@lunora/do 1.0.0-alpha.24 → 1.0.0-alpha.26

package/dist/index.d.mts

@@ -1679,6 +1679,18 @@ interface DatabaseWriterLike {
   }, expectedTable?: string) => Promise<{
     deleted: number;
   }>;
+  /**
+  * Delete every row matching `where` in one call. Matching rows are resolved
+  * first, then each row is deleted through the single-row delete pipeline so
+  * companions, CDC, and broadcast stay correct. **Atomic within a mutation** —
+  * the DO wraps a mutation's dispatch in a BEGIN/COMMIT span, so a mid-batch
+  * throw rolls the whole mutation back. (An action has no transaction span.)
+  */
+  deleteWhere?: (tableName: string, where: WhereInput, options?: {
+    limit?: number;
+  }) => Promise<{
+    deleted: number;
+  }>;
   findFirst: (tableName: string, args?: QueryArgs) => Promise<Record<string, unknown> | null>;
   findFirstOrThrow: (tableName: string, args?: QueryArgs) => Promise<Record<string, unknown>>;
   findMany: (tableName: string, args?: QueryArgs) => Promise<QueryPage>;
@@ -1714,11 +1726,13 @@ interface DatabaseWriterLike {
   * Insert many documents into one table (a loop over `insert()`),
   * returning the minted ids in input order. Each row gets defaults,
   * validators, triggers, companion sync, CDC, and broadcast exactly as a
-  * single insert; the caller pays one round-trip instead of N. **Atomic within
-  * a mutation** — the DO wraps a mutation's dispatch in a BEGIN/COMMIT span, so
-  * a mid-batch throw rolls the whole mutation back. (An action has no
-  * transaction span — there, the prior inserts persist; the in-memory test
-  * harness mirrors the span.)
+  * single insert; the caller pays one round-trip instead of N. Pass
+  * `options.skipDuplicates: true` to turn UNIQUE-constraint breaches into
+  * `null` results for that row instead of failing the whole batch.
+  * **Atomic within a mutation** — the DO wraps a mutation's dispatch in a
+  * BEGIN/COMMIT span, so a mid-batch throw rolls the whole mutation back. (An
+  * action has no transaction span — there, the prior inserts persist; the
+  * in-memory test harness mirrors the span.)
   * Rejects a batch larger than `options.limit` (default {@link DEFAULT_BATCH_LIMIT}).
   *
   * Optional on the interface (like `rankBefore`): the DO writer implements it;
@@ -1728,7 +1742,8 @@ interface DatabaseWriterLike {
   */
   insertMany?: (tableName: string, documents: ReadonlyArray<Record<string, unknown>>, options?: {
     limit?: number;
-  }) => Promise<string[]>;
+    skipDuplicates?: boolean;
+  }) => Promise<(string | null)[]>;
   /**
   * Trusted bulk insert: one multi-row `INSERT` that **skips per-row `.check()`
   * validators and before/after triggers** for throughput on data the caller
@@ -1783,7 +1798,25 @@ interface DatabaseWriterLike {
     patch: Record<string, unknown>;
   }>, options?: {
     limit?: number;
-  }, expectedTable?: string) => Promise<void>;
+  }, expectedTable?: string) => Promise<{
+    patched: number;
+  }>;
+  /**
+  * Patch every row matching `where` with the same `patch` in one call.
+  * Matching rows are resolved first, then each row is patched through the
+  * single-row patch pipeline so companions, CDC, and broadcast stay correct.
+  * **Atomic within a mutation** — the DO wraps a mutation's dispatch in a
+  * BEGIN/COMMIT span, so a mid-batch throw rolls the whole mutation back. (An
+  * action has no transaction span.)
+  */
+  patchWhere?: (tableName: string, args: {
+    patch: Record<string, unknown>;
+    where: WhereInput;
+  }, options?: {
+    limit?: number;
+  }) => Promise<{
+    patched: number;
+  }>;
   query: (tableName: string) => TableReaderLike;
   /**
   * Return the 1-based position of `options.row` within its partition under

package/dist/index.d.ts

@@ -1679,6 +1679,18 @@ interface DatabaseWriterLike {
   }, expectedTable?: string) => Promise<{
     deleted: number;
   }>;
+  /**
+  * Delete every row matching `where` in one call. Matching rows are resolved
+  * first, then each row is deleted through the single-row delete pipeline so
+  * companions, CDC, and broadcast stay correct. **Atomic within a mutation** —
+  * the DO wraps a mutation's dispatch in a BEGIN/COMMIT span, so a mid-batch
+  * throw rolls the whole mutation back. (An action has no transaction span.)
+  */
+  deleteWhere?: (tableName: string, where: WhereInput, options?: {
+    limit?: number;
+  }) => Promise<{
+    deleted: number;
+  }>;
   findFirst: (tableName: string, args?: QueryArgs) => Promise<Record<string, unknown> | null>;
   findFirstOrThrow: (tableName: string, args?: QueryArgs) => Promise<Record<string, unknown>>;
   findMany: (tableName: string, args?: QueryArgs) => Promise<QueryPage>;
@@ -1714,11 +1726,13 @@ interface DatabaseWriterLike {
   * Insert many documents into one table (a loop over `insert()`),
   * returning the minted ids in input order. Each row gets defaults,
   * validators, triggers, companion sync, CDC, and broadcast exactly as a
-  * single insert; the caller pays one round-trip instead of N. **Atomic within
-  * a mutation** — the DO wraps a mutation's dispatch in a BEGIN/COMMIT span, so
-  * a mid-batch throw rolls the whole mutation back. (An action has no
-  * transaction span — there, the prior inserts persist; the in-memory test
-  * harness mirrors the span.)
+  * single insert; the caller pays one round-trip instead of N. Pass
+  * `options.skipDuplicates: true` to turn UNIQUE-constraint breaches into
+  * `null` results for that row instead of failing the whole batch.
+  * **Atomic within a mutation** — the DO wraps a mutation's dispatch in a
+  * BEGIN/COMMIT span, so a mid-batch throw rolls the whole mutation back. (An
+  * action has no transaction span — there, the prior inserts persist; the
+  * in-memory test harness mirrors the span.)
   * Rejects a batch larger than `options.limit` (default {@link DEFAULT_BATCH_LIMIT}).
   *
   * Optional on the interface (like `rankBefore`): the DO writer implements it;
@@ -1728,7 +1742,8 @@ interface DatabaseWriterLike {
   */
   insertMany?: (tableName: string, documents: ReadonlyArray<Record<string, unknown>>, options?: {
     limit?: number;
-  }) => Promise<string[]>;
+    skipDuplicates?: boolean;
+  }) => Promise<(string | null)[]>;
   /**
   * Trusted bulk insert: one multi-row `INSERT` that **skips per-row `.check()`
   * validators and before/after triggers** for throughput on data the caller
@@ -1783,7 +1798,25 @@ interface DatabaseWriterLike {
     patch: Record<string, unknown>;
   }>, options?: {
     limit?: number;
-  }, expectedTable?: string) => Promise<void>;
+  }, expectedTable?: string) => Promise<{
+    patched: number;
+  }>;
+  /**
+  * Patch every row matching `where` with the same `patch` in one call.
+  * Matching rows are resolved first, then each row is patched through the
+  * single-row patch pipeline so companions, CDC, and broadcast stay correct.
+  * **Atomic within a mutation** — the DO wraps a mutation's dispatch in a
+  * BEGIN/COMMIT span, so a mid-batch throw rolls the whole mutation back. (An
+  * action has no transaction span.)
+  */
+  patchWhere?: (tableName: string, args: {
+    patch: Record<string, unknown>;
+    where: WhereInput;
+  }, options?: {
+    limit?: number;
+  }) => Promise<{
+    patched: number;
+  }>;
   query: (tableName: string) => TableReaderLike;
   /**
   * Return the 1-based position of `options.row` within its partition under

package/dist/index.mjs

@@ -3,7 +3,7 @@ export { AGGREGATE_SQL_FUNCTION, aggregateSqlFunction, matchesStaticWhere, norma
 export { aggregateTableName, coerceAggregateNumber, encodeAggregateKey, foldAggregateTally, readAggregateValue } from './packem_shared/aggregateTableName-CxNqY1Sl.mjs';
 export { CountRlsUnsupportedError, mergeWhere, planAggregateLookup, selectIndexForAggregate, selectIndexForCount, selectIndexForGroupBy } from './packem_shared/CountRlsUnsupportedError-BGxj0pgS.mjs';
 export { AUTH_METRICS_BUCKETS_TABLE, AUTH_METRICS_BUCKET_MS, AUTH_METRICS_BUCKET_RETENTION, AUTH_METRICS_TABLE, ensureAuthMetricsTables, readAuthMetrics, recordAuthEvent } from './packem_shared/AUTH_METRICS_BUCKETS_TABLE-CiHHYeJi.mjs';
-export { NotUniqueError, assertValidClientId, createShardCtxDb, normalizeIdStructurally } from './packem_shared/NotUniqueError-D1U5SBFR.mjs';
+export { NotUniqueError, assertValidClientId, createShardCtxDb, normalizeIdStructurally } from './packem_shared/NotUniqueError-BdDLev9w.mjs';
 export { DATA_MIGRATION_STATE_TABLE, readMigrationStatus, runDataMigration } from './packem_shared/DATA_MIGRATION_STATE_TABLE-DB3IYUR3.mjs';
 export { SCAN_DEP, createDependencyTracker, depKey } from './packem_shared/SCAN_DEP-DLJF8dsj.mjs';
 export { renderSql } from './packem_shared/renderSql-D6eUcn2N.mjs';
@@ -11,24 +11,24 @@ export { diffExternalSource } from './packem_shared/diffExternalSource-Cx9HUPJj.
 export { materializeExternalRows, readExternalSourceBaseline, runExternalSourceTick } from './packem_shared/materializeExternalRows-DNcvoLRT.mjs';
 export { isSourceDue, liftSourceId, pullExternalSourceTick } from './packem_shared/isSourceDue-BptUN8CR.mjs';
 export { FUNCTION_METRICS_BUCKETS_TABLE, FUNCTION_METRICS_BUCKET_MS, FUNCTION_METRICS_BUCKET_RETENTION, FUNCTION_METRICS_INDEX_TABLE, FUNCTION_METRICS_TABLE, ensureFunctionMetricsTables, readFunctionMetricBuckets, readFunctionMetricIndexHits, readFunctionMetrics, readFunctionMetricsTotals, recordFunctionMetric } from './packem_shared/FUNCTION_METRICS_BUCKETS_TABLE-UDNVD7FS.mjs';
-export { ADMIN_FUNCTIONS, ADMIN_FUNCTION_PREFIX, FLAGS_FUNCTION_PREFIX, RELATION_FUNCTION_PREFIX, facetColumn, listTables, readTablePage, selectMatchingIds } from './packem_shared/ADMIN_FUNCTIONS-BbQdj8h1.mjs';
+export { ADMIN_FUNCTIONS, ADMIN_FUNCTION_PREFIX, FLAGS_FUNCTION_PREFIX, RELATION_FUNCTION_PREFIX, facetColumn, listTables, readTablePage, selectMatchingIds } from './packem_shared/ADMIN_FUNCTIONS-Bxdijn66.mjs';
 export { LogBuffer } from './packem_shared/LogBuffer-B_Ezju_N.mjs';
 export { MAIL_RETENTION, MAIL_TABLE, clearCapturedMail, ensureMailTable, readCapturedMail, recordCapturedMail } from './packem_shared/MAIL_RETENTION-CPpgl-dX.mjs';
 export { default as NotFoundError } from './packem_shared/NotFoundError-C70b9hLw.mjs';
-export { armRestore, readBookmark } from './packem_shared/armRestore-BJk53Ro8.mjs';
-export { applySelect, buildSeekWhere, decodeCursor, encodeCursor, normalizeOrderKeys, softDeleteScope } from './packem_shared/applySelect-BvZdFUBT.mjs';
+export { armRestore, readBookmark } from './packem_shared/armRestore-4Px61hHS.mjs';
+export { applySelect, buildSeekWhere, decodeCursor, encodeCursor, normalizeOrderKeys, softDeleteScope } from './packem_shared/applySelect-WQY8m62C.mjs';
 export { RANK_TIEBREAK, encodePartitionKey, matchesRankStaticWhere, rankTableName, resolveRankPartition, sortColumnName } from './packem_shared/RANK_TIEBREAK-CXhdcA1o.mjs';
 export { ReactiveCache, reactiveCacheKey } from './packem_shared/ReactiveCache-BYlSGY0N.mjs';
-export { serveRelationFanout } from './packem_shared/serveRelationFanout-BhZF9AuB.mjs';
-export { DEFAULT_MAX_RELATION_KEYS, assertFlatPredicate, assertShapeShardable, containsRelationPredicate, isRelationPredicate, resolveRelationPredicates } from './packem_shared/DEFAULT_MAX_RELATION_KEYS-CjM9Y1_G.mjs';
-export { applyOnDelete, fanOutScalarCounts, resolveWith, runRowValidators } from './packem_shared/applyOnDelete-CAwZfp-5.mjs';
-export { RLS_UNWRAP_SYMBOL, RlsRequiredError, guardWriter } from './packem_shared/RLS_UNWRAP_SYMBOL-DnjkqVgY.mjs';
+export { serveRelationFanout } from './packem_shared/serveRelationFanout-C56hKu1O.mjs';
+export { DEFAULT_MAX_RELATION_KEYS, assertFlatPredicate, assertShapeShardable, containsRelationPredicate, isRelationPredicate, resolveRelationPredicates } from './packem_shared/DEFAULT_MAX_RELATION_KEYS-BEan1CRD.mjs';
+export { applyOnDelete, fanOutScalarCounts, resolveWith, runRowValidators } from './packem_shared/applyOnDelete-BXSq3S70.mjs';
+export { RLS_UNWRAP_SYMBOL, RlsRequiredError, guardWriter } from './packem_shared/RLS_UNWRAP_SYMBOL-G1eNK4DQ.mjs';
 export { buildFtsMatch, ftsTableName, scoreDocument, stringifySearchText, tokenizeSearch } from './packem_shared/buildFtsMatch-BLEMawrp.mjs';
 export { M as MIN_ADMIN_TOKEN_LENGTH, a as MIN_AUTH_SECRET_LENGTH, b as buildSecurityAudit } from './packem_shared/security-audit-CucgBice.mjs';
 export { SESSION_DO_TTL_DEFAULT, SessionDO } from './packem_shared/SESSION_DO_TTL_DEFAULT-D71QAL5h.mjs';
-export { ROOT_DO_SIZE_WARN_BYTES, ROOT_SHARD_NAME, ShardDO } from './packem_shared/ROOT_DO_SIZE_WARN_BYTES-KQQiPDQ3.mjs';
+export { ROOT_DO_SIZE_WARN_BYTES, ROOT_SHARD_NAME, ShardDO } from './packem_shared/ROOT_DO_SIZE_WARN_BYTES-CpURtawE.mjs';
 export { SHARD_REGISTRY_DO_NAME, ShardRegistryDO } from './packem_shared/SHARD_REGISTRY_DO_NAME-D99roc-r.mjs';
-export { MAX_SQL_ROWS, assertReadonly, runReadonlySql } from './packem_shared/MAX_SQL_ROWS-dDcFE1YZ.mjs';
+export { MAX_SQL_ROWS, assertReadonly, runReadonlySql } from './packem_shared/MAX_SQL_ROWS-D57CJaT9.mjs';
 export { createSystemReader } from './packem_shared/createSystemReader-D12eNH13.mjs';
 export { ConflictError } from './packem_shared/ConflictError-CLoq37xH.mjs';
 export { hasTrigger, runTriggers } from './packem_shared/hasTrigger-5N6_Fx0A.mjs';

package/dist/packem_shared/{ADMIN_FUNCTIONS-BbQdj8h1.mjs → ADMIN_FUNCTIONS-Bxdijn66.mjs}

@@ -1,3 +1,5 @@
+import { LunoraError } from '@lunora/errors';
+
 const quoteIdentifier = (name) => `"${name.replaceAll('"', '""')}"`;
 
 const ADMIN_FUNCTION_PREFIX = "__lunora_admin__:";
@@ -179,7 +181,7 @@ const buildOrderBy = (orderBy, physicalColumns) => {
 const readTablePage = (sql, options) => {
   const { table } = options;
   if (isInternalTable(table) || !tableExists(sql, table)) {
-    throw Object.assign(new Error(`unknown table: ${table}`), { code: "UNKNOWN_TABLE", name: "LunoraError", status: 404 });
+    throw new LunoraError("UNKNOWN_TABLE", `unknown table: ${table}`, { status: 404 });
   }
   const limit = clamp(Math.trunc(options.limit ?? DEFAULT_PAGE_SIZE), 1, MAX_PAGE_SIZE);
   const offset = Math.max(0, Math.trunc(options.offset ?? 0));
@@ -215,7 +217,7 @@ const readTablePage = (sql, options) => {
 const selectMatchingIds = (sql, options) => {
   const { table } = options;
   if (isInternalTable(table) || !tableExists(sql, table)) {
-    throw Object.assign(new Error(`unknown table: ${table}`), { code: "UNKNOWN_TABLE", name: "LunoraError", status: 404 });
+    throw new LunoraError("UNKNOWN_TABLE", `unknown table: ${table}`, { status: 404 });
   }
   const limit = clamp(Math.trunc(options.limit ?? MAX_PAGE_SIZE), 1, MAX_PAGE_SIZE);
   const quoted = quoteIdentifier(table);
@@ -246,16 +248,16 @@ const knownDisplayColumns = (sql, quotedTable, physicalColumns) => {
 const facetColumn = (sql, options) => {
   const { column, table } = options;
   if (isInternalTable(table) || !tableExists(sql, table)) {
-    throw Object.assign(new Error(`unknown table: ${table}`), { code: "UNKNOWN_TABLE", name: "LunoraError", status: 404 });
+    throw new LunoraError("UNKNOWN_TABLE", `unknown table: ${table}`, { status: 404 });
   }
   const quoted = quoteIdentifier(table);
   const physicalColumns = sql.exec(`PRAGMA table_info(${quoted})`).toArray().map((info) => info.name);
   if (!knownDisplayColumns(sql, quoted, physicalColumns).has(column)) {
-    throw Object.assign(new Error(`unknown column: ${column}`), { code: "UNKNOWN_COLUMN", name: "LunoraError", status: 404 });
+    throw new LunoraError("UNKNOWN_COLUMN", `unknown column: ${column}`, { status: 404 });
   }
   const resolved = resolveColumnExpression(column, physicalColumns);
   if (resolved === void 0) {
-    throw Object.assign(new Error(`unknown column: ${column}`), { code: "UNKNOWN_COLUMN", name: "LunoraError", status: 404 });
+    throw new LunoraError("UNKNOWN_COLUMN", `unknown column: ${column}`, { status: 404 });
   }
   const limit = clamp(Math.trunc(options.limit ?? DEFAULT_FACET_LIMIT), 1, MAX_FACET_LIMIT);
   const needle = options.search?.trim() ?? "";

package/dist/packem_shared/{DEFAULT_MAX_RELATION_KEYS-CjM9Y1_G.mjs → DEFAULT_MAX_RELATION_KEYS-BEan1CRD.mjs}

@@ -1,5 +1,5 @@
 import { LunoraError } from '@lunora/errors';
-import { distinctValues } from './applyOnDelete-CAwZfp-5.mjs';
+import { distinctValues } from './applyOnDelete-BXSq3S70.mjs';
 
 const RELATION_EXISTS_KEY = "__relationExists";
 

package/dist/packem_shared/{MAX_SQL_ROWS-dDcFE1YZ.mjs → MAX_SQL_ROWS-D57CJaT9.mjs}

@@ -1,10 +1,12 @@
+import { LunoraError } from '@lunora/errors';
+
 const MAX_SQL_ROWS = 1e3;
 const READONLY_LEAD = /^(?:explain\s+(?:query\s+plan\s+)?)?(?:select|with)\b/iu;
 const FORBIDDEN_KEYWORD = /\b(?:alter|attach|create|delete|detach|drop|insert|pragma|reindex|replace|truncate|update|vacuum)\b/iu;
 const LEADING_NOISE = /^(?:\s|--[^\n]*\n?|\/\*[\s\S]*?\*\/)+/u;
 const TRAILING_SEMICOLON = /;\s*$/u;
 const stripLeading = (sql) => sql.replace(LEADING_NOISE, "");
-const sqlError = (message, code) => Object.assign(new Error(message), { code, name: "LunoraError", status: 400 });
+const sqlError = (message, code) => new LunoraError(code, message, { status: 400 });
 const assertReadonly = (query) => {
   const trimmed = stripLeading(query).trim();
   if (trimmed === "") {

package/dist/packem_shared/{NotUniqueError-D1U5SBFR.mjs → NotUniqueError-BdDLev9w.mjs}

@@ -12,11 +12,11 @@ import { sortColumnName, matchesRankStaticWhere, encodePartitionKey, rankTableNa
 import { stringifySearchText, ftsTableName, tokenizeSearch, buildFtsMatch, scoreDocument } from './buildFtsMatch-BLEMawrp.mjs';
 import { s as serializeSqlValue } from './serialize-sql-BlRUoiQe.mjs';
 import { SCAN_DEP } from './SCAN_DEP-DLJF8dsj.mjs';
-import { decodeCursor, normalizeOrderKeys, buildSeekWhere, applySelect, encodeCursor, softDeleteScope, buildSeekBeforeWhere } from './applySelect-BvZdFUBT.mjs';
+import { decodeCursor, normalizeOrderKeys, buildSeekWhere, applySelect, encodeCursor, softDeleteScope, buildSeekBeforeWhere } from './applySelect-WQY8m62C.mjs';
 import NotFoundError from './NotFoundError-C70b9hLw.mjs';
-import { assertFlatPredicate, resolveRelationPredicates } from './DEFAULT_MAX_RELATION_KEYS-CjM9Y1_G.mjs';
-import { runRowValidators, resolveWith, applyOnDelete, fanOutScalarCounts } from './applyOnDelete-CAwZfp-5.mjs';
-import { guardWriter } from './RLS_UNWRAP_SYMBOL-DnjkqVgY.mjs';
+import { assertFlatPredicate, resolveRelationPredicates } from './DEFAULT_MAX_RELATION_KEYS-BEan1CRD.mjs';
+import { runRowValidators, resolveWith, applyOnDelete, fanOutScalarCounts } from './applyOnDelete-BXSq3S70.mjs';
+import { guardWriter } from './RLS_UNWRAP_SYMBOL-G1eNK4DQ.mjs';
 import { createSystemReader } from './createSystemReader-D12eNH13.mjs';
 import { ConflictError } from './ConflictError-CLoq37xH.mjs';
 import { runTriggers } from './hasTrigger-5N6_Fx0A.mjs';
@@ -483,11 +483,11 @@ const DEFAULT_BATCH_LIMIT = 500;
 const assertBatchLimit = (count, limit, op) => {
   const cap = limit ?? DEFAULT_BATCH_LIMIT;
   if (count > cap) {
-    throw Object.assign(new Error(`${op}: batch of ${String(count)} exceeds the limit of ${String(cap)} (raise options.limit or chunk the call)`), {
-      code: "BATCH_LIMIT_EXCEEDED",
-      name: "LunoraError",
-      status: 400
-    });
+    throw new LunoraError(
+      "BATCH_LIMIT_EXCEEDED",
+      `${op}: batch of ${String(count)} exceeds the limit of ${String(cap)} (raise options.limit or chunk the call)`,
+      { status: 400 }
+    );
   }
 };
 const createRangeBuilder = (stage) => {
@@ -1325,6 +1325,25 @@ const createShardCtxDb = (options) => {
       }
       return { deleted: ids.length };
     },
+    async deleteWhere(tableName, where, batchOptions) {
+      const global = globalWriterFor(tableName, "deleteWhere");
+      let ids;
+      if (global) {
+        const rows = await global.findMany(tableName, { where });
+        ids = rows.page.map((row) => String(row["_id"]));
+      } else {
+        if (!schema.tables[tableName]) {
+          throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
+        }
+        const page = await writer.findMany(tableName, { where });
+        ids = page.page.map((row) => String(row["_id"]));
+      }
+      assertBatchLimit(ids.length, batchOptions?.limit, "deleteWhere");
+      if (writer.deleteMany === void 0) {
+        throw new LunoraError("INTERNAL", `ctx.db.${tableName}.deleteMany is unavailable: this writer has no batch delete`);
+      }
+      return writer.deleteMany(ids, batchOptions);
+    },
     async findFirst(tableName, args = {}) {
       const result = await writer.findMany(tableName, { ...args, limit: 1 });
       return result.page[0] ?? null;
@@ -1614,9 +1633,18 @@ const createShardCtxDb = (options) => {
     },
     async insertMany(tableName, documents, batchOptions) {
       assertBatchLimit(documents.length, batchOptions?.limit, "insertMany");
+      const skipDuplicates = batchOptions?.skipDuplicates === true;
       const ids = [];
       for (const document of documents) {
-        ids.push(await writer.insert(tableName, document));
+        try {
+          ids.push(await writer.insert(tableName, document));
+        } catch (error) {
+          if (skipDuplicates && error instanceof ConflictError && error.kind === "unique") {
+            ids.push(null);
+          } else {
+            throw error;
+          }
+        }
       }
       return ids;
     },
@@ -1669,6 +1697,31 @@ const createShardCtxDb = (options) => {
       for (const entry of patches) {
         await writer.patch(entry.id, entry.patch, expectedTable);
       }
+      return { patched: patches.length };
+    },
+    async patchWhere(tableName, args, batchOptions) {
+      const global = globalWriterFor(tableName, "patchWhere");
+      let patches;
+      if (global) {
+        const rows = await global.findMany(tableName, { where: args.where });
+        patches = rows.page.map((row) => {
+          return { id: String(row["_id"]), patch: args.patch };
+        });
+      } else {
+        if (!schema.tables[tableName]) {
+          throw new LunoraError("INTERNAL", `unknown table: ${tableName}`);
+        }
+        const page = await writer.findMany(tableName, { where: args.where });
+        patches = page.page.map((row) => {
+          return { id: String(row["_id"]), patch: args.patch };
+        });
+      }
+      assertBatchLimit(patches.length, batchOptions?.limit, "patchWhere");
+      if (writer.patchMany === void 0) {
+        throw new LunoraError("INTERNAL", `ctx.db.${tableName}.patchMany is unavailable: this writer has no batch patch`);
+      }
+      await writer.patchMany(patches, batchOptions);
+      return { patched: patches.length };
     },
     query(tableName) {
       const global = globalWriterFor(tableName, "query");

package/dist/packem_shared/{RLS_UNWRAP_SYMBOL-DnjkqVgY.mjs → RLS_UNWRAP_SYMBOL-G1eNK4DQ.mjs}

@@ -58,6 +58,10 @@ const guardWriter = (raw, schema, tableOfId) => {
       }
       return base.deleteMany(ids, options, expectedTable);
     },
+    deleteWhere: base.deleteWhere ? async (tableName, where, options) => {
+      guardTable(tableName);
+      return await base.deleteWhere?.(tableName, where, options);
+    } : void 0,
     findFirst: (tableName, args) => {
       guardTable(tableName);
       return base.findFirst(tableName, args);
@@ -100,6 +104,10 @@ const guardWriter = (raw, schema, tableOfId) => {
       }
       return base.patchMany(patches, options, expectedTable);
     },
+    patchWhere: base.patchWhere ? async (tableName, args, options) => {
+      guardTable(tableName);
+      return await base.patchWhere?.(tableName, args, options);
+    } : void 0,
     query: (tableName) => {
       guardTable(tableName);
       return base.query(tableName);

package/dist/packem_shared/{ROOT_DO_SIZE_WARN_BYTES-KQQiPDQ3.mjs → ROOT_DO_SIZE_WARN_BYTES-CpURtawE.mjs}

@@ -7,15 +7,15 @@ import { recordAuthEvent, readAuthMetrics } from './AUTH_METRICS_BUCKETS_TABLE-C
 import { DATA_MIGRATION_STATE_TABLE, readMigrationStatus } from './DATA_MIGRATION_STATE_TABLE-DB3IYUR3.mjs';
 import { SCAN_DEP, createDependencyTracker, tableFromDepKey } from './SCAN_DEP-DLJF8dsj.mjs';
 import { readFunctionMetricsTotals, readFunctionMetricIndexHits, recordFunctionMetric, mergeScanAttribution, readFunctionMetrics, readFunctionMetricBuckets } from './FUNCTION_METRICS_BUCKETS_TABLE-UDNVD7FS.mjs';
-import { createFanoutCounters, ADMIN_FUNCTION_PREFIX, RELATION_FUNCTION_PREFIX, selectMatchingIds, ADMIN_FUNCTIONS, findStorageReferences, listTables, summarizeSubscriptions, summarizeFanoutTopics, readTablePage, facetColumn, FLAGS_FUNCTION_PREFIX, recordFanoutPass, MAX_PAGE_SIZE } from './ADMIN_FUNCTIONS-BbQdj8h1.mjs';
+import { createFanoutCounters, ADMIN_FUNCTION_PREFIX, RELATION_FUNCTION_PREFIX, selectMatchingIds, ADMIN_FUNCTIONS, findStorageReferences, listTables, summarizeSubscriptions, summarizeFanoutTopics, readTablePage, facetColumn, FLAGS_FUNCTION_PREFIX, recordFanoutPass, MAX_PAGE_SIZE } from './ADMIN_FUNCTIONS-Bxdijn66.mjs';
 import { LogBuffer } from './LogBuffer-B_Ezju_N.mjs';
 import { recordCapturedMail, clearCapturedMail, readCapturedMail, MAIL_TABLE } from './MAIL_RETENTION-CPpgl-dX.mjs';
-import { readBookmark, armRestore } from './armRestore-BJk53Ro8.mjs';
+import { readBookmark, armRestore } from './armRestore-4Px61hHS.mjs';
 import { ReactiveCache, reactiveCacheKey } from './ReactiveCache-BYlSGY0N.mjs';
 import { stableStringify } from './stableStringify-MydiuScU.mjs';
 import { redact, standardRules } from '@visulima/redact';
 import { i as isDevEnvironment, c as buildSettings, b as buildSecurityAudit } from './security-audit-CucgBice.mjs';
-import { runReadonlySql } from './MAX_SQL_ROWS-dDcFE1YZ.mjs';
+import { runReadonlySql } from './MAX_SQL_ROWS-D57CJaT9.mjs';
 import { ConflictError } from './ConflictError-CLoq37xH.mjs';
 import { e as deleteGlobalShapeSnapshotsForConnection, g as readIdempotent, h as writeIdempotent, t as trimIdempotent, r as readClientWatermark, m as migrateClientWatermark, c as advanceClientWatermark, d as deleteGlobalShapeSnapshot, f as readGlobalShapeSnapshot, w as writeGlobalShapeSnapshot } from './ctx-db-idempotency-BdcNpvY4.mjs';
 import { CDC_LOG_TABLE, readCdcChanges, readCdcCursor, readCdcEpoch, minCdcSeq, bumpCdcEpoch } from './CDC_LOG_TABLE-DZSVKRr7.mjs';
@@ -1404,7 +1404,7 @@ const setsIntersect = (a, b) => {
 const parseRunMigrationArgs = (args) => {
   const id = typeof args["id"] === "string" ? args["id"] : "";
   if (id.trim() === "") {
-    throw Object.assign(new Error("runMigration: `id` is required"), { code: "MIGRATION_ID_REQUIRED", name: "LunoraError", status: 400 });
+    throw new LunoraError("MIGRATION_ID_REQUIRED", "runMigration: `id` is required", { status: 400 });
   }
   return {
     batchSize: typeof args["batchSize"] === "number" ? args["batchSize"] : void 0,
@@ -1419,25 +1419,25 @@ const parseWriteRowArgs = (args) => {
   const { op } = args;
   const table = typeof args["table"] === "string" ? args["table"] : "";
   if (op !== "insert" && op !== "patch" && op !== "replace" && op !== "delete") {
-    throw Object.assign(new Error("writeRow: `op` must be insert|patch|replace|delete"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "writeRow: `op` must be insert|patch|replace|delete");
   }
   if (table.trim() === "") {
-    throw Object.assign(new Error("writeRow: `table` is required"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "writeRow: `table` is required");
   }
   const id = typeof args["id"] === "string" ? args["id"] : void 0;
   const record = typeof args["doc"] === "object" && args["doc"] !== null && !Array.isArray(args["doc"]) ? args["doc"] : void 0;
   if (op !== "insert" && (id === void 0 || id === "")) {
-    throw Object.assign(new Error(`writeRow: \`id\` is required for op "${op}"`), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", `writeRow: \`id\` is required for op "${op}"`);
   }
   if (op !== "delete" && record === void 0) {
-    throw Object.assign(new Error(`writeRow: \`doc\` is required for op "${op}"`), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", `writeRow: \`doc\` is required for op "${op}"`);
   }
   return { doc: record, id, op, table };
 };
 const parseCreateWorkflowInstanceArgs = (args) => {
   const exportName = typeof args["exportName"] === "string" ? args["exportName"].trim() : "";
   if (exportName === "") {
-    throw Object.assign(new Error("createWorkflowInstance: `exportName` is required"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "createWorkflowInstance: `exportName` is required");
   }
   const id = typeof args["id"] === "string" && args["id"] !== "" ? args["id"] : void 0;
   return { exportName, id, params: args["params"] };
@@ -1446,10 +1446,10 @@ const parseGetWorkflowInstanceStatusArgs = (args) => {
   const exportName = typeof args["exportName"] === "string" ? args["exportName"].trim() : "";
   const id = typeof args["id"] === "string" ? args["id"].trim() : "";
   if (exportName === "") {
-    throw Object.assign(new Error("getWorkflowInstanceStatus: `exportName` is required"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "getWorkflowInstanceStatus: `exportName` is required");
   }
   if (id === "") {
-    throw Object.assign(new Error("getWorkflowInstanceStatus: `id` is required"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "getWorkflowInstanceStatus: `id` is required");
   }
   return { exportName, id };
 };
@@ -1504,7 +1504,7 @@ const parseTablePageOrderBy = (raw) => {
 const parseBulkDeleteArgs = (args) => {
   const table = typeof args["table"] === "string" ? args["table"] : "";
   if (table.trim() === "") {
-    throw Object.assign(new Error("deleteRows: `table` is required"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "deleteRows: `table` is required");
   }
   return {
     filters: parseTablePageFilters(args["filters"]),
@@ -1516,31 +1516,27 @@ const parseBulkDeleteArgs = (args) => {
 const parseClearTableArgs = (args) => {
   const table = typeof args["table"] === "string" ? args["table"] : "";
   if (table.trim() === "") {
-    throw Object.assign(new Error("clearTable: `table` is required"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "clearTable: `table` is required");
   }
   return { limit: typeof args["limit"] === "number" ? args["limit"] : void 0, table };
 };
 const parseRecordAuthEventArgs = (args) => {
   const { outcome } = args;
   if (outcome !== "ok" && outcome !== "fail") {
-    throw Object.assign(new Error('recordAuthEvent: `outcome` must be "ok" or "fail"'), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", 'recordAuthEvent: `outcome` must be "ok" or "fail"');
   }
   return { outcome };
 };
 const parseRecordContainerEventArgs = (args) => {
   const raw = args["event"];
   if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
-    throw Object.assign(new Error("recordContainerEvent: `event` must be an object"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "recordContainerEvent: `event` must be an object");
   }
   const envelope = raw;
   const container = typeof envelope["container"] === "string" ? envelope["container"] : "";
   const event = typeof envelope["event"] === "string" ? envelope["event"] : "";
   if (container.trim() === "" || event.trim() === "") {
-    throw Object.assign(new Error("recordContainerEvent: `event.container` and `event.event` are required"), {
-      code: "BAD_REQUEST",
-      name: "LunoraError",
-      status: 400
-    });
+    throw new LunoraError("BAD_REQUEST", "recordContainerEvent: `event.container` and `event.event` are required");
   }
   const level = envelope["level"] === "error" ? "error" : "info";
   const detail = typeof envelope["message"] === "string" ? envelope["message"] : void 0;
@@ -1556,21 +1552,21 @@ const parseRunAsArgs = (args) => {
   const functionPath = typeof args["functionPath"] === "string" ? args["functionPath"] : "";
   const userId = typeof args["userId"] === "string" ? args["userId"] : "";
   if (functionPath.trim() === "") {
-    throw Object.assign(new Error("runAs: `functionPath` is required"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "runAs: `functionPath` is required");
   }
   if (functionPath.startsWith(ADMIN_FUNCTION_PREFIX)) {
-    throw Object.assign(new Error("runAs: cannot target a reserved admin function"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "runAs: cannot target a reserved admin function");
   }
   if (userId.trim() === "") {
-    throw Object.assign(new Error("runAs: `userId` is required"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "runAs: `userId` is required");
   }
   const rawArgs = args["args"];
   if (rawArgs !== void 0 && (typeof rawArgs !== "object" || rawArgs === null || Array.isArray(rawArgs))) {
-    throw Object.assign(new Error("runAs: `args` must be an object"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "runAs: `args` must be an object");
   }
   const rawIdentity = args["identity"];
   if (rawIdentity !== void 0 && (typeof rawIdentity !== "object" || rawIdentity === null || Array.isArray(rawIdentity))) {
-    throw Object.assign(new Error("runAs: `identity` must be an object"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "runAs: `identity` must be an object");
   }
   return {
     args: rawArgs === void 0 ? {} : rawArgs,
@@ -1581,7 +1577,7 @@ const parseRunAsArgs = (args) => {
 };
 const parseRecordMailArgs = (args) => {
   const bad = (message) => {
-    throw Object.assign(new Error(`recordMail: ${message}`), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", `recordMail: ${message}`);
   };
   const { bcc, cc, from, headers, html, replyTo, subject, text, to } = args;
   if (typeof subject !== "string") {
@@ -1622,7 +1618,7 @@ const TEST_MAIL_DEFAULT_TO = "test@lunora.sh";
 const buildTestMailInput = (args) => {
   const { to } = args;
   if (to !== void 0 && typeof to !== "string") {
-    throw Object.assign(new Error("sendTestMail: `to` must be a string"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "sendTestMail: `to` must be a string");
   }
   const recipient = to ?? TEST_MAIL_DEFAULT_TO;
   const link = "https://example.test/verify?token=demo";
@@ -1638,7 +1634,7 @@ Verify your email: ${link}`,
 };
 const parseRecordQueueMessageArgs = (args) => {
   const bad = (message) => {
-    throw Object.assign(new Error(`recordQueueMessage: ${message}`), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", `recordQueueMessage: ${message}`);
   };
   const raw = args["messages"];
   if (!Array.isArray(raw)) {
@@ -1680,23 +1676,15 @@ const MAX_QUEUE_SEND_BATCH = 100;
 const parseSendQueueMessageArgs = (args) => {
   const exportName = typeof args["exportName"] === "string" ? args["exportName"].trim() : "";
   if (exportName === "") {
-    throw Object.assign(new Error("sendQueueMessage: `exportName` is required"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "sendQueueMessage: `exportName` is required");
   }
   const delayRaw = args["delaySeconds"];
   if (delayRaw !== void 0 && (typeof delayRaw !== "number" || !Number.isFinite(delayRaw) || delayRaw < 0)) {
-    throw Object.assign(new Error("sendQueueMessage: `delaySeconds` must be a non-negative number"), {
-      code: "BAD_REQUEST",
-      name: "LunoraError",
-      status: 400
-    });
+    throw new LunoraError("BAD_REQUEST", "sendQueueMessage: `delaySeconds` must be a non-negative number");
   }
   const batch = Array.isArray(args["batch"]) ? args["batch"] : void 0;
   if (batch !== void 0 && (batch.length === 0 || batch.length > MAX_QUEUE_SEND_BATCH)) {
-    throw Object.assign(new Error(`sendQueueMessage: \`batch\` must contain between 1 and ${String(MAX_QUEUE_SEND_BATCH)} messages`), {
-      code: "BAD_REQUEST",
-      name: "LunoraError",
-      status: 400
-    });
+    throw new LunoraError("BAD_REQUEST", `sendQueueMessage: \`batch\` must contain between 1 and ${String(MAX_QUEUE_SEND_BATCH)} messages`);
   }
   return {
     batch,
@@ -1709,7 +1697,7 @@ const parseSendQueueMessageArgs = (args) => {
 const parseReplayQueueMessageArgs = (args) => {
   const id = typeof args["id"] === "string" ? args["id"].trim() : "";
   if (id === "") {
-    throw Object.assign(new Error("replayQueueMessage: `id` is required"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "replayQueueMessage: `id` is required");
   }
   const target = typeof args["target"] === "string" && args["target"].trim() !== "" ? args["target"].trim() : void 0;
   return { id, target };
@@ -1719,24 +1707,24 @@ const parseRankBeforeArgs = (args) => {
   const index = typeof args["index"] === "string" ? args["index"] : "";
   const rowId = typeof args["rowId"] === "string" ? args["rowId"] : "";
   if (table.trim() === "") {
-    throw Object.assign(new Error("rankBefore: `table` is required"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "rankBefore: `table` is required");
   }
   if (index.trim() === "") {
-    throw Object.assign(new Error("rankBefore: `index` is required"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "rankBefore: `index` is required");
   }
   if (typeof args["partitionKey"] !== "string") {
-    throw Object.assign(new Error("rankBefore: `partitionKey` must be a string"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "rankBefore: `partitionKey` must be a string");
   }
   if (rowId.trim() === "") {
-    throw Object.assign(new Error("rankBefore: `rowId` is required"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "rankBefore: `rowId` is required");
   }
   if (!Array.isArray(args["sortValues"])) {
-    throw Object.assign(new Error("rankBefore: `sortValues` must be an array"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "rankBefore: `sortValues` must be an array");
   }
   return { index, partitionKey: args["partitionKey"], rowId, sortValues: args["sortValues"], table };
 };
 const badRequest = (message) => {
-  throw Object.assign(new Error(message), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+  throw new LunoraError("BAD_REQUEST", message);
 };
 const requireNonEmptyString = (value, field) => {
   if (typeof value !== "string" || value.trim() === "") {
@@ -1796,7 +1784,7 @@ const decodeIndexHitKey = (key) => {
 const parseApplyCdcArgs = (args) => {
   const raw = args["changes"];
   if (!Array.isArray(raw)) {
-    throw Object.assign(new Error("applyCdc: `changes` must be an array"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+    throw new LunoraError("BAD_REQUEST", "applyCdc: `changes` must be an array");
   }
   const changes = raw.map((entry, index) => {
     const record = entry;
@@ -1804,27 +1792,15 @@ const parseApplyCdcArgs = (args) => {
     const table = typeof record["table"] === "string" ? record["table"] : "";
     const id = typeof record["id"] === "string" ? record["id"] : "";
     if (table === "" || id === "" || op !== "insert" && op !== "update" && op !== "delete") {
-      throw Object.assign(new Error(`applyCdc: changes[${String(index)}] must have a table, id, and op of insert|update|delete`), {
-        code: "BAD_REQUEST",
-        name: "LunoraError",
-        status: 400
-      });
+      throw new LunoraError("BAD_REQUEST", `applyCdc: changes[${String(index)}] must have a table, id, and op of insert|update|delete`);
     }
     const rawDocument = record["doc"];
     if (rawDocument !== void 0 && (typeof rawDocument !== "object" || rawDocument === null || Array.isArray(rawDocument))) {
-      throw Object.assign(new Error(`applyCdc: changes[${String(index)}].doc must be an object`), {
-        code: "BAD_REQUEST",
-        name: "LunoraError",
-        status: 400
-      });
+      throw new LunoraError("BAD_REQUEST", `applyCdc: changes[${String(index)}].doc must be an object`);
     }
     const document = rawDocument;
     if (document !== void 0 && typeof document["_id"] === "string" && document["_id"] !== id) {
-      throw Object.assign(new Error(`applyCdc: changes[${String(index)}].doc._id must match the entry id`), {
-        code: "BAD_REQUEST",
-        name: "LunoraError",
-        status: 400
-      });
+      throw new LunoraError("BAD_REQUEST", `applyCdc: changes[${String(index)}].doc._id must match the entry id`);
     }
     return {
       doc: document,
@@ -2680,9 +2656,7 @@ class ShardDO {
    */
   // eslint-disable-next-line class-methods-use-this -- base-class override hook: the codegen subclass overrides this with a schema-aware reader that uses `this`
   runRelationFanoutRead(_functionPath, _args) {
-    throw Object.assign(new Error("__lunora_relation__: no schema bound — the base ShardDO cannot serve cross-shard relation reads"), {
-      code: "NOT_IMPLEMENTED",
-      name: "LunoraError",
+    throw new LunoraError("NOT_IMPLEMENTED", "__lunora_relation__: no schema bound — the base ShardDO cannot serve cross-shard relation reads", {
       status: 500
     });
   }
@@ -2809,19 +2783,11 @@ class ShardDO {
    */
   async runInTransaction(handler) {
     if (this.transactionDepth > 0) {
-      throw Object.assign(new Error("nested transactions are not supported in SQLite-in-DO"), {
-        code: "NESTED_TRANSACTION",
-        name: "LunoraError",
-        status: 500
-      });
+      throw new LunoraError("NESTED_TRANSACTION", "nested transactions are not supported in SQLite-in-DO", { status: 500 });
     }
     const sqlHandle = this.state.storage.sql;
     if (!sqlHandle || typeof sqlHandle.exec !== "function") {
-      throw Object.assign(new Error("storage.sql is not available on this ShardDO state"), {
-        code: "SQL_UNAVAILABLE",
-        name: "LunoraError",
-        status: 500
-      });
+      throw new LunoraError("SQL_UNAVAILABLE", "storage.sql is not available on this ShardDO state", { status: 500 });
     }
     const transactionalStorage = this.state.storage;
     const run = async () => {
@@ -2901,9 +2867,7 @@ class ShardDO {
    */
   // eslint-disable-next-line class-methods-use-this -- base-class override hook: the codegen subclass overrides this and uses `this` to reach the generated migration registry
   runShardDataMigration(args) {
-    return Promise.reject(
-      Object.assign(new Error(`data migration "${args.id}" is not registered`), { code: "MIGRATION_NOT_FOUND", name: "LunoraError", status: 404 })
-    );
+    return Promise.reject(new LunoraError("MIGRATION_NOT_FOUND", `data migration "${args.id}" is not registered`, { status: 404 }));
   }
   /**
    * Lazily provision the shard's physical tables before an operation that
@@ -3161,7 +3125,7 @@ class ShardDO {
    */
   // eslint-disable-next-line class-methods-use-this -- base-class override hook: the codegen subclass overrides this and uses `this` to build a schema-aware writer
   runShardWrite(args) {
-    return Promise.reject(Object.assign(new Error(`unknown table: ${args.table}`), { code: "UNKNOWN_TABLE", name: "LunoraError", status: 404 }));
+    return Promise.reject(new LunoraError("UNKNOWN_TABLE", `unknown table: ${args.table}`, { status: 404 }));
   }
   /**
    * Delete one row by primary key THROUGH the schema-aware writer — the
@@ -3176,7 +3140,7 @@ class ShardDO {
    */
   // eslint-disable-next-line class-methods-use-this -- base-class override hook: the codegen subclass overrides this and uses `this` to build a schema-aware writer
   deleteRowThroughWriter(_table, _id) {
-    return Promise.reject(Object.assign(new Error(`unknown table: ${_table}`), { code: "UNKNOWN_TABLE", name: "LunoraError", status: 404 }));
+    return Promise.reject(new LunoraError("UNKNOWN_TABLE", `unknown table: ${_table}`, { status: 404 }));
   }
   /**
    * Bulk-delete the rows of `table` matching the active `filters`/`search`
@@ -3218,9 +3182,7 @@ class ShardDO {
    */
   // eslint-disable-next-line class-methods-use-this -- base-class override hook: the codegen subclass overrides this and uses `this` to build a schema-aware writer
   runShardRankBefore(_args) {
-    return Promise.reject(
-      Object.assign(new Error("rankBefore is not implemented in base ShardDO"), { code: "NOT_IMPLEMENTED", name: "LunoraError", status: 500 })
-    );
+    return Promise.reject(new LunoraError("NOT_IMPLEMENTED", "rankBefore is not implemented in base ShardDO", { status: 500 }));
   }
   /**
    * Page this shard's local ranked slice under `index`, each row tagged with
@@ -3234,9 +3196,7 @@ class ShardDO {
    */
   // eslint-disable-next-line class-methods-use-this -- base-class override hook: the codegen subclass overrides this and uses `this` to build a schema-aware writer
   runShardRankPage(_args) {
-    return Promise.reject(
-      Object.assign(new Error("rankPage is not implemented in base ShardDO"), { code: "NOT_IMPLEMENTED", name: "LunoraError", status: 500 })
-    );
+    return Promise.reject(new LunoraError("NOT_IMPLEMENTED", "rankPage is not implemented in base ShardDO", { status: 500 }));
   }
   /**
    * Page this shard's change-data-capture log past `sinceSeq`. Read-only and
@@ -3565,9 +3525,7 @@ class ShardDO {
    */
   // eslint-disable-next-line class-methods-use-this -- base-class override hook: the codegen subclass overrides this and uses `this` to build a schema-aware writer
   runShardApplyCdc(_args) {
-    return Promise.reject(
-      Object.assign(new Error("applyCdc is not implemented in base ShardDO"), { code: "NOT_IMPLEMENTED", name: "LunoraError", status: 500 })
-    );
+    return Promise.reject(new LunoraError("NOT_IMPLEMENTED", "applyCdc is not implemented in base ShardDO", { status: 500 }));
   }
   /**
    * Register a subscription on the given socket. Stored via
@@ -4477,15 +4435,11 @@ class ShardDO {
   resolveWorkflowBinding(exportName) {
     const metadata = this.workflowsMetadata().workflows.find((workflow) => workflow.exportName === exportName);
     if (!metadata) {
-      throw Object.assign(new Error(`workflow "${exportName}" is not declared`), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+      throw new LunoraError("BAD_REQUEST", `workflow "${exportName}" is not declared`);
     }
     const binding = this.env?.[metadata.binding];
     if (typeof binding !== "object" || binding === null || typeof binding.create !== "function" || typeof binding.get !== "function") {
-      throw Object.assign(new Error(`workflow binding "${metadata.binding}" is not available on this deployment`), {
-        code: "BAD_REQUEST",
-        name: "LunoraError",
-        status: 400
-      });
+      throw new LunoraError("BAD_REQUEST", `workflow binding "${metadata.binding}" is not available on this deployment`);
     }
     return binding;
   }
@@ -4665,25 +4619,21 @@ class ShardDO {
     const parsed = parseReplayQueueMessageArgs(args);
     const row = readQueueMessageById(this.state.storage.sql, parsed.id);
     if (row === void 0) {
-      throw Object.assign(new Error(`replayQueueMessage: captured message "${parsed.id}" was not found`), {
-        code: "BAD_REQUEST",
-        name: "LunoraError",
-        status: 404
-      });
+      throw new LunoraError("BAD_REQUEST", `replayQueueMessage: captured message "${parsed.id}" was not found`, { status: 404 });
     }
     if (isLossyBody(row.body)) {
-      throw Object.assign(
-        new Error(`replayQueueMessage: captured message "${parsed.id}" has a truncated or unserializable body and can't be replayed faithfully`),
-        { code: "BAD_REQUEST", name: "LunoraError", status: 422 }
+      throw new LunoraError(
+        "BAD_REQUEST",
+        `replayQueueMessage: captured message "${parsed.id}" has a truncated or unserializable body and can't be replayed faithfully`,
+        { status: 422 }
       );
     }
     const target = parsed.target ?? this.resolveReplayTarget(row.queue) ?? row.exportName;
     if (typeof target !== "string" || target === "") {
-      throw Object.assign(new Error(`replayQueueMessage: captured message "${parsed.id}" has no declared producer to replay onto (pass \`target\`)`), {
-        code: "BAD_REQUEST",
-        name: "LunoraError",
-        status: 400
-      });
+      throw new LunoraError(
+        "BAD_REQUEST",
+        `replayQueueMessage: captured message "${parsed.id}" has no declared producer to replay onto (pass \`target\`)`
+      );
     }
     const { binding } = this.resolveQueueBinding(target);
     await binding.send(row.body);
@@ -4701,15 +4651,11 @@ class ShardDO {
   resolveQueueBinding(exportName) {
     const metadata = this.queuesMetadata().queues.find((queue) => queue.exportName === exportName);
     if (!metadata) {
-      throw Object.assign(new Error(`queue "${exportName}" is not declared`), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+      throw new LunoraError("BAD_REQUEST", `queue "${exportName}" is not declared`);
     }
     const binding = this.env?.[metadata.binding];
     if (typeof binding !== "object" || binding === null || typeof binding.send !== "function") {
-      throw Object.assign(new Error(`queue binding "${metadata.binding}" is not available on this deployment`), {
-        code: "BAD_REQUEST",
-        name: "LunoraError",
-        status: 400
-      });
+      throw new LunoraError("BAD_REQUEST", `queue binding "${metadata.binding}" is not available on this deployment`);
     }
     return { binding, metadata };
   }

package/dist/packem_shared/{applyOnDelete-CAwZfp-5.mjs → applyOnDelete-BXSq3S70.mjs}

@@ -1,5 +1,5 @@
 import { LunoraError } from '@lunora/errors';
-import { applySelect } from './applySelect-BvZdFUBT.mjs';
+import { applySelect } from './applySelect-WQY8m62C.mjs';
 
 const projectChildren = (documents, nested) => nested.select ? applySelect(documents, nested.select, nested.with) : documents;
 const fanOutScalarCounts = async (counter, tableName, whereField, values, policyWhere) => {

package/dist/packem_shared/{applySelect-BvZdFUBT.mjs → applySelect-WQY8m62C.mjs}

@@ -1,3 +1,5 @@
+import { LunoraError } from '@lunora/errors';
+
 const TIEBREAK_FIELD = "id";
 const ID_FIELDS = /* @__PURE__ */ new Set(["_id", "id"]);
 const normalizeOrderKeys = (orderBy) => {
@@ -30,7 +32,7 @@ const encodeCursor = (record, keys) => {
   values.push(record["_id"]);
   return toBase64(JSON.stringify(values));
 };
-const invalidCursor = () => Object.assign(new TypeError("invalid cursor"), { code: "BAD_REQUEST", name: "LunoraError", status: 400 });
+const invalidCursor = () => new LunoraError("BAD_REQUEST", "invalid cursor");
 const decodeCursor = (cursor) => {
   let decoded;
   try {

package/dist/packem_shared/{armRestore-BJk53Ro8.mjs → armRestore-4Px61hHS.mjs}

@@ -1,3 +1,5 @@
+import { LunoraError } from '@lunora/errors';
+
 const pitrUnavailable = () => Object.assign(
   new Error("native PITR is unavailable here (local dev or a non-SQLite Durable Object); use `lunora backup restore` for off-platform recovery"),
   {
@@ -12,11 +14,7 @@ const toTime = (time) => {
   }
   const parsed = Date.parse(time);
   if (Number.isNaN(parsed)) {
-    throw Object.assign(new Error(`pitr: invalid time "${time}" — expected epoch-ms or an ISO timestamp`), {
-      code: "BAD_REQUEST",
-      name: "LunoraError",
-      status: 400
-    });
+    throw new LunoraError("BAD_REQUEST", `pitr: invalid time "${time}" — expected epoch-ms or an ISO timestamp`);
   }
   return parsed;
 };
@@ -37,11 +35,7 @@ const armRestore = async (storage, args) => {
   let target = args.bookmark;
   if (target === void 0) {
     if (args.time === void 0) {
-      throw Object.assign(new Error("pitrRestore: provide a `bookmark` or a `time` to restore to"), {
-        code: "BAD_REQUEST",
-        name: "LunoraError",
-        status: 400
-      });
+      throw new LunoraError("BAD_REQUEST", "pitrRestore: provide a `bookmark` or a `time` to restore to");
     }
     if (!storage.getBookmarkForTime) {
       throw pitrUnavailable();

package/dist/packem_shared/{serveRelationFanout-BhZF9AuB.mjs → serveRelationFanout-C56hKu1O.mjs}

@@ -1,17 +1,14 @@
-import { RELATION_FUNCTION_PREFIX } from './ADMIN_FUNCTIONS-BbQdj8h1.mjs';
+import { LunoraError } from '@lunora/errors';
+import { RELATION_FUNCTION_PREFIX } from './ADMIN_FUNCTIONS-Bxdijn66.mjs';
 
 const serveRelationFanout = async (schema, database, functionPath, args) => {
   const table = typeof args["table"] === "string" ? args["table"] : "";
   const definition = schema.tables[table];
   if (!definition) {
-    throw Object.assign(new Error(`${RELATION_FUNCTION_PREFIX} unknown table "${table}"`), { code: "UNKNOWN_TABLE", name: "LunoraError", status: 404 });
+    throw new LunoraError("UNKNOWN_TABLE", `${RELATION_FUNCTION_PREFIX} unknown table "${table}"`, { status: 404 });
   }
   if (definition.shardMode?.kind === "global") {
-    throw Object.assign(new Error(`${RELATION_FUNCTION_PREFIX} table "${table}" is global, not shard-local`), {
-      code: "BAD_REQUEST",
-      name: "LunoraError",
-      status: 400
-    });
+    throw new LunoraError("BAD_REQUEST", `${RELATION_FUNCTION_PREFIX} table "${table}" is global, not shard-local`);
   }
   const where = args["where"] ?? void 0;
   if (functionPath === `${RELATION_FUNCTION_PREFIX}count`) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/do",
-  "version": "1.0.0-alpha.24",
+  "version": "1.0.0-alpha.26",
   "description": "Lunora Durable Objects: ShardDO (SQLite, OCC, hibernated WebSocket subscriptions) and SessionDO",
   "keywords": [
     "cloudflare",
@@ -46,8 +46,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/errors": "1.0.0-alpha.2",
-    "@visulima/redact": "3.0.0-alpha.14",
+    "@lunora/errors": "1.0.0-alpha.3",
+    "@visulima/redact": "3.0.0",
     "drizzle-orm": "^0.45.2"
   },
   "engines": {