@lunora/platform-cloudflare 1.0.0-alpha.100 → 1.0.0-alpha.102

package/README.md

@@ -8,7 +8,7 @@ The Cloudflare implementation of the [`@lunora/platform`](../platform) host cont
 import { createShardPlatform } from "@lunora/platform-cloudflare";
 
 // Inside a Durable Object:
-const platform = createShardPlatform(state);
+const platform = createShardPlatform(state, env);
 ```
 
 ## Why it exists

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { DurableObjectNamespace, DurableObjectState } from '@cloudflare/workers-types';
-import { ShardAlarms, ShardDirectory, ShardHost, ShardKvStore, SocketHost, PlatformCapabilities, SchedulerHost } from '@lunora/platform';
+import { SecretValueHost, SecretValueStore, ShardAlarms, ShardDirectory, ShardHost, ShardKvStore, SocketHost, PlatformCapabilities, SchedulerHost } from '@lunora/platform';
 /** The alarm subset of `state.storage`, structurally (shared by shard + session hosts). */
 interface AlarmStorageLike {
   deleteAlarm?: () => Promise<void>;
@@ -24,18 +24,58 @@ interface KvStorageLike {
   delete: (key: string) => Promise<boolean | number>;
   get: <T = unknown>(key: string) => Promise<T | undefined>;
   list?: <T = unknown>(options?: {
+    limit?: number;
     prefix?: string;
   }) => Promise<Map<string, T>>;
   put: (key: string, value: unknown) => Promise<void>;
 }
+/**
+ * {@link KvStorageLike} plus `transaction`, which {@link createSecretValueHost}
+ * needs for its read-check-bind in `take`. Method syntax on purpose, so the real
+ * `DurableObjectStorage` (whose transaction closure takes its own transaction
+ * type) is accepted without a cast.
+ */
+interface SecretStorageLike extends KvStorageLike {
+  list: <T = unknown>(options?: {
+    limit?: number;
+    prefix?: string;
+  }) => Promise<Map<string, T>>;
+  transaction: <T>(closure: (txn: KvStorageLike) => Promise<T>) => Promise<T>;
+}
 /**
  * Turn a Durable Object's `state.storage` into the provider-neutral
  * {@link ShardKvStore}. The DO's KV surface already matches the contract
- * method-for-method; this adapter only normalizes the return of `delete`
- * (workerd resolves a boolean, some doubles a number) and fails closed on a
- * `list` the underlying storage does not provide.
+ * method-for-method; this adapter normalizes the return of `delete` (workerd
+ * resolves a boolean, some doubles a number), fails closed on a `list` the
+ * underlying storage does not provide, and keeps secret records invisible: `get`
+ * and `list` skip a reserved key whose stored value is secret-shaped, and
+ * `put`/`delete` refuse to touch one.
  */
 declare const createShardKvStore: (storage: KvStorageLike) => ShardKvStore;
+/**
+ * Turn a Durable Object's `state.storage` into a {@link SecretValueHost}.
+ *
+ * Records live under {@link SECRET_VALUE_KEY_PREFIX} in the shard's own
+ * key-value storage. Keys sort by expiry (a zero-padded `expiresAt` leads the
+ * ref), so the sweep in `put` reads the earliest-expiring records first and stops
+ * at the first live one in a page.
+ *
+ * `take` runs its read, claimant bind and write inside `storage.transaction`, so
+ * two takes cannot both observe the ref unbound. `options.now` exists for the
+ * conformance suite's clock and defaults to `Date.now`.
+ */
+declare const createSecretValueStore: (storage: SecretStorageLike, options?: {
+  now?: () => number;
+}) => SecretValueStore;
+/**
+ * Turn a Durable Object's `state.storage` and Worker `env` into a
+ * {@link SecretValueHost}: the reserved-namespace store wrapped in AES-256-GCM.
+ * With no key bound, every `put` and `take` refuses with `SecretValueKeyError`;
+ * nothing falls back to storing plaintext.
+ */
+declare const createSecretValueHost: (storage: SecretStorageLike, env: unknown, options?: {
+  now?: () => number;
+}) => SecretValueHost;
 declare const createSocketHost: (state: DurableObjectState) => SocketHost;
 /**
  * Turn a Durable Object namespace binding into a {@link ShardDirectory}.
@@ -57,6 +97,8 @@ declare const createShardDirectory: (namespace: DurableObjectNamespace) => Shard
 interface ShardPlatform {
   /** Durable key-value storage for this shard. */
   kv: ShardKvStore;
+  /** Human-supplied secret values held for one durable step, kept out of `kv`'s reach. */
+  secretValues: SecretValueHost;
   /** Single-writer execution, local SQL, transactions, alarms, identity. */
   shard: ShardHost;
   /** Hibernated WebSocket subscriptions for this shard. */
@@ -106,8 +148,12 @@ interface WorkerPlatformOptions {
  * `state` is typed `unknown` so this package does not force
  * `@cloudflare/workers-types` onto callers that are already holding the runtime
  * object; the adapters narrow it internally.
+ *
+ * `env` carries the Worker secrets the secret-value host seals under. Leave it out
+ * for a shard that holds no key: the host then refuses every put and take rather
+ * than store plaintext.
  */
-declare const createShardPlatform: (state: unknown) => ShardPlatform;
+declare const createShardPlatform: (state: unknown, env?: unknown) => ShardPlatform;
 /**
  * Compose every Worker-scoped contract from the Worker's `env`.
  *
@@ -117,6 +163,50 @@ declare const createShardPlatform: (state: unknown) => ShardPlatform;
  */
 declare const createWorkerPlatform: (env: unknown, options?: WorkerPlatformOptions) => WorkerPlatform;
 export { type ShardPlatform, type WorkerPlatform, type WorkerPlatformOptions,
+/**
+ * `@lunora/platform-cloudflare` — the Cloudflare implementation of the
+ * `@lunora/platform` contracts.
+ *
+ * `@lunora/platform` says what a host must provide; this says how Cloudflare
+ * provides it, over `DurableObjectState`, hibernatable WebSockets, and a
+ * `DurableObjectNamespace`. A second target ships the same surface from its own
+ * `@lunora/platform-<target>` package, so adding one is a sibling rather than a
+ * refactor of `@lunora/do`.
+ *
+ * # Why this depends on nothing but the contracts
+ *
+ * An earlier version of this package sat *above* `@lunora/do` — it composed
+ * adapters that lived there, and so depended on the very package it was meant
+ * to make replaceable. That inverts the end-state, and with one host it also
+ * had zero consumers, so it was dissolved. This version is the other way up:
+ * the adapters live here, `@lunora/do` depends on this, and the only imports
+ * are `@lunora/platform` plus Cloudflare's own types. That is what makes the
+ * seam real rather than aspirational — `@lunora/do` can no longer reach a
+ * provider API except through a contract.
+ */
+createSecretValueHost,
+/**
+ * `@lunora/platform-cloudflare` — the Cloudflare implementation of the
+ * `@lunora/platform` contracts.
+ *
+ * `@lunora/platform` says what a host must provide; this says how Cloudflare
+ * provides it, over `DurableObjectState`, hibernatable WebSockets, and a
+ * `DurableObjectNamespace`. A second target ships the same surface from its own
+ * `@lunora/platform-<target>` package, so adding one is a sibling rather than a
+ * refactor of `@lunora/do`.
+ *
+ * # Why this depends on nothing but the contracts
+ *
+ * An earlier version of this package sat *above* `@lunora/do` — it composed
+ * adapters that lived there, and so depended on the very package it was meant
+ * to make replaceable. That inverts the end-state, and with one host it also
+ * had zero consumers, so it was dissolved. This version is the other way up:
+ * the adapters live here, `@lunora/do` depends on this, and the only imports
+ * are `@lunora/platform` plus Cloudflare's own types. That is what makes the
+ * seam real rather than aspirational — `@lunora/do` can no longer reach a
+ * provider API except through a contract.
+ */
+createSecretValueStore,
 /**
  * `@lunora/platform-cloudflare` — the Cloudflare implementation of the
  * `@lunora/platform` contracts.

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { DurableObjectNamespace, DurableObjectState } from '@cloudflare/workers-types';
-import { ShardAlarms, ShardDirectory, ShardHost, ShardKvStore, SocketHost, PlatformCapabilities, SchedulerHost } from '@lunora/platform';
+import { SecretValueHost, SecretValueStore, ShardAlarms, ShardDirectory, ShardHost, ShardKvStore, SocketHost, PlatformCapabilities, SchedulerHost } from '@lunora/platform';
 /** The alarm subset of `state.storage`, structurally (shared by shard + session hosts). */
 interface AlarmStorageLike {
   deleteAlarm?: () => Promise<void>;
@@ -24,18 +24,58 @@ interface KvStorageLike {
   delete: (key: string) => Promise<boolean | number>;
   get: <T = unknown>(key: string) => Promise<T | undefined>;
   list?: <T = unknown>(options?: {
+    limit?: number;
     prefix?: string;
   }) => Promise<Map<string, T>>;
   put: (key: string, value: unknown) => Promise<void>;
 }
+/**
+ * {@link KvStorageLike} plus `transaction`, which {@link createSecretValueHost}
+ * needs for its read-check-bind in `take`. Method syntax on purpose, so the real
+ * `DurableObjectStorage` (whose transaction closure takes its own transaction
+ * type) is accepted without a cast.
+ */
+interface SecretStorageLike extends KvStorageLike {
+  list: <T = unknown>(options?: {
+    limit?: number;
+    prefix?: string;
+  }) => Promise<Map<string, T>>;
+  transaction: <T>(closure: (txn: KvStorageLike) => Promise<T>) => Promise<T>;
+}
 /**
  * Turn a Durable Object's `state.storage` into the provider-neutral
  * {@link ShardKvStore}. The DO's KV surface already matches the contract
- * method-for-method; this adapter only normalizes the return of `delete`
- * (workerd resolves a boolean, some doubles a number) and fails closed on a
- * `list` the underlying storage does not provide.
+ * method-for-method; this adapter normalizes the return of `delete` (workerd
+ * resolves a boolean, some doubles a number), fails closed on a `list` the
+ * underlying storage does not provide, and keeps secret records invisible: `get`
+ * and `list` skip a reserved key whose stored value is secret-shaped, and
+ * `put`/`delete` refuse to touch one.
  */
 declare const createShardKvStore: (storage: KvStorageLike) => ShardKvStore;
+/**
+ * Turn a Durable Object's `state.storage` into a {@link SecretValueHost}.
+ *
+ * Records live under {@link SECRET_VALUE_KEY_PREFIX} in the shard's own
+ * key-value storage. Keys sort by expiry (a zero-padded `expiresAt` leads the
+ * ref), so the sweep in `put` reads the earliest-expiring records first and stops
+ * at the first live one in a page.
+ *
+ * `take` runs its read, claimant bind and write inside `storage.transaction`, so
+ * two takes cannot both observe the ref unbound. `options.now` exists for the
+ * conformance suite's clock and defaults to `Date.now`.
+ */
+declare const createSecretValueStore: (storage: SecretStorageLike, options?: {
+  now?: () => number;
+}) => SecretValueStore;
+/**
+ * Turn a Durable Object's `state.storage` and Worker `env` into a
+ * {@link SecretValueHost}: the reserved-namespace store wrapped in AES-256-GCM.
+ * With no key bound, every `put` and `take` refuses with `SecretValueKeyError`;
+ * nothing falls back to storing plaintext.
+ */
+declare const createSecretValueHost: (storage: SecretStorageLike, env: unknown, options?: {
+  now?: () => number;
+}) => SecretValueHost;
 declare const createSocketHost: (state: DurableObjectState) => SocketHost;
 /**
  * Turn a Durable Object namespace binding into a {@link ShardDirectory}.
@@ -57,6 +97,8 @@ declare const createShardDirectory: (namespace: DurableObjectNamespace) => Shard
 interface ShardPlatform {
   /** Durable key-value storage for this shard. */
   kv: ShardKvStore;
+  /** Human-supplied secret values held for one durable step, kept out of `kv`'s reach. */
+  secretValues: SecretValueHost;
   /** Single-writer execution, local SQL, transactions, alarms, identity. */
   shard: ShardHost;
   /** Hibernated WebSocket subscriptions for this shard. */
@@ -106,8 +148,12 @@ interface WorkerPlatformOptions {
  * `state` is typed `unknown` so this package does not force
  * `@cloudflare/workers-types` onto callers that are already holding the runtime
  * object; the adapters narrow it internally.
+ *
+ * `env` carries the Worker secrets the secret-value host seals under. Leave it out
+ * for a shard that holds no key: the host then refuses every put and take rather
+ * than store plaintext.
  */
-declare const createShardPlatform: (state: unknown) => ShardPlatform;
+declare const createShardPlatform: (state: unknown, env?: unknown) => ShardPlatform;
 /**
  * Compose every Worker-scoped contract from the Worker's `env`.
  *
@@ -117,6 +163,50 @@ declare const createShardPlatform: (state: unknown) => ShardPlatform;
  */
 declare const createWorkerPlatform: (env: unknown, options?: WorkerPlatformOptions) => WorkerPlatform;
 export { type ShardPlatform, type WorkerPlatform, type WorkerPlatformOptions,
+/**
+ * `@lunora/platform-cloudflare` — the Cloudflare implementation of the
+ * `@lunora/platform` contracts.
+ *
+ * `@lunora/platform` says what a host must provide; this says how Cloudflare
+ * provides it, over `DurableObjectState`, hibernatable WebSockets, and a
+ * `DurableObjectNamespace`. A second target ships the same surface from its own
+ * `@lunora/platform-<target>` package, so adding one is a sibling rather than a
+ * refactor of `@lunora/do`.
+ *
+ * # Why this depends on nothing but the contracts
+ *
+ * An earlier version of this package sat *above* `@lunora/do` — it composed
+ * adapters that lived there, and so depended on the very package it was meant
+ * to make replaceable. That inverts the end-state, and with one host it also
+ * had zero consumers, so it was dissolved. This version is the other way up:
+ * the adapters live here, `@lunora/do` depends on this, and the only imports
+ * are `@lunora/platform` plus Cloudflare's own types. That is what makes the
+ * seam real rather than aspirational — `@lunora/do` can no longer reach a
+ * provider API except through a contract.
+ */
+createSecretValueHost,
+/**
+ * `@lunora/platform-cloudflare` — the Cloudflare implementation of the
+ * `@lunora/platform` contracts.
+ *
+ * `@lunora/platform` says what a host must provide; this says how Cloudflare
+ * provides it, over `DurableObjectState`, hibernatable WebSockets, and a
+ * `DurableObjectNamespace`. A second target ships the same surface from its own
+ * `@lunora/platform-<target>` package, so adding one is a sibling rather than a
+ * refactor of `@lunora/do`.
+ *
+ * # Why this depends on nothing but the contracts
+ *
+ * An earlier version of this package sat *above* `@lunora/do` — it composed
+ * adapters that lived there, and so depended on the very package it was meant
+ * to make replaceable. That inverts the end-state, and with one host it also
+ * had zero consumers, so it was dissolved. This version is the other way up:
+ * the adapters live here, `@lunora/do` depends on this, and the only imports
+ * are `@lunora/platform` plus Cloudflare's own types. That is what makes the
+ * seam real rather than aspirational — `@lunora/do` can no longer reach a
+ * provider API except through a contract.
+ */
+createSecretValueStore,
 /**
  * `@lunora/platform-cloudflare` — the Cloudflare implementation of the
  * `@lunora/platform` contracts.

package/dist/index.mjs

@@ -1 +1 @@
-import{createShardAlarms as t,createShardDirectory as a,createShardHost as o,createShardKvStore as c,createSocketHost as S}from"./packem_shared/createShardAlarms-Cm9SOaSc.mjs";import{createShardPlatform as h,createWorkerPlatform as m}from"./packem_shared/createShardPlatform-lSOGSs8s.mjs";export{t as createShardAlarms,a as createShardDirectory,o as createShardHost,c as createShardKvStore,h as createShardPlatform,S as createSocketHost,m as createWorkerPlatform};
+import{createSecretValueHost as t,createSecretValueStore as a,createShardAlarms as o,createShardDirectory as c,createShardHost as S,createShardKvStore as d,createSocketHost as h}from"./packem_shared/createSecretValueHost-BaYQQbQ9.mjs";import{createShardPlatform as m,createWorkerPlatform as f}from"./packem_shared/createShardPlatform-ZR4yt0P8.mjs";export{t as createSecretValueHost,a as createSecretValueStore,o as createShardAlarms,c as createShardDirectory,S as createShardHost,d as createShardKvStore,m as createShardPlatform,h as createSocketHost,f as createWorkerPlatform};

package/dist/packem_shared/createSecretValueHost-BaYQQbQ9.mjs

@@ -0,0 +1 @@
+import{LunoraError as b}from"@lunora/errors";import{clampSecretValueTtl as k,encryptingSecretValueHost as A,findSocketTagBudgetViolation as _}from"@lunora/platform";const T=(e,t,o)=>{const c=e.storage.sql;if(typeof c?.exec!="function")throw new TypeError("storage.sql.exec is not available on this DurableObjectState");return c.exec(t,...o)},U=e=>({delete:()=>typeof e.deleteAlarm=="function"?e.deleteAlarm():Promise.resolve(),get:()=>typeof e.getAlarm=="function"?e.getAlarm():null,set:t=>typeof e.setAlarm=="function"?e.setAlarm(t):Promise.resolve()}),R=(e,t)=>{if(!(!(e instanceof Error)||e===t||e.cause!==void 0))try{Object.defineProperty(e,"cause",{configurable:!0,value:t,writable:!0})}catch{}},C=e=>{const{storage:t}=e,o={get databaseSize(){return e.storage.sql?.databaseSize},exec:(n,...a)=>T(e,n,a)},c=U(t),r=async n=>{if(typeof e.blockConcurrencyWhile=="function"){const a=await e.blockConcurrencyWhile(async()=>{try{return{ok:!0,value:await n()}}catch(u){return{error:u,ok:!1}}});if(!a.ok)throw a.error;return a.value}return n()},i=async n=>{const a=t;if(typeof a?.transaction=="function"){let u;try{return await a.transaction(async()=>{try{return await n()}catch(s){throw u={value:s},s}})}catch(s){throw u?(R(u.value,s),u.value):s}}return n()};return{alarms:c,runSerialized:r,shardKey:e.id?.name,sql:o,transaction:i,waitUntil:typeof e.waitUntil=="function"?n=>{e.waitUntil(n)}:void 0}},w="__lunora_secret_value:",x=32,p=e=>e.startsWith(w),d=e=>{if(typeof e!="object"||e===null)return!1;const t=e;return typeof t.expiresAt=="number"&&Number.isFinite(t.expiresAt)&&typeof t.scope=="string"&&typeof t.value=="string"&&(t.claimant===void 0||typeof t.claimant=="string")},D=e=>({delete:async t=>{if(p(t)&&d(await e.get(t)))throw new TypeError(`key "${t}" holds a secret value and cannot be deleted through the KV surface`);return!!await e.delete(t)},get:async t=>{const o=await e.get(t);return p(t)&&d(o)?void 0:o},list:async t=>{if(typeof e.list!="function")throw new TypeError("storage.list is not available on this DurableObjectStorage");const o=t?.prefix,c=await e.list(o===void 0?{}:{prefix:o});for(const[r,i]of c)p(r)&&d(i)&&c.delete(r);return c},put:async(t,o)=>{if(p(t)&&(d(o)||d(await e.get(t))))throw new TypeError(`key "${t}" is reserved for secret values and cannot be written through the KV surface`);await e.put(t,o)}}),O=(e,t={})=>{const o=t.now??Date.now,c=r=>`${w}${r}`;return{discard:async r=>{const i=c(r);return d(await e.get(i))?!!await e.delete(i):!1},put:async(r,i)=>{const n=o(),a=n+k(i.ttlMs),u=`${String(a).padStart(15,"0")}.${crypto.randomUUID()}`,s=c(u),l=await r(u);if(await e.get(s)!==void 0)throw new Error(`secret value ref "${u}" is already in use`);await e.put(s,{expiresAt:a,scope:i.scope,value:l});const E=[...await e.list({limit:x,prefix:w})].filter(([,f])=>d(f)&&f.expiresAt<=n).map(([f])=>f);return await Promise.all(E.map(async f=>e.delete(f))),u},take:(r,i,n)=>e.transaction(async a=>{const u=c(r),s=await a.get(u);if(!d(s))return;if(s.expiresAt<=o()){await a.delete(u);return}if(s.scope!==i.scope||s.claimant!==void 0&&s.claimant!==i.claimant)return;const l=await n(s.value);if(l!==void 0){if(s.expiresAt<=o()){await a.delete(u);return}return s.claimant===void 0&&await a.put(u,{...s,claimant:i.claimant}),l}})}},K=(e,t,o={})=>{const c=t??{},r=i=>typeof i=="string"?i:void 0;return A(O(e,o),{key:r(c.LUNORA_SECRET_VALUE_KEY),previousKey:r(c.LUNORA_SECRET_VALUE_KEY_PREVIOUS)})},h="lunora-socket:",y=new WeakMap,S=new WeakMap;let g=0;const m=(e,t)=>{const{getTags:o}=e;if(typeof o=="function")try{return o.call(e,t).find(c=>c.startsWith(h))}catch{return}},W=(e,t)=>{const o=m(e,t);if(o!==void 0)return o.slice(h.length);const c=y.get(t);if(c!==void 0)return c;const r=S.get(t);if(r!==void 0)return r;g+=1;const i=`cf-socket-${String(g)}`;return S.set(t,i),i},$=e=>{const t=e,o=new WeakSet;let c=0,r;const i=()=>{const n=e.getWebSockets();return(r?.generation!==c||r.length!==n.length)&&(r={generation:c,length:n.length,set:new WeakSet(n)}),r.set};return{newPair:()=>{if(t.openSocketPair!==void 0)return t.openSocketPair();const n=new WebSocketPair;return{client:n[0],server:n[1]}},upgradeResponse:n=>t.upgradeResponse!==void 0?t.upgradeResponse(n):new Response(null,{status:101,webSocket:n}),accept:(n,a,u)=>{const s=_(u);if(s!==void 0)throw new b("SOCKET_TAG_BUDGET_EXCEEDED",s);const l=n,v=crypto.randomUUID();return e.acceptWebSocket(l,[`${h}${v}`,...u??[]]),y.set(l,v),c+=1,a!==void 0&&l.serializeAttachment?.(a),l},getSockets:n=>e.getWebSockets(n),handleFor:n=>{const a=n;if(y.has(a)||m(e,a)!==void 0)return a;if(!o.has(a)){if(i().has(a))return a;o.add(a)}},idFor:n=>W(e,n)}},P=e=>{const t=r=>({fetch:i=>r.fetch(i)}),o=r=>r===void 0?void 0:{locationHint:r};return{get:(r,i)=>t(e.get(r,o(i))),getByName:(r,i)=>t(e.get(e.idFromName(r),o(i))),idForName:r=>e.idFromName(r),jurisdiction:r=>P(e.jurisdiction(r))}};export{K as createSecretValueHost,O as createSecretValueStore,U as createShardAlarms,P as createShardDirectory,C as createShardHost,D as createShardKvStore,$ as createSocketHost};

package/dist/packem_shared/createShardPlatform-ZR4yt0P8.mjs

@@ -0,0 +1 @@
+import{createSocketHost as n,createSecretValueHost as l,createShardHost as d,createShardKvStore as i,createShardDirectory as u}from"./createSecretValueHost-BaYQQbQ9.mjs";import{CLOUDFLARE_CAPABILITIES as s}from"@lunora/platform";const m=(t,r={})=>{const e=t;return{kv:i(e.storage),shard:d(e),secretValues:l(e.storage,r),sockets:n(e)}},S=(t,r={})=>{const e=t??{},o=c=>{const a=e[c];if(a==null)throw new Error(`@lunora/platform-cloudflare: no Durable Object namespace bound as "${c}" — add it to wrangler.jsonc's durable_objects.bindings`);return u(a)};return r.scheduler===void 0?{capabilities:s,directory:o}:{capabilities:s,directory:o,scheduler:r.scheduler}};export{m as createShardPlatform,S as createWorkerPlatform};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/platform-cloudflare",
-  "version": "1.0.0-alpha.100",
+  "version": "1.0.0-alpha.102",
   "description": "Cloudflare implementation of the Lunora platform contracts: ShardHost, SocketHost, ShardDirectory, ShardKvStore over Durable Objects",
   "keywords": [
     "cloudflare",
@@ -44,7 +44,7 @@
   },
   "dependencies": {
     "@lunora/errors": ">=1.0.0-alpha.51 <2.0.0-0",
-    "@lunora/platform": "1.0.0-alpha.70"
+    "@lunora/platform": "1.0.0-alpha.72"
   },
   "peerDependencies": {
     "@cloudflare/workers-types": ">=4.0.0"

package/dist/packem_shared/createShardAlarms-Cm9SOaSc.mjs

@@ -1 +0,0 @@
-import{LunoraError as h}from"@lunora/errors";const w=(e,t,o)=>{const c=e.storage.sql;if(typeof c?.exec!="function")throw new TypeError("storage.sql.exec is not available on this DurableObjectState");return c.exec(t,...o)},k=e=>({delete:()=>typeof e.deleteAlarm=="function"?e.deleteAlarm():Promise.resolve(),get:()=>typeof e.getAlarm=="function"?e.getAlarm():null,set:t=>typeof e.setAlarm=="function"?e.setAlarm(t):Promise.resolve()}),b=(e,t)=>{if(!(!(e instanceof Error)||e===t||e.cause!==void 0))try{Object.defineProperty(e,"cause",{configurable:!0,value:t,writable:!0})}catch{}},D=e=>{const{storage:t}=e,o={get databaseSize(){return e.storage.sql?.databaseSize},exec:(r,...i)=>w(e,r,i)},c=k(t),n=async r=>{if(typeof e.blockConcurrencyWhile=="function"){const i=await e.blockConcurrencyWhile(async()=>{try{return{ok:!0,value:await r()}}catch(l){return{error:l,ok:!1}}});if(!i.ok)throw i.error;return i.value}return r()},a=async r=>{const i=t;if(typeof i?.transaction=="function"){let l;try{return await i.transaction(async()=>{try{return await r()}catch(s){throw l={value:s},s}})}catch(s){throw l?(b(l.value,s),l.value):s}}return r()};return{alarms:c,runSerialized:n,shardKey:e.id?.name,sql:o,transaction:a,waitUntil:typeof e.waitUntil=="function"?r=>{e.waitUntil(r)}:void 0}},_=e=>({delete:async t=>!!await e.delete(t),get:t=>e.get(t),list:t=>{if(typeof e.list!="function")throw new TypeError("storage.list is not available on this DurableObjectStorage");return e.list(t)},put:(t,o)=>e.put(t,o)}),d="lunora-socket:",u=new WeakMap,g=new WeakMap;let S=0;const v=(e,t)=>{const{getTags:o}=e;if(typeof o=="function")try{return o.call(e,t).find(c=>c.startsWith(d))}catch{return}},E=(e,t)=>{const o=v(e,t);if(o!==void 0)return o.slice(d.length);const c=u.get(t);if(c!==void 0)return c;const n=g.get(t);if(n!==void 0)return n;S+=1;const a=`cf-socket-${String(S)}`;return g.set(t,a),a},p=10,y=256,m=1,T=e=>{if(!e||e.length===0)return;const t=p-m;if(e.length>t)throw new h("SOCKET_TAG_BUDGET_EXCEEDED",`${String(e.length)} tags supplied; Cloudflare allows ${String(p)} per socket and 1 is reserved for the host's identity tag — pass at most ${String(t)}.`);const o=e.find(c=>c.length>y);if(o!==void 0)throw new h("SOCKET_TAG_BUDGET_EXCEEDED",`Tag ${JSON.stringify(o)} is ${String(o.length)} characters; Cloudflare allows at most ${String(y)} characters per tag.`)},W=e=>{const t=e,o=new WeakSet;let c=0,n;const a=()=>{const r=e.getWebSockets();return(n?.generation!==c||n.length!==r.length)&&(n={generation:c,length:r.length,set:new WeakSet(r)}),n.set};return{newPair:()=>{if(t.openSocketPair!==void 0)return t.openSocketPair();const r=new WebSocketPair;return{client:r[0],server:r[1]}},upgradeResponse:r=>t.upgradeResponse!==void 0?t.upgradeResponse(r):new Response(null,{status:101,webSocket:r}),accept:(r,i,l)=>{T(l);const s=r,f=crypto.randomUUID();return e.acceptWebSocket(s,[`${d}${f}`,...l??[]]),u.set(s,f),c+=1,i!==void 0&&s.serializeAttachment?.(i),s},getSockets:r=>e.getWebSockets(r),handleFor:r=>{const i=r;if(u.has(i)||v(e,i)!==void 0)return i;if(!o.has(i)){if(a().has(i))return i;o.add(i)}},idFor:r=>E(e,r)}},A=e=>{const t=n=>({fetch:a=>n.fetch(a)}),o=n=>n===void 0?void 0:{locationHint:n};return{get:(n,a)=>t(e.get(n,o(a))),getByName:(n,a)=>t(e.get(e.idFromName(n),o(a))),idForName:n=>e.idFromName(n),jurisdiction:n=>A(e.jurisdiction(n))}};export{k as createShardAlarms,A as createShardDirectory,D as createShardHost,_ as createShardKvStore,W as createSocketHost};

package/dist/packem_shared/createShardPlatform-lSOGSs8s.mjs

@@ -1 +0,0 @@
-import{createSocketHost as n,createShardHost as d,createShardKvStore as l,createShardDirectory as i}from"./createShardAlarms-Cm9SOaSc.mjs";import{CLOUDFLARE_CAPABILITIES as c}from"@lunora/platform";const h=e=>{const r=e;return{kv:l(r.storage),shard:d(r),sockets:n(r)}},m=(e,r={})=>{const s=e??{},a=o=>{const t=s[o];if(t==null)throw new Error(`@lunora/platform-cloudflare: no Durable Object namespace bound as "${o}" — add it to wrangler.jsonc's durable_objects.bindings`);return i(t)};return r.scheduler===void 0?{capabilities:c,directory:a}:{capabilities:c,directory:a,scheduler:r.scheduler}};export{h as createShardPlatform,m as createWorkerPlatform};