quidproquo-actionprocessor-awslambda 0.0.263 → 0.1.0

package/lib/commonjs/getActionProcessor/core/file/getFileGenerateTemporarySecureUrlActionProcessor.js

@@ -15,8 +15,13 @@ const quidproquo_core_1 = require("quidproquo-core");
 const quidproquo_core_2 = require("quidproquo-core");
 const generatePresignedUrl_1 = require("../../../logic/s3/generatePresignedUrl");
 const utils_1 = require("./utils");
+// SigV4 presigned URLs cannot expire more than 7 days in the future
+const maxExpirationMs = 7 * 24 * 60 * 60 * 1000;
 const getProcessFileGenerateTemporarySecureUrl = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ drive, filepath, expirationMs }) {
+        if (expirationMs > maxExpirationMs) {
+            return (0, quidproquo_core_1.actionResultError)(quidproquo_core_2.FileGenerateTemporarySecureUrlErrorTypeEnum.ExpirationTooLong, 'Expiration exceeds the 7 day maximum for presigned URLs');
+        }
         try {
             const s3BucketName = (0, utils_1.resolveStorageDriveBucketName)(drive, qpqConfig);
             const url = yield (0, generatePresignedUrl_1.generatePresignedUrl)(s3BucketName, filepath, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), expirationMs);

package/lib/commonjs/getActionProcessor/core/file/getFileGenerateTemporaryUploadSecureUrlActionProcessor.js

@@ -15,8 +15,13 @@ const quidproquo_core_1 = require("quidproquo-core");
 const quidproquo_core_2 = require("quidproquo-core");
 const generatePresignedUploadUrl_1 = require("../../../logic/s3/generatePresignedUploadUrl");
 const utils_1 = require("./utils");
+// SigV4 presigned URLs cannot expire more than 7 days in the future
+const maxExpirationMs = 7 * 24 * 60 * 60 * 1000;
 const getProcessFileGenerateTemporaryUploadSecureUrl = (qpqConfig) => {
     return (_a, session_1) => __awaiter(void 0, [_a, session_1], void 0, function* ({ drive, filepath, expirationMs, contentType }, session) {
+        if (expirationMs > maxExpirationMs) {
+            return (0, quidproquo_core_1.actionResultError)(quidproquo_core_2.FileGenerateTemporaryUploadSecureUrlErrorTypeEnum.ExpirationTooLong, 'Expiration exceeds the 7 day maximum for presigned URLs');
+        }
         try {
             const s3BucketName = (0, utils_1.resolveStorageDriveBucketName)(drive, qpqConfig);
             const url = yield (0, generatePresignedUploadUrl_1.generatePresignedUploadUrl)(s3BucketName, filepath, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), expirationMs, session.correlation, contentType);

package/lib/commonjs/getActionProcessor/core/file/getFileIsColdStorageActionProcessor.js

@@ -17,8 +17,19 @@ const utils_1 = require("./utils");
 const getProcessFileIsColdStorage = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ drive, filepath }) {
         const s3BucketName = (0, utils_1.resolveStorageDriveBucketName)(drive, qpqConfig);
-        const isColdStorage = (yield (0, getObjectStorageClass_1.getObjectStorageClass)(s3BucketName, filepath, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig))) === 'cold_storage';
-        return (0, quidproquo_core_1.actionResult)(isColdStorage);
+        try {
+            const isColdStorage = (yield (0, getObjectStorageClass_1.getObjectStorageClass)(s3BucketName, filepath, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig))) === 'cold_storage';
+            return (0, quidproquo_core_1.actionResult)(isColdStorage);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                AccessDenied: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileIsColdStorageErrorTypeEnum.AccessDenied, 'Access denied reading file storage class'),
+                Forbidden: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileIsColdStorageErrorTypeEnum.AccessDenied, 'Access denied reading file storage class'),
+                NotFound: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileIsColdStorageErrorTypeEnum.FileNotFound, `File not found: ${filepath}`),
+                NoSuchKey: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileIsColdStorageErrorTypeEnum.FileNotFound, `File not found: ${filepath}`),
+                NoSuchBucket: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileIsColdStorageErrorTypeEnum.DriveNotFound, `Storage drive not found: ${drive}`),
+            });
+        }
     });
 };
 const getFileIsColdStorageActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/file/getFileListDirectoryActionProcessor.js

@@ -17,13 +17,22 @@ const utils_1 = require("./utils");
 const getProcessFileListDirectory = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ drive, folderPath, maxFiles, pageToken }) {
         const s3BucketName = (0, utils_1.resolveStorageDriveBucketName)(drive, qpqConfig);
-        const s3FileList = yield (0, s3Utils_1.listFiles)(s3BucketName, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), folderPath, maxFiles, pageToken);
-        // Add the drive onto the list
-        const fileInfos = s3FileList.fileInfos.map((s3fi) => (Object.assign(Object.assign({}, s3fi), { drive })));
-        return (0, quidproquo_core_1.actionResult)({
-            fileInfos,
-            pageToken: s3FileList.pageToken,
-        });
+        try {
+            const s3FileList = yield (0, s3Utils_1.listFiles)(s3BucketName, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), folderPath, maxFiles, pageToken);
+            // Add the drive onto the list
+            const fileInfos = s3FileList.fileInfos.map((s3fi) => (Object.assign(Object.assign({}, s3fi), { drive })));
+            return (0, quidproquo_core_1.actionResult)({
+                fileInfos,
+                pageToken: s3FileList.pageToken,
+            });
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                AccessDenied: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileListDirectoryErrorTypeEnum.AccessDenied, 'Access denied listing directory'),
+                Forbidden: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileListDirectoryErrorTypeEnum.AccessDenied, 'Access denied listing directory'),
+                NoSuchBucket: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileListDirectoryErrorTypeEnum.DriveNotFound, `Storage drive not found: ${drive}`),
+            });
+        }
     });
 };
 const getFileListDirectoryActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/file/getFileReadBinaryContentsActionProcessor.js

@@ -16,8 +16,17 @@ const s3Utils_1 = require("../../../logic/s3/s3Utils");
 const utils_1 = require("./utils");
 const getProcessFileReadBinaryContents = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ drive, filepath }) {
-        const s3BucketName = (0, utils_1.resolveStorageDriveBucketName)(drive, qpqConfig);
-        return (0, quidproquo_core_1.actionResult)(yield (0, s3Utils_1.readBinaryFile)(s3BucketName, filepath, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig)));
+        try {
+            const s3BucketName = (0, utils_1.resolveStorageDriveBucketName)(drive, qpqConfig);
+            return (0, quidproquo_core_1.actionResult)(yield (0, s3Utils_1.readBinaryFile)(s3BucketName, filepath, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig)));
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                InvalidObjectState: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileReadBinaryContentsErrorTypeEnum.InvalidStorageClass, 'File is in the wrong storage class'),
+                NoSuchKey: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileReadBinaryContentsErrorTypeEnum.FileNotFound, `File not found: ${filepath}`),
+                NotFound: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileReadBinaryContentsErrorTypeEnum.FileNotFound, `File not found: ${filepath}`),
+            });
+        }
     });
 };
 const getFileReadBinaryContentsActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/file/getFileStreamOpenActionProcessor.js

@@ -33,6 +33,7 @@ exports.getFileStreamOpenActionProcessor = void 0;
 const quidproquo_config_aws_1 = require("quidproquo-config-aws");
 const quidproquo_core_1 = require("quidproquo-core");
 const client_s3_1 = require("@aws-sdk/client-s3");
+const awsLambdaUtils_1 = require("../../../awsLambdaUtils");
 const createAwsClient_1 = require("../../../logic/createAwsClient");
 const utils_1 = require("./utils");
 function chunkedReadableIterator(stream, chunkSize, transform) {
@@ -77,7 +78,7 @@ const getProcessFileStreamOpen = (qpqConfig) => {
             if (!response.Body) {
                 return (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.ErrorTypeEnum.GenericError, `Empty response body for: ${filepath}`);
             }
-            const streamId = `s3-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+            const streamId = `s3-${(0, awsLambdaUtils_1.randomGuid)()}`;
             const isText = encoding === 'text';
             const size = chunkSize !== null && chunkSize !== void 0 ? chunkSize : 65536;
             const transform = isText
@@ -88,7 +89,11 @@ const getProcessFileStreamOpen = (qpqConfig) => {
             return (0, quidproquo_core_1.actionResult)({ id: streamId, encoding });
         }
         catch (error) {
-            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {});
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                InvalidObjectState: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileStreamOpenErrorTypeEnum.InvalidStorageClass, 'File is in the wrong storage class'),
+                NoSuchKey: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileStreamOpenErrorTypeEnum.FileNotFound, `File not found: ${filepath}`),
+                NotFound: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileStreamOpenErrorTypeEnum.FileNotFound, `File not found: ${filepath}`),
+            });
         }
     });
 };

package/lib/commonjs/getActionProcessor/core/file/getFileWriteBinaryContentsActionProcessor.js

@@ -18,8 +18,17 @@ const utils_1 = require("./utils");
 const getProcessFileWriteBinaryContents = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ drive, filepath, data, storageDriveAdvancedWriteOptions }) {
         const s3BucketName = (0, utils_1.resolveStorageDriveBucketName)(drive, qpqConfig);
-        yield (0, s3Utils_1.writeBinaryFile)(s3BucketName, filepath, data, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), (0, awsLambdaUtils_1.getS3BucketStorageClassFromStorageDriveTier)(storageDriveAdvancedWriteOptions === null || storageDriveAdvancedWriteOptions === void 0 ? void 0 : storageDriveAdvancedWriteOptions.storageDriveTier));
-        return (0, quidproquo_core_1.actionResult)(void 0);
+        try {
+            yield (0, s3Utils_1.writeBinaryFile)(s3BucketName, filepath, data, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), (0, awsLambdaUtils_1.getS3BucketStorageClassFromStorageDriveTier)(storageDriveAdvancedWriteOptions === null || storageDriveAdvancedWriteOptions === void 0 ? void 0 : storageDriveAdvancedWriteOptions.storageDriveTier));
+            return (0, quidproquo_core_1.actionResult)(void 0);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                AccessDenied: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileWriteBinaryContentsErrorTypeEnum.AccessDenied, 'Access denied writing file'),
+                Forbidden: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileWriteBinaryContentsErrorTypeEnum.AccessDenied, 'Access denied writing file'),
+                NoSuchBucket: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileWriteBinaryContentsErrorTypeEnum.DriveNotFound, `Storage drive not found: ${drive}`),
+            });
+        }
     });
 };
 const getFileWriteBinaryContentsActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/file/getFileWriteObjectJsonActionProcessor.js

@@ -19,8 +19,17 @@ const getProcessFileWriteObjectJson = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ drive, filepath, data, storageDriveAdvancedWriteOptions }) {
         const s3BucketName = (0, utils_1.resolveStorageDriveBucketName)(drive, qpqConfig);
         const dataJson = JSON.stringify(data);
-        yield (0, s3Utils_1.writeTextFile)(s3BucketName, filepath, dataJson, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), (0, awsLambdaUtils_1.getS3BucketStorageClassFromStorageDriveTier)(storageDriveAdvancedWriteOptions === null || storageDriveAdvancedWriteOptions === void 0 ? void 0 : storageDriveAdvancedWriteOptions.storageDriveTier));
-        return (0, quidproquo_core_1.actionResult)(void 0);
+        try {
+            yield (0, s3Utils_1.writeTextFile)(s3BucketName, filepath, dataJson, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), (0, awsLambdaUtils_1.getS3BucketStorageClassFromStorageDriveTier)(storageDriveAdvancedWriteOptions === null || storageDriveAdvancedWriteOptions === void 0 ? void 0 : storageDriveAdvancedWriteOptions.storageDriveTier));
+            return (0, quidproquo_core_1.actionResult)(void 0);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                AccessDenied: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileWriteObjectJsonErrorTypeEnum.AccessDenied, 'Access denied writing file'),
+                Forbidden: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileWriteObjectJsonErrorTypeEnum.AccessDenied, 'Access denied writing file'),
+                NoSuchBucket: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileWriteObjectJsonErrorTypeEnum.DriveNotFound, `Storage drive not found: ${drive}`),
+            });
+        }
     });
 };
 const getFileWriteObjectJsonActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/file/getFileWriteTextContentsActionProcessor.js

@@ -18,8 +18,17 @@ const utils_1 = require("./utils");
 const getProcessFileWriteTextContents = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ drive, filepath, data, storageDriveAdvancedWriteOptions }) {
         const s3BucketName = (0, utils_1.resolveStorageDriveBucketName)(drive, qpqConfig);
-        yield (0, s3Utils_1.writeTextFile)(s3BucketName, filepath, data, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), (0, awsLambdaUtils_1.getS3BucketStorageClassFromStorageDriveTier)(storageDriveAdvancedWriteOptions === null || storageDriveAdvancedWriteOptions === void 0 ? void 0 : storageDriveAdvancedWriteOptions.storageDriveTier));
-        return (0, quidproquo_core_1.actionResult)(void 0);
+        try {
+            yield (0, s3Utils_1.writeTextFile)(s3BucketName, filepath, data, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), (0, awsLambdaUtils_1.getS3BucketStorageClassFromStorageDriveTier)(storageDriveAdvancedWriteOptions === null || storageDriveAdvancedWriteOptions === void 0 ? void 0 : storageDriveAdvancedWriteOptions.storageDriveTier));
+            return (0, quidproquo_core_1.actionResult)(void 0);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                AccessDenied: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileWriteTextContentsErrorTypeEnum.AccessDenied, 'Access denied writing file'),
+                Forbidden: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileWriteTextContentsErrorTypeEnum.AccessDenied, 'Access denied writing file'),
+                NoSuchBucket: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.FileWriteTextContentsErrorTypeEnum.DriveNotFound, `Storage drive not found: ${drive}`),
+            });
+        }
     });
 };
 const getFileWriteTextContentsActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/keyValueStore/getKeyValueStoreDeleteActionProcessor.js

@@ -21,8 +21,16 @@ const getProcessKeyValueStoreDelete = (qpqConfig) => {
         const dynamoTableName = (0, awsNamingUtils_1.getKvsDynamoTableNameFromConfig)(keyValueStoreName, qpqConfig, 'kvs');
         const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
         const storeConfig = quidproquo_core_1.qpqCoreUtils.getKeyValueStoreByName(qpqConfig, keyValueStoreName);
-        yield (0, dynamo_1.deleteItem)(dynamoTableName, region, key, storeConfig.partitionKey.key, sortKey, (_b = storeConfig.sortKeys[0]) === null || _b === void 0 ? void 0 : _b.key);
-        return (0, quidproquo_core_2.actionResult)(void 0);
+        try {
+            yield (0, dynamo_1.deleteItem)(dynamoTableName, region, key, storeConfig.partitionKey.key, sortKey, (_b = storeConfig.sortKeys[0]) === null || _b === void 0 ? void 0 : _b.key);
+            return (0, quidproquo_core_2.actionResult)(void 0);
+        }
+        catch (error) {
+            return (0, quidproquo_core_2.actionResultErrorFromCaughtError)(error, {
+                InternalServerError: () => (0, quidproquo_core_2.actionResultError)(quidproquo_core_2.KeyValueStoreDeleteErrorTypeEnum.ServiceUnavailable, 'KVS Service Unavailable'),
+                ResourceNotFoundException: () => (0, quidproquo_core_2.actionResultError)(quidproquo_core_2.KeyValueStoreDeleteErrorTypeEnum.ResourceNotFound, 'KVS Resource Not Found'),
+            });
+        }
     });
 };
 const getKeyValueStoreDeleteActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/keyValueStore/getKeyValueStoreGetActionProcessor.js

@@ -18,8 +18,16 @@ const getProcessKeyValueStoreGet = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ keyValueStoreName, key }) {
         const dynamoTableName = (0, awsNamingUtils_1.getKvsDynamoTableNameFromConfig)(keyValueStoreName, qpqConfig, 'kvs');
         const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
-        const result = yield (0, dynamo_1.getItem)(dynamoTableName, key, region);
-        return (0, quidproquo_core_1.actionResult)(result);
+        try {
+            const result = yield (0, dynamo_1.getItem)(dynamoTableName, key, region);
+            return (0, quidproquo_core_1.actionResult)(result);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                InternalServerError: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.KeyValueStoreGetErrorTypeEnum.ServiceUnavailable, 'KVS Service Unavailable'),
+                ResourceNotFoundException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.KeyValueStoreGetErrorTypeEnum.ResourceNotFound, 'KVS Resource Not Found'),
+            });
+        }
     });
 };
 const getKeyValueStoreGetActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/keyValueStore/getKeyValueStoreGetAllActionProcessor.js

@@ -18,8 +18,16 @@ const getProcessKeyValueStoreGetAll = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ keyValueStoreName }) {
         const dynamoTableName = (0, awsNamingUtils_1.getKvsDynamoTableNameFromConfig)(keyValueStoreName, qpqConfig, 'kvs');
         const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
-        const result = yield (0, dynamo_1.getAllItems)(dynamoTableName, region);
-        return (0, quidproquo_core_1.actionResult)(result);
+        try {
+            const result = yield (0, dynamo_1.getAllItems)(dynamoTableName, region);
+            return (0, quidproquo_core_1.actionResult)(result);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                InternalServerError: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.KeyValueStoreGetAllErrorTypeEnum.ServiceUnavailable, 'KVS Service Unavailable'),
+                ResourceNotFoundException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.KeyValueStoreGetAllErrorTypeEnum.ResourceNotFound, 'KVS Resource Not Found'),
+            });
+        }
     });
 };
 const getKeyValueStoreGetAllActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/keyValueStore/getKeyValueStoreQueryActionProcessor.js

@@ -24,8 +24,16 @@ const getProcessKeyValueStoreQuery = (qpqConfig) => {
         if (!storeConfig) {
             return (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.ErrorTypeEnum.NotFound, `Could not find key value store with name "${keyValueStoreName}"`);
         }
-        const items = yield (0, dynamo_1.query)(dynamoTableName, region, keyCondition, options === null || options === void 0 ? void 0 : options.filter, options === null || options === void 0 ? void 0 : options.nextPageKey, (0, qpqDynamoOrm_1.getDynamoTableIndexByConfigAndQuery)(storeConfig, keyCondition), options === null || options === void 0 ? void 0 : options.limit, options === null || options === void 0 ? void 0 : options.sortAscending);
-        return (0, quidproquo_core_2.actionResult)(items);
+        try {
+            const items = yield (0, dynamo_1.query)(dynamoTableName, region, keyCondition, options === null || options === void 0 ? void 0 : options.filter, options === null || options === void 0 ? void 0 : options.nextPageKey, (0, qpqDynamoOrm_1.getDynamoTableIndexByConfigAndQuery)(storeConfig, keyCondition), options === null || options === void 0 ? void 0 : options.limit, options === null || options === void 0 ? void 0 : options.sortAscending);
+            return (0, quidproquo_core_2.actionResult)(items);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                InternalServerError: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_2.KeyValueStoreQueryErrorTypeEnum.ServiceUnavailable, 'KVS Service Unavailable'),
+                ResourceNotFoundException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_2.KeyValueStoreQueryErrorTypeEnum.ResourceNotFound, 'KVS Resource Not Found'),
+            });
+        }
     });
 };
 const getKeyValueStoreQueryActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/keyValueStore/getKeyValueStoreScanActionProcessor.js

@@ -12,19 +12,28 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getKeyValueStoreScanActionProcessor = void 0;
 const quidproquo_config_aws_1 = require("quidproquo-config-aws");
 const quidproquo_core_1 = require("quidproquo-core");
+const quidproquo_core_2 = require("quidproquo-core");
 const awsNamingUtils_1 = require("../../../awsNamingUtils");
 const scan_1 = require("../../../logic/dynamo/scan");
 const getProcessKeyValueStoreScan = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ keyValueStoreName, filterCondition, nextPageKey }) {
         const dynamoTableName = (0, awsNamingUtils_1.getKvsDynamoTableNameFromConfig)(keyValueStoreName, qpqConfig, 'kvs');
         const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
-        const items = yield (0, scan_1.scan)(dynamoTableName, region, filterCondition, nextPageKey);
-        return (0, quidproquo_core_1.actionResult)(items);
+        try {
+            const items = yield (0, scan_1.scan)(dynamoTableName, region, filterCondition, nextPageKey);
+            return (0, quidproquo_core_2.actionResult)(items);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                InternalServerError: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_2.KeyValueStoreScanErrorTypeEnum.ServiceUnavailable, 'KVS Service Unavailable'),
+                ResourceNotFoundException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_2.KeyValueStoreScanErrorTypeEnum.ResourceNotFound, 'KVS Resource Not Found'),
+            });
+        }
     });
 };
 const getKeyValueStoreScanActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {
     return ({
-        [quidproquo_core_1.KeyValueStoreActionType.Scan]: getProcessKeyValueStoreScan(qpqConfig),
+        [quidproquo_core_2.KeyValueStoreActionType.Scan]: getProcessKeyValueStoreScan(qpqConfig),
     });
 });
 exports.getKeyValueStoreScanActionProcessor = getKeyValueStoreScanActionProcessor;

package/lib/commonjs/getActionProcessor/core/keyValueStore/getKeyValueStoreUpdateActionProcessor.js

@@ -21,8 +21,16 @@ const getProcessKeyValueStoreUpdate = (qpqConfig) => {
         const dynamoTableName = (0, awsNamingUtils_1.getKvsDynamoTableNameFromConfig)(keyValueStoreName, qpqConfig, 'kvs');
         const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
         const storeConfig = quidproquo_core_1.qpqCoreUtils.getKeyValueStoreByName(qpqConfig, keyValueStoreName);
-        const item = yield (0, dynamo_1.updateItem)(dynamoTableName, region, updates, storeConfig.partitionKey.key, key, (_b = storeConfig.sortKeys[0]) === null || _b === void 0 ? void 0 : _b.key, sortKey);
-        return (0, quidproquo_core_2.actionResult)(item);
+        try {
+            const item = yield (0, dynamo_1.updateItem)(dynamoTableName, region, updates, storeConfig.partitionKey.key, key, (_b = storeConfig.sortKeys[0]) === null || _b === void 0 ? void 0 : _b.key, sortKey);
+            return (0, quidproquo_core_2.actionResult)(item);
+        }
+        catch (error) {
+            return (0, quidproquo_core_2.actionResultErrorFromCaughtError)(error, {
+                InternalServerError: () => (0, quidproquo_core_2.actionResultError)(quidproquo_core_2.KeyValueStoreUpdateErrorTypeEnum.ServiceUnavailable, 'KVS Service Unavailable'),
+                ResourceNotFoundException: () => (0, quidproquo_core_2.actionResultError)(quidproquo_core_2.KeyValueStoreUpdateErrorTypeEnum.ResourceNotFound, 'KVS Resource Not Found'),
+            });
+        }
     });
 };
 const getKeyValueStoreUpdateActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/queue/getQueueSendMessageActionProcessor.js

@@ -18,12 +18,22 @@ const getProcessQueueSendMessage = (qpqConfig) => {
     return (_a, session_1) => __awaiter(void 0, [_a, session_1], void 0, function* ({ queueName, queueMessages }, session) {
         // While we have some uuids
         const sqsQueueName = (0, qpqAwsLambdaRuntimeConfigUtils_1.resolveResourceName)(queueName, qpqConfig);
-        yield (0, sendMessages_1.sendMessages)(sqsQueueName, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), queueMessages.map((message) => {
-            // Add the session info to the message
-            const queueMessageWithSession = Object.assign(Object.assign({}, message), { storySession: session });
-            return JSON.stringify(queueMessageWithSession);
-        }));
-        return (0, quidproquo_core_1.actionResult)(void 0);
+        try {
+            yield (0, sendMessages_1.sendMessages)(sqsQueueName, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), queueMessages.map((message) => {
+                // Add the session info to the message
+                const queueMessageWithSession = Object.assign(Object.assign({}, message), { storySession: (0, quidproquo_core_1.toCrossServiceSession)(session) });
+                return JSON.stringify(queueMessageWithSession);
+            }));
+            return (0, quidproquo_core_1.actionResult)(void 0);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                AccessDenied: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.QueueSendMessagesErrorTypeEnum.AccessDenied, 'Access denied sending to queue'),
+                AccessDeniedException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.QueueSendMessagesErrorTypeEnum.AccessDenied, 'Access denied sending to queue'),
+                QueueDoesNotExist: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.QueueSendMessagesErrorTypeEnum.QueueNotFound, `Queue not found: ${queueName}`),
+                RequestThrottled: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.QueueSendMessagesErrorTypeEnum.ServiceUnavailable, 'Queue throttled'),
+            });
+        }
     });
 };
 const getQueueSendMessagesActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/system/getSystemExecuteStoryActionProcessor.js

@@ -17,7 +17,7 @@ exports.getDateNow = getDateNow;
 const getProcessExecuteStory = (qpqConfig) => {
     const moduleName = quidproquo_core_1.qpqCoreUtils.getApplicationModuleName(qpqConfig);
     return (payload, session, actionProcessors, logger, updateSession, dynamicModuleLoader) => __awaiter(void 0, void 0, void 0, function* () {
-        var _a, _b, _c, _d;
+        var _a, _b, _c, _d, _e;
         let story = yield dynamicModuleLoader(payload.runtime);
         if (!story) {
             return (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.ErrorTypeEnum.NotFound, `Unable to dynamically load: [${payload.runtime}]`);
@@ -25,9 +25,10 @@ const getProcessExecuteStory = (qpqConfig) => {
         const functionKey = (0, quidproquo_core_1.getUniqueKeyFromQpqFunctionRuntime)(payload.runtime);
         const resolveStory = (0, quidproquo_core_1.createRuntime)(qpqConfig, {
             context: ((_a = payload.storySession) === null || _a === void 0 ? void 0 : _a.context) || session.context,
-            depth: (((_b = payload.storySession) === null || _b === void 0 ? void 0 : _b.depth) || session.depth || 0) + 1,
-            decodedAccessToken: ((_c = payload.storySession) === null || _c === void 0 ? void 0 : _c.decodedAccessToken) || session.decodedAccessToken,
-            correlation: ((_d = payload.storySession) === null || _d === void 0 ? void 0 : _d.correlation) || session.correlation,
+            localContext: ((_b = payload.storySession) === null || _b === void 0 ? void 0 : _b.localContext) || session.localContext,
+            depth: (((_c = payload.storySession) === null || _c === void 0 ? void 0 : _c.depth) || session.depth || 0) + 1,
+            decodedAccessToken: ((_d = payload.storySession) === null || _d === void 0 ? void 0 : _d.decodedAccessToken) || session.decodedAccessToken,
+            correlation: ((_e = payload.storySession) === null || _e === void 0 ? void 0 : _e.correlation) || session.correlation,
         }, () => __awaiter(void 0, void 0, void 0, function* () { return actionProcessors; }), exports.getDateNow, logger, 
         // TODO: Share this logic.
         `${moduleName}::${(0, awsLambdaUtils_1.randomGuid)()}`, quidproquo_core_1.QpqRuntimeType.EXECUTE_STORY, dynamicModuleLoader, payload.runtime, []);

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryAssociateSoftwareTokenActionProcessor.d.ts

@@ -0,0 +1,2 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export declare const getUserDirectoryAssociateSoftwareTokenActionProcessor: ActionProcessorListResolver;

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryAssociateSoftwareTokenActionProcessor.js

@@ -0,0 +1,28 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getUserDirectoryAssociateSoftwareTokenActionProcessor = void 0;
+const quidproquo_config_aws_1 = require("quidproquo-config-aws");
+const quidproquo_core_1 = require("quidproquo-core");
+const associateSoftwareToken_1 = require("../../../logic/cognito/associateSoftwareToken");
+const getProcessAssociateSoftwareToken = (qpqConfig) => {
+    return (_a) => __awaiter(void 0, [_a], void 0, function* ({ session }) {
+        const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
+        const response = yield (0, associateSoftwareToken_1.associateSoftwareToken)(region, session);
+        return (0, quidproquo_core_1.actionResult)(response);
+    });
+};
+const getUserDirectoryAssociateSoftwareTokenActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {
+    return ({
+        [quidproquo_core_1.UserDirectoryActionType.AssociateSoftwareToken]: getProcessAssociateSoftwareToken(qpqConfig),
+    });
+});
+exports.getUserDirectoryAssociateSoftwareTokenActionProcessor = getUserDirectoryAssociateSoftwareTokenActionProcessor;

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryChangePasswordActionProcessor.js

@@ -16,8 +16,17 @@ const changePassword_1 = require("../../../logic/cognito/changePassword");
 const getProcessChangePassword = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ oldPassword, newPassword, accessToken }) {
         const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
-        yield (0, changePassword_1.changePassword)(accessToken, oldPassword, newPassword, region);
-        return (0, quidproquo_core_1.actionResult)(void 0);
+        try {
+            yield (0, changePassword_1.changePassword)(accessToken, oldPassword, newPassword, region);
+            return (0, quidproquo_core_1.actionResult)(void 0);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                NotAuthorizedException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryChangePasswordErrorTypeEnum.IncorrectPassword, 'Current password is incorrect'),
+                InvalidPasswordException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryChangePasswordErrorTypeEnum.InvalidNewPassword, 'New password does not meet the password policy'),
+                LimitExceededException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryChangePasswordErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
+            });
+        }
     });
 };
 const getUserDirectoryChangePasswordActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryConfirmEmailVerificationActionProcessor.js

@@ -16,8 +16,17 @@ const verifyUserEmail_1 = require("../../../logic/cognito/verifyUserEmail");
 const getProcessConfirmEmailVerification = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ code, accessToken }) {
         const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
-        yield (0, verifyUserEmail_1.verifyUserEmail)(region, accessToken, code);
-        return (0, quidproquo_core_1.actionResult)(void 0);
+        try {
+            yield (0, verifyUserEmail_1.verifyUserEmail)(region, accessToken, code);
+            return (0, quidproquo_core_1.actionResult)(void 0);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                CodeMismatchException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryConfirmEmailVerificationErrorTypeEnum.InvalidCode, 'Verification code is incorrect'),
+                ExpiredCodeException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryConfirmEmailVerificationErrorTypeEnum.ExpiredCode, 'Verification code has expired'),
+                LimitExceededException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryConfirmEmailVerificationErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
+            });
+        }
     });
 };
 const getUserDirectoryConfirmEmailVerificationActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryConfirmForgotPasswordActionProcessor.js

@@ -22,8 +22,18 @@ const getProcessConfirmForgotPassword = (qpqConfig) => {
         const userPoolId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolIdFromConfig)(userDirectoryName, qpqConfig), region);
         const userPoolClientId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolClientIdFromConfig)(userDirectoryName, qpqConfig), region);
         const resolvedUsername = yield (0, resolveUsernameByPreferredUsername_1.resolveUsernameByPreferredUsername)(userPoolId, region, username);
-        const authResponse = yield (0, confirmForgotPassword_1.confirmForgotPassword)(userPoolId, userPoolClientId, region, code, resolvedUsername, password);
-        return (0, quidproquo_core_1.actionResult)(authResponse);
+        try {
+            const authResponse = yield (0, confirmForgotPassword_1.confirmForgotPassword)(userPoolId, userPoolClientId, region, code, resolvedUsername, password);
+            return (0, quidproquo_core_1.actionResult)(authResponse);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                CodeMismatchException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryConfirmForgotPasswordErrorTypeEnum.InvalidCode, 'Confirmation code is incorrect'),
+                ExpiredCodeException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryConfirmForgotPasswordErrorTypeEnum.ExpiredCode, 'Confirmation code has expired'),
+                InvalidPasswordException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryConfirmForgotPasswordErrorTypeEnum.InvalidNewPassword, 'New password does not meet the password policy'),
+                LimitExceededException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryConfirmForgotPasswordErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
+            });
+        }
     });
 };
 const getUserDirectoryConfirmForgotPasswordActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryCreateUserActionProcessor.js

@@ -23,10 +23,19 @@ const getProcessCreateUser = (qpqConfig) => {
         const userPoolClientId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolClientIdFromConfig)(payload.userDirectoryName, qpqConfig), region);
         const resolvedUsername = yield (0, resolveUsernameByPreferredUsername_1.resolveUsernameByPreferredUsername)(userPoolId, region, payload.createUserRequest.email);
         if (resolvedUsername !== payload.createUserRequest.email) {
-            return (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.ErrorTypeEnum.Conflict, 'An account with this email already exists');
+            return (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryCreateUserErrorTypeEnum.Conflict, 'An account with this email already exists');
+        }
+        try {
+            const authResponse = yield (0, createUser_1.createUser)(userPoolId, region, userPoolClientId, payload.createUserRequest);
+            return (0, quidproquo_core_1.actionResult)(authResponse);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                UsernameExistsException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryCreateUserErrorTypeEnum.Conflict, 'An account with this email already exists'),
+                InvalidPasswordException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryCreateUserErrorTypeEnum.InvalidPassword, 'Password does not meet the password policy'),
+                LimitExceededException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryCreateUserErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
+            });
         }
-        const authResponse = yield (0, createUser_1.createUser)(userPoolId, region, userPoolClientId, payload.createUserRequest);
-        return (0, quidproquo_core_1.actionResult)(authResponse);
     });
 };
 const getUserDirectoryCreateUserActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryDecodeAccessTokenActionProcessor.js

@@ -21,7 +21,7 @@ const getProcessDecodeAccessToken = (qpqConfig) => {
         const userPoolId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolIdFromConfig)(userDirectoryName, qpqConfig), region);
         const authInfo = yield (0, decodeValidJwt_1.decodeValidJwt)(userPoolId, region, ignoreExpiration, accessToken);
         if (!authInfo || !(authInfo === null || authInfo === void 0 ? void 0 : authInfo.username)) {
-            return (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.ErrorTypeEnum.Unauthorized, 'Invalid access token');
+            return (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryDecodeAccessTokenErrorTypeEnum.Unauthorized, 'Invalid access token');
         }
         return (0, quidproquo_core_1.actionResult)(Object.assign(Object.assign({}, authInfo), { userDirectory: userDirectoryName }));
     });

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryForgotPasswordActionProcessor.js

@@ -22,8 +22,16 @@ const getProcessForgotPassword = (qpqConfig) => {
         const userPoolId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolIdFromConfig)(userDirectoryName, qpqConfig), region);
         const userPoolClientId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolClientIdFromConfig)(userDirectoryName, qpqConfig), region);
         const resolvedUsername = yield (0, resolveUsernameByPreferredUsername_1.resolveUsernameByPreferredUsername)(userPoolId, region, username);
-        const authResponse = yield (0, forgotPassword_1.forgotPassword)(userPoolId, userPoolClientId, region, resolvedUsername);
-        return (0, quidproquo_core_1.actionResult)(authResponse);
+        try {
+            const authResponse = yield (0, forgotPassword_1.forgotPassword)(userPoolId, userPoolClientId, region, resolvedUsername);
+            return (0, quidproquo_core_1.actionResult)(authResponse);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                UserNotFoundException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryForgotPasswordErrorTypeEnum.UserNotFound, 'No account found for this user'),
+                LimitExceededException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryForgotPasswordErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),
+            });
+        }
     });
 };
 const getUserDirectoryForgotPasswordActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryGetUserAttributesByUserIdActionProcessor.js

@@ -19,8 +19,15 @@ const getProcessGetUserAttributesByUserId = (qpqConfig) => {
     return (_a, session_1) => __awaiter(void 0, [_a, session_1], void 0, function* ({ userDirectoryName, userId }, session) {
         const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
         const userPoolId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolIdFromConfig)(userDirectoryName, qpqConfig), region);
-        const userAttributes = yield (0, getUserAttributesBySub_1.getUserAttributesBySub)(userPoolId, region, userId);
-        return (0, quidproquo_core_1.actionResult)(userAttributes);
+        try {
+            const userAttributes = yield (0, getUserAttributesBySub_1.getUserAttributesBySub)(userPoolId, region, userId);
+            return (0, quidproquo_core_1.actionResult)(userAttributes);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                USER_NOT_FOUND: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryGetUserAttributesByUserIdErrorTypeEnum.UserNotFound, 'No user found for this userId'),
+            });
+        }
     });
 };
 const getUserDirectoryGetUserAttributesByUserIdActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {

package/lib/commonjs/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersActionProcessor.js

@@ -19,8 +19,16 @@ const getProcessGetUsers = (qpqConfig) => {
     return (_a, session_1) => __awaiter(void 0, [_a, session_1], void 0, function* ({ userDirectoryName, nextPageKey }, session) {
         const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
         const userPoolId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameUserPoolIdFromConfig)(userDirectoryName, qpqConfig), region);
-        const userAttributes = yield (0, listPagedUsers_1.listPagedUsers)(userPoolId, region, nextPageKey);
-        return (0, quidproquo_core_1.actionResult)(userAttributes);
+        try {
+            const userAttributes = yield (0, listPagedUsers_1.listPagedUsers)(userPoolId, region, nextPageKey);
+            return (0, quidproquo_core_1.actionResult)(userAttributes);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                InvalidParameterException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryGetUsersErrorTypeEnum.InvalidPageKey, 'The supplied page key is invalid'),
+                TooManyRequestsException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.UserDirectoryGetUsersErrorTypeEnum.LimitExceeded, 'Too many requests, please try again later'),
+            });
+        }
     });
 };
 const getUserDirectoryGetUsersActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {