@farukada/aws-langgraph-dynamodb-ts 0.2.0 → 0.3.0

package/dist/shared/dynamodb/retry.d.ts

@@ -0,0 +1,18 @@
+/** Options controlling {@link withRetry}. */
+export interface RetryOptions {
+    maxAttempts?: number;
+    baseDelayMs?: number;
+    maxDelayMs?: number;
+    retryableErrors?: readonly string[];
+    signal?: AbortSignal;
+    rng?: () => number;
+}
+/**
+ * Run `fn`, retrying retryable transient errors with full-jitter exponential
+ * backoff. Non-retryable errors are re-thrown unchanged; exhaustion throws
+ * {@link RetryExhaustedError}; an aborted signal throws {@link AbortError}.
+ */
+export declare function withRetry<T>(fn: () => Promise<T>, options?: RetryOptions): Promise<T>;
+/** {@link withRetry} preset for DynamoDB operations. */
+export declare function withDynamoDBRetry<T>(fn: () => Promise<T>, overrides?: Partial<RetryOptions>): Promise<T>;
+//# sourceMappingURL=retry.d.ts.map

package/dist/shared/dynamodb/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../../src/shared/dynamodb/retry.ts"],"names":[],"mappings":"AAUA,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AA0BD;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,CAAC,CAAC,CAqB/F;AAED,wDAAwD;AACxD,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,SAAS,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAChC,OAAO,CAAC,CAAC,CAAC,CAEZ"}

package/dist/shared/dynamodb/retry.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withRetry = withRetry;
+exports.withDynamoDBRetry = withDynamoDBRetry;
+const constants_1 = require("../constants");
+const errors_1 = require("../errors/errors");
+const wrap_error_1 = require("../errors/wrap-error");
+const backoff_1 = require("./backoff");
+const retry_classifier_1 = require("./retry-classifier");
+function delayForAttempt(attempt, base, max, rng) {
+    const exponential = base * 2 ** (attempt - 1);
+    return (0, backoff_1.fullJitter)(Math.min(exponential, max), rng);
+}
+/** Apply defaults to {@link RetryOptions}. */
+function resolveRetryOptions(options) {
+    return {
+        maxAttempts: options.maxAttempts ?? constants_1.DEFAULT_RETRY_MAX_ATTEMPTS,
+        baseDelayMs: options.baseDelayMs ?? constants_1.INITIAL_BACKOFF_DELAY_MS,
+        maxDelayMs: options.maxDelayMs ?? constants_1.MAX_BACKOFF_DELAY_MS,
+        retryable: options.retryableErrors ?? retry_classifier_1.DEFAULT_RETRYABLE_ERRORS,
+        rng: options.rng ?? Math.random,
+    };
+}
+/**
+ * Run `fn`, retrying retryable transient errors with full-jitter exponential
+ * backoff. Non-retryable errors are re-thrown unchanged; exhaustion throws
+ * {@link RetryExhaustedError}; an aborted signal throws {@link AbortError}.
+ */
+async function withRetry(fn, options = {}) {
+    const { maxAttempts, baseDelayMs, maxDelayMs, retryable, rng } = resolveRetryOptions(options);
+    if (options.signal?.aborted)
+        throw new errors_1.AbortError();
+    let lastError = new Error('Retry failed without error');
+    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+        try {
+            return await fn();
+        }
+        catch (error) {
+            lastError = (0, wrap_error_1.toError)(error);
+            if (!(0, retry_classifier_1.isRetryableError)(lastError, retryable))
+                throw lastError;
+            if (attempt === maxAttempts)
+                break;
+            await (0, backoff_1.sleep)(delayForAttempt(attempt, baseDelayMs, maxDelayMs, rng), options.signal);
+        }
+    }
+    throw new errors_1.RetryExhaustedError(`Operation failed after ${maxAttempts} attempts: ${lastError.message}`, maxAttempts, lastError);
+}
+/** {@link withRetry} preset for DynamoDB operations. */
+async function withDynamoDBRetry(fn, overrides) {
+    return withRetry(fn, { maxAttempts: constants_1.DEFAULT_RETRY_MAX_ATTEMPTS, ...overrides });
+}
+//# sourceMappingURL=retry.js.map

package/dist/shared/dynamodb/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../../src/shared/dynamodb/retry.ts"],"names":[],"mappings":";;AAiDA,8BAqBC;AAGD,8CAKC;AA9ED,4CAIsB;AACtB,6CAAmE;AACnE,qDAA+C;AAC/C,uCAA8C;AAC9C,yDAAgF;AAYhF,SAAS,eAAe,CAAC,OAAe,EAAE,IAAY,EAAE,GAAW,EAAE,GAAiB;IACpF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAC9C,OAAO,IAAA,oBAAU,EAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACrD,CAAC;AAUD,8CAA8C;AAC9C,SAAS,mBAAmB,CAAC,OAAqB;IAChD,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,sCAA0B;QAC9D,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,oCAAwB;QAC5D,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,gCAAoB;QACtD,SAAS,EAAE,OAAO,CAAC,eAAe,IAAI,2CAAwB;QAC9D,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM;KAChC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,SAAS,CAAI,EAAoB,EAAE,UAAwB,EAAE;IACjF,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE9F,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,mBAAU,EAAE,CAAC;IAEpD,IAAI,SAAS,GAAU,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC/D,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,IAAA,oBAAO,EAAC,KAAc,CAAC,CAAC;YACpC,IAAI,CAAC,IAAA,mCAAgB,EAAC,SAAS,EAAE,SAAS,CAAC;gBAAE,MAAM,SAAS,CAAC;YAC7D,IAAI,OAAO,KAAK,WAAW;gBAAE,MAAM;YACnC,MAAM,IAAA,eAAK,EAAC,eAAe,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,MAAM,IAAI,4BAAmB,CAC3B,0BAA0B,WAAW,cAAc,SAAS,CAAC,OAAO,EAAE,EACtE,WAAW,EACX,SAAS,CACV,CAAC;AACJ,CAAC;AAED,wDAAwD;AACjD,KAAK,UAAU,iBAAiB,CACrC,EAAoB,EACpB,SAAiC;IAEjC,OAAO,SAAS,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,sCAA0B,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;AAClF,CAAC"}

package/dist/shared/dynamodb/scan.d.ts

@@ -0,0 +1,15 @@
+import type { DynamoDBDocument, ScanCommandInput } from '@aws-sdk/lib-dynamodb';
+import { type PaginateCoreOptions } from './paginate-core';
+import type { DocItem } from './types';
+/** Options for {@link paginateScan}. */
+export interface ScanOptions extends PaginateCoreOptions {
+    client: DynamoDBDocument;
+    params: ScanCommandInput;
+}
+/**
+ * Drive a DynamoDB Scan across all pages, yielding each item. Shares the
+ * pagination core with {@link paginateQuery}: abort handling, retry per page,
+ * and runaway guards.
+ */
+export declare function paginateScan(options: ScanOptions): AsyncGenerator<DocItem>;
+//# sourceMappingURL=scan.d.ts.map

package/dist/shared/dynamodb/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../../src/shared/dynamodb/scan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEhF,OAAO,EAAE,KAAK,mBAAmB,EAAiB,MAAM,iBAAiB,CAAC;AAE1E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,wCAAwC;AACxC,MAAM,WAAW,WAAY,SAAQ,mBAAmB;IACtD,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAW1E"}

package/dist/shared/dynamodb/scan.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.paginateScan = paginateScan;
+const paginate_core_1 = require("./paginate-core");
+const retry_1 = require("./retry");
+/**
+ * Drive a DynamoDB Scan across all pages, yielding each item. Shares the
+ * pagination core with {@link paginateQuery}: abort handling, retry per page,
+ * and runaway guards.
+ */
+function paginateScan(options) {
+    return (0, paginate_core_1.paginatePages)(async (startKey) => {
+        const page = await (0, retry_1.withDynamoDBRetry)(() => options.client.scan({ ...options.params, ExclusiveStartKey: startKey }), { signal: options.signal });
+        return {
+            items: page.Items ?? [],
+            lastKey: page.LastEvaluatedKey,
+        };
+    }, options);
+}
+//# sourceMappingURL=scan.js.map

package/dist/shared/dynamodb/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../../src/shared/dynamodb/scan.ts"],"names":[],"mappings":";;AAiBA,oCAWC;AA1BD,mDAA0E;AAC1E,mCAA4C;AAS5C;;;;GAIG;AACH,SAAgB,YAAY,CAAC,OAAoB;IAC/C,OAAO,IAAA,6BAAa,EAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,MAAM,IAAA,yBAAiB,EAClC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,EAC7E,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAC3B,CAAC;QACF,OAAO;YACL,KAAK,EAAG,IAAI,CAAC,KAA+B,IAAI,EAAE;YAClD,OAAO,EAAE,IAAI,CAAC,gBAAuC;SACtD,CAAC;IACJ,CAAC,EAAE,OAAO,CAAC,CAAC;AACd,CAAC"}

package/dist/shared/dynamodb/types.d.ts

@@ -0,0 +1,24 @@
+import type { NativeAttributeValue } from '@aws-sdk/lib-dynamodb';
+/**
+ * A DynamoDB item as returned/accepted by the DocumentClient. Reads that we
+ * wrote ourselves are narrowed with a single structural `as` at the mapper
+ * boundary (never `as any`/`as unknown`); untrusted shared-table scans go
+ * through `narrowStoreRecord`.
+ */
+export type DocItem = Record<string, NativeAttributeValue>;
+/** A BatchWriteItem PutRequest. */
+interface PutWriteRequest {
+    PutRequest: {
+        Item: DocItem;
+    };
+}
+/** A BatchWriteItem DeleteRequest. */
+export interface DeleteWriteRequest {
+    DeleteRequest: {
+        Key: DocItem;
+    };
+}
+/** A single BatchWriteItem write request. */
+export type WriteRequest = PutWriteRequest | DeleteWriteRequest;
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/shared/dynamodb/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/shared/dynamodb/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAElE;;;;;GAKG;AACH,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;AAE3D,mCAAmC;AACnC,UAAU,eAAe;IACvB,UAAU,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;CAC/B;AAED,sCAAsC;AACtC,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE;QAAE,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC;CACjC;AAED,6CAA6C;AAC7C,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,kBAAkB,CAAC"}

package/dist/shared/dynamodb/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/shared/dynamodb/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/shared/dynamodb/types.ts"],"names":[],"mappings":""}

package/dist/shared/errors/base-error.d.ts

@@ -0,0 +1,22 @@
+import { ErrorCode } from './error-code';
+/** Structured, log-safe context attached to every library error. */
+export interface ErrorContext {
+    tableName?: string;
+    operation?: string;
+    key?: string;
+    attempts?: number;
+}
+/**
+ * Base class for every error this library throws. Carries a branchable
+ * {@link ErrorCode}, structured {@link ErrorContext}, and a native `cause`
+ * chain. Detected via {@link isDynamoDbLangGraphError} (a symbol brand) rather
+ * than `instanceof`, which is banned repo-wide.
+ */
+export declare class DynamoDbLangGraphError extends Error {
+    readonly code: ErrorCode;
+    readonly context: ErrorContext;
+    constructor(message: string, code: ErrorCode, context?: ErrorContext, cause?: Error);
+}
+/** True when `value` is a {@link DynamoDbLangGraphError}, detected by brand. */
+export declare function isDynamoDbLangGraphError(value: Error): value is DynamoDbLangGraphError;
+//# sourceMappingURL=base-error.d.ts.map

package/dist/shared/errors/base-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-error.d.ts","sourceRoot":"","sources":["../../../src/shared/errors/base-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAIzC,oEAAoE;AACpE,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;gBAEnB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,GAAE,YAAiB,EAAE,KAAK,CAAC,EAAE,KAAK;CAOxF;AAED,gFAAgF;AAChF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,IAAI,sBAAsB,CAEtF"}

package/dist/shared/errors/base-error.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DynamoDbLangGraphError = void 0;
+exports.isDynamoDbLangGraphError = isDynamoDbLangGraphError;
+const ERROR_BRAND = Symbol.for('@farukada/aws-langgraph-dynamodb-ts/error');
+/**
+ * Base class for every error this library throws. Carries a branchable
+ * {@link ErrorCode}, structured {@link ErrorContext}, and a native `cause`
+ * chain. Detected via {@link isDynamoDbLangGraphError} (a symbol brand) rather
+ * than `instanceof`, which is banned repo-wide.
+ */
+class DynamoDbLangGraphError extends Error {
+    code;
+    context;
+    constructor(message, code, context = {}, cause) {
+        super(message, cause === undefined ? undefined : { cause });
+        this.name = 'DynamoDbLangGraphError';
+        this.code = code;
+        this.context = context;
+        Object.defineProperty(this, ERROR_BRAND, { value: true, enumerable: false });
+    }
+}
+exports.DynamoDbLangGraphError = DynamoDbLangGraphError;
+/** True when `value` is a {@link DynamoDbLangGraphError}, detected by brand. */
+function isDynamoDbLangGraphError(value) {
+    return ERROR_BRAND in value;
+}
+//# sourceMappingURL=base-error.js.map

package/dist/shared/errors/base-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-error.js","sourceRoot":"","sources":["../../../src/shared/errors/base-error.ts"],"names":[],"mappings":";;;AAgCA,4DAEC;AAhCD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;AAU5E;;;;;GAKG;AACH,MAAa,sBAAuB,SAAQ,KAAK;IACtC,IAAI,CAAY;IAChB,OAAO,CAAe;IAE/B,YAAY,OAAe,EAAE,IAAe,EAAE,UAAwB,EAAE,EAAE,KAAa;QACrF,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,CAAC;CACF;AAXD,wDAWC;AAED,gFAAgF;AAChF,SAAgB,wBAAwB,CAAC,KAAY;IACnD,OAAO,WAAW,IAAI,KAAK,CAAC;AAC9B,CAAC"}

package/dist/shared/errors/error-code.d.ts

@@ -0,0 +1,13 @@
+/** Stable, branchable classification for every error this library throws. */
+export declare enum ErrorCode {
+    VALIDATION = "VALIDATION",
+    CONDITION_CONFLICT = "CONDITION_CONFLICT",
+    RETRY_EXHAUSTED = "RETRY_EXHAUSTED",
+    BATCH_WRITE_INCOMPLETE = "BATCH_WRITE_INCOMPLETE",
+    COMPRESSION_LIMIT = "COMPRESSION_LIMIT",
+    S3_OFFLOAD_FAILED = "S3_OFFLOAD_FAILED",
+    RESULT_TRUNCATED = "RESULT_TRUNCATED",
+    ABORTED = "ABORTED",
+    COMPENSATION_FAILED = "COMPENSATION_FAILED"
+}
+//# sourceMappingURL=error-code.d.ts.map

package/dist/shared/errors/error-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-code.d.ts","sourceRoot":"","sources":["../../../src/shared/errors/error-code.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,oBAAY,SAAS;IACnB,UAAU,eAAe;IACzB,kBAAkB,uBAAuB;IACzC,eAAe,oBAAoB;IACnC,sBAAsB,2BAA2B;IACjD,iBAAiB,sBAAsB;IACvC,iBAAiB,sBAAsB;IACvC,gBAAgB,qBAAqB;IACrC,OAAO,YAAY;IACnB,mBAAmB,wBAAwB;CAC5C"}

package/dist/shared/errors/error-code.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ErrorCode = void 0;
+/** Stable, branchable classification for every error this library throws. */
+var ErrorCode;
+(function (ErrorCode) {
+    ErrorCode["VALIDATION"] = "VALIDATION";
+    ErrorCode["CONDITION_CONFLICT"] = "CONDITION_CONFLICT";
+    ErrorCode["RETRY_EXHAUSTED"] = "RETRY_EXHAUSTED";
+    ErrorCode["BATCH_WRITE_INCOMPLETE"] = "BATCH_WRITE_INCOMPLETE";
+    ErrorCode["COMPRESSION_LIMIT"] = "COMPRESSION_LIMIT";
+    ErrorCode["S3_OFFLOAD_FAILED"] = "S3_OFFLOAD_FAILED";
+    ErrorCode["RESULT_TRUNCATED"] = "RESULT_TRUNCATED";
+    ErrorCode["ABORTED"] = "ABORTED";
+    ErrorCode["COMPENSATION_FAILED"] = "COMPENSATION_FAILED";
+})(ErrorCode || (exports.ErrorCode = ErrorCode = {}));
+//# sourceMappingURL=error-code.js.map

package/dist/shared/errors/error-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-code.js","sourceRoot":"","sources":["../../../src/shared/errors/error-code.ts"],"names":[],"mappings":";;;AAAA,6EAA6E;AAC7E,IAAY,SAUX;AAVD,WAAY,SAAS;IACnB,sCAAyB,CAAA;IACzB,sDAAyC,CAAA;IACzC,gDAAmC,CAAA;IACnC,8DAAiD,CAAA;IACjD,oDAAuC,CAAA;IACvC,oDAAuC,CAAA;IACvC,kDAAqC,CAAA;IACrC,gCAAmB,CAAA;IACnB,wDAA2C,CAAA;AAC7C,CAAC,EAVW,SAAS,yBAAT,SAAS,QAUpB"}

package/dist/shared/errors/errors.d.ts

@@ -0,0 +1,47 @@
+import type { WriteRequest } from '../dynamodb/types';
+import { DynamoDbLangGraphError } from './base-error';
+/** Input failed a validation rule before any AWS call was made. */
+export declare class ValidationError extends DynamoDbLangGraphError {
+    constructor(message: string, field?: string);
+}
+/** A conditional write failed because the precondition no longer holds. */
+export declare class ConflictError extends DynamoDbLangGraphError {
+    constructor(message: string, cause?: Error);
+}
+/** A retried operation exhausted its attempt budget. */
+export declare class RetryExhaustedError extends DynamoDbLangGraphError {
+    constructor(message: string, attempts?: number, cause?: Error);
+}
+/**
+ * A paginated read hit its runaway guard (item or iteration cap) while more
+ * data remained, so the result would have been silently truncated. Narrow the
+ * query (filter/prefix) or raise the cap rather than trusting a partial result.
+ */
+export declare class ResultTruncatedError extends DynamoDbLangGraphError {
+    constructor(cap: string, limit: number);
+}
+/** An operation was cancelled via its AbortSignal. */
+export declare class AbortError extends DynamoDbLangGraphError {
+    constructor(message?: string);
+}
+/**
+ * A BatchWriteItem sequence could not drain its UnprocessedItems. Items NOT
+ * listed in {@link unprocessed} were acked by DynamoDB and persist — there is
+ * no rollback (drive reconciliation from `unprocessed`).
+ */
+export declare class BatchWriteIncompleteError extends DynamoDbLangGraphError {
+    readonly succeededCount: number;
+    readonly unprocessed: WriteRequest[];
+    constructor(succeededCount: number, unprocessed: WriteRequest[], retries: number);
+}
+/**
+ * A compensating rollback failed after an append-saga chunk error, so the
+ * trigger error could not be cleanly undone. Carries the original trigger as
+ * `cause` and the rollback failure as {@link rollbackError}; the session's
+ * `messageCount` may have drifted — repair it with `reconcileMessageCount`.
+ */
+export declare class CompensationFailedError extends DynamoDbLangGraphError {
+    readonly rollbackError: Error;
+    constructor(cause: Error, rollbackError: Error);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/shared/errors/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/shared/errors/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAGtD,mEAAmE;AACnE,qBAAa,eAAgB,SAAQ,sBAAsB;gBAC7C,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM;CAI5C;AAED,2EAA2E;AAC3E,qBAAa,aAAc,SAAQ,sBAAsB;gBAC3C,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAI3C;AAED,wDAAwD;AACxD,qBAAa,mBAAoB,SAAQ,sBAAsB;gBACjD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAI9D;AAED;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,sBAAsB;gBAClD,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAQvC;AAED,sDAAsD;AACtD,qBAAa,UAAW,SAAQ,sBAAsB;gBACxC,OAAO,SAAsB;CAI1C;AAED;;;;GAIG;AACH,qBAAa,yBAA0B,SAAQ,sBAAsB;IACnE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,YAAY,EAAE,CAAC;gBAEzB,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM;CAUjF;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,sBAAsB;IACjE,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC;gBAElB,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK;CAU/C"}

package/dist/shared/errors/errors.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CompensationFailedError = exports.BatchWriteIncompleteError = exports.AbortError = exports.ResultTruncatedError = exports.RetryExhaustedError = exports.ConflictError = exports.ValidationError = void 0;
+const base_error_1 = require("./base-error");
+const error_code_1 = require("./error-code");
+/** Input failed a validation rule before any AWS call was made. */
+class ValidationError extends base_error_1.DynamoDbLangGraphError {
+    constructor(message, field) {
+        super(message, error_code_1.ErrorCode.VALIDATION, field === undefined ? {} : { operation: field });
+        this.name = 'ValidationError';
+    }
+}
+exports.ValidationError = ValidationError;
+/** A conditional write failed because the precondition no longer holds. */
+class ConflictError extends base_error_1.DynamoDbLangGraphError {
+    constructor(message, cause) {
+        super(message, error_code_1.ErrorCode.CONDITION_CONFLICT, {}, cause);
+        this.name = 'ConflictError';
+    }
+}
+exports.ConflictError = ConflictError;
+/** A retried operation exhausted its attempt budget. */
+class RetryExhaustedError extends base_error_1.DynamoDbLangGraphError {
+    constructor(message, attempts, cause) {
+        super(message, error_code_1.ErrorCode.RETRY_EXHAUSTED, attempts === undefined ? {} : { attempts }, cause);
+        this.name = 'RetryExhaustedError';
+    }
+}
+exports.RetryExhaustedError = RetryExhaustedError;
+/**
+ * A paginated read hit its runaway guard (item or iteration cap) while more
+ * data remained, so the result would have been silently truncated. Narrow the
+ * query (filter/prefix) or raise the cap rather than trusting a partial result.
+ */
+class ResultTruncatedError extends base_error_1.DynamoDbLangGraphError {
+    constructor(cap, limit) {
+        super(`paginated read truncated at the ${cap} cap (${limit}) with more data remaining`, error_code_1.ErrorCode.RESULT_TRUNCATED, { operation: cap });
+        this.name = 'ResultTruncatedError';
+    }
+}
+exports.ResultTruncatedError = ResultTruncatedError;
+/** An operation was cancelled via its AbortSignal. */
+class AbortError extends base_error_1.DynamoDbLangGraphError {
+    constructor(message = 'Operation aborted') {
+        super(message, error_code_1.ErrorCode.ABORTED);
+        this.name = 'AbortError';
+    }
+}
+exports.AbortError = AbortError;
+/**
+ * A BatchWriteItem sequence could not drain its UnprocessedItems. Items NOT
+ * listed in {@link unprocessed} were acked by DynamoDB and persist — there is
+ * no rollback (drive reconciliation from `unprocessed`).
+ */
+class BatchWriteIncompleteError extends base_error_1.DynamoDbLangGraphError {
+    succeededCount;
+    unprocessed;
+    constructor(succeededCount, unprocessed, retries) {
+        super(`batchWrite did not drain after ${retries} UnprocessedItems retries: ` +
+            `${succeededCount} item(s) persisted, ${unprocessed.length} still un-acked.`, error_code_1.ErrorCode.BATCH_WRITE_INCOMPLETE);
+        this.name = 'BatchWriteIncompleteError';
+        this.succeededCount = succeededCount;
+        this.unprocessed = unprocessed;
+    }
+}
+exports.BatchWriteIncompleteError = BatchWriteIncompleteError;
+/**
+ * A compensating rollback failed after an append-saga chunk error, so the
+ * trigger error could not be cleanly undone. Carries the original trigger as
+ * `cause` and the rollback failure as {@link rollbackError}; the session's
+ * `messageCount` may have drifted — repair it with `reconcileMessageCount`.
+ */
+class CompensationFailedError extends base_error_1.DynamoDbLangGraphError {
+    rollbackError;
+    constructor(cause, rollbackError) {
+        super(`compensation failed after an append error: ${cause.message} (rollback: ${rollbackError.message})`, error_code_1.ErrorCode.COMPENSATION_FAILED, {}, cause);
+        this.name = 'CompensationFailedError';
+        this.rollbackError = rollbackError;
+    }
+}
+exports.CompensationFailedError = CompensationFailedError;
+//# sourceMappingURL=errors.js.map

package/dist/shared/errors/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/shared/errors/errors.ts"],"names":[],"mappings":";;;AACA,6CAAsD;AACtD,6CAAyC;AAEzC,mEAAmE;AACnE,MAAa,eAAgB,SAAQ,mCAAsB;IACzD,YAAY,OAAe,EAAE,KAAc;QACzC,KAAK,CAAC,OAAO,EAAE,sBAAS,CAAC,UAAU,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AALD,0CAKC;AAED,2EAA2E;AAC3E,MAAa,aAAc,SAAQ,mCAAsB;IACvD,YAAY,OAAe,EAAE,KAAa;QACxC,KAAK,CAAC,OAAO,EAAE,sBAAS,CAAC,kBAAkB,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AALD,sCAKC;AAED,wDAAwD;AACxD,MAAa,mBAAoB,SAAQ,mCAAsB;IAC7D,YAAY,OAAe,EAAE,QAAiB,EAAE,KAAa;QAC3D,KAAK,CAAC,OAAO,EAAE,sBAAS,CAAC,eAAe,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7F,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AALD,kDAKC;AAED;;;;GAIG;AACH,MAAa,oBAAqB,SAAQ,mCAAsB;IAC9D,YAAY,GAAW,EAAE,KAAa;QACpC,KAAK,CACH,mCAAmC,GAAG,SAAS,KAAK,4BAA4B,EAChF,sBAAS,CAAC,gBAAgB,EAC1B,EAAE,SAAS,EAAE,GAAG,EAAE,CACnB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AATD,oDASC;AAED,sDAAsD;AACtD,MAAa,UAAW,SAAQ,mCAAsB;IACpD,YAAY,OAAO,GAAG,mBAAmB;QACvC,KAAK,CAAC,OAAO,EAAE,sBAAS,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AALD,gCAKC;AAED;;;;GAIG;AACH,MAAa,yBAA0B,SAAQ,mCAAsB;IAC1D,cAAc,CAAS;IACvB,WAAW,CAAiB;IAErC,YAAY,cAAsB,EAAE,WAA2B,EAAE,OAAe;QAC9E,KAAK,CACH,kCAAkC,OAAO,6BAA6B;YACpE,GAAG,cAAc,uBAAuB,WAAW,CAAC,MAAM,kBAAkB,EAC9E,sBAAS,CAAC,sBAAsB,CACjC,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAdD,8DAcC;AAED;;;;;GAKG;AACH,MAAa,uBAAwB,SAAQ,mCAAsB;IACxD,aAAa,CAAQ;IAE9B,YAAY,KAAY,EAAE,aAAoB;QAC5C,KAAK,CACH,8CAA8C,KAAK,CAAC,OAAO,eAAe,aAAa,CAAC,OAAO,GAAG,EAClG,sBAAS,CAAC,mBAAmB,EAC7B,EAAE,EACF,KAAK,CACN,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;CACF;AAbD,0DAaC"}

package/dist/shared/errors/wrap-error.d.ts

@@ -0,0 +1,16 @@
+import { DynamoDbLangGraphError, ErrorContext } from './base-error';
+import { ErrorCode } from './error-code';
+/**
+ * Normalize a caught value (TypeScript types catch clauses as the implicit
+ * unknown) into an `Error`. Error-shaped values pass through; anything else is
+ * stringified into a fresh `Error`. This is the boundary where caught values
+ * are narrowed — callers do `toError(error as Error)`.
+ */
+export declare function toError(value: Error): Error;
+/**
+ * Wrap a raw error in a coded {@link DynamoDbLangGraphError} with structured
+ * context, preserving the original as `cause`. Already-coded errors are
+ * returned unchanged so codes assigned closer to the failure win.
+ */
+export declare function wrapError(cause: Error, code: ErrorCode, context?: ErrorContext): DynamoDbLangGraphError;
+//# sourceMappingURL=wrap-error.d.ts.map

package/dist/shared/errors/wrap-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-error.d.ts","sourceRoot":"","sources":["../../../src/shared/errors/wrap-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAA4B,MAAM,cAAc,CAAC;AAC9F,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAK3C;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CACvB,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,SAAS,EACf,OAAO,CAAC,EAAE,YAAY,GACrB,sBAAsB,CAMxB"}

package/dist/shared/errors/wrap-error.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toError = toError;
+exports.wrapError = wrapError;
+const base_error_1 = require("./base-error");
+/**
+ * Normalize a caught value (TypeScript types catch clauses as the implicit
+ * unknown) into an `Error`. Error-shaped values pass through; anything else is
+ * stringified into a fresh `Error`. This is the boundary where caught values
+ * are narrowed — callers do `toError(error as Error)`.
+ */
+function toError(value) {
+    if (value !== null && typeof value === 'object' && typeof value.message === 'string') {
+        return value;
+    }
+    return new Error(typeof value === 'string' ? value : JSON.stringify(value));
+}
+/**
+ * Wrap a raw error in a coded {@link DynamoDbLangGraphError} with structured
+ * context, preserving the original as `cause`. Already-coded errors are
+ * returned unchanged so codes assigned closer to the failure win.
+ */
+function wrapError(cause, code, context) {
+    const normalized = toError(cause);
+    if ((0, base_error_1.isDynamoDbLangGraphError)(normalized)) {
+        return normalized;
+    }
+    return new base_error_1.DynamoDbLangGraphError(normalized.message, code, context ?? {}, normalized);
+}
+//# sourceMappingURL=wrap-error.js.map

package/dist/shared/errors/wrap-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-error.js","sourceRoot":"","sources":["../../../src/shared/errors/wrap-error.ts"],"names":[],"mappings":";;AASA,0BAKC;AAOD,8BAUC;AA/BD,6CAA8F;AAG9F;;;;;GAKG;AACH,SAAgB,OAAO,CAAC,KAAY;IAClC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CACvB,KAAY,EACZ,IAAe,EACf,OAAsB;IAEtB,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,IAAA,qCAAwB,EAAC,UAAU,CAAC,EAAE,CAAC;QACzC,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,mCAAsB,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;AACzF,CAAC"}

package/dist/shared/logging/logger.d.ts

@@ -0,0 +1,14 @@
+/** A value safe to pass as a structured log argument. */
+export type LogArgument = string | number | boolean | null | object;
+/** Pluggable logging interface — consumers supply their own implementation. */
+export interface Logger {
+    info(message: string, ...args: LogArgument[]): void;
+    warn(message: string, ...args: LogArgument[]): void;
+    error(message: string, ...args: LogArgument[]): void;
+    debug(message: string, ...args: LogArgument[]): void;
+}
+/** Default logger: discards everything. Inject a real logger to enable output. */
+export declare const SILENT_LOGGER: Logger;
+/** Return the injected logger, or {@link SILENT_LOGGER} when none is given. */
+export declare function resolveLogger(logger?: Logger): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/shared/logging/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/shared/logging/logger.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,MAAM,CAAC;AAEpE,+EAA+E;AAC/E,MAAM,WAAW,MAAM;IACrB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACpD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACpD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACrD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;CACtD;AAED,kFAAkF;AAClF,eAAO,MAAM,aAAa,EAAE,MAK3B,CAAC;AAEF,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAErD"}

package/dist/shared/logging/logger.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SILENT_LOGGER = void 0;
+exports.resolveLogger = resolveLogger;
+/** Default logger: discards everything. Inject a real logger to enable output. */
+exports.SILENT_LOGGER = {
+    info() { },
+    warn() { },
+    error() { },
+    debug() { },
+};
+/** Return the injected logger, or {@link SILENT_LOGGER} when none is given. */
+function resolveLogger(logger) {
+    return logger ?? exports.SILENT_LOGGER;
+}
+//# sourceMappingURL=logger.js.map

package/dist/shared/logging/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/shared/logging/logger.ts"],"names":[],"mappings":";;;AAoBA,sCAEC;AAXD,kFAAkF;AACrE,QAAA,aAAa,GAAW;IACnC,IAAI,KAAI,CAAC;IACT,IAAI,KAAI,CAAC;IACT,KAAK,KAAI,CAAC;IACV,KAAK,KAAI,CAAC;CACX,CAAC;AAEF,+EAA+E;AAC/E,SAAgB,aAAa,CAAC,MAAe;IAC3C,OAAO,MAAM,IAAI,qBAAa,CAAC;AACjC,CAAC"}

package/dist/shared/logging/redaction.d.ts

@@ -0,0 +1,19 @@
+import type { Logger } from './logger';
+/** A value that {@link redactSecrets} can recurse through. */
+export type Redactable = string | number | boolean | null | undefined | Redactable[] | {
+    [key: string]: Redactable;
+};
+/**
+ * Recursively clone `value`, replacing any value at a secret-looking key with
+ * `[REDACTED]`. Cycles become `[Circular]`. Error objects are passed through so
+ * stack traces survive. Does not mutate the input.
+ */
+export declare function redactSecrets(value: Redactable, patterns?: readonly string[]): Redactable;
+/**
+ * Wrap a logger so object args are redacted before delegation. The message
+ * string is passed through unchanged (never interpolate secrets into it).
+ */
+export declare function redactLogger(inner: Logger, options?: {
+    extraKeys?: readonly string[];
+}): Logger;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/shared/logging/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../../src/shared/logging/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAe,MAAM,EAAE,MAAM,UAAU,CAAC;AAEpD,8DAA8D;AAC9D,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,GACT,UAAU,EAAE,GACZ;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAAA;CAAE,CAAC;AA2BlC;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,UAAU,EACjB,QAAQ,GAAE,SAAS,MAAM,EAAgC,GACxD,UAAU,CAeZ;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAC9C,MAAM,CAYR"}

package/dist/shared/logging/redaction.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactSecrets = redactSecrets;
+exports.redactLogger = redactLogger;
+const DEFAULT_SECRET_KEY_PATTERNS = [
+    'accesskey',
+    'secretkey',
+    'secret',
+    'sessiontoken',
+    'securitytoken',
+    'authorization',
+    'password',
+    'apikey',
+    'bearer',
+    'token',
+    'privatekey',
+];
+const REDACTED = '[REDACTED]';
+function isSecretKey(key, patterns) {
+    const lower = key.toLowerCase();
+    return patterns.some((pattern) => lower.includes(pattern));
+}
+function isErrorShaped(value) {
+    return Object.prototype.toString.call(value) === '[object Error]';
+}
+/**
+ * Recursively clone `value`, replacing any value at a secret-looking key with
+ * `[REDACTED]`. Cycles become `[Circular]`. Error objects are passed through so
+ * stack traces survive. Does not mutate the input.
+ */
+function redactSecrets(value, patterns = DEFAULT_SECRET_KEY_PATTERNS) {
+    const seen = new WeakSet();
+    const walk = (current) => {
+        if (current === null || typeof current !== 'object')
+            return current;
+        if (seen.has(current))
+            return '[Circular]';
+        seen.add(current);
+        if (Array.isArray(current))
+            return current.map(walk);
+        if (isErrorShaped(current))
+            return current;
+        const out = {};
+        for (const [key, val] of Object.entries(current)) {
+            out[key] = isSecretKey(key, patterns) ? REDACTED : walk(val);
+        }
+        return out;
+    };
+    return walk(value);
+}
+/**
+ * Wrap a logger so object args are redacted before delegation. The message
+ * string is passed through unchanged (never interpolate secrets into it).
+ */
+function redactLogger(inner, options = {}) {
+    const patterns = options.extraKeys
+        ? [...DEFAULT_SECRET_KEY_PATTERNS, ...options.extraKeys.map((key) => key.toLowerCase())]
+        : DEFAULT_SECRET_KEY_PATTERNS;
+    const wrap = (args) => args.map((arg) => redactSecrets(arg, patterns));
+    return {
+        info: (message, ...args) => inner.info(message, ...wrap(args)),
+        warn: (message, ...args) => inner.warn(message, ...wrap(args)),
+        error: (message, ...args) => inner.error(message, ...wrap(args)),
+        debug: (message, ...args) => inner.debug(message, ...wrap(args)),
+    };
+}
+//# sourceMappingURL=redaction.js.map

package/dist/shared/logging/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../../src/shared/logging/redaction.ts"],"names":[],"mappings":";;AA0CA,sCAkBC;AAMD,oCAeC;AArED,MAAM,2BAA2B,GAAsB;IACrD,WAAW;IACX,WAAW;IACX,QAAQ;IACR,cAAc;IACd,eAAe;IACf,eAAe;IACf,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,YAAY;CACb,CAAC;AAEF,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,SAAS,WAAW,CAAC,GAAW,EAAE,QAA2B;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,gBAAgB,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAC3B,KAAiB,EACjB,WAA8B,2BAA2B;IAEzD,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,OAAmB,EAAc,EAAE;QAC/C,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;QACpE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,YAAY,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,aAAa,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;QAC3C,MAAM,GAAG,GAAkC,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,SAAgB,YAAY,CAC1B,KAAa,EACb,UAA6C,EAAE;IAE/C,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS;QAChC,CAAC,CAAC,CAAC,GAAG,2BAA2B,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,2BAA2B,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,IAAmB,EAAiB,EAAE,CAClD,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAiB,EAAE,QAAQ,CAAgB,CAAC,CAAC;IAC/E,OAAO;QACL,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;KACjE,CAAC;AACJ,CAAC"}