@lunora/codegen 1.0.0-alpha.45 → 1.0.0-alpha.47

package/dist/index.mjs

@@ -1,9 +1,9 @@
 export { formatAdvisories, lintSchema } from './packem_shared/formatAdvisories-BmF7Mplc.mjs';
 export { CodegenDiagnosticError, diagnosticAt } from './packem_shared/CodegenDiagnosticError-DyQ5FwkM.mjs';
-export { AGENTS_FILENAME, discoverAgents } from './packem_shared/AGENTS_FILENAME-BksnAJgx.mjs';
+export { AGENTS_FILENAME, discoverAgents } from './packem_shared/AGENTS_FILENAME-Cxx7wiSs.mjs';
 export { default as discoverAuthApiCalls } from './packem_shared/discoverAuthApiCalls-Dx3K42rk.mjs';
 export { CONTAINERS_FILENAME, discoverContainers } from './packem_shared/CONTAINERS_FILENAME-DjpXMqhp.mjs';
-export { default as discoverCrons } from './packem_shared/discoverCrons-_aosTRLr.mjs';
+export { default as discoverCrons } from './packem_shared/discoverCrons-DvqkEWdx.mjs';
 export { FLAGS_FILENAME, discoverFlags } from './packem_shared/FLAGS_FILENAME-Dg4mKUuz.mjs';
 export { discoverFunctions } from './packem_shared/discoverFunctions-BJ-qR7Rg.mjs';
 export { default as discoverHttpRoutes } from './packem_shared/discoverHttpRoutes-daCzuTe8.mjs';
@@ -16,15 +16,16 @@ export { default as discoverQueries } from './packem_shared/discoverQueries-CJnn
 export { QUEUES_FILENAME, discoverQueues } from './packem_shared/QUEUES_FILENAME-Xv6Vy-Ku.mjs';
 export { default as discoverR2sqlCalls } from './packem_shared/discoverR2sqlCalls-pnpicWfz.mjs';
 export { discoverRlsMetadata, default as discoverRlsProcedures } from './packem_shared/discoverRlsMetadata-DppniPUH.mjs';
+export { discoverSandboxUsage } from './packem_shared/discoverSandboxUsage-BUM2r90k.mjs';
 export { default as discoverSchema } from './packem_shared/discoverSchema-BaSAvooG.mjs';
 export { SHAPES_FILENAME, discoverShapes } from './packem_shared/SHAPES_FILENAME-DOhPGi-6.mjs';
 export { default as discoverStorageRulesMetadata } from './packem_shared/discoverStorageRulesMetadata-CnHl2rXD.mjs';
-export { WORKFLOWS_FILENAME, discoverWorkflows } from './packem_shared/WORKFLOWS_FILENAME-B2By8S4s.mjs';
-export { G as GENERATED_HEADER, e as emitAgents, a as emitApi, b as emitCollections, c as emitContainers, d as emitCrons, f as emitDataModel, g as emitDrizzleSchema, h as emitFunctions, i as emitServer, j as emitShard, k as emitVectors, l as emitWorkflows, m as emitWranglerCronTriggers } from './packem_shared/emit-Dyzron8Q.mjs';
-export { emitApp } from './packem_shared/emitApp-D5-NY844.mjs';
-export { buildOpenApiDocument, emitOpenApi, emitOpenApiModule } from './packem_shared/buildOpenApiDocument-D0MBRHyR.mjs';
-export { OPENRPC_VERSION, buildOpenRpcDocument, emitOpenRpc, emitOpenRpcModule } from './packem_shared/OPENRPC_VERSION-BdFITigK.mjs';
-export { SCHEMA_SNAPSHOT_FILENAME, createCodegenProject, refreshCodegenProject, runCodegen } from './packem_shared/SCHEMA_SNAPSHOT_FILENAME-CCsVXrsN.mjs';
+export { WORKFLOWS_FILENAME, discoverWorkflows } from './packem_shared/WORKFLOWS_FILENAME-Dtuzvluc.mjs';
+export { G as GENERATED_HEADER, e as emitAgents, a as emitApi, b as emitCollections, c as emitContainers, d as emitCrons, f as emitDataModel, g as emitDrizzleSchema, h as emitFunctions, i as emitServer, j as emitShard, k as emitVectors, l as emitWorkflows, m as emitWranglerCronTriggers } from './packem_shared/emit-CpcoK10Y.mjs';
+export { emitApp } from './packem_shared/emitApp-DknqEU1p.mjs';
+export { buildOpenApiDocument, emitOpenApi, emitOpenApiModule } from './packem_shared/buildOpenApiDocument-Cv4Mg1kd.mjs';
+export { OPENRPC_VERSION, buildOpenRpcDocument, emitOpenRpc, emitOpenRpcModule } from './packem_shared/OPENRPC_VERSION-5mpS55nb.mjs';
+export { SCHEMA_SNAPSHOT_FILENAME, createCodegenProject, refreshCodegenProject, runCodegen } from './packem_shared/SCHEMA_SNAPSHOT_FILENAME-Dx31MtBY.mjs';
 export { SCHEMA_SNAPSHOT_VERSION, SchemaSnapshotParseError, buildSchemaSnapshot, diffSchemaSnapshots, evaluateSchemaDrift, parseSchemaSnapshot, serializeSchemaSnapshot } from './packem_shared/SCHEMA_SNAPSHOT_VERSION-D0ARY6rL.mjs';
 export { schemaFromIr } from './packem_shared/schemaFromIr-DTYsLBaA.mjs';
 export { LUNORA_ERROR_CODES, validatorIrToJsonSchema } from './packem_shared/LUNORA_ERROR_CODES-DvTLozCu.mjs';

package/dist/packem_shared/{AGENTS_FILENAME-BksnAJgx.mjs → AGENTS_FILENAME-Cxx7wiSs.mjs}

@@ -1,7 +1,8 @@
 import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { agentDefaultName, agentClassName, agentBindingName, voiceBindingName, voiceClassName } from '@lunora/agent/naming';
-import { SyntaxKind, Node } from 'ts-morph';
+import { LunoraError } from '@lunora/errors';
+import { Node, SyntaxKind } from 'ts-morph';
 import { diagnosticAt } from './CodegenDiagnosticError-DyQ5FwkM.mjs';
 
 const AGENTS_FILENAME = "agents.ts";
@@ -79,17 +80,23 @@ const agentFromCall = (call, exportName) => {
   }
   return ir;
 };
+const unwrapToCallExpression = (node) => {
+  let current = node;
+  while (current && (Node.isAsExpression(current) || Node.isSatisfiesExpression(current) || Node.isParenthesizedExpression(current))) {
+    current = current.getExpression();
+  }
+  return current && Node.isCallExpression(current) ? current : void 0;
+};
 const agentsFromSource = (source) => {
   const agents = [];
   for (const declaration of source.getVariableDeclarations()) {
     if (!declaration.isExported()) {
       continue;
     }
-    const initializer = declaration.getInitializer();
-    if (initializer?.getKind() !== SyntaxKind.CallExpression) {
+    const call = unwrapToCallExpression(declaration.getInitializer());
+    if (!call) {
       continue;
     }
-    const call = initializer;
     const callee = call.getExpression();
     if (!Node.isIdentifier(callee) || !isDefineAgent(callee)) {
       continue;
@@ -102,6 +109,40 @@ const agentsFromSource = (source) => {
   }
   return agents;
 };
+const assertUniqueNames = (agents) => {
+  const seenNames = /* @__PURE__ */ new Map();
+  const seenBindings = /* @__PURE__ */ new Map();
+  const seenClasses = /* @__PURE__ */ new Map();
+  for (const agent of agents) {
+    const priorName = seenNames.get(agent.name);
+    if (priorName !== void 0) {
+      throw new LunoraError(
+        "DUPLICATE_AGENT_NAME",
+        `Duplicate agent name "${agent.name}": produced by both "${priorName}" and "${agent.exportName}". Deployed agent names must be unique across the project.`,
+        { status: 500 }
+      );
+    }
+    seenNames.set(agent.name, agent.exportName);
+    const priorBinding = seenBindings.get(agent.bindingName);
+    if (priorBinding !== void 0) {
+      throw new LunoraError(
+        "DUPLICATE_AGENT_BINDING",
+        `Duplicate agent binding "${agent.bindingName}": produced by both "${priorBinding}" and "${agent.exportName}". Agent export names must yield unique binding names.`,
+        { status: 500 }
+      );
+    }
+    seenBindings.set(agent.bindingName, agent.exportName);
+    const priorClass = seenClasses.get(agent.className);
+    if (priorClass !== void 0) {
+      throw new LunoraError(
+        "DUPLICATE_AGENT_CLASS",
+        `Duplicate agent class "${agent.className}": produced by both "${priorClass}" and "${agent.exportName}". Agent export names must yield unique generated class names.`,
+        { status: 500 }
+      );
+    }
+    seenClasses.set(agent.className, agent.exportName);
+  }
+};
 const discoverAgents = (project, lunoraDirectory) => {
   const agentsPath = join(lunoraDirectory, AGENTS_FILENAME);
   if (!existsSync(agentsPath)) {
@@ -110,6 +151,7 @@ const discoverAgents = (project, lunoraDirectory) => {
   const source = project.getSourceFile(agentsPath) ?? project.addSourceFileAtPath(agentsPath);
   const agents = agentsFromSource(source);
   agents.sort((a, b) => a.exportName.localeCompare(b.exportName));
+  assertUniqueNames(agents);
   return agents;
 };
 

package/dist/packem_shared/{GENERATED_HEADER-CBFi_PqS.mjs → GENERATED_HEADER-81zst6_8.mjs}

@@ -1,4 +1,4 @@
 import '@lunora/agent/component';
 import '@lunora/errors';
-export { G as GENERATED_HEADER, n as buildStorageColumns, e as emitAgents, a as emitApi, b as emitCollections, c as emitContainers, d as emitCrons, f as emitDataModel, g as emitDrizzleSchema, h as emitFunctions, o as emitQueues, p as emitSeed, i as emitServer, j as emitShard, k as emitVectors, l as emitWorkflows, m as emitWranglerCronTriggers } from './emit-Dyzron8Q.mjs';
+export { G as GENERATED_HEADER, n as buildStorageColumns, e as emitAgents, a as emitApi, b as emitCollections, c as emitContainers, d as emitCrons, f as emitDataModel, g as emitDrizzleSchema, h as emitFunctions, o as emitQueues, p as emitSeed, i as emitServer, j as emitShard, k as emitVectors, l as emitWorkflows, m as emitWranglerCronTriggers } from './emit-CpcoK10Y.mjs';
 import './paths-BRd6JHuF.mjs';

package/dist/packem_shared/{OPENRPC_VERSION-BdFITigK.mjs → OPENRPC_VERSION-5mpS55nb.mjs}

@@ -1,4 +1,4 @@
-import { G as GENERATED_HEADER } from './emit-Dyzron8Q.mjs';
+import { G as GENERATED_HEADER } from './emit-CpcoK10Y.mjs';
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 import { argsObjectSchema, LUNORA_ERROR_CODES } from './LUNORA_ERROR_CODES-DvTLozCu.mjs';
 

package/dist/packem_shared/{SCHEMA_SNAPSHOT_FILENAME-CCsVXrsN.mjs → SCHEMA_SNAPSHOT_FILENAME-Dx31MtBY.mjs}

@@ -5,12 +5,12 @@ import { LunoraError } from '@lunora/errors';
 import { Node, SyntaxKind, Project } from 'ts-morph';
 import { lintSchema } from './formatAdvisories-BmF7Mplc.mjs';
 import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall, inlineHandler as inlineHandler$1, procedureHandler, chainUsesWrappedCall, isDatabaseAccessor, chainHasStep, discoverFunctions } from './discoverFunctions-BJ-qR7Rg.mjs';
-import { discoverAgents } from './AGENTS_FILENAME-BksnAJgx.mjs';
+import { discoverAgents } from './AGENTS_FILENAME-Cxx7wiSs.mjs';
 import discoverAuthApiCalls from './discoverAuthApiCalls-Dx3K42rk.mjs';
 import { discoverContainers } from './CONTAINERS_FILENAME-DjpXMqhp.mjs';
-import discoverCrons from './discoverCrons-_aosTRLr.mjs';
+import discoverCrons from './discoverCrons-DvqkEWdx.mjs';
 import { diagnosticAt } from './CodegenDiagnosticError-DyQ5FwkM.mjs';
-import { C as CAPABILITIES, n as buildStorageColumns, f as emitDataModel, a as emitApi, i as emitServer, h as emitFunctions, j as emitShard, b as emitCollections, c as emitContainers, l as emitWorkflows, e as emitAgents, o as emitQueues, d as emitCrons, k as emitVectors, g as emitDrizzleSchema, p as emitSeed, m as emitWranglerCronTriggers } from './emit-Dyzron8Q.mjs';
+import { C as CAPABILITIES, n as buildStorageColumns, f as emitDataModel, a as emitApi, i as emitServer, h as emitFunctions, j as emitShard, b as emitCollections, c as emitContainers, l as emitWorkflows, e as emitAgents, o as emitQueues, d as emitCrons, k as emitVectors, g as emitDrizzleSchema, p as emitSeed, m as emitWranglerCronTriggers } from './emit-CpcoK10Y.mjs';
 import { discoverFlagKeys } from './FLAGS_FILENAME-Dg4mKUuz.mjs';
 import discoverHttpRoutes from './discoverHttpRoutes-daCzuTe8.mjs';
 import discoverInserts from './discoverInserts-DI4q5NxE.mjs';
@@ -22,15 +22,16 @@ import discoverQueries from './discoverQueries-CJnnnLpd.mjs';
 import { discoverQueues } from './QUEUES_FILENAME-Xv6Vy-Ku.mjs';
 import discoverR2sqlCalls from './discoverR2sqlCalls-pnpicWfz.mjs';
 import discoverRlsProcedures, { discoverRlsMetadata } from './discoverRlsMetadata-DppniPUH.mjs';
+import { discoverSandboxUsage } from './discoverSandboxUsage-BUM2r90k.mjs';
 import discoverSchema from './discoverSchema-BaSAvooG.mjs';
 import { secretKindOf, redact } from './redact-oTmsol5A.mjs';
 import { discoverShapes } from './SHAPES_FILENAME-DOhPGi-6.mjs';
 import discoverStorageRulesMetadata from './discoverStorageRulesMetadata-CnHl2rXD.mjs';
 import { e as enclosingExportName$2 } from './discover-ast-CT6BgBr4.mjs';
-import { discoverWorkflows } from './WORKFLOWS_FILENAME-B2By8S4s.mjs';
-import { emitApp } from './emitApp-D5-NY844.mjs';
-import { buildOpenApiDocument, emitOpenApiModule } from './buildOpenApiDocument-D0MBRHyR.mjs';
-import { buildOpenRpcDocument, emitOpenRpcModule } from './OPENRPC_VERSION-BdFITigK.mjs';
+import { discoverWorkflows } from './WORKFLOWS_FILENAME-Dtuzvluc.mjs';
+import { emitApp } from './emitApp-DknqEU1p.mjs';
+import { buildOpenApiDocument, emitOpenApiModule } from './buildOpenApiDocument-Cv4Mg1kd.mjs';
+import { buildOpenRpcDocument, emitOpenRpcModule } from './OPENRPC_VERSION-5mpS55nb.mjs';
 import { buildSchemaSnapshot, serializeSchemaSnapshot } from './SCHEMA_SNAPSHOT_VERSION-D0ARY6rL.mjs';
 
 const HTTP_VERBS$1 = /* @__PURE__ */ new Set(["delete", "get", "head", "options", "patch", "post", "put"]);
@@ -2699,41 +2700,6 @@ const discoverRelationLoads = (project, lunoraDirectory) => {
   return rows;
 };
 
-const SANDBOX_MODULE_SPECIFIERS = /* @__PURE__ */ new Set(["@lunora/agent", "@lunora/agent/sandbox"]);
-const scanImportDeclaration = (declaration) => {
-  const found = { usesSandboxBrowser: false, usesSandboxContainer: false };
-  if (!SANDBOX_MODULE_SPECIFIERS.has(declaration.getModuleSpecifierValue()) || declaration.isTypeOnly()) {
-    return found;
-  }
-  for (const named of declaration.getNamedImports()) {
-    if (named.isTypeOnly()) {
-      continue;
-    }
-    const name = named.getNameNode().getText();
-    if (name === "browserTool") {
-      found.usesSandboxBrowser = true;
-    } else if (name === "containerTool") {
-      found.usesSandboxContainer = true;
-    }
-  }
-  return found;
-};
-const discoverSandboxUsage = (project, lunoraDirectory) => {
-  const usage = { usesSandboxBrowser: false, usesSandboxContainer: false };
-  for (const filePath of listLunoraSourceFiles(lunoraDirectory)) {
-    const sourceFile = project.getSourceFile(filePath) ?? project.addSourceFileAtPath(filePath);
-    for (const declaration of sourceFile.getImportDeclarations()) {
-      const found = scanImportDeclaration(declaration);
-      usage.usesSandboxBrowser ||= found.usesSandboxBrowser;
-      usage.usesSandboxContainer ||= found.usesSandboxContainer;
-    }
-    if (usage.usesSandboxBrowser && usage.usesSandboxContainer) {
-      break;
-    }
-  }
-  return usage;
-};
-
 const literalValueOf = (node) => {
   if (Node.isStringLiteral(node) || Node.isNoSubstitutionTemplateLiteral(node)) {
     return node.getLiteralText();
@@ -3155,6 +3121,44 @@ const findTsconfig = (startPath) => {
   return void 0;
 };
 const toPosixPath = (path) => path.replaceAll("\\", "/");
+const assertNoWorkflowAgentCollision = (workflows, agents) => {
+  const namesByLabel = /* @__PURE__ */ new Map();
+  const bindingsByLabel = /* @__PURE__ */ new Map();
+  const classesByLabel = /* @__PURE__ */ new Map();
+  for (const workflow of workflows) {
+    namesByLabel.set(workflow.name, `workflow "${workflow.exportName}"`);
+    bindingsByLabel.set(workflow.bindingName, `workflow "${workflow.exportName}"`);
+    classesByLabel.set(workflow.className, `workflow "${workflow.exportName}"`);
+  }
+  for (const agent of agents) {
+    const priorName = namesByLabel.get(agent.name);
+    if (priorName !== void 0) {
+      throw new LunoraError(
+        // eslint-disable-next-line no-secrets/no-secrets -- an error code, not a secret
+        "DUPLICATE_WORKFLOW_NAME",
+        `Duplicate deployed name "${agent.name}": produced by both ${priorName} and agent "${agent.exportName}". Workflow and agent names share the same wrangler workflows[] array and must be unique together.`,
+        { status: 500 }
+      );
+    }
+    const priorBinding = bindingsByLabel.get(agent.bindingName);
+    if (priorBinding !== void 0) {
+      throw new LunoraError(
+        // eslint-disable-next-line no-secrets/no-secrets -- an error code, not a secret
+        "DUPLICATE_WORKFLOW_BINDING",
+        `Duplicate binding "${agent.bindingName}": produced by both ${priorBinding} and agent "${agent.exportName}". Workflow and agent bindings share the same wrangler workflows[] array and must be unique together.`,
+        { status: 500 }
+      );
+    }
+    const priorClass = classesByLabel.get(agent.className);
+    if (priorClass !== void 0) {
+      throw new LunoraError(
+        "DUPLICATE_WORKFLOW_CLASS",
+        `Duplicate generated class "${agent.className}": produced by both ${priorClass} and agent "${agent.exportName}". Workflow and agent export names must yield unique generated class names.`,
+        { status: 500 }
+      );
+    }
+  }
+};
 const createCodegenProject = (lunoraDirectory) => {
   const tsconfigPath = findTsconfig(lunoraDirectory);
   return tsconfigPath ? new Project({ skipAddingFilesFromTsConfig: false, tsConfigFilePath: tsconfigPath, useInMemoryFileSystem: false }) : new Project({ skipAddingFilesFromTsConfig: true, useInMemoryFileSystem: false });
@@ -3203,6 +3207,7 @@ const runCodegen = (options) => {
   const workflows = discoverWorkflows(project, lunoraDirectory);
   const queues = discoverQueues(project, lunoraDirectory);
   const agents = discoverAgents(project, lunoraDirectory);
+  assertNoWorkflowAgentCollision(workflows, agents);
   const crons = discoverCrons(project, lunoraDirectory, workflows, agents);
   const containers = discoverContainers(project, lunoraDirectory);
   const advisories = options.lint === false ? [] : lintSchema({

package/dist/packem_shared/{WORKFLOWS_FILENAME-B2By8S4s.mjs → WORKFLOWS_FILENAME-Dtuzvluc.mjs}

@@ -2,7 +2,7 @@ import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { LunoraError } from '@lunora/errors';
 import { workflowDefaultName, workflowClassName, workflowBindingName } from '@lunora/workflow';
-import { SyntaxKind, Node } from 'ts-morph';
+import { Node, SyntaxKind } from 'ts-morph';
 import { diagnosticAt } from './CodegenDiagnosticError-DyQ5FwkM.mjs';
 
 const WORKFLOWS_FILENAME = "workflows.ts";
@@ -88,17 +88,23 @@ const workflowFromCall = (call, exportName) => {
   }
   return ir;
 };
+const unwrapToCallExpression = (node) => {
+  let current = node;
+  while (current && (Node.isAsExpression(current) || Node.isSatisfiesExpression(current) || Node.isParenthesizedExpression(current))) {
+    current = current.getExpression();
+  }
+  return current && Node.isCallExpression(current) ? current : void 0;
+};
 const workflowsFromSource = (source) => {
   const workflows = [];
   for (const declaration of source.getVariableDeclarations()) {
     if (!declaration.isExported()) {
       continue;
     }
-    const initializer = declaration.getInitializer();
-    if (initializer?.getKind() !== SyntaxKind.CallExpression) {
+    const call = unwrapToCallExpression(declaration.getInitializer());
+    if (!call) {
       continue;
     }
-    const call = initializer;
     const callee = call.getExpression();
     if (!Node.isIdentifier(callee) || !isDefineWorkflow(callee)) {
       continue;

package/dist/packem_shared/{buildOpenApiDocument-D0MBRHyR.mjs → buildOpenApiDocument-Cv4Mg1kd.mjs}

@@ -1,4 +1,4 @@
-import { G as GENERATED_HEADER } from './emit-Dyzron8Q.mjs';
+import { G as GENERATED_HEADER } from './emit-CpcoK10Y.mjs';
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 import { LUNORA_ERROR_CODES, objectSchema, argsObjectSchema, validatorIrToJsonSchema } from './LUNORA_ERROR_CODES-DvTLozCu.mjs';
 

package/dist/packem_shared/{discoverCrons-_aosTRLr.mjs → discoverCrons-DvqkEWdx.mjs}

@@ -46,7 +46,7 @@ const rootIdentifierOf = (node) => {
 };
 const stringArgument = (call, index) => {
   const argument = call.getArguments()[index];
-  return argument && Node.isStringLiteral(argument) ? argument.getLiteralValue() : void 0;
+  return argument && (Node.isStringLiteral(argument) || Node.isNoSubstitutionTemplateLiteral(argument)) ? argument.getLiteralValue() : void 0;
 };
 const literalValue = (node, jobName) => {
   if (Node.isStringLiteral(node) || Node.isNoSubstitutionTemplateLiteral(node)) {
@@ -165,12 +165,27 @@ const resolveTarget = (call, index, jobName, workflowsByName, agentsByName) => {
   }
   if (argument && Node.isIdentifier(argument)) {
     const workflow = workflowsByName.get(argument.getText());
+    const agent = agentsByName.get(argument.getText());
+    if (workflow && agent) {
+      throw diagnosticAt(
+        argument,
+        `Cron job "${jobName}" references "${argument.getText()}", which is ambiguous: a workflow and an agent are both declared under that name.`,
+        {
+          code: "CRON_NON_STATIC_FN",
+          name: "LunoraError",
+          status: 500
+        }
+      );
+    }
     if (workflow) {
       return workflowTarget(workflow);
     }
+    if (agent) {
+      return agentTarget(agent);
+    }
     throw diagnosticAt(
       argument,
-      `Cron job "${jobName}" references "${argument.getText()}", which is neither a function (internal.file.fn / api.file.fn) nor a declared workflow in lunora/workflows.ts.`,
+      `Cron job "${jobName}" references "${argument.getText()}", which is neither a function (internal.file.fn / api.file.fn) nor a declared workflow in lunora/workflows.ts nor a declared agent in lunora/agents.ts.`,
       {
         code: "CRON_NON_STATIC_FN",
         name: "LunoraError",

package/dist/packem_shared/discoverSandboxUsage-BUM2r90k.mjs

@@ -0,0 +1,38 @@
+import { listLunoraSourceFiles } from './discoverFunctions-BJ-qR7Rg.mjs';
+
+const SANDBOX_MODULE_SPECIFIERS = /* @__PURE__ */ new Set(["@lunora/agent", "@lunora/agent/sandbox"]);
+const scanImportDeclaration = (declaration) => {
+  const found = { usesSandboxBrowser: false, usesSandboxContainer: false };
+  if (!SANDBOX_MODULE_SPECIFIERS.has(declaration.getModuleSpecifierValue()) || declaration.isTypeOnly()) {
+    return found;
+  }
+  for (const named of declaration.getNamedImports()) {
+    if (named.isTypeOnly()) {
+      continue;
+    }
+    const name = named.getNameNode().getText();
+    if (name === "browserTool") {
+      found.usesSandboxBrowser = true;
+    } else if (name === "containerTool") {
+      found.usesSandboxContainer = true;
+    }
+  }
+  return found;
+};
+const discoverSandboxUsage = (project, lunoraDirectory) => {
+  const usage = { usesSandboxBrowser: false, usesSandboxContainer: false };
+  for (const filePath of listLunoraSourceFiles(lunoraDirectory)) {
+    const sourceFile = project.getSourceFile(filePath) ?? project.addSourceFileAtPath(filePath);
+    for (const declaration of sourceFile.getImportDeclarations()) {
+      const found = scanImportDeclaration(declaration);
+      usage.usesSandboxBrowser ||= found.usesSandboxBrowser;
+      usage.usesSandboxContainer ||= found.usesSandboxContainer;
+    }
+    if (usage.usesSandboxBrowser && usage.usesSandboxContainer) {
+      break;
+    }
+  }
+  return usage;
+};
+
+export { discoverSandboxUsage };

package/dist/packem_shared/{emit-Dyzron8Q.mjs → emit-CpcoK10Y.mjs}

@@ -760,12 +760,23 @@ ${objectMembers}
 };
 const agentRuntimeFunctionNames = () => Object.keys(agentComponent().functions).toSorted((a, b) => a.localeCompare(b));
 const takenAgentFunctionNames = (functions) => new Set(functions.filter((definition) => sanitizeNamespace(definition.filePath) === "agents").map((definition) => definition.exportName));
+const internalAgentRuntimeFunctionNames = () => new Set(
+  Object.entries(agentComponent().functions).filter(([, definition]) => definition.visibility === "internal").map(([name]) => name)
+);
 const renderAgentFunctionRegistry = (agents, functions) => {
   const empty = { importLine: "", lines: "", prelude: "" };
   if (agents.length === 0) {
     return empty;
   }
   const taken = takenAgentFunctionNames(functions);
+  const internal = internalAgentRuntimeFunctionNames();
+  const shadowedInternal = functions.find((definition) => sanitizeNamespace(definition.filePath) === "agents" && internal.has(definition.exportName));
+  if (shadowedInternal) {
+    throw new LunoraError(
+      "INTERNAL",
+      `@lunora/codegen: "agents:${shadowedInternal.exportName}" is reserved for the durable agent loop's internal dispatch — rename the "${shadowedInternal.exportName}" export in ${shadowedInternal.filePath}`
+    );
+  }
   const names = agentRuntimeFunctionNames().filter((name) => !taken.has(name));
   if (names.length === 0) {
     return empty;
@@ -2875,14 +2886,14 @@ const sourceClientCache = new WeakMap<object, Map<string, SourceClientLike>>();
 const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
 ` : "";
   const externalSourceOverride = hasSourcedTables ? `
-        protected override async pollExternalSources(): Promise<number> {
+        protected override async pollExternalSources(): Promise<number | undefined> {
             const env = (this.env ?? {}) as Record<string, unknown>;
             const sourced = Object.entries((schema as unknown as SchemaLike).tables)
                 .map(([table, definition]) => [table, (definition as { externalSource?: ExternalSourceLike }).externalSource] as const)
                 .filter((entry): entry is [string, ExternalSourceLike] => entry[1] !== undefined);
 
             if (sourced.length === 0) {
-                return 0;
+                return undefined;
             }
 
             const shardKey = this.currentShardKey();
@@ -2912,62 +2923,68 @@ const sourcePollAtCache = new WeakMap<object, Map<string, number>>();
             }
 
             const now = Date.now();
-            // \`active\` counts non-manual sources: while > 0 the alarm re-arms; a
-            // manual-only schema returns 0 so the shared alarm goes idle.
-            let active = 0;
+            // \`nextDueAt\` tracks the EARLIEST next-due timestamp across every
+            // non-manual source; the shared alarm re-arms there instead of the
+            // fixed 2 s global-shape floor, so a large \`refresh.everyMs\` actually
+            // sleeps until it's due. Stays \`undefined\` when every source is
+            // \`refresh: "manual"\`, so the shared alarm goes idle for this tier.
+            let nextDueAt: number | undefined;
 
             for (const [table, source] of sourced) {
                 if (source.refresh === "manual") {
                     continue;
                 }
 
-                active += 1;
+                if (isSourceDue(source.refresh, polledAt.get(table), now)) {
+                    try {
+                        let client = clients.get(source.binding);
 
-                if (!isSourceDue(source.refresh, polledAt.get(table), now)) {
-                    continue;
-                }
+                        if (client === undefined) {
+                            client = config.sourceClient?.(env, source.binding);
 
-                try {
-                    let client = clients.get(source.binding);
-
-                    if (client === undefined) {
-                        client = config.sourceClient?.(env, source.binding);
+                            if (client !== undefined) {
+                                clients.set(source.binding, client);
+                            }
+                        }
 
-                        if (client !== undefined) {
-                            clients.set(source.binding, client);
+                        if (client === undefined) {
+                            // No SqlClient resolved for this binding (host never wired
+                            // \`config.sourceClient\`, or wired it wrong). Surface it in the
+                            // Logs panel and stamp \`polledAt\` so a persistent misconfig backs
+                            // off to \`refresh.everyMs\` instead of retrying every alarm tick.
+                            this.recordExternalSourceError(table, new Error(\`external-source: no sourceClient resolved for binding "\${source.binding}"\`));
+                        } else if (source.mode === "incremental") {
+                            // Incremental (plan 136): pull only rows past the durable
+                            // watermark (or a full-pull seed/reconcile), upsert-only.
+                            // eslint-disable-next-line no-await-in-loop -- one sourced table at a time; sequential keeps the writer transaction simple
+                            await pullExternalSourceIncrementalTick(this.sql as SqlExec, writer, client, table, source, shardKey, now);
+                        } else {
+                            // eslint-disable-next-line no-await-in-loop -- one sourced table at a time; slices are independent but small and sequential keeps the writer transaction simple
+                            await pullExternalSourceTick(this.sql as SqlExec, writer, client, table, source, shardKey);
                         }
-                    }
 
-                    if (client === undefined) {
-                        // No SqlClient resolved for this binding (host never wired
-                        // \`config.sourceClient\`, or wired it wrong). Surface it in the
-                        // Logs panel and stamp \`polledAt\` so a persistent misconfig backs
-                        // off to \`refresh.everyMs\` instead of retrying every alarm tick.
-                        this.recordExternalSourceError(table, new Error(\`external-source: no sourceClient resolved for binding "\${source.binding}"\`));
-                        polledAt.set(table, now);
-                        continue;
+                        // Timestamp AFTER the poll finishes, not the batch-start \`now\` — a
+                        // poll that outruns \`everyMs\` must not make \`nextDueAt\` (below)
+                        // stale-immediate and re-arm the alarm in a hammering loop.
+                        polledAt.set(table, Date.now());
+                    } catch (error) {
+                        this.recordExternalSourceError(table, error);
+                        // Stamp on failure too, so a persistently failing source throttles
+                        // to \`refresh.everyMs\` rather than being hammered every tick.
+                        polledAt.set(table, Date.now());
                     }
+                }
 
-                    if (source.mode === "incremental") {
-                        // Incremental (plan 136): pull only rows past the durable
-                        // watermark (or a full-pull seed/reconcile), upsert-only.
-                        // eslint-disable-next-line no-await-in-loop -- one sourced table at a time; sequential keeps the writer transaction simple
-                        await pullExternalSourceIncrementalTick(this.sql as SqlExec, writer, client, table, source, shardKey, now);
-                    } else {
-                        // eslint-disable-next-line no-await-in-loop -- one sourced table at a time; slices are independent but small and sequential keeps the writer transaction simple
-                        await pullExternalSourceTick(this.sql as SqlExec, writer, client, table, source, shardKey);
-                    }
+                // This source's own next-due time, read AFTER the poll-or-skip above
+                // so a just-polled source reports \`now + everyMs\` (its FRESH due
+                // time), not the stale pre-poll one. An omitted \`refresh\` (poll
+                // every tick) is due again immediately.
+                const sourceNextDueAt = source.refresh === undefined ? now : (polledAt.get(table) ?? now) + source.refresh.everyMs;
 
-                    polledAt.set(table, now);
-                } catch (error) {
-                    this.recordExternalSourceError(table, error);
-                    // Stamp on failure too, so a persistently failing source throttles
-                    // to \`refresh.everyMs\` rather than being hammered every tick.
-                    polledAt.set(table, now);
-                }
+                nextDueAt = nextDueAt === undefined ? sourceNextDueAt : Math.min(nextDueAt, sourceNextDueAt);
             }
 
-            return active;
+            return nextDueAt;
         }
 ` : "";
   const sourceConstructorOverride = hasSourcedTables ? `
@@ -3479,19 +3496,13 @@ ${vectorsBuild}${aiBuild}${everyContextBuild}${containersBuild}${workflowsBuild}
             const storage = asBucketStorage(config.storage?.(env) ?? storageStub) as unknown as SystemReaderStorageLike;
 ${globalDatabaseLine}            const db: DatabaseWriterLike = createShardCtxDb(${databaseOptions});
 ${facadeBlock}${paymentsBuild}
-            // \`ctx.log\`: each call is captured + attributed to the executing
-            // function and routed to the optional \`observability\` sink. The DO base
-            // also buffers it (studio Logs panel) and emits a structured console
-            // event the dev-server formats in the terminal.
+            // \`ctx.log\`: the DO base builds the attributed logger (structured
+            // fields + \`.with(...)\` child + trace correlation) and routes each call
+            // to the optional \`observability\` sink. It also buffers the line (studio
+            // Logs panel) and emits a structured console event the dev-server formats.
             const observability = config.observability?.(env);
             const logFunctionPath = options.functionPath ?? "";
-            const log = {
-                debug: (...args: unknown[]) => { this.recordUserLog(logFunctionPath, "debug", args, observability); },
-                error: (...args: unknown[]) => { this.recordUserLog(logFunctionPath, "error", args, observability); },
-                info: (...args: unknown[]) => { this.recordUserLog(logFunctionPath, "info", args, observability); },
-                log: (...args: unknown[]) => { this.recordUserLog(logFunctionPath, "log", args, observability); },
-                warn: (...args: unknown[]) => { this.recordUserLog(logFunctionPath, "warn", args, observability); },
-            };
+            const log = this.makeLogger(logFunctionPath, observability);
 
             // \`ctx.now\`: the wall-clock instant (epoch ms) this function began,
             // captured ONCE so the whole handler body sees a single stable value.

package/dist/packem_shared/{emitApp-D5-NY844.mjs → emitApp-DknqEU1p.mjs}

@@ -1,4 +1,4 @@
-import { A as APP_METHOD_CAPABILITIES, G as GENERATED_HEADER } from './emit-Dyzron8Q.mjs';
+import { A as APP_METHOD_CAPABILITIES, G as GENERATED_HEADER } from './emit-CpcoK10Y.mjs';
 
 const hasFlagKey = (key) => `has${key.charAt(0).toUpperCase()}${key.slice(1)}`;
 const LONG_TAIL = APP_METHOD_CAPABILITIES.map(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/codegen",
-  "version": "1.0.0-alpha.45",
+  "version": "1.0.0-alpha.47",
   "description": "Code generator for Lunora: emits _generated/{api,server,dataModel}.ts from your schema",
   "keywords": [
     "cloudflare",
@@ -46,14 +46,14 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/advisor": "1.0.0-alpha.29",
-    "@lunora/agent": "1.0.0-alpha.3",
-    "@lunora/container": "1.0.0-alpha.12",
-    "@lunora/errors": "1.0.0-alpha.5",
-    "@lunora/queue": "1.0.0-alpha.8",
-    "@lunora/scheduler": "1.0.0-alpha.10",
-    "@lunora/values": "1.0.0-alpha.8",
-    "@lunora/workflow": "1.0.0-alpha.10",
+    "@lunora/advisor": "1.0.0-alpha.31",
+    "@lunora/agent": "1.0.0-alpha.5",
+    "@lunora/container": "1.0.0-alpha.13",
+    "@lunora/errors": "1.0.0-alpha.6",
+    "@lunora/queue": "1.0.0-alpha.9",
+    "@lunora/scheduler": "1.0.0-alpha.11",
+    "@lunora/values": "1.0.0-alpha.9",
+    "@lunora/workflow": "1.0.0-alpha.11",
     "ts-morph": "^28.0.0"
   },
   "engines": {