@lunora/runtime 1.0.0-alpha.56 → 1.0.0-alpha.58

package/dist/index.d.mts

@@ -1,8 +1,79 @@
 import { RankDirection, RankPageRow, DatabaseWriterLike, CrossShardReadArgs, QueryPage } from '@lunora/shard-engine';
 export type { RankDirection as RankPageDirection, RankPageRowKey as RankPageKey, RankPageRow, ShardRankPageResult } from '@lunora/shard-engine';
+import { ShardDirectory } from '@lunora/platform';
 import { R2SqlClient } from '@lunora/bindings/r2sql';
 import { WorkflowsRestClient } from '@lunora/workflow';
 import { LunoraError as LunoraError$1, ErrorBody } from '@lunora/errors';
+/**
+ * How a snapshot backup is laid out in an object store — the one definition
+ * both writers use.
+ *
+ * Two of them exist: the platform's scheduled backup (`backupCron` /
+ * `backupStore`, in `./scheduled-backup`) and `lunora backup create --bucket`
+ * in `@lunora/cli`. They deliberately share a bucket so an operator sees one
+ * history, which means they must agree on the key, the sidecar suffix, the
+ * manifest fields and what an `id` is. Written out twice, those four rules
+ * would drift the first time one side changed — this file is what makes
+ * "they agree" a type error rather than a comment.
+ *
+ * Zero dependencies and no I/O, so the CLI can import it without pulling a
+ * Worker runtime into its bundle.
+ */
+/** Default key prefix backups live under. Both writers default here so one bucket is one history. */
+declare const BACKUP_KEY_PREFIX = "backups/";
+/**
+ * A prefix is a key prefix, not a directory, but everyone types it like one.
+ * Without this, `--prefix backups` / `backupPrefix: "backups"` yields
+ * `backupslunora-backup-…`: a key that works, sorts oddly, and matches nothing
+ * the other writer produced. Idempotent, and `""` stays `""` so the same
+ * builder can produce a bare file name.
+ */
+declare const normalizeBackupPrefix: (prefix: string) => string;
+/**
+ * The object key (or file name, with an empty `prefix`) for the snapshot taken
+ * at `id`.
+ *
+ * `id` is the ISO timestamp — `2026-06-01T12:00:00.000Z` — and stays that way
+ * in the manifest, because it is what `lunora backup restore <id>` matches on.
+ * Only the key swaps `:` and `.` for `-`, since both are awkward in file names
+ * and object keys. Conflating the two forms is why `restore` used to be
+ * documented with an argument it could never match.
+ */
+declare const backupObjectKey: (prefix: string, id: string) => string;
+/** The sidecar key for a snapshot at `objectKey`. */
+declare const backupManifestKey: (objectKey: string) => string;
+/** Is this the sidecar of a snapshot, rather than the snapshot itself? */
+declare const isBackupManifestKey: (key: string) => boolean;
+/**
+ * What every snapshot records about itself, whichever writer took it.
+ *
+ * `id` is the ISO timestamp the snapshot was taken at and the handle `restore`
+ * resolves; `file` is where it lives at its own destination (a file name in a
+ * directory, an object key in a bucket).
+ */
+interface BackupManifestEntry {
+  /** Byte length of the snapshot as stored. */
+  bytes: number;
+  createdAt: string;
+  file: string;
+  id: string;
+  rows: number;
+  /**
+   * Lowercase-hex SHA-256 of the snapshot. Optional only because snapshots
+   * taken before checksums existed have none — `restore --verify` refuses
+   * those rather than reporting an unverified restore as a verified one.
+   */
+  sha256?: string;
+  /** The `--tables` / `backupTables` allowlist, when the snapshot is a subset. */
+  tables?: string;
+}
+/**
+ * Is this a backup manifest? The shape check both sides need: the reader, to
+ * skip an unrelated object under the prefix, and retention, to decide whether
+ * something is safe to delete. The side that deletes must not be the side
+ * without a guard.
+ */
+declare const isBackupManifestEntry: (value: unknown) => value is BackupManifestEntry;
 /**
  * Turn-key incremental-sync source helpers for warehouse connectors
  * (Fivetran custom functions, Airbyte incremental sources).
@@ -607,6 +678,7 @@ type DurableObjectJurisdiction = "eu" | "fedramp" | "us";
  * unit-test doubles without coupling to `@cloudflare/workers-types`.
  */
 interface ShardNamespaceLike {
+  /** Materialize a stub from an opaque id. */
   get: (id: unknown) => {
     fetch: (request: Request) => Promise<Response>;
   };
@@ -618,6 +690,7 @@ interface ShardNamespaceLike {
   getByName?: (name: string) => {
     fetch: (request: Request) => Promise<Response>;
   };
+  /** Cloudflare's `DurableObjectNamespace` spelling of `idForName`. */
   idFromName: (name: string) => unknown;
   /**
    * Derive a jurisdiction-restricted subnamespace. Every ID and stub created
@@ -628,6 +701,24 @@ interface ShardNamespaceLike {
    */
   jurisdiction?: (jurisdiction: DurableObjectJurisdiction) => ShardNamespaceLike;
 }
+/**
+ * What a fan-out entry point accepts: a Cloudflare binding **or** a
+ * `@lunora/platform` `ShardDirectory`.
+ *
+ * The two shapes differ by one method name — the contract spells `idFromName`
+ * as `idForName` — and that one letter made every entry point
+ * (`QueryCoordinator.fanOut`, the `orchestrate*` family) reject a fully
+ * conforming directory. A porting blocker, found by construction the first time
+ * `@lunora/platform-node` fanned out.
+ *
+ * It is a **union, not a loosened `ShardNamespaceLike`**. Making `get` and
+ * `idFromName` optional on that interface fixed fan-out and broke everything
+ * else: it is the projection of a real `DurableObjectNamespace`, so ~74 call
+ * sites and every app's `env.SHARD` inherited two members that were suddenly
+ * `possibly undefined`. Widening the input is what was wanted; widening the
+ * binding type was collateral.
+ */
+type ShardNamespaceInput = ShardDirectory | ShardNamespaceLike;
 interface ResolvedShard {
   fetch: (request: Request) => Promise<Response>;
 }
@@ -648,7 +739,7 @@ declare const applyJurisdiction: (namespace: ShardNamespaceLike, jurisdiction?:
  * else `idFromName` + `get` — but the preference now lives in one place (the
  * contract's `resolveShard`) rather than being restated per resolution path.
  */
-declare const resolveShard: (namespace: ShardNamespaceLike, shardKey: string) => ResolvedShard;
+declare const resolveShard: (namespace: ShardNamespaceInput, shardKey: string) => ResolvedShard;
 /**
  * Source of "which shard keys exist for a given table right now". Returning
  * an empty array is valid — the coordinator will respond with the merge
@@ -933,43 +1024,43 @@ interface RankPageFanOutResult {
   shards: ReadonlyArray<ShardRankPageOutcome>;
 }
 interface QueryCoordinator {
-  fanOut: <T = unknown>(namespace: ShardNamespaceLike, request: FanOutRequest) => Promise<FanOutResult<T>>;
+  fanOut: <T = unknown>(namespace: ShardNamespaceInput, request: FanOutRequest) => Promise<FanOutResult<T>>;
   /**
    * Fan the `__lunora_admin__:applyCdc` admin RPC out by forwarding each
    * pre-bucketed per-shard batch of CDC changes, rolling up the applied/failed
    * counts. The replay half of point-in-time recovery.
    */
-  orchestrateApplyCdc: (namespace: ShardNamespaceLike, request: ApplyCdcFanOutRequest) => Promise<ApplyCdcFanOutResult>;
+  orchestrateApplyCdc: (namespace: ShardNamespaceInput, request: ApplyCdcFanOutRequest) => Promise<ApplyCdcFanOutResult>;
   /**
    * Fan the `__lunora_admin__:cdcSync` admin RPC out to every live shard,
    * each resumed from its own cursor in `request.cursors` (shardKey → seq).
    * Returns the per-shard change pages plus their new cursors so the caller
    * can checkpoint each shard independently — the streaming-export feed.
    */
-  orchestrateCdcSync: (namespace: ShardNamespaceLike, request: CdcSyncFanOutRequest) => Promise<CdcSyncFanOutResult>;
+  orchestrateCdcSync: (namespace: ShardNamespaceInput, request: CdcSyncFanOutRequest) => Promise<CdcSyncFanOutResult>;
   /**
    * Fan an export admin RPC out to every live shard, returning the
    * per-shard `{rows}` payloads alongside any per-shard errors. Each shard
    * returns a JSON envelope (not a streaming body) so this method is the
    * collector — the worker assembles the NDJSON stream.
    */
-  orchestrateExport: (namespace: ShardNamespaceLike, request: ExportFanOutRequest) => Promise<ExportFanOutResult>;
+  orchestrateExport: (namespace: ShardNamespaceInput, request: ExportFanOutRequest) => Promise<ExportFanOutResult>;
   /**
    * Fan an import admin RPC out by routing each row to its owning shard. The
    * shard registry resolves which shards exist; rows whose table has a
    * `shardBy(field)` are bucketed using that field's value as the shard key,
    * other tables fall back to the runtime's default `__root__` shard.
    */
-  orchestrateImport: (namespace: ShardNamespaceLike, request: ImportFanOutRequest) => Promise<ImportFanOutResult>;
+  orchestrateImport: (namespace: ShardNamespaceInput, request: ImportFanOutRequest) => Promise<ImportFanOutResult>;
   /** Fan a migration admin RPC out to every live shard of a table and roll up the per-shard outcomes. */
-  orchestrateMigration: (namespace: ShardNamespaceLike, request: MigrationFanOutRequest) => Promise<MigrationFanOutResult>;
+  orchestrateMigration: (namespace: ShardNamespaceInput, request: MigrationFanOutRequest) => Promise<MigrationFanOutResult>;
   /**
    * Fan the `__lunora_admin__:rankBefore` admin RPC out to every live shard of
    * a table and roll up the per-shard `{before, total}` payloads into the
    * global rank (`{position: Σbefore + 1, total: Σtotal}`). The cross-shard
    * `rank()` path for a partition that spans shards.
    */
-  orchestrateRank: (namespace: ShardNamespaceLike, request: RankFanOutRequest) => Promise<RankFanOutResult>;
+  orchestrateRank: (namespace: ShardNamespaceInput, request: RankFanOutRequest) => Promise<RankFanOutResult>;
   /**
    * Page a ranked query across every live shard of a `.shardBy(...)` table.
    * Fans `__lunora_admin__:rankPage` out to each shard, gathers each shard's
@@ -980,7 +1071,7 @@ interface QueryCoordinator {
    * consumed from it — pages never drop or duplicate a row at a shard
    * boundary. The cross-shard `rankPage()` path (PLAN5 §7.1 / PLAN2 #3).
    */
-  orchestrateRankPage: (namespace: ShardNamespaceLike, request: RankPageFanOutRequest) => Promise<RankPageFanOutResult>;
+  orchestrateRankPage: (namespace: ShardNamespaceInput, request: RankPageFanOutRequest) => Promise<RankPageFanOutResult>;
   /**
    * Fan the `__lunora_admin__:getMetrics` admin RPC out to every live shard of
    * a table and collect each shard's lifetime `requests` total into a per-shard
@@ -989,7 +1080,7 @@ interface QueryCoordinator {
    * skew, so this fans the cheap metrics read out and returns the whole shard
    * set's request volumes (a failed shard surfaces as `requests: 0`).
    */
-  orchestrateShardTraffic: (namespace: ShardNamespaceLike, request: ShardTrafficFanOutRequest) => Promise<ShardTrafficFanOutResult>;
+  orchestrateShardTraffic: (namespace: ShardNamespaceInput, request: ShardTrafficFanOutRequest) => Promise<ShardTrafficFanOutResult>;
   readonly registry: ShardRegistry;
 }
 /**
@@ -2585,6 +2676,12 @@ type TraceTrustSignal = "mtls";
  * can reach the worker.
  */
 type TrustInboundTraceContext = boolean | TraceTrustSignal | ((request: Request) => boolean);
+/** A snapshot the scheduled backup took: the shared fields plus which trigger produced it. */
+interface BackupManifest extends BackupManifestEntry {
+  cron: string;
+  scheduledTime: number;
+  sha256: string;
+}
 /**
  * Wire-format RPC envelope. Posted to `POST /_lunora/rpc`.
  *
@@ -2896,6 +2993,26 @@ type StorageUploadFunction = (key: string, body: ArrayBuffer, options?: {
   etag?: string;
   key: string;
 };
+/**
+ * Reads one object's bytes back out of a storage bucket. Structurally the part
+ * of `@lunora/storage`'s `Storage["download"]` the admin endpoint needs — the
+ * body stream plus enough metadata to set the response headers. `null` means
+ * "no such object", which the route turns into a 404.
+ *
+ * This is the read half of {@link StorageUploadFunction}: `lunora backup
+ * restore --bucket` pulls a snapshot back through it under the same admin
+ * bearer that wrote it, so restoring from a bucket does not depend on signed
+ * URLs (which need a signing secret the deployment may not have configured).
+ */
+type StorageDownloadFunction = (key: string, options?: {
+  bucket?: string;
+}) => Promise<{
+  body: ReadableStream | null;
+  httpMetadata?: {
+    contentType?: string;
+  };
+  size?: number;
+} | null>;
 /**
  * Mints a (signed or public) URL for one object so the admin file browser can
  * offer a "copy URL" action. The optional `expiresInSeconds` lets the caller pick
@@ -3073,40 +3190,34 @@ interface CronJobInfo {
  */
 interface BackupStore {
   delete: (key: string) => Promise<unknown>;
+  /**
+   * List objects under a prefix. `include: ["customMetadata"]` is how
+   * retention tells its own snapshots from an operator's without a request
+   * per object — R2 returns custom metadata on a listing only when asked, and
+   * may return fewer than `limit` results when it is, which the cursor loop
+   * already handles.
+   */
   list: (options?: {
     cursor?: string;
+    include?: ("customMetadata" | "httpMetadata")[];
     limit?: number;
     prefix?: string;
   }) => Promise<{
     cursor?: string;
     objects: ReadonlyArray<{
+      customMetadata?: Record<string, string>;
       key: string;
     }>;
     truncated?: boolean;
   }>;
-  put: (key: string, body: ArrayBuffer | Blob | null | ReadableStream | string, options?: {
+  put: (key: string, body: ArrayBuffer | ArrayBufferView | Blob | null | ReadableStream | string, options?: {
     customMetadata?: Record<string, string>;
     httpMetadata?: {
       contentType?: string;
     };
+    sha256?: ArrayBuffer | string;
   }) => Promise<unknown>;
 }
-/**
- * Manifest sidecar written next to each scheduled backup's NDJSON object (at
- * `<file>.manifest.json`). Mirrors the manifest entry the CLI records for local
- * backups so both backup planes describe a snapshot the same way;
- * `cron`/`scheduledTime` additionally record which trigger produced it.
- */
-interface BackupManifest {
-  bytes: number;
-  createdAt: string;
-  cron: string;
-  file: string;
-  id: string;
-  rows: number;
-  scheduledTime: number;
-  tables?: string;
-}
 /**
  * Health / readiness probe configuration (plan 177). Everything is optional; the
  * runtime always registers its default binding probes, so the endpoints work
@@ -3701,6 +3812,17 @@ interface WorkerOptions {
    * `STORAGE_DELETE_NOT_CONFIGURED` — the studio surfaces a clear inline error.
    */
   storageDelete?: StorageDeleteFunction;
+  /**
+   * Reads one object back, backing the admin-gated
+   * `GET /_lunora/admin/storage/object` endpoint that `lunora backup restore
+   * --bucket` pulls snapshots through. Wrap the storage call — the generated
+   * app worker emits
+   * `(key, opts) => pick(opts?.bucket).download(key)` — rather than passing
+   * `createStorage(...).download` itself, whose second parameter is a byte
+   * range, not a bucket. Omit it and the endpoint responds
+   * `STORAGE_DOWNLOAD_NOT_CONFIGURED`.
+   */
+  storageDownload?: StorageDownloadFunction;
   /**
    * Storage lister backing the admin-gated `GET /_lunora/admin/storage`
    * endpoint the studio's file browser calls. The structural shape matches
@@ -4670,5 +4792,14 @@ interface ShardClient {
  * See the module docs for the privilege model and the authorization caveat.
  */
 declare const createShardClient: (namespace: ShardNamespaceLike, options?: ShardClientOptions) => ShardClient;
+/**
+ * Body budget for an object upload, declared by this route the way the KV value
+ * PUT declares its own (`KV_VALUE_MAX_BODY_BYTES`). The shared 1 MiB default is
+ * a JSON-request cap; a blob migration (`lunora import --with-storage`) moves
+ * real files, and a 1 MiB ceiling would push nearly every photo onto the
+ * signed-URL fallback. 32 MiB is what the isolate can buffer and digest
+ * comfortably inside the Workers memory limit.
+ */
+declare const STORAGE_UPLOAD_MAX_BODY_BYTES: number;
 declare const VERSION: string;
-export { type AdminTableResolver, type AirbyteMessage, type AnalyticsEngineDataPointLike, type AnalyticsEngineDatasetLike, type AnalyticsEngineSinkOptions, type AuthAdmin, type AuthCapabilities, type AuthConfigInfo, type AuthImpersonation, type AuthPage, type AuthSession, type AuthUser, type AuthUserFieldSpec, type BackupManifest, type BackupStore, type ComposeIdentityResolversErrorMode, type ComposeIdentityResolversOptions, type ConnectorChange, type ConnectorSyncPage, type CorsOptions, type CronHandler, type CronJobDispatch, type CronJobInfo, type CrossShardCounter, type CrossShardReader, type CrossShardRelationCapabilities, type CrossShardRelationOptions, type CsrfOptions, DEFAULT_LOG_COLUMNS, DEFAULT_LOG_LIMIT, DEFAULT_REGISTRY_CACHE_TTL_MS, type DurableObjectJurisdiction, type DynamicShardRegistry, type DynamicShardRegistryOptions, type ExecutionContextLike, type ExportBatch, type ExportChange, type ExportCursorStore, type ExportFanOutRequest, type ExportFanOutResult, type ExportSink, type ExportTapFailure, type ExportTapResult, type FanOutRequest, type FanOutResult, type FanOutSpec, type FivetranResponse, type FrameworkHostHandler, type FrameworkWorkerOptions, type FrameworkWorkerOptionsInput, type FunctionDescriptor, type FunctionRegistryEntry, type FunctionRegistryLike, type GlobalExportFunction as GlobalExportFn, type GlobalImportFunction as GlobalImportFn, type GlobalIntrospector, type GlobalTableInfo as GlobalTableInfoMeta, type GlobalTablePage as GlobalTablePageMeta, HEALTH_PATH, HEALTH_READY_PATH, type HealthAuthPosture, type HealthBody, type HealthCheckReport, type HealthProbe, type HealthProbeKind, type HealthProbeResult, type HealthRouteDeps, type HttpActionContext, type HttpActionLike, type HttpRouterLike, type IdentityContractLike, type IdentityResolver, type IdentityValidation, type ImportFanOutRequest, type ImportFanOutResult, type KvIntrospector, type KvKeyEntry, type KvKeyListResult, type KvNamespaceSummary, type KvValueResult, LOG_ARCHIVE_NOT_CONFIGURED, LOG_ARCHIVE_PATH, type ListAuthUsersOptions, type LogArchiveConfig, type LogEvent, type LogFields, type LogLevel, LunoraError, type LunoraErrorBody, type LunoraHandlerOptions, type LunoraWorker, type MemoizeIdentityOptions, type MergeStrategy, type MetricEvent, type MetricKind, type MigrationFanOutRequest, type MigrationFanOutResult, NOOP_EXECUTION_CONTEXT, type NotifySubscriptionDevice, type NotifySubscriptionStoreLike, type ObservabilityEvent, type ObservabilitySink, type ObservabilitySinkContext, type OtlpResourceAttributes, type OtlpSinkOptions, type PipelineLike, type PipelineLogColumnMap, type PipelineLogCursor, type PipelineLogField, type PipelineLogPage, type PipelineLogQuery, type PipelineLogReader, type PipelineLogReaderOptions, type PipelineLogRow, type PipelineLogSinkOptions, type QueryCoordinator, type QueryCoordinatorOptions, type RankFanOutRequest, type RankFanOutResult, type RankPageFanOutRequest, type RankPageFanOutResult, type RateLimiterLike, type ResolvedSecurity, type ResolvedShard, type RestInvoke, type RestRateLimit, type RestRegistryEntry, type RestRegistryLike, type RestRoute, type RestRouteDeps, type Route, type RpcContext, type RpcEnvelope, type RunExportTapOptions, SHARD_REGISTRY_DO_NAME, type ScheduledControllerLike, type SecurityHeadersOptions, type SecurityOptions, type SentrySinkOptions, type ShardCallArgs, type ShardCallOptions, type ShardCallReturn, type ShardCallerIdentity, type ShardClient, type ShardClientOptions, type ShardError, type ShardExportOutcome, type ShardFunctionReference, type ShardImportOutcome, type ShardMigrationOutcome, type ShardNamespaceLike, type ShardRankOutcome, type ShardRankPageOutcome, type ShardRegistry, type ShardTrafficEntry, type ShardTrafficFanOutRequest, type ShardTrafficFanOutResult, type ShardingInfo, type SpanEvent, type StorageListFunction as StorageListFn, type StorageObject, type TraceSamplingConfig, type TraceTrustSignal, type TrustInboundTraceContext, VERSION, type VectorIndexSummary, type VectorIntrospector, type VectorQueryMatch, type WebhookSinkOptions, type WorkerOptions, analyticsEngineSink, applyJurisdiction, applyRestCache, argsFromQuery, buildHealthRoutes, buildRestRoutes, combineSinks, composeIdentityResolvers, composeWorker, consoleSink, createCrossShardRelationCapabilities, createDynamicShardRegistry, createKvCursorStore, createLunoraHandler, createMemoryCursorStore, createPipelineLogReader, createQueryCoordinator, createRestRateLimit, createShardClient, createStaticShardRegistry, createWorker, d1Probe, decorateResponse, defineExportSink, defineRpcEnvelope, durableObjectProbe, emitLogEvent, emitRpcEvent, enforceOrigin, handleCorsPreflight, memoizeIdentity, memoizeIdentityPerRequest, mergeStrategyForAggregate, otlpSink, pipelineLogSink, presenceProbe, r2Sink, readShardKey, requestCarriesCredentials, resolveLogArchiveFromEnv, resolveLunoraOptions, resolveSecurity, resolveShard, restCacheHeaders, restSurfaceFromRegistry, routeIdentityResolvers, runExportTap, sanitizeChange, sentrySink, toAirbyteMessages, toErrorResponse, toFivetranResponse, webhookExportSink, webhookSink, withFrameworkWorker };
+export { type AdminTableResolver, type AirbyteMessage, type AnalyticsEngineDataPointLike, type AnalyticsEngineDatasetLike, type AnalyticsEngineSinkOptions, type AuthAdmin, type AuthCapabilities, type AuthConfigInfo, type AuthImpersonation, type AuthPage, type AuthSession, type AuthUser, type AuthUserFieldSpec, BACKUP_KEY_PREFIX, type BackupManifest, type BackupManifestEntry, type BackupStore, type ComposeIdentityResolversErrorMode, type ComposeIdentityResolversOptions, type ConnectorChange, type ConnectorSyncPage, type CorsOptions, type CronHandler, type CronJobDispatch, type CronJobInfo, type CrossShardCounter, type CrossShardReader, type CrossShardRelationCapabilities, type CrossShardRelationOptions, type CsrfOptions, DEFAULT_LOG_COLUMNS, DEFAULT_LOG_LIMIT, DEFAULT_REGISTRY_CACHE_TTL_MS, type DurableObjectJurisdiction, type DynamicShardRegistry, type DynamicShardRegistryOptions, type ExecutionContextLike, type ExportBatch, type ExportChange, type ExportCursorStore, type ExportFanOutRequest, type ExportFanOutResult, type ExportSink, type ExportTapFailure, type ExportTapResult, type FanOutRequest, type FanOutResult, type FanOutSpec, type FivetranResponse, type FrameworkHostHandler, type FrameworkWorkerOptions, type FrameworkWorkerOptionsInput, type FunctionDescriptor, type FunctionRegistryEntry, type FunctionRegistryLike, type GlobalExportFunction as GlobalExportFn, type GlobalImportFunction as GlobalImportFn, type GlobalIntrospector, type GlobalTableInfo as GlobalTableInfoMeta, type GlobalTablePage as GlobalTablePageMeta, HEALTH_PATH, HEALTH_READY_PATH, type HealthAuthPosture, type HealthBody, type HealthCheckReport, type HealthProbe, type HealthProbeKind, type HealthProbeResult, type HealthRouteDeps, type HttpActionContext, type HttpActionLike, type HttpRouterLike, type IdentityContractLike, type IdentityResolver, type IdentityValidation, type ImportFanOutRequest, type ImportFanOutResult, type KvIntrospector, type KvKeyEntry, type KvKeyListResult, type KvNamespaceSummary, type KvValueResult, LOG_ARCHIVE_NOT_CONFIGURED, LOG_ARCHIVE_PATH, type ListAuthUsersOptions, type LogArchiveConfig, type LogEvent, type LogFields, type LogLevel, LunoraError, type LunoraErrorBody, type LunoraHandlerOptions, type LunoraWorker, type MemoizeIdentityOptions, type MergeStrategy, type MetricEvent, type MetricKind, type MigrationFanOutRequest, type MigrationFanOutResult, NOOP_EXECUTION_CONTEXT, type NotifySubscriptionDevice, type NotifySubscriptionStoreLike, type ObservabilityEvent, type ObservabilitySink, type ObservabilitySinkContext, type OtlpResourceAttributes, type OtlpSinkOptions, type PipelineLike, type PipelineLogColumnMap, type PipelineLogCursor, type PipelineLogField, type PipelineLogPage, type PipelineLogQuery, type PipelineLogReader, type PipelineLogReaderOptions, type PipelineLogRow, type PipelineLogSinkOptions, type QueryCoordinator, type QueryCoordinatorOptions, type RankFanOutRequest, type RankFanOutResult, type RankPageFanOutRequest, type RankPageFanOutResult, type RateLimiterLike, type ResolvedSecurity, type ResolvedShard, type RestInvoke, type RestRateLimit, type RestRegistryEntry, type RestRegistryLike, type RestRoute, type RestRouteDeps, type Route, type RpcContext, type RpcEnvelope, type RunExportTapOptions, SHARD_REGISTRY_DO_NAME, STORAGE_UPLOAD_MAX_BODY_BYTES, type ScheduledControllerLike, type SecurityHeadersOptions, type SecurityOptions, type SentrySinkOptions, type ShardCallArgs, type ShardCallOptions, type ShardCallReturn, type ShardCallerIdentity, type ShardClient, type ShardClientOptions, type ShardError, type ShardExportOutcome, type ShardFunctionReference, type ShardImportOutcome, type ShardMigrationOutcome, type ShardNamespaceInput, type ShardNamespaceLike, type ShardRankOutcome, type ShardRankPageOutcome, type ShardRegistry, type ShardTrafficEntry, type ShardTrafficFanOutRequest, type ShardTrafficFanOutResult, type ShardingInfo, type SpanEvent, type StorageListFunction as StorageListFn, type StorageObject, type TraceSamplingConfig, type TraceTrustSignal, type TrustInboundTraceContext, VERSION, type VectorIndexSummary, type VectorIntrospector, type VectorQueryMatch, type WebhookSinkOptions, type WorkerOptions, analyticsEngineSink, applyJurisdiction, applyRestCache, argsFromQuery, backupManifestKey, backupObjectKey, buildHealthRoutes, buildRestRoutes, combineSinks, composeIdentityResolvers, composeWorker, consoleSink, createCrossShardRelationCapabilities, createDynamicShardRegistry, createKvCursorStore, createLunoraHandler, createMemoryCursorStore, createPipelineLogReader, createQueryCoordinator, createRestRateLimit, createShardClient, createStaticShardRegistry, createWorker, d1Probe, decorateResponse, defineExportSink, defineRpcEnvelope, durableObjectProbe, emitLogEvent, emitRpcEvent, enforceOrigin, handleCorsPreflight, isBackupManifestEntry, isBackupManifestKey, memoizeIdentity, memoizeIdentityPerRequest, mergeStrategyForAggregate, normalizeBackupPrefix, otlpSink, pipelineLogSink, presenceProbe, r2Sink, readShardKey, requestCarriesCredentials, resolveLogArchiveFromEnv, resolveLunoraOptions, resolveSecurity, resolveShard, restCacheHeaders, restSurfaceFromRegistry, routeIdentityResolvers, runExportTap, sanitizeChange, sentrySink, toAirbyteMessages, toErrorResponse, toFivetranResponse, webhookExportSink, webhookSink, withFrameworkWorker };