quidproquo-actionprocessor-awslambda 0.1.23 → 0.1.25

package/lib/esm/getActionProcessor/core/crypto/kmsSigningErrorMap.d.ts

@@ -0,0 +1,13 @@
+type SigningErrorTypes = {
+    KeyUnavailable: string;
+    Throttling: string;
+};
+export declare const kmsSigningErrorMap: (errorType: SigningErrorTypes, keyName: string) => {
+    NotFoundException: () => import("quidproquo-core").ActionProcessorResult<any>;
+    DisabledException: () => import("quidproquo-core").ActionProcessorResult<any>;
+    KMSInvalidStateException: () => import("quidproquo-core").ActionProcessorResult<any>;
+    AccessDeniedException: () => import("quidproquo-core").ActionProcessorResult<any>;
+    ThrottlingException: () => import("quidproquo-core").ActionProcessorResult<any>;
+};
+export declare const signingKeyNotConfiguredMessage: (keyName: string) => string;
+export {};

package/lib/esm/getActionProcessor/core/crypto/kmsSigningErrorMap.js

@@ -0,0 +1,12 @@
+import { actionResultError } from 'quidproquo-core';
+// The KMS exceptions every signing-key processor maps the same way, keyed by
+// error.name as actionResultErrorFromCaughtError expects.
+export const kmsSigningErrorMap = (errorType, keyName) => ({
+    NotFoundException: () => actionResultError(errorType.KeyUnavailable, `Signing key not found: [${keyName}]`),
+    DisabledException: () => actionResultError(errorType.KeyUnavailable, `Signing key is disabled: [${keyName}]`),
+    KMSInvalidStateException: () => actionResultError(errorType.KeyUnavailable, `Signing key is in an unusable state: [${keyName}]`),
+    AccessDeniedException: () => actionResultError(errorType.KeyUnavailable, `Access denied to signing key: [${keyName}]`),
+    ThrottlingException: () => actionResultError(errorType.Throttling, 'Throttling: Rate exceeded'),
+});
+export const signingKeyNotConfiguredMessage = (keyName) => `Signing key not configured: [${keyName}] - declare it with defineSigningKey`;
+//# sourceMappingURL=kmsSigningErrorMap.js.map

package/lib/esm/getActionProcessor/core/crypto/kmsSigningErrorMap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kmsSigningErrorMap.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/crypto/kmsSigningErrorMap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAOpD,6EAA6E;AAC7E,0DAA0D;AAC1D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAA4B,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC;IACpF,iBAAiB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,OAAO,GAAG,CAAC;IAC3G,iBAAiB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,cAAc,EAAE,6BAA6B,OAAO,GAAG,CAAC;IAC7G,wBAAwB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,cAAc,EAAE,yCAAyC,OAAO,GAAG,CAAC;IAChI,qBAAqB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,cAAc,EAAE,kCAAkC,OAAO,GAAG,CAAC;IACtH,mBAAmB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,UAAU,EAAE,2BAA2B,CAAC;CAChG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,gCAAgC,OAAO,sCAAsC,CAAC","sourcesContent":["import { actionResultError } from 'quidproquo-core';\n\ntype SigningErrorTypes = {\n  KeyUnavailable: string;\n  Throttling: string;\n};\n\n// The KMS exceptions every signing-key processor maps the same way, keyed by\n// error.name as actionResultErrorFromCaughtError expects.\nexport const kmsSigningErrorMap = (errorType: SigningErrorTypes, keyName: string) => ({\n  NotFoundException: () => actionResultError(errorType.KeyUnavailable, `Signing key not found: [${keyName}]`),\n  DisabledException: () => actionResultError(errorType.KeyUnavailable, `Signing key is disabled: [${keyName}]`),\n  KMSInvalidStateException: () => actionResultError(errorType.KeyUnavailable, `Signing key is in an unusable state: [${keyName}]`),\n  AccessDeniedException: () => actionResultError(errorType.KeyUnavailable, `Access denied to signing key: [${keyName}]`),\n  ThrottlingException: () => actionResultError(errorType.Throttling, 'Throttling: Rate exceeded'),\n});\n\nexport const signingKeyNotConfiguredMessage = (keyName: string) => `Signing key not configured: [${keyName}] - declare it with defineSigningKey`;\n"]}

package/lib/esm/getActionProcessor/core/crypto/utils/index.d.ts

@@ -1,2 +1,3 @@
 export * from './createKmsDataKeyProvider';
 export * from './resolveCryptoKeyAlias';
+export * from './resolveSigningKeyAlias';

package/lib/esm/getActionProcessor/core/crypto/utils/index.js

@@ -1,3 +1,4 @@
 export * from './createKmsDataKeyProvider';
 export * from './resolveCryptoKeyAlias';
+export * from './resolveSigningKeyAlias';
 //# sourceMappingURL=index.js.map

package/lib/esm/getActionProcessor/core/crypto/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/getActionProcessor/core/crypto/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC","sourcesContent":["export * from './createKmsDataKeyProvider';\nexport * from './resolveCryptoKeyAlias';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/getActionProcessor/core/crypto/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC","sourcesContent":["export * from './createKmsDataKeyProvider';\nexport * from './resolveCryptoKeyAlias';\nexport * from './resolveSigningKeyAlias';\n"]}

package/lib/esm/getActionProcessor/core/crypto/utils/resolveSigningKeyAlias.d.ts

@@ -0,0 +1,2 @@
+import { Nullable, QPQConfig } from 'quidproquo-core';
+export declare const resolveSigningKeyAlias: (signingKeyName: string, qpqConfig: QPQConfig) => Nullable<string>;

package/lib/esm/getActionProcessor/core/crypto/utils/resolveSigningKeyAlias.js

@@ -0,0 +1,14 @@
+import { qpqCoreUtils } from 'quidproquo-core';
+import { getConfigRuntimeResourceNameFromConfigWithServiceOverride } from '../../../../awsNamingUtils';
+// The signing-key twin of resolveCryptoKeyAlias: the deterministic KMS alias the
+// CDK construct derives for a defineSigningKey, or null when none matches so
+// processors can fail with KeyNotConfigured instead of a generic error.
+export const resolveSigningKeyAlias = (signingKeyName, qpqConfig) => {
+    const signingKeyConfig = qpqCoreUtils.getAllSigningKeyConfigs(qpqConfig).find((k) => k.keyName === signingKeyName);
+    if (!signingKeyConfig) {
+        return null;
+    }
+    const resolvedName = getConfigRuntimeResourceNameFromConfigWithServiceOverride(signingKeyConfig.owner?.resourceNameOverride || signingKeyName, qpqConfig, signingKeyConfig.owner?.module);
+    return `alias/${resolvedName}`;
+};
+//# sourceMappingURL=resolveSigningKeyAlias.js.map

package/lib/esm/getActionProcessor/core/crypto/utils/resolveSigningKeyAlias.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveSigningKeyAlias.js","sourceRoot":"","sources":["../../../../../../src/getActionProcessor/core/crypto/utils/resolveSigningKeyAlias.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,yDAAyD,EAAE,MAAM,4BAA4B,CAAC;AAEvG,iFAAiF;AACjF,6EAA6E;AAC7E,wEAAwE;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,cAAsB,EAAE,SAAoB,EAAoB,EAAE;IACvG,MAAM,gBAAgB,GAAG,YAAY,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,cAAc,CAAC,CAAC;IAEnH,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,yDAAyD,CAC5E,gBAAgB,CAAC,KAAK,EAAE,oBAAoB,IAAI,cAAc,EAC9D,SAAS,EACT,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAC/B,CAAC;IAEF,OAAO,SAAS,YAAY,EAAE,CAAC;AACjC,CAAC,CAAC","sourcesContent":["import { Nullable, QPQConfig, qpqCoreUtils } from 'quidproquo-core';\n\nimport { getConfigRuntimeResourceNameFromConfigWithServiceOverride } from '../../../../awsNamingUtils';\n\n// The signing-key twin of resolveCryptoKeyAlias: the deterministic KMS alias the\n// CDK construct derives for a defineSigningKey, or null when none matches so\n// processors can fail with KeyNotConfigured instead of a generic error.\nexport const resolveSigningKeyAlias = (signingKeyName: string, qpqConfig: QPQConfig): Nullable<string> => {\n  const signingKeyConfig = qpqCoreUtils.getAllSigningKeyConfigs(qpqConfig).find((k) => k.keyName === signingKeyName);\n\n  if (!signingKeyConfig) {\n    return null;\n  }\n\n  const resolvedName = getConfigRuntimeResourceNameFromConfigWithServiceOverride(\n    signingKeyConfig.owner?.resourceNameOverride || signingKeyName,\n    qpqConfig,\n    signingKeyConfig.owner?.module,\n  );\n\n  return `alias/${resolvedName}`;\n};\n"]}

package/lib/esm/getActionProcessor/core/file/getFileCopyActionProcessor.d.ts

@@ -0,0 +1 @@
+export declare const getFileCopyActionProcessor: import("quidproquo-core").ActionProcessorListResolver;

package/lib/esm/getActionProcessor/core/file/getFileCopyActionProcessor.js

@@ -0,0 +1,25 @@
+import { qpqConfigAwsUtils } from 'quidproquo-config-aws';
+import { actionResult, actionResultError, actionResultErrorFromCaughtError, askFileCopy, composeScopedFilePath, createActionProcessor, } from 'quidproquo-core';
+import { copyFile } from '../../../logic/s3/s3Utils';
+import { resolveStorageDriveBucketName } from './utils';
+const getProcessFileCopy = (qpqConfig) => {
+    return async ({ sourceDrive, sourceFilepath, targetDrive, targetFilepath, scope }) => {
+        try {
+            const sourceBucketName = resolveStorageDriveBucketName(sourceDrive, qpqConfig);
+            const targetBucketName = resolveStorageDriveBucketName(targetDrive, qpqConfig);
+            await copyFile(sourceBucketName, composeScopedFilePath(scope, sourceFilepath), targetBucketName, composeScopedFilePath(scope, targetFilepath), qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig));
+            return actionResult(void 0);
+        }
+        catch (error) {
+            return actionResultErrorFromCaughtError(error, {
+                AccessDenied: () => actionResultError(askFileCopy.errorType.AccessDenied, 'Access denied copying file'),
+                NoSuchBucket: () => actionResultError(askFileCopy.errorType.DriveNotFound, `Storage drive not found: ${sourceDrive} or ${targetDrive}`),
+                NoSuchKey: () => actionResultError(askFileCopy.errorType.FileNotFound, `File not found: ${sourceFilepath}`),
+                StorageDriveNotFoundError: (error) => actionResultError(askFileCopy.errorType.DriveNotFound, error.message),
+                InvalidScopeError: (error) => actionResultError(askFileCopy.errorType.InvalidScope, error.message),
+            });
+        }
+    };
+};
+export const getFileCopyActionProcessor = createActionProcessor(askFileCopy, getProcessFileCopy);
+//# sourceMappingURL=getFileCopyActionProcessor.js.map

package/lib/esm/getActionProcessor/core/file/getFileCopyActionProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFileCopyActionProcessor.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/file/getFileCopyActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,gCAAgC,EAChC,WAAW,EACX,qBAAqB,EACrB,qBAAqB,GAItB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,6BAA6B,EAAE,MAAM,SAAS,CAAC;AAExD,MAAM,kBAAkB,GAAG,CAAC,SAAoB,EAAoC,EAAE;IACpF,OAAO,KAAK,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE;QACnF,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,6BAA6B,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC/E,MAAM,gBAAgB,GAAG,6BAA6B,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAE/E,MAAM,QAAQ,CACZ,gBAAgB,EAChB,qBAAqB,CAAC,KAAK,EAAE,cAAc,CAAC,EAC5C,gBAAgB,EAChB,qBAAqB,CAAC,KAAK,EAAE,cAAc,CAAC,EAC5C,iBAAiB,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAC9D,CAAC;YAEF,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,gCAAgC,CAAC,KAAK,EAAE;gBAC7C,YAAY,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,EAAE,4BAA4B,CAAC;gBACvG,YAAY,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,SAAS,CAAC,aAAa,EAAE,4BAA4B,WAAW,OAAO,WAAW,EAAE,CAAC;gBACvI,SAAS,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,cAAc,EAAE,CAAC;gBAC3G,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC;gBAC3G,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC;aACnG,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAAqB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC","sourcesContent":["import { qpqConfigAwsUtils } from 'quidproquo-config-aws';\nimport {\n  actionResult,\n  actionResultError,\n  actionResultErrorFromCaughtError,\n  askFileCopy,\n  composeScopedFilePath,\n  createActionProcessor,\n  FileActionType,\n  ProcessorFor,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { copyFile } from '../../../logic/s3/s3Utils';\nimport { resolveStorageDriveBucketName } from './utils';\n\nconst getProcessFileCopy = (qpqConfig: QPQConfig): ProcessorFor<typeof askFileCopy> => {\n  return async ({ sourceDrive, sourceFilepath, targetDrive, targetFilepath, scope }) => {\n    try {\n      const sourceBucketName = resolveStorageDriveBucketName(sourceDrive, qpqConfig);\n      const targetBucketName = resolveStorageDriveBucketName(targetDrive, qpqConfig);\n\n      await copyFile(\n        sourceBucketName,\n        composeScopedFilePath(scope, sourceFilepath),\n        targetBucketName,\n        composeScopedFilePath(scope, targetFilepath),\n        qpqConfigAwsUtils.getApplicationModuleDeployRegion(qpqConfig),\n      );\n\n      return actionResult(void 0);\n    } catch (error: unknown) {\n      return actionResultErrorFromCaughtError(error, {\n        AccessDenied: () => actionResultError(askFileCopy.errorType.AccessDenied, 'Access denied copying file'),\n        NoSuchBucket: () => actionResultError(askFileCopy.errorType.DriveNotFound, `Storage drive not found: ${sourceDrive} or ${targetDrive}`),\n        NoSuchKey: () => actionResultError(askFileCopy.errorType.FileNotFound, `File not found: ${sourceFilepath}`),\n        StorageDriveNotFoundError: (error) => actionResultError(askFileCopy.errorType.DriveNotFound, error.message),\n        InvalidScopeError: (error) => actionResultError(askFileCopy.errorType.InvalidScope, error.message),\n      });\n    }\n  };\n};\n\nexport const getFileCopyActionProcessor = createActionProcessor(askFileCopy, getProcessFileCopy);\n"]}

package/lib/esm/getActionProcessor/core/file/index.js

@@ -1,3 +1,4 @@
+import { getFileCopyActionProcessor } from './getFileCopyActionProcessor';
 import { getFileDeleteActionProcessor } from './getFileDeleteActionProcessor';
 import { getFileExistsActionProcessor } from './getFileExistsActionProcessor';
 import { getFileGenerateTemporarySecureUrlActionProcessor } from './getFileGenerateTemporarySecureUrlActionProcessor';
@@ -12,6 +13,7 @@ import { getFileWriteBinaryContentsActionProcessor } from './getFileWriteBinaryC
 import { getFileWriteObjectJsonActionProcessor } from './getFileWriteObjectJsonActionProcessor';
 import { getFileWriteTextContentsActionProcessor } from './getFileWriteTextContentsActionProcessor';
 export const getFileActionProcessor = async (qpqConfig, dynamicModuleLoader) => ({
+    ...(await getFileCopyActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getFileDeleteActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getFileExistsActionProcessor(qpqConfig, dynamicModuleLoader)),
     ...(await getFileGenerateTemporarySecureUrlActionProcessor(qpqConfig, dynamicModuleLoader)),

package/lib/esm/getActionProcessor/core/file/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/file/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,gDAAgD,EAAE,MAAM,oDAAoD,CAAC;AACtH,OAAO,EAAE,sDAAsD,EAAE,MAAM,0DAA0D,CAAC;AAClI,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EAAE,wCAAwC,EAAE,MAAM,4CAA4C,CAAC;AACtG,OAAO,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,EAAE,sCAAsC,EAAE,MAAM,0CAA0C,CAAC;AAClG,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,yCAAyC,EAAE,MAAM,6CAA6C,CAAC;AACxG,OAAO,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,EAAE,uCAAuC,EAAE,MAAM,2CAA2C,CAAC;AAEpG,MAAM,CAAC,MAAM,sBAAsB,GAAgC,KAAK,EACtE,SAAoB,EACpB,mBAAwC,EACV,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,4BAA4B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACvE,GAAG,CAAC,MAAM,4BAA4B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACvE,GAAG,CAAC,MAAM,gDAAgD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC3F,GAAG,CAAC,MAAM,sDAAsD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACjG,GAAG,CAAC,MAAM,mCAAmC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC9E,GAAG,CAAC,MAAM,mCAAmC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC9E,GAAG,CAAC,MAAM,sCAAsC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACjF,GAAG,CAAC,MAAM,oCAAoC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC/E,GAAG,CAAC,MAAM,uCAAuC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAClF,GAAG,CAAC,MAAM,wCAAwC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACnF,GAAG,CAAC,MAAM,qCAAqC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAChF,GAAG,CAAC,MAAM,yCAAyC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACpF,GAAG,CAAC,MAAM,gCAAgC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;CAC5E,CAAC,CAAC","sourcesContent":["import { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nimport { getFileDeleteActionProcessor } from './getFileDeleteActionProcessor';\nimport { getFileExistsActionProcessor } from './getFileExistsActionProcessor';\nimport { getFileGenerateTemporarySecureUrlActionProcessor } from './getFileGenerateTemporarySecureUrlActionProcessor';\nimport { getFileGenerateTemporaryUploadSecureUrlActionProcessor } from './getFileGenerateTemporaryUploadSecureUrlActionProcessor';\nimport { getFileIsColdStorageActionProcessor } from './getFileIsColdStorageActionProcessor';\nimport { getFileListDirectoryActionProcessor } from './getFileListDirectoryActionProcessor';\nimport { getFileReadBinaryContentsActionProcessor } from './getFileReadBinaryContentsActionProcessor';\nimport { getFileReadObjectJsonActionProcessor } from './getFileReadObjectJsonActionProcessor';\nimport { getFileReadTextContentsActionProcessor } from './getFileReadTextContentsActionProcessor';\nimport { getFileStreamOpenActionProcessor } from './getFileStreamOpenActionProcessor';\nimport { getFileWriteBinaryContentsActionProcessor } from './getFileWriteBinaryContentsActionProcessor';\nimport { getFileWriteObjectJsonActionProcessor } from './getFileWriteObjectJsonActionProcessor';\nimport { getFileWriteTextContentsActionProcessor } from './getFileWriteTextContentsActionProcessor';\n\nexport const getFileActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  ...(await getFileDeleteActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileExistsActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileGenerateTemporarySecureUrlActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileGenerateTemporaryUploadSecureUrlActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileIsColdStorageActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileListDirectoryActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileReadTextContentsActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileReadObjectJsonActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileWriteTextContentsActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileReadBinaryContentsActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileWriteObjectJsonActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileWriteBinaryContentsActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileStreamOpenActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/getActionProcessor/core/file/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,gDAAgD,EAAE,MAAM,oDAAoD,CAAC;AACtH,OAAO,EAAE,sDAAsD,EAAE,MAAM,0DAA0D,CAAC;AAClI,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EAAE,mCAAmC,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EAAE,wCAAwC,EAAE,MAAM,4CAA4C,CAAC;AACtG,OAAO,EAAE,oCAAoC,EAAE,MAAM,wCAAwC,CAAC;AAC9F,OAAO,EAAE,sCAAsC,EAAE,MAAM,0CAA0C,CAAC;AAClG,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,yCAAyC,EAAE,MAAM,6CAA6C,CAAC;AACxG,OAAO,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,EAAE,uCAAuC,EAAE,MAAM,2CAA2C,CAAC;AAEpG,MAAM,CAAC,MAAM,sBAAsB,GAAgC,KAAK,EACtE,SAAoB,EACpB,mBAAwC,EACV,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,MAAM,0BAA0B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACrE,GAAG,CAAC,MAAM,4BAA4B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACvE,GAAG,CAAC,MAAM,4BAA4B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACvE,GAAG,CAAC,MAAM,gDAAgD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC3F,GAAG,CAAC,MAAM,sDAAsD,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACjG,GAAG,CAAC,MAAM,mCAAmC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC9E,GAAG,CAAC,MAAM,mCAAmC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC9E,GAAG,CAAC,MAAM,sCAAsC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACjF,GAAG,CAAC,MAAM,oCAAoC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC/E,GAAG,CAAC,MAAM,uCAAuC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAClF,GAAG,CAAC,MAAM,wCAAwC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACnF,GAAG,CAAC,MAAM,qCAAqC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAChF,GAAG,CAAC,MAAM,yCAAyC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACpF,GAAG,CAAC,MAAM,gCAAgC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;CAC5E,CAAC,CAAC","sourcesContent":["import { ActionProcessorList, ActionProcessorListResolver, DynamicModuleLoader, QPQConfig } from 'quidproquo-core';\n\nimport { getFileCopyActionProcessor } from './getFileCopyActionProcessor';\nimport { getFileDeleteActionProcessor } from './getFileDeleteActionProcessor';\nimport { getFileExistsActionProcessor } from './getFileExistsActionProcessor';\nimport { getFileGenerateTemporarySecureUrlActionProcessor } from './getFileGenerateTemporarySecureUrlActionProcessor';\nimport { getFileGenerateTemporaryUploadSecureUrlActionProcessor } from './getFileGenerateTemporaryUploadSecureUrlActionProcessor';\nimport { getFileIsColdStorageActionProcessor } from './getFileIsColdStorageActionProcessor';\nimport { getFileListDirectoryActionProcessor } from './getFileListDirectoryActionProcessor';\nimport { getFileReadBinaryContentsActionProcessor } from './getFileReadBinaryContentsActionProcessor';\nimport { getFileReadObjectJsonActionProcessor } from './getFileReadObjectJsonActionProcessor';\nimport { getFileReadTextContentsActionProcessor } from './getFileReadTextContentsActionProcessor';\nimport { getFileStreamOpenActionProcessor } from './getFileStreamOpenActionProcessor';\nimport { getFileWriteBinaryContentsActionProcessor } from './getFileWriteBinaryContentsActionProcessor';\nimport { getFileWriteObjectJsonActionProcessor } from './getFileWriteObjectJsonActionProcessor';\nimport { getFileWriteTextContentsActionProcessor } from './getFileWriteTextContentsActionProcessor';\n\nexport const getFileActionProcessor: ActionProcessorListResolver = async (\n  qpqConfig: QPQConfig,\n  dynamicModuleLoader: DynamicModuleLoader,\n): Promise<ActionProcessorList> => ({\n  ...(await getFileCopyActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileDeleteActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileExistsActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileGenerateTemporarySecureUrlActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileGenerateTemporaryUploadSecureUrlActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileIsColdStorageActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileListDirectoryActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileReadTextContentsActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileReadObjectJsonActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileWriteTextContentsActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileReadBinaryContentsActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileWriteObjectJsonActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileWriteBinaryContentsActionProcessor(qpqConfig, dynamicModuleLoader)),\n  ...(await getFileStreamOpenActionProcessor(qpqConfig, dynamicModuleLoader)),\n});\n"]}

package/lib/esm/lambdaHandlers/helpers/getLambdaRuntimeRemainingTimeActionProcessor.d.ts

@@ -0,0 +1,8 @@
+import { ActionProcessorList } from 'quidproquo-core';
+import { Context } from 'aws-lambda';
+/**
+ * Overrides the js "unlimited" GetRuntimeRemainingTime processor with the real lambda
+ * deadline. The context is per invocation, so this is built inside the handler and
+ * spread over the shared processor list on every invoke.
+ */
+export declare const getLambdaRuntimeRemainingTimeActionProcessor: (context: Context) => ActionProcessorList;

package/lib/esm/lambdaHandlers/helpers/getLambdaRuntimeRemainingTimeActionProcessor.js

@@ -0,0 +1,13 @@
+import { actionResult, SystemActionType } from 'quidproquo-core';
+/**
+ * Overrides the js "unlimited" GetRuntimeRemainingTime processor with the real lambda
+ * deadline. The context is per invocation, so this is built inside the handler and
+ * spread over the shared processor list on every invoke.
+ */
+export const getLambdaRuntimeRemainingTimeActionProcessor = (context) => {
+    const processGetRuntimeRemainingTime = async () => actionResult(context.getRemainingTimeInMillis());
+    return {
+        [SystemActionType.GetRuntimeRemainingTime]: processGetRuntimeRemainingTime,
+    };
+};
+//# sourceMappingURL=getLambdaRuntimeRemainingTimeActionProcessor.js.map

package/lib/esm/lambdaHandlers/helpers/getLambdaRuntimeRemainingTimeActionProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getLambdaRuntimeRemainingTimeActionProcessor.js","sourceRoot":"","sources":["../../../../src/lambdaHandlers/helpers/getLambdaRuntimeRemainingTimeActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,YAAY,EAA4C,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAIhI;;;;GAIG;AACH,MAAM,CAAC,MAAM,4CAA4C,GAAG,CAAC,OAAgB,EAAuB,EAAE;IACpG,MAAM,8BAA8B,GAAoD,KAAK,IAAI,EAAE,CACjG,YAAY,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAEnD,OAAO;QACL,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EAAE,8BAA8B;KAC3E,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { ActionProcessorList, actionResult, askGetRuntimeRemainingTime, ProcessorFor, SystemActionType } from 'quidproquo-core';\n\nimport { Context } from 'aws-lambda';\n\n/**\n * Overrides the js \"unlimited\" GetRuntimeRemainingTime processor with the real lambda\n * deadline. The context is per invocation, so this is built inside the handler and\n * spread over the shared processor list on every invoke.\n */\nexport const getLambdaRuntimeRemainingTimeActionProcessor = (context: Context): ActionProcessorList => {\n  const processGetRuntimeRemainingTime: ProcessorFor<typeof askGetRuntimeRemainingTime> = async () =>\n    actionResult(context.getRemainingTimeInMillis());\n\n  return {\n    [SystemActionType.GetRuntimeRemainingTime]: processGetRuntimeRemainingTime,\n  };\n};\n"]}

package/lib/esm/lambdaHandlers/helpers/getQpqLambdaRuntimeForEvent.js

@@ -2,6 +2,7 @@ import { getCustomActionActionProcessor } from 'quidproquo-actionprocessor-js';
 import { askProcessEvent, createRuntime, } from 'quidproquo-core';
 import { getAwsActionProcessors } from '../../getActionProcessor';
 import { dynamicModuleLoaderWarmer } from './dynamicModuleLoaderWarmer';
+import { getLambdaRuntimeRemainingTimeActionProcessor } from './getLambdaRuntimeRemainingTimeActionProcessor';
 import { getLogger } from './getLogger';
 import { getRuntimeCorrelation } from './getRuntimeCorrelation';
 import { isSnsWarmerRecord } from './isSnsWarmerRecord';
@@ -20,16 +21,19 @@ const isSnsEvent = (event) => {
  * short-circuits SNS warmer pings, runs the process-event story and ships logs.
  */
 export const getQpqLambdaRuntimeForEvent = (runtimeType, getStorySession, getActionProcessorList, dynamicModuleLoader, qpqConfig, getProcessEventStory = () => askProcessEvent) => {
-    const resolveActionProcessorList = async () => ({
+    // Built per invoke: the lambda context (and so the execution deadline) is not
+    // known until the handler runs.
+    const getResolveActionProcessorList = (context) => async () => ({
         ...(await getAwsActionProcessors(qpqConfig, dynamicModuleLoader)),
         ...(await getActionProcessorList(qpqConfig, dynamicModuleLoader)),
+        ...getLambdaRuntimeRemainingTimeActionProcessor(context),
         // Always done last, so they can override the default ones if the user wants.
         ...(await getCustomActionActionProcessor(qpqConfig, dynamicModuleLoader)),
     });
     return async (event, context) => {
         console.log('tick: ', JSON.stringify(event, null, 2));
         const logger = getLogger(qpqConfig);
-        const resolveStory = createRuntime(qpqConfig, getStorySession(event), resolveActionProcessorList, () => new Date().toISOString(), logger, getRuntimeCorrelation(qpqConfig), runtimeType, dynamicModuleLoader);
+        const resolveStory = createRuntime(qpqConfig, getStorySession(event), getResolveActionProcessorList(context), () => new Date().toISOString(), logger, getRuntimeCorrelation(qpqConfig), runtimeType, dynamicModuleLoader);
         const processEvent = async () => {
             const result = await resolveStory(getProcessEventStory(), [event, context]);
             await logger.waitToFinishWriting();

package/lib/esm/lambdaHandlers/helpers/getQpqLambdaRuntimeForEvent.js.map

@@ -1 +1 @@
-{"version":3,"file":"getQpqLambdaRuntimeForEvent.js","sourceRoot":"","sources":["../../../../src/lambdaHandlers/helpers/getQpqLambdaRuntimeForEvent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAGL,eAAe,EACf,aAAa,GAKd,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,gFAAgF;AAChF,gFAAgF;AAChF,iFAAiF;AACjF,MAAM,UAAU,GAAG,CAAI,KAAmC,EAAqB,EAAE;IAC/E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,gBAAgB,GAAG,KAA4B,CAAC;QACtD,OAAO,gBAAgB,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,WAA2B,EAC3B,eAA2C,EAC3C,sBAAmD,EACnD,mBAAwC,EACxC,SAAoB,EACpB,uBAAqD,GAAG,EAAE,CAAC,eAAe,EAC1E,EAAE;IACF,MAAM,0BAA0B,GAAG,KAAK,IAAkC,EAAE,CAAC,CAAC;QAC5E,GAAG,CAAC,MAAM,sBAAsB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACjE,GAAG,CAAC,MAAM,sBAAsB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAEjE,6EAA6E;QAC7E,GAAG,CAAC,MAAM,8BAA8B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;KAC1E,CAAC,CAAC;IAEH,OAAO,KAAK,EAAE,KAAQ,EAAE,OAAgB,EAAE,EAAE;QAC1C,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAEpC,MAAM,YAAY,GAAG,aAAa,CAChC,SAAS,EACT,eAAe,CAAC,KAAK,CAAC,EACtB,0BAA0B,EAC1B,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,MAAM,EACN,qBAAqB,CAAC,SAAS,CAAC,EAChC,WAAW,EACX,mBAAmB,CACpB,CAAC;QAEF,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;YAC9B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,oBAAoB,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5E,MAAM,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAEnC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC1C,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACpD,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC,CAAC;QAEF,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;YAEnF,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,aAAa,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAClD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;gBAEhC,+CAA+C;gBAC/C,8BAA8B;gBAC9B,MAAM,yBAAyB,EAAE,CAAC;gBAElC,mDAAmD;gBACnD,MAAM,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBAEtC,OAAO,YAAY,CAAC;YACtB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,YAAY,EAAE,CAAC;IAC9B,CAAC,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { getCustomActionActionProcessor } from 'quidproquo-actionprocessor-js';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  askProcessEvent,\n  createRuntime,\n  DynamicModuleLoader,\n  QPQConfig,\n  QpqRuntimeType,\n  StorySession,\n} from 'quidproquo-core';\n\nimport { Context, SNSEvent } from 'aws-lambda';\n\nimport { getAwsActionProcessors } from '../../getActionProcessor';\nimport { QpqFunctionExecutionEvent } from '../types';\nimport { dynamicModuleLoaderWarmer } from './dynamicModuleLoaderWarmer';\nimport { getLogger } from './getLogger';\nimport { getRuntimeCorrelation } from './getRuntimeCorrelation';\nimport { isSnsWarmerRecord } from './isSnsWarmerRecord';\n\n// SQS/S3/CloudFront events also have a Records array, so this matches more than\n// real SNS events. That is harmless: the warmer scan below only acts on records\n// whose EventSource is 'aws:sns', everything else falls through to processEvent.\nconst isSnsEvent = <T>(event: QpqFunctionExecutionEvent<T>): event is SNSEvent => {\n  if (event && typeof event === 'object') {\n    const possibleSnsEvent = event as unknown as SNSEvent;\n    return possibleSnsEvent.Records && Array.isArray(possibleSnsEvent.Records);\n  }\n\n  return false;\n};\n\n/**\n * Builds the shared lambda handler: wires a qpq runtime for the event type,\n * short-circuits SNS warmer pings, runs the process-event story and ships logs.\n */\nexport const getQpqLambdaRuntimeForEvent = <E extends QpqFunctionExecutionEvent<any>>(\n  runtimeType: QpqRuntimeType,\n  getStorySession: (event: E) => StorySession,\n  getActionProcessorList: ActionProcessorListResolver,\n  dynamicModuleLoader: DynamicModuleLoader,\n  qpqConfig: QPQConfig,\n  getProcessEventStory: () => typeof askProcessEvent = () => askProcessEvent,\n) => {\n  const resolveActionProcessorList = async (): Promise<ActionProcessorList> => ({\n    ...(await getAwsActionProcessors(qpqConfig, dynamicModuleLoader)),\n    ...(await getActionProcessorList(qpqConfig, dynamicModuleLoader)),\n\n    // Always done last, so they can override the default ones if the user wants.\n    ...(await getCustomActionActionProcessor(qpqConfig, dynamicModuleLoader)),\n  });\n\n  return async (event: E, context: Context) => {\n    console.log('tick: ', JSON.stringify(event, null, 2));\n\n    const logger = getLogger(qpqConfig);\n\n    const resolveStory = createRuntime(\n      qpqConfig,\n      getStorySession(event),\n      resolveActionProcessorList,\n      () => new Date().toISOString(),\n      logger,\n      getRuntimeCorrelation(qpqConfig),\n      runtimeType,\n      dynamicModuleLoader,\n    );\n\n    const processEvent = async () => {\n      const result = await resolveStory(getProcessEventStory(), [event, context]);\n      await logger.waitToFinishWriting();\n\n      if (result.error) {\n        throw new Error(result.error.errorText);\n      }\n\n      console.log('Finished, returning: ', result.result);\n      return result.result;\n    };\n\n    if (isSnsEvent(event)) {\n      const recordsNoWarm = event.Records.filter((record) => !isSnsWarmerRecord(record));\n\n      // A warmer ping arrives as its own single-record SNS event; any warmer\n      // present means this invoke exists only to keep the sandbox warm.\n      if (recordsNoWarm.length !== event.Records.length) {\n        console.log('Found SNS warmer');\n\n        // TODO: Warm qpq things with dynamic functions\n        // federate in dynamic modules\n        await dynamicModuleLoaderWarmer();\n\n        // Might as well move the logs to permanent storage\n        await logger.moveToPermanentStorage();\n\n        return 'Warmed up!';\n      }\n    }\n\n    return await processEvent();\n  };\n};\n"]}
+{"version":3,"file":"getQpqLambdaRuntimeForEvent.js","sourceRoot":"","sources":["../../../../src/lambdaHandlers/helpers/getQpqLambdaRuntimeForEvent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAGL,eAAe,EACf,aAAa,GAKd,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,4CAA4C,EAAE,MAAM,gDAAgD,CAAC;AAC9G,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,gFAAgF;AAChF,gFAAgF;AAChF,iFAAiF;AACjF,MAAM,UAAU,GAAG,CAAI,KAAmC,EAAqB,EAAE;IAC/E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,gBAAgB,GAAG,KAA4B,CAAC;QACtD,OAAO,gBAAgB,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,WAA2B,EAC3B,eAA2C,EAC3C,sBAAmD,EACnD,mBAAwC,EACxC,SAAoB,EACpB,uBAAqD,GAAG,EAAE,CAAC,eAAe,EAC1E,EAAE;IACF,8EAA8E;IAC9E,gCAAgC;IAChC,MAAM,6BAA6B,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC,KAAK,IAAkC,EAAE,CAAC,CAAC;QACrG,GAAG,CAAC,MAAM,sBAAsB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACjE,GAAG,CAAC,MAAM,sBAAsB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACjE,GAAG,4CAA4C,CAAC,OAAO,CAAC;QAExD,6EAA6E;QAC7E,GAAG,CAAC,MAAM,8BAA8B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;KAC1E,CAAC,CAAC;IAEH,OAAO,KAAK,EAAE,KAAQ,EAAE,OAAgB,EAAE,EAAE;QAC1C,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAEpC,MAAM,YAAY,GAAG,aAAa,CAChC,SAAS,EACT,eAAe,CAAC,KAAK,CAAC,EACtB,6BAA6B,CAAC,OAAO,CAAC,EACtC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,MAAM,EACN,qBAAqB,CAAC,SAAS,CAAC,EAChC,WAAW,EACX,mBAAmB,CACpB,CAAC;QAEF,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;YAC9B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,oBAAoB,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5E,MAAM,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAEnC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC1C,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACpD,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC,CAAC;QAEF,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;YAEnF,uEAAuE;YACvE,kEAAkE;YAClE,IAAI,aAAa,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAClD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;gBAEhC,+CAA+C;gBAC/C,8BAA8B;gBAC9B,MAAM,yBAAyB,EAAE,CAAC;gBAElC,mDAAmD;gBACnD,MAAM,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBAEtC,OAAO,YAAY,CAAC;YACtB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,YAAY,EAAE,CAAC;IAC9B,CAAC,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { getCustomActionActionProcessor } from 'quidproquo-actionprocessor-js';\nimport {\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  askProcessEvent,\n  createRuntime,\n  DynamicModuleLoader,\n  QPQConfig,\n  QpqRuntimeType,\n  StorySession,\n} from 'quidproquo-core';\n\nimport { Context, SNSEvent } from 'aws-lambda';\n\nimport { getAwsActionProcessors } from '../../getActionProcessor';\nimport { QpqFunctionExecutionEvent } from '../types';\nimport { dynamicModuleLoaderWarmer } from './dynamicModuleLoaderWarmer';\nimport { getLambdaRuntimeRemainingTimeActionProcessor } from './getLambdaRuntimeRemainingTimeActionProcessor';\nimport { getLogger } from './getLogger';\nimport { getRuntimeCorrelation } from './getRuntimeCorrelation';\nimport { isSnsWarmerRecord } from './isSnsWarmerRecord';\n\n// SQS/S3/CloudFront events also have a Records array, so this matches more than\n// real SNS events. That is harmless: the warmer scan below only acts on records\n// whose EventSource is 'aws:sns', everything else falls through to processEvent.\nconst isSnsEvent = <T>(event: QpqFunctionExecutionEvent<T>): event is SNSEvent => {\n  if (event && typeof event === 'object') {\n    const possibleSnsEvent = event as unknown as SNSEvent;\n    return possibleSnsEvent.Records && Array.isArray(possibleSnsEvent.Records);\n  }\n\n  return false;\n};\n\n/**\n * Builds the shared lambda handler: wires a qpq runtime for the event type,\n * short-circuits SNS warmer pings, runs the process-event story and ships logs.\n */\nexport const getQpqLambdaRuntimeForEvent = <E extends QpqFunctionExecutionEvent<any>>(\n  runtimeType: QpqRuntimeType,\n  getStorySession: (event: E) => StorySession,\n  getActionProcessorList: ActionProcessorListResolver,\n  dynamicModuleLoader: DynamicModuleLoader,\n  qpqConfig: QPQConfig,\n  getProcessEventStory: () => typeof askProcessEvent = () => askProcessEvent,\n) => {\n  // Built per invoke: the lambda context (and so the execution deadline) is not\n  // known until the handler runs.\n  const getResolveActionProcessorList = (context: Context) => async (): Promise<ActionProcessorList> => ({\n    ...(await getAwsActionProcessors(qpqConfig, dynamicModuleLoader)),\n    ...(await getActionProcessorList(qpqConfig, dynamicModuleLoader)),\n    ...getLambdaRuntimeRemainingTimeActionProcessor(context),\n\n    // Always done last, so they can override the default ones if the user wants.\n    ...(await getCustomActionActionProcessor(qpqConfig, dynamicModuleLoader)),\n  });\n\n  return async (event: E, context: Context) => {\n    console.log('tick: ', JSON.stringify(event, null, 2));\n\n    const logger = getLogger(qpqConfig);\n\n    const resolveStory = createRuntime(\n      qpqConfig,\n      getStorySession(event),\n      getResolveActionProcessorList(context),\n      () => new Date().toISOString(),\n      logger,\n      getRuntimeCorrelation(qpqConfig),\n      runtimeType,\n      dynamicModuleLoader,\n    );\n\n    const processEvent = async () => {\n      const result = await resolveStory(getProcessEventStory(), [event, context]);\n      await logger.waitToFinishWriting();\n\n      if (result.error) {\n        throw new Error(result.error.errorText);\n      }\n\n      console.log('Finished, returning: ', result.result);\n      return result.result;\n    };\n\n    if (isSnsEvent(event)) {\n      const recordsNoWarm = event.Records.filter((record) => !isSnsWarmerRecord(record));\n\n      // A warmer ping arrives as its own single-record SNS event; any warmer\n      // present means this invoke exists only to keep the sandbox warm.\n      if (recordsNoWarm.length !== event.Records.length) {\n        console.log('Found SNS warmer');\n\n        // TODO: Warm qpq things with dynamic functions\n        // federate in dynamic modules\n        await dynamicModuleLoaderWarmer();\n\n        // Might as well move the logs to permanent storage\n        await logger.moveToPermanentStorage();\n\n        return 'Warmed up!';\n      }\n    }\n\n    return await processEvent();\n  };\n};\n"]}

package/lib/esm/lambdaHandlers/helpers/index.d.ts

@@ -1,5 +1,6 @@
 export * from './dynamicModuleLoaderWarmer';
 export * from './getBlankStorySession';
+export * from './getLambdaRuntimeRemainingTimeActionProcessor';
 export * from './getLogger';
 export * from './getQpqLambdaRuntimeForEvent';
 export * from './getRuntimeCorrelation';

package/lib/esm/lambdaHandlers/helpers/index.js

@@ -1,5 +1,6 @@
 export * from './dynamicModuleLoaderWarmer';
 export * from './getBlankStorySession';
+export * from './getLambdaRuntimeRemainingTimeActionProcessor';
 export * from './getLogger';
 export * from './getQpqLambdaRuntimeForEvent';
 export * from './getRuntimeCorrelation';

package/lib/esm/lambdaHandlers/helpers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lambdaHandlers/helpers/index.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC","sourcesContent":["export * from './dynamicModuleLoaderWarmer';\nexport * from './getBlankStorySession';\nexport * from './getLogger';\nexport * from './getQpqLambdaRuntimeForEvent';\nexport * from './getRuntimeCorrelation';\nexport * from './isSnsWarmerRecord';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/lambdaHandlers/helpers/index.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wBAAwB,CAAC;AACvC,cAAc,gDAAgD,CAAC;AAC/D,cAAc,aAAa,CAAC;AAC5B,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC","sourcesContent":["export * from './dynamicModuleLoaderWarmer';\nexport * from './getBlankStorySession';\nexport * from './getLambdaRuntimeRemainingTimeActionProcessor';\nexport * from './getLogger';\nexport * from './getQpqLambdaRuntimeForEvent';\nexport * from './getRuntimeCorrelation';\nexport * from './isSnsWarmerRecord';\n"]}

package/lib/esm/logic/kms/getCachedPublicKey.d.ts

@@ -0,0 +1 @@
+export declare const getCachedPublicKey: (keyAlias: string, region: string) => Promise<string>;

package/lib/esm/logic/kms/getCachedPublicKey.js

@@ -0,0 +1,32 @@
+import { spkiDerToPem } from 'quidproquo-actionprocessor-node';
+import { GetPublicKeyCommand, KMSClient } from '@aws-sdk/client-kms';
+import { createAwsClient } from '../createAwsClient';
+// The public half of a signing key is immutable for the life of the key, so it is
+// fetched once per alias per runtime and verification runs locally from then on:
+// askCryptoVerify costs no KMS call after warm-up, and needs no kms:Verify grant.
+// Bounded by age only so a key replaced under the same alias is picked up.
+const PUBLIC_KEY_MAX_AGE_MS = 60 * 60 * 1000;
+const cache = new Map();
+export const getCachedPublicKey = async (keyAlias, region) => {
+    const cacheKey = `${region}|${keyAlias}`;
+    const cached = cache.get(cacheKey);
+    if (cached && cached.expiresAt > Date.now()) {
+        return cached.publicKeyPem;
+    }
+    const kmsClient = createAwsClient(KMSClient, {
+        region,
+    });
+    const response = await kmsClient.send(new GetPublicKeyCommand({
+        KeyId: keyAlias,
+    }));
+    if (!response.PublicKey) {
+        throw new Error(`KMS returned no public key for [${keyAlias}]`);
+    }
+    const publicKeyPem = spkiDerToPem(Buffer.from(response.PublicKey));
+    cache.set(cacheKey, {
+        publicKeyPem,
+        expiresAt: Date.now() + PUBLIC_KEY_MAX_AGE_MS,
+    });
+    return publicKeyPem;
+};
+//# sourceMappingURL=getCachedPublicKey.js.map

package/lib/esm/logic/kms/getCachedPublicKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getCachedPublicKey.js","sourceRoot":"","sources":["../../../../src/logic/kms/getCachedPublicKey.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAE/D,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,kFAAkF;AAClF,iFAAiF;AACjF,kFAAkF;AAClF,2EAA2E;AAC3E,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAO7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,QAAgB,EAAE,MAAc,EAAmB,EAAE;IAC5F,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,EAAE;QAC3C,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CACnC,IAAI,mBAAmB,CAAC;QACtB,KAAK,EAAE,QAAQ;KAChB,CAAC,CACH,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,GAAG,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAEnE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;QAClB,YAAY;QACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB;KAC9C,CAAC,CAAC;IAEH,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC","sourcesContent":["import { spkiDerToPem } from 'quidproquo-actionprocessor-node';\n\nimport { GetPublicKeyCommand, KMSClient } from '@aws-sdk/client-kms';\n\nimport { createAwsClient } from '../createAwsClient';\n\n// The public half of a signing key is immutable for the life of the key, so it is\n// fetched once per alias per runtime and verification runs locally from then on:\n// askCryptoVerify costs no KMS call after warm-up, and needs no kms:Verify grant.\n// Bounded by age only so a key replaced under the same alias is picked up.\nconst PUBLIC_KEY_MAX_AGE_MS = 60 * 60 * 1000;\n\ntype CachedPublicKey = {\n  publicKeyPem: string;\n  expiresAt: number;\n};\n\nconst cache = new Map<string, CachedPublicKey>();\n\nexport const getCachedPublicKey = async (keyAlias: string, region: string): Promise<string> => {\n  const cacheKey = `${region}|${keyAlias}`;\n\n  const cached = cache.get(cacheKey);\n  if (cached && cached.expiresAt > Date.now()) {\n    return cached.publicKeyPem;\n  }\n\n  const kmsClient = createAwsClient(KMSClient, {\n    region,\n  });\n\n  const response = await kmsClient.send(\n    new GetPublicKeyCommand({\n      KeyId: keyAlias,\n    }),\n  );\n\n  if (!response.PublicKey) {\n    throw new Error(`KMS returned no public key for [${keyAlias}]`);\n  }\n\n  const publicKeyPem = spkiDerToPem(Buffer.from(response.PublicKey));\n\n  cache.set(cacheKey, {\n    publicKeyPem,\n    expiresAt: Date.now() + PUBLIC_KEY_MAX_AGE_MS,\n  });\n\n  return publicKeyPem;\n};\n"]}

package/lib/esm/logic/kms/signWithKey.d.ts

@@ -0,0 +1 @@
+export declare const signWithKey: (keyAlias: string, message: string, region: string) => Promise<Buffer>;

package/lib/esm/logic/kms/signWithKey.js

@@ -0,0 +1,21 @@
+import { RS256_KMS_SIGNING_ALGORITHM } from 'quidproquo-actionprocessor-node';
+import { KMSClient, SignCommand } from '@aws-sdk/client-kms';
+import { createAwsClient } from '../createAwsClient';
+// One kms:Sign per call: the private key never leaves KMS, so there is nothing
+// to cache here. Returns the raw signature bytes.
+export const signWithKey = async (keyAlias, message, region) => {
+    const kmsClient = createAwsClient(KMSClient, {
+        region,
+    });
+    const response = await kmsClient.send(new SignCommand({
+        KeyId: keyAlias,
+        Message: Buffer.from(message, 'utf8'),
+        MessageType: 'RAW',
+        SigningAlgorithm: RS256_KMS_SIGNING_ALGORITHM,
+    }));
+    if (!response.Signature) {
+        throw new Error(`KMS returned no signature for [${keyAlias}]`);
+    }
+    return Buffer.from(response.Signature);
+};
+//# sourceMappingURL=signWithKey.js.map

package/lib/esm/logic/kms/signWithKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signWithKey.js","sourceRoot":"","sources":["../../../../src/logic/kms/signWithKey.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAE9E,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,+EAA+E;AAC/E,kDAAkD;AAClD,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,QAAgB,EAAE,OAAe,EAAE,MAAc,EAAmB,EAAE;IACtG,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,EAAE;QAC3C,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CACnC,IAAI,WAAW,CAAC;QACd,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QACrC,WAAW,EAAE,KAAK;QAClB,gBAAgB,EAAE,2BAA2B;KAC9C,CAAC,CACH,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,GAAG,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACzC,CAAC,CAAC","sourcesContent":["import { RS256_KMS_SIGNING_ALGORITHM } from 'quidproquo-actionprocessor-node';\n\nimport { KMSClient, SignCommand } from '@aws-sdk/client-kms';\n\nimport { createAwsClient } from '../createAwsClient';\n\n// One kms:Sign per call: the private key never leaves KMS, so there is nothing\n// to cache here. Returns the raw signature bytes.\nexport const signWithKey = async (keyAlias: string, message: string, region: string): Promise<Buffer> => {\n  const kmsClient = createAwsClient(KMSClient, {\n    region,\n  });\n\n  const response = await kmsClient.send(\n    new SignCommand({\n      KeyId: keyAlias,\n      Message: Buffer.from(message, 'utf8'),\n      MessageType: 'RAW',\n      SigningAlgorithm: RS256_KMS_SIGNING_ALGORITHM,\n    }),\n  );\n\n  if (!response.Signature) {\n    throw new Error(`KMS returned no signature for [${keyAlias}]`);\n  }\n\n  return Buffer.from(response.Signature);\n};\n"]}

package/lib/esm/logic/s3/copyFile.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Server-side copies one object to another key (same or another bucket). The default COPY metadata
+ * directive carries the stored Content-Type / Content-Disposition across unchanged.
+ */
+export declare const copyFile: (sourceBucketName: string, sourceKey: string, targetBucketName: string, targetKey: string, region: string) => Promise<void>;

package/lib/esm/logic/s3/copyFile.js

@@ -0,0 +1,18 @@
+import { CopyObjectCommand, S3Client } from '@aws-sdk/client-s3';
+import { createAwsClient } from '../createAwsClient';
+// CopySource is a URL path, so each key segment is percent-encoded (a key can hold spaces, '+', '#'...);
+// the '/' between segments stays a separator.
+const encodeCopySource = (bucketName, key) => `${bucketName}/${key.split('/').map(encodeURIComponent).join('/')}`;
+/**
+ * Server-side copies one object to another key (same or another bucket). The default COPY metadata
+ * directive carries the stored Content-Type / Content-Disposition across unchanged.
+ */
+export const copyFile = async (sourceBucketName, sourceKey, targetBucketName, targetKey, region) => {
+    const s3Client = createAwsClient(S3Client, { region });
+    await s3Client.send(new CopyObjectCommand({
+        CopySource: encodeCopySource(sourceBucketName, sourceKey),
+        Bucket: targetBucketName,
+        Key: targetKey,
+    }));
+};
+//# sourceMappingURL=copyFile.js.map

package/lib/esm/logic/s3/copyFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"copyFile.js","sourceRoot":"","sources":["../../../../src/logic/s3/copyFile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEjE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,yGAAyG;AACzG,8CAA8C;AAC9C,MAAM,gBAAgB,GAAG,CAAC,UAAkB,EAAE,GAAW,EAAU,EAAE,CAAC,GAAG,UAAU,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAE1I;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAC3B,gBAAwB,EACxB,SAAiB,EACjB,gBAAwB,EACxB,SAAiB,EACjB,MAAc,EACC,EAAE;IACjB,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvD,MAAM,QAAQ,CAAC,IAAI,CACjB,IAAI,iBAAiB,CAAC;QACpB,UAAU,EAAE,gBAAgB,CAAC,gBAAgB,EAAE,SAAS,CAAC;QACzD,MAAM,EAAE,gBAAgB;QACxB,GAAG,EAAE,SAAS;KACf,CAAC,CACH,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { CopyObjectCommand, S3Client } from '@aws-sdk/client-s3';\n\nimport { createAwsClient } from '../createAwsClient';\n\n// CopySource is a URL path, so each key segment is percent-encoded (a key can hold spaces, '+', '#'...);\n// the '/' between segments stays a separator.\nconst encodeCopySource = (bucketName: string, key: string): string => `${bucketName}/${key.split('/').map(encodeURIComponent).join('/')}`;\n\n/**\n * Server-side copies one object to another key (same or another bucket). The default COPY metadata\n * directive carries the stored Content-Type / Content-Disposition across unchanged.\n */\nexport const copyFile = async (\n  sourceBucketName: string,\n  sourceKey: string,\n  targetBucketName: string,\n  targetKey: string,\n  region: string,\n): Promise<void> => {\n  const s3Client = createAwsClient(S3Client, { region });\n\n  await s3Client.send(\n    new CopyObjectCommand({\n      CopySource: encodeCopySource(sourceBucketName, sourceKey),\n      Bucket: targetBucketName,\n      Key: targetKey,\n    }),\n  );\n};\n"]}

package/lib/esm/logic/s3/s3Utils.d.ts

@@ -1,3 +1,4 @@
+export * from './copyFile';
 export * from './deleteFiles';
 export * from './generatePresignedUploadUrl';
 export * from './generatePresignedUrl';

package/lib/esm/logic/s3/s3Utils.js

@@ -1,5 +1,6 @@
 // The s3 folder's barrel (kept under its historical name: many processors and their
 // vi.mock calls point at 'logic/s3/s3Utils').
+export * from './copyFile';
 export * from './deleteFiles';
 export * from './generatePresignedUploadUrl';
 export * from './generatePresignedUrl';

package/lib/esm/logic/s3/s3Utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"s3Utils.js","sourceRoot":"","sources":["../../../../src/logic/s3/s3Utils.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8CAA8C;AAC9C,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC","sourcesContent":["// The s3 folder's barrel (kept under its historical name: many processors and their\n// vi.mock calls point at 'logic/s3/s3Utils').\nexport * from './deleteFiles';\nexport * from './generatePresignedUploadUrl';\nexport * from './generatePresignedUrl';\nexport * from './getObjectStorageClass';\nexport * from './listFiles';\nexport * from './objectExists';\nexport * from './readBinaryFile';\nexport * from './readTextFile';\nexport * from './writeBinaryFile';\nexport * from './writeTextFile';\n"]}
+{"version":3,"file":"s3Utils.js","sourceRoot":"","sources":["../../../../src/logic/s3/s3Utils.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8CAA8C;AAC9C,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC","sourcesContent":["// The s3 folder's barrel (kept under its historical name: many processors and their\n// vi.mock calls point at 'logic/s3/s3Utils').\nexport * from './copyFile';\nexport * from './deleteFiles';\nexport * from './generatePresignedUploadUrl';\nexport * from './generatePresignedUrl';\nexport * from './getObjectStorageClass';\nexport * from './listFiles';\nexport * from './objectExists';\nexport * from './readBinaryFile';\nexport * from './readTextFile';\nexport * from './writeBinaryFile';\nexport * from './writeTextFile';\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "quidproquo-actionprocessor-awslambda",
-  "version": "0.1.23",
+  "version": "0.1.25",
   "description": "",
   "main": "./lib/commonjs/index.js",
   "module": "./lib/esm/index.js",
@@ -66,11 +66,11 @@
     "lodash": "^4.17.21",
     "node-cache": "^5.1.2",
     "node-match-path": "^0.6.3",
-    "quidproquo-actionprocessor-js": "0.1.23",
-    "quidproquo-actionprocessor-node": "0.1.23",
-    "quidproquo-config-aws": "0.1.23",
-    "quidproquo-core": "0.1.23",
-    "quidproquo-webserver": "0.1.23"
+    "quidproquo-actionprocessor-js": "0.1.25",
+    "quidproquo-actionprocessor-node": "0.1.25",
+    "quidproquo-config-aws": "0.1.25",
+    "quidproquo-core": "0.1.25",
+    "quidproquo-webserver": "0.1.25"
   },
   "devDependencies": {
     "@types/busboy": "^1.5.0",
@@ -78,7 +78,7 @@
     "@types/lodash": "^4.14.194",
     "@types/node": "^22.13.13",
     "esbuild": "^0.25.8",
-    "quidproquo-tsconfig": "0.1.23",
+    "quidproquo-tsconfig": "0.1.25",
     "typescript": "^5.8.2"
   }
 }