@farukada/aws-langgraph-dynamodb-ts 1.0.0-rc.1 → 1.0.0

package/dist/shared/codec/compression.js

@@ -1,48 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.compress = compress;
-exports.decompress = decompress;
-const node_util_1 = require("node:util");
-const node_zlib_1 = require("node:zlib");
-const constants_1 = require("../constants");
-const base_error_1 = require("../errors/base-error");
-const error_code_1 = require("../errors/error-code");
-const gzipAsync = (0, node_util_1.promisify)(node_zlib_1.gzip);
-const gunzipAsync = (0, node_util_1.promisify)(node_zlib_1.gunzip);
-/** Minimum fraction of the original size the gzip output must beat to be kept. */
-const COMPRESSION_GAIN_RATIO = 0.9;
-/**
- * Gzip `data` when it is at least `minSizeBytes` and compression actually saves
- * space. Returns the bytes to store and a `compressed` flag the caller records
- * in the payload descriptor; compression is never inferred from the bytes.
- */
-async function compress(data, config) {
-    const minSize = config.minSizeBytes ?? constants_1.DEFAULT_COMPRESSION_MIN_BYTES;
-    if (!config.enabled || data.length < minSize)
-        return { bytes: data, compressed: false };
-    const level = config.level ?? constants_1.DEFAULT_COMPRESSION_LEVEL;
-    const gzipped = new Uint8Array(await gzipAsync(data, { level }));
-    if (gzipped.length >= data.length * COMPRESSION_GAIN_RATIO) {
-        return { bytes: data, compressed: false };
-    }
-    return { bytes: gzipped, compressed: true };
-}
-/**
- * Gunzip `data` when `compressed` is true; otherwise return it unchanged. Throws
- * a {@link DynamoDBLangGraphError} with code `COMPRESSION_LIMIT` if the output
- * would exceed `maxBytes` (bomb guard).
- */
-async function decompress(data, compressed, maxBytes = constants_1.DEFAULT_MAX_DECOMPRESSED_BYTES) {
-    if (!compressed)
-        return data;
-    try {
-        return new Uint8Array(await gunzipAsync(data, { maxOutputLength: maxBytes }));
-    }
-    catch (error) {
-        const err = error;
-        if (err.code === 'ERR_BUFFER_TOO_LARGE') {
-            throw new base_error_1.DynamoDBLangGraphError(`Refusing to decompress: output would exceed ${maxBytes} bytes`, error_code_1.ErrorCode.COMPRESSION_LIMIT, {}, error);
-        }
-        throw error;
-    }
-}

package/dist/shared/codec/descriptor-keys.d.ts

@@ -1,12 +0,0 @@
-import { PayloadLocation } from './codec';
-/**
- * The part of a descriptor cleanup needs: where the payload lives and, for S3,
- * its key. A full `PayloadDescriptor` satisfies it, and so does the projection
- * a pre-write read returns without the inline bytes.
- */
-export interface DescriptorRef {
-    location: PayloadLocation;
-    s3Key?: string;
-}
-/** Collect the S3 keys of any offloaded descriptors, for orphan cleanup. */
-export declare function collectS3Keys(descriptors: readonly DescriptorRef[]): string[];

package/dist/shared/codec/descriptor-keys.js

@@ -1,14 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.collectS3Keys = collectS3Keys;
-const codec_1 = require("./codec");
-/** Collect the S3 keys of any offloaded descriptors, for orphan cleanup. */
-function collectS3Keys(descriptors) {
-    const keys = [];
-    for (const descriptor of descriptors) {
-        if (descriptor.location === codec_1.PayloadLocation.S3 && descriptor.s3Key !== undefined) {
-            keys.push(descriptor.s3Key);
-        }
-    }
-    return keys;
-}

package/dist/shared/codec/encode.d.ts

@@ -1,13 +0,0 @@
-import { type CodecDeps, type PayloadDescriptor } from './codec';
-/** Options controlling where an offloaded payload's S3 key is built from. */
-export interface EncodeOptions {
-    keyParts: readonly string[];
-}
-/**
- * Encode `value`: serialize via serde, compress (if configured), then offload
- * to S3 when the compressed bytes exceed the offloader's threshold. Returns a
- * descriptor recording how to read it back. Without an offloader, bytes that
- * cannot fit a DynamoDB item are rejected here (see
- * {@link assertInlinePayloadFits}).
- */
-export declare function encodePayload<T>(value: T, deps: CodecDeps, options: EncodeOptions): Promise<PayloadDescriptor>;

package/dist/shared/codec/encode.js

@@ -1,43 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.encodePayload = encodePayload;
-const constants_1 = require("../constants");
-const errors_1 = require("../errors/errors");
-const codec_1 = require("./codec");
-const compression_1 = require("./compression");
-/**
- * Reject bytes that cannot be stored inline. Without an offloader the only
- * alternative is a raw `ValidationException` from DynamoDB after the network
- * round trip, which names neither the cause nor the remedy.
- */
-function assertInlinePayloadFits(bytes, deps) {
-    if (bytes.length <= constants_1.MAX_INLINE_PAYLOAD_BYTES)
-        return;
-    const hint = deps.compression?.enabled
-        ? ''
-        : ', or enable compression if the data compresses well';
-    throw new errors_1.ValidationError(`payload of ${bytes.length} bytes exceeds the ${constants_1.MAX_INLINE_PAYLOAD_BYTES}-byte inline limit ` +
-        `(DynamoDB items are capped at 400 KB); configure s3 offloading${hint}`, 'payload');
-}
-/**
- * Encode `value`: serialize via serde, compress (if configured), then offload
- * to S3 when the compressed bytes exceed the offloader's threshold. Returns a
- * descriptor recording how to read it back. Without an offloader, bytes that
- * cannot fit a DynamoDB item are rejected here (see
- * {@link assertInlinePayloadFits}).
- */
-async function encodePayload(value, deps, options) {
-    const [serdeType, raw] = await deps.serde.dumpsTyped(value);
-    const { bytes, compressed } = deps.compression
-        ? await (0, compression_1.compress)(raw, deps.compression)
-        : { bytes: raw, compressed: false };
-    const base = { schemaVersion: codec_1.DESCRIPTOR_SCHEMA_VERSION, serdeType, compressed };
-    if (deps.offloader && deps.offloader.shouldOffload(bytes)) {
-        const s3Key = deps.offloader.buildKey(options.keyParts);
-        await deps.offloader.upload(s3Key, bytes);
-        return { ...base, location: codec_1.PayloadLocation.S3, s3Key };
-    }
-    if (!deps.offloader)
-        assertInlinePayloadFits(bytes, deps);
-    return { ...base, location: codec_1.PayloadLocation.INLINE, bytes };
-}

package/dist/shared/codec/json-serde.d.ts

@@ -1,7 +0,0 @@
-import type { SerializerProtocol } from '@langchain/langgraph-checkpoint';
-/**
- * A minimal JSON serializer implementing LangGraph's {@link SerializerProtocol},
- * used by adapters (the store, history) that persist plain JSON values through
- * the shared payload codec.
- */
-export declare const JSON_SERDE: SerializerProtocol;

package/dist/shared/codec/json-serde.js

@@ -1,17 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.JSON_SERDE = void 0;
-/**
- * A minimal JSON serializer implementing LangGraph's {@link SerializerProtocol},
- * used by adapters (the store, history) that persist plain JSON values through
- * the shared payload codec.
- */
-exports.JSON_SERDE = {
-    async dumpsTyped(value) {
-        return ['json', new TextEncoder().encode(JSON.stringify(value))];
-    },
-    async loadsTyped(_type, data) {
-        const text = typeof data === 'string' ? data : new TextDecoder().decode(data);
-        return JSON.parse(text);
-    },
-};

package/dist/shared/codec/payload-loss.d.ts

@@ -1,12 +0,0 @@
-/**
- * True when an offloaded object no longer exists — a lifecycle sweep removed
- * it, or a competing overwrite deleted it between a row read and the download.
- */
-export declare function isMissingObjectError(error: Error): boolean;
-/**
- * True when a payload can never be read again — its object is gone, it trips
- * the decompression guard, or its key lies outside the row's own path — as
- * opposed to a failure that may succeed on retry or after a configuration fix
- * (throttling, network, permissions).
- */
-export declare function isPermanentPayloadLoss(error: Error): boolean;

package/dist/shared/codec/payload-loss.js

@@ -1,38 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.isMissingObjectError = isMissingObjectError;
-exports.isPermanentPayloadLoss = isPermanentPayloadLoss;
-const error_code_1 = require("../errors/error-code");
-/**
- * True when an offloaded object no longer exists — a lifecycle sweep removed
- * it, or a competing overwrite deleted it between a row read and the download.
- */
-function isMissingObjectError(error) {
-    const coded = error;
-    return coded.code === error_code_1.ErrorCode.S3_OFFLOAD_FAILED && coded.cause?.name === 'NoSuchKey';
-}
-/** Validation fields that condemn the row itself rather than the caller's input. */
-const ROW_REJECTION_FIELDS = ['s3Key', 'descriptor'];
-/**
- * True when a row's descriptor can never be read by this adapter: its key lies
- * outside the S3 path its own identifiers allow (see `assertKeyInScope`), or
- * its shape is one this version does not understand.
- */
-function isRowRejection(error) {
-    const coded = error;
-    return (coded.code === error_code_1.ErrorCode.VALIDATION &&
-        coded.context?.field !== undefined &&
-        ROW_REJECTION_FIELDS.includes(coded.context.field));
-}
-/**
- * True when a payload can never be read again — its object is gone, it trips
- * the decompression guard, or its key lies outside the row's own path — as
- * opposed to a failure that may succeed on retry or after a configuration fix
- * (throttling, network, permissions).
- */
-function isPermanentPayloadLoss(error) {
-    const coded = error;
-    return (coded.code === error_code_1.ErrorCode.COMPRESSION_LIMIT ||
-        isMissingObjectError(error) ||
-        isRowRejection(error));
-}

package/dist/shared/codec/s3/adapter-config.d.ts

@@ -1,13 +0,0 @@
-import type { DynamoDBClientConfig } from '@aws-sdk/client-dynamodb';
-import { type S3OffloadConfig } from './config';
-/** The adapters that share one bucket, each under its own default key prefix. */
-export type AdapterName = 'checkpointer' | 'store' | 'history';
-/**
- * Resolve an adapter's `s3` option into the offloader's configuration: the
- * adapter-scoped default key prefix when none is given, and the DynamoDB
- * client's region when the S3 client config names none. The S3 SDK does not
- * follow region redirects by default, so a bucket reachable only through the
- * region the DynamoDB side was configured with used to fail with an opaque
- * `PermanentRedirect` on the first offload.
- */
-export declare function offloaderConfigFor(s3: S3OffloadConfig, adapter: AdapterName, clientConfig?: DynamoDBClientConfig): S3OffloadConfig;

package/dist/shared/codec/s3/adapter-config.js

@@ -1,22 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.offloaderConfigFor = offloaderConfigFor;
-const constants_1 = require("../../constants");
-const client_types_1 = require("./client-types");
-const config_1 = require("./config");
-/**
- * Resolve an adapter's `s3` option into the offloader's configuration: the
- * adapter-scoped default key prefix when none is given, and the DynamoDB
- * client's region when the S3 client config names none. The S3 SDK does not
- * follow region redirects by default, so a bucket reachable only through the
- * region the DynamoDB side was configured with used to fail with an opaque
- * `PermanentRedirect` on the first offload.
- */
-function offloaderConfigFor(s3, adapter, clientConfig) {
-    const region = (0, client_types_1.s3ClientOptions)(s3.clientConfig).region ?? clientConfig?.region;
-    return {
-        ...s3,
-        keyPrefix: s3.keyPrefix ?? (0, config_1.defaultAdapterKeyPrefix)(constants_1.DEFAULT_S3_KEY_PREFIX, adapter),
-        ...(region === undefined ? {} : { clientConfig: { ...s3.clientConfig, region } }),
-    };
-}

package/dist/shared/codec/s3/bounded-body.d.ts

@@ -1,14 +0,0 @@
-import { DynamoDBLangGraphError } from '../../errors/base-error';
-/** The part of an S3 `GetObject` body this module relies on. */
-export interface S3Body {
-    transformToByteArray(): Promise<Uint8Array>;
-}
-/** The typed error for an object over the download cap. */
-export declare function oversizedObjectError(key: string, bytes: number, maxBytes: number): DynamoDBLangGraphError;
-/**
- * Buffer an S3 body without ever holding more than `maxBytes` of it. A
- * streaming body is consumed chunk by chunk and abandoned the moment the
- * running total passes the cap; a body that only offers
- * `transformToByteArray()` is read whole and then checked.
- */
-export declare function readBodyBounded(body: S3Body, key: string, maxBytes: number): Promise<Uint8Array>;

package/dist/shared/codec/s3/bounded-body.js

@@ -1,47 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.oversizedObjectError = oversizedObjectError;
-exports.readBodyBounded = readBodyBounded;
-const base_error_1 = require("../../errors/base-error");
-const error_code_1 = require("../../errors/error-code");
-/** The typed error for an object over the download cap. */
-function oversizedObjectError(key, bytes, maxBytes) {
-    return new base_error_1.DynamoDBLangGraphError(`S3 object ${key} exceeds the ${maxBytes}-byte maxDownloadBytes cap ` +
-        `(${bytes} bytes declared or read)`, error_code_1.ErrorCode.S3_OFFLOAD_FAILED, { operation: 'download', key });
-}
-function concat(chunks, total) {
-    const out = new Uint8Array(total);
-    let offset = 0;
-    for (const chunk of chunks) {
-        out.set(chunk, offset);
-        offset += chunk.length;
-    }
-    return out;
-}
-/**
- * Buffer an S3 body without ever holding more than `maxBytes` of it. A
- * streaming body is consumed chunk by chunk and abandoned the moment the
- * running total passes the cap; a body that only offers
- * `transformToByteArray()` is read whole and then checked.
- */
-async function readBodyBounded(body, key, maxBytes) {
-    const streaming = body;
-    const iterate = streaming[Symbol.asyncIterator];
-    if (typeof iterate !== 'function') {
-        const whole = new Uint8Array(await body.transformToByteArray());
-        if (whole.length > maxBytes)
-            throw oversizedObjectError(key, whole.length, maxBytes);
-        return whole;
-    }
-    const chunks = [];
-    let total = 0;
-    for await (const chunk of { [Symbol.asyncIterator]: iterate.bind(streaming) }) {
-        total += chunk.length;
-        if (total > maxBytes) {
-            streaming.destroy?.();
-            throw oversizedObjectError(key, total, maxBytes);
-        }
-        chunks.push(chunk);
-    }
-    return concat(chunks, total);
-}

package/dist/shared/codec/s3/client.d.ts

@@ -1,18 +0,0 @@
-import type { S3Client } from '@aws-sdk/client-s3';
-import type { S3ClientConfigLike } from './client-types';
-type S3Sdk = typeof import('@aws-sdk/client-s3');
-/**
- * Lazily import the optional `@aws-sdk/client-s3` peer, caching the module. A
- * failed import is not cached, so an install or a fixed bundle can succeed on
- * a later call.
- */
-export declare function loadS3Sdk(): Promise<S3Sdk>;
-/**
- * Construct an `S3Client` from `config` using the lazily-loaded SDK. Defaults
- * `maxAttempts: 1` so the SDK's own internal retries are disabled and this
- * library's retry/backoff/classification system is the sole retry layer,
- * matching {@link resolveDynamoDBClient}'s equivalent default; an explicit
- * `maxAttempts` in `config` still wins.
- */
-export declare function createDefaultS3Client(config: S3ClientConfigLike): Promise<S3Client>;
-export {};

package/dist/shared/codec/s3/client.js

@@ -1,46 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.loadS3Sdk = loadS3Sdk;
-exports.createDefaultS3Client = createDefaultS3Client;
-const errors_1 = require("../../errors/errors");
-/** Codes Node and bundlers use for an import that cannot be resolved. */
-const MISSING_MODULE_CODES = ['ERR_MODULE_NOT_FOUND', 'MODULE_NOT_FOUND'];
-let sdkPromise;
-/**
- * Convert a failed import of the optional peer into a typed error that names
- * the remedy. Any other failure (a broken build, a syntax error inside the
- * package) passes through unchanged.
- */
-function wrapMissingPeer(error) {
-    const code = error.code;
-    if (code !== undefined && MISSING_MODULE_CODES.includes(code)) {
-        throw new errors_1.ValidationError('S3 offload requires the optional peer @aws-sdk/client-s3 (npm install @aws-sdk/client-s3); ' +
-            'bundlers must keep it installed or external', 's3', error);
-    }
-    throw error;
-}
-/**
- * Lazily import the optional `@aws-sdk/client-s3` peer, caching the module. A
- * failed import is not cached, so an install or a fixed bundle can succeed on
- * a later call.
- */
-async function loadS3Sdk() {
-    if (!sdkPromise) {
-        sdkPromise = import('@aws-sdk/client-s3').catch((error) => {
-            sdkPromise = undefined;
-            return wrapMissingPeer(error);
-        });
-    }
-    return sdkPromise;
-}
-/**
- * Construct an `S3Client` from `config` using the lazily-loaded SDK. Defaults
- * `maxAttempts: 1` so the SDK's own internal retries are disabled and this
- * library's retry/backoff/classification system is the sole retry layer,
- * matching {@link resolveDynamoDBClient}'s equivalent default; an explicit
- * `maxAttempts` in `config` still wins.
- */
-async function createDefaultS3Client(config) {
-    const { S3Client: S3ClientCtor } = await loadS3Sdk();
-    return new S3ClientCtor({ maxAttempts: 1, ...config });
-}

package/dist/shared/codec/s3/config.d.ts

@@ -1,51 +0,0 @@
-import type { S3ClientConfigLike } from './client-types';
-/** Configuration for offloading large payloads to S3. */
-export interface S3OffloadConfig {
-    bucketName: string;
-    keyPrefix?: string;
-    /**
-     * Serialized payloads at or above this size are offloaded (default 350 KB).
-     * Only the payload counts: the store's inline embedding (about 10 bytes per
-     * dimension, so ~10 KB at 1024 dims and ~45 KB at 4096) lives on the same
-     * item and is not part of it, so keep `thresholdBytes` plus the embedding
-     * under DynamoDB's 400 KB item limit or the put fails with a raw
-     * `ValidationException`.
-     */
-    thresholdBytes?: number;
-    serverSideEncryption?: string;
-    sseKmsKeyId?: string;
-    /** Largest object this adapter will buffer from S3 (default 50 MiB). */
-    maxDownloadBytes?: number;
-    /**
-     * S3 client configuration (an `S3ClientConfig`). `region` defaults to the
-     * adapter's DynamoDB region.
-     */
-    clientConfig?: S3ClientConfigLike;
-}
-/**
- * Build a fully-qualified S3 key: `${prefix}${parts, each base64url-encoded,
- * joined with '/'}.bin`. Encoding (not rejecting) is what makes two distinct
- * `parts` arrays never collide, since a namespace element or key is allowed
- * to contain '/' (only the DynamoDB '#' separator is forbidden at the
- * validation layer) and base64url's output alphabet never contains '/'.
- *
- * The produced key is checked against S3's 1024-byte object-key cap: the
- * encoding grows every part by a third, so identifiers that each pass their
- * own length rule can still compose a key S3 would reject with a raw error.
- */
-export declare function buildS3Key(prefix: string, parts: readonly string[]): string;
-/**
- * The key prefix doubles as the S3 lifecycle rule's `Filter.Prefix`. An empty
- * or root prefix would make that rule expire the whole bucket, and a prefix
- * without a trailing `/` (`app/langgraph`) would also match every sibling
- * object that merely starts with the same characters (`app/langgraph-other/`).
- */
-export declare function assertScopedKeyPrefix(keyPrefix: string): void;
-/**
- * Build a deterministic, TTL-independent lifecycle rule id from the prefix.
- * Trailing slashes are trimmed with a loop rather than `/\/+$/`, whose
- * backtracking is quadratic in the number of slashes.
- */
-export declare function buildLifecycleRuleId(prefix: string): string;
-/** An adapter's default S3 key prefix: the shared base plus its own segment. */
-export declare function defaultAdapterKeyPrefix(base: string, adapter: string): string;

package/dist/shared/codec/s3/config.js

@@ -1,58 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildS3Key = buildS3Key;
-exports.assertScopedKeyPrefix = assertScopedKeyPrefix;
-exports.buildLifecycleRuleId = buildLifecycleRuleId;
-exports.defaultAdapterKeyPrefix = defaultAdapterKeyPrefix;
-const constants_1 = require("../../constants");
-const errors_1 = require("../../errors/errors");
-const key_scope_1 = require("./key-scope");
-/**
- * Build a fully-qualified S3 key: `${prefix}${parts, each base64url-encoded,
- * joined with '/'}.bin`. Encoding (not rejecting) is what makes two distinct
- * `parts` arrays never collide, since a namespace element or key is allowed
- * to contain '/' (only the DynamoDB '#' separator is forbidden at the
- * validation layer) and base64url's output alphabet never contains '/'.
- *
- * The produced key is checked against S3's 1024-byte object-key cap: the
- * encoding grows every part by a third, so identifiers that each pass their
- * own length rule can still compose a key S3 would reject with a raw error.
- */
-function buildS3Key(prefix, parts) {
-    const encoded = parts.map(key_scope_1.encodeKeyPart);
-    const key = `${prefix}${encoded.join('/')}.bin`;
-    const bytes = Buffer.byteLength(key, 'utf8');
-    if (bytes > constants_1.MAX_S3_KEY_BYTES) {
-        throw new errors_1.ValidationError(`the offloaded S3 object key would be ${bytes} bytes; S3 caps keys at ` +
-            `${constants_1.MAX_S3_KEY_BYTES} — shorten the identifiers or the keyPrefix`, 's3Key');
-    }
-    return key;
-}
-/**
- * The key prefix doubles as the S3 lifecycle rule's `Filter.Prefix`. An empty
- * or root prefix would make that rule expire the whole bucket, and a prefix
- * without a trailing `/` (`app/langgraph`) would also match every sibling
- * object that merely starts with the same characters (`app/langgraph-other/`).
- */
-function assertScopedKeyPrefix(keyPrefix) {
-    if (keyPrefix === '' || keyPrefix === '/' || !keyPrefix.endsWith('/')) {
-        throw new errors_1.ValidationError('s3.keyPrefix must be a non-empty path that ends with "/" (for example "langgraph/"): ' +
-            'it scopes both the offloaded objects and the S3 lifecycle rule', 's3.keyPrefix');
-    }
-}
-/**
- * Build a deterministic, TTL-independent lifecycle rule id from the prefix.
- * Trailing slashes are trimmed with a loop rather than `/\/+$/`, whose
- * backtracking is quadratic in the number of slashes.
- */
-function buildLifecycleRuleId(prefix) {
-    let trimmed = prefix;
-    while (trimmed.endsWith('/'))
-        trimmed = trimmed.slice(0, -1);
-    const slug = trimmed.replace(/[^a-zA-Z0-9-]/g, '-') || 'default';
-    return `langgraph-ttl-${slug}`;
-}
-/** An adapter's default S3 key prefix: the shared base plus its own segment. */
-function defaultAdapterKeyPrefix(base, adapter) {
-    return `${base}${adapter}/`;
-}

package/dist/shared/codec/s3/delete.d.ts

@@ -1,7 +0,0 @@
-import type { S3Client } from '@aws-sdk/client-s3';
-/**
- * Delete `keys` from `bucket` in chunks of 1000 (the DeleteObjects limit).
- * Returns the keys S3 reported as failed — never throws on per-key errors so
- * callers (orphan cleanup) can decide how loudly to react.
- */
-export declare function deleteObjects(client: S3Client, bucket: string, keys: string[]): Promise<string[]>;

package/dist/shared/codec/s3/delete.js

@@ -1,28 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.deleteObjects = deleteObjects;
-const constants_1 = require("../../constants");
-const client_1 = require("./client");
-/**
- * Delete `keys` from `bucket` in chunks of 1000 (the DeleteObjects limit).
- * Returns the keys S3 reported as failed — never throws on per-key errors so
- * callers (orphan cleanup) can decide how loudly to react.
- */
-async function deleteObjects(client, bucket, keys) {
-    if (keys.length === 0)
-        return [];
-    const { DeleteObjectsCommand } = await (0, client_1.loadS3Sdk)();
-    const failed = [];
-    for (let offset = 0; offset < keys.length; offset += constants_1.S3_DELETE_BATCH_MAX) {
-        const chunk = keys.slice(offset, offset + constants_1.S3_DELETE_BATCH_MAX);
-        const response = await client.send(new DeleteObjectsCommand({
-            Bucket: bucket,
-            Delete: { Objects: chunk.map((key) => ({ Key: key })), Quiet: true },
-        }));
-        for (const error of response.Errors ?? []) {
-            if (error.Key)
-                failed.push(error.Key);
-        }
-    }
-    return failed;
-}

package/dist/shared/codec/s3/key-scope.d.ts

@@ -1,23 +0,0 @@
-/** base64url-encode one key part; the output alphabet never contains `/` or `.`. */
-export declare function encodeKeyPart(part: string): string;
-/**
- * The path every key `buildS3Key(prefix, [...parts, ...more])` shares: the
- * prefix plus the encoded `parts` joined by `/`, with neither `.bin` nor a
- * trailing `/`.
- */
-export declare function s3KeyScope(prefix: string, parts: readonly string[]): string;
-/**
- * True when `key` was produced by `buildS3Key` from exactly `parts`
- * (`<scope>.bin`) or from `parts` plus further parts (`<scope>/…`). An empty
- * `parts` degrades to a prefix-only check. Because parts are base64url-encoded
- * and joined by `/`, an identifier sharing a leading substring with another
- * (`t` and `t1`) never matches its scope.
- */
-export declare function isKeyInScope(key: string, prefix: string, parts: readonly string[]): boolean;
-/**
- * Refuse a row-sourced `s3Key` that lies outside the path the row's own
- * identifiers produce. A row is trusted for its shape, not for the object it
- * points at: a writer able to place one row in a partition must not be able
- * to make this library download or delete another tenant's object.
- */
-export declare function assertKeyInScope(key: string, prefix: string, parts: readonly string[]): void;

package/dist/shared/codec/s3/key-scope.js

@@ -1,44 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.encodeKeyPart = encodeKeyPart;
-exports.s3KeyScope = s3KeyScope;
-exports.isKeyInScope = isKeyInScope;
-exports.assertKeyInScope = assertKeyInScope;
-const errors_1 = require("../../errors/errors");
-/** base64url-encode one key part; the output alphabet never contains `/` or `.`. */
-function encodeKeyPart(part) {
-    return Buffer.from(part, 'utf8').toString('base64url');
-}
-/**
- * The path every key `buildS3Key(prefix, [...parts, ...more])` shares: the
- * prefix plus the encoded `parts` joined by `/`, with neither `.bin` nor a
- * trailing `/`.
- */
-function s3KeyScope(prefix, parts) {
-    return `${prefix}${parts.map(encodeKeyPart).join('/')}`;
-}
-/**
- * True when `key` was produced by `buildS3Key` from exactly `parts`
- * (`<scope>.bin`) or from `parts` plus further parts (`<scope>/…`). An empty
- * `parts` degrades to a prefix-only check. Because parts are base64url-encoded
- * and joined by `/`, an identifier sharing a leading substring with another
- * (`t` and `t1`) never matches its scope.
- */
-function isKeyInScope(key, prefix, parts) {
-    const scope = s3KeyScope(prefix, parts);
-    if (parts.length === 0)
-        return key.startsWith(scope);
-    return key === `${scope}.bin` || key.startsWith(`${scope}/`);
-}
-/**
- * Refuse a row-sourced `s3Key` that lies outside the path the row's own
- * identifiers produce. A row is trusted for its shape, not for the object it
- * points at: a writer able to place one row in a partition must not be able
- * to make this library download or delete another tenant's object.
- */
-function assertKeyInScope(key, prefix, parts) {
-    if (isKeyInScope(key, prefix, parts))
-        return;
-    throw new errors_1.ValidationError(`s3Key "${key}" lies outside the S3 path this row may reference ` +
-        `("${s3KeyScope(prefix, parts)}"); refusing to touch an object the row does not own`, 's3Key');
-}

package/dist/shared/codec/s3/lifecycle.d.ts

@@ -1,14 +0,0 @@
-import type { S3Client } from '@aws-sdk/client-s3';
-/**
- * Idempotently ensure a `days`-day expiration lifecycle rule exists for
- * `prefix`. Reads existing rules, preserves user-defined ones and the
- * bucket-level `TransitionDefaultMinimumObjectSize` (a Put replaces the whole
- * configuration, so dropping it would reset the bucket to the default), and
- * only adds/updates the library's prefix-scoped rule.
- *
- * Noncurrent versions expire after the same number of days, so a versioned
- * bucket does not retain every superseded payload forever; the field is inert
- * on an unversioned bucket. The prefix is re-checked here because this rule is
- * the one place an unscoped prefix would destroy data outside this library's.
- */
-export declare function ensureLifecycleRule(client: S3Client, bucket: string, prefix: string, days: number): Promise<void>;