quidproquo-actionprocessor-awslambda 0.1.10 → 0.1.12

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersByAttributeActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryGetUsersByAttributeActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersByAttributeActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,6CAA6C,GAC9C,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAE7F,MAAM,6BAA6B,GAAG,CAAC,SAAoB,EAAmD,EAAE;IAC9G,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE;QAChG,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YAE5H,OAAO,YAAY,CAAC,cAAc,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,yBAAyB,EAAE,GAAG,EAAE,CAC9B,iBAAiB,CACf,6CAA6C,CAAC,uBAAuB,EACrE,4DAA4D,CAC7D;gBACH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,6CAA6C,CAAC,aAAa,EAAE,2CAA2C,CAAC;aAC9H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kDAAkD,GAAgC,KAAK,EAClG,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,EAAE,6BAA6B,CAAC,SAAS,CAAC;CACxF,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryGetUsersByAttributeActionProcessor,\n  UserDirectoryGetUsersByAttributeErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { listPagedUsersByAttribute } from '../../../logic/cognito/listPagedUsersByAttribute';\n\nconst getProcessGetUsersByAttribute = (qpqConfig: QPQConfig): UserDirectoryGetUsersByAttributeActionProcessor => {\n  return async ({ userDirectoryName, attribueName, attribueValue, limit, nextPageKey }, _session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    try {\n      const userAttributes = await listPagedUsersByAttribute(userPoolId, region, attribueName, attribueValue, limit, nextPageKey);\n\n      return actionResult(userAttributes);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        InvalidParameterException: () =>\n          actionResultError(\n            UserDirectoryGetUsersByAttributeErrorTypeEnum.InvalidSearchParameters,\n            'The search attribute, value, limit, or page key is invalid',\n          ),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryGetUsersByAttributeErrorTypeEnum.LimitExceeded, 'Too many requests, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryGetUsersByAttributeActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.GetUsersByAttribute]: getProcessGetUsersByAttribute(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryGetUsersByAttributeActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryGetUsersByAttributeActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,6CAA6C,GAC9C,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAE7F,MAAM,6BAA6B,GAAG,CAAC,SAAoB,EAAmD,EAAE;IAC9G,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE;QACtF,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;YAE5H,OAAO,YAAY,CAAC,cAAc,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,yBAAyB,EAAE,GAAG,EAAE,CAC9B,iBAAiB,CACf,6CAA6C,CAAC,uBAAuB,EACrE,4DAA4D,CAC7D;gBACH,sEAAsE;gBACtE,+DAA+D;gBAC/D,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CACf,6CAA6C,CAAC,uBAAuB,EACrE,4DAA4D,CAC7D;gBACH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,6CAA6C,CAAC,aAAa,EAAE,2CAA2C,CAAC;aAC9H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kDAAkD,GAAgC,KAAK,EAClG,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,EAAE,6BAA6B,CAAC,SAAS,CAAC;CACxF,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryGetUsersByAttributeActionProcessor,\n  UserDirectoryGetUsersByAttributeErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { listPagedUsersByAttribute } from '../../../logic/cognito/listPagedUsersByAttribute';\n\nconst getProcessGetUsersByAttribute = (qpqConfig: QPQConfig): UserDirectoryGetUsersByAttributeActionProcessor => {\n  return async ({ userDirectoryName, attribueName, attribueValue, limit, nextPageKey }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    try {\n      const userAttributes = await listPagedUsersByAttribute(userPoolId, region, attribueName, attribueValue, limit, nextPageKey);\n\n      return actionResult(userAttributes);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        InvalidParameterException: () =>\n          actionResultError(\n            UserDirectoryGetUsersByAttributeErrorTypeEnum.InvalidSearchParameters,\n            'The search attribute, value, limit, or page key is invalid',\n          ),\n        // Thrown by buildCognitoUserFilter before the Cognito call, for input\n        // that cannot be embedded safely in a ListUsers filter string.\n        INVALID_COGNITO_FILTER: () =>\n          actionResultError(\n            UserDirectoryGetUsersByAttributeErrorTypeEnum.InvalidSearchParameters,\n            'The search attribute, value, limit, or page key is invalid',\n          ),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryGetUsersByAttributeErrorTypeEnum.LimitExceeded, 'Too many requests, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryGetUsersByAttributeActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.GetUsersByAttribute]: getProcessGetUsersByAttribute(qpqConfig),\n});\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryReadAccessTokenActionProcessor.js

@@ -8,11 +8,15 @@ const getProcessReadAccessToken = (qpqConfig) => {
             }
             return actionResult(decodedAccessToken);
         }
-        const decodedAuthToken = await decodeAccessToken(userDirectoryName, qpqConfig, accessToken, ignoreExpiration);
-        if (!decodedAuthToken || !decodedAuthToken.username) {
+        // decodeAccessToken throws on a missing/unverifiable token; surface that as
+        // a typed Unauthorized result (matching the SetAccessToken processor)
+        // instead of letting the raw error escape as a GenericError.
+        try {
+            return actionResult(await decodeAccessToken(userDirectoryName, qpqConfig, accessToken, ignoreExpiration));
+        }
+        catch {
             return actionResultError(ErrorTypeEnum.Unauthorized, 'Invalid accessToken');
         }
-        return actionResult(decodedAuthToken);
     };
 };
 export const getUserDirectoryReadAccessTokenActionProcessor = async (qpqConfig) => ({

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryReadAccessTokenActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryReadAccessTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryReadAccessTokenActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,aAAa,EAEb,uBAAuB,GAExB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAE7E,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAA+C,EAAE;IACtG,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE,EAAE,EAAE;QAC5F,IAAI,kBAAkB,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBAChF,OAAO,iBAAiB,CAAC,aAAa,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YACxE,CAAC;YAED,OAAO,YAAY,CAAC,kBAAkB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,iBAAiB,CAAC,iBAAiB,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAE9G,IAAI,CAAC,gBAAgB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YACpD,OAAO,iBAAiB,CAAC,aAAa,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,8CAA8C,GAAgC,KAAK,EAC9F,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,eAAe,CAAC,EAAE,yBAAyB,CAAC,SAAS,CAAC;CAChF,CAAC,CAAC","sourcesContent":["import {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  ErrorTypeEnum,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryReadAccessTokenActionProcessor,\n} from 'quidproquo-core';\n\nimport { decodeAccessToken } from '../../../logic/cognito/decodeAccessToken';\n\nconst getProcessReadAccessToken = (qpqConfig: QPQConfig): UserDirectoryReadAccessTokenActionProcessor => {\n  return async ({ userDirectoryName, ignoreExpiration }, { decodedAccessToken, accessToken }) => {\n    if (decodedAccessToken) {\n      if (!ignoreExpiration && decodedAccessToken.exp < Math.floor(Date.now() / 1000)) {\n        return actionResultError(ErrorTypeEnum.Invalid, 'Access has expired');\n      }\n\n      return actionResult(decodedAccessToken);\n    }\n\n    const decodedAuthToken = await decodeAccessToken(userDirectoryName, qpqConfig, accessToken, ignoreExpiration);\n\n    if (!decodedAuthToken || !decodedAuthToken.username) {\n      return actionResultError(ErrorTypeEnum.Unauthorized, 'Invalid accessToken');\n    }\n\n    return actionResult(decodedAuthToken);\n  };\n};\n\nexport const getUserDirectoryReadAccessTokenActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.ReadAccessToken]: getProcessReadAccessToken(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryReadAccessTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryReadAccessTokenActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,aAAa,EAEb,uBAAuB,GAExB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAE7E,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAA+C,EAAE;IACtG,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,EAAE,kBAAkB,EAAE,WAAW,EAAE,EAAE,EAAE;QAC5F,IAAI,kBAAkB,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBAChF,OAAO,iBAAiB,CAAC,aAAa,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YACxE,CAAC;YAED,OAAO,YAAY,CAAC,kBAAkB,CAAC,CAAC;QAC1C,CAAC;QAED,4EAA4E;QAC5E,sEAAsE;QACtE,6DAA6D;QAC7D,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,MAAM,iBAAiB,CAAC,iBAAiB,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC5G,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,iBAAiB,CAAC,aAAa,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,8CAA8C,GAAgC,KAAK,EAC9F,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,eAAe,CAAC,EAAE,yBAAyB,CAAC,SAAS,CAAC;CAChF,CAAC,CAAC","sourcesContent":["import {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  ErrorTypeEnum,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryReadAccessTokenActionProcessor,\n} from 'quidproquo-core';\n\nimport { decodeAccessToken } from '../../../logic/cognito/decodeAccessToken';\n\nconst getProcessReadAccessToken = (qpqConfig: QPQConfig): UserDirectoryReadAccessTokenActionProcessor => {\n  return async ({ userDirectoryName, ignoreExpiration }, { decodedAccessToken, accessToken }) => {\n    if (decodedAccessToken) {\n      if (!ignoreExpiration && decodedAccessToken.exp < Math.floor(Date.now() / 1000)) {\n        return actionResultError(ErrorTypeEnum.Invalid, 'Access has expired');\n      }\n\n      return actionResult(decodedAccessToken);\n    }\n\n    // decodeAccessToken throws on a missing/unverifiable token; surface that as\n    // a typed Unauthorized result (matching the SetAccessToken processor)\n    // instead of letting the raw error escape as a GenericError.\n    try {\n      return actionResult(await decodeAccessToken(userDirectoryName, qpqConfig, accessToken, ignoreExpiration));\n    } catch {\n      return actionResultError(ErrorTypeEnum.Unauthorized, 'Invalid accessToken');\n    }\n  };\n};\n\nexport const getUserDirectoryReadAccessTokenActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.ReadAccessToken]: getProcessReadAccessToken(qpqConfig),\n});\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRefreshTokenActionProcessor.js

@@ -18,7 +18,7 @@ const getProcessRefreshToken = (qpqConfig) => {
         // REFRESH_TOKEN_AUTH validates it and the SECRET_HASH binds it to `username`,
         // so a forged/unverified username cannot mint tokens for another user.
         try {
-            const authResponse = await cognitoRefreshToken(userPoolId, userPoolClientId, qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), session.decodedAccessToken.username, refreshToken);
+            const authResponse = await cognitoRefreshToken(userPoolId, userPoolClientId, region, session.decodedAccessToken.username, refreshToken);
             return actionResult(authResponse);
         }
         catch (error) {

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRefreshTokenActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryRefreshTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRefreshTokenActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,sCAAsC,GACvC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yCAAyC,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,YAAY,IAAI,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1F,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAA4C,EAAE;IAChG,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,yCAAyC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;YACxE,OAAO,iBAAiB,CAAC,sCAAsC,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QACvG,CAAC;QAED,0EAA0E;QAC1E,6EAA6E;QAC7E,0EAA0E;QAC1E,kEAAkE;QAClE,8EAA8E;QAC9E,uEAAuE;QAEvE,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAC5C,UAAU,EACV,gBAAgB,EAChB,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,EAC7D,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EACnC,YAAY,CACb,CAAC;YAEF,OAAO,YAAY,CAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,sCAAsC,CAAC,YAAY,EAAE,yCAAyC,CAAC;gBACnH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,sCAAsC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACvH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2CAA2C,GAAgC,KAAK,EAC3F,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC;CAC1E,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryRefreshTokenActionProcessor,\n  UserDirectoryRefreshTokenErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { refreshToken as cognitoRefreshToken } from '../../../logic/cognito/refreshToken';\n\nconst getProcessRefreshToken = (qpqConfig: QPQConfig): UserDirectoryRefreshTokenActionProcessor => {\n  return async ({ userDirectoryName, refreshToken }, session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    if (!session.decodedAccessToken || !session.decodedAccessToken.username) {\n      return actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.Unauthorized, 'Invalid accessToken');\n    }\n\n    // NOTE: we intentionally do NOT gate on decodedAccessToken.wasValid here.\n    // Refresh must accept a signature-valid-but-expired access token (that's the\n    // point of refreshing), and wasValid folds in the expiry check. The trust\n    // anchor for this operation is the refreshToken itself: Cognito's\n    // REFRESH_TOKEN_AUTH validates it and the SECRET_HASH binds it to `username`,\n    // so a forged/unverified username cannot mint tokens for another user.\n\n    try {\n      const authResponse = await cognitoRefreshToken(\n        userPoolId,\n        userPoolClientId,\n        qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig),\n        session.decodedAccessToken.username,\n        refreshToken,\n      );\n\n      return actionResult(authResponse);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () =>\n          actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.Unauthorized, 'Refresh token is invalid or has expired'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRefreshTokenActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.RefreshToken]: getProcessRefreshToken(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryRefreshTokenActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRefreshTokenActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,sCAAsC,GACvC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,yCAAyC,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,YAAY,IAAI,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1F,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAA4C,EAAE;IAChG,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,yCAAyC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;YACxE,OAAO,iBAAiB,CAAC,sCAAsC,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;QACvG,CAAC;QAED,0EAA0E;QAC1E,6EAA6E;QAC7E,0EAA0E;QAC1E,kEAAkE;QAClE,8EAA8E;QAC9E,uEAAuE;QAEvE,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAExI,OAAO,YAAY,CAAC,YAAY,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,sCAAsC,CAAC,YAAY,EAAE,yCAAyC,CAAC;gBACnH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,sCAAsC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACvH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2CAA2C,GAAgC,KAAK,EAC3F,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC,SAAS,CAAC;CAC1E,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryRefreshTokenActionProcessor,\n  UserDirectoryRefreshTokenErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { refreshToken as cognitoRefreshToken } from '../../../logic/cognito/refreshToken';\n\nconst getProcessRefreshToken = (qpqConfig: QPQConfig): UserDirectoryRefreshTokenActionProcessor => {\n  return async ({ userDirectoryName, refreshToken }, session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    if (!session.decodedAccessToken || !session.decodedAccessToken.username) {\n      return actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.Unauthorized, 'Invalid accessToken');\n    }\n\n    // NOTE: we intentionally do NOT gate on decodedAccessToken.wasValid here.\n    // Refresh must accept a signature-valid-but-expired access token (that's the\n    // point of refreshing), and wasValid folds in the expiry check. The trust\n    // anchor for this operation is the refreshToken itself: Cognito's\n    // REFRESH_TOKEN_AUTH validates it and the SECRET_HASH binds it to `username`,\n    // so a forged/unverified username cannot mint tokens for another user.\n\n    try {\n      const authResponse = await cognitoRefreshToken(userPoolId, userPoolClientId, region, session.decodedAccessToken.username, refreshToken);\n\n      return actionResult(authResponse);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotAuthorizedException: () =>\n          actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.Unauthorized, 'Refresh token is invalid or has expired'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryRefreshTokenErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRefreshTokenActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.RefreshToken]: getProcessRefreshToken(qpqConfig),\n});\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.js

@@ -3,7 +3,7 @@ import { actionResult, actionResultError, actionResultErrorFromCaughtError, Auth
 import { ChallengeNameType } from '@aws-sdk/client-cognito-identity-provider';
 import { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';
 import { getExportedValue } from '../../../logic/cloudformation/getExportedValue';
-import { respondToAuthChallengeChallenge } from '../../../logic/cognito/respondToAuthChallengeChallenge';
+import { respondToAuthChallenge } from '../../../logic/cognito/respondToAuthChallenge';
 import { verifySoftwareToken } from '../../../logic/cognito/verifySoftwareToken';
 const anyAuthChallengeToCognitoAttributes = (authChallenge) => {
     switch (authChallenge.challenge) {
@@ -53,7 +53,7 @@ const getProcessRespondToAuthChallenge = (qpqConfig) => {
             if (authChallenge.challenge === AuthenticateUserChallenge.MFA_SETUP) {
                 session = await verifySoftwareToken(region, session, authChallenge.mfaCode);
             }
-            const response = await respondToAuthChallengeChallenge(userPoolId, userPoolClientId, region, authChallenge.username, session, anyAuthChallengeToCognitoChallengeName(authChallenge), anyAuthChallengeToCognitoAttributes(authChallenge));
+            const response = await respondToAuthChallenge(userPoolId, userPoolClientId, region, authChallenge.username, session, anyAuthChallengeToCognitoChallengeName(authChallenge), anyAuthChallengeToCognitoAttributes(authChallenge));
             return actionResult(response);
         }
         catch (error) {

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectoryRespondToAuthChallengeActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,yBAAyB,EAEzB,uBAAuB,EAEvB,gDAAgD,GACjD,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAE9E,OAAO,EAAE,yCAAyC,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,wDAAwD,CAAC;AACzG,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAEjF,MAAM,mCAAmC,GAAG,CAAC,aAA+B,EAA0B,EAAE;IACtG,QAAQ,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,yBAAyB,CAAC,qBAAqB;YAClD,OAAO;gBACL,YAAY,EAAE,aAAa,CAAC,WAAW;aACxC,CAAC;QAEJ,KAAK,yBAAyB,CAAC,gBAAgB;YAC7C,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC;aACtD,CAAC;QAEJ,KAAK,yBAAyB,CAAC,kBAAkB;YAC/C,OAAO;gBACL,uBAAuB,EAAE,aAAa,CAAC,OAAO;aAC/C,CAAC;QAEJ,6EAA6E;QAC7E,4EAA4E;QAC5E,KAAK,yBAAyB,CAAC,SAAS;YACtC,OAAO,EAAE,CAAC;QAEZ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,sCAAsC,GAAG,CAAC,aAA+B,EAAqB,EAAE;IACpG,QAAQ,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,yBAAyB,CAAC,qBAAqB;YAClD,OAAO,iBAAiB,CAAC,qBAAqB,CAAC;QAEjD,KAAK,yBAAyB,CAAC,gBAAgB;YAC7C,OAAO,iBAAiB,CAAC,gBAAgB,CAAC;QAE5C,KAAK,yBAAyB,CAAC,kBAAkB;YAC/C,OAAO,iBAAiB,CAAC,kBAAkB,CAAC;QAE9C,KAAK,yBAAyB,CAAC,SAAS;YACtC,OAAO,iBAAiB,CAAC,SAAS,CAAC;QAErC;YACE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gCAAgC,GAAG,CAAC,SAAoB,EAAsD,EAAE;IACpH,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,aAAa,EAAE,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,yCAAyC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,6EAA6E;QAC7E,gEAAgE;QAChE,IAAI,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;QAEpC,IAAI,CAAC;YACH,IAAI,aAAa,CAAC,SAAS,KAAK,yBAAyB,CAAC,SAAS,EAAE,CAAC;gBACpE,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,+BAA+B,CACpD,UAAU,EACV,gBAAgB,EAChB,MAAM,EACN,aAAa,CAAC,QAAQ,EACtB,OAAO,EACP,sCAAsC,CAAC,aAAa,CAAC,EACrD,mCAAmC,CAAC,aAAa,CAAC,CACnD,CAAC;YAEF,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAC1B,iBAAiB,CAAC,gDAAgD,CAAC,WAAW,EAAE,gCAAgC,CAAC;gBACnH,+BAA+B,EAAE,GAAG,EAAE,CACpC,iBAAiB,CAAC,gDAAgD,CAAC,WAAW,EAAE,gCAAgC,CAAC;gBACnH,oBAAoB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,gDAAgD,CAAC,WAAW,EAAE,+BAA+B,CAAC;gBAC5I,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,gDAAgD,CAAC,kBAAkB,EAAE,gDAAgD,CAAC;gBAC1I,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,gDAAgD,CAAC,YAAY,EAAE,iDAAiD,CAAC;gBACrI,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,gDAAgD,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBAChI,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,gDAAgD,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACjI,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qDAAqD,GAAgC,KAAK,EACrG,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,sBAAsB,CAAC,EAAE,gCAAgC,CAAC,SAAS,CAAC;CAC9F,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  AnyAuthChallenge,\n  AuthenticateUserChallenge,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryRespondToAuthChallengeActionProcessor,\n  UserDirectoryRespondToAuthChallengeErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { ChallengeNameType } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { respondToAuthChallengeChallenge } from '../../../logic/cognito/respondToAuthChallengeChallenge';\nimport { verifySoftwareToken } from '../../../logic/cognito/verifySoftwareToken';\n\nconst anyAuthChallengeToCognitoAttributes = (authChallenge: AnyAuthChallenge): Record<string, string> => {\n  switch (authChallenge.challenge) {\n    case AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:\n      return {\n        NEW_PASSWORD: authChallenge.newPassword,\n      };\n\n    case AuthenticateUserChallenge.CUSTOM_CHALLENGE:\n      return {\n        ANSWER: JSON.stringify(authChallenge.challengeAnswer),\n      };\n\n    case AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA:\n      return {\n        SOFTWARE_TOKEN_MFA_CODE: authChallenge.mfaCode,\n      };\n\n    // MFA_SETUP completes with just USERNAME/SESSION — the TOTP code is consumed\n    // by the preceding VerifySoftwareToken call, not by RespondToAuthChallenge.\n    case AuthenticateUserChallenge.MFA_SETUP:\n      return {};\n\n    default:\n      return {};\n  }\n};\n\nconst anyAuthChallengeToCognitoChallengeName = (authChallenge: AnyAuthChallenge): ChallengeNameType => {\n  switch (authChallenge.challenge) {\n    case AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:\n      return ChallengeNameType.NEW_PASSWORD_REQUIRED;\n\n    case AuthenticateUserChallenge.CUSTOM_CHALLENGE:\n      return ChallengeNameType.CUSTOM_CHALLENGE;\n\n    case AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA:\n      return ChallengeNameType.SOFTWARE_TOKEN_MFA;\n\n    case AuthenticateUserChallenge.MFA_SETUP:\n      return ChallengeNameType.MFA_SETUP;\n\n    default:\n      throw new Error(`Unknown challenge`);\n  }\n};\n\nconst getProcessRespondToAuthChallenge = (qpqConfig: QPQConfig): UserDirectoryRespondToAuthChallengeActionProcessor => {\n  return async ({ userDirectoryName, authChallenge }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    // MFA_SETUP must verify the TOTP code first; Cognito returns a fresh session\n    // that is then used to complete the challenge and issue tokens.\n    let session = authChallenge.session;\n\n    try {\n      if (authChallenge.challenge === AuthenticateUserChallenge.MFA_SETUP) {\n        session = await verifySoftwareToken(region, session, authChallenge.mfaCode);\n      }\n\n      const response = await respondToAuthChallengeChallenge(\n        userPoolId,\n        userPoolClientId,\n        region,\n        authChallenge.username,\n        session,\n        anyAuthChallengeToCognitoChallengeName(authChallenge),\n        anyAuthChallengeToCognitoAttributes(authChallenge),\n      );\n\n      return actionResult(response);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        CodeMismatchException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidCode, 'The supplied code is incorrect'),\n        EnableSoftwareTokenMFAException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidCode, 'The supplied code is incorrect'),\n        ExpiredCodeException: () => actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.ExpiredCode, 'The supplied code has expired'),\n        InvalidPasswordException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidNewPassword, 'New password does not meet the password policy'),\n        NotAuthorizedException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.Unauthorized, 'The challenge session is invalid or has expired'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRespondToAuthChallengeActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.RespondToAuthChallenge]: getProcessRespondToAuthChallenge(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectoryRespondToAuthChallengeActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectoryRespondToAuthChallengeActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,yBAAyB,EAEzB,uBAAuB,EAEvB,gDAAgD,GACjD,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAE9E,OAAO,EAAE,yCAAyC,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AACzH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAEjF,MAAM,mCAAmC,GAAG,CAAC,aAA+B,EAA0B,EAAE;IACtG,QAAQ,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,yBAAyB,CAAC,qBAAqB;YAClD,OAAO;gBACL,YAAY,EAAE,aAAa,CAAC,WAAW;aACxC,CAAC;QAEJ,KAAK,yBAAyB,CAAC,gBAAgB;YAC7C,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC;aACtD,CAAC;QAEJ,KAAK,yBAAyB,CAAC,kBAAkB;YAC/C,OAAO;gBACL,uBAAuB,EAAE,aAAa,CAAC,OAAO;aAC/C,CAAC;QAEJ,6EAA6E;QAC7E,4EAA4E;QAC5E,KAAK,yBAAyB,CAAC,SAAS;YACtC,OAAO,EAAE,CAAC;QAEZ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,sCAAsC,GAAG,CAAC,aAA+B,EAAqB,EAAE;IACpG,QAAQ,aAAa,CAAC,SAAS,EAAE,CAAC;QAChC,KAAK,yBAAyB,CAAC,qBAAqB;YAClD,OAAO,iBAAiB,CAAC,qBAAqB,CAAC;QAEjD,KAAK,yBAAyB,CAAC,gBAAgB;YAC7C,OAAO,iBAAiB,CAAC,gBAAgB,CAAC;QAE5C,KAAK,yBAAyB,CAAC,kBAAkB;YAC/C,OAAO,iBAAiB,CAAC,kBAAkB,CAAC;QAE9C,KAAK,yBAAyB,CAAC,SAAS;YACtC,OAAO,iBAAiB,CAAC,SAAS,CAAC;QAErC;YACE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gCAAgC,GAAG,CAAC,SAAoB,EAAsD,EAAE;IACpH,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,aAAa,EAAE,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,yCAAyC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEjI,6EAA6E;QAC7E,gEAAgE;QAChE,IAAI,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;QAEpC,IAAI,CAAC;YACH,IAAI,aAAa,CAAC,SAAS,KAAK,yBAAyB,CAAC,SAAS,EAAE,CAAC;gBACpE,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAC3C,UAAU,EACV,gBAAgB,EAChB,MAAM,EACN,aAAa,CAAC,QAAQ,EACtB,OAAO,EACP,sCAAsC,CAAC,aAAa,CAAC,EACrD,mCAAmC,CAAC,aAAa,CAAC,CACnD,CAAC;YAEF,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAC1B,iBAAiB,CAAC,gDAAgD,CAAC,WAAW,EAAE,gCAAgC,CAAC;gBACnH,+BAA+B,EAAE,GAAG,EAAE,CACpC,iBAAiB,CAAC,gDAAgD,CAAC,WAAW,EAAE,gCAAgC,CAAC;gBACnH,oBAAoB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,gDAAgD,CAAC,WAAW,EAAE,+BAA+B,CAAC;gBAC5I,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,gDAAgD,CAAC,kBAAkB,EAAE,gDAAgD,CAAC;gBAC1I,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,gDAAgD,CAAC,YAAY,EAAE,iDAAiD,CAAC;gBACrI,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,gDAAgD,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBAChI,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,gDAAgD,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACjI,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qDAAqD,GAAgC,KAAK,EACrG,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,sBAAsB,CAAC,EAAE,gCAAgC,CAAC,SAAS,CAAC;CAC9F,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  AnyAuthChallenge,\n  AuthenticateUserChallenge,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectoryRespondToAuthChallengeActionProcessor,\n  UserDirectoryRespondToAuthChallengeErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { ChallengeNameType } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { getCFExportNameUserPoolClientIdFromConfig, getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { respondToAuthChallenge } from '../../../logic/cognito/respondToAuthChallenge';\nimport { verifySoftwareToken } from '../../../logic/cognito/verifySoftwareToken';\n\nconst anyAuthChallengeToCognitoAttributes = (authChallenge: AnyAuthChallenge): Record<string, string> => {\n  switch (authChallenge.challenge) {\n    case AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:\n      return {\n        NEW_PASSWORD: authChallenge.newPassword,\n      };\n\n    case AuthenticateUserChallenge.CUSTOM_CHALLENGE:\n      return {\n        ANSWER: JSON.stringify(authChallenge.challengeAnswer),\n      };\n\n    case AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA:\n      return {\n        SOFTWARE_TOKEN_MFA_CODE: authChallenge.mfaCode,\n      };\n\n    // MFA_SETUP completes with just USERNAME/SESSION — the TOTP code is consumed\n    // by the preceding VerifySoftwareToken call, not by RespondToAuthChallenge.\n    case AuthenticateUserChallenge.MFA_SETUP:\n      return {};\n\n    default:\n      return {};\n  }\n};\n\nconst anyAuthChallengeToCognitoChallengeName = (authChallenge: AnyAuthChallenge): ChallengeNameType => {\n  switch (authChallenge.challenge) {\n    case AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED:\n      return ChallengeNameType.NEW_PASSWORD_REQUIRED;\n\n    case AuthenticateUserChallenge.CUSTOM_CHALLENGE:\n      return ChallengeNameType.CUSTOM_CHALLENGE;\n\n    case AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA:\n      return ChallengeNameType.SOFTWARE_TOKEN_MFA;\n\n    case AuthenticateUserChallenge.MFA_SETUP:\n      return ChallengeNameType.MFA_SETUP;\n\n    default:\n      throw new Error(`Unknown challenge`);\n  }\n};\n\nconst getProcessRespondToAuthChallenge = (qpqConfig: QPQConfig): UserDirectoryRespondToAuthChallengeActionProcessor => {\n  return async ({ userDirectoryName, authChallenge }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const userPoolClientId = await getExportedValue(getCFExportNameUserPoolClientIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    // MFA_SETUP must verify the TOTP code first; Cognito returns a fresh session\n    // that is then used to complete the challenge and issue tokens.\n    let session = authChallenge.session;\n\n    try {\n      if (authChallenge.challenge === AuthenticateUserChallenge.MFA_SETUP) {\n        session = await verifySoftwareToken(region, session, authChallenge.mfaCode);\n      }\n\n      const response = await respondToAuthChallenge(\n        userPoolId,\n        userPoolClientId,\n        region,\n        authChallenge.username,\n        session,\n        anyAuthChallengeToCognitoChallengeName(authChallenge),\n        anyAuthChallengeToCognitoAttributes(authChallenge),\n      );\n\n      return actionResult(response);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        CodeMismatchException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidCode, 'The supplied code is incorrect'),\n        EnableSoftwareTokenMFAException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidCode, 'The supplied code is incorrect'),\n        ExpiredCodeException: () => actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.ExpiredCode, 'The supplied code has expired'),\n        InvalidPasswordException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.InvalidNewPassword, 'New password does not meet the password policy'),\n        NotAuthorizedException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.Unauthorized, 'The challenge session is invalid or has expired'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectoryRespondToAuthChallengeErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectoryRespondToAuthChallengeActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.RespondToAuthChallenge]: getProcessRespondToAuthChallenge(qpqConfig),\n});\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySetPasswordActionProcessor.js

@@ -5,7 +5,7 @@ import { getExportedValue } from '../../../logic/cloudformation/getExportedValue
 import { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';
 import { setUserPassword } from '../../../logic/cognito/setUserPassword';
 const getProcessSetPassword = (qpqConfig) => {
-    return async ({ userDirectoryName, newPassword, username }, session) => {
+    return async ({ userDirectoryName, newPassword, username }) => {
         const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
         const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);
         const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, username);

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySetPasswordActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectorySetPasswordActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectorySetPasswordActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,qCAAqC,GACtC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,kCAAkC,EAAE,MAAM,2DAA2D,CAAC;AAC/G,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAEzE,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAA2C,EAAE;IAC9F,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE;QACrE,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,kCAAkC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEhG,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;YAEzE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,qCAAqC,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBACpI,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,qCAAqC,CAAC,kBAAkB,EAAE,4CAA4C,CAAC;gBAC3H,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,qCAAqC,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBACrH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,qCAAqC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACtH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0CAA0C,GAAgC,KAAK,EAC1F,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC;CACxE,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectorySetPasswordActionProcessor,\n  UserDirectorySetPasswordErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';\nimport { setUserPassword } from '../../../logic/cognito/setUserPassword';\n\nconst getProcessSetPassword = (qpqConfig: QPQConfig): UserDirectorySetPasswordActionProcessor => {\n  return async ({ userDirectoryName, newPassword, username }, session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, username);\n\n    try {\n      await setUserPassword(region, userPoolId, resolvedUsername, newPassword);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        UserNotFoundException: () => actionResultError(UserDirectorySetPasswordErrorTypeEnum.UserNotFound, 'No account found for this user'),\n        InvalidPasswordException: () =>\n          actionResultError(UserDirectorySetPasswordErrorTypeEnum.InvalidNewPassword, 'Password does not meet the password policy'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectorySetPasswordErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectorySetPasswordErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectorySetPasswordActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.SetPassword]: getProcessSetPassword(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectorySetPasswordActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectorySetPasswordActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,qCAAqC,GACtC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,kCAAkC,EAAE,MAAM,2DAA2D,CAAC;AAC/G,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAEzE,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAA2C,EAAE;IAC9F,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,kCAAkC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEhG,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;YAEzE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,qCAAqC,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBACpI,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,qCAAqC,CAAC,kBAAkB,EAAE,4CAA4C,CAAC;gBAC3H,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,qCAAqC,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBACrH,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,qCAAqC,CAAC,aAAa,EAAE,2CAA2C,CAAC;aACtH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0CAA0C,GAAgC,KAAK,EAC1F,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC;CACxE,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectorySetPasswordActionProcessor,\n  UserDirectorySetPasswordErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';\nimport { setUserPassword } from '../../../logic/cognito/setUserPassword';\n\nconst getProcessSetPassword = (qpqConfig: QPQConfig): UserDirectorySetPasswordActionProcessor => {\n  return async ({ userDirectoryName, newPassword, username }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, username);\n\n    try {\n      await setUserPassword(region, userPoolId, resolvedUsername, newPassword);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        UserNotFoundException: () => actionResultError(UserDirectorySetPasswordErrorTypeEnum.UserNotFound, 'No account found for this user'),\n        InvalidPasswordException: () =>\n          actionResultError(UserDirectorySetPasswordErrorTypeEnum.InvalidNewPassword, 'Password does not meet the password policy'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectorySetPasswordErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectorySetPasswordErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectorySetPasswordActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.SetPassword]: getProcessSetPassword(qpqConfig),\n});\n"]}

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySetUserAttributesActionProcessor.js

@@ -5,7 +5,7 @@ import { getExportedValue } from '../../../logic/cloudformation/getExportedValue
 import { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';
 import { setUserAttributes } from '../../../logic/cognito/setUserAttributes';
 const getProcessSetUserAttributes = (qpqConfig) => {
-    return async ({ userDirectoryName, username, userAttributes }, session) => {
+    return async ({ userDirectoryName, username, userAttributes }) => {
         const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
         const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);
         const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, username);

package/lib/esm/getActionProcessor/core/userDirectory/getUserDirectorySetUserAttributesActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserDirectorySetUserAttributesActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectorySetUserAttributesActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,2CAA2C,GAC5C,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,kCAAkC,EAAE,MAAM,2DAA2D,CAAC;AAC/G,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAE7E,MAAM,2BAA2B,GAAG,CAAC,SAAoB,EAAiD,EAAE;IAC1G,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE;QACxE,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,kCAAkC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEhG,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;YAE9E,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2CAA2C,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBAC1I,yBAAyB,EAAE,GAAG,EAAE,CAC9B,iBAAiB,CAAC,2CAA2C,CAAC,iBAAiB,EAAE,oCAAoC,CAAC;gBACxH,oBAAoB,EAAE,GAAG,EAAE,CACzB,iBAAiB,CAAC,2CAA2C,CAAC,WAAW,EAAE,8CAA8C,CAAC;gBAC5H,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,2CAA2C,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBAC3H,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,2CAA2C,CAAC,aAAa,EAAE,2CAA2C,CAAC;aAC5H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gDAAgD,GAAgC,KAAK,EAChG,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,CAAC,SAAS,CAAC;CACpF,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectorySetUserAttributesActionProcessor,\n  UserDirectorySetUserAttributesErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';\nimport { setUserAttributes } from '../../../logic/cognito/setUserAttributes';\n\nconst getProcessSetUserAttributes = (qpqConfig: QPQConfig): UserDirectorySetUserAttributesActionProcessor => {\n  return async ({ userDirectoryName, username, userAttributes }, session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, username);\n\n    try {\n      await setUserAttributes(userPoolId, region, resolvedUsername, userAttributes);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        UserNotFoundException: () => actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.UserNotFound, 'No account found for this user'),\n        InvalidParameterException: () =>\n          actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.InvalidAttributes, 'One or more attributes are invalid'),\n        AliasExistsException: () =>\n          actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.AliasExists, 'That email or phone number is already in use'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectorySetUserAttributesActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.SetUserAttributes]: getProcessSetUserAttributes(qpqConfig),\n});\n"]}
+{"version":3,"file":"getUserDirectorySetUserAttributesActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/userDirectory/getUserDirectorySetUserAttributesActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAEhC,uBAAuB,EAEvB,2CAA2C,GAC5C,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,kCAAkC,EAAE,MAAM,2DAA2D,CAAC;AAC/G,OAAO,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAE7E,MAAM,2BAA2B,GAAG,CAAC,SAAoB,EAAiD,EAAE;IAC1G,OAAO,KAAK,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;QAC/D,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAErH,MAAM,gBAAgB,GAAG,MAAM,kCAAkC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEhG,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;YAE9E,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,qBAAqB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2CAA2C,CAAC,YAAY,EAAE,gCAAgC,CAAC;gBAC1I,yBAAyB,EAAE,GAAG,EAAE,CAC9B,iBAAiB,CAAC,2CAA2C,CAAC,iBAAiB,EAAE,oCAAoC,CAAC;gBACxH,oBAAoB,EAAE,GAAG,EAAE,CACzB,iBAAiB,CAAC,2CAA2C,CAAC,WAAW,EAAE,8CAA8C,CAAC;gBAC5H,sBAAsB,EAAE,GAAG,EAAE,CAC3B,iBAAiB,CAAC,2CAA2C,CAAC,aAAa,EAAE,2CAA2C,CAAC;gBAC3H,wBAAwB,EAAE,GAAG,EAAE,CAC7B,iBAAiB,CAAC,2CAA2C,CAAC,aAAa,EAAE,2CAA2C,CAAC;aAC5H,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gDAAgD,GAAgC,KAAK,EAChG,SAAoB,EACU,EAAE,CAAC,CAAC;IAClC,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,CAAC,SAAS,CAAC;CACpF,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n  UserDirectoryActionType,\n  UserDirectorySetUserAttributesActionProcessor,\n  UserDirectorySetUserAttributesErrorTypeEnum,\n} from 'quidproquo-core';\n\nimport { getCFExportNameUserPoolIdFromConfig } from '../../../awsNamingUtils';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\nimport { resolveUsernameByPreferredUsername } from '../../../logic/cognito/resolveUsernameByPreferredUsername';\nimport { setUserAttributes } from '../../../logic/cognito/setUserAttributes';\n\nconst getProcessSetUserAttributes = (qpqConfig: QPQConfig): UserDirectorySetUserAttributesActionProcessor => {\n  return async ({ userDirectoryName, username, userAttributes }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const userPoolId = await getExportedValue(getCFExportNameUserPoolIdFromConfig(userDirectoryName, qpqConfig), region);\n\n    const resolvedUsername = await resolveUsernameByPreferredUsername(userPoolId, region, username);\n\n    try {\n      await setUserAttributes(userPoolId, region, resolvedUsername, userAttributes);\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        UserNotFoundException: () => actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.UserNotFound, 'No account found for this user'),\n        InvalidParameterException: () =>\n          actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.InvalidAttributes, 'One or more attributes are invalid'),\n        AliasExistsException: () =>\n          actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.AliasExists, 'That email or phone number is already in use'),\n        LimitExceededException: () =>\n          actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n        TooManyRequestsException: () =>\n          actionResultError(UserDirectorySetUserAttributesErrorTypeEnum.LimitExceeded, 'Too many attempts, please try again later'),\n      });\n    }\n  };\n};\n\nexport const getUserDirectorySetUserAttributesActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [UserDirectoryActionType.SetUserAttributes]: getProcessSetUserAttributes(qpqConfig),\n});\n"]}

package/lib/esm/getActionProcessor/index.js

@@ -1,15 +1,14 @@
 import { getCoreActionProcessor as getNodeCoreActionProcessor, getWebserverActionProcessor as getNodeWebserverActionProcessor, } from 'quidproquo-actionprocessor-node';
 import { getCoreActionProcessor as getAwsCoreActionProcessor } from './core';
 import { getWebserverActionProcessor as getAwsWebserverActionProcessor } from './webserver';
-export const getAwsActionProcessors = async (qpqConfig, dynamicModuleLoader) => {
-    const storyActionProcessor = {
-        ...(await getNodeCoreActionProcessor(qpqConfig, dynamicModuleLoader)),
-        ...(await getNodeWebserverActionProcessor(qpqConfig, dynamicModuleLoader)),
-        ...(await getAwsCoreActionProcessor(qpqConfig, dynamicModuleLoader)),
-        ...(await getAwsWebserverActionProcessor(qpqConfig, dynamicModuleLoader)),
-    };
-    return storyActionProcessor;
-};
+export const getAwsActionProcessors = async (qpqConfig, dynamicModuleLoader) => ({
+    // Node processors supply the platform-neutral implementations; the AWS ones spread
+    // after so any action implemented in both resolves to the AWS-specific processor.
+    ...(await getNodeCoreActionProcessor(qpqConfig, dynamicModuleLoader)),
+    ...(await getNodeWebserverActionProcessor(qpqConfig, dynamicModuleLoader)),
+    ...(await getAwsCoreActionProcessor(qpqConfig, dynamicModuleLoader)),
+    ...(await getAwsWebserverActionProcessor(qpqConfig, dynamicModuleLoader)),
+});
 export * from './core';
 export * from './webserver';
 //# sourceMappingURL=index.js.map

package/lib/esm/getActionProcessor/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/getActionProcessor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,IAAI,0BAA0B,EACpD,2BAA2B,IAAI,+BAA+B,GAC/D,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EAAE,sBAAsB,IAAI,yBAAyB,EAAE,MAAM,QAAQ,CAAC;AAC7E,OAAO,EAAE,2BAA2B,IAAI,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAE5F,MAAM,CAAC,MAAM,sBAAsB,GAAgC,KAAK,EACtE,SAAoB,EACpB,mBAAwC,EACV,EAAE;IAChC,MAAM,oBAAoB,GAAG;QAC3B,GAAG,CAAC,MAAM,0BAA0B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACrE,GAAG,CAAC,MAAM,+BAA+B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAE1E,GAAG,CAAC,MAAM,yBAAyB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACpE,GAAG,CAAC,MAAM,8BAA8B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;KAC1E,CAAC;IAEF,OAAO,oBAAoB,CAAC;AAC9B,CAAC,CAAC;AAEF,cAAc,QAAQ,CAAC;AACvB,cAAc,aAAa,CAAC","sourcesContent":["import {\n  getCoreActionProcessor as getNodeCoreActionProcessor,\n  getWebserverActionProcessor as getNodeWebserverActionProcessor,\n} from 'quidproquo-actionprocessor-node';\nimport { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nimport { getCoreActionProcessor as getAwsCoreActionProcessor } from './core';\nimport { getWebserverActionProcessor as getAwsWebserverActionProcessor } from './webserver';\n\nexport const getAwsActionProcessors: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => {\n  const storyActionProcessor = {\n    ...(await getNodeCoreActionProcessor(qpqConfig, dynamicModuleLoader)),\n    ...(await getNodeWebserverActionProcessor(qpqConfig, dynamicModuleLoader)),\n\n    ...(await getAwsCoreActionProcessor(qpqConfig, dynamicModuleLoader)),\n    ...(await getAwsWebserverActionProcessor(qpqConfig, dynamicModuleLoader)),\n  };\n\n  return storyActionProcessor;\n};\n\nexport * from './core';\nexport * from './webserver';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/getActionProcessor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,IAAI,0BAA0B,EACpD,2BAA2B,IAAI,+BAA+B,GAC/D,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EAAE,sBAAsB,IAAI,yBAAyB,EAAE,MAAM,QAAQ,CAAC;AAC7E,OAAO,EAAE,2BAA2B,IAAI,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAE5F,MAAM,CAAC,MAAM,sBAAsB,GAAgC,KAAK,EACtE,SAAoB,EACpB,mBAAwC,EACV,EAAE,CAAC,CAAC;IAClC,mFAAmF;IACnF,kFAAkF;IAClF,GAAG,CAAC,MAAM,0BAA0B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACrE,GAAG,CAAC,MAAM,+BAA+B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAE1E,GAAG,CAAC,MAAM,yBAAyB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACpE,GAAG,CAAC,MAAM,8BAA8B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;CAC1E,CAAC,CAAC;AAEH,cAAc,QAAQ,CAAC;AACvB,cAAc,aAAa,CAAC","sourcesContent":["import {\n  getCoreActionProcessor as getNodeCoreActionProcessor,\n  getWebserverActionProcessor as getNodeWebserverActionProcessor,\n} from 'quidproquo-actionprocessor-node';\nimport { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nimport { getCoreActionProcessor as getAwsCoreActionProcessor } from './core';\nimport { getWebserverActionProcessor as getAwsWebserverActionProcessor } from './webserver';\n\nexport const getAwsActionProcessors: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  // Node processors supply the platform-neutral implementations; the AWS ones spread\n  // after so any action implemented in both resolves to the AWS-specific processor.\n  ...(await getNodeCoreActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getNodeWebserverActionProcessor(qpqConfig, dynamicModuleLoader)),\n\n  ...(await getAwsCoreActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getAwsWebserverActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n\nexport * from './core';\nexport * from './webserver';\n"]}

package/lib/esm/getActionProcessor/webserver/email/getEmailSendEmailActionProcessor.d.ts

@@ -0,0 +1,2 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export declare const getEmailSendEmailActionProcessor: ActionProcessorListResolver;

package/lib/esm/getActionProcessor/webserver/email/getEmailSendEmailActionProcessor.js

@@ -0,0 +1,28 @@
+import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
+import { actionResult, actionResultError, actionResultErrorFromCaughtError, } from 'quidproquo-core';
+import { EmailActionType, EmailSendEmailErrorTypeEnum } from 'quidproquo-webserver';
+import { sendEmail } from '../../../logic/sesV2/sendEmail';
+const getProcessSendEmail = (qpqConfig) => {
+    return async (payload) => {
+        const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
+        try {
+            const messageId = await sendEmail(payload, region);
+            return actionResult(messageId);
+        }
+        catch (error) {
+            return actionResultErrorFromCaughtError(error, {
+                MessageRejected: () => actionResultError(EmailSendEmailErrorTypeEnum.MessageRejected, 'Message rejected'),
+                MailFromDomainNotVerifiedException: () => actionResultError(EmailSendEmailErrorTypeEnum.SenderNotVerified, 'Sender domain not verified'),
+                AccountSuspendedException: () => actionResultError(EmailSendEmailErrorTypeEnum.AccountSuspended, 'Email sending account suspended'),
+                SendingPausedException: () => actionResultError(EmailSendEmailErrorTypeEnum.SendingPaused, 'Email sending is paused'),
+                TooManyRequestsException: () => actionResultError(EmailSendEmailErrorTypeEnum.Throttled, 'Rate exceeded'),
+                LimitExceededException: () => actionResultError(EmailSendEmailErrorTypeEnum.LimitExceeded, 'Sending limit exceeded'),
+                BadRequestException: () => actionResultError(EmailSendEmailErrorTypeEnum.BadRequest, 'Invalid email request'),
+            });
+        }
+    };
+};
+export const getEmailSendEmailActionProcessor = async (qpqConfig) => ({
+    [EmailActionType.SendEmail]: getProcessSendEmail(qpqConfig),
+});
+//# sourceMappingURL=getEmailSendEmailActionProcessor.js.map

package/lib/esm/getActionProcessor/webserver/email/getEmailSendEmailActionProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getEmailSendEmailActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/email/getEmailSendEmailActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,GAEjC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAiC,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAEnH,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAE3D,MAAM,mBAAmB,GAAG,CAAC,SAAoB,EAAiC,EAAE;IAClF,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAEnD,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,eAAe,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,eAAe,EAAE,kBAAkB,CAAC;gBACzG,kCAAkC,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;gBACxI,yBAAyB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;gBACnI,sBAAsB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,aAAa,EAAE,yBAAyB,CAAC;gBACrH,wBAAwB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,SAAS,EAAE,eAAe,CAAC;gBACzG,sBAAsB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,aAAa,EAAE,wBAAwB,CAAC;gBACpH,mBAAmB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,UAAU,EAAE,uBAAuB,CAAC;aAC9G,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAgC,KAAK,EAAE,SAAoB,EAAgC,EAAE,CAAC,CAAC;IAC1I,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC,SAAS,CAAC;CAC5D,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n} from 'quidproquo-core';\nimport { EmailActionType, EmailSendEmailActionProcessor, EmailSendEmailErrorTypeEnum } from 'quidproquo-webserver';\n\nimport { sendEmail } from '../../../logic/sesV2/sendEmail';\n\nconst getProcessSendEmail = (qpqConfig: QPQConfig): EmailSendEmailActionProcessor => {\n  return async (payload) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      const messageId = await sendEmail(payload, region);\n\n      return actionResult(messageId);\n    } catch (error) {\n      return actionResultErrorFromCaughtError(error, {\n        MessageRejected: () => actionResultError(EmailSendEmailErrorTypeEnum.MessageRejected, 'Message rejected'),\n        MailFromDomainNotVerifiedException: () => actionResultError(EmailSendEmailErrorTypeEnum.SenderNotVerified, 'Sender domain not verified'),\n        AccountSuspendedException: () => actionResultError(EmailSendEmailErrorTypeEnum.AccountSuspended, 'Email sending account suspended'),\n        SendingPausedException: () => actionResultError(EmailSendEmailErrorTypeEnum.SendingPaused, 'Email sending is paused'),\n        TooManyRequestsException: () => actionResultError(EmailSendEmailErrorTypeEnum.Throttled, 'Rate exceeded'),\n        LimitExceededException: () => actionResultError(EmailSendEmailErrorTypeEnum.LimitExceeded, 'Sending limit exceeded'),\n        BadRequestException: () => actionResultError(EmailSendEmailErrorTypeEnum.BadRequest, 'Invalid email request'),\n      });\n    }\n  };\n};\n\nexport const getEmailSendEmailActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [EmailActionType.SendEmail]: getProcessSendEmail(qpqConfig),\n});\n"]}

package/lib/esm/getActionProcessor/webserver/email/getEmailSetDeliveryStatusActionProcessor.d.ts

@@ -0,0 +1,2 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export declare const getEmailSetDeliveryStatusActionProcessor: ActionProcessorListResolver;

package/lib/esm/getActionProcessor/webserver/email/getEmailSetDeliveryStatusActionProcessor.js

@@ -0,0 +1,11 @@
+import { actionResult } from 'quidproquo-core';
+import { EmailActionType } from 'quidproquo-webserver';
+// Deliberately a no-op: the action's meaning is its log entry, which the admin
+// action search folds into the email's entity via the messageId link key.
+const getProcessSetDeliveryStatus = () => {
+    return async () => actionResult(undefined);
+};
+export const getEmailSetDeliveryStatusActionProcessor = async (qpqConfig) => ({
+    [EmailActionType.SetDeliveryStatus]: getProcessSetDeliveryStatus(),
+});
+//# sourceMappingURL=getEmailSetDeliveryStatusActionProcessor.js.map

package/lib/esm/getActionProcessor/webserver/email/getEmailSetDeliveryStatusActionProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getEmailSetDeliveryStatusActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/email/getEmailSetDeliveryStatusActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoD,YAAY,EAAa,MAAM,iBAAiB,CAAC;AAC5G,OAAO,EAAE,eAAe,EAAyC,MAAM,sBAAsB,CAAC;AAE9F,+EAA+E;AAC/E,0EAA0E;AAC1E,MAAM,2BAA2B,GAAG,GAA0C,EAAE;IAC9E,OAAO,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAgC,KAAK,EAAE,SAAoB,EAAgC,EAAE,CAAC,CAAC;IAClJ,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,EAAE;CACnE,CAAC,CAAC","sourcesContent":["import { ActionProcessorList, ActionProcessorListResolver, actionResult, QPQConfig } from 'quidproquo-core';\nimport { EmailActionType, EmailSetDeliveryStatusActionProcessor } from 'quidproquo-webserver';\n\n// Deliberately a no-op: the action's meaning is its log entry, which the admin\n// action search folds into the email's entity via the messageId link key.\nconst getProcessSetDeliveryStatus = (): EmailSetDeliveryStatusActionProcessor => {\n  return async () => actionResult(undefined);\n};\n\nexport const getEmailSetDeliveryStatusActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [EmailActionType.SetDeliveryStatus]: getProcessSetDeliveryStatus(),\n});\n"]}

package/lib/esm/getActionProcessor/webserver/email/index.d.ts

@@ -0,0 +1,2 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export declare const getEmailActionProcessor: ActionProcessorListResolver;

package/lib/esm/getActionProcessor/webserver/email/index.js

@@ -0,0 +1,7 @@
+import { getEmailSendEmailActionProcessor } from './getEmailSendEmailActionProcessor';
+import { getEmailSetDeliveryStatusActionProcessor } from './getEmailSetDeliveryStatusActionProcessor';
+export const getEmailActionProcessor = async (qpqConfig, dynamicModuleLoader) => ({
+    ...(await getEmailSendEmailActionProcessor(qpqConfig, dynamicModuleLoader)),
+    ...(await getEmailSetDeliveryStatusActionProcessor(qpqConfig, dynamicModuleLoader)),
+});
+//# sourceMappingURL=index.js.map

package/lib/esm/getActionProcessor/webserver/email/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/email/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,wCAAwC,EAAE,MAAM,4CAA4C,CAAC;AAEtG,MAAM,CAAC,MAAM,uBAAuB,GAAgC,KAAK,EACvE,SAAoB,EACpB,mBAAwC,EACV,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,gCAAgC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC3E,GAAG,CAAC,MAAM,wCAAwC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;CACpF,CAAC,CAAC","sourcesContent":["import { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nimport { getEmailSendEmailActionProcessor } from './getEmailSendEmailActionProcessor';\nimport { getEmailSetDeliveryStatusActionProcessor } from './getEmailSetDeliveryStatusActionProcessor';\n\nexport const getEmailActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  ...(await getEmailSendEmailActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getEmailSetDeliveryStatusActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n"]}

package/lib/esm/getActionProcessor/webserver/index.d.ts

@@ -1,5 +1,6 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export * from './email';
 export * from './serviceFunction';
 export * from './webEntry';
 export * from './websocket';
-import { ActionProcessorListResolver } from 'quidproquo-core';
 export declare const getWebserverActionProcessor: ActionProcessorListResolver;

package/lib/esm/getActionProcessor/webserver/index.js

@@ -1,10 +1,13 @@
+import { getEmailActionProcessor } from './email';
 import { getServiceFunctionActionProcessor } from './serviceFunction';
 import { getWebEntryActionProcessor } from './webEntry';
 import { getWebsocketActionProcessor } from './websocket';
+export * from './email';
 export * from './serviceFunction';
 export * from './webEntry';
 export * from './websocket';
 export const getWebserverActionProcessor = async (qpqConfig, dynamicModuleLoader) => ({
+    ...(await getEmailActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getWebEntryActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getServiceFunctionActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getWebsocketActionProcessor(qpqConfig, dynamicModuleLoader)),

package/lib/esm/getActionProcessor/webserver/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/getActionProcessor/webserver/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAE1D,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAI5B,MAAM,CAAC,MAAM,2BAA2B,GAAgC,KAAK,EAC3E,SAAoB,EACpB,mBAAwC,EACV,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,0BAA0B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACrE,GAAG,CAAC,MAAM,iCAAiC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC5E,GAAG,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;CACvE,CAAC,CAAC","sourcesContent":["import { getServiceFunctionActionProcessor } from './serviceFunction';\nimport { getWebEntryActionProcessor } from './webEntry';\nimport { getWebsocketActionProcessor } from './websocket';\n\nexport * from './serviceFunction';\nexport * from './webEntry';\nexport * from './websocket';\n\nimport { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nexport const getWebserverActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  ...(await getWebEntryActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getServiceFunctionActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getWebsocketActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/getActionProcessor/webserver/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,iCAAiC,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAE1D,cAAc,SAAS,CAAC;AACxB,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAE5B,MAAM,CAAC,MAAM,2BAA2B,GAAgC,KAAK,EAC3E,SAAoB,EACpB,mBAAwC,EACV,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,uBAAuB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAClE,GAAG,CAAC,MAAM,0BAA0B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACrE,GAAG,CAAC,MAAM,iCAAiC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC5E,GAAG,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;CACvE,CAAC,CAAC","sourcesContent":["import { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nimport { getEmailActionProcessor } from './email';\nimport { getServiceFunctionActionProcessor } from './serviceFunction';\nimport { getWebEntryActionProcessor } from './webEntry';\nimport { getWebsocketActionProcessor } from './websocket';\n\nexport * from './email';\nexport * from './serviceFunction';\nexport * from './webEntry';\nexport * from './websocket';\n\nexport const getWebserverActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  ...(await getEmailActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getWebEntryActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getServiceFunctionActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getWebsocketActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n"]}

package/lib/esm/getActionProcessor/webserver/serviceFunction/getServiceFunctionExecuteActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getServiceFunctionExecuteActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/serviceFunction/getServiceFunctionExecuteActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EAGjB,YAAY,EAEZ,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAA+B,yBAAyB,EAAyC,MAAM,sBAAsB,CAAC;AAErI,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAMhF,MAAM,iBAAiB,GAAG,CAAC,SAAoB,EAAmD,EAAE;IAClG,OAAO,KAAK,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE;QACpE,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,OAAO,GAAG,YAAY,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,YAAY,CAAC,+BAA+B,CAAC,SAAS,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,YAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;QAEpE,MAAM,eAAe,GAAG,4BAA4B,CAAC,GAAG,YAAY,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAEtH,MAAM,oBAAoB,GAA8C;YACtE,YAAY,EAAE,YAAY;YAC1B,OAAO,EAAE,OAAO;YAChB,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC;SAC7C,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAA0B,eAAe,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAE1H,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,OAAO,KAAK,YAAY,KAAK,MAAM,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7I,CAAC;QAED,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAgC,KAAK,EAAE,SAAoB,EAAgC,EAAE,CAAC,CAAC;IAClJ,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,SAAS,CAAC;CAClE,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  EitherActionResult,\n  QPQConfig,\n  qpqCoreUtils,\n  StorySession,\n  toCrossServiceSession,\n} from 'quidproquo-core';\nimport { ExecuteServiceFunctionEvent, ServiceFunctionActionType, ServiceFunctionExecuteActionProcessor } from 'quidproquo-webserver';\n\nimport { getConfigRuntimeResourceName } from '../../../awsNamingUtils';\nimport { executeLambdaByName } from '../../../logic/lambda/executeLambdaByName';\n\ntype AnyExecuteServiceFunctionEventWithSession = ExecuteServiceFunctionEvent<any[]> & {\n  storySession: StorySession;\n};\n\nconst getProcessExecute = (qpqConfig: QPQConfig): ServiceFunctionExecuteActionProcessor<any, any> => {\n  return async ({ functionName, service, payload, isAsync }, session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const appName = qpqCoreUtils.getApplicationName(qpqConfig);\n    const environment = qpqCoreUtils.getApplicationModuleEnvironment(qpqConfig);\n    const feature = qpqCoreUtils.getApplicationModuleFeature(qpqConfig);\n\n    const awsFunctionName = getConfigRuntimeResourceName(`${functionName}-sfunc`, appName, service, environment, feature);\n\n    const serviceFunctionEvent: AnyExecuteServiceFunctionEventWithSession = {\n      functionName: functionName,\n      payload: payload,\n      storySession: toCrossServiceSession(session),\n    };\n\n    const result = await executeLambdaByName<EitherActionResult<any>>(awsFunctionName, region, serviceFunctionEvent, isAsync);\n\n    if (!result) {\n      return actionResult(void 0);\n    }\n\n    if (!result.success) {\n      return actionResultError(result.error.errorType, result.error.errorText, `${service}::${functionName}: ${result?.error.errorStack || ''}`);\n    }\n\n    return actionResult(result.result);\n  };\n};\n\nexport const getServiceFunctionExecuteActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [ServiceFunctionActionType.Execute]: getProcessExecute(qpqConfig),\n});\n"]}
+{"version":3,"file":"getServiceFunctionExecuteActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/serviceFunction/getServiceFunctionExecuteActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EAGjB,YAAY,EAEZ,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAA+B,yBAAyB,EAAyC,MAAM,sBAAsB,CAAC;AAErI,OAAO,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAQhF,MAAM,iBAAiB,GAAG,CAAC,SAAoB,EAAmD,EAAE;IAClG,OAAO,KAAK,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE;QACpE,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,OAAO,GAAG,YAAY,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,WAAW,GAAG,YAAY,CAAC,+BAA+B,CAAC,SAAS,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,YAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;QAEpE,MAAM,eAAe,GAAG,4BAA4B,CAAC,GAAG,YAAY,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAEtH,MAAM,oBAAoB,GAA8C;YACtE,YAAY,EAAE,YAAY;YAC1B,OAAO,EAAE,OAAO;YAChB,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC;SAC7C,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAA0B,eAAe,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAE1H,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,OAAO,KAAK,YAAY,KAAK,MAAM,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;QAC7I,CAAC;QAED,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAgC,KAAK,EAAE,SAAoB,EAAgC,EAAE,CAAC,CAAC;IAClJ,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,SAAS,CAAC;CAClE,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  EitherActionResult,\n  QPQConfig,\n  qpqCoreUtils,\n  StorySession,\n  toCrossServiceSession,\n} from 'quidproquo-core';\nimport { ExecuteServiceFunctionEvent, ServiceFunctionActionType, ServiceFunctionExecuteActionProcessor } from 'quidproquo-webserver';\n\nimport { getConfigRuntimeResourceName } from '../../../awsNamingUtils';\nimport { executeLambdaByName } from '../../../logic/lambda/executeLambdaByName';\n\n// `any` here is a variance boundary: this processor forwards whatever payload/result\n// types the calling story used, so it cannot name them without over-constraining.\ntype AnyExecuteServiceFunctionEventWithSession = ExecuteServiceFunctionEvent<any[]> & {\n  storySession: StorySession;\n};\n\nconst getProcessExecute = (qpqConfig: QPQConfig): ServiceFunctionExecuteActionProcessor<any, any> => {\n  return async ({ functionName, service, payload, isAsync }, session) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const appName = qpqCoreUtils.getApplicationName(qpqConfig);\n    const environment = qpqCoreUtils.getApplicationModuleEnvironment(qpqConfig);\n    const feature = qpqCoreUtils.getApplicationModuleFeature(qpqConfig);\n\n    const awsFunctionName = getConfigRuntimeResourceName(`${functionName}-sfunc`, appName, service, environment, feature);\n\n    const serviceFunctionEvent: AnyExecuteServiceFunctionEventWithSession = {\n      functionName: functionName,\n      payload: payload,\n      storySession: toCrossServiceSession(session),\n    };\n\n    const result = await executeLambdaByName<EitherActionResult<any>>(awsFunctionName, region, serviceFunctionEvent, isAsync);\n\n    if (!result) {\n      return actionResult(void 0);\n    }\n\n    if (!result.success) {\n      return actionResultError(result.error.errorType, result.error.errorText, `${service}::${functionName}: ${result?.error.errorStack || ''}`);\n    }\n\n    return actionResult(result.result);\n  };\n};\n\nexport const getServiceFunctionExecuteActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [ServiceFunctionActionType.Execute]: getProcessExecute(qpqConfig),\n});\n"]}

package/lib/esm/getActionProcessor/webserver/websocket/getWebsocketSendMessageActionProcessor.js

@@ -2,7 +2,7 @@ import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
 import { actionResult, actionResultError, actionResultErrorFromCaughtError, } from 'quidproquo-core';
 import { WebsocketActionType, WebsocketSendMessageErrorTypeEnum } from 'quidproquo-webserver';
 import { getCFExportNameWebsocketApiIdFromConfig } from '../../../awsNamingUtils';
-import { sendMessageToWebSocketConnection } from '../../../logic/apiGateway/websocketSendMessage';
+import { sendMessageToWebSocketConnection } from '../../../logic/apiGateway/sendMessageToWebSocketConnection';
 import { getExportedValue } from '../../../logic/cloudformation/getExportedValue';
 const getProcessSendMessage = (qpqConfig) => {
     return async ({ connectionId, payload, websocketApiName }) => {

package/lib/esm/getActionProcessor/webserver/websocket/getWebsocketSendMessageActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getWebsocketSendMessageActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/websocket/getWebsocketSendMessageActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,GAEjC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAuC,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAEnI,OAAO,EAAE,uCAAuC,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAElF,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAA4C,EAAE;IAC/F,OAAO,KAAK,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,uCAAuC,CAAC,gBAAgB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEnH,IAAI,CAAC;YACH,MAAM,gCAAgC,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAE7E,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,mBAAmB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,SAAS,EAAE,eAAe,CAAC;gBAC1G,aAAa,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,YAAY,EAAE,6BAA6B,CAAC;aACtH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sCAAsC,GAAgC,KAAK,EAAE,SAAoB,EAAgC,EAAE,CAAC,CAAC;IAChJ,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC;CACpE,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n} from 'quidproquo-core';\nimport { WebsocketActionType, WebsocketSendMessageActionProcessor, WebsocketSendMessageErrorTypeEnum } from 'quidproquo-webserver';\n\nimport { getCFExportNameWebsocketApiIdFromConfig } from '../../../awsNamingUtils';\nimport { sendMessageToWebSocketConnection } from '../../../logic/apiGateway/websocketSendMessage';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\n\nconst getProcessSendMessage = (qpqConfig: QPQConfig): WebsocketSendMessageActionProcessor<any> => {\n  return async ({ connectionId, payload, websocketApiName }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const apiId = await getExportedValue(getCFExportNameWebsocketApiIdFromConfig(websocketApiName, qpqConfig), region);\n\n    try {\n      await sendMessageToWebSocketConnection(apiId, connectionId, region, payload);\n\n      return actionResult(void 0);\n    } catch (error) {\n      return actionResultErrorFromCaughtError(error, {\n        ThrottlingException: () => actionResultError(WebsocketSendMessageErrorTypeEnum.Throttled, 'Rate exceeded'),\n        GoneException: () => actionResultError(WebsocketSendMessageErrorTypeEnum.Disconnected, 'Connection no longer exists'),\n      });\n    }\n  };\n};\n\nexport const getWebsocketSendMessageActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [WebsocketActionType.SendMessage]: getProcessSendMessage(qpqConfig),\n});\n"]}
+{"version":3,"file":"getWebsocketSendMessageActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/webserver/websocket/getWebsocketSendMessageActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAGL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,GAEjC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAuC,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAEnI,OAAO,EAAE,uCAAuC,EAAE,MAAM,yBAAyB,CAAC;AAClF,OAAO,EAAE,gCAAgC,EAAE,MAAM,4DAA4D,CAAC;AAC9G,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAElF,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAA4C,EAAE;IAC/F,OAAO,KAAK,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE;QAC3D,MAAM,MAAM,GAAG,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,uCAAuC,CAAC,gBAAgB,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QAEnH,IAAI,CAAC;YACH,MAAM,gCAAgC,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAE7E,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,mBAAmB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,SAAS,EAAE,eAAe,CAAC;gBAC1G,aAAa,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,YAAY,EAAE,6BAA6B,CAAC;aACtH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sCAAsC,GAAgC,KAAK,EAAE,SAAoB,EAAgC,EAAE,CAAC,CAAC;IAChJ,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC;CACpE,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  QPQConfig,\n} from 'quidproquo-core';\nimport { WebsocketActionType, WebsocketSendMessageActionProcessor, WebsocketSendMessageErrorTypeEnum } from 'quidproquo-webserver';\n\nimport { getCFExportNameWebsocketApiIdFromConfig } from '../../../awsNamingUtils';\nimport { sendMessageToWebSocketConnection } from '../../../logic/apiGateway/sendMessageToWebSocketConnection';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\n\nconst getProcessSendMessage = (qpqConfig: QPQConfig): WebsocketSendMessageActionProcessor<any> => {\n  return async ({ connectionId, payload, websocketApiName }) => {\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    const apiId = await getExportedValue(getCFExportNameWebsocketApiIdFromConfig(websocketApiName, qpqConfig), region);\n\n    try {\n      await sendMessageToWebSocketConnection(apiId, connectionId, region, payload);\n\n      return actionResult(void 0);\n    } catch (error) {\n      return actionResultErrorFromCaughtError(error, {\n        ThrottlingException: () => actionResultError(WebsocketSendMessageErrorTypeEnum.Throttled, 'Rate exceeded'),\n        GoneException: () => actionResultError(WebsocketSendMessageErrorTypeEnum.Disconnected, 'Connection no longer exists'),\n      });\n    }\n  };\n};\n\nexport const getWebsocketSendMessageActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [WebsocketActionType.SendMessage]: getProcessSendMessage(qpqConfig),\n});\n"]}

package/lib/esm/getLambdaEntries.d.ts

@@ -1,2 +1,6 @@
 export declare const entryNames: string[];
+/**
+ * Maps each lambda entry name to its handler path, for deploy bundlers
+ * (quidproquo-deploy-rspack/webpack) to use as bundle entry points.
+ */
 export declare const getLambdaEntries: () => Record<string, string>;

package/lib/esm/getLambdaEntries.js

@@ -1,4 +1,6 @@
 import path from 'path';
+// One entry per lambda handler under ./lambdas; each name must match its source
+// filename exactly (yes, including the apiGatway spelling).
 export const entryNames = [
     'anyExecuteServiceFunctionEvent_serviceFunction',
     'apiGatewayEventHandler_redirect',
@@ -15,8 +17,9 @@ export const entryNames = [
     's3Event_fileEvent',
     'sqsEvent_queueEvent',
 ];
-export const getLambdaEntries = () => entryNames.reduce((acc, name) => ({
-    ...acc,
-    [name]: path.join(__dirname, `./lambdas/${name}`),
-}), {});
+/**
+ * Maps each lambda entry name to its handler path, for deploy bundlers
+ * (quidproquo-deploy-rspack/webpack) to use as bundle entry points.
+ */
+export const getLambdaEntries = () => Object.fromEntries(entryNames.map((name) => [name, path.join(__dirname, `./lambdas/${name}`)]));
 //# sourceMappingURL=getLambdaEntries.js.map

package/lib/esm/getLambdaEntries.js.map

@@ -1 +1 @@
-{"version":3,"file":"getLambdaEntries.js","sourceRoot":"","sources":["../../src/getLambdaEntries.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,gDAAgD;IAEhD,iCAAiC;IACjC,wBAAwB;IAExB,oDAAoD;IAEpD,sCAAsC;IACtC,sCAAsC;IAEtC,yCAAyC;IACzC,+CAA+C;IAC/C,+CAA+C;IAC/C,+CAA+C;IAE/C,oCAAoC;IACpC,8BAA8B;IAE9B,mBAAmB;IACnB,qBAAqB;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAA2B,EAAE,CAC3D,UAAU,CAAC,MAAM,CACf,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACd,GAAG,GAAG;IACN,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,IAAI,EAAE,CAAC;CAClD,CAAC,EACF,EAAE,CACH,CAAC","sourcesContent":["import path from 'path';\n\nexport const entryNames = [\n  'anyExecuteServiceFunctionEvent_serviceFunction',\n\n  'apiGatewayEventHandler_redirect',\n  'apiGatewayEventHandler',\n\n  'apiGatwayEventWebsocketWithIdentity_websocketEvent',\n\n  'cloudFrontRequestEvent_originRequest',\n  'cloudFrontRequestEvent_viewerRequest',\n\n  'customMessageTriggerEvent_customMessage',\n  'customMessageTriggerEvent_defineAuthChallenge',\n  'customMessageTriggerEvent_createAuthChallenge',\n  'customMessageTriggerEvent_verifyAuthChallenge',\n\n  'eventBridgeEvent_recurringSchedule',\n  'eventBridgeEvent_stackDeploy',\n\n  's3Event_fileEvent',\n  'sqsEvent_queueEvent',\n];\n\nexport const getLambdaEntries = (): Record<string, string> =>\n  entryNames.reduce(\n    (acc, name) => ({\n      ...acc,\n      [name]: path.join(__dirname, `./lambdas/${name}`),\n    }),\n    {},\n  );\n"]}
+{"version":3,"file":"getLambdaEntries.js","sourceRoot":"","sources":["../../src/getLambdaEntries.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,gFAAgF;AAChF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,gDAAgD;IAEhD,iCAAiC;IACjC,wBAAwB;IAExB,oDAAoD;IAEpD,sCAAsC;IACtC,sCAAsC;IAEtC,yCAAyC;IACzC,+CAA+C;IAC/C,+CAA+C;IAC/C,+CAA+C;IAE/C,oCAAoC;IACpC,8BAA8B;IAE9B,mBAAmB;IACnB,qBAAqB;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAA2B,EAAE,CAC3D,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC","sourcesContent":["import path from 'path';\n\n// One entry per lambda handler under ./lambdas; each name must match its source\n// filename exactly (yes, including the apiGatway spelling).\nexport const entryNames = [\n  'anyExecuteServiceFunctionEvent_serviceFunction',\n\n  'apiGatewayEventHandler_redirect',\n  'apiGatewayEventHandler',\n\n  'apiGatwayEventWebsocketWithIdentity_websocketEvent',\n\n  'cloudFrontRequestEvent_originRequest',\n  'cloudFrontRequestEvent_viewerRequest',\n\n  'customMessageTriggerEvent_customMessage',\n  'customMessageTriggerEvent_defineAuthChallenge',\n  'customMessageTriggerEvent_createAuthChallenge',\n  'customMessageTriggerEvent_verifyAuthChallenge',\n\n  'eventBridgeEvent_recurringSchedule',\n  'eventBridgeEvent_stackDeploy',\n\n  's3Event_fileEvent',\n  'sqsEvent_queueEvent',\n];\n\n/**\n * Maps each lambda entry name to its handler path, for deploy bundlers\n * (quidproquo-deploy-rspack/webpack) to use as bundle entry points.\n */\nexport const getLambdaEntries = (): Record<string, string> =>\n  Object.fromEntries(entryNames.map((name) => [name, path.join(__dirname, `./lambdas/${name}`)]));\n"]}

package/lib/esm/index.d.ts

@@ -1,9 +1,9 @@
 export * as awsLambdaUtils from './awsLambdaUtils';
 export * as awsNamingUtils from './awsNamingUtils';
 export * from './getActionProcessor';
-export * from './runtimeConfig/QPQAWSResourceMap';
 export * from './getLambdaEntries';
 export * from './lambdaHandlers';
+export * from './runtimeConfig';
 export * from './logic';
 export * from './logic/cache/memoFunc';
 export * from './logic/parametersManager/getParameter';

package/lib/esm/index.js

@@ -1,15 +1,16 @@
 export * as awsLambdaUtils from './awsLambdaUtils';
 export * as awsNamingUtils from './awsNamingUtils';
 export * from './getActionProcessor';
-export * from './runtimeConfig/QPQAWSResourceMap';
-// TODO EXPORT THIS BETTER..
 export * from './getLambdaEntries';
 export * from './lambdaHandlers';
+export * from './runtimeConfig';
+// TODO: give ./logic a full barrel; today it only covers cognito and
+// federatedModuleStore, so the cache and parameter helpers are deep-exported here.
 export * from './logic';
 export * from './logic/cache/memoFunc';
 export * from './logic/parametersManager/getParameter';
 export * from './logic/parametersManager/getParameters';
 // Log extension layer path + handler port. NOTE: never export the extension
-// entry (./lambdaExtensions/qpqLogExtension) -- it self-executes on import.
+// entry (./lambdaExtensions/qpqLogExtension), it self-executes on import.
 export * from './lambdaExtensions/getLogExtensionLayerPath';
 //# sourceMappingURL=index.js.map

package/lib/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,cAAc,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,cAAc,MAAM,kBAAkB,CAAC;AACnD,cAAc,sBAAsB,CAAC;AACrC,cAAc,mCAAmC,CAAC;AAElD,4BAA4B;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,SAAS,CAAC;AACxB,cAAc,wBAAwB,CAAC;AACvC,cAAc,wCAAwC,CAAC;AACvD,cAAc,yCAAyC,CAAC;AAExD,4EAA4E;AAC5E,4EAA4E;AAC5E,cAAc,6CAA6C,CAAC","sourcesContent":["export * as awsLambdaUtils from './awsLambdaUtils';\nexport * as awsNamingUtils from './awsNamingUtils';\nexport * from './getActionProcessor';\nexport * from './runtimeConfig/QPQAWSResourceMap';\n\n// TODO EXPORT THIS BETTER..\nexport * from './getLambdaEntries';\nexport * from './lambdaHandlers';\nexport * from './logic';\nexport * from './logic/cache/memoFunc';\nexport * from './logic/parametersManager/getParameter';\nexport * from './logic/parametersManager/getParameters';\n\n// Log extension layer path + handler port. NOTE: never export the extension\n// entry (./lambdaExtensions/qpqLogExtension) -- it self-executes on import.\nexport * from './lambdaExtensions/getLogExtensionLayerPath';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,cAAc,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,cAAc,MAAM,kBAAkB,CAAC;AACnD,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAEhC,qEAAqE;AACrE,mFAAmF;AACnF,cAAc,SAAS,CAAC;AACxB,cAAc,wBAAwB,CAAC;AACvC,cAAc,wCAAwC,CAAC;AACvD,cAAc,yCAAyC,CAAC;AAExD,4EAA4E;AAC5E,0EAA0E;AAC1E,cAAc,6CAA6C,CAAC","sourcesContent":["export * as awsLambdaUtils from './awsLambdaUtils';\nexport * as awsNamingUtils from './awsNamingUtils';\nexport * from './getActionProcessor';\nexport * from './getLambdaEntries';\nexport * from './lambdaHandlers';\nexport * from './runtimeConfig';\n\n// TODO: give ./logic a full barrel; today it only covers cognito and\n// federatedModuleStore, so the cache and parameter helpers are deep-exported here.\nexport * from './logic';\nexport * from './logic/cache/memoFunc';\nexport * from './logic/parametersManager/getParameter';\nexport * from './logic/parametersManager/getParameters';\n\n// Log extension layer path + handler port. NOTE: never export the extension\n// entry (./lambdaExtensions/qpqLogExtension), it self-executes on import.\nexport * from './lambdaExtensions/getLogExtensionLayerPath';\n"]}

package/lib/esm/lambdaExtensions/logExtensionPort.js

@@ -1,5 +1,5 @@
 // Fixed localhost port the function handler uses to reach the qpq-log-extension.
-// Hardcoded on both ends — the handler and the extension always ship together, so
+// Hardcoded on both ends: the handler and the extension always ship together, so
 // there's no need to pass it through an env var.
 export const LOG_EXTENSION_PORT = 9009;
 //# sourceMappingURL=logExtensionPort.js.map

package/lib/esm/lambdaExtensions/logExtensionPort.js.map

@@ -1 +1 @@
-{"version":3,"file":"logExtensionPort.js","sourceRoot":"","sources":["../../../src/lambdaExtensions/logExtensionPort.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,kFAAkF;AAClF,iDAAiD;AACjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC","sourcesContent":["// Fixed localhost port the function handler uses to reach the qpq-log-extension.\n// Hardcoded on both ends — the handler and the extension always ship together, so\n// there's no need to pass it through an env var.\nexport const LOG_EXTENSION_PORT = 9009;\n"]}
+{"version":3,"file":"logExtensionPort.js","sourceRoot":"","sources":["../../../src/lambdaExtensions/logExtensionPort.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,iFAAiF;AACjF,iDAAiD;AACjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC","sourcesContent":["// Fixed localhost port the function handler uses to reach the qpq-log-extension.\n// Hardcoded on both ends: the handler and the extension always ship together, so\n// there's no need to pass it through an env var.\nexport const LOG_EXTENSION_PORT = 9009;\n"]}

package/lib/esm/lambdaHandlers/getAnyExecuteServiceFunctionEvent_serviceFunction.d.ts

@@ -1,6 +1,6 @@
 import { DynamicModuleLoader, QPQConfig, StorySession } from 'quidproquo-core';
 import { ExecuteServiceFunctionEvent } from 'quidproquo-webserver';
-type AnyExecuteServiceFunctionEventWithSession = ExecuteServiceFunctionEvent<any[]> & {
+type AnyExecuteServiceFunctionEventWithSession = ExecuteServiceFunctionEvent<unknown[]> & {
     storySession: StorySession;
 };
 export declare const getAnyExecuteServiceFunctionEvent_serviceFunction: (dynamicModuleLoader: DynamicModuleLoader, qpqConfig: QPQConfig) => (event: AnyExecuteServiceFunctionEventWithSession, context: import("aws-lambda").Context) => Promise<any>;

package/lib/esm/lambdaHandlers/getAnyExecuteServiceFunctionEvent_serviceFunction.js

@@ -1,7 +1,8 @@
 import { QpqRuntimeType } from 'quidproquo-core';
 import { getLambdaServiceFunctionEventProcessor } from '../getActionProcessor';
 import { getQpqLambdaRuntimeForEvent } from './helpers/getQpqLambdaRuntimeForEvent';
-export const getAnyExecuteServiceFunctionEvent_serviceFunction = (dynamicModuleLoader, qpqConfig) => getQpqLambdaRuntimeForEvent(QpqRuntimeType.SERVICE_FUNCTION_EXE, (event) => {
-    return event.storySession;
-}, getLambdaServiceFunctionEventProcessor, dynamicModuleLoader, qpqConfig);
+export const getAnyExecuteServiceFunctionEvent_serviceFunction = (dynamicModuleLoader, qpqConfig) => getQpqLambdaRuntimeForEvent(QpqRuntimeType.SERVICE_FUNCTION_EXE, 
+// Service functions are invoked by another qpq service, which passes its
+// session along so depth/context carry across the boundary.
+(event) => event.storySession, getLambdaServiceFunctionEventProcessor, dynamicModuleLoader, qpqConfig);
 //# sourceMappingURL=getAnyExecuteServiceFunctionEvent_serviceFunction.js.map