@lunora/server 1.0.0-alpha.72 → 1.0.0-alpha.74

package/dist/index.mjs

@@ -1 +1 @@
-import{initLunora as t}from"./packem_shared/initLunora-BilEHyNs.mjs";import{createSecrets as i}from"./packem_shared/createSecrets-CgVPiW2C.mjs";import{LunoraEnvError as f,defineEnv as s,redactSecrets as m}from"./packem_shared/LunoraEnvError-CgpI2Mm_.mjs";import{LunoraError as p}from"./packem_shared/LunoraError-LVhdU0Lo.mjs";import{bindOrm as c,bindTableFacade as l}from"./packem_shared/bindOrm-Bp9hsM2q.mjs";import{httpAction as u,httpRoute as S,httpRouter as g,isSafeHeaderValue as R,serveStorageObject as L}from"./packem_shared/httpAction-BpEJYwzV.mjs";import{defineIdentity as P}from"./packem_shared/defineIdentity-B7gfAgxx.mjs";import{onConnect as A,onDisconnect as I}from"./packem_shared/onConnect-CEtRmUpJ.mjs";import{DEFAULT_LIMIT as y,DEFAULT_MAX_LIMIT as M,clampLimit as _,defineListArgs as D}from"./packem_shared/DEFAULT_LIMIT-yHJ5O96W.mjs";import{defineMigration as k}from"./packem_shared/defineMigration-Bfpwxv2f.mjs";import{defineMutator as C}from"./packem_shared/defineMutator-BgpQ-xUo.mjs";import{c as N,H as O,d as U,a as W,X as w,Z as B,b as H,q as X,K as j,W as q,i as J,m as K}from"./packem_shared/plugin-184MITA3.mjs";import{PRESENCE_DEFAULT_TTL_MS as z,PRESENCE_TABLE as G,definePresence as Q,presenceExtension as Y}from"./packem_shared/PRESENCE_DEFAULT_TTL_MS-C24x2Cox.mjs";import{protectPublic as ee}from"./packem_shared/protectPublic-BhKewPqm.mjs";import{defineShape as oe}from"./packem_shared/defineShape-Ds8uNqzX.mjs";import{anyApi as ne}from"./types.mjs";import{cronJobs as ae}from"@lunora/scheduler";import{ValidationError as se,v as me}from"@lunora/values";import{allowAll as pe,deny as xe,isDeny as ce,toWhereInput as le}from"./packem_shared/allowAll-BnyNbJZT.mjs";import{asBucketStorage as ue}from"./packem_shared/asBucketStorage-BthCnWop.mjs";import{buildMaskRegistry as ge}from"./packem_shared/buildMaskRegistry-BCIzKxdK.mjs";import{buildRlsReadRegistry as Le,composeShapeReadWhere as he}from"./packem_shared/buildRlsReadRegistry-CE5k6akj.mjs";import{createPolicyDsl as be,definePermission as Ae,definePolicies as Ie,definePolicy as Te,defineRole as ye}from"./packem_shared/createPolicyDsl-sV1swpkD.mjs";import{defineStorageRule as _e,defineStorageRules as De}from"./packem_shared/defineStorageRule-BDu01PUn.mjs";import{mask as ke}from"./packem_shared/mask-CD7SWEvR.mjs";import{c as Ce}from"./packem_shared/middleware-D9_39C5C.mjs";import{storageRules as Ne}from"./packem_shared/storageRules-6_G8JpCv.mjs";const e="0.0.0";export{y as DEFAULT_LIMIT,M as DEFAULT_MAX_LIMIT,f as LunoraEnvError,p as LunoraError,z as PRESENCE_DEFAULT_TTL_MS,G as PRESENCE_TABLE,e as VERSION,se as ValidationError,pe as allowAll,ne as anyApi,ue as asBucketStorage,c as bindOrm,l as bindTableFacade,ge as buildMaskRegistry,Le as buildRlsReadRegistry,_ as clampLimit,N as composePluginMiddleware,he as composeShapeReadWhere,be as createPolicyDsl,i as createSecrets,ae as cronJobs,O as defineAggregateIndex,U as defineComponent,s as defineEnv,P as defineIdentity,D as defineListArgs,k as defineMigration,C as defineMutator,Ae as definePermission,W as definePlugin,Ie as definePolicies,Te as definePolicy,Q as definePresence,w as defineRankIndex,ye as defineRole,B as defineSchema,H as defineSchemaExtension,oe as defineShape,_e as defineStorageRule,De as defineStorageRules,X as defineTable,j as defineVectorIndex,xe as deny,u as httpAction,S as httpRoute,g as httpRouter,q as indexFieldsFromSchema,t as initLunora,J as installPlugins,ce as isDeny,R as isSafeHeaderValue,ke as mask,K as mergeSchemaExtension,A as onConnect,I as onDisconnect,Y as presenceExtension,ee as protectPublic,m as redactSecrets,Ce as rls,L as serveStorageObject,Ne as storageRules,le as toWhereInput,me as v};
+import{initLunora as t}from"./packem_shared/initLunora-CgovElX2.mjs";import{createSecrets as i}from"./packem_shared/createSecrets-CyrEddTF.mjs";import{LunoraEnvError as f,defineEnv as s,redactSecrets as m}from"./packem_shared/LunoraEnvError-CjFbbR9t.mjs";import{LunoraError as p}from"./packem_shared/LunoraError-DcKdk9Ti.mjs";import{bindOrm as c,bindTableFacade as l}from"./packem_shared/bindOrm-lWdeDi9P.mjs";import{httpAction as u,httpRoute as g,httpRouter as S,isSafeHeaderValue as R,serveStorageObject as h}from"./packem_shared/httpAction-Ddi7f0t6.mjs";import{defineIdentity as P}from"./packem_shared/defineIdentity-p1mHXs8W.mjs";import{onConnect as A,onDisconnect as I}from"./packem_shared/onConnect-DI23ecHU.mjs";import{DEFAULT_LIMIT as y,DEFAULT_MAX_LIMIT as M,clampLimit as _,defineListArgs as D}from"./packem_shared/DEFAULT_LIMIT-B947Pbij.mjs";import{defineMigration as k}from"./packem_shared/defineMigration-7GI9Qbtd.mjs";import{defineMutator as C}from"./packem_shared/defineMutator-DKy8UtbB.mjs";import{c as N,d as O,a as U,b as j,e as w,f as B,g as W,h as H,i as J,j as X,k as q,m as z}from"./packem_shared/plugin-CV2Fae9w.mjs";import{PRESENCE_DEFAULT_TTL_MS as K,PRESENCE_TABLE as Q,definePresence as Y,presenceExtension as Z}from"./packem_shared/PRESENCE_DEFAULT_TTL_MS-DdrSmNQi.mjs";import{protectPublic as ee}from"./packem_shared/protectPublic-Bo4G9xaV.mjs";import{defineShape as oe}from"./packem_shared/defineShape-DYxbNl5W.mjs";import{anyApi as ne}from"./types.mjs";import{cronJobs as ae}from"@lunora/scheduler";import{ValidationError as se,v as me}from"@lunora/values";import{allowAll as pe,deny as xe,isDeny as ce,toWhereInput as le}from"./packem_shared/allowAll-DkRAgItV.mjs";import{asBucketStorage as ue}from"./packem_shared/asBucketStorage-BthCnWop.mjs";import{buildMaskRegistry as Se}from"./packem_shared/buildMaskRegistry-72SL8fJn.mjs";import{buildRlsReadRegistry as he,composeShapeReadWhere as Le}from"./packem_shared/buildRlsReadRegistry-Deq8inqS.mjs";import{createPolicyDsl as be,definePermission as Ae,definePolicies as Ie,definePolicy as Te,defineRole as ye}from"./packem_shared/createPolicyDsl-DNfByAUX.mjs";import{defineStorageRule as _e,defineStorageRules as De}from"./packem_shared/defineStorageRule-BvxHVq3b.mjs";import{mask as ke}from"./packem_shared/mask-CfHNITgg.mjs";import{r as Ce}from"./packem_shared/middleware-DEW0yLvU.mjs";import{storageRules as Ne}from"./packem_shared/storageRules-CTnby6M1.mjs";const e="0.0.0";export{y as DEFAULT_LIMIT,M as DEFAULT_MAX_LIMIT,f as LunoraEnvError,p as LunoraError,K as PRESENCE_DEFAULT_TTL_MS,Q as PRESENCE_TABLE,e as VERSION,se as ValidationError,pe as allowAll,ne as anyApi,ue as asBucketStorage,c as bindOrm,l as bindTableFacade,Se as buildMaskRegistry,he as buildRlsReadRegistry,_ as clampLimit,N as composePluginMiddleware,Le as composeShapeReadWhere,be as createPolicyDsl,i as createSecrets,ae as cronJobs,O as defineAggregateIndex,U as defineComponent,s as defineEnv,P as defineIdentity,D as defineListArgs,k as defineMigration,C as defineMutator,Ae as definePermission,j as definePlugin,Ie as definePolicies,Te as definePolicy,Y as definePresence,w as defineRankIndex,ye as defineRole,B as defineSchema,W as defineSchemaExtension,oe as defineShape,_e as defineStorageRule,De as defineStorageRules,H as defineTable,J as defineVectorIndex,xe as deny,u as httpAction,g as httpRoute,S as httpRouter,X as indexFieldsFromSchema,t as initLunora,q as installPlugins,ce as isDeny,R as isSafeHeaderValue,ke as mask,z as mergeSchemaExtension,A as onConnect,I as onDisconnect,Z as presenceExtension,ee as protectPublic,m as redactSecrets,Ce as rls,h as serveStorageObject,Ne as storageRules,le as toWhereInput,me as v};

package/dist/otel.mjs

@@ -1 +1 @@
-import{TraceFlags as w,SpanStatusCode as m,SpanKind as o}from"@opentelemetry/api";const E={[o.CLIENT]:"client",[o.CONSUMER]:"consumer",[o.INTERNAL]:"internal",[o.PRODUCER]:"producer",[o.SERVER]:"server"},b=s=>{const t=new Uint8Array(s);crypto.getRandomValues(t);let e="";for(const n of t)e+=n.toString(16).padStart(2,"0");return e},d=s=>{const t={};for(const[e,n]of Object.entries(s??{}))n!==void 0&&(t[e]=Array.isArray(n)?n.map(String).join(","):n);return t};class v{ended=!1;finish;handle;ids;pending=[];thrown;constructor(t){this.ids=t}get failure(){return this.thrown}addEvent(t,e,n){return this.write(i=>{i.addEvent(t,d(e))}),this}addLink(t){return this.write(e=>{e.addLink({attributes:d(t.attributes),spanId:t.context.spanId,traceId:t.context.traceId})}),this}addLinks(t){for(const e of t)this.addLink(e);return this}attach(t,e){this.handle=t,this.finish=e;for(const n of this.pending)n(t);this.pending.length=0,this.ended&&e()}end(t){this.ended||(this.ended=!0,this.finish?.())}isRecording(){return!this.ended}recordException(t,e){this.write(n=>{if(t instanceof Error||typeof t=="string"){n.recordException(t);return}const i=new Error(t.message??String(t.code??"exception"));t.name!==void 0&&(i.name=t.name),t.stack!==void 0&&(i.stack=t.stack),n.recordException(i)})}setAttribute(t,e){return this.write(n=>{n.setAttribute(t,Array.isArray(e)?e.map(String).join(","):e)}),this}setAttributes(t){return this.write(e=>{e.setAttributes(d(t))}),this}setStatus(t){return t.code===m.ERROR&&(this.thrown=new Error(t.message??"span reported an error status")),this}spanContext(){return this.ids}updateName(t){return this.write(e=>{e.setAttribute("otel.updated_name",t)}),this}write(t){if(this.handle===void 0){this.pending.push(t);return}t(this.handle)}}const S=(s,t={})=>{const{namePrefix:e=""}=t,n=(i,r,p)=>{const h=s.span.spanContext(),u={spanId:b(8),traceFlags:w.SAMPLED,traceId:h.traceId},c=new v(u);let l=()=>{};const f=new Promise(a=>{l=a});return s.trace(`${e}${i}`,async(a,g)=>{if(c.attach(g,l),await f,c.failure!==void 0)throw c.failure},{...r?.attributes===void 0?{}:{attributes:d(r.attributes)},...r?.kind===void 0?{}:{kind:E[r.kind]??"internal"},...r?.links===void 0?{}:{links:r.links.map(a=>({attributes:d(a.attributes),spanId:a.context.spanId,traceId:a.context.traceId}))}}).catch(()=>{}),c};return{startActiveSpan:(i,...r)=>{const p=r.at(-1),h=typeof r[0]=="object"&&r[0]!==null?r[0]:void 0,u=n(i,h);return p(u)},startSpan:n}};export{S as createOtelTracer};
+import{SpanKind as d,TraceFlags as b,SpanStatusCode as g}from"@opentelemetry/api";const w={[d.CLIENT]:"client",[d.CONSUMER]:"consumer",[d.INTERNAL]:"internal",[d.PRODUCER]:"producer",[d.SERVER]:"server"},E=s=>{const t=new Uint8Array(s);crypto.getRandomValues(t);let e="";for(const r of t)e+=r.toString(16).padStart(2,"0");return e},o=s=>{const t={};for(const[e,r]of Object.entries(s??{}))r!==void 0&&(t[e]=Array.isArray(r)?r.map(String).join(","):r);return t};class S{ended=!1;finish;handle;ids;pending=[];thrown;constructor(t){this.ids=t}get failure(){return this.thrown}addEvent(t,e,r){return this.write(i=>{i.addEvent(t,o(e))}),this}addLink(t){return this.write(e=>{e.addLink({attributes:o(t.attributes),spanId:t.context.spanId,traceId:t.context.traceId})}),this}addLinks(t){for(const e of t)this.addLink(e);return this}attach(t,e){this.handle=t,this.finish=e;for(const r of this.pending)r(t);this.pending.length=0,this.ended&&e()}end(t){this.ended||(this.ended=!0,this.finish?.())}isRecording(){return!this.ended}recordException(t,e){this.write(r=>{if(t instanceof Error||typeof t=="string"){r.recordException(t);return}const i=new Error(t.message??String(t.code??"exception"));t.name!==void 0&&(i.name=t.name),t.stack!==void 0&&(i.stack=t.stack),r.recordException(i)})}setAttribute(t,e){return this.write(r=>{r.setAttribute(t,Array.isArray(e)?e.map(String).join(","):e)}),this}setAttributes(t){return this.write(e=>{e.setAttributes(o(t))}),this}setStatus(t){return t.code===g.ERROR&&(this.thrown=new Error(t.message??"span reported an error status")),this}spanContext(){return this.ids}updateName(t){return this.write(e=>{e.setAttribute("otel.updated_name",t)}),this}write(t){if(this.handle===void 0){this.pending.push(t);return}t(this.handle)}}const I=(s,t={})=>{const{namePrefix:e=""}=t,r=(i,n,f)=>{const u=s.span.spanContext(),h={spanId:E(8),traceFlags:b.SAMPLED,traceId:u.traceId},c=new S(h);let l=()=>{};const p=new Promise(a=>{l=a});return s.trace(`${e}${i}`,async(a,m)=>{if(c.attach(m,l),await p,c.failure!==void 0)throw c.failure},{...n?.attributes===void 0?{}:{attributes:o(n.attributes)},...n?.kind===void 0?{}:{kind:w[n.kind]??"internal"},...n?.links===void 0?{}:{links:n.links.map(a=>({attributes:o(a.attributes),spanId:a.context.spanId,traceId:a.context.traceId}))}}).catch(()=>{}),c};return{startActiveSpan:(i,...n)=>{const f=n.at(-1),u=typeof n[0]=="object"&&n[0]!==null?n[0]:void 0,h=r(i,u);return f(h)},startSpan:r}};export{I as createOtelTracer};

package/dist/packem_shared/DEFAULT_LIMIT-B947Pbij.mjs

@@ -0,0 +1 @@
+import{v as o}from"@lunora/values";const h=25,b=100,y=100,A=8,O=(t,r)=>{const n=i=>o.optional(o.array(i).check(s=>s.length<=r,{message:`at most ${String(r)} values`}));return o.object({contains:o.optional(o.string()),eq:o.optional(t),gt:o.optional(t),gte:o.optional(t),in:n(t),isNull:o.optional(o.boolean()),lt:o.optional(t),lte:o.optional(t),ne:o.optional(t),notIn:n(t)})},g=(t,r,n)=>t===void 0||!Number.isFinite(t)?Math.min(r,n):Math.min(Math.max(1,Math.floor(t)),n),p=(t,r)=>t===void 0||!Number.isFinite(t)?r:Math.max(1,Math.floor(t)),L=new Set(["contains","eq","gt","gte","in","isNull","lt","lte","ne","notIn"]),M=(t,r)=>{if(typeof t!="object"||t===null||Array.isArray(t))return;const n=t,i={};for(const s of L){if(!Object.hasOwn(n,s))continue;const a=n[s];i[s]=Array.isArray(a)?a.slice(0,r):a}return Object.keys(i).length===0?void 0:i},B=(t,r,n)=>{const i={};for(const s of r){if(!Object.hasOwn(t,s))continue;const a=t[s],l=M(a,n);i[s]=l??a}return i},E=()=>t=>{const r=p(t.defaultLimit,h),n=p(t.maxLimit,b),i=p(t.maxInValues,y),s=p(t.maxOrderBy,A),a=new Set(Object.keys(t.filter)),l={};for(const[e,c]of Object.entries(t.filter))l[e]=o.optional(o.union(c,O(c,i)));const u=new Set(t.orderBy),f=t.orderBy.length===0?o.string().check(()=>!1,{message:"no sortable columns are declared for this endpoint"}):o.union(...t.orderBy.map(e=>o.literal(e)));return{args:{cursor:o.optional(o.union(o.string(),o.number(),o.null())),limit:o.optional(o.number()),orderBy:o.optional(o.array(o.object({direction:o.optional(o.union(o.literal("asc"),o.literal("desc"))),field:f}))),where:o.optional(o.object(l))},toQueryArgs:e=>{const c=e.orderBy?.filter(d=>u.has(d.field)).slice(0,s).map(d=>({[d.field]:d.direction??"asc"})),m=e.where===void 0?void 0:B(e.where,a,i);return{...e.cursor===void 0?{}:{cursor:typeof e.cursor=="number"?String(e.cursor):e.cursor},limit:g(e.limit,r,n),...c===void 0||c.length===0?{}:{orderBy:c},...m===void 0?{}:{where:m}}}}};export{h as DEFAULT_LIMIT,y as DEFAULT_MAX_IN_VALUES,b as DEFAULT_MAX_LIMIT,A as DEFAULT_MAX_ORDER_BY,g as clampLimit,E as defineListArgs,p as normalizeBound,B as sanitizeWhere};

package/dist/packem_shared/LunoraEnvError-CjFbbR9t.mjs

@@ -0,0 +1,3 @@
+import{LunoraError as A}from"@lunora/errors";import{optionalInner as h}from"@lunora/values";const b=[/^sk_/u,/^pk_/u,/^rk_/u,/^ghp_/u,/^gho_/u,/^ghs_/u,/^ghr_/u,/^github_pat_/u,/^xox[baprs]-/u,/^AKIA/u,/^AIza/u,/^Bearer\s/u],L=/[\w./+-]{24,}/gu,w=/^[\w./+-]+$/u,D=/\b(?:(?:sk|pk|rk|ghp|gho|ghs|ghr)_[\w./+-]*|github_pat_[\w./+-]*|xox[baprs]-[\w./+-]*)/gu,N=/\b(?:AKIA|AIza)[\w./+-]+|Bearer\s+[\w./+-]+/gu,S=/\b([a-z][\w.+-]*:\/\/[\w.%+-]+):[\w.%+-]+@/gu,a="[redacted]",d=/(?:KEY|PASSWORD|SECRET|TOKEN)$/u,T=t=>{if(b.some(n=>n.test(t)))return!0;const e=t.trim();return e.length>=24&&w.test(e)},p=/(["'])(?<inner>(?:\\.|(?!\1).)*)\1/gu,v=/\b(?<key>[A-Za-z_]\w*)\s*[=:]\s*\S+/gu,I=t=>{let e=t;return e=e.replaceAll(p,(n,...r)=>{const o=r.at(-1);return o?.inner!==void 0&&T(o.inner)?a:n}),e=e.replaceAll(S,(n,r)=>`${r}:${a}@`),e=e.replaceAll(D,a),e=e.replaceAll(N,a),e=e.replaceAll(v,(n,...r)=>{const o=r.at(-1);return o?.key!==void 0&&d.test(o.key)?`${o.key}=${a}`:n}),e=e.replaceAll(L,a),e},R=(t,e,n)=>{const r=I(t);return typeof n=="string"&&n!==""&&d.test(e)?r.replaceAll(n,a):r};class g extends A{failures;constructor(e){const n=e.map(r=>`  - ${r.key}: ${r.message}`).join(`
+`);super("ENV_INVALID",`Invalid environment (${String(e.length)} key(s)):
+${n}`,{name:"LunoraEnvError"}),this.failures=e}}const K=new Set(["1","on","true","yes"]),O=new Set(["0","false","no","off"]),y=/^-?\d+$/u,k=t=>{if(t.kind!=="optional")return t.kind;const e=h(t);return e?k(e):t.kind},$=(t,e)=>{if(typeof e!="string")return e;switch(k(t)){case"bigint":return y.test(e.trim())?BigInt(e.trim()):e;case"boolean":{const n=e.trim().toLowerCase();return K.has(n)?!0:O.has(n)?!1:e}case"number":{const n=e.trim();if(n==="")return e;const r=Number(n);return Number.isNaN(r)?e:r}default:return e}},_=(t,e,n,r)=>{const o=n[t];if(o===void 0&&e.kind==="optional")return{ok:!0,value:void 0};const c=e.safeParse($(e,o));return c.ok?{ok:!0,value:c.value}:(r.push({key:t,message:R(c.error.message,t,o)}),{ok:!1})},m=t=>{if(typeof t!="object"||t===null)throw new g([{key:"<env>",message:`expected an object, received ${t===null?"null":typeof t}`}]);return t},P=t=>{const e=Object.keys(t),n=new WeakMap,r=(o=>{const c=m(o);let i=n.get(c);i===void 0&&(i=new Map,n.set(c,i));const l=i,E=u=>{if(l.has(u))return l.get(u);const s=[],f=_(u,t[u],c,s);if(!f.ok)throw new g(s);return l.set(u,f.value),f.value};return new Proxy({},{get(u,s){if(!(typeof s!="string"||!(s in t)))return E(s)},getOwnPropertyDescriptor(u,s){if(typeof s=="string"&&s in t)return{configurable:!0,enumerable:!0,value:E(s),writable:!1}},has(u,s){return typeof s=="string"&&s in t},ownKeys(){return e}})});return r.parse=o=>{const c=m(o),i=[],l={};for(const E of e){const u=_(E,t[E],c,i);u.ok&&u.value!==void 0&&(l[E]=u.value)}if(i.length>0)throw new g(i);return l},r};export{g as LunoraEnvError,P as defineEnv,I as redactSecrets};

package/dist/packem_shared/LunoraError-DcKdk9Ti.mjs

@@ -0,0 +1 @@
+import{LunoraError as a}from"@lunora/errors";class u extends a{constructor(r,o,s){super(r,o,{data:s})}}export{u as LunoraError};

package/dist/packem_shared/PRESENCE_DEFAULT_TTL_MS-DdrSmNQi.mjs

@@ -0,0 +1 @@
+import{v as t}from"@lunora/values";import{initLunora as R}from"./initLunora-CgovElX2.mjs";import{LunoraError as S}from"./LunoraError-DcKdk9Ti.mjs";import{onDisconnect as T}from"./onConnect-DI23ecHU.mjs";import{g,h as q,a as v}from"./plugin-CV2Fae9w.mjs";const D=3e4,p=4096,u="presence",b="present",m=`${u}_${b}`,M=g(u,{tables:{[b]:q({data:t.optional(t.record(t.string(),t.any())),lastSeen:t.number(),roomId:t.string(),sessionId:t.string(),userId:t.optional(t.string())}).index("byRoomSession",["roomId","sessionId"]).index("byRoom",["roomId"])}}),{mutation:E,query:A}=R.dataModel().create(),F=(f={})=>{const I=f.ttlMs??D,w=Math.max(0,Math.min(f.disconnectGraceMs??0,I)),y=E.input({data:t.optional(t.record(t.string(),t.any())),roomId:t.string(),sessionId:t.string()}).mutation(async({args:o,ctx:n})=>{const r=Date.now(),i=n.auth.userId??void 0;if(o.data!==void 0&&new TextEncoder().encode(JSON.stringify(o.data)).length>p)throw new S("BAD_REQUEST",`presence data exceeds the ${String(p)}-byte limit`);const e=await n.db.query(m).withIndex("byRoomSession",c=>c.eq("roomId",o.roomId).eq("sessionId",o.sessionId)).first();if(e&&(e.userId??void 0)!==i)throw new S("FORBIDDEN","presence heartbeat denied: this (roomId, sessionId) is held by another identity");const d={lastSeen:r,roomId:o.roomId,sessionId:o.sessionId,...o.data===void 0?{}:{data:o.data},...i===void 0?{}:{userId:i}};return await(e?n.db.patch(e._id,d):n.db.insert(m,d)),{lastSeen:r}}),h=A.input({roomId:t.string()}).query(async({args:o,ctx:n})=>{const r=Date.now()-I,e=(await n.db.query(m).withIndex("byRoom",s=>s.eq("roomId",o.roomId)).collect()).filter(s=>s.lastSeen>r).toSorted((s,a)=>a.lastSeen-s.lastSeen),d=new Set,c=[];for(const s of e){const a=s.userId;if(a!==void 0){if(d.has(a))continue;d.add(a)}const l={lastSeen:s.lastSeen,roomId:s.roomId};a!==void 0&&(l.userId=a),s.data!==void 0&&(l.data=s.data),c.push(l)}return c}),_={...E.input({roomId:t.string()}).mutation(async({args:o,ctx:n})=>{const r=Date.now()-I,i=await n.db.query(m).withIndex("byRoom",e=>e.eq("roomId",o.roomId)).filter(e=>e.lastSeen<=r).collect();return await Promise.all(i.map(e=>n.db.delete(e._id))),{deleted:i.length}}),visibility:"internal"},x=T(async(o,n)=>{const r=n.context?.roomId,i=n.context?.sessionId;if(typeof r!="string"||typeof i!="string")return;const e=await o.db.query(m).withIndex("byRoomSession",s=>s.eq("roomId",r).eq("sessionId",i)).first();if(!e)return;const d=n.userId??void 0;if((e.userId??void 0)!==d)return;if(w===0){await o.db.delete(e._id);return}const c=Math.min(e.lastSeen,Date.now()+w-I);await o.db.patch(e._id,{lastSeen:c})});return v(u,{extension:M,functions:{disconnect:x,heartbeat:y,listPresent:h,sweep:_}})};export{D as PRESENCE_DEFAULT_TTL_MS,m as PRESENCE_TABLE,F as definePresence,M as presenceExtension};

package/dist/packem_shared/allowAll-DkRAgItV.mjs

@@ -0,0 +1 @@
+const r=()=>({OR:[]}),n=()=>({}),e=t=>Array.isArray(t.OR)&&t.OR.length===0&&Object.keys(t).length===1,l=t=>t===!0||t===void 0?n():t===!1?r():t;export{n as allowAll,r as deny,e as isDeny,l as toWhereInput};

package/dist/packem_shared/bindOrm-lWdeDi9P.mjs

@@ -0,0 +1 @@
+import{LunoraError as h}from"@lunora/errors";const u=e=>typeof e=="object"&&e!==null&&e.code==="CONFLICT"&&e.kind==="unique",a=(e,t,i)=>{const r=typeof t=="string"?[t]:t;if(r.length===0)throw new h("INTERNAL",`ctx.db.${e}.upsert: "target" must name at least one field`);const n={};for(const s of r){if(!(s in i))throw new h("INTERNAL",`ctx.db.${e}.upsert: target field "${s}" is missing from the create document`);n[s]=i[s]}return n},f=(e,t)=>{const i=async(n,s)=>{if(s?.skipDuplicates!==!0)return e.insert(t,n);try{return await e.insert(t,n)}catch(o){if(u(o))return null;throw o}},r=async({create:n,target:s,update:o})=>{const d=a(t,s,n),c=await e.findFirst(t,{where:d});return c&&typeof c._id=="string"?(await e.patch(c._id,o??n,t),{created:!1,id:c._id}):{created:!0,id:await e.insert(t,n)}};return{aggregate:n=>e.aggregate(t,n),count:n=>e.count(t,n),delete:n=>e.delete(n,t),deleteMany:(n,s)=>{if(Array.isArray(n)){if(e.deleteMany===void 0)throw new h("INTERNAL",`ctx.db.${t}.deleteMany is unavailable: this writer has no batch delete`);return e.deleteMany(n,s,t)}if(e.deleteWhere===void 0)throw new h("INTERNAL",`ctx.db.${t}.deleteMany({ where }) is unavailable: this writer has no where-based delete`);const o=n;return e.deleteWhere(t,o.where,{limit:o.limit})},exists:async n=>await e.findFirst(t,n===void 0?void 0:{where:n})!==null,findFirst:n=>e.findFirst(t,n),findFirstOrThrow:n=>e.findFirstOrThrow(t,n),findMany:n=>e.findMany(t,n),get:n=>e.get(n,t),groupBy:n=>e.groupBy(t,n),hardDelete:n=>e.delete(n,t,{hard:!0}),insert:i,insertMany:(n,s)=>{if(e.insertMany===void 0)throw new h("INTERNAL",`ctx.db.${t}.insertMany is unavailable: this writer has no batch insert`);return e.insertMany(t,n,s)},patch:(n,s)=>e.patch(n,s,t),patchMany:(n,s)=>{if(Array.isArray(n)){if(e.patchMany===void 0)throw new h("INTERNAL",`ctx.db.${t}.patchMany is unavailable: this writer has no batch patch`);return e.patchMany(n.map(d=>({id:d.id,patch:d.values})),s,t)}if(e.patchWhere===void 0)throw new h("INTERNAL",`ctx.db.${t}.patchMany({ where, values }) is unavailable: this writer has no where-based patch`);const o=n;return e.patchWhere(t,{patch:o.values,where:o.where},{limit:o.limit})},rank:(n,s)=>e.rank(t,n,s),rankPage:(n,s)=>e.rankPage(t,n,s),replace:(n,s)=>e.replace(n,s,t),restore:async n=>{if(!e.restore)throw new h("INTERNAL",`ctx.db.${t}.restore is unavailable: this writer has no restore (is the table .softDelete()?)`);await e.restore(n,t)},upsert:r,upsertMany:async({rows:n,target:s})=>{const o=[];for(const d of n)o.push(await r({create:d.create,target:s,update:d.update}));return o},withGeoIndex:(n,s)=>e.query(t).withGeoIndex(n,s),withSearchIndex:(n,s)=>e.query(t).withSearchIndex(n,s)}},l=e=>{const t=i=>{const r=e[i];if(!r)throw new h("INTERNAL",`unknown table: ${i}`);return r};return{delete:(i,r)=>t(i).delete(r),insert:i=>({values:r=>t(i).insert(r)}),query:e,replace:(i,r)=>({with:n=>t(i).replace(r,n)}),update:(i,r)=>({set:n=>t(i).patch(r,n)})}};export{l as bindOrm,f as bindTableFacade};

package/dist/packem_shared/buildMaskRegistry-72SL8fJn.mjs

@@ -0,0 +1 @@
+const r=Symbol.for("lunora.mask.middleware-columns"),f=(t,e)=>(Object.defineProperty(t,r,{configurable:!0,enumerable:!1,value:e}),t),l=t=>{if(!(t===null||typeof t!="function"&&typeof t!="object"))return t[r]},b=t=>{const e=new Map;for(const c of t){const o=c?.maskedTables;if(o)for(const[n,a]of o){const s=e.get(n)??new Set;for(const u of a)s.add(u);e.set(n,s)}}return e};export{b as buildMaskRegistry,l as readMaskTag,f as tagMaskMiddleware};

package/dist/packem_shared/buildRlsReadRegistry-Deq8inqS.mjs

@@ -0,0 +1 @@
+import{i as d,c as f,d as h}from"./middleware-DEW0yLvU.mjs";import{r as p}from"./policy-tag-D4RzgQnw.mjs";import{deny as g}from"./allowAll-DkRAgItV.mjs";const c=g(),u=s=>{const e=s?.rls?.tags;if(e)return e;const t=p(s);return t?[t]:[]},b=(s,e)=>{const t=d(e.roles),n=new Map,r=new Map;for(const o of e.policies){if(o.on!=="read")continue;const a=n.get(o.table)??new Set;if(a.has(o.when))continue;a.add(o.when),n.set(o.table,a);const i=r.get(o.table)??[];i.push(o),r.set(o.table,i)}for(const[o,a]of r){const i=s.get(o)??[];i.push({policies:a,rolePermissions:t}),s.set(o,i)}},l=s=>{const e=s.OR;return Array.isArray(e)&&e.length===0&&Object.keys(s).length===1},y=(s,e)=>!s||Object.keys(s).length===0?e:l(s)||Object.keys(e).length===0?s:{AND:[s,e]},R=(s,e)=>f(s.policies,{auth:{can:h(e.roles,s.rolePermissions),identity:e.identity,roles:e.roles,userId:e.userId},ctx:e.ctx}),m=(s,e)=>{const t=s.byTable.get(e.table);if(!t||t.length===0)return e.rlsRequired&&!e.tablePublic?c:void 0;const n=[];for(const r of t){const o=R(r,e);if(o===void 0)return;l(o)||n.push(o)}return n.length===0?c:n.length===1?n[0]:{OR:n}},P=s=>{const e=new Map,t=new Set;for(const n of s)for(const r of u(n))t.has(r)||(t.add(r),b(e,r));return{byTable:e}},W=(s,e)=>y(m(s,e),e.shapeWhere);export{P as buildRlsReadRegistry,W as composeShapeReadWhere};

package/dist/packem_shared/composePluginMiddleware-CDp6YMxA.mjs

@@ -0,0 +1 @@
+import"./run-middleware-B-JeGGp9.mjs";import{c as i,a as s,b as o,g as m,k as l,m as t}from"./plugin-CV2Fae9w.mjs";export{i as composePluginMiddleware,s as defineComponent,o as definePlugin,m as defineSchemaExtension,l as installPlugins,t as mergeSchemaExtension};

package/dist/packem_shared/context-identity-B2XYGA0B.mjs

@@ -0,0 +1 @@
+const s=e=>e?.auth?.userId??void 0;export{s as c};

package/dist/packem_shared/createPolicyDsl-DNfByAUX.mjs

@@ -0,0 +1 @@
+import{LunoraError as s}from"@lunora/errors";const a=e=>({on:e.on,table:e.table,when:e.when}),c=()=>e=>({on:e.on,table:e.table,when:e.when}),l=(e,n={})=>({name:e,...n}),d=e=>{const n=new Map;for(const o of e){const r=JSON.stringify([o.table,o.on]),t=n.get(r)??new Set;if(t.has(o.when))throw new s("INTERNAL",`definePolicies: duplicate policy for (table "${o.table}", on "${o.on}") — the same decision function is registered more than once. Multiple distinct policies per (table, on) are allowed (reads OR, writes AND); remove the duplicate.`);t.add(o.when),n.set(r,t)}return e},h=(e,n={})=>({name:e,...n});export{c as createPolicyDsl,l as definePermission,d as definePolicies,a as definePolicy,h as defineRole};

package/dist/packem_shared/{createSecrets-CgVPiW2C.mjs → createSecrets-CyrEddTF.mjs}

@@ -1 +1 @@
-import{LunoraError as n}from"@lunora/errors";const o=["put","list","delete","getWithMetadata","head","createMultipartUpload","idFromName","newUniqueId","getByName","send","sendBatch","writeDataPoint","create","createBatch"],a=t=>{if(typeof t!="object"||t===null)return!1;const e=t;return typeof e.get!="function"?!1:!o.some(r=>typeof e[r]=="function")},c=t=>({get:async e=>{const r=t[e];if(!a(r))throw new n("INTERNAL",`ctx.secrets: no Secrets Store binding named "${e}". Add a \`secrets_store_secrets[]\` entry (binding "${e}", pointing at your store + secret) to wrangler.jsonc — \`ctx.secrets\` reads a Secrets Store binding, not a plain \`.dev.vars\` value.`);return r.get()}});export{c as createSecrets};
+import{LunoraError as n}from"@lunora/errors";const o=["put","list","delete","getWithMetadata","head","createMultipartUpload","idFromName","newUniqueId","getByName","send","sendBatch","writeDataPoint","create","createBatch"],s=t=>{if(typeof t!="object"||t===null)return!1;const e=t;return typeof e.get!="function"?!1:!o.some(r=>typeof e[r]=="function")},c=t=>({get:async e=>{const r=t[e];if(!s(r))throw new n("INTERNAL",`ctx.secrets: no Secrets Store binding named "${e}". Add a \`secrets_store_secrets[]\` entry (binding "${e}", pointing at your store + secret) to wrangler.jsonc — \`ctx.secrets\` reads a Secrets Store binding, not a plain \`.dev.vars\` value.`);return r.get()}});export{c as createSecrets};

package/dist/packem_shared/defineAggregateIndex-B8PoMQ72.mjs

@@ -0,0 +1 @@
+import{d,e as n,f as i,h as s,i as f,j as x,v as r}from"./plugin-CV2Fae9w.mjs";export{d as defineAggregateIndex,n as defineRankIndex,i as defineSchema,s as defineTable,f as defineVectorIndex,x as indexFieldsFromSchema,r as validateIndexFields};

package/dist/packem_shared/{defineIdentity-B7gfAgxx.mjs → defineIdentity-p1mHXs8W.mjs}

@@ -1 +1 @@
-import{LunoraError as d}from"@lunora/errors";import{parseValidatorMap as s,ValidationError as l}from"@lunora/values";const u=new Set(["array","bigint","boolean","bytes","date","null","number","object","optional","record","timestamp"]),I=(n,o={})=>{const r=n,e=r.userId;if(e===void 0||u.has(e.kind))throw new d("INTERNAL","defineIdentity: the claim map must declare a required string `userId` validator (e.g. `v.string()` or `v.id(...)`)");const a=o.onInvalid??"anonymous";return{__lunoraIdentity:!0,claims:r,onInvalid:a,validate:i=>{try{return s(r,i,"identity"),{ok:!0}}catch(t){return{error:t instanceof l?t.message:String(t),ok:!1}}}}};export{I as defineIdentity};
+import{LunoraError as d}from"@lunora/errors";import{parseValidatorMap as s,ValidationError as l}from"@lunora/values";const u=new Set(["array","bigint","boolean","bytes","date","null","number","object","optional","record","timestamp"]),p=(o,a={})=>{const r=o,e=r.userId;if(e===void 0||u.has(e.kind))throw new d("INTERNAL","defineIdentity: the claim map must declare a required string `userId` validator (e.g. `v.string()` or `v.id(...)`)");const n=a.onInvalid??"anonymous";return{__lunoraIdentity:!0,claims:r,onInvalid:n,validate:i=>{try{return s(r,i,"identity"),{ok:!0}}catch(t){return{error:t instanceof l?t.message:String(t),ok:!1}}}}};export{p as defineIdentity};

package/dist/packem_shared/defineMigration-7GI9Qbtd.mjs

@@ -0,0 +1 @@
+import{LunoraError as o}from"@lunora/errors";const t=r=>{if(r.id.trim()==="")throw new o("INTERNAL","defineMigration: `id` must be a non-empty string");return{__lunoraMigration:!0,...r}};export{t as defineMigration};

package/dist/packem_shared/defineMutator-DKy8UtbB.mjs

@@ -0,0 +1 @@
+import{LunoraError as a}from"@lunora/errors";import{c as u}from"./context-identity-B2XYGA0B.mjs";import{v as c}from"./functions-B2-H4PQT.mjs";const w=(r,s,t)=>{if(r.trim()==="")throw new a("INTERNAL",'defineMutator: `owner` must name the column carrying the row owner (e.g. `owner: "userId"`)');const e=u(s);if(e===void 0)throw new a("UNAUTHORIZED","defineMutator: an owner-scoped mutator requires a verified identity; none was resolved for this request");const o=t,n=o[r];if(n!==void 0&&n!==e)throw new a("FORBIDDEN",`defineMutator: \`${r}\` does not match the verified identity — a mutator may only write rows its caller owns`);return o[r]=e,t},h=r=>({__lunoraMutator:!0,...r,handler:async(t,e)=>{const o=c(r.args??{},e),n=r.owner===void 0?o:w(r.owner,t,o);return r.server(t,n)},kind:"mutation"});export{h as defineMutator};

package/dist/packem_shared/defineShape-DYxbNl5W.mjs

@@ -0,0 +1 @@
+import{LunoraError as r}from"@lunora/errors";import{c as p}from"./context-identity-B2XYGA0B.mjs";import{v as u}from"./functions-B2-H4PQT.mjs";import{toWhereInput as d,deny as m}from"./allowAll-DkRAgItV.mjs";const I=e=>{if(e.table.trim()==="")throw new r("INTERNAL","defineShape: `table` must be a non-empty string");if(e.columns?.length===0)throw new r("INTERNAL","defineShape: `columns` must list at least one column when provided");if(!e.where&&e.owner===void 0)throw new r("INTERNAL",`defineShape: shape on table "${e.table}" needs a \`where\` predicate or an \`owner\` (\`owner: true\` uses the table's .ownedBy(field), \`owner: "field"\` names the column) — a shape with neither would replicate the whole table`);return{__lunoraShape:!0,...e,compileWhere:(a,l,s)=>{const w=u(e.args??{},l),o=e.where?d(e.where(a,w)):void 0;if(e.owner===void 0)return o;const t=e.owner===!0?s?.ownerField:e.owner;if(t===void 0||t==="")throw new r("INTERNAL",`defineShape: shape on table "${e.table}" declares \`owner: true\` but the table has no \`.ownedBy(field)\` — add it to the table, or name the column directly with \`owner: "field"\``);const h=p(a);if(h===void 0)return m();const n={[t]:h};return o===void 0?n:{AND:[n,o]}}}};export{I as defineShape};

package/dist/packem_shared/{defineStorageRule-BDu01PUn.mjs → defineStorageRule-BvxHVq3b.mjs}

@@ -1 +1 @@
-import{LunoraError as i}from"@lunora/errors";const c=r=>({bucket:r.bucket,on:r.on,prefix:r.prefix,when:r.when}),f=r=>{const n=new Map;for(const e of r){const t=JSON.stringify([e.bucket,e.on,e.prefix]),o=n.get(t)??new Set;if(o.has(e.when))throw new i("INTERNAL",`defineStorageRules: duplicate rule for (bucket "${e.bucket}", on "${e.on}"${e.prefix===void 0?"":`, prefix "${e.prefix}"`}) — the same decision function is registered more than once. Multiple distinct rules per (bucket, on) are allowed (they OR); remove the duplicate.`);o.add(e.when),n.set(t,o)}return r};export{c as defineStorageRule,f as defineStorageRules};
+import{LunoraError as i}from"@lunora/errors";const c=r=>({bucket:r.bucket,on:r.on,prefix:r.prefix,when:r.when}),f=r=>{const o=new Map;for(const e of r){const t=JSON.stringify([e.bucket,e.on,e.prefix]),n=o.get(t)??new Set;if(n.has(e.when))throw new i("INTERNAL",`defineStorageRules: duplicate rule for (bucket "${e.bucket}", on "${e.on}"${e.prefix===void 0?"":`, prefix "${e.prefix}"`}) — the same decision function is registered more than once. Multiple distinct rules per (bucket, on) are allowed (they OR); remove the duplicate.`);n.add(e.when),o.set(t,n)}return r};export{c as defineStorageRule,f as defineStorageRules};

package/dist/packem_shared/functions-B2-H4PQT.mjs

@@ -0,0 +1 @@
+import{parseValidatorMap as o}from"@lunora/values";const t=(a,r)=>o(a,r,"args");export{t as v};

package/dist/packem_shared/httpAction-Ddi7f0t6.mjs

@@ -0,0 +1,5 @@
+import{toErrorBody as S}from"@lunora/errors";import{parseValidatorMap as R,ValidationError as k}from"@lunora/values";import{Hono as _}from"hono";import{LunoraError as p}from"./LunoraError-DcKdk9Ti.mjs";const M=e=>async t=>e(t.get("lunora"),t.req.raw),F=()=>{const e=new _;return e.use("*",async(t,r)=>{const n=t.env.__lunoraCtx;if(!n)throw new p("INTERNAL_SERVER_ERROR","HttpActionCtx was not injected — mount httpRouter() on createWorker(), which supplies it per request.");t.set("lunora",n),await r()}),e},N=e=>e.kind==="optional"?e._meta?.inner??e:e,g=(e,t)=>{switch(e){case"bigint":try{return BigInt(t)}catch{return t}case"boolean":return t==="true"||t==="1"?!0:t==="false"||t==="0"?!1:t;case"number":return t===""?Number.NaN:Number(t);default:return t}},P=(e,t,r)=>{const n=N(e);if(n.kind==="array"){const c=t.req.queries(r);if(c===void 0)return;const o=n._meta?.inner;return c.map(s=>g(o?.kind??"string",s))}const a=t.req.query(r);return a===void 0?void 0:g(n.kind,a)},T=(e,t)=>{const r={};for(const n of Object.keys(e)){const a=e[n];a&&(r[n]=P(a,t,n))}return R(e,r,"searchParams")},v=(e,t)=>{const r=t.req.param(),n={};for(const a of Object.keys(e)){const c=e[a];if(!c)continue;const o=r[a];n[a]=o===void 0?void 0:g(N(c).kind,o)}return R(e,n,"params")},A=async(e,t)=>{let r;try{r=await t.req.json()}catch{throw new p("BAD_REQUEST","Invalid JSON body")}if(typeof r!="object"||r===null||Array.isArray(r))throw new p("BAD_REQUEST","Expected a JSON object body");return R(e,r,"body")},x=(e,t)=>{try{return e.parse(t)}catch(r){throw r instanceof k?new p("INTERNAL_SERVER_ERROR",`Response did not match the declared output schema: ${r.message}`):r}},O=e=>{if(e instanceof k)return Response.json({code:"BAD_REQUEST",error:e.message},{status:400});if(e instanceof p){const{body:t,redacted:r,status:n}=S(e,{fallbackCode:"INTERNAL_SERVER_ERROR",redactedMessage:"Internal error"});return r&&console.error("[lunora] http action error (redacted on the wire):",e),Response.json({code:t.code,error:t.message},{status:n})}throw e},q=(e,t)=>async r=>{try{const n=r.get("lunora"),a=Object.keys(e.searchParams).length>0?T(e.searchParams,r):{},c=Object.keys(e.params).length>0?v(e.params,r):{},o=Object.keys(e.body).length>0?await A(e.body,r):{},s=await t({body:o,ctx:n,params:c,searchParams:a}),u=e.output?x(e.output,s):s,i={};e.cacheControl&&(i["cache-control"]=e.cacheControl),e.cacheTag&&(i["cache-tag"]=e.cacheTag),e.vary&&(i.vary=e.vary);const f=Object.keys(i).length>0;return u===void 0?new Response(null,{headers:f?i:void 0,status:204}):Response.json(u,{headers:f?i:void 0})}catch(n){return O(n)}},E={"cache-control":"no-cache, no-transform","content-type":"text/event-stream; charset=utf-8","x-accel-buffering":"no"},b=(e,t)=>{const r=JSON.stringify(e);return`${t?`event: ${t}
+`:""}data: ${r}
+
+`},C=(e,t)=>(async r=>{let n,a;try{n=Object.keys(e.searchParams).length>0?T(e.searchParams,r):{},a=Object.keys(e.params).length>0?v(e.params,r):{}}catch(h){return O(h)}const c=r.get("lunora"),o=r.req.raw,s=new TextEncoder,u=new AbortController;if(o.signal.aborted)return u.abort(),new Response("",{headers:E});const i=()=>{u.abort()};o.signal.addEventListener("abort",i,{once:!0});const f=new ReadableStream({cancel(){o.signal.removeEventListener("abort",i),u.abort()},async start(h){try{const m=t({ctx:c,params:a,request:o,searchParams:n,signal:u.signal});for await(const y of m){if(u.signal.aborted)break;h.enqueue(s.encode(b(y)))}h.enqueue(s.encode(b({},"complete")))}catch(m){const{body:y,redacted:j}=S(m,{fallbackCode:"INTERNAL_SERVER_ERROR",redactedMessage:"Internal error"});j&&console.error("[lunora] unhandled stream handler error:",m),h.enqueue(s.encode(b({code:y.code,message:y.message},"error")))}finally{o.signal.removeEventListener("abort",i),h.close()}}});return new Response(f,{headers:E})}),d=e=>({body:t=>d({...e,body:{...e.body,...t}}),cacheControl:t=>d({...e,cacheControl:t}),cacheTag:t=>d({...e,cacheTag:t}),handler:t=>q(e,t),output:t=>d({...e,output:t}),params:t=>d({...e,params:{...e.params,...t}}),searchParams:t=>d({...e,searchParams:{...e.searchParams,...t}}),stream:t=>C(e,t),vary:t=>d({...e,vary:t})}),l=e=>t=>d({body:{},method:e,params:{},path:t,searchParams:{}}),U={delete:l("DELETE"),get:l("GET"),head:l("HEAD"),options:l("OPTIONS"),patch:l("PATCH"),post:l("POST"),put:l("PUT")},H=/^bytes=(\d*)-(\d*)$/,w=e=>e.startsWith('"')||e.startsWith('W/"')?e:`"${e}"`,$=e=>!(e.includes("\r")||e.includes(`
+`)||e.includes("\0")),B=(e,t)=>{if(e===null)return{kind:"full"};const r=H.exec(e.trim());if(!r)return{kind:"full"};const n=r[1]??"",a=r[2]??"";if(n===""&&a==="")return{kind:"full"};let c,o;if(n===""){const s=Number(a);if(s===0)return{kind:"unsatisfiable"};c=Math.max(0,t-s),o=t-1}else c=Number(n),o=a===""?t-1:Math.min(Number(a),t-1);return c>o||c>=t?{kind:"unsatisfiable"}:{end:o,kind:"partial",start:c}},W=async(e,t,r)=>{const n=await e.storage.download(t);if(!n)return new Response("Not Found",{status:404});const a=n.httpMetadata?.contentType,o={"accept-ranges":"bytes","content-type":a!==void 0&&$(a)?a:"application/octet-stream",etag:w(n.etag)};n.sha256Base64!==void 0&&(o["repr-digest"]=`sha-256=:${n.sha256Base64}:`);const s=B(r.headers.get("range"),n.size);if(s.kind==="unsatisfiable")return n.body?.cancel().catch(()=>{}),new Response("Range Not Satisfiable",{headers:{"accept-ranges":"bytes","content-range":`bytes */${String(n.size)}`,"content-type":"text/plain; charset=utf-8",etag:w(n.etag)},status:416});if(s.kind==="full")return new Response(n.body,{headers:{...o,"content-length":String(n.size)},status:200});n.body?.cancel().catch(()=>{});const u=s.end-s.start+1,i=await e.storage.download(t,{range:{length:u,offset:s.start}});return i?new Response(i.body,{headers:{...o,"content-length":String(u),"content-range":`bytes ${String(s.start)}-${String(s.end)}/${String(n.size)}`},status:206}):new Response("Not Found",{status:404})};export{M as httpAction,U as httpRoute,F as httpRouter,$ as isSafeHeaderValue,W as serveStorageObject};

package/dist/packem_shared/initLunora-CgovElX2.mjs

@@ -0,0 +1 @@
+import{v as f}from"./functions-B2-H4PQT.mjs";import{readMaskTag as i}from"./buildMaskRegistry-72SL8fJn.mjs";import{r as M}from"./policy-tag-D4RzgQnw.mjs";import{r as h}from"./run-middleware-B-JeGGp9.mjs";const _=(e,r)=>r===void 0||typeof e!="object"||e===null?e:Object.assign(Object.create(Object.getPrototypeOf(e)),e,{meta:r}),x=(e,r)=>h(e,r,o=>o),j=(e,r,o,a,s)=>async(n,u)=>{const c=f(e,u),t=await x(r,_(n,s)),l=await o({args:c,ctx:t});return a?a.parse(l):l},q=(e,r,o)=>(a,s,n)=>{const u=f(e,s);return(async function*(){const t=await x(r,a),m=o({args:u,ctx:t,signal:n})[Symbol.asyncIterator]();try{for(;;){if(n.aborted)return;const w=await m.next();if(w.done||n.aborted)return;yield w.value}}finally{await m.return?.()}})()},g=e=>{const r=e.map(o=>M(o)).filter(o=>o!==void 0);return r.length>0?{tags:r}:void 0},p=e=>{const r=new Map;for(const o of e){const a=i(o);if(a)for(const[s,n]of a.columns){const u=r.get(s)??new Set;for(const c of n)u.add(c);r.set(s,u)}}return r.size>0?r:void 0},d=(e,r,o)=>({__lunoraProcedure:e,...o?{__lunoraVisibility:o}:{},input:a=>d(e,{...r,args:{...r.args,...a}},o),[e]:a=>{const s=g(r.middlewares),n=p(r.middlewares);return{args:r.args,...r.expose?{expose:r.expose}:{},handler:j(r.args,r.middlewares,a,r.output,r.meta),kind:e,...n?{maskedTables:n}:{},...r.meta?{meta:r.meta}:{},...s?{rls:s}:{},...o?{visibility:o}:{},...r.x402?{x402:r.x402}:{}}},meta:a=>d(e,{...r,meta:{...r.meta,...a}},o),output:a=>d(e,{...r,output:a},o),...e==="query"?{stream:(a,s)=>{const n=g(r.middlewares),u=p(r.middlewares),c=s?.durable===!0?{}:s?.durable;return{args:r.args,...c?{durable:c}:{},...r.expose?{expose:r.expose}:{},handler:q(r.args,r.middlewares,a),kind:"stream",...u?{maskedTables:u}:{},...n?{rls:n}:{},...o?{visibility:o}:{},...r.x402?{x402:r.x402}:{}}}}:{},use:a=>d(e,{...r,middlewares:[...r.middlewares,a]},o),...o?{}:{expose:a=>d(e,{...r,expose:a},o)},...o?{}:{x402:a=>d(e,{...r,x402:a},o)}}),b={dataModel:()=>({create:e=>({action:d("action",{args:{},middlewares:[]}),internalAction:d("action",{args:{},middlewares:[]},"internal"),internalMutation:d("mutation",{args:{},middlewares:[]},"internal"),internalQuery:d("query",{args:{},middlewares:[]},"internal"),mutation:d("mutation",{args:{},middlewares:[]}),query:d("query",{args:{},middlewares:[]})})})};export{b as initLunora};

package/dist/packem_shared/mask-CfHNITgg.mjs

@@ -0,0 +1 @@
+import{LunoraError as P}from"./LunoraError-DcKdk9Ti.mjs";import{bindTableFacade as j,bindOrm as E}from"./bindOrm-lWdeDi9P.mjs";import{i as _,a as D,o as v,b as K}from"./middleware-DEW0yLvU.mjs";import{tagMaskMiddleware as q}from"./buildMaskRegistry-72SL8fJn.mjs";const G=e=>{let i=2166136261;for(let c=0;c<e.length;c+=1)i^=e.codePointAt(c)??0,i=Math.imul(i,16777619);return(i>>>0).toString(16).padStart(8,"0")},L=(e,i,c)=>{try{return e==="redact"?null:e==="hash"?i==null?i:G(typeof i=="string"?i:JSON.stringify(i)):e(i,c)}catch{return null}},a=(e,i,c)=>{const y={...e};for(const[h,g]of Object.entries(i))h in y&&(y[h]=L(g,e[h],{...c,column:h,row:e}));return y},W=(e,i,c)=>({...e,page:e.page.map(y=>a(y,i,c))}),B=(e,i,c,y)=>{if(typeof e!="function")return;const h=new Set,g=()=>new Proxy({},{get:()=>f=>(typeof f=="string"&&h.add(f),g())});e(g());for(const f of h)if(f in i)throw new P("MASK_UNSUPPORTED",`${y}() filtering "${c}" by masked column "${f}" is not supported`)},m=(e,i,c,y)=>{const h=e.rankBefore,g=e.rankPageRows,f=(r,n)=>{const t=i.get(r);return t?n.map(o=>a(o,t,c)):n},p=r=>{const n=r?.relationMask;return{...r,relationMask:n===void 0?f:(t,o)=>n(t,f(t,o))}},k=(r,n,t,o)=>{const s=i.get(r);if(!s)return;const d=y?.[r]?.[o]?.[n];if(!d)return;const w=d.find($=>$ in s);if(w!==void 0)throw new P("MASK_UNSUPPORTED",`${t}() reading "${r}" via index "${n}" would order rows by masked column "${w}" — use an index whose declared fields are all unmasked, or unmask the column`)},l=(r,n,t)=>({async*[Symbol.asyncIterator](){for await(const o of{[Symbol.asyncIterator]:()=>r[Symbol.asyncIterator]()})yield a(o,n,c)},collect:async()=>(await r.collect()).map(s=>a(s,n,c)),collectWithScores:async()=>(await r.collectWithScores()).map(s=>{const d=a(s.document,n,c);return"distanceMeters"in s?{distanceMeters:null,document:d}:{document:d,score:s.score}}),filter:o=>l(r.filter(s=>o(a(s,n,c))),n,t),first:async()=>{const o=await r.first();return o?a(o,n,c):null},order:o=>l(r.order(o),n,t),paginate:async o=>W(await r.paginate(o),n,c),take:async o=>(await r.take(o)).map(d=>a(d,n,c)),unique:async()=>{const o=await r.unique();return o?a(o,n,c):null},withIndex:(o,s)=>(k(t,o,"withIndex","index"),B(s,n,t,"withIndex"),l(r.withIndex(o,s),n,t)),withSearchIndex:(o,s)=>(B(s,n,t,"withSearchIndex"),l(r.withSearchIndex(o,s),n,t)),withGeoIndex:(o,s)=>(k(t,o,"withGeoIndex","geo"),l(r.withGeoIndex(o,s),n,t))}),S=async(r,n)=>{if(e.lookupById){const w=await e.lookupById(r,n);return w?{row:w.row,tableName:i.has(w.tableName)?w.tableName:void 0}:{row:null,tableName:void 0}}const t=await e.get(r,n);if(!t)return{row:null,tableName:void 0};const o=n!==void 0&&i.has(n)?[n]:[],s=n===void 0?[...i.keys()]:o,d=await Promise.all(s.map(async w=>(await e.findFirst(w,{limit:1,where:{_id:r}}))?._id===r?w:void 0));return{row:t,tableName:d.find(w=>w!==void 0)}},M=(r,n,t)=>{const o=i.get(r);if(!o)return;const s=n.find(d=>typeof d=="string"&&d in o);if(s!==void 0)throw new P("MASK_UNSUPPORTED",`${t}() over masked column "${s}" on "${r}" is not supported`)},R=(r,n)=>{if(!(!r||typeof r!="object"||Array.isArray(r)))for(const[t,o]of Object.entries(r))if(t==="AND"||t==="OR"){if(Array.isArray(o))for(const s of o)R(s,n)}else t==="NOT"?R(o,n):t.startsWith("__")||n.add(t)},u=(r,n,t)=>{const o=i.get(r);if(!o||n===void 0)return;const s=new Set;R(n,s);for(const d of s)if(d in o)throw new P("MASK_UNSUPPORTED",`${t}() filtering "${r}" by masked column "${d}" is not supported`)},I=(r,n,t)=>{const o=i.get(r);if(!(!o||!Array.isArray(n))){for(const s of n)if(s&&typeof s=="object"&&!Array.isArray(s)){for(const d of Object.keys(s))if(d in o)throw new P("MASK_UNSUPPORTED",`${t}() ordering "${r}" by masked column "${d}" is not supported`)}}},F=r=>r&&typeof r=="object"&&!Array.isArray(r)?r:void 0,A=(r,n,t)=>{const o=F(n);u(r,o?.where,t),u(r,o?.baseWhere,t)},O={...e,async deleteWhere(r,n,t){if(u(r,n,"deleteMany({ where })"),e.deleteWhere===void 0)throw new P("INTERNAL",`ctx.db.${r}.deleteMany({ where }) is unavailable: this writer has no where-based delete`);return e.deleteWhere(r,n,t)},async patchWhere(r,n,t){if(u(r,n.where,"patchMany({ where })"),e.patchWhere===void 0)throw new P("INTERNAL",`ctx.db.${r}.patchMany({ where }) is unavailable: this writer has no where-based patch`);return e.patchWhere(r,n,t)},aggregate(r,n){return M(r,[n.field],"aggregate"),u(r,n.where,"aggregate"),e.aggregate(r,n)},count(r,n){const t=F(n),o=t&&("where"in t||"baseWhere"in t||"restrictsCounts"in t)?t.where:n;return u(r,o,"count"),t&&u(r,t.baseWhere,"count"),e.count(r,n)},async findFirst(r,n){u(r,n?.where,"findFirst"),u(r,n?.baseWhere,"findFirst"),I(r,n?.orderBy,"findFirst");const t=await e.findFirst(r,p(n)),o=i.get(r);return t&&o?a(t,o,c):t},async findFirstOrThrow(r,n){u(r,n?.where,"findFirstOrThrow"),u(r,n?.baseWhere,"findFirstOrThrow"),I(r,n?.orderBy,"findFirstOrThrow");const t=await e.findFirstOrThrow(r,p(n)),o=i.get(r);return o?a(t,o,c):t},async findMany(r,n){u(r,n?.where,"findMany"),u(r,n?.baseWhere,"findMany"),I(r,n?.orderBy,"findMany");const t=await e.findMany(r,p(n)),o=i.get(r);return o?W(t,o,c):t},async get(r,n){const{row:t,tableName:o}=await S(r,n),s=o===void 0?void 0:i.get(o);return!t||!s?t:a(t,s,c)},async lookupById(r,n){const t=await e.lookupById?.(r,n);if(!t)return null;const o=i.get(t.tableName);return{row:o?a(t.row,o,c):t.row,tableName:t.tableName}},groupBy(r,n){return M(r,[...n.by,n.agg?.field],"groupBy"),u(r,n.where,"groupBy"),e.groupBy(r,n)},query(r){const n=e.query(r),t=i.get(r);return t?l(n,t,r):n},async rank(r,n,t){return A(r,t,"rank"),k(r,n,"rank","rank"),e.rank(r,n,t)},async rankPage(r,n,t){A(r,t,"rankPage"),k(r,n,"rankPage","rank");const o=await e.rankPage(r,n,t),s=i.get(r);return s?W(o,s,c):o},...v("rankBefore",h,r=>(n,t,o)=>(A(n,o,"rankBefore"),k(n,t,"rankBefore","rank"),r(n,t,o))),...v("rankPageRows",g,r=>async(n,t,o)=>{A(n,o,"rankPageRows"),k(n,t,"rankPageRows","rank");const s=await r(n,t,o),d=i.get(n);return d?{...s,rows:s.rows.map(w=>({...w,doc:a(w.doc,d,c)}))}:s})},U=O;for(const r of i.keys())K(e[r])&&(U[r]=j(O,r));return O},Q=(e,i={})=>{const c=new Map(Object.entries(e)),y=_(i.roles),h=async({ctx:f,next:p})=>{const k={auth:await D(f.auth??{},y),ctx:f};if(i.bypass?.(k))return p();const l=m(f.db,c,k,i.indexFields),S={db:l},{orm:M}=f;return M!==null&&typeof M=="object"&&(S.orm=E(l)),p({ctx:S})},g=new Map;for(const[f,p]of c)g.set(f,new Set(Object.keys(p)));return q(h,{columns:g})};export{Q as mask};

package/dist/packem_shared/middleware-DEW0yLvU.mjs

@@ -0,0 +1 @@
+import{LunoraError as W}from"./LunoraError-DcKdk9Ti.mjs";import{bindTableFacade as L,bindOrm as j}from"./bindOrm-lWdeDi9P.mjs";import{t as T}from"./policy-tag-D4RzgQnw.mjs";import{deny as $}from"./allowAll-DkRAgItV.mjs";const I=(r,t,i)=>t?{[r]:i(t)}:{},D=500,B=(r,t,i)=>{const a=t??D;if(r>a)throw new W("BAD_REQUEST",`${i}: batch of ${String(r)} exceeds the limit of ${String(a)} (raise options.limit or chunk the call)`)},q=$(),N=Symbol.for("lunora.ctxdb.rls-unwrap"),K=r=>{const t=new Map;for(const i of r){const a=t.get(i.table)??[];a.push(i),t.set(i.table,a)}return t},Y=(r,t)=>{const i=[];let a=!1;for(const h of r){if(h.on!=="read")continue;const f=h.when(t);if(f!==void 0){if(f===!0){a=!0;break}f!==!1&&i.push(f)}}if(!a)return i.length===0?q:i.length===1?i[0]:{OR:i}},E=r=>typeof r=="object"&&r!==null&&!Array.isArray(r),z=["contains","eq","gt","gte","in","isNull","lt","lte","ne","notIn"],p=r=>{const t=typeof r;return t==="number"||t==="string"||t==="bigint"},Q=(r,t)=>!("lt"in t&&(!p(r)||!p(t.lt)||r>=t.lt)||"lte"in t&&(!p(r)||!p(t.lte)||r>t.lte)||"gt"in t&&(!p(r)||!p(t.gt)||r<=t.gt)||"gte"in t&&(!p(r)||!p(t.gte)||r<t.gte)),G=(r,t)=>{if("in"in t){const i=t.in;if(!Array.isArray(i)||!i.includes(r))return!1}if("notIn"in t){const i=t.notIn;if(Array.isArray(i)&&i.includes(r))return!1}if("contains"in t){const i=t.contains;if(typeof r!="string"||typeof i!="string"||!r.includes(i))return!1}return!("isNull"in t&&t.isNull===!0!==(r==null))},H=(r,t)=>"eq"in t&&r!==t.eq||"ne"in t&&r===t.ne?!1:G(r,t)&&Q(r,t),J=(r,t,i,a)=>t==="AND"?Array.isArray(i)&&i.every(h=>a(r,h)):t==="OR"?Array.isArray(i)&&i.some(h=>a(r,h)):!a(r,i??{}),C=r=>r==="AND"||r==="OR"||r==="NOT",X=r=>E(r)&&Object.keys(r).every(t=>z.includes(t)),Z=["every","is","isNot","none","some"],x=r=>E(r)&&Object.keys(r).length>0&&Object.keys(r).every(t=>Z.includes(t)),P=r=>Object.keys(r).some(t=>{const i=r[t];return C(t)?t==="NOT"?P(i??{}):Array.isArray(i)&&i.some(a=>P(a??{})):x(i)}),A=(r,t)=>{for(const i of Object.keys(t)){const a=t[i];if(C(i)){if(!J(r,i,a,A))return!1;continue}const h=r[i];if(X(a)){if(!H(h,a))return!1;continue}if(h!==a)return!1}return!0},V=(r,t,i)=>{const a=r.when({...t,row:i});if(a===void 0||a===!0)return!0;if(a===!1)return!1;if(P(a))throw new W("RELATION_PREDICATE_UNSUPPORTED","relation predicates are not supported in write policies; use a read policy or a flat column check");return A(i,a)},ee=(r,t,i)=>{const a=r.when(t);if(a===void 0||a===!0)return i===void 0||V(r,t,i);if(a===!1)return!1;if(P(a))throw new W("RELATION_PREDICATE_UNSUPPORTED","relation predicates are not supported in write policies; use a read policy or a flat column check");return!t.row||!A(t.row,a)?!1:i===void 0||A(i,a)},_=(r,t,i,a)=>{let h=!1;for(const f of r)if(f.on===t&&(h=!0,!ee(f,i,a)))return!1;return h},re=new Set(["baseWhere","relationBaseWhere","restrictsCounts","where"]),te=(r,t)=>t===void 0?!0:r==="restrictsCounts"?typeof t=="boolean":r==="relationBaseWhere"?typeof t=="function":E(t),ne=r=>{const t=Object.keys(r);return t.length===0?!1:t.every(i=>re.has(i)&&te(i,r[i]))},se=r=>r===void 0?{}:E(r)&&ne(r)?r:{where:r},w=(r,t)=>!t||Object.keys(t).length===0?r:!r||Object.keys(r).length===0?t:{AND:[t,r]},ie=r=>{if(typeof r!="object"||r===null||Array.isArray(r))return!1;const t=r;return typeof t.findMany=="function"&&typeof t.withSearchIndex=="function"},oe=(r,t,i,a)=>{const h=new Map,f=e=>{const n=h.get(e);if(n)return n;const s=i.get(e);if(!s||s.length===0||!s.some(l=>l.on==="read")){const l={baseWhere:void 0,restricts:!1};return h.set(e,l),l}const c={baseWhere:Y(s,a),restricts:!0};return h.set(e,c),c},d=e=>f(e).restricts?t:r,y=e=>f(e).baseWhere,O=async(e,n)=>{if(t.lookupById){const u=await t.lookupById(e,n);return u?{row:u.row,tableName:i.has(u.tableName)?u.tableName:void 0}:{row:null,tableName:void 0}}const s=await t.get(e,n);if(!s)return{row:null,tableName:void 0};const o=n!==void 0&&i.has(n)?[n]:[],c=n===void 0?[...i.keys()]:o,l=await Promise.all(c.map(async u=>(await t.findFirst(u,{limit:1,where:{_id:e}}))?._id===e?u:void 0));return{row:s,tableName:l.find(u=>u!==void 0)}},M=async(e,n)=>{const s=await O(e,n);return s.row&&s.tableName!==void 0?{row:s.row,tableName:s.tableName}:void 0},g=async(e,n,s,o,c)=>{const l=await M(e,c);if(!l)return s(r);const u=i.get(l.tableName);if(u){const k=o?o(l.row):void 0;if(!_(u,n,{...a,row:l.row},k))throw new W("FORBIDDEN",`${n} denied by policy`)}return s(t)},b=(e,n)=>{const{baseWhere:s,restricts:o}=f(e);if(o)throw new W("COUNT_RLS_UNSUPPORTED",`${n}() is not supported on "${e}" inside an RLS-restricted context`);return s},v=r.rankBefore,U=r.rankPageRows,R={...r,async count(e,n){const{baseWhere:s,restricts:o}=f(e),c=se(n);return d(e).count(e,{...c,baseWhere:w(c.baseWhere,s),relationBaseWhere:y,restrictsCounts:(c.restrictsCounts??!1)||o})},delete:(e,n,s)=>g(e,"delete",o=>o.delete(e,n,s),void 0,n),async deleteAll(e,n){const s=Math.max(1,n?.chunkSize??D),{baseWhere:o}=f(e);let c=0;for(;;){const u=(await d(e).findMany(e,{baseWhere:o,limit:s,relationBaseWhere:y})).page.map(k=>String(k._id));if(u.length===0)break;for(const k of u)await g(k,"delete",S=>S.delete(k,void 0,n?.hard===void 0?void 0:{hard:n.hard})),c+=1;if(u.length<s)break}return{deleted:c}},async deleteMany(e,n,s){B(e.length,n?.limit,"deleteMany");for(const o of e)await g(o,"delete",c=>c.delete(o,s),void 0,s);return{deleted:e.length}},async deleteWhere(e,n,s){const{baseWhere:o}=f(e),l=(await d(e).findMany(e,{baseWhere:w(n,o),relationBaseWhere:y})).page.map(u=>String(u._id));return B(l.length,s?.limit,"deleteWhere"),R.deleteMany(l,s)},async findFirst(e,n){const{baseWhere:s}=f(e);return d(e).findFirst(e,{...n,baseWhere:w(n?.baseWhere,s),relationBaseWhere:y})},async findFirstOrThrow(e,n){const{baseWhere:s}=f(e);return d(e).findFirstOrThrow(e,{...n,baseWhere:w(n?.baseWhere,s),relationBaseWhere:y})},async findMany(e,n){const{baseWhere:s}=f(e);return d(e).findMany(e,{...n,baseWhere:w(n?.baseWhere,s),relationBaseWhere:y})},async get(e,n){const s=await O(e,n);if(!s.row)return null;if(s.tableName===void 0)return r.get(e,n);const{baseWhere:o,restricts:c}=f(s.tableName);if(!c)return r.get(e,n);if(!o)return s.row;const l=await t.findFirst(s.tableName,{baseWhere:o,limit:1,where:{_id:e}});return l?._id===e?l:null},async lookupById(e,n){const s=await O(e,n);if(!s.row)return null;if(s.tableName===void 0||!f(s.tableName).restricts)return await r.lookupById?.(e,n)??null;const{baseWhere:o}=f(s.tableName);if(!o)return{row:s.row,tableName:s.tableName};const c=await t.findFirst(s.tableName,{baseWhere:o,limit:1,where:{_id:e}});return c?._id===e?{row:c,tableName:s.tableName}:null},async insert(e,n){const s=i.get(e);if(s){if(!_(s,"insert",{...a,row:n}))throw new W("FORBIDDEN",`insert on "${e}" denied by policy`);return t.insert(e,n)}return r.insert(e,n)},async insertMany(e,n,s){B(n.length,s?.limit,"insertMany");const o=i.get(e);if(o){for(const c of n)if(!_(o,"insert",{...a,row:c}))throw new W("FORBIDDEN",`insert on "${e}" denied by policy`);return t.insertMany(e,n,s)}return r.insertMany(e,n,s)},async insertManyUnsafe(e,n,s){B(n.length,s?.limit,"insertManyUnsafe");const o=i.get(e);if(o){for(const c of n)if(!_(o,"insert",{...a,row:c}))throw new W("FORBIDDEN",`insert on "${e}" denied by policy`);return t.insertManyUnsafe(e,n,s)}return r.insertManyUnsafe(e,n,s)},patch:(e,n,s)=>g(e,"update",o=>o.patch(e,n,s),o=>({...o,...n}),s),async patchMany(e,n,s){B(e.length,n?.limit,"patchMany");for(const o of e)await g(o.id,"update",c=>c.patch(o.id,o.patch,s),c=>({...c,...o.patch}),s);return{patched:e.length}},async patchWhere(e,n,s){const{baseWhere:o}=f(e),l=(await d(e).findMany(e,{baseWhere:w(n.where,o),relationBaseWhere:y})).page.map(u=>({id:String(u._id),patch:n.patch}));return B(l.length,s?.limit,"patchWhere"),R.patchMany(l,s)},query(e){const{baseWhere:n}=f(e),s=d(e).query(e);return n?s.filter(o=>A(o,n)):s},restore:(e,n)=>g(e,"update",async s=>{const o=s.restore??t.restore;if(!o)throw new W("BAD_REQUEST","restore is not supported by this writer");await o(e,n)},void 0,n),replace:(e,n,s)=>g(e,"update",o=>o.replace(e,n,s),o=>({...n,_creationTime:n._creationTime??o._creationTime,_id:o._id}),s),aggregate(e,n){const{baseWhere:s}=f(e);return d(e).aggregate(e,{...n,baseWhere:w(n.baseWhere,s),relationBaseWhere:y})},groupBy(e,n){const{baseWhere:s}=f(e);return d(e).groupBy(e,{...n,baseWhere:w(n.baseWhere,s),relationBaseWhere:y})},rank(e,n,s){const o=b(e,"rank");return d(e).rank(e,n,{...s,baseWhere:w(s.baseWhere,o)})},rankPage(e,n,s){const o=b(e,"rankPage");return d(e).rankPage(e,n,{...s,baseWhere:w(s?.baseWhere,o)})},wipeShard(){throw new W("FORBIDDEN","ctx.db.wipeShard() is unavailable under rls(): a whole-shard erase can't be policy-gated per row, and erasing only policy-visible rows would silently leave data behind. Run it from an internalMutation, or use ctx.db.deleteAll(table) per table.",{status:403})},...I("rankBefore",v,e=>(n,s,o)=>(b(n,"rankBefore"),(d(n).rankBefore??e)(n,s,o))),...I("rankPageRows",U,e=>(n,s,o)=>{const c=b(n,"rankPageRows");return(d(n).rankPageRows??e)(n,s,{...o,baseWhere:w(o?.baseWhere,c)})})},m=R;for(const e of i.keys())ie(r[e])&&(m[e]=L(R,e));return R},F=r=>typeof r=="string"?r:r.name,ae=r=>{const t=new Map;for(const i of r??[])t.set(i.name,new Set((i.permissions??[]).map(a=>F(a))));return t},ce=(r,t)=>{const i=new Set;for(const a of r)for(const h of t.get(a)??[])i.add(h);return a=>i.has(F(a))},fe=async(r,t)=>{const i=r.roles??[];return{can:ce(i,t),identity:await r.getIdentity?.()??null,roles:i,userId:r.userId??null}},ye=(r,t={})=>{const i=K(r),a=ae(t.roles);return T(async({ctx:f,next:d})=>{const y={auth:await fe(f.auth??{},a),ctx:f},O=f.db,M=O[N]??O,g=oe(O,M,i,y),b={db:g},{orm:v}=f;return v!==null&&typeof v=="object"&&(b.orm=j(g)),d({ctx:b})},{policies:r,roles:t.roles??[]})};export{fe as a,ie as b,Y as c,ce as d,_ as e,ae as i,A as m,I as o,F as p,ye as r};

package/dist/packem_shared/onConnect-DI23ecHU.mjs

@@ -0,0 +1 @@
+const t=(n,c)=>({args:{},handler:(o,e)=>c(o,e),kind:"mutation",lifecycle:n,visibility:"internal"}),i=n=>t("connect",n),r=n=>t("disconnect",n);export{i as onConnect,r as onDisconnect};

package/dist/packem_shared/plugin-CV2Fae9w.mjs

@@ -0,0 +1 @@
+import{LunoraError as d}from"@lunora/errors";import{r as q}from"./run-middleware-B-JeGGp9.mjs";import{v as A}from"@lunora/values";const B=["de","en","es","fr","it","nl","none","pt"],O=["native","portable"],_=n=>O.includes(n),P=n=>B.includes(n),M=16,C={many:(n,e)=>({field:e.field,kind:"many",references:e.references??"_id",table:n}),one:(n,e)=>({field:e.field,kind:"one",onDelete:e.onDelete,references:e.references??"_id",table:n})},g=(n,e,t)=>({handler:t,op:e,timing:n}),K=()=>({afterDelete:n=>g("after","delete",n),afterInsert:n=>g("after","insert",n),afterUpdate:n=>g("after","update",n),beforeDelete:n=>g("before","delete",n),beforeInsert:n=>g("before","insert",n),beforeUpdate:n=>g("before","update",n)}),j=(n,e)=>{if(!e||e.length===0)throw new d("INTERNAL",`rankIndex "${n}": "sortBy" is required and must list at least one key`);return e.map(t=>({direction:t.direction??"asc",field:t.field}))},te=n=>{const e={...n},t=[],r=[],i=[],l=[],u={},o=[],f={},m=K(),b=[];let y={kind:"root"},N=!1,p=!1,k,T,L,R;const c={aggregateIndex(s,a){const h=a?.op??"count";if(h!=="count"&&!a?.field)throw new d("INTERNAL",`aggregateIndex "${s}": op "${h}" requires a "field"`);return t.push({by:a?.by,field:a?.field,name:s,on:"",op:h,where:a?.where}),c},get aggregateIndexes(){return t},get externalSource(){return R},externallyManaged(){return N=!0,c},geoIndex(s,a){return r.push({field:a.field,name:s,precision:a.precision}),c},get geoIndexes(){return r},global(s){return y={backend:s?.backend??"d1",kind:"global"},c},get isExternallyManaged(){return N},get isPublic(){return p},index(s,a,h){return i.push({fields:a,name:s,unique:h?.unique??!1}),c},get indexes(){return i},ownedBy(s){return k=s,c},get ownerField(){return k},public(){return p=!0,c},rankIndex(s,a){return l.push({name:s,on:"",partitionBy:a.partitionBy,sortBy:j(s,a.sortBy),where:a.where}),c},get rankIndexes(){return l},get relationMap(){return u},relations(s){return Object.assign(u,s(C)),c},searchIndex(s,a){if(a.filterFields&&a.filterFields.length>M)throw new d("INTERNAL",`searchIndex "${s}": at most ${String(M)} filterFields are supported (got ${String(a.filterFields.length)})`);const{language:h}=a;if(h!==void 0&&!P(h))throw new d("INTERNAL",`searchIndex "${s}": unknown language "${h}" (supported: ${B.join(", ")})`);const{strategy:E}=a;if(E!==void 0&&!_(E))throw new d("INTERNAL",`searchIndex "${s}": unknown strategy "${E}" (supported: ${O.join(", ")})`);return o.push({field:a.field,filterFields:a.filterFields,language:a.language,name:s,staged:a.staged,strategy:a.strategy}),c},get searchIndexes(){return o},shape:e,shardBy(s){return y={field:s,kind:"shardBy"},c},get shardMode(){return y},get softDeleteMode(){return T},source(s){if(!s.binding)throw new d("INTERNAL","source: `binding` is required (the wrangler Hyperdrive binding name)");if(!s.query)throw new d("INTERNAL","source: `query` is required (the tenant-membership SQL)");return R=s,N=!0,c},softDelete(s){const a=s?.field??"deletedAt";return T={field:a},a in e||(e[a]=A.optional(A.number().nullable())),c},get triggerMap(){return f},triggers(s){return Object.assign(f,s(m)),c},ttl(s,a){return L={after:a?.after,field:s},c},get ttlPolicy(){return L},get vectorIndexes(){return b},vectorize(s,a){return b.push({dimensions:a.dimensions,embed:a.embed,field:s,metadata:a.metadata,metric:a.metric,name:a.index}),c}};return c},re=n=>({dimensions:n.dimensions,embed:n.embed,kind:"vectorIndex",metadata:n.metadata,metric:n.metric,select:n.source.select,table:n.source.table}),ae=(n,e)=>{const t=e.op??"count";if(t!=="count"&&!e.field)throw new d("INTERNAL",`aggregateIndex "${n}": op "${t}" requires a "field"`);return{by:e.by,field:e.field,name:n,on:e.on,op:t,where:e.where}},se=(n,e)=>({name:n,on:e.table,partitionBy:e.partitionBy,sortBy:j(n,e.sortBy),where:e.where}),w=n=>({...n,extend(e){return w(F(n,e))},jurisdiction(e){return w(n)},rls(e){return w({...n,rlsMode:e})}}),z=n=>{for(const[e,t]of Object.entries(n))for(const r of[...t.aggregateIndexes,...t.rankIndexes])r.on===""&&(r.on=e)},H=(n,e,t)=>{for(const r of Object.values(e)){const i=n[r.on];if(!i)throw new d("INTERNAL",`defineAggregateIndex "${r.name}": unknown table "${r.on}"`);i.aggregateIndexes.push(r)}for(const r of Object.values(t)){const i=n[r.on];if(!i)throw new d("INTERNAL",`defineRankIndex "${r.name}": unknown table "${r.on}"`);i.rankIndexes.push(r)}},X=n=>{if(n.cursor)return"cursor";if(n.reconcileEveryMs!==void 0)return"reconcileEveryMs";if(n.softDeleteColumn!==void 0)return"softDeleteColumn"},Q=(n,e)=>{const t=e.mode==="incremental";if(e.mode!==void 0&&e.mode!=="full-pull"&&!t)throw new d("INTERNAL",`defineSchema: table "${n}" uses \`mode: ${JSON.stringify(e.mode)}\` — supported modes are "full-pull" (default) and "incremental".`);if(!t){const r=X(e);if(r)throw new d("INTERNAL",`defineSchema: table "${n}" sets \`${r}\` but is not \`mode: "incremental"\` — that knob only applies to incremental ingest. Set \`mode: "incremental"\` or remove \`${r}\`.`);return}if(!e.cursor?.column||!e.cursor.query)throw new d("INTERNAL",`defineSchema: table "${n}" is \`mode: "incremental"\` but has no \`cursor\` — add \`cursor: { column: "updated_at", query: "… WHERE … > $N" }\` binding the watermark as the trailing parameter.`);if(e.reconcileEveryMs===void 0&&e.softDeleteColumn===void 0)throw new d("INTERNAL",`defineSchema: table "${n}" is \`mode: "incremental"\` with no delete-visibility path — an incremental pull never sees upstream deletes, so it would accumulate phantom rows. Add \`reconcileEveryMs\` (a periodic full-pull sweep) or \`softDeleteColumn\` (an upstream tombstone column).`)},U=n=>{for(const[e,t]of Object.entries(n)){const r=t.externalSource;if(r){if(t.shardMode.kind==="global")throw new d("INTERNAL",`defineSchema: table "${e}" cannot be both .source() and .global() — a sourced table materializes into a shard DO's SQLite, a global table lives in the external tier`);if(t.shardMode.kind==="shardBy"&&!r.tenantBy)throw new d("INTERNAL",`defineSchema: sourced + .shardBy() table "${e}" needs a \`tenantBy\` mapper — without it every tenant's DO would run the same unscoped query and replicate the whole multitenant table (a cross-tenant leak). Add \`tenantBy: (shardKey) => [shardKey]\` binding the shard key into the query's parameters.`);Q(e,r)}}},V=["_creationTime","_id"],Y=new Set(V),x=(n,e,t,r)=>{if(!(Y.has(t)||t in r.shape))throw new d("INTERNAL",`defineSchema: table "${n}" index "${e}" names column "${t}" which is not in the table's shape`)},$=(n,e,t,r)=>{const i=new Set;for(const l of t){if(i.has(l.name))throw new d("INTERNAL",`defineSchema: table "${n}" declares ${e} "${l.name}" more than once`);i.add(l.name),r(l)}},D=n=>{for(const[e,t]of Object.entries(n))$(e,"index",t.indexes,r=>{for(const i of r.fields)x(e,r.name,i,t)}),$(e,"rank index",t.rankIndexes,r=>{for(const i of r.sortBy)x(e,r.name,i.field,t);for(const i of r.partitionBy??[])x(e,r.name,i,t)}),$(e,"geo index",t.geoIndexes,r=>{x(e,r.name,r.field,t)})},S=(n,e,t)=>{if(n.length===0)return;const r={};for(const i of n)r[e(i)]=t(i);return r},J=n=>{const e=new Set(n.sortBy.map(t=>t.field));for(const t of n.partitionBy??[])e.add(t);return[...e]},ie=n=>{const e={};for(const[t,r]of Object.entries(n.tables)){const i=S(r.geoIndexes,o=>o.name,o=>[o.field]),l=S(r.indexes,o=>o.name,o=>o.fields),u=S(r.rankIndexes,o=>o.name,J);(i||l||u)&&(e[t]={...i?{geo:i}:{},...l?{index:l}:{},...u?{rank:u}:{}})}return e},de=(n,e={},t={},r={})=>(z(n),H(n,t,r),U(n),D(n),w({tables:n,vectorIndexes:e})),I=(n,e)=>`${n}_${e}`,v=(n,e,t)=>t.has(n)?I(e,n):n,W=(n,e,t,r)=>{const i=I(e,r),l=m=>m===""?i:v(m,e,t),u={};for(const[m,b]of Object.entries(n.relationMap))u[m]={...b,table:v(b.table,e,t)};const o=n.aggregateIndexes.map(m=>({...m,on:l(m.on)})),f=n.rankIndexes.map(m=>({...m,on:l(m.on)}));return{...n,aggregateIndexes:o,rankIndexes:f,relationMap:u}},oe=(n,e)=>{if(!n)throw new d("INTERNAL","defineSchemaExtension: `key` is required and must be a non-empty string");return{key:n,tables:e.tables,...e.vectorIndexes?{vectorIndexes:e.vectorIndexes}:{}}},G=((n,e)=>{if(!n)throw new d("INTERNAL","definePlugin: `key` is required and must be a non-empty string");if(e.extension&&e.extension.key!==n)throw new d("INTERNAL",`definePlugin("${n}"): extension key "${e.extension.key}" does not match plugin key`);return{key:n,...e.extension?{extension:e.extension}:{},...e.middleware?{middleware:e.middleware}:{}}}),le=(n,e)=>({...G(n,{...e.extension?{extension:e.extension}:{},...e.middleware?{middleware:e.middleware}:{}}),functions:e.functions??{}}),F=(n,e)=>{const{key:t}=e,r=new Set(Object.keys(e.tables)),i={...n.tables};for(const[u,o]of Object.entries(e.tables)){const f=I(t,u);if(Object.hasOwn(i,f))throw new d("INTERNAL",`defineSchema(...).extend("${t}"): table "${f}" already exists in the base schema — another extension with the same key already contributed it`);i[f]=W(o,t,r,u)}const l={...n.vectorIndexes};if(e.vectorIndexes)for(const[u,o]of Object.entries(e.vectorIndexes)){const f=I(t,u);if(Object.hasOwn(l,f))throw new d("INTERNAL",`defineSchema(...).extend("${t}"): vector index "${f}" already exists in the base schema — another extension with the same key already contributed it`);l[f]={...o,table:v(o.table,t,r)}}return D(i),{rlsMode:n.rlsMode,tables:i,vectorIndexes:l}},ce=(n,e)=>{let t=n;for(const r of e)r.extension&&(t=F(t,r.extension));return t},ue=n=>{const e=n.map(t=>t.middleware).filter(t=>t!==void 0);return(async({ctx:t,next:r})=>q(e,t,i=>r({ctx:i})))};export{le as a,G as b,ue as c,ae as d,se as e,de as f,oe as g,te as h,re as i,ie as j,ce as k,F as m,D as v};

package/dist/packem_shared/policy-tag-D4RzgQnw.mjs

@@ -0,0 +1 @@
+const t=Symbol.for("lunora.rls.middleware-policies"),r=(e,o)=>(Object.defineProperty(e,t,{configurable:!0,enumerable:!1,value:o}),e),n=e=>{if(!(e===null||typeof e!="function"&&typeof e!="object"))return e[t]};export{n as r,r as t};

package/dist/packem_shared/protectPublic-Bo4G9xaV.mjs

@@ -0,0 +1 @@
+import{r as o}from"./run-middleware-B-JeGGp9.mjs";const s=c=>{const t=[c.rateLimit,c.captcha,...c.use??[]].filter(r=>r!==void 0);return async({ctx:r,next:e})=>o(t,r,a=>e({ctx:a}))};export{s as protectPublic};

package/dist/packem_shared/rls-B3mNGBuc.mjs

@@ -0,0 +1 @@
+import"./LunoraError-DcKdk9Ti.mjs";import"./bindOrm-lWdeDi9P.mjs";import{c as m,e as t,i as p,b as l,m as c,p as n,d,a as h,r as u}from"./middleware-DEW0yLvU.mjs";import"./policy-tag-D4RzgQnw.mjs";import"./allowAll-DkRAgItV.mjs";export{m as computeReadBaseWhere,t as evaluateWrite,p as indexRolePermissions,l as isFacadeEntry,c as matchesWhere,n as permissionName,d as resolveCan,h as resolvePolicyAuth,u as rls};

package/dist/packem_shared/run-middleware-B-JeGGp9.mjs

@@ -0,0 +1 @@
+import{LunoraError as o}from"@lunora/errors";const m=async(l,c,i)=>{let t=-1;const e=async(r,a)=>{if(r<=t)throw new o("INTERNAL","middleware next() called multiple times");t=r;const n=l[r];return n?await n({ctx:a,next:(s=>e(r+1,s?.ctx?{...a,...s.ctx}:a))}):i(a)};return e(0,c)};export{m as r};

package/dist/packem_shared/storageRules-CTnby6M1.mjs

@@ -0,0 +1 @@
+import{LunoraError as y}from"./LunoraError-DcKdk9Ti.mjs";import{i as U,a as v}from"./middleware-DEW0yLvU.mjs";const D=(o,e)=>o===void 0||e.startsWith(o),k=o=>{const e=o[1],c=typeof e=="object"&&e!==null?e.method:void 0;return typeof c=="string"&&c.toUpperCase()==="PUT"?"write":"read"},E=[["delete","delete"],["download","read"],["generateUploadUrl","write"],["getMetadata","read"],["getSignedUrl",k],["getUrl","read"],["store","write"]],S=(o,e={})=>{const c=U(e.roles);return async({ctx:u,next:f})=>{const h=await v(u.auth??{},c),g=(n,r,s)=>{const a=o.filter(t=>t.on===n&&t.bucket===s);if(a.length===0)return;const i={auth:h,ctx:u,key:r};if(!a.some(t=>D(t.prefix,r)&&t.when(i)===!0))throw new y("FORBIDDEN",`storage ${n} on "${r}" in bucket "${s}" denied by access rule`)},p=n=>{const r=n.bucketName??"default",s={bucketName:r};for(const[i,l]of E){const t=n[i];typeof t=="function"&&(s[i]=(...d)=>{const m=typeof d[0]=="string"?d[0]:"",b=typeof l=="function"?l(d):l;return g(b,m,r),t(...d)})}const{bucket:a}=n;return typeof a=="function"&&(s.bucket=i=>p(a(i))),s},w=u.storage;return w===void 0?f():f({ctx:{storage:p(w)}})}};export{S as storageRules};

package/dist/rls/testing.mjs

@@ -1 +1 @@
-import{T as p,F as I,E as h,P,I as b}from"../packem_shared/middleware-D9_39C5C.mjs";const v=(d,s={})=>{const f=p(s.roles),x=s.ctx??{};return{as:y=>{const o=y??{},c=o.roles??[],i={auth:{can:I(c,f),identity:o.identity??null,roles:c,userId:o.userId??null},ctx:x},a=(t,u,r,l)=>{const e=d.filter(n=>n.table===u);if(e.length===0)return!0;if(t==="read"){if(!e.some(m=>m.on==="read"))return!0;const n=h(e,i);return n===void 0||P(r??{},n)}return b(e,t,{...i,row:r},l)};return{can:a,cannot:(t,u,r,l)=>!a(t,u,r,l)}}}};export{v as expectPolicy};
+import{i as b,d as P,c as W,m as v,e as y}from"../packem_shared/middleware-DEW0yLvU.mjs";const C=(d,c={})=>{const m=b(c.roles),h=c.ctx??{};return{as:x=>{const n=x??{},i=n.roles??[],l={auth:{can:P(i,m),identity:n.identity??null,roles:i,userId:n.userId??null},ctx:h},u=(e,o,t,a)=>{const r=d.filter(s=>s.table===o);if(r.length===0)return!0;if(e==="read"){if(!r.some(f=>f.on==="read"))return!0;const s=W(r,l);return s===void 0||v(t??{},s)}return y(r,e,{...l,row:t},a)};return{can:u,cannot:(e,o,t,a)=>!u(e,o,t,a)}}}};export{C as expectPolicy};

package/dist/types.mjs

@@ -1 +1 @@
-const g=new Map,a=new Proxy({},{get(i,t){const e=g.get(t);if(e)return e;const r=new Map,o=new Proxy({},{get(u,n){const s=r.get(n);if(s)return s;const c={__lunoraRef:`${String(t)}:${String(n)}`};return r.set(n,c),c}});return g.set(t,o),o}}),p=a;export{p as anyApi};
+const a=new Map,g=new Proxy({},{get(i,e){const r=a.get(e);if(r)return r;const t=new Map,c=new Proxy({},{get(p,n){const o=t.get(n);if(o)return o;const s={__lunoraRef:`${String(e)}:${String(n)}`};return t.set(n,s),s}});return a.set(e,c),c}}),y=g;export{y as anyApi};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/server",
-  "version": "1.0.0-alpha.72",
+  "version": "1.0.0-alpha.74",
   "description": "Server primitives for Lunora: defineSchema, defineTable, query, mutation, and action",
   "keywords": [
     "backend",
@@ -66,14 +66,14 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/errors": "1.0.0-alpha.21",
-    "@lunora/scheduler": "1.0.0-alpha.30",
-    "@lunora/values": "1.0.0-alpha.26",
+    "@lunora/errors": "1.0.0-alpha.22",
+    "@lunora/scheduler": "1.0.0-alpha.31",
+    "@lunora/values": "1.0.0-alpha.27",
     "drizzle-orm": "^0.45.2",
-    "hono": "^4.12.32"
+    "hono": "^4.13.1"
   },
   "peerDependencies": {
-    "@opentelemetry/api": "^1.9.1"
+    "@opentelemetry/api": "^1.9.0"
   },
   "peerDependenciesMeta": {
     "@opentelemetry/api": {

package/dist/packem_shared/DEFAULT_LIMIT-yHJ5O96W.mjs

@@ -1 +0,0 @@
-import{v as o}from"@lunora/values";const h=25,g=100,y=100,b=8,A=(t,n)=>{const i=e=>o.optional(o.array(e).check(a=>a.length<=n,{message:`at most ${String(n)} values`}));return o.object({contains:o.optional(o.string()),eq:o.optional(t),gt:o.optional(t),gte:o.optional(t),in:i(t),isNull:o.optional(o.boolean()),lt:o.optional(t),lte:o.optional(t),ne:o.optional(t),notIn:i(t)})},L=(t,n,i)=>t===void 0||!Number.isFinite(t)?Math.min(n,i):Math.min(Math.max(1,Math.floor(t)),i),d=(t,n)=>t===void 0||!Number.isFinite(t)?n:Math.max(1,Math.floor(t)),M=new Set(["contains","eq","gt","gte","in","isNull","lt","lte","ne","notIn"]),v=(t,n)=>{if(typeof t!="object"||t===null||Array.isArray(t))return;const i=t,e={};for(const a of M){if(!Object.hasOwn(i,a))continue;const s=i[a];e[a]=Array.isArray(s)?s.slice(0,n):s}return Object.keys(e).length===0?void 0:e},B=(t,n,i)=>{const e={};for(const a of n){if(!Object.hasOwn(t,a))continue;const s=t[a],c=v(s,i);e[a]=c??s}return e},j=()=>t=>{const n=d(t.defaultLimit,h),i=d(t.maxLimit,g),e=d(t.maxInValues,y),a=d(t.maxOrderBy,b),s=new Set(Object.keys(t.filter)),c={};for(const[r,l]of Object.entries(t.filter))c[r]=o.optional(o.union(l,A(l,e)));const f=new Set(t.orderBy),p=t.orderBy.length===0?o.string().check(()=>!1,{message:"no sortable columns are declared for this endpoint"}):o.union(...t.orderBy.map(r=>o.literal(r)));return{args:{cursor:o.optional(o.union(o.string(),o.number(),o.null())),limit:o.optional(o.number()),orderBy:o.optional(o.array(o.object({direction:o.optional(o.union(o.literal("asc"),o.literal("desc"))),field:p}))),where:o.optional(o.object(c))},toQueryArgs:r=>{const l=r.orderBy?.filter(u=>f.has(u.field)).slice(0,a).map(u=>({[u.field]:u.direction??"asc"})),m=r.where===void 0?void 0:B(r.where,s,e);return{...r.cursor===void 0?{}:{cursor:typeof r.cursor=="number"?String(r.cursor):r.cursor},limit:L(r.limit,n,i),...l===void 0||l.length===0?{}:{orderBy:l},...m===void 0?{}:{where:m}}}}};export{h as DEFAULT_LIMIT,y as DEFAULT_MAX_IN_VALUES,g as DEFAULT_MAX_LIMIT,b as DEFAULT_MAX_ORDER_BY,L as clampLimit,j as defineListArgs,d as normalizeBound,B as sanitizeWhere};

package/dist/packem_shared/LunoraEnvError-CgpI2Mm_.mjs

@@ -1,3 +0,0 @@
-import{LunoraError as d}from"@lunora/errors";import{optionalInner as v}from"@lunora/values";const y=[/^sk_/u,/^pk_/u,/^rk_/u,/^ghp_/u,/^gho_/u,/^ghs_/u,/^ghr_/u,/^github_pat_/u,/^xox[baprs]-/u,/^AKIA/u,/^AIza/u,/^Bearer\s/u],b=/[\w./+-]{24,}/gu,A=/^[\w./+-]+$/u,_=/\b(?:(?:sk|pk|rk|ghp|gho|ghs|ghr)_[\w./+-]*|github_pat_[\w./+-]*|xox[baprs]-[\w./+-]*)/gu,E=/\b(?:AKIA|AIza)[\w./+-]+|Bearer\s+[\w./+-]+/gu,$=/\b([a-z][\w.+-]*:\/\/[\w.%+-]+):[\w.%+-]+@/gu,l="[redacted]",h=/(?:KEY|PASSWORD|SECRET|TOKEN)$/u,I=r=>{if(y.some(t=>t.test(r)))return!0;const e=r.trim();return e.length>=24&&A.test(e)},x=/(["'])(?<inner>(?:\\.|(?!\1).)*)\1/gu,S=/\b(?<key>[A-Za-z_]\w*)\s*[=:]\s*\S+/gu,N=r=>{let e=r;return e=e.replaceAll(x,(t,...n)=>{const s=n.at(-1);return s?.inner!==void 0&&I(s.inner)?l:t}),e=e.replaceAll($,(t,n)=>`${n}:${l}@`),e=e.replaceAll(_,l),e=e.replaceAll(E,l),e=e.replaceAll(S,(t,...n)=>{const s=n.at(-1);return s?.key!==void 0&&h.test(s.key)?`${s.key}=${l}`:t}),e=e.replaceAll(b,l),e},L=(r,e,t)=>{const n=N(r);return typeof t=="string"&&t!==""&&h.test(e)?n.replaceAll(t,l):n};class f extends d{failures;constructor(e){const t=e.map(n=>`  - ${n.key}: ${n.message}`).join(`
-`);super("ENV_INVALID",`Invalid environment (${String(e.length)} key(s)):
-${t}`,{name:"LunoraEnvError"}),this.failures=e}}const K=new Set(["1","on","true","yes"]),O=new Set(["0","false","no","off"]),j=/^-?\d+$/u,m=r=>{if(r.kind!=="optional")return r.kind;const e=v(r);return e?m(e):r.kind},z=(r,e)=>{if(typeof e!="string")return e;switch(m(r)){case"bigint":return j.test(e.trim())?BigInt(e.trim()):e;case"boolean":{const t=e.trim().toLowerCase();return K.has(t)?!0:O.has(t)?!1:e}case"number":{const t=e.trim();if(t==="")return e;const n=Number(t);return Number.isNaN(n)?e:n}default:return e}},k=(r,e,t,n)=>{const s=t[r];if(s===void 0&&e.kind==="optional")return{ok:!0,value:void 0};const a=e.safeParse(z(e,s));return a.ok?{ok:!0,value:a.value}:(n.push({key:r,message:L(a.error.message,r,s)}),{ok:!1})},w=r=>{if(typeof r!="object"||r===null)throw new f([{key:"<env>",message:`expected an object, received ${r===null?"null":typeof r}`}]);return r},B=r=>{const e=Object.keys(r),t=new WeakMap,n=(s=>{const a=w(s);let i=t.get(a);i===void 0&&(i=new Map,t.set(a,i));const c=i,p=u=>{if(c.has(u))return c.get(u);const o=[],g=k(u,r[u],a,o);if(!g.ok)throw new f(o);return c.set(u,g.value),g.value};return new Proxy({},{get(u,o){if(!(typeof o!="string"||!(o in r)))return p(o)},getOwnPropertyDescriptor(u,o){if(typeof o=="string"&&o in r)return{configurable:!0,enumerable:!0,value:p(o),writable:!1}},has(u,o){return typeof o=="string"&&o in r},ownKeys(){return e}})});return n.parse=s=>{const a=w(s),i=[],c={};for(const p of e){const u=k(p,r[p],a,i);u.ok&&u.value!==void 0&&(c[p]=u.value)}if(i.length>0)throw new f(i);return c},n};export{f as LunoraEnvError,B as defineEnv,N as redactSecrets};

package/dist/packem_shared/LunoraError-LVhdU0Lo.mjs

@@ -1 +0,0 @@
-import{LunoraError as s}from"@lunora/errors";class u extends s{constructor(r,o,a){super(r,o,{data:a})}}export{u as LunoraError};

package/dist/packem_shared/PRESENCE_DEFAULT_TTL_MS-C24x2Cox.mjs

@@ -1 +0,0 @@
-import{v as t}from"@lunora/values";import{initLunora as E}from"./initLunora-BilEHyNs.mjs";import{LunoraError as p}from"./LunoraError-LVhdU0Lo.mjs";import{onDisconnect as q}from"./onConnect-CEtRmUpJ.mjs";import{b as v,q as R,d as _}from"./plugin-184MITA3.mjs";const D=3e4,y=4096,u="presence",h="present",c=`${u}_${h}`,M=v(u,{tables:{[h]:R({data:t.optional(t.record(t.string(),t.any())),lastSeen:t.number(),roomId:t.string(),sessionId:t.string(),userId:t.optional(t.string())}).index("byRoomSession",["roomId","sessionId"]).index("byRoom",["roomId"])}}),{mutation:b,query:L}=E.dataModel().create(),B=(l={})=>{const m=l.ttlMs??D,f=Math.max(0,Math.min(l.disconnectGraceMs??0,m)),w=b.input({data:t.optional(t.record(t.string(),t.any())),roomId:t.string(),sessionId:t.string()}).mutation(async({args:o,ctx:s})=>{const r=Date.now(),i=s.auth.userId??void 0;if(o.data!==void 0&&new TextEncoder().encode(JSON.stringify(o.data)).length>y)throw new p("BAD_REQUEST",`presence data exceeds the ${String(y)}-byte limit`);const e=await s.db.query(c).withIndex("byRoomSession",n=>n.eq("roomId",o.roomId).eq("sessionId",o.sessionId)).first();if(e&&(e.userId??void 0)!==i)throw new p("FORBIDDEN","presence heartbeat denied: this (roomId, sessionId) is held by another identity");const a={lastSeen:r,roomId:o.roomId,sessionId:o.sessionId,...o.data===void 0?{}:{data:o.data},...i===void 0?{}:{userId:i}};return await(e?s.db.patch(e._id,a):s.db.insert(c,a)),{lastSeen:r}}),S=L.input({roomId:t.string()}).query(async({args:o,ctx:s})=>{const r=Date.now()-m,i=(await s.db.query(c).withIndex("byRoom",n=>n.eq("roomId",o.roomId)).collect()).filter(n=>n.lastSeen>r).toSorted((n,d)=>d.lastSeen-n.lastSeen),e=new Set,a=[];for(const n of i){const d=n.userId;if(d!==void 0){if(e.has(d))continue;e.add(d)}const I={lastSeen:n.lastSeen,roomId:n.roomId};d!==void 0&&(I.userId=d),n.data!==void 0&&(I.data=n.data),a.push(I)}return a}),g={...b.input({roomId:t.string()}).mutation(async({args:o,ctx:s})=>{const r=Date.now()-m,i=await s.db.query(c).withIndex("byRoom",e=>e.eq("roomId",o.roomId)).filter(e=>e.lastSeen<=r).collect();return await Promise.all(i.map(e=>s.db.delete(e._id))),{deleted:i.length}}),visibility:"internal"},x=q(async(o,s)=>{const r=s.context?.roomId,i=s.context?.sessionId;if(typeof r!="string"||typeof i!="string")return;const e=await o.db.query(c).withIndex("byRoomSession",d=>d.eq("roomId",r).eq("sessionId",i)).first();if(!e)return;const a=s.userId??void 0;if((e.userId??void 0)!==a)return;if(f===0){await o.db.delete(e._id);return}const n=Math.min(e.lastSeen,Date.now()+f-m);await o.db.patch(e._id,{lastSeen:n})});return _(u,{extension:M,functions:{disconnect:x,heartbeat:w,listPresent:S,sweep:g}})};export{D as PRESENCE_DEFAULT_TTL_MS,c as PRESENCE_TABLE,B as definePresence,M as presenceExtension};

package/dist/packem_shared/allowAll-BnyNbJZT.mjs

@@ -1 +0,0 @@
-const t=()=>({OR:[]}),a=()=>({}),r=s=>Array.isArray(s.OR)&&s.OR.length===0&&Object.keys(s).length===1,l=s=>s===!0||s===void 0?a():s===!1?t():s;export{a as allowAll,t as deny,r as isDeny,l as toWhereInput};

package/dist/packem_shared/bindOrm-Bp9hsM2q.mjs

@@ -1 +0,0 @@
-import{LunoraError as o}from"@lunora/errors";const c=e=>typeof e=="object"&&e!==null&&e.code==="CONFLICT"&&e.kind==="unique",l=(e,a,n)=>{const i=typeof a=="string"?[a]:a;if(i.length===0)throw new o("INTERNAL",`ctx.db.${e}.upsert: "target" must name at least one field`);const t={};for(const r of i){if(!(r in n))throw new o("INTERNAL",`ctx.db.${e}.upsert: target field "${r}" is missing from the create document`);t[r]=n[r]}return t},w=(e,a)=>{const n=async(t,r)=>{if(r?.skipDuplicates!==!0)return e.insert(a,t);try{return await e.insert(a,t)}catch(s){if(c(s))return null;throw s}},i=async({create:t,target:r,update:s})=>{const h=l(a,r,t),d=await e.findFirst(a,{where:h});return d&&typeof d._id=="string"?(await e.patch(d._id,s??t,a),{created:!1,id:d._id}):{created:!0,id:await e.insert(a,t)}};return{aggregate:t=>e.aggregate(a,t),count:t=>e.count(a,t),delete:t=>e.delete(t,a),deleteMany:(t,r)=>{if(Array.isArray(t)){if(e.deleteMany===void 0)throw new o("INTERNAL",`ctx.db.${a}.deleteMany is unavailable: this writer has no batch delete`);return e.deleteMany(t,r,a)}if(e.deleteWhere===void 0)throw new o("INTERNAL",`ctx.db.${a}.deleteMany({ where }) is unavailable: this writer has no where-based delete`);const s=t;return e.deleteWhere(a,s.where,{limit:s.limit})},exists:async t=>await e.findFirst(a,t===void 0?void 0:{where:t})!==null,findFirst:t=>e.findFirst(a,t),findFirstOrThrow:t=>e.findFirstOrThrow(a,t),findMany:t=>e.findMany(a,t),get:t=>e.get(t,a),groupBy:t=>e.groupBy(a,t),hardDelete:t=>e.delete(t,a,{hard:!0}),insert:n,insertMany:(t,r)=>{if(e.insertMany===void 0)throw new o("INTERNAL",`ctx.db.${a}.insertMany is unavailable: this writer has no batch insert`);return e.insertMany(a,t,r)},patch:(t,r)=>e.patch(t,r,a),patchMany:(t,r)=>{if(Array.isArray(t)){if(e.patchMany===void 0)throw new o("INTERNAL",`ctx.db.${a}.patchMany is unavailable: this writer has no batch patch`);return e.patchMany(t.map(h=>({id:h.id,patch:h.values})),r,a)}if(e.patchWhere===void 0)throw new o("INTERNAL",`ctx.db.${a}.patchMany({ where, values }) is unavailable: this writer has no where-based patch`);const s=t;return e.patchWhere(a,{patch:s.values,where:s.where},{limit:s.limit})},rank:(t,r)=>e.rank(a,t,r),rankPage:(t,r)=>e.rankPage(a,t,r),replace:(t,r)=>e.replace(t,r,a),restore:async t=>{if(!e.restore)throw new o("INTERNAL",`ctx.db.${a}.restore is unavailable: this writer has no restore (is the table .softDelete()?)`);await e.restore(t,a)},upsert:i,upsertMany:async({rows:t,target:r})=>{const s=[];for(const h of t)s.push(await i({create:h.create,target:r,update:h.update}));return s},withGeoIndex:(t,r)=>e.query(a).withGeoIndex(t,r),withSearchIndex:(t,r)=>e.query(a).withSearchIndex(t,r)}},p=e=>{const a=n=>{const i=e[n];if(!i)throw new o("INTERNAL",`unknown table: ${n}`);return i};return{delete:(n,i)=>a(n).delete(i),insert:n=>({values:i=>a(n).insert(i)}),query:e,replace:(n,i)=>({with:t=>a(n).replace(i,t)}),update:(n,i)=>({set:t=>a(n).patch(i,t)})}};export{p as bindOrm,w as bindTableFacade};

package/dist/packem_shared/buildMaskRegistry-BCIzKxdK.mjs

@@ -1 +0,0 @@
-const n=Symbol.for("lunora.mask.middleware-columns"),c=(e,o)=>(Object.defineProperty(e,n,{configurable:!0,enumerable:!1,value:o}),e),u=e=>{if(!(e===null||typeof e!="function"&&typeof e!="object"))return e[n]},d=e=>{const o=new Map;for(const r of e){const t=r?.maskedTables;if(t)for(const[a,f]of t){const s=o.get(a)??new Set;for(const l of f)s.add(l);o.set(a,s)}}return o};export{d as buildMaskRegistry,u as readMaskTag,c as tagMaskMiddleware};

package/dist/packem_shared/buildRlsReadRegistry-CE5k6akj.mjs

@@ -1 +0,0 @@
-import{T as h,E as f,F as u}from"./middleware-D9_39C5C.mjs";import{l as d}from"./policy-tag-Dprt9JWo.mjs";import{deny as b}from"./allowAll-BnyNbJZT.mjs";const a=b(),p=t=>{const e=t?.rls?.tags;if(e)return e;const o=d(t);return o?[o]:[]},g=(t,e)=>{const o=h(e.roles),r=new Map,n=new Map;for(const s of e.policies){if(s.on!=="read")continue;const i=r.get(s.table)??new Set;if(i.has(s.when))continue;i.add(s.when),r.set(s.table,i);const l=n.get(s.table)??[];l.push(s),n.set(s.table,l)}for(const[s,i]of n){const l=t.get(s)??[];l.push({policies:i,rolePermissions:o}),t.set(s,l)}},c=t=>{const e=t.OR;return Array.isArray(e)&&e.length===0&&Object.keys(t).length===1},y=(t,e)=>!t||Object.keys(t).length===0?e:c(t)||Object.keys(e).length===0?t:{AND:[t,e]},m=(t,e)=>f(t.policies,{auth:{can:u(e.roles,t.rolePermissions),identity:e.identity,roles:e.roles,userId:e.userId},ctx:e.ctx}),w=(t,e)=>{const o=t.byTable.get(e.table);if(!o||o.length===0)return e.rlsRequired&&!e.tablePublic?a:void 0;const r=[];for(const n of o){const s=m(n,e);if(s===void 0)return;c(s)||r.push(s)}return r.length===0?a:r.length===1?r[0]:{OR:r}},j=t=>{const e=new Map,o=new Set;for(const r of t)for(const n of p(r))o.has(n)||(o.add(n),g(e,n));return{byTable:e}},k=(t,e)=>y(w(t,e),e.shapeWhere);export{j as buildRlsReadRegistry,k as composeShapeReadWhere};

package/dist/packem_shared/composePluginMiddleware-ByhCqIGt.mjs

@@ -1 +0,0 @@
-import"@lunora/errors";import"./run-middleware-BeEEqmdE.mjs";import{c as s,d as o,a as m,b as t,i as d,m as l}from"./plugin-184MITA3.mjs";export{s as composePluginMiddleware,o as defineComponent,m as definePlugin,t as defineSchemaExtension,d as installPlugins,l as mergeSchemaExtension};

package/dist/packem_shared/context-identity-GunnA6La.mjs

@@ -1 +0,0 @@
-const o=e=>e?.auth?.userId??void 0;export{o as e};

package/dist/packem_shared/createPolicyDsl-sV1swpkD.mjs

@@ -1 +0,0 @@
-import{LunoraError as r}from"@lunora/errors";const l=e=>({on:e.on,table:e.table,when:e.when}),s=()=>e=>({on:e.on,table:e.table,when:e.when}),c=(e,n={})=>({name:e,...n}),d=e=>{const n=new Map;for(const o of e){const i=JSON.stringify([o.table,o.on]),t=n.get(i)??new Set;if(t.has(o.when))throw new r("INTERNAL",`definePolicies: duplicate policy for (table "${o.table}", on "${o.on}") — the same decision function is registered more than once. Multiple distinct policies per (table, on) are allowed (reads OR, writes AND); remove the duplicate.`);t.add(o.when),n.set(i,t)}return e},f=(e,n={})=>({name:e,...n});export{s as createPolicyDsl,c as definePermission,d as definePolicies,l as definePolicy,f as defineRole};

package/dist/packem_shared/defineAggregateIndex-BoiwhUKL.mjs

@@ -1 +0,0 @@
-import"@lunora/errors";import{H as n,X as s,Z as r,q as f,K as m,W as o,O as t}from"./plugin-184MITA3.mjs";import"@lunora/values";export{n as defineAggregateIndex,s as defineRankIndex,r as defineSchema,f as defineTable,m as defineVectorIndex,o as indexFieldsFromSchema,t as validateIndexFields};

package/dist/packem_shared/defineMigration-Bfpwxv2f.mjs

@@ -1 +0,0 @@
-import{LunoraError as i}from"@lunora/errors";const n=r=>{if(r.id.trim()==="")throw new i("INTERNAL","defineMigration: `id` must be a non-empty string");return{__lunoraMigration:!0,...r}};export{n as defineMigration};

package/dist/packem_shared/defineMutator-BgpQ-xUo.mjs

@@ -1 +0,0 @@
-import{LunoraError as i}from"@lunora/errors";import{e as s}from"./context-identity-GunnA6La.mjs";import{s as u}from"./functions-CDC08CWY.mjs";const d=(o,r,t)=>{if(o.trim()==="")throw new i("INTERNAL",'defineMutator: `owner` must name the column carrying the row owner (e.g. `owner: "userId"`)');const e=s(r);if(e===void 0)throw new i("UNAUTHORIZED","defineMutator: an owner-scoped mutator requires a verified identity; none was resolved for this request");const n=t,a=n[o];if(a!==void 0&&a!==e)throw new i("FORBIDDEN",`defineMutator: \`${o}\` does not match the verified identity — a mutator may only write rows its caller owns`);return n[o]=e,t},c=o=>({__lunoraMutator:!0,...o,handler:async(r,t)=>{const e=u(o.args??{},t),n=o.owner===void 0?e:d(o.owner,r,e);return o.server(r,n)},kind:"mutation"});export{c as defineMutator};

package/dist/packem_shared/defineShape-Ds8uNqzX.mjs

@@ -1 +0,0 @@
-import{LunoraError as r}from"@lunora/errors";import{e as w}from"./context-identity-GunnA6La.mjs";import{s}from"./functions-CDC08CWY.mjs";import{toWhereInput as u,deny as m}from"./allowAll-BnyNbJZT.mjs";const N=e=>{if(e.table.trim()==="")throw new r("INTERNAL","defineShape: `table` must be a non-empty string");if(e.columns?.length===0)throw new r("INTERNAL","defineShape: `columns` must list at least one column when provided");if(!e.where&&e.owner===void 0)throw new r("INTERNAL",`defineShape: shape on table "${e.table}" needs a \`where\` predicate or an \`owner\` (\`owner: true\` uses the table's .ownedBy(field), \`owner: "field"\` names the column) — a shape with neither would replicate the whole table`);return{__lunoraShape:!0,...e,compileWhere:(n,h,l)=>{const d=s(e.args??{},h),t=e.where?u(e.where(n,d)):void 0;if(e.owner===void 0)return t;const o=e.owner===!0?l?.ownerField:e.owner;if(o===void 0||o==="")throw new r("INTERNAL",`defineShape: shape on table "${e.table}" declares \`owner: true\` but the table has no \`.ownedBy(field)\` — add it to the table, or name the column directly with \`owner: "field"\``);const a=w(n);if(a===void 0)return m();const i={[o]:a};return t===void 0?i:{AND:[i,t]}}}};export{N as defineShape};

package/dist/packem_shared/functions-CDC08CWY.mjs

@@ -1 +0,0 @@
-import{parseValidatorMap as o}from"@lunora/values";const s=(r,a)=>o(r,a,"args");export{s};

package/dist/packem_shared/httpAction-BpEJYwzV.mjs

@@ -1,5 +0,0 @@
-import{toErrorBody as k}from"@lunora/errors";import{parseValidatorMap as R,ValidationError as v}from"@lunora/values";import{Hono as _}from"hono";import{LunoraError as p}from"./LunoraError-LVhdU0Lo.mjs";const H=e=>async r=>e(r.get("lunora"),r.req.raw),z=()=>{const e=new _;return e.use("*",async(r,t)=>{const a=r.env.__lunoraCtx;if(!a)throw new p("INTERNAL_SERVER_ERROR","HttpActionCtx was not injected — mount httpRouter() on createWorker(), which supplies it per request.");r.set("lunora",a),await t()}),e},N=e=>e.kind==="optional"?e._meta?.inner??e:e,f=(e,r)=>{switch(e){case"bigint":try{return BigInt(r)}catch{return r}case"boolean":return r==="true"||r==="1"?!0:r==="false"||r==="0"?!1:r;case"number":return r===""?Number.NaN:Number(r);default:return r}},A=(e,r,t)=>{const a=N(e);if(a.kind==="array"){const o=r.req.queries(t);if(o===void 0)return;const n=a._meta?.inner;return o.map(c=>f(n?.kind??"string",c))}const s=r.req.query(t);return s===void 0?void 0:f(a.kind,s)},S=(e,r)=>{const t={};for(const a of Object.keys(e)){const s=e[a];s&&(t[a]=A(s,r,a))}return R(e,t,"searchParams")},O=(e,r)=>{const t=r.req.param(),a={};for(const s of Object.keys(e)){const o=e[s];if(!o)continue;const n=t[s];a[s]=n===void 0?void 0:f(N(o).kind,n)}return R(e,a,"params")},P=async(e,r)=>{let t;try{t=await r.req.json()}catch{throw new p("BAD_REQUEST","Invalid JSON body")}if(typeof t!="object"||t===null||Array.isArray(t))throw new p("BAD_REQUEST","Expected a JSON object body");return R(e,t,"body")},q=(e,r)=>{try{return e.parse(r)}catch(t){throw t instanceof v?new p("INTERNAL_SERVER_ERROR",`Response did not match the declared output schema: ${t.message}`):t}},T=e=>{if(e instanceof v)return Response.json({code:"BAD_REQUEST",error:e.message},{status:400});if(e instanceof p){const{body:r,redacted:t,status:a}=k(e,{fallbackCode:"INTERNAL_SERVER_ERROR",redactedMessage:"Internal error"});return t&&console.error("[lunora] http action error (redacted on the wire):",e),Response.json({code:r.code,error:r.message},{status:a})}throw e},x=(e,r)=>async t=>{try{const a=t.get("lunora"),s=Object.keys(e.searchParams).length>0?S(e.searchParams,t):{},o=Object.keys(e.params).length>0?O(e.params,t):{},n=Object.keys(e.body).length>0?await P(e.body,t):{},c=await r({body:n,ctx:a,params:o,searchParams:s}),i=e.output?q(e.output,c):c,d={};e.cacheControl&&(d["cache-control"]=e.cacheControl),e.cacheTag&&(d["cache-tag"]=e.cacheTag),e.vary&&(d.vary=e.vary);const m=Object.keys(d).length>0;return i===void 0?new Response(null,{headers:m?d:void 0,status:204}):Response.json(i,{headers:m?d:void 0})}catch(a){return T(a)}},w={"cache-control":"no-cache, no-transform","content-type":"text/event-stream; charset=utf-8","x-accel-buffering":"no"},g=(e,r)=>{const t=JSON.stringify(e);return`${r?`event: ${r}
-`:""}data: ${t}
-
-`},C=(e,r)=>async t=>{let a,s;try{a=Object.keys(e.searchParams).length>0?S(e.searchParams,t):{},s=Object.keys(e.params).length>0?O(e.params,t):{}}catch(h){return T(h)}const o=t.get("lunora"),n=t.req.raw,c=new TextEncoder,i=new AbortController;if(n.signal.aborted)return i.abort(),new Response("",{headers:w});const d=()=>{i.abort()};n.signal.addEventListener("abort",d,{once:!0});const m=new ReadableStream({cancel(){n.signal.removeEventListener("abort",d),i.abort()},async start(h){try{const y=r({ctx:o,params:s,request:n,searchParams:a,signal:i.signal});for await(const b of y){if(i.signal.aborted)break;h.enqueue(c.encode(g(b)))}h.enqueue(c.encode(g({},"complete")))}catch(y){const{body:b,redacted:j}=k(y,{fallbackCode:"INTERNAL_SERVER_ERROR",redactedMessage:"Internal error"});j&&console.error("[lunora] unhandled stream handler error:",y),h.enqueue(c.encode(g({code:b.code,message:b.message},"error")))}finally{n.signal.removeEventListener("abort",d),h.close()}}});return new Response(m,{headers:w})},u=e=>({body:r=>u({...e,body:{...e.body,...r}}),cacheControl:r=>u({...e,cacheControl:r}),cacheTag:r=>u({...e,cacheTag:r}),handler:r=>x(e,r),output:r=>u({...e,output:r}),params:r=>u({...e,params:{...e.params,...r}}),searchParams:r=>u({...e,searchParams:{...e.searchParams,...r}}),stream:r=>C(e,r),vary:r=>u({...e,vary:r})}),l=e=>r=>u({body:{},method:e,params:{},path:r,searchParams:{}}),U={delete:l("DELETE"),get:l("GET"),head:l("HEAD"),options:l("OPTIONS"),patch:l("PATCH"),post:l("POST"),put:l("PUT")},$=/^bytes=(\d*)-(\d*)$/,E=e=>e.startsWith('"')||e.startsWith('W/"')?e:`"${e}"`,I=e=>!(e.includes("\r")||e.includes(`
-`)||e.includes("\0")),L=(e,r)=>{if(e===null)return{kind:"full"};const t=$.exec(e.trim());if(!t)return{kind:"full"};const a=t[1]??"",s=t[2]??"";if(a===""&&s==="")return{kind:"full"};let o,n;if(a===""){const c=Number(s);if(c===0)return{kind:"unsatisfiable"};o=Math.max(0,r-c),n=r-1}else o=Number(a),n=s===""?r-1:Math.min(Number(s),r-1);return o>n||o>=r?{kind:"unsatisfiable"}:{end:n,kind:"partial",start:o}},W=async(e,r,t)=>{const a=await e.storage.download(r);if(!a)return new Response("Not Found",{status:404});const s=a.httpMetadata?.contentType,o={"accept-ranges":"bytes","content-type":s!==void 0&&I(s)?s:"application/octet-stream",etag:E(a.etag)};a.sha256Base64!==void 0&&(o["repr-digest"]=`sha-256=:${a.sha256Base64}:`);const n=L(t.headers.get("range"),a.size);if(n.kind==="unsatisfiable")return a.body?.cancel().catch(()=>{}),new Response("Range Not Satisfiable",{headers:{"accept-ranges":"bytes","content-range":`bytes */${String(a.size)}`,"content-type":"text/plain; charset=utf-8",etag:E(a.etag)},status:416});if(n.kind==="full")return new Response(a.body,{headers:{...o,"content-length":String(a.size)},status:200});a.body?.cancel().catch(()=>{});const c=n.end-n.start+1,i=await e.storage.download(r,{range:{length:c,offset:n.start}});return i?new Response(i.body,{headers:{...o,"content-length":String(c),"content-range":`bytes ${String(n.start)}-${String(n.end)}/${String(a.size)}`},status:206}):new Response("Not Found",{status:404})};export{H as httpAction,U as httpRoute,z as httpRouter,I as isSafeHeaderValue,W as serveStorageObject};

package/dist/packem_shared/initLunora-BilEHyNs.mjs

@@ -1 +0,0 @@
-import{s as g}from"./functions-CDC08CWY.mjs";import{readMaskTag as w}from"./buildMaskRegistry-BCIzKxdK.mjs";import{l as x}from"./policy-tag-Dprt9JWo.mjs";import{l as f}from"./run-middleware-BeEEqmdE.mjs";const y=(a,e)=>e===void 0||typeof a!="object"||a===null?a:Object.assign(Object.create(Object.getPrototypeOf(a)),a,{meta:e}),p=(a,e)=>f(a,e,t=>t),b=(a,e,t,r,i)=>async(s,d)=>{const l=g(a,d),u=await p(e,y(s,i)),m=await t({args:l,ctx:u});return r?r.parse(m):m},v=(a,e,t)=>(r,i,s)=>{const d=g(a,i);return(async function*(){const l=await p(e,r),u=t({args:d,ctx:l,signal:s})[Symbol.asyncIterator]();try{for(;;){if(s.aborted)return;const m=await u.next();if(m.done||s.aborted)return;yield m.value}}finally{await u.return?.()}})()},n=a=>{const e=a.map(t=>x(t)).filter(t=>t!==void 0);return e.length>0?{tags:e}:void 0},c=a=>{const e=new Map;for(const t of a){const r=w(t);if(r)for(const[i,s]of r.columns){const d=e.get(i)??new Set;for(const l of s)d.add(l);e.set(i,d)}}return e.size>0?e:void 0},o=(a,e,t)=>({__lunoraProcedure:a,...t?{__lunoraVisibility:t}:{},input:r=>o(a,{...e,args:{...e.args,...r}},t),[a]:r=>{const i=n(e.middlewares),s=c(e.middlewares);return{args:e.args,...e.expose?{expose:e.expose}:{},handler:b(e.args,e.middlewares,r,e.output,e.meta),kind:a,...s?{maskedTables:s}:{},...e.meta?{meta:e.meta}:{},...i?{rls:i}:{},...t?{visibility:t}:{},...e.x402?{x402:e.x402}:{}}},meta:r=>o(a,{...e,meta:{...e.meta,...r}},t),output:r=>o(a,{...e,output:r},t),...a==="query"?{stream:(r,i)=>{const s=n(e.middlewares),d=c(e.middlewares),l=i?.durable===!0?{}:i?.durable;return{args:e.args,...l?{durable:l}:{},...e.expose?{expose:e.expose}:{},handler:v(e.args,e.middlewares,r),kind:"stream",...d?{maskedTables:d}:{},...s?{rls:s}:{},...t?{visibility:t}:{},...e.x402?{x402:e.x402}:{}}}}:{},use:r=>o(a,{...e,middlewares:[...e.middlewares,r]},t),...t?{}:{expose:r=>o(a,{...e,expose:r},t)},...t?{}:{x402:r=>o(a,{...e,x402:r},t)}}),O={dataModel:()=>({create:a=>({action:o("action",{args:{},middlewares:[]}),internalAction:o("action",{args:{},middlewares:[]},"internal"),internalMutation:o("mutation",{args:{},middlewares:[]},"internal"),internalQuery:o("query",{args:{},middlewares:[]},"internal"),mutation:o("mutation",{args:{},middlewares:[]}),query:o("query",{args:{},middlewares:[]})})})};export{O as initLunora};

package/dist/packem_shared/mask-CD7SWEvR.mjs

@@ -1 +0,0 @@
-import{LunoraError as b}from"./LunoraError-LVhdU0Lo.mjs";import{bindOrm as B,bindTableFacade as W}from"./bindOrm-Bp9hsM2q.mjs";import{T as F,U as R,o as O,L as U}from"./middleware-D9_39C5C.mjs";import{tagMaskMiddleware as j}from"./buildMaskRegistry-BCIzKxdK.mjs";const E=n=>{let i=2166136261;for(let s=0;s<n.length;s+=1)i^=n.codePointAt(s)??0,i=Math.imul(i,16777619);return(i>>>0).toString(16).padStart(8,"0")},_=(n,i,s)=>{try{return n==="redact"?null:n==="hash"?i==null?i:E(typeof i=="string"?i:JSON.stringify(i)):n(i,s)}catch{return null}},f=(n,i,s)=>{const u={...n};for(const[y,h]of Object.entries(i))y in u&&(u[y]=_(h,n[y],{...s,column:y,row:n}));return u},v=(n,i,s)=>({...n,page:n.page.map(u=>f(u,i,s))}),I=(n,i,s,u)=>{if(typeof n!="function")return;const y=new Set,h=()=>new Proxy({},{get:()=>d=>(typeof d=="string"&&y.add(d),h())});n(h());for(const d of y)if(d in i)throw new b("MASK_UNSUPPORTED",`${u}() filtering "${s}" by masked column "${d}" is not supported`)},D=(n,i,s,u)=>{const y=n.rankBefore,h=n.rankPageRows,d=(t,r)=>{const e=i.get(t);return e?r.map(o=>f(o,e,s)):r},p=t=>{const r=t?.relationMask;return{...t,relationMask:r===void 0?d:(e,o)=>r(e,d(e,o))}},g=(t,r,e,o)=>{const a=i.get(t);if(!a)return;const c=u?.[t]?.[o]?.[r];if(!c)return;const l=c.find(T=>T in a);if(l!==void 0)throw new b("MASK_UNSUPPORTED",`${e}() reading "${t}" via index "${r}" would order rows by masked column "${l}" — use an index whose declared fields are all unmasked, or unmask the column`)},m=(t,r,e)=>({async*[Symbol.asyncIterator](){for await(const o of{[Symbol.asyncIterator]:()=>t[Symbol.asyncIterator]()})yield f(o,r,s)},collect:async()=>(await t.collect()).map(o=>f(o,r,s)),collectWithScores:async()=>(await t.collectWithScores()).map(o=>{const a=f(o.document,r,s);return"distanceMeters"in o?{distanceMeters:null,document:a}:{document:a,score:o.score}}),filter:o=>m(t.filter(a=>o(f(a,r,s))),r,e),first:async()=>{const o=await t.first();return o?f(o,r,s):null},order:o=>m(t.order(o),r,e),paginate:async o=>v(await t.paginate(o),r,s),take:async o=>(await t.take(o)).map(a=>f(a,r,s)),unique:async()=>{const o=await t.unique();return o?f(o,r,s):null},withIndex:(o,a)=>(g(e,o,"withIndex","index"),I(a,r,e,"withIndex"),m(t.withIndex(o,a),r,e)),withSearchIndex:(o,a)=>(I(a,r,e,"withSearchIndex"),m(t.withSearchIndex(o,a),r,e)),withGeoIndex:(o,a)=>(g(e,o,"withGeoIndex","geo"),m(t.withGeoIndex(o,a),r,e))}),S=async(t,r)=>{if(n.lookupById){const l=await n.lookupById(t,r);return l?{row:l.row,tableName:i.has(l.tableName)?l.tableName:void 0}:{row:null,tableName:void 0}}const e=await n.get(t,r);if(!e)return{row:null,tableName:void 0};const o=r!==void 0&&i.has(r)?[r]:[],a=r===void 0?[...i.keys()]:o,c=await Promise.all(a.map(async l=>(await n.findFirst(l,{limit:1,where:{_id:t}}))?._id===t?l:void 0));return{row:e,tableName:c.find(l=>l!==void 0)}},k=(t,r,e)=>{const o=i.get(t);if(!o)return;const a=r.find(c=>typeof c=="string"&&c in o);if(a!==void 0)throw new b("MASK_UNSUPPORTED",`${e}() over masked column "${a}" on "${t}" is not supported`)},x=(t,r)=>{if(!(!t||typeof t!="object"||Array.isArray(t)))for(const[e,o]of Object.entries(t))if(e==="AND"||e==="OR"){if(Array.isArray(o))for(const a of o)x(a,r)}else e==="NOT"?x(o,r):e.startsWith("__")||r.add(e)},w=(t,r,e)=>{const o=i.get(t);if(!o||r===void 0)return;const a=new Set;x(r,a);for(const c of a)if(c in o)throw new b("MASK_UNSUPPORTED",`${e}() filtering "${t}" by masked column "${c}" is not supported`)},P=(t,r,e)=>{const o=i.get(t);if(!(!o||!Array.isArray(r))){for(const a of r)if(a&&typeof a=="object"&&!Array.isArray(a)){for(const c of Object.keys(a))if(c in o)throw new b("MASK_UNSUPPORTED",`${e}() ordering "${t}" by masked column "${c}" is not supported`)}}},A=t=>t&&typeof t=="object"&&!Array.isArray(t)?t:void 0,M=(t,r,e)=>{const o=A(r);w(t,o?.where,e),w(t,o?.baseWhere,e)},N={...n,async deleteWhere(t,r,e){if(w(t,r,"deleteMany({ where })"),n.deleteWhere===void 0)throw new b("INTERNAL",`ctx.db.${t}.deleteMany({ where }) is unavailable: this writer has no where-based delete`);return n.deleteWhere(t,r,e)},async patchWhere(t,r,e){if(w(t,r.where,"patchMany({ where })"),n.patchWhere===void 0)throw new b("INTERNAL",`ctx.db.${t}.patchMany({ where }) is unavailable: this writer has no where-based patch`);return n.patchWhere(t,r,e)},aggregate(t,r){return k(t,[r.field],"aggregate"),w(t,r.where,"aggregate"),n.aggregate(t,r)},count(t,r){const e=A(r),o=e&&("where"in e||"baseWhere"in e||"restrictsCounts"in e)?e.where:r;return w(t,o,"count"),e&&w(t,e.baseWhere,"count"),n.count(t,r)},async findFirst(t,r){w(t,r?.where,"findFirst"),w(t,r?.baseWhere,"findFirst"),P(t,r?.orderBy,"findFirst");const e=await n.findFirst(t,p(r)),o=i.get(t);return e&&o?f(e,o,s):e},async findFirstOrThrow(t,r){w(t,r?.where,"findFirstOrThrow"),w(t,r?.baseWhere,"findFirstOrThrow"),P(t,r?.orderBy,"findFirstOrThrow");const e=await n.findFirstOrThrow(t,p(r)),o=i.get(t);return o?f(e,o,s):e},async findMany(t,r){w(t,r?.where,"findMany"),w(t,r?.baseWhere,"findMany"),P(t,r?.orderBy,"findMany");const e=await n.findMany(t,p(r)),o=i.get(t);return o?v(e,o,s):e},async get(t,r){const{row:e,tableName:o}=await S(t,r),a=o===void 0?void 0:i.get(o);return!e||!a?e:f(e,a,s)},async lookupById(t,r){const e=await n.lookupById?.(t,r);if(!e)return null;const o=i.get(e.tableName);return{row:o?f(e.row,o,s):e.row,tableName:e.tableName}},groupBy(t,r){return k(t,[...r.by,r.agg?.field],"groupBy"),w(t,r.where,"groupBy"),n.groupBy(t,r)},query(t){const r=n.query(t),e=i.get(t);return e?m(r,e,t):r},async rank(t,r,e){return M(t,e,"rank"),g(t,r,"rank","rank"),n.rank(t,r,e)},async rankPage(t,r,e){M(t,e,"rankPage"),g(t,r,"rankPage","rank");const o=await n.rankPage(t,r,e),a=i.get(t);return a?v(o,a,s):o},...O("rankBefore",y,t=>(r,e,o)=>(M(r,o,"rankBefore"),g(r,e,"rankBefore","rank"),t(r,e,o))),...O("rankPageRows",h,t=>async(r,e,o)=>{M(r,o,"rankPageRows"),g(r,e,"rankPageRows","rank");const a=await t(r,e,o),c=i.get(r);return c?{...a,rows:a.rows.map(l=>({...l,doc:f(l.doc,c,s)}))}:a})},$=N;for(const t of i.keys())U(n[t])&&($[t]=W(N,t));return N},C=(n,i={})=>{const s=new Map(Object.entries(n)),u=F(i.roles),y=async({ctx:d,next:p})=>{const g={auth:await R(d.auth??{},u),ctx:d};if(i.bypass?.(g))return p();const m=D(d.db,s,g,i.indexFields),S={db:m},{orm:k}=d;return k!==null&&typeof k=="object"&&(S.orm=B(m)),p({ctx:S})},h=new Map;for(const[d,p]of s)h.set(d,new Set(Object.keys(p)));return j(y,{columns:h})};export{C as mask};

package/dist/packem_shared/middleware-D9_39C5C.mjs

@@ -1 +0,0 @@
-import{LunoraError as p}from"./LunoraError-LVhdU0Lo.mjs";import{bindOrm as x,bindTableFacade as F}from"./bindOrm-Bp9hsM2q.mjs";import{r as U}from"./policy-tag-Dprt9JWo.mjs";import{deny as j}from"./allowAll-BnyNbJZT.mjs";const _=(t,r,s)=>r?{[t]:s(r)}:{},I=500,W=(t,r,s)=>{const i=r??I;if(t>i)throw new p("BAD_REQUEST",`${s}: batch of ${String(t)} exceeds the limit of ${String(i)} (raise options.limit or chunk the call)`)},C=j(),$=Symbol.for("lunora.ctxdb.rls-unwrap"),q=t=>{const r=new Map;for(const s of t){const i=r.get(s.table)??[];i.push(s),r.set(s.table,i)}return r},L=(t,r)=>{const s=[];let i=!1;for(const u of t){if(u.on!=="read")continue;const c=u.when(r);if(c!==void 0){if(c===!0){i=!0;break}c!==!1&&s.push(c)}}if(!i)return s.length===0?C:s.length===1?s[0]:{OR:s}},M=t=>typeof t=="object"&&t!==null&&!Array.isArray(t),z=["contains","eq","gt","gte","in","isNull","lt","lte","ne","notIn"],g=t=>{const r=typeof t;return r==="number"||r==="string"||r==="bigint"},Q=(t,r)=>!("lt"in r&&(!g(t)||!g(r.lt)||t>=r.lt)||"lte"in r&&(!g(t)||!g(r.lte)||t>r.lte)||"gt"in r&&(!g(t)||!g(r.gt)||t<=r.gt)||"gte"in r&&(!g(t)||!g(r.gte)||t<r.gte)),G=(t,r)=>{if("in"in r){const s=r.in;if(!Array.isArray(s)||!s.includes(t))return!1}if("notIn"in r){const s=r.notIn;if(Array.isArray(s)&&s.includes(t))return!1}if("contains"in r){const s=r.contains;if(typeof t!="string"||typeof s!="string"||!t.includes(s))return!1}return!("isNull"in r&&r.isNull===!0!=(t==null))},H=(t,r)=>"eq"in r&&t!==r.eq||"ne"in r&&t===r.ne?!1:G(t,r)&&Q(t,r),J=(t,r,s,i)=>r==="AND"?Array.isArray(s)&&s.every(u=>i(t,u)):r==="OR"?Array.isArray(s)&&s.some(u=>i(t,u)):!i(t,s??{}),D=t=>t==="AND"||t==="OR"||t==="NOT",V=t=>M(t)&&Object.keys(t).every(r=>z.includes(r)),X=["every","is","isNot","none","some"],Y=t=>M(t)&&Object.keys(t).length>0&&Object.keys(t).every(r=>X.includes(r)),A=t=>Object.keys(t).some(r=>{const s=t[r];return D(r)?r==="NOT"?A(s??{}):Array.isArray(s)&&s.some(i=>A(i??{})):Y(s)}),v=(t,r)=>{for(const s of Object.keys(r)){const i=r[s];if(D(s)){if(!J(t,s,i,v))return!1;continue}const u=t[s];if(V(i)){if(!H(u,i))return!1;continue}if(u!==i)return!1}return!0},Z=(t,r,s)=>{const i=t.when({...r,row:s});if(i===void 0||i===!0)return!0;if(i===!1)return!1;if(A(i))throw new p("RELATION_PREDICATE_UNSUPPORTED","relation predicates are not supported in write policies; use a read policy or a flat column check");return v(s,i)},K=(t,r,s)=>{const i=t.when(r);if(i===void 0||i===!0)return s===void 0||Z(t,r,s);if(i===!1)return!1;if(A(i))throw new p("RELATION_PREDICATE_UNSUPPORTED","relation predicates are not supported in write policies; use a read policy or a flat column check");return!r.row||!v(r.row,i)?!1:s===void 0||v(s,i)},O=(t,r,s,i)=>{let u=!1;for(const c of t)if(c.on===r&&(u=!0,!K(c,s,i)))return!1;return u},ee=new Set(["baseWhere","relationBaseWhere","restrictsCounts","where"]),te=(t,r)=>r===void 0?!0:t==="restrictsCounts"?typeof r=="boolean":t==="relationBaseWhere"?typeof r=="function":M(r),re=t=>{const r=Object.keys(t);return r.length===0?!1:r.every(s=>ee.has(s)&&te(s,t[s]))},ae=t=>t===void 0?{}:M(t)&&re(t)?t:{where:t},b=(t,r)=>!r||Object.keys(r).length===0?t:!t||Object.keys(t).length===0?r:{AND:[r,t]},ne=t=>{if(typeof t!="object"||t===null||Array.isArray(t))return!1;const r=t;return typeof r.findMany=="function"&&typeof r.withSearchIndex=="function"},se=(t,r,s,i)=>{const u=new Map,c=e=>{const a=u.get(e);if(a)return a;const n=s.get(e);if(!n||n.length===0||!n.some(l=>l.on==="read")){const l={baseWhere:void 0,restricts:!1};return u.set(e,l),l}const o={baseWhere:L(n,i),restricts:!0};return u.set(e,o),o},h=e=>c(e).restricts?r:t,y=e=>c(e).baseWhere,N=async(e,a)=>{if(r.lookupById){const d=await r.lookupById(e,a);return d?{row:d.row,tableName:s.has(d.tableName)?d.tableName:void 0}:{row:null,tableName:void 0}}const n=await r.get(e,a);if(!n)return{row:null,tableName:void 0};const o=a!==void 0&&s.has(a)?[a]:[],l=a===void 0?[...s.keys()]:o,f=await Promise.all(l.map(async d=>(await r.findFirst(d,{limit:1,where:{_id:e}}))?._id===e?d:void 0));return{row:n,tableName:f.find(d=>d!==void 0)}},B=async(e,a)=>{const n=await N(e,a);return n.row&&n.tableName!==void 0?{row:n.row,tableName:n.tableName}:void 0},w=async(e,a,n,o,l)=>{const f=await B(e,l);if(!f)return n(t);const d=s.get(f.tableName);if(d){const R=o?o(f.row):void 0;if(!O(d,a,{...i,row:f.row},R))throw new p("FORBIDDEN",`${a} denied by policy`)}return n(r)},m=(e,a)=>{const{baseWhere:n,restricts:o}=c(e);if(o)throw new p("COUNT_RLS_UNSUPPORTED",`${a}() is not supported on "${e}" inside an RLS-restricted context`);return n},S=t.rankBefore,T=t.rankPageRows,k={...t,async count(e,a){const{baseWhere:n,restricts:o}=c(e),l=ae(a);return h(e).count(e,{...l,baseWhere:b(l.baseWhere,n),relationBaseWhere:y,restrictsCounts:(l.restrictsCounts??!1)||o})},delete:(e,a,n)=>w(e,"delete",o=>o.delete(e,a,n),void 0,a),async deleteAll(e,a){const n=Math.max(1,a?.chunkSize??I),{baseWhere:o}=c(e);let l=0;for(;;){const f=(await h(e).findMany(e,{baseWhere:o,limit:n,relationBaseWhere:y})).page.map(d=>String(d._id));if(f.length===0)break;for(const d of f)await w(d,"delete",R=>R.delete(d,void 0,a?.hard===void 0?void 0:{hard:a.hard})),l+=1;if(f.length<n)break}return{deleted:l}},async deleteMany(e,a,n){W(e.length,a?.limit,"deleteMany");for(const o of e)await w(o,"delete",l=>l.delete(o,n),void 0,n);return{deleted:e.length}},async deleteWhere(e,a,n){const{baseWhere:o}=c(e),l=(await h(e).findMany(e,{baseWhere:b(a,o),relationBaseWhere:y})).page.map(f=>String(f._id));return W(l.length,n?.limit,"deleteWhere"),k.deleteMany(l,n)},async findFirst(e,a){const{baseWhere:n}=c(e);return h(e).findFirst(e,{...a,baseWhere:b(a?.baseWhere,n),relationBaseWhere:y})},async findFirstOrThrow(e,a){const{baseWhere:n}=c(e);return h(e).findFirstOrThrow(e,{...a,baseWhere:b(a?.baseWhere,n),relationBaseWhere:y})},async findMany(e,a){const{baseWhere:n}=c(e);return h(e).findMany(e,{...a,baseWhere:b(a?.baseWhere,n),relationBaseWhere:y})},async get(e,a){const n=await N(e,a);if(!n.row)return null;if(n.tableName===void 0)return t.get(e,a);const{baseWhere:o,restricts:l}=c(n.tableName);if(!l)return t.get(e,a);if(!o)return n.row;const f=await r.findFirst(n.tableName,{baseWhere:o,limit:1,where:{_id:e}});return f?._id===e?f:null},async lookupById(e,a){const n=await N(e,a);if(!n.row)return null;if(n.tableName===void 0||!c(n.tableName).restricts)return await t.lookupById?.(e,a)??null;const{baseWhere:o}=c(n.tableName);if(!o)return{row:n.row,tableName:n.tableName};const l=await r.findFirst(n.tableName,{baseWhere:o,limit:1,where:{_id:e}});return l?._id===e?{row:l,tableName:n.tableName}:null},async insert(e,a){const n=s.get(e);if(n){if(!O(n,"insert",{...i,row:a}))throw new p("FORBIDDEN",`insert on "${e}" denied by policy`);return r.insert(e,a)}return t.insert(e,a)},async insertMany(e,a,n){W(a.length,n?.limit,"insertMany");const o=s.get(e);if(o){for(const l of a)if(!O(o,"insert",{...i,row:l}))throw new p("FORBIDDEN",`insert on "${e}" denied by policy`);return r.insertMany(e,a,n)}return t.insertMany(e,a,n)},async insertManyUnsafe(e,a,n){W(a.length,n?.limit,"insertManyUnsafe");const o=s.get(e);if(o){for(const l of a)if(!O(o,"insert",{...i,row:l}))throw new p("FORBIDDEN",`insert on "${e}" denied by policy`);return r.insertManyUnsafe(e,a,n)}return t.insertManyUnsafe(e,a,n)},patch:(e,a,n)=>w(e,"update",o=>o.patch(e,a,n),o=>({...o,...a}),n),async patchMany(e,a,n){W(e.length,a?.limit,"patchMany");for(const o of e)await w(o.id,"update",l=>l.patch(o.id,o.patch,n),l=>({...l,...o.patch}),n);return{patched:e.length}},async patchWhere(e,a,n){const{baseWhere:o}=c(e),l=(await h(e).findMany(e,{baseWhere:b(a.where,o),relationBaseWhere:y})).page.map(f=>({id:String(f._id),patch:a.patch}));return W(l.length,n?.limit,"patchWhere"),k.patchMany(l,n)},query(e){const{baseWhere:a}=c(e),n=h(e).query(e);return a?n.filter(o=>v(o,a)):n},restore:(e,a)=>w(e,"update",async n=>{const o=n.restore??r.restore;if(!o)throw new p("BAD_REQUEST","restore is not supported by this writer");await o(e,a)},void 0,a),replace:(e,a,n)=>w(e,"update",o=>o.replace(e,a,n),o=>({...a,_creationTime:a._creationTime??o._creationTime,_id:o._id}),n),aggregate(e,a){const{baseWhere:n}=c(e);return h(e).aggregate(e,{...a,baseWhere:b(a.baseWhere,n),relationBaseWhere:y})},groupBy(e,a){const{baseWhere:n}=c(e);return h(e).groupBy(e,{...a,baseWhere:b(a.baseWhere,n),relationBaseWhere:y})},rank(e,a,n){const o=m(e,"rank");return h(e).rank(e,a,{...n,baseWhere:b(n.baseWhere,o)})},rankPage(e,a,n){const o=m(e,"rankPage");return h(e).rankPage(e,a,{...n,baseWhere:b(n?.baseWhere,o)})},wipeShard(){throw new p("FORBIDDEN","ctx.db.wipeShard() is unavailable under rls(): a whole-shard erase can't be policy-gated per row, and erasing only policy-visible rows would silently leave data behind. Run it from an internalMutation, or use ctx.db.deleteAll(table) per table.",{status:403})},..._("rankBefore",S,e=>(a,n,o)=>(m(a,"rankBefore"),(h(a).rankBefore??e)(a,n,o))),..._("rankPageRows",T,e=>(a,n,o)=>{const l=m(a,"rankPageRows");return(h(a).rankPageRows??e)(a,n,{...o,baseWhere:b(o?.baseWhere,l)})})},P=k;for(const e of s.keys())ne(t[e])&&(P[e]=F(k,e));return k},E=t=>typeof t=="string"?t:t.name,oe=t=>{const r=new Map;for(const s of t??[])r.set(s.name,new Set((s.permissions??[]).map(i=>E(i))));return r},ie=(t,r)=>{const s=new Set;for(const i of t)for(const u of r.get(i)??[])s.add(u);return i=>s.has(E(i))},le=async(t,r)=>{const s=t.roles??[];return{can:ie(s,r),identity:await t.getIdentity?.()??null,roles:s,userId:t.userId??null}},he=(t,r={})=>{const s=q(t),i=oe(r.roles);return U(async({ctx:u,next:c})=>{const h={auth:await le(u.auth??{},i),ctx:u},y=u.db,N=y[$]??y,B=se(y,N,s,h),w={db:B},{orm:m}=u;return m!==null&&typeof m=="object"&&(w.orm=x(B)),c({ctx:w})},{policies:t,roles:r.roles??[]})};export{L as E,ie as F,O as I,ne as L,E as M,v as P,oe as T,le as U,he as c,_ as o};

package/dist/packem_shared/onConnect-CEtRmUpJ.mjs

@@ -1 +0,0 @@
-const i=(n,c)=>({args:{},handler:(t,e)=>c(t,e),kind:"mutation",lifecycle:n,visibility:"internal"}),o=n=>i("connect",n),s=n=>i("disconnect",n);export{o as onConnect,s as onDisconnect};

package/dist/packem_shared/plugin-184MITA3.mjs

@@ -1 +0,0 @@
-import{LunoraError as i}from"@lunora/errors";import{l as F}from"./run-middleware-BeEEqmdE.mjs";import{v as R}from"@lunora/values";const B=["de","en","es","fr","it","nl","none","pt"],O=["native","portable"],C=e=>O.includes(e),P=e=>B.includes(e),_="a an and are as at be but by for if in into is it no not of on or such that the their then there these they this to was will with",H="aber als am an auch auf aus bei bin bis bist da dass der den des dem die das denn dir du ein eine für hat ich im in ist mit nicht noch nur oder sich sie sind über und von vor war wie wir zu zum zur",K="a al como con de del el en es la las lo los mas no o para pero por que se su sus un una uno y ya",Q="au aux avec ce ces dans de des du elle en et eux il je la le les leur lui ma mais me même mes moi mon ne nos notre nous on ou par pas pour qu que qui sa se ses son sur ta te tes toi ton tu un une vos votre vous y",U="a ai al alla anche che chi ci coi col come con da dal degli dei del della di do e ed gli ha hai hanno i il in la le lo ma mi ne nei nel non o per più quale quanto se si sono su sul tra un una uno vi",J="aan al als bij dan dat de der deze die dit door een en er het hij ij in is je kan me men met mij na naar niet nog nu of om ons ook op over te tot uit van voor was wat we wij zij zijn zo",W="a ao aos as até com como da das de do dos e em entre era essa esse esta este eu foi há isso já mais mas me mesmo meu na nas no nos num numa o os ou para pela pelo por qual que quem se sem seu só sua também te tem um uma você",G=/[\u0300-\u036F]/gu,X=e=>e.normalize("NFD").replaceAll(G,"").normalize("NFC").toLowerCase(),g=e=>new Set(X(e).split(" "));g(H),g(_),g(K),g(Q),g(U),g(J),g(W);const T=16,Y={many:(e,n)=>({field:n.field,kind:"many",references:n.references??"_id",table:e}),one:(e,n)=>({field:n.field,kind:"one",onDelete:n.onDelete,references:n.references??"_id",table:e})},b=(e,n,t)=>({handler:t,op:n,timing:e}),Z=()=>({afterDelete:e=>b("after","delete",e),afterInsert:e=>b("after","insert",e),afterUpdate:e=>b("after","update",e),beforeDelete:e=>b("before","delete",e),beforeInsert:e=>b("before","insert",e),beforeUpdate:e=>b("before","update",e)}),M=(e,n)=>{if(!n||n.length===0)throw new i("INTERNAL",`rankIndex "${e}": "sortBy" is required and must list at least one key`);return n.map(t=>({direction:t.direction??"asc",field:t.field}))},me=e=>{const n={...e},t=[],r=[],s=[],l=[],c={},d=[],m={},f=Z(),w=[];let I={kind:"root"},$=!1,j=!1,A,L,S,q;const u={aggregateIndex(a,o){const h=o?.op??"count";if(h!=="count"&&!o?.field)throw new i("INTERNAL",`aggregateIndex "${a}": op "${h}" requires a "field"`);return t.push({by:o?.by,field:o?.field,name:a,on:"",op:h,where:o?.where}),u},get aggregateIndexes(){return t},get externalSource(){return q},externallyManaged(){return $=!0,u},geoIndex(a,o){return r.push({field:o.field,name:a,precision:o.precision}),u},get geoIndexes(){return r},global(a){return I={backend:a?.backend??"d1",kind:"global"},u},get isExternallyManaged(){return $},get isPublic(){return j},index(a,o,h){return s.push({fields:o,name:a,unique:h?.unique??!1}),u},get indexes(){return s},ownedBy(a){return A=a,u},get ownerField(){return A},public(){return j=!0,u},rankIndex(a,o){return l.push({name:a,on:"",partitionBy:o.partitionBy,sortBy:M(a,o.sortBy),where:o.where}),u},get rankIndexes(){return l},get relationMap(){return c},relations(a){return Object.assign(c,a(Y)),u},searchIndex(a,o){if(o.filterFields&&o.filterFields.length>T)throw new i("INTERNAL",`searchIndex "${a}": at most ${String(T)} filterFields are supported (got ${String(o.filterFields.length)})`);const{language:h}=o;if(h!==void 0&&!P(h))throw new i("INTERNAL",`searchIndex "${a}": unknown language "${h}" (supported: ${B.join(", ")})`);const{strategy:N}=o;if(N!==void 0&&!C(N))throw new i("INTERNAL",`searchIndex "${a}": unknown strategy "${N}" (supported: ${O.join(", ")})`);return d.push({field:o.field,filterFields:o.filterFields,language:o.language,name:a,staged:o.staged,strategy:o.strategy}),u},get searchIndexes(){return d},shape:n,shardBy(a){return I={field:a,kind:"shardBy"},u},get shardMode(){return I},get softDeleteMode(){return L},source(a){if(!a.binding)throw new i("INTERNAL","source: `binding` is required (the wrangler Hyperdrive binding name)");if(!a.query)throw new i("INTERNAL","source: `query` is required (the tenant-membership SQL)");return q=a,$=!0,u},softDelete(a){const o=a?.field??"deletedAt";return L={field:o},o in n||(n[o]=R.optional(R.number().nullable())),u},get triggerMap(){return m},triggers(a){return Object.assign(m,a(f)),u},ttl(a,o){return S={after:o?.after,field:a},u},get ttlPolicy(){return S},get vectorIndexes(){return w},vectorize(a,o){return w.push({dimensions:o.dimensions,embed:o.embed,field:a,metadata:o.metadata,metric:o.metric,name:o.index}),u}};return u},fe=e=>({dimensions:e.dimensions,embed:e.embed,kind:"vectorIndex",metadata:e.metadata,metric:e.metric,select:e.source.select,table:e.source.table}),he=(e,n)=>{const t=n.op??"count";if(t!=="count"&&!n.field)throw new i("INTERNAL",`aggregateIndex "${e}": op "${t}" requires a "field"`);return{by:n.by,field:n.field,name:e,on:n.on,op:t,where:n.where}},ge=(e,n)=>({name:e,on:n.table,partitionBy:n.partitionBy,sortBy:M(e,n.sortBy),where:n.where}),x=e=>({...e,extend(n){return x(z(e,n))},jurisdiction(n){return x(e)},rls(n){return x({...e,rlsMode:n})}}),V=e=>{for(const[n,t]of Object.entries(e))for(const r of[...t.aggregateIndexes,...t.rankIndexes])r.on===""&&(r.on=n)},ee=(e,n,t)=>{for(const r of Object.values(n)){const s=e[r.on];if(!s)throw new i("INTERNAL",`defineAggregateIndex "${r.name}": unknown table "${r.on}"`);s.aggregateIndexes.push(r)}for(const r of Object.values(t)){const s=e[r.on];if(!s)throw new i("INTERNAL",`defineRankIndex "${r.name}": unknown table "${r.on}"`);s.rankIndexes.push(r)}},ne=e=>{if(e.cursor)return"cursor";if(e.reconcileEveryMs!==void 0)return"reconcileEveryMs";if(e.softDeleteColumn!==void 0)return"softDeleteColumn"},te=(e,n)=>{const t=n.mode==="incremental";if(n.mode!==void 0&&n.mode!=="full-pull"&&!t)throw new i("INTERNAL",`defineSchema: table "${e}" uses \`mode: ${JSON.stringify(n.mode)}\` — supported modes are "full-pull" (default) and "incremental".`);if(!t){const r=ne(n);if(r)throw new i("INTERNAL",`defineSchema: table "${e}" sets \`${r}\` but is not \`mode: "incremental"\` — that knob only applies to incremental ingest. Set \`mode: "incremental"\` or remove \`${r}\`.`);return}if(!n.cursor?.column||!n.cursor.query)throw new i("INTERNAL",`defineSchema: table "${e}" is \`mode: "incremental"\` but has no \`cursor\` — add \`cursor: { column: "updated_at", query: "… WHERE … > $N" }\` binding the watermark as the trailing parameter.`);if(n.reconcileEveryMs===void 0&&n.softDeleteColumn===void 0)throw new i("INTERNAL",`defineSchema: table "${e}" is \`mode: "incremental"\` with no delete-visibility path — an incremental pull never sees upstream deletes, so it would accumulate phantom rows. Add \`reconcileEveryMs\` (a periodic full-pull sweep) or \`softDeleteColumn\` (an upstream tombstone column).`)},re=e=>{for(const[n,t]of Object.entries(e)){const r=t.externalSource;if(r){if(t.shardMode.kind==="global")throw new i("INTERNAL",`defineSchema: table "${n}" cannot be both .source() and .global() — a sourced table materializes into a shard DO's SQLite, a global table lives in the external tier`);if(t.shardMode.kind==="shardBy"&&!r.tenantBy)throw new i("INTERNAL",`defineSchema: sourced + .shardBy() table "${n}" needs a \`tenantBy\` mapper — without it every tenant's DO would run the same unscoped query and replicate the whole multitenant table (a cross-tenant leak). Add \`tenantBy: (shardKey) => [shardKey]\` binding the shard key into the query's parameters.`);te(n,r)}}},oe=["_creationTime","_id"],ae=new Set(oe),p=(e,n,t,r)=>{if(!(ae.has(t)||t in r.shape))throw new i("INTERNAL",`defineSchema: table "${e}" index "${n}" names column "${t}" which is not in the table's shape`)},v=(e,n,t,r)=>{const s=new Set;for(const l of t){if(s.has(l.name))throw new i("INTERNAL",`defineSchema: table "${e}" declares ${n} "${l.name}" more than once`);s.add(l.name),r(l)}},D=e=>{for(const[n,t]of Object.entries(e))v(n,"index",t.indexes,r=>{for(const s of r.fields)p(n,r.name,s,t)}),v(n,"rank index",t.rankIndexes,r=>{for(const s of r.sortBy)p(n,r.name,s.field,t);for(const s of r.partitionBy??[])p(n,r.name,s,t)}),v(n,"geo index",t.geoIndexes,r=>{p(n,r.name,r.field,t)})},k=(e,n,t)=>{if(e.length===0)return;const r={};for(const s of e)r[n(s)]=t(s);return r},se=e=>{const n=new Set(e.sortBy.map(t=>t.field));for(const t of e.partitionBy??[])n.add(t);return[...n]},be=e=>{const n={};for(const[t,r]of Object.entries(e.tables)){const s=k(r.geoIndexes,d=>d.name,d=>[d.field]),l=k(r.indexes,d=>d.name,d=>d.fields),c=k(r.rankIndexes,d=>d.name,se);(s||l||c)&&(n[t]={...s?{geo:s}:{},...l?{index:l}:{},...c?{rank:c}:{}})}return n},we=(e,n={},t={},r={})=>(V(e),ee(e,t,r),re(e),D(e),x({tables:e,vectorIndexes:n})),y=(e,n)=>`${e}_${n}`,E=(e,n,t)=>t.has(e)?y(n,e):e,ie=(e,n,t,r)=>{const s=y(n,r),l=f=>f===""?s:E(f,n,t),c={};for(const[f,w]of Object.entries(e.relationMap))c[f]={...w,table:E(w.table,n,t)};const d=e.aggregateIndexes.map(f=>({...f,on:l(f.on)})),m=e.rankIndexes.map(f=>({...f,on:l(f.on)}));return{...e,aggregateIndexes:d,rankIndexes:m,relationMap:c}},pe=(e,n)=>{if(!e)throw new i("INTERNAL","defineSchemaExtension: `key` is required and must be a non-empty string");return{key:e,tables:n.tables,...n.vectorIndexes?{vectorIndexes:n.vectorIndexes}:{}}},de=((e,n)=>{if(!e)throw new i("INTERNAL","definePlugin: `key` is required and must be a non-empty string");if(n.extension&&n.extension.key!==e)throw new i("INTERNAL",`definePlugin("${e}"): extension key "${n.extension.key}" does not match plugin key`);return{key:e,...n.extension?{extension:n.extension}:{},...n.middleware?{middleware:n.middleware}:{}}}),xe=(e,n)=>({...de(e,{...n.extension?{extension:n.extension}:{},...n.middleware?{middleware:n.middleware}:{}}),functions:n.functions??{}}),z=(e,n)=>{const{key:t}=n,r=new Set(Object.keys(n.tables)),s={...e.tables};for(const[c,d]of Object.entries(n.tables)){const m=y(t,c);if(Object.hasOwn(s,m))throw new i("INTERNAL",`defineSchema(...).extend("${t}"): table "${m}" already exists in the base schema — another extension with the same key already contributed it`);s[m]=ie(d,t,r,c)}const l={...e.vectorIndexes};if(n.vectorIndexes)for(const[c,d]of Object.entries(n.vectorIndexes)){const m=y(t,c);if(Object.hasOwn(l,m))throw new i("INTERNAL",`defineSchema(...).extend("${t}"): vector index "${m}" already exists in the base schema — another extension with the same key already contributed it`);l[m]={...d,table:E(d.table,t,r)}}return D(s),{rlsMode:e.rlsMode,tables:s,vectorIndexes:l}},ye=(e,n)=>{let t=e;for(const r of n)r.extension&&(t=z(t,r.extension));return t},Ie=e=>{const n=e.map(t=>t.middleware).filter(t=>t!==void 0);return(async({ctx:t,next:r})=>F(n,t,s=>r({ctx:s})))};export{he as H,fe as K,D as O,be as W,ge as X,we as Z,de as a,pe as b,Ie as c,xe as d,ye as i,z as m,me as q};

package/dist/packem_shared/policy-tag-Dprt9JWo.mjs

@@ -1 +0,0 @@
-const o=Symbol.for("lunora.rls.middleware-policies"),l=(e,r)=>(Object.defineProperty(e,o,{configurable:!0,enumerable:!1,value:r}),e),t=e=>{if(!(e===null||typeof e!="function"&&typeof e!="object"))return e[o]};export{t as l,l as r};

package/dist/packem_shared/protectPublic-BhKewPqm.mjs

@@ -1 +0,0 @@
-import{l as n}from"./run-middleware-BeEEqmdE.mjs";const e=t=>{const r=[t.rateLimit,t.captcha,...t.use??[]].filter(c=>c!==void 0);return async({ctx:c,next:o})=>n(r,c,i=>o({ctx:i}))};export{e as protectPublic};

package/dist/packem_shared/rls-CI2149Ve.mjs

@@ -1 +0,0 @@
-import"./LunoraError-LVhdU0Lo.mjs";import"./bindOrm-Bp9hsM2q.mjs";import{E as t,I as m,T as p,L as l,P as c,M as n,F as h,U as d,c as u}from"./middleware-D9_39C5C.mjs";import"./policy-tag-Dprt9JWo.mjs";import"./allowAll-BnyNbJZT.mjs";export{t as computeReadBaseWhere,m as evaluateWrite,p as indexRolePermissions,l as isFacadeEntry,c as matchesWhere,n as permissionName,h as resolveCan,d as resolvePolicyAuth,u as rls};

package/dist/packem_shared/run-middleware-BeEEqmdE.mjs

@@ -1 +0,0 @@
-import{LunoraError as i}from"@lunora/errors";const m=async(a,l,s)=>{let o=-1;const c=async(r,t)=>{if(r<=o)throw new i("INTERNAL","middleware next() called multiple times");o=r;const e=a[r];return e?await e({ctx:t,next:(n=>c(r+1,n?.ctx?{...t,...n.ctx}:t))}):s(t)};return c(0,l)};export{m as l};

package/dist/packem_shared/storageRules-6_G8JpCv.mjs

@@ -1 +0,0 @@
-import{LunoraError as h}from"./LunoraError-LVhdU0Lo.mjs";import{T as k,U as x}from"./middleware-D9_39C5C.mjs";const U=(r,e)=>r===void 0||e.startsWith(r),v=r=>{const e=r[1],i=typeof e=="object"&&e!==null?e.method:void 0;return typeof i=="string"&&i.toUpperCase()==="PUT"?"write":"read"},N=[["delete","delete"],["download","read"],["generateUploadUrl","write"],["getMetadata","read"],["getSignedUrl",v],["getUrl","read"],["store","write"]],D=(r,e={})=>{const i=k(e.roles);return async({ctx:f,next:d})=>{const y=await x(f.auth??{},i),m=(o,n,s)=>{const a=r.filter(t=>t.on===o&&t.bucket===s);if(a.length===0)return;const c={auth:y,ctx:f,key:n};if(!a.some(t=>U(t.prefix,n)&&t.when(c)===!0))throw new h("FORBIDDEN",`storage ${o} on "${n}" in bucket "${s}" denied by access rule`)},l=o=>{const n=o.bucketName??"default",s={bucketName:n};for(const[c,t]of N){const p=o[c];typeof p=="function"&&(s[c]=(...u)=>{const w=typeof u[0]=="string"?u[0]:"",b=typeof t=="function"?t(u):t;return m(b,w,n),p(...u)})}const{bucket:a}=o;return typeof a=="function"&&(s.bucket=c=>l(a(c))),s},g=f.storage;return g===void 0?d():d({ctx:{storage:l(g)}})}};export{D as storageRules};