@lunora/server 1.0.0-alpha.53 → 1.0.0-alpha.55

package/dist/index.d.mts

@@ -70,6 +70,17 @@ interface QueryBuilder<Context, Args extends ArgsValidator, Output = undefined>
    */
   expose: (config: ExposeConfig) => QueryBuilder<Context, Args, Output>;
   input: <A extends ArgsValidator>(validators: A) => QueryBuilder<Context, A & Args, Output>;
+  /**
+   * Attach static, per-procedure metadata. Merges across calls, is readable
+   * from middleware as `ctx.meta`, and is stamped onto the registration as
+   * `fn.meta` so codegen and other tooling can enumerate it.
+   *
+   * The point is policy that is DATA rather than a call: `.meta({ rateLimit:
+   * "pins/create" })` can be walked to generate a rate-limit registry or docs,
+   * where the same policy expressed only as `.use(rateLimit("pins/create"))`
+   * can only be executed. Mirrors tRPC's `.meta()`.
+   */
+  meta: (value: Record<string, unknown>) => QueryBuilder<Context, Args, Output>;
   output: <V extends Validator>(validator: V) => QueryBuilder<Context, Args, Infer<V>>;
   query: [Output] extends [undefined] ? <R>(handler: (options: {
     args: InferArgs<Args>;
@@ -110,6 +121,17 @@ interface MutationBuilder<Context, Args extends ArgsValidator, Output = undefine
    */
   expose: (config: ExposeConfig) => MutationBuilder<Context, Args, Output>;
   input: <A extends ArgsValidator>(validators: A) => MutationBuilder<Context, A & Args, Output>;
+  /**
+   * Attach static, per-procedure metadata. Merges across calls, is readable
+   * from middleware as `ctx.meta`, and is stamped onto the registration as
+   * `fn.meta` so codegen and other tooling can enumerate it.
+   *
+   * The point is policy that is DATA rather than a call: `.meta({ rateLimit:
+   * "pins/create" })` can be walked to generate a rate-limit registry or docs,
+   * where the same policy expressed only as `.use(rateLimit("pins/create"))`
+   * can only be executed. Mirrors tRPC's `.meta()`.
+   */
+  meta: (value: Record<string, unknown>) => MutationBuilder<Context, Args, Output>;
   mutation: [Output] extends [undefined] ? <R>(handler: (options: {
     args: InferArgs<Args>;
     ctx: Context;
@@ -144,6 +166,17 @@ interface ActionBuilder<Context, Args extends ArgsValidator, Output = undefined>
    */
   expose: (config: ExposeConfig) => ActionBuilder<Context, Args, Output>;
   input: <A extends ArgsValidator>(validators: A) => ActionBuilder<Context, A & Args, Output>;
+  /**
+   * Attach static, per-procedure metadata. Merges across calls, is readable
+   * from middleware as `ctx.meta`, and is stamped onto the registration as
+   * `fn.meta` so codegen and other tooling can enumerate it.
+   *
+   * The point is policy that is DATA rather than a call: `.meta({ rateLimit:
+   * "pins/create" })` can be walked to generate a rate-limit registry or docs,
+   * where the same policy expressed only as `.use(rateLimit("pins/create"))`
+   * can only be executed. Mirrors tRPC's `.meta()`.
+   */
+  meta: (value: Record<string, unknown>) => ActionBuilder<Context, Args, Output>;
   output: <V extends Validator>(validator: V) => ActionBuilder<Context, Args, Infer<V>>;
   use: <ContextOut>(middleware: Middleware<Context, ContextOut>) => ActionBuilder<ContextOut, Args, Output>;
   /**
@@ -164,6 +197,17 @@ interface InternalQueryBuilder<Context, Args extends ArgsValidator, Output = und
   readonly __lunoraProcedure: "query";
   readonly __lunoraVisibility: "internal";
   input: <A extends ArgsValidator>(validators: A) => InternalQueryBuilder<Context, A & Args, Output>;
+  /**
+   * Attach static, per-procedure metadata. Merges across calls, is readable
+   * from middleware as `ctx.meta`, and is stamped onto the registration as
+   * `fn.meta` so codegen and other tooling can enumerate it.
+   *
+   * The point is policy that is DATA rather than a call: `.meta({ rateLimit:
+   * "pins/create" })` can be walked to generate a rate-limit registry or docs,
+   * where the same policy expressed only as `.use(rateLimit("pins/create"))`
+   * can only be executed. Mirrors tRPC's `.meta()`.
+   */
+  meta: (value: Record<string, unknown>) => InternalQueryBuilder<Context, Args, Output>;
   output: <V extends Validator>(validator: V) => InternalQueryBuilder<Context, Args, Infer<V>>;
   query: [Output] extends [undefined] ? <R>(handler: (options: {
     args: InferArgs<Args>;
@@ -184,6 +228,17 @@ interface InternalMutationBuilder<Context, Args extends ArgsValidator, Output =
   readonly __lunoraProcedure: "mutation";
   readonly __lunoraVisibility: "internal";
   input: <A extends ArgsValidator>(validators: A) => InternalMutationBuilder<Context, A & Args, Output>;
+  /**
+   * Attach static, per-procedure metadata. Merges across calls, is readable
+   * from middleware as `ctx.meta`, and is stamped onto the registration as
+   * `fn.meta` so codegen and other tooling can enumerate it.
+   *
+   * The point is policy that is DATA rather than a call: `.meta({ rateLimit:
+   * "pins/create" })` can be walked to generate a rate-limit registry or docs,
+   * where the same policy expressed only as `.use(rateLimit("pins/create"))`
+   * can only be executed. Mirrors tRPC's `.meta()`.
+   */
+  meta: (value: Record<string, unknown>) => InternalMutationBuilder<Context, Args, Output>;
   mutation: [Output] extends [undefined] ? <R>(handler: (options: {
     args: InferArgs<Args>;
     ctx: Context;
@@ -205,6 +260,17 @@ interface InternalActionBuilder<Context, Args extends ArgsValidator, Output = un
     ctx: Context;
   }) => Output | Promise<Output>) => RegisteredAction<Args, Output>;
   input: <A extends ArgsValidator>(validators: A) => InternalActionBuilder<Context, A & Args, Output>;
+  /**
+   * Attach static, per-procedure metadata. Merges across calls, is readable
+   * from middleware as `ctx.meta`, and is stamped onto the registration as
+   * `fn.meta` so codegen and other tooling can enumerate it.
+   *
+   * The point is policy that is DATA rather than a call: `.meta({ rateLimit:
+   * "pins/create" })` can be walked to generate a rate-limit registry or docs,
+   * where the same policy expressed only as `.use(rateLimit("pins/create"))`
+   * can only be executed. Mirrors tRPC's `.meta()`.
+   */
+  meta: (value: Record<string, unknown>) => InternalActionBuilder<Context, Args, Output>;
   output: <V extends Validator>(validator: V) => InternalActionBuilder<Context, Args, Infer<V>>;
   use: <ContextOut>(middleware: Middleware<Context, ContextOut>) => InternalActionBuilder<ContextOut, Args, Output>;
 }
@@ -517,11 +583,19 @@ type HttpMethod = "DELETE" | "GET" | "HEAD" | "OPTIONS" | "PATCH" | "POST" | "PU
 /**
  * Context handed to an HTTP action handler. A narrower view of {@link ActionContext}:
  * HTTP actions run in the worker (the "action runtime"), separate from the
- * transactional store, so there is no direct `db` / `vectors` / `scheduler` /
- * `storage` surface — reach the data layer through `runQuery` / `runMutation` /
+ * transactional store, so there is no direct `db` / `vectors` / `storage`
+ * surface — reach the data layer through `runQuery` / `runMutation` /
  * `runAction`, which forward to the owning shard.
- */
-type HttpActionCtx = Pick<ActionCtx, "auth" | "cache" | "fetch" | "runAction" | "runMutation" | "runQuery">;
+ *
+ * `scheduler` IS present (it talks to the scheduler DO, not the shard) but is
+ * optional: it exists only when the app declared `.scheduler(...)` on the
+ * generated app builder. "Receive webhook → enqueue the real work → return 200"
+ * is what HTTP actions are for, so omitting it forced every app to hand-roll a
+ * hop through a mutation plus a closed allow-list of target strings.
+ */
+type HttpActionCtx = Pick<ActionCtx, "auth" | "cache" | "fetch" | "runAction" | "runMutation" | "runQuery"> & {
+  readonly scheduler?: ActionCtx["scheduler"];
+};
 /** A raw handler wrapped by {@link httpAction}. Receives the raw request, returns the raw response. */
 type HttpActionHandler = (context: HttpActionCtx, request: Request) => Promise<Response> | Response;
 /**

package/dist/index.d.ts

@@ -70,6 +70,17 @@ interface QueryBuilder<Context, Args extends ArgsValidator, Output = undefined>
    */
   expose: (config: ExposeConfig) => QueryBuilder<Context, Args, Output>;
   input: <A extends ArgsValidator>(validators: A) => QueryBuilder<Context, A & Args, Output>;
+  /**
+   * Attach static, per-procedure metadata. Merges across calls, is readable
+   * from middleware as `ctx.meta`, and is stamped onto the registration as
+   * `fn.meta` so codegen and other tooling can enumerate it.
+   *
+   * The point is policy that is DATA rather than a call: `.meta({ rateLimit:
+   * "pins/create" })` can be walked to generate a rate-limit registry or docs,
+   * where the same policy expressed only as `.use(rateLimit("pins/create"))`
+   * can only be executed. Mirrors tRPC's `.meta()`.
+   */
+  meta: (value: Record<string, unknown>) => QueryBuilder<Context, Args, Output>;
   output: <V extends Validator>(validator: V) => QueryBuilder<Context, Args, Infer<V>>;
   query: [Output] extends [undefined] ? <R>(handler: (options: {
     args: InferArgs<Args>;
@@ -110,6 +121,17 @@ interface MutationBuilder<Context, Args extends ArgsValidator, Output = undefine
    */
   expose: (config: ExposeConfig) => MutationBuilder<Context, Args, Output>;
   input: <A extends ArgsValidator>(validators: A) => MutationBuilder<Context, A & Args, Output>;
+  /**
+   * Attach static, per-procedure metadata. Merges across calls, is readable
+   * from middleware as `ctx.meta`, and is stamped onto the registration as
+   * `fn.meta` so codegen and other tooling can enumerate it.
+   *
+   * The point is policy that is DATA rather than a call: `.meta({ rateLimit:
+   * "pins/create" })` can be walked to generate a rate-limit registry or docs,
+   * where the same policy expressed only as `.use(rateLimit("pins/create"))`
+   * can only be executed. Mirrors tRPC's `.meta()`.
+   */
+  meta: (value: Record<string, unknown>) => MutationBuilder<Context, Args, Output>;
   mutation: [Output] extends [undefined] ? <R>(handler: (options: {
     args: InferArgs<Args>;
     ctx: Context;
@@ -144,6 +166,17 @@ interface ActionBuilder<Context, Args extends ArgsValidator, Output = undefined>
    */
   expose: (config: ExposeConfig) => ActionBuilder<Context, Args, Output>;
   input: <A extends ArgsValidator>(validators: A) => ActionBuilder<Context, A & Args, Output>;
+  /**
+   * Attach static, per-procedure metadata. Merges across calls, is readable
+   * from middleware as `ctx.meta`, and is stamped onto the registration as
+   * `fn.meta` so codegen and other tooling can enumerate it.
+   *
+   * The point is policy that is DATA rather than a call: `.meta({ rateLimit:
+   * "pins/create" })` can be walked to generate a rate-limit registry or docs,
+   * where the same policy expressed only as `.use(rateLimit("pins/create"))`
+   * can only be executed. Mirrors tRPC's `.meta()`.
+   */
+  meta: (value: Record<string, unknown>) => ActionBuilder<Context, Args, Output>;
   output: <V extends Validator>(validator: V) => ActionBuilder<Context, Args, Infer<V>>;
   use: <ContextOut>(middleware: Middleware<Context, ContextOut>) => ActionBuilder<ContextOut, Args, Output>;
   /**
@@ -164,6 +197,17 @@ interface InternalQueryBuilder<Context, Args extends ArgsValidator, Output = und
   readonly __lunoraProcedure: "query";
   readonly __lunoraVisibility: "internal";
   input: <A extends ArgsValidator>(validators: A) => InternalQueryBuilder<Context, A & Args, Output>;
+  /**
+   * Attach static, per-procedure metadata. Merges across calls, is readable
+   * from middleware as `ctx.meta`, and is stamped onto the registration as
+   * `fn.meta` so codegen and other tooling can enumerate it.
+   *
+   * The point is policy that is DATA rather than a call: `.meta({ rateLimit:
+   * "pins/create" })` can be walked to generate a rate-limit registry or docs,
+   * where the same policy expressed only as `.use(rateLimit("pins/create"))`
+   * can only be executed. Mirrors tRPC's `.meta()`.
+   */
+  meta: (value: Record<string, unknown>) => InternalQueryBuilder<Context, Args, Output>;
   output: <V extends Validator>(validator: V) => InternalQueryBuilder<Context, Args, Infer<V>>;
   query: [Output] extends [undefined] ? <R>(handler: (options: {
     args: InferArgs<Args>;
@@ -184,6 +228,17 @@ interface InternalMutationBuilder<Context, Args extends ArgsValidator, Output =
   readonly __lunoraProcedure: "mutation";
   readonly __lunoraVisibility: "internal";
   input: <A extends ArgsValidator>(validators: A) => InternalMutationBuilder<Context, A & Args, Output>;
+  /**
+   * Attach static, per-procedure metadata. Merges across calls, is readable
+   * from middleware as `ctx.meta`, and is stamped onto the registration as
+   * `fn.meta` so codegen and other tooling can enumerate it.
+   *
+   * The point is policy that is DATA rather than a call: `.meta({ rateLimit:
+   * "pins/create" })` can be walked to generate a rate-limit registry or docs,
+   * where the same policy expressed only as `.use(rateLimit("pins/create"))`
+   * can only be executed. Mirrors tRPC's `.meta()`.
+   */
+  meta: (value: Record<string, unknown>) => InternalMutationBuilder<Context, Args, Output>;
   mutation: [Output] extends [undefined] ? <R>(handler: (options: {
     args: InferArgs<Args>;
     ctx: Context;
@@ -205,6 +260,17 @@ interface InternalActionBuilder<Context, Args extends ArgsValidator, Output = un
     ctx: Context;
   }) => Output | Promise<Output>) => RegisteredAction<Args, Output>;
   input: <A extends ArgsValidator>(validators: A) => InternalActionBuilder<Context, A & Args, Output>;
+  /**
+   * Attach static, per-procedure metadata. Merges across calls, is readable
+   * from middleware as `ctx.meta`, and is stamped onto the registration as
+   * `fn.meta` so codegen and other tooling can enumerate it.
+   *
+   * The point is policy that is DATA rather than a call: `.meta({ rateLimit:
+   * "pins/create" })` can be walked to generate a rate-limit registry or docs,
+   * where the same policy expressed only as `.use(rateLimit("pins/create"))`
+   * can only be executed. Mirrors tRPC's `.meta()`.
+   */
+  meta: (value: Record<string, unknown>) => InternalActionBuilder<Context, Args, Output>;
   output: <V extends Validator>(validator: V) => InternalActionBuilder<Context, Args, Infer<V>>;
   use: <ContextOut>(middleware: Middleware<Context, ContextOut>) => InternalActionBuilder<ContextOut, Args, Output>;
 }
@@ -517,11 +583,19 @@ type HttpMethod = "DELETE" | "GET" | "HEAD" | "OPTIONS" | "PATCH" | "POST" | "PU
 /**
  * Context handed to an HTTP action handler. A narrower view of {@link ActionContext}:
  * HTTP actions run in the worker (the "action runtime"), separate from the
- * transactional store, so there is no direct `db` / `vectors` / `scheduler` /
- * `storage` surface — reach the data layer through `runQuery` / `runMutation` /
+ * transactional store, so there is no direct `db` / `vectors` / `storage`
+ * surface — reach the data layer through `runQuery` / `runMutation` /
  * `runAction`, which forward to the owning shard.
- */
-type HttpActionCtx = Pick<ActionCtx, "auth" | "cache" | "fetch" | "runAction" | "runMutation" | "runQuery">;
+ *
+ * `scheduler` IS present (it talks to the scheduler DO, not the shard) but is
+ * optional: it exists only when the app declared `.scheduler(...)` on the
+ * generated app builder. "Receive webhook → enqueue the real work → return 200"
+ * is what HTTP actions are for, so omitting it forced every app to hand-roll a
+ * hop through a mutation plus a closed allow-list of target strings.
+ */
+type HttpActionCtx = Pick<ActionCtx, "auth" | "cache" | "fetch" | "runAction" | "runMutation" | "runQuery"> & {
+  readonly scheduler?: ActionCtx["scheduler"];
+};
 /** A raw handler wrapped by {@link httpAction}. Receives the raw request, returns the raw response. */
 type HttpActionHandler = (context: HttpActionCtx, request: Request) => Promise<Response> | Response;
 /**

package/dist/index.mjs

@@ -1 +1 @@
-import{default as t}from"./packem_shared/asBucketStorage-1pFfH-Tn.mjs";import{initLunora as i}from"./packem_shared/initLunora-CHh1EmR4.mjs";import{createSecrets as p}from"./packem_shared/createSecrets-CgVPiW2C.mjs";import{LunoraEnvError as m,defineEnv as d,redactSecrets as x}from"./packem_shared/LunoraEnvError-CgpI2Mm_.mjs";import{LunoraError as c}from"./packem_shared/LunoraError-LVhdU0Lo.mjs";import{bindOrm as E,bindTableFacade as u}from"./packem_shared/bindOrm-Bp9hsM2q.mjs";import{httpAction as g,httpRoute as R,httpRouter as L,isSafeHeaderValue as P,serveStorageObject as h}from"./packem_shared/httpAction-C14NuF3V.mjs";import{defineIdentity as I}from"./packem_shared/defineIdentity-B7gfAgxx.mjs";import{onConnect as b,onDisconnect as y}from"./packem_shared/onConnect-CEtRmUpJ.mjs";import{DEFAULT_LIMIT as _,DEFAULT_MAX_LIMIT as D,clampLimit as v,defineListArgs as C}from"./packem_shared/DEFAULT_LIMIT-yHJ5O96W.mjs";import{defineMigration as V}from"./packem_shared/defineMigration-Bfpwxv2f.mjs";import{defineMutator as N}from"./packem_shared/defineMutator-BgpQ-xUo.mjs";import{composePluginMiddleware as U,defineComponent as w,definePlugin as B,defineSchemaExtension as W,installPlugins as j,mergeSchemaExtension as H}from"./packem_shared/composePluginMiddleware-COr09CXA.mjs";import{PRESENCE_DEFAULT_TTL_MS as X,PRESENCE_TABLE as q,definePresence as z,presenceExtension as G}from"./packem_shared/PRESENCE_DEFAULT_TTL_MS-D50xfQ1n.mjs";import{protectPublic as Q}from"./packem_shared/protectPublic-BhKewPqm.mjs";import{defineAggregateIndex as Z,defineRankIndex as $,defineSchema as ee,defineTable as oe,defineVectorIndex as re}from"./packem_shared/defineAggregateIndex-_gWNmkQZ.mjs";import{defineShape as ne}from"./packem_shared/defineShape-Ds8uNqzX.mjs";import{anyApi as fe}from"./types.mjs";import{cronJobs as ae}from"@lunora/scheduler";import{ValidationError as de,v as xe}from"@lunora/values";import{allowAll as ce,deny as le,isDeny as Ee,toWhereInput as ue}from"./packem_shared/allowAll-BnyNbJZT.mjs";import{buildRlsReadRegistry as ge,composeShapeReadWhere as Re}from"./packem_shared/buildRlsReadRegistry-WdiqSj87.mjs";import{createPolicyDsl as Pe,definePermission as he,definePolicies as Ae,definePolicy as Ie,defineRole as Te}from"./packem_shared/createPolicyDsl-sV1swpkD.mjs";import{defineStorageRule as ye,defineStorageRules as Me}from"./packem_shared/defineStorageRule-BDu01PUn.mjs";import{mask as De}from"./packem_shared/mask-C6Bi78qj.mjs";import{rls as Ce}from"./packem_shared/rls-_iVsPvhX.mjs";import{storageRules as Ve}from"./packem_shared/storageRules-BptPZbi8.mjs";const e="0.0.0";export{_ as DEFAULT_LIMIT,D as DEFAULT_MAX_LIMIT,m as LunoraEnvError,c as LunoraError,X as PRESENCE_DEFAULT_TTL_MS,q as PRESENCE_TABLE,e as VERSION,de as ValidationError,ce as allowAll,fe as anyApi,t as asBucketStorage,E as bindOrm,u as bindTableFacade,ge as buildRlsReadRegistry,v as clampLimit,U as composePluginMiddleware,Re as composeShapeReadWhere,Pe as createPolicyDsl,p as createSecrets,ae as cronJobs,Z as defineAggregateIndex,w as defineComponent,d as defineEnv,I as defineIdentity,C as defineListArgs,V as defineMigration,N as defineMutator,he as definePermission,B as definePlugin,Ae as definePolicies,Ie as definePolicy,z as definePresence,$ as defineRankIndex,Te as defineRole,ee as defineSchema,W as defineSchemaExtension,ne as defineShape,ye as defineStorageRule,Me as defineStorageRules,oe as defineTable,re as defineVectorIndex,le as deny,g as httpAction,R as httpRoute,L as httpRouter,i as initLunora,j as installPlugins,Ee as isDeny,P as isSafeHeaderValue,De as mask,H as mergeSchemaExtension,b as onConnect,y as onDisconnect,G as presenceExtension,Q as protectPublic,x as redactSecrets,Ce as rls,h as serveStorageObject,Ve as storageRules,ue as toWhereInput,xe as v};
+import{default as t}from"./packem_shared/asBucketStorage-1pFfH-Tn.mjs";import{initLunora as i}from"./packem_shared/initLunora-QNqOuG0A.mjs";import{createSecrets as p}from"./packem_shared/createSecrets-CgVPiW2C.mjs";import{LunoraEnvError as m,defineEnv as d,redactSecrets as x}from"./packem_shared/LunoraEnvError-CgpI2Mm_.mjs";import{LunoraError as c}from"./packem_shared/LunoraError-LVhdU0Lo.mjs";import{bindOrm as E,bindTableFacade as u}from"./packem_shared/bindOrm-Bp9hsM2q.mjs";import{httpAction as g,httpRoute as R,httpRouter as L,isSafeHeaderValue as P,serveStorageObject as h}from"./packem_shared/httpAction-C14NuF3V.mjs";import{defineIdentity as I}from"./packem_shared/defineIdentity-B7gfAgxx.mjs";import{onConnect as b,onDisconnect as y}from"./packem_shared/onConnect-CEtRmUpJ.mjs";import{DEFAULT_LIMIT as _,DEFAULT_MAX_LIMIT as D,clampLimit as v,defineListArgs as C}from"./packem_shared/DEFAULT_LIMIT-yHJ5O96W.mjs";import{defineMigration as V}from"./packem_shared/defineMigration-Bfpwxv2f.mjs";import{defineMutator as N}from"./packem_shared/defineMutator-BgpQ-xUo.mjs";import{composePluginMiddleware as U,defineComponent as w,definePlugin as B,defineSchemaExtension as W,installPlugins as j,mergeSchemaExtension as H}from"./packem_shared/composePluginMiddleware-COr09CXA.mjs";import{PRESENCE_DEFAULT_TTL_MS as X,PRESENCE_TABLE as q,definePresence as z,presenceExtension as G}from"./packem_shared/PRESENCE_DEFAULT_TTL_MS-C9RX3Cl6.mjs";import{protectPublic as Q}from"./packem_shared/protectPublic-BhKewPqm.mjs";import{defineAggregateIndex as Z,defineRankIndex as $,defineSchema as ee,defineTable as oe,defineVectorIndex as re}from"./packem_shared/defineAggregateIndex-_gWNmkQZ.mjs";import{defineShape as ne}from"./packem_shared/defineShape-Ds8uNqzX.mjs";import{anyApi as fe}from"./types.mjs";import{cronJobs as ae}from"@lunora/scheduler";import{ValidationError as de,v as xe}from"@lunora/values";import{allowAll as ce,deny as le,isDeny as Ee,toWhereInput as ue}from"./packem_shared/allowAll-BnyNbJZT.mjs";import{buildRlsReadRegistry as ge,composeShapeReadWhere as Re}from"./packem_shared/buildRlsReadRegistry-WdiqSj87.mjs";import{createPolicyDsl as Pe,definePermission as he,definePolicies as Ae,definePolicy as Ie,defineRole as Te}from"./packem_shared/createPolicyDsl-sV1swpkD.mjs";import{defineStorageRule as ye,defineStorageRules as Me}from"./packem_shared/defineStorageRule-BDu01PUn.mjs";import{mask as De}from"./packem_shared/mask-C6Bi78qj.mjs";import{rls as Ce}from"./packem_shared/rls-_iVsPvhX.mjs";import{storageRules as Ve}from"./packem_shared/storageRules-BptPZbi8.mjs";const e="0.0.0";export{_ as DEFAULT_LIMIT,D as DEFAULT_MAX_LIMIT,m as LunoraEnvError,c as LunoraError,X as PRESENCE_DEFAULT_TTL_MS,q as PRESENCE_TABLE,e as VERSION,de as ValidationError,ce as allowAll,fe as anyApi,t as asBucketStorage,E as bindOrm,u as bindTableFacade,ge as buildRlsReadRegistry,v as clampLimit,U as composePluginMiddleware,Re as composeShapeReadWhere,Pe as createPolicyDsl,p as createSecrets,ae as cronJobs,Z as defineAggregateIndex,w as defineComponent,d as defineEnv,I as defineIdentity,C as defineListArgs,V as defineMigration,N as defineMutator,he as definePermission,B as definePlugin,Ae as definePolicies,Ie as definePolicy,z as definePresence,$ as defineRankIndex,Te as defineRole,ee as defineSchema,W as defineSchemaExtension,ne as defineShape,ye as defineStorageRule,Me as defineStorageRules,oe as defineTable,re as defineVectorIndex,le as deny,g as httpAction,R as httpRoute,L as httpRouter,i as initLunora,j as installPlugins,Ee as isDeny,P as isSafeHeaderValue,De as mask,H as mergeSchemaExtension,b as onConnect,y as onDisconnect,G as presenceExtension,Q as protectPublic,x as redactSecrets,Ce as rls,h as serveStorageObject,Ve as storageRules,ue as toWhereInput,xe as v};

package/dist/packem_shared/{PRESENCE_DEFAULT_TTL_MS-D50xfQ1n.mjs → PRESENCE_DEFAULT_TTL_MS-C9RX3Cl6.mjs}

@@ -1 +1 @@
-import{v as o}from"@lunora/values";import{initLunora as E}from"./initLunora-CHh1EmR4.mjs";import{LunoraError as p}from"./LunoraError-LVhdU0Lo.mjs";import{onDisconnect as q}from"./onConnect-CEtRmUpJ.mjs";import{defineSchemaExtension as v,defineComponent as R}from"./composePluginMiddleware-COr09CXA.mjs";import{defineTable as _}from"./defineAggregateIndex-_gWNmkQZ.mjs";const D=3e4,y=4096,l="presence",h="present",c=`${l}_${h}`,M=v(l,{tables:{[h]:_({data:o.optional(o.record(o.string(),o.any())),lastSeen:o.number(),roomId:o.string(),sessionId:o.string(),userId:o.optional(o.string())}).index("byRoomSession",["roomId","sessionId"]).index("byRoom",["roomId"])}}),{mutation:b,query:T}=E.dataModel().create(),$=(u={})=>{const m=u.ttlMs??D,f=Math.max(0,Math.min(u.disconnectGraceMs??0,m)),w=b.input({data:o.optional(o.record(o.string(),o.any())),roomId:o.string(),sessionId:o.string()}).mutation(async({args:t,ctx:s})=>{const r=Date.now(),i=s.auth.userId??void 0;if(t.data!==void 0&&new TextEncoder().encode(JSON.stringify(t.data)).length>y)throw new p("BAD_REQUEST",`presence data exceeds the ${String(y)}-byte limit`);const e=await s.db.query(c).withIndex("byRoomSession",n=>n.eq("roomId",t.roomId).eq("sessionId",t.sessionId)).first();if(e&&(e.userId??void 0)!==i)throw new p("FORBIDDEN","presence heartbeat denied: this (roomId, sessionId) is held by another identity");const a={lastSeen:r,roomId:t.roomId,sessionId:t.sessionId,...t.data===void 0?{}:{data:t.data},...i===void 0?{}:{userId:i}};return await(e?s.db.patch(e._id,a):s.db.insert(c,a)),{lastSeen:r}}),S=T.input({roomId:o.string()}).query(async({args:t,ctx:s})=>{const r=Date.now()-m,i=(await s.db.query(c).withIndex("byRoom",n=>n.eq("roomId",t.roomId)).collect()).filter(n=>n.lastSeen>r).toSorted((n,d)=>d.lastSeen-n.lastSeen),e=new Set,a=[];for(const n of i){const d=n.userId;if(d!==void 0){if(e.has(d))continue;e.add(d)}const I={lastSeen:n.lastSeen,roomId:n.roomId};d!==void 0&&(I.userId=d),n.data!==void 0&&(I.data=n.data),a.push(I)}return a}),g={...b.input({roomId:o.string()}).mutation(async({args:t,ctx:s})=>{const r=Date.now()-m,i=await s.db.query(c).withIndex("byRoom",e=>e.eq("roomId",t.roomId)).filter(e=>e.lastSeen<=r).collect();return await Promise.all(i.map(e=>s.db.delete(e._id))),{deleted:i.length}}),visibility:"internal"},x=q(async(t,s)=>{const r=s.context?.roomId,i=s.context?.sessionId;if(typeof r!="string"||typeof i!="string")return;const e=await t.db.query(c).withIndex("byRoomSession",d=>d.eq("roomId",r).eq("sessionId",i)).first();if(!e)return;const a=s.userId??void 0;if((e.userId??void 0)!==a)return;if(f===0){await t.db.delete(e._id);return}const n=Math.min(e.lastSeen,Date.now()+f-m);await t.db.patch(e._id,{lastSeen:n})});return R(l,{extension:M,functions:{disconnect:x,heartbeat:w,listPresent:S,sweep:g}})};export{D as PRESENCE_DEFAULT_TTL_MS,c as PRESENCE_TABLE,$ as definePresence,M as presenceExtension};
+import{v as o}from"@lunora/values";import{initLunora as E}from"./initLunora-QNqOuG0A.mjs";import{LunoraError as p}from"./LunoraError-LVhdU0Lo.mjs";import{onDisconnect as q}from"./onConnect-CEtRmUpJ.mjs";import{defineSchemaExtension as v,defineComponent as R}from"./composePluginMiddleware-COr09CXA.mjs";import{defineTable as _}from"./defineAggregateIndex-_gWNmkQZ.mjs";const D=3e4,y=4096,l="presence",h="present",c=`${l}_${h}`,M=v(l,{tables:{[h]:_({data:o.optional(o.record(o.string(),o.any())),lastSeen:o.number(),roomId:o.string(),sessionId:o.string(),userId:o.optional(o.string())}).index("byRoomSession",["roomId","sessionId"]).index("byRoom",["roomId"])}}),{mutation:b,query:T}=E.dataModel().create(),F=(u={})=>{const m=u.ttlMs??D,f=Math.max(0,Math.min(u.disconnectGraceMs??0,m)),w=b.input({data:o.optional(o.record(o.string(),o.any())),roomId:o.string(),sessionId:o.string()}).mutation(async({args:t,ctx:s})=>{const r=Date.now(),i=s.auth.userId??void 0;if(t.data!==void 0&&new TextEncoder().encode(JSON.stringify(t.data)).length>y)throw new p("BAD_REQUEST",`presence data exceeds the ${String(y)}-byte limit`);const e=await s.db.query(c).withIndex("byRoomSession",n=>n.eq("roomId",t.roomId).eq("sessionId",t.sessionId)).first();if(e&&(e.userId??void 0)!==i)throw new p("FORBIDDEN","presence heartbeat denied: this (roomId, sessionId) is held by another identity");const a={lastSeen:r,roomId:t.roomId,sessionId:t.sessionId,...t.data===void 0?{}:{data:t.data},...i===void 0?{}:{userId:i}};return await(e?s.db.patch(e._id,a):s.db.insert(c,a)),{lastSeen:r}}),S=T.input({roomId:o.string()}).query(async({args:t,ctx:s})=>{const r=Date.now()-m,i=(await s.db.query(c).withIndex("byRoom",n=>n.eq("roomId",t.roomId)).collect()).filter(n=>n.lastSeen>r).toSorted((n,d)=>d.lastSeen-n.lastSeen),e=new Set,a=[];for(const n of i){const d=n.userId;if(d!==void 0){if(e.has(d))continue;e.add(d)}const I={lastSeen:n.lastSeen,roomId:n.roomId};d!==void 0&&(I.userId=d),n.data!==void 0&&(I.data=n.data),a.push(I)}return a}),g={...b.input({roomId:o.string()}).mutation(async({args:t,ctx:s})=>{const r=Date.now()-m,i=await s.db.query(c).withIndex("byRoom",e=>e.eq("roomId",t.roomId)).filter(e=>e.lastSeen<=r).collect();return await Promise.all(i.map(e=>s.db.delete(e._id))),{deleted:i.length}}),visibility:"internal"},x=q(async(t,s)=>{const r=s.context?.roomId,i=s.context?.sessionId;if(typeof r!="string"||typeof i!="string")return;const e=await t.db.query(c).withIndex("byRoomSession",d=>d.eq("roomId",r).eq("sessionId",i)).first();if(!e)return;const a=s.userId??void 0;if((e.userId??void 0)!==a)return;if(f===0){await t.db.delete(e._id);return}const n=Math.min(e.lastSeen,Date.now()+f-m);await t.db.patch(e._id,{lastSeen:n})});return R(l,{extension:M,functions:{disconnect:x,heartbeat:w,listPresent:S,sweep:g}})};export{D as PRESENCE_DEFAULT_TTL_MS,c as PRESENCE_TABLE,F as definePresence,M as presenceExtension};

package/dist/packem_shared/initLunora-QNqOuG0A.mjs

@@ -0,0 +1 @@
+import{s as c}from"./functions-CDC08CWY.mjs";import{l as p}from"./policy-tag-Dprt9JWo.mjs";import{l as x}from"./run-middleware-BeEEqmdE.mjs";const w=(t,e)=>e===void 0||typeof t!="object"||t===null?t:Object.assign(Object.create(Object.getPrototypeOf(t)),t,{meta:e}),g=(t,e)=>x(t,e,r=>r),y=(t,e,r,a,i)=>async(o,m)=>{const n=c(t,m),d=await g(e,w(o,i)),l=await r({args:n,ctx:d});return a?a.parse(l):l},f=(t,e,r)=>(a,i,o)=>{const m=c(t,i);return(async function*(){const n=await g(e,a),d=r({args:m,ctx:n,signal:o})[Symbol.asyncIterator]();try{for(;;){if(o.aborted)return;const l=await d.next();if(l.done||o.aborted)return;yield l.value}}finally{await d.return?.()}})()},u=t=>{const e=[];for(const r of t){const a=p(r);a&&e.push(a)}return e.length>0?{tags:e}:void 0},s=(t,e,r)=>({__lunoraProcedure:t,...r?{__lunoraVisibility:r}:{},input:a=>s(t,{...e,args:{...e.args,...a}},r),[t]:a=>{const i=u(e.middlewares);return{args:e.args,...e.expose?{expose:e.expose}:{},handler:y(e.args,e.middlewares,a,e.output,e.meta),kind:t,...e.meta?{meta:e.meta}:{},...i?{rls:i}:{},...r?{visibility:r}:{},...e.x402?{x402:e.x402}:{}}},meta:a=>s(t,{...e,meta:{...e.meta,...a}},r),output:a=>s(t,{...e,output:a},r),...t==="query"?{stream:a=>{const i=u(e.middlewares);return{args:e.args,...e.expose?{expose:e.expose}:{},handler:f(e.args,e.middlewares,a),kind:"stream",...i?{rls:i}:{},...r?{visibility:r}:{},...e.x402?{x402:e.x402}:{}}}}:{},use:a=>s(t,{...e,middlewares:[...e.middlewares,a]},r),...r?{}:{expose:a=>s(t,{...e,expose:a},r)},...r?{}:{x402:a=>s(t,{...e,x402:a},r)}}),j={dataModel:()=>({create:t=>({action:s("action",{args:{},middlewares:[]}),internalAction:s("action",{args:{},middlewares:[]},"internal"),internalMutation:s("mutation",{args:{},middlewares:[]},"internal"),internalQuery:s("query",{args:{},middlewares:[]},"internal"),mutation:s("mutation",{args:{},middlewares:[]}),query:s("query",{args:{},middlewares:[]})})})};export{j as initLunora};

package/dist/types.d.mts

@@ -552,6 +552,12 @@ interface RegisteredFunction<A extends ArgsValidator, R, Kind extends FunctionKi
    * Absent on ordinary registrations.
    */
   readonly lifecycle?: LifecycleEventKind;
+  /**
+   * Static per-procedure metadata declared with `.meta(...)`. Present so
+   * middleware (via `ctx.meta`) and tooling can read the same object; absent
+   * when the chain never called `.meta()`.
+   */
+  readonly meta?: Record<string, unknown>;
   readonly visibility?: FunctionVisibility;
   /**
    * Set by the `.x402({ price })` builder modifier. Marks the procedure as paid
@@ -563,6 +569,48 @@ interface RegisteredFunction<A extends ArgsValidator, R, Kind extends FunctionKi
 type RegisteredQuery<A extends ArgsValidator, R> = RegisteredFunction<A, R, "query">;
 type RegisteredMutation<A extends ArgsValidator, R> = RegisteredFunction<A, R, "mutation">;
 type RegisteredAction<A extends ArgsValidator, R> = RegisteredFunction<A, R, "action">;
+/**
+ * Structural mirror of `@lunora/client`'s `FunctionReference` — the handle the
+ * generated `api` / `internal` objects hand you, carrying `&lt;file>:&lt;function>`
+ * in `__lunoraRef`. Redeclared here so `@lunora/server` needs no dependency on
+ * the client package, exactly as {@link Scheduler} avoids one on
+ * `@lunora/scheduler`. `RegisteredFunction` has no `__lunoraRef`, so the two
+ * shapes never overlap.
+ */
+interface FunctionHandle<Kind extends "action" | "mutation" | "query" | "stream", Args, Return> {
+  /** Phantom marker carrying the type parameters; never present at runtime. */
+  readonly __lunoraPhantom?: {
+    args: Args;
+    kind: Kind;
+    returns: Return;
+  };
+  readonly __lunoraRef: string;
+}
+/**
+ * `ctx.runQuery` — overloaded, see the note above.
+ *
+ * A single generic signature over the reference would be nicer (TS will not
+ * contextually type a parameter against a multi-signature type, so a hand-built
+ * ctx object must annotate its `(reference, args)` explicitly — see
+ * `@lunora/testing`'s harness). It does not work: a concrete
+ * `RegisteredQuery&lt;{…}, number>` is not assignable to a
+ * `RegisteredFunction&lt;ArgsValidator, …>` constraint, because `handler`'s args
+ * are in a contravariant position. Two inference sites it is.
+ */
+interface RunQuery {
+  <A extends ArgsValidator, R>(reference: RegisteredQuery<A, R>, args: InferArgs<A>): Promise<R>;
+  <Args, R>(reference: FunctionHandle<"query", Args, R>, args: Args): Promise<R>;
+}
+/** `ctx.runMutation` — overloaded for the same reason as {@link RunQuery}. */
+interface RunMutation {
+  <A extends ArgsValidator, R>(reference: RegisteredMutation<A, R>, args: InferArgs<A>): Promise<R>;
+  <Args, R>(reference: FunctionHandle<"mutation", Args, R>, args: Args): Promise<R>;
+}
+/** `ctx.runAction` — overloaded for the same reason as {@link RunQuery}. */
+interface RunAction {
+  <A extends ArgsValidator, R>(reference: RegisteredAction<A, R>, args: InferArgs<A>): Promise<R>;
+  <Args, R>(reference: FunctionHandle<"action", Args, R>, args: Args): Promise<R>;
+}
 /** Which side of the WebSocket lifecycle a hook fires on. */
 type LifecycleEventKind = "connect" | "disconnect";
 /**
@@ -752,6 +800,27 @@ interface PaginationResult<T = Record<string, unknown>> {
  * (schema-agnostic) `@lunora/server` reader.
  */
 interface TableReader<Row = Record<string, unknown>> {
+  /**
+   * Iterate rows lazily: `for await (const row of ctx.db.query("t").withIndex(…))`.
+   *
+   * Pages through the result set behind the scenes and yields row by row, so
+   * a consumer that stops early stops the reads too. `.collect()` is still the
+   * right terminal when you want the whole set; this exists for the cases
+   * where you cannot know up front how far you need to read.
+   *
+   * That is what merged/ordered index streams need. Reimplementing Convex's
+   * `convex-helpers/server/stream` in userland previously meant materialising
+   * each branch with a bounded `.take(1024)` before merging, so asking a
+   * merged stream for ONE row read up to 1,024 rows per branch. The k-way merge itself is application code and stays there — only
+   * the laziness had to come from the database layer.
+   *
+   * Iteration pages through `.paginate()`, so it follows the same order —
+   * which is `.collect()`'s order whenever the sort key is unique. Under a
+   * TIED sort key (an unindexed read whose rows share `_creationTime`) the
+   * two can disagree, because the tie-break is left to SQLite. Read through
+   * an index when order matters, exactly as you would for `.paginate()`.
+   */
+  [Symbol.asyncIterator]: () => AsyncIterator<Row>;
   collect: () => Promise<Row[]>;
   filter: (predicate: (document: Row) => boolean) => TableReader<Row>;
   first: () => Promise<Row | null>;
@@ -1803,6 +1872,13 @@ interface QueryCtx {
   /** Structured, function-attributed logger; see {@link LunoraLogger}. */
   readonly log: LunoraLogger;
   /** Application counters, gauges, and histograms; see {@link LunoraMetrics}. */
+  /**
+   * Static metadata declared on this procedure with `.meta(...)`, merged
+   * across calls. Present so middleware can read the policy it is meant to
+   * enforce (`ctx.meta.rateLimit`, …) instead of having it hard-wired at each
+   * `.use()` site; absent when the procedure never called `.meta()`.
+   */
+  readonly meta?: Record<string, unknown>;
   readonly metrics: LunoraMetrics;
   /**
    * Wall-clock time (epoch ms) the function began, captured once so the whole
@@ -1820,7 +1896,7 @@ interface QueryCtx {
    * `runMutation` on a `QueryCtx` (writes are not allowed from a query).
    * Mirrors Convex's `ctx.runQuery`.
    */
-  readonly runQuery: <A extends ArgsValidator, R>(reference: RegisteredQuery<A, R>, args: InferArgs<A>) => Promise<R>;
+  readonly runQuery: RunQuery;
   /** Read account-level secrets from Cloudflare Secrets Store; see {@link Secrets}. */
   readonly secrets: Secrets;
   /** Attach facts to THIS request's span — the wide event; see {@link LunoraWideEvent}. */
@@ -1851,6 +1927,13 @@ interface MutationCtx {
   /** Structured, function-attributed logger; see {@link LunoraLogger}. */
   readonly log: LunoraLogger;
   /** Application counters, gauges, and histograms; see {@link LunoraMetrics}. */
+  /**
+   * Static metadata declared on this procedure with `.meta(...)`, merged
+   * across calls. Present so middleware can read the policy it is meant to
+   * enforce (`ctx.meta.rateLimit`, …) instead of having it hard-wired at each
+   * `.use()` site; absent when the procedure never called `.meta()`.
+   */
+  readonly meta?: Record<string, unknown>;
   readonly metrics: LunoraMetrics;
   /**
    * Wall-clock time (epoch ms) the function began, captured once so the whole
@@ -1868,14 +1951,14 @@ interface MutationCtx {
    * failure does not roll back earlier writes (the same as a top-level
    * mutation). Mirrors Convex's `ctx.runMutation`.
    */
-  readonly runMutation: <A extends ArgsValidator, R>(reference: RegisteredMutation<A, R>, args: InferArgs<A>) => Promise<R>;
+  readonly runMutation: RunMutation;
   /**
    * Compose a read-only subquery in-process, reusing this mutation's `db`.
    * Executes the referenced query's handler directly — no fresh DO RPC — so
    * it observes this mutation's in-flight writes. Mirrors Convex's
    * `ctx.runQuery`.
    */
-  readonly runQuery: <A extends ArgsValidator, R>(reference: RegisteredQuery<A, R>, args: InferArgs<A>) => Promise<R>;
+  readonly runQuery: RunQuery;
   readonly scheduler: Scheduler;
   /** Read account-level secrets from Cloudflare Secrets Store; see {@link Secrets}. */
   readonly secrets: Secrets;
@@ -1917,6 +2000,13 @@ interface ActionCtx {
   /** Structured, function-attributed logger; see {@link LunoraLogger}. */
   readonly log: LunoraLogger;
   /** Application counters, gauges, and histograms; see {@link LunoraMetrics}. */
+  /**
+   * Static metadata declared on this procedure with `.meta(...)`, merged
+   * across calls. Present so middleware can read the policy it is meant to
+   * enforce (`ctx.meta.rateLimit`, …) instead of having it hard-wired at each
+   * `.use()` site; absent when the procedure never called `.meta()`.
+   */
+  readonly meta?: Record<string, unknown>;
   readonly metrics: LunoraMetrics;
   /**
    * Wall-clock time (epoch ms) the action began, captured once for convenience
@@ -1924,9 +2014,9 @@ interface ActionCtx {
    * may also use ambient `Date.now()` freely.
    */
   readonly now: number;
-  readonly runAction: <A extends ArgsValidator, R>(reference: RegisteredAction<A, R>, args: InferArgs<A>) => Promise<R>;
-  readonly runMutation: <A extends ArgsValidator, R>(reference: RegisteredMutation<A, R>, args: InferArgs<A>) => Promise<R>;
-  readonly runQuery: <A extends ArgsValidator, R>(reference: RegisteredQuery<A, R>, args: InferArgs<A>) => Promise<R>;
+  readonly runAction: RunAction;
+  readonly runMutation: RunMutation;
+  readonly runQuery: RunQuery;
   readonly scheduler: Scheduler;
   /** Read account-level secrets from Cloudflare Secrets Store; see {@link Secrets}. */
   readonly secrets: Secrets;

package/dist/types.d.ts

@@ -552,6 +552,12 @@ interface RegisteredFunction<A extends ArgsValidator, R, Kind extends FunctionKi
    * Absent on ordinary registrations.
    */
   readonly lifecycle?: LifecycleEventKind;
+  /**
+   * Static per-procedure metadata declared with `.meta(...)`. Present so
+   * middleware (via `ctx.meta`) and tooling can read the same object; absent
+   * when the chain never called `.meta()`.
+   */
+  readonly meta?: Record<string, unknown>;
   readonly visibility?: FunctionVisibility;
   /**
    * Set by the `.x402({ price })` builder modifier. Marks the procedure as paid
@@ -563,6 +569,48 @@ interface RegisteredFunction<A extends ArgsValidator, R, Kind extends FunctionKi
 type RegisteredQuery<A extends ArgsValidator, R> = RegisteredFunction<A, R, "query">;
 type RegisteredMutation<A extends ArgsValidator, R> = RegisteredFunction<A, R, "mutation">;
 type RegisteredAction<A extends ArgsValidator, R> = RegisteredFunction<A, R, "action">;
+/**
+ * Structural mirror of `@lunora/client`'s `FunctionReference` — the handle the
+ * generated `api` / `internal` objects hand you, carrying `&lt;file>:&lt;function>`
+ * in `__lunoraRef`. Redeclared here so `@lunora/server` needs no dependency on
+ * the client package, exactly as {@link Scheduler} avoids one on
+ * `@lunora/scheduler`. `RegisteredFunction` has no `__lunoraRef`, so the two
+ * shapes never overlap.
+ */
+interface FunctionHandle<Kind extends "action" | "mutation" | "query" | "stream", Args, Return> {
+  /** Phantom marker carrying the type parameters; never present at runtime. */
+  readonly __lunoraPhantom?: {
+    args: Args;
+    kind: Kind;
+    returns: Return;
+  };
+  readonly __lunoraRef: string;
+}
+/**
+ * `ctx.runQuery` — overloaded, see the note above.
+ *
+ * A single generic signature over the reference would be nicer (TS will not
+ * contextually type a parameter against a multi-signature type, so a hand-built
+ * ctx object must annotate its `(reference, args)` explicitly — see
+ * `@lunora/testing`'s harness). It does not work: a concrete
+ * `RegisteredQuery&lt;{…}, number>` is not assignable to a
+ * `RegisteredFunction&lt;ArgsValidator, …>` constraint, because `handler`'s args
+ * are in a contravariant position. Two inference sites it is.
+ */
+interface RunQuery {
+  <A extends ArgsValidator, R>(reference: RegisteredQuery<A, R>, args: InferArgs<A>): Promise<R>;
+  <Args, R>(reference: FunctionHandle<"query", Args, R>, args: Args): Promise<R>;
+}
+/** `ctx.runMutation` — overloaded for the same reason as {@link RunQuery}. */
+interface RunMutation {
+  <A extends ArgsValidator, R>(reference: RegisteredMutation<A, R>, args: InferArgs<A>): Promise<R>;
+  <Args, R>(reference: FunctionHandle<"mutation", Args, R>, args: Args): Promise<R>;
+}
+/** `ctx.runAction` — overloaded for the same reason as {@link RunQuery}. */
+interface RunAction {
+  <A extends ArgsValidator, R>(reference: RegisteredAction<A, R>, args: InferArgs<A>): Promise<R>;
+  <Args, R>(reference: FunctionHandle<"action", Args, R>, args: Args): Promise<R>;
+}
 /** Which side of the WebSocket lifecycle a hook fires on. */
 type LifecycleEventKind = "connect" | "disconnect";
 /**
@@ -752,6 +800,27 @@ interface PaginationResult<T = Record<string, unknown>> {
  * (schema-agnostic) `@lunora/server` reader.
  */
 interface TableReader<Row = Record<string, unknown>> {
+  /**
+   * Iterate rows lazily: `for await (const row of ctx.db.query("t").withIndex(…))`.
+   *
+   * Pages through the result set behind the scenes and yields row by row, so
+   * a consumer that stops early stops the reads too. `.collect()` is still the
+   * right terminal when you want the whole set; this exists for the cases
+   * where you cannot know up front how far you need to read.
+   *
+   * That is what merged/ordered index streams need. Reimplementing Convex's
+   * `convex-helpers/server/stream` in userland previously meant materialising
+   * each branch with a bounded `.take(1024)` before merging, so asking a
+   * merged stream for ONE row read up to 1,024 rows per branch. The k-way merge itself is application code and stays there — only
+   * the laziness had to come from the database layer.
+   *
+   * Iteration pages through `.paginate()`, so it follows the same order —
+   * which is `.collect()`'s order whenever the sort key is unique. Under a
+   * TIED sort key (an unindexed read whose rows share `_creationTime`) the
+   * two can disagree, because the tie-break is left to SQLite. Read through
+   * an index when order matters, exactly as you would for `.paginate()`.
+   */
+  [Symbol.asyncIterator]: () => AsyncIterator<Row>;
   collect: () => Promise<Row[]>;
   filter: (predicate: (document: Row) => boolean) => TableReader<Row>;
   first: () => Promise<Row | null>;
@@ -1803,6 +1872,13 @@ interface QueryCtx {
   /** Structured, function-attributed logger; see {@link LunoraLogger}. */
   readonly log: LunoraLogger;
   /** Application counters, gauges, and histograms; see {@link LunoraMetrics}. */
+  /**
+   * Static metadata declared on this procedure with `.meta(...)`, merged
+   * across calls. Present so middleware can read the policy it is meant to
+   * enforce (`ctx.meta.rateLimit`, …) instead of having it hard-wired at each
+   * `.use()` site; absent when the procedure never called `.meta()`.
+   */
+  readonly meta?: Record<string, unknown>;
   readonly metrics: LunoraMetrics;
   /**
    * Wall-clock time (epoch ms) the function began, captured once so the whole
@@ -1820,7 +1896,7 @@ interface QueryCtx {
    * `runMutation` on a `QueryCtx` (writes are not allowed from a query).
    * Mirrors Convex's `ctx.runQuery`.
    */
-  readonly runQuery: <A extends ArgsValidator, R>(reference: RegisteredQuery<A, R>, args: InferArgs<A>) => Promise<R>;
+  readonly runQuery: RunQuery;
   /** Read account-level secrets from Cloudflare Secrets Store; see {@link Secrets}. */
   readonly secrets: Secrets;
   /** Attach facts to THIS request's span — the wide event; see {@link LunoraWideEvent}. */
@@ -1851,6 +1927,13 @@ interface MutationCtx {
   /** Structured, function-attributed logger; see {@link LunoraLogger}. */
   readonly log: LunoraLogger;
   /** Application counters, gauges, and histograms; see {@link LunoraMetrics}. */
+  /**
+   * Static metadata declared on this procedure with `.meta(...)`, merged
+   * across calls. Present so middleware can read the policy it is meant to
+   * enforce (`ctx.meta.rateLimit`, …) instead of having it hard-wired at each
+   * `.use()` site; absent when the procedure never called `.meta()`.
+   */
+  readonly meta?: Record<string, unknown>;
   readonly metrics: LunoraMetrics;
   /**
    * Wall-clock time (epoch ms) the function began, captured once so the whole
@@ -1868,14 +1951,14 @@ interface MutationCtx {
    * failure does not roll back earlier writes (the same as a top-level
    * mutation). Mirrors Convex's `ctx.runMutation`.
    */
-  readonly runMutation: <A extends ArgsValidator, R>(reference: RegisteredMutation<A, R>, args: InferArgs<A>) => Promise<R>;
+  readonly runMutation: RunMutation;
   /**
    * Compose a read-only subquery in-process, reusing this mutation's `db`.
    * Executes the referenced query's handler directly — no fresh DO RPC — so
    * it observes this mutation's in-flight writes. Mirrors Convex's
    * `ctx.runQuery`.
    */
-  readonly runQuery: <A extends ArgsValidator, R>(reference: RegisteredQuery<A, R>, args: InferArgs<A>) => Promise<R>;
+  readonly runQuery: RunQuery;
   readonly scheduler: Scheduler;
   /** Read account-level secrets from Cloudflare Secrets Store; see {@link Secrets}. */
   readonly secrets: Secrets;
@@ -1917,6 +2000,13 @@ interface ActionCtx {
   /** Structured, function-attributed logger; see {@link LunoraLogger}. */
   readonly log: LunoraLogger;
   /** Application counters, gauges, and histograms; see {@link LunoraMetrics}. */
+  /**
+   * Static metadata declared on this procedure with `.meta(...)`, merged
+   * across calls. Present so middleware can read the policy it is meant to
+   * enforce (`ctx.meta.rateLimit`, …) instead of having it hard-wired at each
+   * `.use()` site; absent when the procedure never called `.meta()`.
+   */
+  readonly meta?: Record<string, unknown>;
   readonly metrics: LunoraMetrics;
   /**
    * Wall-clock time (epoch ms) the action began, captured once for convenience
@@ -1924,9 +2014,9 @@ interface ActionCtx {
    * may also use ambient `Date.now()` freely.
    */
   readonly now: number;
-  readonly runAction: <A extends ArgsValidator, R>(reference: RegisteredAction<A, R>, args: InferArgs<A>) => Promise<R>;
-  readonly runMutation: <A extends ArgsValidator, R>(reference: RegisteredMutation<A, R>, args: InferArgs<A>) => Promise<R>;
-  readonly runQuery: <A extends ArgsValidator, R>(reference: RegisteredQuery<A, R>, args: InferArgs<A>) => Promise<R>;
+  readonly runAction: RunAction;
+  readonly runMutation: RunMutation;
+  readonly runQuery: RunQuery;
   readonly scheduler: Scheduler;
   /** Read account-level secrets from Cloudflare Secrets Store; see {@link Secrets}. */
   readonly secrets: Secrets;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/server",
-  "version": "1.0.0-alpha.53",
+  "version": "1.0.0-alpha.55",
   "description": "Server primitives for Lunora: defineSchema, defineTable, query, mutation, and action",
   "keywords": [
     "backend",
@@ -66,9 +66,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/errors": "1.0.0-alpha.9",
-    "@lunora/scheduler": "1.0.0-alpha.14",
-    "@lunora/values": "1.0.0-alpha.12",
+    "@lunora/errors": "1.0.0-alpha.10",
+    "@lunora/scheduler": "1.0.0-alpha.16",
+    "@lunora/values": "1.0.0-alpha.13",
     "drizzle-orm": "^0.45.2",
     "hono": "^4.12.32"
   },

package/dist/packem_shared/initLunora-CHh1EmR4.mjs

@@ -1 +0,0 @@
-import{s as c}from"./functions-CDC08CWY.mjs";import{l as g}from"./policy-tag-Dprt9JWo.mjs";import{l as p}from"./run-middleware-BeEEqmdE.mjs";const x=(r,e)=>p(r,e,a=>a),w=(r,e,a,t)=>async(i,o)=>{const d=c(r,o),n=await x(e,i),l=await a({args:d,ctx:n});return t?t.parse(l):l},y=(r,e,a)=>(t,i,o)=>{const d=c(r,i);return(async function*(){const n=await x(e,t),l=a({args:d,ctx:n,signal:o})[Symbol.asyncIterator]();try{for(;;){if(o.aborted)return;const u=await l.next();if(u.done||o.aborted)return;yield u.value}}finally{await l.return?.()}})()},m=r=>{const e=[];for(const a of r){const t=g(a);t&&e.push(t)}return e.length>0?{tags:e}:void 0},s=(r,e,a)=>({__lunoraProcedure:r,...a?{__lunoraVisibility:a}:{},input:t=>s(r,{...e,args:{...e.args,...t}},a),[r]:t=>{const i=m(e.middlewares);return{args:e.args,...e.expose?{expose:e.expose}:{},handler:w(e.args,e.middlewares,t,e.output),kind:r,...i?{rls:i}:{},...a?{visibility:a}:{},...e.x402?{x402:e.x402}:{}}},output:t=>s(r,{...e,output:t},a),...r==="query"?{stream:t=>{const i=m(e.middlewares);return{args:e.args,...e.expose?{expose:e.expose}:{},handler:y(e.args,e.middlewares,t),kind:"stream",...i?{rls:i}:{},...a?{visibility:a}:{},...e.x402?{x402:e.x402}:{}}}}:{},use:t=>s(r,{...e,middlewares:[...e.middlewares,t]},a),...a?{}:{expose:t=>s(r,{...e,expose:t},a)},...a?{}:{x402:t=>s(r,{...e,x402:t},a)}}),q={dataModel:()=>({create:r=>({action:s("action",{args:{},middlewares:[]}),internalAction:s("action",{args:{},middlewares:[]},"internal"),internalMutation:s("mutation",{args:{},middlewares:[]},"internal"),internalQuery:s("query",{args:{},middlewares:[]},"internal"),mutation:s("mutation",{args:{},middlewares:[]}),query:s("query",{args:{},middlewares:[]})})})};export{q as initLunora};