@de-otio/trellis 0.4.0

package/dist/lambda/nightly-cron.js

@@ -0,0 +1,348 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = void 0;
+const client_dynamodb_1 = require("@aws-sdk/client-dynamodb");
+const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
+const client_s3_1 = require("@aws-sdk/client-s3");
+const client_cognito_identity_provider_1 = require("@aws-sdk/client-cognito-identity-provider");
+const client_cloudwatch_1 = require("@aws-sdk/client-cloudwatch");
+const client_ses_1 = require("@aws-sdk/client-ses");
+const util_dynamodb_1 = require("@aws-sdk/util-dynamodb");
+const client_1 = require("@prisma/client");
+const dynamo = new client_dynamodb_1.DynamoDBClient({ region: process.env.AWS_REGION });
+const secretsClient = new client_secrets_manager_1.SecretsManagerClient({ region: process.env.AWS_REGION });
+const s3 = new client_s3_1.S3Client({ region: process.env.AWS_REGION });
+const TABLE = process.env.DYNAMODB_TABLE;
+const MEDIA_BUCKET = process.env.MEDIA_BUCKET_NAME;
+let prisma = null;
+async function getPrisma() {
+    if (prisma)
+        return prisma;
+    const secret = await secretsClient.send(new client_secrets_manager_1.GetSecretValueCommand({ SecretId: process.env.DB_SECRET_ARN }));
+    const { username, password, host, port, dbname } = JSON.parse(secret.SecretString);
+    prisma = new client_1.PrismaClient({
+        datasources: { db: { url: `postgresql://${username}:${encodeURIComponent(password)}@${host}:${port}/${dbname}?connection_limit=1` } },
+    });
+    return prisma;
+}
+const handler = async () => {
+    const now = Math.floor(Date.now() / 1000);
+    // Acquire cron lock
+    try {
+        await dynamo.send(new client_dynamodb_1.PutItemCommand({
+            TableName: TABLE,
+            Item: (0, util_dynamodb_1.marshall)({
+                pk: "cron:nightly",
+                sk: "lock",
+                ttl: now + 3600,
+                lockedAt: now,
+            }),
+            ConditionExpression: "attribute_not_exists(pk) OR #ttl < :now",
+            ExpressionAttributeNames: { "#ttl": "ttl" },
+            ExpressionAttributeValues: (0, util_dynamodb_1.marshall)({ ":now": now }),
+        }));
+    }
+    catch {
+        console.log(JSON.stringify({ level: "info", msg: "Nightly cron already running, skipping" }));
+        return;
+    }
+    console.log(JSON.stringify({ level: "info", msg: "Nightly cron started" }));
+    const db = await getPrisma();
+    // 1. Hard-delete soft-deleted media older than 7 days + remove S3 objects
+    try {
+        const deletionCutoff = new Date();
+        deletionCutoff.setDate(deletionCutoff.getDate() - 7);
+        const mediaToDelete = await db.mediaFile.findMany({
+            where: { deletedAt: { lte: deletionCutoff } },
+            select: { id: true, originalKey: true, thumbnailKey: true, optimizedKey: true },
+            take: 200,
+        });
+        if (mediaToDelete.length > 0) {
+            // Delete S3 objects in batch
+            const keys = mediaToDelete.flatMap((m) => [m.originalKey, m.thumbnailKey, m.optimizedKey].filter((k) => !!k));
+            if (keys.length > 0) {
+                // S3 DeleteObjects supports up to 1000 keys per call
+                for (let i = 0; i < keys.length; i += 1000) {
+                    const batch = keys.slice(i, i + 1000);
+                    try {
+                        await s3.send(new client_s3_1.DeleteObjectsCommand({
+                            Bucket: MEDIA_BUCKET,
+                            Delete: { Objects: batch.map((Key) => ({ Key })) },
+                        }));
+                    }
+                    catch (err) {
+                        console.error(JSON.stringify({ level: "error", msg: "S3 batch delete failed", error: String(err), batchSize: batch.length }));
+                    }
+                }
+            }
+            // Hard-delete DB records
+            const result = await db.mediaFile.deleteMany({
+                where: { id: { in: mediaToDelete.map((m) => m.id) } },
+            });
+            console.log(JSON.stringify({ level: "info", msg: "Soft-deleted media purged", dbDeleted: result.count, s3Keys: keys.length }));
+        }
+    }
+    catch (err) {
+        console.error(JSON.stringify({ level: "error", msg: "Media purge failed", error: String(err) }));
+    }
+    // 2. Clean up expired invitations
+    try {
+        const result = await db.invitation.deleteMany({
+            where: { expiresAt: { lte: new Date() }, usedAt: null },
+        });
+        if (result.count > 0) {
+            console.log(JSON.stringify({ level: "info", msg: "Expired invitations cleaned", deleted: result.count }));
+        }
+    }
+    catch (err) {
+        console.error(JSON.stringify({ level: "error", msg: "Invitation cleanup failed", error: String(err) }));
+    }
+    // 3. Follower counts removed — relationships now live in graph DB (AuraDB)
+    // TODO: Add graph-side consistency check when reconciliation service is wired up
+    // 4. Process scheduled account deletions (GDPR Article 17 compliance)
+    try {
+        const { deleteUserData } = await Promise.resolve().then(() => __importStar(require("../lib/services/user-data-deletion")));
+        const usersToDelete = await db.user.findMany({
+            where: {
+                deletionScheduledAt: { lte: new Date() },
+                deletionConfirmedAt: { not: null },
+            },
+            select: { id: true, email: true, deletionRequestedAt: true, deletionConfirmedAt: true },
+            take: 50,
+        });
+        let deletedCount = 0;
+        let failedCount = 0;
+        for (const user of usersToDelete) {
+            try {
+                // 4a. Delete all database records
+                const result = await deleteUserData(db, user.id);
+                // 4b. Delete S3 media files
+                try {
+                    const prefix = `originals/user-${user.id}/`;
+                    let continuationToken;
+                    let pages = 0;
+                    const MAX_PAGES = 100;
+                    do {
+                        if (pages >= MAX_PAGES) {
+                            console.log(JSON.stringify({ level: "warn", msg: "S3 pagination circuit breaker hit", userId: user.id, pages: MAX_PAGES }));
+                            break;
+                        }
+                        const list = await s3.send(new client_s3_1.ListObjectsV2Command({
+                            Bucket: MEDIA_BUCKET, Prefix: prefix, ContinuationToken: continuationToken,
+                        }));
+                        if (list.Contents?.length) {
+                            await s3.send(new client_s3_1.DeleteObjectsCommand({
+                                Bucket: MEDIA_BUCKET,
+                                Delete: { Objects: list.Contents.map((o) => ({ Key: o.Key })) },
+                            }));
+                        }
+                        continuationToken = list.NextContinuationToken;
+                        pages++;
+                    } while (continuationToken);
+                }
+                catch (s3Err) {
+                    console.error(JSON.stringify({ level: "error", msg: "S3 media deletion failed", userId: user.id, error: String(s3Err) }));
+                }
+                // 4c. Delete Cognito identity
+                if (process.env.COGNITO_USER_POOL_ID) {
+                    try {
+                        const cognito = new client_cognito_identity_provider_1.CognitoIdentityProviderClient({ region: process.env.AWS_REGION });
+                        await cognito.send(new client_cognito_identity_provider_1.AdminDeleteUserCommand({
+                            UserPoolId: process.env.COGNITO_USER_POOL_ID,
+                            Username: user.email,
+                        }));
+                    }
+                    catch (cognitoErr) {
+                        // Log but don't fail — user may already be deleted from Cognito
+                        console.warn(JSON.stringify({ level: "warn", msg: "Cognito deletion failed", userId: user.id, error: String(cognitoErr) }));
+                    }
+                }
+                // 4d. Clean up DynamoDB cache entries
+                try {
+                    await dynamo.send(new client_dynamodb_1.DeleteItemCommand({
+                        TableName: TABLE,
+                        Key: (0, util_dynamodb_1.marshall)({ pk: `user:${user.id}`, sk: "profile" }),
+                    }));
+                }
+                catch {
+                    // Best-effort cleanup
+                }
+                // 4e. Write audit log entry (compliance proof)
+                try {
+                    await db.deletionAuditLog.create({
+                        data: {
+                            userId: user.id,
+                            email: user.email,
+                            requestedAt: user.deletionRequestedAt,
+                            confirmedAt: user.deletionConfirmedAt,
+                            itemsDeleted: result,
+                        },
+                    });
+                }
+                catch (auditErr) {
+                    console.error(JSON.stringify({ level: "error", msg: "Audit log write failed", userId: user.id, error: String(auditErr) }));
+                }
+                // 4f. Send deletion completion email
+                if (process.env.DOMAIN) {
+                    try {
+                        const ses = new client_ses_1.SESClient({ region: process.env.SES_REGION || process.env.AWS_REGION });
+                        const domain = process.env.DOMAIN;
+                        await ses.send(new client_ses_1.SendEmailCommand({
+                            Source: `Trellis <noreply@${domain}>`,
+                            Destination: { ToAddresses: [user.email] },
+                            Message: {
+                                Subject: { Data: "Your Trellis account has been deleted" },
+                                Body: {
+                                    Text: { Data: `Your Trellis account and all associated data have been permanently deleted in accordance with your GDPR deletion request.\n\nDeleted: ${result.posts} posts, ${result.comments} comments, ${result.entities} entities.\n\nIf you did not request this deletion, please contact support immediately.` },
+                                    Html: { Data: `<h2>Account Deletion Complete</h2><p>Your Trellis account and all associated data have been permanently deleted in accordance with your GDPR deletion request.</p><p>Deleted: ${result.posts} posts, ${result.comments} comments, ${result.entities} entities.</p><p>If you did not request this deletion, please contact support immediately.</p>` },
+                                },
+                            },
+                        }));
+                    }
+                    catch (emailErr) {
+                        console.warn(JSON.stringify({ level: "warn", msg: "Deletion email failed", userId: user.id, error: String(emailErr) }));
+                    }
+                }
+                deletedCount++;
+                console.log(JSON.stringify({
+                    level: "info",
+                    msg: "Account deleted",
+                    userId: user.id,
+                    itemsDeleted: result,
+                }));
+            }
+            catch (err) {
+                failedCount++;
+                console.error(JSON.stringify({ level: "error", msg: "Account deletion failed", userId: user.id, error: String(err) }));
+            }
+        }
+        // Count pending deletions (for monitoring backlog)
+        const pendingCount = await db.user.count({
+            where: {
+                deletionScheduledAt: { not: null },
+                deletionConfirmedAt: { not: null },
+            },
+        });
+        // Emit CloudWatch metrics
+        try {
+            const cw = new client_cloudwatch_1.CloudWatchClient({ region: process.env.AWS_REGION });
+            const timestamp = new Date();
+            await cw.send(new client_cloudwatch_1.PutMetricDataCommand({
+                Namespace: "Trellis/Deletion",
+                MetricData: [
+                    { MetricName: "ProcessedCount", Value: deletedCount, Unit: "Count", Timestamp: timestamp },
+                    { MetricName: "FailedCount", Value: failedCount, Unit: "Count", Timestamp: timestamp },
+                    { MetricName: "PendingCount", Value: pendingCount, Unit: "Count", Timestamp: timestamp },
+                ],
+            }));
+        }
+        catch (cwErr) {
+            console.error(JSON.stringify({ level: "error", msg: "CloudWatch metrics failed", error: String(cwErr) }));
+        }
+        if (usersToDelete.length > 0) {
+            console.log(JSON.stringify({
+                level: "info",
+                msg: "Scheduled account deletions processed",
+                total: usersToDelete.length,
+                deleted: deletedCount,
+                failed: failedCount,
+                pending: pendingCount,
+            }));
+        }
+    }
+    catch (err) {
+        console.error(JSON.stringify({ level: "error", msg: "Scheduled deletion processing failed", error: String(err) }));
+    }
+    // 5. Check age tier transitions (Safer Social Design)
+    try {
+        const { checkAgeTierTransitions } = await Promise.resolve().then(() => __importStar(require("../lib/age-tier-transition")));
+        const { buildEnv } = await Promise.resolve().then(() => __importStar(require("../env")));
+        const appEnv = await buildEnv();
+        const result = await checkAgeTierTransitions(appEnv);
+        if (result.transitioned > 0 || result.errors > 0) {
+            console.log(JSON.stringify({ level: "info", msg: "Age tier transitions processed", transitioned: result.transitioned, errors: result.errors }));
+        }
+    }
+    catch (err) {
+        console.error(JSON.stringify({ level: "error", msg: "Age tier transition check failed", error: String(err) }));
+    }
+    // 6. Generate sentiment digest notifications (Safer Social Design)
+    try {
+        const { generateSentimentDigest } = await Promise.resolve().then(() => __importStar(require("../lib/sentiment-digest")));
+        const { NotificationHandler } = await Promise.resolve().then(() => __importStar(require("../lib/notification-handler")));
+        const { buildEnv } = await Promise.resolve().then(() => __importStar(require("../env")));
+        const appEnv = await buildEnv();
+        const notificationHandler = new NotificationHandler();
+        const since = new Date();
+        since.setDate(since.getDate() - 1); // Last 24 hours
+        // Find users with digest notifications enabled
+        const usersWithDigest = await db.user.findMany({
+            where: {
+                dateOfBirth: { not: null },
+                suspended: false,
+            },
+            select: { id: true, ageTier: true },
+            take: 500, // Circuit breaker
+        });
+        let digestCount = 0;
+        for (const user of usersWithDigest) {
+            try {
+                const digest = await generateSentimentDigest(user.id, since, appEnv);
+                if (digest.posts.length > 0) {
+                    const sentimentNames = [...new Set(digest.posts.flatMap((p) => p.sentiments))];
+                    const body = sentimentNames.length > 0
+                        ? `People responded to your posts with ${sentimentNames.slice(0, 3).join(", ")} today`
+                        : "Your posts received new reactions today";
+                    await notificationHandler.createNotification(user.id, "SENTIMENT_DIGEST", "Daily Sentiment Summary", body, { postCount: digest.posts.length }, appEnv);
+                    digestCount++;
+                }
+            }
+            catch (digestErr) {
+                // Don't fail the whole batch for one user
+                console.error(JSON.stringify({ level: "error", msg: "Digest generation failed for user", userId: user.id, error: String(digestErr) }));
+            }
+        }
+        if (digestCount > 0) {
+            console.log(JSON.stringify({ level: "info", msg: "Sentiment digest notifications created", count: digestCount }));
+        }
+    }
+    catch (err) {
+        console.error(JSON.stringify({ level: "error", msg: "Sentiment digest delivery failed", error: String(err) }));
+    }
+    console.log(JSON.stringify({ level: "info", msg: "Nightly cron complete" }));
+};
+exports.handler = handler;
+//# sourceMappingURL=nightly-cron.js.map

package/dist/lambda/nightly-cron.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nightly-cron.js","sourceRoot":"","sources":["../../src/lambda/nightly-cron.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8DAA6F;AAC7F,4EAA8F;AAC9F,kDAA0F;AAC1F,gGAAkH;AAClH,kEAAoF;AACpF,oDAAkE;AAClE,0DAAkD;AAClD,2CAA8C;AAE9C,MAAM,MAAM,GAAG,IAAI,gCAAc,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AACtE,MAAM,aAAa,GAAG,IAAI,6CAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AACnF,MAAM,EAAE,GAAG,IAAI,oBAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAe,CAAC;AAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAkB,CAAC;AAEpD,IAAI,MAAM,GAAwB,IAAI,CAAC;AAEvC,KAAK,UAAU,SAAS;IACtB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,8CAAqB,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,aAAc,EAAE,CAAC,CAAC,CAAC;IAC7G,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAa,CAAC,CAAC;IACpF,MAAM,GAAG,IAAI,qBAAY,CAAC;QACxB,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,gBAAgB,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,qBAAqB,EAAE,EAAE;KACtI,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1C,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,gCAAc,CAAC;YACnC,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,IAAA,wBAAQ,EAAC;gBACb,EAAE,EAAE,cAAc;gBAClB,EAAE,EAAE,MAAM;gBACV,GAAG,EAAE,GAAG,GAAG,IAAI;gBACf,QAAQ,EAAE,GAAG;aACd,CAAC;YACF,mBAAmB,EAAE,yCAAyC;YAC9D,wBAAwB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;YAC3C,yBAAyB,EAAE,IAAA,wBAAQ,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;SACrD,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,wCAAwC,EAAE,CAAC,CAAC,CAAC;QAC9F,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;IAE5E,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IAE7B,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAErD,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC;YAChD,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE;YAC7C,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;YAC/E,IAAI,EAAE,GAAG;SACV,CAAC,CAAC;QAEH,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,6BAA6B;YAC7B,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACvC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAChF,CAAC;YAEF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,qDAAqD;gBACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;oBAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;oBACtC,IAAI,CAAC;wBACH,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,gCAAoB,CAAC;4BACrC,MAAM,EAAE,YAAY;4BACpB,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;yBACnD,CAAC,CAAC,CAAC;oBACN,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;oBAChI,CAAC;gBACH,CAAC;YACH,CAAC;YAED,yBAAyB;YACzB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC;gBAC3C,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;aACtD,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,2BAA2B,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjI,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC;IAED,kCAAkC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAC5C,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxD,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,6BAA6B,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,2BAA2B,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,2EAA2E;IAC3E,iFAAiF;IAEjF,sEAAsE;IACtE,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,oCAAoC,GAAC,CAAC;QAE9E,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC3C,KAAK,EAAE;gBACL,mBAAmB,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE;gBACxC,mBAAmB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;aACnC;YACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE;YACvF,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QAEH,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,kCAAkC;gBAClC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;gBAEjD,4BAA4B;gBAC5B,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,kBAAkB,IAAI,CAAC,EAAE,GAAG,CAAC;oBAC5C,IAAI,iBAAqC,CAAC;oBAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;oBACd,MAAM,SAAS,GAAG,GAAG,CAAC;oBACtB,GAAG,CAAC;wBACF,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;4BACvB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,mCAAmC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;4BAC5H,MAAM;wBACR,CAAC;wBACD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,gCAAoB,CAAC;4BAClD,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB;yBAC3E,CAAC,CAAC,CAAC;wBACJ,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;4BAC1B,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,gCAAoB,CAAC;gCACrC,MAAM,EAAE,YAAY;gCACpB,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAI,EAAE,CAAC,CAAC,EAAE;6BACjE,CAAC,CAAC,CAAC;wBACN,CAAC;wBACD,iBAAiB,GAAG,IAAI,CAAC,qBAAqB,CAAC;wBAC/C,KAAK,EAAE,CAAC;oBACV,CAAC,QAAQ,iBAAiB,EAAE;gBAC9B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC5H,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;oBACrC,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,IAAI,gEAA6B,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;wBACtF,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,yDAAsB,CAAC;4BAC5C,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;4BAC5C,QAAQ,EAAE,IAAI,CAAC,KAAK;yBACrB,CAAC,CAAC,CAAC;oBACN,CAAC;oBAAC,OAAO,UAAU,EAAE,CAAC;wBACpB,gEAAgE;wBAChE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC9H,CAAC;gBACH,CAAC;gBAED,sCAAsC;gBACtC,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,mCAAiB,CAAC;wBACtC,SAAS,EAAE,KAAK;wBAChB,GAAG,EAAE,IAAA,wBAAQ,EAAC,EAAE,EAAE,EAAE,QAAQ,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;qBACxD,CAAC,CAAC,CAAC;gBACN,CAAC;gBAAC,MAAM,CAAC;oBACP,sBAAsB;gBACxB,CAAC;gBAED,+CAA+C;gBAC/C,IAAI,CAAC;oBACH,MAAM,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC;wBAC/B,IAAI,EAAE;4BACJ,MAAM,EAAE,IAAI,CAAC,EAAE;4BACf,KAAK,EAAE,IAAI,CAAC,KAAK;4BACjB,WAAW,EAAE,IAAI,CAAC,mBAAoB;4BACtC,WAAW,EAAE,IAAI,CAAC,mBAAmB;4BACrC,YAAY,EAAE,MAAa;yBAC5B;qBACF,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,QAAQ,EAAE,CAAC;oBAClB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,wBAAwB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC7H,CAAC;gBAED,qCAAqC;gBACrC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;oBACvB,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,IAAI,sBAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;wBACxF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;wBAClC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,6BAAgB,CAAC;4BAClC,MAAM,EAAE,oBAAoB,MAAM,GAAG;4BACrC,WAAW,EAAE,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;4BAC1C,OAAO,EAAE;gCACP,OAAO,EAAE,EAAE,IAAI,EAAE,uCAAuC,EAAE;gCAC1D,IAAI,EAAE;oCACJ,IAAI,EAAE,EAAE,IAAI,EAAE,yIAAyI,MAAM,CAAC,KAAK,WAAW,MAAM,CAAC,QAAQ,cAAc,MAAM,CAAC,QAAQ,yFAAyF,EAAE;oCACrT,IAAI,EAAE,EAAE,IAAI,EAAE,iLAAiL,MAAM,CAAC,KAAK,WAAW,MAAM,CAAC,QAAQ,cAAc,MAAM,CAAC,QAAQ,gGAAgG,EAAE;iCACrW;6BACF;yBACF,CAAC,CAAC,CAAC;oBACN,CAAC;oBAAC,OAAO,QAAQ,EAAE,CAAC;wBAClB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC1H,CAAC;gBACH,CAAC;gBAED,YAAY,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBACzB,KAAK,EAAE,MAAM;oBACb,GAAG,EAAE,iBAAiB;oBACtB,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,YAAY,EAAE,MAAM;iBACrB,CAAC,CAAC,CAAC;YACN,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACzH,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;YACvC,KAAK,EAAE;gBACL,mBAAmB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;gBAClC,mBAAmB,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;aACnC;SACF,CAAC,CAAC;QAEH,0BAA0B;QAC1B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,oCAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,wCAAoB,CAAC;gBACrC,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE;oBACV,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE;oBAC1F,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE;oBACtF,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE;iBACzF;aACF,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,2BAA2B,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5G,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACzB,KAAK,EAAE,MAAM;gBACb,GAAG,EAAE,uCAAuC;gBAC5C,KAAK,EAAE,aAAa,CAAC,MAAM;gBAC3B,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,YAAY;aACtB,CAAC,CAAC,CAAC;QACN,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,sCAAsC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACrH,CAAC;IAED,sDAAsD;IACtD,IAAI,CAAC;QACH,MAAM,EAAE,uBAAuB,EAAE,GAAG,wDAAa,4BAA4B,GAAC,CAAC;QAC/E,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,gCAAgC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,kCAAkC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACjH,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC;QACH,MAAM,EAAE,uBAAuB,EAAE,GAAG,wDAAa,yBAAyB,GAAC,CAAC;QAC5E,MAAM,EAAE,mBAAmB,EAAE,GAAG,wDAAa,6BAA6B,GAAC,CAAC;QAC5E,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,QAAQ,GAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC;QAChC,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAEtD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB;QAEpD,+CAA+C;QAC/C,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC7C,KAAK,EAAE;gBACL,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;gBAC1B,SAAS,EAAE,KAAK;aACjB;YACD,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;YACnC,IAAI,EAAE,GAAG,EAAE,kBAAkB;SAC9B,CAAC,CAAC;QAEH,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBACrE,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBACpF,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC;wBACpC,CAAC,CAAC,uCAAuC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ;wBACtF,CAAC,CAAC,yCAAyC,CAAC;oBAE9C,MAAM,mBAAmB,CAAC,kBAAkB,CAC1C,IAAI,CAAC,EAAE,EACP,kBAAkB,EAClB,yBAAyB,EACzB,IAAI,EACJ,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAClC,MAAM,CACP,CAAC;oBACF,WAAW,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,0CAA0C;gBAC1C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,mCAAmC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;YACzI,CAAC;QACH,CAAC;QAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,wCAAwC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACpH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,kCAAkC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACjH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC;AAtTW,QAAA,OAAO,WAsTlB"}

package/dist/lambda/post-confirmation.d.ts

@@ -0,0 +1,3 @@
+import type { PostConfirmationTriggerHandler } from "aws-lambda";
+export declare const handler: PostConfirmationTriggerHandler;
+//# sourceMappingURL=post-confirmation.d.ts.map

package/dist/lambda/post-confirmation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-confirmation.d.ts","sourceRoot":"","sources":["../../src/lambda/post-confirmation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgC,8BAA8B,EAAE,MAAM,YAAY,CAAC;AA6B/F,eAAO,MAAM,OAAO,EAAE,8BAkDrB,CAAC"}

package/dist/lambda/post-confirmation.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = void 0;
+const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
+const client_1 = require("@prisma/client");
+const secretsClient = new client_secrets_manager_1.SecretsManagerClient({ region: process.env.AWS_REGION });
+let prisma = null;
+async function getPrisma() {
+    if (prisma)
+        return prisma;
+    const secret = await secretsClient.send(new client_secrets_manager_1.GetSecretValueCommand({ SecretId: process.env.DB_SECRET_ARN }));
+    const { username, password, host, port, dbname } = JSON.parse(secret.SecretString);
+    prisma = new client_1.PrismaClient({
+        datasources: { db: { url: `postgresql://${username}:${encodeURIComponent(password)}@${host}:${port}/${dbname}?connection_limit=1` } },
+    });
+    return prisma;
+}
+function computeAgeTier(dateOfBirth) {
+    const now = new Date();
+    let age = now.getUTCFullYear() - dateOfBirth.getUTCFullYear();
+    const monthDiff = now.getUTCMonth() - dateOfBirth.getUTCMonth();
+    if (monthDiff < 0 || (monthDiff === 0 && now.getUTCDate() < dateOfBirth.getUTCDate())) {
+        age--;
+    }
+    if (age < 13)
+        return "CHILD";
+    if (age < 18)
+        return "TEEN";
+    return "ADULT";
+}
+const handler = async (event) => {
+    if (event.triggerSource !== "PostConfirmation_ConfirmSignUp")
+        return event;
+    const { email, "custom:handle": handle, "custom:dateOfBirth": dateOfBirthStr } = event.request.userAttributes;
+    const cognitoSub = event.userName;
+    const db = await getPrisma();
+    // Compute age tier from date of birth if provided
+    let dateOfBirth;
+    let ageTier = "ADULT";
+    if (dateOfBirthStr) {
+        dateOfBirth = new Date(dateOfBirthStr);
+        if (!isNaN(dateOfBirth.getTime()) && dateOfBirth < new Date()) {
+            ageTier = computeAgeTier(dateOfBirth);
+        }
+        else {
+            dateOfBirth = undefined;
+        }
+    }
+    const user = await db.user.upsert({
+        where: { cognitoSub },
+        create: {
+            cognitoSub,
+            email,
+            handle: handle || email.split("@")[0],
+            role: "END_USER",
+            ...(dateOfBirth && { dateOfBirth, ageTier }),
+        },
+        update: {
+            email,
+        },
+    });
+    // If child account, create a pending parental link if guardian email is provided
+    if (ageTier === "CHILD") {
+        const guardianEmail = event.request.userAttributes["custom:guardianEmail"];
+        if (guardianEmail) {
+            const guardian = await db.user.findUnique({ where: { email: guardianEmail } });
+            if (guardian) {
+                await db.parentalLink.upsert({
+                    where: { childId_guardianId: { childId: user.id, guardianId: guardian.id } },
+                    create: { childId: user.id, guardianId: guardian.id, status: "PENDING" },
+                    update: {},
+                });
+            }
+        }
+    }
+    return event;
+};
+exports.handler = handler;
+//# sourceMappingURL=post-confirmation.js.map

package/dist/lambda/post-confirmation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post-confirmation.js","sourceRoot":"","sources":["../../src/lambda/post-confirmation.ts"],"names":[],"mappings":";;;AACA,4EAA8F;AAC9F,2CAA4D;AAE5D,MAAM,aAAa,GAAG,IAAI,6CAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AACnF,IAAI,MAAM,GAAwB,IAAI,CAAC;AAEvC,KAAK,UAAU,SAAS;IACtB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,8CAAqB,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,aAAc,EAAE,CAAC,CAAC,CAAC;IAC7G,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAa,CAAC,CAAC;IACpF,MAAM,GAAG,IAAI,qBAAY,CAAC;QACxB,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,gBAAgB,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,qBAAqB,EAAE,EAAE;KACtI,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,WAAiB;IACvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,GAAG,CAAC,cAAc,EAAE,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC;IAC9D,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IAChE,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,GAAG,WAAW,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;QACtF,GAAG,EAAE,CAAC;IACR,CAAC;IACD,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,OAAO,CAAC;IAC7B,IAAI,GAAG,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC;IAC5B,OAAO,OAAO,CAAC;AACjB,CAAC;AAEM,MAAM,OAAO,GAAmC,KAAK,EAAE,KAAK,EAAE,EAAE;IACrE,IAAI,KAAK,CAAC,aAAa,KAAK,gCAAgC;QAAE,OAAO,KAAK,CAAC;IAE3E,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,oBAAoB,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;IAC9G,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC;IAElC,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IAE7B,kDAAkD;IAClD,IAAI,WAA6B,CAAC;IAClC,IAAI,OAAO,GAAY,OAAO,CAAC;IAC/B,IAAI,cAAc,EAAE,CAAC;QACnB,WAAW,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,IAAI,WAAW,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YAC9D,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,SAAS,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;QAChC,KAAK,EAAE,EAAE,UAAU,EAAE;QACrB,MAAM,EAAE;YACN,UAAU;YACV,KAAK;YACL,MAAM,EAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACrC,IAAI,EAAE,UAAU;YAChB,GAAG,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;SAC7C;QACD,MAAM,EAAE;YACN,KAAK;SACN;KACF,CAAC,CAAC;IAEH,iFAAiF;IACjF,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;QAC3E,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;YAC/E,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;oBAC3B,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE;oBAC5E,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;oBACxE,MAAM,EAAE,EAAE;iBACX,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAlDW,QAAA,OAAO,WAkDlB"}

package/dist/lambda/pre-signup.d.ts

@@ -0,0 +1,3 @@
+import type { PreSignUpTriggerHandler } from "aws-lambda";
+export declare const handler: PreSignUpTriggerHandler;
+//# sourceMappingURL=pre-signup.d.ts.map

package/dist/lambda/pre-signup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-signup.d.ts","sourceRoot":"","sources":["../../src/lambda/pre-signup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAyB,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAOjF,eAAO,MAAM,OAAO,EAAE,uBA+BrB,CAAC"}

package/dist/lambda/pre-signup.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = void 0;
+const client_dynamodb_1 = require("@aws-sdk/client-dynamodb");
+const util_dynamodb_1 = require("@aws-sdk/util-dynamodb");
+const dynamo = new client_dynamodb_1.DynamoDBClient({ region: process.env.AWS_REGION });
+const TABLE = process.env.DYNAMODB_TABLE;
+const handler = async (event) => {
+    const invitationCode = (event.request.userAttributes["custom:invitationCode"] ||
+        event.request.clientMetadata?.invitationCode);
+    if (!invitationCode) {
+        throw new Error("An invitation code is required to register.");
+    }
+    // Check invitation code in DynamoDB
+    const result = await dynamo.send(new client_dynamodb_1.GetItemCommand({
+        TableName: TABLE,
+        Key: (0, util_dynamodb_1.marshall)({ pk: `invitations:${invitationCode}`, sk: "v" }),
+    }));
+    if (!result.Item) {
+        throw new Error("Invalid or expired invitation code.");
+    }
+    const invitation = (0, util_dynamodb_1.unmarshall)(result.Item);
+    if (invitation.used) {
+        throw new Error("This invitation code has already been used.");
+    }
+    if (invitation.ttl && invitation.ttl < Math.floor(Date.now() / 1000)) {
+        throw new Error("This invitation code has expired.");
+    }
+    // Auto-confirm and auto-verify for invited users
+    event.response.autoConfirmUser = false;
+    event.response.autoVerifyEmail = false;
+    return event;
+};
+exports.handler = handler;
+//# sourceMappingURL=pre-signup.js.map

package/dist/lambda/pre-signup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-signup.js","sourceRoot":"","sources":["../../src/lambda/pre-signup.ts"],"names":[],"mappings":";;;AACA,8DAA0E;AAC1E,0DAA8D;AAE9D,MAAM,MAAM,GAAG,IAAI,gCAAc,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AACtE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAe,CAAC;AAEnC,MAAM,OAAO,GAA4B,KAAK,EAAE,KAAK,EAAE,EAAE;IAC9D,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,uBAAuB,CAAC;QACrD,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,cAAc,CAAuB,CAAC;IAE5F,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,oCAAoC;IACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,gCAAc,CAAC;QAClD,SAAS,EAAE,KAAK;QAChB,GAAG,EAAE,IAAA,wBAAQ,EAAC,EAAE,EAAE,EAAE,eAAe,cAAc,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;KAChE,CAAC,CAAC,CAAC;IAEJ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,0BAAU,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,QAAQ,CAAC,eAAe,GAAG,KAAK,CAAC;IACvC,KAAK,CAAC,QAAQ,CAAC,eAAe,GAAG,KAAK,CAAC;IAEvC,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AA/BW,QAAA,OAAO,WA+BlB"}

package/dist/lambda/pre-token-generation.d.ts

@@ -0,0 +1,3 @@
+import type { PreTokenGenerationV2TriggerHandler } from "aws-lambda";
+export declare const handler: PreTokenGenerationV2TriggerHandler;
+//# sourceMappingURL=pre-token-generation.d.ts.map

package/dist/lambda/pre-token-generation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-token-generation.d.ts","sourceRoot":"","sources":["../../src/lambda/pre-token-generation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoC,kCAAkC,EAAE,MAAM,YAAY,CAAC;AA0EvG,eAAO,MAAM,OAAO,EAAE,kCAkBrB,CAAC"}

package/dist/lambda/pre-token-generation.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handler = void 0;
+const client_dynamodb_1 = require("@aws-sdk/client-dynamodb");
+const client_secrets_manager_1 = require("@aws-sdk/client-secrets-manager");
+const util_dynamodb_1 = require("@aws-sdk/util-dynamodb");
+const client_1 = require("@prisma/client");
+const dynamo = new client_dynamodb_1.DynamoDBClient({ region: process.env.AWS_REGION });
+const TABLE = process.env.DYNAMODB_TABLE;
+const CACHE_TTL_SECONDS = 300; // 5 minutes (S1.8 — reduced from 1 hour)
+const secretsClient = new client_secrets_manager_1.SecretsManagerClient({ region: process.env.AWS_REGION });
+let prisma = null;
+async function getPrisma() {
+    if (prisma)
+        return prisma;
+    const secret = await secretsClient.send(new client_secrets_manager_1.GetSecretValueCommand({ SecretId: process.env.DB_SECRET_ARN }));
+    const { username, password, host, port, dbname } = JSON.parse(secret.SecretString);
+    prisma = new client_1.PrismaClient({
+        datasources: { db: { url: `postgresql://${username}:${encodeURIComponent(password)}@${host}:${port}/${dbname}?connection_limit=1` } },
+    });
+    return prisma;
+}
+async function getClaims(cognitoSub) {
+    // Check DynamoDB cache first
+    const cacheResult = await dynamo.send(new client_dynamodb_1.GetItemCommand({
+        TableName: TABLE,
+        Key: (0, util_dynamodb_1.marshall)({ pk: `claims:${cognitoSub}`, sk: "meta" }),
+    }));
+    if (cacheResult.Item) {
+        const cached = (0, util_dynamodb_1.unmarshall)(cacheResult.Item);
+        if (!cached.ttl || cached.ttl > Math.floor(Date.now() / 1000)) {
+            return { userId: cached.userId, role: cached.role, handle: cached.handle };
+        }
+    }
+    // Cache miss — query RDS
+    const db = await getPrisma();
+    const user = await db.user.findUnique({
+        where: { cognitoSub },
+        select: { id: true, role: true, handle: true, suspendedAt: true },
+    });
+    if (!user)
+        return null;
+    // S1.8 — Check if user is suspended
+    if (user.suspendedAt && new Date(user.suspendedAt) > new Date()) {
+        console.warn(`User ${cognitoSub} is suspended until ${user.suspendedAt}`);
+        return null;
+    }
+    const claims = { userId: user.id, role: user.role, handle: user.handle ?? "" };
+    // Write to cache
+    await dynamo.send(new client_dynamodb_1.PutItemCommand({
+        TableName: TABLE,
+        Item: (0, util_dynamodb_1.marshall)({
+            pk: `claims:${cognitoSub}`,
+            sk: "meta",
+            ...claims,
+            ttl: Math.floor(Date.now() / 1000) + CACHE_TTL_SECONDS,
+        }),
+    }));
+    return claims;
+}
+const handler = async (event) => {
+    const claims = await getClaims(event.userName);
+    if (claims) {
+        event.response = {
+            claimsAndScopeOverrideDetails: {
+                accessTokenGeneration: {
+                    claimsToAddOrOverride: {
+                        "custom:userId": claims.userId,
+                        "custom:role": claims.role,
+                        "custom:handle": claims.handle,
+                    },
+                },
+            },
+        };
+    }
+    return event;
+};
+exports.handler = handler;
+//# sourceMappingURL=pre-token-generation.js.map

package/dist/lambda/pre-token-generation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-token-generation.js","sourceRoot":"","sources":["../../src/lambda/pre-token-generation.ts"],"names":[],"mappings":";;;AACA,8DAA0F;AAC1F,4EAA8F;AAC9F,0DAA8D;AAC9D,2CAA8C;AAE9C,MAAM,MAAM,GAAG,IAAI,gCAAc,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AACtE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAe,CAAC;AAC1C,MAAM,iBAAiB,GAAG,GAAG,CAAC,CAAC,yCAAyC;AAExE,MAAM,aAAa,GAAG,IAAI,6CAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AACnF,IAAI,MAAM,GAAwB,IAAI,CAAC;AAEvC,KAAK,UAAU,SAAS;IACtB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,8CAAqB,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,aAAc,EAAE,CAAC,CAAC,CAAC;IAC7G,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAa,CAAC,CAAC;IACpF,MAAM,GAAG,IAAI,qBAAY,CAAC;QACxB,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,gBAAgB,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,qBAAqB,EAAE,EAAE;KACtI,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD,KAAK,UAAU,SAAS,CAAC,UAAkB;IACzC,6BAA6B;IAC7B,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,gCAAc,CAAC;QACvD,SAAS,EAAE,KAAK;QAChB,GAAG,EAAE,IAAA,wBAAQ,EAAC,EAAE,EAAE,EAAE,UAAU,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;KAC1D,CAAC,CAAC,CAAC;IAEJ,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAA,0BAAU,EAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;QACpC,KAAK,EAAE,EAAE,UAAU,EAAE;QACrB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;KAClE,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,oCAAoC;IACpC,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,QAAQ,UAAU,uBAAuB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAiB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;IAE7F,iBAAiB;IACjB,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,gCAAc,CAAC;QACnC,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,IAAA,wBAAQ,EAAC;YACb,EAAE,EAAE,UAAU,UAAU,EAAE;YAC1B,EAAE,EAAE,MAAM;YACV,GAAG,MAAM;YACT,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,iBAAiB;SACvD,CAAC;KACH,CAAC,CAAC,CAAC;IAEJ,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,MAAM,OAAO,GAAuC,KAAK,EAAE,KAAK,EAAE,EAAE;IACzE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE/C,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,QAAQ,GAAG;YACf,6BAA6B,EAAE;gBAC7B,qBAAqB,EAAE;oBACrB,qBAAqB,EAAE;wBACrB,eAAe,EAAE,MAAM,CAAC,MAAM;wBAC9B,aAAa,EAAE,MAAM,CAAC,IAAI;wBAC1B,eAAe,EAAE,MAAM,CAAC,MAAM;qBAC/B;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAlBW,QAAA,OAAO,WAkBlB"}

package/dist/lambda/tools/check-health.d.ts

@@ -0,0 +1,6 @@
+export declare const handler: () => Promise<{
+    statusCode: number;
+    responseTimeMs: number;
+    body: unknown;
+}>;
+//# sourceMappingURL=check-health.d.ts.map

package/dist/lambda/tools/check-health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-health.d.ts","sourceRoot":"","sources":["../../../src/lambda/tools/check-health.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,OAAO;;;;EAmBnB,CAAC"}