@lunora/runtime 1.0.0-alpha.23 → 1.0.0-alpha.24

package/dist/index.d.mts

@@ -2365,6 +2365,12 @@ interface RpcContext {
   shardKey: string;
 }
 /**
+* Ask the owner how many relays to spread new connections across for `shardKey`
+* (plan 075 Phase 2), cached per isolate so a promoted shard doesn't add a
+* round-trip to every WS upgrade. Fails closed to `0` (owner-served) on any error,
+* so a relay-probe hiccup can never break a connection.
+*/
+/**
 * The composed Lunora worker. `fetch` / `scheduled` are the standard Cloudflare
 * module-worker entrypoints (so the object can be re-exported directly as
 * `export default createWorker(...)`). `serverQuery` is the in-process fast-path

package/dist/index.d.ts

@@ -2365,6 +2365,12 @@ interface RpcContext {
   shardKey: string;
 }
 /**
+* Ask the owner how many relays to spread new connections across for `shardKey`
+* (plan 075 Phase 2), cached per isolate so a promoted shard doesn't add a
+* round-trip to every WS upgrade. Fails closed to `0` (owner-served) on any error,
+* so a relay-probe hiccup can never break a connection.
+*/
+/**
 * The composed Lunora worker. `fetch` / `scheduled` are the standard Cloudflare
 * module-worker entrypoints (so the object can be re-exported directly as
 * `export default createWorker(...)`). `serverQuery` is the in-process fast-path

package/dist/index.mjs

@@ -1,5 +1,5 @@
 export { toAirbyteMessages, toFivetranResponse } from './packem_shared/toAirbyteMessages-DrHdplb4.mjs';
-export { composeWorker, createLunoraHandler, createWorker, defineRpcEnvelope, resolveLunoraOptions, withFrameworkWorker } from './packem_shared/composeWorker-CB3pLcCP.mjs';
+export { composeWorker, createLunoraHandler, createWorker, defineRpcEnvelope, resolveLunoraOptions, withFrameworkWorker } from './packem_shared/composeWorker-CxwkPZUl.mjs';
 export { createCrossShardRelationCapabilities } from './packem_shared/createCrossShardRelationCapabilities-CbcWjkAn.mjs';
 export { DEFAULT_REGISTRY_CACHE_TTL_MS, SHARD_REGISTRY_DO_NAME, createDynamicShardRegistry } from './packem_shared/DEFAULT_REGISTRY_CACHE_TTL_MS-B3pA7aXp.mjs';
 export { LunoraError, toErrorResponse } from './packem_shared/LunoraError-Bpb9EFJ3.mjs';
@@ -7,7 +7,7 @@ export { emitLogEvent, emitRpcEvent } from './packem_shared/emitLogEvent-pEdtqAK
 export { analyticsEngineSink, combineSinks, consoleSink, sentrySink, webhookSink } from './packem_shared/analyticsEngineSink-DqEvrQs0.mjs';
 export { createQueryCoordinator, createStaticShardRegistry, mergeStrategyForAggregate } from './packem_shared/createQueryCoordinator-DNCJzOZE.mjs';
 export { applyJurisdiction, resolveShard } from './packem_shared/applyJurisdiction-BkZtTkct.mjs';
-export { decorateResponse, enforceOrigin, handleCorsPreflight, resolveSecurity } from './packem_shared/decorateResponse-CsZc49QC.mjs';
+export { decorateResponse, enforceOrigin, handleCorsPreflight, resolveSecurity } from './packem_shared/decorateResponse-DRWQFNhF.mjs';
 export { NOOP_EXECUTION_CONTEXT } from './packem_shared/NOOP_EXECUTION_CONTEXT-CCTu0Bf1.mjs';
 export { composeIdentityResolvers, routeIdentityResolvers } from './packem_shared/composeIdentityResolvers-XGjO7V1J.mjs';
 

package/dist/packem_shared/{composeWorker-CB3pLcCP.mjs → composeWorker-CxwkPZUl.mjs}

@@ -5,7 +5,17 @@ import { wrapResolverWithContract } from './composeIdentityResolvers-XGjO7V1J.mj
 export { composeIdentityResolvers, routeIdentityResolvers } from './composeIdentityResolvers-XGjO7V1J.mjs';
 import { emitRpcEvent } from './emitLogEvent-pEdtqAK8.mjs';
 import { resolveShard, applyJurisdiction } from './applyJurisdiction-BkZtTkct.mjs';
-import { resolveSecurity, handleCorsPreflight, enforceOrigin, decorateResponse, enforceWebSocketOrigin } from './decorateResponse-CsZc49QC.mjs';
+import { resolveSecurity, handleCorsPreflight, enforceOrigin, decorateResponse, enforceWebSocketOrigin } from './decorateResponse-DRWQFNhF.mjs';
+
+const evictOldestEntry = (map, capacity) => {
+  if (map.size < capacity) {
+    return;
+  }
+  const oldest = map.keys().next().value;
+  if (oldest !== void 0) {
+    map.delete(oldest);
+  }
+};
 
 const RELAY_NAME_INFIX = "::relay::";
 const relayName = (ownerKey, index) => `${ownerKey}${RELAY_NAME_INFIX}${String(index)}`;
@@ -477,6 +487,9 @@ const normalizeBatchCall = (raw, index, defaultShard) => {
   if (call.functionPath.startsWith("__lunora_relation__:") || call.functionPath.startsWith("__lunora_admin__")) {
     throw new LunoraError("reserved function path cannot be batched", { code: "FORBIDDEN", status: 403 });
   }
+  if (call.args !== void 0 && (typeof call.args !== "object" || call.args === null || Array.isArray(call.args))) {
+    throw new LunoraError("each batch call `args` must be an object", { code: "BAD_REQUEST", status: 400 });
+  }
   return {
     entry: {
       args: call.args === void 0 ? {} : call.args,
@@ -2085,12 +2098,16 @@ const forwardToShard = async (namespace, shardKey, request) => {
 };
 const relayProbeCache = /* @__PURE__ */ new Map();
 const RELAY_PROBE_TTL_MS = 5e3;
+const RELAY_PROBE_MAX_ENTRIES = 4096;
 const probeRelayCount = async (namespace, shardKey) => {
   const now = Date.now();
   const cached = relayProbeCache.get(shardKey);
   if (cached !== void 0 && cached.expiresMs > now) {
     return cached.relayCount;
   }
+  if (cached !== void 0) {
+    relayProbeCache.delete(shardKey);
+  }
   let relayCount = 0;
   try {
     const response = await resolveShard(namespace, shardKey).fetch(new Request("https://shard.internal/_lunora/route"));
@@ -2104,6 +2121,7 @@ const probeRelayCount = async (namespace, shardKey) => {
   } catch {
     relayCount = 0;
   }
+  evictOldestEntry(relayProbeCache, RELAY_PROBE_MAX_ENTRIES);
   relayProbeCache.set(shardKey, { expiresMs: now + RELAY_PROBE_TTL_MS, relayCount });
   return relayCount;
 };
@@ -2515,9 +2533,12 @@ const createWorker = (options) => {
       guardUnauthenticatedShardAccess("shard");
     }
     const upgradeHeaders = new Headers(request.headers);
-    upgradeHeaders.delete("x-lunora-userid");
-    upgradeHeaders.delete("x-lunora-identity");
-    upgradeHeaders.delete("x-lunora-identity-exp");
+    const clientHeaderNames = [...upgradeHeaders.keys()];
+    for (const name of clientHeaderNames) {
+      if (name.startsWith("x-lunora-")) {
+        upgradeHeaders.delete(name);
+      }
+    }
     const forwardedUserId = forwardedHeaders["x-lunora-userid"];
     const forwardedIdentity = forwardedHeaders["x-lunora-identity"];
     const forwardedExp = forwardedHeaders["x-lunora-identity-exp"];
@@ -2602,12 +2623,6 @@ const createWorker = (options) => {
         },
         sinkContext
       );
-      const responseBookmark = response.headers.get("x-d1-bookmark");
-      if (responseBookmark) {
-        const headers = new Headers(response.headers);
-        headers.set("x-d1-bookmark", responseBookmark);
-        return new Response(response.body, { headers, status: response.status });
-      }
       return response;
     } catch (error) {
       emitRpcEvent(observability, buildErrorEvent(functionPath, Date.now() - rpcStartedAt, error, { shardKey }), sinkContext);
@@ -2714,7 +2729,7 @@ const createWorker = (options) => {
     if (!Array.isArray(calls)) {
       throw new LunoraError("RPC batch `calls` must be an array", { code: "BAD_REQUEST", status: 400 });
     }
-    const { headers: forwardedHeaders, identity } = await resolveForwardContext(request, env, options.resolveIdentity);
+    const { headers: forwardedHeaders, identity } = await resolveForwardContext(request, env, publicResolveIdentity);
     const groups = groupBatchCallsByShard(calls, defaultShard);
     for (const entries of groups.values()) {
       for (const entry of entries) {
@@ -2741,7 +2756,7 @@ const createWorker = (options) => {
       }
     } : void 0;
     const results = [];
-    let latestBookmark;
+    const bookmarks = [];
     const slotError = (entry, status, code, message) => {
       return { body: { error: { code, message } }, id: entry.id, status };
     };
@@ -2792,7 +2807,7 @@ const createWorker = (options) => {
         const durationMs = Date.now() - subStartedAt;
         const bookmark = response.headers.get("x-d1-bookmark");
         if (bookmark) {
-          latestBookmark = bookmark;
+          bookmarks.push(bookmark);
         }
         let parsed;
         try {
@@ -2823,8 +2838,9 @@ const createWorker = (options) => {
       })
     );
     const responseHeaders = { "content-type": "application/json" };
-    if (latestBookmark !== void 0) {
-      responseHeaders["x-d1-bookmark"] = latestBookmark;
+    const [onlyBookmark] = bookmarks;
+    if (bookmarks.length === 1 && onlyBookmark !== void 0) {
+      responseHeaders["x-d1-bookmark"] = onlyBookmark;
     }
     return Response.json({ results }, { headers: responseHeaders, status: 200 });
   };
@@ -2879,13 +2895,14 @@ const createWorker = (options) => {
     if (!coordinator) {
       throw new LunoraError("scheduled backup requires a `queryCoordinator` on the worker", { code: "BACKUP_NOT_CONFIGURED", status: 500 });
     }
-    if (!options.adminToken || options.adminToken.length === 0) {
-      throw new LunoraError("scheduled backup requires an `adminToken` to authenticate the per-shard export gate", {
+    const adminToken = effectiveAdminToken();
+    if (!adminToken || adminToken.length === 0) {
+      throw new LunoraError("scheduled backup requires an `adminToken` (or `env.LUNORA_ADMIN_TOKEN`) to authenticate the per-shard export gate", {
         code: "BACKUP_NOT_CONFIGURED",
         status: 500
       });
     }
-    const forwardedHeaders = { authorization: `Bearer ${options.adminToken}`, "content-type": "application/json" };
+    const forwardedHeaders = { authorization: `Bearer ${adminToken}`, "content-type": "application/json" };
     const tables = options.backupTables;
     let rows = 0;
     let bytes = 0;
@@ -2931,6 +2948,7 @@ const createWorker = (options) => {
     await pruneBackups(store, prefix);
   };
   const handleScheduled = async (controller, env, context) => {
+    resolveAdminTokenFromEnv(env);
     const errors = [];
     const toError = (error) => error instanceof Error ? error : new Error(String(error));
     const userHandler = options.crons?.[controller.cron];
@@ -3047,7 +3065,8 @@ const createWorker = (options) => {
     const url = new URL(request.url);
     if (request.method === "POST" || request.method === "PUT") {
       const contentLength = Number(request.headers.get("content-length") ?? "");
-      if (Number.isFinite(contentLength) && contentLength > MAX_BODY_BYTES) {
+      const maxBodyBytes = url.pathname === KV_VALUE_PATH ? KV_VALUE_MAX_BODY_BYTES : MAX_BODY_BYTES;
+      if (Number.isFinite(contentLength) && contentLength > maxBodyBytes) {
         throw new LunoraError("Body too large", { code: "PAYLOAD_TOO_LARGE", status: 413 });
       }
     }
@@ -3148,4 +3167,4 @@ const resolveLunoraOptions = (options, env) => {
 const createLunoraHandler = (options = {}) => (request, env, context) => createWorker(resolveLunoraOptions(options, env)).fetch(request, env, context ?? NOOP_EXECUTION_CONTEXT);
 const defineRpcEnvelope = (envelope) => envelope;
 
-export { NOOP_EXECUTION_CONTEXT, composeWorker, createLunoraHandler, createWorker, defineRpcEnvelope, resolveLunoraOptions, withFrameworkWorker };
+export { NOOP_EXECUTION_CONTEXT, composeWorker, createLunoraHandler, createWorker, defineRpcEnvelope, probeRelayCount, resolveLunoraOptions, withFrameworkWorker };

package/dist/packem_shared/{decorateResponse-CsZc49QC.mjs → decorateResponse-DRWQFNhF.mjs}

@@ -202,7 +202,14 @@ const handleCorsPreflight = (request, resolved) => {
   const headers = corsResponseHeaders(origin, resolved.cors);
   const requested = request.headers.get("access-control-request-headers");
   headers.set("access-control-allow-methods", resolved.cors.allowedMethods.join(", "));
-  headers.set("access-control-allow-headers", requested ?? resolved.cors.allowedHeaders.join(", "));
+  let allowedHeaders;
+  if (requested === null) {
+    allowedHeaders = resolved.cors.allowedHeaders.join(", ");
+  } else {
+    const permitted = new Set(resolved.cors.allowedHeaders.map((name) => name.toLowerCase()));
+    allowedHeaders = requested.split(",").map((name) => name.trim()).filter((name) => name.length > 0 && permitted.has(name.toLowerCase())).join(", ");
+  }
+  headers.set("access-control-allow-headers", allowedHeaders);
   headers.set("access-control-max-age", String(resolved.cors.maxAge));
   return new Response(null, { headers, status: 204 });
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/runtime",
-  "version": "1.0.0-alpha.23",
+  "version": "1.0.0-alpha.24",
   "description": "Lunora Worker runtime: the RPC router, shard resolver, and query coordinator",
   "keywords": [
     "cloudflare",
@@ -46,7 +46,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/errors": "1.0.0-alpha.3"
+    "@lunora/errors": "1.0.0-alpha.4"
   },
   "engines": {
     "node": "^22.15.0 || >=24.11.0"