agentlang 0.10.8 → 0.11.0

package/out/runtime/auth/cognito.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cognito.d.ts","sourceRoot":"","sources":["../../../src/runtime/auth/cognito.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,kBAAkB,EAElB,aAAa,EACb,cAAc,EACd,WAAW,EACX,cAAc,EACd,QAAQ,EACT,MAAM,gBAAgB,CAAC;AAYxB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAwQhD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CA0B1D;AAED,qBAAa,WAAY,YAAW,aAAa;IAC/C,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,QAAQ,EAAE,GAAG,CAAC;gBACF,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IAUxC,eAAe,IAAI,MAAM;IAIzB,aAAa,IAAI,MAAM;IAIvB,OAAO,CAAC,WAAW;IAQb,MAAM,CACV,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EACzC,GAAG,EAAE,WAAW,EAChB,EAAE,EAAE,cAAc,GACjB,OAAO,CAAC,IAAI,CAAC;IAoEV,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBxF,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBvE,4BAA4B,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAqClF,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBlE,qBAAqB,CACzB,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,MAAM,EACxB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,IAAI,CAAC;IAqBV,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,WAAW,EAChB,EAAE,EAAE,aAAa,GAChB,OAAO,CAAC,IAAI,CAAC;IA+KV,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAsDtF,cAAc,CAClB,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,OAAO,CAAC;IAuCnB,OAAO,CAAC,aAAa;IAOf,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoCzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAyE5D,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAyElE,YAAY,CAAC,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAoEhF,UAAU,CACd,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,EACtC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,GAAG,EAAE,WAAW,EAChB,EAAE,EAAE,kBAAkB,GACrB,OAAO,CAAC,IAAI,CAAC;IAiGV,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAuDjE,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,IAAI,CAAC;IAwCV,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IA+FhF,OAAO,CAAC,gBAAgB;IAiBlB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB3D,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB5D,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAsBlE"}
+{"version":3,"file":"cognito.d.ts","sourceRoot":"","sources":["../../../src/runtime/auth/cognito.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,kBAAkB,EAElB,aAAa,EACb,cAAc,EACd,WAAW,EACX,cAAc,EACd,QAAQ,EACT,MAAM,gBAAgB,CAAC;AAYxB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAmVhD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CA0B1D;AAED,qBAAa,WAAY,YAAW,aAAa;IAC/C,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,QAAQ,EAAE,GAAG,CAAC;gBACF,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IAUxC,eAAe,IAAI,MAAM;IAIzB,aAAa,IAAI,MAAM;IAIvB,OAAO,CAAC,WAAW;IAQb,MAAM,CACV,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EACzC,GAAG,EAAE,WAAW,EAChB,EAAE,EAAE,cAAc,GACjB,OAAO,CAAC,IAAI,CAAC;IAyEV,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBxF,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBvE,4BAA4B,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAqClF,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBlE,qBAAqB,CACzB,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,MAAM,EACxB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,IAAI,CAAC;IAqBV,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,WAAW,EAChB,EAAE,EAAE,aAAa,GAChB,OAAO,CAAC,IAAI,CAAC;IAwLV,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAsDtF,cAAc,CAClB,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,OAAO,CAAC;IAuCnB,OAAO,CAAC,aAAa;IAOf,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA6CzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IA2E5D,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IA2ElE,YAAY,CAAC,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAwEhF,UAAU,CACd,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,EACtC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,GAAG,EAAE,WAAW,EAChB,EAAE,EAAE,kBAAkB,GACrB,OAAO,CAAC,IAAI,CAAC;IAkGV,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA0DjE,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,IAAI,CAAC;IA2CV,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAwGhF,OAAO,CAAC,gBAAgB;IAiBlB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB3D,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB5D,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAsBlE"}

package/out/runtime/auth/cognito.js

@@ -4,6 +4,7 @@ import { sleepMilliseconds, generateUrlSafePassword } from '../util.js';
 import { CognitoJwtVerifier } from 'aws-jwt-verify';
 import { isNodeEnv } from '../../utils/runtime.js';
 import { UnauthorisedError, UserNotFoundError, UserNotConfirmedError, PasswordResetRequiredError, TooManyRequestsError, InvalidParameterError, ExpiredCodeError, CodeMismatchError, BadRequestError, } from '../defs.js';
+import { createCodedError } from '../errors/coded-error.js';
 let fromEnv = undefined;
 let CognitoIdentityProviderClient = undefined;
 let SignUpCommand = undefined;
@@ -71,117 +72,157 @@ function handleCognitoError(err, context) {
     switch (err.name) {
         case 'UserNotFoundException':
             logger.debug(`User not found in context: ${context}`);
-            throw new UserNotFoundError('User account not found. Please check your email or sign up.');
+            throw new UserNotFoundError('User account not found. Please check your email or sign up.', {
+                agentlangCode: 'AL_COGNITO_USER_NOT_FOUND_EXCEPTION',
+            });
         case 'NotAuthorizedException':
             // Check if this is a password-related error vs other auth issues
             if (err.message && err.message.includes('password')) {
                 logger.debug(`Invalid password attempt in context: ${context}`);
-                throw new UnauthorisedError('Invalid password. Please try again.');
+                throw new UnauthorisedError('Invalid password. Please try again.', {
+                    agentlangCode: 'AL_COGNITO_INVALID_PASSWORD',
+                });
             }
             else if (err.message && err.message.includes('not confirmed')) {
                 logger.debug(`User not confirmed in context: ${context}`);
-                throw new UserNotConfirmedError();
+                throw new UserNotConfirmedError(undefined, {
+                    agentlangCode: 'AL_COGNITO_NOT_CONFIRMED_MSG',
+                });
             }
             else {
                 logger.debug(`Authentication failed in context: ${context}`);
-                throw new UnauthorisedError('Authentication failed. Please check your credentials.');
+                throw new UnauthorisedError('Authentication failed. Please check your credentials.', {
+                    agentlangCode: 'AL_COGNITO_AUTH_FAILED',
+                });
             }
         case 'UserNotConfirmedException':
             logger.debug(`User not confirmed in context: ${context}`);
-            throw new UserNotConfirmedError();
+            throw new UserNotConfirmedError(undefined, {
+                agentlangCode: 'AL_COGNITO_USER_NOT_CONFIRMED_EX',
+            });
         case 'PasswordResetRequiredException':
             logger.debug(`Password reset required in context: ${context}`);
-            throw new PasswordResetRequiredError();
+            throw new PasswordResetRequiredError(undefined, {
+                agentlangCode: 'AL_COGNITO_PASSWORD_RESET_REQUIRED_EX',
+            });
         case 'TooManyRequestsException':
             logger.warn(`Rate limit exceeded in context: ${context}`);
-            throw new TooManyRequestsError();
+            throw new TooManyRequestsError(undefined, { agentlangCode: 'AL_COGNITO_TOO_MANY_REQUESTS' });
         case 'TooManyFailedAttemptsException':
             logger.warn(`Too many failed attempts in context: ${context}`);
-            throw new TooManyRequestsError('Too many failed login attempts. Please try again later.');
+            throw new TooManyRequestsError('Too many failed login attempts. Please try again later.', {
+                agentlangCode: 'AL_COGNITO_TOO_MANY_FAILED_ATTEMPTS',
+            });
         case 'InvalidParameterException':
             logger.debug(`Invalid parameters in context: ${context}`);
-            throw new InvalidParameterError(sanitizeErrorMessage(err.message) || 'Invalid parameters provided');
+            throw new InvalidParameterError(sanitizeErrorMessage(err.message) || 'Invalid parameters provided', { agentlangCode: 'AL_COGNITO_INVALID_PARAMETER_EX' });
         case 'ExpiredCodeException':
             logger.debug(`Expired code in context: ${context}`);
-            throw new ExpiredCodeError();
+            throw new ExpiredCodeError(undefined, { agentlangCode: 'AL_COGNITO_EXPIRED_CODE_EX' });
         case 'CodeMismatchException':
             logger.debug(`Code mismatch in context: ${context}`);
-            throw new CodeMismatchError();
+            throw new CodeMismatchError(undefined, { agentlangCode: 'AL_COGNITO_CODE_MISMATCH_EX' });
         case 'UsernameExistsException':
             logger.debug(`Username exists in context: ${context}`);
-            throw new BadRequestError('An account with this email already exists.');
+            throw new BadRequestError('An account with this email already exists.', {
+                agentlangCode: 'AL_COGNITO_USERNAME_EXISTS',
+            });
         case 'InvalidPasswordException':
             logger.debug(`Invalid password format in context: ${context}`);
-            throw new BadRequestError('Password does not meet requirements. It must be at least 8 characters long and contain uppercase, lowercase, numbers, and special characters.');
+            throw new BadRequestError('Password does not meet requirements. It must be at least 8 characters long and contain uppercase, lowercase, numbers, and special characters.', { agentlangCode: 'AL_COGNITO_INVALID_PASSWORD_FORMAT' });
         case 'LimitExceededException':
             logger.warn(`Service limit exceeded in context: ${context}`);
-            throw new TooManyRequestsError('Service limit exceeded. Please try again later.');
+            throw new TooManyRequestsError('Service limit exceeded. Please try again later.', {
+                agentlangCode: 'AL_COGNITO_LIMIT_EXCEEDED',
+            });
         case 'InternalErrorException':
             logger.error(`Internal Cognito error in context: ${context}`);
-            throw new Error('Authentication service is temporarily unavailable. Please try again later.');
+            throw createCodedError('Authentication service is temporarily unavailable. Please try again later.', 'AL_COGNITO_INTERNAL_ERROR_EX');
         case 'ResourceNotFoundException':
             logger.error(`Resource not found in context: ${context}`);
-            throw new Error('Authentication service configuration error. Please contact support.');
+            throw createCodedError('Authentication service configuration error. Please contact support.', 'AL_COGNITO_RESOURCE_NOT_FOUND_EX');
         case 'AliasExistsException':
             logger.debug(`Alias exists in context: ${context}`);
-            throw new BadRequestError('An account with this email already exists.');
+            throw new BadRequestError('An account with this email already exists.', {
+                agentlangCode: 'AL_COGNITO_ALIAS_EXISTS',
+            });
         case 'InvalidEmailRoleAccessPolicyException':
             logger.error(`Invalid email role access policy in context: ${context}`);
-            throw new Error('Email service configuration error. Please contact support.');
+            throw createCodedError('Email service configuration error. Please contact support.', 'AL_COGNITO_INVALID_EMAIL_ROLE_POLICY');
         case 'UserLambdaValidationException':
             logger.error(`User lambda validation error in context: ${context}`);
-            throw new BadRequestError('User validation failed. Please check your input and try again.');
+            throw new BadRequestError('User validation failed. Please check your input and try again.', {
+                agentlangCode: 'AL_COGNITO_USER_LAMBDA_VALIDATION',
+            });
         case 'UnsupportedUserStateException':
             logger.debug(`Unsupported user state in context: ${context}`);
-            throw new UserNotConfirmedError('User account is in an unsupported state. Please contact support.');
+            throw new UserNotConfirmedError('User account is in an unsupported state. Please contact support.', { agentlangCode: 'AL_COGNITO_UNSUPPORTED_USER_STATE' });
         case 'MFAMethodNotFoundException':
             logger.debug(`MFA method not found in context: ${context}`);
-            throw new BadRequestError('MFA method not found. Please set up MFA and try again.');
+            throw new BadRequestError('MFA method not found. Please set up MFA and try again.', {
+                agentlangCode: 'AL_COGNITO_MFA_NOT_FOUND',
+            });
         case 'CodeDeliveryFailureException':
             logger.error(`Code delivery failure in context: ${context}`);
-            throw new Error('Unable to deliver verification code. Please try again later.');
+            throw createCodedError('Unable to deliver verification code. Please try again later.', 'AL_COGNITO_CODE_DELIVERY_FAILURE');
         case 'DuplicateProviderException':
             logger.error(`Duplicate provider in context: ${context}`);
-            throw new BadRequestError('Authentication provider already exists.');
+            throw new BadRequestError('Authentication provider already exists.', {
+                agentlangCode: 'AL_COGNITO_DUPLICATE_PROVIDER',
+            });
         case 'EnableSoftwareTokenMFAException':
             logger.debug(`Software token MFA required in context: ${context}`);
-            throw new BadRequestError('Software token MFA setup required.');
+            throw new BadRequestError('Software token MFA setup required.', {
+                agentlangCode: 'AL_COGNITO_ENABLE_SOFTWARE_TOKEN_MFA',
+            });
         case 'ForbiddenException':
             logger.warn(`Forbidden access in context: ${context}`);
-            throw new UnauthorisedError('Access forbidden. Please check your permissions.');
+            throw new UnauthorisedError('Access forbidden. Please check your permissions.', {
+                agentlangCode: 'AL_COGNITO_FORBIDDEN',
+            });
         case 'GroupExistsException':
             logger.debug(`Group exists in context: ${context}`);
-            throw new BadRequestError('Group already exists.');
+            throw new BadRequestError('Group already exists.', {
+                agentlangCode: 'AL_COGNITO_GROUP_EXISTS',
+            });
         case 'InvalidLambdaResponseException':
             logger.error(`Invalid lambda response in context: ${context}`);
-            throw new Error('Authentication service error. Please try again later.');
+            throw createCodedError('Authentication service error. Please try again later.', 'AL_COGNITO_INVALID_LAMBDA_RESPONSE');
         case 'InvalidOAuthFlowException':
             logger.error(`Invalid OAuth flow in context: ${context}`);
-            throw new BadRequestError('Invalid OAuth flow. Please try again.');
+            throw new BadRequestError('Invalid OAuth flow. Please try again.', {
+                agentlangCode: 'AL_COGNITO_INVALID_OAUTH_FLOW',
+            });
         case 'InvalidSmsRoleAccessPolicyException':
             logger.error(`Invalid SMS role access policy in context: ${context}`);
-            throw new Error('SMS service configuration error. Please contact support.');
+            throw createCodedError('SMS service configuration error. Please contact support.', 'AL_COGNITO_INVALID_SMS_ROLE_POLICY');
         case 'InvalidSmsRoleTrustRelationshipException':
             logger.error(`Invalid SMS role trust relationship in context: ${context}`);
-            throw new Error('SMS service configuration error. Please contact support.');
+            throw createCodedError('SMS service configuration error. Please contact support.', 'AL_COGNITO_INVALID_SMS_TRUST');
         case 'InvalidUserPoolConfigurationException':
             logger.error(`Invalid user pool configuration in context: ${context}`);
-            throw new Error('Authentication service configuration error. Please contact support.');
+            throw createCodedError('Authentication service configuration error. Please contact support.', 'AL_COGNITO_INVALID_USER_POOL_CONFIG');
         case 'PreconditionNotMetException':
             logger.debug(`Precondition not met in context: ${context}`);
-            throw new BadRequestError('Precondition not met. Please check your request and try again.');
+            throw new BadRequestError('Precondition not met. Please check your request and try again.', {
+                agentlangCode: 'AL_COGNITO_PRECONDITION_NOT_MET',
+            });
         case 'ScopeDoesNotExistException':
             logger.error(`Scope does not exist in context: ${context}`);
-            throw new BadRequestError('Invalid scope. Please check your request.');
+            throw new BadRequestError('Invalid scope. Please check your request.', {
+                agentlangCode: 'AL_COGNITO_SCOPE_MISSING',
+            });
         case 'UnexpectedLambdaException':
             logger.error(`Unexpected lambda exception in context: ${context}`);
-            throw new Error('Authentication service error. Please try again later.');
+            throw createCodedError('Authentication service error. Please try again later.', 'AL_COGNITO_UNEXPECTED_LAMBDA');
         case 'UserImportInProgressException':
             logger.warn(`User import in progress in context: ${context}`);
-            throw new TooManyRequestsError('User import in progress. Please try again later.');
+            throw new TooManyRequestsError('User import in progress. Please try again later.', {
+                agentlangCode: 'AL_COGNITO_USER_IMPORT_IN_PROGRESS',
+            });
         case 'UserPoolTaggingException':
             logger.error(`User pool tagging exception in context: ${context}`);
-            throw new Error('Authentication service configuration error. Please contact support.');
+            throw createCodedError('Authentication service configuration error. Please contact support.', 'AL_COGNITO_USER_POOL_TAGGING');
         default:
             // For any other errors, throw a generic error with sanitized message
             logger.error(`Unhandled Cognito error: ${err.name}`, {
@@ -189,7 +230,7 @@ function handleCognitoError(err, context) {
                 errorCode: err.code,
                 context: context,
             });
-            throw new Error(`Authentication error: ${sanitizeErrorMessage(err.message) || 'An unexpected error occurred'}`);
+            throw createCodedError(`Authentication error: ${sanitizeErrorMessage(err.message) || 'An unexpected error occurred'}`, 'AL_COGNITO_UNHANDLED');
     }
 }
 // Helper function to sanitize error messages to prevent sensitive information exposure
@@ -260,7 +301,7 @@ export class CognitoAuth {
         if (id) {
             return id;
         }
-        throw new Error(`${k} is not set`);
+        throw createCodedError(`${k} is not set`, 'AL_COGNITO_CONFIG_KEY_MISSING');
     }
     async signUp(firstName, lastName, username, password, userData, env, cb) {
         const client = new CognitoIdentityProviderClient({
@@ -318,7 +359,9 @@ export class CognitoAuth {
                     username: username,
                     statusCode: response.$metadata.httpStatusCode,
                 });
-                throw new BadRequestError(`Signup failed with status ${response.$metadata.httpStatusCode}`);
+                throw new BadRequestError(`Signup failed with status ${response.$metadata.httpStatusCode}`, {
+                    agentlangCode: 'AL_COGNITO_SIGNUP_HTTP_STATUS',
+                });
             }
         }
         catch (err) {
@@ -461,11 +504,11 @@ export class CognitoAuth {
                 },
                 mfaRequired: (challengeName, _challengeParameters) => {
                     logger.info(`MFA required for user ${username}: ${challengeName}`);
-                    authError = new Error('MFA authentication required');
+                    authError = createCodedError('MFA authentication required', 'AL_COGNITO_MFA_REQUIRED');
                 },
                 newPasswordRequired: (_userAttributes, _requiredAttributes) => {
                     logger.info(`New password required for user ${username}`);
-                    authError = new PasswordResetRequiredError('New password required. Please reset your password.');
+                    authError = new PasswordResetRequiredError('New password required. Please reset your password.', { agentlangCode: 'AL_COGNITO_NEW_PASSWORD_REQUIRED_CHALLENGE' });
                 },
             });
             while (result === undefined && authError === undefined) {
@@ -513,7 +556,9 @@ export class CognitoAuth {
             }
             else {
                 logger.error(`Login failed for ${username} - no result received`);
-                throw new UnauthorisedError('Login failed. Please try again.');
+                throw new UnauthorisedError('Login failed. Please try again.', {
+                    agentlangCode: 'AL_COGNITO_LOGIN_NO_RESULT_SDK',
+                });
             }
         }
         else {
@@ -546,11 +591,11 @@ export class CognitoAuth {
                 },
                 mfaRequired: (challengeName, _challengeParameters) => {
                     logger.info(`MFA required for user ${username}: ${challengeName}`);
-                    authError = new Error('MFA authentication required');
+                    authError = createCodedError('MFA authentication required', 'AL_COGNITO_MFA_REQUIRED_LOCAL');
                 },
                 newPasswordRequired: (_userAttributes, _requiredAttributes) => {
                     logger.info(`New password required for user ${username}`);
-                    authError = new PasswordResetRequiredError('New password required. Please reset your password.');
+                    authError = new PasswordResetRequiredError('New password required. Please reset your password.', { agentlangCode: 'AL_COGNITO_NEW_PASSWORD_REQUIRED_CHALLENGE_LOCAL' });
                 },
             });
             while (result === undefined && authError === undefined) {
@@ -585,7 +630,9 @@ export class CognitoAuth {
             }
             else {
                 logger.error(`Login failed for ${username} - no result received`);
-                throw new UnauthorisedError('Login failed. Please try again.');
+                throw new UnauthorisedError('Login failed. Please try again.', {
+                    agentlangCode: 'AL_COGNITO_LOGIN_NO_RESULT_LOCAL',
+                });
             }
         }
     }
@@ -682,7 +729,7 @@ export class CognitoAuth {
         if (this.userPool) {
             return this.userPool;
         }
-        throw new Error('UserPool not initialized');
+        throw createCodedError('UserPool not initialized', 'AL_COGNITO_USER_POOL_NOT_INIT');
     }
     async verifyToken(token) {
         try {
@@ -701,24 +748,34 @@ export class CognitoAuth {
             });
             // Handle specific token verification errors
             if (err.message && err.message.includes('expired')) {
-                throw new UnauthorisedError('Token has expired. Please login again.');
+                throw new UnauthorisedError('Token has expired. Please login again.', {
+                    agentlangCode: 'AL_COGNITO_TOKEN_EXPIRED',
+                });
             }
             if (err.message && err.message.includes('invalid')) {
-                throw new UnauthorisedError('Invalid token format.');
+                throw new UnauthorisedError('Invalid token format.', {
+                    agentlangCode: 'AL_COGNITO_TOKEN_INVALID',
+                });
             }
             if (err.message && err.message.includes('not before')) {
-                throw new UnauthorisedError('Token is not yet valid.');
+                throw new UnauthorisedError('Token is not yet valid.', {
+                    agentlangCode: 'AL_COGNITO_TOKEN_NOT_YET_VALID',
+                });
             }
             if (err.message && err.message.includes('audience')) {
-                throw new UnauthorisedError('Token audience mismatch.');
+                throw new UnauthorisedError('Token audience mismatch.', {
+                    agentlangCode: 'AL_COGNITO_TOKEN_AUDIENCE',
+                });
             }
-            throw new UnauthorisedError(`Token verification failed: ${sanitizeErrorMessage(err.message) || 'Invalid token'}`);
+            throw new UnauthorisedError(`Token verification failed: ${sanitizeErrorMessage(err.message) || 'Invalid token'}`, { agentlangCode: 'AL_COGNITO_TOKEN_VERIFY_FAILED' });
         }
     }
     async getUser(userId, env) {
         const localUser = await findUser(userId, env);
         if (!localUser) {
-            throw new UserNotFoundError(`User ${userId} not found in local database`);
+            throw new UserNotFoundError(`User ${userId} not found in local database`, {
+                agentlangCode: 'AL_COGNITO_USER_NOT_FOUND_LOCAL_ID',
+            });
         }
         const userEmail = localUser.lookup('email');
         const firstName = localUser.lookup('firstName');
@@ -786,7 +843,9 @@ export class CognitoAuth {
     async getUserByEmail(email, env) {
         const localUser = await findUserByEmail(email, env);
         if (!localUser) {
-            throw new UserNotFoundError(`User with email ${email} not found in local database`);
+            throw new UserNotFoundError(`User with email ${email} not found in local database`, {
+                agentlangCode: 'AL_COGNITO_USER_NOT_FOUND_LOCAL_EMAIL',
+            });
         }
         const userId = localUser.lookup('id');
         const firstName = localUser.lookup('firstName');
@@ -867,7 +926,9 @@ export class CognitoAuth {
             });
             const response = await client.send(command);
             if (!response.AuthenticationResult) {
-                throw new UnauthorisedError('Token refresh failed');
+                throw new UnauthorisedError('Token refresh failed', {
+                    agentlangCode: 'AL_COGNITO_TOKEN_REFRESH_NO_RESULT',
+                });
             }
             const newIdToken = response.AuthenticationResult.IdToken;
             const newAccessToken = response.AuthenticationResult.AccessToken;
@@ -897,7 +958,9 @@ export class CognitoAuth {
         catch (err) {
             logger.error(`Refresh token operation failed: ${err.message}`);
             if (err.name === 'NotAuthorizedException') {
-                throw new UnauthorisedError('Invalid or expired refresh token');
+                throw new UnauthorisedError('Invalid or expired refresh token', {
+                    agentlangCode: 'AL_COGNITO_REFRESH_NOT_AUTHORIZED',
+                });
             }
             handleCognitoError(err, 'refreshToken');
             throw err; // This line won't be reached due to handleCognitoError throwing
@@ -970,7 +1033,7 @@ export class CognitoAuth {
                     email: email,
                     statusCode: response.$metadata.httpStatusCode,
                 });
-                throw new BadRequestError(`User invitation failed with status ${response.$metadata.httpStatusCode}`);
+                throw new BadRequestError(`User invitation failed with status ${response.$metadata.httpStatusCode}`, { agentlangCode: 'AL_COGNITO_INVITE_HTTP_STATUS' });
             }
         }
         catch (err) {
@@ -997,7 +1060,9 @@ export class CognitoAuth {
             }
             catch (err) {
                 if (err.name === 'UserNotFoundException') {
-                    throw new UserNotFoundError(`User ${email} not found. Cannot resend invitation.`);
+                    throw new UserNotFoundError(`User ${email} not found. Cannot resend invitation.`, {
+                        agentlangCode: 'AL_COGNITO_RESEND_USER_NOT_FOUND',
+                    });
                 }
                 throw err;
             }
@@ -1017,7 +1082,7 @@ export class CognitoAuth {
                     email: email,
                     statusCode: response.$metadata.httpStatusCode,
                 });
-                throw new BadRequestError(`Failed to resend invitation with status ${response.$metadata.httpStatusCode}`);
+                throw new BadRequestError(`Failed to resend invitation with status ${response.$metadata.httpStatusCode}`, { agentlangCode: 'AL_COGNITO_RESEND_INVITE_HTTP_STATUS' });
             }
         }
         catch (err) {
@@ -1060,7 +1125,7 @@ export class CognitoAuth {
                 logger.info(`User invitation accepted successfully for: ${email}`);
             }
             else {
-                throw new Error(`Unexpected challenge: ${initResponse.ChallengeName}`);
+                throw createCodedError(`Unexpected challenge: ${initResponse.ChallengeName}`, 'AL_COGNITO_UNEXPECTED_CHALLENGE');
             }
         }
         catch (err) {
@@ -1071,7 +1136,7 @@ export class CognitoAuth {
     async callback(code, env, cb) {
         try {
             if (!isNodeEnv) {
-                throw new Error('Callback authentication is only supported in Node.js environment');
+                throw createCodedError('Callback authentication is only supported in Node.js environment', 'AL_COGNITO_CALLBACK_NODE_ONLY');
             }
             const clientId = this.fetchConfig('ClientId');
             const region = process.env.AWS_REGION || 'us-east-1';
@@ -1095,11 +1160,11 @@ export class CognitoAuth {
             });
             if (!response.ok) {
                 const errorText = await response.text();
-                throw new Error(`Token exchange failed: ${response.status} ${errorText}`);
+                throw createCodedError(`Token exchange failed: ${response.status} ${errorText}`, 'AL_COGNITO_TOKEN_EXCHANGE_FAILED');
             }
             const tokenData = await response.json();
             if (!tokenData.access_token || !tokenData.id_token || !tokenData.refresh_token) {
-                throw new Error('Missing required tokens in response');
+                throw createCodedError('Missing required tokens in response', 'AL_COGNITO_MISSING_TOKENS');
             }
             const { access_token: AccessToken, id_token: IdToken, refresh_token: RefreshToken, } = tokenData;
             const idTokenPayload = this.decodeJwtPayload(IdToken);
@@ -1108,7 +1173,7 @@ export class CognitoAuth {
             const lastName = idTokenPayload['family_name'] || '';
             const userGroups = idTokenPayload['cognito:groups'];
             if (!userEmail) {
-                throw new Error('Email not found in ID attributes');
+                throw createCodedError('Email not found in ID attributes', 'AL_COGNITO_EMAIL_MISSING_IN_ID');
             }
             let localUser = await findUserByEmail(userEmail, env);
             if (!localUser) {
@@ -1149,7 +1214,7 @@ export class CognitoAuth {
         }
         catch (err) {
             logger.error(`Failed to decode JWT payload: ${err}`);
-            throw new Error('Invalid JWT token');
+            throw createCodedError('Invalid JWT token', 'AL_COGNITO_INVALID_JWT_PAYLOAD');
         }
     }
     async deleteUser(email, _env) {