@lunora/studio 0.0.0 → 1.0.0-alpha.10

package/dist/packem_shared/SecurityAdvisorPanel-DTmjUNqt.js

@@ -0,0 +1,92 @@
+import { c } from 'react/compiler-runtime';
+import { u as useAdminQuery } from './use-admin-query-4JQW2rr1.js';
+import { useT } from './DEFAULT_LOCALE-CiX4W7Kr.js';
+import { ADMIN_FUNCTIONS } from './ADMIN_FUNCTIONS-DjXgvJb6.js';
+import { A as AdvisorView } from './advisor-view-CGcfMiPq.js';
+import { jsxDEV } from 'react/jsx-dev-runtime';
+
+const findingTitle = (t, finding) => ({
+  "admin-token-weak": t("Weak admin token"),
+  "auth-secret-weak": t("Weak auth secret"),
+  "cookies-insecure": t("Session cookies are not Secure"),
+  "cors-wildcard-credentials": t("Wildcard CORS with credentials"),
+  "csrf-disabled": t("CSRF/origin guard is off"),
+  "dev-args-unredacted": t("Request log keeps un-redacted args"),
+  "security-headers-disabled": t("Security headers are off"),
+  "ws-gate-open": t("Live admin subscriptions are ungated")
+})[finding.kind];
+const toFindings = (result) => Array.isArray(result.findings) ? result.findings : [];
+const findingEntity = (finding) => ({
+  "admin-token-weak": "LUNORA_ADMIN_TOKEN",
+  "auth-secret-weak": "AUTH_SECRET",
+  "cookies-insecure": "BETTER_AUTH_URL",
+  "cors-wildcard-credentials": "LUNORA_ALLOWED_ORIGINS",
+  "csrf-disabled": "LUNORA_SECURITY_CSRF",
+  "dev-args-unredacted": "request log",
+  "security-headers-disabled": "LUNORA_SECURITY_HEADERS",
+  "ws-gate-open": "LUNORA_WS_BEARER"
+})[finding.kind];
+const findingDetail = (t, finding) => ({
+  "admin-token-weak": t("Your admin token is {length} characters — use at least {min} for a brute-force-resistant secret.", {
+    length: finding.detail?.["length"],
+    min: finding.detail?.["min"]
+  }),
+  "auth-secret-weak": t("Your auth secret is {length} characters — use at least {min} (e.g. `openssl rand -hex 32`) to sign sessions safely.", {
+    length: finding.detail?.["length"],
+    min: finding.detail?.["min"]
+  }),
+  "cookies-insecure": t("BETTER_AUTH_URL is a plaintext http:// origin, so session cookies cannot be Secure and ride in cleartext. Serve auth over https:// in production."),
+  "cors-wildcard-credentials": t("LUNORA_ALLOWED_ORIGINS includes a wildcard while credentials are allowed — browsers reject this and it defeats the allowlist. Name explicit origins instead of *."),
+  "csrf-disabled": t("LUNORA_SECURITY_CSRF is off, so cross-origin state-changing cookie requests are not blocked. Re-enable it in production to keep mutations un-forgeable."),
+  "dev-args-unredacted": t("This worker reports a development environment, so the request log stores raw args and identity. Confirm it isn't a mislabeled production deploy."),
+  "security-headers-disabled": t("LUNORA_SECURITY_HEADERS is off, so HSTS, CSP, nosniff, and frame-options are not applied. Re-enable the baseline headers in production."),
+  "ws-gate-open": t("LUNORA_WS_BEARER is unset, so the WebSocket upgrade gate is open: live admin subscriptions need no credential. Set it to gate them like the HTTP admin RPCs.")
+})[finding.kind];
+const SecurityAdvisorPanel = () => {
+  const $ = c(7);
+  const t = useT();
+  let t0;
+  if ($[0] === /* @__PURE__ */ Symbol.for("react.memo_cache_sentinel")) {
+    t0 = {};
+    $[0] = t0;
+  } else {
+    t0 = $[0];
+  }
+  const {
+    data,
+    error
+  } = useAdminQuery(ADMIN_FUNCTIONS.getSecurityAudit, t0);
+  let t1;
+  if ($[1] !== data || $[2] !== t) {
+    const findings = data === void 0 ? null : toFindings(data);
+    t1 = findings === null ? null : findings.map((finding) => ({
+      description: findingDetail(t, finding),
+      entity: findingEntity(finding),
+      issueType: findingTitle(t, finding),
+      key: finding.kind,
+      level: finding.level
+    }));
+    $[1] = data;
+    $[2] = t;
+    $[3] = t1;
+  } else {
+    t1 = $[3];
+  }
+  const rows = t1;
+  let t2;
+  if ($[4] !== error || $[5] !== rows) {
+    t2 = /* @__PURE__ */ jsxDEV(AdvisorView, {
+      error,
+      rows,
+      testId: "lunora-security-advisor"
+    }, void 0, false);
+    $[4] = error;
+    $[5] = rows;
+    $[6] = t2;
+  } else {
+    t2 = $[6];
+  }
+  return t2;
+};
+
+export { SecurityAdvisorPanel as default };

package/dist/packem_shared/SettingsPanel-C2wDK-8F.js

@@ -0,0 +1,390 @@
+import { c } from 'react/compiler-runtime';
+import 'react';
+import { B as Badge } from './badge-B2PKA1-5.js';
+import { C as Card, a as CardContent } from './card-DURq3ElK.js';
+import { T as Table, a as TableHeader, b as TableRow, c as TableHead, d as TableBody, e as TableCell } from './table-_RzNvy3R.js';
+import { u as useAdminQuery } from './use-admin-query-4JQW2rr1.js';
+import { useT } from './DEFAULT_LOCALE-CiX4W7Kr.js';
+import { ADMIN_FUNCTIONS } from './ADMIN_FUNCTIONS-DjXgvJb6.js';
+import { a as CLOUDFLARE_WORKERS_URL } from './cf-links-2cktDedA.js';
+import { jsxDEV } from 'react/jsx-dev-runtime';
+
+const KIND_VARIANT = {
+  binding: "outline",
+  secret: "destructive",
+  var: "secondary"
+};
+const SettingsPanel = (t0) => {
+  const $ = c(67);
+  const {
+    initialShardKey
+  } = t0;
+  const t = useT();
+  let t1;
+  if ($[0] === /* @__PURE__ */ Symbol.for("react.memo_cache_sentinel")) {
+    t1 = {};
+    $[0] = t1;
+  } else {
+    t1 = $[0];
+  }
+  const t2 = initialShardKey ?? "";
+  let t3;
+  if ($[1] !== t2) {
+    t3 = {
+      shardKey: t2
+    };
+    $[1] = t2;
+    $[2] = t3;
+  } else {
+    t3 = $[2];
+  }
+  const {
+    data: result,
+    error,
+    isLoading: loading
+  } = useAdminQuery(ADMIN_FUNCTIONS.getSettings, t1, t3);
+  let t4;
+  bb0: {
+    const deploy = result?.deploy;
+    if (deploy === void 0) {
+      let t52;
+      if ($[3] === /* @__PURE__ */ Symbol.for("react.memo_cache_sentinel")) {
+        t52 = [];
+        $[3] = t52;
+      } else {
+        t52 = $[3];
+      }
+      t4 = t52;
+      break bb0;
+    }
+    let rows;
+    if ($[4] !== deploy.deploymentId || $[5] !== deploy.environment || $[6] !== deploy.versionTag || $[7] !== deploy.workerUrl || $[8] !== t) {
+      rows = [];
+      if (deploy.workerUrl !== void 0) {
+        let t52;
+        if ($[10] !== t) {
+          t52 = t("URL");
+          $[10] = t;
+          $[11] = t52;
+        } else {
+          t52 = $[11];
+        }
+        let t62;
+        if ($[12] !== deploy.workerUrl || $[13] !== t52) {
+          t62 = {
+            label: t52,
+            value: deploy.workerUrl
+          };
+          $[12] = deploy.workerUrl;
+          $[13] = t52;
+          $[14] = t62;
+        } else {
+          t62 = $[14];
+        }
+        rows.push(t62);
+      }
+      if (deploy.environment !== void 0) {
+        let t52;
+        if ($[15] !== t) {
+          t52 = t("Environment");
+          $[15] = t;
+          $[16] = t52;
+        } else {
+          t52 = $[16];
+        }
+        let t62;
+        if ($[17] !== deploy.environment || $[18] !== t52) {
+          t62 = {
+            label: t52,
+            value: deploy.environment
+          };
+          $[17] = deploy.environment;
+          $[18] = t52;
+          $[19] = t62;
+        } else {
+          t62 = $[19];
+        }
+        rows.push(t62);
+      }
+      if (deploy.deploymentId !== void 0) {
+        let t52;
+        if ($[20] !== t) {
+          t52 = t("Deployment");
+          $[20] = t;
+          $[21] = t52;
+        } else {
+          t52 = $[21];
+        }
+        let t62;
+        if ($[22] !== deploy.deploymentId || $[23] !== t52) {
+          t62 = {
+            label: t52,
+            value: deploy.deploymentId
+          };
+          $[22] = deploy.deploymentId;
+          $[23] = t52;
+          $[24] = t62;
+        } else {
+          t62 = $[24];
+        }
+        rows.push(t62);
+      }
+      if (deploy.versionTag !== void 0) {
+        let t52;
+        if ($[25] !== t) {
+          t52 = t("Version");
+          $[25] = t;
+          $[26] = t52;
+        } else {
+          t52 = $[26];
+        }
+        let t62;
+        if ($[27] !== deploy.versionTag || $[28] !== t52) {
+          t62 = {
+            label: t52,
+            value: deploy.versionTag
+          };
+          $[27] = deploy.versionTag;
+          $[28] = t52;
+          $[29] = t62;
+        } else {
+          t62 = $[29];
+        }
+        rows.push(t62);
+      }
+      $[4] = deploy.deploymentId;
+      $[5] = deploy.environment;
+      $[6] = deploy.versionTag;
+      $[7] = deploy.workerUrl;
+      $[8] = t;
+      $[9] = rows;
+    } else {
+      rows = $[9];
+    }
+    t4 = rows;
+  }
+  const deployRows = t4;
+  let t5;
+  if ($[30] !== result?.settings) {
+    t5 = result?.settings ?? [];
+    $[30] = result?.settings;
+    $[31] = t5;
+  } else {
+    t5 = $[31];
+  }
+  const settings = t5;
+  let t6;
+  if ($[32] !== t) {
+    t6 = t("Open in Cloudflare");
+    $[32] = t;
+    $[33] = t6;
+  } else {
+    t6 = $[33];
+  }
+  let t7;
+  if ($[34] !== t6) {
+    t7 = /* @__PURE__ */ jsxDEV("div", {
+      className: "flex flex-wrap items-center gap-3",
+      children: /* @__PURE__ */ jsxDEV("a", {
+        className: "text-sm text-primary underline-offset-4 hover:underline",
+        "data-testid": "set-cf-link",
+        href: CLOUDFLARE_WORKERS_URL,
+        rel: "noreferrer",
+        target: "_blank",
+        children: t6
+      }, void 0, false)
+    }, void 0, false);
+    $[34] = t6;
+    $[35] = t7;
+  } else {
+    t7 = $[35];
+  }
+  let t8;
+  if ($[36] !== t) {
+    t8 = t("View-only — values are masked. Edit vars, secrets, and bindings in wrangler or the Cloudflare dashboard.");
+    $[36] = t;
+    $[37] = t8;
+  } else {
+    t8 = $[37];
+  }
+  let t9;
+  if ($[38] !== t8) {
+    t9 = /* @__PURE__ */ jsxDEV("p", {
+      className: "text-sm text-muted-foreground",
+      "data-testid": "set-readonly-note",
+      children: t8
+    }, void 0, false);
+    $[38] = t8;
+    $[39] = t9;
+  } else {
+    t9 = $[39];
+  }
+  let t10;
+  if ($[40] !== error) {
+    t10 = error !== null && /* @__PURE__ */ jsxDEV("p", {
+      className: "text-sm text-destructive",
+      "data-testid": "set-error",
+      role: "alert",
+      children: error
+    }, void 0, false);
+    $[40] = error;
+    $[41] = t10;
+  } else {
+    t10 = $[41];
+  }
+  let t11;
+  if ($[42] !== deployRows || $[43] !== t) {
+    t11 = deployRows.length > 0 && /* @__PURE__ */ jsxDEV(Card, {
+      className: "py-0",
+      "data-testid": "set-deploy",
+      children: [/* @__PURE__ */ jsxDEV("header", {
+        className: "border-b border-border px-4 py-3",
+        children: /* @__PURE__ */ jsxDEV("span", {
+          className: "font-mono text-[11px] tracking-wide text-muted-foreground uppercase",
+          children: t("Deployment")
+        }, void 0, false)
+      }, void 0, false), /* @__PURE__ */ jsxDEV(CardContent, {
+        className: "py-3",
+        children: /* @__PURE__ */ jsxDEV("dl", {
+          className: "grid grid-cols-[8rem_minmax(0,1fr)] gap-x-4 gap-y-1 text-sm",
+          children: deployRows.map(_temp)
+        }, void 0, false)
+      }, void 0, false)]
+    }, void 0, true);
+    $[42] = deployRows;
+    $[43] = t;
+    $[44] = t11;
+  } else {
+    t11 = $[44];
+  }
+  let t12;
+  if ($[45] !== t) {
+    t12 = t("Environment & bindings");
+    $[45] = t;
+    $[46] = t12;
+  } else {
+    t12 = $[46];
+  }
+  let t13;
+  if ($[47] !== t12) {
+    t13 = /* @__PURE__ */ jsxDEV("header", {
+      className: "border-b border-border px-4 py-3",
+      children: /* @__PURE__ */ jsxDEV("span", {
+        className: "font-mono text-[11px] tracking-wide text-muted-foreground uppercase",
+        children: t12
+      }, void 0, false)
+    }, void 0, false);
+    $[47] = t12;
+    $[48] = t13;
+  } else {
+    t13 = $[48];
+  }
+  let t14;
+  if ($[49] !== error || $[50] !== loading || $[51] !== settings.length || $[52] !== t) {
+    t14 = error === null && !loading && settings.length === 0 && /* @__PURE__ */ jsxDEV("p", {
+      className: "px-4 py-8 text-center text-sm text-muted-foreground",
+      "data-testid": "set-empty",
+      children: t("No environment variables or bindings.")
+    }, void 0, false);
+    $[49] = error;
+    $[50] = loading;
+    $[51] = settings.length;
+    $[52] = t;
+    $[53] = t14;
+  } else {
+    t14 = $[53];
+  }
+  let t15;
+  if ($[54] !== settings || $[55] !== t) {
+    t15 = settings.length > 0 && /* @__PURE__ */ jsxDEV(CardContent, {
+      className: "px-0 py-0",
+      children: /* @__PURE__ */ jsxDEV(Table, {
+        "data-testid": "set-table",
+        children: [/* @__PURE__ */ jsxDEV(TableHeader, {
+          children: /* @__PURE__ */ jsxDEV(TableRow, {
+            children: [/* @__PURE__ */ jsxDEV(TableHead, {
+              children: t("name")
+            }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+              children: t("kind")
+            }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+              children: t("value")
+            }, void 0, false)]
+          }, void 0, true)
+        }, void 0, false), /* @__PURE__ */ jsxDEV(TableBody, {
+          children: settings.map(_temp2)
+        }, void 0, false)]
+      }, void 0, true)
+    }, void 0, false);
+    $[54] = settings;
+    $[55] = t;
+    $[56] = t15;
+  } else {
+    t15 = $[56];
+  }
+  let t16;
+  if ($[57] !== t13 || $[58] !== t14 || $[59] !== t15) {
+    t16 = /* @__PURE__ */ jsxDEV(Card, {
+      className: "py-0",
+      children: [t13, t14, t15]
+    }, void 0, true);
+    $[57] = t13;
+    $[58] = t14;
+    $[59] = t15;
+    $[60] = t16;
+  } else {
+    t16 = $[60];
+  }
+  let t17;
+  if ($[61] !== t10 || $[62] !== t11 || $[63] !== t16 || $[64] !== t7 || $[65] !== t9) {
+    t17 = /* @__PURE__ */ jsxDEV("div", {
+      className: "flex flex-col gap-4",
+      "data-testid": "lunora-settings",
+      children: [t7, t9, t10, t11, t16]
+    }, void 0, true);
+    $[61] = t10;
+    $[62] = t11;
+    $[63] = t16;
+    $[64] = t7;
+    $[65] = t9;
+    $[66] = t17;
+  } else {
+    t17 = $[66];
+  }
+  return t17;
+};
+function _temp(row) {
+  return /* @__PURE__ */ jsxDEV("div", {
+    className: "contents",
+    "data-testid": "set-deploy-row",
+    children: [/* @__PURE__ */ jsxDEV("dt", {
+      className: "text-muted-foreground",
+      children: row.label
+    }, void 0, false), /* @__PURE__ */ jsxDEV("dd", {
+      className: "truncate font-mono text-xs",
+      title: row.value,
+      children: row.value
+    }, void 0, false)]
+  }, row.label, true);
+}
+function _temp2(entry) {
+  return /* @__PURE__ */ jsxDEV(TableRow, {
+    "data-testid": "set-row",
+    children: [/* @__PURE__ */ jsxDEV(TableCell, {
+      className: "font-mono text-xs font-medium",
+      children: entry.name
+    }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+      children: /* @__PURE__ */ jsxDEV(Badge, {
+        variant: KIND_VARIANT[entry.kind],
+        children: entry.bindingType ?? entry.kind
+      }, void 0, false)
+    }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+      className: "max-w-[28ch] truncate font-mono text-xs text-muted-foreground",
+      children: entry.value ?? /* @__PURE__ */ jsxDEV("span", {
+        className: "text-muted-foreground",
+        children: "—"
+      }, void 0, false)
+    }, void 0, false)]
+  }, entry.name, true);
+}
+
+export { SettingsPanel };

package/dist/packem_shared/ShardInput-gx_DZXXn.js

@@ -0,0 +1,107 @@
+import { c } from 'react/compiler-runtime';
+import { useId, useState } from 'react';
+import { useT } from './DEFAULT_LOCALE-CiX4W7Kr.js';
+import { l as loadRecentShards } from './shard-history-DyebH1R5.js';
+import { I as Input } from './input-XH4r1Pt1.js';
+import { jsxDEV, Fragment } from 'react/jsx-dev-runtime';
+
+const ShardInput = (t0) => {
+  const $ = c(21);
+  const {
+    id,
+    onChange,
+    testId,
+    value
+  } = t0;
+  const t = useT();
+  const listId = useId();
+  const [recents] = useState(_temp);
+  let t1;
+  if ($[0] !== onChange) {
+    t1 = (event) => {
+      onChange(event.target.value);
+    };
+    $[0] = onChange;
+    $[1] = t1;
+  } else {
+    t1 = $[1];
+  }
+  const onInputChange = t1;
+  let t2;
+  if ($[2] !== t) {
+    t2 = t("Shard key");
+    $[2] = t;
+    $[3] = t2;
+  } else {
+    t2 = $[3];
+  }
+  const t3 = recents.length > 0 ? listId : void 0;
+  let t4;
+  if ($[4] !== t) {
+    t4 = t("shard key (optional)");
+    $[4] = t;
+    $[5] = t4;
+  } else {
+    t4 = $[5];
+  }
+  let t5;
+  if ($[6] !== id || $[7] !== onInputChange || $[8] !== t2 || $[9] !== t3 || $[10] !== t4 || $[11] !== testId || $[12] !== value) {
+    t5 = /* @__PURE__ */ jsxDEV(Input, {
+      "aria-label": t2,
+      className: "h-8 w-48",
+      "data-testid": testId,
+      id,
+      list: t3,
+      onChange: onInputChange,
+      placeholder: t4,
+      value
+    }, void 0, false);
+    $[6] = id;
+    $[7] = onInputChange;
+    $[8] = t2;
+    $[9] = t3;
+    $[10] = t4;
+    $[11] = testId;
+    $[12] = value;
+    $[13] = t5;
+  } else {
+    t5 = $[13];
+  }
+  let t6;
+  if ($[14] !== listId || $[15] !== recents || $[16] !== testId) {
+    t6 = recents.length > 0 && /* @__PURE__ */ jsxDEV("datalist", {
+      "data-testid": `${testId}-recents`,
+      id: listId,
+      children: recents.map(_temp2)
+    }, void 0, false);
+    $[14] = listId;
+    $[15] = recents;
+    $[16] = testId;
+    $[17] = t6;
+  } else {
+    t6 = $[17];
+  }
+  let t7;
+  if ($[18] !== t5 || $[19] !== t6) {
+    t7 = /* @__PURE__ */ jsxDEV(Fragment, {
+      children: [t5, t6]
+    }, void 0, true);
+    $[18] = t5;
+    $[19] = t6;
+    $[20] = t7;
+  } else {
+    t7 = $[20];
+  }
+  return t7;
+};
+function _temp() {
+  return loadRecentShards();
+}
+function _temp2(shard) {
+  return /* @__PURE__ */ jsxDEV("option", {
+    "aria-label": shard,
+    value: shard
+  }, shard, false);
+}
+
+export { ShardInput };

package/dist/packem_shared/SqlEditorPanel-D5wMIxcg.js

@@ -0,0 +1,13 @@
+import 'react/compiler-runtime';
+import '@lunora/react';
+import 'react';
+export { S as SqlEditorPanel } from './sql-editor-panel-Smfl_FDF.js';
+import './ShardInput-gx_DZXXn.js';
+import './table-_RzNvy3R.js';
+import './DEFAULT_LOCALE-CiX4W7Kr.js';
+import './ADMIN_FUNCTIONS-DjXgvJb6.js';
+import './internal-rXJEAhXS.js';
+import './shard-history-DyebH1R5.js';
+import './data-grid-B5CaV3wS.js';
+import './grid-features-CzUfqgsM.js';
+import 'react/jsx-dev-runtime';

package/dist/packem_shared/Studio-DpgYe4qt.js

@@ -0,0 +1,33 @@
+import 'react/compiler-runtime';
+import '@tanstack/react-router';
+import 'react';
+export { S as Studio } from './studio-9Mq0PdMi.js';
+import './ErrorBoundary-BzAApI7J.js';
+import './badge-B2PKA1-5.js';
+import './input-XH4r1Pt1.js';
+import './reference-view-B4E49Lip.js';
+import './InsightsPanel-CvXMoZuv.js';
+import './SecurityAdvisorPanel-DTmjUNqt.js';
+import './ApiTab-rwttyQ1-.js';
+import './TableEditor-DzK3Z6rL.js';
+import './ExportImportPanel-BGJqFK9X.js';
+import './MigrationsPanel-DaZuUHje.js';
+import './PitrPanel-LJGNP_IX.js';
+import './FunctionRunner-7NH3KcTg.js';
+import './FunctionStatsPanel-CXynSuqT.js';
+import './HomePanel-BOkFRbuj.js';
+import './AuditPanel-D9Eh7j7E.js';
+import './LogsPanel-BrUstOk6.js';
+import './MailPanel-GnnrNqL6.js';
+import './HealthPanel-CyLs7qZm.js';
+import './MetricsPanel-BN_uUU-_.js';
+import './SchemaViewer-Bam6ylvw.js';
+import './SettingsPanel-C2wDK-8F.js';
+import './sql-editor-panel-Smfl_FDF.js';
+import './FileBrowser-0pCpdKPE.js';
+import './DEFAULT_LOCALE-CiX4W7Kr.js';
+import './StudioI18nProvider-B-tDCZIi.js';
+import './internal-rXJEAhXS.js';
+import './utils-B05Dmz_H.js';
+import './CommandPalette-BtgkBzZI.js';
+import 'react/jsx-dev-runtime';