naro-cli 0.21.0 → 0.22.0

package/dist/{chunk-FFPOVA7I.js → chunk-MBSO3K6L.js}

@@ -326,6 +326,162 @@ var STALL_WINDOW_MS = 10 * 6e4;
 // ../../packages/core/src/deployment-strategy.ts
 var MIN_SUPPORTED_NEXT_MAJOR = 15;
 
+// ../../packages/core/src/environment-guidance.ts
+var DATA_COMMANDS = /* @__PURE__ */ new Set([
+  "db",
+  "migration",
+  "gen",
+  "backend",
+  "policy",
+  "storage",
+  "realtime"
+]);
+var BACKEND_SWITCHES = /* @__PURE__ */ new Set([
+  "enable",
+  "provision",
+  "disable"
+]);
+var PRODUCTION_SWITCH_NOTE = "production's switch, which every environment follows";
+var SWITCH_CONTEXT = /\bturned off\b|\bturn(?:s|ing)? (?:it|them) (?:back )?on\b|\bbackend is on\b/i;
+var SUBCOMMANDS = {
+  db: /* @__PURE__ */ new Set([
+    "info",
+    "enable",
+    "query",
+    "push",
+    "dump",
+    "restore",
+    "pull",
+    "reset",
+    "lint",
+    "table",
+    "index",
+    "create",
+    "add-column",
+    "rename-column",
+    "rename",
+    "drop-column",
+    "drop"
+  ]),
+  migration: /* @__PURE__ */ new Set(["list", "ls", "new", "up", "repair"]),
+  gen: /* @__PURE__ */ new Set(["types"]),
+  backend: /* @__PURE__ */ new Set([
+    "info",
+    "status",
+    "enable",
+    "provision",
+    "disable",
+    "keys",
+    "rotate",
+    "auth",
+    "email",
+    "oauth",
+    "redirects",
+    "require-verification",
+    "signups",
+    "password",
+    "set",
+    "add",
+    "remove",
+    "users",
+    "create",
+    "delete"
+  ]),
+  policy: /* @__PURE__ */ new Set(["list", "ls", "set", "create", "drop", "remove", "rm"]),
+  storage: /* @__PURE__ */ new Set([
+    "enable",
+    "disable",
+    "bucket",
+    "list",
+    "create",
+    "update",
+    "empty",
+    "remove",
+    "cp",
+    "mv",
+    "ls",
+    "rm"
+  ]),
+  realtime: /* @__PURE__ */ new Set(["enable", "disable", "tables", "add", "remove"])
+};
+function kindOf(words) {
+  const command = words[1] ?? "";
+  if (!DATA_COMMANDS.has(command)) return "leave";
+  if (words.some((word) => word === "--env" || word.startsWith("--env=")))
+    return "leave";
+  if (command === "migration" && words[2] === "new") return "leave";
+  if (command === "backend" && BACKEND_SWITCHES.has(words[2] ?? ""))
+    return words.length === 3 ? "switch" : "leave";
+  return "env";
+}
+function quoted(span, slug, switchContext) {
+  const words = span.split(" ");
+  switch (kindOf(words)) {
+    case "env":
+      return `\`${span} --env ${slug}\``;
+    case "switch":
+      return words[2] !== "disable" && !switchContext ? `\`naro environments provision ${slug}\`` : `\`${span}\` (${PRODUCTION_SWITCH_NOTE})`;
+    default:
+      return `\`${span}\``;
+  }
+}
+var QUOTED = /`(naro [^`\n]+)`/g;
+var BARE = /(?<![`\w/-])naro ([a-z]+)((?: [a-z][a-z-]*)*)/g;
+function bare(match, command, rest, after, slug, switchContext) {
+  const vocabulary = SUBCOMMANDS[command];
+  if (vocabulary === void 0) return match;
+  const words = rest.split(" ").filter((word) => word !== "");
+  let count2 = 0;
+  while (count2 < words.length && vocabulary.has(words[count2] ?? "")) count2++;
+  if (count2 === 0) return match;
+  const head = ["naro", command, ...words.slice(0, count2)];
+  const tail = words.slice(count2);
+  const following = after.split(/\n|[.;,)](?:\s|$)/, 1)[0] ?? "";
+  if (/(?:^|\s)--env[\s=]/.test(following) || after.startsWith(` \u2014 ${PRODUCTION_SWITCH_NOTE}`))
+    return match;
+  const shown = head.join(" ");
+  const remainder = tail.length > 0 ? ` ${tail.join(" ")}` : "";
+  switch (kindOf(head)) {
+    case "env":
+      return `${shown} --env ${slug}${remainder}`;
+    case "switch":
+      return head[2] !== "disable" && !switchContext ? `naro environments provision ${slug}${remainder}` : `${shown} \u2014 ${PRODUCTION_SWITCH_NOTE}${remainder}`;
+    default:
+      return match;
+  }
+}
+function environmentGuidance(text2, slug) {
+  if (slug === null || !text2.includes("naro ")) return text2;
+  const switchContext = SWITCH_CONTEXT.test(text2);
+  const spans = [];
+  const marked = text2.replaceAll(
+    QUOTED,
+    (match, span, offset) => {
+      const noted = text2.startsWith(
+        ` (${PRODUCTION_SWITCH_NOTE})`,
+        offset + match.length
+      );
+      spans.push(noted ? match : quoted(span, slug, switchContext));
+      return `\uE000${String(spans.length - 1)}\uE000`;
+    }
+  );
+  const rewritten = marked.replaceAll(
+    BARE,
+    (match, command, rest, offset) => bare(
+      match,
+      command,
+      rest,
+      marked.slice(offset + match.length),
+      slug,
+      switchContext
+    )
+  );
+  return rewritten.replaceAll(
+    /\uE000(\d+)\uE000/g,
+    (_match, index) => spans[Number(index)] ?? ""
+  );
+}
+
 // ../../packages/core/src/errors.ts
 var DEPLOYMENT_ERROR_CODES = [
   "CLONE_FAILED",
@@ -436,7 +592,11 @@ var DEPLOYMENT_ERROR_CODES = [
   "ENVIRONMENT_BRANCH_IS_PRODUCTION",
   /** The plan's environment count is full. */
   "ENVIRONMENT_LIMIT_REACHED",
-  /** The project uses a Naro database, which environments do not support yet (stages 1 and 2 only). */
+  /**
+   * The project uses a Naro database, which environments did not yet support
+   * (stages 1 and 2 only). No route answers it since named environments 3c;
+   * kept for clients of a control plane from before.
+   */
   "ENVIRONMENT_DATABASE_UNSUPPORTED",
   "ENVIRONMENT_NOT_FOUND",
   /** The project's new default branch is the one an environment deploys. */
@@ -460,6 +620,9 @@ var DeploymentError = class extends Error {
   }
 };
 
+// ../../packages/core/src/functions.ts
+var FUNCTION_WORKER_NAME_PREFIX = "naro-fn-";
+
 // ../../packages/core/src/git-remote.ts
 var SCP_LIKE = /^[^@\s/]+@([^:\s/]+):(.+)$/;
 function parseGitHubRemote(url2) {
@@ -15064,6 +15227,8 @@ function subdomainProblem(value) {
   if (value.endsWith("-preview")) return "reserved";
   if (value === BACKEND_WORKER_NAME_PREFIX.slice(0, -1) || value.startsWith(BACKEND_WORKER_NAME_PREFIX))
     return "reserved";
+  if (value === FUNCTION_WORKER_NAME_PREFIX.slice(0, -1) || value.startsWith(FUNCTION_WORKER_NAME_PREFIX))
+    return "reserved";
   if (RESERVED_SUBDOMAINS.includes(value))
     return "reserved";
   return null;
@@ -15399,6 +15564,72 @@ function workerNameForSurface(subdomain, surface) {
   }
 }
 
+// ../../packages/core/src/usage-alert-mail.ts
+var REQUESTS = {
+  en: {
+    subject80: (team) => `${team} has used 80% of its monthly requests`,
+    subject100: (team) => `${team} has reached its monthly request limit`,
+    usage: (team, used, limit, month) => `${team} has used ${used} of the ${limit} requests the Hobby plan includes for ${month}.`,
+    warning: "When it reaches the limit, requests past it may be blocked until the month ends (UTC).",
+    blocked: "Sites on this team answer 503 until the month ends (UTC).",
+    running: "Sites keep running for now.",
+    button: "View usage",
+    footer: (team) => `You're receiving this because you're an owner or billing member of ${team} on naro.`
+  },
+  ko: {
+    subject80: (team) => `${team} \uD300\uC774 \uC774\uBC88 \uB2EC \uC694\uCCAD \uD55C\uB3C4\uC758 80%\uB97C \uC37C\uC2B5\uB2C8\uB2E4`,
+    subject100: (team) => `${team} \uD300\uC774 \uC774\uBC88 \uB2EC \uC694\uCCAD \uD55C\uB3C4\uC5D0 \uB3C4\uB2EC\uD588\uC2B5\uB2C8\uB2E4`,
+    usage: (team, used, limit, month) => `${team} \uD300\uC774 ${month} Hobby \uD50C\uB79C\uC5D0 \uD3EC\uD568\uB41C \uC694\uCCAD ${limit}\uAC74 \uC911 ${used}\uAC74\uC744 \uC37C\uC2B5\uB2C8\uB2E4.`,
+    warning: "\uD55C\uB3C4\uC5D0 \uB3C4\uB2EC\uD558\uBA74 \uC774\uBC88 \uB2EC\uC774 \uB05D\uB0A0 \uB54C\uAE4C\uC9C0(UTC) \uADF8 \uB4A4 \uC694\uCCAD\uC774 \uB9C9\uD790 \uC218 \uC788\uC2B5\uB2C8\uB2E4.",
+    blocked: "\uC774\uBC88 \uB2EC\uC774 \uB05D\uB0A0 \uB54C\uAE4C\uC9C0(UTC) \uC774 \uD300\uC758 \uC0AC\uC774\uD2B8\uB294 503\uC73C\uB85C \uC751\uB2F5\uD569\uB2C8\uB2E4.",
+    running: "\uC9C0\uAE08\uC740 \uC0AC\uC774\uD2B8\uAC00 \uACC4\uC18D \uB3D9\uC791\uD569\uB2C8\uB2E4.",
+    button: "\uC0AC\uC6A9\uB7C9 \uBCF4\uAE30",
+    footer: (team) => `naro\uC5D0\uC11C ${team} \uD300\uC758 owner \uB610\uB294 billing \uC5ED\uD560\uC774\uB77C \uC774 \uBA54\uC77C\uC744 \uBC1B\uC558\uC2B5\uB2C8\uB2E4.`
+  },
+  ja: {
+    subject80: (team) => `${team} \u30C1\u30FC\u30E0\u304C\u4ECA\u6708\u306E\u30EA\u30AF\u30A8\u30B9\u30C8\u4E0A\u9650\u306E80%\u3092\u4F7F\u7528\u3057\u307E\u3057\u305F`,
+    subject100: (team) => `${team} \u30C1\u30FC\u30E0\u304C\u4ECA\u6708\u306E\u30EA\u30AF\u30A8\u30B9\u30C8\u4E0A\u9650\u306B\u9054\u3057\u307E\u3057\u305F`,
+    usage: (team, used, limit, month) => `${team} \u30C1\u30FC\u30E0\u306F ${month} \u306E Hobby \u30D7\u30E9\u30F3\u306B\u542B\u307E\u308C\u308B ${limit} \u30EA\u30AF\u30A8\u30B9\u30C8\u306E\u3046\u3061 ${used} \u3092\u4F7F\u7528\u3057\u307E\u3057\u305F\u3002`,
+    warning: "\u4E0A\u9650\u306B\u9054\u3059\u308B\u3068\u3001\u6708\u672B(UTC)\u307E\u3067\u4EE5\u964D\u306E\u30EA\u30AF\u30A8\u30B9\u30C8\u304C\u30D6\u30ED\u30C3\u30AF\u3055\u308C\u308B\u5834\u5408\u304C\u3042\u308A\u307E\u3059\u3002",
+    blocked: "\u6708\u672B(UTC)\u307E\u3067\u3001\u3053\u306E\u30C1\u30FC\u30E0\u306E\u30B5\u30A4\u30C8\u306F503\u3092\u8FD4\u3057\u307E\u3059\u3002",
+    running: "\u73FE\u5728\u3001\u30B5\u30A4\u30C8\u306F\u5F15\u304D\u7D9A\u304D\u52D5\u4F5C\u3057\u3066\u3044\u307E\u3059\u3002",
+    button: "\u4F7F\u7528\u91CF\u3092\u898B\u308B",
+    footer: (team) => `naro \u3067 ${team} \u30C1\u30FC\u30E0\u306E owner \u307E\u305F\u306F billing \u30ED\u30FC\u30EB\u306E\u305F\u3081\u3001\u3053\u306E\u30E1\u30FC\u30EB\u3092\u304A\u9001\u308A\u3057\u3066\u3044\u307E\u3059\u3002`
+  }
+};
+var BUILDS = {
+  en: {
+    subject80: (team) => `${team} has used 80% of its monthly builds`,
+    subject100: (team) => `${team} has reached its monthly build limit`,
+    usage: (team, used, limit, month) => `${team} has used ${used} of the ${limit} builds the Hobby plan includes for ${month}.`,
+    warning: "When it reaches the limit, new deploys may be refused until the month ends (UTC).",
+    blocked: "New deploys on this team are refused until the month ends (UTC).",
+    running: "Deploys keep working for now.",
+    button: REQUESTS.en.button,
+    footer: REQUESTS.en.footer
+  },
+  ko: {
+    subject80: (team) => `${team} \uD300\uC774 \uC774\uBC88 \uB2EC \uBE4C\uB4DC \uD55C\uB3C4\uC758 80%\uB97C \uC37C\uC2B5\uB2C8\uB2E4`,
+    subject100: (team) => `${team} \uD300\uC774 \uC774\uBC88 \uB2EC \uBE4C\uB4DC \uD55C\uB3C4\uC5D0 \uB3C4\uB2EC\uD588\uC2B5\uB2C8\uB2E4`,
+    usage: (team, used, limit, month) => `${team} \uD300\uC774 ${month} Hobby \uD50C\uB79C\uC5D0 \uD3EC\uD568\uB41C \uBE4C\uB4DC ${limit}\uAC74 \uC911 ${used}\uAC74\uC744 \uC37C\uC2B5\uB2C8\uB2E4.`,
+    warning: "\uD55C\uB3C4\uC5D0 \uB3C4\uB2EC\uD558\uBA74 \uC774\uBC88 \uB2EC\uC774 \uB05D\uB0A0 \uB54C\uAE4C\uC9C0(UTC) \uC0C8 \uBC30\uD3EC\uAC00 \uAC70\uC808\uB420 \uC218 \uC788\uC2B5\uB2C8\uB2E4.",
+    blocked: "\uC774\uBC88 \uB2EC\uC774 \uB05D\uB0A0 \uB54C\uAE4C\uC9C0(UTC) \uC774 \uD300\uC758 \uC0C8 \uBC30\uD3EC\uB294 \uAC70\uC808\uB429\uB2C8\uB2E4.",
+    running: "\uC9C0\uAE08\uC740 \uBC30\uD3EC\uAC00 \uACC4\uC18D \uB429\uB2C8\uB2E4.",
+    button: REQUESTS.ko.button,
+    footer: REQUESTS.ko.footer
+  },
+  ja: {
+    subject80: (team) => `${team} \u30C1\u30FC\u30E0\u304C\u4ECA\u6708\u306E\u30D3\u30EB\u30C9\u4E0A\u9650\u306E80%\u3092\u4F7F\u7528\u3057\u307E\u3057\u305F`,
+    subject100: (team) => `${team} \u30C1\u30FC\u30E0\u304C\u4ECA\u6708\u306E\u30D3\u30EB\u30C9\u4E0A\u9650\u306B\u9054\u3057\u307E\u3057\u305F`,
+    usage: (team, used, limit, month) => `${team} \u30C1\u30FC\u30E0\u306F ${month} \u306E Hobby \u30D7\u30E9\u30F3\u306B\u542B\u307E\u308C\u308B ${limit} \u30D3\u30EB\u30C9\u306E\u3046\u3061 ${used} \u3092\u4F7F\u7528\u3057\u307E\u3057\u305F\u3002`,
+    warning: "\u4E0A\u9650\u306B\u9054\u3059\u308B\u3068\u3001\u6708\u672B(UTC)\u307E\u3067\u65B0\u3057\u3044\u30C7\u30D7\u30ED\u30A4\u304C\u62D2\u5426\u3055\u308C\u308B\u5834\u5408\u304C\u3042\u308A\u307E\u3059\u3002",
+    blocked: "\u6708\u672B(UTC)\u307E\u3067\u3001\u3053\u306E\u30C1\u30FC\u30E0\u306E\u65B0\u3057\u3044\u30C7\u30D7\u30ED\u30A4\u306F\u62D2\u5426\u3055\u308C\u307E\u3059\u3002",
+    running: "\u73FE\u5728\u3001\u30C7\u30D7\u30ED\u30A4\u306F\u5F15\u304D\u7D9A\u304D\u884C\u3048\u307E\u3059\u3002",
+    button: REQUESTS.ja.button,
+    footer: REQUESTS.ja.footer
+  }
+};
+
 // ../../packages/build/src/next-version.ts
 var NEXT_RELEASE_DATES = {
   16: "2025-10-21",
@@ -19244,7 +19475,7 @@ async function errorFromResponse(response, context) {
   if (typeof serverDetails === "object" && serverDetails !== null && !Array.isArray(serverDetails))
     Object.assign(details, serverDetails);
   const retryAfter = response.headers.get("retry-after")?.trim() ?? "";
-  if (response.status === 429 && /^\d{1,9}$/.test(retryAfter))
+  if ((response.status === 429 || response.status === 503) && /^\d{1,9}$/.test(retryAfter))
     details.retryAfter = Number(retryAfter);
   if (body?.error?.fields !== void 0) details.fields = body.error.fields;
   if (typeof body?.error?.installUrl === "string")
@@ -19712,6 +19943,16 @@ function isReservedEnvTarget(value) {
 function isEnvTargetName(value) {
   return environmentSlugProblem(value) !== "invalid";
 }
+var NARO_SYSTEM_ENV_NAMES = [
+  "NARO_URL",
+  "NEXT_PUBLIC_NARO_URL",
+  "VITE_NARO_URL",
+  "PUBLIC_NARO_URL",
+  "NARO_ANON_KEY",
+  "NEXT_PUBLIC_NARO_ANON_KEY",
+  "VITE_NARO_ANON_KEY",
+  "PUBLIC_NARO_ANON_KEY"
+];
 
 // ../../packages/sdk/src/insights.ts
 var SPEED_INSIGHTS_METRICS = [
@@ -19745,6 +19986,7 @@ var BACKEND_STEPS = [
   "worker",
   "routes",
   "migrate",
+  "schema",
   "health"
 ];
 var STALLED_GRACE_MS = 2 * 6e4;
@@ -19808,9 +20050,17 @@ function buildLogEntry(row) {
 }
 
 // ../../packages/sdk/src/client.ts
+var DATA_PATH = /^\/api\/projects\/[^/?]+\/(?:database|backend(?!\/functions))(?:[/?]|$)/;
+function withDataEnvironment(path, environment) {
+  if (environment === null || !DATA_PATH.test(path)) return path;
+  return `${path}${path.includes("?") ? "&" : "?"}environment=${encodeURIComponent(environment)}`;
+}
 var DEFAULT_REQUEST_TIMEOUT_MS = 45e3;
-var NaroClient = class {
+var NaroClient = class _NaroClient {
   baseUrl;
+  /** The environment whose data the data calls act on; null: production. */
+  environment;
+  options;
   getAccessToken;
   doFetch;
   requestTimeoutMs;
@@ -19825,11 +20075,14 @@ var NaroClient = class {
   backend;
   storage;
   realtime;
+  functions;
   insights;
   analytics;
   protection;
   environments;
   constructor(options) {
+    this.options = options;
+    this.environment = options.environment ?? null;
     this.baseUrl = (options.baseUrl ?? controlPlaneUrl()).replace(/\/$/, "");
     this.getAccessToken = options.getAccessToken;
     this.doFetch = options.fetch ?? fetch;
@@ -19845,25 +20098,41 @@ var NaroClient = class {
     this.backend = new BackendApi(this);
     this.storage = new StorageApi(this);
     this.realtime = new RealtimeApi(this);
+    this.functions = new FunctionsApi(this);
     this.insights = new InsightsApi(this);
     this.analytics = new AnalyticsApi(this);
     this.protection = new ProtectionApi(this);
     this.environments = new EnvironmentsApi(this);
   }
+  /**
+   * The same client acting on `environment`'s data — or production's, for
+   * null. Every other call is the same: the scope is only the
+   * `?environment=` on database and backend paths.
+   */
+  inEnvironment(environment) {
+    if (environment === this.environment) return this;
+    const options = { ...this.options };
+    delete options.environment;
+    if (environment !== null) options.environment = environment;
+    return new _NaroClient(options);
+  }
   async request(path, options) {
     const token = await this.getAccessToken();
     const timeoutMs = options.timeoutMs ?? this.requestTimeoutMs;
     let response;
     try {
-      response = await this.doFetch(`${this.baseUrl}${path}`, {
-        method: options.method ?? "GET",
-        headers: {
-          Authorization: `Bearer ${token}`,
-          ...options.body !== void 0 ? { "Content-Type": "application/json" } : {}
-        },
-        ...options.body !== void 0 ? { body: JSON.stringify(options.body) } : {},
-        signal: AbortSignal.timeout(timeoutMs)
-      });
+      response = await this.doFetch(
+        `${this.baseUrl}${withDataEnvironment(path, this.environment)}`,
+        {
+          method: options.method ?? "GET",
+          headers: {
+            Authorization: `Bearer ${token}`,
+            ...options.body !== void 0 ? { "Content-Type": "application/json" } : {}
+          },
+          ...options.body !== void 0 ? { body: JSON.stringify(options.body) } : {},
+          signal: AbortSignal.timeout(timeoutMs)
+        }
+      );
     } catch (error51) {
       if (error51 instanceof Error && (error51.name === "TimeoutError" || error51.name === "AbortError")) {
         throw new NaroError(
@@ -20061,17 +20330,23 @@ var DeploymentsApi = class {
    * `PROMOTE_TARGET_UNSUPPORTED` before anything is promoted. The target is
    * trimmed once, as the control plane trims it, so `" production"` is
    * production and asks no preview.
+   *
+   * `check: true` asks the preview for production too, for a caller that
+   * cannot show it first and returns it instead (MCP's `promote_deployment`):
+   * a 405 there means a control plane from before previews, and production
+   * is promoted unchecked as before. The preview asked is the result's
+   * `check`, so its migration warnings reach the caller (spec §9.4).
    */
   async promote(projectId, deploymentId, options = {}) {
     const target2 = options.target?.trim();
-    if (target2 !== void 0 && target2 !== "production") {
+    const toEnvironment = target2 !== void 0 && target2 !== "production";
+    let check2;
+    if (toEnvironment || options.check === true) {
       try {
-        await this.promoteCheck(projectId, deploymentId, target2);
+        check2 = await this.promoteCheck(projectId, deploymentId, target2);
       } catch (error51) {
-        if (isNaroError(error51) && error51.status === 405) {
-          throw promoteTargetUnsupported(error51);
-        }
-        throw error51;
+        if (!isNaroError(error51) || error51.status !== 405) throw error51;
+        if (toEnvironment) throw promoteTargetUnsupported(error51);
       }
     }
     const body = await this.client.request(this.promotePath(projectId, deploymentId), {
@@ -20081,7 +20356,8 @@ var DeploymentsApi = class {
     });
     return {
       ...deploymentInfo(body.deployment),
-      mode: body.mode ?? "reupload"
+      mode: body.mode ?? "reupload",
+      ...check2 === void 0 ? {} : { check: check2 }
     };
   }
   /**
@@ -20582,6 +20858,19 @@ var EnvironmentsApi = class {
       { method: "DELETE", context: "Delete environment" }
     );
   }
+  /**
+   * Makes or continues the environment's data — its D1, Naro backend and
+   * Storage bucket (spec §11.2): the run goes on after the answer, which
+   * says `data.status` `provisioning`. A run that stopped (`error`) starts
+   * again from where it stopped; `none` when the project uses neither.
+   */
+  async provision(projectId, environmentId) {
+    const body = await this.client.request(
+      `${this.base(projectId)}/${encodeURIComponent(environmentId)}/provision`,
+      { method: "POST", context: "Provision environment" }
+    );
+    return body.environment;
+  }
 };
 var EXPORT_FIRST_POLL_MS = 1e3;
 var EXPORT_MAX_POLL_MS = 5e3;
@@ -21615,6 +21904,202 @@ var RealtimeApi = class {
     );
   }
 };
+var FunctionsApi = class {
+  constructor(client) {
+    this.client = client;
+  }
+  path(projectId, suffix = "") {
+    return `/api/projects/${encodeURIComponent(projectId)}/backend/functions${suffix}`;
+  }
+  /**
+   * A segment no URL can carry is refused before a request, like
+   * `StorageApi.bucketPath`: URL parsing folds `/`, `.` and `..` into the
+   * path, an empty one is the collection, and `encodeURIComponent` throws on
+   * a lone surrogate. The server checks the name's own rule.
+   */
+  segment(value, what) {
+    if (value === "" || value === "." || value === ".." || value.includes("/") || LONE_SURROGATE.test(value))
+      throw new NaroError("INVALID_PATH", `The ${what} is not valid.`);
+    return encodeURIComponent(value);
+  }
+  functionPath(projectId, name, suffix = "") {
+    return this.path(
+      projectId,
+      `/${this.segment(name, "function name")}${suffix}`
+    );
+  }
+  /** The project's functions, the plan's limits, and (3-3e) this month's usage. */
+  async list(projectId) {
+    return this.client.request(this.path(projectId), {
+      context: "List functions"
+    });
+  }
+  /** One function and its newest 20 versions. `FUNCTION_NOT_FOUND` (404). */
+  async get(projectId, name) {
+    return this.client.request(
+      this.functionPath(projectId, name),
+      { context: "Read a function" }
+    );
+  }
+  /**
+   * A new version — the function too, the first time — and where to PUT its
+   * bundle: `upload.url` with `upload.headers` (the checksum header is
+   * signed). Refusals in the order they are checked: `BACKEND_DISABLED`,
+   * `UNAUTHORIZED`, `NOT_FOUND`, `FORBIDDEN` (`deployment.create`),
+   * `FUNCTIONS_DISABLED`, `FORBIDDEN` (a suspended project),
+   * `VALIDATION_FAILED` (the name or the request), `BUNDLE_TOO_LARGE`,
+   * `DATABASE_NOT_ENABLED`, `BACKEND_NOT_READY`, `BACKEND_OFF`,
+   * `BACKEND_BUSY` (the project's Naro worker is not the current version and
+   * could not be brought up to date just now), `FUNCTION_LIMIT` (a new name
+   * over the plan's cap) and `FUNCTION_BUSY` (the function is being deleted).
+   * It never turns the backend on. Two minutes.
+   */
+  async createVersion(projectId, name, request2) {
+    return this.client.request(
+      this.functionPath(projectId, name, "/versions"),
+      {
+        method: "POST",
+        body: request2,
+        context: "Create a function version",
+        timeoutMs: PROVISION_TIMEOUT_MS
+      }
+    );
+  }
+  /**
+   * Uploads a version whose bundle is in R2 and makes it live. `versionId` is
+   * `CreatedFunctionVersion.version.id`. The refusals before anything is
+   * uploaded leave the function as it was: `FUNCTION_NOT_FOUND`,
+   * `VERSION_NOT_FOUND`, `VERSION_NOT_DEPLOYABLE` (pruned),
+   * `BACKEND_NOT_READY`, `BACKEND_OFF`, `FUNCTION_BUSY`, `BUNDLE_MISSING`,
+   * `BUNDLE_MISMATCH`. Then `FUNCTION_DEPLOY_FAILED` (Cloudflare refused or
+   * could not be reached; the version that was live still runs),
+   * `FUNCTIONS_RATE_LIMITED` (503, `retry-after`),
+   * `FUNCTION_DEPLOY_INCOMPLETE` (the code runs but the function list did
+   * not take it, so callers may still get the previous `verifyJwt` setting
+   * or 404 — deploy again) and `BACKEND_OUTDATED` (the project's
+   * database predates the function list — `backend.enable` updates it).
+   * Two minutes.
+   */
+  async deploy(projectId, name, versionId) {
+    const body = await this.client.request(
+      this.functionPath(
+        projectId,
+        name,
+        `/versions/${this.segment(versionId, "version id")}/deploy`
+      ),
+      {
+        method: "POST",
+        context: "Deploy a function",
+        timeoutMs: PROVISION_TIMEOUT_MS
+      }
+    );
+    return body.function;
+  }
+  /**
+   * Puts a stored version live again: the one numbered `version`, which must
+   * have been live before (`VERSION_NOT_FOUND` otherwise — put a version that
+   * never went live up with `deploy`), or without it the deployed version
+   * before the live one. The code comes back, not the old keys or secrets:
+   * the bindings are the project's now. The refusals are `deploy`'s, and
+   * `VERSION_NOT_FOUND` also says there is no earlier deployed version.
+   * Two minutes.
+   */
+  async rollback(projectId, name, version2) {
+    const body = await this.client.request(
+      this.functionPath(projectId, name, "/rollback"),
+      {
+        method: "POST",
+        body: version2 === void 0 ? {} : { version: version2 },
+        context: "Roll back a function",
+        timeoutMs: PROVISION_TIMEOUT_MS
+      }
+    );
+    return body.function;
+  }
+  /**
+   * `verifyJwt` without an upload, live within seconds; the next deploy sets
+   * it again from the version it puts live. `FUNCTION_NOT_FOUND`,
+   * `FUNCTION_BUSY`, `FUNCTION_UPDATE_FAILED` (502: the function list in the
+   * project's database could not be written — nothing changed, send it again)
+   * and `BACKEND_OUTDATED`.
+   */
+  async update(projectId, name, patch) {
+    const body = await this.client.request(
+      this.functionPath(projectId, name),
+      { method: "PATCH", body: patch, context: "Update a function" }
+    );
+    return body.function;
+  }
+  /**
+   * Its URL stops working within seconds; its stored versions are removed by
+   * the control plane's sweep. `FUNCTION_NOT_FOUND`, `FUNCTION_BUSY`.
+   */
+  async remove(projectId, name) {
+    await this.client.request(
+      this.functionPath(projectId, name),
+      {
+        method: "DELETE",
+        context: "Delete a function"
+      }
+    );
+  }
+  /**
+   * The function's newest 200 log lines, optionally of one level (`log`,
+   * `info`, `warn`, `error` or `debug`; anything else is `400
+   * VALIDATION_FAILED`). `LOGS_DISABLED` (503) while the control plane has no
+   * log tail.
+   */
+  async logs(projectId, name, options = {}) {
+    const query = options.level ? `?${new URLSearchParams({ level: options.level }).toString()}` : "";
+    const body = await this.client.request(
+      this.functionPath(projectId, name, `/logs${query}`),
+      { context: "Read function logs" }
+    );
+    return body.entries;
+  }
+  /** The project's function secrets: names, digests and when — never a value. `env.read`. */
+  async secrets(projectId) {
+    const body = await this.client.request(
+      this.path(projectId, "-secrets"),
+      { context: "List function secrets" }
+    );
+    return body.secrets;
+  }
+  /**
+   * Sets and unsets function secrets in one change (`env.write.production`;
+   * a suspended project is refused). `VALIDATION_FAILED` names the first
+   * problem — a name, a reserved name (`NARO_*`, `ASSETS`, `DB`) or
+   * `__proto__`, a value over 5,120 bytes, more than 100 secrets. Live
+   * functions carry the change once synced: `pending` says how many. The
+   * control plane starts two at once and its five-minute sweep goes on with
+   * the rest, 20 a run; `sync` brings them up now — call it until `pending`
+   * is 0 to be sure, as a change racing another can leave a function only
+   * `sync` finds (known-issues #322).
+   */
+  async setSecrets(projectId, change) {
+    return this.client.request(
+      this.path(projectId, "-secrets"),
+      { method: "PUT", body: change, context: "Change function secrets" }
+    );
+  }
+  /**
+   * Uploads stale functions again — `limit` of them — and with `registry`
+   * writes the function list in the project's database again. Call it
+   * again while `pending` is above 0 and the call made progress.
+   * `FUNCTIONS_RATE_LIMITED` (503) carries `details.retryAfter`. Two minutes.
+   */
+  async sync(projectId, options = {}) {
+    return this.client.request(
+      this.path(projectId, "-sync"),
+      {
+        method: "POST",
+        body: options,
+        context: "Sync functions",
+        timeoutMs: PROVISION_TIMEOUT_MS
+      }
+    );
+  }
+};
 
 // ../../packages/sdk/src/database.ts
 var BOOKMARK_RE = /^[0-9a-f]{8}-[0-9a-f]{8}-[0-9a-f]{8}-[0-9a-f]{32}$/;
@@ -21637,8 +22122,8 @@ var MAX_CELL_CHARS = 60;
 function formatCell(value) {
   if (value === null || value === void 0) return "NULL";
   const text2 = typeof value === "string" ? value : typeof value === "object" ? JSON.stringify(value) : String(value);
-  const oneLine = text2.replace(/\s+/g, " ");
-  return oneLine.length > MAX_CELL_CHARS ? `${oneLine.slice(0, MAX_CELL_CHARS - 1)}\u2026` : oneLine;
+  const oneLine2 = text2.replace(/\s+/g, " ");
+  return oneLine2.length > MAX_CELL_CHARS ? `${oneLine2.slice(0, MAX_CELL_CHARS - 1)}\u2026` : oneLine2;
 }
 function renderRows(statement2) {
   if (statement2.columns.length === 0) return [];
@@ -22056,7 +22541,7 @@ function isWordChar(char) {
 function asciiUpper2(text2) {
   return text2.replace(/[a-z]/g, (letter) => letter.toUpperCase());
 }
-function quoted(sql, start, close, doubles) {
+function quoted2(sql, start, close, doubles) {
   let value = "";
   for (let index = start + 1; index < sql.length; index++) {
     const char = sql.charAt(index);
@@ -22089,7 +22574,7 @@ function tokenize(sql) {
       index = end + 2;
     } else if (char === '"' || char === "`" || char === "[" || char === "'") {
       const close = char === "[" ? "]" : char;
-      const read = quoted(sql, index, close, char !== "[");
+      const read = quoted2(sql, index, close, char !== "[");
       if (!read) return void 0;
       tokens.push({
         kind: char === "'" ? "string" : "name",
@@ -24179,9 +24664,9 @@ function readCondition(stream) {
   const token = stream.peek();
   const state = newState(stream);
   const expr = readOr(state);
-  const bare = state.foldernames.find(({ node }) => node.index === null);
-  if (bare)
-    throw new PolicySyntaxError(FOLDERNAME_INDEX_PROBLEM, bare.token.position);
+  const bare2 = state.foldernames.find(({ node }) => node.index === null);
+  if (bare2)
+    throw new PolicySyntaxError(FOLDERNAME_INDEX_PROBLEM, bare2.token.position);
   return requireCondition(expr, token);
 }
 function checkExpressionSize(expr, position) {
@@ -24589,8 +25074,8 @@ function policiesOn(policies, table) {
   const folded = asciiLower(table);
   return policies.filter((policy) => asciiLower(policy.table) === folded);
 }
-function foldPolicyName(name, quoted2) {
-  return quoted2 ? name : asciiLower(name);
+function foldPolicyName(name, quoted3) {
+  return quoted3 ? name : asciiLower(name);
 }
 function sqlStringLiteral(text2) {
   return text2 === null ? "NULL" : quoteString(text2);
@@ -28258,10 +28743,10 @@ function headTokens(text2) {
     const char = text2.charAt(index);
     if (index >= text2.length) break;
     if (char === '"' || char === "`" || char === "'") {
-      const quoted2 = readQuoted(text2, index, char);
-      if (!quoted2) break;
-      tokens.push({ kind: "name", text: quoted2.text });
-      index = quoted2.end;
+      const quoted3 = readQuoted(text2, index, char);
+      if (!quoted3) break;
+      tokens.push({ kind: "name", text: quoted3.text });
+      index = quoted3.end;
     } else if (char === "[") {
       const close = text2.indexOf("]", index + 1);
       if (close < 0) break;
@@ -28428,6 +28913,13 @@ function readSqlHead(text2) {
   return OTHER;
 }
 
+// ../../packages/data-core/src/functions-registry.ts
+var FUNCTIONS_TABLE = "_naro_functions";
+var FUNCTIONS_REGISTRY_VERSION = 9;
+var FUNCTIONS_TABLE_SQL = `CREATE TABLE IF NOT EXISTS ${FUNCTIONS_TABLE} (name TEXT NOT NULL PRIMARY KEY CHECK (name GLOB '[a-z]*' AND length(name) BETWEEN 1 AND 64), verify_jwt INTEGER NOT NULL DEFAULT 1 CHECK (verify_jwt IN (0, 1)), updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')))`;
+var MAX_REGISTERED_FUNCTIONS = 2e3;
+var FUNCTIONS_REGISTRY_SQL = `SELECT name, verify_jwt FROM ${FUNCTIONS_TABLE} ORDER BY name LIMIT ${String(MAX_REGISTERED_FUNCTIONS)}`;
+
 // ../../packages/data-core/src/policy-index.ts
 var INDEX_SQL = `SELECT t.name AS table_name, il.name AS index_name, il."partial" AS partial, ix.name AS column_name, ix.coll AS collation FROM pragma_table_list AS t JOIN pragma_index_list(t.name, t.schema) AS il JOIN pragma_index_xinfo(il.name, t.schema) AS ix WHERE t.schema = 'main' AND t.type = 'table' AND ${systemTablePredicate("t.name")} AND ix.seqno = 0`;
 function indexesFromRows(rows) {
@@ -30069,13 +30561,13 @@ function ownerComment(text2, position) {
   if (rest !== "" && !/^[ \t]/.test(rest)) return void 0;
   let column2 = rest.replace(/^[ \t]+|[ \t]+$/g, "");
   if (column2.startsWith('"')) {
-    const quoted2 = /^"((?:[^"]|"")*)"$/.exec(column2);
-    if (!quoted2)
+    const quoted3 = /^"((?:[^"]|"")*)"$/.exec(column2);
+    if (!quoted3)
       throw new PolicySyntaxError(
         "naro:owner needs one column name, bare or in double quotes",
         position
       );
-    column2 = (quoted2[1] ?? "").replaceAll('""', '"');
+    column2 = (quoted3[1] ?? "").replaceAll('""', '"');
   }
   if (column2 === "")
     throw new PolicySyntaxError("naro:owner needs a column name", position);
@@ -30282,6 +30774,15 @@ var SYSTEM_MIGRATIONS = [
     version: REALTIME_TABLES_VERSION,
     name: "realtime",
     statements: [REALTIME_TABLES_SQL]
+  },
+  {
+    // Functions 3-3a (design 2026-10-29 §6.3): the function registry the
+    // gate reads. Every backend gets it, Functions on or not; the control
+    // plane (3-3b) writes it. A worker from before it never reads it, and a
+    // worker that reads it on a D1 without it answers 409 BACKEND_OUTDATED.
+    version: FUNCTIONS_REGISTRY_VERSION,
+    name: "functions",
+    statements: [FUNCTIONS_TABLE_SQL]
   }
 ];
 
@@ -31053,13 +31554,13 @@ function compareMigrations(local, applied) {
       rows.push({ name, status: "applied", appliedAt: exact.appliedAt });
       continue;
     }
-    const bare = ledger.get(name.replace(/\.sql$/, ""));
-    if (bare) {
-      ledger.delete(bare.name);
+    const bare2 = ledger.get(name.replace(/\.sql$/, ""));
+    if (bare2) {
+      ledger.delete(bare2.name);
       rows.push({
         name,
         status: "applied",
-        appliedAt: bare.appliedAt,
+        appliedAt: bare2.appliedAt,
         warning: "ledger-name-missing-extension"
       });
       continue;
@@ -32002,6 +32503,10 @@ function failureCode(error51, fallback) {
   const code = error51 && typeof error51 === "object" ? error51.code : void 0;
   return typeof code === "string" && DEPLOYMENT_CODES.has(code) ? code : fallback;
 }
+var SYSTEM_NAMES = new Set(NARO_SYSTEM_ENV_NAMES);
+function isNaroSystemName(key) {
+  return SYSTEM_NAMES.has(key);
+}
 function slugify2(value) {
   const slug = value.replace(/^@[^/]+\//, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 54);
   return slug || "app";
@@ -32184,6 +32689,16 @@ async function deployDirectory(sourceDir, options, log2) {
     const provided = options.env ?? {};
     missing = scanned.filter((key) => !existing.has(key) && !(key in provided));
   }
+  if (environment !== void 0 && options.projectId && missing.some((key) => isNaroSystemName(key))) {
+    const backend = await client.backend.info(options.projectId).catch(() => null);
+    if (backend !== null && backend.status !== "none") {
+      const set2 = missing.filter((key) => isNaroSystemName(key));
+      missing = missing.filter((key) => !isNaroSystemName(key));
+      log2(
+        `\u25B8 naro sets ${set2.join(", ")} for ${environment} to its own backend's: not asked for`
+      );
+    }
+  }
   let collected = {};
   if (missing.length > 0) {
     log2(
@@ -32229,7 +32744,16 @@ async function deployDirectory(sourceDir, options, log2) {
         repositoryUrl: sourceDir,
         branch: ctx.branch,
         rootDirectory: options.rootDirectory ?? null,
-        env: { ...ctx.env, ...envToSend },
+        // An environment's deploy: the control plane saved what this sent for
+        // that environment and then chose its values, so a key sent and a key
+        // chosen usually hold the same value — except the names naro sets for
+        // an environment with a backend (named environments spec §8.3), which
+        // must win here too, or this build would call another backend than
+        // the worker's bindings, and a key the server failed to save
+        // (`envSkipped`), whose stored value the worker gets and so this build
+        // takes too. Production and preview keep a value sent over the stored
+        // one, as before.
+        env: ctx.environment ? { ...envToSend, ...ctx.env } : { ...ctx.env, ...envToSend },
         strategy: ctx.strategy ?? null,
         ...ctx.vinextEnabled === void 0 ? {} : { vinextEnabled: ctx.vinextEnabled }
       },
@@ -32320,10 +32844,12 @@ function deploymentUrl(detail, ctx, production) {
 }
 
 export {
+  environmentGuidance,
   parseGitHubRemote,
   schemaMigrationTitle,
   projectPath,
   splitStatements,
+  environmentSlugProblem,
   ANALYTICS_FILTER_KEYS,
   NaroError,
   promoteTargetUnsupported,