quidproquo-core 0.1.22 → 0.1.24

package/lib/commonjs/actions/crypto/CryptoActionType.d.ts

@@ -1,4 +1,7 @@
 export declare enum CryptoActionType {
     Encrypt = "@quidproquo-core/Crypto/Encrypt",
-    Decrypt = "@quidproquo-core/Crypto/Decrypt"
+    Decrypt = "@quidproquo-core/Crypto/Decrypt",
+    Sign = "@quidproquo-core/Crypto/Sign",
+    Verify = "@quidproquo-core/Crypto/Verify",
+    GetPublicKey = "@quidproquo-core/Crypto/GetPublicKey"
 }

package/lib/commonjs/actions/crypto/CryptoActionType.js

@@ -5,5 +5,8 @@ var CryptoActionType;
 (function (CryptoActionType) {
     CryptoActionType["Encrypt"] = "@quidproquo-core/Crypto/Encrypt";
     CryptoActionType["Decrypt"] = "@quidproquo-core/Crypto/Decrypt";
+    CryptoActionType["Sign"] = "@quidproquo-core/Crypto/Sign";
+    CryptoActionType["Verify"] = "@quidproquo-core/Crypto/Verify";
+    CryptoActionType["GetPublicKey"] = "@quidproquo-core/Crypto/GetPublicKey";
 })(CryptoActionType || (exports.CryptoActionType = CryptoActionType = {}));
 //# sourceMappingURL=CryptoActionType.js.map

package/lib/commonjs/actions/crypto/CryptoActionType.js.map

@@ -1 +1 @@
-{"version":3,"file":"CryptoActionType.js","sourceRoot":"","sources":["../../../../src/actions/crypto/CryptoActionType.ts"],"names":[],"mappings":";;;AAAA,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,+DAA2C,CAAA;IAC3C,+DAA2C,CAAA;AAC7C,CAAC,EAHW,gBAAgB,gCAAhB,gBAAgB,QAG3B","sourcesContent":["export enum CryptoActionType {\n  Encrypt = '@quidproquo-core/Crypto/Encrypt',\n  Decrypt = '@quidproquo-core/Crypto/Decrypt',\n}\n"]}
+{"version":3,"file":"CryptoActionType.js","sourceRoot":"","sources":["../../../../src/actions/crypto/CryptoActionType.ts"],"names":[],"mappings":";;;AAAA,IAAY,gBAMX;AAND,WAAY,gBAAgB;IAC1B,+DAA2C,CAAA;IAC3C,+DAA2C,CAAA;IAC3C,yDAAqC,CAAA;IACrC,6DAAyC,CAAA;IACzC,yEAAqD,CAAA;AACvD,CAAC,EANW,gBAAgB,gCAAhB,gBAAgB,QAM3B","sourcesContent":["export enum CryptoActionType {\n  Encrypt = '@quidproquo-core/Crypto/Encrypt',\n  Decrypt = '@quidproquo-core/Crypto/Decrypt',\n  Sign = '@quidproquo-core/Crypto/Sign',\n  Verify = '@quidproquo-core/Crypto/Verify',\n  GetPublicKey = '@quidproquo-core/Crypto/GetPublicKey',\n}\n"]}

package/lib/commonjs/actions/crypto/askCryptoGetPublicKey.d.ts

@@ -0,0 +1,4 @@
+import { CryptoActionType } from './CryptoActionType';
+export declare const askCryptoGetPublicKey: import("../../types").ActionRequesterFunction<CryptoActionType.GetPublicKey, [keyName: string], {
+    keyName: string;
+}, string, "Throttling" | "KeyNotConfigured" | "KeyUnavailable">;

package/lib/commonjs/actions/crypto/askCryptoGetPublicKey.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.askCryptoGetPublicKey = void 0;
+const types_1 = require("../../types");
+const CryptoActionType_1 = require("./CryptoActionType");
+// Returns the public half of a signing key as an SPKI PEM string. Not sensitive:
+// it can only verify, never sign. Hand it to third parties (a JWKS endpoint, a
+// partner service) so they can check signatures without calling back in.
+exports.askCryptoGetPublicKey = (0, types_1.createActionRequester)()({
+    actionType: CryptoActionType_1.CryptoActionType.GetPublicKey,
+    errorTypes: [
+        'KeyNotConfigured', // no defineSigningKey for keyName in the service config
+        'KeyUnavailable', // key disabled, deleted, or access denied
+        'Throttling', // request rate exceeded
+    ],
+    getPayload: (keyName) => ({ keyName }),
+});
+//# sourceMappingURL=askCryptoGetPublicKey.js.map

package/lib/commonjs/actions/crypto/askCryptoGetPublicKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"askCryptoGetPublicKey.js","sourceRoot":"","sources":["../../../../src/actions/crypto/askCryptoGetPublicKey.ts"],"names":[],"mappings":";;;AAAA,uCAAoD;AACpD,yDAAsD;AAEtD,iFAAiF;AACjF,+EAA+E;AAC/E,yEAAyE;AAC5D,QAAA,qBAAqB,GAAG,IAAA,6BAAqB,GAAU,CAAC;IACnE,UAAU,EAAE,mCAAgB,CAAC,YAAY;IACzC,UAAU,EAAE;QACV,kBAAkB,EAAE,wDAAwD;QAC5E,gBAAgB,EAAE,0CAA0C;QAC5D,YAAY,EAAE,wBAAwB;KACvC;IACD,UAAU,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;CAC/C,CAAC,CAAC","sourcesContent":["import { createActionRequester } from '../../types';\nimport { CryptoActionType } from './CryptoActionType';\n\n// Returns the public half of a signing key as an SPKI PEM string. Not sensitive:\n// it can only verify, never sign. Hand it to third parties (a JWKS endpoint, a\n// partner service) so they can check signatures without calling back in.\nexport const askCryptoGetPublicKey = createActionRequester<string>()({\n  actionType: CryptoActionType.GetPublicKey,\n  errorTypes: [\n    'KeyNotConfigured', // no defineSigningKey for keyName in the service config\n    'KeyUnavailable', // key disabled, deleted, or access denied\n    'Throttling', // request rate exceeded\n  ],\n  getPayload: (keyName: string) => ({ keyName }),\n});\n"]}

package/lib/commonjs/actions/crypto/askCryptoSign.d.ts

@@ -0,0 +1,5 @@
+import { CryptoActionType } from './CryptoActionType';
+export declare const askCryptoSign: import("../../types").ActionRequesterFunction<CryptoActionType.Sign, [keyName: string, message: string], {
+    keyName: string;
+    message: string;
+}, string, "Throttling" | "KeyNotConfigured" | "KeyUnavailable">;

package/lib/commonjs/actions/crypto/askCryptoSign.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.askCryptoSign = void 0;
+const types_1 = require("../../types");
+const CryptoActionType_1 = require("./CryptoActionType");
+// Signs `message` with the private half of a signing key (RS256: RSASSA-PKCS1-v1_5
+// over SHA-256) and returns the signature as base64url. RS256 is deterministic, so
+// the same key + message always yields the same signature. The private key never
+// leaves the provider - nothing sensitive passes through the story or its logs.
+exports.askCryptoSign = (0, types_1.createActionRequester)()({
+    actionType: CryptoActionType_1.CryptoActionType.Sign,
+    errorTypes: [
+        'KeyNotConfigured', // no defineSigningKey for keyName in the service config
+        'KeyUnavailable', // key disabled, deleted, or access denied
+        'Throttling', // request rate exceeded
+    ],
+    getPayload: (keyName, message) => ({ keyName, message }),
+});
+//# sourceMappingURL=askCryptoSign.js.map

package/lib/commonjs/actions/crypto/askCryptoSign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"askCryptoSign.js","sourceRoot":"","sources":["../../../../src/actions/crypto/askCryptoSign.ts"],"names":[],"mappings":";;;AAAA,uCAAoD;AACpD,yDAAsD;AAEtD,mFAAmF;AACnF,mFAAmF;AACnF,iFAAiF;AACjF,gFAAgF;AACnE,QAAA,aAAa,GAAG,IAAA,6BAAqB,GAAU,CAAC;IAC3D,UAAU,EAAE,mCAAgB,CAAC,IAAI;IACjC,UAAU,EAAE;QACV,kBAAkB,EAAE,wDAAwD;QAC5E,gBAAgB,EAAE,0CAA0C;QAC5D,YAAY,EAAE,wBAAwB;KACvC;IACD,UAAU,EAAE,CAAC,OAAe,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;CACzE,CAAC,CAAC","sourcesContent":["import { createActionRequester } from '../../types';\nimport { CryptoActionType } from './CryptoActionType';\n\n// Signs `message` with the private half of a signing key (RS256: RSASSA-PKCS1-v1_5\n// over SHA-256) and returns the signature as base64url. RS256 is deterministic, so\n// the same key + message always yields the same signature. The private key never\n// leaves the provider - nothing sensitive passes through the story or its logs.\nexport const askCryptoSign = createActionRequester<string>()({\n  actionType: CryptoActionType.Sign,\n  errorTypes: [\n    'KeyNotConfigured', // no defineSigningKey for keyName in the service config\n    'KeyUnavailable', // key disabled, deleted, or access denied\n    'Throttling', // request rate exceeded\n  ],\n  getPayload: (keyName: string, message: string) => ({ keyName, message }),\n});\n"]}

package/lib/commonjs/actions/crypto/askCryptoVerify.d.ts

@@ -0,0 +1,6 @@
+import { CryptoActionType } from './CryptoActionType';
+export declare const askCryptoVerify: import("../../types").ActionRequesterFunction<CryptoActionType.Verify, [keyName: string, message: string, signature: string], {
+    keyName: string;
+    message: string;
+    signature: string;
+}, boolean, "Throttling" | "KeyNotConfigured" | "KeyUnavailable" | "MalformedSignature">;

package/lib/commonjs/actions/crypto/askCryptoVerify.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.askCryptoVerify = void 0;
+const types_1 = require("../../types");
+const CryptoActionType_1 = require("./CryptoActionType");
+// Verifies a base64url RS256 signature produced by askCryptoSign against
+// `message` using the public half of the signing key. Resolves to false for a
+// signature that does not match; a signature that is not even decodable is a
+// MalformedSignature error rather than false, so a wiring bug is distinguishable
+// from a forged token.
+exports.askCryptoVerify = (0, types_1.createActionRequester)()({
+    actionType: CryptoActionType_1.CryptoActionType.Verify,
+    errorTypes: [
+        'KeyNotConfigured', // no defineSigningKey for keyName in the service config
+        'MalformedSignature', // signature is not valid base64url
+        'KeyUnavailable', // key disabled, deleted, or access denied
+        'Throttling', // request rate exceeded
+    ],
+    getPayload: (keyName, message, signature) => ({ keyName, message, signature }),
+});
+//# sourceMappingURL=askCryptoVerify.js.map

package/lib/commonjs/actions/crypto/askCryptoVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"askCryptoVerify.js","sourceRoot":"","sources":["../../../../src/actions/crypto/askCryptoVerify.ts"],"names":[],"mappings":";;;AAAA,uCAAoD;AACpD,yDAAsD;AAEtD,yEAAyE;AACzE,8EAA8E;AAC9E,6EAA6E;AAC7E,iFAAiF;AACjF,uBAAuB;AACV,QAAA,eAAe,GAAG,IAAA,6BAAqB,GAAW,CAAC;IAC9D,UAAU,EAAE,mCAAgB,CAAC,MAAM;IACnC,UAAU,EAAE;QACV,kBAAkB,EAAE,wDAAwD;QAC5E,oBAAoB,EAAE,mCAAmC;QACzD,gBAAgB,EAAE,0CAA0C;QAC5D,YAAY,EAAE,wBAAwB;KACvC;IACD,UAAU,EAAE,CAAC,OAAe,EAAE,OAAe,EAAE,SAAiB,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;CACvG,CAAC,CAAC","sourcesContent":["import { createActionRequester } from '../../types';\nimport { CryptoActionType } from './CryptoActionType';\n\n// Verifies a base64url RS256 signature produced by askCryptoSign against\n// `message` using the public half of the signing key. Resolves to false for a\n// signature that does not match; a signature that is not even decodable is a\n// MalformedSignature error rather than false, so a wiring bug is distinguishable\n// from a forged token.\nexport const askCryptoVerify = createActionRequester<boolean>()({\n  actionType: CryptoActionType.Verify,\n  errorTypes: [\n    'KeyNotConfigured', // no defineSigningKey for keyName in the service config\n    'MalformedSignature', // signature is not valid base64url\n    'KeyUnavailable', // key disabled, deleted, or access denied\n    'Throttling', // request rate exceeded\n  ],\n  getPayload: (keyName: string, message: string, signature: string) => ({ keyName, message, signature }),\n});\n"]}

package/lib/commonjs/actions/crypto/index.d.ts

@@ -1,4 +1,7 @@
 export * from './askCryptoDecrypt';
 export * from './askCryptoEncrypt';
+export * from './askCryptoGetPublicKey';
+export * from './askCryptoSign';
+export * from './askCryptoVerify';
 export * from './CryptoActionType';
 export * from './CryptoContext';

package/lib/commonjs/actions/crypto/index.js

@@ -16,6 +16,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./askCryptoDecrypt"), exports);
 __exportStar(require("./askCryptoEncrypt"), exports);
+__exportStar(require("./askCryptoGetPublicKey"), exports);
+__exportStar(require("./askCryptoSign"), exports);
+__exportStar(require("./askCryptoVerify"), exports);
 __exportStar(require("./CryptoActionType"), exports);
 __exportStar(require("./CryptoContext"), exports);
 //# sourceMappingURL=index.js.map

package/lib/commonjs/actions/crypto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/crypto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,qDAAmC;AACnC,qDAAmC;AACnC,kDAAgC","sourcesContent":["export * from './askCryptoDecrypt';\nexport * from './askCryptoEncrypt';\nexport * from './CryptoActionType';\nexport * from './CryptoContext';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/crypto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,qDAAmC;AACnC,0DAAwC;AACxC,kDAAgC;AAChC,oDAAkC;AAClC,qDAAmC;AACnC,kDAAgC","sourcesContent":["export * from './askCryptoDecrypt';\nexport * from './askCryptoEncrypt';\nexport * from './askCryptoGetPublicKey';\nexport * from './askCryptoSign';\nexport * from './askCryptoVerify';\nexport * from './CryptoActionType';\nexport * from './CryptoContext';\n"]}

package/lib/commonjs/actions/file/FileActionType.d.ts

@@ -7,6 +7,7 @@ export declare enum FileActionType {
     ListDirectory = "@quidproquo-core/File/ListDirectory",
     Exists = "@quidproquo-core/File/Exists",
     Delete = "@quidproquo-core/File/Delete",
+    Copy = "@quidproquo-core/File/Copy",
     ReadBinaryContents = "@quidproquo-core/File/ReadBinaryContents",
     WriteBinaryContents = "@quidproquo-core/File/WriteBinaryContents",
     GenerateTemporarySecureUrl = "@quidproquo-core/File/GenerateTemporarySecureUrl",

package/lib/commonjs/actions/file/FileActionType.js

@@ -10,6 +10,7 @@ var FileActionType;
     FileActionType["ListDirectory"] = "@quidproquo-core/File/ListDirectory";
     FileActionType["Exists"] = "@quidproquo-core/File/Exists";
     FileActionType["Delete"] = "@quidproquo-core/File/Delete";
+    FileActionType["Copy"] = "@quidproquo-core/File/Copy";
     FileActionType["ReadBinaryContents"] = "@quidproquo-core/File/ReadBinaryContents";
     FileActionType["WriteBinaryContents"] = "@quidproquo-core/File/WriteBinaryContents";
     FileActionType["GenerateTemporarySecureUrl"] = "@quidproquo-core/File/GenerateTemporarySecureUrl";

package/lib/commonjs/actions/file/FileActionType.js.map

@@ -1 +1 @@
-{"version":3,"file":"FileActionType.js","sourceRoot":"","sources":["../../../../src/actions/file/FileActionType.ts"],"names":[],"mappings":";;;AAEA,IAAY,cAcX;AAdD,WAAY,cAAc;IACxB,6EAA2D,CAAA;IAC3D,+EAA6D,CAAA;IAC7D,2EAAyD,CAAA;IACzD,yEAAuD,CAAA;IACvD,uEAAqD,CAAA;IACrD,yDAAuC,CAAA;IACvC,yDAAuC,CAAA;IACvC,iFAA+D,CAAA;IAC/D,mFAAiE,CAAA;IACjE,iGAA+E,CAAA;IAC/E,6GAA2F,CAAA;IAC3F,uEAAqD,CAAA;IACrD,iEAA+C,CAAA;AACjD,CAAC,EAdW,cAAc,8BAAd,cAAc,QAczB;AAEY,QAAA,iBAAiB,GAAG,GAAG,CAAC","sourcesContent":["import { StorageDriveTier } from '../../config';\n\nexport enum FileActionType {\n  ReadTextContents = '@quidproquo-core/File/ReadTextContents',\n  WriteTextContents = '@quidproquo-core/File/WriteTextContents',\n  WriteObjectJson = '@quidproquo-core/File/WriteObjectJson',\n  ReadObjectJson = '@quidproquo-core/File/ReadObjectJson',\n  ListDirectory = '@quidproquo-core/File/ListDirectory',\n  Exists = '@quidproquo-core/File/Exists',\n  Delete = '@quidproquo-core/File/Delete',\n  ReadBinaryContents = '@quidproquo-core/File/ReadBinaryContents',\n  WriteBinaryContents = '@quidproquo-core/File/WriteBinaryContents',\n  GenerateTemporarySecureUrl = '@quidproquo-core/File/GenerateTemporarySecureUrl',\n  GenerateTemporaryUploadSecureUrl = '@quidproquo-core/File/GenerateTemporaryUploadSecureUrl',\n  IsColdStorage = '@quidproquo-core/File/IsColdStorage',\n  StreamOpen = '@quidproquo-core/File/StreamOpen',\n}\n\nexport const filePathDelimiter = `/`;\n\nexport interface FileInfo {\n  filepath: string;\n  drive: string;\n  isDir: boolean;\n  hashMd5?: string;\n}\n\nexport interface DirectoryList {\n  fileInfos: FileInfo[];\n  pageToken?: string;\n}\n\nexport interface StorageDriveAdvancedWriteOptions {\n  storageDriveTier?: StorageDriveTier;\n}\n"]}
+{"version":3,"file":"FileActionType.js","sourceRoot":"","sources":["../../../../src/actions/file/FileActionType.ts"],"names":[],"mappings":";;;AAEA,IAAY,cAeX;AAfD,WAAY,cAAc;IACxB,6EAA2D,CAAA;IAC3D,+EAA6D,CAAA;IAC7D,2EAAyD,CAAA;IACzD,yEAAuD,CAAA;IACvD,uEAAqD,CAAA;IACrD,yDAAuC,CAAA;IACvC,yDAAuC,CAAA;IACvC,qDAAmC,CAAA;IACnC,iFAA+D,CAAA;IAC/D,mFAAiE,CAAA;IACjE,iGAA+E,CAAA;IAC/E,6GAA2F,CAAA;IAC3F,uEAAqD,CAAA;IACrD,iEAA+C,CAAA;AACjD,CAAC,EAfW,cAAc,8BAAd,cAAc,QAezB;AAEY,QAAA,iBAAiB,GAAG,GAAG,CAAC","sourcesContent":["import { StorageDriveTier } from '../../config';\n\nexport enum FileActionType {\n  ReadTextContents = '@quidproquo-core/File/ReadTextContents',\n  WriteTextContents = '@quidproquo-core/File/WriteTextContents',\n  WriteObjectJson = '@quidproquo-core/File/WriteObjectJson',\n  ReadObjectJson = '@quidproquo-core/File/ReadObjectJson',\n  ListDirectory = '@quidproquo-core/File/ListDirectory',\n  Exists = '@quidproquo-core/File/Exists',\n  Delete = '@quidproquo-core/File/Delete',\n  Copy = '@quidproquo-core/File/Copy',\n  ReadBinaryContents = '@quidproquo-core/File/ReadBinaryContents',\n  WriteBinaryContents = '@quidproquo-core/File/WriteBinaryContents',\n  GenerateTemporarySecureUrl = '@quidproquo-core/File/GenerateTemporarySecureUrl',\n  GenerateTemporaryUploadSecureUrl = '@quidproquo-core/File/GenerateTemporaryUploadSecureUrl',\n  IsColdStorage = '@quidproquo-core/File/IsColdStorage',\n  StreamOpen = '@quidproquo-core/File/StreamOpen',\n}\n\nexport const filePathDelimiter = `/`;\n\nexport interface FileInfo {\n  filepath: string;\n  drive: string;\n  isDir: boolean;\n  hashMd5?: string;\n}\n\nexport interface DirectoryList {\n  fileInfos: FileInfo[];\n  pageToken?: string;\n}\n\nexport interface StorageDriveAdvancedWriteOptions {\n  storageDriveTier?: StorageDriveTier;\n}\n"]}

package/lib/commonjs/actions/file/askFileCopy.d.ts

@@ -0,0 +1,13 @@
+import { FileActionType } from './FileActionType';
+/**
+ * Copies one object to another path, possibly on another drive, without the bytes crossing the story (an S3
+ * server-side copy on lambda, a filesystem copy locally). The stored content type and content disposition come
+ * along with it. One `scope` applies to both sides: a copy never crosses a storage scope.
+ */
+export declare const askFileCopy: import("../../types").ActionRequesterFunction<FileActionType.Copy, [sourceDrive: string, sourceFilepath: string, targetDrive: string, targetFilepath: string, scope?: string | undefined], {
+    sourceDrive: string;
+    sourceFilepath: string;
+    targetDrive: string;
+    targetFilepath: string;
+    scope: string | undefined;
+}, void, "AccessDenied" | "DriveNotFound" | "FileNotFound" | "InvalidScope">;

package/lib/commonjs/actions/file/askFileCopy.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.askFileCopy = void 0;
+const types_1 = require("../../types");
+const FileActionType_1 = require("./FileActionType");
+/**
+ * Copies one object to another path, possibly on another drive, without the bytes crossing the story (an S3
+ * server-side copy on lambda, a filesystem copy locally). The stored content type and content disposition come
+ * along with it. One `scope` applies to both sides: a copy never crosses a storage scope.
+ */
+exports.askFileCopy = (0, types_1.createActionRequester)()({
+    actionType: FileActionType_1.FileActionType.Copy,
+    errorTypes: [
+        'AccessDenied', // caller lacks permission to read the source or write the target
+        'DriveNotFound', // the source or target storage drive does not exist
+        'FileNotFound', // no object exists at the source filepath
+        'InvalidScope', // scope is not a valid single path segment
+    ],
+    getPayload: (sourceDrive, sourceFilepath, targetDrive, targetFilepath, scope) => ({
+        sourceDrive,
+        sourceFilepath,
+        targetDrive,
+        targetFilepath,
+        scope,
+    }),
+});
+//# sourceMappingURL=askFileCopy.js.map

package/lib/commonjs/actions/file/askFileCopy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"askFileCopy.js","sourceRoot":"","sources":["../../../../src/actions/file/askFileCopy.ts"],"names":[],"mappings":";;;AAAA,uCAAoD;AACpD,qDAAkD;AAElD;;;;GAIG;AACU,QAAA,WAAW,GAAG,IAAA,6BAAqB,GAAQ,CAAC;IACvD,UAAU,EAAE,+BAAc,CAAC,IAAI;IAC/B,UAAU,EAAE;QACV,cAAc,EAAE,iEAAiE;QACjF,eAAe,EAAE,oDAAoD;QACrE,cAAc,EAAE,0CAA0C;QAC1D,cAAc,EAAE,2CAA2C;KAC5D;IACD,UAAU,EAAE,CAAC,WAAmB,EAAE,cAAsB,EAAE,WAAmB,EAAE,cAAsB,EAAE,KAAc,EAAE,EAAE,CAAC,CAAC;QACzH,WAAW;QACX,cAAc;QACd,WAAW;QACX,cAAc;QACd,KAAK;KACN,CAAC;CACH,CAAC,CAAC","sourcesContent":["import { createActionRequester } from '../../types';\nimport { FileActionType } from './FileActionType';\n\n/**\n * Copies one object to another path, possibly on another drive, without the bytes crossing the story (an S3\n * server-side copy on lambda, a filesystem copy locally). The stored content type and content disposition come\n * along with it. One `scope` applies to both sides: a copy never crosses a storage scope.\n */\nexport const askFileCopy = createActionRequester<void>()({\n  actionType: FileActionType.Copy,\n  errorTypes: [\n    'AccessDenied', // caller lacks permission to read the source or write the target\n    'DriveNotFound', // the source or target storage drive does not exist\n    'FileNotFound', // no object exists at the source filepath\n    'InvalidScope', // scope is not a valid single path segment\n  ],\n  getPayload: (sourceDrive: string, sourceFilepath: string, targetDrive: string, targetFilepath: string, scope?: string) => ({\n    sourceDrive,\n    sourceFilepath,\n    targetDrive,\n    targetFilepath,\n    scope,\n  }),\n});\n"]}

package/lib/commonjs/actions/file/askFileIsColdStorage.d.ts

@@ -3,4 +3,4 @@ export declare const askFileIsColdStorage: import("../../types").ActionRequester
     drive: string;
     filepath: string;
     scope: string | undefined;
-}, boolean, "AccessDenied" | "DriveNotFound" | "InvalidScope" | "FileNotFound">;
+}, boolean, "AccessDenied" | "DriveNotFound" | "FileNotFound" | "InvalidScope">;

package/lib/commonjs/actions/file/askFileReadBinaryContents.d.ts

@@ -4,4 +4,4 @@ export declare const askFileReadBinaryContents: import("../../types").ActionRequ
     drive: string;
     filepath: string;
     scope: string | undefined;
-}, QPQBinaryData, "InvalidScope" | "FileNotFound" | "InvalidStorageClass">;
+}, QPQBinaryData, "FileNotFound" | "InvalidScope" | "InvalidStorageClass">;

package/lib/commonjs/actions/file/askFileReadObjectJson.d.ts

@@ -4,5 +4,5 @@ export declare const askFileReadObjectJsonBase: import("../..").ActionRequesterF
     drive: string;
     filepath: string;
     scope: string | undefined;
-}, object, "InvalidScope" | "FileNotFound" | "InvalidStorageClass" | "InvalidJson">;
+}, object, "FileNotFound" | "InvalidScope" | "InvalidStorageClass" | "InvalidJson">;
 export declare function askFileReadObjectJson<T extends object>(drive: string, filepath: string, scope?: string): AskResponse<T>;

package/lib/commonjs/actions/file/askFileReadTextContents.d.ts

@@ -3,4 +3,4 @@ export declare const askFileReadTextContents: import("../../types").ActionReques
     drive: string;
     filepath: string;
     scope: string | undefined;
-}, string, "InvalidScope" | "FileNotFound" | "InvalidStorageClass">;
+}, string, "FileNotFound" | "InvalidScope" | "InvalidStorageClass">;

package/lib/commonjs/actions/file/askFileStreamOpen.d.ts

@@ -7,5 +7,5 @@ export declare const askFileStreamOpenBase: import("../..").ActionRequesterFunct
     encoding: StreamEncoding;
     chunkSize: number | undefined;
     scope: string | undefined;
-}, StreamHandle<StreamEncoding, unknown>, "InvalidScope" | "FileNotFound" | "InvalidStorageClass">;
+}, StreamHandle<StreamEncoding, unknown>, "FileNotFound" | "InvalidScope" | "InvalidStorageClass">;
 export declare function askFileStreamOpen<E extends StreamEncoding = 'text'>(drive: string, filepath: string, encoding?: E, chunkSize?: number, scope?: string): AskResponse<StreamHandle<E>>;

package/lib/commonjs/actions/file/index.d.ts

@@ -1,3 +1,4 @@
+export * from './askFileCopy';
 export * from './askFileDelete';
 export * from './askFileExists';
 export * from './askFileGenerateTemporarySecureUrl';

package/lib/commonjs/actions/file/index.js

@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./askFileCopy"), exports);
 __exportStar(require("./askFileDelete"), exports);
 __exportStar(require("./askFileExists"), exports);
 __exportStar(require("./askFileGenerateTemporarySecureUrl"), exports);

package/lib/commonjs/actions/file/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/file/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAAgC;AAChC,kDAAgC;AAChC,sEAAoD;AACpD,4EAA0D;AAC1D,yDAAuC;AACvC,yDAAuC;AACvC,8DAA4C;AAC5C,0DAAwC;AACxC,4DAA0C;AAC1C,sDAAoC;AACpC,+DAA6C;AAC7C,2DAAyC;AACzC,6DAA2C;AAC3C,mDAAiC","sourcesContent":["export * from './askFileDelete';\nexport * from './askFileExists';\nexport * from './askFileGenerateTemporarySecureUrl';\nexport * from './askFileGenerateTemporaryUploadSecureUrl';\nexport * from './askFileIsColdStorage';\nexport * from './askFileListDirectory';\nexport * from './askFileReadBinaryContents';\nexport * from './askFileReadObjectJson';\nexport * from './askFileReadTextContents';\nexport * from './askFileStreamOpen';\nexport * from './askFileWriteBinaryContents';\nexport * from './askFileWriteObjectJson';\nexport * from './askFileWriteTextContents';\nexport * from './FileActionType';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/file/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gDAA8B;AAC9B,kDAAgC;AAChC,kDAAgC;AAChC,sEAAoD;AACpD,4EAA0D;AAC1D,yDAAuC;AACvC,yDAAuC;AACvC,8DAA4C;AAC5C,0DAAwC;AACxC,4DAA0C;AAC1C,sDAAoC;AACpC,+DAA6C;AAC7C,2DAAyC;AACzC,6DAA2C;AAC3C,mDAAiC","sourcesContent":["export * from './askFileCopy';\nexport * from './askFileDelete';\nexport * from './askFileExists';\nexport * from './askFileGenerateTemporarySecureUrl';\nexport * from './askFileGenerateTemporaryUploadSecureUrl';\nexport * from './askFileIsColdStorage';\nexport * from './askFileListDirectory';\nexport * from './askFileReadBinaryContents';\nexport * from './askFileReadObjectJson';\nexport * from './askFileReadTextContents';\nexport * from './askFileStreamOpen';\nexport * from './askFileWriteBinaryContents';\nexport * from './askFileWriteObjectJson';\nexport * from './askFileWriteTextContents';\nexport * from './FileActionType';\n"]}

package/lib/commonjs/config/QPQConfig.d.ts

@@ -18,6 +18,7 @@ export declare enum QPQCoreConfigSettingType {
     keyValueStore = "@quidproquo-core/config/KeyValueStore",
     configValue = "@quidproquo-core/config/ConfigValue",
     cryptoKey = "@quidproquo-core/config/cryptoKey",
+    signingKey = "@quidproquo-core/config/signingKey",
     environmentSettings = "@quidproquo-core/config/EnvironmentSettings",
     serviceSettings = "@quidproquo-core/config/ServiceSettings",
     deployEvent = "@quidproquo-core/config/DeployEvent",

package/lib/commonjs/config/QPQConfig.js

@@ -21,6 +21,7 @@ var QPQCoreConfigSettingType;
     QPQCoreConfigSettingType["keyValueStore"] = "@quidproquo-core/config/KeyValueStore";
     QPQCoreConfigSettingType["configValue"] = "@quidproquo-core/config/ConfigValue";
     QPQCoreConfigSettingType["cryptoKey"] = "@quidproquo-core/config/cryptoKey";
+    QPQCoreConfigSettingType["signingKey"] = "@quidproquo-core/config/signingKey";
     QPQCoreConfigSettingType["environmentSettings"] = "@quidproquo-core/config/EnvironmentSettings";
     QPQCoreConfigSettingType["serviceSettings"] = "@quidproquo-core/config/ServiceSettings";
     QPQCoreConfigSettingType["deployEvent"] = "@quidproquo-core/config/DeployEvent";

package/lib/commonjs/config/QPQConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"QPQConfig.js","sourceRoot":"","sources":["../../../src/config/QPQConfig.ts"],"names":[],"mappings":";;;AAEA,IAAY,wBA6BX;AA7BD,WAAY,wBAAwB;IAClC,6DAAiC,CAAA;IACjC,uEAA2C,CAAA;IAC3C,6EAAiD,CAAA;IACjD,iFAAqD,CAAA;IACrD,yEAA6C,CAAA;IAC7C,qEAAyC,CAAA;IACzC,qEAAyC,CAAA;IACzC,2EAA+C,CAAA;IAC/C,yFAA6D,CAAA;IAC7D,iFAAqD,CAAA;IACrD,iGAAqE,CAAA;IACrE,mGAAuE,CAAA;IACvE,mEAAuC,CAAA;IACvC,yEAA6C,CAAA;IAC7C,mFAAuD,CAAA;IACvD,mFAAuD,CAAA;IACvD,+EAAmD,CAAA;IACnD,2EAA+C,CAAA;IAC/C,+FAAmE,CAAA;IACnE,uFAA2D,CAAA;IAC3D,+EAAmD,CAAA;IACnD,mFAAuD,CAAA;IACvD,qFAAyD,CAAA;IACzD,+EAAmD,CAAA;IACnD,qFAAyD,CAAA;IACzD,yFAA6D,CAAA;IAC7D,2FAA+D,CAAA;IAC/D,iGAAqE,CAAA;AACvE,CAAC,EA7BW,wBAAwB,wCAAxB,wBAAwB,QA6BnC","sourcesContent":["import { CrossModuleOwner } from '../types';\n\nexport enum QPQCoreConfigSettingType {\n  ai = '@quidproquo-core/config/Ai',\n  appName = '@quidproquo-core/config/AppName',\n  moduleName = '@quidproquo-core/config/moduleName',\n  storageDrive = '@quidproquo-core/config/storageDrive',\n  schedule = '@quidproquo-core/config/schedule',\n  secret = '@quidproquo-core/config/secret',\n  global = '@quidproquo-core/config/global',\n  parameter = '@quidproquo-core/config/parameter',\n  actionProcessors = '@quidproquo-core/config/actionProcessors',\n  apiBuildPath = '@quidproquo-core/config/apiBuildPath',\n  backendBundleOptions = '@quidproquo-core/config/BackendBundleOptions',\n  frontendBundleOptions = '@quidproquo-core/config/FrontendBundleOptions',\n  queue = '@quidproquo-core/config/Queue',\n  eventBus = '@quidproquo-core/config/EventBus',\n  userDirectory = '@quidproquo-core/config/UserDirectory',\n  keyValueStore = '@quidproquo-core/config/KeyValueStore',\n  configValue = '@quidproquo-core/config/ConfigValue',\n  cryptoKey = '@quidproquo-core/config/cryptoKey',\n  environmentSettings = '@quidproquo-core/config/EnvironmentSettings',\n  serviceSettings = '@quidproquo-core/config/ServiceSettings',\n  deployEvent = '@quidproquo-core/config/DeployEvent',\n  graphDatabase = '@quidproquo-core/config/GraphDatabase',\n  virtualNetwork = '@quidproquo-core/config/VirtualNetwork',\n  notifyError = '@quidproquo-core/config/notifyError',\n  inlineFunction = '@quidproquo-core/config/InlineFunction',\n  dynamicFunctions = '@quidproquo-core/config/DynamicFunctions',\n  javascriptRuntime = '@quidproquo-core/config/JavascriptRuntime',\n  federatedModuleStore = '@quidproquo-core/config/FederatedModuleStore',\n}\n\nexport interface QPQConfigSetting {\n  configSettingType: string;\n  uniqueKey: string;\n\n  owner?: CrossModuleOwner;\n}\n\nexport interface QPQConfigAdvancedSettings {\n  deprecated?: boolean;\n}\n\nexport type QPQConfigItem = QPQConfigSetting | QPQConfigItem[];\nexport type QPQConfig = QPQConfigItem[];\n"]}
+{"version":3,"file":"QPQConfig.js","sourceRoot":"","sources":["../../../src/config/QPQConfig.ts"],"names":[],"mappings":";;;AAEA,IAAY,wBA8BX;AA9BD,WAAY,wBAAwB;IAClC,6DAAiC,CAAA;IACjC,uEAA2C,CAAA;IAC3C,6EAAiD,CAAA;IACjD,iFAAqD,CAAA;IACrD,yEAA6C,CAAA;IAC7C,qEAAyC,CAAA;IACzC,qEAAyC,CAAA;IACzC,2EAA+C,CAAA;IAC/C,yFAA6D,CAAA;IAC7D,iFAAqD,CAAA;IACrD,iGAAqE,CAAA;IACrE,mGAAuE,CAAA;IACvE,mEAAuC,CAAA;IACvC,yEAA6C,CAAA;IAC7C,mFAAuD,CAAA;IACvD,mFAAuD,CAAA;IACvD,+EAAmD,CAAA;IACnD,2EAA+C,CAAA;IAC/C,6EAAiD,CAAA;IACjD,+FAAmE,CAAA;IACnE,uFAA2D,CAAA;IAC3D,+EAAmD,CAAA;IACnD,mFAAuD,CAAA;IACvD,qFAAyD,CAAA;IACzD,+EAAmD,CAAA;IACnD,qFAAyD,CAAA;IACzD,yFAA6D,CAAA;IAC7D,2FAA+D,CAAA;IAC/D,iGAAqE,CAAA;AACvE,CAAC,EA9BW,wBAAwB,wCAAxB,wBAAwB,QA8BnC","sourcesContent":["import { CrossModuleOwner } from '../types';\n\nexport enum QPQCoreConfigSettingType {\n  ai = '@quidproquo-core/config/Ai',\n  appName = '@quidproquo-core/config/AppName',\n  moduleName = '@quidproquo-core/config/moduleName',\n  storageDrive = '@quidproquo-core/config/storageDrive',\n  schedule = '@quidproquo-core/config/schedule',\n  secret = '@quidproquo-core/config/secret',\n  global = '@quidproquo-core/config/global',\n  parameter = '@quidproquo-core/config/parameter',\n  actionProcessors = '@quidproquo-core/config/actionProcessors',\n  apiBuildPath = '@quidproquo-core/config/apiBuildPath',\n  backendBundleOptions = '@quidproquo-core/config/BackendBundleOptions',\n  frontendBundleOptions = '@quidproquo-core/config/FrontendBundleOptions',\n  queue = '@quidproquo-core/config/Queue',\n  eventBus = '@quidproquo-core/config/EventBus',\n  userDirectory = '@quidproquo-core/config/UserDirectory',\n  keyValueStore = '@quidproquo-core/config/KeyValueStore',\n  configValue = '@quidproquo-core/config/ConfigValue',\n  cryptoKey = '@quidproquo-core/config/cryptoKey',\n  signingKey = '@quidproquo-core/config/signingKey',\n  environmentSettings = '@quidproquo-core/config/EnvironmentSettings',\n  serviceSettings = '@quidproquo-core/config/ServiceSettings',\n  deployEvent = '@quidproquo-core/config/DeployEvent',\n  graphDatabase = '@quidproquo-core/config/GraphDatabase',\n  virtualNetwork = '@quidproquo-core/config/VirtualNetwork',\n  notifyError = '@quidproquo-core/config/notifyError',\n  inlineFunction = '@quidproquo-core/config/InlineFunction',\n  dynamicFunctions = '@quidproquo-core/config/DynamicFunctions',\n  javascriptRuntime = '@quidproquo-core/config/JavascriptRuntime',\n  federatedModuleStore = '@quidproquo-core/config/FederatedModuleStore',\n}\n\nexport interface QPQConfigSetting {\n  configSettingType: string;\n  uniqueKey: string;\n\n  owner?: CrossModuleOwner;\n}\n\nexport interface QPQConfigAdvancedSettings {\n  deprecated?: boolean;\n}\n\nexport type QPQConfigItem = QPQConfigSetting | QPQConfigItem[];\nexport type QPQConfig = QPQConfigItem[];\n"]}

package/lib/commonjs/config/settings/index.d.ts

@@ -26,6 +26,7 @@ export * from './queue';
 export * from './schedule';
 export * from './secret';
 export * from './serviceSettings';
+export * from './signingKey';
 export * from './storageDrive';
 export * from './userDirectory';
 export * from './virtualNetwork';

package/lib/commonjs/config/settings/index.js

@@ -42,6 +42,7 @@ __exportStar(require("./queue"), exports);
 __exportStar(require("./schedule"), exports);
 __exportStar(require("./secret"), exports);
 __exportStar(require("./serviceSettings"), exports);
+__exportStar(require("./signingKey"), exports);
 __exportStar(require("./storageDrive"), exports);
 __exportStar(require("./userDirectory"), exports);
 __exportStar(require("./virtualNetwork"), exports);

package/lib/commonjs/config/settings/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/config/settings/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,uCAAqB;AACrB,iDAA+B;AAC/B,sDAAoC;AACpC,oDAAkC;AAClC,uDAAqC;AACrC,kDAAgC;AAChC,gDAA8B;AAC9B,8CAA4B;AAC5B,sDAAoC;AACpC,gDAA8B;AAC9B,qDAAmC;AACnC,mDAAiC;AACjC,wDAAsC;AACtC,6CAA2B;AAC3B,yDAAuC;AACvC,2CAAyB;AACzB,kDAAgC;AAChC,mDAAiC;AACjC,sDAAoC;AACpC,kDAAgC;AAChC,+CAA6B;AAC7B,gDAA8B;AAC9B,8CAA4B;AAC5B,0CAAwB;AACxB,6CAA2B;AAC3B,2CAAyB;AACzB,oDAAkC;AAClC,iDAA+B;AAC/B,kDAAgC;AAChC,mDAAiC","sourcesContent":["export * from './actionProcessors';\nexport * from './ai';\nexport * from './apiBuildPath';\nexport * from './applicationModule';\nexport * from './applicationName';\nexport * from './applicationVersion';\nexport * from './bundleOptions';\nexport * from './configValue';\nexport * from './cryptoKey';\nexport * from './definePromiseMode';\nexport * from './deployEvent';\nexport * from './dynamicFunctions';\nexport * from './emailTemplates';\nexport * from './environmentSettings';\nexport * from './eventBus';\nexport * from './federatedModuleStore';\nexport * from './global';\nexport * from './graphDatabase';\nexport * from './inlineFunction';\nexport * from './javascriptRuntime';\nexport * from './keyValueStore';\nexport * from './moduleName';\nexport * from './notifyError';\nexport * from './parameter';\nexport * from './queue';\nexport * from './schedule';\nexport * from './secret';\nexport * from './serviceSettings';\nexport * from './storageDrive';\nexport * from './userDirectory';\nexport * from './virtualNetwork';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/config/settings/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,uCAAqB;AACrB,iDAA+B;AAC/B,sDAAoC;AACpC,oDAAkC;AAClC,uDAAqC;AACrC,kDAAgC;AAChC,gDAA8B;AAC9B,8CAA4B;AAC5B,sDAAoC;AACpC,gDAA8B;AAC9B,qDAAmC;AACnC,mDAAiC;AACjC,wDAAsC;AACtC,6CAA2B;AAC3B,yDAAuC;AACvC,2CAAyB;AACzB,kDAAgC;AAChC,mDAAiC;AACjC,sDAAoC;AACpC,kDAAgC;AAChC,+CAA6B;AAC7B,gDAA8B;AAC9B,8CAA4B;AAC5B,0CAAwB;AACxB,6CAA2B;AAC3B,2CAAyB;AACzB,oDAAkC;AAClC,+CAA6B;AAC7B,iDAA+B;AAC/B,kDAAgC;AAChC,mDAAiC","sourcesContent":["export * from './actionProcessors';\nexport * from './ai';\nexport * from './apiBuildPath';\nexport * from './applicationModule';\nexport * from './applicationName';\nexport * from './applicationVersion';\nexport * from './bundleOptions';\nexport * from './configValue';\nexport * from './cryptoKey';\nexport * from './definePromiseMode';\nexport * from './deployEvent';\nexport * from './dynamicFunctions';\nexport * from './emailTemplates';\nexport * from './environmentSettings';\nexport * from './eventBus';\nexport * from './federatedModuleStore';\nexport * from './global';\nexport * from './graphDatabase';\nexport * from './inlineFunction';\nexport * from './javascriptRuntime';\nexport * from './keyValueStore';\nexport * from './moduleName';\nexport * from './notifyError';\nexport * from './parameter';\nexport * from './queue';\nexport * from './schedule';\nexport * from './secret';\nexport * from './serviceSettings';\nexport * from './signingKey';\nexport * from './storageDrive';\nexport * from './userDirectory';\nexport * from './virtualNetwork';\n"]}

package/lib/commonjs/config/settings/signingKey.d.ts

@@ -0,0 +1,9 @@
+import { CrossModuleOwner } from '../../types';
+import { QPQConfigAdvancedSettings, QPQConfigSetting } from '../QPQConfig';
+export interface QPQConfigAdvancedSigningKeySettings extends QPQConfigAdvancedSettings {
+    owner?: CrossModuleOwner<'signingKeyName'>;
+}
+export interface SigningKeyQPQConfigSetting extends QPQConfigSetting {
+    keyName: string;
+}
+export declare const defineSigningKey: (keyName: string, options?: QPQConfigAdvancedSigningKeySettings) => SigningKeyQPQConfigSetting;

package/lib/commonjs/config/settings/signingKey.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defineSigningKey = void 0;
+const QPQConfig_1 = require("../QPQConfig");
+const crossModuleUtils_1 = require("../utils/crossModuleUtils");
+const defineSigningKey = (keyName, options) => ({
+    configSettingType: QPQConfig_1.QPQCoreConfigSettingType.signingKey,
+    uniqueKey: keyName,
+    keyName,
+    owner: (0, crossModuleUtils_1.convertCrossModuleOwnerToGenericResourceNameOverride)(options === null || options === void 0 ? void 0 : options.owner),
+});
+exports.defineSigningKey = defineSigningKey;
+//# sourceMappingURL=signingKey.js.map

package/lib/commonjs/config/settings/signingKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signingKey.js","sourceRoot":"","sources":["../../../../src/config/settings/signingKey.ts"],"names":[],"mappings":";;;AACA,4CAAqG;AACrG,gEAAiG;AAe1F,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAE,OAA6C,EAA8B,EAAE,CAAC,CAAC;IAC/H,iBAAiB,EAAE,oCAAwB,CAAC,UAAU;IACtD,SAAS,EAAE,OAAO;IAElB,OAAO;IAEP,KAAK,EAAE,IAAA,uEAAoD,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAC;CAC5E,CAAC,CAAC;AAPU,QAAA,gBAAgB,oBAO1B","sourcesContent":["import { CrossModuleOwner } from '../../types';\nimport { QPQConfigAdvancedSettings, QPQConfigSetting, QPQCoreConfigSettingType } from '../QPQConfig';\nimport { convertCrossModuleOwnerToGenericResourceNameOverride } from '../utils/crossModuleUtils';\n\nexport interface QPQConfigAdvancedSigningKeySettings extends QPQConfigAdvancedSettings {\n  owner?: CrossModuleOwner<'signingKeyName'>;\n}\n\n// An asymmetric (RSA-2048, RS256) key pair whose private half never leaves the\n// provider. Stories sign with askCryptoSign, verify with askCryptoVerify and\n// publish the public half with askCryptoGetPublicKey. Distinct from\n// defineCryptoKey: a provider key is either encrypt/decrypt or sign/verify, never\n// both, so the two are separate resources with separate grants.\nexport interface SigningKeyQPQConfigSetting extends QPQConfigSetting {\n  keyName: string;\n}\n\nexport const defineSigningKey = (keyName: string, options?: QPQConfigAdvancedSigningKeySettings): SigningKeyQPQConfigSetting => ({\n  configSettingType: QPQCoreConfigSettingType.signingKey,\n  uniqueKey: keyName,\n\n  keyName,\n\n  owner: convertCrossModuleOwnerToGenericResourceNameOverride(options?.owner),\n});\n"]}

package/lib/commonjs/qpqCoreUtils.d.ts

@@ -1,4 +1,4 @@
-import { AiQPQConfigSetting, ApplicationQPQConfigSetting, BackendBundleOptions, CryptoKeyQPQConfigSetting, DeployEventsQPQConfigSetting, DynamicFunctionsQPQConfigSetting, EmailTemplates, EventBusQPQConfigSetting, FederatedModuleStoreQPQConfigSetting, FrontendBundleOptions, GraphDatabaseQPQConfigSetting, InlineFunctionQPQConfigSetting, JavascriptRuntimeQPQConfigSetting, KeyValueStoreQPQConfigSetting, NotifyErrorQPQConfigSetting, ParameterQPQConfigSetting, QPQConfig, QPQConfigSetting, QpqQueueProcessors, QueueQPQConfigSetting, ScheduleQPQConfigSetting, SecretQPQConfigSetting, StorageDriveQPQConfigSetting, UserDirectoryQPQConfigSetting, VirtualNetworkQPQConfigSetting } from './config';
+import { AiQPQConfigSetting, ApplicationQPQConfigSetting, BackendBundleOptions, CryptoKeyQPQConfigSetting, DeployEventsQPQConfigSetting, DynamicFunctionsQPQConfigSetting, EmailTemplates, EventBusQPQConfigSetting, FederatedModuleStoreQPQConfigSetting, FrontendBundleOptions, GraphDatabaseQPQConfigSetting, InlineFunctionQPQConfigSetting, JavascriptRuntimeQPQConfigSetting, KeyValueStoreQPQConfigSetting, NotifyErrorQPQConfigSetting, ParameterQPQConfigSetting, QPQConfig, QPQConfigSetting, QpqQueueProcessors, QueueQPQConfigSetting, ScheduleQPQConfigSetting, SecretQPQConfigSetting, SigningKeyQPQConfigSetting, StorageDriveQPQConfigSetting, UserDirectoryQPQConfigSetting, VirtualNetworkQPQConfigSetting } from './config';
 import { ConfigUrl, CrossServiceResourceName, CustomFullyQualifiedResource, FullyQualifiedResource, QpqFunctionRuntime, ResourceName } from './types';
 /**
  * Flattens a QPQConfig array into a single array of QPQConfigSetting objects.
@@ -85,6 +85,9 @@ export declare const getOwnedSecrets: (qpqConfig: QPQConfig) => SecretQPQConfigS
 export declare const getCryptoKeyByName: (cryptoKeyName: string, qpqConfig: QPQConfig) => CryptoKeyQPQConfigSetting;
 export declare const getAllCryptoKeyConfigs: (qpqConfig: QPQConfig) => CryptoKeyQPQConfigSetting[];
 export declare const getOwnedCryptoKeys: (qpqConfig: QPQConfig) => CryptoKeyQPQConfigSetting[];
+export declare const getSigningKeyByName: (signingKeyName: string, qpqConfig: QPQConfig) => SigningKeyQPQConfigSetting;
+export declare const getAllSigningKeyConfigs: (qpqConfig: QPQConfig) => SigningKeyQPQConfigSetting[];
+export declare const getOwnedSigningKeys: (qpqConfig: QPQConfig) => SigningKeyQPQConfigSetting[];
 export declare const getGlobalConfigValue: <T>(qpqConfig: QPQConfig, name: string) => T;
 export declare const resolveGlobalValue: <T>(qpqConfig: QPQConfig, functionGlobals: Record<string, unknown> | undefined, name: string) => T;
 export declare const getUserDirectories: (configs: QPQConfig) => UserDirectoryQPQConfigSetting[];

package/lib/commonjs/qpqCoreUtils.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getAllSecretConfigs = exports.getSecretByName = exports.getSrcFilenameFromQpqFunctionRuntime = exports.getApiBuildPath = exports.getAllSrcEntries = exports.expandSrcEntriesWithActionProcessors = exports.getOwnedDynamicFunctions = exports.getAllDynamicFunctions = exports.getOwnedInlineFunctions = exports.getAllInlineFunctions = exports.getUserDirectorySrcEntries = exports.getQueueSrcEntries = exports.getOwnedScheduleEvents = exports.getScheduleEvents = exports.getUserDirectoryEmailTemplates = exports.getActionProcessorSources = exports.getKeyValueStoreByName = exports.resolveCrossServiceResourceName = exports.getOwnedStorageDrives = exports.getOwnedGraphDatabases = exports.getOwnedKeyValueStores = exports.getVirualNetworkConfigs = exports.getDeployEventConfigs = exports.getAllGraphDatabaseConfigs = exports.getAllKeyValueStores = exports.getOwnedItems = exports.getEventBusConfigByName = exports.getOwnedEventBusConfigs = exports.getJavascriptRuntimeConfig = exports.getAllAiConfigs = exports.getAllEventBusConfigs = exports.getStorageDriveNames = exports.assertFifoQueueEventBusSubscriptionsAreValid = exports.getQueueByName = exports.getNotifyErrorConfigs = exports.getOwnedQueues = exports.getQueues = exports.getFederatedModuleStore = exports.getStorageDriveByName = exports.getStorageDrives = exports.getApplicationModuleEnvironment = exports.getConfigRoot = exports.getApplicationModuleFeature = exports.getApplicationName = exports.getApplicationConfigRoot = exports.getApplicationModuleName = exports.getApplicationConfigSetting = exports.getConfigSetting = exports.getConfigSettings = exports.flattenQpqConfig = void 0;
-exports.getFullUrlFromConfigUrl = exports.isSameResource = exports.getKeyValueStoreFullyQualifiedResourceName = exports.getFullyQualifiedResourceName = exports.convertCustomFullyQualifiedResourceToGeneric = exports.getQueueQueueProcessors = exports.getQueueConfigSettingByName = exports.getUniqueKeyForSetting = exports.getFrontendBundleOptions = exports.getBackendBundleOptions = exports.getOwnedParameterConfigs = exports.getParameterConfig = exports.getAllParameterConfigs = exports.getUserDirectoryByName = exports.getOwnedUserDirectories = exports.getUserDirectories = exports.resolveGlobalValue = exports.getGlobalConfigValue = exports.getOwnedCryptoKeys = exports.getAllCryptoKeyConfigs = exports.getCryptoKeyByName = exports.getOwnedSecrets = void 0;
+exports.getFullUrlFromConfigUrl = exports.isSameResource = exports.getKeyValueStoreFullyQualifiedResourceName = exports.getFullyQualifiedResourceName = exports.convertCustomFullyQualifiedResourceToGeneric = exports.getQueueQueueProcessors = exports.getQueueConfigSettingByName = exports.getUniqueKeyForSetting = exports.getFrontendBundleOptions = exports.getBackendBundleOptions = exports.getOwnedParameterConfigs = exports.getParameterConfig = exports.getAllParameterConfigs = exports.getUserDirectoryByName = exports.getOwnedUserDirectories = exports.getUserDirectories = exports.resolveGlobalValue = exports.getGlobalConfigValue = exports.getOwnedSigningKeys = exports.getAllSigningKeyConfigs = exports.getSigningKeyByName = exports.getOwnedCryptoKeys = exports.getAllCryptoKeyConfigs = exports.getCryptoKeyByName = exports.getOwnedSecrets = void 0;
 const config_1 = require("./config");
 const utils_1 = require("./utils");
 /**
@@ -398,6 +398,24 @@ const getOwnedCryptoKeys = (qpqConfig) => {
     return (0, exports.getOwnedItems)(cryptoKeys, qpqConfig);
 };
 exports.getOwnedCryptoKeys = getOwnedCryptoKeys;
+const getSigningKeyByName = (signingKeyName, qpqConfig) => {
+    const signingKeys = (0, exports.getConfigSettings)(qpqConfig, config_1.QPQCoreConfigSettingType.signingKey);
+    const signingKey = signingKeys.find((k) => k.keyName === signingKeyName);
+    if (!signingKey) {
+        throw new Error(`Can not find signing key [${signingKeyName}]`);
+    }
+    return signingKey;
+};
+exports.getSigningKeyByName = getSigningKeyByName;
+const getAllSigningKeyConfigs = (qpqConfig) => {
+    return (0, exports.getConfigSettings)(qpqConfig, config_1.QPQCoreConfigSettingType.signingKey);
+};
+exports.getAllSigningKeyConfigs = getAllSigningKeyConfigs;
+const getOwnedSigningKeys = (qpqConfig) => {
+    const signingKeys = (0, exports.getAllSigningKeyConfigs)(qpqConfig);
+    return (0, exports.getOwnedItems)(signingKeys, qpqConfig);
+};
+exports.getOwnedSigningKeys = getOwnedSigningKeys;
 const getGlobalConfigValue = (qpqConfig, name) => {
     const global = (0, exports.getConfigSettings)(qpqConfig, config_1.QPQCoreConfigSettingType.global).find((g) => g.key === name);
     if (!global) {