@lunora/config 1.0.0-alpha.36 → 1.0.0-alpha.37

package/dist/index.mjs

@@ -12,7 +12,7 @@ export { LUNORA_CONFIG_FILE, interpretRemote, readProjectRemotePreference } from
 export { createConfirm, isInteractive, promptMultiSelect, promptSelect, promptYesNo } from './packem_shared/createConfirm-fvpdgJ9s.mjs';
 export { reconcileWranglerBindings } from './packem_shared/reconcileWranglerBindings-Cruwwx1M.mjs';
 export { REMOTE_ELIGIBLE_KEYS, injectRemoteFlags, isRemoteEnvEnabled, materializeRemoteWranglerConfig, planRemoteBindings, resolveRemoteEnabled } from './packem_shared/REMOTE_ELIGIBLE_KEYS-BC7_e9Bz.mjs';
-export { buildPackageSecretsBlock, ensureDevVariables, ensureDevVarsExample, fillDevSecrets, generateSecretValue, isMintableSecretKey, isPlaceholderValue, planDevSecretsFill, planDevVariablesAugment, planDevVariablesScaffold, requiredSecrets } from './packem_shared/buildPackageSecretsBlock-DWDKHViT.mjs';
+export { buildPackageSecretsBlock, ensureDevVariables, ensureDevVarsExample, fillDevSecrets, generateSecretValue, isMintableSecretKey, isPlaceholderValue, planDevSecretsFill, planDevVariablesAugment, planDevVariablesScaffold, requiredSecrets } from './packem_shared/buildPackageSecretsBlock-BCHtfQ2A.mjs';
 export { applyAdditiveEdit, classifyEdit } from './packem_shared/applyAdditiveEdit-C-snTFEV.mjs';
 export { parseSchema } from './packem_shared/parseSchema-DSeyktvG.mjs';
 export { classifyPolicyEdit, scaffoldPolicyFile, wireRlsIntoProcedure } from './packem_shared/classifyPolicyEdit-BHeAqF8P.mjs';

package/dist/packem_shared/{buildPackageSecretsBlock-DWDKHViT.mjs → buildPackageSecretsBlock-BCHtfQ2A.mjs}

@@ -1,7 +1,7 @@
 import { randomBytes } from 'node:crypto';
-import { existsSync, readFileSync, writeFileSync, renameSync, rmSync } from 'node:fs';
+import { existsSync, readFileSync, writeFileSync, renameSync, rmSync, statSync } from 'node:fs';
 import { join } from 'node:path';
-import { DEV_VARS_FILE, DEV_VARS_EXAMPLE_FILE, parseDevVariableEntries, DEV_VARS_NEWLINE, splitDevVariableLine, unquoteDevVariable } from './DEV_VARS_EXAMPLE_FILE-dJPNTEnK.mjs';
+import { DEV_VARS_FILE, DEV_VARS_EXAMPLE_FILE, splitDevVariableLine, parseDevVariableEntries, DEV_VARS_NEWLINE, unquoteDevVariable } from './DEV_VARS_EXAMPLE_FILE-dJPNTEnK.mjs';
 import { CORE_SECRETS, PACKAGE_SECRETS_REGISTRY, secretsForPackages } from './PACKAGE_SECRETS_REGISTRY-B8t_SdoZ.mjs';
 
 const requiredSecrets = (packageNames) => [...CORE_SECRETS, ...secretsForPackages(packageNames)];
@@ -104,19 +104,48 @@ const atomicCreateDevVariables = (path, content) => {
     throw error;
   }
 };
-const appendDevVariables = (path, additions) => {
-  const existing = readFileSync(path, "utf8");
-  const separator = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
-  const content = `${existing}${separator}${additions.join("\n")}
-`;
-  const temporaryPath = `${path}.tmp-${String(process.pid)}`;
+const APPEND_MAX_ATTEMPTS = 5;
+const fingerprintOf = (path) => {
   try {
-    writeFileSync(temporaryPath, content, { encoding: "utf8", mode: 384 });
-    renameSync(temporaryPath, path);
-  } catch (error) {
-    rmSync(temporaryPath, { force: true });
-    throw error;
+    const stats = statSync(path);
+    return { mtimeMs: stats.mtimeMs, size: stats.size };
+  } catch {
+    return void 0;
+  }
+};
+const sameFingerprint = (a, b) => {
+  if (a === void 0 || b === void 0) {
+    return false;
+  }
+  return a.mtimeMs === b.mtimeMs && a.size === b.size;
+};
+const appendDevVariables = (path, buildAdditions) => {
+  for (let attempt = 0; attempt < APPEND_MAX_ATTEMPTS; attempt += 1) {
+    const beforeFingerprint = fingerprintOf(path);
+    const existing = readFileSync(path, "utf8");
+    const additions = buildAdditions(existing);
+    if (additions.length === 0) {
+      return [];
+    }
+    const separator = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
+    const content = `${existing}${separator}${additions.join("\n")}
+`;
+    const temporaryPath = `${path}.tmp-${String(process.pid)}-${randomBytes(6).toString("hex")}`;
+    try {
+      writeFileSync(temporaryPath, content, { encoding: "utf8", mode: 384 });
+      const beforeRenameFingerprint = fingerprintOf(path);
+      if (!sameFingerprint(beforeFingerprint, beforeRenameFingerprint)) {
+        rmSync(temporaryPath, { force: true });
+        continue;
+      }
+      renameSync(temporaryPath, path);
+      return additions;
+    } catch (error) {
+      rmSync(temporaryPath, { force: true });
+      throw error;
+    }
   }
+  throw new Error(`Failed to append to ${path} after ${String(APPEND_MAX_ATTEMPTS)} attempts — a concurrent writer kept winning the race.`);
 };
 const ensureDevVariables = async (deps) => {
   const devVariablesPath = join(deps.cwd, DEV_VARS_FILE);
@@ -152,9 +181,17 @@ const ensureDevVariables = async (deps) => {
     deps.info(`Skipped — add ${list} to ${DEV_VARS_FILE} when you're ready.`);
     return { addedKeys: [], generatedKeys: [], status: "declined" };
   }
-  appendDevVariables(devVariablesPath, augment.additions);
-  deps.info(`Updated ${DEV_VARS_FILE} — added ${list}${generatedSuffix(augment.generatedKeys)}.`);
-  return { addedKeys: augment.missingKeys, generatedKeys: augment.generatedKeys, status: "augmented" };
+  const written = appendDevVariables(
+    devVariablesPath,
+    (currentContent) => planDevVariablesAugment({ existingContent: currentContent, exampleContent, randomHex: deps.randomHex }).additions
+  );
+  const writtenKeys = written.map((line) => splitDevVariableLine(line)?.key).filter((key) => key !== void 0);
+  if (writtenKeys.length === 0) {
+    return { addedKeys: [], generatedKeys: [], status: "exists" };
+  }
+  const writtenGeneratedKeys = augment.generatedKeys.filter((key) => writtenKeys.includes(key));
+  deps.info(`Updated ${DEV_VARS_FILE} — added ${writtenKeys.join(", ")}${generatedSuffix(writtenGeneratedKeys)}.`);
+  return { addedKeys: writtenKeys, generatedKeys: writtenGeneratedKeys, status: "augmented" };
 };
 const secretEntryBlock = (entry) => {
   const lines = [`# ${entry.description}`, `# Docs: ${entry.docsUrl}`, `${entry.key}="${entry.placeholderValue}"`];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/config",
-  "version": "1.0.0-alpha.36",
+  "version": "1.0.0-alpha.37",
   "description": "Internal shared CLI + Vite config layer for Lunora: wrangler.jsonc validation, binding inference, and .dev.vars scaffolding",
   "keywords": [
     "bindings",
@@ -50,9 +50,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/codegen": "1.0.0-alpha.21",
+    "@lunora/codegen": "1.0.0-alpha.22",
     "@lunora/container": "1.0.0-alpha.5",
-    "@lunora/seed": "1.0.0-alpha.9",
+    "@lunora/seed": "1.0.0-alpha.10",
     "@visulima/colorize": "2.0.0-alpha.14",
     "dockerode": "^5.0.1",
     "es-module-lexer": "^2.1.0",
@@ -60,7 +60,7 @@
     "ts-morph": "^28.0.0"
   },
   "peerDependencies": {
-    "@lunora/studio": "1.0.0-alpha.22"
+    "@lunora/studio": "1.0.0-alpha.23"
   },
   "peerDependenciesMeta": {
     "@lunora/studio": {