quidproquo-actionprocessor-awslambda 0.1.2 → 0.1.4

package/lib/commonjs/logic/federatedModuleStore/index.js

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./FederatedModuleLoadError"), exports);
+__exportStar(require("./FederatedModuleStoreManifest"), exports);
+__exportStar(require("./loadFederatedStory"), exports);
+__exportStar(require("./sharedPackages"), exports);
+//# sourceMappingURL=index.js.map

package/lib/commonjs/logic/federatedModuleStore/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/logic/federatedModuleStore/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6DAA2C;AAC3C,iEAA+C;AAC/C,uDAAqC;AACrC,mDAAiC","sourcesContent":["export * from './FederatedModuleLoadError';\nexport * from './FederatedModuleStoreManifest';\nexport * from './loadFederatedStory';\nexport * from './sharedPackages';\n"]}

package/lib/commonjs/logic/federatedModuleStore/loadFederatedStory.d.ts

@@ -0,0 +1,3 @@
+import { QPQConfig, QpqFunctionRuntime } from 'quidproquo-core';
+export declare const resetFederatedModuleStoreCache: () => void;
+export declare const loadFederatedStory: <T = any>(qpqConfig: QPQConfig, qpqFunctionRuntime: QpqFunctionRuntime) => Promise<T | undefined>;

package/lib/commonjs/logic/federatedModuleStore/loadFederatedStory.js

@@ -0,0 +1,297 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadFederatedStory = exports.resetFederatedModuleStoreCache = void 0;
+const quidproquo_config_aws_1 = require("quidproquo-config-aws");
+const quidproquoCore = __importStar(require("quidproquo-core"));
+const quidproquo_core_1 = require("quidproquo-core");
+const quidproquoWebserver = __importStar(require("quidproquo-webserver"));
+const fs = __importStar(require("fs"));
+const module_1 = require("module");
+const path = __importStar(require("path"));
+const url_1 = require("url");
+const client_s3_1 = require("@aws-sdk/client-s3");
+const runtime_1 = require("@module-federation/enhanced/runtime");
+const createAwsClient_1 = require("../createAwsClient");
+const FederatedModuleLoadError_1 = require("./FederatedModuleLoadError");
+const sharedPackages_1 = require("./sharedPackages");
+// How long a resolved state is served before the manifest is re-checked for a new
+// version. Overridable per service (defineFederatedModuleStore recheckMs -> this env).
+// Lower = faster pickup of new publishes at the cost of one small S3 GET per container
+// per interval. The re-check runs in the BACKGROUND so it never blocks a request.
+const DEFAULT_RECHECK_MS = 60000;
+const getRecheckMs = () => {
+    const raw = process.env.federatedCodeStoreRecheckMs;
+    const parsed = raw ? parseInt(raw, 10) : NaN;
+    return Number.isFinite(parsed) && parsed >= 0 ? parsed : DEFAULT_RECHECK_MS;
+};
+let resolvedState;
+let recheckAfter = 0;
+let inflightResolve;
+let hostInitialised = false;
+// Test seam - forces the next call to re-resolve the store from env.
+const resetFederatedModuleStoreCache = () => {
+    resolvedState = undefined;
+    recheckAfter = 0;
+    inflightResolve = undefined;
+};
+exports.resetFederatedModuleStoreCache = resetFederatedModuleStoreCache;
+// ── Transport ────────────────────────────────────────────────────────────────
+// Returns a function that reads a path RELATIVE to the store (e.g. 'manifest.json'
+// or '<hash>/remoteEntry.js'). Two backends: s3:// for real deploys, file:// for
+// local/dev and tests. The store URL already includes the per-service prefix, so
+// callers pass only the in-service relative path.
+const getFileFetcher = (storeUrl, qpqConfig) => {
+    if (storeUrl.startsWith('s3://')) {
+        const url = new URL(storeUrl);
+        const bucketName = url.host;
+        const keyPrefix = url.pathname.replace(/^\/|\/$/g, '');
+        const region = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);
+        // Pin the owner so a same-name bucket in another account can't be squatted to
+        // serve code we'd then require() with the service role's credentials.
+        const expectedBucketOwner = quidproquo_config_aws_1.qpqConfigAwsUtils.getApplicationModuleDeployAccountId(qpqConfig);
+        const s3Client = (0, createAwsClient_1.createAwsClient)(client_s3_1.S3Client, { region });
+        return (relativePath) => __awaiter(void 0, void 0, void 0, function* () {
+            var _a;
+            const response = yield s3Client.send(new client_s3_1.GetObjectCommand({
+                Bucket: bucketName,
+                Key: keyPrefix ? `${keyPrefix}/${relativePath}` : relativePath,
+                ExpectedBucketOwner: expectedBucketOwner,
+            }));
+            const bytes = yield ((_a = response.Body) === null || _a === void 0 ? void 0 : _a.transformToByteArray());
+            if (!bytes) {
+                throw new FederatedModuleLoadError_1.FederatedModuleLoadError(FederatedModuleLoadError_1.FederatedModuleLoadErrorCode.containerLoadFailed, `empty response reading [${relativePath}]`);
+            }
+            return Buffer.from(bytes);
+        });
+    }
+    if (storeUrl.startsWith('file://')) {
+        const baseDirectory = (0, url_1.fileURLToPath)(storeUrl.endsWith('/') ? storeUrl : `${storeUrl}/`);
+        return (relativePath) => __awaiter(void 0, void 0, void 0, function* () { return fs.promises.readFile(path.join(baseDirectory, relativePath)); });
+    }
+    throw new FederatedModuleLoadError_1.FederatedModuleLoadError(FederatedModuleLoadError_1.FederatedModuleLoadErrorCode.unsupportedStoreUrl, `unsupported federated code store url [${storeUrl}]`);
+};
+// "Nothing published yet" is a legitimate not-found: the manifest key is absent
+// (NoSuchKey/NotFound) or the store bucket isn't created yet, which happens normally
+// when a lambda cold-starts between deploy phases (NoSuchBucket). We do NOT include
+// AccessDenied: a permission failure is a real misconfiguration and must surface (as a
+// warning, and be retried) rather than masquerade as 'not published'.
+const isManifestNotFoundError = (error) => {
+    const name = (error === null || error === void 0 ? void 0 : error.name) || '';
+    const code = (error === null || error === void 0 ? void 0 : error.code) || '';
+    return ['NoSuchKey', 'NotFound', 'NoSuchBucket'].includes(name) || code === 'ENOENT';
+};
+// ── Module-federation shared scope ───────────────────────────────────────────
+// The host provides the framework packages to the container's share scope so remote
+// story code resolves the SAME module instances as the bundled runtime. The package
+// list is shared with the remote build so the two can't drift (see sharedPackages).
+const SHARED_LIBS = {
+    'quidproquo-core': quidproquoCore,
+    'quidproquo-webserver': quidproquoWebserver,
+};
+const getHostSharedModules = () => Object.fromEntries(sharedPackages_1.FEDERATED_SHARED_PACKAGE_NAMES.map((name) => [
+    name,
+    {
+        version: '0.0.0',
+        lib: () => SHARED_LIBS[name],
+        shareConfig: { singleton: true, requiredVersion: false },
+    },
+]));
+const ensureHostInitialised = () => {
+    if (hostInitialised) {
+        return;
+    }
+    (0, runtime_1.init)({
+        name: 'qpq_federated_host',
+        remotes: [],
+        shared: getHostSharedModules(),
+    });
+    hostInitialised = true;
+};
+// ── Version loading ──────────────────────────────────────────────────────────
+// Downloads a manifest's files (atomically) and registers the container with the MF
+// runtime under a HASH-UNIQUE remote name, so loadRemote can't serve a previous
+// version's module from its cache when the hash changes. Returns the runtime name.
+// This is the step that actually puts a new version's code into effect.
+const loadStoreVersion = (getFile, manifest) => __awaiter(void 0, void 0, void 0, function* () {
+    var _a, _b;
+    const cacheRoot = process.env.federatedCodeStoreCacheDir || '/tmp/qpq-federated-code';
+    const versionDirectory = path.join(cacheRoot, manifest.containerName, manifest.hash);
+    yield fs.promises.mkdir(versionDirectory, { recursive: true });
+    yield Promise.all(manifest.files.map((file) => __awaiter(void 0, void 0, void 0, function* () {
+        const localPath = path.join(versionDirectory, file);
+        // Files are immutable under their hash dir AND only ever appear via the atomic
+        // rename below, so an existing file is always complete and valid - this is what
+        // lets a re-check of an unchanged version skip re-downloading.
+        if (fs.existsSync(localPath)) {
+            return;
+        }
+        const data = yield getFile(`${manifest.hash}/${file}`);
+        yield fs.promises.mkdir(path.dirname(localPath), { recursive: true });
+        // Write to a temp name then rename: rename is atomic on the same filesystem, so a
+        // crash/timeout mid-write never leaves a truncated file that a later invocation
+        // would trust via the existsSync check above. The random suffix keeps concurrent
+        // writers in the SAME process (overlapping probes) off each other's temp file.
+        const tempPath = `${localPath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
+        yield fs.promises.writeFile(tempPath, data);
+        yield fs.promises.rename(tempPath, localPath);
+    })));
+    const entryPath = path.join(versionDirectory, manifest.entry);
+    const containerRequire = (0, module_1.createRequire)(entryPath);
+    const containerModule = containerRequire(entryPath);
+    const container = (_b = (_a = containerModule[manifest.containerName]) !== null && _a !== void 0 ? _a : containerModule.default) !== null && _b !== void 0 ? _b : containerModule;
+    if (typeof (container === null || container === void 0 ? void 0 : container.get) !== 'function' || typeof (container === null || container === void 0 ? void 0 : container.init) !== 'function') {
+        throw new FederatedModuleLoadError_1.FederatedModuleLoadError(FederatedModuleLoadError_1.FederatedModuleLoadErrorCode.containerLoadFailed, `[${manifest.entry}] does not export a module federation container named [${manifest.containerName}]`);
+    }
+    // entryGlobalName is the container's real (build-time) library name; the registered
+    // remote name is hash-unique so each version is a distinct loadRemote key.
+    globalThis[manifest.containerName] = container;
+    ensureHostInitialised();
+    const runtimeName = `${manifest.containerName}__${manifest.hash}`;
+    (0, runtime_1.registerRemotes)([
+        {
+            name: runtimeName,
+            entry: entryPath,
+            type: 'global',
+            entryGlobalName: manifest.containerName,
+        },
+    ]);
+    return runtimeName;
+});
+// ── Probe & resolve (the caching state machine) ──────────────────────────────
+// Reads the manifest and decides the current state. If the hash is unchanged from what
+// we already loaded, keeps the existing container (no re-sync). Not-found -> unavailable.
+const probeStore = (qpqConfig, storeUrl, current) => __awaiter(void 0, void 0, void 0, function* () {
+    const getFile = getFileFetcher(storeUrl, qpqConfig);
+    let manifest;
+    try {
+        manifest = JSON.parse((yield getFile('manifest.json')).toString('utf8'));
+    }
+    catch (error) {
+        if (isManifestNotFoundError(error)) {
+            console.log(`federated code store [${storeUrl}] has no manifest - using bundled modules`);
+            return { available: false };
+        }
+        throw error;
+    }
+    if (!(manifest === null || manifest === void 0 ? void 0 : manifest.containerName) ||
+        !(manifest === null || manifest === void 0 ? void 0 : manifest.hash) ||
+        !(manifest === null || manifest === void 0 ? void 0 : manifest.entry) ||
+        !Array.isArray(manifest === null || manifest === void 0 ? void 0 : manifest.files) ||
+        typeof (manifest === null || manifest === void 0 ? void 0 : manifest.exposes) !== 'object' ||
+        manifest.exposes === null) {
+        throw new FederatedModuleLoadError_1.FederatedModuleLoadError(FederatedModuleLoadError_1.FederatedModuleLoadErrorCode.manifestInvalid, `invalid manifest in federated code store [${storeUrl}]`);
+    }
+    if ((current === null || current === void 0 ? void 0 : current.available) && current.manifest.hash === manifest.hash) {
+        return current;
+    }
+    const runtimeName = yield loadStoreVersion(getFile, manifest);
+    return { available: true, manifest, runtimeName };
+});
+// Resolves the store, re-checking the manifest after the recheck interval. The re-check
+// runs in the background: a stale-but-usable state is served immediately so a request
+// never blocks on S3; only the very first resolve (no state yet) awaits.
+const resolveStore = (qpqConfig, storeUrl) => {
+    if (resolvedState && Date.now() < recheckAfter) {
+        return Promise.resolve(resolvedState);
+    }
+    if (!inflightResolve) {
+        inflightResolve = probeStore(qpqConfig, storeUrl, resolvedState)
+            .then((state) => {
+            resolvedState = state;
+            recheckAfter = Date.now() + getRecheckMs();
+            return state;
+        })
+            .catch((error) => {
+            // Back off and keep serving whatever we had (or unavailable). Surfaced as a
+            // warning so real errors (e.g. AccessDenied) are visible, not silent.
+            console.warn('federated code store check failed - keeping current modules', error);
+            recheckAfter = Date.now() + getRecheckMs();
+            resolvedState = resolvedState !== null && resolvedState !== void 0 ? resolvedState : { available: false };
+            return resolvedState;
+        })
+            .finally(() => {
+            inflightResolve = undefined;
+        });
+    }
+    // Serve the stale state instantly while the refresh happens; only block if we have
+    // nothing yet.
+    return resolvedState ? Promise.resolve(resolvedState) : inflightResolve;
+};
+// ── Public entry ─────────────────────────────────────────────────────────────
+// Called by dynamicModuleLoader for every story load. Returns the story function, or
+// undefined to signal "use the bundled module" (no store, nothing published, runtime
+// not exposed, or any error - availability always wins over federation).
+const loadFederatedStory = (qpqConfig, qpqFunctionRuntime) => __awaiter(void 0, void 0, void 0, function* () {
+    const storeUrl = process.env.federatedCodeStoreUrl;
+    if (!storeUrl) {
+        return undefined;
+    }
+    try {
+        const storeState = yield resolveStore(qpqConfig, storeUrl);
+        if (!storeState.available) {
+            return undefined;
+        }
+        const federatedKey = (0, quidproquo_core_1.getFederatedKeyFromQpqFunctionRuntime)(qpqFunctionRuntime);
+        const exposePath = storeState.manifest.exposes[federatedKey];
+        if (!exposePath) {
+            console.warn(`federated code store has no module for [${federatedKey}] - using the bundled module`);
+            return undefined;
+        }
+        const remoteModule = yield (0, runtime_1.loadRemote)(`${storeState.runtimeName}/${exposePath}`);
+        const storyName = quidproquo_core_1.qpqCoreUtils.getStoryNameFromQpqFunctionRuntime(qpqFunctionRuntime);
+        const story = remoteModule === null || remoteModule === void 0 ? void 0 : remoteModule[storyName];
+        if (!story) {
+            throw new FederatedModuleLoadError_1.FederatedModuleLoadError(FederatedModuleLoadError_1.FederatedModuleLoadErrorCode.storyNotExported, `story [${storyName}] is not exported from federated module [${exposePath}]`);
+        }
+        return story;
+    }
+    catch (error) {
+        // Availability first: a broken store must never take the service down
+        console.warn('federated module load failed - using the bundled module', error);
+        return undefined;
+    }
+});
+exports.loadFederatedStory = loadFederatedStory;
+//# sourceMappingURL=loadFederatedStory.js.map

package/lib/commonjs/logic/federatedModuleStore/loadFederatedStory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadFederatedStory.js","sourceRoot":"","sources":["../../../../src/logic/federatedModuleStore/loadFederatedStory.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iEAA0D;AAC1D,gEAAkD;AAClD,qDAAqH;AACrH,0EAA4D;AAE5D,uCAAyB;AACzB,mCAAuC;AACvC,2CAA6B;AAC7B,6BAAoC;AACpC,kDAAgE;AAChE,iEAAwF;AAExF,wDAAqD;AACrD,yEAAoG;AAEpG,qDAAkE;AAkClE,kFAAkF;AAClF,uFAAuF;AACvF,uFAAuF;AACvF,kFAAkF;AAClF,MAAM,kBAAkB,GAAG,KAAM,CAAC;AAElC,MAAM,YAAY,GAAG,GAAW,EAAE;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACpD,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAC9E,CAAC,CAAC;AAEF,IAAI,aAAqC,CAAC;AAC1C,IAAI,YAAY,GAAG,CAAC,CAAC;AACrB,IAAI,eAAgD,CAAC;AACrD,IAAI,eAAe,GAAG,KAAK,CAAC;AAE5B,qEAAqE;AAC9D,MAAM,8BAA8B,GAAG,GAAS,EAAE;IACvD,aAAa,GAAG,SAAS,CAAC;IAC1B,YAAY,GAAG,CAAC,CAAC;IACjB,eAAe,GAAG,SAAS,CAAC;AAC9B,CAAC,CAAC;AAJW,QAAA,8BAA8B,kCAIzC;AAEF,gFAAgF;AAChF,mFAAmF;AACnF,iFAAiF;AACjF,iFAAiF;AACjF,kDAAkD;AAClD,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAE,SAAoB,EAA+C,EAAE;IAC7G,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC;QAC5B,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,yCAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAC7E,8EAA8E;QAC9E,sEAAsE;QACtE,MAAM,mBAAmB,GAAG,yCAAiB,CAAC,mCAAmC,CAAC,SAAS,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,IAAA,iCAAe,EAAC,oBAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAEvD,OAAO,CAAO,YAAoB,EAAmB,EAAE;;YACrD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAClC,IAAI,4BAAgB,CAAC;gBACnB,MAAM,EAAE,UAAU;gBAClB,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,YAAY;gBAC9D,mBAAmB,EAAE,mBAAmB;aACzC,CAAC,CACH,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,CAAA,MAAA,QAAQ,CAAC,IAAI,0CAAE,oBAAoB,EAAE,CAAA,CAAC;YAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,mDAAwB,CAAC,uDAA4B,CAAC,mBAAmB,EAAE,2BAA2B,YAAY,GAAG,CAAC,CAAC;YACnI,CAAC;YAED,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC,CAAA,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,IAAA,mBAAa,EAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC;QAExF,OAAO,CAAO,YAAoB,EAAmB,EAAE,kDAAC,OAAA,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAA,GAAA,CAAC;IACvH,CAAC;IAED,MAAM,IAAI,mDAAwB,CAAC,uDAA4B,CAAC,mBAAmB,EAAE,yCAAyC,QAAQ,GAAG,CAAC,CAAC;AAC7I,CAAC,CAAC;AAEF,gFAAgF;AAChF,qFAAqF;AACrF,oFAAoF;AACpF,uFAAuF;AACvF,sEAAsE;AACtE,MAAM,uBAAuB,GAAG,CAAC,KAAc,EAAW,EAAE;IAC1D,MAAM,IAAI,GAAG,CAAC,KAA2B,aAA3B,KAAK,uBAAL,KAAK,CAAwB,IAAI,KAAI,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,CAAC,KAA2B,aAA3B,KAAK,uBAAL,KAAK,CAAwB,IAAI,KAAI,EAAE,CAAC;IAEtD,OAAO,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,QAAQ,CAAC;AACvF,CAAC,CAAC;AAEF,gFAAgF;AAChF,oFAAoF;AACpF,oFAAoF;AACpF,oFAAoF;AACpF,MAAM,WAAW,GAA4B;IAC3C,iBAAiB,EAAE,cAAc;IACjC,sBAAsB,EAAE,mBAAmB;CAC5C,CAAC;AAEF,MAAM,oBAAoB,GAAG,GAAG,EAAE,CAChC,MAAM,CAAC,WAAW,CAChB,+CAA8B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAC3C,IAAI;IACJ;QACE,OAAO,EAAE,OAAO;QAChB,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;QAC5B,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,KAAc,EAAE;KAClE;CACF,CAAC,CACH,CAAC;AAEJ,MAAM,qBAAqB,GAAG,GAAS,EAAE;IACvC,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,IAAA,cAAI,EAAC;QACH,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,oBAAoB,EAAE;KAC/B,CAAC,CAAC;IACH,eAAe,GAAG,IAAI,CAAC;AACzB,CAAC,CAAC;AAEF,gFAAgF;AAChF,oFAAoF;AACpF,gFAAgF;AAChF,mFAAmF;AACnF,wEAAwE;AACxE,MAAM,gBAAgB,GAAG,CAAO,OAAuC,EAAE,QAAsC,EAAmB,EAAE;;IAClI,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,yBAAyB,CAAC;IACtF,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrF,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/D,MAAM,OAAO,CAAC,GAAG,CACf,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAO,IAAI,EAAE,EAAE;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QACpD,+EAA+E;QAC/E,gFAAgF;QAChF,+DAA+D;QAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEtE,kFAAkF;QAClF,gFAAgF;QAChF,iFAAiF;QACjF,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1F,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC,CAAA,CAAC,CACH,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,gBAAgB,GAAG,IAAA,sBAAa,EAAC,SAAS,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,MAAA,MAAA,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,mCAAI,eAAe,CAAC,OAAO,mCAAI,eAAe,CAAC;IAExG,IAAI,OAAO,CAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,GAAG,CAAA,KAAK,UAAU,IAAI,OAAO,CAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,IAAI,CAAA,KAAK,UAAU,EAAE,CAAC;QAClF,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,mBAAmB,EAChD,IAAI,QAAQ,CAAC,KAAK,0DAA0D,QAAQ,CAAC,aAAa,GAAG,CACtG,CAAC;IACJ,CAAC;IAED,oFAAoF;IACpF,2EAA2E;IAC1E,UAAkB,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;IACxD,qBAAqB,EAAE,CAAC;IAExB,MAAM,WAAW,GAAG,GAAG,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClE,IAAA,yBAAe,EAAC;QACd;YACE,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,QAAQ;YACd,eAAe,EAAE,QAAQ,CAAC,aAAa;SACxC;KACF,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACrB,CAAC,CAAA,CAAC;AAEF,gFAAgF;AAChF,uFAAuF;AACvF,0FAA0F;AAC1F,MAAM,UAAU,GAAG,CAAO,SAAoB,EAAE,QAAgB,EAAE,OAA+B,EAAuB,EAAE;IACxH,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAEpD,IAAI,QAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,yBAAyB,QAAQ,2CAA2C,CAAC,CAAC;YAC1F,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IACE,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,aAAa,CAAA;QACxB,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,CAAA;QACf,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,KAAK,CAAA;QAChB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,KAAK,CAAC;QAC/B,OAAO,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,OAAO,CAAA,KAAK,QAAQ;QACrC,QAAQ,CAAC,OAAO,KAAK,IAAI,EACzB,CAAC;QACD,MAAM,IAAI,mDAAwB,CAAC,uDAA4B,CAAC,eAAe,EAAE,6CAA6C,QAAQ,GAAG,CAAC,CAAC;IAC7I,CAAC;IAED,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,KAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACpD,CAAC,CAAA,CAAC;AAEF,wFAAwF;AACxF,sFAAsF;AACtF,yEAAyE;AACzE,MAAM,YAAY,GAAG,CAAC,SAAoB,EAAE,QAAgB,EAAuB,EAAE;IACnF,IAAI,aAAa,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;QAC/C,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,eAAe,GAAG,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC;aAC7D,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACd,aAAa,GAAG,KAAK,CAAC;YACtB,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,4EAA4E;YAC5E,sEAAsE;YACtE,OAAO,CAAC,IAAI,CAAC,6DAA6D,EAAE,KAAK,CAAC,CAAC;YACnF,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;YAC3C,aAAa,GAAG,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACtD,OAAO,aAAa,CAAC;QACvB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,eAAe,GAAG,SAAS,CAAC;QAC9B,CAAC,CAAC,CAAC;IACP,CAAC;IAED,mFAAmF;IACnF,eAAe;IACf,OAAO,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;AAC1E,CAAC,CAAC;AAEF,gFAAgF;AAChF,qFAAqF;AACrF,qFAAqF;AACrF,yEAAyE;AAClE,MAAM,kBAAkB,GAAG,CAAgB,SAAoB,EAAE,kBAAsC,EAA0B,EAAE;IACxI,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,YAAY,GAAG,IAAA,uDAAqC,EAAC,kBAAkB,CAAC,CAAC;QAC/E,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,2CAA2C,YAAY,8BAA8B,CAAC,CAAC;YACpG,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAA,oBAAU,EAAoB,GAAG,UAAU,CAAC,WAAW,IAAI,UAAU,EAAE,CAAC,CAAC;QAEpG,MAAM,SAAS,GAAG,8BAAY,CAAC,kCAAkC,CAAC,kBAAkB,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAG,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,mDAAwB,CAChC,uDAA4B,CAAC,gBAAgB,EAC7C,UAAU,SAAS,4CAA4C,UAAU,GAAG,CAC7E,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sEAAsE;QACtE,OAAO,CAAC,IAAI,CAAC,yDAAyD,EAAE,KAAK,CAAC,CAAC;QAC/E,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAA,CAAC;AApCW,QAAA,kBAAkB,sBAoC7B","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport * as quidproquoCore from 'quidproquo-core';\nimport { getFederatedKeyFromQpqFunctionRuntime, QPQConfig, qpqCoreUtils, QpqFunctionRuntime } from 'quidproquo-core';\nimport * as quidproquoWebserver from 'quidproquo-webserver';\n\nimport * as fs from 'fs';\nimport { createRequire } from 'module';\nimport * as path from 'path';\nimport { fileURLToPath } from 'url';\nimport { GetObjectCommand, S3Client } from '@aws-sdk/client-s3';\nimport { init, loadRemote, registerRemotes } from '@module-federation/enhanced/runtime';\n\nimport { createAwsClient } from '../createAwsClient';\nimport { FederatedModuleLoadError, FederatedModuleLoadErrorCode } from './FederatedModuleLoadError';\nimport { FederatedModuleStoreManifest } from './FederatedModuleStoreManifest';\nimport { FEDERATED_SHARED_PACKAGE_NAMES } from './sharedPackages';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// loadFederatedStory — the RUNTIME half of module federation on lambda. Given a\n// QpqFunctionRuntime, it returns the published story function from the service's\n// code store, or undefined so dynamicModuleLoader falls back to the bundled copy.\n//\n// WHERE THE STORE COMES FROM\n//   process.env.federatedCodeStoreUrl = \"s3://<bucket>/<service>\" is set on every\n//   lambda by the CDK Function construct when the service declared\n//   defineFederatedModuleStore(...). The build/publish half (quidproquo-deploy-webpack)\n//   put the artifacts there. The two halves agree via FederatedModuleStoreManifest and\n//   the machine-independent key getFederatedKeyFromQpqFunctionRuntime (in core).\n//\n// FLOW (per lambda container)\n//   loadFederatedStory(runtime)\n//     └─ resolveStore()                 cache the store decision; re-probe on a TTL\n//         └─ probeStore()               read manifest.json; new hash? -> loadStoreVersion()\n//             └─ loadStoreVersion()     sync files to /tmp, require container, register w/ MF\n//     └─ manifest.exposes[key]          machine-independent runtime key -> expose path\n//     └─ loadRemote(container/expose)   MF hands back the module; return module[storyName]\n//\n// CACHING (state below): a resolved 'available' store is served instantly from memory;\n// the manifest is re-checked in the BACKGROUND every recheck interval so a warm\n// container picks up a newly published version without a redeploy. Every miss or error\n// returns undefined -> the caller uses the statically bundled module instead.\n// ─────────────────────────────────────────────────────────────────────────────\n\n// ── Module-level cache (per lambda execution environment / warm container) ───────\n// This state persists across invocations in the same container. resetFederatedModule-\n// StoreCache() clears it (tests only). 'available' carries the loaded manifest + the\n// MF remote name to loadRemote from; 'unavailable' means \"run the bundled fallback\".\ntype StoreState = { available: true; manifest: FederatedModuleStoreManifest; runtimeName: string } | { available: false };\n\n// How long a resolved state is served before the manifest is re-checked for a new\n// version. Overridable per service (defineFederatedModuleStore recheckMs -> this env).\n// Lower = faster pickup of new publishes at the cost of one small S3 GET per container\n// per interval. The re-check runs in the BACKGROUND so it never blocks a request.\nconst DEFAULT_RECHECK_MS = 60_000;\n\nconst getRecheckMs = (): number => {\n  const raw = process.env.federatedCodeStoreRecheckMs;\n  const parsed = raw ? parseInt(raw, 10) : NaN;\n  return Number.isFinite(parsed) && parsed >= 0 ? parsed : DEFAULT_RECHECK_MS;\n};\n\nlet resolvedState: StoreState | undefined;\nlet recheckAfter = 0;\nlet inflightResolve: Promise<StoreState> | undefined;\nlet hostInitialised = false;\n\n// Test seam - forces the next call to re-resolve the store from env.\nexport const resetFederatedModuleStoreCache = (): void => {\n  resolvedState = undefined;\n  recheckAfter = 0;\n  inflightResolve = undefined;\n};\n\n// ── Transport ────────────────────────────────────────────────────────────────\n// Returns a function that reads a path RELATIVE to the store (e.g. 'manifest.json'\n// or '<hash>/remoteEntry.js'). Two backends: s3:// for real deploys, file:// for\n// local/dev and tests. The store URL already includes the per-service prefix, so\n// callers pass only the in-service relative path.\nconst getFileFetcher = (storeUrl: string, qpqConfig: QPQConfig): ((relativePath: string) => Promise<Buffer>) => {\n  if (storeUrl.startsWith('s3://')) {\n    const url = new URL(storeUrl);\n    const bucketName = url.host;\n    const keyPrefix = url.pathname.replace(/^\\/|\\/$/g, '');\n    const region = qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig);\n    // Pin the owner so a same-name bucket in another account can't be squatted to\n    // serve code we'd then require() with the service role's credentials.\n    const expectedBucketOwner = qpqConfigAwsUtils.getApplicationModuleDeployAccountId(qpqConfig);\n    const s3Client = createAwsClient(S3Client, { region });\n\n    return async (relativePath: string): Promise<Buffer> => {\n      const response = await s3Client.send(\n        new GetObjectCommand({\n          Bucket: bucketName,\n          Key: keyPrefix ? `${keyPrefix}/${relativePath}` : relativePath,\n          ExpectedBucketOwner: expectedBucketOwner,\n        }),\n      );\n\n      const bytes = await response.Body?.transformToByteArray();\n      if (!bytes) {\n        throw new FederatedModuleLoadError(FederatedModuleLoadErrorCode.containerLoadFailed, `empty response reading [${relativePath}]`);\n      }\n\n      return Buffer.from(bytes);\n    };\n  }\n\n  if (storeUrl.startsWith('file://')) {\n    const baseDirectory = fileURLToPath(storeUrl.endsWith('/') ? storeUrl : `${storeUrl}/`);\n\n    return async (relativePath: string): Promise<Buffer> => fs.promises.readFile(path.join(baseDirectory, relativePath));\n  }\n\n  throw new FederatedModuleLoadError(FederatedModuleLoadErrorCode.unsupportedStoreUrl, `unsupported federated code store url [${storeUrl}]`);\n};\n\n// \"Nothing published yet\" is a legitimate not-found: the manifest key is absent\n// (NoSuchKey/NotFound) or the store bucket isn't created yet, which happens normally\n// when a lambda cold-starts between deploy phases (NoSuchBucket). We do NOT include\n// AccessDenied: a permission failure is a real misconfiguration and must surface (as a\n// warning, and be retried) rather than masquerade as 'not published'.\nconst isManifestNotFoundError = (error: unknown): boolean => {\n  const name = (error as { name?: string })?.name || '';\n  const code = (error as { code?: string })?.code || '';\n\n  return ['NoSuchKey', 'NotFound', 'NoSuchBucket'].includes(name) || code === 'ENOENT';\n};\n\n// ── Module-federation shared scope ───────────────────────────────────────────\n// The host provides the framework packages to the container's share scope so remote\n// story code resolves the SAME module instances as the bundled runtime. The package\n// list is shared with the remote build so the two can't drift (see sharedPackages).\nconst SHARED_LIBS: Record<string, unknown> = {\n  'quidproquo-core': quidproquoCore,\n  'quidproquo-webserver': quidproquoWebserver,\n};\n\nconst getHostSharedModules = () =>\n  Object.fromEntries(\n    FEDERATED_SHARED_PACKAGE_NAMES.map((name) => [\n      name,\n      {\n        version: '0.0.0',\n        lib: () => SHARED_LIBS[name],\n        shareConfig: { singleton: true, requiredVersion: false as const },\n      },\n    ]),\n  );\n\nconst ensureHostInitialised = (): void => {\n  if (hostInitialised) {\n    return;\n  }\n  init({\n    name: 'qpq_federated_host',\n    remotes: [],\n    shared: getHostSharedModules(),\n  });\n  hostInitialised = true;\n};\n\n// ── Version loading ──────────────────────────────────────────────────────────\n// Downloads a manifest's files (atomically) and registers the container with the MF\n// runtime under a HASH-UNIQUE remote name, so loadRemote can't serve a previous\n// version's module from its cache when the hash changes. Returns the runtime name.\n// This is the step that actually puts a new version's code into effect.\nconst loadStoreVersion = async (getFile: (p: string) => Promise<Buffer>, manifest: FederatedModuleStoreManifest): Promise<string> => {\n  const cacheRoot = process.env.federatedCodeStoreCacheDir || '/tmp/qpq-federated-code';\n  const versionDirectory = path.join(cacheRoot, manifest.containerName, manifest.hash);\n  await fs.promises.mkdir(versionDirectory, { recursive: true });\n\n  await Promise.all(\n    manifest.files.map(async (file) => {\n      const localPath = path.join(versionDirectory, file);\n      // Files are immutable under their hash dir AND only ever appear via the atomic\n      // rename below, so an existing file is always complete and valid - this is what\n      // lets a re-check of an unchanged version skip re-downloading.\n      if (fs.existsSync(localPath)) {\n        return;\n      }\n\n      const data = await getFile(`${manifest.hash}/${file}`);\n      await fs.promises.mkdir(path.dirname(localPath), { recursive: true });\n\n      // Write to a temp name then rename: rename is atomic on the same filesystem, so a\n      // crash/timeout mid-write never leaves a truncated file that a later invocation\n      // would trust via the existsSync check above. The random suffix keeps concurrent\n      // writers in the SAME process (overlapping probes) off each other's temp file.\n      const tempPath = `${localPath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;\n      await fs.promises.writeFile(tempPath, data);\n      await fs.promises.rename(tempPath, localPath);\n    }),\n  );\n\n  const entryPath = path.join(versionDirectory, manifest.entry);\n  const containerRequire = createRequire(entryPath);\n  const containerModule = containerRequire(entryPath);\n  const container = containerModule[manifest.containerName] ?? containerModule.default ?? containerModule;\n\n  if (typeof container?.get !== 'function' || typeof container?.init !== 'function') {\n    throw new FederatedModuleLoadError(\n      FederatedModuleLoadErrorCode.containerLoadFailed,\n      `[${manifest.entry}] does not export a module federation container named [${manifest.containerName}]`,\n    );\n  }\n\n  // entryGlobalName is the container's real (build-time) library name; the registered\n  // remote name is hash-unique so each version is a distinct loadRemote key.\n  (globalThis as any)[manifest.containerName] = container;\n  ensureHostInitialised();\n\n  const runtimeName = `${manifest.containerName}__${manifest.hash}`;\n  registerRemotes([\n    {\n      name: runtimeName,\n      entry: entryPath,\n      type: 'global',\n      entryGlobalName: manifest.containerName,\n    },\n  ]);\n\n  return runtimeName;\n};\n\n// ── Probe & resolve (the caching state machine) ──────────────────────────────\n// Reads the manifest and decides the current state. If the hash is unchanged from what\n// we already loaded, keeps the existing container (no re-sync). Not-found -> unavailable.\nconst probeStore = async (qpqConfig: QPQConfig, storeUrl: string, current: StoreState | undefined): Promise<StoreState> => {\n  const getFile = getFileFetcher(storeUrl, qpqConfig);\n\n  let manifest: FederatedModuleStoreManifest;\n  try {\n    manifest = JSON.parse((await getFile('manifest.json')).toString('utf8'));\n  } catch (error) {\n    if (isManifestNotFoundError(error)) {\n      console.log(`federated code store [${storeUrl}] has no manifest - using bundled modules`);\n      return { available: false };\n    }\n    throw error;\n  }\n\n  if (\n    !manifest?.containerName ||\n    !manifest?.hash ||\n    !manifest?.entry ||\n    !Array.isArray(manifest?.files) ||\n    typeof manifest?.exposes !== 'object' ||\n    manifest.exposes === null\n  ) {\n    throw new FederatedModuleLoadError(FederatedModuleLoadErrorCode.manifestInvalid, `invalid manifest in federated code store [${storeUrl}]`);\n  }\n\n  if (current?.available && current.manifest.hash === manifest.hash) {\n    return current;\n  }\n\n  const runtimeName = await loadStoreVersion(getFile, manifest);\n  return { available: true, manifest, runtimeName };\n};\n\n// Resolves the store, re-checking the manifest after the recheck interval. The re-check\n// runs in the background: a stale-but-usable state is served immediately so a request\n// never blocks on S3; only the very first resolve (no state yet) awaits.\nconst resolveStore = (qpqConfig: QPQConfig, storeUrl: string): Promise<StoreState> => {\n  if (resolvedState && Date.now() < recheckAfter) {\n    return Promise.resolve(resolvedState);\n  }\n\n  if (!inflightResolve) {\n    inflightResolve = probeStore(qpqConfig, storeUrl, resolvedState)\n      .then((state) => {\n        resolvedState = state;\n        recheckAfter = Date.now() + getRecheckMs();\n        return state;\n      })\n      .catch((error) => {\n        // Back off and keep serving whatever we had (or unavailable). Surfaced as a\n        // warning so real errors (e.g. AccessDenied) are visible, not silent.\n        console.warn('federated code store check failed - keeping current modules', error);\n        recheckAfter = Date.now() + getRecheckMs();\n        resolvedState = resolvedState ?? { available: false };\n        return resolvedState;\n      })\n      .finally(() => {\n        inflightResolve = undefined;\n      });\n  }\n\n  // Serve the stale state instantly while the refresh happens; only block if we have\n  // nothing yet.\n  return resolvedState ? Promise.resolve(resolvedState) : inflightResolve;\n};\n\n// ── Public entry ─────────────────────────────────────────────────────────────\n// Called by dynamicModuleLoader for every story load. Returns the story function, or\n// undefined to signal \"use the bundled module\" (no store, nothing published, runtime\n// not exposed, or any error - availability always wins over federation).\nexport const loadFederatedStory = async <T = any>(qpqConfig: QPQConfig, qpqFunctionRuntime: QpqFunctionRuntime): Promise<T | undefined> => {\n  const storeUrl = process.env.federatedCodeStoreUrl;\n  if (!storeUrl) {\n    return undefined;\n  }\n\n  try {\n    const storeState = await resolveStore(qpqConfig, storeUrl);\n    if (!storeState.available) {\n      return undefined;\n    }\n\n    const federatedKey = getFederatedKeyFromQpqFunctionRuntime(qpqFunctionRuntime);\n    const exposePath = storeState.manifest.exposes[federatedKey];\n    if (!exposePath) {\n      console.warn(`federated code store has no module for [${federatedKey}] - using the bundled module`);\n      return undefined;\n    }\n\n    const remoteModule = await loadRemote<Record<string, T>>(`${storeState.runtimeName}/${exposePath}`);\n\n    const storyName = qpqCoreUtils.getStoryNameFromQpqFunctionRuntime(qpqFunctionRuntime);\n    const story = remoteModule?.[storyName];\n    if (!story) {\n      throw new FederatedModuleLoadError(\n        FederatedModuleLoadErrorCode.storyNotExported,\n        `story [${storyName}] is not exported from federated module [${exposePath}]`,\n      );\n    }\n\n    return story;\n  } catch (error) {\n    // Availability first: a broken store must never take the service down\n    console.warn('federated module load failed - using the bundled module', error);\n    return undefined;\n  }\n};\n"]}

package/lib/commonjs/logic/federatedModuleStore/sharedPackages.d.ts

@@ -0,0 +1 @@
+export declare const FEDERATED_SHARED_PACKAGE_NAMES: readonly ["quidproquo-core", "quidproquo-webserver"];

package/lib/commonjs/logic/federatedModuleStore/sharedPackages.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FEDERATED_SHARED_PACKAGE_NAMES = void 0;
+// The framework packages the lambda host provides to the module-federation share
+// scope, so a federated remote resolves the SAME module instances as the host
+// (instanceof checks and module-level state stay coherent). Single source of truth
+// for BOTH the host runtime (loadFederatedStory getHostSharedModules) and the
+// remote builds (quidproquo-deploy-webpack getWebpackConfigForQpqRemote and
+// quidproquo-deploy-rspack getRspackConfigForQpqRemote) — the lists must never
+// drift, or the remote would silently bundle its own copy.
+exports.FEDERATED_SHARED_PACKAGE_NAMES = ['quidproquo-core', 'quidproquo-webserver'];
+//# sourceMappingURL=sharedPackages.js.map

package/lib/commonjs/logic/federatedModuleStore/sharedPackages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharedPackages.js","sourceRoot":"","sources":["../../../../src/logic/federatedModuleStore/sharedPackages.ts"],"names":[],"mappings":";;;AAAA,iFAAiF;AACjF,8EAA8E;AAC9E,mFAAmF;AACnF,8EAA8E;AAC9E,4EAA4E;AAC5E,+EAA+E;AAC/E,2DAA2D;AAC9C,QAAA,8BAA8B,GAAG,CAAC,iBAAiB,EAAE,sBAAsB,CAAU,CAAC","sourcesContent":["// The framework packages the lambda host provides to the module-federation share\n// scope, so a federated remote resolves the SAME module instances as the host\n// (instanceof checks and module-level state stay coherent). Single source of truth\n// for BOTH the host runtime (loadFederatedStory getHostSharedModules) and the\n// remote builds (quidproquo-deploy-webpack getWebpackConfigForQpqRemote and\n// quidproquo-deploy-rspack getRspackConfigForQpqRemote) — the lists must never\n// drift, or the remote would silently bundle its own copy.\nexport const FEDERATED_SHARED_PACKAGE_NAMES = ['quidproquo-core', 'quidproquo-webserver'] as const;\n"]}

package/lib/commonjs/logic/index.d.ts

@@ -1 +1,2 @@
 export * from './cognito';
+export * from './federatedModuleStore';

package/lib/commonjs/logic/index.js

@@ -15,3 +15,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./cognito"), exports);
+__exportStar(require("./federatedModuleStore"), exports);
+//# sourceMappingURL=index.js.map

package/lib/commonjs/logic/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/logic/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,yDAAuC","sourcesContent":["export * from './cognito';\nexport * from './federatedModuleStore';\n"]}

package/lib/commonjs/logic/lambda/executeLambdaByName.js

@@ -36,3 +36,4 @@ const executeLambdaByName = (functionName, region, payload, isAsync) => __awaite
     return undefined;
 });
 exports.executeLambdaByName = executeLambdaByName;
+//# sourceMappingURL=executeLambdaByName.js.map

package/lib/commonjs/logic/lambda/executeLambdaByName.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executeLambdaByName.js","sourceRoot":"","sources":["../../../../src/logic/lambda/executeLambdaByName.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,0DAAqE;AAErE,wDAAqD;AAE9C,MAAM,mBAAmB,GAAG,CAAU,YAAoB,EAAE,MAAc,EAAE,OAAY,EAAE,OAAgB,EAA0B,EAAE;IAC3I,MAAM,YAAY,GAAG,IAAA,iCAAe,EAAC,4BAAY,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAE/D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAE/D,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CACtC,IAAI,6BAAa,CAAC;QAChB,YAAY,EAAE,YAAY;QAC1B,OAAO,EAAE,cAAc;QACvB,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB;KACtD,CAAC,CACH,CAAC;IAEF,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC3B,gDAAgD;QAChD,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,CAAC,aAAa,cAAc,YAAY,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAA,CAAC;AA7BW,QAAA,mBAAmB,uBA6B9B","sourcesContent":["import { InvokeCommand, LambdaClient } from '@aws-sdk/client-lambda';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const executeLambdaByName = async <R>(functionName: string, region: string, payload: any, isAsync: boolean): Promise<R | undefined> => {\n  const lambdaClient = createAwsClient(LambdaClient, { region });\n\n  const encoder = new TextEncoder();\n  const encodedPayload = encoder.encode(JSON.stringify(payload));\n\n  const response = await lambdaClient.send(\n    new InvokeCommand({\n      FunctionName: functionName,\n      Payload: encodedPayload,\n      InvocationType: isAsync ? 'Event' : 'RequestResponse',\n    }),\n  );\n\n  if (response.FunctionError) {\n    // Get more details about the error if available\n    const errorDetails = response.Payload ? new TextDecoder().decode(response.Payload) : '';\n    throw new Error(`Lambda Error: ${response.FunctionError}. Details: ${errorDetails}`);\n  }\n\n  if (!isAsync && response.Payload) {\n    const jsonString = new TextDecoder().decode(response.Payload);\n    if (jsonString) {\n      const object = JSON.parse(jsonString);\n      return object;\n    }\n  }\n\n  return undefined;\n};\n"]}

package/lib/commonjs/logic/neptune/getNeptuneEndpoints.js

@@ -33,3 +33,4 @@ const getNeptuneEndpoints = (clusterIdentifier, region) => __awaiter(void 0, voi
     }
 });
 exports.getNeptuneEndpoints = getNeptuneEndpoints;
+//# sourceMappingURL=getNeptuneEndpoints.js.map

package/lib/commonjs/logic/neptune/getNeptuneEndpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getNeptuneEndpoints.js","sourceRoot":"","sources":["../../../../src/logic/neptune/getNeptuneEndpoints.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,4DAAmF;AAGnF,wDAAqD;AAE9C,MAAM,mBAAmB,GAAG,CAAO,iBAAyB,EAAE,MAAc,EAAmC,EAAE;IACtH,MAAM,aAAa,GAAG,IAAA,iCAAe,EAAC,8BAAa,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEjE,MAAM,OAAO,GAAG,IAAI,0CAAyB,CAAC;QAC5C,mBAAmB,EAAE,iBAAiB;KACvC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnD,IAAI,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAEvC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACnH,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAE9H,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;QACzC,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC,CAAA,CAAC;AAxBW,QAAA,mBAAmB,uBAwB9B","sourcesContent":["import { DescribeDBClustersCommand, NeptuneClient } from '@aws-sdk/client-neptune';\n\nimport { GraphDatabaseEndpoints } from '../../getActionProcessor/core/graphDatabase/customActions/actions';\nimport { createAwsClient } from '../createAwsClient';\n\nexport const getNeptuneEndpoints = async (clusterIdentifier: string, region: string): Promise<GraphDatabaseEndpoints> => {\n  const neptuneClient = createAwsClient(NeptuneClient, { region });\n\n  const command = new DescribeDBClustersCommand({\n    DBClusterIdentifier: clusterIdentifier,\n  });\n\n  try {\n    const response = await neptuneClient.send(command);\n\n    if (response.DBClusters && response.DBClusters.length > 0) {\n      const cluster = response.DBClusters[0];\n\n      const writeEndpoint = cluster.Endpoint && cluster.Port ? `https://${cluster.Endpoint}:${cluster.Port}` : undefined;\n      const readEndpoint = cluster.ReaderEndpoint && cluster.Port ? `https://${cluster.ReaderEndpoint}:${cluster.Port}` : undefined;\n\n      return { writeEndpoint, readEndpoint };\n    }\n\n    return {};\n  } catch (error) {\n    console.error('Error fetching Neptune cluster endpoints:', error);\n    throw new Error(`Failed to retrieve Neptune endpoints: ${error}`);\n  }\n};\n"]}

package/lib/commonjs/logic/neptune/index.js

@@ -15,3 +15,4 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./getNeptuneEndpoints"), exports);
+//# sourceMappingURL=index.js.map

package/lib/commonjs/logic/neptune/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/logic/neptune/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC","sourcesContent":["export * from './getNeptuneEndpoints';\n"]}

package/lib/commonjs/logic/parametersManager/getParameter.js

@@ -21,3 +21,4 @@ exports.getParameter = (0, memoFuncAsync_1.memoFuncAsync)((parameterName, region
     }));
     return ((_a = response.Parameter) === null || _a === void 0 ? void 0 : _a.Value) || '';
 }), 60);
+//# sourceMappingURL=getParameter.js.map

package/lib/commonjs/logic/parametersManager/getParameter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getParameter.js","sourceRoot":"","sources":["../../../../src/logic/parametersManager/getParameter.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oDAAqE;AAErE,0DAAuD;AACvD,wDAAqD;AAExC,QAAA,YAAY,GAAG,IAAA,6BAAa,EAAC,CAAO,aAAqB,EAAE,MAAc,EAAmB,EAAE;;IACzG,MAAM,SAAS,GAAG,IAAA,iCAAe,EAAC,sBAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CACnC,IAAI,gCAAmB,CAAC;QACtB,IAAI,EAAE,aAAa;KACpB,CAAC,CACH,CAAC;IAEF,OAAO,CAAA,MAAA,QAAQ,CAAC,SAAS,0CAAE,KAAK,KAAI,EAAE,CAAC;AACzC,CAAC,CAAA,EAAE,EAAE,CAAC,CAAC","sourcesContent":["import { GetParameterCommand, SSMClient } from '@aws-sdk/client-ssm';\n\nimport { memoFuncAsync } from '../cache/memoFuncAsync';\nimport { createAwsClient } from '../createAwsClient';\n\nexport const getParameter = memoFuncAsync(async (parameterName: string, region: string): Promise<string> => {\n  const ssmClient = createAwsClient(SSMClient, { region });\n\n  const response = await ssmClient.send(\n    new GetParameterCommand({\n      Name: parameterName,\n    }),\n  );\n\n  return response.Parameter?.Value || '';\n}, 60);\n"]}

package/lib/commonjs/logic/parametersManager/getParameters.js

@@ -21,3 +21,4 @@ exports.getParameters = (0, memoFuncAsync_1.memoFuncAsync)((parameterNames, regi
     const resolvedParams = response.Parameters || [];
     return parameterNames.map((pn) => { var _a; return ((_a = resolvedParams.find((rp) => rp.Name == pn)) === null || _a === void 0 ? void 0 : _a.Value) || ''; });
 }), 60);
+//# sourceMappingURL=getParameters.js.map

package/lib/commonjs/logic/parametersManager/getParameters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getParameters.js","sourceRoot":"","sources":["../../../../src/logic/parametersManager/getParameters.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oDAAsE;AAEtE,0DAAuD;AACvD,wDAAqD;AAExC,QAAA,aAAa,GAAG,IAAA,6BAAa,EAAC,CAAO,cAAwB,EAAE,MAAc,EAAqB,EAAE;IAC/G,MAAM,SAAS,GAAG,IAAA,iCAAe,EAAC,sBAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CACnC,IAAI,iCAAoB,CAAC;QACvB,KAAK,EAAE,cAAc;KACtB,CAAC,CACH,CAAC;IAEF,MAAM,cAAc,GAAG,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;IAEjD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,WAAC,OAAA,CAAA,MAAA,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,0CAAE,KAAK,KAAI,EAAE,CAAA,EAAA,CAAC,CAAC;AAC7F,CAAC,CAAA,EAAE,EAAE,CAAC,CAAC","sourcesContent":["import { GetParametersCommand, SSMClient } from '@aws-sdk/client-ssm';\n\nimport { memoFuncAsync } from '../cache/memoFuncAsync';\nimport { createAwsClient } from '../createAwsClient';\n\nexport const getParameters = memoFuncAsync(async (parameterNames: string[], region: string): Promise<string[]> => {\n  const ssmClient = createAwsClient(SSMClient, { region });\n\n  const response = await ssmClient.send(\n    new GetParametersCommand({\n      Names: parameterNames,\n    }),\n  );\n\n  const resolvedParams = response.Parameters || [];\n\n  return parameterNames.map((pn) => resolvedParams.find((rp) => rp.Name == pn)?.Value || '');\n}, 60);\n"]}

package/lib/commonjs/logic/parametersManager/setParameter.js

@@ -22,3 +22,4 @@ const setParameter = (parameterName, region, value) => __awaiter(void 0, void 0,
     }));
 });
 exports.setParameter = setParameter;
+//# sourceMappingURL=setParameter.js.map

package/lib/commonjs/logic/parametersManager/setParameter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setParameter.js","sourceRoot":"","sources":["../../../../src/logic/parametersManager/setParameter.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oDAAoF;AAEpF,wDAAqD;AAE9C,MAAM,YAAY,GAAG,CAAO,aAAqB,EAAE,MAAc,EAAE,KAAa,EAAiB,EAAE;IACxG,MAAM,SAAS,GAAG,IAAA,iCAAe,EAAC,sBAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEzD,MAAM,SAAS,CAAC,IAAI,CAClB,IAAI,gCAAmB,CAAC;QACtB,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,KAAK;QACZ,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,0BAAa,CAAC,MAAM;KAC3B,CAAC,CACH,CAAC;AACJ,CAAC,CAAA,CAAC;AAXW,QAAA,YAAY,gBAWvB","sourcesContent":["import { ParameterType, PutParameterCommand, SSMClient } from '@aws-sdk/client-ssm';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const setParameter = async (parameterName: string, region: string, value: string): Promise<void> => {\n  const ssmClient = createAwsClient(SSMClient, { region });\n\n  await ssmClient.send(\n    new PutParameterCommand({\n      Name: parameterName,\n      Value: value,\n      Overwrite: true,\n      Type: ParameterType.STRING,\n    }),\n  );\n};\n"]}

package/lib/commonjs/logic/s3/deleteFiles.js

@@ -25,3 +25,4 @@ const deleteFiles = (drive, filepaths, region) => __awaiter(void 0, void 0, void
     return (response.Errors || []).map((e) => e.Key || '');
 });
 exports.deleteFiles = deleteFiles;
+//# sourceMappingURL=deleteFiles.js.map

package/lib/commonjs/logic/s3/deleteFiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deleteFiles.js","sourceRoot":"","sources":["../../../../src/logic/s3/deleteFiles.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,kDAA+F;AAE/F,wDAAqD;AAE9C,MAAM,WAAW,GAAG,CAAO,KAAa,EAAE,SAAmB,EAAE,MAAc,EAAqB,EAAE;IACzG,MAAM,QAAQ,GAAG,IAAA,iCAAe,EAAC,oBAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvD,MAAM,YAAY,GAA8B;QAC9C,MAAM,EAAE,KAAK;QACb,MAAM,EAAE;YACN,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;SAC9C;KACF,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,gCAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;IAE7E,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC,CAAA,CAAC;AAdW,QAAA,WAAW,eActB","sourcesContent":["import { DeleteObjectsCommand, DeleteObjectsCommandInput, S3Client } from '@aws-sdk/client-s3';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const deleteFiles = async (drive: string, filepaths: string[], region: string): Promise<string[]> => {\n  const s3Client = createAwsClient(S3Client, { region });\n\n  const bucketParams: DeleteObjectsCommandInput = {\n    Bucket: drive,\n    Delete: {\n      Quiet: true,\n      Objects: filepaths.map((fp) => ({ Key: fp })),\n    },\n  };\n\n  const response = await s3Client.send(new DeleteObjectsCommand(bucketParams));\n\n  return (response.Errors || []).map((e) => e.Key || '');\n};\n"]}

package/lib/commonjs/logic/s3/generatePresignedUploadUrl.js

@@ -64,3 +64,4 @@ const generatePresignedUploadUrl = (bucketName, objectKey, region, expirationMs,
     return url;
 });
 exports.generatePresignedUploadUrl = generatePresignedUploadUrl;
+//# sourceMappingURL=generatePresignedUploadUrl.js.map

package/lib/commonjs/logic/s3/generatePresignedUploadUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generatePresignedUploadUrl.js","sourceRoot":"","sources":["../../../../src/logic/s3/generatePresignedUploadUrl.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,kDAAgE;AAChE,wEAA6D;AAE7D,oEAAoE;AACpE,wDAAqD;AAErD,wDAAwD;AACxD,wBAAwB;AACxB,uBAAuB;AACvB,oBAAoB;AACpB,0BAA0B;AAC1B,qCAAqC;AACrC,sCAAsC;AACtC,mEAAmE;AACnE,4DAA4D;AAE5D,kCAAkC;AAElC,8CAA8C;AAC9C,uBAAuB;AACvB,6DAA6D;AAC7D,MAAM;AAEN,iDAAiD;AACjD,wBAAwB;AACxB,kEAAkE;AAClE,MAAM;AAEN,gEAAgE;AAChE,0BAA0B;AAC1B,sBAAsB;AACtB,8BAA8B;AAC9B,gDAAgD;AAChD,QAAQ;AAER,aAAa;AACb,8BAA8B;AAC9B,mCAAmC;AACnC,OAAO;AACP,KAAK;AAEE,MAAM,0BAA0B,GAAG,CACxC,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,YAAoB,EACpB,aAAsB,EACtB,WAAoB,EACH,EAAE;IACnB,oFAAoF;IACpF,yFAAyF;IACzF,2FAA2F;IAC3F,+FAA+F;IAC/F,MAAM,QAAQ,GAAG,IAAA,iCAAe,EAAC,oBAAQ,EAAE;QACzC,MAAM;QACN,0BAA0B,EAAE,eAAe;KAC5C,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,IAAI,4BAAgB,CAAC;QAC5C,MAAM,EAAE,UAAU;QAClB,GAAG,EAAE,SAAS;QACd,WAAW,EAAE,WAAW;QAExB,QAAQ,kCACH,CAAC,aAAa,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC,KACzD,kBAAkB,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,GAC1C;KACF,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,IAAA,mCAAY,EAAC,QAAQ,EAAE,gBAAgB,EAAE;QACzD,SAAS,EAAE,YAAY,GAAG,IAAI;KAC/B,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC,CAAA,CAAC;AAjCW,QAAA,0BAA0B,8BAiCrC","sourcesContent":["import { PutObjectCommand, S3Client } from '@aws-sdk/client-s3';\nimport { getSignedUrl } from '@aws-sdk/s3-request-presigner';\n\n// import { createPresignedPost } from '@aws-sdk/s3-presigned-post';\nimport { createAwsClient } from '../createAwsClient';\n\n// export const generatePresignedUploadFormUrl = async (\n//   bucketName: string,\n//   objectKey: string,\n//   region: string,\n//   expirationMs: number,\n//   contentType: string | undefined,\n//   maxSizeBytes?: number | undefined\n// ): Promise<{ url: string; fields: Record<string, string> }> => {\n//   const s3Client = createAwsClient(S3Client, { region });\n\n//   const conditions: any[] = [];\n\n//   // Add content type condition if provided\n//   if (contentType) {\n//     conditions.push(['eq', '$Content-Type', contentType]);\n//   }\n\n//   // Add file size limit condition if provided\n//   if (maxSizeBytes) {\n//     conditions.push(['content-length-range', 0, maxSizeBytes]);\n//   }\n\n//   const presignedPost = await createPresignedPost(s3Client, {\n//     Bucket: bucketName,\n//     Key: objectKey,\n//     Conditions: conditions,\n//     Expires: Math.floor(expirationMs / 1000),\n//   });\n\n//   return {\n//     url: presignedPost.url,\n//     fields: presignedPost.fields\n//   };\n// };\n\nexport const generatePresignedUploadUrl = async (\n  bucketName: string,\n  objectKey: string,\n  region: string,\n  expirationMs: number,\n  correlationId?: string,\n  contentType?: string,\n): Promise<string> => {\n  // WHEN_REQUIRED disables the SDK v3 default request checksum (CRC32). Otherwise the\n  // presigner bakes an empty-body checksum (x-amz-checksum-crc32=AAAAAA==) into the signed\n  // URL, which never matches the real body the browser PUTs — S3 then rejects the upload and\n  // the failure surfaces in the browser as a CORS error (the error response has no ACAO header).\n  const s3Client = createAwsClient(S3Client, {\n    region,\n    requestChecksumCalculation: 'WHEN_REQUIRED',\n  });\n\n  const putObjectCommand = new PutObjectCommand({\n    Bucket: bucketName,\n    Key: objectKey,\n    ContentType: contentType,\n\n    Metadata: {\n      ...(correlationId && { 'correlation-id': correlationId }),\n      'upload-timestamp': Date.now().toString(),\n    },\n  });\n\n  const url = await getSignedUrl(s3Client, putObjectCommand, {\n    expiresIn: expirationMs / 1000,\n  });\n\n  return url;\n};\n"]}

package/lib/commonjs/logic/s3/generatePresignedUrl.js

@@ -32,3 +32,4 @@ const generatePresignedUrl = (bucketName, objectKey, region, expirationMs) => __
     }
 });
 exports.generatePresignedUrl = generatePresignedUrl;
+//# sourceMappingURL=generatePresignedUrl.js.map

package/lib/commonjs/logic/s3/generatePresignedUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generatePresignedUrl.js","sourceRoot":"","sources":["../../../../src/logic/s3/generatePresignedUrl.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,kDAAgE;AAChE,wEAA6D;AAE7D,wDAAqD;AAE9C,MAAM,oBAAoB,GAAG,CAAO,UAAkB,EAAE,SAAiB,EAAE,MAAc,EAAE,YAAoB,EAAmB,EAAE;IACzI,MAAM,QAAQ,GAAG,IAAA,iCAAe,EAAC,oBAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvD,oEAAoE;IACpE,MAAM,gBAAgB,GAAG,IAAI,4BAAgB,CAAC;QAC5C,MAAM,EAAE,UAAU;QAClB,GAAG,EAAE,SAAS;KACf,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAA,mCAAY,EAAC,QAAQ,EAAE,gBAAgB,EAAE;YACzD,SAAS,EAAE,YAAY,GAAG,IAAI;SAC/B,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QACvD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAA,CAAC;AAlBW,QAAA,oBAAoB,wBAkB/B","sourcesContent":["import { GetObjectCommand, S3Client } from '@aws-sdk/client-s3';\nimport { getSignedUrl } from '@aws-sdk/s3-request-presigner';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const generatePresignedUrl = async (bucketName: string, objectKey: string, region: string, expirationMs: number): Promise<string> => {\n  const s3Client = createAwsClient(S3Client, { region });\n\n  // Define the command for getting an object, which will be presigned\n  const getObjectCommand = new GetObjectCommand({\n    Bucket: bucketName,\n    Key: objectKey,\n  });\n\n  try {\n    const url = await getSignedUrl(s3Client, getObjectCommand, {\n      expiresIn: expirationMs / 1000,\n    });\n    return url;\n  } catch (error) {\n    console.error('Error generating presigned URL', error);\n    throw error;\n  }\n};\n"]}

package/lib/commonjs/logic/s3/getObjectStorageClass.js

@@ -37,3 +37,4 @@ const getObjectStorageClass = (bucketName, key, region) => __awaiter(void 0, voi
     }
 });
 exports.getObjectStorageClass = getObjectStorageClass;
+//# sourceMappingURL=getObjectStorageClass.js.map

package/lib/commonjs/logic/s3/getObjectStorageClass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getObjectStorageClass.js","sourceRoot":"","sources":["../../../../src/logic/s3/getObjectStorageClass.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,kDAAiE;AAEjE,wDAAqD;AAE9C,MAAM,qBAAqB,GAAG,CAAO,UAAkB,EAAE,GAAW,EAAE,MAAc,EAAwC,EAAE;IACnI,MAAM,QAAQ,GAAG,IAAA,iCAAe,EAAC,oBAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAClC,IAAI,6BAAiB,CAAC;QACpB,GAAG,EAAE,GAAG;QACR,MAAM,EAAE,UAAU;KACnB,CAAC,CACH,CAAC;IAEF,4CAA4C;IAC5C,QAAQ,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC9B,KAAK,SAAS,CAAC;QACf,KAAK,YAAY,CAAC;QAClB,KAAK,cAAc,CAAC;QACpB,KAAK,YAAY,CAAC;QAClB,KAAK,iBAAiB,CAAC;QACvB,KAAK,UAAU,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,cAAc,CAAC;QAExB,KAAK,aAAa,CAAC;QACnB,KAAK,UAAU,CAAC;QAChB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,oBAAoB,CAAC;QAC1B;YACE,OAAO,UAAU,CAAC;IACtB,CAAC;AACH,CAAC,CAAA,CAAC;AA5BW,QAAA,qBAAqB,yBA4BhC","sourcesContent":["import { HeadObjectCommand, S3Client } from '@aws-sdk/client-s3';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const getObjectStorageClass = async (bucketName: string, key: string, region: string): Promise<'cold_storage' | 'standard'> => {\n  const s3Client = createAwsClient(S3Client, { region });\n\n  const response = await s3Client.send(\n    new HeadObjectCommand({\n      Key: key,\n      Bucket: bucketName,\n    }),\n  );\n\n  // Map AWS StorageClass to our custom labels\n  switch (response.StorageClass) {\n    case 'GLACIER':\n    case 'GLACIER_IR':\n    case 'DEEP_ARCHIVE':\n    case 'ONEZONE_IA':\n    case 'EXPRESS_ONEZONE':\n    case 'OUTPOSTS':\n    case 'SNOW':\n      return 'cold_storage';\n\n    case 'STANDARD_IA':\n    case 'STANDARD':\n    case 'INTELLIGENT_TIERING':\n    case 'REDUCED_REDUNDANCY':\n    default:\n      return 'standard';\n  }\n};\n"]}

package/lib/commonjs/logic/s3/listFiles.js

@@ -53,3 +53,4 @@ const listFiles = (bucketName_1, region_1, ...args_1) => __awaiter(void 0, [buck
     };
 });
 exports.listFiles = listFiles;
+//# sourceMappingURL=listFiles.js.map

package/lib/commonjs/logic/s3/listFiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listFiles.js","sourceRoot":"","sources":["../../../../src/logic/s3/listFiles.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAoD;AAEpD,kDAA8C;AAC9C,kDAAqF;AAErF,wDAAqD;AAa9C,MAAM,SAAS,GAAG,oCAMF,EAAE,2EALvB,UAAkB,EAClB,MAAc,EACd,SAAiB,EAAE,EACnB,UAAkB,IAAI,EACtB,SAAkB;IAElB,MAAM,eAAe,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,mCAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,mCAAiB,EAAE,CAAC;IAC7G,MAAM,YAAY,GAA8B;QAC9C,MAAM,EAAE,UAAU;QAClB,SAAS,EAAE,mCAAiB;QAC5B,MAAM,EAAE,eAAe;QACvB,iBAAiB,EAAE,SAAS;QAC5B,OAAO,EAAE,OAAO;KACjB,CAAC;IAEF,+DAA+D;IAC/D,IAAI,KAAK,GAAiB,EAAE,CAAC;IAE7B,MAAM,QAAQ,GAAG,IAAA,iCAAe,EAAC,oBAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,gCAAoB,CAAC,YAAY,CAAC,CAAC,CAAC;IAE7E,IAAI,QAAQ,CAAC,cAAc,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;QAC/D,KAAK,GAAG;YACN,GAAG,KAAK;YACR,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAClE,QAAQ,EAAE,EAAE,CAAC,MAAO;gBACpB,KAAK,EAAE,UAAU;gBACjB,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,KAAK,GAAG;QACN,GAAG,KAAK;QACR,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;aACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC;aACzC,GAAG,CAAC,CAAC,IAAI,EAAc,EAAE,CAAC,CAAC;YAC1B,QAAQ,EAAE,IAAI,CAAC,GAAI;YACnB,KAAK,EAAE,IAAI,CAAC,GAAI,CAAC,QAAQ,CAAC,mCAAiB,CAAC;YAC5C,OAAO,EAAE,IAAI,CAAC,IAAI;SACnB,CAAC,CAAC;KACN,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,QAAQ,CAAC,qBAAqB;KAC1C,CAAC;AACJ,CAAC,CAAA,CAAC;AAjDW,QAAA,SAAS,aAiDpB","sourcesContent":["import { filePathDelimiter } from 'quidproquo-core';\n\nimport { S3Client } from '@aws-sdk/client-s3';\nimport { ListObjectsV2Command, ListObjectsV2CommandInput } from '@aws-sdk/client-s3';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport interface S3FileInfo {\n  filepath: string;\n  isDir: boolean;\n  hashMd5?: string;\n}\n\nexport interface S3FileList {\n  fileInfos: S3FileInfo[];\n  pageToken?: string;\n}\n\nexport const listFiles = async (\n  bucketName: string,\n  region: string,\n  folder: string = '',\n  maxKeys: number = 1000,\n  pageToken?: string,\n): Promise<S3FileList> => {\n  const validatedPrefix = `${folder}${folder.endsWith(filePathDelimiter) || !folder ? '' : filePathDelimiter}`;\n  const bucketParams: ListObjectsV2CommandInput = {\n    Bucket: bucketName,\n    Delimiter: filePathDelimiter,\n    Prefix: validatedPrefix,\n    ContinuationToken: pageToken,\n    MaxKeys: maxKeys,\n  };\n\n  // Declare truncated as a flag that the while loop is based on.\n  let files: S3FileInfo[] = [];\n\n  const s3Client = createAwsClient(S3Client, { region });\n\n  const response = await s3Client.send(new ListObjectsV2Command(bucketParams));\n\n  if (response.CommonPrefixes && !bucketParams.ContinuationToken) {\n    files = [\n      ...files,\n      ...response.CommonPrefixes.filter((cp) => !!cp.Prefix).map((cp) => ({\n        filepath: cp.Prefix!,\n        drive: bucketName,\n        isDir: true,\n      })),\n    ];\n  }\n\n  files = [\n    ...files,\n    ...(response.Contents || [])\n      .filter((c) => !!c.Key && c.Key != folder)\n      .map((item): S3FileInfo => ({\n        filepath: item.Key!,\n        isDir: item.Key!.endsWith(filePathDelimiter),\n        hashMd5: item.ETag,\n      })),\n  ];\n\n  return {\n    fileInfos: files,\n    pageToken: response.NextContinuationToken,\n  };\n};\n"]}

package/lib/commonjs/logic/s3/objectExists.js

@@ -33,3 +33,4 @@ const objectExists = (bucketName, key, region) => __awaiter(void 0, void 0, void
     }
 });
 exports.objectExists = objectExists;
+//# sourceMappingURL=objectExists.js.map

package/lib/commonjs/logic/s3/objectExists.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"objectExists.js","sourceRoot":"","sources":["../../../../src/logic/s3/objectExists.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,kDAA8C;AAC9C,kDAAuD;AAEvD,wDAAqD;AAE9C,MAAM,YAAY,GAAG,CAAO,UAAkB,EAAE,GAAW,EAAE,MAAc,EAAoB,EAAE;;IACtG,MAAM,QAAQ,GAAG,IAAA,iCAAe,EAAC,oBAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,CACjB,IAAI,6BAAiB,CAAC;YACpB,GAAG,EAAE,GAAG;YACR,MAAM,EAAE,UAAU;SACnB,CAAC,CACH,CAAC;QAEF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,wEAAwE;QACxE,0EAA0E;QAC1E,IAAI,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,MAAK,UAAU,IAAI,CAAA,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,SAAS,0CAAE,cAAc,MAAK,GAAG,EAAE,CAAC;YAC3E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAA,CAAC;AArBW,QAAA,YAAY,gBAqBvB","sourcesContent":["import { S3Client } from '@aws-sdk/client-s3';\nimport { HeadObjectCommand } from '@aws-sdk/client-s3';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const objectExists = async (bucketName: string, key: string, region: string): Promise<boolean> => {\n  const s3Client = createAwsClient(S3Client, { region });\n\n  try {\n    await s3Client.send(\n      new HeadObjectCommand({\n        Key: key,\n        Bucket: bucketName,\n      }),\n    );\n\n    return true;\n  } catch (error: any) {\n    // A 404 is a definitive \"does not exist\"; anything else (access denied,\n    // throttling, ...) must surface rather than masquerade as a missing file.\n    if (error?.name === 'NotFound' || error?.$metadata?.httpStatusCode === 404) {\n      return false;\n    }\n\n    throw error;\n  }\n};\n"]}

package/lib/commonjs/logic/s3/readBinaryFile.js

@@ -31,3 +31,4 @@ const readBinaryFile = (bucketName, key, region) => __awaiter(void 0, void 0, vo
     };
 });
 exports.readBinaryFile = readBinaryFile;
+//# sourceMappingURL=readBinaryFile.js.map

package/lib/commonjs/logic/s3/readBinaryFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readBinaryFile.js","sourceRoot":"","sources":["../../../../src/logic/s3/readBinaryFile.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,kDAAgE;AAEhE,wDAAqD;AAE9C,MAAM,cAAc,GAAG,CAAO,UAAkB,EAAE,GAAW,EAAE,MAAc,EAA0B,EAAE;;IAC9G,MAAM,QAAQ,GAAG,IAAA,iCAAe,EAAC,oBAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAClC,IAAI,4BAAgB,CAAC;QACnB,GAAG,EAAE,GAAG;QACR,MAAM,EAAE,UAAU;KACnB,CAAC,CACH,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,CAAA,MAAA,QAAQ,CAAC,IAAI,0CAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAA,CAAC;IAEpE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO;QACL,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ,CAAC,WAAW;QAC9B,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG;QAC/B,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;KAChD,CAAC;AACJ,CAAC,CAAA,CAAC;AAtBW,QAAA,cAAc,kBAsBzB","sourcesContent":["import { QPQBinaryData } from 'quidproquo-core';\n\nimport { GetObjectCommand, S3Client } from '@aws-sdk/client-s3';\n\nimport { createAwsClient } from '../createAwsClient';\n\nexport const readBinaryFile = async (bucketName: string, key: string, region: string): Promise<QPQBinaryData> => {\n  const s3Client = createAwsClient(S3Client, { region });\n\n  const response = await s3Client.send(\n    new GetObjectCommand({\n      Key: key,\n      Bucket: bucketName,\n    }),\n  );\n\n  const base64Data = await response.Body?.transformToString('base64');\n\n  if (!base64Data) {\n    throw new Error('Unable to transform body to base64');\n  }\n\n  return {\n    base64Data: base64Data,\n    mimetype: response.ContentType,\n    filename: key.split('/').pop()!,\n    contentDisposition: response.ContentDisposition,\n  };\n};\n"]}

package/lib/commonjs/logic/s3/readTextFile.js

@@ -22,3 +22,4 @@ const readTextFile = (bucketName, key, region) => __awaiter(void 0, void 0, void
     return (yield ((_a = response.Body) === null || _a === void 0 ? void 0 : _a.transformToString())) || '';
 });
 exports.readTextFile = readTextFile;
+//# sourceMappingURL=readTextFile.js.map