@lunora/codegen 1.0.0-alpha.264 → 1.0.0-alpha.266

package/dist/packem_shared/SCHEMA_SNAPSHOT_FILENAME-YwnhjnM-.mjs

@@ -0,0 +1,11 @@
+import{existsSync as O,mkdirSync as Qn,readFileSync as Xn,writeFileSync as Jn,rmSync as Zn}from"node:fs";import{join as S,dirname as Ne}from"node:path";import{performance as Xe}from"node:perf_hooks";import{runAdvisor as er}from"@lunora/advisor";import{LunoraError as W}from"@lunora/errors";import{readJsonSync as tr}from"@visulima/fs";import{SyntaxKind as d,Node as i,Project as Xt}from"ts-morph";import{serializeSchemaSnapshot as sr}from"./SCHEMA_SNAPSHOT_VERSION-C0oHwiJZ.mjs";import{toAdvisorContext as nr}from"./formatAdvisories-DwmUKYuc.mjs";import{r as rr,a as y}from"./project-config-file-Cb5ouVEK.mjs";import{a as Jt,d as ir,r as or}from"./modules-DQv8-RtF.mjs";import{QUEUES_FILENAME as ar,discoverQueueDeclarations as cr}from"./QUEUES_FILENAME-D0AeAQz-.mjs";import{WORKFLOWS_FILENAME as lr,discoverWorkflows as dr}from"./WORKFLOWS_FILENAME-d1r1GnQd.mjs";import{r as ur}from"./json-data-Chfs2Cz5.mjs";import{s as Me}from"./paths-C-9fwEgQ.mjs";import{G as fr}from"./shared-BXUKWh7t.mjs";import{CAPABILITIES as pr,usedCapabilities as gr}from"./CAPABILITY_PROBES-DFsutD7g.mjs";import{isD1GlobalTable as Bs,isHyperdriveGlobalTable as $s}from"./isD1GlobalTable-udvHAAzD.mjs";import{discoverAgents as mr}from"./AGENTS_FILENAME-DwlmRvXo.mjs";import{discoverContainers as hr}from"./CONTAINERS_FILENAME-D8YLxYhQ.mjs";import vr from"./discoverCrons-DI1xHRei.mjs";import{diagnosticAt as ge}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{b as _e}from"./module-specifiers-WF8iAydP.mjs";import{a as Us,b as V,d as K,f as R,g as xt,c as h,w as St,k as Er,l as xr,h as Sr,j as ot,i as yr}from"./attribution-B7i322L0.mjs";import{contextPropertiesRead as Ar,discoverFeatureUsage as br}from"./capabilitiesUsedBy-_kfPZ5wC.mjs";import Nr from"./readPackageDependencies-RHhGiz0k.mjs";import{listLunoraSourceFiles as E,unwrapExpression as v,listSecurityScanFiles as Ke,objectLiteralFromCallbackBody as Vs,propertyInitializer as P,lunoraRelativePath as w,bindingKeyName as me,collectCallRows as I,findObjectProperty as D,collectSecurityCallRows as Pr,collectNodeRows as at,RUN_METHODS as js,functionReferenceSegments as qs,limitNameOf as Ws,optionsObjectLiteral as Hs,handlerOf as wr,chainRootOf as yt,outermostValueWrapper as b,isWriteTarget as ze,isSameNode as ue,isConstDeclaration as Z,returningFunctionOf as ct,walkChain as Ir,memberAccessOf as Cr,isTestPath as Tr}from"./isTestPath-5ruOnRVA.mjs";import{discoverSandboxUsage as Or}from"./discoverSandboxUsage-C-ntjbjl.mjs";import{resolveServiceBindings as Rr}from"./readServiceBindings-BcN87FPt.mjs";import kr from"./discoverStorageRulesMetadata-B-f9lVjJ.mjs";import{a as A,c as H,d as Gs,e as Fr}from"./classify-procedure-call-DC_O3oNQ.mjs";import{i as Dr}from"./ir-DBSvhNa-.mjs";import{gatePlatformFeatures as Lr,resolveCodegenTarget as Ys,readTargetDiagnostics as Mr,studioPlatformFor as _r}from"./DEFAULT_TARGET-CaXPORLo.mjs";import{b as Qs,e as Kr}from"./shard-WXSIZRpD.mjs";import zr from"./emitServer-DymRagL2.mjs";import{emitDataModel as Br}from"./emitDataModel-DSk9AkJe.mjs";import{a as Zt,r as Je,i as $,b as $r,m as Xs,c as Be,e as Js,E as Zs,C as en,d as Ur,f as Vr,g as jr}from"./context-root-C4hjiCTo.mjs";import{r as $e,s as qr}from"./parse-validator-C2Osg6gv.mjs";import Wr from"./discoverAuthApiCalls-CUM8XgDc.mjs";import{i as Hr,a as Gr,e as Yr,b as Qr,d as Xr,c as Jr}from"./unwrap-handler-return-CM6v2E3A.mjs";import Zr from"./discoverFunctions-B-7117i2.mjs";import ei from"./discoverHttpRoutes-BT2HmWD_.mjs";import ti from"./discoverHyperdriveCalls-Bir4M-bD.mjs";import si from"./discoverInserts-BHxWlrW0.mjs";import{m as At,a as Te,s as tn,d as ni}from"./index-B5G7NWDW.mjs";import{e as sn}from"./exported-procedure-chains-CmwqreGv.mjs";import ri from"./discoverMigrations-DdeNFu0j.mjs";import{i as _,r as nn}from"./database-calls-B6ylmcGA.mjs";import{MUTATORS_FILENAME as ii,isDefineMutatorCallee as oi,mutatorServerImplOf as ai,discoverMutators as ci}from"./MUTATORS_FILENAME-DwAZEI6d.mjs";import li from"./discoverNondeterministicCalls-Deg23AAc.mjs";import{discoverNotifyConfig as di,discoverNotifyCalls as ui}from"./NOTIFY_FILENAME-DrBbzi0l.mjs";import fi from"./discoverQueries-yKWWoX-Z.mjs";import pi from"./discoverR2sqlCalls-C48f9S0b.mjs";import gi from"./discoverRlsProcedures-D3UFRjOI.mjs";import mi from"./discoverRlsMetadata-DwG8EMHQ.mjs";import hi from"./discoverSchema-DFN2L811.mjs";import{secretKindOf as vi,redact as Ei,isHeuristicSecretKind as xi,isSecretishName as Si}from"./redact-Cy14LEnc.mjs";import{discoverShapes as yi}from"./SHAPES_FILENAME-C-CUVhR6.mjs";import{i as Ai}from"./reserved-words-CW1QFbTd.mjs";import{emitApp as bi}from"./emitApp-Dec8sEI0.mjs";import{buildOpenApiDocument as Ni,emitOpenApiModule as Pi}from"./buildOpenApiDocument-BYtXD9iB.mjs";import{buildOpenRpcDocument as wi,emitOpenRpcModule as Ii}from"./OPENRPC_VERSION-BqeEI2Dn.mjs";import{buildSchemaSnapshot as Ci}from"./SchemaSnapshotParseError-CPOXlFhI.mjs";import{emitCollections as Ti,emitSeed as Oi,emitApi as Ri}from"./emitApi-xDIHPRPH.mjs";import{t as ki,u as Fi,s as Di,v as Li}from"./shard-runtime-B1nU9CRa.mjs";import{emitCrons as Mi,emitScheduler as _i,emitShardRegistry as Ki,emitVectors as zi,emitWranglerCronTriggers as Bi}from"./emitCrons-DsXsg1uG.mjs";import $i from"./emitDrizzleSchema-DohtnI8c.mjs";import Ui from"./emitFunctions-evl8Mx1a.mjs";const es={error:"ERROR",info:"INFO",warn:"WARN"},ts={ERROR:2,INFO:0,WARN:1},Vi=e=>({cacheKey:"advisor_min_severity_invalid",categories:["SCHEMA"],description:"`advisor.minSeverity` in `lunora.config.*` sets the lowest advisory level codegen reports and writes into `_generated/shard.ts`. Codegen reads it by parsing the file, so it has to be a string literal.",detail:e,facing:"INTERNAL",level:"WARN",metadata:{},name:"advisor_min_severity_invalid",remediation:'Set `advisor: { minSeverity: "info" | "warn" | "error" }` as a literal on the config\'s default export.',title:"`advisor.minSeverity` is not a level codegen can read, so every advisory was reported"}),ji=(e,t)=>{const{advisor:s}=rr(e);if(s===void 0||s.minSeverity===void 0&&s.unreadable!==!0)return[...t];const{minSeverity:n}=s,r=n!==void 0&&Object.hasOwn(es,n)?es[n]:void 0;return r===void 0?[...t,Vi(n===void 0?"`advisor.minSeverity` is not a string literal codegen can read without evaluating the config: a computed value or key, or a spread that could set or override it.":`\`advisor.minSeverity\` is "${n}", which is not one of "info", "warn" or "error".`)]:t.filter(o=>ts[o.level]>=ts[r])},qi={call:"function",enqueue:"queue",invoke:"service",publish:"topic",schedule:"function"},rn=ar.replace(/\.ts$/u,""),Wi="crons",Hi=lr.replace(/\.ts$/u,""),ie=(e,t)=>`${Me(e)}:${t}`,Ze=(e,t,s)=>t===""?{reason:`the ${s} is not a string literal`}:{to:`${e}:${t}`},Gi=e=>[...e.callEdges.map(t=>{const s=t.target===void 0?{reason:t.reason??"unreadable target"}:{to:`${qi[t.kind]}:${t.target}`};return{file:t.file,kind:t.kind,line:t.line,scope:t.scope,...s}}),...e.queries.map(t=>({file:t.file,kind:"read",line:t.line,scope:t.scope,...Ze("table",t.table,"table name")})),...[...e.inserts,...e.tableWrites].map(t=>({file:t.file,kind:"write",line:t.line,scope:t.scope,...Ze("table",t.table,"written table")})),...e.workflowCalls.map(t=>({file:t.file,kind:"start",line:t.line,scope:t.scope,...Ze("workflow",t.workflow,"workflow name")}))],Yi=e=>e.untracked===!0?"inside a helper only code outside any export calls":"inside a non-exported helper",Qi=e=>{const{scope:t}=e;switch(t.kind){case"export":return[{...e,exportName:t.name}];case"helper":return t.callers.length===0?[{...e,unattributed:Yi(t)}]:t.callers.map(s=>({...e,exportName:s}));default:return[{...e,unattributed:"at module scope"}]}},Xi=e=>Gi(e).flatMap(t=>Qi(t)),Ji=e=>[...e.queues.flatMap(t=>t.topic===void 0?[]:[{file:rn,from:`topic:${t.topic}`,kind:"subscribe",line:0,to:`queue:${t.exportName}`}]),...e.crons.map(t=>{const s=t.workflow===void 0?void 0:`workflow:${t.workflow.exportName}`,n=t.functionPath===void 0?void 0:`function:${t.functionPath}`,r=s??n;return{file:Wi,from:`cron:${t.name}`,kind:"trigger",line:0,...r===void 0?{reason:"the cron has no target"}:{to:r}}})],Zi=e=>new Map(e.flatMap(t=>t.tables.map(s=>[s,t.name]))),et=(e,t)=>t===void 0?e:{...e,module:t},eo=e=>{const t=new Map,s=new Map,n=Zi(e.modules),r=(c,l)=>{s.set(c,[...s.get(c)??[],l])},o=(c,l)=>{t.set(c.id,c),l!==void 0&&r(l,c.id)},a=(c,l)=>{c!==void 0&&r(ie(c.file,c.exportName),l)};for(const c of e.functions){const l=ie(c.filePath,c.exportName),u=`${Me(c.filePath)}.${c.exportName}`;o(et({detail:c.kind,id:`function:${l}`,kind:"function",name:u},Jt(e.modules,c.filePath)),l)}for(const c of e.httpRoutes){const l=ie(c.filePath,c.exportName);o(et({id:`http:${l}`,kind:"http",name:`${c.method} ${c.path}`},Jt(e.modules,c.filePath)),l)}for(const c of e.schema.tables)o(et({id:`table:${c.name}`,kind:"table",name:c.name},n.get(c.name)));for(const c of e.queues){const l=c.topic===void 0?{}:{detail:"subscription"};o({...l,id:`queue:${c.exportName}`,kind:"queue",name:c.exportName},ie(rn,c.exportName)),a(c.handlerSite,`queue:${c.exportName}`)}for(const c of e.topics)o({id:`topic:${c.exportName}`,kind:"topic",name:c.exportName});for(const c of e.workflows)o({id:`workflow:${c.exportName}`,kind:"workflow",name:c.exportName},ie(Hi,c.exportName)),a(c.handlerSite,`workflow:${c.exportName}`);for(const c of e.crons)o({detail:c.cron,id:`cron:${c.name}`,kind:"cron",name:c.name});for(const c of e.services){const l=c.rpcEntrypoint===void 0?"fetch":"rpc";o({detail:c.entrypoint===void 0?l:`${l} · ${c.entrypoint}`,id:`service:${c.name}`,kind:"service",name:c.worker})}return{nodes:t,sites:s}},to=e=>e==="default"?"the default export is not a registered function":`"${e}" is not a registered function`,so=(e,t)=>"from"in e?[e.from]:"unattributed"in e?{reason:e.unattributed}:t.get(ie(e.file,e.exportName))??{reason:to(e.exportName)},no=(e,t,s)=>{if("reason"in e)return{reason:e.reason};const n=so(e,t);if("reason"in n)return n;const{to:r}=e;return s.has(r)?{drawn:n.map(o=>({from:o,kind:e.kind,to:r}))}:{reason:`${r} is not declared`}},tt=e=>`${e.from}|${e.kind}|${e.to}`,ro=e=>`${e.file}|${String(e.line)}|${e.kind}|${e.reason}`,io=e=>{const{nodes:t,sites:s}=eo(e),n=new Map,r=new Map;for(const o of[...Ji(e),...Xi(e)]){const a=no(o,s,t);if("drawn"in a)for(const c of a.drawn)n.set(tt(c),c);else{const c={file:o.file,kind:o.kind,line:o.line,reason:a.reason};r.set(ro(c),c)}}return{edges:[...n.values()].toSorted((o,a)=>tt(o).localeCompare(tt(a))),nodes:[...t.values()].toSorted((o,a)=>o.id.localeCompare(a.id)),modules:e.modules.map(o=>({...o.description===void 0?{}:{description:o.description},...o.installed===!0?{installed:!0}:{},...o.ownsFolder===!1?{ownsFolder:!1}:{},name:o.name,tables:[...o.tables]})),unresolved:[...r.values()].toSorted((o,a)=>o.file.localeCompare(a.file)||o.line-a.line),version:1}},oo=e=>`${fr}export const architecture = ${ur(e,"Record<string, unknown>")};
+`,ao=(e,t)=>{if(!(!t||e.jurisdiction!=="fedramp"))throw new W("CODEGEN_DIAGNOSTIC",'@lunora/codegen: the schema pins data to the "fedramp" jurisdiction, but this app uses Cloudflare Artifacts (`ctx.artifacts`), which supports only the "eu" and "us" jurisdictions. Repo data would be stored outside the declared residency. Remove the `ctx.artifacts` usage, or pin the schema to a jurisdiction Artifacts supports.')},ss=(e,t="api")=>{const s=new Map;for(const n of e){const r=Me(n),o=s.get(r);if(o===void 0){s.set(r,n);continue}if(o!==n){const a=t==="api"?`the generated api.ts would declare "${r}" twice and the dispatch key "${r}:<fn>" would be ambiguous`:`the generated api.ts would declare "${r}" twice in HttpStreamsRef and again in the httpStreams object literal`;throw new W("INTERNAL",`@lunora/codegen: "${o}" and "${n}" both map to the ${t} namespace "${r}" — ${a}. Rename one file so the two differ by more than a non-identifier character (\`-\`, \`.\`, \`/\` and \`_\` all sanitize to \`_\`).`,{status:500})}}},co=(e,t={})=>{const{hasVectors:s=!0,scheduler:n=!1,storage:r=!1,usage:o}=t,a=[];e.tables.some(c=>Bs(c))&&a.push({name:"@lunora/d1",reason:"`.global()` tables are D1-backed, so `_generated/app.ts` imports the D1 `ctx.db` adapter"}),e.tables.some(c=>$s(c))&&a.push({name:"@lunora/hyperdrive",reason:'`.global({ backend: "hyperdrive" })` tables route through `@lunora/hyperdrive/global`'},{name:"@lunora/sql-store",reason:'`.global({ backend: "hyperdrive" })` makes `_generated/app.ts` import the `SqlCtxDbOptions` / `SqlExec` types'}),n&&a.push({name:"@lunora/scheduler",reason:"a declared cron (or `ctx.scheduler` use) makes `_generated/app.ts` import `createScheduler`"}),r&&a.push({name:"@lunora/storage",reason:"a `v.storage()` column, a storage access rule (or `ctx.storage` use) makes `_generated/app.ts` import `createStorage`"}),e.vectorIndexes.length>0&&s&&a.push({name:"@lunora/bindings",reason:"`.vectorize()` indexes make `_generated/shard.ts` import `@lunora/bindings/vectors`"});for(const c of o===void 0?[]:pr)c.requiredPackage!==void 0&&o?.[c.key]===!0&&a.push({name:c.requiredPackage,reason:`\`ctx.${c.contextProperty??c.key}\` usage makes \`_generated/\` import \`${c.moduleSpecifier}\``});return a.filter((c,l)=>a.findIndex(u=>u.name===c.name)===l)},lo=(e,t,s={})=>{if(t===void 0)return;const n=co(e,s).filter(o=>!t.has(o.name));if(n.length===0)return;const r=n.map(o=>`  - ${o.name} — ${o.reason}`).join(`
+`);throw new W("INTERNAL",`@lunora/codegen: this schema's generated code imports packages the project does not declare:
+${r}
+
+Install them with your package manager, then re-run codegen.`)},uo="env.ts",fo=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineEnv";for(const s of t.getDeclarations())if(i.isImportSpecifier(s))return _e(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineEnv":!1;return!1},po=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!i.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(d.ImportDeclaration);return n!==void 0&&_e(n.getModuleSpecifierValue())}return!1},go=e=>{if(i.isIdentifier(e))return fo(e);if(i.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineEnv"&&i.isIdentifier(t)&&po(t)}return!1},mo=e=>{const t=[];for(const s of e.getVariableDeclarations()){const n=s.getInitializer();if(n?.getKind()!==d.CallExpression||!go(n.getExpression()))continue;const o=s.getNameNode();if(!i.isIdentifier(o)){if(s.getVariableStatement()?.hasExportKeyword()!==!0)continue;throw ge(o,"defineEnv exports must be plain named exports (no destructuring)")}const a=Us(s,"member");a!==void 0&&t.push({exportName:a})}return t},ho=(e,t)=>{const s=S(t,uo);if(!O(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),r=mo(n);if(r.length!==0){if(r.length>1)throw ge(n,`lunora/env.ts declares ${r.length.toString()} defineEnv() contracts (${r.map(o=>o.exportName).join(", ")}); exactly one is allowed`);return r[0]}},on="identity.ts",vo=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineIdentity";for(const s of t.getDeclarations())if(i.isImportSpecifier(s))return _e(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineIdentity":!1;return!1},Eo=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!i.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(d.ImportDeclaration);return n!==void 0&&_e(n.getModuleSpecifierValue())}return!1},xo=e=>{if(i.isIdentifier(e))return vo(e);if(i.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineIdentity"&&i.isIdentifier(t)&&Eo(t)}return!1},So=e=>{const t=[];for(const s of e.getVariableDeclarations()){const n=s.getInitializer();if(n?.getKind()!==d.CallExpression||!xo(n.getExpression()))continue;const o=s.getNameNode();if(!i.isIdentifier(o)){if(s.getVariableStatement()?.hasExportKeyword()!==!0)continue;throw ge(o,"defineIdentity exports must be plain named exports (no destructuring)")}const a=Us(s,"member");a!==void 0&&t.push({exportName:a})}return t},yo=(e,t)=>{const s=S(t,on);if(!O(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),r=So(n);if(r.length!==0){if(r.length>1)throw ge(n,`lunora/identity.ts declares ${r.length.toString()} defineIdentity() contracts (${r.map(o=>o.exportName).join(", ")}); exactly one is allowed`);return r[0]}},Ao=new Set(["allowedHosts","deniedHosts","interceptHttps"]),bo=(e,t)=>{const s=v(t);if(s===void 0||!i.isIdentifier(s))return s;const n=s.getText();return v(e.getDescendantsOfKind(d.VariableDeclaration).find(r=>r.getName()===n)?.getInitializer())},No=(e,t)=>e!==void 0&&i.isObjectLiteralExpression(e)&&e.getProperties().some(s=>{if(i.isShorthandPropertyAssignment(s))return t.has(y(s));if(!i.isPropertyAssignment(s)||!t.has(y(s)))return!1;const n=v(s.getInitializer())?.getText();return n!=="false"&&n!=="undefined"}),Po=new Set(["durable"]),wo=new Set(["rollback"]),Io=e=>{const t=e.getExpression();return i.isPropertyAccessExpression(t)?t.getName():t.getText()},Co=new Map([["defineContainer",{keys:Ao,signal:"containerEgressPolicy"}],["defineStep",{keys:wo,signal:"workflowRollback"}],["stream",{keys:Po,signal:"durableStreams"}]]),To=(e,t)=>{const s=Co.get(Io(t));if(s!==void 0)return t.getArguments().some(n=>No(bo(e,n),s.keys))?s.signal:void 0},Oo=(e,t)=>{const s={containerEgressPolicy:!1,durableStreams:!1,secrets:!1,workflowRollback:!1};for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.secrets||(s.secrets=Ar(r).has("secrets"));for(const o of r.getDescendantsOfKind(d.CallExpression)){const a=To(r,o);a!==void 0&&(s[a]=!0)}if(Object.values(s).every(Boolean))break}return s},Ro="createWorker",ko="extend",ns=e=>e!==void 0&&(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))?e.getLiteralValue():void 0,rs=e=>{const t=[],s=ns(P(e,"backupCron"));s!==void 0&&t.push(s);const n=P(e,"crons");if(n===void 0||!i.isObjectLiteralExpression(n))return t;for(const r of n.getProperties()){if(!i.isPropertyAssignment(r)&&!i.isMethodDeclaration(r))continue;const o=ns(r.getNameNode());o!==void 0&&t.push(o)}return t},Fo=e=>{const t=A(e.getExpression()),[s]=e.getArguments();if(s===void 0)return[];if(t===Ro)return i.isObjectLiteralExpression(s)?rs(s):[];if(t!==ko||!(i.isArrowFunction(s)||i.isFunctionExpression(s)))return[];const n=Vs(s.getBody());return n===void 0?[]:rs(n)},Do=(e,t)=>{const s=[];for(const{filePath:n}of Ke(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const o of r.getDescendantsOfKind(d.CallExpression))s.push(...Fo(o))}return[...new Set(s)]},an=e=>{if(e.kind==="id")return e.tableName;if(!(e.kind!=="array"&&e.kind!=="optional"))return e.inner===void 0?void 0:an(e.inner)},Lo=e=>{const t=new Set(e.tables.map(s=>s.name));return e.tables.some(s=>Object.values(s.shape).some(n=>{const r=an(n);return r!==void 0&&t.has(r)}))},Mo=(e,t)=>{const s=new Map,n=new Map;for(const r of e)s.set(r.name,`workflow "${r.exportName}"`),n.set(r.className,`workflow "${r.exportName}"`);for(const r of t){const o=s.get(r.name);if(o!==void 0)throw new W("DUPLICATE_WORKFLOW_NAME",`Duplicate deployed name "${r.name}": produced by both ${o} and agent "${r.exportName}". Workflow and agent names share one account-wide namespace and must be unique together.`,{status:500});const a=n.get(r.className);if(a!==void 0)throw new W("DUPLICATE_WORKFLOW_CLASS",`Duplicate generated class "${r.className}": produced by both ${a} and agent "${r.exportName}". Workflow and agent export names must yield unique generated class names.`,{status:500})}},_o=e=>{const{lunoraDirectory:t,project:s,projectRoot:n,schema:r}=e,o=yo(s,t),a=ho(s,t),c=dr(s,t),{queues:l,topics:u}=cr(s,t),g=Rr(n),f=mr(s,t);Mo(c,f);const m=hr(s,t),x=kr(s,t),z=vr(s,t,c,f),B=Do(s,t),N=Oo(s,t),k=Or(s,t),j=br(s,t);j.browser=j.browser||k.usesSandboxBrowser;const G=Lr(j,Ys(n,e.target),{agents:f.length>0,commitOrderedTables:r.tables.some(T=>T.commitOrdered===!0),cronTriggers:z.length>0,crossShardFanout:r.tables.some(T=>Dr(T)),containerEgressPolicy:N.containerEgressPolicy,containerRuntimeScheduling:m.some(T=>T.schedulingPolicy==="durable_object"),containerSandboxTools:m.some(T=>T.sandbox===!0),durableStreams:N.durableStreams,globalTables:r.tables.some(T=>T.shardMode==="global"),queues:l.length>0,relationGraph:Lo(r),secrets:N.secrets,services:g.length>0,topics:u.length>0,vectorStore:r.vectorIndexes.length>0,workerLoaders:k.usesSandboxLoader,workflowRollback:N.workflowRollback,workflowSchedules:c.some(T=>T.schedules!==void 0)}),F=G.usage,te=gr(F),oe=G.signals.vectorStore!==!1,ae=G.signals.services===!1?[]:g,se=Nr(n),he=se??new Set,q=he.has("lunorash");lo(r,se,{hasVectors:oe,scheduler:F.scheduler||z.length>0,storage:F.storage||x.rules.length>0||Object.keys(Qs(r)).length>0,usage:F});const L=O(S(t,"flags.ts")),M=O(S(t,"notify.ts"));return{agents:f,capabilities:te,containers:m,crons:z,dataModelContent:Br(r),declaredDependencies:se,dependencies:he,entryCronTriggers:B,env:a,featureUsage:F,hasFlags:L,hasNotify:M,identity:o,platformGate:{...G,diagnostics:[...Mr(n,e.target),...G.diagnostics]},queues:l,serverContent:zr({agents:f,capabilities:te,containers:m,env:a,hasVectors:oe,hasFlags:L,hasNotify:M,identity:o,queues:l,schema:r,generatedDirectory:S(t,"_generated"),services:ae,storageRuleBuckets:x.rules.map(T=>T.bucket),topics:u,useUmbrella:q,workflows:c}),services:ae,storageRulesMetadata:x,topics:u,usesSandbox:k.usesSandboxBrowser||k.usesSandboxContainer||k.usesSandboxFs,useUmbrella:q,workflows:c}},cn=new Set(["delete","get","head","options","patch","post","put"]),Ko=new Set(["handler","stream"]),zo=/\/(?:_|admin|internal|superuser|sudo|root|debug)/iu,is=new Set(["ADMIN_TOKEN","adminToken","assertAdmin","assertAuth","auth","Authorization","getSession","identity","isAdmin","requireAdmin","requireAuth","requireRole","verifyAdmin"]),Bo=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!cn.has(t.getName()))return;const s=t.getExpression();if(!i.isIdentifier(s)||s.getText()!=="httpRoute")return;const n=e.getArguments()[0];if(!(!n||!i.isStringLiteral(n)))return{method:t.getName().toUpperCase(),path:n.getLiteralValue()}},$o=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;let s=t.getExpression();for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n)||cn.has(n.getName()))break;s=n.getExpression()}return Bo(s)},Uo=e=>{for(const t of e.getDescendantsOfKind(d.PropertyAccessExpression))if(is.has(t.getName()))return!0;for(const t of e.getDescendantsOfKind(d.CallExpression)){const s=t.getExpression();if(i.isIdentifier(s)&&is.has(s.getText()))return!0}return!1},Vo=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=s.getExpression();if(!i.isPropertyAccessExpression(n)||!Ko.has(n.getName()))return;const r=$o(s);if(!r||!zo.test(r.path))return;const o=s.getArguments()[0],a=o!==void 0&&(i.isArrowFunction(o)||i.isFunctionExpression(o))&&Uo(o);return{exportName:K(e)??e.getName(),file:t,method:r.method,path:r.path,usesGuard:a}},jo=(e,t)=>{const s=[];for(const n of V(e)){const r=Vo(n,t);r&&s.push(r)}return s},qo=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...jo(r,w(t,n)))}return s},Wo=e=>{const t=e.getText(),s=n=>{const r=n.getNameNode();return i.isIdentifier(r)&&r.getText()===t};for(const n of e.getAncestors())if(!(!i.isArrowFunction(n)&&!i.isFunctionExpression(n)&&!i.isFunctionDeclaration(n)))for(const r of n.getParameters()){const o=r.getDescendantsOfKind(d.BindingElement).find(a=>s(a));if(o!==void 0)return o}},Ho=e=>{let t=e;for(;;){const s=t.getParent();if(!i.isObjectBindingPattern(s))return;const n=s.getParent();if(i.isBindingElement(n)){t=n;continue}return i.isParameterDeclaration(n)?me(t):void 0}},Go=e=>{const t=e.getText();if(!e.getAncestors().some(o=>{const a=i.isFunctionLikeDeclaration(o)||i.isArrowFunction(o)?o.getParameters()[1]:void 0,c=a?.getNameNode();return a!==void 0&&(i.isIdentifier(c)?c.getText()===t:a.getDescendantsOfKind(d.BindingElement).some(l=>l.getName()===t))&&Zt(a)}))return!1;const n=R(e),r=i.isParameterDeclaration(n)?n:n?.getFirstAncestorByKind(d.Parameter);return r!==void 0&&(i.isParameterDeclaration(n)||i.isBindingElement(n))&&Zt(r)},os=(e,t)=>{const s=e.getParent();if(i.isPropertyAccessExpression(s)&&s.getNameNode()===e||i.isPropertyAssignment(s)&&s.getNameNode()===e)return!1;if(e.getText()===t)return!0;const n=Wo(e);return n!==void 0&&Ho(n)===t?!0:t==="args"&&Go(e)},ln=(e,t)=>i.isIdentifier(e)?os(e,t):e.getDescendantsOfKind(d.Identifier).some(s=>os(s,t)),Yo=e=>{let t=e;for(;i.isPropertyAccessExpression(t)||i.isElementAccessExpression(t)||i.isNonNullExpression(t);)t=t.getExpression();return i.isIdentifier(t)?t:void 0},as=e=>{const t=i.isIdentifier(e)?R(e):void 0;return i.isVariableDeclaration(t)&&i.isIdentifier(t.getNameNode())&&!xt(t)?t.getInitializer():void 0},lt=e=>ln(e,"args"),Q=e=>{if(!i.isIdentifier(e))return;const t=e.getText(),s=e.getFirstAncestor(a=>i.isArrowFunction(a)||i.isFunctionExpression(a)||i.isFunctionDeclaration(a));if(s===void 0)return;const n=e.getStart();let r,o=-1;for(const a of s.getDescendantsOfKind(d.VariableDeclaration)){if(a.getName()!==t)continue;const c=a.getInitializer(),l=a.getStart();c!==void 0&&l<n&&l>o&&(r=c,o=l)}return r},U=e=>{if(lt(e))return!0;const t=Q(e);return t!==void 0&&lt(t)},Qo=e=>{if(i.isCallExpression(e)||i.isNewExpression(e))return!1;const t=Q(e);return t===void 0||!(i.isCallExpression(t)||i.isNewExpression(t))},ee=e=>{if(Je(e))return!0;const t=as(e);if(t!==void 0&&Je(t))return!0;const s=t??e;return(i.isIdentifier(s)?[s]:s.getDescendantsOfKind(d.Identifier)).some(r=>{const o=as(r);return o!==void 0&&Je(o)})},Pe=(e,t)=>ln(e,t),Xo=(e,t)=>{if(Pe(e,t))return!0;const s=Q(e);if(s!==void 0&&Pe(s,t))return!0;const n=Yo(e);if(n!==void 0){const r=Q(n);return r!==void 0&&Pe(r,t)}return!1},Jo=e=>!i.isPropertyAccessExpression(e)||e.getName()!=="run"?!1:$(e.getExpression(),["ai"]),Zo=(e,t)=>{if(!Jo(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!U(s)||ee(s)))return{scope:h(e),file:t,line:e.getStartLineNumber()}},ea=(e,t)=>I(e,t,Zo),ta=new Set(["generateText","streamText"]),sa=new Set(["messages","prompt","system"]),na=[{methods:new Set(["delete","insert","insertManyUnsafe","patch","replace"]),prefixes:["context.db","ctx.db"]},{methods:new Set(["run","runAction","runMutation"]),prefixes:["context","ctx"]},{methods:new Set(["fetch"]),prefixes:["context","ctx"]},{methods:new Set(["queue","send"]),prefixes:["context.email","context.mail","ctx.email","ctx.mail"]}],ra=(e,t)=>na.some(s=>s.methods.has(t)&&s.prefixes.some(n=>e===n||e.startsWith(`${n}.`))),ia=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=t.getName(),n=[$r(t.getExpression()),t.getExpression().getText()].find(r=>r!==void 0&&ra(r,s));return n===void 0?void 0:`${n}.${s}`},oa=e=>{for(const t of e.getDescendantsOfKind(d.CallExpression)){const s=ia(t);if(s!==void 0)return s}},aa=e=>{const t=new Set,s=e.getFirstAncestor(o=>i.isArrowFunction(o)||i.isFunctionExpression(o)||i.isFunctionDeclaration(o)),[n]=s?.getParameters()??[],r=n?.getNameNode();if(r===void 0||!i.isObjectBindingPattern(r))return t;for(const o of r.getElements()){const a=me(o),c=o.getNameNode();if(a==="args"&&i.isObjectBindingPattern(c))for(const l of c.getElements())t.add(l.getName())}return t},ca=e=>{if(lt(e))return!0;const t=aa(e);return t.size===0?!1:e.getDescendantsOfKind(d.Identifier).some(s=>t.has(s.getText()))},la=e=>{for(const t of e.getProperties()){if(!i.isPropertyAssignment(t)||!sa.has(y(t)))continue;const s=t.getInitializer();if(s!==void 0&&ca(s))return!0}return!1},da=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(d.CallExpression)){const r=A(n.getExpression());if(r===void 0||!ta.has(r))continue;const[o]=n.getArguments();if(o===void 0||!i.isObjectLiteralExpression(o))continue;let a;for(const c of o.getDescendantsOfKind(d.CallExpression))if(A(c.getExpression())==="tool"&&(a=oa(c),a!==void 0))break;a!==void 0&&s.push({scope:h(n),file:t,line:n.getStartLineNumber(),method:r,sideEffect:a,userInputDerived:la(o)})}return s},ua=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...da(r,w(t,n)))}return s},fa=e=>$(e,["fetch"]),pa=(e,t)=>{if(!fa(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!U(s)))return{scope:h(e),file:t,line:e.getStartLineNumber()}},ga=(e,t)=>I(e,t,pa),bt=(e,t=new Set)=>{if(t.has(e))return!0;t.add(e);try{return e.getProperties().some(s=>{if(!i.isSpreadAssignment(s))return!1;const n=$e(s.getExpression());return n===void 0||bt(n,t)})}finally{t.delete(e)}},ma=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return{objects:[],opaque:!0};const s=D(t,"args");if(!s)return{objects:[],opaque:!1};if(!i.isPropertyAssignment(s))return{objects:[],opaque:!0};const n=s.getInitializer(),r=n===void 0?void 0:$e(n);return r===void 0?{objects:[],opaque:!0}:{objects:[r],opaque:bt(r)}},ha=e=>{const t=[];let s=!1,n=e;for(;i.isCallExpression(n);){const r=n.getExpression();if(!i.isPropertyAccessExpression(r))break;if(r.getName()==="input"){const o=n.getArguments()[0],a=o!==void 0&&i.isExpression(o)?$e(o):void 0;a===void 0?s=!0:(t.push(a),s||=bt(a))}n=r.getExpression()}return{objects:t,opaque:s}},Nt=(e,t)=>t?ha(t):ma(e),dn=(e,t)=>{if(t.has(e))return[];t.add(e);try{return e.getProperties().flatMap(s=>{if(i.isSpreadAssignment(s)){const n=$e(s.getExpression());return n===void 0?[]:dn(n,t)}return i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)?[y(s)]:[]})}finally{t.delete(e)}},va=e=>e.flatMap(t=>dn(t,new Set)),Ea=new Set(["check","length","max"]),dt=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(!(!i.isPropertyAccessExpression(t)||t.getExpression().getText()!=="v"))return t.getName()},xa=e=>[e,...e.getDescendants()].filter(t=>dt(t)!==void 0),Sa=e=>{let t=e;for(;;){const s=t.getParent();if(!s||!i.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;const n=s.getParent();if(!n||!i.isCallExpression(n)||n.getExpression()!==s)return!1;if(Ea.has(s.getName()))return!0;t=n}},ya=e=>{const t=[],s=[];for(const n of e)for(const r of n.getProperties()){if(!i.isPropertyAssignment(r))continue;const o=r.getInitializer();if(!o)continue;const a=xa(o),c=y(r);a.some(l=>dt(l)==="any")?t.push(c):a.some(l=>dt(l)==="string"&&!Sa(l))&&s.push(c)}return{anyArgs:t,unboundedStringArgs:s}},Aa=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=H(s);if(n?.visibility!=="public")return;const{objects:r}=Nt(s,n.receiver),{anyArgs:o,unboundedStringArgs:a}=ya(r);if(!(o.length===0&&a.length===0))return{anyArgs:o,exportName:K(e)??e.getName(),file:t,line:s.getStartLineNumber(),unboundedStringArgs:a}},ba=(e,t)=>{const s=[];for(const n of V(e)){const r=Aa(n,t);r&&s.push(r)}return s},Na=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...ba(r,w(t,n)))}return s},st=e=>e?.getKind()===d.TrueKeyword,Pa=e=>e?.getKind()===d.FalseKeyword,wa=e=>e!==void 0&&i.isNumericLiteral(e)&&e.getLiteralValue()===0,Ia=new Set(["lunoraAuthAdapter","lunoraD1Adapter"]),Ca=e=>!e||!i.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>i.isCallExpression(t)&&A(t.getExpression())==="scim"),Ta=e=>e!==void 0&&i.isCallExpression(e)&&Ia.has(A(e.getExpression())??""),Oa=e=>!e||!i.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>i.isStringLiteral(t)&&t.getLiteralText()==="*"),Ra=e=>{const t=P(e,"advanced"),s=P(e,"emailAndPassword"),n=P(e,"session");return{analyzable:!0,disableCsrfCheck:st(P(t,"disableCSRFCheck")),emailPasswordEnabled:st(P(s,"enabled")),requireEmailVerification:st(P(s,"requireEmailVerification")),scimOnNonTransactionalAdapter:Ca(P(e,"plugins"))&&Ta(P(e,"database")),secureCookiesDisabled:Pa(P(t,"useSecureCookies")),sessionFreshAgeZero:wa(P(n,"freshAge")),trustedOriginsWildcard:Oa(P(e,"trustedOrigins"))}},ka=()=>({analyzable:!1,disableCsrfCheck:!1,emailPasswordEnabled:!1,requireEmailVerification:!1,scimOnNonTransactionalAdapter:!1,secureCookiesDisabled:!1,sessionFreshAgeZero:!1,trustedOriginsWildcard:!1}),Fa=(e,t)=>{if(A(e.getExpression())!=="createAuth")return;const s=e.getArguments()[0],n=s!==void 0&&i.isObjectLiteralExpression(s)&&s.getProperties().some(o=>i.isSpreadAssignment(o)),r=s!==void 0&&i.isObjectLiteralExpression(s)&&!n?Ra(s):ka();return{scope:h(e),file:t,line:e.getStartLineNumber(),...r}},Da=(e,t)=>Pr(e,t,Fa),La=(e,t)=>{if(!i.isPropertyAccessExpression(e))return;const s=e.getName();if(t.methods.has(s))return Xs(e.getExpression(),t.matchReceiver)?s:void 0},Ma=(e,t,s)=>{const n=La(e.getExpression(),s);if(n===void 0)return;const r=e.getArguments()[s.argIndex];if(!(!r||!U(r)||ee(r))&&!(s.requireUnmodifiedReach===!0&&!Qo(r)))return{scope:h(e),file:t,line:e.getStartLineNumber(),method:n}},Ue=(e,t,s)=>I(e,t,(n,r)=>Ma(n,r,s)),_a=new Set(["content","pdf","scrape","screenshot"]),Ka=(e,t)=>Ue(e,t,{argIndex:0,matchReceiver:s=>s==="ctx.browser",methods:_a}),un=e=>{const t=qs(e);return t===void 0?void 0:`${Me(t.slice(0,-1).join("/"))}:${String(t.at(-1))}`},fn=(e,t)=>{if(!i.isPropertyAccessExpression(e))return;const s=e.getExpression();if(!i.isPropertyAccessExpression(s))return;const n=s.getExpression();return i.isPropertyAccessExpression(n)&&n.getName()===t?s.getName():void 0},za=e=>{if(!i.isPropertyAccessExpression(e))return!1;const t=e.getExpression();return i.isPropertyAccessExpression(t)&&t.getName()==="scheduler"||i.isIdentifier(t)&&t.getText()==="scheduler"},Ba=new Map([["publish",{kind:"publish",surface:"topics"}],["publishBatch",{kind:"publish",surface:"topics"}],["send",{kind:"enqueue",surface:"queues"}],["sendBatch",{kind:"enqueue",surface:"queues"}]]),$a=(e,t)=>{const s=un(t);return s!==void 0?{kind:"call",target:s}:e!=="run"&&t!==void 0?{kind:"call",reason:"the function reference is not a static api.* / internal.* chain"}:void 0},Ua=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=t.getName(),[n,r]=e.getArguments();if(js.has(s))return $a(s,n);if((s==="runAfter"||s==="runAt")&&za(t)){const c=un(r);return c===void 0?{kind:"schedule",reason:"the scheduled function is not a static api.* / internal.* chain"}:{kind:"schedule",target:c}}const o=Ba.get(s),a=o===void 0?void 0:fn(t,o.surface);return o===void 0||a===void 0?void 0:{kind:o.kind,target:a}},cs=(e,t,s)=>s===void 0?void 0:{...s,file:t,line:e.getStartLineNumber(),scope:h(e)},Va=(e,t)=>[...I(e,t,(s,n)=>cs(s,n,Ua(s))),...at(e,t,d.PropertyAccessExpression,(s,n)=>{const r=fn(s,"services");return cs(s,n,r===void 0?void 0:{kind:"invoke",target:r})})],ja=new Set(["createBrowser","createInboundEmailHandler","createPayment"]),qa=new Set(["RateLimiter"]),Wa=new Set(["extend"]),ls="lunora",Ha=["vite.config.ts","vite.config.mts","vite.config.js","vite.config.mjs"],pn=e=>{const t=[],s=[];let n=!1;for(const r of e.getProperties()){if(i.isSpreadAssignment(r)){n=!0;continue}if(i.isPropertyAssignment(r)){const o=y(r);t.push(o),r.getInitializer()?.getKind()===d.TrueKeyword&&s.push(o);continue}(i.isShorthandPropertyAssignment(r)||i.isMethodDeclaration(r))&&t.push(y(r))}return{analyzable:!n,presentKeys:t,trueKeys:s}},ut=e=>e&&i.isObjectLiteralExpression(e)?pn(e):{analyzable:!1,presentKeys:[],trueKeys:[]},Ga=e=>{const t=e&&(i.isArrowFunction(e)||i.isFunctionExpression(e))?e:void 0,s=t&&Vs(t.getBody());return s?pn(s):{analyzable:!1,presentKeys:[],trueKeys:[]}},Ya=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(d.CallExpression)){const r=A(n.getExpression());r!==void 0&&(ja.has(r)?s.push({callee:r,file:t,line:n.getStartLineNumber(),...ut(n.getArguments()[0])}):Wa.has(r)&&s.push({callee:r,file:t,line:n.getStartLineNumber(),...Ga(n.getArguments()[0])}))}for(const n of e.getDescendantsOfKind(d.NewExpression)){const r=A(n.getExpression());r===void 0||!qa.has(r)||s.push({callee:r,file:t,line:n.getStartLineNumber(),...ut(n.getArguments()[0])})}return s},Qa=(e,t)=>{for(const s of Ha){const n=S(t,s);if(!O(n))continue;const r=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=[];for(const a of r.getDescendantsOfKind(d.CallExpression))A(a.getExpression())===ls&&o.push({callee:ls,file:s,line:a.getStartLineNumber(),...ut(a.getArguments()[0])});return o}return[]},Xa=(e,t)=>{const s=[];for(const{displayPath:n,filePath:r}of Ke(t)){const o=e.getSourceFile(r)??e.addSourceFileAtPath(r);s.push(...Ya(o,n))}return s.push(...Qa(e,Ne(t))),s},ds="ctx.containers.",Ja=e=>{if(!e.startsWith(ds))return!1;const t=e.slice(ds.length);return t.length>0&&!t.includes(".")},Za=(e,t)=>Ue(e,t,{argIndex:0,matchReceiver:Ja,methods:new Set(["get"])}),ec=new Set(["allow","deny","setAllowed"]),tc=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return!1;const s=D(t,"enableInternet");return s!==void 0&&i.isPropertyAssignment(s)&&i.isTrueLiteral(s.getInitializerOrThrow())},sc=(e,t)=>{const s=e.getExpression();if(!(!i.isPropertyAccessExpression(s)||s.getName()!=="start"||!tc(e)))return{detail:"enableInternet: true",scope:h(e),file:t,kind:"enable_internet",line:e.getStartLineNumber()}},nc=(e,t)=>{const s=e.getExpression();if(!i.isPropertyAccessExpression(s)||!ec.has(s.getName()))return;const n=s.getExpression();if(!(!i.isPropertyAccessExpression(n)||n.getName()!=="egress"))return{detail:s.getName(),scope:h(e),file:t,kind:"egress_relaxation",line:e.getStartLineNumber()}},rc=(e,t)=>sc(e,t)??nc(e,t),ic=(e,t)=>I(e,t,rc),oc=new Set(["defineExportSink","r2Sink","webhookExportSink"]),ac=e=>{const t=e.getExpression();if(!i.isIdentifier(t))return;const s=t.getText();return oc.has(s)?s:void 0},cc=e=>{const t=[],s=[];for(const n of e.getProperties()){if(i.isSpreadAssignment(n))return{analyzable:!1,emptyKeys:[],presentKeys:[]};if(i.isPropertyAssignment(n)){const r=y(n);t.push(r);const o=n.getInitializer();o&&i.isStringLiteral(o)&&o.getLiteralText()===""&&s.push(r);continue}(i.isShorthandPropertyAssignment(n)||i.isMethodDeclaration(n)||i.isGetAccessorDeclaration(n))&&t.push(y(n))}return{analyzable:!0,emptyKeys:s,presentKeys:t}},lc=(e,t)=>{const s=[];for(const{displayPath:n,filePath:r}of Ke(t)){const o=e.getSourceFile(r)??e.addSourceFileAtPath(r);for(const a of o.getDescendantsOfKind(d.CallExpression)){const c=ac(a);if(c===void 0)continue;const l=a.getArguments()[0],u=l&&i.isObjectLiteralExpression(l)?cc(l):{analyzable:!1,emptyKeys:[],presentKeys:[]};s.push({analyzable:u.analyzable,emptyKeys:u.emptyKeys,factory:c,file:n,line:a.getStartLineNumber(),presentKeys:u.presentKeys})}}return s},dc=new Map([["dbRateLimit",2],["rateLimit",2],["verifyTurnstileMiddleware",0]]),uc=new Set(["dbRateLimit","rateLimit"]),fc=e=>{const t=Hs(e);if(!t)return!1;const s=D(t,"failOpen");return s!==void 0&&i.isPropertyAssignment(s)&&s.getInitializer()?.getKind()===d.TrueKeyword},pc=(e,t)=>{const s=A(e.getExpression());if(s===void 0)return;const n=dc.get(s);if(n!==void 0)return{callee:s,scope:h(e),failOpen:fc(e.getArguments()[n]),file:t,limitName:uc.has(s)?Ws(e):"",line:e.getStartLineNumber()}},gc=(e,t)=>I(e,t,pc),mc=new Set(["boolean","number","object","string"]),hc=e=>{const t=e.getName();if(!mc.has(t))return;const s=e.getExpression();return $(s,["flags"])||$(s,["flags","details"])?t:void 0},vc=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=hc(t);if(s===void 0)return;const n=e.getArguments()[0];if(!n||!(i.isStringLiteral(n)||i.isNoSubstitutionTemplateLiteral(n)))return;const r=n.getLiteralValue();return r.length>0?{key:r,type:s}:void 0},Ec=(e,t)=>{const s=new Map;for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const o of r.getDescendantsOfKind(d.CallExpression)){const a=vc(o);a&&!s.has(a.key)&&s.set(a.key,a.type)}}return[...s.entries()].map(([n,r])=>({key:n,type:r})).toSorted((n,r)=>n.key.localeCompare(r.key))},xc=e=>{const t=e.getInitializer();if(!t||!i.isCallExpression(t))return;const s=H(t);if(s?.kind!=="query")return;const n=wr(t,s.receiver);return n?{exportName:K(e)??e.getName(),handler:n}:void 0},us=e=>{const t=e.getParent();return t&&i.isPropertyAccessExpression(t)&&t.getExpression()===e?t:void 0},Sc=e=>{const t=us(e);if(!t)return"ctx.flags";if(t.getName()==="details"){const s=us(t);return s?`ctx.flags.details.${s.getName()}`:"ctx.flags.details"}return`ctx.flags.${t.getName()}`},yc=(e,t)=>{const s=[];for(const n of Be(e.handler,"flags"))s.push({callee:Sc(n),exportName:e.exportName,file:t,line:n.getStartLineNumber()});return s},Ac=(e,t)=>{const s=[];for(const n of V(e)){const r=xc(n);r&&s.push(...yc(r,t))}return s},bc=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Ac(r,w(t,n)))}return s},Nc=e=>!i.isPropertyAccessExpression(e)||e.getName()!=="boolean"?!1:$(e.getExpression(),["flags"]),Pc=e=>{if(e?.getKind()===d.TrueKeyword)return!0;if(e?.getKind()===d.FalseKeyword)return!1},wc=(e,t)=>{if(!Nc(e.getExpression()))return;const[s,n]=e.getArguments();if(!s||!(i.isStringLiteral(s)||i.isNoSubstitutionTemplateLiteral(s)))return;const r=s.getLiteralValue(),o=Pc(n);if(!(r.length===0||o===void 0))return{defaultValue:o,scope:h(e),file:t,key:r,line:e.getStartLineNumber()}},Ic=(e,t)=>I(e,t,wc),Cc=e=>{const t=e.getType().getProperty("~standard");if(!t)return;const s=t.getTypeAtLocation(e).getProperty("types");if(!s)return;const n=s.getTypeAtLocation(e).getNonNullableType().getProperty("output");if(!n)return;const r=n.getTypeAtLocation(e),o=r.getText(e);if(!o||o==="any"||o==="never"||Hr(o))return;const a=e.getSourceFile().getFilePath();if(Gr(r,e,a)){const c=Yr(r,e,a,0,new Set);return c===void 0&&Qr(o),c}return o},Tc=e=>{const t=e.getExpression();return i.isPropertyAccessExpression(t)&&t.getName()==="withGeoIndex"},Oc=e=>{const t=e.getArguments()[0];return t&&i.isStringLiteral(t)?t.getLiteralText():""},Rc=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of r.getDescendantsOfKind(d.CallExpression))Tc(a)&&s.push({file:o,indexName:Oc(a),line:a.getStartLineNumber()})}return s},fe=e=>e!==void 0&&(i.isArrowFunction(e)||i.isFunctionExpression(e))?e:void 0,gn=e=>{const t=e.getArguments()[0],s=fe(t);if(s!==void 0)return s;if(t===void 0||!i.isObjectLiteralExpression(t))return;const n=D(t,"handler");return n!==void 0&&i.isPropertyAssignment(n)?fe(n.getInitializer()):void 0},kc=new Set(["delete","get","head","options","patch","post","put"]),Fc=new Set(["handler","stream"]),Dc=new Set(["runAction","runMutation"]),Lc=new Set(["delete","insert","insertManyUnsafe","patch","replace"]),pe=(e,t)=>e!==void 0&&i.isIdentifier(e)&&e.getText()===t,mn=(e,t)=>{if(!(e===void 0||!i.isObjectBindingPattern(e))){for(const s of e.getElements())if(me(s)===t){const r=s.getNameNode();return i.isIdentifier(r)?r.getText():void 0}}},fs=(e,t)=>{const s=e.getParameters()[0]?.getNameNode();if(s!==void 0)return t?i.isIdentifier(s)?s.getText():void 0:mn(s,"ctx")},ps=(e,t)=>{const s=e.getParameters()[t?1:0]?.getNameNode();return t?s!==void 0&&i.isIdentifier(s)?s.getText():void 0:mn(s,"request")},gs=(e,t)=>{const s=e.getBody(),n=s.getDescendantsOfKind(d.CallExpression);i.isCallExpression(s)&&n.unshift(s);for(const r of n){const o=r.getExpression();if(!i.isPropertyAccessExpression(o))continue;const a=o.getName(),c=o.getExpression();if(Dc.has(a)&&pe(c,t))return a;if(Lc.has(a)&&i.isPropertyAccessExpression(c)&&c.getName()==="db"&&pe(c.getExpression(),t))return`db.${a}`}},ms=(e,t)=>{const s=e.getBody();for(const n of s.getDescendantsOfKind(d.PropertyAccessExpression))if(n.getName()==="auth"&&pe(n.getExpression(),t))return!0;for(const n of s.getDescendantsOfKind(d.VariableDeclaration)){const r=n.getNameNode();if(!(!i.isObjectBindingPattern(r)||!pe(n.getInitializer(),t))){for(const o of r.getElements())if(me(o)==="auth")return!0}}return!1},Mc=/signature|hmac|digest|(?:^|[_-])sig(?:[_-]|$)/i,_c=(e,t)=>{const s=e.getExpression();if(!i.isPropertyAccessExpression(s)||s.getName()!=="get"&&s.getName()!=="has")return!1;const n=s.getExpression();return i.isPropertyAccessExpression(n)&&n.getName()==="headers"&&pe(n.getExpression(),t)},Kc=e=>[...i.isStringLiteral(e)?[e.getLiteralText()]:[],...e.getDescendantsOfKind(d.StringLiteral).map(t=>t.getLiteralText())],hn=(e,t)=>{const s=e.getVariableDeclaration(t)?.getInitializer();return s===void 0?[]:Kc(s)},zc=(e,t)=>{const s=e.getText();for(let n=e.getParent();n!==void 0;n=n.getParent()){if(!i.isArrowFunction(n)&&!i.isFunctionExpression(n)||!n.getParameters().some(c=>c.getName()===s))continue;const r=n.getParent();if(!i.isCallExpression(r))return[];const o=r.getExpression();if(!i.isPropertyAccessExpression(o))return[];const a=o.getExpression();return i.isIdentifier(a)?hn(t,a.getText()):[]}return[]},Bc=e=>{const t=e.getArguments()[0];if(t===void 0)return[];if(i.isStringLiteral(t))return[t.getLiteralText()];if(!i.isIdentifier(t))return[];const s=e.getSourceFile(),n=hn(s,t.getText());return n.length>0?n:zc(t,s)},hs=(e,t)=>{if(t===void 0)return!1;const s=e.getBody(),n=s.getDescendantsOfKind(d.CallExpression);return i.isCallExpression(s)&&n.unshift(s),n.some(r=>_c(r,t)&&Bc(r).some(o=>Mc.test(o)))},$c=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!Fc.has(t.getName()))return;let s=t.getExpression();for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))return;const r=n.getName();if(kc.has(r)){const o=n.getExpression();return i.isIdentifier(o)&&o.getText()==="httpRoute"?r.toUpperCase():void 0}s=n.getExpression()}},Uc=(e,t)=>{const s=e.getExpression();if(i.isIdentifier(s)&&s.getText()==="httpAction"){const c=fe(e.getArguments()[0]),l=c&&fs(c,!0);if(!c||l===void 0||hs(c,ps(c,!0)))return;const u=gs(c,l);return u===void 0?void 0:{scope:h(e),file:t,kind:"httpAction",line:e.getStartLineNumber(),readsAuth:ms(c,l),sideEffect:u}}const n=$c(e);if(n===void 0)return;const r=fe(e.getArguments()[0]),o=r&&fs(r,!1);if(!r||o===void 0||hs(r,ps(r,!1)))return;const a=gs(r,o);return a===void 0?void 0:{scope:h(e),file:t,kind:"httpRoute",line:e.getStartLineNumber(),method:n,readsAuth:ms(r,o),sideEffect:a}},Vc=(e,t)=>I(e,t,Uc),jc=new Set(["btoa","encodeURI","encodeURIComponent","isSafeHeaderValue","Number","parseFloat","parseInt"]),qc=new Set(["append","set"]),vn=e=>e!==void 0&&(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))?e.getLiteralText():"",vs=(e,t)=>(i.isCallExpression(e)?[e,...e.getDescendantsOfKind(d.CallExpression)]:e.getDescendantsOfKind(d.CallExpression)).some(n=>jc.has(A(n.getExpression())??"")&&Pe(n,t)),Wc=(e,t)=>{if(vs(e,t))return!0;const s=Q(e);return s!==void 0&&vs(s,t)},ft=(e,t)=>Xo(e,t)&&!Wc(e,t),Hc=e=>{if(i.isPropertyAccessExpression(e)&&e.getName()==="headers")return!0;const t=Q(e);return t!==void 0&&i.isNewExpression(t)&&A(t.getExpression())==="Headers"},Oe=e=>{if(e===void 0)return;if(i.isObjectLiteralExpression(e))return e;const t=Q(e);return t!==void 0&&i.isObjectLiteralExpression(t)?t:void 0},Pt=(e,t,s)=>{for(const n of e.getProperties())if(i.isPropertyAssignment(n)){const r=n.getInitializer();r!==void 0&&ft(r,s.requestName)&&s.rows.push({scope:s.scope,file:s.relativePath,headerName:vn(n.getNameNode()),line:r.getStartLineNumber(),via:t})}else if(i.isShorthandPropertyAssignment(n)){const r=n.getNameNode();ft(r,s.requestName)&&s.rows.push({scope:s.scope,file:s.relativePath,headerName:y(n),line:r.getStartLineNumber(),via:t})}else if(i.isSpreadAssignment(n)){const r=Oe(n.getExpression());r!==void 0&&Pt(r,t,s)}},En=(e,t)=>{const s=Oe(e);if(s===void 0)return;const n=D(s,"headers");if(n===void 0||!i.isPropertyAssignment(n))return;const r=Oe(n.getInitializer());r!==void 0&&Pt(r,"response-init",t)},Gc=(e,t)=>{const s=A(e.getExpression());if(s==="Response")En(e.getArguments()[1],t);else if(s==="Headers"){const n=Oe(e.getArguments()[0]);n!==void 0&&Pt(n,"headers-ctor",t)}},Yc=(e,t)=>{const s=e.getExpression();if(!i.isPropertyAccessExpression(s))return;const n=s.getName(),r=s.getExpression();if(n==="json"&&i.isIdentifier(r)&&r.getText()==="Response"){En(e.getArguments()[1],t);return}if(qc.has(n)&&Hc(r)){const o=e.getArguments()[1];o!==void 0&&ft(o,t.requestName)&&t.rows.push({scope:t.scope,file:t.relativePath,headerName:vn(e.getArguments()[0]),line:o.getStartLineNumber(),via:n==="set"?"headers-set":"headers-append"})}},Qc=(e,t)=>{for(const s of e.getDescendantsOfKind(d.NewExpression))Gc(s,t);for(const s of e.getDescendantsOfKind(d.CallExpression))Yc(s,t)},Xc=(e,t)=>{const s=e.getExpression();if(!i.isIdentifier(s)||s.getText()!=="httpAction")return[];const n=fe(e.getArguments()[0]);if(n===void 0)return[];const r=n.getParameters()[1];if(r===void 0)return[];const o=r.getNameNode();if(!i.isIdentifier(o))return[];const a=[];return Qc(n,{scope:h(e),relativePath:t,requestName:o.getText(),rows:a}),a},Jc=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(d.CallExpression))s.push(...Xc(n,t));return s},Zc=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Jc(r,w(t,n)))}return s},el=new Set(["auth","context.auth"]),tl="userId",sl=e=>{const t=new Set;for(const s of e.getProperties()){if(i.isSpreadAssignment(s))return;(i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)||i.isMethodDeclaration(s))&&t.add(y(s))}return t},nl=(e,t)=>{const s=S(t,on);if(!O(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const r of n.getDescendantsOfKind(d.CallExpression)){if(A(r.getExpression())!=="defineIdentity")continue;const[o]=r.getArguments();return o&&i.isObjectLiteralExpression(o)?sl(o):void 0}},Es=e=>{if(e===void 0||!i.isPropertyAccessExpression(e)||e.getName()!=="identity")return;const t=e.getExpression();return el.has(t.getText())||$(t,["auth"])?e:void 0},rl=e=>{if(i.isPropertyAccessExpression(e)&&Es(e.getExpression())!==void 0)return e.getName();if(i.isElementAccessExpression(e)&&Es(e.getExpression())!==void 0){const t=e.getArgumentExpression();return t&&i.isStringLiteral(t)?t.getLiteralValue():void 0}},xs=(e,t,s)=>{const n=rl(e);return n===void 0?void 0:{declared:n===tl||s.has(n),file:t,key:n,line:e.getStartLineNumber(),scope:h(e)}},il=(e,t)=>{const s=nl(e,t);return s===void 0?[]:[...at(e,t,d.PropertyAccessExpression,(n,r)=>xs(n,r,s)),...at(e,t,d.ElementAccessExpression,(n,r)=>xs(n,r,s))]},ol=(e,t)=>{if(A(e.getExpression())!=="buildImageDeliveryUrl")return;const s=e.getArguments()[0];if(!s)return;const n=P(s,"key");if(!(!n||!U(n)||ee(n)))return{scope:h(e),file:t,line:e.getStartLineNumber()}},al=(e,t)=>I(e,t,ol),cl=e=>{if(i.isComputedPropertyName(e)){const t=e.getExpression();return i.isStringLiteral(t)||i.isNoSubstitutionTemplateLiteral(t)?t.getLiteralValue():void 0}return i.isStringLiteral(e)?e.getLiteralValue():e.getText()},ll=e=>e.getProperties().some(t=>{if(i.isSpreadAssignment(t))return!0;const s=cl(t.getNameNode());return s===void 0||s==="namespace"}),dl=(e,t)=>{for(const{filePath:s}of Ke(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const r of n.getDescendantsOfKind(d.CallExpression)){const o=r.getExpression(),[a]=r.getArguments();if(!(!i.isPropertyAccessExpression(o)||o.getName()!=="auth"||a===void 0)&&(!i.isObjectLiteralExpression(a)||ll(a)))return r}}},ul="https://lunora.sh/docs/concepts/data-residency#pinning-auth-and-voice",fl=(e,t)=>{if(!(e.jurisdiction===void 0||e.jurisdictionPinsAuth===!0||t===void 0))throw ge(t,`the schema pins Durable Objects to the "${e.jurisdiction}" jurisdiction, and this project also has DO-backed auth (users, sessions, accounts, credentials). Pinning the auth object resolves it to a NEW, EMPTY object: existing users stay in the unpinned one until you copy them across (${ul}). Acknowledge with \`.jurisdiction("${e.jurisdiction}", { pinAuth: true })\`, deploy, then run the copy. For D1-mode auth the acknowledgement changes nothing.`,{code:"JURISDICTION_MOVE",status:422})},pl=new Set(["delete","get","getRaw","getWithMetadata","put"]),gl=(e,t,s=[])=>{const n=Ue(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.kv"||r.startsWith("ctx.kv."),methods:pl});return St(n,s)},ml=new Set(["queue","send"]),Ss=new Set(["bcc","cc","to"]),hl=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(!ml.has(t))return;const s=e.getExpression();return $(s,["mail"])||$(s,["email"])?t:void 0},vl=e=>i.isObjectLiteralExpression(e)?e.getProperties().some(t=>{if(i.isShorthandPropertyAssignment(t)){const n=t.getNameNode();return Ss.has(y(t))&&U(n)&&!ee(n)}if(!i.isPropertyAssignment(t)||!Ss.has(y(t)))return!1;const s=t.getInitializer();return s!==void 0&&U(s)&&!ee(s)}):!1,El=(e,t)=>{const s=hl(e.getExpression());if(s===void 0)return;const n=e.getArguments()[0];if(!(!n||!vl(n)))return{scope:h(e),file:t,line:e.getStartLineNumber(),method:s}},xl=(e,t)=>I(e,t,El),Sl=e=>i.isPropertyAssignment(e)||i.isMethodDeclaration(e)||i.isGetAccessorDeclaration(e)?i.isComputedPropertyName(e.getNameNode()):!1,yl=e=>i.isPropertyAssignment(e)||i.isShorthandPropertyAssignment(e)||i.isMethodDeclaration(e)||i.isGetAccessorDeclaration(e)?Sl(e):!0,xn=(e,t=!1)=>{for(const s of e.getProperties()){if(yl(s))return!0;if(t)continue;if(!i.isPropertyAssignment(s))return!0;const n=s.getInitializer();if(!n||!i.isObjectLiteralExpression(n)||xn(n,!0))return!0}return!1},Al=(e,t)=>{for(const s of E(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const{receiver:r}of sn(n))for(const o of At(r)){const a=o.getArguments()[0];if(a!==void 0&&(!i.isObjectLiteralExpression(a)||xn(a)))return!0}}return!1},bl=e=>{const t=e.getArguments()[0];if(!t||!i.isObjectLiteralExpression(t))return[];const s=[];for(const n of t.getProperties()){const r=Te(n);if(r===void 0||!i.isPropertyAssignment(n))continue;const o=n.getInitializer();if(!(!o||!i.isObjectLiteralExpression(o)))for(const a of o.getProperties()){const c=Te(a);c!==void 0&&s.push({column:c,strategy:tn(a),table:r})}}return s},Nl=(e,t)=>{const s=new Map;for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const{receiver:o}of sn(r))for(const a of At(o))for(const c of bl(a)){const l=`${c.table}\0${c.column}`;s.has(l)||s.set(l,c)}}return{columns:[...s.values()]}},Pl=(e,t,s)=>{const n=e.getArguments()[0];if(!n||!i.isObjectLiteralExpression(n))return[];const r=[];for(const o of n.getProperties()){const a=Te(o);if(a===void 0||!i.isPropertyAssignment(o))continue;const c=o.getInitializer();if(!(!c||!i.isObjectLiteralExpression(c)))for(const l of c.getProperties()){const u=Te(l);if(u===void 0)continue;const g=tn(l);g!=="custom"&&r.push({column:u,exportName:t,file:s,line:l.getStartLineNumber(),strategy:g,table:a})}}return r},wl=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?H(s):void 0;return n?.receiver?At(n.receiver).flatMap(r=>Pl(r,K(e)??e.getName(),t)):[]},Il=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of V(r))s.push(...wl(a,o))}return s},Cl=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="replace")return!1;const s=t.getExpression();return _(s)},Tl=e=>{const t=e.getArguments()[0];if(t===void 0||!i.isObjectLiteralExpression(t))return;const s=D(t,"server");if(s!==void 0)return i.isPropertyAssignment(s)?s.getInitializer():s},Ol=e=>{if(!e.isExported())return;const t=e.getInitializer();if(t?.getKind()!==d.CallExpression)return;const s=t;return oi(s.getExpression())?s:void 0},Rl=e=>{const t=Ol(e),s=t===void 0?void 0:Tl(t);if(s===void 0)return[];const n=e.getNameNode(),r=i.isIdentifier(n)?K(e)??n.getText():"";return s.getDescendantsOfKind(d.CallExpression).filter(o=>Cl(o)).map(o=>({exportName:r,file:"lunora/mutators.ts",line:o.getStartLineNumber()}))},kl=e=>e.getVariableDeclarations().flatMap(t=>Rl(t)),Fl=(e,t)=>{const s=S(t,ii);if(!O(s))return[];const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);return kl(n)},Dl=new Set(["delete","get","patch"]),Ll=new Set(["accountId","authorId","companyId","createdBy","createdById","customerId","groupId","memberId","organizationId","orgId","ownerId","projectId","teamId","tenantId","userId","workspaceId"]),Ml=new Set(["auth","identity","session","user"]),_l=new Set([d.EqualsEqualsEqualsToken,d.EqualsEqualsToken,d.ExclamationEqualsEqualsToken,d.ExclamationEqualsToken]),Kl=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="normalizeId"||!_(t.getExpression()))return;const s=e.getArguments()[0];return s&&i.isStringLiteral(s)?s.getLiteralText():""},zl=e=>{let t=e,s=t.getParent();for(;s!==void 0&&(i.isAsExpression(s)||i.isParenthesizedExpression(s)||i.isNonNullExpression(s));)t=s,s=t.getParent();if(s===void 0||!i.isVariableDeclaration(s))return;const n=s.getNameNode();return i.isIdentifier(n)?n.getText():void 0},Bl=(e,t)=>e.getDescendantsOfKind(d.Identifier).some(s=>s.getText()===t),$l=e=>i.isThrowStatement(e)||i.isReturnStatement(e)||e.getDescendantsOfKind(d.ThrowStatement).length>0||e.getDescendantsOfKind(d.ReturnStatement).length>0,Ul=(e,t)=>e.getDescendantsOfKind(d.IfStatement).some(s=>Bl(s.getExpression(),t)&&$l(s.getThenStatement())),Vl=(e,t)=>{for(const s of e.getDescendantsOfKind(d.CallExpression)){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))continue;const r=n.getName();if(!Dl.has(r))continue;const o=n.getExpression();if(!(_(o)||i.isPropertyAccessExpression(o)&&_(o.getExpression())))continue;const c=s.getArguments()[0];if(c!==void 0&&i.isIdentifier(c)&&c.getText()===t)return r}},jl=e=>e.getDescendantsOfKind(d.CallExpression).some(t=>t.getArguments().some(s=>Js(yt(s))!==void 0)),ql=e=>e.getDescendantsOfKind(d.BinaryExpression).some(t=>_l.has(t.getOperatorToken().getKind())?i.isPropertyAccessExpression(t.getLeft())||i.isPropertyAccessExpression(t.getRight()):!1),Wl=e=>{for(const t of e.getDescendantsOfKind(d.Identifier))if(Ll.has(t.getText()))return!0;return[...Ml].some(t=>Be(e,t).length>0)?!0:jl(e)||ql(e)},Hl=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!i.isCallExpression(s))return[];const n=H(s);if(n?.kind!=="query"&&n?.kind!=="mutation")return[];const r=gn(s);if(r===void 0)return[];const o=n.receiver!==void 0&&Gs(n.receiver,"use","rls"),a=Wl(r),c=new Set,l=[];for(const u of r.getDescendantsOfKind(d.CallExpression)){const g=Kl(u);if(g===void 0)continue;const f=zl(u);if(f===void 0||c.has(f)||!Ul(r,f))continue;const m=Vl(r,f);m!==void 0&&(c.add(f),l.push({exportName:K(e)??e.getName(),file:t,line:u.getStartLineNumber(),mentionsOwnership:a,sinkMethod:m,table:g,usesRls:o,visibility:n.visibility}))}return l},Gl=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of V(r))s.push(...Hl(a,o))}return s},Sn=(e,t)=>{const s=i.isIdentifier(e)&&t!==void 0?R(e):void 0;return s===void 0||t===void 0?!1:s.compilerNode===t.compilerNode?i.isIdentifier(t.getNameNode()):i.isBindingElement(s)&&s.getFirstAncestorByKind(d.Parameter)?.compilerNode===t.compilerNode},Yl=e=>{const t=b(e),s=t.getParent();return(i.isPropertyAccessExpression(s)||i.isElementAccessExpression(s))&&s.getExpression()===t&&!ze(s)},Ql=e=>{const t=b(e).getParent();return i.isVariableDeclaration(t)&&i.isObjectBindingPattern(t.getNameNode())},Xl=e=>{const s=b(e).getParent();if(i.isSpreadAssignment(s)||i.isSpreadElement(s)){const n=s.getParent();return(i.isObjectLiteralExpression(n)||i.isArrayLiteralExpression(n))&&!ze(n)}return i.isTemplateSpan(s)&&!i.isTaggedTemplateExpression(s.getParent().getParent())},Re=e=>{const t=R(e);return t===void 0||xr(t.getSourceFile())},pt=(e,t)=>{const s=b(e),n=s.getParent();if(!i.isCallExpression(n))return!1;const r=n.getArguments().indexOf(s),o=v(n.getExpression());if(r===-1||o===void 0)return!1;if(i.isIdentifier(o))return o.getText()==="structuredClone"&&Re(o);if(Sn(yt(o),t))return!(i.isPropertyAccessExpression(o)&&Zs.has(o.getName()))||i.isExpressionStatement(b(i.isAwaitExpression(n.getParent())?n.getParentOrThrow():n).getParent());if(!i.isPropertyAccessExpression(o))return!1;const a=o.getExpression();if(!i.isIdentifier(a)||!Re(a))return!1;const c=a.getText(),l=o.getName();switch(c){case"console":return!0;case"JSON":return l==="stringify";case"Object":return["entries","freeze","isFrozen","keys","values"].includes(l)||l==="assign"&&r>0;default:return!1}},we={kind:"opaque"},Jl={kind:"unreached"},Zl=e=>{const t=e.getSymbol()?.getDeclarations()??[],s=t.filter(o=>i.isFunctionDeclaration(o)&&o.hasBody()),[n]=s;return t.every(o=>i.isFunctionDeclaration(o)&&o.getSourceFile()===e.getSourceFile())&&s.length===1&&i.isFunctionDeclaration(n)?n:void 0},gt=e=>{const t=v(e);if(i.isArrowFunction(t)||i.isFunctionExpression(t))return t;const s=i.isIdentifier(t)?R(t):void 0;if(s?.getSourceFile()!==e.getSourceFile())return;if(i.isFunctionDeclaration(s)){const r=Zl(s);return r===void 0||xt(r)?void 0:r}const n=Z(s)?v(s.getInitializer()):void 0;return i.isArrowFunction(n)||i.isFunctionExpression(n)?n:void 0},yn=(e,t,s)=>{const n=t.getArguments(),r=n.indexOf(s),o=r===-1||n.slice(0,r+1).some(l=>i.isSpreadElement(l))||e.getDescendantsOfKind(d.Identifier).some(l=>l.getText()==="arguments"),a=e.getParameters(),c=a[r];return o?we:c===void 0?a.some(l=>l.isRestParameter())?we:Jl:c.isRestParameter()?we:{kind:"parameter",parameter:c}},ed=e=>{const t=b(e),s=t.getParent();if(!i.isCallExpression(s)||s.getExpression()===t)return;const n=gt(s.getExpression());return n===void 0?we:yn(n,s,t)},td=new Set(["__defineGetter__","__defineSetter__","__proto__"]),sd=e=>i.isForInStatement(e)?e.getExpression():i.isConditionalExpression(e)?e.getCondition():i.isElementAccessExpression(e)?e.getArgumentExpression():void 0,An=e=>{const t=b(e),s=t.getParent();if(i.isIfStatement(s)||i.isWhileStatement(s)||i.isDoStatement(s)||i.isSwitchStatement(s)||i.isCaseClause(s)||i.isTypeOfExpression(s)||i.isVoidExpression(s)||i.isComputedPropertyName(s))return!0;if(i.isTemplateSpan(s))return!i.isTaggedTemplateExpression(s.getParent().getParent());const n=sd(s);if(n!==void 0)return ue(n,t);if(i.isPrefixUnaryExpression(s))return s.getOperatorToken()!==d.PlusPlusToken&&s.getOperatorToken()!==d.MinusMinusToken;if(!i.isBinaryExpression(s))return!1;const r=s.getOperatorToken().getKind(),o=r>=d.FirstAssignment&&r<=d.LastAssignment,a=r===d.QuestionQuestionToken||r===d.BarBarToken||r===d.AmpersandAmpersandToken;return!o&&!a},nd=4,bn=(e,t,s=0)=>{if(Er(e))return!0;if(Yl(e)){const r=b(e).getParent(),o=i.isElementAccessExpression(r)?r.getArgumentExpression():void 0,a=i.isStringLiteral(o)?o.getLiteralValue():void 0,c=i.isPropertyAccessExpression(r)?r.getName():a;return c===void 0||!td.has(c)}if(Ql(e)||Xl(e)||An(e)||pt(e,t))return!0;const n=ed(e);return n?.kind==="unreached"||n?.kind==="parameter"&&rd(n.parameter,s+1)},ys=new WeakMap,rd=(e,t=0)=>{const s=e.getNameNode();if(!i.isIdentifier(s))return!0;const n=ys.get(e.compilerNode);if(n!==void 0)return n;if(t>nd)return!1;const o=(s.getSymbol()?.getDeclarations().length??0)===1&&e.getParentOrThrow().getDescendantsOfKind(d.Identifier).every(a=>a===s||a.getText()!==s.getText()||R(a)?.compilerNode!==e.compilerNode||bn(a,void 0,t));return(o||t===0)&&ys.set(e.compilerNode,o),o},As=new WeakMap,id=(e,t)=>{const s=i.isFunctionExpression(e)?e.getNameNode():void 0;if(!i.isArrowFunction(e)&&e.getFirstDescendantByKind(d.ThisKeyword)!==void 0)return!0;const n=new Set([t.getName(),...s===void 0?[]:[s.getText()]]);return e.getDescendantsOfKind(d.Identifier).some(r=>{if(r===s||!n.has(r.getText()))return!1;const o=R(r)?.compilerNode;return o!==void 0&&(o===t.compilerNode||s!==void 0&&o===e.compilerNode)})},od=(e,t,s)=>{const{context:n,impl:r}=e,o=As.get(r.compilerNode);if(o!==void 0)return o;const a=t.getNameNode(),c=i.isIdentifier(a)?[a]:a.getDescendantsOfKind(d.BindingElement).flatMap(f=>{const m=f.getNameNode();return i.isIdentifier(m)?[m]:[]}),l=new Map(c.map(f=>[f.getText(),f.getParentOrThrow().compilerNode])),u=f=>i.isIdentifier(a)?bn(f,n):!ze(f),g=!id(r,s)&&c.every(f=>(f.getSymbol()?.getDeclarations().length??0)===1)&&r.getDescendantsOfKind(d.Identifier).every(f=>{const m=f.getText();if(m==="arguments")return!1;const x=l.get(m);return x===void 0||c.includes(f)||R(f)?.compilerNode!==x?!0:u(f)});return As.set(r.compilerNode,g),g},bs=new WeakMap,ad=e=>{let t=bs.get(e.compilerNode);return t===void 0&&(t=new Map(e.getVariableDeclarations().flatMap(s=>{const n=ai(s);return n===void 0?[]:[[n.compilerNode,s]]})),bs.set(e.compilerNode,t)),t},cd=e=>{const t=ad(e.getSourceFile()),s=e.getAncestors().find(l=>t.has(l.compilerNode)),n=s===void 0?void 0:t.get(s.compilerNode);if(s===void 0||n===void 0)return;const[r,o]=s.getParameters(),a=o===void 0||o.isRestParameter()?void 0:o,c={context:r,impl:s,mutatorName:K(n)??n.getName()};return a!==void 0&&od(c,a,n)?{...c,parameter:a,pristine:!0}:{...c,parameter:a,pristine:!1}},ld=new Set(["at","concat","filter","find","findLast","flat","reverse","slice","sort","toReversed","toSorted"]),dd=new Map([["Array",new Set(["from","of"])],["Object",new Set(["entries","values"])]]),mt=new Set(["catch","every","filter","finally","find","findIndex","findLast","findLastIndex","flatMap","forEach","map","reduce","reduceRight","some","sort","then"]),Nn=e=>e.getNameNode().getDescendantsOfKind(d.BindingElement).filter(t=>i.isIdentifier(t.getNameNode())),ud=e=>{const t=b(e),s=t.getParent();if(i.isVariableDeclaration(s))return ue(s.getInitializer(),t)?s:void 0;const n=i.isForOfStatement(s)&&s.getExpression()===t?s.getInitializer():void 0;return i.isVariableDeclarationList(n)?n.getDeclarations()[0]:void 0},fd=e=>{const t=ud(e);return t===void 0?void 0:i.isIdentifier(t.getNameNode())?i.isForOfStatement(t.getParent().getParent())||Z(t)?[t]:void 0:Nn(t)},le=e=>e.isUnion()?e.getUnionTypes().every(t=>le(t)):e.isIntersection()?e.getIntersectionTypes().some(t=>le(t)):!e.isAny()&&!e.isUnknown()&&!e.isObject()&&!e.isTypeParameter(),ke=(e,t,s)=>{const n=i.isCallExpression(e)?v(e.getExpression()):void 0;return i.isPropertyAccessExpression(n)&&t.has(n.getName())&&(s===void 0||n.getExpression()===s)},Ie=e=>{const t=v(e);if(!i.isArrowFunction(t)&&!i.isFunctionExpression(t))return;const s=t.getBody();return i.isBlock(s)?s.getDescendantsOfKind(d.ReturnStatement).filter(n=>n.getFirstAncestor(r=>i.isFunctionLikeDeclaration(r))===t).map(n=>n.getExpression()):[s]},pd=e=>{const t=i.isCallExpression(e)?v(e.getExpression()):void 0,s=i.isPropertyAccessExpression(t)?t.getExpression():void 0;return i.isPropertyAccessExpression(t)&&i.isIdentifier(s)&&dd.get(s.getText())?.has(t.getName())===!0&&Re(s)},gd=e=>{const t=ct(e);if(!i.isArrowFunction(t)&&!i.isFunctionExpression(t))return;const s=b(t),n=s.getParent();return i.isCallExpression(n)&&n.getArguments().includes(s)&&ke(n,en)?n:void 0},md=(e,t)=>{if(!(i.isPropertyAccessExpression(e)||i.isElementAccessExpression(e))||e.getExpression()!==t)return;const s=b(e),n=s.getParent();return!i.isCallExpression(n)||n.getExpression()!==s?e:ke(n,ld,t)?n:void 0},hd=(e,t)=>{if(i.isAwaitExpression(e))return e;if(i.isConditionalExpression(e))return e.getCondition()===t?void 0:e;const s=i.isBinaryExpression(e)?e.getOperatorToken().getKind():void 0;return s===d.QuestionQuestionToken||s===d.BarBarToken||s===d.AmpersandAmpersandToken?e:void 0},vd=(e,t)=>{if(i.isArrayLiteralExpression(e))return e;const n=i.isSpreadElement(e)||i.isSpreadAssignment(e)||i.isShorthandPropertyAssignment(e)||i.isPropertyAssignment(e)&&ue(e.getInitializer(),t)?e.getParent():void 0;return i.isArrayLiteralExpression(n)||i.isObjectLiteralExpression(n)?n:void 0},Ns=e=>{const t=b(e),s=t.getParent();if(s===void 0)return;const n=i.isCallExpression(s)&&s.getArguments().includes(t)&&pd(s);return md(s,t)??hd(s,t)??vd(s,t)??(n?s:gd(t))},Ed=5e4,Pn=()=>({inProgress:new Set,verdicts:new Map});class xd{cuts=0;work=0;reset(){this.work=0}cut(){return this.cuts+=1,!0}spend(){return this.work+=1,this.work>Ed&&this.cut()}memoized(t,s,n){const r=n.verdicts.get(t);if(r!==void 0)return r;if(n.inProgress.has(t))return this.cuts+=1,!1;if(this.spend())return!0;const o=this.cuts;n.inProgress.add(t);let a;try{a=s()}finally{n.inProgress.delete(t)}return this.cuts===o&&n.verdicts.set(t,a),a}}const Sd=8,yd=8;class Ad{budget;scope;taint;verdicts=Pn();constructor(t,s,n){this.scope=t,this.budget=s,this.taint=n}isCompromised(t){return this.flowHasCompromisingUse(t)&&!le(t.getType())}flowHasCompromisingUse(t){return this.budget.memoized(t.compilerNode,()=>{const s=this.budget.cuts,n=[],r=new Set,o=(c,l)=>{r.has(c.compilerNode)||(r.add(c.compilerNode),n.push({binding:c,hops:l}))};let a=!1;o(t,0);for(const c of n)if(a=(c.binding===t?void 0:this.verdicts.verdicts.get(c.binding.compilerNode))??this.visitBinding(c,t,o),a)break;if(!a&&this.budget.cuts===s)for(const c of r)this.verdicts.verdicts.set(c,!1);return a},this.verdicts)}visitBinding({binding:t,hops:s},n,r){const o=t.getNameNode();if(!i.isIdentifier(o)){for(const l of i.isParameterDeclaration(t)?Nn(t):[])r(l,s);return!1}if(this.budget.spend())return!0;const a=(l,u)=>u&&s>=Sd?this.budget.cut():(r(l,u?s+1:s),!1);return this.taint.referencesTo(t,o.getText()).some(l=>this.valueCompromises(b(l),!0,a,0))&&(t===n||!le(t.getType()))}valueCompromises(t,s,n,r){let o=t;for(let m=Ns(o);m!==void 0;m=Ns(o)){if(i.isCallExpression(m)&&this.callbackCompromises(m,n))return!0;o=b(m)}const a=o.getParent(),c=o===t&&s,l=()=>!c&&le(o.getType());if(ze(o))return!c&&(!i.isBinaryExpression(a)||this.taint.isTaintedValue(a.getRight(),!1));const u=fd(o);if(u!==void 0)return u.some(m=>n(m,!0));const g=i.isPropertyAccessExpression(a)&&a.getExpression()===o?a.getParent():void 0;if(i.isCallExpression(g)&&g.getExpression()===a)return this.methodCallCompromises(g,n);const f=this.nestedReturningFunctionOf(o);return f!==void 0?this.resultCompromises(f,n,r)&&!l():this.positionCompromises(o,n)&&!l()}resultCompromises(t,s,n){const r=b(t).getParent();if(n>=yd)return this.budget.cut();if(i.isCallExpression(r))return r.getExpression()===b(t)?this.valueCompromises(r,!1,s,n+1):!ke(r,mt);const o=i.isFunctionDeclaration(t)?t:r,a=i.isFunctionDeclaration(o)||Z(o)?o.getNameNode():void 0;return o===void 0||!i.isIdentifier(a)?!0:this.taint.referencesTo(o,a.getText()).some(c=>{const l=b(c),u=l.getParent();return!i.isCallExpression(u)||u.getExpression()!==l||this.valueCompromises(u,!1,s,n+1)})}methodCallCompromises(t,s){return t.getArguments().filter(r=>Ie(r)===void 0).some(r=>this.taint.isTaintedValue(r,!1))||this.callbackCompromises(t,s)}callbackCompromises(t,s){const n=ke(t,mt)?t.getArguments()[0]:void 0;if(n===void 0)return!1;const r=gt(n);return r!==void 0&&this.taint.isInImpl(r)?r.getParameters().some(o=>s(o,!1)):this.taint.isTaintedValue(n,!1)}positionCompromises(t,s){const n=t.getParent();if(i.isCallExpression(n)&&n.getArguments().includes(t))return this.argumentCompromises(n,t,s);const r=i.isSpreadElement(n)?n.getParent():void 0;if(n!==void 0&&i.isCallExpression(r))return!pt(n,this.scope.context)&&this.isOpaqueCallTainted(r.getExpression(),r.getArguments(),n);if(i.isNewExpression(n))return this.isOpaqueCallTainted(n.getExpression(),n.getArguments(),t);if(i.isTemplateSpan(n)){const o=n.getParent(),a=o.getParent(),c=o.getTemplateSpans().map(l=>l.getExpression());return i.isTaggedTemplateExpression(a)&&this.isOpaqueCallTainted(a.getTag(),c,t)}return!this.isReadPosition(t)}argumentCompromises(t,s,n){if(pt(s,this.scope.context))return!1;const r=gt(t.getExpression()),o=r===void 0?void 0:yn(r,t,s);return o?.kind==="unreached"?!1:o?.kind==="parameter"&&r!==void 0&&this.taint.isInImpl(r)?n(o.parameter,!1):this.isOpaqueCallTainted(t.getExpression(),t.getArguments(),s)}isReadPosition(t){const s=t.getParent();return s===void 0||i.isExpressionStatement(s)||i.isForStatement(s)||i.isElementAccessExpression(s)||An(t)||ue(ct(t),this.scope.impl)}isOpaqueCallTainted(t,s,n){const r=!i.isIdentifier(v(n));return this.taint.isTaintedValue(t,!1)||s.some(o=>(o!==n||r)&&this.taint.isTaintedValue(o,!1))}nestedReturningFunctionOf(t){const s=ct(t);return ue(s,this.scope.impl)?void 0:s}}const bd=new Set(["at","every","filter","finally","find","findIndex","findLast","findLastIndex","forEach","order","slice","some","sort","withIndex","withSearchIndex"]),Nd=e=>{const t=v(e);if(!i.isIdentifier(t))return i.isPropertyAccessExpression(t)||i.isElementAccessExpression(t);const s=R(t),n=i.isVariableDeclaration(s)?v(s.getInitializer()):void 0;return s===void 0||i.isFunctionDeclaration(s)||i.isParameterDeclaration(s)||i.isArrowFunction(n)||i.isFunctionExpression(n)},Pd=new Set(["all","allSettled","any","race"]),Ps=e=>i.isParameterDeclaration(e)?e:i.isBindingElement(e)?e.getFirstAncestorByKind(d.Parameter):void 0,nt=8;class wd{budget=new xd;referencesByDeclaration=new Map;referencesByName=new Map;scope;verdicts=Pn();walk;variableDepth=0;queryDepth=0;constructor(t){this.scope=t,this.walk=new Ad(t,this.budget,this);for(const s of t.impl.getDescendantsOfKind(d.Identifier)){const n=s.getText();this.referencesByName.set(n,[...this.referencesByName.get(n)??[],s])}}isTaintedValue(t,s){this.queryDepth===0&&this.budget.reset(),this.queryDepth+=1;try{return s&&this.isRootedInContext(t,nt)?!1:(i.isIdentifier(t)?[t]:t.getDescendantsOfKind(d.Identifier)).some(r=>Sr(r)&&this.isIdentifierTainted(r))}finally{this.queryDepth-=1}}isInImpl(t){const{impl:s}=this.scope;return t!==s&&s.getPos()<=t.getPos()&&t.getEnd()<=s.getEnd()}referencesTo(t,s){let n=this.referencesByDeclaration.get(s);if(n===void 0){n=new Map;for(const r of this.referencesByName.get(s)??[]){const o=R(r)?.compilerNode;o!==void 0&&n.set(o,[...n.get(o)??[],r])}this.referencesByDeclaration.set(s,n)}return(n.get(t.compilerNode)??[]).filter(r=>r.getParent()!==t)}flowsIntoTainted(t){if([t.getInitializer(),...t.getDescendantsOfKind(d.BindingElement).map(f=>f.getInitializer())].some(f=>f!==void 0&&this.isTaintedValue(f,!1)))return!0;const n=t.getParentOrThrow(),r=i.isFunctionLikeDeclaration(n)?n.getParameters().findIndex(f=>f.compilerNode===t.compilerNode):-1,o=b(n),a=o.getParent();if(r===-1)return!0;if(i.isCallExpression(a)){if(a.getExpression()===o)return this.isCallSiteTainted(a,r,t.isRestParameter());const f=v(a.getExpression());if(!i.isPropertyAccessExpression(f)||!mt.has(f.getName()))return!0;const m=a.getArguments().filter(x=>x!==o);return this.isTaintedValue(f.getExpression(),!0)||m.some(x=>this.isTaintedValue(x,!1))}const c=i.isVariableDeclaration(a)&&Z(a)?a:void 0,l=i.isFunctionDeclaration(n)?n:c,u=l?.getNameNode();if(l===void 0||!i.isIdentifier(u))return!0;const g=this.referencesTo(l,u.getText());return g.length===0||g.some(f=>{const m=b(f),x=m.getParent();return!i.isCallExpression(x)||x.getExpression()!==m||this.isCallSiteTainted(x,r,t.isRestParameter())})}isCallSiteTainted(t,s,n){const r=t.getArguments(),o=r.findIndex(c=>i.isSpreadElement(c)),a=c=>c===s||n&&c>s||o!==-1&&o<=s&&c>=o;return r.some((c,l)=>a(l)&&this.isTaintedValue(c,!1))}isContextRootedCombinator(t,s){const n=v(t.getExpression()),r=i.isPropertyAccessExpression(n)?n.getExpression():void 0,a=i.isPropertyAccessExpression(n)&&i.isIdentifier(r)&&r.getText()==="Promise"&&Re(r)&&Pd.has(n.getName())?v(t.getArguments()[0]):void 0;if(i.isArrayLiteralExpression(a)){const g=a.getElements();return g.length>0&&g.every(f=>!i.isSpreadElement(f)&&this.isRootedInContext(f,s))}const c=i.isCallExpression(a)?v(a.getExpression()):void 0,l=i.isCallExpression(a)&&i.isPropertyAccessExpression(c)&&c.getName()==="map"?v(a.getArguments()[0]):void 0,u=l===void 0?void 0:Ie(l);return u!==void 0&&u.length>0&&u.every(g=>g!==void 0&&this.isRootedInContext(g,s))}isIdentifierTainted(t){const s=t.getText();if(s==="arguments")return!0;const n=R(t),r=Ps(n);if(r!==void 0)return this.isSource(r);if(s==="args")return!0;if(n===void 0||!this.isInImpl(n))return!1;if(i.isFunctionDeclaration(n))return this.budget.memoized(n.compilerNode,()=>this.isTaintedValue(n,!1),this.verdicts);if(i.isBindingElement(n)&&this.walk.isCompromised(n))return!0;const o=i.isBindingElement(n)?n.getFirstAncestorByKind(d.VariableDeclaration):n;return i.isVariableDeclaration(o)&&this.isVariableTainted(o)}callChainVerdict(t,s){if(this.isContextRootedCombinator(t,s))return!0;const n=v(t.getExpression()),r=i.isPropertyAccessExpression(n)?n.getName():void 0;return r!==void 0&&Zs.has(r)?!1:r!==void 0&&en.has(r)?this.isCallbackResultServerScoped(t,s)?void 0:!1:t.getArguments().some(a=>Ie(a)!==void 0)&&(r===void 0||!bd.has(r))?!1:void 0}isCallbackResultServerScoped(t,s){const n=(r,o=[])=>{const a=yt(r),c=i.isIdentifier(a)?Ps(R(a)):void 0;return c!==void 0&&o.includes(c)?!0:this.isRootedInContext(r,s)||!this.isTaintedValue(r,!1)};return t.getArguments().every(r=>{const o=Ie(r);if(o===void 0)return!Nd(r)&&n(r);const a=v(r),c=i.isArrowFunction(a)||i.isFunctionExpression(a)?a.getParameters():[];return o.every(l=>l===void 0||n(l,c))})}isRootedInContext(t,s){const n=Ir(t,u=>this.callChainVerdict(u,s)),r=n.root;if(n.verdict!==void 0)return n.verdict;if(Sn(r,this.scope.context))return!0;const o=i.isIdentifier(r)?R(r):void 0,a=i.isBindingElement(o)?o.getFirstAncestorByKind(d.VariableDeclaration):o,c=Z(a)&&this.isInImpl(a)?a.getInitializer():void 0,l=i.isBindingElement(o)?o:a;return s>0&&c!==void 0&&(i.isBindingElement(l)||i.isVariableDeclaration(l))&&!this.walk.isCompromised(l)&&this.isRootedInContext(c,s-1)}isSource(t){const{impl:s,parameter:n}=this.scope;return t.compilerNode===n?.compilerNode?!0:t.getParent()!==s&&this.isInImpl(t)&&(this.budget.memoized(t.compilerNode,()=>this.flowsIntoTainted(t),this.verdicts)||this.walk.isCompromised(t))}isVariableTainted(t){return this.budget.memoized(t.compilerNode,()=>{const s=t.getParent().getParent();if(i.isCatchClause(t.getParent())||this.walk.isCompromised(t))return!0;if(i.isForOfStatement(s)||i.isForInStatement(s))return this.isTaintedValue(s.getExpression(),!0);const n=t.getInitializer(),r=xt(t);if(n===void 0||r)return!0;if(this.isRootedInContext(n,nt))return!1;if(this.variableDepth>=nt)return this.budget.cut();this.variableDepth+=1;try{return this.isTaintedValue(n,!1)}finally{this.variableDepth-=1}},this.verdicts)}}const ws=new WeakMap,Id=e=>{const t=ws.get(e.impl.compilerNode);if(t!==void 0)return t;const s=new wd(e);return ws.set(e.impl.compilerNode,s),s},Cd=new Set(["accountId","authorId","createdBy","createdById","organizationId","orgId","ownerId","tenantId","updatedBy","userId","workspaceId"]),Td=new Set(["insert","insertManyUnsafe","patch","replace"]),Od=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();return Td.has(t)&&Ur(e.getExpression())?t:void 0},Rd=(e,t)=>{if(t!=="insertManyUnsafe")return i.isObjectLiteralExpression(e)?[e]:[];if(!i.isArrayLiteralExpression(e))return[];const s=[];for(const n of e.getElements())i.isObjectLiteralExpression(n)&&s.push(n);return s},kd=(e,t)=>{const s=Cr(e);return s?.member===t?v(s.object):void 0},Is=(e,t)=>i.isIdentifier(e)&&R(e)?.compilerNode===t.compilerNode,wn=(e,t,s,n=1)=>{const r=kd(e,s);if(r!==void 0)return Is(r,t);const o=i.isIdentifier(e)?R(e):void 0;if(i.isBindingElement(o)){const c=o.getParent(),l=c.getParent();return o.getDotDotDotToken()===void 0&&me(o)===s&&i.isObjectBindingPattern(c)&&(l.compilerNode===t.compilerNode||Z(l)&&Is(v(l.getInitializer()),t))}const a=Z(o)?o.getInitializer():void 0;return n>0&&a!==void 0&&wn(a,t,s,n-1)},ht=e=>{const t=v(e)??e;return i.isConditionalExpression(t)?[...ht(t.getWhenTrue()),...ht(t.getWhenFalse())]:[t]},Fd=(e,t,s)=>{const n=[],r=s===void 0?void 0:Id(s);for(const o of e.getProperties()){let a,c;if(i.isPropertyAssignment(o)?(a=y(o),c=o.getInitializer()):i.isShorthandPropertyAssignment(o)&&(a=y(o),c=o.getNameNode()),a===void 0||c===void 0||!Cd.has(a))continue;if(ht(c).some(u=>r===void 0?U(u)&&!Vr(u):r.isTaintedValue(u,!0))){const u=t.ownerField===a&&s?.pristine===!0&&wn(c,s.parameter,a);n.push({field:a,file:t.relativePath,line:t.call.getStartLineNumber(),method:t.method,scope:t.scope,...u&&{ownerScoped:!0}})}}return n},Dd=(e,t,s)=>{const n=Od(e.getExpression()),r=n===void 0?void 0:e.getArguments()[1];if(n===void 0||r===void 0)return[];const o=Rd(r,n);if(o.length===0)return[];const a=h(e),c=cd(e),l={call:e,method:n,ownerField:c===void 0?void 0:s(c.mutatorName),relativePath:t,scope:a};return o.flatMap(u=>Fd(u,l,c))},Ld=(e,t,s=[],n=[])=>{const r=new Map(n.map(a=>[`${a.filePath}:${a.exportName}`,a.owner])),o=I(e,t,(a,c)=>Dd(a,c,l=>r.get(`${c}:${l}`)));return St(o,s)},Md=["providerSubscriptionId","state"],_d=["providerEventId","processedAt"],Cs=(e,t)=>t.every(s=>s in e.shape),Kd=e=>{const t=e.find(n=>n.name==="subscriptions"),s=e.find(n=>n.name==="events");return t!==void 0&&s!==void 0&&Cs(t,Md)&&Cs(s,_d)},zd=new Set(["createAutumnAdapter","createDodoPaymentsAdapter","createPolarAdapter","createStripeAdapter"]),Bd=e=>e&&i.isNumericLiteral(e)?Number(e.getText()):void 0,$d=e=>{const t=D(e,"webhookToleranceSeconds");return t&&i.isPropertyAssignment(t)?Bd(t.getInitializer()):void 0},Ud=(e,t)=>{const s=A(e.getExpression());if(s===void 0||!zd.has(s))return;const[n]=e.getArguments(),r=n&&i.isObjectLiteralExpression(n)?$d(n):void 0;return{callee:s,scope:h(e),file:t,line:e.getStartLineNumber(),...r===void 0?{}:{toleranceSeconds:r}}},Vd=(e,t)=>I(e,t,Ud),jd=new Map([["defineQueue",0],["defineSubscription",1],["defineWorkflow",0]]),qd=e=>{const t=e.getExpression();return i.isIdentifier(t)?t.getText():void 0},Wd=(e,t)=>{const s=e.getArguments()[t];if(!s||!i.isObjectLiteralExpression(s))return;const n=D(s,"handler");if(n===void 0||!i.isPropertyAssignment(n))return;const r=n.getInitializer();if(r&&(i.isArrowFunction(r)||i.isFunctionExpression(r)))return r},In=(e,t)=>{const s=e.getParameters()[t]?.getNameNode();return s&&i.isIdentifier(s)?s.getText():void 0},Cn=(e,t)=>e===t||e.startsWith(`${t}.`),Tn=e=>{const t=e.getDescendantsOfKind(d.PropertyAccessExpression);return i.isPropertyAccessExpression(e)&&t.push(e),t},Ts=e=>{const t=e.getParent();return i.isPropertyAccessExpression(t)&&t.getNameNode()===e||i.isPropertyAssignment(t)&&t.getNameNode()===e?!1:!(i.isBindingElement(t)&&t.getNameNode()===e)},On=e=>{const t=e.getDescendantsOfKind(d.Identifier).filter(s=>Ts(s));return i.isIdentifier(e)&&Ts(e)&&t.push(e),t},Hd=e=>{if(!i.isVariableDeclaration(e))return[];const t=e.getNameNode();return i.isIdentifier(t)?[t.getText()]:t.getDescendantsOfKind(d.BindingElement).map(s=>s.getName())},Gd=e=>{const t=In(e,1);if(t===void 0)return[];const s=[`${t}.messages`];for(const n of e.getDescendantsOfKind(d.ForOfStatement)){if(n.getExpression().getText()!==`${t}.messages`)continue;const r=n.getInitializer(),o=i.isVariableDeclarationList(r)?r.getDeclarations()[0]?.getNameNode():void 0;o&&i.isIdentifier(o)&&s.push(`${o.getText()}.body`)}return s},Yd=(e,t,s)=>{const n=t==="workflow"?[`${s}.params`]:Gd(e),r=new Set,o=a=>Tn(a).some(c=>n.some(l=>Cn(c.getText(),l)))?!0:On(a).some(c=>r.has(c.getText()));for(const a of e.getDescendantsOfKind(d.VariableDeclaration)){const c=a.getInitializer();if(c&&o(c))for(const l of Hd(a))r.add(l)}return{names:r,prefixes:n}},Qd=(e,t)=>Tn(e).some(s=>t.prefixes.some(n=>Cn(s.getText(),n)))?!0:On(e).some(s=>t.names.has(s.getText())),Xd=e=>{const t=qs(e);return t===void 0?void 0:{exportName:String(t.at(-1)),file:t.slice(0,-1).join("/")}},Jd=(e,t,s)=>{const n=In(e,0);if(n===void 0)return[];const r=Yd(e,t,n),o=new Set([n,...r.prefixes.filter(c=>c.endsWith(".body")).map(c=>c.slice(0,-5))]),a=[];for(const c of e.getDescendantsOfKind(d.CallExpression)){const l=c.getExpression();if(!i.isPropertyAccessExpression(l)||!js.has(l.getName())||!o.has(l.getExpression().getText()))continue;const u=c.getArguments()[1];if(!u||!Qd(u,r))continue;const g=Xd(c.getArguments()[0]);g!==void 0&&a.push({dispatchKind:t,file:s,scope:h(c),line:c.getStartLineNumber(),targetExport:g.exportName,targetFile:g.file})}return a},Zd=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(d.CallExpression)){const r=qd(n),o=r===void 0?void 0:jd.get(r);if(o===void 0)continue;const a=Wd(n,o);a!==void 0&&s.push(...Jd(a,r==="defineWorkflow"?"workflow":"queue",t))}return s},eu=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Zd(r,w(t,n)))}return s},Os={dbRateLimit:"usesRateLimit",emailGateMiddleware:"usesEmailGate",mask:"usesMask",rateLimit:"usesRateLimit",rls:"usesRls",verifyTurnstileMiddleware:"usesCaptcha"},Rs=new Set(["account","credential","member","passkey","session","user"]),tu=e=>e.replaceAll(/[-_]/gu," ").replaceAll(/([a-z0-9])([A-Z])/gu,"$1 $2").split(" ").filter(Boolean).map(t=>t.toLowerCase()),su=e=>{const s=tu(e).at(-1);if(!s)return!1;const n=s.endsWith("s")?s.slice(0,-1):s;return Rs.has(s)||Rs.has(n)},nu=e=>{const t=e.replaceAll(/[^a-z0-9]/giu,"").toLowerCase();return t.endsWith("email")||t.endsWith("emailaddress")},ru=(e,t)=>{const{objects:s,opaque:n}=Nt(e,t);return va(s).some(r=>nu(r))?!0:n?void 0:!1},iu=e=>{const t=e.getArguments()[0];return!t||!i.isObjectLiteralExpression(t)?{usesCaptcha:!1,usesRateLimit:!1}:{usesCaptcha:!!D(t,"captcha"),usesRateLimit:!!D(t,"rateLimit")}},ou=e=>{if(i.isCallExpression(e))return e;if(!i.isIdentifier(e))return;const s=e.getSourceFile().getVariableDeclaration(e.getText())?.getInitializer();return s&&i.isCallExpression(s)?s:void 0},Ce={usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},au=e=>{const t=ou(e),s=t?A(t.getExpression()):void 0;if(t&&s==="protectPublic"){const n=iu(t);return{...Ce,usesCaptcha:n.usesCaptcha,usesRateLimit:n.usesRateLimit}}return s!==void 0&&s in Os?{...Ce,[Os[s]]:!0}:Ce},cu=e=>{const t={...Ce};let s=e;for(;i.isCallExpression(s);){const n=s.getExpression();if(!i.isPropertyAccessExpression(n))break;const r=n.getName()==="use"?s.getArguments()[0]:void 0;if(r){const o=au(r);t.usesCaptcha||=o.usesCaptcha,t.usesEmailGate||=o.usesEmailGate,t.usesMask||=o.usesMask,t.usesRateLimit||=o.usesRateLimit,t.usesRls||=o.usesRls}s=n.getExpression()}return t},lu=new Set(["insert","insertMany","insertManyUnsafe","replace"]),du=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!lu.has(t.getName()))return!1;const s=t.getExpression();if(!_(s))return!1;const r=e.getArguments()[0];return!r||!(i.isStringLiteral(r)||i.isNoSubstitutionTemplateLiteral(r))?!1:su(r.getLiteralText())},uu=new Set(["create","publish","publishBatch","runAfter","runAt","send","sendBatch"]),ks=new Set(["queues","scheduler","topics","workflows"]),fu=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!uu.has(t.getName()))return!1;let s=t.getExpression();for(;i.isCallExpression(s)||i.isElementAccessExpression(s)||i.isPropertyAccessExpression(s);){if(i.isPropertyAccessExpression(s)&&ks.has(s.getName())&&jr(s.getExpression()))return!0;s=s.getExpression()}const n=Js(s);return n?.length===1&&ks.has(n[0]??"")},pu=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="insertManyUnsafe")return!1;const s=t.getExpression();return _(s)},Rn=new Set(["generateObject","generateText","streamObject","streamText"]),gu=e=>{const t=A(e.getExpression());return t!==void 0&&Rn.has(t)},mu=e=>{const t=A(e.getExpression());if(t===void 0||!Rn.has(t))return!1;const s=e.getArguments()[0];return!s||!i.isObjectLiteralExpression(s)||s.getProperties().some(n=>i.isSpreadAssignment(n))?!1:!D(s,"maxOutputTokens")},hu=new Set(["log","span","trace"]),vu=new Set(["ai"]),Eu=new Set(["email","mail"]),xu=new Set(["ai","browser","fetch","mail","notify","queues","sql","storage","topics","workflows"]),rt=(e,t)=>[...t].some(s=>Be(e,s).length>0),Su=new Set([d.ArrowFunction,d.FunctionDeclaration,d.FunctionExpression,d.GetAccessor,d.MethodDeclaration,d.SetAccessor]),yu=new Set(["every","filter","flatMap","forEach","map","some"]),Au=new Set(["all","allSettled","race"]),bu=e=>{const t=e.getParent();if(!t||!i.isCallExpression(t)||!t.getArguments().includes(e))return;const s=t.getExpression();if(!i.isPropertyAccessExpression(s))return;const n=s.getName();if(yu.has(n))return t;const r=s.getExpression();if(i.isIdentifier(r)&&r.getText()==="Promise"&&Au.has(n))return t},Nu=e=>{let t=e.getParent();for(;t;){if(i.isTryStatement(t)){const s=t.getTryBlock();if(e.getPos()>=s.getPos()&&e.getEnd()<=s.getEnd())return!0}if(Su.has(t.getKind())){const s=bu(t);if(!s)return!1;t=s;continue}t=t.getParent()}return!1},Pu=e=>{let t=e;for(;;){const s=t.getParent();if(!i.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;if(s.getName()==="catch")return!0;if(s.getName()!=="then"&&s.getName()!=="finally")return!1;const n=s.getParent();if(!i.isCallExpression(n)||n.getExpression()!==s)return!1;t=n}},wu=e=>{let t=e;for(;;){const s=t.getParent();if(i.isPropertyAccessExpression(s)&&s.getExpression()===t){t=s;continue}return i.isCallExpression(s)&&s.getExpression()===t?s:void 0}},Iu=e=>{let t=!1,s=!0;for(const n of[...xu].flatMap(r=>Be(e,r))){const r=wu(n);r&&(t=!0,!Nu(r)&&!Pu(r)&&(s=!1))}return{handlesErrors:t&&s,reachesOutbound:t}},Cu=e=>e.getDescendantsOfKind(d.ThrowStatement).some(t=>{const s=t.getExpression();if(!i.isNewExpression(s))return!1;const n=s.getExpression();return i.isIdentifier(n)&&n.getText()==="Error"}),Fs="lunora-advisor-exempt",Tu=/^[\s*/]+/u,Ou=/[\w-]/u,Ru=e=>{const s=(e.getFirstAncestorByKind(d.VariableStatement)??e).getLeadingCommentRanges().map(n=>n.getText()).join(`
+`);for(const n of s.split(`
+`)){const r=n.replace(Tu,"");if(!r.startsWith(Fs))continue;const o=r.slice(Fs.length);if(Ou.test(o.charAt(0)))continue;const a=o.indexOf("--");return{exempt:!0,exemptReason:(a===-1?"":o.slice(a+2).split("*")[0]??"").trim()}}return{exempt:!1,exemptReason:""}},ku=e=>{const[t]=e.getArguments();if(t){if(i.isObjectLiteralExpression(t)){const s=D(t,"handler");return s?i.isPropertyAssignment(s)?s.getInitializer():i.isShorthandPropertyAssignment(s)?s.getNameNode():i.isMethodDeclaration(s)?s:void 0:void 0}return t}},Fu=(e,t)=>{const s=ku(t);if(!s)return;if(i.isArrowFunction(s)||i.isFunctionExpression(s)||i.isMethodDeclaration(s))return e;if(!i.isIdentifier(s))return;const n=s.getSourceFile(),r=s.getText(),o=n.getVariableDeclaration(r)?.getInitializer();return o&&(i.isArrowFunction(o)||i.isFunctionExpression(o))?o:n.getFunction(r)},Du=e=>{let t=!1,s=!1,n=!1,r=!1,o=!1;for(const l of e.getDescendantsOfKind(d.CallExpression))if(du(l)&&(o=!0),fu(l)&&(t=!0),pu(l)&&(r=!0),gu(l)&&(s=!0),mu(l)&&(n=!0),o&&t&&r&&n)break;const{handlesErrors:a,reachesOutbound:c}=Iu(e);return{callsMail:rt(e,Eu),emitsEvent:rt(e,hu),fanOut:t,handlesErrors:a,reachesOutbound:c,runsAiGeneration:s||rt(e,vu),throwsBareError:Cu(e),unboundedAiGeneration:n,usesInsertManyUnsafe:r,writesUserTable:o}},Lu=(e,t)=>{const s=e.getInitializer();if(!s||!i.isCallExpression(s))return;const n=H(s);if(!n||n.kind!=="query"&&n.kind!=="mutation"&&n.kind!=="action")return;const r=n.receiver?cu(n.receiver):{usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},o=Fu(e,s);return{...o?Du(o):{},...Ru(e),...r,analyzableBody:o!==void 0,exportName:K(e)??e.getName(),file:t,hasEmailArg:ru(s,n.receiver),kind:n.kind,visibility:n.visibility}},Mu=(e,t)=>{const s=[];for(const n of V(e)){const r=Lu(n,t);r&&s.push(r)}return s},_u=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Mu(r,w(t,n)))}return s},Ku=new Set(["dbRateLimit","rateLimit"]),zu=e=>i.isArrowFunction(e)?e.getBody():e,Bu=e=>{if(!i.isArrowFunction(e))return;const t=e.getParameters()[0]?.getNameNode();return t!==void 0&&i.isIdentifier(t)?t:void 0},kn=e=>{const t=e.getParent();return i.isPropertyAccessExpression(t)&&t.getExpression()===e&&t.getName()==="args"},Fn=(e,t)=>{const s=t.getSymbol();return s===void 0?[]:e.getDescendantsOfKind(d.Identifier).filter(n=>{if(n.getSymbol()!==s)return!1;const r=n.getParent();return!(i.isPropertyAccessExpression(r)&&r.getNameNode()===n)})},$u=(e,t)=>U(e)||t!==void 0&&Fn(e,t).some(s=>kn(s)),Uu=(e,t)=>t===void 0?ee(e):Fn(e,t).some(s=>!kn(s)),Vu=(e,t)=>{const s=A(e.getExpression());if(s===void 0||!Ku.has(s))return;const n=P(Hs(e.getArguments()[2]),"key");if(!n)return;const r=zu(n),o=Bu(n);if(!(!$u(r,o)||Uu(r,o)))return{callee:s,scope:h(e),file:t,limitName:Ws(e),line:e.getStartLineNumber()}},ju=(e,t)=>I(e,t,Vu),qu=new Set(["findFirst","findFirstOrThrow","findMany","findUnique","get"]),Wu=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||!qu.has(t.getName()))return;const s=t.getExpression();if(_(s)){const n=e.getArguments()[0];return n&&i.isStringLiteral(n)?n.getLiteralText():""}if(i.isPropertyAccessExpression(s)&&_(s.getExpression()))return s.getName()},Hu=e=>{let t=e;for(;i.isCallExpression(t);){const s=t.getExpression();if(!i.isPropertyAccessExpression(s))return;if(s.getName()==="query"&&_(s.getExpression())){const n=t.getArguments()[0];return n&&i.isStringLiteral(n)?n.getLiteralText():""}t=s.getExpression()}},Gu=e=>{let t=v(e)??e;for(;i.isAwaitExpression(t);)t=v(t.getExpression())??t.getExpression();return t},Dn=(e,t=!1)=>{const s=Gu(e);if(i.isIdentifier(s)){if(t)return;const n=Q(s);return n===void 0?void 0:Dn(n,!0)}if(i.isCallExpression(s))return Wu(s)??Hu(s)},Yu=e=>{const t=e.getBody();if(!i.isBlock(t))return[t];const s=[];for(const n of e.getDescendantsOfKind(d.ReturnStatement)){const r=n.getFirstAncestor(a=>i.isArrowFunction(a)||i.isFunctionExpression(a)||i.isFunctionDeclaration(a)),o=n.getExpression();r===e&&o!==void 0&&s.push(o)}return s},Qu=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!i.isCallExpression(s))return[];const n=H(s);if(n?.kind!=="query")return[];const r=gn(s);if(r===void 0)return[];const o=n.receiver!==void 0&&Fr(n.receiver,"output"),a=n.receiver!==void 0&&Gs(n.receiver,"use","mask"),c=new Set,l=[];for(const u of Yu(r)){const g=Dn(u);g===void 0||c.has(g)||(c.add(g),l.push({exportName:K(e)??e.getName(),file:t,line:u.getStartLineNumber(),table:g,usesMask:a,usesOutput:o,visibility:n.visibility}))}return l},Xu=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of V(r))s.push(...Qu(a,o))}return s},Ju=e=>{if(!e||!i.isObjectLiteralExpression(e))return[];const t=[];for(const s of e.getProperties())(i.isPropertyAssignment(s)||i.isShorthandPropertyAssignment(s)||i.isMethodDeclaration(s)||i.isGetAccessorDeclaration(s))&&t.push(y(s));return t},Zu=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?H(s):void 0;if(!n)return[];const r=[];for(const o of e.getDescendantsOfKind(d.CallExpression)){const a=nn(o);if(a===void 0)continue;const c=Ju(P(a.options,"with"));c.length!==0&&r.push({exportName:K(e)??e.getName(),file:t,line:o.getStartLineNumber(),parentTable:a.table,relations:c,visibility:n.visibility})}return r},ef=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of V(r))s.push(...Zu(a,o))}return s},Fe=e=>{if(i.isStringLiteral(e)||i.isNoSubstitutionTemplateLiteral(e))return e.getLiteralText();if(i.isBinaryExpression(e)&&e.getOperatorToken().getKind()===d.PlusToken){const t=Fe(e.getLeft()),s=Fe(e.getRight());return t!==void 0&&s!==void 0?t+s:void 0}},tf=e=>{let t=e,s=t.getParent();for(;s!==void 0&&i.isBinaryExpression(s)&&s.getOperatorToken().getKind()===d.PlusToken;)t=s,s=t.getParent();return t!==e&&Fe(t)!==void 0},sf=e=>{const t=e.getParent();if(t!==void 0){if(i.isVariableDeclaration(t)||i.isPropertyAssignment(t)||i.isPropertySignature(t))return y(t);if(i.isBinaryExpression(t)&&t.getOperatorToken().getKind()===d.EqualsToken)return t.getLeft().getText()}},nf=(e,t,s)=>xi(e)?!Tr(s)&&Si(sf(t)):!0,rf=(e,t)=>{const s=[],n=[...e.getDescendantsOfKind(d.BinaryExpression),...e.getDescendantsOfKind(d.StringLiteral),...e.getDescendantsOfKind(d.NoSubstitutionTemplateLiteral)],r=new Set;for(const o of n){if(tf(o))continue;const a=Fe(o);if(a===void 0)continue;const c=vi(a);if(c===void 0||!nf(c,o,t))continue;const l=o.getStartLineNumber(),u=`${String(l)}:${c}`;r.has(u)||(r.add(u),s.push({file:t,kind:c,line:l,preview:Ei(a)}))}return s},of=(e,t)=>{const s=[];for(const n of E(t,{includeSkipped:!0})){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...rf(r,w(t,n)))}return s},af=(e,t)=>{if(!i.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&i.isCallExpression(s)?H(s):void 0;if(!n)return[];const r=[];for(const o of e.getDescendantsOfKind(d.CallExpression)){const a=nn(o);if(a===void 0)continue;const c=P(a.options,"includeDeleted");if(c===void 0)continue;const l=i.isTrueLiteral(c),u=!l&&U(c);!l&&!u||r.push({exportName:K(e)??e.getName(),file:t,fromArgs:u,hardcodedTrue:l,line:o.getStartLineNumber(),table:a.table,visibility:n.visibility})}return r},cf=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of V(r))s.push(...af(a,o))}return s},lf=new Set(["query","unsafe"]),df=e=>!i.isPropertyAccessExpression(e)||!lf.has(e.getName())?!1:$(e.getExpression(),["sql"]),uf=e=>i.isBinaryExpression(e)||i.isTemplateExpression(e),ff=(e,t)=>{if(!df(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!uf(s)))return{file:t,line:s.getStartLineNumber(),scope:h(e)}},pf=(e,t)=>I(e,t,ff),gf=[["convex",["convex","@convex-dev/"]],["supabase",["@supabase/"]],["firebase",["firebase","@firebase/","firebase-admin"]]],mf=e=>{for(const[t,s]of gf)for(const n of s)if(e===n||e.startsWith(n.endsWith("/")?n:`${n}/`))return t},hf=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const o of r.getImportDeclarations()){const a=o.getModuleSpecifierValue(),c=mf(a);c!==void 0&&s.push({file:w(t,n),line:o.getStartLineNumber(),moduleSpecifier:a,platform:c})}}return s},vf=new Set(["createMultipartUpload","delete","download","generateUploadUrl","get","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","put","resumeMultipartUpload","store","upload"]),Ef=(e,t,s=[])=>{const n=Ue(e,t,{argIndex:0,matchReceiver:r=>r==="ctx.storage"||r.startsWith("ctx.storage."),methods:vf,requireUnmodifiedReach:!0});return St(n,s)},xf=new Map([["generateUploadUrl",1],["getPresignedUrl",1],["getSignedUrl",1],["store",2],["upload",2]]),Sf=e=>e&&i.isNumericLiteral(e)?Number(e.getText()):void 0,yf=e=>{if(e===void 0)return{analyzable:!0,presentKeys:[]};if(!i.isObjectLiteralExpression(e))return{analyzable:!1,presentKeys:[]};const t=[];let s,n=!1;for(const r of e.getProperties()){if(i.isSpreadAssignment(r)){n=!0;continue}if(i.isPropertyAssignment(r)){const o=y(r);t.push(o),o==="expiresInSeconds"&&(s=Sf(r.getInitializer()));continue}(i.isShorthandPropertyAssignment(r)||i.isMethodDeclaration(r))&&t.push(y(r))}return{analyzable:!n,expiresInSeconds:s,presentKeys:t}},Af=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName(),s=xf.get(t);return s===void 0?void 0:Xs(e.getExpression(),r=>r==="ctx.storage"||r.startsWith("ctx.storage."))?{method:t,optionsIndex:s}:void 0},bf=(e,t)=>{const s=Af(e.getExpression());if(s!==void 0)return{scope:h(e),file:t,line:e.getStartLineNumber(),method:s.method,...yf(e.getArguments()[s.optionsIndex])}},Nf=(e,t)=>I(e,t,bf),Pf=(e,t)=>{const s=_r(t.target);return{...s===void 0?{}:{platform:s},analytics:e.analytics||t.dependencies.has("@lunora/bindings"),auth:t.dependencies.has("@lunora/auth"),containers:e.container||t.containerCount>0||t.dependencies.has("@lunora/container"),flags:e.flags||t.dependencies.has("@lunora/flags"),kv:e.kv||t.dependencies.has("@lunora/bindings"),mail:e.mail||t.dependencies.has("@lunora/mail"),notifications:e.notify||t.dependencies.has("@lunora/notify"),payments:e.payments||t.hasPaymentTables,queues:t.queueCount>0||t.dependencies.has("@lunora/queue"),scheduler:e.scheduler||t.cronCount>0||t.dependencies.has("@lunora/scheduler"),storage:e.storage||t.storageRuleCount>0||t.storageColumnCount>0||t.dependencies.has("@lunora/storage"),vectors:t.vectorStoreSupported&&t.vectorIndexCount>0,workflows:e.workflows||t.workflowCount>0||t.dependencies.has("@lunora/workflow")}},wf=new Set(["delete","hardDelete","patch","replace","restore"]),If=new Set(["insertMany","insertManyUnsafe","patchWhere"]),Cf=new Set(["delete","deleteMany","hardDelete","insert","insertMany","patch","patchMany","replace","restore","upsert","upsertMany"]),Ds=(e,t)=>{const s=e.getNonNullableType().getProperty("__table")?.getTypeAtLocation(t);if(s===void 0)return[];const n=s.isUnion()?s.getUnionTypes():[s],r=n.map(o=>o.getLiteralValue()).filter(o=>typeof o=="string");return r.length===n.length?r:[]},Tf=(e,t)=>{const s=e.getType();if(t==="deleteMany"||t==="patchMany"){const n=s.getArrayElementType();if(n===void 0)return[];const r=t==="patchMany"?n.getProperty("id")?.getTypeAtLocation(e):n;return r===void 0?[]:Ds(r,e)}return Ds(s,e)},Ls="",Of=(e,t)=>{if(If.has(e))return{method:e,tables:[t!==void 0&&i.isStringLiteral(t)?t.getLiteralText():Ls]};if(wf.has(e)||e==="deleteMany"||e==="patchMany"){const s=t===void 0?[]:Tf(t,e);return{method:e,tables:s.length===0?[Ls]:s}}},Rf=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t))return;const s=t.getName(),n=t.getExpression();if(_(n))return Of(s,e.getArguments()[0]);if(Cf.has(s)&&i.isPropertyAccessExpression(n)&&_(n.getExpression()))return{method:s,tables:[n.getName()]}},kf=(e,t)=>I(e,t,(s,n)=>{const r=Rf(s);if(r===void 0)return;const o=h(s),a=s.getStartLineNumber();return r.tables.map(c=>({file:n,line:a,method:r.method,scope:o,table:c}))}),Ff=(e,t,s)=>({cacheKey:`procedure_arguments_unreadable:${e}:${t}`,categories:["SCHEMA"],description:"Codegen reads an argument record statically. One built at runtime — a factory call, or a property off a value it cannot follow — has no literal to read, so the generated `FunctionReference` carries only the arguments it could see while the runtime validator still enforces all of them.",detail:`\`${t}\` in \`${e}\` (line ${s.toString()}) declares arguments codegen could not read, so its generated type is missing some of them.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:s},name:"procedure_arguments_unreadable",remediation:`Declare the arguments as an object literal, or as a \`const\` object literal the chain names — \`const ${t}Args = { … };\` then \`.input(${t}Args)\`. Both resolve; a record returned by a call does not.`,title:"Procedure arguments are missing from the generated type"}),Df=(e,t)=>{if(t===void 0){const s=e.getArguments()[0];if(s===void 0||!i.isObjectLiteralExpression(s)||D(s,"args")===void 0)return!1}return Nt(e,t).opaque},Lf=(e,t)=>{const s=[],n=(r,o)=>{const a=r.getInitializer();if(a===void 0||!i.isCallExpression(a))return;const c=H(a);c!==void 0&&Df(a,c.receiver)&&s.push(Ff(t,o,a.getStartLineNumber()))};for(const r of e.getVariableStatements().filter(o=>o.isExported()))for(const o of r.getDeclarations())n(o,o.getName());return s},Mf=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n);r!==void 0&&s.push(...Lf(r,w(t,n)))}return s.toSorted((n,r)=>n.cacheKey.localeCompare(r.cacheKey))},_f=new Map([["AgentDefinition",{call:"defineAgent({ … })",file:"agents"}],["ContainerDefinition",{call:"defineContainer({ … })",file:"containers"}],["QueueDefinition",{call:"defineQueue({ … })",file:"queues",note:"A dropped queue has no caller to fail — its consumer is simply never wired."}],["RegisteredAction",{call:"action.input({ … }).action(handler)"}],["RegisteredLifecycleHook",{call:"onConnect(handler)",note:"Substitute the hook you called: `onConnect`, `onDisconnect` and `onShardInit` share one type, so codegen cannot tell which you wrote. A dropped hook has no caller to fail — it silently never fires."}],["RegisteredMigration",{call:"defineMigration({ … })",note:"A dropped migration never runs, so `lunora migrate up` reports nothing to do."}],["RegisteredMutation",{call:"mutation.input({ … }).mutation(handler)"}],["RegisteredMutator",{call:"defineMutator({ … })",file:"mutators"}],["RegisteredQuery",{call:"query.input({ … }).query(handler)"}],["RegisteredReactor",{call:"onQueryChange(select, handler)",note:"A dropped reactor has no caller to fail — it silently never runs."}],["RegisteredShape",{call:"defineShape({ … })",file:"shapes"}],["RegisteredStream",{call:"query.input({ … }).stream(handler)"}],["RegisteredWhisperAuthorizer",{call:"onWhisper(handler)",note:"A dropped authorizer has no caller to fail — the whisper topics it was meant to gate silently stay open to every socket on the shard."}],["SubscriptionDefinition",{call:"defineSubscription(topic, { … })",file:"queues",note:"A dropped subscription is never published to — its topic's messages simply never reach it."}],["WorkflowDefinition",{call:"defineWorkflow({ … })",file:"workflows"}]]),De=({byName:e,byPath:t},s,n)=>t.has(`${s}:${n}`)||e.has(n),Ln=e=>!e.isAny(),Mn=e=>{const t=e.getType();if(!Ln(t))return;const s=t.getAliasSymbol()?.getName()??t.getSymbol()?.getName(),n=s===void 0?void 0:_f.get(s);return n===void 0||s===void 0?void 0:{...n,typeName:s}},Kf=e=>{const t=e.getInitializer();return t===void 0?!1:i.isCallExpression(t)||i.isIdentifier(t)||i.isPropertyAccessExpression(t)},_n={cause:"codegen recognises a registration only when the initializer is the registering call itself, and this one comes from a factory or an alias",remediation:"A factory that returns a registration cannot be read statically — inline it, or export what the factory builds."},zf=e=>({cause:`codegen reads this kind of registration only from \`lunora/${e}.ts\`, and this is a different module`,remediation:`Move it into \`lunora/${e}.ts\` — the declaration itself is fine.`}),Bf={cause:"it is exported only under a string name that is not an identifier, which the generated `api.ts` and dispatch table cannot address as `<module>.<name>`",remediation:"Export it under an identifier name as well (or instead)."},$f=new Set(["AgentDefinition","ContainerDefinition","QueueDefinition","RegisteredShape","SubscriptionDefinition","WorkflowDefinition"]),Uf={cause:"it is exported only as `default` or under a reserved word, and this kind's name becomes an import binding and a generated class / binding name, where that is a syntax error",remediation:"Export it under a plain identifier: `export const <name> = …` (an extra `export default <name>` is fine)."},Vf=(e,t,s)=>{if(!t.some(r=>yr(r)))return Bf;const n=e.getVariableStatement()?.hasExportKeyword()===!0;return $f.has(s.typeName)&&!n&&!t.some(r=>Ai(r))?Uf:_n},Kn=(e,t,s,n,r)=>{const{call:o,file:a,note:c,typeName:l}=s,u=a!==void 0&&e!==a?a:void 0,g=u===void 0?r:zf(u),f=c===void 0?g.remediation:`${c} ${g.remediation}`;return{cacheKey:`procedure_not_registered:${e}:${t}`,categories:["SCHEMA"],description:"Codegen registers an export only when its initializer is literally the registering call and the module exports it under an identifier name — by the `export` keyword, a local `export { … }`, or `export default`. Written any other way it exists at runtime but never reaches the generated output — `_generated/api.ts` for a procedure, the lifecycle manifest for a hook or reactor — so a caller cannot address it and a hook never fires.",detail:`\`${t}\` in \`${e}\` (line ${n.toString()}) has type \`${l}\` but was not registered — ${g.cause}.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:n,typeName:l},name:"procedure_not_registered",remediation:u===void 0?`Assign the registration directly: \`export const ${t} = ${o};\`. ${f}`:f,title:"Procedure exists at runtime but is missing from the generated API"}},jf=(e,t,s)=>{const n=[];for(const r of V(e)){const o=i.isIdentifier(r.getNameNode())?ot(r):[r.getName()],c=o.some(u=>De(s,t,u))||!Kf(r)?void 0:Mn(r),[l=r.getName()]=o;c!==void 0&&n.push(Kn(t,l,c,r.getStartLineNumber(),Vf(r,o,c)))}return n},qf=(e,t,s)=>{if(De(s,t,"default"))return[];const n=[];for(const r of e.getExportAssignments().filter(o=>!o.isExportEquals()&&!i.isIdentifier(o.getExpression()))){const o=Mn(r.getExpression());o!==void 0&&n.push(Kn(t,"default",o,r.getStartLineNumber(),_n))}return n},Wf=(e,t,s)=>[...jf(e,t,s),...qf(e,t,s)],Hf=(e,t,s)=>e.getVariableStatements().flatMap(n=>n.getDeclarations()).filter(n=>i.isIdentifier(n.getNameNode())).filter(n=>ot(n).some(r=>De(s,t,r))).filter(n=>{const r=n.getInitializer();return r!==void 0&&i.isCallExpression(r)&&i.isPropertyAccessExpression(r.getExpression())}).map(n=>{const r=ot(n).find(o=>De(s,t,o))??n.getName();return{declaration:n,exportName:r,relativePath:t}}),Gf=({exportName:e,relativePath:t})=>({cacheKey:"procedure_type_check_unavailable",categories:["SCHEMA"],description:"Codegen cross-checks every export in `lunora/` against its TYPE to catch a procedure the syntactic scan dropped — a factory-assigned export, an alias, a separate `export { … }`. That check needs the type checker to resolve `@lunora/server`; when it cannot, the check reports nothing regardless of what the code does.",detail:`Type resolution for \`lunora/\` is unavailable — the registered procedure \`${e}\` in \`${t}\` types as \`any\`, as does every other one — so codegen cannot tell you when an export is dropped from \`_generated/api.ts\`. A dropped procedure will surface as \`Property '<name>' does not exist\` at its call site instead.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:e,filePath:t},name:"procedure_type_check_unavailable",remediation:`Check what codegen sees: \`${e}\` should have a procedure type, not \`any\`. It needs a \`tsconfig.json\` at or above \`lunora/\` — the one codegen finds walking up from there, which is not necessarily the one your editor uses — resolving \`lunorash\` / \`@lunora/server\` to declarations that exist on disk (a workspace dependency has to be built first).`,title:"Codegen cannot type-check `lunora/`, so dropped procedures go unreported"}),Yf=(e,t,s)=>{const n=[],r=[];for(const a of E(t)){const c=e.getSourceFile(a);if(c===void 0)continue;const l=w(t,a);n.push(...Wf(c,l,s)),r.push(...Hf(c,l,s))}const[o]=r;return o!==void 0&&r.every(({declaration:a})=>!Ln(a.getType()))&&n.push(Gf(o)),n.toSorted((a,c)=>a.cacheKey.localeCompare(c.cacheKey))},Qf=new Set(["when","where"]),it=new Set(["definePolicy","defineShape"]),Xf=e=>{if(!i.isCallExpression(e))return;const t=e.getExpression();if(i.isPropertyAccessExpression(t)){const n=t.getName();return it.has(n)?n:void 0}if(!i.isIdentifier(t))return;for(const n of t.getSymbol()?.getDeclarations()??[])if(i.isImportSpecifier(n)){const r=n.getNameNode().getText();return it.has(r)?r:void 0}const s=t.getText();return it.has(s)?s:void 0},Jf=e=>i.isObjectLiteralExpression(e)&&e.getProperties().length===0,zn=e=>{if(e!==void 0){if(i.isReturnStatement(e)&&e.getExpression()===void 0||e.getKind()===d.UndefinedKeyword||e.getText()==="undefined")return"undefined";if(Jf(e))return"empty-object";if(i.isParenthesizedExpression(e))return zn(e.getExpression())}},wt=e=>e.getAncestors().find(t=>i.isArrowFunction(t)||i.isFunctionExpression(t)||i.isFunctionDeclaration(t)),Zf=e=>e.getDescendantsOfKind(d.ReturnStatement).filter(t=>wt(t)===e),Bn=e=>e.getDescendantsOfKind(d.ConditionalExpression).filter(t=>wt(t)===e),ep=e=>{const t=Zf(e);return t.length>1?!0:t.some(s=>s.getFirstAncestorByKind(d.IfStatement)!==void 0)||Bn(e).length>0},tp=e=>e.getDescendantsOfKind(d.IfStatement).filter(t=>wt(t)===e),vt=e=>e.getKind()===d.NullKeyword||e.getKind()===d.FalseKeyword||i.isIdentifier(e)&&e.getText()==="undefined"?!0:i.isNumericLiteral(e)?e.getLiteralValue()===0:i.isStringLiteral(e)&&e.getLiteralValue()==="",sp=(e,t)=>vt(e)||vt(t),np=new Map([[d.EqualsEqualsEqualsToken,"positive"],[d.EqualsEqualsToken,"positive"],[d.ExclamationEqualsEqualsToken,"negative"],[d.ExclamationEqualsToken,"negative"]]),Ms=e=>!vt(e)&&(i.isLiteralExpression(e)||e.getKind()===d.TrueKeyword),rp=(e,t,s)=>{const n=np.get(e);if(n!==void 0)return sp(t,s)?n==="positive"?"negative":"positive":Ms(t)||Ms(s)?void 0:n},de=e=>{if(i.isParenthesizedExpression(e))return de(e.getExpression());if(i.isPrefixUnaryExpression(e)&&e.getOperatorToken()===d.ExclamationToken)return"negative";if(i.isBinaryExpression(e)){const t=e.getOperatorToken().getKind(),s=rp(t,e.getLeft(),e.getRight());if(s!==void 0)return s;if(t===d.AmpersandAmpersandToken||t===d.BarBarToken){const n=de(e.getLeft()),r=de(e.getRight());return n===r?n:"indeterminate"}}return i.isIdentifier(e)||i.isPropertyAccessExpression(e)||i.isElementAccessExpression(e)||i.isCallExpression(e)?"positive":"indeterminate"},_s=e=>{if(e!==void 0){if(i.isReturnStatement(e))return e;if(i.isBlock(e)){const t=e.getStatements().at(-1);return t!==void 0&&i.isReturnStatement(t)?t:void 0}}},ip=e=>{if(e.getElseStatement()!==void 0)return;const t=e.getNextSiblingIfKind(d.ReturnStatement);return t!==void 0&&t.getNextSibling()===void 0?t:void 0},op=e=>i.isReturnStatement(e)?e.getExpression()??e:e,ap=e=>{const t=[];for(const s of Bn(e)){const n=de(s.getCondition());n==="positive"?t.push(s.getWhenFalse()):n==="negative"&&t.push(s.getWhenTrue())}for(const s of tp(e)){const n=de(s.getExpression());if(n==="indeterminate")continue;const r=n==="negative"?_s(s.getThenStatement()):_s(s.getElseStatement())??ip(s);r!==void 0&&t.push(op(r))}return t},cp=e=>{for(const t of e.getAncestors())if(i.isVariableDeclaration(t)){const s=t.getNameNode();if(i.isIdentifier(s))return s.getText()}return"<anonymous>"},lp=(e,t,s)=>{if(!i.isCallExpression(e))return[];const[n]=e.getArguments();if(!n||!i.isObjectLiteralExpression(n))return[];const r=[];for(const o of n.getProperties()){if(!i.isPropertyAssignment(o)||!Qf.has(y(o)))continue;const a=o.getInitializer();if(!(!a||!(i.isArrowFunction(a)||i.isFunctionExpression(a)))&&ep(a))for(const c of ap(a)){const l=zn(c);l!==void 0&&r.push({exportName:cp(e),file:s,form:l,key:y(o),line:c.getStartLineNumber(),owner:t})}}return r},dp=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(d.CallExpression)){const r=Xf(n);r!==void 0&&s.push(...lp(n,r,t))}return s},up=(e,t)=>{const s=[];for(const n of E(t)){const r=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...dp(r,w(t,n)))}return s},fp=new Set(["query","upsert","upsertNow"]),pp=e=>{if(!i.isPropertyAccessExpression(e))return;const t=e.getName();if(fp.has(t))return $(e.getExpression(),["vectors"])?t:void 0},gp=(e,t)=>{const s=pp(e.getExpression());if(s===void 0)return;const n=e.getArguments()[1];if(!n)return;const r=P(n,"namespace");if(!(!r||!U(r)||ee(r)))return{scope:h(e),file:t,line:e.getStartLineNumber(),method:s}},mp=(e,t)=>I(e,t,gp),hp=e=>{const t=e.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="get")return!1;const s=t.getExpression();return i.isPropertyAccessExpression(s)?s.getName()==="workflows":i.isIdentifier(s)&&s.getText()==="workflows"},vp=e=>{const t=e.getArguments()[0];return t&&i.isStringLiteral(t)?t.getLiteralText():""},Ep=(e,t)=>I(e,t,(s,n)=>hp(s)?{file:n,line:s.getStartLineNumber(),scope:h(s),workflow:vp(s)}:void 0),xp=".lunora-schema.json",Et=(e,t)=>{O(e)&&Xn(e,"utf8")===t||Jn(e,t,"utf8")},Sp=(e,t)=>{if(t===""){Zn(e,{force:!0});return}Et(e,t)},yp=e=>{try{const t=tr(S(e,"package.json"));return typeof t.version=="string"&&t.version!==""?t.version:void 0}catch{return}},Ap=()=>{const e=process.env.LUNORA_CODEGEN_TIMING;return e!==void 0&&e!==""},bp=e=>{let t=O(e)?e:Ne(e);for(;t&&t!==Ne(t);){const s=S(t,"tsconfig.json");if(O(s))return s;t=Ne(t)}},Ks=e=>e.replaceAll("\\","/"),Np=(e,t,s)=>{if(s&&e.length>0){const o=e.map(a=>`"${a.exportName}"`).join(", ");throw new W("MASK_UNSUPPORTED",`This project declares a \`mask(...)\` policy whose argument isn't a plain object literal (e.g. \`mask(sharedPolicies)\` referencing a hoisted variable), or contains a spread (\`...shared\`) or computed key (\`[name]:\`) codegen can't enumerate, so codegen can't tell which columns it masks. Because the project also declares replication shape(s) (${o}), codegen can't verify none of them replicate a table that policy masks — inline every table and column as literal keys so codegen can verify it, or remove the affected shape(s).`,{status:422})}const n=new Map;for(const o of t.columns){const a=n.get(o.table)??[];a.push(o.column),n.set(o.table,a)}const r=t.columns.length>0;for(const o of e){if(o.table===void 0){if(r)throw new W("MASK_UNSUPPORTED",`defineShape "${o.exportName}" has a non-literal \`table\` (a variable or expression, not a string literal), so codegen can't statically verify it doesn't replicate a table that masks a column. This project masks at least one column elsewhere, so the combination can't be proven safe — change "${o.exportName}"'s \`table\` to a plain string literal so codegen can verify it, or remove the mask(s) on the table it targets.`,{status:422});continue}const a=n.get(o.table);if(a===void 0)continue;const c=a.map(l=>`"${l}"`).join(", ");throw new W("MASK_UNSUPPORTED",`defineShape "${o.exportName}" replicates table "${o.table}", which masks column(s) ${c} on at least one procedure. A shape runs no procedure, so \`.use(mask(...))\` never applies to its replicated rows — remove the shape, unmask the table, or wait for shape-masking support.`,{status:422})}},Le=(e,t,s)=>{const n=e.getSourceFile(t);if(n===void 0){e.createSourceFile(t,s,{overwrite:!0});return}n.getFullText()!==s&&n.replaceWithText(s)},zs=(e,t,s)=>e.getSourceFile(t)?.getFullText()===s,Pp=8,wp=e=>{const{agents:t,apiPath:s,generatedFunctionsPath:n,lunoraDirectory:r,migrations:o,project:a,shapes:c,usesSandbox:l,useUmbrella:u,workflows:g}=e,f=()=>Jr(()=>{const N=Zr(a,r),k=ci(a,r);return{functions:N,httpRoutes:ei(a,r),mutators:k}});let{erased:m,value:{functions:x,httpRoutes:z,mutators:B}}=f();ss([...x,...B].map(N=>N.filePath)),ss(z.filter(N=>N.stream).map(N=>N.filePath),"http-stream");for(let N=1;;N+=1){const k=Ri({agents:t,functions:x,httpRoutes:z,mutators:B,useUmbrella:u,workflows:g}),j=Ui({agents:t,functions:x,migrations:o,mutators:B,shapes:c,useUmbrella:u,usesSandbox:l});if(N>=Pp||zs(a,s,k)&&zs(a,n,j))return{apiContent:k,erased:m,functions:x,functionsContent:j,httpRoutes:z,mutators:B};Le(a,s,k),Le(a,n,j),{erased:m,value:{functions:x,httpRoutes:z,mutators:B}}=f()}},Ip=e=>{const t=bp(e);return t?new Xt({skipAddingFilesFromTsConfig:!1,tsConfigFilePath:t,useInMemoryFileSystem:!1}):new Xt({skipAddingFilesFromTsConfig:!0,useInMemoryFileSystem:!1})},Ug=(e,t)=>{const s=E(t),n=S(t,"schema.ts");O(n)&&s.push(n);for(const c of s){const l=e.getSourceFile(c);l===void 0?e.addSourceFileAtPath(c):l.refreshFromFileSystemSync()}const r=new Set(s.map(c=>Ks(c))),o=Ks(t),a=`${o}/`;for(const c of e.getSourceFiles()){const l=c.getFilePath();(l===o||l.startsWith(a))&&!r.has(l)&&e.removeSourceFile(c)}for(const c of e.getSourceFiles()){const l=c.getFilePath();if(!(l===o||l.startsWith(a)||l.includes("/node_modules/")))try{c.refreshFromFileSystemSync()}catch{e.removeSourceFile(c)}}},Vg=e=>{const t=Ap(),s=t?Xe.now():0,n=S(e.projectRoot,e.lunoraDirectory??"lunora"),r=S(n,"schema.ts");if(!O(r))throw new W("INTERNAL",`schema.ts not found at ${r}`);const o=e.project??Ip(n);qr(Cc);const a=hi(o,r,e.projectRoot),{agents:c,capabilities:l,containers:u,crons:g,dataModelContent:f,dependencies:m,entryCronTriggers:x,env:z,featureUsage:B,hasFlags:N,hasNotify:k,identity:j,platformGate:G,queues:F,serverContent:te,services:oe,storageRulesMetadata:ae,topics:se,usesSandbox:he,useUmbrella:q,workflows:L}=_o({lunoraDirectory:n,project:o,projectRoot:e.projectRoot,schema:a,target:e.target});fl(a,a.jurisdiction===void 0?void 0:dl(o,n)),ao(a,B.artifacts);const M=S(n,"_generated"),T=S(M,"dataModel.ts"),$n=S(M,"server.ts"),Un=S(M,"api.ts"),Vn=S(M,"functions.ts");Le(o,T,f),Le(o,$n,te);const ve=ri(o,n),ne=yi(o,n),{apiContent:It,erased:jn,functions:Y,functionsContent:Ct,httpRoutes:Ve,mutators:Ee}=wp({agents:c,apiPath:Un,generatedFunctionsPath:Vn,lunoraDirectory:n,migrations:ve,project:o,shapes:ne,useUmbrella:q,usesSandbox:he,workflows:L}),Tt=ir(o,n),je=or(Tt,a,[...Y,...Ve].map(p=>p.filePath)),xe=Tt.length>0,X=e.lint===!1&&!xe?void 0:{inserts:si(o,n),queries:fi(o,n),tableWrites:kf(o,n),workflowCalls:Ep(o,n)},Se=e.lint===!1||X===void 0?void 0:nr({adminRoutes:qo(o,n),aiRawRuns:ea(o,n),aiToolSideEffects:ua(o,n),argumentDerivedFetches:ga(o,n),argumentValidators:Na(o,n),authApiCalls:Wr(o,n),authConfigs:Da(o,n),browserUrlAccesses:Ka(o,n),configCalls:Xa(o,n),containerKeyAccesses:Za(o,n),containerOverrides:ic(o,n),containers:u,exportSinks:lc(o,n),staleMigrationImports:hf(o,n),failOpenGuards:gc(o,n),flagReads:bc(o,n),flagSecurityDefaults:Ic(o,n),geoIndexUsages:Rc(o,n),httpActionGuards:Vc(o,n),httpHeaderWrites:Zc(o,n),hyperdriveCalls:ti(o,n),identityClaimReads:il(o,n),imageDeliveryUrlAccesses:al(o,n),inserts:X.inserts,kvKeyAccesses:gl(o,n,Y),mailRecipientAccesses:xl(o,n),maskProcedures:ni(o,n),maskStrategies:Il(o,n),mutatorWrites:Fl(o,n),nondeterministicCalls:li(o,n),normalizeIdAuthorizations:Gl(o,n),notifyCalls:ui(o,n),notifyConfig:di(o,n),mutators:Ee,ownerFieldWrites:Ld(o,n,Y,Ee),unrestrictedWhereBranches:up(o,n),paymentWebhooks:Vd(o,n),privilegedDispatches:eu(o,n),procedureProtections:_u(o,n),queries:X.queries,queues:F,r2sqlCalls:pi(o,n),ratelimitKeySelectors:ju(o,n),rawRowReturns:Xu(o,n),relationLoads:ef(o,n),rlsProcedures:gi(o,n),schema:a,secretLiterals:of(o,n),modules:je,shapes:ne,softDeleteReads:cf(o,n),sqlInterpolations:pf(o,n),storageKeyAccesses:Ef(o,n,Y),storageUploads:Nf(o,n),tableWrites:X.tableWrites,vectorNamespaceAccesses:mp(o,n),workflowCalls:X.workflowCalls,workflows:L,wranglerVariables:e.wranglerVariables}),Ot=Se===void 0?[]:ji(e.projectRoot,[...er(Se,{source:"static"}),...Yf(o,n,{byName:new Set([...L,...F,...c,...u].map(p=>p.exportName)),byPath:new Set([...Y,...Ee,...ne,...ve].map(p=>`${p.filePath}:${p.exportName}`))}),...Mf(o,n),...Xr(jn,n)]),qn=mi(o,n),Rt=Nl(o,n);Np(ne,Rt,Al(o,n));const Wn=N?Ec(o,n):[],qe=G.signals.vectorStore!==!1,ce=Pf(B,{containerCount:u.length,cronCount:g.length,dependencies:m,hasPaymentTables:Kd(a.tables),queueCount:F.length,storageColumnCount:Object.keys(Qs(a)).length,storageRuleCount:ae.rules.length,vectorIndexCount:a.vectorIndexes.length,target:Ys(e.projectRoot,e.target),vectorStoreSupported:qe,workflowCount:L.length}),kt=t?Xe.now():0,We=Ci(a,ve.map(p=>p.id)),Ft=Kr({advisories:Ot.filter(p=>p.name!=="procedure_type_check_unavailable"),advisorProcedures:Se?.procedureProtections??[],agents:c,capabilities:l,containers:u,env:z,flagKeys:Wn,hasFlags:N,hasNotify:k,hasVectors:qe,maskMetadata:Rt,mutators:Ee,queues:F,rlsMetadata:qn,schema:a,schemaSnapshot:We,shapes:ne,services:oe,storageRules:ae,studioFeatures:ce,topics:se,useUmbrella:q,workflows:L}),Dt=Ti(ne,m.has("@lunora/db"),q),Lt=ki(u,a.jurisdiction),Mt=Fi(L),_t=Di(c),Kt=Li(F),zt=Mi(g),Hn=_i(ce.scheduler),Gn=Ki(a.tables,q),Bt=zi(a.vectorIndexes),ye=$i(a,q),$t=Oi(m.has("@lunora/seed")),Ae=e.apiSpec??"openapi",He=Ae==="openapi"||Ae==="both",Ge=Ae==="openrpc"||Ae==="both",Ut=bi({capabilities:l,emailAgents:c.filter(p=>p.onEmail===!0).map(p=>({className:p.className,exportName:p.exportName})),hasAccess:m.has("@lunora/cloudflare-access"),hasAuth:m.has("@lunora/auth"),hasFramework:m.has("@lunora/astro")||m.has("@lunora/svelte")||m.has("@lunora/vue")||O(S(e.projectRoot,"src","worker.ts")),hasGlobal:a.tables.some(p=>Bs(p)),hasHyperdriveGlobal:a.tables.some(p=>$s(p)),hasKvIntrospector:ce.kv,hasNotify:k,hasQueue:F.some(p=>p.mode==="push"),hasScheduler:ce.scheduler,hasSourcedTables:a.tables.some(p=>p.externalSource!==void 0),hasStorage:ce.storage,hasVectors:qe,hasWorkflow:L.length>0,identity:j,jurisdiction:a.jurisdiction,jurisdictionPinsAuth:a.jurisdictionPinsAuth===!0,tables:a.tables.map(p=>({name:p.name,shardMode:p.shardMode})),useUmbrella:q,vectorIndexCount:a.vectorIndexes.length,voiceAgents:c.filter(p=>p.voice===!0&&p.voiceBindingName!==void 0).map(p=>({bindingName:p.voiceBindingName,exportName:p.exportName})),wantsArchitecture:xe,wantsOpenApi:He,wantsOpenRpc:Ge}),Vt=yp(e.projectRoot),jt=xe?je:[],qt=Ni({functions:Y,httpRoutes:Ve,modules:jt,version:Vt}),Wt=wi({functions:Y,modules:jt,version:Vt}),Ht=`${JSON.stringify(qt,void 0,2)}
+`,Gt=`${JSON.stringify(Wt,void 0,2)}
+`,be=xe&&X!==void 0?io({...X,callEdges:Va(o,n),crons:g,functions:Y,httpRoutes:Ve,modules:je,queues:F,schema:a,services:oe,topics:se,workflows:L}):void 0,Yt=Pi(qt),Qt=Ii(Wt),Ye=S(n,xp),Yn=O(Ye),Qe=[];if(!e.dryRun){O(M)||Qn(M,{recursive:!0});const p=(J,re)=>{Et(S(M,J),re),Qe.push(J)},C=(J,re)=>{Sp(S(M,J),re),re!==""&&Qe.push(J)};p("app.ts",Ut),p("dataModel.ts",f),p("api.ts",It),p("server.ts",te),p("functions.ts",Ct),p("shard.ts",Ft),p("crons.ts",zt),p("vectors.ts",Bt),p("drizzle.global.ts",ye.global),p("drizzle.shard.ts",ye.shard),C("containers.ts",Lt),C("workflows.ts",Mt),C("agents.ts",_t),C("queues.ts",Kt),C("scheduler.ts",Hn),C("shardRegistry.ts",Gn),C("seed.ts",$t),C("collections.ts",Dt),C("openapi.json",He?Ht:""),C("openapi.ts",He?Yt:""),C("openrpc.json",Ge?Gt:""),C("openrpc.ts",Ge?Qt:""),C("architecture.json",be===void 0?"":`${JSON.stringify(be,void 0,2)}
+`),C("architecture.ts",be===void 0?"":oo(be)),(!Yn||e.updateSchemaBaseline===!0)&&Et(Ye,sr(We))}if(t){const p=Xe.now(),C=Math.round(p-s),J=Math.round(kt-s),re=Math.round(p-kt);console.error(`@lunora/codegen: codegen took ${C.toString()}ms (discovery ${J.toString()}ms, emit ${re.toString()}ms)`)}return{advisories:Ot,advisorContext:Se,agents:c,containers:u,cronTriggers:[...new Set([...Bi(g),...x])],generated:{agents:_t,api:It,app:Ut,collections:Dt,containers:Lt,crons:zt,dataModel:f,drizzleGlobal:ye.global,drizzleShard:ye.shard,functions:Ct,openApi:Ht,openApiModule:Yt,openRpc:Gt,openRpcModule:Qt,queues:Kt,seed:$t,server:te,shard:Ft,vectors:Bt,workflows:Mt},migrations:ve,outputDirectory:M,platformDiagnostics:G.diagnostics,queues:F,schemaSnapshot:We,schemaSnapshotPath:Ye,workflows:L,writtenFiles:Qe}};export{xp as SCHEMA_SNAPSHOT_FILENAME,Ip as createCodegenProject,bp as findTsconfig,Ug as refreshCodegenProject,Vg as runCodegen};

package/dist/packem_shared/SHAPES_FILENAME-C-CUVhR6.mjs

@@ -0,0 +1 @@
+import{existsSync as m}from"node:fs";import{join as u}from"node:path";import{SyntaxKind as p,Node as o}from"ts-morph";import{diagnosticAt as g}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{b as f}from"./module-specifiers-WF8iAydP.mjs";import{p as d}from"./parse-validator-C2Osg6gv.mjs";import{findObjectProperty as l}from"./isTestPath-5ruOnRVA.mjs";import{a as S}from"./attribution-B7i322L0.mjs";const h="shapes.ts",b=r=>{const t=r.getSymbol();if(!t)return r.getText()==="defineShape";for(const e of t.getDeclarations())if(o.isImportSpecifier(e))return f(e.getImportDeclaration().getModuleSpecifierValue())?e.getNameNode().getText()==="defineShape":!1;return!1},x=r=>{const t=r.getSymbol();if(!t)return!1;for(const e of t.getDeclarations()){if(!o.isNamespaceImport(e))continue;const i=e.getFirstAncestorByKind(p.ImportDeclaration);return i!==void 0&&f(i.getModuleSpecifierValue())}return!1},y=r=>{if(o.isIdentifier(r))return b(r);if(o.isPropertyAccessExpression(r)){const t=r.getExpression();return r.getName()==="defineShape"&&o.isIdentifier(t)&&x(t)}return!1},N=r=>{const[t]=r.getArguments();if(!t||!o.isObjectLiteralExpression(t))return;const e=l(t,"table");if(!e||!o.isPropertyAssignment(e))return;const i=e.getInitializer();return i&&o.isStringLiteral(i)?i.getLiteralValue():void 0},E=r=>{const[t]=r.getArguments();if(!t||!o.isObjectLiteralExpression(t))return{};const e=l(t,"args");if(!e||!o.isPropertyAssignment(e))return{};const i=e.getInitializer();return!i||!o.isObjectLiteralExpression(i)?{}:d(i)},I=r=>{const t=[];for(const e of r.getVariableDeclarations()){const i=e.getInitializer();if(i?.getKind()!==p.CallExpression)continue;const s=i,a=s.getExpression();if(!y(a))continue;const n=e.getNameNode();if(!o.isIdentifier(n)){if(e.getVariableStatement()?.hasExportKeyword()!==!0)continue;throw g(n,"defineShape exports must be plain named exports (no destructuring)")}const c=S(e,"binding");c!==void 0&&t.push({args:E(s),exportName:c,filePath:"shapes",table:N(s)})}return t},z=(r,t)=>{const e=u(t,h);if(!m(e))return[];const i=r.getSourceFile(e)??r.addSourceFileAtPath(e),s=I(i);return s.sort((a,n)=>a.exportName.localeCompare(n.exportName)),s};export{h as SHAPES_FILENAME,z as discoverShapes};

package/dist/packem_shared/WORKFLOWS_FILENAME-d1r1GnQd.mjs

@@ -0,0 +1 @@
+import{existsSync as b}from"node:fs";import{join as y}from"node:path";import{LunoraError as w}from"@lunora/errors";import{isValidCronExpression as k}from"@lunora/scheduler";import{workflowDefaultName as E,workflowClassName as v}from"@lunora/workflow";import{Node as n,VariableDeclarationKind as S,SyntaxKind as x}from"ts-morph";import{diagnosticAt as c}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{unwrapToCallExpression as N,findObjectProperty as d,stringPropertyFor as L}from"./isTestPath-5ruOnRVA.mjs";import{a as P}from"./attribution-B7i322L0.mjs";import{r as $}from"./handler-reference-DaXlBYJx.mjs";const A="workflows.ts",W=new Set(["do","sleep","sleepUntil","waitForEvent"]),C=o=>{const e=o.getSymbol();if(!e)return o.getText()==="defineWorkflow";for(const t of e.getDeclarations())if(n.isImportSpecifier(t))return t.getImportDeclaration().getModuleSpecifierValue()!=="@lunora/workflow"?!1:t.getNameNode().getText()==="defineWorkflow";return!1},m=L("workflow"),O=(o,e,t)=>{if(n.isNumericLiteral(o))return o.getLiteralValue();throw c(o,`workflow "${e}": \`${t}\` must be a static number literal — it is deploy configuration codegen writes into wrangler.jsonc`)},f=(o,e)=>{const t=d(o,e);return t&&n.isPropertyAssignment(t)?t.getInitializerOrThrow():void 0},g=(o,e,t)=>{if(n.isObjectLiteralExpression(o))return o;throw c(o,`workflow "${e}": \`${t}\` must be an inline object literal — it is deploy configuration codegen writes into wrangler.jsonc`)},D=(o,e)=>{if(!n.isArrayLiteralExpression(o)||o.getElements().length===0)throw c(o,`workflow "${e}": \`schedules\` must be a non-empty inline array of cron expression string literals`);return o.getElements().map(t=>{const r=m(t,e,"schedules[]");if(!k(r))throw c(t,`workflow "${e}": schedule "${r}" is not a valid cron expression`);return r})},I=(o,e)=>{const t={},r=f(o,"schedules");r!==void 0&&(t.schedules=D(r,e));const s=f(o,"limits");if(s!==void 0){const i=f(g(s,e,"limits"),"steps");if(i===void 0)t.limits={};else{const l=O(i,e,"limits.steps");if(!Number.isInteger(l)||l<=0)throw c(i,`workflow "${e}": \`limits.steps\` must be a positive integer (got ${String(l)})`);t.limits={steps:l}}}const a=f(o,"defaultRetention");if(a!==void 0){const i=g(a,e,"defaultRetention"),l={};for(const u of["errorRetention","successRetention"]){const p=f(i,u);p!==void 0&&(l[u]=m(p,e,`defaultRetention.${u}`))}t.defaultRetention=l}return t},F=o=>{const e=o.getExpression();if(!n.isPropertyAccessExpression(e)||!W.has(e.getName()))return!1;const t=e.getExpression();return n.isPropertyAccessExpression(t)&&t.getName()==="step"?!0:n.isIdentifier(t)&&t.getText()==="step"},T=o=>{if(!o)return[];const e=[];for(const t of o.getDescendantsOfKind(x.CallExpression)){if(!F(t))continue;const r=t.getArguments()[0];!r||!(n.isStringLiteral(r)||n.isNoSubstitutionTemplateLiteral(r))||e.push({line:t.getStartLineNumber(),method:t.getExpression().getName(),name:r.getLiteralValue()})}return e},h=o=>{let e=o;for(;e&&(n.isAsExpression(e)||n.isSatisfiesExpression(e)||n.isParenthesizedExpression(e));)e=e.getExpression();return e},R=o=>{const e=h(o);if(e&&n.isObjectLiteralExpression(e))return e;if(!(!e||!n.isIdentifier(e)))for(const t of e.getSymbol()?.getDeclarations()??[]){const s=n.isVariableDeclaration(t)&&t.getVariableStatement()?.getDeclarationKind()===S.Const?h(t.getInitializer()):void 0;if(s&&n.isObjectLiteralExpression(s))return s}},j=(o,e)=>{const t=d(o,"handler"),r=$(t,e);return r!==void 0?r:{body:t!==void 0&&n.isPropertyAssignment(t)?t.getInitializer():t}},K=(o,e,t)=>{const r=R(o.getArguments()[0]);if(!r)throw c(o,`workflow "${e}": defineWorkflow's argument must be an object literal, or a local \`const\` holding one — codegen reads \`name\` and the \`ctx.step.*\` calls out of it statically. Keep the handler wherever you like and pass it through: \`const config = { handler: myHandler }; export const ${e} = defineWorkflow(config);\`.`);const s=j(r,t),a={className:v(e),exportName:e,name:E(e),steps:T(s.body),...s.file===void 0?{}:{handlerFile:s.file},...s.site===void 0?{}:{handlerSite:s.site}},i=d(r,"name");return i&&n.isPropertyAssignment(i)&&(a.name=m(i.getInitializerOrThrow(),e,"name")),{...a,...I(r,e)}},V=(o,e)=>{const t=[];for(const r of o.getVariableDeclarations()){const s=N(r.getInitializer());if(!s)continue;const a=s.getExpression();if(!n.isIdentifier(a)||!C(a))continue;const i=r.getNameNode();if(!n.isIdentifier(i)){if(r.getVariableStatement()?.hasExportKeyword()!==!0)continue;throw c(i,"defineWorkflow exports must be plain named exports (no destructuring)")}const l=P(r,"binding");l!==void 0&&t.push(K(s,l,e))}return t},z=o=>{const e=new Map,t=new Map;for(const r of o){const s=e.get(r.name);if(s!==void 0)throw new w("DUPLICATE_WORKFLOW_NAME",`Duplicate workflow name "${r.name}": produced by both "${s}" and "${r.exportName}". Deployed workflow names must be unique across the project.`,{status:500});e.set(r.name,r.exportName);const a=t.get(r.className);if(a!==void 0)throw new w("DUPLICATE_WORKFLOW_CLASS",`Duplicate workflow class "${r.className}": produced by both "${a}" and "${r.exportName}". Workflow export names must yield unique generated class names.`,{status:500});t.set(r.className,r.exportName)}},Y=(o,e)=>{const t=y(e,A);if(!b(t))return[];const r=o.getSourceFile(t)??o.addSourceFileAtPath(t),s=V(r,e);return s.sort((a,i)=>a.exportName.localeCompare(i.exportName)),z(s),s};export{A as WORKFLOWS_FILENAME,Y as discoverWorkflows};

package/dist/packem_shared/attribution-B7i322L0.mjs

@@ -0,0 +1 @@
+import{byCodepoint as w,callSiteCallers as k}from"@lunora/advisor";import{Node as r,SyntaxKind as p,VariableDeclarationKind as M,ts as O}from"ts-morph";import{i as F}from"./reserved-words-CW1QFbTd.mjs";import{isWriteTarget as T}from"./isTestPath-5ruOnRVA.mjs";const N=new WeakMap,A=e=>e.getStatements().flatMap(t=>r.isFunctionDeclaration(t)?[t]:r.isVariableStatement(t)?t.getDeclarations().filter(o=>r.isIdentifier(o.getNameNode())):[]),x=e=>r.isStringLiteral(e)?e.getLiteralValue():e.getText(),V=e=>{if(r.isFunctionDeclaration(e)||r.isClassDeclaration(e)){const t=e.getName();return e.hasExportKeyword()?[[t??"default",e.hasDefaultKeyword()?"default":t??"default"]]:[]}return!r.isVariableStatement(e)||!e.hasExportKeyword()?[]:e.getDeclarations().flatMap(t=>{const o=t.getNameNode();return r.isIdentifier(o)?[[o.getText(),o.getText()]]:o.getDescendantsOfKind(p.BindingElement).flatMap(n=>r.isIdentifier(n.getNameNode())?[[n.getName(),n.getName()]]:[])})},P=e=>{if(r.isExportDeclaration(e))return e.hasModuleSpecifier()||e.isTypeOnly()?[]:e.getNamedExports().filter(o=>!o.isTypeOnly()).map(o=>{const n=x(o.getNameNode()),s=o.getAliasNode();return[n,s===void 0?n:x(s)]});const t=r.isExportAssignment(e)&&!e.isExportEquals()?e.getExpression():void 0;return r.isIdentifier(t)?[[t.getText(),"default"]]:V(e)},h=new WeakMap,C=e=>{const t=h.get(e.compilerNode);if(t!==void 0)return t;const o=new Map;for(const[s,c]of e.getStatements().flatMap(i=>P(i)))o.set(s,(o.get(s)??new Set).add(c));const n=new Map([...o].map(([s,c])=>[s,[...c].toSorted(q)]));return h.set(e.compilerNode,n),n},g=e=>{const t=r.isBindingElement(e)?e.getFirstAncestorByKind(p.VariableStatement):void 0,o=r.isVariableDeclaration(e)?e.getVariableStatement():void 0,n=r.isFunctionDeclaration(e)?e:t??o;if(n===void 0||!r.isSourceFile(n.getParent()))return[];const s=r.isFunctionDeclaration(e)?e.getName()??"default":e.getName();return C(e.getSourceFile()).get(s)??[]},I=e=>new Map(e.flatMap(t=>{const o=g(t);return o.length===0?[]:[[t.compilerNode,o]]})),y=(e,t)=>{for(const o of e.getAncestors()){if(r.isExportAssignment(o)&&!o.isExportEquals())return{kind:"export",name:"default"};if((r.isFunctionDeclaration(o)&&r.isSourceFile(o.getParent())||r.isVariableDeclaration(o)&&r.isSourceFile(o.getVariableStatement()?.getParent())&&r.isIdentifier(o.getNameNode()))&&(r.isFunctionDeclaration(o)||r.isVariableDeclaration(o))){const s=t.get(o.compilerNode)?.[0];return s===void 0?{declaration:o,kind:"helper"}:{kind:"export",name:s}}}return{kind:"untracked"}},b=e=>{for(const t of e.getAncestors()){if(r.isExpressionWithTypeArguments(t)){const o=t.getParent();return!(r.isHeritageClause(o)&&o.getToken()===p.ExtendsKeyword&&(r.isClassDeclaration(o.getParent())||r.isClassExpression(o.getParent())))}if(O.isTypeNode(t.compilerNode))return!0}return!1},Z=e=>{const t=e.getParent(),o=r.isPropertyAccessExpression(t)&&t.getNameNode()===e,n=(r.isPropertyAssignment(t)||r.isMethodDeclaration(t))&&t.getNameNode()===e;return!o&&!n&&!b(e)},E=e=>{const t=e.getParent();return r.isShorthandPropertyAssignment(t)&&t.getNameNode()===e?t.getValueSymbol():e.getSymbol()},K=e=>{const t=E(e);return t?.getValueDeclaration()??t?.getDeclarations()[0]},S=new WeakMap,L=/\/typescript\/lib\/lib\.[^/]+\.d\.ts$/u,B=e=>{const t=e.getFilePath();return e.isDeclarationFile()&&(L.test(t)||t.includes("/@types/node/"))},J=e=>{const t=e.getNameNode(),o=r.isFunctionDeclaration(e)?void 0:e.getFirstAncestorByKind(p.VariableDeclarationList);if(!r.isIdentifier(t)||o?.getDeclarationKind()===M.Const||B(e.getSourceFile()))return!1;let n=S.get(e.compilerNode);if(n===void 0){const s=r.isFunctionDeclaration(e)?e.getSourceFile():e.getFirstAncestor(i=>r.isFunctionLikeDeclaration(i)||r.isArrowFunction(i))??e.getSourceFile(),c=t.getText();n=s.getDescendantsOfKind(p.Identifier).some(i=>i!==t&&i.getText()===c&&T(i)&&K(i)?.compilerNode===e.compilerNode),S.set(e.compilerNode,n)}return n},R=e=>{const t=new Map,o=new Set,n=new Set;for(const s of e){const c=s.getNameNode(),i=c?.getSymbol()?.compilerSymbol;c!==void 0&&i!==void 0&&(t.set(i,s.compilerNode),o.add(c.compilerNode),n.add(c.getText()))}return{bySymbol:t,nameNodes:o,spellings:n}},$=(e,t,o)=>{const{bySymbol:n,nameNodes:s,spellings:c}=R(t),i=new Map;for(const a of e.getDescendantsOfKind(p.Identifier)){if(!c.has(a.getText())||s.has(a.compilerNode)||b(a))continue;const l=E(a)?.compilerSymbol,d=l===void 0?void 0:n.get(l);d!==void 0&&i.set(d,[...i.get(d)??[],y(a,o)])}return i},_=(e,t)=>{const o=new Map(e.map(a=>[a.compilerNode,new Set])),n=new Set,s=a=>(o.get(a)?.size??0)+(n.has(a)?1:0),c=(a,l)=>{const d=s(a),m=o.get(a),u=l.kind==="helper"?l.declaration.compilerNode:void 0;l.kind==="export"&&m?.add(l.name);for(const v of u===void 0?[]:o.get(u)??[])m?.add(v);return(l.kind==="untracked"||u!==void 0&&n.has(u))&&n.add(a),s(a)!==d};let i=!0;for(;i;){i=!1;for(const[a,l]of t)for(const d of l)i=c(a,d)||i}return new Map([...o].map(([a,l])=>[a,{callers:[...l].toSorted((d,m)=>d.localeCompare(m)),untracked:n.has(a)}]))},W=e=>{const t=N.get(e.compilerNode);if(t!==void 0)return t;const o=A(e),n=I(o),s=o.filter(i=>!n.has(i.compilerNode)),c={exportNames:n,helperReach:s.length===0?new Map:_(s,$(e,s,n))};return N.set(e.compilerNode,c),c},Q=e=>{const t=W(e.getSourceFile()),o=y(e,t.exportNames);switch(o.kind){case"export":return{kind:"export",name:o.name};case"helper":{const n=o.declaration.getName(),s=t.helperReach.get(o.declaration.compilerNode);if(n===void 0||s===void 0)throw new Error(`call-site attribution: helper at ${o.declaration.getSourceFile().getFilePath()} is not indexed`);return{callers:s.callers,kind:"helper",name:n,...s.untracked?{untracked:!0}:{}}}default:return{kind:"module"}}},H=(e,t)=>{const o=k(e).map(s=>t(s));return o.includes("public")?"public":o.length===0||o.includes(void 0)||e.kind==="helper"&&e.untracked===!0?void 0:"internal"},U=(e,t)=>{const o=new Map(t.map(n=>[`${n.filePath}:${n.exportName}`,n.visibility]));return e.map(n=>{const s=H(n.scope,c=>o.get(`${n.file}:${c}`));return s===void 0?n:{...n,visibility:s}})},f=/^[$A-Z_a-z][\w$]*$/u,D=e=>f.test(e),z=e=>{const t=g(e);return t.length===0?r.isVariableDeclaration(e)&&e.getVariableStatement()?.hasExportKeyword()===!0?e.getName():void 0:t.find(o=>D(o))??e.getName()},ee=e=>e.getVariableStatements().flatMap(t=>t.getDeclarations()).filter(t=>z(t)!==void 0),te=(e,t)=>{if(r.isIdentifier(e.getNameNode()))return e.getVariableStatement()?.hasExportKeyword()===!0?e.getName():g(e).find(o=>t==="binding"?F(o):D(o))},q=(e,t)=>Number(f.test(t))-Number(f.test(e))||w(e,t);export{te as a,ee as b,Q as c,z as d,C as e,K as f,J as g,Z as h,D as i,g as j,b as k,B as l,E as r,U as w};

package/dist/packem_shared/{buildOpenApiDocument-DOsv1HEF.mjs → buildOpenApiDocument-BYtXD9iB.mjs}

@@ -1,3 +1,3 @@
-import{m as b}from"./modules-CsA-QVJ6.mjs";import{r as E}from"./json-data-Chfs2Cz5.mjs";import{s as l}from"./paths-C-9fwEgQ.mjs";import{LUNORA_ERROR_CODES as P,objectSchema as g,validatorIrToJsonSchema as m}from"./LUNORA_ERROR_CODES-C2s0xWQD.mjs";import{G as A}from"./shared-BXUKWh7t.mjs";const T="/_lunora/rest",x=["authorization","cf-access-jwt-assertion","cookie","payment-signature","x-payment"],v=["x-d1-bookmark","x-lunora-shard-key"],j=e=>[...x,...(e.credentialHeaders??[]).map(t=>t.toLowerCase())],O=e=>Number.isFinite(e)?Math.max(0,Math.floor(e)):0,$=(...e)=>{const t=[];for(const r of e)for(const n of r?.split(",")??[]){const s=n.trim().toLowerCase();s!==""&&!t.includes(s)&&t.push(s)}return t.length===0?void 0:t.join(", ")},k=(e,t)=>{const r=[t,`max-age=${String(O(e.maxAge))}`];return e.staleWhileRevalidate!==void 0&&r.push(`stale-while-revalidate=${String(O(e.staleWhileRevalidate))}`),r.join(", ")},N=e=>e.scope==="public"?$(e.vary,...j(e),...v):$(e.vary,...v),q=e=>{const t=e.indexOf(":");if(!(t<=0||t>=e.length-1||e.indexOf(":",t+1)!==-1))return{name:e.slice(t+1),namespace:e.slice(0,t)}},_=e=>{const t=q(e);if(t!==void 0)return`${T}/${t.namespace}/${t.name}`},C=e=>e==="query"?"GET":"POST",y="#/components/responses/LunoraError",R=/:([A-Za-z_$][\w$]*)/gu,w=e=>[...e.matchAll(R)].map(t=>t[1]),D=e=>e.replaceAll(R,"{$1}"),f=e=>e.kind==="optional"?e.inner??e:e,I=e=>{const t=new Set(w(e.path)),r=[];for(const[n,s]of Object.entries(e.searchParams)){const c=f(s);r.push({description:`Query parameter \`${n}\``,in:"query",name:n,required:s.kind!=="optional",schema:m(c)})}for(const[n,s]of Object.entries(e.params)){const c=f(s);r.push({description:`Path parameter \`${n}\``,in:t.has(n)?"path":"query",name:n,required:t.has(n)?!0:s.kind!=="optional",schema:m(c)})}return r},S=e=>e?{content:{"application/json":{schema:m(e)}},description:"Successful response."}:{content:{"application/json":{schema:{description:"Return shape is TS-inferred (no `.output()` declared); best-effort — any JSON."}}},description:"Successful response. The return shape is TypeScript-inferred and not declared via `.output()`, so it is documented best-effort."},L=(e,t)=>{const r=I(e),n={description:`${e.stream?"Streaming (SSE) ":""}HTTP route handler \`${e.exportName}\` (${e.method} ${e.path}).`,operationId:`${e.method.toLowerCase()}_${l(e.path)}`,responses:{200:S(e.output),204:{description:"No content (handler returned `undefined`)."},default:{$ref:y}},summary:`${e.method} ${e.path}`,tags:[t]};return r.length>0&&(n.parameters=r),Object.keys(e.body).length>0&&(n.requestBody={content:{"application/json":{schema:g(e.body)}},required:!0}),e.stream&&(n["x-lunora-stream"]="text/event-stream"),n},F=(e,t)=>{const r=`${l(e.filePath)}:${e.exportName}`,n={additionalProperties:!1,properties:{args:g(e.args),functionPath:{const:r,type:"string"},shardKey:{description:"Optional shard key; omitted routes to the default shard.",type:"string"}},required:["functionPath"],type:"object"};return{operation:{description:`Invoke the \`${e.kind}\` \`${r}\` over the Lunora RPC envelope (POST /_lunora/rpc).`,operationId:r,requestBody:{content:{"application/json":{schema:n}},required:!0},responses:{200:S(e.output),default:{$ref:y}},summary:`${e.kind}: ${r}`,tags:[t],"x-lunora-function-kind":e.kind},pathKey:`/_lunora/rpc#${r}`}},H=(e,t)=>{if(e===void 0||t!=="get"||e.scope===void 0||e.maxAge===void 0)return{};const r={maxAge:e.maxAge,scope:e.scope,...e.staleWhileRevalidate===void 0?{}:{staleWhileRevalidate:e.staleWhileRevalidate},...e.tag===void 0?{}:{tag:e.tag},...e.vary===void 0?{}:{vary:e.vary}},n={"Cache-Control":{description:r.scope==="public"?"Caching policy. `public` applies only to an uncredentialed request — a request carrying `Authorization` or `Cookie` is always answered `private`.":"Caching policy. Restricted to the caller's own cache; never stored by a shared/edge cache.",schema:{example:k(r,r.scope),type:"string"}}};r.tag!==void 0&&(n["Cache-Tag"]={description:"Purge tag for `ctx.cache.purge({ tags: [...] })`.",schema:{example:r.tag,type:"string"}});const s=N(r);return s!==void 0&&(n.Vary={description:"Request headers this response varies by. The endpoint's own negotiated headers are merged in at runtime.",schema:{example:s,type:"string"}}),{headers:n}},M=(e,t)=>{const r=`${l(e.filePath)}:${e.exportName}`,n=_(r);if(n===void 0)return;const s=C(e.kind),c=s==="GET",i={description:`Public REST endpoint for the \`${e.kind}\` \`${r}\` (opt-in via \`.expose({ rest: true })\`). Routed through the procedure, so auth / RLS / validators are enforced.`,operationId:`rest_${l(n)}`,responses:{200:{content:{"application/json":{schema:{description:"Procedure result. The shape is TS-inferred from the return type; best-effort — any JSON."}}},description:"Successful result (TypeScript-inferred return shape, documented best-effort).",...H(e.expose?.cache,c?"get":"post")},default:{$ref:y}},summary:`${s} ${n}`,tags:[t],"x-lunora-function-kind":e.kind};if(c){const d=Object.entries(e.args).map(([u,h])=>{const o=f(h);return{description:`Argument \`${u}\` (JSON-encoded for non-string values).`,in:"query",name:u,required:h.kind!=="optional",schema:m(o)}});return d.length>0&&(i.parameters=d),{method:"get",operation:i,path:n}}return i.requestBody={content:{"application/json":{schema:g(e.args)}},required:Object.keys(e.args).length>0},{method:"post",operation:i,path:n}},J=e=>{const t=e.version??"0.0.0",r=Object.create(null),n=o=>r[o]??Object.create(null),s=new Set,c=e.modules??[],i=o=>b(c,o);for(const o of e.httpRoutes){const a=D(o.path),p=n(a);p[o.method.toLowerCase()]=L(o,i(o.filePath)),r[a]=p,s.add(i(o.filePath))}const d=e.functions.filter(o=>o.visibility!=="internal"&&o.kind!=="stream");for(const o of d){const{operation:a,pathKey:p}=F(o,i(o.filePath));r[p]={post:a},s.add(i(o.filePath))}for(const o of d){if(o.expose?.rest!==!0)continue;const a=M(o,i(o.filePath));if(a===void 0)continue;const p=n(a.path);p[a.method]=a.operation,r[a.path]=p}const u=[...s].toSorted((o,a)=>o.localeCompare(a)).map(o=>({description:c.find(p=>p.name===o)?.description??`Operations declared in \`lunora/${o}\`.`,name:o}));return{components:{responses:{LunoraError:{content:{"application/json":{schema:{additionalProperties:!1,description:"Standard Lunora error envelope.",properties:{error:{additionalProperties:!1,properties:{code:{description:"Machine-readable error code. Clients switch on this value.",enum:P,type:"string"},message:{description:"Human-readable error message (never echoes internal details).",type:"string"}},required:["code","message"],type:"object"}},required:["error"],type:"object"}}},description:"A Lunora error response. The HTTP status reflects the error code (e.g. BAD_REQUEST→400, UNAUTHORIZED→401, FORBIDDEN→403, NOT_FOUND→404)."}}},info:{description:"Auto-generated from @lunora/values-typed functions by @lunora/codegen. Do not edit — run `lunora codegen` to regenerate.",title:"Lunora API",version:t},openapi:"3.1.0",paths:Object.fromEntries(Object.entries(r).map(([o,a])=>[o,{...a}])),tags:u}},z=e=>`${JSON.stringify(J(e),void 0,2)}
+import{m as b}from"./modules-DQv8-RtF.mjs";import{r as E}from"./json-data-Chfs2Cz5.mjs";import{s as l}from"./paths-C-9fwEgQ.mjs";import{LUNORA_ERROR_CODES as P,objectSchema as g,validatorIrToJsonSchema as m}from"./LUNORA_ERROR_CODES-C2s0xWQD.mjs";import{G as A}from"./shared-BXUKWh7t.mjs";const T="/_lunora/rest",x=["authorization","cf-access-jwt-assertion","cookie","payment-signature","x-payment"],v=["x-d1-bookmark","x-lunora-shard-key"],j=e=>[...x,...(e.credentialHeaders??[]).map(t=>t.toLowerCase())],O=e=>Number.isFinite(e)?Math.max(0,Math.floor(e)):0,$=(...e)=>{const t=[];for(const r of e)for(const n of r?.split(",")??[]){const s=n.trim().toLowerCase();s!==""&&!t.includes(s)&&t.push(s)}return t.length===0?void 0:t.join(", ")},k=(e,t)=>{const r=[t,`max-age=${String(O(e.maxAge))}`];return e.staleWhileRevalidate!==void 0&&r.push(`stale-while-revalidate=${String(O(e.staleWhileRevalidate))}`),r.join(", ")},N=e=>e.scope==="public"?$(e.vary,...j(e),...v):$(e.vary,...v),q=e=>{const t=e.indexOf(":");if(!(t<=0||t>=e.length-1||e.indexOf(":",t+1)!==-1))return{name:e.slice(t+1),namespace:e.slice(0,t)}},_=e=>{const t=q(e);if(t!==void 0)return`${T}/${t.namespace}/${t.name}`},C=e=>e==="query"?"GET":"POST",y="#/components/responses/LunoraError",R=/:([A-Za-z_$][\w$]*)/gu,w=e=>[...e.matchAll(R)].map(t=>t[1]),D=e=>e.replaceAll(R,"{$1}"),f=e=>e.kind==="optional"?e.inner??e:e,I=e=>{const t=new Set(w(e.path)),r=[];for(const[n,s]of Object.entries(e.searchParams)){const c=f(s);r.push({description:`Query parameter \`${n}\``,in:"query",name:n,required:s.kind!=="optional",schema:m(c)})}for(const[n,s]of Object.entries(e.params)){const c=f(s);r.push({description:`Path parameter \`${n}\``,in:t.has(n)?"path":"query",name:n,required:t.has(n)?!0:s.kind!=="optional",schema:m(c)})}return r},S=e=>e?{content:{"application/json":{schema:m(e)}},description:"Successful response."}:{content:{"application/json":{schema:{description:"Return shape is TS-inferred (no `.output()` declared); best-effort — any JSON."}}},description:"Successful response. The return shape is TypeScript-inferred and not declared via `.output()`, so it is documented best-effort."},L=(e,t)=>{const r=I(e),n={description:`${e.stream?"Streaming (SSE) ":""}HTTP route handler \`${e.exportName}\` (${e.method} ${e.path}).`,operationId:`${e.method.toLowerCase()}_${l(e.path)}`,responses:{200:S(e.output),204:{description:"No content (handler returned `undefined`)."},default:{$ref:y}},summary:`${e.method} ${e.path}`,tags:[t]};return r.length>0&&(n.parameters=r),Object.keys(e.body).length>0&&(n.requestBody={content:{"application/json":{schema:g(e.body)}},required:!0}),e.stream&&(n["x-lunora-stream"]="text/event-stream"),n},F=(e,t)=>{const r=`${l(e.filePath)}:${e.exportName}`,n={additionalProperties:!1,properties:{args:g(e.args),functionPath:{const:r,type:"string"},shardKey:{description:"Optional shard key; omitted routes to the default shard.",type:"string"}},required:["functionPath"],type:"object"};return{operation:{description:`Invoke the \`${e.kind}\` \`${r}\` over the Lunora RPC envelope (POST /_lunora/rpc).`,operationId:r,requestBody:{content:{"application/json":{schema:n}},required:!0},responses:{200:S(e.output),default:{$ref:y}},summary:`${e.kind}: ${r}`,tags:[t],"x-lunora-function-kind":e.kind},pathKey:`/_lunora/rpc#${r}`}},H=(e,t)=>{if(e===void 0||t!=="get"||e.scope===void 0||e.maxAge===void 0)return{};const r={maxAge:e.maxAge,scope:e.scope,...e.staleWhileRevalidate===void 0?{}:{staleWhileRevalidate:e.staleWhileRevalidate},...e.tag===void 0?{}:{tag:e.tag},...e.vary===void 0?{}:{vary:e.vary}},n={"Cache-Control":{description:r.scope==="public"?"Caching policy. `public` applies only to an uncredentialed request — a request carrying `Authorization` or `Cookie` is always answered `private`.":"Caching policy. Restricted to the caller's own cache; never stored by a shared/edge cache.",schema:{example:k(r,r.scope),type:"string"}}};r.tag!==void 0&&(n["Cache-Tag"]={description:"Purge tag for `ctx.cache.purge({ tags: [...] })`.",schema:{example:r.tag,type:"string"}});const s=N(r);return s!==void 0&&(n.Vary={description:"Request headers this response varies by. The endpoint's own negotiated headers are merged in at runtime.",schema:{example:s,type:"string"}}),{headers:n}},M=(e,t)=>{const r=`${l(e.filePath)}:${e.exportName}`,n=_(r);if(n===void 0)return;const s=C(e.kind),c=s==="GET",i={description:`Public REST endpoint for the \`${e.kind}\` \`${r}\` (opt-in via \`.expose({ rest: true })\`). Routed through the procedure, so auth / RLS / validators are enforced.`,operationId:`rest_${l(n)}`,responses:{200:{content:{"application/json":{schema:{description:"Procedure result. The shape is TS-inferred from the return type; best-effort — any JSON."}}},description:"Successful result (TypeScript-inferred return shape, documented best-effort).",...H(e.expose?.cache,c?"get":"post")},default:{$ref:y}},summary:`${s} ${n}`,tags:[t],"x-lunora-function-kind":e.kind};if(c){const d=Object.entries(e.args).map(([u,h])=>{const o=f(h);return{description:`Argument \`${u}\` (JSON-encoded for non-string values).`,in:"query",name:u,required:h.kind!=="optional",schema:m(o)}});return d.length>0&&(i.parameters=d),{method:"get",operation:i,path:n}}return i.requestBody={content:{"application/json":{schema:g(e.args)}},required:Object.keys(e.args).length>0},{method:"post",operation:i,path:n}},J=e=>{const t=e.version??"0.0.0",r=Object.create(null),n=o=>r[o]??Object.create(null),s=new Set,c=e.modules??[],i=o=>b(c,o);for(const o of e.httpRoutes){const a=D(o.path),p=n(a);p[o.method.toLowerCase()]=L(o,i(o.filePath)),r[a]=p,s.add(i(o.filePath))}const d=e.functions.filter(o=>o.visibility!=="internal"&&o.kind!=="stream");for(const o of d){const{operation:a,pathKey:p}=F(o,i(o.filePath));r[p]={post:a},s.add(i(o.filePath))}for(const o of d){if(o.expose?.rest!==!0)continue;const a=M(o,i(o.filePath));if(a===void 0)continue;const p=n(a.path);p[a.method]=a.operation,r[a.path]=p}const u=[...s].toSorted((o,a)=>o.localeCompare(a)).map(o=>({description:c.find(p=>p.name===o)?.description??`Operations declared in \`lunora/${o}\`.`,name:o}));return{components:{responses:{LunoraError:{content:{"application/json":{schema:{additionalProperties:!1,description:"Standard Lunora error envelope.",properties:{error:{additionalProperties:!1,properties:{code:{description:"Machine-readable error code. Clients switch on this value.",enum:P,type:"string"},message:{description:"Human-readable error message (never echoes internal details).",type:"string"}},required:["code","message"],type:"object"}},required:["error"],type:"object"}}},description:"A Lunora error response. The HTTP status reflects the error code (e.g. BAD_REQUEST→400, UNAUTHORIZED→401, FORBIDDEN→403, NOT_FOUND→404)."}}},info:{description:"Auto-generated from @lunora/values-typed functions by @lunora/codegen. Do not edit — run `lunora codegen` to regenerate.",title:"Lunora API",version:t},openapi:"3.1.0",paths:Object.fromEntries(Object.entries(r).map(([o,a])=>[o,{...a}])),tags:u}},z=e=>`${JSON.stringify(J(e),void 0,2)}
 `,K=e=>`${A}export const openApiSpec = ${E(e,"Record<string, unknown>")};
 `;export{J as buildOpenApiDocument,z as emitOpenApi,K as emitOpenApiModule};

package/dist/packem_shared/capabilitiesUsedBy-_kfPZ5wC.mjs

@@ -0,0 +1 @@
+import{SyntaxKind as c,Node as r}from"ts-morph";import{CAPABILITIES as f}from"./CAPABILITY_PROBES-DFsutD7g.mjs";import{bindingKeyName as p,listLunoraSourceFiles as g}from"./isTestPath-5ruOnRVA.mjs";import{scanImportDeclaration as u,noSandboxUsage as l}from"./discoverSandboxUsage-C-ntjbjl.mjs";const d="ctx",x=e=>{const t=new Set,n=new Set([d]),s=o=>{if(r.isObjectBindingPattern(o))for(const i of o.getElements()){const m=p(i);m&&t.add(m)}};for(const o of e.getDescendantsOfKind(c.BindingElement)){if(p(o)!==d)continue;const i=o.getNameNode();r.isIdentifier(i)?n.add(i.getText()):s(i)}const a=o=>r.isIdentifier(o)&&n.has(o.getText());for(const o of e.getDescendantsOfKind(c.PropertyAccessExpression))a(o.getExpression())&&t.add(o.getName());for(const o of e.getDescendantsOfKind(c.VariableDeclaration)){const i=o.getInitializer();i!==void 0&&a(i)&&s(o.getNameNode())}return t},E=e=>{if(e.isTypeOnly())return!0;if(r.isExportDeclaration(e)){const n=e.getNamedExports();return!e.isNamespaceExport()&&n.length>0&&n.every(s=>s.isTypeOnly())}const t=e.getNamedImports();return e.getDefaultImport()===void 0&&e.getNamespaceImport()===void 0&&t.length>0&&t.every(n=>n.isTypeOnly())},S=e=>{const t=new Set;for(const n of e.getDescendantsOfKind(c.CallExpression)){const[s]=n.getArguments();n.getExpression().getKind()===c.ImportKeyword&&(r.isStringLiteral(s)||r.isNoSubstitutionTemplateLiteral(s))&&t.add(s.getLiteralValue())}return t},y=e=>{const t=e.getImportDeclarations(),n=l();for(const s of t){const a=u(s);for(const o of Object.keys(n))n[o]||=a[o]}return{contextReads:x(e),dynamicImports:S(e),sandboxTools:n,valueImports:new Set([...t,...e.getExportDeclarations()].flatMap(s=>{const a=s.getModuleSpecifierValue();return a===void 0||E(s)?[]:[a]}))}},T=e=>{const t=new Set,n=new Set,s=l(),a=new Set;for(const o of e){for(const i of o.contextReads)t.add(i);for(const i of o.dynamicImports)n.add(i);for(const i of o.valueImports)a.add(i);for(const i of Object.keys(s))s[i]||=o.sandboxTools[i]}return{contextReads:t,dynamicImports:n,sandboxTools:s,valueImports:a}},I=e=>new Set(f.filter(({contextProperty:t,moduleSpecifier:n})=>e.valueImports.has(n)||t!==void 0&&e.contextReads.has(t)).map(({key:t})=>t)),N=new RegExp(String.raw`\b${d}\b`,"u"),b=new RegExp(String.raw`\b(?:${f.flatMap(({contextProperty:e})=>e===void 0?[]:[e]).join("|")})\b`,"u"),C=e=>N.test(e)&&b.test(e),D=(e,t)=>{const n=T(g(t).map(a=>y(e.getSourceFile(a)??e.addSourceFileAtPath(a)))),s=I(n);return Object.fromEntries(f.map(({key:a})=>[a,s.has(a)]))};export{I as capabilitiesUsedBy,x as contextPropertiesRead,D as discoverFeatureUsage,T as foldCapabilitySignals,C as mayReadCapabilityContext,y as sourceCapabilitySignals};

package/dist/packem_shared/chain-C17a7v59.mjs

@@ -0,0 +1 @@
+import{w as a}from"./classify-procedure-call-DC_O3oNQ.mjs";const l=s=>a(s,"use","rls");export{l as r};

package/dist/packem_shared/classify-procedure-call-DC_O3oNQ.mjs

@@ -0,0 +1 @@
+import{Node as o}from"ts-morph";import{unwrapExpression as a}from"./isTestPath-5ruOnRVA.mjs";import{a as u}from"./module-specifiers-WF8iAydP.mjs";const A=t=>o.isIdentifier(t)?t.getText():o.isPropertyAccessExpression(t)?t.getName():void 0,y=(t,i)=>{const e=new Set;for(const r of t.getImportDeclarations())if(u(r.getModuleSpecifierValue()))for(const n of r.getNamedImports())n.getNameNode().getText()===i&&e.add(n.getAliasNode()?.getText()??n.getName());return e},h=(t,i)=>{if(o.isPropertyAccessExpression(t))return t.getName()===i;if(!o.isIdentifier(t))return!1;const e=t.getText();return e===i||y(t.getSourceFile(),i).has(e)},d=t=>{const i=t.getSymbol();if(!i)return t.getText();for(const e of i.getDeclarations())if(o.isImportSpecifier(e))return u(e.getImportDeclaration().getModuleSpecifierValue())?e.getNameNode().getText():void 0},p=t=>{const i=[];let e=a(t);for(;e&&o.isCallExpression(e);){const r=a(e.getExpression());if(!r||!o.isPropertyAccessExpression(r))return{root:void 0,steps:i};i.push({call:e,name:r.getName()}),e=a(r.getExpression())}return{root:e,steps:i}},f=t=>p(t).steps,x=(t,i,e)=>f(t).filter(r=>r.name===i).map(r=>r.call.getArguments()[0]).filter(r=>r!==void 0&&o.isCallExpression(r)&&h(r.getExpression(),e)),w=(t,i)=>f(t).some(e=>e.name===i),P=(t,i,e)=>x(t,i,e).length>0,l=new Set(["action","mutation","query","stream"]),m={internalAction:"action",internalMutation:"mutation",internalQuery:"query"},N={onConnect:"connect",onDisconnect:"disconnect",onQueryChange:"reactor",onShardInit:"init",onWhisper:"whisper"},I=t=>t==="whisper"?"query":"mutation",C=t=>{const{root:i}=p(t);return i&&o.isIdentifier(i)?i:void 0},g=(t,i=!1)=>{const e=C(t);if(!e)return;const r=d(e);if(r===void 0){if(i)return;const n=e.getSymbol()?.getValueDeclaration();if(n&&o.isVariableDeclaration(n)){const s=n.getInitializer();return s?g(s,!0):void 0}return}return l.has(r)?"public":m[r]?"internal":void 0},E=t=>{const i=t.getName();if(!l.has(i))return;const e=t.getExpression(),r=a(e)??e,n=e===r?[r]:[e,r];if(n.some(c=>c.getType().getProperty("__lunoraProcedure"))){const c=n.some(v=>v.getType().getProperty("__lunoraVisibility"));return{kind:i,receiver:r,visibility:c?"internal":"public"}}const s=g(r);if(s)return{kind:i,receiver:r,visibility:s}},D=t=>{const i=t.getExpression();if(o.isPropertyAccessExpression(i))return E(i);if(!o.isIdentifier(i))return;const e=d(i);if(!e)return;if(l.has(e))return{kind:e,visibility:"public"};const r=m[e];if(r)return{kind:r,visibility:"internal"};const n=N[e];if(n)return{kind:I(n),lifecycle:n,visibility:"internal"}};export{A as a,f as b,D as c,P as d,w as e,x as w};

package/dist/packem_shared/context-property-calls-BvE4YxG6.mjs

@@ -0,0 +1 @@
+import{Node as i}from"ts-morph";import{listLunoraSourceFiles as a,lunoraRelativePath as c,handlerOf as l}from"./isTestPath-5ruOnRVA.mjs";import{b as d,d as f}from"./attribution-B7i322L0.mjs";import{c as u}from"./context-root-C4hjiCTo.mjs";import{c as m}from"./classify-procedure-call-DC_O3oNQ.mjs";const p=t=>{const r=t.getInitializer();if(!r||!i.isCallExpression(r))return;const e=m(r);if(!e||e.kind!=="query"&&e.kind!=="mutation")return;const o=l(r,e.receiver);return o?{exportName:f(t)??t.getName(),handler:o,kind:e.kind}:void 0},x=(t,r)=>{const e=t.getParent();return e&&i.isPropertyAccessExpression(e)&&e.getExpression()===t?`ctx.${r}.${e.getName()}`:`ctx.${r}`},h=(t,r,e)=>{const o=[];for(const n of u(t.handler,e))o.push({callee:x(n,e),exportName:t.exportName,file:r,kind:t.kind,line:n.getStartLineNumber()});return o},N=(t,r,e)=>{const o=[];for(const n of d(t)){const s=p(n);s&&o.push(...h(s,r,e))}return o},F=(t,r,e)=>{const o=[];for(const n of a(r)){const s=t.getSourceFile(n)??t.addSourceFileAtPath(n);o.push(...N(s,c(r,n),e))}return o};export{F as d};

package/dist/packem_shared/context-root-C4hjiCTo.mjs

@@ -0,0 +1 @@
+import{Node as s,SyntaxKind as d}from"ts-morph";import{unwrapExpression as l,memberAccessOf as P,bindingKeyName as C,findObjectProperty as p,isConstDeclaration as D,walkChain as A}from"./isTestPath-5ruOnRVA.mjs";import{f as v,g as I,h as M}from"./attribution-B7i322L0.mjs";import{c as F}from"./classify-procedure-call-DC_O3oNQ.mjs";import{isDefineMutatorCallee as b}from"./MUTATORS_FILENAME-DwAZEI6d.mjs";const x=8,E=t=>{if(s.isMethodDeclaration(t))return t;const e=s.isPropertyAssignment(t)?l(t.getInitializer()):void 0,o=s.isShorthandPropertyAssignment(t)?t.getNameNode():e;if(s.isArrowFunction(o)||s.isFunctionExpression(o))return o;const i=s.isIdentifier(o)?v(o):void 0;if(s.isFunctionDeclaration(i))return i;const n=D(i)?l(i.getInitializer()):void 0;return s.isArrowFunction(n)||s.isFunctionExpression(n)?n:void 0},w=t=>{const e=l(t.getArguments()[0]),o=s.isObjectLiteralExpression(e)?e:void 0,i=p(o,"server"),n=p(o,"handler"),r=i!==void 0&&b(t.getExpression()),a=n===void 0?void 0:F(t),u=a!==void 0&&a.receiver===void 0;return[r?E(i):void 0,u?E(n):void 0].filter(f=>f!==void 0)},h=new WeakMap,O=t=>{const e=t.getSourceFile(),o=h.get(e.compilerNode);if(o!==void 0)return o;const i=new Set(e.getDescendantsOfKind(d.CallExpression).flatMap(n=>w(n)).map(n=>n.compilerNode));return h.set(e.compilerNode,i),i},S=t=>{const e=t.getParent();return(s.isArrowFunction(e)||s.isFunctionExpression(e)||s.isFunctionDeclaration(e)||s.isMethodDeclaration(e))&&e.getParameters()[0]===t&&O(t).has(e.compilerNode)},G=t=>{const e=t.getParent();return(s.isArrowFunction(e)||s.isFunctionExpression(e)||s.isFunctionDeclaration(e)||s.isMethodDeclaration(e))&&e.getParameters()[1]===t&&O(t).has(e.compilerNode)},T=t=>t.getNameNode().getDescendantsOfKind(d.BindingElement).some(e=>e.getParent().getParent()===t&&["args","ctx"].includes(C(e))),g=(t,e,o)=>{const i=t.getParent().getParent(),n=C(t);if(t.getDotDotDotToken()!==void 0||e==="trust"&&I(t))return;let r;if(s.isParameterDeclaration(i)){if(!S(i)||T(i))return n==="ctx"?[]:void 0;r=[]}else s.isBindingElement(i)?r=g(i,e,o):s.isVariableDeclaration(i)&&o>0&&(r=c(i.getInitializer(),e,o-1));return r===void 0?void 0:[...r,n]},c=(t,e="discover",o=x)=>{const i=l(t),n=P(i);if(n!==void 0){const r=c(n.object,e,o);return r===void 0?void 0:[...r,n.member]}return s.isIdentifier(i)?B(i,e,o):void 0},B=(t,e,o)=>{const i=t.getText()==="ctx",n=e==="trust"||!i?v(t):void 0;return i&&!s.isVariableDeclaration(n)?s.isBindingElement(n)?g(n,e,o):[]:s.isParameterDeclaration(n)?s.isIdentifier(n.getNameNode())&&S(n)?[]:void 0:s.isBindingElement(n)?g(n,e,o):!(s.isVariableDeclaration(n)&&s.isIdentifier(n.getNameNode())&&o>0)||e==="trust"&&I(n)?void 0:c(n.getInitializer(),e,o-1)},Q=t=>c(t,"discover"),H=t=>{const e=c(t);return e===void 0?void 0:["ctx",...e].join(".")},q=(t,e)=>{if(e(t.getText()))return!0;const o=H(t);return o!==void 0&&e(o)},J=(t,e)=>{const o=l(t),i=P(o);if(i!==void 0&&i.member!==e.at(-1))return!1;const n=o===void 0?void 0:c(o);return n?.length===e.length&&n.every((r,a)=>r===e[a])},Y=(t,e)=>U(t).get(e)??[],K=t=>{const e=new Map;for(const i of t.getDescendantsOfKind(d.BindingElement)){const n=s.isIdentifier(i.getNameNode())?g(i,"discover",x):void 0;n?.length===1&&n[0]!==void 0&&e.set(i.compilerNode,n[0])}const o=new Set([...e.keys()].map(i=>i.name.getText()));return t.getDescendantsOfKind(d.Identifier).flatMap(i=>{const r=o.has(i.getText())&&!s.isBindingElement(i.getParent())?v(i):void 0,a=r===void 0?void 0:e.get(r.compilerNode);return a===void 0?[]:[[a,i]]})},N=new WeakMap,U=t=>{const e=N.get(t.compilerNode);if(e!==void 0)return e;const o=new Map;for(const[n,r]of[...y(t),...K(t)])o.set(n,[...o.get(n)??[],r]);const i=new Map([...o].map(([n,r])=>[n,r.toSorted((a,u)=>a.getPos()-u.getPos())]));return N.set(t.compilerNode,i),i},y=t=>t.getDescendantsOfKind(d.PropertyAccessExpression).flatMap(e=>z(e.getExpression())?[[e.getName(),e]]:[]),z=t=>s.isIdentifier(t)&&c(t)?.length===0,Z=t=>{const e=c(t);return e?.length===1&&e[0]==="db"},_=new Set(["asId","createMultipartUpload","fetch","generateUploadUrl","getPresignedUrl","getSignedUrl","getUrl","normalizeId","resumeMultipartUpload","runAction","runMutation","runQuery","store","upload"]),R=new Set(["catch","flatMap","map","reduce","reduceRight","then"]),k=(t,e=x)=>{const o=A(t,u=>{const f=l(u.getExpression()),m=s.isPropertyAccessExpression(f)?f.getName():void 0;return m!==void 0&&(_.has(m)||R.has(m))?!1:void 0}),i=o.root;if(o.verdict!==void 0||!s.isIdentifier(i))return o.verdict??!1;if(c(i,"trust")!==void 0)return!0;const n=v(i),r=s.isBindingElement(n)?n.getFirstAncestorByKind(d.VariableDeclaration):n,a=D(r)&&e>0?r.getInitializer():void 0;return a!==void 0&&k(a,e-1)},$=t=>(s.isIdentifier(t)?[t]:t.getDescendantsOfKind(d.Identifier)).some(o=>M(o)&&c(o,"trust")!==void 0);export{R as C,_ as E,G as a,H as b,Y as c,Z as d,Q as e,k as f,z as g,J as i,q as m,$ as r};

package/dist/packem_shared/{database-calls-Br5z7dZL.mjs → database-calls-B6ylmcGA.mjs}

@@ -1 +1 @@
-import{SyntaxKind as g,Node as n}from"ts-morph";import{d as p}from"./context-root-Dlht00NP.mjs";const c=e=>n.isPropertyAccessExpression(e)&&e.getName()==="db"||n.isIdentifier(e)&&e.getText()==="db"||p(e),l=new Set(["findFirst","findFirstOrThrow","findMany","findUnique"]),u=e=>{const t=e.getExpression();if(!n.isPropertyAccessExpression(t)||!l.has(t.getName()))return;const s=t.getExpression();if(c(s))return{options:e.getArguments()[1],table:d(e)};if(n.isPropertyAccessExpression(s)){const o=s.getExpression();if(c(o))return{options:e.getArguments()[0],table:s.getName()}}},f=(e,t)=>{const s=e.getExpression();return!n.isPropertyAccessExpression(s)||!t.has(s.getName())?!1:c(s.getExpression())},d=e=>{const t=e.getArguments()[0];return t&&n.isStringLiteral(t)?t.getLiteralText():""},m=(e,t,s)=>{const o=new Set,i=new Set;for(const a of e.getDescendantsOfKind(g.CallExpression))if(f(a,t)){const r=d(a);r!==""&&o.add(r)}else if(f(a,s)){const r=d(a);r!==""&&i.add(r)}return{tablesRead:[...o],tablesWritten:[...i]}};export{c as i,u as r,m as t};
+import{SyntaxKind as g,Node as n}from"ts-morph";import{d as p}from"./context-root-C4hjiCTo.mjs";const c=e=>n.isPropertyAccessExpression(e)&&e.getName()==="db"||n.isIdentifier(e)&&e.getText()==="db"||p(e),l=new Set(["findFirst","findFirstOrThrow","findMany","findUnique"]),u=e=>{const t=e.getExpression();if(!n.isPropertyAccessExpression(t)||!l.has(t.getName()))return;const s=t.getExpression();if(c(s))return{options:e.getArguments()[1],table:d(e)};if(n.isPropertyAccessExpression(s)){const o=s.getExpression();if(c(o))return{options:e.getArguments()[0],table:s.getName()}}},f=(e,t)=>{const s=e.getExpression();return!n.isPropertyAccessExpression(s)||!t.has(s.getName())?!1:c(s.getExpression())},d=e=>{const t=e.getArguments()[0];return t&&n.isStringLiteral(t)?t.getLiteralText():""},m=(e,t,s)=>{const o=new Set,i=new Set;for(const a of e.getDescendantsOfKind(g.CallExpression))if(f(a,t)){const r=d(a);r!==""&&o.add(r)}else if(f(a,s)){const r=d(a);r!==""&&i.add(r)}return{tablesRead:[...o],tablesWritten:[...i]}};export{c as i,u as r,m as t};

package/dist/packem_shared/discoverAuthApiCalls-CUM8XgDc.mjs

@@ -0,0 +1 @@
+import{Node as t}from"ts-morph";import{collectCallRows as n}from"./isTestPath-5ruOnRVA.mjs";import{c as p}from"./attribution-B7i322L0.mjs";import{a}from"./project-config-file-Cb5ouVEK.mjs";const c=s=>{const r=s.getExpression();if(!t.isPropertyAccessExpression(r))return!1;const e=r.getExpression();return t.isPropertyAccessExpression(e)?e.getName()==="authApi":t.isIdentifier(e)&&e.getText()==="authApi"},u=s=>{const r=s.getArguments()[0];if(r===void 0)return!1;if(!t.isObjectLiteralExpression(r))return!0;for(const e of r.getProperties())if((t.isPropertyAssignment(e)||t.isShorthandPropertyAssignment(e))&&a(e)==="headers"||t.isSpreadAssignment(e))return!0;return!1},d=(s,r)=>n(s,r,(e,o)=>{if(!c(e))return;const i=e.getExpression();return{file:o,hasHeaders:u(e),line:e.getStartLineNumber(),method:t.isPropertyAccessExpression(i)?i.getName():"",scope:p(e)}});export{d as default};

package/dist/packem_shared/discoverCrons-DI1xHRei.mjs

@@ -0,0 +1 @@
+import{LunoraError as L}from"@lunora/errors";import{CRON_SCHEDULE_KINDS as A,isValidCronExpression as O,warnIfSecondsLeading as S,compileCronSchedule as I}from"@lunora/scheduler";import{SyntaxKind as p,Node as n}from"ts-morph";import{diagnosticAt as f,CodegenDiagnosticError as R}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{i as b}from"./module-specifiers-WF8iAydP.mjs";import{s as $}from"./paths-C-9fwEgQ.mjs";import{listLunoraSourceFiles as y}from"./isTestPath-5ruOnRVA.mjs";import{a as P}from"./project-config-file-Cb5ouVEK.mjs";const D=new Set([...A,"cron"]),v=e=>{const t=e.getSymbol();if(!t)return e.getText()==="cronJobs";for(const r of t.getDeclarations())if(n.isImportSpecifier(r))return b(r.getImportDeclaration().getModuleSpecifierValue())?r.getNameNode().getText()==="cronJobs":!1;return!1},F=e=>{const t=new Set;for(const r of e.getVariableDeclarations()){const s=r.getInitializer();if(s?.getKind()!==p.CallExpression)continue;const i=s.getExpression();n.isIdentifier(i)&&v(i)&&t.add(r.getName())}return t},V=e=>{let t=e;for(;n.isCallExpression(t)||n.isPropertyAccessExpression(t);)t=t.getExpression();return n.isIdentifier(t)?t.getText():void 0},x=(e,t)=>{const r=e.getArguments()[t];return r&&(n.isStringLiteral(r)||n.isNoSubstitutionTemplateLiteral(r))?r.getLiteralValue():void 0},_=(e,t)=>{if(n.isStringLiteral(e)||n.isNoSubstitutionTemplateLiteral(e)||n.isNumericLiteral(e))return e.getLiteralValue();if(n.isTrueLiteral(e))return!0;if(n.isFalseLiteral(e))return!1;if(n.isPrefixUnaryExpression(e)&&e.getOperatorToken()===p.MinusToken){const r=e.getOperand();if(n.isNumericLiteral(r))return-r.getLiteralValue()}if(n.isObjectLiteralExpression(e))return g(e,t);if(n.isArrayLiteralExpression(e))return e.getElements().map(r=>_(r,t));throw f(e,`Cron job "${t}" passes a non-static value where a literal is required; codegen can only read literals.`,{code:"CRON_NON_STATIC_VALUE",name:"LunoraError",status:500})},g=(e,t)=>{const r={};for(const s of e.getProperties()){if(!n.isPropertyAssignment(s))throw f(s,`Cron job "${t}" uses an unsupported object property (shorthand/spread/method) where a static literal is required.`,{code:"CRON_NON_STATIC_VALUE",name:"LunoraError",status:500});const i=s.getInitializer();i&&(r[P(s)]=_(i,t))}return r},C=(e,t,r)=>{const s=e.getArguments()[t];if(!s||!n.isPropertyAccessExpression(s))throw f(e,`Cron job "${r}" must reference a function statically (e.g. internal.email.digest); codegen cannot resolve a dynamic reference.`,{code:"CRON_NON_STATIC_FN",name:"LunoraError",status:500});const i=s.getName(),o=s.getExpression();if(!n.isPropertyAccessExpression(o))throw f(s,`Cron job "${r}" function reference must be of the form internal.file.fn (two property accesses).`,{code:"CRON_NON_STATIC_FN",name:"LunoraError",status:500});const a=o.getName();return`${$(a)}:${i}`},h=e=>({workflow:{className:e.className,exportName:e.exportName}}),w=e=>({workflow:{className:e.className,exportName:e.exportName}}),T=(e,t,r,s,i,o)=>{const a=e.getExpression();if(!n.isIdentifier(a)||a.getText()!==t)return;const c=r.get(e.getName());if(c)return o(c);throw f(e,`Cron job "${s}" targets ${t}.${e.getName()}, but no such ${i} is declared in lunora/${i}s.ts.`,{code:"CRON_NON_STATIC_FN",name:"LunoraError",status:500})},j=(e,t,r,s,i)=>{const o=e.getArguments()[t];if(o&&n.isPropertyAccessExpression(o)){const a=T(o,"workflows",s,r,"workflow",h);if(a)return a;const c=T(o,"agents",i,r,"agent",w);return c||{functionPath:C(e,t,r)}}if(o&&n.isIdentifier(o)){const a=s.get(o.getText()),c=i.get(o.getText());if(a&&c)throw f(o,`Cron job "${r}" references "${o.getText()}", which is ambiguous: a workflow and an agent are both declared under that name.`,{code:"CRON_NON_STATIC_FN",name:"LunoraError",status:500});if(a)return h(a);if(c)return w(c);throw f(o,`Cron job "${r}" references "${o.getText()}", which is neither a function (internal.file.fn / api.file.fn) nor a declared workflow in lunora/workflows.ts nor a declared agent in lunora/agents.ts.`,{code:"CRON_NON_STATIC_FN",name:"LunoraError",status:500})}return{functionPath:C(e,t,r)}},k=/^@lunora\/scheduler:\s*/u,U=(e,t)=>{const r=x(e,1);if(r===void 0)throw f(e,`Cron job "${t}" must pass a string-literal cron expression to ".cron(...)".`,{code:"CRON_EXPR_NOT_STATIC",name:"LunoraError",status:500});if(!O(r))throw f(e,`Cron job "${t}" has an invalid cron expression "${r}" — expected 5 or 6 space-separated fields.`,{code:"CRON_EXPR_INVALID",name:"LunoraError",status:500});return S(r,`cron expression for job "${t}"`),r},M=(e,t,r)=>{const s=e.getArguments()[1];if(!s||!n.isObjectLiteralExpression(s))throw f(e,`Cron job "${r}" must pass an object-literal schedule to ".${t}(...)".`,{code:"CRON_SCHEDULE_NOT_STATIC",name:"LunoraError",status:500});try{return I(t,g(s,r),r)}catch(i){if(i instanceof R)throw i;const o=i instanceof Error?i.message.replace(k,""):String(i);throw f(e,o,{code:"CRON_SCHEDULE_INVALID",name:"LunoraError",status:500})}},z=(e,t,r,s,i)=>{const o=t.getName();if(!D.has(o)||!r.has(V(t.getExpression())??""))return;const a=x(e,0);if(a===void 0||a.trim()==="")throw f(e,`A cron ".${o}(...)" registration must pass a non-empty string-literal name as its first argument.`,{code:"CRON_NAME_NOT_STATIC",name:"LunoraError",status:500});const c=o==="cron"?U(e,a):M(e,o,a),u=j(e,2,a,s,i),l=e.getArguments()[3];return{args:l&&n.isObjectLiteralExpression(l)?g(l,a):{},cron:c,name:a,...u}},H=e=>{const t=new Set;for(const r of e){if(t.has(r.name))throw new L("DUPLICATE_CRON_NAME",`Duplicate cron job name "${r.name}": cron names must be unique across the project.`,{status:500});t.add(r.name)}},Y=(e,t,r=[],s=[])=>{const i=y(t),o=[],a=new Map(r.map(u=>[u.exportName,u])),c=new Map(s.map(u=>[u.exportName,u]));for(const u of i){const l=e.getSourceFile(u)??e.addSourceFileAtPath(u),m=F(l);if(m.size!==0)for(const d of l.getDescendantsOfKind(p.CallExpression)){const N=d.getExpression();if(!n.isPropertyAccessExpression(N))continue;const E=z(d,N,m,a,c);E&&o.push(E)}}return o.sort((u,l)=>u.name.localeCompare(l.name)),H(o),o};export{Y as default};

package/dist/packem_shared/discoverFunctions-B-7117i2.mjs

@@ -0,0 +1 @@
+import{d as P}from"./declared-output-Iaar469J.mjs";import{s as b}from"./paths-C-9fwEgQ.mjs";import{findObjectProperty as c,bindingKeyName as N,listLunoraSourceFiles as A,lunoraRelativePath as F}from"./isTestPath-5ruOnRVA.mjs";import{e as O,i as z}from"./attribution-B7i322L0.mjs";import{u as y,p as C,c as g,r as S}from"./unwrap-handler-return-CM6v2E3A.mjs";import{b as d,c as L}from"./classify-procedure-call-DC_O3oNQ.mjs";import{Node as n,SyntaxKind as k}from"ts-morph";import{r as h,p as x,a as I}from"./parse-validator-C2Osg6gv.mjs";const T=i=>{const e=i.getArguments()[0];if(!e||!n.isObjectLiteralExpression(e))return"unknown";const t=c(e,"handler");if(!t||!n.isPropertyAssignment(t))return"unknown";const r=t.getInitializer();return!r||!(n.isArrowFunction(r)||n.isFunctionExpression(r))?"unknown":y(r)},w=i=>{const e=i.getArguments()[0];return!e||!(n.isArrowFunction(e)||n.isFunctionExpression(e))?"unknown":y(e)},V=i=>{let e={};for(const t of d(i)){if(t.name!=="input")continue;const r=t.call.getArguments()[0],s=r!==void 0&&n.isExpression(r)?h(r):void 0;s!==void 0&&(e={...x(s),...e})}return e},D=i=>{const e=d(i).find(r=>r.name==="output");if(!e)return;const t=e.call.getArguments()[0];return t&&n.isExpression(t)?C(e.call,()=>I(t)):void 0},p=(i,e)=>{const t=c(i,e);if(t===void 0||!n.isPropertyAssignment(t))return;const r=t.getInitializer();return r!==void 0&&n.isStringLiteral(r)?r.getLiteralValue():void 0},v=(i,e)=>{const t=c(i,e);if(t===void 0||!n.isPropertyAssignment(t))return;const r=t.getInitializer();return r!==void 0&&n.isNumericLiteral(r)?r.getLiteralValue():void 0},j=i=>{const e=c(i,"cache");if(e===void 0||!n.isPropertyAssignment(e))return;const t=e.getInitializer();if(t===void 0||!n.isObjectLiteralExpression(t))return;const r=p(t,"scope"),s=v(t,"maxAge"),o=v(t,"staleWhileRevalidate"),a=p(t,"tag"),l=p(t,"vary"),m={...s===void 0?{}:{maxAge:s},...r==="private"||r==="public"?{scope:r}:{},...o===void 0?{}:{staleWhileRevalidate:o},...a===void 0?{}:{tag:a},...l===void 0?{}:{vary:l}};return Object.keys(m).length===0?void 0:m},B=i=>{if(i===void 0||!n.isObjectLiteralExpression(i))return{};const e=j(i),t=c(i,"rest");return t!==void 0&&n.isPropertyAssignment(t)?{...e===void 0?{}:{cache:e},rest:t.getInitializer()?.getText()==="true"}:e===void 0?{}:{cache:e}},R=i=>{const e=d(i).find(t=>t.name==="expose");return e?B(e.call.getArguments()[0]):void 0},M=i=>{const e=i.getArguments()[0];if(!e||!n.isObjectLiteralExpression(e))return{};const t=c(e,"args");if(!t||!n.isPropertyAssignment(t))return{};const r=t.getInitializer(),s=r===void 0?void 0:h(r);return s===void 0?{}:x(s)},$=8,u=(i,e=0)=>{if(e>$)return;if(n.isCallExpression(i))return i;if(n.isParenthesizedExpression(i)||n.isAsExpression(i)||n.isSatisfiesExpression(i)||n.isNonNullExpression(i))return u(i.getExpression(),e+1);if(!n.isIdentifier(i)&&!n.isPropertyAccessExpression(i))return;const t=i.getSymbol()?.getValueDeclaration();return t?f(t,e+1):void 0},f=(i,e)=>{if(n.isVariableDeclaration(i)||n.isPropertyAssignment(i)){const t=i.getInitializer();return t?u(t,e):void 0}if(n.isShorthandPropertyAssignment(i)){const t=i.getValueSymbol()?.getValueDeclaration();return t?f(t,e+1):void 0}if(n.isBindingElement(i)){const t=N(i),o=i.getFirstAncestorByKind(k.VariableDeclaration)?.getInitializer()?.getType().getProperty(t)?.getValueDeclaration();return o?f(o,e+1):void 0}},W=(i,e=()=>!0)=>{const t=i.getNameNode();if(n.isObjectBindingPattern(t)){const o=[];for(const a of t.getElements().filter(l=>e(l.getName()))){const l=u(a.getNameNode());l&&o.push([a.getName(),l])}return o}if(!e(i.getName()))return[];const r=i.getInitializer(),s=r&&(n.isCallExpression(r)?r:u(r));return s?[[i.getName(),s]]:[]},_=i=>{const e=L(i);if(!e)return;const{receiver:t}=e;if(t){const r=R(t),s=g(()=>D(t)),o=g(()=>w(i)),a=P({kind:e.kind,output:s.value});return S(a?s.erased:o.erased),{args:V(t),...r?{expose:r}:{},kind:e.kind,...s.value?{output:s.value}:{},returnType:o.value,visibility:e.visibility}}return e.lifecycle?{args:{},kind:e.kind,lifecycle:e.lifecycle,returnType:"void",visibility:e.visibility}:{args:M(i),kind:e.kind,returnType:T(i),visibility:e.visibility}},E=(i,e,t)=>{const r=_(i);if(r)return{args:r.args,exportName:e,filePath:t,kind:r.kind,returnType:r.returnType,...r.output?{output:r.output}:{},visibility:r.visibility,...r.expose?{expose:r.expose}:{},...r.lifecycle?{lifecycle:r.lifecycle}:{}}},H=(i,e)=>{const t=[];for(const r of i.getExportAssignments()){if(r.isExportEquals())continue;const s=u(r.getExpression()),o=s?E(s,"default",e):void 0;o&&t.push(o)}return t},K=(i,e)=>{const t=O(i),r=i.getVariableStatements().flatMap(o=>o.getDeclarations()).flatMap(o=>W(o,a=>t.has(a))).flatMap(([o,a])=>(t.get(o)??[]).filter(l=>z(l)).flatMap(l=>E(a,l,e)??[])),s=new Set(r.map(o=>o.exportName));return r.push(...H(i,e).filter(o=>!s.has(o.exportName))),r},q=i=>{const e=new Map;for(const t of i){const r=b(t.filePath),s=e.get(r);if(s&&s!==t.filePath)throw Object.assign(new Error(`Namespace collision: "${s}" and "${t.filePath}" both resolve to "${r}". Rename one of the files so the JS-identifier-sanitized names differ. (note: case-insensitive filesystems may also cause this — \`foo\` and \`FOO\` map to the same identifier)`),{code:"NAMESPACE_COLLISION",name:"LunoraError",paths:[s,t.filePath],status:500});e.set(r,t.filePath)}},te=(i,e)=>{const t=A(e),r=[];for(const s of t){const o=i.getSourceFile(s)??i.addSourceFileAtPath(s),a=F(e,s);r.push(...K(o,a))}return r.sort((s,o)=>`${s.filePath}:${s.exportName}`.localeCompare(`${o.filePath}:${o.exportName}`)),q(r),r};export{te as default};

package/dist/packem_shared/discoverHttpRoutes-BT2HmWD_.mjs

@@ -0,0 +1 @@
+import{Node as n}from"ts-morph";import{a as m,p as l}from"./parse-validator-C2Osg6gv.mjs";import{listLunoraSourceFiles as d,lunoraRelativePath as h}from"./isTestPath-5ruOnRVA.mjs";import{b as f,d as g}from"./attribution-B7i322L0.mjs";import{u as x}from"./unwrap-handler-return-CM6v2E3A.mjs";const u=new Set(["delete","get","head","options","patch","post","put"]),E=new Set(["body","params","searchParams"]),v=new Set(["handler","stream"]),P=s=>{const e=s.getArguments()[0];if(e&&n.isStringLiteral(e))return e.getLiteralValue()},S=s=>{const e=s.getArguments()[0];return e&&n.isObjectLiteralExpression(e)?l(e):{}},A=s=>{if(!n.isCallExpression(s))return;const e=s.getExpression();if(!n.isPropertyAccessExpression(e))return;const o=e.getName();if(!u.has(o))return;const a=e.getExpression();if(!n.isIdentifier(a)||a.getText()!=="httpRoute")return;const t=P(s);return t===void 0?void 0:{method:o.toUpperCase(),path:t}},b=(s,e)=>{const o={body:{},params:{},searchParams:{},stream:e==="stream"},a=s.getExpression();if(!n.isPropertyAccessExpression(a))return;let t=a.getExpression();for(;n.isCallExpression(t);){const i=t.getExpression();if(!n.isPropertyAccessExpression(i))break;const c=i.getName();if(u.has(c))break;if(E.has(c)){const p=S(t);o[c]={...p,...o[c]}}else if(c==="output"&&o.output===void 0){const p=t.getArguments()[0];p&&n.isExpression(p)&&(o.output=m(p))}t=i.getExpression()}const r=A(t);if(r)return o.method=r.method,o.path=r.path,o},T=s=>{const e=s.getArguments()[0];return!e||!(n.isArrowFunction(e)||n.isFunctionExpression(e))?"unknown":x(e)},y=(s,e,o,a)=>{const t=e.getName();if(!v.has(t))return;const r=b(s,t);if(!(r?.method===void 0||r.path===void 0))return{body:r.body,exportName:o,filePath:a,method:r.method,params:r.params,path:r.path,searchParams:r.searchParams,stream:r.stream,...r.stream?{chunkType:T(s)}:{},...r.output?{output:r.output}:{}}},R=(s,e)=>{const o=[];for(const a of f(s)){const t=a.getInitializer();if(!t||!n.isCallExpression(t))continue;const r=t.getExpression();if(!n.isPropertyAccessExpression(r))continue;const i=y(t,r,g(a)??a.getName(),e);i&&o.push(i)}return o},L=(s,e)=>{const o=d(e),a=[];for(const t of o){const r=s.getSourceFile(t)??s.addSourceFileAtPath(t),i=h(e,t);a.push(...R(r,i))}return a.sort((t,r)=>`${t.method} ${t.path}`.localeCompare(`${r.method} ${r.path}`)||t.filePath.localeCompare(r.filePath)),a};export{L as default};

package/dist/packem_shared/discoverHyperdriveCalls-Bir4M-bD.mjs

@@ -0,0 +1 @@
+import{d as o}from"./context-property-calls-BvE4YxG6.mjs";const t=(r,e)=>o(r,e,"sql");export{t as default};

package/dist/packem_shared/discoverInserts-BHxWlrW0.mjs

@@ -0,0 +1 @@
+import{Node as i}from"ts-morph";import{collectCallRows as n}from"./isTestPath-5ruOnRVA.mjs";import{c as a}from"./attribution-B7i322L0.mjs";import{i as c}from"./database-calls-B6ylmcGA.mjs";const l=t=>{const e=t.getExpression();if(!i.isPropertyAccessExpression(e)||e.getName()!=="insert")return!1;const r=e.getExpression();return c(r)},g=t=>{if(!i.isIdentifier(t))return;const e=t.getSymbol(),r=e?.getAliasedSymbol()?.getDeclarations()??e?.getDeclarations()??[];for(const s of r)if(i.isVariableDeclaration(s)){const o=s.getInitializer();if(o&&i.isStringLiteral(o))return o.getLiteralText()}},f=t=>{const e=t.getArguments()[0];return e?i.isStringLiteral(e)?e.getLiteralText():g(e)??"":""},d=(t,e)=>n(t,e,(r,s)=>l(r)?{file:s,line:r.getStartLineNumber(),scope:a(r),table:f(r)}:void 0);export{d as default};

package/dist/packem_shared/discoverMaskProcedures-DHqunTJ7.mjs

@@ -0,0 +1 @@
+import"./isTestPath-5ruOnRVA.mjs";import"./attribution-B7i322L0.mjs";import"./database-calls-B6ylmcGA.mjs";import"./classify-procedure-call-DC_O3oNQ.mjs";import{d as a}from"./index-B5G7NWDW.mjs";export{a as default};

package/dist/packem_shared/discoverMigrations-DdeNFu0j.mjs

@@ -0,0 +1 @@
+import{SyntaxKind as f,Node as s}from"ts-morph";import{diagnosticAt as g}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{b as u}from"./module-specifiers-WF8iAydP.mjs";import{listLunoraSourceFiles as m,lunoraRelativePath as p,findObjectProperty as h}from"./isTestPath-5ruOnRVA.mjs";import{b as I,a as b}from"./attribution-B7i322L0.mjs";const P=r=>{const i=r.getSymbol();if(!i)return r.getText()==="defineMigration";for(const t of i.getDeclarations())if(s.isImportSpecifier(t))return u(t.getImportDeclaration().getModuleSpecifierValue())?t.getNameNode().getText()==="defineMigration":!1;return!1},d=(r,i)=>{const t=h(r,i);if(!t||!s.isPropertyAssignment(t))return;const e=t.getInitializer();return e&&s.isStringLiteral(e)?e.getLiteralValue():void 0},v=(r,i)=>{const t=r.getInitializer();if(t?.getKind()!==f.CallExpression)return;const e=t.getExpression();if(!s.isIdentifier(e)||!P(e))return;const o=t.getArguments()[0];if(!o||!s.isObjectLiteralExpression(o))return;const n=d(o,"id"),a=b(r,"member");if(a!==void 0){if(n===void 0||n.trim()==="")throw g(o,`Migration "${a}" in "${i}" must declare \`id\` as a non-empty string literal so codegen can key the registry.`,{code:"MIGRATION_ID_NOT_STATIC",name:"LunoraError",status:500});return{exportName:a,filePath:i,id:n,table:d(o,"table")??""}}},M=r=>{const i=new Map;for(const t of r){const e=i.get(t.id);if(e!==void 0)throw Object.assign(new Error(`Duplicate migration id "${t.id}": declared in both "${e}" and "${t.filePath}". Migration ids must be unique across the project.`),{code:"DUPLICATE_MIGRATION_ID",id:t.id,name:"LunoraError",paths:[e,t.filePath],status:500});i.set(t.id,t.filePath)}},E=(r,i)=>{const t=m(i),e=[];for(const o of t){const n=r.getSourceFile(o)??r.addSourceFileAtPath(o),a=p(i,o);for(const l of I(n)){const c=v(l,a);c&&e.push(c)}}return e.sort((o,n)=>o.id.localeCompare(n.id)),M(e),e};export{E as default};

package/dist/packem_shared/discoverNondeterministicCalls-Deg23AAc.mjs

@@ -0,0 +1 @@
+import{Node as s,SyntaxKind as r}from"ts-morph";import{listLunoraSourceFiles as a,lunoraRelativePath as l,handlerOf as c}from"./isTestPath-5ruOnRVA.mjs";import{b as d,d as f}from"./attribution-B7i322L0.mjs";import{c as u}from"./classify-procedure-call-DC_O3oNQ.mjs";const m={"crypto.getRandomValues":"crypto.getRandomValues","crypto.randomUUID":"crypto.randomUUID","Date.now":"Date.now","Math.random":"Math.random"},p=new Set(["globalThis","self"]),g=new Set(["globalThis","self","window"]),h=e=>{if(s.isIdentifier(e))return e.getText();if(s.isPropertyAccessExpression(e)){const t=e.getExpression();if(s.isIdentifier(t)&&g.has(t.getText()))return e.getName()}},x=e=>{const t=e.getExpression();if(s.isIdentifier(t)){const i=t.getText();return i==="fetch"||i==="Date"?i:void 0}if(!s.isPropertyAccessExpression(t))return;const n=t.getName(),o=h(t.getExpression());if(o!==void 0)return n==="fetch"&&p.has(o)?"fetch":m[`${o}.${n}`]},N=e=>{const t=e.getExpression();if(!s.isIdentifier(t)||t.getText()!=="Date")return;const n=e.getArguments(),o=n.every(i=>s.isNumericLiteral(i)||s.isStringLiteral(i)||s.isNoSubstitutionTemplateLiteral(i));return n.length>0&&o?void 0:"new Date"},E=e=>{const t=e.getInitializer();if(!t||!s.isCallExpression(t))return;const n=u(t);if(!n||n.kind!=="query"&&n.kind!=="mutation")return;const o=c(t,n.receiver);return o?{exportName:f(e)??e.getName(),handler:o,kind:n.kind}:void 0},S=(e,t)=>{const n=[];for(const o of e.handler.getDescendantsOfKind(r.CallExpression)){const i=x(o);i!==void 0&&n.push({callee:i,exportName:e.exportName,file:t,kind:e.kind,line:o.getStartLineNumber()})}for(const o of e.handler.getDescendantsOfKind(r.NewExpression)){const i=N(o);i!==void 0&&n.push({callee:i,exportName:e.exportName,file:t,kind:e.kind,line:o.getStartLineNumber()})}return n},v=(e,t)=>{const n=[];for(const o of d(e)){const i=E(o);i&&n.push(...S(i,t))}return n},T=(e,t)=>{const n=[];for(const o of a(t)){const i=e.getSourceFile(o)??e.addSourceFileAtPath(o);n.push(...v(i,l(t,o)))}return n};export{T as default};

package/dist/packem_shared/discoverQueries-yKWWoX-Z.mjs

@@ -0,0 +1 @@
+import{Node as i}from"ts-morph";import{collectCallRows as c}from"./isTestPath-5ruOnRVA.mjs";import{c as l}from"./attribution-B7i322L0.mjs";import{i as f}from"./database-calls-B6ylmcGA.mjs";const u=new Set(["withGeoIndex","withIndex","withSearchIndex"]),p=new Set(["collect","collectWithScores","first","paginate","take","unique"]),m=n=>{const t=n.getExpression();if(!i.isPropertyAccessExpression(t)||t.getName()!=="query")return!1;const e=t.getExpression();return f(e)},g=n=>{const t=[];let e=n;for(;;){const r=e.getParent();if(!r||!i.isPropertyAccessExpression(r))break;const s=r.getParent();if(!s||!i.isCallExpression(s))break;t.push(r.getName()),e=s}return t},d=/\b[A-Za-z_$][\w$]*\._id\s*===?[^=]/u,E=n=>{let t=n;for(;;){const e=t.getParent();if(!e||!i.isPropertyAccessExpression(e))return!1;const r=e.getParent();if(!r||!i.isCallExpression(r))return!1;if(e.getName()==="filter"){const s=r.getArguments()[0];if(s&&d.test(s.getText()))return!0}t=r}},h=n=>{const t=n.getArguments()[0];return t&&i.isStringLiteral(t)?t.getLiteralText():""},y=(n,t)=>c(n,t,(e,r)=>{if(!m(e))return;const s=g(e),a=s.includes("filter");return{file:r,filtersPrimaryKey:a&&E(e),hasFilter:a,hasIndex:s.some(o=>u.has(o)),line:e.getStartLineNumber(),scope:l(e),table:h(e),terminal:s.findLast(o=>p.has(o))}});export{y as default};

package/dist/packem_shared/discoverR2sqlCalls-C48f9S0b.mjs

@@ -0,0 +1 @@
+import{d as r}from"./context-property-calls-BvE4YxG6.mjs";const t=(s,o)=>r(s,o,"r2sql");export{t as default};

package/dist/packem_shared/discoverRlsMetadata-DwG8EMHQ.mjs

@@ -0,0 +1 @@
+import{Node as o}from"ts-morph";import{listLunoraSourceFiles as x,lunoraRelativePath as h,findObjectProperty as m,stringPropertyOf as c}from"./isTestPath-5ruOnRVA.mjs";import{e as A}from"./exported-procedure-chains-CmwqreGv.mjs";import{r as L}from"./chain-C17a7v59.mjs";const E=new Set(["delete","insert","read","update"]),P=(e,t,i)=>{const r=e.getArguments()[0];if(!r||!o.isArrayLiteralExpression(r))return[];const s=[];for(const n of r.getElements()){if(!o.isObjectLiteralExpression(n))continue;const a=c(n,"on");a===void 0||!E.has(a)||s.push({file:t,on:a,procedure:i,table:c(n,"table")??""})}return s},u=e=>{if(!o.isObjectLiteralExpression(e))return[];const t=m(e,"permissions");if(!t||!o.isPropertyAssignment(t))return[];const i=t.getInitializer();if(!i||!o.isArrayLiteralExpression(i))return[];const r=[];for(const s of i.getElements()){if(o.isStringLiteral(s)){r.push(s.getLiteralText());continue}if(o.isCallExpression(s)){const n=s.getArguments()[0];n&&o.isStringLiteral(n)&&r.push(n.getLiteralText())}}return r},f=(e,t)=>t===void 0?e:{...e,description:t},v=e=>{if(o.isCallExpression(e)){const t=e.getArguments()[0];if(!t||!o.isStringLiteral(t))return;const i=e.getArguments()[1],r=i?c(i,"description"):void 0,s=i?u(i):[];return f({name:t.getLiteralText(),permissions:s},r)}if(o.isObjectLiteralExpression(e)){const t=c(e,"name");return t===void 0?void 0:f({name:t,permissions:u(e)},c(e,"description"))}},y=e=>{const t=e.getArguments()[1];if(!t||!o.isObjectLiteralExpression(t))return[];const i=m(t,"roles");if(!i||!o.isPropertyAssignment(i))return[];const r=i.getInitializer();if(!r||!o.isArrayLiteralExpression(r))return[];const s=[];for(const n of r.getElements()){const a=v(n);a&&s.push(a)}return s},O=(e,t,i)=>{const r=L(e);return{policies:r.flatMap(s=>P(s,t,i)),roles:r.flatMap(s=>y(s))}},I=(e,t)=>{const i=[],r=new Map;for(const s of x(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),a=h(t,s);for(const{name:g,receiver:d}of A(n)){const p=O(d,a,g);i.push(...p.policies);for(const l of p.roles)r.has(l.name)||r.set(l.name,l)}}return{policies:i,roles:[...r.values()]}};export{I as default};

package/dist/packem_shared/discoverRlsProcedures-D3UFRjOI.mjs

@@ -0,0 +1 @@
+import{Node as o}from"ts-morph";import{listLunoraSourceFiles as c,lunoraRelativePath as f,findObjectProperty as u}from"./isTestPath-5ruOnRVA.mjs";import{b as p,d}from"./attribution-B7i322L0.mjs";import{t as m}from"./database-calls-B6ylmcGA.mjs";import{c as b}from"./classify-procedure-call-DC_O3oNQ.mjs";import{r as g}from"./chain-C17a7v59.mjs";const h=e=>{const t=e.getArguments()[0];if(!t||!o.isArrayLiteralExpression(t))return[];const r=[];for(const s of t.getElements()){if(!o.isObjectLiteralExpression(s))continue;const i=u(s,"table");if(!i||!o.isPropertyAssignment(i))continue;const n=i.getInitializer();n&&o.isStringLiteral(n)&&r.push(n.getLiteralText())}return r},y=e=>{const t=g(e);return{rlsTables:t.flatMap(r=>h(r)),usesRls:t.length>0}},v=new Set(["findFirst","findFirstOrThrow","findMany","get","query"]),P=new Set(["delete","deleteMany","insert","insertMany","patch","patchMany","replace"]),T=(e,t)=>{if(!o.isVariableDeclaration(e))return;const r=e.getInitializer();if(!r||!o.isCallExpression(r))return;const s=b(r);if(!s)return;const i=s.receiver?y(s.receiver):{rlsTables:[],usesRls:!1},{tablesRead:n,tablesWritten:a}=m(e,v,P);return{exportName:d(e)??e.getName(),file:t,rlsTables:i.rlsTables,tablesRead:n,tablesWritten:a,usesRls:i.usesRls,visibility:s.visibility}},O=(e,t)=>{const r=[];for(const s of c(t)){const i=e.getSourceFile(s)??e.addSourceFileAtPath(s),n=f(t,s);for(const a of p(i)){const l=T(a,n);l&&r.push(l)}}return r};export{O as default};

package/dist/packem_shared/discoverSandboxUsage-C-ntjbjl.mjs

@@ -0,0 +1 @@
+import{listLunoraSourceFiles as d}from"./isTestPath-5ruOnRVA.mjs";const f=new Set(["@lunora/agent","@lunora/agent/sandbox"]),t={browserTool:"usesSandboxBrowser",containerFsTool:"usesSandboxContainer",containerTool:"usesSandboxContainer",fsTool:"usesSandboxFs",jsCodeTool:"usesSandboxLoader"},u=()=>({usesSandboxBrowser:!1,usesSandboxContainer:!1,usesSandboxFs:!1,usesSandboxLoader:!1}),i=o=>{const s=u();if(!f.has(o.getModuleSpecifierValue())||o.isTypeOnly())return s;for(const e of o.getNamedImports()){if(e.isTypeOnly())continue;const n=t[e.getNameNode().getText()];n!==void 0&&(s[n]=!0)}return s},b=(o,s)=>{const e=u();for(const n of d(s)){const c=o.getSourceFile(n)??o.addSourceFileAtPath(n);for(const a of c.getImportDeclarations()){const l=i(a);for(const r of Object.values(t))e[r]||=l[r]}if(Object.values(t).every(a=>e[a]))break}return e};export{b as discoverSandboxUsage,u as noSandboxUsage,i as scanImportDeclaration};