@lunora/do 1.0.0-alpha.23 → 1.0.0-alpha.24

package/LICENSE.md

@@ -103,3 +103,9 @@ Unless required by applicable law or agreed to in writing, software distributed
 under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
 CONDITIONS OF ANY KIND, either express or implied. See the License for the
 specific language governing permissions and limitations under the License.
+
+<!-- DEPENDENCIES -->
+<!-- /DEPENDENCIES -->
+
+<!-- TYPE_DEPENDENCIES -->
+<!-- /TYPE_DEPENDENCIES -->

package/dist/index.d.mts

@@ -3806,43 +3806,6 @@ declare const MIN_AUTH_SECRET_LENGTH = 32;
 * a *missing* token is never itself a finding here (introspection is simply off).
 */
 declare const buildSecurityAudit: (rawEnv: unknown) => SecurityAuditResult;
-/**
-* Durable Object that owns auth session state.
-*
-* `@lunora/auth` used to write sessions directly into D1 alongside user
-* records. That worked but coupled session lifecycle to a global database —
-* every read had to cross the region, every write contended with user
-* inserts. SessionDO owns sessions in a DO-local KV store: same-prefix
-* tokens co-locate (via `idFromName(token.slice(0, 16))`) so the DO instance
-* count stays bounded; reads and writes never round-trip to D1.
-*
-* Wire shape: HTTP only, never RPC. The auth package calls
-*
-* `await env.SESSION.get(env.SESSION.idFromName(prefix)).fetch(...)`
-*
-* with one of:
-*
-* POST   /create   body: { token, userId, ttlSeconds }
-* GET    /get      header: `x-lunora-session-token: <token>`
-* DELETE /revoke   header: `x-lunora-session-token: <token>`
-*
-* Every request must additionally carry an `x-lunora-session-secret` header
-* whose value matches `env.SESSION_DO_SECRET`. The DO is reachable from any
-* worker bound to its namespace, so a shared secret is the only thing that
-* prevents a compromised or misbehaving worker from reading arbitrary
-* sessions — the binding alone is not an auth surface.
-*
-* The DO returns JSON bodies that `@lunora/auth` reshapes into its public
-* `AuthSession` type. Keep the surface narrow — anything more elaborate
-* should ride on top via a wrapper, not by widening this contract.
-*
-* # Subclassing
-*
-* Apps subclass `SessionDO` (or use the codegen subclass) and register the
-* subclass in `wrangler.jsonc` as `SESSION`. The platform DO binding requires
-* a concrete `DurableObject` class today; the structural state shape used by
-* the unit tests is preserved so plain-object doubles still work.
-*/
 /** Default TTL for new sessions (7 days), matching `@lunora/auth`. */
 declare const SESSION_DO_TTL_DEFAULT: number;
 /** Hard ceiling on the requested TTL — 90 days. Longer sessions should ride on top via refresh. */
@@ -6453,42 +6416,6 @@ declare abstract class ShardDO {
   private deliverWhisperLocal;
   private readAttachment;
 }
-/**
-* Durable Object that owns the live set of shard keys per sharded table.
-*
-* The query coordinator (`@lunora/runtime`) fans out cross-shard reads to
-* every live shard. With the static registry, the app supplies the shard
-* key list at boot — which is fine for fixed-cardinality deployments
-* (a known set of tenants) and unworkable for dynamic ones (one shard per
-* user-created channel, organisation, project, …).
-*
-* `ShardRegistryDO` is the persistent source of truth. A worker:
-*
-* - calls `POST /register {table, shardKey}` when a sharded table first
-* sees a write on a new key (typically from `ctx.db.<table>.insert` via
-* the worker's onWrite hook, fired through `ctx.waitUntil` so the
-* user-facing write doesn't pay the registry round-trip);
-* - calls `POST /unregister {table, shardKey}` when a shard is decommissioned;
-* - calls `GET /list?table=X` to materialise the fan-out target list. The
-* client (`createDynamicShardRegistry` in `@lunora/runtime`) caches the
-* answer with a small TTL so a wide fan-out doesn't pay a registry
-* round-trip on every call.
-*
-* Single-instance contract: deploy one DO instance per environment, by
-* convention named {@link SHARD_REGISTRY_DO_NAME}. The DO is small (just a
-* `Map<table, Set<shardKey>>`) and writes are infrequent (only on first-seen
-* shardKey per table), so a single instance is sufficient up to tens of
-* thousands of distinct shard keys.
-*
-* Wire shape: HTTP only, never RPC.
-*
-* POST /register   body: { table, shardKey }
-* POST /unregister body: { table, shardKey }
-* GET  /list?table=...
-* GET  /snapshot                (debug: returns the full table → [keys] map)
-*
-* Responses are JSON; the client shapes them. Keep the surface narrow.
-*/
 /** Conventional DO instance name, passed to `idFromName` to address the single registry instance. */
 declare const SHARD_REGISTRY_DO_NAME: string;
 /**

package/dist/index.d.ts

@@ -3806,43 +3806,6 @@ declare const MIN_AUTH_SECRET_LENGTH = 32;
 * a *missing* token is never itself a finding here (introspection is simply off).
 */
 declare const buildSecurityAudit: (rawEnv: unknown) => SecurityAuditResult;
-/**
-* Durable Object that owns auth session state.
-*
-* `@lunora/auth` used to write sessions directly into D1 alongside user
-* records. That worked but coupled session lifecycle to a global database —
-* every read had to cross the region, every write contended with user
-* inserts. SessionDO owns sessions in a DO-local KV store: same-prefix
-* tokens co-locate (via `idFromName(token.slice(0, 16))`) so the DO instance
-* count stays bounded; reads and writes never round-trip to D1.
-*
-* Wire shape: HTTP only, never RPC. The auth package calls
-*
-* `await env.SESSION.get(env.SESSION.idFromName(prefix)).fetch(...)`
-*
-* with one of:
-*
-* POST   /create   body: { token, userId, ttlSeconds }
-* GET    /get      header: `x-lunora-session-token: <token>`
-* DELETE /revoke   header: `x-lunora-session-token: <token>`
-*
-* Every request must additionally carry an `x-lunora-session-secret` header
-* whose value matches `env.SESSION_DO_SECRET`. The DO is reachable from any
-* worker bound to its namespace, so a shared secret is the only thing that
-* prevents a compromised or misbehaving worker from reading arbitrary
-* sessions — the binding alone is not an auth surface.
-*
-* The DO returns JSON bodies that `@lunora/auth` reshapes into its public
-* `AuthSession` type. Keep the surface narrow — anything more elaborate
-* should ride on top via a wrapper, not by widening this contract.
-*
-* # Subclassing
-*
-* Apps subclass `SessionDO` (or use the codegen subclass) and register the
-* subclass in `wrangler.jsonc` as `SESSION`. The platform DO binding requires
-* a concrete `DurableObject` class today; the structural state shape used by
-* the unit tests is preserved so plain-object doubles still work.
-*/
 /** Default TTL for new sessions (7 days), matching `@lunora/auth`. */
 declare const SESSION_DO_TTL_DEFAULT: number;
 /** Hard ceiling on the requested TTL — 90 days. Longer sessions should ride on top via refresh. */
@@ -6453,42 +6416,6 @@ declare abstract class ShardDO {
   private deliverWhisperLocal;
   private readAttachment;
 }
-/**
-* Durable Object that owns the live set of shard keys per sharded table.
-*
-* The query coordinator (`@lunora/runtime`) fans out cross-shard reads to
-* every live shard. With the static registry, the app supplies the shard
-* key list at boot — which is fine for fixed-cardinality deployments
-* (a known set of tenants) and unworkable for dynamic ones (one shard per
-* user-created channel, organisation, project, …).
-*
-* `ShardRegistryDO` is the persistent source of truth. A worker:
-*
-* - calls `POST /register {table, shardKey}` when a sharded table first
-* sees a write on a new key (typically from `ctx.db.<table>.insert` via
-* the worker's onWrite hook, fired through `ctx.waitUntil` so the
-* user-facing write doesn't pay the registry round-trip);
-* - calls `POST /unregister {table, shardKey}` when a shard is decommissioned;
-* - calls `GET /list?table=X` to materialise the fan-out target list. The
-* client (`createDynamicShardRegistry` in `@lunora/runtime`) caches the
-* answer with a small TTL so a wide fan-out doesn't pay a registry
-* round-trip on every call.
-*
-* Single-instance contract: deploy one DO instance per environment, by
-* convention named {@link SHARD_REGISTRY_DO_NAME}. The DO is small (just a
-* `Map<table, Set<shardKey>>`) and writes are infrequent (only on first-seen
-* shardKey per table), so a single instance is sufficient up to tens of
-* thousands of distinct shard keys.
-*
-* Wire shape: HTTP only, never RPC.
-*
-* POST /register   body: { table, shardKey }
-* POST /unregister body: { table, shardKey }
-* GET  /list?table=...
-* GET  /snapshot                (debug: returns the full table → [keys] map)
-*
-* Responses are JSON; the client shapes them. Keep the surface narrow.
-*/
 /** Conventional DO instance name, passed to `idFromName` to address the single registry instance. */
 declare const SHARD_REGISTRY_DO_NAME: string;
 /**

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { exportShardRows, exportShardTable, importShardRows, parseExportShardArgs, parseImportShardArgs, selectExportTables, validateImportRow } from './packem_shared/exportShardRows-DZEhUeyI.mjs';
+export { exportShardRows, exportShardTable, importShardRows, parseExportShardArgs, parseImportShardArgs, selectExportTables, validateImportRow } from './packem_shared/exportShardRows-Dy3oFZ26.mjs';
 export { AGGREGATE_SQL_FUNCTION, aggregateSqlFunction, matchesStaticWhere, normalizeCountArgument, throwingScheduler } from './packem_shared/AGGREGATE_SQL_FUNCTION-CQsu2Xga.mjs';
 export { aggregateTableName, coerceAggregateNumber, encodeAggregateKey, foldAggregateTally, readAggregateValue } from './packem_shared/aggregateTableName-CxNqY1Sl.mjs';
 export { CountRlsUnsupportedError, mergeWhere, planAggregateLookup, selectIndexForAggregate, selectIndexForCount, selectIndexForGroupBy } from './packem_shared/CountRlsUnsupportedError-BGxj0pgS.mjs';
@@ -25,9 +25,9 @@ export { applyOnDelete, fanOutScalarCounts, resolveWith, runRowValidators } from
 export { RLS_UNWRAP_SYMBOL, RlsRequiredError, guardWriter } from './packem_shared/RLS_UNWRAP_SYMBOL-DnjkqVgY.mjs';
 export { buildFtsMatch, ftsTableName, scoreDocument, stringifySearchText, tokenizeSearch } from './packem_shared/buildFtsMatch-BLEMawrp.mjs';
 export { M as MIN_ADMIN_TOKEN_LENGTH, a as MIN_AUTH_SECRET_LENGTH, b as buildSecurityAudit } from './packem_shared/security-audit-CucgBice.mjs';
-export { SESSION_DO_TTL_DEFAULT, SessionDO } from './packem_shared/SESSION_DO_TTL_DEFAULT-ilPZsVwu.mjs';
-export { ROOT_DO_SIZE_WARN_BYTES, ROOT_SHARD_NAME, ShardDO } from './packem_shared/ROOT_DO_SIZE_WARN_BYTES-BM4TOOvf.mjs';
-export { SHARD_REGISTRY_DO_NAME, ShardRegistryDO } from './packem_shared/SHARD_REGISTRY_DO_NAME-BsAbi5Mn.mjs';
+export { SESSION_DO_TTL_DEFAULT, SessionDO } from './packem_shared/SESSION_DO_TTL_DEFAULT-D71QAL5h.mjs';
+export { ROOT_DO_SIZE_WARN_BYTES, ROOT_SHARD_NAME, ShardDO } from './packem_shared/ROOT_DO_SIZE_WARN_BYTES-KQQiPDQ3.mjs';
+export { SHARD_REGISTRY_DO_NAME, ShardRegistryDO } from './packem_shared/SHARD_REGISTRY_DO_NAME-D99roc-r.mjs';
 export { MAX_SQL_ROWS, assertReadonly, runReadonlySql } from './packem_shared/MAX_SQL_ROWS-dDcFE1YZ.mjs';
 export { createSystemReader } from './packem_shared/createSystemReader-D12eNH13.mjs';
 export { ConflictError } from './packem_shared/ConflictError-CLoq37xH.mjs';

package/dist/packem_shared/{ROOT_DO_SIZE_WARN_BYTES-BM4TOOvf.mjs → ROOT_DO_SIZE_WARN_BYTES-KQQiPDQ3.mjs}

@@ -1,7 +1,8 @@
 import { LunoraError, toErrorBody } from '@lunora/errors';
 import { drizzle } from 'drizzle-orm/durable-sqlite';
+import { j as jsonResponse } from './json-response-BdbtpOhm.mjs';
 import { e as encodeWire, a as awaitWsDrain, t as trySendFrame, d as decodeWire, s as subscriptionListDeltas, b as sendDeltaFrames } from './subscription-delivery-CK8qga-k.mjs';
-import { parseExportShardArgs, parseImportShardArgs } from './exportShardRows-DZEhUeyI.mjs';
+import { parseExportShardArgs, parseImportShardArgs } from './exportShardRows-Dy3oFZ26.mjs';
 import { recordAuthEvent, readAuthMetrics } from './AUTH_METRICS_BUCKETS_TABLE-CiHHYeJi.mjs';
 import { DATA_MIGRATION_STATE_TABLE, readMigrationStatus } from './DATA_MIGRATION_STATE_TABLE-DB3IYUR3.mjs';
 import { SCAN_DEP, createDependencyTracker, tableFromDepKey } from './SCAN_DEP-DLJF8dsj.mjs';
@@ -764,7 +765,8 @@ class OwnerRelay extends RelayLink {
     try {
       resolved = this.host.resolveShape(request.name, request.args, identity);
     } catch (error) {
-      return { error: { code: "SHAPE_RESOLVE_FAILED", message: error instanceof Error ? error.message : "shape resolve failed" } };
+      const { body } = toErrorBody(error, { fallbackCode: "SHAPE_RESOLVE_FAILED", redactedMessage: "shape resolution failed" });
+      return { error: { code: body.code, message: body.message } };
     }
     if (resolved === void 0 || resolved.global === true) {
       return { error: { code: "SHAPE_NOT_FOUND", message: `shape not relayable: ${request.name}` } };
@@ -1842,13 +1844,7 @@ const parseCdcSyncArgs = (args) => {
   };
   return { limit: toCount(args["limit"]), sinceSeq: toCount(args["sinceSeq"]) ?? 0 };
 };
-const jsonResponse = (body, status = 200, bookmark) => {
-  const headers = { "content-type": "application/json" };
-  if (bookmark) {
-    headers["x-d1-bookmark"] = bookmark;
-  }
-  return Response.json(body, { headers, status });
-};
+const bookmarkHeaders = (bookmark) => bookmark ? { "x-d1-bookmark": bookmark } : void 0;
 const parseIdentityHeader = (raw) => {
   if (!raw) {
     return void 0;
@@ -2394,7 +2390,7 @@ class ShardDO {
     try {
       if (payload.functionPath.startsWith(RELATION_FUNCTION_PREFIX)) {
         const value = await this.runRelationFanoutRead(payload.functionPath, payload.args ?? {});
-        return jsonResponse(value, 200, this.currentResponseBookmark);
+        return jsonResponse(value, 200, bookmarkHeaders(this.currentResponseBookmark));
       }
       const mutatorClass = this.isCustomMutator(payload.functionPath) ? this.classifyClientMutation() : void 0;
       this.currentMutatorClass = mutatorClass;
@@ -3439,7 +3435,7 @@ class ShardDO {
     }
     this.recordFunctionCall(functionPath, Date.now() - dispatchStartedAt, void 0, this.currentScannedTables, this.currentIndexHits);
     if (mutatorClass.kind === "already") {
-      return jsonResponse({ lastMutationId: mutatorClass.expected - 1, result: null }, 200, this.currentResponseBookmark);
+      return jsonResponse({ lastMutationId: mutatorClass.expected - 1, result: null }, 200, bookmarkHeaders(this.currentResponseBookmark));
     }
     return jsonResponse(
       {
@@ -3450,7 +3446,7 @@ class ShardDO {
         }
       },
       409,
-      this.currentResponseBookmark
+      bookmarkHeaders(this.currentResponseBookmark)
     );
   }
   /**
@@ -3469,7 +3465,11 @@ class ShardDO {
       return this.buildDispatchResponse(mutatorClass, cachedValue);
     }
     const commitCursor = this.mutationCommitCursor();
-    return jsonResponse(commitCursor === void 0 ? { result: cachedValue } : { commitCursor, result: cachedValue }, 200, this.currentResponseBookmark);
+    return jsonResponse(
+      commitCursor === void 0 ? { result: cachedValue } : { commitCursor, result: cachedValue },
+      200,
+      bookmarkHeaders(this.currentResponseBookmark)
+    );
   }
   /**
    * The CDC cursor a just-committed plain mutation landed at — the post-write
@@ -3493,10 +3493,10 @@ class ShardDO {
    */
   buildDispatchResponse(mutatorClass, result) {
     if (mutatorClass?.kind === "next") {
-      return jsonResponse({ lastMutationId: this.currentRequestClientSeq, result }, 200, this.currentResponseBookmark);
+      return jsonResponse({ lastMutationId: this.currentRequestClientSeq, result }, 200, bookmarkHeaders(this.currentResponseBookmark));
     }
     const commitCursor = this.mutationCommitCursor();
-    return jsonResponse(commitCursor === void 0 ? { result } : { commitCursor, result }, 200, this.currentResponseBookmark);
+    return jsonResponse(commitCursor === void 0 ? { result } : { commitCursor, result }, 200, bookmarkHeaders(this.currentResponseBookmark));
   }
   /**
    * Commit a mutation's replay bookkeeping — the `(identity, mutationId)`
@@ -4255,7 +4255,7 @@ class ShardDO {
       }
       results.push({ body: outcome.body, id: outcome.id, status: outcome.status });
     }
-    return jsonResponse({ results }, 200, latestBookmark);
+    return jsonResponse({ results }, 200, bookmarkHeaders(latestBookmark));
   }
   /** Dispatch one batch entry through the single-call `/rpc` path and capture its envelope (plan 088). */
   async dispatchBatchEntry(batchRequest, entry) {
@@ -4263,12 +4263,12 @@ class ShardDO {
       const response = await this.fetch(buildBatchEntryRequest(batchRequest, entry));
       return { body: await response.json(), bookmark: response.headers.get("x-d1-bookmark") ?? void 0, id: entry.id, status: response.status };
     } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
+      const { body, status } = toErrorBody(error, { fallbackCode: "BATCH_ENTRY_FAILED" });
       return {
-        body: { error: { code: "BATCH_ENTRY_FAILED", message } },
+        body: { error: body },
         bookmark: void 0,
         id: entry?.id,
-        status: 500
+        status
       };
     }
   }

package/dist/packem_shared/{SESSION_DO_TTL_DEFAULT-ilPZsVwu.mjs → SESSION_DO_TTL_DEFAULT-D71QAL5h.mjs}

@@ -1,3 +1,5 @@
+import { j as jsonResponse } from './json-response-BdbtpOhm.mjs';
+
 const SESSION_DO_TTL_DEFAULT = 7 * 24 * 60 * 60;
 const SESSION_DO_TTL_MAX = 90 * 24 * 60 * 60;
 const SESSION_GC_INTERVAL_MS = 24 * 60 * 60 * 1e3;
@@ -7,10 +9,6 @@ const SESSION_TOKEN_PATTERN = /^[\w-]+$/;
 const MIN_TOKEN_LENGTH = 32;
 const MAX_TOKEN_LENGTH = 256;
 const MAX_USER_ID_LENGTH = 256;
-const jsonResponse = (status, body) => Response.json(body, {
-  headers: { "content-type": "application/json" },
-  status
-});
 const constantTimeEqual = (a, b) => {
   const max = Math.max(a.length, b.length);
   let diff = a.length ^ b.length;
@@ -68,7 +66,7 @@ class SessionDO {
   async fetch(request) {
     const env = this.env ?? {};
     if (!isAuthorized(request, env)) {
-      return jsonResponse(401, { error: { code: "UNAUTHORIZED", message: "missing or invalid SessionDO secret" } });
+      return jsonResponse({ error: { code: "UNAUTHORIZED", message: "missing or invalid SessionDO secret" } }, 401);
     }
     const url = new URL(request.url);
     if (request.method === "POST" && url.pathname === "/create") {
@@ -80,7 +78,7 @@ class SessionDO {
     if (request.method === "DELETE" && url.pathname === "/revoke") {
       return this.handleRevoke(request);
     }
-    return jsonResponse(404, { error: { code: "NOT_FOUND", message: "no such session route" } });
+    return jsonResponse({ error: { code: "NOT_FOUND", message: "no such session route" } }, 404);
   }
   /**
    * Sweep expired session records. Lazy expiry-on-read ({@link handleGet})
@@ -116,25 +114,25 @@ class SessionDO {
     try {
       body = await request.json();
     } catch {
-      return jsonResponse(400, { error: "invalid_request" });
+      return jsonResponse({ error: "invalid_request" }, 400);
     }
     const token = validateToken(body.token);
     if (token === void 0) {
-      return jsonResponse(400, { error: "invalid_request" });
+      return jsonResponse({ error: "invalid_request" }, 400);
     }
     const { userId } = body;
     if (typeof userId !== "string" || userId.length === 0 || userId.length > MAX_USER_ID_LENGTH) {
-      return jsonResponse(400, { error: "invalid_request" });
+      return jsonResponse({ error: "invalid_request" }, 400);
     }
     const ttlSeconds = resolveTtlSeconds(body.ttlSeconds);
     if (ttlSeconds === void 0) {
-      return jsonResponse(400, { error: "invalid_request" });
+      return jsonResponse({ error: "invalid_request" }, 400);
     }
     const now = Date.now();
     const record = { createdAt: now, expiresAt: now + ttlSeconds * 1e3, userId };
     await this.state.storage.put(`s:${token}`, record);
     await this.armGcAlarm();
-    return jsonResponse(201, { token, ...record });
+    return jsonResponse({ token, ...record }, 201);
   }
   /**
    * Ensure a GC alarm is pending. Only sets one when none is currently
@@ -155,25 +153,25 @@ class SessionDO {
   async handleGet(request) {
     const token = request.headers.get(SESSION_TOKEN_HEADER);
     if (!token) {
-      return jsonResponse(400, { error: { code: "INVALID_INPUT", message: "token required" } });
+      return jsonResponse({ error: { code: "INVALID_INPUT", message: "token required" } }, 400);
     }
     const record = await this.state.storage.get(`s:${token}`);
     if (!record) {
-      return jsonResponse(404, { error: { code: "NOT_FOUND", message: "session not found" } });
+      return jsonResponse({ error: { code: "NOT_FOUND", message: "session not found" } }, 404);
     }
     if (record.expiresAt < Date.now()) {
       await this.state.storage.delete(`s:${token}`);
-      return jsonResponse(404, { error: { code: "EXPIRED", message: "session expired" } });
+      return jsonResponse({ error: { code: "EXPIRED", message: "session expired" } }, 404);
     }
-    return jsonResponse(200, { token, ...record });
+    return jsonResponse({ token, ...record }, 200);
   }
   async handleRevoke(request) {
     const token = request.headers.get(SESSION_TOKEN_HEADER);
     if (!token) {
-      return jsonResponse(400, { error: { code: "INVALID_INPUT", message: "token required" } });
+      return jsonResponse({ error: { code: "INVALID_INPUT", message: "token required" } }, 400);
     }
     await this.state.storage.delete(`s:${token}`);
-    return jsonResponse(200, { ok: true });
+    return jsonResponse({ ok: true }, 200);
   }
 }
 

package/dist/packem_shared/{SHARD_REGISTRY_DO_NAME-BsAbi5Mn.mjs → SHARD_REGISTRY_DO_NAME-D99roc-r.mjs}

@@ -1,22 +1,20 @@
+import { j as jsonResponse } from './json-response-BdbtpOhm.mjs';
+
 const SHARD_REGISTRY_DO_NAME = "__lunora_shard_registry__";
 const STORAGE_KEY = "__tables__";
-const jsonResponse = (status, body) => Response.json(body, {
-  headers: { "content-type": "application/json" },
-  status
-});
 const readTableShardBody = async (request) => {
   let body;
   try {
     body = await request.json();
   } catch {
-    return { kind: "error", response: jsonResponse(400, { error: { code: "BAD_REQUEST", message: "invalid JSON body" } }) };
+    return { kind: "error", response: jsonResponse({ error: { code: "BAD_REQUEST", message: "invalid JSON body" } }, 400) };
   }
   const table = typeof body.table === "string" ? body.table.trim() : "";
   const shardKey = typeof body.shardKey === "string" ? body.shardKey.trim() : "";
   if (!table || !shardKey) {
     return {
       kind: "error",
-      response: jsonResponse(400, { error: { code: "BAD_REQUEST", message: "table and shardKey required" } })
+      response: jsonResponse({ error: { code: "BAD_REQUEST", message: "table and shardKey required" } }, 400)
     };
   }
   return { kind: "ok", value: { shardKey, table } };
@@ -56,7 +54,7 @@ class ShardRegistryDO {
     if (request.method === "GET" && url.pathname === "/snapshot") {
       return this.handleSnapshot();
     }
-    return jsonResponse(404, { error: { code: "NOT_FOUND", message: `unknown shard-registry route ${request.method} ${url.pathname}` } });
+    return jsonResponse({ error: { code: "NOT_FOUND", message: `unknown shard-registry route ${request.method} ${url.pathname}` } }, 404);
   }
   /**
    * Load the persisted snapshot exactly once. `blockConcurrencyWhile`
@@ -83,9 +81,9 @@ class ShardRegistryDO {
   handleList(url) {
     const table = url.searchParams.get("table");
     if (!table) {
-      return jsonResponse(400, { error: { code: "BAD_REQUEST", message: "missing required query parameter: table" } });
+      return jsonResponse({ error: { code: "BAD_REQUEST", message: "missing required query parameter: table" } }, 400);
     }
-    return jsonResponse(200, { shardKeys: [...this.tables.get(table) ?? []] });
+    return jsonResponse({ shardKeys: [...this.tables.get(table) ?? []] }, 200);
   }
   async handleRegister(request) {
     const parsed = await readTableShardBody(request);
@@ -100,11 +98,11 @@ class ShardRegistryDO {
         this.tables.set(table, set);
       }
       if (set.has(shardKey)) {
-        return jsonResponse(200, { changed: false, ok: true });
+        return jsonResponse({ changed: false, ok: true }, 200);
       }
       set.add(shardKey);
       await this.persist();
-      return jsonResponse(200, { changed: true, ok: true });
+      return jsonResponse({ changed: true, ok: true }, 200);
     });
   }
   handleSnapshot() {
@@ -112,7 +110,7 @@ class ShardRegistryDO {
     for (const [table, set] of this.tables) {
       out[table] = [...set];
     }
-    return jsonResponse(200, { tables: out });
+    return jsonResponse({ tables: out }, 200);
   }
   async handleUnregister(request) {
     const parsed = await readTableShardBody(request);
@@ -123,14 +121,14 @@ class ShardRegistryDO {
     return this.state.blockConcurrencyWhile(async () => {
       const set = this.tables.get(table);
       if (!set?.has(shardKey)) {
-        return jsonResponse(200, { changed: false, ok: true });
+        return jsonResponse({ changed: false, ok: true }, 200);
       }
       set.delete(shardKey);
       if (set.size === 0) {
         this.tables.delete(table);
       }
       await this.persist();
-      return jsonResponse(200, { changed: true, ok: true });
+      return jsonResponse({ changed: true, ok: true }, 200);
     });
   }
   /** Serialize the in-memory map to a single JSON-safe object and put. */

package/dist/packem_shared/{exportShardRows-DZEhUeyI.mjs → exportShardRows-Dy3oFZ26.mjs}

@@ -1,3 +1,5 @@
+import { toErrorBody } from '@lunora/errors';
+
 const DEFAULT_BATCH_SIZE = 200;
 const selectExportTables = (schema, requested) => {
   const isShardLocal = (table) => {
@@ -107,9 +109,8 @@ const importOneRow = async (writer, schema, row, line) => {
     await writer.insert(table, doc, { allowExplicitId: true });
     return { kind: "inserted", table };
   } catch (error) {
-    const code = error.code ?? "INSERT_FAILED";
-    const message = error instanceof Error ? error.message : String(error);
-    return { error: { code, line, message, table }, kind: "error" };
+    const { body } = toErrorBody(error, { fallbackCode: "INSERT_FAILED" });
+    return { error: { code: body.code, line, message: body.message, table }, kind: "error" };
   }
 };
 const importShardRows = async (writer, schema, args) => {

package/dist/packem_shared/json-response-BdbtpOhm.mjs

@@ -0,0 +1,3 @@
+const jsonResponse = (body, status = 200, headers) => Response.json(body, { headers: { "content-type": "application/json", ...headers }, status });
+
+export { jsonResponse as j };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/do",
-  "version": "1.0.0-alpha.23",
+  "version": "1.0.0-alpha.24",
   "description": "Lunora Durable Objects: ShardDO (SQLite, OCC, hibernated WebSocket subscriptions) and SessionDO",
   "keywords": [
     "cloudflare",
@@ -46,7 +46,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/errors": "1.0.0-alpha.1",
+    "@lunora/errors": "1.0.0-alpha.2",
     "@visulima/redact": "3.0.0-alpha.14",
     "drizzle-orm": "^0.45.2"
   },