@lunora/d1 1.0.0-alpha.4 → 1.0.0-alpha.40

package/dist/packem_shared/{facetGlobalColumn-C6u_WMIY.mjs → facetGlobalColumn-DnglIe4P.mjs}

@@ -1,4 +1,6 @@
+import { LunoraError } from '@lunora/errors';
 import { runD1GlobalTableMigrations } from './createD1CtxDb-BMR8J0dT.mjs';
+import { quoteIdentifier } from './quoteIdentifier-B-ZeSe1V.mjs';
 import { decodeGlobalRow } from '@lunora/sql-store';
 
 const ensureGlobalTables = (exec, schema) => runD1GlobalTableMigrations(exec, schema);
@@ -6,7 +8,6 @@ const DEFAULT_PAGE_SIZE = 50;
 const MAX_PAGE_SIZE = 500;
 const DEFAULT_FACET_LIMIT = 30;
 const MAX_FACET_LIMIT = 200;
-const quoteIdentifier = (name) => `"${name.replaceAll('"', '""')}"`;
 const clamp = (value, min, max) => Math.min(Math.max(value, min), max);
 const INTERNAL_TABLE = /^sqlite_|^_cf_|^d1_|^__cdc|__agg_|__rank_|__fts_/u;
 const isInternalTable = (name) => INTERNAL_TABLE.test(name);
@@ -28,7 +29,10 @@ const buildEqPredicate = (schema, table, displayColumns, filters) => {
   const params = [];
   for (const filter of filters) {
     if (!displayColumns.includes(filter.column)) {
-      throw Object.assign(new Error(`unknown column: ${filter.column}`), { code: "UNKNOWN_COLUMN", name: "LunoraError", status: 404 });
+      throw new LunoraError("UNKNOWN_COLUMN", `unknown column: ${filter.column}`, { status: 404 });
+    }
+    if (schema.tables[table] === void 0 && SENSITIVE_COLUMN.test(filter.column)) {
+      throw new LunoraError("FORBIDDEN", `cannot filter on a redacted column: ${filter.column}`, { status: 403 });
     }
     const quoted = quoteIdentifier(physicalColumnName(schema, table, filter.column));
     if (filter.value === null || filter.value === void 0) {
@@ -89,7 +93,7 @@ const readGlobalTablePage = async (exec, schema, options) => {
   await ensureGlobalTables(exec, schema);
   const tableNames = await listTableNames(exec);
   if (!tableNames.includes(table)) {
-    throw Object.assign(new Error(`unknown table: ${table}`), { code: "UNKNOWN_TABLE", name: "LunoraError", status: 404 });
+    throw new LunoraError("UNKNOWN_TABLE", `unknown table: ${table}`, { status: 404 });
   }
   const limit = clamp(Math.trunc(options.limit ?? DEFAULT_PAGE_SIZE), 1, MAX_PAGE_SIZE);
   const offset = Math.max(0, Math.trunc(options.offset ?? 0));
@@ -109,11 +113,11 @@ const facetGlobalColumn = async (exec, schema, options) => {
   await ensureGlobalTables(exec, schema);
   const tableNames = await listTableNames(exec);
   if (!tableNames.includes(table)) {
-    throw Object.assign(new Error(`unknown table: ${table}`), { code: "UNKNOWN_TABLE", name: "LunoraError", status: 404 });
+    throw new LunoraError("UNKNOWN_TABLE", `unknown table: ${table}`, { status: 404 });
   }
   const columns = await resolveColumns(exec, schema, table);
   if (!columns.includes(column)) {
-    throw Object.assign(new Error(`unknown column: ${column}`), { code: "UNKNOWN_COLUMN", name: "LunoraError", status: 404 });
+    throw new LunoraError("UNKNOWN_COLUMN", `unknown column: ${column}`, { status: 404 });
   }
   const quoted = quoteIdentifier(table);
   const predicate = buildEqPredicate(schema, table, columns, options.filters);

package/dist/packem_shared/quoteIdentifier-B-ZeSe1V.mjs

@@ -0,0 +1,3 @@
+const quoteIdentifier = (name) => `"${name.replaceAll('"', '""')}"`;
+
+export { quoteIdentifier };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/d1",
-  "version": "1.0.0-alpha.4",
+  "version": "1.0.0-alpha.40",
   "description": "D1 adapter for Lunora .global() tables, wrapping the Sessions API for read-your-writes",
   "keywords": [
     "cloudflare",
@@ -25,7 +25,7 @@
     "directory": "packages/d1"
   },
   "files": [
-    "dist",
+    "./dist",
     "README.md",
     "LICENSE.md",
     "__assets__"
@@ -50,8 +50,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/do": "1.0.0-alpha.4",
-    "@lunora/sql-store": "1.0.0-alpha.4",
+    "@lunora/do": "1.0.0-alpha.44",
+    "@lunora/errors": "1.0.0-alpha.8",
+    "@lunora/sql-store": "1.0.0-alpha.41",
     "drizzle-orm": "^0.45.2"
   },
   "engines": {