@lunora/bindings 1.0.0-alpha.1 → 1.0.0-alpha.10

package/dist/packem_shared/{Sql-CkDyJ_Sc.mjs → Sql-B3zq2YGx.mjs}

@@ -1,4 +1,7 @@
 const quoteString = (value) => `'${value.replaceAll("'", "''")}'`;
+const IDENTIFIER_RE = /^\w+(?:\.\w+)*$/;
+const TABLE_REF_RE = /^\w+(?:\.\w+)*(?:\s+(?:as\s+)?\w+)?$/i;
+const MAX_LIMIT = 1e4;
 class Sql {
   text;
   constructor(text) {
@@ -11,6 +14,18 @@ class Sql {
 const isSql = (value) => value instanceof Sql;
 const raw = (text) => new Sql(text);
 const toText = (value) => isSql(value) ? value.text : value;
+const ident = (name) => {
+  if (typeof name !== "string" || !IDENTIFIER_RE.test(name)) {
+    throw new TypeError(`r2sql: invalid identifier ${JSON.stringify(name)} — expected dotted [A-Za-z0-9_] segments (e.g. "namespace.table").`);
+  }
+  return name;
+};
+const tableRef = (ref) => {
+  if (typeof ref !== "string" || !TABLE_REF_RE.test(ref)) {
+    throw new TypeError(`r2sql: invalid table reference ${JSON.stringify(ref)} — expected "namespace.table" with an optional "[AS] alias".`);
+  }
+  return ref;
+};
 const lit = (value) => {
   if (value === null || value === void 0) {
     return "NULL";
@@ -50,5 +65,10 @@ const sql = (strings, ...values) => {
   return new Sql(out);
 };
 const joinSql = (parts, separator) => new Sql(parts.map((part) => toText(part)).join(separator));
+const assertLimit = (n) => {
+  if (!Number.isInteger(n) || n < 1 || n > MAX_LIMIT) {
+    throw new RangeError(`r2sql: limit must be an integer between 1 and ${String(MAX_LIMIT)} (got ${String(n)}).`);
+  }
+};
 
-export { Sql, isSql, joinSql, lit, raw, sql, toText };
+export { Sql, assertLimit, ident, isSql, joinSql, lit, raw, sql, tableRef, toText };

package/dist/packem_shared/{WindowExpression-C2vj7oNX.mjs → WindowExpression-BT_uA6g1.mjs}

@@ -1,4 +1,4 @@
-import { Sql, lit } from './Sql-CkDyJ_Sc.mjs';
+import { Sql, lit } from './Sql-B3zq2YGx.mjs';
 
 const IDENTIFIER = /^[A-Z_][\w$]*$/i;
 const assertIdent = (name) => {

package/dist/packem_shared/{WindowFunction-CuKHfZX3.mjs → WindowFunction-DrnuZUF6.mjs}

@@ -1,6 +1,6 @@
-import { renderOrderTerm } from './asc-C6Jbaa6R.mjs';
-import { lit, toText } from './Sql-CkDyJ_Sc.mjs';
-import WindowExpression from './WindowExpression-C2vj7oNX.mjs';
+import { renderOrderTerm } from './asc-DZbQCxh1.mjs';
+import { lit, toText } from './Sql-B3zq2YGx.mjs';
+import WindowExpression from './WindowExpression-BT_uA6g1.mjs';
 
 const toArray = (value) => {
   if (value === void 0) {

package/dist/packem_shared/{asc-C6Jbaa6R.mjs → asc-DZbQCxh1.mjs}

@@ -1,4 +1,4 @@
-import { Sql, toText } from './Sql-CkDyJ_Sc.mjs';
+import { Sql, toText } from './Sql-B3zq2YGx.mjs';
 
 const asc = (expr) => {
   return { dir: "ASC", expr };

package/dist/packem_shared/{buildImageDeliveryUrl-D1sVfIOP.mjs → buildImageDeliveryUrl-qZ7XbqTL.mjs}

@@ -1,11 +1,16 @@
+import { LunoraError } from '@lunora/errors';
+
 const ABSOLUTE_URL_RE = /^[a-z][a-z\d+\-.]*:\/\//i;
+const FORBIDDEN_VALUE_CHARS = [",", "=", "#", "?", "/"];
 const stripTrailingSlash = (value) => value.endsWith("/") ? value.slice(0, -1) : value;
 const stripLeadingSlash = (value) => value.startsWith("/") ? value.slice(1) : value;
 const serializeTransform = (transform) => Object.entries(transform).filter(([, value]) => value !== void 0 && (typeof value === "string" || typeof value === "number")).map(([key, value]) => {
   const serialized = String(value);
-  if (serialized.includes(",") || serialized.includes("=")) {
-    throw new Error(
-      `@lunora/bindings/images: transform option \`${key}\` value \`${serialized}\` contains a \`,\` or \`=\`, which the /cdn-cgi/image/ option list cannot represent (these are the option/key-value separators). For colors, use the hex form (e.g. \`#RRGGBB\`/\`%23RRGGBB\`) instead of \`rgb(r,g,b)\`.`
+  const offendingChar = FORBIDDEN_VALUE_CHARS.find((char) => serialized.includes(char));
+  if (offendingChar !== void 0) {
+    throw new LunoraError(
+      "INTERNAL",
+      `@lunora/bindings/images: transform option \`${key}\` value \`${serialized}\` contains a \`${offendingChar}\`, which the /cdn-cgi/image/ option path cannot represent (\`,\`/\`=\` are the option/key-value separators; \`#\`/\`?\`/\`/\` are URL-structural). Percent-encode the value — for colors use \`%23RRGGBB\`, not \`#RRGGBB\` or \`rgb(r,g,b)\`.`
     );
   }
   return `${key}=${serialized}`;
@@ -18,7 +23,7 @@ const buildImageDeliveryUrl = (options) => {
     return `${base}/${encodeURIComponent(options.imageId)}/${encodeURIComponent(variant)}`;
   }
   if (options.key === void 0) {
-    throw new Error("@lunora/bindings/images: buildImageDeliveryUrl requires either `imageId` or `key`");
+    throw new LunoraError("INTERNAL", "@lunora/bindings/images: buildImageDeliveryUrl requires either `imageId` or `key`");
   }
   const optionString = options.transform === void 0 ? "" : serializeTransform(options.transform);
   const isAbsolute = ABSOLUTE_URL_RE.test(options.key);

package/dist/packem_shared/{buildSignedImageUrl-Otdgc_jO.mjs → buildSignedImageUrl-DNUFfyGP.mjs}

@@ -1,7 +1,16 @@
+const evictOldestEntry = (map, capacity) => {
+  if (map.size < capacity) {
+    return;
+  }
+  const oldest = map.keys().next().value;
+  if (oldest !== void 0) {
+    map.delete(oldest);
+  }
+};
+
 const textEncoder = new TextEncoder();
-const MAX_EXPIRES_IN_SECONDS = 7 * 24 * 60 * 60;
-const SCHEME_PREFIX_RE = /^[a-z][a-z\d+\-.]*:\/\//i;
-const LEADING_SLASH_RE = /^\//;
+const MAX_SIGNED_URL_TTL_SECONDS = 7 * 24 * 60 * 60;
+const SCHEME_PREFIX_RE = /^[a-z][a-z0-9+\-.]*:\/\//i;
 const toBase64Url = (bytes) => {
   const binary = String.fromCodePoint(...bytes);
   return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replaceAll("=", "");
@@ -22,16 +31,30 @@ const importHmacKey = async (secret) => {
   if (cached) {
     return cached;
   }
-  if (keyCache.size >= KEY_CACHE_MAX) {
-    const oldest = keyCache.keys().next().value;
-    if (oldest !== void 0) {
-      keyCache.delete(oldest);
-    }
-  }
+  evictOldestEntry(keyCache, KEY_CACHE_MAX);
   const keyPromise = crypto.subtle.importKey("raw", textEncoder.encode(secret), { hash: "SHA-256", name: "HMAC" }, false, ["sign", "verify"]);
   keyCache.set(secret, keyPromise);
   return keyPromise;
 };
+const extractHost = (input) => {
+  try {
+    return new URL(input).host;
+  } catch {
+    const noScheme = input.replace(SCHEME_PREFIX_RE, "");
+    return noScheme.split("/")[0] ?? "";
+  }
+};
+const signCanonical = async (secret, canonical) => {
+  const cryptoKey = await importHmacKey(secret);
+  const signature = await crypto.subtle.sign("HMAC", cryptoKey, textEncoder.encode(canonical));
+  return toBase64Url(new Uint8Array(signature));
+};
+const verifyCanonical = async (secret, canonical, sigBytes) => {
+  const cryptoKey = await importHmacKey(secret);
+  return crypto.subtle.verify("HMAC", cryptoKey, sigBytes, textEncoder.encode(canonical));
+};
+
+const LEADING_SLASH_RE = /^\//;
 const serializeTransform = (transform) => {
   if (transform === void 0) {
     return "";
@@ -42,30 +65,30 @@ const canonicalize = (host, key, exp, transform) => `${host.toLowerCase()}
 ${key}
 ${String(exp)}
 ${transform}`;
-const extractHost = (input) => {
-  try {
-    return new URL(input).host;
-  } catch {
-    const noScheme = input.replace(SCHEME_PREFIX_RE, "");
-    return noScheme.split("/")[0] ?? "";
-  }
-};
 const encodeKey = (key) => key.split("/").map((segment) => encodeURIComponent(segment)).join("/");
 const buildSignedImageUrl = async (options) => {
   const expiresInSeconds = options.expiresInSeconds ?? 60 * 60;
   if (!Number.isFinite(expiresInSeconds) || expiresInSeconds <= 0) {
-    throw new Error("@lunora/bindings/images: expiresInSeconds must be a positive finite number");
+    throw new TypeError("@lunora/bindings/images: expiresInSeconds must be a positive finite number");
+  }
+  if (expiresInSeconds > MAX_SIGNED_URL_TTL_SECONDS) {
+    throw new TypeError(`@lunora/bindings/images: expiresInSeconds must not exceed ${String(MAX_SIGNED_URL_TTL_SECONDS)} (7 days)`);
   }
-  if (expiresInSeconds > MAX_EXPIRES_IN_SECONDS) {
-    throw new Error(`@lunora/bindings/images: expiresInSeconds must not exceed ${String(MAX_EXPIRES_IN_SECONDS)} (7 days)`);
+  let basePath = "";
+  try {
+    basePath = new URL(options.baseUrl).pathname;
+  } catch {
+  }
+  if (basePath !== "" && basePath !== "/") {
+    throw new TypeError(
+      `@lunora/bindings/images: baseUrl must not carry a path ("${basePath}") — the key is verified from the full URL pathname, so a subpath base would make every signed URL fail verification`
+    );
   }
   const exp = Math.floor(Date.now() / 1e3) + expiresInSeconds;
   const host = extractHost(options.baseUrl);
   const transform = serializeTransform(options.transform);
   const normalizedKey = options.key.replace(LEADING_SLASH_RE, "");
-  const cryptoKey = await importHmacKey(options.secret);
-  const signature = await crypto.subtle.sign("HMAC", cryptoKey, textEncoder.encode(canonicalize(host, normalizedKey, exp, transform)));
-  const sig = toBase64Url(new Uint8Array(signature));
+  const sig = await signCanonical(options.secret, canonicalize(host, normalizedKey, exp, transform));
   const base = options.baseUrl.endsWith("/") ? options.baseUrl.slice(0, -1) : options.baseUrl;
   const safeKey = encodeKey(normalizedKey);
   const tParameter = transform === "" ? "" : `&t=${encodeURIComponent(transform)}`;
@@ -97,13 +120,7 @@ const verifySignedImageUrl = async (input, secret, options) => {
     return { reason: "malformed", valid: false };
   }
   const host = options?.expectedHost === void 0 ? url.host : extractHost(options.expectedHost);
-  const cryptoKey = await importHmacKey(secret);
-  const valid = await crypto.subtle.verify(
-    "HMAC",
-    cryptoKey,
-    sigBytes,
-    textEncoder.encode(canonicalize(host, key, exp, transform))
-  );
+  const valid = await verifyCanonical(secret, canonicalize(host, key, exp, transform), sigBytes);
   if (!valid) {
     return { reason: "bad_signature", valid: false };
   }

package/dist/packem_shared/{concurrent-Dj5sOibv.mjs → concurrent-CkCEVwqP.mjs}

@@ -6,17 +6,33 @@ const concurrentMap = async (items, limit, function_) => {
   const effectiveLimit = Math.max(1, Math.min(limit, items.length));
   const results = Array.from({ length: items.length });
   let cursor = 0;
+  let failed = false;
+  let firstError;
   const workers = Array.from({ length: effectiveLimit }, async () => {
     for (; ; ) {
+      if (failed) {
+        return;
+      }
       const index = cursor;
       cursor += 1;
       if (index >= items.length) {
         return;
       }
-      results[index] = await function_(items[index], index);
+      try {
+        results[index] = await function_(items[index], index);
+      } catch (error) {
+        if (!failed) {
+          failed = true;
+          firstError = error;
+        }
+        return;
+      }
     }
   });
   await Promise.all(workers);
+  if (failed) {
+    throw firstError;
+  }
   return results;
 };
 

package/dist/packem_shared/{createContextVectors-BSizpmu5.mjs → createContextVectors-DwZtnPeC.mjs}

@@ -1,4 +1,4 @@
-import { c as concurrentMap, U as UPSERT_EMBED_CONCURRENCY } from './concurrent-Dj5sOibv.mjs';
+import { c as concurrentMap, U as UPSERT_EMBED_CONCURRENCY } from './concurrent-CkCEVwqP.mjs';
 
 const createContextVectors = (lunora) => {
   const upsert = async (indexName, input) => {

package/dist/packem_shared/{createImages-CJrvqX0u.mjs → createImages-BzRnsz3H.mjs}

@@ -1,3 +1,5 @@
+import { LunoraError } from '@lunora/errors';
+
 const ALLOWED_OUTPUT_FORMATS = /* @__PURE__ */ new Set(["image/avif", "image/gif", "image/jpeg", "image/png", "image/webp"]);
 const DEFAULT_MAX_DIMENSION = 1e4;
 const DEFAULT_OUTPUT_FORMAT = "image/webp";
@@ -14,7 +16,7 @@ const toStream = (input) => {
   }
   if (isR2ObjectBody(input)) {
     if (input.body === null) {
-      throw new Error("@lunora/bindings/images: R2 object body is null (object missing or already consumed)");
+      throw new LunoraError("INTERNAL", "@lunora/bindings/images: R2 object body is null (object missing or already consumed)");
     }
     return input.body;
   }
@@ -35,7 +37,7 @@ const sanitizeTransform = (transform, maxDimension) => {
   }
   const clampDimension = (value) => {
     if (!Number.isFinite(value) || value <= 0) {
-      throw new Error("@lunora/bindings/images: width/height must be a positive finite number");
+      throw new TypeError("@lunora/bindings/images: width/height must be a positive finite number");
     }
     return Math.min(Math.floor(value), maxDimension);
   };
@@ -54,7 +56,10 @@ const splitOverlay = (overlay) => {
 const resolveOutput = (output) => {
   const format = output?.format ?? DEFAULT_OUTPUT_FORMAT;
   if (!ALLOWED_OUTPUT_FORMATS.has(format)) {
-    throw new Error(`@lunora/bindings/images: unsupported output format "${format}" (allowed: ${[...ALLOWED_OUTPUT_FORMATS].join(", ")})`);
+    throw new LunoraError(
+      "INTERNAL",
+      `@lunora/bindings/images: unsupported output format "${format}" (allowed: ${[...ALLOWED_OUTPUT_FORMATS].join(", ")})`
+    );
   }
   return { ...output, format };
 };

package/dist/packem_shared/{createKv-DTiSt216.mjs → createKv-C8Iyu5hD.mjs}

@@ -1,19 +1,23 @@
+import { LunoraError } from '@lunora/errors';
+
 const MAX_KEY_LENGTH = 512;
 const MAX_LIST_LIMIT = 1e3;
+const TEXT_ENCODER = new TextEncoder();
+const byteLength = (value) => TEXT_ENCODER.encode(value).length;
 const validateKey = (key) => {
   if (typeof key !== "string" || key.length === 0) {
-    throw new Error("@lunora/bindings/kv: key must be a non-empty string");
+    throw new TypeError("@lunora/bindings/kv: key must be a non-empty string");
   }
-  if (key.length > MAX_KEY_LENGTH) {
-    throw new Error(`@lunora/bindings/kv: key exceeds ${String(MAX_KEY_LENGTH)}-byte limit`);
+  if (byteLength(key) > MAX_KEY_LENGTH) {
+    throw new LunoraError("INTERNAL", `@lunora/bindings/kv: key exceeds ${String(MAX_KEY_LENGTH)}-byte limit`);
   }
   if (key.includes("\0")) {
-    throw new Error("@lunora/bindings/kv: key contains NUL byte");
+    throw new LunoraError("INTERNAL", "@lunora/bindings/kv: key contains NUL byte");
   }
   const segments = key.split("/");
   for (const segment of segments) {
     if (segment === "." || segment === "..") {
-      throw new Error("@lunora/bindings/kv: key contains a `.`/`..` path component");
+      throw new LunoraError("INTERNAL", "@lunora/bindings/kv: key contains a `.`/`..` path component");
     }
   }
 };
@@ -21,16 +25,16 @@ const validatePrefix = (prefix) => {
   if (prefix.length === 0) {
     return;
   }
-  if (prefix.length > MAX_KEY_LENGTH) {
-    throw new Error(`@lunora/bindings/kv: prefix exceeds ${String(MAX_KEY_LENGTH)}-byte limit`);
+  if (byteLength(prefix) > MAX_KEY_LENGTH) {
+    throw new LunoraError("INTERNAL", `@lunora/bindings/kv: prefix exceeds ${String(MAX_KEY_LENGTH)}-byte limit`);
   }
   if (prefix.includes("\0")) {
-    throw new Error("@lunora/bindings/kv: prefix contains NUL byte");
+    throw new LunoraError("INTERNAL", "@lunora/bindings/kv: prefix contains NUL byte");
   }
   const segments = prefix.split("/");
   for (const segment of segments) {
     if (segment === "." || segment === "..") {
-      throw new Error("@lunora/bindings/kv: prefix contains a `.`/`..` path component");
+      throw new LunoraError("INTERNAL", "@lunora/bindings/kv: prefix contains a `.`/`..` path component");
     }
   }
 };
@@ -39,15 +43,15 @@ const scopeKey = (prefix, key) => {
   validateKey(key);
   const trimmedPrefix = prefix.endsWith("/") ? prefix.slice(0, -1) : prefix;
   const composed = `${trimmedPrefix}/${key}`;
-  if (composed.length > MAX_KEY_LENGTH) {
-    throw new Error(`@lunora/bindings/kv: scoped key exceeds ${String(MAX_KEY_LENGTH)}-byte limit`);
+  if (byteLength(composed) > MAX_KEY_LENGTH) {
+    throw new LunoraError("INTERNAL", `@lunora/bindings/kv: scoped key exceeds ${String(MAX_KEY_LENGTH)}-byte limit`);
   }
   return composed;
 };
 const toPutOptions = (options) => {
   const out = {};
   if (options.expiration !== void 0 && options.expirationTtl !== void 0) {
-    throw new Error("@lunora/bindings/kv: `expiration` and `expirationTtl` are mutually exclusive");
+    throw new LunoraError("INTERNAL", "@lunora/bindings/kv: `expiration` and `expirationTtl` are mutually exclusive");
   }
   if (options.expiration !== void 0) {
     out.expiration = options.expiration;
@@ -62,7 +66,7 @@ const toPutOptions = (options) => {
 };
 const createKv = (options) => {
   if (!options.namespace) {
-    throw new Error("@lunora/bindings/kv: `namespace` is required");
+    throw new TypeError("@lunora/bindings/kv: `namespace` is required");
   }
   const { keyPrefix, namespace } = options;
   if (keyPrefix !== void 0) {
@@ -103,7 +107,7 @@ const createKv = (options) => {
   };
   const list = async (listOptions = {}) => {
     if (listOptions.limit !== void 0 && (!Number.isInteger(listOptions.limit) || listOptions.limit <= 0)) {
-      throw new Error("@lunora/bindings/kv: `limit` must be a positive integer");
+      throw new TypeError("@lunora/bindings/kv: `limit` must be a positive integer");
     }
     let { prefix } = listOptions;
     if (prefix !== void 0) {

package/dist/packem_shared/createKvIntrospector-Byk4GfsY.mjs

@@ -0,0 +1,77 @@
+import { LunoraError } from '@lunora/errors';
+
+const createKvIntrospector = (options) => {
+  const { namespaces } = options;
+  const resolveNamespace = (binding) => {
+    const ns = namespaces[binding];
+    if (!Object.hasOwn(namespaces, binding) || ns === void 0) {
+      throw new LunoraError("BAD_REQUEST", `@lunora/bindings/kv: no namespace registered under binding "${binding}"`);
+    }
+    return ns;
+  };
+  const listNamespaces = () => Promise.resolve(
+    Object.keys(namespaces).map((binding) => {
+      return { binding };
+    })
+  );
+  const listKeys = async (listOptions) => {
+    const ns = resolveNamespace(listOptions.namespace);
+    const result = await ns.list({ cursor: listOptions.cursor, limit: listOptions.limit, prefix: listOptions.prefix });
+    const keys = result.keys.map((entry) => {
+      return {
+        expiration: entry.expiration,
+        metadata: entry.metadata,
+        name: entry.name
+      };
+    });
+    return {
+      cursor: result.list_complete ? void 0 : result.cursor,
+      keys,
+      listComplete: result.list_complete
+    };
+  };
+  const getValue = async (getOptions) => {
+    const ns = resolveNamespace(getOptions.namespace);
+    const result = await ns.getWithMetadata(getOptions.key, "text");
+    return { metadata: result.metadata ?? null, value: result.value ?? null };
+  };
+  const putValue = async (putOptions) => {
+    const ns = resolveNamespace(putOptions.namespace);
+    await ns.put(putOptions.key, putOptions.value, {
+      expiration: putOptions.expiration,
+      expirationTtl: putOptions.expirationTtl,
+      metadata: putOptions.metadata
+    });
+  };
+  const deleteKey = async (deleteOptions) => {
+    const ns = resolveNamespace(deleteOptions.namespace);
+    await ns.delete(deleteOptions.key);
+  };
+  return {
+    deleteKey,
+    getValue,
+    listKeys,
+    listNamespaces,
+    putValue
+  };
+};
+const isKvNamespace = (value) => {
+  if (typeof value !== "object" || value === null) {
+    return false;
+  }
+  const candidate = value;
+  return typeof candidate.getWithMetadata === "function" && typeof candidate.list === "function" && typeof candidate.put === "function" && typeof candidate.delete === "function";
+};
+const createKvIntrospectorFromEnv = (env) => {
+  const namespaces = {};
+  if (typeof env === "object" && env !== null) {
+    for (const [binding, value] of Object.entries(env)) {
+      if (isKvNamespace(value)) {
+        namespaces[binding] = value;
+      }
+    }
+  }
+  return createKvIntrospector({ namespaces });
+};
+
+export { createKvIntrospector, createKvIntrospectorFromEnv };

package/dist/packem_shared/{createVectorAdminIntrospector-BJUOM6VW.mjs → createVectorAdminIntrospector-DuSvcBa5.mjs}

@@ -1,3 +1,5 @@
+import { LunoraError } from '@lunora/errors';
+
 const MAX_TOP_K = 20;
 const DEFAULT_TOP_K = 10;
 const createVectorAdminIntrospector = (options) => {
@@ -27,12 +29,12 @@ const createVectorAdminIntrospector = (options) => {
   }
   const queryIndex = async ({ name, text, topK }) => {
     const binding = indexes[name];
-    if (binding === void 0) {
-      throw new Error(`@lunora/bindings/vectors: no Vectorize binding registered for index "${name}"`);
+    if (!Object.hasOwn(indexes, name) || binding === void 0) {
+      throw new LunoraError("INTERNAL", `@lunora/bindings/vectors: no Vectorize binding registered for index "${name}"`);
     }
     const embed = embedders[name];
-    if (embed === void 0) {
-      throw new Error(`@lunora/bindings/vectors: no embedder registered for index "${name}" — it lists read-only`);
+    if (!Object.hasOwn(embedders, name) || embed === void 0) {
+      throw new LunoraError("INTERNAL", `@lunora/bindings/vectors: no embedder registered for index "${name}" — it lists read-only`);
     }
     const vector = await embed(text);
     const result = await binding.query(vector, {

package/dist/packem_shared/{createVectors-LSpGoKCd.mjs → createVectors-CTSrctiK.mjs}

@@ -1,9 +1,13 @@
-import { c as concurrentMap, U as UPSERT_EMBED_CONCURRENCY } from './concurrent-Dj5sOibv.mjs';
+import { LunoraError } from '@lunora/errors';
+import { c as concurrentMap, U as UPSERT_EMBED_CONCURRENCY } from './concurrent-CkCEVwqP.mjs';
 
 const resolveIndex = (indexes, name) => {
   const index = indexes[name];
-  if (!index) {
-    throw new Error(`@lunora/bindings/vectors: no index registered for "${name}". Known indexes: ${Object.keys(indexes).join(", ") || "(none)"}`);
+  if (!Object.hasOwn(indexes, name) || index === void 0) {
+    throw new LunoraError(
+      "INTERNAL",
+      `@lunora/bindings/vectors: no index registered for "${name}". Known indexes: ${Object.keys(indexes).join(", ") || "(none)"}`
+    );
   }
   return index;
 };
@@ -22,7 +26,7 @@ const MAX_ID_BATCH = 1e3;
 const MAX_UPSERT_BATCH = 1e3;
 const createVectors = (options) => {
   if (Object.keys(options.indexes).length === 0) {
-    throw new Error("@lunora/bindings/vectors: at least one index binding is required");
+    throw new TypeError("@lunora/bindings/vectors: at least one index binding is required");
   }
   const upsert = async (indexName, input) => {
     const index = resolveIndex(options.indexes, indexName);
@@ -52,7 +56,7 @@ const createVectors = (options) => {
       values = input.vector;
     } else {
       if (!input.embed || input.input === void 0) {
-        throw new Error("@lunora/bindings/vectors: query requires either `vector` or both `input` and `embed`");
+        throw new TypeError("@lunora/bindings/vectors: query requires either `vector` or both `input` and `embed`");
       }
       values = await input.embed(input.input);
     }
@@ -81,7 +85,7 @@ const createVectors = (options) => {
   const describe = async (indexName) => {
     const index = resolveIndex(options.indexes, indexName);
     if (!index.describe) {
-      throw new Error(`@lunora/bindings/vectors: binding for "${indexName}" does not implement describe()`);
+      throw new LunoraError("INTERNAL", `@lunora/bindings/vectors: binding for "${indexName}" does not implement describe()`);
     }
     return index.describe();
   };

package/dist/pipelines/index.d.mts

@@ -1,40 +1,40 @@
 /**
-* Structural types for the Cloudflare Pipelines write path (R2-backed streaming
-* ingestion). Pipelines is the other "emit data to a sink" surface alongside
-* Analytics Engine — telemetry/events out, no in-handler read-back. The binding
-* is mirrored structurally (`*Like`) so a plain-object fake satisfies it in unit
-* tests, like `@lunora/bindings/analytics`'s `AnalyticsEngineDatasetLike`.
-*/
+ * Structural types for the Cloudflare Pipelines write path (R2-backed streaming
+ * ingestion). Pipelines is the other "emit data to a sink" surface alongside
+ * Analytics Engine — telemetry/events out, no in-handler read-back. The binding
+ * is mirrored structurally (`*Like`) so a plain-object fake satisfies it in unit
+ * tests, like `@lunora/bindings/analytics`'s `AnalyticsEngineDatasetLike`.
+ */
 /** One Pipelines record — a JSON object matching the stream's schema. */
 type PipelineRecord = Record<string, unknown>;
 /**
-* Minimal structural projection of workers-types' `Pipeline&lt;T>` binding. The
-* real binding's `send` takes an array of records and resolves once accepted.
-*/
+ * Minimal structural projection of workers-types' `Pipeline&lt;T>` binding. The
+ * real binding's `send` takes an array of records and resolves once accepted.
+ */
 interface PipelineBindingLike<T extends PipelineRecord = PipelineRecord> {
   send: (records: T[]) => Promise<void>;
 }
 /**
-* The write-side client bound to `ctx.pipelines` (the generated context imports
-* this exact type as `import("@lunora/bindings/pipelines").PipelineClient`).
-* Ingestion is durable, batched, and fire-and-forget — never read a record back
-* in-handler.
-*/
+ * The write-side client bound to `ctx.pipelines` (the generated context imports
+ * this exact type as `import("@lunora/bindings/pipelines").PipelineClient`).
+ * Ingestion is durable, batched, and fire-and-forget — never read a record back
+ * in-handler.
+ */
 interface PipelineClient<T extends PipelineRecord = PipelineRecord> {
   /** Ingest one record or an array of records into the R2-backed sink. */
   send: (records: T | T[]) => Promise<void>;
 }
 /**
-* Wrap a Cloudflare Pipelines binding in the write-side {@link PipelineClient}
-* bound to `ctx.pipelines`. The binding is `env.PIPELINES` (the `pipelines`
-* binding the config layer recognizes; the remote pipeline name is minted with
-* `wrangler pipelines create`).
-*
-* Ingestion is durable and batched: `send` accepts one record or an array and
-* resolves once Cloudflare has accepted them for delivery to the R2-backed sink.
-* There is no in-handler read-back — this is a fire-and-forget egress path, so
-* it belongs on ActionCtx only (external I/O), mirroring `ctx.images`.
-*/
+ * Wrap a Cloudflare Pipelines binding in the write-side {@link PipelineClient}
+ * bound to `ctx.pipelines`. The binding is `env.PIPELINES` (the `pipelines`
+ * binding the config layer recognizes; the remote pipeline name is minted with
+ * `wrangler pipelines create`).
+ *
+ * Ingestion is durable and batched: `send` accepts one record or an array and
+ * resolves once Cloudflare has accepted them for delivery to the R2-backed sink.
+ * There is no in-handler read-back — this is a fire-and-forget egress path, so
+ * it belongs on ActionCtx only (external I/O), mirroring `ctx.images`.
+ */
 declare const createPipelines: <T extends PipelineRecord = PipelineRecord>(options: {
   binding: PipelineBindingLike<T>;
 }) => PipelineClient<T>;

package/dist/pipelines/index.d.ts

@@ -1,40 +1,40 @@
 /**
-* Structural types for the Cloudflare Pipelines write path (R2-backed streaming
-* ingestion). Pipelines is the other "emit data to a sink" surface alongside
-* Analytics Engine — telemetry/events out, no in-handler read-back. The binding
-* is mirrored structurally (`*Like`) so a plain-object fake satisfies it in unit
-* tests, like `@lunora/bindings/analytics`'s `AnalyticsEngineDatasetLike`.
-*/
+ * Structural types for the Cloudflare Pipelines write path (R2-backed streaming
+ * ingestion). Pipelines is the other "emit data to a sink" surface alongside
+ * Analytics Engine — telemetry/events out, no in-handler read-back. The binding
+ * is mirrored structurally (`*Like`) so a plain-object fake satisfies it in unit
+ * tests, like `@lunora/bindings/analytics`'s `AnalyticsEngineDatasetLike`.
+ */
 /** One Pipelines record — a JSON object matching the stream's schema. */
 type PipelineRecord = Record<string, unknown>;
 /**
-* Minimal structural projection of workers-types' `Pipeline&lt;T>` binding. The
-* real binding's `send` takes an array of records and resolves once accepted.
-*/
+ * Minimal structural projection of workers-types' `Pipeline&lt;T>` binding. The
+ * real binding's `send` takes an array of records and resolves once accepted.
+ */
 interface PipelineBindingLike<T extends PipelineRecord = PipelineRecord> {
   send: (records: T[]) => Promise<void>;
 }
 /**
-* The write-side client bound to `ctx.pipelines` (the generated context imports
-* this exact type as `import("@lunora/bindings/pipelines").PipelineClient`).
-* Ingestion is durable, batched, and fire-and-forget — never read a record back
-* in-handler.
-*/
+ * The write-side client bound to `ctx.pipelines` (the generated context imports
+ * this exact type as `import("@lunora/bindings/pipelines").PipelineClient`).
+ * Ingestion is durable, batched, and fire-and-forget — never read a record back
+ * in-handler.
+ */
 interface PipelineClient<T extends PipelineRecord = PipelineRecord> {
   /** Ingest one record or an array of records into the R2-backed sink. */
   send: (records: T | T[]) => Promise<void>;
 }
 /**
-* Wrap a Cloudflare Pipelines binding in the write-side {@link PipelineClient}
-* bound to `ctx.pipelines`. The binding is `env.PIPELINES` (the `pipelines`
-* binding the config layer recognizes; the remote pipeline name is minted with
-* `wrangler pipelines create`).
-*
-* Ingestion is durable and batched: `send` accepts one record or an array and
-* resolves once Cloudflare has accepted them for delivery to the R2-backed sink.
-* There is no in-handler read-back — this is a fire-and-forget egress path, so
-* it belongs on ActionCtx only (external I/O), mirroring `ctx.images`.
-*/
+ * Wrap a Cloudflare Pipelines binding in the write-side {@link PipelineClient}
+ * bound to `ctx.pipelines`. The binding is `env.PIPELINES` (the `pipelines`
+ * binding the config layer recognizes; the remote pipeline name is minted with
+ * `wrangler pipelines create`).
+ *
+ * Ingestion is durable and batched: `send` accepts one record or an array and
+ * resolves once Cloudflare has accepted them for delivery to the R2-backed sink.
+ * There is no in-handler read-back — this is a fire-and-forget egress path, so
+ * it belongs on ActionCtx only (external I/O), mirroring `ctx.images`.
+ */
 declare const createPipelines: <T extends PipelineRecord = PipelineRecord>(options: {
   binding: PipelineBindingLike<T>;
 }) => PipelineClient<T>;