@lunora/config 1.0.0-alpha.8 → 1.0.0-alpha.80

package/dist/packem_shared/discoverAgentInfo-eXA3hF4v.mjs

@@ -0,0 +1,19 @@
+import { existsSync } from 'node:fs';
+import { AGENTS_FILENAME, discoverAgents } from '@lunora/codegen';
+import { Project } from 'ts-morph';
+import { join } from 'node:path';
+
+const discoverAgentInfo = (projectRoot, schemaDirectory) => {
+  const agentsPath = join(projectRoot, schemaDirectory, AGENTS_FILENAME);
+  if (!existsSync(agentsPath)) {
+    return { agents: [] };
+  }
+  try {
+    const project = new Project({ skipAddingFilesFromTsConfig: true, useInMemoryFileSystem: false });
+    return { agents: discoverAgents(project, join(projectRoot, schemaDirectory)) };
+  } catch (error) {
+    return { agents: [], error: error instanceof Error ? error.message : String(error) };
+  }
+};
+
+export { discoverAgentInfo };

package/dist/packem_shared/{inferLunoraBindings-DIku9mTN.mjs → inferLunoraBindings-BcvvtpSG.mjs}

@@ -1,10 +1,39 @@
 import { existsSync, statSync, readFileSync, readdirSync } from 'node:fs';
 import { init, parse } from 'es-module-lexer';
+import { discoverAgentInfo } from './discoverAgentInfo-eXA3hF4v.mjs';
 import { discoverContainerInfo } from './discoverContainerInfo-BXFs6Wav.mjs';
+import { FLAGS_FILENAME, discoverFlags, QUEUES_FILENAME, discoverQueues } from '@lunora/codegen';
+import { Project } from 'ts-morph';
+import { join } from 'node:path';
 import { discoverSchemaInfo } from './discoverSchemaInfo-BB-CKlTK.mjs';
 import { discoverWorkflowInfo } from './discoverWorkflowInfo-CedvR0mn.mjs';
 import { WRANGLER_FILES, readWranglerJsonc } from './WRANGLER_FILES-DwSuC-Kn.mjs';
-import { join } from 'node:path';
+
+const discoverFlagsInfo = (projectRoot, schemaDirectory) => {
+  const flagsPath = join(projectRoot, schemaDirectory, FLAGS_FILENAME);
+  if (!existsSync(flagsPath)) {
+    return {};
+  }
+  try {
+    const project = new Project({ skipAddingFilesFromTsConfig: true, useInMemoryFileSystem: false });
+    return { flags: discoverFlags(project, join(projectRoot, schemaDirectory)) };
+  } catch (error) {
+    return { error: error instanceof Error ? error.message : String(error) };
+  }
+};
+
+const discoverQueueInfo = (projectRoot, schemaDirectory) => {
+  const queuesPath = join(projectRoot, schemaDirectory, QUEUES_FILENAME);
+  if (!existsSync(queuesPath)) {
+    return { queues: [] };
+  }
+  try {
+    const project = new Project({ skipAddingFilesFromTsConfig: true, useInMemoryFileSystem: false });
+    return { queues: discoverQueues(project, join(projectRoot, schemaDirectory)) };
+  } catch (error) {
+    return { error: error instanceof Error ? error.message : String(error), queues: [] };
+  }
+};
 
 const SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([".cjs", ".cts", ".js", ".jsx", ".mjs", ".mts", ".ts", ".tsx"]);
 const IGNORED_DIRECTORIES = /* @__PURE__ */ new Set([".git", ".lunora-cache", ".wrangler", "_generated", "dist", "node_modules"]);
@@ -23,20 +52,60 @@ const TYPE_ONLY_EXPORT_PATTERNS = {
 };
 const ENV_DB_PATTERN = /\benv\s*\.\s*DB\b/;
 const ENV_AI_PATTERN = /\benv\s*\.\s*AI\b/;
+const CTX_PIPELINES_PATTERN = /\bctx\s*\.\s*pipelines\b/;
 const TYPE_ONLY_IMPORT_PATTERN = /^\s*import\s+type\b/;
+const SANDBOX_MODULE_SPECIFIERS = /* @__PURE__ */ new Set(["@lunora/agent", "@lunora/agent/sandbox"]);
+const extractImportSpecifierList = (statementText) => {
+  const openBraceIndex = statementText.indexOf("{");
+  if (openBraceIndex === -1) {
+    return "";
+  }
+  const closeBraceIndex = statementText.indexOf("}", openBraceIndex + 1);
+  return closeBraceIndex === -1 ? statementText.slice(openBraceIndex + 1) : statementText.slice(openBraceIndex + 1, closeBraceIndex);
+};
+const TYPE_BROWSER_TOOL_SPECIFIER_PATTERN = /\btype\s+browserTool\b/;
+const BROWSER_TOOL_NAME_PATTERN = /\bbrowserTool\b/;
+const SANDBOX_BROWSER_TOOL_FALLBACK_PATTERN = /import\s+\{[^}]*\bbrowserTool\b[^}]*\}\s+from\s+["']@lunora\/agent(?:\/sandbox)?["']/;
+const isValueBrowserToolImport = (statementText) => {
+  if (TYPE_ONLY_IMPORT_PATTERN.test(statementText)) {
+    return false;
+  }
+  const specifierList = extractImportSpecifierList(statementText);
+  return BROWSER_TOOL_NAME_PATTERN.test(specifierList) && !TYPE_BROWSER_TOOL_SPECIFIER_PATTERN.test(specifierList);
+};
+const hasSandboxBrowserToolImport = (code) => {
+  try {
+    const [imports] = parse(code);
+    return imports.some(
+      (entry) => entry.n !== void 0 && SANDBOX_MODULE_SPECIFIERS.has(entry.n) && isValueBrowserToolImport(code.slice(entry.ss, entry.se))
+    );
+  } catch {
+    return SANDBOX_BROWSER_TOOL_FALLBACK_PATTERN.test(code);
+  }
+};
 const CAPABILITY_SOURCES = {
   usesAi: { pattern: /\bfrom\s+["']@lunora\/ai["']/, source: "@lunora/ai" },
-  usesAnalytics: { pattern: /\bfrom\s+["']@lunora\/analytics["']/, source: "@lunora/analytics" },
+  usesAnalytics: { pattern: /\bfrom\s+["']@lunora\/bindings\/analytics["']/, source: "@lunora/bindings/analytics" },
   usesAuth: { pattern: /\bfrom\s+["']@lunora\/auth["']/, source: "@lunora/auth" },
   usesBrowser: { pattern: /\bfrom\s+["']@lunora\/browser["']/, source: "@lunora/browser" },
   usesHyperdrive: { pattern: /\bfrom\s+["']@lunora\/hyperdrive["']/, source: "@lunora/hyperdrive" },
-  usesImages: { pattern: /\bfrom\s+["']@lunora\/images["']/, source: "@lunora/images" },
-  usesKv: { pattern: /\bfrom\s+["']@lunora\/kv["']/, source: "@lunora/kv" },
+  usesImages: { pattern: /\bfrom\s+["']@lunora\/bindings\/images["']/, source: "@lunora/bindings/images" },
+  usesKv: { pattern: /\bfrom\s+["']@lunora\/bindings\/kv["']/, source: "@lunora/bindings/kv" },
   usesMail: { pattern: /\bfrom\s+["']@lunora\/mail["']/, source: "@lunora/mail" },
   usesPayment: { pattern: /\bfrom\s+["']@lunora\/payment["']/, source: "@lunora/payment" },
-  usesPipelines: { pattern: /\bfrom\s+["']@lunora\/pipelines["']/, source: "@lunora/pipelines" },
+  // Keyed off the `ctx.pipelines` access (not an import) — see CTX_PIPELINES_PATTERN.
+  // Pipelines is codegen-wired onto ActionCtx, so apps reach it via `ctx.pipelines`
+  // rather than importing `@lunora/bindings/pipelines`; `source` names that subpath
+  // for the hint message.
+  usesPipelines: { pattern: CTX_PIPELINES_PATTERN, source: "@lunora/bindings/pipelines" },
   usesScheduler: { pattern: /\bfrom\s+["']@lunora\/scheduler["']/, source: "@lunora/scheduler" },
-  usesStorage: { pattern: /\bfrom\s+["']@lunora\/storage["']/, source: "@lunora/storage" }
+  usesStorage: { pattern: /\bfrom\s+["']@lunora\/storage["']/, source: "@lunora/storage" },
+  // x402 rails are opt-in add-on subpaths (not part of the `lunorash` umbrella),
+  // so they key off the exact `@lunora/x402/{charge,pay}` specifiers. Neither
+  // implies a `.dev.vars` secret: the charge recipient is a user-named `[vars]`
+  // entry and the pay wallet key is a Secrets Store binding — both hint-only.
+  usesX402Charge: { pattern: /\bfrom\s+["']@lunora\/x402\/charge["']/, source: "@lunora/x402/charge" },
+  usesX402Pay: { pattern: /\bfrom\s+["']@lunora\/x402\/pay["']/, source: "@lunora/x402/pay" }
 };
 const CAPABILITY_FLAGS = Object.keys(CAPABILITY_SOURCES);
 const PAYMENT_PROVIDER_SECRETS = "STRIPE_SECRET_KEY + STRIPE_WEBHOOK_SECRET (Stripe) or POLAR_ACCESS_TOKEN + POLAR_WEBHOOK_SECRET (Polar)";
@@ -90,7 +159,12 @@ const capabilitiesFromSource = (code) => {
   } catch {
     capabilities = regexCapabilities(code);
   }
-  return mergeCapabilities(capabilities, { ...NO_CAPABILITIES, needsD1: ENV_DB_PATTERN.test(code), usesAi: ENV_AI_PATTERN.test(code) });
+  return mergeCapabilities(capabilities, {
+    ...NO_CAPABILITIES,
+    needsD1: ENV_DB_PATTERN.test(code),
+    usesAi: ENV_AI_PATTERN.test(code),
+    usesPipelines: CTX_PIPELINES_PATTERN.test(code)
+  });
 };
 const collectSourceFiles = (directory, accumulator) => {
   let entries;
@@ -149,56 +223,39 @@ const detectExportedDurableObjects = (entryPath) => {
     };
   });
 };
-const CONTAINERS_STAR_REEXPORT_PATTERN = /\bexport\s*\*\s*from\s*["'][^"']*_generated\/containers(?:\.js)?["']/;
-const detectContainerExports = (entryPath, containers) => {
-  if (containers.length === 0) {
-    return [];
-  }
-  if (entryPath === void 0) {
-    return containers.map((container) => {
-      return { ...container, exported: false };
-    });
-  }
-  const code = readFileSync(entryPath, "utf8");
-  const starReexport = CONTAINERS_STAR_REEXPORT_PATTERN.test(code);
-  let exportedNames;
-  try {
-    const [, exports] = parse(code);
-    exportedNames = new Set(exports.map((entry) => entry.n));
-  } catch {
-    exportedNames = new Set(
-      containers.map((container) => container.className).filter((className) => new RegExp(String.raw`\bexport\b[^\n;]*\b${className}\b`).test(code))
-    );
-  }
-  return containers.map((container) => {
-    return { ...container, exported: starReexport || exportedNames.has(container.className) };
-  });
-};
-const WORKFLOWS_STAR_REEXPORT_PATTERN = /\bexport\s*\*\s*from\s*["'][^"']*_generated\/workflows(?:\.js)?["']/;
-const detectWorkflowExports = (entryPath, workflows) => {
-  if (workflows.length === 0) {
+const isTypeOnlyClassExport = (code, className) => (
+  // `export type Foo` / `export type { … Foo … }` / `export { type Foo }` — all
+  // three type-only forms list the name via the lexer but compile away.
+  new RegExp(String.raw`\bexport\s+type\s+${className}\b`).test(code) || new RegExp(String.raw`\bexport\s+type\s*\{[^}]*\b${className}\b`).test(code) || new RegExp(String.raw`\bexport\s+\{[^}]*\btype\s+${className}\b`).test(code)
+);
+const detectClassExports = (entryPath, definitions, generatedModule) => {
+  if (definitions.length === 0) {
     return [];
   }
   if (entryPath === void 0) {
-    return workflows.map((workflow) => {
-      return { ...workflow, exported: false };
+    return definitions.map((definition) => {
+      return { ...definition, exported: false };
     });
   }
   const code = readFileSync(entryPath, "utf8");
-  const starReexport = WORKFLOWS_STAR_REEXPORT_PATTERN.test(code);
+  const starReexport = new RegExp(String.raw`\bexport\s*\*\s*from\s*["'][^"']*_generated\/${generatedModule}(?:\.js)?["']`).test(code);
   let exportedNames;
   try {
     const [, exports] = parse(code);
     exportedNames = new Set(exports.map((entry) => entry.n));
   } catch {
     exportedNames = new Set(
-      workflows.map((workflow) => workflow.className).filter((className) => new RegExp(String.raw`\bexport\b[^\n;]*\b${className}\b`).test(code))
+      definitions.map((definition) => definition.className).filter((className) => new RegExp(String.raw`\bexport\b[^\n;]*\b${className}\b`).test(code))
     );
   }
-  return workflows.map((workflow) => {
-    return { ...workflow, exported: starReexport || exportedNames.has(workflow.className) };
+  return definitions.map((definition) => {
+    const exported = starReexport || exportedNames.has(definition.className) && !isTypeOnlyClassExport(code, definition.className);
+    return { ...definition, exported };
   });
 };
+const detectContainerExports = (entryPath, containers) => detectClassExports(entryPath, containers, "containers");
+const detectWorkflowExports = (entryPath, workflows) => detectClassExports(entryPath, workflows, "workflows");
+const detectAgentExports = (entryPath, agents) => detectClassExports(entryPath, agents, "agents");
 const schemaNeedsD1 = (projectRoot, schemaDirectory) => discoverSchemaInfo(projectRoot, schemaDirectory).info?.hasGlobalTable ?? false;
 const scanCapabilities = (projectRoot, scanDirectories) => {
   let merged = NO_CAPABILITIES;
@@ -215,12 +272,24 @@ const scanCapabilities = (projectRoot, scanDirectories) => {
   }
   return merged;
 };
-const describeDeclaredExports = (containers, workflows) => [
+const scanSandboxBrowserToolUsage = (projectRoot, lunoraDirectory) => {
+  const absolute = join(projectRoot, lunoraDirectory);
+  if (!existsSync(absolute) || !statSync(absolute).isDirectory()) {
+    return false;
+  }
+  const files = [];
+  collectSourceFiles(absolute, files);
+  return files.some((file) => hasSandboxBrowserToolImport(readFileSync(file, "utf8")));
+};
+const describeDeclaredExports = (containers, workflows, agents) => [
   ...containers.map(
     (container) => container.exported ? `${container.bindingName}/${container.className} (container "${container.exportName}" declared and exported)` : `hint: container "${container.exportName}" is declared but ${container.className} is not exported by the worker entry — add \`export * from "./lunora/_generated/containers"\``
   ),
   ...workflows.map(
     (workflow) => workflow.exported ? `${workflow.bindingName}/${workflow.className} (workflow "${workflow.exportName}" declared and exported)` : `hint: workflow "${workflow.exportName}" is declared but ${workflow.className} is not exported by the worker entry — add \`export * from "./lunora/_generated/workflows"\``
+  ),
+  ...agents.map(
+    (agent) => agent.exported ? `${agent.bindingName}/${agent.className} (agent "${agent.exportName}" declared and exported)` : `hint: agent "${agent.exportName}" is declared but ${agent.className} is not exported by the worker entry — add \`export * from "./lunora/_generated/agents"\``
   )
 ];
 const describeCapabilitySignals = (capabilities, exported) => {
@@ -237,14 +306,14 @@ const describeCapabilitySignals = (capabilities, exported) => {
     // Self-describing bindings: the binding name is the whole config (no remote
     // id to mint), so reconcile auto-writes them like the DO/D1 bindings.
     [capabilities.usesBrowser, "browser (@lunora/browser imported) — self-describing { binding: BROWSER }"],
-    [capabilities.usesImages, "images (@lunora/images imported) — self-describing { binding: IMAGES }"],
-    [capabilities.usesAnalytics, "analytics_engine_datasets (@lunora/analytics imported) — self-describing { binding: ANALYTICS, dataset }"],
+    [capabilities.usesImages, "images (@lunora/bindings/images imported) — self-describing { binding: IMAGES }"],
+    [capabilities.usesAnalytics, "analytics_engine_datasets (@lunora/bindings/analytics imported) — self-describing { binding: ANALYTICS, dataset }"],
     // Hint bindings: each needs a remote resource Lunora can't fabricate (a KV
     // namespace id, a Hyperdrive id, a Pipelines pipeline name), so they surface
     // as hints — never an auto-write — exactly like R2's user-defined bucket name.
     [
       capabilities.usesKv,
-      "hint: @lunora/kv is imported; add a kv_namespaces binding ({ binding, id }) and pass env.<BINDING> to createKv() — the namespace id can't be auto-provisioned"
+      "hint: @lunora/bindings/kv is imported; add a kv_namespaces binding ({ binding, id }) and pass env.<BINDING> to createKv() — the namespace id can't be auto-provisioned"
     ],
     [
       capabilities.usesHyperdrive,
@@ -252,39 +321,65 @@ const describeCapabilitySignals = (capabilities, exported) => {
     ],
     [
       capabilities.usesPipelines,
-      "hint: @lunora/pipelines is imported; run 'wrangler pipelines create <name>' and add a 'pipelines' binding ({ binding, pipeline }) — the pipeline resource can't be auto-provisioned"
+      "hint: ctx.pipelines is used; run 'wrangler pipelines create <name>' and add a 'pipelines' binding ({ binding, pipeline }) — the pipeline resource can't be auto-provisioned"
+    ],
+    [
+      capabilities.usesX402Charge,
+      "hint: @lunora/x402/charge is imported; set the recipient wallet address as a [vars] entry (the var name is yours to choose) and pass it to the charge config — the x402 facilitator settles USDC to that address"
+    ],
+    [
+      capabilities.usesX402Pay,
+      "hint: @lunora/x402/pay is imported (ActionCtx-only, spends real funds); add a secrets_store_secrets[] binding for the agent wallet key (name it to match signer.secretName) and pair the pay rail with a spend policy — ctx.secrets reads a Secrets Store binding, not .dev.vars, so the key can't be auto-provisioned"
     ]
   ];
   return rules.filter(([active]) => active).map(([, signal]) => signal);
 };
-const describeSignals = (durableObjects, needsD1, capabilities, containers = [], workflows = []) => {
+const describeSignals = (durableObjects, needsD1, capabilities, containers = [], workflows = [], agents = []) => {
   const exported = new Set(durableObjects.map((object) => object.className));
   const signals = durableObjects.map((object) => `${object.binding}/${object.className} (exported by worker entry)`);
   if (needsD1) {
     signals.push("DB (.global() table declared)");
   }
-  signals.push(...describeDeclaredExports(containers, workflows), ...describeCapabilitySignals(capabilities, exported));
+  signals.push(...describeDeclaredExports(containers, workflows, agents), ...describeCapabilitySignals(capabilities, exported));
   return signals;
 };
 const inferLunoraBindings = async (options) => {
   await init;
   const schemaDirectory = options.schemaDir ?? "lunora";
   const scanDirectories = options.scanDirs ?? DEFAULT_SCAN_DIRECTORIES;
-  const capabilities = scanCapabilities(options.projectRoot, scanDirectories);
+  const scannedCapabilities = scanCapabilities(options.projectRoot, scanDirectories);
+  const capabilities = {
+    ...scannedCapabilities,
+    usesBrowser: scannedCapabilities.usesBrowser || scanSandboxBrowserToolUsage(options.projectRoot, schemaDirectory)
+  };
   const entryPath = resolveWorkerEntry(options.projectRoot);
   const durableObjects = entryPath ? detectExportedDurableObjects(entryPath) : [];
   const needsD1 = capabilities.needsD1 || schemaNeedsD1(options.projectRoot, schemaDirectory);
   const containers = detectContainerExports(entryPath, discoverContainerInfo(options.projectRoot, schemaDirectory).containers);
   const workflows = detectWorkflowExports(entryPath, discoverWorkflowInfo(options.projectRoot, schemaDirectory).workflows);
+  const agents = detectAgentExports(entryPath, discoverAgentInfo(options.projectRoot, schemaDirectory).agents);
+  const queues = [...discoverQueueInfo(options.projectRoot, schemaDirectory).queues];
+  const { flags } = discoverFlagsInfo(options.projectRoot, schemaDirectory);
+  const flagshipBinding = flags?.provider === "flagship" && flags.mode === "binding" ? flags.bindingName : void 0;
   const capabilityFlags = {};
   for (const flag of CAPABILITY_FLAGS) {
     capabilityFlags[flag] = capabilities[flag];
   }
+  const signals = describeSignals(durableObjects, needsD1, capabilities, containers, workflows, agents);
+  if (flagshipBinding !== void 0) {
+    signals.push(
+      `hint: lunora/flags.ts uses Flagship in binding mode; add a flagship binding ({ binding: "${flagshipBinding}", app_id }) — the app_id can't be auto-provisioned`
+    );
+  }
   return {
+    agents,
     containers,
     durableObjects,
+    flagshipBinding,
     needsD1,
-    signals: describeSignals(durableObjects, needsD1, capabilities, containers, workflows),
+    queues,
+    signals,
+    usesFlags: flags !== void 0,
     workflows,
     ...capabilityFlags
   };

package/dist/packem_shared/jsonc-edit-SbcD7MAe.mjs

@@ -0,0 +1,9 @@
+import { modify, applyEdits } from 'jsonc-parser';
+
+const FORMATTING = { formattingOptions: { insertSpaces: true, tabSize: 4 } };
+const applyModify = (text, path, value) => {
+  const edits = modify(text, [...path], value, FORMATTING);
+  return edits.length > 0 ? applyEdits(text, edits) : text;
+};
+
+export { FORMATTING as F, applyModify as a };

package/dist/packem_shared/parseDevVariable-B0FEvfHC.mjs

@@ -0,0 +1,21 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { parseDevVariableEntries } from './DEV_VARS_EXAMPLE_FILE-dJPNTEnK.mjs';
+
+const parseDevVariable = (contents, key) => {
+  const entry = parseDevVariableEntries(contents).find((candidate) => candidate.key === key);
+  return entry === void 0 || entry.value === "" ? void 0 : entry.value;
+};
+const resolveAdminToken = (root) => {
+  const fromEnv = process.env["LUNORA_ADMIN_TOKEN"];
+  if (typeof fromEnv === "string" && fromEnv !== "") {
+    return fromEnv;
+  }
+  try {
+    return parseDevVariable(readFileSync(join(root, ".dev.vars"), "utf8"), "LUNORA_ADMIN_TOKEN");
+  } catch {
+    return void 0;
+  }
+};
+
+export { parseDevVariable, resolveAdminToken };

package/dist/packem_shared/{policy-scaffold.d-DCmwn7zQ.d.ts → policy-scaffold.d-CFd2FlqG.d.mts}

@@ -2,9 +2,9 @@
 interface ScaffoldPolicyEdit {
   readonly kind: "scaffoldPolicy";
   /**
-  * Base name for the generated file and its exported policy-set identifier,
-  * e.g. `invoices` → `lunora/invoices.policies.ts` exporting `invoicesPolicies`.
-  */
+   * Base name for the generated file and its exported policy-set identifier,
+   * e.g. `invoices` → `lunora/invoices.policies.ts` exporting `invoicesPolicies`.
+   */
   readonly name: string;
   /** Logical table the scaffolded policy guards (used in the stub body). */
   readonly table: string;
@@ -20,10 +20,10 @@ interface WireRlsEdit {
 /** Additive scaffolder edits — the only requests the scaffolder applies. */
 type AdditivePolicyEdit = ScaffoldPolicyEdit | WireRlsEdit;
 /**
-* Destructive scaffolder requests — never applied. Rewriting an existing `when`
-* body changes evaluation semantics silently, so it is refused (STOP condition
-* in plan 025); carried as data so the editor can describe the request.
-*/
+ * Destructive scaffolder requests — never applied. Rewriting an existing `when`
+ * body changes evaluation semantics silently, so it is refused (STOP condition
+ * in plan 025); carried as data so the editor can describe the request.
+ */
 interface DestructivePolicyEdit {
   readonly exportName?: string;
   readonly kind: "rewritePolicyWhen";
@@ -32,10 +32,10 @@ interface DestructivePolicyEdit {
 /** Any request the scaffolder can receive. */
 type PolicyEdit = AdditivePolicyEdit | DestructivePolicyEdit;
 /**
-* Classify a scaffolder request. Additive requests ({@link AdditivePolicyEdit})
-* apply directly; everything else (rewriting an existing predicate) changes
-* evaluation semantics and is destructive.
-*/
+ * Classify a scaffolder request. Additive requests ({@link AdditivePolicyEdit})
+ * apply directly; everything else (rewriting an existing predicate) changes
+ * evaluation semantics and is destructive.
+ */
 declare const classifyPolicyEdit: (edit: PolicyEdit) => "additive" | "destructive";
 /** Failure reasons a scaffolder request can report. */
 type PolicyScaffoldFailureReason = "already-wired" | "destructive" | "invalid-identifier" | "unknown-procedure" | "unsupported-procedure-shape";
@@ -57,18 +57,18 @@ type WireResult = {
   text: string;
 };
 /**
-* Generate the source of a new policy/role/permission stub file. The `when`
-* predicate is a `() => false` skeleton with a TODO — the scaffolder never
-* authors real logic, the developer fills it in. Pure (no I/O); the handler
-* writes the returned source and refuses to overwrite an existing file.
-*/
+ * Generate the source of a new policy/role/permission stub file. The `when`
+ * predicate is a `() => false` skeleton with a TODO — the scaffolder never
+ * authors real logic, the developer fills it in. Pure (no I/O); the handler
+ * writes the returned source and refuses to overwrite an existing file.
+ */
 declare const scaffoldPolicyFile: (edit: ScaffoldPolicyEdit) => ScaffoldFileResult;
 /**
-* Append `.use(rls(<policies>))` to a procedure's builder chain, preserving the
-* terminal `.query(handler)` (and its handler body) byte-for-byte. Only the
-* **builder** form can be wired; the bare-factory form (`query({ handler })`)
-* has no chain and is reported `unsupported-procedure-shape` so the editor can
-* tell the developer to convert it rather than silently rewriting their code.
-*/
+ * Append `.use(rls(<policies>))` to a procedure's builder chain, preserving the
+ * terminal `.query(handler)` (and its handler body) byte-for-byte. Only the
+ * **builder** form can be wired; the bare-factory form (`query({ handler })`)
+ * has no chain and is reported `unsupported-procedure-shape` so the editor can
+ * tell the developer to convert it rather than silently rewriting their code.
+ */
 declare const wireRlsIntoProcedure: (source: string, edit: WireRlsEdit) => WireResult;
 export { AdditivePolicyEdit as A, DestructivePolicyEdit as D, PolicyEdit as P, ScaffoldPolicyEdit as S, WireRlsEdit as W, PolicyScaffoldFailureReason as a, ScaffoldFileResult as b, WireResult as c, classifyPolicyEdit as d, scaffoldPolicyFile as s, wireRlsIntoProcedure as w };

package/dist/packem_shared/{policy-scaffold.d-DCmwn7zQ.d.mts → policy-scaffold.d-CFd2FlqG.d.ts}

@@ -2,9 +2,9 @@
 interface ScaffoldPolicyEdit {
   readonly kind: "scaffoldPolicy";
   /**
-  * Base name for the generated file and its exported policy-set identifier,
-  * e.g. `invoices` → `lunora/invoices.policies.ts` exporting `invoicesPolicies`.
-  */
+   * Base name for the generated file and its exported policy-set identifier,
+   * e.g. `invoices` → `lunora/invoices.policies.ts` exporting `invoicesPolicies`.
+   */
   readonly name: string;
   /** Logical table the scaffolded policy guards (used in the stub body). */
   readonly table: string;
@@ -20,10 +20,10 @@ interface WireRlsEdit {
 /** Additive scaffolder edits — the only requests the scaffolder applies. */
 type AdditivePolicyEdit = ScaffoldPolicyEdit | WireRlsEdit;
 /**
-* Destructive scaffolder requests — never applied. Rewriting an existing `when`
-* body changes evaluation semantics silently, so it is refused (STOP condition
-* in plan 025); carried as data so the editor can describe the request.
-*/
+ * Destructive scaffolder requests — never applied. Rewriting an existing `when`
+ * body changes evaluation semantics silently, so it is refused (STOP condition
+ * in plan 025); carried as data so the editor can describe the request.
+ */
 interface DestructivePolicyEdit {
   readonly exportName?: string;
   readonly kind: "rewritePolicyWhen";
@@ -32,10 +32,10 @@ interface DestructivePolicyEdit {
 /** Any request the scaffolder can receive. */
 type PolicyEdit = AdditivePolicyEdit | DestructivePolicyEdit;
 /**
-* Classify a scaffolder request. Additive requests ({@link AdditivePolicyEdit})
-* apply directly; everything else (rewriting an existing predicate) changes
-* evaluation semantics and is destructive.
-*/
+ * Classify a scaffolder request. Additive requests ({@link AdditivePolicyEdit})
+ * apply directly; everything else (rewriting an existing predicate) changes
+ * evaluation semantics and is destructive.
+ */
 declare const classifyPolicyEdit: (edit: PolicyEdit) => "additive" | "destructive";
 /** Failure reasons a scaffolder request can report. */
 type PolicyScaffoldFailureReason = "already-wired" | "destructive" | "invalid-identifier" | "unknown-procedure" | "unsupported-procedure-shape";
@@ -57,18 +57,18 @@ type WireResult = {
   text: string;
 };
 /**
-* Generate the source of a new policy/role/permission stub file. The `when`
-* predicate is a `() => false` skeleton with a TODO — the scaffolder never
-* authors real logic, the developer fills it in. Pure (no I/O); the handler
-* writes the returned source and refuses to overwrite an existing file.
-*/
+ * Generate the source of a new policy/role/permission stub file. The `when`
+ * predicate is a `() => false` skeleton with a TODO — the scaffolder never
+ * authors real logic, the developer fills it in. Pure (no I/O); the handler
+ * writes the returned source and refuses to overwrite an existing file.
+ */
 declare const scaffoldPolicyFile: (edit: ScaffoldPolicyEdit) => ScaffoldFileResult;
 /**
-* Append `.use(rls(<policies>))` to a procedure's builder chain, preserving the
-* terminal `.query(handler)` (and its handler body) byte-for-byte. Only the
-* **builder** form can be wired; the bare-factory form (`query({ handler })`)
-* has no chain and is reported `unsupported-procedure-shape` so the editor can
-* tell the developer to convert it rather than silently rewriting their code.
-*/
+ * Append `.use(rls(<policies>))` to a procedure's builder chain, preserving the
+ * terminal `.query(handler)` (and its handler body) byte-for-byte. Only the
+ * **builder** form can be wired; the bare-factory form (`query({ handler })`)
+ * has no chain and is reported `unsupported-procedure-shape` so the editor can
+ * tell the developer to convert it rather than silently rewriting their code.
+ */
 declare const wireRlsIntoProcedure: (source: string, edit: WireRlsEdit) => WireResult;
 export { AdditivePolicyEdit as A, DestructivePolicyEdit as D, PolicyEdit as P, ScaffoldPolicyEdit as S, WireRlsEdit as W, PolicyScaffoldFailureReason as a, ScaffoldFileResult as b, WireResult as c, classifyPolicyEdit as d, scaffoldPolicyFile as s, wireRlsIntoProcedure as w };