@lunora/config 1.0.0-alpha.8 → 1.0.0-alpha.80

package/dist/index.mjs

@@ -1,22 +1,30 @@
+export { AGENT_MODE_ENV, detectAiAgent } from './packem_shared/AGENT_MODE_ENV-B5R7jpY7.mjs';
+export { discoverAgentInfo } from './packem_shared/discoverAgentInfo-eXA3hF4v.mjs';
 export { AGENT_RULES_DIR, AGENT_RULES_HINT, AGENT_RULES_HINT_ENV, LUNORA_SKILL_NAMES, ROOT_SKILL_NAME, claimAgentRulesHint, detectAgentRules } from './packem_shared/AGENT_RULES_DIR-lcgC08aE.mjs';
 export { discoverContainerInfo } from './packem_shared/discoverContainerInfo-BXFs6Wav.mjs';
-export { detectFramework } from './packem_shared/detectFramework-Br-BcPBq.mjs';
+export { streamContainerLogs } from './packem_shared/streamContainerLogs-BZ4cOZwH.mjs';
+export { detectFramework, readProjectDependencyNames } from './packem_shared/detectFramework-U08038Yp.mjs';
+export { DEV_DAEMON_ENV, DEV_HANDOFF_ENV, DEV_LOG_FILE, DEV_LOG_FILE_ENV, DEV_STATE_DIR, DEV_STATE_FILE, claimDevServerState, clearDevServerState, isProcessAlive, isRecordedProcessCurrent, readDevServerState, readLiveDevServerState, updateDevServerState, writeDevServerState } from './packem_shared/DEV_DAEMON_ENV-FIEtW7Fz.mjs';
 export { DEV_VARS_EXAMPLE_FILE, DEV_VARS_FILE, DEV_VARS_KEY_PATTERN, parseDevVariableEntries } from './packem_shared/DEV_VARS_EXAMPLE_FILE-dJPNTEnK.mjs';
-export { inferLunoraBindings, packageNamesFromBindings } from './packem_shared/inferLunoraBindings-DIku9mTN.mjs';
+export { inferLunoraBindings, packageNamesFromBindings } from './packem_shared/inferLunoraBindings-BcvvtpSG.mjs';
 export { LINKED_PROJECT_DIR, LINKED_PROJECT_FILE, readLinkedProject, writeLinkedProject } from './packem_shared/LINKED_PROJECT_DIR-CXwXzV_C.mjs';
-export { LUNORA_EVENT_SOURCE, formatLunoraEvent } from './packem_shared/LUNORA_EVENT_SOURCE-D2fDeGB6.mjs';
+export { LUNORA_EVENT_SOURCE, formatLunoraEvent } from './packem_shared/LUNORA_EVENT_SOURCE-M1KM9_pR.mjs';
 export { default as LunoraReporter } from './packem_shared/LunoraReporter-Ci-bDCK9.mjs';
-export { PACKAGE_SECRETS_REGISTRY, secretsForPackages } from './packem_shared/PACKAGE_SECRETS_REGISTRY-CySy5vR_.mjs';
+export { PACKAGE_SECRETS_REGISTRY, secretsForPackages } from './packem_shared/PACKAGE_SECRETS_REGISTRY-NCTSphDk.mjs';
 export { LUNORA_CONFIG_FILE, interpretRemote, readProjectRemotePreference } from './packem_shared/LUNORA_CONFIG_FILE-CtcIcB5-.mjs';
-export { createConfirm, isInteractive, promptMultiSelect, promptSelect, promptYesNo } from './packem_shared/createConfirm-fvpdgJ9s.mjs';
-export { reconcileWranglerBindings } from './packem_shared/reconcileWranglerBindings-DTHmqTbL.mjs';
-export { REMOTE_ELIGIBLE_KEYS, injectRemoteFlags, isRemoteEnvEnabled, materializeRemoteWranglerConfig, planRemoteBindings, resolveRemoteEnabled } from './packem_shared/REMOTE_ELIGIBLE_KEYS-BC7_e9Bz.mjs';
-export { buildPackageSecretsBlock, ensureDevVariables, ensureDevVarsExample, isPlaceholderValue, planDevVariablesAugment, planDevVariablesScaffold } from './packem_shared/buildPackageSecretsBlock-S74dgmwy.mjs';
+export { createConfirm, isInteractive, promptMultiSelect, promptSelect, promptText, promptYesNo } from './packem_shared/createConfirm-BMikeJC9.mjs';
+export { reconcileWranglerBindings } from './packem_shared/reconcileWranglerBindings-2Cww5VLa.mjs';
+export { reconcileWranglerCompatibilityDate } from './packem_shared/reconcileWranglerCompatibilityDate-C8c497ag.mjs';
+export { reconcileWranglerCrons } from './packem_shared/reconcileWranglerCrons-DvsceVFz.mjs';
+export { REMOTE_ELIGIBLE_KEYS, injectRemoteFlags, isRemoteEnvEnabled, materializeRemoteWranglerConfig, planRemoteBindings, resolveRemoteEnabled } from './packem_shared/REMOTE_ELIGIBLE_KEYS-C-F_Flgy.mjs';
+export { buildPackageSecretsBlock, ensureDevVariables, ensureDevVarsExample, fillDevSecrets, generateSecretValue, isMintableSecretKey, isPlaceholderValue, planDevSecretsFill, planDevVariablesAugment, planDevVariablesScaffold, requiredSecrets } from './packem_shared/buildPackageSecretsBlock-BxOcyaAY.mjs';
 export { applyAdditiveEdit, classifyEdit } from './packem_shared/applyAdditiveEdit-C-snTFEV.mjs';
 export { parseSchema } from './packem_shared/parseSchema-DSeyktvG.mjs';
 export { classifyPolicyEdit, scaffoldPolicyFile, wireRlsIntoProcedure } from './packem_shared/classifyPolicyEdit-BHeAqF8P.mjs';
 export { discoverSchemaInfo } from './packem_shared/discoverSchemaInfo-BB-CKlTK.mjs';
 export { ACCENT, BADGES, BADGE_COLUMN_WIDTH, LUNA_ART, LUNA_BUNNY, LUNA_NAME, LUNA_SIGNOFF, STEP_BADGE_NAMES, badgeLead, badgeWidth, padBadge, paintAnswer, paintBadge } from './packem_shared/ACCENT-DW1XJn8i.mjs';
+export { WORKERS_CACHE_MIN_DATE, isCacheEnabled } from './packem_shared/WORKERS_CACHE_MIN_DATE-CaXbS7CX.mjs';
 export { discoverWorkflowInfo } from './packem_shared/discoverWorkflowInfo-CedvR0mn.mjs';
 export { WRANGLER_FILES, findWranglerFile, readWranglerJsonc } from './packem_shared/WRANGLER_FILES-DwSuC-Kn.mjs';
-export { REQUIRED_COMPATIBILITY_DATE, REQUIRED_FLAG, validateWrangler, validateWranglerConfig, validateWranglerProject, withTailConsumer } from './packem_shared/REQUIRED_COMPATIBILITY_DATE-DRSNSOOp.mjs';
+export { collectWranglerSecretVariables, scanWranglerVariablesForSecrets } from './packem_shared/collectWranglerSecretVariables-BRWIvT-e.mjs';
+export { REQUIRED_COMPATIBILITY_DATE, REQUIRED_FLAG, validateWrangler, validateWranglerConfig, validateWranglerProject, withTailConsumer } from './packem_shared/REQUIRED_COMPATIBILITY_DATE-DP0SFVy9.mjs';

package/dist/packem_shared/AGENT_MODE_ENV-B5R7jpY7.mjs

@@ -0,0 +1,17 @@
+import { detectAiSession } from '@visulima/find-ai-runner';
+
+const AGENT_MODE_ENV = "LUNORA_AGENT_MODE";
+const isDisabled = (value) => {
+  const normalized = value.trim().toLowerCase();
+  return normalized === "0" || normalized === "false";
+};
+const detectAiAgent = (env = process.env) => {
+  const override = env[AGENT_MODE_ENV];
+  if (override !== void 0 && override !== "") {
+    return isDisabled(override) ? void 0 : { name: "agent (forced)", variable: AGENT_MODE_ENV };
+  }
+  const session = detectAiSession(env);
+  return session === void 0 ? void 0 : { name: session.agent, variable: session.signal };
+};
+
+export { AGENT_MODE_ENV, detectAiAgent };

package/dist/packem_shared/DEV_DAEMON_ENV-FIEtW7Fz.mjs

@@ -0,0 +1,163 @@
+import { mkdirSync, writeFileSync, rmSync, existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+const DEV_STATE_DIR = ".lunora";
+const DEV_STATE_FILE = join(DEV_STATE_DIR, "dev.json");
+const DEV_LOG_FILE = join(DEV_STATE_DIR, "dev.log");
+const DEV_DAEMON_ENV = "LUNORA_DEV_DAEMON";
+const DEV_LOG_FILE_ENV = "LUNORA_DEV_LOG_FILE";
+const DEV_HANDOFF_ENV = "LUNORA_DEV_HANDOFF_PID";
+const isObject = (value) => value !== null && typeof value === "object";
+const stringField = (record, key) => {
+  const value = record[key];
+  return typeof value === "string" && value.length > 0 ? value : void 0;
+};
+const isProcessAlive = (pid) => {
+  if (!Number.isInteger(pid) || pid <= 0) {
+    return false;
+  }
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+};
+const START_TIME_SKEW_MS = 1e4;
+const LINUX_CLOCK_TICKS_PER_SECOND = 100;
+const processStartTimeMs = (pid) => {
+  if (process.platform !== "linux") {
+    return void 0;
+  }
+  try {
+    const stat = readFileSync(`/proc/${String(pid)}/stat`, "utf8");
+    const fields = stat.slice(stat.lastIndexOf(")") + 2).split(" ");
+    const startTicks = Number(fields[19]);
+    const bootLine = readFileSync("/proc/stat", "utf8").split("\n").find((line) => line.startsWith("btime "));
+    const bootSeconds = Number(bootLine?.slice("btime ".length));
+    if (!Number.isFinite(startTicks) || !Number.isFinite(bootSeconds)) {
+      return void 0;
+    }
+    return bootSeconds * 1e3 + startTicks / LINUX_CLOCK_TICKS_PER_SECOND * 1e3;
+  } catch {
+    return void 0;
+  }
+};
+const isRecordedProcessCurrent = (state) => {
+  if (!isProcessAlive(state.pid)) {
+    return false;
+  }
+  const recordedAtMs = state.startedAt === void 0 ? Number.NaN : Date.parse(state.startedAt);
+  if (Number.isNaN(recordedAtMs)) {
+    return true;
+  }
+  const actualStartMs = processStartTimeMs(state.pid);
+  return actualStartMs === void 0 || actualStartMs <= recordedAtMs + START_TIME_SKEW_MS;
+};
+const readDevServerState = (projectRoot) => {
+  const path = join(projectRoot, DEV_STATE_FILE);
+  if (!existsSync(path)) {
+    return void 0;
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileSync(path, "utf8"));
+  } catch {
+    return void 0;
+  }
+  if (!isObject(parsed) || typeof parsed["pid"] !== "number") {
+    return void 0;
+  }
+  const url = stringField(parsed, "url");
+  if (url === void 0) {
+    return void 0;
+  }
+  return {
+    background: parsed["background"] === true,
+    logFile: stringField(parsed, "logFile"),
+    mode: parsed["mode"] === "vite" ? "vite" : "cli",
+    pid: parsed["pid"],
+    startedAt: stringField(parsed, "startedAt"),
+    studioUrl: stringField(parsed, "studioUrl"),
+    url
+  };
+};
+const writeDevServerState = (projectRoot, state) => {
+  try {
+    mkdirSync(join(projectRoot, DEV_STATE_DIR), { recursive: true });
+    const path = join(projectRoot, DEV_STATE_FILE);
+    writeFileSync(path, `${JSON.stringify(state, void 0, 2)}
+`, "utf8");
+    return path;
+  } catch {
+    return void 0;
+  }
+};
+const updateDevServerState = (projectRoot, patch) => {
+  const existing = readDevServerState(projectRoot);
+  if (existing === void 0) {
+    return void 0;
+  }
+  const merged = { ...existing, ...patch };
+  writeDevServerState(projectRoot, merged);
+  return merged;
+};
+const clearDevServerState = (projectRoot, expectedPid) => {
+  try {
+    if (expectedPid !== void 0) {
+      const current = readDevServerState(projectRoot);
+      if (current !== void 0 && current.pid !== expectedPid) {
+        return;
+      }
+    }
+    rmSync(join(projectRoot, DEV_STATE_FILE), { force: true });
+  } catch {
+  }
+};
+const readLiveDevServerState = (projectRoot) => {
+  const state = readDevServerState(projectRoot);
+  if (state === void 0) {
+    return void 0;
+  }
+  if (isRecordedProcessCurrent(state)) {
+    return state;
+  }
+  clearDevServerState(projectRoot, state.pid);
+  return void 0;
+};
+const resolveClaimConflict = (projectRoot, state, supersedePid) => {
+  const existing = readLiveDevServerState(projectRoot);
+  if (existing === void 0) {
+    return void 0;
+  }
+  if (supersedePid !== void 0 && existing.pid === supersedePid) {
+    return { ok: writeDevServerState(projectRoot, state) !== void 0 };
+  }
+  if (existing.pid !== state.pid) {
+    return { existing, ok: false };
+  }
+  return { ok: writeDevServerState(projectRoot, state) !== void 0 };
+};
+const claimDevServerState = (projectRoot, state, options) => {
+  const path = join(projectRoot, DEV_STATE_FILE);
+  const payload = `${JSON.stringify(state, void 0, 2)}
+`;
+  for (let attempt = 0; attempt < 2; attempt += 1) {
+    try {
+      mkdirSync(join(projectRoot, DEV_STATE_DIR), { recursive: true });
+      writeFileSync(path, payload, { encoding: "utf8", flag: "wx" });
+      return { ok: true };
+    } catch (error) {
+      if (error.code !== "EEXIST") {
+        return { ok: writeDevServerState(projectRoot, state) !== void 0 };
+      }
+      const resolved = resolveClaimConflict(projectRoot, state, options?.supersedePid);
+      if (resolved !== void 0) {
+        return resolved;
+      }
+    }
+  }
+  return { ok: writeDevServerState(projectRoot, state) !== void 0 };
+};
+
+export { DEV_DAEMON_ENV, DEV_HANDOFF_ENV, DEV_LOG_FILE, DEV_LOG_FILE_ENV, DEV_STATE_DIR, DEV_STATE_FILE, claimDevServerState, clearDevServerState, isProcessAlive, isRecordedProcessCurrent, readDevServerState, readLiveDevServerState, updateDevServerState, writeDevServerState };

package/dist/packem_shared/{LUNORA_EVENT_SOURCE-D2fDeGB6.mjs → LUNORA_EVENT_SOURCE-M1KM9_pR.mjs}

@@ -1,10 +1,27 @@
+const stringifyFieldValue = (value) => {
+  if (typeof value === "string") {
+    return value;
+  }
+  try {
+    return JSON.stringify(value) ?? String(value);
+  } catch {
+    return String(value);
+  }
+};
+const formatLogFields = (fields) => {
+  if (typeof fields !== "object" || fields === null || Array.isArray(fields)) {
+    return "";
+  }
+  return Object.entries(fields).map(([key, value]) => `${key}=${stringifyFieldValue(value)}`).join(" ");
+};
+
 const LUNORA_EVENT_SOURCE = "lunora";
 const ROOT_SHARD_NAME = "__root__";
 const asString = (value) => typeof value === "string" ? value : "";
 const asStringList = (value) => Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
 const formatDuration = (value) => typeof value === "number" && Number.isFinite(value) ? `${String(Math.round(value))}ms` : "?ms";
 const toLineLevel = (rawLevel) => {
-  if (rawLevel === "error") {
+  if (rawLevel === "error" || rawLevel === "fatal") {
     return "error";
   }
   if (rawLevel === "warn") {
@@ -72,7 +89,16 @@ const formatLunoraEvent = (line) => {
   }
   const functionPath = asString(event.function) || "<unknown>";
   if (event.type === "log") {
-    return { kind: "log", level: toLineLevel(asString(event.level)), text: `${labelFor(functionPath, event)}  ${asString(event.message)}`.trimEnd() };
+    const parts = [`${labelFor(functionPath, event)}  ${asString(event.message)}`.trimEnd()];
+    const fields = formatLogFields(event.fields);
+    if (fields !== "") {
+      parts.push(fields);
+    }
+    const traceId = asString(event.traceId);
+    if (traceId !== "") {
+      parts.push(`trace=${traceId.slice(0, 8)}`);
+    }
+    return { kind: "log", level: toLineLevel(asString(event.level)), text: parts.join("  ") };
   }
   if (event.type === "request") {
     return formatRequest(event, functionPath);

package/dist/packem_shared/PACKAGE_SECRETS_REGISTRY-NCTSphDk.mjs

@@ -0,0 +1,138 @@
+const CORE_SECRETS = [
+  {
+    description: "Bearer token the local Lunora Studio uses to call the worker's admin endpoints (data browser, schema edits) in dev. Generate with: openssl rand -hex 32",
+    docsUrl: "https://lunora.sh/docs/packages/studio",
+    key: "LUNORA_ADMIN_TOKEN",
+    placeholderValue: "replace-with-openssl-rand-hex-32"
+  }
+];
+const PACKAGE_SECRETS_REGISTRY = {
+  "@lunora/auth": [
+    {
+      description: "32-byte random secret used to sign sessions and tokens. Generate with: openssl rand -hex 32",
+      docsUrl: "https://lunora.sh/docs/packages/auth#secrets",
+      key: "AUTH_SECRET",
+      placeholderValue: "replace-with-openssl-rand-hex-32"
+    },
+    {
+      description: "Public base URL of your worker (used by better-auth for redirects and cookie domain). For local dev this is typically http://localhost:8787",
+      docsUrl: "https://lunora.sh/docs/packages/auth#secrets",
+      key: "AUTH_URL",
+      placeholderValue: "http://localhost:8787"
+    }
+  ],
+  "@lunora/mail": [
+    {
+      description: "Resend API key for sending transactional email via @lunora/mail. Obtain at https://resend.com/api-keys",
+      docsUrl: "https://lunora.sh/docs/packages/mail#secrets",
+      key: "RESEND_API_KEY",
+      placeholderValue: "<your-resend-api-key>"
+    }
+  ],
+  "@lunora/notify": [
+    {
+      description: "Public VAPID key (base64url) for Web Push. Generate a keypair once with: npx web-push generate-vapid-keys — the public key is also shipped to the browser to subscribe.",
+      docsUrl: "https://lunora.sh/docs/packages/notify#web-push",
+      key: "VAPID_PUBLIC_KEY",
+      placeholderValue: "<your-vapid-public-key>"
+    },
+    {
+      description: "Private VAPID key (base64url) for Web Push — the application-server signing key. Generate with: npx web-push generate-vapid-keys",
+      docsUrl: "https://lunora.sh/docs/packages/notify#web-push",
+      key: "VAPID_PRIVATE_KEY",
+      placeholderValue: "<your-vapid-private-key>"
+    },
+    {
+      description: "VAPID `sub` contact — a mailto: or https: URL identifying the application server (e.g. mailto:you@example.com).",
+      docsUrl: "https://lunora.sh/docs/packages/notify#web-push",
+      key: "VAPID_SUBJECT",
+      placeholderValue: "mailto:you@example.com"
+    },
+    {
+      description: "Firebase project id for FCM (HTTP v1) push. Found in the Firebase console project settings.",
+      docsUrl: "https://lunora.sh/docs/packages/notify#fcm",
+      key: "FCM_PROJECT_ID",
+      placeholderValue: "<your-firebase-project-id>"
+    },
+    {
+      description: "OAuth2 access token for FCM (HTTP v1). Convenient for dev but expires — in production supply a getAccessToken() in defineNotify instead. Obtain via the Google Cloud SDK / a service account.",
+      docsUrl: "https://lunora.sh/docs/packages/notify#fcm",
+      key: "FCM_ACCESS_TOKEN",
+      placeholderValue: "<your-fcm-access-token>"
+    }
+  ],
+  "@lunora/payment": [
+    {
+      description: "Stripe secret key (sk_test_…). Required when using the Stripe adapter. Obtain at https://dashboard.stripe.com/apikeys",
+      docsUrl: "https://lunora.sh/docs/packages/payment#stripe",
+      key: "STRIPE_SECRET_KEY",
+      placeholderValue: "<your-stripe-secret-key>"
+    },
+    {
+      description: "Stripe webhook signing secret (whsec_…) for verifying event payloads. Obtain at https://dashboard.stripe.com/webhooks",
+      docsUrl: "https://lunora.sh/docs/packages/payment#stripe",
+      key: "STRIPE_WEBHOOK_SECRET",
+      placeholderValue: "<your-stripe-webhook-secret>"
+    },
+    {
+      description: "Polar access token for the Polar payment adapter. Obtain at https://polar.sh/settings/tokens",
+      docsUrl: "https://lunora.sh/docs/packages/payment#polar",
+      key: "POLAR_ACCESS_TOKEN",
+      placeholderValue: "<your-polar-access-token>"
+    },
+    {
+      description: "Polar webhook secret for verifying event payloads from Polar. Obtain at https://polar.sh/settings/webhooks",
+      docsUrl: "https://lunora.sh/docs/packages/payment#polar",
+      key: "POLAR_WEBHOOK_SECRET",
+      placeholderValue: "<your-polar-webhook-secret>"
+    },
+    {
+      description: "Autumn secret key (am_sk_…) for the Autumn payment adapter. Obtain at https://app.useautumn.com/dev",
+      docsUrl: "https://lunora.sh/docs/packages/payment#autumn",
+      key: "AUTUMN_SECRET_KEY",
+      placeholderValue: "<your-autumn-secret-key>"
+    },
+    {
+      description: "Autumn webhook signing secret for verifying Standard Webhooks event payloads. Obtain from your Autumn dashboard webhook settings.",
+      docsUrl: "https://lunora.sh/docs/packages/payment#autumn",
+      key: "AUTUMN_WEBHOOK_SECRET",
+      placeholderValue: "<your-autumn-webhook-secret>"
+    },
+    {
+      description: "Dodo Payments API key (bearer token) for the Dodo Payments adapter. Obtain at https://app.dodopayments.com/developer/api-keys",
+      docsUrl: "https://lunora.sh/docs/packages/payment#dodo-payments",
+      key: "DODO_PAYMENTS_API_KEY",
+      placeholderValue: "<your-dodo-payments-api-key>"
+    },
+    {
+      description: "Dodo Payments webhook signing secret (whsec_…) for verifying event payloads. Obtain at https://app.dodopayments.com/developer/webhooks",
+      docsUrl: "https://lunora.sh/docs/packages/payment#dodo-payments",
+      key: "DODO_PAYMENTS_WEBHOOK_KEY",
+      placeholderValue: "<your-dodo-payments-webhook-secret>"
+    },
+    {
+      description: "Creem API key for the Creem payment adapter. Obtain at https://www.creem.io/dashboard/developers",
+      docsUrl: "https://lunora.sh/docs/packages/payment#creem",
+      key: "CREEM_API_KEY",
+      placeholderValue: "<your-creem-api-key>"
+    },
+    {
+      description: "Creem webhook signing secret for verifying the creem-signature header. Obtain from your Creem dashboard webhook settings.",
+      docsUrl: "https://lunora.sh/docs/packages/payment#creem",
+      key: "CREEM_WEBHOOK_SECRET",
+      placeholderValue: "<your-creem-webhook-secret>"
+    }
+  ]
+};
+const secretsForPackages = (packageNames) => {
+  const result = [];
+  for (const name of packageNames) {
+    const entries = PACKAGE_SECRETS_REGISTRY[name];
+    if (entries !== void 0) {
+      result.push(...entries);
+    }
+  }
+  return result;
+};
+
+export { CORE_SECRETS, PACKAGE_SECRETS_REGISTRY, secretsForPackages };

package/dist/packem_shared/{POLICY_SCAFFOLD_ENDPOINT-CiC2IGKx.mjs → POLICY_SCAFFOLD_ENDPOINT-CvTZpaZF.mjs}

@@ -1,7 +1,9 @@
-import { existsSync, readFileSync, writeFileSync, renameSync } from 'node:fs';
+import { existsSync, readFileSync } from 'node:fs';
 import { join, isAbsolute, relative } from 'node:path';
 import { runCodegen, CodegenDiagnosticError } from '@lunora/codegen';
+import { LunoraError } from '@lunora/errors';
 import { classifyPolicyEdit, scaffoldPolicyFile, wireRlsIntoProcedure } from './classifyPolicyEdit-BHeAqF8P.mjs';
+import { w as writeFileAtomic } from './write-atomic-B2REqapi.mjs';
 
 const POLICY_SCAFFOLD_ENDPOINT = "/__lunora/policy-scaffold";
 const statusForFailure = (reason) => {
@@ -13,11 +15,6 @@ const statusForFailure = (reason) => {
   }
   return reason === "destructive" ? 409 : 422;
 };
-const writeAtomic = (path, text) => {
-  const temporaryPath = `${path}.lunora-tmp`;
-  writeFileSync(temporaryPath, text, "utf8");
-  renameSync(temporaryPath, path);
-};
 const runCodegenForResponse = (request, okBody) => {
   let diagnostics = [];
   try {
@@ -52,7 +49,7 @@ const handleScaffoldPolicy = (request, edit) => {
   if (existsSync(targetPath)) {
     return { body: { error: "file-exists", fileName: result.fileName, ok: false }, status: 409 };
   }
-  writeAtomic(targetPath, result.source);
+  writeFileAtomic(targetPath, result.source);
   return runCodegenForResponse(request, { fileName: result.fileName });
 };
 const resolveProcedureFile = (projectRoot, lunoraDirectory, filePath) => {
@@ -76,7 +73,7 @@ const handleWireRls = (request, edit) => {
   if (!wired.ok) {
     return { body: { error: wired.reason, ok: false }, status: statusForFailure(wired.reason) };
   }
-  writeAtomic(procedurePath, wired.text);
+  writeFileAtomic(procedurePath, wired.text);
   return runCodegenForResponse(request, { exportName: edit.exportName });
 };
 const handlePolicyScaffoldRequest = (request) => {
@@ -84,7 +81,7 @@ const handlePolicyScaffoldRequest = (request) => {
     return { body: { error: "method-not-allowed", ok: false }, status: 405 };
   }
   const { body } = request;
-  if (body === void 0 || typeof body !== "object" || typeof body.kind !== "string") {
+  if (body === void 0 || body === null || typeof body !== "object" || typeof body.kind !== "string") {
     return { body: { error: "invalid-edit", ok: false }, status: 400 };
   }
   const edit = body;
@@ -97,7 +94,7 @@ const handlePolicyScaffoldRequest = (request) => {
   if (edit.kind === "wireRls") {
     return handleWireRls(request, edit);
   }
-  throw new Error(`unhandled additive policy edit kind: ${String(edit.kind)}`);
+  throw new LunoraError("INTERNAL", `unhandled additive policy edit kind: ${String(edit.kind)}`);
 };
 
 export { POLICY_SCAFFOLD_ENDPOINT, handlePolicyScaffoldRequest };

package/dist/packem_shared/{REMOTE_ELIGIBLE_KEYS-BC7_e9Bz.mjs → REMOTE_ELIGIBLE_KEYS-C-F_Flgy.mjs}

@@ -1,9 +1,8 @@
 import { writeFileSync, rmSync } from 'node:fs';
-import { modify, applyEdits } from 'jsonc-parser';
+import { a as applyModify } from './jsonc-edit-SbcD7MAe.mjs';
 import { findWranglerFile, readWranglerJsonc } from './WRANGLER_FILES-DwSuC-Kn.mjs';
 import { join } from 'node:path';
 
-const FORMATTING = { formattingOptions: { insertSpaces: true, tabSize: 4 } };
 const REMOTE_ELIGIBLE_KEYS = {
   ai: { label: "AI", shape: "object" },
   d1_databases: { label: "D1", shape: "array" },
@@ -38,10 +37,6 @@ const planSection = (section, parsed) => {
   return entry === null || entry === void 0 ? [] : [{ binding: entryName(entry, section), kind: label, path: [], section }];
 };
 const planRemoteBindings = (parsed) => REMOTE_ELIGIBLE_KEY_LIST.flatMap((section) => planSection(section, parsed));
-const applyModify = (text, path, value) => {
-  const edits = modify(text, [...path], value, FORMATTING);
-  return edits.length > 0 ? applyEdits(text, edits) : text;
-};
 const injectRemoteFlags = (text, plans) => {
   let next = text;
   for (const plan of plans) {