@lunora/bindings 1.0.0-alpha.1 → 1.0.0-alpha.2

package/dist/packem_shared/{R2SqlError-DkQZ4Omg.mjs → R2SqlError-DlDd_SrE.mjs}

@@ -1,5 +1,5 @@
-import SelectBuilder from './SelectBuilder-BGXfCF0J.mjs';
-import { toText } from './Sql-CkDyJ_Sc.mjs';
+import SelectBuilder from './SelectBuilder-DHaXZwn_.mjs';
+import { ident, toText } from './Sql-DceGtcUd.mjs';
 
 const API_BASE = "https://api.sql.cloudflarestorage.com/api/v1/accounts";
 const inferColumns = (rows) => {
@@ -53,12 +53,14 @@ const createR2Sql = (config) => {
     };
   };
   return {
-    describe: async (table) => exec(`DESCRIBE ${table}`),
+    describe: async (table) => exec(`DESCRIBE ${ident(table)}`),
     explain: async (statement, options) => exec(`EXPLAIN ${options?.format === "json" ? "FORMAT JSON " : ""}${toText(statement)}`),
+    // `SelectBuilder`'s constructor validates the table reference (allowing an
+    // optional `[AS] alias`), so no pre-validation here.
     from: (table) => new SelectBuilder(exec, table),
     query: async (statement) => exec(toText(statement)),
     showDatabases: async () => exec("SHOW DATABASES"),
-    showTables: async (namespace) => exec(`SHOW TABLES IN ${namespace}`)
+    showTables: async (namespace) => exec(`SHOW TABLES IN ${ident(namespace)}`)
   };
 };
 

package/dist/packem_shared/{SelectBuilder-BGXfCF0J.mjs → SelectBuilder-DHaXZwn_.mjs}

@@ -1,6 +1,6 @@
-import { renderOrderTerm } from './asc-C6Jbaa6R.mjs';
-import SetOperation from './SetOperation-CGRu681M.mjs';
-import { toText, lit } from './Sql-CkDyJ_Sc.mjs';
+import { renderOrderTerm } from './asc-Cur-xO8v.mjs';
+import SetOperation from './SetOperation-RDHcxccj.mjs';
+import { tableRef, toText, lit } from './Sql-DceGtcUd.mjs';
 
 const JOIN_KEYWORDS = {
   cross: "CROSS JOIN",
@@ -24,7 +24,7 @@ class SelectBuilder {
   limitValue;
   constructor(exec, table) {
     this.exec = exec;
-    this.table = table;
+    this.table = tableRef(table);
   }
   /** The `SELECT` list. Omit/empty for `SELECT *`. Items are columns, expressions, or aliased window fragments (`fn.rowNumber().over(...).as("rk")`). */
   select(...items) {
@@ -156,7 +156,7 @@ class SelectBuilder {
     return this.distinctFlag ? "SELECT DISTINCT" : "SELECT";
   }
   addJoin(kind, table, on) {
-    this.joins.push({ kind, on, table });
+    this.joins.push({ kind, on, table: tableRef(table) });
     return this;
   }
   setOperation(operator, other) {

package/dist/packem_shared/{SetOperation-CGRu681M.mjs → SetOperation-RDHcxccj.mjs}

@@ -1,5 +1,5 @@
-import { renderOrderTerm } from './asc-C6Jbaa6R.mjs';
-import { lit } from './Sql-CkDyJ_Sc.mjs';
+import { renderOrderTerm } from './asc-Cur-xO8v.mjs';
+import { lit } from './Sql-DceGtcUd.mjs';
 
 const renderMember = (query) => {
   const text = query.toSQL();

package/dist/packem_shared/{Sql-CkDyJ_Sc.mjs → Sql-DceGtcUd.mjs}

@@ -1,4 +1,6 @@
 const quoteString = (value) => `'${value.replaceAll("'", "''")}'`;
+const IDENTIFIER_RE = /^\w+(?:\.\w+)*$/;
+const TABLE_REF_RE = /^\w+(?:\.\w+)*(?:\s+(?:as\s+)?\w+)?$/i;
 class Sql {
   text;
   constructor(text) {
@@ -11,6 +13,18 @@ class Sql {
 const isSql = (value) => value instanceof Sql;
 const raw = (text) => new Sql(text);
 const toText = (value) => isSql(value) ? value.text : value;
+const ident = (name) => {
+  if (typeof name !== "string" || !IDENTIFIER_RE.test(name)) {
+    throw new TypeError(`r2sql: invalid identifier ${JSON.stringify(name)} — expected dotted [A-Za-z0-9_] segments (e.g. "namespace.table").`);
+  }
+  return name;
+};
+const tableRef = (ref) => {
+  if (typeof ref !== "string" || !TABLE_REF_RE.test(ref)) {
+    throw new TypeError(`r2sql: invalid table reference ${JSON.stringify(ref)} — expected "namespace.table" with an optional "[AS] alias".`);
+  }
+  return ref;
+};
 const lit = (value) => {
   if (value === null || value === void 0) {
     return "NULL";
@@ -51,4 +65,4 @@ const sql = (strings, ...values) => {
 };
 const joinSql = (parts, separator) => new Sql(parts.map((part) => toText(part)).join(separator));
 
-export { Sql, isSql, joinSql, lit, raw, sql, toText };
+export { Sql, ident, isSql, joinSql, lit, raw, sql, tableRef, toText };

package/dist/packem_shared/{WindowExpression-C2vj7oNX.mjs → WindowExpression-Cg9s2xcr.mjs}

@@ -1,4 +1,4 @@
-import { Sql, lit } from './Sql-CkDyJ_Sc.mjs';
+import { Sql, lit } from './Sql-DceGtcUd.mjs';
 
 const IDENTIFIER = /^[A-Z_][\w$]*$/i;
 const assertIdent = (name) => {

package/dist/packem_shared/{WindowFunction-CuKHfZX3.mjs → WindowFunction-DA3pGC3N.mjs}

@@ -1,6 +1,6 @@
-import { renderOrderTerm } from './asc-C6Jbaa6R.mjs';
-import { lit, toText } from './Sql-CkDyJ_Sc.mjs';
-import WindowExpression from './WindowExpression-C2vj7oNX.mjs';
+import { renderOrderTerm } from './asc-Cur-xO8v.mjs';
+import { lit, toText } from './Sql-DceGtcUd.mjs';
+import WindowExpression from './WindowExpression-Cg9s2xcr.mjs';
 
 const toArray = (value) => {
   if (value === void 0) {

package/dist/packem_shared/{asc-C6Jbaa6R.mjs → asc-Cur-xO8v.mjs}

@@ -1,4 +1,4 @@
-import { Sql, toText } from './Sql-CkDyJ_Sc.mjs';
+import { Sql, toText } from './Sql-DceGtcUd.mjs';
 
 const asc = (expr) => {
   return { dir: "ASC", expr };

package/dist/r2sql/index.mjs

@@ -1,7 +1,7 @@
-export { default as SelectBuilder } from '../packem_shared/SelectBuilder-BGXfCF0J.mjs';
-export { R2SqlError, createR2Sql } from '../packem_shared/R2SqlError-DkQZ4Omg.mjs';
-export { asc, desc, renderOrderTerm } from '../packem_shared/asc-C6Jbaa6R.mjs';
-export { default as SetOperation } from '../packem_shared/SetOperation-CGRu681M.mjs';
-export { Sql, isSql, joinSql, lit, raw, sql, toText } from '../packem_shared/Sql-CkDyJ_Sc.mjs';
-export { WindowFunction, fn } from '../packem_shared/WindowFunction-CuKHfZX3.mjs';
-export { default as WindowExpression } from '../packem_shared/WindowExpression-C2vj7oNX.mjs';
+export { default as SelectBuilder } from '../packem_shared/SelectBuilder-DHaXZwn_.mjs';
+export { R2SqlError, createR2Sql } from '../packem_shared/R2SqlError-DlDd_SrE.mjs';
+export { asc, desc, renderOrderTerm } from '../packem_shared/asc-Cur-xO8v.mjs';
+export { default as SetOperation } from '../packem_shared/SetOperation-RDHcxccj.mjs';
+export { Sql, isSql, joinSql, lit, raw, sql, toText } from '../packem_shared/Sql-DceGtcUd.mjs';
+export { WindowFunction, fn } from '../packem_shared/WindowFunction-DA3pGC3N.mjs';
+export { default as WindowExpression } from '../packem_shared/WindowExpression-Cg9s2xcr.mjs';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/bindings",
-  "version": "1.0.0-alpha.1",
+  "version": "1.0.0-alpha.2",
   "description": "Lightweight Cloudflare binding helpers for Lunora — ctx.kv, ctx.images, ctx.analytics, ctx.pipelines, ctx.vectors, ctx.r2sql — one install, per-binding subpaths",
   "keywords": [
     "analytics",