lambder 5.1.2 → 6.0.1

package/dist/stores/LambderDdbRateLimiter.js

@@ -1,4 +1,4 @@
-import { DynamoDBClient, UpdateItemCommand, } from "@aws-sdk/client-dynamodb";
+import { loadDynamoClientSdk } from "./LambderDdbSdk.js";
 /**
  * The fixed windows a policy may cap, smallest first (the evaluation order),
  * with their length. The policy type derives from this table, so the two can
@@ -32,7 +32,10 @@ export const RATE_LIMIT_WINDOWS = [
 export class LambderDdbRateLimiter {
     tableName;
     keyPrefix;
-    client;
+    /** The client given at creation, or one created from `region` on first use; the SDK arrives with it. */
+    providedClient;
+    region;
+    readyPromise;
     ttlWindowMultiplier;
     failOpen;
     constructor(options) {
@@ -45,7 +48,15 @@ export class LambderDdbRateLimiter {
             throw new Error("ttlWindowMultiplier must be a number greater than or equal to 1");
         }
         this.failOpen = options.failOpen ?? false;
-        this.client = options.client ?? new DynamoDBClient(options.region ? { region: options.region } : {});
+        this.providedClient = options.client;
+        this.region = options.region;
+    }
+    /** The SDK and the client, loaded and created the first time the table is touched (see LambderDdbSdk). */
+    ready() {
+        this.readyPromise ??= loadDynamoClientSdk("LambderDdbRateLimiter")
+            .then((sdk) => ({ sdk, client: this.providedClient ?? new sdk.DynamoDBClient(this.region ? { region: this.region } : {}) }))
+            .catch((error) => { this.readyPromise = undefined; throw error; });
+        return this.readyPromise;
     }
     /**
      * Increment every configured window for `trackerKey` (IP, session, user id, ...)
@@ -84,7 +95,8 @@ export class LambderDdbRateLimiter {
             },
         };
         try {
-            await this.client.send(new UpdateItemCommand(input));
+            const { client, sdk } = await this.ready();
+            await client.send(new sdk.UpdateItemCommand(input));
             return false;
         }
         catch (error) {

package/dist/stores/LambderDdbSdk.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The DynamoDB SDK, loaded on first use.
+ *
+ * `@aws-sdk/client-dynamodb` and `@aws-sdk/lib-dynamodb` are optional peer
+ * dependencies, and an app that keeps no sessions and uses none of the
+ * DynamoDB stores should neither install them nor pay for loading them: a
+ * module-level import costs every cold start something and, bundled, makes
+ * every Lambder app reference both packages. So the session manager and the
+ * three stores import their types only and take the classes from here the
+ * first time they touch the table, the way LambderS3FileSource and
+ * LambderInvokeCaller load theirs. One loader per package, memoized for the
+ * container's life; a missing package fails that first call with the
+ * install hint rather than failing the import of lambder itself.
+ */
+export type LambderDynamoClientSdk = typeof import("@aws-sdk/client-dynamodb");
+export type LambderDynamoDocumentSdk = typeof import("@aws-sdk/lib-dynamodb");
+/** `@aws-sdk/client-dynamodb`, for the item-level API the stores speak and the client the session manager wraps. */
+export declare const loadDynamoClientSdk: (user: string) => Promise<LambderDynamoClientSdk>;
+/** `@aws-sdk/lib-dynamodb`, the document client the session manager reads and writes through. */
+export declare const loadDynamoDocumentSdk: (user: string) => Promise<LambderDynamoDocumentSdk>;

package/dist/stores/LambderDdbSdk.js

@@ -0,0 +1,31 @@
+/**
+ * The DynamoDB SDK, loaded on first use.
+ *
+ * `@aws-sdk/client-dynamodb` and `@aws-sdk/lib-dynamodb` are optional peer
+ * dependencies, and an app that keeps no sessions and uses none of the
+ * DynamoDB stores should neither install them nor pay for loading them: a
+ * module-level import costs every cold start something and, bundled, makes
+ * every Lambder app reference both packages. So the session manager and the
+ * three stores import their types only and take the classes from here the
+ * first time they touch the table, the way LambderS3FileSource and
+ * LambderInvokeCaller load theirs. One loader per package, memoized for the
+ * container's life; a missing package fails that first call with the
+ * install hint rather than failing the import of lambder itself.
+ */
+let clientSdk;
+let documentSdk;
+const withInstallHint = (loading, packageName, user, reset) => loading.catch((cause) => {
+    // Not memoized: the package may be installed later in the same process (tests), and the next caller names itself.
+    reset();
+    throw new Error(`${user} requires ${packageName}: npm install ${packageName}`, { cause });
+});
+/** `@aws-sdk/client-dynamodb`, for the item-level API the stores speak and the client the session manager wraps. */
+export const loadDynamoClientSdk = (user) => {
+    clientSdk ??= withInstallHint(import("@aws-sdk/client-dynamodb"), "@aws-sdk/client-dynamodb", user, () => { clientSdk = undefined; });
+    return clientSdk;
+};
+/** `@aws-sdk/lib-dynamodb`, the document client the session manager reads and writes through. */
+export const loadDynamoDocumentSdk = (user) => {
+    documentSdk ??= withInstallHint(import("@aws-sdk/lib-dynamodb"), "@aws-sdk/lib-dynamodb", user, () => { documentSdk = undefined; });
+    return documentSdk;
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lambder",
-  "version": "5.1.2",
+  "version": "6.0.1",
   "description": "Opinionated serverless web framework for TypeScript on AWS Lambda: type-safe APIs from Zod schemas, DynamoDB sessions, and declarative rate limits, authorization guards and idempotency.",
   "keywords": [
     "lambda",
@@ -87,15 +87,19 @@
   },
   "peerDependencies": {
     "@aws-sdk/client-dynamodb": "^3.574.0",
+    "@aws-sdk/client-lambda": "^3.574.0",
     "@aws-sdk/client-s3": "^3.574.0",
     "@aws-sdk/lib-dynamodb": "^3.574.0",
     "msw": "^2.0.0",
-    "zod": "^4.1.12"
+    "zod": "^4.6.2"
   },
   "peerDependenciesMeta": {
     "@aws-sdk/client-dynamodb": {
       "optional": true
     },
+    "@aws-sdk/client-lambda": {
+      "optional": true
+    },
     "@aws-sdk/client-s3": {
       "optional": true
     },
@@ -111,6 +115,7 @@
   },
   "devDependencies": {
     "@aws-sdk/client-dynamodb": "^3.913.0",
+    "@aws-sdk/client-lambda": "^3.1131.0",
     "@aws-sdk/client-s3": "^3.1127.0",
     "@aws-sdk/lib-dynamodb": "^3.913.0",
     "@types/aws-lambda": "^8.10.136",
@@ -125,6 +130,6 @@
     "eslint": "^8.57.0",
     "typescript": "^5.9.3",
     "vitest": "^3.2.4",
-    "zod": "^4.1.12"
+    "zod": "^4.6.2"
   }
 }