@aws-amplify/backend-notifications 0.0.0-test-20260708085627

package/lib/handler-asset/index.js

@@ -0,0 +1,530 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/lambda/identify/handler.ts
+var handler_exports = {};
+__export(handler_exports, {
+  handler: () => handler
+});
+module.exports = __toCommonJS(handler_exports);
+var import_client_customer_profiles4 = require("@aws-sdk/client-customer-profiles");
+
+// src/lambda/identify/validation.ts
+var CHANNEL_TYPES = [
+  "GCM",
+  "APNS",
+  "APNS_SANDBOX",
+  "IN_APP"
+];
+var OPT_OUTS = ["ALL", "NONE"];
+var isPlainObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var isStringArray = (v) => Array.isArray(v) && v.every((x) => typeof x === "string");
+var isStringMap = (v) => isPlainObject(v) && Object.values(v).every((x) => isStringArray(x));
+var validateBody = (body) => {
+  if (!isPlainObject(body)) {
+    return { ok: false, error: "Request body must be a JSON object" };
+  }
+  if (body.userId !== void 0 && typeof body.userId !== "string") {
+    return { ok: false, error: "userId must be a string when present" };
+  }
+  const userProfile = body.userProfile;
+  if (!isPlainObject(userProfile)) {
+    return {
+      ok: false,
+      error: "userProfile is required and must be an object"
+    };
+  }
+  for (const key of ["name", "email", "plan"]) {
+    if (userProfile[key] !== void 0 && typeof userProfile[key] !== "string") {
+      return { ok: false, error: `userProfile.${key} must be a string` };
+    }
+  }
+  if (userProfile.customProperties !== void 0 && !isStringMap(userProfile.customProperties)) {
+    return {
+      ok: false,
+      error: "userProfile.customProperties must be a map of string arrays"
+    };
+  }
+  if (userProfile.metrics !== void 0) {
+    if (!isPlainObject(userProfile.metrics) || !Object.values(userProfile.metrics).every((n) => typeof n === "number")) {
+      return {
+        ok: false,
+        error: "userProfile.metrics must be a map of numbers"
+      };
+    }
+  }
+  const options = body.options;
+  if (options !== void 0) {
+    if (!isPlainObject(options)) {
+      return { ok: false, error: "options must be an object when present" };
+    }
+    if (options.address !== void 0 && typeof options.address !== "string") {
+      return { ok: false, error: "options.address must be a string" };
+    }
+    if (options.deviceId !== void 0 && typeof options.deviceId !== "string") {
+      return { ok: false, error: "options.deviceId must be a string" };
+    }
+    if (options.previousGuestIdentityId !== void 0 && (typeof options.previousGuestIdentityId !== "string" || options.previousGuestIdentityId.trim().length === 0 || options.previousGuestIdentityId.length > 128)) {
+      return {
+        ok: false,
+        error: "options.previousGuestIdentityId must be a non-empty string"
+      };
+    }
+    if (options.channelType !== void 0 && !CHANNEL_TYPES.includes(options.channelType)) {
+      return {
+        ok: false,
+        error: `options.channelType must be one of ${CHANNEL_TYPES.join(", ")}`
+      };
+    }
+    if (options.optOut !== void 0 && !OPT_OUTS.includes(options.optOut)) {
+      return {
+        ok: false,
+        error: `options.optOut must be one of ${OPT_OUTS.join(", ")}`
+      };
+    }
+    if (options.userAttributes !== void 0 && !isStringMap(options.userAttributes)) {
+      return {
+        ok: false,
+        error: "options.userAttributes must be a map of string arrays"
+      };
+    }
+  }
+  return { ok: true, value: body };
+};
+
+// src/constants.ts
+var OBJECT_TYPE_PROFILE = "AmplifyProfile";
+var OBJECT_TYPE_GUEST_PROFILE = "AmplifyGuestProfile";
+var OBJECT_TYPE_DEVICE = "AmplifyDevice";
+var COGNITO_USER_KEY = "cognitoUserKey";
+var COGNITO_IDENTITY_KEY = "cognitoIdentityKey";
+var COGNITO_IDENTITY_FIELD = "cognitoIdentityId";
+var COGNITO_SUB_FIELD = "cognitoSub";
+var MAX_ATTRIBUTE_LENGTH = 255;
+var ENV_DOMAIN_NAME = "PROFILES_DOMAIN_NAME";
+
+// src/lambda/identify/mapping.ts
+var flatten = (values) => {
+  let out;
+  if (!values || values.length === 0) {
+    out = "";
+  } else if (values.length === 1) {
+    out = values[0] ?? "";
+  } else {
+    out = JSON.stringify(values);
+  }
+  return out.length > MAX_ATTRIBUTE_LENGTH ? out.slice(0, MAX_ATTRIBUTE_LENGTH) : out;
+};
+var serializeMultiValueMap = (map) => {
+  if (!map) {
+    return void 0;
+  }
+  const keys = Object.keys(map);
+  if (keys.length === 0) {
+    return void 0;
+  }
+  const flattened = {};
+  for (const key of keys) {
+    flattened[key] = flatten(map[key]);
+  }
+  const out = JSON.stringify(flattened);
+  return out.length > MAX_ATTRIBUTE_LENGTH ? out.slice(0, MAX_ATTRIBUTE_LENGTH) : out;
+};
+var splitName = (name) => {
+  const trimmed = name.trim();
+  const idx = trimmed.indexOf(" ");
+  if (idx === -1) {
+    return { firstName: trimmed };
+  }
+  return {
+    firstName: trimmed.slice(0, idx),
+    lastName: trimmed.slice(idx + 1).trim() || void 0
+  };
+};
+var compact = (obj) => {
+  const out = {};
+  for (const [k, v] of Object.entries(obj)) {
+    if (v !== void 0 && v !== null && v !== "") {
+      out[k] = v;
+    }
+  }
+  return out;
+};
+var targetingFlagsForChannel = (channelType) => {
+  switch (channelType) {
+    case "GCM":
+      return { hasGCM: "true" };
+    case "APNS":
+    case "APNS_SANDBOX":
+      return { hasAPNS: "true" };
+    default:
+      return {};
+  }
+};
+var hasDeviceData = (req) => !!req.options?.deviceId;
+var buildProfileUpdate = (principal, req) => {
+  const profile = req.userProfile ?? {};
+  const demographic = profile.demographic;
+  const location = profile.location;
+  const name = profile.name ? splitName(profile.name) : void 0;
+  const flags = targetingFlagsForChannel(req.options?.channelType);
+  const attributes = compact({
+    // Identity trail (searchable key is separate; this is for reference only).
+    [principal.keyName]: principal.value,
+    appUserId: req.userId,
+    // Targeting / custom attributes for Connect segmentation.
+    plan: profile.plan,
+    locale: demographic?.locale,
+    platform: demographic?.platform,
+    appVersion: demographic?.appVersion,
+    make: demographic?.make,
+    model: demographic?.model,
+    modelVersion: demographic?.modelVersion,
+    platformVersion: demographic?.platformVersion,
+    timezone: demographic?.timezone,
+    latitude: location?.latitude !== void 0 ? String(location.latitude) : void 0,
+    longitude: location?.longitude !== void 0 ? String(location.longitude) : void 0,
+    customProperties: serializeMultiValueMap(profile.customProperties),
+    userAttributes: serializeMultiValueMap(req.options?.userAttributes),
+    metrics: profile.metrics ? JSON.stringify(profile.metrics) : void 0,
+    // Promoted push-capability flags.
+    hasGCM: flags.hasGCM,
+    hasAPNS: flags.hasAPNS
+  });
+  const address = compact({
+    city: location?.city,
+    country: location?.country,
+    postalCode: location?.postalCode,
+    province: location?.region
+  });
+  return {
+    emailAddress: profile.email,
+    firstName: name?.firstName,
+    lastName: name?.lastName,
+    address: Object.keys(address).length > 0 ? address : void 0,
+    attributes
+  };
+};
+var buildDeviceObject = (principal, req, existingCreatedAt) => {
+  const options = req.options ?? {};
+  const demographic = req.userProfile?.demographic;
+  const platform = options.platform ?? demographic?.platform;
+  const appVersion = options.appVersion ?? demographic?.appVersion;
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  return compact({
+    [principal.objectField]: principal.value,
+    deviceId: options.deviceId,
+    deviceToken: options.address,
+    channelType: options.channelType,
+    platform,
+    appVersion,
+    createdAt: existingCreatedAt ?? now,
+    updatedAt: now
+  });
+};
+
+// src/lambda/identify/profile_resolver.ts
+var import_client_customer_profiles = require("@aws-sdk/client-customer-profiles");
+
+// src/lambda/shared/retry.ts
+var isTransientConcurrentUpdate = (err) => {
+  const name = err?.name ?? "";
+  const msg = err?.message ?? "";
+  return (name === "BadRequestException" || name === "ThrottlingException" || name === "TooManyRequestsException") && /concurrent update in-progress|too many requests|rate exceeded/i.test(
+    msg
+  ) || name === "ThrottlingException" || name === "TooManyRequestsException";
+};
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var withTransientRetry = async (fn, opts = {}) => {
+  const attempts = opts.attempts ?? 6;
+  const baseDelayMs = opts.baseDelayMs ?? 80;
+  let lastErr;
+  for (let i = 0; i < attempts; i++) {
+    try {
+      return await fn();
+    } catch (err) {
+      lastErr = err;
+      if (!isTransientConcurrentUpdate(err) || i === attempts - 1) {
+        throw err;
+      }
+      const ceiling = baseDelayMs * 2 ** i;
+      await sleep(Math.floor(Math.random() * ceiling));
+    }
+  }
+  throw lastErr;
+};
+
+// src/lambda/identify/profile_resolver.ts
+var sleep2 = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+var searchProfileId = async (profiles2, domainName, keyName, value, attempts, baseDelayMs) => {
+  for (let i = 0; i < attempts; i++) {
+    const search = await profiles2.send(
+      new import_client_customer_profiles.SearchProfilesCommand({
+        DomainName: domainName,
+        KeyName: keyName,
+        Values: [value]
+      })
+    );
+    const found = search.Items?.find((item) => !!item.ProfileId)?.ProfileId;
+    if (found) {
+      return found;
+    }
+    if (i < attempts - 1) {
+      await sleep2(baseDelayMs * (i + 1));
+    }
+  }
+  return void 0;
+};
+var resolveOrCreateProfile = async (profiles2, domainName, principal) => {
+  await withTransientRetry(
+    () => profiles2.send(
+      new import_client_customer_profiles.PutProfileObjectCommand({
+        DomainName: domainName,
+        ObjectTypeName: principal.profileObjectType,
+        Object: JSON.stringify({ [principal.objectField]: principal.value })
+      })
+    )
+  );
+  const profileId = await searchProfileId(
+    profiles2,
+    domainName,
+    principal.keyName,
+    principal.value,
+    8,
+    150
+  );
+  if (!profileId) {
+    throw new Error(
+      "PutProfileObject find-or-create did not resolve a ProfileId"
+    );
+  }
+  return { profileId };
+};
+var findProfileId = async (profiles2, domainName, principal) => searchProfileId(
+  profiles2,
+  domainName,
+  principal.keyName,
+  principal.value,
+  1,
+  0
+);
+
+// src/lambda/identify/device_resolver.ts
+var import_client_customer_profiles2 = require("@aws-sdk/client-customer-profiles");
+var findExistingDeviceCreatedAt = async (profiles2, domainName, profileId, deviceId) => {
+  try {
+    let nextToken;
+    do {
+      const res = await withTransientRetry(
+        () => profiles2.send(
+          new import_client_customer_profiles2.ListProfileObjectsCommand({
+            DomainName: domainName,
+            ObjectTypeName: OBJECT_TYPE_DEVICE,
+            ProfileId: profileId,
+            NextToken: nextToken
+          })
+        )
+      );
+      for (const item of res.Items ?? []) {
+        if (!item.Object) {
+          continue;
+        }
+        try {
+          const parsed = JSON.parse(item.Object);
+          if (parsed.deviceId === deviceId && typeof parsed.createdAt === "string" && parsed.createdAt.length > 0) {
+            return parsed.createdAt;
+          }
+        } catch {
+          continue;
+        }
+      }
+      nextToken = res.NextToken;
+    } while (nextToken);
+  } catch {
+    return void 0;
+  }
+  return void 0;
+};
+
+// src/lambda/identify/merge_resolver.ts
+var import_client_customer_profiles3 = require("@aws-sdk/client-customer-profiles");
+
+// src/lambda/identify/principal.ts
+var authedPrincipal = (sub) => ({
+  kind: "authed",
+  keyName: COGNITO_USER_KEY,
+  objectField: COGNITO_SUB_FIELD,
+  profileObjectType: OBJECT_TYPE_PROFILE,
+  value: sub
+});
+var guestPrincipal = (identityId) => ({
+  kind: "guest",
+  keyName: COGNITO_IDENTITY_KEY,
+  objectField: COGNITO_IDENTITY_FIELD,
+  profileObjectType: OBJECT_TYPE_GUEST_PROFILE,
+  value: identityId
+});
+var resolvePrincipal = (event) => {
+  const claims = event.requestContext?.authorizer?.jwt?.claims;
+  const sub = claims?.sub;
+  if (typeof sub === "string" && sub.length > 0) {
+    return authedPrincipal(sub);
+  }
+  const identity = event.requestContext?.identity;
+  const identityId = identity?.cognitoIdentityId;
+  if (identity?.cognitoAuthenticationType === "unauthenticated" && typeof identityId === "string" && identityId.length > 0) {
+    return guestPrincipal(identityId);
+  }
+  return void 0;
+};
+
+// src/lambda/identify/merge_resolver.ts
+var mergeGuestIntoAuthed = async (profiles2, domainName, guestIdentityId, authedProfileId) => {
+  const guestProfileId = await findProfileId(
+    profiles2,
+    domainName,
+    guestPrincipal(guestIdentityId)
+  );
+  if (!guestProfileId || guestProfileId === authedProfileId) {
+    return { merged: false };
+  }
+  await withTransientRetry(
+    () => profiles2.send(
+      new import_client_customer_profiles3.MergeProfilesCommand({
+        DomainName: domainName,
+        MainProfileId: authedProfileId,
+        ProfileIdsToBeMerged: [guestProfileId]
+      })
+    )
+  );
+  return { merged: true };
+};
+
+// src/lambda/identify/handler.ts
+var profiles = new import_client_customer_profiles4.CustomerProfilesClient({});
+var response = (statusCode, body) => ({
+  statusCode,
+  headers: { "content-type": "application/json" },
+  body: JSON.stringify(body)
+});
+var handler = async (event) => {
+  const domainName = process.env[ENV_DOMAIN_NAME];
+  if (!domainName) {
+    console.error(`Missing required env var ${ENV_DOMAIN_NAME}`);
+    return response(500, { error: "Server misconfiguration" });
+  }
+  const principal = resolvePrincipal(event);
+  if (!principal) {
+    return response(401, {
+      error: "Unauthorized: missing or invalid verified caller identity"
+    });
+  }
+  let parsed;
+  try {
+    parsed = event.body ? JSON.parse(event.body) : void 0;
+  } catch {
+    return response(400, { error: "Invalid JSON request body" });
+  }
+  const validation = validateBody(parsed);
+  if (!validation.ok || !validation.value) {
+    return response(400, { error: validation.error ?? "Invalid request" });
+  }
+  const request = validation.value;
+  try {
+    const { profileId } = await resolveOrCreateProfile(
+      profiles,
+      domainName,
+      principal
+    );
+    if (hasDeviceData(request)) {
+      const deviceId = request.options.deviceId;
+      const existingCreatedAt = await findExistingDeviceCreatedAt(
+        profiles,
+        domainName,
+        profileId,
+        deviceId
+      );
+      const deviceObject = buildDeviceObject(
+        principal,
+        request,
+        existingCreatedAt
+      );
+      await withTransientRetry(
+        () => profiles.send(
+          new import_client_customer_profiles4.PutProfileObjectCommand({
+            DomainName: domainName,
+            ObjectTypeName: OBJECT_TYPE_DEVICE,
+            Object: JSON.stringify(deviceObject)
+          })
+        )
+      );
+    }
+    const update = buildProfileUpdate(principal, request);
+    await withTransientRetry(
+      () => profiles.send(
+        new import_client_customer_profiles4.UpdateProfileCommand({
+          DomainName: domainName,
+          ProfileId: profileId,
+          EmailAddress: update.emailAddress,
+          FirstName: update.firstName,
+          LastName: update.lastName,
+          Address: update.address ? {
+            City: update.address.city,
+            Country: update.address.country,
+            PostalCode: update.address.postalCode,
+            Province: update.address.province
+          } : void 0,
+          Attributes: update.attributes
+        })
+      )
+    );
+    const guestIdentityId = request.options?.previousGuestIdentityId;
+    if (principal.kind === "authed" && guestIdentityId) {
+      try {
+        const outcome = await mergeGuestIntoAuthed(
+          profiles,
+          domainName,
+          guestIdentityId,
+          profileId
+        );
+        console.log(
+          "[identify] guestMerge",
+          JSON.stringify({ merged: outcome.merged })
+        );
+      } catch (mergeErr) {
+        const name = mergeErr instanceof Error ? mergeErr.name : "UnknownError";
+        console.error("[identify] guestMergeError", JSON.stringify({ name }));
+      }
+    }
+    return response(200, { status: "ok" });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "unknown error";
+    const name = err instanceof Error ? err.name : "UnknownError";
+    const statusCode = err?.$metadata?.httpStatusCode;
+    console.error(
+      "[identify] customerProfilesError",
+      JSON.stringify({ name, statusCode })
+    );
+    return response(500, { error: `Customer Profiles error: ${message}` });
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  handler
+});

package/lib/index.d.ts

@@ -0,0 +1,7 @@
+export { defineNotifications } from './factory.js';
+export { AmplifyNotifications, AmplifyNotificationsProps, NotificationsResources, } from './construct.js';
+export { NotificationsFactoryProps, ApnsChannelProps, FcmChannelProps, } from './types.js';
+export { OBJECT_TYPE_PROFILE, OBJECT_TYPE_DEVICE, COGNITO_USER_KEY, OUTPUT_KEY, } from './constants.js';
+export { AMPLIFY_PROFILE_FIELDS, AMPLIFY_PROFILE_KEYS, AMPLIFY_DEVICE_FIELDS, AMPLIFY_DEVICE_KEYS, OBJECT_TYPE_NAMES, } from './object_types.js';
+export type { FieldMap, KeyMap } from './object_types.js';
+//# sourceMappingURL=index.d.ts.map

package/lib/index.js

@@ -0,0 +1,5 @@
+export { defineNotifications } from './factory.js';
+export { AmplifyNotifications, } from './construct.js';
+export { OBJECT_TYPE_PROFILE, OBJECT_TYPE_DEVICE, COGNITO_USER_KEY, OUTPUT_KEY, } from './constants.js';
+export { AMPLIFY_PROFILE_FIELDS, AMPLIFY_PROFILE_KEYS, AMPLIFY_DEVICE_FIELDS, AMPLIFY_DEVICE_KEYS, OBJECT_TYPE_NAMES, } from './object_types.js';
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxFQUFFLG1CQUFtQixFQUFFLE1BQU0sY0FBYyxDQUFDO0FBQ25ELE9BQU8sRUFDTCxvQkFBb0IsR0FHckIsTUFBTSxnQkFBZ0IsQ0FBQztBQU14QixPQUFPLEVBQ0wsbUJBQW1CLEVBQ25CLGtCQUFrQixFQUNsQixnQkFBZ0IsRUFDaEIsVUFBVSxHQUNYLE1BQU0sZ0JBQWdCLENBQUM7QUFDeEIsT0FBTyxFQUNMLHNCQUFzQixFQUN0QixvQkFBb0IsRUFDcEIscUJBQXFCLEVBQ3JCLG1CQUFtQixFQUNuQixpQkFBaUIsR0FDbEIsTUFBTSxtQkFBbUIsQ0FBQyIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCB7IGRlZmluZU5vdGlmaWNhdGlvbnMgfSBmcm9tICcuL2ZhY3RvcnkuanMnO1xuZXhwb3J0IHtcbiAgQW1wbGlmeU5vdGlmaWNhdGlvbnMsXG4gIEFtcGxpZnlOb3RpZmljYXRpb25zUHJvcHMsXG4gIE5vdGlmaWNhdGlvbnNSZXNvdXJjZXMsXG59IGZyb20gJy4vY29uc3RydWN0LmpzJztcbmV4cG9ydCB7XG4gIE5vdGlmaWNhdGlvbnNGYWN0b3J5UHJvcHMsXG4gIEFwbnNDaGFubmVsUHJvcHMsXG4gIEZjbUNoYW5uZWxQcm9wcyxcbn0gZnJvbSAnLi90eXBlcy5qcyc7XG5leHBvcnQge1xuICBPQkpFQ1RfVFlQRV9QUk9GSUxFLFxuICBPQkpFQ1RfVFlQRV9ERVZJQ0UsXG4gIENPR05JVE9fVVNFUl9LRVksXG4gIE9VVFBVVF9LRVksXG59IGZyb20gJy4vY29uc3RhbnRzLmpzJztcbmV4cG9ydCB7XG4gIEFNUExJRllfUFJPRklMRV9GSUVMRFMsXG4gIEFNUExJRllfUFJPRklMRV9LRVlTLFxuICBBTVBMSUZZX0RFVklDRV9GSUVMRFMsXG4gIEFNUExJRllfREVWSUNFX0tFWVMsXG4gIE9CSkVDVF9UWVBFX05BTUVTLFxufSBmcm9tICcuL29iamVjdF90eXBlcy5qcyc7XG5leHBvcnQgdHlwZSB7IEZpZWxkTWFwLCBLZXlNYXAgfSBmcm9tICcuL29iamVjdF90eXBlcy5qcyc7XG4iXX0=

package/lib/lambda/campaign-association/handler.d.ts

@@ -0,0 +1,29 @@
+import type { CloudFormationCustomResourceEvent } from 'aws-lambda';
+/** Result the Provider framework echoes back to CloudFormation. */
+export type OnEventResult = {
+    PhysicalResourceId: string;
+    Data?: {
+        [key: string]: string;
+    };
+};
+/**
+ * CloudFormation custom-resource handler (invoked via the CDK
+ * `custom-resources.Provider` framework) that associates a from-scratch Customer
+ * Profiles domain with its Amazon Connect instance's Outbound Campaigns v2, so
+ * Connect Journeys can target the domain's profiles WITHOUT any manual console
+ * step.
+ *
+ * Create / Update (idempotent): onboard the instance to Outbound Campaigns v2
+ * (creates the service-linked role + waits for SUCCEEDED), resolve the campaigns
+ * service-linked role, then create both sides of the domain <-> campaigns
+ * integration.
+ *
+ * Delete (best-effort): reverse both integrations, swallowing errors so a
+ * partial / already-removed association never blocks stack teardown.
+ *
+ * Only wired by the construct in create-from-scratch mode (the construct owns
+ * the instance + domain). In attach mode the existing domain's association is
+ * the user's responsibility and this resource is not added.
+ */
+export declare const handler: (event: CloudFormationCustomResourceEvent) => Promise<OnEventResult>;
+//# sourceMappingURL=handler.d.ts.map

package/lib/lambda/campaign-association/handler.js

@@ -0,0 +1,80 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+import { ConnectCampaignsV2Client } from '@aws-sdk/client-connectcampaignsv2';
+import { CustomerProfilesClient } from '@aws-sdk/client-customer-profiles';
+import { IAMClient } from '@aws-sdk/client-iam';
+import { ensureInstanceOnboarded } from './onboarding.js';
+import { associateDomain, disassociateDomain, resolveCampaignsServiceLinkedRoleArn, } from './integration.js';
+/** Module-level clients reused across warm invocations. */
+const campaigns = new ConnectCampaignsV2Client({});
+const profiles = new CustomerProfilesClient({});
+const iam = new IAMClient({});
+const readProps = (event) => {
+    const p = event.ResourceProperties;
+    /* eslint-enable @typescript-eslint/naming-convention */
+    if (!p.ConnectInstanceId || !p.DomainName || !p.Account || !p.Region) {
+        throw new Error('Missing required ResourceProperties: ConnectInstanceId, DomainName, Account, Region');
+    }
+    return {
+        connectInstanceId: p.ConnectInstanceId,
+        domainName: p.DomainName,
+        account: p.Account,
+        region: p.Region,
+    };
+};
+const physicalId = (props) => `campaign-assoc:${props.connectInstanceId}:${props.domainName}`;
+/**
+ * CloudFormation custom-resource handler (invoked via the CDK
+ * `custom-resources.Provider` framework) that associates a from-scratch Customer
+ * Profiles domain with its Amazon Connect instance's Outbound Campaigns v2, so
+ * Connect Journeys can target the domain's profiles WITHOUT any manual console
+ * step.
+ *
+ * Create / Update (idempotent): onboard the instance to Outbound Campaigns v2
+ * (creates the service-linked role + waits for SUCCEEDED), resolve the campaigns
+ * service-linked role, then create both sides of the domain <-> campaigns
+ * integration.
+ *
+ * Delete (best-effort): reverse both integrations, swallowing errors so a
+ * partial / already-removed association never blocks stack teardown.
+ *
+ * Only wired by the construct in create-from-scratch mode (the construct owns
+ * the instance + domain). In attach mode the existing domain's association is
+ * the user's responsibility and this resource is not added.
+ */
+export const handler = async (event) => {
+    console.log('[campaign-assoc] event', {
+        requestType: event.RequestType,
+        logicalResourceId: event.LogicalResourceId,
+    });
+    const props = readProps(event);
+    if (event.RequestType === 'Delete') {
+        await disassociateDomain({ campaigns, profiles }, {
+            connectInstanceId: props.connectInstanceId,
+            domainName: props.domainName,
+            account: props.account,
+            region: props.region,
+        });
+        return { PhysicalResourceId: event.PhysicalResourceId };
+    }
+    // Create + Update: onboard (idempotent) then (re)create both integrations.
+    await ensureInstanceOnboarded(campaigns, {
+        connectInstanceId: props.connectInstanceId,
+    });
+    const roleArn = await resolveCampaignsServiceLinkedRoleArn(iam);
+    await associateDomain({ campaigns, profiles, iam }, {
+        connectInstanceId: props.connectInstanceId,
+        domainName: props.domainName,
+        roleArn,
+        account: props.account,
+        region: props.region,
+    });
+    return {
+        PhysicalResourceId: physicalId(props),
+        Data: {
+            connectInstanceId: props.connectInstanceId,
+            domainName: props.domainName,
+        },
+    };
+};
+//# sourceMappingURL=data:application/json;base64,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