@lunora/codegen 1.0.0-alpha.51 → 1.0.0-alpha.53

package/dist/packem_shared/{SCHEMA_SNAPSHOT_FILENAME-G5dkcxPR.mjs → SCHEMA_SNAPSHOT_FILENAME--TKFIHmr.mjs}

@@ -3,35 +3,36 @@ import { join, dirname } from 'node:path';
 import { performance } from 'node:perf_hooks';
 import { LunoraError } from '@lunora/errors';
 import { Node, SyntaxKind, Project } from 'ts-morph';
-import { lintSchema } from './formatAdvisories-BmF7Mplc.mjs';
-import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall, inlineHandler as inlineHandler$1, procedureHandler, chainUsesWrappedCall, isDatabaseAccessor, chainHasStep, discoverFunctions } from './discoverFunctions-BJ-qR7Rg.mjs';
+import { lintSchema } from './formatAdvisories-Cans5TWS.mjs';
+import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall, inlineHandler as inlineHandler$1, procedureHandler, chainUsesWrappedCall, isDatabaseAccessor, chainHasStep, discoverFunctions } from './discoverFunctions-COG_Xkyz.mjs';
 import { discoverAgents } from './AGENTS_FILENAME-Cxx7wiSs.mjs';
-import discoverAuthApiCalls from './discoverAuthApiCalls-Dx3K42rk.mjs';
+import discoverAuthApiCalls from './discoverAuthApiCalls-Dhwgf4J4.mjs';
 import { discoverContainers } from './CONTAINERS_FILENAME-DjpXMqhp.mjs';
-import discoverCrons from './discoverCrons-DvqkEWdx.mjs';
+import discoverCrons from './discoverCrons-UbQLLmMS.mjs';
 import { diagnosticAt } from './CodegenDiagnosticError-DyQ5FwkM.mjs';
-import { C as CAPABILITIES, n as buildStorageColumns, f as emitDataModel, a as emitApi, i as emitServer, h as emitFunctions, j as emitShard, b as emitCollections, c as emitContainers, l as emitWorkflows, e as emitAgents, o as emitQueues, d as emitCrons, k as emitVectors, g as emitDrizzleSchema, p as emitSeed, m as emitWranglerCronTriggers } from './emit-ClTbCLy4.mjs';
-import { discoverFlagKeys } from './FLAGS_FILENAME-Dg4mKUuz.mjs';
-import discoverHttpRoutes from './discoverHttpRoutes-daCzuTe8.mjs';
-import discoverInserts from './discoverInserts-DI4q5NxE.mjs';
-import discoverMaskProcedures, { discoverMaskStrategies, discoverMaskMetadata } from './discoverMaskProcedures-BcTOEKNU.mjs';
-import discoverMigrations from './discoverMigrations-VNUFvCwr.mjs';
+import { C as CAPABILITIES, n as buildStorageColumns, f as emitDataModel, a as emitApi, i as emitServer, h as emitFunctions, j as emitShard, b as emitCollections, c as emitContainers, l as emitWorkflows, e as emitAgents, o as emitQueues, d as emitCrons, k as emitVectors, g as emitDrizzleSchema, p as emitSeed, m as emitWranglerCronTriggers } from './emit-DIbr7U31.mjs';
+import { discoverFlagKeys } from './FLAGS_FILENAME-D5igzqwR.mjs';
+import discoverHttpRoutes from './discoverHttpRoutes-CVXWZkzo.mjs';
+import discoverInserts from './discoverInserts-DdWnXmLS.mjs';
+import discoverMaskProcedures, { discoverMaskStrategies, discoverMaskMetadata } from './discoverMaskProcedures-BG58_fw3.mjs';
+import discoverMigrations from './discoverMigrations-Bw1U01zr.mjs';
 import { MUTATORS_FILENAME, isDefineMutatorCallee, discoverMutators } from './MUTATORS_FILENAME-BZOfUhlY.mjs';
-import discoverNondeterministicCalls from './discoverNondeterministicCalls-S0N2xLCq.mjs';
-import discoverQueries from './discoverQueries-CJnnnLpd.mjs';
+import discoverNondeterministicCalls from './discoverNondeterministicCalls-BbXEFZUT.mjs';
+import { discoverNotifyConfig, discoverNotifyCalls } from './NOTIFY_FILENAME-CK2IrsrP.mjs';
+import discoverQueries from './discoverQueries-CDmxu2ET.mjs';
 import { discoverQueues } from './QUEUES_FILENAME-Xv6Vy-Ku.mjs';
-import discoverR2sqlCalls from './discoverR2sqlCalls-pnpicWfz.mjs';
-import discoverRlsProcedures, { discoverRlsMetadata } from './discoverRlsMetadata-DppniPUH.mjs';
-import { discoverSandboxUsage } from './discoverSandboxUsage-BUM2r90k.mjs';
-import discoverSchema from './discoverSchema-BaSAvooG.mjs';
+import discoverR2sqlCalls from './discoverR2sqlCalls-Bn7QVv7J.mjs';
+import discoverRlsProcedures, { discoverRlsMetadata } from './discoverRlsMetadata-D9uN35no.mjs';
+import { discoverSandboxUsage } from './discoverSandboxUsage-B5jDU6Bt.mjs';
+import discoverSchema from './discoverSchema-BJp5_T4o.mjs';
 import { secretKindOf, redact } from './redact-oTmsol5A.mjs';
 import { discoverShapes } from './SHAPES_FILENAME-DOhPGi-6.mjs';
-import discoverStorageRulesMetadata from './discoverStorageRulesMetadata-CnHl2rXD.mjs';
+import discoverStorageRulesMetadata from './discoverStorageRulesMetadata-BqMhuEjo.mjs';
 import { e as enclosingExportName$2 } from './discover-ast-CT6BgBr4.mjs';
 import { discoverWorkflows } from './WORKFLOWS_FILENAME-Dtuzvluc.mjs';
-import { emitApp } from './emitApp-CzzrjVqH.mjs';
-import { buildOpenApiDocument, emitOpenApiModule } from './buildOpenApiDocument-B7mEdzA2.mjs';
-import { buildOpenRpcDocument, emitOpenRpcModule } from './OPENRPC_VERSION-7A2weq2u.mjs';
+import { emitApp } from './emitApp-DbMM8iHe.mjs';
+import { buildOpenApiDocument, emitOpenApiModule } from './buildOpenApiDocument-DCQSLuFc.mjs';
+import { buildOpenRpcDocument, emitOpenRpcModule } from './OPENRPC_VERSION-DvDChMhC.mjs';
 import { buildSchemaSnapshot, serializeSchemaSnapshot } from './SCHEMA_SNAPSHOT_VERSION-D0ARY6rL.mjs';
 
 const HTTP_VERBS$1 = /* @__PURE__ */ new Set(["delete", "get", "head", "options", "patch", "post", "put"]);
@@ -937,6 +938,62 @@ const discoverEnv = (project, lunoraDirectory) => {
   return environments[0];
 };
 
+const SINK_FACTORIES = /* @__PURE__ */ new Set(["defineExportSink", "r2Sink", "webhookExportSink"]);
+const sinkFactoryOf = (call) => {
+  const callee = call.getExpression();
+  if (!Node.isIdentifier(callee)) {
+    return void 0;
+  }
+  const name = callee.getText();
+  return SINK_FACTORIES.has(name) ? name : void 0;
+};
+const analyzeConfig = (literal) => {
+  const presentKeys = [];
+  const emptyKeys = [];
+  for (const property of literal.getProperties()) {
+    if (Node.isSpreadAssignment(property)) {
+      return { analyzable: false, emptyKeys: [], presentKeys: [] };
+    }
+    if (Node.isPropertyAssignment(property)) {
+      const key = property.getName();
+      presentKeys.push(key);
+      const initializer = property.getInitializer();
+      if (initializer && Node.isStringLiteral(initializer) && initializer.getLiteralText() === "") {
+        emptyKeys.push(key);
+      }
+      continue;
+    }
+    if (Node.isShorthandPropertyAssignment(property) || Node.isMethodDeclaration(property) || Node.isGetAccessorDeclaration(property)) {
+      presentKeys.push(property.getName());
+    }
+  }
+  return { analyzable: true, emptyKeys, presentKeys };
+};
+const discoverExportSinks = (project, lunoraDirectory) => {
+  const sinks = [];
+  for (const filePath of listLunoraSourceFiles(lunoraDirectory)) {
+    const sourceFile = project.getSourceFile(filePath) ?? project.addSourceFileAtPath(filePath);
+    const relativePath = lunoraRelativePath(lunoraDirectory, filePath);
+    for (const call of sourceFile.getDescendantsOfKind(SyntaxKind.CallExpression)) {
+      const factory = sinkFactoryOf(call);
+      if (factory === void 0) {
+        continue;
+      }
+      const argument = call.getArguments()[0];
+      const facts = argument && Node.isObjectLiteralExpression(argument) ? analyzeConfig(argument) : { analyzable: false, emptyKeys: [], presentKeys: [] };
+      sinks.push({
+        analyzable: facts.analyzable,
+        emptyKeys: facts.emptyKeys,
+        factory,
+        file: relativePath,
+        line: call.getStartLineNumber(),
+        presentKeys: facts.presentKeys
+      });
+    }
+  }
+  return sinks;
+};
+
 const OPTIONS_ARGUMENT_INDEX$1 = /* @__PURE__ */ new Map([
   ["dbRateLimit", 2],
   ["rateLimit", 2],
@@ -1046,7 +1103,7 @@ const buildStudioFeatures = (usage, signals) => {
     flags: usage.flags || signals.dependencies.has("@lunora/flags"),
     kv: usage.kv || signals.dependencies.has("@lunora/bindings/kv"),
     mail: usage.mail || signals.dependencies.has("@lunora/mail"),
-    payments: usage.payments || signals.dependencies.has("@lunora/payment"),
+    payments: usage.payments || signals.hasPaymentTables,
     queues: signals.queueCount > 0 || signals.dependencies.has("@lunora/queue"),
     scheduler: usage.scheduler || signals.cronCount > 0 || signals.dependencies.has("@lunora/scheduler"),
     storage: usage.storage || signals.storageRuleCount > 0 || signals.storageColumnCount > 0 || signals.dependencies.has("@lunora/storage"),
@@ -1106,6 +1163,29 @@ const discoverFlagSecurityDefaults = (project, lunoraDirectory) => {
   return flags;
 };
 
+const isWithGeoIndexCall = (call) => {
+  const callee = call.getExpression();
+  return Node.isPropertyAccessExpression(callee) && callee.getName() === "withGeoIndex";
+};
+const indexNameOf = (call) => {
+  const argument = call.getArguments()[0];
+  return argument && Node.isStringLiteral(argument) ? argument.getLiteralText() : "";
+};
+const discoverGeoIndexUsages = (project, lunoraDirectory) => {
+  const usages = [];
+  for (const filePath of listLunoraSourceFiles(lunoraDirectory)) {
+    const sourceFile = project.getSourceFile(filePath) ?? project.addSourceFileAtPath(filePath);
+    const relativePath = lunoraRelativePath(lunoraDirectory, filePath);
+    for (const call of sourceFile.getDescendantsOfKind(SyntaxKind.CallExpression)) {
+      if (!isWithGeoIndexCall(call)) {
+        continue;
+      }
+      usages.push({ file: relativePath, indexName: indexNameOf(call), line: call.getStartLineNumber() });
+    }
+  }
+  return usages;
+};
+
 const HTTP_VERBS = /* @__PURE__ */ new Set(["delete", "get", "head", "options", "patch", "post", "put"]);
 const TERMINAL_STEPS = /* @__PURE__ */ new Set(["handler", "stream"]);
 const RUN_SIDE_EFFECTS = /* @__PURE__ */ new Set(["runAction", "runMutation"]);
@@ -2233,6 +2313,7 @@ const discoverPrivilegedDispatches = (project, lunoraDirectory) => {
 
 const MIDDLEWARE_FLAGS = {
   dbRateLimit: "usesRateLimit",
+  emailGateMiddleware: "usesEmailGate",
   mask: "usesMask",
   rateLimit: "usesRateLimit",
   rls: "usesRls",
@@ -2268,7 +2349,7 @@ const resolveUseArgumentCall = (argument) => {
   const initializer = declaration?.getInitializer();
   return initializer && Node.isCallExpression(initializer) ? initializer : void 0;
 };
-const NO_PROTECTIONS = { usesCaptcha: false, usesMask: false, usesRateLimit: false, usesRls: false };
+const NO_PROTECTIONS = { usesCaptcha: false, usesEmailGate: false, usesMask: false, usesRateLimit: false, usesRls: false };
 const useStepProtections = (useArgument) => {
   const argument = resolveUseArgumentCall(useArgument);
   const name = argument ? calleeNameOf(argument) : void 0;
@@ -2293,6 +2374,7 @@ const protectionsInChain = (receiver) => {
     if (useArgument) {
       const step = useStepProtections(useArgument);
       protections.usesCaptcha ||= step.usesCaptcha;
+      protections.usesEmailGate ||= step.usesEmailGate;
       protections.usesMask ||= step.usesMask;
       protections.usesRateLimit ||= step.usesRateLimit;
       protections.usesRls ||= step.usesRls;
@@ -2397,7 +2479,7 @@ const middlewareIrFromDeclaration = (declaration, relativePath) => {
   if (!classified || classified.kind !== "query" && classified.kind !== "mutation" && classified.kind !== "action") {
     return void 0;
   }
-  const protections = classified.receiver ? protectionsInChain(classified.receiver) : { usesCaptcha: false, usesMask: false, usesRateLimit: false, usesRls: false };
+  const protections = classified.receiver ? protectionsInChain(classified.receiver) : { usesCaptcha: false, usesEmailGate: false, usesMask: false, usesRateLimit: false, usesRls: false };
   const { callsMail, fanOut, unboundedAiGeneration, usesInsertManyUnsafe, writesUserTable } = behaviourOf(declaration);
   return {
     callsMail,
@@ -2407,6 +2489,7 @@ const middlewareIrFromDeclaration = (declaration, relativePath) => {
     kind: classified.kind,
     unboundedAiGeneration,
     usesCaptcha: protections.usesCaptcha,
+    usesEmailGate: protections.usesEmailGate,
     usesInsertManyUnsafe,
     usesMask: protections.usesMask,
     usesRateLimit: protections.usesRateLimit,
@@ -3223,8 +3306,10 @@ const runCodegen = (options) => {
     containerKeyAccesses: discoverContainerKeyAccesses(project, lunoraDirectory),
     containerOverrides: discoverContainerOverrides(project, lunoraDirectory),
     containers,
+    exportSinks: discoverExportSinks(project, lunoraDirectory),
     failOpenGuards: discoverFailOpenGuards(project, lunoraDirectory),
     flagSecurityDefaults: discoverFlagSecurityDefaults(project, lunoraDirectory),
+    geoIndexUsages: discoverGeoIndexUsages(project, lunoraDirectory),
     httpActionGuards: discoverHttpActionGuards(project, lunoraDirectory),
     httpHeaderWrites: discoverHttpHeaderWrites(project, lunoraDirectory),
     identityClaimReads: discoverIdentityClaimReads(project, lunoraDirectory),
@@ -3237,6 +3322,8 @@ const runCodegen = (options) => {
     mutatorWrites: discoverMutatorWrites(project, lunoraDirectory),
     nondeterministicCalls: discoverNondeterministicCalls(project, lunoraDirectory),
     normalizeIdAuthorizations: discoverNormalizeIdAuthorization(project, lunoraDirectory),
+    notifyCalls: discoverNotifyCalls(project, lunoraDirectory),
+    notifyConfig: discoverNotifyConfig(project, lunoraDirectory),
     ownerFieldWrites: discoverOwnerFieldWrites(project, lunoraDirectory),
     paymentWebhooks: discoverPaymentWebhooks(project, lunoraDirectory),
     privilegedDispatches: discoverPrivilegedDispatches(project, lunoraDirectory),
@@ -3270,6 +3357,7 @@ const runCodegen = (options) => {
   const hasAccessFacade = featureUsage.access;
   const hasFlags = existsSync(join(lunoraDirectory, "flags.ts"));
   const flagKeys = hasFlags ? discoverFlagKeys(project, lunoraDirectory) : [];
+  const hasNotify = existsSync(join(lunoraDirectory, "notify.ts"));
   const hasHyperdrive = featureUsage.hyperdrive;
   const sandboxUsage = discoverSandboxUsage(project, lunoraDirectory);
   const usesSandbox = sandboxUsage.usesSandboxBrowser || sandboxUsage.usesSandboxContainer;
@@ -3284,6 +3372,10 @@ const runCodegen = (options) => {
     containerCount: containers.length,
     cronCount: crons.length,
     dependencies,
+    // Payments gates on the store tables the panel reads being declared, not on a
+    // bare `@lunora/payment` dependency (which may be present only to reuse the
+    // package's pure webhook helpers) — see the payment-tables signal set below.
+    hasPaymentTables: schema.tables.some((table) => table.name === "subscriptions") && schema.tables.some((table) => table.name === "events"),
     queueCount: queues.length,
     storageColumnCount: Object.keys(buildStorageColumns(schema)).length,
     storageRuleCount: storageRulesMetadata.rules.length,
@@ -3306,6 +3398,7 @@ const runCodegen = (options) => {
     hasHyperdrive,
     hasImages,
     hasKv,
+    hasNotify,
     hasPayments,
     hasPipelines,
     hasR2sql,
@@ -3332,6 +3425,7 @@ const runCodegen = (options) => {
     hasHyperdrive,
     hasImages,
     hasKv,
+    hasNotify,
     hasPayments,
     hasPipelines,
     hasR2sql,
@@ -3387,6 +3481,7 @@ const runCodegen = (options) => {
     // `@lunora/bindings/kv` dep), so a visible KV tab always has a working
     // backend — never the reverse. The `ctx.kv` type-seam stays usage-only.
     hasKv: studioFeatures.kv,
+    hasNotify,
     hasPayments,
     hasR2sql,
     hasQueue: queues.some((queue) => queue.mode === "push"),

package/dist/packem_shared/{buildOpenApiDocument-B7mEdzA2.mjs → buildOpenApiDocument-DCQSLuFc.mjs}

@@ -1,7 +1,24 @@
-import { G as GENERATED_HEADER } from './emit-ClTbCLy4.mjs';
+import { G as GENERATED_HEADER } from './emit-DIbr7U31.mjs';
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 import { LUNORA_ERROR_CODES, objectSchema, argsObjectSchema, validatorIrToJsonSchema } from './LUNORA_ERROR_CODES-DvTLozCu.mjs';
 
+const REST_PATH_PREFIX = "/_lunora/rest";
+const splitFunctionPath = (functionPath) => {
+  const colon = functionPath.indexOf(":");
+  if (colon <= 0 || colon >= functionPath.length - 1 || functionPath.indexOf(":", colon + 1) !== -1) {
+    return void 0;
+  }
+  return { name: functionPath.slice(colon + 1), namespace: functionPath.slice(0, colon) };
+};
+const restPathForFunction = (functionPath) => {
+  const parts = splitFunctionPath(functionPath);
+  if (parts === void 0) {
+    return void 0;
+  }
+  return `${REST_PATH_PREFIX}/${parts.namespace}/${parts.name}`;
+};
+const restMethodForKind = (kind) => kind === "query" ? "GET" : "POST";
+
 const ERROR_COMPONENT_REF = "#/components/responses/LunoraError";
 const ROUTE_PARAM_RE = /:([A-Za-z_$][\w$]*)/gu;
 const pathParameterNames = (path) => [...path.matchAll(ROUTE_PARAM_RE)].map((match) => match[1]);
@@ -111,6 +128,55 @@ const rpcOperation = (definition) => {
   };
   return { operation, pathKey: `/_lunora/rpc#${functionPath}` };
 };
+const restOperation = (definition) => {
+  const functionPath = `${sanitizeNamespace(definition.filePath)}:${definition.exportName}`;
+  const path = restPathForFunction(functionPath);
+  if (path === void 0) {
+    return void 0;
+  }
+  const tag = sanitizeNamespace(definition.filePath);
+  const method = restMethodForKind(definition.kind);
+  const isQuery = method === "GET";
+  const operation = {
+    description: `Public REST endpoint for the \`${definition.kind}\` \`${functionPath}\` (opt-in via \`.expose({ rest: true })\`). Routed through the procedure, so auth / RLS / validators are enforced.`,
+    operationId: `rest_${sanitizeNamespace(path)}`,
+    responses: {
+      "200": {
+        content: {
+          "application/json": {
+            schema: { description: "Procedure result. The shape is TS-inferred from the return type; best-effort — any JSON." }
+          }
+        },
+        description: "Successful result (TypeScript-inferred return shape, documented best-effort)."
+      },
+      default: { $ref: ERROR_COMPONENT_REF }
+    },
+    summary: `${method} ${path}`,
+    tags: [tag],
+    "x-lunora-function-kind": definition.kind
+  };
+  if (isQuery) {
+    const parameters = Object.entries(definition.args).map(([name, validator]) => {
+      const inner = validator.kind === "optional" ? validator.inner ?? validator : validator;
+      return {
+        description: `Argument \`${name}\` (JSON-encoded for non-string values).`,
+        in: "query",
+        name,
+        required: validator.kind !== "optional",
+        schema: validatorIrToJsonSchema(inner)
+      };
+    });
+    if (parameters.length > 0) {
+      operation.parameters = parameters;
+    }
+    return { method: "get", operation, path };
+  }
+  operation.requestBody = {
+    content: { "application/json": { schema: argsObjectSchema(definition.args) } },
+    required: Object.keys(definition.args).length > 0
+  };
+  return { method: "post", operation, path };
+};
 const buildOpenApiDocument = (input) => {
   const version = input.version ?? "0.0.0";
   const paths = {};
@@ -128,6 +194,19 @@ const buildOpenApiDocument = (input) => {
     paths[pathKey] = { post: operation };
     tagNames.add(sanitizeNamespace(definition.filePath));
   }
+  for (const definition of rpcFunctions) {
+    if (definition.expose?.rest !== true) {
+      continue;
+    }
+    const rest = restOperation(definition);
+    if (rest === void 0) {
+      continue;
+    }
+    const pathItem = paths[rest.path] ?? {};
+    pathItem[rest.method] = rest.operation;
+    paths[rest.path] = pathItem;
+    tagNames.add(sanitizeNamespace(definition.filePath));
+  }
   const tags = [...tagNames].toSorted((a, b) => a.localeCompare(b)).map((name) => {
     return { description: `Operations declared in \`lunora/${name}\`.`, name };
   });

package/dist/packem_shared/{discoverAuthApiCalls-Dx3K42rk.mjs → discoverAuthApiCalls-Dhwgf4J4.mjs}

@@ -1,7 +1,7 @@
 import { relative, sep } from 'node:path';
 import { SyntaxKind, Node } from 'ts-morph';
 import { T as TS_EXTENSION_RE, e as enclosingExportName } from './discover-ast-CT6BgBr4.mjs';
-import { listLunoraSourceFiles } from './discoverFunctions-BJ-qR7Rg.mjs';
+import { listLunoraSourceFiles } from './discoverFunctions-COG_Xkyz.mjs';
 
 const isAuthApiCall = (call) => {
   const callee = call.getExpression();

package/dist/packem_shared/{discoverCrons-DvqkEWdx.mjs → discoverCrons-UbQLLmMS.mjs}

@@ -2,7 +2,7 @@ import { LunoraError } from '@lunora/errors';
 import { isValidCronExpression, compileCronSchedule, CRON_SCHEDULE_KINDS } from '@lunora/scheduler';
 import { SyntaxKind, Node } from 'ts-morph';
 import { diagnosticAt } from './CodegenDiagnosticError-DyQ5FwkM.mjs';
-import { listLunoraSourceFiles } from './discoverFunctions-BJ-qR7Rg.mjs';
+import { listLunoraSourceFiles } from './discoverFunctions-COG_Xkyz.mjs';
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 
 const CRON_METHODS = /* @__PURE__ */ new Set([...CRON_SCHEDULE_KINDS, "cron"]);

package/dist/packem_shared/{discoverFunctions-BJ-qR7Rg.mjs → discoverFunctions-COG_Xkyz.mjs}

@@ -1,7 +1,7 @@
 import { readdirSync, lstatSync } from 'node:fs';
 import { join, extname, relative, sep } from 'node:path';
 import { Node, SyntaxKind } from 'ts-morph';
-import { a as parseObjectShape } from './parse-validator-BSJo1HGP.mjs';
+import { a as parseObjectShape } from './parse-validator-BDGV8iue.mjs';
 import { s as sanitizeNamespace } from './paths-BRd6JHuF.mjs';
 
 const FUNCTION_KINDS = /* @__PURE__ */ new Set(["action", "mutation", "query", "stream"]);
@@ -70,6 +70,29 @@ const resolveBuilderRootKind = (receiver, followedLocal = false) => {
   }
   return INTERNAL_FACTORIES[rootName] ? "internal" : void 0;
 };
+const exposeFromBuilderChain = (receiver) => {
+  let current = receiver;
+  while (Node.isCallExpression(current)) {
+    const inner = current.getExpression();
+    if (!Node.isPropertyAccessExpression(inner)) {
+      return void 0;
+    }
+    if (inner.getName() === "expose") {
+      const argument = current.getArguments()[0];
+      if (argument !== void 0 && Node.isObjectLiteralExpression(argument)) {
+        const restProperty = argument.getProperty("rest");
+        if (restProperty !== void 0 && Node.isPropertyAssignment(restProperty)) {
+          const initializer = restProperty.getInitializer();
+          const rest = initializer?.getText() === "true";
+          return { rest };
+        }
+      }
+      return {};
+    }
+    current = inner.getExpression();
+  }
+  return void 0;
+};
 const argsFromCall = (call) => {
   const first = call.getArguments()[0];
   if (!first || !Node.isObjectLiteralExpression(first)) {
@@ -387,8 +410,10 @@ const discoverFromCall = (call) => {
     return void 0;
   }
   if (classified.receiver) {
+    const expose = exposeFromBuilderChain(classified.receiver);
     return {
       args: argsFromBuilderChain(classified.receiver),
+      ...expose ? { expose } : {},
       kind: classified.kind,
       returnType: returnTypeFromBuilderCall(call),
       visibility: classified.visibility
@@ -466,6 +491,7 @@ const functionIrFromCall = (call, exportName, relativePath) => {
     kind: discovered.kind,
     returnType: discovered.returnType,
     visibility: discovered.visibility,
+    ...discovered.expose ? { expose: discovered.expose } : {},
     ...discovered.lifecycle ? { lifecycle: discovered.lifecycle } : {}
   };
 };

package/dist/packem_shared/{discoverHttpRoutes-daCzuTe8.mjs → discoverHttpRoutes-CVXWZkzo.mjs}

@@ -1,7 +1,7 @@
 import { relative, sep } from 'node:path';
 import { Node } from 'ts-morph';
-import { listLunoraSourceFiles, unwrapHandlerReturn } from './discoverFunctions-BJ-qR7Rg.mjs';
-import { p as parseValidator, a as parseObjectShape } from './parse-validator-BSJo1HGP.mjs';
+import { listLunoraSourceFiles, unwrapHandlerReturn } from './discoverFunctions-COG_Xkyz.mjs';
+import { p as parseValidator, a as parseObjectShape } from './parse-validator-BDGV8iue.mjs';
 
 const TS_EXTENSION_RE = /\.ts$/u;
 const HTTP_VERBS = /* @__PURE__ */ new Set(["delete", "get", "head", "options", "patch", "post", "put"]);

package/dist/packem_shared/{discoverInserts-DI4q5NxE.mjs → discoverInserts-DdWnXmLS.mjs}

@@ -1,6 +1,6 @@
 import { SyntaxKind, Node } from 'ts-morph';
 import { e as enclosingExportName } from './discover-ast-CT6BgBr4.mjs';
-import { listLunoraSourceFiles, lunoraRelativePath } from './discoverFunctions-BJ-qR7Rg.mjs';
+import { listLunoraSourceFiles, lunoraRelativePath } from './discoverFunctions-COG_Xkyz.mjs';
 
 const isDatabaseInsertCall = (call) => {
   const callee = call.getExpression();

package/dist/packem_shared/{discoverMaskProcedures-BcTOEKNU.mjs → discoverMaskProcedures-BG58_fw3.mjs}

@@ -1,5 +1,5 @@
 import { Node, SyntaxKind } from 'ts-morph';
-import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall } from './discoverFunctions-BJ-qR7Rg.mjs';
+import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall } from './discoverFunctions-COG_Xkyz.mjs';
 
 const isMaskCall = (node) => {
   if (!Node.isCallExpression(node)) {

package/dist/packem_shared/{discoverMigrations-VNUFvCwr.mjs → discoverMigrations-Bw1U01zr.mjs}

@@ -1,7 +1,7 @@
 import { relative, sep } from 'node:path';
 import { SyntaxKind, Node } from 'ts-morph';
 import { diagnosticAt } from './CodegenDiagnosticError-DyQ5FwkM.mjs';
-import { listLunoraSourceFiles } from './discoverFunctions-BJ-qR7Rg.mjs';
+import { listLunoraSourceFiles } from './discoverFunctions-COG_Xkyz.mjs';
 
 const TS_EXTENSION_RE = /\.ts$/u;
 const isDefineMigration = (identifier) => {

package/dist/packem_shared/{discoverNondeterministicCalls-S0N2xLCq.mjs → discoverNondeterministicCalls-BbXEFZUT.mjs}

@@ -1,5 +1,5 @@
 import { Node, SyntaxKind } from 'ts-morph';
-import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall } from './discoverFunctions-BJ-qR7Rg.mjs';
+import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall } from './discoverFunctions-COG_Xkyz.mjs';
 
 const PROPERTY_CALLS = {
   "crypto.getRandomValues": "crypto.getRandomValues",

package/dist/packem_shared/{discoverQueries-CJnnnLpd.mjs → discoverQueries-CDmxu2ET.mjs}

@@ -1,5 +1,5 @@
 import { SyntaxKind, Node } from 'ts-morph';
-import { listLunoraSourceFiles, lunoraRelativePath } from './discoverFunctions-BJ-qR7Rg.mjs';
+import { listLunoraSourceFiles, lunoraRelativePath } from './discoverFunctions-COG_Xkyz.mjs';
 
 const INDEX_METHODS = /* @__PURE__ */ new Set(["withIndex", "withSearchIndex"]);
 const isDatabaseQueryCall = (call) => {

package/dist/packem_shared/{discoverR2sqlCalls-pnpicWfz.mjs → discoverR2sqlCalls-Bn7QVv7J.mjs}

@@ -1,5 +1,5 @@
 import { Node, SyntaxKind } from 'ts-morph';
-import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall } from './discoverFunctions-BJ-qR7Rg.mjs';
+import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall } from './discoverFunctions-COG_Xkyz.mjs';
 
 const handlerOf = (call, receiver) => {
   if (receiver) {

package/dist/packem_shared/{discoverRlsMetadata-DppniPUH.mjs → discoverRlsMetadata-D9uN35no.mjs}

@@ -1,5 +1,5 @@
 import { Node, SyntaxKind } from 'ts-morph';
-import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall } from './discoverFunctions-BJ-qR7Rg.mjs';
+import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall } from './discoverFunctions-COG_Xkyz.mjs';
 
 const isRlsCall = (node) => {
   if (!Node.isCallExpression(node)) {

package/dist/packem_shared/{discoverSandboxUsage-BUM2r90k.mjs → discoverSandboxUsage-B5jDU6Bt.mjs}

@@ -1,4 +1,4 @@
-import { listLunoraSourceFiles } from './discoverFunctions-BJ-qR7Rg.mjs';
+import { listLunoraSourceFiles } from './discoverFunctions-COG_Xkyz.mjs';
 
 const SANDBOX_MODULE_SPECIFIERS = /* @__PURE__ */ new Set(["@lunora/agent", "@lunora/agent/sandbox"]);
 const scanImportDeclaration = (declaration) => {

package/dist/packem_shared/{discoverSchema-BaSAvooG.mjs → discoverSchema-BJp5_T4o.mjs}

@@ -1,7 +1,7 @@
 import { LunoraError } from '@lunora/errors';
 import { Node, SyntaxKind } from 'ts-morph';
 import { diagnosticAt } from './CodegenDiagnosticError-DyQ5FwkM.mjs';
-import { a as parseObjectShape } from './parse-validator-BSJo1HGP.mjs';
+import { a as parseObjectShape } from './parse-validator-BDGV8iue.mjs';
 import { createRequire } from 'node:module';
 import { join } from 'node:path';
 
@@ -109,6 +109,7 @@ const runtimeTableToIR = (builder, bareName) => {
   warnDroppedTableFeatures(builder, bareName);
   return {
     ...builder.isExternallyManaged ? { externallyManaged: true } : {},
+    geoIndexes: [],
     indexes,
     name: bareName,
     rankIndexes: [],
@@ -334,6 +335,25 @@ const parseSearchIndexCall = (args) => {
   }
   return { field, filterFields, name: indexNameOf(indexName) };
 };
+const parseGeoIndexCall = (args) => {
+  const [indexName, optionsExpression] = args;
+  let field = "_unknown_";
+  let precision;
+  if (optionsExpression && Node.isObjectLiteralExpression(optionsExpression)) {
+    field = getStringProperty(optionsExpression, "field") ?? field;
+    precision = getNumberProperty(optionsExpression, "precision");
+  }
+  return { field, name: indexNameOf(indexName), precision };
+};
+const parseTtlCall = (args) => {
+  const [fieldArgument, optionsExpression] = args;
+  const field = fieldArgument && Node.isStringLiteral(fieldArgument) ? fieldArgument.getLiteralText() : "_unknown_";
+  let after;
+  if (optionsExpression && Node.isObjectLiteralExpression(optionsExpression)) {
+    after = getNumberProperty(optionsExpression, "after");
+  }
+  return { after, field };
+};
 const rankSortKeyFromElement = (element) => {
   if (!Node.isObjectLiteralExpression(element)) {
     return void 0;
@@ -441,6 +461,10 @@ const applyTableMethod = (accumulator, method, args, name) => {
       accumulator.externallyManaged = true;
       break;
     }
+    case "geoIndex": {
+      accumulator.geoIndexes.push(parseGeoIndexCall(args));
+      break;
+    }
     case "global": {
       accumulator.shardMode = "global";
       accumulator.globalBackend = parseGlobalBackend(args);
@@ -483,6 +507,10 @@ const applyTableMethod = (accumulator, method, args, name) => {
       accumulator.externallyManaged = true;
       break;
     }
+    case "ttl": {
+      accumulator.ttl = parseTtlCall(args);
+      break;
+    }
     case "vectorize": {
       const vectorIndex = parseVectorizeCall(args, name);
       if (vectorIndex) {
@@ -495,6 +523,7 @@ const applyTableMethod = (accumulator, method, args, name) => {
 const parseTableBuilder = (expression, name) => {
   const accumulator = {
     externallyManaged: false,
+    geoIndexes: [],
     indexes: [],
     isPublic: false,
     rankIndexes: [],
@@ -527,6 +556,7 @@ const parseTableBuilder = (expression, name) => {
   return {
     externallyManaged: accumulator.externallyManaged,
     externalSource: accumulator.externalSource,
+    geoIndexes: accumulator.geoIndexes,
     globalBackend: accumulator.shardMode === "global" ? accumulator.globalBackend ?? "d1" : void 0,
     indexes: accumulator.indexes,
     isPublic: accumulator.isPublic,
@@ -537,6 +567,7 @@ const parseTableBuilder = (expression, name) => {
     shape,
     shardMode: accumulator.shardMode,
     softDelete: accumulator.softDelete,
+    ttl: accumulator.ttl,
     vectorIndexes: accumulator.vectorIndexes
   };
 };

package/dist/packem_shared/{discoverStorageRulesMetadata-CnHl2rXD.mjs → discoverStorageRulesMetadata-BqMhuEjo.mjs}

@@ -1,5 +1,5 @@
 import { Node } from 'ts-morph';
-import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall } from './discoverFunctions-BJ-qR7Rg.mjs';
+import { listLunoraSourceFiles, lunoraRelativePath, classifyProcedureCall } from './discoverFunctions-COG_Xkyz.mjs';
 
 const STORAGE_OPERATIONS = /* @__PURE__ */ new Set(["delete", "list", "read", "write"]);
 const isStorageRulesCall = (node) => {