@lunora/codegen 1.0.0-alpha.357 → 1.0.0-alpha.358

package/dist/packem_shared/SCHEMA_SNAPSHOT_FILENAME-Z18YPqk_.mjs

@@ -0,0 +1,31 @@
+import{existsSync as _,readFileSync as Qe,mkdirSync as Vt,writeFileSync as hr,rmSync as Ne,readdirSync as On}from"node:fs";import{dirname as Ut,join as E,relative as kn}from"node:path";import{performance as vt}from"node:perf_hooks";import{runAdvisor as vr}from"@lunora/advisor";import{LunoraError as K}from"@lunora/errors";import{serializeSchemaSnapshot as Er}from"./SCHEMA_SNAPSHOT_VERSION-SplX7j_9.mjs";import{toAdvisorContext as xr}from"./formatAdvisories-BCVASH7N.mjs";import{Node as r,SyntaxKind as d,Project as Wt,ts as Sr,VariableDeclarationKind as Ar}from"ts-morph";import{listLunoraSourceFiles as A,lunoraRelativePath as w,bindingKeyName as le,collectCallRows as T,descendantsOfKind as k,findObjectProperty as U,collectSecurityCallRows as yr,propertyInitializer as F,listSecurityScanFiles as Xe,objectLiteralFromCallbackBody as Rn,limitNameOf as Fn,optionsObjectLiteral as Ln,handlerOf as br,collectNodeRows as ie,chainRootOf as Je,outermostValueWrapper as I,isWriteTarget as Ze,isSameNode as y,unwrapExpression as h,isConstDeclaration as re,memberAccessOf as qt,returningFunctionOf as It,walkChain as Nr,RUN_METHODS as Dn,functionReferenceSegments as Pr,isTestPath as wr,isFunctionLike as oe,functionKeyOf as Mn,withSourceListMemo as Ir}from"./isTestPath-BrBtG0bz.mjs";import{b as X,d as H,f as D,g as jt,c as x,a as Ht,w as Gt,k as Tr,l as Cr,h as Or,m as kr,j as Tt,i as Rr}from"./attribution-ILDWgo1x.mjs";import{a as Ls,r as Et,i as Y,b as Fr,m as _n,c as et,e as Yt,E as Kn,C as zn,d as Lr,f as Dr,g as Mr}from"./context-root-ChKZ81ma.mjs";import{a as P,i as _r,c as te,d as $n,e as Kr,f as zr,g as Bn}from"./classify-procedure-call-CGyiEHy1.mjs";import{a as S,s as $r}from"./property-name-7cBlgK_O.mjs";import{a as Br,b as tt}from"./module-specifiers-WF8iAydP.mjs";import{r as st,s as Vr}from"./parse-validator-CP5CL6Q7.mjs";import Ur from"./discoverAuthApiCalls-cxNhFbVB.mjs";import{i as $,r as Vn}from"./database-calls-BklD-ffT.mjs";import Wr from"./discoverHyperdriveCalls-Ca9U-rY9.mjs";import{diagnosticAt as ue}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{m as Qt,a as Ue,s as Un,d as qr}from"./index-2eZFYBau.mjs";import{MUTATORS_FILENAME as jr,isDefineMutatorCallee as Hr,mutatorServerImplOf as Gr,discoverMutators as Yr}from"./MUTATORS_FILENAME-Y5_Dxk1E.mjs";import Qr from"./discoverNondeterministicCalls-Br_sPo8Z.mjs";import{discoverNotifyConfig as Xr,discoverNotifyCalls as Jr}from"./NOTIFY_FILENAME-BXAiPzbD.mjs";import Zr from"./discoverR2sqlCalls-D2OK5ZWP.mjs";import eo from"./discoverRlsProcedures-DEwd3N-e.mjs";import{s as Xt,n as to}from"./dispatch-namespace-DwTjD7BU.mjs";import{secretKindOf as so,redact as no,isHeuristicSecretKind as io,isSecretishName as ro}from"./redact-Cy14LEnc.mjs";import{readProjectConfigLiterals as Wn,readMergeDurableObjects as oo}from"./loadProjectConfig-B7RmxIeD.mjs";import{a as Me,d as ao,r as co}from"./modules-CsEUB8s1.mjs";import{WORKFLOWS_FILENAME as lo,discoverWorkflows as uo}from"./WORKFLOWS_FILENAME-WZhRFaoW.mjs";import{r as fo}from"./json-data-Chfs2Cz5.mjs";import{a as go,I as po,g as mo,G as qn,d as ho,i as vo}from"./shared-Br_OnErI.mjs";import{createCodegenProject as Eo}from"./createCodegenProject-BinzLGxq.mjs";import{findTsconfig as kE,refreshCodegenProject as RE,tsconfigFingerprint as FE}from"./createCodegenProject-BinzLGxq.mjs";import{CAPABILITIES as xo,usedCapabilities as So}from"./CAPABILITY_PROBES-brcmKenl.mjs";import{isD1GlobalTable as jn,isHyperdriveGlobalTable as Hn}from"./isD1GlobalTable-udvHAAzD.mjs";import{discoverAgents as Ao}from"./AGENTS_FILENAME-MkkvnsUE.mjs";import{discoverContainers as yo}from"./CONTAINERS_FILENAME-bE-y0B87.mjs";import bo from"./discoverCrons-C5MhFDni.mjs";import{contextPropertiesRead as No,fileWiresRequestSecretTool as Po,createTargetScope as wo,discoverFeatureUsage as Io}from"./capabilitiesUsedBy-CIms8agu.mjs";import Gn from"./readPackageDependencies-RHhGiz0k.mjs";import{PROJECT_CONFIG_FILENAMES as To,findProjectConfigFile as Co}from"./PROJECT_CONFIG_FILENAMES-CLfsyvjA.mjs";import{discoverQueueDeclarations as Oo}from"./QUEUES_FILENAME-DEW3hmFm.mjs";import{discoverSandboxUsage as ko}from"./discoverSandboxUsage-q0SIdjyQ.mjs";import{resolveServiceBindings as Ro}from"./readServiceBindings-BA49C6aN.mjs";import Fo from"./discoverStorageRulesMetadata-DFRtQeRb.mjs";import{resolveCodegenTarget as Ct,gatePlatformFeatures as Lo,readTargetDiagnostics as Do,vectorizeDimensionDiagnostics as Mo,liveStreamsDeliveryAuthorizationDiagnostic as _o,socketRoutesDeliveryAuthorizationDiagnostic as Ko,studioPlatformFor as zo,platformFeatureAvailable as $o}from"./DEFAULT_TARGET-3OLdJhTj.mjs";import{i as Bo}from"./schema-BgM8A3XV.mjs";import{b as Yn,e as Vo}from"./shard-gWobaDx2.mjs";import{e as Uo,a as Wo}from"./server-DCjunXFf.mjs";import{emitDataModel as qo}from"./emitDataModel-Bba2y2yt.mjs";import{i as jo,a as Ho,e as Go,b as Yo,d as Qo,c as Xo}from"./unwrap-handler-return-B79Rd7T0.mjs";import Jo from"./discoverFunctions-BCsT7GQS.mjs";import Zo from"./discoverHttpRoutes-DwbVREYV.mjs";import ea from"./discoverInserts-6cgh3ZTP.mjs";import{e as Qn}from"./exported-procedure-chains-BX5nIQAe.mjs";import ta from"./discoverMigrations-PQUwbVwP.mjs";import sa from"./discoverQueries-BJCIpowp.mjs";import na from"./discoverRlsMetadata-DmzmJtoo.mjs";import ia from"./discoverSchema-BM_ZW7Z1.mjs";import{discoverShapes as ra}from"./SHAPES_FILENAME-B40f_T6B.mjs";import{i as oa}from"./reserved-words-CW1QFbTd.mjs";import{emitApp as aa}from"./emitApp-CT7iAjam.mjs";import{readJsonSync as ca}from"@visulima/fs";import{buildSchemaSnapshot as la}from"./SchemaSnapshotParseError-CjKSMuex.mjs";import{buildOpenApiDocument as da,emitOpenApiModule as ua}from"./buildOpenApiDocument-20bRusvI.mjs";import{buildOpenRpcDocument as fa,emitOpenRpcModule as ga}from"./OPENRPC_VERSION-TX2C_rJT.mjs";import{v as pa,t as ma,u as ha,s as va,w as Ea}from"./shard-runtime-DXlpfT3P.mjs";import{emitCollections as xa,emitSeed as Sa,emitApi as Aa,emitInternalApi as ya}from"./emitApi-CCjh0ICg.mjs";import{emitCrons as ba,emitScheduler as Na,emitShardRegistry as Pa,emitDurableObjects as wa,emitVectors as Ia,emitWranglerCronTriggers as Ta}from"./emitCrons-CY8IQfAI.mjs";import Ca from"./emitDrizzleSchema-CD4hPtUP.mjs";import{LAZY_FUNCTION_DIRECTORY as Xn,emitFunctions as Oa,emitLazyFunctionModules as ka}from"./emitFunctions-C3WOlVN0.mjs";const Ra=(e,t=!1)=>{if(e.length===0)return"";const s=ho(t),n=e.map(c=>{if(go(c.exportName,"live stream export name"),!po.test(c.filePath))throw new Error(`@lunora/codegen: live stream file path is not safe to import: ${JSON.stringify(c.filePath)}`);return`import type { ${c.exportName} as ${c.exportName}Stream } from "../${c.filePath}.js";`}),i=e.map(c=>{const l=c.topics.map(u=>{mo(u.name,"live topic name");const f=`(typeof ${c.exportName}Stream)["topics"]["${u.name}"]`,g=`LiveTopicRef<LiveTopicPayload<${f}>>`,m=JSON.stringify(c.id);if(u.fields.length===0)return`        ${u.name}: (): ${g} => ({ __lunoraLive: ${m}, topic: ${JSON.stringify(u.name)} }),`;const v=u.fields.map(B=>`\${encodeURIComponent(key.${B})}`).join(":");return`        ${u.name}: (key: LiveTopicKey<${f}>): ${g} => ({
+            __lunoraLive: ${m},
+            topic: \`${u.name}:${v}\`,
+        }),`});return`    ${c.exportName}: {
+${l.join(`
+`)}
+    },`}),a=e.some(c=>c.topics.some(l=>l.fields.length>0))?"LiveTopicKey, LiveTopicPayload, LiveTopicRef":"LiveTopicPayload, LiveTopicRef";return`${qn}import type { ${a} } from "${s.server}";
+
+${n.join(`
+`)}
+
+/**
+ * A typed reference to each declared live topic, grouped by the stream's export name:
+ * \`live.posts.post({ postId })\`. Pass one to \`ctx.live.publish(ref, payload)\` on the server, or to a
+ * live-topic hook in the browser. A reference is plain data and carries no server code.
+ */
+export const live = {
+${i.join(`
+`)}
+};
+`},Jn=new Set(["delete","get","head","options","patch","post","put"]),Fa=new Set(["handler","stream"]),La=/\/(?:_|admin|internal|superuser|sudo|root|debug)/iu,Ds=new Set(["ADMIN_TOKEN","adminToken","assertAdmin","assertAuth","auth","Authorization","getSession","identity","isAdmin","requireAdmin","requireAuth","requireRole","verifyAdmin"]),Da=e=>{if(!r.isCallExpression(e))return;const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||!Jn.has(t.getName()))return;const s=t.getExpression();if(!r.isIdentifier(s)||s.getText()!=="httpRoute")return;const n=e.getArguments()[0];if(!(!n||!r.isStringLiteral(n)))return{method:t.getName().toUpperCase(),path:n.getLiteralValue()}},Ma=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t))return;let s=t.getExpression();for(;r.isCallExpression(s);){const n=s.getExpression();if(!r.isPropertyAccessExpression(n)||Jn.has(n.getName()))break;s=n.getExpression()}return Da(s)},_a=e=>{for(const t of e.getDescendantsOfKind(d.PropertyAccessExpression))if(Ds.has(t.getName()))return!0;for(const t of e.getDescendantsOfKind(d.CallExpression)){const s=t.getExpression();if(r.isIdentifier(s)&&Ds.has(s.getText()))return!0}return!1},Ka=(e,t)=>{const s=e.getInitializer();if(!s||!r.isCallExpression(s))return;const n=s.getExpression();if(!r.isPropertyAccessExpression(n)||!Fa.has(n.getName()))return;const i=Ma(s);if(!i||!La.test(i.path))return;const o=s.getArguments()[0],a=o!==void 0&&(r.isArrowFunction(o)||r.isFunctionExpression(o))&&_a(o);return{exportName:H(e)??e.getName(),file:t,method:i.method,path:i.path,usesGuard:a}},za=(e,t)=>{const s=[];for(const n of X(e)){const i=Ka(n,t);i&&s.push(i)}return s},$a=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...za(i,w(t,n)))}return s},Ba=e=>{const t=e.getText(),s=n=>{const i=n.getNameNode();return r.isIdentifier(i)&&i.getText()===t};for(const n of e.getAncestors())if(!(!r.isArrowFunction(n)&&!r.isFunctionExpression(n)&&!r.isFunctionDeclaration(n)))for(const i of n.getParameters()){const o=i.getDescendantsOfKind(d.BindingElement).find(a=>s(a));if(o!==void 0)return o}},Va=e=>{let t=e;for(;;){const s=t.getParent();if(!r.isObjectBindingPattern(s))return;const n=s.getParent();if(r.isBindingElement(n)){t=n;continue}return r.isParameterDeclaration(n)?le(t):void 0}},Ua=e=>{const t=e.getText();if(!e.getAncestors().some(o=>{const a=r.isFunctionLikeDeclaration(o)||r.isArrowFunction(o)?o.getParameters()[1]:void 0,c=a?.getNameNode();return a!==void 0&&(r.isIdentifier(c)?c.getText()===t:a.getDescendantsOfKind(d.BindingElement).some(l=>l.getName()===t))&&Ls(a)}))return!1;const n=D(e),i=r.isParameterDeclaration(n)?n:n?.getFirstAncestorByKind(d.Parameter);return i!==void 0&&(r.isParameterDeclaration(n)||r.isBindingElement(n))&&Ls(i)},Ms=(e,t)=>{const s=e.getParent();if(r.isPropertyAccessExpression(s)&&s.getNameNode()===e||r.isPropertyAssignment(s)&&s.getNameNode()===e)return!1;if(e.getText()===t)return!0;const n=Ba(e);return n!==void 0&&Va(n)===t?!0:t==="args"&&Ua(e)},Zn=(e,t)=>r.isIdentifier(e)?Ms(e,t):e.getDescendantsOfKind(d.Identifier).some(s=>Ms(s,t)),Wa=e=>{let t=e;for(;r.isPropertyAccessExpression(t)||r.isElementAccessExpression(t)||r.isNonNullExpression(t);)t=t.getExpression();return r.isIdentifier(t)?t:void 0},_s=e=>{const t=r.isIdentifier(e)?D(e):void 0;return r.isVariableDeclaration(t)&&r.isIdentifier(t.getNameNode())&&!jt(t)?t.getInitializer():void 0},Ot=e=>Zn(e,"args"),Q=e=>{if(!r.isIdentifier(e))return;const t=e.getText(),s=e.getFirstAncestor(a=>r.isArrowFunction(a)||r.isFunctionExpression(a)||r.isFunctionDeclaration(a));if(s===void 0)return;const n=e.getStart();let i,o=-1;for(const a of s.getDescendantsOfKind(d.VariableDeclaration)){if(a.getName()!==t)continue;const c=a.getInitializer(),l=a.getStart();c!==void 0&&l<n&&l>o&&(i=c,o=l)}return i},j=e=>{if(Ot(e))return!0;const t=Q(e);return t!==void 0&&Ot(t)},qa=e=>{if(r.isCallExpression(e)||r.isNewExpression(e))return!1;const t=Q(e);return t===void 0||!(r.isCallExpression(t)||r.isNewExpression(t))},de=e=>{if(Et(e))return!0;const t=_s(e);if(t!==void 0&&Et(t))return!0;const s=t??e;return(r.isIdentifier(s)?[s]:s.getDescendantsOfKind(d.Identifier)).some(i=>{const o=_s(i);return o!==void 0&&Et(o)})},_e=(e,t)=>Zn(e,t),ja=(e,t)=>{if(_e(e,t))return!0;const s=Q(e);if(s!==void 0&&_e(s,t))return!0;const n=Wa(e);if(n!==void 0){const i=Q(n);return i!==void 0&&_e(i,t)}return!1},Ha=e=>!r.isPropertyAccessExpression(e)||e.getName()!=="run"?!1:Y(e.getExpression(),["ai"]),Ga=(e,t)=>{if(!Ha(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!j(s)||de(s)))return{scope:x(e),file:t,line:e.getStartLineNumber()}},Ya=(e,t)=>T(e,t,Ga),Qa=new Set(["generateText","streamText"]),Xa=new Set(["messages","prompt","system"]),Ja=[{methods:new Set(["delete","insert","insertManyUnsafe","patch","patchIf","replace"]),prefixes:["context.db","ctx.db"]},{methods:new Set(["run","runAction","runMutation"]),prefixes:["context","ctx"]},{methods:new Set(["fetch"]),prefixes:["context","ctx"]},{methods:new Set(["queue","send"]),prefixes:["context.email","context.mail","ctx.email","ctx.mail"]}],Za=(e,t)=>Ja.some(s=>s.methods.has(t)&&s.prefixes.some(n=>e===n||e.startsWith(`${n}.`))),ec=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t))return;const s=t.getName(),n=[Fr(t.getExpression()),t.getExpression().getText()].find(i=>i!==void 0&&Za(i,s));return n===void 0?void 0:`${n}.${s}`},tc=e=>{for(const t of e.getDescendantsOfKind(d.CallExpression)){const s=ec(t);if(s!==void 0)return s}},sc=e=>{const t=new Set,s=e.getFirstAncestor(o=>r.isArrowFunction(o)||r.isFunctionExpression(o)||r.isFunctionDeclaration(o)),[n]=s?.getParameters()??[],i=n?.getNameNode();if(i===void 0||!r.isObjectBindingPattern(i))return t;for(const o of i.getElements()){const a=le(o),c=o.getNameNode();if(a==="args"&&r.isObjectBindingPattern(c))for(const l of c.getElements())t.add(l.getName())}return t},nc=e=>{if(Ot(e))return!0;const t=sc(e);return t.size===0?!1:e.getDescendantsOfKind(d.Identifier).some(s=>t.has(s.getText()))},ic=e=>{for(const t of e.getProperties()){if(!r.isPropertyAssignment(t)||!Xa.has(S(t)))continue;const s=t.getInitializer();if(s!==void 0&&nc(s))return!0}return!1},rc=(e,t)=>{const s=[];for(const n of k(e,d.CallExpression)){const i=P(n.getExpression());if(i===void 0||!Qa.has(i))continue;const[o]=n.getArguments();if(o===void 0||!r.isObjectLiteralExpression(o))continue;let a;for(const c of o.getDescendantsOfKind(d.CallExpression))if(P(c.getExpression())==="tool"&&(a=tc(c),a!==void 0))break;a!==void 0&&s.push({scope:x(n),file:t,line:n.getStartLineNumber(),method:i,sideEffect:a,userInputDerived:ic(o)})}return s},oc=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...rc(i,w(t,n)))}return s},ac=e=>Y(e,["fetch"]),cc=(e,t)=>{if(!ac(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!j(s)))return{scope:x(e),file:t,line:e.getStartLineNumber()}},lc=(e,t)=>T(e,t,cc),Jt=(e,t=new Set)=>{if(t.has(e))return!0;t.add(e);try{return e.getProperties().some(s=>{if(!r.isSpreadAssignment(s))return!1;const n=st(s.getExpression());return n===void 0||Jt(n,t)})}finally{t.delete(e)}},dc=e=>{const t=e.getArguments()[0];if(!t||!r.isObjectLiteralExpression(t))return{objects:[],opaque:!0};const s=U(t,"args");if(!s)return{objects:[],opaque:!1};if(!r.isPropertyAssignment(s))return{objects:[],opaque:!0};const n=s.getInitializer(),i=n===void 0?void 0:st(n);return i===void 0?{objects:[],opaque:!0}:{objects:[i],opaque:Jt(i)}},uc=e=>{const t=[];let s=!1,n=e;for(;r.isCallExpression(n);){const i=n.getExpression();if(!r.isPropertyAccessExpression(i))break;if(i.getName()==="input"){const o=n.getArguments()[0],a=o!==void 0&&r.isExpression(o)?st(o):void 0;a===void 0?s=!0:(t.push(a),s||=Jt(a))}n=i.getExpression()}return{objects:t,opaque:s}},Zt=(e,t)=>t?uc(t):dc(e),ei=(e,t)=>{if(t.has(e))return[];t.add(e);try{return e.getProperties().flatMap(s=>{if(r.isSpreadAssignment(s)){const n=st(s.getExpression());return n===void 0?[]:ei(n,t)}return r.isPropertyAssignment(s)||r.isShorthandPropertyAssignment(s)?[S(s)]:[]})}finally{t.delete(e)}},fc=e=>e.flatMap(t=>ei(t,new Set)),gc=new Set(["check","length","max"]),kt=e=>{let t=e;for(;;){const s=t.getParent();if(!s||!r.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;const n=s.getParent();if(!n||!r.isCallExpression(n)||n.getExpression()!==s)return!1;if(gc.has(s.getName()))return!0;t=n}},Rt=e=>Br(e)||e==="@lunora/values",pc=e=>{const t=new Set(["v"]);for(const s of _r(e,"v",Rt))t.add(s);for(const s of e.getImportDeclarations()){const n=s.getNamespaceImport();n&&Rt(s.getModuleSpecifierValue())&&t.add(`${n.getText()}.v`)}return t},mc=(e,t)=>{const s=new Map;for(const n of e.getVariableStatements())for(const i of n.getDeclarations()){const o=i.getNameNode(),a=i.getInitializer();if(!(!r.isObjectBindingPattern(o)||!a||!t.has(a.getText())))for(const c of o.getElements())c.getDotDotDotToken()||s.set(c.getName(),c.getPropertyNameNode()?.getText()??c.getName())}return s},hc=e=>(e.getSymbol()?.getDeclarations()??[]).some(t=>!t.getSourceFile().isDeclarationFile()&&!r.isImportSpecifier(t)&&!r.isNamespaceImport(t)&&!r.isImportClause(t)),vc=e=>(e.getSymbol()?.getDeclarations()??[]).some(t=>r.isNamespaceImport(t)&&Rt(t.getFirstAncestorByKindOrThrow(d.ImportDeclaration).getModuleSpecifierValue())),es=(e,t)=>{if(!r.isCallExpression(e))return;const s=e.getExpression();if(r.isPropertyAccessExpression(s)){const n=s.getExpression();if(!t.namespaces.has(n.getText()))return;if(r.isIdentifier(n))return hc(n)?void 0:s.getName();const i=r.isPropertyAccessExpression(n)?n.getExpression():void 0;return r.isIdentifier(i)&&vc(i)?s.getName():void 0}if(r.isIdentifier(s))return t.destructured.get(s.getText())},Ec=(e,t)=>{if(!r.isIdentifier(e))return;const s=e.getText(),n=t.getVariableDeclaration(s)?.getInitializer();return n&&(r.isArrowFunction(n)||r.isFunctionExpression(n))?n:t.getFunction(s)},xc=e=>{let t=e.getParent();for(;t&&!r.isFunctionLikeDeclaration(t);)t=t.getParent();return t},Sc=e=>r.isReturnStatement(e)?e.getExpression():void 0,Ac=e=>r.isArrowFunction(e)&&!r.isBlock(e.getBody())?[e.getBody()]:e.getDescendantsOfKind(d.ReturnStatement).filter(t=>xc(t)?.compilerNode===e.compilerNode).flatMap(t=>{const s=Sc(t);return s?[s]:[]}),ti=(e,t)=>{if(es(e,t)!==void 0)return e;if(r.isCallExpression(e)||r.isPropertyAccessExpression(e))return ti(e.getExpression(),t)},yc=(e,t)=>{const s=Ec(e.getExpression(),e.getSourceFile());if(!s)return[];const n=kt(e),i=new Set(Ac(s).map(o=>ti(o,t)).filter(o=>o!==void 0));return[s,...s.getDescendants()].flatMap(o=>{const a=es(o,t);return a===void 0?[]:[{bounded:kt(o)||n&&i.has(o),factory:a}]})},bc=(e,t)=>[e,...e.getDescendants()].flatMap(s=>{const n=es(s,t),i=n===void 0?[]:[{bounded:kt(s),factory:n}];return r.isCallExpression(s)?[...i,...yc(s,t)]:i}),Nc=(e,t)=>{const s=[],n=[];for(const i of e)for(const o of i.getProperties()){if(!r.isPropertyAssignment(o))continue;const a=o.getInitializer();if(!a)continue;const c=bc(a,t),l=S(o);c.some(u=>u.factory==="any")?s.push(l):c.some(u=>u.factory==="string"&&!u.bounded)&&n.push(l)}return{anyArgs:s,unboundedStringArgs:n}},Pc=(e,t,s)=>{const n=e.getInitializer();if(!n||!r.isCallExpression(n))return;const i=te(n);if(i?.visibility!=="public")return;const{objects:o}=Zt(n,i.receiver),{anyArgs:a,unboundedStringArgs:c}=Nc(o,s);if(!(a.length===0&&c.length===0))return{anyArgs:a,exportName:H(e)??e.getName(),file:t,line:n.getStartLineNumber(),unboundedStringArgs:c}},wc=(e,t)=>{const s=[],n=pc(e),i={destructured:mc(e,n),namespaces:n};for(const o of X(e)){const a=Pc(o,t,i);a&&s.push(a)}return s},Ic=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...wc(i,w(t,n)))}return s},xt=e=>e?.getKind()===d.TrueKeyword,Tc=e=>e?.getKind()===d.FalseKeyword,Cc=e=>e!==void 0&&r.isNumericLiteral(e)&&e.getLiteralValue()===0,Oc=new Set(["lunoraAuthAdapter","lunoraD1Adapter"]),kc=e=>!e||!r.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>r.isCallExpression(t)&&P(t.getExpression())==="scim"),Rc=e=>e!==void 0&&r.isCallExpression(e)&&Oc.has(P(e.getExpression())??""),Fc=e=>!e||!r.isArrayLiteralExpression(e)?!1:e.getElements().some(t=>r.isStringLiteral(t)&&t.getLiteralText()==="*"),Lc=e=>{const t=F(e,"advanced"),s=F(e,"emailAndPassword"),n=F(e,"session");return{analyzable:!0,disableCsrfCheck:xt(F(t,"disableCSRFCheck")),emailPasswordEnabled:xt(F(s,"enabled")),requireEmailVerification:xt(F(s,"requireEmailVerification")),scimOnNonTransactionalAdapter:kc(F(e,"plugins"))&&Rc(F(e,"database")),secureCookiesDisabled:Tc(F(t,"useSecureCookies")),sessionFreshAgeZero:Cc(F(n,"freshAge")),trustedOriginsWildcard:Fc(F(e,"trustedOrigins"))}},Dc=()=>({analyzable:!1,disableCsrfCheck:!1,emailPasswordEnabled:!1,requireEmailVerification:!1,scimOnNonTransactionalAdapter:!1,secureCookiesDisabled:!1,sessionFreshAgeZero:!1,trustedOriginsWildcard:!1}),Mc=(e,t)=>{if(P(e.getExpression())!=="createAuth")return;const s=e.getArguments()[0],n=s!==void 0&&r.isObjectLiteralExpression(s)&&s.getProperties().some(o=>r.isSpreadAssignment(o)),i=s!==void 0&&r.isObjectLiteralExpression(s)&&!n?Lc(s):Dc();return{scope:x(e),file:t,line:e.getStartLineNumber(),...i}},_c=(e,t)=>yr(e,t,Mc),Kc=(e,t)=>{if(!r.isPropertyAccessExpression(e))return;const s=e.getName();if(t.methods.has(s))return _n(e.getExpression(),t.matchReceiver)?s:void 0},zc=(e,t,s)=>{const n=Kc(e.getExpression(),s);if(n===void 0)return;const i=e.getArguments()[s.argIndex];if(!(!i||!j(i)||de(i))&&!(s.requireUnmodifiedReach===!0&&!qa(i)))return{scope:x(e),file:t,line:e.getStartLineNumber(),method:n}},nt=(e,t,s)=>T(e,t,(n,i)=>zc(n,i,s)),$c=new Set(["content","pdf","scrape","screenshot"]),Bc=(e,t)=>nt(e,t,{argIndex:0,matchReceiver:s=>s==="ctx.browser",methods:$c}),Vc=new Set(["createBrowser","createInboundEmailHandler","createPayment"]),Uc=new Set(["RateLimiter"]),Wc=new Set(["extend"]),Ks="lunora",qc=["vite.config.ts","vite.config.mts","vite.config.js","vite.config.mjs"],si=e=>{const t=[],s=[];let n=!1;for(const i of e.getProperties()){if(r.isSpreadAssignment(i)){n=!0;continue}if(r.isPropertyAssignment(i)){const o=S(i);t.push(o),i.getInitializer()?.getKind()===d.TrueKeyword&&s.push(o);continue}(r.isShorthandPropertyAssignment(i)||r.isMethodDeclaration(i))&&t.push(S(i))}return{analyzable:!n,presentKeys:t,trueKeys:s}},Ft=e=>e&&r.isObjectLiteralExpression(e)?si(e):{analyzable:!1,presentKeys:[],trueKeys:[]},jc=e=>{const t=e&&(r.isArrowFunction(e)||r.isFunctionExpression(e))?e:void 0,s=t&&Rn(t.getBody());return s?si(s):{analyzable:!1,presentKeys:[],trueKeys:[]}},Hc=(e,t)=>{const s=[];for(const n of k(e,d.CallExpression)){const i=P(n.getExpression());i!==void 0&&(Vc.has(i)?s.push({callee:i,file:t,line:n.getStartLineNumber(),...Ft(n.getArguments()[0])}):Wc.has(i)&&s.push({callee:i,file:t,line:n.getStartLineNumber(),...jc(n.getArguments()[0])}))}for(const n of k(e,d.NewExpression)){const i=P(n.getExpression());i===void 0||!Uc.has(i)||s.push({callee:i,file:t,line:n.getStartLineNumber(),...Ft(n.getArguments()[0])})}return s},Gc=e=>{for(const t of qc){const s=E(e,t);if(!_(s))continue;const n=new Wt({compilerOptions:{allowJs:!0},skipFileDependencyResolution:!0,skipLoadingLibFiles:!0,useInMemoryFileSystem:!0}).createSourceFile(t,Qe(s,"utf8")),i=[];for(const o of k(n,d.CallExpression))P(o.getExpression())===Ks&&i.push({callee:Ks,file:t,line:o.getStartLineNumber(),...Ft(o.getArguments()[0])});return i}return[]},Yc=(e,t)=>{const s=[];for(const{displayPath:n,filePath:i}of Xe(t)){const o=e.getSourceFile(i)??e.addSourceFileAtPath(i);s.push(...Hc(o,n))}return s.push(...Gc(Ut(t))),s},zs="ctx.containers.",Qc=e=>{if(!e.startsWith(zs))return!1;const t=e.slice(zs.length);return t.length>0&&!t.includes(".")},Xc=(e,t)=>nt(e,t,{argIndex:0,matchReceiver:Qc,methods:new Set(["get"])}),Jc=new Set(["allow","deny","setAllowed"]),Zc=e=>{const t=e.getArguments()[0];if(!t||!r.isObjectLiteralExpression(t))return!1;const s=U(t,"enableInternet");return s!==void 0&&r.isPropertyAssignment(s)&&r.isTrueLiteral(s.getInitializerOrThrow())},el=(e,t)=>{const s=e.getExpression();if(!(!r.isPropertyAccessExpression(s)||s.getName()!=="start"||!Zc(e)))return{detail:"enableInternet: true",scope:x(e),file:t,kind:"enable_internet",line:e.getStartLineNumber()}},tl=(e,t)=>{const s=e.getExpression();if(!r.isPropertyAccessExpression(s)||!Jc.has(s.getName()))return;const n=s.getExpression();if(!(!r.isPropertyAccessExpression(n)||n.getName()!=="egress"))return{detail:s.getName(),scope:x(e),file:t,kind:"egress_relaxation",line:e.getStartLineNumber()}},sl=(e,t)=>el(e,t)??tl(e,t),nl=(e,t)=>T(e,t,sl),il=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||t.getName()!=="count")return;const s=t.getExpression();if($(s)){const n=e.getArguments()[0];return n&&r.isStringLiteral(n)?n.getLiteralText():""}return r.isPropertyAccessExpression(s)&&$(s.getExpression())?s.getName():void 0},rl=e=>{const t=e.getExpression(),s=r.isPropertyAccessExpression(t)?t.getExpression():void 0;return e.getArguments()[s!==void 0&&$(s)?1:0]},ol=new Set(["baseWhere","relationBaseWhere","restrictsCounts","where"]),al=e=>{if(e===void 0||!r.isObjectLiteralExpression(e))return;const t=[];for(const n of e.getProperties()){if(!r.isPropertyAssignment(n)&&!r.isShorthandPropertyAssignment(n))return;t.push(n.getName())}return t.length>0&&t.every(n=>ol.has(n))||t.some(n=>n==="AND"||n==="OR"||n==="NOT")?void 0:t},cl=(e,t,s)=>{const n=new Map(s.map(i=>[i.name,i.aggregateIndexed===!0]));return T(e,t,(i,o)=>{const a=il(i);if(a===void 0)return;const c=al(rl(i));return{file:o,indexed:n.get(a)!==!1,...c===void 0?{}:{filterFields:c},line:i.getStartLineNumber(),scope:x(i),table:a}})},ll=new Set(["defineExportSink","r2Sink","webhookExportSink"]),dl=e=>{const t=e.getExpression();if(!r.isIdentifier(t))return;const s=t.getText();return ll.has(s)?s:void 0},ul=e=>{const t=[],s=[];for(const n of e.getProperties()){if(r.isSpreadAssignment(n))return{analyzable:!1,emptyKeys:[],presentKeys:[]};if(r.isPropertyAssignment(n)){const i=S(n);t.push(i);const o=n.getInitializer();o&&r.isStringLiteral(o)&&o.getLiteralText()===""&&s.push(i);continue}(r.isShorthandPropertyAssignment(n)||r.isMethodDeclaration(n)||r.isGetAccessorDeclaration(n))&&t.push(S(n))}return{analyzable:!0,emptyKeys:s,presentKeys:t}},fl=(e,t)=>{const s=[];for(const{displayPath:n,filePath:i}of Xe(t)){const o=e.getSourceFile(i)??e.addSourceFileAtPath(i);for(const a of k(o,d.CallExpression)){const c=dl(a);if(c===void 0)continue;const l=a.getArguments()[0],u=l&&r.isObjectLiteralExpression(l)?ul(l):{analyzable:!1,emptyKeys:[],presentKeys:[]};s.push({analyzable:u.analyzable,emptyKeys:u.emptyKeys,factory:c,file:n,line:a.getStartLineNumber(),presentKeys:u.presentKeys})}}return s},gl=new Map([["dbRateLimit",2],["rateLimit",2],["verifyTurnstileMiddleware",0]]),pl=new Set(["dbRateLimit","rateLimit"]),ml=e=>{const t=Ln(e);if(!t)return!1;const s=U(t,"failOpen");return s!==void 0&&r.isPropertyAssignment(s)&&s.getInitializer()?.getKind()===d.TrueKeyword},hl=(e,t)=>{const s=P(e.getExpression());if(s===void 0)return;const n=gl.get(s);if(n!==void 0)return{callee:s,scope:x(e),failOpen:ml(e.getArguments()[n]),file:t,limitName:pl.has(s)?Fn(e):"",line:e.getStartLineNumber()}},vl=(e,t)=>T(e,t,hl),El=e=>{const t=e.getInitializer();if(!t||!r.isCallExpression(t))return;const s=te(t);if(s?.kind!=="query")return;const n=br(t,s.receiver);return n?{exportName:H(e)??e.getName(),handler:n}:void 0},$s=e=>{const t=e.getParent();return t&&r.isPropertyAccessExpression(t)&&t.getExpression()===e?t:void 0},xl=e=>{const t=$s(e);if(!t)return"ctx.flags";if(t.getName()==="details"){const s=$s(t);return s?`ctx.flags.details.${s.getName()}`:"ctx.flags.details"}return`ctx.flags.${t.getName()}`},Sl=(e,t)=>{const s=[];for(const n of et(e.handler,"flags"))s.push({callee:xl(n),exportName:e.exportName,file:t,line:n.getStartLineNumber()});return s},Al=(e,t)=>{const s=[];for(const n of X(e)){const i=El(n);i&&s.push(...Sl(i,t))}return s},yl=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Al(i,w(t,n)))}return s},bl=e=>!r.isPropertyAccessExpression(e)||e.getName()!=="boolean"?!1:Y(e.getExpression(),["flags"]),Nl=e=>{if(e?.getKind()===d.TrueKeyword)return!0;if(e?.getKind()===d.FalseKeyword)return!1},Pl=(e,t)=>{if(!bl(e.getExpression()))return;const[s,n]=e.getArguments();if(!s||!(r.isStringLiteral(s)||r.isNoSubstitutionTemplateLiteral(s)))return;const i=s.getLiteralValue(),o=Nl(n);if(!(i.length===0||o===void 0))return{defaultValue:o,scope:x(e),file:t,key:i,line:e.getStartLineNumber()}},wl=(e,t)=>T(e,t,Pl),Il=e=>{const t=e.getExpression();return r.isPropertyAccessExpression(t)&&t.getName()==="withGeoIndex"},Tl=e=>{const t=e.getArguments()[0];return t&&r.isStringLiteral(t)?t.getLiteralText():""},Cl=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of k(i,d.CallExpression))Il(a)&&s.push({file:o,indexName:Tl(a),line:a.getStartLineNumber()})}return s},Pe=e=>e!==void 0&&(r.isArrowFunction(e)||r.isFunctionExpression(e))?e:void 0,ni=e=>{const t=e.getArguments()[0],s=Pe(t);if(s!==void 0)return s;if(t===void 0||!r.isObjectLiteralExpression(t))return;const n=U(t,"handler");return n!==void 0&&r.isPropertyAssignment(n)?Pe(n.getInitializer()):void 0},Ol=new Set(["delete","get","head","options","patch","post","put"]),kl=new Set(["handler","stream"]),Rl=new Set(["runAction","runMutation"]),Fl=new Set(["delete","insert","insertManyUnsafe","patch","patchIf","replace"]),we=(e,t)=>e!==void 0&&r.isIdentifier(e)&&e.getText()===t,ii=(e,t)=>{if(!(e===void 0||!r.isObjectBindingPattern(e))){for(const s of e.getElements())if(le(s)===t){const i=s.getNameNode();return r.isIdentifier(i)?i.getText():void 0}}},Bs=(e,t)=>{const s=e.getParameters()[0]?.getNameNode();if(s!==void 0)return t?r.isIdentifier(s)?s.getText():void 0:ii(s,"ctx")},Vs=(e,t)=>{const s=e.getParameters()[t?1:0]?.getNameNode();return t?s!==void 0&&r.isIdentifier(s)?s.getText():void 0:ii(s,"request")},Us=(e,t)=>{const s=e.getBody(),n=s.getDescendantsOfKind(d.CallExpression);r.isCallExpression(s)&&n.unshift(s);for(const i of n){const o=i.getExpression();if(!r.isPropertyAccessExpression(o))continue;const a=o.getName(),c=o.getExpression();if(Rl.has(a)&&we(c,t))return a;if(Fl.has(a)&&r.isPropertyAccessExpression(c)&&c.getName()==="db"&&we(c.getExpression(),t))return`db.${a}`}},Ws=(e,t)=>{const s=e.getBody();for(const n of s.getDescendantsOfKind(d.PropertyAccessExpression))if(n.getName()==="auth"&&we(n.getExpression(),t))return!0;for(const n of s.getDescendantsOfKind(d.VariableDeclaration)){const i=n.getNameNode();if(!(!r.isObjectBindingPattern(i)||!we(n.getInitializer(),t))){for(const o of i.getElements())if(le(o)==="auth")return!0}}return!1},Ll=/signature|hmac|digest|(?:^|[_-])sig(?:[_-]|$)/i,Dl=(e,t)=>{const s=e.getExpression();if(!r.isPropertyAccessExpression(s)||s.getName()!=="get"&&s.getName()!=="has")return!1;const n=s.getExpression();return r.isPropertyAccessExpression(n)&&n.getName()==="headers"&&we(n.getExpression(),t)},Ml=e=>[...r.isStringLiteral(e)?[e.getLiteralText()]:[],...e.getDescendantsOfKind(d.StringLiteral).map(t=>t.getLiteralText())],ri=(e,t)=>{const s=e.getVariableDeclaration(t)?.getInitializer();return s===void 0?[]:Ml(s)},_l=(e,t)=>{const s=e.getText();for(let n=e.getParent();n!==void 0;n=n.getParent()){if(!r.isArrowFunction(n)&&!r.isFunctionExpression(n)||!n.getParameters().some(c=>c.getName()===s))continue;const i=n.getParent();if(!r.isCallExpression(i))return[];const o=i.getExpression();if(!r.isPropertyAccessExpression(o))return[];const a=o.getExpression();return r.isIdentifier(a)?ri(t,a.getText()):[]}return[]},Kl=e=>{const t=e.getArguments()[0];if(t===void 0)return[];if(r.isStringLiteral(t))return[t.getLiteralText()];if(!r.isIdentifier(t))return[];const s=e.getSourceFile(),n=ri(s,t.getText());return n.length>0?n:_l(t,s)},qs=(e,t)=>{if(t===void 0)return!1;const s=e.getBody(),n=s.getDescendantsOfKind(d.CallExpression);return r.isCallExpression(s)&&n.unshift(s),n.some(i=>Dl(i,t)&&Kl(i).some(o=>Ll.test(o)))},zl=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||!kl.has(t.getName()))return;let s=t.getExpression();for(;r.isCallExpression(s);){const n=s.getExpression();if(!r.isPropertyAccessExpression(n))return;const i=n.getName();if(Ol.has(i)){const o=n.getExpression();return r.isIdentifier(o)&&o.getText()==="httpRoute"?i.toUpperCase():void 0}s=n.getExpression()}},$l=(e,t)=>{const s=e.getExpression();if(r.isIdentifier(s)&&s.getText()==="httpAction"){const c=Pe(e.getArguments()[0]),l=c&&Bs(c,!0);if(!c||l===void 0||qs(c,Vs(c,!0)))return;const u=Us(c,l);return u===void 0?void 0:{scope:x(e),file:t,kind:"httpAction",line:e.getStartLineNumber(),readsAuth:Ws(c,l),sideEffect:u}}const n=zl(e);if(n===void 0)return;const i=Pe(e.getArguments()[0]),o=i&&Bs(i,!1);if(!i||o===void 0||qs(i,Vs(i,!1)))return;const a=Us(i,o);return a===void 0?void 0:{scope:x(e),file:t,kind:"httpRoute",line:e.getStartLineNumber(),method:n,readsAuth:Ws(i,o),sideEffect:a}},Bl=(e,t)=>T(e,t,$l),Vl=new Set(["btoa","encodeURI","encodeURIComponent","isSafeHeaderValue","Number","parseFloat","parseInt"]),Ul=new Set(["append","set"]),oi=e=>e!==void 0&&(r.isStringLiteral(e)||r.isNoSubstitutionTemplateLiteral(e))?e.getLiteralText():"",js=(e,t)=>(r.isCallExpression(e)?[e,...e.getDescendantsOfKind(d.CallExpression)]:e.getDescendantsOfKind(d.CallExpression)).some(n=>Vl.has(P(n.getExpression())??"")&&_e(n,t)),Wl=(e,t)=>{if(js(e,t))return!0;const s=Q(e);return s!==void 0&&js(s,t)},Lt=(e,t)=>ja(e,t)&&!Wl(e,t),ql=e=>{if(r.isPropertyAccessExpression(e)&&e.getName()==="headers")return!0;const t=Q(e);return t!==void 0&&r.isNewExpression(t)&&P(t.getExpression())==="Headers"},We=e=>{if(e===void 0)return;if(r.isObjectLiteralExpression(e))return e;const t=Q(e);return t!==void 0&&r.isObjectLiteralExpression(t)?t:void 0},ts=(e,t,s)=>{for(const n of e.getProperties())if(r.isPropertyAssignment(n)){const i=n.getInitializer();i!==void 0&&Lt(i,s.requestName)&&s.rows.push({scope:s.scope,file:s.relativePath,headerName:oi(n.getNameNode()),line:i.getStartLineNumber(),via:t})}else if(r.isShorthandPropertyAssignment(n)){const i=n.getNameNode();Lt(i,s.requestName)&&s.rows.push({scope:s.scope,file:s.relativePath,headerName:S(n),line:i.getStartLineNumber(),via:t})}else if(r.isSpreadAssignment(n)){const i=We(n.getExpression());i!==void 0&&ts(i,t,s)}},ai=(e,t)=>{const s=We(e);if(s===void 0)return;const n=U(s,"headers");if(n===void 0||!r.isPropertyAssignment(n))return;const i=We(n.getInitializer());i!==void 0&&ts(i,"response-init",t)},jl=(e,t)=>{const s=P(e.getExpression());if(s==="Response")ai(e.getArguments()[1],t);else if(s==="Headers"){const n=We(e.getArguments()[0]);n!==void 0&&ts(n,"headers-ctor",t)}},Hl=(e,t)=>{const s=e.getExpression();if(!r.isPropertyAccessExpression(s))return;const n=s.getName(),i=s.getExpression();if(n==="json"&&r.isIdentifier(i)&&i.getText()==="Response"){ai(e.getArguments()[1],t);return}if(Ul.has(n)&&ql(i)){const o=e.getArguments()[1];o!==void 0&&Lt(o,t.requestName)&&t.rows.push({scope:t.scope,file:t.relativePath,headerName:oi(e.getArguments()[0]),line:o.getStartLineNumber(),via:n==="set"?"headers-set":"headers-append"})}},Gl=(e,t)=>{for(const s of e.getDescendantsOfKind(d.NewExpression))jl(s,t);for(const s of e.getDescendantsOfKind(d.CallExpression))Hl(s,t)},Yl=(e,t)=>{const s=e.getExpression();if(!r.isIdentifier(s)||s.getText()!=="httpAction")return[];const n=Pe(e.getArguments()[0]);if(n===void 0)return[];const i=n.getParameters()[1];if(i===void 0)return[];const o=i.getNameNode();if(!r.isIdentifier(o))return[];const a=[];return Gl(n,{scope:x(e),relativePath:t,requestName:o.getText(),rows:a}),a},Ql=(e,t)=>{const s=[];for(const n of k(e,d.CallExpression))s.push(...Yl(n,t));return s},Xl=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Ql(i,w(t,n)))}return s},ci="identity.ts",Jl=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineIdentity";for(const s of t.getDeclarations())if(r.isImportSpecifier(s))return tt(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineIdentity":!1;return!1},Zl=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!r.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(d.ImportDeclaration);return n!==void 0&&tt(n.getModuleSpecifierValue())}return!1},ed=e=>{if(r.isIdentifier(e))return Jl(e);if(r.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineIdentity"&&r.isIdentifier(t)&&Zl(t)}return!1},td=e=>{const t=[];for(const s of e.getVariableDeclarations()){const n=s.getInitializer();if(n?.getKind()!==d.CallExpression||!ed(n.getExpression()))continue;const o=s.getNameNode();if(!r.isIdentifier(o)){if(s.getVariableStatement()?.hasExportKeyword()!==!0)continue;throw ue(o,"defineIdentity exports must be plain named exports (no destructuring)")}const a=Ht(s,"member");a!==void 0&&t.push({exportName:a})}return t},sd=(e,t)=>{const s=E(t,ci);if(!_(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),i=td(n);if(i.length!==0){if(i.length>1)throw ue(n,`lunora/identity.ts declares ${i.length.toString()} defineIdentity() contracts (${i.map(o=>o.exportName).join(", ")}); exactly one is allowed`);return i[0]}},nd=new Set(["auth","context.auth"]),id="userId",rd=e=>{const t=new Set;for(const s of e.getProperties()){if(r.isSpreadAssignment(s))return;(r.isPropertyAssignment(s)||r.isShorthandPropertyAssignment(s)||r.isMethodDeclaration(s))&&t.add(S(s))}return t},od=(e,t)=>{const s=E(t,ci);if(!_(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const i of n.getDescendantsOfKind(d.CallExpression)){if(P(i.getExpression())!=="defineIdentity")continue;const[o]=i.getArguments();return o&&r.isObjectLiteralExpression(o)?rd(o):void 0}},Hs=e=>{if(e===void 0||!r.isPropertyAccessExpression(e)||e.getName()!=="identity")return;const t=e.getExpression();return nd.has(t.getText())||Y(t,["auth"])?e:void 0},ad=e=>{if(r.isPropertyAccessExpression(e)&&Hs(e.getExpression())!==void 0)return e.getName();if(r.isElementAccessExpression(e)&&Hs(e.getExpression())!==void 0){const t=e.getArgumentExpression();return t&&r.isStringLiteral(t)?t.getLiteralValue():void 0}},Gs=(e,t,s)=>{const n=ad(e);return n===void 0?void 0:{declared:n===id||s.has(n),file:t,key:n,line:e.getStartLineNumber(),scope:x(e)}},cd=(e,t)=>{const s=od(e,t);return s===void 0?[]:[...ie(e,t,d.PropertyAccessExpression,(n,i)=>Gs(n,i,s)),...ie(e,t,d.ElementAccessExpression,(n,i)=>Gs(n,i,s))]},ld=(e,t)=>{if(P(e.getExpression())!=="buildImageDeliveryUrl")return;const s=e.getArguments()[0];if(!s)return;const n=F(s,"key");if(!(!n||!j(n)||de(n)))return{scope:x(e),file:t,line:e.getStartLineNumber()}},dd=(e,t)=>T(e,t,ld),ud=new Set(["delete","get","getRaw","getWithMetadata","put"]),fd=(e,t,s=[])=>{const n=nt(e,t,{argIndex:0,matchReceiver:i=>i==="ctx.kv"||i.startsWith("ctx.kv."),methods:ud});return Gt(n,s)},gd=new Set(["queue","send"]),Ys=new Set(["bcc","cc","to"]),pd=e=>{if(!r.isPropertyAccessExpression(e))return;const t=e.getName();if(!gd.has(t))return;const s=e.getExpression();return Y(s,["mail"])||Y(s,["email"])?t:void 0},md=e=>r.isObjectLiteralExpression(e)?e.getProperties().some(t=>{if(r.isShorthandPropertyAssignment(t)){const n=t.getNameNode();return Ys.has(S(t))&&j(n)&&!de(n)}if(!r.isPropertyAssignment(t)||!Ys.has(S(t)))return!1;const s=t.getInitializer();return s!==void 0&&j(s)&&!de(s)}):!1,hd=(e,t)=>{const s=pd(e.getExpression());if(s===void 0)return;const n=e.getArguments()[0];if(!(!n||!md(n)))return{scope:x(e),file:t,line:e.getStartLineNumber(),method:s}},vd=(e,t)=>T(e,t,hd),Ed=(e,t,s)=>{const n=e.getArguments()[0];if(!n||!r.isObjectLiteralExpression(n))return[];const i=[];for(const o of n.getProperties()){const a=Ue(o);if(a===void 0||!r.isPropertyAssignment(o))continue;const c=o.getInitializer();if(!(!c||!r.isObjectLiteralExpression(c)))for(const l of c.getProperties()){const u=Ue(l);if(u===void 0)continue;const f=Un(l);f!=="custom"&&i.push({column:u,exportName:t,file:s,line:l.getStartLineNumber(),strategy:f,table:a})}}return i},xd=(e,t)=>{if(!r.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&r.isCallExpression(s)?te(s):void 0;return n?.receiver?Qt(n.receiver).flatMap(i=>Ed(i,H(e)??e.getName(),t)):[]},Sd=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of X(i))s.push(...xd(a,o))}return s},Ad=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||t.getName()!=="replace")return!1;const s=t.getExpression();return $(s)},yd=e=>{const t=e.getArguments()[0];if(t===void 0||!r.isObjectLiteralExpression(t))return;const s=U(t,"server");if(s!==void 0)return r.isPropertyAssignment(s)?s.getInitializer():s},bd=e=>{if(!e.isExported())return;const t=e.getInitializer();if(t?.getKind()!==d.CallExpression)return;const s=t;return Hr(s.getExpression())?s:void 0},Nd=e=>{const t=bd(e),s=t===void 0?void 0:yd(t);if(s===void 0)return[];const n=e.getNameNode(),i=r.isIdentifier(n)?H(e)??n.getText():"";return s.getDescendantsOfKind(d.CallExpression).filter(o=>Ad(o)).map(o=>({exportName:i,file:"lunora/mutators.ts",line:o.getStartLineNumber()}))},Pd=e=>e.getVariableDeclarations().flatMap(t=>Nd(t)),wd=(e,t)=>{const s=E(t,jr);if(!_(s))return[];const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);return Pd(n)},Id=new Set(["delete","get","patch"]),Td=new Set(["accountId","authorId","companyId","createdBy","createdById","customerId","groupId","memberId","organizationId","orgId","ownerId","projectId","teamId","tenantId","userId","workspaceId"]),Cd=new Set(["auth","identity","session","user"]),Od=new Set([d.EqualsEqualsEqualsToken,d.EqualsEqualsToken,d.ExclamationEqualsEqualsToken,d.ExclamationEqualsToken]),kd=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||t.getName()!=="normalizeId"||!$(t.getExpression()))return;const s=e.getArguments()[0];return s&&r.isStringLiteral(s)?s.getLiteralText():""},Rd=e=>{let t=e,s=t.getParent();for(;s!==void 0&&(r.isAsExpression(s)||r.isParenthesizedExpression(s)||r.isNonNullExpression(s));)t=s,s=t.getParent();if(s===void 0||!r.isVariableDeclaration(s))return;const n=s.getNameNode();return r.isIdentifier(n)?n.getText():void 0},Fd=(e,t)=>e.getDescendantsOfKind(d.Identifier).some(s=>s.getText()===t),Ld=e=>r.isThrowStatement(e)||r.isReturnStatement(e)||e.getDescendantsOfKind(d.ThrowStatement).length>0||e.getDescendantsOfKind(d.ReturnStatement).length>0,Dd=(e,t)=>e.getDescendantsOfKind(d.IfStatement).some(s=>Fd(s.getExpression(),t)&&Ld(s.getThenStatement())),Md=(e,t)=>{for(const s of e.getDescendantsOfKind(d.CallExpression)){const n=s.getExpression();if(!r.isPropertyAccessExpression(n))continue;const i=n.getName();if(!Id.has(i))continue;const o=n.getExpression(),a=$(o);if(!(a||r.isPropertyAccessExpression(o)&&$(o.getExpression())))continue;const l=a&&i==="get"?2:1;if(s.getArguments().slice(0,l).some(f=>r.isIdentifier(f)&&f.getText()===t))return i}},_d=e=>e.getDescendantsOfKind(d.CallExpression).some(t=>t.getArguments().some(s=>Yt(Je(s))!==void 0)),Kd=e=>e.getDescendantsOfKind(d.BinaryExpression).some(t=>Od.has(t.getOperatorToken().getKind())?r.isPropertyAccessExpression(t.getLeft())||r.isPropertyAccessExpression(t.getRight()):!1),zd=e=>{for(const t of e.getDescendantsOfKind(d.Identifier))if(Td.has(t.getText()))return!0;return[...Cd].some(t=>et(e,t).length>0)?!0:_d(e)||Kd(e)},$d=(e,t)=>{if(!r.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!r.isCallExpression(s))return[];const n=te(s);if(n?.kind!=="query"&&n?.kind!=="mutation")return[];const i=ni(s);if(i===void 0)return[];const o=n.receiver!==void 0&&$n(n.receiver,"use","rls"),a=zd(i),c=new Set,l=[];for(const u of i.getDescendantsOfKind(d.CallExpression)){const f=kd(u);if(f===void 0)continue;const g=Rd(u);if(g===void 0||c.has(g)||!Dd(i,g))continue;const m=Md(i,g);m!==void 0&&(c.add(g),l.push({exportName:H(e)??e.getName(),file:t,line:u.getStartLineNumber(),mentionsOwnership:a,sinkMethod:m,table:f,usesRls:o,visibility:n.visibility}))}return l},Bd=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of X(i))s.push(...$d(a,o))}return s},li=(e,t)=>{const s=r.isIdentifier(e)&&t!==void 0?D(e):void 0;return s===void 0||t===void 0?!1:s.compilerNode===t.compilerNode?r.isIdentifier(t.getNameNode()):r.isBindingElement(s)&&s.getFirstAncestorByKind(d.Parameter)?.compilerNode===t.compilerNode},Vd=e=>{const t=I(e),s=t.getParent();return(r.isPropertyAccessExpression(s)||r.isElementAccessExpression(s))&&s.getExpression()===t&&!Ze(s)},Ud=e=>{const t=I(e).getParent();return r.isVariableDeclaration(t)&&r.isObjectBindingPattern(t.getNameNode())},Wd=e=>{const s=I(e).getParent();if(r.isSpreadAssignment(s)||r.isSpreadElement(s)){const n=s.getParent();return(r.isObjectLiteralExpression(n)||r.isArrayLiteralExpression(n))&&!Ze(n)}return r.isTemplateSpan(s)&&!r.isTaggedTemplateExpression(s.getParent().getParent())},qe=e=>{const t=D(e);return t===void 0||Cr(t.getSourceFile())},Dt=(e,t)=>{const s=I(e),n=s.getParent();if(!r.isCallExpression(n))return!1;const i=n.getArguments().indexOf(s),o=h(n.getExpression());if(i===-1||o===void 0)return!1;if(r.isIdentifier(o))return o.getText()==="structuredClone"&&qe(o);if(li(Je(o),t))return!(r.isPropertyAccessExpression(o)&&Kn.has(o.getName()))||r.isExpressionStatement(I(r.isAwaitExpression(n.getParent())?n.getParentOrThrow():n).getParent());if(!r.isPropertyAccessExpression(o))return!1;const a=o.getExpression();if(!r.isIdentifier(a)||!qe(a))return!1;const c=a.getText(),l=o.getName();switch(c){case"console":return!0;case"JSON":return l==="stringify";case"Object":return["entries","freeze","isFrozen","keys","values"].includes(l)||l==="assign"&&i>0;default:return!1}},Ke={kind:"opaque"},qd={kind:"unreached"},jd=e=>{const t=e.getSymbol()?.getDeclarations()??[],s=t.filter(o=>r.isFunctionDeclaration(o)&&o.hasBody()),[n]=s;return t.every(o=>r.isFunctionDeclaration(o)&&o.getSourceFile()===e.getSourceFile())&&s.length===1&&r.isFunctionDeclaration(n)?n:void 0},Mt=e=>{const t=h(e);if(r.isArrowFunction(t)||r.isFunctionExpression(t))return t;const s=r.isIdentifier(t)?D(t):void 0;if(s?.getSourceFile()!==e.getSourceFile())return;if(r.isFunctionDeclaration(s)){const i=jd(s);return i===void 0||jt(i)?void 0:i}const n=re(s)?h(s.getInitializer()):void 0;return r.isArrowFunction(n)||r.isFunctionExpression(n)?n:void 0},di=(e,t,s)=>{const n=t.getArguments(),i=n.indexOf(s),o=i===-1||n.slice(0,i+1).some(l=>r.isSpreadElement(l))||e.getDescendantsOfKind(d.Identifier).some(l=>l.getText()==="arguments"),a=e.getParameters(),c=a[i];return o?Ke:c===void 0?a.some(l=>l.isRestParameter())?Ke:qd:c.isRestParameter()?Ke:{kind:"parameter",parameter:c}},Hd=e=>{const t=I(e),s=t.getParent();if(!r.isCallExpression(s)||s.getExpression()===t)return;const n=Mt(s.getExpression());return n===void 0?Ke:di(n,s,t)},Gd=new Set(["__defineGetter__","__defineSetter__","__proto__"]),Yd=e=>r.isForInStatement(e)?e.getExpression():r.isConditionalExpression(e)?e.getCondition():r.isElementAccessExpression(e)?e.getArgumentExpression():void 0,ui=e=>{const t=I(e),s=t.getParent();if(r.isIfStatement(s)||r.isWhileStatement(s)||r.isDoStatement(s)||r.isSwitchStatement(s)||r.isCaseClause(s)||r.isTypeOfExpression(s)||r.isVoidExpression(s)||r.isComputedPropertyName(s))return!0;if(r.isTemplateSpan(s))return!r.isTaggedTemplateExpression(s.getParent().getParent());const n=Yd(s);if(n!==void 0)return y(n,t);if(r.isPrefixUnaryExpression(s))return s.getOperatorToken()!==d.PlusPlusToken&&s.getOperatorToken()!==d.MinusMinusToken;if(!r.isBinaryExpression(s))return!1;const i=s.getOperatorToken().getKind(),o=i>=d.FirstAssignment&&i<=d.LastAssignment,a=i===d.QuestionQuestionToken||i===d.BarBarToken||i===d.AmpersandAmpersandToken;return!o&&!a},Qd=4,fi=(e,t,s=0)=>{if(Tr(e))return!0;if(Vd(e)){const i=I(e).getParent(),o=r.isElementAccessExpression(i)?i.getArgumentExpression():void 0,a=r.isStringLiteral(o)?o.getLiteralValue():void 0,c=r.isPropertyAccessExpression(i)?i.getName():a;return c===void 0||!Gd.has(c)}if(Ud(e)||Wd(e)||ui(e)||Dt(e,t))return!0;const n=Hd(e);return n?.kind==="unreached"||n?.kind==="parameter"&&Xd(n.parameter,s+1)},Qs=new WeakMap,Xd=(e,t=0)=>{const s=e.getNameNode();if(!r.isIdentifier(s))return!0;const n=Qs.get(e.compilerNode);if(n!==void 0)return n;if(t>Qd)return!1;const o=(s.getSymbol()?.getDeclarations().length??0)===1&&e.getParentOrThrow().getDescendantsOfKind(d.Identifier).every(a=>a===s||a.getText()!==s.getText()||D(a)?.compilerNode!==e.compilerNode||fi(a,void 0,t));return(o||t===0)&&Qs.set(e.compilerNode,o),o},Xs=new WeakMap,Jd=(e,t)=>{const s=r.isFunctionExpression(e)?e.getNameNode():void 0;if(!r.isArrowFunction(e)&&e.getFirstDescendantByKind(d.ThisKeyword)!==void 0)return!0;const n=new Set([t.getName(),...s===void 0?[]:[s.getText()]]);return e.getDescendantsOfKind(d.Identifier).some(i=>{if(i===s||!n.has(i.getText()))return!1;const o=D(i)?.compilerNode;return o!==void 0&&(o===t.compilerNode||s!==void 0&&o===e.compilerNode)})},Zd=(e,t,s)=>{const{context:n,impl:i}=e,o=Xs.get(i.compilerNode);if(o!==void 0)return o;const a=t.getNameNode(),c=r.isIdentifier(a)?[a]:a.getDescendantsOfKind(d.BindingElement).flatMap(g=>{const m=g.getNameNode();return r.isIdentifier(m)?[m]:[]}),l=new Map(c.map(g=>[g.getText(),g.getParentOrThrow().compilerNode])),u=g=>r.isIdentifier(a)?fi(g,n):!Ze(g),f=!Jd(i,s)&&c.every(g=>(g.getSymbol()?.getDeclarations().length??0)===1)&&i.getDescendantsOfKind(d.Identifier).every(g=>{const m=g.getText();if(m==="arguments")return!1;const v=l.get(m);return v===void 0||c.includes(g)||D(g)?.compilerNode!==v?!0:u(g)});return Xs.set(i.compilerNode,f),f},Js=new WeakMap,eu=e=>{let t=Js.get(e.compilerNode);return t===void 0&&(t=new Map(e.getVariableDeclarations().flatMap(s=>{const n=Gr(s);return n===void 0?[]:[[n.compilerNode,s]]})),Js.set(e.compilerNode,t)),t},tu=e=>{const t=eu(e.getSourceFile()),s=e.getAncestors().find(l=>t.has(l.compilerNode)),n=s===void 0?void 0:t.get(s.compilerNode);if(s===void 0||n===void 0)return;const[i,o]=s.getParameters(),a=o===void 0||o.isRestParameter()?void 0:o,c={context:i,impl:s,mutatorName:H(n)??n.getName()};return a!==void 0&&Zd(c,a,n)?{...c,parameter:a,pristine:!0}:{...c,parameter:a,pristine:!1}},St="args",Se=e=>{const t=qt(e);if(t!==void 0){const c=h(t.object);return r.isIdentifier(c)&&c.getText()===St?t.member:void 0}if(!r.isIdentifier(e))return;const s=D(e);if(!r.isBindingElement(s)||s.getDotDotDotToken()!==void 0)return;const n=s.getParent();if(!r.isObjectBindingPattern(n))return;const i=n.getParent(),o=re(i)?h(i.getInitializer()):void 0;return r.isBindingElement(i)&&le(i)===St||r.isIdentifier(o)&&o.getText()===St?le(s):void 0},su=new Set(["auth","identity","user"]),_t=e=>{const t=i=>{const o=Yt(i);return o!==void 0&&o.length>0&&su.has(o[0]??"")},s=h(e)??e;if(t(s))return!0;const n=Q(s);return n!==void 0&&t(n)},gi=(e,t=2)=>{const s=new Set;for(const n of[e,...e.getDescendants()]){const i=Se(n);i!==void 0&&s.add(i);const o=t>0&&r.isIdentifier(n)?Q(n):void 0;if(o!==void 0)for(const a of gi(o,t-1))s.add(a)}return s},ze=e=>{const t=h(e)??e;if(!r.isBinaryExpression(t))return[];const s=t.getOperatorToken().getKind(),n=t.getLeft(),i=t.getRight();if(s===d.BarBarToken)return[...ze(n),...ze(i)];if(s===d.AmpersandAmpersandToken){const l=(u,f)=>{const g=Se(h(u)??u);return g===void 0?[]:ze(f).filter(m=>m===g)};return[...l(n,i),...l(i,n)]}if(s!==d.ExclamationEqualsEqualsToken&&s!==d.ExclamationEqualsToken)return[];const o=[],a=Se(h(n)??n),c=Se(h(i)??i);return a!==void 0&&_t(i)&&o.push(a),c!==void 0&&_t(n)&&o.push(c),o},nu=e=>{const t=h(e)??e;if(!r.isIdentifier(t))return!1;const s=t.getSymbol(),n=s?.getAliasedSymbol()?.getValueDeclaration()??s?.getValueDeclaration();if(!r.isVariableDeclaration(n))return!1;const i=h(n.getInitializer());return r.isCallExpression(i)&&Kr(i.getExpression(),"defineIdentityGuard")},iu=e=>{if(!nu(e.getExpression()))return[];const t=e.getArguments();return t.flatMap((s,n)=>{const i=Se(h(s)??s),o=t.some((a,c)=>c!==n&&_t(a));return i!==void 0&&o?[i]:[]})},ru=e=>{if(r.isThrowStatement(e))return!0;if(!r.isBlock(e))return!1;const t=e.getStatements().at(-1);return t!==void 0&&r.isThrowStatement(t)},ou=e=>r.isArrowFunction(e)||r.isFunctionExpression(e)||r.isFunctionDeclaration(e)||r.isMethodDeclaration(e),Zs=(e,t)=>{for(let s=e.getParent();s!==void 0;s=s.getParent()){if(s===t||s.compilerNode===t.compilerNode)return!0;if(!(r.isBlock(s)||r.isExpressionStatement(s)||r.isAwaitExpression(s)||r.isParenthesizedExpression(s)||r.isVariableStatement(s)||r.isVariableDeclarationList(s)||r.isVariableDeclaration(s)))return!1}return!1},au=e=>r.isAwaitExpression(e.getParent())||e.getType().isVoid(),cu=(e,t)=>{const s=new Set;for(const n of e.getDescendantsOfKind(d.IfStatement))if(n.getEnd()<=t&&Zs(n,e)&&ru(n.getThenStatement()))for(const i of ze(n.getExpression()))s.add(i);for(const n of e.getDescendantsOfKind(d.CallExpression))if(n.getEnd()<=t&&au(n)&&Zs(n,e))for(const i of iu(n))s.add(i);return s},lu=(e,t)=>{const s=gi(t);if(s.size===0)return!1;const n=e.getFirstAncestor(ou);if(n===void 0)return!1;const i=cu(n,e.getStart());return[...s].every(o=>i.has(o))},du=new Set(["at","concat","filter","find","findLast","flat","reverse","slice","sort","toReversed","toSorted"]),uu=new Map([["Array",new Set(["from","of"])],["Object",new Set(["entries","values"])]]),Kt=new Set(["catch","every","filter","finally","find","findIndex","findLast","findLastIndex","flatMap","forEach","map","reduce","reduceRight","some","sort","then"]),pi=e=>e.getNameNode().getDescendantsOfKind(d.BindingElement).filter(t=>r.isIdentifier(t.getNameNode())),fu=e=>{const t=I(e),s=t.getParent();if(r.isVariableDeclaration(s))return y(s.getInitializer(),t)?s:void 0;const n=r.isForOfStatement(s)&&s.getExpression()===t?s.getInitializer():void 0;return r.isVariableDeclarationList(n)?n.getDeclarations()[0]:void 0},gu=e=>{const t=fu(e);return t===void 0?void 0:r.isIdentifier(t.getNameNode())?r.isForOfStatement(t.getParent().getParent())||re(t)?[t]:void 0:pi(t)},Ae=e=>e.isUnion()?e.getUnionTypes().every(t=>Ae(t)):e.isIntersection()?e.getIntersectionTypes().some(t=>Ae(t)):!e.isAny()&&!e.isUnknown()&&!e.isObject()&&!e.isTypeParameter(),je=(e,t,s)=>{const n=r.isCallExpression(e)?h(e.getExpression()):void 0;return r.isPropertyAccessExpression(n)&&t.has(n.getName())&&(s===void 0||n.getExpression()===s)},$e=e=>{const t=h(e);if(!r.isArrowFunction(t)&&!r.isFunctionExpression(t))return;const s=t.getBody();return r.isBlock(s)?s.getDescendantsOfKind(d.ReturnStatement).filter(n=>n.getFirstAncestor(i=>r.isFunctionLikeDeclaration(i))===t).map(n=>n.getExpression()):[s]},pu=e=>{const t=r.isCallExpression(e)?h(e.getExpression()):void 0,s=r.isPropertyAccessExpression(t)?t.getExpression():void 0;return r.isPropertyAccessExpression(t)&&r.isIdentifier(s)&&uu.get(s.getText())?.has(t.getName())===!0&&qe(s)},mu=e=>{const t=It(e);if(!r.isArrowFunction(t)&&!r.isFunctionExpression(t))return;const s=I(t),n=s.getParent();return r.isCallExpression(n)&&n.getArguments().includes(s)&&je(n,zn)?n:void 0},hu=(e,t)=>{if(!(r.isPropertyAccessExpression(e)||r.isElementAccessExpression(e))||e.getExpression()!==t)return;const s=I(e),n=s.getParent();return!r.isCallExpression(n)||n.getExpression()!==s?e:je(n,du,t)?n:void 0},vu=(e,t)=>{if(r.isAwaitExpression(e))return e;if(r.isConditionalExpression(e))return e.getCondition()===t?void 0:e;const s=r.isBinaryExpression(e)?e.getOperatorToken().getKind():void 0;return s===d.QuestionQuestionToken||s===d.BarBarToken||s===d.AmpersandAmpersandToken?e:void 0},Eu=(e,t)=>{if(r.isArrayLiteralExpression(e))return e;const n=r.isSpreadElement(e)||r.isSpreadAssignment(e)||r.isShorthandPropertyAssignment(e)||r.isPropertyAssignment(e)&&y(e.getInitializer(),t)?e.getParent():void 0;return r.isArrayLiteralExpression(n)||r.isObjectLiteralExpression(n)?n:void 0},en=e=>{const t=I(e),s=t.getParent();if(s===void 0)return;const n=r.isCallExpression(s)&&s.getArguments().includes(t)&&pu(s);return hu(s,t)??vu(s,t)??Eu(s,t)??(n?s:mu(t))},xu=5e4,mi=()=>({inProgress:new Set,verdicts:new Map});class Su{cuts=0;work=0;reset(){this.work=0}cut(){return this.cuts+=1,!0}spend(){return this.work+=1,this.work>xu&&this.cut()}memoized(t,s,n){const i=n.verdicts.get(t);if(i!==void 0)return i;if(n.inProgress.has(t))return this.cuts+=1,!1;if(this.spend())return!0;const o=this.cuts;n.inProgress.add(t);let a;try{a=s()}finally{n.inProgress.delete(t)}return this.cuts===o&&n.verdicts.set(t,a),a}}const Au=8,yu=8;class bu{budget;scope;taint;verdicts=mi();constructor(t,s,n){this.scope=t,this.budget=s,this.taint=n}isCompromised(t){return this.flowHasCompromisingUse(t)&&!Ae(t.getType())}flowHasCompromisingUse(t){return this.budget.memoized(t.compilerNode,()=>{const s=this.budget.cuts,n=[],i=new Set,o=(c,l)=>{i.has(c.compilerNode)||(i.add(c.compilerNode),n.push({binding:c,hops:l}))};let a=!1;o(t,0);for(const c of n)if(a=(c.binding===t?void 0:this.verdicts.verdicts.get(c.binding.compilerNode))??this.visitBinding(c,t,o),a)break;if(!a&&this.budget.cuts===s)for(const c of i)this.verdicts.verdicts.set(c,!1);return a},this.verdicts)}visitBinding({binding:t,hops:s},n,i){const o=t.getNameNode();if(!r.isIdentifier(o)){for(const l of r.isParameterDeclaration(t)?pi(t):[])i(l,s);return!1}if(this.budget.spend())return!0;const a=(l,u)=>u&&s>=Au?this.budget.cut():(i(l,u?s+1:s),!1);return this.taint.referencesTo(t,o.getText()).some(l=>this.valueCompromises(I(l),!0,a,0))&&(t===n||!Ae(t.getType()))}valueCompromises(t,s,n,i){let o=t;for(let m=en(o);m!==void 0;m=en(o)){if(r.isCallExpression(m)&&this.callbackCompromises(m,n))return!0;o=I(m)}const a=o.getParent(),c=o===t&&s,l=()=>!c&&Ae(o.getType());if(Ze(o))return!c&&(!r.isBinaryExpression(a)||this.taint.isTaintedValue(a.getRight(),!1));const u=gu(o);if(u!==void 0)return u.some(m=>n(m,!0));const f=r.isPropertyAccessExpression(a)&&a.getExpression()===o?a.getParent():void 0;if(r.isCallExpression(f)&&f.getExpression()===a)return this.methodCallCompromises(f,n);const g=this.nestedReturningFunctionOf(o);return g!==void 0?this.resultCompromises(g,n,i)&&!l():this.positionCompromises(o,n)&&!l()}resultCompromises(t,s,n){const i=I(t).getParent();if(n>=yu)return this.budget.cut();if(r.isCallExpression(i))return i.getExpression()===I(t)?this.valueCompromises(i,!1,s,n+1):!je(i,Kt);const o=r.isFunctionDeclaration(t)?t:i,a=r.isFunctionDeclaration(o)||re(o)?o.getNameNode():void 0;return o===void 0||!r.isIdentifier(a)?!0:this.taint.referencesTo(o,a.getText()).some(c=>{const l=I(c),u=l.getParent();return!r.isCallExpression(u)||u.getExpression()!==l||this.valueCompromises(u,!1,s,n+1)})}methodCallCompromises(t,s){return t.getArguments().filter(i=>$e(i)===void 0).some(i=>this.taint.isTaintedValue(i,!1))||this.callbackCompromises(t,s)}callbackCompromises(t,s){const n=je(t,Kt)?t.getArguments()[0]:void 0;if(n===void 0)return!1;const i=Mt(n);return i!==void 0&&this.taint.isInImpl(i)?i.getParameters().some(o=>s(o,!1)):this.taint.isTaintedValue(n,!1)}positionCompromises(t,s){const n=t.getParent();if(r.isCallExpression(n)&&n.getArguments().includes(t))return this.argumentCompromises(n,t,s);const i=r.isSpreadElement(n)?n.getParent():void 0;if(n!==void 0&&r.isCallExpression(i))return!Dt(n,this.scope.context)&&this.isOpaqueCallTainted(i.getExpression(),i.getArguments(),n);if(r.isNewExpression(n))return this.isOpaqueCallTainted(n.getExpression(),n.getArguments(),t);if(r.isTemplateSpan(n)){const o=n.getParent(),a=o.getParent(),c=o.getTemplateSpans().map(l=>l.getExpression());return r.isTaggedTemplateExpression(a)&&this.isOpaqueCallTainted(a.getTag(),c,t)}return!this.isReadPosition(t)}argumentCompromises(t,s,n){if(Dt(s,this.scope.context))return!1;const i=Mt(t.getExpression()),o=i===void 0?void 0:di(i,t,s);return o?.kind==="unreached"?!1:o?.kind==="parameter"&&i!==void 0&&this.taint.isInImpl(i)?n(o.parameter,!1):this.isOpaqueCallTainted(t.getExpression(),t.getArguments(),s)}isReadPosition(t){const s=t.getParent();return s===void 0||r.isExpressionStatement(s)||r.isForStatement(s)||r.isElementAccessExpression(s)||ui(t)||y(It(t),this.scope.impl)}isOpaqueCallTainted(t,s,n){const i=!r.isIdentifier(h(n));return this.taint.isTaintedValue(t,!1)||s.some(o=>(o!==n||i)&&this.taint.isTaintedValue(o,!1))}nestedReturningFunctionOf(t){const s=It(t);return y(s,this.scope.impl)?void 0:s}}const Nu=new Set(["at","every","filter","finally","find","findIndex","findLast","findLastIndex","forEach","order","slice","some","sort","withIndex","withSearchIndex"]),Pu=e=>{const t=h(e);if(!r.isIdentifier(t))return r.isPropertyAccessExpression(t)||r.isElementAccessExpression(t);const s=D(t),n=r.isVariableDeclaration(s)?h(s.getInitializer()):void 0;return s===void 0||r.isFunctionDeclaration(s)||r.isParameterDeclaration(s)||r.isArrowFunction(n)||r.isFunctionExpression(n)},wu=new Set(["all","allSettled","any","race"]),tn=e=>r.isParameterDeclaration(e)?e:r.isBindingElement(e)?e.getFirstAncestorByKind(d.Parameter):void 0,At=8;class Iu{budget=new Su;referencesByDeclaration=new Map;referencesByName=new Map;scope;verdicts=mi();walk;variableDepth=0;queryDepth=0;constructor(t){this.scope=t,this.walk=new bu(t,this.budget,this);for(const s of t.impl.getDescendantsOfKind(d.Identifier)){const n=s.getText();this.referencesByName.set(n,[...this.referencesByName.get(n)??[],s])}}isTaintedValue(t,s){this.queryDepth===0&&this.budget.reset(),this.queryDepth+=1;try{return s&&this.isRootedInContext(t,At)?!1:(r.isIdentifier(t)?[t]:t.getDescendantsOfKind(d.Identifier)).some(i=>Or(i)&&this.isIdentifierTainted(i))}finally{this.queryDepth-=1}}isInImpl(t){const{impl:s}=this.scope;return t!==s&&s.getPos()<=t.getPos()&&t.getEnd()<=s.getEnd()}referencesTo(t,s){let n=this.referencesByDeclaration.get(s);if(n===void 0){n=new Map;for(const i of this.referencesByName.get(s)??[]){const o=D(i)?.compilerNode;o!==void 0&&n.set(o,[...n.get(o)??[],i])}this.referencesByDeclaration.set(s,n)}return(n.get(t.compilerNode)??[]).filter(i=>i.getParent()!==t)}flowsIntoTainted(t){if([t.getInitializer(),...t.getDescendantsOfKind(d.BindingElement).map(g=>g.getInitializer())].some(g=>g!==void 0&&this.isTaintedValue(g,!1)))return!0;const n=t.getParentOrThrow(),i=r.isFunctionLikeDeclaration(n)?n.getParameters().findIndex(g=>g.compilerNode===t.compilerNode):-1,o=I(n),a=o.getParent();if(i===-1)return!0;if(r.isCallExpression(a)){if(a.getExpression()===o)return this.isCallSiteTainted(a,i,t.isRestParameter());const g=h(a.getExpression());if(!r.isPropertyAccessExpression(g)||!Kt.has(g.getName()))return!0;const m=a.getArguments().filter(v=>v!==o);return this.isTaintedValue(g.getExpression(),!0)||m.some(v=>this.isTaintedValue(v,!1))}const c=r.isVariableDeclaration(a)&&re(a)?a:void 0,l=r.isFunctionDeclaration(n)?n:c,u=l?.getNameNode();if(l===void 0||!r.isIdentifier(u))return!0;const f=this.referencesTo(l,u.getText());return f.length===0||f.some(g=>{const m=I(g),v=m.getParent();return!r.isCallExpression(v)||v.getExpression()!==m||this.isCallSiteTainted(v,i,t.isRestParameter())})}isCallSiteTainted(t,s,n){const i=t.getArguments(),o=i.findIndex(c=>r.isSpreadElement(c)),a=c=>c===s||n&&c>s||o!==-1&&o<=s&&c>=o;return i.some((c,l)=>a(l)&&this.isTaintedValue(c,!1))}isContextRootedCombinator(t,s){const n=h(t.getExpression()),i=r.isPropertyAccessExpression(n)?n.getExpression():void 0,a=r.isPropertyAccessExpression(n)&&r.isIdentifier(i)&&i.getText()==="Promise"&&qe(i)&&wu.has(n.getName())?h(t.getArguments()[0]):void 0;if(r.isArrayLiteralExpression(a)){const f=a.getElements();return f.length>0&&f.every(g=>!r.isSpreadElement(g)&&this.isRootedInContext(g,s))}const c=r.isCallExpression(a)?h(a.getExpression()):void 0,l=r.isCallExpression(a)&&r.isPropertyAccessExpression(c)&&c.getName()==="map"?h(a.getArguments()[0]):void 0,u=l===void 0?void 0:$e(l);return u!==void 0&&u.length>0&&u.every(f=>f!==void 0&&this.isRootedInContext(f,s))}isIdentifierTainted(t){const s=t.getText();if(s==="arguments")return!0;const n=D(t),i=tn(n);if(i!==void 0)return this.isSource(i);if(s==="args")return!0;if(n===void 0||!this.isInImpl(n))return!1;if(r.isFunctionDeclaration(n))return this.budget.memoized(n.compilerNode,()=>this.isTaintedValue(n,!1),this.verdicts);if(r.isBindingElement(n)&&this.walk.isCompromised(n))return!0;const o=r.isBindingElement(n)?n.getFirstAncestorByKind(d.VariableDeclaration):n;return r.isVariableDeclaration(o)&&this.isVariableTainted(o)}callChainVerdict(t,s){if(this.isContextRootedCombinator(t,s))return!0;const n=h(t.getExpression()),i=r.isPropertyAccessExpression(n)?n.getName():void 0;return i!==void 0&&Kn.has(i)?!1:i!==void 0&&zn.has(i)?this.isCallbackResultServerScoped(t,s)?void 0:!1:t.getArguments().some(a=>$e(a)!==void 0)&&(i===void 0||!Nu.has(i))?!1:void 0}isCallbackResultServerScoped(t,s){const n=(i,o=[])=>{const a=Je(i),c=r.isIdentifier(a)?tn(D(a)):void 0;return c!==void 0&&o.includes(c)?!0:this.isRootedInContext(i,s)||!this.isTaintedValue(i,!1)};return t.getArguments().every(i=>{const o=$e(i);if(o===void 0)return!Pu(i)&&n(i);const a=h(i),c=r.isArrowFunction(a)||r.isFunctionExpression(a)?a.getParameters():[];return o.every(l=>l===void 0||n(l,c))})}isRootedInContext(t,s){const n=Nr(t,u=>this.callChainVerdict(u,s)),i=n.root;if(n.verdict!==void 0)return n.verdict;if(li(i,this.scope.context))return!0;const o=r.isIdentifier(i)?D(i):void 0,a=r.isBindingElement(o)?o.getFirstAncestorByKind(d.VariableDeclaration):o,c=re(a)&&this.isInImpl(a)?a.getInitializer():void 0,l=r.isBindingElement(o)?o:a;return s>0&&c!==void 0&&(r.isBindingElement(l)||r.isVariableDeclaration(l))&&!this.walk.isCompromised(l)&&this.isRootedInContext(c,s-1)}isSource(t){const{impl:s,parameter:n}=this.scope;return t.compilerNode===n?.compilerNode?!0:t.getParent()!==s&&this.isInImpl(t)&&(this.budget.memoized(t.compilerNode,()=>this.flowsIntoTainted(t),this.verdicts)||this.walk.isCompromised(t))}isVariableTainted(t){return this.budget.memoized(t.compilerNode,()=>{const s=t.getParent().getParent();if(r.isCatchClause(t.getParent())||this.walk.isCompromised(t))return!0;if(r.isForOfStatement(s)||r.isForInStatement(s))return this.isTaintedValue(s.getExpression(),!0);const n=t.getInitializer(),i=jt(t);if(n===void 0||i)return!0;if(this.isRootedInContext(n,At))return!1;if(this.variableDepth>=At)return this.budget.cut();this.variableDepth+=1;try{return this.isTaintedValue(n,!1)}finally{this.variableDepth-=1}},this.verdicts)}}const sn=new WeakMap,Tu=e=>{const t=sn.get(e.impl.compilerNode);if(t!==void 0)return t;const s=new Iu(e);return sn.set(e.impl.compilerNode,s),s},Cu=new Set(["accountId","authorId","createdBy","createdById","organizationId","orgId","ownerId","tenantId","updatedBy","userId","workspaceId"]),Ou=new Set(["insert","insertManyUnsafe","patch","replace"]),ku=e=>{if(!r.isPropertyAccessExpression(e))return;const t=e.getName();return Ou.has(t)&&Lr(e.getExpression())?t:void 0},Ru=(e,t)=>{if(t!=="insertManyUnsafe")return r.isObjectLiteralExpression(e)?[e]:[];if(!r.isArrayLiteralExpression(e))return[];const s=[];for(const n of e.getElements())r.isObjectLiteralExpression(n)&&s.push(n);return s},Fu=(e,t)=>{const s=qt(e);return s?.member===t?h(s.object):void 0},nn=(e,t)=>r.isIdentifier(e)&&D(e)?.compilerNode===t.compilerNode,hi=(e,t,s,n=1)=>{const i=Fu(e,s);if(i!==void 0)return nn(i,t);const o=r.isIdentifier(e)?D(e):void 0;if(r.isBindingElement(o)){const c=o.getParent(),l=c.getParent();return o.getDotDotDotToken()===void 0&&le(o)===s&&r.isObjectBindingPattern(c)&&(l.compilerNode===t.compilerNode||re(l)&&nn(h(l.getInitializer()),t))}const a=re(o)?o.getInitializer():void 0;return n>0&&a!==void 0&&hi(a,t,s,n-1)},zt=e=>{const t=h(e)??e;return r.isConditionalExpression(t)?[...zt(t.getWhenTrue()),...zt(t.getWhenFalse())]:[t]},Lu=(e,t,s)=>{const n=[],i=s===void 0?void 0:Tu(s);for(const o of e.getProperties()){let a,c;if(r.isPropertyAssignment(o)?(a=S(o),c=o.getInitializer()):r.isShorthandPropertyAssignment(o)&&(a=S(o),c=o.getNameNode()),a===void 0||c===void 0||!Cu.has(a))continue;const l=zt(c).filter(f=>i===void 0?j(f)&&!Dr(f):i.isTaintedValue(f,!0));if(l.length>0){const f=t.ownerField===a&&s?.pristine===!0&&hi(c,s.parameter,a),g=l.every(m=>lu(t.call,m));n.push({field:a,file:t.relativePath,line:t.call.getStartLineNumber(),method:t.method,scope:t.scope,...f&&{ownerScoped:!0},...g&&{guarded:!0}})}}return n},Du=(e,t,s)=>{const n=ku(e.getExpression()),i=n===void 0?void 0:e.getArguments()[1];if(n===void 0||i===void 0)return[];const o=Ru(i,n);if(o.length===0)return[];const a=x(e),c=tu(e),l={call:e,method:n,ownerField:c===void 0?void 0:s(c.mutatorName),relativePath:t,scope:a};return o.flatMap(u=>Lu(u,l,c))},Mu=(e,t,s=[],n=[])=>{const i=new Map(n.map(c=>[`${c.filePath}:${c.exportName}`,c.owner])),o=T(e,t,(c,l)=>Du(c,l,u=>i.get(`${l}:${u}`))),a=new Map(s.map(c=>[`${c.filePath}:${c.exportName}`,c.adminOnly===!0]));return Gt(o,s).map(c=>kr(c.scope)?.every(f=>a.get(`${c.file}:${f}`)===!0)===!0?{...c,adminOnly:!0}:c)},_u=new Set(["createAutumnAdapter","createDodoPaymentsAdapter","createPolarAdapter","createStripeAdapter"]),Ku=e=>e&&r.isNumericLiteral(e)?Number(e.getText()):void 0,zu=e=>{const t=U(e,"webhookToleranceSeconds");return t&&r.isPropertyAssignment(t)?Ku(t.getInitializer()):void 0},$u=(e,t)=>{const s=P(e.getExpression());if(s===void 0||!_u.has(s))return;const[n]=e.getArguments(),i=n&&r.isObjectLiteralExpression(n)?zu(n):void 0;return{callee:s,scope:x(e),file:t,line:e.getStartLineNumber(),...i===void 0?{}:{toleranceSeconds:i}}},Bu=(e,t)=>T(e,t,$u),Vu=new Map([["defineQueue",0],["defineSubscription",1],["defineWorkflow",0]]),Uu=e=>{const t=e.getExpression();return r.isIdentifier(t)?t.getText():void 0},Wu=(e,t)=>{const s=e.getArguments()[t];if(!s||!r.isObjectLiteralExpression(s))return;const n=U(s,"handler");if(n===void 0||!r.isPropertyAssignment(n))return;const i=n.getInitializer();if(i&&(r.isArrowFunction(i)||r.isFunctionExpression(i)))return i},vi=(e,t)=>{const s=e.getParameters()[t]?.getNameNode();return s&&r.isIdentifier(s)?s.getText():void 0},Ei=(e,t)=>e===t||e.startsWith(`${t}.`),xi=e=>{const t=e.getDescendantsOfKind(d.PropertyAccessExpression);return r.isPropertyAccessExpression(e)&&t.push(e),t},rn=e=>{const t=e.getParent();return r.isPropertyAccessExpression(t)&&t.getNameNode()===e||r.isPropertyAssignment(t)&&t.getNameNode()===e?!1:!(r.isBindingElement(t)&&t.getNameNode()===e)},Si=e=>{const t=e.getDescendantsOfKind(d.Identifier).filter(s=>rn(s));return r.isIdentifier(e)&&rn(e)&&t.push(e),t},qu=e=>{if(!r.isVariableDeclaration(e))return[];const t=e.getNameNode();return r.isIdentifier(t)?[t.getText()]:t.getDescendantsOfKind(d.BindingElement).map(s=>s.getName())},ju=e=>{const t=vi(e,1);if(t===void 0)return[];const s=[`${t}.messages`];for(const n of e.getDescendantsOfKind(d.ForOfStatement)){if(n.getExpression().getText()!==`${t}.messages`)continue;const i=n.getInitializer(),o=r.isVariableDeclarationList(i)?i.getDeclarations()[0]?.getNameNode():void 0;o&&r.isIdentifier(o)&&s.push(`${o.getText()}.body`)}return s},Hu=(e,t,s)=>{const n=t==="workflow"?[`${s}.params`]:ju(e),i=new Set,o=a=>xi(a).some(c=>n.some(l=>Ei(c.getText(),l)))?!0:Si(a).some(c=>i.has(c.getText()));for(const a of e.getDescendantsOfKind(d.VariableDeclaration)){const c=a.getInitializer();if(c&&o(c))for(const l of qu(a))i.add(l)}return{names:i,prefixes:n}},Gu=(e,t)=>xi(e).some(s=>t.prefixes.some(n=>Ei(s.getText(),n)))?!0:Si(e).some(s=>t.names.has(s.getText())),Yu=e=>{const t=Pr(e);return t===void 0?void 0:{exportName:String(t.at(-1)),file:t.slice(0,-1).join("/")}},Qu=(e,t,s)=>{const n=vi(e,0);if(n===void 0)return[];const i=Hu(e,t,n),o=new Set([n,...i.prefixes.filter(c=>c.endsWith(".body")).map(c=>c.slice(0,-5))]),a=[];for(const c of e.getDescendantsOfKind(d.CallExpression)){const l=c.getExpression();if(!r.isPropertyAccessExpression(l)||!Dn.has(l.getName())||!o.has(l.getExpression().getText()))continue;const u=c.getArguments()[1];if(!u||!Gu(u,i))continue;const f=Yu(c.getArguments()[0]);f!==void 0&&a.push({dispatchKind:t,file:s,scope:x(c),line:c.getStartLineNumber(),targetExport:f.exportName,targetFile:f.file})}return a},Xu=(e,t)=>{const s=[];for(const n of k(e,d.CallExpression)){const i=Uu(n),o=i===void 0?void 0:Vu.get(i);if(o===void 0)continue;const a=Wu(n,o);a!==void 0&&s.push(...Qu(a,i==="defineWorkflow"?"workflow":"queue",t))}return s},Ju=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Xu(i,w(t,n)))}return s},on={dbRateLimit:"usesRateLimit",emailGateMiddleware:"usesEmailGate",mask:"usesMask",rateLimit:"usesRateLimit",rls:"usesRls",verifyTurnstileMiddleware:"usesCaptcha"},an=new Set(["account","credential","member","passkey","session","user"]),Zu=e=>e.replaceAll(/[-_]/gu," ").replaceAll(/([a-z0-9])([A-Z])/gu,"$1 $2").split(" ").filter(Boolean).map(t=>t.toLowerCase()),ef=e=>{const s=Zu(e).at(-1);if(!s)return!1;const n=s.endsWith("s")?s.slice(0,-1):s;return an.has(s)||an.has(n)},tf=e=>{const t=e.replaceAll(/[^a-z0-9]/giu,"").toLowerCase();return t.endsWith("email")||t.endsWith("emailaddress")},sf=(e,t)=>{const{objects:s,opaque:n}=Zt(e,t);return fc(s).some(i=>tf(i))?!0:n?void 0:!1},nf=e=>{const t=e.getArguments()[0];return!t||!r.isObjectLiteralExpression(t)?{usesCaptcha:!1,usesRateLimit:!1}:{usesCaptcha:!!U(t,"captcha"),usesRateLimit:!!U(t,"rateLimit")}},rf=e=>{if(r.isCallExpression(e))return e;if(!r.isIdentifier(e))return;const s=e.getSourceFile().getVariableDeclaration(e.getText())?.getInitializer();return s&&r.isCallExpression(s)?s:void 0},Be={usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},of=e=>{const t=rf(e),s=t?P(t.getExpression()):void 0;if(t&&s==="protectPublic"){const n=nf(t);return{...Be,usesCaptcha:n.usesCaptcha,usesRateLimit:n.usesRateLimit}}return s!==void 0&&s in on?{...Be,[on[s]]:!0}:Be},af=e=>{const t={...Be};let s=e;for(;r.isCallExpression(s);){const n=s.getExpression();if(!r.isPropertyAccessExpression(n))break;const i=n.getName()==="use"?s.getArguments()[0]:void 0;if(i){const o=of(i);t.usesCaptcha||=o.usesCaptcha,t.usesEmailGate||=o.usesEmailGate,t.usesMask||=o.usesMask,t.usesRateLimit||=o.usesRateLimit,t.usesRls||=o.usesRls}s=n.getExpression()}return t},cf=new Set(["insert","insertMany","insertManyUnsafe","replace"]),lf=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||!cf.has(t.getName()))return!1;const s=t.getExpression();if(!$(s))return!1;const i=e.getArguments()[0];return!i||!(r.isStringLiteral(i)||r.isNoSubstitutionTemplateLiteral(i))?!1:ef(i.getLiteralText())},df=new Set(["create","publish","publishBatch","runAfter","runAt","send","sendBatch"]),cn=new Set(["queues","scheduler","topics","workflows"]),uf=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||!df.has(t.getName()))return!1;let s=t.getExpression();for(;r.isCallExpression(s)||r.isElementAccessExpression(s)||r.isPropertyAccessExpression(s);){if(r.isPropertyAccessExpression(s)&&cn.has(s.getName())&&Mr(s.getExpression()))return!0;s=s.getExpression()}const n=Yt(s);return n?.length===1&&cn.has(n[0]??"")},ff=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||t.getName()!=="insertManyUnsafe")return!1;const s=t.getExpression();return $(s)},Ai=new Set(["generateObject","generateText","streamObject","streamText"]),gf=e=>{const t=P(e.getExpression());return t!==void 0&&Ai.has(t)},pf=e=>{const t=P(e.getExpression());if(t===void 0||!Ai.has(t))return!1;const s=e.getArguments()[0];return!s||!r.isObjectLiteralExpression(s)||s.getProperties().some(n=>r.isSpreadAssignment(n))?!1:!U(s,"maxOutputTokens")},mf=new Set(["log","span","trace"]),hf=new Set(["ai"]),vf=new Set(["email","mail"]),Ef=new Set(["ai","browser","fetch","mail","notify","queues","sql","storage","topics","workflows"]),yt=(e,t)=>[...t].some(s=>et(e,s).length>0),yi=new Set([d.ArrowFunction,d.FunctionDeclaration,d.FunctionExpression,d.GetAccessor,d.MethodDeclaration,d.SetAccessor]),xf=new Set(["every","filter","flatMap","forEach","map","some"]),Sf=new Set(["all","allSettled","race"]),bi=e=>{const t=e.getParent();if(!t||!r.isCallExpression(t)||!t.getArguments().includes(e))return;const s=t.getExpression();if(!r.isPropertyAccessExpression(s))return;const n=s.getName();if(xf.has(n))return t;const i=s.getExpression();if(r.isIdentifier(i)&&i.getText()==="Promise"&&Sf.has(n))return t},Af=e=>{let t=e.getParent();for(;t;){if(r.isTryStatement(t)){const s=t.getTryBlock();if(e.getPos()>=s.getPos()&&e.getEnd()<=s.getEnd())return!0}if(yi.has(t.getKind())){const s=bi(t);if(!s)return!1;t=s;continue}t=t.getParent()}return!1},yf=e=>{let t=e.getParent();for(;t!==void 0;){if(r.isCallExpression(t)&&t.getExpression().getText()==="Promise.allSettled")return!0;if(yi.has(t.getKind())){if(t=bi(t),t===void 0)return!1;continue}t=t.getParent()}return!1},bf=e=>{const t=e.getFirstAncestor(u=>r.isArrowFunction(u)||r.isFunctionExpression(u)),s=t?.getParent();if(!t||!r.isCallExpression(s)||!s.getArguments().includes(t))return!1;const n=s.getExpression();if(!r.isIdentifier(n))return!1;const i=n.getSymbol(),o=i?.getAliasedSymbol()?.getValueDeclaration()??i?.getValueDeclaration(),a=r.isVariableDeclaration(o)?o.getInitializer():o;if(!r.isArrowFunction(a)&&!r.isFunctionExpression(a)&&!r.isFunctionDeclaration(a))return!1;const c=s.getArguments().indexOf(t),l=a.getParameters()[c]?.getName();return l===void 0?!1:a.getDescendantsOfKind(d.TryStatement).some(u=>{const f=u.getTryBlock().getDescendantsOfKind(d.CallExpression).some(m=>{const v=m.getExpression();return r.isIdentifier(v)&&v.getText()===l&&r.isAwaitExpression(m.getParent())}),g=u.getCatchClause();return f&&g!==void 0&&g.getDescendantsOfKind(d.ThrowStatement).length>0})},Nf=e=>{let t=e;for(;;){const s=t.getParent();if(!r.isPropertyAccessExpression(s)||s.getExpression()!==t)return!1;if(s.getName()==="catch")return!0;if(s.getName()!=="then"&&s.getName()!=="finally")return!1;const n=s.getParent();if(!r.isCallExpression(n)||n.getExpression()!==s)return!1;t=n}},Pf=e=>{let t=e;for(;;){const s=t.getParent();if(r.isPropertyAccessExpression(s)&&s.getExpression()===t){t=s;continue}return r.isCallExpression(s)&&s.getExpression()===t?s:void 0}},wf=e=>{let t=!1,s=!0;for(const n of[...Ef].flatMap(i=>et(e,i))){const i=Pf(n);i&&(t=!0,!Af(i)&&!Nf(i)&&!bf(i)&&!yf(i)&&(s=!1))}return{handlesErrors:t&&s,reachesOutbound:t}},If=e=>e.getDescendantsOfKind(d.ThrowStatement).some(t=>{const s=t.getExpression();if(!r.isNewExpression(s))return!1;const n=s.getExpression();return r.isIdentifier(n)&&n.getText()==="Error"}),ln="lunora-advisor-exempt",Tf=/^[\s*/]+/u,Cf=/[\w-]/u,Of=e=>{const s=(e.getFirstAncestorByKind(d.VariableStatement)??e).getLeadingCommentRanges().map(n=>n.getText()).join(`
+`);for(const n of s.split(`
+`)){const i=n.replace(Tf,"");if(!i.startsWith(ln))continue;const o=i.slice(ln.length);if(Cf.test(o.charAt(0)))continue;const a=o.indexOf("--");return{exempt:!0,exemptReason:(a===-1?"":o.slice(a+2).split("*")[0]??"").trim()}}return{exempt:!1,exemptReason:""}},kf=e=>{const[t]=e.getArguments();if(t){if(r.isObjectLiteralExpression(t)){const s=U(t,"handler");return s?r.isPropertyAssignment(s)?s.getInitializer():r.isShorthandPropertyAssignment(s)?s.getNameNode():r.isMethodDeclaration(s)?s:void 0:void 0}return t}},Rf=(e,t)=>{const s=kf(t);if(!s)return;if(r.isArrowFunction(s)||r.isFunctionExpression(s)||r.isMethodDeclaration(s))return e;if(!r.isIdentifier(s))return;const n=s.getSourceFile(),i=s.getText(),o=n.getVariableDeclaration(i)?.getInitializer();return o&&(r.isArrowFunction(o)||r.isFunctionExpression(o))?o:n.getFunction(i)},Ff=e=>{let t=!1,s=!1,n=!1,i=!1,o=!1;for(const l of e.getDescendantsOfKind(d.CallExpression))if(lf(l)&&(o=!0),uf(l)&&(t=!0),ff(l)&&(i=!0),gf(l)&&(s=!0),pf(l)&&(n=!0),o&&t&&i&&n)break;const{handlesErrors:a,reachesOutbound:c}=wf(e);return{callsMail:yt(e,vf),emitsEvent:yt(e,mf),fanOut:t,handlesErrors:a,reachesOutbound:c,runsAiGeneration:s||yt(e,hf),throwsBareError:If(e),unboundedAiGeneration:n,usesInsertManyUnsafe:i,writesUserTable:o}},Lf=(e,t)=>{const s=e.getInitializer();if(!s||!r.isCallExpression(s))return;const n=te(s);if(!n||n.kind!=="query"&&n.kind!=="mutation"&&n.kind!=="action")return;const i=n.receiver?af(n.receiver):{usesCaptcha:!1,usesEmailGate:!1,usesMask:!1,usesRateLimit:!1,usesRls:!1},o=Rf(e,s);return{...o?Ff(o):{},...Of(e),...i,analyzableBody:o!==void 0,exportName:H(e)??e.getName(),file:t,hasEmailArg:sf(s,n.receiver),kind:n.kind,visibility:n.visibility}},Df=(e,t)=>{const s=[];for(const n of X(e)){const i=Lf(n,t);i&&s.push(i)}return s},Mf=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...Df(i,w(t,n)))}return s},_f=new Set(["dbRateLimit","rateLimit"]),Kf=e=>r.isArrowFunction(e)?e.getBody():e,zf=e=>{if(!r.isArrowFunction(e))return;const t=e.getParameters()[0]?.getNameNode();return t!==void 0&&r.isIdentifier(t)?t:void 0},Ni=e=>{const t=e.getParent();return r.isPropertyAccessExpression(t)&&t.getExpression()===e&&t.getName()==="args"},Pi=(e,t)=>{const s=t.getSymbol();return s===void 0?[]:e.getDescendantsOfKind(d.Identifier).filter(n=>{if(n.getSymbol()!==s)return!1;const i=n.getParent();return!(r.isPropertyAccessExpression(i)&&i.getNameNode()===n)})},$f=(e,t)=>j(e)||t!==void 0&&Pi(e,t).some(s=>Ni(s)),Bf=(e,t)=>t===void 0?de(e):Pi(e,t).some(s=>!Ni(s)),Vf=(e,t)=>{const s=P(e.getExpression());if(s===void 0||!_f.has(s))return;const n=F(Ln(e.getArguments()[2]),"key");if(!n)return;const i=Kf(n),o=zf(n);if(!(!$f(i,o)||Bf(i,o)))return{callee:s,scope:x(e),file:t,limitName:Fn(e),line:e.getStartLineNumber()}},Uf=(e,t)=>T(e,t,Vf),Wf=new Set(["findFirst","findFirstOrThrow","findMany","findUnique","get"]),qf=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||!Wf.has(t.getName()))return;const s=t.getExpression();if($(s)){const n=e.getArguments()[0];return n&&r.isStringLiteral(n)?n.getLiteralText():""}if(r.isPropertyAccessExpression(s)&&$(s.getExpression()))return s.getName()},jf=e=>{let t=e;for(;r.isCallExpression(t);){const s=t.getExpression();if(!r.isPropertyAccessExpression(s))return;if(s.getName()==="query"&&$(s.getExpression())){const n=t.getArguments()[0];return n&&r.isStringLiteral(n)?n.getLiteralText():""}t=s.getExpression()}},Hf=e=>{let t=h(e)??e;for(;r.isAwaitExpression(t);)t=h(t.getExpression())??t.getExpression();return t},wi=(e,t=!1)=>{const s=Hf(e);if(r.isIdentifier(s)){if(t)return;const n=Q(s);return n===void 0?void 0:wi(n,!0)}if(r.isCallExpression(s))return qf(s)??jf(s)},Gf=e=>{const t=e.getBody();if(!r.isBlock(t))return[t];const s=[];for(const n of e.getDescendantsOfKind(d.ReturnStatement)){const i=n.getFirstAncestor(a=>r.isArrowFunction(a)||r.isFunctionExpression(a)||r.isFunctionDeclaration(a)),o=n.getExpression();i===e&&o!==void 0&&s.push(o)}return s},Yf=(e,t)=>{if(!r.isVariableDeclaration(e))return[];const s=e.getInitializer();if(s===void 0||!r.isCallExpression(s))return[];const n=te(s);if(n?.kind!=="query")return[];const i=ni(s);if(i===void 0)return[];const o=n.receiver!==void 0&&zr(n.receiver,"output"),a=n.receiver!==void 0&&$n(n.receiver,"use","mask"),c=new Set,l=[];for(const u of Gf(i)){const f=wi(u);f===void 0||c.has(f)||(c.add(f),l.push({exportName:H(e)??e.getName(),file:t,line:u.getStartLineNumber(),table:f,usesMask:a,usesOutput:o,visibility:n.visibility}))}return l},Qf=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of X(i))s.push(...Yf(a,o))}return s},Xf=e=>{if(!e||!r.isObjectLiteralExpression(e))return[];const t=[];for(const s of e.getProperties())(r.isPropertyAssignment(s)||r.isShorthandPropertyAssignment(s)||r.isMethodDeclaration(s)||r.isGetAccessorDeclaration(s))&&t.push(S(s));return t},Jf=(e,t)=>{if(!r.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&r.isCallExpression(s)?te(s):void 0;if(!n)return[];const i=[];for(const o of e.getDescendantsOfKind(d.CallExpression)){const a=Vn(o);if(a===void 0)continue;const c=Xf(F(a.options,"with"));c.length!==0&&i.push({exportName:H(e)??e.getName(),file:t,line:o.getStartLineNumber(),parentTable:a.table,relations:c,visibility:n.visibility})}return i},Zf=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of X(i))s.push(...Jf(a,o))}return s},q=(e,t)=>`${e}:${t}`,dn=(e,t,s,n)=>s===void 0?void 0:{endLine:e.getEndLineNumber(),exported:n,file:t,name:s,node:e,startLine:e.getStartLineNumber()},eg=(e,t)=>[...ie(e,t,d.FunctionDeclaration,(s,n)=>s.getParent().getKind()===d.SourceFile?dn(s,n,s.getName(),s.isExported()):void 0),...ie(e,t,d.VariableDeclaration,(s,n)=>{const i=s.getVariableStatement();return i?.getParent().getKind()===d.SourceFile?dn(i,n,s.getName(),i.isExported()):void 0})],tg=(e,t,s)=>{const n=e.getExpression();if(!r.isIdentifier(n))return;const i=n.getSymbol(),o=(i?.getAliasedSymbol()??i)?.getDeclarations()[0];if(o===void 0||!(r.isFunctionDeclaration(o)||r.isVariableDeclaration(o)))return;const a=o.getName(),c=w(s,o.getSourceFile().getFilePath());return a===void 0?void 0:t.get(q(c,a))},sg=e=>`${e.table}|${e.method}|${e.fields?.join(",")??"*"}`,ng=(e,t)=>{const s=new Map(e.map(n=>[q(n.file,n.name),new Map]));for(const n of t){const i=e.find(o=>o.file===n.file&&o.startLine<=n.line&&n.line<=o.endLine);i!==void 0&&n.table!==""&&s.get(q(i.file,i.name))?.set(sg(n),{fields:n.fields,method:n.method,table:n.table})}return s},ig=(e,t,s)=>e.node.getDescendantsOfKind(d.CallExpression).map(n=>tg(n,t,s)).filter(n=>n!==void 0),rg=(e,t,s,n)=>{for(const i of e){const o=i.scope.kind==="module"?void 0:t.get(q(i.file,i.scope.name)),a=i.target===void 0?void 0:s.get(i.target);i.kind==="call"&&o!==void 0&&a!==void 0&&n.get(q(o.file,o.name))?.push(a)}},og=(e,t,s)=>{const n=new Map(e.map(a=>[q(a.file,a.name),a])),i=new Map(e.map(a=>[`${Xt(a.file)}:${a.name}`,a])),o=new Map(e.map(a=>[q(a.file,a.name),ig(a,n,t)]));return rg(s,n,i,o),o},ag=(e,t)=>{let s=!1;for(const[n,i]of t??[])e!==void 0&&!e.has(n)&&(e.set(n,i),s=!0);return s},cg=(e,t,s)=>{let n=!0;for(;n;){n=!1;for(const i of e)for(const o of s.get(q(i.file,i.name))??[])ag(t.get(q(i.file,i.name)),t.get(q(o.file,o.name)))&&(n=!0)}},lg=(e,t,s,n)=>{const i=eg(e,t),o=ng(i,s);return cg(i,o,og(i,t,n)),i.filter(a=>a.exported).flatMap(a=>[...o.get(q(a.file,a.name))?.values()??[]].map(c=>({...c,exportName:a.name,file:a.file})))},He=e=>{if(r.isStringLiteral(e)||r.isNoSubstitutionTemplateLiteral(e))return e.getLiteralText();if(r.isBinaryExpression(e)&&e.getOperatorToken().getKind()===d.PlusToken){const t=He(e.getLeft()),s=He(e.getRight());return t!==void 0&&s!==void 0?t+s:void 0}},dg=e=>{let t=e,s=t.getParent();for(;s!==void 0&&r.isBinaryExpression(s)&&s.getOperatorToken().getKind()===d.PlusToken;)t=s,s=t.getParent();return t!==e&&He(t)!==void 0},ug=e=>{const t=e.getParent();if(t!==void 0){if(r.isVariableDeclaration(t)||r.isPropertyAssignment(t)||r.isPropertySignature(t))return S(t);if(r.isBinaryExpression(t)&&t.getOperatorToken().getKind()===d.EqualsToken)return t.getLeft().getText()}},fg=(e,t,s)=>io(e)?!wr(s)&&ro(ug(t)):!0,gg=(e,t)=>{const s=[],n=[...k(e,d.BinaryExpression),...k(e,d.StringLiteral),...k(e,d.NoSubstitutionTemplateLiteral)],i=new Set;for(const o of n){if(dg(o))continue;const a=He(o);if(a===void 0)continue;const c=so(a);if(c===void 0||!fg(c,o,t))continue;const l=o.getStartLineNumber(),u=`${String(l)}:${c}`;i.has(u)||(i.add(u),s.push({file:t,kind:c,line:l,preview:no(a)}))}return s},pg=(e,t)=>{const s=[],n=new Wt({compilerOptions:{allowJs:!0},skipFileDependencyResolution:!0,skipLoadingLibFiles:!0,useInMemoryFileSystem:!0});for(const i of A(t,{includeSkipped:!0})){const o=e.getSourceFile(i)??n.createSourceFile(i,Qe(i,"utf8"),{overwrite:!0});s.push(...gg(o,w(t,i)))}return s},mg=(e,t)=>{if(!r.isVariableDeclaration(e))return[];const s=e.getInitializer(),n=s&&r.isCallExpression(s)?te(s):void 0;if(!n)return[];const i=[];for(const o of e.getDescendantsOfKind(d.CallExpression)){const a=Vn(o);if(a===void 0)continue;const c=F(a.options,"includeDeleted");if(c===void 0)continue;const l=r.isTrueLiteral(c),u=!l&&j(c);!l&&!u||i.push({exportName:H(e)??e.getName(),file:t,fromArgs:u,hardcodedTrue:l,line:o.getStartLineNumber(),table:a.table,visibility:n.visibility})}return i},hg=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n),o=w(t,n);for(const a of X(i))s.push(...mg(a,o))}return s},vg=new Set(["query","unsafe"]),Eg=e=>!r.isPropertyAccessExpression(e)||!vg.has(e.getName())?!1:Y(e.getExpression(),["sql"]),xg=e=>r.isBinaryExpression(e)||r.isTemplateExpression(e),Sg=(e,t)=>{if(!Eg(e.getExpression()))return;const s=e.getArguments()[0];if(!(!s||!xg(s)))return{file:t,line:s.getStartLineNumber(),scope:x(e)}},Ag=(e,t)=>T(e,t,Sg),yg=[["convex",["convex","@convex-dev/"]],["supabase",["@supabase/"]],["firebase",["firebase","@firebase/","firebase-admin"]]],bg=e=>{for(const[t,s]of yg)for(const n of s)if(e===n||e.startsWith(n.endsWith("/")?n:`${n}/`))return t},Ng=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const o of i.getImportDeclarations()){const a=o.getModuleSpecifierValue(),c=bg(a);c!==void 0&&s.push({file:w(t,n),line:o.getStartLineNumber(),moduleSpecifier:a,platform:c})}}return s},Pg=new Set(["createMultipartUpload","delete","download","generateUploadUrl","get","getMetadata","getPresignedUrl","getSignedUrl","getUrl","head","put","resumeMultipartUpload","store","upload"]),wg=(e,t,s=[])=>{const n=nt(e,t,{argIndex:0,matchReceiver:i=>i==="ctx.storage"||i.startsWith("ctx.storage."),methods:Pg,requireUnmodifiedReach:!0});return Gt(n,s)},Ig=new Map([["generateUploadUrl",1],["getPresignedUrl",1],["getSignedUrl",1],["store",2],["upload",2]]),Tg=e=>e&&r.isNumericLiteral(e)?Number(e.getText()):void 0,Cg=e=>{if(e===void 0)return{analyzable:!0,presentKeys:[]};if(!r.isObjectLiteralExpression(e))return{analyzable:!1,presentKeys:[]};const t=[];let s,n=!1;for(const i of e.getProperties()){if(r.isSpreadAssignment(i)){n=!0;continue}if(r.isPropertyAssignment(i)){const o=S(i);t.push(o),o==="expiresInSeconds"&&(s=Tg(i.getInitializer()));continue}(r.isShorthandPropertyAssignment(i)||r.isMethodDeclaration(i))&&t.push(S(i))}return{analyzable:!n,expiresInSeconds:s,presentKeys:t}},Og=e=>{if(!r.isPropertyAccessExpression(e))return;const t=e.getName(),s=Ig.get(t);return s===void 0?void 0:_n(e.getExpression(),i=>i==="ctx.storage"||i.startsWith("ctx.storage."))?{method:t,optionsIndex:s}:void 0},kg=(e,t)=>{const s=Og(e.getExpression());if(s!==void 0)return{scope:x(e),file:t,line:e.getStartLineNumber(),method:s.method,...Cg(e.getArguments()[s.optionsIndex])}},Rg=(e,t)=>T(e,t,kg),Fg=e=>r.isDoStatement(e)||r.isForInStatement(e)||r.isForOfStatement(e)||r.isForStatement(e)||r.isWhileStatement(e),Ii=e=>{const t=e.getLabel()?.getText(),s=i=>t!==void 0?r.isLabeledStatement(i)&&i.getLabel().getText()===t:Fg(i)||r.isBreakStatement(e)&&r.isSwitchStatement(i);let n=e.getFirstAncestor(i=>oe(i)||s(i));if(!(n===void 0||oe(n))){for(;r.isContinueStatement(e)&&r.isLabeledStatement(n);)n=n.getStatement();return n}},ss=(e,t)=>y(e.getFirstAncestor(s=>y(s,t)||oe(s)),t),Lg=(e,t)=>y(e,t)||e.getFirstAncestor(s=>y(s,t))!==void 0,Ti=(e,t)=>{if(r.isReturnStatement(e)||r.isThrowStatement(e))return y(e,t)||ss(e,t);if(r.isBreakStatement(e)||r.isContinueStatement(e)){const s=Ii(e);return s!==void 0&&!Lg(s,t)}return!1},Ci=e=>[...r.isBreakStatement(e)||r.isContinueStatement(e)||r.isReturnStatement(e)||r.isThrowStatement(e)?[e]:[],...e.getDescendantsOfKind(d.BreakStatement),...e.getDescendantsOfKind(d.ContinueStatement),...e.getDescendantsOfKind(d.ReturnStatement),...e.getDescendantsOfKind(d.ThrowStatement)],Dg=e=>Ci(e).some(t=>Ti(t,e)),Mg=e=>{const t=r.isCallExpression(e)?e.getExpression():void 0;return r.isPropertyAccessExpression(t)&&t.getName()==="throwIfAborted"},_g=e=>Ci(e).some(t=>Ti(t,e)||r.isBreakStatement(t)&&y(Ii(t),e))||e.getDescendantsOfKind(d.CallExpression).some(t=>Mg(t)&&ss(t,e)),Kg=e=>e.getDescendantsOfKind(d.YieldExpression).some(t=>ss(t,e)),zg=e=>r.isDoStatement(e)||r.isWhileStatement(e)?e.getExpression():e.getCondition(),$g=e=>r.isDoStatement(e)?"do":r.isWhileStatement(e)?"while":"for",bt=(e,t)=>{const s=zg(e);if(!(s===void 0||r.isTrueLiteral(h(s)))||_g(e)||Kg(e))return;const i=x(e);if(!(i.kind==="module"&&e.getFirstAncestor(oe)!==void 0))return{file:t,kind:$g(e),line:e.getStartLineNumber(),scope:i}},Bg=(e,t)=>[...ie(e,t,d.WhileStatement,bt),...ie(e,t,d.ForStatement,bt),...ie(e,t,d.DoStatement,bt)].toSorted((s,n)=>s.file.localeCompare(n.file)||s.line-n.line),Vg=new Set(["when","where"]),Nt=new Set(["definePolicy","defineShape"]),Ug=e=>{if(!r.isCallExpression(e))return;const t=e.getExpression();if(r.isPropertyAccessExpression(t)){const n=t.getName();return Nt.has(n)?n:void 0}if(!r.isIdentifier(t))return;for(const n of t.getSymbol()?.getDeclarations()??[])if(r.isImportSpecifier(n)){const i=n.getNameNode().getText();return Nt.has(i)?i:void 0}const s=t.getText();return Nt.has(s)?s:void 0},Wg=e=>r.isObjectLiteralExpression(e)&&e.getProperties().length===0,Oi=e=>{if(e!==void 0){if(r.isReturnStatement(e)&&e.getExpression()===void 0||e.getKind()===d.UndefinedKeyword||e.getText()==="undefined")return"undefined";if(Wg(e))return"empty-object";if(r.isParenthesizedExpression(e))return Oi(e.getExpression())}},ns=e=>e.getAncestors().find(t=>r.isArrowFunction(t)||r.isFunctionExpression(t)||r.isFunctionDeclaration(t)),qg=e=>e.getDescendantsOfKind(d.ReturnStatement).filter(t=>ns(t)===e),ki=e=>e.getDescendantsOfKind(d.ConditionalExpression).filter(t=>ns(t)===e),jg=e=>{const t=qg(e);return t.length>1?!0:t.some(s=>s.getFirstAncestorByKind(d.IfStatement)!==void 0)||ki(e).length>0},Hg=e=>e.getDescendantsOfKind(d.IfStatement).filter(t=>ns(t)===e),$t=e=>e.getKind()===d.NullKeyword||e.getKind()===d.FalseKeyword||r.isIdentifier(e)&&e.getText()==="undefined"?!0:r.isNumericLiteral(e)?e.getLiteralValue()===0:r.isStringLiteral(e)&&e.getLiteralValue()==="",Gg=(e,t)=>$t(e)||$t(t),Yg=new Map([[d.EqualsEqualsEqualsToken,"positive"],[d.EqualsEqualsToken,"positive"],[d.ExclamationEqualsEqualsToken,"negative"],[d.ExclamationEqualsToken,"negative"]]),un=e=>!$t(e)&&(r.isLiteralExpression(e)||e.getKind()===d.TrueKeyword),Qg=(e,t,s)=>{const n=Yg.get(e);if(n!==void 0)return Gg(t,s)?n==="positive"?"negative":"positive":un(t)||un(s)?void 0:n},ye=e=>{if(r.isParenthesizedExpression(e))return ye(e.getExpression());if(r.isPrefixUnaryExpression(e)&&e.getOperatorToken()===d.ExclamationToken)return"negative";if(r.isBinaryExpression(e)){const t=e.getOperatorToken().getKind(),s=Qg(t,e.getLeft(),e.getRight());if(s!==void 0)return s;if(t===d.AmpersandAmpersandToken||t===d.BarBarToken){const n=ye(e.getLeft()),i=ye(e.getRight());return n===i?n:"indeterminate"}}return r.isIdentifier(e)||r.isPropertyAccessExpression(e)||r.isElementAccessExpression(e)||r.isCallExpression(e)?"positive":"indeterminate"},fn=e=>{if(e!==void 0){if(r.isReturnStatement(e))return e;if(r.isBlock(e)){const t=e.getStatements().at(-1);return t!==void 0&&r.isReturnStatement(t)?t:void 0}}},Xg=e=>{if(e.getElseStatement()!==void 0)return;const t=e.getNextSiblingIfKind(d.ReturnStatement);return t!==void 0&&t.getNextSibling()===void 0?t:void 0},Jg=e=>r.isReturnStatement(e)?e.getExpression()??e:e,Zg=e=>{const t=[];for(const s of ki(e)){const n=ye(s.getCondition());n==="positive"?t.push(s.getWhenFalse()):n==="negative"&&t.push(s.getWhenTrue())}for(const s of Hg(e)){const n=ye(s.getExpression());if(n==="indeterminate")continue;const i=n==="negative"?fn(s.getThenStatement()):fn(s.getElseStatement())??Xg(s);i!==void 0&&t.push(Jg(i))}return t},ep=e=>{for(const t of e.getAncestors())if(r.isVariableDeclaration(t)){const s=t.getNameNode();if(r.isIdentifier(s))return s.getText()}return"<anonymous>"},tp=(e,t,s)=>{if(!r.isCallExpression(e))return[];const[n]=e.getArguments();if(!n||!r.isObjectLiteralExpression(n))return[];const i=[];for(const o of n.getProperties()){if(!r.isPropertyAssignment(o)||!Vg.has(S(o)))continue;const a=o.getInitializer();if(!(!a||!(r.isArrowFunction(a)||r.isFunctionExpression(a)))&&jg(a))for(const c of Zg(a)){const l=Oi(c);l!==void 0&&i.push({exportName:ep(e),file:s,form:l,key:S(o),line:c.getStartLineNumber(),owner:t})}}return i},sp=(e,t)=>{const s=[];for(const n of k(e,d.CallExpression)){const i=Ug(n);i!==void 0&&s.push(...tp(n,i,t))}return s},np=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);s.push(...sp(i,w(t,n)))}return s},ip=new Set(["query","upsert","upsertMany","upsertNow"]),me=new Set,rp=e=>{if(!r.isPropertyAccessExpression(e))return;const t=e.getName();if(ip.has(t))return Y(e.getExpression(),["vectors"])?t:void 0},is=e=>{let t=e;for(;r.isParenthesizedExpression(t)||r.isAsExpression(t)||r.isSatisfiesExpression(t)||r.isNonNullExpression(t)||r.isTypeAssertion(t);)t=t.getExpression();return t},Ri=e=>{const t=e.getParent();return r.isShorthandPropertyAssignment(t)&&t.getNameNode()===e?t.getValueSymbol():e.getSymbol()},Fi=e=>Ri(e)?.getDeclarations()[0],op=e=>{const t=e.getParent();return r.isBindingElement(t)||(r.isPropertyAccessExpression(t)||r.isPropertyAssignment(t)||r.isVariableDeclaration(t)||r.isParameterDeclaration(t)||r.isMethodDeclaration(t))&&t.getNameNode()===e?!1:!r.isQualifiedName(t)||t.getLeft()===e},Li=e=>{let t=e;for(;t!==void 0&&(r.isBindingElement(t)||r.isObjectBindingPattern(t)||r.isArrayBindingPattern(t));)t=t.getParent();return t!==void 0&&r.isVariableDeclaration(t)?t:void 0},gn=(e,t,s)=>{const n=Ri(e)?.compilerSymbol;if(n!==void 0&&t.has(n))return!0;if(s>0){const i=Li(Fi(e)),o=i!==void 0&&r.isVariableDeclaration(i)?i.getInitializer():void 0;if(o!==void 0)return rs(o,t,s-1)}return j(e)},rs=(e,t,s)=>{const n=is(e);return de(n)?!1:r.isIdentifier(n)?gn(n,t,s):j(n)?!0:n.getDescendantsOfKind(d.Identifier).some(i=>op(i)&&gn(i,t,s))},Di=e=>{const t=Li(Fi(e));return t!==void 0&&r.isVariableDeclaration(t)?t.getInitializer():void 0},ee=(e,t)=>{const s=is(e);if(r.isObjectLiteralExpression(s))return[s];if(r.isConditionalExpression(s))return[...ee(s.getWhenTrue(),t),...ee(s.getWhenFalse(),t)];if(r.isBinaryExpression(s)){const n=s.getOperatorToken().getKind();if(n===d.BarBarToken||n===d.QuestionQuestionToken||n===d.AmpersandAmpersandToken)return[...ee(s.getLeft(),t),...ee(s.getRight(),t)]}if(r.isIdentifier(s)&&t){const n=Di(s);return n===void 0?[]:ee(n,!1)}return[]},ap=(e,t)=>{const s=ee(e,t);if(s.length===0)return{replaces:!0,sources:[e]};const n=s.map(o=>Ge(o,!1)),i=n.flat();if(i.length!==0)return{replaces:n.every(o=>o.length>0),sources:i}},cp=e=>(r.isPropertyAssignment(e)||r.isShorthandPropertyAssignment(e))&&e.getName()==="namespace",lp=e=>r.isShorthandPropertyAssignment(e)?e.getNameNode():e.getInitializer()??e.getNameNode(),Ge=(e,t)=>{let s=[];for(const n of e.getProperties())if(r.isSpreadAssignment(n)){const i=ap(n.getExpression(),t);i!==void 0&&(s=i.replaces?i.sources:[...s,...i.sources])}else cp(n)&&(s=[lp(n)]);return s},dp=e=>{if(!e||!(r.isArrowFunction(e)||r.isFunctionExpression(e)))return[];const t=e.getBody();return r.isBlock(t)?t.getDescendantsOfKind(d.ReturnStatement).filter(s=>s.getFirstAncestor(n=>r.isFunctionLikeDeclaration(n))===e).flatMap(s=>s.getExpression()??[]):[t]},up=e=>{if(!e||!(r.isArrowFunction(e)||r.isFunctionExpression(e)))return me;const t=e.getParameters()[0]?.getNameNode();if(t===void 0)return me;const s=r.isIdentifier(t)?[t]:t.getDescendantsOfKind(d.BindingElement).map(n=>n.getNameNode());return new Set(s.flatMap(n=>r.isIdentifier(n)?n.getSymbol()?.compilerSymbol??[]:[]))},Bt=(e,t=!0,s=me)=>{const n=is(e);if(r.isIdentifier(n)){const o=t?Di(n):void 0;return o===void 0?[{node:n,parameters:s}]:Bt(o,!1,s)}if(r.isArrayLiteralExpression(n))return n.getElements().flatMap(o=>r.isSpreadElement(o)?Bt(o.getExpression(),t,s):ee(o,!0).flatMap(a=>Ge(a,!0).map(c=>({node:c,parameters:s}))));const i=r.isCallExpression(n)?n.getExpression():void 0;if(r.isCallExpression(n)&&r.isPropertyAccessExpression(i)&&i.getName()==="map"){const o=n.getArguments()[0],a=rs(i.getExpression(),me,1)?up(o):me;return dp(o).flatMap(c=>ee(c,!0).flatMap(l=>Ge(l,!0).map(u=>({node:u,parameters:a}))))}return[{node:n,parameters:s}]},fp=(e,t)=>{const s=rp(e.getExpression());if(s===void 0)return;const n=e.getArguments()[1];if(!(!n||!(s==="upsertMany"?Bt(n):ee(n,!0).flatMap(o=>Ge(o,!0).map(a=>({node:a,parameters:me})))).some(({node:o,parameters:a})=>rs(o,a,1))))return{scope:x(e),file:t,line:e.getStartLineNumber(),method:s}},gp=(e,t)=>T(e,t,fp),pp=(e,t,s)=>{const{callSites:n,containers:i,crons:o,functions:a,modules:c,mutators:l,queues:u,schema:f,shapes:g,wranglerVariables:m,workflows:v}=s;return xr({adminRoutes:$a(e,t),aiRawRuns:Ya(e,t),aiToolSideEffects:oc(e,t),argumentDerivedFetches:lc(e,t),argumentValidators:Ic(e,t),authApiCalls:Ur(e,t),authConfigs:_c(e,t),browserUrlAccesses:Bc(e,t),callEdges:n.callEdges,configCalls:Yc(e,t),containerKeyAccesses:Xc(e,t),containerOverrides:nl(e,t),containers:i,countReads:cl(e,t,f.tables),crons:o,cronTargets:o.flatMap(B=>B.functionPath===void 0?[]:[B.functionPath]),exportSinks:fl(e,t),staleMigrationImports:Ng(e,t),failOpenGuards:vl(e,t),flagReads:yl(e,t),flagSecurityDefaults:wl(e,t),geoIndexUsages:Cl(e,t),httpActionGuards:Bl(e,t),httpHeaderWrites:Xl(e,t),hyperdriveCalls:Wr(e,t),identityClaimReads:cd(e,t),imageDeliveryUrlAccesses:dd(e,t),inserts:n.inserts,kvKeyAccesses:fd(e,t,a),mailRecipientAccesses:vd(e,t),maskProcedures:qr(e,t),maskStrategies:Sd(e,t),mutatorWrites:wd(e,t),nondeterministicCalls:Qr(e,t),normalizeIdAuthorizations:Bd(e,t),notifyCalls:Jr(e,t),notifyConfig:Xr(e,t),mutators:l,ownerFieldWrites:Mu(e,t,a,l),unrestrictedWhereBranches:np(e,t),paymentWebhooks:Bu(e,t),privilegedDispatches:Ju(e,t),procedureProtections:Mf(e,t),queries:n.queries,queues:u,r2sqlCalls:Zr(e,t),ratelimitKeySelectors:Uf(e,t),rawRowReturns:Qf(e,t),relationLoads:Zf(e,t),rlsProcedures:eo(e,t),schema:f,secretLiterals:pg(e,t),modules:c,shapes:g,softDeleteReads:hg(e,t),sqlInterpolations:Ag(e,t),storageKeyAccesses:wg(e,t,a),storageUploads:Rg(e,t),tableWrites:n.tableWrites,rowEffects:lg(e,t,n.tableWrites,n.callEdges),unboundedLoops:Bg(e,t),vectorNamespaceAccesses:gp(e,t),workflowCalls:n.workflowCalls,workflows:v,wranglerVariables:m})},mp=e=>({cacheKey:`advisor_accept_unused:${e.rule}:${e.file}:${e.exportName}`,categories:["SCHEMA"],description:"`advisor.accept` in `lunora.config.*` accepts a finding the advisor does not report as an error.",detail:`No ERROR \`${e.rule}\` in \`${e.file}\` for \`${e.exportName}\` — the acceptance no longer applies.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:e.exportName,file:e.file,rule:e.rule},name:"advisor_accept_unused",remediation:"Remove the entry, or correct the rule, file and export name it names.",title:"An accepted advisor finding matches no error"}),hp=(e,t)=>{const s=new Set;return[...e.map(i=>{if(i.level!=="ERROR")return i;const o=t.find(a=>a.rule===i.name&&a.file===i.metadata.file&&a.exportName===i.metadata.exportName);return o===void 0?i:(s.add(o),{...i,detail:`Accepted: ${o.reason}. ${i.detail}`,level:"INFO",metadata:{...i.metadata,accepted:o.reason}})}),...t.filter(i=>!s.has(i)).map(i=>mp(i))]},vp=()=>({cacheKey:"advisor_accept_invalid",categories:["SCHEMA"],description:"`advisor.accept` in `lunora.config.*` is read by parsing the file, so every entry must be a literal.",detail:"`advisor.accept` is not an array of literal `{ rule, file, exportName, reason }` objects with non-empty strings, so codegen ignored all of it and every ERROR still fails the gate.",facing:"INTERNAL",level:"WARN",metadata:{},name:"advisor_accept_invalid",remediation:'Write `advisor: { accept: [{ rule: "owner_field_from_args_not_auth", file: "lunora/auth/team.ts", exportName: "addTeamMember", reason: "…" }] }` as literals on the config\'s default export.',title:"`advisor.accept` is not a list codegen can read, so no acceptance applies"}),Ep=e=>e.metadata.accepted!==void 0||e.name==="advisor_accept_unused"||e.name==="advisor_accept_invalid",pn={error:"ERROR",info:"INFO",warn:"WARN"},mn={ERROR:2,INFO:0,WARN:1},xp=e=>({cacheKey:"advisor_min_severity_invalid",categories:["SCHEMA"],description:"`advisor.minSeverity` in `lunora.config.*` sets the lowest advisory level codegen reports and writes into `_generated/shard.ts`. Codegen reads it by parsing the file, so it has to be a string literal.",detail:e,facing:"INTERNAL",level:"WARN",metadata:{},name:"advisor_min_severity_invalid",remediation:'Set `advisor: { minSeverity: "info" | "warn" | "error" }` as a literal on the config\'s default export.',title:"`advisor.minSeverity` is not a level codegen can read, so every advisory was reported"}),Sp=(e,t)=>{const{advisor:s}=Wn(e);if(s===void 0||s.minSeverity===void 0&&s.unreadable!==!0)return[...t];const{minSeverity:n}=s,i=n!==void 0&&Object.hasOwn(pn,n)?pn[n]:void 0;return i===void 0?[...t,xp(n===void 0?"`advisor.minSeverity` is not a string literal codegen can read without evaluating the config: a computed value or key, or a spread that could set or override it.":`\`advisor.minSeverity\` is "${n}", which is not one of "info", "warn" or "error".`)]:t.filter(o=>Ep(o)||mn[o.level]>=mn[i])},Ap=(e,t)=>{const{advisor:s}=Wn(e),n=hp(t,s?.accept??[]);return Sp(e,s?.acceptUnreadable===!0?[...n,vp()]:n)},yp={call:"function",enqueue:"queue",invoke:"service",publish:"topic",schedule:"function"},bp="crons",Np=lo.replace(/\.ts$/u,""),pe=(e,t)=>`${Xt(e)}:${t}`,Pt=(e,t,s)=>t===""?{reason:`the ${s} is not a string literal`}:{to:`${e}:${t}`},Pp=e=>[...e.callEdges.map(t=>{const s=t.target===void 0?{reason:t.reason??"unreadable target"}:{to:`${yp[t.kind]}:${t.target}`};return{file:t.file,kind:t.kind,line:t.line,scope:t.scope,...s}}),...e.queries.map(t=>({file:t.file,kind:"read",line:t.line,scope:t.scope,...Pt("table",t.table,"table name")})),...[...e.inserts,...e.tableWrites].map(t=>({file:t.file,kind:"write",line:t.line,scope:t.scope,...Pt("table",t.table,"written table")})),...e.workflowCalls.map(t=>({file:t.file,kind:"start",line:t.line,scope:t.scope,...Pt("workflow",t.workflow,"workflow name")}))],wp=e=>e.untracked===!0?"inside a helper only code outside any export calls":"inside a non-exported helper",Ip=e=>{const{scope:t}=e;switch(t.kind){case"export":return[{...e,exportName:t.name}];case"helper":return t.callers.length===0?[{...e,unattributed:wp(t)}]:t.callers.map(s=>({...e,exportName:s}));default:return[{...e,unattributed:"at module scope"}]}},Tp=e=>Pp(e).flatMap(t=>Ip(t)),Cp=e=>[...e.queues.flatMap(t=>t.topic===void 0?[]:[{file:t.filePath,from:`topic:${t.topic}`,kind:"subscribe",line:0,to:`queue:${t.exportName}`}]),...e.crons.map(t=>{const s=t.workflow===void 0?void 0:`workflow:${t.workflow.exportName}`,n=t.functionPath===void 0?void 0:`function:${t.functionPath}`,i=s??n;return{file:bp,from:`cron:${t.name}`,kind:"trigger",line:0,...i===void 0?{reason:"the cron has no target"}:{to:i}}})],Op=e=>new Map(e.flatMap(t=>t.tables.map(s=>[s,t.name]))),xe=(e,t)=>t===void 0?e:{...e,module:t},kp=e=>{const t=new Map,s=new Map,n=Op(e.modules),i=(c,l)=>{s.set(c,[...s.get(c)??[],l])},o=(c,l)=>{t.set(c.id,c),l!==void 0&&i(l,c.id)},a=(c,l)=>{c!==void 0&&i(pe(c.file,c.exportName),l)};for(const c of e.functions){const l=pe(c.filePath,c.exportName),u=[...to(c.filePath),c.exportName].join(".");o(xe({detail:c.kind,id:`function:${l}`,kind:"function",name:u},Me(e.modules,c.filePath)),l)}for(const c of e.httpRoutes){const l=pe(c.filePath,c.exportName);o(xe({id:`http:${l}`,kind:"http",name:`${c.method} ${c.path}`},Me(e.modules,c.filePath)),l)}for(const c of e.schema.tables)o(xe({id:`table:${c.name}`,kind:"table",name:c.name},n.get(c.name)));for(const c of e.queues){const l=c.topic===void 0?{}:{detail:"subscription"};o(xe({...l,id:`queue:${c.exportName}`,kind:"queue",name:c.exportName},Me(e.modules,c.filePath)),pe(c.filePath,c.exportName)),a(c.handlerSite,`queue:${c.exportName}`)}for(const c of e.topics)o(xe({id:`topic:${c.exportName}`,kind:"topic",name:c.exportName},Me(e.modules,c.filePath)));for(const c of e.workflows)o({id:`workflow:${c.exportName}`,kind:"workflow",name:c.exportName},pe(Np,c.exportName)),a(c.handlerSite,`workflow:${c.exportName}`);for(const c of e.crons)o({detail:c.cron,id:`cron:${c.name}`,kind:"cron",name:c.name});for(const c of e.services){const l=c.rpcEntrypoint===void 0?"fetch":"rpc";o({detail:c.entrypoint===void 0?l:`${l} · ${c.entrypoint}`,id:`service:${c.name}`,kind:"service",name:c.worker})}return{nodes:t,sites:s}},Rp=e=>e==="default"?"the default export is not a registered function":`"${e}" is not a registered function`,Fp=(e,t)=>"from"in e?[e.from]:"unattributed"in e?{reason:e.unattributed}:t.get(pe(e.file,e.exportName))??{reason:Rp(e.exportName)},Lp=(e,t,s)=>{if("reason"in e)return{reason:e.reason};const n=Fp(e,t);if("reason"in n)return n;const{to:i}=e;return s.has(i)?{drawn:n.map(o=>({from:o,kind:e.kind,to:i}))}:{reason:`${i} is not declared`}},wt=e=>`${e.from}|${e.kind}|${e.to}`,Dp=e=>`${e.file}|${String(e.line)}|${e.kind}|${e.reason}`,Mp=e=>{const{nodes:t,sites:s}=kp(e),n=new Map,i=new Map;for(const o of[...Cp(e),...Tp(e)]){const a=Lp(o,s,t);if("drawn"in a)for(const c of a.drawn)n.set(wt(c),c);else{const c={file:o.file,kind:o.kind,line:o.line,reason:a.reason};i.set(Dp(c),c)}}return{edges:[...n.values()].toSorted((o,a)=>wt(o).localeCompare(wt(a))),nodes:[...t.values()].toSorted((o,a)=>o.id.localeCompare(a.id)),modules:e.modules.map(o=>({...o.description===void 0?{}:{description:o.description},...o.installed===!0?{installed:!0}:{},...o.ownsFolder===!1?{ownsFolder:!1}:{},name:o.name,tables:[...o.tables]})),unresolved:[...i.values()].toSorted((o,a)=>o.file.localeCompare(a.file)||o.line-a.line),version:1}},_p=e=>`${qn}export const architecture = ${fo(e,"Record<string, unknown>")};
+`,hn=(e,t="api")=>{const s=new Map;for(const n of e){const i=Xt(n),o=s.get(i);if(o===void 0){s.set(i,n);continue}if(o!==n){const a=t==="api"?`the generated api.ts would declare "${i}" twice and the dispatch key "${i}:<fn>" would be ambiguous`:`the generated api.ts would declare "${i}" twice in HttpStreamsRef and again in the httpStreams object literal`;throw new K("INTERNAL",`@lunora/codegen: "${o}" and "${n}" both map to the ${t} namespace "${i}" — ${a}. Rename one file so the two differ by more than a non-identifier character (\`-\`, \`.\`, \`/\` and \`_\` all sanitize to \`_\`).`,{status:500})}}},Kp=(e,t={})=>{const{hasVectors:s=!0,scheduler:n=!1,storage:i=!1,usage:o}=t,a=[];e.tables.some(c=>jn(c))&&a.push({name:"@lunora/d1",reason:"`.global()` tables are D1-backed, so `_generated/app.ts` imports the D1 `ctx.db` adapter"}),e.tables.some(c=>Hn(c))&&a.push({name:"@lunora/hyperdrive",reason:'`.global({ backend: "hyperdrive" })` tables route through `@lunora/hyperdrive/global`'},{name:"@lunora/sql-store",reason:'`.global({ backend: "hyperdrive" })` makes `_generated/app.ts` import the `SqlCtxDbOptions` / `SqlExec` types'}),n&&a.push({name:"@lunora/scheduler",reason:"a declared cron (or `ctx.scheduler` use) makes `_generated/app.ts` import `createScheduler`"}),i&&a.push({name:"@lunora/storage",reason:"a `v.storage()` column, a storage access rule (or `ctx.storage` use) makes `_generated/app.ts` import `createStorage`"}),e.vectorIndexes.length>0&&s&&a.push({name:"@lunora/bindings",reason:"`.vectorize()` indexes make `_generated/shard.ts` import `@lunora/bindings/vectors`"});for(const c of o===void 0?[]:xo)c.requiredPackage!==void 0&&o?.[c.key]===!0&&a.push({name:c.requiredPackage,reason:`\`ctx.${c.contextProperty??c.key}\` usage makes \`_generated/\` import \`${c.moduleSpecifier}\``});return a.filter((c,l)=>a.findIndex(u=>u.name===c.name)===l)},zp=(e,t,s={})=>{if(t===void 0)return;const n=Kp(e,s).filter(o=>!t.has(o.name));if(n.length===0)return;const i=n.map(o=>`  - ${o.name} — ${o.reason}`).join(`
+`);throw new K("INTERNAL",`@lunora/codegen: this schema's generated code imports packages the project does not declare:
+${i}
+
+Install them with your package manager, then re-run codegen.`)},$p="env.ts",Bp=e=>{const t=e.getSymbol();if(!t)return e.getText()==="defineEnv";for(const s of t.getDeclarations())if(r.isImportSpecifier(s))return tt(s.getImportDeclaration().getModuleSpecifierValue())?s.getNameNode().getText()==="defineEnv":!1;return!1},Vp=e=>{const t=e.getSymbol();if(!t)return!1;for(const s of t.getDeclarations()){if(!r.isNamespaceImport(s))continue;const n=s.getFirstAncestorByKind(d.ImportDeclaration);return n!==void 0&&tt(n.getModuleSpecifierValue())}return!1},Up=e=>{if(r.isIdentifier(e))return Bp(e);if(r.isPropertyAccessExpression(e)){const t=e.getExpression();return e.getName()==="defineEnv"&&r.isIdentifier(t)&&Vp(t)}return!1},Wp=e=>{const t=[];for(const s of e.getVariableDeclarations()){const n=s.getInitializer();if(n?.getKind()!==d.CallExpression||!Up(n.getExpression()))continue;const o=s.getNameNode();if(!r.isIdentifier(o)){if(s.getVariableStatement()?.hasExportKeyword()!==!0)continue;throw ue(o,"defineEnv exports must be plain named exports (no destructuring)")}const a=Ht(s,"member");a!==void 0&&t.push({exportName:a})}return t},qp=(e,t)=>{const s=E(t,$p);if(!_(s))return;const n=e.getSourceFile(s)??e.addSourceFileAtPath(s),i=Wp(n);if(i.length!==0){if(i.length>1)throw ue(n,`lunora/env.ts declares ${i.length.toString()} defineEnv() contracts (${i.map(o=>o.exportName).join(", ")}); exactly one is allowed`);return i[0]}},jp={defineLiveStream:"liveStreams",defineRoom:"typedWebSockets",defineWebSocket:"socketRoutes"},Hp=new Set(["allowedHosts","deniedHosts","interceptHttps"]),Gp=(e,t)=>{const s=h(t);if(s===void 0||!r.isIdentifier(s))return s;const n=s.getText();return h(e.getDescendantsOfKind(d.VariableDeclaration).find(i=>i.getName()===n)?.getInitializer())},Yp=(e,t)=>e!==void 0&&r.isObjectLiteralExpression(e)&&e.getProperties().some(s=>{if(r.isShorthandPropertyAssignment(s))return t.has(S(s));if(!r.isPropertyAssignment(s)||!t.has(S(s)))return!1;const n=h(s.getInitializer())?.getText();return n!=="false"&&n!=="undefined"}),Qp=new Set(["durable"]),Xp=new Set(["rollback"]),Mi=e=>{const t=e.getExpression();return r.isPropertyAccessExpression(t)?t.getName():t.getText()},Jp="defineApp",be="app",vn=(e,t)=>e.getDescendantsOfKind(d.PropertyAssignment).some(s=>S(s)===be&&s.getInitializer()?.getText()===t)||t===be&&e.getDescendantsOfKind(d.ShorthandPropertyAssignment).some(s=>S(s)===be),Zp=e=>{if(e===void 0||!To.includes(e.getSourceFile().getBaseName()))return!1;if(r.isMethodDeclaration(e))return r.isObjectLiteralExpression(e.getParent())&&S(e)===be;if(!(r.isArrowFunction(e)||r.isFunctionExpression(e)||r.isFunctionDeclaration(e)))return!1;const t=e.getParent();if(r.isPropertyAssignment(t))return S(t)===be;if(r.isVariableDeclaration(t))return vn(e.getSourceFile(),t.getName());const s=r.isFunctionDeclaration(e)?e.getName():void 0;return s!==void 0&&vn(e.getSourceFile(),s)},em="AppBuilder",_i=e=>{const t=e.getSourceFile();return t.getBaseNameWithoutExtension()==="app"&&t.getDirectory().getBaseName()==="_generated"},tm=e=>{const t=e.getType(),s=(t.getConstraint()??t).getSymbol();return s?.getName()===em&&s.getDeclarations().some(n=>_i(n))},sm=e=>e.getText()===Jp&&(e.getSymbol()?.getDeclarations()??[]).every(t=>r.isImportSpecifier(t)||r.isImportClause(t)||_i(t)),Ki=(e,t,s=new Set)=>{const n=Je(t);if(n===void 0||!r.isIdentifier(n))return!1;if(sm(n))return!0;const i=n.getText();if(s.has(i))return!1;s.add(i);for(const o of n.getAncestors()){if(r.isParametered(o)&&o.getParameters().some(a=>a.getName()===i))return Zp(o);if(r.isBlock(o)||r.isSourceFile(o)){const a=o.getVariableStatements().flatMap(c=>c.getDeclarations()).find(c=>c.getName()===i);if(a!==void 0)return Ki(e,a.getInitializer(),s)}}return!1},zi=(e,t)=>{const s=qt(t.getExpression());return s?.member==="deliveryAuthorization"&&(Ki(e,s.object)||tm(s.object))},nm=new Map([["defineContainer",{keys:Hp,signal:"containerEgressPolicy"}],["defineStep",{keys:Xp,signal:"workflowRollback"}],["stream",{keys:Qp,signal:"durableStreams"}]]),im=(e,t)=>{const s=nm.get(Mi(t));if(s!==void 0)return t.getArguments().some(n=>Yp(Gp(e,n),s.keys))?s.signal:void 0},rm=(e,t)=>jp[Mi(t)]??(zi(e,t)?"deliveryAuthorization":void 0),om=(e,t,s)=>{const n={containerEgressPolicy:!1,deliveryAuthorization:!1,durableStreams:!1,liveContext:!1,liveStreams:!1,secrets:!1,socketRoutes:!1,typedWebSockets:!1,workflowRollback:!1};for(const i of A(t)){const o=e.getSourceFile(i)??e.addSourceFileAtPath(i);if(!n.secrets||!n.liveContext){const c=No(o);n.secrets=n.secrets||c.has("secrets"),n.liveContext=n.liveContext||c.has("live")}const a=k(o,d.CallExpression);for(const c of a){const l=im(o,c)??rm(o,c);l!==void 0&&(n[l]=!0)}if(n.liveStreams=n.liveStreams||o.getFullText().includes("defineLiveStream")&&a.some(c=>Bn(c,"defineLiveStream")),Object.values(n).every(Boolean))break}if(n.typedWebSockets=n.typedWebSockets||n.socketRoutes,!n.deliveryAuthorization&&s!==void 0){const i=e.getSourceFile(s)??new Wt({compilerOptions:{allowJs:!0},skipFileDependencyResolution:!0,skipLoadingLibFiles:!0,useInMemoryFileSystem:!0}).createSourceFile(s,Qe(s,"utf8"),{overwrite:!0});n.deliveryAuthorization=i.getDescendantsOfKind(d.CallExpression).some(o=>zi(i,o))}return n},am=(e,t)=>{const s=wo();for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);if(Po(i,s))return!0}return!1},cm="createWorker",lm="extend",En=e=>e!==void 0&&(r.isStringLiteral(e)||r.isNoSubstitutionTemplateLiteral(e))?e.getLiteralValue():void 0,xn=e=>{const t=[],s=En(F(e,"backupCron"));s!==void 0&&t.push(s);const n=F(e,"crons");if(n===void 0||!r.isObjectLiteralExpression(n))return t;for(const i of n.getProperties()){if(!r.isPropertyAssignment(i)&&!r.isMethodDeclaration(i))continue;const o=En(i.getNameNode());o!==void 0&&t.push(o)}return t},dm=e=>{const t=P(e.getExpression()),[s]=e.getArguments();if(s===void 0)return[];if(t===cm)return r.isObjectLiteralExpression(s)?xn(s):[];if(t!==lm||!(r.isArrowFunction(s)||r.isFunctionExpression(s)))return[];const n=Rn(s.getBody());return n===void 0?[]:xn(n)},um=(e,t)=>{const s=[];for(const{filePath:n}of Xe(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const o of k(i,d.CallExpression))s.push(...dm(o))}return[...new Set(s)]},$i=e=>{if(e.kind==="id")return e.tableName;if(!(e.kind!=="array"&&e.kind!=="optional"))return e.inner===void 0?void 0:$i(e.inner)},fm=e=>{const t=new Set(e.tables.map(s=>s.name));return e.tables.some(s=>Object.values(s.shape).some(n=>{const i=$i(n);return i!==void 0&&t.has(i)}))},gm=(e,t)=>{const s=new Map,n=new Map;for(const i of e)s.set(i.name,`workflow "${i.exportName}"`),n.set(i.className,`workflow "${i.exportName}"`);for(const i of t){const o=s.get(i.name);if(o!==void 0)throw new K("DUPLICATE_WORKFLOW_NAME",`Duplicate deployed name "${i.name}": produced by both ${o} and agent "${i.exportName}". Workflow and agent names share one account-wide namespace and must be unique together.`,{status:500});const a=n.get(i.className);if(a!==void 0)throw new K("DUPLICATE_WORKFLOW_CLASS",`Duplicate generated class "${i.className}": produced by both ${a} and agent "${i.exportName}". Workflow and agent export names must yield unique generated class names.`,{status:500})}},pm=e=>{const{lunoraDirectory:t,project:s,projectRoot:n,schema:i}=e,o=sd(s,t),a=qp(s,t),c=uo(s,t),{queues:l,topics:u}=Oo(s,t),f=Ro(n),g=Ao(s,t);gm(c,g);const m=yo(s,t),v=Fo(s,t),B=bo(s,t,c,g),fe=um(s,t),b=om(s,t,Co(n)),V=ko(s,t),G=am(s,t),L=Io(s,t);L.browser=L.browser||V.usesSandboxBrowser;const R=Ct(n,e.target),C=Lo(L,R,{agents:g.length>0,commitOrderedTables:i.tables.some(M=>M.commitOrdered===!0),cronTriggers:B.length>0,crossShardFanout:i.tables.some(M=>Bo(M)),containerEgressPolicy:b.containerEgressPolicy,containerRuntimeScheduling:m.some(M=>M.schedulingPolicy==="durable_object"),containerSandboxTools:m.some(M=>M.sandbox===!0),deliveryAuthorization:b.deliveryAuthorization,durableStreams:b.durableStreams,globalTables:i.tables.some(M=>M.shardMode==="global"),liveContext:b.liveContext,liveStreams:b.liveStreams,typedWebSockets:b.typedWebSockets,queues:l.length>0,relationGraph:fm(i),secretValues:G,secrets:b.secrets,services:f.length>0,topics:u.length>0,vectorStore:i.vectorIndexes.length>0,workerLoaders:V.usesSandboxLoader,workflowRollback:b.workflowRollback,workflowSchedules:c.some(M=>M.schedules!==void 0)}),W=C.usage,J=So(W),se=C.signals.vectorStore!==!1,ne=C.signals.services===!1?[]:f,ae=Gn(n),z=ae??new Set,N=z.has("lunorash");zp(i,ae,{hasVectors:se,scheduler:W.scheduler||B.length>0,storage:W.storage||v.rules.length>0||Object.keys(Yn(i)).length>0,usage:W});const O=_(E(t,"flags.ts")),Ce=_(E(t,"notify.ts"));return{agents:g,capabilities:J,containers:m,crons:B,dataModelContent:qo(i),declaredDependencies:ae,dependencies:z,entryCronTriggers:fe,env:a,featureUsage:W,hasFlags:O,hasNotify:Ce,identity:o,platformGate:{...C,diagnostics:[...Do(n,e.target),...C.diagnostics,...Mo(R,i.vectorIndexes),...b.liveStreams&&b.deliveryAuthorization?[_o(R)]:[],...b.socketRoutes&&b.deliveryAuthorization?[Ko(R)]:[]]},queues:l,serverContent:Uo({agents:g,capabilities:J,containers:m,env:a,hasVectors:se,hasFlags:O,hasNotify:Ce,identity:o,queues:l,schema:i,services:ne,storageRuleBuckets:v.rules.map(M=>M.bucket),topics:u,useUmbrella:N,workflows:c}),services:ne,storageRulesMetadata:v,topics:u,usesSandbox:V.usesSandboxBrowser||V.usesSandboxContainer||V.usesSandboxFs,useUmbrella:N,workflows:c}},Bi=(e,t)=>{if(!r.isPropertyAccessExpression(e))return;const s=e.getExpression();if(!r.isPropertyAccessExpression(s))return;const n=s.getExpression();return r.isPropertyAccessExpression(n)&&n.getName()===t?s.getName():void 0},mm=e=>{if(!r.isPropertyAccessExpression(e))return!1;const t=e.getExpression();return r.isPropertyAccessExpression(t)&&t.getName()==="scheduler"||r.isIdentifier(t)&&t.getText()==="scheduler"},hm=new Map([["publish",{kind:"publish",surface:"topics"}],["publishBatch",{kind:"publish",surface:"topics"}],["send",{kind:"enqueue",surface:"queues"}],["sendBatch",{kind:"enqueue",surface:"queues"}]]),vm=/^[\w$]+:[\w$]+$/u,Em=(e,t)=>{const s=Mn(t);return s!==void 0?{kind:"call",target:s}:e!=="run"&&t!==void 0?{kind:"call",reason:'the function reference is not a static api.* / internal.* chain or a "namespace:export" key'}:void 0},Sn=e=>{const t=[];for(const s of e.getProperties()){if(!r.isPropertyAssignment(s)&&!r.isShorthandPropertyAssignment(s))return;t.push(s.getName())}return t},xm=e=>{if(e===void 0)return[];if(r.isObjectLiteralExpression(e))return Sn(e);if(r.isIdentifier(e)){const t=e.getSymbol()?.getDeclarations()[0];if(r.isVariableDeclaration(t)&&t.getVariableStatement()?.getDeclarationKind()===Ar.Const){const s=t.getInitializer();return r.isObjectLiteralExpression(s)?Sn(s):void 0}}},Sm=(e,t,s)=>({schedule:{argKeys:xm(s),...e==="runAfter"&&t!==void 0&&r.isNumericLiteral(t)?{delayMs:t.getLiteralValue()}:{}}}),Am=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t))return;const s=t.getName(),[n,i,o]=e.getArguments();if(Dn.has(s))return Em(s,n);if((s==="runAfter"||s==="runAt")&&mm(t)){const l=Mn(i)??(r.isStringLiteral(i)&&vm.test(i.getLiteralText())?i.getLiteralText():void 0);return l===void 0?{kind:"schedule",reason:'the scheduled function is not a static api.* / internal.* chain or a "namespace:export" key'}:{kind:"schedule",target:l,...Sm(s,n,o)}}const a=hm.get(s),c=a===void 0?void 0:Bi(t,a.surface);return a===void 0||c===void 0?void 0:{kind:a.kind,target:c}},ym=new Set([d.AmpersandAmpersandEqualsToken,d.AmpersandAmpersandToken,d.BarBarEqualsToken,d.BarBarToken,d.QuestionQuestionEqualsToken,d.QuestionQuestionToken]),Vi=e=>Sr.isOptionalChain(e.compilerNode),bm=(e,t)=>r.isIfStatement(t)?!y(e,t.getExpression()):r.isWhileStatement(t)||r.isForInStatement(t)||r.isForOfStatement(t)?y(e,t.getStatement()):r.isForStatement(t)?y(e,t.getStatement())||y(t.getIncrementor(),e):r.isCaseClause(t)||r.isDefaultClause(t)||r.isCatchClause(t)?!0:oe(t)?t.getFirstAncestor(oe)!==void 0:r.isConditionalExpression(t)?!y(e,t.getCondition()):r.isBinaryExpression(t)?!y(e,t.getLeft())&&ym.has(t.getOperatorToken().getKind()):(r.isCallExpression(t)||r.isElementAccessExpression(t))&&Vi(t)?!y(e,t.getExpression()):r.isBlock(t)&&t.getStatements().some(s=>s.getEnd()<=e.getStart()&&Dg(s)),Nm=e=>{let t=e,s=e.getParent();for(;s!==void 0&&(r.isAwaitExpression(s)||r.isParenthesizedExpression(s));)t=s,s=s.getParent();const n=r.isVariableDeclaration(s)||r.isBinaryExpression(s)&&y(t,s.getRight())&&s.getOperatorToken().getKind()===d.EqualsToken,i=e.getFirstAncestor(oe);return n||i?.getDescendantsOfKind(d.ThrowStatement).some(o=>o.getStart()>=e.getEnd()&&y(o.getFirstAncestor(oe),i))===!0},Pm=(e,t)=>(r.isWhileStatement(t)||r.isForInStatement(t)||r.isForOfStatement(t))&&y(e,t.getStatement())||r.isForStatement(t)&&(y(e,t.getStatement())||y(t.getIncrementor(),e)),wm=(e,t)=>{if(Vi(e)||t==="schedule"&&Nm(e))return"guard";let s=e,n=!1;for(let i=s.getParent();i!==void 0&&!r.isSourceFile(i);i=i.getParent()){if(bm(s,i)){if(!Pm(s,i))return"guard";n=!0}s=i}return n?"loop":void 0},An=(e,t,s)=>{if(s===void 0)return;const n=wm(e,s.kind);return{...s,...n===void 0?{}:{conditional:!0},...n==="loop"?{loopOnly:!0}:{},file:t,line:e.getStartLineNumber(),scope:x(e)}},Im=(e,t)=>[...T(e,t,(s,n)=>An(s,n,Am(s))),...ie(e,t,d.PropertyAccessExpression,(s,n)=>{const i=Bi(s,"services");return An(s,n,i===void 0?void 0:{kind:"invoke",target:i})})],Tm=new Set(["boolean","number","object","string"]),Cm=e=>{const t=e.getName();if(!Tm.has(t))return;const s=e.getExpression();return Y(s,["flags"])||Y(s,["flags","details"])?t:void 0},Om=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t))return;const s=Cm(t);if(s===void 0)return;const n=e.getArguments()[0];if(!n||!(r.isStringLiteral(n)||r.isNoSubstitutionTemplateLiteral(n)))return;const i=n.getLiteralValue();return i.length>0?{key:i,type:s}:void 0},km=(e,t)=>{const s=new Map;for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const o of k(i,d.CallExpression)){const a=Om(o);a&&!s.has(a.key)&&s.set(a.key,a.type)}}return[...s.entries()].map(([n,i])=>({key:n,type:i})).toSorted((n,i)=>n.key.localeCompare(i.key))},Rm=e=>{const t=e.getType().getProperty("~standard");if(!t)return;const s=t.getTypeAtLocation(e).getProperty("types");if(!s)return;const n=s.getTypeAtLocation(e).getNonNullableType().getProperty("output");if(!n)return;const i=n.getTypeAtLocation(e),o=i.getText(e);if(!o||o==="any"||o==="never"||jo(o))return;const a=e.getSourceFile().getFilePath();if(Ho(i,e,a)){const c=Go(i,e,a,0,new Set);return c===void 0&&Yo(o),c}return o},Fm=e=>e.getProperties().some(t=>{if(r.isSpreadAssignment(t))return!0;const s=$r(t.getNameNode());return s===void 0||s==="namespace"}),Lm=(e,t)=>{for(const{filePath:s}of Xe(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const i of k(n,d.CallExpression)){const o=i.getExpression(),[a]=i.getArguments();if(!(!r.isPropertyAccessExpression(o)||o.getName()!=="auth"||a===void 0)&&(!r.isObjectLiteralExpression(a)||Fm(a)))return i}}},Dm="https://lunora.sh/docs/concepts/data-residency#pinning-auth-and-voice",Mm=(e,t)=>{if(!(e.jurisdiction===void 0||e.jurisdictionPinsAuth===!0||t===void 0))throw ue(t,`the schema pins Durable Objects to the "${e.jurisdiction}" jurisdiction, and this project also has DO-backed auth (users, sessions, accounts, credentials). Pinning the auth object resolves it to a NEW, EMPTY object: existing users stay in the unpinned one until you copy them across (${Dm}). Acknowledge with \`.jurisdiction("${e.jurisdiction}", { pinAuth: true })\`, deploy, then run the copy. For D1-mode auth the acknowledgement changes nothing.`,{code:"JURISDICTION_MOVE",status:422})},_m="room:",Km="__lunora_socket__:",zm=/^[A-Za-z]\w*$/u,yn=e=>zm.test(e),$m=e=>`${e}:`.startsWith(_m)||`${e}:`.startsWith(Km),Ui=e=>e.getProperties().some(t=>r.isSpreadAssignment(t)||r.isComputedPropertyName(t.getNameNode())),Wi=e=>Ui(e)||e.getProperties().some(t=>r.isMethodDeclaration(t)||r.isGetAccessorDeclaration(t)||r.isSetAccessorDeclaration(t)),bn=e=>S(e),os=(e,t)=>e.getProperties().find(s=>(r.isPropertyAssignment(s)||r.isShorthandPropertyAssignment(s))&&S(s)===t),ce=(e,t)=>{const s=ue(e,`defineLiveStream ${t}`);return new K("LIVE_STREAM_NOT_LITERAL",s.message)},qi=(e,t,s)=>{const n=os(e,t),i=r.isPropertyAssignment(n)?n.getInitializer():void 0;if(i===void 0||!r.isObjectLiteralExpression(i))throw ce(n??e,`needs ${s} so codegen can read its topics`);if(Wi(i))throw ce(i,`cannot spread into or compute the keys of \`${t}\`: codegen must read every name as a literal`);return i},Bm=(e,t)=>{const s=bn(t),n=r.isPropertyAssignment(t)?t.getInitializer():void 0;if(n===void 0||!r.isObjectLiteralExpression(n))throw ce(t,`needs an object literal for topic "${s}" ({ key?, payload }), not a reference to one`);if(Wi(n))throw ce(n,`cannot spread into or compute the keys of topic "${s}"`);if(!yn(s)||$m(s))throw new K("LIVE_TOPIC_INVALID",`live stream "${e}": topic name "${s}" must be a plain identifier (letters, digits and "_", starting with a letter) that does not encode into the "room:" or socket topic prefix.`);if(os(n,"key")===void 0)return{fields:[],name:s};const a=qi(n,"key",`an object literal \`key\` for topic "${s}"`).getProperties().map(l=>bn(l)),c=a.find(l=>!yn(l));if(c!==void 0)throw new K("LIVE_TOPIC_INVALID",`live stream "${e}": key field "${s}.${c}" must be a plain identifier (letters, digits and "_", starting with a letter).`);return{fields:a,name:s}},Vm=(e,t,s)=>{const n=e.getArguments()[0];if(n===void 0||!r.isObjectLiteralExpression(n))throw ce(e,"needs an object-literal options argument so codegen can read its `id` and `topics`");if(Ui(n))throw ce(n,"cannot spread its options or use a computed key: codegen must read `id` and `topics` as literals");const i=os(n,"id"),o=r.isPropertyAssignment(i)?i.getInitializer():void 0;if(o===void 0||!r.isStringLiteral(o))throw ce(i??n,'needs a string-literal `id` (e.g. `defineLiveStream({ id: "posts", … })`) so codegen can type its references');const a=o.getLiteralValue(),c=qi(n,"topics","an object-literal `topics` map");return{exportName:t,filePath:w(s,e.getSourceFile().getFilePath()),id:a,topics:c.getProperties().map(l=>Bm(a,l))}},Um=e=>{const t=new Map;for(const s of e)for(const[n,i]of[["id",s.id],["export",s.exportName]]){const o=`${n}:${i}`,a=t.get(o);if(a!==void 0)throw new K("LIVE_STREAM_DUPLICATE",`live stream ${n} "${i}" is declared by both lunora/${a}.ts and lunora/${s.filePath}.ts; it must be unique across the app.`);t.set(o,s.filePath)}},Wm=e=>{let t=e.getParent();for(;r.isAsExpression(t)||r.isSatisfiesExpression(t)||r.isNonNullExpression(t)||r.isParenthesizedExpression(t);)t=t.getParent();return t},qm=(e,t)=>e.getDescendantsOfKind(d.CallExpression).filter(s=>Bn(s,"defineLiveStream")).map(s=>{const n=Wm(s),i=r.isVariableDeclaration(n)?Ht(n,"binding"):void 0;if(i===void 0)throw new K("LIVE_STREAM_NOT_EXPORTED",ue(s,"defineLiveStream must be assigned to a named export (`export const posts = defineLiveStream({ … })`), not a default export, a local, or an inline call, so codegen can type its references").message);return Vm(s,i,t)}),jm=(e,t)=>{const s=A(t).flatMap(n=>qm(e.getSourceFile(n)??e.addSourceFileAtPath(n),t));return Um(s),s},Hm=e=>r.isPropertyAssignment(e)||r.isMethodDeclaration(e)||r.isGetAccessorDeclaration(e)?r.isComputedPropertyName(e.getNameNode()):!1,Gm=e=>r.isPropertyAssignment(e)||r.isShorthandPropertyAssignment(e)||r.isMethodDeclaration(e)||r.isGetAccessorDeclaration(e)?Hm(e):!0,ji=(e,t=!1)=>{for(const s of e.getProperties()){if(Gm(s))return!0;if(t)continue;if(!r.isPropertyAssignment(s))return!0;const n=s.getInitializer();if(!n||!r.isObjectLiteralExpression(n)||ji(n,!0))return!0}return!1},Ym=(e,t)=>{for(const s of A(t)){const n=e.getSourceFile(s)??e.addSourceFileAtPath(s);for(const{receiver:i}of Qn(n))for(const o of Qt(i)){const a=o.getArguments()[0];if(a!==void 0&&(!r.isObjectLiteralExpression(a)||ji(a)))return!0}}return!1},Qm=e=>{const t=e.getArguments()[0];if(!t||!r.isObjectLiteralExpression(t))return[];const s=[];for(const n of t.getProperties()){const i=Ue(n);if(i===void 0||!r.isPropertyAssignment(n))continue;const o=n.getInitializer();if(!(!o||!r.isObjectLiteralExpression(o)))for(const a of o.getProperties()){const c=Ue(a);c!==void 0&&s.push({column:c,strategy:Un(a),table:i})}}return s},Xm=(e,t)=>{const s=new Map;for(const n of A(t)){const i=e.getSourceFile(n)??e.addSourceFileAtPath(n);for(const{receiver:o}of Qn(i))for(const a of Qt(o))for(const c of Qm(a)){const l=`${c.table}\0${c.column}`;s.has(l)||s.set(l,c)}}return{columns:[...s.values()]}},Jm=["providerSubscriptionId","state"],Zm=["providerEventId","processedAt"],Nn=(e,t)=>t.every(s=>s in e.shape),eh=e=>{const t=e.find(n=>n.name==="payment_subscriptions"),s=e.find(n=>n.name==="payment_events");return t!==void 0&&s!==void 0&&Nn(t,Jm)&&Nn(s,Zm)},th=["account","apikey","member","passkey","session","teamMember","twoFactor","user"],sh=(e,t)=>{const s={};for(const[n,i]of e)s[n]={dataset:i};for(const[n,i]of t)s[n]={excluded:i};return s},nh=(e,t)=>{const s=[];for(const n of e){const i=t[n];i===void 0?s.push({code:"unclassified",table:n}):"excluded"in i&&i.excluded.trim()===""&&s.push({code:"excluded_without_reason",table:n})}return s},ih="@lunora/privacy",Hi="userId",Pn=new Set(["user","users"]),rh=e=>e.replaceAll("\\","/"),oh="privacy",ah=new Set(["actionCacheDataset","authDataset","documentHistoryDataset"]),it=e=>e!==void 0&&(r.isStringLiteral(e)||r.isNoSubstitutionTemplateLiteral(e))?e.getLiteralText():void 0,Ie=e=>r.isPropertyAssignment(e)?e.getName().replaceAll(/^["']|["']$/gu,""):"",as=e=>e.getProperties().filter(t=>r.isPropertyAssignment(t)),ch=(e,t)=>{const s=e.getProperty(t),n=r.isPropertyAssignment(s)?s.getInitializer():void 0;return n!==void 0&&r.isObjectLiteralExpression(n)?n:void 0},rt=e=>{const t=e.getExpression();return r.isIdentifier(t)?t.getText():void 0},lh=(e,t)=>{const s=e.getArguments()[1];if(s===void 0||!r.isObjectLiteralExpression(s))return;const n=ch(s,"tables"),i=it(e.getArguments()[0])??"defineDataset";for(const o of n===void 0?[]:as(n).map(a=>Ie(a)))t.datasets.set(o,i)},cs=8,he=(e,t=0)=>{if(t>cs)return;if(r.isAsExpression(e)||r.isSatisfiesExpression(e)||r.isParenthesizedExpression(e))return he(e.getExpression(),t+1);if(!r.isIdentifier(e))return e;const s=e.getSymbol(),n=(s?.isAlias()===!0?s.getAliasedSymbol():s)?.getValueDeclaration(),i=r.isVariableDeclaration(n)?n.getInitializer():void 0;return i===void 0?void 0:he(i,t+1)},dh=(e,t)=>{const s=e.getArguments()[0],n=s===void 0?void 0:he(s),i=n!==void 0&&r.isObjectLiteralExpression(n)?as(n):[],o=new Set(i.map(a=>Ie(a)));for(const a of th)o.has(a)||t.datasets.set(a,"authDataset");for(const a of i){const c=r.isPropertyAssignment(a)?it(a.getInitializer()):void 0;c!==void 0&&(t.datasets.set(c,"authDataset"),Ie(a)==="user"&&t.userTables.add(c))}},wn=(e,t,s)=>{t.datasets.set(it(e.getArguments()[0])??s,s)},uh=e=>{if(r.isPropertyAssignment(e)){const t=e.getInitializer();return t===void 0?void 0:[Ie(e),t]}if(r.isShorthandPropertyAssignment(e)){const t=e.getValueSymbol(),s=(t?.isAlias()===!0?t.getAliasedSymbol():t)?.getValueDeclaration(),n=r.isVariableDeclaration(s)?s.getInitializer():void 0;return[e.getName(),n??e.getNameNode()]}},Gi=(e,t=0)=>{const s=he(e,t);if(s===void 0||!r.isObjectLiteralExpression(s)||t>cs)return;const n=new Map;for(const i of s.getProperties()){const o=r.isSpreadAssignment(i)?Gi(i.getExpression(),t+1):[uh(i)];if(o===void 0)return;for(const a of o)a!==void 0&&n.set(a[0],a[1])}return n},fh=e=>{const t=e.getArguments()[0];return t===void 0?void 0:Gi(t)},gh=(e,t)=>{const s=e?.get("exclude"),n=s===void 0?void 0:he(s);for(const i of n!==void 0&&r.isObjectLiteralExpression(n)?as(n):[])t.excluded.set(Ie(i),r.isPropertyAssignment(i)?it(i.getInitializer())??"":"")},ph=(e,t)=>{switch(rt(e)){case"actionCacheDataset":{wn(e,t,"actionCache");break}case"authDataset":{dh(e,t);break}case"defineDataset":{lh(e,t);break}case"documentHistoryDataset":{wn(e,t,"documentHistory");break}}},ls=e=>e!==void 0&&r.isCallExpression(e)&&rt(e)==="defineDataset",Yi=e=>e!==void 0&&r.isCallExpression(e)&&ah.has(rt(e)??""),mh=e=>{const t=e.getSymbol(),n=(t?.isAlias()===!0?t.getAliasedSymbol():t)?.getValueDeclaration(),i=r.isVariableDeclaration(n)?n.getInitializer():void 0;return r.isVariableDeclaration(n)&&(ls(i)||Yi(i))?n:void 0},Qi=(e,t,s=0)=>{const n=he(e,s);if(n===void 0||!r.isArrayLiteralExpression(n)||s>cs)return!1;for(const i of n.getElements())if(r.isSpreadElement(i)){if(!Qi(i.getExpression(),t,s+1))return!1}else if(!ls(i)&&!Yi(i)){const o=r.isIdentifier(i)?mh(i):void 0;if(o===void 0)return!1;t.add(o)}return!0},hh=e=>{if(e===void 0)return;const t=e.get("datasets"),s=new Set;return t===void 0||Qi(t,s)?s:void 0},vh=(e,t)=>{const s=[];for(const i of k(e,d.CallExpression))if(ph(i,t),rt(i)==="definePrivacy"){const o=fh(i);gh(o,t),s.push({location:`${e.getFilePath()}:${String(i.getStartLineNumber())}`,passed:hh(o)})}return{declared:k(e,d.VariableDeclaration).filter(i=>ls(i.getInitializer())).map(i=>({declaration:i,name:i.getName()})),privacyCalls:s}},Eh=(e,t)=>{const s=E(t,"schema.ts"),n=[...A(t),..._(s)?[s]:[]];for(const o of n)e.getSourceFile(o)===void 0&&e.addSourceFileAtPath(o);const i=new Set(n.map(o=>rh(o)));return e.getSourceFiles().filter(o=>i.has(o.getFilePath()))},xh=(e,t,s)=>{if(s?.has(ih)!==!0)return{classifications:{},enabled:!1,unusedDatasets:[],userTables:Pn};const n={datasets:new Map,excluded:new Map,userTables:new Set(Pn)},i=[],o=[];for(const f of Eh(e,t)){const g=vh(f,n);i.push(...g.declared),o.push(...g.privacyCalls)}const a=new Set;for(const f of o){for(const g of f.passed??[])a.add(g);f.passed===void 0&&console.warn(`@lunora/codegen: privacy_datasets_unresolved: the definePrivacy call at ${f.location} passes datasets codegen cannot read, so a defineDataset it leaves out is not reported. Pass an array of dataset constants, directly or through a spread of a config object literal.`)}const l=o.every(f=>f.passed!==void 0)?i.filter(f=>!a.has(f.declaration)).map(f=>f.name):[];return{classifications:sh(n.datasets,n.excluded),enabled:o.length>0,unusedDatasets:l,userTables:n.userTables}},Xi=(e,t)=>e.kind==="id"?t.has(e.tableName??""):[e.inner,e.keyType,e.valueType,...e.members??[],...Object.values(e.shape??{})].some(n=>n!==void 0&&Xi(n,t)),Sh=(e,t)=>e.extensionKey!==oh&&(Hi in e.shape||Object.values(e.shape).some(s=>Xi(s,t))),Ah=e=>e.code==="excluded_without_reason"?`privacy_exclusion_unexplained: "${e.table}" is excluded without a reason. Give one in definePrivacy({ exclude }).`:`privacy_table_unclassified: "${e.table}" holds user data (a "${Hi}" column or a v.id of a user table) but no dataset exports it. Add it to a defineDataset, or exclude it in definePrivacy({ exclude }) with a reason.`,yh=(e,t)=>{if(!t.enabled)return;const s=e.filter(o=>Sh(o,t.userTables)).map(o=>o.name),[n]=nh(s,t.classifications);if(n!==void 0)throw new K("PRIVACY_COVERAGE",Ah(n));const[i]=t.unusedDatasets;if(i!==void 0)throw new K("PRIVACY_COVERAGE",`privacy_dataset_unused: "${i}" is declared with defineDataset but never passed to definePrivacy({ datasets }). Pass it, or delete it.`)},bh=(e,t)=>{const s=zo(t.target);return{...s===void 0?{}:{platform:s},analytics:e.analytics||t.dependencies.has("@lunora/bindings"),auth:t.dependencies.has("@lunora/auth"),containers:e.container||t.containerCount>0||t.dependencies.has("@lunora/container"),flags:e.flags||t.dependencies.has("@lunora/flags"),kv:e.kv||t.dependencies.has("@lunora/bindings"),mail:e.mail||t.dependencies.has("@lunora/mail"),notifications:e.notify||t.dependencies.has("@lunora/notify"),payments:e.payments||t.hasPaymentTables,privacy:t.dependencies.has("@lunora/privacy"),queues:t.queueCount>0||t.dependencies.has("@lunora/queue"),scheduler:e.scheduler||t.cronCount>0||t.dependencies.has("@lunora/scheduler"),storage:e.storage||t.storageRuleCount>0||t.storageColumnCount>0||t.dependencies.has("@lunora/storage"),vectors:t.vectorStoreSupported&&t.vectorIndexCount>0,workflows:e.workflows||t.workflowCount>0||t.dependencies.has("@lunora/workflow")}},Nh=new Set(["delete","hardDelete","patch","replace","restore"]),Ph=new Set(["insertMany","insertManyUnsafe","patchIf","patchWhere"]),wh=new Set(["delete","deleteMany","hardDelete","insert","insertMany","patch","patchMany","replace","restore","upsert","upsertMany"]),In=(e,t)=>{const s=e.getNonNullableType().getProperty("__table")?.getTypeAtLocation(t);if(s===void 0)return[];const n=s.isUnion()?s.getUnionTypes():[s],i=n.map(o=>o.getLiteralValue()).filter(o=>typeof o=="string");return i.length===n.length?i:[]},Ih=(e,t)=>{const s=e.getType();if(t==="deleteMany"||t==="patchMany"){const n=s.getArrayElementType();if(n===void 0)return[];const i=t==="patchMany"?n.getProperty("id")?.getTypeAtLocation(e):n;return i===void 0?[]:In(i,e)}return In(s,e)},Tn="",Th=(e,t)=>{if(t!=="patch"&&t!=="patchMany")return;const s=e.getArguments()[1];if(s===void 0||!r.isObjectLiteralExpression(s))return;const n=[];for(const i of s.getProperties()){if(!r.isPropertyAssignment(i)&&!r.isShorthandPropertyAssignment(i))return;n.push(i.getName())}return n},Ch=(e,t)=>{if(Ph.has(e))return{method:e,tables:[t!==void 0&&r.isStringLiteral(t)?t.getLiteralText():Tn]};if(Nh.has(e)||e==="deleteMany"||e==="patchMany"){const s=t===void 0?[]:Ih(t,e);return{method:e,tables:s.length===0?[Tn]:s}}},Cn=(e,t)=>e===void 0?void 0:{...e,fields:Th(t,e.method)},Oh=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t))return;const s=t.getName(),n=t.getExpression();if($(n))return Cn(Ch(s,e.getArguments()[0]),e);if(wh.has(s)&&r.isPropertyAccessExpression(n)&&$(n.getExpression()))return Cn({method:s,tables:[n.getName()]},e)},kh=(e,t)=>T(e,t,(s,n)=>{const i=Oh(s);if(i===void 0)return;const o=x(s),a=s.getStartLineNumber();return i.tables.map(c=>({...i.fields===void 0?{}:{fields:i.fields},file:n,line:a,method:i.method,scope:o,table:c}))}),Rh=(e,t,s)=>({cacheKey:`procedure_arguments_unreadable:${e}:${t}`,categories:["SCHEMA"],description:"Codegen reads an argument record statically. One built at runtime — a factory call, or a property off a value it cannot follow — has no literal to read, so the generated `FunctionReference` carries only the arguments it could see while the runtime validator still enforces all of them.",detail:`\`${t}\` in \`${e}\` (line ${s.toString()}) declares arguments codegen could not read, so its generated type is missing some of them.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:s},name:"procedure_arguments_unreadable",remediation:`Declare the arguments as an object literal, or as a \`const\` object literal the chain names — \`const ${t}Args = { … };\` then \`.input(${t}Args)\`. Both resolve; a record returned by a call does not.`,title:"Procedure arguments are missing from the generated type"}),Fh=(e,t)=>{if(t===void 0){const s=e.getArguments()[0];if(s===void 0||!r.isObjectLiteralExpression(s)||U(s,"args")===void 0)return!1}return Zt(e,t).opaque},Lh=(e,t)=>{const s=[],n=(i,o)=>{const a=i.getInitializer();if(a===void 0||!r.isCallExpression(a))return;const c=te(a);c!==void 0&&Fh(a,c.receiver)&&s.push(Rh(t,o,a.getStartLineNumber()))};for(const i of e.getVariableStatements().filter(o=>o.isExported()))for(const o of i.getDeclarations())n(o,o.getName());return s},Dh=(e,t)=>{const s=[];for(const n of A(t)){const i=e.getSourceFile(n);i!==void 0&&s.push(...Lh(i,w(t,n)))}return s.toSorted((n,i)=>n.cacheKey.localeCompare(i.cacheKey))},Mh=new Map([["AgentDefinition",{call:"defineAgent({ … })",file:"agents"}],["ContainerDefinition",{call:"defineContainer({ … })",file:"containers"}],["QueueDefinition",{call:"defineQueue({ … })",file:"queues",note:"A dropped queue has no caller to fail — its consumer is simply never wired."}],["RegisteredAction",{call:"action.input({ … }).action(handler)"}],["RegisteredLifecycleHook",{call:"onConnect(handler)",note:"Substitute the hook you called: `onConnect`, `onDisconnect` and `onShardInit` share one type, so codegen cannot tell which you wrote. A dropped hook has no caller to fail — it silently never fires."}],["RegisteredMigration",{call:"defineMigration({ … })",note:"A dropped migration never runs, so `lunora migrate up` reports nothing to do."}],["RegisteredMutation",{call:"mutation.input({ … }).mutation(handler)"}],["RegisteredMutator",{call:"defineMutator({ … })",file:"mutators"}],["RegisteredQuery",{call:"query.input({ … }).query(handler)"}],["RegisteredReactor",{call:"onQueryChange(select, handler)",note:"A dropped reactor has no caller to fail — it silently never runs."}],["RegisteredRoom",{call:"defineRoom({ … })",note:"A dropped room has no caller to fail — its whisper topic is never wired to a handler, so joins, messages and broadcasts are silently ignored."}],["RegisteredShape",{call:"defineShape({ … })",file:"shapes"}],["RegisteredStream",{call:"query.input({ … }).stream(handler)"}],["RegisteredWebSocket",{call:"defineWebSocket({ … })",note:"A dropped socket route has no caller to fail — its path is never recognised as an upgrade route, so connections fall through to the app router and the handler never runs."}],["RegisteredWhisperAuthorizer",{call:"onWhisper(handler)",note:"A dropped authorizer has no caller to fail — the whisper topics it was meant to gate silently stay open to every socket on the shard."}],["SubscriptionDefinition",{call:"defineSubscription(topic, { … })",file:"queues",note:"A dropped subscription is never published to — its topic's messages simply never reach it."}],["WorkflowDefinition",{call:"defineWorkflow({ … })",file:"workflows"}]]),Ye=({byName:e,byPath:t},s,n)=>t.has(`${s}:${n}`)||e.has(n),Ji=e=>!e.isAny(),Zi=e=>{const t=e.getType();if(!Ji(t))return;const s=t.getAliasSymbol()?.getName()??t.getSymbol()?.getName(),n=s===void 0?void 0:Mh.get(s);return n===void 0||s===void 0?void 0:{...n,typeName:s}},_h=e=>{const t=e.getInitializer();return t===void 0?!1:r.isCallExpression(t)||r.isIdentifier(t)||r.isPropertyAccessExpression(t)},er={cause:"codegen recognises a registration only when the initializer is the registering call itself, and this one comes from a factory or an alias",remediation:"A factory that returns a registration cannot be read statically — inline it, or export what the factory builds."},Kh=e=>({cause:`codegen reads this kind of registration only from \`lunora/${e}.ts\`, and this is a different module`,remediation:`Move it into \`lunora/${e}.ts\` — the declaration itself is fine.`}),zh={cause:"it is exported only under a string name that is not an identifier, which the generated `api.ts` and dispatch table cannot address as `<module>.<name>`",remediation:"Export it under an identifier name as well (or instead)."},$h=new Set(["AgentDefinition","ContainerDefinition","QueueDefinition","RegisteredShape","SubscriptionDefinition","WorkflowDefinition"]),Bh={cause:"it is exported only as `default` or under a reserved word, and this kind's name becomes an import binding and a generated class / binding name, where that is a syntax error",remediation:"Export it under a plain identifier: `export const <name> = …` (an extra `export default <name>` is fine)."},Vh=(e,t,s)=>{if(!t.some(i=>Rr(i)))return zh;const n=e.getVariableStatement()?.hasExportKeyword()===!0;return $h.has(s.typeName)&&!n&&!t.some(i=>oa(i))?Bh:er},tr=(e,t,s,n,i)=>{const{call:o,file:a,note:c,typeName:l}=s,u=a!==void 0&&e!==a?a:void 0,f=u===void 0?i:Kh(u),g=c===void 0?f.remediation:`${c} ${f.remediation}`;return{cacheKey:`procedure_not_registered:${e}:${t}`,categories:["SCHEMA"],description:"Codegen registers an export only when its initializer is literally the registering call and the module exports it under an identifier name — by the `export` keyword, a local `export { … }`, or `export default`. Written any other way it exists at runtime but never reaches the generated output — `_generated/api.ts` for a procedure, the lifecycle manifest for a hook or reactor — so a caller cannot address it and a hook never fires.",detail:`\`${t}\` in \`${e}\` (line ${n.toString()}) has type \`${l}\` but was not registered — ${f.cause}.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:t,filePath:e,line:n,typeName:l},name:"procedure_not_registered",remediation:u===void 0?`Assign the registration directly: \`export const ${t} = ${o};\`. ${g}`:g,title:"Procedure exists at runtime but is missing from the generated API"}},Uh=(e,t,s)=>{const n=[];for(const i of X(e)){const o=r.isIdentifier(i.getNameNode())?Tt(i):[i.getName()],c=o.some(u=>Ye(s,t,u))||!_h(i)?void 0:Zi(i),[l=i.getName()]=o;c!==void 0&&n.push(tr(t,l,c,i.getStartLineNumber(),Vh(i,o,c)))}return n},Wh=(e,t,s)=>{if(Ye(s,t,"default"))return[];const n=[];for(const i of e.getExportAssignments().filter(o=>!o.isExportEquals()&&!r.isIdentifier(o.getExpression()))){const o=Zi(i.getExpression());o!==void 0&&n.push(tr(t,"default",o,i.getStartLineNumber(),er))}return n},qh=(e,t,s)=>[...Uh(e,t,s),...Wh(e,t,s)],jh=(e,t,s)=>e.getVariableStatements().flatMap(n=>n.getDeclarations()).filter(n=>r.isIdentifier(n.getNameNode())).filter(n=>Tt(n).some(i=>Ye(s,t,i))).filter(n=>{const i=n.getInitializer();return i!==void 0&&r.isCallExpression(i)&&r.isPropertyAccessExpression(i.getExpression())}).map(n=>{const i=Tt(n).find(o=>Ye(s,t,o))??n.getName();return{declaration:n,exportName:i,relativePath:t}}),Hh=({exportName:e,relativePath:t})=>({cacheKey:"procedure_type_check_unavailable",categories:["SCHEMA"],description:"Codegen cross-checks every export in `lunora/` against its TYPE to catch a procedure the syntactic scan dropped — a factory-assigned export, an alias, a separate `export { … }`. That check needs the type checker to resolve `@lunora/server`; when it cannot, the check reports nothing regardless of what the code does.",detail:`Type resolution for \`lunora/\` is unavailable — the registered procedure \`${e}\` in \`${t}\` types as \`any\`, as does every other one — so codegen cannot tell you when an export is dropped from \`_generated/api.ts\`. A dropped procedure will surface as \`Property '<name>' does not exist\` at its call site instead.`,facing:"INTERNAL",level:"WARN",metadata:{exportName:e,filePath:t},name:"procedure_type_check_unavailable",remediation:`Check what codegen sees: \`${e}\` should have a procedure type, not \`any\`. It needs a \`tsconfig.json\` at or above \`lunora/\` — the one codegen finds walking up from there, which is not necessarily the one your editor uses — resolving \`lunorash\` / \`@lunora/server\` to declarations that exist on disk (a workspace dependency has to be built first).`,title:"Codegen cannot type-check `lunora/`, so dropped procedures go unreported"}),Gh=(e,t,s)=>{const n=[],i=[];for(const a of A(t)){const c=e.getSourceFile(a);if(c===void 0)continue;const l=w(t,a);n.push(...qh(c,l,s)),i.push(...jh(c,l,s))}const[o]=i;return o!==void 0&&i.every(({declaration:a})=>!Ji(a.getType()))&&n.push(Hh(o)),n.toSorted((a,c)=>a.cacheKey.localeCompare(c.cacheKey))},Yh=e=>{const t=e.getExpression();if(!r.isPropertyAccessExpression(t)||t.getName()!=="get")return!1;const s=t.getExpression();return r.isPropertyAccessExpression(s)?s.getName()==="workflows":r.isIdentifier(s)&&s.getText()==="workflows"},Qh=e=>{const t=e.getArguments()[0];return t&&r.isStringLiteral(t)?t.getLiteralText():""},Xh=(e,t)=>T(e,t,(s,n)=>Yh(s)?{file:n,line:s.getStartLineNumber(),scope:x(s),workflow:Qh(s)}:void 0),Te=(e,t)=>{_(e)&&Qe(e,"utf8")===t||hr(e,t,"utf8")},Jh=(e,t)=>{if(t===""){Ne(e,{force:!0});return}Te(e,t)},Zh=(e,t)=>{const s=E(e,"services");if(Object.keys(t).length===0){Ne(s,{force:!0,recursive:!0});return}if(_(s))for(const n of On(s,{recursive:!0,withFileTypes:!0})){const i=E(n.parentPath,n.name);n.isFile()&&t[kn(e,i)]===void 0&&Ne(i)}for(const[n,i]of Object.entries(t))Vt(Ut(E(e,n)),{recursive:!0}),Te(E(e,n),i)},ev=(e,t,s)=>{const n=E(e,t);if(Object.keys(s).length===0){Ne(n,{force:!0,recursive:!0});return}if(_(n))for(const i of On(n,{recursive:!0,withFileTypes:!0})){const o=E(i.parentPath,i.name);i.isFile()&&s[kn(n,o)]===void 0&&Ne(o)}for(const[i,o]of Object.entries(s)){const a=E(n,i);Vt(Ut(a),{recursive:!0}),Te(a,o)}},tv=e=>{try{const t=ca(E(e,"package.json"));return typeof t.version=="string"&&t.version!==""?t.version:void 0}catch{return}},Ve=(e,t,s)=>{const n=e.getSourceFile(t);if(n===void 0){e.createSourceFile(t,s,{overwrite:!0});return}n.getFullText()!==s&&n.replaceWithText(s)},sv=(e,t,s)=>e.getSourceFile(t)?.getFullText()===s,nv=(e,t)=>{_(e)||Vt(e,{recursive:!0});const s=[];for(const n of t)switch(n.kind){case"always":{Te(E(e,n.name),n.content),s.push(n.name);break}case"directory":{ev(e,n.name,n.files),s.push(...Object.keys(n.files).map(i=>E(n.name,i)));break}case"services":{Zh(e,n.files),s.push(...Object.keys(n.files));break}default:Jh(E(e,n.name),n.content),n.content!==""&&s.push(n.name)}return s},iv=e=>{const t=tv(e.projectRoot),s=e.wantsArchitecture?e.modules:[],n=da({functions:e.functions,httpRoutes:e.httpRoutes,modules:s,version:t}),i=fa({functions:e.functions,modules:s,version:t});return{openApiContent:`${JSON.stringify(n,void 0,2)}
+`,openApiModuleContent:ua(n),openRpcContent:`${JSON.stringify(i,void 0,2)}
+`,openRpcModuleContent:ga(i)}},rv=".lunora-schema.json",ov=()=>{const e=process.env.LUNORA_CODEGEN_TIMING;return e!==void 0&&e!==""},av=(e,t,s)=>{if(s&&e.length>0){const o=e.map(a=>`"${a.exportName}"`).join(", ");throw new K("MASK_UNSUPPORTED",`This project declares a \`mask(...)\` policy whose argument isn't a plain object literal (e.g. \`mask(sharedPolicies)\` referencing a hoisted variable), or contains a spread (\`...shared\`) or computed key (\`[name]:\`) codegen can't enumerate, so codegen can't tell which columns it masks. Because the project also declares replication shape(s) (${o}), codegen can't verify none of them replicate a table that policy masks — inline every table and column as literal keys so codegen can verify it, or remove the affected shape(s).`,{status:422})}const n=new Map;for(const o of t.columns){const a=n.get(o.table)??[];a.push(o.column),n.set(o.table,a)}const i=t.columns.length>0;for(const o of e){if(o.table===void 0){if(i)throw new K("MASK_UNSUPPORTED",`defineShape "${o.exportName}" has a non-literal \`table\` (a variable or expression, not a string literal), so codegen can't statically verify it doesn't replicate a table that masks a column. This project masks at least one column elsewhere, so the combination can't be proven safe — change "${o.exportName}"'s \`table\` to a plain string literal so codegen can verify it, or remove the mask(s) on the table it targets.`,{status:422});continue}const a=n.get(o.table);if(a===void 0)continue;const c=a.map(l=>`"${l}"`).join(", ");throw new K("MASK_UNSUPPORTED",`defineShape "${o.exportName}" replicates table "${o.table}", which masks column(s) ${c} on at least one procedure. A shape runs no procedure, so \`.use(mask(...))\` never applies to its replicated rows — remove the shape, unmask the table, or wait for shape-masking support.`,{status:422})}},cv=8,lv=e=>{const{agents:t,apiPath:s,generatedFunctionsPath:n,internalPath:i,lazyFunctions:o,lunoraDirectory:a,migrations:c,project:l,roomsSupported:u,shapes:f,usesSandbox:g,useUmbrella:m,workflows:v}=e,B=()=>Xo(()=>{const L=Jo(l,a,{lazyFunctions:o}),R=Yr(l,a);return{functions:L,httpRoutes:Zo(l,a),mutators:R}});let{erased:fe,value:{functions:b,httpRoutes:V,mutators:G}}=B();hn([...b,...G].map(L=>L.filePath)),hn(V.filter(L=>L.stream).map(L=>L.filePath),"http-stream");for(let L=1;;L+=1){const R=u?b:b.filter(N=>N.channel?.kind!=="room"&&N.lifecycle!=="socket"),C=Aa({agents:t,functions:R,httpRoutes:V,mutators:G,useUmbrella:m,workflows:v}),W={agents:t,functions:R,lazyFunctions:o,migrations:c,mutators:G,shapes:f,useUmbrella:m,usesSandbox:g},J=Oa(W),se=ka(W),ne=ya({functions:b,useUmbrella:m}),ae=E(a,"_generated",Xn),z=[[s,C],[i,ne],[n,J],...Object.entries(se).map(([N,O])=>[E(ae,N),O])];if(L>=cv||z.every(([N,O])=>sv(l,N,O)))return{apiContent:C,erased:fe,functions:b,functionModulesContent:se,functionsContent:J,httpRoutes:V,internalContent:ne,mutators:G};for(const[N,O]of z)Ve(l,N,O);({erased:fe,value:{functions:b,httpRoutes:V,mutators:G}}=B())}},dv=e=>{const t=ov(),s=t?vt.now():0,n=E(e.projectRoot,e.lunoraDirectory??"lunora"),i=e.lazyFunctions===!0,o=E(n,"schema.ts");if(!_(o))throw new K("INTERNAL",`schema.ts not found at ${o}`);const a=e.project??Eo(n);Vr(Rm);const c=ia(a,o,e.projectRoot);yh(c.tables,xh(a,n,Gn(e.projectRoot)));const{agents:l,capabilities:u,containers:f,crons:g,dataModelContent:m,dependencies:v,entryCronTriggers:B,env:fe,featureUsage:b,hasFlags:V,hasNotify:G,identity:L,platformGate:R,queues:C,serverContent:W,services:J,storageRulesMetadata:se,topics:ne,usesSandbox:ae,useUmbrella:z,workflows:N}=pm({lunoraDirectory:n,project:a,projectRoot:e.projectRoot,schema:c,target:e.target});Mm(c,c.jurisdiction===void 0?void 0:Lm(a,n));const O=E(n,"_generated"),Ce=E(O,"dataModel.ts"),M=E(O,"server.ts"),sr=E(O,"api.ts"),nr=E(O,"internal.ts"),ir=E(O,"functions.ts");Ve(a,Ce,m),Ve(a,M,W);const ds=Object.fromEntries(J.filter(p=>p.rpcEntrypoint!==void 0).flatMap(p=>Object.entries(Wo(p,O))));for(const[p,ht]of Object.entries(ds))Ve(a,E(O,p),ht);const Oe=ta(a,n),ge=ra(a,n),ot=R.signals.typedWebSockets!==!1,{apiContent:us,erased:rr,functions:Z,functionModulesContent:fs,functionsContent:gs,httpRoutes:at,internalContent:ps,mutators:ct}=lv({agents:l,apiPath:sr,generatedFunctionsPath:ir,internalPath:nr,lazyFunctions:i,roomsSupported:ot,lunoraDirectory:n,migrations:Oe,project:a,shapes:ge,useUmbrella:z,usesSandbox:ae,workflows:N}),ms=ao(a,n),lt=co(ms,c,[...Z,...at].map(p=>p.filePath)),ke=ms.length>0,Re=e.lint===!1&&!ke?void 0:{callEdges:Im(a,n),inserts:ea(a,n),queries:sa(a,n,Z),tableWrites:kh(a,n),workflowCalls:Xh(a,n)},Fe=e.lint===!1||Re===void 0?void 0:pp(a,n,{callSites:Re,containers:f,crons:g,functions:Z,modules:lt,mutators:ct,queues:C,schema:c,shapes:ge,workflows:N,wranglerVariables:e.wranglerVariables}),hs=Fe===void 0?[]:Ap(e.projectRoot,[...vr(Fe,{source:"static"}),...Gh(a,n,{byName:new Set([...N,...C,...l,...f].map(p=>p.exportName)),byPath:new Set([...Z,...ct,...ge,...Oe].map(p=>`${p.filePath}:${p.exportName}`))}),...Dh(a,n),...Qo(rr,n),...pa(C,e.wranglerQueueProducers)]),or=na(a,n),vs=Xm(a,n);av(ge,vs,Ym(a,n));const ar=V?km(a,n):[],dt=R.signals.vectorStore!==!1,cr=$o(Ct(e.projectRoot,e.target),"deliveryAuthorization"),ve=bh(b,{containerCount:f.length,cronCount:g.length,dependencies:v,hasPaymentTables:eh(c.tables),queueCount:C.length,storageColumnCount:Object.keys(Yn(c)).length,storageRuleCount:se.rules.length,vectorIndexCount:c.vectorIndexes.length,target:Ct(e.projectRoot,e.target),vectorStoreSupported:dt,workflowCount:N.length}),Es=t?vt.now():0,ut=la(c,Oe.map(p=>p.id)),ft=jm(a,n),xs=Vo({advisories:hs.filter(p=>p.name!=="procedure_type_check_unavailable"),advisorProcedures:Fe?.procedureProtections??[],agents:l,capabilities:u,containers:f,env:fe,flagKeys:ar,hasFlags:V,hasNotify:G,hasRooms:ot&&Z.some(p=>p.channel?.kind==="room"),hasSensitiveArgs:l.length>0||Z.some(p=>vo(p)),hasSecretValues:R.signals.secretValues===!0,hasSockets:ot&&Z.some(p=>p.lifecycle==="socket"),lazyFunctions:i,hasVectors:dt,liveStreamDeclarations:ft,liveStreams:R.signals.liveStreams===!0,maskMetadata:vs,mutators:ct,queues:C,rlsMetadata:or,schema:c,schemaSnapshot:ut,shapes:ge,services:J,storageRules:se,studioFeatures:ve,topics:ne,useUmbrella:z,workflows:N}),Ss=xa(ge,v.has("@lunora/db"),z),As=ma(f,c.jurisdiction),ys=ha(N),bs=va(l),Ns=Ea(C,e.wranglerQueueProducers),Ps=Ra(ft,z),ws=ba(g),lr=Na(ve.scheduler),dr=Pa(c.tables,z,c.jurisdiction),ur=oo(e.projectRoot)?wa(z):"",Is=Ia(c.vectorIndexes),Le=Ca(c,z),Ts=Sa(v.has("@lunora/seed")),De=e.apiSpec??"openapi",gt=De==="openapi"||De==="both",pt=De==="openrpc"||De==="both",Cs=aa({capabilities:u,emailAgents:l.filter(p=>p.onEmail===!0).map(p=>({className:p.className,exportName:p.exportName})),hasAccess:v.has("@lunora/cloudflare-access"),hasAuth:v.has("@lunora/auth"),hasFramework:v.has("@lunora/astro")||v.has("@lunora/svelte")||v.has("@lunora/vue")||_(E(e.projectRoot,"src","worker.ts")),hasGlobal:c.tables.some(p=>jn(p)),hasHyperdriveGlobal:c.tables.some(p=>Hn(p)),hasKvIntrospector:ve.kv,hasNotify:G,hasQueue:C.some(p=>p.mode==="push"),liveStreams:R.signals.liveStreams===!0,liveStreamsWithheld:R.liveStreamsWithheld,liveStreamDeclarations:ft,hasScheduler:ve.scheduler,hasSourcedTables:c.tables.some(p=>p.externalSource!==void 0),hasStorage:ve.storage,hasDeliveryAuthorization:cr,hasVectors:dt,hasWorkflow:N.length>0,identity:L,jurisdiction:c.jurisdiction,jurisdictionPinsAuth:c.jurisdictionPinsAuth===!0,tables:c.tables.map(p=>({name:p.name,shardMode:p.shardMode})),useUmbrella:z,vectorIndexCount:c.vectorIndexes.length,voiceAgents:l.filter(p=>p.voice===!0&&p.voiceBindingName!==void 0).map(p=>({bindingName:p.voiceBindingName,exportName:p.exportName})),wantsArchitecture:ke,wantsOpenApi:gt,wantsOpenRpc:pt}),{openApiContent:Os,openApiModuleContent:ks,openRpcContent:Rs,openRpcModuleContent:Fs}=iv({functions:Z,httpRoutes:at,modules:lt,projectRoot:e.projectRoot,wantsArchitecture:ke}),Ee=ke&&Re!==void 0?Mp({...Re,crons:g,functions:Z,httpRoutes:at,modules:lt,queues:C,schema:c,services:J,topics:ne,workflows:N}):void 0,mt=E(n,rv),fr=_(mt),gr=e.dryRun?[]:nv(O,[{content:Cs,kind:"always",name:"app.ts"},{content:m,kind:"always",name:"dataModel.ts"},{content:us,kind:"always",name:"api.ts"},{content:ps,kind:"always",name:"internal.ts"},{content:W,kind:"always",name:"server.ts"},{content:gs,kind:"always",name:"functions.ts"},{files:fs,kind:"directory",name:Xn},{content:xs,kind:"always",name:"shard.ts"},{content:ws,kind:"always",name:"crons.ts"},{content:Is,kind:"always",name:"vectors.ts"},{content:Le.global,kind:"always",name:"drizzle.global.ts"},{content:Le.shard,kind:"always",name:"drizzle.shard.ts"},{content:As,kind:"optional",name:"containers.ts"},{content:ys,kind:"optional",name:"workflows.ts"},{content:bs,kind:"optional",name:"agents.ts"},{content:Ns,kind:"optional",name:"queues.ts"},{content:Ps,kind:"optional",name:"live.ts"},{content:lr,kind:"optional",name:"scheduler.ts"},{content:dr,kind:"optional",name:"shardRegistry.ts"},{content:ur,kind:"optional",name:"durableObjects.ts"},{content:Ts,kind:"optional",name:"seed.ts"},{content:Ss,kind:"optional",name:"collections.ts"},{files:ds,kind:"services"},{content:gt?Os:"",kind:"optional",name:"openapi.json"},{content:gt?ks:"",kind:"optional",name:"openapi.ts"},{content:pt?Rs:"",kind:"optional",name:"openrpc.json"},{content:pt?Fs:"",kind:"optional",name:"openrpc.ts"},{content:Ee===void 0?"":`${JSON.stringify(Ee,void 0,2)}
+`,kind:"optional",name:"architecture.json"},{content:Ee===void 0?"":_p(Ee),kind:"optional",name:"architecture.ts"}]);if(!e.dryRun&&(!fr||e.updateSchemaBaseline===!0)&&Te(mt,Er(ut)),t){const p=vt.now(),ht=Math.round(p-s),pr=Math.round(Es-s),mr=Math.round(p-Es);console.error(`@lunora/codegen: codegen took ${ht.toString()}ms (discovery ${pr.toString()}ms, emit ${mr.toString()}ms)`)}return{advisories:hs,advisorContext:Fe,agents:l,architecture:Ee,containers:f,cronTriggers:[...new Set([...Ta(g),...B])],generated:{agents:bs,api:us,app:Cs,collections:Ss,containers:As,crons:ws,dataModel:m,drizzleGlobal:Le.global,drizzleShard:Le.shard,functionModules:fs,functions:gs,internal:ps,live:Ps,openApi:Os,openApiModule:ks,openRpc:Rs,openRpcModule:Fs,queues:Ns,seed:Ts,server:W,shard:xs,vectors:Is,workflows:ys},migrations:Oe,outputDirectory:O,platformDiagnostics:R.diagnostics,queues:C,schemaSnapshot:ut,schemaSnapshotPath:mt,workflows:N,writtenFiles:gr}},TE=e=>Ir(()=>dv(e));export{rv as SCHEMA_SNAPSHOT_FILENAME,Eo as createCodegenProject,kE as findTsconfig,RE as refreshCodegenProject,TE as runCodegen,FE as tsconfigFingerprint};

package/dist/packem_shared/{SHAPES_FILENAME-CFpyCOh2.mjs → SHAPES_FILENAME-B40f_T6B.mjs}

@@ -1 +1 @@
-import{existsSync as m}from"node:fs";import{join as u}from"node:path";import{SyntaxKind as p,Node as o}from"ts-morph";import{diagnosticAt as g}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{a as f}from"./module-specifiers-BctA0m_p.mjs";import{p as d}from"./parse-validator-CP5CL6Q7.mjs";import{findObjectProperty as l}from"./isTestPath-C3QumE88.mjs";import{a as S}from"./attribution-CG8-kUcl.mjs";const h="shapes.ts",x=r=>{const t=r.getSymbol();if(!t)return r.getText()==="defineShape";for(const e of t.getDeclarations())if(o.isImportSpecifier(e))return f(e.getImportDeclaration().getModuleSpecifierValue())?e.getNameNode().getText()==="defineShape":!1;return!1},b=r=>{const t=r.getSymbol();if(!t)return!1;for(const e of t.getDeclarations()){if(!o.isNamespaceImport(e))continue;const i=e.getFirstAncestorByKind(p.ImportDeclaration);return i!==void 0&&f(i.getModuleSpecifierValue())}return!1},y=r=>{if(o.isIdentifier(r))return x(r);if(o.isPropertyAccessExpression(r)){const t=r.getExpression();return r.getName()==="defineShape"&&o.isIdentifier(t)&&b(t)}return!1},N=r=>{const[t]=r.getArguments();if(!t||!o.isObjectLiteralExpression(t))return;const e=l(t,"table");if(!e||!o.isPropertyAssignment(e))return;const i=e.getInitializer();return i&&o.isStringLiteral(i)?i.getLiteralValue():void 0},E=r=>{const[t]=r.getArguments();if(!t||!o.isObjectLiteralExpression(t))return{};const e=l(t,"args");if(!e||!o.isPropertyAssignment(e))return{};const i=e.getInitializer();return!i||!o.isObjectLiteralExpression(i)?{}:d(i)},I=r=>{const t=[];for(const e of r.getVariableDeclarations()){const i=e.getInitializer();if(i?.getKind()!==p.CallExpression)continue;const s=i,a=s.getExpression();if(!y(a))continue;const n=e.getNameNode();if(!o.isIdentifier(n)){if(e.getVariableStatement()?.hasExportKeyword()!==!0)continue;throw g(n,"defineShape exports must be plain named exports (no destructuring)")}const c=S(e,"binding");c!==void 0&&t.push({args:E(s),exportName:c,filePath:"shapes",table:N(s)})}return t},z=(r,t)=>{const e=u(t,h);if(!m(e))return[];const i=r.getSourceFile(e)??r.addSourceFileAtPath(e),s=I(i);return s.sort((a,n)=>a.exportName.localeCompare(n.exportName)),s};export{h as SHAPES_FILENAME,z as discoverShapes};
+import{existsSync as m}from"node:fs";import{join as u}from"node:path";import{SyntaxKind as p,Node as o}from"ts-morph";import{diagnosticAt as g}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{b as f}from"./module-specifiers-WF8iAydP.mjs";import{p as d}from"./parse-validator-CP5CL6Q7.mjs";import{findObjectProperty as l}from"./isTestPath-BrBtG0bz.mjs";import{a as S}from"./attribution-ILDWgo1x.mjs";const h="shapes.ts",b=r=>{const t=r.getSymbol();if(!t)return r.getText()==="defineShape";for(const e of t.getDeclarations())if(o.isImportSpecifier(e))return f(e.getImportDeclaration().getModuleSpecifierValue())?e.getNameNode().getText()==="defineShape":!1;return!1},x=r=>{const t=r.getSymbol();if(!t)return!1;for(const e of t.getDeclarations()){if(!o.isNamespaceImport(e))continue;const i=e.getFirstAncestorByKind(p.ImportDeclaration);return i!==void 0&&f(i.getModuleSpecifierValue())}return!1},y=r=>{if(o.isIdentifier(r))return b(r);if(o.isPropertyAccessExpression(r)){const t=r.getExpression();return r.getName()==="defineShape"&&o.isIdentifier(t)&&x(t)}return!1},N=r=>{const[t]=r.getArguments();if(!t||!o.isObjectLiteralExpression(t))return;const e=l(t,"table");if(!e||!o.isPropertyAssignment(e))return;const i=e.getInitializer();return i&&o.isStringLiteral(i)?i.getLiteralValue():void 0},E=r=>{const[t]=r.getArguments();if(!t||!o.isObjectLiteralExpression(t))return{};const e=l(t,"args");if(!e||!o.isPropertyAssignment(e))return{};const i=e.getInitializer();return!i||!o.isObjectLiteralExpression(i)?{}:d(i)},I=r=>{const t=[];for(const e of r.getVariableDeclarations()){const i=e.getInitializer();if(i?.getKind()!==p.CallExpression)continue;const s=i,a=s.getExpression();if(!y(a))continue;const n=e.getNameNode();if(!o.isIdentifier(n)){if(e.getVariableStatement()?.hasExportKeyword()!==!0)continue;throw g(n,"defineShape exports must be plain named exports (no destructuring)")}const c=S(e,"binding");c!==void 0&&t.push({args:E(s),exportName:c,filePath:"shapes",table:N(s)})}return t},z=(r,t)=>{const e=u(t,h);if(!m(e))return[];const i=r.getSourceFile(e)??r.addSourceFileAtPath(e),s=I(i);return s.sort((a,n)=>a.exportName.localeCompare(n.exportName)),s};export{h as SHAPES_FILENAME,z as discoverShapes};

package/dist/packem_shared/{WORKFLOWS_FILENAME-kXq07aGl.mjs → WORKFLOWS_FILENAME-WZhRFaoW.mjs}

@@ -1 +1 @@
-import{existsSync as b}from"node:fs";import{join as y}from"node:path";import{LunoraError as w}from"@lunora/errors";import k from"@lunora/scheduler/validate";import{workflowDefaultName as E,workflowClassName as v}from"@lunora/workflow";import{Node as n,VariableDeclarationKind as S,SyntaxKind as x}from"ts-morph";import{diagnosticAt as c}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{unwrapToCallExpression as N,findObjectProperty as d,stringPropertyFor as L}from"./isTestPath-C3QumE88.mjs";import{a as P}from"./attribution-CG8-kUcl.mjs";import{r as $}from"./handler-reference-CClSR4bi.mjs";const A="workflows.ts",W=new Set(["do","sleep","sleepUntil","waitForEvent"]),C=o=>{const e=o.getSymbol();if(!e)return o.getText()==="defineWorkflow";for(const t of e.getDeclarations())if(n.isImportSpecifier(t))return t.getImportDeclaration().getModuleSpecifierValue()!=="@lunora/workflow"?!1:t.getNameNode().getText()==="defineWorkflow";return!1},m=L("workflow"),O=(o,e,t)=>{if(n.isNumericLiteral(o))return o.getLiteralValue();throw c(o,`workflow "${e}": \`${t}\` must be a static number literal — it is deploy configuration codegen writes into wrangler.jsonc`)},f=(o,e)=>{const t=d(o,e);return t&&n.isPropertyAssignment(t)?t.getInitializerOrThrow():void 0},g=(o,e,t)=>{if(n.isObjectLiteralExpression(o))return o;throw c(o,`workflow "${e}": \`${t}\` must be an inline object literal — it is deploy configuration codegen writes into wrangler.jsonc`)},D=(o,e)=>{if(!n.isArrayLiteralExpression(o)||o.getElements().length===0)throw c(o,`workflow "${e}": \`schedules\` must be a non-empty inline array of cron expression string literals`);return o.getElements().map(t=>{const r=m(t,e,"schedules[]");if(!k(r))throw c(t,`workflow "${e}": schedule "${r}" is not a valid cron expression`);return r})},I=(o,e)=>{const t={},r=f(o,"schedules");r!==void 0&&(t.schedules=D(r,e));const s=f(o,"limits");if(s!==void 0){const i=f(g(s,e,"limits"),"steps");if(i===void 0)t.limits={};else{const l=O(i,e,"limits.steps");if(!Number.isInteger(l)||l<=0)throw c(i,`workflow "${e}": \`limits.steps\` must be a positive integer (got ${String(l)})`);t.limits={steps:l}}}const a=f(o,"defaultRetention");if(a!==void 0){const i=g(a,e,"defaultRetention"),l={};for(const u of["errorRetention","successRetention"]){const p=f(i,u);p!==void 0&&(l[u]=m(p,e,`defaultRetention.${u}`))}t.defaultRetention=l}return t},F=o=>{const e=o.getExpression();if(!n.isPropertyAccessExpression(e)||!W.has(e.getName()))return!1;const t=e.getExpression();return n.isPropertyAccessExpression(t)&&t.getName()==="step"?!0:n.isIdentifier(t)&&t.getText()==="step"},T=o=>{if(!o)return[];const e=[];for(const t of o.getDescendantsOfKind(x.CallExpression)){if(!F(t))continue;const r=t.getArguments()[0];!r||!(n.isStringLiteral(r)||n.isNoSubstitutionTemplateLiteral(r))||e.push({line:t.getStartLineNumber(),method:t.getExpression().getName(),name:r.getLiteralValue()})}return e},h=o=>{let e=o;for(;e&&(n.isAsExpression(e)||n.isSatisfiesExpression(e)||n.isParenthesizedExpression(e));)e=e.getExpression();return e},R=o=>{const e=h(o);if(e&&n.isObjectLiteralExpression(e))return e;if(!(!e||!n.isIdentifier(e)))for(const t of e.getSymbol()?.getDeclarations()??[]){const s=n.isVariableDeclaration(t)&&t.getVariableStatement()?.getDeclarationKind()===S.Const?h(t.getInitializer()):void 0;if(s&&n.isObjectLiteralExpression(s))return s}},j=(o,e)=>{const t=d(o,"handler"),r=$(t,e);return r!==void 0?r:{body:t!==void 0&&n.isPropertyAssignment(t)?t.getInitializer():t}},K=(o,e,t)=>{const r=R(o.getArguments()[0]);if(!r)throw c(o,`workflow "${e}": defineWorkflow's argument must be an object literal, or a local \`const\` holding one — codegen reads \`name\` and the \`ctx.step.*\` calls out of it statically. Keep the handler wherever you like and pass it through: \`const config = { handler: myHandler }; export const ${e} = defineWorkflow(config);\`.`);const s=j(r,t),a={className:v(e),exportName:e,name:E(e),steps:T(s.body),...s.file===void 0?{}:{handlerFile:s.file},...s.site===void 0?{}:{handlerSite:s.site}},i=d(r,"name");return i&&n.isPropertyAssignment(i)&&(a.name=m(i.getInitializerOrThrow(),e,"name")),{...a,...I(r,e)}},V=(o,e)=>{const t=[];for(const r of o.getVariableDeclarations()){const s=N(r.getInitializer());if(!s)continue;const a=s.getExpression();if(!n.isIdentifier(a)||!C(a))continue;const i=r.getNameNode();if(!n.isIdentifier(i)){if(r.getVariableStatement()?.hasExportKeyword()!==!0)continue;throw c(i,"defineWorkflow exports must be plain named exports (no destructuring)")}const l=P(r,"binding");l!==void 0&&t.push(K(s,l,e))}return t},z=o=>{const e=new Map,t=new Map;for(const r of o){const s=e.get(r.name);if(s!==void 0)throw new w("DUPLICATE_WORKFLOW_NAME",`Duplicate workflow name "${r.name}": produced by both "${s}" and "${r.exportName}". Deployed workflow names must be unique across the project.`,{status:500});e.set(r.name,r.exportName);const a=t.get(r.className);if(a!==void 0)throw new w("DUPLICATE_WORKFLOW_CLASS",`Duplicate workflow class "${r.className}": produced by both "${a}" and "${r.exportName}". Workflow export names must yield unique generated class names.`,{status:500});t.set(r.className,r.exportName)}},Y=(o,e)=>{const t=y(e,A);if(!b(t))return[];const r=o.getSourceFile(t)??o.addSourceFileAtPath(t),s=V(r,e);return s.sort((a,i)=>a.exportName.localeCompare(i.exportName)),z(s),s};export{A as WORKFLOWS_FILENAME,Y as discoverWorkflows};
+import{existsSync as b}from"node:fs";import{join as y}from"node:path";import{LunoraError as w}from"@lunora/errors";import k from"@lunora/scheduler/validate";import{workflowDefaultName as E,workflowClassName as v}from"@lunora/workflow";import{Node as n,VariableDeclarationKind as S,SyntaxKind as x}from"ts-morph";import{diagnosticAt as c}from"./CodegenDiagnosticError-BUXlG3P-.mjs";import{unwrapToCallExpression as N,findObjectProperty as d,stringPropertyFor as L}from"./isTestPath-BrBtG0bz.mjs";import{a as P}from"./attribution-ILDWgo1x.mjs";import{r as $}from"./handler-reference-D5sW4xun.mjs";const A="workflows.ts",W=new Set(["do","sleep","sleepUntil","waitForEvent"]),C=o=>{const e=o.getSymbol();if(!e)return o.getText()==="defineWorkflow";for(const t of e.getDeclarations())if(n.isImportSpecifier(t))return t.getImportDeclaration().getModuleSpecifierValue()!=="@lunora/workflow"?!1:t.getNameNode().getText()==="defineWorkflow";return!1},m=L("workflow"),O=(o,e,t)=>{if(n.isNumericLiteral(o))return o.getLiteralValue();throw c(o,`workflow "${e}": \`${t}\` must be a static number literal — it is deploy configuration codegen writes into wrangler.jsonc`)},f=(o,e)=>{const t=d(o,e);return t&&n.isPropertyAssignment(t)?t.getInitializerOrThrow():void 0},g=(o,e,t)=>{if(n.isObjectLiteralExpression(o))return o;throw c(o,`workflow "${e}": \`${t}\` must be an inline object literal — it is deploy configuration codegen writes into wrangler.jsonc`)},D=(o,e)=>{if(!n.isArrayLiteralExpression(o)||o.getElements().length===0)throw c(o,`workflow "${e}": \`schedules\` must be a non-empty inline array of cron expression string literals`);return o.getElements().map(t=>{const r=m(t,e,"schedules[]");if(!k(r))throw c(t,`workflow "${e}": schedule "${r}" is not a valid cron expression`);return r})},I=(o,e)=>{const t={},r=f(o,"schedules");r!==void 0&&(t.schedules=D(r,e));const s=f(o,"limits");if(s!==void 0){const i=f(g(s,e,"limits"),"steps");if(i===void 0)t.limits={};else{const l=O(i,e,"limits.steps");if(!Number.isInteger(l)||l<=0)throw c(i,`workflow "${e}": \`limits.steps\` must be a positive integer (got ${String(l)})`);t.limits={steps:l}}}const a=f(o,"defaultRetention");if(a!==void 0){const i=g(a,e,"defaultRetention"),l={};for(const u of["errorRetention","successRetention"]){const p=f(i,u);p!==void 0&&(l[u]=m(p,e,`defaultRetention.${u}`))}t.defaultRetention=l}return t},F=o=>{const e=o.getExpression();if(!n.isPropertyAccessExpression(e)||!W.has(e.getName()))return!1;const t=e.getExpression();return n.isPropertyAccessExpression(t)&&t.getName()==="step"?!0:n.isIdentifier(t)&&t.getText()==="step"},T=o=>{if(!o)return[];const e=[];for(const t of o.getDescendantsOfKind(x.CallExpression)){if(!F(t))continue;const r=t.getArguments()[0];!r||!(n.isStringLiteral(r)||n.isNoSubstitutionTemplateLiteral(r))||e.push({line:t.getStartLineNumber(),method:t.getExpression().getName(),name:r.getLiteralValue()})}return e},h=o=>{let e=o;for(;e&&(n.isAsExpression(e)||n.isSatisfiesExpression(e)||n.isParenthesizedExpression(e));)e=e.getExpression();return e},R=o=>{const e=h(o);if(e&&n.isObjectLiteralExpression(e))return e;if(!(!e||!n.isIdentifier(e)))for(const t of e.getSymbol()?.getDeclarations()??[]){const s=n.isVariableDeclaration(t)&&t.getVariableStatement()?.getDeclarationKind()===S.Const?h(t.getInitializer()):void 0;if(s&&n.isObjectLiteralExpression(s))return s}},j=(o,e)=>{const t=d(o,"handler"),r=$(t,e);return r!==void 0?r:{body:t!==void 0&&n.isPropertyAssignment(t)?t.getInitializer():t}},K=(o,e,t)=>{const r=R(o.getArguments()[0]);if(!r)throw c(o,`workflow "${e}": defineWorkflow's argument must be an object literal, or a local \`const\` holding one — codegen reads \`name\` and the \`ctx.step.*\` calls out of it statically. Keep the handler wherever you like and pass it through: \`const config = { handler: myHandler }; export const ${e} = defineWorkflow(config);\`.`);const s=j(r,t),a={className:v(e),exportName:e,name:E(e),steps:T(s.body),...s.file===void 0?{}:{handlerFile:s.file},...s.site===void 0?{}:{handlerSite:s.site}},i=d(r,"name");return i&&n.isPropertyAssignment(i)&&(a.name=m(i.getInitializerOrThrow(),e,"name")),{...a,...I(r,e)}},V=(o,e)=>{const t=[];for(const r of o.getVariableDeclarations()){const s=N(r.getInitializer());if(!s)continue;const a=s.getExpression();if(!n.isIdentifier(a)||!C(a))continue;const i=r.getNameNode();if(!n.isIdentifier(i)){if(r.getVariableStatement()?.hasExportKeyword()!==!0)continue;throw c(i,"defineWorkflow exports must be plain named exports (no destructuring)")}const l=P(r,"binding");l!==void 0&&t.push(K(s,l,e))}return t},z=o=>{const e=new Map,t=new Map;for(const r of o){const s=e.get(r.name);if(s!==void 0)throw new w("DUPLICATE_WORKFLOW_NAME",`Duplicate workflow name "${r.name}": produced by both "${s}" and "${r.exportName}". Deployed workflow names must be unique across the project.`,{status:500});e.set(r.name,r.exportName);const a=t.get(r.className);if(a!==void 0)throw new w("DUPLICATE_WORKFLOW_CLASS",`Duplicate workflow class "${r.className}": produced by both "${a}" and "${r.exportName}". Workflow export names must yield unique generated class names.`,{status:500});t.set(r.className,r.exportName)}},Y=(o,e)=>{const t=y(e,A);if(!b(t))return[];const r=o.getSourceFile(t)??o.addSourceFileAtPath(t),s=V(r,e);return s.sort((a,i)=>a.exportName.localeCompare(i.exportName)),z(s),s};export{A as WORKFLOWS_FILENAME,Y as discoverWorkflows};

package/dist/packem_shared/attribution-ILDWgo1x.mjs

@@ -0,0 +1 @@
+import{callSiteCallers as y,byCodepoint as k}from"@lunora/advisor";import{Node as r,SyntaxKind as p,VariableDeclarationKind as F,ts as O}from"ts-morph";import{i as M}from"./reserved-words-CW1QFbTd.mjs";import{isWriteTarget as A,descendantsOfKind as T,unwrapExpression as V}from"./isTestPath-BrBtG0bz.mjs";const N=new WeakMap,C=e=>e.getStatements().flatMap(t=>r.isFunctionDeclaration(t)?[t]:r.isVariableStatement(t)?t.getDeclarations().filter(o=>r.isIdentifier(o.getNameNode())):[]),x=e=>r.isStringLiteral(e)?e.getLiteralValue():e.getText(),I=e=>{if(r.isFunctionDeclaration(e)||r.isClassDeclaration(e)){const t=e.getName();return e.hasExportKeyword()?[[t??"default",e.hasDefaultKeyword()?"default":t??"default"]]:[]}return!r.isVariableStatement(e)||!e.hasExportKeyword()?[]:e.getDeclarations().flatMap(t=>{const o=t.getNameNode();return r.isIdentifier(o)?[[o.getText(),o.getText()]]:o.getDescendantsOfKind(p.BindingElement).flatMap(n=>r.isIdentifier(n.getNameNode())?[[n.getName(),n.getName()]]:[])})},P=e=>{if(r.isExportDeclaration(e))return e.hasModuleSpecifier()||e.isTypeOnly()?[]:e.getNamedExports().filter(o=>!o.isTypeOnly()).map(o=>{const n=x(o.getNameNode()),s=o.getAliasNode();return[n,s===void 0?n:x(s)]});const t=r.isExportAssignment(e)&&!e.isExportEquals()?e.getExpression():void 0;return r.isIdentifier(t)?[[t.getText(),"default"]]:I(e)},h=new WeakMap,K=e=>{const t=h.get(e.compilerNode);if(t!==void 0)return t;const o=new Map;for(const[s,c]of e.getStatements().flatMap(i=>P(i)))o.set(s,(o.get(s)??new Set).add(c));const n=new Map([...o].map(([s,c])=>[s,[...c].toSorted(Y)]));return h.set(e.compilerNode,n),n},g=e=>{const t=r.isBindingElement(e)?e.getFirstAncestorByKind(p.VariableStatement):void 0,o=r.isVariableDeclaration(e)?e.getVariableStatement():void 0,n=r.isFunctionDeclaration(e)?e:t??o;if(n===void 0||!r.isSourceFile(n.getParent()))return[];const s=r.isFunctionDeclaration(e)?e.getName()??"default":e.getName();return K(e.getSourceFile()).get(s)??[]},L=e=>new Map(e.flatMap(t=>{const o=g(t);return o.length===0?[]:[[t.compilerNode,o]]})),B=e=>{const t=V(e);return t!==void 0&&(r.isArrowFunction(t)||r.isFunctionExpression(t))},b=(e,t)=>{for(const o of e.getAncestors()){if(r.isExportAssignment(o)&&!o.isExportEquals())return{kind:"export",name:"default"};if((r.isFunctionDeclaration(o)&&r.isSourceFile(o.getParent())||r.isVariableDeclaration(o)&&r.isSourceFile(o.getVariableStatement()?.getParent())&&r.isIdentifier(o.getNameNode()))&&(r.isFunctionDeclaration(o)||r.isVariableDeclaration(o))){const s=t.get(o.compilerNode)?.[0];return s!==void 0?{kind:"export",name:s}:r.isFunctionDeclaration(o)||B(o.getInitializer())?{declaration:o,kind:"helper"}:{kind:"untracked"}}}return{kind:"untracked"}},E=e=>{for(const t of e.getAncestors()){if(r.isExpressionWithTypeArguments(t)){const o=t.getParent();return!(r.isHeritageClause(o)&&o.getToken()===p.ExtendsKeyword&&(r.isClassDeclaration(o.getParent())||r.isClassExpression(o.getParent())))}if(O.isTypeNode(t.compilerNode))return!0}return!1},ee=e=>{const t=e.getParent(),o=r.isPropertyAccessExpression(t)&&t.getNameNode()===e,n=(r.isPropertyAssignment(t)||r.isMethodDeclaration(t))&&t.getNameNode()===e;return!o&&!n&&!E(e)},v=e=>{const t=e.getParent();return r.isShorthandPropertyAssignment(t)&&t.getNameNode()===e?t.getValueSymbol():e.getSymbol()},R=e=>{const t=v(e);return t?.getValueDeclaration()??t?.getDeclarations()[0]},S=new WeakMap,$=/\/typescript\/lib\/lib\.[^/]+\.d\.ts$/u,_=e=>{const t=e.getFilePath();return e.isDeclarationFile()&&($.test(t)||t.includes("/@types/node/"))},te=e=>{const t=e.getNameNode(),o=r.isFunctionDeclaration(e)?void 0:e.getFirstAncestorByKind(p.VariableDeclarationList);if(!r.isIdentifier(t)||o?.getDeclarationKind()===F.Const||_(e.getSourceFile()))return!1;let n=S.get(e.compilerNode);if(n===void 0){const s=r.isFunctionDeclaration(e)?e.getSourceFile():e.getFirstAncestor(i=>r.isFunctionLikeDeclaration(i)||r.isArrowFunction(i))??e.getSourceFile(),c=t.getText();n=s.getDescendantsOfKind(p.Identifier).some(i=>i!==t&&i.getText()===c&&A(i)&&R(i)?.compilerNode===e.compilerNode),S.set(e.compilerNode,n)}return n},W=e=>{const t=new Map,o=new Set,n=new Set;for(const s of e){const c=s.getNameNode(),i=c?.getSymbol()?.compilerSymbol;c!==void 0&&i!==void 0&&(t.set(i,s.compilerNode),o.add(c.compilerNode),n.add(c.getText()))}return{bySymbol:t,nameNodes:o,spellings:n}},z=(e,t,o)=>{const{bySymbol:n,nameNodes:s,spellings:c}=W(t),i=new Map;for(const a of T(e,p.Identifier)){if(!c.has(a.getText())||s.has(a.compilerNode)||E(a))continue;const l=v(a)?.compilerSymbol,d=l===void 0?void 0:n.get(l);d!==void 0&&i.set(d,[...i.get(d)??[],b(a,o)])}return i},H=(e,t)=>{const o=new Map(e.map(a=>[a.compilerNode,new Set])),n=new Set,s=a=>(o.get(a)?.size??0)+(n.has(a)?1:0),c=(a,l)=>{const d=s(a),u=o.get(a),m=l.kind==="helper"?l.declaration.compilerNode:void 0;l.kind==="export"&&u?.add(l.name);for(const w of m===void 0?[]:o.get(m)??[])u?.add(w);return(l.kind==="untracked"||m!==void 0&&n.has(m))&&n.add(a),s(a)!==d};let i=!0;for(;i;){i=!1;for(const[a,l]of t)for(const d of l)i=c(a,d)||i}return new Map([...o].map(([a,l])=>[a,{callers:[...l].toSorted((d,u)=>d.localeCompare(u)),untracked:n.has(a)}]))},q=e=>{const t=N.get(e.compilerNode);if(t!==void 0)return t;const o=C(e),n=L(o),s=o.filter(i=>!n.has(i.compilerNode)),c={exportNames:n,helperReach:s.length===0?new Map:H(s,z(e,s,n))};return N.set(e.compilerNode,c),c},oe=e=>{const t=q(e.getSourceFile()),o=b(e,t.exportNames);switch(o.kind){case"export":return{kind:"export",name:o.name};case"helper":{const n=o.declaration.getName(),s=t.helperReach.get(o.declaration.compilerNode);if(n===void 0||s===void 0)throw new Error(`call-site attribution: helper at ${o.declaration.getSourceFile().getFilePath()} is not indexed`);return{callers:s.callers,kind:"helper",name:n,...s.untracked?{untracked:!0}:{}}}default:return{kind:"module"}}},X=e=>{if(e.kind==="helper"&&e.untracked===!0)return;const t=y(e);return t.length===0?void 0:t},j=(e,t)=>{const o=new Set(y(e).map(n=>t(n)));return o.has("public")?"public":X(e)===void 0||o.has(void 0)?void 0:"internal"},ne=(e,t)=>{const o=new Map(t.map(n=>[`${n.filePath}:${n.exportName}`,n.visibility]));return e.map(n=>{const s=j(n.scope,c=>o.get(`${n.file}:${c}`));return s===void 0?n:{...n,visibility:s}})},f=/^[$A-Z_a-z][\w$]*$/u,D=e=>f.test(e),G=e=>{const t=g(e);return t.length===0?r.isVariableDeclaration(e)&&e.getVariableStatement()?.hasExportKeyword()===!0?e.getName():void 0:t.find(o=>D(o))??e.getName()},re=e=>e.getVariableStatements().flatMap(t=>t.getDeclarations()).filter(t=>G(t)!==void 0),se=(e,t)=>{if(r.isIdentifier(e.getNameNode()))return e.getVariableStatement()?.hasExportKeyword()===!0?e.getName():g(e).find(o=>t==="binding"?M(o):D(o))},Y=(e,t)=>Number(f.test(t))-Number(f.test(e))||k(e,t);export{se as a,re as b,oe as c,G as d,K as e,R as f,te as g,ee as h,D as i,g as j,E as k,_ as l,X as m,v as r,ne as w};

package/dist/packem_shared/{buildOpenApiDocument-ecVsBXVh.mjs → buildOpenApiDocument-20bRusvI.mjs}

@@ -1,3 +1,3 @@
-import{m as b}from"./modules-l-Db0C4S.mjs";import{r as E}from"./json-data-Chfs2Cz5.mjs";import{LUNORA_ERROR_CODES as P,objectSchema as g,validatorIrToJsonSchema as l}from"./LUNORA_ERROR_CODES-CIAJQeKB.mjs";import{G as A}from"./shared-Br_OnErI.mjs";import{s as m}from"./dispatch-namespace-DwTjD7BU.mjs";const T="/_lunora/rest",x=["authorization","cf-access-jwt-assertion","cookie","payment-signature","x-payment"],v=["x-d1-bookmark","x-lunora-shard-key"],j=e=>[...x,...(e.credentialHeaders??[]).map(t=>t.toLowerCase())],O=e=>Number.isFinite(e)?Math.max(0,Math.floor(e)):0,$=(...e)=>{const t=[];for(const r of e)for(const n of r?.split(",")??[]){const s=n.trim().toLowerCase();s!==""&&!t.includes(s)&&t.push(s)}return t.length===0?void 0:t.join(", ")},k=(e,t)=>{const r=[t,`max-age=${String(O(e.maxAge))}`];return e.staleWhileRevalidate!==void 0&&r.push(`stale-while-revalidate=${String(O(e.staleWhileRevalidate))}`),r.join(", ")},N=e=>e.scope==="public"?$(e.vary,...j(e),...v):$(e.vary,...v),q=e=>{const t=e.indexOf(":");if(!(t<=0||t>=e.length-1||e.indexOf(":",t+1)!==-1))return{name:e.slice(t+1),namespace:e.slice(0,t)}},_=e=>{const t=q(e);if(t!==void 0)return`${T}/${t.namespace}/${t.name}`},C=e=>e==="query"?"GET":"POST",y="#/components/responses/LunoraError",R=/:([A-Za-z_$][\w$]*)/gu,w=e=>[...e.matchAll(R)].map(t=>t[1]),D=e=>e.replaceAll(R,"{$1}"),f=e=>e.kind==="optional"?e.inner??e:e,I=e=>{const t=new Set(w(e.path)),r=[];for(const[n,s]of Object.entries(e.searchParams)){const c=f(s);r.push({description:`Query parameter \`${n}\``,in:"query",name:n,required:s.kind!=="optional",schema:l(c)})}for(const[n,s]of Object.entries(e.params)){const c=f(s);r.push({description:`Path parameter \`${n}\``,in:t.has(n)?"path":"query",name:n,required:t.has(n)?!0:s.kind!=="optional",schema:l(c)})}return r},S=e=>e?{content:{"application/json":{schema:l(e)}},description:"Successful response."}:{content:{"application/json":{schema:{description:"Return shape is TS-inferred (no `.output()` declared); best-effort — any JSON."}}},description:"Successful response. The return shape is TypeScript-inferred and not declared via `.output()`, so it is documented best-effort."},L=(e,t)=>{const r=I(e),n={description:`${e.stream?"Streaming (SSE) ":""}HTTP route handler \`${e.exportName}\` (${e.method} ${e.path}).`,operationId:`${e.method.toLowerCase()}_${m(e.path)}`,responses:{200:S(e.output),204:{description:"No content (handler returned `undefined`)."},default:{$ref:y}},summary:`${e.method} ${e.path}`,tags:[t]};return r.length>0&&(n.parameters=r),Object.keys(e.body).length>0&&(n.requestBody={content:{"application/json":{schema:g(e.body)}},required:!0}),e.stream&&(n["x-lunora-stream"]="text/event-stream"),n},F=(e,t)=>{const r=`${m(e.filePath)}:${e.exportName}`,n={additionalProperties:!1,properties:{args:g(e.args),functionPath:{const:r,type:"string"},shardKey:{description:"Optional shard key; omitted routes to the default shard.",type:"string"}},required:["functionPath"],type:"object"};return{operation:{description:`Invoke the \`${e.kind}\` \`${r}\` over the Lunora RPC envelope (POST /_lunora/rpc).`,operationId:r,requestBody:{content:{"application/json":{schema:n}},required:!0},responses:{200:S(e.output),default:{$ref:y}},summary:`${e.kind}: ${r}`,tags:[t],"x-lunora-function-kind":e.kind},pathKey:`/_lunora/rpc#${r}`}},H=(e,t)=>{if(e===void 0||t!=="get"||e.scope===void 0||e.maxAge===void 0)return{};const r={maxAge:e.maxAge,scope:e.scope,...e.staleWhileRevalidate===void 0?{}:{staleWhileRevalidate:e.staleWhileRevalidate},...e.tag===void 0?{}:{tag:e.tag},...e.vary===void 0?{}:{vary:e.vary}},n={"Cache-Control":{description:r.scope==="public"?"Caching policy. `public` applies only to an uncredentialed request — a request carrying `Authorization` or `Cookie` is always answered `private`.":"Caching policy. Restricted to the caller's own cache; never stored by a shared/edge cache.",schema:{example:k(r,r.scope),type:"string"}}};r.tag!==void 0&&(n["Cache-Tag"]={description:"Purge tag for `ctx.cache.purge({ tags: [...] })`.",schema:{example:r.tag,type:"string"}});const s=N(r);return s!==void 0&&(n.Vary={description:"Request headers this response varies by. The endpoint's own negotiated headers are merged in at runtime.",schema:{example:s,type:"string"}}),{headers:n}},M=(e,t)=>{const r=`${m(e.filePath)}:${e.exportName}`,n=_(r);if(n===void 0)return;const s=C(e.kind),c=s==="GET",i={description:`Public REST endpoint for the \`${e.kind}\` \`${r}\` (opt-in via \`.expose({ rest: true })\`). Routed through the procedure, so auth / RLS / validators are enforced.`,operationId:`rest_${m(n)}`,responses:{200:{content:{"application/json":{schema:{description:"Procedure result. The shape is TS-inferred from the return type; best-effort — any JSON."}}},description:"Successful result (TypeScript-inferred return shape, documented best-effort).",...H(e.expose?.cache,c?"get":"post")},default:{$ref:y}},summary:`${s} ${n}`,tags:[t],"x-lunora-function-kind":e.kind};if(c){const d=Object.entries(e.args).map(([u,h])=>{const o=f(h);return{description:`Argument \`${u}\` (JSON-encoded for non-string values).`,in:"query",name:u,required:h.kind!=="optional",schema:l(o)}});return d.length>0&&(i.parameters=d),{method:"get",operation:i,path:n}}return i.requestBody={content:{"application/json":{schema:g(e.args)}},required:Object.keys(e.args).length>0},{method:"post",operation:i,path:n}},J=e=>{const t=e.version??"0.0.0",r=Object.create(null),n=o=>r[o]??Object.create(null),s=new Set,c=e.modules??[],i=o=>b(c,o);for(const o of e.httpRoutes){const a=D(o.path),p=n(a);p[o.method.toLowerCase()]=L(o,i(o.filePath)),r[a]=p,s.add(i(o.filePath))}const d=e.functions.filter(o=>o.visibility!=="internal"&&o.kind!=="stream");for(const o of d){const{operation:a,pathKey:p}=F(o,i(o.filePath));r[p]={post:a},s.add(i(o.filePath))}for(const o of d){if(o.expose?.rest!==!0)continue;const a=M(o,i(o.filePath));if(a===void 0)continue;const p=n(a.path);p[a.method]=a.operation,r[a.path]=p}const u=[...s].toSorted((o,a)=>o.localeCompare(a)).map(o=>({description:c.find(p=>p.name===o)?.description??`Operations declared in \`lunora/${o}\`.`,name:o}));return{components:{responses:{LunoraError:{content:{"application/json":{schema:{additionalProperties:!1,description:"Standard Lunora error envelope.",properties:{error:{additionalProperties:!1,properties:{code:{description:"Machine-readable error code. Clients switch on this value.",enum:P,type:"string"},message:{description:"Human-readable error message (never echoes internal details).",type:"string"}},required:["code","message"],type:"object"}},required:["error"],type:"object"}}},description:"A Lunora error response. The HTTP status reflects the error code (e.g. BAD_REQUEST→400, UNAUTHORIZED→401, FORBIDDEN→403, NOT_FOUND→404)."}}},info:{description:"Auto-generated from @lunora/values-typed functions by @lunora/codegen. Do not edit — run `lunora codegen` to regenerate.",title:"Lunora API",version:t},openapi:"3.1.0",paths:Object.fromEntries(Object.entries(r).map(([o,a])=>[o,{...a}])),tags:u}},z=e=>`${JSON.stringify(J(e),void 0,2)}
+import{m as b}from"./modules-CsEUB8s1.mjs";import{r as E}from"./json-data-Chfs2Cz5.mjs";import{LUNORA_ERROR_CODES as P,objectSchema as g,validatorIrToJsonSchema as l}from"./LUNORA_ERROR_CODES-CIAJQeKB.mjs";import{G as A}from"./shared-Br_OnErI.mjs";import{s as m}from"./dispatch-namespace-DwTjD7BU.mjs";const T="/_lunora/rest",x=["authorization","cf-access-jwt-assertion","cookie","payment-signature","x-payment"],v=["x-d1-bookmark","x-lunora-shard-key"],j=e=>[...x,...(e.credentialHeaders??[]).map(t=>t.toLowerCase())],O=e=>Number.isFinite(e)?Math.max(0,Math.floor(e)):0,$=(...e)=>{const t=[];for(const r of e)for(const n of r?.split(",")??[]){const s=n.trim().toLowerCase();s!==""&&!t.includes(s)&&t.push(s)}return t.length===0?void 0:t.join(", ")},k=(e,t)=>{const r=[t,`max-age=${String(O(e.maxAge))}`];return e.staleWhileRevalidate!==void 0&&r.push(`stale-while-revalidate=${String(O(e.staleWhileRevalidate))}`),r.join(", ")},N=e=>e.scope==="public"?$(e.vary,...j(e),...v):$(e.vary,...v),q=e=>{const t=e.indexOf(":");if(!(t<=0||t>=e.length-1||e.indexOf(":",t+1)!==-1))return{name:e.slice(t+1),namespace:e.slice(0,t)}},_=e=>{const t=q(e);if(t!==void 0)return`${T}/${t.namespace}/${t.name}`},C=e=>e==="query"?"GET":"POST",y="#/components/responses/LunoraError",R=/:([A-Za-z_$][\w$]*)/gu,w=e=>[...e.matchAll(R)].map(t=>t[1]),D=e=>e.replaceAll(R,"{$1}"),f=e=>e.kind==="optional"?e.inner??e:e,I=e=>{const t=new Set(w(e.path)),r=[];for(const[n,s]of Object.entries(e.searchParams)){const c=f(s);r.push({description:`Query parameter \`${n}\``,in:"query",name:n,required:s.kind!=="optional",schema:l(c)})}for(const[n,s]of Object.entries(e.params)){const c=f(s);r.push({description:`Path parameter \`${n}\``,in:t.has(n)?"path":"query",name:n,required:t.has(n)?!0:s.kind!=="optional",schema:l(c)})}return r},S=e=>e?{content:{"application/json":{schema:l(e)}},description:"Successful response."}:{content:{"application/json":{schema:{description:"Return shape is TS-inferred (no `.output()` declared); best-effort — any JSON."}}},description:"Successful response. The return shape is TypeScript-inferred and not declared via `.output()`, so it is documented best-effort."},L=(e,t)=>{const r=I(e),n={description:`${e.stream?"Streaming (SSE) ":""}HTTP route handler \`${e.exportName}\` (${e.method} ${e.path}).`,operationId:`${e.method.toLowerCase()}_${m(e.path)}`,responses:{200:S(e.output),204:{description:"No content (handler returned `undefined`)."},default:{$ref:y}},summary:`${e.method} ${e.path}`,tags:[t]};return r.length>0&&(n.parameters=r),Object.keys(e.body).length>0&&(n.requestBody={content:{"application/json":{schema:g(e.body)}},required:!0}),e.stream&&(n["x-lunora-stream"]="text/event-stream"),n},F=(e,t)=>{const r=`${m(e.filePath)}:${e.exportName}`,n={additionalProperties:!1,properties:{args:g(e.args),functionPath:{const:r,type:"string"},shardKey:{description:"Optional shard key; omitted routes to the default shard.",type:"string"}},required:["functionPath"],type:"object"};return{operation:{description:`Invoke the \`${e.kind}\` \`${r}\` over the Lunora RPC envelope (POST /_lunora/rpc).`,operationId:r,requestBody:{content:{"application/json":{schema:n}},required:!0},responses:{200:S(e.output),default:{$ref:y}},summary:`${e.kind}: ${r}`,tags:[t],"x-lunora-function-kind":e.kind},pathKey:`/_lunora/rpc#${r}`}},H=(e,t)=>{if(e===void 0||t!=="get"||e.scope===void 0||e.maxAge===void 0)return{};const r={maxAge:e.maxAge,scope:e.scope,...e.staleWhileRevalidate===void 0?{}:{staleWhileRevalidate:e.staleWhileRevalidate},...e.tag===void 0?{}:{tag:e.tag},...e.vary===void 0?{}:{vary:e.vary}},n={"Cache-Control":{description:r.scope==="public"?"Caching policy. `public` applies only to an uncredentialed request — a request carrying `Authorization` or `Cookie` is always answered `private`.":"Caching policy. Restricted to the caller's own cache; never stored by a shared/edge cache.",schema:{example:k(r,r.scope),type:"string"}}};r.tag!==void 0&&(n["Cache-Tag"]={description:"Purge tag for `ctx.cache.purge({ tags: [...] })`.",schema:{example:r.tag,type:"string"}});const s=N(r);return s!==void 0&&(n.Vary={description:"Request headers this response varies by. The endpoint's own negotiated headers are merged in at runtime.",schema:{example:s,type:"string"}}),{headers:n}},M=(e,t)=>{const r=`${m(e.filePath)}:${e.exportName}`,n=_(r);if(n===void 0)return;const s=C(e.kind),c=s==="GET",i={description:`Public REST endpoint for the \`${e.kind}\` \`${r}\` (opt-in via \`.expose({ rest: true })\`). Routed through the procedure, so auth / RLS / validators are enforced.`,operationId:`rest_${m(n)}`,responses:{200:{content:{"application/json":{schema:{description:"Procedure result. The shape is TS-inferred from the return type; best-effort — any JSON."}}},description:"Successful result (TypeScript-inferred return shape, documented best-effort).",...H(e.expose?.cache,c?"get":"post")},default:{$ref:y}},summary:`${s} ${n}`,tags:[t],"x-lunora-function-kind":e.kind};if(c){const d=Object.entries(e.args).map(([u,h])=>{const o=f(h);return{description:`Argument \`${u}\` (JSON-encoded for non-string values).`,in:"query",name:u,required:h.kind!=="optional",schema:l(o)}});return d.length>0&&(i.parameters=d),{method:"get",operation:i,path:n}}return i.requestBody={content:{"application/json":{schema:g(e.args)}},required:Object.keys(e.args).length>0},{method:"post",operation:i,path:n}},J=e=>{const t=e.version??"0.0.0",r=Object.create(null),n=o=>r[o]??Object.create(null),s=new Set,c=e.modules??[],i=o=>b(c,o);for(const o of e.httpRoutes){const a=D(o.path),p=n(a);p[o.method.toLowerCase()]=L(o,i(o.filePath)),r[a]=p,s.add(i(o.filePath))}const d=e.functions.filter(o=>o.visibility!=="internal"&&o.kind!=="stream");for(const o of d){const{operation:a,pathKey:p}=F(o,i(o.filePath));r[p]={post:a},s.add(i(o.filePath))}for(const o of d){if(o.expose?.rest!==!0)continue;const a=M(o,i(o.filePath));if(a===void 0)continue;const p=n(a.path);p[a.method]=a.operation,r[a.path]=p}const u=[...s].toSorted((o,a)=>o.localeCompare(a)).map(o=>({description:c.find(p=>p.name===o)?.description??`Operations declared in \`lunora/${o}\`.`,name:o}));return{components:{responses:{LunoraError:{content:{"application/json":{schema:{additionalProperties:!1,description:"Standard Lunora error envelope.",properties:{error:{additionalProperties:!1,properties:{code:{description:"Machine-readable error code. Clients switch on this value.",enum:P,type:"string"},message:{description:"Human-readable error message (never echoes internal details).",type:"string"}},required:["code","message"],type:"object"}},required:["error"],type:"object"}}},description:"A Lunora error response. The HTTP status reflects the error code (e.g. BAD_REQUEST→400, UNAUTHORIZED→401, FORBIDDEN→403, NOT_FOUND→404)."}}},info:{description:"Auto-generated from @lunora/values-typed functions by @lunora/codegen. Do not edit — run `lunora codegen` to regenerate.",title:"Lunora API",version:t},openapi:"3.1.0",paths:Object.fromEntries(Object.entries(r).map(([o,a])=>[o,{...a}])),tags:u}},z=e=>`${JSON.stringify(J(e),void 0,2)}
 `,K=e=>`${A}export const openApiSpec = ${E(e,"Record<string, unknown>")};
 `;export{J as buildOpenApiDocument,z as emitOpenApi,K as emitOpenApiModule};

package/dist/packem_shared/capabilitiesUsedBy-CIms8agu.mjs

@@ -0,0 +1 @@
+import{SyntaxKind as g,Node as m,ts as w,Project as R}from"ts-morph";import{CAPABILITIES as u}from"./CAPABILITY_PROBES-brcmKenl.mjs";import{descendantsOfKind as l,bindingKeyName as y,listLunoraSourceFiles as D}from"./isTestPath-BrBtG0bz.mjs";import{scanImportDeclaration as P,noSandboxUsage as v}from"./discoverSandboxUsage-q0SIdjyQ.mjs";const f="ctx",A=(e,t,s)=>{for(const n of l(e,g.ElementAccessExpression)){const r=n.getArgumentExpression();t(n.getExpression())&&r!==void 0&&(m.isStringLiteral(r)||m.isNoSubstitutionTemplateLiteral(r))&&s.add(r.getLiteralValue())}},L=e=>{const t=new Set,s=new Set,n=new Set(l(e,g.Parameter).map(o=>o.getName())),r=l(e,g.VariableDeclaration).some(o=>{const c=o.getInitializer();return o.getName()===f&&m.isIdentifier(c)&&n.has(c.getText())});(n.has(f)||r)&&s.add(f);const i=o=>{if(m.isObjectBindingPattern(o))for(const c of o.getElements()){const d=y(c);d&&t.add(d)}};for(const o of l(e,g.BindingElement)){if(y(o)!==f)continue;const c=o.getNameNode();m.isIdentifier(c)?s.add(c.getText()):i(c)}const a=o=>m.isIdentifier(o)&&s.has(o.getText());for(const o of l(e,g.PropertyAccessExpression))a(o.getExpression())&&t.add(o.getName());A(e,a,t);for(const o of l(e,g.VariableDeclaration)){const c=o.getInitializer();c!==void 0&&a(c)&&i(o.getNameNode())}return t},M=e=>{if(e.isTypeOnly())return!0;if(m.isExportDeclaration(e)){const s=e.getNamedExports();return!e.isNamespaceExport()&&s.length>0&&s.every(n=>n.isTypeOnly())}const t=e.getNamedImports();return e.getDefaultImport()===void 0&&e.getNamespaceImport()===void 0&&t.length>0&&t.every(s=>s.isTypeOnly())},C=new Map(u.flatMap(({bindingFreeExports:e,moduleSpecifier:t})=>e===void 0?[]:[[t,new Set(e)]])),V=(e,t)=>{const s=C.get(t);if(s===void 0||m.isImportDeclaration(e)&&(e.getDefaultImport()!==void 0||e.getNamespaceImport()!==void 0))return!1;const n=m.isExportDeclaration(e)?e.getNamedExports():e.getNamedImports();return n.length>0&&n.every(r=>r.isTypeOnly()||s.has(r.getName()))},F=e=>{const t=new Set;for(const s of l(e,g.CallExpression)){const[n]=s.getArguments();s.getExpression().getKind()===g.ImportKeyword&&(m.isStringLiteral(n)||m.isNoSubstitutionTemplateLiteral(n))&&t.add(n.getLiteralValue())}return t},N="@lunora/agent",E="requestSecretTool",I=e=>e.startsWith("./")||e.startsWith("../"),S=e=>e.getAliasNode()?.getText()??e.getNameNode().getText(),z=(e,t)=>{const s=e!==void 0&&m.isCallExpression(e)?e.getExpression():e;return s!==void 0&&m.isIdentifier(s)&&t.has(s.getText())},_=e=>{const t=new Set;for(const s of e.getImportDeclarations())if(!(s.getModuleSpecifierValue()!==N||s.isTypeOnly()))for(const n of s.getNamedImports())!n.isTypeOnly()&&n.getNameNode().getText()===E&&t.add(S(n));return t},p=e=>({names:new Set(e),namespaces:new Map}),x=()=>({projects:new Map,origins:new Map}),k=(e,t)=>{if(e.origins.has(t))return t;let s=e.projects.get(t);return s===void 0&&(s=new R({compilerOptions:{...t.getCompilerOptions(),allowJs:!0},fileSystem:t.getFileSystem(),skipAddingFilesFromTsConfig:!0,skipFileDependencyResolution:!0,skipLoadingLibFiles:!0}),e.projects.set(t,s),e.origins.set(s,t)),s},b=(e,t,s)=>{const n=t.getSourceFile(),r=n.getProject(),i=e.origins.get(r)??r,{resolvedModule:a}=w.resolveModuleName(s,n.getFilePath(),i.getCompilerOptions(),i.getModuleResolutionHost()),o=a?.resolvedFileName;if(o===void 0)return;const c=i.getSourceFile(o)??r.getSourceFile(o);if(c!==void 0)return c;const d=k(e,r);return d.getSourceFile(o)??d.addSourceFileAtPath(o)},B=(e,t,s)=>{const n=e.getNamespaceExport();if(n!==void 0){const r=new Set(t.names);t.namespaces.forEach((i,a)=>{i.forEach(o=>{r.add(`${a}.${o}`)})}),r.size>0&&s.namespaces.set(n.getName(),r);return}if(!e.hasNamedExports()){t.names.forEach(r=>s.names.add(r)),t.namespaces.forEach((r,i)=>s.namespaces.set(i,r));return}for(const r of e.getNamedExports()){if(r.isTypeOnly())continue;const i=r.getNameNode().getText(),a=S(r);t.names.has(i)&&s.names.add(a);const o=t.namespaces.get(i);o!==void 0&&s.namespaces.set(a,o)}},K=(e,t,s,n)=>{const r=t.getModuleSpecifierValue();if(r===void 0)return p(s);if(r===N)return p([E]);const i=I(r)?b(e,t,r):void 0;return i===void 0?p([]):n(i)},h=(e,t,s)=>{const n=p([]),r=e.getFilePath();if(t.has(r))return n;t.add(r);const i=_(e);for(const a of e.getExportDeclarations())a.isTypeOnly()||B(a,K(s,a,i,o=>h(o,t,s)),n);for(const a of e.getVariableStatements())if(a.isExported())for(const o of a.getDeclarations())z(o.getInitializer(),i)&&n.names.add(o.getName());return t.delete(r),n},W=(e,t,s)=>{const n=e.getModuleSpecifierValue();if(n===N)return p([E]);const r=I(n)?b(s,e,n):void 0;return r===void 0?p([]):h(r,new Set([t.getFilePath()]),s)},$=e=>{const t=e.getPropertyNameNode();return t===void 0?e.getName():m.isStringLiteral(t)?t.getLiteralValue():t.getText()},T=(e,t,s)=>{const n=(o,c)=>o===t?s.has(c):o.startsWith(`${t}.`)&&s.has(`${o.slice(t.length+1)}.${c}`),r=e.getDescendantsOfKind(g.PropertyAccessExpression).some(o=>n(o.getExpression().getText(),o.getName())),i=l(e,g.ElementAccessExpression).some(o=>{const c=o.getArgumentExpression();return m.isStringLiteral(c)&&n(o.getExpression().getText(),c.getLiteralValue())}),a=l(e,g.VariableDeclaration).some(o=>{const c=o.getInitializer(),d=o.getNameNode();return c!==void 0&&m.isObjectBindingPattern(d)&&d.getElements().some(O=>n(c.getText(),$(O)))});return r||i||a},j=(e,t,s)=>{if(s.names.has(t.getNameNode().getText()))return!0;const n=s.namespaces.get(t.getNameNode().getText());return n!==void 0&&T(e,S(t),n)},q=(e,t=x())=>e.getImportDeclarations().some(s=>{if(s.isTypeOnly())return!1;const n=W(s,e,t);if(n.names.size===0&&n.namespaces.size===0)return!1;const r=s.getDefaultImport(),i=s.getNamespaceImport();return r!==void 0&&(n.names.has("default")||T(e,r.getText(),n.namespaces.get("default")??new Set))||s.getNamedImports().some(o=>!o.isTypeOnly()&&j(e,o,n))||i!==void 0&&T(e,i.getText(),n.names)}),U=(e,t=x())=>{const s=e.getImportDeclarations(),n=v();for(const r of s){const i=P(r);for(const a of Object.keys(n))n[a]||=i[a]}return{contextReads:L(e),dynamicImports:F(e),requestSecretTool:q(e,t),sandboxTools:n,valueImports:new Set([...s,...e.getExportDeclarations()].flatMap(r=>{const i=r.getModuleSpecifierValue();return i===void 0||M(r)||V(r,i)?[]:[i]}))}},X=e=>{const t=new Set,s=new Set,n=v(),r=new Set;let i=!1;for(const a of e){i||=a.requestSecretTool;for(const o of a.contextReads)t.add(o);for(const o of a.dynamicImports)s.add(o);for(const o of a.valueImports)r.add(o);for(const o of Object.keys(n))n[o]||=a.sandboxTools[o]}return{contextReads:t,dynamicImports:s,requestSecretTool:i,sandboxTools:n,valueImports:r}},G=e=>new Set(u.filter(({contextProperty:t,moduleSpecifier:s})=>e.valueImports.has(s)||t!==void 0&&e.contextReads.has(t)).map(({key:t})=>t)),H=new RegExp(String.raw`\b${f}\b`,"u"),J=new RegExp(String.raw`\b(?:${u.flatMap(({contextProperty:e})=>e===void 0?[]:[e]).join("|")})\b`,"u"),te=e=>H.test(e)&&J.test(e),se=(e,t)=>{const s=x(),n=X(D(t).map(i=>U(e.getSourceFile(i)??e.addSourceFileAtPath(i),s))),r=G(n);return Object.fromEntries(u.map(({key:i})=>[i,r.has(i)]))};export{G as capabilitiesUsedBy,L as contextPropertiesRead,x as createTargetScope,se as discoverFeatureUsage,q as fileWiresRequestSecretTool,X as foldCapabilitySignals,te as mayReadCapabilityContext,U as sourceCapabilitySignals};

package/dist/packem_shared/chain-COp_5hZ4.mjs

@@ -0,0 +1 @@
+import{w as a}from"./classify-procedure-call-CGyiEHy1.mjs";const l=s=>a(s,"use","rls");export{l as r};