@lunora/bindings 1.0.0-alpha.9 → 1.0.0-alpha.90

package/dist/analytics/index.d.mts

@@ -1,3 +1,5 @@
+import { AnalyticsEngineDataPoint, AnalyticsEngineDatasetLike } from '@lunora/platform';
+export type { AnalyticsEngineDataPoint, AnalyticsEngineDatasetLike } from '@lunora/platform';
 import { LunoraError } from '@lunora/errors';
 /**
  * Structural types for the Analytics Engine write path.
@@ -8,29 +10,6 @@ import { LunoraError } from '@lunora/errors';
  * approach `@lunora/d1` takes with `D1DatabaseLike`
  * (`packages/d1/src/d1-client.ts`).
  */
-/**
- * One Analytics Engine data point, mirroring the positional shape
- * `writeDataPoint` accepts. AE stores up to 20 string `blobs`, up to 20 numeric
- * `doubles`, and exactly **one** `index` (the high-cardinality sampling key) per
- * data point — the SQL API later exposes them as `blob1..blob20`,
- * `double1..double20`, and `index1`.
- */
-interface AnalyticsEngineDataPoint {
-  /** String columns, mapped positionally to `blob1..blob20`. */
-  blobs?: (ArrayBuffer | null | string)[];
-  /** Numeric columns, mapped positionally to `double1..double20`. */
-  doubles?: number[];
-  /** Sampling key, exposed as `index1`. AE accepts at most one. */
-  indexes?: (ArrayBuffer | string)[];
-}
-/**
- * Minimal structural projection of workers-types' `AnalyticsEngineDataset`,
- * kept loose enough for a plain-object fake in unit tests. `writeDataPoint` is
- * fire-and-forget: it returns `void` and never throws on the hot path.
- */
-interface AnalyticsEngineDatasetLike {
-  writeDataPoint: (event: AnalyticsEngineDataPoint) => void;
-}
 /**
  * Named-field event handed to {@link AnalyticsClient.track}. Each field is
  * mapped to a positional AE column and the mapping recorded in a returned
@@ -112,6 +91,16 @@ interface AnalyticsSqlConfig {
    * so the SQL path never touches the network.
    */
   fetch?: typeof globalThis.fetch;
+  /**
+   * Milliseconds before an in-flight query (the fetch AND its body read) is
+   * aborted and surfaced as an `AnalyticsSqlError` with status 504. Defaults
+   * to 60_000 — analytical scans legitimately run tens of seconds.
+   * `undefined` means the default, not unbounded.
+   *
+   * The deadline is carried by the request's `signal`, so a custom `fetch`
+   * (above) that ignores `signal` leaves the query unbounded.
+   */
+  timeoutMs?: number;
 }
 /**
  * One column descriptor in a SQL-API response's `meta` array: the column `name`
@@ -131,7 +120,14 @@ interface AnalyticsSqlResult {
   rowCount: number;
   rows: Record<string, unknown>[];
 }
-/** Thrown when the SQL API responds with a non-2xx status; a `LunoraError` subclass carrying the HTTP `status` + body for the caller to surface. */
+/**
+ * Thrown when the SQL API responds with a non-2xx status; a `LunoraError`
+ * subclass carrying the HTTP `status` + a capped body preview, with the full
+ * body on `cause`.
+ *
+ * The preview is capped because AE's SQL error text quotes the query back, and
+ * `ANALYTICS_SQL_ERROR` is non-internal — the message reaches the browser.
+ */
 declare class AnalyticsSqlError extends LunoraError {
   constructor(status: number, body: string);
 }
@@ -145,4 +141,4 @@ interface AnalyticsSqlClient {
  * normalises AE's `{ meta, data, rows }` body into {@link AnalyticsSqlResult}.
  */
 declare const createAnalyticsSqlClient: (config: AnalyticsSqlConfig) => AnalyticsSqlClient;
-export { type AnalyticsClient, type AnalyticsEngineDataPoint, type AnalyticsEngineDatasetLike, type AnalyticsSqlClient, type AnalyticsSqlColumnMeta, type AnalyticsSqlConfig, AnalyticsSqlError, type AnalyticsSqlResult, type TrackColumn, type TrackEvent, type TrackSchema, createAnalytics, createAnalyticsSqlClient };
+export { type AnalyticsClient, type AnalyticsSqlClient, type AnalyticsSqlColumnMeta, type AnalyticsSqlConfig, AnalyticsSqlError, type AnalyticsSqlResult, type TrackColumn, type TrackEvent, type TrackSchema, createAnalytics, createAnalyticsSqlClient };

package/dist/analytics/index.d.ts

@@ -1,3 +1,5 @@
+import { AnalyticsEngineDataPoint, AnalyticsEngineDatasetLike } from '@lunora/platform';
+export type { AnalyticsEngineDataPoint, AnalyticsEngineDatasetLike } from '@lunora/platform';
 import { LunoraError } from '@lunora/errors';
 /**
  * Structural types for the Analytics Engine write path.
@@ -8,29 +10,6 @@ import { LunoraError } from '@lunora/errors';
  * approach `@lunora/d1` takes with `D1DatabaseLike`
  * (`packages/d1/src/d1-client.ts`).
  */
-/**
- * One Analytics Engine data point, mirroring the positional shape
- * `writeDataPoint` accepts. AE stores up to 20 string `blobs`, up to 20 numeric
- * `doubles`, and exactly **one** `index` (the high-cardinality sampling key) per
- * data point — the SQL API later exposes them as `blob1..blob20`,
- * `double1..double20`, and `index1`.
- */
-interface AnalyticsEngineDataPoint {
-  /** String columns, mapped positionally to `blob1..blob20`. */
-  blobs?: (ArrayBuffer | null | string)[];
-  /** Numeric columns, mapped positionally to `double1..double20`. */
-  doubles?: number[];
-  /** Sampling key, exposed as `index1`. AE accepts at most one. */
-  indexes?: (ArrayBuffer | string)[];
-}
-/**
- * Minimal structural projection of workers-types' `AnalyticsEngineDataset`,
- * kept loose enough for a plain-object fake in unit tests. `writeDataPoint` is
- * fire-and-forget: it returns `void` and never throws on the hot path.
- */
-interface AnalyticsEngineDatasetLike {
-  writeDataPoint: (event: AnalyticsEngineDataPoint) => void;
-}
 /**
  * Named-field event handed to {@link AnalyticsClient.track}. Each field is
  * mapped to a positional AE column and the mapping recorded in a returned
@@ -112,6 +91,16 @@ interface AnalyticsSqlConfig {
    * so the SQL path never touches the network.
    */
   fetch?: typeof globalThis.fetch;
+  /**
+   * Milliseconds before an in-flight query (the fetch AND its body read) is
+   * aborted and surfaced as an `AnalyticsSqlError` with status 504. Defaults
+   * to 60_000 — analytical scans legitimately run tens of seconds.
+   * `undefined` means the default, not unbounded.
+   *
+   * The deadline is carried by the request's `signal`, so a custom `fetch`
+   * (above) that ignores `signal` leaves the query unbounded.
+   */
+  timeoutMs?: number;
 }
 /**
  * One column descriptor in a SQL-API response's `meta` array: the column `name`
@@ -131,7 +120,14 @@ interface AnalyticsSqlResult {
   rowCount: number;
   rows: Record<string, unknown>[];
 }
-/** Thrown when the SQL API responds with a non-2xx status; a `LunoraError` subclass carrying the HTTP `status` + body for the caller to surface. */
+/**
+ * Thrown when the SQL API responds with a non-2xx status; a `LunoraError`
+ * subclass carrying the HTTP `status` + a capped body preview, with the full
+ * body on `cause`.
+ *
+ * The preview is capped because AE's SQL error text quotes the query back, and
+ * `ANALYTICS_SQL_ERROR` is non-internal — the message reaches the browser.
+ */
 declare class AnalyticsSqlError extends LunoraError {
   constructor(status: number, body: string);
 }
@@ -145,4 +141,4 @@ interface AnalyticsSqlClient {
  * normalises AE's `{ meta, data, rows }` body into {@link AnalyticsSqlResult}.
  */
 declare const createAnalyticsSqlClient: (config: AnalyticsSqlConfig) => AnalyticsSqlClient;
-export { type AnalyticsClient, type AnalyticsEngineDataPoint, type AnalyticsEngineDatasetLike, type AnalyticsSqlClient, type AnalyticsSqlColumnMeta, type AnalyticsSqlConfig, AnalyticsSqlError, type AnalyticsSqlResult, type TrackColumn, type TrackEvent, type TrackSchema, createAnalytics, createAnalyticsSqlClient };
+export { type AnalyticsClient, type AnalyticsSqlClient, type AnalyticsSqlColumnMeta, type AnalyticsSqlConfig, AnalyticsSqlError, type AnalyticsSqlResult, type TrackColumn, type TrackEvent, type TrackSchema, createAnalytics, createAnalyticsSqlClient };

package/dist/analytics/index.mjs

@@ -1,2 +1 @@
-export { createAnalytics } from '../packem_shared/createAnalytics-CEEI69o9.mjs';
-export { AnalyticsSqlError, createAnalyticsSqlClient } from '../packem_shared/AnalyticsSqlError-C2nz3jpH.mjs';
+import{createAnalytics as e}from"../packem_shared/createAnalytics-BXTNc57d.mjs";import{AnalyticsSqlError as a,createAnalyticsSqlClient as c}from"../packem_shared/AnalyticsSqlError-CeQ3A5Eb.mjs";export{a as AnalyticsSqlError,e as createAnalytics,c as createAnalyticsSqlClient};

package/dist/images/index.d.mts

@@ -8,12 +8,11 @@
  * (`input(stream).transform(opts).output(opts)` + `info(stream)`), not the full
  * hosted-images CRUD surface.
  *
- * TODO(workers-types): the 2026-06-16 optimization features — the `aspect-crop`
- * / `scale-up` fit modes and the `upscale` param — are modeled here by hand
- * because `@cloudflare/workers-types` (through 4.20260616.1) does not type them
- * yet. Re-check on the next `@cloudflare/workers-types` bump: once `ImageTransform`
- * carries `fit: "aspect-crop" | "scale-up"` and `upscale`, drop our hand-rolled
- * additions and lean on the upstream type.
+ * TODO(workers-types): the `aspect-crop` fit mode is modeled here by hand because
+ * `@cloudflare/workers-types` still does not type it — checked at the pinned
+ * 5.20260811.1, whose `ImageTransform` now carries `fit: "scale-up"` and `upscale`.
+ * Re-check on the next bump: once `ImageTransform` also carries
+ * `fit: "aspect-crop"`, drop our hand-rolled addition and lean on the upstream type.
  */
 /**
  * Porter-Duff compositing operation controlling how an overlay is blended onto
@@ -27,37 +26,6 @@
  * - `lighter` — foreground and backdrop channels added (brightening).
  */
 type ImageCompositeMode = "atop" | "in" | "lighter" | "out" | "over" | "xor";
-/**
- * One overlay in a {@link TransformOptions.draw} list — the **URL-form** overlay
- * (the `cf.image.draw` / `/cdn-cgi/image` shape), where the overlay image is
- * referenced by absolute `url`. For the **binding** path use {@link ImageOverlay}
- * instead, which carries the overlay bytes as a stream.
- *
- * `width`/`height` accept either an integer (pixels) or a decimal in `(0, 1]`
- * interpreted as a fraction of the base image's corresponding dimension.
- */
-interface DrawOverlay {
-  /** Offset, in pixels, from the bottom edge. */
-  bottom?: number;
-  /** Blend mode for compositing this overlay onto the image. Default `over`. */
-  composite?: ImageCompositeMode;
-  /** Overlay height — pixels (integer) or a `0–1` fraction of the base height. */
-  height?: number;
-  /** Offset, in pixels, from the left edge. */
-  left?: number;
-  /** Overlay opacity, `0.0` (transparent) – `1.0` (opaque). */
-  opacity?: number;
-  /** Tile the overlay across the base image: `true`, or a single axis `"x"`/`"y"`. */
-  repeat?: "x" | "y" | boolean;
-  /** Offset, in pixels, from the right edge. */
-  right?: number;
-  /** Offset, in pixels, from the top edge. */
-  top?: number;
-  /** Absolute URL of the overlay image. */
-  url: string;
-  /** Overlay width — pixels (integer) or a `0–1` fraction of the base width. */
-  width?: number;
-}
 /**
  * Transform parameters threaded into `binding.input(stream).transform(...)`.
  * A structural subset of the real `ImageTransform`; the keys here are the
@@ -73,13 +41,6 @@ interface TransformOptions {
   brightness?: number;
   /** Contrast multiplier (1 = unchanged). */
   contrast?: number;
-  /**
-   * URL-form overlays composited over the result, in paint order (last entry on
-   * top). Consumed by the URL builders ({@link DrawOverlay} references each
-   * overlay by `url`); the binding path applies overlays via the `overlays`
-   * argument to `Images.transform` instead, so this key is ignored there.
-   */
-  draw?: DrawOverlay[];
   /**
    * Resize mode. Affects how `width`/`height` are interpreted.
    *
@@ -157,9 +118,9 @@ type ImageInfoLike = {
 };
 /**
  * Binding-side overlay options for `transformer.draw(image, options)` — the
- * blend/position/opacity knobs. Unlike {@link DrawOverlay} there is no `url`
- * (the overlay bytes are passed as the stream) and no `width`/`height` (the
- * overlay is pre-sized via its own transform); mirrors `ImageDrawOptions`.
+ * blend/position/opacity knobs. There is no `url` (the overlay bytes are passed
+ * as the stream) and no `width`/`height` (the overlay is pre-sized via its own
+ * transform); mirrors `ImageDrawOptions`.
  */
 interface ImageDrawOptions {
   /** Offset, in pixels, from the bottom edge. */
@@ -266,7 +227,7 @@ interface ImageDeliveryUrlOptions {
   baseUrl: string;
   /**
    * Hosted-Images image id. When set, the **delivery-variant** form is built
-   * (`<baseUrl>/<imageId>/<variant>`) and `transform`/`key` are ignored.
+   * (`<baseUrl>/<imageId>/<variant>`) and `transform`/`key` are ignored.
    */
   imageId?: string;
   /**
@@ -274,7 +235,7 @@ interface ImageDeliveryUrlOptions {
    * `/cdn-cgi/image/...` transform form. Ignored when `imageId` is set.
    */
   key?: string;
-  /** Transform options for the `/cdn-cgi/image/&lt;options>/&lt;source>` form. */
+  /** Transform options for the `/cdn-cgi/image/<options>/<source>` form. */
   transform?: TransformOptions;
   /** Named delivery variant (e.g. `public`, `thumbnail`). Used with `imageId`; default `public`. */
   variant?: string;
@@ -282,12 +243,27 @@ interface ImageDeliveryUrlOptions {
 /**
  * Build a Cloudflare Images delivery / transform URL.
  *
- * - With `imageId`: `&lt;baseUrl>/&lt;imageId>/&lt;variant>` (hosted delivery variant).
- * - With `key`: `&lt;baseUrl>/cdn-cgi/image/&lt;options>/&lt;source>` (URL-based transform).
+ * - With `imageId`: `<baseUrl>/<imageId>/<variant>` (hosted delivery variant).
+ * - With `key`: `<baseUrl>/cdn-cgi/image/<options>/<source>` (URL-based transform).
  *
  * Pure and deterministic — usable from any handler.
  */
 declare const buildImageDeliveryUrl: (options: ImageDeliveryUrlOptions) => string;
+/**
+ * Parse a verified transform string (the `t` query value handed back by
+ * {@link verifySignedImageUrl}) back into the {@link TransformOptions} it was
+ * serialized from, so the Worker can apply exactly the signed transform via
+ * `ctx.images.transform(...)` without hand-writing the inverse encoding.
+ *
+ * The exact inverse of `serializeTransform` above — the two MUST evolve
+ * together (the round-trip test in
+ * `__tests__/images/signed-delivery-url.test.ts` pins the pairing). Throws a
+ * `TypeError` on an unknown key or an uncoercible value: the input is meant to
+ * be a string whose HMAC already verified, so a parse failure means
+ * encoder/decoder drift in the library, never user input — fail loud rather
+ * than silently un-binding the transform the signature protects.
+ */
+declare const parseSignedTransform: (t: string) => TransformOptions;
 interface SignedImageUrlOptions {
   /** Delivery / Worker origin the signed URL points at (e.g. `https://cdn.acme.test`). */
   baseUrl: string;
@@ -324,6 +300,15 @@ interface VerifyImageResult {
   reason?: "bad_signature" | "expired" | "malformed";
   /** The raw, verified transform string (the `t` query value), when present. */
   transform?: string;
+  /**
+   * The verified transform decoded back into the options object to pass to
+   * `ctx.images.transform(...)` — {@link parseSignedTransform} applied to
+   * `transform`. Left `undefined` when `transform` is absent, and also when a
+   * genuinely signed transform carries a key this build does not know (an
+   * old URL minted before a key was renamed): the request stays `valid`, the
+   * raw `transform` is still returned, and the caller decides.
+   */
+  transformOptions?: TransformOptions;
   valid: boolean;
 }
 /**
@@ -335,4 +320,4 @@ interface VerifyImageResult {
 declare const verifySignedImageUrl: (input: string | URL, secret: string, options?: {
   expectedHost?: string;
 }) => Promise<VerifyImageResult>;
-export { type DrawOverlay, type ImageCompositeMode, type ImageDeliveryUrlOptions, type ImageDrawOptions, type ImageInfoLike, type ImageInput, type ImageOutputFormat, type ImageOverlay, type ImageTransformationResultLike, type ImageTransformerLike, type Images, type ImagesBindingLike, type LunoraImagesOptions, type OutputOptions, type R2ObjectBodyLike, type SignedImageUrlOptions, type TransformOptions, type VerifyImageResult, buildImageDeliveryUrl, buildSignedImageUrl, createImages, verifySignedImageUrl };
+export { type ImageCompositeMode, type ImageDeliveryUrlOptions, type ImageDrawOptions, type ImageInfoLike, type ImageInput, type ImageOutputFormat, type ImageOverlay, type ImageTransformationResultLike, type ImageTransformerLike, type Images, type ImagesBindingLike, type LunoraImagesOptions, type OutputOptions, type R2ObjectBodyLike, type SignedImageUrlOptions, type TransformOptions, type VerifyImageResult, buildImageDeliveryUrl, buildSignedImageUrl, createImages, parseSignedTransform, verifySignedImageUrl };

package/dist/images/index.d.ts

@@ -8,12 +8,11 @@
  * (`input(stream).transform(opts).output(opts)` + `info(stream)`), not the full
  * hosted-images CRUD surface.
  *
- * TODO(workers-types): the 2026-06-16 optimization features — the `aspect-crop`
- * / `scale-up` fit modes and the `upscale` param — are modeled here by hand
- * because `@cloudflare/workers-types` (through 4.20260616.1) does not type them
- * yet. Re-check on the next `@cloudflare/workers-types` bump: once `ImageTransform`
- * carries `fit: "aspect-crop" | "scale-up"` and `upscale`, drop our hand-rolled
- * additions and lean on the upstream type.
+ * TODO(workers-types): the `aspect-crop` fit mode is modeled here by hand because
+ * `@cloudflare/workers-types` still does not type it — checked at the pinned
+ * 5.20260811.1, whose `ImageTransform` now carries `fit: "scale-up"` and `upscale`.
+ * Re-check on the next bump: once `ImageTransform` also carries
+ * `fit: "aspect-crop"`, drop our hand-rolled addition and lean on the upstream type.
  */
 /**
  * Porter-Duff compositing operation controlling how an overlay is blended onto
@@ -27,37 +26,6 @@
  * - `lighter` — foreground and backdrop channels added (brightening).
  */
 type ImageCompositeMode = "atop" | "in" | "lighter" | "out" | "over" | "xor";
-/**
- * One overlay in a {@link TransformOptions.draw} list — the **URL-form** overlay
- * (the `cf.image.draw` / `/cdn-cgi/image` shape), where the overlay image is
- * referenced by absolute `url`. For the **binding** path use {@link ImageOverlay}
- * instead, which carries the overlay bytes as a stream.
- *
- * `width`/`height` accept either an integer (pixels) or a decimal in `(0, 1]`
- * interpreted as a fraction of the base image's corresponding dimension.
- */
-interface DrawOverlay {
-  /** Offset, in pixels, from the bottom edge. */
-  bottom?: number;
-  /** Blend mode for compositing this overlay onto the image. Default `over`. */
-  composite?: ImageCompositeMode;
-  /** Overlay height — pixels (integer) or a `0–1` fraction of the base height. */
-  height?: number;
-  /** Offset, in pixels, from the left edge. */
-  left?: number;
-  /** Overlay opacity, `0.0` (transparent) – `1.0` (opaque). */
-  opacity?: number;
-  /** Tile the overlay across the base image: `true`, or a single axis `"x"`/`"y"`. */
-  repeat?: "x" | "y" | boolean;
-  /** Offset, in pixels, from the right edge. */
-  right?: number;
-  /** Offset, in pixels, from the top edge. */
-  top?: number;
-  /** Absolute URL of the overlay image. */
-  url: string;
-  /** Overlay width — pixels (integer) or a `0–1` fraction of the base width. */
-  width?: number;
-}
 /**
  * Transform parameters threaded into `binding.input(stream).transform(...)`.
  * A structural subset of the real `ImageTransform`; the keys here are the
@@ -73,13 +41,6 @@ interface TransformOptions {
   brightness?: number;
   /** Contrast multiplier (1 = unchanged). */
   contrast?: number;
-  /**
-   * URL-form overlays composited over the result, in paint order (last entry on
-   * top). Consumed by the URL builders ({@link DrawOverlay} references each
-   * overlay by `url`); the binding path applies overlays via the `overlays`
-   * argument to `Images.transform` instead, so this key is ignored there.
-   */
-  draw?: DrawOverlay[];
   /**
    * Resize mode. Affects how `width`/`height` are interpreted.
    *
@@ -157,9 +118,9 @@ type ImageInfoLike = {
 };
 /**
  * Binding-side overlay options for `transformer.draw(image, options)` — the
- * blend/position/opacity knobs. Unlike {@link DrawOverlay} there is no `url`
- * (the overlay bytes are passed as the stream) and no `width`/`height` (the
- * overlay is pre-sized via its own transform); mirrors `ImageDrawOptions`.
+ * blend/position/opacity knobs. There is no `url` (the overlay bytes are passed
+ * as the stream) and no `width`/`height` (the overlay is pre-sized via its own
+ * transform); mirrors `ImageDrawOptions`.
  */
 interface ImageDrawOptions {
   /** Offset, in pixels, from the bottom edge. */
@@ -266,7 +227,7 @@ interface ImageDeliveryUrlOptions {
   baseUrl: string;
   /**
    * Hosted-Images image id. When set, the **delivery-variant** form is built
-   * (`<baseUrl>/<imageId>/<variant>`) and `transform`/`key` are ignored.
+   * (`<baseUrl>/<imageId>/<variant>`) and `transform`/`key` are ignored.
    */
   imageId?: string;
   /**
@@ -274,7 +235,7 @@ interface ImageDeliveryUrlOptions {
    * `/cdn-cgi/image/...` transform form. Ignored when `imageId` is set.
    */
   key?: string;
-  /** Transform options for the `/cdn-cgi/image/&lt;options>/&lt;source>` form. */
+  /** Transform options for the `/cdn-cgi/image/<options>/<source>` form. */
   transform?: TransformOptions;
   /** Named delivery variant (e.g. `public`, `thumbnail`). Used with `imageId`; default `public`. */
   variant?: string;
@@ -282,12 +243,27 @@ interface ImageDeliveryUrlOptions {
 /**
  * Build a Cloudflare Images delivery / transform URL.
  *
- * - With `imageId`: `&lt;baseUrl>/&lt;imageId>/&lt;variant>` (hosted delivery variant).
- * - With `key`: `&lt;baseUrl>/cdn-cgi/image/&lt;options>/&lt;source>` (URL-based transform).
+ * - With `imageId`: `<baseUrl>/<imageId>/<variant>` (hosted delivery variant).
+ * - With `key`: `<baseUrl>/cdn-cgi/image/<options>/<source>` (URL-based transform).
  *
  * Pure and deterministic — usable from any handler.
  */
 declare const buildImageDeliveryUrl: (options: ImageDeliveryUrlOptions) => string;
+/**
+ * Parse a verified transform string (the `t` query value handed back by
+ * {@link verifySignedImageUrl}) back into the {@link TransformOptions} it was
+ * serialized from, so the Worker can apply exactly the signed transform via
+ * `ctx.images.transform(...)` without hand-writing the inverse encoding.
+ *
+ * The exact inverse of `serializeTransform` above — the two MUST evolve
+ * together (the round-trip test in
+ * `__tests__/images/signed-delivery-url.test.ts` pins the pairing). Throws a
+ * `TypeError` on an unknown key or an uncoercible value: the input is meant to
+ * be a string whose HMAC already verified, so a parse failure means
+ * encoder/decoder drift in the library, never user input — fail loud rather
+ * than silently un-binding the transform the signature protects.
+ */
+declare const parseSignedTransform: (t: string) => TransformOptions;
 interface SignedImageUrlOptions {
   /** Delivery / Worker origin the signed URL points at (e.g. `https://cdn.acme.test`). */
   baseUrl: string;
@@ -324,6 +300,15 @@ interface VerifyImageResult {
   reason?: "bad_signature" | "expired" | "malformed";
   /** The raw, verified transform string (the `t` query value), when present. */
   transform?: string;
+  /**
+   * The verified transform decoded back into the options object to pass to
+   * `ctx.images.transform(...)` — {@link parseSignedTransform} applied to
+   * `transform`. Left `undefined` when `transform` is absent, and also when a
+   * genuinely signed transform carries a key this build does not know (an
+   * old URL minted before a key was renamed): the request stays `valid`, the
+   * raw `transform` is still returned, and the caller decides.
+   */
+  transformOptions?: TransformOptions;
   valid: boolean;
 }
 /**
@@ -335,4 +320,4 @@ interface VerifyImageResult {
 declare const verifySignedImageUrl: (input: string | URL, secret: string, options?: {
   expectedHost?: string;
 }) => Promise<VerifyImageResult>;
-export { type DrawOverlay, type ImageCompositeMode, type ImageDeliveryUrlOptions, type ImageDrawOptions, type ImageInfoLike, type ImageInput, type ImageOutputFormat, type ImageOverlay, type ImageTransformationResultLike, type ImageTransformerLike, type Images, type ImagesBindingLike, type LunoraImagesOptions, type OutputOptions, type R2ObjectBodyLike, type SignedImageUrlOptions, type TransformOptions, type VerifyImageResult, buildImageDeliveryUrl, buildSignedImageUrl, createImages, verifySignedImageUrl };
+export { type ImageCompositeMode, type ImageDeliveryUrlOptions, type ImageDrawOptions, type ImageInfoLike, type ImageInput, type ImageOutputFormat, type ImageOverlay, type ImageTransformationResultLike, type ImageTransformerLike, type Images, type ImagesBindingLike, type LunoraImagesOptions, type OutputOptions, type R2ObjectBodyLike, type SignedImageUrlOptions, type TransformOptions, type VerifyImageResult, buildImageDeliveryUrl, buildSignedImageUrl, createImages, parseSignedTransform, verifySignedImageUrl };

package/dist/images/index.mjs

@@ -1,3 +1 @@
-export { createImages } from '../packem_shared/createImages-BzRnsz3H.mjs';
-export { buildImageDeliveryUrl } from '../packem_shared/buildImageDeliveryUrl-qZ7XbqTL.mjs';
-export { buildSignedImageUrl, verifySignedImageUrl } from '../packem_shared/buildSignedImageUrl-DNUFfyGP.mjs';
+import{createImages as m}from"../packem_shared/createImages-D7JExfqF.mjs";import{buildImageDeliveryUrl as g}from"../packem_shared/buildImageDeliveryUrl-Brqs-dcZ.mjs";import{buildSignedImageUrl as o,parseSignedTransform as l,verifySignedImageUrl as d}from"../packem_shared/buildSignedImageUrl-BV-iSJKA.mjs";export{g as buildImageDeliveryUrl,o as buildSignedImageUrl,m as createImages,l as parseSignedTransform,d as verifySignedImageUrl};

package/dist/kv/index.d.mts

@@ -1,82 +1,5 @@
-/**
- * The value types Workers KV can store / return. Mirrors Cloudflare's
- * `KVNamespace` `get`/`put` body unions; declared here so the package stays
- * runtime-agnostic and the `*Like` interfaces don't pull in
- * `@cloudflare/workers-types` at runtime.
- */
-type KvValue = ReadableStream | ArrayBuffer | ArrayBufferView | string;
-/** How a raw KV read should decode the stored value. Mirrors KV's `type` option. */
-type KvValueType = "text" | "json" | "arrayBuffer" | "stream";
-/**
- * Per-read options forwarded to the binding. `cacheTtl` is KV's edge-cache TTL
- * (seconds, min 60); `type` selects the decode mode for {@link Kv.getRaw}.
- */
-interface KvGetOptions {
-  /** KV edge-cache TTL in seconds (minimum 60). Forwarded verbatim. */
-  cacheTtl?: number;
-  /** Decode mode for a raw read. {@link Kv.get} always uses `"json"`. */
-  type?: KvValueType;
-}
-/**
- * Minimal projection of Cloudflare's `KVNamespace`. Declared structurally so
- * unit tests can pass a plain `Map`-backed double; the real binding satisfies
- * the same shape. Mirrors `R2BucketLike` in `@lunora/storage`.
- */
-interface KVNamespaceLike {
-  /** Delete a key. No-op if the key is absent. */
-  delete: (key: string) => Promise<void>;
-  /**
-   * Read a value. The real binding overloads on `options.type`; declared here
-   * as the broad union so a structural double need only return the value (or
-   * `null` when absent).
-   */
-  get: (key: string, options?: KvGetOptions | KvValueType) => Promise<unknown>;
-  /**
-   * Read a value together with its associated metadata. Returns
-   * `{ value: null, metadata: null }` when the key is absent.
-   */
-  getWithMetadata: (key: string, options?: KvGetOptions | KvValueType) => Promise<{
-    metadata: unknown;
-    value: unknown;
-  }>;
-  /** List keys, optionally filtered by `prefix` and paginated via `cursor`. */
-  list: (options?: {
-    cursor?: string;
-    limit?: number;
-    prefix?: string;
-  }) => Promise<KvNamespaceListResult>;
-  /** Write a value, optionally with TTL/expiration and metadata. */
-  put: (key: string, value: KvValue, options?: KvNamespacePutOptions) => Promise<void>;
-}
-/** The raw put options the KV binding accepts (mirrors `KVNamespacePutOptions`). */
-interface KvNamespacePutOptions {
-  /** Absolute expiration as a Unix timestamp (seconds). Mutually exclusive with `expirationTtl`. */
-  expiration?: number;
-  /** Relative expiration in seconds from now (minimum 60). Mutually exclusive with `expiration`. */
-  expirationTtl?: number;
-  /** Arbitrary JSON metadata stored alongside the value, returned by `getWithMetadata`/`list`. */
-  metadata?: unknown;
-}
-/** One key entry as returned by the KV binding's `list`. */
-interface KvListKey<Metadata = unknown> {
-  /** Absolute expiration (Unix seconds), when the key has one. */
-  expiration?: number;
-  /** The key's metadata, when set at write time. */
-  metadata?: Metadata;
-  /** The key name. */
-  name: string;
-}
-/** The raw `list` result shape returned by the KV binding. */
-type KvNamespaceListResult<Metadata = unknown> = {
-  cacheStatus?: string | null;
-  cursor: string;
-  keys: KvListKey<Metadata>[];
-  list_complete: false;
-} | {
-  cacheStatus?: string | null;
-  keys: KvListKey<Metadata>[];
-  list_complete: true;
-};
+import { KvGetOptions, KvListKey, KVNamespaceLike } from '@lunora/platform';
+export type { KVNamespaceLike, KvGetOptions, KvListKey, KvNamespaceListResult, KvNamespacePutOptions, KvValue, KvValueType } from '@lunora/platform';
 /** Construction options for the `createKv` factory. */
 interface LunoraKvOptions {
   /**
@@ -86,7 +9,7 @@ interface LunoraKvOptions {
    * `..` or NUL in the prefix is rejected.
    */
   keyPrefix?: string;
-  /** The bound KV namespace (`env.&lt;BINDING>`). */
+  /** The bound KV namespace (`env.<BINDING>`). */
   namespace: KVNamespaceLike;
 }
 /** Options for {@link Kv.put}. JSON-stringifies the value unless `raw` is set. */
@@ -268,4 +191,4 @@ declare const createKvIntrospector: (options: CreateKvIntrospectorOptions) => Kv
  * ```
  */
 declare const createKvIntrospectorFromEnv: (env: unknown) => KvIntrospectorLike;
-export { type CreateKvIntrospectorOptions, type KVNamespaceLike, type Kv, type KvGetOptions, type KvIntrospectorLike, type KvListKey, type KvListOptions, type KvListResult, type KvNamespaceListResult, type KvNamespacePutOptions, type KvPutOptions, type KvValue, type KvValueType, type KvValueWithMetadata, type LunoraKvOptions, createKv, createKvIntrospector, createKvIntrospectorFromEnv, scopeKey };
+export { type CreateKvIntrospectorOptions, type Kv, type KvIntrospectorLike, type KvListOptions, type KvListResult, type KvPutOptions, type KvValueWithMetadata, type LunoraKvOptions, createKv, createKvIntrospector, createKvIntrospectorFromEnv, scopeKey };