@farukada/aws-langgraph-dynamodb-ts 0.6.0 → 0.8.0

package/dist/history/actions/clear.js

@@ -1,46 +1,31 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.clearSession = clearSession;
-const descriptor_keys_1 = require("../../shared/codec/descriptor-keys");
-const orphans_1 = require("../../shared/codec/s3/orphans");
-const constants_1 = require("../../shared/constants");
-const batch_write_1 = require("../../shared/dynamodb/batch-write");
-const paginate_1 = require("../../shared/dynamodb/paginate");
+const partition_delete_1 = require("../../shared/dynamodb/partition-delete");
+const keys_1 = require("../internal/keys");
 const query_1 = require("../internal/query");
-async function flushBuffer(context, buffer) {
-    if (buffer.keys.length === 0)
-        return;
-    await (0, batch_write_1.batchWriteAll)(context.client, context.tableName, buffer.keys.map((Key) => ({ DeleteRequest: { Key } })));
-    if (context.offloader) {
-        await (0, orphans_1.cleanUpS3Orphans)(context.offloader, (0, descriptor_keys_1.collectS3Keys)(buffer.descriptors), 'history.clear', context.logger);
-    }
-    buffer.keys = [];
-    buffer.descriptors = [];
+const validation_1 = require("../internal/validation");
+/** The offloaded payload a chat-history row can reference. */
+function descriptorsOf(row) {
+    return [row.message];
 }
 /**
- * Delete a whole session: every message item plus the metadata item, flushed
- * in bounded batches as they're listed, plus best-effort S3 cleanup. Streams
- * the partition with unbounded pagination so a session of any size is
- * deleted to completion with bounded memory — never silently truncated at
- * the in-memory page caps, and never discards already-flushed progress if a
- * later batch fails.
+ * Delete a whole session: every message item plus the metadata item, best-effort
+ * deleting any offloaded S3 objects. Rows this adapter does not own are left in
+ * place and logged, so a shared-table partition holding a foreign row is never
+ * collaterally wiped.
  */
 async function clearSession(context, sessionId) {
-    const buffer = { keys: [], descriptors: [] };
-    const pages = (0, paginate_1.paginateQuery)({
+    (0, validation_1.validateSessionId)(sessionId);
+    await (0, partition_delete_1.deletePartitionRows)({
         client: context.client,
+        tableName: context.tableName,
         params: (0, query_1.sessionItemsQuery)(context.tableName, sessionId, { consistent: true }),
-        maxItems: Number.POSITIVE_INFINITY,
-        maxIterations: Number.POSITIVE_INFINITY,
+        logger: context.logger,
+        offloader: context.offloader,
+        operation: 'history.clear',
+        ownsSortKey: keys_1.isHistorySortKey,
+        descriptorsOf,
     });
-    for await (const raw of pages) {
-        const item = raw;
-        buffer.keys.push({ PK: item.PK, SK: item.SK });
-        if (item.message)
-            buffer.descriptors.push(item.message);
-        if (buffer.keys.length >= constants_1.BATCH_WRITE_MAX)
-            await flushBuffer(context, buffer);
-    }
-    await flushBuffer(context, buffer);
 }
 //# sourceMappingURL=clear.js.map

package/dist/history/actions/clear.js.map

@@ -1 +1 @@
-{"version":3,"file":"clear.js","sourceRoot":"","sources":["../../../src/history/actions/clear.ts"],"names":[],"mappings":";;;AACA,wEAAmE;AACnE,2DAAiE;AACjE,sDAAyD;AACzD,mEAAkE;AAClE,6DAA+D;AAC/D,6CAAsD;AAStD,KAAK,UAAU,WAAW,CAAC,OAAuB,EAAE,MAAoB;IACtE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACrC,MAAM,IAAA,2BAAa,EACjB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,SAAS,EACjB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CACvD,CAAC;IACF,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,MAAM,IAAA,0BAAgB,EACpB,OAAO,CAAC,SAAS,EACjB,IAAA,+BAAa,EAAC,MAAM,CAAC,WAAW,CAAC,EACjC,eAAe,EACf,OAAO,CAAC,MAAM,CACf,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,uBAAuB,OAAuB,EAAE,SAAiB;IAC3E,MAAM,MAAM,GAAiB,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAA,wBAAa,EAAC;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,IAAA,yBAAiB,EAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC7E,QAAQ,EAAE,MAAM,CAAC,iBAAiB;QAClC,aAAa,EAAE,MAAM,CAAC,iBAAiB;KACxC,CAAC,CAAC;IACH,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,GAAsB,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,2BAAe;YAAE,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC"}
+{"version":3,"file":"clear.js","sourceRoot":"","sources":["../../../src/history/actions/clear.ts"],"names":[],"mappings":";;;AACA,6EAA6E;AAE7E,2CAAoD;AACpD,6CAAsD;AAEtD,uDAA2D;AAE3D,8DAA8D;AAC9D,SAAS,aAAa,CAAC,GAAY;IACjC,OAAO,CAAC,GAAG,CAAC,OAAwC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACI,KAAK,uBAAuB,OAAuB,EAAE,SAAiB;IAC3E,IAAA,8BAAiB,EAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,IAAA,sCAAmB,EAAC;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,IAAA,yBAAiB,EAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC7E,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,eAAe;QAC1B,WAAW,EAAE,uBAAgB;QAC7B,aAAa;KACd,CAAC,CAAC;AACL,CAAC"}

package/dist/history/actions/get-messages.d.ts

@@ -3,7 +3,8 @@ import type { HistoryContext } from '../internal/setup';
 /**
  * Return a session's messages in chronological order. Items past their TTL are
  * filtered out on read (DynamoDB's background TTL sweep can lag by up to 48h),
- * so the returned history is never stale.
+ * so the returned history is never stale. An item that cannot be decoded is
+ * handled per `onCorruptMessage` (see {@link decodeOrSkip}).
  */
 export declare function getMessages(context: HistoryContext, sessionId: string): Promise<BaseMessage[]>;
 //# sourceMappingURL=get-messages.d.ts.map

package/dist/history/actions/get-messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-messages.d.ts","sourceRoot":"","sources":["../../../src/history/actions/get-messages.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,WAAW,EAGjB,MAAM,0BAA0B,CAAC;AAKlC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAOxD;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,EAAE,CAAC,CAcxB"}
+{"version":3,"file":"get-messages.d.ts","sourceRoot":"","sources":["../../../src/history/actions/get-messages.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,WAAW,EAGjB,MAAM,0BAA0B,CAAC;AAKlC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAgCxD;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,WAAW,EAAE,CAAC,CAgBxB"}

package/dist/history/actions/get-messages.js

@@ -5,15 +5,39 @@ const messages_1 = require("@langchain/core/messages");
 const paginate_1 = require("../../shared/dynamodb/paginate");
 const item_mapper_1 = require("../internal/item-mapper");
 const query_1 = require("../internal/query");
+const validation_1 = require("../internal/validation");
 function isExpired(item, nowSeconds) {
     return item.ttl !== undefined && item.ttl <= nowSeconds;
 }
+/**
+ * Decode one item, honouring the configured corrupt-message policy. Under the
+ * default `'skip'` an undecodable item is reported and dropped rather than
+ * taking the whole session down with it: one bad row used to throw out of
+ * `getMessages` entirely, making every other message in the session
+ * permanently unreadable with no API to remove just the bad one.
+ */
+async function decodeOrSkip(context, sessionId, item) {
+    try {
+        return await (0, item_mapper_1.decodeMessageItem)(context, item);
+    }
+    catch (error) {
+        if (context.onCorruptMessage === 'throw')
+            throw error;
+        context.logger.error('getMessages: skipped a corrupt message item', {
+            sessionId,
+            sortKey: item.SK,
+        });
+        return undefined;
+    }
+}
 /**
  * Return a session's messages in chronological order. Items past their TTL are
  * filtered out on read (DynamoDB's background TTL sweep can lag by up to 48h),
- * so the returned history is never stale.
+ * so the returned history is never stale. An item that cannot be decoded is
+ * handled per `onCorruptMessage` (see {@link decodeOrSkip}).
  */
 async function getMessages(context, sessionId) {
+    (0, validation_1.validateSessionId)(sessionId);
     const nowSeconds = Math.floor(Date.now() / 1000);
     const stored = [];
     for await (const raw of (0, paginate_1.paginateQuery)({
@@ -25,7 +49,9 @@ async function getMessages(context, sessionId) {
         const item = raw;
         if (isExpired(item, nowSeconds))
             continue;
-        stored.push(await (0, item_mapper_1.decodeMessageItem)(context, item));
+        const message = await decodeOrSkip(context, sessionId, item);
+        if (message)
+            stored.push(message);
     }
     return (0, messages_1.mapStoredMessagesToChatMessages)(stored);
 }

package/dist/history/actions/get-messages.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-messages.js","sourceRoot":"","sources":["../../../src/history/actions/get-messages.ts"],"names":[],"mappings":";;;AAAA,uDAIkC;AAElC,6DAA+D;AAC/D,yDAA4D;AAC5D,6CAAiD;AAIjD,SAAS,SAAS,CAAC,IAAqB,EAAE,UAAkB;IAC1D,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACI,KAAK,sBACV,OAAuB,EACvB,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,IAAA,wBAAa,EAAC;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,IAAA,oBAAY,EAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC;QAClD,QAAQ,EAAE,MAAM,CAAC,iBAAiB;QAClC,aAAa,EAAE,MAAM,CAAC,iBAAiB;KACxC,CAAC,EAAE,CAAC;QACH,MAAM,IAAI,GAAG,GAAsB,CAAC;QACpC,IAAI,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC;YAAE,SAAS;QAC1C,MAAM,CAAC,IAAI,CAAC,MAAM,IAAA,+BAAiB,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAA,0CAA+B,EAAC,MAAM,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"get-messages.js","sourceRoot":"","sources":["../../../src/history/actions/get-messages.ts"],"names":[],"mappings":";;;AAAA,uDAIkC;AAElC,6DAA+D;AAC/D,yDAA4D;AAC5D,6CAAiD;AAEjD,uDAA2D;AAG3D,SAAS,SAAS,CAAC,IAAqB,EAAE,UAAkB;IAC1D,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CACzB,OAAuB,EACvB,SAAiB,EACjB,IAAqB;IAErB,IAAI,CAAC;QACH,OAAO,MAAM,IAAA,+BAAiB,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,gBAAgB,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE;YAClE,SAAS;YACT,OAAO,EAAE,IAAI,CAAC,EAAE;SACjB,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,sBACV,OAAuB,EACvB,SAAiB;IAEjB,IAAA,8BAAiB,EAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,IAAA,wBAAa,EAAC;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,IAAA,oBAAY,EAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC;QAClD,QAAQ,EAAE,MAAM,CAAC,iBAAiB;QAClC,aAAa,EAAE,MAAM,CAAC,iBAAiB;KACxC,CAAC,EAAE,CAAC;QACH,MAAM,IAAI,GAAG,GAAsB,CAAC;QACpC,IAAI,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC;YAAE,SAAS;QAC1C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,IAAA,0CAA+B,EAAC,MAAM,CAAC,CAAC;AACjD,CAAC"}

package/dist/history/actions/list-sessions.d.ts

@@ -3,7 +3,8 @@ import type { SessionMetadata } from '../types';
 /**
  * List all sessions as metadata summaries, newest-updated first. The scan is
  * filtered to session items so the adapter works on a table shared with the
- * checkpointer/store; foreign rows are also skipped defensively.
+ * checkpointer/store; foreign rows are also skipped defensively, and rows past
+ * their TTL are filtered out exactly as `getMessages` filters expired messages.
  */
 export declare function listSessions(context: HistoryContext, options?: {
     maxIterations?: number;

package/dist/history/actions/list-sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-sessions.d.ts","sourceRoot":"","sources":["../../../src/history/actions/list-sessions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAmB,eAAe,EAAE,MAAM,UAAU,CAAC;AAEjE;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CAAC,eAAe,EAAE,CAAC,CAyB5B"}
+{"version":3,"file":"list-sessions.d.ts","sourceRoot":"","sources":["../../../src/history/actions/list-sessions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAmB,eAAe,EAAE,MAAM,UAAU,CAAC;AAYjE;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CAAC,eAAe,EAAE,CAAC,CAiC5B"}

package/dist/history/actions/list-sessions.js

@@ -3,13 +3,24 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.listSessions = listSessions;
 const scan_1 = require("../../shared/dynamodb/scan");
 const keys_1 = require("../internal/keys");
+/**
+ * True when a session row is past its TTL. DynamoDB's background sweep can lag
+ * up to 48h, so an expired session would otherwise keep appearing in listings
+ * after `getMessages` had already stopped returning its messages — the same
+ * filter that read path applies.
+ */
+function isExpired(item, nowSeconds) {
+    return item.ttl !== undefined && item.ttl <= nowSeconds;
+}
 /**
  * List all sessions as metadata summaries, newest-updated first. The scan is
  * filtered to session items so the adapter works on a table shared with the
- * checkpointer/store; foreign rows are also skipped defensively.
+ * checkpointer/store; foreign rows are also skipped defensively, and rows past
+ * their TTL are filtered out exactly as `getMessages` filters expired messages.
  */
 async function listSessions(context, options) {
     const sessions = [];
+    const nowSeconds = Math.floor(Date.now() / 1000);
     for await (const raw of (0, scan_1.paginateScan)({
         client: context.client,
         params: {
@@ -24,6 +35,8 @@ async function listSessions(context, options) {
         const item = raw;
         if (item.SK !== keys_1.SESSION_SORT_KEY || typeof item.sessionId !== 'string')
             continue;
+        if (isExpired(item, nowSeconds))
+            continue;
         sessions.push({
             sessionId: item.sessionId,
             title: item.title,
@@ -32,7 +45,13 @@ async function listSessions(context, options) {
             updatedAt: item.updatedAt,
         });
     }
-    sessions.sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
+    /**
+     * Ordinal, not `localeCompare`: these are ISO-8601 timestamps, whose
+     * byte order already is their chronological order. Locale-aware collation
+     * applies rules (case folding, punctuation weighting) that have no meaning
+     * here and are not guaranteed to agree with it in every locale.
+     */
+    sessions.sort((a, b) => (a.updatedAt < b.updatedAt ? 1 : a.updatedAt > b.updatedAt ? -1 : 0));
     return sessions;
 }
 //# sourceMappingURL=list-sessions.js.map

package/dist/history/actions/list-sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-sessions.js","sourceRoot":"","sources":["../../../src/history/actions/list-sessions.ts"],"names":[],"mappings":";;;AAAA,qDAA0D;AAC1D,2CAAoD;AAIpD;;;;GAIG;AACI,KAAK,uBACV,OAAuB,EACvB,OAAuD;IAEvD,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,IAAA,mBAAY,EAAC;QACnC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,gBAAgB,EAAE,gBAAgB;YAClC,wBAAwB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;YACzC,yBAAyB,EAAE,EAAE,UAAU,EAAE,uBAAgB,EAAE;SAC5D;QACD,aAAa,EAAE,OAAO,EAAE,aAAa;QACrC,QAAQ,EAAE,OAAO,EAAE,QAAQ;KAC5B,CAAC,EAAE,CAAC;QACH,MAAM,IAAI,GAAG,GAAsB,CAAC;QACpC,IAAI,IAAI,CAAC,EAAE,KAAK,uBAAgB,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YAAE,SAAS;QACjF,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAChE,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"list-sessions.js","sourceRoot":"","sources":["../../../src/history/actions/list-sessions.ts"],"names":[],"mappings":";;;AAAA,qDAA0D;AAC1D,2CAAoD;AAIpD;;;;;GAKG;AACH,SAAS,SAAS,CAAC,IAAqB,EAAE,UAAkB;IAC1D,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACI,KAAK,uBACV,OAAuB,EACvB,OAAuD;IAEvD,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,IAAA,mBAAY,EAAC;QACnC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE;YACN,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,gBAAgB,EAAE,gBAAgB;YAClC,wBAAwB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;YACzC,yBAAyB,EAAE,EAAE,UAAU,EAAE,uBAAgB,EAAE;SAC5D;QACD,aAAa,EAAE,OAAO,EAAE,aAAa;QACrC,QAAQ,EAAE,OAAO,EAAE,QAAQ;KAC5B,CAAC,EAAE,CAAC;QACH,MAAM,IAAI,GAAG,GAAsB,CAAC;QACpC,IAAI,IAAI,CAAC,EAAE,KAAK,uBAAgB,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YAAE,SAAS;QACjF,IAAI,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC;YAAE,SAAS;QAC1C,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IACD;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/history/actions/reconcile-count.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reconcile-count.d.ts","sourceRoot":"","sources":["../../../src/history/actions/reconcile-count.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAgBxD;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAwBjB"}
+{"version":3,"file":"reconcile-count.d.ts","sourceRoot":"","sources":["../../../src/history/actions/reconcile-count.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAiBxD;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAwBjB"}

package/dist/history/actions/reconcile-count.js

@@ -3,9 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.reconcileMessageCount = reconcileMessageCount;
 const retry_1 = require("../../shared/dynamodb/retry");
 const errors_1 = require("../../shared/errors/errors");
-const primitives_1 = require("../../shared/validation/primitives");
 const keys_1 = require("../internal/keys");
 const query_1 = require("../internal/query");
+const validation_1 = require("../internal/validation");
 async function countMessages(context, sessionId) {
     const base = (0, query_1.messageQuery)(context.tableName, sessionId);
     let total = 0;
@@ -28,7 +28,7 @@ async function countMessages(context, sessionId) {
  * reconciled count.
  */
 async function reconcileMessageCount(context, sessionId) {
-    (0, primitives_1.validateNonEmptyString)(sessionId, 'sessionId');
+    (0, validation_1.validateSessionId)(sessionId);
     const count = await countMessages(context, sessionId);
     try {
         await (0, retry_1.withDynamoDBRetry)(() => context.client.update({

package/dist/history/actions/reconcile-count.js.map

@@ -1 +1 @@
-{"version":3,"file":"reconcile-count.js","sourceRoot":"","sources":["../../../src/history/actions/reconcile-count.ts"],"names":[],"mappings":";;;AAEA,uDAAgE;AAChE,uDAA2D;AAC3D,mEAA4E;AAC5E,2CAAsE;AACtE,6CAAiD;AAGjD,KAAK,UAAU,aAAa,CAAC,OAAuB,EAAE,SAAiB;IACrE,MAAM,IAAI,GAAG,IAAA,oBAAY,EAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAA0D,CAAC;IAC/D,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAA,yBAAiB,EAAC,GAAG,EAAE,CACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAChF,CAAC;QACF,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QACzB,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC;IACnC,CAAC,QAAQ,QAAQ,EAAE;IACnB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,gCACV,OAAuB,EACvB,SAAiB;IAEjB,IAAA,mCAAsB,EAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,IAAA,yBAAiB,EAAC,GAAG,EAAE,CAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,EAAE,EAAE,EAAE,EAAE,IAAA,uBAAgB,EAAC,SAAS,CAAC,EAAE,EAAE,EAAE,uBAAgB,EAAE;YAC9D,gBAAgB,EAAE,qBAAqB;YACvC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;YACtD,yBAAyB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC9C,mBAAmB,EAAE,sBAAsB;SAC5C,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA2B,CAAC,IAAI,KAAK,iCAAiC,EAAE,CAAC;YAC5E,MAAM,IAAI,sBAAa,CACrB,2CAA2C,SAAS,kBAAkB,EACtE,KAAc,CACf,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"reconcile-count.js","sourceRoot":"","sources":["../../../src/history/actions/reconcile-count.ts"],"names":[],"mappings":";;;AAEA,uDAAgE;AAChE,uDAA2D;AAC3D,2CAAsE;AACtE,6CAAiD;AAEjD,uDAA2D;AAE3D,KAAK,UAAU,aAAa,CAAC,OAAuB,EAAE,SAAiB;IACrE,MAAM,IAAI,GAAG,IAAA,oBAAY,EAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAA0D,CAAC;IAC/D,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAA,yBAAiB,EAAC,GAAG,EAAE,CACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAChF,CAAC;QACF,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QACzB,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC;IACnC,CAAC,QAAQ,QAAQ,EAAE;IACnB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,gCACV,OAAuB,EACvB,SAAiB;IAEjB,IAAA,8BAAiB,EAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,IAAA,yBAAiB,EAAC,GAAG,EAAE,CAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,EAAE,EAAE,EAAE,EAAE,IAAA,uBAAgB,EAAC,SAAS,CAAC,EAAE,EAAE,EAAE,uBAAgB,EAAE;YAC9D,gBAAgB,EAAE,qBAAqB;YACvC,wBAAwB,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;YACtD,yBAAyB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC9C,mBAAmB,EAAE,sBAAsB;SAC5C,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA2B,CAAC,IAAI,KAAK,iCAAiC,EAAE,CAAC;YAC5E,MAAM,IAAI,sBAAa,CACrB,2CAA2C,SAAS,kBAAkB,EACtE,KAAc,CACf,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/history/internal/append-saga.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"append-saga.d.ts","sourceRoot":"","sources":["../../../src/history/internal/append-saga.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAGhD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAmGD;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,eAAe,EAAE,EAAE,EAC3B,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CAiBf"}
+{"version":3,"file":"append-saga.d.ts","sourceRoot":"","sources":["../../../src/history/internal/append-saga.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAGhD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,eAAe,EAAE,EAAE,EAC3B,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CAyBf"}

package/dist/history/internal/append-saga.js

@@ -1,85 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.appendChunks = appendChunks;
-const descriptor_keys_1 = require("../../shared/codec/descriptor-keys");
-const orphans_1 = require("../../shared/codec/s3/orphans");
-const batch_write_1 = require("../../shared/dynamodb/batch-write");
-const errors_1 = require("../../shared/errors/errors");
 const wrap_error_1 = require("../../shared/errors/wrap-error");
+const compensation_1 = require("./compensation");
 const message_transaction_1 = require("./message-transaction");
-const session_count_1 = require("./session-count");
-/**
- * Best-effort delete the offloaded S3 objects of the `chunks` slice given.
- * {@link compensate} calls it once per commit status, never for the whole
- * batch, so a committed chunk's objects arrive only once its rows are gone.
- */
-async function cleanBatchS3(context, chunks) {
-    if (!context.offloader)
-        return;
-    const descriptors = chunks.flat().map((item) => item.message);
-    await (0, orphans_1.cleanUpS3Orphans)(context.offloader, (0, descriptor_keys_1.collectS3Keys)(descriptors), 'history.addMessages', context.logger);
-}
-/**
- * Delete every committed chunk's items, then revert the counted total by
- * however many rows the delete actually persisted before failing (not
- * necessarily every committed row — see the catch branch below).
- */
-async function rollbackCommitted(context, sessionId, committed) {
-    const keys = committed.flatMap((chunk) => chunk.keys);
-    const total = committed.reduce((sum, chunk) => sum + chunk.count, 0);
-    if (keys.length === 0) {
-        await (0, session_count_1.revertSessionCount)(context, sessionId, total);
-        return;
-    }
-    try {
-        await (0, batch_write_1.batchWriteAll)(context.client, context.tableName, keys.map((Key) => ({ DeleteRequest: { Key } })));
-    }
-    catch (error) {
-        /**
-         * batchWriteAll has exactly one throw site and it is always a
-         * BatchWriteAllIncompleteError (see Task 9) — asserted, not instanceof-
-         * checked, since the false case is unreachable and this project
-         * enforces 100% branch coverage with no exceptions.
-         */
-        const deleted = error.succeededCount;
-        await (0, session_count_1.revertSessionCount)(context, sessionId, deleted);
-        throw error;
-    }
-    await (0, session_count_1.revertSessionCount)(context, sessionId, total);
-}
-/**
- * Undo a failed batch. Always throws. S3 cleanup is split by commit status so
- * no live row is ever left pointing at a deleted object: the never-committed
- * suffix is cleaned immediately, the committed prefix only after its rows are
- * confirmed deleted. If the rollback itself fails, the committed chunks' S3
- * objects are deliberately left in place (their rows may survive) and it
- * raises {@link CompensationFailedError} carrying both the trigger and the
- * rollback error; otherwise it rethrows the trigger.
- */
-async function compensate(context, sessionId, chunks, committed, trigger) {
-    if (committed.length > 0) {
-        context.logger.warn('history.addMessages compensating committed chunks after a chunk failed', {
-            sessionId,
-            committedChunks: committed.length,
-        });
-    }
-    /** The failed/never-attempted suffix never had a DynamoDB row, so it's safe to clean now. */
-    await cleanBatchS3(context, chunks.slice(committed.length));
-    try {
-        await rollbackCommitted(context, sessionId, committed);
-    }
-    catch (rollbackError) {
-        context.logger.error('history.addMessages rollback failed; messageCount may have drifted', {
-            sessionId,
-            committedChunks: committed.length,
-        });
-        /** Skip S3 cleanup here: rollback may have failed, so committed rows might still reference these objects. */
-        throw new errors_1.CompensationFailedError(trigger, (0, wrap_error_1.toError)(rollbackError));
-    }
-    /** Only now that committed rows are confirmed deleted is it safe to delete their S3 objects. */
-    await cleanBatchS3(context, chunks.slice(0, committed.length));
-    throw trigger;
-}
 /**
  * Append message chunks with caller-observed atomicity. Each chunk commits its
  * messages and count in one transaction; if a later chunk fails, every
@@ -104,7 +28,7 @@ async function appendChunks(context, sessionId, chunks, fields) {
             });
         }
         catch (error) {
-            await compensate(context, sessionId, chunks, committed, (0, wrap_error_1.toError)(error));
+            await (0, compensation_1.compensate)(context, sessionId, chunks, committed, (0, wrap_error_1.toError)(error), fields.now, fields.title);
         }
     }
 }

package/dist/history/internal/append-saga.js.map

@@ -1 +1 @@
-{"version":3,"file":"append-saga.js","sourceRoot":"","sources":["../../../src/history/internal/append-saga.ts"],"names":[],"mappings":";;;AAAA,wEAAmE;AACnE,2DAAiE;AACjE,mEAAkE;AAClE,uDAGoC;AACpC,+DAAyD;AAEzD,+DAA0D;AAC1D,mDAAqD;AAiBrD;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAAC,OAAuB,EAAE,MAA2B;IAC9E,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO;IAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,IAAA,0BAAgB,EACpB,OAAO,CAAC,SAAS,EACjB,IAAA,+BAAa,EAAC,WAAW,CAAC,EAC1B,qBAAqB,EACrB,OAAO,CAAC,MAAM,CACf,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,OAAuB,EACvB,SAAiB,EACjB,SAA2B;IAE3B,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAA,kCAAkB,EAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAA,2BAAa,EACjB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAChD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf;;;;;WAKG;QACH,MAAM,OAAO,GAAI,KAAsC,CAAC,cAAc,CAAC;QACvE,MAAM,IAAA,kCAAkB,EAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,IAAA,kCAAkB,EAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,UAAU,CACvB,OAAuB,EACvB,SAAiB,EACjB,MAA2B,EAC3B,SAA2B,EAC3B,OAAc;IAEd,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,wEAAwE,EAAE;YAC5F,SAAS;YACT,eAAe,EAAE,SAAS,CAAC,MAAM;SAClC,CAAC,CAAC;IACL,CAAC;IACD,6FAA6F;IAC7F,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,aAAa,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,EAAE;YACzF,SAAS;YACT,eAAe,EAAE,SAAS,CAAC,MAAM;SAClC,CAAC,CAAC;QACH,6GAA6G;QAC7G,MAAM,IAAI,gCAAuB,CAAC,OAAO,EAAE,IAAA,oBAAO,EAAC,aAAsB,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,gGAAgG;IAChG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,MAAM,OAAO,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,uBACV,OAAuB,EACvB,SAAiB,EACjB,MAA2B,EAC3B,MAAoB;IAEpB,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,IAAA,uCAAiB,EAAC,OAAO,EAAE,KAAK,EAAE;gBACtC,GAAG,MAAM;gBACT,SAAS;gBACT,KAAK,EAAE,KAAK,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzD,KAAK,EAAE,KAAK,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAA,oBAAO,EAAC,KAAc,CAAC,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"append-saga.js","sourceRoot":"","sources":["../../../src/history/internal/append-saga.ts"],"names":[],"mappings":";;;AAAA,+DAAyD;AAEzD,iDAAiE;AACjE,+DAA0D;AAW1D;;;;;;;;GAQG;AACI,KAAK,uBACV,OAAuB,EACvB,SAAiB,EACjB,MAA2B,EAC3B,MAAoB;IAEpB,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,IAAA,uCAAiB,EAAC,OAAO,EAAE,KAAK,EAAE;gBACtC,GAAG,MAAM;gBACT,SAAS;gBACT,KAAK,EAAE,KAAK,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzD,KAAK,EAAE,KAAK,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAA,yBAAU,EACd,OAAO,EACP,SAAS,EACT,MAAM,EACN,SAAS,EACT,IAAA,oBAAO,EAAC,KAAc,CAAC,EACvB,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,KAAK,CACb,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/history/internal/compensation.d.ts

@@ -0,0 +1,21 @@
+import type { ChatMessageItem } from '../types';
+import type { HistoryContext } from './setup';
+/** A chunk that committed, retained so it can be rolled back on a later failure. */
+export interface CommittedChunk {
+    keys: {
+        PK: string;
+        SK: string;
+    }[];
+    count: number;
+}
+/**
+ * Undo a failed batch. Always throws. S3 cleanup is split by commit status so
+ * no live row is ever left pointing at a deleted object: the never-committed
+ * suffix is cleaned immediately, the committed prefix only after its rows are
+ * confirmed deleted. If the rollback itself fails, the committed chunks' S3
+ * objects are deliberately left in place (their rows may survive) and it
+ * raises {@link CompensationFailedError} carrying both the trigger and the
+ * rollback error; otherwise it rethrows the trigger.
+ */
+export declare function compensate(context: HistoryContext, sessionId: string, chunks: ChatMessageItem[][], committed: CommittedChunk[], trigger: Error, now: string, title: string | undefined): Promise<never>;
+//# sourceMappingURL=compensation.d.ts.map

package/dist/history/internal/compensation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compensation.d.ts","sourceRoot":"","sources":["../../../src/history/internal/compensation.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEhD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC;CACf;AA0DD;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,eAAe,EAAE,EAAE,EAC3B,SAAS,EAAE,cAAc,EAAE,EAC3B,OAAO,EAAE,KAAK,EACd,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,OAAO,CAAC,KAAK,CAAC,CAsBhB"}

package/dist/history/internal/compensation.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compensate = compensate;
+const descriptor_keys_1 = require("../../shared/codec/descriptor-keys");
+const orphans_1 = require("../../shared/codec/s3/orphans");
+const batch_write_1 = require("../../shared/dynamodb/batch-write");
+const errors_1 = require("../../shared/errors/errors");
+const wrap_error_1 = require("../../shared/errors/wrap-error");
+const session_count_1 = require("./session-count");
+/**
+ * Best-effort delete the offloaded S3 objects of the `chunks` slice given.
+ * {@link compensate} calls it once per commit status, never for the whole
+ * batch, so a committed chunk's objects arrive only once its rows are gone.
+ */
+async function cleanBatchS3(context, chunks) {
+    if (!context.offloader)
+        return;
+    const descriptors = chunks.flat().map((item) => item.message);
+    await (0, orphans_1.cleanUpS3Orphans)(context.offloader, (0, descriptor_keys_1.collectS3Keys)(descriptors), 'history.addMessages', context.logger);
+}
+/**
+ * Delete every committed chunk's items, then undo their effect on the session
+ * row — deleting it outright when this call created it (see
+ * {@link revertSessionCreation}), so a failed first append leaves no ghost
+ * session holding the rolled-back message's title. A *partial* delete is not a
+ * clean creation to undo, so that branch reverts only the count.
+ */
+async function rollbackCommitted(context, sessionId, committed, now, title) {
+    const keys = committed.flatMap((chunk) => chunk.keys);
+    const total = committed.reduce((sum, chunk) => sum + chunk.count, 0);
+    if (keys.length === 0) {
+        await (0, session_count_1.revertSessionCreation)(context, sessionId, total, now, title);
+        return;
+    }
+    try {
+        await (0, batch_write_1.batchWriteAll)(context.client, context.tableName, keys.map((Key) => ({ DeleteRequest: { Key } })));
+    }
+    catch (error) {
+        /**
+         * batchWriteAll has exactly one throw site and it is always a
+         * BatchWriteAllIncompleteError (see Task 9) — asserted, not instanceof-
+         * checked, since the false case is unreachable and this project
+         * enforces 100% branch coverage with no exceptions.
+         */
+        const deleted = error.succeededCount;
+        await (0, session_count_1.revertSessionCount)(context, sessionId, deleted);
+        throw error;
+    }
+    await (0, session_count_1.revertSessionCreation)(context, sessionId, total, now, title);
+}
+/**
+ * Undo a failed batch. Always throws. S3 cleanup is split by commit status so
+ * no live row is ever left pointing at a deleted object: the never-committed
+ * suffix is cleaned immediately, the committed prefix only after its rows are
+ * confirmed deleted. If the rollback itself fails, the committed chunks' S3
+ * objects are deliberately left in place (their rows may survive) and it
+ * raises {@link CompensationFailedError} carrying both the trigger and the
+ * rollback error; otherwise it rethrows the trigger.
+ */
+async function compensate(context, sessionId, chunks, committed, trigger, now, title) {
+    if (committed.length > 0) {
+        context.logger.warn('history.addMessages compensating committed chunks after a chunk failed', {
+            sessionId,
+            committedChunks: committed.length,
+        });
+    }
+    /** The failed/never-attempted suffix never had a DynamoDB row, so it's safe to clean now. */
+    await cleanBatchS3(context, chunks.slice(committed.length));
+    try {
+        await rollbackCommitted(context, sessionId, committed, now, title);
+    }
+    catch (rollbackError) {
+        context.logger.error('history.addMessages rollback failed; messageCount may have drifted', {
+            sessionId,
+            committedChunks: committed.length,
+        });
+        /** Skip S3 cleanup here: rollback may have failed, so committed rows might still reference these objects. */
+        throw new errors_1.CompensationFailedError(trigger, (0, wrap_error_1.toError)(rollbackError));
+    }
+    /** Only now that committed rows are confirmed deleted is it safe to delete their S3 objects. */
+    await cleanBatchS3(context, chunks.slice(0, committed.length));
+    throw trigger;
+}
+//# sourceMappingURL=compensation.js.map

package/dist/history/internal/compensation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compensation.js","sourceRoot":"","sources":["../../../src/history/internal/compensation.ts"],"names":[],"mappings":";;;AAAA,wEAAmE;AACnE,2DAAiE;AACjE,mEAAkE;AAClE,uDAGoC;AACpC,+DAAyD;AAEzD,mDAA4E;AAS5E;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAAC,OAAuB,EAAE,MAA2B;IAC9E,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO;IAC/B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,IAAA,0BAAgB,EACpB,OAAO,CAAC,SAAS,EACjB,IAAA,+BAAa,EAAC,WAAW,CAAC,EAC1B,qBAAqB,EACrB,OAAO,CAAC,MAAM,CACf,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,iBAAiB,CAC9B,OAAuB,EACvB,SAAiB,EACjB,SAA2B,EAC3B,GAAW,EACX,KAAyB;IAEzB,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAA,qCAAqB,EAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAA,2BAAa,EACjB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAChD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf;;;;;WAKG;QACH,MAAM,OAAO,GAAI,KAAsC,CAAC,cAAc,CAAC;QACvE,MAAM,IAAA,kCAAkB,EAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,IAAA,qCAAqB,EAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,qBACV,OAAuB,EACvB,SAAiB,EACjB,MAA2B,EAC3B,SAA2B,EAC3B,OAAc,EACd,GAAW,EACX,KAAyB;IAEzB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,wEAAwE,EAAE;YAC5F,SAAS;YACT,eAAe,EAAE,SAAS,CAAC,MAAM;SAClC,CAAC,CAAC;IACL,CAAC;IACD,6FAA6F;IAC7F,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,aAAa,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,EAAE;YACzF,SAAS;YACT,eAAe,EAAE,SAAS,CAAC,MAAM;SAClC,CAAC,CAAC;QACH,6GAA6G;QAC7G,MAAM,IAAI,gCAAuB,CAAC,OAAO,EAAE,IAAA,oBAAO,EAAC,aAAsB,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,gGAAgG;IAChG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,MAAM,OAAO,CAAC;AAChB,CAAC"}

package/dist/history/internal/keys.d.ts

@@ -1,9 +1,17 @@
+/** Reserved separator joining sort-key segments; forbidden inside a session id. */
+export declare const SORT_KEY_SEPARATOR = "#";
 /** Fixed sort key for the per-session metadata item. */
-export declare const SESSION_SORT_KEY = "SESSION";
-/** Partition key for a chat session: the session id itself. */
+export declare const SESSION_SORT_KEY = "HISTORY#SESSION";
+/** Partition key for a chat session: the adapter tag plus the session id. */
 export declare function sessionPartition(sessionId: string): string;
 /** Sort key for a single message item, ordered by its monotonic ULID. */
 export declare function messageSortKey(ulid: string): string;
+/**
+ * True when `sortKey` is one this adapter writes. A partition query carries no
+ * sort-key condition, so a partition-wide delete uses this to leave any row it
+ * does not own in place rather than deleting the whole partition blindly.
+ */
+export declare function isHistorySortKey(sortKey: string): boolean;
 /** `begins_with` prefix selecting every message item in a session. */
 export declare function messageSortKeyPrefix(): string;
 //# sourceMappingURL=keys.d.ts.map

package/dist/history/internal/keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../src/history/internal/keys.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAI1C,+DAA+D;AAC/D,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,sEAAsE;AACtE,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C"}
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../src/history/internal/keys.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAatC,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,oBAA6B,CAAC;AAW3D,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,sEAAsE;AACtE,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C"}

package/dist/history/internal/keys.js

@@ -1,20 +1,47 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SESSION_SORT_KEY = void 0;
+exports.SESSION_SORT_KEY = exports.SORT_KEY_SEPARATOR = void 0;
 exports.sessionPartition = sessionPartition;
 exports.messageSortKey = messageSortKey;
+exports.isHistorySortKey = isHistorySortKey;
 exports.messageSortKeyPrefix = messageSortKeyPrefix;
+/** Reserved separator joining sort-key segments; forbidden inside a session id. */
+exports.SORT_KEY_SEPARATOR = '#';
+/**
+ * Item-kind tag distinguishing this adapter's sort keys from another
+ * adapter's on a table shared via `DynamoDBFactory.createAll()` — matches the
+ * pattern the checkpointer module already uses for its own META#/PAYLOAD#/
+ * WRITE# keys. Without it, `SESSION_SORT_KEY` alone was a bare, common-word
+ * literal a store caller could produce by accident (e.g.
+ * `store.put([sessionId], 'SESSION', ...)`, since `sortKey` collapses a
+ * single-element namespace down to just the key).
+ */
+const ADAPTER_PREFIX = `HISTORY${exports.SORT_KEY_SEPARATOR}`;
 /** Fixed sort key for the per-session metadata item. */
-exports.SESSION_SORT_KEY = 'SESSION';
-const MESSAGE_PREFIX = 'MSG#';
-/** Partition key for a chat session: the session id itself. */
+exports.SESSION_SORT_KEY = `${ADAPTER_PREFIX}SESSION`;
+const MESSAGE_PREFIX = `${ADAPTER_PREFIX}MSG#`;
+/**
+ * Adapter tag prefixed to every chat-history partition key — see the
+ * equivalent in checkpointer/internal/keys.ts for why the three adapters'
+ * partitions must not overlap on a shared table.
+ */
+const ADAPTER_PARTITION_PREFIX = `HIST${exports.SORT_KEY_SEPARATOR}`;
+/** Partition key for a chat session: the adapter tag plus the session id. */
 function sessionPartition(sessionId) {
-    return sessionId;
+    return `${ADAPTER_PARTITION_PREFIX}${sessionId}`;
 }
 /** Sort key for a single message item, ordered by its monotonic ULID. */
 function messageSortKey(ulid) {
     return `${MESSAGE_PREFIX}${ulid}`;
 }
+/**
+ * True when `sortKey` is one this adapter writes. A partition query carries no
+ * sort-key condition, so a partition-wide delete uses this to leave any row it
+ * does not own in place rather than deleting the whole partition blindly.
+ */
+function isHistorySortKey(sortKey) {
+    return sortKey.startsWith(ADAPTER_PREFIX);
+}
 /** `begins_with` prefix selecting every message item in a session. */
 function messageSortKeyPrefix() {
     return MESSAGE_PREFIX;

package/dist/history/internal/keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../src/history/internal/keys.ts"],"names":[],"mappings":";;;;;;AAAA,wDAAwD;AAC3C,QAAA,gBAAgB,GAAG,SAAS,CAAC;AAE1C,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,+DAA+D;AAC/D,0BAAiC,SAAiB;IAChD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,yEAAyE;AACzE,wBAA+B,IAAY;IACzC,OAAO,GAAG,cAAc,GAAG,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,sEAAsE;AACtE;IACE,OAAO,cAAc,CAAC;AACxB,CAAC"}
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../src/history/internal/keys.ts"],"names":[],"mappings":";;;;;;;AAAA,mFAAmF;AACtE,QAAA,kBAAkB,GAAG,GAAG,CAAC;AAEtC;;;;;;;;GAQG;AACH,MAAM,cAAc,GAAG,UAAU,QAAA,kBAAkB,EAAE,CAAC;AAEtD,wDAAwD;AAC3C,QAAA,gBAAgB,GAAG,GAAG,cAAc,SAAS,CAAC;AAE3D,MAAM,cAAc,GAAG,GAAG,cAAc,MAAM,CAAC;AAE/C;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,OAAO,QAAA,kBAAkB,EAAE,CAAC;AAE7D,6EAA6E;AAC7E,0BAAiC,SAAiB;IAChD,OAAO,GAAG,wBAAwB,GAAG,SAAS,EAAE,CAAC;AACnD,CAAC;AAED,yEAAyE;AACzE,wBAA+B,IAAY;IACzC,OAAO,GAAG,cAAc,GAAG,IAAI,EAAE,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,0BAAiC,OAAe;IAC9C,OAAO,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AAC5C,CAAC;AAED,sEAAsE;AACtE;IACE,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/history/internal/message-chunker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message-chunker.d.ts","sourceRoot":"","sources":["../../../src/history/internal/message-chunker.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAmBhD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,CAQ/D;AAaD;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,eAAe,EAAE,EACxB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,eAAe,EAAE,EAAE,CAgBrB"}
+{"version":3,"file":"message-chunker.d.ts","sourceRoot":"","sources":["../../../src/history/internal/message-chunker.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AA4BhD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,CAQ/D;AAaD;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,eAAe,EAAE,EACxB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,eAAe,EAAE,EAAE,CAgBrB"}