@lunora/runtime 1.0.0-alpha.23 → 1.0.0-alpha.25

package/dist/index.d.mts

@@ -2365,6 +2365,12 @@ interface RpcContext {
   shardKey: string;
 }
 /**
+* Ask the owner how many relays to spread new connections across for `shardKey`
+* (plan 075 Phase 2), cached per isolate so a promoted shard doesn't add a
+* round-trip to every WS upgrade. Fails closed to `0` (owner-served) on any error,
+* so a relay-probe hiccup can never break a connection.
+*/
+/**
 * The composed Lunora worker. `fetch` / `scheduled` are the standard Cloudflare
 * module-worker entrypoints (so the object can be re-exported directly as
 * `export default createWorker(...)`). `serverQuery` is the in-process fast-path
@@ -2772,6 +2778,60 @@ interface AnalyticsEngineSinkOptions extends OnlyErrorsOption {
 * only error events (defaults to all events).
 */
 declare const analyticsEngineSink: (options: AnalyticsEngineSinkOptions) => ObservabilitySink;
+/** Options for {@link otlpSink}. */
+interface OtlpSinkOptions extends OnlyErrorsOption {
+  /**
+  * The OTLP-over-HTTP collector base endpoint (e.g.
+  * `https://collector.example.com`). Following the OTel base-endpoint
+  * convention, the sink POSTs spans to `${endpoint}/v1/traces` and log
+  * records to `${endpoint}/v1/logs`; a trailing slash is tolerated.
+  */
+  endpoint: string;
+  /**
+  * Extra headers merged onto every OTLP POST — typically an `Authorization`
+  * bearer plus the `x-lunora-deployment` / `x-lunora-org` correlation headers
+  * the platform injects at deploy. `Content-Type: application/json` is set by
+  * default and may be overridden here.
+  */
+  headers?: Record<string, string>;
+  /**
+  * Value of the `service.name` resource attribute on every exported span and
+  * log — the logical service the telemetry belongs to. Defaults to `lunora`.
+  */
+  serviceName?: string;
+  /**
+  * Convenience bearer token: when set, an `Authorization: Bearer` header
+  * carrying it is added to every POST (overriding any authorization in
+  * `headers`). Mirrors the container exporter so the platform can inject the
+  * same `LUNORA_OTLP_TOKEN` into both. Leave unset for an unauthenticated collector.
+  */
+  token?: string;
+}
+/**
+* A fire-and-forget sink that exports telemetry over OTLP-over-HTTP (JSON).
+*
+* This is the single, standard wire contract both the worker and (via the
+* container exporter helper) container processes use, so telemetry from either
+* side lands in the same collector. Each RPC dispatch becomes one OTLP **span**
+* (`${endpoint}/v1/traces`) named after its `functionPath`, with start/end
+* derived from `durationMs` and status OK/ERROR; each `ctx.log.*` line becomes
+* one OTLP **log record** (`${endpoint}/v1/logs`). Trace/span ids are random
+* per span — real trace correlation (worker→container `traceparent`) is a later
+* phase.
+*
+* Like {@link webhookSink}, each export is its own `fetch`, registered with the
+* request's `context.waitUntil` when present so it survives isolate teardown,
+* and every rejection is swallowed so a flaky collector never surfaces to the
+* caller.
+*
+* Privacy: spans carry `error.type`/`error.message` and logs carry the rendered
+* `message`, which may include user input. Point `endpoint` only at a collector
+* you trust, and gate PII upstream if that is a concern.
+* @param options Sink options: `endpoint` is the collector base URL, `headers`
+* are merged onto every POST (auth + correlation), `serviceName` sets the
+* resource `service.name`, and `onlyErrors` exports error spans only.
+*/
+declare const otlpSink: (options: OtlpSinkOptions) => ObservabilitySink;
 /**
 * Combine several sinks into one that fans each event out to all of them.
 *
@@ -2781,4 +2841,4 @@ declare const analyticsEngineSink: (options: AnalyticsEngineSinkOptions) => Obse
 */
 declare const combineSinks: (...sinks: ObservabilitySink[]) => ObservabilitySink;
 declare const VERSION: string;
-export { type AdminTableResolver, type AirbyteMessage, type AnalyticsEngineDataPointLike, type AnalyticsEngineDatasetLike, type AnalyticsEngineSinkOptions, type AuthAdmin, type AuthCapabilities, type AuthConfigInfo, type AuthImpersonation, type AuthIntrospector, type AuthPage, type AuthSession, type AuthUser, type AuthUserFieldSpec, type BackupManifest, type BackupStore, type ComposeIdentityResolversErrorMode, type ComposeIdentityResolversOptions, type ConnectorChange, type ConnectorSyncPage, type CorsOptions, type CronHandler, type CronJobDispatch, type CronJobInfo, type CrossShardCounter, type CrossShardReader, type CrossShardRelationCapabilities, type CrossShardRelationOptions, type CsrfOptions, DEFAULT_REGISTRY_CACHE_TTL_MS, type DurableObjectJurisdiction, type DynamicShardRegistry, type DynamicShardRegistryOptions, type ExecutionContextLike, type ExportFanOutRequest, type ExportFanOutResult, type FanOutRequest, type FanOutResult, type FanOutSpec, type FivetranResponse, type FrameworkHostHandler, type FrameworkWorkerOptions, type FrameworkWorkerOptionsInput, type FunctionDescriptor, type FunctionRegistryEntry, type FunctionRegistryLike, type GlobalExportFunction as GlobalExportFn, type GlobalImportFunction as GlobalImportFn, type GlobalIntrospector, type GlobalTableInfo as GlobalTableInfoMeta, type GlobalTablePage as GlobalTablePageMeta, type HttpActionContext, type HttpActionLike, type HttpRouterLike, type IdentityContractLike, type IdentityResolver, type IdentityValidation, type ImportFanOutRequest, type ImportFanOutResult, type KvIntrospector, type KvKeyEntry, type KvKeyListResult, type KvNamespaceSummary, type KvValueResult, type ListAuthUsersOptions, type LogEvent, type LogLevel, LunoraError, type LunoraErrorBody, type LunoraHandlerOptions, type LunoraWorker, type MergeStrategy, type MigrationFanOutRequest, type MigrationFanOutResult, NOOP_EXECUTION_CONTEXT, type ObservabilityEvent, type ObservabilitySink, type ObservabilitySinkContext, type QueryCoordinator, type QueryCoordinatorOptions, type RankFanOutRequest, type RankFanOutResult, type RankPageFanOutRequest, type RankPageFanOutResult, type ResolvedSecurity, type ResolvedShard, type Route, type RpcContext, type RpcEnvelope, SHARD_REGISTRY_DO_NAME, type ScheduledControllerLike, type SecurityHeadersOptions, type SecurityOptions, type SentrySinkOptions, type ShardError, type ShardExportOutcome, type ShardImportOutcome, type ShardMigrationOutcome, type ShardNamespaceLike, type ShardRankOutcome, type ShardRankPageOutcome, type ShardRegistry, type ShardTrafficEntry, type ShardTrafficFanOutRequest, type ShardTrafficFanOutResult, type ShardingInfo, type StorageListFunction as StorageListFn, type StorageObject, VERSION, type VectorIndexSummary, type VectorIntrospector, type VectorQueryMatch, type WebhookSinkOptions, type WorkerOptions, analyticsEngineSink, applyJurisdiction, combineSinks, composeIdentityResolvers, composeWorker, consoleSink, createCrossShardRelationCapabilities, createDynamicShardRegistry, createLunoraHandler, createQueryCoordinator, createStaticShardRegistry, createWorker, decorateResponse, defineRpcEnvelope, emitLogEvent, emitRpcEvent, enforceOrigin, handleCorsPreflight, mergeStrategyForAggregate, resolveLunoraOptions, resolveSecurity, resolveShard, routeIdentityResolvers, sentrySink, toAirbyteMessages, toErrorResponse, toFivetranResponse, webhookSink, withFrameworkWorker };
+export { type AdminTableResolver, type AirbyteMessage, type AnalyticsEngineDataPointLike, type AnalyticsEngineDatasetLike, type AnalyticsEngineSinkOptions, type AuthAdmin, type AuthCapabilities, type AuthConfigInfo, type AuthImpersonation, type AuthIntrospector, type AuthPage, type AuthSession, type AuthUser, type AuthUserFieldSpec, type BackupManifest, type BackupStore, type ComposeIdentityResolversErrorMode, type ComposeIdentityResolversOptions, type ConnectorChange, type ConnectorSyncPage, type CorsOptions, type CronHandler, type CronJobDispatch, type CronJobInfo, type CrossShardCounter, type CrossShardReader, type CrossShardRelationCapabilities, type CrossShardRelationOptions, type CsrfOptions, DEFAULT_REGISTRY_CACHE_TTL_MS, type DurableObjectJurisdiction, type DynamicShardRegistry, type DynamicShardRegistryOptions, type ExecutionContextLike, type ExportFanOutRequest, type ExportFanOutResult, type FanOutRequest, type FanOutResult, type FanOutSpec, type FivetranResponse, type FrameworkHostHandler, type FrameworkWorkerOptions, type FrameworkWorkerOptionsInput, type FunctionDescriptor, type FunctionRegistryEntry, type FunctionRegistryLike, type GlobalExportFunction as GlobalExportFn, type GlobalImportFunction as GlobalImportFn, type GlobalIntrospector, type GlobalTableInfo as GlobalTableInfoMeta, type GlobalTablePage as GlobalTablePageMeta, type HttpActionContext, type HttpActionLike, type HttpRouterLike, type IdentityContractLike, type IdentityResolver, type IdentityValidation, type ImportFanOutRequest, type ImportFanOutResult, type KvIntrospector, type KvKeyEntry, type KvKeyListResult, type KvNamespaceSummary, type KvValueResult, type ListAuthUsersOptions, type LogEvent, type LogLevel, LunoraError, type LunoraErrorBody, type LunoraHandlerOptions, type LunoraWorker, type MergeStrategy, type MigrationFanOutRequest, type MigrationFanOutResult, NOOP_EXECUTION_CONTEXT, type ObservabilityEvent, type ObservabilitySink, type ObservabilitySinkContext, type OtlpSinkOptions, type QueryCoordinator, type QueryCoordinatorOptions, type RankFanOutRequest, type RankFanOutResult, type RankPageFanOutRequest, type RankPageFanOutResult, type ResolvedSecurity, type ResolvedShard, type Route, type RpcContext, type RpcEnvelope, SHARD_REGISTRY_DO_NAME, type ScheduledControllerLike, type SecurityHeadersOptions, type SecurityOptions, type SentrySinkOptions, type ShardError, type ShardExportOutcome, type ShardImportOutcome, type ShardMigrationOutcome, type ShardNamespaceLike, type ShardRankOutcome, type ShardRankPageOutcome, type ShardRegistry, type ShardTrafficEntry, type ShardTrafficFanOutRequest, type ShardTrafficFanOutResult, type ShardingInfo, type StorageListFunction as StorageListFn, type StorageObject, VERSION, type VectorIndexSummary, type VectorIntrospector, type VectorQueryMatch, type WebhookSinkOptions, type WorkerOptions, analyticsEngineSink, applyJurisdiction, combineSinks, composeIdentityResolvers, composeWorker, consoleSink, createCrossShardRelationCapabilities, createDynamicShardRegistry, createLunoraHandler, createQueryCoordinator, createStaticShardRegistry, createWorker, decorateResponse, defineRpcEnvelope, emitLogEvent, emitRpcEvent, enforceOrigin, handleCorsPreflight, mergeStrategyForAggregate, otlpSink, resolveLunoraOptions, resolveSecurity, resolveShard, routeIdentityResolvers, sentrySink, toAirbyteMessages, toErrorResponse, toFivetranResponse, webhookSink, withFrameworkWorker };

package/dist/index.d.ts

@@ -2365,6 +2365,12 @@ interface RpcContext {
   shardKey: string;
 }
 /**
+* Ask the owner how many relays to spread new connections across for `shardKey`
+* (plan 075 Phase 2), cached per isolate so a promoted shard doesn't add a
+* round-trip to every WS upgrade. Fails closed to `0` (owner-served) on any error,
+* so a relay-probe hiccup can never break a connection.
+*/
+/**
 * The composed Lunora worker. `fetch` / `scheduled` are the standard Cloudflare
 * module-worker entrypoints (so the object can be re-exported directly as
 * `export default createWorker(...)`). `serverQuery` is the in-process fast-path
@@ -2772,6 +2778,60 @@ interface AnalyticsEngineSinkOptions extends OnlyErrorsOption {
 * only error events (defaults to all events).
 */
 declare const analyticsEngineSink: (options: AnalyticsEngineSinkOptions) => ObservabilitySink;
+/** Options for {@link otlpSink}. */
+interface OtlpSinkOptions extends OnlyErrorsOption {
+  /**
+  * The OTLP-over-HTTP collector base endpoint (e.g.
+  * `https://collector.example.com`). Following the OTel base-endpoint
+  * convention, the sink POSTs spans to `${endpoint}/v1/traces` and log
+  * records to `${endpoint}/v1/logs`; a trailing slash is tolerated.
+  */
+  endpoint: string;
+  /**
+  * Extra headers merged onto every OTLP POST — typically an `Authorization`
+  * bearer plus the `x-lunora-deployment` / `x-lunora-org` correlation headers
+  * the platform injects at deploy. `Content-Type: application/json` is set by
+  * default and may be overridden here.
+  */
+  headers?: Record<string, string>;
+  /**
+  * Value of the `service.name` resource attribute on every exported span and
+  * log — the logical service the telemetry belongs to. Defaults to `lunora`.
+  */
+  serviceName?: string;
+  /**
+  * Convenience bearer token: when set, an `Authorization: Bearer` header
+  * carrying it is added to every POST (overriding any authorization in
+  * `headers`). Mirrors the container exporter so the platform can inject the
+  * same `LUNORA_OTLP_TOKEN` into both. Leave unset for an unauthenticated collector.
+  */
+  token?: string;
+}
+/**
+* A fire-and-forget sink that exports telemetry over OTLP-over-HTTP (JSON).
+*
+* This is the single, standard wire contract both the worker and (via the
+* container exporter helper) container processes use, so telemetry from either
+* side lands in the same collector. Each RPC dispatch becomes one OTLP **span**
+* (`${endpoint}/v1/traces`) named after its `functionPath`, with start/end
+* derived from `durationMs` and status OK/ERROR; each `ctx.log.*` line becomes
+* one OTLP **log record** (`${endpoint}/v1/logs`). Trace/span ids are random
+* per span — real trace correlation (worker→container `traceparent`) is a later
+* phase.
+*
+* Like {@link webhookSink}, each export is its own `fetch`, registered with the
+* request's `context.waitUntil` when present so it survives isolate teardown,
+* and every rejection is swallowed so a flaky collector never surfaces to the
+* caller.
+*
+* Privacy: spans carry `error.type`/`error.message` and logs carry the rendered
+* `message`, which may include user input. Point `endpoint` only at a collector
+* you trust, and gate PII upstream if that is a concern.
+* @param options Sink options: `endpoint` is the collector base URL, `headers`
+* are merged onto every POST (auth + correlation), `serviceName` sets the
+* resource `service.name`, and `onlyErrors` exports error spans only.
+*/
+declare const otlpSink: (options: OtlpSinkOptions) => ObservabilitySink;
 /**
 * Combine several sinks into one that fans each event out to all of them.
 *
@@ -2781,4 +2841,4 @@ declare const analyticsEngineSink: (options: AnalyticsEngineSinkOptions) => Obse
 */
 declare const combineSinks: (...sinks: ObservabilitySink[]) => ObservabilitySink;
 declare const VERSION: string;
-export { type AdminTableResolver, type AirbyteMessage, type AnalyticsEngineDataPointLike, type AnalyticsEngineDatasetLike, type AnalyticsEngineSinkOptions, type AuthAdmin, type AuthCapabilities, type AuthConfigInfo, type AuthImpersonation, type AuthIntrospector, type AuthPage, type AuthSession, type AuthUser, type AuthUserFieldSpec, type BackupManifest, type BackupStore, type ComposeIdentityResolversErrorMode, type ComposeIdentityResolversOptions, type ConnectorChange, type ConnectorSyncPage, type CorsOptions, type CronHandler, type CronJobDispatch, type CronJobInfo, type CrossShardCounter, type CrossShardReader, type CrossShardRelationCapabilities, type CrossShardRelationOptions, type CsrfOptions, DEFAULT_REGISTRY_CACHE_TTL_MS, type DurableObjectJurisdiction, type DynamicShardRegistry, type DynamicShardRegistryOptions, type ExecutionContextLike, type ExportFanOutRequest, type ExportFanOutResult, type FanOutRequest, type FanOutResult, type FanOutSpec, type FivetranResponse, type FrameworkHostHandler, type FrameworkWorkerOptions, type FrameworkWorkerOptionsInput, type FunctionDescriptor, type FunctionRegistryEntry, type FunctionRegistryLike, type GlobalExportFunction as GlobalExportFn, type GlobalImportFunction as GlobalImportFn, type GlobalIntrospector, type GlobalTableInfo as GlobalTableInfoMeta, type GlobalTablePage as GlobalTablePageMeta, type HttpActionContext, type HttpActionLike, type HttpRouterLike, type IdentityContractLike, type IdentityResolver, type IdentityValidation, type ImportFanOutRequest, type ImportFanOutResult, type KvIntrospector, type KvKeyEntry, type KvKeyListResult, type KvNamespaceSummary, type KvValueResult, type ListAuthUsersOptions, type LogEvent, type LogLevel, LunoraError, type LunoraErrorBody, type LunoraHandlerOptions, type LunoraWorker, type MergeStrategy, type MigrationFanOutRequest, type MigrationFanOutResult, NOOP_EXECUTION_CONTEXT, type ObservabilityEvent, type ObservabilitySink, type ObservabilitySinkContext, type QueryCoordinator, type QueryCoordinatorOptions, type RankFanOutRequest, type RankFanOutResult, type RankPageFanOutRequest, type RankPageFanOutResult, type ResolvedSecurity, type ResolvedShard, type Route, type RpcContext, type RpcEnvelope, SHARD_REGISTRY_DO_NAME, type ScheduledControllerLike, type SecurityHeadersOptions, type SecurityOptions, type SentrySinkOptions, type ShardError, type ShardExportOutcome, type ShardImportOutcome, type ShardMigrationOutcome, type ShardNamespaceLike, type ShardRankOutcome, type ShardRankPageOutcome, type ShardRegistry, type ShardTrafficEntry, type ShardTrafficFanOutRequest, type ShardTrafficFanOutResult, type ShardingInfo, type StorageListFunction as StorageListFn, type StorageObject, VERSION, type VectorIndexSummary, type VectorIntrospector, type VectorQueryMatch, type WebhookSinkOptions, type WorkerOptions, analyticsEngineSink, applyJurisdiction, combineSinks, composeIdentityResolvers, composeWorker, consoleSink, createCrossShardRelationCapabilities, createDynamicShardRegistry, createLunoraHandler, createQueryCoordinator, createStaticShardRegistry, createWorker, decorateResponse, defineRpcEnvelope, emitLogEvent, emitRpcEvent, enforceOrigin, handleCorsPreflight, mergeStrategyForAggregate, resolveLunoraOptions, resolveSecurity, resolveShard, routeIdentityResolvers, sentrySink, toAirbyteMessages, toErrorResponse, toFivetranResponse, webhookSink, withFrameworkWorker };
+export { type AdminTableResolver, type AirbyteMessage, type AnalyticsEngineDataPointLike, type AnalyticsEngineDatasetLike, type AnalyticsEngineSinkOptions, type AuthAdmin, type AuthCapabilities, type AuthConfigInfo, type AuthImpersonation, type AuthIntrospector, type AuthPage, type AuthSession, type AuthUser, type AuthUserFieldSpec, type BackupManifest, type BackupStore, type ComposeIdentityResolversErrorMode, type ComposeIdentityResolversOptions, type ConnectorChange, type ConnectorSyncPage, type CorsOptions, type CronHandler, type CronJobDispatch, type CronJobInfo, type CrossShardCounter, type CrossShardReader, type CrossShardRelationCapabilities, type CrossShardRelationOptions, type CsrfOptions, DEFAULT_REGISTRY_CACHE_TTL_MS, type DurableObjectJurisdiction, type DynamicShardRegistry, type DynamicShardRegistryOptions, type ExecutionContextLike, type ExportFanOutRequest, type ExportFanOutResult, type FanOutRequest, type FanOutResult, type FanOutSpec, type FivetranResponse, type FrameworkHostHandler, type FrameworkWorkerOptions, type FrameworkWorkerOptionsInput, type FunctionDescriptor, type FunctionRegistryEntry, type FunctionRegistryLike, type GlobalExportFunction as GlobalExportFn, type GlobalImportFunction as GlobalImportFn, type GlobalIntrospector, type GlobalTableInfo as GlobalTableInfoMeta, type GlobalTablePage as GlobalTablePageMeta, type HttpActionContext, type HttpActionLike, type HttpRouterLike, type IdentityContractLike, type IdentityResolver, type IdentityValidation, type ImportFanOutRequest, type ImportFanOutResult, type KvIntrospector, type KvKeyEntry, type KvKeyListResult, type KvNamespaceSummary, type KvValueResult, type ListAuthUsersOptions, type LogEvent, type LogLevel, LunoraError, type LunoraErrorBody, type LunoraHandlerOptions, type LunoraWorker, type MergeStrategy, type MigrationFanOutRequest, type MigrationFanOutResult, NOOP_EXECUTION_CONTEXT, type ObservabilityEvent, type ObservabilitySink, type ObservabilitySinkContext, type OtlpSinkOptions, type QueryCoordinator, type QueryCoordinatorOptions, type RankFanOutRequest, type RankFanOutResult, type RankPageFanOutRequest, type RankPageFanOutResult, type ResolvedSecurity, type ResolvedShard, type Route, type RpcContext, type RpcEnvelope, SHARD_REGISTRY_DO_NAME, type ScheduledControllerLike, type SecurityHeadersOptions, type SecurityOptions, type SentrySinkOptions, type ShardError, type ShardExportOutcome, type ShardImportOutcome, type ShardMigrationOutcome, type ShardNamespaceLike, type ShardRankOutcome, type ShardRankPageOutcome, type ShardRegistry, type ShardTrafficEntry, type ShardTrafficFanOutRequest, type ShardTrafficFanOutResult, type ShardingInfo, type StorageListFunction as StorageListFn, type StorageObject, VERSION, type VectorIndexSummary, type VectorIntrospector, type VectorQueryMatch, type WebhookSinkOptions, type WorkerOptions, analyticsEngineSink, applyJurisdiction, combineSinks, composeIdentityResolvers, composeWorker, consoleSink, createCrossShardRelationCapabilities, createDynamicShardRegistry, createLunoraHandler, createQueryCoordinator, createStaticShardRegistry, createWorker, decorateResponse, defineRpcEnvelope, emitLogEvent, emitRpcEvent, enforceOrigin, handleCorsPreflight, mergeStrategyForAggregate, otlpSink, resolveLunoraOptions, resolveSecurity, resolveShard, routeIdentityResolvers, sentrySink, toAirbyteMessages, toErrorResponse, toFivetranResponse, webhookSink, withFrameworkWorker };

package/dist/index.mjs

@@ -1,13 +1,13 @@
 export { toAirbyteMessages, toFivetranResponse } from './packem_shared/toAirbyteMessages-DrHdplb4.mjs';
-export { composeWorker, createLunoraHandler, createWorker, defineRpcEnvelope, resolveLunoraOptions, withFrameworkWorker } from './packem_shared/composeWorker-CB3pLcCP.mjs';
+export { composeWorker, createLunoraHandler, createWorker, defineRpcEnvelope, resolveLunoraOptions, withFrameworkWorker } from './packem_shared/composeWorker-CxwkPZUl.mjs';
 export { createCrossShardRelationCapabilities } from './packem_shared/createCrossShardRelationCapabilities-CbcWjkAn.mjs';
 export { DEFAULT_REGISTRY_CACHE_TTL_MS, SHARD_REGISTRY_DO_NAME, createDynamicShardRegistry } from './packem_shared/DEFAULT_REGISTRY_CACHE_TTL_MS-B3pA7aXp.mjs';
 export { LunoraError, toErrorResponse } from './packem_shared/LunoraError-Bpb9EFJ3.mjs';
 export { emitLogEvent, emitRpcEvent } from './packem_shared/emitLogEvent-pEdtqAK8.mjs';
-export { analyticsEngineSink, combineSinks, consoleSink, sentrySink, webhookSink } from './packem_shared/analyticsEngineSink-DqEvrQs0.mjs';
+export { analyticsEngineSink, combineSinks, consoleSink, otlpSink, sentrySink, webhookSink } from './packem_shared/analyticsEngineSink-BpJlA7e9.mjs';
 export { createQueryCoordinator, createStaticShardRegistry, mergeStrategyForAggregate } from './packem_shared/createQueryCoordinator-DNCJzOZE.mjs';
 export { applyJurisdiction, resolveShard } from './packem_shared/applyJurisdiction-BkZtTkct.mjs';
-export { decorateResponse, enforceOrigin, handleCorsPreflight, resolveSecurity } from './packem_shared/decorateResponse-CsZc49QC.mjs';
+export { decorateResponse, enforceOrigin, handleCorsPreflight, resolveSecurity } from './packem_shared/decorateResponse-DRWQFNhF.mjs';
 export { NOOP_EXECUTION_CONTEXT } from './packem_shared/NOOP_EXECUTION_CONTEXT-CCTu0Bf1.mjs';
 export { composeIdentityResolvers, routeIdentityResolvers } from './packem_shared/composeIdentityResolvers-XGjO7V1J.mjs';
 

package/dist/packem_shared/analyticsEngineSink-BpJlA7e9.mjs

@@ -0,0 +1,275 @@
+const OTLP_SEVERITY = {
+  debug: 5,
+  // DEBUG
+  error: 17,
+  // ERROR
+  info: 9,
+  // INFO
+  log: 9,
+  // INFO
+  warn: 13
+  // WARN
+};
+const otlpUnixNano = (ms) => `${String(Math.round(ms))}000000`;
+const otlpRandomHex = (bytes) => {
+  const buffer = new Uint8Array(bytes);
+  crypto.getRandomValues(buffer);
+  let hex = "";
+  for (const byte of buffer) {
+    hex += byte.toString(16).padStart(2, "0");
+  }
+  return hex;
+};
+const encodeAttribute = (key, value) => {
+  if (typeof value === "boolean") {
+    return { key, value: { boolValue: value } };
+  }
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) {
+      return { key, value: { stringValue: String(value) } };
+    }
+    return Number.isSafeInteger(value) ? { key, value: { intValue: String(value) } } : { key, value: { doubleValue: value } };
+  }
+  return { key, value: { stringValue: value } };
+};
+const mergeHeaders = (defaults, overrides, token) => {
+  const merged = {};
+  const seen = /* @__PURE__ */ new Map();
+  const put = (name, value) => {
+    const lower = name.toLowerCase();
+    const existing = seen.get(lower);
+    if (existing === void 0) {
+      seen.set(lower, name);
+      merged[name] = value;
+    } else {
+      merged[existing] = value;
+    }
+  };
+  for (const [name, value] of Object.entries(defaults)) {
+    put(name, value);
+  }
+  for (const [name, value] of Object.entries(overrides ?? {})) {
+    put(name, value);
+  }
+  if (token !== void 0 && token.length > 0) {
+    put("authorization", `Bearer ${token}`);
+  }
+  return merged;
+};
+const wrapResourceSpans = (span, scopeName, serviceName) => {
+  return {
+    resourceSpans: [
+      {
+        resource: { attributes: [encodeAttribute("service.name", serviceName)] },
+        scopeSpans: [{ scope: { name: scopeName }, spans: [span] }]
+      }
+    ]
+  };
+};
+const wrapResourceLogs = (logRecord, scopeName, serviceName) => {
+  return {
+    resourceLogs: [
+      {
+        resource: { attributes: [encodeAttribute("service.name", serviceName)] },
+        scopeLogs: [{ logRecords: [logRecord], scope: { name: scopeName } }]
+      }
+    ]
+  };
+};
+
+const shouldSkip = (event, onlyErrors) => onlyErrors === true && event.ok;
+const otlpTraceBody = (event, serviceName, endMs) => {
+  const attributes = [encodeAttribute("lunora.function_path", event.functionPath), encodeAttribute("lunora.ok", event.ok)];
+  if (event.shardKey !== void 0) {
+    attributes.push(encodeAttribute("lunora.shard_key", event.shardKey));
+  }
+  if (event.error) {
+    attributes.push(encodeAttribute("error.type", event.error.code), encodeAttribute("lunora.error_status", event.error.status));
+  }
+  if (event.fanOut) {
+    attributes.push(
+      encodeAttribute("lunora.fanout.table", event.fanOut.table),
+      encodeAttribute("lunora.fanout.shards", event.fanOut.shards),
+      encodeAttribute("lunora.fanout.failed", event.fanOut.failed)
+    );
+  }
+  const span = {
+    attributes,
+    endTimeUnixNano: otlpUnixNano(endMs),
+    // SPAN_KIND_SERVER — a dispatched RPC is server-side request handling.
+    kind: 2,
+    name: event.functionPath,
+    spanId: otlpRandomHex(8),
+    startTimeUnixNano: otlpUnixNano(endMs - event.durationMs),
+    // STATUS_CODE_OK (1) / STATUS_CODE_ERROR (2).
+    status: event.ok ? { code: 1 } : { code: 2, message: event.error?.message ?? "" },
+    traceId: otlpRandomHex(16)
+  };
+  return wrapResourceSpans(span, "@lunora/runtime", serviceName);
+};
+const otlpLogBody = (event, serviceName) => {
+  const attributes = [encodeAttribute("lunora.function_path", event.functionPath)];
+  if (event.shardKey !== void 0) {
+    attributes.push(encodeAttribute("lunora.shard_key", event.shardKey));
+  }
+  if (event.userId !== void 0) {
+    attributes.push(encodeAttribute("lunora.user_id", event.userId));
+  }
+  const logRecord = {
+    attributes,
+    body: { stringValue: event.message },
+    severityNumber: OTLP_SEVERITY[event.level],
+    severityText: event.level.toUpperCase(),
+    timeUnixNano: otlpUnixNano(event.ts)
+  };
+  return wrapResourceLogs(logRecord, "@lunora/runtime", serviceName);
+};
+const otlpPost = (url, body, headers, context) => {
+  try {
+    const sent = fetch(url, { body: JSON.stringify(body), headers, method: "POST" }).catch(() => {
+    });
+    if (context?.waitUntil) {
+      context.waitUntil(sent);
+    }
+  } catch {
+  }
+};
+const consoleSink = (options = {}) => {
+  const { onlyErrors } = options;
+  return {
+    onLog: (event) => {
+      if (event.level === "error") {
+        console.error("[lunora:log]", event.functionPath, event.message);
+      } else {
+        console.log("[lunora:log]", event.functionPath, event.message);
+      }
+    },
+    onRpc: (event) => {
+      if (shouldSkip(event, onlyErrors)) {
+        return;
+      }
+      if (event.ok) {
+        console.log("[lunora:rpc]", event);
+      } else {
+        console.error("[lunora:rpc]", event);
+      }
+    }
+  };
+};
+const webhookSink = (options) => {
+  const { headers, onlyErrors, transform, url } = options;
+  const mergedHeaders = mergeHeaders({ "content-type": "application/json" }, headers);
+  return {
+    onRpc: (event, context) => {
+      if (shouldSkip(event, onlyErrors)) {
+        return;
+      }
+      try {
+        let payload = event;
+        if (transform) {
+          try {
+            payload = transform(event);
+          } catch {
+            return;
+          }
+        }
+        if (payload === null || payload === void 0) {
+          return;
+        }
+        const sent = fetch(url, {
+          body: JSON.stringify(payload),
+          headers: mergedHeaders,
+          method: "POST"
+        }).catch(() => {
+        });
+        if (context?.waitUntil) {
+          context.waitUntil(sent);
+        }
+      } catch {
+      }
+    }
+  };
+};
+const sentrySink = (options) => {
+  const { capture } = options;
+  const onlyErrors = options.onlyErrors ?? true;
+  return {
+    onRpc: (event) => {
+      if (shouldSkip(event, onlyErrors)) {
+        return;
+      }
+      try {
+        capture(event);
+      } catch {
+      }
+    }
+  };
+};
+const analyticsEngineSink = (options) => {
+  const { dataset, onlyErrors } = options;
+  return {
+    onRpc: (event) => {
+      if (shouldSkip(event, onlyErrors)) {
+        return;
+      }
+      try {
+        dataset.writeDataPoint({
+          blobs: [event.functionPath, event.ok ? "ok" : "error", event.shardKey ?? "", event.error?.code ?? "", event.fanOut?.table ?? ""],
+          doubles: [event.durationMs, event.ok ? 0 : 1, event.fanOut?.shards ?? 0, event.fanOut?.failed ?? 0],
+          indexes: [event.functionPath]
+        });
+      } catch {
+      }
+    }
+  };
+};
+const otlpSink = (options) => {
+  const { endpoint, headers, onlyErrors, token } = options;
+  const serviceName = options.serviceName ?? "lunora";
+  let base = endpoint;
+  while (base.endsWith("/")) {
+    base = base.slice(0, -1);
+  }
+  const tracesUrl = `${base}/v1/traces`;
+  const logsUrl = `${base}/v1/logs`;
+  const mergedHeaders = mergeHeaders({ "content-type": "application/json" }, headers, token);
+  return {
+    onLog: (event, context) => {
+      otlpPost(logsUrl, otlpLogBody(event, serviceName), mergedHeaders, context);
+    },
+    onRpc: (event, context) => {
+      if (shouldSkip(event, onlyErrors)) {
+        return;
+      }
+      otlpPost(tracesUrl, otlpTraceBody(event, serviceName, Date.now()), mergedHeaders, context);
+    }
+  };
+};
+const combineSinks = (...sinks) => {
+  return {
+    onLog: (event, context) => {
+      for (const sink of sinks) {
+        if (!sink.onLog) {
+          continue;
+        }
+        try {
+          sink.onLog(event, context);
+        } catch {
+        }
+      }
+    },
+    onRpc: (event, context) => {
+      for (const sink of sinks) {
+        if (!sink.onRpc) {
+          continue;
+        }
+        try {
+          sink.onRpc(event, context);
+        } catch {
+        }
+      }
+    }
+  };
+};
+
+export { analyticsEngineSink, combineSinks, consoleSink, otlpSink, sentrySink, webhookSink };

package/dist/packem_shared/{composeWorker-CB3pLcCP.mjs → composeWorker-CxwkPZUl.mjs}

@@ -5,7 +5,17 @@ import { wrapResolverWithContract } from './composeIdentityResolvers-XGjO7V1J.mj
 export { composeIdentityResolvers, routeIdentityResolvers } from './composeIdentityResolvers-XGjO7V1J.mjs';
 import { emitRpcEvent } from './emitLogEvent-pEdtqAK8.mjs';
 import { resolveShard, applyJurisdiction } from './applyJurisdiction-BkZtTkct.mjs';
-import { resolveSecurity, handleCorsPreflight, enforceOrigin, decorateResponse, enforceWebSocketOrigin } from './decorateResponse-CsZc49QC.mjs';
+import { resolveSecurity, handleCorsPreflight, enforceOrigin, decorateResponse, enforceWebSocketOrigin } from './decorateResponse-DRWQFNhF.mjs';
+
+const evictOldestEntry = (map, capacity) => {
+  if (map.size < capacity) {
+    return;
+  }
+  const oldest = map.keys().next().value;
+  if (oldest !== void 0) {
+    map.delete(oldest);
+  }
+};
 
 const RELAY_NAME_INFIX = "::relay::";
 const relayName = (ownerKey, index) => `${ownerKey}${RELAY_NAME_INFIX}${String(index)}`;
@@ -477,6 +487,9 @@ const normalizeBatchCall = (raw, index, defaultShard) => {
   if (call.functionPath.startsWith("__lunora_relation__:") || call.functionPath.startsWith("__lunora_admin__")) {
     throw new LunoraError("reserved function path cannot be batched", { code: "FORBIDDEN", status: 403 });
   }
+  if (call.args !== void 0 && (typeof call.args !== "object" || call.args === null || Array.isArray(call.args))) {
+    throw new LunoraError("each batch call `args` must be an object", { code: "BAD_REQUEST", status: 400 });
+  }
   return {
     entry: {
       args: call.args === void 0 ? {} : call.args,
@@ -2085,12 +2098,16 @@ const forwardToShard = async (namespace, shardKey, request) => {
 };
 const relayProbeCache = /* @__PURE__ */ new Map();
 const RELAY_PROBE_TTL_MS = 5e3;
+const RELAY_PROBE_MAX_ENTRIES = 4096;
 const probeRelayCount = async (namespace, shardKey) => {
   const now = Date.now();
   const cached = relayProbeCache.get(shardKey);
   if (cached !== void 0 && cached.expiresMs > now) {
     return cached.relayCount;
   }
+  if (cached !== void 0) {
+    relayProbeCache.delete(shardKey);
+  }
   let relayCount = 0;
   try {
     const response = await resolveShard(namespace, shardKey).fetch(new Request("https://shard.internal/_lunora/route"));
@@ -2104,6 +2121,7 @@ const probeRelayCount = async (namespace, shardKey) => {
   } catch {
     relayCount = 0;
   }
+  evictOldestEntry(relayProbeCache, RELAY_PROBE_MAX_ENTRIES);
   relayProbeCache.set(shardKey, { expiresMs: now + RELAY_PROBE_TTL_MS, relayCount });
   return relayCount;
 };
@@ -2515,9 +2533,12 @@ const createWorker = (options) => {
       guardUnauthenticatedShardAccess("shard");
     }
     const upgradeHeaders = new Headers(request.headers);
-    upgradeHeaders.delete("x-lunora-userid");
-    upgradeHeaders.delete("x-lunora-identity");
-    upgradeHeaders.delete("x-lunora-identity-exp");
+    const clientHeaderNames = [...upgradeHeaders.keys()];
+    for (const name of clientHeaderNames) {
+      if (name.startsWith("x-lunora-")) {
+        upgradeHeaders.delete(name);
+      }
+    }
     const forwardedUserId = forwardedHeaders["x-lunora-userid"];
     const forwardedIdentity = forwardedHeaders["x-lunora-identity"];
     const forwardedExp = forwardedHeaders["x-lunora-identity-exp"];
@@ -2602,12 +2623,6 @@ const createWorker = (options) => {
         },
         sinkContext
       );
-      const responseBookmark = response.headers.get("x-d1-bookmark");
-      if (responseBookmark) {
-        const headers = new Headers(response.headers);
-        headers.set("x-d1-bookmark", responseBookmark);
-        return new Response(response.body, { headers, status: response.status });
-      }
       return response;
     } catch (error) {
       emitRpcEvent(observability, buildErrorEvent(functionPath, Date.now() - rpcStartedAt, error, { shardKey }), sinkContext);
@@ -2714,7 +2729,7 @@ const createWorker = (options) => {
     if (!Array.isArray(calls)) {
       throw new LunoraError("RPC batch `calls` must be an array", { code: "BAD_REQUEST", status: 400 });
     }
-    const { headers: forwardedHeaders, identity } = await resolveForwardContext(request, env, options.resolveIdentity);
+    const { headers: forwardedHeaders, identity } = await resolveForwardContext(request, env, publicResolveIdentity);
     const groups = groupBatchCallsByShard(calls, defaultShard);
     for (const entries of groups.values()) {
       for (const entry of entries) {
@@ -2741,7 +2756,7 @@ const createWorker = (options) => {
       }
     } : void 0;
     const results = [];
-    let latestBookmark;
+    const bookmarks = [];
     const slotError = (entry, status, code, message) => {
       return { body: { error: { code, message } }, id: entry.id, status };
     };
@@ -2792,7 +2807,7 @@ const createWorker = (options) => {
         const durationMs = Date.now() - subStartedAt;
         const bookmark = response.headers.get("x-d1-bookmark");
         if (bookmark) {
-          latestBookmark = bookmark;
+          bookmarks.push(bookmark);
         }
         let parsed;
         try {
@@ -2823,8 +2838,9 @@ const createWorker = (options) => {
       })
     );
     const responseHeaders = { "content-type": "application/json" };
-    if (latestBookmark !== void 0) {
-      responseHeaders["x-d1-bookmark"] = latestBookmark;
+    const [onlyBookmark] = bookmarks;
+    if (bookmarks.length === 1 && onlyBookmark !== void 0) {
+      responseHeaders["x-d1-bookmark"] = onlyBookmark;
     }
     return Response.json({ results }, { headers: responseHeaders, status: 200 });
   };
@@ -2879,13 +2895,14 @@ const createWorker = (options) => {
     if (!coordinator) {
       throw new LunoraError("scheduled backup requires a `queryCoordinator` on the worker", { code: "BACKUP_NOT_CONFIGURED", status: 500 });
     }
-    if (!options.adminToken || options.adminToken.length === 0) {
-      throw new LunoraError("scheduled backup requires an `adminToken` to authenticate the per-shard export gate", {
+    const adminToken = effectiveAdminToken();
+    if (!adminToken || adminToken.length === 0) {
+      throw new LunoraError("scheduled backup requires an `adminToken` (or `env.LUNORA_ADMIN_TOKEN`) to authenticate the per-shard export gate", {
         code: "BACKUP_NOT_CONFIGURED",
         status: 500
       });
     }
-    const forwardedHeaders = { authorization: `Bearer ${options.adminToken}`, "content-type": "application/json" };
+    const forwardedHeaders = { authorization: `Bearer ${adminToken}`, "content-type": "application/json" };
     const tables = options.backupTables;
     let rows = 0;
     let bytes = 0;
@@ -2931,6 +2948,7 @@ const createWorker = (options) => {
     await pruneBackups(store, prefix);
   };
   const handleScheduled = async (controller, env, context) => {
+    resolveAdminTokenFromEnv(env);
     const errors = [];
     const toError = (error) => error instanceof Error ? error : new Error(String(error));
     const userHandler = options.crons?.[controller.cron];
@@ -3047,7 +3065,8 @@ const createWorker = (options) => {
     const url = new URL(request.url);
     if (request.method === "POST" || request.method === "PUT") {
       const contentLength = Number(request.headers.get("content-length") ?? "");
-      if (Number.isFinite(contentLength) && contentLength > MAX_BODY_BYTES) {
+      const maxBodyBytes = url.pathname === KV_VALUE_PATH ? KV_VALUE_MAX_BODY_BYTES : MAX_BODY_BYTES;
+      if (Number.isFinite(contentLength) && contentLength > maxBodyBytes) {
         throw new LunoraError("Body too large", { code: "PAYLOAD_TOO_LARGE", status: 413 });
       }
     }
@@ -3148,4 +3167,4 @@ const resolveLunoraOptions = (options, env) => {
 const createLunoraHandler = (options = {}) => (request, env, context) => createWorker(resolveLunoraOptions(options, env)).fetch(request, env, context ?? NOOP_EXECUTION_CONTEXT);
 const defineRpcEnvelope = (envelope) => envelope;
 
-export { NOOP_EXECUTION_CONTEXT, composeWorker, createLunoraHandler, createWorker, defineRpcEnvelope, resolveLunoraOptions, withFrameworkWorker };
+export { NOOP_EXECUTION_CONTEXT, composeWorker, createLunoraHandler, createWorker, defineRpcEnvelope, probeRelayCount, resolveLunoraOptions, withFrameworkWorker };

package/dist/packem_shared/{decorateResponse-CsZc49QC.mjs → decorateResponse-DRWQFNhF.mjs}

@@ -202,7 +202,14 @@ const handleCorsPreflight = (request, resolved) => {
   const headers = corsResponseHeaders(origin, resolved.cors);
   const requested = request.headers.get("access-control-request-headers");
   headers.set("access-control-allow-methods", resolved.cors.allowedMethods.join(", "));
-  headers.set("access-control-allow-headers", requested ?? resolved.cors.allowedHeaders.join(", "));
+  let allowedHeaders;
+  if (requested === null) {
+    allowedHeaders = resolved.cors.allowedHeaders.join(", ");
+  } else {
+    const permitted = new Set(resolved.cors.allowedHeaders.map((name) => name.toLowerCase()));
+    allowedHeaders = requested.split(",").map((name) => name.trim()).filter((name) => name.length > 0 && permitted.has(name.toLowerCase())).join(", ");
+  }
+  headers.set("access-control-allow-headers", allowedHeaders);
   headers.set("access-control-max-age", String(resolved.cors.maxAge));
   return new Response(null, { headers, status: 204 });
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/runtime",
-  "version": "1.0.0-alpha.23",
+  "version": "1.0.0-alpha.25",
   "description": "Lunora Worker runtime: the RPC router, shard resolver, and query coordinator",
   "keywords": [
     "cloudflare",
@@ -46,7 +46,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/errors": "1.0.0-alpha.3"
+    "@lunora/errors": "1.0.0-alpha.4"
   },
   "engines": {
     "node": "^22.15.0 || >=24.11.0"

package/dist/packem_shared/analyticsEngineSink-DqEvrQs0.mjs

@@ -1,141 +0,0 @@
-const shouldSkip = (event, onlyErrors) => onlyErrors === true && event.ok;
-const mergeHeaders = (defaults, overrides) => {
-  if (!overrides) {
-    return { ...defaults };
-  }
-  const merged = {};
-  const seen = /* @__PURE__ */ new Map();
-  for (const [name, value] of Object.entries(defaults)) {
-    const lower = name.toLowerCase();
-    seen.set(lower, name);
-    merged[name] = value;
-  }
-  for (const [name, value] of Object.entries(overrides)) {
-    const lower = name.toLowerCase();
-    const existing = seen.get(lower);
-    if (existing === void 0) {
-      seen.set(lower, name);
-      merged[name] = value;
-    } else {
-      merged[existing] = value;
-    }
-  }
-  return merged;
-};
-const consoleSink = (options = {}) => {
-  const { onlyErrors } = options;
-  return {
-    onLog: (event) => {
-      if (event.level === "error") {
-        console.error("[lunora:log]", event.functionPath, event.message);
-      } else {
-        console.log("[lunora:log]", event.functionPath, event.message);
-      }
-    },
-    onRpc: (event) => {
-      if (shouldSkip(event, onlyErrors)) {
-        return;
-      }
-      if (event.ok) {
-        console.log("[lunora:rpc]", event);
-      } else {
-        console.error("[lunora:rpc]", event);
-      }
-    }
-  };
-};
-const webhookSink = (options) => {
-  const { headers, onlyErrors, transform, url } = options;
-  const mergedHeaders = mergeHeaders({ "content-type": "application/json" }, headers);
-  return {
-    onRpc: (event, context) => {
-      if (shouldSkip(event, onlyErrors)) {
-        return;
-      }
-      try {
-        let payload = event;
-        if (transform) {
-          try {
-            payload = transform(event);
-          } catch {
-            return;
-          }
-        }
-        if (payload === null || payload === void 0) {
-          return;
-        }
-        const sent = fetch(url, {
-          body: JSON.stringify(payload),
-          headers: mergedHeaders,
-          method: "POST"
-        }).catch(() => {
-        });
-        if (context?.waitUntil) {
-          context.waitUntil(sent);
-        }
-      } catch {
-      }
-    }
-  };
-};
-const sentrySink = (options) => {
-  const { capture } = options;
-  const onlyErrors = options.onlyErrors ?? true;
-  return {
-    onRpc: (event) => {
-      if (shouldSkip(event, onlyErrors)) {
-        return;
-      }
-      try {
-        capture(event);
-      } catch {
-      }
-    }
-  };
-};
-const analyticsEngineSink = (options) => {
-  const { dataset, onlyErrors } = options;
-  return {
-    onRpc: (event) => {
-      if (shouldSkip(event, onlyErrors)) {
-        return;
-      }
-      try {
-        dataset.writeDataPoint({
-          blobs: [event.functionPath, event.ok ? "ok" : "error", event.shardKey ?? "", event.error?.code ?? "", event.fanOut?.table ?? ""],
-          doubles: [event.durationMs, event.ok ? 0 : 1, event.fanOut?.shards ?? 0, event.fanOut?.failed ?? 0],
-          indexes: [event.functionPath]
-        });
-      } catch {
-      }
-    }
-  };
-};
-const combineSinks = (...sinks) => {
-  return {
-    onLog: (event, context) => {
-      for (const sink of sinks) {
-        if (!sink.onLog) {
-          continue;
-        }
-        try {
-          sink.onLog(event, context);
-        } catch {
-        }
-      }
-    },
-    onRpc: (event, context) => {
-      for (const sink of sinks) {
-        if (!sink.onRpc) {
-          continue;
-        }
-        try {
-          sink.onRpc(event, context);
-        } catch {
-        }
-      }
-    }
-  };
-};
-
-export { analyticsEngineSink, combineSinks, consoleSink, sentrySink, webhookSink };