@exabugs/dynamodb-client 1.6.1 → 1.7.0

package/dist/server/media-handler.cjs

@@ -1,5 +1,5 @@
-// @exabugs/dynamodb-client v1.6.1
-// Built: 2026-10-11T12:45:55.244Z
+// @exabugs/dynamodb-client v1.7.0
+// Built: 2026-10-11T16:38:03.698Z
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;

package/dist/server/media-process-handler-dlq.cjs

@@ -1,5 +1,5 @@
-// @exabugs/dynamodb-client v1.6.1
-// Built: 2026-10-11T12:45:55.244Z
+// @exabugs/dynamodb-client v1.7.0
+// Built: 2026-10-11T16:38:03.698Z
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -37714,7 +37714,7 @@ var init_types2 = __esm({
 });
 
 // src/shared/errors/index.ts
-var AppError, ConfigError, InvalidTokenError;
+var AppError, ConfigError, InvalidFilterError, InvalidTokenError;
 var init_errors4 = __esm({
   "src/shared/errors/index.ts"() {
     "use strict";
@@ -37750,6 +37750,14 @@ var init_errors4 = __esm({
         super("CONFIG_ERROR" /* CONFIG_ERROR */, message, 500, details);
       }
     };
+    InvalidFilterError = class extends AppError {
+      static {
+        __name(this, "InvalidFilterError");
+      }
+      constructor(message, details) {
+        super("INVALID_FILTER" /* INVALID_FILTER */, message, 400, details);
+      }
+    };
     InvalidTokenError = class extends AppError {
       static {
         __name(this, "InvalidTokenError");
@@ -46087,7 +46095,7 @@ function parseFilters(filter) {
         fieldKey,
         error: error2 instanceof Error ? error2.message : String(error2)
       });
-      throw new ConfigError(`Invalid filter field syntax: ${fieldKey}`, {
+      throw new InvalidFilterError(`Invalid filter field syntax: ${fieldKey}`, {
         field: fieldKey,
         error: error2 instanceof Error ? error2.message : String(error2)
       });
@@ -47347,6 +47355,113 @@ var init_chunking = __esm({
   }
 });
 
+// src/server/utils/mergePatch.ts
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function invalidPath(path, reason) {
+  return new AppError("VALIDATION_ERROR" /* VALIDATION_ERROR */, `Invalid patch path "${path}": ${reason}`, 400, {
+    path
+  });
+}
+function mergeInto(target, patch) {
+  for (const [key, value] of Object.entries(patch)) {
+    if (key.includes(".")) {
+      setByPath(target, key, value);
+    } else {
+      setKey(target, key, value, key);
+    }
+  }
+}
+function setKey(target, key, value, path) {
+  if (key === "__proto__") {
+    throw invalidPath(path, "forbidden segment");
+  }
+  if (value === null) {
+    delete target[key];
+  } else if (isPlainObject(value) && isPlainObject(target[key])) {
+    mergeInto(target[key], value);
+  } else {
+    target[key] = value;
+  }
+}
+function setByPath(target, path, value) {
+  const keys = path.split(".");
+  if (keys.some((k4) => k4 === "")) {
+    throw invalidPath(path, "empty segment");
+  }
+  let current = target;
+  for (let i4 = 0; i4 < keys.length; i4++) {
+    const key = keys[i4];
+    const isLast = i4 === keys.length - 1;
+    if (Array.isArray(current)) {
+      if (!/^(0|[1-9]\d*)$/.test(key) || Number(key) >= current.length) {
+        throw invalidPath(path, `"${key}" is not a valid index (length ${current.length})`);
+      }
+      const index = Number(key);
+      if (isLast) {
+        if (value === null) {
+          throw invalidPath(path, "array elements cannot be deleted by path");
+        }
+        const existing = current[index];
+        if (isPlainObject(value) && isPlainObject(existing)) {
+          mergeInto(existing, value);
+        } else {
+          current[index] = value;
+        }
+        return;
+      }
+      const next2 = current[index];
+      if (isPlainObject(next2) || Array.isArray(next2)) {
+        current = next2;
+      } else {
+        if (value === null) {
+          return;
+        }
+        const created = {};
+        current[index] = created;
+        current = created;
+      }
+      continue;
+    }
+    if (isLast) {
+      setKey(current, key, value, path);
+      return;
+    }
+    if (key === "__proto__") {
+      throw invalidPath(path, "forbidden segment");
+    }
+    const next = current[key];
+    if (isPlainObject(next) || Array.isArray(next)) {
+      current = next;
+    } else {
+      if (value === null) {
+        return;
+      }
+      const created = {};
+      current[key] = created;
+      current = created;
+    }
+  }
+}
+function applyJsonMergePatch(target, patch) {
+  const result = structuredClone(target);
+  mergeInto(result, structuredClone(patch));
+  return result;
+}
+var init_mergePatch = __esm({
+  "src/server/utils/mergePatch.ts"() {
+    "use strict";
+    init_shared();
+    __name(isPlainObject, "isPlainObject");
+    __name(invalidPath, "invalidPath");
+    __name(mergeInto, "mergeInto");
+    __name(setKey, "setKey");
+    __name(setByPath, "setByPath");
+    __name(applyJsonMergePatch, "applyJsonMergePatch");
+  }
+});
+
 // src/server/utils/timestamps.ts
 var timestamps_exports = {};
 __export(timestamps_exports, {
@@ -47380,8 +47495,8 @@ function addUpdateTimestamp(data) {
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
   return {
-    [timestampFields.updatedAt]: now,
-    ...data
+    ...data,
+    [timestampFields.updatedAt]: data[timestampFields.updatedAt] ?? now
   };
 }
 var init_timestamps = __esm({
@@ -47399,46 +47514,6 @@ var updateMany_exports = {};
 __export(updateMany_exports, {
   handleUpdateMany: () => handleUpdateMany
 });
-function expandDotNotation(patch) {
-  const result = {};
-  for (const [key, value] of Object.entries(patch)) {
-    if (key.includes(".")) {
-      const keys = key.split(".");
-      let current = result;
-      for (let i4 = 0; i4 < keys.length - 1; i4++) {
-        const k4 = keys[i4];
-        if (!(k4 in current)) {
-          current[k4] = {};
-        } else if (typeof current[k4] !== "object" || Array.isArray(current[k4])) {
-          current[k4] = {};
-        }
-        current = current[k4];
-      }
-      const lastKey = keys[keys.length - 1];
-      current[lastKey] = value;
-    } else {
-      result[key] = value;
-    }
-  }
-  return result;
-}
-function applyJsonMergePatch(target, patch) {
-  const expandedPatch = expandDotNotation(patch);
-  const result = { ...target };
-  for (const [key, value] of Object.entries(expandedPatch)) {
-    if (value === null) {
-      delete result[key];
-    } else if (typeof value === "object" && !Array.isArray(value) && value !== null && typeof result[key] === "object" && !Array.isArray(result[key]) && result[key] !== null) {
-      result[key] = applyJsonMergePatch(
-        result[key],
-        value
-      );
-    } else {
-      result[key] = value;
-    }
-  }
-  return result;
-}
 async function handleUpdateMany(resource, params, requestId) {
   const { data: patchData, options } = params;
   const upsert = options?.upsert ?? false;
@@ -47566,11 +47641,9 @@ async function handleUpdateMany(resource, params, requestId) {
       const id = existingData.id;
       const oldShadowKeys = item.__shadowKeys ?? existingData.__shadowKeys ?? [];
       const actualPatchData2 = patchData.$set ? patchData.$set : patchData;
-      const mergedData = applyJsonMergePatch(removeShadowKeys(existingData), actualPatchData2);
-      const updatedData = addUpdateTimestamp({
-        ...mergedData,
-        id
-      });
+      const timestampedPatch = addUpdateTimestamp(actualPatchData2);
+      const mergedData = applyJsonMergePatch(removeShadowKeys(existingData), timestampedPatch);
+      const updatedData = { ...mergedData, id };
       const newShadowRecords = generateShadowRecords(updatedData, resource, shadowConfig);
       const newShadowKeys = newShadowRecords.map((shadow) => shadow.SK);
       const mainSK = generateMainRecordSK2(id);
@@ -47851,10 +47924,9 @@ var init_updateMany = __esm({
     init_chunking();
     init_cost_tracker();
     init_dynamodb3();
+    init_mergePatch();
     init_timestamps();
     logger11 = createLogger({ service: "records-lambda" });
-    __name(expandDotNotation, "expandDotNotation");
-    __name(applyJsonMergePatch, "applyJsonMergePatch");
     __name(handleUpdateMany, "handleUpdateMany");
     __name(getPreparationErrorCode, "getPreparationErrorCode");
   }
@@ -47990,6 +48062,9 @@ async function handleUpdateOne(resource, params, requestId) {
     if (updateManyResult.count === 0) {
       const error2 = Object.values(updateManyResult.errors || {})[0];
       if (error2) {
+        if (error2.code === "VALIDATION_ERROR" /* VALIDATION_ERROR */) {
+          throw new AppError("VALIDATION_ERROR" /* VALIDATION_ERROR */, error2.message ?? "Invalid patch", 400);
+        }
         throw new Error(`Failed to update record: ${error2.message}`);
       } else {
         throw new Error(`Failed to update record: ${targetId}`);
@@ -48029,6 +48104,9 @@ async function handleUpdateOne(resource, params, requestId) {
     if (updateManyResult.count === 0) {
       const error2 = Object.values(updateManyResult.errors || {})[0];
       if (error2) {
+        if (error2.code === "VALIDATION_ERROR" /* VALIDATION_ERROR */) {
+          throw new AppError("VALIDATION_ERROR" /* VALIDATION_ERROR */, error2.message ?? "Invalid patch", 400);
+        }
         throw new Error(`Failed to update record: ${error2.message}`);
       } else {
         throw new Error(`No records found matching filter`);