@lunora/do 1.0.0-alpha.20 → 1.0.0-alpha.22

package/dist/packem_shared/{NotUniqueError-Do5h_jiW.mjs → NotUniqueError-D1U5SBFR.mjs}

@@ -1,9 +1,10 @@
+import { LunoraError } from '@lunora/errors';
 import { sql } from 'drizzle-orm';
-import { matchesStaticWhere, aggregateSqlFunction, normalizeCountArgument, throwingScheduler } from './AGGREGATE_SQL_FUNCTION-CFk6adSu.mjs';
+import { matchesStaticWhere, aggregateSqlFunction, normalizeCountArgument, throwingScheduler } from './AGGREGATE_SQL_FUNCTION-CQsu2Xga.mjs';
 import { encodeAggregateKey, foldAggregateTally, aggregateTableName, coerceAggregateNumber, readAggregateValue } from './aggregateTableName-CxNqY1Sl.mjs';
-import { mergeWhere, CountRlsUnsupportedError, selectIndexForGroupBy, selectIndexForCount, selectIndexForAggregate } from './CountRlsUnsupportedError-28ZvvwKS.mjs';
-import { appendCdcChange } from './CDC_LOG_TABLE-DSycmnDf.mjs';
-export { CDC_LOG_TABLE, applyCdcChanges, bumpCdcEpoch, minCdcSeq, readCdcChanges, readCdcCursor, readCdcEpoch, trimCdcChanges } from './CDC_LOG_TABLE-DSycmnDf.mjs';
+import { mergeWhere, CountRlsUnsupportedError, selectIndexForGroupBy, selectIndexForCount, selectIndexForAggregate } from './CountRlsUnsupportedError-BGxj0pgS.mjs';
+import { appendCdcChange } from './CDC_LOG_TABLE-DZSVKRr7.mjs';
+export { CDC_LOG_TABLE, applyCdcChanges, bumpCdcEpoch, minCdcSeq, readCdcChanges, readCdcCursor, readCdcEpoch, trimCdcChanges } from './CDC_LOG_TABLE-DZSVKRr7.mjs';
 import { r as runDrizzle } from './do-exec-5eQy5cEi.mjs';
 import { i as isFtsAvailable, D as DOC_COLUMN$1, r as rowToDocument, A as AGG_KEY, a as AGG_VALUE, b as AGG_COUNT, d as aggUpsertSql, j as jsonPathSql, q as quoteIdentifier, t as tableColumns, e as qualifiedJsonPathSql } from './do-sql-BCHCWtrD.mjs';
 import { param } from './renderSql-D6eUcn2N.mjs';
@@ -12,18 +13,18 @@ import { stringifySearchText, ftsTableName, tokenizeSearch, buildFtsMatch, score
 import { s as serializeSqlValue } from './serialize-sql-BlRUoiQe.mjs';
 import { SCAN_DEP } from './SCAN_DEP-DLJF8dsj.mjs';
 import { decodeCursor, normalizeOrderKeys, buildSeekWhere, applySelect, encodeCursor, softDeleteScope, buildSeekBeforeWhere } from './applySelect-BvZdFUBT.mjs';
-import NotFoundError from './NotFoundError-CMuMZt81.mjs';
-import { assertFlatPredicate, resolveRelationPredicates } from './DEFAULT_MAX_RELATION_KEYS-DU-Y4-LJ.mjs';
-import { runRowValidators, resolveWith, applyOnDelete, fanOutScalarCounts } from './applyOnDelete-BQ-8ZlZ1.mjs';
-import { guardWriter } from './RLS_UNWRAP_SYMBOL-EtGQdC9d.mjs';
-import { createSystemReader } from './createSystemReader-8CzSZP9V.mjs';
-import { ConflictError } from './ConflictError-C0STs6bU.mjs';
+import NotFoundError from './NotFoundError-C70b9hLw.mjs';
+import { assertFlatPredicate, resolveRelationPredicates } from './DEFAULT_MAX_RELATION_KEYS-CjM9Y1_G.mjs';
+import { runRowValidators, resolveWith, applyOnDelete, fanOutScalarCounts } from './applyOnDelete-CAwZfp-5.mjs';
+import { guardWriter } from './RLS_UNWRAP_SYMBOL-DnjkqVgY.mjs';
+import { createSystemReader } from './createSystemReader-D12eNH13.mjs';
+import { ConflictError } from './ConflictError-CLoq37xH.mjs';
 import { runTriggers } from './hasTrigger-5N6_Fx0A.mjs';
-import { compileWhereSql } from './compileWhereSql-MW_Lk8nJ.mjs';
-export { backfillAggregateIndexes, backfillRankIndexes } from './backfillAggregateIndexes-BZsOqDXP.mjs';
+import { compileWhereSql } from './compileWhereSql-DE6yfRcQ.mjs';
+export { backfillAggregateIndexes, backfillRankIndexes } from './backfillAggregateIndexes-DDoT-UUI.mjs';
 export { C as CLIENT_WATERMARK_TABLE, G as GLOBAL_SHAPE_SNAPSHOT_TABLE, I as IDEMPOTENCY_TABLE, c as advanceClientWatermark, d as deleteGlobalShapeSnapshot, e as deleteGlobalShapeSnapshotsForConnection, m as migrateClientWatermark, b as migrateGlobalShapeSnapshot, r as readClientWatermark, f as readGlobalShapeSnapshot, g as readIdempotent, t as trimIdempotent, w as writeGlobalShapeSnapshot, h as writeIdempotent } from './ctx-db-idempotency-BdcNpvY4.mjs';
-export { runShardMigrations } from './runShardMigrations-nIwoQeOK.mjs';
-export { a as selectShapeMemberIds, s as selectShapeRows } from './ctx-db-shapes-0RaIOy7J.mjs';
+export { runShardMigrations } from './runShardMigrations-DeZr0KZp.mjs';
+export { a as selectShapeMemberIds, s as selectShapeRows } from './ctx-db-shapes-Cz9dHyh1.mjs';
 
 const rankIndexFieldsUnchanged = (index, previous, next) => {
   const fields = [...index.partitionBy ?? [], ...index.sortBy.map((key) => key.field), ...index.where ? Object.keys(index.where) : []];
@@ -422,11 +423,11 @@ const computeRankPage = (deps, tableName, indexName, rankPageOptions) => {
   const { assertRankPartitionLocal, ensureRankBackfilled, onRead, schema } = deps;
   const definition = schema.tables[tableName];
   if (!definition) {
-    throw new Error(`unknown table: ${tableName}`);
+    throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
   }
   const index = definition.rankIndexes?.find((i) => i.name === indexName);
   if (!index) {
-    throw new Error(`unknown rankIndex "${indexName}" on table "${tableName}"`);
+    throw new LunoraError("INTERNAL", `unknown rankIndex "${indexName}" on table "${tableName}"`);
   }
   assertRankPartitionLocal(tableName, definition, index);
   onRead(tableName, SCAN_DEP);
@@ -474,7 +475,7 @@ const computeRankPage = (deps, tableName, indexName, rankPageOptions) => {
 const CLIENT_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;
 const assertValidClientId = (clientId) => {
   if (!CLIENT_ID_PATTERN.test(clientId)) {
-    throw new Error(`invalid clientId ${JSON.stringify(clientId)}: a client-supplied row id must be a UUID`);
+    throw new LunoraError("INTERNAL", `invalid clientId ${JSON.stringify(clientId)}: a client-supplied row id must be a UUID`);
   }
 };
 const MAX_TRIGGER_DEPTH = 50;
@@ -518,14 +519,17 @@ const createSearchBuilder = (search, tableName) => {
   const builder = {
     eq: (field, value) => {
       if (!search.definition.filterFields?.includes(field)) {
-        throw new Error(`field "${field}" is not a filter field of search index "${search.indexName}" on table "${tableName}"`);
+        throw new LunoraError("INTERNAL", `field "${field}" is not a filter field of search index "${search.indexName}" on table "${tableName}"`);
       }
       search.filters.push({ field, value });
       return builder;
     },
     search: (field, query) => {
       if (field !== search.definition.field) {
-        throw new Error(`search index "${search.indexName}" on table "${tableName}" indexes "${search.definition.field}", not "${field}"`);
+        throw new LunoraError(
+          "INTERNAL",
+          `search index "${search.indexName}" on table "${tableName}" indexes "${search.definition.field}", not "${field}"`
+        );
       }
       const stage = search;
       stage.field = field;
@@ -706,19 +710,16 @@ const paginateStage = (sql$1, tableName, stage, options, scopeCondition) => {
     page
   };
 };
-class NotUniqueError extends Error {
-  code = "NOT_UNIQUE";
-  status = 400;
+class NotUniqueError extends LunoraError {
   constructor(message = "unique() found more than one matching document") {
-    super(message);
-    this.name = "NotUniqueError";
+    super("NOT_UNIQUE", message, { name: "NotUniqueError" });
   }
 }
 const ID_WHITESPACE_PATTERN = /\s/u;
 const NUL_CHARACTER = String.fromCodePoint(0);
 const normalizeIdStructurally = (schema, tableName, id) => {
   if (!schema.tables[tableName]) {
-    throw new Error(`unknown table: ${tableName}`);
+    throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
   }
   if (typeof id !== "string" || id.length === 0 || ID_WHITESPACE_PATTERN.test(id) || id.includes(NUL_CHARACTER)) {
     return null;
@@ -728,7 +729,7 @@ const normalizeIdStructurally = (schema, tableName, id) => {
 const buildReader = (sql$1, schema, tableName, onIndexUse = () => void 0) => {
   const tableDefinition = schema.tables[tableName];
   if (!tableDefinition) {
-    throw new Error(`unknown table: ${tableName}`);
+    throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
   }
   const scopeWhere = softDeleteScope(tableDefinition.softDeleteMode, void 0);
   const scopeCondition = scopeWhere ? compileWhereSql(scopeWhere, doWhereSqlStrategy) : void 0;
@@ -742,7 +743,7 @@ const buildReader = (sql$1, schema, tableName, onIndexUse = () => void 0) => {
   const runSearchFetch = (limit) => {
     const { search } = stage;
     if (!search) {
-      throw new Error("runSearchFetch called without a staged search");
+      throw new LunoraError("INTERNAL", "runSearchFetch called without a staged search");
     }
     const filtered = stage.inMemoryFilters.length > 0;
     const engineLimit = filtered ? void 0 : limit;
@@ -825,7 +826,7 @@ const buildReader = (sql$1, schema, tableName, onIndexUse = () => void 0) => {
     // eslint-disable-next-line @typescript-eslint/require-await -- TableReaderLike returns Promises (the D1 twin awaits real I/O); the DO impl is synchronous over local SQLite
     async paginate(options) {
       if (stage.search) {
-        throw new Error("pagination is not supported on search queries; use .take(n) or .collect()");
+        throw new LunoraError("INTERNAL", "pagination is not supported on search queries; use .take(n) or .collect()");
       }
       return paginateStage(sql$1, tableName, stage, options, scopeCondition);
     },
@@ -844,7 +845,7 @@ const buildReader = (sql$1, schema, tableName, onIndexUse = () => void 0) => {
     withIndex(indexName, range) {
       const definition = tableDefinition.indexes.find((index) => index.name === indexName);
       if (!definition) {
-        throw new Error(`unknown index "${indexName}" on table "${tableName}"`);
+        throw new LunoraError("INTERNAL", `unknown index "${indexName}" on table "${tableName}"`);
       }
       onIndexUse(tableName, indexName, "index");
       stage.indexName = indexName;
@@ -857,7 +858,7 @@ const buildReader = (sql$1, schema, tableName, onIndexUse = () => void 0) => {
     withSearchIndex(indexName, search) {
       const definition = (tableDefinition.searchIndexes ?? []).find((index) => index.name === indexName);
       if (!definition) {
-        throw new Error(`unknown search index "${indexName}" on table "${tableName}"`);
+        throw new LunoraError("INTERNAL", `unknown search index "${indexName}" on table "${tableName}"`);
       }
       onIndexUse(tableName, indexName, "search");
       const searchStage = {
@@ -871,7 +872,7 @@ const buildReader = (sql$1, schema, tableName, onIndexUse = () => void 0) => {
       stage.search = searchStage;
       search(createSearchBuilder(searchStage, tableName));
       if (!searchStage.hasQuery) {
-        throw new Error(`search index "${indexName}" on table "${tableName}" requires a .search(field, query) call`);
+        throw new LunoraError("INTERNAL", `search index "${indexName}" on table "${tableName}" requires a .search(field, query) call`);
       }
       return reader;
     }
@@ -913,7 +914,10 @@ const applyOnUpdate = (definition, provided, target, auth) => {
 const assertNoExplicitUndefined = (op, document) => {
   for (const field of Object.keys(document)) {
     if (document[field] === void 0) {
-      throw new Error(`Cannot ${op} field '${field}' to undefined — use null to clear a nullable field, or omit the key to leave it unchanged.`);
+      throw new LunoraError(
+        "INTERNAL",
+        `Cannot ${op} field '${field}' to undefined — use null to clear a nullable field, or omit the key to leave it unchanged.`
+      );
     }
   }
 };
@@ -993,7 +997,10 @@ const createShardCtxDb = (options) => {
   const routeBackend = (table, op) => {
     if (isGlobalTable(table)) {
       if (!globalDb) {
-        throw new Error(`cross-backend ${op} for global table '${table}' requires a globalDb writer — pass one to createShardCtxDb({ globalDb })`);
+        throw new LunoraError(
+          "INTERNAL",
+          `cross-backend ${op} for global table '${table}' requires a globalDb writer — pass one to createShardCtxDb({ globalDb })`
+        );
       }
       return globalDb;
     }
@@ -1005,7 +1012,7 @@ const createShardCtxDb = (options) => {
       return void 0;
     }
     if (!globalDb) {
-      throw new Error(`${op} on global table '${tableName}' requires a globalDb writer — pass one to createShardCtxDb({ globalDb })`);
+      throw new LunoraError("INTERNAL", `${op} on global table '${tableName}' requires a globalDb writer — pass one to createShardCtxDb({ globalDb })`);
     }
     return globalDb;
   };
@@ -1036,7 +1043,7 @@ const createShardCtxDb = (options) => {
     }
     const definition = schema.tables[relationTable];
     if (!definition) {
-      throw new Error(`unknown table: ${relationTable}`);
+      throw new LunoraError("INTERNAL", `unknown table: ${relationTable}`);
     }
     onRead(relationTable, SCAN_DEP);
     const softScope = softDeleteScope(definition.softDeleteMode, void 0);
@@ -1153,7 +1160,7 @@ const createShardCtxDb = (options) => {
       }
       const definition = schema.tables[tableName];
       if (!definition) {
-        throw new Error(`unknown table: ${tableName}`);
+        throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
       }
       aggregateSqlFunction(aggOptions.op);
       if (aggOptions.op === "count") {
@@ -1165,7 +1172,7 @@ const createShardCtxDb = (options) => {
         });
       }
       if (!aggOptions.field) {
-        throw new Error(`aggregate(${tableName}, { op: "${aggOptions.op}" }): "field" is required for non-count reducers`);
+        throw new LunoraError("INTERNAL", `aggregate(${tableName}, { op: "${aggOptions.op}" }): "field" is required for non-count reducers`);
       }
       onRead(tableName, SCAN_DEP);
       const aggScope = softDeleteScope(definition.softDeleteMode, void 0);
@@ -1207,7 +1214,7 @@ const createShardCtxDb = (options) => {
       }
       const definition = schema.tables[tableName];
       if (!definition) {
-        throw new Error(`unknown table: ${tableName}`);
+        throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
       }
       const countOptions = normalizeCountArgument(whereOrOptions);
       if (countOptions.restrictsCounts) {
@@ -1338,7 +1345,7 @@ const createShardCtxDb = (options) => {
       }
       const findManyDefinition = schema.tables[tableName];
       if (!findManyDefinition) {
-        throw new Error(`unknown table: ${tableName}`);
+        throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
       }
       const isFullScan = !args.where && !args.baseWhere;
       if (isFullScan) {
@@ -1451,13 +1458,13 @@ const createShardCtxDb = (options) => {
       }
       const definition = schema.tables[tableName];
       if (!definition) {
-        throw new Error(`unknown table: ${tableName}`);
+        throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
       }
       onRead(tableName, SCAN_DEP);
       const agg = groupOptions.agg ?? { op: "count" };
       aggregateSqlFunction(agg.op);
       if (agg.op !== "count" && !agg.field) {
-        throw new Error(`groupBy(${tableName}, { agg: { op: "${agg.op}" } }): "field" is required for non-count reducers`);
+        throw new LunoraError("INTERNAL", `groupBy(${tableName}, { agg: { op: "${agg.op}" } }): "field" is required for non-count reducers`);
       }
       const groupScope = softDeleteScope(definition.softDeleteMode, void 0);
       const effective = mergeWhere(mergeWhere(groupOptions.baseWhere, groupOptions.where), groupScope);
@@ -1502,7 +1509,7 @@ const createShardCtxDb = (options) => {
       } else {
         const { field } = agg;
         if (field === void 0) {
-          throw new Error(`groupBy(${tableName}, { agg: { op: "${agg.op}" } }): "field" is required for non-count reducers`);
+          throw new LunoraError("INTERNAL", `groupBy(${tableName}, { agg: { op: "${agg.op}" } }): "field" is required for non-count reducers`);
         }
         select.push(sql`${sql.raw(aggregateSqlFunction(agg.op))}(${jsonPathSql(field)}) AS value`);
       }
@@ -1535,7 +1542,7 @@ const createShardCtxDb = (options) => {
       }
       const definition = schema.tables[tableName];
       if (!definition) {
-        throw new Error(`unknown table: ${tableName}`);
+        throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
       }
       const withDefaults = applyInsertDefaults(definition, document, auth);
       runRowValidators(definition, withDefaults);
@@ -1584,7 +1591,7 @@ const createShardCtxDb = (options) => {
       }
       const definition = schema.tables[tableName];
       if (!definition) {
-        throw new Error(`unknown table: ${tableName}`);
+        throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
       }
       ensureBackfilledForTable(tableName);
       ensureRankBackfilledForTable(tableName);
@@ -1624,12 +1631,12 @@ const createShardCtxDb = (options) => {
           await global.patch(id, patch);
           return;
         }
-        throw new Error(`document not found: ${id}`);
+        throw new LunoraError("INTERNAL", `document not found: ${id}`);
       }
       const { docJson: existingJson, row: existing, tableName } = located;
       const tableDefinition = schema.tables[tableName];
       if (!tableDefinition) {
-        throw new Error(`unknown table: ${tableName}`);
+        throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
       }
       onRead(tableName, id);
       assertNoExplicitUndefined("patch", patch);
@@ -1681,11 +1688,11 @@ const createShardCtxDb = (options) => {
       onIndexUse(tableName, indexName, "rank");
       const definition = schema.tables[tableName];
       if (!definition) {
-        throw new Error(`unknown table: ${tableName}`);
+        throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
       }
       const index = definition.rankIndexes?.find((i) => i.name === indexName);
       if (!index) {
-        throw new Error(`unknown rankIndex "${indexName}" on table "${tableName}"`);
+        throw new LunoraError("INTERNAL", `unknown rankIndex "${indexName}" on table "${tableName}"`);
       }
       assertRankPartitionLocal(tableName, definition, index);
       if (rankOptions.restrictsCounts) {
@@ -1726,17 +1733,18 @@ const createShardCtxDb = (options) => {
     // eslint-disable-next-line @typescript-eslint/require-await -- DatabaseWriterLike returns Promises (the D1 twin awaits I/O); the body is synchronous SQLite
     async rankBefore(tableName, indexName, rankBeforeOptions) {
       if (isGlobalTable(tableName)) {
-        throw new Error(
+        throw new LunoraError(
+          "INTERNAL",
           `rankBefore is not supported on the global (.global()) table '${tableName}' — cross-shard rank cursors apply only to sharded tables`
         );
       }
       const definition = schema.tables[tableName];
       if (!definition) {
-        throw new Error(`unknown table: ${tableName}`);
+        throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
       }
       const index = definition.rankIndexes?.find((i) => i.name === indexName);
       if (!index) {
-        throw new Error(`unknown rankIndex "${indexName}" on table "${tableName}"`);
+        throw new LunoraError("INTERNAL", `unknown rankIndex "${indexName}" on table "${tableName}"`);
       }
       if (rankBeforeOptions.restrictsCounts) {
         throw new CountRlsUnsupportedError(tableName);
@@ -1774,11 +1782,11 @@ const createShardCtxDb = (options) => {
           await global.restore(id);
           return;
         }
-        throw new Error(`document not found: ${id}`);
+        throw new LunoraError("INTERNAL", `document not found: ${id}`);
       }
       const field = schema.tables[located.tableName]?.softDeleteMode?.field;
       if (!field) {
-        throw new Error(`ctx.db.restore: table "${located.tableName}" is not a .softDelete() table`);
+        throw new LunoraError("INTERNAL", `ctx.db.restore: table "${located.tableName}" is not a .softDelete() table`);
       }
       const wasDeleted = located.row[field] !== null && located.row[field] !== void 0;
       await writer.patch(id, { [field]: null }, expectedTable);
@@ -1794,12 +1802,12 @@ const createShardCtxDb = (options) => {
           await global.replace(id, document);
           return;
         }
-        throw new Error(`document not found: ${id}`);
+        throw new LunoraError("INTERNAL", `document not found: ${id}`);
       }
       const { docJson: existingJson, row: previous, tableName } = located;
       const tableDefinition = schema.tables[tableName];
       if (!tableDefinition) {
-        throw new Error(`unknown table: ${tableName}`);
+        throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
       }
       assertNoExplicitUndefined("replace", document);
       const creationTime = typeof document["_creationTime"] === "number" ? document["_creationTime"] : clock();

package/dist/packem_shared/{RLS_UNWRAP_SYMBOL-EtGQdC9d.mjs → RLS_UNWRAP_SYMBOL-DnjkqVgY.mjs}

@@ -1,13 +1,14 @@
+import { LunoraError } from '@lunora/errors';
+
 const RLS_UNWRAP_SYMBOL = /* @__PURE__ */ Symbol.for("lunora.ctxdb.rls-unwrap");
-class RlsRequiredError extends Error {
-  code = "RLS_REQUIRED";
-  status = 403;
+class RlsRequiredError extends LunoraError {
   table;
   constructor(table) {
     super(
-      `ctx.db access to "${table}" is denied: the schema is marked .rls("required"), so this table is protected. Apply RLS with .use(rls(policies)) in the procedure, or mark the table .public() to opt it out.`
+      "RLS_REQUIRED",
+      `ctx.db access to "${table}" is denied: the schema is marked .rls("required"), so this table is protected. Apply RLS with .use(rls(policies)) in the procedure, or mark the table .public() to opt it out.`,
+      { name: "RlsRequiredError" }
     );
-    this.name = "RlsRequiredError";
     this.table = table;
   }
 }

package/dist/packem_shared/{ROOT_DO_SIZE_WARN_BYTES-BbHQKxG6.mjs → ROOT_DO_SIZE_WARN_BYTES-BQoX61l-.mjs}

@@ -1,8 +1,9 @@
+import { LunoraError, toErrorBody } from '@lunora/errors';
 import { drizzle } from 'drizzle-orm/durable-sqlite';
-import { e as encodeWire, a as awaitWsDrain, t as trySendFrame, d as decodeWire, s as subscriptionListDeltas, b as sendDeltaFrames } from './subscription-delivery-Z6nXHvQN.mjs';
+import { e as encodeWire, a as awaitWsDrain, t as trySendFrame, d as decodeWire, s as subscriptionListDeltas, b as sendDeltaFrames } from './subscription-delivery-CK8qga-k.mjs';
 import { parseExportShardArgs, parseImportShardArgs } from './exportShardRows-DZEhUeyI.mjs';
 import { recordAuthEvent, readAuthMetrics } from './AUTH_METRICS_BUCKETS_TABLE-CiHHYeJi.mjs';
-import { DATA_MIGRATION_STATE_TABLE, readMigrationStatus } from './DATA_MIGRATION_STATE_TABLE-DfPxn8I0.mjs';
+import { DATA_MIGRATION_STATE_TABLE, readMigrationStatus } from './DATA_MIGRATION_STATE_TABLE-DB3IYUR3.mjs';
 import { SCAN_DEP, createDependencyTracker, tableFromDepKey } from './SCAN_DEP-DLJF8dsj.mjs';
 import { readFunctionMetricsTotals, readFunctionMetricIndexHits, recordFunctionMetric, mergeScanAttribution, readFunctionMetrics, readFunctionMetricBuckets } from './FUNCTION_METRICS_BUCKETS_TABLE-UDNVD7FS.mjs';
 import { createFanoutCounters, ADMIN_FUNCTION_PREFIX, RELATION_FUNCTION_PREFIX, selectMatchingIds, ADMIN_FUNCTIONS, findStorageReferences, listTables, summarizeSubscriptions, summarizeFanoutTopics, readTablePage, facetColumn, FLAGS_FUNCTION_PREFIX, recordFanoutPass, MAX_PAGE_SIZE } from './ADMIN_FUNCTIONS-DSUQ5fX9.mjs';
@@ -14,10 +15,10 @@ import { stableStringify } from './stableStringify-MydiuScU.mjs';
 import { redact, standardRules } from '@visulima/redact';
 import { i as isDevEnvironment, c as buildSettings, b as buildSecurityAudit } from './security-audit-CucgBice.mjs';
 import { runReadonlySql } from './MAX_SQL_ROWS-dDcFE1YZ.mjs';
-import { ConflictError } from './ConflictError-C0STs6bU.mjs';
+import { ConflictError } from './ConflictError-CLoq37xH.mjs';
 import { e as deleteGlobalShapeSnapshotsForConnection, g as readIdempotent, h as writeIdempotent, t as trimIdempotent, r as readClientWatermark, m as migrateClientWatermark, c as advanceClientWatermark, d as deleteGlobalShapeSnapshot, f as readGlobalShapeSnapshot, w as writeGlobalShapeSnapshot } from './ctx-db-idempotency-BdcNpvY4.mjs';
-import { CDC_LOG_TABLE, readCdcChanges, readCdcCursor, readCdcEpoch, minCdcSeq, bumpCdcEpoch } from './CDC_LOG_TABLE-DSycmnDf.mjs';
-import { a as selectShapeMemberIds, s as selectShapeRows } from './ctx-db-shapes-0RaIOy7J.mjs';
+import { CDC_LOG_TABLE, readCdcChanges, readCdcCursor, readCdcEpoch, minCdcSeq, bumpCdcEpoch } from './CDC_LOG_TABLE-DZSVKRr7.mjs';
+import { a as selectShapeMemberIds, s as selectShapeRows } from './ctx-db-shapes-Cz9dHyh1.mjs';
 
 const MAX_BATCH_ENTRIES = 500;
 
@@ -199,7 +200,7 @@ const shapeRoutingKey = (name, args) => stableStringify({ args: args ?? {}, name
 const DEFAULT_PROMOTION_THRESHOLDS = { tDown: 4e3, tUp: 8e3 };
 const nextPromotionState = (current, subscribers, thresholds = DEFAULT_PROMOTION_THRESHOLDS) => {
   if (thresholds.tDown >= thresholds.tUp) {
-    throw new Error(`invalid promotion thresholds: tDown (${String(thresholds.tDown)}) must be < tUp (${String(thresholds.tUp)})`);
+    throw new LunoraError("INTERNAL", `invalid promotion thresholds: tDown (${String(thresholds.tDown)}) must be < tUp (${String(thresholds.tUp)})`);
   }
   if (current === "owned") {
     return subscribers >= thresholds.tUp ? "promoted" : "owned";
@@ -305,7 +306,7 @@ const envPositiveInt = (env, key, fallback) => {
 };
 const RELAY_MULTICAST_IDENTITY = {};
 const assertNeverFrame = (frame) => {
-  throw new Error(`unhandled relay frame: ${JSON.stringify(frame)}`);
+  throw new LunoraError("INTERNAL", `unhandled relay frame: ${JSON.stringify(frame)}`);
 };
 const asRelayNamespace = (value) => {
   if (value === null || typeof value !== "object") {
@@ -2834,6 +2835,7 @@ class ShardDO {
     return {
       analytics: false,
       auth: false,
+      containers: false,
       flags: false,
       kv: false,
       mail: false,
@@ -4008,27 +4010,11 @@ class ShardDO {
    */
   // eslint-disable-next-line class-methods-use-this -- cohesive DO instance method (groups with the request handlers); kept non-static so subclasses can override the error mapping
   errorToResponse(error) {
-    if (error instanceof ConflictError) {
-      return jsonResponse({ error: { code: error.code, message: error.message } }, error.status);
-    }
-    if (error && typeof error === "object" && error.name === "ValidationError") {
-      const message = error instanceof Error ? error.message : "validation failed";
-      return jsonResponse({ error: { code: "VALIDATION_ERROR", message } }, 400);
-    }
-    if (error && typeof error === "object" && error.name === "LunoraError") {
-      const lunoraError = error;
-      const status = typeof lunoraError.status === "number" ? lunoraError.status : 500;
-      const body = {
-        code: lunoraError.code ?? "INTERNAL",
-        message: lunoraError.message ?? "internal error"
-      };
-      if (lunoraError.data !== void 0) {
-        body.data = encodeWire(lunoraError.data);
-      }
-      return jsonResponse({ error: body }, status);
+    const { body, redacted, status } = toErrorBody(error, { encodeData: encodeWire, fallbackCode: "RPC_FAILED", redactedMessage: "internal error" });
+    if (redacted) {
+      console.error("[@lunora/do] internal error:", error);
     }
-    console.error("[@lunora/do] unhandled RPC error:", error);
-    return jsonResponse({ error: { code: "RPC_FAILED", message: "internal error" } }, 500);
+    return jsonResponse({ error: body }, status);
   }
   /**
    * Batch dispatch (plan 088). Applies each `calls[]` entry through the SAME
@@ -5006,7 +4992,6 @@ class ShardDO {
    * 4. On normal completion send `{type:"complete"}`; on throw send
    * `{type:"error"}`. Either way drop the controller.
    */
-  // eslint-disable-next-line sonarjs/cognitive-complexity -- the stream lifecycle (ack → chunk pump → complete/error) plus the structured-vs-redacted error branch is the wire protocol and reads clearer inline than split across helpers sharing the controller + socket
   async handleStream(ws, id, functionPath, args) {
     const iterable = this.executeStream(functionPath, args);
     if (!iterable) {
@@ -5046,16 +5031,13 @@ class ShardDO {
         ws.send(JSON.stringify({ id, type: "complete" }));
       }
     } catch (error) {
-      const { code } = error;
-      const isStructured = typeof code === "string";
-      if (!isStructured) {
+      const { body, redacted } = toErrorBody(error, { fallbackCode: "INTERNAL_SERVER_ERROR", redactedMessage: "internal error" });
+      if (redacted) {
         console.error("[@lunora/do] unhandled stream error:", error);
       }
-      const rawMessage = error instanceof Error ? error.message : String(error);
-      const message = isStructured ? rawMessage : "internal error";
       ws.send(
         JSON.stringify({
-          error: { code: isStructured ? code : "INTERNAL_SERVER_ERROR", message },
+          error: { code: body.code, message: body.message },
           id,
           type: "error"
         })
@@ -5337,8 +5319,8 @@ class ShardDO {
       resolved = this.resolveShape(shape.name, shape.args ?? {}, identity);
     } catch (error) {
       this.recordShapeError(`shape:seed:${subId}`, error);
-      const code = typeof error.code === "string" ? error.code : "SHAPE_RESOLVE_FAILED";
-      return { code, message: error instanceof Error ? error.message : "shape resolution failed" };
+      const { body } = toErrorBody(error, { fallbackCode: "SHAPE_RESOLVE_FAILED", redactedMessage: "shape resolution failed" });
+      return { code: body.code, message: body.message };
     }
     if (!resolved) {
       return { code: "SHAPE_NOT_FOUND", message: `shape "${shape.name}" not found or not permitted` };
@@ -5350,8 +5332,8 @@ class ShardDO {
       return await this.seedOpLogShape(ws, subId, shape, resolved);
     } catch (error) {
       this.recordShapeError(`shape:seed:${subId}`, error);
-      const code = typeof error.code === "string" ? error.code : "SHAPE_SEED_FAILED";
-      return { code, message: error instanceof Error ? error.message : "shape seed failed" };
+      const { body } = toErrorBody(error, { fallbackCode: "SHAPE_SEED_FAILED", redactedMessage: "shape seed failed" });
+      return { code: body.code, message: body.message };
     }
   }
   /**

package/dist/packem_shared/{applyOnDelete-BQ-8ZlZ1.mjs → applyOnDelete-CAwZfp-5.mjs}

@@ -1,3 +1,4 @@
+import { LunoraError } from '@lunora/errors';
 import { applySelect } from './applySelect-BvZdFUBT.mjs';
 
 const projectChildren = (documents, nested) => nested.select ? applySelect(documents, nested.select, nested.with) : documents;
@@ -27,13 +28,13 @@ const resolveWith = async (options) => {
   }
   const parentDefinition = schema.tables[tableName];
   if (!parentDefinition) {
-    throw new Error(`unknown table: ${tableName}`);
+    throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
   }
   const relationMap = parentDefinition.relationMap ?? {};
   const requireRelation = (name) => {
     const relation = relationMap[name];
     if (!relation) {
-      throw new Error(`unknown relation "${name}" on table "${tableName}"`);
+      throw new LunoraError("INTERNAL", `unknown relation "${name}" on table "${tableName}"`);
     }
     return relation;
   };
@@ -145,7 +146,7 @@ const applyRelationOnDelete = async (options, holderTable, relation) => {
 const applyOnDelete = async (options) => {
   const { schema, tableName } = options;
   if (!schema.tables[tableName]) {
-    throw new Error(`unknown table: ${tableName}`);
+    throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
   }
   for (const [holderTable, holderDefinition] of Object.entries(schema.tables)) {
     const relations = holderDefinition.relationMap;

package/dist/packem_shared/{backfillAggregateIndexes-BZsOqDXP.mjs → backfillAggregateIndexes-DDoT-UUI.mjs}

@@ -1,5 +1,5 @@
 import { sql } from 'drizzle-orm';
-import { matchesStaticWhere } from './AGGREGATE_SQL_FUNCTION-CFk6adSu.mjs';
+import { matchesStaticWhere } from './AGGREGATE_SQL_FUNCTION-CQsu2Xga.mjs';
 import { encodeAggregateKey, foldAggregateTally, aggregateTableName } from './aggregateTableName-CxNqY1Sl.mjs';
 import { r as runDrizzle } from './do-exec-5eQy5cEi.mjs';
 import { D as DOC_COLUMN, r as rowToDocument, A as AGG_KEY, a as AGG_VALUE, b as AGG_COUNT } from './do-sql-BCHCWtrD.mjs';

package/dist/packem_shared/{compileWhereSql-MW_Lk8nJ.mjs → compileWhereSql-DE6yfRcQ.mjs}

@@ -1,3 +1,4 @@
+import { LunoraError } from '@lunora/errors';
 import { sql } from 'drizzle-orm';
 
 const RELATION_EXISTS_KEY = "__relationExists";
@@ -94,7 +95,7 @@ const STRUCTURAL_KEYS = /* @__PURE__ */ new Set(["AND", "NOT", "OR", RELATION_EX
 const compileStructuralKey = (key, value, strategy) => {
   if (key === RELATION_EXISTS_KEY) {
     if (!strategy.relationExists) {
-      throw new Error("encountered a relation EXISTS marker without a relationExists strategy hook");
+      throw new LunoraError("INTERNAL", "encountered a relation EXISTS marker without a relationExists strategy hook");
     }
     return strategy.relationExists(value);
   }

package/dist/packem_shared/{createSystemReader-8CzSZP9V.mjs → createSystemReader-D12eNH13.mjs}

@@ -1,3 +1,5 @@
+import { LunoraError } from '@lunora/errors';
+
 const toScheduledFunctionDoc = (record) => {
   const doc = {
     args: record["args"] ?? {},
@@ -40,13 +42,13 @@ const toStorageMetadata = (object) => {
 const createSystemReader = (options = {}) => {
   const requireScheduler = () => {
     if (!options.scheduler) {
-      throw new Error('ctx.db.system.query("_scheduled_functions"): no scheduler configured. Pass `scheduler` to createShardDO().');
+      throw new LunoraError("INTERNAL", 'ctx.db.system.query("_scheduled_functions"): no scheduler configured. Pass `scheduler` to createShardDO().');
     }
     return options.scheduler;
   };
   const requireStorage = () => {
     if (!options.storage) {
-      throw new Error('ctx.db.system.query("_storage"): no storage configured. Pass `storage` to createShardDO().');
+      throw new LunoraError("INTERNAL", 'ctx.db.system.query("_storage"): no storage configured. Pass `storage` to createShardDO().');
     }
     return options.storage;
   };

package/dist/packem_shared/{ctx-db-shapes-0RaIOy7J.mjs → ctx-db-shapes-Cz9dHyh1.mjs}

@@ -1,7 +1,7 @@
 import { sql } from 'drizzle-orm';
 import { r as runDrizzle } from './do-exec-5eQy5cEi.mjs';
 import { D as DOC_COLUMN, r as rowToDocument, j as jsonPathSql } from './do-sql-BCHCWtrD.mjs';
-import { compileWhereSql } from './compileWhereSql-MW_Lk8nJ.mjs';
+import { compileWhereSql } from './compileWhereSql-DE6yfRcQ.mjs';
 import { s as serializeSqlValue } from './serialize-sql-BlRUoiQe.mjs';
 
 const shapeWhereStrategy = { fieldRef: jsonPathSql, serialize: serializeSqlValue };

package/dist/packem_shared/{isSourceDue-9mJRJ9Ld.mjs → isSourceDue-BptUN8CR.mjs}

@@ -1,10 +1,11 @@
-import { runExternalSourceTick } from './materializeExternalRows-Bj6EXy50.mjs';
+import { LunoraError } from '@lunora/errors';
+import { runExternalSourceTick } from './materializeExternalRows-DNcvoLRT.mjs';
 
 const liftSourceId = (row, options = {}) => {
   const { idColumn = "id", map } = options;
   const idValue = row[idColumn];
   if (idValue === void 0 || idValue === null) {
-    throw new Error(`external-source: row is missing id column "${idColumn}"`);
+    throw new LunoraError("INTERNAL", `external-source: row is missing id column "${idColumn}"`);
   }
   if (typeof idValue !== "string" && typeof idValue !== "number" && typeof idValue !== "bigint") {
     throw new TypeError(`external-source: id column "${idColumn}" must be a string or number`);

package/dist/packem_shared/{materializeExternalRows-Bj6EXy50.mjs → materializeExternalRows-DNcvoLRT.mjs}

@@ -1,5 +1,5 @@
-import { applyCdcChanges } from './CDC_LOG_TABLE-DSycmnDf.mjs';
-import { s as selectShapeRows } from './ctx-db-shapes-0RaIOy7J.mjs';
+import { applyCdcChanges } from './CDC_LOG_TABLE-DZSVKRr7.mjs';
+import { s as selectShapeRows } from './ctx-db-shapes-Cz9dHyh1.mjs';
 import { diffExternalSource, projectExternalSourceRow } from './diffExternalSource-Cx9HUPJj.mjs';
 import { stableStringify } from './stableStringify-MydiuScU.mjs';
 

package/dist/packem_shared/{runShardMigrations-nIwoQeOK.mjs → runShardMigrations-DeZr0KZp.mjs}

@@ -1,6 +1,6 @@
 import { sql } from 'drizzle-orm';
 import { aggregateTableName } from './aggregateTableName-CxNqY1Sl.mjs';
-import { migrateCdcLog, migrateCdcMeta } from './CDC_LOG_TABLE-DSycmnDf.mjs';
+import { migrateCdcLog, migrateCdcMeta } from './CDC_LOG_TABLE-DZSVKRr7.mjs';
 import { m as migrateClientWatermark, a as migrateIdempotency, b as migrateGlobalShapeSnapshot } from './ctx-db-idempotency-BdcNpvY4.mjs';
 import { r as runDrizzle } from './do-exec-5eQy5cEi.mjs';
 import { D as DOC_COLUMN, j as jsonPathSql, c as createIndexSql, t as tableColumns, i as isFtsAvailable, A as AGG_KEY, a as AGG_VALUE, b as AGG_COUNT } from './do-sql-BCHCWtrD.mjs';