@lunora/codegen 1.0.0-alpha.3 → 1.0.0-alpha.30

package/dist/packem_shared/{formatAdvisories-8NIv1k0I.mjs → formatAdvisories-C9wNBNvL.mjs}

@@ -16,11 +16,19 @@ const flattenIndexes = (table) => [
 ];
 const toAdvisorSchema = (schema) => {
   return {
+    rlsMode: schema.rlsMode,
     tables: schema.tables.map((table) => {
       return {
         externallyManaged: table.externallyManaged ?? false,
+        externalSource: table.externalSource ? {
+          hasReconcile: table.externalSource.hasReconcile ?? false,
+          hasTenantBy: table.externalSource.hasTenantBy,
+          mode: table.externalSource.mode,
+          unanalyzable: table.externalSource.unanalyzable
+        } : void 0,
         fields: Object.keys(table.shape),
         indexes: flattenIndexes(table),
+        isPublic: table.isPublic ?? false,
         name: table.name,
         relations: table.relations.map((relation) => {
           return {
@@ -31,29 +39,65 @@ const toAdvisorSchema = (schema) => {
             references: relation.references,
             table: relation.table
           };
-        })
+        }),
+        shardKind: typeof table.shardMode === "string" ? table.shardMode : "shardBy",
+        softDelete: table.softDelete
       };
     })
   };
 };
-const lintSchema = (schema, queries = [], inserts, authApiCalls, rlsProcedures, containers, workflows, workflowCalls, maskProcedures, nondeterministicCalls, procedureProtections, argumentValidators, secretLiterals, sqlInterpolations, adminRoutes, r2sqlCalls) => runAdvisor(
+const toAdvisorShapes = (shapes) => shapes.map((shape) => {
+  return { exportName: shape.exportName, file: `lunora/${shape.filePath}.ts`, table: shape.table };
+});
+const lintSchema = (schema, queries = [], inserts, authApiCalls, rlsProcedures, containers, workflows, workflowCalls, maskProcedures, nondeterministicCalls, procedureProtections, argumentValidators, secretLiterals, sqlInterpolations, adminRoutes, r2sqlCalls, shapes, mutatorWrites, configCalls, argumentDerivedFetches, kvKeyAccesses, ownerFieldWrites, storageKeyAccesses, aiRawRuns, containerKeyAccesses, mailRecipientAccesses, vectorNamespaceAccesses, browserUrlAccesses, privilegedDispatches, containerOverrides, authConfigs, maskStrategies, imageDeliveryUrlAccesses, ratelimitKeySelectors, storageUploads, httpActionGuards, httpHeaderWrites, failOpenGuards, flagSecurityDefaults, aiToolSideEffects, identityClaimReads, paymentWebhooks, softDeleteReads, relationLoads, rawRowReturns, normalizeIdAuthorizations, wranglerVariables) => runAdvisor(
   {
     adminRoutes,
+    aiRawRuns,
+    aiToolSideEffects,
+    argumentDerivedFetches,
     argValidators: argumentValidators,
     authApiCalls,
+    authConfigs,
+    browserUrlAccesses,
+    configCalls,
+    containerKeyAccesses,
+    containerOverrides,
     containers,
+    failOpenGuards,
+    flagSecurityDefaults,
+    httpActionGuards,
+    httpHeaderWrites,
+    identityClaimReads,
+    imageDeliveryUrlAccesses,
     inserts,
+    kvKeyAccesses,
+    mailRecipientAccesses,
     maskProcedures,
+    maskStrategies,
+    mutatorWrites,
     nondeterministicCalls,
+    normalizeIdAuthorizations,
+    ownerFieldWrites,
+    paymentWebhooks,
+    privilegedDispatches,
     procedureProtections,
     queries,
     r2sqlCalls,
+    ratelimitKeySelectors,
+    rawRowReturns,
+    relationLoads,
     rlsProcedures,
     schema: toAdvisorSchema(schema),
     secretLiterals,
+    shapes: shapes === void 0 ? void 0 : toAdvisorShapes(shapes),
+    softDeleteReads,
     sqlInterpolations,
+    storageKeyAccesses,
+    storageUploads,
+    vectorNamespaceAccesses,
     workflowCalls,
-    workflows
+    workflows,
+    wranglerVariables
   },
   { source: "static" }
 );

package/dist/packem_shared/{parse-validator-tuQtHrsr.mjs → parse-validator-D6zI2i85.mjs}

@@ -1,3 +1,4 @@
+import { LunoraError } from '@lunora/errors';
 import { Node } from 'ts-morph';
 
 const FIELD_NAME_RE = /^[A-Za-z_$][\w$]*$/u;
@@ -53,7 +54,7 @@ const parseObjectShape = (object) => {
     }
     const fieldName = property.getName();
     if (!FIELD_NAME_RE.test(fieldName)) {
-      throw new Error(`@lunora/codegen: field name is not a valid JS identifier: ${JSON.stringify(fieldName)}`);
+      throw new LunoraError("INTERNAL", `@lunora/codegen: field name is not a valid JS identifier: ${JSON.stringify(fieldName)}`);
     }
     out[fieldName] = parseValidator(initializer);
   }
@@ -106,7 +107,7 @@ const parseBuilderMember = (member, args) => {
       };
     }
     default: {
-      throw new Error(`Unsupported validator kind: ${member}`);
+      throw new LunoraError("INTERNAL", `Unsupported validator kind: ${member}`);
     }
   }
 };
@@ -124,7 +125,8 @@ const parseValidatorCall = (call) => {
   }
   if (TRANSPARENT_MODIFIERS.has(member)) {
     const receiver = callee.getExpression();
-    return Node.isExpression(receiver) ? parseValidator(receiver) : { kind: "any" };
+    const base = Node.isExpression(receiver) ? parseValidator(receiver) : { kind: "any" };
+    return member === "check" ? { ...base, hasRefinement: true } : base;
   }
   return parseBuilderMember(member, args);
 };

package/dist/packem_shared/redact-oTmsol5A.mjs

@@ -0,0 +1,33 @@
+const HIGH_ENTROPY_TOKEN_RE = /[\w+/=-]{40,}/u;
+const LOWER_RE = /[a-z]/u;
+const UPPER_RE = /[A-Z]/u;
+const DIGIT_RE = /\d/u;
+const HEX_SECRET_RE = /\b(?:[\da-f]{32,}|[\dA-F]{32,})\b/u;
+const isHighEntropy = (value) => {
+  const token = HIGH_ENTROPY_TOKEN_RE.exec(value)?.[0];
+  if (token === void 0) {
+    return false;
+  }
+  return LOWER_RE.test(token) && UPPER_RE.test(token) && DIGIT_RE.test(token);
+};
+const isHexSecret = (value) => HEX_SECRET_RE.test(value);
+const STRIPE_LIVE_KEY_RE = /\b(?:sk|rk)_live_[\dA-Za-z]{20,}/u;
+const AWS_ACCESS_KEY_RE = /\bAKIA[\dA-Z]{16}\b/u;
+const GITHUB_TOKEN_RE = /\bgh[posru]_[\dA-Za-z]{36,}/u;
+const OPENAI_KEY_RE = /\bsk-[\dA-Za-z]{32,}/u;
+const SLACK_TOKEN_RE = /\bxox[abprs]-[\dA-Za-z-]{10,}/u;
+const PRIVATE_KEY_RE = /-----BEGIN(?: [A-Z]+)? PRIVATE KEY-----/u;
+const SECRET_RULES = [
+  { kind: "stripe_live_key", test: (value) => STRIPE_LIVE_KEY_RE.test(value) },
+  { kind: "aws_access_key", test: (value) => AWS_ACCESS_KEY_RE.test(value) },
+  { kind: "github_token", test: (value) => GITHUB_TOKEN_RE.test(value) },
+  { kind: "openai_key", test: (value) => OPENAI_KEY_RE.test(value) },
+  { kind: "slack_token", test: (value) => SLACK_TOKEN_RE.test(value) },
+  { kind: "private_key", test: (value) => PRIVATE_KEY_RE.test(value) },
+  { kind: "high_entropy", test: isHighEntropy },
+  { kind: "hex_secret", test: isHexSecret }
+];
+const secretKindOf = (value) => SECRET_RULES.find((rule) => rule.test(value))?.kind;
+const redact = (value) => `${value.slice(0, 4)}…(${String(value.length)} chars)`;
+
+export { SECRET_RULES, redact, secretKindOf };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/codegen",
-  "version": "1.0.0-alpha.3",
+  "version": "1.0.0-alpha.30",
   "description": "Code generator for Lunora: emits _generated/{api,server,dataModel}.ts from your schema",
   "keywords": [
     "cloudflare",
@@ -25,7 +25,7 @@
     "directory": "packages/codegen"
   },
   "files": [
-    "dist",
+    "./dist",
     "__assets__",
     "README.md",
     "LICENSE.md"
@@ -46,11 +46,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/advisor": "1.0.0-alpha.2",
-    "@lunora/container": "1.0.0-alpha.1",
-    "@lunora/scheduler": "1.0.0-alpha.1",
-    "@lunora/values": "1.0.0-alpha.1",
-    "@lunora/workflow": "1.0.0-alpha.1",
+    "@lunora/advisor": "1.0.0-alpha.17",
+    "@lunora/container": "1.0.0-alpha.6",
+    "@lunora/errors": "1.0.0-alpha.1",
+    "@lunora/queue": "1.0.0-alpha.3",
+    "@lunora/scheduler": "1.0.0-alpha.5",
+    "@lunora/values": "1.0.0-alpha.4",
+    "@lunora/workflow": "1.0.0-alpha.6",
     "ts-morph": "^28.0.0"
   },
   "engines": {