@lunora/config 1.0.0-alpha.13 → 1.0.0-alpha.131

package/dist/studio-host/index.d.ts

@@ -1,14 +1,20 @@
-import { D as DestructivePolicyEdit, S as ScaffoldPolicyEdit, W as WireRlsEdit } from "../packem_shared/policy-scaffold.d-DCmwn7zQ.js";
+import { D as DestructivePolicyEdit, S as ScaffoldPolicyEdit, W as WireRlsEdit } from "../packem_shared/policy-scaffold.d-fV3db0S_.js";
 import { IncomingMessage, ServerResponse } from 'node:http';
-/** Parse a single `KEY=value` (optionally quoted) out of a `.dev.vars` body. */
+/**
+ * Parse a single `KEY=value` (optionally quoted) out of a `.dev.vars` body,
+ * returning `undefined` when the key is absent or its value is empty. A thin
+ * wrapper over {@link parseDevVariableEntries} — the single owner of the
+ * `.dev.vars` line grammar — so the key-validation, comment-skip, and quote-strip
+ * rules can't drift from every other reader/writer of the file.
+ */
 declare const parseDevVariable: (contents: string, key: string) => string | undefined;
 /**
-* Resolve the worker's admin token so the studio can auto-authenticate in
-* dev. Prefers the `LUNORA_ADMIN_TOKEN` env var, then the project's `.dev.vars`
-* — the same file `@cloudflare/vite-plugin` / `wrangler dev` feed the worker, so
-* the token the studio sends matches the one the worker's admin gate
-* verifies. Returns `undefined` when neither is set (the studio then prompts).
-*/
+ * Resolve the worker's admin token so the studio can auto-authenticate in
+ * dev. Prefers the `LUNORA_ADMIN_TOKEN` env var, then the project's `.dev.vars`
+ * — the same file `@cloudflare/vite-plugin` / `wrangler dev` feed the worker, so
+ * the token the studio sends matches the one the worker's admin gate
+ * verifies. Returns `undefined` when neither is set (the studio then prompts).
+ */
 declare const resolveAdminToken: (root: string) => string | undefined;
 /** Config injected into the studio document before the bundle loads. */
 interface StudioHtmlConfig {
@@ -17,34 +23,34 @@ interface StudioHtmlConfig {
   /** Router basepath the studio mounts under (e.g. `/__lunora`, or `/` for a root server). */
   readonly basePath: string;
   /**
-  * Make the data browser editable (insert/edit/delete rows). Injected as
-  * `window.__LUNORA_DATA_EDITABLE__` for the bundle to read. The loopback-only
-  * dev hosts (the Vite `/__lunora` route, the CLI studio server) set this so a
-  * developer can edit; a static deploy leaves it off (read-only) by default.
-  */
+   * Make the data browser editable (insert/edit/delete rows). Injected as
+   * `window.__LUNORA_DATA_EDITABLE__` for the bundle to read. The loopback-only
+   * dev hosts (the Vite `/__lunora` route, the CLI studio server) set this so a
+   * developer can edit; a static deploy leaves it off (read-only) by default.
+   */
   readonly dataEditable?: boolean;
   /**
-  * Whether the project's Lunora agent skills ("rules") are installed. Injected
-  * as `window.__LUNORA_RULES_INSTALLED__` **only when `false`**, so the studio
-  * shows a "rules not installed" banner on the loopback dev hosts (which detect
-  * it) and stays quiet on a static deploy (which leaves it unset).
-  */
+   * Whether the project's Lunora agent skills ("rules") are installed. Injected
+   * as `window.__LUNORA_RULES_INSTALLED__` **only when `false`**, so the studio
+   * shows a "rules not installed" banner on the loopback dev hosts (which detect
+   * it) and stays quiet on a static deploy (which leaves it unset).
+   */
   readonly rulesInstalled?: boolean;
   /**
-  * Enable the function runner's "Run as identity" tool (execute a function as a
-  * chosen user to test auth/RLS). Injected as `window.__LUNORA_RUN_AS_IDENTITY__`.
-  * Like {@link StudioHtmlConfig.dataEditable}, only the loopback-only dev hosts set
-  * this — forging an identity is a developer-only affordance; a static deploy
-  * leaves it off so the control never renders.
-  */
+   * Enable the function runner's "Run as identity" tool (execute a function as a
+   * chosen user to test auth/RLS). Injected as `window.__LUNORA_RUN_AS_IDENTITY__`.
+   * Like {@link StudioHtmlConfig.dataEditable}, only the loopback-only dev hosts set
+   * this — forging an identity is a developer-only affordance; a static deploy
+   * leaves it off so the control never renders.
+   */
   readonly runAsIdentity?: boolean;
   /**
-  * Enable the visual schema editor (add table / column / index, written back to
-  * `lunora/schema.ts` + codegen). Injected as `window.__LUNORA_SCHEMA_EDITABLE__`.
-  * Like {@link StudioHtmlConfig.dataEditable}, only the loopback-only dev hosts
-  * set this — editing source + running codegen needs the project's filesystem and
-  * toolchain, so a static deploy leaves it off and the diagram stays read-only.
-  */
+   * Enable the visual schema editor (add table / column / index, written back to
+   * `lunora/schema.ts` + codegen). Injected as `window.__LUNORA_SCHEMA_EDITABLE__`.
+   * Like {@link StudioHtmlConfig.dataEditable}, only the loopback-only dev hosts
+   * set this — editing source + running codegen needs the project's filesystem and
+   * toolchain, so a static deploy leaves it off and the diagram stays read-only.
+   */
   readonly schemaEditable?: boolean;
   /** URL the studio bundle is served from (absolute, host-relative). */
   readonly scriptSrc: string;
@@ -61,30 +67,62 @@ interface StudioAssets {
   readonly styles: Buffer;
 }
 /**
-* Read the prebuilt static studio files shipped by `@lunora/studio`
-* (`dist/standalone/studio.js` + `dist/styles.css`). Returns `undefined` —
-* with a one-time warning — when the optional package isn't installed or hasn't
-* been built, so a missing studio never breaks the dev server.
-*
-* `resolveFrom` controls where `@lunora/studio` is resolved from. It defaults
-* to this module's own location, which is correct once this code is inlined into
-* a host package (`@lunora/vite` / `@lunora/cli`) that has `@lunora/studio`
-* installed — node walks up from the host's `dist` to find it.
-*/
+ * Read the prebuilt static studio files shipped by `@lunora/studio`
+ * (`dist/standalone/studio.js` + `dist/styles.css`). Returns `undefined` —
+ * with a one-time warning — when the optional package isn't installed or hasn't
+ * been built, so a missing studio never breaks the dev server.
+ *
+ * `resolveFrom` controls where `@lunora/studio` is resolved from. It defaults
+ * to this module's own location, which is correct once this code is inlined into
+ * a host package (`@lunora/vite` / `@lunora/cli`) that has `@lunora/studio`
+ * installed — node walks up from the host's `dist` to find it.
+ */
 declare const loadStudioAssets: (logger?: WarnLogger, resolveFrom?: string) => StudioAssets | undefined;
 /**
-* A freshness stamp for the studio assets: the latest mtime (ms) of the resolved
-* `studio.js` / `styles.css`, or `undefined` when they can't be resolved. Hosts
-* cache {@link loadStudioAssets} for the dev session but compare this stamp per
-* request, so a `@lunora/studio` rebuild mid-session is picked up live — no dev
-* server restart needed.
-*/
+ * A freshness stamp for the studio assets: the latest mtime (ms) of the resolved
+ * `studio.js` / `styles.css`, or `undefined` when they can't be resolved. Hosts
+ * cache {@link loadStudioAssets} for the dev session but compare this stamp per
+ * request, so a `@lunora/studio` rebuild mid-session is picked up live — no dev
+ * server restart needed.
+ */
 declare const studioAssetsStamp: (resolveFrom?: string) => number | undefined;
 /**
-* Endpoint path both dev hosts mount the handler at. A sibling of the schema
-* editor's `/__lunora/schema-edit`; the double underscore keeps it clear of the
-* CLI's `/_lunora/*` worker proxy (single underscore).
-*/
+ * Absolute path of the built standalone directory — `@lunora/studio`'s
+ * `dist/standalone`, where the `studio.js` entry and its code-split `chunk-*.js`
+ * siblings live — or `undefined` when the studio isn't installed/built. The
+ * standalone bundle is emitted with esbuild `splitting`, so the hosts must serve
+ * the whole directory (not two fixed paths); this resolves its root.
+ */
+declare const resolveStandaloneDirectory: (resolveFrom?: string) => string | undefined;
+/**
+ * Read a single file from the standalone directory by its plain filename (the
+ * `studio.js` entry, a `chunk-*.js`, or a `.map`). **Path-traversal-safe** via
+ * {@link resolveContainedFile}: only a lone filename resolving to a direct child
+ * of the standalone directory is served — any separator, `..`, NUL, or absolute
+ * path is rejected — so a request like `../../etc/passwd` can never escape it.
+ * Returns the bytes, or `undefined` when the studio isn't built or the name
+ * doesn't resolve to a file inside the directory (the host answers that 404).
+ */
+declare const readStandaloneAsset: (fileName: string, resolveFrom?: string) => Buffer | undefined;
+/**
+ * True when `pathname` addresses a standalone JS module — the `studio.js` entry
+ * or one of its code-split `chunk-*.js` siblings (and their `.map`s). Shared by
+ * the CLI and Vite hosts so both route the same request shapes to the directory
+ * server; the stylesheet is matched separately at each host's own style path.
+ */
+declare const isStandaloneModulePath: (pathname: string) => boolean;
+/**
+ * Content-Type for a served standalone asset, by extension: `.css` → CSS,
+ * `.map` → JSON (a source map), everything else (the `.js` entry + chunks) →
+ * JavaScript. Shared by the CLI and Vite hosts so the MIME decision lives in one
+ * place.
+ */
+declare const assetContentType: (fileName: string) => string;
+/**
+ * Endpoint path both dev hosts mount the handler at. A sibling of the schema
+ * editor's `/__lunora/schema-edit`; the double underscore keeps it clear of the
+ * CLI's `/_lunora/*` worker proxy (single underscore).
+ */
 declare const POLICY_SCAFFOLD_ENDPOINT = "/__lunora/policy-scaffold";
 /** A `wireRls` request additionally carries the procedure's source-file path. */
 interface WirePolicyEdit extends WireRlsEdit {
@@ -110,26 +148,26 @@ interface PolicyScaffoldResponse {
   readonly status: number;
 }
 /**
-* Handle a policy-scaffold request. Pure over its inputs apart from the file
-* I/O + codegen it performs on an applied edit; safe to unit-test against a
-* temp project directory.
-*/
+ * Handle a policy-scaffold request. Pure over its inputs apart from the file
+ * I/O + codegen it performs on an applied edit; safe to unit-test against a
+ * temp project directory.
+ */
 declare const handlePolicyScaffoldRequest: (request: PolicyScaffoldRequest) => PolicyScaffoldResponse;
 /**
-* Render the single-page document that boots the studio. Emitted verbatim —
-* never through a bundler/transform — so the studio stays a static tool,
-* decoupled from the host project's build. A small inline script publishes the
-* per-server config on `globalThis` before the bundle loads: the mount basepath
-* (so the router stays under its mount), the admin token when present (so the
-* studio auto-authenticates instead of prompting), and an editable flag when the
-* host is a loopback dev server (so the data browser allows edits).
-*/
+ * Render the single-page document that boots the studio. Emitted verbatim —
+ * never through a bundler/transform — so the studio stays a static tool,
+ * decoupled from the host project's build. A small inline script publishes the
+ * per-server config on `globalThis` before the bundle loads: the mount basepath
+ * (so the router stays under its mount), the admin token when present (so the
+ * studio auto-authenticates instead of prompting), and an editable flag when the
+ * host is a loopback dev server (so the data browser allows edits).
+ */
 declare const renderStudioHtml: (config: StudioHtmlConfig) => string;
 /**
-* Endpoint path both dev hosts mount the handler at. Distinct from the CLI's
-* `/_lunora/*` worker proxy (single underscore), so a schema edit is never
-* forwarded to the worker.
-*/
+ * Endpoint path both dev hosts mount the handler at. Distinct from the CLI's
+ * `/_lunora/*` worker proxy (single underscore), so a schema edit is never
+ * forwarded to the worker.
+ */
 declare const SCHEMA_EDIT_ENDPOINT = "/__lunora/schema-edit";
 /** A request adapted from the host transport. */
 interface SchemaEditRequest {
@@ -148,28 +186,28 @@ interface SchemaEditResponse {
   readonly status: number;
 }
 /**
-* Handle a schema-edit request. Pure over its inputs apart from the file I/O +
-* codegen it performs on a `POST` additive edit; safe to unit-test against a
-* temp project directory.
-*/
+ * Handle a schema-edit request. Pure over its inputs apart from the file I/O +
+ * codegen it performs on a `POST` additive edit; safe to unit-test against a
+ * temp project directory.
+ */
 declare const handleSchemaEditRequest: (request: SchemaEditRequest) => SchemaEditResponse;
 /**
-* Endpoint path both dev hosts mount the handler at. A sibling of the schema
-* editor's `/__lunora/schema-edit`; the double underscore keeps it clear of the
-* CLI's `/_lunora/*` worker proxy (single underscore).
-*/
+ * Endpoint path both dev hosts mount the handler at. A sibling of the schema
+ * editor's `/__lunora/schema-edit`; the double underscore keeps it clear of the
+ * CLI's `/_lunora/*` worker proxy (single underscore).
+ */
 declare const SEED_ENDPOINT = "/__lunora/seed";
 /** Body the host transport adapts from a `POST` — one generate-rows request. */
 interface SeedRequestBody {
   /** How many rows to generate (clamped to `[1, MAX_SEED_ROWS]`). */
   readonly count?: number;
   /**
-  * Ids of rows that already exist in the live DB, keyed by referenced table.
-  * Foreign keys resolve against these, and every referenced parent table
-  * present here is treated as covered — so the generator links to existing
-  * rows instead of fabricating new parent rows. The studio samples these from
-  * the target table's FK columns before calling.
-  */
+   * Ids of rows that already exist in the live DB, keyed by referenced table.
+   * Foreign keys resolve against these, and every referenced parent table
+   * present here is treated as covered — so the generator links to existing
+   * rows instead of fabricating new parent rows. The studio samples these from
+   * the target table's FK columns before calling.
+   */
   readonly existingIds?: Readonly<Record<string, ReadonlyArray<string>>>;
   /** Deterministic mapping selector — same value yields identical rows. */
   readonly seed?: number;
@@ -193,10 +231,10 @@ interface SeedResponse {
   readonly status: number;
 }
 /**
-* Handle a generate-rows request: statically lift the schema, generate `count`
-* rows for `table` (linking foreign keys to the supplied existing ids rather
-* than fabricating parents), and return them JSON-safe for the client to insert.
-*/
+ * Handle a generate-rows request: statically lift the schema, generate `count`
+ * rows for `table` (linking foreign keys to the supplied existing ids rather
+ * than fabricating parents), and return them JSON-safe for the client to insert.
+ */
 declare const handleSeedRequest: (request: SeedRequest) => SeedResponse;
 /** A request adapted from a host transport, passed to a local-dev handler. */
 interface LocalEndpointRequest {
@@ -217,11 +255,47 @@ interface LocalEndpointResponse {
 /** A transport-agnostic local-dev handler (schema edit, policy scaffold). */
 type LocalEndpointHandler = (request: LocalEndpointRequest) => LocalEndpointResponse;
 /**
-* Adapt a `node:http` request/response pair to a transport-agnostic local-dev
-* handler. `GET` carries no body (the schema editor uses it to read the parsed
-* schema); every other method has its body read + JSON-parsed first. The
-* handler's `{ status, body }` is serialised back as JSON. A malformed body is a
-* `400`; an unexpected throw (e.g. the body-size guard) is a `500`.
-*/
-declare const serveJsonHandler: (request: IncomingMessage, response: ServerResponse, handle: LocalEndpointHandler, projectRoot: string) => void;
-export { type LocalEndpointHandler, type LocalEndpointRequest, type LocalEndpointResponse, POLICY_SCAFFOLD_ENDPOINT, type PolicyScaffoldBody, type PolicyScaffoldRequest, type PolicyScaffoldResponse, SCHEMA_EDIT_ENDPOINT, SEED_ENDPOINT, type SchemaEditRequest, type SchemaEditResponse, type SeedRequest, type SeedRequestBody, type SeedResponse, type StudioAssets, type StudioHtmlConfig, type WarnLogger, type WirePolicyEdit, handlePolicyScaffoldRequest, handleSchemaEditRequest, handleSeedRequest, loadStudioAssets, parseDevVariable, renderStudioHtml, resolveAdminToken, serveJsonHandler, studioAssetsStamp };
+ * Adapt a `node:http` request/response pair to a transport-agnostic local-dev
+ * handler. `GET` carries no body (the schema editor uses it to read the parsed
+ * schema); every other method has its body read + JSON-parsed first. The
+ * handler's `{ status, body }` is serialised back as JSON. A malformed body is a
+ * `400`; an unexpected throw (e.g. the body-size guard) is a `500`.
+ *
+ * `schemaDirectory` (when the host configures a custom `schemaDir`) is forwarded
+ * to the handler so the schema/seed/policy endpoints target the right directory
+ * instead of always defaulting to `"lunora"`.
+ */
+declare const serveJsonHandler: (request: IncomingMessage, response: ServerResponse, handle: LocalEndpointHandler, projectRoot: string, schemaDirectory?: string) => void;
+/** A single header value, lower-cased and trimmed; `undefined` when absent or array-valued. */
+declare const headerValue: (raw: string | string[] | undefined) => string | undefined;
+/**
+ * True for an IPv4/IPv6 loopback peer (`127.0.0.0/8`, `::1`, and the
+ * IPv4-mapped `::ffff:127.x`). A missing address means we cannot read the
+ * transport (e.g. a mocked request in tests) — treated as loopback so the
+ * config-derived gate stays the source of truth there; on a real Vite/Node
+ * server `remoteAddress` is always populated.
+ */
+declare const isLoopbackAddress: (remoteAddress: string | undefined) => boolean;
+/**
+ * Explicit opt-out for the forwarding-header refusal below — set to `"1"` to
+ * allow a proxied request through once you've confirmed the forwarding is
+ * your own trusted dev tunnel (Codespaces, devcontainers, Gitpod, Cloud
+ * Workstations, ngrok, a Docker reverse proxy, …), not an attacker's relay.
+ * Does not relax the socket-peer or `Host` checks — only this one.
+ */
+declare const ALLOW_FORWARDED_ENV = "LUNORA_STUDIO_ALLOW_FORWARDED";
+/**
+ * Per-request transport gate, independent of a host's config-derived bind
+ * intent (e.g. Vite's `isNonLoopbackBind`, the CLI's `isLoopback`). In Vite
+ * middleware mode the real bind belongs to the embedding server (so the
+ * config check measures the wrong thing); here we read the actual socket peer
+ * and the `Host` header. Returns a refusal reason, or `undefined` when the
+ * connection is loopback-local.
+ *
+ * `logger`, when supplied, gets a `warnOnce` line for a forwarding-header
+ * refusal — naming the specific header seen and the {@link ALLOW_FORWARDED_ENV}
+ * escape hatch — so the failure points at its cause in the terminal running
+ * the dev server, not just as an opaque 403 in the browser.
+ */
+declare const transportRejectionReason: (request: IncomingMessage, logger?: WarnLogger) => string | undefined;
+export { ALLOW_FORWARDED_ENV, type LocalEndpointHandler, type LocalEndpointRequest, type LocalEndpointResponse, POLICY_SCAFFOLD_ENDPOINT, type PolicyScaffoldBody, type PolicyScaffoldRequest, type PolicyScaffoldResponse, SCHEMA_EDIT_ENDPOINT, SEED_ENDPOINT, type SchemaEditRequest, type SchemaEditResponse, type SeedRequest, type SeedRequestBody, type SeedResponse, type StudioAssets, type StudioHtmlConfig, type WarnLogger, type WirePolicyEdit, assetContentType, handlePolicyScaffoldRequest, handleSchemaEditRequest, handleSeedRequest, headerValue, isLoopbackAddress, isStandaloneModulePath, loadStudioAssets, parseDevVariable, readStandaloneAsset, renderStudioHtml, resolveAdminToken, resolveStandaloneDirectory, serveJsonHandler, studioAssetsStamp, transportRejectionReason };

package/dist/studio-host/index.mjs

@@ -1,7 +1 @@
-export { parseDevVariable, resolveAdminToken } from '../packem_shared/parseDevVariable-CJiq2IwE.mjs';
-export { default as loadStudioAssets, studioAssetsStamp } from '../packem_shared/loadStudioAssets-Csk5RS4E.mjs';
-export { POLICY_SCAFFOLD_ENDPOINT, handlePolicyScaffoldRequest } from '../packem_shared/POLICY_SCAFFOLD_ENDPOINT-CiC2IGKx.mjs';
-export { default as renderStudioHtml } from '../packem_shared/renderStudioHtml-449Ysn75.mjs';
-export { SCHEMA_EDIT_ENDPOINT, handleSchemaEditRequest } from '../packem_shared/SCHEMA_EDIT_ENDPOINT-Df-Wrix-.mjs';
-export { SEED_ENDPOINT, handleSeedRequest } from '../packem_shared/SEED_ENDPOINT-DVCjaGO-.mjs';
-export { serveJsonHandler } from '../packem_shared/serveJsonHandler-B4OLTGLS.mjs';
+import{parseDevVariable as t,resolveAdminToken as r}from"../packem_shared/parseDevVariable-B193_28t.mjs";import{assetContentType as s,isStandaloneModulePath as d,loadStudioAssets as n,readStandaloneAsset as l,resolveStandaloneDirectory as p,studioAssetsStamp as m}from"../packem_shared/assetContentType-DNZyUOuF.mjs";import{POLICY_SCAFFOLD_ENDPOINT as f,handlePolicyScaffoldRequest as i}from"../packem_shared/POLICY_SCAFFOLD_ENDPOINT-CUYWD0Mh.mjs";import{default as E}from"../packem_shared/renderStudioHtml-B2AkxcW1.mjs";import{SCHEMA_EDIT_ENDPOINT as A,handleSchemaEditRequest as x}from"../packem_shared/SCHEMA_EDIT_ENDPOINT-BNB1ogaj.mjs";import{SEED_ENDPOINT as O,handleSeedRequest as R}from"../packem_shared/SEED_ENDPOINT-BaYShU8q.mjs";import{serveJsonHandler as c}from"../packem_shared/serveJsonHandler-DQ-Yqa4J.mjs";import{ALLOW_FORWARDED_ENV as P,headerValue as T,isLoopbackAddress as I,transportRejectionReason as L}from"../packem_shared/ALLOW_FORWARDED_ENV-DGdbCDre.mjs";export{P as ALLOW_FORWARDED_ENV,f as POLICY_SCAFFOLD_ENDPOINT,A as SCHEMA_EDIT_ENDPOINT,O as SEED_ENDPOINT,s as assetContentType,i as handlePolicyScaffoldRequest,x as handleSchemaEditRequest,R as handleSeedRequest,T as headerValue,I as isLoopbackAddress,d as isStandaloneModulePath,n as loadStudioAssets,t as parseDevVariable,l as readStandaloneAsset,E as renderStudioHtml,r as resolveAdminToken,p as resolveStandaloneDirectory,c as serveJsonHandler,m as studioAssetsStamp,L as transportRejectionReason};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/config",
-  "version": "1.0.0-alpha.13",
+  "version": "1.0.0-alpha.131",
   "description": "Internal shared CLI + Vite config layer for Lunora: wrangler.jsonc validation, binding inference, and .dev.vars scaffolding",
   "keywords": [
     "bindings",
@@ -25,7 +25,7 @@
     "directory": "packages/config"
   },
   "files": [
-    "dist",
+    "./dist",
     "__assets__",
     "README.md",
     "LICENSE.md"
@@ -40,6 +40,10 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.mjs"
     },
+    "./cloudflare": {
+      "types": "./dist/cloudflare/index.d.ts",
+      "import": "./dist/cloudflare/index.mjs"
+    },
     "./studio-host": {
       "types": "./dist/studio-host/index.d.ts",
       "import": "./dist/studio-host/index.mjs"
@@ -50,16 +54,19 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/codegen": "1.0.0-alpha.7",
-    "@lunora/container": "1.0.0-alpha.1",
-    "@lunora/seed": "1.0.0-alpha.2",
-    "@visulima/colorize": "2.0.0-alpha.14",
-    "es-module-lexer": "^2.1.0",
+    "@lunora/codegen": "1.0.0-alpha.102",
+    "@lunora/container": "1.0.0-alpha.29",
+    "@lunora/errors": "1.0.0-alpha.20",
+    "@lunora/seed": "1.0.0-alpha.69",
+    "@visulima/colorize": "2.0.0",
+    "@visulima/find-ai-runner": "1.0.0",
+    "dockerode": "^5.0.1",
+    "es-module-lexer": "^2.3.1",
     "jsonc-parser": "^3.3.1",
     "ts-morph": "^28.0.0"
   },
   "peerDependencies": {
-    "@lunora/studio": "1.0.0-alpha.5"
+    "@lunora/studio": ">=1.0.0-alpha.50 <2.0.0-0"
   },
   "peerDependenciesMeta": {
     "@lunora/studio": {

package/dist/packem_shared/ACCENT-DW1XJn8i.mjs

@@ -1,40 +0,0 @@
-import colorize from '@visulima/colorize';
-
-const ACCENT = "#a855f7";
-const INK = "#0b0b0b";
-const STEP_BADGE_NAMES = ["lunora", "dir", "tmpl", "add", "deps", "git", "next"];
-const BADGES = {
-  add: { bg: ACCENT, fg: INK, text: "add" },
-  debug: { bg: "#6b7280", fg: "#f3f4f6", text: "debug" },
-  deps: { bg: ACCENT, fg: INK, text: "deps" },
-  dir: { bg: ACCENT, fg: INK, text: "dir" },
-  error: { bg: "#ef4444", fg: INK, text: "error" },
-  git: { bg: "#f59e0b", fg: INK, text: "git" },
-  info: { bg: "#3b82f6", fg: INK, text: "info" },
-  lunora: { bg: "#22c55e", fg: INK, text: "lunora" },
-  next: { bg: "#06b6d4", fg: INK, text: "next" },
-  success: { bg: "#22c55e", fg: INK, text: "ok" },
-  tmpl: { bg: ACCENT, fg: INK, text: "tmpl" },
-  warn: { bg: "#f59e0b", fg: INK, text: "warn" }
-};
-const LUNA_NAME = "Luna";
-const LUNA_SIGNOFF = "Safe travels, voyager.";
-const LUNA_BUNNY = String.raw`
-   .-"""""-.
-  /  (\(\   \
- |   ( -.-)  |
-  \  o(")(") /
-   '-._____.-'`;
-const LUNA_ART = LUNA_BUNNY.startsWith("\n") ? LUNA_BUNNY.slice(1) : LUNA_BUNNY;
-const BADGE_GUTTER = 6;
-const padBadge = (text) => ` ${text} `;
-const badgeLead = (text) => " ".repeat(Math.max(0, BADGE_GUTTER - text.length));
-const BADGE_COLUMN_WIDTH = BADGE_GUTTER + 2;
-const badgeWidth = (_spec) => BADGE_COLUMN_WIDTH;
-const paintBadge = (spec) => (
-  // eslint-disable-next-line import/no-named-as-default-member -- see file header.
-  badgeLead(spec.text) + colorize.bgHex(spec.bg).hex(spec.fg).bold(padBadge(spec.text))
-);
-const paintAnswer = (text) => colorize.dim(text);
-
-export { ACCENT, BADGES, BADGE_COLUMN_WIDTH, LUNA_ART, LUNA_BUNNY, LUNA_NAME, LUNA_SIGNOFF, STEP_BADGE_NAMES, badgeLead, badgeWidth, padBadge, paintAnswer, paintBadge };

package/dist/packem_shared/AGENT_RULES_DIR-lcgC08aE.mjs

@@ -1,40 +0,0 @@
-import { existsSync } from 'node:fs';
-import { join } from 'node:path';
-
-const AGENT_RULES_DIR = ".agents/skills";
-const AGENT_RULES_HINT_ENV = "LUNORA_RULES_HINT_SHOWN";
-const LUNORA_SKILL_NAMES = [
-  "lunora",
-  "lunora-quickstart",
-  "lunora-functions",
-  "lunora-realtime",
-  "lunora-setup-auth",
-  "lunora-create-package",
-  "lunora-migration-helper",
-  "lunora-deploy",
-  "lunora-performance-audit"
-];
-const ROOT_SKILL_NAME = "lunora";
-const AGENT_RULES_HINT = "Lunora AI rules not installed — run `lunora rules install` so your coding agent knows how to use Lunora.";
-const claimAgentRulesHint = () => {
-  if (process.env[AGENT_RULES_HINT_ENV] === "1") {
-    return false;
-  }
-  process.env[AGENT_RULES_HINT_ENV] = "1";
-  return true;
-};
-const skillFile = (projectRoot, name) => join(projectRoot, AGENT_RULES_DIR, name, "SKILL.md");
-const detectAgentRules = (projectRoot) => {
-  const present = [];
-  const missing = [];
-  for (const name of LUNORA_SKILL_NAMES) {
-    if (existsSync(skillFile(projectRoot, name))) {
-      present.push(name);
-    } else {
-      missing.push(name);
-    }
-  }
-  return { installed: existsSync(skillFile(projectRoot, ROOT_SKILL_NAME)), missing, present };
-};
-
-export { AGENT_RULES_DIR, AGENT_RULES_HINT, AGENT_RULES_HINT_ENV, LUNORA_SKILL_NAMES, ROOT_SKILL_NAME, claimAgentRulesHint, detectAgentRules };

package/dist/packem_shared/DEV_VARS_EXAMPLE_FILE-dJPNTEnK.mjs

@@ -1,37 +0,0 @@
-const DEV_VARS_FILE = ".dev.vars";
-const DEV_VARS_EXAMPLE_FILE = ".dev.vars.example";
-const DEV_VARS_KEY_PATTERN = /^[A-Za-z_]\w*$/u;
-const DEV_VARS_NEWLINE = /\r?\n/u;
-const unquoteDevVariable = (value) => {
-  if (value.length >= 2 && (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'"))) {
-    return value.slice(1, -1);
-  }
-  return value;
-};
-const splitDevVariableLine = (line) => {
-  const trimmed = line.trim();
-  if (trimmed === "" || trimmed.startsWith("#")) {
-    return void 0;
-  }
-  const equals = trimmed.indexOf("=");
-  if (equals <= 0) {
-    return void 0;
-  }
-  const key = trimmed.slice(0, equals).trim();
-  if (!DEV_VARS_KEY_PATTERN.test(key)) {
-    return void 0;
-  }
-  return { key, value: trimmed.slice(equals + 1).trim() };
-};
-const parseDevVariableEntries = (content) => {
-  const entries = [];
-  for (const line of content.split(DEV_VARS_NEWLINE)) {
-    const parsed = splitDevVariableLine(line);
-    if (parsed) {
-      entries.push({ key: parsed.key, value: unquoteDevVariable(parsed.value) });
-    }
-  }
-  return entries;
-};
-
-export { DEV_VARS_EXAMPLE_FILE, DEV_VARS_FILE, DEV_VARS_KEY_PATTERN, DEV_VARS_NEWLINE, parseDevVariableEntries, splitDevVariableLine, unquoteDevVariable };

package/dist/packem_shared/LINKED_PROJECT_DIR-CXwXzV_C.mjs

@@ -1,52 +0,0 @@
-import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'node:fs';
-import { parse } from 'jsonc-parser';
-import { join } from 'node:path';
-
-const LINKED_PROJECT_DIR = ".lunora";
-const LINKED_PROJECT_FILE = join(LINKED_PROJECT_DIR, "project.json");
-const isObject = (value) => value !== null && typeof value === "object";
-const stringField = (record, key) => {
-  const value = record[key];
-  return typeof value === "string" && value.length > 0 ? value : void 0;
-};
-const readLinkedProject = (projectRoot) => {
-  const path = join(projectRoot, LINKED_PROJECT_FILE);
-  if (!existsSync(path)) {
-    return void 0;
-  }
-  let text;
-  try {
-    text = readFileSync(path, "utf8");
-  } catch {
-    return void 0;
-  }
-  const parseErrors = [];
-  const parsed = parse(text, parseErrors, { allowTrailingComma: true });
-  if (parseErrors.length > 0 || !isObject(parsed)) {
-    return void 0;
-  }
-  return {
-    account: stringField(parsed, "account"),
-    env: stringField(parsed, "env"),
-    linkedAt: stringField(parsed, "linkedAt"),
-    workerName: stringField(parsed, "workerName"),
-    workerUrl: stringField(parsed, "workerUrl")
-  };
-};
-const writeLinkedProject = (projectRoot, link) => {
-  const directory = join(projectRoot, LINKED_PROJECT_DIR);
-  mkdirSync(directory, { recursive: true });
-  const record = {};
-  for (const key of ["account", "env", "linkedAt", "workerName", "workerUrl"]) {
-    const value = link[key];
-    if (value !== void 0 && value !== "") {
-      record[key] = value;
-    }
-  }
-  const path = join(projectRoot, LINKED_PROJECT_FILE);
-  writeFileSync(path, `${JSON.stringify(record, void 0, 2)}
-`, "utf8");
-  return path;
-};
-
-export { LINKED_PROJECT_DIR, LINKED_PROJECT_FILE, readLinkedProject, writeLinkedProject };

package/dist/packem_shared/LUNORA_CONFIG_FILE-CtcIcB5-.mjs

@@ -1,34 +0,0 @@
-import { existsSync, readFileSync } from 'node:fs';
-import { parse } from 'jsonc-parser';
-import { join } from 'node:path';
-
-const LUNORA_CONFIG_FILE = "lunora.json";
-const interpretRemote = (value) => {
-  if (typeof value === "boolean") {
-    return value;
-  }
-  if (value !== null && typeof value === "object") {
-    return true;
-  }
-  return void 0;
-};
-const readProjectRemotePreference = (projectRoot) => {
-  const configPath = join(projectRoot, LUNORA_CONFIG_FILE);
-  if (!existsSync(configPath)) {
-    return void 0;
-  }
-  let text;
-  try {
-    text = readFileSync(configPath, "utf8");
-  } catch {
-    return void 0;
-  }
-  const parseErrors = [];
-  const parsed = parse(text, parseErrors, { allowTrailingComma: true });
-  if (parseErrors.length > 0 || parsed === null || typeof parsed !== "object") {
-    return void 0;
-  }
-  return interpretRemote(parsed.remote);
-};
-
-export { LUNORA_CONFIG_FILE, interpretRemote, readProjectRemotePreference };