quidproquo-core 0.1.11 → 0.1.13

package/lib/commonjs/actions/crypto/CryptoActionType.d.ts

@@ -0,0 +1,4 @@
+export declare enum CryptoActionType {
+    Encrypt = "@quidproquo-core/Crypto/Encrypt",
+    Decrypt = "@quidproquo-core/Crypto/Decrypt"
+}

package/lib/commonjs/actions/crypto/CryptoActionType.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CryptoActionType = void 0;
+var CryptoActionType;
+(function (CryptoActionType) {
+    CryptoActionType["Encrypt"] = "@quidproquo-core/Crypto/Encrypt";
+    CryptoActionType["Decrypt"] = "@quidproquo-core/Crypto/Decrypt";
+})(CryptoActionType || (exports.CryptoActionType = CryptoActionType = {}));
+//# sourceMappingURL=CryptoActionType.js.map

package/lib/commonjs/actions/crypto/CryptoActionType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoActionType.js","sourceRoot":"","sources":["../../../../src/actions/crypto/CryptoActionType.ts"],"names":[],"mappings":";;;AAAA,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,+DAA2C,CAAA;IAC3C,+DAA2C,CAAA;AAC7C,CAAC,EAHW,gBAAgB,gCAAhB,gBAAgB,QAG3B","sourcesContent":["export enum CryptoActionType {\n  Encrypt = '@quidproquo-core/Crypto/Encrypt',\n  Decrypt = '@quidproquo-core/Crypto/Decrypt',\n}\n"]}

package/lib/commonjs/actions/crypto/CryptoContext.d.ts

@@ -0,0 +1 @@
+export type CryptoContext = Record<string, string>;

package/lib/commonjs/actions/crypto/CryptoContext.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=CryptoContext.js.map

package/lib/commonjs/actions/crypto/CryptoContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoContext.js","sourceRoot":"","sources":["../../../../src/actions/crypto/CryptoContext.ts"],"names":[],"mappings":"","sourcesContent":["// Opaque additional-authenticated-data for crypto operations: the same pairs\n// must be supplied at encrypt and decrypt or decryption fails. Values are NOT\n// encrypted and NOT secret (they appear in provider audit logs in the clear).\nexport type CryptoContext = Record<string, string>;\n"]}

package/lib/commonjs/actions/crypto/CryptoDecryptActionRequester.d.ts

@@ -0,0 +1,10 @@
+import { CryptoContext } from './CryptoContext';
+import { CryptoDecryptActionRequester } from './CryptoDecryptActionTypes';
+export declare const CryptoDecryptErrorTypeEnum: {
+    Throttling: string;
+    KeyNotConfigured: string;
+    ContextMismatch: string;
+    MalformedCiphertext: string;
+    KeyUnavailable: string;
+};
+export declare function askCryptoDecrypt(keyName: string, ciphertext: string, context?: CryptoContext): CryptoDecryptActionRequester;

package/lib/commonjs/actions/crypto/CryptoDecryptActionRequester.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CryptoDecryptErrorTypeEnum = void 0;
+exports.askCryptoDecrypt = askCryptoDecrypt;
+const types_1 = require("../../types");
+const CryptoActionType_1 = require("./CryptoActionType");
+exports.CryptoDecryptErrorTypeEnum = (0, types_1.createErrorEnumForAction)(CryptoActionType_1.CryptoActionType.Decrypt, [
+    'KeyNotConfigured', // no defineCryptoKey for keyName in the service config
+    'ContextMismatch', // supplied context differs from the encrypt-time context; probable scoping bug, do not retry
+    'MalformedCiphertext', // ciphertext is corrupt, truncated, or not a qpq crypto blob
+    'KeyUnavailable', // key disabled, deleted, or access denied
+    'Throttling', // request rate exceeded
+]);
+function* askCryptoDecrypt(keyName, ciphertext, context) {
+    return yield { type: CryptoActionType_1.CryptoActionType.Decrypt, payload: { keyName, ciphertext, context } };
+}
+//# sourceMappingURL=CryptoDecryptActionRequester.js.map

package/lib/commonjs/actions/crypto/CryptoDecryptActionRequester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoDecryptActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/crypto/CryptoDecryptActionRequester.ts"],"names":[],"mappings":";;;AAaA,4CAEC;AAfD,uCAAuD;AACvD,yDAAsD;AAIzC,QAAA,0BAA0B,GAAG,IAAA,gCAAwB,EAAC,mCAAgB,CAAC,OAAO,EAAE;IAC3F,kBAAkB,EAAE,uDAAuD;IAC3E,iBAAiB,EAAE,6FAA6F;IAChH,qBAAqB,EAAE,6DAA6D;IACpF,gBAAgB,EAAE,0CAA0C;IAC5D,YAAY,EAAE,wBAAwB;CACvC,CAAC,CAAC;AAEH,QAAe,CAAC,CAAC,gBAAgB,CAAC,OAAe,EAAE,UAAkB,EAAE,OAAuB;IAC5F,OAAO,MAAM,EAAE,IAAI,EAAE,mCAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;AAC7F,CAAC","sourcesContent":["import { createErrorEnumForAction } from '../../types';\nimport { CryptoActionType } from './CryptoActionType';\nimport { CryptoContext } from './CryptoContext';\nimport { CryptoDecryptActionRequester } from './CryptoDecryptActionTypes';\n\nexport const CryptoDecryptErrorTypeEnum = createErrorEnumForAction(CryptoActionType.Decrypt, [\n  'KeyNotConfigured', // no defineCryptoKey for keyName in the service config\n  'ContextMismatch', // supplied context differs from the encrypt-time context; probable scoping bug, do not retry\n  'MalformedCiphertext', // ciphertext is corrupt, truncated, or not a qpq crypto blob\n  'KeyUnavailable', // key disabled, deleted, or access denied\n  'Throttling', // request rate exceeded\n]);\n\nexport function* askCryptoDecrypt(keyName: string, ciphertext: string, context?: CryptoContext): CryptoDecryptActionRequester {\n  return yield { type: CryptoActionType.Decrypt, payload: { keyName, ciphertext, context } };\n}\n"]}

package/lib/commonjs/actions/crypto/CryptoDecryptActionTypes.d.ts

@@ -0,0 +1,14 @@
+import { Action, ActionProcessor, ActionRequester } from '../../types/Action';
+import { CryptoActionType } from './CryptoActionType';
+import { CryptoContext } from './CryptoContext';
+export interface CryptoDecryptActionPayload {
+    keyName: string;
+    ciphertext: string;
+    context?: CryptoContext;
+}
+export interface CryptoDecryptAction extends Action<CryptoDecryptActionPayload> {
+    type: CryptoActionType.Decrypt;
+    payload: CryptoDecryptActionPayload;
+}
+export type CryptoDecryptActionProcessor = ActionProcessor<CryptoDecryptAction, string>;
+export type CryptoDecryptActionRequester = ActionRequester<CryptoDecryptAction, string>;

package/lib/commonjs/actions/crypto/CryptoDecryptActionTypes.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=CryptoDecryptActionTypes.js.map

package/lib/commonjs/actions/crypto/CryptoDecryptActionTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoDecryptActionTypes.js","sourceRoot":"","sources":["../../../../src/actions/crypto/CryptoDecryptActionTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { Action, ActionProcessor, ActionRequester } from '../../types/Action';\nimport { CryptoActionType } from './CryptoActionType';\nimport { CryptoContext } from './CryptoContext';\n\n// Payload\nexport interface CryptoDecryptActionPayload {\n  keyName: string;\n  ciphertext: string;\n  context?: CryptoContext;\n}\n\n// Action\nexport interface CryptoDecryptAction extends Action<CryptoDecryptActionPayload> {\n  type: CryptoActionType.Decrypt;\n  payload: CryptoDecryptActionPayload;\n}\n\n// Function Types\nexport type CryptoDecryptActionProcessor = ActionProcessor<CryptoDecryptAction, string>;\nexport type CryptoDecryptActionRequester = ActionRequester<CryptoDecryptAction, string>;\n"]}

package/lib/commonjs/actions/crypto/CryptoEncryptActionRequester.d.ts

@@ -0,0 +1,8 @@
+import { CryptoContext } from './CryptoContext';
+import { CryptoEncryptActionRequester } from './CryptoEncryptActionTypes';
+export declare const CryptoEncryptErrorTypeEnum: {
+    Throttling: string;
+    KeyNotConfigured: string;
+    KeyUnavailable: string;
+};
+export declare function askCryptoEncrypt(keyName: string, plaintext: string, context?: CryptoContext): CryptoEncryptActionRequester;

package/lib/commonjs/actions/crypto/CryptoEncryptActionRequester.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CryptoEncryptErrorTypeEnum = void 0;
+exports.askCryptoEncrypt = askCryptoEncrypt;
+const types_1 = require("../../types");
+const CryptoActionType_1 = require("./CryptoActionType");
+exports.CryptoEncryptErrorTypeEnum = (0, types_1.createErrorEnumForAction)(CryptoActionType_1.CryptoActionType.Encrypt, [
+    'KeyNotConfigured', // no defineCryptoKey for keyName in the service config
+    'KeyUnavailable', // key disabled, deleted, or access denied
+    'Throttling', // request rate exceeded
+]);
+function* askCryptoEncrypt(keyName, plaintext, context) {
+    return yield { type: CryptoActionType_1.CryptoActionType.Encrypt, payload: { keyName, plaintext, context } };
+}
+//# sourceMappingURL=CryptoEncryptActionRequester.js.map

package/lib/commonjs/actions/crypto/CryptoEncryptActionRequester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoEncryptActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/crypto/CryptoEncryptActionRequester.ts"],"names":[],"mappings":";;;AAWA,4CAEC;AAbD,uCAAuD;AACvD,yDAAsD;AAIzC,QAAA,0BAA0B,GAAG,IAAA,gCAAwB,EAAC,mCAAgB,CAAC,OAAO,EAAE;IAC3F,kBAAkB,EAAE,uDAAuD;IAC3E,gBAAgB,EAAE,0CAA0C;IAC5D,YAAY,EAAE,wBAAwB;CACvC,CAAC,CAAC;AAEH,QAAe,CAAC,CAAC,gBAAgB,CAAC,OAAe,EAAE,SAAiB,EAAE,OAAuB;IAC3F,OAAO,MAAM,EAAE,IAAI,EAAE,mCAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;AAC5F,CAAC","sourcesContent":["import { createErrorEnumForAction } from '../../types';\nimport { CryptoActionType } from './CryptoActionType';\nimport { CryptoContext } from './CryptoContext';\nimport { CryptoEncryptActionRequester } from './CryptoEncryptActionTypes';\n\nexport const CryptoEncryptErrorTypeEnum = createErrorEnumForAction(CryptoActionType.Encrypt, [\n  'KeyNotConfigured', // no defineCryptoKey for keyName in the service config\n  'KeyUnavailable', // key disabled, deleted, or access denied\n  'Throttling', // request rate exceeded\n]);\n\nexport function* askCryptoEncrypt(keyName: string, plaintext: string, context?: CryptoContext): CryptoEncryptActionRequester {\n  return yield { type: CryptoActionType.Encrypt, payload: { keyName, plaintext, context } };\n}\n"]}

package/lib/commonjs/actions/crypto/CryptoEncryptActionTypes.d.ts

@@ -0,0 +1,14 @@
+import { Action, ActionProcessor, ActionRequester } from '../../types/Action';
+import { CryptoActionType } from './CryptoActionType';
+import { CryptoContext } from './CryptoContext';
+export interface CryptoEncryptActionPayload {
+    keyName: string;
+    plaintext: string;
+    context?: CryptoContext;
+}
+export interface CryptoEncryptAction extends Action<CryptoEncryptActionPayload> {
+    type: CryptoActionType.Encrypt;
+    payload: CryptoEncryptActionPayload;
+}
+export type CryptoEncryptActionProcessor = ActionProcessor<CryptoEncryptAction, string>;
+export type CryptoEncryptActionRequester = ActionRequester<CryptoEncryptAction, string>;

package/lib/commonjs/actions/crypto/CryptoEncryptActionTypes.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=CryptoEncryptActionTypes.js.map

package/lib/commonjs/actions/crypto/CryptoEncryptActionTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoEncryptActionTypes.js","sourceRoot":"","sources":["../../../../src/actions/crypto/CryptoEncryptActionTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { Action, ActionProcessor, ActionRequester } from '../../types/Action';\nimport { CryptoActionType } from './CryptoActionType';\nimport { CryptoContext } from './CryptoContext';\n\n// Payload\nexport interface CryptoEncryptActionPayload {\n  keyName: string;\n  plaintext: string;\n  context?: CryptoContext;\n}\n\n// Action\nexport interface CryptoEncryptAction extends Action<CryptoEncryptActionPayload> {\n  type: CryptoActionType.Encrypt;\n  payload: CryptoEncryptActionPayload;\n}\n\n// Function Types\nexport type CryptoEncryptActionProcessor = ActionProcessor<CryptoEncryptAction, string>;\nexport type CryptoEncryptActionRequester = ActionRequester<CryptoEncryptAction, string>;\n"]}

package/lib/commonjs/actions/crypto/index.d.ts

@@ -0,0 +1,6 @@
+export * from './CryptoActionType';
+export * from './CryptoContext';
+export * from './CryptoDecryptActionRequester';
+export * from './CryptoDecryptActionTypes';
+export * from './CryptoEncryptActionRequester';
+export * from './CryptoEncryptActionTypes';

package/lib/commonjs/actions/crypto/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./CryptoActionType"), exports);
+__exportStar(require("./CryptoContext"), exports);
+__exportStar(require("./CryptoDecryptActionRequester"), exports);
+__exportStar(require("./CryptoDecryptActionTypes"), exports);
+__exportStar(require("./CryptoEncryptActionRequester"), exports);
+__exportStar(require("./CryptoEncryptActionTypes"), exports);
+//# sourceMappingURL=index.js.map

package/lib/commonjs/actions/crypto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/crypto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,kDAAgC;AAChC,iEAA+C;AAC/C,6DAA2C;AAC3C,iEAA+C;AAC/C,6DAA2C","sourcesContent":["export * from './CryptoActionType';\nexport * from './CryptoContext';\nexport * from './CryptoDecryptActionRequester';\nexport * from './CryptoDecryptActionTypes';\nexport * from './CryptoEncryptActionRequester';\nexport * from './CryptoEncryptActionTypes';\n"]}

package/lib/commonjs/actions/index.d.ts

@@ -2,6 +2,7 @@ export * from './ai';
 export * from './claudeAi';
 export * from './config';
 export * from './context';
+export * from './crypto';
 export * from './date';
 export * from './error';
 export * from './event';

package/lib/commonjs/actions/index.js

@@ -18,6 +18,7 @@ __exportStar(require("./ai"), exports);
 __exportStar(require("./claudeAi"), exports);
 __exportStar(require("./config"), exports);
 __exportStar(require("./context"), exports);
+__exportStar(require("./crypto"), exports);
 __exportStar(require("./date"), exports);
 __exportStar(require("./error"), exports);
 __exportStar(require("./event"), exports);

package/lib/commonjs/actions/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/actions/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uCAAqB;AACrB,6CAA2B;AAC3B,2CAAyB;AACzB,4CAA0B;AAC1B,yCAAuB;AACvB,0CAAwB;AACxB,0CAAwB;AACxB,6CAA2B;AAC3B,yCAAuB;AACvB,kDAAgC;AAChC,yCAAuB;AACvB,mDAAiC;AACjC,kDAAgC;AAChC,wCAAsB;AACtB,yCAAuB;AACvB,2CAAyB;AACzB,4CAA0B;AAC1B,6CAA2B;AAC3B,0CAAwB;AACxB,0CAAwB;AACxB,2CAAyB;AACzB,2CAAyB;AACzB,kDAAgC","sourcesContent":["export * from './ai';\nexport * from './claudeAi';\nexport * from './config';\nexport * from './context';\nexport * from './date';\nexport * from './error';\nexport * from './event';\nexport * from './eventBus';\nexport * from './file';\nexport * from './graphDatabase';\nexport * from './guid';\nexport * from './inlineFunction';\nexport * from './keyValueStore';\nexport * from './log';\nexport * from './math';\nexport * from './metric';\nexport * from './network';\nexport * from './platform';\nexport * from './queue';\nexport * from './state';\nexport * from './stream';\nexport * from './system';\nexport * from './userDirectory';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/actions/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uCAAqB;AACrB,6CAA2B;AAC3B,2CAAyB;AACzB,4CAA0B;AAC1B,2CAAyB;AACzB,yCAAuB;AACvB,0CAAwB;AACxB,0CAAwB;AACxB,6CAA2B;AAC3B,yCAAuB;AACvB,kDAAgC;AAChC,yCAAuB;AACvB,mDAAiC;AACjC,kDAAgC;AAChC,wCAAsB;AACtB,yCAAuB;AACvB,2CAAyB;AACzB,4CAA0B;AAC1B,6CAA2B;AAC3B,0CAAwB;AACxB,0CAAwB;AACxB,2CAAyB;AACzB,2CAAyB;AACzB,kDAAgC","sourcesContent":["export * from './ai';\nexport * from './claudeAi';\nexport * from './config';\nexport * from './context';\nexport * from './crypto';\nexport * from './date';\nexport * from './error';\nexport * from './event';\nexport * from './eventBus';\nexport * from './file';\nexport * from './graphDatabase';\nexport * from './guid';\nexport * from './inlineFunction';\nexport * from './keyValueStore';\nexport * from './log';\nexport * from './math';\nexport * from './metric';\nexport * from './network';\nexport * from './platform';\nexport * from './queue';\nexport * from './state';\nexport * from './stream';\nexport * from './system';\nexport * from './userDirectory';\n"]}

package/lib/commonjs/actions/keyValueStore/KeyValueStoreActionType.d.ts

@@ -5,5 +5,6 @@ export declare enum KeyValueStoreActionType {
     Delete = "@quidproquo-core/KeyValueStore/Delete",
     Update = "@quidproquo-core/KeyValueStore/Update",
     Query = "@quidproquo-core/KeyValueStore/Query",
-    Scan = "@quidproquo-core/KeyValueStore/Scan"
+    Scan = "@quidproquo-core/KeyValueStore/Scan",
+    ScanAllScopes = "@quidproquo-core/KeyValueStore/ScanAllScopes"
 }

package/lib/commonjs/actions/keyValueStore/KeyValueStoreActionType.js

@@ -10,5 +10,6 @@ var KeyValueStoreActionType;
     KeyValueStoreActionType["Update"] = "@quidproquo-core/KeyValueStore/Update";
     KeyValueStoreActionType["Query"] = "@quidproquo-core/KeyValueStore/Query";
     KeyValueStoreActionType["Scan"] = "@quidproquo-core/KeyValueStore/Scan";
+    KeyValueStoreActionType["ScanAllScopes"] = "@quidproquo-core/KeyValueStore/ScanAllScopes";
 })(KeyValueStoreActionType || (exports.KeyValueStoreActionType = KeyValueStoreActionType = {}));
 //# sourceMappingURL=KeyValueStoreActionType.js.map

package/lib/commonjs/actions/keyValueStore/KeyValueStoreActionType.js.map

@@ -1 +1 @@
-{"version":3,"file":"KeyValueStoreActionType.js","sourceRoot":"","sources":["../../../../src/actions/keyValueStore/KeyValueStoreActionType.ts"],"names":[],"mappings":";;;AAAA,IAAY,uBAQX;AARD,WAAY,uBAAuB;IACjC,2EAAgD,CAAA;IAChD,qEAA0C,CAAA;IAC1C,2EAAgD,CAAA;IAChD,2EAAgD,CAAA;IAChD,2EAAgD,CAAA;IAChD,yEAA8C,CAAA;IAC9C,uEAA4C,CAAA;AAC9C,CAAC,EARW,uBAAuB,uCAAvB,uBAAuB,QAQlC","sourcesContent":["export enum KeyValueStoreActionType {\n  Upsert = '@quidproquo-core/KeyValueStore/Upsert',\n  Get = '@quidproquo-core/KeyValueStore/Get',\n  GetAll = '@quidproquo-core/KeyValueStore/GetAll',\n  Delete = '@quidproquo-core/KeyValueStore/Delete',\n  Update = '@quidproquo-core/KeyValueStore/Update',\n  Query = '@quidproquo-core/KeyValueStore/Query',\n  Scan = '@quidproquo-core/KeyValueStore/Scan',\n}\n"]}
+{"version":3,"file":"KeyValueStoreActionType.js","sourceRoot":"","sources":["../../../../src/actions/keyValueStore/KeyValueStoreActionType.ts"],"names":[],"mappings":";;;AAAA,IAAY,uBASX;AATD,WAAY,uBAAuB;IACjC,2EAAgD,CAAA;IAChD,qEAA0C,CAAA;IAC1C,2EAAgD,CAAA;IAChD,2EAAgD,CAAA;IAChD,2EAAgD,CAAA;IAChD,yEAA8C,CAAA;IAC9C,uEAA4C,CAAA;IAC5C,yFAA8D,CAAA;AAChE,CAAC,EATW,uBAAuB,uCAAvB,uBAAuB,QASlC","sourcesContent":["export enum KeyValueStoreActionType {\n  Upsert = '@quidproquo-core/KeyValueStore/Upsert',\n  Get = '@quidproquo-core/KeyValueStore/Get',\n  GetAll = '@quidproquo-core/KeyValueStore/GetAll',\n  Delete = '@quidproquo-core/KeyValueStore/Delete',\n  Update = '@quidproquo-core/KeyValueStore/Update',\n  Query = '@quidproquo-core/KeyValueStore/Query',\n  Scan = '@quidproquo-core/KeyValueStore/Scan',\n  ScanAllScopes = '@quidproquo-core/KeyValueStore/ScanAllScopes',\n}\n"]}

package/lib/commonjs/actions/keyValueStore/KeyValueStoreScanAllScopesActionRequester.d.ts

@@ -0,0 +1,32 @@
+import { KeyValueStoreScanAllScopesActionRequester, KeyValueStoreScanAllScopesOptions } from './KeyValueStoreScanAllScopesActionTypes';
+import { KvsQueryOperation } from './types';
+export declare const KeyValueStoreScanAllScopesErrorTypeEnum: {
+    ResourceNotFound: string;
+    ServiceUnavailable: string;
+    StoreNotFound: string;
+};
+/**
+ * Read EVERY row in a store, across every scope, each paired with the scope it lives under.
+ *
+ * This deliberately crosses the tenant boundary that the rest of the KVS layer works hard to
+ * hold. An ordinary unscoped Scan cannot see scoped rows at all: the translator ANDs on a
+ * predicate that excludes them, precisely so one tenant's request can never read another's.
+ * That is the right default and nothing about it changes.
+ *
+ * The exception exists for MIGRATIONS, where the job is "rewrite every row" and any row you
+ * cannot see is data you silently leave behind. The alternative is asking the app to
+ * enumerate its own tenants and loop, which fails quietly the moment that list is incomplete.
+ *
+ * So: reach for this only from a migration or an equivalent whole-store operation, never on a
+ * request path. Nothing in the framework calls it, and a caller with a user's request in hand
+ * has no business using it — scope is what keeps tenants apart, and this steps over it.
+ *
+ * The scope comes back per row rather than being discarded, so a caller can write each row
+ * back where it came from.
+ *
+ * DRAIN THE PAGE KEY: loop until `nextPageKey` comes back undefined. Every backend pages,
+ * including the local one, deliberately so — a backend that returned everything in one call
+ * would let a caller stop after the first page, be right locally, and silently skip most of
+ * the data deployed. A local run has to be able to prove the loop.
+ */
+export declare function askKeyValueStoreScanAllScopes<KvsItem>(keyValueStoreName: string, filterCondition?: KvsQueryOperation, nextPageKey?: string, options?: KeyValueStoreScanAllScopesOptions): KeyValueStoreScanAllScopesActionRequester<KvsItem>;

package/lib/commonjs/actions/keyValueStore/KeyValueStoreScanAllScopesActionRequester.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeyValueStoreScanAllScopesErrorTypeEnum = void 0;
+exports.askKeyValueStoreScanAllScopes = askKeyValueStoreScanAllScopes;
+const types_1 = require("../../types");
+const KeyValueStoreActionType_1 = require("./KeyValueStoreActionType");
+exports.KeyValueStoreScanAllScopesErrorTypeEnum = (0, types_1.createErrorEnumForAction)(KeyValueStoreActionType_1.KeyValueStoreActionType.ScanAllScopes, [
+    'ServiceUnavailable', // DynamoDB internal error / throttling
+    'ResourceNotFound', // the underlying table does not exist
+    'StoreNotFound', // the store is not declared in the qpq config (misconfiguration)
+]);
+/**
+ * Read EVERY row in a store, across every scope, each paired with the scope it lives under.
+ *
+ * This deliberately crosses the tenant boundary that the rest of the KVS layer works hard to
+ * hold. An ordinary unscoped Scan cannot see scoped rows at all: the translator ANDs on a
+ * predicate that excludes them, precisely so one tenant's request can never read another's.
+ * That is the right default and nothing about it changes.
+ *
+ * The exception exists for MIGRATIONS, where the job is "rewrite every row" and any row you
+ * cannot see is data you silently leave behind. The alternative is asking the app to
+ * enumerate its own tenants and loop, which fails quietly the moment that list is incomplete.
+ *
+ * So: reach for this only from a migration or an equivalent whole-store operation, never on a
+ * request path. Nothing in the framework calls it, and a caller with a user's request in hand
+ * has no business using it — scope is what keeps tenants apart, and this steps over it.
+ *
+ * The scope comes back per row rather than being discarded, so a caller can write each row
+ * back where it came from.
+ *
+ * DRAIN THE PAGE KEY: loop until `nextPageKey` comes back undefined. Every backend pages,
+ * including the local one, deliberately so — a backend that returned everything in one call
+ * would let a caller stop after the first page, be right locally, and silently skip most of
+ * the data deployed. A local run has to be able to prove the loop.
+ */
+function* askKeyValueStoreScanAllScopes(keyValueStoreName, filterCondition, nextPageKey, options) {
+    return yield {
+        type: KeyValueStoreActionType_1.KeyValueStoreActionType.ScanAllScopes,
+        payload: {
+            keyValueStoreName,
+            filterCondition,
+            nextPageKey,
+            options,
+        },
+    };
+}
+//# sourceMappingURL=KeyValueStoreScanAllScopesActionRequester.js.map

package/lib/commonjs/actions/keyValueStore/KeyValueStoreScanAllScopesActionRequester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeyValueStoreScanAllScopesActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/keyValueStore/KeyValueStoreScanAllScopesActionRequester.ts"],"names":[],"mappings":";;;AAmCA,sEAkBC;AArDD,uCAAuD;AACvD,uEAAoE;AAIvD,QAAA,uCAAuC,GAAG,IAAA,gCAAwB,EAAC,iDAAuB,CAAC,aAAa,EAAE;IACrH,oBAAoB,EAAE,uCAAuC;IAC7D,kBAAkB,EAAE,sCAAsC;IAC1D,eAAe,EAAE,iEAAiE;CACnF,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,QAAe,CAAC,CAAC,6BAA6B,CAC5C,iBAAyB,EACzB,eAAmC,EACnC,WAAoB,EACpB,OAA2C;IAE3C,OAAO,MAAM;QACX,IAAI,EAAE,iDAAuB,CAAC,aAAa;QAC3C,OAAO,EAAE;YACP,iBAAiB;YAEjB,eAAe;YAEf,WAAW;YAEX,OAAO;SACR;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createErrorEnumForAction } from '../../types';\nimport { KeyValueStoreActionType } from './KeyValueStoreActionType';\nimport { KeyValueStoreScanAllScopesActionRequester, KeyValueStoreScanAllScopesOptions } from './KeyValueStoreScanAllScopesActionTypes';\nimport { KvsQueryOperation } from './types';\n\nexport const KeyValueStoreScanAllScopesErrorTypeEnum = createErrorEnumForAction(KeyValueStoreActionType.ScanAllScopes, [\n  'ServiceUnavailable', // DynamoDB internal error / throttling\n  'ResourceNotFound', // the underlying table does not exist\n  'StoreNotFound', // the store is not declared in the qpq config (misconfiguration)\n]);\n\n/**\n * Read EVERY row in a store, across every scope, each paired with the scope it lives under.\n *\n * This deliberately crosses the tenant boundary that the rest of the KVS layer works hard to\n * hold. An ordinary unscoped Scan cannot see scoped rows at all: the translator ANDs on a\n * predicate that excludes them, precisely so one tenant's request can never read another's.\n * That is the right default and nothing about it changes.\n *\n * The exception exists for MIGRATIONS, where the job is \"rewrite every row\" and any row you\n * cannot see is data you silently leave behind. The alternative is asking the app to\n * enumerate its own tenants and loop, which fails quietly the moment that list is incomplete.\n *\n * So: reach for this only from a migration or an equivalent whole-store operation, never on a\n * request path. Nothing in the framework calls it, and a caller with a user's request in hand\n * has no business using it — scope is what keeps tenants apart, and this steps over it.\n *\n * The scope comes back per row rather than being discarded, so a caller can write each row\n * back where it came from.\n *\n * DRAIN THE PAGE KEY: loop until `nextPageKey` comes back undefined. Every backend pages,\n * including the local one, deliberately so — a backend that returned everything in one call\n * would let a caller stop after the first page, be right locally, and silently skip most of\n * the data deployed. A local run has to be able to prove the loop.\n */\nexport function* askKeyValueStoreScanAllScopes<KvsItem>(\n  keyValueStoreName: string,\n  filterCondition?: KvsQueryOperation,\n  nextPageKey?: string,\n  options?: KeyValueStoreScanAllScopesOptions,\n): KeyValueStoreScanAllScopesActionRequester<KvsItem> {\n  return yield {\n    type: KeyValueStoreActionType.ScanAllScopes,\n    payload: {\n      keyValueStoreName,\n\n      filterCondition,\n\n      nextPageKey,\n\n      options,\n    },\n  };\n}\n"]}

package/lib/commonjs/actions/keyValueStore/KeyValueStoreScanAllScopesActionTypes.d.ts

@@ -0,0 +1,23 @@
+import { QpqPagedData } from '../../types';
+import { Action, ActionProcessor, ActionRequester } from '../../types/Action';
+import { KeyValueStoreActionType } from './KeyValueStoreActionType';
+import { KvsQueryOperation } from './types';
+export type KvsScopedItem<KvsItem> = {
+    scope?: string;
+    item: KvsItem;
+};
+export interface KeyValueStoreScanAllScopesOptions {
+    limit?: number;
+}
+export interface KeyValueStoreScanAllScopesActionPayload {
+    keyValueStoreName: string;
+    filterCondition?: KvsQueryOperation;
+    nextPageKey?: string;
+    options?: KeyValueStoreScanAllScopesOptions;
+}
+export interface KeyValueStoreScanAllScopesAction extends Action<KeyValueStoreScanAllScopesActionPayload> {
+    type: KeyValueStoreActionType.ScanAllScopes;
+    payload: KeyValueStoreScanAllScopesActionPayload;
+}
+export type KeyValueStoreScanAllScopesActionProcessor<KvsItem> = ActionProcessor<KeyValueStoreScanAllScopesAction, QpqPagedData<KvsScopedItem<KvsItem>>>;
+export type KeyValueStoreScanAllScopesActionRequester<KvsItem> = ActionRequester<KeyValueStoreScanAllScopesAction, QpqPagedData<KvsScopedItem<KvsItem>>>;

package/lib/commonjs/actions/keyValueStore/KeyValueStoreScanAllScopesActionTypes.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=KeyValueStoreScanAllScopesActionTypes.js.map

package/lib/commonjs/actions/keyValueStore/KeyValueStoreScanAllScopesActionTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeyValueStoreScanAllScopesActionTypes.js","sourceRoot":"","sources":["../../../../src/actions/keyValueStore/KeyValueStoreScanAllScopesActionTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { QpqPagedData } from '../../types';\nimport { Action, ActionProcessor, ActionRequester } from '../../types/Action';\nimport { KeyValueStoreActionType } from './KeyValueStoreActionType';\nimport { KvsQueryOperation } from './types';\n\n// One row and the scope it lives under. `scope` is absent for an unscoped row.\n//\n// The scope is reported rather than dropped BECAUSE this crosses scopes: a caller that reads\n// every tenant's rows in one pass has to know which tenant each belongs to, or anything it\n// writes back lands in the wrong partition. Handing back bare items would make silent\n// cross-tenant corruption the easy mistake.\nexport type KvsScopedItem<KvsItem> = {\n  scope?: string;\n  item: KvsItem;\n};\n\n// Options Type\nexport interface KeyValueStoreScanAllScopesOptions {\n  limit?: number;\n}\n\n// Payload\nexport interface KeyValueStoreScanAllScopesActionPayload {\n  keyValueStoreName: string;\n\n  filterCondition?: KvsQueryOperation;\n\n  nextPageKey?: string;\n\n  options?: KeyValueStoreScanAllScopesOptions;\n}\n\n// Action\nexport interface KeyValueStoreScanAllScopesAction extends Action<KeyValueStoreScanAllScopesActionPayload> {\n  type: KeyValueStoreActionType.ScanAllScopes;\n  payload: KeyValueStoreScanAllScopesActionPayload;\n}\n\n// Function Types\nexport type KeyValueStoreScanAllScopesActionProcessor<KvsItem> = ActionProcessor<\n  KeyValueStoreScanAllScopesAction,\n  QpqPagedData<KvsScopedItem<KvsItem>>\n>;\nexport type KeyValueStoreScanAllScopesActionRequester<KvsItem> = ActionRequester<\n  KeyValueStoreScanAllScopesAction,\n  QpqPagedData<KvsScopedItem<KvsItem>>\n>;\n"]}

package/lib/commonjs/actions/keyValueStore/index.d.ts

@@ -1,3 +1,5 @@
+export * from './KeyValueStoreScanAllScopesActionTypes';
+export * from './KeyValueStoreScanAllScopesActionRequester';
 export * from './KeyValueStoreActionType';
 export * from './KeyValueStoreDeleteActionRequester';
 export * from './KeyValueStoreDeleteActionTypes';

package/lib/commonjs/actions/keyValueStore/index.js

@@ -14,6 +14,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./KeyValueStoreScanAllScopesActionTypes"), exports);
+__exportStar(require("./KeyValueStoreScanAllScopesActionRequester"), exports);
 __exportStar(require("./KeyValueStoreActionType"), exports);
 __exportStar(require("./KeyValueStoreDeleteActionRequester"), exports);
 __exportStar(require("./KeyValueStoreDeleteActionTypes"), exports);

package/lib/commonjs/actions/keyValueStore/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/keyValueStore/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4DAA0C;AAC1C,uEAAqD;AACrD,mEAAiD;AACjD,oEAAkD;AAClD,gEAA8C;AAC9C,uEAAqD;AACrD,mEAAiD;AACjD,sEAAoD;AACpD,kEAAgD;AAChD,qEAAmD;AACnD,iEAA+C;AAC/C,uEAAqD;AACrD,mEAAiD;AACjD,uEAAqD;AACrD,mEAAiD;AACjD,0CAAwB;AACxB,0CAAwB","sourcesContent":["export * from './KeyValueStoreActionType';\nexport * from './KeyValueStoreDeleteActionRequester';\nexport * from './KeyValueStoreDeleteActionTypes';\nexport * from './KeyValueStoreGetActionRequester';\nexport * from './KeyValueStoreGetActionTypes';\nexport * from './KeyValueStoreGetAllActionRequester';\nexport * from './KeyValueStoreGetAllActionTypes';\nexport * from './KeyValueStoreQueryActionRequester';\nexport * from './KeyValueStoreQueryActionTypes';\nexport * from './KeyValueStoreScanActionRequester';\nexport * from './KeyValueStoreScanActionTypes';\nexport * from './KeyValueStoreUpdateActionRequester';\nexport * from './KeyValueStoreUpdateActionTypes';\nexport * from './KeyValueStoreUpsertActionRequester';\nexport * from './KeyValueStoreUpsertActionTypes';\nexport * from './types';\nexport * from './utils';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/keyValueStore/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0EAAwD;AACxD,8EAA4D;AAC5D,4DAA0C;AAC1C,uEAAqD;AACrD,mEAAiD;AACjD,oEAAkD;AAClD,gEAA8C;AAC9C,uEAAqD;AACrD,mEAAiD;AACjD,sEAAoD;AACpD,kEAAgD;AAChD,qEAAmD;AACnD,iEAA+C;AAC/C,uEAAqD;AACrD,mEAAiD;AACjD,uEAAqD;AACrD,mEAAiD;AACjD,0CAAwB;AACxB,0CAAwB","sourcesContent":["export * from './KeyValueStoreScanAllScopesActionTypes';\nexport * from './KeyValueStoreScanAllScopesActionRequester';\nexport * from './KeyValueStoreActionType';\nexport * from './KeyValueStoreDeleteActionRequester';\nexport * from './KeyValueStoreDeleteActionTypes';\nexport * from './KeyValueStoreGetActionRequester';\nexport * from './KeyValueStoreGetActionTypes';\nexport * from './KeyValueStoreGetAllActionRequester';\nexport * from './KeyValueStoreGetAllActionTypes';\nexport * from './KeyValueStoreQueryActionRequester';\nexport * from './KeyValueStoreQueryActionTypes';\nexport * from './KeyValueStoreScanActionRequester';\nexport * from './KeyValueStoreScanActionTypes';\nexport * from './KeyValueStoreUpdateActionRequester';\nexport * from './KeyValueStoreUpdateActionTypes';\nexport * from './KeyValueStoreUpsertActionRequester';\nexport * from './KeyValueStoreUpsertActionTypes';\nexport * from './types';\nexport * from './utils';\n"]}

package/lib/commonjs/actions/keyValueStore/types/KvsQueryOperation.d.ts

@@ -1,9 +1,9 @@
 import { KvsLogicalOperatorType, KvsQueryOperationType } from './KvsQueryOperationType';
 export type KvsCoreDataType = string | number;
 export type KvsBasicDataType = KvsCoreDataType | boolean;
-export type KvsListDataType = KvsBasicDataType[];
+export type KvsListDataType = KvsAdvancedDataType[];
 export interface KvsObjectDataType {
-    [key: string]: KvsAdvancedDataType;
+    [key: string]: KvsAdvancedDataType | undefined;
 }
 export type KvsAdvancedDataType = KvsBasicDataType | KvsListDataType | KvsObjectDataType;
 export type KvsQueryCondition = {

package/lib/commonjs/actions/keyValueStore/types/KvsQueryOperation.js.map

@@ -1 +1 @@
-{"version":3,"file":"KvsQueryOperation.js","sourceRoot":"","sources":["../../../../../src/actions/keyValueStore/types/KvsQueryOperation.ts"],"names":[],"mappings":"","sourcesContent":["import { KvsLogicalOperatorType, KvsQueryOperationType } from './KvsQueryOperationType';\n\nexport type KvsCoreDataType = string | number;\nexport type KvsBasicDataType = KvsCoreDataType | boolean;\nexport type KvsListDataType = KvsBasicDataType[];\n\n// Use an interface for the recursive data type\nexport interface KvsObjectDataType {\n  [key: string]: KvsAdvancedDataType;\n}\n\nexport type KvsAdvancedDataType = KvsBasicDataType | KvsListDataType | KvsObjectDataType;\n\n// Type for individual query conditions\nexport type KvsQueryCondition = {\n  key: string;\n  operation: KvsQueryOperationType;\n  valueA?: KvsAdvancedDataType;\n  valueB?: KvsBasicDataType;\n};\n\n// Type for logical operators\nexport type KvsLogicalOperator = {\n  operation: KvsLogicalOperatorType;\n  conditions: (KvsQueryCondition | KvsLogicalOperator)[];\n};\n\n// Type for the overall query operation\nexport type KvsQueryOperation = KvsQueryCondition | KvsLogicalOperator;\n"]}
+{"version":3,"file":"KvsQueryOperation.js","sourceRoot":"","sources":["../../../../../src/actions/keyValueStore/types/KvsQueryOperation.ts"],"names":[],"mappings":"","sourcesContent":["import { KvsLogicalOperatorType, KvsQueryOperationType } from './KvsQueryOperationType';\n\nexport type KvsCoreDataType = string | number;\nexport type KvsBasicDataType = KvsCoreDataType | boolean;\n\nexport type KvsListDataType = KvsAdvancedDataType[];\n\n// Use an interface for the recursive data type. Members may be undefined so that a\n// domain model with OPTIONAL fields can be written directly; the marshaller drops\n// undefined members, since DynamoDB has no representation for them.\nexport interface KvsObjectDataType {\n  [key: string]: KvsAdvancedDataType | undefined;\n}\n\nexport type KvsAdvancedDataType = KvsBasicDataType | KvsListDataType | KvsObjectDataType;\n\n// Type for individual query conditions\nexport type KvsQueryCondition = {\n  key: string;\n  operation: KvsQueryOperationType;\n  valueA?: KvsAdvancedDataType;\n  valueB?: KvsBasicDataType;\n};\n\n// Type for logical operators\nexport type KvsLogicalOperator = {\n  operation: KvsLogicalOperatorType;\n  conditions: (KvsQueryCondition | KvsLogicalOperator)[];\n};\n\n// Type for the overall query operation\nexport type KvsQueryOperation = KvsQueryCondition | KvsLogicalOperator;\n"]}

package/lib/commonjs/config/QPQConfig.d.ts

@@ -17,6 +17,7 @@ export declare enum QPQCoreConfigSettingType {
     userDirectory = "@quidproquo-core/config/UserDirectory",
     keyValueStore = "@quidproquo-core/config/KeyValueStore",
     configValue = "@quidproquo-core/config/ConfigValue",
+    cryptoKey = "@quidproquo-core/config/cryptoKey",
     environmentSettings = "@quidproquo-core/config/EnvironmentSettings",
     serviceSettings = "@quidproquo-core/config/ServiceSettings",
     deployEvent = "@quidproquo-core/config/DeployEvent",

package/lib/commonjs/config/QPQConfig.js

@@ -20,6 +20,7 @@ var QPQCoreConfigSettingType;
     QPQCoreConfigSettingType["userDirectory"] = "@quidproquo-core/config/UserDirectory";
     QPQCoreConfigSettingType["keyValueStore"] = "@quidproquo-core/config/KeyValueStore";
     QPQCoreConfigSettingType["configValue"] = "@quidproquo-core/config/ConfigValue";
+    QPQCoreConfigSettingType["cryptoKey"] = "@quidproquo-core/config/cryptoKey";
     QPQCoreConfigSettingType["environmentSettings"] = "@quidproquo-core/config/EnvironmentSettings";
     QPQCoreConfigSettingType["serviceSettings"] = "@quidproquo-core/config/ServiceSettings";
     QPQCoreConfigSettingType["deployEvent"] = "@quidproquo-core/config/DeployEvent";

package/lib/commonjs/config/QPQConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"QPQConfig.js","sourceRoot":"","sources":["../../../src/config/QPQConfig.ts"],"names":[],"mappings":";;;AAEA,IAAY,wBA4BX;AA5BD,WAAY,wBAAwB;IAClC,6DAAiC,CAAA;IACjC,uEAA2C,CAAA;IAC3C,6EAAiD,CAAA;IACjD,iFAAqD,CAAA;IACrD,yEAA6C,CAAA;IAC7C,qEAAyC,CAAA;IACzC,qEAAyC,CAAA;IACzC,2EAA+C,CAAA;IAC/C,yFAA6D,CAAA;IAC7D,iFAAqD,CAAA;IACrD,iGAAqE,CAAA;IACrE,mGAAuE,CAAA;IACvE,mEAAuC,CAAA;IACvC,yEAA6C,CAAA;IAC7C,mFAAuD,CAAA;IACvD,mFAAuD,CAAA;IACvD,+EAAmD,CAAA;IACnD,+FAAmE,CAAA;IACnE,uFAA2D,CAAA;IAC3D,+EAAmD,CAAA;IACnD,yEAA6C,CAAA;IAC7C,mFAAuD,CAAA;IACvD,qFAAyD,CAAA;IACzD,+EAAmD,CAAA;IACnD,qFAAyD,CAAA;IACzD,2FAA+D,CAAA;IAC/D,iGAAqE,CAAA;AACvE,CAAC,EA5BW,wBAAwB,wCAAxB,wBAAwB,QA4BnC","sourcesContent":["import { CrossModuleOwner } from '../types';\n\nexport enum QPQCoreConfigSettingType {\n  ai = '@quidproquo-core/config/Ai',\n  appName = '@quidproquo-core/config/AppName',\n  moduleName = '@quidproquo-core/config/moduleName',\n  storageDrive = '@quidproquo-core/config/storageDrive',\n  schedule = '@quidproquo-core/config/schedule',\n  secret = '@quidproquo-core/config/secret',\n  global = '@quidproquo-core/config/global',\n  parameter = '@quidproquo-core/config/parameter',\n  actionProcessors = '@quidproquo-core/config/actionProcessors',\n  apiBuildPath = '@quidproquo-core/config/apiBuildPath',\n  backendBundleOptions = '@quidproquo-core/config/BackendBundleOptions',\n  frontendBundleOptions = '@quidproquo-core/config/FrontendBundleOptions',\n  queue = '@quidproquo-core/config/Queue',\n  eventBus = '@quidproquo-core/config/EventBus',\n  userDirectory = '@quidproquo-core/config/UserDirectory',\n  keyValueStore = '@quidproquo-core/config/KeyValueStore',\n  configValue = '@quidproquo-core/config/ConfigValue',\n  environmentSettings = '@quidproquo-core/config/EnvironmentSettings',\n  serviceSettings = '@quidproquo-core/config/ServiceSettings',\n  deployEvent = '@quidproquo-core/config/DeployEvent',\n  claudeAi = '@quidproquo-core/config/ClaudeAi',\n  graphDatabase = '@quidproquo-core/config/GraphDatabase',\n  virtualNetwork = '@quidproquo-core/config/VirtualNetwork',\n  notifyError = '@quidproquo-core/config/notifyError',\n  inlineFunction = '@quidproquo-core/config/InlineFunction',\n  javascriptRuntime = '@quidproquo-core/config/JavascriptRuntime',\n  federatedModuleStore = '@quidproquo-core/config/FederatedModuleStore',\n}\n\nexport interface QPQConfigSetting {\n  configSettingType: string;\n  uniqueKey: string;\n\n  owner?: CrossModuleOwner;\n}\n\nexport interface QPQConfigAdvancedSettings {\n  deprecated?: boolean;\n}\n\nexport type QPQConfigItem = QPQConfigSetting | QPQConfigItem[];\nexport type QPQConfig = QPQConfigItem[];\n"]}
+{"version":3,"file":"QPQConfig.js","sourceRoot":"","sources":["../../../src/config/QPQConfig.ts"],"names":[],"mappings":";;;AAEA,IAAY,wBA6BX;AA7BD,WAAY,wBAAwB;IAClC,6DAAiC,CAAA;IACjC,uEAA2C,CAAA;IAC3C,6EAAiD,CAAA;IACjD,iFAAqD,CAAA;IACrD,yEAA6C,CAAA;IAC7C,qEAAyC,CAAA;IACzC,qEAAyC,CAAA;IACzC,2EAA+C,CAAA;IAC/C,yFAA6D,CAAA;IAC7D,iFAAqD,CAAA;IACrD,iGAAqE,CAAA;IACrE,mGAAuE,CAAA;IACvE,mEAAuC,CAAA;IACvC,yEAA6C,CAAA;IAC7C,mFAAuD,CAAA;IACvD,mFAAuD,CAAA;IACvD,+EAAmD,CAAA;IACnD,2EAA+C,CAAA;IAC/C,+FAAmE,CAAA;IACnE,uFAA2D,CAAA;IAC3D,+EAAmD,CAAA;IACnD,yEAA6C,CAAA;IAC7C,mFAAuD,CAAA;IACvD,qFAAyD,CAAA;IACzD,+EAAmD,CAAA;IACnD,qFAAyD,CAAA;IACzD,2FAA+D,CAAA;IAC/D,iGAAqE,CAAA;AACvE,CAAC,EA7BW,wBAAwB,wCAAxB,wBAAwB,QA6BnC","sourcesContent":["import { CrossModuleOwner } from '../types';\n\nexport enum QPQCoreConfigSettingType {\n  ai = '@quidproquo-core/config/Ai',\n  appName = '@quidproquo-core/config/AppName',\n  moduleName = '@quidproquo-core/config/moduleName',\n  storageDrive = '@quidproquo-core/config/storageDrive',\n  schedule = '@quidproquo-core/config/schedule',\n  secret = '@quidproquo-core/config/secret',\n  global = '@quidproquo-core/config/global',\n  parameter = '@quidproquo-core/config/parameter',\n  actionProcessors = '@quidproquo-core/config/actionProcessors',\n  apiBuildPath = '@quidproquo-core/config/apiBuildPath',\n  backendBundleOptions = '@quidproquo-core/config/BackendBundleOptions',\n  frontendBundleOptions = '@quidproquo-core/config/FrontendBundleOptions',\n  queue = '@quidproquo-core/config/Queue',\n  eventBus = '@quidproquo-core/config/EventBus',\n  userDirectory = '@quidproquo-core/config/UserDirectory',\n  keyValueStore = '@quidproquo-core/config/KeyValueStore',\n  configValue = '@quidproquo-core/config/ConfigValue',\n  cryptoKey = '@quidproquo-core/config/cryptoKey',\n  environmentSettings = '@quidproquo-core/config/EnvironmentSettings',\n  serviceSettings = '@quidproquo-core/config/ServiceSettings',\n  deployEvent = '@quidproquo-core/config/DeployEvent',\n  claudeAi = '@quidproquo-core/config/ClaudeAi',\n  graphDatabase = '@quidproquo-core/config/GraphDatabase',\n  virtualNetwork = '@quidproquo-core/config/VirtualNetwork',\n  notifyError = '@quidproquo-core/config/notifyError',\n  inlineFunction = '@quidproquo-core/config/InlineFunction',\n  javascriptRuntime = '@quidproquo-core/config/JavascriptRuntime',\n  federatedModuleStore = '@quidproquo-core/config/FederatedModuleStore',\n}\n\nexport interface QPQConfigSetting {\n  configSettingType: string;\n  uniqueKey: string;\n\n  owner?: CrossModuleOwner;\n}\n\nexport interface QPQConfigAdvancedSettings {\n  deprecated?: boolean;\n}\n\nexport type QPQConfigItem = QPQConfigSetting | QPQConfigItem[];\nexport type QPQConfig = QPQConfigItem[];\n"]}

package/lib/commonjs/config/settings/cryptoKey.d.ts

@@ -0,0 +1,9 @@
+import { CrossModuleOwner } from '../../types';
+import { QPQConfigAdvancedSettings, QPQConfigSetting } from '../QPQConfig';
+export interface QPQConfigAdvancedCryptoKeySettings extends QPQConfigAdvancedSettings {
+    owner?: CrossModuleOwner<'cryptoKeyName'>;
+}
+export interface CryptoKeyQPQConfigSetting extends QPQConfigSetting {
+    keyName: string;
+}
+export declare const defineCryptoKey: (keyName: string, options?: QPQConfigAdvancedCryptoKeySettings) => CryptoKeyQPQConfigSetting;

package/lib/commonjs/config/settings/cryptoKey.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defineCryptoKey = void 0;
+const QPQConfig_1 = require("../QPQConfig");
+const crossModuleUtils_1 = require("../utils/crossModuleUtils");
+const defineCryptoKey = (keyName, options) => ({
+    configSettingType: QPQConfig_1.QPQCoreConfigSettingType.cryptoKey,
+    uniqueKey: keyName,
+    keyName,
+    owner: (0, crossModuleUtils_1.convertCrossModuleOwnerToGenericResourceNameOverride)(options === null || options === void 0 ? void 0 : options.owner),
+});
+exports.defineCryptoKey = defineCryptoKey;
+//# sourceMappingURL=cryptoKey.js.map

package/lib/commonjs/config/settings/cryptoKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoKey.js","sourceRoot":"","sources":["../../../../src/config/settings/cryptoKey.ts"],"names":[],"mappings":";;;AACA,4CAAqG;AACrG,gEAAiG;AAU1F,MAAM,eAAe,GAAG,CAAC,OAAe,EAAE,OAA4C,EAA6B,EAAE,CAAC,CAAC;IAC5H,iBAAiB,EAAE,oCAAwB,CAAC,SAAS;IACrD,SAAS,EAAE,OAAO;IAElB,OAAO;IAEP,KAAK,EAAE,IAAA,uEAAoD,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAC;CAC5E,CAAC,CAAC;AAPU,QAAA,eAAe,mBAOzB","sourcesContent":["import { CrossModuleOwner } from '../../types';\nimport { QPQConfigAdvancedSettings, QPQConfigSetting, QPQCoreConfigSettingType } from '../QPQConfig';\nimport { convertCrossModuleOwnerToGenericResourceNameOverride } from '../utils/crossModuleUtils';\n\nexport interface QPQConfigAdvancedCryptoKeySettings extends QPQConfigAdvancedSettings {\n  owner?: CrossModuleOwner<'cryptoKeyName'>;\n}\n\nexport interface CryptoKeyQPQConfigSetting extends QPQConfigSetting {\n  keyName: string;\n}\n\nexport const defineCryptoKey = (keyName: string, options?: QPQConfigAdvancedCryptoKeySettings): CryptoKeyQPQConfigSetting => ({\n  configSettingType: QPQCoreConfigSettingType.cryptoKey,\n  uniqueKey: keyName,\n\n  keyName,\n\n  owner: convertCrossModuleOwnerToGenericResourceNameOverride(options?.owner),\n});\n"]}

package/lib/commonjs/config/settings/index.d.ts

@@ -7,6 +7,7 @@ export * from './applicationVersion';
 export * from './bundleOptions';
 export * from './claudeAi';
 export * from './configValue';
+export * from './cryptoKey';
 export * from './definePromiseMode';
 export * from './deployEvent';
 export * from './emailTemplates';

package/lib/commonjs/config/settings/index.js

@@ -23,6 +23,7 @@ __exportStar(require("./applicationVersion"), exports);
 __exportStar(require("./bundleOptions"), exports);
 __exportStar(require("./claudeAi"), exports);
 __exportStar(require("./configValue"), exports);
+__exportStar(require("./cryptoKey"), exports);
 __exportStar(require("./definePromiseMode"), exports);
 __exportStar(require("./deployEvent"), exports);
 __exportStar(require("./emailTemplates"), exports);

package/lib/commonjs/config/settings/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/config/settings/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,uCAAqB;AACrB,iDAA+B;AAC/B,sDAAoC;AACpC,oDAAkC;AAClC,uDAAqC;AACrC,kDAAgC;AAChC,6CAA2B;AAC3B,gDAA8B;AAC9B,sDAAoC;AACpC,gDAA8B;AAC9B,mDAAiC;AACjC,wDAAsC;AACtC,6CAA2B;AAC3B,yDAAuC;AACvC,2CAAyB;AACzB,kDAAgC;AAChC,mDAAiC;AACjC,sDAAoC;AACpC,kDAAgC;AAChC,+CAA6B;AAC7B,gDAA8B;AAC9B,8CAA4B;AAC5B,0CAAwB;AACxB,6CAA2B;AAC3B,2CAAyB;AACzB,oDAAkC;AAClC,iDAA+B;AAC/B,kDAAgC;AAChC,mDAAiC","sourcesContent":["export * from './actionProcessors';\nexport * from './ai';\nexport * from './apiBuildPath';\nexport * from './applicationModule';\nexport * from './applicationName';\nexport * from './applicationVersion';\nexport * from './bundleOptions';\nexport * from './claudeAi';\nexport * from './configValue';\nexport * from './definePromiseMode';\nexport * from './deployEvent';\nexport * from './emailTemplates';\nexport * from './environmentSettings';\nexport * from './eventBus';\nexport * from './federatedModuleStore';\nexport * from './global';\nexport * from './graphDatabase';\nexport * from './inlineFunction';\nexport * from './javascriptRuntime';\nexport * from './keyValueStore';\nexport * from './moduleName';\nexport * from './notifyError';\nexport * from './parameter';\nexport * from './queue';\nexport * from './schedule';\nexport * from './secret';\nexport * from './serviceSettings';\nexport * from './storageDrive';\nexport * from './userDirectory';\nexport * from './virtualNetwork';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/config/settings/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,uCAAqB;AACrB,iDAA+B;AAC/B,sDAAoC;AACpC,oDAAkC;AAClC,uDAAqC;AACrC,kDAAgC;AAChC,6CAA2B;AAC3B,gDAA8B;AAC9B,8CAA4B;AAC5B,sDAAoC;AACpC,gDAA8B;AAC9B,mDAAiC;AACjC,wDAAsC;AACtC,6CAA2B;AAC3B,yDAAuC;AACvC,2CAAyB;AACzB,kDAAgC;AAChC,mDAAiC;AACjC,sDAAoC;AACpC,kDAAgC;AAChC,+CAA6B;AAC7B,gDAA8B;AAC9B,8CAA4B;AAC5B,0CAAwB;AACxB,6CAA2B;AAC3B,2CAAyB;AACzB,oDAAkC;AAClC,iDAA+B;AAC/B,kDAAgC;AAChC,mDAAiC","sourcesContent":["export * from './actionProcessors';\nexport * from './ai';\nexport * from './apiBuildPath';\nexport * from './applicationModule';\nexport * from './applicationName';\nexport * from './applicationVersion';\nexport * from './bundleOptions';\nexport * from './claudeAi';\nexport * from './configValue';\nexport * from './cryptoKey';\nexport * from './definePromiseMode';\nexport * from './deployEvent';\nexport * from './emailTemplates';\nexport * from './environmentSettings';\nexport * from './eventBus';\nexport * from './federatedModuleStore';\nexport * from './global';\nexport * from './graphDatabase';\nexport * from './inlineFunction';\nexport * from './javascriptRuntime';\nexport * from './keyValueStore';\nexport * from './moduleName';\nexport * from './notifyError';\nexport * from './parameter';\nexport * from './queue';\nexport * from './schedule';\nexport * from './secret';\nexport * from './serviceSettings';\nexport * from './storageDrive';\nexport * from './userDirectory';\nexport * from './virtualNetwork';\n"]}

package/lib/commonjs/config/settings/keyValueStore.d.ts

@@ -1,4 +1,4 @@
-import { CrossModuleOwner, KeyOf } from '../../types';
+import { CrossModuleOwner, KeyOf, QpqFunctionRuntime } from '../../types';
 import { QPQConfigAdvancedSettings, QPQConfigSetting } from '../QPQConfig';
 export type KvsKeyType = 'string' | 'number' | 'binary';
 export type KvsKey<T extends object = any> = {
@@ -16,6 +16,41 @@ type CompositeCompositeKvsIndex<T extends object = any> = {
     sortKey?: CompositeKvsKey<T>;
 };
 export type CompositeKvsIndex<T extends object = any> = KeyOf<T> | CompositeCompositeKvsIndex<T>;
+/**
+ * Change data capture on a store: the table gets a stream (NEW_AND_OLD_IMAGES) and
+ * `runtime` is invoked with the changes.
+ *
+ * Records arrive in order PER PARTITION KEY, and different partition keys are processed
+ * concurrently. A stream handler therefore gets one-writer-per-item serialisation for
+ * free, which is what makes a stream the natural place to maintain a projection of a table
+ * you only ever append to — no queue, no extra write on the append path, and no trigger to
+ * lose, because the record exists precisely because the write happened.
+ *
+ * Mirrors defineStorageDrive's `onEvent`.
+ */
+export type KvsStreamSettings = {
+    runtime: QpqFunctionRuntime;
+    /**
+     * Collapse each delivered batch down to ONE record per partition key, keeping the latest.
+     *
+     * Off by default: a generic consumer (audit trail, change notifications) needs to see
+     * every change, and the framework should never silently drop records.
+     *
+     * On for a PROJECTION, where the payload that matters is "this key changed" and the
+     * handler re-derives from source anyway. Without it, the batch is fanned back out into
+     * one story run per record and the batching bought nothing: 500 appends to one document
+     * would mean 500 re-derivations, each reading a log that grows as it goes. With it, that
+     * batch is a single re-derivation.
+     */
+    coalesceByPartitionKey?: boolean;
+    /** Records per invocation. DynamoDB streams allow up to 1000; the mapping default is 100. */
+    batchSize?: number;
+    /**
+     * How long to wait accumulating records before invoking, 0 to 300 seconds. Trades
+     * projection latency for far fewer invocations, and gives coalescing more to collapse.
+     */
+    maximumBatchingWindowInSeconds?: number;
+};
 export interface QPQConfigAdvancedKeyValueStoreSettings<T extends object = any> extends QPQConfigAdvancedSettings {
     indexes?: CompositeKvsIndex<T>[];
     global?: boolean;
@@ -23,6 +58,7 @@ export interface QPQConfigAdvancedKeyValueStoreSettings<T extends object = any>
     ttlAttribute?: string;
     disablePointInTimeRecovery?: boolean;
     encryption?: boolean;
+    onStream?: KvsStreamSettings;
 }
 export interface KeyValueStoreQPQConfigSetting<T extends object = any> extends QPQConfigSetting {
     keyValueStoreName: string;
@@ -33,6 +69,7 @@ export interface KeyValueStoreQPQConfigSetting<T extends object = any> extends Q
     ttlAttribute?: string;
     disablePointInTimeRecovery: boolean;
     encryption: boolean;
+    onStream?: KvsStreamSettings;
 }
 export declare const defineKeyValueStore: <T extends object = any>(keyValueStoreName: string, partitionKey: CompositeKvsKey<T>, sortKeys?: CompositeKvsKey<T>[], options?: QPQConfigAdvancedKeyValueStoreSettings<T>) => KeyValueStoreQPQConfigSetting<T>;
 export {};

package/lib/commonjs/config/settings/keyValueStore.js

@@ -43,6 +43,7 @@ const defineKeyValueStore = (keyValueStoreName, partitionKey, sortKeys = [], opt
         ttlAttribute: options === null || options === void 0 ? void 0 : options.ttlAttribute,
         disablePointInTimeRecovery: (_c = options === null || options === void 0 ? void 0 : options.disablePointInTimeRecovery) !== null && _c !== void 0 ? _c : false,
         encryption: (_d = options === null || options === void 0 ? void 0 : options.encryption) !== null && _d !== void 0 ? _d : false,
+        onStream: options === null || options === void 0 ? void 0 : options.onStream,
     });
 };
 exports.defineKeyValueStore = defineKeyValueStore;