quidproquo-actionprocessor-awslambda 0.1.11 → 0.1.13

package/lib/commonjs/getActionProcessor/core/ai/logic/prepareAiPromptCall.d.ts

@@ -1,9 +1,10 @@
 import { ActionProcessorList, AiModel, DynamicModuleLoader, ErrorTypeEnum, QPQConfig, QpqLogger, StorySession, StreamRegistry } from 'quidproquo-core';
+import type { ToolSet } from 'ai';
 import { createAmazonBedrock } from '@ai-sdk/amazon-bedrock';
-export interface PrepareAiPromptCallPayload {
+export type PrepareAiPromptCallPayload = {
     model: AiModel;
     aiName?: string;
-}
+};
 type BedrockProvider = ReturnType<typeof createAmazonBedrock>;
 type BedrockLanguageModel = ReturnType<BedrockProvider>;
 export type PrepareAiPromptCallResult = {
@@ -13,7 +14,7 @@ export type PrepareAiPromptCallResult = {
     };
 } | {
     model: BedrockLanguageModel;
-    tools: Record<string, any> | undefined;
+    tools: ToolSet | undefined;
 };
 export declare const prepareAiPromptCall: (qpqConfig: QPQConfig, payload: PrepareAiPromptCallPayload, session: StorySession, actionProcessorList: ActionProcessorList, logger: QpqLogger, dynamicModuleLoader: DynamicModuleLoader, streamRegistry?: StreamRegistry) => PrepareAiPromptCallResult;
 export {};

package/lib/commonjs/getActionProcessor/core/ai/logic/prepareAiPromptCall.js.map

@@ -1 +1 @@
-{"version":3,"file":"prepareAiPromptCall.js","sourceRoot":"","sources":["../../../../../../src/getActionProcessor/core/ai/logic/prepareAiPromptCall.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAYyB;AAEzB,2BAAgC;AAChC,2DAA6D;AAE7D,+DAAwD;AACxD,8CAAgD;AAazC,MAAM,mBAAmB,GAAG,CACjC,SAAoB,EACpB,OAAmC,EACnC,OAAqB,EACrB,mBAAwC,EACxC,MAAiB,EACjB,mBAAwC,EACxC,cAA+B,EACJ,EAAE;IAC7B,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAA,oCAAmB,EAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAEhD,MAAM,cAAc,GAAG,4BAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,+BAAa,CAAC,cAAc,EAAE,OAAO,EAAE,yBAAyB,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC;IAC9G,CAAC;IAED,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,8BAAY,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QAEpE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,+BAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,wBAAwB,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;QACxG,CAAC;QAED,6DAA6D;QAC7D,MAAM,iBAAiB,GAAG,CAAC,QAAgB,EAAE,QAAgB,EAAE,EAAE,CAAC,CAAO,IAAa,EAAE,EAAE;YACxF,MAAM,YAAY,GAAG,IAAA,6CAA2B,EAC9C,SAAS,EACT,CAAC,YAAY,QAAQ,EAAE,CAAC,EACxB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,2BAAU,EACV,OAAO,EACP,mBAAmB,EACnB,MAAM,EACN,mBAAmB,EACnB,cAAc,CACf,CAAC;YAEF,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,0CAAwB,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YAEnF,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/C,CAAC;YAED,OAAO,WAAW,CAAC,MAAM,CAAC;QAC5B,CAAC,CAAA,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,mBACnB,WAAW,EAAE,OAAO,CAAC,WAAW,EAChC,WAAW,EAAE,IAAA,eAAU,EAAC,OAAO,CAAC,WAAW,CAAC,IAIzC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC;QAC9B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;KAC7D,CAAC;AACJ,CAAC,CAAC;AAlEW,QAAA,mBAAmB,uBAkE9B","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  AiModel,\n  askInlineFunctionExecute,\n  createImplementationRuntime,\n  DynamicModuleLoader,\n  ErrorTypeEnum,\n  QPQConfig,\n  qpqCoreUtils,\n  QpqLogger,\n  StorySession,\n  StreamRegistry,\n} from 'quidproquo-core';\n\nimport { jsonSchema } from 'ai';\nimport { createAmazonBedrock } from '@ai-sdk/amazon-bedrock';\n\nimport { randomGuid } from '../../../../awsLambdaUtils';\nimport { bedrockModelMap } from '../aiModelMap';\n\nexport interface PrepareAiPromptCallPayload {\n  model: AiModel;\n  aiName?: string;\n}\n\ntype BedrockProvider = ReturnType<typeof createAmazonBedrock>;\ntype BedrockLanguageModel = ReturnType<BedrockProvider>;\n\nexport type PrepareAiPromptCallResult =\n  { error: { type: ErrorTypeEnum; message: string } } | { model: BedrockLanguageModel; tools: Record<string, any> | undefined };\n\nexport const prepareAiPromptCall = (\n  qpqConfig: QPQConfig,\n  payload: PrepareAiPromptCallPayload,\n  session: StorySession,\n  actionProcessorList: ActionProcessorList,\n  logger: QpqLogger,\n  dynamicModuleLoader: DynamicModuleLoader,\n  streamRegistry?: StreamRegistry,\n): PrepareAiPromptCallResult => {\n  const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n  const bedrock = createAmazonBedrock({ region });\n\n  const bedrockModelId = bedrockModelMap[payload.model];\n  if (!bedrockModelId) {\n    return { error: { type: ErrorTypeEnum.NotImplemented, message: `Unsupported AI model: ${payload.model}` } };\n  }\n\n  const aiTools: Record<string, any> = {};\n\n  if (payload.aiName) {\n    const aiConfigs = qpqCoreUtils.getAllAiConfigs(qpqConfig);\n    const aiConfig = aiConfigs.find((c) => c.aiName === payload.aiName);\n\n    if (!aiConfig) {\n      return { error: { type: ErrorTypeEnum.NotFound, message: `AI config not found: ${payload.aiName}` } };\n    }\n\n    // Runs the tool's inline-function executor as its own story.\n    const createToolExecute = (toolName: string, executor: string) => async (args: unknown) => {\n      const resolveStory = createImplementationRuntime(\n        qpqConfig,\n        [`AI Tool: ${toolName}`],\n        () => new Date().toISOString(),\n        randomGuid,\n        session,\n        actionProcessorList,\n        logger,\n        dynamicModuleLoader,\n        streamRegistry,\n      );\n\n      const storyResult = await resolveStory(askInlineFunctionExecute, [executor, args]);\n\n      if (storyResult.error) {\n        throw new Error(storyResult.error.errorText);\n      }\n\n      return storyResult.result;\n    };\n\n    for (const toolDef of aiConfig.tools) {\n      aiTools[toolDef.name] = {\n        description: toolDef.description,\n        inputSchema: jsonSchema(toolDef.inputSchema),\n        // A tool without an executor is client-side: the AI SDK emits the tool call\n        // but has nothing to run, so the loop halts with the call unresolved and the\n        // client answers it out-of-band (see AiToolDefinition.executor).\n        ...(toolDef.executor ? { execute: createToolExecute(toolDef.name, toolDef.executor) } : {}),\n      };\n    }\n  }\n\n  return {\n    model: bedrock(bedrockModelId),\n    tools: Object.keys(aiTools).length > 0 ? aiTools : undefined,\n  };\n};\n"]}
+{"version":3,"file":"prepareAiPromptCall.js","sourceRoot":"","sources":["../../../../../../src/getActionProcessor/core/ai/logic/prepareAiPromptCall.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAYyB;AAGzB,2BAAgC;AAChC,2DAA6D;AAE7D,+DAAwD;AACxD,8CAAgD;AAazC,MAAM,mBAAmB,GAAG,CACjC,SAAoB,EACpB,OAAmC,EACnC,OAAqB,EACrB,mBAAwC,EACxC,MAAiB,EACjB,mBAAwC,EACxC,cAA+B,EACJ,EAAE;IAC7B,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAA,oCAAmB,EAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAEhD,MAAM,cAAc,GAAG,4BAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,+BAAa,CAAC,cAAc,EAAE,OAAO,EAAE,yBAAyB,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC;IAC9G,CAAC;IAED,MAAM,OAAO,GAAY,EAAE,CAAC;IAE5B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,8BAAY,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QAEpE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,+BAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,wBAAwB,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;QACxG,CAAC;QAED,6DAA6D;QAC7D,MAAM,iBAAiB,GAAG,CAAC,QAAgB,EAAE,QAAgB,EAAE,EAAE,CAAC,CAAO,IAAa,EAAE,EAAE;YACxF,MAAM,YAAY,GAAG,IAAA,6CAA2B,EAC9C,SAAS,EACT,CAAC,YAAY,QAAQ,EAAE,CAAC,EACxB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,2BAAU,EACV,OAAO,EACP,mBAAmB,EACnB,MAAM,EACN,mBAAmB,EACnB,cAAc,CACf,CAAC;YAEF,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,0CAAwB,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YAEnF,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/C,CAAC;YAED,OAAO,WAAW,CAAC,MAAM,CAAC;QAC5B,CAAC,CAAA,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,mBACnB,WAAW,EAAE,OAAO,CAAC,WAAW,EAChC,WAAW,EAAE,IAAA,eAAU,EAAC,OAAO,CAAC,WAAW,CAAC,IAIzC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC;QAC9B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;KAC7D,CAAC;AACJ,CAAC,CAAC;AAlEW,QAAA,mBAAmB,uBAkE9B","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  AiModel,\n  askInlineFunctionExecute,\n  createImplementationRuntime,\n  DynamicModuleLoader,\n  ErrorTypeEnum,\n  QPQConfig,\n  qpqCoreUtils,\n  QpqLogger,\n  StorySession,\n  StreamRegistry,\n} from 'quidproquo-core';\n\nimport type { ToolSet } from 'ai';\nimport { jsonSchema } from 'ai';\nimport { createAmazonBedrock } from '@ai-sdk/amazon-bedrock';\n\nimport { randomGuid } from '../../../../awsLambdaUtils';\nimport { bedrockModelMap } from '../aiModelMap';\n\nexport type PrepareAiPromptCallPayload = {\n  model: AiModel;\n  aiName?: string;\n};\n\ntype BedrockProvider = ReturnType<typeof createAmazonBedrock>;\ntype BedrockLanguageModel = ReturnType<BedrockProvider>;\n\nexport type PrepareAiPromptCallResult =\n  { error: { type: ErrorTypeEnum; message: string } } | { model: BedrockLanguageModel; tools: ToolSet | undefined };\n\nexport const prepareAiPromptCall = (\n  qpqConfig: QPQConfig,\n  payload: PrepareAiPromptCallPayload,\n  session: StorySession,\n  actionProcessorList: ActionProcessorList,\n  logger: QpqLogger,\n  dynamicModuleLoader: DynamicModuleLoader,\n  streamRegistry?: StreamRegistry,\n): PrepareAiPromptCallResult => {\n  const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n  const bedrock = createAmazonBedrock({ region });\n\n  const bedrockModelId = bedrockModelMap[payload.model];\n  if (!bedrockModelId) {\n    return { error: { type: ErrorTypeEnum.NotImplemented, message: `Unsupported AI model: ${payload.model}` } };\n  }\n\n  const aiTools: ToolSet = {};\n\n  if (payload.aiName) {\n    const aiConfigs = qpqCoreUtils.getAllAiConfigs(qpqConfig);\n    const aiConfig = aiConfigs.find((c) => c.aiName === payload.aiName);\n\n    if (!aiConfig) {\n      return { error: { type: ErrorTypeEnum.NotFound, message: `AI config not found: ${payload.aiName}` } };\n    }\n\n    // Runs the tool's inline-function executor as its own story.\n    const createToolExecute = (toolName: string, executor: string) => async (args: unknown) => {\n      const resolveStory = createImplementationRuntime(\n        qpqConfig,\n        [`AI Tool: ${toolName}`],\n        () => new Date().toISOString(),\n        randomGuid,\n        session,\n        actionProcessorList,\n        logger,\n        dynamicModuleLoader,\n        streamRegistry,\n      );\n\n      const storyResult = await resolveStory(askInlineFunctionExecute, [executor, args]);\n\n      if (storyResult.error) {\n        throw new Error(storyResult.error.errorText);\n      }\n\n      return storyResult.result;\n    };\n\n    for (const toolDef of aiConfig.tools) {\n      aiTools[toolDef.name] = {\n        description: toolDef.description,\n        inputSchema: jsonSchema(toolDef.inputSchema),\n        // A tool without an executor is client-side: the AI SDK emits the tool call\n        // but has nothing to run, so the loop halts with the call unresolved and the\n        // client answers it out-of-band (see AiToolDefinition.executor).\n        ...(toolDef.executor ? { execute: createToolExecute(toolDef.name, toolDef.executor) } : {}),\n      };\n    }\n  }\n\n  return {\n    model: bedrock(bedrockModelId),\n    tools: Object.keys(aiTools).length > 0 ? aiTools : undefined,\n  };\n};\n"]}

package/lib/commonjs/getActionProcessor/core/ai/logic/toCacheableMessages.js

@@ -7,7 +7,7 @@ const withCachePoint = (message) => (Object.assign(Object.assign({}, message), {
 // resume a halted turn append a transport-only continuation message each round, so the boundary
 // after it never matches again. The second-to-last boundary (the newest durable message) is the
 // one a resumed round's prefix actually re-sends byte-identically. See toCacheableSystem for the
-// fixed system/tools cache point this is meant to be used alongside — Bedrock's cache lookback
+// fixed system/tools cache point this is meant to be used alongside; Bedrock's cache lookback
 // only covers a limited number of recent content blocks, so long conversations still need both.
 const toCacheableMessages = (messages, caching) => {
     if (!caching || messages.length === 0) {

package/lib/commonjs/getActionProcessor/core/ai/logic/toCacheableMessages.js.map

@@ -1 +1 @@
-{"version":3,"file":"toCacheableMessages.js","sourceRoot":"","sources":["../../../../../../src/getActionProcessor/core/ai/logic/toCacheableMessages.ts"],"names":[],"mappings":";;;AAEA,MAAM,cAAc,GAAG,CAAC,OAAqB,EAAgB,EAAE,CAAC,iCAC3D,OAAO,KACV,eAAe,kCACV,OAAO,CAAC,eAAe,KAC1B,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAE9C,CAAC;AAEH,8FAA8F;AAC9F,4FAA4F;AAC5F,gGAAgG;AAChG,gGAAgG;AAChG,iGAAiG;AACjG,+FAA+F;AAC/F,gGAAgG;AACzF,MAAM,mBAAmB,GAAG,CAAC,QAAwB,EAAE,OAA4B,EAAkB,EAAE;IAC5G,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9G,CAAC,CAAC;AANW,QAAA,mBAAmB,uBAM9B","sourcesContent":["import type { ModelMessage } from 'ai';\n\nconst withCachePoint = (message: ModelMessage): ModelMessage => ({\n  ...message,\n  providerOptions: {\n    ...message.providerOptions,\n    bedrock: { cachePoint: { type: 'default' } },\n  },\n});\n\n// Marks the newest TWO messages as cache points so the next call in the same conversation can\n// read everything up to here from cache. The last message alone is not enough: callers that\n// resume a halted turn append a transport-only continuation message each round, so the boundary\n// after it never matches again. The second-to-last boundary (the newest durable message) is the\n// one a resumed round's prefix actually re-sends byte-identically. See toCacheableSystem for the\n// fixed system/tools cache point this is meant to be used alongside — Bedrock's cache lookback\n// only covers a limited number of recent content blocks, so long conversations still need both.\nexport const toCacheableMessages = (messages: ModelMessage[], caching: boolean | undefined): ModelMessage[] => {\n  if (!caching || messages.length === 0) {\n    return messages;\n  }\n\n  return messages.map((message, index) => (index >= messages.length - 2 ? withCachePoint(message) : message));\n};\n"]}
+{"version":3,"file":"toCacheableMessages.js","sourceRoot":"","sources":["../../../../../../src/getActionProcessor/core/ai/logic/toCacheableMessages.ts"],"names":[],"mappings":";;;AAEA,MAAM,cAAc,GAAG,CAAC,OAAqB,EAAgB,EAAE,CAAC,iCAC3D,OAAO,KACV,eAAe,kCACV,OAAO,CAAC,eAAe,KAC1B,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAE9C,CAAC;AAEH,8FAA8F;AAC9F,4FAA4F;AAC5F,gGAAgG;AAChG,gGAAgG;AAChG,iGAAiG;AACjG,8FAA8F;AAC9F,gGAAgG;AACzF,MAAM,mBAAmB,GAAG,CAAC,QAAwB,EAAE,OAA4B,EAAkB,EAAE;IAC5G,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAC9G,CAAC,CAAC;AANW,QAAA,mBAAmB,uBAM9B","sourcesContent":["import type { ModelMessage } from 'ai';\n\nconst withCachePoint = (message: ModelMessage): ModelMessage => ({\n  ...message,\n  providerOptions: {\n    ...message.providerOptions,\n    bedrock: { cachePoint: { type: 'default' } },\n  },\n});\n\n// Marks the newest TWO messages as cache points so the next call in the same conversation can\n// read everything up to here from cache. The last message alone is not enough: callers that\n// resume a halted turn append a transport-only continuation message each round, so the boundary\n// after it never matches again. The second-to-last boundary (the newest durable message) is the\n// one a resumed round's prefix actually re-sends byte-identically. See toCacheableSystem for the\n// fixed system/tools cache point this is meant to be used alongside; Bedrock's cache lookback\n// only covers a limited number of recent content blocks, so long conversations still need both.\nexport const toCacheableMessages = (messages: ModelMessage[], caching: boolean | undefined): ModelMessage[] => {\n  if (!caching || messages.length === 0) {\n    return messages;\n  }\n\n  return messages.map((message, index) => (index >= messages.length - 2 ? withCachePoint(message) : message));\n};\n"]}

package/lib/commonjs/getActionProcessor/core/apiKeyValidation/getApiKeyValidationValidateActionProcessor.js

@@ -18,9 +18,9 @@ const awsNamingUtils_1 = require("../../../awsNamingUtils");
 const getApiKeyValue_1 = require("../../../logic/apiGateway/getApiKeyValue");
 const getExportedValue_1 = require("../../../logic/cloudformation/getExportedValue");
 // Constant-time string equality. `timingSafeEqual` throws on length mismatch,
-// so guard the length check — the length itself isn't secret for API keys.
+// so guard the length check - the length itself isn't secret for API keys.
 const safeEqual = (a, b) => {
-    if (!a || !b || a.length != b.length) {
+    if (!a || !b || a.length !== b.length) {
         return false;
     }
     const aBuf = Buffer.from(a, 'utf8');
@@ -32,16 +32,18 @@ const getProcessApiKeyValidationValidate = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ apiKeyValue, apiKeyReferences }) {
         // Fetch each referenced key individually (id via CFN export, then GetApiKey) rather than
         // listing every key in the account - keeps the IAM grant per-key instead of /apikeys-wide.
-        const realApiKeyValues = yield Promise.all(apiKeyReferences.map((apiKeyReference) => __awaiter(void 0, void 0, void 0, function* () {
+        // An unresolvable reference behaves like the old list-and-filter miss - no match.
+        const fetchRealApiKeyValue = (apiKeyReference) => __awaiter(void 0, void 0, void 0, function* () {
+            var _a;
             try {
                 const apiKeyId = yield (0, getExportedValue_1.getExportedValue)((0, awsNamingUtils_1.getCFExportNameApiKeyIdFromConfig)(apiKeyReference.name, qpqConfig, apiKeyReference.serviceName, apiKeyReference.applicationName), region);
-                return yield (0, getApiKeyValue_1.getApiKeyValue)(region, apiKeyId);
+                return (_a = (yield (0, getApiKeyValue_1.getApiKeyValue)(region, apiKeyId))) !== null && _a !== void 0 ? _a : null;
             }
-            catch (_a) {
-                // An unresolvable reference behaves like the old list-and-filter miss - no match
-                return undefined;
+            catch (_b) {
+                return null;
             }
-        })));
+        });
+        const realApiKeyValues = yield Promise.all(apiKeyReferences.map(fetchRealApiKeyValue));
         const matched = realApiKeyValues.some((realApiKeyValue) => safeEqual(realApiKeyValue, apiKeyValue));
         return (0, quidproquo_core_1.actionResult)(matched);
     });

package/lib/commonjs/getActionProcessor/core/apiKeyValidation/getApiKeyValidationValidateActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getApiKeyValidationValidateActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/apiKeyValidation/getApiKeyValidationValidateActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAA4G;AAC5G,+DAA2G;AAE3G,mCAAyC;AAEzC,4DAA4E;AAC5E,6EAA0E;AAC1E,qFAAkF;AAElF,8EAA8E;AAC9E,2EAA2E;AAC3E,MAAM,SAAS,GAAG,CAAC,CAAU,EAAE,CAAU,EAAW,EAAE;IACpD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAEpC,OAAO,IAAA,wBAAe,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,kCAAkC,GAAG,CAAC,SAAoB,EAA2C,EAAE;IAC3G,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;IAE7E,OAAO,KAA0C,EAAE,4CAArC,EAAE,WAAW,EAAE,gBAAgB,EAAE;QAC7C,yFAAyF;QACzF,2FAA2F;QAC3F,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG,CACxC,gBAAgB,CAAC,GAAG,CAAC,CAAO,eAAe,EAAE,EAAE;YAC7C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAA,mCAAgB,EACrC,IAAA,kDAAiC,EAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,WAAW,EAAE,eAAe,CAAC,eAAe,CAAC,EAChI,MAAM,CACP,CAAC;gBAEF,OAAO,MAAM,IAAA,+BAAc,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAChD,CAAC;YAAC,WAAM,CAAC;gBACP,iFAAiF;gBACjF,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC,CAAA,CAAC,CACH,CAAC;QAEF,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;QACpG,OAAO,IAAA,8BAAY,EAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,0CAA0C,GAAgC,CACrF,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,iDAA0B,CAAC,QAAQ,CAAC,EAAE,kCAAkC,CAAC,SAAS,CAAC;KACrF,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,0CAA0C,8CAIpD","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport { ActionProcessorList, ActionProcessorListResolver, actionResult, QPQConfig } from 'quidproquo-core';\nimport { ApiKeyValidationActionType, ApiKeyValidationValidateActionProcessor } from 'quidproquo-webserver';\n\nimport { timingSafeEqual } from 'crypto';\n\nimport { getCFExportNameApiKeyIdFromConfig } from '../../../awsNamingUtils';\nimport { getApiKeyValue } from '../../../logic/apiGateway/getApiKeyValue';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\n\n// Constant-time string equality. `timingSafeEqual` throws on length mismatch,\n// so guard the length check — the length itself isn't secret for API keys.\nconst safeEqual = (a?: string, b?: string): boolean => {\n  if (!a || !b || a.length != b.length) {\n    return false;\n  }\n\n  const aBuf = Buffer.from(a, 'utf8');\n  const bBuf = Buffer.from(b, 'utf8');\n\n  return timingSafeEqual(aBuf, bBuf);\n};\n\nconst getProcessApiKeyValidationValidate = (qpqConfig: QPQConfig): ApiKeyValidationValidateActionProcessor => {\n  const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n  return async ({ apiKeyValue, apiKeyReferences }) => {\n    // Fetch each referenced key individually (id via CFN export, then GetApiKey) rather than\n    // listing every key in the account - keeps the IAM grant per-key instead of /apikeys-wide.\n    const realApiKeyValues = await Promise.all(\n      apiKeyReferences.map(async (apiKeyReference) => {\n        try {\n          const apiKeyId = await getExportedValue(\n            getCFExportNameApiKeyIdFromConfig(apiKeyReference.name, qpqConfig, apiKeyReference.serviceName, apiKeyReference.applicationName),\n            region,\n          );\n\n          return await getApiKeyValue(region, apiKeyId);\n        } catch {\n          // An unresolvable reference behaves like the old list-and-filter miss - no match\n          return undefined;\n        }\n      }),\n    );\n\n    const matched = realApiKeyValues.some((realApiKeyValue) => safeEqual(realApiKeyValue, apiKeyValue));\n    return actionResult(matched);\n  };\n};\n\nexport const getApiKeyValidationValidateActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [ApiKeyValidationActionType.Validate]: getProcessApiKeyValidationValidate(qpqConfig),\n});\n"]}
+{"version":3,"file":"getApiKeyValidationValidateActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/apiKeyValidation/getApiKeyValidationValidateActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAAsH;AACtH,+DAA4H;AAE5H,mCAAyC;AAEzC,4DAA4E;AAC5E,6EAA0E;AAC1E,qFAAkF;AAElF,8EAA8E;AAC9E,2EAA2E;AAC3E,MAAM,SAAS,GAAG,CAAC,CAAmB,EAAE,CAAmB,EAAW,EAAE;IACtE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAEpC,OAAO,IAAA,wBAAe,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,kCAAkC,GAAG,CAAC,SAAoB,EAA2C,EAAE;IAC3G,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;IAE7E,OAAO,KAA0C,EAAE,4CAArC,EAAE,WAAW,EAAE,gBAAgB,EAAE;QAC7C,yFAAyF;QACzF,2FAA2F;QAC3F,kFAAkF;QAClF,MAAM,oBAAoB,GAAG,CAAO,eAAgC,EAA6B,EAAE;;YACjG,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAA,mCAAgB,EACrC,IAAA,kDAAiC,EAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,WAAW,EAAE,eAAe,CAAC,eAAe,CAAC,EAChI,MAAM,CACP,CAAC;gBAEF,OAAO,MAAA,CAAC,MAAM,IAAA,+BAAc,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,mCAAI,IAAI,CAAC;YAC1D,CAAC;YAAC,WAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAA,CAAC;QAEF,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAEvF,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;QACpG,OAAO,IAAA,8BAAY,EAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,0CAA0C,GAAgC,CACrF,SAAoB,EACU,EAAE;IAAC,OAAA,CAAC;QAClC,CAAC,iDAA0B,CAAC,QAAQ,CAAC,EAAE,kCAAkC,CAAC,SAAS,CAAC;KACrF,CAAC,CAAA;EAAA,CAAC;AAJU,QAAA,0CAA0C,8CAIpD","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport { ActionProcessorList, ActionProcessorListResolver, actionResult, Nullable, QPQConfig } from 'quidproquo-core';\nimport { ApiKeyReference, ApiKeyValidationActionType, ApiKeyValidationValidateActionProcessor } from 'quidproquo-webserver';\n\nimport { timingSafeEqual } from 'crypto';\n\nimport { getCFExportNameApiKeyIdFromConfig } from '../../../awsNamingUtils';\nimport { getApiKeyValue } from '../../../logic/apiGateway/getApiKeyValue';\nimport { getExportedValue } from '../../../logic/cloudformation/getExportedValue';\n\n// Constant-time string equality. `timingSafeEqual` throws on length mismatch,\n// so guard the length check - the length itself isn't secret for API keys.\nconst safeEqual = (a: Nullable<string>, b: Nullable<string>): boolean => {\n  if (!a || !b || a.length !== b.length) {\n    return false;\n  }\n\n  const aBuf = Buffer.from(a, 'utf8');\n  const bBuf = Buffer.from(b, 'utf8');\n\n  return timingSafeEqual(aBuf, bBuf);\n};\n\nconst getProcessApiKeyValidationValidate = (qpqConfig: QPQConfig): ApiKeyValidationValidateActionProcessor => {\n  const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n  return async ({ apiKeyValue, apiKeyReferences }) => {\n    // Fetch each referenced key individually (id via CFN export, then GetApiKey) rather than\n    // listing every key in the account - keeps the IAM grant per-key instead of /apikeys-wide.\n    // An unresolvable reference behaves like the old list-and-filter miss - no match.\n    const fetchRealApiKeyValue = async (apiKeyReference: ApiKeyReference): Promise<Nullable<string>> => {\n      try {\n        const apiKeyId = await getExportedValue(\n          getCFExportNameApiKeyIdFromConfig(apiKeyReference.name, qpqConfig, apiKeyReference.serviceName, apiKeyReference.applicationName),\n          region,\n        );\n\n        return (await getApiKeyValue(region, apiKeyId)) ?? null;\n      } catch {\n        return null;\n      }\n    };\n\n    const realApiKeyValues = await Promise.all(apiKeyReferences.map(fetchRealApiKeyValue));\n\n    const matched = realApiKeyValues.some((realApiKeyValue) => safeEqual(realApiKeyValue, apiKeyValue));\n    return actionResult(matched);\n  };\n};\n\nexport const getApiKeyValidationValidateActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n): Promise<ActionProcessorList> => ({\n  [ApiKeyValidationActionType.Validate]: getProcessApiKeyValidationValidate(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/config/getConfigGetParameterActionProcessor.js

@@ -13,10 +13,10 @@ exports.getConfigGetParameterActionProcessor = void 0;
 const quidproquo_config_aws_1 = require("quidproquo-config-aws");
 const quidproquo_core_1 = require("quidproquo-core");
 const getParameter_1 = require("../../../logic/parametersManager/getParameter");
-const qpqAwsLambdaRuntimeConfigUtils_1 = require("../../../runtimeConfig/qpqAwsLambdaRuntimeConfigUtils");
+const resolveParameterKey_1 = require("../../../runtimeConfig/resolveParameterKey");
 const getProcessConfigGetParameter = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ parameterName }) {
-        const awsParameterKey = (0, qpqAwsLambdaRuntimeConfigUtils_1.resolveParameterKey)(parameterName, qpqConfig);
+        const awsParameterKey = (0, resolveParameterKey_1.resolveParameterKey)(parameterName, qpqConfig);
         try {
             const parameterValue = yield (0, getParameter_1.getParameter)(awsParameterKey, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig));
             return (0, quidproquo_core_1.actionResult)(parameterValue);

package/lib/commonjs/getActionProcessor/core/config/getConfigGetParameterActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getConfigGetParameterActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/config/getConfigGetParameterActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,gFAA6E;AAC7E,0GAA4F;AAE5F,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAAqC,EAAE;IAC/F,OAAO,KAA0B,EAAE,4CAArB,EAAE,aAAa,EAAE;QAC7B,MAAM,eAAe,GAAG,IAAA,oDAAmB,EAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAEtE,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,IAAA,2BAAY,EAAC,eAAe,EAAE,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1H,OAAO,IAAA,8BAAY,EAAC,cAAc,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,iDAA+B,CAAC,UAAU,EAAE,2BAA2B,CAAC;aACtH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,oCAAoC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC9I,CAAC,kCAAgB,CAAC,YAAY,CAAC,EAAE,4BAA4B,CAAC,SAAS,CAAC;KACzE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,oCAAoC,wCAE9C","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  ConfigActionType,\n  ConfigGetParameterActionProcessor,\n  ConfigGetParameterErrorTypeEnum,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { getParameter } from '../../../logic/parametersManager/getParameter';\nimport { resolveParameterKey } from '../../../runtimeConfig/qpqAwsLambdaRuntimeConfigUtils';\n\nconst getProcessConfigGetParameter = (qpqConfig: QPQConfig): ConfigGetParameterActionProcessor => {\n  return async ({ parameterName }) => {\n    const awsParameterKey = resolveParameterKey(parameterName, qpqConfig);\n\n    try {\n      const parameterValue = await getParameter(awsParameterKey, qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig));\n      return actionResult(parameterValue);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        ThrottlingException: () => actionResultError(ConfigGetParameterErrorTypeEnum.Throttling, 'Throttling: Rate exceeded'),\n      });\n    }\n  };\n};\n\nexport const getConfigGetParameterActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [ConfigActionType.GetParameter]: getProcessConfigGetParameter(qpqConfig),\n});\n"]}
+{"version":3,"file":"getConfigGetParameterActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/config/getConfigGetParameterActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,gFAA6E;AAC7E,oFAAiF;AAEjF,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAAqC,EAAE;IAC/F,OAAO,KAA0B,EAAE,4CAArB,EAAE,aAAa,EAAE;QAC7B,MAAM,eAAe,GAAG,IAAA,yCAAmB,EAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAEtE,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,IAAA,2BAAY,EAAC,eAAe,EAAE,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1H,OAAO,IAAA,8BAAY,EAAC,cAAc,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,iDAA+B,CAAC,UAAU,EAAE,2BAA2B,CAAC;aACtH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,oCAAoC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC9I,CAAC,kCAAgB,CAAC,YAAY,CAAC,EAAE,4BAA4B,CAAC,SAAS,CAAC;KACzE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,oCAAoC,wCAE9C","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  ConfigActionType,\n  ConfigGetParameterActionProcessor,\n  ConfigGetParameterErrorTypeEnum,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { getParameter } from '../../../logic/parametersManager/getParameter';\nimport { resolveParameterKey } from '../../../runtimeConfig/resolveParameterKey';\n\nconst getProcessConfigGetParameter = (qpqConfig: QPQConfig): ConfigGetParameterActionProcessor => {\n  return async ({ parameterName }) => {\n    const awsParameterKey = resolveParameterKey(parameterName, qpqConfig);\n\n    try {\n      const parameterValue = await getParameter(awsParameterKey, qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig));\n      return actionResult(parameterValue);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        ThrottlingException: () => actionResultError(ConfigGetParameterErrorTypeEnum.Throttling, 'Throttling: Rate exceeded'),\n      });\n    }\n  };\n};\n\nexport const getConfigGetParameterActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [ConfigActionType.GetParameter]: getProcessConfigGetParameter(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/config/getConfigGetParametersActionProcessor.js

@@ -13,10 +13,10 @@ exports.getConfigGetParametersActionProcessor = void 0;
 const quidproquo_config_aws_1 = require("quidproquo-config-aws");
 const quidproquo_core_1 = require("quidproquo-core");
 const getParameters_1 = require("../../../logic/parametersManager/getParameters");
-const qpqAwsLambdaRuntimeConfigUtils_1 = require("../../../runtimeConfig/qpqAwsLambdaRuntimeConfigUtils");
+const resolveParameterKey_1 = require("../../../runtimeConfig/resolveParameterKey");
 const getProcessConfigGetParameters = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ parameterNames }) {
-        const awsParameterKeys = parameterNames.map((pn) => (0, qpqAwsLambdaRuntimeConfigUtils_1.resolveParameterKey)(pn, qpqConfig));
+        const awsParameterKeys = parameterNames.map((pn) => (0, resolveParameterKey_1.resolveParameterKey)(pn, qpqConfig));
         try {
             const parameterValues = yield (0, getParameters_1.getParameters)(awsParameterKeys, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig));
             return (0, quidproquo_core_1.actionResult)(parameterValues);

package/lib/commonjs/getActionProcessor/core/config/getConfigGetParametersActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getConfigGetParametersActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/config/getConfigGetParametersActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,kFAA+E;AAC/E,0GAA4F;AAE5F,MAAM,6BAA6B,GAAG,CAAC,SAAoB,EAAsC,EAAE;IACjG,OAAO,KAA2B,EAAE,4CAAtB,EAAE,cAAc,EAAE;QAC9B,MAAM,gBAAgB,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAA,oDAAmB,EAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAExF,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,IAAA,6BAAa,EAAC,gBAAgB,EAAE,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7H,OAAO,IAAA,8BAAY,EAAC,eAAe,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,kDAAgC,CAAC,UAAU,EAAE,2BAA2B,CAAC;aACvH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,qCAAqC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC/I,CAAC,kCAAgB,CAAC,aAAa,CAAC,EAAE,6BAA6B,CAAC,SAAS,CAAC;KAC3E,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,qCAAqC,yCAE/C","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  ConfigActionType,\n  ConfigGetParametersActionProcessor,\n  ConfigGetParametersErrorTypeEnum,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { getParameters } from '../../../logic/parametersManager/getParameters';\nimport { resolveParameterKey } from '../../../runtimeConfig/qpqAwsLambdaRuntimeConfigUtils';\n\nconst getProcessConfigGetParameters = (qpqConfig: QPQConfig): ConfigGetParametersActionProcessor => {\n  return async ({ parameterNames }) => {\n    const awsParameterKeys = parameterNames.map((pn) => resolveParameterKey(pn, qpqConfig));\n\n    try {\n      const parameterValues = await getParameters(awsParameterKeys, qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig));\n      return actionResult(parameterValues);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        ThrottlingException: () => actionResultError(ConfigGetParametersErrorTypeEnum.Throttling, 'Throttling: Rate exceeded'),\n      });\n    }\n  };\n};\n\nexport const getConfigGetParametersActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [ConfigActionType.GetParameters]: getProcessConfigGetParameters(qpqConfig),\n});\n"]}
+{"version":3,"file":"getConfigGetParametersActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/config/getConfigGetParametersActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,kFAA+E;AAC/E,oFAAiF;AAEjF,MAAM,6BAA6B,GAAG,CAAC,SAAoB,EAAsC,EAAE;IACjG,OAAO,KAA2B,EAAE,4CAAtB,EAAE,cAAc,EAAE;QAC9B,MAAM,gBAAgB,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAA,yCAAmB,EAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAExF,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,MAAM,IAAA,6BAAa,EAAC,gBAAgB,EAAE,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7H,OAAO,IAAA,8BAAY,EAAC,eAAe,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,kDAAgC,CAAC,UAAU,EAAE,2BAA2B,CAAC;aACvH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,qCAAqC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC/I,CAAC,kCAAgB,CAAC,aAAa,CAAC,EAAE,6BAA6B,CAAC,SAAS,CAAC;KAC3E,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,qCAAqC,yCAE/C","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  ConfigActionType,\n  ConfigGetParametersActionProcessor,\n  ConfigGetParametersErrorTypeEnum,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { getParameters } from '../../../logic/parametersManager/getParameters';\nimport { resolveParameterKey } from '../../../runtimeConfig/resolveParameterKey';\n\nconst getProcessConfigGetParameters = (qpqConfig: QPQConfig): ConfigGetParametersActionProcessor => {\n  return async ({ parameterNames }) => {\n    const awsParameterKeys = parameterNames.map((pn) => resolveParameterKey(pn, qpqConfig));\n\n    try {\n      const parameterValues = await getParameters(awsParameterKeys, qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig));\n      return actionResult(parameterValues);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        ThrottlingException: () => actionResultError(ConfigGetParametersErrorTypeEnum.Throttling, 'Throttling: Rate exceeded'),\n      });\n    }\n  };\n};\n\nexport const getConfigGetParametersActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [ConfigActionType.GetParameters]: getProcessConfigGetParameters(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/config/getConfigSetParameterActionProcessor.js

@@ -13,10 +13,10 @@ exports.getConfigSetParameterActionProcessor = void 0;
 const quidproquo_config_aws_1 = require("quidproquo-config-aws");
 const quidproquo_core_1 = require("quidproquo-core");
 const setParameter_1 = require("../../../logic/parametersManager/setParameter");
-const qpqAwsLambdaRuntimeConfigUtils_1 = require("../../../runtimeConfig/qpqAwsLambdaRuntimeConfigUtils");
+const resolveParameterKey_1 = require("../../../runtimeConfig/resolveParameterKey");
 const getProcessConfigSetParameter = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ parameterName, parameterValue }) {
-        const awsParameterKey = (0, qpqAwsLambdaRuntimeConfigUtils_1.resolveParameterKey)(parameterName, qpqConfig);
+        const awsParameterKey = (0, resolveParameterKey_1.resolveParameterKey)(parameterName, qpqConfig);
         try {
             yield (0, setParameter_1.setParameter)(awsParameterKey, quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), parameterValue);
             return (0, quidproquo_core_1.actionResult)(void 0);

package/lib/commonjs/getActionProcessor/core/config/getConfigSetParameterActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getConfigSetParameterActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/config/getConfigSetParameterActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,gFAA6E;AAC7E,0GAA4F;AAE5F,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAAqC,EAAE;IAC/F,OAAO,KAA0C,EAAE,4CAArC,EAAE,aAAa,EAAE,cAAc,EAAE;QAC7C,MAAM,eAAe,GAAG,IAAA,oDAAmB,EAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAEtE,IAAI,CAAC;YACH,MAAM,IAAA,2BAAY,EAAC,eAAe,EAAE,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;YACnH,OAAO,IAAA,8BAAY,EAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,iDAA+B,CAAC,UAAU,EAAE,2BAA2B,CAAC;gBACrH,sBAAsB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,iDAA+B,CAAC,aAAa,EAAE,gCAAgC,CAAC;aACjI,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,oCAAoC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC9I,CAAC,kCAAgB,CAAC,YAAY,CAAC,EAAE,4BAA4B,CAAC,SAAS,CAAC;KACzE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,oCAAoC,wCAE9C","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  ConfigActionType,\n  ConfigSetParameterActionProcessor,\n  ConfigSetParameterErrorTypeEnum,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { setParameter } from '../../../logic/parametersManager/setParameter';\nimport { resolveParameterKey } from '../../../runtimeConfig/qpqAwsLambdaRuntimeConfigUtils';\n\nconst getProcessConfigSetParameter = (qpqConfig: QPQConfig): ConfigSetParameterActionProcessor => {\n  return async ({ parameterName, parameterValue }) => {\n    const awsParameterKey = resolveParameterKey(parameterName, qpqConfig);\n\n    try {\n      await setParameter(awsParameterKey, qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), parameterValue);\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        ThrottlingException: () => actionResultError(ConfigSetParameterErrorTypeEnum.Throttling, 'Throttling: Rate exceeded'),\n        ParameterLimitExceeded: () => actionResultError(ConfigSetParameterErrorTypeEnum.QuotaExceeded, 'Parameter store limit exceeded'),\n      });\n    }\n  };\n};\n\nexport const getConfigSetParameterActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [ConfigActionType.SetParameter]: getProcessConfigSetParameter(qpqConfig),\n});\n"]}
+{"version":3,"file":"getConfigSetParameterActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/config/getConfigSetParameterActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iEAA0D;AAC1D,qDAUyB;AAEzB,gFAA6E;AAC7E,oFAAiF;AAEjF,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAAqC,EAAE;IAC/F,OAAO,KAA0C,EAAE,4CAArC,EAAE,aAAa,EAAE,cAAc,EAAE;QAC7C,MAAM,eAAe,GAAG,IAAA,yCAAmB,EAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAEtE,IAAI,CAAC;YACH,MAAM,IAAA,2BAAY,EAAC,eAAe,EAAE,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;YACnH,OAAO,IAAA,8BAAY,EAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,iDAA+B,CAAC,UAAU,EAAE,2BAA2B,CAAC;gBACrH,sBAAsB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,iDAA+B,CAAC,aAAa,EAAE,gCAAgC,CAAC;aACjI,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,oCAAoC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC9I,CAAC,kCAAgB,CAAC,YAAY,CAAC,EAAE,4BAA4B,CAAC,SAAS,CAAC;KACzE,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,oCAAoC,wCAE9C","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  ConfigActionType,\n  ConfigSetParameterActionProcessor,\n  ConfigSetParameterErrorTypeEnum,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { setParameter } from '../../../logic/parametersManager/setParameter';\nimport { resolveParameterKey } from '../../../runtimeConfig/resolveParameterKey';\n\nconst getProcessConfigSetParameter = (qpqConfig: QPQConfig): ConfigSetParameterActionProcessor => {\n  return async ({ parameterName, parameterValue }) => {\n    const awsParameterKey = resolveParameterKey(parameterName, qpqConfig);\n\n    try {\n      await setParameter(awsParameterKey, qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig), parameterValue);\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        ThrottlingException: () => actionResultError(ConfigSetParameterErrorTypeEnum.Throttling, 'Throttling: Rate exceeded'),\n        ParameterLimitExceeded: () => actionResultError(ConfigSetParameterErrorTypeEnum.QuotaExceeded, 'Parameter store limit exceeded'),\n      });\n    }\n  };\n};\n\nexport const getConfigSetParameterActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [ConfigActionType.SetParameter]: getProcessConfigSetParameter(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/crypto/getCryptoDecryptActionProcessor.d.ts

@@ -0,0 +1,2 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export declare const getCryptoDecryptActionProcessor: ActionProcessorListResolver;

package/lib/commonjs/getActionProcessor/core/crypto/getCryptoDecryptActionProcessor.js

@@ -0,0 +1,53 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCryptoDecryptActionProcessor = void 0;
+const quidproquo_actionprocessor_node_1 = require("quidproquo-actionprocessor-node");
+const quidproquo_config_aws_1 = require("quidproquo-config-aws");
+const quidproquo_core_1 = require("quidproquo-core");
+const utils_1 = require("./utils");
+const getProcessCryptoDecrypt = (qpqConfig) => {
+    return (_a) => __awaiter(void 0, [_a], void 0, function* ({ keyName, ciphertext, context }) {
+        const keyAlias = (0, utils_1.resolveCryptoKeyAlias)(keyName, qpqConfig);
+        if (!keyAlias) {
+            return (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoDecryptErrorTypeEnum.KeyNotConfigured, `Crypto key not configured: [${keyName}] - declare it with defineCryptoKey`);
+        }
+        const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
+        try {
+            const plaintext = yield (0, quidproquo_actionprocessor_node_1.envelopeDecrypt)(ciphertext, context, (0, utils_1.createKmsDataKeyProvider)(keyAlias, region));
+            return (0, quidproquo_core_1.actionResult)(plaintext);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                // Named errors from the shared envelope logic, keyed by error.code
+                QpqCryptoContextMismatch: (e) => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoDecryptErrorTypeEnum.ContextMismatch, e.message),
+                QpqCryptoMalformedCiphertext: (e) => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoDecryptErrorTypeEnum.MalformedCiphertext, e.message),
+                // KMS exceptions, keyed by error.name. The context hash was verified
+                // before KMS was called, so an invalid wrapped key means tampering or
+                // corruption, not a context mismatch.
+                InvalidCiphertextException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoDecryptErrorTypeEnum.MalformedCiphertext, 'Wrapped data key is not decryptable'),
+                IncorrectKeyException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoDecryptErrorTypeEnum.MalformedCiphertext, `Ciphertext was not encrypted under crypto key: [${keyName}]`),
+                NotFoundException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoDecryptErrorTypeEnum.KeyUnavailable, `Crypto key not found: [${keyName}]`),
+                DisabledException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoDecryptErrorTypeEnum.KeyUnavailable, `Crypto key is disabled: [${keyName}]`),
+                KMSInvalidStateException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoDecryptErrorTypeEnum.KeyUnavailable, `Crypto key is in an unusable state: [${keyName}]`),
+                AccessDeniedException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoDecryptErrorTypeEnum.KeyUnavailable, `Access denied to crypto key: [${keyName}]`),
+                ThrottlingException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoDecryptErrorTypeEnum.Throttling, 'Throttling: Rate exceeded'),
+            });
+        }
+    });
+};
+const getCryptoDecryptActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {
+    return ({
+        [quidproquo_core_1.CryptoActionType.Decrypt]: getProcessCryptoDecrypt(qpqConfig),
+    });
+});
+exports.getCryptoDecryptActionProcessor = getCryptoDecryptActionProcessor;
+//# sourceMappingURL=getCryptoDecryptActionProcessor.js.map

package/lib/commonjs/getActionProcessor/core/crypto/getCryptoDecryptActionProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCryptoDecryptActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/crypto/getCryptoDecryptActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qFAAkE;AAClE,iEAA0D;AAC1D,qDAUyB;AAEzB,mCAA0E;AAE1E,MAAM,uBAAuB,GAAG,CAAC,SAAoB,EAAgC,EAAE;IACrF,OAAO,KAAyC,EAAE,4CAApC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE;QAC5C,MAAM,QAAQ,GAAG,IAAA,6BAAqB,EAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAA,mCAAiB,EACtB,4CAA0B,CAAC,gBAAgB,EAC3C,+BAA+B,OAAO,qCAAqC,CAC5E,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAA,iDAAe,EAAC,UAAU,EAAE,OAAO,EAAE,IAAA,gCAAwB,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YACzG,OAAO,IAAA,8BAAY,EAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,mEAAmE;gBACnE,wBAAwB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC;gBACzG,4BAA4B,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC;gBAEjH,qEAAqE;gBACrE,sEAAsE;gBACtE,sCAAsC;gBACtC,0BAA0B,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,mBAAmB,EAAE,qCAAqC,CAAC;gBAC1I,qBAAqB,EAAE,GAAG,EAAE,CAC1B,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,mBAAmB,EAAE,mDAAmD,OAAO,GAAG,CAAC;gBAClI,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,cAAc,EAAE,0BAA0B,OAAO,GAAG,CAAC;gBAC3H,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,cAAc,EAAE,4BAA4B,OAAO,GAAG,CAAC;gBAC7H,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,cAAc,EAAE,wCAAwC,OAAO,GAAG,CAAC;gBAClH,qBAAqB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,cAAc,EAAE,iCAAiC,OAAO,GAAG,CAAC;gBACtI,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,UAAU,EAAE,2BAA2B,CAAC;aACjH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,+BAA+B,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QACzI,CAAC,kCAAgB,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC,SAAS,CAAC;KAC/D,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,+BAA+B,mCAEzC","sourcesContent":["import { envelopeDecrypt } from 'quidproquo-actionprocessor-node';\nimport { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  CryptoActionType,\n  CryptoDecryptActionProcessor,\n  CryptoDecryptErrorTypeEnum,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { createKmsDataKeyProvider, resolveCryptoKeyAlias } from './utils';\n\nconst getProcessCryptoDecrypt = (qpqConfig: QPQConfig): CryptoDecryptActionProcessor => {\n  return async ({ keyName, ciphertext, context }) => {\n    const keyAlias = resolveCryptoKeyAlias(keyName, qpqConfig);\n    if (!keyAlias) {\n      return actionResultError(\n        CryptoDecryptErrorTypeEnum.KeyNotConfigured,\n        `Crypto key not configured: [${keyName}] - declare it with defineCryptoKey`,\n      );\n    }\n\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      const plaintext = await envelopeDecrypt(ciphertext, context, createKmsDataKeyProvider(keyAlias, region));\n      return actionResult(plaintext);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        // Named errors from the shared envelope logic, keyed by error.code\n        QpqCryptoContextMismatch: (e) => actionResultError(CryptoDecryptErrorTypeEnum.ContextMismatch, e.message),\n        QpqCryptoMalformedCiphertext: (e) => actionResultError(CryptoDecryptErrorTypeEnum.MalformedCiphertext, e.message),\n\n        // KMS exceptions, keyed by error.name. The context hash was verified\n        // before KMS was called, so an invalid wrapped key means tampering or\n        // corruption, not a context mismatch.\n        InvalidCiphertextException: () => actionResultError(CryptoDecryptErrorTypeEnum.MalformedCiphertext, 'Wrapped data key is not decryptable'),\n        IncorrectKeyException: () =>\n          actionResultError(CryptoDecryptErrorTypeEnum.MalformedCiphertext, `Ciphertext was not encrypted under crypto key: [${keyName}]`),\n        NotFoundException: () => actionResultError(CryptoDecryptErrorTypeEnum.KeyUnavailable, `Crypto key not found: [${keyName}]`),\n        DisabledException: () => actionResultError(CryptoDecryptErrorTypeEnum.KeyUnavailable, `Crypto key is disabled: [${keyName}]`),\n        KMSInvalidStateException: () =>\n          actionResultError(CryptoDecryptErrorTypeEnum.KeyUnavailable, `Crypto key is in an unusable state: [${keyName}]`),\n        AccessDeniedException: () => actionResultError(CryptoDecryptErrorTypeEnum.KeyUnavailable, `Access denied to crypto key: [${keyName}]`),\n        ThrottlingException: () => actionResultError(CryptoDecryptErrorTypeEnum.Throttling, 'Throttling: Rate exceeded'),\n      });\n    }\n  };\n};\n\nexport const getCryptoDecryptActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [CryptoActionType.Decrypt]: getProcessCryptoDecrypt(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/crypto/getCryptoEncryptActionProcessor.d.ts

@@ -0,0 +1,2 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export declare const getCryptoEncryptActionProcessor: ActionProcessorListResolver;

package/lib/commonjs/getActionProcessor/core/crypto/getCryptoEncryptActionProcessor.js

@@ -0,0 +1,45 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getCryptoEncryptActionProcessor = void 0;
+const quidproquo_actionprocessor_node_1 = require("quidproquo-actionprocessor-node");
+const quidproquo_config_aws_1 = require("quidproquo-config-aws");
+const quidproquo_core_1 = require("quidproquo-core");
+const utils_1 = require("./utils");
+const getProcessCryptoEncrypt = (qpqConfig) => {
+    return (_a) => __awaiter(void 0, [_a], void 0, function* ({ keyName, plaintext, context }) {
+        const keyAlias = (0, utils_1.resolveCryptoKeyAlias)(keyName, qpqConfig);
+        if (!keyAlias) {
+            return (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoEncryptErrorTypeEnum.KeyNotConfigured, `Crypto key not configured: [${keyName}] - declare it with defineCryptoKey`);
+        }
+        const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
+        try {
+            const ciphertext = yield (0, quidproquo_actionprocessor_node_1.envelopeEncrypt)(plaintext, context, (0, utils_1.createKmsDataKeyProvider)(keyAlias, region));
+            return (0, quidproquo_core_1.actionResult)(ciphertext);
+        }
+        catch (error) {
+            return (0, quidproquo_core_1.actionResultErrorFromCaughtError)(error, {
+                NotFoundException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoEncryptErrorTypeEnum.KeyUnavailable, `Crypto key not found: [${keyName}]`),
+                DisabledException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoEncryptErrorTypeEnum.KeyUnavailable, `Crypto key is disabled: [${keyName}]`),
+                KMSInvalidStateException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoEncryptErrorTypeEnum.KeyUnavailable, `Crypto key is in an unusable state: [${keyName}]`),
+                AccessDeniedException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoEncryptErrorTypeEnum.KeyUnavailable, `Access denied to crypto key: [${keyName}]`),
+                ThrottlingException: () => (0, quidproquo_core_1.actionResultError)(quidproquo_core_1.CryptoEncryptErrorTypeEnum.Throttling, 'Throttling: Rate exceeded'),
+            });
+        }
+    });
+};
+const getCryptoEncryptActionProcessor = (qpqConfig) => __awaiter(void 0, void 0, void 0, function* () {
+    return ({
+        [quidproquo_core_1.CryptoActionType.Encrypt]: getProcessCryptoEncrypt(qpqConfig),
+    });
+});
+exports.getCryptoEncryptActionProcessor = getCryptoEncryptActionProcessor;
+//# sourceMappingURL=getCryptoEncryptActionProcessor.js.map

package/lib/commonjs/getActionProcessor/core/crypto/getCryptoEncryptActionProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCryptoEncryptActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/crypto/getCryptoEncryptActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qFAAkE;AAClE,iEAA0D;AAC1D,qDAUyB;AAEzB,mCAA0E;AAE1E,MAAM,uBAAuB,GAAG,CAAC,SAAoB,EAAgC,EAAE;IACrF,OAAO,KAAwC,EAAE,4CAAnC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE;QAC3C,MAAM,QAAQ,GAAG,IAAA,6BAAqB,EAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAA,mCAAiB,EACtB,4CAA0B,CAAC,gBAAgB,EAC3C,+BAA+B,OAAO,qCAAqC,CAC5E,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAA,iDAAe,EAAC,SAAS,EAAE,OAAO,EAAE,IAAA,gCAAwB,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YACzG,OAAO,IAAA,8BAAY,EAAC,UAAU,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,IAAA,kDAAgC,EAAC,KAAK,EAAE;gBAC7C,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,cAAc,EAAE,0BAA0B,OAAO,GAAG,CAAC;gBAC3H,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,cAAc,EAAE,4BAA4B,OAAO,GAAG,CAAC;gBAC7H,wBAAwB,EAAE,GAAG,EAAE,CAC7B,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,cAAc,EAAE,wCAAwC,OAAO,GAAG,CAAC;gBAClH,qBAAqB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,cAAc,EAAE,iCAAiC,OAAO,GAAG,CAAC;gBACtI,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,mCAAiB,EAAC,4CAA0B,CAAC,UAAU,EAAE,2BAA2B,CAAC;aACjH,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,+BAA+B,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QACzI,CAAC,kCAAgB,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC,SAAS,CAAC;KAC/D,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,+BAA+B,mCAEzC","sourcesContent":["import { envelopeEncrypt } from 'quidproquo-actionprocessor-node';\nimport { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  CryptoActionType,\n  CryptoEncryptActionProcessor,\n  CryptoEncryptErrorTypeEnum,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { createKmsDataKeyProvider, resolveCryptoKeyAlias } from './utils';\n\nconst getProcessCryptoEncrypt = (qpqConfig: QPQConfig): CryptoEncryptActionProcessor => {\n  return async ({ keyName, plaintext, context }) => {\n    const keyAlias = resolveCryptoKeyAlias(keyName, qpqConfig);\n    if (!keyAlias) {\n      return actionResultError(\n        CryptoEncryptErrorTypeEnum.KeyNotConfigured,\n        `Crypto key not configured: [${keyName}] - declare it with defineCryptoKey`,\n      );\n    }\n\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n\n    try {\n      const ciphertext = await envelopeEncrypt(plaintext, context, createKmsDataKeyProvider(keyAlias, region));\n      return actionResult(ciphertext);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        NotFoundException: () => actionResultError(CryptoEncryptErrorTypeEnum.KeyUnavailable, `Crypto key not found: [${keyName}]`),\n        DisabledException: () => actionResultError(CryptoEncryptErrorTypeEnum.KeyUnavailable, `Crypto key is disabled: [${keyName}]`),\n        KMSInvalidStateException: () =>\n          actionResultError(CryptoEncryptErrorTypeEnum.KeyUnavailable, `Crypto key is in an unusable state: [${keyName}]`),\n        AccessDeniedException: () => actionResultError(CryptoEncryptErrorTypeEnum.KeyUnavailable, `Access denied to crypto key: [${keyName}]`),\n        ThrottlingException: () => actionResultError(CryptoEncryptErrorTypeEnum.Throttling, 'Throttling: Rate exceeded'),\n      });\n    }\n  };\n};\n\nexport const getCryptoEncryptActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [CryptoActionType.Encrypt]: getProcessCryptoEncrypt(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/crypto/index.d.ts

@@ -0,0 +1,2 @@
+import { ActionProcessorListResolver } from 'quidproquo-core';
+export declare const getCryptoActionProcessor: ActionProcessorListResolver;

package/lib/commonjs/{logic/cognito/verifyJwt.js → getActionProcessor/core/crypto/index.js}

@@ -9,12 +9,11 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
     });
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyJwt = void 0;
-const decodeValidJwt_1 = require("./decodeValidJwt");
-const verifyJwt = (accessToken_1, userPoolId_1, region_1, ...args_1) => __awaiter(void 0, [accessToken_1, userPoolId_1, region_1, ...args_1], void 0, function* (accessToken, userPoolId, region, ignoreExpiration = false) {
-    const info = yield (0, decodeValidJwt_1.decodeValidJwt)(userPoolId, region, ignoreExpiration, accessToken);
-    // if we hav info, its valid
-    return !!info;
+exports.getCryptoActionProcessor = void 0;
+const getCryptoDecryptActionProcessor_1 = require("./getCryptoDecryptActionProcessor");
+const getCryptoEncryptActionProcessor_1 = require("./getCryptoEncryptActionProcessor");
+const getCryptoActionProcessor = (qpqConfig, dynamicModuleLoader) => __awaiter(void 0, void 0, void 0, function* () {
+    return (Object.assign(Object.assign({}, (yield (0, getCryptoEncryptActionProcessor_1.getCryptoEncryptActionProcessor)(qpqConfig, dynamicModuleLoader))), (yield (0, getCryptoDecryptActionProcessor_1.getCryptoDecryptActionProcessor)(qpqConfig, dynamicModuleLoader))));
 });
-exports.verifyJwt = verifyJwt;
-//# sourceMappingURL=verifyJwt.js.map
+exports.getCryptoActionProcessor = getCryptoActionProcessor;
+//# sourceMappingURL=index.js.map

package/lib/commonjs/getActionProcessor/core/crypto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/crypto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,uFAAoF;AACpF,uFAAoF;AAE7E,MAAM,wBAAwB,GAAgC,CACnE,SAAoB,EACpB,mBAAwC,EACV,EAAE;IAAC,OAAA,iCAC9B,CAAC,MAAM,IAAA,iEAA+B,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,GACvE,CAAC,MAAM,IAAA,iEAA+B,EAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,EAC1E,CAAA;EAAA,CAAC;AANU,QAAA,wBAAwB,4BAMlC","sourcesContent":["import { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nimport { getCryptoDecryptActionProcessor } from './getCryptoDecryptActionProcessor';\nimport { getCryptoEncryptActionProcessor } from './getCryptoEncryptActionProcessor';\n\nexport const getCryptoActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  ...(await getCryptoEncryptActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getCryptoDecryptActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/crypto/utils/createKmsDataKeyProvider.d.ts

@@ -0,0 +1,2 @@
+import { DataKeyProvider } from 'quidproquo-actionprocessor-node';
+export declare const createKmsDataKeyProvider: (keyAlias: string, region: string) => DataKeyProvider;

package/lib/commonjs/getActionProcessor/core/crypto/utils/createKmsDataKeyProvider.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createKmsDataKeyProvider = void 0;
+const getCachedGeneratedDataKey_1 = require("../../../../logic/kms/getCachedGeneratedDataKey");
+const getCachedUnwrappedDataKey_1 = require("../../../../logic/kms/getCachedUnwrappedDataKey");
+const createKmsDataKeyProvider = (keyAlias, region) => ({
+    generateDataKey: (context) => (0, getCachedGeneratedDataKey_1.getCachedGeneratedDataKey)(keyAlias, context, region),
+    unwrapDataKey: (wrappedKey, context) => (0, getCachedUnwrappedDataKey_1.getCachedUnwrappedDataKey)(wrappedKey, context, region),
+});
+exports.createKmsDataKeyProvider = createKmsDataKeyProvider;
+//# sourceMappingURL=createKmsDataKeyProvider.js.map

package/lib/commonjs/getActionProcessor/core/crypto/utils/createKmsDataKeyProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createKmsDataKeyProvider.js","sourceRoot":"","sources":["../../../../../../src/getActionProcessor/core/crypto/utils/createKmsDataKeyProvider.ts"],"names":[],"mappings":";;;AAEA,+FAA4F;AAC5F,+FAA4F;AAErF,MAAM,wBAAwB,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAmB,EAAE,CAAC,CAAC;IAC9F,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAA,qDAAyB,EAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC;IAClF,aAAa,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,IAAA,qDAAyB,EAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC;CAC/F,CAAC,CAAC;AAHU,QAAA,wBAAwB,4BAGlC","sourcesContent":["import { DataKeyProvider } from 'quidproquo-actionprocessor-node';\n\nimport { getCachedGeneratedDataKey } from '../../../../logic/kms/getCachedGeneratedDataKey';\nimport { getCachedUnwrappedDataKey } from '../../../../logic/kms/getCachedUnwrappedDataKey';\n\nexport const createKmsDataKeyProvider = (keyAlias: string, region: string): DataKeyProvider => ({\n  generateDataKey: (context) => getCachedGeneratedDataKey(keyAlias, context, region),\n  unwrapDataKey: (wrappedKey, context) => getCachedUnwrappedDataKey(wrappedKey, context, region),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/crypto/utils/index.d.ts

@@ -0,0 +1,2 @@
+export * from './createKmsDataKeyProvider';
+export * from './resolveCryptoKeyAlias';

package/lib/commonjs/getActionProcessor/core/crypto/utils/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./createKmsDataKeyProvider"), exports);
+__exportStar(require("./resolveCryptoKeyAlias"), exports);
+//# sourceMappingURL=index.js.map

package/lib/commonjs/getActionProcessor/core/crypto/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/getActionProcessor/core/crypto/utils/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6DAA2C;AAC3C,0DAAwC","sourcesContent":["export * from './createKmsDataKeyProvider';\nexport * from './resolveCryptoKeyAlias';\n"]}

package/lib/commonjs/getActionProcessor/core/crypto/utils/resolveCryptoKeyAlias.d.ts

@@ -0,0 +1,2 @@
+import { Nullable, QPQConfig } from 'quidproquo-core';
+export declare const resolveCryptoKeyAlias: (cryptoKeyName: string, qpqConfig: QPQConfig) => Nullable<string>;

package/lib/commonjs/getActionProcessor/core/crypto/utils/resolveCryptoKeyAlias.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveCryptoKeyAlias = void 0;
+const quidproquo_core_1 = require("quidproquo-core");
+const awsNamingUtils_1 = require("../../../../awsNamingUtils");
+// Returns the deterministic KMS alias for a configured crypto key (the same
+// name the CDK construct derives), or null when no defineCryptoKey matches so
+// processors can fail with KeyNotConfigured instead of a generic error.
+const resolveCryptoKeyAlias = (cryptoKeyName, qpqConfig) => {
+    var _a, _b;
+    const cryptoKeyConfig = quidproquo_core_1.qpqCoreUtils.getAllCryptoKeyConfigs(qpqConfig).find((k) => k.keyName === cryptoKeyName);
+    if (!cryptoKeyConfig) {
+        return null;
+    }
+    const resolvedName = (0, awsNamingUtils_1.getConfigRuntimeResourceNameFromConfigWithServiceOverride)(((_a = cryptoKeyConfig.owner) === null || _a === void 0 ? void 0 : _a.resourceNameOverride) || cryptoKeyName, qpqConfig, (_b = cryptoKeyConfig.owner) === null || _b === void 0 ? void 0 : _b.module);
+    return `alias/${resolvedName}`;
+};
+exports.resolveCryptoKeyAlias = resolveCryptoKeyAlias;
+//# sourceMappingURL=resolveCryptoKeyAlias.js.map

package/lib/commonjs/getActionProcessor/core/crypto/utils/resolveCryptoKeyAlias.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveCryptoKeyAlias.js","sourceRoot":"","sources":["../../../../../../src/getActionProcessor/core/crypto/utils/resolveCryptoKeyAlias.ts"],"names":[],"mappings":";;;AAAA,qDAAoE;AAEpE,+DAAuG;AAEvG,4EAA4E;AAC5E,8EAA8E;AAC9E,wEAAwE;AACjE,MAAM,qBAAqB,GAAG,CAAC,aAAqB,EAAE,SAAoB,EAAoB,EAAE;;IACrG,MAAM,eAAe,GAAG,8BAAY,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC;IAEhH,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,0EAAyD,EAC5E,CAAA,MAAA,eAAe,CAAC,KAAK,0CAAE,oBAAoB,KAAI,aAAa,EAC5D,SAAS,EACT,MAAA,eAAe,CAAC,KAAK,0CAAE,MAAM,CAC9B,CAAC;IAEF,OAAO,SAAS,YAAY,EAAE,CAAC;AACjC,CAAC,CAAC;AAdW,QAAA,qBAAqB,yBAchC","sourcesContent":["import { Nullable, QPQConfig, qpqCoreUtils } from 'quidproquo-core';\n\nimport { getConfigRuntimeResourceNameFromConfigWithServiceOverride } from '../../../../awsNamingUtils';\n\n// Returns the deterministic KMS alias for a configured crypto key (the same\n// name the CDK construct derives), or null when no defineCryptoKey matches so\n// processors can fail with KeyNotConfigured instead of a generic error.\nexport const resolveCryptoKeyAlias = (cryptoKeyName: string, qpqConfig: QPQConfig): Nullable<string> => {\n  const cryptoKeyConfig = qpqCoreUtils.getAllCryptoKeyConfigs(qpqConfig).find((k) => k.keyName === cryptoKeyName);\n\n  if (!cryptoKeyConfig) {\n    return null;\n  }\n\n  const resolvedName = getConfigRuntimeResourceNameFromConfigWithServiceOverride(\n    cryptoKeyConfig.owner?.resourceNameOverride || cryptoKeyName,\n    qpqConfig,\n    cryptoKeyConfig.owner?.module,\n  );\n\n  return `alias/${resolvedName}`;\n};\n"]}

package/lib/commonjs/getActionProcessor/core/event/cognito/createAuthChallenge/getEventGetRecordsActionProcessor.js

@@ -11,14 +11,14 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getEventGetRecordsActionProcessor = void 0;
 const quidproquo_core_1 = require("quidproquo-core");
-const cognitoAttributeMap_1 = require("../../../../../logic/cognito/cognitoAttributeMap");
+const getQpqAttributesFromCognitoStringMap_1 = require("../../../../../logic/cognito/getQpqAttributesFromCognitoStringMap");
 const utils_1 = require("../utils");
 const getProcessGetRecords = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ eventParams: [event, context] }) {
         const internalEventRecord = {
             userName: event.userName,
             session: (0, utils_1.getChallengeSessionFromCognitoTriggerEventSession)(event.request.session),
-            userAttributes: (0, cognitoAttributeMap_1.getQpqAttributesFromCognitoStringMap)(event.request.userAttributes),
+            userAttributes: (0, getQpqAttributesFromCognitoStringMap_1.getQpqAttributesFromCognitoStringMap)(event.request.userAttributes),
         };
         return (0, quidproquo_core_1.actionResult)([internalEventRecord]);
     });

package/lib/commonjs/getActionProcessor/core/event/cognito/createAuthChallenge/getEventGetRecordsActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getEventGetRecordsActionProcessor.js","sourceRoot":"","sources":["../../../../../../../src/getActionProcessor/core/event/cognito/createAuthChallenge/getEventGetRecordsActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AAEzB,0FAAwG;AACxG,oCAA6E;AAG7E,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAmE,EAAE;IACrH,OAAO,KAA0C,EAAE,4CAArC,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;QAC7C,MAAM,mBAAmB,GAAwB;YAC/C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,IAAA,yDAAiD,EAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACjF,cAAc,EAAE,IAAA,0DAAoC,EAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;SACnF,CAAC;QAEF,OAAO,IAAA,8BAAY,EAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,iCAAiC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC3I,CAAC,iCAAe,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC;KAC9D,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,iCAAiC,qCAE3C","sourcesContent":["import {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  EventActionType,\n  EventGetRecordsActionProcessor,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { getQpqAttributesFromCognitoStringMap } from '../../../../../logic/cognito/cognitoAttributeMap';\nimport { getChallengeSessionFromCognitoTriggerEventSession } from '../utils';\nimport { EventInput, InternalEventRecord } from './types';\n\nconst getProcessGetRecords = (qpqConfig: QPQConfig): EventGetRecordsActionProcessor<EventInput, InternalEventRecord> => {\n  return async ({ eventParams: [event, context] }) => {\n    const internalEventRecord: InternalEventRecord = {\n      userName: event.userName,\n      session: getChallengeSessionFromCognitoTriggerEventSession(event.request.session),\n      userAttributes: getQpqAttributesFromCognitoStringMap(event.request.userAttributes),\n    };\n\n    return actionResult([internalEventRecord]);\n  };\n};\n\nexport const getEventGetRecordsActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [EventActionType.GetRecords]: getProcessGetRecords(qpqConfig),\n});\n"]}
+{"version":3,"file":"getEventGetRecordsActionProcessor.js","sourceRoot":"","sources":["../../../../../../../src/getActionProcessor/core/event/cognito/createAuthChallenge/getEventGetRecordsActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AAEzB,4HAAyH;AACzH,oCAA6E;AAG7E,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAmE,EAAE;IACrH,OAAO,KAA0C,EAAE,4CAArC,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;QAC7C,MAAM,mBAAmB,GAAwB;YAC/C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,IAAA,yDAAiD,EAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACjF,cAAc,EAAE,IAAA,2EAAoC,EAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;SACnF,CAAC;QAEF,OAAO,IAAA,8BAAY,EAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,iCAAiC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC3I,CAAC,iCAAe,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC;KAC9D,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,iCAAiC,qCAE3C","sourcesContent":["import {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  EventActionType,\n  EventGetRecordsActionProcessor,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { getQpqAttributesFromCognitoStringMap } from '../../../../../logic/cognito/getQpqAttributesFromCognitoStringMap';\nimport { getChallengeSessionFromCognitoTriggerEventSession } from '../utils';\nimport { EventInput, InternalEventRecord } from './types';\n\nconst getProcessGetRecords = (qpqConfig: QPQConfig): EventGetRecordsActionProcessor<EventInput, InternalEventRecord> => {\n  return async ({ eventParams: [event, context] }) => {\n    const internalEventRecord: InternalEventRecord = {\n      userName: event.userName,\n      session: getChallengeSessionFromCognitoTriggerEventSession(event.request.session),\n      userAttributes: getQpqAttributesFromCognitoStringMap(event.request.userAttributes),\n    };\n\n    return actionResult([internalEventRecord]);\n  };\n};\n\nexport const getEventGetRecordsActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [EventActionType.GetRecords]: getProcessGetRecords(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/event/cognito/defineAuthChallenge/getEventGetRecordsActionProcessor.js

@@ -11,14 +11,14 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getEventGetRecordsActionProcessor = void 0;
 const quidproquo_core_1 = require("quidproquo-core");
-const cognitoAttributeMap_1 = require("../../../../../logic/cognito/cognitoAttributeMap");
+const getQpqAttributesFromCognitoStringMap_1 = require("../../../../../logic/cognito/getQpqAttributesFromCognitoStringMap");
 const utils_1 = require("../utils");
 const getProcessGetRecords = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ eventParams: [event, context] }) {
         const internalEventRecord = {
             userName: event.userName,
             session: (0, utils_1.getChallengeSessionFromCognitoTriggerEventSession)(event.request.session),
-            userAttributes: (0, cognitoAttributeMap_1.getQpqAttributesFromCognitoStringMap)(event.request.userAttributes),
+            userAttributes: (0, getQpqAttributesFromCognitoStringMap_1.getQpqAttributesFromCognitoStringMap)(event.request.userAttributes),
         };
         return (0, quidproquo_core_1.actionResult)([internalEventRecord]);
     });

package/lib/commonjs/getActionProcessor/core/event/cognito/defineAuthChallenge/getEventGetRecordsActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getEventGetRecordsActionProcessor.js","sourceRoot":"","sources":["../../../../../../../src/getActionProcessor/core/event/cognito/defineAuthChallenge/getEventGetRecordsActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AAEzB,0FAAwG;AACxG,oCAA6E;AAG7E,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAmE,EAAE;IACrH,OAAO,KAA0C,EAAE,4CAArC,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;QAC7C,MAAM,mBAAmB,GAAwB;YAC/C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,IAAA,yDAAiD,EAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACjF,cAAc,EAAE,IAAA,0DAAoC,EAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;SACnF,CAAC;QAEF,OAAO,IAAA,8BAAY,EAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,iCAAiC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC3I,CAAC,iCAAe,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC;KAC9D,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,iCAAiC,qCAE3C","sourcesContent":["import {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  EventActionType,\n  EventGetRecordsActionProcessor,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { getQpqAttributesFromCognitoStringMap } from '../../../../../logic/cognito/cognitoAttributeMap';\nimport { getChallengeSessionFromCognitoTriggerEventSession } from '../utils';\nimport { EventInput, InternalEventRecord } from './types';\n\nconst getProcessGetRecords = (qpqConfig: QPQConfig): EventGetRecordsActionProcessor<EventInput, InternalEventRecord> => {\n  return async ({ eventParams: [event, context] }) => {\n    const internalEventRecord: InternalEventRecord = {\n      userName: event.userName,\n      session: getChallengeSessionFromCognitoTriggerEventSession(event.request.session),\n      userAttributes: getQpqAttributesFromCognitoStringMap(event.request.userAttributes),\n    };\n\n    return actionResult([internalEventRecord]);\n  };\n};\n\nexport const getEventGetRecordsActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [EventActionType.GetRecords]: getProcessGetRecords(qpqConfig),\n});\n"]}
+{"version":3,"file":"getEventGetRecordsActionProcessor.js","sourceRoot":"","sources":["../../../../../../../src/getActionProcessor/core/event/cognito/defineAuthChallenge/getEventGetRecordsActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AAEzB,4HAAyH;AACzH,oCAA6E;AAG7E,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAmE,EAAE;IACrH,OAAO,KAA0C,EAAE,4CAArC,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;QAC7C,MAAM,mBAAmB,GAAwB;YAC/C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,IAAA,yDAAiD,EAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YACjF,cAAc,EAAE,IAAA,2EAAoC,EAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;SACnF,CAAC;QAEF,OAAO,IAAA,8BAAY,EAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,iCAAiC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC3I,CAAC,iCAAe,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC;KAC9D,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,iCAAiC,qCAE3C","sourcesContent":["import {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  EventActionType,\n  EventGetRecordsActionProcessor,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { getQpqAttributesFromCognitoStringMap } from '../../../../../logic/cognito/getQpqAttributesFromCognitoStringMap';\nimport { getChallengeSessionFromCognitoTriggerEventSession } from '../utils';\nimport { EventInput, InternalEventRecord } from './types';\n\nconst getProcessGetRecords = (qpqConfig: QPQConfig): EventGetRecordsActionProcessor<EventInput, InternalEventRecord> => {\n  return async ({ eventParams: [event, context] }) => {\n    const internalEventRecord: InternalEventRecord = {\n      userName: event.userName,\n      session: getChallengeSessionFromCognitoTriggerEventSession(event.request.session),\n      userAttributes: getQpqAttributesFromCognitoStringMap(event.request.userAttributes),\n    };\n\n    return actionResult([internalEventRecord]);\n  };\n};\n\nexport const getEventGetRecordsActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [EventActionType.GetRecords]: getProcessGetRecords(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/event/cognito/verifyAuthChallenge/getEventGetRecordsActionProcessor.js

@@ -11,12 +11,12 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getEventGetRecordsActionProcessor = void 0;
 const quidproquo_core_1 = require("quidproquo-core");
-const cognitoAttributeMap_1 = require("../../../../../logic/cognito/cognitoAttributeMap");
+const getQpqAttributesFromCognitoStringMap_1 = require("../../../../../logic/cognito/getQpqAttributesFromCognitoStringMap");
 const getProcessGetRecords = (qpqConfig) => {
     return (_a) => __awaiter(void 0, [_a], void 0, function* ({ eventParams: [event, context] }) {
         const internalEventRecord = {
             challengeAnswer: event.request.challengeAnswer ? JSON.parse(event.request.challengeAnswer) : {},
-            userAttributes: (0, cognitoAttributeMap_1.getQpqAttributesFromCognitoStringMap)(event.request.userAttributes),
+            userAttributes: (0, getQpqAttributesFromCognitoStringMap_1.getQpqAttributesFromCognitoStringMap)(event.request.userAttributes),
             userNotFound: event.request.userNotFound,
             privateChallengeParameters: event.request.privateChallengeParameters,
         };

package/lib/commonjs/getActionProcessor/core/event/cognito/verifyAuthChallenge/getEventGetRecordsActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getEventGetRecordsActionProcessor.js","sourceRoot":"","sources":["../../../../../../../src/getActionProcessor/core/event/cognito/verifyAuthChallenge/getEventGetRecordsActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AAEzB,0FAAwG;AAGxG,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAmE,EAAE;IACrH,OAAO,KAA0C,EAAE,4CAArC,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;QAC7C,MAAM,mBAAmB,GAAwB;YAC/C,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/F,cAAc,EAAE,IAAA,0DAAoC,EAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;YAClF,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;YACxC,0BAA0B,EAAE,KAAK,CAAC,OAAO,CAAC,0BAA0B;SACrE,CAAC;QAEF,OAAO,IAAA,8BAAY,EAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,iCAAiC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC3I,CAAC,iCAAe,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC;KAC9D,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,iCAAiC,qCAE3C","sourcesContent":["import {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  EventActionType,\n  EventGetRecordsActionProcessor,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { getQpqAttributesFromCognitoStringMap } from '../../../../../logic/cognito/cognitoAttributeMap';\nimport { EventInput, InternalEventRecord } from './types';\n\nconst getProcessGetRecords = (qpqConfig: QPQConfig): EventGetRecordsActionProcessor<EventInput, InternalEventRecord> => {\n  return async ({ eventParams: [event, context] }) => {\n    const internalEventRecord: InternalEventRecord = {\n      challengeAnswer: event.request.challengeAnswer ? JSON.parse(event.request.challengeAnswer) : {},\n      userAttributes: getQpqAttributesFromCognitoStringMap(event.request.userAttributes),\n      userNotFound: event.request.userNotFound,\n      privateChallengeParameters: event.request.privateChallengeParameters,\n    };\n\n    return actionResult([internalEventRecord]);\n  };\n};\n\nexport const getEventGetRecordsActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [EventActionType.GetRecords]: getProcessGetRecords(qpqConfig),\n});\n"]}
+{"version":3,"file":"getEventGetRecordsActionProcessor.js","sourceRoot":"","sources":["../../../../../../../src/getActionProcessor/core/event/cognito/verifyAuthChallenge/getEventGetRecordsActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAOyB;AAEzB,4HAAyH;AAGzH,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAmE,EAAE;IACrH,OAAO,KAA0C,EAAE,4CAArC,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;QAC7C,MAAM,mBAAmB,GAAwB;YAC/C,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/F,cAAc,EAAE,IAAA,2EAAoC,EAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;YAClF,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;YACxC,0BAA0B,EAAE,KAAK,CAAC,OAAO,CAAC,0BAA0B;SACrE,CAAC;QAEF,OAAO,IAAA,8BAAY,EAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,iCAAiC,GAAgC,CAAO,SAAoB,EAAgC,EAAE;IAAC,OAAA,CAAC;QAC3I,CAAC,iCAAe,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,SAAS,CAAC;KAC9D,CAAC,CAAA;EAAA,CAAC;AAFU,QAAA,iCAAiC,qCAE3C","sourcesContent":["import {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  actionResult,\n  EventActionType,\n  EventGetRecordsActionProcessor,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { getQpqAttributesFromCognitoStringMap } from '../../../../../logic/cognito/getQpqAttributesFromCognitoStringMap';\nimport { EventInput, InternalEventRecord } from './types';\n\nconst getProcessGetRecords = (qpqConfig: QPQConfig): EventGetRecordsActionProcessor<EventInput, InternalEventRecord> => {\n  return async ({ eventParams: [event, context] }) => {\n    const internalEventRecord: InternalEventRecord = {\n      challengeAnswer: event.request.challengeAnswer ? JSON.parse(event.request.challengeAnswer) : {},\n      userAttributes: getQpqAttributesFromCognitoStringMap(event.request.userAttributes),\n      userNotFound: event.request.userNotFound,\n      privateChallengeParameters: event.request.privateChallengeParameters,\n    };\n\n    return actionResult([internalEventRecord]);\n  };\n};\n\nexport const getEventGetRecordsActionProcessor: ActionProcessorListResolver = async (qpqConfig: QPQConfig): Promise<ActionProcessorList> => ({\n  [EventActionType.GetRecords]: getProcessGetRecords(qpqConfig),\n});\n"]}

package/lib/commonjs/getActionProcessor/core/event/dynamo/index.d.ts

@@ -0,0 +1 @@
+export * from './streamEvent';