@qpqjs/core 0.3.0 → 0.5.0

package/lib/commonjs/config/settings/storageDrive.d.ts

@@ -1,95 +0,0 @@
-import { CrossModuleOwner, QpqFunctionRuntime } from '../../types';
-import { QPQConfigAdvancedSettings, QPQConfigSetting } from '../QPQConfig';
-/**
- * Represents different storage tiers for a "storageDrive".
- */
-export declare enum StorageDriveTier {
-    /**
-     * Standard storage tier suitable for frequently accessed data.
-     * (Reference: AWS S3 Standard)
-     */
-    REGULAR = "REGULAR",
-    /**
-     * Storage tier optimized for data that is accessed less frequently,
-     * but requires rapid access when needed. Lower availability compared
-     * to the REGULAR tier.
-     * (Reference: AWS S3 Infrequent Access)
-     */
-    OCCASIONAL_ACCESS = "OCCASIONAL_ACCESS",
-    /**
-     * Optimized for infrequently accessed data stored in a single zone.
-     * Lower availability compared to OCCASIONAL_ACCESS tier.
-     * (Reference: AWS S3 One Zone-Infrequent Access)
-     */
-    SINGLE_ZONE_OCCASIONAL_ACCESS = "SINGLE_ZONE_OCCASIONAL_ACCESS",
-    /**
-     * Cold storage tier suitable for long-term archival. Data retrieval
-     * can take between minutes to hours. A cost-effective solution for
-     * archival purposes where prompt data retrieval isn't crucial.
-     * (Reference: AWS S3 Glacier)
-     */
-    COLD_STORAGE = "COLD_STORAGE",
-    /**
-     * Cold storage tier optimized for long-term archival, but with the advantage
-     * of immediate data access (in milliseconds). Ideal for data that might be
-     * accessed once or twice per quarter.
-     * (Reference: AWS S3 Glacier Instant Retrieval)
-     */
-    COLD_STORAGE_INSTANT_ACCESS = "COLD_STORAGE_INSTANT_ACCESS",
-    /**
-     * Extremely cold storage suitable for data that's rarely accessed.
-     * Data retrieval might take up to 12 hours. This offers the lowest
-     * storage cost at the expense of retrieval time.
-     * (Reference: AWS S3 Glacier Deep Archive)
-     */
-    DEEP_COLD_STORAGE = "DEEP_COLD_STORAGE",
-    /**
-     * Dynamic storage tier designed to auto-optimize costs by moving data
-     * between frequently and infrequently accessed tiers based on access patterns.
-     * Ideal for long-lived data with unpredictable access patterns.
-     * (Reference: AWS S3 Intelligent Tiering)
-     */
-    SMART_TIERING = "SMART_TIERING"
-}
-export type StorageDriveTransition = {
-    storageDriveTier: StorageDriveTier;
-} & ({
-    transitionAfterDays: number;
-    transitionDate?: never;
-} | {
-    transitionAfterDays?: never;
-    transitionDate: string;
-});
-export type StorageDriveLifecycleRule = {
-    prefix?: string;
-    transitions?: StorageDriveTransition[];
-    deleteAfterDays?: number;
-    fileSizeLessThan?: number;
-    fileSizeGreaterThan?: number;
-    enabled?: boolean;
-};
-export interface StorageDriveEvents {
-    create?: QpqFunctionRuntime;
-    delete?: QpqFunctionRuntime;
-}
-export interface QPQConfigAdvancedStorageDriveSettings extends QPQConfigAdvancedSettings {
-    copyPath?: string;
-    global?: boolean;
-    onEvent?: StorageDriveEvents;
-    lifecycleRules?: StorageDriveLifecycleRule[];
-    cryptoKeyName?: string;
-    scoped?: boolean;
-    lockedDown?: boolean;
-    owner?: CrossModuleOwner<'storageDriveName'>;
-}
-export interface StorageDriveQPQConfigSetting extends QPQConfigSetting {
-    storageDrive: string;
-    copyPath?: string;
-    global: boolean;
-    onEvent?: StorageDriveEvents;
-    lifecycleRules?: StorageDriveLifecycleRule[];
-    cryptoKeyName?: string;
-    scoped: boolean;
-    lockedDown: boolean;
-}
-export declare const defineStorageDrive: (storageDrive: string, options?: QPQConfigAdvancedStorageDriveSettings) => StorageDriveQPQConfigSetting;

package/lib/commonjs/config/settings/storageDrive.js

@@ -1,80 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.defineStorageDrive = exports.StorageDriveTier = void 0;
-const QPQConfig_1 = require("../QPQConfig");
-const crossModuleUtils_1 = require("../utils/crossModuleUtils");
-/**
- * Represents different storage tiers for a "storageDrive".
- */
-var StorageDriveTier;
-(function (StorageDriveTier) {
-    /**
-     * Standard storage tier suitable for frequently accessed data.
-     * (Reference: AWS S3 Standard)
-     */
-    StorageDriveTier["REGULAR"] = "REGULAR";
-    /**
-     * Storage tier optimized for data that is accessed less frequently,
-     * but requires rapid access when needed. Lower availability compared
-     * to the REGULAR tier.
-     * (Reference: AWS S3 Infrequent Access)
-     */
-    StorageDriveTier["OCCASIONAL_ACCESS"] = "OCCASIONAL_ACCESS";
-    /**
-     * Optimized for infrequently accessed data stored in a single zone.
-     * Lower availability compared to OCCASIONAL_ACCESS tier.
-     * (Reference: AWS S3 One Zone-Infrequent Access)
-     */
-    StorageDriveTier["SINGLE_ZONE_OCCASIONAL_ACCESS"] = "SINGLE_ZONE_OCCASIONAL_ACCESS";
-    /**
-     * Cold storage tier suitable for long-term archival. Data retrieval
-     * can take between minutes to hours. A cost-effective solution for
-     * archival purposes where prompt data retrieval isn't crucial.
-     * (Reference: AWS S3 Glacier)
-     */
-    StorageDriveTier["COLD_STORAGE"] = "COLD_STORAGE";
-    /**
-     * Cold storage tier optimized for long-term archival, but with the advantage
-     * of immediate data access (in milliseconds). Ideal for data that might be
-     * accessed once or twice per quarter.
-     * (Reference: AWS S3 Glacier Instant Retrieval)
-     */
-    StorageDriveTier["COLD_STORAGE_INSTANT_ACCESS"] = "COLD_STORAGE_INSTANT_ACCESS";
-    /**
-     * Extremely cold storage suitable for data that's rarely accessed.
-     * Data retrieval might take up to 12 hours. This offers the lowest
-     * storage cost at the expense of retrieval time.
-     * (Reference: AWS S3 Glacier Deep Archive)
-     */
-    StorageDriveTier["DEEP_COLD_STORAGE"] = "DEEP_COLD_STORAGE";
-    /**
-     * Dynamic storage tier designed to auto-optimize costs by moving data
-     * between frequently and infrequently accessed tiers based on access patterns.
-     * Ideal for long-lived data with unpredictable access patterns.
-     * (Reference: AWS S3 Intelligent Tiering)
-     */
-    StorageDriveTier["SMART_TIERING"] = "SMART_TIERING";
-})(StorageDriveTier || (exports.StorageDriveTier = StorageDriveTier = {}));
-const defineStorageDrive = (storageDrive, options) => {
-    var _a, _b, _c;
-    // copyPath content is deployed straight to the bucket root, outside every
-    // scope, so it can never coexist with a scoped drive.
-    if ((options === null || options === void 0 ? void 0 : options.scoped) && options.copyPath) {
-        throw new Error(`Storage drive '${storageDrive}' cannot be both scoped and have a copyPath`);
-    }
-    return {
-        configSettingType: QPQConfig_1.QPQCoreConfigSettingType.storageDrive,
-        uniqueKey: storageDrive,
-        storageDrive,
-        copyPath: options === null || options === void 0 ? void 0 : options.copyPath,
-        global: (_a = options === null || options === void 0 ? void 0 : options.global) !== null && _a !== void 0 ? _a : false,
-        onEvent: options === null || options === void 0 ? void 0 : options.onEvent,
-        lifecycleRules: options === null || options === void 0 ? void 0 : options.lifecycleRules,
-        cryptoKeyName: options === null || options === void 0 ? void 0 : options.cryptoKeyName,
-        scoped: (_b = options === null || options === void 0 ? void 0 : options.scoped) !== null && _b !== void 0 ? _b : false,
-        lockedDown: (_c = options === null || options === void 0 ? void 0 : options.lockedDown) !== null && _c !== void 0 ? _c : false,
-        owner: (0, crossModuleUtils_1.convertCrossModuleOwnerToGenericResourceNameOverride)(options === null || options === void 0 ? void 0 : options.owner),
-    };
-};
-exports.defineStorageDrive = defineStorageDrive;
-//# sourceMappingURL=storageDrive.js.map

package/lib/commonjs/config/settings/storageDrive.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"storageDrive.js","sourceRoot":"","sources":["../../../../src/config/settings/storageDrive.ts"],"names":[],"mappings":";;;AACA,4CAAqG;AACrG,gEAAiG;AAEjG;;GAEG;AACH,IAAY,gBAqDX;AArDD,WAAY,gBAAgB;IAC1B;;;OAGG;IACH,uCAAmB,CAAA;IAEnB;;;;;OAKG;IACH,2DAAuC,CAAA;IAEvC;;;;OAIG;IACH,mFAA+D,CAAA;IAE/D;;;;;OAKG;IACH,iDAA6B,CAAA;IAE7B;;;;;OAKG;IACH,+EAA2D,CAAA;IAE3D;;;;;OAKG;IACH,2DAAuC,CAAA;IAEvC;;;;;OAKG;IACH,mDAA+B,CAAA;AACjC,CAAC,EArDW,gBAAgB,gCAAhB,gBAAgB,QAqD3B;AAoEM,MAAM,kBAAkB,GAAG,CAAC,YAAoB,EAAE,OAA+C,EAAgC,EAAE;;IACxI,0EAA0E;IAC1E,sDAAsD;IACtD,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,kBAAkB,YAAY,6CAA6C,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO;QACL,iBAAiB,EAAE,oCAAwB,CAAC,YAAY;QACxD,SAAS,EAAE,YAAY;QAEvB,YAAY;QAEZ,QAAQ,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,QAAQ;QAE3B,MAAM,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,mCAAI,KAAK;QAEhC,OAAO,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO;QAEzB,cAAc,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc;QAEvC,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;QACrC,MAAM,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,mCAAI,KAAK;QAChC,UAAU,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,mCAAI,KAAK;QAExC,KAAK,EAAE,IAAA,uEAAoD,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAC;KAC5E,CAAC;AACJ,CAAC,CAAC;AA3BW,QAAA,kBAAkB,sBA2B7B","sourcesContent":["import { CrossModuleOwner, QpqFunctionRuntime } from '../../types';\nimport { QPQConfigAdvancedSettings, QPQConfigSetting, QPQCoreConfigSettingType } from '../QPQConfig';\nimport { convertCrossModuleOwnerToGenericResourceNameOverride } from '../utils/crossModuleUtils';\n\n/**\n * Represents different storage tiers for a \"storageDrive\".\n */\nexport enum StorageDriveTier {\n  /**\n   * Standard storage tier suitable for frequently accessed data.\n   * (Reference: AWS S3 Standard)\n   */\n  REGULAR = 'REGULAR',\n\n  /**\n   * Storage tier optimized for data that is accessed less frequently,\n   * but requires rapid access when needed. Lower availability compared\n   * to the REGULAR tier.\n   * (Reference: AWS S3 Infrequent Access)\n   */\n  OCCASIONAL_ACCESS = 'OCCASIONAL_ACCESS',\n\n  /**\n   * Optimized for infrequently accessed data stored in a single zone.\n   * Lower availability compared to OCCASIONAL_ACCESS tier.\n   * (Reference: AWS S3 One Zone-Infrequent Access)\n   */\n  SINGLE_ZONE_OCCASIONAL_ACCESS = 'SINGLE_ZONE_OCCASIONAL_ACCESS',\n\n  /**\n   * Cold storage tier suitable for long-term archival. Data retrieval\n   * can take between minutes to hours. A cost-effective solution for\n   * archival purposes where prompt data retrieval isn't crucial.\n   * (Reference: AWS S3 Glacier)\n   */\n  COLD_STORAGE = 'COLD_STORAGE',\n\n  /**\n   * Cold storage tier optimized for long-term archival, but with the advantage\n   * of immediate data access (in milliseconds). Ideal for data that might be\n   * accessed once or twice per quarter.\n   * (Reference: AWS S3 Glacier Instant Retrieval)\n   */\n  COLD_STORAGE_INSTANT_ACCESS = 'COLD_STORAGE_INSTANT_ACCESS',\n\n  /**\n   * Extremely cold storage suitable for data that's rarely accessed.\n   * Data retrieval might take up to 12 hours. This offers the lowest\n   * storage cost at the expense of retrieval time.\n   * (Reference: AWS S3 Glacier Deep Archive)\n   */\n  DEEP_COLD_STORAGE = 'DEEP_COLD_STORAGE',\n\n  /**\n   * Dynamic storage tier designed to auto-optimize costs by moving data\n   * between frequently and infrequently accessed tiers based on access patterns.\n   * Ideal for long-lived data with unpredictable access patterns.\n   * (Reference: AWS S3 Intelligent Tiering)\n   */\n  SMART_TIERING = 'SMART_TIERING',\n}\n\nexport type StorageDriveTransition = { storageDriveTier: StorageDriveTier } & (\n  | {\n      transitionAfterDays: number;\n      transitionDate?: never;\n    }\n  | {\n      transitionAfterDays?: never;\n      transitionDate: string;\n    }\n);\n\nexport type StorageDriveLifecycleRule = {\n  prefix?: string;\n  transitions?: StorageDriveTransition[];\n  deleteAfterDays?: number;\n  fileSizeLessThan?: number;\n  fileSizeGreaterThan?: number;\n  enabled?: boolean;\n\n  // TODO: If we ever add versions\n  // add noncurrentVersionExpiration / noncurrentVersionTransitions support\n};\n\nexport interface StorageDriveEvents {\n  create?: QpqFunctionRuntime;\n  delete?: QpqFunctionRuntime;\n}\n\nexport interface QPQConfigAdvancedStorageDriveSettings extends QPQConfigAdvancedSettings {\n  copyPath?: string;\n  global?: boolean;\n\n  onEvent?: StorageDriveEvents;\n\n  lifecycleRules?: StorageDriveLifecycleRule[];\n\n  // Encrypt the drive with the named defineCryptoKey instead of the provider's own managed\n  // encryption, which always applies. The key must be declared in the same config, owned or\n  // foreign; a foreign key's owning service must be deployed first.\n  cryptoKeyName?: string;\n\n  // Every file action on this drive must carry a scope; an unscoped call is refused\n  // rather than written to the bare path. Incompatible with copyPath.\n  scoped?: boolean;\n\n  // Only the owning service's runtime role may read objects. Every other principal in the\n  // account, humans included, is denied at the bucket; writes and listing are unaffected.\n  lockedDown?: boolean;\n\n  owner?: CrossModuleOwner<'storageDriveName'>;\n}\n\nexport interface StorageDriveQPQConfigSetting extends QPQConfigSetting {\n  storageDrive: string;\n  copyPath?: string;\n  global: boolean;\n\n  onEvent?: StorageDriveEvents;\n\n  lifecycleRules?: StorageDriveLifecycleRule[];\n\n  cryptoKeyName?: string;\n  scoped: boolean;\n  lockedDown: boolean;\n}\n\nexport const defineStorageDrive = (storageDrive: string, options?: QPQConfigAdvancedStorageDriveSettings): StorageDriveQPQConfigSetting => {\n  // copyPath content is deployed straight to the bucket root, outside every\n  // scope, so it can never coexist with a scoped drive.\n  if (options?.scoped && options.copyPath) {\n    throw new Error(`Storage drive '${storageDrive}' cannot be both scoped and have a copyPath`);\n  }\n\n  return {\n    configSettingType: QPQCoreConfigSettingType.storageDrive,\n    uniqueKey: storageDrive,\n\n    storageDrive,\n\n    copyPath: options?.copyPath,\n\n    global: options?.global ?? false,\n\n    onEvent: options?.onEvent,\n\n    lifecycleRules: options?.lifecycleRules,\n\n    cryptoKeyName: options?.cryptoKeyName,\n    scoped: options?.scoped ?? false,\n    lockedDown: options?.lockedDown ?? false,\n\n    owner: convertCrossModuleOwnerToGenericResourceNameOverride(options?.owner),\n  };\n};\n"]}

package/lib/commonjs/config/settings/userDirectory.d.ts

@@ -1,40 +0,0 @@
-import { CrossModuleOwner } from '../../types';
-import { QPQConfigAdvancedSettings, QPQConfigSetting } from '../QPQConfig';
-import { CustomAuthRuntime, EmailTemplates } from './emailTemplates';
-export type AuthDirectoryDnsRecord = {
-    subdomain: string;
-};
-export declare enum UserDirectoryMfaMode {
-    off = "off",
-    optional = "optional",
-    required = "required"
-}
-export declare enum UserDirectoryMfaSecondFactor {
-    totp = "totp"
-}
-export interface UserDirectoryMfaSettings {
-    mode: UserDirectoryMfaMode;
-    secondFactors?: UserDirectoryMfaSecondFactor[];
-}
-export interface QPQConfigAdvancedUserDirectorySettings extends QPQConfigAdvancedSettings {
-    phoneRequired?: boolean;
-    selfSignUpEnabled?: boolean;
-    emailTemplates?: EmailTemplates;
-    owner?: CrossModuleOwner<'userDirectoryName'>;
-    dnsRecord?: AuthDirectoryDnsRecord;
-    customAuthRuntime?: CustomAuthRuntime;
-    mfa?: UserDirectoryMfaSettings;
-    accessTokenValidityMinutes?: number;
-}
-export interface UserDirectoryQPQConfigSetting extends QPQConfigSetting {
-    name: string;
-    phoneRequired: boolean;
-    selfSignUpEnabled: boolean;
-    emailTemplates: EmailTemplates;
-    owner?: CrossModuleOwner;
-    dnsRecord?: AuthDirectoryDnsRecord;
-    customAuthRuntime?: CustomAuthRuntime;
-    mfa: UserDirectoryMfaSettings;
-    accessTokenValidityMinutes?: number;
-}
-export declare const defineUserDirectory: (name: string, options?: QPQConfigAdvancedUserDirectorySettings) => UserDirectoryQPQConfigSetting;

package/lib/commonjs/config/settings/userDirectory.js

@@ -1,41 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.defineUserDirectory = exports.UserDirectoryMfaSecondFactor = exports.UserDirectoryMfaMode = void 0;
-const QPQConfig_1 = require("../QPQConfig");
-const crossModuleUtils_1 = require("../utils/crossModuleUtils");
-var UserDirectoryMfaMode;
-(function (UserDirectoryMfaMode) {
-    UserDirectoryMfaMode["off"] = "off";
-    UserDirectoryMfaMode["optional"] = "optional";
-    UserDirectoryMfaMode["required"] = "required";
-})(UserDirectoryMfaMode || (exports.UserDirectoryMfaMode = UserDirectoryMfaMode = {}));
-var UserDirectoryMfaSecondFactor;
-(function (UserDirectoryMfaSecondFactor) {
-    UserDirectoryMfaSecondFactor["totp"] = "totp";
-    // sms = 'sms', // future — additionally needs phone + SNS role infra.
-})(UserDirectoryMfaSecondFactor || (exports.UserDirectoryMfaSecondFactor = UserDirectoryMfaSecondFactor = {}));
-const defineUserDirectory = (name, options) => {
-    var _a, _b, _c, _d, _e, _f, _g, _h;
-    return ({
-        configSettingType: QPQConfig_1.QPQCoreConfigSettingType.userDirectory,
-        uniqueKey: name,
-        name,
-        phoneRequired: (options === null || options === void 0 ? void 0 : options.phoneRequired) || false,
-        selfSignUpEnabled: (_a = options === null || options === void 0 ? void 0 : options.selfSignUpEnabled) !== null && _a !== void 0 ? _a : false,
-        emailTemplates: {
-            verifyEmail: (_b = options === null || options === void 0 ? void 0 : options.emailTemplates) === null || _b === void 0 ? void 0 : _b.verifyEmail,
-            resetPassword: (_c = options === null || options === void 0 ? void 0 : options.emailTemplates) === null || _c === void 0 ? void 0 : _c.resetPassword,
-            resetPasswordAdmin: (_d = options === null || options === void 0 ? void 0 : options.emailTemplates) === null || _d === void 0 ? void 0 : _d.resetPasswordAdmin,
-        },
-        dnsRecord: options === null || options === void 0 ? void 0 : options.dnsRecord,
-        customAuthRuntime: options === null || options === void 0 ? void 0 : options.customAuthRuntime,
-        accessTokenValidityMinutes: options === null || options === void 0 ? void 0 : options.accessTokenValidityMinutes,
-        mfa: {
-            mode: (_f = (_e = options === null || options === void 0 ? void 0 : options.mfa) === null || _e === void 0 ? void 0 : _e.mode) !== null && _f !== void 0 ? _f : UserDirectoryMfaMode.off,
-            secondFactors: ((_h = (_g = options === null || options === void 0 ? void 0 : options.mfa) === null || _g === void 0 ? void 0 : _g.secondFactors) === null || _h === void 0 ? void 0 : _h.length) ? options.mfa.secondFactors : [UserDirectoryMfaSecondFactor.totp],
-        },
-        owner: (0, crossModuleUtils_1.convertCrossModuleOwnerToGenericResourceNameOverride)(options === null || options === void 0 ? void 0 : options.owner),
-    });
-};
-exports.defineUserDirectory = defineUserDirectory;
-//# sourceMappingURL=userDirectory.js.map

package/lib/commonjs/config/settings/userDirectory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"userDirectory.js","sourceRoot":"","sources":["../../../../src/config/settings/userDirectory.ts"],"names":[],"mappings":";;;AACA,4CAAqG;AACrG,gEAAiG;AAOjG,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,mCAAW,CAAA;IACX,6CAAqB,CAAA;IACrB,6CAAqB,CAAA;AACvB,CAAC,EAJW,oBAAoB,oCAApB,oBAAoB,QAI/B;AAED,IAAY,4BAGX;AAHD,WAAY,4BAA4B;IACtC,6CAAa,CAAA;IACb,sEAAsE;AACxE,CAAC,EAHW,4BAA4B,4CAA5B,4BAA4B,QAGvC;AAqDM,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAE,OAAgD,EAAiC,EAAE;;IAAC,OAAA,CAAC;QACrI,iBAAiB,EAAE,oCAAwB,CAAC,aAAa;QACzD,SAAS,EAAE,IAAI;QAEf,IAAI;QAEJ,aAAa,EAAE,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa,KAAI,KAAK;QAE9C,iBAAiB,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,iBAAiB,mCAAI,KAAK;QAEtD,cAAc,EAAE;YACd,WAAW,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,WAAW;YACjD,aAAa,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,aAAa;YACrD,kBAAkB,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,kBAAkB;SAChE;QAED,SAAS,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS;QAC7B,iBAAiB,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,iBAAiB;QAE7C,0BAA0B,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,0BAA0B;QAE/D,GAAG,EAAE;YACH,IAAI,EAAE,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,IAAI,mCAAI,oBAAoB,CAAC,GAAG;YACpD,aAAa,EAAE,CAAA,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,aAAa,0CAAE,MAAM,EAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,IAAI,CAAC;SACrH;QAED,KAAK,EAAE,IAAA,uEAAoD,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAC;KAC5E,CAAC,CAAA;CAAA,CAAC;AA3BU,QAAA,mBAAmB,uBA2B7B","sourcesContent":["import { CrossModuleOwner } from '../../types';\nimport { QPQConfigAdvancedSettings, QPQConfigSetting, QPQCoreConfigSettingType } from '../QPQConfig';\nimport { convertCrossModuleOwnerToGenericResourceNameOverride } from '../utils/crossModuleUtils';\nimport { CustomAuthRuntime, EmailTemplates } from './emailTemplates';\n\nexport type AuthDirectoryDnsRecord = {\n  subdomain: string;\n};\n\nexport enum UserDirectoryMfaMode {\n  off = 'off',\n  optional = 'optional',\n  required = 'required',\n}\n\nexport enum UserDirectoryMfaSecondFactor {\n  totp = 'totp',\n  // sms = 'sms', // future — additionally needs phone + SNS role infra.\n}\n\nexport interface UserDirectoryMfaSettings {\n  mode: UserDirectoryMfaMode;\n\n  // Enabled second factors. Defaults to [totp] when omitted.\n  secondFactors?: UserDirectoryMfaSecondFactor[];\n}\n\nexport interface QPQConfigAdvancedUserDirectorySettings extends QPQConfigAdvancedSettings {\n  phoneRequired?: boolean;\n\n  selfSignUpEnabled?: boolean;\n\n  emailTemplates?: EmailTemplates;\n\n  owner?: CrossModuleOwner<'userDirectoryName'>;\n\n  dnsRecord?: AuthDirectoryDnsRecord;\n\n  customAuthRuntime?: CustomAuthRuntime;\n\n  mfa?: UserDirectoryMfaSettings;\n\n  // Access/ID token (JWT) lifetime in minutes. Shorter = a smaller window in which a\n  // revoked session's still-valid access token keeps working (access tokens are stateless\n  // and can't be revoked before expiry). Cognito allows 5–1440; omitted → Cognito default\n  // (60).\n  //\n  // Generally web apps should refresh in the few mins so this should be > 5.\n  accessTokenValidityMinutes?: number;\n}\n\nexport interface UserDirectoryQPQConfigSetting extends QPQConfigSetting {\n  name: string;\n\n  phoneRequired: boolean;\n\n  selfSignUpEnabled: boolean;\n\n  emailTemplates: EmailTemplates;\n\n  owner?: CrossModuleOwner;\n\n  dnsRecord?: AuthDirectoryDnsRecord;\n\n  customAuthRuntime?: CustomAuthRuntime;\n\n  mfa: UserDirectoryMfaSettings;\n\n  accessTokenValidityMinutes?: number;\n}\n\nexport const defineUserDirectory = (name: string, options?: QPQConfigAdvancedUserDirectorySettings): UserDirectoryQPQConfigSetting => ({\n  configSettingType: QPQCoreConfigSettingType.userDirectory,\n  uniqueKey: name,\n\n  name,\n\n  phoneRequired: options?.phoneRequired || false,\n\n  selfSignUpEnabled: options?.selfSignUpEnabled ?? false,\n\n  emailTemplates: {\n    verifyEmail: options?.emailTemplates?.verifyEmail,\n    resetPassword: options?.emailTemplates?.resetPassword,\n    resetPasswordAdmin: options?.emailTemplates?.resetPasswordAdmin,\n  },\n\n  dnsRecord: options?.dnsRecord,\n  customAuthRuntime: options?.customAuthRuntime,\n\n  accessTokenValidityMinutes: options?.accessTokenValidityMinutes,\n\n  mfa: {\n    mode: options?.mfa?.mode ?? UserDirectoryMfaMode.off,\n    secondFactors: options?.mfa?.secondFactors?.length ? options.mfa.secondFactors : [UserDirectoryMfaSecondFactor.totp],\n  },\n\n  owner: convertCrossModuleOwnerToGenericResourceNameOverride(options?.owner),\n});\n"]}

package/lib/commonjs/config/settings/userScriptRunner.d.ts

@@ -1,20 +0,0 @@
-import { QPQConfigSetting } from '../QPQConfig';
-export interface UserScriptRunnerQPQConfigSetting extends QPQConfigSetting {
-    timeoutInSeconds: number;
-    memoryInMiB: number;
-    maxConcurrentExecutions?: number;
-    virtualNetworkName?: string;
-}
-export type UserScriptRunnerOptions = {
-    timeoutInSeconds?: number;
-    memoryInMiB?: number;
-    maxConcurrentExecutions?: number;
-    virtualNetworkName?: string;
-};
-/**
- * Declares the sandbox that runs this service's user scripts: a separate function with its
- * own role that can write logs and nothing else, and only the pure action processors (date,
- * guid, log, math, error). `askUserScriptExecute` on this service invokes it; a service that
- * executes scripts without declaring one fails at synth. One per service.
- */
-export declare const defineUserScriptRunner: (options?: UserScriptRunnerOptions) => UserScriptRunnerQPQConfigSetting;

package/lib/commonjs/config/settings/userScriptRunner.js

@@ -1,35 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.defineUserScriptRunner = void 0;
-const QPQConfig_1 = require("../QPQConfig");
-/** Lambda's own ceiling on a function timeout. */
-const MAX_TIMEOUT_IN_SECONDS = 15 * 60;
-const MIN_MEMORY_IN_MIB = 128;
-const MAX_MEMORY_IN_MIB = 10240;
-/**
- * Declares the sandbox that runs this service's user scripts: a separate function with its
- * own role that can write logs and nothing else, and only the pure action processors (date,
- * guid, log, math, error). `askUserScriptExecute` on this service invokes it; a service that
- * executes scripts without declaring one fails at synth. One per service.
- */
-const defineUserScriptRunner = (options = {}) => {
-    var _a, _b;
-    const timeoutInSeconds = (_a = options.timeoutInSeconds) !== null && _a !== void 0 ? _a : 60;
-    const memoryInMiB = (_b = options.memoryInMiB) !== null && _b !== void 0 ? _b : 512;
-    if (!Number.isInteger(timeoutInSeconds) || timeoutInSeconds < 1 || timeoutInSeconds > MAX_TIMEOUT_IN_SECONDS) {
-        throw new Error(`defineUserScriptRunner: timeoutInSeconds [${timeoutInSeconds}] must be a whole number from 1 to ${MAX_TIMEOUT_IN_SECONDS}`);
-    }
-    if (!Number.isInteger(memoryInMiB) || memoryInMiB < MIN_MEMORY_IN_MIB || memoryInMiB > MAX_MEMORY_IN_MIB) {
-        throw new Error(`defineUserScriptRunner: memoryInMiB [${memoryInMiB}] must be a whole number from ${MIN_MEMORY_IN_MIB} to ${MAX_MEMORY_IN_MIB}`);
-    }
-    return {
-        configSettingType: QPQConfig_1.QPQCoreConfigSettingType.userScriptRunner,
-        uniqueKey: 'UserScriptRunner',
-        timeoutInSeconds,
-        memoryInMiB,
-        maxConcurrentExecutions: options.maxConcurrentExecutions,
-        virtualNetworkName: options.virtualNetworkName,
-    };
-};
-exports.defineUserScriptRunner = defineUserScriptRunner;
-//# sourceMappingURL=userScriptRunner.js.map

package/lib/commonjs/config/settings/userScriptRunner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"userScriptRunner.js","sourceRoot":"","sources":["../../../../src/config/settings/userScriptRunner.ts"],"names":[],"mappings":";;;AAAA,4CAA0E;AAE1E,kDAAkD;AAClD,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,CAAC;AACvC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAkBhC;;;;;GAKG;AACI,MAAM,sBAAsB,GAAG,CAAC,UAAmC,EAAE,EAAoC,EAAE;;IAChH,MAAM,gBAAgB,GAAG,MAAA,OAAO,CAAC,gBAAgB,mCAAI,EAAE,CAAC;IACxD,MAAM,WAAW,GAAG,MAAA,OAAO,CAAC,WAAW,mCAAI,GAAG,CAAC;IAE/C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,IAAI,gBAAgB,GAAG,sBAAsB,EAAE,CAAC;QAC7G,MAAM,IAAI,KAAK,CAAC,6CAA6C,gBAAgB,sCAAsC,sBAAsB,EAAE,CAAC,CAAC;IAC/I,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,iBAAiB,IAAI,WAAW,GAAG,iBAAiB,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CAAC,wCAAwC,WAAW,iCAAiC,iBAAiB,OAAO,iBAAiB,EAAE,CAAC,CAAC;IACnJ,CAAC;IAED,OAAO;QACL,iBAAiB,EAAE,oCAAwB,CAAC,gBAAgB;QAC5D,SAAS,EAAE,kBAAkB;QAE7B,gBAAgB;QAChB,WAAW;QACX,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;QACxD,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;KAC/C,CAAC;AACJ,CAAC,CAAC;AApBW,QAAA,sBAAsB,0BAoBjC","sourcesContent":["import { QPQConfigSetting, QPQCoreConfigSettingType } from '../QPQConfig';\n\n/** Lambda's own ceiling on a function timeout. */\nconst MAX_TIMEOUT_IN_SECONDS = 15 * 60;\nconst MIN_MEMORY_IN_MIB = 128;\nconst MAX_MEMORY_IN_MIB = 10240;\n\nexport interface UserScriptRunnerQPQConfigSetting extends QPQConfigSetting {\n  timeoutInSeconds: number;\n  memoryInMiB: number;\n  // Cap on concurrent script executions, carved out of the account's shared pool.\n  maxConcurrentExecutions?: number;\n  // Put the runner in this virtual network (one with no route out) to deny scripts the internet.\n  virtualNetworkName?: string;\n}\n\nexport type UserScriptRunnerOptions = {\n  timeoutInSeconds?: number;\n  memoryInMiB?: number;\n  maxConcurrentExecutions?: number;\n  virtualNetworkName?: string;\n};\n\n/**\n * Declares the sandbox that runs this service's user scripts: a separate function with its\n * own role that can write logs and nothing else, and only the pure action processors (date,\n * guid, log, math, error). `askUserScriptExecute` on this service invokes it; a service that\n * executes scripts without declaring one fails at synth. One per service.\n */\nexport const defineUserScriptRunner = (options: UserScriptRunnerOptions = {}): UserScriptRunnerQPQConfigSetting => {\n  const timeoutInSeconds = options.timeoutInSeconds ?? 60;\n  const memoryInMiB = options.memoryInMiB ?? 512;\n\n  if (!Number.isInteger(timeoutInSeconds) || timeoutInSeconds < 1 || timeoutInSeconds > MAX_TIMEOUT_IN_SECONDS) {\n    throw new Error(`defineUserScriptRunner: timeoutInSeconds [${timeoutInSeconds}] must be a whole number from 1 to ${MAX_TIMEOUT_IN_SECONDS}`);\n  }\n  if (!Number.isInteger(memoryInMiB) || memoryInMiB < MIN_MEMORY_IN_MIB || memoryInMiB > MAX_MEMORY_IN_MIB) {\n    throw new Error(`defineUserScriptRunner: memoryInMiB [${memoryInMiB}] must be a whole number from ${MIN_MEMORY_IN_MIB} to ${MAX_MEMORY_IN_MIB}`);\n  }\n\n  return {\n    configSettingType: QPQCoreConfigSettingType.userScriptRunner,\n    uniqueKey: 'UserScriptRunner',\n\n    timeoutInSeconds,\n    memoryInMiB,\n    maxConcurrentExecutions: options.maxConcurrentExecutions,\n    virtualNetworkName: options.virtualNetworkName,\n  };\n};\n"]}

package/lib/commonjs/logic/actionLogic.d.ts

@@ -1,15 +0,0 @@
-import { ActionProcessorResult, EitherActionResult } from '../types/Action';
-import { ErrorTypeEnum } from '../types/ErrorTypeEnum';
-import { QPQError } from '../types/ErrorTypeEnum';
-export declare const getSuccessfulEitherActionResult: <T>(result: T) => EitherActionResult<T>;
-export declare const getUnsuccessfulEitherActionResult: (error: QPQError) => EitherActionResult<any>;
-export declare const actionResultError: (errorType: ErrorTypeEnum | string, errorText: string, errorStack?: string) => ActionProcessorResult<any>;
-export declare const actionResult: <T>(result: T) => ActionProcessorResult<T>;
-export declare const isErroredActionResult: <T>(actionResult: ActionProcessorResult<T>) => boolean;
-export declare const resolveActionResult: <T>(actionResult: ActionProcessorResult<T>) => NonNullable<T>;
-export declare const resolveActionResultError: <T>(actionResult: ActionProcessorResult<T>) => QPQError;
-type ErrorMap = {
-    [key: string]: (error: Error) => ActionProcessorResult<any>;
-};
-export declare const actionResultErrorFromCaughtError: (error: unknown, errorMap: ErrorMap) => ReturnType<typeof actionResultError>;
-export {};

package/lib/commonjs/logic/actionLogic.js

@@ -1,69 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.actionResultErrorFromCaughtError = exports.resolveActionResultError = exports.resolveActionResult = exports.isErroredActionResult = exports.actionResult = exports.actionResultError = exports.getUnsuccessfulEitherActionResult = exports.getSuccessfulEitherActionResult = void 0;
-const ErrorTypeEnum_1 = require("../types/ErrorTypeEnum");
-const transientErrorNames_1 = require("./transientErrorNames");
-const getSuccessfulEitherActionResult = (result) => ({
-    success: true,
-    result,
-});
-exports.getSuccessfulEitherActionResult = getSuccessfulEitherActionResult;
-const getUnsuccessfulEitherActionResult = (error) => ({
-    success: false,
-    error: error,
-});
-exports.getUnsuccessfulEitherActionResult = getUnsuccessfulEitherActionResult;
-const actionResultError = (errorType, errorText, errorStack) => {
-    return [undefined, { errorType, errorText, errorStack }];
-};
-exports.actionResultError = actionResultError;
-const actionResult = (result) => {
-    return [result];
-};
-exports.actionResult = actionResult;
-const isErroredActionResult = (actionResult) => {
-    return !actionResult || !!actionResult[1];
-};
-exports.isErroredActionResult = isErroredActionResult;
-const resolveActionResult = (actionResult) => {
-    // We say that it has to have a value, otherwise don't call this function
-    // use isErroredActionResult to check
-    return actionResult[0];
-};
-exports.resolveActionResult = resolveActionResult;
-const resolveActionResultError = (actionResult) => {
-    if (!actionResult) {
-        return {
-            errorText: `Action processor returned no result [${JSON.stringify(actionResult)}]`,
-            errorType: ErrorTypeEnum_1.ErrorTypeEnum.GenericError,
-        };
-    }
-    return actionResult[1];
-};
-exports.resolveActionResultError = resolveActionResultError;
-const actionResultErrorFromCaughtError = (error, errorMap) => {
-    if (error instanceof Error) {
-        const errorCode = error.code;
-        const errorName = error.name;
-        // Prefer the OS/runtime code (node fs: EACCES, ENOENT...), then fall back
-        // to the error name (AWS SDK: AccessDenied, NoSuchBucket...).
-        const handler = (errorCode && errorMap[errorCode]) || errorMap[errorName];
-        if (handler) {
-            return handler(error);
-        }
-        const unmappedKey = errorCode !== null && errorCode !== void 0 ? errorCode : errorName;
-        // TODO: This is really shit... this does not belong here.
-        //
-        // Classify throttles and transient service failures BEFORE the generic fallback, so a caller can tell
-        // "the service is busy" from "this request is wrong" without matching on error text. Without this they
-        // are indistinguishable GenericErrors, and a caller that records failures durably writes a permanent
-        // failure for something that would have succeeded on the next attempt.
-        if ((0, transientErrorNames_1.isTransientErrorName)(errorCode) || (0, transientErrorNames_1.isTransientErrorName)(errorName)) {
-            return (0, exports.actionResultError)(ErrorTypeEnum_1.ErrorTypeEnum.OutOfResources, `A transient error occurred, retry [${unmappedKey}].`);
-        }
-        return (0, exports.actionResultError)(ErrorTypeEnum_1.ErrorTypeEnum.GenericError, `An unexpected error occurred [${unmappedKey}].`);
-    }
-    return (0, exports.actionResultError)(ErrorTypeEnum_1.ErrorTypeEnum.GenericError, 'An unknown error occurred.');
-};
-exports.actionResultErrorFromCaughtError = actionResultErrorFromCaughtError;
-//# sourceMappingURL=actionLogic.js.map

package/lib/commonjs/logic/actionLogic.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"actionLogic.js","sourceRoot":"","sources":["../../../src/logic/actionLogic.ts"],"names":[],"mappings":";;;AACA,0DAAuD;AAEvD,+DAA6D;AAEtD,MAAM,+BAA+B,GAAG,CAAI,MAAS,EAAyB,EAAE,CAAC,CAAC;IACvF,OAAO,EAAE,IAAI;IACb,MAAM;CACP,CAAC,CAAC;AAHU,QAAA,+BAA+B,mCAGzC;AAEI,MAAM,iCAAiC,GAAG,CAAC,KAAe,EAA2B,EAAE,CAAC,CAAC;IAC9F,OAAO,EAAE,KAAK;IACd,KAAK,EAAE,KAAK;CACb,CAAC,CAAC;AAHU,QAAA,iCAAiC,qCAG3C;AAEI,MAAM,iBAAiB,GAAG,CAAC,SAAiC,EAAE,SAAiB,EAAE,UAAmB,EAA8B,EAAE;IACzI,OAAO,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;AAC3D,CAAC,CAAC;AAFW,QAAA,iBAAiB,qBAE5B;AAEK,MAAM,YAAY,GAAG,CAAI,MAAS,EAA4B,EAAE;IACrE,OAAO,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC,CAAC;AAFW,QAAA,YAAY,gBAEvB;AAEK,MAAM,qBAAqB,GAAG,CAAI,YAAsC,EAAW,EAAE;IAC1F,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC,CAAC;AAFW,QAAA,qBAAqB,yBAEhC;AAEK,MAAM,mBAAmB,GAAG,CAAI,YAAsC,EAAE,EAAE;IAC/E,yEAAyE;IACzE,qCAAqC;IACrC,OAAO,YAAY,CAAC,CAAC,CAAE,CAAC;AAC1B,CAAC,CAAC;AAJW,QAAA,mBAAmB,uBAI9B;AAEK,MAAM,wBAAwB,GAAG,CAAI,YAAsC,EAAY,EAAE;IAC9F,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;YACL,SAAS,EAAE,wCAAwC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG;YAClF,SAAS,EAAE,6BAAa,CAAC,YAAY;SACtC,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CAAC,CAAC,CAAa,CAAC;AACrC,CAAC,CAAC;AATW,QAAA,wBAAwB,4BASnC;AAIK,MAAM,gCAAgC,GAAG,CAAC,KAAc,EAAE,QAAkB,EAAwC,EAAE;IAC3H,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAI,KAAa,CAAC,IAA0B,CAAC;QAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;QAE7B,0EAA0E;QAC1E,8DAA8D;QAC9D,MAAM,OAAO,GAAG,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,WAAW,GAAG,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,SAAS,CAAC;QAE3C,0DAA0D;QAC1D,EAAE;QACF,sGAAsG;QACtG,uGAAuG;QACvG,qGAAqG;QACrG,uEAAuE;QACvE,IAAI,IAAA,0CAAoB,EAAC,SAAS,CAAC,IAAI,IAAA,0CAAoB,EAAC,SAAS,CAAC,EAAE,CAAC;YACvE,OAAO,IAAA,yBAAiB,EAAC,6BAAa,CAAC,cAAc,EAAE,sCAAsC,WAAW,IAAI,CAAC,CAAC;QAChH,CAAC;QAED,OAAO,IAAA,yBAAiB,EAAC,6BAAa,CAAC,YAAY,EAAE,iCAAiC,WAAW,IAAI,CAAC,CAAC;IACzG,CAAC;IAED,OAAO,IAAA,yBAAiB,EAAC,6BAAa,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC;AACrF,CAAC,CAAC;AA5BW,QAAA,gCAAgC,oCA4B3C","sourcesContent":["import { ActionProcessorResult, EitherActionResult } from '../types/Action';\nimport { ErrorTypeEnum } from '../types/ErrorTypeEnum';\nimport { QPQError } from '../types/ErrorTypeEnum';\nimport { isTransientErrorName } from './transientErrorNames';\n\nexport const getSuccessfulEitherActionResult = <T>(result: T): EitherActionResult<T> => ({\n  success: true,\n  result,\n});\n\nexport const getUnsuccessfulEitherActionResult = (error: QPQError): EitherActionResult<any> => ({\n  success: false,\n  error: error,\n});\n\nexport const actionResultError = (errorType: ErrorTypeEnum | string, errorText: string, errorStack?: string): ActionProcessorResult<any> => {\n  return [undefined, { errorType, errorText, errorStack }];\n};\n\nexport const actionResult = <T>(result: T): ActionProcessorResult<T> => {\n  return [result];\n};\n\nexport const isErroredActionResult = <T>(actionResult: ActionProcessorResult<T>): boolean => {\n  return !actionResult || !!actionResult[1];\n};\n\nexport const resolveActionResult = <T>(actionResult: ActionProcessorResult<T>) => {\n  // We say that it has to have a value, otherwise don't call this function\n  // use isErroredActionResult to check\n  return actionResult[0]!;\n};\n\nexport const resolveActionResultError = <T>(actionResult: ActionProcessorResult<T>): QPQError => {\n  if (!actionResult) {\n    return {\n      errorText: `Action processor returned no result [${JSON.stringify(actionResult)}]`,\n      errorType: ErrorTypeEnum.GenericError,\n    };\n  }\n\n  return actionResult[1] as QPQError;\n};\n\ntype ErrorMap = { [key: string]: (error: Error) => ActionProcessorResult<any> };\n\nexport const actionResultErrorFromCaughtError = (error: unknown, errorMap: ErrorMap): ReturnType<typeof actionResultError> => {\n  if (error instanceof Error) {\n    const errorCode = (error as any).code as string | undefined;\n    const errorName = error.name;\n\n    // Prefer the OS/runtime code (node fs: EACCES, ENOENT...), then fall back\n    // to the error name (AWS SDK: AccessDenied, NoSuchBucket...).\n    const handler = (errorCode && errorMap[errorCode]) || errorMap[errorName];\n    if (handler) {\n      return handler(error);\n    }\n\n    const unmappedKey = errorCode ?? errorName;\n\n    // TODO: This is really shit... this does not belong here.\n    //\n    // Classify throttles and transient service failures BEFORE the generic fallback, so a caller can tell\n    // \"the service is busy\" from \"this request is wrong\" without matching on error text. Without this they\n    // are indistinguishable GenericErrors, and a caller that records failures durably writes a permanent\n    // failure for something that would have succeeded on the next attempt.\n    if (isTransientErrorName(errorCode) || isTransientErrorName(errorName)) {\n      return actionResultError(ErrorTypeEnum.OutOfResources, `A transient error occurred, retry [${unmappedKey}].`);\n    }\n\n    return actionResultError(ErrorTypeEnum.GenericError, `An unexpected error occurred [${unmappedKey}].`);\n  }\n\n  return actionResultError(ErrorTypeEnum.GenericError, 'An unknown error occurred.');\n};\n"]}

package/lib/commonjs/logic/scope/storageScopeContext.d.ts

@@ -1,3 +0,0 @@
-export declare const storageScopeContext: import("../..").QpqContextIdentifier<string | null>;
-export declare const askStorageScopeProvide: <T extends import("../..").AskResponse<any>>(scope: string, storyItter: T) => import("../..").AskResponse<import("../..").ExtractGeneratorReturnType<T>>;
-export declare const askStorageScopeRead: () => import("../..").AskResponse<string | null>;

package/lib/commonjs/logic/scope/storageScopeContext.js

@@ -1,17 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.askStorageScopeRead = exports.askStorageScopeProvide = exports.storageScopeContext = void 0;
-const createContextIdentifier_1 = require("../context/createContextIdentifier");
-const createContextProvider_1 = require("../context/createContextProvider");
-const createContextReader_1 = require("../context/createContextReader");
-// The ambient storage scope: THE value scope-aware data layers (e.g. the
-// eventDoc feature) forward as the File/KVS `scope` option. Null = unscoped.
-//
-// Deliberately NON-local: the scope rides the serialized session context across
-// queue/service boundaries, so async work spawned inside a scoped request (a
-// render job, an AI edit) reads and writes the same partition as the request
-// that started it.
-exports.storageScopeContext = (0, createContextIdentifier_1.createContextIdentifier)('qpq-storage-scope', null);
-exports.askStorageScopeProvide = (0, createContextProvider_1.createContextProvider)(exports.storageScopeContext, (scope) => scope);
-exports.askStorageScopeRead = (0, createContextReader_1.createContextReader)(exports.storageScopeContext);
-//# sourceMappingURL=storageScopeContext.js.map

package/lib/commonjs/logic/scope/storageScopeContext.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"storageScopeContext.js","sourceRoot":"","sources":["../../../../src/logic/scope/storageScopeContext.ts"],"names":[],"mappings":";;;AAAA,gFAA6E;AAC7E,4EAAyE;AACzE,wEAAqE;AAErE,yEAAyE;AACzE,6EAA6E;AAC7E,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,6EAA6E;AAC7E,mBAAmB;AACN,QAAA,mBAAmB,GAAG,IAAA,iDAAuB,EAAgB,mBAAmB,EAAE,IAAI,CAAC,CAAC;AAExF,QAAA,sBAAsB,GAAG,IAAA,6CAAqB,EAAC,2BAAmB,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;AAE9F,QAAA,mBAAmB,GAAG,IAAA,yCAAmB,EAAC,2BAAmB,CAAC,CAAC","sourcesContent":["import { createContextIdentifier } from '../context/createContextIdentifier';\nimport { createContextProvider } from '../context/createContextProvider';\nimport { createContextReader } from '../context/createContextReader';\n\n// The ambient storage scope: THE value scope-aware data layers (e.g. the\n// eventDoc feature) forward as the File/KVS `scope` option. Null = unscoped.\n//\n// Deliberately NON-local: the scope rides the serialized session context across\n// queue/service boundaries, so async work spawned inside a scoped request (a\n// render job, an AI edit) reads and writes the same partition as the request\n// that started it.\nexport const storageScopeContext = createContextIdentifier<string | null>('qpq-storage-scope', null);\n\nexport const askStorageScopeProvide = createContextProvider(storageScopeContext, (scope: string) => scope);\n\nexport const askStorageScopeRead = createContextReader(storageScopeContext);\n"]}

package/lib/commonjs/logic/transientErrorNames.d.ts

@@ -1,20 +0,0 @@
-/**
- * AWS / runtime error names that mean "try again shortly", not "this will never work".
- *
- * These are RATE and CAPACITY signals, not faults in the request. A throttled DynamoDB write or a
- * throttled Lambda invoke is a statement about the last few seconds of traffic, and the identical call a
- * moment later usually succeeds.
- *
- * They matter because the default classification is the opposite. An unmapped error name falls through to
- * GenericError, which callers reasonably treat as terminal — so a caller with retry machinery available
- * will not use it, and a caller that records failures durably will record a permanent failure for
- * something that was only ever momentary. That was observed in DocGen: a 300-record fanned-out batch put
- * ~100 concurrent flows against DynamoDB, 64 records came back `ThrottlingException`, and every one was
- * written down as a failed run rather than retried.
- *
- * Mapping them to OutOfResources gives callers a single typed thing to branch on, instead of matching
- * substrings against error text.
- */
-export declare const TRANSIENT_ERROR_NAMES: ReadonlySet<string>;
-/** Whether an error name or OS code names a transient, worth-retrying condition. */
-export declare const isTransientErrorName: (name?: string) => boolean;

package/lib/commonjs/logic/transientErrorNames.js

@@ -1,52 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.isTransientErrorName = exports.TRANSIENT_ERROR_NAMES = void 0;
-/**
- * AWS / runtime error names that mean "try again shortly", not "this will never work".
- *
- * These are RATE and CAPACITY signals, not faults in the request. A throttled DynamoDB write or a
- * throttled Lambda invoke is a statement about the last few seconds of traffic, and the identical call a
- * moment later usually succeeds.
- *
- * They matter because the default classification is the opposite. An unmapped error name falls through to
- * GenericError, which callers reasonably treat as terminal — so a caller with retry machinery available
- * will not use it, and a caller that records failures durably will record a permanent failure for
- * something that was only ever momentary. That was observed in DocGen: a 300-record fanned-out batch put
- * ~100 concurrent flows against DynamoDB, 64 records came back `ThrottlingException`, and every one was
- * written down as a failed run rather than retried.
- *
- * Mapping them to OutOfResources gives callers a single typed thing to branch on, instead of matching
- * substrings against error text.
- */
-exports.TRANSIENT_ERROR_NAMES = new Set([
-    // Generic AWS SDK throttle, used by DynamoDB, SQS, Lambda and others.
-    'ThrottlingException',
-    'Throttling',
-    'ThrottledException',
-    'RequestThrottled',
-    'RequestThrottledException',
-    'TooManyRequestsException',
-    // DynamoDB capacity.
-    'ProvisionedThroughputExceededException',
-    'RequestLimitExceeded',
-    // Lambda concurrency.
-    'EC2ThrottledException',
-    // Transient service-side failures — retrying is the documented response to both.
-    'ServiceUnavailable',
-    'InternalServerError',
-    'InternalFailure',
-    'ServiceException',
-    // Network-level interruptions.
-    'TimeoutError',
-    'RequestTimeout',
-    'RequestTimeoutException',
-    'ECONNRESET',
-    'ETIMEDOUT',
-    'EPIPE',
-    'ENOTFOUND',
-]);
-/** Whether an error name or OS code names a transient, worth-retrying condition. */
-const isTransientErrorName = (name) => !!name && exports.TRANSIENT_ERROR_NAMES.has(name);
-exports.isTransientErrorName = isTransientErrorName;
-// TODO: This is a shit file, we should do this a better way,
-//# sourceMappingURL=transientErrorNames.js.map

package/lib/commonjs/logic/transientErrorNames.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"transientErrorNames.js","sourceRoot":"","sources":["../../../src/logic/transientErrorNames.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;GAgBG;AACU,QAAA,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IAChE,sEAAsE;IACtE,qBAAqB;IACrB,YAAY;IACZ,oBAAoB;IACpB,kBAAkB;IAClB,2BAA2B;IAC3B,0BAA0B;IAC1B,qBAAqB;IACrB,wCAAwC;IACxC,sBAAsB;IACtB,sBAAsB;IACtB,uBAAuB;IACvB,iFAAiF;IACjF,oBAAoB;IACpB,qBAAqB;IACrB,iBAAiB;IACjB,kBAAkB;IAClB,+BAA+B;IAC/B,cAAc;IACd,gBAAgB;IAChB,yBAAyB;IACzB,YAAY;IACZ,WAAW;IACX,OAAO;IACP,WAAW;CACZ,CAAC,CAAC;AAEH,oFAAoF;AAC7E,MAAM,oBAAoB,GAAG,CAAC,IAAa,EAAW,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,6BAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAA7F,QAAA,oBAAoB,wBAAyE;AAE1G,6DAA6D","sourcesContent":["/**\n * AWS / runtime error names that mean \"try again shortly\", not \"this will never work\".\n *\n * These are RATE and CAPACITY signals, not faults in the request. A throttled DynamoDB write or a\n * throttled Lambda invoke is a statement about the last few seconds of traffic, and the identical call a\n * moment later usually succeeds.\n *\n * They matter because the default classification is the opposite. An unmapped error name falls through to\n * GenericError, which callers reasonably treat as terminal — so a caller with retry machinery available\n * will not use it, and a caller that records failures durably will record a permanent failure for\n * something that was only ever momentary. That was observed in DocGen: a 300-record fanned-out batch put\n * ~100 concurrent flows against DynamoDB, 64 records came back `ThrottlingException`, and every one was\n * written down as a failed run rather than retried.\n *\n * Mapping them to OutOfResources gives callers a single typed thing to branch on, instead of matching\n * substrings against error text.\n */\nexport const TRANSIENT_ERROR_NAMES: ReadonlySet<string> = new Set([\n  // Generic AWS SDK throttle, used by DynamoDB, SQS, Lambda and others.\n  'ThrottlingException',\n  'Throttling',\n  'ThrottledException',\n  'RequestThrottled',\n  'RequestThrottledException',\n  'TooManyRequestsException',\n  // DynamoDB capacity.\n  'ProvisionedThroughputExceededException',\n  'RequestLimitExceeded',\n  // Lambda concurrency.\n  'EC2ThrottledException',\n  // Transient service-side failures — retrying is the documented response to both.\n  'ServiceUnavailable',\n  'InternalServerError',\n  'InternalFailure',\n  'ServiceException',\n  // Network-level interruptions.\n  'TimeoutError',\n  'RequestTimeout',\n  'RequestTimeoutException',\n  'ECONNRESET',\n  'ETIMEDOUT',\n  'EPIPE',\n  'ENOTFOUND',\n]);\n\n/** Whether an error name or OS code names a transient, worth-retrying condition. */\nexport const isTransientErrorName = (name?: string): boolean => !!name && TRANSIENT_ERROR_NAMES.has(name);\n\n// TODO: This is a shit file, we should do this a better way,\n"]}

package/lib/commonjs/proiseify/getSystemExecuteStoryActionProcessor.d.ts

@@ -1,13 +0,0 @@
-import { ActionProcessor, AskResponse, AskResponseReturnType, QPQError, Story } from '../types';
-export declare const getDateNow: () => string;
-export declare class QpqPromisifyActionError extends Error {
-    readonly actionError: QPQError;
-    readonly code = "qpqPromisifyActionError";
-    constructor(actionError: QPQError);
-}
-type QpqPromisifyRuntime = Parameters<ActionProcessor<any, any>>;
-export type QpqResolveAsPromise = <T extends AskResponse<any>>(storyRuntime: T) => Promise<AskResponseReturnType<T>>;
-export declare function qpqPromisify<S extends Story<any, any>>(story: S, runtimeInfo: QpqPromisifyRuntime): (...params: Parameters<S>) => Promise<AskResponseReturnType<ReturnType<S>>>;
-export declare const getRun: (qpqPromisifyRuntime: QpqPromisifyRuntime) => QpqResolveAsPromise;
-export declare const getSystemExecuteStoryActionProcessor: import("../types").ActionProcessorListResolver;
-export {};