@lunora/bindings 1.0.0-alpha.6 → 1.0.0-alpha.7

package/dist/images/index.mjs

@@ -1,3 +1,3 @@
 export { createImages } from '../packem_shared/createImages-BzRnsz3H.mjs';
-export { buildImageDeliveryUrl } from '../packem_shared/buildImageDeliveryUrl-B6_QU91n.mjs';
-export { buildSignedImageUrl, verifySignedImageUrl } from '../packem_shared/buildSignedImageUrl-6iibA9v1.mjs';
+export { buildImageDeliveryUrl } from '../packem_shared/buildImageDeliveryUrl-qZ7XbqTL.mjs';
+export { buildSignedImageUrl, verifySignedImageUrl } from '../packem_shared/buildSignedImageUrl-DNUFfyGP.mjs';

package/dist/kv/index.mjs

@@ -1,2 +1,2 @@
-export { createKv, scopeKey } from '../packem_shared/createKv-7lNrS1W2.mjs';
-export { createKvIntrospector, createKvIntrospectorFromEnv } from '../packem_shared/createKvIntrospector-CrAgQp1w.mjs';
+export { createKv, scopeKey } from '../packem_shared/createKv-C8Iyu5hD.mjs';
+export { createKvIntrospector, createKvIntrospectorFromEnv } from '../packem_shared/createKvIntrospector-Byk4GfsY.mjs';

package/dist/packem_shared/{R2SqlError-Boygg3S0.mjs → R2SqlError-drPKSCZ3.mjs}

@@ -1,6 +1,6 @@
 import { LunoraError } from '@lunora/errors';
-import SelectBuilder from './SelectBuilder-DHaXZwn_.mjs';
-import { ident, toText } from './Sql-DceGtcUd.mjs';
+import SelectBuilder from './SelectBuilder-BOqJQHEv.mjs';
+import { ident, toText } from './Sql-B3zq2YGx.mjs';
 
 const API_BASE = "https://api.sql.cloudflarestorage.com/api/v1/accounts";
 const inferColumns = (rows) => {

package/dist/packem_shared/{SelectBuilder-DHaXZwn_.mjs → SelectBuilder-BOqJQHEv.mjs}

@@ -1,6 +1,6 @@
-import { renderOrderTerm } from './asc-Cur-xO8v.mjs';
-import SetOperation from './SetOperation-RDHcxccj.mjs';
-import { tableRef, toText, lit } from './Sql-DceGtcUd.mjs';
+import { renderOrderTerm } from './asc-DZbQCxh1.mjs';
+import SetOperation from './SetOperation-DmPgUL8W.mjs';
+import { tableRef, toText, assertLimit, lit } from './Sql-B3zq2YGx.mjs';
 
 const JOIN_KEYWORDS = {
   cross: "CROSS JOIN",
@@ -91,6 +91,7 @@ class SelectBuilder {
   }
   /** `LIMIT n` (R2 SQL: 1–10,000, default 500). */
   limit(n) {
+    assertLimit(n);
     this.limitValue = n;
     return this;
   }

package/dist/packem_shared/{SetOperation-RDHcxccj.mjs → SetOperation-DmPgUL8W.mjs}

@@ -1,5 +1,5 @@
-import { renderOrderTerm } from './asc-Cur-xO8v.mjs';
-import { lit } from './Sql-DceGtcUd.mjs';
+import { renderOrderTerm } from './asc-DZbQCxh1.mjs';
+import { assertLimit, lit } from './Sql-B3zq2YGx.mjs';
 
 const renderMember = (query) => {
   const text = query.toSQL();
@@ -44,6 +44,7 @@ class SetOperation {
   }
   /** `LIMIT` applied to the combined result. */
   limit(n) {
+    assertLimit(n);
     this.limitValue = n;
     return this;
   }

package/dist/packem_shared/{Sql-DceGtcUd.mjs → Sql-B3zq2YGx.mjs}

@@ -1,6 +1,7 @@
 const quoteString = (value) => `'${value.replaceAll("'", "''")}'`;
 const IDENTIFIER_RE = /^\w+(?:\.\w+)*$/;
 const TABLE_REF_RE = /^\w+(?:\.\w+)*(?:\s+(?:as\s+)?\w+)?$/i;
+const MAX_LIMIT = 1e4;
 class Sql {
   text;
   constructor(text) {
@@ -64,5 +65,10 @@ const sql = (strings, ...values) => {
   return new Sql(out);
 };
 const joinSql = (parts, separator) => new Sql(parts.map((part) => toText(part)).join(separator));
+const assertLimit = (n) => {
+  if (!Number.isInteger(n) || n < 1 || n > MAX_LIMIT) {
+    throw new RangeError(`r2sql: limit must be an integer between 1 and ${String(MAX_LIMIT)} (got ${String(n)}).`);
+  }
+};
 
-export { Sql, ident, isSql, joinSql, lit, raw, sql, tableRef, toText };
+export { Sql, assertLimit, ident, isSql, joinSql, lit, raw, sql, tableRef, toText };

package/dist/packem_shared/{WindowExpression-Cg9s2xcr.mjs → WindowExpression-BT_uA6g1.mjs}

@@ -1,4 +1,4 @@
-import { Sql, lit } from './Sql-DceGtcUd.mjs';
+import { Sql, lit } from './Sql-B3zq2YGx.mjs';
 
 const IDENTIFIER = /^[A-Z_][\w$]*$/i;
 const assertIdent = (name) => {

package/dist/packem_shared/{WindowFunction-DA3pGC3N.mjs → WindowFunction-DrnuZUF6.mjs}

@@ -1,6 +1,6 @@
-import { renderOrderTerm } from './asc-Cur-xO8v.mjs';
-import { lit, toText } from './Sql-DceGtcUd.mjs';
-import WindowExpression from './WindowExpression-Cg9s2xcr.mjs';
+import { renderOrderTerm } from './asc-DZbQCxh1.mjs';
+import { lit, toText } from './Sql-B3zq2YGx.mjs';
+import WindowExpression from './WindowExpression-BT_uA6g1.mjs';
 
 const toArray = (value) => {
   if (value === void 0) {

package/dist/packem_shared/{asc-Cur-xO8v.mjs → asc-DZbQCxh1.mjs}

@@ -1,4 +1,4 @@
-import { Sql, toText } from './Sql-DceGtcUd.mjs';
+import { Sql, toText } from './Sql-B3zq2YGx.mjs';
 
 const asc = (expr) => {
   return { dir: "ASC", expr };

package/dist/packem_shared/{buildImageDeliveryUrl-B6_QU91n.mjs → buildImageDeliveryUrl-qZ7XbqTL.mjs}

@@ -1,14 +1,16 @@
 import { LunoraError } from '@lunora/errors';
 
 const ABSOLUTE_URL_RE = /^[a-z][a-z\d+\-.]*:\/\//i;
+const FORBIDDEN_VALUE_CHARS = [",", "=", "#", "?", "/"];
 const stripTrailingSlash = (value) => value.endsWith("/") ? value.slice(0, -1) : value;
 const stripLeadingSlash = (value) => value.startsWith("/") ? value.slice(1) : value;
 const serializeTransform = (transform) => Object.entries(transform).filter(([, value]) => value !== void 0 && (typeof value === "string" || typeof value === "number")).map(([key, value]) => {
   const serialized = String(value);
-  if (serialized.includes(",") || serialized.includes("=")) {
+  const offendingChar = FORBIDDEN_VALUE_CHARS.find((char) => serialized.includes(char));
+  if (offendingChar !== void 0) {
     throw new LunoraError(
       "INTERNAL",
-      `@lunora/bindings/images: transform option \`${key}\` value \`${serialized}\` contains a \`,\` or \`=\`, which the /cdn-cgi/image/ option list cannot represent (these are the option/key-value separators). For colors, use the hex form (e.g. \`#RRGGBB\`/\`%23RRGGBB\`) instead of \`rgb(r,g,b)\`.`
+      `@lunora/bindings/images: transform option \`${key}\` value \`${serialized}\` contains a \`${offendingChar}\`, which the /cdn-cgi/image/ option path cannot represent (\`,\`/\`=\` are the option/key-value separators; \`#\`/\`?\`/\`/\` are URL-structural). Percent-encode the value — for colors use \`%23RRGGBB\`, not \`#RRGGBB\` or \`rgb(r,g,b)\`.`
     );
   }
   return `${key}=${serialized}`;

package/dist/packem_shared/{buildSignedImageUrl-6iibA9v1.mjs → buildSignedImageUrl-DNUFfyGP.mjs}

@@ -1,7 +1,16 @@
+const evictOldestEntry = (map, capacity) => {
+  if (map.size < capacity) {
+    return;
+  }
+  const oldest = map.keys().next().value;
+  if (oldest !== void 0) {
+    map.delete(oldest);
+  }
+};
+
 const textEncoder = new TextEncoder();
-const MAX_EXPIRES_IN_SECONDS = 7 * 24 * 60 * 60;
-const SCHEME_PREFIX_RE = /^[a-z][a-z\d+\-.]*:\/\//i;
-const LEADING_SLASH_RE = /^\//;
+const MAX_SIGNED_URL_TTL_SECONDS = 7 * 24 * 60 * 60;
+const SCHEME_PREFIX_RE = /^[a-z][a-z0-9+\-.]*:\/\//i;
 const toBase64Url = (bytes) => {
   const binary = String.fromCodePoint(...bytes);
   return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replaceAll("=", "");
@@ -22,16 +31,30 @@ const importHmacKey = async (secret) => {
   if (cached) {
     return cached;
   }
-  if (keyCache.size >= KEY_CACHE_MAX) {
-    const oldest = keyCache.keys().next().value;
-    if (oldest !== void 0) {
-      keyCache.delete(oldest);
-    }
-  }
+  evictOldestEntry(keyCache, KEY_CACHE_MAX);
   const keyPromise = crypto.subtle.importKey("raw", textEncoder.encode(secret), { hash: "SHA-256", name: "HMAC" }, false, ["sign", "verify"]);
   keyCache.set(secret, keyPromise);
   return keyPromise;
 };
+const extractHost = (input) => {
+  try {
+    return new URL(input).host;
+  } catch {
+    const noScheme = input.replace(SCHEME_PREFIX_RE, "");
+    return noScheme.split("/")[0] ?? "";
+  }
+};
+const signCanonical = async (secret, canonical) => {
+  const cryptoKey = await importHmacKey(secret);
+  const signature = await crypto.subtle.sign("HMAC", cryptoKey, textEncoder.encode(canonical));
+  return toBase64Url(new Uint8Array(signature));
+};
+const verifyCanonical = async (secret, canonical, sigBytes) => {
+  const cryptoKey = await importHmacKey(secret);
+  return crypto.subtle.verify("HMAC", cryptoKey, sigBytes, textEncoder.encode(canonical));
+};
+
+const LEADING_SLASH_RE = /^\//;
 const serializeTransform = (transform) => {
   if (transform === void 0) {
     return "";
@@ -42,30 +65,30 @@ const canonicalize = (host, key, exp, transform) => `${host.toLowerCase()}
 ${key}
 ${String(exp)}
 ${transform}`;
-const extractHost = (input) => {
-  try {
-    return new URL(input).host;
-  } catch {
-    const noScheme = input.replace(SCHEME_PREFIX_RE, "");
-    return noScheme.split("/")[0] ?? "";
-  }
-};
 const encodeKey = (key) => key.split("/").map((segment) => encodeURIComponent(segment)).join("/");
 const buildSignedImageUrl = async (options) => {
   const expiresInSeconds = options.expiresInSeconds ?? 60 * 60;
   if (!Number.isFinite(expiresInSeconds) || expiresInSeconds <= 0) {
     throw new TypeError("@lunora/bindings/images: expiresInSeconds must be a positive finite number");
   }
-  if (expiresInSeconds > MAX_EXPIRES_IN_SECONDS) {
-    throw new TypeError(`@lunora/bindings/images: expiresInSeconds must not exceed ${String(MAX_EXPIRES_IN_SECONDS)} (7 days)`);
+  if (expiresInSeconds > MAX_SIGNED_URL_TTL_SECONDS) {
+    throw new TypeError(`@lunora/bindings/images: expiresInSeconds must not exceed ${String(MAX_SIGNED_URL_TTL_SECONDS)} (7 days)`);
+  }
+  let basePath = "";
+  try {
+    basePath = new URL(options.baseUrl).pathname;
+  } catch {
+  }
+  if (basePath !== "" && basePath !== "/") {
+    throw new TypeError(
+      `@lunora/bindings/images: baseUrl must not carry a path ("${basePath}") — the key is verified from the full URL pathname, so a subpath base would make every signed URL fail verification`
+    );
   }
   const exp = Math.floor(Date.now() / 1e3) + expiresInSeconds;
   const host = extractHost(options.baseUrl);
   const transform = serializeTransform(options.transform);
   const normalizedKey = options.key.replace(LEADING_SLASH_RE, "");
-  const cryptoKey = await importHmacKey(options.secret);
-  const signature = await crypto.subtle.sign("HMAC", cryptoKey, textEncoder.encode(canonicalize(host, normalizedKey, exp, transform)));
-  const sig = toBase64Url(new Uint8Array(signature));
+  const sig = await signCanonical(options.secret, canonicalize(host, normalizedKey, exp, transform));
   const base = options.baseUrl.endsWith("/") ? options.baseUrl.slice(0, -1) : options.baseUrl;
   const safeKey = encodeKey(normalizedKey);
   const tParameter = transform === "" ? "" : `&t=${encodeURIComponent(transform)}`;
@@ -97,13 +120,7 @@ const verifySignedImageUrl = async (input, secret, options) => {
     return { reason: "malformed", valid: false };
   }
   const host = options?.expectedHost === void 0 ? url.host : extractHost(options.expectedHost);
-  const cryptoKey = await importHmacKey(secret);
-  const valid = await crypto.subtle.verify(
-    "HMAC",
-    cryptoKey,
-    sigBytes,
-    textEncoder.encode(canonicalize(host, key, exp, transform))
-  );
+  const valid = await verifyCanonical(secret, canonicalize(host, key, exp, transform), sigBytes);
   if (!valid) {
     return { reason: "bad_signature", valid: false };
   }

package/dist/packem_shared/{concurrent-Dj5sOibv.mjs → concurrent-CkCEVwqP.mjs}

@@ -6,17 +6,33 @@ const concurrentMap = async (items, limit, function_) => {
   const effectiveLimit = Math.max(1, Math.min(limit, items.length));
   const results = Array.from({ length: items.length });
   let cursor = 0;
+  let failed = false;
+  let firstError;
   const workers = Array.from({ length: effectiveLimit }, async () => {
     for (; ; ) {
+      if (failed) {
+        return;
+      }
       const index = cursor;
       cursor += 1;
       if (index >= items.length) {
         return;
       }
-      results[index] = await function_(items[index], index);
+      try {
+        results[index] = await function_(items[index], index);
+      } catch (error) {
+        if (!failed) {
+          failed = true;
+          firstError = error;
+        }
+        return;
+      }
     }
   });
   await Promise.all(workers);
+  if (failed) {
+    throw firstError;
+  }
   return results;
 };
 

package/dist/packem_shared/{createContextVectors-BSizpmu5.mjs → createContextVectors-DwZtnPeC.mjs}

@@ -1,4 +1,4 @@
-import { c as concurrentMap, U as UPSERT_EMBED_CONCURRENCY } from './concurrent-Dj5sOibv.mjs';
+import { c as concurrentMap, U as UPSERT_EMBED_CONCURRENCY } from './concurrent-CkCEVwqP.mjs';
 
 const createContextVectors = (lunora) => {
   const upsert = async (indexName, input) => {

package/dist/packem_shared/{createKv-7lNrS1W2.mjs → createKv-C8Iyu5hD.mjs}

@@ -2,11 +2,13 @@ import { LunoraError } from '@lunora/errors';
 
 const MAX_KEY_LENGTH = 512;
 const MAX_LIST_LIMIT = 1e3;
+const TEXT_ENCODER = new TextEncoder();
+const byteLength = (value) => TEXT_ENCODER.encode(value).length;
 const validateKey = (key) => {
   if (typeof key !== "string" || key.length === 0) {
     throw new TypeError("@lunora/bindings/kv: key must be a non-empty string");
   }
-  if (key.length > MAX_KEY_LENGTH) {
+  if (byteLength(key) > MAX_KEY_LENGTH) {
     throw new LunoraError("INTERNAL", `@lunora/bindings/kv: key exceeds ${String(MAX_KEY_LENGTH)}-byte limit`);
   }
   if (key.includes("\0")) {
@@ -23,7 +25,7 @@ const validatePrefix = (prefix) => {
   if (prefix.length === 0) {
     return;
   }
-  if (prefix.length > MAX_KEY_LENGTH) {
+  if (byteLength(prefix) > MAX_KEY_LENGTH) {
     throw new LunoraError("INTERNAL", `@lunora/bindings/kv: prefix exceeds ${String(MAX_KEY_LENGTH)}-byte limit`);
   }
   if (prefix.includes("\0")) {
@@ -41,7 +43,7 @@ const scopeKey = (prefix, key) => {
   validateKey(key);
   const trimmedPrefix = prefix.endsWith("/") ? prefix.slice(0, -1) : prefix;
   const composed = `${trimmedPrefix}/${key}`;
-  if (composed.length > MAX_KEY_LENGTH) {
+  if (byteLength(composed) > MAX_KEY_LENGTH) {
     throw new LunoraError("INTERNAL", `@lunora/bindings/kv: scoped key exceeds ${String(MAX_KEY_LENGTH)}-byte limit`);
   }
   return composed;

package/dist/packem_shared/{createKvIntrospector-CrAgQp1w.mjs → createKvIntrospector-Byk4GfsY.mjs}

@@ -4,7 +4,7 @@ const createKvIntrospector = (options) => {
   const { namespaces } = options;
   const resolveNamespace = (binding) => {
     const ns = namespaces[binding];
-    if (ns === void 0) {
+    if (!Object.hasOwn(namespaces, binding) || ns === void 0) {
       throw new LunoraError("BAD_REQUEST", `@lunora/bindings/kv: no namespace registered under binding "${binding}"`);
     }
     return ns;

package/dist/packem_shared/{createVectorAdminIntrospector-C-qTDWA1.mjs → createVectorAdminIntrospector-DuSvcBa5.mjs}

@@ -29,11 +29,11 @@ const createVectorAdminIntrospector = (options) => {
   }
   const queryIndex = async ({ name, text, topK }) => {
     const binding = indexes[name];
-    if (binding === void 0) {
+    if (!Object.hasOwn(indexes, name) || binding === void 0) {
       throw new LunoraError("INTERNAL", `@lunora/bindings/vectors: no Vectorize binding registered for index "${name}"`);
     }
     const embed = embedders[name];
-    if (embed === void 0) {
+    if (!Object.hasOwn(embedders, name) || embed === void 0) {
       throw new LunoraError("INTERNAL", `@lunora/bindings/vectors: no embedder registered for index "${name}" — it lists read-only`);
     }
     const vector = await embed(text);

package/dist/packem_shared/{createVectors-DqxgEPQb.mjs → createVectors-CTSrctiK.mjs}

@@ -1,9 +1,9 @@
 import { LunoraError } from '@lunora/errors';
-import { c as concurrentMap, U as UPSERT_EMBED_CONCURRENCY } from './concurrent-Dj5sOibv.mjs';
+import { c as concurrentMap, U as UPSERT_EMBED_CONCURRENCY } from './concurrent-CkCEVwqP.mjs';
 
 const resolveIndex = (indexes, name) => {
   const index = indexes[name];
-  if (!index) {
+  if (!Object.hasOwn(indexes, name) || index === void 0) {
     throw new LunoraError(
       "INTERNAL",
       `@lunora/bindings/vectors: no index registered for "${name}". Known indexes: ${Object.keys(indexes).join(", ") || "(none)"}`

package/dist/r2sql/index.mjs

@@ -1,7 +1,7 @@
-export { default as SelectBuilder } from '../packem_shared/SelectBuilder-DHaXZwn_.mjs';
-export { R2SqlError, createR2Sql } from '../packem_shared/R2SqlError-Boygg3S0.mjs';
-export { asc, desc, renderOrderTerm } from '../packem_shared/asc-Cur-xO8v.mjs';
-export { default as SetOperation } from '../packem_shared/SetOperation-RDHcxccj.mjs';
-export { Sql, isSql, joinSql, lit, raw, sql, toText } from '../packem_shared/Sql-DceGtcUd.mjs';
-export { WindowFunction, fn } from '../packem_shared/WindowFunction-DA3pGC3N.mjs';
-export { default as WindowExpression } from '../packem_shared/WindowExpression-Cg9s2xcr.mjs';
+export { default as SelectBuilder } from '../packem_shared/SelectBuilder-BOqJQHEv.mjs';
+export { R2SqlError, createR2Sql } from '../packem_shared/R2SqlError-drPKSCZ3.mjs';
+export { asc, desc, renderOrderTerm } from '../packem_shared/asc-DZbQCxh1.mjs';
+export { default as SetOperation } from '../packem_shared/SetOperation-DmPgUL8W.mjs';
+export { Sql, isSql, joinSql, lit, raw, sql, toText } from '../packem_shared/Sql-B3zq2YGx.mjs';
+export { WindowFunction, fn } from '../packem_shared/WindowFunction-DrnuZUF6.mjs';
+export { default as WindowExpression } from '../packem_shared/WindowExpression-BT_uA6g1.mjs';

package/dist/vectors/index.mjs

@@ -1,3 +1,3 @@
-export { createContextVectors, createVectorSyncHook } from '../packem_shared/createContextVectors-BSizpmu5.mjs';
-export { createVectorAdminIntrospector } from '../packem_shared/createVectorAdminIntrospector-C-qTDWA1.mjs';
-export { default as createVectors } from '../packem_shared/createVectors-DqxgEPQb.mjs';
+export { createContextVectors, createVectorSyncHook } from '../packem_shared/createContextVectors-DwZtnPeC.mjs';
+export { createVectorAdminIntrospector } from '../packem_shared/createVectorAdminIntrospector-DuSvcBa5.mjs';
+export { default as createVectors } from '../packem_shared/createVectors-CTSrctiK.mjs';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/bindings",
-  "version": "1.0.0-alpha.6",
+  "version": "1.0.0-alpha.7",
   "description": "Lightweight Cloudflare binding helpers for Lunora — ctx.kv, ctx.images, ctx.analytics, ctx.pipelines, ctx.vectors, ctx.r2sql — one install, per-binding subpaths",
   "keywords": [
     "analytics",
@@ -64,7 +64,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/errors": "1.0.0-alpha.3"
+    "@lunora/errors": "1.0.0-alpha.4"
   },
   "engines": {
     "node": "^22.15.0 || >=24.11.0"