quidproquo-actionprocessor-awslambda 0.1.11 → 0.1.13

package/lib/commonjs/lambdaHandlers/helpers/isSnsWarmerRecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isSnsWarmerRecord.js","sourceRoot":"","sources":["../../../../src/lambdaHandlers/helpers/isSnsWarmerRecord.ts"],"names":[],"mappings":";;;AAEA;;;GAGG;AACI,MAAM,iBAAiB,GAAG,CAAC,MAAsB,EAAW,EAAE;IACnE,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2EAA2E;IAC3E,gEAAgE;IAChE,IAAI,CAAC;QACH,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAK,OAA8B,CAAC,IAAI,KAAK,sBAAsB,CAAC;IAC5H,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAbW,QAAA,iBAAiB,qBAa5B","sourcesContent":["import { SNSEventRecord } from 'aws-lambda';\n\n/**\n * True when an SNS record is a lambda warmer ping published by the bootstrap\n * warmer schedule (BSQpqLambdaWarmerEventConstruct sends `{ type: 'QpqLambdaWarmerEvent' }`).\n */\nexport const isSnsWarmerRecord = (record: SNSEventRecord): boolean => {\n  if (record.EventSource !== 'aws:sns') {\n    return false;\n  }\n\n  // Message is whatever the topic's publisher sent; a non-JSON or non-object\n  // message is simply not a warmer, it must not crash the invoke.\n  try {\n    const message: unknown = JSON.parse(record.Sns.Message);\n    return typeof message === 'object' && message !== null && (message as { type?: unknown }).type === 'QpqLambdaWarmerEvent';\n  } catch {\n    return false;\n  }\n};\n"]}

package/lib/commonjs/lambdaHandlers/index.d.ts

@@ -1,3 +1,4 @@
+export * from './getDynamoStreamEvent_kvsStreamEvent';
 export * from './getAnyExecuteServiceFunctionEvent_serviceFunction';
 export * from './getApiGatewayEventHandler';
 export * from './getApiGatewayEventHandler_redirect';

package/lib/commonjs/lambdaHandlers/index.js

@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./getDynamoStreamEvent_kvsStreamEvent"), exports);
 __exportStar(require("./getAnyExecuteServiceFunctionEvent_serviceFunction"), exports);
 __exportStar(require("./getApiGatewayEventHandler"), exports);
 __exportStar(require("./getApiGatewayEventHandler_redirect"), exports);

package/lib/commonjs/lambdaHandlers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lambdaHandlers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sFAAoE;AACpE,8DAA4C;AAC5C,uEAAqD;AACrD,0FAAwE;AACxE,4EAA0D;AAC1D,4EAA0D;AAC1D,qFAAmE;AACnE,+EAA6D;AAC7D,qFAAmE;AACnE,qFAAmE;AACnE,0EAAwD;AACxD,oEAAkD;AAClD,yDAAuC;AACvC,2DAAyC;AACzC,4CAA0B;AAC1B,0CAAwB","sourcesContent":["export * from './getAnyExecuteServiceFunctionEvent_serviceFunction';\nexport * from './getApiGatewayEventHandler';\nexport * from './getApiGatewayEventHandler_redirect';\nexport * from './getApiGatwayEventWebsocketWithIdentity_websocketEvent';\nexport * from './getCloudFrontRequestEvent_originRequest';\nexport * from './getCloudFrontRequestEvent_viewerRequest';\nexport * from './getCustomMessageTriggerEvent_createAuthChallenge';\nexport * from './getCustomMessageTriggerEvent_customMessage';\nexport * from './getCustomMessageTriggerEvent_defineAuthChallenge';\nexport * from './getCustomMessageTriggerEvent_verifyAuthChallenge';\nexport * from './getEventBridgeEvent_recurringSchedule';\nexport * from './getEventBridgeEvent_stackDeploy';\nexport * from './getS3Event_fileEvent';\nexport * from './getSqsEvent_queueEvent';\nexport * from './helpers';\nexport * from './types';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lambdaHandlers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wEAAsD;AACtD,sFAAoE;AACpE,8DAA4C;AAC5C,uEAAqD;AACrD,0FAAwE;AACxE,4EAA0D;AAC1D,4EAA0D;AAC1D,qFAAmE;AACnE,+EAA6D;AAC7D,qFAAmE;AACnE,qFAAmE;AACnE,0EAAwD;AACxD,oEAAkD;AAClD,yDAAuC;AACvC,2DAAyC;AACzC,4CAA0B;AAC1B,0CAAwB","sourcesContent":["export * from './getDynamoStreamEvent_kvsStreamEvent';\nexport * from './getAnyExecuteServiceFunctionEvent_serviceFunction';\nexport * from './getApiGatewayEventHandler';\nexport * from './getApiGatewayEventHandler_redirect';\nexport * from './getApiGatwayEventWebsocketWithIdentity_websocketEvent';\nexport * from './getCloudFrontRequestEvent_originRequest';\nexport * from './getCloudFrontRequestEvent_viewerRequest';\nexport * from './getCustomMessageTriggerEvent_createAuthChallenge';\nexport * from './getCustomMessageTriggerEvent_customMessage';\nexport * from './getCustomMessageTriggerEvent_defineAuthChallenge';\nexport * from './getCustomMessageTriggerEvent_verifyAuthChallenge';\nexport * from './getEventBridgeEvent_recurringSchedule';\nexport * from './getEventBridgeEvent_stackDeploy';\nexport * from './getS3Event_fileEvent';\nexport * from './getSqsEvent_queueEvent';\nexport * from './helpers';\nexport * from './types';\n"]}

package/lib/commonjs/lambdaHandlers/types/QpqFunctionExecutionEvent.d.ts

@@ -0,0 +1,7 @@
+import { SNSEvent } from 'aws-lambda';
+/**
+ * What a qpq lambda can actually receive: its own trigger's event type, or an
+ * SNS event, because every lambda is also subscribed to the bootstrap warmer
+ * topic (see isSnsWarmerRecord / getQpqLambdaRuntimeForEvent).
+ */
+export type QpqFunctionExecutionEvent<T> = SNSEvent | T;

package/lib/commonjs/lambdaHandlers/types/QpqFunctionExecutionEvent.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=QpqFunctionExecutionEvent.js.map

package/lib/commonjs/lambdaHandlers/types/QpqFunctionExecutionEvent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"QpqFunctionExecutionEvent.js","sourceRoot":"","sources":["../../../../src/lambdaHandlers/types/QpqFunctionExecutionEvent.ts"],"names":[],"mappings":"","sourcesContent":["import { SNSEvent } from 'aws-lambda';\n\n/**\n * What a qpq lambda can actually receive: its own trigger's event type, or an\n * SNS event, because every lambda is also subscribed to the bootstrap warmer\n * topic (see isSnsWarmerRecord / getQpqLambdaRuntimeForEvent).\n */\nexport type QpqFunctionExecutionEvent<T> = SNSEvent | T;\n"]}

package/lib/commonjs/lambdaHandlers/types/index.d.ts

@@ -1 +1 @@
-export * from './QpqWarmLambdaEvent';
+export * from './QpqFunctionExecutionEvent';

package/lib/commonjs/lambdaHandlers/types/index.js

@@ -14,5 +14,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./QpqWarmLambdaEvent"), exports);
+__exportStar(require("./QpqFunctionExecutionEvent"), exports);
 //# sourceMappingURL=index.js.map

package/lib/commonjs/lambdaHandlers/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lambdaHandlers/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC","sourcesContent":["export * from './QpqWarmLambdaEvent';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lambdaHandlers/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8DAA4C","sourcesContent":["export * from './QpqFunctionExecutionEvent';\n"]}

package/lib/commonjs/lambdas/anyExecuteServiceFunctionEvent_serviceFunction.d.ts

@@ -1,3 +1,3 @@
-export declare const anyExecuteServiceFunctionEvent_serviceFunction: (event: import("quidproquo-webserver").ExecuteServiceFunctionEvent<any[]> & {
+export declare const anyExecuteServiceFunctionEvent_serviceFunction: (event: import("quidproquo-webserver").ExecuteServiceFunctionEvent<unknown[]> & {
     storySession: import("quidproquo-core").StorySession;
 }, context: import("aws-lambda").Context) => Promise<any>;

package/lib/commonjs/lambdas/cloudFrontRequestEvent_viewerRequest.js

@@ -2,6 +2,5 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.cloudFrontRequestEvent_viewerRequest = void 0;
 const lambdaHandlers_1 = require("../lambdaHandlers");
-// Default executor
 exports.cloudFrontRequestEvent_viewerRequest = (0, lambdaHandlers_1.getCloudFrontRequestEvent_viewerRequest)();
 //# sourceMappingURL=cloudFrontRequestEvent_viewerRequest.js.map

package/lib/commonjs/lambdas/cloudFrontRequestEvent_viewerRequest.js.map

@@ -1 +1 @@
-{"version":3,"file":"cloudFrontRequestEvent_viewerRequest.js","sourceRoot":"","sources":["../../../src/lambdas/cloudFrontRequestEvent_viewerRequest.ts"],"names":[],"mappings":";;;AAAA,sDAA4E;AAC5E,mBAAmB;AACN,QAAA,oCAAoC,GAAG,IAAA,wDAAuC,GAAE,CAAC","sourcesContent":["import { getCloudFrontRequestEvent_viewerRequest } from '../lambdaHandlers';\n// Default executor\nexport const cloudFrontRequestEvent_viewerRequest = getCloudFrontRequestEvent_viewerRequest();\n"]}
+{"version":3,"file":"cloudFrontRequestEvent_viewerRequest.js","sourceRoot":"","sources":["../../../src/lambdas/cloudFrontRequestEvent_viewerRequest.ts"],"names":[],"mappings":";;;AAAA,sDAA4E;AAE/D,QAAA,oCAAoC,GAAG,IAAA,wDAAuC,GAAE,CAAC","sourcesContent":["import { getCloudFrontRequestEvent_viewerRequest } from '../lambdaHandlers';\n\nexport const cloudFrontRequestEvent_viewerRequest = getCloudFrontRequestEvent_viewerRequest();\n"]}

package/lib/commonjs/lambdas/dynamicModuleLoader/dynamicModuleLoader.js.map

@@ -1 +1 @@
-{"version":3,"file":"dynamicModuleLoader.js","sourceRoot":"","sources":["../../../../src/lambdas/dynamicModuleLoader/dynamicModuleLoader.ts"],"names":[],"mappings":";;;;;;;;;;;;AAsBA,0EAA0E;AAC1E,yEAA8E;AAE9E,2EAAsE;AAE/D,MAAM,mBAAmB,GAAG,CAAgB,kBAAsC,EAAc,EAAE;IACvG,2FAA2F;IAC3F,MAAM,cAAc,GAAG,MAAM,IAAA,yCAAkB,EAAI,qCAAS,EAAE,kBAAkB,CAAC,CAAC;IAClF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,gFAAgF;IAChF,OAAO,IAAA,kDAAsB,EAAC,kBAAkB,CAAC,CAAC;AACpD,CAAC,CAAA,CAAC;AATW,QAAA,mBAAmB,uBAS9B","sourcesContent":["// ─────────────────────────────────────────────────────────────────────────────\n// The dynamic module loader — the single seam every lambda entry uses to turn a\n// QpqFunctionRuntime (e.g. \"/src/routes/getOrders::getOrders\") into the actual\n// story function to run. Each lambda entry file (apiGatewayEventHandler, etc.)\n// imports THIS and hands it to the qpq runtime.\n//\n// Two tiers, tried in order:\n//   1. FEDERATED  — loadFederatedStory reads the service's code bucket and returns\n//                   the published version of the story (see ../../logic/\n//                   federatedModuleStore/loadFederatedStory.ts for the whole flow).\n//   2. BUNDLED    — qpqDynamicModuleLoader is a build-time-generated function\n//                   (the 'quidproquo-dynamic-loader' virtual module, produced by the\n//                   deploy-webpack/deploy-rspack QpqPlugin) — an if-chain that\n//                   require()s the story code statically bundled into the lambda zip.\n//\n// loadFederatedStory returns undefined on any miss (no store configured, nothing\n// published, runtime not in the manifest), which is the signal to fall back to the\n// bundled tier. If the service opted into `bundleFallback: false` (a \"thin shell\"),\n// the bundled tier itself throws instead of resolving — so an unpublished thin shell\n// fails loudly rather than silently serving stale code.\n// ─────────────────────────────────────────────────────────────────────────────\nimport { QpqFunctionRuntime } from 'quidproquo-core';\n// @ts-expect-error - injected at build time by QpqPlugin (virtual module)\nimport { qpqConfig, qpqDynamicModuleLoader } from 'quidproquo-dynamic-loader';\n\nimport { loadFederatedStory } from '../../logic/federatedModuleStore';\n\nexport const dynamicModuleLoader = async <T = any>(qpqFunctionRuntime: QpqFunctionRuntime): Promise<T> => {\n  // Tier 1: federated. undefined means \"nothing published for this runtime\" -> fall through.\n  const federatedStory = await loadFederatedStory<T>(qpqConfig, qpqFunctionRuntime);\n  if (federatedStory !== undefined) {\n    return federatedStory;\n  }\n\n  // Tier 2: the statically bundled story (or a fail-fast throw for a thin shell).\n  return qpqDynamicModuleLoader(qpqFunctionRuntime);\n};\n"]}
+{"version":3,"file":"dynamicModuleLoader.js","sourceRoot":"","sources":["../../../../src/lambdas/dynamicModuleLoader/dynamicModuleLoader.ts"],"names":[],"mappings":";;;;;;;;;;;;AAsBA,0EAA0E;AAC1E,yEAA8E;AAE9E,2EAAsE;AAE/D,MAAM,mBAAmB,GAAG,CAAgB,kBAAsC,EAAc,EAAE;IACvG,2FAA2F;IAC3F,MAAM,cAAc,GAAG,MAAM,IAAA,yCAAkB,EAAI,qCAAS,EAAE,kBAAkB,CAAC,CAAC;IAClF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,gFAAgF;IAChF,OAAO,IAAA,kDAAsB,EAAC,kBAAkB,CAAC,CAAC;AACpD,CAAC,CAAA,CAAC;AATW,QAAA,mBAAmB,uBAS9B","sourcesContent":["// ─────────────────────────────────────────────────────────────────────────────\n// The dynamic module loader: the single seam every lambda entry uses to turn a\n// QpqFunctionRuntime (e.g. \"/src/routes/getOrders::getOrders\") into the actual\n// story function to run. Each lambda entry file (apiGatewayEventHandler, etc.)\n// imports THIS and hands it to the qpq runtime.\n//\n// Two tiers, tried in order:\n//   1. FEDERATED  : loadFederatedStory reads the service's code bucket and returns\n//                   the published version of the story (see ../../logic/\n//                   federatedModuleStore/loadFederatedStory.ts for the whole flow).\n//   2. BUNDLED    : qpqDynamicModuleLoader is a build-time-generated function\n//                   (the 'quidproquo-dynamic-loader' virtual module, produced by the\n//                   deploy-webpack/deploy-rspack QpqPlugin), an if-chain that\n//                   require()s the story code statically bundled into the lambda zip.\n//\n// loadFederatedStory returns undefined on any miss (no store configured, nothing\n// published, runtime not in the manifest), which is the signal to fall back to the\n// bundled tier. If the service opted into `bundleFallback: false` (a \"thin shell\"),\n// the bundled tier itself throws instead of resolving, so an unpublished thin shell\n// fails loudly rather than silently serving stale code.\n// ─────────────────────────────────────────────────────────────────────────────\nimport { QpqFunctionRuntime } from 'quidproquo-core';\n// @ts-expect-error - injected at build time by QpqPlugin (virtual module)\nimport { qpqConfig, qpqDynamicModuleLoader } from 'quidproquo-dynamic-loader';\n\nimport { loadFederatedStory } from '../../logic/federatedModuleStore';\n\nexport const dynamicModuleLoader = async <T = any>(qpqFunctionRuntime: QpqFunctionRuntime): Promise<T> => {\n  // Tier 1: federated. undefined means \"nothing published for this runtime\" -> fall through.\n  const federatedStory = await loadFederatedStory<T>(qpqConfig, qpqFunctionRuntime);\n  if (federatedStory !== undefined) {\n    return federatedStory;\n  }\n\n  // Tier 2: the statically bundled story (or a fail-fast throw for a thin shell).\n  return qpqDynamicModuleLoader(qpqFunctionRuntime);\n};\n"]}

package/lib/commonjs/lambdas/dynamicModuleLoader/index.d.ts

@@ -1,2 +1 @@
 export * from './dynamicModuleLoader';
-export * from './dynamicModuleLoaderWarmer';

package/lib/commonjs/lambdas/dynamicModuleLoader/index.js

@@ -15,5 +15,4 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./dynamicModuleLoader"), exports);
-__exportStar(require("./dynamicModuleLoaderWarmer"), exports);
 //# sourceMappingURL=index.js.map

package/lib/commonjs/lambdas/dynamicModuleLoader/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lambdas/dynamicModuleLoader/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,8DAA4C","sourcesContent":["export * from './dynamicModuleLoader';\nexport * from './dynamicModuleLoaderWarmer';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lambdas/dynamicModuleLoader/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC","sourcesContent":["export * from './dynamicModuleLoader';\n"]}

package/lib/commonjs/lambdas/dynamoStreamEvent_kvsStreamEvent.d.ts

@@ -0,0 +1 @@
+export declare const dynamoStreamEvent_kvsStreamEvent: (event: import("aws-lambda").DynamoDBStreamEvent, context: import("aws-lambda").Context) => Promise<any>;

package/lib/commonjs/lambdas/dynamoStreamEvent_kvsStreamEvent.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dynamoStreamEvent_kvsStreamEvent = void 0;
+const lambdaHandlers_1 = require("../lambdaHandlers");
+const dynamicModuleLoader_1 = require("./dynamicModuleLoader");
+const lambda_utils_1 = require("./lambda-utils");
+exports.dynamoStreamEvent_kvsStreamEvent = (0, lambdaHandlers_1.getDynamoStreamEvent_kvsStreamEvent)(dynamicModuleLoader_1.dynamicModuleLoader, (0, lambda_utils_1.getQpqConfig)());
+//# sourceMappingURL=dynamoStreamEvent_kvsStreamEvent.js.map

package/lib/commonjs/lambdas/dynamoStreamEvent_kvsStreamEvent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamoStreamEvent_kvsStreamEvent.js","sourceRoot":"","sources":["../../../src/lambdas/dynamoStreamEvent_kvsStreamEvent.ts"],"names":[],"mappings":";;;AAAA,sDAAwE;AACxE,+DAA4D;AAC5D,iDAA8C;AAEjC,QAAA,gCAAgC,GAAG,IAAA,oDAAmC,EAAC,yCAAmB,EAAE,IAAA,2BAAY,GAAE,CAAC,CAAC","sourcesContent":["import { getDynamoStreamEvent_kvsStreamEvent } from '../lambdaHandlers';\nimport { dynamicModuleLoader } from './dynamicModuleLoader';\nimport { getQpqConfig } from './lambda-utils';\n\nexport const dynamoStreamEvent_kvsStreamEvent = getDynamoStreamEvent_kvsStreamEvent(dynamicModuleLoader, getQpqConfig());\n"]}

package/lib/commonjs/lambdas/index.d.ts

@@ -0,0 +1 @@
+export * from './dynamoStreamEvent_kvsStreamEvent';

package/lib/commonjs/lambdas/index.js

@@ -1,2 +1,22 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./dynamoStreamEvent_kvsStreamEvent"), exports);
+// Deliberately empty. The files in this folder are bundler ENTRY POINTS, not
+// library code: each one imports the 'quidproquo-dynamic-loader' virtual module
+// that only exists inside a deploy bundle (see getLambdaEntries.ts). Re-exporting
+// them here would drag that unresolvable import into the package's own surface.
 //# sourceMappingURL=index.js.map

package/lib/commonjs/lambdas/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lambdas/index.ts"],"names":[],"mappings":"","sourcesContent":[""]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lambdas/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qEAAmD;AACnD,6EAA6E;AAC7E,gFAAgF;AAChF,kFAAkF;AAClF,gFAAgF","sourcesContent":["export * from './dynamoStreamEvent_kvsStreamEvent';\n// Deliberately empty. The files in this folder are bundler ENTRY POINTS, not\n// library code: each one imports the 'quidproquo-dynamic-loader' virtual module\n// that only exists inside a deploy bundle (see getLambdaEntries.ts). Re-exporting\n// them here would drag that unresolvable import into the package's own surface.\n"]}

package/lib/commonjs/logic/apiGateway/sendMessageToWebSocketConnection.d.ts

@@ -0,0 +1,2 @@
+/** JSON-serialises the payload and posts it to one websocket connection. */
+export declare const sendMessageToWebSocketConnection: (apiId: string, connectionId: string, region: string, payload: unknown) => Promise<void>;

package/lib/commonjs/logic/apiGateway/{websocketSendMessage.js → sendMessageToWebSocketConnection.js}

@@ -12,19 +12,19 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.sendMessageToWebSocketConnection = void 0;
 const client_apigatewaymanagementapi_1 = require("@aws-sdk/client-apigatewaymanagementapi");
 const createAwsClient_1 = require("../createAwsClient");
+/** JSON-serialises the payload and posts it to one websocket connection. */
 const sendMessageToWebSocketConnection = (apiId, connectionId, region, payload) => __awaiter(void 0, void 0, void 0, function* () {
-    // Create a new ApiGatewayManagementApiClient
     const apiGatewayManagementApiClient = (0, createAwsClient_1.createAwsClient)(client_apigatewaymanagementapi_1.ApiGatewayManagementApiClient, {
         apiVersion: '2018-11-29',
+        // QPQ deploys every websocket api with a single stage named 'prod' (see the CDK
+        // websocket construct), so the management endpoint stage is fixed.
         endpoint: `https://${apiId}.execute-api.${region}.amazonaws.com/prod`,
         region,
     });
-    // Create a new PostToConnectionCommand with the connection ID and payload
-    const command = new client_apigatewaymanagementapi_1.PostToConnectionCommand({
+    yield apiGatewayManagementApiClient.send(new client_apigatewaymanagementapi_1.PostToConnectionCommand({
         ConnectionId: connectionId,
-        Data: JSON.stringify(payload), // Convert payload to string if necessary
-    });
-    yield apiGatewayManagementApiClient.send(command);
+        Data: JSON.stringify(payload),
+    }));
 });
 exports.sendMessageToWebSocketConnection = sendMessageToWebSocketConnection;
-//# sourceMappingURL=websocketSendMessage.js.map
+//# sourceMappingURL=sendMessageToWebSocketConnection.js.map

package/lib/commonjs/logic/apiGateway/sendMessageToWebSocketConnection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sendMessageToWebSocketConnection.js","sourceRoot":"","sources":["../../../../src/logic/apiGateway/sendMessageToWebSocketConnection.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,4FAAiH;AAEjH,wDAAqD;AAErD,4EAA4E;AACrE,MAAM,gCAAgC,GAAG,CAAO,KAAa,EAAE,YAAoB,EAAE,MAAc,EAAE,OAAgB,EAAiB,EAAE;IAC7I,MAAM,6BAA6B,GAAG,IAAA,iCAAe,EAAC,8DAA6B,EAAE;QACnF,UAAU,EAAE,YAAY;QACxB,gFAAgF;QAChF,mEAAmE;QACnE,QAAQ,EAAE,WAAW,KAAK,gBAAgB,MAAM,qBAAqB;QACrE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,6BAA6B,CAAC,IAAI,CACtC,IAAI,wDAAuB,CAAC;QAC1B,YAAY,EAAE,YAAY;QAC1B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CACH,CAAC;AACJ,CAAC,CAAA,CAAC;AAfW,QAAA,gCAAgC,oCAe3C","sourcesContent":["import { ApiGatewayManagementApiClient, PostToConnectionCommand } from '@aws-sdk/client-apigatewaymanagementapi';\n\nimport { createAwsClient } from '../createAwsClient';\n\n/** JSON-serialises the payload and posts it to one websocket connection. */\nexport const sendMessageToWebSocketConnection = async (apiId: string, connectionId: string, region: string, payload: unknown): Promise<void> => {\n  const apiGatewayManagementApiClient = createAwsClient(ApiGatewayManagementApiClient, {\n    apiVersion: '2018-11-29',\n    // QPQ deploys every websocket api with a single stage named 'prod' (see the CDK\n    // websocket construct), so the management endpoint stage is fixed.\n    endpoint: `https://${apiId}.execute-api.${region}.amazonaws.com/prod`,\n    region,\n  });\n\n  await apiGatewayManagementApiClient.send(\n    new PostToConnectionCommand({\n      ConnectionId: connectionId,\n      Data: JSON.stringify(payload),\n    }),\n  );\n};\n"]}

package/lib/commonjs/logic/cache/memoFunc.d.ts

@@ -1,7 +1,10 @@
+type AnyFunc = (...args: any[]) => any;
 /**
- * Memoizes a function by caching its return values.
+ * Memoizes a synchronous function by its JSON-stringified arguments.
+ * Note: only truthy results are cached; a falsy result is recomputed on every call.
  * @param func The function to memoize.
  * @param ttlInSeconds Time-to-live for the cached values in seconds.
  * @returns The memoized function.
  */
-export declare const memoFunc: <T extends (...args: any[]) => any>(func: T, ttlInSeconds?: number) => T;
+export declare const memoFunc: <T extends AnyFunc>(func: T, ttlInSeconds?: number) => T;
+export {};

package/lib/commonjs/logic/cache/memoFunc.js

@@ -5,18 +5,18 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.memoFunc = void 0;
 const node_cache_1 = __importDefault(require("node-cache"));
+// Keyed per wrapped function so each memoized function gets its own cache.
 const cache = new WeakMap();
 /**
- * Memoizes a function by caching its return values.
+ * Memoizes a synchronous function by its JSON-stringified arguments.
+ * Note: only truthy results are cached; a falsy result is recomputed on every call.
  * @param func The function to memoize.
  * @param ttlInSeconds Time-to-live for the cached values in seconds.
  * @returns The memoized function.
  */
 const memoFunc = (func, ttlInSeconds = 3600) => {
     return ((...args) => {
-        // Check if the function has a corresponding cache entry
         if (!cache.has(func)) {
-            // Create a new NodeCache instance and store it in the cache
             cache.set(func, new node_cache_1.default({ stdTTL: ttlInSeconds }));
         }
         const cacheKey = JSON.stringify(args);
@@ -25,9 +25,7 @@ const memoFunc = (func, ttlInSeconds = 3600) => {
         if (cachedValue) {
             return cachedValue;
         }
-        // Call the original function if the value is not cached
         const result = func(...args);
-        // Cache the result for future use
         nodeCache.set(cacheKey, result);
         return result;
     });

package/lib/commonjs/logic/cache/memoFunc.js.map

@@ -1 +1 @@
-{"version":3,"file":"memoFunc.js","sourceRoot":"","sources":["../../../../src/logic/cache/memoFunc.ts"],"names":[],"mappings":";;;;;;AAAA,4DAAmC;AAEnC,MAAM,KAAK,GAAG,IAAI,OAAO,EAAqB,CAAC;AAE/C;;;;;GAKG;AACI,MAAM,QAAQ,GAAG,CAAoC,IAAO,EAAE,eAAuB,IAAI,EAAK,EAAE;IACrG,OAAO,CAAC,CAAC,GAAG,IAAW,EAAE,EAAE;QACzB,wDAAwD;QACxD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,4DAA4D;YAC5D,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,oBAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QACnC,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAI,QAAQ,CAAC,CAAC;QAE/C,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,wDAAwD;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAE7B,kCAAkC;QAClC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEhC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAM,CAAC;AACV,CAAC,CAAC;AAxBW,QAAA,QAAQ,YAwBnB","sourcesContent":["import NodeCache from 'node-cache';\n\nconst cache = new WeakMap<object, NodeCache>();\n\n/**\n * Memoizes a function by caching its return values.\n * @param func The function to memoize.\n * @param ttlInSeconds Time-to-live for the cached values in seconds.\n * @returns The memoized function.\n */\nexport const memoFunc = <T extends (...args: any[]) => any>(func: T, ttlInSeconds: number = 3600): T => {\n  return ((...args: any[]) => {\n    // Check if the function has a corresponding cache entry\n    if (!cache.has(func)) {\n      // Create a new NodeCache instance and store it in the cache\n      cache.set(func, new NodeCache({ stdTTL: ttlInSeconds }));\n    }\n\n    const cacheKey = JSON.stringify(args);\n    const nodeCache = cache.get(func)!;\n    const cachedValue = nodeCache.get<T>(cacheKey);\n\n    if (cachedValue) {\n      return cachedValue;\n    }\n\n    // Call the original function if the value is not cached\n    const result = func(...args);\n\n    // Cache the result for future use\n    nodeCache.set(cacheKey, result);\n\n    return result;\n  }) as T;\n};\n"]}
+{"version":3,"file":"memoFunc.js","sourceRoot":"","sources":["../../../../src/logic/cache/memoFunc.ts"],"names":[],"mappings":";;;;;;AAAA,4DAAmC;AAKnC,2EAA2E;AAC3E,MAAM,KAAK,GAAG,IAAI,OAAO,EAAsB,CAAC;AAEhD;;;;;;GAMG;AACI,MAAM,QAAQ,GAAG,CAAoB,IAAO,EAAE,eAAuB,IAAI,EAAK,EAAE;IACrF,OAAO,CAAC,CAAC,GAAG,IAAmB,EAAE,EAAE;QACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,oBAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QACnC,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAgB,QAAQ,CAAC,CAAC;QAE3D,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7B,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEhC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAM,CAAC;AACV,CAAC,CAAC;AAnBW,QAAA,QAAQ,YAmBnB","sourcesContent":["import NodeCache from 'node-cache';\n\n// `any` is the variance boundary that lets one signature wrap functions of any arity.\ntype AnyFunc = (...args: any[]) => any;\n\n// Keyed per wrapped function so each memoized function gets its own cache.\nconst cache = new WeakMap<AnyFunc, NodeCache>();\n\n/**\n * Memoizes a synchronous function by its JSON-stringified arguments.\n * Note: only truthy results are cached; a falsy result is recomputed on every call.\n * @param func The function to memoize.\n * @param ttlInSeconds Time-to-live for the cached values in seconds.\n * @returns The memoized function.\n */\nexport const memoFunc = <T extends AnyFunc>(func: T, ttlInSeconds: number = 3600): T => {\n  return ((...args: Parameters<T>) => {\n    if (!cache.has(func)) {\n      cache.set(func, new NodeCache({ stdTTL: ttlInSeconds }));\n    }\n\n    const cacheKey = JSON.stringify(args);\n    const nodeCache = cache.get(func)!;\n    const cachedValue = nodeCache.get<ReturnType<T>>(cacheKey);\n\n    if (cachedValue) {\n      return cachedValue;\n    }\n\n    const result = func(...args);\n    nodeCache.set(cacheKey, result);\n\n    return result;\n  }) as T;\n};\n"]}

package/lib/commonjs/logic/cache/memoFuncAsync.d.ts

@@ -1,7 +1,10 @@
+type AnyFunc = (...args: any[]) => any;
 /**
- * Memoizes a function by caching its return values.
+ * Memoizes an async function by its JSON-stringified arguments, caching the RESOLVED
+ * value (falsy values included). A rejected promise is not cached, so failures retry.
  * @param func The function to memoize.
  * @param ttlInSeconds Time-to-live for the cached values in seconds.
  * @returns The memoized function.
  */
-export declare const memoFuncAsync: <T extends (...args: any[]) => any>(func: T, ttlInSeconds?: number) => T;
+export declare const memoFuncAsync: <T extends AnyFunc>(func: T, ttlInSeconds?: number) => T;
+export {};

package/lib/commonjs/logic/cache/memoFuncAsync.js

@@ -14,9 +14,11 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.memoFuncAsync = void 0;
 const node_cache_1 = __importDefault(require("node-cache"));
+// Keyed per wrapped function so each memoized function gets its own cache.
 const cache = new WeakMap();
 /**
- * Memoizes a function by caching its return values.
+ * Memoizes an async function by its JSON-stringified arguments, caching the RESOLVED
+ * value (falsy values included). A rejected promise is not cached, so failures retry.
  * @param func The function to memoize.
  * @param ttlInSeconds Time-to-live for the cached values in seconds.
  * @returns The memoized function.
@@ -31,9 +33,8 @@ const memoFuncAsync = (func, ttlInSeconds = 3600) => {
         if (nodeCache.has(cacheKey)) {
             return nodeCache.get(cacheKey);
         }
-        // Await the result
+        // Await before caching so only resolved values are stored
         const result = yield func(...args);
-        // and then cache it
         nodeCache.set(cacheKey, result);
         return result;
     }));

package/lib/commonjs/logic/cache/memoFuncAsync.js.map

@@ -1 +1 @@
-{"version":3,"file":"memoFuncAsync.js","sourceRoot":"","sources":["../../../../src/logic/cache/memoFuncAsync.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,4DAAmC;AAEnC,MAAM,KAAK,GAAG,IAAI,OAAO,EAAqB,CAAC;AAE/C;;;;;GAKG;AACI,MAAM,aAAa,GAAG,CAAoC,IAAO,EAAE,eAAuB,IAAI,EAAK,EAAE;IAC1G,OAAO,CAAC,CAAO,GAAG,IAAW,EAAE,EAAE;QAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,oBAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QAEnC,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC,GAAG,CAAI,QAAQ,CAAC,CAAC;QACpC,CAAC;QAED,mBAAmB;QACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAEnC,oBAAoB;QACpB,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEhC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAA,CAAiB,CAAC;AACrB,CAAC,CAAC;AArBW,QAAA,aAAa,iBAqBxB","sourcesContent":["import NodeCache from 'node-cache';\n\nconst cache = new WeakMap<object, NodeCache>();\n\n/**\n * Memoizes a function by caching its return values.\n * @param func The function to memoize.\n * @param ttlInSeconds Time-to-live for the cached values in seconds.\n * @returns The memoized function.\n */\nexport const memoFuncAsync = <T extends (...args: any[]) => any>(func: T, ttlInSeconds: number = 3600): T => {\n  return (async (...args: any[]) => {\n    if (!cache.has(func)) {\n      cache.set(func, new NodeCache({ stdTTL: ttlInSeconds }));\n    }\n\n    const cacheKey = JSON.stringify(args);\n    const nodeCache = cache.get(func)!;\n\n    if (nodeCache.has(cacheKey)) {\n      return nodeCache.get<T>(cacheKey);\n    }\n\n    // Await the result\n    const result = await func(...args);\n\n    // and then cache it\n    nodeCache.set(cacheKey, result);\n\n    return result;\n  }) as unknown as T;\n};\n"]}
+{"version":3,"file":"memoFuncAsync.js","sourceRoot":"","sources":["../../../../src/logic/cache/memoFuncAsync.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,4DAAmC;AAKnC,2EAA2E;AAC3E,MAAM,KAAK,GAAG,IAAI,OAAO,EAAsB,CAAC;AAEhD;;;;;;GAMG;AACI,MAAM,aAAa,GAAG,CAAoB,IAAO,EAAE,eAAuB,IAAI,EAAK,EAAE;IAC1F,OAAO,CAAC,CAAO,GAAG,IAAmB,EAAE,EAAE;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,oBAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QAEnC,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC,GAAG,CAAyB,QAAQ,CAAC,CAAC;QACzD,CAAC;QAED,0DAA0D;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACnC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEhC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAA,CAAiB,CAAC;AACrB,CAAC,CAAC;AAnBW,QAAA,aAAa,iBAmBxB","sourcesContent":["import NodeCache from 'node-cache';\n\n// `any` is the variance boundary that lets one signature wrap functions of any arity.\ntype AnyFunc = (...args: any[]) => any;\n\n// Keyed per wrapped function so each memoized function gets its own cache.\nconst cache = new WeakMap<AnyFunc, NodeCache>();\n\n/**\n * Memoizes an async function by its JSON-stringified arguments, caching the RESOLVED\n * value (falsy values included). A rejected promise is not cached, so failures retry.\n * @param func The function to memoize.\n * @param ttlInSeconds Time-to-live for the cached values in seconds.\n * @returns The memoized function.\n */\nexport const memoFuncAsync = <T extends AnyFunc>(func: T, ttlInSeconds: number = 3600): T => {\n  return (async (...args: Parameters<T>) => {\n    if (!cache.has(func)) {\n      cache.set(func, new NodeCache({ stdTTL: ttlInSeconds }));\n    }\n\n    const cacheKey = JSON.stringify(args);\n    const nodeCache = cache.get(func)!;\n\n    if (nodeCache.has(cacheKey)) {\n      return nodeCache.get<Awaited<ReturnType<T>>>(cacheKey);\n    }\n\n    // Await before caching so only resolved values are stored\n    const result = await func(...args);\n    nodeCache.set(cacheKey, result);\n\n    return result;\n  }) as unknown as T;\n};\n"]}

package/lib/commonjs/logic/cloudFront/invalidateCache.d.ts

@@ -1,2 +1 @@
-export declare const getInvalidationCallerReference: (paths: string[]) => string;
 export declare const invalidateCache: (distributionId: string, region: string, paths: string[]) => Promise<void>;

package/lib/commonjs/logic/cloudFront/invalidateCache.js

@@ -12,31 +12,28 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.invalidateCache = exports.getInvalidationCallerReference = void 0;
+exports.invalidateCache = void 0;
 const crypto_1 = __importDefault(require("crypto"));
 const client_cloudfront_1 = require("@aws-sdk/client-cloudfront");
 const createAwsClient_1 = require("../createAwsClient");
+// CloudFront dedupes CreateInvalidation calls by CallerReference, so it must be unique
+// per request: hash of the paths plus the current time.
 const getInvalidationCallerReference = (paths) => {
-    const allPaths = paths.join('');
-    // All paths as a hash
-    const allPathHash = crypto_1.default.createHash('md5').update(allPaths).digest('hex');
-    // Unique key is the now time with all paths hash
+    const allPathHash = crypto_1.default.createHash('md5').update(paths.join('')).digest('hex');
     return allPathHash + new Date().toISOString();
 };
-exports.getInvalidationCallerReference = getInvalidationCallerReference;
 const invalidateCache = (distributionId, region, paths) => __awaiter(void 0, void 0, void 0, function* () {
     const cloudFrontClient = (0, createAwsClient_1.createAwsClient)(client_cloudfront_1.CloudFrontClient, { region });
-    const input = {
+    yield cloudFrontClient.send(new client_cloudfront_1.CreateInvalidationCommand({
         DistributionId: distributionId,
         InvalidationBatch: {
             Paths: {
                 Quantity: paths.length,
                 Items: paths,
             },
-            CallerReference: (0, exports.getInvalidationCallerReference)(paths),
+            CallerReference: getInvalidationCallerReference(paths),
         },
-    };
-    yield cloudFrontClient.send(new client_cloudfront_1.CreateInvalidationCommand(input));
+    }));
 });
 exports.invalidateCache = invalidateCache;
 //# sourceMappingURL=invalidateCache.js.map

package/lib/commonjs/logic/cloudFront/invalidateCache.js.map

@@ -1 +1 @@
-{"version":3,"file":"invalidateCache.js","sourceRoot":"","sources":["../../../../src/logic/cloudFront/invalidateCache.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,oDAA4B;AAC5B,kEAAyH;AAEzH,wDAAqD;AAE9C,MAAM,8BAA8B,GAAG,CAAC,KAAe,EAAU,EAAE;IACxE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEhC,sBAAsB;IACtB,MAAM,WAAW,GAAG,gBAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE5E,iDAAiD;IACjD,OAAO,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAChD,CAAC,CAAC;AARW,QAAA,8BAA8B,kCAQzC;AAEK,MAAM,eAAe,GAAG,CAAO,cAAsB,EAAE,MAAc,EAAE,KAAe,EAAiB,EAAE;IAC9G,MAAM,gBAAgB,GAAG,IAAA,iCAAe,EAAC,oCAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAmC;QAC5C,cAAc,EAAE,cAAc;QAC9B,iBAAiB,EAAE;YACjB,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,MAAM;gBACtB,KAAK,EAAE,KAAK;aACb;YACD,eAAe,EAAE,IAAA,sCAA8B,EAAC,KAAK,CAAC;SACvD;KACF,CAAC;IAEF,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,6CAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC,CAAA,CAAC;AAfW,QAAA,eAAe,mBAe1B","sourcesContent":["import crypto from 'crypto';\nimport { CloudFrontClient, CreateInvalidationCommand, CreateInvalidationCommandInput } from '@aws-sdk/client-cloudfront';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const getInvalidationCallerReference = (paths: string[]): string => {\n  const allPaths = paths.join('');\n\n  // All paths as a hash\n  const allPathHash = crypto.createHash('md5').update(allPaths).digest('hex');\n\n  // Unique key is the now time with all paths hash\n  return allPathHash + new Date().toISOString();\n};\n\nexport const invalidateCache = async (distributionId: string, region: string, paths: string[]): Promise<void> => {\n  const cloudFrontClient = createAwsClient(CloudFrontClient, { region });\n\n  const input: CreateInvalidationCommandInput = {\n    DistributionId: distributionId,\n    InvalidationBatch: {\n      Paths: {\n        Quantity: paths.length,\n        Items: paths,\n      },\n      CallerReference: getInvalidationCallerReference(paths),\n    },\n  };\n\n  await cloudFrontClient.send(new CreateInvalidationCommand(input));\n};\n"]}
+{"version":3,"file":"invalidateCache.js","sourceRoot":"","sources":["../../../../src/logic/cloudFront/invalidateCache.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,oDAA4B;AAC5B,kEAAyF;AAEzF,wDAAqD;AAErD,uFAAuF;AACvF,wDAAwD;AACxD,MAAM,8BAA8B,GAAG,CAAC,KAAe,EAAU,EAAE;IACjE,MAAM,WAAW,GAAG,gBAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAElF,OAAO,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAChD,CAAC,CAAC;AAEK,MAAM,eAAe,GAAG,CAAO,cAAsB,EAAE,MAAc,EAAE,KAAe,EAAiB,EAAE;IAC9G,MAAM,gBAAgB,GAAG,IAAA,iCAAe,EAAC,oCAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvE,MAAM,gBAAgB,CAAC,IAAI,CACzB,IAAI,6CAAyB,CAAC;QAC5B,cAAc,EAAE,cAAc;QAC9B,iBAAiB,EAAE;YACjB,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,MAAM;gBACtB,KAAK,EAAE,KAAK;aACb;YACD,eAAe,EAAE,8BAA8B,CAAC,KAAK,CAAC;SACvD;KACF,CAAC,CACH,CAAC;AACJ,CAAC,CAAA,CAAC;AAfW,QAAA,eAAe,mBAe1B","sourcesContent":["import crypto from 'crypto';\nimport { CloudFrontClient, CreateInvalidationCommand } from '@aws-sdk/client-cloudfront';\n\nimport { createAwsClient } from '../createAwsClient';\n\n// CloudFront dedupes CreateInvalidation calls by CallerReference, so it must be unique\n// per request: hash of the paths plus the current time.\nconst getInvalidationCallerReference = (paths: string[]): string => {\n  const allPathHash = crypto.createHash('md5').update(paths.join('')).digest('hex');\n\n  return allPathHash + new Date().toISOString();\n};\n\nexport const invalidateCache = async (distributionId: string, region: string, paths: string[]): Promise<void> => {\n  const cloudFrontClient = createAwsClient(CloudFrontClient, { region });\n\n  await cloudFrontClient.send(\n    new CreateInvalidationCommand({\n      DistributionId: distributionId,\n      InvalidationBatch: {\n        Paths: {\n          Quantity: paths.length,\n          Items: paths,\n        },\n        CallerReference: getInvalidationCallerReference(paths),\n      },\n    }),\n  );\n};\n"]}

package/lib/commonjs/logic/cloudformation/getExportedValue.d.ts

@@ -1 +1,5 @@
+/**
+ * Resolves a CloudFormation export by name, paging through ListExports. Memoized
+ * (1 hour) because exports are deploy-time constants; throws if the export does not exist.
+ */
 export declare const getExportedValue: (variableName: string, region: string) => Promise<string>;

package/lib/commonjs/logic/cloudformation/getExportedValue.js

@@ -13,6 +13,10 @@ exports.getExportedValue = void 0;
 const client_cloudformation_1 = require("@aws-sdk/client-cloudformation");
 const memoFuncAsync_1 = require("../cache/memoFuncAsync");
 const createAwsClient_1 = require("../createAwsClient");
+/**
+ * Resolves a CloudFormation export by name, paging through ListExports. Memoized
+ * (1 hour) because exports are deploy-time constants; throws if the export does not exist.
+ */
 exports.getExportedValue = (0, memoFuncAsync_1.memoFuncAsync)((variableName, region) => __awaiter(void 0, void 0, void 0, function* () {
     var _a;
     const cloudformation = (0, createAwsClient_1.createAwsClient)(client_cloudformation_1.CloudFormationClient, { region });

package/lib/commonjs/logic/cloudformation/getExportedValue.js.map

@@ -1 +1 @@
-{"version":3,"file":"getExportedValue.js","sourceRoot":"","sources":["../../../../src/logic/cloudformation/getExportedValue.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0EAAmH;AAEnH,0DAAuD;AACvD,wDAAqD;AAExC,QAAA,gBAAgB,GAAG,IAAA,6BAAa,EAAC,CAAO,YAAoB,EAAE,MAAc,EAAmB,EAAE;;IAC5G,MAAM,cAAc,GAAG,IAAA,iCAAe,EAAC,4CAAoB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEzE,MAAM,iBAAiB,GAA4B,EAAE,CAAC;IAEtD,GAAG,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,0CAAkB,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAEpF,MAAM,KAAK,GAAG,MAAA,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,0CAAE,KAAK,CAAC;QACjF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,cAAc,YAAY,QAAQ,KAAK,GAAG,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iBAAiB,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACjD,CAAC,QAAQ,iBAAiB,CAAC,SAAS,EAAE;IAEtC,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,GAAG,CAAC,CAAC;AAC1D,CAAC,CAAA,CAAC,CAAC","sourcesContent":["import { CloudFormationClient, ListExportsCommand, ListExportsCommandInput } from '@aws-sdk/client-cloudformation';\n\nimport { memoFuncAsync } from '../cache/memoFuncAsync';\nimport { createAwsClient } from '../createAwsClient';\n\nexport const getExportedValue = memoFuncAsync(async (variableName: string, region: string): Promise<string> => {\n  const cloudformation = createAwsClient(CloudFormationClient, { region });\n\n  const listCommandParams: ListExportsCommandInput = {};\n\n  do {\n    const result = await cloudformation.send(new ListExportsCommand(listCommandParams));\n\n    const value = (result.Exports || []).find((e) => e.Name === variableName)?.Value;\n    if (value !== undefined) {\n      console.log(`CF Found: [${variableName}] = [${value}]`);\n      return value;\n    }\n\n    listCommandParams.NextToken = result.NextToken;\n  } while (listCommandParams.NextToken);\n\n  throw new Error(`CF could not find: [${variableName}]`);\n});\n"]}
+{"version":3,"file":"getExportedValue.js","sourceRoot":"","sources":["../../../../src/logic/cloudformation/getExportedValue.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0EAAmH;AAEnH,0DAAuD;AACvD,wDAAqD;AAErD;;;GAGG;AACU,QAAA,gBAAgB,GAAG,IAAA,6BAAa,EAAC,CAAO,YAAoB,EAAE,MAAc,EAAmB,EAAE;;IAC5G,MAAM,cAAc,GAAG,IAAA,iCAAe,EAAC,4CAAoB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEzE,MAAM,iBAAiB,GAA4B,EAAE,CAAC;IAEtD,GAAG,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,0CAAkB,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAEpF,MAAM,KAAK,GAAG,MAAA,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,0CAAE,KAAK,CAAC;QACjF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,cAAc,YAAY,QAAQ,KAAK,GAAG,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iBAAiB,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACjD,CAAC,QAAQ,iBAAiB,CAAC,SAAS,EAAE;IAEtC,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,GAAG,CAAC,CAAC;AAC1D,CAAC,CAAA,CAAC,CAAC","sourcesContent":["import { CloudFormationClient, ListExportsCommand, ListExportsCommandInput } from '@aws-sdk/client-cloudformation';\n\nimport { memoFuncAsync } from '../cache/memoFuncAsync';\nimport { createAwsClient } from '../createAwsClient';\n\n/**\n * Resolves a CloudFormation export by name, paging through ListExports. Memoized\n * (1 hour) because exports are deploy-time constants; throws if the export does not exist.\n */\nexport const getExportedValue = memoFuncAsync(async (variableName: string, region: string): Promise<string> => {\n  const cloudformation = createAwsClient(CloudFormationClient, { region });\n\n  const listCommandParams: ListExportsCommandInput = {};\n\n  do {\n    const result = await cloudformation.send(new ListExportsCommand(listCommandParams));\n\n    const value = (result.Exports || []).find((e) => e.Name === variableName)?.Value;\n    if (value !== undefined) {\n      console.log(`CF Found: [${variableName}] = [${value}]`);\n      return value;\n    }\n\n    listCommandParams.NextToken = result.NextToken;\n  } while (listCommandParams.NextToken);\n\n  throw new Error(`CF could not find: [${variableName}]`);\n});\n"]}

package/lib/commonjs/logic/cognito/authenticateUser.d.ts

@@ -1,2 +1,6 @@
 import { AuthenticateUserResponse } from 'quidproquo-core';
+/**
+ * Starts a Cognito auth flow (password auth, or CUSTOM_AUTH when isCustom) and
+ * returns the qpq response: either issued tokens or a pending challenge.
+ */
 export declare const authenticateUser: (userPoolId: string, clientId: string, region: string, isCustom: boolean, username: string, password?: string) => Promise<AuthenticateUserResponse>;

package/lib/commonjs/logic/cognito/authenticateUser.js

@@ -13,16 +13,21 @@ exports.authenticateUser = void 0;
 const client_cognito_identity_provider_1 = require("@aws-sdk/client-cognito-identity-provider");
 const createAwsClient_1 = require("../createAwsClient");
 const calculateSecretHash_1 = require("./utils/calculateSecretHash");
-const transformCognitoResponse_1 = require("./utils/transformCognitoResponse");
+const cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo_1 = require("./utils/cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo");
 const getUserPoolClientSecret_1 = require("./getUserPoolClientSecret");
 // TODO: retry for TooManyRequestsException
+/**
+ * Starts a Cognito auth flow (password auth, or CUSTOM_AUTH when isCustom) and
+ * returns the qpq response: either issued tokens or a pending challenge.
+ */
 const authenticateUser = (userPoolId, clientId, region, isCustom, username, password) => __awaiter(void 0, void 0, void 0, function* () {
     const cognitoClient = (0, createAwsClient_1.createAwsClient)(client_cognito_identity_provider_1.CognitoIdentityProviderClient, {
         region,
     });
     const clientSecret = yield (0, getUserPoolClientSecret_1.getUserPoolClientSecret)(userPoolId, clientId, region);
     const secretHash = (0, calculateSecretHash_1.calculateSecretHash)(username, clientId, clientSecret);
-    // Time we issued the request
+    // Token expiry is computed relative to this; captured before the call so the
+    // derived expiresAt errs early rather than late.
     const issueDateTime = new Date().toISOString();
     const params = {
         AuthFlow: isCustom ? client_cognito_identity_provider_1.AuthFlowType.CUSTOM_AUTH : client_cognito_identity_provider_1.AuthFlowType.ADMIN_USER_PASSWORD_AUTH,
@@ -37,7 +42,7 @@ const authenticateUser = (userPoolId, clientId, region, isCustom, username, pass
         params.AuthParameters.PASSWORD = password;
     }
     const response = yield cognitoClient.send(new client_cognito_identity_provider_1.AdminInitiateAuthCommand(params));
-    return (0, transformCognitoResponse_1.cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo)(response, issueDateTime);
+    return (0, cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo_1.cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo)(response, issueDateTime);
 });
 exports.authenticateUser = authenticateUser;
 //# sourceMappingURL=authenticateUser.js.map

package/lib/commonjs/logic/cognito/authenticateUser.js.map

@@ -1 +1 @@
-{"version":3,"file":"authenticateUser.js","sourceRoot":"","sources":["../../../../src/logic/cognito/authenticateUser.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,gGAKmD;AAEnD,wDAAqD;AACrD,qEAAkE;AAClE,+EAA2G;AAC3G,uEAAoE;AAEpE,2CAA2C;AAEpC,MAAM,gBAAgB,GAAG,CAC9B,UAAkB,EAClB,QAAgB,EAChB,MAAc,EACd,QAAiB,EACjB,QAAgB,EAChB,QAAiB,EACkB,EAAE;IACrC,MAAM,aAAa,GAAG,IAAA,iCAAe,EAAC,gEAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,IAAA,iDAAuB,EAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,IAAA,yCAAmB,EAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEzE,6BAA6B;IAC7B,MAAM,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE/C,MAAM,MAAM,GAAkC;QAC5C,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,+CAAY,CAAC,WAAW,CAAC,CAAC,CAAC,+CAAY,CAAC,wBAAwB;QACrF,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;QAElB,cAAc,EAAE;YACd,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,UAAU;SACxB;KACF,CAAC;IAEF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,cAAe,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,2DAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhF,OAAO,IAAA,kFAAuD,EAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC1F,CAAC,CAAA,CAAC;AApCW,QAAA,gBAAgB,oBAoC3B","sourcesContent":["import { AuthenticateUserChallenge, AuthenticateUserResponse, UserDirectoryAuthenticateUserActionPayload } from 'quidproquo-core';\n\nimport {\n  AdminInitiateAuthCommand,\n  AdminInitiateAuthCommandInput,\n  AuthFlowType,\n  CognitoIdentityProviderClient,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { calculateSecretHash } from './utils/calculateSecretHash';\nimport { cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo } from './utils/transformCognitoResponse';\nimport { getUserPoolClientSecret } from './getUserPoolClientSecret';\n\n// TODO: retry for TooManyRequestsException\n\nexport const authenticateUser = async (\n  userPoolId: string,\n  clientId: string,\n  region: string,\n  isCustom: boolean,\n  username: string,\n  password?: string,\n): Promise<AuthenticateUserResponse> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const clientSecret = await getUserPoolClientSecret(userPoolId, clientId, region);\n  const secretHash = calculateSecretHash(username, clientId, clientSecret);\n\n  // Time we issued the request\n  const issueDateTime = new Date().toISOString();\n\n  const params: AdminInitiateAuthCommandInput = {\n    AuthFlow: isCustom ? AuthFlowType.CUSTOM_AUTH : AuthFlowType.ADMIN_USER_PASSWORD_AUTH,\n    UserPoolId: userPoolId,\n    ClientId: clientId,\n\n    AuthParameters: {\n      USERNAME: username,\n      SECRET_HASH: secretHash,\n    },\n  };\n\n  if (password) {\n    params.AuthParameters!.PASSWORD = password;\n  }\n\n  const response = await cognitoClient.send(new AdminInitiateAuthCommand(params));\n\n  return cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo(response, issueDateTime);\n};\n"]}
+{"version":3,"file":"authenticateUser.js","sourceRoot":"","sources":["../../../../src/logic/cognito/authenticateUser.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,gGAKmD;AAEnD,wDAAqD;AACrD,qEAAkE;AAClE,6IAA0I;AAC1I,uEAAoE;AAEpE,2CAA2C;AAE3C;;;GAGG;AACI,MAAM,gBAAgB,GAAG,CAC9B,UAAkB,EAClB,QAAgB,EAChB,MAAc,EACd,QAAiB,EACjB,QAAgB,EAChB,QAAiB,EACkB,EAAE;IACrC,MAAM,aAAa,GAAG,IAAA,iCAAe,EAAC,gEAA6B,EAAE;QACnE,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,IAAA,iDAAuB,EAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,IAAA,yCAAmB,EAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEzE,6EAA6E;IAC7E,iDAAiD;IACjD,MAAM,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE/C,MAAM,MAAM,GAAkC;QAC5C,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,+CAAY,CAAC,WAAW,CAAC,CAAC,CAAC,+CAAY,CAAC,wBAAwB;QACrF,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;QAElB,cAAc,EAAE;YACd,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,UAAU;SACxB;KACF,CAAC;IAEF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,cAAe,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,IAAI,2DAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhF,OAAO,IAAA,iHAAuD,EAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC1F,CAAC,CAAA,CAAC;AArCW,QAAA,gBAAgB,oBAqC3B","sourcesContent":["import { AuthenticateUserResponse } from 'quidproquo-core';\n\nimport {\n  AdminInitiateAuthCommand,\n  AdminInitiateAuthCommandInput,\n  AuthFlowType,\n  CognitoIdentityProviderClient,\n} from '@aws-sdk/client-cognito-identity-provider';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { calculateSecretHash } from './utils/calculateSecretHash';\nimport { cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo } from './utils/cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo';\nimport { getUserPoolClientSecret } from './getUserPoolClientSecret';\n\n// TODO: retry for TooManyRequestsException\n\n/**\n * Starts a Cognito auth flow (password auth, or CUSTOM_AUTH when isCustom) and\n * returns the qpq response: either issued tokens or a pending challenge.\n */\nexport const authenticateUser = async (\n  userPoolId: string,\n  clientId: string,\n  region: string,\n  isCustom: boolean,\n  username: string,\n  password?: string,\n): Promise<AuthenticateUserResponse> => {\n  const cognitoClient = createAwsClient(CognitoIdentityProviderClient, {\n    region,\n  });\n\n  const clientSecret = await getUserPoolClientSecret(userPoolId, clientId, region);\n  const secretHash = calculateSecretHash(username, clientId, clientSecret);\n\n  // Token expiry is computed relative to this; captured before the call so the\n  // derived expiresAt errs early rather than late.\n  const issueDateTime = new Date().toISOString();\n\n  const params: AdminInitiateAuthCommandInput = {\n    AuthFlow: isCustom ? AuthFlowType.CUSTOM_AUTH : AuthFlowType.ADMIN_USER_PASSWORD_AUTH,\n    UserPoolId: userPoolId,\n    ClientId: clientId,\n\n    AuthParameters: {\n      USERNAME: username,\n      SECRET_HASH: secretHash,\n    },\n  };\n\n  if (password) {\n    params.AuthParameters!.PASSWORD = password;\n  }\n\n  const response = await cognitoClient.send(new AdminInitiateAuthCommand(params));\n\n  return cognitoAdminInitiateAuthResponseToQpqAuthenticationInfo(response, issueDateTime);\n};\n"]}

package/lib/commonjs/logic/cognito/cognitoAttributeMap.d.ts

@@ -1,11 +1,3 @@
 import { UserAttributes } from 'quidproquo-core';
+/** Maps qpq UserAttributes keys to their Cognito standard attribute names. */
 export declare const cognitoAttributeMap: Record<keyof UserAttributes, string>;
-export declare const getCognitoUserAttributesFromQpqUserAttributes: (userAttributes: UserAttributes) => {
-    Name: string;
-    Value: string;
-}[];
-export declare const getQpqAttributesFromCognitoUserAttributes: (cognitoUserAttributes: {
-    Name: string;
-    Value: string;
-}[]) => UserAttributes;
-export declare const getQpqAttributesFromCognitoStringMap: (cognitoUserAttributes: Record<string, string>) => UserAttributes;

package/lib/commonjs/logic/cognito/cognitoAttributeMap.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getQpqAttributesFromCognitoStringMap = exports.getQpqAttributesFromCognitoUserAttributes = exports.getCognitoUserAttributesFromQpqUserAttributes = exports.cognitoAttributeMap = void 0;
+exports.cognitoAttributeMap = void 0;
+/** Maps qpq UserAttributes keys to their Cognito standard attribute names. */
 exports.cognitoAttributeMap = {
     email: 'email',
     emailVerified: 'email_verified',
@@ -21,39 +22,4 @@ exports.cognitoAttributeMap = {
     website: 'website',
     zoneInfo: 'zoneinfo',
 };
-// Flip the cognitoAttributeMap for reverse mapping
-const reversedCognitoAttributeMap = Object.entries(exports.cognitoAttributeMap).reduce((acc, [key, value]) => (Object.assign(Object.assign({}, acc), { [value]: key })), {});
-const getCognitoUserAttributesFromQpqUserAttributes = (userAttributes) => {
-    return Object.keys(userAttributes)
-        .map((key) => ({
-        Name: exports.cognitoAttributeMap[key],
-        Value: `${userAttributes[key]}`,
-    }))
-        .filter((attribute) => !!attribute.Name && !!attribute.Value);
-};
-exports.getCognitoUserAttributesFromQpqUserAttributes = getCognitoUserAttributesFromQpqUserAttributes;
-const getQpqAttributeObjectFromCognitoKeyValue = (key, value) => {
-    const userAttributeKey = reversedCognitoAttributeMap[key];
-    if (!userAttributeKey) {
-        return {}; // If there's no matching key in your mapping, just return nothing
-    }
-    if (userAttributeKey === 'emailVerified') {
-        // Assume the value of 'email_verified' is a string of 'true' or 'false'
-        return { [userAttributeKey]: value === 'true' };
-    }
-    return { [userAttributeKey]: value };
-};
-const getQpqAttributesFromCognitoUserAttributes = (cognitoUserAttributes) => {
-    // Map cognitoUserAttributes to your UserAttributes format
-    const userAttributes = cognitoUserAttributes.reduce((acc, { Name, Value }) => {
-        return Object.assign(Object.assign({}, acc), getQpqAttributeObjectFromCognitoKeyValue(Name, Value));
-    }, {});
-    return userAttributes;
-};
-exports.getQpqAttributesFromCognitoUserAttributes = getQpqAttributesFromCognitoUserAttributes;
-const getQpqAttributesFromCognitoStringMap = (cognitoUserAttributes) => {
-    const userAttributes = Object.keys(cognitoUserAttributes).reduce((acc, key) => (Object.assign(Object.assign({}, acc), getQpqAttributeObjectFromCognitoKeyValue(key, cognitoUserAttributes[key]))), {});
-    return userAttributes;
-};
-exports.getQpqAttributesFromCognitoStringMap = getQpqAttributesFromCognitoStringMap;
 //# sourceMappingURL=cognitoAttributeMap.js.map

package/lib/commonjs/logic/cognito/cognitoAttributeMap.js.map

@@ -1 +1 @@
-{"version":3,"file":"cognitoAttributeMap.js","sourceRoot":"","sources":["../../../../src/logic/cognito/cognitoAttributeMap.ts"],"names":[],"mappings":";;;AAEa,QAAA,mBAAmB,GAAyC;IACvE,KAAK,EAAE,OAAO;IACd,aAAa,EAAE,gBAAgB;IAC/B,MAAM,EAAE,KAAK;IAEb,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,aAAa;IACzB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,YAAY;IACvB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,aAAa;IACzB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,SAAS;IAClB,iBAAiB,EAAE,oBAAoB;IACvC,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACrB,CAAC;AAEF,mDAAmD;AACnD,MAAM,2BAA2B,GAAyC,MAAM,CAAC,OAAO,CAAC,2BAAmB,CAAC,CAAC,MAAM,CAClH,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,iCAAM,GAAG,KAAE,CAAC,KAAK,CAAC,EAAE,GAAG,IAAG,EACjD,EAAE,CACH,CAAC;AAEK,MAAM,6CAA6C,GAAG,CAAC,cAA8B,EAAE,EAAE;IAC9F,OAAO,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;SAC/B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACb,IAAI,EAAE,2BAAmB,CAAC,GAA2B,CAAC;QACtD,KAAK,EAAE,GAAG,cAAc,CAAC,GAA2B,CAAC,EAAE;KACxD,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC,CAAC;AAPW,QAAA,6CAA6C,iDAOxD;AAEF,MAAM,wCAAwC,GAAG,CAAC,GAAW,EAAE,KAAa,EAAkB,EAAE;IAC9F,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IAE1D,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,kEAAkE;IAC/E,CAAC;IAED,IAAI,gBAAgB,KAAK,eAAe,EAAE,CAAC;QACzC,wEAAwE;QACxE,OAAO,EAAE,CAAC,gBAAgB,CAAC,EAAE,KAAK,KAAK,MAAM,EAAE,CAAC;IAClD,CAAC;IAED,OAAO,EAAE,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC,CAAC;AAEK,MAAM,yCAAyC,GAAG,CAAC,qBAAwD,EAAkB,EAAE;IACpI,0DAA0D;IAC1D,MAAM,cAAc,GAAmB,qBAAqB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QAC3F,uCACK,GAAG,GACH,wCAAwC,CAAC,IAAI,EAAE,KAAK,CAAC,EACxD;IACJ,CAAC,EAAE,EAAoB,CAAC,CAAC;IAEzB,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC;AAVW,QAAA,yCAAyC,6CAUpD;AAEK,MAAM,oCAAoC,GAAG,CAAC,qBAA6C,EAAkB,EAAE;IACpH,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAC9D,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,iCACT,GAAG,GACH,wCAAwC,CAAC,GAAG,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,EAC5E,EACF,EAAoB,CACrB,CAAC;IAEF,OAAO,cAAc,CAAC;AACxB,CAAC,CAAC;AAVW,QAAA,oCAAoC,wCAU/C","sourcesContent":["import { CreateUserRequest, UserAttributes } from 'quidproquo-core';\n\nexport const cognitoAttributeMap: Record<keyof UserAttributes, string> = {\n  email: 'email',\n  emailVerified: 'email_verified',\n  userId: 'sub',\n\n  address: 'address',\n  birthDate: 'birthdate',\n  familyName: 'family_name',\n  gender: 'gender',\n  givenName: 'given_name',\n  locale: 'locale',\n  middleName: 'middle_name',\n  name: 'name',\n  nickname: 'nickname',\n  phoneNumber: 'phone_number',\n  picture: 'picture',\n  preferredUsername: 'preferred_username',\n  profile: 'profile',\n  website: 'website',\n  zoneInfo: 'zoneinfo',\n};\n\n// Flip the cognitoAttributeMap for reverse mapping\nconst reversedCognitoAttributeMap: Record<string, keyof UserAttributes> = Object.entries(cognitoAttributeMap).reduce(\n  (acc, [key, value]) => ({ ...acc, [value]: key }),\n  {},\n);\n\nexport const getCognitoUserAttributesFromQpqUserAttributes = (userAttributes: UserAttributes) => {\n  return Object.keys(userAttributes)\n    .map((key) => ({\n      Name: cognitoAttributeMap[key as keyof UserAttributes],\n      Value: `${userAttributes[key as keyof UserAttributes]}`,\n    }))\n    .filter((attribute) => !!attribute.Name && !!attribute.Value);\n};\n\nconst getQpqAttributeObjectFromCognitoKeyValue = (key: string, value: string): UserAttributes => {\n  const userAttributeKey = reversedCognitoAttributeMap[key];\n\n  if (!userAttributeKey) {\n    return {}; // If there's no matching key in your mapping, just return nothing\n  }\n\n  if (userAttributeKey === 'emailVerified') {\n    // Assume the value of 'email_verified' is a string of 'true' or 'false'\n    return { [userAttributeKey]: value === 'true' };\n  }\n\n  return { [userAttributeKey]: value };\n};\n\nexport const getQpqAttributesFromCognitoUserAttributes = (cognitoUserAttributes: { Name: string; Value: string }[]): UserAttributes => {\n  // Map cognitoUserAttributes to your UserAttributes format\n  const userAttributes: UserAttributes = cognitoUserAttributes.reduce((acc, { Name, Value }) => {\n    return {\n      ...acc,\n      ...getQpqAttributeObjectFromCognitoKeyValue(Name, Value),\n    };\n  }, {} as UserAttributes);\n\n  return userAttributes;\n};\n\nexport const getQpqAttributesFromCognitoStringMap = (cognitoUserAttributes: Record<string, string>): UserAttributes => {\n  const userAttributes = Object.keys(cognitoUserAttributes).reduce(\n    (acc, key) => ({\n      ...acc,\n      ...getQpqAttributeObjectFromCognitoKeyValue(key, cognitoUserAttributes[key]),\n    }),\n    {} as UserAttributes,\n  );\n\n  return userAttributes;\n};\n"]}
+{"version":3,"file":"cognitoAttributeMap.js","sourceRoot":"","sources":["../../../../src/logic/cognito/cognitoAttributeMap.ts"],"names":[],"mappings":";;;AAEA,8EAA8E;AACjE,QAAA,mBAAmB,GAAyC;IACvE,KAAK,EAAE,OAAO;IACd,aAAa,EAAE,gBAAgB;IAC/B,MAAM,EAAE,KAAK;IAEb,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,aAAa;IACzB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,YAAY;IACvB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,aAAa;IACzB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,cAAc;IAC3B,OAAO,EAAE,SAAS;IAClB,iBAAiB,EAAE,oBAAoB;IACvC,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACrB,CAAC","sourcesContent":["import { UserAttributes } from 'quidproquo-core';\n\n/** Maps qpq UserAttributes keys to their Cognito standard attribute names. */\nexport const cognitoAttributeMap: Record<keyof UserAttributes, string> = {\n  email: 'email',\n  emailVerified: 'email_verified',\n  userId: 'sub',\n\n  address: 'address',\n  birthDate: 'birthdate',\n  familyName: 'family_name',\n  gender: 'gender',\n  givenName: 'given_name',\n  locale: 'locale',\n  middleName: 'middle_name',\n  name: 'name',\n  nickname: 'nickname',\n  phoneNumber: 'phone_number',\n  picture: 'picture',\n  preferredUsername: 'preferred_username',\n  profile: 'profile',\n  website: 'website',\n  zoneInfo: 'zoneinfo',\n};\n"]}

package/lib/commonjs/logic/cognito/confirmForgotPassword.d.ts

@@ -1,2 +1,6 @@
 import { AuthenticateUserResponse } from 'quidproquo-core';
+/**
+ * Confirms a forgot-password reset with the emailed code and new password, then
+ * signs the user straight in with it.
+ */
 export declare const confirmForgotPassword: (userPoolId: string, clientId: string, region: string, code: string, username: string, password: string) => Promise<AuthenticateUserResponse>;