@exabugs/dynamodb-client 1.10.0 → 1.11.0

package/dist/notify/normalize.js

@@ -0,0 +1,245 @@
+/**
+ * 入力の正規化: CloudWatch Logs の購読 / EventBridge のアラーム状態変化 / 直接呼び出し → Notice[]
+ *
+ * ログ行の形は 3 種類ある。
+ *  1. アプリの JSON 1 行: {"level":"warn","message":"…","event":"…"}
+ *  2. Lambda のテキスト形式: `時刻<TAB>RequestId<TAB>INFO<TAB>{アプリの JSON}`
+ *  3. Lambda の JSON 形式: {"timestamp":…,"level":"INFO","requestId":…,"message":"{アプリの JSON 文字列}"}
+ * アプリの JSON が見つかれば、その level とフィールドを優先する（外側の level は Lambda のもので、
+ * console.log で出した warn は INFO になる）。
+ */
+import { gunzipSync } from 'node:zlib';
+import { clean, cleanLine } from './policy.js';
+const LEVELS = new Map([
+    ['warn', 'warn'],
+    ['warning', 'warn'],
+    ['error', 'error'],
+    ['fatal', 'fatal'],
+    ['critical', 'fatal'],
+]);
+/** level の値（任意の文字列）から通知レベルを引く。`constructor` などの名前は無視する */
+const levelOf = (v) => typeof v === 'string' ? LEVELS.get(v.toLowerCase()) : undefined;
+/** Lambda の実行基盤の、致命的な失敗（アプリの JSON ログにならない） */
+const LAMBDA_FAILURE_LINE = /^(?:\S+\s+[0-9a-fA-F-]{8,}\s+|RequestId: \S+\s+(?:Error: )?)?(Task timed out after [\d.]+ seconds|Runtime exited (?:with error|without error)|Process exited before completing request)/;
+/** `REPORT …` 行の、失敗の状態 */
+const REPORT_FAILURE = /^REPORT RequestId:[\s\S]*\bStatus: (timeout|error|failure)\b/;
+const LAMBDA_FAILURE_LABEL = /^(Invoke Error|Unhandled Promise Rejection|Uncaught Exception)\b/;
+/** `時刻<TAB>RequestId<TAB>LEVEL<TAB>本文`（テキスト形式）。本文と外側の level を分ける */
+const TEXT_PREFIX = /^\S+\t(?:[0-9a-fA-F-]{8,}|undefined)\t(TRACE|DEBUG|INFO|WARN|ERROR|FATAL)\t([\s\S]*)$/;
+function asObj(text) {
+    const t = text.trim();
+    if (!t.startsWith('{'))
+        return undefined;
+    try {
+        const v = JSON.parse(t);
+        return typeof v === 'object' && v !== null && !Array.isArray(v) ? v : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+const str = (v) => (typeof v === 'string' ? v : undefined);
+const isAppLog = (o) => typeof o.level === 'string' || typeof o.event === 'string';
+function parseLine(line) {
+    let body = line;
+    let outerLevel;
+    const m = TEXT_PREFIX.exec(line);
+    if (m) {
+        outerLevel = m[1];
+        body = m[2];
+    }
+    // Invoke Error など: `ラベル<TAB>{json}`
+    const tab = body.indexOf('\t{');
+    if (tab > 0 && !body.trimStart().startsWith('{')) {
+        const json = asObj(body.slice(tab + 1));
+        if (json && typeof json.errorType === 'string') {
+            return { runtime: json, text: body.slice(0, tab), outerLevel };
+        }
+    }
+    const outer = asObj(body);
+    if (!outer)
+        return { text: body, outerLevel };
+    // Lambda のシステムログ（JSON 形式）: {"type":"platform.report","record":{"status":"timeout"}}
+    if (typeof outer.type === 'string' && /^platform\.(report|runtimeDone)$/.test(outer.type)) {
+        const status = str(outer.record?.status);
+        return { text: '', platformStatus: status, outerLevel };
+    }
+    // Lambda の JSON 形式: {"timestamp":…,"level":"INFO","requestId":…,"message":…}
+    // Lambda の level は大文字（createLogger は小文字）。event を持つアプリのログは、外側として扱わない
+    const lambdaWrapped = 'timestamp' in outer &&
+        typeof outer.level === 'string' &&
+        /^(TRACE|DEBUG|INFO|WARN|ERROR|FATAL)$/.test(outer.level) &&
+        !('event' in outer);
+    if (lambdaWrapped) {
+        const level = str(outer.level);
+        const msg = outer.message;
+        // アプリの JSON 文字列が message に入っている
+        const inner = typeof msg === 'string' ? asObj(msg) : undefined;
+        if (inner && isAppLog(inner))
+            return { app: inner, text: '', outerLevel: level };
+        // エラーのオブジェクト（Invoke Error など）
+        const errObj = typeof msg === 'object' && msg !== null ? msg : undefined;
+        const withType = typeof outer.errorType === 'string'
+            ? outer
+            : errObj && typeof errObj.errorType === 'string'
+                ? errObj
+                : undefined;
+        if (withType) {
+            return { runtime: withType, text: typeof msg === 'string' ? msg : '', outerLevel: level };
+        }
+        const text = typeof msg === 'string' ? msg : errObj ? JSON.stringify(errObj) : '';
+        return { text, outerLevel: level };
+    }
+    return { app: outer, text: '', outerLevel };
+}
+function failure(message, ctx, occurredAt, target) {
+    return {
+        level: 'fatal',
+        event: 'LAMBDA_FAILURE',
+        message: clean(message, 500) ?? 'Lambda の失敗',
+        target: cleanLine(target, 100),
+        app: ctx.app,
+        env: ctx.env,
+        occurredAt,
+        suppressed: 0,
+    };
+}
+/** ログ 1 行 → Notice（通知対象でなければ undefined） */
+export function noticeFromLogLine(line, ctx, at) {
+    const t = at !== undefined && Number.isFinite(at) ? new Date(at) : ctx.now();
+    const occurredAt = (Number.isNaN(t.getTime()) ? ctx.now() : t).toISOString();
+    const p = parseLine(line);
+    const outer = p.outerLevel ? levelOf(p.outerLevel) : undefined;
+    if (p.platformStatus && /^(timeout|error|failure)$/.test(p.platformStatus)) {
+        return failure(`Lambda の実行が失敗しました（status: ${p.platformStatus}）`, ctx, occurredAt);
+    }
+    if (p.runtime) {
+        const label = p.text.trim();
+        const type = str(p.runtime.errorType) ?? '';
+        const labelled = LAMBDA_FAILURE_LABEL.test(label);
+        // ラベル付き、または Runtime.* で外側の level が warn 以上のもの。それ以外は、通常の行として扱う
+        if (labelled || (/^Runtime\./.test(type) && outer !== undefined)) {
+            return failure(`${type}: ${str(p.runtime.errorMessage) ?? label}`, ctx, occurredAt, type);
+        }
+    }
+    if (p.app) {
+        const level = levelOf(p.app.level) ?? outer;
+        if (!level)
+            return undefined;
+        const target = [p.app.resource, p.app.target].find((v) => typeof v === 'string');
+        const actions = Array.isArray(p.app.actions)
+            ? p.app.actions.filter((a) => typeof a === 'string').join(' / ')
+            : undefined;
+        const message = clean(p.app.message, 500) ?? '(メッセージなし)';
+        const event = cleanLine(p.app.event, 100);
+        return {
+            level,
+            event: event ?? `LOG_${level.toUpperCase()}`,
+            message,
+            app: ctx.app,
+            env: ctx.env,
+            // event の無いログは、種類を区別できないので、メッセージの先頭で指紋を分ける（別々のエラーを 1 つにしない）
+            target: cleanLine(target, 200) ?? (event ? undefined : cleanLine(message, 60)),
+            action: clean(str(p.app.action) ?? actions, 500),
+            occurredAt,
+            suppressed: 0,
+        };
+    }
+    let text = p.text.trim();
+    // errorType つきの JSON で、失敗と判定しなかったもの: 外側の level が warn 以上なら、通常のエラーとして通知する
+    if (p.runtime && text === '') {
+        text = `${str(p.runtime.errorType) ?? 'Error'}: ${str(p.runtime.errorMessage) ?? ''}`.trim();
+    }
+    if (LAMBDA_FAILURE_LINE.test(text) || REPORT_FAILURE.test(text)) {
+        return failure(text, ctx, occurredAt);
+    }
+    // アプリの JSON ではない行（console.error の文字列など）は、外側の level が warn 以上のときだけ
+    if (outer && text !== '') {
+        return {
+            level: outer,
+            event: `LOG_${outer.toUpperCase()}`,
+            message: clean(text, 500) ?? '(メッセージなし)',
+            app: ctx.app,
+            env: ctx.env,
+            target: cleanLine(text, 60),
+            occurredAt,
+            suppressed: 0,
+        };
+    }
+    return undefined;
+}
+function fromLogs(event, ctx) {
+    const payload = JSON.parse(gunzipSync(Buffer.from(event.awslogs.data, 'base64')).toString('utf8'));
+    const out = [];
+    for (const e of payload.logEvents ?? []) {
+        // 1 行の失敗で、同じバッチの他の行を失わない
+        try {
+            if (typeof e?.message !== 'string')
+                continue;
+            const n = noticeFromLogLine(e.message, ctx, e.timestamp);
+            if (n)
+                out.push(n);
+        }
+        catch {
+            continue;
+        }
+    }
+    return out;
+}
+function validTime(t, fallback) {
+    if (typeof t !== 'string')
+        return fallback.toISOString();
+    const d = new Date(t);
+    return Number.isNaN(d.getTime()) ? fallback.toISOString() : d.toISOString();
+}
+function fromAlarm(event, ctx) {
+    const name = cleanLine(event.detail?.alarmName, 200);
+    const state = event.detail?.state?.value;
+    if (!name || (state !== 'ALARM' && state !== 'OK'))
+        return [];
+    return [
+        {
+            level: state === 'OK' ? 'ok' : 'error',
+            event: `ALARM:${name}`,
+            message: clean(event.detail?.state?.reason, 500) ??
+                (state === 'OK' ? 'アラームが復旧しました' : 'アラームが発生しました'),
+            app: ctx.app,
+            env: ctx.env,
+            occurredAt: validTime(event.time, ctx.now()),
+            suppressed: 0,
+        },
+    ];
+}
+function fromDirect(event, ctx) {
+    const n = event.notice;
+    const rawLevel = typeof n.level === 'string' ? n.level.toLowerCase() : 'warn';
+    const level = rawLevel === 'ok' ? 'ok' : (LEVELS.get(rawLevel) ?? 'warn');
+    return [
+        {
+            level,
+            event: cleanLine(n.event, 100) ?? 'DIRECT',
+            message: clean(n.message, 500) ?? '(メッセージなし)',
+            app: ctx.app,
+            env: ctx.env,
+            target: cleanLine(n.target, 200),
+            action: clean(n.action, 500),
+            occurredAt: ctx.now().toISOString(),
+            suppressed: 0,
+        },
+    ];
+}
+/** どの入力かを判別して Notice[] にする。未知の入力は空配列 */
+export function normalize(event, ctx) {
+    if (typeof event !== 'object' || event === null)
+        return [];
+    const e = event;
+    if (typeof e.awslogs?.data === 'string') {
+        return fromLogs(e, ctx);
+    }
+    if (e['detail-type'] === 'CloudWatch Alarm State Change')
+        return fromAlarm(e, ctx);
+    if (typeof e.notice === 'object' && e.notice !== null)
+        return fromDirect(e, ctx);
+    return [];
+}
+//# sourceMappingURL=normalize.js.map

package/dist/notify/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../../src/notify/normalize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAS/C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAsB;IAC1C,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,SAAS,EAAE,MAAM,CAAC;IACnB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,UAAU,EAAE,OAAO,CAAC;CACtB,CAAC,CAAC;AACH,0DAA0D;AAC1D,MAAM,OAAO,GAAG,CAAC,CAAU,EAA2B,EAAE,CACtD,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAIlE,8CAA8C;AAC9C,MAAM,mBAAmB,GACvB,yLAAyL,CAAC;AAC5L,0BAA0B;AAC1B,MAAM,cAAc,GAAG,8DAA8D,CAAC;AACtF,MAAM,oBAAoB,GAAG,kEAAkE,CAAC;AAEhG,oEAAoE;AACpE,MAAM,WAAW,GACf,uFAAuF,CAAC;AAE1F,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,CAAC,GAAY,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAU,EAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAexF,MAAM,QAAQ,GAAG,CAAC,CAAM,EAAW,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC;AAEjG,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,UAA8B,CAAC;IACnC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC;QACN,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,oCAAoC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC;QACjE,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAE9C,oFAAoF;IACpF,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1F,MAAM,MAAM,GAAG,GAAG,CAAE,KAAK,CAAC,MAA0B,EAAE,MAAM,CAAC,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1D,CAAC;IAED,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,aAAa,GACjB,WAAW,IAAI,KAAK;QACpB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,uCAAuC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACzD,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC;IACtB,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;QAC1B,gCAAgC;QAChC,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,IAAI,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QACjF,8BAA8B;QAC9B,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAE,GAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,MAAM,QAAQ,GACZ,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACjC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;gBAC9C,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,SAAS,CAAC;QAClB,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC5F,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,OAAO,CACd,OAAe,EACf,GAAqB,EACrB,UAAkB,EAClB,MAAe;IAEf,OAAO;QACL,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,YAAY;QAC5C,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC;QAC9B,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,UAAU;QACV,UAAU,EAAE,CAAC;KACd,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,GAAqB,EACrB,EAAW;IAEX,MAAM,CAAC,GAAG,EAAE,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAC7E,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7E,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE/D,IAAI,CAAC,CAAC,cAAc,IAAI,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3E,OAAO,OAAO,CAAC,6BAA6B,CAAC,CAAC,cAAc,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,8DAA8D;QAC9D,IAAI,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;YACjE,OAAO,OAAO,CAAC,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,KAAK,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;YAC1C,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YAC7E,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,WAAW,CAAC;QACzD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1C,OAAO;YACL,KAAK;YACL,KAAK,EAAE,KAAK,IAAI,OAAO,KAAK,CAAC,WAAW,EAAE,EAAE;YAC5C,OAAO;YACP,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,4DAA4D;YAC5D,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC9E,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,GAAG,CAAC;YAChD,UAAU;YACV,UAAU,EAAE,CAAC;SACd,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACzB,yEAAyE;IACzE,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAC7B,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,OAAO,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IACD,kEAAkE;IAClE,IAAI,KAAK,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACzB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,OAAO,KAAK,CAAC,WAAW,EAAE,EAAE;YACnC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,WAAW;YACxC,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3B,UAAU;YACV,UAAU,EAAE,CAAC;SACd,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAMD,SAAS,QAAQ,CAAC,KAAoC,EAAE,GAAqB;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACxD,CAAC;IACjB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QACxC,yBAAyB;QACzB,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,EAAE,OAAO,KAAK,QAAQ;gBAAE,SAAS;YAC7C,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,SAAS,SAAS,CAAC,CAAU,EAAE,QAAc;IAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;IACzD,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB,EAAE,GAAqB;IACzD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC;IACzC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9D,OAAO;QACL;YACE,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;YACtC,KAAK,EAAE,SAAS,IAAI,EAAE;YACtB,OAAO,EACL,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC;gBACvC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;YAClD,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;YAC5C,UAAU,EAAE,CAAC;SACd;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAsB,EAAE,GAAqB;IAC/D,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9E,MAAM,KAAK,GAAgB,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC;IACvF,OAAO;QACL;YACE,KAAK;YACL,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,QAAQ;YAC1C,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,WAAW;YAC7C,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC;YAChC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC;YAC5B,UAAU,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE,CAAC;SACd;KACF,CAAC;AACJ,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,SAAS,CAAC,KAAc,EAAE,GAAqB;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC3D,MAAM,CAAC,GAAG,KAAY,CAAC;IACvB,IAAI,OAAQ,CAAC,CAAC,OAA0C,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5E,OAAO,QAAQ,CAAC,CAAkC,EAAE,GAAG,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,CAAC,aAAa,CAAC,KAAK,+BAA+B;QAAE,OAAO,SAAS,CAAC,CAAe,EAAE,GAAG,CAAC,CAAC;IACjG,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;QACnD,OAAO,UAAU,CAAC,CAAoB,EAAE,GAAG,CAAC,CAAC;IAC/C,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/notify/policy.d.ts

@@ -0,0 +1,15 @@
+import type { Notice, NoticeLevel } from './types.js';
+/** 重複抑制の窓（秒）。0 は抑制しない */
+export declare const DEFAULT_WINDOWS: Record<NoticeLevel, number>;
+/** 流量制限（チャネルごと）: 窓の中で送る通知の上限。超えたら「省略」の 1 通だけ送る */
+export declare const DEFAULT_RATE: {
+    windowSec: number;
+    limit: number;
+};
+/** 指紋: app・env・level・event・target。level を含める（warn の窓が、後の error を抑制しない） */
+export declare function fingerprintOf(n: Pick<Notice, 'app' | 'env' | 'level' | 'event' | 'target'>): string;
+/** 本文用: 制御文字を除き、長さを制限する（外部への送信に、長いログや不正な文字を持ち出さない） */
+export declare function clean(value: unknown, max: number): string | undefined;
+/** 1 行の値用（event・target・件名）: 改行・タブも空白にする */
+export declare function cleanLine(value: unknown, max: number): string | undefined;
+//# sourceMappingURL=policy.d.ts.map

package/dist/notify/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/notify/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEtD,yBAAyB;AACzB,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAKvD,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,YAAY;;;CAAgC,CAAC;AAE1D,0EAA0E;AAC1E,wBAAgB,aAAa,CAC3B,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,KAAK,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC,GAC5D,MAAM,CAER;AAaD,sDAAsD;AACtD,wBAAgB,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGrE;AAED,2CAA2C;AAC3C,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGzE"}

package/dist/notify/policy.js

@@ -0,0 +1,36 @@
+/** 重複抑制の窓（秒）。0 は抑制しない */
+export const DEFAULT_WINDOWS = {
+    warn: 3600,
+    error: 600,
+    fatal: 0,
+    ok: 0,
+};
+/** 流量制限（チャネルごと）: 窓の中で送る通知の上限。超えたら「省略」の 1 通だけ送る */
+export const DEFAULT_RATE = { windowSec: 600, limit: 20 };
+/** 指紋: app・env・level・event・target。level を含める（warn の窓が、後の error を抑制しない） */
+export function fingerprintOf(n) {
+    return [n.app, n.env, n.level, n.event, n.target ?? ''].join('#').slice(0, 512);
+}
+/** 改行・タブ以外の制御文字と、表示の向きを変える文字（U+202A〜202E, U+2066〜2069） */
+const CONTROL = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f\u202a-\u202e\u2066-\u2069]/g;
+/** 1 行の値では、改行・タブも空白にする */
+const LINE_BREAKS = /[\r\n\t\u2028\u2029]+/g;
+function limit(s, max) {
+    const t = s.trim();
+    if (t === '')
+        return undefined;
+    return t.length > max ? `${t.slice(0, max)}…` : t;
+}
+/** 本文用: 制御文字を除き、長さを制限する（外部への送信に、長いログや不正な文字を持ち出さない） */
+export function clean(value, max) {
+    if (typeof value !== 'string')
+        return undefined;
+    return limit(value.replace(CONTROL, ' '), max);
+}
+/** 1 行の値用（event・target・件名）: 改行・タブも空白にする */
+export function cleanLine(value, max) {
+    if (typeof value !== 'string')
+        return undefined;
+    return limit(value.replace(CONTROL, ' ').replace(LINE_BREAKS, ' '), max);
+}
+//# sourceMappingURL=policy.js.map

package/dist/notify/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/notify/policy.ts"],"names":[],"mappings":"AAEA,yBAAyB;AACzB,MAAM,CAAC,MAAM,eAAe,GAAgC;IAC1D,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,GAAG;IACV,KAAK,EAAE,CAAC;IACR,EAAE,EAAE,CAAC;CACN,CAAC;AAEF,kDAAkD;AAClD,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAE1D,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAC3B,CAA6D;IAE7D,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClF,CAAC;AAED,0DAA0D;AAC1D,MAAM,OAAO,GAAG,2EAA2E,CAAC;AAC5F,0BAA0B;AAC1B,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAE7C,SAAS,KAAK,CAAC,CAAS,EAAE,GAAW;IACnC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,KAAK,CAAC,KAAc,EAAE,GAAW;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,SAAS,CAAC,KAAc,EAAE,GAAW;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AAC3E,CAAC"}

package/dist/notify/store.d.ts

@@ -0,0 +1,22 @@
+import { DynamoDBDocumentClient } from '@aws-sdk/lib-dynamodb';
+import type { ClaimResult, NoticeStore } from './types.js';
+export declare class DynamoNoticeStore implements NoticeStore {
+    private readonly doc;
+    private readonly tableName;
+    constructor(doc: Pick<DynamoDBDocumentClient, 'send'>, tableName: string);
+    claim(fingerprint: string, windowSec: number, nowSec: number, count: number): Promise<ClaimResult>;
+    release(fingerprint: string, token: number, restore: number): Promise<void>;
+    consume(bucket: string, windowSec: number, nowSec: number, n: number): Promise<number>;
+}
+/** テスト・ローカル用（1 プロセス内だけ） */
+export declare class MemoryNoticeStore implements NoticeStore {
+    readonly fps: Map<string, {
+        expiresAt: number;
+        suppressed: number;
+    }>;
+    private readonly counts;
+    claim(fingerprint: string, windowSec: number, nowSec: number, count: number): Promise<ClaimResult>;
+    release(fingerprint: string, token: number, restore: number): Promise<void>;
+    consume(bucket: string, windowSec: number, nowSec: number, n: number): Promise<number>;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/notify/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/notify/store.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAiB,MAAM,uBAAuB,CAAC;AAE9E,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAI3D,qBAAa,iBAAkB,YAAW,WAAW;IAEjD,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,GAAG,EAAE,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,EACzC,SAAS,EAAE,MAAM;IAG9B,KAAK,CACT,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,WAAW,CAAC;IAiDjB,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB3E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAc7F;AAED,2BAA2B;AAC3B,qBAAa,iBAAkB,YAAW,WAAW;IACnD,QAAQ,CAAC,GAAG;mBAAgC,MAAM;oBAAc,MAAM;OAAM;IAC5E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IAE9C,KAAK,CACT,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,WAAW,CAAC;IAWjB,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAM7F"}

package/dist/notify/store.js

@@ -0,0 +1,119 @@
+/**
+ * 重複抑制・流量制限の記録（DynamoDB。専用のテーブル: パーティションキー `pk`（文字列）、TTL 属性 `ttl`）
+ * 同時実行でも二重に確保しないよう、条件付き更新を使う。窓の判定は `expiresAt`（TTL の削除の遅れに影響されない）。
+ */
+import { ConditionalCheckFailedException } from '@aws-sdk/client-dynamodb';
+import { UpdateCommand } from '@aws-sdk/lib-dynamodb';
+const KEEP_SEC = 86400;
+export class DynamoNoticeStore {
+    doc;
+    tableName;
+    constructor(doc, tableName) {
+        this.doc = doc;
+        this.tableName = tableName;
+    }
+    async claim(fingerprint, windowSec, nowSec, count) {
+        const pk = `fp#${fingerprint}`;
+        // 2 回まで: 抑制の加算の直前に行が消えた（TTL）ときは、取り直す
+        for (let attempt = 0; attempt < 2; attempt++) {
+            try {
+                const r = await this.doc.send(new UpdateCommand({
+                    TableName: this.tableName,
+                    Key: { pk },
+                    UpdateExpression: 'SET expiresAt = :exp, #ttl = :ttl, suppressed = :zero',
+                    ConditionExpression: 'attribute_not_exists(pk) OR expiresAt <= :now',
+                    ExpressionAttributeNames: { '#ttl': 'ttl' },
+                    ExpressionAttributeValues: {
+                        ':exp': nowSec + windowSec,
+                        ':ttl': nowSec + windowSec + KEEP_SEC,
+                        ':zero': 0,
+                        ':now': nowSec,
+                    },
+                    ReturnValues: 'ALL_OLD',
+                }));
+                const prev = r.Attributes?.suppressed;
+                return {
+                    granted: true,
+                    suppressed: typeof prev === 'number' ? prev : 0,
+                    token: nowSec + windowSec,
+                };
+            }
+            catch (e) {
+                if (!(e instanceof ConditionalCheckFailedException))
+                    throw e;
+            }
+            try {
+                await this.doc.send(new UpdateCommand({
+                    TableName: this.tableName,
+                    Key: { pk },
+                    UpdateExpression: 'ADD suppressed :n',
+                    ConditionExpression: 'attribute_exists(pk) AND expiresAt > :now',
+                    ExpressionAttributeValues: { ':n': count, ':now': nowSec },
+                }));
+                return { granted: false, suppressed: 0, token: 0 };
+            }
+            catch (e) {
+                if (!(e instanceof ConditionalCheckFailedException))
+                    throw e;
+            }
+        }
+        // 取り直しても確保できなかった（競合が続いた）。通知を落とさないよう、許可する
+        return { granted: true, suppressed: 0, token: nowSec + windowSec };
+    }
+    async release(fingerprint, token, restore) {
+        try {
+            await this.doc.send(new UpdateCommand({
+                TableName: this.tableName,
+                Key: { pk: `fp#${fingerprint}` },
+                UpdateExpression: 'SET expiresAt = :zero ADD suppressed :r',
+                ConditionExpression: 'expiresAt = :mine',
+                ExpressionAttributeValues: { ':zero': 0, ':r': restore, ':mine': token },
+            }));
+        }
+        catch (e) {
+            // 別の実行が確保を取り直していたら、そちらを壊さない
+            if (!(e instanceof ConditionalCheckFailedException))
+                throw e;
+        }
+    }
+    async consume(bucket, windowSec, nowSec, n) {
+        const slot = Math.floor(nowSec / windowSec);
+        const r = await this.doc.send(new UpdateCommand({
+            TableName: this.tableName,
+            Key: { pk: `rl#${bucket}#${slot}` },
+            UpdateExpression: 'ADD cnt :n SET #ttl = :ttl',
+            ExpressionAttributeNames: { '#ttl': 'ttl' },
+            ExpressionAttributeValues: { ':n': n, ':ttl': (slot + 1) * windowSec + KEEP_SEC },
+            ReturnValues: 'UPDATED_NEW',
+        }));
+        return typeof r.Attributes?.cnt === 'number' ? r.Attributes.cnt : n;
+    }
+}
+/** テスト・ローカル用（1 プロセス内だけ） */
+export class MemoryNoticeStore {
+    fps = new Map();
+    counts = new Map();
+    async claim(fingerprint, windowSec, nowSec, count) {
+        const cur = this.fps.get(fingerprint);
+        if (cur && cur.expiresAt > nowSec) {
+            cur.suppressed += count;
+            return { granted: false, suppressed: 0, token: 0 };
+        }
+        const token = nowSec + windowSec;
+        this.fps.set(fingerprint, { expiresAt: token, suppressed: 0 });
+        return { granted: true, suppressed: cur?.suppressed ?? 0, token };
+    }
+    async release(fingerprint, token, restore) {
+        const cur = this.fps.get(fingerprint);
+        if (!cur || cur.expiresAt !== token)
+            return;
+        this.fps.set(fingerprint, { expiresAt: 0, suppressed: cur.suppressed + restore });
+    }
+    async consume(bucket, windowSec, nowSec, n) {
+        const key = `${bucket}#${Math.floor(nowSec / windowSec)}`;
+        const total = (this.counts.get(key) ?? 0) + n;
+        this.counts.set(key, total);
+        return total;
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/notify/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/notify/store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,+BAA+B,EAAE,MAAM,0BAA0B,CAAC;AAC3E,OAAO,EAA0B,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAI9E,MAAM,QAAQ,GAAG,KAAK,CAAC;AAEvB,MAAM,OAAO,iBAAiB;IAET;IACA;IAFnB,YACmB,GAAyC,EACzC,SAAiB;QADjB,QAAG,GAAH,GAAG,CAAsC;QACzC,cAAS,GAAT,SAAS,CAAQ;IACjC,CAAC;IAEJ,KAAK,CAAC,KAAK,CACT,WAAmB,EACnB,SAAiB,EACjB,MAAc,EACd,KAAa;QAEb,MAAM,EAAE,GAAG,MAAM,WAAW,EAAE,CAAC;QAC/B,qCAAqC;QACrC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAC3B,IAAI,aAAa,CAAC;oBAChB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,GAAG,EAAE,EAAE,EAAE,EAAE;oBACX,gBAAgB,EAAE,uDAAuD;oBACzE,mBAAmB,EAAE,+CAA+C;oBACpE,wBAAwB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;oBAC3C,yBAAyB,EAAE;wBACzB,MAAM,EAAE,MAAM,GAAG,SAAS;wBAC1B,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ;wBACrC,OAAO,EAAE,CAAC;wBACV,MAAM,EAAE,MAAM;qBACf;oBACD,YAAY,EAAE,SAAS;iBACxB,CAAC,CACH,CAAC;gBACF,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC;gBACtC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,UAAU,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC/C,KAAK,EAAE,MAAM,GAAG,SAAS;iBAC1B,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,CAAC,CAAC,YAAY,+BAA+B,CAAC;oBAAE,MAAM,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CACjB,IAAI,aAAa,CAAC;oBAChB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,GAAG,EAAE,EAAE,EAAE,EAAE;oBACX,gBAAgB,EAAE,mBAAmB;oBACrC,mBAAmB,EAAE,2CAA2C;oBAChE,yBAAyB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;iBAC3D,CAAC,CACH,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACrD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,CAAC,CAAC,YAAY,+BAA+B,CAAC;oBAAE,MAAM,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,yCAAyC;QACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,KAAa,EAAE,OAAe;QAC/D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CACjB,IAAI,aAAa,CAAC;gBAChB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,WAAW,EAAE,EAAE;gBAChC,gBAAgB,EAAE,yCAAyC;gBAC3D,mBAAmB,EAAE,mBAAmB;gBACxC,yBAAyB,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;aACzE,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,4BAA4B;YAC5B,IAAI,CAAC,CAAC,CAAC,YAAY,+BAA+B,CAAC;gBAAE,MAAM,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,SAAiB,EAAE,MAAc,EAAE,CAAS;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAC3B,IAAI,aAAa,CAAC;YAChB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,MAAM,IAAI,IAAI,EAAE,EAAE;YACnC,gBAAgB,EAAE,4BAA4B;YAC9C,wBAAwB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YAC3C,yBAAyB,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,GAAG,QAAQ,EAAE;YACjF,YAAY,EAAE,aAAa;SAC5B,CAAC,CACH,CAAC;QACF,OAAO,OAAO,CAAC,CAAC,UAAU,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;CACF;AAED,2BAA2B;AAC3B,MAAM,OAAO,iBAAiB;IACnB,GAAG,GAAG,IAAI,GAAG,EAAqD,CAAC;IAC3D,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEpD,KAAK,CAAC,KAAK,CACT,WAAmB,EACnB,SAAiB,EACjB,MAAc,EACd,KAAa;QAEb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtC,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;YAClC,GAAG,CAAC,UAAU,IAAI,KAAK,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACrD,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,KAAa,EAAE,OAAe;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK;YAAE,OAAO;QAC5C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,GAAG,OAAO,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,SAAiB,EAAE,MAAc,EAAE,CAAS;QACxE,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/notify/types.d.ts

@@ -0,0 +1,63 @@
+/**
+ * 運用通知の型
+ *
+ * 通知は `Notice` に正規化してから、重複抑制 → チャネルへ配信する。
+ * `Notice` には許可したフィールドだけを入れる（ログ全体を転送しない）。
+ */
+/** 通知するレベル。`ok` はアラームの復旧 */
+export type NoticeLevel = 'warn' | 'error' | 'fatal' | 'ok';
+export interface Notice {
+    level: NoticeLevel;
+    /** 機械可読の種別（例: SPARSE_SCAN、ALARM:astro-dev-xxx） */
+    event: string;
+    message: string;
+    app: string;
+    env: string;
+    /** 対象（コレクション名など）。重複抑制の指紋に使う */
+    target?: string;
+    /** 対策の案内 */
+    action?: string;
+    /** ISO 8601 */
+    occurredAt: string;
+    /** 抑制していた同種の通知の件数（今回を含まない） */
+    suppressed: number;
+}
+/** 配信先 */
+export interface Channel {
+    name: string;
+    /** メールなど、宛先（管理者）が必要なチャネルか */
+    needsRecipients: boolean;
+    send(notices: Notice[], recipients: string[]): Promise<void>;
+}
+/** 宛先（管理者のメールアドレス）の取得。スキーマは強制しない */
+export interface AdminDirectory {
+    listEmails(): Promise<string[]>;
+}
+export interface ClaimResult {
+    granted: boolean;
+    /** granted のとき、前回の窓の間に抑制した件数 */
+    suppressed: number;
+    /** granted のとき、確保の印（release に渡す。別の実行が取り直した確保を壊さないため） */
+    token: number;
+}
+/** 重複抑制・流量制限の記録 */
+export interface NoticeStore {
+    /**
+     * 指紋の窓を確保する。窓の中なら granted: false にして、抑制の件数を count 増やす。
+     * count は、この呼び出しが代表する発生の件数（同じバッチの重複をまとめたもの）
+     */
+    claim(fingerprint: string, windowSec: number, nowSec: number, count: number): Promise<ClaimResult>;
+    /**
+     * 送れなかった確保を解放する（次の発生で、窓を待たずに通知できる）。自分の確保（token）のときだけ。
+     * restore 件を抑制の件数に戻す（前回ぶん + 今回の発生）
+     */
+    release(fingerprint: string, token: number, restore: number): Promise<void>;
+    /** 流量の計数を n 増やし、窓の中の件数（増やした後）を返す */
+    consume(bucket: string, windowSec: number, nowSec: number, n: number): Promise<number>;
+}
+export interface NotifyLogger {
+    info(message: string, meta?: Record<string, unknown>): void;
+    warn(message: string, meta?: Record<string, unknown>): void;
+    error(message: string, meta?: Record<string, unknown>): void;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/notify/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/notify/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,4BAA4B;AAC5B,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,IAAI,CAAC;AAE5D,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,WAAW,CAAC;IACnB,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU;AACV,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9D;AAED,oCAAoC;AACpC,MAAM,WAAW,cAAc;IAC7B,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;CACf;AAED,mBAAmB;AACnB,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,KAAK,CACH,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB;;;OAGG;IACH,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,oCAAoC;IACpC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACxF;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC9D"}

package/dist/notify/types.js

@@ -0,0 +1,8 @@
+/**
+ * 運用通知の型
+ *
+ * 通知は `Notice` に正規化してから、重複抑制 → チャネルへ配信する。
+ * `Notice` には許可したフィールドだけを入れる（ログ全体を転送しない）。
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/notify/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/notify/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/server/handler.cjs

@@ -1,5 +1,5 @@
-// @exabugs/dynamodb-client v1.10.0
-// Built: 2026-10-11T23:48:57.909Z
+// @exabugs/dynamodb-client v1.11.0
+// Built: 2026-10-12T06:23:05.041Z
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -38988,7 +38988,7 @@ async function handler(event) {
       return createCorsResponse(HTTP_STATUS.OK);
     }
     if (event.requestContext.http.method === "GET" && event.requestContext.http.path === "/version") {
-      const version = "1.10.0";
+      const version = "1.11.0";
       return createSuccessResponse({ version, timestamp: (/* @__PURE__ */ new Date()).toISOString() }, requestId);
     }
     if (event.requestContext.http.method !== "POST") {

package/dist/server/media-handler.cjs

@@ -1,5 +1,5 @@
-// @exabugs/dynamodb-client v1.10.0
-// Built: 2026-10-11T23:48:57.909Z
+// @exabugs/dynamodb-client v1.11.0
+// Built: 2026-10-12T06:23:05.041Z
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;

package/dist/server/media-process-handler-dlq.cjs

@@ -1,5 +1,5 @@
-// @exabugs/dynamodb-client v1.10.0
-// Built: 2026-10-11T23:48:57.909Z
+// @exabugs/dynamodb-client v1.11.0
+// Built: 2026-10-12T06:23:05.041Z
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;

package/dist/server/media-process-handler.cjs

@@ -1,5 +1,5 @@
-// @exabugs/dynamodb-client v1.10.0
-// Built: 2026-10-11T23:48:57.909Z
+// @exabugs/dynamodb-client v1.11.0
+// Built: 2026-10-12T06:23:05.041Z
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;