"&&n.kind!=="action")return;const o=n.receiver?bl(n.receiver):{usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},r=Yl(e,s);return{...r?Ql(r):{},...Hl(e),...o,analyzableBody:r!==void 0,exportName:e.getName(),file:t,hasEmailArg:El(s,n.receiver),kind:n.kind,visibility:n.visibility}},Jl=(e,t)=>{const s=[];for(const n of e.getVariableStatements())if(n.isExported())for(const o of n.getDeclarations()){const r=Xl(o,t);r&&s.push(r)}return s},Zl=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Jl(o,m(t,n)))}return s},eu=new Set(["dbRateLimit","rateLimit"]),tu=e=>i.isArrowFunction(e)?e.getBody():e,su=e=>{if(!i.isArrowFunction(e))return;const t=e.getParameters()[0]?.getNameNode();return t!==void 0&&i.isIdentifier(t)?t:void 0},Us=e=>{const t=e.getParent();return i.isPropertyAccessExpression(t)&&t.getExpression()===e&&t.getName()==="args"},Bs=(e,t)=>{const s=t.getSymbol();return s===void 0?[]:e.getDescendantsOfKind(l.Identifier).filter(n=>{if(n.getSymbol()!==s)return!1;const o=n.getParent();return!(i.isPropertyAccessExpression(o)&&o.getNameNode()===n)})},nu=(e,t)=>K(e)||t!==void 0&&Bs(e,t).some(s=>Us(s)),ru=(e,t)=>t===void 0?W(e):Bs(e,t).some(s=>!Us(s)),ou=(e,t)=>{const s=S(e.getExpression());if(s===void 0||!eu.has(s))return;const n=b(ms(e.getArguments()[2]),"key");if(!n)return;const o=tu(n),r=su(n);if(!(!nu(o,r)||ru(o,r)))return{callee:s,exportName:E(e),file:t,limitName:gs(e),line:e.getStartLineNumber()}},iu=(e,t)=>F(e,t,ou),au=new Set(["findFirst","findFirstOrThrow","findMany","findUnique","get"]),cu=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!au.has(t.getName()))return;const s=t.getExpression();if(k(s)){const n=e.getArguments()[0];return n&&i.isStringLiteral(n)?n.getLiteralText():""}if(i.isPropertyAccessExpression(s)&&k(s.getExpression()))return s.getName()},lu=e=>{let t=e;for(;i.isCallExpression(t);){const s=t.getExpression();if(!i.isPropertyAccessExpression(s))return;if(s.getName()==="query"&&k(s.getExpression())){const n=t.getArguments()[0];return n&&i.isStringLiteral(n)?n.getLiteralText():""}t=s.getExpression()}},uu=e=>{let t=ne(e)??e;for(;i.isAwaitExpression(t);)t=ne(t.getExpression())??t.getExpression();return t},qs=(e,t=!1)=>{const s=uu(e);if(i.isIdentifier(s)){if(t)return;const n=_(s);return n===void 0?void 0:qs(n,!0)}if(i.isCallExpression(s))return cu(s)??lu(s)},du=e=>{const t=e.getBody();if(!i.isBlock(t))return[t];const s=[];for(const n of e.getDescendantsOfKind(l.ReturnStatement)){const o=n.getFirstAncestor(a=>i.isArrowFunction(a)||i.isFunctionExpression(a)||i.isFunctionDeclaration(a)),r=n.getExpression();o===e&&r!==void 0&&s.push(r)}return s},fu=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!i.isCallExpression(s))return[];const n=B(s);if(n?.kind!=="query")return[];const o=Fs(s);if(o===void 0)return[];const r=n.receiver!==void 0&&kn(n.receiver,"output"),a=n.receiver!==void 0&&vs(n.receiver,"use","mask"),c=new Set,u=[];for(const d of du(o)){const p=qs(d);p===void 0||c.has(p)||(c.add(p),u.push({exportName:e.getName(),file:t,line:d.getStartLineNumber(),table:p,usesMask:a,usesOutput:r,visibility:n.visibility}))}return u},pu=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=m(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...fu(c,r))}return s},gu=e=>{if(!e||!i.isObjectLiteralExpression(e))return[];const t=[];for(const s of e.getProperties())(i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)||i.isMethodDeclaration(s)||i.isGetAccessorDeclaration(s))&&t.push(x(s));return t},mu=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?B(s):void 0;if(!n)return[];const o=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=hs(r);if(a===void 0)continue;const c=gu(b(a.options,"with"));c.length!==0&&o.push({exportName:e.getName(),file:t,line:r.getStartLineNumber(),parentTable:a.table,relations:c,visibility:n.visibility})}return o},hu=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=m(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...mu(c,r))}return s},ye=e=>{if(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))return e.getLiteralText();if(i.isBinaryExpression(e)&&e.getOperatorToken().getKind()===l.PlusToken){const t=ye(e.getLeft()),s=ye(e.getRight());return t!==void 0&&s!==void 0?t+s:void 0}},vu=e=>{let t=e,s=t.getParent();for(;s!==void 0&&i.isBinaryExpression(s)&&s.getOperatorToken().getKind()===l.PlusToken;)t=s,s=t.getParent();return t!==e&&ye(t)!==void 0},xu=/(?:^|\/)__tests__\//u,Eu=/\.(?:spec|test)$/u,Su=e=>xu.test(e)||Eu.test(e),yu=e=>{const t=e.getParent();if(t!==void 0){if(i.isVariableDeclaration(t)||i.isPropertyAssignment(t)||i.isPropertySignature(t))return x(t);if(i.isBinaryExpression(t)&&t.getOperatorToken().getKind()===l.EqualsToken)return t.getLeft().getText()}},Au=(e,t,s)=>mr(e)?!Su(s)&&hr(yu(t)):!0,bu=(e,t)=>{const s=[],n=[...e.getDescendantsOfKind(l.BinaryExpression),...e.getDescendantsOfKind(l.StringLiteral),...e.getDescendantsOfKind(l.NoSubstitutionTemplateLiteral)],o=new Set;for(const r of n){if(vu(r))continue;const a=ye(r);if(a===void 0)continue;const c=pr(a);if(c===void 0||!Au(c,r,t))continue;const u=r.getStartLineNumber(),d=`${String(u)}:${c}`;o.has(d)||(o.add(d),s.push({file:t,kind:c,line:u,preview:gr(a)}))}return s},Nu=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...bu(o,m(t,n)))}return s},wu=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?B(s):void 0;if(!n)return[];const o=[];for(const r of e.getDescendantsOfKind(l.CallExpression)){const a=hs(r);if(a===void 0)continue;const c=b(a.options,"includeDeleted");if(c===void 0)continue;const u=i.isTrueLiteral(c),d=!u&&K(c);!u&&!d||o.push({exportName:e.getName(),file:t,fromArgs:d,hardcodedTrue:u,line:r.getStartLineNumber(),table:a.table,visibility:n.visibility})}return o},Pu=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=m(t,n);for(const a of o.getVariableStatements())if(a.isExported())for(const c of a.getDeclarations())s.push(...wu(c,r))}return s},Iu=new Set(["query","unsafe"]),Tu=e=>{if(!i.isPropertyAccessExpression(e)||!Iu.has(e.getName()))return!1;const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="sql")return!1;const s=t.getExpression();return i.isIdentifier(s)&&s.getText()==="ctx"},Cu=e=>i.isBinaryExpression(e)||i.isTemplateExpression(e),Fu=e=>e.getFirstAncestorByKind(l.VariableDeclaration)?.getName()??"<module>",Ou=(e,t)=>{if(!Tu(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!Cu(s)))return{exportName:Fu(e),file:t,line:s.getStartLineNumber()}},Ru=(e,t)=>F(e,t,Ou),Lu=[["convex",["convex","@convex-dev/"]],["supabase",["@supabase/"]],["firebase",["firebase","@firebase/","firebase-admin"]]],ku=e=>{for(const[t,s]of Lu)for(const n of s)if(e===n||e.startsWith(n.endsWith("/")?n:`${n}/`))return t},Du=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const r of o.getImportDeclarations()){const a=r.getModuleSpecifierValue(),c=ku(a);c!==void 0&&s.push({file:m(t,n),line:r.getStartLineNumber(),moduleSpecifier:a,platform:c})}}return s},Mu=new Set(["createMultipartUpload","delete","download","generateUploadUrl","get","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","put","resumeMultipartUpload","store","upload"]),_u=(e,t,s=[])=>{const n=new Map(s.map(r=>[`${r.filePath}:${r.exportName}`,r.visibility]));return Te(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.storage"||r.startsWith("ctx.storage."),methods:Mu,requireUnmodifiedReach:!0}).map(r=>{const a=n.get(`${r.file}:${r.exportName}`);return a===void 0?r:{...r,visibility:a}})},Ku=new Map([["generateUploadUrl",1],["getPresignedUrl",1],["getSignedUrl",1],["store",2],["upload",2]]),$u=e=>e&&i.isNumericLiteral(e)?Number(e.getText()):void 0,zu=e=>{if(e===void 0)return{analyzable:!0,presentKeys:[]};if(!i.isObjectLiteralExpression(e))return{analyzable:!1,presentKeys:[]};const t=[];let s,n=!1;for(const o of e.getProperties()){if(i.isSpreadAssignment(o)){n=!0;continue}if(i.isPropertyAssignment(o)){const r=x(o);t.push(r),r==="expiresInSeconds"&&(s=$u(o.getInitializer()));continue}(i.isShorthandPropertyAssignment(o)||i.isMethodDeclaration(o))&&t.push(x(o))}return{analyzable:!n,expiresInSeconds:s,presentKeys:t}},Uu=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName(),s=Ku.get(t);if(s===void 0)return;const n=e.getExpression().getText();return n==="ctx.storage"||n.startsWith("ctx.storage.")?{method:t,optionsIndex:s}:void 0},Bu=(e,t)=>{const s=Uu(e.getExpression());if(s!==void 0)return{exportName:E(e),file:t,line:e.getStartLineNumber(),method:s.method,...zu(e.getArguments()[s.optionsIndex])}},qu=(e,t)=>F(e,t,Bu),ju=(e,t)=>{const s=Kn(t.target);return{...s===void 0?{}:{platform:s},analytics:e.analytics||t.dependencies.has("@lunora/bindings"),auth:t.dependencies.has("@lunora/auth"),containers:e.container||t.containerCount>0||t.dependencies.has("@lunora/container"),flags:e.flags||t.dependencies.has("@lunora/flags"),kv:e.kv||t.dependencies.has("@lunora/bindings"),mail:e.mail||t.dependencies.has("@lunora/mail"),notifications:e.notify||t.dependencies.has("@lunora/notify"),payments:e.payments||t.hasPaymentTables,queues:t.queueCount>0||t.dependencies.has("@lunora/queue"),scheduler:e.scheduler||t.cronCount>0||t.dependencies.has("@lunora/scheduler"),storage:e.storage||t.storageRuleCount>0||t.storageColumnCount>0||t.dependencies.has("@lunora/storage"),vectors:t.vectorStoreSupported&&t.vectorIndexCount>0,workflows:e.workflows||t.workflowCount>0||t.dependencies.has("@lunora/workflow")}},Wu=new Set(["delete","hardDelete","patch","replace","restore"]),Vu=new Set(["insertMany","insertManyUnsafe","patchWhere"]),Hu=new Set(["delete","deleteMany","hardDelete","insert","insertMany","patch","patchMany","replace","restore","upsert","upsertMany"]),ns=(e,t)=>{const n=e.getProperty("__table")?.getTypeAtLocation(t)?.getLiteralValue();return typeof n=="string"?n:""},Gu=(e,t)=>{const s=e.getType();if(t==="deleteMany"||t==="patchMany"){const n=s.getArrayElementType();if(n===void 0)return"";const o=t==="patchMany"?n.getProperty("id")?.getTypeAtLocation(e):n;return o===void 0?"":ns(o,e)}return ns(s,e)},Yu=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=t.getName(),n=t.getExpression(),[o]=e.getArguments();if(k(n))return Vu.has(s)?{method:s,table:o!==void 0&&i.isStringLiteral(o)?o.getLiteralText():""}:Wu.has(s)||s==="deleteMany"||s==="patchMany"?{method:s,table:o===void 0?"":Gu(o,s)}:void 0;if(Hu.has(s)&&i.isPropertyAccessExpression(n)&&k(n.getExpression()))return{method:s,table:n.getName()}},Qu=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=m(t,n);for(const a of o.getDescendantsOfKind(l.CallExpression)){const c=Yu(a),u=c===void 0?"":re(a);c!==void 0&&u!==""&&s.push({exportName:u,file:r,line:a.getStartLineNumber(),method:c.method,table:c.table})}}return s},Xu=(e,t,s)=>({cacheKey:`procedure_arguments_unreadable:${e}:${t}`,categories:["SCHEMA"],description:"Codegen reads an argument record statically. One built at runtime — a factory call, or a property off a value it cannot follow — has no literal to read, so the generated `FunctionReference` carries only the arguments it could see while the runtime validator still enforces all of them.",detail:`\`${t}\` in \`${e}\` (line ${s.toString()}) declares arguments codegen could not read, so its generated type is missing some of them.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:s},name:"procedure_arguments_unreadable",remediation:`Declare the arguments as an object literal, or as a \`const\` object literal the chain names — \`const ${t}Args = { … };\` then \`.input(${t}Args)\`. Both resolve; a record returned by a call does not.`,title:"Procedure arguments are missing from the generated type"}),Ju=(e,t)=>{if(t===void 0){const s=e.getArguments()[0];if(s===void 0||!i.isObjectLiteralExpression(s)||C(s,"args")===void 0)return!1}return st(e,t).opaque},Zu=(e,t)=>{const s=[],n=(o,r)=>{const a=o.getInitializer();if(a===void 0||!i.isCallExpression(a))return;const c=B(a);c!==void 0&&Ju(a,c.receiver)&&s.push(Xu(t,r,a.getStartLineNumber()))};for(const o of e.getVariableStatements().filter(r=>r.isExported()))for(const r of o.getDeclarations())n(r,r.getName());return s},ed=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n);o!==void 0&&s.push(...Zu(o,m(t,n)))}return s.toSorted((n,o)=>n.cacheKey.localeCompare(o.cacheKey))},td=new Map([["AgentDefinition",{call:"defineAgent({ … })",file:"agents"}],["ContainerDefinition",{call:"defineContainer({ … })",file:"containers"}],["QueueDefinition",{call:"defineQueue({ … })",file:"queues",note:"A dropped queue has no caller to fail — its consumer is simply never wired."}],["RegisteredAction",{call:"action.input({ … }).action(handler)"}],["RegisteredLifecycleHook",{call:"onConnect(handler)",note:"Substitute the hook you called: `onConnect`, `onDisconnect` and `onShardInit` share one type, so codegen cannot tell which you wrote. A dropped hook has no caller to fail — it silently never fires."}],["RegisteredMigration",{call:"defineMigration({ … })",note:"A dropped migration never runs, so `lunora migrate up` reports nothing to do."}],["RegisteredMutation",{call:"mutation.input({ … }).mutation(handler)"}],["RegisteredMutator",{call:"defineMutator({ … })",file:"mutators"}],["RegisteredQuery",{call:"query.input({ … }).query(handler)"}],["RegisteredReactor",{call:"onQueryChange(select, handler)",note:"A dropped reactor has no caller to fail — it silently never runs."}],["RegisteredShape",{call:"defineShape({ … })",file:"shapes"}],["RegisteredStream",{call:"query.input({ … }).stream(handler)"}],["RegisteredWhisperAuthorizer",{call:"onWhisper(handler)",note:"A dropped authorizer has no caller to fail — the whisper topics it was meant to gate silently stay open to every socket on the shard."}],["SubscriptionDefinition",{call:"defineSubscription(topic, { … })",file:"queues",note:"A dropped subscription is never published to — its topic's messages simply never reach it."}],["WorkflowDefinition",{call:"defineWorkflow({ … })",file:"workflows"}]]),Ce=({byName:e,byPath:t},s,n)=>t.has(`${s}:${n}`)||e.has(n),js=e=>!e.isAny(),rt=e=>{const t=e.getType();if(!js(t))return;const s=t.getAliasSymbol()?.getName()??t.getSymbol()?.getName(),n=s===void 0?void 0:td.get(s);return n===void 0||s===void 0?void 0:{...n,typeName:s}},Ws=e=>{const t=e.getInitializer();return t===void 0?!1:i.isCallExpression(t)||i.isIdentifier(t)||i.isPropertyAccessExpression(t)},Vs={cause:"codegen recognises a registration only when the initializer is the registering call itself, and this one comes from a factory or an alias",remediation:"A factory that returns a registration cannot be read statically — inline it, or export what the factory builds."},sd=e=>({cause:`codegen reads this kind of registration only from \`lunora/${e}.ts\`, and this is a different module`,remediation:`Move it into \`lunora/${e}.ts\` — the declaration itself is fine.`}),nd={cause:"the binding is exported by a separate `export { … }` statement, and codegen reads the `export` keyword on the declaration itself",remediation:"Move the keyword onto the declaration and drop the separate export statement."},ot=(e,t,s,n,o)=>{const{call:r,file:a,note:c,typeName:u}=s,d=a!==void 0&&e!==a?a:void 0,p=d===void 0?o:sd(d),v=c===void 0?p.remediation:`${c} ${p.remediation}`;return{cacheKey:`procedure_not_registered:${e}:${t}`,categories:["SCHEMA"],description:"Codegen registers an export only when the declaration carries `export` and its initializer is literally the registering call. Written any other way it exists at runtime but never reaches the generated output — `_generated/api.ts` for a procedure, the lifecycle manifest for a hook or reactor — so a caller cannot address it and a hook never fires.",detail:`\`${t}\` in \`${e}\` (line ${n.toString()}) has type \`${u}\` but was not registered — ${p.cause}.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:n,typeName:u},name:"procedure_not_registered",remediation:d===void 0?`Assign the registration directly: \`export const ${t} = ${r};\`. ${v}`:v,title:"Procedure exists at runtime but is missing from the generated API"}},rd=(e,t,s)=>{const n=[];for(const o of e.getVariableStatements().filter(r=>r.isExported()))for(const r of o.getDeclarations()){const a=r.getName();if(Ce(s,t,a)||!Ws(r))continue;const c=rt(r);c!==void 0&&n.push(ot(t,a,c,r.getStartLineNumber(),Vs))}return n},od=(e,t,s)=>{if(Ce(s,t,"default"))return[];const n=[];for(const o of e.getExportAssignments().filter(r=>!r.isExportEquals())){const r=rt(o.getExpression());r!==void 0&&n.push(ot(t,"default",r,o.getStartLineNumber(),Vs))}return n},id=(e,t,s)=>{const n=[];for(const o of e.getExportDeclarations().filter(r=>r.getModuleSpecifier()===void 0))for(const r of o.getNamedExports()){const a=r.getAliasNode()?.getText()??r.getName();if(Ce(s,t,a))continue;const c=r.getLocalTargetDeclarations().find(d=>i.isVariableDeclaration(d));if(c===void 0||!Ws(c))continue;const u=rt(c);u!==void 0&&n.push(ot(t,a,u,r.getStartLineNumber(),nd))}return n},ad=(e,t,s)=>[...rd(e,t,s),...od(e,t,s),...id(e,t,s)],cd=(e,t,s)=>e.getVariableStatements().filter(n=>n.isExported()).flatMap(n=>n.getDeclarations()).filter(n=>Ce(s,t,n.getName())).filter(n=>{const o=n.getInitializer();return o!==void 0&&i.isCallExpression(o)&&i.isPropertyAccessExpression(o.getExpression())}).map(n=>({declaration:n,exportName:n.getName(),relativePath:t})),ld=({exportName:e,relativePath:t})=>({cacheKey:"procedure_type_check_unavailable",categories:["SCHEMA"],description:"Codegen cross-checks every export in `lunora/` against its TYPE to catch a procedure the syntactic scan dropped — a factory-assigned export, an alias, a separate `export { … }`. That check needs the type checker to resolve `@lunora/server`; when it cannot, the check reports nothing regardless of what the code does.",detail:`Type resolution for \`lunora/\` is unavailable — the registered procedure \`${e}\` in \`${t}\` types as \`any\`, as does every other one — so codegen cannot tell you when an export is dropped from \`_generated/api.ts\`. A dropped procedure will surface as \`Property '<name>' does not exist\` at its call site instead.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:e,filePath:t},name:"procedure_type_check_unavailable",remediation:`Check what codegen sees: \`${e}\` should have a procedure type, not \`any\`. It needs a \`tsconfig.json\` at or above \`lunora/\` — the one codegen finds walking up from there, which is not necessarily the one your editor uses — resolving \`lunorash\` / \`@lunora/server\` to declarations that exist on disk (a workspace dependency has to be built first).`,title:"Codegen cannot type-check `lunora/`, so dropped procedures go unreported"}),ud=(e,t,s)=>{const n=[],o=[];for(const a of g(t)){const c=e.getSourceFile(a);if(c===void 0)continue;const u=m(t,a);n.push(...ad(c,u,s)),o.push(...cd(c,u,s))}const[r]=o;return r!==void 0&&o.every(({declaration:a})=>!js(a.getType()))&&n.push(ld(r)),n.toSorted((a,c)=>a.cacheKey.localeCompare(c.cacheKey))},dd=new Set(["when","where"]),We=new Set(["definePolicy","defineShape"]),fd=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(i.isPropertyAccessExpression(t)){const n=t.getName();return We.has(n)?n:void 0}if(!i.isIdentifier(t))return;for(const n of t.getSymbol()?.getDeclarations()??[])if(i.isImportSpecifier(n)){const o=n.getNameNode().getText();return We.has(o)?o:void 0}const s=t.getText();return We.has(s)?s:void 0},pd=e=>i.isObjectLiteralExpression(e)&&e.getProperties().length===0,Hs=e=>{if(e!==void 0){if(i.isReturnStatement(e)&&e.getExpression()===void 0||e.getKind()===l.UndefinedKeyword||e.getText()==="undefined")return"undefined";if(pd(e))return"empty-object";if(i.isParenthesizedExpression(e))return Hs(e.getExpression())}},it=e=>e.getAncestors().find(t=>i.isArrowFunction(t)||i.isFunctionExpression(t)||i.isFunctionDeclaration(t)),gd=e=>e.getDescendantsOfKind(l.ReturnStatement).filter(t=>it(t)===e),Gs=e=>e.getDescendantsOfKind(l.ConditionalExpression).filter(t=>it(t)===e),md=e=>{const t=gd(e);return t.length>1?!0:t.some(s=>s.getFirstAncestorByKind(l.IfStatement)!==void 0)||Gs(e).length>0},hd=e=>e.getDescendantsOfKind(l.IfStatement).filter(t=>it(t)===e),Xe=e=>e.getKind()===l.NullKeyword||e.getKind()===l.FalseKeyword||i.isIdentifier(e)&&e.getText()==="undefined"?!0:i.isNumericLiteral(e)?e.getLiteralValue()===0:i.isStringLiteral(e)&&e.getLiteralValue()==="",vd=(e,t)=>Xe(e)||Xe(t),xd=new Map([[l.EqualsEqualsEqualsToken,"positive"],[l.EqualsEqualsToken,"positive"],[l.ExclamationEqualsEqualsToken,"negative"],[l.ExclamationEqualsToken,"negative"]]),rs=e=>!Xe(e)&&(i.isLiteralExpression(e)||e.getKind()===l.TrueKeyword),Ed=(e,t,s)=>{const n=xd.get(e);if(n!==void 0)return vd(t,s)?n==="positive"?"negative":"positive":rs(t)||rs(s)?void 0:n},se=e=>{if(i.isParenthesizedExpression(e))return se(e.getExpression());if(i.isPrefixUnaryExpression(e)&&e.getOperatorToken()===l.ExclamationToken)return"negative";if(i.isBinaryExpression(e)){const t=e.getOperatorToken().getKind(),s=Ed(t,e.getLeft(),e.getRight());if(s!==void 0)return s;if(t===l.AmpersandAmpersandToken||t===l.BarBarToken){const n=se(e.getLeft()),o=se(e.getRight());return n===o?n:"indeterminate"}}return i.isIdentifier(e)||i.isPropertyAccessExpression(e)||i.isElementAccessExpression(e)||i.isCallExpression(e)?"positive":"indeterminate"},os=e=>{if(e!==void 0){if(i.isReturnStatement(e))return e;if(i.isBlock(e)){const t=e.getStatements().at(-1);return t!==void 0&&i.isReturnStatement(t)?t:void 0}}},Sd=e=>{if(e.getElseStatement()!==void 0)return;const t=e.getNextSiblingIfKind(l.ReturnStatement);return t!==void 0&&t.getNextSibling()===void 0?t:void 0},yd=e=>i.isReturnStatement(e)?e.getExpression()??e:e,Ad=e=>{const t=[];for(const s of Gs(e)){const n=se(s.getCondition());n==="positive"?t.push(s.getWhenFalse()):n==="negative"&&t.push(s.getWhenTrue())}for(const s of hd(e)){const n=se(s.getExpression());if(n==="indeterminate")continue;const o=n==="negative"?os(s.getThenStatement()):os(s.getElseStatement())??Sd(s);o!==void 0&&t.push(yd(o))}return t},bd=e=>{for(const t of e.getAncestors())if(i.isVariableDeclaration(t)){const s=t.getNameNode();if(i.isIdentifier(s))return s.getText()}return"<anonymous>"},Nd=(e,t,s)=>{if(!i.isCallExpression(e))return[];const[n]=e.getArguments();if(!n||!i.isObjectLiteralExpression(n))return[];const o=[];for(const r of n.getProperties()){if(!i.isPropertyAssignment(r)||!dd.has(x(r)))continue;const a=r.getInitializer();if(!(!a||!(i.isArrowFunction(a)||i.isFunctionExpression(a)))&&md(a))for(const c of Ad(a)){const u=Hs(c);u!==void 0&&o.push({exportName:bd(e),file:s,form:u,key:x(r),line:c.getStartLineNumber(),owner:t})}}return o},wd=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(l.CallExpression)){const o=fd(n);o!==void 0&&s.push(...Nd(n,o,t))}return s},Pd=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...wd(o,m(t,n)))}return s},Id=new Set(["query","upsert","upsertNow"]),Td=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(Id.has(t))return e.getExpression().getText()==="ctx.vectors"?t:void 0},Cd=(e,t)=>{const s=Td(e.getExpression());if(s===void 0)return;const n=e.getArguments()[1];if(!n)return;const o=b(n,"namespace");if(!(!o||!K(o)||W(o)))return{exportName:E(e),file:t,line:e.getStartLineNumber(),method:s}},Fd=(e,t)=>F(e,t,Cd),Od=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="get")return!1;const s=t.getExpression();return i.isPropertyAccessExpression(s)?s.getName()==="workflows":i.isIdentifier(s)&&s.getText()==="workflows"},Rd=e=>{const t=e.getArguments()[0];return t&&i.isStringLiteral(t)?t.getLiteralText():""},Ld=(e,t)=>{const s=[];for(const n of g(t)){const o=e.getSourceFile(n)??e.addSourceFileAtPath(n),r=m(t,n);for(const a of o.getDescendantsOfKind(l.CallExpression)){if(!Od(a))continue;const c=re(a);c!==""&&s.push({exportName:c,file:r,line:a.getStartLineNumber(),workflow:Rd(a)})}}return s},kd=".lunora-schema.json",Je=(e,t)=>{w(e)&&cs(e,"utf8")===t||on(e,t,"utf8")},Dd=(e,t)=>{if(t===""){an(e,{force:!0});return}Je(e,t)},Md=e=>{const t=h(e,"package.json");if(w(t))try{const s=JSON.parse(cs(t,"utf8"));return typeof s.version=="string"&&s.version!==""?s.version:void 0}catch{return}},_d=()=>{const e=process.env.LUNORA_CODEGEN_TIMING;return e!==void 0&&e!==""},Kd=e=>{let t=w(e)?e:he(e);for(;t&&t!==he(t);){const s=h(t,"tsconfig.json");if(w(s))return s;t=he(t)}},is=e=>e.replaceAll("\\","/"),$d=(e,t,s)=>{if(s&&e.length>0){const r=e.map(a=>`"${a.exportName}"`).join(", ");throw new U("MASK_UNSUPPORTED",`This project declares a \`mask(...)\` policy whose argument isn't a plain object literal (e.g. \`mask(sharedPolicies)\` referencing a hoisted variable), or contains a spread (\`...shared\`) or computed key (\`[name]:\`) codegen can't enumerate, so codegen can't tell which columns it masks. Because the project also declares replication shape(s) (${r}), codegen can't verify none of them replicate a table that policy masks — inline every table and column as literal keys so codegen can verify it, or remove the affected shape(s).`,{status:422})}const n=new Map;for(const r of t.columns){const a=n.get(r.table)??[];a.push(r.column),n.set(r.table,a)}const o=t.columns.length>0;for(const r of e){if(r.table===void 0){if(o)throw new U("MASK_UNSUPPORTED",`defineShape "${r.exportName}" has a non-literal \`table\` (a variable or expression, not a string literal), so codegen can't statically verify it doesn't replicate a table that masks a column. This project masks at least one column elsewhere, so the combination can't be proven safe — change "${r.exportName}"'s \`table\` to a plain string literal so codegen can verify it, or remove the mask(s) on the table it targets.`,{status:422});continue}const a=n.get(r.table);if(a===void 0)continue;const c=a.map(u=>`"${u}"`).join(", ");throw new U("MASK_UNSUPPORTED",`defineShape "${r.exportName}" replicates table "${r.table}", which masks column(s) ${c} on at least one procedure. A shape runs no procedure, so \`.use(mask(...))\` never applies to its replicated rows — remove the shape, unmask the table, or wait for shape-masking support.`,{status:422})}},Ae=(e,t,s)=>{const n=e.getSourceFile(t);if(n===void 0){e.createSourceFile(t,s,{overwrite:!0});return}n.getFullText()!==s&&n.replaceWithText(s)},as=(e,t,s)=>e.getSourceFile(t)?.getFullText()===s,zd=8,Ud=e=>{const{agents:t,apiPath:s,generatedFunctionsPath:n,lunoraDirectory:o,migrations:r,project:a,shapes:c,usesSandbox:u,useUmbrella:d,workflows:p}=e,v=()=>Yn(()=>{const A=Qn(a,o),I=rr(a,o);return{functions:A,httpRoutes:Xn(a,o),mutators:I}});let{erased:y,value:{functions:L,httpRoutes:D,mutators:M}}=v();Dt([...L,...M].map(A=>A.filePath)),Dt(D.filter(A=>A.stream).map(A=>A.filePath),"http-stream");for(let A=1;;A+=1){const I=Pr({agents:t,functions:L,httpRoutes:D,mutators:M,useUmbrella:d,workflows:p}),$=_r({agents:t,functions:L,migrations:r,mutators:M,shapes:c,useUmbrella:d,usesSandbox:u});if(A>=zd||as(a,s,I)&&as(a,n,$))return{apiContent:I,erased:y,functions:L,functionsContent:$,httpRoutes:D,mutators:M};Ae(a,s,I),Ae(a,n,$),{erased:y,value:{functions:L,httpRoutes:D,mutators:M}}=v()}},Bd=e=>{const t=Kd(e);return t?new Ot({skipAddingFilesFromTsConfig:!1,tsConfigFilePath:t,useInMemoryFileSystem:!1}):new Ot({skipAddingFilesFromTsConfig:!0,useInMemoryFileSystem:!1})},Zf=(e,t)=>{const s=g(t),n=h(t,"schema.ts");w(n)&&s.push(n);for(const c of s){const u=e.getSourceFile(c);u===void 0?e.addSourceFileAtPath(c):u.refreshFromFileSystemSync()}const o=new Set(s.map(c=>is(c))),r=is(t),a=`${r}/`;for(const c of e.getSourceFiles()){const u=c.getFilePath();(u===r||u.startsWith(a))&&!o.has(u)&&e.removeSourceFile(c)}for(const c of e.getSourceFiles()){const u=c.getFilePath();if(!(u===r||u.startsWith(a)||u.includes("/node_modules/")))try{c.refreshFromFileSystemSync()}catch{e.removeSourceFile(c)}}},ep=e=>{const t=_d(),s=t?Ke.now():0,n=h(e.projectRoot,e.lunoraDirectory??"lunora"),o=h(n,"schema.ts");if(!w(o))throw new U("INTERNAL",`schema.ts not found at ${o}`);const r=e.project??Bd(n);Bn(xa);const a=fr(r,o,e.projectRoot),{agents:c,capabilities:u,containers:d,crons:p,dataModelContent:v,dependencies:y,entryCronTriggers:L,env:D,featureUsage:M,hasFlags:A,hasNotify:I,identity:$,platformGate:q,queues:T,serverContent:G,services:J,storageRulesMetadata:Z,topics:Y,usesSandbox:ce,useUmbrella:z,workflows:O}=To({lunoraDirectory:n,project:r,projectRoot:e.projectRoot,schema:a,target:e.target});nc(a,a.jurisdiction===void 0?void 0:tc(r,n)),Jr(a,M.artifacts);const R=h(n,"_generated"),P=h(R,"dataModel.ts"),Ys=h(R,"server.ts"),Qs=h(R,"api.ts"),Xs=h(R,"functions.ts");Ae(r,P,v),Ae(r,Ys,G);const le=tr(r,n),Q=vr(r,n),{apiContent:at,erased:Js,functions:j,functionsContent:ct,httpRoutes:Fe,mutators:ue}=Ud({agents:c,apiPath:Qs,generatedFunctionsPath:Xs,lunoraDirectory:n,migrations:le,project:r,shapes:Q,useUmbrella:z,usesSandbox:ce,workflows:O}),lt=pn(r,n),Oe=gn(lt,a,[...j,...Fe].map(f=>f.filePath)),de=lt.length>0,V=e.lint===!1&&!de?void 0:{inserts:Zn(r,n),queries:cr(r,n),tableWrites:Qu(r,n),workflowCalls:Ld(r,n)},fe=e.lint===!1||V===void 0?void 0:dn({adminRoutes:Mo(r,n),aiRawRuns:jo(r,n),aiToolSideEffects:ei(r,n),argumentDerivedFetches:ni(r,n),argumentValidators:pi(r,n),authApiCalls:qn(r,n),authConfigs:bi(r,n),browserUrlAccesses:Ti(r,n),configCalls:Ui(r,n),containerKeyAccesses:qi(r,n),containerOverrides:Yi(r,n),containers:d,exportSinks:Zi(r,n),staleMigrationImports:Du(r,n),failOpenGuards:ra(r,n),flagReads:pa(r,n),flagSecurityDefaults:va(r,n),geoIndexUsages:ya(r,n),httpActionGuards:La(r,n),httpHeaderWrites:qa(r,n),hyperdriveCalls:Jn(r,n),identityClaimReads:Qa(r,n),imageDeliveryUrlAccesses:Ja(r,n),inserts:V.inserts,kvKeyAccesses:oc(r,n,j),mailRecipientAccesses:uc(r,n),maskProcedures:er(r,n),maskStrategies:xc(r,n),mutatorWrites:Nc(r,n),nondeterministicCalls:or(r,n),normalizeIdAuthorizations:zc(r,n),notifyCalls:ar(r,n),notifyConfig:ir(r,n),mutators:ue,ownerFieldWrites:Qc(r,n,j,ue),unrestrictedWhereBranches:Pd(r,n),paymentWebhooks:rl(r,n),privilegedDispatches:ml(r,n),procedureProtections:Zl(r,n),queries:V.queries,queues:T,r2sqlCalls:lr(r,n),ratelimitKeySelectors:iu(r,n),rawRowReturns:pu(r,n),relationLoads:hu(r,n),rlsProcedures:ur(r,n),schema:a,secretLiterals:Nu(r,n),modules:Oe,shapes:Q,softDeleteReads:Pu(r,n),sqlInterpolations:Ru(r,n),storageKeyAccesses:_u(r,n,j),storageUploads:qu(r,n),tableWrites:V.tableWrites,vectorNamespaceAccesses:Fd(r,n),workflowCalls:V.workflowCalls,workflows:O,wranglerVariables:e.wranglerVariables}),ut=fe===void 0?[]:$r(e.projectRoot,[...cn(fe,{source:"static"}),...ud(r,n,{byName:new Set([...O,...T,...c,...d].map(f=>f.exportName)),byPath:new Set([...j,...ue,...Q,...le].map(f=>`${f.filePath}:${f.exportName}`))}),...ed(r,n),...Gn(Js,n)]),Zs=dr(r,n),dt=mc(r,n);$d(Q,dt,pc(r,n));const en=A?ca(r,n):[],Re=q.signals.vectorStore!==!1,ee=ju(M,{containerCount:d.length,cronCount:p.length,dependencies:y,hasPaymentTables:Zc(a.tables),queueCount:T.length,storageColumnCount:Object.keys(Es(a)).length,storageRuleCount:Z.rules.length,vectorIndexCount:a.vectorIndexes.length,target:xs(e.projectRoot,e.target),vectorStoreSupported:Re,workflowCount:O.length}),ft=t?Ke.now():0,Le=br(a,le.map(f=>f.id)),pt=$n({advisories:ut.filter(f=>f.name!=="procedure_type_check_unavailable"),advisorProcedures:fe?.procedureProtections??[],agents:c,capabilities:u,containers:d,env:D,flagKeys:en,hasFlags:A,hasNotify:I,hasVectors:Re,maskMetadata:dt,mutators:ue,queues:T,rlsMetadata:Zs,schema:a,schemaSnapshot:Le,shapes:Q,services:J,storageRules:Z,studioFeatures:ee,topics:Y,useUmbrella:z,workflows:O}),gt=Nr(Q,y.has("@lunora/db"),z),mt=Ir(d,a.jurisdiction),ht=Tr(O),vt=Cr(c),xt=Fr(T),Et=Or(p),tn=Rr(ee.scheduler),sn=Lr(a.tables,z),St=kr(a.vectorIndexes),pe=Mr(a,z),yt=wr(y.has("@lunora/seed")),ge=e.apiSpec??"openapi",ke=ge==="openapi"||ge==="both",De=ge==="openrpc"||ge==="both",At=xr({capabilities:u,emailAgents:c.filter(f=>f.onEmail===!0).map(f=>({className:f.className,exportName:f.exportName})),hasAccess:y.has("@lunora/cloudflare-access"),hasAuth:y.has("@lunora/auth"),hasFramework:y.has("@lunora/astro")||y.has("@lunora/svelte")||y.has("@lunora/vue")||w(h(e.projectRoot,"src","worker.ts")),hasGlobal:a.tables.some(f=>ls(f)),hasHyperdriveGlobal:a.tables.some(f=>us(f)),hasKvIntrospector:ee.kv,hasNotify:I,hasQueue:T.some(f=>f.mode==="push"),hasScheduler:ee.scheduler,hasSourcedTables:a.tables.some(f=>f.externalSource!==void 0),hasStorage:ee.storage,hasVectors:Re,hasWorkflow:O.length>0,identity:$,jurisdiction:a.jurisdiction,jurisdictionPinsAuth:a.jurisdictionPinsAuth===!0,tables:a.tables.map(f=>({name:f.name,shardMode:f.shardMode})),useUmbrella:z,vectorIndexCount:a.vectorIndexes.length,voiceAgents:c.filter(f=>f.voice===!0&&f.voiceBindingName!==void 0).map(f=>({bindingName:f.voiceBindingName,exportName:f.exportName})),wantsArchitecture:de,wantsOpenApi:ke,wantsOpenRpc:De}),bt=Md(e.projectRoot),Nt=de?Oe:[],wt=Er({functions:j,httpRoutes:Fe,modules:Nt,version:bt}),Pt=yr({functions:j,modules:Nt,version:bt}),It=`${JSON.stringify(wt,void 0,2)}
+`,Tt=`${JSON.stringify(Pt,void 0,2)}
+`,me=de&&V!==void 0?Qr({...V,callEdges:Li(r,n),crons:p,functions:j,httpRoutes:Fe,modules:Oe,queues:T,schema:a,services:J,topics:Y,workflows:O}):void 0,Ct=Sr(wt),Ft=Ar(Pt),Me=h(n,kd),nn=w(Me),_e=[];if(!e.dryRun){w(R)||rn(R,{recursive:!0});const f=(H,X)=>{Je(h(R,H),X),_e.push(H)},N=(H,X)=>{Dd(h(R,H),X),X!==""&&_e.push(H)};f("app.ts",At),f("dataModel.ts",v),f("api.ts",at),f("server.ts",G),f("functions.ts",ct),f("shard.ts",pt),f("crons.ts",Et),f("vectors.ts",St),f("drizzle.global.ts",pe.global),f("drizzle.shard.ts",pe.shard),N("containers.ts",mt),N("workflows.ts",ht),N("agents.ts",vt),N("queues.ts",xt),N("scheduler.ts",tn),N("shardRegistry.ts",sn),N("seed.ts",yt),N("collections.ts",gt),N("openapi.json",ke?It:""),N("openapi.ts",ke?Ct:""),N("openrpc.json",De?Tt:""),N("openrpc.ts",De?Ft:""),N("architecture.json",me===void 0?"":`${JSON.stringify(me,void 0,2)}
+`),N("architecture.ts",me===void 0?"":Xr(me)),(!nn||e.updateSchemaBaseline===!0)&&Je(Me,un(Le))}if(t){const f=Ke.now(),N=Math.round(f-s),H=Math.round(ft-s),X=Math.round(f-ft);console.error(`@lunora/codegen: codegen took ${N.toString()}ms (discovery ${H.toString()}ms, emit ${X.toString()}ms)`)}return{advisories:ut,advisorContext:fe,agents:c,containers:d,cronTriggers:[...new Set([...Dr(p),...L])],generated:{agents:vt,api:at,app:At,collections:gt,containers:mt,crons:Et,dataModel:v,drizzleGlobal:pe.global,drizzleShard:pe.shard,functions:ct,openApi:It,openApiModule:Ct,openRpc:Tt,openRpcModule:Ft,queues:xt,seed:yt,server:G,shard:pt,vectors:St,workflows:ht},migrations:le,outputDirectory:R,platformDiagnostics:q.diagnostics,queues:T,schemaSnapshot:Le,schemaSnapshotPath:Me,workflows:O,writtenFiles:_e}};export{kd as SCHEMA_SNAPSHOT_FILENAME,Bd as createCodegenProject,Kd as findTsconfig,Zf as refreshCodegenProject,ep as runCodegen};

package/dist/packem_shared/emitAgents-DBUkiiof.mjs

@@ -0,0 +1 @@
+import"./ir-DBSvhNa-.mjs";import"./json-data-Chfs2Cz5.mjs";import{o as i,j as r,s as o,h as n,t as g,k as F,d as u,v as p,m as f,g as l,f as d,i as k,u as w,l as Q}from"./shard-runtime-B9wmfm43.mjs";import"./shared-DjUziztz.mjs";export{i as buildDoTypeImports,r as emitAgentFragments,o as emitAgents,n as emitContainerFragments,g as emitContainers,F as emitPaymentFragments,u as emitQueueFragments,p as emitQueues,f as emitQueuesMetadataFragments,l as emitServiceFragments,d as emitTopicFragments,k as emitWorkflowFragments,w as emitWorkflows,Q as emitWorkflowsMetadataFragments};

package/dist/packem_shared/{emitApp-T_My13i6.mjs → emitApp-DPzAn_NF.mjs}

@@ -1,9 +1,9 @@
-import{A as k}from"./capabilities-CqnIsyA9.mjs";import{i as S}from"./ir-DBSvhNa-.mjs";import{G as E}from"./shared-DjUziztz.mjs";const g=e=>k.filter(({key:r})=>e.capabilities.has(r)),D=(e,r)=>{const t=new Set([...e].filter(a=>a!=="vectors"));return r&&t.add("vectors"),t},m=e=>g(e).length>0,R=e=>e?['import * as lunoraIdentityContract from "../identity.js";']:[],x=(e,r)=>e?['import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";',`import { createAccessResolver${r?", composeResolvers":""} } from "@lunora/cloudflare-access";`]:[],A=e=>e?['import { createKvIntrospectorFromEnv } from "@lunora/bindings/kv";']:[],C=e=>e?['import { createVectorAdminIntrospector } from "@lunora/bindings/vectors";']:[],O=e=>e?['import type { D1CtxDbOptions, D1DatabaseLike, D1Exec } from "@lunora/d1";','import { applyCdcChanges, createD1CtxDb, emitD1QueryCost, exportGlobalRows, facetGlobalColumn, importGlobalRows, listGlobalTables, readD1CdcChanges, readGlobalTablePage, retryingExec } from "@lunora/d1";']:[],T=e=>e?['import notifyConfig from "../notify.js";']:[],v=e=>(e.emailAgents?.length??0)>0,N=e=>v(e)?['import { dispatchAgentEmail } from "@lunora/agent/inbound";']:[],q=e=>v(e)?['import * as lunoraAgentDefinitions from "../agents.js";']:[],d=e=>e.tables.some(r=>S(r)),I=e=>{const{hasFramework:r,hasGlobal:t,hasHyperdriveGlobal:a,hasQueue:n,useUmbrella:o}=e,i=o?"lunorash/runtime":"@lunora/runtime",l=["ExecutionContextLike","HttpRouterLike","LunoraWorker","Route","ScheduledControllerLike","ShardNamespaceLike","WorkerOptions",...n?["TriggerTrace"]:[],...t?["GlobalIntrospector"]:[],...e.tables.length>0?["ShardingInfo"]:[],...r?["FrameworkHostHandler"]:[]],c=[...t||a?["createCrossShardRelationCapabilities"]:[],...d(e)?["createDynamicShardRegistry","createQueryCoordinator"]:[],"createWorker",...e.jurisdiction?["declareAppJurisdiction"]:[],"resolveLogArchiveFromEnv",...r?["withFrameworkWorker"]:[]].join(", ");return[`import type { ${[...l].toSorted((s,h)=>s.localeCompare(h)).join(", ")} } from "${i}";`,`import { ${c} } from "${i}";`]},L=e=>{const{hasAccess:r,hasAuth:t,hasGlobal:a,hasHyperdriveGlobal:n,hasKvIntrospector:o,hasQueue:i,hasScheduler:l,hasStorage:c,hasWorkflow:s,wantsOpenApi:h,wantsOpenRpc:u}=e;return[...t?['import type { AuthNamespaceLike, LunoraAuth, LunoraAuthOptions } from "@lunora/auth";','import { authDiscoveryPathsFor, createAuth, createAuthAdmin, createAuthAuditReader, createDoAuthWiring, d1Executor, ensureMigrated, handleAuthDiscoveryRequest, handleAuthRequest, lunoraD1Adapter } from "@lunora/auth";']:[],...x(r,t),...O(a),...n?['import type { HyperdriveEngine } from "@lunora/hyperdrive/global";','import { createHyperdriveGlobalCtxDb } from "@lunora/hyperdrive/global";','import type { SqlCtxDbOptions, SqlExec } from "@lunora/sql-store";']:[],...A(o),...C(e.hasVectors===!0),...l?['import type { DurableObjectNamespaceLike } from "@lunora/scheduler";','import { createScheduler } from "@lunora/scheduler";']:[],...c?['import type { R2BucketLike, R2S3Credentials, Storage } from "@lunora/storage";','import { createBucketStorage, createStorage } from "@lunora/storage";']:[],...s?['import { createWorkflowsRestClient } from "@lunora/workflow";']:[],...N(e),...I(e),"",...R(e.identity),...q(e),...a||n?['import schema from "../schema.js";']:[],...T(e.hasNotify),'import { LUNORA_CRONS } from "./crons.js";','import { LUNORA_FUNCTIONS } from "./functions.js";',...i?['import { createQueueCaptureSink, dispatchQueueBatch, shouldCaptureQueue } from "@lunora/queue";','import { LUNORA_QUEUE_REGISTRY } from "./queues.js";']:[],...e.wantsArchitecture?['import { architecture } from "./architecture.js";']:[],...h?['import { openApiSpec } from "./openapi.js";']:[],...u?['import { openRpcSpec } from "./openrpc.js";']:[],'import { createShardDO } from "./shard.js";',...e.hasVectors===!0?['import { LUNORA_VECTOR_INDEXES } from "./vectors.js";']:[]]},j=e=>[...e.hasStorage?["/** `.storage(...)` declaration — one bucket (required) plus optional extra named buckets and signed-URL config. Backs `ctx.storage` AND the studio file browser. */\ninterface StorageDeclaration<Env> {\n    /** The default R2 bucket binding (the bare `ctx.storage`). */\n    bucket: Selector<Env, R2BucketLike>;\n    /** Extra named buckets, reached via `ctx.storage.bucket(\"name\")` and the studio's bucket picker. */\n    buckets?: Record<string, Selector<Env, R2BucketLike>>;\n    /** Public base URL signed/public object URLs resolve against. Omit it and `ctx.storage` in a mutation, action or HTTP handler (and the studio's copy-URL) signs against the origin the request reached the worker on — no per-environment value to ship. Queries get no such fallback (a live query re-runs with no request behind it), so a query that signs URLs needs this set. */\n    publicBaseUrl?: Selector<Env, string>;\n    /** R2 S3-API credentials (`{ accountId, accessKeyId, secretAccessKey, bucket, jurisdiction? }`) enabling `ctx.storage.getPresignedUrl` — native S3 presigned URLs that hit R2 directly, bypassing the worker. Omit to use only the worker-signed `getSignedUrl` path. */\n    s3?: Selector<Env, R2S3Credentials>;\n    /** HMAC secret for signed URLs. */\n    signingSecret?: Selector<Env, string>;\n}"]:[],...e.hasScheduler?["/** `.scheduler(...)` declaration — the `SchedulerDO` namespace. Backs `ctx.scheduler` AND the studio's scheduled-jobs view. The origin its callbacks dispatch back to is not declared here: the DO reads `env.LUNORA_ORIGIN_URL` at fire time, because a caller-supplied dispatch target would be an SSRF vector. */\ninterface SchedulerDeclaration<Env> {\n    /** The `SchedulerDO` namespace binding (typically `env.SCHEDULER`). */\n    namespace: Selector<Env, DurableObjectNamespaceLike & ShardNamespaceLike>;\n}"]:[],...e.hasGlobal?["/** `.global(...)` declaration — the D1 binding backing `.global()` tables. Backs cross-tenant `ctx.db` reads/writes AND the studio's global data browser. */\ninterface GlobalDeclaration<Env> {\n    /** The D1 binding (typically `env.DB`). */\n    d1: Selector<Env, D1DatabaseLike>;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}"]:[],...e.hasHyperdriveGlobal?['/** `.hyperdriveGlobal(...)` declaration — backs `.global({ backend: "hyperdrive" })` tables on a Postgres/MySQL database via Hyperdrive. Stays reactive: the writer is injected as `globalDb` and the broadcast hook drives live queries. */\ninterface HyperdriveGlobalDeclaration<Env> {\n    /** The Hyperdrive engine — selects the Postgres or MySQL dialect. */\n    engine: HyperdriveEngine;\n    /** Build the `SqlExec` from `env` — e.g. `buildPgExec(fromPostgresJs(postgres(env.HYPERDRIVE.connectionString)))`. Cache the driver on the DO instance; rebuild lazily after hibernation. */\n    exec: (env: Env) => SqlExec;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}']:[],...e.hasAuth?['/** `.auth(...)` declaration — better-auth options plus the storage the adapter reads. Give it `d1` (the default) or `namespace` (a Durable Object that hosts the auth tables), never both. The builder owns the lazy build + `ensureMigrated` dance and wires `authHandler` / `resolveIdentity` / `authAdmin`. */\ninterface AuthDeclaration<Env> {\n    /** The D1 binding the auth SQL adapter is wired over (via `lunoraD1Adapter`). Omit only when using `namespace`. */\n    d1?: Selector<Env, unknown>;\n    /** Shared secret the worker presents on the object\'s internal session route. REQUIRED with `namespace`: the binding is reachable from any worker bound to it, so the secret — not the binding — is the authorization boundary. Without it identity resolution fails closed. */\n    internalSecret?: Selector<Env, string>;\n    /** Name of the Durable Object instance holding the auth tables. Defaults to `"auth"`. Set it to run separate auth objects (per deployment, per tenant) off one namespace. */\n    objectName?: Selector<Env, string>;\n    /** The auth Durable Object namespace — the DO-backed mode. Needed for `@better-auth/scim`, which requires native transactions that D1 has none of. The object owns the auth tables, so `/api/auth/*` and identity resolution both go through it. Typed as `AuthNamespaceLike` because `createDoAuthWiring` resolves through `idFromName` + `get` and has no `getByName` fallback — both members are load-bearing here, and `ShardNamespaceLike` leaves both optional. */\n    namespace?: Selector<Env, AuthNamespaceLike>;\n    /** Build the better-auth options from `env` (secret, plugins, email/password, …). */\n    options: (env: Env) => LunoraAuthOptions;\n}']:[]],G=e=>[...e.hasAccess?["    private accessSelector?: Selector<Env, CreateAccessResolverOptions | undefined>;"]:[],"    private adminToken?: Selector<Env, string>;",...e.hasAuth?["    private authDeclaration?: AuthDeclaration<Env>;"]:[],"    private cdcEnabled = false;","    private reactiveCacheConfig: boolean | { maxBytes?: number; maxEntries?: number } = false;",'    private maxRelationKeysLimit?: ShardConfig["maxRelationKeys"];','    private observabilitySink?: ShardConfig["observability"];','    private relationExistsPushDownMode?: ShardConfig["relationExistsPushDown"];',"    private readonly extendFns: ((env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>)[] = [];",...e.hasGlobal?["    private globalDeclaration?: GlobalDeclaration<Env>;"]:[],...e.hasHyperdriveGlobal?["    private hyperdriveGlobalDeclaration?: HyperdriveGlobalDeclaration<Env>;"]:[],"    private httpRouterApp?: HttpRouterLike;","    private readonly routeMap: Record<string, Route> = {};",...e.hasScheduler?["    private schedulerDeclaration?: SchedulerDeclaration<Env>;"]:[],...m(e)?["    private readonly shardExtras: Partial<ShardConfig> = {};"]:[],...d(e)?["    private shardRegistrySelector?: Selector<Env, ShardNamespaceLike>;"]:[],"    private shardSelector?: Selector<Env, ShardNamespaceLike>;",...e.hasSourcedTables?['    private sourceClientFactory?: NonNullable<ShardConfig["sourceClient"]>;']:[],...e.hasStorage?["    private storageDeclaration?: StorageDeclaration<Env>;"]:[]],B=e=>g(e).map(({appMethod:{configKey:r,doc:t,method:a}})=>`    /** ${t} */
+import{APP_METHOD_CAPABILITIES as k}from"./CAPABILITY_PROBES-LYIlPWT3.mjs";import{i as S}from"./ir-DBSvhNa-.mjs";import{G as E}from"./shared-DjUziztz.mjs";const D=e=>k.filter(({key:r})=>e.capabilities.has(r)),R={configKey:"vectors",doc:"Wire the Vectorize index map backing `ctx.vectors`.",method:"vectors"},g=e=>[...D(e).map(({appMethod:r})=>r),...e.hasVectors===!0?[R]:[]],m=e=>g(e).length>0,x=e=>e?['import * as lunoraIdentityContract from "../identity.js";']:[],A=(e,r)=>e?['import type { CreateAccessResolverOptions } from "@lunora/cloudflare-access";',`import { createAccessResolver${r?", composeResolvers":""} } from "@lunora/cloudflare-access";`]:[],C=e=>e?['import { createKvIntrospectorFromEnv } from "@lunora/bindings/kv";']:[],O=e=>e?['import { createVectorAdminIntrospector } from "@lunora/bindings/vectors";']:[],T=e=>e?['import type { D1CtxDbOptions, D1DatabaseLike, D1Exec } from "@lunora/d1";','import { applyCdcChanges, createD1CtxDb, emitD1QueryCost, exportGlobalRows, facetGlobalColumn, importGlobalRows, listGlobalTables, readD1CdcChanges, readGlobalTablePage, retryingExec } from "@lunora/d1";']:[],N=e=>e?['import notifyConfig from "../notify.js";']:[],v=e=>(e.emailAgents?.length??0)>0,q=e=>v(e)?['import { dispatchAgentEmail } from "@lunora/agent/inbound";']:[],I=e=>v(e)?['import * as lunoraAgentDefinitions from "../agents.js";']:[],d=e=>e.tables.some(r=>S(r)),L=e=>{const{hasFramework:r,hasGlobal:t,hasHyperdriveGlobal:a,hasQueue:n,useUmbrella:o}=e,i=o?"lunorash/runtime":"@lunora/runtime",l=["ExecutionContextLike","HttpRouterLike","LunoraWorker","Route","ScheduledControllerLike","ShardNamespaceLike","WorkerOptions",...n?["TriggerTrace"]:[],...t?["GlobalIntrospector"]:[],...e.tables.length>0?["ShardingInfo"]:[],...r?["FrameworkHostHandler"]:[]],c=[...t||a?["createCrossShardRelationCapabilities"]:[],...d(e)?["createDynamicShardRegistry","createQueryCoordinator"]:[],"createWorker",...e.jurisdiction?["declareAppJurisdiction"]:[],"resolveLogArchiveFromEnv",...r?["withFrameworkWorker"]:[]].join(", ");return[`import type { ${[...l].toSorted((s,h)=>s.localeCompare(h)).join(", ")} } from "${i}";`,`import { ${c} } from "${i}";`]},j=e=>{const{hasAccess:r,hasAuth:t,hasGlobal:a,hasHyperdriveGlobal:n,hasKvIntrospector:o,hasQueue:i,hasScheduler:l,hasStorage:c,hasWorkflow:s,wantsOpenApi:h,wantsOpenRpc:u}=e;return[...t?['import type { AuthNamespaceLike, LunoraAuth, LunoraAuthOptions } from "@lunora/auth";','import { authDiscoveryPathsFor, createAuth, createAuthAdmin, createAuthAuditReader, createDoAuthWiring, d1Executor, ensureMigrated, handleAuthDiscoveryRequest, handleAuthRequest, lunoraD1Adapter } from "@lunora/auth";']:[],...A(r,t),...T(a),...n?['import type { HyperdriveEngine } from "@lunora/hyperdrive/global";','import { createHyperdriveGlobalCtxDb } from "@lunora/hyperdrive/global";','import type { SqlCtxDbOptions, SqlExec } from "@lunora/sql-store";']:[],...C(o),...O(e.hasVectors===!0),...l?['import type { DurableObjectNamespaceLike } from "@lunora/scheduler";','import { createScheduler } from "@lunora/scheduler";']:[],...c?['import type { R2BucketLike, R2S3Credentials, Storage } from "@lunora/storage";','import { createBucketStorage, createStorage } from "@lunora/storage";']:[],...s?['import { createWorkflowsRestClient } from "@lunora/workflow";']:[],...q(e),...L(e),"",...x(e.identity),...I(e),...a||n?['import schema from "../schema.js";']:[],...N(e.hasNotify),'import { LUNORA_CRONS } from "./crons.js";','import { LUNORA_FUNCTIONS } from "./functions.js";',...i?['import { createQueueCaptureSink, dispatchQueueBatch, shouldCaptureQueue } from "@lunora/queue";','import { LUNORA_QUEUE_REGISTRY } from "./queues.js";']:[],...e.wantsArchitecture?['import { architecture } from "./architecture.js";']:[],...h?['import { openApiSpec } from "./openapi.js";']:[],...u?['import { openRpcSpec } from "./openrpc.js";']:[],'import { createShardDO } from "./shard.js";',...e.hasVectors===!0?['import { LUNORA_VECTOR_INDEXES } from "./vectors.js";']:[]]},G=e=>[...e.hasStorage?["/** `.storage(...)` declaration — one bucket (required) plus optional extra named buckets and signed-URL config. Backs `ctx.storage` AND the studio file browser. */\ninterface StorageDeclaration<Env> {\n    /** The default R2 bucket binding (the bare `ctx.storage`). */\n    bucket: Selector<Env, R2BucketLike>;\n    /** Extra named buckets, reached via `ctx.storage.bucket(\"name\")` and the studio's bucket picker. */\n    buckets?: Record<string, Selector<Env, R2BucketLike>>;\n    /** Public base URL signed/public object URLs resolve against. Omit it and `ctx.storage` in a mutation, action or HTTP handler (and the studio's copy-URL) signs against the origin the request reached the worker on — no per-environment value to ship. Queries get no such fallback (a live query re-runs with no request behind it), so a query that signs URLs needs this set. */\n    publicBaseUrl?: Selector<Env, string>;\n    /** R2 S3-API credentials (`{ accountId, accessKeyId, secretAccessKey, bucket, jurisdiction? }`) enabling `ctx.storage.getPresignedUrl` — native S3 presigned URLs that hit R2 directly, bypassing the worker. Omit to use only the worker-signed `getSignedUrl` path. */\n    s3?: Selector<Env, R2S3Credentials>;\n    /** HMAC secret for signed URLs. */\n    signingSecret?: Selector<Env, string>;\n}"]:[],...e.hasScheduler?["/** `.scheduler(...)` declaration — the `SchedulerDO` namespace. Backs `ctx.scheduler` AND the studio's scheduled-jobs view. The origin its callbacks dispatch back to is not declared here: the DO reads `env.LUNORA_ORIGIN_URL` at fire time, because a caller-supplied dispatch target would be an SSRF vector. */\ninterface SchedulerDeclaration<Env> {\n    /** The `SchedulerDO` namespace binding (typically `env.SCHEDULER`). */\n    namespace: Selector<Env, DurableObjectNamespaceLike & ShardNamespaceLike>;\n}"]:[],...e.hasGlobal?["/** `.global(...)` declaration — the D1 binding backing `.global()` tables. Backs cross-tenant `ctx.db` reads/writes AND the studio's global data browser. */\ninterface GlobalDeclaration<Env> {\n    /** The D1 binding (typically `env.DB`). */\n    d1: Selector<Env, D1DatabaseLike>;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}"]:[],...e.hasHyperdriveGlobal?['/** `.hyperdriveGlobal(...)` declaration — backs `.global({ backend: "hyperdrive" })` tables on a Postgres/MySQL database via Hyperdrive. Stays reactive: the writer is injected as `globalDb` and the broadcast hook drives live queries. */\ninterface HyperdriveGlobalDeclaration<Env> {\n    /** The Hyperdrive engine — selects the Postgres or MySQL dialect. */\n    engine: HyperdriveEngine;\n    /** Build the `SqlExec` from `env` — e.g. `buildPgExec(fromPostgresJs(postgres(env.HYPERDRIVE.connectionString)))`. Cache the driver on the DO instance; rebuild lazily after hibernation. */\n    exec: (env: Env) => SqlExec;\n    /** The worker origin used to fan reverse cross-backend relations across shards. Without it, such a relation throws a clear error. */\n    origin?: Selector<Env, string>;\n}']:[],...e.hasAuth?['/** `.auth(...)` declaration — better-auth options plus the storage the adapter reads. Give it `d1` (the default) or `namespace` (a Durable Object that hosts the auth tables), never both. The builder owns the lazy build + `ensureMigrated` dance and wires `authHandler` / `resolveIdentity` / `authAdmin`. */\ninterface AuthDeclaration<Env> {\n    /** The D1 binding the auth SQL adapter is wired over (via `lunoraD1Adapter`). Omit only when using `namespace`. */\n    d1?: Selector<Env, unknown>;\n    /** Shared secret the worker presents on the object\'s internal session route. REQUIRED with `namespace`: the binding is reachable from any worker bound to it, so the secret — not the binding — is the authorization boundary. Without it identity resolution fails closed. */\n    internalSecret?: Selector<Env, string>;\n    /** Name of the Durable Object instance holding the auth tables. Defaults to `"auth"`. Set it to run separate auth objects (per deployment, per tenant) off one namespace. */\n    objectName?: Selector<Env, string>;\n    /** The auth Durable Object namespace — the DO-backed mode. Needed for `@better-auth/scim`, which requires native transactions that D1 has none of. The object owns the auth tables, so `/api/auth/*` and identity resolution both go through it. Typed as `AuthNamespaceLike` because `createDoAuthWiring` resolves through `idFromName` + `get` and has no `getByName` fallback — both members are load-bearing here, and `ShardNamespaceLike` leaves both optional. */\n    namespace?: Selector<Env, AuthNamespaceLike>;\n    /** Build the better-auth options from `env` (secret, plugins, email/password, …). */\n    options: (env: Env) => LunoraAuthOptions;\n}']:[]],B=e=>[...e.hasAccess?["    private accessSelector?: Selector<Env, CreateAccessResolverOptions | undefined>;"]:[],"    private adminToken?: Selector<Env, string>;",...e.hasAuth?["    private authDeclaration?: AuthDeclaration<Env>;"]:[],"    private cdcEnabled = false;","    private reactiveCacheConfig: boolean | { maxBytes?: number; maxEntries?: number } = false;",'    private maxRelationKeysLimit?: ShardConfig["maxRelationKeys"];','    private observabilitySink?: ShardConfig["observability"];','    private relationExistsPushDownMode?: ShardConfig["relationExistsPushDown"];',"    private readonly extendFns: ((env: Env, derived: Readonly<WorkerOptions>) => Partial<WorkerOptions>)[] = [];",...e.hasGlobal?["    private globalDeclaration?: GlobalDeclaration<Env>;"]:[],...e.hasHyperdriveGlobal?["    private hyperdriveGlobalDeclaration?: HyperdriveGlobalDeclaration<Env>;"]:[],"    private httpRouterApp?: HttpRouterLike;","    private readonly routeMap: Record<string, Route> = {};",...e.hasScheduler?["    private schedulerDeclaration?: SchedulerDeclaration<Env>;"]:[],...m(e)?["    private readonly shardExtras: Partial<ShardConfig> = {};"]:[],...d(e)?["    private shardRegistrySelector?: Selector<Env, ShardNamespaceLike>;"]:[],"    private shardSelector?: Selector<Env, ShardNamespaceLike>;",...e.hasSourcedTables?['    private sourceClientFactory?: NonNullable<ShardConfig["sourceClient"]>;']:[],...e.hasStorage?["    private storageDeclaration?: StorageDeclaration<Env>;"]:[]],P=e=>g(e).map(({configKey:r,doc:t,method:a})=>`    /** ${t} */
     public ${a}(factory: (env: Env) => ReturnType<NonNullable<ShardConfig["${r}"]>>): this {
         this.shardExtras.${r} = factory as NonNullable<ShardConfig["${r}"]>;
 
         return this;
-    }`),P=e=>[...e.hasAccess?["    /** Wire Cloudflare Access (Zero Trust) — feeds the verified Access identity into `ctx.auth` / RLS via `resolveIdentity`. Call it with no argument when the Access policy is attached to the Worker (the identity arrives on the execution context; nothing to configure); pass `teamDomain` + `aud` for a hostname-scoped Access application, whose `Cf-Access-Jwt-Assertion` JWT is verified against your team JWKS. When `.auth(...)` is also configured, Access is composed ahead of it (Access wins when it authenticated the caller; everyone else falls through to the app session). */\n    public access(selector?: Selector<Env, CreateAccessResolverOptions>): this {\n        this.accessSelector = selector ?? (() => undefined);\n\n        return this;\n    }"]:[],`    /** Bearer token gating the \`/_lunora/admin/*\` endpoints the studio calls. */
+    }`),W=e=>[...e.hasAccess?["    /** Wire Cloudflare Access (Zero Trust) — feeds the verified Access identity into `ctx.auth` / RLS via `resolveIdentity`. Call it with no argument when the Access policy is attached to the Worker (the identity arrives on the execution context; nothing to configure); pass `teamDomain` + `aud` for a hostname-scoped Access application, whose `Cf-Access-Jwt-Assertion` JWT is verified against your team JWKS. When `.auth(...)` is also configured, Access is composed ahead of it (Access wins when it authenticated the caller; everyone else falls through to the app session). */\n    public access(selector?: Selector<Env, CreateAccessResolverOptions>): this {\n        this.accessSelector = selector ?? (() => undefined);\n\n        return this;\n    }"]:[],`    /** Bearer token gating the \`/_lunora/admin/*\` endpoints the studio calls. */
     public admin(selector: Selector<Env, string>): this {
         this.adminToken = selector;
 
@@ -62,7 +62,7 @@ import{A as k}from"./capabilities-CqnIsyA9.mjs";import{i as S}from"./ir-DBSvhNa-
         this.storageDeclaration = declaration;
 
         return this;
-    }`]:[],...B(e)],W=e=>{const r=a=>e.hasScheduler?`
+    }`]:[],...P(e)],_=e=>{const r=a=>e.hasScheduler?`
                               ...(this.schedulerDeclaration ? { scheduler: this.resolveScheduler(env) as unknown as ${a}["scheduler"] } : {}),`:"",t=["            cdc: this.cdcEnabled,","            reactiveCache: this.reactiveCacheConfig,","            ...(this.maxRelationKeysLimit === undefined ? {} : { maxRelationKeys: this.maxRelationKeysLimit }),","            ...(this.observabilitySink === undefined ? {} : { observability: this.observabilitySink }),","            ...(this.relationExistsPushDownMode === undefined ? {} : { relationExistsPushDown: this.relationExistsPushDownMode }),",...e.hasGlobal?[`            ...(this.globalDeclaration
                 ? {
                       d1: (rawEnv: Record<string, unknown>, request?: { bookmark?: string; cdc?: boolean; cdcRetentionMs?: number; identity?: Record<string, unknown>; onBookmark?: (bookmark: string | undefined) => void; userId?: string | null }) => {
@@ -137,10 +137,10 @@ import{A as k}from"./capabilities-CqnIsyA9.mjs";import{i as S}from"./ir-DBSvhNa-
                 : {}),`]:[],...d(e)?["            ...(this.shardRegistrySelector ? { shardRegistry: (rawEnv: Record<string, unknown>) => this.shardRegistrySelector?.(rawEnv as Env) } : {}),"]:[],...e.hasSourcedTables?["            ...(this.sourceClientFactory === undefined ? {} : { sourceClient: this.sourceClientFactory }),"]:[],...e.hasStorage?["            ...(this.storageDeclaration ? { storage: (rawEnv: Record<string, unknown>, origin?: string) => this.resolveStorage(rawEnv as Env, origin) } : {}),"]:[],...m(e)?["            ...this.shardExtras,"]:[]];return t.length>0?`
 ${t.join(`
 `)}
-        `:""},_=e=>e.jurisdiction&&e.jurisdictionPinsAuth===!0?`
+        `:""},$=e=>e.jurisdiction&&e.jurisdictionPinsAuth===!0?`
                 // The schema's jurisdiction pins the auth object like every other DO.
-                jurisdiction: ${JSON.stringify(e.jurisdiction)},`:"",$=e=>typeof e=="string"?`{ mode: { kind: ${JSON.stringify(e)} } }`:`{ mode: { field: ${JSON.stringify(e.field)}, kind: "shardBy" } }`,H=e=>[...e.tables.length>0?[`        const tableSharding = new Map<string, ShardingInfo>([
-${e.tables.map(r=>`            [${JSON.stringify(r.name)}, ${$(r.shardMode)}],`).join(`
+                jurisdiction: ${JSON.stringify(e.jurisdiction)},`:"",H=e=>typeof e=="string"?`{ mode: { kind: ${JSON.stringify(e)} } }`:`{ mode: { field: ${JSON.stringify(e.field)}, kind: "shardBy" } }`,U=e=>[...e.tables.length>0?[`        const tableSharding = new Map<string, ShardingInfo>([
+${e.tables.map(r=>`            [${JSON.stringify(r.name)}, ${H(r.shardMode)}],`).join(`
 `)}
         ]);
 
@@ -149,7 +149,7 @@ ${e.tables.map(r=>`            [${JSON.stringify(r.name)}, ${$(r.shardMode)}],`)
 
         if (shardRegistry) {
             options.queryCoordinator = createQueryCoordinator({ registry: createDynamicShardRegistry({ ${e.jurisdiction?`jurisdiction: ${JSON.stringify(e.jurisdiction)}, `:""}namespace: shardRegistry }) });
-        }`]:[]],U=e=>[...H(e),...e.hasScheduler?[`        if (this.schedulerDeclaration) {
+        }`]:[]],F=e=>[...U(e),...e.hasScheduler?[`        if (this.schedulerDeclaration) {
             options.schedulerDO = this.schedulerDeclaration.namespace(env);
         }`]:[],...e.hasWorkflow?[`        options.workflowsClient = (workflowEnv) => {
             const source = workflowEnv as Record<string, unknown>;
@@ -217,7 +217,7 @@ ${e.tables.map(r=>`            [${JSON.stringify(r.name)}, ${$(r.shardMode)}],`)
                 // Memoised on the declaration: a framework-hosted worker rebuilds these
                 // options per request, and \`options(env)\` rebuilds every plugin.
                 discoveryPaths: authDiscoveryPathsFor(authDeclaration, env),
-                internalSecret: authDeclaration.internalSecret?.(env),${_(e)}
+                internalSecret: authDeclaration.internalSecret?.(env),${$(e)}
                 namespace: authNamespace(env),
                 objectName: authDeclaration.objectName?.(env),
             });
@@ -303,14 +303,14 @@ ${e.tables.map(r=>`            [${JSON.stringify(r.name)}, ${$(r.shardMode)}],`)
         }`]:[],...e.voiceAgents&&e.voiceAgents.length>0?[`        options.voiceAgents = {
 ${e.voiceAgents.map(r=>`            ${JSON.stringify(r.exportName)}: (env as Record<string, unknown>)[${JSON.stringify(r.bindingName)}] as ShardNamespaceLike,`).join(`
 `)}
-        };`]:[]],F=e=>["            cronJobs: LUNORA_CRONS,","            functions: LUNORA_FUNCTIONS,",...e.identity?[`            identity: lunoraIdentityContract.${e.identity.exportName},`]:[],...e.jurisdiction?[`            jurisdiction: ${JSON.stringify(e.jurisdiction)},`]:[],...e.wantsArchitecture?["            architecture,"]:[],...e.wantsOpenApi?["            openApiSpec,"]:[],...e.wantsOpenRpc?["            openRpcSpec,"]:[],...e.hasQueue?["            queue: (batch: unknown, queueEnv: unknown, _context: ExecutionContextLike, trigger: TriggerTrace): Promise<void> =>","                dispatchQueueBatch(batch as Parameters<typeof dispatchQueueBatch>[0], LUNORA_QUEUE_REGISTRY, {","                    capture: shouldCaptureQueue(queueEnv as Record<string, unknown>)",`                        ? createQueueCaptureSink(queueEnv as Record<string, unknown>${e.jurisdiction?`, { jurisdiction: ${JSON.stringify(e.jurisdiction)} }`:""})`,"                        : undefined,","                    env: queueEnv as Record<string, unknown>,","                    traceparent: trigger.traceparent,","                }),"]:[],"            ...(this.httpRouterApp ? { httpRouter: this.httpRouterApp } : {}),","            routes: this.routeMap,","            shardDO: this.shardSelector?.(env) ?? (undefined as unknown as ShardNamespaceLike),"],M=e=>e.hasScheduler?`
+        };`]:[]],M=e=>["            cronJobs: LUNORA_CRONS,","            functions: LUNORA_FUNCTIONS,",...e.identity?[`            identity: lunoraIdentityContract.${e.identity.exportName},`]:[],...e.jurisdiction?[`            jurisdiction: ${JSON.stringify(e.jurisdiction)},`]:[],...e.wantsArchitecture?["            architecture,"]:[],...e.wantsOpenApi?["            openApiSpec,"]:[],...e.wantsOpenRpc?["            openRpcSpec,"]:[],...e.hasQueue?["            queue: (batch: unknown, queueEnv: unknown, _context: ExecutionContextLike, trigger: TriggerTrace): Promise<void> =>","                dispatchQueueBatch(batch as Parameters<typeof dispatchQueueBatch>[0], LUNORA_QUEUE_REGISTRY, {","                    capture: shouldCaptureQueue(queueEnv as Record<string, unknown>)",`                        ? createQueueCaptureSink(queueEnv as Record<string, unknown>${e.jurisdiction?`, { jurisdiction: ${JSON.stringify(e.jurisdiction)} }`:""})`,"                        : undefined,","                    env: queueEnv as Record<string, unknown>,","                    traceparent: trigger.traceparent,","                }),"]:[],"            ...(this.httpRouterApp ? { httpRouter: this.httpRouterApp } : {}),","            routes: this.routeMap,","            shardDO: this.shardSelector?.(env) ?? (undefined as unknown as ShardNamespaceLike),"],Q=e=>e.hasScheduler?`
     /** Resolve the \`SchedulerDO\`-backed scheduler for this env; \`undefined\` until the namespace is wired. */
     private resolveScheduler(env: Env): ReturnType<typeof createScheduler> | undefined {
         const namespace = this.schedulerDeclaration?.namespace(env);
 
         return namespace ? createScheduler({${e.jurisdiction?` jurisdiction: ${JSON.stringify(e.jurisdiction)},`:""} namespace }) : undefined;
     }
-`:"",Q=e=>e?`
+`:"",J=e=>e?`
     /**
      * One bucket's \`Storage\`, signing under the name it is registered as.
      *
@@ -415,7 +415,7 @@ ${e.voiceAgents.map(r=>`            ${JSON.stringify(r.exportName)}: (env as Rec
             storageUpload: (key: string, body: ArrayBuffer, opts?: { bucket?: string; contentType?: string; sha256?: string }) => pick(opts?.bucket).upload(key, body, opts),
         };
     }
-`:"",J=e=>e?`
+`:"",K=e=>e?`
 /**
  * Adapt the raw D1 binding to \`@lunora/d1\`'s \`D1Exec\` (reads via \`all\`, writes via \`run\`, and — when the binding exposes it — several writes in one round trip via \`batch\`).
  *
@@ -637,7 +637,7 @@ const buildGlobalCdcApplier =
 
         return request.changes.length;
     };
-`:"",K=e=>[...e.hasAuth?["AuthDeclaration"]:[],"ComposedApp",...e.hasGlobal?["GlobalDeclaration"]:[],"LunoraConfig",...e.hasScheduler?["SchedulerDeclaration"]:[],"Selector",...e.hasStorage?["StorageDeclaration"]:[]].toSorted((r,t)=>r.localeCompare(t)).join(", "),X=e=>{const r=(e.hasVectors??!0)&&(e.vectorIndexCount??0)>0,t={...e,capabilities:D(e.capabilities,r),hasVectors:r},{hasAuth:a}=t,n=j(t),o=U(t),i=a?`        let auth: LunoraAuth | null = null;
+`:"",V=e=>[...e.hasAuth?["AuthDeclaration"]:[],"ComposedApp",...e.hasGlobal?["GlobalDeclaration"]:[],"LunoraConfig",...e.hasScheduler?["SchedulerDeclaration"]:[],"Selector",...e.hasStorage?["StorageDeclaration"]:[]].toSorted((r,t)=>r.localeCompare(t)).join(", "),Z=e=>{const r=(e.hasVectors??!0)&&(e.vectorIndexCount??0)>0,t={...e,hasVectors:r},{hasAuth:a}=t,n=G(t),o=F(t),i=a?`        let auth: LunoraAuth | null = null;
         let authInit: Promise<void> | null = null;
 `:"",l=a?`
         const initAuth = async (env: Env): Promise<void> => {
@@ -698,7 +698,7 @@ ${p.map(b=>`            { agent: lunoraAgentDefinitions.${b.exportName}, classNa
 `:"",w=`    /** Materialise the standalone Cloudflare worker + \`ShardDO\` class. */
     public build(): ComposedApp {
         return this.assemble();
-    }${t.hasFramework?"\n\n    /** Compose Lunora's realtime plane INTO a meta-framework's Cloudflare handler (SvelteKit/Astro/Nuxt). The framework `host` serves everything except the reserved `/_lunora/*` endpoints; pass the adapter-emitted worker (e.g. SvelteKit's `_worker.js`, Astro's `handle`). */\n    public buildFrameworkWorker(host: FrameworkHostHandler): ComposedApp {\n        return this.assemble(host);\n    }":""}`;return`${E}${L(t).join(`
+    }${t.hasFramework?"\n\n    /** Compose Lunora's realtime plane INTO a meta-framework's Cloudflare handler (SvelteKit/Astro/Nuxt). The framework `host` serves everything except the reserved `/_lunora/*` endpoints; pass the adapter-emitted worker (e.g. SvelteKit's `_worker.js`, Astro's `handle`). */\n    public buildFrameworkWorker(host: FrameworkHostHandler): ComposedApp {\n        return this.assemble(host);\n    }":""}`;return`${E}${j(t).join(`
 `)}
 
 /** Read a value off the per-request \`env\`. Returns \`undefined\` to leave the capability unconfigured (its \`ctx.*\`/admin surface stays a clear-error stub). */
@@ -731,12 +731,12 @@ interface ComposedApp extends LunoraWorker {
  * first request so per-isolate singletons are built once.
  */
 class AppBuilder<Env extends object> {
-${G(t).join(`
+${B(t).join(`
 `)}
 
     private emailHandler?: (env: Env) => (message: unknown, env: unknown, context: ExecutionContextLike) => Promise<void>;
 
-${P(t).join(`
+${W(t).join(`
 
 `)}
 
@@ -744,7 +744,7 @@ ${w}
 
     /** Build the shard DO + compose the worker (standalone or framework-hosted), wrapping the lazy per-isolate singletons + auth init. */
     private assemble(${y}): ComposedApp {
-        const ShardDO = createShardDO({${W(t)}});
+        const ShardDO = createShardDO({${_(t)}});
 
         // Per-isolate singletons: the worker (and auth instance) are expensive to
         // build, so the first request constructs them and every later request on
@@ -798,11 +798,11 @@ ${t.hasFramework?`
 `:""}
         return composed;
     }
-${M(t)}${Q(t.hasStorage)}
+${Q(t)}${J(t.hasStorage)}
     /** Fan the recorded declarations into the worker-side \`createWorker\` options. */
     private buildWorkerOptions(env: Env, ${h}): WorkerOptions {
         const options: WorkerOptions = {
-${F(t).join(`
+${M(t).join(`
 `)}
         };
 
@@ -821,7 +821,7 @@ ${o.join(`
         return options;
     }
 }
-${J(t.hasGlobal)}
+${K(t.hasGlobal)}
 /**
  * Shape of the project's root \`lunora.config.*\`.
  *
@@ -856,5 +856,5 @@ interface LunoraConfig<Env extends object = object> {
 const defineApp = <Env extends object>(): AppBuilder<Env> => new AppBuilder<Env>();
 
 export { AppBuilder, defineApp };
-export type { ${K(t)} };
-`};export{X as emitApp};
+export type { ${V(t)} };
+`};export{Z as emitApp};