@lunora/bindings 1.0.0-alpha.4 → 1.0.0-alpha.41

package/dist/packem_shared/buildSignedImageUrl-DbSDmjWK.mjs

@@ -0,0 +1,4 @@
+const v=e=>{const t=atob(e),n=new Uint8Array(t.length);for(let r=0;r<t.length;r+=1)n[r]=t.codePointAt(r)??0;return n},a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_",E=e=>{let t="",n=0;const r=e.length-2;for(;n<r;n+=3){const s=e[n]<<16|e[n+1]<<8|e[n+2];t+=a.charAt(s>>18&63)+a.charAt(s>>12&63)+a.charAt(s>>6&63)+a.charAt(s&63)}const o=e.length-n;if(o===1){const s=e[n]<<16;t+=a.charAt(s>>18&63)+a.charAt(s>>12&63)}else if(o===2){const s=e[n]<<16|e[n+1]<<8;t+=a.charAt(s>>18&63)+a.charAt(s>>12&63)+a.charAt(s>>6&63)}return t},R=e=>{const t=e.replaceAll("-","+").replaceAll("_","/"),n=t+"=".repeat((4-t.length%4)%4);return v(n)},$=(e,t)=>{if(e.size<t)return;const n=e.keys().next().value;n!==void 0&&e.delete(n)},_=(e,t,n,r)=>{const o=e.get(t);if(o!==void 0)return o;$(e,r);const s=n().catch(i=>{throw e.get(t)===s&&e.delete(t),i});return e.set(t,s),s},u=new TextEncoder,x=10080*60,C=/^[a-z][a-z0-9+\-.]*:\/\//i,T=Array.from({length:32},(e,t)=>t),U=new RegExp(`[${T.map(e=>String.fromCodePoint(e)).join("")}]`,"u"),N=64,O=new Map,h=async e=>_(O,e,async()=>crypto.subtle.importKey("raw",u.encode(e),{hash:"SHA-256",name:"HMAC"},!1,["sign","verify"]),N),p=e=>{try{return new URL(e).host}catch{return e.replace(C,"").split("/")[0]??""}},y=e=>{if(U.test(e))throw new TypeError("hmac-url: value must not contain control characters (including CR/LF)")},L=/^\/+$/u,H=e=>L.test(e),I=(e,t)=>{if(!Number.isFinite(e)||e<=0)return"expiresInSeconds must be a positive finite number";if(e>t){const n=` (${String(t/86400)} days)`;return`expiresInSeconds must not exceed ${String(t)} seconds${n}`}},K=async(e,t)=>{const n=await h(e),r=await crypto.subtle.sign("HMAC",n,u.encode(t));return E(new Uint8Array(r))},P=async(e,t,n)=>{const r=await h(e);return crypto.subtle.verify("HMAC",r,n,u.encode(t))},b=/^\//,M=e=>{let t=e.length;for(;t>0&&e[t-1]==="/";)t-=1;return e.slice(0,t)},j=e=>e===void 0?"":Object.entries(e).filter(([,t])=>t!==void 0).toSorted(([t],[n])=>(t>n?1:0)-(t<n?1:0)).map(([t,n])=>`${t}=${typeof n=="object"?JSON.stringify(n):String(n)}`).join("&"),D={background:"string",blur:"number",brightness:"number",contrast:"number",draw:"json",fit:"string",flip:"string",gamma:"number",gravity:"string-or-json",height:"number",rotate:"number",saturation:"number",segment:"string",sharpen:"number",upscale:"string",width:"number"},w=new Map(Object.entries(D)),k=e=>{const t=[];for(const n of e.split("&")){const r=n.indexOf("="),o=r!==-1&&w.has(n.slice(0,r)),s=t.at(-1);o||s===void 0?t.push(n):t[t.length-1]=`${s}&${n}`}return t},z=(e,t,n)=>{if(t==="string"||t==="string-or-json"&&!n.startsWith("{"))return n;if(t==="number"){const r=Number(n);if(n===""||!Number.isFinite(r))throw new TypeError(`@lunora/bindings/images: transform key "${e}" expects a number, got "${n}"`);return r}try{return JSON.parse(n)}catch{throw new TypeError(`@lunora/bindings/images: transform key "${e}" carries malformed JSON`)}},S=(e,t,n,r)=>`${e.toLowerCase()}
+${t}
+${String(n)}
+${r}`,B=e=>e.split("/").map(t=>encodeURIComponent(t)).join("/"),F=e=>{if(e==="")return{};const t={};for(const n of k(e)){const r=n.indexOf("=");if(r===-1)throw new TypeError(`@lunora/bindings/images: malformed transform segment "${n}" — expected key=value`);const o=n.slice(0,r),s=w.get(o);if(s===void 0)throw new TypeError(`@lunora/bindings/images: unknown transform key "${o}" — the serialized transform does not match this version's TransformOptions`);t[o]=z(o,s,n.slice(r+1))}return t},Y=async e=>{const t=e.expiresInSeconds??3600,n=I(t,x);if(n!==void 0)throw new TypeError(`@lunora/bindings/images: ${n}`);let r="";try{r=new URL(e.baseUrl).pathname}catch{}if(r!==""&&!H(r))throw new TypeError(`@lunora/bindings/images: baseUrl must not carry a path ("${r}") — the key is verified from the full URL pathname, so a subpath base would make every signed URL fail verification`);const o=Math.floor(Date.now()/1e3)+t,s=p(e.baseUrl),i=j(e.transform),c=e.key.replace(b,"");y(c);const l=await K(e.secret,S(s,c,o,i)),m=M(e.baseUrl),d=B(c),g=i===""?"":`&t=${encodeURIComponent(i)}`;return`${m}/${d}?exp=${String(o)}&sig=${l}${g}`},J=async(e,t,n)=>{let r;try{r=e instanceof URL?e:new URL(e)}catch{return{reason:"malformed",valid:!1}}const o=r.searchParams.get("exp"),s=o===null?Number.NaN:Number(o),i=r.searchParams.get("sig"),c=r.searchParams.get("t")??"";if(!i||!Number.isInteger(s))return{reason:"malformed",valid:!1};if(s<Math.floor(Date.now()/1e3))return{reason:"expired",valid:!1};let l,m;try{l=r.pathname.replace(b,"").split("/").map(A=>decodeURIComponent(A)).join("/"),y(l),m=R(i)}catch{return{reason:"malformed",valid:!1}}const d=n?.expectedHost===void 0?r.host:p(n.expectedHost);if(!await P(t,S(d,l,s,c),m))return{reason:"bad_signature",valid:!1};if(c==="")return{key:l,valid:!0};let f;try{f=F(c)}catch{f=void 0}return{key:l,transform:c,transformOptions:f,valid:!0}};export{Y as buildSignedImageUrl,F as parseSignedTransform,J as verifySignedImageUrl};

package/dist/packem_shared/concurrent-vRmSvRpF.mjs

@@ -0,0 +1 @@
+const h=8,u=async(r,c,l)=>{if(r.length===0)return[];const f=Math.max(1,Math.min(c,r.length)),n=Array.from({length:r.length});let a=0,t=!1,o;const s=Array.from({length:f},async()=>{for(;;){if(t)return;const e=a;if(a+=1,e>=r.length)return;try{n[e]=await l(r[e],e)}catch(i){t||(t=!0,o=i);return}}});if(await Promise.all(s),t)throw o;return n};export{h as U,u as c};

package/dist/packem_shared/createAnalytics-BXTNc57d.mjs

@@ -0,0 +1 @@
+const _=new TextEncoder,l=n=>n===null?0:typeof n=="string"?_.encode(n).length:n.byteLength,a=(n,o,r)=>{if(o>r)throw new RangeError(`@lunora/bindings/analytics: a data point may carry at most ${String(r)} ${n} (got ${String(o)}).`)},b=(n,o,r)=>{if(o>r)throw new RangeError(`@lunora/bindings/analytics: a data point's ${n} may total at most ${String(r)} bytes (got ${String(o)}).`)},m=n=>{const o=t=>{a("blobs",t.blobs?.length??0,20),a("doubles",t.doubles?.length??0,20),a("indexes",t.indexes?.length??0,1);const s=(t.blobs??[]).reduce((e,c)=>e+l(c),0);b("blobs",s,16384);for(const e of t.indexes??[])b("index",l(e),96);n.writeDataPoint(t)};return{track:(t,s={})=>{const e=Object.entries(s.dimensions??{}),c=Object.entries(s.metrics??{}),E=[t,...e.map(([,i])=>i)],g=c.map(([,i])=>i),u=s.index===void 0?[]:[s.index];o({blobs:E,doubles:g,indexes:u});const B=e.map(([i],d)=>({column:`blob${String(d+2)}`,field:i})),S=c.map(([i],d)=>({column:`double${String(d+1)}`,field:i})),X=s.index===void 0?null:{column:"index1",field:"index"};return{dimensions:B,index:X,metrics:S,name:t}},writeDataPoint:o}};export{m as createAnalytics};

package/dist/packem_shared/createContextVectors-Bk6ZVCqQ.mjs

@@ -0,0 +1,6 @@
+import{c as b,U as g}from"./concurrent-vRmSvRpF.mjs";const x=(s,c)=>{if(!c.includes("."))return s[c];let n=s;for(const d of c.split(".")){if(n===null||typeof n!="object"||Array.isArray(n))return;n=n[d]}return n},S=(s,c)=>{const n=c?.namespace,d=new Set(c?.shardedIndexNames),l=(t,a)=>{if(a!==void 0)return a;if(d.has(t)){if(n!==void 0)return n;throw new Error(`@lunora/bindings/vectors: index "${t}" belongs to a sharded table, but this DO instance has no shard key (it is the root/default DO) and no explicit namespace was given. A namespace-less operation here would reach every tenant's vectors — Vectorize indexes are account-global. Pass an explicit namespace, or issue this call from the sharded DO instance that owns the tenant.`)}},o=async(t,a)=>{await s.upsert(t,{embed:a.embed,id:a.id,input:a.input,metadata:a.metadata,namespace:l(t,a.namespace)})},h=async(t,a,i)=>{const r=await s.getByIds(t,a);return i===void 0?r:r.filter(m=>m.namespace===i)};return{deleteByIds:async(t,a,i)=>{const r=l(t,i);if(r===void 0){await s.deleteByIds(t,a);return}const m=await h(t,a,r);m.length!==0&&await s.deleteByIds(t,m.map(u=>u.id))},getByIds:async(t,a,i)=>{const r=l(t,i);return(await h(t,a,r)).map(u=>({id:u.id,metadata:u.metadata,namespace:u.namespace,values:u.values}))},query:async(t,a)=>{const i=await s.query(t,{embed:a.embed,filter:a.filter,input:a.input,namespace:l(t,a.namespace),returnMetadata:a.returnMetadata??"indexed",topK:a.topK,vector:a.vector});return{count:i.count,matches:i.matches.map(r=>({id:r.id,metadata:r.metadata,score:r.score}))}},upsert:o,upsertNow:o}},f=new Set,v=s=>{f.has(s)||(f.add(s),console.warn(`[@lunora/bindings/vectors] index "${s}" syncs vectors without a namespace — in a
+multi-tenant/sharded app this exposes one tenant's vectors (and any captured
+metadata) to every other tenant, since Vectorize indexes are account-global.
+Pass \`namespace\` (the shard/tenant key) on both write and query — query-side
+namespace filtering is mandatory for multi-tenant apps. Single-tenant apps that
+legitimately have no tenant key suppress this via { allowSharedNamespace: true }.`))},I=(s,c)=>{const n={};for(const d of c)d in s&&(n[d]=s[d]);return n},D=s=>{const{allowSharedNamespace:c,namespace:n,schema:d,vectors:l}=s;return async o=>{const t=d.tables[o.table]?.vectorIndexes??[],a=Object.entries(d.vectorIndexes).filter(([,e])=>e.table===o.table);if(t.length===0&&a.length===0)return;const i=[...t.map(e=>e.name),...a.map(([e])=>e)];if(o.op==="delete"){await Promise.all(i.map(e=>l.deleteByIds(e,[o.id])));return}const r=o.doc;if(!r)return;const m=t.map(e=>({index:e,value:x(r,e.field)})),u=m.filter(e=>e.value!==void 0&&e.value!==null),y=m.filter(e=>e.value===void 0||e.value===null);for(const{index:e,value:p}of u)if(typeof p!="string")throw new TypeError(`@lunora/bindings/vectors: inline index "${e.name}" expects a string source at "${e.field}" on table "${o.table}" (got ${typeof p}); use a standalone defineVectorIndex with a select() to derive text from non-string columns`);const w=[...y.map(e=>async()=>{await l.deleteByIds(e.index.name,[o.id])}),...u.map(e=>async()=>{!c&&n===void 0&&v(e.index.name),await l.upsert(e.index.name,{embed:e.index.embed,id:o.id,input:e.value,metadata:e.index.metadata?I(r,e.index.metadata):void 0,namespace:n})}),...a.map(([e,p])=>async()=>{!c&&n===void 0&&v(e),await l.upsert(e,{embed:p.embed,id:o.id,input:p.select(r),metadata:p.metadata?.(r),namespace:n})})];try{await b(w,g,async e=>e())}catch(e){throw await Promise.allSettled(i.map(p=>l.deleteByIds(p,[o.id]))),e}}};export{S as createContextVectors,D as createVectorSyncHook};

package/dist/packem_shared/createImages-CHgMZP4g.mjs

@@ -0,0 +1 @@
+import{LunoraError as d}from"@lunora/errors";const m=new Set(["image/avif","image/gif","image/jpeg","image/png","image/webp"]),T=1e4,A="image/webp",O=e=>typeof e!="object"?!1:"body"in e&&!(e instanceof ArrayBuffer)&&!(e instanceof Uint8Array),i=e=>{if(e instanceof ReadableStream)return e;if(O(e)){if(e.body===null)throw new d("INTERNAL","@lunora/bindings/images: R2 object body is null (object missing or already consumed)");return e.body}if(e instanceof Blob)return e.stream();const t=e instanceof Uint8Array?e:new Uint8Array(e);return new ReadableStream({start(n){n.enqueue(t),n.close()}})},f=(e,t)=>{if(e===void 0)return{};const n=r=>{if(!Number.isFinite(r)||r<=0)throw new TypeError("@lunora/bindings/images: width/height must be a positive finite number");return Math.min(Math.floor(r),t)},o={...e};return delete o.draw,{...o,...e.width===void 0?{}:{width:n(e.width)},...e.height===void 0?{}:{height:n(e.height)}}},v=e=>{const{image:t,transform:n,...o}=e;return{drawOptions:o,image:t,transform:n}},U=e=>{const t=e?.format??A;if(!m.has(t))throw new d("INTERNAL",`@lunora/bindings/images: unsupported output format "${t}" (allowed: ${[...m].join(", ")})`);return{...e,format:t}},p=e=>{const{binding:t}=e,n=e.maxDimension??T;return{info:async o=>t.info(i(o)),transform:async(o,r,g,b)=>{const u=f(r,n),l=U(g);let a=t.input(i(o)).transform(u);for(const w of b??[]){const{drawOptions:y,image:s,transform:c}=v(w),h=c===void 0?i(s):t.input(i(s)).transform(f(c,n));a=a.draw(h,y)}return a.output(l)}}};export{p as createImages};

package/dist/packem_shared/createKv-B0RfMMal.mjs

@@ -0,0 +1 @@
+import{LunoraError as c}from"@lunora/errors";const d=512,T=1e3,v=1024,f=new TextEncoder,m=t=>f.encode(t).length,h=(t,i)=>{if(m(t)>d)throw new c("INTERNAL",`@lunora/bindings/kv: ${i} exceeds ${String(d)}-byte limit`);if(t.includes("\0"))throw new c("INTERNAL",`@lunora/bindings/kv: ${i} contains NUL byte`);for(const a of t.split("/"))if(a==="."||a==="..")throw new c("INTERNAL",`@lunora/bindings/kv: ${i} contains a \`.\`/\`..\` path component`)},u=t=>{if(typeof t!="string"||t.length===0)throw new TypeError("@lunora/bindings/kv: key must be a non-empty string");h(t,"key")},g=t=>{t.length>0&&h(t,"prefix")},b=(t,i)=>{u(t),u(i);const o=`${t.endsWith("/")?t.slice(0,-1):t}/${i}`;if(m(o)>d)throw new c("INTERNAL",`@lunora/bindings/kv: scoped key exceeds ${String(d)}-byte limit`);return o},x=t=>{const i={};if(t.expiration!==void 0&&t.expirationTtl!==void 0)throw new c("INTERNAL","@lunora/bindings/kv: `expiration` and `expirationTtl` are mutually exclusive");if(t.expiration!==void 0&&(i.expiration=t.expiration),t.expirationTtl!==void 0&&(i.expirationTtl=t.expirationTtl),t.metadata!==void 0){let a;try{a=JSON.stringify(t.metadata)}catch{throw new c("INTERNAL","@lunora/bindings/kv: metadata is not JSON-serializable (cyclic value, bigint, or similar)")}if(m(a)>v)throw new c("INTERNAL",`@lunora/bindings/kv: metadata exceeds ${String(v)}-byte limit`);i.metadata=t.metadata}return Object.keys(i).length>0?i:void 0},k=t=>{if(!t.namespace)throw new TypeError("@lunora/bindings/kv: `namespace` is required");const{keyPrefix:i,namespace:a}=t;i!==void 0&&u(i);const o=e=>i===void 0?(u(e),e):b(i,e),y=e=>{if(i===void 0)return e;const n=i.endsWith("/")?i:`${i}/`;return e.startsWith(n)?e.slice(n.length):e};return{delete:async e=>{await a.delete(o(e))},get:async(e,n={})=>await a.get(o(e),{cacheTtl:n.cacheTtl,type:"json"})??null,getRaw:async(e,n={})=>await a.get(o(e),{cacheTtl:n.cacheTtl,type:n.type??"text"})??null,getWithMetadata:async(e,n={})=>{const r=await a.getWithMetadata(o(e),{cacheTtl:n.cacheTtl,type:"json"});return{metadata:r.metadata??null,value:r.value??null}},list:async(e={})=>{if(e.limit!==void 0&&(!Number.isInteger(e.limit)||e.limit<=0))throw new TypeError("@lunora/bindings/kv: `limit` must be a positive integer");let{prefix:n}=e;if(n!==void 0&&g(n),i!==void 0){const l=i.endsWith("/")?i:`${i}/`;n=e.prefix===void 0?l:`${l}${e.prefix}`,g(n)}const r=e.limit===void 0?void 0:Math.min(e.limit,T),s=await a.list({cursor:e.cursor,limit:r,prefix:n}),w=s.keys.map(l=>({...l,name:y(l.name)}));return{cursor:s.list_complete?void 0:s.cursor,keys:w,listComplete:s.list_complete}},put:async(e,n,r={})=>{const s=r.raw?n:JSON.stringify(n);await a.put(o(e),s,x(r))}}};export{k as createKv,b as scopeKey};

package/dist/packem_shared/createKvIntrospector-DT1k8mCG.mjs

@@ -0,0 +1 @@
+import{LunoraError as l}from"@lunora/errors";const u=a=>{const{namespaces:t}=a,s=e=>{const r=t[e];if(!Object.hasOwn(t,e)||r===void 0)throw new l("BAD_REQUEST",`@lunora/bindings/kv: no namespace registered under binding "${e}"`);return r};return{deleteKey:async e=>{await s(e.namespace).delete(e.key)},getValue:async e=>{const n=await s(e.namespace).getWithMetadata(e.key,"text");return{metadata:n.metadata??null,value:n.value??null}},listKeys:async e=>{const n=await s(e.namespace).list({cursor:e.cursor,limit:e.limit,prefix:e.prefix}),i=n.keys.map(o=>({expiration:o.expiration,metadata:o.metadata,name:o.name}));return{cursor:n.list_complete?void 0:n.cursor,keys:i,listComplete:n.list_complete}},listNamespaces:()=>Promise.resolve(Object.keys(t).map(e=>({binding:e}))),putValue:async e=>{await s(e.namespace).put(e.key,e.value,{expiration:e.expiration,expirationTtl:e.expirationTtl,metadata:e.metadata})}}},m=a=>{if(typeof a!="object"||a===null)return!1;const t=a;return typeof t.getWithMetadata=="function"&&typeof t.list=="function"&&typeof t.put=="function"&&typeof t.delete=="function"},v=a=>{const t={};if(typeof a=="object"&&a!==null)for(const[s,c]of Object.entries(a))m(c)&&(t[s]=c);return u({namespaces:t})};export{u as createKvIntrospector,v as createKvIntrospectorFromEnv};

package/dist/packem_shared/createPipelines-CIvqrc7E.mjs

@@ -0,0 +1 @@
+const i=a=>{const{binding:e}=a;return{send:async n=>{await e.send(Array.isArray(n)?n:[n])}}};export{i as createPipelines};

package/dist/packem_shared/createVectorAdminIntrospector-DrsigTJs.mjs

@@ -0,0 +1 @@
+import{LunoraError as a}from"@lunora/errors";const m=20,p=10,f=u=>{const{embedders:r,indexes:n,registry:b}=u,i=async()=>Promise.all(b.map(async e=>{const s=n[e.name];if(s?.describe===void 0)return{...e};try{const t=await s.describe();return{...e,dimensions:e.dimensions??t.dimensions,processedUpToMutation:t.processedUpToMutation,vectorsCount:t.vectorsCount}}catch{return{...e}}}));return r!==void 0&&Object.keys(r).length>0?{listIndexes:i,queryIndex:async({name:e,text:s,topK:t})=>{const d=n[e];if(!Object.hasOwn(n,e)||d===void 0)throw new a("INTERNAL",`@lunora/bindings/vectors: no Vectorize binding registered for index "${e}"`);const c=r[e];if(!Object.hasOwn(r,e)||c===void 0)throw new a("INTERNAL",`@lunora/bindings/vectors: no embedder registered for index "${e}" — it lists read-only`);const l=await c(s);return{matches:(await d.query(l,{returnMetadata:"all",topK:Math.min(t??p,m)})).matches.map(o=>({id:o.id,metadata:o.metadata,score:o.score}))}}}:{listIndexes:i}};export{f as createVectorAdminIntrospector};

package/dist/packem_shared/createVectors-DirhBYpw.mjs

@@ -0,0 +1 @@
+import{LunoraError as b}from"@lunora/errors";import{c as v,U as h}from"./concurrent-vRmSvRpF.mjs";const a=(r,s)=>{const d=r[s];if(!Object.hasOwn(r,s)||d===void 0)throw new b("INTERNAL",`@lunora/bindings/vectors: no index registered for "${s}". Known indexes: ${Object.keys(r).join(", ")||"(none)"}`);return d},g=async r=>{const s=await r.embed(r.input);return{id:r.id,metadata:r.metadata,namespace:r.namespace,values:s}},m=100,u=50,c=1e3,y=1e3,K=r=>{if(Object.keys(r.indexes).length===0)throw new TypeError("@lunora/bindings/vectors: at least one index binding is required");return{deleteByIds:async(t,e)=>{const n=a(r.indexes,t);if(e.length>c)throw new RangeError(`@lunora/bindings/vectors: deleteByIds accepts at most ${String(c)} ids (got ${String(e.length)})`);return n.deleteByIds(e)},describe:async t=>{const e=a(r.indexes,t);if(!e.describe)throw new b("INTERNAL",`@lunora/bindings/vectors: binding for "${t}" does not implement describe()`);return e.describe()},getByIds:async(t,e)=>{const n=a(r.indexes,t);if(e.length>c)throw new RangeError(`@lunora/bindings/vectors: getByIds accepts at most ${String(c)} ids (got ${String(e.length)})`);return n.getByIds(e)},query:async(t,e)=>{const n=a(r.indexes,t),o=e.returnValues===!0||e.returnMetadata==="all",l=o?u:m;if(e.topK!==void 0&&(!Number.isInteger(e.topK)||e.topK<1||e.topK>l)){const w=o?` (lowered to ${String(u)} because returnValues/returnMetadata:"all" is set)`:"";throw new RangeError(`@lunora/bindings/vectors: topK must be an integer in [1, ${String(l)}]${w} (got ${String(e.topK)})`)}let i;if(e.vector&&e.vector.length>0)i=e.vector;else{if(!e.embed||e.input===void 0)throw new TypeError("@lunora/bindings/vectors: query requires either `vector` or both `input` and `embed`");i=await e.embed(e.input)}return n.query(i,{filter:e.filter,namespace:e.namespace,returnMetadata:e.returnMetadata,returnValues:e.returnValues,topK:e.topK})},upsert:async(t,e)=>{const n=a(r.indexes,t),o=await g(e);return n.upsert([o])},upsertMany:async(t,e)=>{const n=a(r.indexes,t);if(e.length>y)throw new RangeError(`@lunora/bindings/vectors: upsertMany batch exceeds ${String(y)} (got ${String(e.length)}) — split across calls`);const o=await v(e,h,g);return n.upsert(o)}}};export{K as default};

package/dist/pipelines/index.d.mts

@@ -1,40 +1,40 @@
 /**
-* Structural types for the Cloudflare Pipelines write path (R2-backed streaming
-* ingestion). Pipelines is the other "emit data to a sink" surface alongside
-* Analytics Engine — telemetry/events out, no in-handler read-back. The binding
-* is mirrored structurally (`*Like`) so a plain-object fake satisfies it in unit
-* tests, like `@lunora/bindings/analytics`'s `AnalyticsEngineDatasetLike`.
-*/
+ * Structural types for the Cloudflare Pipelines write path (R2-backed streaming
+ * ingestion). Pipelines is the other "emit data to a sink" surface alongside
+ * Analytics Engine — telemetry/events out, no in-handler read-back. The binding
+ * is mirrored structurally (`*Like`) so a plain-object fake satisfies it in unit
+ * tests, like `@lunora/bindings/analytics`'s `AnalyticsEngineDatasetLike`.
+ */
 /** One Pipelines record — a JSON object matching the stream's schema. */
 type PipelineRecord = Record<string, unknown>;
 /**
-* Minimal structural projection of workers-types' `Pipeline&lt;T>` binding. The
-* real binding's `send` takes an array of records and resolves once accepted.
-*/
+ * Minimal structural projection of workers-types' `Pipeline<T>` binding. The
+ * real binding's `send` takes an array of records and resolves once accepted.
+ */
 interface PipelineBindingLike<T extends PipelineRecord = PipelineRecord> {
   send: (records: T[]) => Promise<void>;
 }
 /**
-* The write-side client bound to `ctx.pipelines` (the generated context imports
-* this exact type as `import("@lunora/bindings/pipelines").PipelineClient`).
-* Ingestion is durable, batched, and fire-and-forget — never read a record back
-* in-handler.
-*/
+ * The write-side client bound to `ctx.pipelines` (the generated context imports
+ * this exact type as `import("@lunora/bindings/pipelines").PipelineClient`).
+ * Ingestion is durable, batched, and fire-and-forget — never read a record back
+ * in-handler.
+ */
 interface PipelineClient<T extends PipelineRecord = PipelineRecord> {
   /** Ingest one record or an array of records into the R2-backed sink. */
   send: (records: T | T[]) => Promise<void>;
 }
 /**
-* Wrap a Cloudflare Pipelines binding in the write-side {@link PipelineClient}
-* bound to `ctx.pipelines`. The binding is `env.PIPELINES` (the `pipelines`
-* binding the config layer recognizes; the remote pipeline name is minted with
-* `wrangler pipelines create`).
-*
-* Ingestion is durable and batched: `send` accepts one record or an array and
-* resolves once Cloudflare has accepted them for delivery to the R2-backed sink.
-* There is no in-handler read-back — this is a fire-and-forget egress path, so
-* it belongs on ActionCtx only (external I/O), mirroring `ctx.images`.
-*/
+ * Wrap a Cloudflare Pipelines binding in the write-side {@link PipelineClient}
+ * bound to `ctx.pipelines`. The binding is `env.PIPELINES` (the `pipelines`
+ * binding the config layer recognizes; the remote pipeline name is minted with
+ * `wrangler pipelines create`).
+ *
+ * Ingestion is durable and batched: `send` accepts one record or an array and
+ * resolves once Cloudflare has accepted them for delivery to the R2-backed sink.
+ * There is no in-handler read-back — this is a fire-and-forget egress path, so
+ * it belongs on ActionCtx only (external I/O), mirroring `ctx.images`.
+ */
 declare const createPipelines: <T extends PipelineRecord = PipelineRecord>(options: {
   binding: PipelineBindingLike<T>;
 }) => PipelineClient<T>;

package/dist/pipelines/index.d.ts

@@ -1,40 +1,40 @@
 /**
-* Structural types for the Cloudflare Pipelines write path (R2-backed streaming
-* ingestion). Pipelines is the other "emit data to a sink" surface alongside
-* Analytics Engine — telemetry/events out, no in-handler read-back. The binding
-* is mirrored structurally (`*Like`) so a plain-object fake satisfies it in unit
-* tests, like `@lunora/bindings/analytics`'s `AnalyticsEngineDatasetLike`.
-*/
+ * Structural types for the Cloudflare Pipelines write path (R2-backed streaming
+ * ingestion). Pipelines is the other "emit data to a sink" surface alongside
+ * Analytics Engine — telemetry/events out, no in-handler read-back. The binding
+ * is mirrored structurally (`*Like`) so a plain-object fake satisfies it in unit
+ * tests, like `@lunora/bindings/analytics`'s `AnalyticsEngineDatasetLike`.
+ */
 /** One Pipelines record — a JSON object matching the stream's schema. */
 type PipelineRecord = Record<string, unknown>;
 /**
-* Minimal structural projection of workers-types' `Pipeline&lt;T>` binding. The
-* real binding's `send` takes an array of records and resolves once accepted.
-*/
+ * Minimal structural projection of workers-types' `Pipeline<T>` binding. The
+ * real binding's `send` takes an array of records and resolves once accepted.
+ */
 interface PipelineBindingLike<T extends PipelineRecord = PipelineRecord> {
   send: (records: T[]) => Promise<void>;
 }
 /**
-* The write-side client bound to `ctx.pipelines` (the generated context imports
-* this exact type as `import("@lunora/bindings/pipelines").PipelineClient`).
-* Ingestion is durable, batched, and fire-and-forget — never read a record back
-* in-handler.
-*/
+ * The write-side client bound to `ctx.pipelines` (the generated context imports
+ * this exact type as `import("@lunora/bindings/pipelines").PipelineClient`).
+ * Ingestion is durable, batched, and fire-and-forget — never read a record back
+ * in-handler.
+ */
 interface PipelineClient<T extends PipelineRecord = PipelineRecord> {
   /** Ingest one record or an array of records into the R2-backed sink. */
   send: (records: T | T[]) => Promise<void>;
 }
 /**
-* Wrap a Cloudflare Pipelines binding in the write-side {@link PipelineClient}
-* bound to `ctx.pipelines`. The binding is `env.PIPELINES` (the `pipelines`
-* binding the config layer recognizes; the remote pipeline name is minted with
-* `wrangler pipelines create`).
-*
-* Ingestion is durable and batched: `send` accepts one record or an array and
-* resolves once Cloudflare has accepted them for delivery to the R2-backed sink.
-* There is no in-handler read-back — this is a fire-and-forget egress path, so
-* it belongs on ActionCtx only (external I/O), mirroring `ctx.images`.
-*/
+ * Wrap a Cloudflare Pipelines binding in the write-side {@link PipelineClient}
+ * bound to `ctx.pipelines`. The binding is `env.PIPELINES` (the `pipelines`
+ * binding the config layer recognizes; the remote pipeline name is minted with
+ * `wrangler pipelines create`).
+ *
+ * Ingestion is durable and batched: `send` accepts one record or an array and
+ * resolves once Cloudflare has accepted them for delivery to the R2-backed sink.
+ * There is no in-handler read-back — this is a fire-and-forget egress path, so
+ * it belongs on ActionCtx only (external I/O), mirroring `ctx.images`.
+ */
 declare const createPipelines: <T extends PipelineRecord = PipelineRecord>(options: {
   binding: PipelineBindingLike<T>;
 }) => PipelineClient<T>;

package/dist/pipelines/index.mjs

@@ -1 +1 @@
-export { createPipelines } from '../packem_shared/createPipelines-CfyJ6VGu.mjs';
+import{createPipelines as i}from"../packem_shared/createPipelines-CIvqrc7E.mjs";export{i as createPipelines};

package/dist/r2sql/index.d.mts

@@ -1,8 +1,8 @@
 import { LunoraError } from '@lunora/errors';
 /**
-* A composed SQL fragment. Carries the finished `text`; `toString()` returns it
-* so a fragment can be dropped straight into a template or `String(...)`.
-*/
+ * A composed SQL fragment. Carries the finished `text`; `toString()` returns it
+ * so a fragment can be dropped straight into a template or `String(...)`.
+ */
 declare class Sql {
   readonly text: string;
   constructor(text: string);
@@ -11,32 +11,32 @@ declare class Sql {
 /** True when `value` is a {@link Sql} fragment (an already-trusted, pre-escaped span). */
 declare const isSql: (value: unknown) => value is Sql;
 /**
-* Wrap an already-trusted string as a {@link Sql} fragment so {@link sql}
-* splices it **verbatim** (no escaping). Use ONLY for SQL you constructed
-* yourself (identifiers, keywords, sub-fragments) — never for user input.
-*/
+ * Wrap an already-trusted string as a {@link Sql} fragment so {@link sql}
+ * splices it **verbatim** (no escaping). Use ONLY for SQL you constructed
+ * yourself (identifiers, keywords, sub-fragments) — never for user input.
+ */
 declare const raw: (text: string) => Sql;
 /** Resolve a `string | Sql` to its raw text. A bare string is taken as trusted SQL (callers pass identifiers/fragments here). */
 declare const toText: (value: Sql | string) => string;
 /**
-* Render a JS value as an R2 SQL literal:
-*
-* - `null` / `undefined` → `NULL`
-* - `boolean` → `true` / `false`
-* - finite `number` / `bigint` → the numeric text (non-finite throws — `NaN`/`Infinity` have no SQL literal)
-* - `Date` → an RFC3339 string literal (R2 SQL's `timestamp` form)
-* - `string` → a single-quoted, escaped literal
-* - `Array` → a parenthesised, comma-separated list of literals (for `IN (...)`)
-*
-* Anything else (object, symbol, function) throws — there is no safe SQL literal
-* for it, and silently coercing would risk a malformed or injectable statement.
-*/
+ * Render a JS value as an R2 SQL literal:
+ *
+ * - `null` / `undefined` → `NULL`
+ * - `boolean` → `true` / `false`
+ * - finite `number` / `bigint` → the numeric text (non-finite throws — `NaN`/`Infinity` have no SQL literal)
+ * - `Date` → an RFC3339 string literal (R2 SQL's `timestamp` form; an invalid `Date` throws)
+ * - `string` → a single-quoted, escaped literal
+ * - `Array` → a parenthesised, comma-separated list of literals (for `IN (...)`)
+ *
+ * Anything else (object, symbol, function) throws — there is no safe SQL literal
+ * for it, and silently coercing would risk a malformed or injectable statement.
+ */
 declare const lit: (value: unknown) => string;
 /**
-* Tagged template producing a safe {@link Sql} fragment. Each interpolation is
-* escaped with {@link lit} unless it is already a {@link Sql} (spliced
-* verbatim), so user values can never break out of their literal.
-*/
+ * Tagged template producing a safe {@link Sql} fragment. Each interpolation is
+ * escaped with {@link lit} unless it is already a {@link Sql} (spliced
+ * verbatim), so user values can never break out of their literal.
+ */
 declare const sql: (strings: TemplateStringsArray, ...values: unknown[]) => Sql;
 /** Join SQL fragments/strings with `separator` into one {@link Sql} (e.g. `AND`-ed conditions). */
 declare const joinSql: (parts: ReadonlyArray<Sql | string>, separator: string) => Sql;
@@ -52,29 +52,29 @@ declare const desc: (expr: Sql | string) => OrderTerm;
 /** Render one {@link OrderTerm} to SQL. */
 declare const renderOrderTerm: (term: OrderTerm) => string;
 /**
-* Public types for `@lunora/bindings/r2sql`.
-*
-* R2 SQL is Cloudflare's serverless, distributed query engine over **Apache
-* Iceberg** tables in [R2 Data Catalog](https://developers.cloudflare.com/r2/data-catalog/).
-* It has **no Workers binding** — every query is an HTTPS round-trip to the REST
-* endpoint (`POST …/r2-sql/query/{bucket}`). So, like Hyperdrive's `ctx.sql`, the
-* client is **non-deterministic external I/O**: it is wired onto `ActionCtx`
-* only (see the `r2sql_outside_action` advisor lint) and its reads are NOT
-* tracked by Lunora live queries.
-*
-* Everything here is deliberately structural (no hard dependency on
-* `@cloudflare/workers-types`) so unit tests can inject a plain `fetch` double
-* and never touch the network — mirroring `AnalyticsSqlConfig` in
-* `@lunora/bindings/analytics`.
-*/
+ * Public types for `@lunora/bindings/r2sql`.
+ *
+ * R2 SQL is Cloudflare's serverless, distributed query engine over **Apache
+ * Iceberg** tables in [R2 Data Catalog](https://developers.cloudflare.com/r2/data-catalog/).
+ * It has **no Workers binding** — every query is an HTTPS round-trip to the REST
+ * endpoint (`POST …/r2-sql/query/{bucket}`). So, like Hyperdrive's `ctx.sql`, the
+ * client is **non-deterministic external I/O**: it is wired onto `ActionCtx`
+ * only (see the `r2sql_outside_action` advisor lint) and its reads are NOT
+ * tracked by Lunora live queries.
+ *
+ * Everything here is deliberately structural (no hard dependency on
+ * `@cloudflare/workers-types`) so unit tests can inject a plain `fetch` double
+ * and never touch the network — mirroring `AnalyticsSqlConfig` in
+ * `@lunora/bindings/analytics`.
+ */
 /**
-* Configuration for a {@link import("./client").R2SqlClient | R2SqlClient}.
-*
-* `apiToken` is a **secret** — a Cloudflare API token scoped to R2 SQL (read),
-* R2 Data Catalog, and R2 storage. It is never a binding and must never be
-* auto-scaffolded with a real value; the caller provides it from
-* env/`.dev.vars`.
-*/
+ * Configuration for a {@link import("./client").R2SqlClient | R2SqlClient}.
+ *
+ * `apiToken` is a **secret** — a Cloudflare API token scoped to R2 SQL (read),
+ * R2 Data Catalog, and R2 storage. It is never a binding and must never be
+ * auto-scaffolded with a real value; the caller provides it from
+ * env/`.dev.vars`.
+ */
 interface R2SqlConfig {
   /** Cloudflare account id that owns the bucket/catalog. */
   accountId: string;
@@ -83,36 +83,46 @@ interface R2SqlConfig {
   /** The R2 bucket (warehouse) whose Data Catalog the queries run against. */
   bucket: string;
   /**
-  * Override the REST base URL. Defaults to Cloudflare's public R2 SQL host
-  * (`https://api.sql.cloudflarestorage.com/api/v1/accounts`). Injected in
-  * tests, or pointed at a regional/preview host.
-  */
+   * Override the REST base URL. Defaults to Cloudflare's public R2 SQL host
+   * (`https://api.sql.cloudflarestorage.com/api/v1/accounts`). Injected in
+   * tests, or pointed at a regional/preview host.
+   */
   endpoint?: string;
   /**
-  * `fetch` implementation. Defaults to the global `fetch`; injected in tests
-  * so a query never touches the network.
-  */
+   * `fetch` implementation. Defaults to the global `fetch`; injected in tests
+   * so a query never touches the network.
+   */
   fetch?: typeof globalThis.fetch;
+  /**
+   * Milliseconds before an in-flight query (the fetch AND its body read) is
+   * aborted and surfaced as an `R2SqlError` with status 504. Defaults to
+   * 60_000 — analytical scans legitimately run tens of seconds. `undefined`
+   * means the default, not unbounded.
+   *
+   * The deadline is carried by the request's `signal`, so a custom `fetch`
+   * (above) that ignores `signal` leaves the query unbounded.
+   */
+  timeoutMs?: number;
 }
 /**
-* One column descriptor in a result's schema: the column `name` and, when the
-* engine reports it, the Iceberg storage `type` (`integer`, `string`,
-* `timestamp`, …). R2 SQL does not always echo a schema block, so `type` is
-* optional and `columns` may be derived from the first row's keys.
-*/
+ * One column descriptor in a result's schema: the column `name` and, when the
+ * engine reports it, the Iceberg storage `type` (`integer`, `string`,
+ * `timestamp`, …). R2 SQL does not always echo a schema block, so `type` is
+ * optional and `columns` may be derived from the first row's keys.
+ */
 interface R2SqlColumn {
   name: string;
   type?: string;
 }
 /**
-* A parsed R2 SQL result. R2 SQL returns a Cloudflare envelope
-* (`{ success, result, errors }`); we surface the `rows` (the `result` array of
-* column→value records), the inferred/echoed `columns`, and the `rowCount`.
-*
-* `Row` defaults to an open record; supply it (`from&lt;MyRow>(…)` /
-* `query&lt;MyRow>(…)`) to get typed result fields — R2 SQL tables live in Iceberg,
-* not `defineSchema`, so the row type is caller-declared rather than inferred.
-*/
+ * A parsed R2 SQL result. R2 SQL returns a Cloudflare envelope
+ * (`{ success, result, errors }`); we surface the `rows` (the `result` array of
+ * column→value records), the inferred/echoed `columns`, and the `rowCount`.
+ *
+ * `Row` defaults to an open record; supply it (`from<MyRow>(…)` /
+ * `query<MyRow>(…)`) to get typed result fields — R2 SQL tables live in Iceberg,
+ * not `defineSchema`, so the row type is caller-declared rather than inferred.
+ */
 interface R2SqlResult<Row = Record<string, unknown>> {
   /** Column descriptors, echoed by the engine or inferred from the first row. */
   columns: R2SqlColumn[];
@@ -124,25 +134,25 @@ interface R2SqlResult<Row = Record<string, unknown>> {
 /** Options for {@link import("./client").R2SqlClient.explain | explain}. */
 interface R2SqlExplainOptions {
   /**
-  * `"json"` runs `EXPLAIN FORMAT JSON` (structured plan); `"text"` (default)
-  * runs a plain `EXPLAIN`.
-  */
+   * `"json"` runs `EXPLAIN FORMAT JSON` (structured plan); `"text"` (default)
+   * runs a plain `EXPLAIN`.
+   */
   format?: "json" | "text";
 }
 /**
-* Executes a finished SQL string against R2 SQL and returns the parsed result.
-* Deliberately non-generic (the row type is a caller-side concern) — the typed
-* `run()` / `query()` boundaries cast the open result to the declared row.
-*/
+ * Executes a finished SQL string against R2 SQL and returns the parsed result.
+ * Deliberately non-generic (the row type is a caller-side concern) — the typed
+ * `run()` / `query()` boundaries cast the open result to the declared row.
+ */
 type QueryExecutor = (statement: string) => Promise<R2SqlResult>;
 /** Anything that compiles to a statement and can run — a {@link import("./builder").SelectBuilder | SelectBuilder} or {@link import("./set-operation").SetOperation | SetOperation}. */
 interface Queryable<Row = Record<string, unknown>> {
   /**
-  * True when this query carries its own `ORDER BY`/`LIMIT`, so a set
-  * operation must parenthesise it (R2 SQL rejects a bare `LIMIT` before a set
-  * operator). Read structurally by the set-operation renderer to avoid an
-  * import cycle.
-  */
+   * True when this query carries its own `ORDER BY`/`LIMIT`, so a set
+   * operation must parenthesise it (R2 SQL rejects a bare `LIMIT` before a set
+   * operator). Read structurally by the set-operation renderer to avoid an
+   * import cycle.
+   */
   readonly needsWrapForSetOperation?: boolean;
   run: () => Promise<R2SqlResult<Row>>;
   toSQL: () => string;
@@ -155,16 +165,16 @@ interface SetMember {
   query: Queryable<unknown>;
 }
 /**
-* A composition of queries via set operations. Chain more operations, or apply a
-* single `ORDER BY` / `LIMIT` to the combined result.
-*/
+ * A composition of queries via set operations. Chain more operations, or apply a
+ * single `ORDER BY` / `LIMIT` to the combined result.
+ */
 declare class SetOperation<Row = Record<string, unknown>> implements Queryable<Row> {
   /**
-  * Always `true`: a nested set operation must be parenthesised when it is a
-  * member of another set operation, or mixed operators mis-associate — e.g.
-  * `a.union(b.except(c))` must render `a UNION (b EXCEPT c)`, not the flat
-  * `a UNION b EXCEPT c`.
-  */
+   * Always `true`: a nested set operation must be parenthesised when it is a
+   * member of another set operation, or mixed operators mis-associate — e.g.
+   * `a.union(b.except(c))` must render `a UNION (b EXCEPT c)`, not the flat
+   * `a UNION b EXCEPT c`.
+   */
   readonly needsWrapForSetOperation = true;
   private readonly exec;
   private readonly members;
@@ -192,9 +202,9 @@ declare class SetOperation<Row = Record<string, unknown>> implements Queryable<R
   private add;
 }
 /**
-* A fluent `SELECT` over one Iceberg table (`namespace.table`), generic over the
-* caller-declared `Row` result type.
-*/
+ * A fluent `SELECT` over one Iceberg table (`namespace.table`), generic over the
+ * caller-declared `Row` result type.
+ */
 declare class SelectBuilder<Row = Record<string, unknown>> implements Queryable<Row> {
   private readonly exec;
   private readonly table;
@@ -232,9 +242,9 @@ declare class SelectBuilder<Row = Record<string, unknown>> implements Queryable<
   /** Add `HAVING` condition(s) over aggregates; multiple are `AND`-ed. */
   having(...conditions: Condition[]): this;
   /**
-  * `QUALIFY` — filter on a window function without a subquery, e.g.
-  * `.qualify(fn.rowNumber().over({ partitionBy: "region", orderBy: desc("total") }).lte(3))`.
-  */
+   * `QUALIFY` — filter on a window function without a subquery, e.g.
+   * `.qualify(fn.rowNumber().over({ partitionBy: "region", orderBy: desc("total") }).lte(3))`.
+   */
   qualify(condition: Condition): this;
   /** `ORDER BY` term(s) — bare strings (ASC) or {@link import("./order").asc | asc}/{@link import("./order").desc | desc} tags. */
   orderBy(...terms: OrderTerm[]): this;
@@ -262,18 +272,18 @@ declare class SelectBuilder<Row = Record<string, unknown>> implements Queryable<
   private setOperation;
 }
 /**
-* Thrown when R2 SQL responds with a non-2xx status, an `success: false`
-* envelope, or an unparseable body; carries the HTTP `status` and the raw body
-* for the caller to surface.
-*/
+ * Thrown when R2 SQL responds with a non-2xx status, an `success: false`
+ * envelope, or an unparseable body; carries the HTTP `status` and the raw body
+ * for the caller to surface.
+ */
 declare class R2SqlError extends LunoraError {
   constructor(status: number, body: string);
 }
 /**
-* The typed R2 SQL surface bound to `ctx.r2sql` on **`ActionCtx` only**. This is
-* the exact type the generated ctx imports as
-* `import("@lunora/bindings/r2sql").R2SqlClient` — keep the name and shape stable.
-*/
+ * The typed R2 SQL surface bound to `ctx.r2sql` on **`ActionCtx` only**. This is
+ * the exact type the generated ctx imports as
+ * `import("@lunora/bindings/r2sql").R2SqlClient` — keep the name and shape stable.
+ */
 interface R2SqlClient {
   /** Run `DESCRIBE namespace.table` — column names and Iceberg types. */
   describe: (table: string) => Promise<R2SqlResult>;
@@ -289,16 +299,16 @@ interface R2SqlClient {
   showTables: (namespace: string) => Promise<R2SqlResult>;
 }
 /**
-* Build an {@link R2SqlClient}. Each query POSTs to the bucket's
-* `r2-sql/query/{bucket}` endpoint with the bearer token, then normalises the
-* envelope into {@link R2SqlResult}.
-*/
+ * Build an {@link R2SqlClient}. Each query POSTs to the bucket's
+ * `r2-sql/query/{bucket}` endpoint with the bearer token, then normalises the
+ * envelope into {@link R2SqlResult}.
+ */
 declare const createR2Sql: (config: R2SqlConfig) => R2SqlClient;
 /**
-* A windowed expression. Extends {@link Sql}, so it is usable anywhere a raw
-* fragment is; `.as(alias)` makes a `SELECT` item, and the comparison helpers
-* (`.lte`, `.gt`, `.between`, …) make `QUALIFY` conditions.
-*/
+ * A windowed expression. Extends {@link Sql}, so it is usable anywhere a raw
+ * fragment is; `.as(alias)` makes a `SELECT` item, and the comparison helpers
+ * (`.lte`, `.gt`, `.between`, …) make `QUALIFY` conditions.
+ */
 declare class WindowExpression extends Sql {
   /** Alias the expression — `... AS alias` — for use in a `SELECT` list. */
   as(alias: string): Sql;
@@ -310,18 +320,18 @@ declare class WindowExpression extends Sql {
   gt(value: unknown): Sql;
   /** `expr >= value`. */
   gte(value: unknown): Sql;
-  /** `expr &lt; value`. */
+  /** `expr < value`. */
   lt(value: unknown): Sql;
-  /** `expr &lt;= value`. */
+  /** `expr <= value`. */
   lte(value: unknown): Sql;
   private compare;
 }
 /** The `OVER (...)` window specification. */
 interface OverSpec {
   /**
-  * A raw frame clause, e.g. `"ROWS BETWEEN 2 PRECEDING AND CURRENT ROW"`.
-  * Spliced verbatim — it is keyword-only SQL, not a value.
-  */
+   * A raw frame clause, e.g. `"ROWS BETWEEN 2 PRECEDING AND CURRENT ROW"`.
+   * Spliced verbatim — it is keyword-only SQL, not a value.
+   */
   frame?: string;
   /** `ORDER BY` term(s) within the window. */
   orderBy?: OrderTerm | OrderTerm[];
@@ -329,9 +339,9 @@ interface OverSpec {
   partitionBy?: Sql | string | (Sql | string)[];
 }
 /**
-* A window function awaiting its `OVER (...)`. Call {@link WindowFunction.over |
-* .over} to bind a window and get a {@link WindowExpression}.
-*/
+ * A window function awaiting its `OVER (...)`. Call {@link WindowFunction.over |
+ * .over} to bind a window and get a {@link WindowExpression}.
+ */
 declare class WindowFunction {
   private readonly callText;
   constructor(callText: string);
@@ -339,13 +349,13 @@ declare class WindowFunction {
   over(spec?: OverSpec): WindowExpression;
 }
 /**
-* Window-function builders. Each returns a {@link WindowFunction}; chain
-* `.over(...)` to bind the window.
-*
-* Ranking: `rowNumber`, `rank`, `denseRank`, `percentRank`, `cumeDist`,
-* `ntile`. Offset/value: `lag`, `lead`, `firstValue`, `lastValue`, `nthValue`.
-* Aggregates used as windows: `sum`, `avg`, `count`, `min`, `max`.
-*/
+ * Window-function builders. Each returns a {@link WindowFunction}; chain
+ * `.over(...)` to bind the window.
+ *
+ * Ranking: `rowNumber`, `rank`, `denseRank`, `percentRank`, `cumeDist`,
+ * `ntile`. Offset/value: `lag`, `lead`, `firstValue`, `lastValue`, `nthValue`.
+ * Aggregates used as windows: `sum`, `avg`, `count`, `min`, `max`.
+ */
 declare const fn: {
   /** `AVG(column) OVER (...)`. */
   avg: (column: Sql | string) => WindowFunction;
@@ -380,4 +390,19 @@ declare const fn: {
   /** `SUM(column) OVER (...)`. */
   sum: (column: Sql | string) => WindowFunction;
 };
-export { type Condition, type OrderTerm, type OverSpec, type QueryExecutor, type Queryable, type R2SqlClient, type R2SqlColumn, type R2SqlConfig, R2SqlError, type R2SqlExplainOptions, type R2SqlResult, SelectBuilder, SetOperation, Sql, WindowExpression, WindowFunction, asc, createR2Sql, desc, fn, isSql, joinSql, lit, raw, renderOrderTerm, sql, toText };
+export { type Condition, type OrderTerm, type OverSpec, type QueryExecutor, type Queryable, type R2SqlClient, type R2SqlColumn, type R2SqlConfig, R2SqlError, type R2SqlExplainOptions, type R2SqlResult,
+/**
+ * `@lunora/bindings/r2sql` — typed, chainable R2 SQL for Lunora.
+ *
+ * Query Cloudflare [R2 SQL](https://developers.cloudflare.com/r2-sql/) — the
+ * serverless engine over Apache Iceberg tables in R2 Data Catalog — from a
+ * Lunora **action** via `ctx.r2sql`. First-class support for the 2026-06-21
+ * features: window functions (`fn.rowNumber().over(...)`), `DISTINCT` /
+ * `DISTINCT ON`, `QUALIFY`, and set operations (`.union()/.intersect()/.except()`).
+ *
+ * R2 SQL is non-deterministic external I/O with no Workers binding, so — like
+ * `ctx.sql` (Hyperdrive) — it is wired onto `ActionCtx` only and its reads are
+ * not tracked by Lunora live queries (see the `r2sql_outside_action` advisor
+ * lint). See the README and `createR2Sql` JSDoc.
+ */
+SelectBuilder, SetOperation, Sql, WindowExpression, WindowFunction, asc, createR2Sql, desc, fn, isSql, joinSql, lit, raw, renderOrderTerm, sql, toText };