@lunora/vite 1.0.0-alpha.4 → 1.0.0-alpha.40

package/dist/index.d.mts

@@ -14,6 +14,15 @@ type CloudflarePluginOptions = Record<string, unknown>;
 */
 type OverlayPluginOptions = NonNullable<Parameters<typeof errorOverlayPlugin>[0]>;
 interface LunoraPluginOptions {
+  /**
+  * Allow a client-named NON-default shard / cross-shard fan-out WITHOUT an
+  * `authorizeShard`/`authorizeFanOut` callback. The auto-composed class-A worker
+  * (`virtual:lunora/worker`) default-denies such access (403 `FORBIDDEN_SHARD`);
+  * set this `true` to opt into open access — only safe when every table is
+  * protected by per-row RLS. A production sharded app should configure
+  * `authorizeShard` instead (via a hand-written class-B worker). Defaults to `false`.
+  */
+  allowUnauthenticatedShardAccess?: boolean;
   /**
   * Which machine-readable API spec(s) codegen emits into `_generated/`.
   * `"openapi"` (default) writes `openapi.json` (OpenAPI 3.1; RPC + REST),
@@ -43,6 +52,7 @@ interface LunoraPluginOptions {
 }
 /** Resolved options after merging defaults. */
 interface ResolvedLunoraPluginOptions {
+  allowUnauthenticatedShardAccess: boolean;
   apiSpec: NonNullable<CodegenOptions["apiSpec"]>;
   cloudflare: false | CloudflarePluginOptions;
   generatedDir: string;
@@ -63,6 +73,23 @@ type LunoraPlugins = Plugin[];
 * inside the lunora schema directory.
 */
 declare const codegenPlugin: (options: ResolvedLunoraPluginOptions) => Plugin;
+/**
+* Dev-only plugin that tails the local dev containers' own stdout/stderr in the
+* Vite terminal.
+*
+* `@cloudflare/vite-plugin` builds and runs each declared container locally via
+* Docker (image `cloudflare-dev/&lt;class>:&lt;id>`) but only forwards the *worker's*
+* console — the container process's own output is otherwise invisible. This
+* plugin attaches to those Docker log streams (via `@lunora/config`'s
+* `streamContainerLogs`, which lazy-loads `dockerode`) and prints each line
+* through Vite's logger, branded and tagged `container:&lt;name>`.
+*
+* A no-op when the project declares no containers (the common case): discovery
+* returns an empty list, so `dockerode` is never imported and no Docker work
+* starts. Set `LUNORA_CONTAINER_LOGS=0` to opt out. A missing/stopped Docker
+* engine degrades to a single warning rather than breaking dev.
+*/
+declare const containerLogsPlugin: (options: ResolvedLunoraPluginOptions) => Plugin;
 interface ReconcileResult {
   /** `true` when `wrangler.jsonc` was rewritten. */
   changed: boolean;
@@ -87,13 +114,20 @@ interface ReconcileResult {
 */
 declare const reconcileWranglerCrons: (projectRoot: string, cronTriggers: ReadonlyArray<string>) => ReconcileResult;
 /**
-* Dev-only Vite plugin that offers to scaffold `.dev.vars` before the worker
-* boots. `@cloudflare/vite-plugin` loads `.dev.vars` into the worker's `env`,
-* but the file is gitignored — so a fresh clone has none and the worker throws
-* on the first required secret (e.g. `AUTH_SECRET is required`). When a
-* `.dev.vars.example` exists, we prompt to generate `.dev.vars` from it with
-* secrets auto-filled. Identical behaviour to `lunora dev` — both call
-* `ensureDevVariables` from `@lunora/config`.
+* Dev-only Vite plugin that prepares `.dev.vars` before the worker boots.
+* `@cloudflare/vite-plugin` loads `.dev.vars` into the worker's `env`, but the
+* file is gitignored — so a fresh clone has none and the worker throws on the
+* first required secret (e.g. `AUTH_SECRET is required`). Two steps, both shared
+* with `lunora dev` via `@lunora/config`.
+*
+* First, {@link ensureDevVariables}: when a `.dev.vars.example` exists, prompt
+* to generate `.dev.vars` from it with secrets auto-filled. Second,
+* {@link fillDevSecrets}: fill any empty/placeholder secret already in
+* `.dev.vars` (a `lunora add`-scaffolded project writes secrets blank) and
+* ensure `LUNORA_ADMIN_TOKEN` is present + generated — so the worker boots with
+* working secrets and the Studio authenticates without its login gate. No
+* prompt: it only generates locally-derivable values and never overwrites a real
+* one.
 *
 * Runs in `configResolved` (awaited by Vite) so it completes before the
 * Cloudflare plugin reads the file. Non-interactive runs decline silently.
@@ -198,7 +232,7 @@ declare const isAutoComposable: (context: LunoraPluginContext) => boolean;
 * virtual module id. Absolute paths are resolved correctly in all environments
 * (Vite 8 + rolldown 1.x confirmed).
 */
-declare const buildWorkerEntrySource: (framework: DetectedFramework, generatedImportBase: string, hasContainers?: boolean) => string;
+declare const buildWorkerEntrySource: (framework: DetectedFramework, generatedImportBase: string, hasContainers?: boolean, useUmbrella?: boolean, allowUnauthenticatedShardAccess?: boolean) => string;
 /**
 * Vite plugin that auto-composes a detected class-A meta-framework's SSR
 * handler with Lunora into one Cloudflare Worker (PLAN4 §2.4 / §3 class-A row).
@@ -281,6 +315,35 @@ declare const withRemoteBindings: (options: CloudflarePluginOptions, isServe: ()
 * the build/close path). Idempotent cleanup means firing on both is safe.
 */
 declare const remoteBindingsCleanupPlugin: (cleanup: () => void) => Plugin;
+/**
+* A `@visulima/vite-overlay` solution finder. Derived from the overlay's own
+* options type so the shape can't drift from the installed package. The overlay
+* runs every finder it's given (custom finders first, then its built-ins),
+* sorted by `priority` descending, and shows the first non-`undefined` result.
+*
+* Note: this type (and {@link Solution}) is re-exported from `@lunora/vite` and
+* intentionally tracks the installed `@visulima/vite-overlay` — if a future
+* overlay release changes the finder contract, that surfaces here as a compile
+* error rather than a silent drift.
+*/
+type SolutionFinder = NonNullable<OverlayPluginOptions["solutionFinders"]>[number];
+/** What a finder may return: a Markdown-rendered `{ header?, body }`, or `undefined` to defer. */
+type Solution = NonNullable<Awaited<ReturnType<SolutionFinder["handle"]>>>;
+/**
+* Lunora's solution finder for the dev error overlay. A single finder that
+* delegates to `@lunora/codegen`'s shared rule table (the same table the
+* standalone `lunora dev` CLI prints to the terminal) and returns the first
+* match — so one `priority` slot covers every Lunora rule and the overlay's
+* built-in finders still run for anything we don't recognize (we return
+* `undefined`).
+*
+* Priority is high so a Lunora-specific hint wins over the overlay's generic
+* finder for the same error; a user's own finder can still outrank it with a
+* higher `priority`.
+*/
+declare const lunoraSolutionFinder: SolutionFinder;
+/** The finders Lunora injects into the overlay by default. */
+declare const lunoraSolutionFinders: ReadonlyArray<SolutionFinder>;
 /** Dev-server path the studio SPA is served from. */
 declare const STUDIO_PATH = "/__lunora";
 /** Static asset routes the studio document references. */
@@ -358,6 +421,17 @@ declare const withWorkerStartupHint: (plugins: ReadonlyArray<Plugin>) => Plugin[
 */
 declare const wranglerValidatorPlugin: (options: ResolvedLunoraPluginOptions) => Plugin;
 /**
+* Resolve the `overlay` toggle into the overlay plugin's options — or `false` to
+* skip it. Lunora's solution finders are **prepended** so they run before the
+* overlay's built-ins; a user's own finders are appended and can still win per
+* error via a strictly higher `priority` (equal priority keeps Lunora first,
+* since the overlay sorts stably). Lunora also forwards both `error` AND `warn`
+* console calls by default (the overlay's own default is `["error"]` only) so
+* Lunora's branded `warn` advisories surface in the browser too — the user can
+* override `forwardedConsoleMethods`.
+*/
+declare const resolveOverlayOption: (overlay: LunoraPluginOptions["overlay"]) => false | OverlayPluginOptions;
+/**
 * Lunora Vite plugin. Returns a flat array of Vite plugins that:
 *
 * 1. Run `@lunora/codegen` on startup + on schema file changes.
@@ -371,4 +445,4 @@ declare const wranglerValidatorPlugin: (options: ResolvedLunoraPluginOptions) =>
 */
 declare const lunora: (options?: LunoraPluginOptions) => LunoraPlugins;
 declare const VERSION = "0.0.0";
-export { CLASS_A_WIRING, type ClassAWiring, type CloudflarePluginOptions, DEV_WORKER_ENV_VALUE, DEV_WORKER_ENV_VAR, LUNORA_WORKER_VIRTUAL_ID, type LunoraPluginOptions, type LunoraPlugins, type OverlayPluginOptions, type PlanViteRemoteOptions, type ReconcileResult, type ResolvedLunoraPluginOptions, STUDIO_PATH, VERSION, type ViteRemotePlan, WORKER_STARTUP_HINT, augmentWorkerStartupError, buildStudioUrl, buildWorkerEntrySource, codegenPlugin, createCommandProbe, devVariablesPlugin, frameworkComposePlugin, isAutoComposable, isWorkerEntryEvalError, logStreamPlugin, lunora, planViteRemoteBindings, reconcileWranglerCrons, remoteBindingsCleanupPlugin, studioPlugin, withDevWorkerEnv, withRemoteBindings, withWorkerStartupHint, wranglerValidatorPlugin };
+export { CLASS_A_WIRING, type ClassAWiring, type CloudflarePluginOptions, DEV_WORKER_ENV_VALUE, DEV_WORKER_ENV_VAR, LUNORA_WORKER_VIRTUAL_ID, type LunoraPluginOptions, type LunoraPlugins, type OverlayPluginOptions, type PlanViteRemoteOptions, type ReconcileResult, type ResolvedLunoraPluginOptions, STUDIO_PATH, type Solution, type SolutionFinder, VERSION, type ViteRemotePlan, WORKER_STARTUP_HINT, augmentWorkerStartupError, buildStudioUrl, buildWorkerEntrySource, codegenPlugin, containerLogsPlugin, createCommandProbe, devVariablesPlugin, frameworkComposePlugin, isAutoComposable, isWorkerEntryEvalError, logStreamPlugin, lunora, lunoraSolutionFinder, lunoraSolutionFinders, planViteRemoteBindings, reconcileWranglerCrons, remoteBindingsCleanupPlugin, resolveOverlayOption, studioPlugin, withDevWorkerEnv, withRemoteBindings, withWorkerStartupHint, wranglerValidatorPlugin };

package/dist/index.d.ts

@@ -14,6 +14,15 @@ type CloudflarePluginOptions = Record<string, unknown>;
 */
 type OverlayPluginOptions = NonNullable<Parameters<typeof errorOverlayPlugin>[0]>;
 interface LunoraPluginOptions {
+  /**
+  * Allow a client-named NON-default shard / cross-shard fan-out WITHOUT an
+  * `authorizeShard`/`authorizeFanOut` callback. The auto-composed class-A worker
+  * (`virtual:lunora/worker`) default-denies such access (403 `FORBIDDEN_SHARD`);
+  * set this `true` to opt into open access — only safe when every table is
+  * protected by per-row RLS. A production sharded app should configure
+  * `authorizeShard` instead (via a hand-written class-B worker). Defaults to `false`.
+  */
+  allowUnauthenticatedShardAccess?: boolean;
   /**
   * Which machine-readable API spec(s) codegen emits into `_generated/`.
   * `"openapi"` (default) writes `openapi.json` (OpenAPI 3.1; RPC + REST),
@@ -43,6 +52,7 @@ interface LunoraPluginOptions {
 }
 /** Resolved options after merging defaults. */
 interface ResolvedLunoraPluginOptions {
+  allowUnauthenticatedShardAccess: boolean;
   apiSpec: NonNullable<CodegenOptions["apiSpec"]>;
   cloudflare: false | CloudflarePluginOptions;
   generatedDir: string;
@@ -63,6 +73,23 @@ type LunoraPlugins = Plugin[];
 * inside the lunora schema directory.
 */
 declare const codegenPlugin: (options: ResolvedLunoraPluginOptions) => Plugin;
+/**
+* Dev-only plugin that tails the local dev containers' own stdout/stderr in the
+* Vite terminal.
+*
+* `@cloudflare/vite-plugin` builds and runs each declared container locally via
+* Docker (image `cloudflare-dev/&lt;class>:&lt;id>`) but only forwards the *worker's*
+* console — the container process's own output is otherwise invisible. This
+* plugin attaches to those Docker log streams (via `@lunora/config`'s
+* `streamContainerLogs`, which lazy-loads `dockerode`) and prints each line
+* through Vite's logger, branded and tagged `container:&lt;name>`.
+*
+* A no-op when the project declares no containers (the common case): discovery
+* returns an empty list, so `dockerode` is never imported and no Docker work
+* starts. Set `LUNORA_CONTAINER_LOGS=0` to opt out. A missing/stopped Docker
+* engine degrades to a single warning rather than breaking dev.
+*/
+declare const containerLogsPlugin: (options: ResolvedLunoraPluginOptions) => Plugin;
 interface ReconcileResult {
   /** `true` when `wrangler.jsonc` was rewritten. */
   changed: boolean;
@@ -87,13 +114,20 @@ interface ReconcileResult {
 */
 declare const reconcileWranglerCrons: (projectRoot: string, cronTriggers: ReadonlyArray<string>) => ReconcileResult;
 /**
-* Dev-only Vite plugin that offers to scaffold `.dev.vars` before the worker
-* boots. `@cloudflare/vite-plugin` loads `.dev.vars` into the worker's `env`,
-* but the file is gitignored — so a fresh clone has none and the worker throws
-* on the first required secret (e.g. `AUTH_SECRET is required`). When a
-* `.dev.vars.example` exists, we prompt to generate `.dev.vars` from it with
-* secrets auto-filled. Identical behaviour to `lunora dev` — both call
-* `ensureDevVariables` from `@lunora/config`.
+* Dev-only Vite plugin that prepares `.dev.vars` before the worker boots.
+* `@cloudflare/vite-plugin` loads `.dev.vars` into the worker's `env`, but the
+* file is gitignored — so a fresh clone has none and the worker throws on the
+* first required secret (e.g. `AUTH_SECRET is required`). Two steps, both shared
+* with `lunora dev` via `@lunora/config`.
+*
+* First, {@link ensureDevVariables}: when a `.dev.vars.example` exists, prompt
+* to generate `.dev.vars` from it with secrets auto-filled. Second,
+* {@link fillDevSecrets}: fill any empty/placeholder secret already in
+* `.dev.vars` (a `lunora add`-scaffolded project writes secrets blank) and
+* ensure `LUNORA_ADMIN_TOKEN` is present + generated — so the worker boots with
+* working secrets and the Studio authenticates without its login gate. No
+* prompt: it only generates locally-derivable values and never overwrites a real
+* one.
 *
 * Runs in `configResolved` (awaited by Vite) so it completes before the
 * Cloudflare plugin reads the file. Non-interactive runs decline silently.
@@ -198,7 +232,7 @@ declare const isAutoComposable: (context: LunoraPluginContext) => boolean;
 * virtual module id. Absolute paths are resolved correctly in all environments
 * (Vite 8 + rolldown 1.x confirmed).
 */
-declare const buildWorkerEntrySource: (framework: DetectedFramework, generatedImportBase: string, hasContainers?: boolean) => string;
+declare const buildWorkerEntrySource: (framework: DetectedFramework, generatedImportBase: string, hasContainers?: boolean, useUmbrella?: boolean, allowUnauthenticatedShardAccess?: boolean) => string;
 /**
 * Vite plugin that auto-composes a detected class-A meta-framework's SSR
 * handler with Lunora into one Cloudflare Worker (PLAN4 §2.4 / §3 class-A row).
@@ -281,6 +315,35 @@ declare const withRemoteBindings: (options: CloudflarePluginOptions, isServe: ()
 * the build/close path). Idempotent cleanup means firing on both is safe.
 */
 declare const remoteBindingsCleanupPlugin: (cleanup: () => void) => Plugin;
+/**
+* A `@visulima/vite-overlay` solution finder. Derived from the overlay's own
+* options type so the shape can't drift from the installed package. The overlay
+* runs every finder it's given (custom finders first, then its built-ins),
+* sorted by `priority` descending, and shows the first non-`undefined` result.
+*
+* Note: this type (and {@link Solution}) is re-exported from `@lunora/vite` and
+* intentionally tracks the installed `@visulima/vite-overlay` — if a future
+* overlay release changes the finder contract, that surfaces here as a compile
+* error rather than a silent drift.
+*/
+type SolutionFinder = NonNullable<OverlayPluginOptions["solutionFinders"]>[number];
+/** What a finder may return: a Markdown-rendered `{ header?, body }`, or `undefined` to defer. */
+type Solution = NonNullable<Awaited<ReturnType<SolutionFinder["handle"]>>>;
+/**
+* Lunora's solution finder for the dev error overlay. A single finder that
+* delegates to `@lunora/codegen`'s shared rule table (the same table the
+* standalone `lunora dev` CLI prints to the terminal) and returns the first
+* match — so one `priority` slot covers every Lunora rule and the overlay's
+* built-in finders still run for anything we don't recognize (we return
+* `undefined`).
+*
+* Priority is high so a Lunora-specific hint wins over the overlay's generic
+* finder for the same error; a user's own finder can still outrank it with a
+* higher `priority`.
+*/
+declare const lunoraSolutionFinder: SolutionFinder;
+/** The finders Lunora injects into the overlay by default. */
+declare const lunoraSolutionFinders: ReadonlyArray<SolutionFinder>;
 /** Dev-server path the studio SPA is served from. */
 declare const STUDIO_PATH = "/__lunora";
 /** Static asset routes the studio document references. */
@@ -358,6 +421,17 @@ declare const withWorkerStartupHint: (plugins: ReadonlyArray<Plugin>) => Plugin[
 */
 declare const wranglerValidatorPlugin: (options: ResolvedLunoraPluginOptions) => Plugin;
 /**
+* Resolve the `overlay` toggle into the overlay plugin's options — or `false` to
+* skip it. Lunora's solution finders are **prepended** so they run before the
+* overlay's built-ins; a user's own finders are appended and can still win per
+* error via a strictly higher `priority` (equal priority keeps Lunora first,
+* since the overlay sorts stably). Lunora also forwards both `error` AND `warn`
+* console calls by default (the overlay's own default is `["error"]` only) so
+* Lunora's branded `warn` advisories surface in the browser too — the user can
+* override `forwardedConsoleMethods`.
+*/
+declare const resolveOverlayOption: (overlay: LunoraPluginOptions["overlay"]) => false | OverlayPluginOptions;
+/**
 * Lunora Vite plugin. Returns a flat array of Vite plugins that:
 *
 * 1. Run `@lunora/codegen` on startup + on schema file changes.
@@ -371,4 +445,4 @@ declare const wranglerValidatorPlugin: (options: ResolvedLunoraPluginOptions) =>
 */
 declare const lunora: (options?: LunoraPluginOptions) => LunoraPlugins;
 declare const VERSION = "0.0.0";
-export { CLASS_A_WIRING, type ClassAWiring, type CloudflarePluginOptions, DEV_WORKER_ENV_VALUE, DEV_WORKER_ENV_VAR, LUNORA_WORKER_VIRTUAL_ID, type LunoraPluginOptions, type LunoraPlugins, type OverlayPluginOptions, type PlanViteRemoteOptions, type ReconcileResult, type ResolvedLunoraPluginOptions, STUDIO_PATH, VERSION, type ViteRemotePlan, WORKER_STARTUP_HINT, augmentWorkerStartupError, buildStudioUrl, buildWorkerEntrySource, codegenPlugin, createCommandProbe, devVariablesPlugin, frameworkComposePlugin, isAutoComposable, isWorkerEntryEvalError, logStreamPlugin, lunora, planViteRemoteBindings, reconcileWranglerCrons, remoteBindingsCleanupPlugin, studioPlugin, withDevWorkerEnv, withRemoteBindings, withWorkerStartupHint, wranglerValidatorPlugin };
+export { CLASS_A_WIRING, type ClassAWiring, type CloudflarePluginOptions, DEV_WORKER_ENV_VALUE, DEV_WORKER_ENV_VAR, LUNORA_WORKER_VIRTUAL_ID, type LunoraPluginOptions, type LunoraPlugins, type OverlayPluginOptions, type PlanViteRemoteOptions, type ReconcileResult, type ResolvedLunoraPluginOptions, STUDIO_PATH, type Solution, type SolutionFinder, VERSION, type ViteRemotePlan, WORKER_STARTUP_HINT, augmentWorkerStartupError, buildStudioUrl, buildWorkerEntrySource, codegenPlugin, containerLogsPlugin, createCommandProbe, devVariablesPlugin, frameworkComposePlugin, isAutoComposable, isWorkerEntryEvalError, logStreamPlugin, lunora, lunoraSolutionFinder, lunoraSolutionFinders, planViteRemoteBindings, reconcileWranglerCrons, remoteBindingsCleanupPlugin, resolveOverlayOption, studioPlugin, withDevWorkerEnv, withRemoteBindings, withWorkerStartupHint, wranglerValidatorPlugin };

package/dist/index.mjs

@@ -2,20 +2,23 @@ import { cloudflare } from '@cloudflare/vite-plugin';
 import errorOverlayPlugin from '@visulima/vite-overlay';
 import { detectAgentRules, claimAgentRulesHint, AGENT_RULES_HINT, detectFramework } from '@lunora/config';
 export { detectFramework } from '@lunora/config';
-import { l as lunoraLine } from './packem_shared/log-Bgkv6QhO.mjs';
-import codegenPlugin from './packem_shared/codegenPlugin-CHzvXqK6.mjs';
-import devVariablesPlugin from './packem_shared/devVariablesPlugin-DbDf7tmi.mjs';
+import { l as lunoraLine } from './packem_shared/log-BjO9EWah.mjs';
+import codegenPlugin from './packem_shared/codegenPlugin-B_ayaObq.mjs';
+import containerLogsPlugin from './packem_shared/containerLogsPlugin-DMssU3wb.mjs';
+import devVariablesPlugin from './packem_shared/devVariablesPlugin-CDNSnvOP.mjs';
 import { createCommandProbe, withDevWorkerEnv } from './packem_shared/DEV_WORKER_ENV_VALUE-Coo6bgVz.mjs';
 export { DEV_WORKER_ENV_VALUE, DEV_WORKER_ENV_VAR } from './packem_shared/DEV_WORKER_ENV_VALUE-Coo6bgVz.mjs';
-import { frameworkComposePlugin } from './packem_shared/CLASS_A_WIRING-Cja0SF6x.mjs';
-export { CLASS_A_WIRING, LUNORA_WORKER_VIRTUAL_ID, buildWorkerEntrySource, isAutoComposable } from './packem_shared/CLASS_A_WIRING-Cja0SF6x.mjs';
+import { frameworkComposePlugin } from './packem_shared/CLASS_A_WIRING-DWYL4g1x.mjs';
+export { CLASS_A_WIRING, LUNORA_WORKER_VIRTUAL_ID, buildWorkerEntrySource, isAutoComposable } from './packem_shared/CLASS_A_WIRING-DWYL4g1x.mjs';
 import logStreamPlugin from './packem_shared/logStreamPlugin-CqvZ17kd.mjs';
 import { planViteRemoteBindings, remoteBindingsCleanupPlugin, withRemoteBindings } from './packem_shared/planViteRemoteBindings-QN5ncUS1.mjs';
-import { studioPlugin } from './packem_shared/STUDIO_PATH-5ppCdBHa.mjs';
-export { STUDIO_PATH, buildStudioUrl } from './packem_shared/STUDIO_PATH-5ppCdBHa.mjs';
+import { lunoraSolutionFinders } from './packem_shared/lunoraSolutionFinder-BKEAiUJP.mjs';
+export { lunoraSolutionFinder } from './packem_shared/lunoraSolutionFinder-BKEAiUJP.mjs';
+import { studioPlugin } from './packem_shared/STUDIO_PATH-yREc3Bbm.mjs';
+export { STUDIO_PATH, buildStudioUrl } from './packem_shared/STUDIO_PATH-yREc3Bbm.mjs';
 import { withWorkerStartupHint } from './packem_shared/WORKER_STARTUP_HINT-DhsXUW8k.mjs';
 export { WORKER_STARTUP_HINT, augmentWorkerStartupError, isWorkerEntryEvalError } from './packem_shared/WORKER_STARTUP_HINT-DhsXUW8k.mjs';
-import { wranglerValidatorPlugin } from './packem_shared/wranglerValidatorPlugin-DggqUjxL.mjs';
+import { wranglerValidatorPlugin } from './packem_shared/wranglerValidatorPlugin-CEoJEghS.mjs';
 export { reconcileWranglerCrons } from './packem_shared/reconcileWranglerCrons-PxGwfCp_.mjs';
 
 const agentRulesHintPlugin = (options) => {
@@ -81,6 +84,19 @@ const frameworkDetectPlugin = (options, context) => {
   };
 };
 
+const resolveOverlayOption = (overlay) => {
+  if (overlay === false) {
+    return false;
+  }
+  const userOverlay = overlay === true || overlay === void 0 ? {} : overlay;
+  return {
+    ...userOverlay,
+    // After the spread + nullish-coalesce so an explicit `undefined` from the
+    // user doesn't erase Lunora's default (the spread would otherwise win).
+    forwardedConsoleMethods: userOverlay.forwardedConsoleMethods ?? ["error", "warn"],
+    solutionFinders: [...lunoraSolutionFinders, ...userOverlay.solutionFinders ?? []]
+  };
+};
 const resolveOptions = (options) => {
   const input = options ?? {};
   const schemaDirectory = input.schemaDir ?? "lunora";
@@ -92,20 +108,13 @@ const resolveOptions = (options) => {
   } else {
     cloudflareOption = input.cloudflare;
   }
-  let overlayOption;
-  if (input.overlay === false) {
-    overlayOption = false;
-  } else if (input.overlay === true || input.overlay === void 0) {
-    overlayOption = {};
-  } else {
-    overlayOption = input.overlay;
-  }
   return {
+    allowUnauthenticatedShardAccess: input.allowUnauthenticatedShardAccess ?? false,
     apiSpec: input.apiSpec ?? "openapi",
     cloudflare: cloudflareOption,
     studio: input.studio ?? true,
     generatedDir: input.generatedDir ?? `${schemaDirectory}/_generated`,
-    overlay: overlayOption,
+    overlay: resolveOverlayOption(input.overlay),
     projectRoot: input.projectRoot ?? process.cwd(),
     schemaDir: schemaDirectory,
     validateWrangler: input.validateWrangler ?? true
@@ -140,6 +149,7 @@ const lunora = (options) => {
     plugins.push(errorOverlayPlugin(resolved.overlay));
   }
   if (resolved.cloudflare !== false) {
+    plugins.push(containerLogsPlugin(resolved));
     const remotePlan = planViteRemoteBindings({ projectRoot: resolved.projectRoot });
     if (remotePlan.enabled && remotePlan.configPath !== void 0) {
       plugins.push(remoteBindingsCleanupPlugin(remotePlan.cleanup));
@@ -151,4 +161,4 @@ const lunora = (options) => {
 };
 const VERSION = "0.0.0";
 
-export { VERSION, codegenPlugin, createCommandProbe, devVariablesPlugin, frameworkComposePlugin, logStreamPlugin, lunora, planViteRemoteBindings, remoteBindingsCleanupPlugin, studioPlugin, withDevWorkerEnv, withRemoteBindings, withWorkerStartupHint, wranglerValidatorPlugin };
+export { VERSION, codegenPlugin, containerLogsPlugin, createCommandProbe, devVariablesPlugin, frameworkComposePlugin, logStreamPlugin, lunora, lunoraSolutionFinders, planViteRemoteBindings, remoteBindingsCleanupPlugin, resolveOverlayOption, studioPlugin, withDevWorkerEnv, withRemoteBindings, withWorkerStartupHint, wranglerValidatorPlugin };

package/dist/packem_shared/{CLASS_A_WIRING-Cja0SF6x.mjs → CLASS_A_WIRING-DWYL4g1x.mjs}

@@ -1,9 +1,12 @@
-import { existsSync } from 'node:fs';
+import { existsSync, readFileSync } from 'node:fs';
 import { resolve, join } from 'node:path';
 
 const LUNORA_WORKER_VIRTUAL_ID = "virtual:lunora/worker";
 const RESOLVED_VIRTUAL_PREFIX = "\0";
 const RESOLVED_LUNORA_WORKER_ID = `${RESOLVED_VIRTUAL_PREFIX}${LUNORA_WORKER_VIRTUAL_ID}`;
+const CLIENT_WORKER_STUB = `// @lunora/vite — the composed worker entry is worker-only and unavailable in the client environment.
+export default {};
+`;
 const TRAILING_SLASH = /\/$/;
 const CLASS_A_WIRING = {
   "react-router": {
@@ -36,18 +39,27 @@ const isAutoComposable = (context) => {
   return detected?.class === "A" && CLASS_A_WIRING[detected.framework] !== void 0;
 };
 const isWorkerVirtualActive = (context) => isAutoComposable(context);
-const buildWorkerEntrySource = (framework, generatedImportBase, hasContainers = false) => {
+const projectUsesUmbrella = (projectRoot) => {
+  try {
+    const pkg = JSON.parse(readFileSync(join(projectRoot, "package.json"), "utf8"));
+    return ["dependencies", "devDependencies", "peerDependencies"].some((field) => pkg[field]?.["lunorash"] !== void 0);
+  } catch {
+    return false;
+  }
+};
+const buildWorkerEntrySource = (framework, generatedImportBase, hasContainers = false, useUmbrella = false, allowUnauthenticatedShardAccess = false) => {
   const wiring = CLASS_A_WIRING[framework];
   if (wiring === void 0) {
     throw new Error(`[lunora] no class-A worker wiring for framework "${framework}"`);
   }
+  const runtimeModule = useUmbrella ? "lunorash/runtime" : "@lunora/runtime";
   const containersReexport = hasContainers ? `
 export * from "${generatedImportBase}/containers";
 ` : "";
   return `// Generated by @lunora/vite — class-A worker composition (PLAN4 M2).
 // Do not edit: emitted from the detected framework (${framework}). Point your
 // wrangler \`main\` here (or re-export it) instead of hand-wiring createWorker.
-import { composeWorker } from "@lunora/runtime";
+import { composeWorker } from "${runtimeModule}";
 ${wiring.imports}
 import { LUNORA_FUNCTIONS } from "${generatedImportBase}/functions";
 import { openApiSpec } from "${generatedImportBase}/openapi";
@@ -60,7 +72,7 @@ let worker;
 
 export default {
     async fetch(request, env, context) {
-        worker ??= composeWorker({
+        worker ??= composeWorker({${allowUnauthenticatedShardAccess ? "\n            allowUnauthenticatedShardAccess: true," : ""}
             functions: LUNORA_FUNCTIONS,
             httpRouter: ${wiring.handler},
             openApiSpec,
@@ -75,11 +87,21 @@ export default {
 };
 const frameworkComposePlugin = (options, context) => {
   const generatedImportBase = resolve(options.projectRoot, options.generatedDir.replace(TRAILING_SLASH, ""));
+  const useUmbrella = projectUsesUmbrella(options.projectRoot);
   return {
     load(id) {
       if (id === RESOLVED_LUNORA_WORKER_ID && isWorkerVirtualActive(context) && context.framework !== void 0) {
+        if (this.environment.name === "client") {
+          return CLIENT_WORKER_STUB;
+        }
         const hasContainers = existsSync(join(generatedImportBase, "containers.ts"));
-        return buildWorkerEntrySource(context.framework.framework, generatedImportBase, hasContainers);
+        return buildWorkerEntrySource(
+          context.framework.framework,
+          generatedImportBase,
+          hasContainers,
+          useUmbrella,
+          options.allowUnauthenticatedShardAccess
+        );
       }
       return void 0;
     },

package/dist/packem_shared/{STUDIO_PATH-5ppCdBHa.mjs → STUDIO_PATH-yREc3Bbm.mjs}

@@ -113,7 +113,7 @@ const createStudioHandler = (server, isNonLoopbackBind) => {
   let assetsStamp;
   let html;
   const projectRoot = server.config.root ?? process.cwd();
-  const serveStaticAsset = (pathname, response) => {
+  const serveStaticAsset = (pathname, request, response) => {
     const stamp = studioAssetsStamp();
     if (assets === void 0 || stamp !== assetsStamp) {
       assets = loadStudioAssets(server.config.logger);
@@ -126,6 +126,17 @@ const createStudioHandler = (server, isNonLoopbackBind) => {
       return;
     }
     const isScript = pathname === STUDIO_SCRIPT_PATH;
+    const assetKind = isScript ? "js" : "css";
+    const etag = stamp === void 0 ? void 0 : `W/"${assetKind}-${String(stamp)}"`;
+    response.setHeader("Cache-Control", "no-cache");
+    if (etag !== void 0) {
+      response.setHeader("ETag", etag);
+      if (headerValue(request.headers?.["if-none-match"]) === etag.toLowerCase()) {
+        response.statusCode = 304;
+        response.end();
+        return;
+      }
+    }
     sendOk(response, isScript ? assets.script : assets.styles, isScript ? "text/javascript; charset=utf-8" : "text/css; charset=utf-8");
   };
   return (request, response, next) => {
@@ -155,7 +166,7 @@ const createStudioHandler = (server, isNonLoopbackBind) => {
       return;
     }
     if (pathname === STUDIO_SCRIPT_PATH || pathname === STUDIO_STYLE_PATH) {
-      serveStaticAsset(pathname, response);
+      serveStaticAsset(pathname, request, response);
       return;
     }
     html ??= renderStudioHtml({

package/dist/packem_shared/{codegenPlugin-CHzvXqK6.mjs → codegenPlugin-B_ayaObq.mjs}

@@ -3,7 +3,7 @@ import { resolve, sep, join } from 'node:path';
 import { createCodegenProject, refreshCodegenProject, runCodegen, CodegenDiagnosticError } from '@lunora/codegen';
 import { inferLunoraBindings, reconcileWranglerBindings } from '@lunora/config';
 import { reconcileWranglerCrons } from './reconcileWranglerCrons-PxGwfCp_.mjs';
-import { L as LUNORA_TAG } from './log-Bgkv6QhO.mjs';
+import { L as LUNORA_TAG, a as advisoryLine } from './log-BjO9EWah.mjs';
 
 const DEBOUNCE_MS = 100;
 const TSCONFIG_VARIANT_RE = /[/\\]tsconfig\..+\.json$/u;
@@ -56,7 +56,12 @@ const runCodegenSafely = (options, logger, overlay, project) => {
       logger.warn(`${LUNORA_TAG} cron trigger sync skipped: ${message}`);
     }
     for (const advisory of result.advisories) {
-      logger.warn(`${LUNORA_TAG} schema advisory [${advisory.level}] ${advisory.name}: ${advisory.detail} — ${advisory.remediation}`);
+      const line = advisoryLine(advisory.level, advisory.name, advisory.detail, advisory.remediation);
+      if (advisory.level === "ERROR") {
+        logger.error(line);
+      } else {
+        logger.warn(line);
+      }
     }
     return resolve(result.outputDirectory);
   } catch (error) {
@@ -128,19 +133,8 @@ const codegenPlugin = (options) => {
       let closed = false;
       let cachedProject;
       const invalidateGenerated = () => {
-        const environments = server.environments;
-        const graphs = [];
-        if (environments !== void 0) {
-          for (const environment of Object.values(environments)) {
-            if (environment.moduleGraph !== void 0) {
-              graphs.push(environment.moduleGraph);
-            }
-          }
-        }
-        if (graphs.length === 0) {
-          graphs.push(server.moduleGraph);
-        }
-        for (const graph of graphs) {
+        for (const environment of Object.values(server.environments)) {
+          const graph = environment.moduleGraph;
           for (const moduleEntry of graph.idToModuleMap.values()) {
             if (moduleEntry.id && isInside(moduleEntry.id, absoluteGeneratedDirectory)) {
               graph.invalidateModule(moduleEntry);

package/dist/packem_shared/containerLogsPlugin-DMssU3wb.mjs

@@ -0,0 +1,50 @@
+import { discoverContainerInfo, streamContainerLogs } from '@lunora/config';
+import { l as lunoraLine } from './log-BjO9EWah.mjs';
+
+const containerLogsPlugin = (options) => {
+  let handle;
+  const closeHandle = () => {
+    handle?.close();
+    handle = void 0;
+  };
+  return {
+    apply: "serve",
+    // Fires on `server.close()` for both the normal and middleware-mode dev
+    // servers, so the Docker poll loop is torn down even when there is no
+    // `httpServer` to listen on (middleware mode).
+    buildEnd() {
+      closeHandle();
+    },
+    configureServer(server) {
+      if (handle || process.env.LUNORA_CONTAINER_LOGS === "0") {
+        return;
+      }
+      const discovery = discoverContainerInfo(options.projectRoot, options.schemaDir);
+      const containers = discovery.containers.map((container) => {
+        return { className: container.className, exportName: container.exportName };
+      });
+      if (containers.length === 0) {
+        return;
+      }
+      const { logger } = server.config;
+      handle = streamContainerLogs({
+        containers,
+        onLine: (line) => {
+          const text = lunoraLine(`container:${line.name} ${line.text}`);
+          if (line.level === "error") {
+            logger.warn(text);
+          } else {
+            logger.info(text);
+          }
+        },
+        onUnavailable: (message) => {
+          logger.warn(lunoraLine(`container: Docker engine unreachable — container logs unavailable (${message})`));
+        }
+      });
+      server.httpServer?.once("close", closeHandle);
+    },
+    name: "lunora:container-logs"
+  };
+};
+
+export { containerLogsPlugin as default };

package/dist/packem_shared/devVariablesPlugin-CDNSnvOP.mjs

@@ -0,0 +1,19 @@
+import { ensureDevVariables, createConfirm, fillDevSecrets } from '@lunora/config';
+import { l as lunoraLine } from './log-BjO9EWah.mjs';
+
+const devVariablesPlugin = (options) => {
+  return {
+    apply: "serve",
+    async configResolved() {
+      const info = (message) => {
+        console.info(lunoraLine(message));
+      };
+      await ensureDevVariables({ confirm: createConfirm("[lunora] "), cwd: options.projectRoot, info });
+      fillDevSecrets({ cwd: options.projectRoot, info });
+    },
+    enforce: "pre",
+    name: "lunora:dev-vars"
+  };
+};
+
+export { devVariablesPlugin as default };

package/dist/packem_shared/log-BjO9EWah.mjs

@@ -0,0 +1,8 @@
+import { paintBadge, BADGES } from '@lunora/config';
+
+const LUNORA_TAG = paintBadge(BADGES.lunora);
+const lunoraLine = (message) => `${LUNORA_TAG} ${message}`;
+const ADVISORY_BADGE = { ERROR: BADGES.error, INFO: BADGES.info, WARN: BADGES.warn };
+const advisoryLine = (level, name, detail, remediation) => `${paintBadge(ADVISORY_BADGE[level])} ${name}: ${detail} — ${remediation}`;
+
+export { LUNORA_TAG as L, advisoryLine as a, lunoraLine as l };

package/dist/packem_shared/lunoraSolutionFinder-BKEAiUJP.mjs

@@ -0,0 +1,17 @@
+import { findLunoraSolution } from '@lunora/codegen';
+
+const lunoraSolutionFinder = {
+  // Synchronous body wrapped in `Promise.resolve` rather than `async`: the
+  // overlay's `handle` contract is promise-returning, but `require-await` is on
+  // for src and there's nothing to await here.
+  handle: (error) => {
+    const message = typeof error.message === "string" ? error.message : "";
+    const solution = findLunoraSolution(message);
+    return Promise.resolve(solution ? { body: solution.body, header: solution.header } : void 0);
+  },
+  name: "lunora",
+  priority: 100
+};
+const lunoraSolutionFinders = [lunoraSolutionFinder];
+
+export { lunoraSolutionFinder, lunoraSolutionFinders };

package/dist/packem_shared/{wranglerValidatorPlugin-DggqUjxL.mjs → wranglerValidatorPlugin-CEoJEghS.mjs}

@@ -1,6 +1,6 @@
 import { spawnSync } from 'node:child_process';
 import { validateWranglerProject, readWranglerJsonc } from '@lunora/config';
-import { l as lunoraLine } from './log-Bgkv6QhO.mjs';
+import { l as lunoraLine } from './log-BjO9EWah.mjs';
 
 const isLocalImagePath = (image) => image.startsWith("./") || image.startsWith("../") || image.startsWith("/") || image.includes("Dockerfile");
 const probeDocker = () => {