quidproquo-actionprocessor-awslambda 0.1.11 → 0.1.12

package/lib/esm/logic/cognito/setUserPassword.js

@@ -4,11 +4,12 @@ export const setUserPassword = async (region, userPoolId, username, password) =>
     const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {
         region,
     });
-    // There has to be a better way than this?
     const passwordParams = {
         Password: password,
         Username: username,
         UserPoolId: userPoolId,
+        // Activate the password immediately rather than leaving the user in the
+        // FORCE_CHANGE_PASSWORD state a temporary password would.
         Permanent: true,
     };
     await cognitoClient.send(new AdminSetUserPasswordCommand(passwordParams));

package/lib/esm/logic/cognito/setUserPassword.js.map

@@ -1 +1 @@
-{"version":3,"file":"setUserPassword.js","sourceRoot":"","sources":["../../../../src/logic/cognito/setUserPassword.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAE3B,6BAA6B,GAC9B,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,MAAc,EAAE,UAAkB,EAAE,QAAgB,EAAE,QAAgB,EAAE,EAAE;IAC9G,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,0CAA0C;IAC1C,MAAM,cAAc,GAAqC;QACvD,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,UAAU;QACtB,SAAS,EAAE,IAAI;KAChB,CAAC;IAEF,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,2BAA2B,CAAC,cAAc,CAAC,CAAC,CAAC;AAC5E,CAAC,CAAC","sourcesContent":["import {\n  AdminSetUserPasswordCommand,\n  AdminSetUserPasswordCommandInput,\n  CognitoIdentityProviderClient,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const setUserPassword = async (region: string, userPoolId: string, username: string, password: string) => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  // There has to be a better way than this?\n  const passwordParams: AdminSetUserPasswordCommandInput = {\n    Password: password,\n    Username: username,\n    UserPoolId: userPoolId,\n    Permanent: true,\n  };\n\n  await cognitoClient.send(new AdminSetUserPasswordCommand(passwordParams));\n};\n"]}
+{"version":3,"file":"setUserPassword.js","sourceRoot":"","sources":["../../../../src/logic/cognito/setUserPassword.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAE3B,6BAA6B,GAC9B,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,MAAc,EAAE,UAAkB,EAAE,QAAgB,EAAE,QAAgB,EAAiB,EAAE;IAC7H,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,cAAc,GAAqC;QACvD,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,UAAU;QACtB,wEAAwE;QACxE,0DAA0D;QAC1D,SAAS,EAAE,IAAI;KAChB,CAAC;IAEF,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,2BAA2B,CAAC,cAAc,CAAC,CAAC,CAAC;AAC5E,CAAC,CAAC","sourcesContent":["import {\n  AdminSetUserPasswordCommand,\n  AdminSetUserPasswordCommandInput,\n  CognitoIdentityProviderClient,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const setUserPassword = async (region: string, userPoolId: string, username: string, password: string): Promise<void> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const passwordParams: AdminSetUserPasswordCommandInput = {\n    Password: password,\n    Username: username,\n    UserPoolId: userPoolId,\n    // Activate the password immediately rather than leaving the user in the\n    // FORCE_CHANGE_PASSWORD state a temporary password would.\n    Permanent: true,\n  };\n\n  await cognitoClient.send(new AdminSetUserPasswordCommand(passwordParams));\n};\n"]}

package/lib/esm/logic/cognito/utils/CognitoUserAttribute.d.ts

@@ -0,0 +1,5 @@
+/** A Cognito user attribute that is guaranteed to carry both a name and a value. */
+export type CognitoUserAttribute = {
+    Name: string;
+    Value: string;
+};

package/lib/esm/logic/cognito/utils/CognitoUserAttribute.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=CognitoUserAttribute.js.map

package/lib/esm/logic/cognito/utils/CognitoUserAttribute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CognitoUserAttribute.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/CognitoUserAttribute.ts"],"names":[],"mappings":"","sourcesContent":["/** A Cognito user attribute that is guaranteed to carry both a name and a value. */\nexport type CognitoUserAttribute = {\n  Name: string;\n  Value: string;\n};\n"]}

package/lib/esm/logic/cognito/utils/buildCognitoUserFilter.d.ts

@@ -0,0 +1,10 @@
+export declare class InvalidCognitoFilterError extends Error {
+    readonly code = "INVALID_COGNITO_FILTER";
+    constructor(message: string);
+}
+/**
+ * Builds a Cognito ListUsers exact-match filter (`name = "value"`), rejecting
+ * attribute names and values that cannot be embedded safely.
+ * Throws InvalidCognitoFilterError (code INVALID_COGNITO_FILTER) on unsafe input.
+ */
+export declare const buildCognitoUserFilter: (attributeName: string, attributeValue: string) => string;

package/lib/esm/logic/cognito/utils/buildCognitoUserFilter.js

@@ -0,0 +1,29 @@
+// ListUsers filter strings are built by interpolation, so a value containing a
+// quote or backslash could break out of the quoted literal and alter the filter.
+// Cognito defines no escaping for these, so unsafe input is rejected outright.
+export class InvalidCognitoFilterError extends Error {
+    code = 'INVALID_COGNITO_FILTER';
+    constructor(message) {
+        super(message);
+        this.name = 'InvalidCognitoFilterError';
+    }
+}
+// Cognito filterable attribute names: standard attributes plus prefixed ones
+// like cognito:user_status.
+const validAttributeName = /^[a-zA-Z][a-zA-Z0-9_:]*$/;
+/**
+ * Builds a Cognito ListUsers exact-match filter (`name = "value"`), rejecting
+ * attribute names and values that cannot be embedded safely.
+ * Throws InvalidCognitoFilterError (code INVALID_COGNITO_FILTER) on unsafe input.
+ */
+export const buildCognitoUserFilter = (attributeName, attributeValue) => {
+    if (!validAttributeName.test(attributeName)) {
+        throw new InvalidCognitoFilterError(`Invalid Cognito filter attribute name: ${attributeName}`);
+    }
+    // The value is deliberately not echoed into the message: it can be user input.
+    if (attributeValue.includes('"') || attributeValue.includes('\\')) {
+        throw new InvalidCognitoFilterError('Cognito filter values cannot contain quotes or backslashes');
+    }
+    return `${attributeName} = "${attributeValue}"`;
+};
+//# sourceMappingURL=buildCognitoUserFilter.js.map

package/lib/esm/logic/cognito/utils/buildCognitoUserFilter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildCognitoUserFilter.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/buildCognitoUserFilter.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,iFAAiF;AACjF,+EAA+E;AAC/E,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,IAAI,GAAG,wBAAwB,CAAC;IAEzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,6EAA6E;AAC7E,4BAA4B;AAC5B,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAEtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,aAAqB,EAAE,cAAsB,EAAU,EAAE;IAC9F,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,yBAAyB,CAAC,0CAA0C,aAAa,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,+EAA+E;IAC/E,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,yBAAyB,CAAC,4DAA4D,CAAC,CAAC;IACpG,CAAC;IAED,OAAO,GAAG,aAAa,OAAO,cAAc,GAAG,CAAC;AAClD,CAAC,CAAC","sourcesContent":["// ListUsers filter strings are built by interpolation, so a value containing a\n// quote or backslash could break out of the quoted literal and alter the filter.\n// Cognito defines no escaping for these, so unsafe input is rejected outright.\nexport class InvalidCognitoFilterError extends Error {\n  readonly code = 'INVALID_COGNITO_FILTER';\n\n  constructor(message: string) {\n    super(message);\n    this.name = 'InvalidCognitoFilterError';\n  }\n}\n\n// Cognito filterable attribute names: standard attributes plus prefixed ones\n// like cognito:user_status.\nconst validAttributeName = /^[a-zA-Z][a-zA-Z0-9_:]*$/;\n\n/**\n * Builds a Cognito ListUsers exact-match filter (`name = \"value\"`), rejecting\n * attribute names and values that cannot be embedded safely.\n * Throws InvalidCognitoFilterError (code INVALID_COGNITO_FILTER) on unsafe input.\n */\nexport const buildCognitoUserFilter = (attributeName: string, attributeValue: string): string => {\n  if (!validAttributeName.test(attributeName)) {\n    throw new InvalidCognitoFilterError(`Invalid Cognito filter attribute name: ${attributeName}`);\n  }\n\n  // The value is deliberately not echoed into the message: it can be user input.\n  if (attributeValue.includes('\"') || attributeValue.includes('\\\\')) {\n    throw new InvalidCognitoFilterError('Cognito filter values cannot contain quotes or backslashes');\n  }\n\n  return `${attributeName} = \"${attributeValue}\"`;\n};\n"]}

package/lib/esm/logic/cognito/utils/calculateSecretHash.d.ts

@@ -1 +1,6 @@
+/**
+ * Computes the Cognito SECRET_HASH for an app client with a secret: the base64
+ * HMAC-SHA256 of username + clientId, keyed by the client secret. Memoized
+ * because every auth call for the same user recomputes the same value.
+ */
 export declare const calculateSecretHash: (username: string, clientId: string, clientSecret: string) => string;

package/lib/esm/logic/cognito/utils/calculateSecretHash.js

@@ -1,11 +1,11 @@
 import { createHmac } from 'crypto';
 import { memoFunc } from '../../cache/memoFunc';
+/**
+ * Computes the Cognito SECRET_HASH for an app client with a secret: the base64
+ * HMAC-SHA256 of username + clientId, keyed by the client secret. Memoized
+ * because every auth call for the same user recomputes the same value.
+ */
 export const calculateSecretHash = memoFunc((username, clientId, clientSecret) => {
-    // create the hmac with the sha256 algorithm and a secret key
-    const hasher = createHmac('sha256', clientSecret);
-    // add the value we want to hash
-    hasher.update(`${username}${clientId}`);
-    // get the hashed value as base64
-    return hasher.digest('base64');
+    return createHmac('sha256', clientSecret).update(`${username}${clientId}`).digest('base64');
 });
 //# sourceMappingURL=calculateSecretHash.js.map

package/lib/esm/logic/cognito/utils/calculateSecretHash.js.map

@@ -1 +1 @@
-{"version":3,"file":"calculateSecretHash.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/calculateSecretHash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAC,CAAC,QAAgB,EAAE,QAAgB,EAAE,YAAoB,EAAE,EAAE;IACvG,6DAA6D;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAElD,gCAAgC;IAChC,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,GAAG,QAAQ,EAAE,CAAC,CAAC;IAExC,iCAAiC;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC","sourcesContent":["import { createHmac } from 'crypto';\n\nimport { memoFunc } from '../../cache/memoFunc';\n\nexport const calculateSecretHash = memoFunc((username: string, clientId: string, clientSecret: string) => {\n  // create the hmac with the sha256 algorithm and a secret key\n  const hasher = createHmac('sha256', clientSecret);\n\n  // add the value we want to hash\n  hasher.update(`${username}${clientId}`);\n\n  // get the hashed value as base64\n  return hasher.digest('base64');\n});\n"]}
+{"version":3,"file":"calculateSecretHash.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/calculateSecretHash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAQ,CAAC,CAAC,QAAgB,EAAE,QAAgB,EAAE,YAAoB,EAAU,EAAE;IAC/G,OAAO,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,GAAG,QAAQ,GAAG,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC9F,CAAC,CAAC,CAAC","sourcesContent":["import { createHmac } from 'crypto';\n\nimport { memoFunc } from '../../cache/memoFunc';\n\n/**\n * Computes the Cognito SECRET_HASH for an app client with a secret: the base64\n * HMAC-SHA256 of username + clientId, keyed by the client secret. Memoized\n * because every auth call for the same user recomputes the same value.\n */\nexport const calculateSecretHash = memoFunc((username: string, clientId: string, clientSecret: string): string => {\n  return createHmac('sha256', clientSecret).update(`${username}${clientId}`).digest('base64');\n});\n"]}

package/lib/esm/logic/cognito/utils/cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo.d.ts

@@ -0,0 +1,8 @@
+import { AuthenticateUserResponse } from 'quidproquo-core';
+import { AdminInitiateAuthResponse } from '@aws-sdk/client-cognito-identity-provider';
+/**
+ * Maps a Cognito InitiateAuth/RespondToAuthChallenge response onto the qpq
+ * AuthenticateUserResponse: pending-challenge state plus, once Cognito issues
+ * tokens, the authentication info with expiry anchored to issueDateTime.
+ */
+export declare const cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo: (authResponse: AdminInitiateAuthResponse, issueDateTime: string) => AuthenticateUserResponse;

package/lib/esm/logic/cognito/utils/cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo.js

@@ -0,0 +1,19 @@
+import { cognitoAuthenticationResultTypeToQpqAuthenticationInfo } from './cognitoAuthenticationResultTypeToQpqAuthenticationInfo';
+import { cognitoChallengeNameTypeToQpqAuthenticateUserChallenge } from './cognitoChallengeNameTypeToQpqAuthenticateUserChallenge';
+/**
+ * Maps a Cognito InitiateAuth/RespondToAuthChallenge response onto the qpq
+ * AuthenticateUserResponse: pending-challenge state plus, once Cognito issues
+ * tokens, the authentication info with expiry anchored to issueDateTime.
+ */
+export const cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo = (authResponse, issueDateTime) => {
+    const res = {
+        session: authResponse.Session,
+        challenge: cognitoChallengeNameTypeToQpqAuthenticateUserChallenge(authResponse.ChallengeName),
+        challengeParameters: authResponse.ChallengeParameters,
+    };
+    if (authResponse.AuthenticationResult) {
+        res.authenticationInfo = cognitoAuthenticationResultTypeToQpqAuthenticationInfo(authResponse.AuthenticationResult, issueDateTime);
+    }
+    return res;
+};
+//# sourceMappingURL=cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo.js.map

package/lib/esm/logic/cognito/utils/cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sDAAsD,EAAE,MAAM,0DAA0D,CAAC;AAClI,OAAO,EAAE,sDAAsD,EAAE,MAAM,0DAA0D,CAAC;AAElI;;;;GAIG;AACH,MAAM,CAAC,MAAM,uDAAuD,GAAG,CACrE,YAAuC,EACvC,aAAqB,EACK,EAAE;IAC5B,MAAM,GAAG,GAA6B;QACpC,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,SAAS,EAAE,sDAAsD,CAAC,YAAY,CAAC,aAAa,CAAC;QAC7F,mBAAmB,EAAE,YAAY,CAAC,mBAAmB;KACtD,CAAC;IAEF,IAAI,YAAY,CAAC,oBAAoB,EAAE,CAAC;QACtC,GAAG,CAAC,kBAAkB,GAAG,sDAAsD,CAAC,YAAY,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC;IACpI,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC,CAAC","sourcesContent":["import { AuthenticateUserResponse } from 'quidproquo-core';\n\nimport { AdminInitiateAuthResponse } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { cognitoAuthenticationResultTypeToQpqAuthenticationInfo } from './cognitoAuthenticationResultTypeToQpqAuthenticationInfo';\nimport { cognitoChallengeNameTypeToQpqAuthenticateUserChallenge } from './cognitoChallengeNameTypeToQpqAuthenticateUserChallenge';\n\n/**\n * Maps a Cognito InitiateAuth/RespondToAuthChallenge response onto the qpq\n * AuthenticateUserResponse: pending-challenge state plus, once Cognito issues\n * tokens, the authentication info with expiry anchored to issueDateTime.\n */\nexport const cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo = (\n  authResponse: AdminInitiateAuthResponse,\n  issueDateTime: string,\n): AuthenticateUserResponse => {\n  const res: AuthenticateUserResponse = {\n    session: authResponse.Session,\n    challenge: cognitoChallengeNameTypeToQpqAuthenticateUserChallenge(authResponse.ChallengeName),\n    challengeParameters: authResponse.ChallengeParameters,\n  };\n\n  if (authResponse.AuthenticationResult) {\n    res.authenticationInfo = cognitoAuthenticationResultTypeToQpqAuthenticationInfo(authResponse.AuthenticationResult, issueDateTime);\n  }\n\n  return res;\n};\n"]}

package/lib/esm/logic/cognito/utils/cognitoAuthenticationResultTypeToQpqAuthenticationInfo.d.ts

@@ -0,0 +1,7 @@
+import { AuthenticationInfo } from 'quidproquo-core';
+import { AuthenticationResultType } from '@aws-sdk/client-cognito-identity-provider';
+/**
+ * Maps a Cognito AuthenticationResult onto qpq AuthenticationInfo, deriving the
+ * absolute expiresAt from the request issue time plus Cognito's relative ExpiresIn.
+ */
+export declare const cognitoAuthenticationResultTypeToQpqAuthenticationInfo: (authResult: AuthenticationResultType, issueDateTime: string) => AuthenticationInfo;

package/lib/esm/logic/cognito/utils/cognitoAuthenticationResultTypeToQpqAuthenticationInfo.js

@@ -0,0 +1,18 @@
+import { getQpqIsoDateTimeFromDate } from 'quidproquo-core';
+/**
+ * Maps a Cognito AuthenticationResult onto qpq AuthenticationInfo, deriving the
+ * absolute expiresAt from the request issue time plus Cognito's relative ExpiresIn.
+ */
+export const cognitoAuthenticationResultTypeToQpqAuthenticationInfo = (authResult, issueDateTime) => {
+    const expiryDate = new Date(issueDateTime);
+    expiryDate.setSeconds(expiryDate.getSeconds() + (authResult.ExpiresIn || 0));
+    return {
+        accessToken: authResult.AccessToken,
+        idToken: authResult.IdToken,
+        refreshToken: authResult.RefreshToken,
+        tokenType: authResult.TokenType,
+        expirationDurationInSeconds: authResult.ExpiresIn,
+        expiresAt: getQpqIsoDateTimeFromDate(expiryDate),
+    };
+};
+//# sourceMappingURL=cognitoAuthenticationResultTypeToQpqAuthenticationInfo.js.map

package/lib/esm/logic/cognito/utils/cognitoAuthenticationResultTypeToQpqAuthenticationInfo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cognitoAuthenticationResultTypeToQpqAuthenticationInfo.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/cognitoAuthenticationResultTypeToQpqAuthenticationInfo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAIhF;;;GAGG;AACH,MAAM,CAAC,MAAM,sDAAsD,GAAG,CACpE,UAAoC,EACpC,aAAqB,EACD,EAAE;IACtB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3C,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC;IAE7E,OAAO;QACL,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,SAAS,EAAE,UAAU,CAAC,SAAS;QAE/B,2BAA2B,EAAE,UAAU,CAAC,SAAS;QACjD,SAAS,EAAE,yBAAyB,CAAC,UAAU,CAAC;KACjD,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { AuthenticationInfo, getQpqIsoDateTimeFromDate } from 'quidproquo-core';\n\nimport { AuthenticationResultType } from '@aws-sdk/client-cognito-identity-provider';\n\n/**\n * Maps a Cognito AuthenticationResult onto qpq AuthenticationInfo, deriving the\n * absolute expiresAt from the request issue time plus Cognito's relative ExpiresIn.\n */\nexport const cognitoAuthenticationResultTypeToQpqAuthenticationInfo = (\n  authResult: AuthenticationResultType,\n  issueDateTime: string,\n): AuthenticationInfo => {\n  const expiryDate = new Date(issueDateTime);\n  expiryDate.setSeconds(expiryDate.getSeconds() + (authResult.ExpiresIn || 0));\n\n  return {\n    accessToken: authResult.AccessToken,\n    idToken: authResult.IdToken,\n    refreshToken: authResult.RefreshToken,\n    tokenType: authResult.TokenType,\n\n    expirationDurationInSeconds: authResult.ExpiresIn,\n    expiresAt: getQpqIsoDateTimeFromDate(expiryDate),\n  };\n};\n"]}

package/lib/esm/logic/cognito/utils/cognitoChallengeNameTypeToQpqAuthenticateUserChallenge.d.ts

@@ -0,0 +1,9 @@
+import { AuthenticateUserChallenge } from 'quidproquo-core';
+import { ChallengeNameType } from '@aws-sdk/client-cognito-identity-provider';
+/**
+ * Maps a Cognito challenge name onto the qpq AuthenticateUserChallenge enum.
+ * Challenges qpq does not implement yet (e.g. SMS_MFA) come back as a
+ * `QPQ-NOT-IMP-<name>` marker so the gap is visible and searchable at the caller
+ * instead of being silently treated as NONE.
+ */
+export declare const cognitoChallengeNameTypeToQpqAuthenticateUserChallenge: (cognitoChallengeName: ChallengeNameType | string | undefined) => AuthenticateUserChallenge;

package/lib/esm/logic/cognito/utils/cognitoChallengeNameTypeToQpqAuthenticateUserChallenge.js

@@ -0,0 +1,23 @@
+import { AuthenticateUserChallenge } from 'quidproquo-core';
+import { ChallengeNameType } from '@aws-sdk/client-cognito-identity-provider';
+const challengeMap = {
+    [ChallengeNameType.NEW_PASSWORD_REQUIRED]: AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED,
+    [ChallengeNameType.CUSTOM_CHALLENGE]: AuthenticateUserChallenge.CUSTOM_CHALLENGE,
+    [ChallengeNameType.SOFTWARE_TOKEN_MFA]: AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA,
+    [ChallengeNameType.MFA_SETUP]: AuthenticateUserChallenge.MFA_SETUP,
+};
+/**
+ * Maps a Cognito challenge name onto the qpq AuthenticateUserChallenge enum.
+ * Challenges qpq does not implement yet (e.g. SMS_MFA) come back as a
+ * `QPQ-NOT-IMP-<name>` marker so the gap is visible and searchable at the caller
+ * instead of being silently treated as NONE.
+ */
+export const cognitoChallengeNameTypeToQpqAuthenticateUserChallenge = (cognitoChallengeName) => {
+    if (!cognitoChallengeName) {
+        return AuthenticateUserChallenge.NONE;
+    }
+    // The marker is not a real enum member; the cast keeps the return type honest
+    // for implemented challenges while letting the marker flow through.
+    return challengeMap[cognitoChallengeName] || `QPQ-NOT-IMP-${cognitoChallengeName}`;
+};
+//# sourceMappingURL=cognitoChallengeNameTypeToQpqAuthenticateUserChallenge.js.map

package/lib/esm/logic/cognito/utils/cognitoChallengeNameTypeToQpqAuthenticateUserChallenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cognitoChallengeNameTypeToQpqAuthenticateUserChallenge.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/cognitoChallengeNameTypeToQpqAuthenticateUserChallenge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAE9E,MAAM,YAAY,GAA8C;IAC9D,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,EAAE,yBAAyB,CAAC,qBAAqB;IAC1F,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,EAAE,yBAAyB,CAAC,gBAAgB;IAChF,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,EAAE,yBAAyB,CAAC,kBAAkB;IACpF,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,yBAAyB,CAAC,SAAS;CACnE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sDAAsD,GAAG,CACpE,oBAA4D,EACjC,EAAE;IAC7B,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC1B,OAAO,yBAAyB,CAAC,IAAI,CAAC;IACxC,CAAC;IAED,8EAA8E;IAC9E,oEAAoE;IACpE,OAAO,YAAY,CAAC,oBAAoB,CAAC,IAAK,eAAe,oBAAoB,EAAgC,CAAC;AACpH,CAAC,CAAC","sourcesContent":["import { AuthenticateUserChallenge } from 'quidproquo-core';\n\nimport { ChallengeNameType } from '@aws-sdk/client-cognito-identity-provider';\n\nconst challengeMap: Record<string, AuthenticateUserChallenge> = {\n  [ChallengeNameType.NEW_PASSWORD_REQUIRED]: AuthenticateUserChallenge.NEW_PASSWORD_REQUIRED,\n  [ChallengeNameType.CUSTOM_CHALLENGE]: AuthenticateUserChallenge.CUSTOM_CHALLENGE,\n  [ChallengeNameType.SOFTWARE_TOKEN_MFA]: AuthenticateUserChallenge.SOFTWARE_TOKEN_MFA,\n  [ChallengeNameType.MFA_SETUP]: AuthenticateUserChallenge.MFA_SETUP,\n};\n\n/**\n * Maps a Cognito challenge name onto the qpq AuthenticateUserChallenge enum.\n * Challenges qpq does not implement yet (e.g. SMS_MFA) come back as a\n * `QPQ-NOT-IMP-<name>` marker so the gap is visible and searchable at the caller\n * instead of being silently treated as NONE.\n */\nexport const cognitoChallengeNameTypeToQpqAuthenticateUserChallenge = (\n  cognitoChallengeName: ChallengeNameType | string | undefined,\n): AuthenticateUserChallenge => {\n  if (!cognitoChallengeName) {\n    return AuthenticateUserChallenge.NONE;\n  }\n\n  // The marker is not a real enum member; the cast keeps the return type honest\n  // for implemented challenges while letting the marker flow through.\n  return challengeMap[cognitoChallengeName] || (`QPQ-NOT-IMP-${cognitoChallengeName}` as AuthenticateUserChallenge);\n};\n"]}

package/lib/esm/logic/cognito/utils/cognitoCodeDeliveryDetailsToQpqDeliveryDetails.d.ts

@@ -0,0 +1,7 @@
+import { AuthenticationDeliveryDetails } from 'quidproquo-core';
+import { CodeDeliveryDetailsType } from '@aws-sdk/client-cognito-identity-provider';
+/**
+ * Maps Cognito code-delivery details onto qpq AuthenticationDeliveryDetails,
+ * defaulting to email delivery when Cognito omits any of the details.
+ */
+export declare const cognitoCodeDeliveryDetailsToQpqDeliveryDetails: (details: CodeDeliveryDetailsType | undefined) => AuthenticationDeliveryDetails;

package/lib/esm/logic/cognito/utils/cognitoCodeDeliveryDetailsToQpqDeliveryDetails.js

@@ -0,0 +1,10 @@
+/**
+ * Maps Cognito code-delivery details onto qpq AuthenticationDeliveryDetails,
+ * defaulting to email delivery when Cognito omits any of the details.
+ */
+export const cognitoCodeDeliveryDetailsToQpqDeliveryDetails = (details) => ({
+    attributeName: details?.AttributeName || 'email',
+    destination: details?.Destination || 'unknown@email.com',
+    deliveryMedium: details?.DeliveryMedium === 'SMS' ? 'SMS' : 'EMAIL',
+});
+//# sourceMappingURL=cognitoCodeDeliveryDetailsToQpqDeliveryDetails.js.map

package/lib/esm/logic/cognito/utils/cognitoCodeDeliveryDetailsToQpqDeliveryDetails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cognitoCodeDeliveryDetailsToQpqDeliveryDetails.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/cognitoCodeDeliveryDetailsToQpqDeliveryDetails.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,MAAM,CAAC,MAAM,8CAA8C,GAAG,CAAC,OAA4C,EAAiC,EAAE,CAAC,CAAC;IAC9I,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,OAAO;IAChD,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,mBAAmB;IACxD,cAAc,EAAE,OAAO,EAAE,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO;CACpE,CAAC,CAAC","sourcesContent":["import { AuthenticationDeliveryDetails } from 'quidproquo-core';\n\nimport { CodeDeliveryDetailsType } from '@aws-sdk/client-cognito-identity-provider';\n\n/**\n * Maps Cognito code-delivery details onto qpq AuthenticationDeliveryDetails,\n * defaulting to email delivery when Cognito omits any of the details.\n */\nexport const cognitoCodeDeliveryDetailsToQpqDeliveryDetails = (details: CodeDeliveryDetailsType | undefined): AuthenticationDeliveryDetails => ({\n  attributeName: details?.AttributeName || 'email',\n  destination: details?.Destination || 'unknown@email.com',\n  deliveryMedium: details?.DeliveryMedium === 'SMS' ? 'SMS' : 'EMAIL',\n});\n"]}

package/lib/esm/logic/cognito/utils/getValidCognitoUserAttributes.d.ts

@@ -0,0 +1,7 @@
+import { AttributeType } from '@aws-sdk/client-cognito-identity-provider';
+import { CognitoUserAttribute } from './CognitoUserAttribute';
+/**
+ * Narrows the SDK's AttributeType[] (where Name and Value are both optional) down
+ * to the attributes that actually carry a name and a value.
+ */
+export declare const getValidCognitoUserAttributes: (attributes: AttributeType[] | undefined) => CognitoUserAttribute[];

package/lib/esm/logic/cognito/utils/getValidCognitoUserAttributes.js

@@ -0,0 +1,6 @@
+/**
+ * Narrows the SDK's AttributeType[] (where Name and Value are both optional) down
+ * to the attributes that actually carry a name and a value.
+ */
+export const getValidCognitoUserAttributes = (attributes) => (attributes || []).filter((attribute) => !!attribute.Name && !!attribute.Value);
+//# sourceMappingURL=getValidCognitoUserAttributes.js.map

package/lib/esm/logic/cognito/utils/getValidCognitoUserAttributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getValidCognitoUserAttributes.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/getValidCognitoUserAttributes.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,UAAuC,EAA0B,EAAE,CAC/G,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAqC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC","sourcesContent":["import { AttributeType } from '@aws-sdk/client-cognito-identity-provider';\n\nimport { CognitoUserAttribute } from './CognitoUserAttribute';\n\n/**\n * Narrows the SDK's AttributeType[] (where Name and Value are both optional) down\n * to the attributes that actually carry a name and a value.\n */\nexport const getValidCognitoUserAttributes = (attributes: AttributeType[] | undefined): CognitoUserAttribute[] =>\n  (attributes || []).filter((attribute): attribute is CognitoUserAttribute => !!attribute.Name && !!attribute.Value);\n"]}

package/lib/esm/logic/cognito/utils/index.d.ts

@@ -1,4 +1,10 @@
+export * from './buildCognitoUserFilter';
 export * from './calculateSecretHash';
+export * from './cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo';
+export * from './cognitoAuthenticationResultTypeToQpqAuthenticationInfo';
+export * from './cognitoChallengeNameTypeToQpqAuthenticateUserChallenge';
+export * from './cognitoCodeDeliveryDetailsToQpqDeliveryDetails';
+export * from './CognitoUserAttribute';
+export * from './getValidCognitoUserAttributes';
 export * from './pageKeyToPaginationToken';
 export * from './paginationTokenToPageKey';
-export * from './transformCognitoResponse';

package/lib/esm/logic/cognito/utils/index.js

@@ -1,5 +1,11 @@
+export * from './buildCognitoUserFilter';
 export * from './calculateSecretHash';
+export * from './cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo';
+export * from './cognitoAuthenticationResultTypeToQpqAuthenticationInfo';
+export * from './cognitoChallengeNameTypeToQpqAuthenticateUserChallenge';
+export * from './cognitoCodeDeliveryDetailsToQpqDeliveryDetails';
+export * from './CognitoUserAttribute';
+export * from './getValidCognitoUserAttributes';
 export * from './pageKeyToPaginationToken';
 export * from './paginationTokenToPageKey';
-export * from './transformCognitoResponse';
 //# sourceMappingURL=index.js.map

package/lib/esm/logic/cognito/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC","sourcesContent":["export * from './calculateSecretHash';\nexport * from './pageKeyToPaginationToken';\nexport * from './paginationTokenToPageKey';\nexport * from './transformCognitoResponse';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2DAA2D,CAAC;AAC1E,cAAc,0DAA0D,CAAC;AACzE,cAAc,0DAA0D,CAAC;AACzE,cAAc,kDAAkD,CAAC;AACjE,cAAc,wBAAwB,CAAC;AACvC,cAAc,iCAAiC,CAAC;AAChD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC","sourcesContent":["export * from './buildCognitoUserFilter';\nexport * from './calculateSecretHash';\nexport * from './cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo';\nexport * from './cognitoAuthenticationResultTypeToQpqAuthenticationInfo';\nexport * from './cognitoChallengeNameTypeToQpqAuthenticateUserChallenge';\nexport * from './cognitoCodeDeliveryDetailsToQpqDeliveryDetails';\nexport * from './CognitoUserAttribute';\nexport * from './getValidCognitoUserAttributes';\nexport * from './pageKeyToPaginationToken';\nexport * from './paginationTokenToPageKey';\n"]}

package/lib/esm/logic/cognito/utils/pageKeyToPaginationToken.d.ts

@@ -1 +1,6 @@
+/**
+ * Decodes a qpq page key (base64) back into the raw Cognito PaginationToken.
+ * Returns undefined rather than null so the result can feed the SDK's optional
+ * PaginationToken field directly.
+ */
 export declare function pageKeyToPaginationToken(pageKey?: string): string | undefined;

package/lib/esm/logic/cognito/utils/pageKeyToPaginationToken.js

@@ -1,3 +1,8 @@
+/**
+ * Decodes a qpq page key (base64) back into the raw Cognito PaginationToken.
+ * Returns undefined rather than null so the result can feed the SDK's optional
+ * PaginationToken field directly.
+ */
 export function pageKeyToPaginationToken(pageKey) {
     if (!pageKey) {
         return undefined;

package/lib/esm/logic/cognito/utils/pageKeyToPaginationToken.js.map

@@ -1 +1 @@
-{"version":3,"file":"pageKeyToPaginationToken.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/pageKeyToPaginationToken.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;AACnD,CAAC","sourcesContent":["export function pageKeyToPaginationToken(pageKey?: string): string | undefined {\n  if (!pageKey) {\n    return undefined;\n  }\n\n  return Buffer.from(pageKey, 'base64').toString();\n}\n"]}
+{"version":3,"file":"pageKeyToPaginationToken.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/pageKeyToPaginationToken.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;AACnD,CAAC","sourcesContent":["/**\n * Decodes a qpq page key (base64) back into the raw Cognito PaginationToken.\n * Returns undefined rather than null so the result can feed the SDK's optional\n * PaginationToken field directly.\n */\nexport function pageKeyToPaginationToken(pageKey?: string): string | undefined {\n  if (!pageKey) {\n    return undefined;\n  }\n\n  return Buffer.from(pageKey, 'base64').toString();\n}\n"]}

package/lib/esm/logic/cognito/utils/paginationTokenToPageKey.d.ts

@@ -1 +1,6 @@
+/**
+ * Encodes a raw Cognito PaginationToken as an opaque base64 page key for
+ * QpqPagedData. Returns undefined rather than null so the result can feed the
+ * optional nextPageKey field directly.
+ */
 export declare function paginationTokenToPageKey(paginationToken?: string): string | undefined;

package/lib/esm/logic/cognito/utils/paginationTokenToPageKey.js

@@ -1,3 +1,8 @@
+/**
+ * Encodes a raw Cognito PaginationToken as an opaque base64 page key for
+ * QpqPagedData. Returns undefined rather than null so the result can feed the
+ * optional nextPageKey field directly.
+ */
 export function paginationTokenToPageKey(paginationToken) {
     if (!paginationToken) {
         return undefined;

package/lib/esm/logic/cognito/utils/paginationTokenToPageKey.js.map

@@ -1 +1 @@
-{"version":3,"file":"paginationTokenToPageKey.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/paginationTokenToPageKey.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,wBAAwB,CAAC,eAAwB;IAC/D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACzD,CAAC","sourcesContent":["export function paginationTokenToPageKey(paginationToken?: string): string | undefined {\n  if (!paginationToken) {\n    return undefined;\n  }\n  return Buffer.from(paginationToken).toString('base64');\n}\n"]}
+{"version":3,"file":"paginationTokenToPageKey.js","sourceRoot":"","sources":["../../../../../src/logic/cognito/utils/paginationTokenToPageKey.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,eAAwB;IAC/D,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACzD,CAAC","sourcesContent":["/**\n * Encodes a raw Cognito PaginationToken as an opaque base64 page key for\n * QpqPagedData. Returns undefined rather than null so the result can feed the\n * optional nextPageKey field directly.\n */\nexport function paginationTokenToPageKey(paginationToken?: string): string | undefined {\n  if (!paginationToken) {\n    return undefined;\n  }\n\n  return Buffer.from(paginationToken).toString('base64');\n}\n"]}

package/lib/esm/logic/cognito/verifyUserEmail.d.ts

@@ -1 +1,2 @@
+/** Confirms the email attribute with the verification code sent to the user. */
 export declare const verifyUserEmail: (region: string, accessToken: string, verificationCode: string) => Promise<void>;

package/lib/esm/logic/cognito/verifyUserEmail.js

@@ -1,5 +1,6 @@
 import { CognitoIdentityProviderClient, VerifyUserAttributeCommand, } from '@aws-sdk/client-cognito-identity-provider';
 import { createAwsClient } from '../createAwsClient';
+/** Confirms the email attribute with the verification code sent to the user. */
 export const verifyUserEmail = async (region, accessToken, verificationCode) => {
     const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {
         region,

package/lib/esm/logic/cognito/verifyUserEmail.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifyUserEmail.js","sourceRoot":"","sources":["../../../../src/logic/cognito/verifyUserEmail.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,GAE3B,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,MAAc,EAAE,WAAmB,EAAE,gBAAwB,EAAE,EAAE;IACrG,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,MAAM,GAAoC;QAC9C,WAAW,EAAE,WAAW;QACxB,aAAa,EAAE,OAAO;QACtB,IAAI,EAAE,gBAAgB;KACvB,CAAC;IAEF,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;AACnE,CAAC,CAAC","sourcesContent":["import {\n  CognitoIdentityProviderClient,\n  VerifyUserAttributeCommand,\n  VerifyUserAttributeCommandInput,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const verifyUserEmail = async (region: string, accessToken: string, verificationCode: string) => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const params: VerifyUserAttributeCommandInput = {\n    AccessToken: accessToken,\n    AttributeName: 'email',\n    Code: verificationCode,\n  };\n\n  await cognitoClient.send(new VerifyUserAttributeCommand(params));\n};\n"]}
+{"version":3,"file":"verifyUserEmail.js","sourceRoot":"","sources":["../../../../src/logic/cognito/verifyUserEmail.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,GAE3B,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,gFAAgF;AAChF,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,MAAc,EAAE,WAAmB,EAAE,gBAAwB,EAAiB,EAAE;IACpH,MAAM,aAAa,GAAG,eAAe,CAAC,6BAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,MAAM,GAAoC;QAC9C,WAAW,EAAE,WAAW;QACxB,aAAa,EAAE,OAAO;QACtB,IAAI,EAAE,gBAAgB;KACvB,CAAC;IAEF,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;AACnE,CAAC,CAAC","sourcesContent":["import {\n  CognitoIdentityProviderClient,\n  VerifyUserAttributeCommand,\n  VerifyUserAttributeCommandInput,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\n\n/** Confirms the email attribute with the verification code sent to the user. */\nexport const verifyUserEmail = async (region: string, accessToken: string, verificationCode: string): Promise<void> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const params: VerifyUserAttributeCommandInput = {\n    AccessToken: accessToken,\n    AttributeName: 'email',\n    Code: verificationCode,\n  };\n\n  await cognitoClient.send(new VerifyUserAttributeCommand(params));\n};\n"]}

package/lib/esm/logic/createAwsClient.d.ts

@@ -1,3 +1,6 @@
-type ClientConstructor<T> = new (args: any) => T;
-export declare function createAwsClient<T>(ClientClass: ClientConstructor<T>, args: any): T;
-export {};
+/**
+ * Returns a cached AWS SDK v3 client for the given class and config, creating it on first
+ * use. The client's `send` is wrapped so failed calls log the client, config, and command
+ * before rethrowing (CloudWatch visibility for which AWS call failed and why).
+ */
+export declare function createAwsClient<TClient>(ClientClass: new (args: any) => TClient, args: object): TClient;

package/lib/esm/logic/createAwsClient.js

@@ -1,17 +1,20 @@
+// One client instance per (client class, config) pair, reused across invocations in a
+// warm lambda container so connection pools and SDK middleware are not rebuilt per call.
 const cache = new WeakMap();
+/**
+ * Returns a cached AWS SDK v3 client for the given class and config, creating it on first
+ * use. The client's `send` is wrapped so failed calls log the client, config, and command
+ * before rethrowing (CloudWatch visibility for which AWS call failed and why).
+ */
 export function createAwsClient(ClientClass, args) {
-    // Get or create the Map for the ClientClass
     let argsCache = cache.get(ClientClass);
     if (!argsCache) {
         argsCache = new Map();
         cache.set(ClientClass, argsCache);
     }
-    // Generate a key for the arguments
     const argsKey = JSON.stringify(args);
-    // Check if the instance already exists in the cache
     if (!argsCache.has(argsKey)) {
         const newClient = new ClientClass(args);
-        // If the send method exists, wrap it with error handling so we can see it in the logs
         if (typeof newClient.send === 'function') {
             const originalSend = newClient.send;
             newClient.send = async function (...sendArgs) {
@@ -24,10 +27,8 @@ export function createAwsClient(ClientClass, args) {
                 }
             };
         }
-        // Create a new instance and store it in the cache
         argsCache.set(argsKey, newClient);
     }
-    // Return the cached instance
     return argsCache.get(argsKey);
 }
 //# sourceMappingURL=createAwsClient.js.map

package/lib/esm/logic/createAwsClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"createAwsClient.js","sourceRoot":"","sources":["../../../src/logic/createAwsClient.ts"],"names":[],"mappings":"AAEA,MAAM,KAAK,GAAG,IAAI,OAAO,EAA4C,CAAC;AAEtE,MAAM,UAAU,eAAe,CAAI,WAAiC,EAAE,IAAS;IAC7E,4CAA4C;IAC5C,IAAI,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,mCAAmC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAErC,oDAAoD;IACpD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,WAAW,CAAC,IAAI,CAErC,CAAC;QAEF,sFAAsF;QACtF,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC;YACpC,SAAS,CAAC,IAAI,GAAG,KAAK,WAAW,GAAG,QAAe;gBACjD,IAAI,CAAC;oBACH,OAAO,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAClD,CAAC;gBAAC,OAAO,KAAU,EAAE,CAAC;oBACpB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBACnG,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;QAED,kDAAkD;QAClD,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,6BAA6B;IAC7B,OAAO,SAAS,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;AACjC,CAAC","sourcesContent":["type ClientConstructor<T> = new (args: any) => T;\n\nconst cache = new WeakMap<ClientConstructor<any>, Map<string, any>>();\n\nexport function createAwsClient<T>(ClientClass: ClientConstructor<T>, args: any): T {\n  // Get or create the Map for the ClientClass\n  let argsCache = cache.get(ClientClass);\n  if (!argsCache) {\n    argsCache = new Map();\n    cache.set(ClientClass, argsCache);\n  }\n\n  // Generate a key for the arguments\n  const argsKey = JSON.stringify(args);\n\n  // Check if the instance already exists in the cache\n  if (!argsCache.has(argsKey)) {\n    const newClient = new ClientClass(args) as {\n      send?: (...args: any[]) => any;\n    };\n\n    // If the send method exists, wrap it with error handling so we can see it in the logs\n    if (typeof newClient.send === 'function') {\n      const originalSend = newClient.send;\n      newClient.send = async function (...sendArgs: any[]) {\n        try {\n          return await originalSend.apply(this, sendArgs);\n        } catch (error: any) {\n          console.log(ClientClass.name || 'aws client', args, 'send args', sendArgs, 'error', error.message);\n          throw error;\n        }\n      };\n    }\n\n    // Create a new instance and store it in the cache\n    argsCache.set(argsKey, newClient);\n  }\n\n  // Return the cached instance\n  return argsCache.get(argsKey)!;\n}\n"]}
+{"version":3,"file":"createAwsClient.js","sourceRoot":"","sources":["../../../src/logic/createAwsClient.ts"],"names":[],"mappings":"AAQA,sFAAsF;AACtF,yFAAyF;AACzF,MAAM,KAAK,GAAG,IAAI,OAAO,EAA8C,CAAC;AAExE;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAU,WAAuC,EAAE,IAAY;IAC5F,IAAI,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAErC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,WAAW,CAAC,IAAI,CAAiB,CAAC;QAExD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC;YACpC,SAAS,CAAC,IAAI,GAAG,KAAK,WAAW,GAAG,QAAmB;gBACrD,IAAI,CAAC;oBACH,OAAO,MAAM,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAClD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;oBAC9G,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,SAAS,CAAC,GAAG,CAAC,OAAO,CAAY,CAAC;AAC3C,CAAC","sourcesContent":["// AWS SDK client constructors vary in config type and optionality (some take an optional\n// config); `any` here is the variance boundary that lets one helper accept them all.\ntype AnyClientConstructor = new (args: any) => unknown;\n\ntype CachedClient = {\n  send?: (...sendArgs: unknown[]) => Promise<unknown>;\n};\n\n// One client instance per (client class, config) pair, reused across invocations in a\n// warm lambda container so connection pools and SDK middleware are not rebuilt per call.\nconst cache = new WeakMap<AnyClientConstructor, Map<string, unknown>>();\n\n/**\n * Returns a cached AWS SDK v3 client for the given class and config, creating it on first\n * use. The client's `send` is wrapped so failed calls log the client, config, and command\n * before rethrowing (CloudWatch visibility for which AWS call failed and why).\n */\nexport function createAwsClient<TClient>(ClientClass: new (args: any) => TClient, args: object): TClient {\n  let argsCache = cache.get(ClientClass);\n  if (!argsCache) {\n    argsCache = new Map();\n    cache.set(ClientClass, argsCache);\n  }\n\n  const argsKey = JSON.stringify(args);\n\n  if (!argsCache.has(argsKey)) {\n    const newClient = new ClientClass(args) as CachedClient;\n\n    if (typeof newClient.send === 'function') {\n      const originalSend = newClient.send;\n      newClient.send = async function (...sendArgs: unknown[]) {\n        try {\n          return await originalSend.apply(this, sendArgs);\n        } catch (error) {\n          console.log(ClientClass.name || 'aws client', args, 'send args', sendArgs, 'error', (error as Error).message);\n          throw error;\n        }\n      };\n    }\n\n    argsCache.set(argsKey, newClient);\n  }\n\n  return argsCache.get(argsKey) as TClient;\n}\n"]}

package/lib/esm/logic/dynamo/convertDynamoMapToObject.d.ts

@@ -0,0 +1,7 @@
+import { AttributeValue } from '@aws-sdk/client-dynamodb';
+/**
+ * Unmarshal a DynamoDB attribute map back into a plain js object. Supports
+ * the types buildAttributeValue can produce (S, N, BOOL, NULL, L, M) and
+ * throws on anything else. A missing map unmarshals to an empty object.
+ */
+export declare function convertDynamoMapToObject(dynamoMap?: Record<string, AttributeValue>): Record<string, unknown>;

package/lib/esm/logic/dynamo/convertDynamoMapToObject.js

@@ -0,0 +1,32 @@
+const convertDynamoAttributeToValue = (value) => {
+    const valueType = Object.keys(value)[0];
+    switch (valueType) {
+        case 'S':
+            return value.S;
+        case 'N':
+            return parseFloat(value.N);
+        case 'BOOL':
+            return value.BOOL;
+        case 'NULL':
+            return null;
+        case 'L':
+            return value.L.map((item) => convertDynamoAttributeToValue(item));
+        case 'M':
+            return convertDynamoMapToObject(value.M);
+        default:
+            throw new Error(`Unsupported DynamoDB data type: ${valueType}`);
+    }
+};
+/**
+ * Unmarshal a DynamoDB attribute map back into a plain js object. Supports
+ * the types buildAttributeValue can produce (S, N, BOOL, NULL, L, M) and
+ * throws on anything else. A missing map unmarshals to an empty object.
+ */
+export function convertDynamoMapToObject(dynamoMap) {
+    const obj = {};
+    for (const property in dynamoMap) {
+        obj[property] = convertDynamoAttributeToValue(dynamoMap[property]);
+    }
+    return obj;
+}
+//# sourceMappingURL=convertDynamoMapToObject.js.map

package/lib/esm/logic/dynamo/convertDynamoMapToObject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"convertDynamoMapToObject.js","sourceRoot":"","sources":["../../../../src/logic/dynamo/convertDynamoMapToObject.ts"],"names":[],"mappings":"AAEA,MAAM,6BAA6B,GAAG,CAAC,KAAqB,EAAW,EAAE;IACvE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAExC,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,GAAG;YACN,OAAO,KAAK,CAAC,CAAC,CAAC;QACjB,KAAK,GAAG;YACN,OAAO,UAAU,CAAC,KAAK,CAAC,CAAE,CAAC,CAAC;QAC9B,KAAK,MAAM;YACT,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QACd,KAAK,GAAG;YACN,OAAO,KAAK,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,KAAK,GAAG;YACN,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAE,CAAC,CAAC;QAC5C;YACE,MAAM,IAAI,KAAK,CAAC,mCAAmC,SAAS,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAA0C;IACjF,MAAM,GAAG,GAA4B,EAAE,CAAC;IAExC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,GAAG,CAAC,QAAQ,CAAC,GAAG,6BAA6B,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import { AttributeValue } from '@aws-sdk/client-dynamodb';\n\nconst convertDynamoAttributeToValue = (value: AttributeValue): unknown => {\n  const valueType = Object.keys(value)[0];\n\n  switch (valueType) {\n    case 'S':\n      return value.S;\n    case 'N':\n      return parseFloat(value.N!);\n    case 'BOOL':\n      return value.BOOL;\n    case 'NULL':\n      return null;\n    case 'L':\n      return value.L!.map((item) => convertDynamoAttributeToValue(item));\n    case 'M':\n      return convertDynamoMapToObject(value.M!);\n    default:\n      throw new Error(`Unsupported DynamoDB data type: ${valueType}`);\n  }\n};\n\n/**\n * Unmarshal a DynamoDB attribute map back into a plain js object. Supports\n * the types buildAttributeValue can produce (S, N, BOOL, NULL, L, M) and\n * throws on anything else. A missing map unmarshals to an empty object.\n */\nexport function convertDynamoMapToObject(dynamoMap?: Record<string, AttributeValue>): Record<string, unknown> {\n  const obj: Record<string, unknown> = {};\n\n  for (const property in dynamoMap) {\n    obj[property] = convertDynamoAttributeToValue(dynamoMap[property]);\n  }\n\n  return obj;\n}\n"]}

package/lib/esm/logic/dynamo/deleteItem.js

@@ -1,17 +1,11 @@
 import { DeleteItemCommand, DynamoDBClient } from '@aws-sdk/client-dynamodb';
 import { createAwsClient } from '../createAwsClient';
-import { buildAttributeValue } from './qpqDynamoOrm';
+import { buildDynamoKey } from './utils/buildDynamoKey';
 export async function deleteItem(tableName, region, key, keyName, sortKey, sortKeyName) {
     const dynamoDBClient = createAwsClient(DynamoDBClient, { region });
-    const deleteItemParams = {
+    await dynamoDBClient.send(new DeleteItemCommand({
         TableName: tableName,
-        Key: {
-            [keyName]: buildAttributeValue(key),
-        },
-    };
-    if (sortKey && sortKeyName) {
-        deleteItemParams.Key[sortKeyName] = buildAttributeValue(sortKey);
-    }
-    await dynamoDBClient.send(new DeleteItemCommand(deleteItemParams));
+        Key: buildDynamoKey(keyName, key, sortKeyName, sortKey),
+    }));
 }
 //# sourceMappingURL=deleteItem.js.map

package/lib/esm/logic/dynamo/deleteItem.js.map

@@ -1 +1 @@
-{"version":3,"file":"deleteItem.js","sourceRoot":"","sources":["../../../../src/logic/dynamo/deleteItem.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAA0B,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAErG,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,MAAc,EACd,GAAoB,EACpB,OAAe,EACf,OAAyB,EACzB,WAAoB;IAEpB,MAAM,cAAc,GAAG,eAAe,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEnE,MAAM,gBAAgB,GAA2B;QAC/C,SAAS,EAAE,SAAS;QACpB,GAAG,EAAE;YACH,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,GAAG,CAAC;SACpC;KACF,CAAC;IAEF,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;QAC3B,gBAAgB,CAAC,GAAI,CAAC,WAAW,CAAC,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACrE,CAAC","sourcesContent":["import { KvsCoreDataType } from 'quidproquo-core';\n\nimport { DeleteItemCommand, DeleteItemCommandInput, DynamoDBClient } from '@aws-sdk/client-dynamodb';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { buildAttributeValue } from './qpqDynamoOrm';\n\nexport async function deleteItem(\n  tableName: string,\n  region: string,\n  key: KvsCoreDataType,\n  keyName: string,\n  sortKey?: KvsCoreDataType,\n  sortKeyName?: string,\n): Promise<void> {\n  const dynamoDBClient = createAwsClient(DynamoDBClient, { region });\n\n  const deleteItemParams: DeleteItemCommandInput = {\n    TableName: tableName,\n    Key: {\n      [keyName]: buildAttributeValue(key),\n    },\n  };\n\n  if (sortKey && sortKeyName) {\n    deleteItemParams.Key![sortKeyName] = buildAttributeValue(sortKey);\n  }\n\n  await dynamoDBClient.send(new DeleteItemCommand(deleteItemParams));\n}\n"]}
+{"version":3,"file":"deleteItem.js","sourceRoot":"","sources":["../../../../src/logic/dynamo/deleteItem.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE7E,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,MAAc,EACd,GAAoB,EACpB,OAAe,EACf,OAAyB,EACzB,WAAoB;IAEpB,MAAM,cAAc,GAAG,eAAe,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEnE,MAAM,cAAc,CAAC,IAAI,CACvB,IAAI,iBAAiB,CAAC;QACpB,SAAS,EAAE,SAAS;QACpB,GAAG,EAAE,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC;KACxD,CAAC,CACH,CAAC;AACJ,CAAC","sourcesContent":["import { KvsCoreDataType } from 'quidproquo-core';\n\nimport { DeleteItemCommand, DynamoDBClient } from '@aws-sdk/client-dynamodb';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { buildDynamoKey } from './utils/buildDynamoKey';\n\nexport async function deleteItem(\n  tableName: string,\n  region: string,\n  key: KvsCoreDataType,\n  keyName: string,\n  sortKey?: KvsCoreDataType,\n  sortKeyName?: string,\n): Promise<void> {\n  const dynamoDBClient = createAwsClient(DynamoDBClient, { region });\n\n  await dynamoDBClient.send(\n    new DeleteItemCommand({\n      TableName: tableName,\n      Key: buildDynamoKey(keyName, key, sortKeyName, sortKey),\n    }),\n  );\n}\n"]}

package/lib/esm/logic/dynamo/getAllItems.d.ts

@@ -1,2 +1,3 @@
 import { KvsQueryOperation } from 'quidproquo-core';
-export declare function getAllItems(tableName: string, region: string, filterExpression?: KvsQueryOperation): Promise<any[]>;
+/** Scan every page of the table, optionally filtered, and return all items. */
+export declare function getAllItems(tableName: string, region: string, filterExpression?: KvsQueryOperation): Promise<Record<string, unknown>[]>;

package/lib/esm/logic/dynamo/getAllItems.js

@@ -1,7 +1,8 @@
 import { DynamoDBClient, ScanCommand } from '@aws-sdk/client-dynamodb';
 import { createAwsClient } from '../createAwsClient';
-import { convertDynamoMapToObject } from './convertObjectToDynamoMap';
+import { convertDynamoMapToObject } from './convertDynamoMapToObject';
 import { buildDynamoQueryExpression, buildExpressionAttributeNames, buildExpressionAttributeValues } from './qpqDynamoOrm';
+/** Scan every page of the table, optionally filtered, and return all items. */
 export async function getAllItems(tableName, region, filterExpression) {
     const dynamoDBClient = createAwsClient(DynamoDBClient, { region });
     let records = [];
@@ -14,15 +15,9 @@ export async function getAllItems(tableName, region, filterExpression) {
             ExpressionAttributeNames: filterExpression && buildExpressionAttributeNames([filterExpression]),
             ExclusiveStartKey: lastEvaluatedKey,
         };
-        try {
-            const result = await dynamoDBClient.send(new ScanCommand(scanParams));
-            records = records.concat((result.Items || []).map((item) => convertDynamoMapToObject(item)));
-            lastEvaluatedKey = result.LastEvaluatedKey;
-        }
-        catch (error) {
-            console.error('Error scanning DynamoDB table:', error);
-            throw error;
-        }
+        const result = await dynamoDBClient.send(new ScanCommand(scanParams));
+        records = records.concat((result.Items || []).map((item) => convertDynamoMapToObject(item)));
+        lastEvaluatedKey = result.LastEvaluatedKey;
     } while (lastEvaluatedKey);
     return records;
 }