@lunora/server 1.0.0-alpha.214 → 1.0.0-alpha.216

package/dist/index.d.mts

@@ -1887,6 +1887,13 @@ type HttpRunners = Pick<ActionCtx, "runAction" | "runMutation" | "runQuery">;
  * the helper even on the branches that never went near storage.
  */
 type HttpActionCtx = {
+  /**
+   * Forward a server-to-server request to a shard Durable Object carrying the
+   * caller's resolved identity headers — the seam the live-stream primitive
+   * (`defineLiveStream`) uses to reach the shard's subscriber registry. See
+   * {@link ShardFetch}.
+   */
+  readonly fetchShard: ShardFetch;
   /**
    * The same `run*` trio bound to `shardKey`, mirroring
    * `createShardClient(...).forShard(key)`:
@@ -1900,6 +1907,8 @@ type HttpActionCtx = {
    * DO — silently, with no way to say otherwise.
    */
   readonly forShard: (shardKey: string) => HttpRunners;
+  /** Publish an arbitrary event to a live topic. See {@link LivePublisher}. */
+  readonly live: LivePublisher;
   readonly scheduler?: ActionCtx["scheduler"];
   readonly storage?: ActionCtx["storage"];
   /**
@@ -1920,6 +1929,62 @@ type HttpActionCtx = {
 } & HttpRunners & Pick<ActionCtx, "auth" | "cache" | "fetch">;
 /** A raw handler wrapped by {@link httpAction}. Receives the raw request, returns the raw response. */
 type HttpActionHandler = (context: HttpActionCtx, request: Request) => Promise<Response> | Response;
+/** Init for {@link ShardFetch} — the fields the live-stream primitive needs. */
+interface ShardFetchInit {
+  /** Request body (already serialized). */
+  body?: string;
+  /** Extra headers merged over the forwarded identity headers. */
+  headers?: Record<string, string>;
+  /** HTTP method; defaults to `GET`. */
+  method?: string;
+}
+/**
+ * Forward a server-to-server request to a shard Durable Object, carrying the
+ * caller's resolved identity headers. This is the seam the live-stream
+ * primitive uses to reach the shard's subscriber registry: a worker-side
+ * `.stream()` handler cannot itself hold a connection-scoped subscription (the
+ * registry must be the single-actor DO), so the SSE stream is served by the DO
+ * and this is how the route reaches it.
+ *
+ * Not a general-purpose escape hatch: like `ctx.run*` it dispatches as trusted
+ * worker code, so a handler must have already run whatever authorization it
+ * requires before forwarding. An internal call has no client-reachable path of
+ * its own — the DO is never directly addressable.
+ *
+ * `shardKey === undefined` targets the app's default shard.
+ */
+type ShardFetch = (shardKey: string | undefined, path: string, init?: ShardFetchInit) => Promise<Response>;
+/** Where a {@link LivePublisher.publish} goes. */
+interface LivePublishOptions {
+  /** The shard to publish on. Defaults to the ctx's default shard. */
+  shardKey?: string;
+  /**
+   * The `id` of the `defineLiveStream` whose subscribers see the event. A
+   * subscriber follows a topic through the stream that authorized it, so a
+   * publish reaches only that stream's subscribers.
+   */
+  stream: string;
+}
+/**
+ * `ctx.live` — publish an arbitrary event to a named topic. The event reaches
+ * the SSE subscribers of `options.stream` that followed the topic, and the
+ * WebSocket whisper members that hold a live grant for that stream and topic
+ * (see the live-stream docblock).
+ *
+ * Reachable from an HTTP-action ctx; an action (a scheduled job) publishes
+ * through the same surface in-process (see the live-stream docblock).
+ */
+interface LivePublisher {
+  /**
+   * Publish `payload` to `topic` on `options.stream`. Best-effort — a topic
+   * with no subscribers is a no-op. Rejects when the shard refuses the publish:
+   * a `room:` topic (403), a topic over the control-key bound (400), or a
+   * payload over the publish cap (413), so a refused publish is not silently
+   * dropped. On a target that does not serve live streams it rejects with
+   * `LIVE_STREAMS_UNSUPPORTED`.
+   */
+  publish: (topic: string, payload: unknown, options: LivePublishOptions) => Promise<void>;
+}
 /**
  * The hono {@link https://hono.dev | Hono} environment used by {@link httpRouter}.
  * The runtime injects the per-request {@link HttpActionCtx} on the private
@@ -2468,6 +2533,58 @@ declare const clampLimit: (limit: number | undefined, fallback: number, maxLimit
  * the config requires the second call.
  */
 declare const defineListArgs: <TDocument>() => <F extends ListFilterShape<TDocument>, O extends keyof TDocument & string>(config: DefineListArgsConfig<F, O>) => ListArgsSpec<TDocument, F, O>;
+/**
+ * Verdict handler for a live-topic subscribe. Return `true` to allow; anything
+ * else denies (and a throw denies).
+ */
+type LiveSubscribeHandler = (options: {
+  ctx: HttpActionCtx;
+  topic: string;
+}) => boolean | Promise<boolean>;
+/** Config for {@link defineLiveStream}. */
+interface LiveStreamConfig {
+  /**
+   * Opt-in for a public stream. It never skips {@link LiveStreamConfig.onSubscribe}:
+   * when a handler is present, the handler decides for every caller and this flag
+   * changes nothing. When `onSubscribe` is omitted, `true` admits an ANONYMOUS
+   * caller (no identity) to any topic, and an authenticated caller is still
+   * denied. Defaults to `false`. See the module docblock for why the default is deny.
+   */
+  allowAnonymousControl?: boolean;
+  /** Stable id, used to derive {@link LiveStream.connectPath} / {@link LiveStream.controlPath}. */
+  id: string;
+  /**
+   * Per-topic authorization, consulted for every subscribe from every caller.
+   * Omitted ⇒ default-deny (unless `allowAnonymousControl` admits anonymous callers).
+   */
+  onSubscribe?: LiveSubscribeHandler;
+}
+/** The two route handlers {@link defineLiveStream} produces. */
+interface LiveStream {
+  /** Mount with `app.get(stream.connectPath, stream.connect)`. Returns the SSE response. */
+  connect: LunoraRouteHandler;
+  /** `GET` path for the SSE connection. */
+  connectPath: string;
+  /** Mount with `app.post(stream.controlPath, stream.control)`. Returns a JSON ack. */
+  control: LunoraRouteHandler;
+  /** `POST` path for subscribe / unsubscribe control. */
+  controlPath: string;
+  id: string;
+}
+/**
+ * Define a live topic stream. See the module docblock for the authorization
+ * defaults and the hot-shard ceiling.
+ *
+ * Two limits to know before you ship. First, a subscription is authorized once,
+ * at subscribe, and is not re-checked while the connection stays open: a
+ * credential with an expiry ends the stream at that expiry, and a cookie session
+ * with no expiry keeps receiving until the client closes the connection or
+ * reconnects. Second, live streams are unavailable when delivery authorization is
+ * enabled. Codegen refuses an app that declares a live stream and also calls
+ * `.deliveryAuthorization(...)`, because the shard answers every `/_lunora/live/*`
+ * route with 501 in that mode.
+ */
+declare const defineLiveStream: (config: LiveStreamConfig) => LiveStream;
 /**
  * Structural mirrors of `@lunora/shard-engine`'s rank-page-row shapes
  * (`RankPageRowKey` / `RankPageRow` / `ShardRankPageResult`) — the return type
@@ -4096,7 +4213,7 @@ type RegisteredWhisperAuthorizer = RegisteredFunction<Record<string, never>, boo
  */
 declare const onWhisper: (handler: WhisperAuthorizeHandler) => RegisteredWhisperAuthorizer;
 declare const VERSION = "0.0.0";
-export { DEFAULT_ACTION_CACHE_TTL_MS as ACTION_CACHE_DEFAULT_TTL_MS, ACTION_CACHE_TABLE, type ActionBuilder, type ActionCacheComponent, type ActionCacheContext, type ActionCacheDatabase, type ActionCacheFunctions, type ActionCtx, type AggregateIndexDefinition, type AggregateIndexOptions, type AggregateOp, type ArgsValidator, type Component, type ComponentFunctions, type CreateOptions, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_REDACTED_FIELDS as DOCUMENT_HISTORY_REDACTED_FIELDS, DOCUMENT_HISTORY_TABLE, type DataModelInit, type DeferredDeleteFlushResult, type DefineActionCacheOptions, type DefineComponentOptions, type DefineDocumentHistoryOptions, type DefineIdentityOptions, type DefineListArgsConfig, type DefinePluginOptions, type DefinePolicyInput, type DefinePresenceOptions, type DefineRoomOptions, type DefineStorageRuleInput, type DocumentHistoryComponent, type DocumentHistoryEntry, type DocumentHistoryFunctions, type DurableObjectJurisdiction, type DurableStreamOptions, type EmptyArgs, type EnvAccessor, type EnvKeyFailure, type EnvShape, type ExposeConfig, type ExtendableSchema, type FacadeEntry, type FacadeWriterLike, type FunctionKind, type HttpActionCtx, type HttpActionHandler, type HttpMethod, type HttpRoute, type HttpRouteBuilder, type HttpRouteFactory, type HttpRouteHandlerOptions, type HttpRunners, type HttpStreamHandlerOptions, type IdentityContract, type IdentityRejectMode, type IdentityValidation, type IndexFieldsByTable, type InferArgs, type InferEnv, type InferIdentity, type InlineAggregateIndexOptions, type InlineRankIndexOptions, type InternalActionBuilder, type InternalMutationBuilder, type InternalQueryBuilder, type LifecycleEvent, type LifecycleHandler, type ListArgsSpec, type ListArgsValidators, type ListArgsValue, type ListFilterOperators, type ListOrderByEntry, type ListWhere, type LunoraBuilders, LunoraEnvError, type LunoraHttpApp, type LunoraHttpEnv, type LunoraRouteHandler, type ManyRelation, type MaskColumns, type MaskContext, type MaskFn, type MaskOptions, type MaskPolicies, type MaskRegistry, type MaskStrategy, type Middleware, type MiddlewareContext, type MiddlewareNext, type MigrationCtx, type MigrationDefinition, type MigrationDocument, type MigrationReader, type MigrationTransform, type ModuleConfig, type ModuleDefinition, type MutationBuilder, type MutationCtx, type MutatorDefinition, type OnDeleteAction, type OneRelation, type OrmLike, DEFAULT_TTL_MS as PRESENCE_DEFAULT_TTL_MS, PRESENCE_TABLE, type Permission, type PlatformAdminCheck, type Plugin, type Policy, type PrefixedTables, type PresenceComponent, type PresenceFunctions, type PresenceMember, type ProtectPublicOptions, type QueryBuilder, type QueryCtx, type RankIndexDefinition, type RankIndexOptions, type ReactorHandler, type ReactorOutcome, type ReactorSelect, type RegisteredAction, type RegisteredFunction, type RegisteredLifecycleHook, type RegisteredMigration, type RegisteredMutation, type RegisteredMutator, type RegisteredQuery, type RegisteredReactor, type RegisteredRoom, type RegisteredShape, type RegisteredStream, type RegisteredWhisperAuthorizer, type RelationBuilder, type RelationDefinition, type RelationThrough, type RlsOptions, type RlsReadRegistry, type Role, type RoomJoinHandler, type RoomLeaveHandler, type RoomMessageHandler, type RoomMessageOf, type RoomSocket, type Schema, type SchemaExtension, type ServiceBindingSpec, type ServiceFetcher, type ServiceRpc, type ShapeDefinition, type ShapeGuardDeclaration, type ShapeReadWhereRequest, type ShardInitEvent, type ShardInitHandler, type SseEvent, type StorageOperation, type StorageRule, type StorageRuleContext, type StorageRuleDecision, type StorageRulesOptions, type StorageServeAuthorizer, type StorageServeAuthzContext, type TableBuilder, type TableDefinition, type TerminalKind, type TriggerBuilder, type TriggerDefinition, type TypedDefinePolicyInput, VERSION, type VectorEmbedder, type VectorIndexDefinition, type VectorIndexOptions, type VectorMetric, type VectorizeOptions, type WhereInput, type WhisperAuthorizeHandler, type WhisperEvent, actionCacheExtension, allowAll, asBucketStorage, assertShapesDeclareReadPolicies, beginDeferredDeletes, beginDeferredSchedules, bindOrm, bindTableFacade, buildMaskRegistry, buildRlsReadRegistry, cacheKeyFor, clampLimit, composePluginMiddleware, composeShapeReadWhere, createPolicyDsl, createSecrets, createServices, defineActionCache, defineAggregateIndex, defineComponent, defineDocumentHistory, defineEnv, defineIdentity, defineIdentityGuard, defineListArgs, defineMigration, defineModule, defineMutator, definePermission, definePlugin, definePolicies, definePolicy, definePresence, defineRankIndex, defineRole, defineRoom, defineSchema, defineSchemaExtension, defineShape, defineStorageRule, defineStorageRules, defineTable, defineVectorIndex, deny, documentHistoryExtension, flushDeferredDeletes,
+export { DEFAULT_ACTION_CACHE_TTL_MS as ACTION_CACHE_DEFAULT_TTL_MS, ACTION_CACHE_TABLE, type ActionBuilder, type ActionCacheComponent, type ActionCacheContext, type ActionCacheDatabase, type ActionCacheFunctions, type ActionCtx, type AggregateIndexDefinition, type AggregateIndexOptions, type AggregateOp, type ArgsValidator, type Component, type ComponentFunctions, type CreateOptions, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_REDACTED_FIELDS as DOCUMENT_HISTORY_REDACTED_FIELDS, DOCUMENT_HISTORY_TABLE, type DataModelInit, type DeferredDeleteFlushResult, type DefineActionCacheOptions, type DefineComponentOptions, type DefineDocumentHistoryOptions, type DefineIdentityOptions, type DefineListArgsConfig, type DefinePluginOptions, type DefinePolicyInput, type DefinePresenceOptions, type DefineRoomOptions, type DefineStorageRuleInput, type DocumentHistoryComponent, type DocumentHistoryEntry, type DocumentHistoryFunctions, type DurableObjectJurisdiction, type DurableStreamOptions, type EmptyArgs, type EnvAccessor, type EnvKeyFailure, type EnvShape, type ExposeConfig, type ExtendableSchema, type FacadeEntry, type FacadeWriterLike, type FunctionKind, type HttpActionCtx, type HttpActionHandler, type HttpMethod, type HttpRoute, type HttpRouteBuilder, type HttpRouteFactory, type HttpRouteHandlerOptions, type HttpRunners, type HttpStreamHandlerOptions, type IdentityContract, type IdentityRejectMode, type IdentityValidation, type IndexFieldsByTable, type InferArgs, type InferEnv, type InferIdentity, type InlineAggregateIndexOptions, type InlineRankIndexOptions, type InternalActionBuilder, type InternalMutationBuilder, type InternalQueryBuilder, type LifecycleEvent, type LifecycleHandler, type ListArgsSpec, type ListArgsValidators, type ListArgsValue, type ListFilterOperators, type ListOrderByEntry, type ListWhere, type LivePublishOptions, type LivePublisher, type LiveStream, type LiveStreamConfig, type LiveSubscribeHandler, type LunoraBuilders, LunoraEnvError, type LunoraHttpApp, type LunoraHttpEnv, type LunoraRouteHandler, type ManyRelation, type MaskColumns, type MaskContext, type MaskFn, type MaskOptions, type MaskPolicies, type MaskRegistry, type MaskStrategy, type Middleware, type MiddlewareContext, type MiddlewareNext, type MigrationCtx, type MigrationDefinition, type MigrationDocument, type MigrationReader, type MigrationTransform, type ModuleConfig, type ModuleDefinition, type MutationBuilder, type MutationCtx, type MutatorDefinition, type OnDeleteAction, type OneRelation, type OrmLike, DEFAULT_TTL_MS as PRESENCE_DEFAULT_TTL_MS, PRESENCE_TABLE, type Permission, type PlatformAdminCheck, type Plugin, type Policy, type PrefixedTables, type PresenceComponent, type PresenceFunctions, type PresenceMember, type ProtectPublicOptions, type QueryBuilder, type QueryCtx, type RankIndexDefinition, type RankIndexOptions, type ReactorHandler, type ReactorOutcome, type ReactorSelect, type RegisteredAction, type RegisteredFunction, type RegisteredLifecycleHook, type RegisteredMigration, type RegisteredMutation, type RegisteredMutator, type RegisteredQuery, type RegisteredReactor, type RegisteredRoom, type RegisteredShape, type RegisteredStream, type RegisteredWhisperAuthorizer, type RelationBuilder, type RelationDefinition, type RelationThrough, type RlsOptions, type RlsReadRegistry, type Role, type RoomJoinHandler, type RoomLeaveHandler, type RoomMessageHandler, type RoomMessageOf, type RoomSocket, type Schema, type SchemaExtension, type ServiceBindingSpec, type ServiceFetcher, type ServiceRpc, type ShapeDefinition, type ShapeGuardDeclaration, type ShapeReadWhereRequest, type ShardFetch, type ShardFetchInit, type ShardInitEvent, type ShardInitHandler, type SseEvent, type StorageOperation, type StorageRule, type StorageRuleContext, type StorageRuleDecision, type StorageRulesOptions, type StorageServeAuthorizer, type StorageServeAuthzContext, type TableBuilder, type TableDefinition, type TerminalKind, type TriggerBuilder, type TriggerDefinition, type TypedDefinePolicyInput, VERSION, type VectorEmbedder, type VectorIndexDefinition, type VectorIndexOptions, type VectorMetric, type VectorizeOptions, type WhereInput, type WhisperAuthorizeHandler, type WhisperEvent, actionCacheExtension, allowAll, asBucketStorage, assertShapesDeclareReadPolicies, beginDeferredDeletes, beginDeferredSchedules, bindOrm, bindTableFacade, buildMaskRegistry, buildRlsReadRegistry, cacheKeyFor, clampLimit, composePluginMiddleware, composeShapeReadWhere, createPolicyDsl, createSecrets, createServices, defineActionCache, defineAggregateIndex, defineComponent, defineDocumentHistory, defineEnv, defineIdentity, defineIdentityGuard, defineListArgs, defineLiveStream, defineMigration, defineModule, defineMutator, definePermission, definePlugin, definePolicies, definePolicy, definePresence, defineRankIndex, defineRole, defineRoom, defineSchema, defineSchemaExtension, defineShape, defineStorageRule, defineStorageRules, defineTable, defineVectorIndex, deny, documentHistoryExtension, flushDeferredDeletes,
 /**
  * True when `value` is safe to use as an HTTP header field-value: no CR, LF, or
  * NUL. Guards against response-header injection / `Headers`-construction throws

package/dist/index.d.ts

@@ -1887,6 +1887,13 @@ type HttpRunners = Pick<ActionCtx, "runAction" | "runMutation" | "runQuery">;
  * the helper even on the branches that never went near storage.
  */
 type HttpActionCtx = {
+  /**
+   * Forward a server-to-server request to a shard Durable Object carrying the
+   * caller's resolved identity headers — the seam the live-stream primitive
+   * (`defineLiveStream`) uses to reach the shard's subscriber registry. See
+   * {@link ShardFetch}.
+   */
+  readonly fetchShard: ShardFetch;
   /**
    * The same `run*` trio bound to `shardKey`, mirroring
    * `createShardClient(...).forShard(key)`:
@@ -1900,6 +1907,8 @@ type HttpActionCtx = {
    * DO — silently, with no way to say otherwise.
    */
   readonly forShard: (shardKey: string) => HttpRunners;
+  /** Publish an arbitrary event to a live topic. See {@link LivePublisher}. */
+  readonly live: LivePublisher;
   readonly scheduler?: ActionCtx["scheduler"];
   readonly storage?: ActionCtx["storage"];
   /**
@@ -1920,6 +1929,62 @@ type HttpActionCtx = {
 } & HttpRunners & Pick<ActionCtx, "auth" | "cache" | "fetch">;
 /** A raw handler wrapped by {@link httpAction}. Receives the raw request, returns the raw response. */
 type HttpActionHandler = (context: HttpActionCtx, request: Request) => Promise<Response> | Response;
+/** Init for {@link ShardFetch} — the fields the live-stream primitive needs. */
+interface ShardFetchInit {
+  /** Request body (already serialized). */
+  body?: string;
+  /** Extra headers merged over the forwarded identity headers. */
+  headers?: Record<string, string>;
+  /** HTTP method; defaults to `GET`. */
+  method?: string;
+}
+/**
+ * Forward a server-to-server request to a shard Durable Object, carrying the
+ * caller's resolved identity headers. This is the seam the live-stream
+ * primitive uses to reach the shard's subscriber registry: a worker-side
+ * `.stream()` handler cannot itself hold a connection-scoped subscription (the
+ * registry must be the single-actor DO), so the SSE stream is served by the DO
+ * and this is how the route reaches it.
+ *
+ * Not a general-purpose escape hatch: like `ctx.run*` it dispatches as trusted
+ * worker code, so a handler must have already run whatever authorization it
+ * requires before forwarding. An internal call has no client-reachable path of
+ * its own — the DO is never directly addressable.
+ *
+ * `shardKey === undefined` targets the app's default shard.
+ */
+type ShardFetch = (shardKey: string | undefined, path: string, init?: ShardFetchInit) => Promise<Response>;
+/** Where a {@link LivePublisher.publish} goes. */
+interface LivePublishOptions {
+  /** The shard to publish on. Defaults to the ctx's default shard. */
+  shardKey?: string;
+  /**
+   * The `id` of the `defineLiveStream` whose subscribers see the event. A
+   * subscriber follows a topic through the stream that authorized it, so a
+   * publish reaches only that stream's subscribers.
+   */
+  stream: string;
+}
+/**
+ * `ctx.live` — publish an arbitrary event to a named topic. The event reaches
+ * the SSE subscribers of `options.stream` that followed the topic, and the
+ * WebSocket whisper members that hold a live grant for that stream and topic
+ * (see the live-stream docblock).
+ *
+ * Reachable from an HTTP-action ctx; an action (a scheduled job) publishes
+ * through the same surface in-process (see the live-stream docblock).
+ */
+interface LivePublisher {
+  /**
+   * Publish `payload` to `topic` on `options.stream`. Best-effort — a topic
+   * with no subscribers is a no-op. Rejects when the shard refuses the publish:
+   * a `room:` topic (403), a topic over the control-key bound (400), or a
+   * payload over the publish cap (413), so a refused publish is not silently
+   * dropped. On a target that does not serve live streams it rejects with
+   * `LIVE_STREAMS_UNSUPPORTED`.
+   */
+  publish: (topic: string, payload: unknown, options: LivePublishOptions) => Promise<void>;
+}
 /**
  * The hono {@link https://hono.dev | Hono} environment used by {@link httpRouter}.
  * The runtime injects the per-request {@link HttpActionCtx} on the private
@@ -2468,6 +2533,58 @@ declare const clampLimit: (limit: number | undefined, fallback: number, maxLimit
  * the config requires the second call.
  */
 declare const defineListArgs: <TDocument>() => <F extends ListFilterShape<TDocument>, O extends keyof TDocument & string>(config: DefineListArgsConfig<F, O>) => ListArgsSpec<TDocument, F, O>;
+/**
+ * Verdict handler for a live-topic subscribe. Return `true` to allow; anything
+ * else denies (and a throw denies).
+ */
+type LiveSubscribeHandler = (options: {
+  ctx: HttpActionCtx;
+  topic: string;
+}) => boolean | Promise<boolean>;
+/** Config for {@link defineLiveStream}. */
+interface LiveStreamConfig {
+  /**
+   * Opt-in for a public stream. It never skips {@link LiveStreamConfig.onSubscribe}:
+   * when a handler is present, the handler decides for every caller and this flag
+   * changes nothing. When `onSubscribe` is omitted, `true` admits an ANONYMOUS
+   * caller (no identity) to any topic, and an authenticated caller is still
+   * denied. Defaults to `false`. See the module docblock for why the default is deny.
+   */
+  allowAnonymousControl?: boolean;
+  /** Stable id, used to derive {@link LiveStream.connectPath} / {@link LiveStream.controlPath}. */
+  id: string;
+  /**
+   * Per-topic authorization, consulted for every subscribe from every caller.
+   * Omitted ⇒ default-deny (unless `allowAnonymousControl` admits anonymous callers).
+   */
+  onSubscribe?: LiveSubscribeHandler;
+}
+/** The two route handlers {@link defineLiveStream} produces. */
+interface LiveStream {
+  /** Mount with `app.get(stream.connectPath, stream.connect)`. Returns the SSE response. */
+  connect: LunoraRouteHandler;
+  /** `GET` path for the SSE connection. */
+  connectPath: string;
+  /** Mount with `app.post(stream.controlPath, stream.control)`. Returns a JSON ack. */
+  control: LunoraRouteHandler;
+  /** `POST` path for subscribe / unsubscribe control. */
+  controlPath: string;
+  id: string;
+}
+/**
+ * Define a live topic stream. See the module docblock for the authorization
+ * defaults and the hot-shard ceiling.
+ *
+ * Two limits to know before you ship. First, a subscription is authorized once,
+ * at subscribe, and is not re-checked while the connection stays open: a
+ * credential with an expiry ends the stream at that expiry, and a cookie session
+ * with no expiry keeps receiving until the client closes the connection or
+ * reconnects. Second, live streams are unavailable when delivery authorization is
+ * enabled. Codegen refuses an app that declares a live stream and also calls
+ * `.deliveryAuthorization(...)`, because the shard answers every `/_lunora/live/*`
+ * route with 501 in that mode.
+ */
+declare const defineLiveStream: (config: LiveStreamConfig) => LiveStream;
 /**
  * Structural mirrors of `@lunora/shard-engine`'s rank-page-row shapes
  * (`RankPageRowKey` / `RankPageRow` / `ShardRankPageResult`) — the return type
@@ -4096,7 +4213,7 @@ type RegisteredWhisperAuthorizer = RegisteredFunction<Record<string, never>, boo
  */
 declare const onWhisper: (handler: WhisperAuthorizeHandler) => RegisteredWhisperAuthorizer;
 declare const VERSION = "0.0.0";
-export { DEFAULT_ACTION_CACHE_TTL_MS as ACTION_CACHE_DEFAULT_TTL_MS, ACTION_CACHE_TABLE, type ActionBuilder, type ActionCacheComponent, type ActionCacheContext, type ActionCacheDatabase, type ActionCacheFunctions, type ActionCtx, type AggregateIndexDefinition, type AggregateIndexOptions, type AggregateOp, type ArgsValidator, type Component, type ComponentFunctions, type CreateOptions, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_REDACTED_FIELDS as DOCUMENT_HISTORY_REDACTED_FIELDS, DOCUMENT_HISTORY_TABLE, type DataModelInit, type DeferredDeleteFlushResult, type DefineActionCacheOptions, type DefineComponentOptions, type DefineDocumentHistoryOptions, type DefineIdentityOptions, type DefineListArgsConfig, type DefinePluginOptions, type DefinePolicyInput, type DefinePresenceOptions, type DefineRoomOptions, type DefineStorageRuleInput, type DocumentHistoryComponent, type DocumentHistoryEntry, type DocumentHistoryFunctions, type DurableObjectJurisdiction, type DurableStreamOptions, type EmptyArgs, type EnvAccessor, type EnvKeyFailure, type EnvShape, type ExposeConfig, type ExtendableSchema, type FacadeEntry, type FacadeWriterLike, type FunctionKind, type HttpActionCtx, type HttpActionHandler, type HttpMethod, type HttpRoute, type HttpRouteBuilder, type HttpRouteFactory, type HttpRouteHandlerOptions, type HttpRunners, type HttpStreamHandlerOptions, type IdentityContract, type IdentityRejectMode, type IdentityValidation, type IndexFieldsByTable, type InferArgs, type InferEnv, type InferIdentity, type InlineAggregateIndexOptions, type InlineRankIndexOptions, type InternalActionBuilder, type InternalMutationBuilder, type InternalQueryBuilder, type LifecycleEvent, type LifecycleHandler, type ListArgsSpec, type ListArgsValidators, type ListArgsValue, type ListFilterOperators, type ListOrderByEntry, type ListWhere, type LunoraBuilders, LunoraEnvError, type LunoraHttpApp, type LunoraHttpEnv, type LunoraRouteHandler, type ManyRelation, type MaskColumns, type MaskContext, type MaskFn, type MaskOptions, type MaskPolicies, type MaskRegistry, type MaskStrategy, type Middleware, type MiddlewareContext, type MiddlewareNext, type MigrationCtx, type MigrationDefinition, type MigrationDocument, type MigrationReader, type MigrationTransform, type ModuleConfig, type ModuleDefinition, type MutationBuilder, type MutationCtx, type MutatorDefinition, type OnDeleteAction, type OneRelation, type OrmLike, DEFAULT_TTL_MS as PRESENCE_DEFAULT_TTL_MS, PRESENCE_TABLE, type Permission, type PlatformAdminCheck, type Plugin, type Policy, type PrefixedTables, type PresenceComponent, type PresenceFunctions, type PresenceMember, type ProtectPublicOptions, type QueryBuilder, type QueryCtx, type RankIndexDefinition, type RankIndexOptions, type ReactorHandler, type ReactorOutcome, type ReactorSelect, type RegisteredAction, type RegisteredFunction, type RegisteredLifecycleHook, type RegisteredMigration, type RegisteredMutation, type RegisteredMutator, type RegisteredQuery, type RegisteredReactor, type RegisteredRoom, type RegisteredShape, type RegisteredStream, type RegisteredWhisperAuthorizer, type RelationBuilder, type RelationDefinition, type RelationThrough, type RlsOptions, type RlsReadRegistry, type Role, type RoomJoinHandler, type RoomLeaveHandler, type RoomMessageHandler, type RoomMessageOf, type RoomSocket, type Schema, type SchemaExtension, type ServiceBindingSpec, type ServiceFetcher, type ServiceRpc, type ShapeDefinition, type ShapeGuardDeclaration, type ShapeReadWhereRequest, type ShardInitEvent, type ShardInitHandler, type SseEvent, type StorageOperation, type StorageRule, type StorageRuleContext, type StorageRuleDecision, type StorageRulesOptions, type StorageServeAuthorizer, type StorageServeAuthzContext, type TableBuilder, type TableDefinition, type TerminalKind, type TriggerBuilder, type TriggerDefinition, type TypedDefinePolicyInput, VERSION, type VectorEmbedder, type VectorIndexDefinition, type VectorIndexOptions, type VectorMetric, type VectorizeOptions, type WhereInput, type WhisperAuthorizeHandler, type WhisperEvent, actionCacheExtension, allowAll, asBucketStorage, assertShapesDeclareReadPolicies, beginDeferredDeletes, beginDeferredSchedules, bindOrm, bindTableFacade, buildMaskRegistry, buildRlsReadRegistry, cacheKeyFor, clampLimit, composePluginMiddleware, composeShapeReadWhere, createPolicyDsl, createSecrets, createServices, defineActionCache, defineAggregateIndex, defineComponent, defineDocumentHistory, defineEnv, defineIdentity, defineIdentityGuard, defineListArgs, defineMigration, defineModule, defineMutator, definePermission, definePlugin, definePolicies, definePolicy, definePresence, defineRankIndex, defineRole, defineRoom, defineSchema, defineSchemaExtension, defineShape, defineStorageRule, defineStorageRules, defineTable, defineVectorIndex, deny, documentHistoryExtension, flushDeferredDeletes,
+export { DEFAULT_ACTION_CACHE_TTL_MS as ACTION_CACHE_DEFAULT_TTL_MS, ACTION_CACHE_TABLE, type ActionBuilder, type ActionCacheComponent, type ActionCacheContext, type ActionCacheDatabase, type ActionCacheFunctions, type ActionCtx, type AggregateIndexDefinition, type AggregateIndexOptions, type AggregateOp, type ArgsValidator, type Component, type ComponentFunctions, type CreateOptions, DEFAULT_LIMIT, DEFAULT_MAX_LIMIT, DEFAULT_REDACTED_FIELDS as DOCUMENT_HISTORY_REDACTED_FIELDS, DOCUMENT_HISTORY_TABLE, type DataModelInit, type DeferredDeleteFlushResult, type DefineActionCacheOptions, type DefineComponentOptions, type DefineDocumentHistoryOptions, type DefineIdentityOptions, type DefineListArgsConfig, type DefinePluginOptions, type DefinePolicyInput, type DefinePresenceOptions, type DefineRoomOptions, type DefineStorageRuleInput, type DocumentHistoryComponent, type DocumentHistoryEntry, type DocumentHistoryFunctions, type DurableObjectJurisdiction, type DurableStreamOptions, type EmptyArgs, type EnvAccessor, type EnvKeyFailure, type EnvShape, type ExposeConfig, type ExtendableSchema, type FacadeEntry, type FacadeWriterLike, type FunctionKind, type HttpActionCtx, type HttpActionHandler, type HttpMethod, type HttpRoute, type HttpRouteBuilder, type HttpRouteFactory, type HttpRouteHandlerOptions, type HttpRunners, type HttpStreamHandlerOptions, type IdentityContract, type IdentityRejectMode, type IdentityValidation, type IndexFieldsByTable, type InferArgs, type InferEnv, type InferIdentity, type InlineAggregateIndexOptions, type InlineRankIndexOptions, type InternalActionBuilder, type InternalMutationBuilder, type InternalQueryBuilder, type LifecycleEvent, type LifecycleHandler, type ListArgsSpec, type ListArgsValidators, type ListArgsValue, type ListFilterOperators, type ListOrderByEntry, type ListWhere, type LivePublishOptions, type LivePublisher, type LiveStream, type LiveStreamConfig, type LiveSubscribeHandler, type LunoraBuilders, LunoraEnvError, type LunoraHttpApp, type LunoraHttpEnv, type LunoraRouteHandler, type ManyRelation, type MaskColumns, type MaskContext, type MaskFn, type MaskOptions, type MaskPolicies, type MaskRegistry, type MaskStrategy, type Middleware, type MiddlewareContext, type MiddlewareNext, type MigrationCtx, type MigrationDefinition, type MigrationDocument, type MigrationReader, type MigrationTransform, type ModuleConfig, type ModuleDefinition, type MutationBuilder, type MutationCtx, type MutatorDefinition, type OnDeleteAction, type OneRelation, type OrmLike, DEFAULT_TTL_MS as PRESENCE_DEFAULT_TTL_MS, PRESENCE_TABLE, type Permission, type PlatformAdminCheck, type Plugin, type Policy, type PrefixedTables, type PresenceComponent, type PresenceFunctions, type PresenceMember, type ProtectPublicOptions, type QueryBuilder, type QueryCtx, type RankIndexDefinition, type RankIndexOptions, type ReactorHandler, type ReactorOutcome, type ReactorSelect, type RegisteredAction, type RegisteredFunction, type RegisteredLifecycleHook, type RegisteredMigration, type RegisteredMutation, type RegisteredMutator, type RegisteredQuery, type RegisteredReactor, type RegisteredRoom, type RegisteredShape, type RegisteredStream, type RegisteredWhisperAuthorizer, type RelationBuilder, type RelationDefinition, type RelationThrough, type RlsOptions, type RlsReadRegistry, type Role, type RoomJoinHandler, type RoomLeaveHandler, type RoomMessageHandler, type RoomMessageOf, type RoomSocket, type Schema, type SchemaExtension, type ServiceBindingSpec, type ServiceFetcher, type ServiceRpc, type ShapeDefinition, type ShapeGuardDeclaration, type ShapeReadWhereRequest, type ShardFetch, type ShardFetchInit, type ShardInitEvent, type ShardInitHandler, type SseEvent, type StorageOperation, type StorageRule, type StorageRuleContext, type StorageRuleDecision, type StorageRulesOptions, type StorageServeAuthorizer, type StorageServeAuthzContext, type TableBuilder, type TableDefinition, type TerminalKind, type TriggerBuilder, type TriggerDefinition, type TypedDefinePolicyInput, VERSION, type VectorEmbedder, type VectorIndexDefinition, type VectorIndexOptions, type VectorMetric, type VectorizeOptions, type WhereInput, type WhisperAuthorizeHandler, type WhisperEvent, actionCacheExtension, allowAll, asBucketStorage, assertShapesDeclareReadPolicies, beginDeferredDeletes, beginDeferredSchedules, bindOrm, bindTableFacade, buildMaskRegistry, buildRlsReadRegistry, cacheKeyFor, clampLimit, composePluginMiddleware, composeShapeReadWhere, createPolicyDsl, createSecrets, createServices, defineActionCache, defineAggregateIndex, defineComponent, defineDocumentHistory, defineEnv, defineIdentity, defineIdentityGuard, defineListArgs, defineLiveStream, defineMigration, defineModule, defineMutator, definePermission, definePlugin, definePolicies, definePolicy, definePresence, defineRankIndex, defineRole, defineRoom, defineSchema, defineSchemaExtension, defineShape, defineStorageRule, defineStorageRules, defineTable, defineVectorIndex, deny, documentHistoryExtension, flushDeferredDeletes,
 /**
  * True when `value` is safe to use as an HTTP header field-value: no CR, LF, or
  * NUL. Guards against response-header injection / `Headers`-construction throws

package/dist/index.mjs

@@ -1 +1 @@
-import{ACTION_CACHE_DEFAULT_TTL_MS as t,ACTION_CACHE_TABLE as n,actionCacheExtension as i,cacheKeyFor as f,defineActionCache as a}from"./packem_shared/ACTION_CACHE_DEFAULT_TTL_MS-mmP-6BcT.mjs";import{initLunora as d}from"./packem_shared/initLunora-B-7Xs3Qq.mjs";import{isPerDispatchMiddleware as p,tagPerDispatchMiddleware as x}from"./packem_shared/isPerDispatchMiddleware-DDQPatSm.mjs";import{createSecrets as l}from"./packem_shared/createSecrets-D6rLB42U.mjs";import{beginDeferredDeletes as u,flushDeferredDeletes as h,withDeferredDeletes as S}from"./packem_shared/beginDeferredDeletes-DhwFBbvs.mjs";import{beginDeferredSchedules as T,withDeferredSchedules as g}from"./packem_shared/beginDeferredSchedules-C7QLYr6C.mjs";import{DOCUMENT_HISTORY_REDACTED_FIELDS as A,DOCUMENT_HISTORY_TABLE as I,defineDocumentHistory as _,documentHistoryExtension as L}from"./packem_shared/DOCUMENT_HISTORY_REDACTED_FIELDS-B5Zp-7SI.mjs";import{LunoraEnvError as M,defineEnv as P,redactSecrets as b}from"./packem_shared/LunoraEnvError-bkdMu_-N.mjs";import{bindOrm as F,bindTableFacade as O}from"./packem_shared/bindOrm-9fbLRbOb.mjs";import{httpAction as H,httpRoute as N,httpRouter as w,isSafeHeaderValue as U,lastEventId as k,sseEvent as B}from"./packem_shared/httpAction-D2S7bQzl.mjs";import{serveStorageObject as W}from"./packem_shared/serveStorageObject-aqBFrLyo.mjs";import{defineIdentity as Y}from"./packem_shared/defineIdentity-DwkNKwYa.mjs";import{default as J}from"./packem_shared/defineIdentityGuard-Bt8N65Zs.mjs";import{onConnect as Q,onDisconnect as X,onShardInit as q}from"./packem_shared/onConnect-BLRoOpv2.mjs";import{DEFAULT_LIMIT as Z,DEFAULT_MAX_LIMIT as $,clampLimit as ee,defineListArgs as re}from"./packem_shared/DEFAULT_LIMIT-pT_tV8R0.mjs";import{defineMigration as te}from"./packem_shared/defineMigration-CXOS0Bvq.mjs";import{defineModule as ie}from"./packem_shared/defineModule-OecXWM3U.mjs";import{defineMutator as ae}from"./packem_shared/defineMutator-B4ipDtDR.mjs";import{platformAdmin as de}from"./packem_shared/platformAdmin-kczXQme8.mjs";import{c as pe,d as xe,a as ce,b as le,e as Ee,f as ue,g as he,h as Se,i as De,j as Te,k as ge,m as Re}from"./packem_shared/plugin-Bm9wIpiI.mjs";import{PRESENCE_DEFAULT_TTL_MS as Ie,PRESENCE_TABLE as _e,definePresence as Le,presenceExtension as Ce}from"./packem_shared/PRESENCE_DEFAULT_TTL_MS-DFpy5J8G.mjs";import{protectPublic as Pe}from"./packem_shared/protectPublic-Bi5_95aP.mjs";import{onQueryChange as ye}from"./packem_shared/onQueryChange-iuLzmyPs.mjs";import{defineRoom as Oe}from"./packem_shared/defineRoom-CoGi-xwm.mjs";import{createServices as He}from"./packem_shared/createServices-IJvoqi0e.mjs";import{defineShape as we}from"./packem_shared/defineShape-CwKm5KLp.mjs";import{onWhisper as ke}from"./packem_shared/onWhisper-CfDbFLQh.mjs";import{LunoraError as Ve}from"@lunora/errors";import{cronJobs as je}from"@lunora/scheduler";import{ValidationError as Ge,v as Je}from"@lunora/values";import{allowAll as Qe,deny as Xe,isDeny as qe,toWhereInput as ze}from"./packem_shared/allowAll-DkRAgItV.mjs";import{asBucketStorage as $e}from"./packem_shared/asBucketStorage-DoGYOjq3.mjs";import{assertShapesDeclareReadPolicies as rr,buildRlsReadRegistry as or,composeShapeReadWhere as tr}from"./packem_shared/assertShapesDeclareReadPolicies-Bg4Ter7Q.mjs";import{buildMaskRegistry as ir}from"./packem_shared/buildMaskRegistry-DpWMtalG.mjs";import{createPolicyDsl as ar,definePermission as sr,definePolicies as dr,definePolicy as mr,defineRole as pr}from"./packem_shared/createPolicyDsl-BZa6SqLJ.mjs";import{defineStorageRule as cr,defineStorageRules as lr}from"./packem_shared/defineStorageRule-Dv4nJE0H.mjs";import{mask as ur}from"./packem_shared/mask-D-jRCAhy.mjs";import{r as Sr}from"./packem_shared/middleware-3ySZVrpt.mjs";import{storageRules as Tr}from"./packem_shared/storageRules-CBLioxF7.mjs";const e="0.0.0";export{t as ACTION_CACHE_DEFAULT_TTL_MS,n as ACTION_CACHE_TABLE,Z as DEFAULT_LIMIT,$ as DEFAULT_MAX_LIMIT,A as DOCUMENT_HISTORY_REDACTED_FIELDS,I as DOCUMENT_HISTORY_TABLE,M as LunoraEnvError,Ve as LunoraError,Ie as PRESENCE_DEFAULT_TTL_MS,_e as PRESENCE_TABLE,e as VERSION,Ge as ValidationError,i as actionCacheExtension,Qe as allowAll,$e as asBucketStorage,rr as assertShapesDeclareReadPolicies,u as beginDeferredDeletes,T as beginDeferredSchedules,F as bindOrm,O as bindTableFacade,ir as buildMaskRegistry,or as buildRlsReadRegistry,f as cacheKeyFor,ee as clampLimit,pe as composePluginMiddleware,tr as composeShapeReadWhere,ar as createPolicyDsl,l as createSecrets,He as createServices,je as cronJobs,a as defineActionCache,xe as defineAggregateIndex,ce as defineComponent,_ as defineDocumentHistory,P as defineEnv,Y as defineIdentity,J as defineIdentityGuard,re as defineListArgs,te as defineMigration,ie as defineModule,ae as defineMutator,sr as definePermission,le as definePlugin,dr as definePolicies,mr as definePolicy,Le as definePresence,Ee as defineRankIndex,pr as defineRole,Oe as defineRoom,ue as defineSchema,he as defineSchemaExtension,we as defineShape,cr as defineStorageRule,lr as defineStorageRules,Se as defineTable,De as defineVectorIndex,Xe as deny,L as documentHistoryExtension,h as flushDeferredDeletes,H as httpAction,N as httpRoute,w as httpRouter,Te as indexFieldsFromSchema,d as initLunora,ge as installPlugins,qe as isDeny,p as isPerDispatchMiddleware,U as isSafeHeaderValue,k as lastEventId,ur as mask,Re as mergeSchemaExtension,Q as onConnect,X as onDisconnect,ye as onQueryChange,q as onShardInit,ke as onWhisper,de as platformAdmin,Ce as presenceExtension,Pe as protectPublic,b as redactSecrets,Sr as rls,W as serveStorageObject,B as sseEvent,Tr as storageRules,x as tagPerDispatchMiddleware,ze as toWhereInput,Je as v,S as withDeferredDeletes,g as withDeferredSchedules};
+import{ACTION_CACHE_DEFAULT_TTL_MS as t,ACTION_CACHE_TABLE as n,actionCacheExtension as i,cacheKeyFor as f,defineActionCache as a}from"./packem_shared/ACTION_CACHE_DEFAULT_TTL_MS-mmP-6BcT.mjs";import{initLunora as d}from"./packem_shared/initLunora-B-7Xs3Qq.mjs";import{isPerDispatchMiddleware as p,tagPerDispatchMiddleware as x}from"./packem_shared/isPerDispatchMiddleware-DDQPatSm.mjs";import{createSecrets as l}from"./packem_shared/createSecrets-D6rLB42U.mjs";import{beginDeferredDeletes as u,flushDeferredDeletes as S,withDeferredDeletes as h}from"./packem_shared/beginDeferredDeletes-DhwFBbvs.mjs";import{beginDeferredSchedules as T,withDeferredSchedules as g}from"./packem_shared/beginDeferredSchedules-C7QLYr6C.mjs";import{DOCUMENT_HISTORY_REDACTED_FIELDS as A,DOCUMENT_HISTORY_TABLE as I,defineDocumentHistory as L,documentHistoryExtension as _}from"./packem_shared/DOCUMENT_HISTORY_REDACTED_FIELDS-B5Zp-7SI.mjs";import{LunoraEnvError as M,defineEnv as P,redactSecrets as b}from"./packem_shared/LunoraEnvError-bkdMu_-N.mjs";import{bindOrm as F,bindTableFacade as O}from"./packem_shared/bindOrm-9fbLRbOb.mjs";import{httpAction as H,httpRoute as N,httpRouter as w,isSafeHeaderValue as U,lastEventId as k,sseEvent as B}from"./packem_shared/httpAction-D2S7bQzl.mjs";import{serveStorageObject as W}from"./packem_shared/serveStorageObject-aqBFrLyo.mjs";import{defineIdentity as Y}from"./packem_shared/defineIdentity-DwkNKwYa.mjs";import{default as J}from"./packem_shared/defineIdentityGuard-Bt8N65Zs.mjs";import{onConnect as Q,onDisconnect as X,onShardInit as q}from"./packem_shared/onConnect-BLRoOpv2.mjs";import{DEFAULT_LIMIT as Z,DEFAULT_MAX_LIMIT as $,clampLimit as ee,defineListArgs as re}from"./packem_shared/DEFAULT_LIMIT-pT_tV8R0.mjs";import{defineLiveStream as te}from"./packem_shared/defineLiveStream-BKomK5uG.mjs";import{defineMigration as ie}from"./packem_shared/defineMigration-CXOS0Bvq.mjs";import{defineModule as ae}from"./packem_shared/defineModule-OecXWM3U.mjs";import{defineMutator as de}from"./packem_shared/defineMutator-B4ipDtDR.mjs";import{platformAdmin as pe}from"./packem_shared/platformAdmin-kczXQme8.mjs";import{c as ce,d as le,a as Ee,b as ue,e as Se,f as he,g as De,h as Te,i as ge,j as Re,k as Ae,m as Ie}from"./packem_shared/plugin-Bm9wIpiI.mjs";import{PRESENCE_DEFAULT_TTL_MS as _e,PRESENCE_TABLE as Ce,definePresence as Me,presenceExtension as Pe}from"./packem_shared/PRESENCE_DEFAULT_TTL_MS-DFpy5J8G.mjs";import{protectPublic as ye}from"./packem_shared/protectPublic-Bi5_95aP.mjs";import{onQueryChange as Oe}from"./packem_shared/onQueryChange-iuLzmyPs.mjs";import{defineRoom as He}from"./packem_shared/defineRoom-CoGi-xwm.mjs";import{createServices as we}from"./packem_shared/createServices-IJvoqi0e.mjs";import{defineShape as ke}from"./packem_shared/defineShape-CwKm5KLp.mjs";import{onWhisper as Ve}from"./packem_shared/onWhisper-CfDbFLQh.mjs";import{LunoraError as je}from"@lunora/errors";import{cronJobs as Ge}from"@lunora/scheduler";import{ValidationError as Ke,v as Qe}from"@lunora/values";import{allowAll as qe,deny as ze,isDeny as Ze,toWhereInput as $e}from"./packem_shared/allowAll-DkRAgItV.mjs";import{asBucketStorage as rr}from"./packem_shared/asBucketStorage-DoGYOjq3.mjs";import{assertShapesDeclareReadPolicies as tr,buildRlsReadRegistry as nr,composeShapeReadWhere as ir}from"./packem_shared/assertShapesDeclareReadPolicies-Bg4Ter7Q.mjs";import{buildMaskRegistry as ar}from"./packem_shared/buildMaskRegistry-DpWMtalG.mjs";import{createPolicyDsl as dr,definePermission as mr,definePolicies as pr,definePolicy as xr,defineRole as cr}from"./packem_shared/createPolicyDsl-BZa6SqLJ.mjs";import{defineStorageRule as Er,defineStorageRules as ur}from"./packem_shared/defineStorageRule-Dv4nJE0H.mjs";import{mask as hr}from"./packem_shared/mask-D-jRCAhy.mjs";import{r as Tr}from"./packem_shared/middleware-3ySZVrpt.mjs";import{storageRules as Rr}from"./packem_shared/storageRules-CBLioxF7.mjs";const e="0.0.0";export{t as ACTION_CACHE_DEFAULT_TTL_MS,n as ACTION_CACHE_TABLE,Z as DEFAULT_LIMIT,$ as DEFAULT_MAX_LIMIT,A as DOCUMENT_HISTORY_REDACTED_FIELDS,I as DOCUMENT_HISTORY_TABLE,M as LunoraEnvError,je as LunoraError,_e as PRESENCE_DEFAULT_TTL_MS,Ce as PRESENCE_TABLE,e as VERSION,Ke as ValidationError,i as actionCacheExtension,qe as allowAll,rr as asBucketStorage,tr as assertShapesDeclareReadPolicies,u as beginDeferredDeletes,T as beginDeferredSchedules,F as bindOrm,O as bindTableFacade,ar as buildMaskRegistry,nr as buildRlsReadRegistry,f as cacheKeyFor,ee as clampLimit,ce as composePluginMiddleware,ir as composeShapeReadWhere,dr as createPolicyDsl,l as createSecrets,we as createServices,Ge as cronJobs,a as defineActionCache,le as defineAggregateIndex,Ee as defineComponent,L as defineDocumentHistory,P as defineEnv,Y as defineIdentity,J as defineIdentityGuard,re as defineListArgs,te as defineLiveStream,ie as defineMigration,ae as defineModule,de as defineMutator,mr as definePermission,ue as definePlugin,pr as definePolicies,xr as definePolicy,Me as definePresence,Se as defineRankIndex,cr as defineRole,He as defineRoom,he as defineSchema,De as defineSchemaExtension,ke as defineShape,Er as defineStorageRule,ur as defineStorageRules,Te as defineTable,ge as defineVectorIndex,ze as deny,_ as documentHistoryExtension,S as flushDeferredDeletes,H as httpAction,N as httpRoute,w as httpRouter,Re as indexFieldsFromSchema,d as initLunora,Ae as installPlugins,Ze as isDeny,p as isPerDispatchMiddleware,U as isSafeHeaderValue,k as lastEventId,hr as mask,Ie as mergeSchemaExtension,Q as onConnect,X as onDisconnect,Oe as onQueryChange,q as onShardInit,Ve as onWhisper,pe as platformAdmin,Pe as presenceExtension,ye as protectPublic,b as redactSecrets,Tr as rls,W as serveStorageObject,B as sseEvent,Rr as storageRules,x as tagPerDispatchMiddleware,$e as toWhereInput,Qe as v,h as withDeferredDeletes,g as withDeferredSchedules};

package/dist/packem_shared/defineLiveStream-BKomK5uG.mjs

@@ -0,0 +1 @@
+import{isLunoraError as m}from"@lunora/errors";import{httpAction as b}from"./httpAction-D2S7bQzl.mjs";const w="/_lunora/live/connect",S="/_lunora/live/control",E=async r=>{try{const e=await r.json();return typeof e=="object"&&e!==null&&!Array.isArray(e)?e:void 0}catch{return}},h=r=>Response.json({code:"FORBIDDEN_TOPIC",error:`subscribe to "${r}" was denied`},{status:403}),u=r=>Response.json({code:"BAD_REQUEST",error:r},{status:400}),_=r=>{const e=`/live/${r.id}/connect`,l=`/live/${r.id}/control`,y=async(o,s)=>{if(!r.onSubscribe)return r.allowAnonymousControl===!0&&o.auth.userId===null;try{return await r.onSubscribe({ctx:o,topic:s})===!0}catch(t){return console.error("[lunora] live subscribe authorization threw; denying:",t),!1}},p=b(async(o,s)=>{const t=new URL(s.url).searchParams.get("shard")??void 0;return o.fetchShard(t,w,{method:"GET"})}),v=b(async(o,s)=>{const t=await E(s);if(!t)return u("Expected a JSON object body");const{action:c}=t,n=typeof t.topic=="string"?t.topic:void 0;if(n===void 0||n.length===0)return u("topic is required");if(c!=="subscribe"&&c!=="unsubscribe")return u("action must be subscribe or unsubscribe");const i=typeof t.shardKey=="string"?t.shardKey:void 0,f=i===void 0?o:{...o,...o.forShard(i)};if(c==="subscribe"&&!await y(f,n))return h(n);const d=o.fetchShard(i,S,{body:JSON.stringify({...t,stream:r.id}),method:"POST"});if(c!=="subscribe")return d;try{return await d}catch(a){if(m(a)&&a.code==="FORBIDDEN_SHARD")return h(n);throw a}});return{connect:p,connectPath:e,control:v,controlPath:l,id:r.id}};export{_ as defineLiveStream};

package/dist/types.d.mts

@@ -2819,6 +2819,25 @@ interface ActionCtx {
    * host populates it and why every other one deliberately does not.
    */
   readonly ip?: string;
+  /**
+   * `ctx.live.publish(topic, payload, { stream })` — push an event to the SSE
+   * subscribers of a `defineLiveStream` on THIS shard. Present on the shard
+   * (Cloudflare) target only when the app declares a live stream; absent on a
+   * target that rates `liveStreams` `unsupported`, where codegen reports why.
+   * A scheduled job's action publishes this way too. Absent for a query or
+   * mutation: a publish is a side effect, so only an action may make one.
+   *
+   * Delivery is local to the shard: an omitted `shardKey` means the shard the
+   * action runs on, and a `shardKey` naming another shard rejects rather than
+   * reaching zero subscribers silently. The docblock on `defineLiveStream` has the
+   * full routing rules.
+   */
+  readonly live?: {
+    publish: (topic: string, payload: unknown, options: {
+      shardKey?: string;
+      stream: string;
+    }) => Promise<void>;
+  };
   /** Structured, function-attributed logger; see {@link LunoraLogger}. */
   readonly log: LunoraLogger;
   /**

package/dist/types.d.ts

@@ -2819,6 +2819,25 @@ interface ActionCtx {
    * host populates it and why every other one deliberately does not.
    */
   readonly ip?: string;
+  /**
+   * `ctx.live.publish(topic, payload, { stream })` — push an event to the SSE
+   * subscribers of a `defineLiveStream` on THIS shard. Present on the shard
+   * (Cloudflare) target only when the app declares a live stream; absent on a
+   * target that rates `liveStreams` `unsupported`, where codegen reports why.
+   * A scheduled job's action publishes this way too. Absent for a query or
+   * mutation: a publish is a side effect, so only an action may make one.
+   *
+   * Delivery is local to the shard: an omitted `shardKey` means the shard the
+   * action runs on, and a `shardKey` naming another shard rejects rather than
+   * reaching zero subscribers silently. The docblock on `defineLiveStream` has the
+   * full routing rules.
+   */
+  readonly live?: {
+    publish: (topic: string, payload: unknown, options: {
+      shardKey?: string;
+      stream: string;
+    }) => Promise<void>;
+  };
   /** Structured, function-attributed logger; see {@link LunoraLogger}. */
   readonly log: LunoraLogger;
   /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/server",
-  "version": "1.0.0-alpha.214",
+  "version": "1.0.0-alpha.216",
   "description": "Server primitives for Lunora: defineSchema, defineTable, query, mutation, and action",
   "keywords": [
     "backend",
@@ -71,9 +71,9 @@
   },
   "dependencies": {
     "@lunora/errors": ">=1.0.0-alpha.51 <2.0.0-0",
-    "@lunora/scheduler": "1.0.0-alpha.134",
-    "@lunora/shard-engine": "1.0.0-alpha.137",
-    "@lunora/values": "1.0.0-alpha.69",
+    "@lunora/scheduler": "1.0.0-alpha.136",
+    "@lunora/shard-engine": "1.0.0-alpha.139",
+    "@lunora/values": "1.0.0-alpha.71",
     "@lunora/wire": "1.0.0-alpha.1",
     "drizzle-orm": "^0.45.3",
     "hono": "^4.13.13"