@lunora/codegen 1.0.0-alpha.355 → 1.0.0-alpha.357

package/dist/packem_shared/{server-DlEPJi5i.mjs → server-CMceLanP.mjs}

@@ -1,4 +1,4 @@
-import{CAPABILITIES as Qe}from"./CAPABILITY_PROBES-brcmKenl.mjs";import{existsSync as D,readdirSync as de,readlinkSync as ce,lstatSync as qe,statSync as Le}from"node:fs";import{join as h,relative as y,dirname as d,isAbsolute as _e,resolve as Ve,sep as ue,basename as Ge}from"node:path";import{ts as c,Project as He}from"ts-morph";import{G as pe,a as N,u as Ke,d as Ue}from"./shared-8vTRkL2-.mjs";import{p as Je}from"./platform-8oj7iXQy.mjs";const me=/(?:\.d)?\.([cm]?)tsx?$/u,ze=t=>t.replace(me,".d.$1ts"),ye=(t,o)=>{const a=y(t,o).split(ue).join("/").replace(me,".$1js");return a.startsWith(".")?a:`./${a}`},he=t=>t.replaceAll("\\","/"),Y=(t,o,a)=>he(h(t,ze(y(o,a)))),Ye=t=>ye(".",h("services",t.name,y(d(t.wranglerPath),t.main))),Xe=t=>{const o=[],a=e=>{(c.isImportDeclaration(e)||c.isExportDeclaration(e))&&e.moduleSpecifier!==void 0&&c.isStringLiteral(e.moduleSpecifier)?o.push(e.moduleSpecifier):c.isImportTypeNode(e)&&c.isLiteralTypeNode(e.argument)&&c.isStringLiteral(e.argument.literal)&&o.push(e.argument.literal),c.forEachChild(e,a)};return a(t),o},T=t=>{const{mtimeMs:o,size:a}=Le(t);return`${String(o)}:${String(a)}`},Ze=new Set([".git",".wrangler","dist","node_modules","target"]),fe=t=>de(t,{withFileTypes:!0}).flatMap(o=>{const a=h(t,o.name);return o.isSymbolicLink()?[`${a}->${ce(a)}`]:o.isDirectory()&&o.name.startsWith("@")?[`${a}:${T(a)}`,...fe(a)]:[]}),be=t=>[`${t}:${T(t)}`,...fe(t)],ge=t=>{const o=h(t,"node_modules"),a=D(o)?be(o):[],e=d(t);return e===t?a:[...a,...ge(e)]},et=(t,o)=>{const a=[];try{const e=s=>{for(const n of de(s,{withFileTypes:!0})){const l=h(s,n.name);if(l!==o)if(n.isSymbolicLink())a.push(`${l}->${ce(l)}`);else if(n.isDirectory()){if(n.name==="node_modules")a.push(...be(l));else if(!Ze.has(n.name)){if(!qe(l).isDirectory())throw new Error(`${l} changed during the scan`);e(l)}}else a.push(`${l}:${T(l)}`)}};e(t),a.push(...ge(t))}catch{return}return[...new Set(a)].toSorted((e,s)=>e.localeCompare(s)).join(`
+import{CAPABILITIES as Qe}from"./CAPABILITY_PROBES-brcmKenl.mjs";import{existsSync as D,readdirSync as de,readlinkSync as ce,lstatSync as qe,statSync as Le}from"node:fs";import{join as h,relative as y,dirname as d,isAbsolute as _e,resolve as Ve,sep as ue,basename as Ge}from"node:path";import{ts as c,Project as He}from"ts-morph";import{G as pe,a as N,u as Ke,d as Ue}from"./shared-Br_OnErI.mjs";import{p as Je}from"./platform-8oj7iXQy.mjs";const me=/(?:\.d)?\.([cm]?)tsx?$/u,ze=t=>t.replace(me,".d.$1ts"),ye=(t,o)=>{const a=y(t,o).split(ue).join("/").replace(me,".$1js");return a.startsWith(".")?a:`./${a}`},he=t=>t.replaceAll("\\","/"),Y=(t,o,a)=>he(h(t,ze(y(o,a)))),Ye=t=>ye(".",h("services",t.name,y(d(t.wranglerPath),t.main))),Xe=t=>{const o=[],a=e=>{(c.isImportDeclaration(e)||c.isExportDeclaration(e))&&e.moduleSpecifier!==void 0&&c.isStringLiteral(e.moduleSpecifier)?o.push(e.moduleSpecifier):c.isImportTypeNode(e)&&c.isLiteralTypeNode(e.argument)&&c.isStringLiteral(e.argument.literal)&&o.push(e.argument.literal),c.forEachChild(e,a)};return a(t),o},T=t=>{const{mtimeMs:o,size:a}=Le(t);return`${String(o)}:${String(a)}`},Ze=new Set([".git",".wrangler","dist","node_modules","target"]),fe=t=>de(t,{withFileTypes:!0}).flatMap(o=>{const a=h(t,o.name);return o.isSymbolicLink()?[`${a}->${ce(a)}`]:o.isDirectory()&&o.name.startsWith("@")?[`${a}:${T(a)}`,...fe(a)]:[]}),be=t=>[`${t}:${T(t)}`,...fe(t)],ge=t=>{const o=h(t,"node_modules"),a=D(o)?be(o):[],e=d(t);return e===t?a:[...a,...ge(e)]},et=(t,o)=>{const a=[];try{const e=s=>{for(const n of de(s,{withFileTypes:!0})){const l=h(s,n.name);if(l!==o)if(n.isSymbolicLink())a.push(`${l}->${ce(l)}`);else if(n.isDirectory()){if(n.name==="node_modules")a.push(...be(l));else if(!Ze.has(n.name)){if(!qe(l).isDirectory())throw new Error(`${l} changed during the scan`);e(l)}}else a.push(`${l}:${T(l)}`)}};e(t),a.push(...ge(t))}catch{return}return[...new Set(a)].toSorted((e,s)=>e.localeCompare(s)).join(`
 `)},tt=t=>Ge(d(t)).startsWith("@")?d(d(t)):d(t),se=(t,o)=>!y(o,t).startsWith("..")&&!t.split(ue).includes("node_modules"),ie=(t,o)=>{const a=[];let e=t;for(;e!==d(e)&&!D(h(e,"package.json"));)a.push(e),e=d(e);if(D(h(e,"package.json"))){for(const s of[...a,e,h(e,"package.json")])o.add(s);return e}},at=(t,o,a)=>{let e=t;for(;y(e,o).startsWith("..")&&e!==d(e);)a.add(e),e=d(e);a.add(e)},rt=(t,o)=>{const a=new Set;t.some(e=>se(e,o))&&ie(o,a);for(const e of t){if(se(e,o)){for(let n=d(e);n!==o&&n!==d(n);n=d(n))a.add(n);continue}const s=ie(d(e),a);s===void 0?at(d(e),o,a):a.add(tt(s))}return[...a].map(e=>[e,T(e)])},xe=new Map,le=([t,o])=>{try{return T(t)===o}catch{return!1}},ot=(t,o,a)=>{const e=xe.get(t);return e?.optionsKey===o&&e.stamps.every(n=>le(n))&&e.directories.every(n=>le(n))&&a!==void 0&&e.tree===a?e.files:void 0},nt=(t,o,a)=>{const e=[...o.stamps,...o.directories].every(([,s])=>Math.floor(Number.parseFloat(s))<=a);o.tree!==void 0&&e&&xe.set(t,{...o,tree:o.tree})},st=(t,o)=>({directories:rt(o,t),stamps:o.map(a=>[a,T(a)])}),ht=(t,o)=>{const a=d(t.wranglerPath),e=y(a,t.main);if(e.startsWith("..")||_e(e))throw new Error(`@lunora/codegen: service "${t.name}": its entry module (${t.main}) must be inside ${a} to be typed as RPC`);const s=h(o,"services",t.name),n=c.findConfigFile(a,i=>c.sys.fileExists(i)),l=new He({compilerOptions:{composite:!1,declaration:!0,declarationMap:!1,emitDeclarationOnly:!0,incremental:!1,noEmit:!1,noEmitOnError:!1,outDir:s,rootDir:a},skipAddingFilesFromTsConfig:!0,...n===void 0?{}:{tsConfigFilePath:n}}),m=JSON.stringify([t.name,t.main,t.wranglerPath,o]),v=JSON.stringify(l.getCompilerOptions()),w=et(a,Ve(o)),g=ot(m,v,w);if(g!==void 0)return g;const A=Date.now();l.addSourceFileAtPath(t.main),l.resolveSourceFileDependencies();const $=l.getProgram().compilerObject.getSourceFiles().map(i=>i.fileName).filter(i=>D(i)),{directories:F,stamps:S}=st(a,$),u={...l.getCompilerOptions(),preserveSymlinks:!0},O=new Map(l.getSourceFiles().map(i=>i.getFilePath()).filter(i=>!i.endsWith(".d.ts")&&!y(a,i).startsWith("..")).map(i=>[Y(s,a,i),i])),f={};for(const i of l.emitToMemory({emitOnlyDtsFiles:!0}).getFiles()){const B=O.get(he(i.filePath));if(B===void 0)continue;const R=c.createSourceFile(i.filePath,i.text,c.ScriptTarget.Latest,!1);let{text:b}=i;for(const k of Xe(R).toReversed()){const x=c.resolveModuleName(k.text,B,u,c.sys).resolvedModule?.resolvedFileName;if(x===void 0)continue;const I=Y(s,a,x),W=O.has(I)?I:x;b=`${b.slice(0,k.getStart(R))}${JSON.stringify(ye(d(i.filePath),W))}${b.slice(k.getEnd())}`}f[y(o,i.filePath)]=`${pe}${b}`}if(f[y(o,Y(s,a,t.main))]===void 0)throw new Error(`@lunora/codegen: service "${t.name}": TypeScript emitted no declaration for its entry module ${t.main}`);return nt(m,{files:f,optionsKey:v,directories:F,stamps:S,tree:w},A),f},it=(t,o=[])=>{const a=new Set;for(const e of t.tables)for(const s of Object.values(e.shape)){const n=Ke(s);n.kind==="storage"&&typeof n.bucket=="string"&&n.bucket!==""&&a.add(n.bucket)}for(const e of o)e!==""&&e!=="default"&&a.add(e);return["default",...[...a].toSorted((e,s)=>e.localeCompare(s))]},ft=({agents:t=[],capabilities:o=new Set,containers:a=[],env:e,hasVectors:s=!0,hasFlags:n=!1,hasNotify:l=!1,identity:m,queues:v=[],schema:w,services:g=[],storageRuleBuckets:A=[],topics:$=[],useUmbrella:F=!1,workflows:S=[]}={})=>{const u=Ue(F),O=it(w??{tables:[]},A).map(r=>JSON.stringify(r)).join(" | "),f=r=>r.sandbox===!0?"SandboxContainerAccessor":"ContainerAccessor",i=[...new Set(a.map(r=>f(r)))].toSorted((r,p)=>r.localeCompare(p)),B=a.length>0?`import type { ${i.join(", ")} } from "@lunora/container";
 `:"",R=a.length>0?`
     readonly containers: {${a.map(r=>`
@@ -245,11 +245,11 @@ type TypedTableQuery = (<T extends TableName>(
     ((table: string) => TableReader);
 
 /**
- * The point read \`ctx.db.get(id)\`, bound to this schema: an \`Id<"table">\`
- * carries its table name, so the resolved document is typed \`Doc<table>\` (or
- * \`null\` when absent) with no \`as Doc<...>\` cast. Mirrors {@link TypedTableQuery}.
+ * The point read \`ctx.db.get(table, id)\`, bound to this schema: the table literal
+ * fixes \`T\`, so the id must be an \`Id<T>\` and the resolved document is typed
+ * \`Doc<T>\` (or \`null\` when absent) with no \`as Doc<...>\` cast. Mirrors {@link TypedTableQuery}.
  */
-type TypedTableGet = <T extends TableName>(id: IdOfTable<T>) => Promise<Doc<T> | null>;
+type TypedTableGet = <T extends TableName>(table: T, id: IdOfTable<T>) => Promise<Doc<T> | null>;
 
 /**
  * Resolves the \`asId\` table argument: a literal in {@link TableName} passes through, a

package/dist/packem_shared/{shard-ByB2lGh0.mjs → shard-gWobaDx2.mjs}

@@ -1,4 +1,4 @@
-import{LunoraError as he}from"@lunora/errors";import{serializeSchemaSnapshot as Jt,hashSchemaSnapshot as Yt}from"./SCHEMA_SNAPSHOT_VERSION-C7Um0EnM.mjs";import{isHyperdriveGlobalTable as zt,isD1GlobalTable as Xt}from"./isD1GlobalTable-udvHAAzD.mjs";import{r as Zt}from"./json-data-Chfs2Cz5.mjs";import{r as $,e as er,a as tr,b as rr,c as nr,d as ar,f as sr,g as or,h as ir,i as dr,j as cr,k as lr,l as ur,m as hr,n as pr,o as mr,p as fr,q as gr}from"./shard-runtime-ByYXjCKY.mjs";import{u as M,h as br,s as yr,a as wr,I as vr,c as kr,G as Sr,d as Rr}from"./shared-8vTRkL2-.mjs";import{p as xr}from"./platform-8oj7iXQy.mjs";import{i as Ar}from"./schema-BgM8A3XV.mjs";const p=(r,t)=>`((): (() => ${t}) => { let cached: ${t} | undefined; return () => (cached ??= JSON.parse(${JSON.stringify(JSON.stringify(r))}) as ${t}); })()`,pe=["categories","description","facing","level","remediation","title"],Or=r=>{const t={};return{advisoryRows:r.map(o=>{let n=t[o.name];return n||(n=Object.fromEntries(pe.filter(s=>s in o).map(s=>[s,o[s]])),t[o.name]=n),Object.fromEntries(Object.entries(o).filter(([s,i])=>!pe.includes(s)||JSON.stringify(i)!==JSON.stringify(n[s])))}),advisoryRules:t}},Dr=`        /**
+import{LunoraError as he}from"@lunora/errors";import{serializeSchemaSnapshot as Jt,hashSchemaSnapshot as Yt}from"./SCHEMA_SNAPSHOT_VERSION-SplX7j_9.mjs";import{isHyperdriveGlobalTable as zt,isD1GlobalTable as Xt}from"./isD1GlobalTable-udvHAAzD.mjs";import{r as Zt}from"./json-data-Chfs2Cz5.mjs";import{r as $,e as er,a as tr,b as rr,c as nr,d as ar,f as sr,g as or,h as ir,i as dr,j as cr,k as lr,l as ur,m as hr,n as pr,o as mr,p as fr,q as gr}from"./shard-runtime-DXlpfT3P.mjs";import{u as M,h as br,s as yr,a as wr,I as vr,c as kr,G as Sr,d as Rr}from"./shared-Br_OnErI.mjs";import{p as xr}from"./platform-8oj7iXQy.mjs";import{i as Ar}from"./schema-BgM8A3XV.mjs";const p=(r,t)=>`((): (() => ${t}) => { let cached: ${t} | undefined; return () => (cached ??= JSON.parse(${JSON.stringify(JSON.stringify(r))}) as ${t}); })()`,pe=["categories","description","facing","level","remediation","title"],Or=r=>{const t={};return{advisoryRows:r.map(o=>{let n=t[o.name];return n||(n=Object.fromEntries(pe.filter(s=>s in o).map(s=>[s,o[s]])),t[o.name]=n),Object.fromEntries(Object.entries(o).filter(([s,i])=>!pe.includes(s)||JSON.stringify(i)!==JSON.stringify(n[s])))}),advisoryRules:t}},Dr=`        /**
          * The bare writer every admin/maintenance entry point writes through.
          *
          * Admin and maintenance writes go through the SAME reactive-cache hooks as a

package/dist/packem_shared/{shard-runtime-ByYXjCKY.mjs → shard-runtime-DXlpfT3P.mjs}

@@ -1,4 +1,4 @@
-import{r as b}from"./json-data-Chfs2Cz5.mjs";import{CAPABILITIES as N}from"./CAPABILITY_PROBES-brcmKenl.mjs";import{a as l,G as g}from"./shared-8vTRkL2-.mjs";import{s as k}from"./platform-8oj7iXQy.mjs";const I=e=>e?{importFragment:"serveRelationFanout, ",override:`
+import{r as b}from"./json-data-Chfs2Cz5.mjs";import{CAPABILITIES as N}from"./CAPABILITY_PROBES-brcmKenl.mjs";import{a as l,G as g}from"./shared-Br_OnErI.mjs";import{s as k}from"./platform-8oj7iXQy.mjs";const I=e=>e?{importFragment:"serveRelationFanout, ",override:`
         protected override async runRelationFanoutRead(functionPath: string, args: Record<string, unknown>): Promise<unknown> {
             this.ensureServable();
 

package/dist/packem_shared/{shared-8vTRkL2-.mjs → shared-Br_OnErI.mjs}

@@ -1,4 +1,4 @@
-import{LunoraError as y}from"@lunora/errors";import{v as A}from"./parse-validator-iVTounLK.mjs";import{R as I}from"./reserved-words-CW1QFbTd.mjs";import{acceptsAbsentIr as R}from"./LUNORA_ERROR_CODES-CIAJQeKB.mjs";import{n as E}from"./dispatch-namespace-DwTjD7BU.mjs";const k=/^(?:"(?:[^"\\]|\\(?:["\\/bfnrt]|u[0-9A-Fa-f]{4}))*"|'[^'\\]*'|-?\d+(?:\.\d+)?|true|false|null)$/u,O=e=>Object.keys(e).filter(n=>A(e[n])),B=e=>O(e.args).length>0,F=`// GENERATED by @lunora/codegen — do not edit.
+import{LunoraError as y}from"@lunora/errors";import{v as A}from"./parse-validator-CP5CL6Q7.mjs";import{R as I}from"./reserved-words-CW1QFbTd.mjs";import{acceptsAbsentIr as R}from"./LUNORA_ERROR_CODES-CIAJQeKB.mjs";import{n as E}from"./dispatch-namespace-DwTjD7BU.mjs";const k=/^(?:"(?:[^"\\]|\\(?:["\\/bfnrt]|u[0-9A-Fa-f]{4}))*"|'[^'\\]*'|-?\d+(?:\.\d+)?|true|false|null)$/u,O=e=>Object.keys(e).filter(n=>A(e[n])),B=e=>O(e.args).length>0,F=`// GENERATED by @lunora/codegen — do not edit.
 // Run \`lunora codegen\` to regenerate.
 
 `,G=(e=!1)=>e?{client:"lunorash/client",do:"lunorash/do",flags:"lunorash/flags",server:"lunorash/server",serverDataModel:"lunorash/server/data-model",serverDrizzle:"lunorash/server/drizzle",serverTypes:"lunorash/server/types",values:"lunorash/values"}:{client:"@lunora/client",do:"@lunora/do",flags:"@lunora/flags",server:"@lunora/server",serverDataModel:"@lunora/server/data-model",serverDrizzle:"@lunora/server/drizzle",serverTypes:"@lunora/server/types",values:"@lunora/values"},b=/^[A-Za-z_$][\w$]*$/u,U=/^[\w./-]+$/u,w=(e,n)=>{if(!b.test(e)||I.has(e))throw new y("INTERNAL",`@lunora/codegen: ${n} is not a valid JS identifier: ${JSON.stringify(e)}`)},V=(e,n)=>{if(!b.test(e))throw new y("INTERNAL",`@lunora/codegen: ${n} is not a valid JS identifier: ${JSON.stringify(e)}`)},H=e=>e.charAt(0).toUpperCase()+e.slice(1),g=e=>b.test(e)?e:JSON.stringify(e),j=e=>e==="__proto__"?`[${JSON.stringify(e)}]`:g(e),D=e=>{const n=new Map;for(const r of e){const t=n.get(r.filePath)??[];t.push(r),n.set(r.filePath,t)}return[...n.entries()].toSorted(([r],[t])=>r.localeCompare(t))},Y=(e,n,r)=>{const[t,l]=r==="type"?[g,";"]:[j,","],d={children:new Map};for(const[o,h]of D(e)){let a=d;for(const m of E(o)){let c=a.children.get(m);c===void 0&&(c={children:new Map},a.children.set(m,c)),a=c}a.file={entries:h,path:o}}const u=o=>o.file?.path??u(o.children.values().next().value),p=(o,h)=>{const a="    ".repeat(h),{entries:m=[],path:c=""}=o.file??{},$=m.find(s=>o.children.has(s.exportName));if($!==void 0){const s=u(o.children.get($.exportName));throw new y("NAMESPACE_COLLISION",`Namespace collision: the export "${$.exportName}" of "${c}" and "${s}" both resolve to api.${[...E(c),$.exportName].join(".")}. Rename the export or the folder.`)}const S=m.toSorted((s,f)=>s.exportName.localeCompare(f.exportName)).map(s=>`${a}${n(s)}`),_=[...o.children.entries()].toSorted(([s],[f])=>s.localeCompare(f)).map(([s,f])=>`${a}${t(s)}: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/codegen",
-  "version": "1.0.0-alpha.355",
+  "version": "1.0.0-alpha.357",
   "description": "Code generator for Lunora: emits _generated/{api,server,dataModel}.ts from your schema",
   "keywords": [
     "cloudflare",
@@ -50,8 +50,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/advisor": "1.0.0-alpha.258",
-    "@lunora/agent": "1.0.0-alpha.248",
+    "@lunora/advisor": "1.0.0-alpha.259",
+    "@lunora/agent": "1.0.0-alpha.249",
     "@lunora/container": "1.0.0-alpha.92",
     "@lunora/errors": ">=1.0.0-alpha.51 <2.0.0-0",
     "@lunora/platform": "1.0.0-alpha.75",

package/dist/packem_shared/SCHEMA_SNAPSHOT_FILENAME-BQwNonnN.mjs

@@ -1,31 +0,0 @@
-import{existsSync as M,readFileSync as Ge,mkdirSync as Bt,writeFileSync as gr,rmSync as ye,readdirSync as Cn}from"node:fs";import{dirname as Vt,join as E,relative as Tn}from"node:path";import{performance as ht}from"node:perf_hooks";import{runAdvisor as pr}from"@lunora/advisor";import{LunoraError as _}from"@lunora/errors";import{serializeSchemaSnapshot as mr}from"./SCHEMA_SNAPSHOT_VERSION-C7Um0EnM.mjs";import{toAdvisorContext as hr}from"./formatAdvisories-BCVASH7N.mjs";import{Node as r,SyntaxKind as d,Project as Ut,ts as vr,VariableDeclarationKind as Er}from"ts-morph";import{listLunoraSourceFiles as A,lunoraRelativePath as w,bindingKeyName as ce,collectCallRows as C,findObjectProperty as V,collectSecurityCallRows as xr,propertyInitializer as R,listSecurityScanFiles as Ye,objectLiteralFromCallbackBody as On,limitNameOf as kn,optionsObjectLiteral as Rn,handlerOf as Sr,collectNodeRows as ne,chainRootOf as Qe,outermostValueWrapper as I,isWriteTarget as Xe,isSameNode as y,unwrapExpression as h,isConstDeclaration as ie,memberAccessOf as Wt,returningFunctionOf as wt,walkChain as Ar,RUN_METHODS as Fn,functionReferenceSegments as yr,isTestPath as br,isFunctionLike as re,functionKeyOf as Ln}from"./isTestPath-C3QumE88.mjs";import{b as Q,d as j,f as L,g as qt,c as x,a as jt,w as Ht,k as Nr,l as Pr,h as wr,m as Ir,j as It,i as Cr}from"./attribution-CG8-kUcl.mjs";import{a as Fs,r as vt,i as G,b as Tr,m as Dn,c as Je,e as Gt,E as Mn,C as _n,d as Or,f as kr,g as Rr}from"./context-root-CNR6TAsP.mjs";import{a as P,i as Fr,c as ee,d as Kn,e as Lr,f as Dr,g as zn}from"./classify-procedure-call-BkaeM9Ej.mjs";import{a as S,s as Mr}from"./property-name-7cBlgK_O.mjs";import{b as _r,a as Ze}from"./module-specifiers-BctA0m_p.mjs";import{r as et,s as Kr}from"./parse-validator-iVTounLK.mjs";import zr from"./discoverAuthApiCalls-CScPrUD-.mjs";import{i as z,r as $n}from"./database-calls-UPlhi3Ks.mjs";import $r from"./discoverHyperdriveCalls-CL-d0IVo.mjs";import{diagnosticAt as de}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{m as Yt,a as Be,s as Bn,d as Br}from"./index-CN8FVvr-.mjs";import{MUTATORS_FILENAME as Vr,isDefineMutatorCallee as Ur,mutatorServerImplOf as Wr,discoverMutators as qr}from"./MUTATORS_FILENAME-Cy9h3EVW.mjs";import jr from"./discoverNondeterministicCalls-mFJNU8qY.mjs";import{discoverNotifyConfig as Hr,discoverNotifyCalls as Gr}from"./NOTIFY_FILENAME-9to_l_Kh.mjs";import Yr from"./discoverR2sqlCalls-B4oeTYEM.mjs";import Qr from"./discoverRlsProcedures-Cl6UKT7L.mjs";import{s as Qt,n as Xr}from"./dispatch-namespace-DwTjD7BU.mjs";import{secretKindOf as Jr,redact as Zr,isHeuristicSecretKind as eo,isSecretishName as to}from"./redact-Cy14LEnc.mjs";import{readProjectConfigLiterals as Vn,readMergeDurableObjects as so}from"./loadProjectConfig-B7RmxIeD.mjs";import{a as Le,d as no,r as io}from"./modules-l-Db0C4S.mjs";import{WORKFLOWS_FILENAME as ro,discoverWorkflows as oo}from"./WORKFLOWS_FILENAME-kXq07aGl.mjs";import{r as ao}from"./json-data-Chfs2Cz5.mjs";import{a as co,I as lo,g as uo,G as Un,d as fo,i as go}from"./shared-8vTRkL2-.mjs";import{createCodegenProject as po}from"./createCodegenProject-ClPr_MXM.mjs";import{findTsconfig as wE,refreshCodegenProject as IE,tsconfigFingerprint as CE}from"./createCodegenProject-ClPr_MXM.mjs";import{CAPABILITIES as mo,usedCapabilities as ho}from"./CAPABILITY_PROBES-brcmKenl.mjs";import{isD1GlobalTable as Wn,isHyperdriveGlobalTable as qn}from"./isD1GlobalTable-udvHAAzD.mjs";import{discoverAgents as vo}from"./AGENTS_FILENAME-isdHqPIt.mjs";import{discoverContainers as Eo}from"./CONTAINERS_FILENAME-mK4cZpcz.mjs";import xo from"./discoverCrons-B1_NUt19.mjs";import{contextPropertiesRead as So,fileWiresRequestSecretTool as Ao,createTargetScope as yo,discoverFeatureUsage as bo}from"./capabilitiesUsedBy-DjRHg-Zk.mjs";import jn from"./readPackageDependencies-RHhGiz0k.mjs";import{PROJECT_CONFIG_FILENAMES as No,findProjectConfigFile as Po}from"./PROJECT_CONFIG_FILENAMES-CLfsyvjA.mjs";import{discoverQueueDeclarations as wo}from"./QUEUES_FILENAME-Civ-7SiI.mjs";import{discoverSandboxUsage as Io}from"./discoverSandboxUsage--Z1vx7GM.mjs";import{resolveServiceBindings as Co}from"./readServiceBindings-BA49C6aN.mjs";import To from"./discoverStorageRulesMetadata-CitX6ziW.mjs";import{resolveCodegenTarget as Ct,gatePlatformFeatures as Oo,readTargetDiagnostics as ko,vectorizeDimensionDiagnostics as Ro,liveStreamsDeliveryAuthorizationDiagnostic as Fo,socketRoutesDeliveryAuthorizationDiagnostic as Lo,studioPlatformFor as Do,platformFeatureAvailable as Mo}from"./DEFAULT_TARGET-3OLdJhTj.mjs";import{i as _o}from"./schema-BgM8A3XV.mjs";import{b as Hn,e as Ko}from"./shard-ByB2lGh0.mjs";import{e as zo,a as $o}from"./server-DlEPJi5i.mjs";import{emitDataModel as Bo}from"./emitDataModel-CuFqq97x.mjs";import{i as Vo,a as Uo,e as Wo,b as qo,d as jo,c as Ho}from"./unwrap-handler-return-CGdJGvGh.mjs";import Go from"./discoverFunctions-CJG4S6CK.mjs";import Yo from"./discoverHttpRoutes-DCDgDIYv.mjs";import Qo from"./discoverInserts-BcoTjXqI.mjs";import{e as Gn}from"./exported-procedure-chains-D1WlRfqJ.mjs";import Xo from"./discoverMigrations-BWxx8Wv9.mjs";import Jo from"./discoverQueries-CxQRVuIV.mjs";import Zo from"./discoverRlsMetadata-D0B4nCmG.mjs";import ea from"./discoverSchema-CGAFQxFU.mjs";import{discoverShapes as ta}from"./SHAPES_FILENAME-DVJbfDZ8.mjs";import{i as sa}from"./reserved-words-CW1QFbTd.mjs";import{emitApp as na}from"./emitApp-C0shqv7S.mjs";import{readJsonSync as ia}from"@visulima/fs";import{buildSchemaSnapshot as ra}from"./SchemaSnapshotParseError-H9eQX4ui.mjs";import{buildOpenApiDocument as oa,emitOpenApiModule as aa}from"./buildOpenApiDocument-DWdj2jvW.mjs";import{buildOpenRpcDocument as ca,emitOpenRpcModule as la}from"./OPENRPC_VERSION-DfSmacMR.mjs";import{v as da,t as ua,u as fa,s as ga,w as pa}from"./shard-runtime-ByYXjCKY.mjs";import{emitCollections as ma,emitSeed as ha,emitApi as va,emitInternalApi as Ea}from"./emitApi-zynTVppI.mjs";import{emitCrons as xa,emitScheduler as Sa,emitShardRegistry as Aa,emitDurableObjects as ya,emitVectors as ba,emitWranglerCronTriggers as Na}from"./emitCrons-DF9vt_z_.mjs";import Pa from"./emitDrizzleSchema-bct1OuH5.mjs";import{LAZY_FUNCTION_DIRECTORY as Yn,emitFunctions as wa,emitLazyFunctionModules as Ia}from"./emitFunctions-D7mopPiT.mjs";const Ca=(e,t=!1)=>{if(e.length===0)return"";const s=fo(t),n=e.map(c=>{if(co(c.exportName,"live stream export name"),!lo.test(c.filePath))throw new Error(`@lunora/codegen: live stream file path is not safe to import: ${JSON.stringify(c.filePath)}`);return`import type { ${c.exportName} as ${c.exportName}Stream } from "../${c.filePath}.js";`}),i=e.map(c=>{const l=c.topics.map(u=>{uo(u.name,"live topic name");const f=`(typeof ${c.exportName}Stream)["topics"]["${u.name}"]`,g=`LiveTopicRef<LiveTopicPayload<${f}>>`,m=JSON.stringify(c.id);if(u.fields.length===0)return`        ${u.name}: (): ${g} => ({ __lunoraLive: ${m}, topic: ${JSON.stringify(u.name)} }),`;const v=u.fields.map($=>`\${encodeURIComponent(key.${$})}`).join(":");return`        ${u.name}: (key: LiveTopicKey<${f}>): ${g} => ({
-            __lunoraLive: ${m},
-            topic: \`${u.name}:${v}\`,
-        }),`});return`    ${c.exportName}: {
-${l.join(`
-`)}
-    },`}),a=e.some(c=>c.topics.some(l=>l.fields.length>0))?"LiveTopicKey, LiveTopicPayload, LiveTopicRef":"LiveTopicPayload, LiveTopicRef";return`${Un}import type { ${a} } from "${s.server}";
-
-${n.join(`
-`)}
-
-/**
- * A typed reference to each declared live topic, grouped by the stream's export name:
- * \`live.posts.post({ postId })\`. Pass one to \`ctx.live.publish(ref, payload)\` on the server, or to a
- * live-topic hook in the browser. A reference is plain data and carries no server code.
- */
-export const live = {
-${i.join(`
-`)}
-};
-`},Qn=new Set(["delete","get","head","options","patch","post","put"]),Ta=new Set(["handler","stream"]),Oa=/\/(?:_|admin|internal|superuser|sudo|root|debug)/iu,Ls=new Set(["ADMIN_TOKEN","adminToken","assertAdmin","assertAuth","auth","Authorization","getSession","identity","isAdmin","requireAdmin","requireAuth","requireRole","verifyAdmin"]),ka=e=>{if(!r.isCallExpression(e))return;const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||!Qn.has(t.getName()))return;const s=t.getExpression();if(!r.isIdentifier(s)||s.getText()!=="httpRoute")return;const n=e.getArguments()[0];if(!(!n||!r.isStringLiteral(n)))return{method:t.getName().toUpperCase(),path:n.getLiteralValue()}},Ra=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t))return;let s=t.getExpression();for(;r.isCallExpression(s);){const n=s.getExpression();if(!r.isPropertyAccessExpression(n)||Qn.has(n.getName()))break;s=n.getExpression()}return ka(s)},Fa=e=>{for(const t of e.getDescendantsOfKind(d.PropertyAccessExpression))if(Ls.has(t.getName()))return!0;for(const t of e.getDescendantsOfKind(d.CallExpression)){const s=t.getExpression();if(r.isIdentifier(s)&&Ls.has(s.getText()))return!0}return!1},La=(e,t)=>{const s=e.getInitializer();if(!s||!r.isCallExpression(s))return;const n=s.getExpression();if(!r.isPropertyAccessExpression(n)||!Ta.has(n.getName()))return;const i=Ra(s);if(!i||!Oa.test(i.path))return;const o=s.getArguments()[0],a=o!==void 0&&(r.isArrowFunction(o)||r.isFunctionExpression(o))&&Fa(o);return{exportName:j(e)??e.getName(),file:t,method:i.method,path:i.path,usesGuard:a}},Da=(e,t)=>{const s=[];for(const n of Q(e)){const i=La(n,t);i&&s.push(i)}return s},Ma=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Da(i,w(t,n)))}return s},_a=e=>{const t=e.getText(),s=n=>{const i=n.getNameNode();return r.isIdentifier(i)&&i.getText()===t};for(const n of e.getAncestors())if(!(!r.isArrowFunction(n)&&!r.isFunctionExpression(n)&&!r.isFunctionDeclaration(n)))for(const i of n.getParameters()){const o=i.getDescendantsOfKind(d.BindingElement).find(a=>s(a));if(o!==void 0)return o}},Ka=e=>{let t=e;for(;;){const s=t.getParent();if(!r.isObjectBindingPattern(s))return;const n=s.getParent();if(r.isBindingElement(n)){t=n;continue}return r.isParameterDeclaration(n)?ce(t):void 0}},za=e=>{const t=e.getText();if(!e.getAncestors().some(o=>{const a=r.isFunctionLikeDeclaration(o)||r.isArrowFunction(o)?o.getParameters()[1]:void 0,c=a?.getNameNode();return a!==void 0&&(r.isIdentifier(c)?c.getText()===t:a.getDescendantsOfKind(d.BindingElement).some(l=>l.getName()===t))&&Fs(a)}))return!1;const n=L(e),i=r.isParameterDeclaration(n)?n:n?.getFirstAncestorByKind(d.Parameter);return i!==void 0&&(r.isParameterDeclaration(n)||r.isBindingElement(n))&&Fs(i)},Ds=(e,t)=>{const s=e.getParent();if(r.isPropertyAccessExpression(s)&&s.getNameNode()===e||r.isPropertyAssignment(s)&&s.getNameNode()===e)return!1;if(e.getText()===t)return!0;const n=_a(e);return n!==void 0&&Ka(n)===t?!0:t==="args"&&za(e)},Xn=(e,t)=>r.isIdentifier(e)?Ds(e,t):e.getDescendantsOfKind(d.Identifier).some(s=>Ds(s,t)),$a=e=>{let t=e;for(;r.isPropertyAccessExpression(t)||r.isElementAccessExpression(t)||r.isNonNullExpression(t);)t=t.getExpression();return r.isIdentifier(t)?t:void 0},Ms=e=>{const t=r.isIdentifier(e)?L(e):void 0;return r.isVariableDeclaration(t)&&r.isIdentifier(t.getNameNode())&&!qt(t)?t.getInitializer():void 0},Tt=e=>Xn(e,"args"),Y=e=>{if(!r.isIdentifier(e))return;const t=e.getText(),s=e.getFirstAncestor(a=>r.isArrowFunction(a)||r.isFunctionExpression(a)||r.isFunctionDeclaration(a));if(s===void 0)return;const n=e.getStart();let i,o=-1;for(const a of s.getDescendantsOfKind(d.VariableDeclaration)){if(a.getName()!==t)continue;const c=a.getInitializer(),l=a.getStart();c!==void 0&&l<n&&l>o&&(i=c,o=l)}return i},q=e=>{if(Tt(e))return!0;const t=Y(e);return t!==void 0&&Tt(t)},Ba=e=>{if(r.isCallExpression(e)||r.isNewExpression(e))return!1;const t=Y(e);return t===void 0||!(r.isCallExpression(t)||r.isNewExpression(t))},le=e=>{if(vt(e))return!0;const t=Ms(e);if(t!==void 0&&vt(t))return!0;const s=t??e;return(r.isIdentifier(s)?[s]:s.getDescendantsOfKind(d.Identifier)).some(i=>{const o=Ms(i);return o!==void 0&&vt(o)})},De=(e,t)=>Xn(e,t),Va=(e,t)=>{if(De(e,t))return!0;const s=Y(e);if(s!==void 0&&De(s,t))return!0;const n=$a(e);if(n!==void 0){const i=Y(n);return i!==void 0&&De(i,t)}return!1},Ua=e=>!r.isPropertyAccessExpression(e)||e.getName()!=="run"?!1:G(e.getExpression(),["ai"]),Wa=(e,t)=>{if(!Ua(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!q(s)||le(s)))return{scope:x(e),file:t,line:e.getStartLineNumber()}},qa=(e,t)=>C(e,t,Wa),ja=new Set(["generateText","streamText"]),Ha=new Set(["messages","prompt","system"]),Ga=[{methods:new Set(["delete","insert","insertManyUnsafe","patch","patchIf","replace"]),prefixes:["context.db","ctx.db"]},{methods:new Set(["run","runAction","runMutation"]),prefixes:["context","ctx"]},{methods:new Set(["fetch"]),prefixes:["context","ctx"]},{methods:new Set(["queue","send"]),prefixes:["context.email","context.mail","ctx.email","ctx.mail"]}],Ya=(e,t)=>Ga.some(s=>s.methods.has(t)&&s.prefixes.some(n=>e===n||e.startsWith(`${n}.`))),Qa=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t))return;const s=t.getName(),n=[Tr(t.getExpression()),t.getExpression().getText()].find(i=>i!==void 0&&Ya(i,s));return n===void 0?void 0:`${n}.${s}`},Xa=e=>{for(const t of e.getDescendantsOfKind(d.CallExpression)){const s=Qa(t);if(s!==void 0)return s}},Ja=e=>{const t=new Set,s=e.getFirstAncestor(o=>r.isArrowFunction(o)||r.isFunctionExpression(o)||r.isFunctionDeclaration(o)),[n]=s?.getParameters()??[],i=n?.getNameNode();if(i===void 0||!r.isObjectBindingPattern(i))return t;for(const o of i.getElements()){const a=ce(o),c=o.getNameNode();if(a==="args"&&r.isObjectBindingPattern(c))for(const l of c.getElements())t.add(l.getName())}return t},Za=e=>{if(Tt(e))return!0;const t=Ja(e);return t.size===0?!1:e.getDescendantsOfKind(d.Identifier).some(s=>t.has(s.getText()))},ec=e=>{for(const t of e.getProperties()){if(!r.isPropertyAssignment(t)||!Ha.has(S(t)))continue;const s=t.getInitializer();if(s!==void 0&&Za(s))return!0}return!1},tc=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(d.CallExpression)){const i=P(n.getExpression());if(i===void 0||!ja.has(i))continue;const[o]=n.getArguments();if(o===void 0||!r.isObjectLiteralExpression(o))continue;let a;for(const c of o.getDescendantsOfKind(d.CallExpression))if(P(c.getExpression())==="tool"&&(a=Xa(c),a!==void 0))break;a!==void 0&&s.push({scope:x(n),file:t,line:n.getStartLineNumber(),method:i,sideEffect:a,userInputDerived:ec(o)})}return s},sc=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...tc(i,w(t,n)))}return s},nc=e=>G(e,["fetch"]),ic=(e,t)=>{if(!nc(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!q(s)))return{scope:x(e),file:t,line:e.getStartLineNumber()}},rc=(e,t)=>C(e,t,ic),Xt=(e,t=new Set)=>{if(t.has(e))return!0;t.add(e);try{return e.getProperties().some(s=>{if(!r.isSpreadAssignment(s))return!1;const n=et(s.getExpression());return n===void 0||Xt(n,t)})}finally{t.delete(e)}},oc=e=>{const t=e.getArguments()[0];if(!t||!r.isObjectLiteralExpression(t))return{objects:[],opaque:!0};const s=V(t,"args");if(!s)return{objects:[],opaque:!1};if(!r.isPropertyAssignment(s))return{objects:[],opaque:!0};const n=s.getInitializer(),i=n===void 0?void 0:et(n);return i===void 0?{objects:[],opaque:!0}:{objects:[i],opaque:Xt(i)}},ac=e=>{const t=[];let s=!1,n=e;for(;r.isCallExpression(n);){const i=n.getExpression();if(!r.isPropertyAccessExpression(i))break;if(i.getName()==="input"){const o=n.getArguments()[0],a=o!==void 0&&r.isExpression(o)?et(o):void 0;a===void 0?s=!0:(t.push(a),s||=Xt(a))}n=i.getExpression()}return{objects:t,opaque:s}},Jt=(e,t)=>t?ac(t):oc(e),Jn=(e,t)=>{if(t.has(e))return[];t.add(e);try{return e.getProperties().flatMap(s=>{if(r.isSpreadAssignment(s)){const n=et(s.getExpression());return n===void 0?[]:Jn(n,t)}return r.isPropertyAssignment(s)||r.isShorthandPropertyAssignment(s)?[S(s)]:[]})}finally{t.delete(e)}},cc=e=>e.flatMap(t=>Jn(t,new Set)),lc=new Set(["check","length","max"]),Ot=e=>{let t=e;for(;;){const s=t.getParent();if(!s||!r.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;const n=s.getParent();if(!n||!r.isCallExpression(n)||n.getExpression()!==s)return!1;if(lc.has(s.getName()))return!0;t=n}},kt=e=>_r(e)||e==="@lunora/values",dc=e=>{const t=new Set(["v"]);for(const s of Fr(e,"v",kt))t.add(s);for(const s of e.getImportDeclarations()){const n=s.getNamespaceImport();n&&kt(s.getModuleSpecifierValue())&&t.add(`${n.getText()}.v`)}return t},uc=(e,t)=>{const s=new Map;for(const n of e.getVariableStatements())for(const i of n.getDeclarations()){const o=i.getNameNode(),a=i.getInitializer();if(!(!r.isObjectBindingPattern(o)||!a||!t.has(a.getText())))for(const c of o.getElements())c.getDotDotDotToken()||s.set(c.getName(),c.getPropertyNameNode()?.getText()??c.getName())}return s},fc=e=>(e.getSymbol()?.getDeclarations()??[]).some(t=>!t.getSourceFile().isDeclarationFile()&&!r.isImportSpecifier(t)&&!r.isNamespaceImport(t)&&!r.isImportClause(t)),gc=e=>(e.getSymbol()?.getDeclarations()??[]).some(t=>r.isNamespaceImport(t)&&kt(t.getFirstAncestorByKindOrThrow(d.ImportDeclaration).getModuleSpecifierValue())),Zt=(e,t)=>{if(!r.isCallExpression(e))return;const s=e.getExpression();if(r.isPropertyAccessExpression(s)){const n=s.getExpression();if(!t.namespaces.has(n.getText()))return;if(r.isIdentifier(n))return fc(n)?void 0:s.getName();const i=r.isPropertyAccessExpression(n)?n.getExpression():void 0;return r.isIdentifier(i)&&gc(i)?s.getName():void 0}if(r.isIdentifier(s))return t.destructured.get(s.getText())},pc=(e,t)=>{if(!r.isIdentifier(e))return;const s=e.getText(),n=t.getVariableDeclaration(s)?.getInitializer();return n&&(r.isArrowFunction(n)||r.isFunctionExpression(n))?n:t.getFunction(s)},mc=e=>{let t=e.getParent();for(;t&&!r.isFunctionLikeDeclaration(t);)t=t.getParent();return t},hc=e=>r.isReturnStatement(e)?e.getExpression():void 0,vc=e=>r.isArrowFunction(e)&&!r.isBlock(e.getBody())?[e.getBody()]:e.getDescendantsOfKind(d.ReturnStatement).filter(t=>mc(t)?.compilerNode===e.compilerNode).flatMap(t=>{const s=hc(t);return s?[s]:[]}),Zn=(e,t)=>{if(Zt(e,t)!==void 0)return e;if(r.isCallExpression(e)||r.isPropertyAccessExpression(e))return Zn(e.getExpression(),t)},Ec=(e,t)=>{const s=pc(e.getExpression(),e.getSourceFile());if(!s)return[];const n=Ot(e),i=new Set(vc(s).map(o=>Zn(o,t)).filter(o=>o!==void 0));return[s,...s.getDescendants()].flatMap(o=>{const a=Zt(o,t);return a===void 0?[]:[{bounded:Ot(o)||n&&i.has(o),factory:a}]})},xc=(e,t)=>[e,...e.getDescendants()].flatMap(s=>{const n=Zt(s,t),i=n===void 0?[]:[{bounded:Ot(s),factory:n}];return r.isCallExpression(s)?[...i,...Ec(s,t)]:i}),Sc=(e,t)=>{const s=[],n=[];for(const i of e)for(const o of i.getProperties()){if(!r.isPropertyAssignment(o))continue;const a=o.getInitializer();if(!a)continue;const c=xc(a,t),l=S(o);c.some(u=>u.factory==="any")?s.push(l):c.some(u=>u.factory==="string"&&!u.bounded)&&n.push(l)}return{anyArgs:s,unboundedStringArgs:n}},Ac=(e,t,s)=>{const n=e.getInitializer();if(!n||!r.isCallExpression(n))return;const i=ee(n);if(i?.visibility!=="public")return;const{objects:o}=Jt(n,i.receiver),{anyArgs:a,unboundedStringArgs:c}=Sc(o,s);if(!(a.length===0&&c.length===0))return{anyArgs:a,exportName:j(e)??e.getName(),file:t,line:n.getStartLineNumber(),unboundedStringArgs:c}},yc=(e,t)=>{const s=[],n=dc(e),i={destructured:uc(e,n),namespaces:n};for(const o of Q(e)){const a=Ac(o,t,i);a&&s.push(a)}return s},bc=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...yc(i,w(t,n)))}return s},Et=e=>e?.getKind()===d.TrueKeyword,Nc=e=>e?.getKind()===d.FalseKeyword,Pc=e=>e!==void 0&&r.isNumericLiteral(e)&&e.getLiteralValue()===0,wc=new Set(["lunoraAuthAdapter","lunoraD1Adapter"]),Ic=e=>!e||!r.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>r.isCallExpression(t)&&P(t.getExpression())==="scim"),Cc=e=>e!==void 0&&r.isCallExpression(e)&&wc.has(P(e.getExpression())??""),Tc=e=>!e||!r.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>r.isStringLiteral(t)&&t.getLiteralText()==="*"),Oc=e=>{const t=R(e,"advanced"),s=R(e,"emailAndPassword"),n=R(e,"session");return{analyzable:!0,disableCsrfCheck:Et(R(t,"disableCSRFCheck")),emailPasswordEnabled:Et(R(s,"enabled")),requireEmailVerification:Et(R(s,"requireEmailVerification")),scimOnNonTransactionalAdapter:Ic(R(e,"plugins"))&&Cc(R(e,"database")),secureCookiesDisabled:Nc(R(t,"useSecureCookies")),sessionFreshAgeZero:Pc(R(n,"freshAge")),trustedOriginsWildcard:Tc(R(e,"trustedOrigins"))}},kc=()=>({analyzable:!1,disableCsrfCheck:!1,emailPasswordEnabled:!1,requireEmailVerification:!1,scimOnNonTransactionalAdapter:!1,secureCookiesDisabled:!1,sessionFreshAgeZero:!1,trustedOriginsWildcard:!1}),Rc=(e,t)=>{if(P(e.getExpression())!=="createAuth")return;const s=e.getArguments()[0],n=s!==void 0&&r.isObjectLiteralExpression(s)&&s.getProperties().some(o=>r.isSpreadAssignment(o)),i=s!==void 0&&r.isObjectLiteralExpression(s)&&!n?Oc(s):kc();return{scope:x(e),file:t,line:e.getStartLineNumber(),...i}},Fc=(e,t)=>xr(e,t,Rc),Lc=(e,t)=>{if(!r.isPropertyAccessExpression(e))return;const s=e.getName();if(t.methods.has(s))return Dn(e.getExpression(),t.matchReceiver)?s:void 0},Dc=(e,t,s)=>{const n=Lc(e.getExpression(),s);if(n===void 0)return;const i=e.getArguments()[s.argIndex];if(!(!i||!q(i)||le(i))&&!(s.requireUnmodifiedReach===!0&&!Ba(i)))return{scope:x(e),file:t,line:e.getStartLineNumber(),method:n}},tt=(e,t,s)=>C(e,t,(n,i)=>Dc(n,i,s)),Mc=new Set(["content","pdf","scrape","screenshot"]),_c=(e,t)=>tt(e,t,{argIndex:0,matchReceiver:s=>s==="ctx.browser",methods:Mc}),Kc=new Set(["createBrowser","createInboundEmailHandler","createPayment"]),zc=new Set(["RateLimiter"]),$c=new Set(["extend"]),_s="lunora",Bc=["vite.config.ts","vite.config.mts","vite.config.js","vite.config.mjs"],ei=e=>{const t=[],s=[];let n=!1;for(const i of e.getProperties()){if(r.isSpreadAssignment(i)){n=!0;continue}if(r.isPropertyAssignment(i)){const o=S(i);t.push(o),i.getInitializer()?.getKind()===d.TrueKeyword&&s.push(o);continue}(r.isShorthandPropertyAssignment(i)||r.isMethodDeclaration(i))&&t.push(S(i))}return{analyzable:!n,presentKeys:t,trueKeys:s}},Rt=e=>e&&r.isObjectLiteralExpression(e)?ei(e):{analyzable:!1,presentKeys:[],trueKeys:[]},Vc=e=>{const t=e&&(r.isArrowFunction(e)||r.isFunctionExpression(e))?e:void 0,s=t&&On(t.getBody());return s?ei(s):{analyzable:!1,presentKeys:[],trueKeys:[]}},Uc=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(d.CallExpression)){const i=P(n.getExpression());i!==void 0&&(Kc.has(i)?s.push({callee:i,file:t,line:n.getStartLineNumber(),...Rt(n.getArguments()[0])}):$c.has(i)&&s.push({callee:i,file:t,line:n.getStartLineNumber(),...Vc(n.getArguments()[0])}))}for(const n of e.getDescendantsOfKind(d.NewExpression)){const i=P(n.getExpression());i===void 0||!zc.has(i)||s.push({callee:i,file:t,line:n.getStartLineNumber(),...Rt(n.getArguments()[0])})}return s},Wc=e=>{for(const t of Bc){const s=E(e,t);if(!M(s))continue;const n=new Ut({compilerOptions:{allowJs:!0},skipFileDependencyResolution:!0,skipLoadingLibFiles:!0,useInMemoryFileSystem:!0}).createSourceFile(t,Ge(s,"utf8")),i=[];for(const o of n.getDescendantsOfKind(d.CallExpression))P(o.getExpression())===_s&&i.push({callee:_s,file:t,line:o.getStartLineNumber(),...Rt(o.getArguments()[0])});return i}return[]},qc=(e,t)=>{const s=[];for(const{displayPath:n,filePath:i}of Ye(t)){const o=e.getSourceFile(i)??e.addSourceFileAtPath(i);s.push(...Uc(o,n))}return s.push(...Wc(Vt(t))),s},Ks="ctx.containers.",jc=e=>{if(!e.startsWith(Ks))return!1;const t=e.slice(Ks.length);return t.length>0&&!t.includes(".")},Hc=(e,t)=>tt(e,t,{argIndex:0,matchReceiver:jc,methods:new Set(["get"])}),Gc=new Set(["allow","deny","setAllowed"]),Yc=e=>{const t=e.getArguments()[0];if(!t||!r.isObjectLiteralExpression(t))return!1;const s=V(t,"enableInternet");return s!==void 0&&r.isPropertyAssignment(s)&&r.isTrueLiteral(s.getInitializerOrThrow())},Qc=(e,t)=>{const s=e.getExpression();if(!(!r.isPropertyAccessExpression(s)||s.getName()!=="start"||!Yc(e)))return{detail:"enableInternet: true",scope:x(e),file:t,kind:"enable_internet",line:e.getStartLineNumber()}},Xc=(e,t)=>{const s=e.getExpression();if(!r.isPropertyAccessExpression(s)||!Gc.has(s.getName()))return;const n=s.getExpression();if(!(!r.isPropertyAccessExpression(n)||n.getName()!=="egress"))return{detail:s.getName(),scope:x(e),file:t,kind:"egress_relaxation",line:e.getStartLineNumber()}},Jc=(e,t)=>Qc(e,t)??Xc(e,t),Zc=(e,t)=>C(e,t,Jc),el=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||t.getName()!=="count")return;const s=t.getExpression();if(z(s)){const n=e.getArguments()[0];return n&&r.isStringLiteral(n)?n.getLiteralText():""}return r.isPropertyAccessExpression(s)&&z(s.getExpression())?s.getName():void 0},tl=e=>{const t=e.getExpression(),s=r.isPropertyAccessExpression(t)?t.getExpression():void 0;return e.getArguments()[s!==void 0&&z(s)?1:0]},sl=new Set(["baseWhere","relationBaseWhere","restrictsCounts","where"]),nl=e=>{if(e===void 0||!r.isObjectLiteralExpression(e))return;const t=[];for(const n of e.getProperties()){if(!r.isPropertyAssignment(n)&&!r.isShorthandPropertyAssignment(n))return;t.push(n.getName())}return t.length>0&&t.every(n=>sl.has(n))||t.some(n=>n==="AND"||n==="OR"||n==="NOT")?void 0:t},il=(e,t,s)=>{const n=new Map(s.map(i=>[i.name,i.aggregateIndexed===!0]));return C(e,t,(i,o)=>{const a=el(i);if(a===void 0)return;const c=nl(tl(i));return{file:o,indexed:n.get(a)!==!1,...c===void 0?{}:{filterFields:c},line:i.getStartLineNumber(),scope:x(i),table:a}})},rl=new Set(["defineExportSink","r2Sink","webhookExportSink"]),ol=e=>{const t=e.getExpression();if(!r.isIdentifier(t))return;const s=t.getText();return rl.has(s)?s:void 0},al=e=>{const t=[],s=[];for(const n of e.getProperties()){if(r.isSpreadAssignment(n))return{analyzable:!1,emptyKeys:[],presentKeys:[]};if(r.isPropertyAssignment(n)){const i=S(n);t.push(i);const o=n.getInitializer();o&&r.isStringLiteral(o)&&o.getLiteralText()===""&&s.push(i);continue}(r.isShorthandPropertyAssignment(n)||r.isMethodDeclaration(n)||r.isGetAccessorDeclaration(n))&&t.push(S(n))}return{analyzable:!0,emptyKeys:s,presentKeys:t}},cl=(e,t)=>{const s=[];for(const{displayPath:n,filePath:i}of Ye(t)){const o=e.getSourceFile(i)??e.addSourceFileAtPath(i);for(const a of o.getDescendantsOfKind(d.CallExpression)){const c=ol(a);if(c===void 0)continue;const l=a.getArguments()[0],u=l&&r.isObjectLiteralExpression(l)?al(l):{analyzable:!1,emptyKeys:[],presentKeys:[]};s.push({analyzable:u.analyzable,emptyKeys:u.emptyKeys,factory:c,file:n,line:a.getStartLineNumber(),presentKeys:u.presentKeys})}}return s},ll=new Map([["dbRateLimit",2],["rateLimit",2],["verifyTurnstileMiddleware",0]]),dl=new Set(["dbRateLimit","rateLimit"]),ul=e=>{const t=Rn(e);if(!t)return!1;const s=V(t,"failOpen");return s!==void 0&&r.isPropertyAssignment(s)&&s.getInitializer()?.getKind()===d.TrueKeyword},fl=(e,t)=>{const s=P(e.getExpression());if(s===void 0)return;const n=ll.get(s);if(n!==void 0)return{callee:s,scope:x(e),failOpen:ul(e.getArguments()[n]),file:t,limitName:dl.has(s)?kn(e):"",line:e.getStartLineNumber()}},gl=(e,t)=>C(e,t,fl),pl=e=>{const t=e.getInitializer();if(!t||!r.isCallExpression(t))return;const s=ee(t);if(s?.kind!=="query")return;const n=Sr(t,s.receiver);return n?{exportName:j(e)??e.getName(),handler:n}:void 0},zs=e=>{const t=e.getParent();return t&&r.isPropertyAccessExpression(t)&&t.getExpression()===e?t:void 0},ml=e=>{const t=zs(e);if(!t)return"ctx.flags";if(t.getName()==="details"){const s=zs(t);return s?`ctx.flags.details.${s.getName()}`:"ctx.flags.details"}return`ctx.flags.${t.getName()}`},hl=(e,t)=>{const s=[];for(const n of Je(e.handler,"flags"))s.push({callee:ml(n),exportName:e.exportName,file:t,line:n.getStartLineNumber()});return s},vl=(e,t)=>{const s=[];for(const n of Q(e)){const i=pl(n);i&&s.push(...hl(i,t))}return s},El=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...vl(i,w(t,n)))}return s},xl=e=>!r.isPropertyAccessExpression(e)||e.getName()!=="boolean"?!1:G(e.getExpression(),["flags"]),Sl=e=>{if(e?.getKind()===d.TrueKeyword)return!0;if(e?.getKind()===d.FalseKeyword)return!1},Al=(e,t)=>{if(!xl(e.getExpression()))return;const[s,n]=e.getArguments();if(!s||!(r.isStringLiteral(s)||r.isNoSubstitutionTemplateLiteral(s)))return;const i=s.getLiteralValue(),o=Sl(n);if(!(i.length===0||o===void 0))return{defaultValue:o,scope:x(e),file:t,key:i,line:e.getStartLineNumber()}},yl=(e,t)=>C(e,t,Al),bl=e=>{const t=e.getExpression();return r.isPropertyAccessExpression(t)&&t.getName()==="withGeoIndex"},Nl=e=>{const t=e.getArguments()[0];return t&&r.isStringLiteral(t)?t.getLiteralText():""},Pl=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of i.getDescendantsOfKind(d.CallExpression))bl(a)&&s.push({file:o,indexName:Nl(a),line:a.getStartLineNumber()})}return s},be=e=>e!==void 0&&(r.isArrowFunction(e)||r.isFunctionExpression(e))?e:void 0,ti=e=>{const t=e.getArguments()[0],s=be(t);if(s!==void 0)return s;if(t===void 0||!r.isObjectLiteralExpression(t))return;const n=V(t,"handler");return n!==void 0&&r.isPropertyAssignment(n)?be(n.getInitializer()):void 0},wl=new Set(["delete","get","head","options","patch","post","put"]),Il=new Set(["handler","stream"]),Cl=new Set(["runAction","runMutation"]),Tl=new Set(["delete","insert","insertManyUnsafe","patch","patchIf","replace"]),Ne=(e,t)=>e!==void 0&&r.isIdentifier(e)&&e.getText()===t,si=(e,t)=>{if(!(e===void 0||!r.isObjectBindingPattern(e))){for(const s of e.getElements())if(ce(s)===t){const i=s.getNameNode();return r.isIdentifier(i)?i.getText():void 0}}},$s=(e,t)=>{const s=e.getParameters()[0]?.getNameNode();if(s!==void 0)return t?r.isIdentifier(s)?s.getText():void 0:si(s,"ctx")},Bs=(e,t)=>{const s=e.getParameters()[t?1:0]?.getNameNode();return t?s!==void 0&&r.isIdentifier(s)?s.getText():void 0:si(s,"request")},Vs=(e,t)=>{const s=e.getBody(),n=s.getDescendantsOfKind(d.CallExpression);r.isCallExpression(s)&&n.unshift(s);for(const i of n){const o=i.getExpression();if(!r.isPropertyAccessExpression(o))continue;const a=o.getName(),c=o.getExpression();if(Cl.has(a)&&Ne(c,t))return a;if(Tl.has(a)&&r.isPropertyAccessExpression(c)&&c.getName()==="db"&&Ne(c.getExpression(),t))return`db.${a}`}},Us=(e,t)=>{const s=e.getBody();for(const n of s.getDescendantsOfKind(d.PropertyAccessExpression))if(n.getName()==="auth"&&Ne(n.getExpression(),t))return!0;for(const n of s.getDescendantsOfKind(d.VariableDeclaration)){const i=n.getNameNode();if(!(!r.isObjectBindingPattern(i)||!Ne(n.getInitializer(),t))){for(const o of i.getElements())if(ce(o)==="auth")return!0}}return!1},Ol=/signature|hmac|digest|(?:^|[_-])sig(?:[_-]|$)/i,kl=(e,t)=>{const s=e.getExpression();if(!r.isPropertyAccessExpression(s)||s.getName()!=="get"&&s.getName()!=="has")return!1;const n=s.getExpression();return r.isPropertyAccessExpression(n)&&n.getName()==="headers"&&Ne(n.getExpression(),t)},Rl=e=>[...r.isStringLiteral(e)?[e.getLiteralText()]:[],...e.getDescendantsOfKind(d.StringLiteral).map(t=>t.getLiteralText())],ni=(e,t)=>{const s=e.getVariableDeclaration(t)?.getInitializer();return s===void 0?[]:Rl(s)},Fl=(e,t)=>{const s=e.getText();for(let n=e.getParent();n!==void 0;n=n.getParent()){if(!r.isArrowFunction(n)&&!r.isFunctionExpression(n)||!n.getParameters().some(c=>c.getName()===s))continue;const i=n.getParent();if(!r.isCallExpression(i))return[];const o=i.getExpression();if(!r.isPropertyAccessExpression(o))return[];const a=o.getExpression();return r.isIdentifier(a)?ni(t,a.getText()):[]}return[]},Ll=e=>{const t=e.getArguments()[0];if(t===void 0)return[];if(r.isStringLiteral(t))return[t.getLiteralText()];if(!r.isIdentifier(t))return[];const s=e.getSourceFile(),n=ni(s,t.getText());return n.length>0?n:Fl(t,s)},Ws=(e,t)=>{if(t===void 0)return!1;const s=e.getBody(),n=s.getDescendantsOfKind(d.CallExpression);return r.isCallExpression(s)&&n.unshift(s),n.some(i=>kl(i,t)&&Ll(i).some(o=>Ol.test(o)))},Dl=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||!Il.has(t.getName()))return;let s=t.getExpression();for(;r.isCallExpression(s);){const n=s.getExpression();if(!r.isPropertyAccessExpression(n))return;const i=n.getName();if(wl.has(i)){const o=n.getExpression();return r.isIdentifier(o)&&o.getText()==="httpRoute"?i.toUpperCase():void 0}s=n.getExpression()}},Ml=(e,t)=>{const s=e.getExpression();if(r.isIdentifier(s)&&s.getText()==="httpAction"){const c=be(e.getArguments()[0]),l=c&&$s(c,!0);if(!c||l===void 0||Ws(c,Bs(c,!0)))return;const u=Vs(c,l);return u===void 0?void 0:{scope:x(e),file:t,kind:"httpAction",line:e.getStartLineNumber(),readsAuth:Us(c,l),sideEffect:u}}const n=Dl(e);if(n===void 0)return;const i=be(e.getArguments()[0]),o=i&&$s(i,!1);if(!i||o===void 0||Ws(i,Bs(i,!1)))return;const a=Vs(i,o);return a===void 0?void 0:{scope:x(e),file:t,kind:"httpRoute",line:e.getStartLineNumber(),method:n,readsAuth:Us(i,o),sideEffect:a}},_l=(e,t)=>C(e,t,Ml),Kl=new Set(["btoa","encodeURI","encodeURIComponent","isSafeHeaderValue","Number","parseFloat","parseInt"]),zl=new Set(["append","set"]),ii=e=>e!==void 0&&(r.isStringLiteral(e)||r.isNoSubstitutionTemplateLiteral(e))?e.getLiteralText():"",qs=(e,t)=>(r.isCallExpression(e)?[e,...e.getDescendantsOfKind(d.CallExpression)]:e.getDescendantsOfKind(d.CallExpression)).some(n=>Kl.has(P(n.getExpression())??"")&&De(n,t)),$l=(e,t)=>{if(qs(e,t))return!0;const s=Y(e);return s!==void 0&&qs(s,t)},Ft=(e,t)=>Va(e,t)&&!$l(e,t),Bl=e=>{if(r.isPropertyAccessExpression(e)&&e.getName()==="headers")return!0;const t=Y(e);return t!==void 0&&r.isNewExpression(t)&&P(t.getExpression())==="Headers"},Ve=e=>{if(e===void 0)return;if(r.isObjectLiteralExpression(e))return e;const t=Y(e);return t!==void 0&&r.isObjectLiteralExpression(t)?t:void 0},es=(e,t,s)=>{for(const n of e.getProperties())if(r.isPropertyAssignment(n)){const i=n.getInitializer();i!==void 0&&Ft(i,s.requestName)&&s.rows.push({scope:s.scope,file:s.relativePath,headerName:ii(n.getNameNode()),line:i.getStartLineNumber(),via:t})}else if(r.isShorthandPropertyAssignment(n)){const i=n.getNameNode();Ft(i,s.requestName)&&s.rows.push({scope:s.scope,file:s.relativePath,headerName:S(n),line:i.getStartLineNumber(),via:t})}else if(r.isSpreadAssignment(n)){const i=Ve(n.getExpression());i!==void 0&&es(i,t,s)}},ri=(e,t)=>{const s=Ve(e);if(s===void 0)return;const n=V(s,"headers");if(n===void 0||!r.isPropertyAssignment(n))return;const i=Ve(n.getInitializer());i!==void 0&&es(i,"response-init",t)},Vl=(e,t)=>{const s=P(e.getExpression());if(s==="Response")ri(e.getArguments()[1],t);else if(s==="Headers"){const n=Ve(e.getArguments()[0]);n!==void 0&&es(n,"headers-ctor",t)}},Ul=(e,t)=>{const s=e.getExpression();if(!r.isPropertyAccessExpression(s))return;const n=s.getName(),i=s.getExpression();if(n==="json"&&r.isIdentifier(i)&&i.getText()==="Response"){ri(e.getArguments()[1],t);return}if(zl.has(n)&&Bl(i)){const o=e.getArguments()[1];o!==void 0&&Ft(o,t.requestName)&&t.rows.push({scope:t.scope,file:t.relativePath,headerName:ii(e.getArguments()[0]),line:o.getStartLineNumber(),via:n==="set"?"headers-set":"headers-append"})}},Wl=(e,t)=>{for(const s of e.getDescendantsOfKind(d.NewExpression))Vl(s,t);for(const s of e.getDescendantsOfKind(d.CallExpression))Ul(s,t)},ql=(e,t)=>{const s=e.getExpression();if(!r.isIdentifier(s)||s.getText()!=="httpAction")return[];const n=be(e.getArguments()[0]);if(n===void 0)return[];const i=n.getParameters()[1];if(i===void 0)return[];const o=i.getNameNode();if(!r.isIdentifier(o))return[];const a=[];return Wl(n,{scope:x(e),relativePath:t,requestName:o.getText(),rows:a}),a},jl=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(d.CallExpression))s.push(...ql(n,t));return s},Hl=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...jl(i,w(t,n)))}return s},oi="identity.ts",Gl=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineIdentity";for(const s of t.getDeclarations())if(r.isImportSpecifier(s))return Ze(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineIdentity":!1;return!1},Yl=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!r.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(d.ImportDeclaration);return n!==void 0&&Ze(n.getModuleSpecifierValue())}return!1},Ql=e=>{if(r.isIdentifier(e))return Gl(e);if(r.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineIdentity"&&r.isIdentifier(t)&&Yl(t)}return!1},Xl=e=>{const t=[];for(const s of e.getVariableDeclarations()){const n=s.getInitializer();if(n?.getKind()!==d.CallExpression||!Ql(n.getExpression()))continue;const o=s.getNameNode();if(!r.isIdentifier(o)){if(s.getVariableStatement()?.hasExportKeyword()!==!0)continue;throw de(o,"defineIdentity exports must be plain named exports (no destructuring)")}const a=jt(s,"member");a!==void 0&&t.push({exportName:a})}return t},Jl=(e,t)=>{const s=E(t,oi);if(!M(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),i=Xl(n);if(i.length!==0){if(i.length>1)throw de(n,`lunora/identity.ts declares ${i.length.toString()} defineIdentity() contracts (${i.map(o=>o.exportName).join(", ")}); exactly one is allowed`);return i[0]}},Zl=new Set(["auth","context.auth"]),ed="userId",td=e=>{const t=new Set;for(const s of e.getProperties()){if(r.isSpreadAssignment(s))return;(r.isPropertyAssignment(s)||r.isShorthandPropertyAssignment(s)||r.isMethodDeclaration(s))&&t.add(S(s))}return t},sd=(e,t)=>{const s=E(t,oi);if(!M(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const i of n.getDescendantsOfKind(d.CallExpression)){if(P(i.getExpression())!=="defineIdentity")continue;const[o]=i.getArguments();return o&&r.isObjectLiteralExpression(o)?td(o):void 0}},js=e=>{if(e===void 0||!r.isPropertyAccessExpression(e)||e.getName()!=="identity")return;const t=e.getExpression();return Zl.has(t.getText())||G(t,["auth"])?e:void 0},nd=e=>{if(r.isPropertyAccessExpression(e)&&js(e.getExpression())!==void 0)return e.getName();if(r.isElementAccessExpression(e)&&js(e.getExpression())!==void 0){const t=e.getArgumentExpression();return t&&r.isStringLiteral(t)?t.getLiteralValue():void 0}},Hs=(e,t,s)=>{const n=nd(e);return n===void 0?void 0:{declared:n===ed||s.has(n),file:t,key:n,line:e.getStartLineNumber(),scope:x(e)}},id=(e,t)=>{const s=sd(e,t);return s===void 0?[]:[...ne(e,t,d.PropertyAccessExpression,(n,i)=>Hs(n,i,s)),...ne(e,t,d.ElementAccessExpression,(n,i)=>Hs(n,i,s))]},rd=(e,t)=>{if(P(e.getExpression())!=="buildImageDeliveryUrl")return;const s=e.getArguments()[0];if(!s)return;const n=R(s,"key");if(!(!n||!q(n)||le(n)))return{scope:x(e),file:t,line:e.getStartLineNumber()}},od=(e,t)=>C(e,t,rd),ad=new Set(["delete","get","getRaw","getWithMetadata","put"]),cd=(e,t,s=[])=>{const n=tt(e,t,{argIndex:0,matchReceiver:i=>i==="ctx.kv"||i.startsWith("ctx.kv."),methods:ad});return Ht(n,s)},ld=new Set(["queue","send"]),Gs=new Set(["bcc","cc","to"]),dd=e=>{if(!r.isPropertyAccessExpression(e))return;const t=e.getName();if(!ld.has(t))return;const s=e.getExpression();return G(s,["mail"])||G(s,["email"])?t:void 0},ud=e=>r.isObjectLiteralExpression(e)?e.getProperties().some(t=>{if(r.isShorthandPropertyAssignment(t)){const n=t.getNameNode();return Gs.has(S(t))&&q(n)&&!le(n)}if(!r.isPropertyAssignment(t)||!Gs.has(S(t)))return!1;const s=t.getInitializer();return s!==void 0&&q(s)&&!le(s)}):!1,fd=(e,t)=>{const s=dd(e.getExpression());if(s===void 0)return;const n=e.getArguments()[0];if(!(!n||!ud(n)))return{scope:x(e),file:t,line:e.getStartLineNumber(),method:s}},gd=(e,t)=>C(e,t,fd),pd=(e,t,s)=>{const n=e.getArguments()[0];if(!n||!r.isObjectLiteralExpression(n))return[];const i=[];for(const o of n.getProperties()){const a=Be(o);if(a===void 0||!r.isPropertyAssignment(o))continue;const c=o.getInitializer();if(!(!c||!r.isObjectLiteralExpression(c)))for(const l of c.getProperties()){const u=Be(l);if(u===void 0)continue;const f=Bn(l);f!=="custom"&&i.push({column:u,exportName:t,file:s,line:l.getStartLineNumber(),strategy:f,table:a})}}return i},md=(e,t)=>{if(!r.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&r.isCallExpression(s)?ee(s):void 0;return n?.receiver?Yt(n.receiver).flatMap(i=>pd(i,j(e)??e.getName(),t)):[]},hd=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of Q(i))s.push(...md(a,o))}return s},vd=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||t.getName()!=="replace")return!1;const s=t.getExpression();return z(s)},Ed=e=>{const t=e.getArguments()[0];if(t===void 0||!r.isObjectLiteralExpression(t))return;const s=V(t,"server");if(s!==void 0)return r.isPropertyAssignment(s)?s.getInitializer():s},xd=e=>{if(!e.isExported())return;const t=e.getInitializer();if(t?.getKind()!==d.CallExpression)return;const s=t;return Ur(s.getExpression())?s:void 0},Sd=e=>{const t=xd(e),s=t===void 0?void 0:Ed(t);if(s===void 0)return[];const n=e.getNameNode(),i=r.isIdentifier(n)?j(e)??n.getText():"";return s.getDescendantsOfKind(d.CallExpression).filter(o=>vd(o)).map(o=>({exportName:i,file:"lunora/mutators.ts",line:o.getStartLineNumber()}))},Ad=e=>e.getVariableDeclarations().flatMap(t=>Sd(t)),yd=(e,t)=>{const s=E(t,Vr);if(!M(s))return[];const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);return Ad(n)},bd=new Set(["delete","get","patch"]),Nd=new Set(["accountId","authorId","companyId","createdBy","createdById","customerId","groupId","memberId","organizationId","orgId","ownerId","projectId","teamId","tenantId","userId","workspaceId"]),Pd=new Set(["auth","identity","session","user"]),wd=new Set([d.EqualsEqualsEqualsToken,d.EqualsEqualsToken,d.ExclamationEqualsEqualsToken,d.ExclamationEqualsToken]),Id=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||t.getName()!=="normalizeId"||!z(t.getExpression()))return;const s=e.getArguments()[0];return s&&r.isStringLiteral(s)?s.getLiteralText():""},Cd=e=>{let t=e,s=t.getParent();for(;s!==void 0&&(r.isAsExpression(s)||r.isParenthesizedExpression(s)||r.isNonNullExpression(s));)t=s,s=t.getParent();if(s===void 0||!r.isVariableDeclaration(s))return;const n=s.getNameNode();return r.isIdentifier(n)?n.getText():void 0},Td=(e,t)=>e.getDescendantsOfKind(d.Identifier).some(s=>s.getText()===t),Od=e=>r.isThrowStatement(e)||r.isReturnStatement(e)||e.getDescendantsOfKind(d.ThrowStatement).length>0||e.getDescendantsOfKind(d.ReturnStatement).length>0,kd=(e,t)=>e.getDescendantsOfKind(d.IfStatement).some(s=>Td(s.getExpression(),t)&&Od(s.getThenStatement())),Rd=(e,t)=>{for(const s of e.getDescendantsOfKind(d.CallExpression)){const n=s.getExpression();if(!r.isPropertyAccessExpression(n))continue;const i=n.getName();if(!bd.has(i))continue;const o=n.getExpression();if(!(z(o)||r.isPropertyAccessExpression(o)&&z(o.getExpression())))continue;const c=s.getArguments()[0];if(c!==void 0&&r.isIdentifier(c)&&c.getText()===t)return i}},Fd=e=>e.getDescendantsOfKind(d.CallExpression).some(t=>t.getArguments().some(s=>Gt(Qe(s))!==void 0)),Ld=e=>e.getDescendantsOfKind(d.BinaryExpression).some(t=>wd.has(t.getOperatorToken().getKind())?r.isPropertyAccessExpression(t.getLeft())||r.isPropertyAccessExpression(t.getRight()):!1),Dd=e=>{for(const t of e.getDescendantsOfKind(d.Identifier))if(Nd.has(t.getText()))return!0;return[...Pd].some(t=>Je(e,t).length>0)?!0:Fd(e)||Ld(e)},Md=(e,t)=>{if(!r.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!r.isCallExpression(s))return[];const n=ee(s);if(n?.kind!=="query"&&n?.kind!=="mutation")return[];const i=ti(s);if(i===void 0)return[];const o=n.receiver!==void 0&&Kn(n.receiver,"use","rls"),a=Dd(i),c=new Set,l=[];for(const u of i.getDescendantsOfKind(d.CallExpression)){const f=Id(u);if(f===void 0)continue;const g=Cd(u);if(g===void 0||c.has(g)||!kd(i,g))continue;const m=Rd(i,g);m!==void 0&&(c.add(g),l.push({exportName:j(e)??e.getName(),file:t,line:u.getStartLineNumber(),mentionsOwnership:a,sinkMethod:m,table:f,usesRls:o,visibility:n.visibility}))}return l},_d=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of Q(i))s.push(...Md(a,o))}return s},ai=(e,t)=>{const s=r.isIdentifier(e)&&t!==void 0?L(e):void 0;return s===void 0||t===void 0?!1:s.compilerNode===t.compilerNode?r.isIdentifier(t.getNameNode()):r.isBindingElement(s)&&s.getFirstAncestorByKind(d.Parameter)?.compilerNode===t.compilerNode},Kd=e=>{const t=I(e),s=t.getParent();return(r.isPropertyAccessExpression(s)||r.isElementAccessExpression(s))&&s.getExpression()===t&&!Xe(s)},zd=e=>{const t=I(e).getParent();return r.isVariableDeclaration(t)&&r.isObjectBindingPattern(t.getNameNode())},$d=e=>{const s=I(e).getParent();if(r.isSpreadAssignment(s)||r.isSpreadElement(s)){const n=s.getParent();return(r.isObjectLiteralExpression(n)||r.isArrayLiteralExpression(n))&&!Xe(n)}return r.isTemplateSpan(s)&&!r.isTaggedTemplateExpression(s.getParent().getParent())},Ue=e=>{const t=L(e);return t===void 0||Pr(t.getSourceFile())},Lt=(e,t)=>{const s=I(e),n=s.getParent();if(!r.isCallExpression(n))return!1;const i=n.getArguments().indexOf(s),o=h(n.getExpression());if(i===-1||o===void 0)return!1;if(r.isIdentifier(o))return o.getText()==="structuredClone"&&Ue(o);if(ai(Qe(o),t))return!(r.isPropertyAccessExpression(o)&&Mn.has(o.getName()))||r.isExpressionStatement(I(r.isAwaitExpression(n.getParent())?n.getParentOrThrow():n).getParent());if(!r.isPropertyAccessExpression(o))return!1;const a=o.getExpression();if(!r.isIdentifier(a)||!Ue(a))return!1;const c=a.getText(),l=o.getName();switch(c){case"console":return!0;case"JSON":return l==="stringify";case"Object":return["entries","freeze","isFrozen","keys","values"].includes(l)||l==="assign"&&i>0;default:return!1}},Me={kind:"opaque"},Bd={kind:"unreached"},Vd=e=>{const t=e.getSymbol()?.getDeclarations()??[],s=t.filter(o=>r.isFunctionDeclaration(o)&&o.hasBody()),[n]=s;return t.every(o=>r.isFunctionDeclaration(o)&&o.getSourceFile()===e.getSourceFile())&&s.length===1&&r.isFunctionDeclaration(n)?n:void 0},Dt=e=>{const t=h(e);if(r.isArrowFunction(t)||r.isFunctionExpression(t))return t;const s=r.isIdentifier(t)?L(t):void 0;if(s?.getSourceFile()!==e.getSourceFile())return;if(r.isFunctionDeclaration(s)){const i=Vd(s);return i===void 0||qt(i)?void 0:i}const n=ie(s)?h(s.getInitializer()):void 0;return r.isArrowFunction(n)||r.isFunctionExpression(n)?n:void 0},ci=(e,t,s)=>{const n=t.getArguments(),i=n.indexOf(s),o=i===-1||n.slice(0,i+1).some(l=>r.isSpreadElement(l))||e.getDescendantsOfKind(d.Identifier).some(l=>l.getText()==="arguments"),a=e.getParameters(),c=a[i];return o?Me:c===void 0?a.some(l=>l.isRestParameter())?Me:Bd:c.isRestParameter()?Me:{kind:"parameter",parameter:c}},Ud=e=>{const t=I(e),s=t.getParent();if(!r.isCallExpression(s)||s.getExpression()===t)return;const n=Dt(s.getExpression());return n===void 0?Me:ci(n,s,t)},Wd=new Set(["__defineGetter__","__defineSetter__","__proto__"]),qd=e=>r.isForInStatement(e)?e.getExpression():r.isConditionalExpression(e)?e.getCondition():r.isElementAccessExpression(e)?e.getArgumentExpression():void 0,li=e=>{const t=I(e),s=t.getParent();if(r.isIfStatement(s)||r.isWhileStatement(s)||r.isDoStatement(s)||r.isSwitchStatement(s)||r.isCaseClause(s)||r.isTypeOfExpression(s)||r.isVoidExpression(s)||r.isComputedPropertyName(s))return!0;if(r.isTemplateSpan(s))return!r.isTaggedTemplateExpression(s.getParent().getParent());const n=qd(s);if(n!==void 0)return y(n,t);if(r.isPrefixUnaryExpression(s))return s.getOperatorToken()!==d.PlusPlusToken&&s.getOperatorToken()!==d.MinusMinusToken;if(!r.isBinaryExpression(s))return!1;const i=s.getOperatorToken().getKind(),o=i>=d.FirstAssignment&&i<=d.LastAssignment,a=i===d.QuestionQuestionToken||i===d.BarBarToken||i===d.AmpersandAmpersandToken;return!o&&!a},jd=4,di=(e,t,s=0)=>{if(Nr(e))return!0;if(Kd(e)){const i=I(e).getParent(),o=r.isElementAccessExpression(i)?i.getArgumentExpression():void 0,a=r.isStringLiteral(o)?o.getLiteralValue():void 0,c=r.isPropertyAccessExpression(i)?i.getName():a;return c===void 0||!Wd.has(c)}if(zd(e)||$d(e)||li(e)||Lt(e,t))return!0;const n=Ud(e);return n?.kind==="unreached"||n?.kind==="parameter"&&Hd(n.parameter,s+1)},Ys=new WeakMap,Hd=(e,t=0)=>{const s=e.getNameNode();if(!r.isIdentifier(s))return!0;const n=Ys.get(e.compilerNode);if(n!==void 0)return n;if(t>jd)return!1;const o=(s.getSymbol()?.getDeclarations().length??0)===1&&e.getParentOrThrow().getDescendantsOfKind(d.Identifier).every(a=>a===s||a.getText()!==s.getText()||L(a)?.compilerNode!==e.compilerNode||di(a,void 0,t));return(o||t===0)&&Ys.set(e.compilerNode,o),o},Qs=new WeakMap,Gd=(e,t)=>{const s=r.isFunctionExpression(e)?e.getNameNode():void 0;if(!r.isArrowFunction(e)&&e.getFirstDescendantByKind(d.ThisKeyword)!==void 0)return!0;const n=new Set([t.getName(),...s===void 0?[]:[s.getText()]]);return e.getDescendantsOfKind(d.Identifier).some(i=>{if(i===s||!n.has(i.getText()))return!1;const o=L(i)?.compilerNode;return o!==void 0&&(o===t.compilerNode||s!==void 0&&o===e.compilerNode)})},Yd=(e,t,s)=>{const{context:n,impl:i}=e,o=Qs.get(i.compilerNode);if(o!==void 0)return o;const a=t.getNameNode(),c=r.isIdentifier(a)?[a]:a.getDescendantsOfKind(d.BindingElement).flatMap(g=>{const m=g.getNameNode();return r.isIdentifier(m)?[m]:[]}),l=new Map(c.map(g=>[g.getText(),g.getParentOrThrow().compilerNode])),u=g=>r.isIdentifier(a)?di(g,n):!Xe(g),f=!Gd(i,s)&&c.every(g=>(g.getSymbol()?.getDeclarations().length??0)===1)&&i.getDescendantsOfKind(d.Identifier).every(g=>{const m=g.getText();if(m==="arguments")return!1;const v=l.get(m);return v===void 0||c.includes(g)||L(g)?.compilerNode!==v?!0:u(g)});return Qs.set(i.compilerNode,f),f},Xs=new WeakMap,Qd=e=>{let t=Xs.get(e.compilerNode);return t===void 0&&(t=new Map(e.getVariableDeclarations().flatMap(s=>{const n=Wr(s);return n===void 0?[]:[[n.compilerNode,s]]})),Xs.set(e.compilerNode,t)),t},Xd=e=>{const t=Qd(e.getSourceFile()),s=e.getAncestors().find(l=>t.has(l.compilerNode)),n=s===void 0?void 0:t.get(s.compilerNode);if(s===void 0||n===void 0)return;const[i,o]=s.getParameters(),a=o===void 0||o.isRestParameter()?void 0:o,c={context:i,impl:s,mutatorName:j(n)??n.getName()};return a!==void 0&&Yd(c,a,n)?{...c,parameter:a,pristine:!0}:{...c,parameter:a,pristine:!1}},xt="args",Ee=e=>{const t=Wt(e);if(t!==void 0){const c=h(t.object);return r.isIdentifier(c)&&c.getText()===xt?t.member:void 0}if(!r.isIdentifier(e))return;const s=L(e);if(!r.isBindingElement(s)||s.getDotDotDotToken()!==void 0)return;const n=s.getParent();if(!r.isObjectBindingPattern(n))return;const i=n.getParent(),o=ie(i)?h(i.getInitializer()):void 0;return r.isBindingElement(i)&&ce(i)===xt||r.isIdentifier(o)&&o.getText()===xt?ce(s):void 0},Jd=new Set(["auth","identity","user"]),Mt=e=>{const t=i=>{const o=Gt(i);return o!==void 0&&o.length>0&&Jd.has(o[0]??"")},s=h(e)??e;if(t(s))return!0;const n=Y(s);return n!==void 0&&t(n)},ui=(e,t=2)=>{const s=new Set;for(const n of[e,...e.getDescendants()]){const i=Ee(n);i!==void 0&&s.add(i);const o=t>0&&r.isIdentifier(n)?Y(n):void 0;if(o!==void 0)for(const a of ui(o,t-1))s.add(a)}return s},_e=e=>{const t=h(e)??e;if(!r.isBinaryExpression(t))return[];const s=t.getOperatorToken().getKind(),n=t.getLeft(),i=t.getRight();if(s===d.BarBarToken)return[..._e(n),..._e(i)];if(s===d.AmpersandAmpersandToken){const l=(u,f)=>{const g=Ee(h(u)??u);return g===void 0?[]:_e(f).filter(m=>m===g)};return[...l(n,i),...l(i,n)]}if(s!==d.ExclamationEqualsEqualsToken&&s!==d.ExclamationEqualsToken)return[];const o=[],a=Ee(h(n)??n),c=Ee(h(i)??i);return a!==void 0&&Mt(i)&&o.push(a),c!==void 0&&Mt(n)&&o.push(c),o},Zd=e=>{const t=h(e)??e;if(!r.isIdentifier(t))return!1;const s=t.getSymbol(),n=s?.getAliasedSymbol()?.getValueDeclaration()??s?.getValueDeclaration();if(!r.isVariableDeclaration(n))return!1;const i=h(n.getInitializer());return r.isCallExpression(i)&&Lr(i.getExpression(),"defineIdentityGuard")},eu=e=>{if(!Zd(e.getExpression()))return[];const t=e.getArguments();return t.flatMap((s,n)=>{const i=Ee(h(s)??s),o=t.some((a,c)=>c!==n&&Mt(a));return i!==void 0&&o?[i]:[]})},tu=e=>{if(r.isThrowStatement(e))return!0;if(!r.isBlock(e))return!1;const t=e.getStatements().at(-1);return t!==void 0&&r.isThrowStatement(t)},su=e=>r.isArrowFunction(e)||r.isFunctionExpression(e)||r.isFunctionDeclaration(e)||r.isMethodDeclaration(e),Js=(e,t)=>{for(let s=e.getParent();s!==void 0;s=s.getParent()){if(s===t||s.compilerNode===t.compilerNode)return!0;if(!(r.isBlock(s)||r.isExpressionStatement(s)||r.isAwaitExpression(s)||r.isParenthesizedExpression(s)||r.isVariableStatement(s)||r.isVariableDeclarationList(s)||r.isVariableDeclaration(s)))return!1}return!1},nu=e=>r.isAwaitExpression(e.getParent())||e.getType().isVoid(),iu=(e,t)=>{const s=new Set;for(const n of e.getDescendantsOfKind(d.IfStatement))if(n.getEnd()<=t&&Js(n,e)&&tu(n.getThenStatement()))for(const i of _e(n.getExpression()))s.add(i);for(const n of e.getDescendantsOfKind(d.CallExpression))if(n.getEnd()<=t&&nu(n)&&Js(n,e))for(const i of eu(n))s.add(i);return s},ru=(e,t)=>{const s=ui(t);if(s.size===0)return!1;const n=e.getFirstAncestor(su);if(n===void 0)return!1;const i=iu(n,e.getStart());return[...s].every(o=>i.has(o))},ou=new Set(["at","concat","filter","find","findLast","flat","reverse","slice","sort","toReversed","toSorted"]),au=new Map([["Array",new Set(["from","of"])],["Object",new Set(["entries","values"])]]),_t=new Set(["catch","every","filter","finally","find","findIndex","findLast","findLastIndex","flatMap","forEach","map","reduce","reduceRight","some","sort","then"]),fi=e=>e.getNameNode().getDescendantsOfKind(d.BindingElement).filter(t=>r.isIdentifier(t.getNameNode())),cu=e=>{const t=I(e),s=t.getParent();if(r.isVariableDeclaration(s))return y(s.getInitializer(),t)?s:void 0;const n=r.isForOfStatement(s)&&s.getExpression()===t?s.getInitializer():void 0;return r.isVariableDeclarationList(n)?n.getDeclarations()[0]:void 0},lu=e=>{const t=cu(e);return t===void 0?void 0:r.isIdentifier(t.getNameNode())?r.isForOfStatement(t.getParent().getParent())||ie(t)?[t]:void 0:fi(t)},xe=e=>e.isUnion()?e.getUnionTypes().every(t=>xe(t)):e.isIntersection()?e.getIntersectionTypes().some(t=>xe(t)):!e.isAny()&&!e.isUnknown()&&!e.isObject()&&!e.isTypeParameter(),We=(e,t,s)=>{const n=r.isCallExpression(e)?h(e.getExpression()):void 0;return r.isPropertyAccessExpression(n)&&t.has(n.getName())&&(s===void 0||n.getExpression()===s)},Ke=e=>{const t=h(e);if(!r.isArrowFunction(t)&&!r.isFunctionExpression(t))return;const s=t.getBody();return r.isBlock(s)?s.getDescendantsOfKind(d.ReturnStatement).filter(n=>n.getFirstAncestor(i=>r.isFunctionLikeDeclaration(i))===t).map(n=>n.getExpression()):[s]},du=e=>{const t=r.isCallExpression(e)?h(e.getExpression()):void 0,s=r.isPropertyAccessExpression(t)?t.getExpression():void 0;return r.isPropertyAccessExpression(t)&&r.isIdentifier(s)&&au.get(s.getText())?.has(t.getName())===!0&&Ue(s)},uu=e=>{const t=wt(e);if(!r.isArrowFunction(t)&&!r.isFunctionExpression(t))return;const s=I(t),n=s.getParent();return r.isCallExpression(n)&&n.getArguments().includes(s)&&We(n,_n)?n:void 0},fu=(e,t)=>{if(!(r.isPropertyAccessExpression(e)||r.isElementAccessExpression(e))||e.getExpression()!==t)return;const s=I(e),n=s.getParent();return!r.isCallExpression(n)||n.getExpression()!==s?e:We(n,ou,t)?n:void 0},gu=(e,t)=>{if(r.isAwaitExpression(e))return e;if(r.isConditionalExpression(e))return e.getCondition()===t?void 0:e;const s=r.isBinaryExpression(e)?e.getOperatorToken().getKind():void 0;return s===d.QuestionQuestionToken||s===d.BarBarToken||s===d.AmpersandAmpersandToken?e:void 0},pu=(e,t)=>{if(r.isArrayLiteralExpression(e))return e;const n=r.isSpreadElement(e)||r.isSpreadAssignment(e)||r.isShorthandPropertyAssignment(e)||r.isPropertyAssignment(e)&&y(e.getInitializer(),t)?e.getParent():void 0;return r.isArrayLiteralExpression(n)||r.isObjectLiteralExpression(n)?n:void 0},Zs=e=>{const t=I(e),s=t.getParent();if(s===void 0)return;const n=r.isCallExpression(s)&&s.getArguments().includes(t)&&du(s);return fu(s,t)??gu(s,t)??pu(s,t)??(n?s:uu(t))},mu=5e4,gi=()=>({inProgress:new Set,verdicts:new Map});class hu{cuts=0;work=0;reset(){this.work=0}cut(){return this.cuts+=1,!0}spend(){return this.work+=1,this.work>mu&&this.cut()}memoized(t,s,n){const i=n.verdicts.get(t);if(i!==void 0)return i;if(n.inProgress.has(t))return this.cuts+=1,!1;if(this.spend())return!0;const o=this.cuts;n.inProgress.add(t);let a;try{a=s()}finally{n.inProgress.delete(t)}return this.cuts===o&&n.verdicts.set(t,a),a}}const vu=8,Eu=8;class xu{budget;scope;taint;verdicts=gi();constructor(t,s,n){this.scope=t,this.budget=s,this.taint=n}isCompromised(t){return this.flowHasCompromisingUse(t)&&!xe(t.getType())}flowHasCompromisingUse(t){return this.budget.memoized(t.compilerNode,()=>{const s=this.budget.cuts,n=[],i=new Set,o=(c,l)=>{i.has(c.compilerNode)||(i.add(c.compilerNode),n.push({binding:c,hops:l}))};let a=!1;o(t,0);for(const c of n)if(a=(c.binding===t?void 0:this.verdicts.verdicts.get(c.binding.compilerNode))??this.visitBinding(c,t,o),a)break;if(!a&&this.budget.cuts===s)for(const c of i)this.verdicts.verdicts.set(c,!1);return a},this.verdicts)}visitBinding({binding:t,hops:s},n,i){const o=t.getNameNode();if(!r.isIdentifier(o)){for(const l of r.isParameterDeclaration(t)?fi(t):[])i(l,s);return!1}if(this.budget.spend())return!0;const a=(l,u)=>u&&s>=vu?this.budget.cut():(i(l,u?s+1:s),!1);return this.taint.referencesTo(t,o.getText()).some(l=>this.valueCompromises(I(l),!0,a,0))&&(t===n||!xe(t.getType()))}valueCompromises(t,s,n,i){let o=t;for(let m=Zs(o);m!==void 0;m=Zs(o)){if(r.isCallExpression(m)&&this.callbackCompromises(m,n))return!0;o=I(m)}const a=o.getParent(),c=o===t&&s,l=()=>!c&&xe(o.getType());if(Xe(o))return!c&&(!r.isBinaryExpression(a)||this.taint.isTaintedValue(a.getRight(),!1));const u=lu(o);if(u!==void 0)return u.some(m=>n(m,!0));const f=r.isPropertyAccessExpression(a)&&a.getExpression()===o?a.getParent():void 0;if(r.isCallExpression(f)&&f.getExpression()===a)return this.methodCallCompromises(f,n);const g=this.nestedReturningFunctionOf(o);return g!==void 0?this.resultCompromises(g,n,i)&&!l():this.positionCompromises(o,n)&&!l()}resultCompromises(t,s,n){const i=I(t).getParent();if(n>=Eu)return this.budget.cut();if(r.isCallExpression(i))return i.getExpression()===I(t)?this.valueCompromises(i,!1,s,n+1):!We(i,_t);const o=r.isFunctionDeclaration(t)?t:i,a=r.isFunctionDeclaration(o)||ie(o)?o.getNameNode():void 0;return o===void 0||!r.isIdentifier(a)?!0:this.taint.referencesTo(o,a.getText()).some(c=>{const l=I(c),u=l.getParent();return!r.isCallExpression(u)||u.getExpression()!==l||this.valueCompromises(u,!1,s,n+1)})}methodCallCompromises(t,s){return t.getArguments().filter(i=>Ke(i)===void 0).some(i=>this.taint.isTaintedValue(i,!1))||this.callbackCompromises(t,s)}callbackCompromises(t,s){const n=We(t,_t)?t.getArguments()[0]:void 0;if(n===void 0)return!1;const i=Dt(n);return i!==void 0&&this.taint.isInImpl(i)?i.getParameters().some(o=>s(o,!1)):this.taint.isTaintedValue(n,!1)}positionCompromises(t,s){const n=t.getParent();if(r.isCallExpression(n)&&n.getArguments().includes(t))return this.argumentCompromises(n,t,s);const i=r.isSpreadElement(n)?n.getParent():void 0;if(n!==void 0&&r.isCallExpression(i))return!Lt(n,this.scope.context)&&this.isOpaqueCallTainted(i.getExpression(),i.getArguments(),n);if(r.isNewExpression(n))return this.isOpaqueCallTainted(n.getExpression(),n.getArguments(),t);if(r.isTemplateSpan(n)){const o=n.getParent(),a=o.getParent(),c=o.getTemplateSpans().map(l=>l.getExpression());return r.isTaggedTemplateExpression(a)&&this.isOpaqueCallTainted(a.getTag(),c,t)}return!this.isReadPosition(t)}argumentCompromises(t,s,n){if(Lt(s,this.scope.context))return!1;const i=Dt(t.getExpression()),o=i===void 0?void 0:ci(i,t,s);return o?.kind==="unreached"?!1:o?.kind==="parameter"&&i!==void 0&&this.taint.isInImpl(i)?n(o.parameter,!1):this.isOpaqueCallTainted(t.getExpression(),t.getArguments(),s)}isReadPosition(t){const s=t.getParent();return s===void 0||r.isExpressionStatement(s)||r.isForStatement(s)||r.isElementAccessExpression(s)||li(t)||y(wt(t),this.scope.impl)}isOpaqueCallTainted(t,s,n){const i=!r.isIdentifier(h(n));return this.taint.isTaintedValue(t,!1)||s.some(o=>(o!==n||i)&&this.taint.isTaintedValue(o,!1))}nestedReturningFunctionOf(t){const s=wt(t);return y(s,this.scope.impl)?void 0:s}}const Su=new Set(["at","every","filter","finally","find","findIndex","findLast","findLastIndex","forEach","order","slice","some","sort","withIndex","withSearchIndex"]),Au=e=>{const t=h(e);if(!r.isIdentifier(t))return r.isPropertyAccessExpression(t)||r.isElementAccessExpression(t);const s=L(t),n=r.isVariableDeclaration(s)?h(s.getInitializer()):void 0;return s===void 0||r.isFunctionDeclaration(s)||r.isParameterDeclaration(s)||r.isArrowFunction(n)||r.isFunctionExpression(n)},yu=new Set(["all","allSettled","any","race"]),en=e=>r.isParameterDeclaration(e)?e:r.isBindingElement(e)?e.getFirstAncestorByKind(d.Parameter):void 0,St=8;class bu{budget=new hu;referencesByDeclaration=new Map;referencesByName=new Map;scope;verdicts=gi();walk;variableDepth=0;queryDepth=0;constructor(t){this.scope=t,this.walk=new xu(t,this.budget,this);for(const s of t.impl.getDescendantsOfKind(d.Identifier)){const n=s.getText();this.referencesByName.set(n,[...this.referencesByName.get(n)??[],s])}}isTaintedValue(t,s){this.queryDepth===0&&this.budget.reset(),this.queryDepth+=1;try{return s&&this.isRootedInContext(t,St)?!1:(r.isIdentifier(t)?[t]:t.getDescendantsOfKind(d.Identifier)).some(i=>wr(i)&&this.isIdentifierTainted(i))}finally{this.queryDepth-=1}}isInImpl(t){const{impl:s}=this.scope;return t!==s&&s.getPos()<=t.getPos()&&t.getEnd()<=s.getEnd()}referencesTo(t,s){let n=this.referencesByDeclaration.get(s);if(n===void 0){n=new Map;for(const i of this.referencesByName.get(s)??[]){const o=L(i)?.compilerNode;o!==void 0&&n.set(o,[...n.get(o)??[],i])}this.referencesByDeclaration.set(s,n)}return(n.get(t.compilerNode)??[]).filter(i=>i.getParent()!==t)}flowsIntoTainted(t){if([t.getInitializer(),...t.getDescendantsOfKind(d.BindingElement).map(g=>g.getInitializer())].some(g=>g!==void 0&&this.isTaintedValue(g,!1)))return!0;const n=t.getParentOrThrow(),i=r.isFunctionLikeDeclaration(n)?n.getParameters().findIndex(g=>g.compilerNode===t.compilerNode):-1,o=I(n),a=o.getParent();if(i===-1)return!0;if(r.isCallExpression(a)){if(a.getExpression()===o)return this.isCallSiteTainted(a,i,t.isRestParameter());const g=h(a.getExpression());if(!r.isPropertyAccessExpression(g)||!_t.has(g.getName()))return!0;const m=a.getArguments().filter(v=>v!==o);return this.isTaintedValue(g.getExpression(),!0)||m.some(v=>this.isTaintedValue(v,!1))}const c=r.isVariableDeclaration(a)&&ie(a)?a:void 0,l=r.isFunctionDeclaration(n)?n:c,u=l?.getNameNode();if(l===void 0||!r.isIdentifier(u))return!0;const f=this.referencesTo(l,u.getText());return f.length===0||f.some(g=>{const m=I(g),v=m.getParent();return!r.isCallExpression(v)||v.getExpression()!==m||this.isCallSiteTainted(v,i,t.isRestParameter())})}isCallSiteTainted(t,s,n){const i=t.getArguments(),o=i.findIndex(c=>r.isSpreadElement(c)),a=c=>c===s||n&&c>s||o!==-1&&o<=s&&c>=o;return i.some((c,l)=>a(l)&&this.isTaintedValue(c,!1))}isContextRootedCombinator(t,s){const n=h(t.getExpression()),i=r.isPropertyAccessExpression(n)?n.getExpression():void 0,a=r.isPropertyAccessExpression(n)&&r.isIdentifier(i)&&i.getText()==="Promise"&&Ue(i)&&yu.has(n.getName())?h(t.getArguments()[0]):void 0;if(r.isArrayLiteralExpression(a)){const f=a.getElements();return f.length>0&&f.every(g=>!r.isSpreadElement(g)&&this.isRootedInContext(g,s))}const c=r.isCallExpression(a)?h(a.getExpression()):void 0,l=r.isCallExpression(a)&&r.isPropertyAccessExpression(c)&&c.getName()==="map"?h(a.getArguments()[0]):void 0,u=l===void 0?void 0:Ke(l);return u!==void 0&&u.length>0&&u.every(f=>f!==void 0&&this.isRootedInContext(f,s))}isIdentifierTainted(t){const s=t.getText();if(s==="arguments")return!0;const n=L(t),i=en(n);if(i!==void 0)return this.isSource(i);if(s==="args")return!0;if(n===void 0||!this.isInImpl(n))return!1;if(r.isFunctionDeclaration(n))return this.budget.memoized(n.compilerNode,()=>this.isTaintedValue(n,!1),this.verdicts);if(r.isBindingElement(n)&&this.walk.isCompromised(n))return!0;const o=r.isBindingElement(n)?n.getFirstAncestorByKind(d.VariableDeclaration):n;return r.isVariableDeclaration(o)&&this.isVariableTainted(o)}callChainVerdict(t,s){if(this.isContextRootedCombinator(t,s))return!0;const n=h(t.getExpression()),i=r.isPropertyAccessExpression(n)?n.getName():void 0;return i!==void 0&&Mn.has(i)?!1:i!==void 0&&_n.has(i)?this.isCallbackResultServerScoped(t,s)?void 0:!1:t.getArguments().some(a=>Ke(a)!==void 0)&&(i===void 0||!Su.has(i))?!1:void 0}isCallbackResultServerScoped(t,s){const n=(i,o=[])=>{const a=Qe(i),c=r.isIdentifier(a)?en(L(a)):void 0;return c!==void 0&&o.includes(c)?!0:this.isRootedInContext(i,s)||!this.isTaintedValue(i,!1)};return t.getArguments().every(i=>{const o=Ke(i);if(o===void 0)return!Au(i)&&n(i);const a=h(i),c=r.isArrowFunction(a)||r.isFunctionExpression(a)?a.getParameters():[];return o.every(l=>l===void 0||n(l,c))})}isRootedInContext(t,s){const n=Ar(t,u=>this.callChainVerdict(u,s)),i=n.root;if(n.verdict!==void 0)return n.verdict;if(ai(i,this.scope.context))return!0;const o=r.isIdentifier(i)?L(i):void 0,a=r.isBindingElement(o)?o.getFirstAncestorByKind(d.VariableDeclaration):o,c=ie(a)&&this.isInImpl(a)?a.getInitializer():void 0,l=r.isBindingElement(o)?o:a;return s>0&&c!==void 0&&(r.isBindingElement(l)||r.isVariableDeclaration(l))&&!this.walk.isCompromised(l)&&this.isRootedInContext(c,s-1)}isSource(t){const{impl:s,parameter:n}=this.scope;return t.compilerNode===n?.compilerNode?!0:t.getParent()!==s&&this.isInImpl(t)&&(this.budget.memoized(t.compilerNode,()=>this.flowsIntoTainted(t),this.verdicts)||this.walk.isCompromised(t))}isVariableTainted(t){return this.budget.memoized(t.compilerNode,()=>{const s=t.getParent().getParent();if(r.isCatchClause(t.getParent())||this.walk.isCompromised(t))return!0;if(r.isForOfStatement(s)||r.isForInStatement(s))return this.isTaintedValue(s.getExpression(),!0);const n=t.getInitializer(),i=qt(t);if(n===void 0||i)return!0;if(this.isRootedInContext(n,St))return!1;if(this.variableDepth>=St)return this.budget.cut();this.variableDepth+=1;try{return this.isTaintedValue(n,!1)}finally{this.variableDepth-=1}},this.verdicts)}}const tn=new WeakMap,Nu=e=>{const t=tn.get(e.impl.compilerNode);if(t!==void 0)return t;const s=new bu(e);return tn.set(e.impl.compilerNode,s),s},Pu=new Set(["accountId","authorId","createdBy","createdById","organizationId","orgId","ownerId","tenantId","updatedBy","userId","workspaceId"]),wu=new Set(["insert","insertManyUnsafe","patch","replace"]),Iu=e=>{if(!r.isPropertyAccessExpression(e))return;const t=e.getName();return wu.has(t)&&Or(e.getExpression())?t:void 0},Cu=(e,t)=>{if(t!=="insertManyUnsafe")return r.isObjectLiteralExpression(e)?[e]:[];if(!r.isArrayLiteralExpression(e))return[];const s=[];for(const n of e.getElements())r.isObjectLiteralExpression(n)&&s.push(n);return s},Tu=(e,t)=>{const s=Wt(e);return s?.member===t?h(s.object):void 0},sn=(e,t)=>r.isIdentifier(e)&&L(e)?.compilerNode===t.compilerNode,pi=(e,t,s,n=1)=>{const i=Tu(e,s);if(i!==void 0)return sn(i,t);const o=r.isIdentifier(e)?L(e):void 0;if(r.isBindingElement(o)){const c=o.getParent(),l=c.getParent();return o.getDotDotDotToken()===void 0&&ce(o)===s&&r.isObjectBindingPattern(c)&&(l.compilerNode===t.compilerNode||ie(l)&&sn(h(l.getInitializer()),t))}const a=ie(o)?o.getInitializer():void 0;return n>0&&a!==void 0&&pi(a,t,s,n-1)},Kt=e=>{const t=h(e)??e;return r.isConditionalExpression(t)?[...Kt(t.getWhenTrue()),...Kt(t.getWhenFalse())]:[t]},Ou=(e,t,s)=>{const n=[],i=s===void 0?void 0:Nu(s);for(const o of e.getProperties()){let a,c;if(r.isPropertyAssignment(o)?(a=S(o),c=o.getInitializer()):r.isShorthandPropertyAssignment(o)&&(a=S(o),c=o.getNameNode()),a===void 0||c===void 0||!Pu.has(a))continue;const l=Kt(c).filter(f=>i===void 0?q(f)&&!kr(f):i.isTaintedValue(f,!0));if(l.length>0){const f=t.ownerField===a&&s?.pristine===!0&&pi(c,s.parameter,a),g=l.every(m=>ru(t.call,m));n.push({field:a,file:t.relativePath,line:t.call.getStartLineNumber(),method:t.method,scope:t.scope,...f&&{ownerScoped:!0},...g&&{guarded:!0}})}}return n},ku=(e,t,s)=>{const n=Iu(e.getExpression()),i=n===void 0?void 0:e.getArguments()[1];if(n===void 0||i===void 0)return[];const o=Cu(i,n);if(o.length===0)return[];const a=x(e),c=Xd(e),l={call:e,method:n,ownerField:c===void 0?void 0:s(c.mutatorName),relativePath:t,scope:a};return o.flatMap(u=>Ou(u,l,c))},Ru=(e,t,s=[],n=[])=>{const i=new Map(n.map(c=>[`${c.filePath}:${c.exportName}`,c.owner])),o=C(e,t,(c,l)=>ku(c,l,u=>i.get(`${l}:${u}`))),a=new Map(s.map(c=>[`${c.filePath}:${c.exportName}`,c.adminOnly===!0]));return Ht(o,s).map(c=>Ir(c.scope)?.every(f=>a.get(`${c.file}:${f}`)===!0)===!0?{...c,adminOnly:!0}:c)},Fu=new Set(["createAutumnAdapter","createDodoPaymentsAdapter","createPolarAdapter","createStripeAdapter"]),Lu=e=>e&&r.isNumericLiteral(e)?Number(e.getText()):void 0,Du=e=>{const t=V(e,"webhookToleranceSeconds");return t&&r.isPropertyAssignment(t)?Lu(t.getInitializer()):void 0},Mu=(e,t)=>{const s=P(e.getExpression());if(s===void 0||!Fu.has(s))return;const[n]=e.getArguments(),i=n&&r.isObjectLiteralExpression(n)?Du(n):void 0;return{callee:s,scope:x(e),file:t,line:e.getStartLineNumber(),...i===void 0?{}:{toleranceSeconds:i}}},_u=(e,t)=>C(e,t,Mu),Ku=new Map([["defineQueue",0],["defineSubscription",1],["defineWorkflow",0]]),zu=e=>{const t=e.getExpression();return r.isIdentifier(t)?t.getText():void 0},$u=(e,t)=>{const s=e.getArguments()[t];if(!s||!r.isObjectLiteralExpression(s))return;const n=V(s,"handler");if(n===void 0||!r.isPropertyAssignment(n))return;const i=n.getInitializer();if(i&&(r.isArrowFunction(i)||r.isFunctionExpression(i)))return i},mi=(e,t)=>{const s=e.getParameters()[t]?.getNameNode();return s&&r.isIdentifier(s)?s.getText():void 0},hi=(e,t)=>e===t||e.startsWith(`${t}.`),vi=e=>{const t=e.getDescendantsOfKind(d.PropertyAccessExpression);return r.isPropertyAccessExpression(e)&&t.push(e),t},nn=e=>{const t=e.getParent();return r.isPropertyAccessExpression(t)&&t.getNameNode()===e||r.isPropertyAssignment(t)&&t.getNameNode()===e?!1:!(r.isBindingElement(t)&&t.getNameNode()===e)},Ei=e=>{const t=e.getDescendantsOfKind(d.Identifier).filter(s=>nn(s));return r.isIdentifier(e)&&nn(e)&&t.push(e),t},Bu=e=>{if(!r.isVariableDeclaration(e))return[];const t=e.getNameNode();return r.isIdentifier(t)?[t.getText()]:t.getDescendantsOfKind(d.BindingElement).map(s=>s.getName())},Vu=e=>{const t=mi(e,1);if(t===void 0)return[];const s=[`${t}.messages`];for(const n of e.getDescendantsOfKind(d.ForOfStatement)){if(n.getExpression().getText()!==`${t}.messages`)continue;const i=n.getInitializer(),o=r.isVariableDeclarationList(i)?i.getDeclarations()[0]?.getNameNode():void 0;o&&r.isIdentifier(o)&&s.push(`${o.getText()}.body`)}return s},Uu=(e,t,s)=>{const n=t==="workflow"?[`${s}.params`]:Vu(e),i=new Set,o=a=>vi(a).some(c=>n.some(l=>hi(c.getText(),l)))?!0:Ei(a).some(c=>i.has(c.getText()));for(const a of e.getDescendantsOfKind(d.VariableDeclaration)){const c=a.getInitializer();if(c&&o(c))for(const l of Bu(a))i.add(l)}return{names:i,prefixes:n}},Wu=(e,t)=>vi(e).some(s=>t.prefixes.some(n=>hi(s.getText(),n)))?!0:Ei(e).some(s=>t.names.has(s.getText())),qu=e=>{const t=yr(e);return t===void 0?void 0:{exportName:String(t.at(-1)),file:t.slice(0,-1).join("/")}},ju=(e,t,s)=>{const n=mi(e,0);if(n===void 0)return[];const i=Uu(e,t,n),o=new Set([n,...i.prefixes.filter(c=>c.endsWith(".body")).map(c=>c.slice(0,-5))]),a=[];for(const c of e.getDescendantsOfKind(d.CallExpression)){const l=c.getExpression();if(!r.isPropertyAccessExpression(l)||!Fn.has(l.getName())||!o.has(l.getExpression().getText()))continue;const u=c.getArguments()[1];if(!u||!Wu(u,i))continue;const f=qu(c.getArguments()[0]);f!==void 0&&a.push({dispatchKind:t,file:s,scope:x(c),line:c.getStartLineNumber(),targetExport:f.exportName,targetFile:f.file})}return a},Hu=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(d.CallExpression)){const i=zu(n),o=i===void 0?void 0:Ku.get(i);if(o===void 0)continue;const a=$u(n,o);a!==void 0&&s.push(...ju(a,i==="defineWorkflow"?"workflow":"queue",t))}return s},Gu=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Hu(i,w(t,n)))}return s},rn={dbRateLimit:"usesRateLimit",emailGateMiddleware:"usesEmailGate",mask:"usesMask",rateLimit:"usesRateLimit",rls:"usesRls",verifyTurnstileMiddleware:"usesCaptcha"},on=new Set(["account","credential","member","passkey","session","user"]),Yu=e=>e.replaceAll(/[-_]/gu," ").replaceAll(/([a-z0-9])([A-Z])/gu,"$1 $2").split(" ").filter(Boolean).map(t=>t.toLowerCase()),Qu=e=>{const s=Yu(e).at(-1);if(!s)return!1;const n=s.endsWith("s")?s.slice(0,-1):s;return on.has(s)||on.has(n)},Xu=e=>{const t=e.replaceAll(/[^a-z0-9]/giu,"").toLowerCase();return t.endsWith("email")||t.endsWith("emailaddress")},Ju=(e,t)=>{const{objects:s,opaque:n}=Jt(e,t);return cc(s).some(i=>Xu(i))?!0:n?void 0:!1},Zu=e=>{const t=e.getArguments()[0];return!t||!r.isObjectLiteralExpression(t)?{usesCaptcha:!1,usesRateLimit:!1}:{usesCaptcha:!!V(t,"captcha"),usesRateLimit:!!V(t,"rateLimit")}},ef=e=>{if(r.isCallExpression(e))return e;if(!r.isIdentifier(e))return;const s=e.getSourceFile().getVariableDeclaration(e.getText())?.getInitializer();return s&&r.isCallExpression(s)?s:void 0},ze={usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},tf=e=>{const t=ef(e),s=t?P(t.getExpression()):void 0;if(t&&s==="protectPublic"){const n=Zu(t);return{...ze,usesCaptcha:n.usesCaptcha,usesRateLimit:n.usesRateLimit}}return s!==void 0&&s in rn?{...ze,[rn[s]]:!0}:ze},sf=e=>{const t={...ze};let s=e;for(;r.isCallExpression(s);){const n=s.getExpression();if(!r.isPropertyAccessExpression(n))break;const i=n.getName()==="use"?s.getArguments()[0]:void 0;if(i){const o=tf(i);t.usesCaptcha||=o.usesCaptcha,t.usesEmailGate||=o.usesEmailGate,t.usesMask||=o.usesMask,t.usesRateLimit||=o.usesRateLimit,t.usesRls||=o.usesRls}s=n.getExpression()}return t},nf=new Set(["insert","insertMany","insertManyUnsafe","replace"]),rf=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||!nf.has(t.getName()))return!1;const s=t.getExpression();if(!z(s))return!1;const i=e.getArguments()[0];return!i||!(r.isStringLiteral(i)||r.isNoSubstitutionTemplateLiteral(i))?!1:Qu(i.getLiteralText())},of=new Set(["create","publish","publishBatch","runAfter","runAt","send","sendBatch"]),an=new Set(["queues","scheduler","topics","workflows"]),af=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||!of.has(t.getName()))return!1;let s=t.getExpression();for(;r.isCallExpression(s)||r.isElementAccessExpression(s)||r.isPropertyAccessExpression(s);){if(r.isPropertyAccessExpression(s)&&an.has(s.getName())&&Rr(s.getExpression()))return!0;s=s.getExpression()}const n=Gt(s);return n?.length===1&&an.has(n[0]??"")},cf=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||t.getName()!=="insertManyUnsafe")return!1;const s=t.getExpression();return z(s)},xi=new Set(["generateObject","generateText","streamObject","streamText"]),lf=e=>{const t=P(e.getExpression());return t!==void 0&&xi.has(t)},df=e=>{const t=P(e.getExpression());if(t===void 0||!xi.has(t))return!1;const s=e.getArguments()[0];return!s||!r.isObjectLiteralExpression(s)||s.getProperties().some(n=>r.isSpreadAssignment(n))?!1:!V(s,"maxOutputTokens")},uf=new Set(["log","span","trace"]),ff=new Set(["ai"]),gf=new Set(["email","mail"]),pf=new Set(["ai","browser","fetch","mail","notify","queues","sql","storage","topics","workflows"]),At=(e,t)=>[...t].some(s=>Je(e,s).length>0),Si=new Set([d.ArrowFunction,d.FunctionDeclaration,d.FunctionExpression,d.GetAccessor,d.MethodDeclaration,d.SetAccessor]),mf=new Set(["every","filter","flatMap","forEach","map","some"]),hf=new Set(["all","allSettled","race"]),Ai=e=>{const t=e.getParent();if(!t||!r.isCallExpression(t)||!t.getArguments().includes(e))return;const s=t.getExpression();if(!r.isPropertyAccessExpression(s))return;const n=s.getName();if(mf.has(n))return t;const i=s.getExpression();if(r.isIdentifier(i)&&i.getText()==="Promise"&&hf.has(n))return t},vf=e=>{let t=e.getParent();for(;t;){if(r.isTryStatement(t)){const s=t.getTryBlock();if(e.getPos()>=s.getPos()&&e.getEnd()<=s.getEnd())return!0}if(Si.has(t.getKind())){const s=Ai(t);if(!s)return!1;t=s;continue}t=t.getParent()}return!1},Ef=e=>{let t=e.getParent();for(;t!==void 0;){if(r.isCallExpression(t)&&t.getExpression().getText()==="Promise.allSettled")return!0;if(Si.has(t.getKind())){if(t=Ai(t),t===void 0)return!1;continue}t=t.getParent()}return!1},xf=e=>{const t=e.getFirstAncestor(u=>r.isArrowFunction(u)||r.isFunctionExpression(u)),s=t?.getParent();if(!t||!r.isCallExpression(s)||!s.getArguments().includes(t))return!1;const n=s.getExpression();if(!r.isIdentifier(n))return!1;const i=n.getSymbol(),o=i?.getAliasedSymbol()?.getValueDeclaration()??i?.getValueDeclaration(),a=r.isVariableDeclaration(o)?o.getInitializer():o;if(!r.isArrowFunction(a)&&!r.isFunctionExpression(a)&&!r.isFunctionDeclaration(a))return!1;const c=s.getArguments().indexOf(t),l=a.getParameters()[c]?.getName();return l===void 0?!1:a.getDescendantsOfKind(d.TryStatement).some(u=>{const f=u.getTryBlock().getDescendantsOfKind(d.CallExpression).some(m=>{const v=m.getExpression();return r.isIdentifier(v)&&v.getText()===l&&r.isAwaitExpression(m.getParent())}),g=u.getCatchClause();return f&&g!==void 0&&g.getDescendantsOfKind(d.ThrowStatement).length>0})},Sf=e=>{let t=e;for(;;){const s=t.getParent();if(!r.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;if(s.getName()==="catch")return!0;if(s.getName()!=="then"&&s.getName()!=="finally")return!1;const n=s.getParent();if(!r.isCallExpression(n)||n.getExpression()!==s)return!1;t=n}},Af=e=>{let t=e;for(;;){const s=t.getParent();if(r.isPropertyAccessExpression(s)&&s.getExpression()===t){t=s;continue}return r.isCallExpression(s)&&s.getExpression()===t?s:void 0}},yf=e=>{let t=!1,s=!0;for(const n of[...pf].flatMap(i=>Je(e,i))){const i=Af(n);i&&(t=!0,!vf(i)&&!Sf(i)&&!xf(i)&&!Ef(i)&&(s=!1))}return{handlesErrors:t&&s,reachesOutbound:t}},bf=e=>e.getDescendantsOfKind(d.ThrowStatement).some(t=>{const s=t.getExpression();if(!r.isNewExpression(s))return!1;const n=s.getExpression();return r.isIdentifier(n)&&n.getText()==="Error"}),cn="lunora-advisor-exempt",Nf=/^[\s*/]+/u,Pf=/[\w-]/u,wf=e=>{const s=(e.getFirstAncestorByKind(d.VariableStatement)??e).getLeadingCommentRanges().map(n=>n.getText()).join(`
-`);for(const n of s.split(`
-`)){const i=n.replace(Nf,"");if(!i.startsWith(cn))continue;const o=i.slice(cn.length);if(Pf.test(o.charAt(0)))continue;const a=o.indexOf("--");return{exempt:!0,exemptReason:(a===-1?"":o.slice(a+2).split("*")[0]??"").trim()}}return{exempt:!1,exemptReason:""}},If=e=>{const[t]=e.getArguments();if(t){if(r.isObjectLiteralExpression(t)){const s=V(t,"handler");return s?r.isPropertyAssignment(s)?s.getInitializer():r.isShorthandPropertyAssignment(s)?s.getNameNode():r.isMethodDeclaration(s)?s:void 0:void 0}return t}},Cf=(e,t)=>{const s=If(t);if(!s)return;if(r.isArrowFunction(s)||r.isFunctionExpression(s)||r.isMethodDeclaration(s))return e;if(!r.isIdentifier(s))return;const n=s.getSourceFile(),i=s.getText(),o=n.getVariableDeclaration(i)?.getInitializer();return o&&(r.isArrowFunction(o)||r.isFunctionExpression(o))?o:n.getFunction(i)},Tf=e=>{let t=!1,s=!1,n=!1,i=!1,o=!1;for(const l of e.getDescendantsOfKind(d.CallExpression))if(rf(l)&&(o=!0),af(l)&&(t=!0),cf(l)&&(i=!0),lf(l)&&(s=!0),df(l)&&(n=!0),o&&t&&i&&n)break;const{handlesErrors:a,reachesOutbound:c}=yf(e);return{callsMail:At(e,gf),emitsEvent:At(e,uf),fanOut:t,handlesErrors:a,reachesOutbound:c,runsAiGeneration:s||At(e,ff),throwsBareError:bf(e),unboundedAiGeneration:n,usesInsertManyUnsafe:i,writesUserTable:o}},Of=(e,t)=>{const s=e.getInitializer();if(!s||!r.isCallExpression(s))return;const n=ee(s);if(!n||n.kind!=="query"&&n.kind!=="mutation"&&n.kind!=="action")return;const i=n.receiver?sf(n.receiver):{usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},o=Cf(e,s);return{...o?Tf(o):{},...wf(e),...i,analyzableBody:o!==void 0,exportName:j(e)??e.getName(),file:t,hasEmailArg:Ju(s,n.receiver),kind:n.kind,visibility:n.visibility}},kf=(e,t)=>{const s=[];for(const n of Q(e)){const i=Of(n,t);i&&s.push(i)}return s},Rf=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...kf(i,w(t,n)))}return s},Ff=new Set(["dbRateLimit","rateLimit"]),Lf=e=>r.isArrowFunction(e)?e.getBody():e,Df=e=>{if(!r.isArrowFunction(e))return;const t=e.getParameters()[0]?.getNameNode();return t!==void 0&&r.isIdentifier(t)?t:void 0},yi=e=>{const t=e.getParent();return r.isPropertyAccessExpression(t)&&t.getExpression()===e&&t.getName()==="args"},bi=(e,t)=>{const s=t.getSymbol();return s===void 0?[]:e.getDescendantsOfKind(d.Identifier).filter(n=>{if(n.getSymbol()!==s)return!1;const i=n.getParent();return!(r.isPropertyAccessExpression(i)&&i.getNameNode()===n)})},Mf=(e,t)=>q(e)||t!==void 0&&bi(e,t).some(s=>yi(s)),_f=(e,t)=>t===void 0?le(e):bi(e,t).some(s=>!yi(s)),Kf=(e,t)=>{const s=P(e.getExpression());if(s===void 0||!Ff.has(s))return;const n=R(Rn(e.getArguments()[2]),"key");if(!n)return;const i=Lf(n),o=Df(n);if(!(!Mf(i,o)||_f(i,o)))return{callee:s,scope:x(e),file:t,limitName:kn(e),line:e.getStartLineNumber()}},zf=(e,t)=>C(e,t,Kf),$f=new Set(["findFirst","findFirstOrThrow","findMany","findUnique","get"]),Bf=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||!$f.has(t.getName()))return;const s=t.getExpression();if(z(s)){const n=e.getArguments()[0];return n&&r.isStringLiteral(n)?n.getLiteralText():""}if(r.isPropertyAccessExpression(s)&&z(s.getExpression()))return s.getName()},Vf=e=>{let t=e;for(;r.isCallExpression(t);){const s=t.getExpression();if(!r.isPropertyAccessExpression(s))return;if(s.getName()==="query"&&z(s.getExpression())){const n=t.getArguments()[0];return n&&r.isStringLiteral(n)?n.getLiteralText():""}t=s.getExpression()}},Uf=e=>{let t=h(e)??e;for(;r.isAwaitExpression(t);)t=h(t.getExpression())??t.getExpression();return t},Ni=(e,t=!1)=>{const s=Uf(e);if(r.isIdentifier(s)){if(t)return;const n=Y(s);return n===void 0?void 0:Ni(n,!0)}if(r.isCallExpression(s))return Bf(s)??Vf(s)},Wf=e=>{const t=e.getBody();if(!r.isBlock(t))return[t];const s=[];for(const n of e.getDescendantsOfKind(d.ReturnStatement)){const i=n.getFirstAncestor(a=>r.isArrowFunction(a)||r.isFunctionExpression(a)||r.isFunctionDeclaration(a)),o=n.getExpression();i===e&&o!==void 0&&s.push(o)}return s},qf=(e,t)=>{if(!r.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!r.isCallExpression(s))return[];const n=ee(s);if(n?.kind!=="query")return[];const i=ti(s);if(i===void 0)return[];const o=n.receiver!==void 0&&Dr(n.receiver,"output"),a=n.receiver!==void 0&&Kn(n.receiver,"use","mask"),c=new Set,l=[];for(const u of Wf(i)){const f=Ni(u);f===void 0||c.has(f)||(c.add(f),l.push({exportName:j(e)??e.getName(),file:t,line:u.getStartLineNumber(),table:f,usesMask:a,usesOutput:o,visibility:n.visibility}))}return l},jf=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of Q(i))s.push(...qf(a,o))}return s},Hf=e=>{if(!e||!r.isObjectLiteralExpression(e))return[];const t=[];for(const s of e.getProperties())(r.isPropertyAssignment(s)||r.isShorthandPropertyAssignment(s)||r.isMethodDeclaration(s)||r.isGetAccessorDeclaration(s))&&t.push(S(s));return t},Gf=(e,t)=>{if(!r.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&r.isCallExpression(s)?ee(s):void 0;if(!n)return[];const i=[];for(const o of e.getDescendantsOfKind(d.CallExpression)){const a=$n(o);if(a===void 0)continue;const c=Hf(R(a.options,"with"));c.length!==0&&i.push({exportName:j(e)??e.getName(),file:t,line:o.getStartLineNumber(),parentTable:a.table,relations:c,visibility:n.visibility})}return i},Yf=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of Q(i))s.push(...Gf(a,o))}return s},W=(e,t)=>`${e}:${t}`,ln=(e,t,s,n)=>s===void 0?void 0:{endLine:e.getEndLineNumber(),exported:n,file:t,name:s,node:e,startLine:e.getStartLineNumber()},Qf=(e,t)=>[...ne(e,t,d.FunctionDeclaration,(s,n)=>s.getParent().getKind()===d.SourceFile?ln(s,n,s.getName(),s.isExported()):void 0),...ne(e,t,d.VariableDeclaration,(s,n)=>{const i=s.getVariableStatement();return i?.getParent().getKind()===d.SourceFile?ln(i,n,s.getName(),i.isExported()):void 0})],Xf=(e,t,s)=>{const n=e.getExpression();if(!r.isIdentifier(n))return;const i=n.getSymbol(),o=(i?.getAliasedSymbol()??i)?.getDeclarations()[0];if(o===void 0||!(r.isFunctionDeclaration(o)||r.isVariableDeclaration(o)))return;const a=o.getName(),c=w(s,o.getSourceFile().getFilePath());return a===void 0?void 0:t.get(W(c,a))},Jf=e=>`${e.table}|${e.method}|${e.fields?.join(",")??"*"}`,Zf=(e,t)=>{const s=new Map(e.map(n=>[W(n.file,n.name),new Map]));for(const n of t){const i=e.find(o=>o.file===n.file&&o.startLine<=n.line&&n.line<=o.endLine);i!==void 0&&n.table!==""&&s.get(W(i.file,i.name))?.set(Jf(n),{fields:n.fields,method:n.method,table:n.table})}return s},eg=(e,t,s)=>e.node.getDescendantsOfKind(d.CallExpression).map(n=>Xf(n,t,s)).filter(n=>n!==void 0),tg=(e,t,s,n)=>{for(const i of e){const o=i.scope.kind==="module"?void 0:t.get(W(i.file,i.scope.name)),a=i.target===void 0?void 0:s.get(i.target);i.kind==="call"&&o!==void 0&&a!==void 0&&n.get(W(o.file,o.name))?.push(a)}},sg=(e,t,s)=>{const n=new Map(e.map(a=>[W(a.file,a.name),a])),i=new Map(e.map(a=>[`${Qt(a.file)}:${a.name}`,a])),o=new Map(e.map(a=>[W(a.file,a.name),eg(a,n,t)]));return tg(s,n,i,o),o},ng=(e,t)=>{let s=!1;for(const[n,i]of t??[])e!==void 0&&!e.has(n)&&(e.set(n,i),s=!0);return s},ig=(e,t,s)=>{let n=!0;for(;n;){n=!1;for(const i of e)for(const o of s.get(W(i.file,i.name))??[])ng(t.get(W(i.file,i.name)),t.get(W(o.file,o.name)))&&(n=!0)}},rg=(e,t,s,n)=>{const i=Qf(e,t),o=Zf(i,s);return ig(i,o,sg(i,t,n)),i.filter(a=>a.exported).flatMap(a=>[...o.get(W(a.file,a.name))?.values()??[]].map(c=>({...c,exportName:a.name,file:a.file})))},qe=e=>{if(r.isStringLiteral(e)||r.isNoSubstitutionTemplateLiteral(e))return e.getLiteralText();if(r.isBinaryExpression(e)&&e.getOperatorToken().getKind()===d.PlusToken){const t=qe(e.getLeft()),s=qe(e.getRight());return t!==void 0&&s!==void 0?t+s:void 0}},og=e=>{let t=e,s=t.getParent();for(;s!==void 0&&r.isBinaryExpression(s)&&s.getOperatorToken().getKind()===d.PlusToken;)t=s,s=t.getParent();return t!==e&&qe(t)!==void 0},ag=e=>{const t=e.getParent();if(t!==void 0){if(r.isVariableDeclaration(t)||r.isPropertyAssignment(t)||r.isPropertySignature(t))return S(t);if(r.isBinaryExpression(t)&&t.getOperatorToken().getKind()===d.EqualsToken)return t.getLeft().getText()}},cg=(e,t,s)=>eo(e)?!br(s)&&to(ag(t)):!0,lg=(e,t)=>{const s=[],n=[...e.getDescendantsOfKind(d.BinaryExpression),...e.getDescendantsOfKind(d.StringLiteral),...e.getDescendantsOfKind(d.NoSubstitutionTemplateLiteral)],i=new Set;for(const o of n){if(og(o))continue;const a=qe(o);if(a===void 0)continue;const c=Jr(a);if(c===void 0||!cg(c,o,t))continue;const l=o.getStartLineNumber(),u=`${String(l)}:${c}`;i.has(u)||(i.add(u),s.push({file:t,kind:c,line:l,preview:Zr(a)}))}return s},dg=(e,t)=>{const s=[],n=new Ut({compilerOptions:{allowJs:!0},skipFileDependencyResolution:!0,skipLoadingLibFiles:!0,useInMemoryFileSystem:!0});for(const i of A(t,{includeSkipped:!0})){const o=e.getSourceFile(i)??n.createSourceFile(i,Ge(i,"utf8"),{overwrite:!0});s.push(...lg(o,w(t,i)))}return s},ug=(e,t)=>{if(!r.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&r.isCallExpression(s)?ee(s):void 0;if(!n)return[];const i=[];for(const o of e.getDescendantsOfKind(d.CallExpression)){const a=$n(o);if(a===void 0)continue;const c=R(a.options,"includeDeleted");if(c===void 0)continue;const l=r.isTrueLiteral(c),u=!l&&q(c);!l&&!u||i.push({exportName:j(e)??e.getName(),file:t,fromArgs:u,hardcodedTrue:l,line:o.getStartLineNumber(),table:a.table,visibility:n.visibility})}return i},fg=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of Q(i))s.push(...ug(a,o))}return s},gg=new Set(["query","unsafe"]),pg=e=>!r.isPropertyAccessExpression(e)||!gg.has(e.getName())?!1:G(e.getExpression(),["sql"]),mg=e=>r.isBinaryExpression(e)||r.isTemplateExpression(e),hg=(e,t)=>{if(!pg(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!mg(s)))return{file:t,line:s.getStartLineNumber(),scope:x(e)}},vg=(e,t)=>C(e,t,hg),Eg=[["convex",["convex","@convex-dev/"]],["supabase",["@supabase/"]],["firebase",["firebase","@firebase/","firebase-admin"]]],xg=e=>{for(const[t,s]of Eg)for(const n of s)if(e===n||e.startsWith(n.endsWith("/")?n:`${n}/`))return t},Sg=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const o of i.getImportDeclarations()){const a=o.getModuleSpecifierValue(),c=xg(a);c!==void 0&&s.push({file:w(t,n),line:o.getStartLineNumber(),moduleSpecifier:a,platform:c})}}return s},Ag=new Set(["createMultipartUpload","delete","download","generateUploadUrl","get","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","put","resumeMultipartUpload","store","upload"]),yg=(e,t,s=[])=>{const n=tt(e,t,{argIndex:0,matchReceiver:i=>i==="ctx.storage"||i.startsWith("ctx.storage."),methods:Ag,requireUnmodifiedReach:!0});return Ht(n,s)},bg=new Map([["generateUploadUrl",1],["getPresignedUrl",1],["getSignedUrl",1],["store",2],["upload",2]]),Ng=e=>e&&r.isNumericLiteral(e)?Number(e.getText()):void 0,Pg=e=>{if(e===void 0)return{analyzable:!0,presentKeys:[]};if(!r.isObjectLiteralExpression(e))return{analyzable:!1,presentKeys:[]};const t=[];let s,n=!1;for(const i of e.getProperties()){if(r.isSpreadAssignment(i)){n=!0;continue}if(r.isPropertyAssignment(i)){const o=S(i);t.push(o),o==="expiresInSeconds"&&(s=Ng(i.getInitializer()));continue}(r.isShorthandPropertyAssignment(i)||r.isMethodDeclaration(i))&&t.push(S(i))}return{analyzable:!n,expiresInSeconds:s,presentKeys:t}},wg=e=>{if(!r.isPropertyAccessExpression(e))return;const t=e.getName(),s=bg.get(t);return s===void 0?void 0:Dn(e.getExpression(),i=>i==="ctx.storage"||i.startsWith("ctx.storage."))?{method:t,optionsIndex:s}:void 0},Ig=(e,t)=>{const s=wg(e.getExpression());if(s!==void 0)return{scope:x(e),file:t,line:e.getStartLineNumber(),method:s.method,...Pg(e.getArguments()[s.optionsIndex])}},Cg=(e,t)=>C(e,t,Ig),Tg=e=>r.isDoStatement(e)||r.isForInStatement(e)||r.isForOfStatement(e)||r.isForStatement(e)||r.isWhileStatement(e),Pi=e=>{const t=e.getLabel()?.getText(),s=i=>t!==void 0?r.isLabeledStatement(i)&&i.getLabel().getText()===t:Tg(i)||r.isBreakStatement(e)&&r.isSwitchStatement(i);let n=e.getFirstAncestor(i=>re(i)||s(i));if(!(n===void 0||re(n))){for(;r.isContinueStatement(e)&&r.isLabeledStatement(n);)n=n.getStatement();return n}},ts=(e,t)=>y(e.getFirstAncestor(s=>y(s,t)||re(s)),t),Og=(e,t)=>y(e,t)||e.getFirstAncestor(s=>y(s,t))!==void 0,wi=(e,t)=>{if(r.isReturnStatement(e)||r.isThrowStatement(e))return y(e,t)||ts(e,t);if(r.isBreakStatement(e)||r.isContinueStatement(e)){const s=Pi(e);return s!==void 0&&!Og(s,t)}return!1},Ii=e=>[...r.isBreakStatement(e)||r.isContinueStatement(e)||r.isReturnStatement(e)||r.isThrowStatement(e)?[e]:[],...e.getDescendantsOfKind(d.BreakStatement),...e.getDescendantsOfKind(d.ContinueStatement),...e.getDescendantsOfKind(d.ReturnStatement),...e.getDescendantsOfKind(d.ThrowStatement)],kg=e=>Ii(e).some(t=>wi(t,e)),Rg=e=>{const t=r.isCallExpression(e)?e.getExpression():void 0;return r.isPropertyAccessExpression(t)&&t.getName()==="throwIfAborted"},Fg=e=>Ii(e).some(t=>wi(t,e)||r.isBreakStatement(t)&&y(Pi(t),e))||e.getDescendantsOfKind(d.CallExpression).some(t=>Rg(t)&&ts(t,e)),Lg=e=>e.getDescendantsOfKind(d.YieldExpression).some(t=>ts(t,e)),Dg=e=>r.isDoStatement(e)||r.isWhileStatement(e)?e.getExpression():e.getCondition(),Mg=e=>r.isDoStatement(e)?"do":r.isWhileStatement(e)?"while":"for",yt=(e,t)=>{const s=Dg(e);if(!(s===void 0||r.isTrueLiteral(h(s)))||Fg(e)||Lg(e))return;const i=x(e);if(!(i.kind==="module"&&e.getFirstAncestor(re)!==void 0))return{file:t,kind:Mg(e),line:e.getStartLineNumber(),scope:i}},_g=(e,t)=>[...ne(e,t,d.WhileStatement,yt),...ne(e,t,d.ForStatement,yt),...ne(e,t,d.DoStatement,yt)].toSorted((s,n)=>s.file.localeCompare(n.file)||s.line-n.line),Kg=new Set(["when","where"]),bt=new Set(["definePolicy","defineShape"]),zg=e=>{if(!r.isCallExpression(e))return;const t=e.getExpression();if(r.isPropertyAccessExpression(t)){const n=t.getName();return bt.has(n)?n:void 0}if(!r.isIdentifier(t))return;for(const n of t.getSymbol()?.getDeclarations()??[])if(r.isImportSpecifier(n)){const i=n.getNameNode().getText();return bt.has(i)?i:void 0}const s=t.getText();return bt.has(s)?s:void 0},$g=e=>r.isObjectLiteralExpression(e)&&e.getProperties().length===0,Ci=e=>{if(e!==void 0){if(r.isReturnStatement(e)&&e.getExpression()===void 0||e.getKind()===d.UndefinedKeyword||e.getText()==="undefined")return"undefined";if($g(e))return"empty-object";if(r.isParenthesizedExpression(e))return Ci(e.getExpression())}},ss=e=>e.getAncestors().find(t=>r.isArrowFunction(t)||r.isFunctionExpression(t)||r.isFunctionDeclaration(t)),Bg=e=>e.getDescendantsOfKind(d.ReturnStatement).filter(t=>ss(t)===e),Ti=e=>e.getDescendantsOfKind(d.ConditionalExpression).filter(t=>ss(t)===e),Vg=e=>{const t=Bg(e);return t.length>1?!0:t.some(s=>s.getFirstAncestorByKind(d.IfStatement)!==void 0)||Ti(e).length>0},Ug=e=>e.getDescendantsOfKind(d.IfStatement).filter(t=>ss(t)===e),zt=e=>e.getKind()===d.NullKeyword||e.getKind()===d.FalseKeyword||r.isIdentifier(e)&&e.getText()==="undefined"?!0:r.isNumericLiteral(e)?e.getLiteralValue()===0:r.isStringLiteral(e)&&e.getLiteralValue()==="",Wg=(e,t)=>zt(e)||zt(t),qg=new Map([[d.EqualsEqualsEqualsToken,"positive"],[d.EqualsEqualsToken,"positive"],[d.ExclamationEqualsEqualsToken,"negative"],[d.ExclamationEqualsToken,"negative"]]),dn=e=>!zt(e)&&(r.isLiteralExpression(e)||e.getKind()===d.TrueKeyword),jg=(e,t,s)=>{const n=qg.get(e);if(n!==void 0)return Wg(t,s)?n==="positive"?"negative":"positive":dn(t)||dn(s)?void 0:n},Se=e=>{if(r.isParenthesizedExpression(e))return Se(e.getExpression());if(r.isPrefixUnaryExpression(e)&&e.getOperatorToken()===d.ExclamationToken)return"negative";if(r.isBinaryExpression(e)){const t=e.getOperatorToken().getKind(),s=jg(t,e.getLeft(),e.getRight());if(s!==void 0)return s;if(t===d.AmpersandAmpersandToken||t===d.BarBarToken){const n=Se(e.getLeft()),i=Se(e.getRight());return n===i?n:"indeterminate"}}return r.isIdentifier(e)||r.isPropertyAccessExpression(e)||r.isElementAccessExpression(e)||r.isCallExpression(e)?"positive":"indeterminate"},un=e=>{if(e!==void 0){if(r.isReturnStatement(e))return e;if(r.isBlock(e)){const t=e.getStatements().at(-1);return t!==void 0&&r.isReturnStatement(t)?t:void 0}}},Hg=e=>{if(e.getElseStatement()!==void 0)return;const t=e.getNextSiblingIfKind(d.ReturnStatement);return t!==void 0&&t.getNextSibling()===void 0?t:void 0},Gg=e=>r.isReturnStatement(e)?e.getExpression()??e:e,Yg=e=>{const t=[];for(const s of Ti(e)){const n=Se(s.getCondition());n==="positive"?t.push(s.getWhenFalse()):n==="negative"&&t.push(s.getWhenTrue())}for(const s of Ug(e)){const n=Se(s.getExpression());if(n==="indeterminate")continue;const i=n==="negative"?un(s.getThenStatement()):un(s.getElseStatement())??Hg(s);i!==void 0&&t.push(Gg(i))}return t},Qg=e=>{for(const t of e.getAncestors())if(r.isVariableDeclaration(t)){const s=t.getNameNode();if(r.isIdentifier(s))return s.getText()}return"<anonymous>"},Xg=(e,t,s)=>{if(!r.isCallExpression(e))return[];const[n]=e.getArguments();if(!n||!r.isObjectLiteralExpression(n))return[];const i=[];for(const o of n.getProperties()){if(!r.isPropertyAssignment(o)||!Kg.has(S(o)))continue;const a=o.getInitializer();if(!(!a||!(r.isArrowFunction(a)||r.isFunctionExpression(a)))&&Vg(a))for(const c of Yg(a)){const l=Ci(c);l!==void 0&&i.push({exportName:Qg(e),file:s,form:l,key:S(o),line:c.getStartLineNumber(),owner:t})}}return i},Jg=(e,t)=>{const s=[];for(const n of e.getDescendantsOfKind(d.CallExpression)){const i=zg(n);i!==void 0&&s.push(...Xg(n,i,t))}return s},Zg=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Jg(i,w(t,n)))}return s},ep=new Set(["query","upsert","upsertMany","upsertNow"]),pe=new Set,tp=e=>{if(!r.isPropertyAccessExpression(e))return;const t=e.getName();if(ep.has(t))return G(e.getExpression(),["vectors"])?t:void 0},ns=e=>{let t=e;for(;r.isParenthesizedExpression(t)||r.isAsExpression(t)||r.isSatisfiesExpression(t)||r.isNonNullExpression(t)||r.isTypeAssertion(t);)t=t.getExpression();return t},Oi=e=>{const t=e.getParent();return r.isShorthandPropertyAssignment(t)&&t.getNameNode()===e?t.getValueSymbol():e.getSymbol()},ki=e=>Oi(e)?.getDeclarations()[0],sp=e=>{const t=e.getParent();return r.isBindingElement(t)||(r.isPropertyAccessExpression(t)||r.isPropertyAssignment(t)||r.isVariableDeclaration(t)||r.isParameterDeclaration(t)||r.isMethodDeclaration(t))&&t.getNameNode()===e?!1:!r.isQualifiedName(t)||t.getLeft()===e},Ri=e=>{let t=e;for(;t!==void 0&&(r.isBindingElement(t)||r.isObjectBindingPattern(t)||r.isArrayBindingPattern(t));)t=t.getParent();return t!==void 0&&r.isVariableDeclaration(t)?t:void 0},fn=(e,t,s)=>{const n=Oi(e)?.compilerSymbol;if(n!==void 0&&t.has(n))return!0;if(s>0){const i=Ri(ki(e)),o=i!==void 0&&r.isVariableDeclaration(i)?i.getInitializer():void 0;if(o!==void 0)return is(o,t,s-1)}return q(e)},is=(e,t,s)=>{const n=ns(e);return le(n)?!1:r.isIdentifier(n)?fn(n,t,s):q(n)?!0:n.getDescendantsOfKind(d.Identifier).some(i=>sp(i)&&fn(i,t,s))},Fi=e=>{const t=Ri(ki(e));return t!==void 0&&r.isVariableDeclaration(t)?t.getInitializer():void 0},Z=(e,t)=>{const s=ns(e);if(r.isObjectLiteralExpression(s))return[s];if(r.isConditionalExpression(s))return[...Z(s.getWhenTrue(),t),...Z(s.getWhenFalse(),t)];if(r.isBinaryExpression(s)){const n=s.getOperatorToken().getKind();if(n===d.BarBarToken||n===d.QuestionQuestionToken||n===d.AmpersandAmpersandToken)return[...Z(s.getLeft(),t),...Z(s.getRight(),t)]}if(r.isIdentifier(s)&&t){const n=Fi(s);return n===void 0?[]:Z(n,!1)}return[]},np=(e,t)=>{const s=Z(e,t);if(s.length===0)return{replaces:!0,sources:[e]};const n=s.map(o=>je(o,!1)),i=n.flat();if(i.length!==0)return{replaces:n.every(o=>o.length>0),sources:i}},ip=e=>(r.isPropertyAssignment(e)||r.isShorthandPropertyAssignment(e))&&e.getName()==="namespace",rp=e=>r.isShorthandPropertyAssignment(e)?e.getNameNode():e.getInitializer()??e.getNameNode(),je=(e,t)=>{let s=[];for(const n of e.getProperties())if(r.isSpreadAssignment(n)){const i=np(n.getExpression(),t);i!==void 0&&(s=i.replaces?i.sources:[...s,...i.sources])}else ip(n)&&(s=[rp(n)]);return s},op=e=>{if(!e||!(r.isArrowFunction(e)||r.isFunctionExpression(e)))return[];const t=e.getBody();return r.isBlock(t)?t.getDescendantsOfKind(d.ReturnStatement).filter(s=>s.getFirstAncestor(n=>r.isFunctionLikeDeclaration(n))===e).flatMap(s=>s.getExpression()??[]):[t]},ap=e=>{if(!e||!(r.isArrowFunction(e)||r.isFunctionExpression(e)))return pe;const t=e.getParameters()[0]?.getNameNode();if(t===void 0)return pe;const s=r.isIdentifier(t)?[t]:t.getDescendantsOfKind(d.BindingElement).map(n=>n.getNameNode());return new Set(s.flatMap(n=>r.isIdentifier(n)?n.getSymbol()?.compilerSymbol??[]:[]))},$t=(e,t=!0,s=pe)=>{const n=ns(e);if(r.isIdentifier(n)){const o=t?Fi(n):void 0;return o===void 0?[{node:n,parameters:s}]:$t(o,!1,s)}if(r.isArrayLiteralExpression(n))return n.getElements().flatMap(o=>r.isSpreadElement(o)?$t(o.getExpression(),t,s):Z(o,!0).flatMap(a=>je(a,!0).map(c=>({node:c,parameters:s}))));const i=r.isCallExpression(n)?n.getExpression():void 0;if(r.isCallExpression(n)&&r.isPropertyAccessExpression(i)&&i.getName()==="map"){const o=n.getArguments()[0],a=is(i.getExpression(),pe,1)?ap(o):pe;return op(o).flatMap(c=>Z(c,!0).flatMap(l=>je(l,!0).map(u=>({node:u,parameters:a}))))}return[{node:n,parameters:s}]},cp=(e,t)=>{const s=tp(e.getExpression());if(s===void 0)return;const n=e.getArguments()[1];if(!(!n||!(s==="upsertMany"?$t(n):Z(n,!0).flatMap(o=>je(o,!0).map(a=>({node:a,parameters:pe})))).some(({node:o,parameters:a})=>is(o,a,1))))return{scope:x(e),file:t,line:e.getStartLineNumber(),method:s}},lp=(e,t)=>C(e,t,cp),dp=(e,t,s)=>{const{callSites:n,containers:i,crons:o,functions:a,modules:c,mutators:l,queues:u,schema:f,shapes:g,wranglerVariables:m,workflows:v}=s;return hr({adminRoutes:Ma(e,t),aiRawRuns:qa(e,t),aiToolSideEffects:sc(e,t),argumentDerivedFetches:rc(e,t),argumentValidators:bc(e,t),authApiCalls:zr(e,t),authConfigs:Fc(e,t),browserUrlAccesses:_c(e,t),callEdges:n.callEdges,configCalls:qc(e,t),containerKeyAccesses:Hc(e,t),containerOverrides:Zc(e,t),containers:i,countReads:il(e,t,f.tables),crons:o,cronTargets:o.flatMap($=>$.functionPath===void 0?[]:[$.functionPath]),exportSinks:cl(e,t),staleMigrationImports:Sg(e,t),failOpenGuards:gl(e,t),flagReads:El(e,t),flagSecurityDefaults:yl(e,t),geoIndexUsages:Pl(e,t),httpActionGuards:_l(e,t),httpHeaderWrites:Hl(e,t),hyperdriveCalls:$r(e,t),identityClaimReads:id(e,t),imageDeliveryUrlAccesses:od(e,t),inserts:n.inserts,kvKeyAccesses:cd(e,t,a),mailRecipientAccesses:gd(e,t),maskProcedures:Br(e,t),maskStrategies:hd(e,t),mutatorWrites:yd(e,t),nondeterministicCalls:jr(e,t),normalizeIdAuthorizations:_d(e,t),notifyCalls:Gr(e,t),notifyConfig:Hr(e,t),mutators:l,ownerFieldWrites:Ru(e,t,a,l),unrestrictedWhereBranches:Zg(e,t),paymentWebhooks:_u(e,t),privilegedDispatches:Gu(e,t),procedureProtections:Rf(e,t),queries:n.queries,queues:u,r2sqlCalls:Yr(e,t),ratelimitKeySelectors:zf(e,t),rawRowReturns:jf(e,t),relationLoads:Yf(e,t),rlsProcedures:Qr(e,t),schema:f,secretLiterals:dg(e,t),modules:c,shapes:g,softDeleteReads:fg(e,t),sqlInterpolations:vg(e,t),storageKeyAccesses:yg(e,t,a),storageUploads:Cg(e,t),tableWrites:n.tableWrites,rowEffects:rg(e,t,n.tableWrites,n.callEdges),unboundedLoops:_g(e,t),vectorNamespaceAccesses:lp(e,t),workflowCalls:n.workflowCalls,workflows:v,wranglerVariables:m})},up=e=>({cacheKey:`advisor_accept_unused:${e.rule}:${e.file}:${e.exportName}`,categories:["SCHEMA"],description:"`advisor.accept` in `lunora.config.*` accepts a finding the advisor does not report as an error.",detail:`No ERROR \`${e.rule}\` in \`${e.file}\` for \`${e.exportName}\` — the acceptance no longer applies.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:e.exportName,file:e.file,rule:e.rule},name:"advisor_accept_unused",remediation:"Remove the entry, or correct the rule, file and export name it names.",title:"An accepted advisor finding matches no error"}),fp=(e,t)=>{const s=new Set;return[...e.map(i=>{if(i.level!=="ERROR")return i;const o=t.find(a=>a.rule===i.name&&a.file===i.metadata.file&&a.exportName===i.metadata.exportName);return o===void 0?i:(s.add(o),{...i,detail:`Accepted: ${o.reason}. ${i.detail}`,level:"INFO",metadata:{...i.metadata,accepted:o.reason}})}),...t.filter(i=>!s.has(i)).map(i=>up(i))]},gp=()=>({cacheKey:"advisor_accept_invalid",categories:["SCHEMA"],description:"`advisor.accept` in `lunora.config.*` is read by parsing the file, so every entry must be a literal.",detail:"`advisor.accept` is not an array of literal `{ rule, file, exportName, reason }` objects with non-empty strings, so codegen ignored all of it and every ERROR still fails the gate.",facing:"INTERNAL",level:"WARN",metadata:{},name:"advisor_accept_invalid",remediation:'Write `advisor: { accept: [{ rule: "owner_field_from_args_not_auth", file: "lunora/auth/team.ts", exportName: "addTeamMember", reason: "…" }] }` as literals on the config\'s default export.',title:"`advisor.accept` is not a list codegen can read, so no acceptance applies"}),pp=e=>e.metadata.accepted!==void 0||e.name==="advisor_accept_unused"||e.name==="advisor_accept_invalid",gn={error:"ERROR",info:"INFO",warn:"WARN"},pn={ERROR:2,INFO:0,WARN:1},mp=e=>({cacheKey:"advisor_min_severity_invalid",categories:["SCHEMA"],description:"`advisor.minSeverity` in `lunora.config.*` sets the lowest advisory level codegen reports and writes into `_generated/shard.ts`. Codegen reads it by parsing the file, so it has to be a string literal.",detail:e,facing:"INTERNAL",level:"WARN",metadata:{},name:"advisor_min_severity_invalid",remediation:'Set `advisor: { minSeverity: "info" | "warn" | "error" }` as a literal on the config\'s default export.',title:"`advisor.minSeverity` is not a level codegen can read, so every advisory was reported"}),hp=(e,t)=>{const{advisor:s}=Vn(e);if(s===void 0||s.minSeverity===void 0&&s.unreadable!==!0)return[...t];const{minSeverity:n}=s,i=n!==void 0&&Object.hasOwn(gn,n)?gn[n]:void 0;return i===void 0?[...t,mp(n===void 0?"`advisor.minSeverity` is not a string literal codegen can read without evaluating the config: a computed value or key, or a spread that could set or override it.":`\`advisor.minSeverity\` is "${n}", which is not one of "info", "warn" or "error".`)]:t.filter(o=>pp(o)||pn[o.level]>=pn[i])},vp=(e,t)=>{const{advisor:s}=Vn(e),n=fp(t,s?.accept??[]);return hp(e,s?.acceptUnreadable===!0?[...n,gp()]:n)},Ep={call:"function",enqueue:"queue",invoke:"service",publish:"topic",schedule:"function"},xp="crons",Sp=ro.replace(/\.ts$/u,""),ge=(e,t)=>`${Qt(e)}:${t}`,Nt=(e,t,s)=>t===""?{reason:`the ${s} is not a string literal`}:{to:`${e}:${t}`},Ap=e=>[...e.callEdges.map(t=>{const s=t.target===void 0?{reason:t.reason??"unreadable target"}:{to:`${Ep[t.kind]}:${t.target}`};return{file:t.file,kind:t.kind,line:t.line,scope:t.scope,...s}}),...e.queries.map(t=>({file:t.file,kind:"read",line:t.line,scope:t.scope,...Nt("table",t.table,"table name")})),...[...e.inserts,...e.tableWrites].map(t=>({file:t.file,kind:"write",line:t.line,scope:t.scope,...Nt("table",t.table,"written table")})),...e.workflowCalls.map(t=>({file:t.file,kind:"start",line:t.line,scope:t.scope,...Nt("workflow",t.workflow,"workflow name")}))],yp=e=>e.untracked===!0?"inside a helper only code outside any export calls":"inside a non-exported helper",bp=e=>{const{scope:t}=e;switch(t.kind){case"export":return[{...e,exportName:t.name}];case"helper":return t.callers.length===0?[{...e,unattributed:yp(t)}]:t.callers.map(s=>({...e,exportName:s}));default:return[{...e,unattributed:"at module scope"}]}},Np=e=>Ap(e).flatMap(t=>bp(t)),Pp=e=>[...e.queues.flatMap(t=>t.topic===void 0?[]:[{file:t.filePath,from:`topic:${t.topic}`,kind:"subscribe",line:0,to:`queue:${t.exportName}`}]),...e.crons.map(t=>{const s=t.workflow===void 0?void 0:`workflow:${t.workflow.exportName}`,n=t.functionPath===void 0?void 0:`function:${t.functionPath}`,i=s??n;return{file:xp,from:`cron:${t.name}`,kind:"trigger",line:0,...i===void 0?{reason:"the cron has no target"}:{to:i}}})],wp=e=>new Map(e.flatMap(t=>t.tables.map(s=>[s,t.name]))),ve=(e,t)=>t===void 0?e:{...e,module:t},Ip=e=>{const t=new Map,s=new Map,n=wp(e.modules),i=(c,l)=>{s.set(c,[...s.get(c)??[],l])},o=(c,l)=>{t.set(c.id,c),l!==void 0&&i(l,c.id)},a=(c,l)=>{c!==void 0&&i(ge(c.file,c.exportName),l)};for(const c of e.functions){const l=ge(c.filePath,c.exportName),u=[...Xr(c.filePath),c.exportName].join(".");o(ve({detail:c.kind,id:`function:${l}`,kind:"function",name:u},Le(e.modules,c.filePath)),l)}for(const c of e.httpRoutes){const l=ge(c.filePath,c.exportName);o(ve({id:`http:${l}`,kind:"http",name:`${c.method} ${c.path}`},Le(e.modules,c.filePath)),l)}for(const c of e.schema.tables)o(ve({id:`table:${c.name}`,kind:"table",name:c.name},n.get(c.name)));for(const c of e.queues){const l=c.topic===void 0?{}:{detail:"subscription"};o(ve({...l,id:`queue:${c.exportName}`,kind:"queue",name:c.exportName},Le(e.modules,c.filePath)),ge(c.filePath,c.exportName)),a(c.handlerSite,`queue:${c.exportName}`)}for(const c of e.topics)o(ve({id:`topic:${c.exportName}`,kind:"topic",name:c.exportName},Le(e.modules,c.filePath)));for(const c of e.workflows)o({id:`workflow:${c.exportName}`,kind:"workflow",name:c.exportName},ge(Sp,c.exportName)),a(c.handlerSite,`workflow:${c.exportName}`);for(const c of e.crons)o({detail:c.cron,id:`cron:${c.name}`,kind:"cron",name:c.name});for(const c of e.services){const l=c.rpcEntrypoint===void 0?"fetch":"rpc";o({detail:c.entrypoint===void 0?l:`${l} · ${c.entrypoint}`,id:`service:${c.name}`,kind:"service",name:c.worker})}return{nodes:t,sites:s}},Cp=e=>e==="default"?"the default export is not a registered function":`"${e}" is not a registered function`,Tp=(e,t)=>"from"in e?[e.from]:"unattributed"in e?{reason:e.unattributed}:t.get(ge(e.file,e.exportName))??{reason:Cp(e.exportName)},Op=(e,t,s)=>{if("reason"in e)return{reason:e.reason};const n=Tp(e,t);if("reason"in n)return n;const{to:i}=e;return s.has(i)?{drawn:n.map(o=>({from:o,kind:e.kind,to:i}))}:{reason:`${i} is not declared`}},Pt=e=>`${e.from}|${e.kind}|${e.to}`,kp=e=>`${e.file}|${String(e.line)}|${e.kind}|${e.reason}`,Rp=e=>{const{nodes:t,sites:s}=Ip(e),n=new Map,i=new Map;for(const o of[...Pp(e),...Np(e)]){const a=Op(o,s,t);if("drawn"in a)for(const c of a.drawn)n.set(Pt(c),c);else{const c={file:o.file,kind:o.kind,line:o.line,reason:a.reason};i.set(kp(c),c)}}return{edges:[...n.values()].toSorted((o,a)=>Pt(o).localeCompare(Pt(a))),nodes:[...t.values()].toSorted((o,a)=>o.id.localeCompare(a.id)),modules:e.modules.map(o=>({...o.description===void 0?{}:{description:o.description},...o.installed===!0?{installed:!0}:{},...o.ownsFolder===!1?{ownsFolder:!1}:{},name:o.name,tables:[...o.tables]})),unresolved:[...i.values()].toSorted((o,a)=>o.file.localeCompare(a.file)||o.line-a.line),version:1}},Fp=e=>`${Un}export const architecture = ${ao(e,"Record<string, unknown>")};
-`,mn=(e,t="api")=>{const s=new Map;for(const n of e){const i=Qt(n),o=s.get(i);if(o===void 0){s.set(i,n);continue}if(o!==n){const a=t==="api"?`the generated api.ts would declare "${i}" twice and the dispatch key "${i}:<fn>" would be ambiguous`:`the generated api.ts would declare "${i}" twice in HttpStreamsRef and again in the httpStreams object literal`;throw new _("INTERNAL",`@lunora/codegen: "${o}" and "${n}" both map to the ${t} namespace "${i}" — ${a}. Rename one file so the two differ by more than a non-identifier character (\`-\`, \`.\`, \`/\` and \`_\` all sanitize to \`_\`).`,{status:500})}}},Lp=(e,t={})=>{const{hasVectors:s=!0,scheduler:n=!1,storage:i=!1,usage:o}=t,a=[];e.tables.some(c=>Wn(c))&&a.push({name:"@lunora/d1",reason:"`.global()` tables are D1-backed, so `_generated/app.ts` imports the D1 `ctx.db` adapter"}),e.tables.some(c=>qn(c))&&a.push({name:"@lunora/hyperdrive",reason:'`.global({ backend: "hyperdrive" })` tables route through `@lunora/hyperdrive/global`'},{name:"@lunora/sql-store",reason:'`.global({ backend: "hyperdrive" })` makes `_generated/app.ts` import the `SqlCtxDbOptions` / `SqlExec` types'}),n&&a.push({name:"@lunora/scheduler",reason:"a declared cron (or `ctx.scheduler` use) makes `_generated/app.ts` import `createScheduler`"}),i&&a.push({name:"@lunora/storage",reason:"a `v.storage()` column, a storage access rule (or `ctx.storage` use) makes `_generated/app.ts` import `createStorage`"}),e.vectorIndexes.length>0&&s&&a.push({name:"@lunora/bindings",reason:"`.vectorize()` indexes make `_generated/shard.ts` import `@lunora/bindings/vectors`"});for(const c of o===void 0?[]:mo)c.requiredPackage!==void 0&&o?.[c.key]===!0&&a.push({name:c.requiredPackage,reason:`\`ctx.${c.contextProperty??c.key}\` usage makes \`_generated/\` import \`${c.moduleSpecifier}\``});return a.filter((c,l)=>a.findIndex(u=>u.name===c.name)===l)},Dp=(e,t,s={})=>{if(t===void 0)return;const n=Lp(e,s).filter(o=>!t.has(o.name));if(n.length===0)return;const i=n.map(o=>`  - ${o.name} — ${o.reason}`).join(`
-`);throw new _("INTERNAL",`@lunora/codegen: this schema's generated code imports packages the project does not declare:
-${i}
-
-Install them with your package manager, then re-run codegen.`)},Mp="env.ts",_p=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineEnv";for(const s of t.getDeclarations())if(r.isImportSpecifier(s))return Ze(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineEnv":!1;return!1},Kp=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!r.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(d.ImportDeclaration);return n!==void 0&&Ze(n.getModuleSpecifierValue())}return!1},zp=e=>{if(r.isIdentifier(e))return _p(e);if(r.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineEnv"&&r.isIdentifier(t)&&Kp(t)}return!1},$p=e=>{const t=[];for(const s of e.getVariableDeclarations()){const n=s.getInitializer();if(n?.getKind()!==d.CallExpression||!zp(n.getExpression()))continue;const o=s.getNameNode();if(!r.isIdentifier(o)){if(s.getVariableStatement()?.hasExportKeyword()!==!0)continue;throw de(o,"defineEnv exports must be plain named exports (no destructuring)")}const a=jt(s,"member");a!==void 0&&t.push({exportName:a})}return t},Bp=(e,t)=>{const s=E(t,Mp);if(!M(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),i=$p(n);if(i.length!==0){if(i.length>1)throw de(n,`lunora/env.ts declares ${i.length.toString()} defineEnv() contracts (${i.map(o=>o.exportName).join(", ")}); exactly one is allowed`);return i[0]}},Vp={defineLiveStream:"liveStreams",defineRoom:"typedWebSockets",defineWebSocket:"socketRoutes"},Up=new Set(["allowedHosts","deniedHosts","interceptHttps"]),Wp=(e,t)=>{const s=h(t);if(s===void 0||!r.isIdentifier(s))return s;const n=s.getText();return h(e.getDescendantsOfKind(d.VariableDeclaration).find(i=>i.getName()===n)?.getInitializer())},qp=(e,t)=>e!==void 0&&r.isObjectLiteralExpression(e)&&e.getProperties().some(s=>{if(r.isShorthandPropertyAssignment(s))return t.has(S(s));if(!r.isPropertyAssignment(s)||!t.has(S(s)))return!1;const n=h(s.getInitializer())?.getText();return n!=="false"&&n!=="undefined"}),jp=new Set(["durable"]),Hp=new Set(["rollback"]),Li=e=>{const t=e.getExpression();return r.isPropertyAccessExpression(t)?t.getName():t.getText()},Gp="defineApp",Ae="app",hn=(e,t)=>e.getDescendantsOfKind(d.PropertyAssignment).some(s=>S(s)===Ae&&s.getInitializer()?.getText()===t)||t===Ae&&e.getDescendantsOfKind(d.ShorthandPropertyAssignment).some(s=>S(s)===Ae),Yp=e=>{if(e===void 0||!No.includes(e.getSourceFile().getBaseName()))return!1;if(r.isMethodDeclaration(e))return r.isObjectLiteralExpression(e.getParent())&&S(e)===Ae;if(!(r.isArrowFunction(e)||r.isFunctionExpression(e)||r.isFunctionDeclaration(e)))return!1;const t=e.getParent();if(r.isPropertyAssignment(t))return S(t)===Ae;if(r.isVariableDeclaration(t))return hn(e.getSourceFile(),t.getName());const s=r.isFunctionDeclaration(e)?e.getName():void 0;return s!==void 0&&hn(e.getSourceFile(),s)},Qp="AppBuilder",Di=e=>{const t=e.getSourceFile();return t.getBaseNameWithoutExtension()==="app"&&t.getDirectory().getBaseName()==="_generated"},Xp=e=>{const t=e.getType(),s=(t.getConstraint()??t).getSymbol();return s?.getName()===Qp&&s.getDeclarations().some(n=>Di(n))},Jp=e=>e.getText()===Gp&&(e.getSymbol()?.getDeclarations()??[]).every(t=>r.isImportSpecifier(t)||r.isImportClause(t)||Di(t)),Mi=(e,t,s=new Set)=>{const n=Qe(t);if(n===void 0||!r.isIdentifier(n))return!1;if(Jp(n))return!0;const i=n.getText();if(s.has(i))return!1;s.add(i);for(const o of n.getAncestors()){if(r.isParametered(o)&&o.getParameters().some(a=>a.getName()===i))return Yp(o);if(r.isBlock(o)||r.isSourceFile(o)){const a=o.getVariableStatements().flatMap(c=>c.getDeclarations()).find(c=>c.getName()===i);if(a!==void 0)return Mi(e,a.getInitializer(),s)}}return!1},_i=(e,t)=>{const s=Wt(t.getExpression());return s?.member==="deliveryAuthorization"&&(Mi(e,s.object)||Xp(s.object))},Zp=new Map([["defineContainer",{keys:Up,signal:"containerEgressPolicy"}],["defineStep",{keys:Hp,signal:"workflowRollback"}],["stream",{keys:jp,signal:"durableStreams"}]]),em=(e,t)=>{const s=Zp.get(Li(t));if(s!==void 0)return t.getArguments().some(n=>qp(Wp(e,n),s.keys))?s.signal:void 0},tm=(e,t)=>Vp[Li(t)]??(_i(e,t)?"deliveryAuthorization":void 0),sm=(e,t,s)=>{const n={containerEgressPolicy:!1,deliveryAuthorization:!1,durableStreams:!1,liveContext:!1,liveStreams:!1,secrets:!1,socketRoutes:!1,typedWebSockets:!1,workflowRollback:!1};for(const i of A(t)){const o=e.getSourceFile(i)??e.addSourceFileAtPath(i);if(!n.secrets||!n.liveContext){const c=So(o);n.secrets=n.secrets||c.has("secrets"),n.liveContext=n.liveContext||c.has("live")}const a=o.getDescendantsOfKind(d.CallExpression);for(const c of a){const l=em(o,c)??tm(o,c);l!==void 0&&(n[l]=!0)}if(n.liveStreams=n.liveStreams||o.getFullText().includes("defineLiveStream")&&a.some(c=>zn(c,"defineLiveStream")),Object.values(n).every(Boolean))break}if(n.typedWebSockets=n.typedWebSockets||n.socketRoutes,!n.deliveryAuthorization&&s!==void 0){const i=e.getSourceFile(s)??new Ut({compilerOptions:{allowJs:!0},skipFileDependencyResolution:!0,skipLoadingLibFiles:!0,useInMemoryFileSystem:!0}).createSourceFile(s,Ge(s,"utf8"),{overwrite:!0});n.deliveryAuthorization=i.getDescendantsOfKind(d.CallExpression).some(o=>_i(i,o))}return n},nm=(e,t)=>{const s=yo();for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);if(Ao(i,s))return!0}return!1},im="createWorker",rm="extend",vn=e=>e!==void 0&&(r.isStringLiteral(e)||r.isNoSubstitutionTemplateLiteral(e))?e.getLiteralValue():void 0,En=e=>{const t=[],s=vn(R(e,"backupCron"));s!==void 0&&t.push(s);const n=R(e,"crons");if(n===void 0||!r.isObjectLiteralExpression(n))return t;for(const i of n.getProperties()){if(!r.isPropertyAssignment(i)&&!r.isMethodDeclaration(i))continue;const o=vn(i.getNameNode());o!==void 0&&t.push(o)}return t},om=e=>{const t=P(e.getExpression()),[s]=e.getArguments();if(s===void 0)return[];if(t===im)return r.isObjectLiteralExpression(s)?En(s):[];if(t!==rm||!(r.isArrowFunction(s)||r.isFunctionExpression(s)))return[];const n=On(s.getBody());return n===void 0?[]:En(n)},am=(e,t)=>{const s=[];for(const{filePath:n}of Ye(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const o of i.getDescendantsOfKind(d.CallExpression))s.push(...om(o))}return[...new Set(s)]},Ki=e=>{if(e.kind==="id")return e.tableName;if(!(e.kind!=="array"&&e.kind!=="optional"))return e.inner===void 0?void 0:Ki(e.inner)},cm=e=>{const t=new Set(e.tables.map(s=>s.name));return e.tables.some(s=>Object.values(s.shape).some(n=>{const i=Ki(n);return i!==void 0&&t.has(i)}))},lm=(e,t)=>{const s=new Map,n=new Map;for(const i of e)s.set(i.name,`workflow "${i.exportName}"`),n.set(i.className,`workflow "${i.exportName}"`);for(const i of t){const o=s.get(i.name);if(o!==void 0)throw new _("DUPLICATE_WORKFLOW_NAME",`Duplicate deployed name "${i.name}": produced by both ${o} and agent "${i.exportName}". Workflow and agent names share one account-wide namespace and must be unique together.`,{status:500});const a=n.get(i.className);if(a!==void 0)throw new _("DUPLICATE_WORKFLOW_CLASS",`Duplicate generated class "${i.className}": produced by both ${a} and agent "${i.exportName}". Workflow and agent export names must yield unique generated class names.`,{status:500})}},dm=e=>{const{lunoraDirectory:t,project:s,projectRoot:n,schema:i}=e,o=Jl(s,t),a=Bp(s,t),c=oo(s,t),{queues:l,topics:u}=wo(s,t),f=Co(n),g=vo(s,t);lm(c,g);const m=Eo(s,t),v=To(s,t),$=xo(s,t,c,g),ue=am(s,t),b=sm(s,t,Po(n)),B=Io(s,t),H=nm(s,t),F=bo(s,t);F.browser=F.browser||B.usesSandboxBrowser;const k=Ct(n,e.target),T=Oo(F,k,{agents:g.length>0,commitOrderedTables:i.tables.some(D=>D.commitOrdered===!0),cronTriggers:$.length>0,crossShardFanout:i.tables.some(D=>_o(D)),containerEgressPolicy:b.containerEgressPolicy,containerRuntimeScheduling:m.some(D=>D.schedulingPolicy==="durable_object"),containerSandboxTools:m.some(D=>D.sandbox===!0),deliveryAuthorization:b.deliveryAuthorization,durableStreams:b.durableStreams,globalTables:i.tables.some(D=>D.shardMode==="global"),liveContext:b.liveContext,liveStreams:b.liveStreams,typedWebSockets:b.typedWebSockets,queues:l.length>0,relationGraph:cm(i),secretValues:H,secrets:b.secrets,services:f.length>0,topics:u.length>0,vectorStore:i.vectorIndexes.length>0,workerLoaders:B.usesSandboxLoader,workflowRollback:b.workflowRollback,workflowSchedules:c.some(D=>D.schedules!==void 0)}),U=T.usage,X=ho(U),te=T.signals.vectorStore!==!1,se=T.signals.services===!1?[]:f,oe=jn(n),K=oe??new Set,N=K.has("lunorash");Dp(i,oe,{hasVectors:te,scheduler:U.scheduler||$.length>0,storage:U.storage||v.rules.length>0||Object.keys(Hn(i)).length>0,usage:U});const O=M(E(t,"flags.ts")),Ie=M(E(t,"notify.ts"));return{agents:g,capabilities:X,containers:m,crons:$,dataModelContent:Bo(i),declaredDependencies:oe,dependencies:K,entryCronTriggers:ue,env:a,featureUsage:U,hasFlags:O,hasNotify:Ie,identity:o,platformGate:{...T,diagnostics:[...ko(n,e.target),...T.diagnostics,...Ro(k,i.vectorIndexes),...b.liveStreams&&b.deliveryAuthorization?[Fo(k)]:[],...b.socketRoutes&&b.deliveryAuthorization?[Lo(k)]:[]]},queues:l,serverContent:zo({agents:g,capabilities:X,containers:m,env:a,hasVectors:te,hasFlags:O,hasNotify:Ie,identity:o,queues:l,schema:i,services:se,storageRuleBuckets:v.rules.map(D=>D.bucket),topics:u,useUmbrella:N,workflows:c}),services:se,storageRulesMetadata:v,topics:u,usesSandbox:B.usesSandboxBrowser||B.usesSandboxContainer||B.usesSandboxFs,useUmbrella:N,workflows:c}},zi=(e,t)=>{if(!r.isPropertyAccessExpression(e))return;const s=e.getExpression();if(!r.isPropertyAccessExpression(s))return;const n=s.getExpression();return r.isPropertyAccessExpression(n)&&n.getName()===t?s.getName():void 0},um=e=>{if(!r.isPropertyAccessExpression(e))return!1;const t=e.getExpression();return r.isPropertyAccessExpression(t)&&t.getName()==="scheduler"||r.isIdentifier(t)&&t.getText()==="scheduler"},fm=new Map([["publish",{kind:"publish",surface:"topics"}],["publishBatch",{kind:"publish",surface:"topics"}],["send",{kind:"enqueue",surface:"queues"}],["sendBatch",{kind:"enqueue",surface:"queues"}]]),gm=/^[\w$]+:[\w$]+$/u,pm=(e,t)=>{const s=Ln(t);return s!==void 0?{kind:"call",target:s}:e!=="run"&&t!==void 0?{kind:"call",reason:'the function reference is not a static api.* / internal.* chain or a "namespace:export" key'}:void 0},xn=e=>{const t=[];for(const s of e.getProperties()){if(!r.isPropertyAssignment(s)&&!r.isShorthandPropertyAssignment(s))return;t.push(s.getName())}return t},mm=e=>{if(e===void 0)return[];if(r.isObjectLiteralExpression(e))return xn(e);if(r.isIdentifier(e)){const t=e.getSymbol()?.getDeclarations()[0];if(r.isVariableDeclaration(t)&&t.getVariableStatement()?.getDeclarationKind()===Er.Const){const s=t.getInitializer();return r.isObjectLiteralExpression(s)?xn(s):void 0}}},hm=(e,t,s)=>({schedule:{argKeys:mm(s),...e==="runAfter"&&t!==void 0&&r.isNumericLiteral(t)?{delayMs:t.getLiteralValue()}:{}}}),vm=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t))return;const s=t.getName(),[n,i,o]=e.getArguments();if(Fn.has(s))return pm(s,n);if((s==="runAfter"||s==="runAt")&&um(t)){const l=Ln(i)??(r.isStringLiteral(i)&&gm.test(i.getLiteralText())?i.getLiteralText():void 0);return l===void 0?{kind:"schedule",reason:'the scheduled function is not a static api.* / internal.* chain or a "namespace:export" key'}:{kind:"schedule",target:l,...hm(s,n,o)}}const a=fm.get(s),c=a===void 0?void 0:zi(t,a.surface);return a===void 0||c===void 0?void 0:{kind:a.kind,target:c}},Em=new Set([d.AmpersandAmpersandEqualsToken,d.AmpersandAmpersandToken,d.BarBarEqualsToken,d.BarBarToken,d.QuestionQuestionEqualsToken,d.QuestionQuestionToken]),$i=e=>vr.isOptionalChain(e.compilerNode),xm=(e,t)=>r.isIfStatement(t)?!y(e,t.getExpression()):r.isWhileStatement(t)||r.isForInStatement(t)||r.isForOfStatement(t)?y(e,t.getStatement()):r.isForStatement(t)?y(e,t.getStatement())||y(t.getIncrementor(),e):r.isCaseClause(t)||r.isDefaultClause(t)||r.isCatchClause(t)?!0:re(t)?t.getFirstAncestor(re)!==void 0:r.isConditionalExpression(t)?!y(e,t.getCondition()):r.isBinaryExpression(t)?!y(e,t.getLeft())&&Em.has(t.getOperatorToken().getKind()):(r.isCallExpression(t)||r.isElementAccessExpression(t))&&$i(t)?!y(e,t.getExpression()):r.isBlock(t)&&t.getStatements().some(s=>s.getEnd()<=e.getStart()&&kg(s)),Sm=e=>{let t=e,s=e.getParent();for(;s!==void 0&&(r.isAwaitExpression(s)||r.isParenthesizedExpression(s));)t=s,s=s.getParent();const n=r.isVariableDeclaration(s)||r.isBinaryExpression(s)&&y(t,s.getRight())&&s.getOperatorToken().getKind()===d.EqualsToken,i=e.getFirstAncestor(re);return n||i?.getDescendantsOfKind(d.ThrowStatement).some(o=>o.getStart()>=e.getEnd()&&y(o.getFirstAncestor(re),i))===!0},Am=(e,t)=>(r.isWhileStatement(t)||r.isForInStatement(t)||r.isForOfStatement(t))&&y(e,t.getStatement())||r.isForStatement(t)&&(y(e,t.getStatement())||y(t.getIncrementor(),e)),ym=(e,t)=>{if($i(e)||t==="schedule"&&Sm(e))return"guard";let s=e,n=!1;for(let i=s.getParent();i!==void 0&&!r.isSourceFile(i);i=i.getParent()){if(xm(s,i)){if(!Am(s,i))return"guard";n=!0}s=i}return n?"loop":void 0},Sn=(e,t,s)=>{if(s===void 0)return;const n=ym(e,s.kind);return{...s,...n===void 0?{}:{conditional:!0},...n==="loop"?{loopOnly:!0}:{},file:t,line:e.getStartLineNumber(),scope:x(e)}},bm=(e,t)=>[...C(e,t,(s,n)=>Sn(s,n,vm(s))),...ne(e,t,d.PropertyAccessExpression,(s,n)=>{const i=zi(s,"services");return Sn(s,n,i===void 0?void 0:{kind:"invoke",target:i})})],Nm=new Set(["boolean","number","object","string"]),Pm=e=>{const t=e.getName();if(!Nm.has(t))return;const s=e.getExpression();return G(s,["flags"])||G(s,["flags","details"])?t:void 0},wm=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t))return;const s=Pm(t);if(s===void 0)return;const n=e.getArguments()[0];if(!n||!(r.isStringLiteral(n)||r.isNoSubstitutionTemplateLiteral(n)))return;const i=n.getLiteralValue();return i.length>0?{key:i,type:s}:void 0},Im=(e,t)=>{const s=new Map;for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const o of i.getDescendantsOfKind(d.CallExpression)){const a=wm(o);a&&!s.has(a.key)&&s.set(a.key,a.type)}}return[...s.entries()].map(([n,i])=>({key:n,type:i})).toSorted((n,i)=>n.key.localeCompare(i.key))},Cm=e=>{const t=e.getType().getProperty("~standard");if(!t)return;const s=t.getTypeAtLocation(e).getProperty("types");if(!s)return;const n=s.getTypeAtLocation(e).getNonNullableType().getProperty("output");if(!n)return;const i=n.getTypeAtLocation(e),o=i.getText(e);if(!o||o==="any"||o==="never"||Vo(o))return;const a=e.getSourceFile().getFilePath();if(Uo(i,e,a)){const c=Wo(i,e,a,0,new Set);return c===void 0&&qo(o),c}return o},Tm=e=>e.getProperties().some(t=>{if(r.isSpreadAssignment(t))return!0;const s=Mr(t.getNameNode());return s===void 0||s==="namespace"}),Om=(e,t)=>{for(const{filePath:s}of Ye(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const i of n.getDescendantsOfKind(d.CallExpression)){const o=i.getExpression(),[a]=i.getArguments();if(!(!r.isPropertyAccessExpression(o)||o.getName()!=="auth"||a===void 0)&&(!r.isObjectLiteralExpression(a)||Tm(a)))return i}}},km="https://lunora.sh/docs/concepts/data-residency#pinning-auth-and-voice",Rm=(e,t)=>{if(!(e.jurisdiction===void 0||e.jurisdictionPinsAuth===!0||t===void 0))throw de(t,`the schema pins Durable Objects to the "${e.jurisdiction}" jurisdiction, and this project also has DO-backed auth (users, sessions, accounts, credentials). Pinning the auth object resolves it to a NEW, EMPTY object: existing users stay in the unpinned one until you copy them across (${km}). Acknowledge with \`.jurisdiction("${e.jurisdiction}", { pinAuth: true })\`, deploy, then run the copy. For D1-mode auth the acknowledgement changes nothing.`,{code:"JURISDICTION_MOVE",status:422})},Fm="room:",Lm="__lunora_socket__:",Dm=/^[A-Za-z]\w*$/u,An=e=>Dm.test(e),Mm=e=>`${e}:`.startsWith(Fm)||`${e}:`.startsWith(Lm),Bi=e=>e.getProperties().some(t=>r.isSpreadAssignment(t)||r.isComputedPropertyName(t.getNameNode())),Vi=e=>Bi(e)||e.getProperties().some(t=>r.isMethodDeclaration(t)||r.isGetAccessorDeclaration(t)||r.isSetAccessorDeclaration(t)),yn=e=>S(e),rs=(e,t)=>e.getProperties().find(s=>(r.isPropertyAssignment(s)||r.isShorthandPropertyAssignment(s))&&S(s)===t),ae=(e,t)=>{const s=de(e,`defineLiveStream ${t}`);return new _("LIVE_STREAM_NOT_LITERAL",s.message)},Ui=(e,t,s)=>{const n=rs(e,t),i=r.isPropertyAssignment(n)?n.getInitializer():void 0;if(i===void 0||!r.isObjectLiteralExpression(i))throw ae(n??e,`needs ${s} so codegen can read its topics`);if(Vi(i))throw ae(i,`cannot spread into or compute the keys of \`${t}\`: codegen must read every name as a literal`);return i},_m=(e,t)=>{const s=yn(t),n=r.isPropertyAssignment(t)?t.getInitializer():void 0;if(n===void 0||!r.isObjectLiteralExpression(n))throw ae(t,`needs an object literal for topic "${s}" ({ key?, payload }), not a reference to one`);if(Vi(n))throw ae(n,`cannot spread into or compute the keys of topic "${s}"`);if(!An(s)||Mm(s))throw new _("LIVE_TOPIC_INVALID",`live stream "${e}": topic name "${s}" must be a plain identifier (letters, digits and "_", starting with a letter) that does not encode into the "room:" or socket topic prefix.`);if(rs(n,"key")===void 0)return{fields:[],name:s};const a=Ui(n,"key",`an object literal \`key\` for topic "${s}"`).getProperties().map(l=>yn(l)),c=a.find(l=>!An(l));if(c!==void 0)throw new _("LIVE_TOPIC_INVALID",`live stream "${e}": key field "${s}.${c}" must be a plain identifier (letters, digits and "_", starting with a letter).`);return{fields:a,name:s}},Km=(e,t,s)=>{const n=e.getArguments()[0];if(n===void 0||!r.isObjectLiteralExpression(n))throw ae(e,"needs an object-literal options argument so codegen can read its `id` and `topics`");if(Bi(n))throw ae(n,"cannot spread its options or use a computed key: codegen must read `id` and `topics` as literals");const i=rs(n,"id"),o=r.isPropertyAssignment(i)?i.getInitializer():void 0;if(o===void 0||!r.isStringLiteral(o))throw ae(i??n,'needs a string-literal `id` (e.g. `defineLiveStream({ id: "posts", … })`) so codegen can type its references');const a=o.getLiteralValue(),c=Ui(n,"topics","an object-literal `topics` map");return{exportName:t,filePath:w(s,e.getSourceFile().getFilePath()),id:a,topics:c.getProperties().map(l=>_m(a,l))}},zm=e=>{const t=new Map;for(const s of e)for(const[n,i]of[["id",s.id],["export",s.exportName]]){const o=`${n}:${i}`,a=t.get(o);if(a!==void 0)throw new _("LIVE_STREAM_DUPLICATE",`live stream ${n} "${i}" is declared by both lunora/${a}.ts and lunora/${s.filePath}.ts; it must be unique across the app.`);t.set(o,s.filePath)}},$m=e=>{let t=e.getParent();for(;r.isAsExpression(t)||r.isSatisfiesExpression(t)||r.isNonNullExpression(t)||r.isParenthesizedExpression(t);)t=t.getParent();return t},Bm=(e,t)=>e.getDescendantsOfKind(d.CallExpression).filter(s=>zn(s,"defineLiveStream")).map(s=>{const n=$m(s),i=r.isVariableDeclaration(n)?jt(n,"binding"):void 0;if(i===void 0)throw new _("LIVE_STREAM_NOT_EXPORTED",de(s,"defineLiveStream must be assigned to a named export (`export const posts = defineLiveStream({ … })`), not a default export, a local, or an inline call, so codegen can type its references").message);return Km(s,i,t)}),Vm=(e,t)=>{const s=A(t).flatMap(n=>Bm(e.getSourceFile(n)??e.addSourceFileAtPath(n),t));return zm(s),s},Um=e=>r.isPropertyAssignment(e)||r.isMethodDeclaration(e)||r.isGetAccessorDeclaration(e)?r.isComputedPropertyName(e.getNameNode()):!1,Wm=e=>r.isPropertyAssignment(e)||r.isShorthandPropertyAssignment(e)||r.isMethodDeclaration(e)||r.isGetAccessorDeclaration(e)?Um(e):!0,Wi=(e,t=!1)=>{for(const s of e.getProperties()){if(Wm(s))return!0;if(t)continue;if(!r.isPropertyAssignment(s))return!0;const n=s.getInitializer();if(!n||!r.isObjectLiteralExpression(n)||Wi(n,!0))return!0}return!1},qm=(e,t)=>{for(const s of A(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const{receiver:i}of Gn(n))for(const o of Yt(i)){const a=o.getArguments()[0];if(a!==void 0&&(!r.isObjectLiteralExpression(a)||Wi(a)))return!0}}return!1},jm=e=>{const t=e.getArguments()[0];if(!t||!r.isObjectLiteralExpression(t))return[];const s=[];for(const n of t.getProperties()){const i=Be(n);if(i===void 0||!r.isPropertyAssignment(n))continue;const o=n.getInitializer();if(!(!o||!r.isObjectLiteralExpression(o)))for(const a of o.getProperties()){const c=Be(a);c!==void 0&&s.push({column:c,strategy:Bn(a),table:i})}}return s},Hm=(e,t)=>{const s=new Map;for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const{receiver:o}of Gn(i))for(const a of Yt(o))for(const c of jm(a)){const l=`${c.table}\0${c.column}`;s.has(l)||s.set(l,c)}}return{columns:[...s.values()]}},Gm=["providerSubscriptionId","state"],Ym=["providerEventId","processedAt"],bn=(e,t)=>t.every(s=>s in e.shape),Qm=e=>{const t=e.find(n=>n.name==="payment_subscriptions"),s=e.find(n=>n.name==="payment_events");return t!==void 0&&s!==void 0&&bn(t,Gm)&&bn(s,Ym)},Xm=["account","apikey","member","passkey","session","teamMember","twoFactor","user"],Jm=(e,t)=>{const s={};for(const[n,i]of e)s[n]={dataset:i};for(const[n,i]of t)s[n]={excluded:i};return s},Zm=(e,t)=>{const s=[];for(const n of e){const i=t[n];i===void 0?s.push({code:"unclassified",table:n}):"excluded"in i&&i.excluded.trim()===""&&s.push({code:"excluded_without_reason",table:n})}return s},eh="@lunora/privacy",qi="userId",th=e=>e.replaceAll("\\","/"),sh="privacy",nh=new Set(["actionCacheDataset","authDataset","documentHistoryDataset"]),st=e=>e!==void 0&&(r.isStringLiteral(e)||r.isNoSubstitutionTemplateLiteral(e))?e.getLiteralText():void 0,nt=e=>r.isPropertyAssignment(e)?e.getName().replaceAll(/^["']|["']$/gu,""):"",os=e=>e.getProperties().filter(t=>r.isPropertyAssignment(t)),ih=(e,t)=>{const s=e.getProperty(t),n=r.isPropertyAssignment(s)?s.getInitializer():void 0;return n!==void 0&&r.isObjectLiteralExpression(n)?n:void 0},it=e=>{const t=e.getExpression();return r.isIdentifier(t)?t.getText():void 0},rh=(e,t)=>{const s=e.getArguments()[1];if(s===void 0||!r.isObjectLiteralExpression(s))return;const n=ih(s,"tables"),i=st(e.getArguments()[0])??"defineDataset";for(const o of n===void 0?[]:os(n).map(a=>nt(a)))t.datasets.set(o,i)},oh=(e,t)=>{const s=e.getArguments()[0],n=s!==void 0&&r.isObjectLiteralExpression(s)?os(s):[],i=new Set(n.map(o=>nt(o)));for(const o of Xm)i.has(o)||t.datasets.set(o,"authDataset");for(const o of n){const a=r.isPropertyAssignment(o)?st(o.getInitializer()):void 0;a!==void 0&&t.datasets.set(a,"authDataset")}},Nn=(e,t,s)=>{t.datasets.set(st(e.getArguments()[0])??s,s)},as=8,Pe=(e,t=0)=>{if(t>as)return;if(r.isAsExpression(e)||r.isSatisfiesExpression(e)||r.isParenthesizedExpression(e))return Pe(e.getExpression(),t+1);if(!r.isIdentifier(e))return e;const s=e.getSymbol(),n=(s?.isAlias()===!0?s.getAliasedSymbol():s)?.getValueDeclaration(),i=r.isVariableDeclaration(n)?n.getInitializer():void 0;return i===void 0?void 0:Pe(i,t+1)},ah=e=>{if(r.isPropertyAssignment(e)){const t=e.getInitializer();return t===void 0?void 0:[nt(e),t]}if(r.isShorthandPropertyAssignment(e)){const t=e.getValueSymbol(),s=(t?.isAlias()===!0?t.getAliasedSymbol():t)?.getValueDeclaration(),n=r.isVariableDeclaration(s)?s.getInitializer():void 0;return[e.getName(),n??e.getNameNode()]}},ji=(e,t=0)=>{const s=Pe(e,t);if(s===void 0||!r.isObjectLiteralExpression(s)||t>as)return;const n=new Map;for(const i of s.getProperties()){const o=r.isSpreadAssignment(i)?ji(i.getExpression(),t+1):[ah(i)];if(o===void 0)return;for(const a of o)a!==void 0&&n.set(a[0],a[1])}return n},ch=e=>{const t=e.getArguments()[0];return t===void 0?void 0:ji(t)},lh=(e,t)=>{const s=e?.get("exclude"),n=s===void 0?void 0:Pe(s);for(const i of n!==void 0&&r.isObjectLiteralExpression(n)?os(n):[])t.excluded.set(nt(i),r.isPropertyAssignment(i)?st(i.getInitializer())??"":"")},dh=(e,t)=>{switch(it(e)){case"actionCacheDataset":{Nn(e,t,"actionCache");break}case"authDataset":{oh(e,t);break}case"defineDataset":{rh(e,t);break}case"documentHistoryDataset":{Nn(e,t,"documentHistory");break}}},cs=e=>e!==void 0&&r.isCallExpression(e)&&it(e)==="defineDataset",Hi=e=>e!==void 0&&r.isCallExpression(e)&&nh.has(it(e)??""),uh=e=>{const t=e.getSymbol(),n=(t?.isAlias()===!0?t.getAliasedSymbol():t)?.getValueDeclaration(),i=r.isVariableDeclaration(n)?n.getInitializer():void 0;return r.isVariableDeclaration(n)&&(cs(i)||Hi(i))?n:void 0},Gi=(e,t,s=0)=>{const n=Pe(e,s);if(n===void 0||!r.isArrayLiteralExpression(n)||s>as)return!1;for(const i of n.getElements())if(r.isSpreadElement(i)){if(!Gi(i.getExpression(),t,s+1))return!1}else if(!cs(i)&&!Hi(i)){const o=r.isIdentifier(i)?uh(i):void 0;if(o===void 0)return!1;t.add(o)}return!0},fh=e=>{if(e===void 0)return;const t=e.get("datasets"),s=new Set;return t===void 0||Gi(t,s)?s:void 0},gh=(e,t)=>{const s=[];for(const i of e.getDescendantsOfKind(d.CallExpression))if(dh(i,t),it(i)==="definePrivacy"){const o=ch(i);lh(o,t),s.push({location:`${e.getFilePath()}:${String(i.getStartLineNumber())}`,passed:fh(o)})}return{declared:e.getDescendantsOfKind(d.VariableDeclaration).filter(i=>cs(i.getInitializer())).map(i=>({declaration:i,name:i.getName()})),privacyCalls:s}},ph=(e,t)=>{const s=E(t,"schema.ts"),n=[...A(t),...M(s)?[s]:[]];for(const o of n)e.getSourceFile(o)===void 0&&e.addSourceFileAtPath(o);const i=new Set(n.map(o=>th(o)));return e.getSourceFiles().filter(o=>i.has(o.getFilePath()))},mh=(e,t,s)=>{if(s?.has(eh)!==!0)return{classifications:{},enabled:!1,unusedDatasets:[]};const n={datasets:new Map,excluded:new Map},i=[],o=[];for(const f of ph(e,t)){const g=gh(f,n);i.push(...g.declared),o.push(...g.privacyCalls)}const a=new Set;for(const f of o){for(const g of f.passed??[])a.add(g);f.passed===void 0&&console.warn(`@lunora/codegen: privacy_datasets_unresolved: the definePrivacy call at ${f.location} passes datasets codegen cannot read, so a defineDataset it leaves out is not reported. Pass an array of dataset constants, directly or through a spread of a config object literal.`)}const l=o.every(f=>f.passed!==void 0)?i.filter(f=>!a.has(f.declaration)).map(f=>f.name):[];return{classifications:Jm(n.datasets,n.excluded),enabled:o.length>0,unusedDatasets:l}},hh=e=>e.extensionKey!==sh&&qi in e.shape,vh=e=>e.code==="excluded_without_reason"?`privacy_exclusion_unexplained: "${e.table}" is excluded without a reason. Give one in definePrivacy({ exclude }).`:`privacy_table_unclassified: "${e.table}" holds user data (it has a "${qi}" column) but no dataset exports it. Add it to a defineDataset, or exclude it in definePrivacy({ exclude }) with a reason.`,Eh=(e,t)=>{if(!t.enabled)return;const s=e.filter(o=>hh(o)).map(o=>o.name),[n]=Zm(s,t.classifications);if(n!==void 0)throw new _("PRIVACY_COVERAGE",vh(n));const[i]=t.unusedDatasets;if(i!==void 0)throw new _("PRIVACY_COVERAGE",`privacy_dataset_unused: "${i}" is declared with defineDataset but never passed to definePrivacy({ datasets }). Pass it, or delete it.`)},xh=(e,t)=>{const s=Do(t.target);return{...s===void 0?{}:{platform:s},analytics:e.analytics||t.dependencies.has("@lunora/bindings"),auth:t.dependencies.has("@lunora/auth"),containers:e.container||t.containerCount>0||t.dependencies.has("@lunora/container"),flags:e.flags||t.dependencies.has("@lunora/flags"),kv:e.kv||t.dependencies.has("@lunora/bindings"),mail:e.mail||t.dependencies.has("@lunora/mail"),notifications:e.notify||t.dependencies.has("@lunora/notify"),payments:e.payments||t.hasPaymentTables,privacy:t.dependencies.has("@lunora/privacy"),queues:t.queueCount>0||t.dependencies.has("@lunora/queue"),scheduler:e.scheduler||t.cronCount>0||t.dependencies.has("@lunora/scheduler"),storage:e.storage||t.storageRuleCount>0||t.storageColumnCount>0||t.dependencies.has("@lunora/storage"),vectors:t.vectorStoreSupported&&t.vectorIndexCount>0,workflows:e.workflows||t.workflowCount>0||t.dependencies.has("@lunora/workflow")}},Sh=new Set(["delete","hardDelete","patch","replace","restore"]),Ah=new Set(["insertMany","insertManyUnsafe","patchIf","patchWhere"]),yh=new Set(["delete","deleteMany","hardDelete","insert","insertMany","patch","patchMany","replace","restore","upsert","upsertMany"]),Pn=(e,t)=>{const s=e.getNonNullableType().getProperty("__table")?.getTypeAtLocation(t);if(s===void 0)return[];const n=s.isUnion()?s.getUnionTypes():[s],i=n.map(o=>o.getLiteralValue()).filter(o=>typeof o=="string");return i.length===n.length?i:[]},bh=(e,t)=>{const s=e.getType();if(t==="deleteMany"||t==="patchMany"){const n=s.getArrayElementType();if(n===void 0)return[];const i=t==="patchMany"?n.getProperty("id")?.getTypeAtLocation(e):n;return i===void 0?[]:Pn(i,e)}return Pn(s,e)},wn="",Nh=(e,t)=>{if(t!=="patch"&&t!=="patchMany")return;const s=e.getArguments()[1];if(s===void 0||!r.isObjectLiteralExpression(s))return;const n=[];for(const i of s.getProperties()){if(!r.isPropertyAssignment(i)&&!r.isShorthandPropertyAssignment(i))return;n.push(i.getName())}return n},Ph=(e,t)=>{if(Ah.has(e))return{method:e,tables:[t!==void 0&&r.isStringLiteral(t)?t.getLiteralText():wn]};if(Sh.has(e)||e==="deleteMany"||e==="patchMany"){const s=t===void 0?[]:bh(t,e);return{method:e,tables:s.length===0?[wn]:s}}},In=(e,t)=>e===void 0?void 0:{...e,fields:Nh(t,e.method)},wh=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t))return;const s=t.getName(),n=t.getExpression();if(z(n))return In(Ph(s,e.getArguments()[0]),e);if(yh.has(s)&&r.isPropertyAccessExpression(n)&&z(n.getExpression()))return In({method:s,tables:[n.getName()]},e)},Ih=(e,t)=>C(e,t,(s,n)=>{const i=wh(s);if(i===void 0)return;const o=x(s),a=s.getStartLineNumber();return i.tables.map(c=>({...i.fields===void 0?{}:{fields:i.fields},file:n,line:a,method:i.method,scope:o,table:c}))}),Ch=(e,t,s)=>({cacheKey:`procedure_arguments_unreadable:${e}:${t}`,categories:["SCHEMA"],description:"Codegen reads an argument record statically. One built at runtime — a factory call, or a property off a value it cannot follow — has no literal to read, so the generated `FunctionReference` carries only the arguments it could see while the runtime validator still enforces all of them.",detail:`\`${t}\` in \`${e}\` (line ${s.toString()}) declares arguments codegen could not read, so its generated type is missing some of them.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:s},name:"procedure_arguments_unreadable",remediation:`Declare the arguments as an object literal, or as a \`const\` object literal the chain names — \`const ${t}Args = { … };\` then \`.input(${t}Args)\`. Both resolve; a record returned by a call does not.`,title:"Procedure arguments are missing from the generated type"}),Th=(e,t)=>{if(t===void 0){const s=e.getArguments()[0];if(s===void 0||!r.isObjectLiteralExpression(s)||V(s,"args")===void 0)return!1}return Jt(e,t).opaque},Oh=(e,t)=>{const s=[],n=(i,o)=>{const a=i.getInitializer();if(a===void 0||!r.isCallExpression(a))return;const c=ee(a);c!==void 0&&Th(a,c.receiver)&&s.push(Ch(t,o,a.getStartLineNumber()))};for(const i of e.getVariableStatements().filter(o=>o.isExported()))for(const o of i.getDeclarations())n(o,o.getName());return s},kh=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n);i!==void 0&&s.push(...Oh(i,w(t,n)))}return s.toSorted((n,i)=>n.cacheKey.localeCompare(i.cacheKey))},Rh=new Map([["AgentDefinition",{call:"defineAgent({ … })",file:"agents"}],["ContainerDefinition",{call:"defineContainer({ … })",file:"containers"}],["QueueDefinition",{call:"defineQueue({ … })",file:"queues",note:"A dropped queue has no caller to fail — its consumer is simply never wired."}],["RegisteredAction",{call:"action.input({ … }).action(handler)"}],["RegisteredLifecycleHook",{call:"onConnect(handler)",note:"Substitute the hook you called: `onConnect`, `onDisconnect` and `onShardInit` share one type, so codegen cannot tell which you wrote. A dropped hook has no caller to fail — it silently never fires."}],["RegisteredMigration",{call:"defineMigration({ … })",note:"A dropped migration never runs, so `lunora migrate up` reports nothing to do."}],["RegisteredMutation",{call:"mutation.input({ … }).mutation(handler)"}],["RegisteredMutator",{call:"defineMutator({ … })",file:"mutators"}],["RegisteredQuery",{call:"query.input({ … }).query(handler)"}],["RegisteredReactor",{call:"onQueryChange(select, handler)",note:"A dropped reactor has no caller to fail — it silently never runs."}],["RegisteredRoom",{call:"defineRoom({ … })",note:"A dropped room has no caller to fail — its whisper topic is never wired to a handler, so joins, messages and broadcasts are silently ignored."}],["RegisteredShape",{call:"defineShape({ … })",file:"shapes"}],["RegisteredStream",{call:"query.input({ … }).stream(handler)"}],["RegisteredWebSocket",{call:"defineWebSocket({ … })",note:"A dropped socket route has no caller to fail — its path is never recognised as an upgrade route, so connections fall through to the app router and the handler never runs."}],["RegisteredWhisperAuthorizer",{call:"onWhisper(handler)",note:"A dropped authorizer has no caller to fail — the whisper topics it was meant to gate silently stay open to every socket on the shard."}],["SubscriptionDefinition",{call:"defineSubscription(topic, { … })",file:"queues",note:"A dropped subscription is never published to — its topic's messages simply never reach it."}],["WorkflowDefinition",{call:"defineWorkflow({ … })",file:"workflows"}]]),He=({byName:e,byPath:t},s,n)=>t.has(`${s}:${n}`)||e.has(n),Yi=e=>!e.isAny(),Qi=e=>{const t=e.getType();if(!Yi(t))return;const s=t.getAliasSymbol()?.getName()??t.getSymbol()?.getName(),n=s===void 0?void 0:Rh.get(s);return n===void 0||s===void 0?void 0:{...n,typeName:s}},Fh=e=>{const t=e.getInitializer();return t===void 0?!1:r.isCallExpression(t)||r.isIdentifier(t)||r.isPropertyAccessExpression(t)},Xi={cause:"codegen recognises a registration only when the initializer is the registering call itself, and this one comes from a factory or an alias",remediation:"A factory that returns a registration cannot be read statically — inline it, or export what the factory builds."},Lh=e=>({cause:`codegen reads this kind of registration only from \`lunora/${e}.ts\`, and this is a different module`,remediation:`Move it into \`lunora/${e}.ts\` — the declaration itself is fine.`}),Dh={cause:"it is exported only under a string name that is not an identifier, which the generated `api.ts` and dispatch table cannot address as `<module>.<name>`",remediation:"Export it under an identifier name as well (or instead)."},Mh=new Set(["AgentDefinition","ContainerDefinition","QueueDefinition","RegisteredShape","SubscriptionDefinition","WorkflowDefinition"]),_h={cause:"it is exported only as `default` or under a reserved word, and this kind's name becomes an import binding and a generated class / binding name, where that is a syntax error",remediation:"Export it under a plain identifier: `export const <name> = …` (an extra `export default <name>` is fine)."},Kh=(e,t,s)=>{if(!t.some(i=>Cr(i)))return Dh;const n=e.getVariableStatement()?.hasExportKeyword()===!0;return Mh.has(s.typeName)&&!n&&!t.some(i=>sa(i))?_h:Xi},Ji=(e,t,s,n,i)=>{const{call:o,file:a,note:c,typeName:l}=s,u=a!==void 0&&e!==a?a:void 0,f=u===void 0?i:Lh(u),g=c===void 0?f.remediation:`${c} ${f.remediation}`;return{cacheKey:`procedure_not_registered:${e}:${t}`,categories:["SCHEMA"],description:"Codegen registers an export only when its initializer is literally the registering call and the module exports it under an identifier name — by the `export` keyword, a local `export { … }`, or `export default`. Written any other way it exists at runtime but never reaches the generated output — `_generated/api.ts` for a procedure, the lifecycle manifest for a hook or reactor — so a caller cannot address it and a hook never fires.",detail:`\`${t}\` in \`${e}\` (line ${n.toString()}) has type \`${l}\` but was not registered — ${f.cause}.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:n,typeName:l},name:"procedure_not_registered",remediation:u===void 0?`Assign the registration directly: \`export const ${t} = ${o};\`. ${g}`:g,title:"Procedure exists at runtime but is missing from the generated API"}},zh=(e,t,s)=>{const n=[];for(const i of Q(e)){const o=r.isIdentifier(i.getNameNode())?It(i):[i.getName()],c=o.some(u=>He(s,t,u))||!Fh(i)?void 0:Qi(i),[l=i.getName()]=o;c!==void 0&&n.push(Ji(t,l,c,i.getStartLineNumber(),Kh(i,o,c)))}return n},$h=(e,t,s)=>{if(He(s,t,"default"))return[];const n=[];for(const i of e.getExportAssignments().filter(o=>!o.isExportEquals()&&!r.isIdentifier(o.getExpression()))){const o=Qi(i.getExpression());o!==void 0&&n.push(Ji(t,"default",o,i.getStartLineNumber(),Xi))}return n},Bh=(e,t,s)=>[...zh(e,t,s),...$h(e,t,s)],Vh=(e,t,s)=>e.getVariableStatements().flatMap(n=>n.getDeclarations()).filter(n=>r.isIdentifier(n.getNameNode())).filter(n=>It(n).some(i=>He(s,t,i))).filter(n=>{const i=n.getInitializer();return i!==void 0&&r.isCallExpression(i)&&r.isPropertyAccessExpression(i.getExpression())}).map(n=>{const i=It(n).find(o=>He(s,t,o))??n.getName();return{declaration:n,exportName:i,relativePath:t}}),Uh=({exportName:e,relativePath:t})=>({cacheKey:"procedure_type_check_unavailable",categories:["SCHEMA"],description:"Codegen cross-checks every export in `lunora/` against its TYPE to catch a procedure the syntactic scan dropped — a factory-assigned export, an alias, a separate `export { … }`. That check needs the type checker to resolve `@lunora/server`; when it cannot, the check reports nothing regardless of what the code does.",detail:`Type resolution for \`lunora/\` is unavailable — the registered procedure \`${e}\` in \`${t}\` types as \`any\`, as does every other one — so codegen cannot tell you when an export is dropped from \`_generated/api.ts\`. A dropped procedure will surface as \`Property '<name>' does not exist\` at its call site instead.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:e,filePath:t},name:"procedure_type_check_unavailable",remediation:`Check what codegen sees: \`${e}\` should have a procedure type, not \`any\`. It needs a \`tsconfig.json\` at or above \`lunora/\` — the one codegen finds walking up from there, which is not necessarily the one your editor uses — resolving \`lunorash\` / \`@lunora/server\` to declarations that exist on disk (a workspace dependency has to be built first).`,title:"Codegen cannot type-check `lunora/`, so dropped procedures go unreported"}),Wh=(e,t,s)=>{const n=[],i=[];for(const a of A(t)){const c=e.getSourceFile(a);if(c===void 0)continue;const l=w(t,a);n.push(...Bh(c,l,s)),i.push(...Vh(c,l,s))}const[o]=i;return o!==void 0&&i.every(({declaration:a})=>!Yi(a.getType()))&&n.push(Uh(o)),n.toSorted((a,c)=>a.cacheKey.localeCompare(c.cacheKey))},qh=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||t.getName()!=="get")return!1;const s=t.getExpression();return r.isPropertyAccessExpression(s)?s.getName()==="workflows":r.isIdentifier(s)&&s.getText()==="workflows"},jh=e=>{const t=e.getArguments()[0];return t&&r.isStringLiteral(t)?t.getLiteralText():""},Hh=(e,t)=>C(e,t,(s,n)=>qh(s)?{file:n,line:s.getStartLineNumber(),scope:x(s),workflow:jh(s)}:void 0),we=(e,t)=>{M(e)&&Ge(e,"utf8")===t||gr(e,t,"utf8")},Gh=(e,t)=>{if(t===""){ye(e,{force:!0});return}we(e,t)},Yh=(e,t)=>{const s=E(e,"services");if(Object.keys(t).length===0){ye(s,{force:!0,recursive:!0});return}if(M(s))for(const n of Cn(s,{recursive:!0,withFileTypes:!0})){const i=E(n.parentPath,n.name);n.isFile()&&t[Tn(e,i)]===void 0&&ye(i)}for(const[n,i]of Object.entries(t))Bt(Vt(E(e,n)),{recursive:!0}),we(E(e,n),i)},Qh=(e,t,s)=>{const n=E(e,t);if(Object.keys(s).length===0){ye(n,{force:!0,recursive:!0});return}if(M(n))for(const i of Cn(n,{recursive:!0,withFileTypes:!0})){const o=E(i.parentPath,i.name);i.isFile()&&s[Tn(n,o)]===void 0&&ye(o)}for(const[i,o]of Object.entries(s)){const a=E(n,i);Bt(Vt(a),{recursive:!0}),we(a,o)}},Xh=e=>{try{const t=ia(E(e,"package.json"));return typeof t.version=="string"&&t.version!==""?t.version:void 0}catch{return}},$e=(e,t,s)=>{const n=e.getSourceFile(t);if(n===void 0){e.createSourceFile(t,s,{overwrite:!0});return}n.getFullText()!==s&&n.replaceWithText(s)},Jh=(e,t,s)=>e.getSourceFile(t)?.getFullText()===s,Zh=(e,t)=>{M(e)||Bt(e,{recursive:!0});const s=[];for(const n of t)switch(n.kind){case"always":{we(E(e,n.name),n.content),s.push(n.name);break}case"directory":{Qh(e,n.name,n.files),s.push(...Object.keys(n.files).map(i=>E(n.name,i)));break}case"services":{Yh(e,n.files),s.push(...Object.keys(n.files));break}default:Gh(E(e,n.name),n.content),n.content!==""&&s.push(n.name)}return s},ev=e=>{const t=Xh(e.projectRoot),s=e.wantsArchitecture?e.modules:[],n=oa({functions:e.functions,httpRoutes:e.httpRoutes,modules:s,version:t}),i=ca({functions:e.functions,modules:s,version:t});return{openApiContent:`${JSON.stringify(n,void 0,2)}
-`,openApiModuleContent:aa(n),openRpcContent:`${JSON.stringify(i,void 0,2)}
-`,openRpcModuleContent:la(i)}},tv=".lunora-schema.json",sv=()=>{const e=process.env.LUNORA_CODEGEN_TIMING;return e!==void 0&&e!==""},nv=(e,t,s)=>{if(s&&e.length>0){const o=e.map(a=>`"${a.exportName}"`).join(", ");throw new _("MASK_UNSUPPORTED",`This project declares a \`mask(...)\` policy whose argument isn't a plain object literal (e.g. \`mask(sharedPolicies)\` referencing a hoisted variable), or contains a spread (\`...shared\`) or computed key (\`[name]:\`) codegen can't enumerate, so codegen can't tell which columns it masks. Because the project also declares replication shape(s) (${o}), codegen can't verify none of them replicate a table that policy masks — inline every table and column as literal keys so codegen can verify it, or remove the affected shape(s).`,{status:422})}const n=new Map;for(const o of t.columns){const a=n.get(o.table)??[];a.push(o.column),n.set(o.table,a)}const i=t.columns.length>0;for(const o of e){if(o.table===void 0){if(i)throw new _("MASK_UNSUPPORTED",`defineShape "${o.exportName}" has a non-literal \`table\` (a variable or expression, not a string literal), so codegen can't statically verify it doesn't replicate a table that masks a column. This project masks at least one column elsewhere, so the combination can't be proven safe — change "${o.exportName}"'s \`table\` to a plain string literal so codegen can verify it, or remove the mask(s) on the table it targets.`,{status:422});continue}const a=n.get(o.table);if(a===void 0)continue;const c=a.map(l=>`"${l}"`).join(", ");throw new _("MASK_UNSUPPORTED",`defineShape "${o.exportName}" replicates table "${o.table}", which masks column(s) ${c} on at least one procedure. A shape runs no procedure, so \`.use(mask(...))\` never applies to its replicated rows — remove the shape, unmask the table, or wait for shape-masking support.`,{status:422})}},iv=8,rv=e=>{const{agents:t,apiPath:s,generatedFunctionsPath:n,internalPath:i,lazyFunctions:o,lunoraDirectory:a,migrations:c,project:l,roomsSupported:u,shapes:f,usesSandbox:g,useUmbrella:m,workflows:v}=e,$=()=>Ho(()=>{const F=Go(l,a,{lazyFunctions:o}),k=qr(l,a);return{functions:F,httpRoutes:Yo(l,a),mutators:k}});let{erased:ue,value:{functions:b,httpRoutes:B,mutators:H}}=$();mn([...b,...H].map(F=>F.filePath)),mn(B.filter(F=>F.stream).map(F=>F.filePath),"http-stream");for(let F=1;;F+=1){const k=u?b:b.filter(N=>N.channel?.kind!=="room"&&N.lifecycle!=="socket"),T=va({agents:t,functions:k,httpRoutes:B,mutators:H,useUmbrella:m,workflows:v}),U={agents:t,functions:k,lazyFunctions:o,migrations:c,mutators:H,shapes:f,useUmbrella:m,usesSandbox:g},X=wa(U),te=Ia(U),se=Ea({functions:b,useUmbrella:m}),oe=E(a,"_generated",Yn),K=[[s,T],[i,se],[n,X],...Object.entries(te).map(([N,O])=>[E(oe,N),O])];if(F>=iv||K.every(([N,O])=>Jh(l,N,O)))return{apiContent:T,erased:ue,functions:b,functionModulesContent:te,functionsContent:X,httpRoutes:B,internalContent:se,mutators:H};for(const[N,O]of K)$e(l,N,O);({erased:ue,value:{functions:b,httpRoutes:B,mutators:H}}=$())}},bE=e=>{const t=sv(),s=t?ht.now():0,n=E(e.projectRoot,e.lunoraDirectory??"lunora"),i=e.lazyFunctions===!0,o=E(n,"schema.ts");if(!M(o))throw new _("INTERNAL",`schema.ts not found at ${o}`);const a=e.project??po(n);Kr(Cm);const c=ea(a,o,e.projectRoot);Eh(c.tables,mh(a,n,jn(e.projectRoot)));const{agents:l,capabilities:u,containers:f,crons:g,dataModelContent:m,dependencies:v,entryCronTriggers:$,env:ue,featureUsage:b,hasFlags:B,hasNotify:H,identity:F,platformGate:k,queues:T,serverContent:U,services:X,storageRulesMetadata:te,topics:se,usesSandbox:oe,useUmbrella:K,workflows:N}=dm({lunoraDirectory:n,project:a,projectRoot:e.projectRoot,schema:c,target:e.target});Rm(c,c.jurisdiction===void 0?void 0:Om(a,n));const O=E(n,"_generated"),Ie=E(O,"dataModel.ts"),D=E(O,"server.ts"),Zi=E(O,"api.ts"),er=E(O,"internal.ts"),tr=E(O,"functions.ts");$e(a,Ie,m),$e(a,D,U);const ls=Object.fromEntries(X.filter(p=>p.rpcEntrypoint!==void 0).flatMap(p=>Object.entries($o(p,O))));for(const[p,mt]of Object.entries(ls))$e(a,E(O,p),mt);const Ce=Xo(a,n),fe=ta(a,n),rt=k.signals.typedWebSockets!==!1,{apiContent:ds,erased:sr,functions:J,functionModulesContent:us,functionsContent:fs,httpRoutes:ot,internalContent:gs,mutators:at}=rv({agents:l,apiPath:Zi,generatedFunctionsPath:tr,internalPath:er,lazyFunctions:i,roomsSupported:rt,lunoraDirectory:n,migrations:Ce,project:a,shapes:fe,useUmbrella:K,usesSandbox:oe,workflows:N}),ps=no(a,n),ct=io(ps,c,[...J,...ot].map(p=>p.filePath)),Te=ps.length>0,Oe=e.lint===!1&&!Te?void 0:{callEdges:bm(a,n),inserts:Qo(a,n),queries:Jo(a,n,J),tableWrites:Ih(a,n),workflowCalls:Hh(a,n)},ke=e.lint===!1||Oe===void 0?void 0:dp(a,n,{callSites:Oe,containers:f,crons:g,functions:J,modules:ct,mutators:at,queues:T,schema:c,shapes:fe,workflows:N,wranglerVariables:e.wranglerVariables}),ms=ke===void 0?[]:vp(e.projectRoot,[...pr(ke,{source:"static"}),...Wh(a,n,{byName:new Set([...N,...T,...l,...f].map(p=>p.exportName)),byPath:new Set([...J,...at,...fe,...Ce].map(p=>`${p.filePath}:${p.exportName}`))}),...kh(a,n),...jo(sr,n),...da(T,e.wranglerQueueProducers)]),nr=Zo(a,n),hs=Hm(a,n);nv(fe,hs,qm(a,n));const ir=B?Im(a,n):[],lt=k.signals.vectorStore!==!1,rr=Mo(Ct(e.projectRoot,e.target),"deliveryAuthorization"),me=xh(b,{containerCount:f.length,cronCount:g.length,dependencies:v,hasPaymentTables:Qm(c.tables),queueCount:T.length,storageColumnCount:Object.keys(Hn(c)).length,storageRuleCount:te.rules.length,vectorIndexCount:c.vectorIndexes.length,target:Ct(e.projectRoot,e.target),vectorStoreSupported:lt,workflowCount:N.length}),vs=t?ht.now():0,dt=ra(c,Ce.map(p=>p.id)),ut=Vm(a,n),Es=Ko({advisories:ms.filter(p=>p.name!=="procedure_type_check_unavailable"),advisorProcedures:ke?.procedureProtections??[],agents:l,capabilities:u,containers:f,env:ue,flagKeys:ir,hasFlags:B,hasNotify:H,hasRooms:rt&&J.some(p=>p.channel?.kind==="room"),hasSensitiveArgs:l.length>0||J.some(p=>go(p)),hasSecretValues:k.signals.secretValues===!0,hasSockets:rt&&J.some(p=>p.lifecycle==="socket"),lazyFunctions:i,hasVectors:lt,liveStreamDeclarations:ut,liveStreams:k.signals.liveStreams===!0,maskMetadata:hs,mutators:at,queues:T,rlsMetadata:nr,schema:c,schemaSnapshot:dt,shapes:fe,services:X,storageRules:te,studioFeatures:me,topics:se,useUmbrella:K,workflows:N}),xs=ma(fe,v.has("@lunora/db"),K),Ss=ua(f,c.jurisdiction),As=fa(N),ys=ga(l),bs=pa(T,e.wranglerQueueProducers),Ns=Ca(ut,K),Ps=xa(g),or=Sa(me.scheduler),ar=Aa(c.tables,K,c.jurisdiction),cr=so(e.projectRoot)?ya(K):"",ws=ba(c.vectorIndexes),Re=Pa(c,K),Is=ha(v.has("@lunora/seed")),Fe=e.apiSpec??"openapi",ft=Fe==="openapi"||Fe==="both",gt=Fe==="openrpc"||Fe==="both",Cs=na({capabilities:u,emailAgents:l.filter(p=>p.onEmail===!0).map(p=>({className:p.className,exportName:p.exportName})),hasAccess:v.has("@lunora/cloudflare-access"),hasAuth:v.has("@lunora/auth"),hasFramework:v.has("@lunora/astro")||v.has("@lunora/svelte")||v.has("@lunora/vue")||M(E(e.projectRoot,"src","worker.ts")),hasGlobal:c.tables.some(p=>Wn(p)),hasHyperdriveGlobal:c.tables.some(p=>qn(p)),hasKvIntrospector:me.kv,hasNotify:H,hasQueue:T.some(p=>p.mode==="push"),liveStreams:k.signals.liveStreams===!0,liveStreamsWithheld:k.liveStreamsWithheld,liveStreamDeclarations:ut,hasScheduler:me.scheduler,hasSourcedTables:c.tables.some(p=>p.externalSource!==void 0),hasStorage:me.storage,hasDeliveryAuthorization:rr,hasVectors:lt,hasWorkflow:N.length>0,identity:F,jurisdiction:c.jurisdiction,jurisdictionPinsAuth:c.jurisdictionPinsAuth===!0,tables:c.tables.map(p=>({name:p.name,shardMode:p.shardMode})),useUmbrella:K,vectorIndexCount:c.vectorIndexes.length,voiceAgents:l.filter(p=>p.voice===!0&&p.voiceBindingName!==void 0).map(p=>({bindingName:p.voiceBindingName,exportName:p.exportName})),wantsArchitecture:Te,wantsOpenApi:ft,wantsOpenRpc:gt}),{openApiContent:Ts,openApiModuleContent:Os,openRpcContent:ks,openRpcModuleContent:Rs}=ev({functions:J,httpRoutes:ot,modules:ct,projectRoot:e.projectRoot,wantsArchitecture:Te}),he=Te&&Oe!==void 0?Rp({...Oe,crons:g,functions:J,httpRoutes:ot,modules:ct,queues:T,schema:c,services:X,topics:se,workflows:N}):void 0,pt=E(n,tv),lr=M(pt),dr=e.dryRun?[]:Zh(O,[{content:Cs,kind:"always",name:"app.ts"},{content:m,kind:"always",name:"dataModel.ts"},{content:ds,kind:"always",name:"api.ts"},{content:gs,kind:"always",name:"internal.ts"},{content:U,kind:"always",name:"server.ts"},{content:fs,kind:"always",name:"functions.ts"},{files:us,kind:"directory",name:Yn},{content:Es,kind:"always",name:"shard.ts"},{content:Ps,kind:"always",name:"crons.ts"},{content:ws,kind:"always",name:"vectors.ts"},{content:Re.global,kind:"always",name:"drizzle.global.ts"},{content:Re.shard,kind:"always",name:"drizzle.shard.ts"},{content:Ss,kind:"optional",name:"containers.ts"},{content:As,kind:"optional",name:"workflows.ts"},{content:ys,kind:"optional",name:"agents.ts"},{content:bs,kind:"optional",name:"queues.ts"},{content:Ns,kind:"optional",name:"live.ts"},{content:or,kind:"optional",name:"scheduler.ts"},{content:ar,kind:"optional",name:"shardRegistry.ts"},{content:cr,kind:"optional",name:"durableObjects.ts"},{content:Is,kind:"optional",name:"seed.ts"},{content:xs,kind:"optional",name:"collections.ts"},{files:ls,kind:"services"},{content:ft?Ts:"",kind:"optional",name:"openapi.json"},{content:ft?Os:"",kind:"optional",name:"openapi.ts"},{content:gt?ks:"",kind:"optional",name:"openrpc.json"},{content:gt?Rs:"",kind:"optional",name:"openrpc.ts"},{content:he===void 0?"":`${JSON.stringify(he,void 0,2)}
-`,kind:"optional",name:"architecture.json"},{content:he===void 0?"":Fp(he),kind:"optional",name:"architecture.ts"}]);if(!e.dryRun&&(!lr||e.updateSchemaBaseline===!0)&&we(pt,mr(dt)),t){const p=ht.now(),mt=Math.round(p-s),ur=Math.round(vs-s),fr=Math.round(p-vs);console.error(`@lunora/codegen: codegen took ${mt.toString()}ms (discovery ${ur.toString()}ms, emit ${fr.toString()}ms)`)}return{advisories:ms,advisorContext:ke,agents:l,architecture:he,containers:f,cronTriggers:[...new Set([...Na(g),...$])],generated:{agents:ys,api:ds,app:Cs,collections:xs,containers:Ss,crons:Ps,dataModel:m,drizzleGlobal:Re.global,drizzleShard:Re.shard,functionModules:us,functions:fs,internal:gs,live:Ns,openApi:Ts,openApiModule:Os,openRpc:ks,openRpcModule:Rs,queues:bs,seed:Is,server:U,shard:Es,vectors:ws,workflows:As},migrations:Ce,outputDirectory:O,platformDiagnostics:k.diagnostics,queues:T,schemaSnapshot:dt,schemaSnapshotPath:pt,workflows:N,writtenFiles:dr}};export{tv as SCHEMA_SNAPSHOT_FILENAME,po as createCodegenProject,wE as findTsconfig,IE as refreshCodegenProject,bE as runCodegen,CE as tsconfigFingerprint};

package/dist/packem_shared/SCHEMA_SNAPSHOT_VERSION-C7Um0EnM.mjs

@@ -1,2 +0,0 @@
-const k=(e,t=2166136261)=>{let i=t;for(let r=0;r<e.length;r+=1)i^=e.charCodeAt(r),i=Math.imul(i,16777619);return(i>>>0).toString(16).padStart(8,"0")},q=e=>`${k(e,2166136261)}${k(e,16777619)}`,X=1;function A(e){const t={},i=Object.keys(e);i.sort();for(const r of i)t[r]=e[r];return t}const C=e=>`${JSON.stringify(e,void 0,2)}
-`,Z=e=>q(C(e)),l=e=>typeof e=="object"&&e!==null,I=e=>l(e)&&l(e.fields)&&l(e.indexes)&&l(e.relations)&&typeof e.shardMode=="string",N=e=>{if(e===void 0||e.trim()==="")return{status:"absent"};let t;try{t=JSON.parse(e)}catch(r){return{error:`baseline is not valid JSON: ${r instanceof Error?r.message:String(r)}`,status:"invalid"}}if(!l(t)||t.version!==1||!l(t.tables))return{error:`baseline is malformed or written by an incompatible version (expected version ${String(1)})`,status:"invalid"};for(const[r,o]of Object.entries(t.tables))if(!I(o))return{error:`baseline table "${r}" has an invalid structure`,status:"invalid"};return{snapshot:{jurisdiction:typeof t.jurisdiction=="string"?t.jurisdiction:void 0,migrationIds:Array.isArray(t.migrationIds)?t.migrationIds:[],tables:t.tables,version:1},status:"ok"}},R=(e,t)=>e.unique===t.unique&&e.fields.length===t.fields.length&&e.fields.every((i,r)=>i===t.fields[r]),S=e=>e.unique!==void 0,h=({nullable:e,optional:t,refined:i,unique:r,...o})=>JSON.stringify(A(o)),O=e=>({form:JSON.stringify([h(e),e.optional===!0,e.nullable===!0]),refined:e.refined===!0}),w=e=>e.kind==="union"&&e.members?e.members.map(t=>O(t)):[O({...e,nullable:!1,optional:!1})],V=(e,t)=>{if(t.kind!=="union")return!1;const i=w(t);return w(e).every(r=>i.some(o=>o.form===r.form&&(r.refined||!o.refined)))},c=e=>{switch(e.kind){case"array":return`array(${e.of?c(e.of):"?"})`;case"from":return e.output===void 0?"from":`from(${e.output})`;case"id":return`id(${e.ref??"?"})`;case"literal":return`literal(${e.literal??"?"})`;case"object":return`object({ ${Object.keys(e.fields??{}).join(", ")} })`;case"record":return`record(${e.key?c(e.key):"?"}, ${e.of?c(e.of):"?"})`;case"union":return(e.members??[]).map(t=>c(t)).join(" | ");default:return e.kind}},p=(e,t,i)=>({remediation:"backfill",scope:"table",severity:"breaking",summary:i,table:e,type:t}),g=(e,t,i)=>({remediation:"none",scope:"table",severity:"safe",summary:i,table:e,type:t}),M=(e,t)=>{const i=JSON.stringify(e),r=JSON.stringify(t);return i===r?0:i<r?-1:1},f=e=>({...e,...e.kind==="from"?{output:void 0}:{},...e.fields?{fields:Object.fromEntries(Object.entries(e.fields).map(([t,i])=>[t,f(i)]))}:{},...e.key?{key:f(e.key)}:{},...e.of?{of:f(e.of)}:{},...e.members?{members:e.members.map(t=>f(t)).toSorted(M)}:{}}),x=e=>e.kind==="union"?e.members??[]:[e],L=(e,t)=>{const i=[...e],r=[...t],o=new Set,n=new Set,s=(a,d)=>{for(const[b,$]of i.entries()){if(n.has(b))continue;const m=r.findIndex((_,E)=>!o.has(E)&&a($,_));m!==-1&&(o.add(m),n.add(b),d&&([i[b],r[m]]=v($,r[m])))}};return s((a,d)=>JSON.stringify(a)===JSON.stringify(d),!1),s((a,d)=>h(f(a))===h(f(d)),!0),[i,r]},v=(e,t)=>{if(e.kind==="union"||t.kind==="union"){const[o,n]=L(x(e),x(t)),s=(a,d)=>a.kind==="union"?{...a,members:d.toSorted(M)}:d[0];return[s(e,o),s(t,n)]}if(e.kind!==t.kind)return[e,t];if(e.kind==="from")return e.output===void 0||t.output===void 0?[{...e,output:void 0},{...t,output:void 0}]:[e,t];const i={...e.fields?{fields:{...e.fields}}:{}},r={...t.fields?{fields:{...t.fields}}:{}};for(const o of["key","of"])e[o]&&t[o]&&([i[o],r[o]]=v(e[o],t[o]));for(const o of Object.keys(e.fields??{})){const n=e.fields?.[o],s=t.fields?.[o];n&&s&&i.fields&&r.fields&&([i.fields[o],r.fields[o]]=v(n,s))}return[{...e,...i},{...t,...r}]},D=(e,t,i,r,o)=>{const[n,s]=v(i,r);if(!(n.kind===s.kind&&(!o||h(n)===h(s))))return o&&V(n,s)?g(e,"widenedFieldShape",`field ${e}.${t} widened: ${c(n)} → ${c(s)} — every stored value stays valid`):n.kind!==s.kind?p(e,"changedFieldKind",`field ${e}.${t} changed type: ${n.kind} → ${s.kind} — add a data migration to convert existing values`):p(e,"changedFieldShape",`field ${e}.${t} changed shape: ${c(n)} → ${c(s)} — stored values were written against the old shape; add a data migration to convert them`)},H=(e,t,i,r)=>{const o=[];return i.unique!==r.unique&&o.push(r.unique===!0?p(e,"addedFieldConstraint",`field ${e}.${t} became unique — existing duplicates would violate it; add a data migration to de-duplicate first`):g(e,"relaxedFieldConstraint",`field ${e}.${t} is no longer unique`)),i.nullable!==r.nullable&&o.push(r.nullable===!0?g(e,"relaxedFieldConstraint",`field ${e}.${t} became nullable`):p(e,"addedFieldConstraint",`field ${e}.${t} is no longer nullable — rows holding NULL would be invalid; add a data migration to backfill them`)),i.refined!==r.refined&&o.push(r.refined===!0?p(e,"addedFieldConstraint",`field ${e}.${t} gained a validation refinement — stored values were never checked against it; add a data migration if any could fail`):g(e,"relaxedFieldConstraint",`field ${e}.${t} dropped its validation refinement`)),o},J=(e,t,i,r)=>{const o=[],n=S(i)&&S(r),s=D(e,t,i,r,n);return s&&o.push(s),n&&o.push(...H(e,t,i,r)),i.optional&&!r.optional?o.push({remediation:"backfill",severity:"breaking",summary:`field ${e}.${t} became required — rows missing it would be invalid; add a data migration to backfill it`,table:e,scope:"table",type:"fieldOptionalToRequired"}):!i.optional&&r.optional&&o.push({remediation:"none",scope:"table",severity:"safe",summary:`field ${e}.${t} became optional`,table:e,type:"fieldRequiredToOptional"}),o},P=(e,t,i)=>i.optional?{remediation:"none",scope:"table",severity:"safe",summary:`added optional field ${e}.${t}`,table:e,type:"addedOptionalField"}:{remediation:"backfill",severity:"breaking",summary:`added required field ${e}.${t} — existing rows have no value; add a data migration to backfill it`,table:e,scope:"table",type:"addedRequiredField"},B=(e,t,i,r)=>{for(const[o,n]of Object.entries(i.fields)){const s=t.fields[o];s===void 0?r.push(P(e,o,n)):r.push(...J(e,o,s,n))}for(const o of Object.keys(t.fields))i.fields[o]===void 0&&r.push({remediation:"backfill",severity:"breaking",summary:`removed field ${e}.${o} — add a data migration if stored data must be cleaned up`,table:e,scope:"table",type:"removedField"})},G=(e,t,i,r)=>{for(const[o,n]of Object.entries(i.indexes)){const s=t.indexes[o];if(s===void 0){r.push(n.unique?{remediation:"backfill",scope:"table",severity:"breaking",summary:`added unique index ${o} on ${e} — existing duplicates would violate it; add a data migration to de-duplicate first`,table:e,type:"addedIndex"}:{remediation:"none",scope:"table",severity:"safe",summary:`added index ${o} on ${e}`,table:e,type:"addedIndex"});continue}R(s,n)||r.push({remediation:"code",severity:"breaking",summary:`index ${o} on ${e} changed shape — a query may have relied on the old index`,table:e,scope:"table",type:"changedIndex"})}for(const o of Object.keys(t.indexes))i.indexes[o]===void 0&&r.push({remediation:"code",severity:"breaking",summary:`removed index ${o} on ${e} — a query that used \`.withIndex("${o}")\` would break`,table:e,scope:"table",type:"removedIndex"})},U=(e,t,i,r)=>{for(const o of Object.keys(i.relations))t.relations[o]===void 0&&r.push({remediation:"none",scope:"schema",severity:"safe",summary:`added relation ${e}.${o}`,table:e,type:"addedRelation"});for(const o of Object.keys(t.relations))i.relations[o]===void 0&&r.push({remediation:"code",scope:"schema",severity:"breaking",summary:`removed relation ${e}.${o}`,table:e,type:"removedRelation"})},F="shardBy:_unknown_",y="global",W=(e,t)=>e===y&&t.startsWith(`${y}:`)||t===y&&e.startsWith(`${y}:`),K=(e,t,i)=>{if(t===i)return i!==F?void 0:{remediation:"rehome",scope:"table",severity:"breaking",summary:`table ${e} declares a non-literal .shardBy(...) key, so codegen cannot read which column partitions it — every such key records as "${F}" and two DIFFERENT keys would compare equal. Pass the shard key as a string literal; until then this is reported on every run, because the alternative is a silent pass on a re-home that strands every row (export/import is the only way back).`,table:e,type:"changedShardMode"};if(!W(t,i))return{remediation:"rehome",severity:"breaking",summary:`table ${e} changed shard mode: ${t} → ${i} — its physical storage moves, and existing rows do NOT follow the schema; re-home them with an export/import round trip (https://lunora.sh/docs/concepts/sharding#migrating-a-populated-table)`,table:e,scope:"table",type:"changedShardMode"}},T=e=>e.memory!==void 0,j=e=>e.after??0,u=e=>e.after===void 0?`.ttl("${e.field}")`:`.ttl("${e.field}", { after: ${String(e.after)} })`,z=(e,t,i)=>{if(t===void 0&&i===void 0)return;const r=a=>({remediation:"backfill",scope:"table",severity:"breaking",summary:a,table:e,type:"changedTtlPolicy"}),o=a=>({remediation:"none",scope:"table",severity:"safe",summary:a,table:e,type:"changedTtlPolicy"});if(i===void 0)return o(`table ${e} dropped its TTL policy — its rows are no longer swept`);if(t===void 0)return r(`table ${e} gained a TTL policy ${u(i)} — every row already past the cutoff is deleted on the next alarm sweep; add a data migration to refresh or clear "${i.field}" on the rows written before it`);if(t.field!==i.field)return r(`table ${e} moved its TTL to a different column: ${u(t)} → ${u(i)} — rows are now expired by a column they were never written against; add a data migration to populate "${i.field}"`);const n=j(t),s=j(i);return s<n?r(`table ${e} shortened its TTL: ${u(t)} → ${u(i)} — rows that were not expired under the old offset are deleted on the next alarm sweep; add a data migration to refresh "${i.field}" on the rows that must survive`):s>n?o(`table ${e} lengthened its TTL: ${u(t)} → ${u(i)}`):void 0},Q=(e,t,i)=>{const r=[];return t.memory!==i.memory&&r.push(i.memory===!0?{remediation:"rehome",scope:"table",severity:"breaking",summary:`table ${e} became a .memory() table — every row is deleted in every shard on the next Durable Object cold start, and no data migration survives that; export the rows first if they must be kept, or revert`,table:e,type:"changedMemoryMode"}:{remediation:"none",scope:"table",severity:"safe",summary:`table ${e} is no longer a .memory() table — its rows now survive a cold start`,table:e,type:"changedMemoryMode"}),t.commitOrdered!==i.commitOrdered&&r.push(i.commitOrdered===!0?{remediation:"backfill",scope:"table",severity:"breaking",summary:`table ${e} became .commitOrdered() — rows written before it carry no _commitSeq, so a \`_commitSeq > cursor\` changefeed never offers them; add a data migration over the table to stamp them (the rewrite allocates a sequence)`,table:e,type:"changedCommitOrdering"}:{remediation:"code",scope:"table",severity:"breaking",summary:`table ${e} is no longer .commitOrdered() — new rows carry no _commitSeq, so a \`_commitSeq > cursor\` changefeed stops advancing without erroring; update the consumers before deploying`,table:e,type:"changedCommitOrdering"}),r},Y=(e,t,i,r)=>{const o=K(e,t.shardMode,i.shardMode);if(o&&r.push(o),T(t)&&T(i)){r.push(...Q(e,t,i));const n=z(e,t.ttl,i.ttl);n&&r.push(n)}B(e,t,i,r),G(e,t,i,r),U(e,t,i,r)},ee=(e,t)=>{const i=[],r=e?.tables??{};for(const[o,n]of Object.entries(t.tables)){const s=r[o];if(s===void 0){i.push({remediation:"none",scope:"table",severity:"safe",summary:`added table ${o}`,table:o,type:"addedTable"});continue}Y(o,s,n,i)}for(const o of Object.keys(r))t.tables[o]===void 0&&i.push({remediation:"rehome",scope:"table",severity:"breaking",summary:`removed table ${o} — its rows stay in each shard's SQLite, unreachable through the schema; export the shard first if the data must be kept`,table:o,type:"removedTable"});if(e!==void 0&&e.jurisdiction!==t.jurisdiction){const o=e.jurisdiction??"(none)",n=t.jurisdiction??"(none)";i.push({remediation:"rehome",scope:"schema",severity:"breaking",summary:`Durable Object jurisdiction changed from ${o} to ${n} — this re-homes every DO and strands all existing shard, scheduler, and session-DO data in the old region (no in-place migration; export then import to move it). Revert the change, or override the gate to proceed intentionally.`,type:"changedJurisdiction"})}return{changes:i}};export{X as SCHEMA_SNAPSHOT_VERSION,c as describeShape,J as diffExistingField,ee as diffSchemaSnapshots,Z as hashSchemaSnapshot,I as isValidTableSnapshot,N as parseSnapshotJson,C as serializeSchemaSnapshot,A as sortKeys};

package/dist/packem_shared/discoverHyperdriveCalls-CL-d0IVo.mjs

@@ -1 +0,0 @@
-import{d as o}from"./context-property-calls-dFjpeIlP.mjs";const t=(r,e)=>o(r,e,"sql");export{t as default};

package/dist/packem_shared/discoverMaskProcedures-Bw-BOIbA.mjs

@@ -1 +0,0 @@
-import"./isTestPath-C3QumE88.mjs";import"./attribution-CG8-kUcl.mjs";import"./database-calls-UPlhi3Ks.mjs";import"./classify-procedure-call-BkaeM9Ej.mjs";import{d as a}from"./index-CN8FVvr-.mjs";export{a as default};

package/dist/packem_shared/discoverR2sqlCalls-B4oeTYEM.mjs

@@ -1 +0,0 @@
-import{d as r}from"./context-property-calls-dFjpeIlP.mjs";const t=(s,o)=>r(s,o,"r2sql");export{t as default};

package/dist/packem_shared/emitShard-CYjlTMmT.mjs

@@ -1 +0,0 @@
-import"./SCHEMA_SNAPSHOT_VERSION-C7Um0EnM.mjs";import"./isD1GlobalTable-udvHAAzD.mjs";import"./json-data-Chfs2Cz5.mjs";import{e as d}from"./shard-ByB2lGh0.mjs";import"./shard-runtime-ByYXjCKY.mjs";import"./shared-8vTRkL2-.mjs";import"./platform-8oj7iXQy.mjs";import"./schema-BgM8A3XV.mjs";export{d as default};