@lunora/cli/dist/packem_chunks/handler7.mjs

The Lunora CLI: init, dev, deploy, codegen, migrate, seed, doctor, insights, logs, registry, and the rest of the project commands

import{writeFileSync as $,existsSync as h,readFileSync as V}from"node:fs";import{join as S}from"node:path";import{DEV_VARS_FILE as u,DEV_VARS_KEY_PATTERN as k,upsertDevVariableLine as A,isPlaceholderValue as P,resolveDeployDriver as K,resolveProjectTarget as R,generateSecretValue as D,DEV_VARS_EXAMPLE_FILE as v,parseDevVariableEntries as _,escapeRegExp as U,packageNamesFromBindings as Y,inferLunoraBindings as j,requiredSecrets as Z,isMintableSecretKey as E}from"@lunora/config";import{i as q}from"../packem_shared/command-0l-ZPhIX.mjs";import{l as C,M as F}from"../packem_shared/detect-package-manager-DXDstphE.mjs";import{defaultSpawner as M}from"../packem_shared/createRecordingSpawner-SKs4R1fc.mjs";import{f as B}from"../packem_shared/wrangler-secrets-D0Tv5GWn.mjs";const I=/[\r\n]/u,N=/["\\]/u,x=e=>new Map(_(e).map(s=>[s.key,s])),g=e=>h(e)?V(e,"utf8"):"",T=(e,s)=>e.replaceAll(new RegExp(String.raw`^[ \t]*${U(s)}[ \t]*=.*(?:\r?\n|$)`,"gmu"),""),L=e=>e.length<=4?"****":`${e.slice(0,4)}${"*".repeat(Math.min(8,e.length-4))}`,f=e=>x(g(e)),z=e=>e.env??(e.prod===!0?"production":void 0),X=e=>{const s=f(e.devVariablesPath);if(s.size===0)return e.logger.info(`${u}: (empty)`),{code:0,descriptors:[]};for(const t of s.values())e.logger.info(`${t.key}=${L(t.value)}`);return{code:0,descriptors:[]}},G=e=>{const{devVariablesPath:s,logger:t,options:r}=e;if(!r.key)return t.error("env get requires a key. Usage: lunora env get <KEY>"),{code:1,descriptors:[]};const o=f(s).get(r.key);return o?(process.stdout.write(`${o.value}
`),{code:0,descriptors:[]}):(t.error(`env: ${r.key} is not set in ${u}`),{code:1,descriptors:[]})},H=e=>{const{devVariablesPath:s,logger:t,options:r}=e;if(!r.key)return t.error("env set requires a key. Usage: lunora env set <KEY> <VALUE>"),{code:1,descriptors:[]};if(!k.test(r.key))return t.error(`env: invalid key "${r.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:1,descriptors:[]};if(r.value===void 0)return t.error("env set requires a value. Usage: lunora env set <KEY> <VALUE>"),{code:1,descriptors:[]};if(I.test(r.value))return t.error(`env: value for "${r.key}" contains a newline, which .dev.vars cannot represent`),{code:1,descriptors:[]};if(N.test(r.value))return t.error(`env: value for "${r.key}" contains a double-quote or backslash, which .dev.vars cannot round-trip`),{code:1,descriptors:[]};const o=g(s);return $(s,A(o,r.key,r.value),"utf8"),t.success(`env: set ${r.key} (${L(r.value)}) in ${u}`),{code:0,descriptors:[]}},J=e=>{const{devVariablesPath:s,logger:t,options:r}=e;if(!r.key)return t.error("env unset requires a key. Usage: lunora env unset <KEY>"),{code:1,descriptors:[]};if(!k.test(r.key))return t.error(`env: invalid key "${r.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:1,descriptors:[]};const o=g(s);return x(o).has(r.key)?($(s,T(o,r.key),"utf8"),t.success(`env: unset ${r.key} in ${u}`),{code:0,descriptors:[]}):(t.warn(`env: ${r.key} was not set in ${u}`),{code:0,descriptors:[]})},Q=async e=>{const{devVariablesPath:s,logger:t,options:r}=e;if(!r.yes)return t.error("env push uploads secrets to Cloudflare. Re-run with --yes to confirm."),{code:1,descriptors:[]};const o=f(s);if(o.size===0)return t.warn(`${u}: nothing to push (empty)`),{code:0,descriptors:[]};const i=[...o.values()].filter(n=>P(n.value)).map(n=>n.key);if(i.length>0)return t.error(`env push: refusing to upload placeholder value(s) for ${i.join(", ")} — run \`lunora env doctor\` to review, and \`lunora env generate --set\` (or \`lunora env set <KEY> <VALUE>\`) to fill them, then re-run.`),{code:1,descriptors:[]};const c=r.spawner??M,d=r.cwd??process.cwd(),p=C(d),a=[],l=z(r);for(const n of o.values()){const m=K(R(d)).toolchain?.secretPut({environment:l,key:n.key,temporary:r.temporary});if(m===void 0)return t.error("deploy target has no command-line toolchain; cannot push secrets"),{code:1,descriptors:[]};const w=F(p,m.tool,m.args),b={args:w.args,command:w.command,cwd:d,input:n.value};a.push(b),t.info(`pushing ${n.key} -> wrangler secret${l===void 0?"":` (${l})`}`);const y=await c(b);if(y.code!==0)return t.error(`env push: failed at ${n.key} (exit ${String(y.code)})`),{code:y.code,descriptors:a}}return t.success(`env: pushed ${String(o.size)} secret(s)`),{code:0,descriptors:a}},W=e=>(e.options.secretLister??B)({cwd:e.cwd,env:z(e.options),temporary:e.options.temporary}),O=async e=>{const{devVariablesPath:s,logger:t}=e,r=await W(e);if(!r.ok)return t.error(`env diff: ${r.error??"failed to list remote secrets"}`),{code:1,descriptors:[]};const o=new Set(f(s).keys()),i=new Set(r.names),c=[...o].filter(a=>!i.has(a)).toSorted((a,l)=>a.localeCompare(l)),d=r.names.filter(a=>!o.has(a)),p=[...o].filter(a=>i.has(a)).toSorted((a,l)=>a.localeCompare(l));for(const a of c)t.info(`local only (run \`lunora env push\`): ${a}`);for(const a of d)t.info(`remote only (in Cloudflare, not ${u}): ${a}`);return t.info(`in both: ${String(p.length)} secret(s)`),c.length===0&&d.length===0&&t.success("env diff: local and remote secret names match"),{code:0,descriptors:[]}},ee=e=>{const{cwd:s,devVariablesPath:t,logger:r}=e,o=S(s,v);if(!h(o))return r.info(`env doctor: no ${v} to check against — nothing to validate.`),{code:0,descriptors:[]};const i=_(V(o,"utf8")).map(n=>n.key),c=f(t);if(!h(t))return r.error(`env doctor: ${u} is missing. Run \`lunora dev\` to scaffold it, or \`lunora env set <KEY> <VALUE>\`.`),r.info(`expected (from ${v}): ${i.join(", ")}`),{code:1,descriptors:[]};const d=i.filter(n=>!c.has(n)),p=[...c.values()].filter(n=>P(n.value)).map(n=>n.key),a=new Set(i),l=[...c.keys()].filter(n=>!a.has(n));for(const n of d)r.error(`missing: ${n} is in ${v} but not ${u}`);for(const n of p)r.error(`unset: ${n} still has a placeholder value`);for(const n of l)r.info(`extra: ${n} is set locally but not listed in ${v}`);return d.length===0&&p.length===0?(r.success(`env doctor: ${u} looks good (${String(c.size)} var(s)).`),{code:0,descriptors:[]}):{code:1,descriptors:[]}},re=async e=>{let s=[];try{s=Y(await j({projectRoot:e.cwd}))}catch{}const t=Z(s).map(o=>o.key).filter(o=>E(o)),r=[...f(e.devVariablesPath).keys()].filter(o=>E(o));return[...new Set([...t,...r])]},te=async e=>{const{devVariablesPath:s,logger:t,options:r}=e;let o;if(r.key===void 0){if(o=await re(e),o.length===0)return t.info("env generate: no locally-generatable secrets for this project. Name one explicitly: lunora env generate <KEY>"),{code:0,descriptors:[]}}else{if(!k.test(r.key))return t.error(`env: invalid key "${r.key}" — must match [A-Za-z_][A-Za-z0-9_]*`),{code:1,descriptors:[]};o=[r.key]}const i=o.map(c=>({key:c,value:D()}));if(r.set===!0){let c=g(s);for(const d of i)c=A(c,d.key,d.value);return $(s,c,"utf8"),t.success(`env: generated ${String(i.length)} secret(s) into ${u}: ${i.map(d=>d.key).join(", ")}`),{code:0,descriptors:[]}}for(const c of i)process.stdout.write(`${c.key}=${c.value}
`);return{code:0,descriptors:[]}},oe=async e=>{const s=e.cwd??process.cwd(),t={cwd:s,devVariablesPath:S(s,u),logger:e.logger,options:e};switch(e.subcommand){case"diff":return O(t);case"doctor":return ee(t);case"generate":return te(t);case"get":return G(t);case"list":return X(t);case"push":return Q(t);case"set":return H(t);case"unset":return J(t);default:return e.logger.error(`env: unknown subcommand "${e.subcommand}"`),{code:1,descriptors:[]}}},se=new Set(["diff","doctor","generate","get","list","push","set","unset"]),ne=e=>typeof e=="string"&&se.has(e),fe=q(({argument:e,cwd:s,logger:t,options:r})=>{const o=e[0];return ne(o)?oe({cwd:s,env:r.env,key:e[1],logger:t,prod:r.prod===!0,set:r.set===!0,subcommand:o,temporary:r.temporary===!0,value:e[2],yes:r.yes===!0}):(t.error(`env: unknown subcommand "${o??""}" — expected list | get | set | unset | push | diff | doctor | generate`),{code:1})});export{fe as execute,oe as runEnvCommand};