@lunora/codegen 1.0.0-alpha.255 → 1.0.0-alpha.257

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { AdvisorExportSink, AdvisorGeoIndexUsage, AdvisorNotifyCall, AdvisorNotifyConfig, Finding, LintContext, AdvisorProcedureProtection } from '@lunora/advisor';
+import { AdvisorCallSiteScope, AdvisorExportSink, AdvisorGeoIndexUsage, AdvisorNotifyCall, AdvisorNotifyConfig, Finding, LintContext, AdvisorProcedureProtection } from '@lunora/advisor';
 export type { Finding } from '@lunora/advisor';
 import { Project, SourceFile, Node } from 'ts-morph';
 import { LunoraError } from '@lunora/errors';
@@ -819,6 +819,14 @@ interface WorkflowIR {
   };
   /** The `lunora/workflows.ts` export name, e.g. `orderPipeline`. */
   exportName: string;
+  /**
+   * The file declaring the `handler:` when it is a function passed by reference
+   * and declared in another file — the file {@link WorkflowIR.steps}' lines are
+   * in. Lunora-relative inside `lunora/`, project-relative outside it.
+   */
+  handlerFile?: string;
+  /** See {@link HandlerSiteIR}. */
+  handlerSite?: HandlerSiteIR;
   /** Static `limits` literal → `exports.<Class>.limits`. */
   limits?: {
     steps?: number;
@@ -841,7 +849,8 @@ interface WorkflowIR {
    * call. Feeds the duplicate-step-name lint, which flags a name used twice
    * (Cloudflare memoizes by name, so the second call silently returns the
    * first's cached result). Calls with a non-literal name are omitted (not
-   * statically comparable).
+   * statically comparable). A handler passed by reference is followed to its
+   * declaration; the lines are then in {@link WorkflowIR.handlerFile}.
    */
   steps: ReadonlyArray<WorkflowStepIR>;
 }
@@ -924,6 +933,8 @@ interface QueueIR {
   bindingName: string;
   /** The `lunora/queues.ts` export name, e.g. `emailQueue`. */
   exportName: string;
+  /** See {@link HandlerSiteIR}. */
+  handlerSite?: HandlerSiteIR;
   /** How the queue is consumed: `"push"` (a worker `queue()` handler) or `"pull"` (external HTTP). */
   mode: "pull" | "push";
   /**
@@ -981,6 +992,43 @@ interface ModuleIR {
   /** Tables the module declares it owns (`defineModule({ tables })`); empty when it declares none. */
   tables: ReadonlyArray<string>;
 }
+/**
+ * Who a discovered call site runs on behalf of — the one attribution every
+ * per-call-site IR carries (see `discover/attribution`).
+ *
+ * `export`: lexically inside an exported top-level declaration. `name` is the
+ * EXPORTED name — `export const send = …` → `send`, `export default …` →
+ * `default`, `const run = …; export { run as start }` → `start`.
+ *
+ * `helper`: inside a top-level, non-exported `function` / `const` of the same
+ * file. `callers` are the exports that reach it through same-file value
+ * references (a call, or the helper passed on as a value), transitively and
+ * sorted; a type-only reference (`typeof helper`) does not count. Empty for an
+ * orphan helper no export reaches. `untracked` is set when code attribution
+ * cannot follow — module scope, a class body, a destructured declaration — also
+ * reaches the helper, so `callers` is incomplete.
+ *
+ * `module`: outside every top-level `function` / `const` — module scope, or a
+ * class body.
+ *
+ * A site is recorded once; consumers fan out over its callers. The advisor's
+ * `AdvisorCallSiteScope` is the same type, so feeder rows pass straight through.
+ */
+type CallSiteScope = AdvisorCallSiteScope;
+/**
+ * Where a queue or workflow `handler:` passed by reference is declared, when it is
+ * exported from a lunora source file — `defineWorkflow({ handler: onboard })` with
+ * `onboard` exported from `lunora/onboarding/flow.ts` gives
+ * `{ exportName: "onboard", file: "onboarding/flow" }`. The architecture graph
+ * attributes that export's own call sites to the queue or workflow node, so its
+ * calls are not reported as "not a registered function". `exportName` is the
+ * exported name (`export { run as start }` → `start`).
+ */
+interface HandlerSiteIR {
+  exportName: string;
+  /** Source file relative to `<projectRoot>/lunora/`, without extension. */
+  file: string;
+}
 /**
  * A sibling Worker the app calls through a Cloudflare service binding, declared in
  * `lunora.config.*` `services` (plan 457). Becomes a wrangler `services[]` entry,
@@ -1054,12 +1102,12 @@ interface FlagsIR {
  * unused-workflow heuristic rather than producing a false positive).
  */
 interface WorkflowCallIR {
-  /** Export binding name of the function performing the call, e.g. `create`. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension (the api namespace). */
   file: string;
   /** 1-based line of the `get(...)` call. */
   line: number;
+  /** Who the call runs on behalf of. */
+  scope: CallSiteScope;
   /** The referenced workflow export name, or `""` when the argument is not a string literal. */
   workflow: string;
 }
@@ -1071,8 +1119,6 @@ interface WorkflowCallIR {
  * dynamic table — not lintable).
  */
 interface QueryReadIR {
-  /** Exported procedure the read sits in, or `""` at module scope. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /**
@@ -1088,6 +1134,8 @@ interface QueryReadIR {
   hasIndex: boolean;
   /** 1-based line of the `query(...)` call. */
   line: number;
+  /** Who the read runs on behalf of. */
+  scope: CallSiteScope;
   /** Queried table name, or `""` when the argument is not a string literal. */
   table: string;
   /**
@@ -1111,8 +1159,6 @@ interface QueryReadIR {
  * `AdvisorInsertWrite`.
  */
 interface AuthApiCallIR {
-  /** Export binding name of the function performing the call, e.g. "createOrg". */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** True when the call's argument object includes a `headers` property. */
@@ -1121,6 +1167,8 @@ interface AuthApiCallIR {
   line: number;
   /** The better-auth method invoked (e.g. `banUser`); empty when not statically known. */
   method: string;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * A table write other than a plain `ctx.db.insert(...)` (see {@link InsertWriteIR}):
@@ -1129,15 +1177,18 @@ interface AuthApiCallIR {
  * edges and the `cross_module_table_write` lint.
  */
 interface TableWriteIR {
-  /** Export binding name of the function performing the write. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the call. */
   line: number;
   /** The writer method called, e.g. `patch`, `deleteMany`, `upsert`. */
   method: string;
-  /** Target table; `""` when it can't be read (an untyped id, a non-literal name). */
+  /** Who the write runs on behalf of. */
+  scope: CallSiteScope;
+  /**
+   * Target table; `""` when it can't be read (an untyped id, a non-literal
+   * name). A union id (`Id<"a"> | Id<"b">`) gives one record per table.
+   */
   table: string;
 }
 /**
@@ -1148,12 +1199,12 @@ interface TableWriteIR {
  * {@link InsertWriteIR.table} is `""` when the argument is not a string literal.
  */
 interface InsertWriteIR {
-  /** Export binding name of the function performing the insert, e.g. "send". */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension (the api namespace). */
   file: string;
   /** 1-based line of the `insert(...)` call. */
   line: number;
+  /** Who the insert runs on behalf of. */
+  scope: CallSiteScope;
   /** Target table name, or `""` when the argument is not a string literal. */
   table: string;
 }
@@ -1552,12 +1603,12 @@ interface SecretLiteralIR {
  * identical to `AdvisorSqlInterpolation`.
  */
 interface SqlInterpolationIR {
-  /** Export binding name of the procedure performing the `ctx.sql` call. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the interpolation, or `0` when unknown. */
   line: number;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One `ctx.fetch(url, …)` call inside an action whose URL argument is derived
@@ -1569,12 +1620,12 @@ interface SqlInterpolationIR {
  * identical to `AdvisorArgumentDerivedFetch`.
  */
 interface ArgumentDerivedFetchIR {
-  /** Export binding name of the action performing the `ctx.fetch` call. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the `ctx.fetch` call, or `0` when unknown. */
   line: number;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One `ctx.kv.<method>(key, …)` call whose namespace key is derived from the
@@ -1587,14 +1638,14 @@ interface ArgumentDerivedFetchIR {
  * prefix, not a per-entry key). Structurally identical to `AdvisorKvKeyAccess`.
  */
 interface KvKeyAccessIR {
-  /** Export binding name of the procedure performing the `ctx.kv` access. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the `ctx.kv` call, or `0` when unknown. */
   line: number;
   /** The `ctx.kv` method invoked: `get` / `getRaw` / `getWithMetadata` / `put` / `delete`. */
   method: string;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
   /**
    * Visibility of the enclosing procedure. `internal` procedures have no
    * untrusted caller by construction — see `owner_field_from_args_not_auth`'s
@@ -1636,8 +1687,6 @@ interface UnrestrictedWhereBranchIR {
   owner: string;
 }
 interface OwnerFieldWriteIR {
-  /** Export binding name of the procedure performing the write. */
-  exportName: string;
   /** The identity column being written from `args` (e.g. `userId`). */
   field: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
@@ -1663,6 +1712,8 @@ interface OwnerFieldWriteIR {
    * is a real IDOR and stays reportable.
    */
   ownerScoped?: true;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
   /**
    * Visibility of the enclosing procedure. `internal` procedures are not
    * reachable by a caller, so the lint's premise ("any caller can write rows
@@ -1683,14 +1734,14 @@ interface OwnerFieldWriteIR {
  * Structurally identical to `AdvisorStorageKeyAccess`.
  */
 interface StorageKeyAccessIR {
-  /** Export binding name of the procedure performing the storage call. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the storage call, or `0` when unknown. */
   line: number;
   /** The bucket method invoked with the arg-derived key, e.g. `get` / `put` / `delete` / `download`. */
   method: string;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
   /**
    * Visibility of the enclosing procedure. `internal` procedures have no
    * untrusted caller by construction — see `owner_field_from_args_not_auth`'s
@@ -1712,14 +1763,14 @@ interface StorageKeyAccessIR {
  * identical to `AdvisorContainerKeyAccess`.
  */
 interface ContainerKeyAccessIR {
-  /** Export binding name of the procedure performing the `ctx.containers` access. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the `ctx.containers.*.get` call, or `0` when unknown. */
   line: number;
   /** The container accessor method invoked — always `get`. */
   method: string;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One `ctx.ai.run(model, …)` call whose model-id argument is derived from the handler's
@@ -1732,12 +1783,12 @@ interface ContainerKeyAccessIR {
  * normal usage and is never inspected). Structurally identical to `AdvisorAiRawRun`.
  */
 interface AiRawRunIR {
-  /** Export binding name of the procedure performing the `ctx.ai.run` call. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the `ctx.ai.run` call, or `0` when unknown. */
   line: number;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One `ctx.vectors.<method>(indexName, input)` call whose `input.namespace` is derived
@@ -1750,14 +1801,14 @@ interface AiRawRunIR {
  * here. Structurally identical to `AdvisorVectorNamespaceAccess`.
  */
 interface VectorNamespaceAccessIR {
-  /** Export binding name of the procedure performing the `ctx.vectors` access. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the `ctx.vectors` call, or `0` when unknown. */
   line: number;
   /** The `ctx.vectors` method invoked: `query` / `upsert` / `upsertNow`. */
   method: string;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One `ctx.mail`/`ctx.email` `send`/`queue` call whose recipient field (`to`/`cc`/`bcc`)
@@ -1770,14 +1821,14 @@ interface VectorNamespaceAccessIR {
  * `AdvisorMailRecipientAccess`.
  */
 interface MailRecipientAccessIR {
-  /** Export binding name of the procedure performing the `ctx.mail`/`ctx.email` call. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the `ctx.mail`/`ctx.email` call, or `0` when unknown. */
   line: number;
   /** The mailer method invoked: `send` / `queue`. */
   method: string;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One `ctx.browser.<method>(url, …)` call whose navigation URL (`arguments[0]`)
@@ -1788,14 +1839,14 @@ interface MailRecipientAccessIR {
  * `resolveDns`. Structurally identical to `AdvisorBrowserUrlAccess`.
  */
 interface BrowserUrlAccessIR {
-  /** Export binding name of the procedure performing the `ctx.browser` call. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the `ctx.browser` call, or `0` when unknown. */
   line: number;
   /** The browser method invoked: `content` / `pdf` / `scrape` / `screenshot`. */
   method: string;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One runtime container-override call: a `<handle>.start({ enableInternet: true, … })`
@@ -1809,14 +1860,14 @@ interface BrowserUrlAccessIR {
 interface ContainerOverrideIR {
   /** e.g. the egress method name, or `"enableInternet: true"`. */
   detail: string;
-  /** Export binding name of the procedure performing the call. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** Which override shape matched. */
   kind: "egress_relaxation" | "enable_internet";
   /** 1-based line of the call, or `0` when unknown. */
   line: number;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One `buildImageDeliveryUrl({ key, … })` call (`@lunora/bindings/images`) whose
@@ -1832,12 +1883,12 @@ interface ContainerOverrideIR {
  * identical to `AdvisorImageDeliveryUrlAccess`.
  */
 interface ImageDeliveryUrlAccessIR {
-  /** Export binding name of the procedure performing the `buildImageDeliveryUrl` call. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the `buildImageDeliveryUrl` call, or `0` when unknown. */
   line: number;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One `createAuth({...})` call's configuration snapshot — the shared input for
@@ -1858,8 +1909,6 @@ interface AuthConfigIR {
   disableCsrfCheck: boolean;
   /** `emailAndPassword.enabled === true`. */
   emailPasswordEnabled: boolean;
-  /** Export binding name enclosing the `createAuth(...)` call. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the `createAuth(...)` call, or `0` when unknown. */
@@ -1869,6 +1918,8 @@ interface AuthConfigIR {
   /** `trustedOrigins` array literal contains a `"*"` element. */
   /** `plugins` includes `scim(...)` while `database` is a non-transactional Lunora adapter — a combination that throws at runtime. */
   scimOnNonTransactionalAdapter: boolean;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
   /** `advanced.useSecureCookies === false`. */
   secureCookiesDisabled: boolean;
   /** `session.freshAge === 0` (explicit literal). */
@@ -1890,14 +1941,14 @@ interface AuthConfigIR {
 interface RatelimitKeySelectorIR {
   /** The `rateLimit`/`dbRateLimit` callee invoked. */
   callee: string;
-  /** Export binding name of the procedure whose `.use(...)` chain carries the call. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** The rate limit's `name` argument (the second positional argument), or `""` when not a string literal. */
   limitName: string;
   /** 1-based line of the `rateLimit`/`dbRateLimit` call, or `0` when unknown. */
   line: number;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One payload-derived privileged dispatch — a `ctx.run`/`context.run` back into a
@@ -1915,10 +1966,10 @@ interface PrivilegedDispatchIR {
   dispatchKind: "queue" | "workflow";
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
-  /** Export binding name of the handler performing the dispatch. */
-  handlerExport: string;
   /** 1-based line of the dispatch call, or `0` when unknown. */
   line: number;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
   /** Export name of the dispatched target (`send` in `api.messages.send`). */
   targetExport: string;
   /** File path of the dispatched target relative to `lunora/` (`messages` in `api.messages.send`). */
@@ -1959,8 +2010,6 @@ interface StorageUploadIR {
   analyzable: boolean;
   /** Numeric literal value of an `expiresInSeconds` option, when statically known (`getSignedUrl` / `getPresignedUrl` only). */
   expiresInSeconds?: number;
-  /** Export binding name of the procedure performing the call. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the call, or `0` when unknown. */
@@ -1969,6 +2018,8 @@ interface StorageUploadIR {
   method: "generateUploadUrl" | "getPresignedUrl" | "getSignedUrl" | "store" | "upload";
   /** Options-object keys present at the call site (empty when not `analyzable`, or when no options argument was passed). */
   presentKeys: string[];
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One discovered `httpAction`/`httpRoute` handler in `lunora/` that performs a
@@ -1982,8 +2033,6 @@ interface StorageUploadIR {
  * `AdvisorHttpActionGuard`.
  */
 interface HttpActionGuardIR {
-  /** Export binding name of the handler (or `"<module>"` when mounted inline / not a named binding). */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** Which HTTP surface the handler is: a raw `httpAction` or a typed `httpRoute` route. */
@@ -1994,6 +2043,8 @@ interface HttpActionGuardIR {
   method?: string;
   /** `true` when the handler reads `ctx.auth` (a direct member access or a `const { auth } = ctx` destructure). */
   readsAuth: boolean;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
   /** The first side effect found, as a stable label: `runMutation`, `runAction`, or `db.<method>`. */
   sideEffect: string;
 }
@@ -2012,14 +2063,14 @@ interface HttpActionGuardIR {
  * identical to `AdvisorHttpHeaderWrite`.
  */
 interface HttpHeaderWriteIR {
-  /** Export binding name of the enclosing handler, or `"<module>"` when mounted inline. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** The header name being written (`"location"`), or `""` when the key is not a string literal. */
   headerName: string;
   /** 1-based line of the request-tainted header value. */
   line: number;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
   /** How the header was written. */
   via: "headers-append" | "headers-ctor" | "headers-set" | "response-init";
 }
@@ -2037,8 +2088,6 @@ interface HttpHeaderWriteIR {
 interface FailOpenGuardIR {
   /** The middleware factory at the call site: `rateLimit` / `dbRateLimit` / `verifyTurnstileMiddleware`. */
   callee: string;
-  /** Export binding name of the procedure the guard is attached to, or `"<module>"` at file scope. */
-  exportName: string;
   /** `true` only when the options literal set `failOpen: true` as a boolean literal; a non-literal or absent option is treated as fail-closed. */
   failOpen: boolean;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
@@ -2047,6 +2096,8 @@ interface FailOpenGuardIR {
   limitName: string;
   /** 1-based line of the middleware call, or `0` when unknown. */
   line: number;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One `ctx.flags.boolean("key", <boolean-literal>)` read in `lunora/` — the
@@ -2060,14 +2111,14 @@ interface FailOpenGuardIR {
 interface FlagSecurityDefaultIR {
   /** The boolean-literal default returned on a provider outage (fail-open value). */
   defaultValue: boolean;
-  /** Export binding name of the procedure performing the flag read, or `"<module>"` at file scope. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** The flag key — the first string-literal argument of `ctx.flags.boolean`. */
   key: string;
   /** 1-based line of the `ctx.flags.boolean` call, or `0` when unknown. */
   line: number;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One `ctx.flags` read lexically inside a `query(...)` handler — the
@@ -2101,14 +2152,14 @@ interface FlagReadIR {
  * Structurally identical to `AdvisorAiToolSideEffect`.
  */
 interface AiToolSideEffectIR {
-  /** Export binding name of the procedure performing the call. */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the generation call, or `0` when unknown. */
   line: number;
   /** The generation entrypoint invoked. */
   method: "generateText" | "streamText";
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
   /** The privileged side-effect sink a model-callable tool reaches (`ctx.db.insert`, `ctx.run`, `ctx.fetch`, …). */
   sideEffect: string;
   /** `true` when a model-input option is derived from the handler's `args` (a bare `args.x`, or a name destructured from `args`). */
@@ -2125,14 +2176,14 @@ interface AiToolSideEffectIR {
 interface IdentityClaimReadIR {
   /** `true` when `key` is a declared claim (in the `defineIdentity` contract, or the always-present `userId`). */
   declared: boolean;
-  /** Export binding name of the enclosing declaration (`<module>` at file scope). */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** The claim key read off the identity bag. */
   key: string;
   /** 1-based line of the read, or `0` when unknown. */
   line: number;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
 }
 /**
  * One payment webhook-adapter construction in `lunora/` (`createStripeAdapter` /
@@ -2145,12 +2196,12 @@ interface IdentityClaimReadIR {
 interface PaymentWebhookIR {
   /** The adapter factory invoked. */
   callee: "createAutumnAdapter" | "createDodoPaymentsAdapter" | "createPolarAdapter" | "createStripeAdapter";
-  /** Export binding name of the enclosing declaration (`<module>` at file scope). */
-  exportName: string;
   /** Source file relative to `<projectRoot>/lunora/`, without extension. */
   file: string;
   /** 1-based line of the construction, or `0` when unknown. */
   line: number;
+  /** Who the site runs on behalf of — see {@link CallSiteScope}. */
+  scope: CallSiteScope;
   /** Statically-known `webhookToleranceSeconds` literal, when present and a plain numeric literal. */
   toleranceSeconds?: number;
 }
@@ -3184,8 +3235,7 @@ declare const discoverAgents: (project: Project, lunoraDirectory: string) => Age
 declare const listLunoraSourceFiles: (directory: string) => string[];
 /**
  * Discover `ctx.authApi.<method>(...)` (and bare `authApi.<method>(...)`) calls
- * under the lunora source directory and attribute each to the exported function
- * (and file) performing it. Calls outside an exported declaration are dropped.
+ * under the lunora source directory, each with its `CallSiteScope`.
  */
 declare const discoverAuthApiCalls: (project: Project, lunoraDirectory: string) => AuthApiCallIR[];
 /** The only file containers may be declared in — mirrors `lunora/crons.ts`. */
@@ -3244,10 +3294,11 @@ declare const discoverHttpRoutes: (project: Project, lunoraDirectory: string) =>
  */
 declare const discoverHyperdriveCalls: (project: Project, lunoraDirectory: string) => ContextPropertyCallIR[];
 /**
- * Discover `ctx.db.insert("table", …)` writes under the lunora source directory
- * and attribute each to the exported function (and file) performing it. Calls
- * with a non-literal table argument, or outside an exported declaration, are
- * dropped (`table === ""` / no enclosing export).
+ * Discover `ctx.db.insert("table", …)` writes under the lunora source directory,
+ * one record per call site with its `CallSiteScope` — so an insert inside a
+ * same-file helper carries the exports calling the helper, and one in a helper
+ * no export calls is kept rather than lost. A non-literal table argument is kept
+ * with `table: ""`.
  */
 declare const discoverInserts: (project: Project, lunoraDirectory: string) => InsertWriteIR[];
 /**
@@ -3330,7 +3381,8 @@ declare const discoverNotifyConfig: (project: Project, lunoraDirectory: string)
 declare const readPackageDependencies: (projectRoot: string) => Set<string> | undefined;
 /**
  * Discover every `ctx.db.query("table")…` read under the lunora source directory
- * and reduce each to a {@link QueryReadIR}.
+ * and reduce each to a {@link QueryReadIR}, one per read site with its
+ * `CallSiteScope`.
  *
  * Reads without a `.filter()` are kept too. They are never
  * `filter_without_index` candidates (that lint gates on `hasFilter`), but an

package/dist/index.mjs

@@ -1 +1 @@
-import{SCHEMA_SNAPSHOT_VERSION as t,diffSchemaSnapshots as a,serializeSchemaSnapshot as s}from"./packem_shared/SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import{formatAdvisories as m,lintSchema as f,toAdvisorContext as d}from"./packem_shared/formatAdvisories-DwmUKYuc.mjs";import{describeErrorLevelFindings as l,errorAdvisoryNames as n,errorPlatformDiagnosticNames as c,sortedUniqueNames as x}from"./packem_shared/describeErrorLevelFindings-vzaGS9KL.mjs";import{CAPABILITY_PROBES as E}from"./packem_shared/CAPABILITY_PROBES-DFsutD7g.mjs";import{CodegenDiagnosticError as A,diagnosticAt as v}from"./packem_shared/CodegenDiagnosticError-BUXlG3P-.mjs";import{AGENTS_FILENAME as C,discoverAgents as N}from"./packem_shared/AGENTS_FILENAME-D8SgT3OR.mjs";import{listLunoraSourceFiles as R}from"./packem_shared/listLunoraSourceFiles-CSlcBYlo.mjs";import{default as _}from"./packem_shared/discoverAuthApiCalls-DoSN_yc3.mjs";import{CONTAINERS_FILENAME as L,discoverContainers as M}from"./packem_shared/CONTAINERS_FILENAME-C13yKxas.mjs";import{default as F}from"./packem_shared/discoverCrons-BEALHx1S.mjs";import{capabilitiesUsedBy as D,foldCapabilitySignals as b,mayReadCapabilityContext as U,sourceCapabilitySignals as y}from"./packem_shared/capabilitiesUsedBy-DqrbgTKV.mjs";import{FLAGS_FILENAME as H,discoverFlags as j}from"./packem_shared/FLAGS_FILENAME-W5XQz_Po.mjs";import{default as k}from"./packem_shared/discoverFunctions-BcBzcG5x.mjs";import{default as K}from"./packem_shared/discoverHttpRoutes-CJHS4llq.mjs";import{default as z}from"./packem_shared/discoverHyperdriveCalls-Bkbh4tG7.mjs";import{default as q}from"./packem_shared/discoverInserts-DpuLYPPd.mjs";import{d as J}from"./packem_shared/index-D7dKfGPh.mjs";import{default as X}from"./packem_shared/discoverMigrations-Dt7ywfZv.mjs";import{MUTATORS_FILENAME as $,discoverMutators as ee}from"./packem_shared/MUTATORS_FILENAME-DqWOgC5Z.mjs";import{default as oe}from"./packem_shared/discoverNondeterministicCalls-CNJV2BiP.mjs";import{NOTIFY_FILENAME as ae,discoverNotifyCalls as se,discoverNotifyConfig as ie}from"./packem_shared/NOTIFY_FILENAME-C1J_47et.mjs";import{default as fe}from"./packem_shared/readPackageDependencies-C6h6FZuP.mjs";import{default as pe}from"./packem_shared/discoverQueries-BcdqjYky.mjs";import{QUEUES_FILENAME as ne,discoverQueues as ce}from"./packem_shared/QUEUES_FILENAME-RGwht3Xu.mjs";import{default as Se}from"./packem_shared/discoverR2sqlCalls-30Wtbc0P.mjs";import{default as ue}from"./packem_shared/discoverRlsProcedures-F4Cy-kSi.mjs";import{default as ve}from"./packem_shared/discoverRlsMetadata-mXBmPOGj.mjs";import{discoverSandboxUsage as Ce}from"./packem_shared/discoverSandboxUsage-DC6q7rZy.mjs";import{default as Oe}from"./packem_shared/discoverSchema-D5R60b4F.mjs";import{readServiceBindings as Te,resolveServiceBindings as _e}from"./packem_shared/readServiceBindings-CeQvSswr.mjs";import{SHAPES_FILENAME as Le,discoverShapes as Me}from"./packem_shared/SHAPES_FILENAME-DRUFomCj.mjs";import{default as Fe}from"./packem_shared/discoverStorageRulesMetadata-D3Ot9g5f.mjs";import{WORKFLOWS_FILENAME as De,discoverWorkflows as be}from"./packem_shared/WORKFLOWS_FILENAME-4-ib4HH-.mjs";import{emitApp as ye}from"./packem_shared/emitApp-0rC4g46B.mjs";import{isD1GlobalTable as He,isHyperdriveGlobalTable as je}from"./packem_shared/isD1GlobalTable-udvHAAzD.mjs";import{buildOpenApiDocument as ke,emitOpenApi as We,emitOpenApiModule as Ke}from"./packem_shared/buildOpenApiDocument-SxfElVzK.mjs";import{OPENRPC_VERSION as ze,buildOpenRpcDocument as Qe,emitOpenRpc as qe,emitOpenRpcModule as we}from"./packem_shared/OPENRPC_VERSION-Cr7Zzp6s.mjs";import{DEFAULT_TARGET as Ye,platformMatrixIds as Xe,readProjectTarget as Ze,resolveCodegenTarget as $e}from"./packem_shared/DEFAULT_TARGET-Co7ZXJ21.mjs";import{loadProjectConfig as rr,readProjectConfigLiterals as or}from"./packem_shared/loadProjectConfig-nNIDOrlR.mjs";import{SCHEMA_SNAPSHOT_FILENAME as ar,createCodegenProject as sr,findTsconfig as ir,refreshCodegenProject as mr,runCodegen as fr}from"./packem_shared/SCHEMA_SNAPSHOT_FILENAME-D0ZAEgkE.mjs";import{SchemaSnapshotParseError as pr,buildSchemaSnapshot as lr,evaluateSchemaDrift as nr,parseSchemaSnapshot as cr}from"./packem_shared/SchemaSnapshotParseError-CPOXlFhI.mjs";import{default as Sr}from"./packem_shared/fingerprintSchemaSources-Cl1CJFeh.mjs";import{schemaFromIr as ur}from"./packem_shared/schemaFromIr-BWFnvCVg.mjs";import{LUNORA_ERROR_CODES as vr,validatorIrToJsonSchema as gr}from"./packem_shared/LUNORA_ERROR_CODES-C2s0xWQD.mjs";import{SDK_LANGUAGES as Nr,SDK_TARGETS as Or,generateSdk as Rr}from"./packem_shared/SDK_LANGUAGES-Df_CnJx5.mjs";import{redact as _r,secretKindOf as Ir}from"./packem_shared/redact-Cy14LEnc.mjs";import{default as Mr}from"./packem_shared/emitDrizzleSchema-Cv0HtLR3.mjs";import{default as Fr}from"./packem_shared/emitFunctions-BgNeOZt_.mjs";import{default as Dr}from"./packem_shared/emitServer-mdlKhXYb.mjs";import{e as Ur}from"./packem_shared/shard-Do57J5-c.mjs";import{G as Gr}from"./packem_shared/shared-DjUziztz.mjs";import{MESSAGE_SOLUTIONS as jr,findSolutionByMessage as Br}from"@lunora/errors";import{PROJECT_CONFIG_FILENAMES as Wr,findProjectConfigFile as Kr}from"./packem_shared/PROJECT_CONFIG_FILENAMES-DzOu-lSc.mjs";import{s as zr,t as Qr,u as qr}from"./packem_shared/shard-runtime-B8rucwkF.mjs";import{emitApi as Jr,emitCollections as Yr}from"./packem_shared/emitApi-DdW9RyGG.mjs";import{emitCrons as Zr,emitScheduler as $r,emitVectors as eo,emitWranglerCronTriggers as ro}from"./packem_shared/emitCrons-BRKXFGFu.mjs";import{emitDataModel as to}from"./packem_shared/emitDataModel-D3WuEZ4b.mjs";import{isTypedSchema as so}from"./packem_shared/isTypedSchema-CKzc3ioR.mjs";const e="0.0.0";export{C as AGENTS_FILENAME,E as CAPABILITY_PROBES,L as CONTAINERS_FILENAME,A as CodegenDiagnosticError,Ye as DEFAULT_TARGET,H as FLAGS_FILENAME,Gr as GENERATED_HEADER,vr as LUNORA_ERROR_CODES,jr as LUNORA_SOLUTION_RULES,$ as MUTATORS_FILENAME,ae as NOTIFY_FILENAME,ze as OPENRPC_VERSION,Wr as PROJECT_CONFIG_FILENAMES,ne as QUEUES_FILENAME,ar as SCHEMA_SNAPSHOT_FILENAME,t as SCHEMA_SNAPSHOT_VERSION,Nr as SDK_LANGUAGES,Or as SDK_TARGETS,Le as SHAPES_FILENAME,pr as SchemaSnapshotParseError,e as VERSION,De as WORKFLOWS_FILENAME,ke as buildOpenApiDocument,Qe as buildOpenRpcDocument,lr as buildSchemaSnapshot,D as capabilitiesUsedBy,sr as createCodegenProject,l as describeErrorLevelFindings,v as diagnosticAt,a as diffSchemaSnapshots,N as discoverAgents,_ as discoverAuthApiCalls,M as discoverContainers,F as discoverCrons,j as discoverFlags,k as discoverFunctions,K as discoverHttpRoutes,z as discoverHyperdriveCalls,q as discoverInserts,J as discoverMaskProcedures,X as discoverMigrations,ee as discoverMutators,oe as discoverNondeterministicCalls,se as discoverNotifyCalls,ie as discoverNotifyConfig,pe as discoverQueries,ce as discoverQueues,Se as discoverR2sqlCalls,ve as discoverRlsMetadata,ue as discoverRlsProcedures,Ce as discoverSandboxUsage,Oe as discoverSchema,Me as discoverShapes,Fe as discoverStorageRulesMetadata,be as discoverWorkflows,zr as emitAgents,Jr as emitApi,ye as emitApp,Yr as emitCollections,Qr as emitContainers,Zr as emitCrons,to as emitDataModel,Mr as emitDrizzleSchema,Fr as emitFunctions,We as emitOpenApi,Ke as emitOpenApiModule,qe as emitOpenRpc,we as emitOpenRpcModule,$r as emitScheduler,Dr as emitServer,Ur as emitShard,eo as emitVectors,qr as emitWorkflows,ro as emitWranglerCronTriggers,n as errorAdvisoryNames,c as errorPlatformDiagnosticNames,nr as evaluateSchemaDrift,Br as findLunoraSolution,Kr as findProjectConfigFile,ir as findTsconfig,Sr as fingerprintSchemaSources,b as foldCapabilitySignals,m as formatAdvisories,Rr as generateSdk,He as isD1GlobalTable,je as isHyperdriveGlobalTable,so as isTypedSchema,f as lintSchema,R as listLunoraSourceFiles,rr as loadProjectConfig,U as mayReadCapabilityContext,cr as parseSchemaSnapshot,Xe as platformMatrixIds,fe as readPackageDependencies,or as readProjectConfigLiterals,Ze as readProjectTarget,Te as readServiceBindings,_r as redact,mr as refreshCodegenProject,$e as resolveCodegenTarget,_e as resolveServiceBindings,fr as runCodegen,ur as schemaFromIr,Ir as secretKindOf,s as serializeSchemaSnapshot,x as sortedUniqueNames,y as sourceCapabilitySignals,d as toAdvisorContext,gr as validatorIrToJsonSchema};
+import{SCHEMA_SNAPSHOT_VERSION as t,diffSchemaSnapshots as a,serializeSchemaSnapshot as s}from"./packem_shared/SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import{formatAdvisories as m,lintSchema as f,toAdvisorContext as d}from"./packem_shared/formatAdvisories-DwmUKYuc.mjs";import{describeErrorLevelFindings as l,errorAdvisoryNames as n,errorPlatformDiagnosticNames as c,sortedUniqueNames as x}from"./packem_shared/describeErrorLevelFindings-vzaGS9KL.mjs";import{CAPABILITY_PROBES as E}from"./packem_shared/CAPABILITY_PROBES-DFsutD7g.mjs";import{CodegenDiagnosticError as A,diagnosticAt as v}from"./packem_shared/CodegenDiagnosticError-BUXlG3P-.mjs";import{AGENTS_FILENAME as C,discoverAgents as N}from"./packem_shared/AGENTS_FILENAME-D0fmyQlq.mjs";import{listLunoraSourceFiles as R}from"./packem_shared/listLunoraSourceFiles-jTik1QWu.mjs";import{default as _}from"./packem_shared/discoverAuthApiCalls-CEL1n0I0.mjs";import{CONTAINERS_FILENAME as L,discoverContainers as M}from"./packem_shared/CONTAINERS_FILENAME-C2wrJ9hF.mjs";import{default as F}from"./packem_shared/discoverCrons-BcrneOpi.mjs";import{capabilitiesUsedBy as D,foldCapabilitySignals as b,mayReadCapabilityContext as U,sourceCapabilitySignals as y}from"./packem_shared/capabilitiesUsedBy-DLv5b8Ss.mjs";import{FLAGS_FILENAME as H,discoverFlags as j}from"./packem_shared/FLAGS_FILENAME-C1tAv68t.mjs";import{default as k}from"./packem_shared/discoverFunctions-TvTtRhvv.mjs";import{default as K}from"./packem_shared/discoverHttpRoutes-BdaGy42T.mjs";import{default as z}from"./packem_shared/discoverHyperdriveCalls-CDm53WpH.mjs";import{default as q}from"./packem_shared/discoverInserts-B2MLcH9M.mjs";import{d as J}from"./packem_shared/index-CpnWNNMK.mjs";import{default as X}from"./packem_shared/discoverMigrations-jUmsOO70.mjs";import{MUTATORS_FILENAME as $,discoverMutators as ee}from"./packem_shared/MUTATORS_FILENAME-CDYDr1iG.mjs";import{default as oe}from"./packem_shared/discoverNondeterministicCalls-BJzH9mEn.mjs";import{NOTIFY_FILENAME as ae,discoverNotifyCalls as se,discoverNotifyConfig as ie}from"./packem_shared/NOTIFY_FILENAME-Dmylk3YO.mjs";import{default as fe}from"./packem_shared/readPackageDependencies-C6h6FZuP.mjs";import{default as pe}from"./packem_shared/discoverQueries-B4enrT1h.mjs";import{QUEUES_FILENAME as ne,discoverQueues as ce}from"./packem_shared/QUEUES_FILENAME-CQXsARur.mjs";import{default as Se}from"./packem_shared/discoverR2sqlCalls-BgbXtbva.mjs";import{default as ue}from"./packem_shared/discoverRlsProcedures-DY5xYy7C.mjs";import{default as ve}from"./packem_shared/discoverRlsMetadata-DewerjgN.mjs";import{discoverSandboxUsage as Ce}from"./packem_shared/discoverSandboxUsage-CJPFsjOS.mjs";import{default as Oe}from"./packem_shared/discoverSchema-DPRQni-9.mjs";import{readServiceBindings as Te,resolveServiceBindings as _e}from"./packem_shared/readServiceBindings-B_M_ZvhO.mjs";import{SHAPES_FILENAME as Le,discoverShapes as Me}from"./packem_shared/SHAPES_FILENAME-CNUAxXo3.mjs";import{default as Fe}from"./packem_shared/discoverStorageRulesMetadata-DnVGPbZl.mjs";import{WORKFLOWS_FILENAME as De,discoverWorkflows as be}from"./packem_shared/WORKFLOWS_FILENAME-DrRu8060.mjs";import{emitApp as ye}from"./packem_shared/emitApp-0rC4g46B.mjs";import{isD1GlobalTable as He,isHyperdriveGlobalTable as je}from"./packem_shared/isD1GlobalTable-udvHAAzD.mjs";import{buildOpenApiDocument as ke,emitOpenApi as We,emitOpenApiModule as Ke}from"./packem_shared/buildOpenApiDocument-DZMRzaEx.mjs";import{OPENRPC_VERSION as ze,buildOpenRpcDocument as Qe,emitOpenRpc as qe,emitOpenRpcModule as we}from"./packem_shared/OPENRPC_VERSION-LZowDAOS.mjs";import{DEFAULT_TARGET as Ye,platformMatrixIds as Xe,readProjectTarget as Ze,resolveCodegenTarget as $e}from"./packem_shared/DEFAULT_TARGET-D5J5j3CW.mjs";import{loadProjectConfig as rr,readProjectConfigLiterals as or}from"./packem_shared/loadProjectConfig-D_pUUrhQ.mjs";import{SCHEMA_SNAPSHOT_FILENAME as ar,createCodegenProject as sr,findTsconfig as ir,refreshCodegenProject as mr,runCodegen as fr}from"./packem_shared/SCHEMA_SNAPSHOT_FILENAME-CYrLeST3.mjs";import{SchemaSnapshotParseError as pr,buildSchemaSnapshot as lr,evaluateSchemaDrift as nr,parseSchemaSnapshot as cr}from"./packem_shared/SchemaSnapshotParseError-CPOXlFhI.mjs";import{default as Sr}from"./packem_shared/fingerprintSchemaSources-D5z-pfpY.mjs";import{schemaFromIr as ur}from"./packem_shared/schemaFromIr-BWFnvCVg.mjs";import{LUNORA_ERROR_CODES as vr,validatorIrToJsonSchema as gr}from"./packem_shared/LUNORA_ERROR_CODES-C2s0xWQD.mjs";import{SDK_LANGUAGES as Nr,SDK_TARGETS as Or,generateSdk as Rr}from"./packem_shared/SDK_LANGUAGES-Df_CnJx5.mjs";import{redact as _r,secretKindOf as Ir}from"./packem_shared/redact-Cy14LEnc.mjs";import{default as Mr}from"./packem_shared/emitDrizzleSchema-Cv0HtLR3.mjs";import{default as Fr}from"./packem_shared/emitFunctions-BgNeOZt_.mjs";import{default as Dr}from"./packem_shared/emitServer-mdlKhXYb.mjs";import{e as Ur}from"./packem_shared/shard-B2AqdAuz.mjs";import{G as Gr}from"./packem_shared/shared-DjUziztz.mjs";import{MESSAGE_SOLUTIONS as jr,findSolutionByMessage as Br}from"@lunora/errors";import{PROJECT_CONFIG_FILENAMES as Wr,findProjectConfigFile as Kr}from"./packem_shared/PROJECT_CONFIG_FILENAMES-DzOu-lSc.mjs";import{s as zr,t as Qr,u as qr}from"./packem_shared/shard-runtime-B8rucwkF.mjs";import{emitApi as Jr,emitCollections as Yr}from"./packem_shared/emitApi-DdW9RyGG.mjs";import{emitCrons as Zr,emitScheduler as $r,emitVectors as eo,emitWranglerCronTriggers as ro}from"./packem_shared/emitCrons-BRKXFGFu.mjs";import{emitDataModel as to}from"./packem_shared/emitDataModel-D3WuEZ4b.mjs";import{isTypedSchema as so}from"./packem_shared/isTypedSchema-CKzc3ioR.mjs";const e="0.0.0";export{C as AGENTS_FILENAME,E as CAPABILITY_PROBES,L as CONTAINERS_FILENAME,A as CodegenDiagnosticError,Ye as DEFAULT_TARGET,H as FLAGS_FILENAME,Gr as GENERATED_HEADER,vr as LUNORA_ERROR_CODES,jr as LUNORA_SOLUTION_RULES,$ as MUTATORS_FILENAME,ae as NOTIFY_FILENAME,ze as OPENRPC_VERSION,Wr as PROJECT_CONFIG_FILENAMES,ne as QUEUES_FILENAME,ar as SCHEMA_SNAPSHOT_FILENAME,t as SCHEMA_SNAPSHOT_VERSION,Nr as SDK_LANGUAGES,Or as SDK_TARGETS,Le as SHAPES_FILENAME,pr as SchemaSnapshotParseError,e as VERSION,De as WORKFLOWS_FILENAME,ke as buildOpenApiDocument,Qe as buildOpenRpcDocument,lr as buildSchemaSnapshot,D as capabilitiesUsedBy,sr as createCodegenProject,l as describeErrorLevelFindings,v as diagnosticAt,a as diffSchemaSnapshots,N as discoverAgents,_ as discoverAuthApiCalls,M as discoverContainers,F as discoverCrons,j as discoverFlags,k as discoverFunctions,K as discoverHttpRoutes,z as discoverHyperdriveCalls,q as discoverInserts,J as discoverMaskProcedures,X as discoverMigrations,ee as discoverMutators,oe as discoverNondeterministicCalls,se as discoverNotifyCalls,ie as discoverNotifyConfig,pe as discoverQueries,ce as discoverQueues,Se as discoverR2sqlCalls,ve as discoverRlsMetadata,ue as discoverRlsProcedures,Ce as discoverSandboxUsage,Oe as discoverSchema,Me as discoverShapes,Fe as discoverStorageRulesMetadata,be as discoverWorkflows,zr as emitAgents,Jr as emitApi,ye as emitApp,Yr as emitCollections,Qr as emitContainers,Zr as emitCrons,to as emitDataModel,Mr as emitDrizzleSchema,Fr as emitFunctions,We as emitOpenApi,Ke as emitOpenApiModule,qe as emitOpenRpc,we as emitOpenRpcModule,$r as emitScheduler,Dr as emitServer,Ur as emitShard,eo as emitVectors,qr as emitWorkflows,ro as emitWranglerCronTriggers,n as errorAdvisoryNames,c as errorPlatformDiagnosticNames,nr as evaluateSchemaDrift,Br as findLunoraSolution,Kr as findProjectConfigFile,ir as findTsconfig,Sr as fingerprintSchemaSources,b as foldCapabilitySignals,m as formatAdvisories,Rr as generateSdk,He as isD1GlobalTable,je as isHyperdriveGlobalTable,so as isTypedSchema,f as lintSchema,R as listLunoraSourceFiles,rr as loadProjectConfig,U as mayReadCapabilityContext,cr as parseSchemaSnapshot,Xe as platformMatrixIds,fe as readPackageDependencies,or as readProjectConfigLiterals,Ze as readProjectTarget,Te as readServiceBindings,_r as redact,mr as refreshCodegenProject,$e as resolveCodegenTarget,_e as resolveServiceBindings,fr as runCodegen,ur as schemaFromIr,Ir as secretKindOf,s as serializeSchemaSnapshot,x as sortedUniqueNames,y as sourceCapabilitySignals,d as toAdvisorContext,gr as validatorIrToJsonSchema};

package/dist/packem_shared/{AGENTS_FILENAME-D8SgT3OR.mjs → AGENTS_FILENAME-D0fmyQlq.mjs}

@@ -1 +1 @@
-import{existsSync as p}from"node:fs";import{join as f}from"node:path";import{agentDefaultName as d,agentClassName as b,voiceBindingName as N,voiceClassName as y}from"@lunora/agent/naming";import{LunoraError as m}from"@lunora/errors";import{Node as s,SyntaxKind as u}from"ts-morph";import{diagnosticAt as l}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{unwrapToCallExpression as A,findObjectProperty as c,stringPropertyFor as w}from"./listLunoraSourceFiles-CSlcBYlo.mjs";const h="agents.ts",E=o=>{const n=o.getSymbol();if(!n)return o.getText()==="defineAgent";for(const t of n.getDeclarations())if(s.isImportSpecifier(t))return t.getImportDeclaration().getModuleSpecifierValue()!=="@lunora/agent"?!1:t.getNameNode().getText()==="defineAgent";return!1},P=w("agent"),v=(o,n,t)=>{if(o.getKind()===u.TrueKeyword)return!0;if(o.getKind()===u.FalseKeyword)return!1;throw l(o,`agent "${n}": \`${t}\` must be a static boolean literal — it is deploy configuration codegen writes into the ctx.agents wiring spec`)},T=(o,n)=>{const t=o.getArguments()[0];if(!t||!s.isObjectLiteralExpression(t))throw l(o,`agent "${n}": defineAgent must be passed an inline object literal`);const e={className:b(n),exportName:n,name:d(n)},i=c(t,"name");i&&s.isPropertyAssignment(i)&&(e.name=P(i.getInitializerOrThrow(),n,"name"));const r=c(t,"publicRun");r&&s.isPropertyAssignment(r)&&v(r.getInitializerOrThrow(),n,"publicRun")&&(e.publicRun=!0);const a=c(t,"voice");if(a&&s.isPropertyAssignment(a)){const g=a.getInitializerOrThrow();if(!s.isObjectLiteralExpression(g))throw l(g,`agent "${n}": \`voice\` must be an inline object literal — its presence tells codegen to emit the voice-session Durable Object`);e.voice=!0,e.voiceBindingName=N(n),e.voiceClassName=y(n)}return c(t,"onEmail")&&(e.onEmail=!0),e},I=o=>{const n=[];for(const t of o.getVariableDeclarations()){if(!t.isExported())continue;const e=A(t.getInitializer());if(!e)continue;const i=e.getExpression();if(!s.isIdentifier(i)||!E(i))continue;const r=t.getNameNode();if(!s.isIdentifier(r))throw l(r,"defineAgent exports must be plain named exports (no destructuring)");n.push(T(e,r.getText()))}return n},x=o=>{const n=new Map,t=new Map;for(const e of o){const i=n.get(e.name);if(i!==void 0)throw new m("DUPLICATE_AGENT_NAME",`Duplicate agent name "${e.name}": produced by both "${i}" and "${e.exportName}". Deployed agent names must be unique across the project.`,{status:500});n.set(e.name,e.exportName);const r=t.get(e.className);if(r!==void 0)throw new m("DUPLICATE_AGENT_CLASS",`Duplicate agent class "${e.className}": produced by both "${r}" and "${e.exportName}". Agent export names must yield unique generated class names.`,{status:500});t.set(e.className,e.exportName)}},O=(o,n)=>{const t=f(n,h);if(!p(t))return[];const e=o.getSourceFile(t)??o.addSourceFileAtPath(t),i=I(e);return i.sort((r,a)=>r.exportName.localeCompare(a.exportName)),x(i),i};export{h as AGENTS_FILENAME,O as discoverAgents};
+import{existsSync as p}from"node:fs";import{join as f}from"node:path";import{agentDefaultName as d,agentClassName as b,voiceBindingName as N,voiceClassName as y}from"@lunora/agent/naming";import{LunoraError as m}from"@lunora/errors";import{Node as s,SyntaxKind as u}from"ts-morph";import{diagnosticAt as l}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{unwrapToCallExpression as A,findObjectProperty as c,stringPropertyFor as w}from"./listLunoraSourceFiles-jTik1QWu.mjs";const h="agents.ts",E=o=>{const n=o.getSymbol();if(!n)return o.getText()==="defineAgent";for(const t of n.getDeclarations())if(s.isImportSpecifier(t))return t.getImportDeclaration().getModuleSpecifierValue()!=="@lunora/agent"?!1:t.getNameNode().getText()==="defineAgent";return!1},P=w("agent"),v=(o,n,t)=>{if(o.getKind()===u.TrueKeyword)return!0;if(o.getKind()===u.FalseKeyword)return!1;throw l(o,`agent "${n}": \`${t}\` must be a static boolean literal — it is deploy configuration codegen writes into the ctx.agents wiring spec`)},T=(o,n)=>{const t=o.getArguments()[0];if(!t||!s.isObjectLiteralExpression(t))throw l(o,`agent "${n}": defineAgent must be passed an inline object literal`);const e={className:b(n),exportName:n,name:d(n)},i=c(t,"name");i&&s.isPropertyAssignment(i)&&(e.name=P(i.getInitializerOrThrow(),n,"name"));const r=c(t,"publicRun");r&&s.isPropertyAssignment(r)&&v(r.getInitializerOrThrow(),n,"publicRun")&&(e.publicRun=!0);const a=c(t,"voice");if(a&&s.isPropertyAssignment(a)){const g=a.getInitializerOrThrow();if(!s.isObjectLiteralExpression(g))throw l(g,`agent "${n}": \`voice\` must be an inline object literal — its presence tells codegen to emit the voice-session Durable Object`);e.voice=!0,e.voiceBindingName=N(n),e.voiceClassName=y(n)}return c(t,"onEmail")&&(e.onEmail=!0),e},I=o=>{const n=[];for(const t of o.getVariableDeclarations()){if(!t.isExported())continue;const e=A(t.getInitializer());if(!e)continue;const i=e.getExpression();if(!s.isIdentifier(i)||!E(i))continue;const r=t.getNameNode();if(!s.isIdentifier(r))throw l(r,"defineAgent exports must be plain named exports (no destructuring)");n.push(T(e,r.getText()))}return n},x=o=>{const n=new Map,t=new Map;for(const e of o){const i=n.get(e.name);if(i!==void 0)throw new m("DUPLICATE_AGENT_NAME",`Duplicate agent name "${e.name}": produced by both "${i}" and "${e.exportName}". Deployed agent names must be unique across the project.`,{status:500});n.set(e.name,e.exportName);const r=t.get(e.className);if(r!==void 0)throw new m("DUPLICATE_AGENT_CLASS",`Duplicate agent class "${e.className}": produced by both "${r}" and "${e.exportName}". Agent export names must yield unique generated class names.`,{status:500});t.set(e.className,e.exportName)}},O=(o,n)=>{const t=f(n,h);if(!p(t))return[];const e=o.getSourceFile(t)??o.addSourceFileAtPath(t),i=I(e);return i.sort((r,a)=>r.exportName.localeCompare(a.exportName)),x(i),i};export{h as AGENTS_FILENAME,O as discoverAgents};