@lunora/queue 1.0.0-alpha.3 → 1.0.0-alpha.31

package/LICENSE.md

@@ -103,3 +103,9 @@ Unless required by applicable law or agreed to in writing, software distributed
 under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
 CONDITIONS OF ANY KIND, either express or implied. See the License for the
 specific language governing permissions and limitations under the License.
+
+<!-- DEPENDENCIES -->
+<!-- /DEPENDENCIES -->
+
+<!-- TYPE_DEPENDENCIES -->
+<!-- /TYPE_DEPENDENCIES -->

package/README.md

@@ -26,13 +26,19 @@ import { api } from "./_generated/api";
 export const emailQueue = defineQueue<{ to: string }>({
     handler: async (ctx, batch) => {
         for (const message of batch.messages) {
-            await ctx.run(api.email.send, { to: message.body.to });
+            await message.run(api.email.send, { to: message.body.to });
             message.ack();
         }
     },
 });
 ```
 
+`message.run(...)` is `ctx.run(...)` pinned to that message. Call it inside the
+batch loop: when the dispatched function fails deterministically (`400`, `403`,
+`404`, `422`), the consumer acks just that message and retries the rest instead
+of letting one poison message retry — and eventually dead-letter — the whole
+batch.
+
 ```ts
 // inside a mutation/action
 await ctx.queues.emailQueue.send({ to: user.email });

package/dist/index.d.mts

@@ -1,9 +1,11 @@
+import { QueueBindingLike, MessageBatchLike, MessageLike, QueueSendOptions, MessageSendRequestLike, QueueSendBatchOptions } from '@lunora/platform';
+export type { MessageBatchLike, MessageLike, MessageSendRequestLike, QueueBindingLike, QueueContentType, QueueRetryOptions, QueueSendBatchOptions, QueueSendOptions } from '@lunora/platform';
 /**
-* Shared types for dispatching a Lunora function back into the worker from a
-* server-initiated context (a workflow body, a queue handler, a scheduled job).
-* Node-safe — no Cloudflare runtime imports — so the consumers stay unit-testable
-* with plain-object doubles.
-*/
+ * Shared types for dispatching a Lunora function back into the worker from a
+ * server-initiated context (a workflow body, a queue handler, a scheduled job).
+ * Node-safe — no Cloudflare runtime imports — so the consumers stay unit-testable
+ * with plain-object doubles.
+ */
 /** Opaque generated function reference (`api.foo.bar`), carrying its dispatch id. */
 interface FunctionReference {
   __lunoraRef: string;
@@ -12,8 +14,19 @@ interface FunctionReference {
 type ArgsOf<F> = F extends FunctionReference ? Record<string, unknown> : never;
 /** Options for a function call made via a dispatch runner. */
 interface RunFunctionOptions {
+  /**
+   * Correlate this call with a caller-defined message/item id (e.g. a queue
+   * message's `id`). Purely local bookkeeping — never sent to the dispatch
+   * endpoint — carried onto the `LunoraError` a deterministic dispatch
+   * failure throws, so a batching consumer (`@lunora/queue`'s push handler)
+   * can read it back and attribute the failure to the one item that caused
+   * it instead of the whole batch. Optional and inert when omitted.
+   */
+  messageId?: string;
   /** Route the call to a specific shard (defaults to the worker's root shard). */
   shardKey?: string;
+  /** Abort the dispatch after this many ms; the abort is retryable. Overrides the runner's default. */
+  timeoutMs?: number;
 }
 /** Invoke a Lunora function (query/mutation/action) by reference. The shape of `ctx.run`. */
 type DispatchRunFunction = <F extends FunctionReference>(function_: F, args?: ArgsOf<F>, options?: RunFunctionOptions) => Promise<unknown>;
@@ -24,66 +37,11 @@ interface DispatchLogger {
   info: (message: unknown, ...rest: unknown[]) => void;
   warn: (message: unknown, ...rest: unknown[]) => void;
 }
-/** Build a {@link DispatchLogger} that prefixes every line with `prefix` (e.g. `[queue:email]`). */
-/** How a queue message body is serialized on the wire (Cloudflare default `"json"`). */
-type QueueContentType = "bytes" | "json" | "text" | "v8";
-/** Options for a single `producer.send(body, options?)`. */
-interface QueueSendOptions {
-  /** Wire serialization for this message (defaults to the queue's content type). */
-  contentType?: QueueContentType;
-  /** Per-message delivery delay in seconds (0–43200, i.e. up to 12 hours). */
-  delaySeconds?: number;
-}
-/** Options for a `producer.sendBatch(messages, options?)`. */
-interface QueueSendBatchOptions {
-  /** Delivery delay applied to the whole batch, in seconds. */
-  delaySeconds?: number;
-}
-/** One entry in a `sendBatch` call — a body plus optional per-message overrides. */
-interface MessageSendRequestLike<Body = unknown> {
-  body: Body;
-  contentType?: QueueContentType;
-  delaySeconds?: number;
-}
-/**
-* Minimal structural projection of workers-types' `Queue&lt;Body>` (the producer
-* binding). The real binding's `send`/`sendBatch` resolve to a metadata object;
-* we widen the return to `Promise&lt;unknown>` so a plain-object fake satisfies it.
-*/
-interface QueueBindingLike<Body = unknown> {
-  send: (message: Body, options?: QueueSendOptions) => Promise<unknown>;
-  sendBatch: (messages: Iterable<MessageSendRequestLike<Body>>, options?: QueueSendBatchOptions) => Promise<unknown>;
-}
-/** Options for retrying a message / batch (`message.retry({ delaySeconds })`). */
-interface QueueRetryOptions {
-  delaySeconds?: number;
-}
-/** Structural mirror of workers-types' `Message&lt;Body>` (one delivered message). */
-interface MessageLike<Body = unknown> {
-  /** Acknowledge this message so it is not redelivered. */
-  ack: () => void;
-  readonly attempts: number;
-  readonly body: Body;
-  readonly id: string;
-  /** Explicitly retry this message (optionally after a delay). */
-  retry: (options?: QueueRetryOptions) => void;
-  readonly timestamp: Date;
-}
-/** Structural mirror of workers-types' `MessageBatch&lt;Body>` handed to a consumer. */
-interface MessageBatchLike<Body = unknown> {
-  /** Acknowledge every message in the batch. */
-  ackAll: () => void;
-  readonly messages: ReadonlyArray<MessageLike<Body>>;
-  /** The queue name this batch was delivered from (`batch.queue`), used to route. */
-  readonly queue: string;
-  /** Retry every message in the batch (optionally after a delay). */
-  retryAll: (options?: QueueRetryOptions) => void;
-}
 /**
-* The typed producer bound to `ctx.queues.&lt;name>`. Sending is a side effect, so
-* the generated context exposes this only on `MutationCtx` / `ActionCtx` (never
-* the deterministic `QueryCtx`), mirroring `ctx.scheduler` / `ctx.workflows`.
-*/
+ * The typed producer bound to `ctx.queues.<name>`. Sending is a side effect, so
+ * the generated context exposes this only on `MutationCtx` / `ActionCtx` (never
+ * the deterministic `QueryCtx`), mirroring `ctx.scheduler` / `ctx.workflows`.
+ */
 interface QueueProducer<Body = unknown> {
   /** Enqueue one message. */
   send: (body: Body, options?: QueueSendOptions) => Promise<void>;
@@ -91,10 +49,10 @@ interface QueueProducer<Body = unknown> {
   sendBatch: (messages: Iterable<MessageSendRequestLike<Body>>, options?: QueueSendBatchOptions) => Promise<void>;
 }
 /**
-* `ctx.queues` — the map of declared queue export names → typed producers.
-* Codegen narrows this to the exact export names; the package keeps it open so
-* `createQueues` stays schema-agnostic.
-*/
+ * `ctx.queues` — the map of declared queue export names → typed producers.
+ * Codegen narrows this to the exact export names; the package keeps it open so
+ * `createQueues` stays schema-agnostic.
+ */
 interface Queues {
   [exportName: string]: QueueProducer;
 }
@@ -104,23 +62,49 @@ interface LunoraQueuesOptions {
   bindings: Record<string, QueueBindingLike>;
 }
 /**
-* The context handed to a `defineQueue` handler. Decoupled from `@lunora/server`
-* (like the workflow run context): to touch data, call a Lunora mutation/action
-* via `ctx.run(api.x.y, args)` — the dispatch goes through the same
-* `/_lunora/scheduler/dispatch` path the SchedulerDO and workflows use.
-*/
+ * The context handed to a `defineQueue` handler. Decoupled from `@lunora/server`
+ * (like the workflow run context): to touch data, call a Lunora mutation/action
+ * via `ctx.run(api.x.y, args)` — the dispatch goes through the same
+ * `/_lunora/scheduler/dispatch` path the SchedulerDO and workflows use.
+ */
 interface QueueRunContext {
   /** The worker `env` (bindings + vars). */
   readonly env: Record<string, unknown>;
   /** Queue-name-prefixed logger. */
   readonly log: DispatchLogger;
-  /** Invoke a Lunora function (query/mutation/action) by reference. */
+  /**
+   * Invoke a Lunora function (query/mutation/action) by reference.
+   *
+   * Batch-unaware: a failure it throws is attributed to nothing, so a
+   * deterministic failure retries the whole batch. Inside the `batch.messages`
+   * loop, prefer {@link QueueMessage.run}, which pins the call to its message.
+   */
   readonly run: DispatchRunFunction;
 }
+/**
+ * One delivered message as the push handler sees it: the Cloudflare `Message`
+ * plus `run` — a {@link QueueRunContext.run} pinned to THIS message.
+ *
+ * Prefer `message.run(api.x.y, args)` over `ctx.run(...)` inside the batch
+ * loop. The pin is what lets the dispatcher attribute a deterministic dispatch
+ * failure (400/403/404/422) to the one message that caused it: that message is
+ * acked and every other one is retried, instead of the whole batch being
+ * re-delivered because of a single poison message. A plain `ctx.run` call
+ * carries no message id, so its failure stays unattributed and the whole batch
+ * retries.
+ */
+interface QueueMessage<Body = unknown> extends MessageLike<Body> {
+  /** {@link QueueRunContext.run}, pinned to this message for failure attribution. */
+  readonly run: DispatchRunFunction;
+}
+/** The delivered batch as the push handler sees it — {@link QueueMessage}s rather than bare `Message`s. */
+interface QueueMessageBatch<Body = unknown> extends Omit<MessageBatchLike<Body>, "messages"> {
+  readonly messages: ReadonlyArray<QueueMessage<Body>>;
+}
 /** Whether a declared queue is consumed by this worker (push) or polled externally (pull). */
 type QueueConsumerMode = "pull" | "push";
 /** The handler body run for each delivered batch (push consumers only). */
-type QueueHandler<Body = unknown> = (context: QueueRunContext, batch: MessageBatchLike<Body>) => Promise<void> | void;
+type QueueHandler<Body = unknown> = (context: QueueRunContext, batch: QueueMessageBatch<Body>) => Promise<void> | void;
 /** Push-consumer batch/retry tuning, mirrored onto the wrangler `queues.consumers[]` entry. */
 interface QueueConsumerTuning {
   /** Name of the dead-letter queue messages land in after `maxRetries`. */
@@ -137,25 +121,25 @@ interface QueueConsumerTuning {
 /** The config object passed to `defineQueue`. */
 interface QueueConfig<Body = unknown> extends QueueConsumerTuning {
   /**
-  * The push-consumer body. Required for `mode: "push"` (the default); omit it
-  * for `mode: "pull"`, where an external worker polls the queue over HTTP.
-  */
+   * The push-consumer body. Required for `mode: "push"` (the default); omit it
+   * for `mode: "pull"`, where an external worker polls the queue over HTTP.
+   */
   handler?: QueueHandler<Body>;
   /** How this queue is consumed. Defaults to `"push"`. */
   mode?: QueueConsumerMode;
   /**
-  * Stable wrangler queue name (`queues.producers[].queue`). Defaults to the
-  * kebab-cased export name (`emailQueue` → `email-queue`).
-  */
+   * Stable wrangler queue name (`queues.producers[].queue`). Defaults to the
+   * kebab-cased export name (`emailQueue` → `email-queue`).
+   */
   name?: string;
 }
 /** The branded result of `defineQueue`, discovered by codegen + config. */
 interface QueueDefinition<Body = unknown> extends QueueConfig<Body> {
   /**
-  * Phantom carrier for the message body type, so codegen can type the
-  * generated `ctx.queues.&lt;name>` producer as `QueueProducer&lt;Body>` from
-  * `typeof &lt;export>`. Never assigned at runtime (type-only).
-  */
+   * Phantom carrier for the message body type, so codegen can type the
+   * generated `ctx.queues.<name>` producer as `QueueProducer<Body>` from
+   * `typeof <export>`. Never assigned at runtime (type-only).
+   */
   readonly __lunoraBody?: Body;
   /** Runtime brand identifying a `defineQueue` result. */
   isLunoraQueue: true;
@@ -169,98 +153,172 @@ interface QueueBindingSpec {
   /** The stable wrangler queue name, e.g. `email-queue`. */
   name: string;
 }
-/**
-* Build the `ctx.queues` map for a request: resolve every spec's `env[binding]`
-* into the `exportName → Queue binding` map and wrap it in {@link createQueues}.
-* A spec whose binding is absent from `env` is skipped here — the helpful "no
-* queue named …" error is raised lazily by `ctx.queues.&lt;name>.send(...)` when
-* the missing queue is actually used.
-*/
-declare const createQueueContext: (env: Record<string, unknown>, specs: ReadonlyArray<QueueBindingSpec>) => Queues;
-/**
-* Build the `ctx.queues` map from `lunora/queues.ts` export name → Cloudflare
-* `Queue` binding. Each property is a typed {@link QueueProducer}; accessing an
-* export whose binding is absent throws a directed error naming the declared
-* queues (raised lazily on first use).
-*/
-declare const createQueues: (options: LunoraQueuesOptions) => Queues;
-/**
-* The wrangler producer binding name for a queue export: `emailQueue` →
-* `QUEUE_EMAIL_QUEUE`, `email` → `QUEUE_EMAIL`. The `QUEUE_` prefix namespaces
-* these away from `SHARD`/`SESSION`/`SCHEDULER`/`WORKFLOW_*`/`CONTAINER_*` so a
-* queue export can never collide with the built-in bindings.
-*/
-declare const queueBindingName: (exportName: string) => string;
-/**
-* The stable queue name wrangler registers (`queues.producers[].queue` and
-* `queues.consumers[].queue`): `emailQueue` → `email-queue`. Used as the
-* deployed queue's identifier when no explicit `name` override is given.
-*/
-declare const queueDefaultName: (exportName: string) => string;
-/**
-* Declare a Cloudflare Queue deployed alongside the app. Pure validation +
-* branding: codegen discovers the export, emits the typed `ctx.queues.&lt;name>`
-* producer and (for push consumers) the worker `queue()` dispatch; the config
-* layer reconciles the wrangler `queues.producers[]` / `queues.consumers[]`
-* entries from the same definition.
-*
-* ```ts
-* // lunora/queues.ts
-* import { defineQueue } from "@lunora/queue";
-* import { api } from "./_generated/api";
-*
-* export const emailQueue = defineQueue&lt;{ to: string }>({
-*     handler: async (ctx, batch) => {
-*         for (const message of batch.messages) {
-*             await ctx.run(api.email.send, { to: message.body.to });
-*             message.ack();
-*         }
-*     },
-* });
-* ```
-*
-* Enqueue from a mutation or action: `await ctx.queues.emailQueue.send({ to })`.
-*
-* ⚠️ **Privileged dispatch.** A push handler's `ctx.run(...)` calls back into
-* Lunora functions over the admin-authenticated dispatch endpoint (the same
-* trusted path the scheduler and workflows use), so those calls run with the
-* system identity — **end-user RLS is not applied**. Treat a queue handler as
-* trusted server code: validate `message.body` (it may be attacker-influenced if
-* anything user-facing can enqueue) before acting on it, and don't forward an
-* unchecked body straight into a privileged mutation.
-*/
-declare const defineQueue: <Body = unknown>(config: QueueConfig<Body>) => QueueDefinition<Body>;
-/** True when a value is a `defineQueue` result (the runtime brand check). */
-declare const isQueueDefinition: (value: unknown) => value is QueueDefinition;
 /** One declared queue, keyed for batch routing by its stable wrangler name. */
 interface QueueRegistryEntry {
   /**
-  * The `defineQueue` result (carries the push handler). The body type is
-  * erased to `any` here because the registry is heterogeneous — different
-  * queues carry different message bodies, and the handler param is
-  * contravariant, so a precise `QueueDefinition&lt;Body>` would not be assignable
-  * to a shared `unknown`-bodied slot. Runtime dispatch passes the delivered
-  * batch straight through, so the erasure is type-only.
-  */
+   * The `defineQueue` result (carries the push handler). The body type is
+   * erased to `any` here because the registry is heterogeneous — different
+   * queues carry different message bodies, and the handler param is
+   * contravariant, so a precise `QueueDefinition<Body>` would not be assignable
+   * to a shared `unknown`-bodied slot. Runtime dispatch passes the delivered
+   * batch straight through, so the erasure is type-only.
+   */
   definition: QueueDefinition<any>;
   /** The `lunora/queues.ts` export name, for log correlation. */
   exportName: string;
 }
 /** Map of stable wrangler queue name → registry entry, built by codegen. */
 type QueueRegistry = Record<string, QueueRegistryEntry>;
+/** The disposition a consumer left one message in for a single delivery attempt. */
+type QueueMessageOutcome = "ack" | "error" | "retry";
+/**
+ * One consumed message as captured by {@link dispatchQueueBatch} and handed to an
+ * {@link QueueCaptureSink}. Structurally matches `@lunora/do`'s
+ * `RecordQueueMessageInput` (the reserved `recordQueueMessage` admin RPC payload);
+ * the two packages share only this contract, so keep them in sync by hand.
+ */
+interface CapturedQueueMessage {
+  /** Delivery attempt number for this message (`message.attempts`). */
+  attempts: number;
+  /** The message body (JSON-encoded + capped by the catcher). */
+  body: unknown;
+  /** `true` when this failed delivery was the message's last (its retries are exhausted — the broker dead-letters it). */
+  deadLettered: boolean;
+  /** Handler error message when `outcome` is `error`; absent otherwise. */
+  error?: string;
+  /** The `lunora/queues.ts` export name that consumed it. */
+  exportName: string;
+  /** The delivered message id (`message.id`). */
+  messageId: string;
+  /** How the handler disposed of the message this attempt. */
+  outcome: QueueMessageOutcome;
+  /** The stable wrangler queue name the batch was delivered from (`batch.queue`). */
+  queue: string;
+  /** Original message timestamp in epoch-ms (`message.timestamp`). */
+  timestamp: number;
+}
+/**
+ * Persists a batch of consumed messages. The codegen worker wires this to POST the
+ * batch to the root shard's `recordQueueMessage` admin RPC (the dev queue catcher).
+ * Best-effort by contract: {@link dispatchQueueBatch} swallows a rejection so a
+ * capture failure never changes delivery semantics.
+ */
+type QueueCaptureSink = (messages: CapturedQueueMessage[]) => Promise<void> | void;
 interface DispatchOptions {
+  /**
+   * Optional capture sink. When set, every message's final disposition is
+   * turned into a record and handed to this sink after the handler runs.
+   * Omitted in production unless queue capture is enabled, so a consumer pays
+   * no record-building or sink cost by default. Delivery semantics — including
+   * poison-message isolation — do not depend on it.
+   */
+  capture?: QueueCaptureSink;
   /** Worker `env`, forwarded to the queue run context. */
   env: Record<string, unknown>;
   /** Injectable fetch for the `ctx.run` dispatcher (tests). */
   fetchImpl?: typeof fetch;
 }
 /**
-* Look up the handler for `batch.queue` and invoke it with a fresh
-* `QueueRunContext`. Throws a directed error when no push handler is registered
-* for the delivered queue (a misconfiguration — the consumer was declared
-* `pull`, or the queue name drifted from the `defineQueue` export).
-*/
+ * Look up the handler for `batch.queue` and invoke it with a fresh
+ * `QueueRunContext`. Throws a directed error when no push handler is registered
+ * for the delivered queue (a misconfiguration — the consumer was declared
+ * `pull`, or the queue name drifted from the `defineQueue` export).
+ */
 declare const dispatchQueueBatch: (batch: MessageBatchLike, registry: QueueRegistry, options: DispatchOptions) => Promise<void>;
+/** A Worker `env` projected as a plain record (vars, secrets, and bindings are `unknown`-valued). */
+type QueueEnv = Record<string, unknown>;
+/** Options for {@link createQueueCaptureSink}. */
+interface QueueCaptureOptions {
+  /** Pin the consumed-message log to a Cloudflare data-residency jurisdiction (match the worker's `jurisdiction`). */
+  jurisdiction?: string;
+  /** Shard the consumed-message log lives on; override if the worker sets a custom `defaultShardKey`. */
+  rootShard?: string;
+}
+/**
+ * Whether consumed queue messages should be captured into the studio's log.
+ * Explicit `LUNORA_QUEUE_CAPTURE` (`"1"`/`"true"` vs `"0"`/`"false"`) always wins;
+ * unset, capture is on only in a development environment. Mirrors
+ * `@lunora/mail`'s `shouldCaptureMail` so mail and queue dev capture toggle the
+ * same way.
+ */
+declare const shouldCaptureQueue: (env: QueueEnv) => boolean;
+/**
+ * Build the {@link QueueCaptureSink} that records a processed batch into the
+ * studio's root-shard consumed-message log via the reserved `recordQueueMessage`
+ * admin RPC. Best-effort by contract: without the `SHARD` binding or
+ * `LUNORA_ADMIN_TOKEN` it no-ops, and `dispatchQueueBatch` swallows a
+ * rejection, so capture never changes delivery semantics.
+ */
+declare const createQueueCaptureSink: (env: QueueEnv, options?: QueueCaptureOptions) => QueueCaptureSink;
+/**
+ * Build the `ctx.queues` map for a request: resolve every spec's `env[binding]`
+ * into the `exportName → Queue binding` map and wrap it in {@link createQueues}.
+ * A spec whose binding is absent from `env` is skipped here — the helpful "no
+ * queue named …" error is raised lazily by `ctx.queues.<name>.send(...)` when
+ * the missing queue is actually used.
+ */
+declare const createQueueContext: (env: Record<string, unknown>, specs: ReadonlyArray<QueueBindingSpec>) => Queues;
+/**
+ * Build the `ctx.queues` map from `lunora/queues.ts` export name → Cloudflare
+ * `Queue` binding. Each property is a typed {@link QueueProducer}; accessing an
+ * export whose binding is absent throws a directed error naming the declared
+ * queues (raised lazily on first use).
+ */
+declare const createQueues: (options: LunoraQueuesOptions) => Queues;
+/**
+ * The wrangler producer binding name for a queue export: `emailQueue` →
+ * `QUEUE_EMAIL_QUEUE`, `email` → `QUEUE_EMAIL`. The `QUEUE_` prefix namespaces
+ * these away from `SHARD`/`SESSION`/`SCHEDULER`/`WORKFLOW_*`/`CONTAINER_*` so a
+ * queue export can never collide with the built-in bindings.
+ */
+declare const queueBindingName: (exportName: string) => string;
+/**
+ * The stable queue name wrangler registers (`queues.producers[].queue` and
+ * `queues.consumers[].queue`): `emailQueue` → `email-queue`. Used as the
+ * deployed queue's identifier when no explicit `name` override is given.
+ */
+declare const queueDefaultName: (exportName: string) => string;
+/**
+ * Declare a Cloudflare Queue deployed alongside the app. Pure validation +
+ * branding: codegen discovers the export, emits the typed `ctx.queues.<name>`
+ * producer and (for push consumers) the worker `queue()` dispatch; the config
+ * layer reconciles the wrangler `queues.producers[]` / `queues.consumers[]`
+ * entries from the same definition.
+ *
+ * ```ts
+ * // lunora/queues.ts
+ * import { defineQueue } from "@lunora/queue";
+ * import { api } from "./_generated/api";
+ *
+ * export const emailQueue = defineQueue<{ to: string }>({
+ *     handler: async (ctx, batch) => {
+ *         for (const message of batch.messages) {
+ *             await message.run(api.email.send, { to: message.body.to });
+ *             message.ack();
+ *         }
+ *     },
+ * });
+ * ```
+ *
+ * Enqueue from a mutation or action: `await ctx.queues.emailQueue.send({ to })`.
+ *
+ * `message.run(...)` is `ctx.run(...)` pinned to that message — prefer it inside
+ * the batch loop. A deterministic failure (400/403/404/422) from a pinned call
+ * is attributed to its message: that one is acked and the rest are retried,
+ * instead of one poison message re-delivering (and eventually dead-lettering)
+ * the whole batch.
+ *
+ * ⚠️ **Privileged dispatch.** A push handler's `ctx.run(...)` calls back into
+ * Lunora functions over the admin-authenticated dispatch endpoint (the same
+ * trusted path the scheduler and workflows use), so those calls run with the
+ * system identity — **end-user RLS is not applied**. Treat a queue handler as
+ * trusted server code: validate `message.body` (it may be attacker-influenced if
+ * anything user-facing can enqueue) before acting on it, and don't forward an
+ * unchecked body straight into a privileged mutation.
+ */
+declare const defineQueue: <Body = unknown>(config: QueueConfig<Body>) => QueueDefinition<Body>;
+/** True when a value is a `defineQueue` result (the runtime brand check). */
+declare const isQueueDefinition: (value: unknown) => value is QueueDefinition;
 interface RunContextOptions {
   env: Record<string, unknown>;
   exportName: string;
@@ -268,4 +326,4 @@ interface RunContextOptions {
 }
 /** Assemble the {@link QueueRunContext} passed to a `defineQueue` handler. */
 declare const createQueueRunContext: (options: RunContextOptions) => QueueRunContext;
-export { type ArgsOf, type FunctionReference, type LunoraQueuesOptions, type MessageBatchLike, type MessageLike, type MessageSendRequestLike, type QueueBindingLike, type QueueBindingSpec, type QueueConfig, type QueueConsumerMode, type QueueConsumerTuning, type QueueContentType, type QueueDefinition, type QueueHandler, type DispatchLogger as QueueLogger, type QueueProducer, type QueueRegistry, type QueueRegistryEntry, type QueueRetryOptions, type QueueRunContext, type DispatchRunFunction as QueueRunFunction, type QueueSendBatchOptions, type QueueSendOptions, type Queues, type RunFunctionOptions, createQueueContext, createQueueRunContext, createQueues, defineQueue, dispatchQueueBatch, isQueueDefinition, queueBindingName, queueDefaultName };
+export { type ArgsOf, type CapturedQueueMessage, type FunctionReference, type LunoraQueuesOptions, type QueueBindingSpec, type QueueCaptureOptions, type QueueCaptureSink, type QueueConfig, type QueueConsumerMode, type QueueConsumerTuning, type QueueDefinition, type QueueEnv, type QueueHandler, type DispatchLogger as QueueLogger, type QueueMessage, type QueueMessageBatch, type QueueProducer, type QueueRegistry, type QueueRegistryEntry, type QueueRunContext, type DispatchRunFunction as QueueRunFunction, type Queues, type RunFunctionOptions, createQueueCaptureSink, createQueueContext, createQueueRunContext, createQueues, defineQueue, dispatchQueueBatch, isQueueDefinition, queueBindingName, queueDefaultName, shouldCaptureQueue };

package/dist/index.d.ts

@@ -1,9 +1,11 @@
+import { QueueBindingLike, MessageBatchLike, MessageLike, QueueSendOptions, MessageSendRequestLike, QueueSendBatchOptions } from '@lunora/platform';
+export type { MessageBatchLike, MessageLike, MessageSendRequestLike, QueueBindingLike, QueueContentType, QueueRetryOptions, QueueSendBatchOptions, QueueSendOptions } from '@lunora/platform';
 /**
-* Shared types for dispatching a Lunora function back into the worker from a
-* server-initiated context (a workflow body, a queue handler, a scheduled job).
-* Node-safe — no Cloudflare runtime imports — so the consumers stay unit-testable
-* with plain-object doubles.
-*/
+ * Shared types for dispatching a Lunora function back into the worker from a
+ * server-initiated context (a workflow body, a queue handler, a scheduled job).
+ * Node-safe — no Cloudflare runtime imports — so the consumers stay unit-testable
+ * with plain-object doubles.
+ */
 /** Opaque generated function reference (`api.foo.bar`), carrying its dispatch id. */
 interface FunctionReference {
   __lunoraRef: string;
@@ -12,8 +14,19 @@ interface FunctionReference {
 type ArgsOf<F> = F extends FunctionReference ? Record<string, unknown> : never;
 /** Options for a function call made via a dispatch runner. */
 interface RunFunctionOptions {
+  /**
+   * Correlate this call with a caller-defined message/item id (e.g. a queue
+   * message's `id`). Purely local bookkeeping — never sent to the dispatch
+   * endpoint — carried onto the `LunoraError` a deterministic dispatch
+   * failure throws, so a batching consumer (`@lunora/queue`'s push handler)
+   * can read it back and attribute the failure to the one item that caused
+   * it instead of the whole batch. Optional and inert when omitted.
+   */
+  messageId?: string;
   /** Route the call to a specific shard (defaults to the worker's root shard). */
   shardKey?: string;
+  /** Abort the dispatch after this many ms; the abort is retryable. Overrides the runner's default. */
+  timeoutMs?: number;
 }
 /** Invoke a Lunora function (query/mutation/action) by reference. The shape of `ctx.run`. */
 type DispatchRunFunction = <F extends FunctionReference>(function_: F, args?: ArgsOf<F>, options?: RunFunctionOptions) => Promise<unknown>;
@@ -24,66 +37,11 @@ interface DispatchLogger {
   info: (message: unknown, ...rest: unknown[]) => void;
   warn: (message: unknown, ...rest: unknown[]) => void;
 }
-/** Build a {@link DispatchLogger} that prefixes every line with `prefix` (e.g. `[queue:email]`). */
-/** How a queue message body is serialized on the wire (Cloudflare default `"json"`). */
-type QueueContentType = "bytes" | "json" | "text" | "v8";
-/** Options for a single `producer.send(body, options?)`. */
-interface QueueSendOptions {
-  /** Wire serialization for this message (defaults to the queue's content type). */
-  contentType?: QueueContentType;
-  /** Per-message delivery delay in seconds (0–43200, i.e. up to 12 hours). */
-  delaySeconds?: number;
-}
-/** Options for a `producer.sendBatch(messages, options?)`. */
-interface QueueSendBatchOptions {
-  /** Delivery delay applied to the whole batch, in seconds. */
-  delaySeconds?: number;
-}
-/** One entry in a `sendBatch` call — a body plus optional per-message overrides. */
-interface MessageSendRequestLike<Body = unknown> {
-  body: Body;
-  contentType?: QueueContentType;
-  delaySeconds?: number;
-}
-/**
-* Minimal structural projection of workers-types' `Queue&lt;Body>` (the producer
-* binding). The real binding's `send`/`sendBatch` resolve to a metadata object;
-* we widen the return to `Promise&lt;unknown>` so a plain-object fake satisfies it.
-*/
-interface QueueBindingLike<Body = unknown> {
-  send: (message: Body, options?: QueueSendOptions) => Promise<unknown>;
-  sendBatch: (messages: Iterable<MessageSendRequestLike<Body>>, options?: QueueSendBatchOptions) => Promise<unknown>;
-}
-/** Options for retrying a message / batch (`message.retry({ delaySeconds })`). */
-interface QueueRetryOptions {
-  delaySeconds?: number;
-}
-/** Structural mirror of workers-types' `Message&lt;Body>` (one delivered message). */
-interface MessageLike<Body = unknown> {
-  /** Acknowledge this message so it is not redelivered. */
-  ack: () => void;
-  readonly attempts: number;
-  readonly body: Body;
-  readonly id: string;
-  /** Explicitly retry this message (optionally after a delay). */
-  retry: (options?: QueueRetryOptions) => void;
-  readonly timestamp: Date;
-}
-/** Structural mirror of workers-types' `MessageBatch&lt;Body>` handed to a consumer. */
-interface MessageBatchLike<Body = unknown> {
-  /** Acknowledge every message in the batch. */
-  ackAll: () => void;
-  readonly messages: ReadonlyArray<MessageLike<Body>>;
-  /** The queue name this batch was delivered from (`batch.queue`), used to route. */
-  readonly queue: string;
-  /** Retry every message in the batch (optionally after a delay). */
-  retryAll: (options?: QueueRetryOptions) => void;
-}
 /**
-* The typed producer bound to `ctx.queues.&lt;name>`. Sending is a side effect, so
-* the generated context exposes this only on `MutationCtx` / `ActionCtx` (never
-* the deterministic `QueryCtx`), mirroring `ctx.scheduler` / `ctx.workflows`.
-*/
+ * The typed producer bound to `ctx.queues.<name>`. Sending is a side effect, so
+ * the generated context exposes this only on `MutationCtx` / `ActionCtx` (never
+ * the deterministic `QueryCtx`), mirroring `ctx.scheduler` / `ctx.workflows`.
+ */
 interface QueueProducer<Body = unknown> {
   /** Enqueue one message. */
   send: (body: Body, options?: QueueSendOptions) => Promise<void>;
@@ -91,10 +49,10 @@ interface QueueProducer<Body = unknown> {
   sendBatch: (messages: Iterable<MessageSendRequestLike<Body>>, options?: QueueSendBatchOptions) => Promise<void>;
 }
 /**
-* `ctx.queues` — the map of declared queue export names → typed producers.
-* Codegen narrows this to the exact export names; the package keeps it open so
-* `createQueues` stays schema-agnostic.
-*/
+ * `ctx.queues` — the map of declared queue export names → typed producers.
+ * Codegen narrows this to the exact export names; the package keeps it open so
+ * `createQueues` stays schema-agnostic.
+ */
 interface Queues {
   [exportName: string]: QueueProducer;
 }
@@ -104,23 +62,49 @@ interface LunoraQueuesOptions {
   bindings: Record<string, QueueBindingLike>;
 }
 /**
-* The context handed to a `defineQueue` handler. Decoupled from `@lunora/server`
-* (like the workflow run context): to touch data, call a Lunora mutation/action
-* via `ctx.run(api.x.y, args)` — the dispatch goes through the same
-* `/_lunora/scheduler/dispatch` path the SchedulerDO and workflows use.
-*/
+ * The context handed to a `defineQueue` handler. Decoupled from `@lunora/server`
+ * (like the workflow run context): to touch data, call a Lunora mutation/action
+ * via `ctx.run(api.x.y, args)` — the dispatch goes through the same
+ * `/_lunora/scheduler/dispatch` path the SchedulerDO and workflows use.
+ */
 interface QueueRunContext {
   /** The worker `env` (bindings + vars). */
   readonly env: Record<string, unknown>;
   /** Queue-name-prefixed logger. */
   readonly log: DispatchLogger;
-  /** Invoke a Lunora function (query/mutation/action) by reference. */
+  /**
+   * Invoke a Lunora function (query/mutation/action) by reference.
+   *
+   * Batch-unaware: a failure it throws is attributed to nothing, so a
+   * deterministic failure retries the whole batch. Inside the `batch.messages`
+   * loop, prefer {@link QueueMessage.run}, which pins the call to its message.
+   */
   readonly run: DispatchRunFunction;
 }
+/**
+ * One delivered message as the push handler sees it: the Cloudflare `Message`
+ * plus `run` — a {@link QueueRunContext.run} pinned to THIS message.
+ *
+ * Prefer `message.run(api.x.y, args)` over `ctx.run(...)` inside the batch
+ * loop. The pin is what lets the dispatcher attribute a deterministic dispatch
+ * failure (400/403/404/422) to the one message that caused it: that message is
+ * acked and every other one is retried, instead of the whole batch being
+ * re-delivered because of a single poison message. A plain `ctx.run` call
+ * carries no message id, so its failure stays unattributed and the whole batch
+ * retries.
+ */
+interface QueueMessage<Body = unknown> extends MessageLike<Body> {
+  /** {@link QueueRunContext.run}, pinned to this message for failure attribution. */
+  readonly run: DispatchRunFunction;
+}
+/** The delivered batch as the push handler sees it — {@link QueueMessage}s rather than bare `Message`s. */
+interface QueueMessageBatch<Body = unknown> extends Omit<MessageBatchLike<Body>, "messages"> {
+  readonly messages: ReadonlyArray<QueueMessage<Body>>;
+}
 /** Whether a declared queue is consumed by this worker (push) or polled externally (pull). */
 type QueueConsumerMode = "pull" | "push";
 /** The handler body run for each delivered batch (push consumers only). */
-type QueueHandler<Body = unknown> = (context: QueueRunContext, batch: MessageBatchLike<Body>) => Promise<void> | void;
+type QueueHandler<Body = unknown> = (context: QueueRunContext, batch: QueueMessageBatch<Body>) => Promise<void> | void;
 /** Push-consumer batch/retry tuning, mirrored onto the wrangler `queues.consumers[]` entry. */
 interface QueueConsumerTuning {
   /** Name of the dead-letter queue messages land in after `maxRetries`. */
@@ -137,25 +121,25 @@ interface QueueConsumerTuning {
 /** The config object passed to `defineQueue`. */
 interface QueueConfig<Body = unknown> extends QueueConsumerTuning {
   /**
-  * The push-consumer body. Required for `mode: "push"` (the default); omit it
-  * for `mode: "pull"`, where an external worker polls the queue over HTTP.
-  */
+   * The push-consumer body. Required for `mode: "push"` (the default); omit it
+   * for `mode: "pull"`, where an external worker polls the queue over HTTP.
+   */
   handler?: QueueHandler<Body>;
   /** How this queue is consumed. Defaults to `"push"`. */
   mode?: QueueConsumerMode;
   /**
-  * Stable wrangler queue name (`queues.producers[].queue`). Defaults to the
-  * kebab-cased export name (`emailQueue` → `email-queue`).
-  */
+   * Stable wrangler queue name (`queues.producers[].queue`). Defaults to the
+   * kebab-cased export name (`emailQueue` → `email-queue`).
+   */
   name?: string;
 }
 /** The branded result of `defineQueue`, discovered by codegen + config. */
 interface QueueDefinition<Body = unknown> extends QueueConfig<Body> {
   /**
-  * Phantom carrier for the message body type, so codegen can type the
-  * generated `ctx.queues.&lt;name>` producer as `QueueProducer&lt;Body>` from
-  * `typeof &lt;export>`. Never assigned at runtime (type-only).
-  */
+   * Phantom carrier for the message body type, so codegen can type the
+   * generated `ctx.queues.<name>` producer as `QueueProducer<Body>` from
+   * `typeof <export>`. Never assigned at runtime (type-only).
+   */
   readonly __lunoraBody?: Body;
   /** Runtime brand identifying a `defineQueue` result. */
   isLunoraQueue: true;
@@ -169,98 +153,172 @@ interface QueueBindingSpec {
   /** The stable wrangler queue name, e.g. `email-queue`. */
   name: string;
 }
-/**
-* Build the `ctx.queues` map for a request: resolve every spec's `env[binding]`
-* into the `exportName → Queue binding` map and wrap it in {@link createQueues}.
-* A spec whose binding is absent from `env` is skipped here — the helpful "no
-* queue named …" error is raised lazily by `ctx.queues.&lt;name>.send(...)` when
-* the missing queue is actually used.
-*/
-declare const createQueueContext: (env: Record<string, unknown>, specs: ReadonlyArray<QueueBindingSpec>) => Queues;
-/**
-* Build the `ctx.queues` map from `lunora/queues.ts` export name → Cloudflare
-* `Queue` binding. Each property is a typed {@link QueueProducer}; accessing an
-* export whose binding is absent throws a directed error naming the declared
-* queues (raised lazily on first use).
-*/
-declare const createQueues: (options: LunoraQueuesOptions) => Queues;
-/**
-* The wrangler producer binding name for a queue export: `emailQueue` →
-* `QUEUE_EMAIL_QUEUE`, `email` → `QUEUE_EMAIL`. The `QUEUE_` prefix namespaces
-* these away from `SHARD`/`SESSION`/`SCHEDULER`/`WORKFLOW_*`/`CONTAINER_*` so a
-* queue export can never collide with the built-in bindings.
-*/
-declare const queueBindingName: (exportName: string) => string;
-/**
-* The stable queue name wrangler registers (`queues.producers[].queue` and
-* `queues.consumers[].queue`): `emailQueue` → `email-queue`. Used as the
-* deployed queue's identifier when no explicit `name` override is given.
-*/
-declare const queueDefaultName: (exportName: string) => string;
-/**
-* Declare a Cloudflare Queue deployed alongside the app. Pure validation +
-* branding: codegen discovers the export, emits the typed `ctx.queues.&lt;name>`
-* producer and (for push consumers) the worker `queue()` dispatch; the config
-* layer reconciles the wrangler `queues.producers[]` / `queues.consumers[]`
-* entries from the same definition.
-*
-* ```ts
-* // lunora/queues.ts
-* import { defineQueue } from "@lunora/queue";
-* import { api } from "./_generated/api";
-*
-* export const emailQueue = defineQueue&lt;{ to: string }>({
-*     handler: async (ctx, batch) => {
-*         for (const message of batch.messages) {
-*             await ctx.run(api.email.send, { to: message.body.to });
-*             message.ack();
-*         }
-*     },
-* });
-* ```
-*
-* Enqueue from a mutation or action: `await ctx.queues.emailQueue.send({ to })`.
-*
-* ⚠️ **Privileged dispatch.** A push handler's `ctx.run(...)` calls back into
-* Lunora functions over the admin-authenticated dispatch endpoint (the same
-* trusted path the scheduler and workflows use), so those calls run with the
-* system identity — **end-user RLS is not applied**. Treat a queue handler as
-* trusted server code: validate `message.body` (it may be attacker-influenced if
-* anything user-facing can enqueue) before acting on it, and don't forward an
-* unchecked body straight into a privileged mutation.
-*/
-declare const defineQueue: <Body = unknown>(config: QueueConfig<Body>) => QueueDefinition<Body>;
-/** True when a value is a `defineQueue` result (the runtime brand check). */
-declare const isQueueDefinition: (value: unknown) => value is QueueDefinition;
 /** One declared queue, keyed for batch routing by its stable wrangler name. */
 interface QueueRegistryEntry {
   /**
-  * The `defineQueue` result (carries the push handler). The body type is
-  * erased to `any` here because the registry is heterogeneous — different
-  * queues carry different message bodies, and the handler param is
-  * contravariant, so a precise `QueueDefinition&lt;Body>` would not be assignable
-  * to a shared `unknown`-bodied slot. Runtime dispatch passes the delivered
-  * batch straight through, so the erasure is type-only.
-  */
+   * The `defineQueue` result (carries the push handler). The body type is
+   * erased to `any` here because the registry is heterogeneous — different
+   * queues carry different message bodies, and the handler param is
+   * contravariant, so a precise `QueueDefinition<Body>` would not be assignable
+   * to a shared `unknown`-bodied slot. Runtime dispatch passes the delivered
+   * batch straight through, so the erasure is type-only.
+   */
   definition: QueueDefinition<any>;
   /** The `lunora/queues.ts` export name, for log correlation. */
   exportName: string;
 }
 /** Map of stable wrangler queue name → registry entry, built by codegen. */
 type QueueRegistry = Record<string, QueueRegistryEntry>;
+/** The disposition a consumer left one message in for a single delivery attempt. */
+type QueueMessageOutcome = "ack" | "error" | "retry";
+/**
+ * One consumed message as captured by {@link dispatchQueueBatch} and handed to an
+ * {@link QueueCaptureSink}. Structurally matches `@lunora/do`'s
+ * `RecordQueueMessageInput` (the reserved `recordQueueMessage` admin RPC payload);
+ * the two packages share only this contract, so keep them in sync by hand.
+ */
+interface CapturedQueueMessage {
+  /** Delivery attempt number for this message (`message.attempts`). */
+  attempts: number;
+  /** The message body (JSON-encoded + capped by the catcher). */
+  body: unknown;
+  /** `true` when this failed delivery was the message's last (its retries are exhausted — the broker dead-letters it). */
+  deadLettered: boolean;
+  /** Handler error message when `outcome` is `error`; absent otherwise. */
+  error?: string;
+  /** The `lunora/queues.ts` export name that consumed it. */
+  exportName: string;
+  /** The delivered message id (`message.id`). */
+  messageId: string;
+  /** How the handler disposed of the message this attempt. */
+  outcome: QueueMessageOutcome;
+  /** The stable wrangler queue name the batch was delivered from (`batch.queue`). */
+  queue: string;
+  /** Original message timestamp in epoch-ms (`message.timestamp`). */
+  timestamp: number;
+}
+/**
+ * Persists a batch of consumed messages. The codegen worker wires this to POST the
+ * batch to the root shard's `recordQueueMessage` admin RPC (the dev queue catcher).
+ * Best-effort by contract: {@link dispatchQueueBatch} swallows a rejection so a
+ * capture failure never changes delivery semantics.
+ */
+type QueueCaptureSink = (messages: CapturedQueueMessage[]) => Promise<void> | void;
 interface DispatchOptions {
+  /**
+   * Optional capture sink. When set, every message's final disposition is
+   * turned into a record and handed to this sink after the handler runs.
+   * Omitted in production unless queue capture is enabled, so a consumer pays
+   * no record-building or sink cost by default. Delivery semantics — including
+   * poison-message isolation — do not depend on it.
+   */
+  capture?: QueueCaptureSink;
   /** Worker `env`, forwarded to the queue run context. */
   env: Record<string, unknown>;
   /** Injectable fetch for the `ctx.run` dispatcher (tests). */
   fetchImpl?: typeof fetch;
 }
 /**
-* Look up the handler for `batch.queue` and invoke it with a fresh
-* `QueueRunContext`. Throws a directed error when no push handler is registered
-* for the delivered queue (a misconfiguration — the consumer was declared
-* `pull`, or the queue name drifted from the `defineQueue` export).
-*/
+ * Look up the handler for `batch.queue` and invoke it with a fresh
+ * `QueueRunContext`. Throws a directed error when no push handler is registered
+ * for the delivered queue (a misconfiguration — the consumer was declared
+ * `pull`, or the queue name drifted from the `defineQueue` export).
+ */
 declare const dispatchQueueBatch: (batch: MessageBatchLike, registry: QueueRegistry, options: DispatchOptions) => Promise<void>;
+/** A Worker `env` projected as a plain record (vars, secrets, and bindings are `unknown`-valued). */
+type QueueEnv = Record<string, unknown>;
+/** Options for {@link createQueueCaptureSink}. */
+interface QueueCaptureOptions {
+  /** Pin the consumed-message log to a Cloudflare data-residency jurisdiction (match the worker's `jurisdiction`). */
+  jurisdiction?: string;
+  /** Shard the consumed-message log lives on; override if the worker sets a custom `defaultShardKey`. */
+  rootShard?: string;
+}
+/**
+ * Whether consumed queue messages should be captured into the studio's log.
+ * Explicit `LUNORA_QUEUE_CAPTURE` (`"1"`/`"true"` vs `"0"`/`"false"`) always wins;
+ * unset, capture is on only in a development environment. Mirrors
+ * `@lunora/mail`'s `shouldCaptureMail` so mail and queue dev capture toggle the
+ * same way.
+ */
+declare const shouldCaptureQueue: (env: QueueEnv) => boolean;
+/**
+ * Build the {@link QueueCaptureSink} that records a processed batch into the
+ * studio's root-shard consumed-message log via the reserved `recordQueueMessage`
+ * admin RPC. Best-effort by contract: without the `SHARD` binding or
+ * `LUNORA_ADMIN_TOKEN` it no-ops, and `dispatchQueueBatch` swallows a
+ * rejection, so capture never changes delivery semantics.
+ */
+declare const createQueueCaptureSink: (env: QueueEnv, options?: QueueCaptureOptions) => QueueCaptureSink;
+/**
+ * Build the `ctx.queues` map for a request: resolve every spec's `env[binding]`
+ * into the `exportName → Queue binding` map and wrap it in {@link createQueues}.
+ * A spec whose binding is absent from `env` is skipped here — the helpful "no
+ * queue named …" error is raised lazily by `ctx.queues.<name>.send(...)` when
+ * the missing queue is actually used.
+ */
+declare const createQueueContext: (env: Record<string, unknown>, specs: ReadonlyArray<QueueBindingSpec>) => Queues;
+/**
+ * Build the `ctx.queues` map from `lunora/queues.ts` export name → Cloudflare
+ * `Queue` binding. Each property is a typed {@link QueueProducer}; accessing an
+ * export whose binding is absent throws a directed error naming the declared
+ * queues (raised lazily on first use).
+ */
+declare const createQueues: (options: LunoraQueuesOptions) => Queues;
+/**
+ * The wrangler producer binding name for a queue export: `emailQueue` →
+ * `QUEUE_EMAIL_QUEUE`, `email` → `QUEUE_EMAIL`. The `QUEUE_` prefix namespaces
+ * these away from `SHARD`/`SESSION`/`SCHEDULER`/`WORKFLOW_*`/`CONTAINER_*` so a
+ * queue export can never collide with the built-in bindings.
+ */
+declare const queueBindingName: (exportName: string) => string;
+/**
+ * The stable queue name wrangler registers (`queues.producers[].queue` and
+ * `queues.consumers[].queue`): `emailQueue` → `email-queue`. Used as the
+ * deployed queue's identifier when no explicit `name` override is given.
+ */
+declare const queueDefaultName: (exportName: string) => string;
+/**
+ * Declare a Cloudflare Queue deployed alongside the app. Pure validation +
+ * branding: codegen discovers the export, emits the typed `ctx.queues.<name>`
+ * producer and (for push consumers) the worker `queue()` dispatch; the config
+ * layer reconciles the wrangler `queues.producers[]` / `queues.consumers[]`
+ * entries from the same definition.
+ *
+ * ```ts
+ * // lunora/queues.ts
+ * import { defineQueue } from "@lunora/queue";
+ * import { api } from "./_generated/api";
+ *
+ * export const emailQueue = defineQueue<{ to: string }>({
+ *     handler: async (ctx, batch) => {
+ *         for (const message of batch.messages) {
+ *             await message.run(api.email.send, { to: message.body.to });
+ *             message.ack();
+ *         }
+ *     },
+ * });
+ * ```
+ *
+ * Enqueue from a mutation or action: `await ctx.queues.emailQueue.send({ to })`.
+ *
+ * `message.run(...)` is `ctx.run(...)` pinned to that message — prefer it inside
+ * the batch loop. A deterministic failure (400/403/404/422) from a pinned call
+ * is attributed to its message: that one is acked and the rest are retried,
+ * instead of one poison message re-delivering (and eventually dead-lettering)
+ * the whole batch.
+ *
+ * ⚠️ **Privileged dispatch.** A push handler's `ctx.run(...)` calls back into
+ * Lunora functions over the admin-authenticated dispatch endpoint (the same
+ * trusted path the scheduler and workflows use), so those calls run with the
+ * system identity — **end-user RLS is not applied**. Treat a queue handler as
+ * trusted server code: validate `message.body` (it may be attacker-influenced if
+ * anything user-facing can enqueue) before acting on it, and don't forward an
+ * unchecked body straight into a privileged mutation.
+ */
+declare const defineQueue: <Body = unknown>(config: QueueConfig<Body>) => QueueDefinition<Body>;
+/** True when a value is a `defineQueue` result (the runtime brand check). */
+declare const isQueueDefinition: (value: unknown) => value is QueueDefinition;
 interface RunContextOptions {
   env: Record<string, unknown>;
   exportName: string;
@@ -268,4 +326,4 @@ interface RunContextOptions {
 }
 /** Assemble the {@link QueueRunContext} passed to a `defineQueue` handler. */
 declare const createQueueRunContext: (options: RunContextOptions) => QueueRunContext;
-export { type ArgsOf, type FunctionReference, type LunoraQueuesOptions, type MessageBatchLike, type MessageLike, type MessageSendRequestLike, type QueueBindingLike, type QueueBindingSpec, type QueueConfig, type QueueConsumerMode, type QueueConsumerTuning, type QueueContentType, type QueueDefinition, type QueueHandler, type DispatchLogger as QueueLogger, type QueueProducer, type QueueRegistry, type QueueRegistryEntry, type QueueRetryOptions, type QueueRunContext, type DispatchRunFunction as QueueRunFunction, type QueueSendBatchOptions, type QueueSendOptions, type Queues, type RunFunctionOptions, createQueueContext, createQueueRunContext, createQueues, defineQueue, dispatchQueueBatch, isQueueDefinition, queueBindingName, queueDefaultName };
+export { type ArgsOf, type CapturedQueueMessage, type FunctionReference, type LunoraQueuesOptions, type QueueBindingSpec, type QueueCaptureOptions, type QueueCaptureSink, type QueueConfig, type QueueConsumerMode, type QueueConsumerTuning, type QueueDefinition, type QueueEnv, type QueueHandler, type DispatchLogger as QueueLogger, type QueueMessage, type QueueMessageBatch, type QueueProducer, type QueueRegistry, type QueueRegistryEntry, type QueueRunContext, type DispatchRunFunction as QueueRunFunction, type Queues, type RunFunctionOptions, createQueueCaptureSink, createQueueContext, createQueueRunContext, createQueues, defineQueue, dispatchQueueBatch, isQueueDefinition, queueBindingName, queueDefaultName, shouldCaptureQueue };

package/dist/index.mjs

@@ -1,5 +1 @@
-export { createQueueContext } from './packem_shared/createQueueContext-D0XCdCsd.mjs';
-export { default as createQueues } from './packem_shared/createQueues-14-vSICK.mjs';
-export { defineQueue, isQueueDefinition, queueBindingName, queueDefaultName } from './packem_shared/defineQueue-D40gREfg.mjs';
-export { dispatchQueueBatch } from './packem_shared/dispatchQueueBatch-DR15pYS7.mjs';
-export { createQueueRunContext } from './packem_shared/createQueueRunContext-_2hD-TK7.mjs';
+import{createQueueCaptureSink as t,shouldCaptureQueue as r}from"./packem_shared/createQueueCaptureSink-D8pUrrb_.mjs";import{createQueueContext as a}from"./packem_shared/createQueueContext-B9PgIzBM.mjs";import{default as i}from"./packem_shared/createQueues-FpKDoLFX.mjs";import{defineQueue as p,isQueueDefinition as m,queueBindingName as x,queueDefaultName as Q}from"./packem_shared/defineQueue-TY4-i3nG.mjs";import{dispatchQueueBatch as s}from"./packem_shared/dispatchQueueBatch-dejEVSC6.mjs";import{c as C}from"./packem_shared/run-context-C97v6VyP.mjs";export{t as createQueueCaptureSink,a as createQueueContext,C as createQueueRunContext,i as createQueues,p as defineQueue,s as dispatchQueueBatch,m as isQueueDefinition,x as queueBindingName,Q as queueDefaultName,r as shouldCaptureQueue};

package/dist/packem_shared/createQueueCaptureSink-D8pUrrb_.mjs

@@ -0,0 +1 @@
+import{LunoraError as _}from"@lunora/errors";const l="__lunora_admin__:recordQueueMessage",N="__root__",p=/^(?:dev(?:elopment)?|local(?:host)?|test)$/iu,T=["CF_ENV","ENVIRONMENT","NODE_ENV","WORKER_ENV"],f=5e3,O=o=>{const t=o.LUNORA_QUEUE_CAPTURE;return typeof t=="string"?t==="1"||t.toLowerCase()==="true":T.some(i=>{const e=o[i];return typeof e=="string"&&p.test(e)})},R=(o,t={})=>{const i=t.rootShard??N;return async e=>{if(e.length===0)return;const n=o.SHARD,s=typeof o.LUNORA_ADMIN_TOKEN=="string"?o.LUNORA_ADMIN_TOKEN:void 0;if(n===void 0||s===void 0)return;let a=n;if(t.jurisdiction!==void 0){if(typeof n.jurisdiction!="function")throw new TypeError(`@lunora/queue: Durable Object namespace does not support jurisdiction("${t.jurisdiction}") — update @cloudflare/workers-types or remove the jurisdiction option`);a=n.jurisdiction(t.jurisdiction)}const d=a.get(a.idFromName(i)),u=new AbortController,E=setTimeout(()=>{u.abort()},f);try{const r=await d.fetch("https://shard.internal/rpc",{body:JSON.stringify({args:{messages:e},functionPath:l}),headers:{authorization:`Bearer ${s}`,"content-type":"application/json"},method:"POST",signal:u.signal});if(!r.ok){const c=await r.text().catch(()=>"");throw new _("INTERNAL",`@lunora/queue: capture write to the root shard failed (${String(r.status)} ${r.statusText})${c===""?"":`: ${c}`}`)}await r.body?.cancel()}finally{clearTimeout(E)}}};export{R as createQueueCaptureSink,O as shouldCaptureQueue};

package/dist/packem_shared/createQueueContext-B9PgIzBM.mjs

@@ -0,0 +1 @@
+import i from"./createQueues-FpKDoLFX.mjs";const s=(o,c)=>{const n={};for(const t of c){const e=o[t.binding];e&&typeof e.send=="function"&&typeof e.sendBatch=="function"&&(n[t.exportName]=e)}return i({bindings:n})};export{s as createQueueContext};

package/dist/packem_shared/createQueueRunContext-Bxw8EGDA.mjs

@@ -0,0 +1 @@
+import{c as o}from"./run-context-C97v6VyP.mjs";export{o as createQueueRunContext};

package/dist/packem_shared/createQueues-FpKDoLFX.mjs

@@ -0,0 +1 @@
+import{LunoraError as i}from"@lunora/errors";const u=100,d=o=>({send:async(r,n)=>{await o.send(r,n)},sendBatch:async(r,n)=>{const t=[...r];if(t.length>u)throw new i("VALIDATION_ERROR",`@lunora/queue: sendBatch exceeds ${String(u)} (got ${String(t.length)}) — split across calls`);await o.sendBatch(t,n)}}),g=o=>{const r=o.bindings??{},n=Object.create(null);for(const[s,e]of Object.entries(r))n[s]=d(e);const t=Object.keys(n),a=s=>{const e=t.length===0?"no queues are declared":`known queues: ${t.join(", ")}`,c=()=>Promise.reject(new Error(`@lunora/queue: no queue named "${s}" (${e})`));return{send:c,sendBatch:c}};return new Proxy(n,{get(s,e){if(typeof e=="string")return Object.hasOwn(s,e)?s[e]:a(e)}})};export{g as default};

package/dist/packem_shared/defineQueue-TY4-i3nG.mjs

@@ -0,0 +1 @@
+const n=e=>`QUEUE_${e.replaceAll(/(?<=[a-z0-9])(?=[A-Z])/g,"_").toUpperCase()}`,t=e=>e.replaceAll(/(?<=[a-z0-9])(?=[A-Z])/g,"-").toLowerCase(),o=e=>{const u=e.mode??"push";if(u!=="push"&&u!=="pull")throw new TypeError(`defineQueue: \`mode\` must be "push" or "pull" (got ${JSON.stringify(e.mode)})`);if(u==="push"&&typeof e.handler!="function")throw new TypeError('defineQueue: `handler` must be a function for a push consumer (omit it only when `mode: "pull"`)');if(e.name!==void 0&&(typeof e.name!="string"||e.name.length===0))throw new TypeError("defineQueue: `name` must be a non-empty string when provided");return{...e,isLunoraQueue:!0,mode:u}},r=e=>typeof e=="object"&&e!==null&&e.isLunoraQueue===!0;export{o as defineQueue,r as isQueueDefinition,n as queueBindingName,t as queueDefaultName};

package/dist/packem_shared/dispatchQueueBatch-dejEVSC6.mjs

@@ -0,0 +1 @@
+import{c as l,k as w,M as h}from"./run-context-C97v6VyP.mjs";import{LunoraError as y}from"@lunora/errors";const v=3,k=e=>{if(e instanceof Date)return e.getTime();const n=typeof e=="number"?e:Number(e);return Number.isFinite(n)?n:0},x=(e,n)=>(t,r,o)=>e(t,r,{...o,messageId:n}),b=(e,n,t)=>{const r=x(t,e.id);return new Proxy(e,{get:(o,i)=>i==="ack"?()=>{n.set(o,"ack"),o.ack()}:i==="retry"?u=>{n.set(o,"retry"),o.retry(u)}:i==="run"?r:Reflect.get(o,i,o)})},q=(e,n,t)=>new Proxy(e,{get:(r,o)=>o==="ackAll"?()=>{t("ack"),r.ackAll()}:o==="retryAll"?i=>{t("retry"),r.retryAll(i)}:o==="messages"?n:Reflect.get(r,o,r)}),R=(e,n)=>{const t=new Map,r=e.messages,o=r.map(c=>b(c,t,n)),u=q(e,o,c=>{for(const a of r)t.has(a)||t.set(a,c)});return{dispositions:t,originals:r,wrappedBatch:u}},N=e=>{if(e instanceof Error)return e.message;if(typeof e=="string")return e;if(e!==null&&typeof e=="object")try{return JSON.stringify(e)}catch{return"[unserializable thrown value]"}return String(e)},A=(e,n,t,r,o,i)=>{const u=r?N(o):void 0,c=typeof n.definition.maxRetries=="number"?n.definition.maxRetries:v,a=r?"error":"ack";return e.originals.map(s=>{const p=s===i,d=e.dispositions.get(s),f=p?"error":d??a,m=typeof s.attempts=="number"?s.attempts:1;return{attempts:m,body:s.body,deadLettered:!p&&f!=="ack"&&m>c,error:f==="error"?u:void 0,exportName:n.exportName,messageId:s.id,outcome:f,queue:t,timestamp:k(s.timestamp)}})},g=(e,n,t)=>{if(!n||!w(t))return;const r=h(t);if(r===void 0)return;const o=e.originals.find(i=>i.id===r);if(!(o===void 0||e.dispositions.has(o)))return o},M=(e,n)=>{n.ack();for(const t of e.originals)t!==n&&!e.dispositions.has(t)&&(e.dispositions.set(t,"retry"),t.retry())},I=async(e,n,t)=>{const r=Object.hasOwn(n,e.queue)?n[e.queue]:void 0;if(r===void 0){const d=Object.keys(n),f=d.length===0?"no push queues are declared":`known push queues: ${d.join(", ")}`;throw new y("INTERNAL",`@lunora/queue: received a batch for queue "${e.queue}" but no push handler is registered (${f})`)}const{handler:o}=r.definition;if(typeof o!="function")throw new TypeError(`@lunora/queue: queue "${e.queue}" (${r.exportName}) has no push handler — it is declared as a pull consumer`);const i=l({env:t.env,exportName:r.exportName,fetchImpl:t.fetchImpl}),u=R(e,i.run);let c=!1,a;try{await o(i,u.wrappedBatch)}catch(d){c=!0,a=d}const s=g(u,c,a);s!==void 0&&M(u,s);const p=c&&s===void 0;if(t.capture!==void 0)try{await t.capture(A(u,r,e.queue,c,a,s))}catch(d){console.warn("@lunora/queue: capture sink failed (delivery unaffected):",d)}if(p)throw a};export{I as dispatchQueueBatch};

package/dist/packem_shared/run-context-C97v6VyP.mjs

@@ -0,0 +1 @@
+import{LunoraError as c,isLunoraError as N}from"@lunora/errors";const A=t=>({debug:(e,...n)=>{console.debug(t,e,...n)},error:(e,...n)=>{console.error(t,e,...n)},info:(e,...n)=>{console.info(t,e,...n)},warn:(e,...n)=>{console.warn(t,e,...n)}}),L=t=>{let e="";for(let n=0;n<t.length;n+=32768)e+=String.fromCharCode(...t.subarray(n,n+32768));return btoa(e)},b=t=>L(t).replaceAll("+","-").replaceAll("/","_").replace(/=+$/,"");new TextDecoder;const w=new TextEncoder,g="=",S=t=>{for(let e=0;e<t.length;e+=1)if(t.charCodeAt(e)>255)return!1;return!0},T=t=>b(w.encode(JSON.stringify(t))),_=t=>!t.startsWith(g)&&S(t)?t:`${g}${b(w.encode(t))}`,E="/_lunora/scheduler/dispatch",x=3e4,U=t=>{let e=t.length;for(;e>0&&t[e-1]==="/";)e-=1;return t.slice(0,e)},I=Symbol("lunoraDispatchFailure"),$=Symbol("lunoraDispatchMessageId"),m=(t,e)=>(Object.defineProperty(t,I,{value:!0}),e!==void 0&&Object.defineProperty(t,$,{value:e}),t),j=t=>N(t)?t[$]:void 0,D=(t,e,n,i)=>{try{const o=JSON.parse(n)?.error;if(typeof o=="object"&&o!==null&&typeof o.code=="string"){const{code:h,data:u,message:s}=o;return m(new c(h,typeof s=="string"?s:void 0,{data:u,status:e}),i)}}catch{}return m(new c("INTERNAL",`${t}: function dispatch failed (${String(e)}): ${n}`,{status:e}),i)},k=new Set([400,403,404,422]),K=t=>N(t)&&t[I]===!0&&k.has(t.status),C=(t,e,n)=>new c("INTERNAL",`${t}: function dispatch to "${e}" timed out after ${String(n)}ms`,{status:503}),J=t=>{const{label:e}=t,n=globalThis.fetch,i=t.fetchImpl??(typeof n=="function"?n.bind(globalThis):void 0);return async(o,h,u={})=>{if(typeof i!="function")throw new TypeError(`${e}: no fetch implementation available — pass fetchImpl or run on a platform with global fetch`);const s=t.env.LUNORA_ORIGIN_URL;if(typeof s!="string"||s.length===0)throw new c("INTERNAL",`${e}: \`LUNORA_ORIGIN_URL\` must be set on the Worker env so a handler can call back into Lunora functions`);const f=t.env.LUNORA_ADMIN_TOKEN;if(typeof f!="string"||f.length===0)throw new c("INTERNAL",`${e}: \`LUNORA_ADMIN_TOKEN\` must be set on the Worker env to authenticate function dispatch`);const v=`${U(s)}${E}`,d={authorization:`Bearer ${f}`,"content-type":"application/json"};t.identity?.userId!==void 0&&(d["x-lunora-userid"]=_(t.identity.userId)),t.identity?.claims!==void 0&&(d["x-lunora-identity"]=T(t.identity.claims));const y=u.timeoutMs??x,O=AbortSignal.timeout(y),p=r=>{throw r instanceof Error&&r.name==="TimeoutError"?C(e,o.__lunoraRef,y):r};let a;try{a=await i(v,{body:JSON.stringify({args:h??{},functionPath:o.__lunoraRef,shardKey:u.shardKey}),headers:d,method:"POST",signal:O})}catch(r){return p(r)}if(!a.ok){let r;try{r=await a.text()}catch(R){return p(R)}throw D(e,a.status,r,u.messageId)}let l;try{l=await a.text()}catch(r){return p(r)}if(l.length!==0)try{return JSON.parse(l)}catch{throw new c("INTERNAL",`${e}: function dispatch returned a non-JSON body (${String(a.status)}): ${l}`,{status:a.status})}}},P=t=>({env:t.env,log:A(`[queue:${t.exportName}]`),run:J({env:t.env,fetchImpl:t.fetchImpl,label:"@lunora/queue"})});export{j as M,P as c,K as k};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/queue",
-  "version": "1.0.0-alpha.3",
+  "version": "1.0.0-alpha.31",
   "description": "Cloudflare Queues for Lunora: defineQueue producers + consumers, the ctx.queues surface, and the generated queue() worker handler",
   "keywords": [
     "background-jobs",
@@ -44,7 +44,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/errors": "1.0.0-alpha.1"
+    "@lunora/errors": "1.0.0-alpha.22",
+    "@lunora/platform": "1.0.0-alpha.15"
   },
   "engines": {
     "node": "^22.15.0 || >=24.11.0"

package/dist/packem_shared/createQueueContext-D0XCdCsd.mjs

@@ -1,14 +0,0 @@
-import createQueues from './createQueues-14-vSICK.mjs';
-
-const createQueueContext = (env, specs) => {
-  const bindings = {};
-  for (const spec of specs) {
-    const binding = env[spec.binding];
-    if (binding && typeof binding.send === "function" && typeof binding.sendBatch === "function") {
-      bindings[spec.exportName] = binding;
-    }
-  }
-  return createQueues({ bindings });
-};
-
-export { createQueueContext };

package/dist/packem_shared/createQueueRunContext-_2hD-TK7.mjs

@@ -1,73 +0,0 @@
-import { LunoraError } from '@lunora/errors';
-
-const createDispatchLogger = (prefix) => {
-  return {
-    debug: (message, ...rest) => {
-      console.debug(prefix, message, ...rest);
-    },
-    error: (message, ...rest) => {
-      console.error(prefix, message, ...rest);
-    },
-    info: (message, ...rest) => {
-      console.info(prefix, message, ...rest);
-    },
-    warn: (message, ...rest) => {
-      console.warn(prefix, message, ...rest);
-    }
-  };
-};
-
-const SCHEDULER_DISPATCH_PATH = "/_lunora/scheduler/dispatch";
-const trimTrailingSlashes = (value) => {
-  let end = value.length;
-  while (end > 0 && value[end - 1] === "/") {
-    end -= 1;
-  }
-  return value.slice(0, end);
-};
-const createDispatchRunner = (options) => {
-  const { label } = options;
-  const globalFetch = globalThis.fetch;
-  const fetchImpl = options.fetchImpl ?? (typeof globalFetch === "function" ? globalFetch.bind(globalThis) : void 0);
-  return async (function_, args, runOptions = {}) => {
-    if (typeof fetchImpl !== "function") {
-      throw new TypeError(`${label}: no fetch implementation available — pass fetchImpl or run on a platform with global fetch`);
-    }
-    const origin = options.env.LUNORA_ORIGIN_URL;
-    if (typeof origin !== "string" || origin.length === 0) {
-      throw new LunoraError("INTERNAL", `${label}: \`LUNORA_ORIGIN_URL\` must be set on the Worker env so a handler can call back into Lunora functions`);
-    }
-    const token = options.env.LUNORA_ADMIN_TOKEN;
-    if (typeof token !== "string" || token.length === 0) {
-      throw new LunoraError("INTERNAL", `${label}: \`LUNORA_ADMIN_TOKEN\` must be set on the Worker env to authenticate function dispatch`);
-    }
-    const url = `${trimTrailingSlashes(origin)}${SCHEDULER_DISPATCH_PATH}`;
-    const response = await fetchImpl(url, {
-      body: JSON.stringify({ args: args ?? {}, functionPath: function_.__lunoraRef, shardKey: runOptions.shardKey }),
-      headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
-      method: "POST"
-    });
-    if (!response.ok) {
-      throw new LunoraError("INTERNAL", `${label}: function dispatch failed (${String(response.status)}): ${await response.text()}`);
-    }
-    const text = await response.text();
-    if (text.length === 0) {
-      return void 0;
-    }
-    try {
-      return JSON.parse(text);
-    } catch {
-      return text;
-    }
-  };
-};
-
-const createQueueRunContext = (options) => {
-  return {
-    env: options.env,
-    log: createDispatchLogger(`[queue:${options.exportName}]`),
-    run: createDispatchRunner({ env: options.env, fetchImpl: options.fetchImpl, label: "@lunora/queue" })
-  };
-};
-
-export { createQueueRunContext };

package/dist/packem_shared/createQueues-14-vSICK.mjs

@@ -1,33 +0,0 @@
-const producerFor = (binding) => {
-  return {
-    send: async (body, options) => {
-      await binding.send(body, options);
-    },
-    sendBatch: async (messages, options) => {
-      await binding.sendBatch(messages, options);
-    }
-  };
-};
-const createQueues = (options) => {
-  const bindings = options.bindings ?? {};
-  const producers = /* @__PURE__ */ Object.create(null);
-  for (const [exportName, binding] of Object.entries(bindings)) {
-    producers[exportName] = producerFor(binding);
-  }
-  const known = Object.keys(producers);
-  const missing = (name) => {
-    const suffix = known.length === 0 ? "no queues are declared" : `known queues: ${known.join(", ")}`;
-    const error = () => Promise.reject(new Error(`@lunora/queue: no queue named "${name}" (${suffix})`));
-    return { send: error, sendBatch: error };
-  };
-  return /* @__PURE__ */ new Proxy(producers, {
-    get(target, property) {
-      if (typeof property !== "string") {
-        return void 0;
-      }
-      return Object.hasOwn(target, property) ? target[property] : missing(property);
-    }
-  });
-};
-
-export { createQueues as default };

package/dist/packem_shared/defineQueue-D40gREfg.mjs

@@ -1,18 +0,0 @@
-const queueBindingName = (exportName) => `QUEUE_${exportName.replaceAll(/(?<=[a-z0-9])(?=[A-Z])/g, "_").toUpperCase()}`;
-const queueDefaultName = (exportName) => exportName.replaceAll(/(?<=[a-z0-9])(?=[A-Z])/g, "-").toLowerCase();
-const defineQueue = (config) => {
-  const mode = config.mode ?? "push";
-  if (mode !== "push" && mode !== "pull") {
-    throw new TypeError(`defineQueue: \`mode\` must be "push" or "pull" (got ${JSON.stringify(config.mode)})`);
-  }
-  if (mode === "push" && typeof config.handler !== "function") {
-    throw new TypeError('defineQueue: `handler` must be a function for a push consumer (omit it only when `mode: "pull"`)');
-  }
-  if (config.name !== void 0 && (typeof config.name !== "string" || config.name.length === 0)) {
-    throw new TypeError("defineQueue: `name` must be a non-empty string when provided");
-  }
-  return { ...config, isLunoraQueue: true, mode };
-};
-const isQueueDefinition = (value) => typeof value === "object" && value !== null && value.isLunoraQueue === true;
-
-export { defineQueue, isQueueDefinition, queueBindingName, queueDefaultName };

package/dist/packem_shared/dispatchQueueBatch-DR15pYS7.mjs

@@ -1,19 +0,0 @@
-import { LunoraError } from '@lunora/errors';
-import { createQueueRunContext } from './createQueueRunContext-_2hD-TK7.mjs';
-
-const dispatchQueueBatch = async (batch, registry, options) => {
-  const entry = registry[batch.queue];
-  if (entry === void 0) {
-    const known = Object.keys(registry);
-    const suffix = known.length === 0 ? "no push queues are declared" : `known push queues: ${known.join(", ")}`;
-    throw new LunoraError("INTERNAL", `@lunora/queue: received a batch for queue "${batch.queue}" but no push handler is registered (${suffix})`);
-  }
-  const { handler } = entry.definition;
-  if (typeof handler !== "function") {
-    throw new TypeError(`@lunora/queue: queue "${batch.queue}" (${entry.exportName}) has no push handler — it is declared as a pull consumer`);
-  }
-  const context = createQueueRunContext({ env: options.env, exportName: entry.exportName, fetchImpl: options.fetchImpl });
-  await handler(context, batch);
-};
-
-export { dispatchQueueBatch };