@lunora/studio 1.0.0-alpha.30 → 1.0.0-alpha.301

package/dist/packem_chunks/SecurityAdvisorPanel.js

@@ -1,92 +0,0 @@
-import { c } from 'react/compiler-runtime';
-import { u as useAdminQuery } from '../packem_shared/use-admin-query-BViPA3US.js';
-import { useT } from '../packem_shared/DEFAULT_LOCALE-CiX4W7Kr.js';
-import { ADMIN_FUNCTIONS } from '../packem_shared/ADMIN_FUNCTIONS-CdaxLGkE.js';
-import { A as AdvisorView } from '../packem_shared/advisor-view-DzqyvUU3.js';
-import { jsxDEV } from 'react/jsx-dev-runtime';
-
-const findingTitle = (t, finding) => ({
-  "admin-token-weak": t("Weak admin token"),
-  "auth-secret-weak": t("Weak auth secret"),
-  "cookies-insecure": t("Session cookies are not Secure"),
-  "cors-wildcard-credentials": t("Wildcard CORS with credentials"),
-  "csrf-disabled": t("CSRF/origin guard is off"),
-  "dev-args-unredacted": t("Request log keeps un-redacted args"),
-  "security-headers-disabled": t("Security headers are off"),
-  "ws-gate-open": t("Live admin subscriptions are ungated")
-})[finding.kind];
-const toFindings = (result) => Array.isArray(result.findings) ? result.findings : [];
-const findingEntity = (finding) => ({
-  "admin-token-weak": "LUNORA_ADMIN_TOKEN",
-  "auth-secret-weak": "AUTH_SECRET",
-  "cookies-insecure": "BETTER_AUTH_URL",
-  "cors-wildcard-credentials": "LUNORA_ALLOWED_ORIGINS",
-  "csrf-disabled": "LUNORA_SECURITY_CSRF",
-  "dev-args-unredacted": "request log",
-  "security-headers-disabled": "LUNORA_SECURITY_HEADERS",
-  "ws-gate-open": "LUNORA_WS_BEARER"
-})[finding.kind];
-const findingDetail = (t, finding) => ({
-  "admin-token-weak": t("Your admin token is {length} characters — use at least {min} for a brute-force-resistant secret.", {
-    length: finding.detail?.["length"],
-    min: finding.detail?.["min"]
-  }),
-  "auth-secret-weak": t("Your auth secret is {length} characters — use at least {min} (e.g. `openssl rand -hex 32`) to sign sessions safely.", {
-    length: finding.detail?.["length"],
-    min: finding.detail?.["min"]
-  }),
-  "cookies-insecure": t("BETTER_AUTH_URL is a plaintext http:// origin, so session cookies cannot be Secure and ride in cleartext. Serve auth over https:// in production."),
-  "cors-wildcard-credentials": t("LUNORA_ALLOWED_ORIGINS includes a wildcard while credentials are allowed — browsers reject this and it defeats the allowlist. Name explicit origins instead of *."),
-  "csrf-disabled": t("LUNORA_SECURITY_CSRF is off, so cross-origin state-changing cookie requests are not blocked. Re-enable it in production to keep mutations un-forgeable."),
-  "dev-args-unredacted": t("This worker reports a development environment, so the request log stores raw args and identity. Confirm it isn't a mislabeled production deploy."),
-  "security-headers-disabled": t("LUNORA_SECURITY_HEADERS is off, so HSTS, CSP, nosniff, and frame-options are not applied. Re-enable the baseline headers in production."),
-  "ws-gate-open": t("LUNORA_WS_BEARER is unset, so the WebSocket upgrade gate is open: live admin subscriptions need no credential. Set it to gate them like the HTTP admin RPCs.")
-})[finding.kind];
-const SecurityAdvisorPanel = () => {
-  const $ = c(7);
-  const t = useT();
-  let t0;
-  if ($[0] === /* @__PURE__ */ Symbol.for("react.memo_cache_sentinel")) {
-    t0 = {};
-    $[0] = t0;
-  } else {
-    t0 = $[0];
-  }
-  const {
-    data,
-    error
-  } = useAdminQuery(ADMIN_FUNCTIONS.getSecurityAudit, t0);
-  let t1;
-  if ($[1] !== data || $[2] !== t) {
-    const findings = data === void 0 ? null : toFindings(data);
-    t1 = findings === null ? null : findings.map((finding) => ({
-      description: findingDetail(t, finding),
-      entity: findingEntity(finding),
-      issueType: findingTitle(t, finding),
-      key: finding.kind,
-      level: finding.level
-    }));
-    $[1] = data;
-    $[2] = t;
-    $[3] = t1;
-  } else {
-    t1 = $[3];
-  }
-  const rows = t1;
-  let t2;
-  if ($[4] !== error || $[5] !== rows) {
-    t2 = /* @__PURE__ */ jsxDEV(AdvisorView, {
-      error,
-      rows,
-      testId: "lunora-security-advisor"
-    }, void 0, false);
-    $[4] = error;
-    $[5] = rows;
-    $[6] = t2;
-  } else {
-    t2 = $[6];
-  }
-  return t2;
-};
-
-export { SecurityAdvisorPanel as default };

package/dist/packem_chunks/SettingsPanel.js

@@ -1,390 +0,0 @@
-import { c } from 'react/compiler-runtime';
-import 'react';
-import { B as Badge } from '../packem_shared/badge-B2PKA1-5.js';
-import { C as Card, a as CardContent } from '../packem_shared/card-DURq3ElK.js';
-import { T as Table, a as TableHeader, b as TableRow, c as TableHead, d as TableBody, e as TableCell } from '../packem_shared/table-DsCa9Qp9.js';
-import { u as useAdminQuery } from '../packem_shared/use-admin-query-BViPA3US.js';
-import { useT } from '../packem_shared/DEFAULT_LOCALE-CiX4W7Kr.js';
-import { ADMIN_FUNCTIONS } from '../packem_shared/ADMIN_FUNCTIONS-CdaxLGkE.js';
-import { b as CLOUDFLARE_WORKERS_URL } from '../packem_shared/cf-links-BZfRdxSE.js';
-import { jsxDEV } from 'react/jsx-dev-runtime';
-
-const KIND_VARIANT = {
-  binding: "outline",
-  secret: "destructive",
-  var: "secondary"
-};
-const SettingsPanel = (t0) => {
-  const $ = c(67);
-  const {
-    initialShardKey
-  } = t0;
-  const t = useT();
-  let t1;
-  if ($[0] === /* @__PURE__ */ Symbol.for("react.memo_cache_sentinel")) {
-    t1 = {};
-    $[0] = t1;
-  } else {
-    t1 = $[0];
-  }
-  const t2 = initialShardKey ?? "";
-  let t3;
-  if ($[1] !== t2) {
-    t3 = {
-      shardKey: t2
-    };
-    $[1] = t2;
-    $[2] = t3;
-  } else {
-    t3 = $[2];
-  }
-  const {
-    data: result,
-    error,
-    isLoading: loading
-  } = useAdminQuery(ADMIN_FUNCTIONS.getSettings, t1, t3);
-  let t4;
-  bb0: {
-    const deploy = result?.deploy;
-    if (deploy === void 0) {
-      let t52;
-      if ($[3] === /* @__PURE__ */ Symbol.for("react.memo_cache_sentinel")) {
-        t52 = [];
-        $[3] = t52;
-      } else {
-        t52 = $[3];
-      }
-      t4 = t52;
-      break bb0;
-    }
-    let rows;
-    if ($[4] !== deploy.deploymentId || $[5] !== deploy.environment || $[6] !== deploy.versionTag || $[7] !== deploy.workerUrl || $[8] !== t) {
-      rows = [];
-      if (deploy.workerUrl !== void 0) {
-        let t52;
-        if ($[10] !== t) {
-          t52 = t("URL");
-          $[10] = t;
-          $[11] = t52;
-        } else {
-          t52 = $[11];
-        }
-        let t62;
-        if ($[12] !== deploy.workerUrl || $[13] !== t52) {
-          t62 = {
-            label: t52,
-            value: deploy.workerUrl
-          };
-          $[12] = deploy.workerUrl;
-          $[13] = t52;
-          $[14] = t62;
-        } else {
-          t62 = $[14];
-        }
-        rows.push(t62);
-      }
-      if (deploy.environment !== void 0) {
-        let t52;
-        if ($[15] !== t) {
-          t52 = t("Environment");
-          $[15] = t;
-          $[16] = t52;
-        } else {
-          t52 = $[16];
-        }
-        let t62;
-        if ($[17] !== deploy.environment || $[18] !== t52) {
-          t62 = {
-            label: t52,
-            value: deploy.environment
-          };
-          $[17] = deploy.environment;
-          $[18] = t52;
-          $[19] = t62;
-        } else {
-          t62 = $[19];
-        }
-        rows.push(t62);
-      }
-      if (deploy.deploymentId !== void 0) {
-        let t52;
-        if ($[20] !== t) {
-          t52 = t("Deployment");
-          $[20] = t;
-          $[21] = t52;
-        } else {
-          t52 = $[21];
-        }
-        let t62;
-        if ($[22] !== deploy.deploymentId || $[23] !== t52) {
-          t62 = {
-            label: t52,
-            value: deploy.deploymentId
-          };
-          $[22] = deploy.deploymentId;
-          $[23] = t52;
-          $[24] = t62;
-        } else {
-          t62 = $[24];
-        }
-        rows.push(t62);
-      }
-      if (deploy.versionTag !== void 0) {
-        let t52;
-        if ($[25] !== t) {
-          t52 = t("Version");
-          $[25] = t;
-          $[26] = t52;
-        } else {
-          t52 = $[26];
-        }
-        let t62;
-        if ($[27] !== deploy.versionTag || $[28] !== t52) {
-          t62 = {
-            label: t52,
-            value: deploy.versionTag
-          };
-          $[27] = deploy.versionTag;
-          $[28] = t52;
-          $[29] = t62;
-        } else {
-          t62 = $[29];
-        }
-        rows.push(t62);
-      }
-      $[4] = deploy.deploymentId;
-      $[5] = deploy.environment;
-      $[6] = deploy.versionTag;
-      $[7] = deploy.workerUrl;
-      $[8] = t;
-      $[9] = rows;
-    } else {
-      rows = $[9];
-    }
-    t4 = rows;
-  }
-  const deployRows = t4;
-  let t5;
-  if ($[30] !== result?.settings) {
-    t5 = result?.settings ?? [];
-    $[30] = result?.settings;
-    $[31] = t5;
-  } else {
-    t5 = $[31];
-  }
-  const settings = t5;
-  let t6;
-  if ($[32] !== t) {
-    t6 = t("Open in Cloudflare");
-    $[32] = t;
-    $[33] = t6;
-  } else {
-    t6 = $[33];
-  }
-  let t7;
-  if ($[34] !== t6) {
-    t7 = /* @__PURE__ */ jsxDEV("div", {
-      className: "flex flex-wrap items-center gap-3",
-      children: /* @__PURE__ */ jsxDEV("a", {
-        className: "text-sm text-primary underline-offset-4 hover:underline",
-        "data-testid": "set-cf-link",
-        href: CLOUDFLARE_WORKERS_URL,
-        rel: "noreferrer",
-        target: "_blank",
-        children: t6
-      }, void 0, false)
-    }, void 0, false);
-    $[34] = t6;
-    $[35] = t7;
-  } else {
-    t7 = $[35];
-  }
-  let t8;
-  if ($[36] !== t) {
-    t8 = t("View-only — values are masked. Edit vars, secrets, and bindings in wrangler or the Cloudflare dashboard.");
-    $[36] = t;
-    $[37] = t8;
-  } else {
-    t8 = $[37];
-  }
-  let t9;
-  if ($[38] !== t8) {
-    t9 = /* @__PURE__ */ jsxDEV("p", {
-      className: "text-sm text-muted-foreground",
-      "data-testid": "set-readonly-note",
-      children: t8
-    }, void 0, false);
-    $[38] = t8;
-    $[39] = t9;
-  } else {
-    t9 = $[39];
-  }
-  let t10;
-  if ($[40] !== error) {
-    t10 = error !== null && /* @__PURE__ */ jsxDEV("p", {
-      className: "text-sm text-destructive",
-      "data-testid": "set-error",
-      role: "alert",
-      children: error
-    }, void 0, false);
-    $[40] = error;
-    $[41] = t10;
-  } else {
-    t10 = $[41];
-  }
-  let t11;
-  if ($[42] !== deployRows || $[43] !== t) {
-    t11 = deployRows.length > 0 && /* @__PURE__ */ jsxDEV(Card, {
-      className: "py-0",
-      "data-testid": "set-deploy",
-      children: [/* @__PURE__ */ jsxDEV("header", {
-        className: "border-b border-border px-4 py-3",
-        children: /* @__PURE__ */ jsxDEV("span", {
-          className: "font-mono text-[11px] tracking-wide text-muted-foreground uppercase",
-          children: t("Deployment")
-        }, void 0, false)
-      }, void 0, false), /* @__PURE__ */ jsxDEV(CardContent, {
-        className: "py-3",
-        children: /* @__PURE__ */ jsxDEV("dl", {
-          className: "grid grid-cols-[8rem_minmax(0,1fr)] gap-x-4 gap-y-1 text-sm",
-          children: deployRows.map(_temp)
-        }, void 0, false)
-      }, void 0, false)]
-    }, void 0, true);
-    $[42] = deployRows;
-    $[43] = t;
-    $[44] = t11;
-  } else {
-    t11 = $[44];
-  }
-  let t12;
-  if ($[45] !== t) {
-    t12 = t("Environment & bindings");
-    $[45] = t;
-    $[46] = t12;
-  } else {
-    t12 = $[46];
-  }
-  let t13;
-  if ($[47] !== t12) {
-    t13 = /* @__PURE__ */ jsxDEV("header", {
-      className: "border-b border-border px-4 py-3",
-      children: /* @__PURE__ */ jsxDEV("span", {
-        className: "font-mono text-[11px] tracking-wide text-muted-foreground uppercase",
-        children: t12
-      }, void 0, false)
-    }, void 0, false);
-    $[47] = t12;
-    $[48] = t13;
-  } else {
-    t13 = $[48];
-  }
-  let t14;
-  if ($[49] !== error || $[50] !== loading || $[51] !== settings.length || $[52] !== t) {
-    t14 = error === null && !loading && settings.length === 0 && /* @__PURE__ */ jsxDEV("p", {
-      className: "px-4 py-8 text-center text-sm text-muted-foreground",
-      "data-testid": "set-empty",
-      children: t("No environment variables or bindings.")
-    }, void 0, false);
-    $[49] = error;
-    $[50] = loading;
-    $[51] = settings.length;
-    $[52] = t;
-    $[53] = t14;
-  } else {
-    t14 = $[53];
-  }
-  let t15;
-  if ($[54] !== settings || $[55] !== t) {
-    t15 = settings.length > 0 && /* @__PURE__ */ jsxDEV(CardContent, {
-      className: "px-0 py-0",
-      children: /* @__PURE__ */ jsxDEV(Table, {
-        "data-testid": "set-table",
-        children: [/* @__PURE__ */ jsxDEV(TableHeader, {
-          children: /* @__PURE__ */ jsxDEV(TableRow, {
-            children: [/* @__PURE__ */ jsxDEV(TableHead, {
-              children: t("name")
-            }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
-              children: t("kind")
-            }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
-              children: t("value")
-            }, void 0, false)]
-          }, void 0, true)
-        }, void 0, false), /* @__PURE__ */ jsxDEV(TableBody, {
-          children: settings.map(_temp2)
-        }, void 0, false)]
-      }, void 0, true)
-    }, void 0, false);
-    $[54] = settings;
-    $[55] = t;
-    $[56] = t15;
-  } else {
-    t15 = $[56];
-  }
-  let t16;
-  if ($[57] !== t13 || $[58] !== t14 || $[59] !== t15) {
-    t16 = /* @__PURE__ */ jsxDEV(Card, {
-      className: "py-0",
-      children: [t13, t14, t15]
-    }, void 0, true);
-    $[57] = t13;
-    $[58] = t14;
-    $[59] = t15;
-    $[60] = t16;
-  } else {
-    t16 = $[60];
-  }
-  let t17;
-  if ($[61] !== t10 || $[62] !== t11 || $[63] !== t16 || $[64] !== t7 || $[65] !== t9) {
-    t17 = /* @__PURE__ */ jsxDEV("div", {
-      className: "flex flex-col gap-4",
-      "data-testid": "lunora-settings",
-      children: [t7, t9, t10, t11, t16]
-    }, void 0, true);
-    $[61] = t10;
-    $[62] = t11;
-    $[63] = t16;
-    $[64] = t7;
-    $[65] = t9;
-    $[66] = t17;
-  } else {
-    t17 = $[66];
-  }
-  return t17;
-};
-function _temp(row) {
-  return /* @__PURE__ */ jsxDEV("div", {
-    className: "contents",
-    "data-testid": "set-deploy-row",
-    children: [/* @__PURE__ */ jsxDEV("dt", {
-      className: "text-muted-foreground",
-      children: row.label
-    }, void 0, false), /* @__PURE__ */ jsxDEV("dd", {
-      className: "truncate font-mono text-xs",
-      title: row.value,
-      children: row.value
-    }, void 0, false)]
-  }, row.label, true);
-}
-function _temp2(entry) {
-  return /* @__PURE__ */ jsxDEV(TableRow, {
-    "data-testid": "set-row",
-    children: [/* @__PURE__ */ jsxDEV(TableCell, {
-      className: "font-mono text-xs font-medium",
-      children: entry.name
-    }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
-      children: /* @__PURE__ */ jsxDEV(Badge, {
-        variant: KIND_VARIANT[entry.kind],
-        children: entry.bindingType ?? entry.kind
-      }, void 0, false)
-    }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
-      className: "max-w-[28ch] truncate font-mono text-xs text-muted-foreground",
-      children: entry.value ?? /* @__PURE__ */ jsxDEV("span", {
-        className: "text-muted-foreground",
-        children: "—"
-      }, void 0, false)
-    }, void 0, false)]
-  }, entry.name, true);
-}
-
-export { SettingsPanel };