quidproquo-core 0.1.9 → 0.1.10

package/lib/commonjs/actions/file/FileGenerateTemporaryUploadSecureUrlActionRequester.d.ts

@@ -5,4 +5,5 @@ export declare const FileGenerateTemporaryUploadSecureUrlErrorTypeEnum: {
 };
 export declare function askFileGenerateTemporaryUploadSecureUrl(drive: string, filepath: string, expirationMs: number, advancedOptions?: {
     contentType?: FileGenerateTemporaryUploadSecureUrlActionPayload['contentType'];
+    contentDisposition?: FileGenerateTemporaryUploadSecureUrlActionPayload['contentDisposition'];
 }, scope?: string): FileGenerateTemporaryUploadSecureUrlActionRequester;

package/lib/commonjs/actions/file/FileGenerateTemporaryUploadSecureUrlActionRequester.js

@@ -16,6 +16,7 @@ function* askFileGenerateTemporaryUploadSecureUrl(drive, filepath, expirationMs,
             filepath,
             expirationMs,
             contentType: advancedOptions === null || advancedOptions === void 0 ? void 0 : advancedOptions.contentType,
+            contentDisposition: advancedOptions === null || advancedOptions === void 0 ? void 0 : advancedOptions.contentDisposition,
             // maxSizeBytes: advancedOptions?.maxSizeBytes,
             scope,
         },

package/lib/commonjs/actions/file/FileGenerateTemporaryUploadSecureUrlActionRequester.js.map

@@ -1 +1 @@
-{"version":3,"file":"FileGenerateTemporaryUploadSecureUrlActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/file/FileGenerateTemporaryUploadSecureUrlActionRequester.ts"],"names":[],"mappings":";;;AAYA,0FAqBC;AAjCD,uCAAuD;AACvD,qDAAkD;AAMrC,QAAA,iDAAiD,GAAG,IAAA,gCAAwB,EAAC,+BAAc,CAAC,gCAAgC,EAAE;IACzI,mBAAmB,EAAE,uDAAuD;IAC5E,cAAc,EAAE,2CAA2C;CAC5D,CAAC,CAAC;AAEH,QAAe,CAAC,CAAC,uCAAuC,CACtD,KAAa,EACb,QAAgB,EAChB,YAAoB,EACpB,eAGC,EACD,KAAc;IAEd,OAAO,MAAM;QACX,IAAI,EAAE,+BAAc,CAAC,gCAAgC;QACrD,OAAO,EAAE;YACP,KAAK;YACL,QAAQ;YACR,YAAY;YACZ,WAAW,EAAE,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,WAAW;YACzC,+CAA+C;YAC/C,KAAK;SACN;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createErrorEnumForAction } from '../../types';\nimport { FileActionType } from './FileActionType';\nimport {\n  FileGenerateTemporaryUploadSecureUrlActionPayload,\n  FileGenerateTemporaryUploadSecureUrlActionRequester,\n} from './FileGenerateTemporaryUploadSecureUrlActionTypes';\n\nexport const FileGenerateTemporaryUploadSecureUrlErrorTypeEnum = createErrorEnumForAction(FileActionType.GenerateTemporaryUploadSecureUrl, [\n  'ExpirationTooLong', // requested expiry exceeds max length of time possible\n  'InvalidScope', // scope is not a valid single path segment\n]);\n\nexport function* askFileGenerateTemporaryUploadSecureUrl(\n  drive: string,\n  filepath: string,\n  expirationMs: number,\n  advancedOptions?: {\n    contentType?: FileGenerateTemporaryUploadSecureUrlActionPayload['contentType'];\n    // maxSizeBytes?: FileGenerateTemporaryUploadSecureUrlActionPayload['maxSizeBytes']\n  },\n  scope?: string,\n): FileGenerateTemporaryUploadSecureUrlActionRequester {\n  return yield {\n    type: FileActionType.GenerateTemporaryUploadSecureUrl,\n    payload: {\n      drive,\n      filepath,\n      expirationMs,\n      contentType: advancedOptions?.contentType,\n      // maxSizeBytes: advancedOptions?.maxSizeBytes,\n      scope,\n    },\n  };\n}\n"]}
+{"version":3,"file":"FileGenerateTemporaryUploadSecureUrlActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/file/FileGenerateTemporaryUploadSecureUrlActionRequester.ts"],"names":[],"mappings":";;;AAYA,0FAuBC;AAnCD,uCAAuD;AACvD,qDAAkD;AAMrC,QAAA,iDAAiD,GAAG,IAAA,gCAAwB,EAAC,+BAAc,CAAC,gCAAgC,EAAE;IACzI,mBAAmB,EAAE,uDAAuD;IAC5E,cAAc,EAAE,2CAA2C;CAC5D,CAAC,CAAC;AAEH,QAAe,CAAC,CAAC,uCAAuC,CACtD,KAAa,EACb,QAAgB,EAChB,YAAoB,EACpB,eAIC,EACD,KAAc;IAEd,OAAO,MAAM;QACX,IAAI,EAAE,+BAAc,CAAC,gCAAgC;QACrD,OAAO,EAAE;YACP,KAAK;YACL,QAAQ;YACR,YAAY;YACZ,WAAW,EAAE,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,WAAW;YACzC,kBAAkB,EAAE,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,kBAAkB;YACvD,+CAA+C;YAC/C,KAAK;SACN;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createErrorEnumForAction } from '../../types';\nimport { FileActionType } from './FileActionType';\nimport {\n  FileGenerateTemporaryUploadSecureUrlActionPayload,\n  FileGenerateTemporaryUploadSecureUrlActionRequester,\n} from './FileGenerateTemporaryUploadSecureUrlActionTypes';\n\nexport const FileGenerateTemporaryUploadSecureUrlErrorTypeEnum = createErrorEnumForAction(FileActionType.GenerateTemporaryUploadSecureUrl, [\n  'ExpirationTooLong', // requested expiry exceeds max length of time possible\n  'InvalidScope', // scope is not a valid single path segment\n]);\n\nexport function* askFileGenerateTemporaryUploadSecureUrl(\n  drive: string,\n  filepath: string,\n  expirationMs: number,\n  advancedOptions?: {\n    contentType?: FileGenerateTemporaryUploadSecureUrlActionPayload['contentType'];\n    contentDisposition?: FileGenerateTemporaryUploadSecureUrlActionPayload['contentDisposition'];\n    // maxSizeBytes?: FileGenerateTemporaryUploadSecureUrlActionPayload['maxSizeBytes']\n  },\n  scope?: string,\n): FileGenerateTemporaryUploadSecureUrlActionRequester {\n  return yield {\n    type: FileActionType.GenerateTemporaryUploadSecureUrl,\n    payload: {\n      drive,\n      filepath,\n      expirationMs,\n      contentType: advancedOptions?.contentType,\n      contentDisposition: advancedOptions?.contentDisposition,\n      // maxSizeBytes: advancedOptions?.maxSizeBytes,\n      scope,\n    },\n  };\n}\n"]}

package/lib/commonjs/actions/file/FileGenerateTemporaryUploadSecureUrlActionTypes.d.ts

@@ -5,6 +5,7 @@ export interface FileGenerateTemporaryUploadSecureUrlActionPayload {
     filepath: string;
     expirationMs: number;
     contentType?: string;
+    contentDisposition?: string;
     scope?: string;
 }
 export interface FileGenerateTemporaryUploadSecureUrlAction extends Action<FileGenerateTemporaryUploadSecureUrlActionPayload> {

package/lib/commonjs/actions/file/FileGenerateTemporaryUploadSecureUrlActionTypes.js.map

@@ -1 +1 @@
-{"version":3,"file":"FileGenerateTemporaryUploadSecureUrlActionTypes.js","sourceRoot":"","sources":["../../../../src/actions/file/FileGenerateTemporaryUploadSecureUrlActionTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { Action, ActionProcessor, ActionRequester } from '../../types/Action';\nimport { FileActionType } from './FileActionType';\n\n// Payload\nexport interface FileGenerateTemporaryUploadSecureUrlActionPayload {\n  drive: string;\n  filepath: string;\n  expirationMs: number;\n  // maxSizeBytes?: number;\n  contentType?: string;\n  scope?: string;\n}\n\n// Action\nexport interface FileGenerateTemporaryUploadSecureUrlAction extends Action<FileGenerateTemporaryUploadSecureUrlActionPayload> {\n  type: FileActionType.GenerateTemporaryUploadSecureUrl;\n  payload: FileGenerateTemporaryUploadSecureUrlActionPayload;\n}\n\n// Function Types\nexport type FileGenerateTemporaryUploadSecureUrlActionProcessor = ActionProcessor<FileGenerateTemporaryUploadSecureUrlAction, string>;\nexport type FileGenerateTemporaryUploadSecureUrlActionRequester = ActionRequester<FileGenerateTemporaryUploadSecureUrlAction, string>;\n"]}
+{"version":3,"file":"FileGenerateTemporaryUploadSecureUrlActionTypes.js","sourceRoot":"","sources":["../../../../src/actions/file/FileGenerateTemporaryUploadSecureUrlActionTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { Action, ActionProcessor, ActionRequester } from '../../types/Action';\nimport { FileActionType } from './FileActionType';\n\n// Payload\nexport interface FileGenerateTemporaryUploadSecureUrlActionPayload {\n  drive: string;\n  filepath: string;\n  expirationMs: number;\n  // maxSizeBytes?: number;\n  contentType?: string;\n  // Content-Disposition to bake into the upload so the stored object serves with it (e.g. 'inline'\n  // so a PDF previews in an <iframe> instead of force-downloading). On S3 it is signed into the PUT\n  // (the client must send the matching header); the dev store persists it as sidecar metadata.\n  contentDisposition?: string;\n  scope?: string;\n}\n\n// Action\nexport interface FileGenerateTemporaryUploadSecureUrlAction extends Action<FileGenerateTemporaryUploadSecureUrlActionPayload> {\n  type: FileActionType.GenerateTemporaryUploadSecureUrl;\n  payload: FileGenerateTemporaryUploadSecureUrlActionPayload;\n}\n\n// Function Types\nexport type FileGenerateTemporaryUploadSecureUrlActionProcessor = ActionProcessor<FileGenerateTemporaryUploadSecureUrlAction, string>;\nexport type FileGenerateTemporaryUploadSecureUrlActionRequester = ActionRequester<FileGenerateTemporaryUploadSecureUrlAction, string>;\n"]}

package/lib/commonjs/actions/userDirectory/UserDirectoryActionType.d.ts

@@ -6,6 +6,8 @@ export declare enum UserDirectoryActionType {
     ForgotPassword = "@quidproquo-core/UserDirectory/ForgotPassword",
     ConfirmForgotPassword = "@quidproquo-core/UserDirectory/ConfirmForgotPassword",
     RefreshToken = "@quidproquo-core/UserDirectory/RefreshToken",
+    SignOutUser = "@quidproquo-core/UserDirectory/SignOutUser",
+    RevokeRefreshToken = "@quidproquo-core/UserDirectory/RevokeRefreshToken",
     RequestEmailVerification = "@quidproquo-core/UserDirectory/RequestEmailVerification",
     ConfirmEmailVerification = "@quidproquo-core/UserDirectory/ConfirmEmailVerification",
     ReadAccessToken = "@quidproquo-core/UserDirectory/ReadAccessToken",

package/lib/commonjs/actions/userDirectory/UserDirectoryActionType.js

@@ -8,6 +8,8 @@ var UserDirectoryActionType;
     UserDirectoryActionType["ForgotPassword"] = "@quidproquo-core/UserDirectory/ForgotPassword";
     UserDirectoryActionType["ConfirmForgotPassword"] = "@quidproquo-core/UserDirectory/ConfirmForgotPassword";
     UserDirectoryActionType["RefreshToken"] = "@quidproquo-core/UserDirectory/RefreshToken";
+    UserDirectoryActionType["SignOutUser"] = "@quidproquo-core/UserDirectory/SignOutUser";
+    UserDirectoryActionType["RevokeRefreshToken"] = "@quidproquo-core/UserDirectory/RevokeRefreshToken";
     UserDirectoryActionType["RequestEmailVerification"] = "@quidproquo-core/UserDirectory/RequestEmailVerification";
     UserDirectoryActionType["ConfirmEmailVerification"] = "@quidproquo-core/UserDirectory/ConfirmEmailVerification";
     UserDirectoryActionType["ReadAccessToken"] = "@quidproquo-core/UserDirectory/ReadAccessToken";

package/lib/commonjs/actions/userDirectory/UserDirectoryActionType.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserDirectoryActionType.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/UserDirectoryActionType.ts"],"names":[],"mappings":";;;AAGA,IAAY,uBAoBX;AApBD,WAAY,uBAAuB;IACjC,mFAAwD,CAAA;IACxD,+FAAoE,CAAA;IACpE,2FAAgE,CAAA;IAChE,yGAA8E,CAAA;IAC9E,uFAA4D,CAAA;IAC5D,+GAAoF,CAAA;IACpF,+GAAoF,CAAA;IACpF,6FAAkE,CAAA;IAClE,2FAAgE,CAAA;IAChE,iGAAsE,CAAA;IACtE,2GAAgF,CAAA;IAChF,2GAAgF,CAAA;IAChF,iGAAsE,CAAA;IACtE,iHAAsF,CAAA;IACtF,iGAAsE,CAAA;IACtE,2FAAgE,CAAA;IAChE,qFAA0D,CAAA;IAC1D,+EAAoD,CAAA;IACpD,qGAA0E,CAAA;AAC5E,CAAC,EApBW,uBAAuB,uCAAvB,uBAAuB,QAoBlC","sourcesContent":["import { QpqIsoDateTime } from '../../types/QpqIsoDateTime';\nimport { AuthenticateUserChallenge } from './types';\n\nexport enum UserDirectoryActionType {\n  CreateUser = '@quidproquo-core/UserDirectory/CreateUser',\n  AuthenticateUser = '@quidproquo-core/UserDirectory/AuthenticateUser',\n  ForgotPassword = '@quidproquo-core/UserDirectory/ForgotPassword',\n  ConfirmForgotPassword = '@quidproquo-core/UserDirectory/ConfirmForgotPassword',\n  RefreshToken = '@quidproquo-core/UserDirectory/RefreshToken',\n  RequestEmailVerification = '@quidproquo-core/UserDirectory/RequestEmailVerification',\n  ConfirmEmailVerification = '@quidproquo-core/UserDirectory/ConfirmEmailVerification',\n  ReadAccessToken = '@quidproquo-core/UserDirectory/ReadAccessToken',\n  SetAccessToken = '@quidproquo-core/UserDirectory/SetAccessToken',\n  DecodeAccessToken = '@quidproquo-core/UserDirectory/DecodeAccessToken',\n  RespondToAuthChallenge = '@quidproquo-core/UserDirectory/RespondToAuthChallenge',\n  AssociateSoftwareToken = '@quidproquo-core/UserDirectory/AssociateSoftwareToken',\n  GetUserAttributes = '@quidproquo-core/UserDirectory/GetUserAttributes',\n  GetUserAttributesByUserId = '@quidproquo-core/UserDirectory/GetUserAttributesByUserId',\n  SetUserAttributes = '@quidproquo-core/UserDirectory/SetUserAttributes',\n  ChangePassword = '@quidproquo-core/UserDirectory/ChangePassword',\n  SetPassword = '@quidproquo-core/UserDirectory/SetPassword',\n  GetUsers = '@quidproquo-core/UserDirectory/GetUsers',\n  GetUsersByAttribute = '@quidproquo-core/UserDirectory/GetUsersByAttribute',\n}\n\nexport interface AuthenticationInfo {\n  accessToken?: string;\n  expirationDurationInSeconds?: number;\n  expiresAt?: QpqIsoDateTime;\n  idToken?: string;\n  refreshToken?: string;\n  tokenType?: string;\n}\n\nexport interface AuthenticationDeliveryDetails {\n  attributeName: string;\n  deliveryMedium: 'EMAIL' | 'SMS';\n  destination: string;\n}\n\nexport interface AuthenticateUserResponse {\n  challenge: AuthenticateUserChallenge;\n  challengeParameters?: Record<string, string>;\n  session?: string;\n\n  authenticationInfo?: AuthenticationInfo;\n}\n\nexport interface UserAttributes {\n  /** The user's email address */\n  email?: string;\n  /** Indicates whether the user's email address has been verified */\n  emailVerified?: boolean;\n  /** The user's unique identifier */\n  userId?: string;\n  /** The user's postal address */\n  address?: string;\n  /** The user's date of birth (YYYY-MM-DD format) */\n  birthDate?: string;\n  /** The user's last name or surname */\n  familyName?: string;\n  /** The user's gender (e.g., \"male\", \"female\", \"other\") */\n  gender?: string;\n  /** The user's first name or given name */\n  givenName?: string;\n  /** The user's preferred locale (e.g., \"en-US\", \"fr-FR\") */\n  locale?: string;\n  /** The user's middle name */\n  middleName?: string;\n  /** The user's full name */\n  name?: string;\n  /** The user's nickname or alias */\n  nickname?: string;\n  /** The user's phone number (in E.164 format, e.g., \"+1-555-123-4567\") */\n  phoneNumber?: string;\n  /** The URL of the user's profile picture */\n  picture?: string;\n  /** The user's preferred username, if different from the given name */\n  preferredUsername?: string;\n  /** The URL of the user's profile page */\n  profile?: string;\n  /** The URL of the user's personal website or blog */\n  website?: string;\n  /** The user's timezone (e.g., \"America/Los_Angeles\", \"Europe/London\") */\n  zoneInfo?: string;\n}\n"]}
+{"version":3,"file":"UserDirectoryActionType.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/UserDirectoryActionType.ts"],"names":[],"mappings":";;;AAGA,IAAY,uBAsBX;AAtBD,WAAY,uBAAuB;IACjC,mFAAwD,CAAA;IACxD,+FAAoE,CAAA;IACpE,2FAAgE,CAAA;IAChE,yGAA8E,CAAA;IAC9E,uFAA4D,CAAA;IAC5D,qFAA0D,CAAA;IAC1D,mGAAwE,CAAA;IACxE,+GAAoF,CAAA;IACpF,+GAAoF,CAAA;IACpF,6FAAkE,CAAA;IAClE,2FAAgE,CAAA;IAChE,iGAAsE,CAAA;IACtE,2GAAgF,CAAA;IAChF,2GAAgF,CAAA;IAChF,iGAAsE,CAAA;IACtE,iHAAsF,CAAA;IACtF,iGAAsE,CAAA;IACtE,2FAAgE,CAAA;IAChE,qFAA0D,CAAA;IAC1D,+EAAoD,CAAA;IACpD,qGAA0E,CAAA;AAC5E,CAAC,EAtBW,uBAAuB,uCAAvB,uBAAuB,QAsBlC","sourcesContent":["import { QpqIsoDateTime } from '../../types/QpqIsoDateTime';\nimport { AuthenticateUserChallenge } from './types';\n\nexport enum UserDirectoryActionType {\n  CreateUser = '@quidproquo-core/UserDirectory/CreateUser',\n  AuthenticateUser = '@quidproquo-core/UserDirectory/AuthenticateUser',\n  ForgotPassword = '@quidproquo-core/UserDirectory/ForgotPassword',\n  ConfirmForgotPassword = '@quidproquo-core/UserDirectory/ConfirmForgotPassword',\n  RefreshToken = '@quidproquo-core/UserDirectory/RefreshToken',\n  SignOutUser = '@quidproquo-core/UserDirectory/SignOutUser',\n  RevokeRefreshToken = '@quidproquo-core/UserDirectory/RevokeRefreshToken',\n  RequestEmailVerification = '@quidproquo-core/UserDirectory/RequestEmailVerification',\n  ConfirmEmailVerification = '@quidproquo-core/UserDirectory/ConfirmEmailVerification',\n  ReadAccessToken = '@quidproquo-core/UserDirectory/ReadAccessToken',\n  SetAccessToken = '@quidproquo-core/UserDirectory/SetAccessToken',\n  DecodeAccessToken = '@quidproquo-core/UserDirectory/DecodeAccessToken',\n  RespondToAuthChallenge = '@quidproquo-core/UserDirectory/RespondToAuthChallenge',\n  AssociateSoftwareToken = '@quidproquo-core/UserDirectory/AssociateSoftwareToken',\n  GetUserAttributes = '@quidproquo-core/UserDirectory/GetUserAttributes',\n  GetUserAttributesByUserId = '@quidproquo-core/UserDirectory/GetUserAttributesByUserId',\n  SetUserAttributes = '@quidproquo-core/UserDirectory/SetUserAttributes',\n  ChangePassword = '@quidproquo-core/UserDirectory/ChangePassword',\n  SetPassword = '@quidproquo-core/UserDirectory/SetPassword',\n  GetUsers = '@quidproquo-core/UserDirectory/GetUsers',\n  GetUsersByAttribute = '@quidproquo-core/UserDirectory/GetUsersByAttribute',\n}\n\nexport interface AuthenticationInfo {\n  accessToken?: string;\n  expirationDurationInSeconds?: number;\n  expiresAt?: QpqIsoDateTime;\n  idToken?: string;\n  refreshToken?: string;\n  tokenType?: string;\n}\n\nexport interface AuthenticationDeliveryDetails {\n  attributeName: string;\n  deliveryMedium: 'EMAIL' | 'SMS';\n  destination: string;\n}\n\nexport interface AuthenticateUserResponse {\n  challenge: AuthenticateUserChallenge;\n  challengeParameters?: Record<string, string>;\n  session?: string;\n\n  authenticationInfo?: AuthenticationInfo;\n}\n\nexport interface UserAttributes {\n  /** The user's email address */\n  email?: string;\n  /** Indicates whether the user's email address has been verified */\n  emailVerified?: boolean;\n  /** The user's unique identifier */\n  userId?: string;\n  /** The user's postal address */\n  address?: string;\n  /** The user's date of birth (YYYY-MM-DD format) */\n  birthDate?: string;\n  /** The user's last name or surname */\n  familyName?: string;\n  /** The user's gender (e.g., \"male\", \"female\", \"other\") */\n  gender?: string;\n  /** The user's first name or given name */\n  givenName?: string;\n  /** The user's preferred locale (e.g., \"en-US\", \"fr-FR\") */\n  locale?: string;\n  /** The user's middle name */\n  middleName?: string;\n  /** The user's full name */\n  name?: string;\n  /** The user's nickname or alias */\n  nickname?: string;\n  /** The user's phone number (in E.164 format, e.g., \"+1-555-123-4567\") */\n  phoneNumber?: string;\n  /** The URL of the user's profile picture */\n  picture?: string;\n  /** The user's preferred username, if different from the given name */\n  preferredUsername?: string;\n  /** The URL of the user's profile page */\n  profile?: string;\n  /** The URL of the user's personal website or blog */\n  website?: string;\n  /** The user's timezone (e.g., \"America/Los_Angeles\", \"Europe/London\") */\n  zoneInfo?: string;\n}\n"]}

package/lib/commonjs/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionRequester.d.ts

@@ -0,0 +1,6 @@
+import { UserDirectoryRevokeRefreshTokenActionRequester } from './UserDirectoryRevokeRefreshTokenActionTypes';
+export declare const UserDirectoryRevokeRefreshTokenErrorTypeEnum: {
+    Unauthorized: string;
+    LimitExceeded: string;
+};
+export declare function askUserDirectoryRevokeRefreshToken(userDirectoryName: string, refreshToken: string): UserDirectoryRevokeRefreshTokenActionRequester;

package/lib/commonjs/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionRequester.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserDirectoryRevokeRefreshTokenErrorTypeEnum = void 0;
+exports.askUserDirectoryRevokeRefreshToken = askUserDirectoryRevokeRefreshToken;
+const types_1 = require("../../types");
+const UserDirectoryActionType_1 = require("./UserDirectoryActionType");
+exports.UserDirectoryRevokeRefreshTokenErrorTypeEnum = (0, types_1.createErrorEnumForAction)(UserDirectoryActionType_1.UserDirectoryActionType.RevokeRefreshToken, [
+    'Unauthorized', // the refresh token is invalid/already revoked, or revocation is disabled on the app client
+    'LimitExceeded', // too many attempts; the caller should back off and retry later
+]);
+// Revokes a SINGLE refresh token (and every access token minted from it) — the "log out
+// this device" primitive. Unlike SignOutUser (which revokes all of a user's sessions), this
+// targets exactly the session that holds this refresh token, so other devices stay signed in.
+function* askUserDirectoryRevokeRefreshToken(userDirectoryName, refreshToken) {
+    return yield {
+        type: UserDirectoryActionType_1.UserDirectoryActionType.RevokeRefreshToken,
+        payload: {
+            userDirectoryName,
+            refreshToken,
+        },
+    };
+}
+//# sourceMappingURL=UserDirectoryRevokeRefreshTokenActionRequester.js.map

package/lib/commonjs/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionRequester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserDirectoryRevokeRefreshTokenActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionRequester.ts"],"names":[],"mappings":";;;AAYA,gFASC;AArBD,uCAAuD;AACvD,uEAAoE;AAGvD,QAAA,4CAA4C,GAAG,IAAA,gCAAwB,EAAC,iDAAuB,CAAC,kBAAkB,EAAE;IAC/H,cAAc,EAAE,4FAA4F;IAC5G,eAAe,EAAE,gEAAgE;CAClF,CAAC,CAAC;AAEH,wFAAwF;AACxF,4FAA4F;AAC5F,8FAA8F;AAC9F,QAAe,CAAC,CAAC,kCAAkC,CAAC,iBAAyB,EAAE,YAAoB;IACjG,OAAO,MAAM;QACX,IAAI,EAAE,iDAAuB,CAAC,kBAAkB;QAChD,OAAO,EAAE;YACP,iBAAiB;YAEjB,YAAY;SACb;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createErrorEnumForAction } from '../../types';\nimport { UserDirectoryActionType } from './UserDirectoryActionType';\nimport { UserDirectoryRevokeRefreshTokenActionRequester } from './UserDirectoryRevokeRefreshTokenActionTypes';\n\nexport const UserDirectoryRevokeRefreshTokenErrorTypeEnum = createErrorEnumForAction(UserDirectoryActionType.RevokeRefreshToken, [\n  'Unauthorized', // the refresh token is invalid/already revoked, or revocation is disabled on the app client\n  'LimitExceeded', // too many attempts; the caller should back off and retry later\n]);\n\n// Revokes a SINGLE refresh token (and every access token minted from it) — the \"log out\n// this device\" primitive. Unlike SignOutUser (which revokes all of a user's sessions), this\n// targets exactly the session that holds this refresh token, so other devices stay signed in.\nexport function* askUserDirectoryRevokeRefreshToken(userDirectoryName: string, refreshToken: string): UserDirectoryRevokeRefreshTokenActionRequester {\n  return yield {\n    type: UserDirectoryActionType.RevokeRefreshToken,\n    payload: {\n      userDirectoryName,\n\n      refreshToken,\n    },\n  };\n}\n"]}

package/lib/commonjs/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionTypes.d.ts

@@ -0,0 +1,12 @@
+import { Action, ActionProcessor, ActionRequester } from '../../types/Action';
+import { UserDirectoryActionType } from './UserDirectoryActionType';
+export interface UserDirectoryRevokeRefreshTokenActionPayload {
+    userDirectoryName: string;
+    refreshToken: string;
+}
+export interface UserDirectoryRevokeRefreshTokenAction extends Action<UserDirectoryRevokeRefreshTokenActionPayload> {
+    type: UserDirectoryActionType.RevokeRefreshToken;
+    payload: UserDirectoryRevokeRefreshTokenActionPayload;
+}
+export type UserDirectoryRevokeRefreshTokenActionProcessor = ActionProcessor<UserDirectoryRevokeRefreshTokenAction, void>;
+export type UserDirectoryRevokeRefreshTokenActionRequester = ActionRequester<UserDirectoryRevokeRefreshTokenAction, void>;

package/lib/commonjs/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionTypes.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=UserDirectoryRevokeRefreshTokenActionTypes.js.map

package/lib/commonjs/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserDirectoryRevokeRefreshTokenActionTypes.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { Action, ActionProcessor, ActionRequester } from '../../types/Action';\nimport { UserDirectoryActionType } from './UserDirectoryActionType';\n\n// Payload\nexport interface UserDirectoryRevokeRefreshTokenActionPayload {\n  userDirectoryName: string;\n\n  refreshToken: string;\n}\n\n// Action\nexport interface UserDirectoryRevokeRefreshTokenAction extends Action<UserDirectoryRevokeRefreshTokenActionPayload> {\n  type: UserDirectoryActionType.RevokeRefreshToken;\n  payload: UserDirectoryRevokeRefreshTokenActionPayload;\n}\n\n// Function Types\nexport type UserDirectoryRevokeRefreshTokenActionProcessor = ActionProcessor<UserDirectoryRevokeRefreshTokenAction, void>;\nexport type UserDirectoryRevokeRefreshTokenActionRequester = ActionRequester<UserDirectoryRevokeRefreshTokenAction, void>;\n"]}

package/lib/commonjs/actions/userDirectory/UserDirectorySignOutUserActionRequester.d.ts

@@ -0,0 +1,6 @@
+import { UserDirectorySignOutUserActionRequester } from './UserDirectorySignOutUserActionTypes';
+export declare const UserDirectorySignOutUserErrorTypeEnum: {
+    Unauthorized: string;
+    LimitExceeded: string;
+};
+export declare function askUserDirectorySignOutUser(accessToken: string): UserDirectorySignOutUserActionRequester;

package/lib/commonjs/actions/userDirectory/UserDirectorySignOutUserActionRequester.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserDirectorySignOutUserErrorTypeEnum = void 0;
+exports.askUserDirectorySignOutUser = askUserDirectorySignOutUser;
+const types_1 = require("../../types");
+const UserDirectoryActionType_1 = require("./UserDirectoryActionType");
+exports.UserDirectorySignOutUserErrorTypeEnum = (0, types_1.createErrorEnumForAction)(UserDirectoryActionType_1.UserDirectoryActionType.SignOutUser, [
+    'Unauthorized', // the access token is missing/invalid/expired — there is nothing to revoke
+    'LimitExceeded', // too many attempts; the caller should back off and retry later
+]);
+// Globally signs the user out: revokes EVERY refresh token issued to the owner of this
+// access token, so a stolen/persisted refresh token stops working (logout / compromise
+// response). Access tokens already minted remain valid until they expire (stateless JWTs),
+// so keep the access-token validity short.
+function* askUserDirectorySignOutUser(accessToken) {
+    return yield {
+        type: UserDirectoryActionType_1.UserDirectoryActionType.SignOutUser,
+        payload: {
+            accessToken,
+        },
+    };
+}
+//# sourceMappingURL=UserDirectorySignOutUserActionRequester.js.map

package/lib/commonjs/actions/userDirectory/UserDirectorySignOutUserActionRequester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserDirectorySignOutUserActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/UserDirectorySignOutUserActionRequester.ts"],"names":[],"mappings":";;;AAaA,kEAOC;AApBD,uCAAuD;AACvD,uEAAoE;AAGvD,QAAA,qCAAqC,GAAG,IAAA,gCAAwB,EAAC,iDAAuB,CAAC,WAAW,EAAE;IACjH,cAAc,EAAE,2EAA2E;IAC3F,eAAe,EAAE,gEAAgE;CAClF,CAAC,CAAC;AAEH,uFAAuF;AACvF,uFAAuF;AACvF,2FAA2F;AAC3F,2CAA2C;AAC3C,QAAe,CAAC,CAAC,2BAA2B,CAAC,WAAmB;IAC9D,OAAO,MAAM;QACX,IAAI,EAAE,iDAAuB,CAAC,WAAW;QACzC,OAAO,EAAE;YACP,WAAW;SACZ;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createErrorEnumForAction } from '../../types';\nimport { UserDirectoryActionType } from './UserDirectoryActionType';\nimport { UserDirectorySignOutUserActionRequester } from './UserDirectorySignOutUserActionTypes';\n\nexport const UserDirectorySignOutUserErrorTypeEnum = createErrorEnumForAction(UserDirectoryActionType.SignOutUser, [\n  'Unauthorized', // the access token is missing/invalid/expired — there is nothing to revoke\n  'LimitExceeded', // too many attempts; the caller should back off and retry later\n]);\n\n// Globally signs the user out: revokes EVERY refresh token issued to the owner of this\n// access token, so a stolen/persisted refresh token stops working (logout / compromise\n// response). Access tokens already minted remain valid until they expire (stateless JWTs),\n// so keep the access-token validity short.\nexport function* askUserDirectorySignOutUser(accessToken: string): UserDirectorySignOutUserActionRequester {\n  return yield {\n    type: UserDirectoryActionType.SignOutUser,\n    payload: {\n      accessToken,\n    },\n  };\n}\n"]}

package/lib/commonjs/actions/userDirectory/UserDirectorySignOutUserActionTypes.d.ts

@@ -0,0 +1,11 @@
+import { Action, ActionProcessor, ActionRequester } from '../../types/Action';
+import { UserDirectoryActionType } from './UserDirectoryActionType';
+export interface UserDirectorySignOutUserActionPayload {
+    accessToken: string;
+}
+export interface UserDirectorySignOutUserAction extends Action<UserDirectorySignOutUserActionPayload> {
+    type: UserDirectoryActionType.SignOutUser;
+    payload: UserDirectorySignOutUserActionPayload;
+}
+export type UserDirectorySignOutUserActionProcessor = ActionProcessor<UserDirectorySignOutUserAction, void>;
+export type UserDirectorySignOutUserActionRequester = ActionRequester<UserDirectorySignOutUserAction, void>;

package/lib/commonjs/actions/userDirectory/UserDirectorySignOutUserActionTypes.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=UserDirectorySignOutUserActionTypes.js.map

package/lib/commonjs/actions/userDirectory/UserDirectorySignOutUserActionTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserDirectorySignOutUserActionTypes.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/UserDirectorySignOutUserActionTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { Action, ActionProcessor, ActionRequester } from '../../types/Action';\nimport { UserDirectoryActionType } from './UserDirectoryActionType';\n\n// Payload\nexport interface UserDirectorySignOutUserActionPayload {\n  accessToken: string;\n}\n\n// Action\nexport interface UserDirectorySignOutUserAction extends Action<UserDirectorySignOutUserActionPayload> {\n  type: UserDirectoryActionType.SignOutUser;\n  payload: UserDirectorySignOutUserActionPayload;\n}\n\n// Function Types\nexport type UserDirectorySignOutUserActionProcessor = ActionProcessor<UserDirectorySignOutUserAction, void>;\nexport type UserDirectorySignOutUserActionRequester = ActionRequester<UserDirectorySignOutUserAction, void>;\n"]}

package/lib/commonjs/actions/userDirectory/index.d.ts

@@ -32,9 +32,13 @@ export * from './UserDirectoryRequestEmailVerificationActionRequester';
 export * from './UserDirectoryRequestEmailVerificationActionTypes';
 export * from './UserDirectoryRespondToAuthChallengeActionRequester';
 export * from './UserDirectoryRespondToAuthChallengeActionTypes';
+export * from './UserDirectoryRevokeRefreshTokenActionRequester';
+export * from './UserDirectoryRevokeRefreshTokenActionTypes';
 export * from './UserDirectorySetAccessTokenActionRequester';
 export * from './UserDirectorySetAccessTokenActionTypes';
 export * from './UserDirectorySetPasswordActionRequester';
 export * from './UserDirectorySetPasswordActionTypes';
 export * from './UserDirectorySetUserAttributesActionRequester';
 export * from './UserDirectorySetUserAttributesActionTypes';
+export * from './UserDirectorySignOutUserActionRequester';
+export * from './UserDirectorySignOutUserActionTypes';

package/lib/commonjs/actions/userDirectory/index.js

@@ -48,10 +48,14 @@ __exportStar(require("./UserDirectoryRequestEmailVerificationActionRequester"),
 __exportStar(require("./UserDirectoryRequestEmailVerificationActionTypes"), exports);
 __exportStar(require("./UserDirectoryRespondToAuthChallengeActionRequester"), exports);
 __exportStar(require("./UserDirectoryRespondToAuthChallengeActionTypes"), exports);
+__exportStar(require("./UserDirectoryRevokeRefreshTokenActionRequester"), exports);
+__exportStar(require("./UserDirectoryRevokeRefreshTokenActionTypes"), exports);
 __exportStar(require("./UserDirectorySetAccessTokenActionRequester"), exports);
 __exportStar(require("./UserDirectorySetAccessTokenActionTypes"), exports);
 __exportStar(require("./UserDirectorySetPasswordActionRequester"), exports);
 __exportStar(require("./UserDirectorySetPasswordActionTypes"), exports);
 __exportStar(require("./UserDirectorySetUserAttributesActionRequester"), exports);
 __exportStar(require("./UserDirectorySetUserAttributesActionTypes"), exports);
+__exportStar(require("./UserDirectorySignOutUserActionRequester"), exports);
+__exportStar(require("./UserDirectorySignOutUserActionTypes"), exports);
 //# sourceMappingURL=index.js.map

package/lib/commonjs/actions/userDirectory/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,4DAA0C;AAC1C,uFAAqE;AACrE,mFAAiE;AACjE,iFAA+D;AAC/D,6EAA2D;AAC3D,+EAA6D;AAC7D,2EAAyD;AACzD,yFAAuE;AACvE,qFAAmE;AACnE,sFAAoE;AACpE,kFAAgE;AAChE,2EAAyD;AACzD,uEAAqD;AACrD,kFAAgE;AAChE,8EAA4D;AAC5D,+EAA6D;AAC7D,2EAAyD;AACzD,kFAAgE;AAChE,8EAA4D;AAC5D,0FAAwE;AACxE,sFAAoE;AACpE,yEAAuD;AACvD,qEAAmD;AACnD,oFAAkE;AAClE,gFAA8D;AAC9D,gFAA8D;AAC9D,4EAA0D;AAC1D,6EAA2D;AAC3D,yEAAuD;AACvD,yFAAuE;AACvE,qFAAmE;AACnE,uFAAqE;AACrE,mFAAiE;AACjE,+EAA6D;AAC7D,2EAAyD;AACzD,4EAA0D;AAC1D,wEAAsD;AACtD,kFAAgE;AAChE,8EAA4D","sourcesContent":["export * from './types';\nexport * from './UserDirectoryActionType';\nexport * from './UserDirectoryAssociateSoftwareTokenActionRequester';\nexport * from './UserDirectoryAssociateSoftwareTokenActionTypes';\nexport * from './UserDirectoryAuthenticateUserActionRequester';\nexport * from './UserDirectoryAuthenticateUserActionTypes';\nexport * from './UserDirectoryChangePasswordActionRequester';\nexport * from './UserDirectoryChangePasswordActionTypes';\nexport * from './UserDirectoryConfirmEmailVerificationActionRequester';\nexport * from './UserDirectoryConfirmEmailVerificationActionTypes';\nexport * from './UserDirectoryConfirmForgotPasswordActionRequester';\nexport * from './UserDirectoryConfirmForgotPasswordActionTypes';\nexport * from './UserDirectoryCreateUserActionRequester';\nexport * from './UserDirectoryCreateUserActionTypes';\nexport * from './UserDirectoryDecodeAccessTokenActionRequester';\nexport * from './UserDirectoryDecodeAccessTokenActionTypes';\nexport * from './UserDirectoryForgotPasswordActionRequester';\nexport * from './UserDirectoryForgotPasswordActionTypes';\nexport * from './UserDirectoryGetUserAttributesActionRequester';\nexport * from './UserDirectoryGetUserAttributesActionTypes';\nexport * from './UserDirectoryGetUserAttributesByUserIdActionRequester';\nexport * from './UserDirectoryGetUserAttributesByUserIdActionTypes';\nexport * from './UserDirectoryGetUsersActionRequester';\nexport * from './UserDirectoryGetUsersActionTypes';\nexport * from './UserDirectoryGetUsersByAttributeActionRequester';\nexport * from './UserDirectoryGetUsersByAttributeActionTypes';\nexport * from './UserDirectoryReadAccessTokenActionRequester';\nexport * from './UserDirectoryReadAccessTokenActionTypes';\nexport * from './UserDirectoryRefreshTokenActionRequester';\nexport * from './UserDirectoryRefreshTokenActionTypes';\nexport * from './UserDirectoryRequestEmailVerificationActionRequester';\nexport * from './UserDirectoryRequestEmailVerificationActionTypes';\nexport * from './UserDirectoryRespondToAuthChallengeActionRequester';\nexport * from './UserDirectoryRespondToAuthChallengeActionTypes';\nexport * from './UserDirectorySetAccessTokenActionRequester';\nexport * from './UserDirectorySetAccessTokenActionTypes';\nexport * from './UserDirectorySetPasswordActionRequester';\nexport * from './UserDirectorySetPasswordActionTypes';\nexport * from './UserDirectorySetUserAttributesActionRequester';\nexport * from './UserDirectorySetUserAttributesActionTypes';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,4DAA0C;AAC1C,uFAAqE;AACrE,mFAAiE;AACjE,iFAA+D;AAC/D,6EAA2D;AAC3D,+EAA6D;AAC7D,2EAAyD;AACzD,yFAAuE;AACvE,qFAAmE;AACnE,sFAAoE;AACpE,kFAAgE;AAChE,2EAAyD;AACzD,uEAAqD;AACrD,kFAAgE;AAChE,8EAA4D;AAC5D,+EAA6D;AAC7D,2EAAyD;AACzD,kFAAgE;AAChE,8EAA4D;AAC5D,0FAAwE;AACxE,sFAAoE;AACpE,yEAAuD;AACvD,qEAAmD;AACnD,oFAAkE;AAClE,gFAA8D;AAC9D,gFAA8D;AAC9D,4EAA0D;AAC1D,6EAA2D;AAC3D,yEAAuD;AACvD,yFAAuE;AACvE,qFAAmE;AACnE,uFAAqE;AACrE,mFAAiE;AACjE,mFAAiE;AACjE,+EAA6D;AAC7D,+EAA6D;AAC7D,2EAAyD;AACzD,4EAA0D;AAC1D,wEAAsD;AACtD,kFAAgE;AAChE,8EAA4D;AAC5D,4EAA0D;AAC1D,wEAAsD","sourcesContent":["export * from './types';\nexport * from './UserDirectoryActionType';\nexport * from './UserDirectoryAssociateSoftwareTokenActionRequester';\nexport * from './UserDirectoryAssociateSoftwareTokenActionTypes';\nexport * from './UserDirectoryAuthenticateUserActionRequester';\nexport * from './UserDirectoryAuthenticateUserActionTypes';\nexport * from './UserDirectoryChangePasswordActionRequester';\nexport * from './UserDirectoryChangePasswordActionTypes';\nexport * from './UserDirectoryConfirmEmailVerificationActionRequester';\nexport * from './UserDirectoryConfirmEmailVerificationActionTypes';\nexport * from './UserDirectoryConfirmForgotPasswordActionRequester';\nexport * from './UserDirectoryConfirmForgotPasswordActionTypes';\nexport * from './UserDirectoryCreateUserActionRequester';\nexport * from './UserDirectoryCreateUserActionTypes';\nexport * from './UserDirectoryDecodeAccessTokenActionRequester';\nexport * from './UserDirectoryDecodeAccessTokenActionTypes';\nexport * from './UserDirectoryForgotPasswordActionRequester';\nexport * from './UserDirectoryForgotPasswordActionTypes';\nexport * from './UserDirectoryGetUserAttributesActionRequester';\nexport * from './UserDirectoryGetUserAttributesActionTypes';\nexport * from './UserDirectoryGetUserAttributesByUserIdActionRequester';\nexport * from './UserDirectoryGetUserAttributesByUserIdActionTypes';\nexport * from './UserDirectoryGetUsersActionRequester';\nexport * from './UserDirectoryGetUsersActionTypes';\nexport * from './UserDirectoryGetUsersByAttributeActionRequester';\nexport * from './UserDirectoryGetUsersByAttributeActionTypes';\nexport * from './UserDirectoryReadAccessTokenActionRequester';\nexport * from './UserDirectoryReadAccessTokenActionTypes';\nexport * from './UserDirectoryRefreshTokenActionRequester';\nexport * from './UserDirectoryRefreshTokenActionTypes';\nexport * from './UserDirectoryRequestEmailVerificationActionRequester';\nexport * from './UserDirectoryRequestEmailVerificationActionTypes';\nexport * from './UserDirectoryRespondToAuthChallengeActionRequester';\nexport * from './UserDirectoryRespondToAuthChallengeActionTypes';\nexport * from './UserDirectoryRevokeRefreshTokenActionRequester';\nexport * from './UserDirectoryRevokeRefreshTokenActionTypes';\nexport * from './UserDirectorySetAccessTokenActionRequester';\nexport * from './UserDirectorySetAccessTokenActionTypes';\nexport * from './UserDirectorySetPasswordActionRequester';\nexport * from './UserDirectorySetPasswordActionTypes';\nexport * from './UserDirectorySetUserAttributesActionRequester';\nexport * from './UserDirectorySetUserAttributesActionTypes';\nexport * from './UserDirectorySignOutUserActionRequester';\nexport * from './UserDirectorySignOutUserActionTypes';\n"]}

package/lib/commonjs/config/settings/userDirectory.d.ts

@@ -25,6 +25,7 @@ export interface QPQConfigAdvancedUserDirectorySettings extends QPQConfigAdvance
     dnsRecord?: AuthDirectoryDnsRecord;
     customAuthRuntime?: CustomAuthRuntime;
     mfa?: UserDirectoryMfaSettings;
+    accessTokenValidityMinutes?: number;
 }
 export interface UserDirectoryQPQConfigSetting extends QPQConfigSetting {
     name: string;
@@ -35,5 +36,6 @@ export interface UserDirectoryQPQConfigSetting extends QPQConfigSetting {
     dnsRecord?: AuthDirectoryDnsRecord;
     customAuthRuntime?: CustomAuthRuntime;
     mfa: UserDirectoryMfaSettings;
+    accessTokenValidityMinutes?: number;
 }
 export declare const defineUserDirectory: (name: string, options?: QPQConfigAdvancedUserDirectorySettings) => UserDirectoryQPQConfigSetting;

package/lib/commonjs/config/settings/userDirectory.js

@@ -29,6 +29,7 @@ const defineUserDirectory = (name, options) => {
         },
         dnsRecord: options === null || options === void 0 ? void 0 : options.dnsRecord,
         customAuthRuntime: options === null || options === void 0 ? void 0 : options.customAuthRuntime,
+        accessTokenValidityMinutes: options === null || options === void 0 ? void 0 : options.accessTokenValidityMinutes,
         mfa: {
             mode: (_f = (_e = options === null || options === void 0 ? void 0 : options.mfa) === null || _e === void 0 ? void 0 : _e.mode) !== null && _f !== void 0 ? _f : UserDirectoryMfaMode.off,
             secondFactors: ((_h = (_g = options === null || options === void 0 ? void 0 : options.mfa) === null || _g === void 0 ? void 0 : _g.secondFactors) === null || _h === void 0 ? void 0 : _h.length) ? options.mfa.secondFactors : [UserDirectoryMfaSecondFactor.totp],

package/lib/commonjs/config/settings/userDirectory.js.map

@@ -1 +1 @@
-{"version":3,"file":"userDirectory.js","sourceRoot":"","sources":["../../../../src/config/settings/userDirectory.ts"],"names":[],"mappings":";;;AACA,4CAAqG;AACrG,gEAAiG;AAQjG,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,mCAAW,CAAA;IACX,6CAAqB,CAAA;IACrB,6CAAqB,CAAA;AACvB,CAAC,EAJW,oBAAoB,oCAApB,oBAAoB,QAI/B;AAED,IAAY,4BAGX;AAHD,WAAY,4BAA4B;IACtC,6CAAa,CAAA;IACb,sEAAsE;AACxE,CAAC,EAHW,4BAA4B,4CAA5B,4BAA4B,QAGvC;AA2CM,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAE,OAAgD,EAAiC,EAAE;;IAAC,OAAA,CAAC;QACrI,iBAAiB,EAAE,oCAAwB,CAAC,aAAa;QACzD,SAAS,EAAE,IAAI;QAEf,IAAI;QAEJ,aAAa,EAAE,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa,KAAI,KAAK;QAE9C,iBAAiB,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,iBAAiB,mCAAI,KAAK;QAEtD,cAAc,EAAE;YACd,WAAW,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,WAAW;YACjD,aAAa,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,aAAa;YACrD,kBAAkB,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,kBAAkB;SAChE;QAED,SAAS,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS;QAC7B,iBAAiB,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,iBAAiB;QAE7C,GAAG,EAAE;YACH,IAAI,EAAE,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,IAAI,mCAAI,oBAAoB,CAAC,GAAG;YACpD,aAAa,EAAE,CAAA,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,aAAa,0CAAE,MAAM,EAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,IAAI,CAAC;SACrH;QAED,KAAK,EAAE,IAAA,uEAAoD,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAC;KAC5E,CAAC,CAAA;CAAA,CAAC;AAzBU,QAAA,mBAAmB,uBAyB7B","sourcesContent":["import { CrossModuleOwner } from '../../types';\nimport { QPQConfigAdvancedSettings, QPQConfigSetting, QPQCoreConfigSettingType } from '../QPQConfig';\nimport { convertCrossModuleOwnerToGenericResourceNameOverride } from '../utils/crossModuleUtils';\nimport { CustomAuthRuntime, EmailTemplates } from './emailTemplates';\n\nexport type AuthDirectoryDnsRecord = {\n  subdomain: string;\n  rootDomain: string;\n};\n\nexport enum UserDirectoryMfaMode {\n  off = 'off',\n  optional = 'optional',\n  required = 'required',\n}\n\nexport enum UserDirectoryMfaSecondFactor {\n  totp = 'totp',\n  // sms = 'sms', // future — additionally needs phone + SNS role infra.\n}\n\nexport interface UserDirectoryMfaSettings {\n  mode: UserDirectoryMfaMode;\n\n  // Enabled second factors. Defaults to [totp] when omitted.\n  secondFactors?: UserDirectoryMfaSecondFactor[];\n}\n\nexport interface QPQConfigAdvancedUserDirectorySettings extends QPQConfigAdvancedSettings {\n  phoneRequired?: boolean;\n\n  selfSignUpEnabled?: boolean;\n\n  emailTemplates?: EmailTemplates;\n\n  owner?: CrossModuleOwner<'userDirectoryName'>;\n\n  dnsRecord?: AuthDirectoryDnsRecord;\n\n  customAuthRuntime?: CustomAuthRuntime;\n\n  mfa?: UserDirectoryMfaSettings;\n}\n\nexport interface UserDirectoryQPQConfigSetting extends QPQConfigSetting {\n  name: string;\n\n  phoneRequired: boolean;\n\n  selfSignUpEnabled: boolean;\n\n  emailTemplates: EmailTemplates;\n\n  owner?: CrossModuleOwner;\n\n  dnsRecord?: AuthDirectoryDnsRecord;\n\n  customAuthRuntime?: CustomAuthRuntime;\n\n  mfa: UserDirectoryMfaSettings;\n}\n\nexport const defineUserDirectory = (name: string, options?: QPQConfigAdvancedUserDirectorySettings): UserDirectoryQPQConfigSetting => ({\n  configSettingType: QPQCoreConfigSettingType.userDirectory,\n  uniqueKey: name,\n\n  name,\n\n  phoneRequired: options?.phoneRequired || false,\n\n  selfSignUpEnabled: options?.selfSignUpEnabled ?? false,\n\n  emailTemplates: {\n    verifyEmail: options?.emailTemplates?.verifyEmail,\n    resetPassword: options?.emailTemplates?.resetPassword,\n    resetPasswordAdmin: options?.emailTemplates?.resetPasswordAdmin,\n  },\n\n  dnsRecord: options?.dnsRecord,\n  customAuthRuntime: options?.customAuthRuntime,\n\n  mfa: {\n    mode: options?.mfa?.mode ?? UserDirectoryMfaMode.off,\n    secondFactors: options?.mfa?.secondFactors?.length ? options.mfa.secondFactors : [UserDirectoryMfaSecondFactor.totp],\n  },\n\n  owner: convertCrossModuleOwnerToGenericResourceNameOverride(options?.owner),\n});\n"]}
+{"version":3,"file":"userDirectory.js","sourceRoot":"","sources":["../../../../src/config/settings/userDirectory.ts"],"names":[],"mappings":";;;AACA,4CAAqG;AACrG,gEAAiG;AAQjG,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,mCAAW,CAAA;IACX,6CAAqB,CAAA;IACrB,6CAAqB,CAAA;AACvB,CAAC,EAJW,oBAAoB,oCAApB,oBAAoB,QAI/B;AAED,IAAY,4BAGX;AAHD,WAAY,4BAA4B;IACtC,6CAAa,CAAA;IACb,sEAAsE;AACxE,CAAC,EAHW,4BAA4B,4CAA5B,4BAA4B,QAGvC;AAqDM,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAE,OAAgD,EAAiC,EAAE;;IAAC,OAAA,CAAC;QACrI,iBAAiB,EAAE,oCAAwB,CAAC,aAAa;QACzD,SAAS,EAAE,IAAI;QAEf,IAAI;QAEJ,aAAa,EAAE,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa,KAAI,KAAK;QAE9C,iBAAiB,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,iBAAiB,mCAAI,KAAK;QAEtD,cAAc,EAAE;YACd,WAAW,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,WAAW;YACjD,aAAa,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,aAAa;YACrD,kBAAkB,EAAE,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,0CAAE,kBAAkB;SAChE;QAED,SAAS,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS;QAC7B,iBAAiB,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,iBAAiB;QAE7C,0BAA0B,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,0BAA0B;QAE/D,GAAG,EAAE;YACH,IAAI,EAAE,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,IAAI,mCAAI,oBAAoB,CAAC,GAAG;YACpD,aAAa,EAAE,CAAA,MAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,0CAAE,aAAa,0CAAE,MAAM,EAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,IAAI,CAAC;SACrH;QAED,KAAK,EAAE,IAAA,uEAAoD,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAC;KAC5E,CAAC,CAAA;CAAA,CAAC;AA3BU,QAAA,mBAAmB,uBA2B7B","sourcesContent":["import { CrossModuleOwner } from '../../types';\nimport { QPQConfigAdvancedSettings, QPQConfigSetting, QPQCoreConfigSettingType } from '../QPQConfig';\nimport { convertCrossModuleOwnerToGenericResourceNameOverride } from '../utils/crossModuleUtils';\nimport { CustomAuthRuntime, EmailTemplates } from './emailTemplates';\n\nexport type AuthDirectoryDnsRecord = {\n  subdomain: string;\n  rootDomain: string;\n};\n\nexport enum UserDirectoryMfaMode {\n  off = 'off',\n  optional = 'optional',\n  required = 'required',\n}\n\nexport enum UserDirectoryMfaSecondFactor {\n  totp = 'totp',\n  // sms = 'sms', // future — additionally needs phone + SNS role infra.\n}\n\nexport interface UserDirectoryMfaSettings {\n  mode: UserDirectoryMfaMode;\n\n  // Enabled second factors. Defaults to [totp] when omitted.\n  secondFactors?: UserDirectoryMfaSecondFactor[];\n}\n\nexport interface QPQConfigAdvancedUserDirectorySettings extends QPQConfigAdvancedSettings {\n  phoneRequired?: boolean;\n\n  selfSignUpEnabled?: boolean;\n\n  emailTemplates?: EmailTemplates;\n\n  owner?: CrossModuleOwner<'userDirectoryName'>;\n\n  dnsRecord?: AuthDirectoryDnsRecord;\n\n  customAuthRuntime?: CustomAuthRuntime;\n\n  mfa?: UserDirectoryMfaSettings;\n\n  // Access/ID token (JWT) lifetime in minutes. Shorter = a smaller window in which a\n  // revoked session's still-valid access token keeps working (access tokens are stateless\n  // and can't be revoked before expiry). Cognito allows 5–1440; omitted → Cognito default\n  // (60).\n  //\n  // Generally web apps should refresh in the few mins so this should be > 5.\n  accessTokenValidityMinutes?: number;\n}\n\nexport interface UserDirectoryQPQConfigSetting extends QPQConfigSetting {\n  name: string;\n\n  phoneRequired: boolean;\n\n  selfSignUpEnabled: boolean;\n\n  emailTemplates: EmailTemplates;\n\n  owner?: CrossModuleOwner;\n\n  dnsRecord?: AuthDirectoryDnsRecord;\n\n  customAuthRuntime?: CustomAuthRuntime;\n\n  mfa: UserDirectoryMfaSettings;\n\n  accessTokenValidityMinutes?: number;\n}\n\nexport const defineUserDirectory = (name: string, options?: QPQConfigAdvancedUserDirectorySettings): UserDirectoryQPQConfigSetting => ({\n  configSettingType: QPQCoreConfigSettingType.userDirectory,\n  uniqueKey: name,\n\n  name,\n\n  phoneRequired: options?.phoneRequired || false,\n\n  selfSignUpEnabled: options?.selfSignUpEnabled ?? false,\n\n  emailTemplates: {\n    verifyEmail: options?.emailTemplates?.verifyEmail,\n    resetPassword: options?.emailTemplates?.resetPassword,\n    resetPasswordAdmin: options?.emailTemplates?.resetPasswordAdmin,\n  },\n\n  dnsRecord: options?.dnsRecord,\n  customAuthRuntime: options?.customAuthRuntime,\n\n  accessTokenValidityMinutes: options?.accessTokenValidityMinutes,\n\n  mfa: {\n    mode: options?.mfa?.mode ?? UserDirectoryMfaMode.off,\n    secondFactors: options?.mfa?.secondFactors?.length ? options.mfa.secondFactors : [UserDirectoryMfaSecondFactor.totp],\n  },\n\n  owner: convertCrossModuleOwnerToGenericResourceNameOverride(options?.owner),\n});\n"]}

package/lib/commonjs/createImplementationRuntime.js

@@ -30,6 +30,14 @@ const createImplementationRuntime = (qpqConfig, tags, getDateNow, randomGuid, se
     const moduleName = (0, qpqCoreUtils_1.getApplicationModuleName)(qpqConfig);
     const resolveStory = (0, runtime_1.createRuntime)(qpqConfig, {
         context: session.context,
+        // Service-local context and the caller's function globals travel into the
+        // nested implementation runtime (a within-service child: tool executor,
+        // drive file resolver, custom implementation), so stories run under it can
+        // read route/function config (e.g. the eventDoc user-directory global an
+        // AI tool needs to resolve the actor, or the tenant scope resolver). Mirrors
+        // the inline-function execute processor, which carries the same fields.
+        localContext: session.localContext,
+        functionGlobals: session.functionGlobals,
         depth: (session.depth || 0) + 1,
         decodedAccessToken: session.decodedAccessToken,
         correlation: session.correlation,

package/lib/commonjs/createImplementationRuntime.js.map

@@ -1 +1 @@
-{"version":3,"file":"createImplementationRuntime.js","sourceRoot":"","sources":["../../src/createImplementationRuntime.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAsE;AAEtE,iDAA0D;AAC1D,uCAA0C;AAC1C,mCAUiB;AAEjB,4DAA4D;AAC5D,4DAA4D;AAE5D,gFAAgF;AAChF,wFAAwF;AAExF,oGAAoG;AAEpG,8EAA8E;AAC9E,6CAA6C;AAC7C,+CAA+C;AAE/C,4IAA4I;AAC5I,+BAA+B;AAC/B,0BAA0B;AAC1B,KAAK;AAEE,MAAM,2BAA2B,GAAG,CACzC,SAAoB,EACpB,IAAc,EAEd,UAA+C,EAC/C,UAAwB,EAExB,OAAqB,EACrB,gBAAqC,EACrC,MAAiB,EACjB,mBAAwC,EACxC,cAA+B,EACG,EAAE;IACpC,MAAM,UAAU,GAAG,IAAA,uCAAwB,EAAC,SAAS,CAAC,CAAC;IAEvD,MAAM,YAAY,GAAG,IAAA,uBAAa,EAChC,SAAS,EACT;QACE,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;QAC/B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,EACD,GAAS,EAAE,kDAAC,OAAA,gBAAgB,CAAA,GAAA,EAC5B,UAAU,EACV,MAAM;IACN,0BAA0B;IAC1B,GAAG,UAAU,KAAK,UAAU,EAAE,EAAE,EAChC,sBAAc,CAAC,4BAA4B,EAC3C,mBAAmB,EACnB,SAAS,EACT,IAAI,EACJ,cAAc,CACf,CAAC;IAEF,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AApCW,QAAA,2BAA2B,+BAoCtC;AAEK,MAAM,8BAA8B,GAAG,CAC5C,SAAoB,EACpB,KAAe,EACf,GAAW,EACX,2BAA+D,EAC/D,UAAwB,EACxB,UAAwB,EACrB,EAAE;IACL,MAAM,cAAc,GAA8B,CAChD,OAAO,EACP,OAAO,EACP,mBAAmB,EACnB,MAAM,EACN,aAAa,EACb,mBAAmB,EACnB,cAAc,EACd,EAAE;QACF,MAAM,YAAY,GAAG,IAAA,mCAA2B,EAC9C,SAAS,EACT,CAAC,GAAG,CAAC,EACL,UAAU,EACV,UAAU,EACV,OAAO,kCAEF,mBAAmB,GACnB,CAAC,2BAA2B,CAAC,CAAC,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAE3G,MAAM,EACN,mBAAmB,EACnB,cAAc,CACf,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzD,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,IAAA,+BAAiB,EAAC,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,IAAA,0BAAY,EAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC,CAAA,CAAC;IAEF,OAAO,cAAmB,CAAC;AAC7B,CAAC,CAAC;AA1CW,QAAA,8BAA8B,kCA0CzC","sourcesContent":["import { actionResult, actionResultError } from './logic/actionLogic';\nimport { QPQConfig } from './config';\nimport { getApplicationModuleName } from './qpqCoreUtils';\nimport { createRuntime } from './runtime';\nimport {\n  ActionProcessor,\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  AnyStory,\n  DynamicModuleLoader,\n  QpqLogger,\n  QpqRuntimeType,\n  StorySession,\n  StreamRegistry,\n} from './types';\n\n// export const getDateNow = () => new Date().toISOString();\n// export const randomGuid = () => new Date().toISOString();\n\n// export type ActionProcessorReturnType<AP extends ActionProcessor<any, any>> =\n//   ReturnType<AP> extends AsyncActionProcessorResult<infer TReturn> ? TReturn : never;\n\n// export type ActionProcessorPayloadType<AP extends ActionProcessor<any, any>> = Parameters<AP>[0];\n\n// export type ActionProcessorNative<AP extends ActionProcessor<any, any>> = (\n//   payload: ActionProcessorPayloadType<AP>,\n// ) => Promise<ActionProcessorReturnType<AP>>;\n\n// export const resolveActionProcessorToNative = <AP extends ActionProcessor<any, any>>(actionProcessor: AP): ActionProcessorNative<AP> => {\n//   // return null as TReturn;\n//   return null as never;\n// };\n\nexport const createImplementationRuntime = (\n  qpqConfig: QPQConfig,\n  tags: string[],\n\n  getDateNow: Parameters<typeof createRuntime>[3],\n  randomGuid: () => string,\n\n  session: StorySession,\n  actionProcessors: ActionProcessorList,\n  logger: QpqLogger,\n  dynamicModuleLoader: DynamicModuleLoader,\n  streamRegistry?: StreamRegistry,\n): ReturnType<typeof createRuntime> => {\n  const moduleName = getApplicationModuleName(qpqConfig);\n\n  const resolveStory = createRuntime(\n    qpqConfig,\n    {\n      context: session.context,\n      depth: (session.depth || 0) + 1,\n      decodedAccessToken: session.decodedAccessToken,\n      correlation: session.correlation,\n    },\n    async () => actionProcessors,\n    getDateNow,\n    logger,\n    // TODO: Share this logic.\n    `${moduleName}::${randomGuid()}`,\n    QpqRuntimeType.EXECUTE_IMPLEMENTATION_STORY,\n    dynamicModuleLoader,\n    undefined,\n    tags,\n    streamRegistry,\n  );\n\n  return resolveStory;\n};\n\nexport const getProcessCustomImplementation = <T extends ActionProcessor<any, any>>(\n  qpqConfig: QPQConfig,\n  story: AnyStory,\n  tag: string,\n  actionProcessorListResolver: ActionProcessorListResolver | null,\n  getDateNow: () => string,\n  getNewGuid: () => string,\n): T => {\n  const actionProcesor: ActionProcessor<any, any> = async (\n    payload,\n    session,\n    actionProcessorList,\n    logger,\n    updateSession,\n    dynamicModuleLoader,\n    streamRegistry,\n  ) => {\n    const resolveStory = createImplementationRuntime(\n      qpqConfig,\n      [tag],\n      getDateNow,\n      getNewGuid,\n      session,\n      {\n        ...actionProcessorList,\n        ...(actionProcessorListResolver ? await actionProcessorListResolver(qpqConfig, dynamicModuleLoader) : {}),\n      },\n      logger,\n      dynamicModuleLoader,\n      streamRegistry,\n    );\n\n    const storyResult = await resolveStory(story, [payload]);\n\n    if (storyResult.error) {\n      return actionResultError(storyResult.error.errorType, storyResult.error.errorText);\n    }\n\n    return actionResult(storyResult.result);\n  };\n\n  return actionProcesor as T;\n};\n"]}
+{"version":3,"file":"createImplementationRuntime.js","sourceRoot":"","sources":["../../src/createImplementationRuntime.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAsE;AAEtE,iDAA0D;AAC1D,uCAA0C;AAC1C,mCAUiB;AAEjB,4DAA4D;AAC5D,4DAA4D;AAE5D,gFAAgF;AAChF,wFAAwF;AAExF,oGAAoG;AAEpG,8EAA8E;AAC9E,6CAA6C;AAC7C,+CAA+C;AAE/C,4IAA4I;AAC5I,+BAA+B;AAC/B,0BAA0B;AAC1B,KAAK;AAEE,MAAM,2BAA2B,GAAG,CACzC,SAAoB,EACpB,IAAc,EAEd,UAA+C,EAC/C,UAAwB,EAExB,OAAqB,EACrB,gBAAqC,EACrC,MAAiB,EACjB,mBAAwC,EACxC,cAA+B,EACG,EAAE;IACpC,MAAM,UAAU,GAAG,IAAA,uCAAwB,EAAC,SAAS,CAAC,CAAC;IAEvD,MAAM,YAAY,GAAG,IAAA,uBAAa,EAChC,SAAS,EACT;QACE,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,6EAA6E;QAC7E,wEAAwE;QACxE,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;QAC/B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,EACD,GAAS,EAAE,kDAAC,OAAA,gBAAgB,CAAA,GAAA,EAC5B,UAAU,EACV,MAAM;IACN,0BAA0B;IAC1B,GAAG,UAAU,KAAK,UAAU,EAAE,EAAE,EAChC,sBAAc,CAAC,4BAA4B,EAC3C,mBAAmB,EACnB,SAAS,EACT,IAAI,EACJ,cAAc,CACf,CAAC;IAEF,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AA5CW,QAAA,2BAA2B,+BA4CtC;AAEK,MAAM,8BAA8B,GAAG,CAC5C,SAAoB,EACpB,KAAe,EACf,GAAW,EACX,2BAA+D,EAC/D,UAAwB,EACxB,UAAwB,EACrB,EAAE;IACL,MAAM,cAAc,GAA8B,CAChD,OAAO,EACP,OAAO,EACP,mBAAmB,EACnB,MAAM,EACN,aAAa,EACb,mBAAmB,EACnB,cAAc,EACd,EAAE;QACF,MAAM,YAAY,GAAG,IAAA,mCAA2B,EAC9C,SAAS,EACT,CAAC,GAAG,CAAC,EACL,UAAU,EACV,UAAU,EACV,OAAO,kCAEF,mBAAmB,GACnB,CAAC,2BAA2B,CAAC,CAAC,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAE3G,MAAM,EACN,mBAAmB,EACnB,cAAc,CACf,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzD,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,IAAA,+BAAiB,EAAC,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,IAAA,0BAAY,EAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC,CAAA,CAAC;IAEF,OAAO,cAAmB,CAAC;AAC7B,CAAC,CAAC;AA1CW,QAAA,8BAA8B,kCA0CzC","sourcesContent":["import { actionResult, actionResultError } from './logic/actionLogic';\nimport { QPQConfig } from './config';\nimport { getApplicationModuleName } from './qpqCoreUtils';\nimport { createRuntime } from './runtime';\nimport {\n  ActionProcessor,\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  AnyStory,\n  DynamicModuleLoader,\n  QpqLogger,\n  QpqRuntimeType,\n  StorySession,\n  StreamRegistry,\n} from './types';\n\n// export const getDateNow = () => new Date().toISOString();\n// export const randomGuid = () => new Date().toISOString();\n\n// export type ActionProcessorReturnType<AP extends ActionProcessor<any, any>> =\n//   ReturnType<AP> extends AsyncActionProcessorResult<infer TReturn> ? TReturn : never;\n\n// export type ActionProcessorPayloadType<AP extends ActionProcessor<any, any>> = Parameters<AP>[0];\n\n// export type ActionProcessorNative<AP extends ActionProcessor<any, any>> = (\n//   payload: ActionProcessorPayloadType<AP>,\n// ) => Promise<ActionProcessorReturnType<AP>>;\n\n// export const resolveActionProcessorToNative = <AP extends ActionProcessor<any, any>>(actionProcessor: AP): ActionProcessorNative<AP> => {\n//   // return null as TReturn;\n//   return null as never;\n// };\n\nexport const createImplementationRuntime = (\n  qpqConfig: QPQConfig,\n  tags: string[],\n\n  getDateNow: Parameters<typeof createRuntime>[3],\n  randomGuid: () => string,\n\n  session: StorySession,\n  actionProcessors: ActionProcessorList,\n  logger: QpqLogger,\n  dynamicModuleLoader: DynamicModuleLoader,\n  streamRegistry?: StreamRegistry,\n): ReturnType<typeof createRuntime> => {\n  const moduleName = getApplicationModuleName(qpqConfig);\n\n  const resolveStory = createRuntime(\n    qpqConfig,\n    {\n      context: session.context,\n      // Service-local context and the caller's function globals travel into the\n      // nested implementation runtime (a within-service child: tool executor,\n      // drive file resolver, custom implementation), so stories run under it can\n      // read route/function config (e.g. the eventDoc user-directory global an\n      // AI tool needs to resolve the actor, or the tenant scope resolver). Mirrors\n      // the inline-function execute processor, which carries the same fields.\n      localContext: session.localContext,\n      functionGlobals: session.functionGlobals,\n      depth: (session.depth || 0) + 1,\n      decodedAccessToken: session.decodedAccessToken,\n      correlation: session.correlation,\n    },\n    async () => actionProcessors,\n    getDateNow,\n    logger,\n    // TODO: Share this logic.\n    `${moduleName}::${randomGuid()}`,\n    QpqRuntimeType.EXECUTE_IMPLEMENTATION_STORY,\n    dynamicModuleLoader,\n    undefined,\n    tags,\n    streamRegistry,\n  );\n\n  return resolveStory;\n};\n\nexport const getProcessCustomImplementation = <T extends ActionProcessor<any, any>>(\n  qpqConfig: QPQConfig,\n  story: AnyStory,\n  tag: string,\n  actionProcessorListResolver: ActionProcessorListResolver | null,\n  getDateNow: () => string,\n  getNewGuid: () => string,\n): T => {\n  const actionProcesor: ActionProcessor<any, any> = async (\n    payload,\n    session,\n    actionProcessorList,\n    logger,\n    updateSession,\n    dynamicModuleLoader,\n    streamRegistry,\n  ) => {\n    const resolveStory = createImplementationRuntime(\n      qpqConfig,\n      [tag],\n      getDateNow,\n      getNewGuid,\n      session,\n      {\n        ...actionProcessorList,\n        ...(actionProcessorListResolver ? await actionProcessorListResolver(qpqConfig, dynamicModuleLoader) : {}),\n      },\n      logger,\n      dynamicModuleLoader,\n      streamRegistry,\n    );\n\n    const storyResult = await resolveStory(story, [payload]);\n\n    if (storyResult.error) {\n      return actionResultError(storyResult.error.errorType, storyResult.error.errorText);\n    }\n\n    return actionResult(storyResult.result);\n  };\n\n  return actionProcesor as T;\n};\n"]}

package/lib/commonjs/runtime/resolveStory.js

@@ -31,11 +31,15 @@ function resolveStory(story, args, qpqConfig, callerSession, getActionProcessors
             decodedAccessToken: callerSession.decodedAccessToken,
             context: callerSession.context,
             localContext: callerSession.localContext,
-            // In-process story executions (inline functions) run WITHIN the caller's
-            // function, so they inherit its globals - their own registration wins on
-            // collision. Transport entries (http/queue/ws) start fresh from their own
-            // runtime registration only.
-            functionGlobals: runtimeType === StorySession_1.QpqRuntimeType.EXECUTE_STORY
+            // In-process story executions run WITHIN the caller's function, so they
+            // inherit its globals - their own registration wins on collision. This
+            // covers inline functions (EXECUTE_STORY) AND implementation stories
+            // (EXECUTE_IMPLEMENTATION_STORY: tool executors, drive file resolvers,
+            // custom implementations) - both are nested, not transport boundaries, so
+            // an AI tool executor can read the queue/route globals (e.g. the eventDoc
+            // user-directory global needed to resolve the actor). Transport entries
+            // (http/queue/ws) start fresh from their own runtime registration only.
+            functionGlobals: runtimeType === StorySession_1.QpqRuntimeType.EXECUTE_STORY || runtimeType === StorySession_1.QpqRuntimeType.EXECUTE_IMPLEMENTATION_STORY
                 ? Object.assign(Object.assign({}, callerSession.functionGlobals), runtimeGlobals) : runtimeGlobals,
         };
         const updateSession = (newSession) => {

package/lib/commonjs/runtime/resolveStory.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolveStory.js","sourceRoot":"","sources":["../../../src/runtime/resolveStory.ts"],"names":[],"mappings":";;;;;;;;;;;AAWA,oCA+IC;AAzJD,sDAA4G;AAC5G,4CAAuD;AACvD,kDAA2D;AAG3D,0DAAuD;AACvD,wDAA8G;AAC9G,oCAAwD;AACxD,mDAAgD;AAEhD,SAAsB,YAAY,CAChC,KAAwB,EACxB,IAAW,EACX,SAAoB,EACpB,aAA2B,EAC3B,mBAAkG,EAClG,UAAwB,EACxB,MAAiB,EACjB,kBAA0B,EAC1B,WAA2B,EAC3B,mBAAwB,EACxB,sBAA2C,EAC3C,WAAsB,EACtB,cAA+B;;;QAE/B,MAAM,gBAAgB,GAAwB,MAAM,mBAAmB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACxG,MAAM,QAAQ,GAAG,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,IAAA,6BAAoB,GAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAE9B,MAAM,cAAc,GAAG,sBAAsB,IAAI,IAAA,oCAA4B,EAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAEnJ,IAAI,aAAa,GAA4C,IAAI,CAAC;QAClE,IAAI,YAAY,GAAiB;YAC/B,WAAW,EAAE,kBAAkB;YAC/B,KAAK,EAAE,aAAa,CAAC,KAAK,GAAG,CAAC;YAC9B,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;YACpD,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,YAAY,EAAE,aAAa,CAAC,YAAY;YACxC,yEAAyE;YACzE,yEAAyE;YACzE,0EAA0E;YAC1E,6BAA6B;YAC7B,eAAe,EACb,WAAW,KAAK,6BAAc,CAAC,aAAa;gBAC1C,CAAC,iCACM,aAAa,CAAC,eAAe,GAC7B,cAAc,EAErB,CAAC,CAAC,cAAc;SACrB,CAAC;QAEF,MAAM,aAAa,GAAwB,CAAC,UAAiC,EAAQ,EAAE;YACrF,YAAY,mCAAQ,YAAY,GAAK,UAAU,CAAE,CAAC;QACpD,CAAC,CAAC;QAEF,MAAM,QAAQ,GAAqB;YACjC,KAAK,EAAE,IAAI;YACX,OAAO,oBAAO,YAAY,CAAE;YAC5B,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,UAAU,EAAE;YACvB,UAAU,EAAE,UAAU,EAAE;YACxB,IAAI,EAAE,WAAW,IAAI,EAAE;YACvB,UAAU,EAAE,IAAA,uCAAwB,EAAC,SAAS,CAAC;YAC/C,WAAW,EAAE,YAAY,CAAC,WAAY;YACtC,eAAe,EAAE,aAAa,CAAC,WAAW;YAC1C,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,EAAE;YACR,sBAAsB;SACvB,CAAC;QAEF,wBAAwB;QACxB,IAAI,YAAY,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC;YAC7B,uCACK,QAAQ,KACX,UAAU,EAAE,UAAU,EAAE,EACxB,KAAK,EAAE;oBACL,SAAS,EAAE,yBAAyB,YAAY,CAAC,KAAK,IAAI;oBAC1D,SAAS,EAAE,6BAAa,CAAC,YAAY;iBACtC,IACD;QACJ,CAAC;QAED,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAE9B,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC;gBACnC,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;gBAEnC,MAAM,YAAY,GAAG,MAAM,IAAA,6BAAa,EAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,QAAQ,CAAC,CAAC;gBAEvI,MAAM,YAAY,GAAG;oBACnB,GAAG,EAAE,MAAM;oBACX,GAAG,EAAE,YAAY;oBACjB,SAAS,EAAE,aAAa;oBACxB,UAAU,EAAE,UAAU,EAAE;iBACzB,CAAC;gBAEF,qIAAqI;gBACrI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAEpC,IAAI,IAAA,mCAAqB,EAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBAChE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,IAAA,sCAAwB,EAAC,YAAY,CAAC,CAAC,CAAC,CAAC;oBACrF,uCACK,QAAQ,KACX,UAAU,EAAE,UAAU,EAAE,EACxB,KAAK,EAAE,IAAA,sCAAwB,EAAC,YAAY,CAAC,IAC7C;gBACJ,CAAC;gBAED,8CAA8C;gBAC9C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;oBACxB,MAAM,SAAS,GAAG,CAAC,IAAA,mCAAqB,EAAC,YAAY,CAAC,CAAC;oBACvD,MAAM,MAAM,GAAG,SAAS;wBACtB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAA,iCAAmB,EAAC,YAAY,CAAC,EAAE;wBAC9D,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAA,sCAAwB,EAAC,YAAY,CAAC,EAAE,CAAC;oBACtE,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACtC,CAAC;qBAAM,CAAC;oBACN,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,iCAAmB,EAAC,YAAY,CAAC,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,KAAK,0CAAE,IAAI,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9F,uCACK,QAAQ,KACX,UAAU,EAAE,UAAU,EAAE,EACxB,KAAK,EAAE;wBACL,SAAS,EAAE,GAAG,CAAC,OAAO;wBACtB,SAAS,EAAE,6BAAa,CAAC,YAAY;wBACrC,UAAU,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,KAAK,0CAAE,IAAI;qBACvC,IACD;YACJ,CAAC;YACD,uCACK,QAAQ,KACX,UAAU,EAAE,UAAU,EAAE,EACxB,KAAK,EAAE;oBACL,SAAS,EAAE,6BAA6B;oBACxC,SAAS,EAAE,6BAAa,CAAC,YAAY;oBACrC,UAAU,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,KAAK,0CAAE,IAAI;iBACvC,IACD;QACJ,CAAC;QAED,MAAM,WAAW,mCACZ,QAAQ,KACX,UAAU,EAAE,UAAU,EAAE,EACxB,MAAM,EAAE,aAAa,CAAC,KAAK,GAC5B,CAAC;QAEF,yHAAyH;QACzH,OAAO,WAAW,CAAC;IACrB,CAAC;CAAA","sourcesContent":["import { QPQConfig } from '../config';\nimport { isErroredActionResult, resolveActionResult, resolveActionResultError } from '../logic/actionLogic';\nimport { createStreamRegistry } from '../logic/stream';\nimport { getApplicationModuleName } from '../qpqCoreUtils';\nimport { QpqFunctionRuntime, QpqLogger, StreamRegistry } from '../types';\nimport { Action, ActionProcessorList } from '../types/Action';\nimport { ErrorTypeEnum } from '../types/ErrorTypeEnum';\nimport { QpqRuntimeType, Story, StoryResult, StorySession, StorySessionUpdater } from '../types/StorySession';\nimport { isQpqFunctionRuntimeAdvanced } from '../utils';\nimport { processAction } from './processAction';\n\nexport async function resolveStory<TArgs extends Array<any>>(\n  story: Story<TArgs, any>,\n  args: TArgs,\n  qpqConfig: QPQConfig,\n  callerSession: StorySession,\n  getActionProcessors: (config: QPQConfig, dynamicModuleLoader: any) => Promise<ActionProcessorList>,\n  getTimeNow: () => string,\n  logger: QpqLogger,\n  runtimeCorrelation: string,\n  runtimeType: QpqRuntimeType,\n  dynamicModuleLoader: any,\n  qpqFunctionRuntimeInfo?: QpqFunctionRuntime,\n  initialTags?: string[],\n  streamRegistry?: StreamRegistry,\n): Promise<StoryResult<any>> {\n  const actionProcessors: ActionProcessorList = await getActionProcessors(qpqConfig, dynamicModuleLoader);\n  const registry = streamRegistry ?? createStreamRegistry();\n  const reader = story(...args);\n\n  const runtimeGlobals = qpqFunctionRuntimeInfo && isQpqFunctionRuntimeAdvanced(qpqFunctionRuntimeInfo) ? qpqFunctionRuntimeInfo.globals : undefined;\n\n  let storyProgress: IteratorResult<Action<any>, any> | null = null;\n  let storySession: StorySession = {\n    correlation: runtimeCorrelation,\n    depth: callerSession.depth + 1,\n    decodedAccessToken: callerSession.decodedAccessToken,\n    context: callerSession.context,\n    localContext: callerSession.localContext,\n    // In-process story executions (inline functions) run WITHIN the caller's\n    // function, so they inherit its globals - their own registration wins on\n    // collision. Transport entries (http/queue/ws) start fresh from their own\n    // runtime registration only.\n    functionGlobals:\n      runtimeType === QpqRuntimeType.EXECUTE_STORY\n        ? {\n            ...callerSession.functionGlobals,\n            ...runtimeGlobals,\n          }\n        : runtimeGlobals,\n  };\n\n  const updateSession: StorySessionUpdater = (newSession: Partial<StorySession>): void => {\n    storySession = { ...storySession, ...newSession };\n  };\n\n  const response: StoryResult<any> = {\n    input: args,\n    session: { ...storySession },\n    history: [],\n    startedAt: getTimeNow(),\n    finishedAt: getTimeNow(),\n    tags: initialTags || [],\n    moduleName: getApplicationModuleName(qpqConfig),\n    correlation: storySession.correlation!,\n    fromCorrelation: callerSession.correlation,\n    runtimeType: runtimeType,\n    logs: [],\n    qpqFunctionRuntimeInfo,\n  };\n\n  // Enforce maximum depth\n  if (storySession.depth > 100) {\n    return {\n      ...response,\n      finishedAt: getTimeNow(),\n      error: {\n        errorText: `Story depth exceeded [${storySession.depth}]!`,\n        errorType: ErrorTypeEnum.GenericError,\n      },\n    };\n  }\n\n  try {\n    storyProgress = reader.next();\n\n    while (!storyProgress.done) {\n      const action = storyProgress.value;\n      const executionTime = getTimeNow();\n\n      const actionResult = await processAction(action, actionProcessors, storySession, logger, updateSession, dynamicModuleLoader, registry);\n\n      const historyEntry = {\n        act: action,\n        res: actionResult,\n        startedAt: executionTime,\n        finishedAt: getTimeNow(),\n      };\n\n      // console.log(`${action.type}: took ${new Date(historyEntry.finishedAt).getTime() - new Date(historyEntry.startedAt).getTime()}ms`);\n      response.history.push(historyEntry);\n\n      if (isErroredActionResult(actionResult) && !action.returnErrors) {\n        console.log('Caught Error:', JSON.stringify(resolveActionResultError(actionResult)));\n        return {\n          ...response,\n          finishedAt: getTimeNow(),\n          error: resolveActionResultError(actionResult),\n        };\n      }\n\n      // Feed the result back to the story generator\n      if (action.returnErrors) {\n        const isSuccess = !isErroredActionResult(actionResult);\n        const result = isSuccess\n          ? { success: true, result: resolveActionResult(actionResult) }\n          : { success: false, error: resolveActionResultError(actionResult) };\n        storyProgress = reader.next(result);\n      } else {\n        storyProgress = reader.next(resolveActionResult(actionResult));\n      }\n    }\n  } catch (err) {\n    if (err instanceof Error) {\n      console.log(`Uncaught Error: [${JSON.stringify(storyProgress?.value?.type)}] ${err.message}`);\n      return {\n        ...response,\n        finishedAt: getTimeNow(),\n        error: {\n          errorText: err.message,\n          errorType: ErrorTypeEnum.GenericError,\n          errorStack: storyProgress?.value?.type,\n        },\n      };\n    }\n    return {\n      ...response,\n      finishedAt: getTimeNow(),\n      error: {\n        errorText: 'Unknown error has occurred!',\n        errorType: ErrorTypeEnum.GenericError,\n        errorStack: storyProgress?.value?.type,\n      },\n    };\n  }\n\n  const storyResult = {\n    ...response,\n    finishedAt: getTimeNow(),\n    result: storyProgress.value,\n  };\n\n  // console.log(`story took ${new Date(storyResult.finishedAt).getTime() - new Date(storyResult.startedAt).getTime()}ms`);\n  return storyResult;\n}\n"]}
+{"version":3,"file":"resolveStory.js","sourceRoot":"","sources":["../../../src/runtime/resolveStory.ts"],"names":[],"mappings":";;;;;;;;;;;AAWA,oCAmJC;AA7JD,sDAA4G;AAC5G,4CAAuD;AACvD,kDAA2D;AAG3D,0DAAuD;AACvD,wDAA8G;AAC9G,oCAAwD;AACxD,mDAAgD;AAEhD,SAAsB,YAAY,CAChC,KAAwB,EACxB,IAAW,EACX,SAAoB,EACpB,aAA2B,EAC3B,mBAAkG,EAClG,UAAwB,EACxB,MAAiB,EACjB,kBAA0B,EAC1B,WAA2B,EAC3B,mBAAwB,EACxB,sBAA2C,EAC3C,WAAsB,EACtB,cAA+B;;;QAE/B,MAAM,gBAAgB,GAAwB,MAAM,mBAAmB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACxG,MAAM,QAAQ,GAAG,cAAc,aAAd,cAAc,cAAd,cAAc,GAAI,IAAA,6BAAoB,GAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAE9B,MAAM,cAAc,GAAG,sBAAsB,IAAI,IAAA,oCAA4B,EAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAEnJ,IAAI,aAAa,GAA4C,IAAI,CAAC;QAClE,IAAI,YAAY,GAAiB;YAC/B,WAAW,EAAE,kBAAkB;YAC/B,KAAK,EAAE,aAAa,CAAC,KAAK,GAAG,CAAC;YAC9B,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;YACpD,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,YAAY,EAAE,aAAa,CAAC,YAAY;YACxC,wEAAwE;YACxE,uEAAuE;YACvE,qEAAqE;YACrE,uEAAuE;YACvE,0EAA0E;YAC1E,0EAA0E;YAC1E,wEAAwE;YACxE,wEAAwE;YACxE,eAAe,EACb,WAAW,KAAK,6BAAc,CAAC,aAAa,IAAI,WAAW,KAAK,6BAAc,CAAC,4BAA4B;gBACzG,CAAC,iCACM,aAAa,CAAC,eAAe,GAC7B,cAAc,EAErB,CAAC,CAAC,cAAc;SACrB,CAAC;QAEF,MAAM,aAAa,GAAwB,CAAC,UAAiC,EAAQ,EAAE;YACrF,YAAY,mCAAQ,YAAY,GAAK,UAAU,CAAE,CAAC;QACpD,CAAC,CAAC;QAEF,MAAM,QAAQ,GAAqB;YACjC,KAAK,EAAE,IAAI;YACX,OAAO,oBAAO,YAAY,CAAE;YAC5B,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,UAAU,EAAE;YACvB,UAAU,EAAE,UAAU,EAAE;YACxB,IAAI,EAAE,WAAW,IAAI,EAAE;YACvB,UAAU,EAAE,IAAA,uCAAwB,EAAC,SAAS,CAAC;YAC/C,WAAW,EAAE,YAAY,CAAC,WAAY;YACtC,eAAe,EAAE,aAAa,CAAC,WAAW;YAC1C,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,EAAE;YACR,sBAAsB;SACvB,CAAC;QAEF,wBAAwB;QACxB,IAAI,YAAY,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC;YAC7B,uCACK,QAAQ,KACX,UAAU,EAAE,UAAU,EAAE,EACxB,KAAK,EAAE;oBACL,SAAS,EAAE,yBAAyB,YAAY,CAAC,KAAK,IAAI;oBAC1D,SAAS,EAAE,6BAAa,CAAC,YAAY;iBACtC,IACD;QACJ,CAAC;QAED,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAE9B,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC;gBACnC,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;gBAEnC,MAAM,YAAY,GAAG,MAAM,IAAA,6BAAa,EAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,QAAQ,CAAC,CAAC;gBAEvI,MAAM,YAAY,GAAG;oBACnB,GAAG,EAAE,MAAM;oBACX,GAAG,EAAE,YAAY;oBACjB,SAAS,EAAE,aAAa;oBACxB,UAAU,EAAE,UAAU,EAAE;iBACzB,CAAC;gBAEF,qIAAqI;gBACrI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAEpC,IAAI,IAAA,mCAAqB,EAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBAChE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,IAAA,sCAAwB,EAAC,YAAY,CAAC,CAAC,CAAC,CAAC;oBACrF,uCACK,QAAQ,KACX,UAAU,EAAE,UAAU,EAAE,EACxB,KAAK,EAAE,IAAA,sCAAwB,EAAC,YAAY,CAAC,IAC7C;gBACJ,CAAC;gBAED,8CAA8C;gBAC9C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;oBACxB,MAAM,SAAS,GAAG,CAAC,IAAA,mCAAqB,EAAC,YAAY,CAAC,CAAC;oBACvD,MAAM,MAAM,GAAG,SAAS;wBACtB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAA,iCAAmB,EAAC,YAAY,CAAC,EAAE;wBAC9D,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAA,sCAAwB,EAAC,YAAY,CAAC,EAAE,CAAC;oBACtE,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACtC,CAAC;qBAAM,CAAC;oBACN,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,IAAA,iCAAmB,EAAC,YAAY,CAAC,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,KAAK,0CAAE,IAAI,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9F,uCACK,QAAQ,KACX,UAAU,EAAE,UAAU,EAAE,EACxB,KAAK,EAAE;wBACL,SAAS,EAAE,GAAG,CAAC,OAAO;wBACtB,SAAS,EAAE,6BAAa,CAAC,YAAY;wBACrC,UAAU,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,KAAK,0CAAE,IAAI;qBACvC,IACD;YACJ,CAAC;YACD,uCACK,QAAQ,KACX,UAAU,EAAE,UAAU,EAAE,EACxB,KAAK,EAAE;oBACL,SAAS,EAAE,6BAA6B;oBACxC,SAAS,EAAE,6BAAa,CAAC,YAAY;oBACrC,UAAU,EAAE,MAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,KAAK,0CAAE,IAAI;iBACvC,IACD;QACJ,CAAC;QAED,MAAM,WAAW,mCACZ,QAAQ,KACX,UAAU,EAAE,UAAU,EAAE,EACxB,MAAM,EAAE,aAAa,CAAC,KAAK,GAC5B,CAAC;QAEF,yHAAyH;QACzH,OAAO,WAAW,CAAC;IACrB,CAAC;CAAA","sourcesContent":["import { QPQConfig } from '../config';\nimport { isErroredActionResult, resolveActionResult, resolveActionResultError } from '../logic/actionLogic';\nimport { createStreamRegistry } from '../logic/stream';\nimport { getApplicationModuleName } from '../qpqCoreUtils';\nimport { QpqFunctionRuntime, QpqLogger, StreamRegistry } from '../types';\nimport { Action, ActionProcessorList } from '../types/Action';\nimport { ErrorTypeEnum } from '../types/ErrorTypeEnum';\nimport { QpqRuntimeType, Story, StoryResult, StorySession, StorySessionUpdater } from '../types/StorySession';\nimport { isQpqFunctionRuntimeAdvanced } from '../utils';\nimport { processAction } from './processAction';\n\nexport async function resolveStory<TArgs extends Array<any>>(\n  story: Story<TArgs, any>,\n  args: TArgs,\n  qpqConfig: QPQConfig,\n  callerSession: StorySession,\n  getActionProcessors: (config: QPQConfig, dynamicModuleLoader: any) => Promise<ActionProcessorList>,\n  getTimeNow: () => string,\n  logger: QpqLogger,\n  runtimeCorrelation: string,\n  runtimeType: QpqRuntimeType,\n  dynamicModuleLoader: any,\n  qpqFunctionRuntimeInfo?: QpqFunctionRuntime,\n  initialTags?: string[],\n  streamRegistry?: StreamRegistry,\n): Promise<StoryResult<any>> {\n  const actionProcessors: ActionProcessorList = await getActionProcessors(qpqConfig, dynamicModuleLoader);\n  const registry = streamRegistry ?? createStreamRegistry();\n  const reader = story(...args);\n\n  const runtimeGlobals = qpqFunctionRuntimeInfo && isQpqFunctionRuntimeAdvanced(qpqFunctionRuntimeInfo) ? qpqFunctionRuntimeInfo.globals : undefined;\n\n  let storyProgress: IteratorResult<Action<any>, any> | null = null;\n  let storySession: StorySession = {\n    correlation: runtimeCorrelation,\n    depth: callerSession.depth + 1,\n    decodedAccessToken: callerSession.decodedAccessToken,\n    context: callerSession.context,\n    localContext: callerSession.localContext,\n    // In-process story executions run WITHIN the caller's function, so they\n    // inherit its globals - their own registration wins on collision. This\n    // covers inline functions (EXECUTE_STORY) AND implementation stories\n    // (EXECUTE_IMPLEMENTATION_STORY: tool executors, drive file resolvers,\n    // custom implementations) - both are nested, not transport boundaries, so\n    // an AI tool executor can read the queue/route globals (e.g. the eventDoc\n    // user-directory global needed to resolve the actor). Transport entries\n    // (http/queue/ws) start fresh from their own runtime registration only.\n    functionGlobals:\n      runtimeType === QpqRuntimeType.EXECUTE_STORY || runtimeType === QpqRuntimeType.EXECUTE_IMPLEMENTATION_STORY\n        ? {\n            ...callerSession.functionGlobals,\n            ...runtimeGlobals,\n          }\n        : runtimeGlobals,\n  };\n\n  const updateSession: StorySessionUpdater = (newSession: Partial<StorySession>): void => {\n    storySession = { ...storySession, ...newSession };\n  };\n\n  const response: StoryResult<any> = {\n    input: args,\n    session: { ...storySession },\n    history: [],\n    startedAt: getTimeNow(),\n    finishedAt: getTimeNow(),\n    tags: initialTags || [],\n    moduleName: getApplicationModuleName(qpqConfig),\n    correlation: storySession.correlation!,\n    fromCorrelation: callerSession.correlation,\n    runtimeType: runtimeType,\n    logs: [],\n    qpqFunctionRuntimeInfo,\n  };\n\n  // Enforce maximum depth\n  if (storySession.depth > 100) {\n    return {\n      ...response,\n      finishedAt: getTimeNow(),\n      error: {\n        errorText: `Story depth exceeded [${storySession.depth}]!`,\n        errorType: ErrorTypeEnum.GenericError,\n      },\n    };\n  }\n\n  try {\n    storyProgress = reader.next();\n\n    while (!storyProgress.done) {\n      const action = storyProgress.value;\n      const executionTime = getTimeNow();\n\n      const actionResult = await processAction(action, actionProcessors, storySession, logger, updateSession, dynamicModuleLoader, registry);\n\n      const historyEntry = {\n        act: action,\n        res: actionResult,\n        startedAt: executionTime,\n        finishedAt: getTimeNow(),\n      };\n\n      // console.log(`${action.type}: took ${new Date(historyEntry.finishedAt).getTime() - new Date(historyEntry.startedAt).getTime()}ms`);\n      response.history.push(historyEntry);\n\n      if (isErroredActionResult(actionResult) && !action.returnErrors) {\n        console.log('Caught Error:', JSON.stringify(resolveActionResultError(actionResult)));\n        return {\n          ...response,\n          finishedAt: getTimeNow(),\n          error: resolveActionResultError(actionResult),\n        };\n      }\n\n      // Feed the result back to the story generator\n      if (action.returnErrors) {\n        const isSuccess = !isErroredActionResult(actionResult);\n        const result = isSuccess\n          ? { success: true, result: resolveActionResult(actionResult) }\n          : { success: false, error: resolveActionResultError(actionResult) };\n        storyProgress = reader.next(result);\n      } else {\n        storyProgress = reader.next(resolveActionResult(actionResult));\n      }\n    }\n  } catch (err) {\n    if (err instanceof Error) {\n      console.log(`Uncaught Error: [${JSON.stringify(storyProgress?.value?.type)}] ${err.message}`);\n      return {\n        ...response,\n        finishedAt: getTimeNow(),\n        error: {\n          errorText: err.message,\n          errorType: ErrorTypeEnum.GenericError,\n          errorStack: storyProgress?.value?.type,\n        },\n      };\n    }\n    return {\n      ...response,\n      finishedAt: getTimeNow(),\n      error: {\n        errorText: 'Unknown error has occurred!',\n        errorType: ErrorTypeEnum.GenericError,\n        errorStack: storyProgress?.value?.type,\n      },\n    };\n  }\n\n  const storyResult = {\n    ...response,\n    finishedAt: getTimeNow(),\n    result: storyProgress.value,\n  };\n\n  // console.log(`story took ${new Date(storyResult.finishedAt).getTime() - new Date(storyResult.startedAt).getTime()}ms`);\n  return storyResult;\n}\n"]}

package/lib/commonjs/types/UnionToIntersection.d.ts

@@ -0,0 +1 @@
+export type UnionToIntersection<T> = (T extends unknown ? (member: T) => void : never) extends (member: infer TIntersection) => void ? TIntersection : never;

package/lib/commonjs/types/UnionToIntersection.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=UnionToIntersection.js.map

package/lib/commonjs/types/UnionToIntersection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnionToIntersection.js","sourceRoot":"","sources":["../../../src/types/UnionToIntersection.ts"],"names":[],"mappings":"","sourcesContent":["// Standard union-to-intersection: distributing T into a contravariant (parameter)\n// position makes inference produce the intersection of the union's members.\nexport type UnionToIntersection<T> = (T extends unknown ? (member: T) => void : never) extends (member: infer TIntersection) => void\n  ? TIntersection\n  : never;\n"]}

package/lib/commonjs/types/index.d.ts

@@ -30,4 +30,5 @@ export * from './ScheduledEvent';
 export * from './StorySession';
 export * from './StreamRegistry';
 export * from './UnboundLogicStory';
+export * from './UnionToIntersection';
 export * from './utils';

package/lib/commonjs/types/index.js

@@ -46,5 +46,6 @@ __exportStar(require("./ScheduledEvent"), exports);
 __exportStar(require("./StorySession"), exports);
 __exportStar(require("./StreamRegistry"), exports);
 __exportStar(require("./UnboundLogicStory"), exports);
+__exportStar(require("./UnionToIntersection"), exports);
 __exportStar(require("./utils"), exports);
 //# sourceMappingURL=index.js.map

package/lib/commonjs/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,kDAAgC;AAChC,oDAAkC;AAClC,wDAAsC;AACtC,uDAAqC;AACrC,qDAAmC;AACnC,6DAA2C;AAC3C,qDAAmC;AACnC,gDAA8B;AAC9B,wDAAsC;AACtC,kDAAgC;AAChC,iDAA+B;AAC/B,gDAA8B;AAC9B,2DAAyC;AACzC,0CAAwB;AACxB,iDAA+B;AAC/B,2CAAyB;AACzB,0DAAwC;AACxC,6CAA2B;AAC3B,kDAAgC;AAChC,yDAAuC;AACvC,sDAAoC;AACpC,uDAAqC;AACrC,mDAAiC;AACjC,8CAA4B;AAC5B,iDAA+B;AAC/B,+CAA6B;AAC7B,gDAA8B;AAC9B,mDAAiC;AACjC,iDAA+B;AAC/B,mDAAiC;AACjC,sDAAoC;AACpC,0CAAwB","sourcesContent":["export * from './Action';\nexport * from './authChallenge';\nexport * from './BoundLogicStory';\nexport * from './ConfigUrlDefinition';\nexport * from './CrossModuleMessage';\nexport * from './CrossModuleOwner';\nexport * from './CrossServiceResourceName';\nexport * from './DecomposedString';\nexport * from './DeployEvent';\nexport * from './DynamicModuleLoader';\nexport * from './ErrorTypeEnum';\nexport * from './EventMessage';\nexport * from './ExcludeKeys';\nexport * from './FullyQualifiedResource';\nexport * from './KeyOf';\nexport * from './LogLevelEnum';\nexport * from './Lookup';\nexport * from './NotifyErrorQueueEvent';\nexport * from './Nullable';\nexport * from './QPQBinaryData';\nexport * from './QpqContextIdentifier';\nexport * from './QpqExecutionTrace';\nexport * from './QpqFunctionRuntime';\nexport * from './QpqIsoDateTime';\nexport * from './QpqLogger';\nexport * from './QpqPagedData';\nexport * from './QueueEvent';\nexport * from './Readonlyify';\nexport * from './ScheduledEvent';\nexport * from './StorySession';\nexport * from './StreamRegistry';\nexport * from './UnboundLogicStory';\nexport * from './utils';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,kDAAgC;AAChC,oDAAkC;AAClC,wDAAsC;AACtC,uDAAqC;AACrC,qDAAmC;AACnC,6DAA2C;AAC3C,qDAAmC;AACnC,gDAA8B;AAC9B,wDAAsC;AACtC,kDAAgC;AAChC,iDAA+B;AAC/B,gDAA8B;AAC9B,2DAAyC;AACzC,0CAAwB;AACxB,iDAA+B;AAC/B,2CAAyB;AACzB,0DAAwC;AACxC,6CAA2B;AAC3B,kDAAgC;AAChC,yDAAuC;AACvC,sDAAoC;AACpC,uDAAqC;AACrC,mDAAiC;AACjC,8CAA4B;AAC5B,iDAA+B;AAC/B,+CAA6B;AAC7B,gDAA8B;AAC9B,mDAAiC;AACjC,iDAA+B;AAC/B,mDAAiC;AACjC,sDAAoC;AACpC,wDAAsC;AACtC,0CAAwB","sourcesContent":["export * from './Action';\nexport * from './authChallenge';\nexport * from './BoundLogicStory';\nexport * from './ConfigUrlDefinition';\nexport * from './CrossModuleMessage';\nexport * from './CrossModuleOwner';\nexport * from './CrossServiceResourceName';\nexport * from './DecomposedString';\nexport * from './DeployEvent';\nexport * from './DynamicModuleLoader';\nexport * from './ErrorTypeEnum';\nexport * from './EventMessage';\nexport * from './ExcludeKeys';\nexport * from './FullyQualifiedResource';\nexport * from './KeyOf';\nexport * from './LogLevelEnum';\nexport * from './Lookup';\nexport * from './NotifyErrorQueueEvent';\nexport * from './Nullable';\nexport * from './QPQBinaryData';\nexport * from './QpqContextIdentifier';\nexport * from './QpqExecutionTrace';\nexport * from './QpqFunctionRuntime';\nexport * from './QpqIsoDateTime';\nexport * from './QpqLogger';\nexport * from './QpqPagedData';\nexport * from './QueueEvent';\nexport * from './Readonlyify';\nexport * from './ScheduledEvent';\nexport * from './StorySession';\nexport * from './StreamRegistry';\nexport * from './UnboundLogicStory';\nexport * from './UnionToIntersection';\nexport * from './utils';\n"]}

package/lib/esm/actions/file/FileGenerateTemporaryUploadSecureUrlActionRequester.d.ts

@@ -5,4 +5,5 @@ export declare const FileGenerateTemporaryUploadSecureUrlErrorTypeEnum: {
 };
 export declare function askFileGenerateTemporaryUploadSecureUrl(drive: string, filepath: string, expirationMs: number, advancedOptions?: {
     contentType?: FileGenerateTemporaryUploadSecureUrlActionPayload['contentType'];
+    contentDisposition?: FileGenerateTemporaryUploadSecureUrlActionPayload['contentDisposition'];
 }, scope?: string): FileGenerateTemporaryUploadSecureUrlActionRequester;

package/lib/esm/actions/file/FileGenerateTemporaryUploadSecureUrlActionRequester.js

@@ -12,6 +12,7 @@ export function* askFileGenerateTemporaryUploadSecureUrl(drive, filepath, expira
             filepath,
             expirationMs,
             contentType: advancedOptions?.contentType,
+            contentDisposition: advancedOptions?.contentDisposition,
             // maxSizeBytes: advancedOptions?.maxSizeBytes,
             scope,
         },

package/lib/esm/actions/file/FileGenerateTemporaryUploadSecureUrlActionRequester.js.map

@@ -1 +1 @@
-{"version":3,"file":"FileGenerateTemporaryUploadSecureUrlActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/file/FileGenerateTemporaryUploadSecureUrlActionRequester.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAMlD,MAAM,CAAC,MAAM,iDAAiD,GAAG,wBAAwB,CAAC,cAAc,CAAC,gCAAgC,EAAE;IACzI,mBAAmB,EAAE,uDAAuD;IAC5E,cAAc,EAAE,2CAA2C;CAC5D,CAAC,CAAC;AAEH,MAAM,SAAS,CAAC,CAAC,uCAAuC,CACtD,KAAa,EACb,QAAgB,EAChB,YAAoB,EACpB,eAGC,EACD,KAAc;IAEd,OAAO,MAAM;QACX,IAAI,EAAE,cAAc,CAAC,gCAAgC;QACrD,OAAO,EAAE;YACP,KAAK;YACL,QAAQ;YACR,YAAY;YACZ,WAAW,EAAE,eAAe,EAAE,WAAW;YACzC,+CAA+C;YAC/C,KAAK;SACN;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createErrorEnumForAction } from '../../types';\nimport { FileActionType } from './FileActionType';\nimport {\n  FileGenerateTemporaryUploadSecureUrlActionPayload,\n  FileGenerateTemporaryUploadSecureUrlActionRequester,\n} from './FileGenerateTemporaryUploadSecureUrlActionTypes';\n\nexport const FileGenerateTemporaryUploadSecureUrlErrorTypeEnum = createErrorEnumForAction(FileActionType.GenerateTemporaryUploadSecureUrl, [\n  'ExpirationTooLong', // requested expiry exceeds max length of time possible\n  'InvalidScope', // scope is not a valid single path segment\n]);\n\nexport function* askFileGenerateTemporaryUploadSecureUrl(\n  drive: string,\n  filepath: string,\n  expirationMs: number,\n  advancedOptions?: {\n    contentType?: FileGenerateTemporaryUploadSecureUrlActionPayload['contentType'];\n    // maxSizeBytes?: FileGenerateTemporaryUploadSecureUrlActionPayload['maxSizeBytes']\n  },\n  scope?: string,\n): FileGenerateTemporaryUploadSecureUrlActionRequester {\n  return yield {\n    type: FileActionType.GenerateTemporaryUploadSecureUrl,\n    payload: {\n      drive,\n      filepath,\n      expirationMs,\n      contentType: advancedOptions?.contentType,\n      // maxSizeBytes: advancedOptions?.maxSizeBytes,\n      scope,\n    },\n  };\n}\n"]}
+{"version":3,"file":"FileGenerateTemporaryUploadSecureUrlActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/file/FileGenerateTemporaryUploadSecureUrlActionRequester.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAMlD,MAAM,CAAC,MAAM,iDAAiD,GAAG,wBAAwB,CAAC,cAAc,CAAC,gCAAgC,EAAE;IACzI,mBAAmB,EAAE,uDAAuD;IAC5E,cAAc,EAAE,2CAA2C;CAC5D,CAAC,CAAC;AAEH,MAAM,SAAS,CAAC,CAAC,uCAAuC,CACtD,KAAa,EACb,QAAgB,EAChB,YAAoB,EACpB,eAIC,EACD,KAAc;IAEd,OAAO,MAAM;QACX,IAAI,EAAE,cAAc,CAAC,gCAAgC;QACrD,OAAO,EAAE;YACP,KAAK;YACL,QAAQ;YACR,YAAY;YACZ,WAAW,EAAE,eAAe,EAAE,WAAW;YACzC,kBAAkB,EAAE,eAAe,EAAE,kBAAkB;YACvD,+CAA+C;YAC/C,KAAK;SACN;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createErrorEnumForAction } from '../../types';\nimport { FileActionType } from './FileActionType';\nimport {\n  FileGenerateTemporaryUploadSecureUrlActionPayload,\n  FileGenerateTemporaryUploadSecureUrlActionRequester,\n} from './FileGenerateTemporaryUploadSecureUrlActionTypes';\n\nexport const FileGenerateTemporaryUploadSecureUrlErrorTypeEnum = createErrorEnumForAction(FileActionType.GenerateTemporaryUploadSecureUrl, [\n  'ExpirationTooLong', // requested expiry exceeds max length of time possible\n  'InvalidScope', // scope is not a valid single path segment\n]);\n\nexport function* askFileGenerateTemporaryUploadSecureUrl(\n  drive: string,\n  filepath: string,\n  expirationMs: number,\n  advancedOptions?: {\n    contentType?: FileGenerateTemporaryUploadSecureUrlActionPayload['contentType'];\n    contentDisposition?: FileGenerateTemporaryUploadSecureUrlActionPayload['contentDisposition'];\n    // maxSizeBytes?: FileGenerateTemporaryUploadSecureUrlActionPayload['maxSizeBytes']\n  },\n  scope?: string,\n): FileGenerateTemporaryUploadSecureUrlActionRequester {\n  return yield {\n    type: FileActionType.GenerateTemporaryUploadSecureUrl,\n    payload: {\n      drive,\n      filepath,\n      expirationMs,\n      contentType: advancedOptions?.contentType,\n      contentDisposition: advancedOptions?.contentDisposition,\n      // maxSizeBytes: advancedOptions?.maxSizeBytes,\n      scope,\n    },\n  };\n}\n"]}

package/lib/esm/actions/file/FileGenerateTemporaryUploadSecureUrlActionTypes.d.ts

@@ -5,6 +5,7 @@ export interface FileGenerateTemporaryUploadSecureUrlActionPayload {
     filepath: string;
     expirationMs: number;
     contentType?: string;
+    contentDisposition?: string;
     scope?: string;
 }
 export interface FileGenerateTemporaryUploadSecureUrlAction extends Action<FileGenerateTemporaryUploadSecureUrlActionPayload> {

package/lib/esm/actions/file/FileGenerateTemporaryUploadSecureUrlActionTypes.js.map

@@ -1 +1 @@
-{"version":3,"file":"FileGenerateTemporaryUploadSecureUrlActionTypes.js","sourceRoot":"","sources":["../../../../src/actions/file/FileGenerateTemporaryUploadSecureUrlActionTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { Action, ActionProcessor, ActionRequester } from '../../types/Action';\nimport { FileActionType } from './FileActionType';\n\n// Payload\nexport interface FileGenerateTemporaryUploadSecureUrlActionPayload {\n  drive: string;\n  filepath: string;\n  expirationMs: number;\n  // maxSizeBytes?: number;\n  contentType?: string;\n  scope?: string;\n}\n\n// Action\nexport interface FileGenerateTemporaryUploadSecureUrlAction extends Action<FileGenerateTemporaryUploadSecureUrlActionPayload> {\n  type: FileActionType.GenerateTemporaryUploadSecureUrl;\n  payload: FileGenerateTemporaryUploadSecureUrlActionPayload;\n}\n\n// Function Types\nexport type FileGenerateTemporaryUploadSecureUrlActionProcessor = ActionProcessor<FileGenerateTemporaryUploadSecureUrlAction, string>;\nexport type FileGenerateTemporaryUploadSecureUrlActionRequester = ActionRequester<FileGenerateTemporaryUploadSecureUrlAction, string>;\n"]}
+{"version":3,"file":"FileGenerateTemporaryUploadSecureUrlActionTypes.js","sourceRoot":"","sources":["../../../../src/actions/file/FileGenerateTemporaryUploadSecureUrlActionTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { Action, ActionProcessor, ActionRequester } from '../../types/Action';\nimport { FileActionType } from './FileActionType';\n\n// Payload\nexport interface FileGenerateTemporaryUploadSecureUrlActionPayload {\n  drive: string;\n  filepath: string;\n  expirationMs: number;\n  // maxSizeBytes?: number;\n  contentType?: string;\n  // Content-Disposition to bake into the upload so the stored object serves with it (e.g. 'inline'\n  // so a PDF previews in an <iframe> instead of force-downloading). On S3 it is signed into the PUT\n  // (the client must send the matching header); the dev store persists it as sidecar metadata.\n  contentDisposition?: string;\n  scope?: string;\n}\n\n// Action\nexport interface FileGenerateTemporaryUploadSecureUrlAction extends Action<FileGenerateTemporaryUploadSecureUrlActionPayload> {\n  type: FileActionType.GenerateTemporaryUploadSecureUrl;\n  payload: FileGenerateTemporaryUploadSecureUrlActionPayload;\n}\n\n// Function Types\nexport type FileGenerateTemporaryUploadSecureUrlActionProcessor = ActionProcessor<FileGenerateTemporaryUploadSecureUrlAction, string>;\nexport type FileGenerateTemporaryUploadSecureUrlActionRequester = ActionRequester<FileGenerateTemporaryUploadSecureUrlAction, string>;\n"]}

package/lib/esm/actions/userDirectory/UserDirectoryActionType.d.ts

@@ -6,6 +6,8 @@ export declare enum UserDirectoryActionType {
     ForgotPassword = "@quidproquo-core/UserDirectory/ForgotPassword",
     ConfirmForgotPassword = "@quidproquo-core/UserDirectory/ConfirmForgotPassword",
     RefreshToken = "@quidproquo-core/UserDirectory/RefreshToken",
+    SignOutUser = "@quidproquo-core/UserDirectory/SignOutUser",
+    RevokeRefreshToken = "@quidproquo-core/UserDirectory/RevokeRefreshToken",
     RequestEmailVerification = "@quidproquo-core/UserDirectory/RequestEmailVerification",
     ConfirmEmailVerification = "@quidproquo-core/UserDirectory/ConfirmEmailVerification",
     ReadAccessToken = "@quidproquo-core/UserDirectory/ReadAccessToken",

package/lib/esm/actions/userDirectory/UserDirectoryActionType.js

@@ -5,6 +5,8 @@ export var UserDirectoryActionType;
     UserDirectoryActionType["ForgotPassword"] = "@quidproquo-core/UserDirectory/ForgotPassword";
     UserDirectoryActionType["ConfirmForgotPassword"] = "@quidproquo-core/UserDirectory/ConfirmForgotPassword";
     UserDirectoryActionType["RefreshToken"] = "@quidproquo-core/UserDirectory/RefreshToken";
+    UserDirectoryActionType["SignOutUser"] = "@quidproquo-core/UserDirectory/SignOutUser";
+    UserDirectoryActionType["RevokeRefreshToken"] = "@quidproquo-core/UserDirectory/RevokeRefreshToken";
     UserDirectoryActionType["RequestEmailVerification"] = "@quidproquo-core/UserDirectory/RequestEmailVerification";
     UserDirectoryActionType["ConfirmEmailVerification"] = "@quidproquo-core/UserDirectory/ConfirmEmailVerification";
     UserDirectoryActionType["ReadAccessToken"] = "@quidproquo-core/UserDirectory/ReadAccessToken";

package/lib/esm/actions/userDirectory/UserDirectoryActionType.js.map

@@ -1 +1 @@
-{"version":3,"file":"UserDirectoryActionType.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/UserDirectoryActionType.ts"],"names":[],"mappings":"AAGA,MAAM,CAAN,IAAY,uBAoBX;AApBD,WAAY,uBAAuB;IACjC,mFAAwD,CAAA;IACxD,+FAAoE,CAAA;IACpE,2FAAgE,CAAA;IAChE,yGAA8E,CAAA;IAC9E,uFAA4D,CAAA;IAC5D,+GAAoF,CAAA;IACpF,+GAAoF,CAAA;IACpF,6FAAkE,CAAA;IAClE,2FAAgE,CAAA;IAChE,iGAAsE,CAAA;IACtE,2GAAgF,CAAA;IAChF,2GAAgF,CAAA;IAChF,iGAAsE,CAAA;IACtE,iHAAsF,CAAA;IACtF,iGAAsE,CAAA;IACtE,2FAAgE,CAAA;IAChE,qFAA0D,CAAA;IAC1D,+EAAoD,CAAA;IACpD,qGAA0E,CAAA;AAC5E,CAAC,EApBW,uBAAuB,KAAvB,uBAAuB,QAoBlC","sourcesContent":["import { QpqIsoDateTime } from '../../types/QpqIsoDateTime';\nimport { AuthenticateUserChallenge } from './types';\n\nexport enum UserDirectoryActionType {\n  CreateUser = '@quidproquo-core/UserDirectory/CreateUser',\n  AuthenticateUser = '@quidproquo-core/UserDirectory/AuthenticateUser',\n  ForgotPassword = '@quidproquo-core/UserDirectory/ForgotPassword',\n  ConfirmForgotPassword = '@quidproquo-core/UserDirectory/ConfirmForgotPassword',\n  RefreshToken = '@quidproquo-core/UserDirectory/RefreshToken',\n  RequestEmailVerification = '@quidproquo-core/UserDirectory/RequestEmailVerification',\n  ConfirmEmailVerification = '@quidproquo-core/UserDirectory/ConfirmEmailVerification',\n  ReadAccessToken = '@quidproquo-core/UserDirectory/ReadAccessToken',\n  SetAccessToken = '@quidproquo-core/UserDirectory/SetAccessToken',\n  DecodeAccessToken = '@quidproquo-core/UserDirectory/DecodeAccessToken',\n  RespondToAuthChallenge = '@quidproquo-core/UserDirectory/RespondToAuthChallenge',\n  AssociateSoftwareToken = '@quidproquo-core/UserDirectory/AssociateSoftwareToken',\n  GetUserAttributes = '@quidproquo-core/UserDirectory/GetUserAttributes',\n  GetUserAttributesByUserId = '@quidproquo-core/UserDirectory/GetUserAttributesByUserId',\n  SetUserAttributes = '@quidproquo-core/UserDirectory/SetUserAttributes',\n  ChangePassword = '@quidproquo-core/UserDirectory/ChangePassword',\n  SetPassword = '@quidproquo-core/UserDirectory/SetPassword',\n  GetUsers = '@quidproquo-core/UserDirectory/GetUsers',\n  GetUsersByAttribute = '@quidproquo-core/UserDirectory/GetUsersByAttribute',\n}\n\nexport interface AuthenticationInfo {\n  accessToken?: string;\n  expirationDurationInSeconds?: number;\n  expiresAt?: QpqIsoDateTime;\n  idToken?: string;\n  refreshToken?: string;\n  tokenType?: string;\n}\n\nexport interface AuthenticationDeliveryDetails {\n  attributeName: string;\n  deliveryMedium: 'EMAIL' | 'SMS';\n  destination: string;\n}\n\nexport interface AuthenticateUserResponse {\n  challenge: AuthenticateUserChallenge;\n  challengeParameters?: Record<string, string>;\n  session?: string;\n\n  authenticationInfo?: AuthenticationInfo;\n}\n\nexport interface UserAttributes {\n  /** The user's email address */\n  email?: string;\n  /** Indicates whether the user's email address has been verified */\n  emailVerified?: boolean;\n  /** The user's unique identifier */\n  userId?: string;\n  /** The user's postal address */\n  address?: string;\n  /** The user's date of birth (YYYY-MM-DD format) */\n  birthDate?: string;\n  /** The user's last name or surname */\n  familyName?: string;\n  /** The user's gender (e.g., \"male\", \"female\", \"other\") */\n  gender?: string;\n  /** The user's first name or given name */\n  givenName?: string;\n  /** The user's preferred locale (e.g., \"en-US\", \"fr-FR\") */\n  locale?: string;\n  /** The user's middle name */\n  middleName?: string;\n  /** The user's full name */\n  name?: string;\n  /** The user's nickname or alias */\n  nickname?: string;\n  /** The user's phone number (in E.164 format, e.g., \"+1-555-123-4567\") */\n  phoneNumber?: string;\n  /** The URL of the user's profile picture */\n  picture?: string;\n  /** The user's preferred username, if different from the given name */\n  preferredUsername?: string;\n  /** The URL of the user's profile page */\n  profile?: string;\n  /** The URL of the user's personal website or blog */\n  website?: string;\n  /** The user's timezone (e.g., \"America/Los_Angeles\", \"Europe/London\") */\n  zoneInfo?: string;\n}\n"]}
+{"version":3,"file":"UserDirectoryActionType.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/UserDirectoryActionType.ts"],"names":[],"mappings":"AAGA,MAAM,CAAN,IAAY,uBAsBX;AAtBD,WAAY,uBAAuB;IACjC,mFAAwD,CAAA;IACxD,+FAAoE,CAAA;IACpE,2FAAgE,CAAA;IAChE,yGAA8E,CAAA;IAC9E,uFAA4D,CAAA;IAC5D,qFAA0D,CAAA;IAC1D,mGAAwE,CAAA;IACxE,+GAAoF,CAAA;IACpF,+GAAoF,CAAA;IACpF,6FAAkE,CAAA;IAClE,2FAAgE,CAAA;IAChE,iGAAsE,CAAA;IACtE,2GAAgF,CAAA;IAChF,2GAAgF,CAAA;IAChF,iGAAsE,CAAA;IACtE,iHAAsF,CAAA;IACtF,iGAAsE,CAAA;IACtE,2FAAgE,CAAA;IAChE,qFAA0D,CAAA;IAC1D,+EAAoD,CAAA;IACpD,qGAA0E,CAAA;AAC5E,CAAC,EAtBW,uBAAuB,KAAvB,uBAAuB,QAsBlC","sourcesContent":["import { QpqIsoDateTime } from '../../types/QpqIsoDateTime';\nimport { AuthenticateUserChallenge } from './types';\n\nexport enum UserDirectoryActionType {\n  CreateUser = '@quidproquo-core/UserDirectory/CreateUser',\n  AuthenticateUser = '@quidproquo-core/UserDirectory/AuthenticateUser',\n  ForgotPassword = '@quidproquo-core/UserDirectory/ForgotPassword',\n  ConfirmForgotPassword = '@quidproquo-core/UserDirectory/ConfirmForgotPassword',\n  RefreshToken = '@quidproquo-core/UserDirectory/RefreshToken',\n  SignOutUser = '@quidproquo-core/UserDirectory/SignOutUser',\n  RevokeRefreshToken = '@quidproquo-core/UserDirectory/RevokeRefreshToken',\n  RequestEmailVerification = '@quidproquo-core/UserDirectory/RequestEmailVerification',\n  ConfirmEmailVerification = '@quidproquo-core/UserDirectory/ConfirmEmailVerification',\n  ReadAccessToken = '@quidproquo-core/UserDirectory/ReadAccessToken',\n  SetAccessToken = '@quidproquo-core/UserDirectory/SetAccessToken',\n  DecodeAccessToken = '@quidproquo-core/UserDirectory/DecodeAccessToken',\n  RespondToAuthChallenge = '@quidproquo-core/UserDirectory/RespondToAuthChallenge',\n  AssociateSoftwareToken = '@quidproquo-core/UserDirectory/AssociateSoftwareToken',\n  GetUserAttributes = '@quidproquo-core/UserDirectory/GetUserAttributes',\n  GetUserAttributesByUserId = '@quidproquo-core/UserDirectory/GetUserAttributesByUserId',\n  SetUserAttributes = '@quidproquo-core/UserDirectory/SetUserAttributes',\n  ChangePassword = '@quidproquo-core/UserDirectory/ChangePassword',\n  SetPassword = '@quidproquo-core/UserDirectory/SetPassword',\n  GetUsers = '@quidproquo-core/UserDirectory/GetUsers',\n  GetUsersByAttribute = '@quidproquo-core/UserDirectory/GetUsersByAttribute',\n}\n\nexport interface AuthenticationInfo {\n  accessToken?: string;\n  expirationDurationInSeconds?: number;\n  expiresAt?: QpqIsoDateTime;\n  idToken?: string;\n  refreshToken?: string;\n  tokenType?: string;\n}\n\nexport interface AuthenticationDeliveryDetails {\n  attributeName: string;\n  deliveryMedium: 'EMAIL' | 'SMS';\n  destination: string;\n}\n\nexport interface AuthenticateUserResponse {\n  challenge: AuthenticateUserChallenge;\n  challengeParameters?: Record<string, string>;\n  session?: string;\n\n  authenticationInfo?: AuthenticationInfo;\n}\n\nexport interface UserAttributes {\n  /** The user's email address */\n  email?: string;\n  /** Indicates whether the user's email address has been verified */\n  emailVerified?: boolean;\n  /** The user's unique identifier */\n  userId?: string;\n  /** The user's postal address */\n  address?: string;\n  /** The user's date of birth (YYYY-MM-DD format) */\n  birthDate?: string;\n  /** The user's last name or surname */\n  familyName?: string;\n  /** The user's gender (e.g., \"male\", \"female\", \"other\") */\n  gender?: string;\n  /** The user's first name or given name */\n  givenName?: string;\n  /** The user's preferred locale (e.g., \"en-US\", \"fr-FR\") */\n  locale?: string;\n  /** The user's middle name */\n  middleName?: string;\n  /** The user's full name */\n  name?: string;\n  /** The user's nickname or alias */\n  nickname?: string;\n  /** The user's phone number (in E.164 format, e.g., \"+1-555-123-4567\") */\n  phoneNumber?: string;\n  /** The URL of the user's profile picture */\n  picture?: string;\n  /** The user's preferred username, if different from the given name */\n  preferredUsername?: string;\n  /** The URL of the user's profile page */\n  profile?: string;\n  /** The URL of the user's personal website or blog */\n  website?: string;\n  /** The user's timezone (e.g., \"America/Los_Angeles\", \"Europe/London\") */\n  zoneInfo?: string;\n}\n"]}

package/lib/esm/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionRequester.d.ts

@@ -0,0 +1,6 @@
+import { UserDirectoryRevokeRefreshTokenActionRequester } from './UserDirectoryRevokeRefreshTokenActionTypes';
+export declare const UserDirectoryRevokeRefreshTokenErrorTypeEnum: {
+    Unauthorized: string;
+    LimitExceeded: string;
+};
+export declare function askUserDirectoryRevokeRefreshToken(userDirectoryName: string, refreshToken: string): UserDirectoryRevokeRefreshTokenActionRequester;

package/lib/esm/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionRequester.js

@@ -0,0 +1,19 @@
+import { createErrorEnumForAction } from '../../types';
+import { UserDirectoryActionType } from './UserDirectoryActionType';
+export const UserDirectoryRevokeRefreshTokenErrorTypeEnum = createErrorEnumForAction(UserDirectoryActionType.RevokeRefreshToken, [
+    'Unauthorized', // the refresh token is invalid/already revoked, or revocation is disabled on the app client
+    'LimitExceeded', // too many attempts; the caller should back off and retry later
+]);
+// Revokes a SINGLE refresh token (and every access token minted from it) — the "log out
+// this device" primitive. Unlike SignOutUser (which revokes all of a user's sessions), this
+// targets exactly the session that holds this refresh token, so other devices stay signed in.
+export function* askUserDirectoryRevokeRefreshToken(userDirectoryName, refreshToken) {
+    return yield {
+        type: UserDirectoryActionType.RevokeRefreshToken,
+        payload: {
+            userDirectoryName,
+            refreshToken,
+        },
+    };
+}
+//# sourceMappingURL=UserDirectoryRevokeRefreshTokenActionRequester.js.map

package/lib/esm/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionRequester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserDirectoryRevokeRefreshTokenActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionRequester.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,MAAM,CAAC,MAAM,4CAA4C,GAAG,wBAAwB,CAAC,uBAAuB,CAAC,kBAAkB,EAAE;IAC/H,cAAc,EAAE,4FAA4F;IAC5G,eAAe,EAAE,gEAAgE;CAClF,CAAC,CAAC;AAEH,wFAAwF;AACxF,4FAA4F;AAC5F,8FAA8F;AAC9F,MAAM,SAAS,CAAC,CAAC,kCAAkC,CAAC,iBAAyB,EAAE,YAAoB;IACjG,OAAO,MAAM;QACX,IAAI,EAAE,uBAAuB,CAAC,kBAAkB;QAChD,OAAO,EAAE;YACP,iBAAiB;YAEjB,YAAY;SACb;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createErrorEnumForAction } from '../../types';\nimport { UserDirectoryActionType } from './UserDirectoryActionType';\nimport { UserDirectoryRevokeRefreshTokenActionRequester } from './UserDirectoryRevokeRefreshTokenActionTypes';\n\nexport const UserDirectoryRevokeRefreshTokenErrorTypeEnum = createErrorEnumForAction(UserDirectoryActionType.RevokeRefreshToken, [\n  'Unauthorized', // the refresh token is invalid/already revoked, or revocation is disabled on the app client\n  'LimitExceeded', // too many attempts; the caller should back off and retry later\n]);\n\n// Revokes a SINGLE refresh token (and every access token minted from it) — the \"log out\n// this device\" primitive. Unlike SignOutUser (which revokes all of a user's sessions), this\n// targets exactly the session that holds this refresh token, so other devices stay signed in.\nexport function* askUserDirectoryRevokeRefreshToken(userDirectoryName: string, refreshToken: string): UserDirectoryRevokeRefreshTokenActionRequester {\n  return yield {\n    type: UserDirectoryActionType.RevokeRefreshToken,\n    payload: {\n      userDirectoryName,\n\n      refreshToken,\n    },\n  };\n}\n"]}

package/lib/esm/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionTypes.d.ts

@@ -0,0 +1,12 @@
+import { Action, ActionProcessor, ActionRequester } from '../../types/Action';
+import { UserDirectoryActionType } from './UserDirectoryActionType';
+export interface UserDirectoryRevokeRefreshTokenActionPayload {
+    userDirectoryName: string;
+    refreshToken: string;
+}
+export interface UserDirectoryRevokeRefreshTokenAction extends Action<UserDirectoryRevokeRefreshTokenActionPayload> {
+    type: UserDirectoryActionType.RevokeRefreshToken;
+    payload: UserDirectoryRevokeRefreshTokenActionPayload;
+}
+export type UserDirectoryRevokeRefreshTokenActionProcessor = ActionProcessor<UserDirectoryRevokeRefreshTokenAction, void>;
+export type UserDirectoryRevokeRefreshTokenActionRequester = ActionRequester<UserDirectoryRevokeRefreshTokenAction, void>;

package/lib/esm/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionTypes.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=UserDirectoryRevokeRefreshTokenActionTypes.js.map

package/lib/esm/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserDirectoryRevokeRefreshTokenActionTypes.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/UserDirectoryRevokeRefreshTokenActionTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { Action, ActionProcessor, ActionRequester } from '../../types/Action';\nimport { UserDirectoryActionType } from './UserDirectoryActionType';\n\n// Payload\nexport interface UserDirectoryRevokeRefreshTokenActionPayload {\n  userDirectoryName: string;\n\n  refreshToken: string;\n}\n\n// Action\nexport interface UserDirectoryRevokeRefreshTokenAction extends Action<UserDirectoryRevokeRefreshTokenActionPayload> {\n  type: UserDirectoryActionType.RevokeRefreshToken;\n  payload: UserDirectoryRevokeRefreshTokenActionPayload;\n}\n\n// Function Types\nexport type UserDirectoryRevokeRefreshTokenActionProcessor = ActionProcessor<UserDirectoryRevokeRefreshTokenAction, void>;\nexport type UserDirectoryRevokeRefreshTokenActionRequester = ActionRequester<UserDirectoryRevokeRefreshTokenAction, void>;\n"]}

package/lib/esm/actions/userDirectory/UserDirectorySignOutUserActionRequester.d.ts

@@ -0,0 +1,6 @@
+import { UserDirectorySignOutUserActionRequester } from './UserDirectorySignOutUserActionTypes';
+export declare const UserDirectorySignOutUserErrorTypeEnum: {
+    Unauthorized: string;
+    LimitExceeded: string;
+};
+export declare function askUserDirectorySignOutUser(accessToken: string): UserDirectorySignOutUserActionRequester;

package/lib/esm/actions/userDirectory/UserDirectorySignOutUserActionRequester.js

@@ -0,0 +1,19 @@
+import { createErrorEnumForAction } from '../../types';
+import { UserDirectoryActionType } from './UserDirectoryActionType';
+export const UserDirectorySignOutUserErrorTypeEnum = createErrorEnumForAction(UserDirectoryActionType.SignOutUser, [
+    'Unauthorized', // the access token is missing/invalid/expired — there is nothing to revoke
+    'LimitExceeded', // too many attempts; the caller should back off and retry later
+]);
+// Globally signs the user out: revokes EVERY refresh token issued to the owner of this
+// access token, so a stolen/persisted refresh token stops working (logout / compromise
+// response). Access tokens already minted remain valid until they expire (stateless JWTs),
+// so keep the access-token validity short.
+export function* askUserDirectorySignOutUser(accessToken) {
+    return yield {
+        type: UserDirectoryActionType.SignOutUser,
+        payload: {
+            accessToken,
+        },
+    };
+}
+//# sourceMappingURL=UserDirectorySignOutUserActionRequester.js.map

package/lib/esm/actions/userDirectory/UserDirectorySignOutUserActionRequester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserDirectorySignOutUserActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/UserDirectorySignOutUserActionRequester.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,MAAM,CAAC,MAAM,qCAAqC,GAAG,wBAAwB,CAAC,uBAAuB,CAAC,WAAW,EAAE;IACjH,cAAc,EAAE,2EAA2E;IAC3F,eAAe,EAAE,gEAAgE;CAClF,CAAC,CAAC;AAEH,uFAAuF;AACvF,uFAAuF;AACvF,2FAA2F;AAC3F,2CAA2C;AAC3C,MAAM,SAAS,CAAC,CAAC,2BAA2B,CAAC,WAAmB;IAC9D,OAAO,MAAM;QACX,IAAI,EAAE,uBAAuB,CAAC,WAAW;QACzC,OAAO,EAAE;YACP,WAAW;SACZ;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createErrorEnumForAction } from '../../types';\nimport { UserDirectoryActionType } from './UserDirectoryActionType';\nimport { UserDirectorySignOutUserActionRequester } from './UserDirectorySignOutUserActionTypes';\n\nexport const UserDirectorySignOutUserErrorTypeEnum = createErrorEnumForAction(UserDirectoryActionType.SignOutUser, [\n  'Unauthorized', // the access token is missing/invalid/expired — there is nothing to revoke\n  'LimitExceeded', // too many attempts; the caller should back off and retry later\n]);\n\n// Globally signs the user out: revokes EVERY refresh token issued to the owner of this\n// access token, so a stolen/persisted refresh token stops working (logout / compromise\n// response). Access tokens already minted remain valid until they expire (stateless JWTs),\n// so keep the access-token validity short.\nexport function* askUserDirectorySignOutUser(accessToken: string): UserDirectorySignOutUserActionRequester {\n  return yield {\n    type: UserDirectoryActionType.SignOutUser,\n    payload: {\n      accessToken,\n    },\n  };\n}\n"]}

package/lib/esm/actions/userDirectory/UserDirectorySignOutUserActionTypes.d.ts

@@ -0,0 +1,11 @@
+import { Action, ActionProcessor, ActionRequester } from '../../types/Action';
+import { UserDirectoryActionType } from './UserDirectoryActionType';
+export interface UserDirectorySignOutUserActionPayload {
+    accessToken: string;
+}
+export interface UserDirectorySignOutUserAction extends Action<UserDirectorySignOutUserActionPayload> {
+    type: UserDirectoryActionType.SignOutUser;
+    payload: UserDirectorySignOutUserActionPayload;
+}
+export type UserDirectorySignOutUserActionProcessor = ActionProcessor<UserDirectorySignOutUserAction, void>;
+export type UserDirectorySignOutUserActionRequester = ActionRequester<UserDirectorySignOutUserAction, void>;

package/lib/esm/actions/userDirectory/UserDirectorySignOutUserActionTypes.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=UserDirectorySignOutUserActionTypes.js.map

package/lib/esm/actions/userDirectory/UserDirectorySignOutUserActionTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserDirectorySignOutUserActionTypes.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/UserDirectorySignOutUserActionTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { Action, ActionProcessor, ActionRequester } from '../../types/Action';\nimport { UserDirectoryActionType } from './UserDirectoryActionType';\n\n// Payload\nexport interface UserDirectorySignOutUserActionPayload {\n  accessToken: string;\n}\n\n// Action\nexport interface UserDirectorySignOutUserAction extends Action<UserDirectorySignOutUserActionPayload> {\n  type: UserDirectoryActionType.SignOutUser;\n  payload: UserDirectorySignOutUserActionPayload;\n}\n\n// Function Types\nexport type UserDirectorySignOutUserActionProcessor = ActionProcessor<UserDirectorySignOutUserAction, void>;\nexport type UserDirectorySignOutUserActionRequester = ActionRequester<UserDirectorySignOutUserAction, void>;\n"]}

package/lib/esm/actions/userDirectory/index.d.ts

@@ -32,9 +32,13 @@ export * from './UserDirectoryRequestEmailVerificationActionRequester';
 export * from './UserDirectoryRequestEmailVerificationActionTypes';
 export * from './UserDirectoryRespondToAuthChallengeActionRequester';
 export * from './UserDirectoryRespondToAuthChallengeActionTypes';
+export * from './UserDirectoryRevokeRefreshTokenActionRequester';
+export * from './UserDirectoryRevokeRefreshTokenActionTypes';
 export * from './UserDirectorySetAccessTokenActionRequester';
 export * from './UserDirectorySetAccessTokenActionTypes';
 export * from './UserDirectorySetPasswordActionRequester';
 export * from './UserDirectorySetPasswordActionTypes';
 export * from './UserDirectorySetUserAttributesActionRequester';
 export * from './UserDirectorySetUserAttributesActionTypes';
+export * from './UserDirectorySignOutUserActionRequester';
+export * from './UserDirectorySignOutUserActionTypes';

package/lib/esm/actions/userDirectory/index.js

@@ -32,10 +32,14 @@ export * from './UserDirectoryRequestEmailVerificationActionRequester';
 export * from './UserDirectoryRequestEmailVerificationActionTypes';
 export * from './UserDirectoryRespondToAuthChallengeActionRequester';
 export * from './UserDirectoryRespondToAuthChallengeActionTypes';
+export * from './UserDirectoryRevokeRefreshTokenActionRequester';
+export * from './UserDirectoryRevokeRefreshTokenActionTypes';
 export * from './UserDirectorySetAccessTokenActionRequester';
 export * from './UserDirectorySetAccessTokenActionTypes';
 export * from './UserDirectorySetPasswordActionRequester';
 export * from './UserDirectorySetPasswordActionTypes';
 export * from './UserDirectorySetUserAttributesActionRequester';
 export * from './UserDirectorySetUserAttributesActionTypes';
+export * from './UserDirectorySignOutUserActionRequester';
+export * from './UserDirectorySignOutUserActionTypes';
 //# sourceMappingURL=index.js.map

package/lib/esm/actions/userDirectory/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sDAAsD,CAAC;AACrE,cAAc,kDAAkD,CAAC;AACjE,cAAc,gDAAgD,CAAC;AAC/D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,0CAA0C,CAAC;AACzD,cAAc,wDAAwD,CAAC;AACvE,cAAc,oDAAoD,CAAC;AACnE,cAAc,qDAAqD,CAAC;AACpE,cAAc,iDAAiD,CAAC;AAChE,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,iDAAiD,CAAC;AAChE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,0CAA0C,CAAC;AACzD,cAAc,iDAAiD,CAAC;AAChE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,yDAAyD,CAAC;AACxE,cAAc,qDAAqD,CAAC;AACpE,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,mDAAmD,CAAC;AAClE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,wCAAwC,CAAC;AACvD,cAAc,wDAAwD,CAAC;AACvE,cAAc,oDAAoD,CAAC;AACnE,cAAc,sDAAsD,CAAC;AACrE,cAAc,kDAAkD,CAAC;AACjE,cAAc,8CAA8C,CAAC;AAC7D,cAAc,0CAA0C,CAAC;AACzD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,uCAAuC,CAAC;AACtD,cAAc,iDAAiD,CAAC;AAChE,cAAc,6CAA6C,CAAC","sourcesContent":["export * from './types';\nexport * from './UserDirectoryActionType';\nexport * from './UserDirectoryAssociateSoftwareTokenActionRequester';\nexport * from './UserDirectoryAssociateSoftwareTokenActionTypes';\nexport * from './UserDirectoryAuthenticateUserActionRequester';\nexport * from './UserDirectoryAuthenticateUserActionTypes';\nexport * from './UserDirectoryChangePasswordActionRequester';\nexport * from './UserDirectoryChangePasswordActionTypes';\nexport * from './UserDirectoryConfirmEmailVerificationActionRequester';\nexport * from './UserDirectoryConfirmEmailVerificationActionTypes';\nexport * from './UserDirectoryConfirmForgotPasswordActionRequester';\nexport * from './UserDirectoryConfirmForgotPasswordActionTypes';\nexport * from './UserDirectoryCreateUserActionRequester';\nexport * from './UserDirectoryCreateUserActionTypes';\nexport * from './UserDirectoryDecodeAccessTokenActionRequester';\nexport * from './UserDirectoryDecodeAccessTokenActionTypes';\nexport * from './UserDirectoryForgotPasswordActionRequester';\nexport * from './UserDirectoryForgotPasswordActionTypes';\nexport * from './UserDirectoryGetUserAttributesActionRequester';\nexport * from './UserDirectoryGetUserAttributesActionTypes';\nexport * from './UserDirectoryGetUserAttributesByUserIdActionRequester';\nexport * from './UserDirectoryGetUserAttributesByUserIdActionTypes';\nexport * from './UserDirectoryGetUsersActionRequester';\nexport * from './UserDirectoryGetUsersActionTypes';\nexport * from './UserDirectoryGetUsersByAttributeActionRequester';\nexport * from './UserDirectoryGetUsersByAttributeActionTypes';\nexport * from './UserDirectoryReadAccessTokenActionRequester';\nexport * from './UserDirectoryReadAccessTokenActionTypes';\nexport * from './UserDirectoryRefreshTokenActionRequester';\nexport * from './UserDirectoryRefreshTokenActionTypes';\nexport * from './UserDirectoryRequestEmailVerificationActionRequester';\nexport * from './UserDirectoryRequestEmailVerificationActionTypes';\nexport * from './UserDirectoryRespondToAuthChallengeActionRequester';\nexport * from './UserDirectoryRespondToAuthChallengeActionTypes';\nexport * from './UserDirectorySetAccessTokenActionRequester';\nexport * from './UserDirectorySetAccessTokenActionTypes';\nexport * from './UserDirectorySetPasswordActionRequester';\nexport * from './UserDirectorySetPasswordActionTypes';\nexport * from './UserDirectorySetUserAttributesActionRequester';\nexport * from './UserDirectorySetUserAttributesActionTypes';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/userDirectory/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sDAAsD,CAAC;AACrE,cAAc,kDAAkD,CAAC;AACjE,cAAc,gDAAgD,CAAC;AAC/D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,0CAA0C,CAAC;AACzD,cAAc,wDAAwD,CAAC;AACvE,cAAc,oDAAoD,CAAC;AACnE,cAAc,qDAAqD,CAAC;AACpE,cAAc,iDAAiD,CAAC;AAChE,cAAc,0CAA0C,CAAC;AACzD,cAAc,sCAAsC,CAAC;AACrD,cAAc,iDAAiD,CAAC;AAChE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,0CAA0C,CAAC;AACzD,cAAc,iDAAiD,CAAC;AAChE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,yDAAyD,CAAC;AACxE,cAAc,qDAAqD,CAAC;AACpE,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,mDAAmD,CAAC;AAClE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,+CAA+C,CAAC;AAC9D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,4CAA4C,CAAC;AAC3D,cAAc,wCAAwC,CAAC;AACvD,cAAc,wDAAwD,CAAC;AACvE,cAAc,oDAAoD,CAAC;AACnE,cAAc,sDAAsD,CAAC;AACrE,cAAc,kDAAkD,CAAC;AACjE,cAAc,kDAAkD,CAAC;AACjE,cAAc,8CAA8C,CAAC;AAC7D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,0CAA0C,CAAC;AACzD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,uCAAuC,CAAC;AACtD,cAAc,iDAAiD,CAAC;AAChE,cAAc,6CAA6C,CAAC;AAC5D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,uCAAuC,CAAC","sourcesContent":["export * from './types';\nexport * from './UserDirectoryActionType';\nexport * from './UserDirectoryAssociateSoftwareTokenActionRequester';\nexport * from './UserDirectoryAssociateSoftwareTokenActionTypes';\nexport * from './UserDirectoryAuthenticateUserActionRequester';\nexport * from './UserDirectoryAuthenticateUserActionTypes';\nexport * from './UserDirectoryChangePasswordActionRequester';\nexport * from './UserDirectoryChangePasswordActionTypes';\nexport * from './UserDirectoryConfirmEmailVerificationActionRequester';\nexport * from './UserDirectoryConfirmEmailVerificationActionTypes';\nexport * from './UserDirectoryConfirmForgotPasswordActionRequester';\nexport * from './UserDirectoryConfirmForgotPasswordActionTypes';\nexport * from './UserDirectoryCreateUserActionRequester';\nexport * from './UserDirectoryCreateUserActionTypes';\nexport * from './UserDirectoryDecodeAccessTokenActionRequester';\nexport * from './UserDirectoryDecodeAccessTokenActionTypes';\nexport * from './UserDirectoryForgotPasswordActionRequester';\nexport * from './UserDirectoryForgotPasswordActionTypes';\nexport * from './UserDirectoryGetUserAttributesActionRequester';\nexport * from './UserDirectoryGetUserAttributesActionTypes';\nexport * from './UserDirectoryGetUserAttributesByUserIdActionRequester';\nexport * from './UserDirectoryGetUserAttributesByUserIdActionTypes';\nexport * from './UserDirectoryGetUsersActionRequester';\nexport * from './UserDirectoryGetUsersActionTypes';\nexport * from './UserDirectoryGetUsersByAttributeActionRequester';\nexport * from './UserDirectoryGetUsersByAttributeActionTypes';\nexport * from './UserDirectoryReadAccessTokenActionRequester';\nexport * from './UserDirectoryReadAccessTokenActionTypes';\nexport * from './UserDirectoryRefreshTokenActionRequester';\nexport * from './UserDirectoryRefreshTokenActionTypes';\nexport * from './UserDirectoryRequestEmailVerificationActionRequester';\nexport * from './UserDirectoryRequestEmailVerificationActionTypes';\nexport * from './UserDirectoryRespondToAuthChallengeActionRequester';\nexport * from './UserDirectoryRespondToAuthChallengeActionTypes';\nexport * from './UserDirectoryRevokeRefreshTokenActionRequester';\nexport * from './UserDirectoryRevokeRefreshTokenActionTypes';\nexport * from './UserDirectorySetAccessTokenActionRequester';\nexport * from './UserDirectorySetAccessTokenActionTypes';\nexport * from './UserDirectorySetPasswordActionRequester';\nexport * from './UserDirectorySetPasswordActionTypes';\nexport * from './UserDirectorySetUserAttributesActionRequester';\nexport * from './UserDirectorySetUserAttributesActionTypes';\nexport * from './UserDirectorySignOutUserActionRequester';\nexport * from './UserDirectorySignOutUserActionTypes';\n"]}

package/lib/esm/config/settings/userDirectory.d.ts

@@ -25,6 +25,7 @@ export interface QPQConfigAdvancedUserDirectorySettings extends QPQConfigAdvance
     dnsRecord?: AuthDirectoryDnsRecord;
     customAuthRuntime?: CustomAuthRuntime;
     mfa?: UserDirectoryMfaSettings;
+    accessTokenValidityMinutes?: number;
 }
 export interface UserDirectoryQPQConfigSetting extends QPQConfigSetting {
     name: string;
@@ -35,5 +36,6 @@ export interface UserDirectoryQPQConfigSetting extends QPQConfigSetting {
     dnsRecord?: AuthDirectoryDnsRecord;
     customAuthRuntime?: CustomAuthRuntime;
     mfa: UserDirectoryMfaSettings;
+    accessTokenValidityMinutes?: number;
 }
 export declare const defineUserDirectory: (name: string, options?: QPQConfigAdvancedUserDirectorySettings) => UserDirectoryQPQConfigSetting;

package/lib/esm/config/settings/userDirectory.js

@@ -24,6 +24,7 @@ export const defineUserDirectory = (name, options) => ({
     },
     dnsRecord: options?.dnsRecord,
     customAuthRuntime: options?.customAuthRuntime,
+    accessTokenValidityMinutes: options?.accessTokenValidityMinutes,
     mfa: {
         mode: options?.mfa?.mode ?? UserDirectoryMfaMode.off,
         secondFactors: options?.mfa?.secondFactors?.length ? options.mfa.secondFactors : [UserDirectoryMfaSecondFactor.totp],

package/lib/esm/config/settings/userDirectory.js.map

@@ -1 +1 @@
-{"version":3,"file":"userDirectory.js","sourceRoot":"","sources":["../../../../src/config/settings/userDirectory.ts"],"names":[],"mappings":"AACA,OAAO,EAA+C,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACrG,OAAO,EAAE,oDAAoD,EAAE,MAAM,2BAA2B,CAAC;AAQjG,MAAM,CAAN,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,mCAAW,CAAA;IACX,6CAAqB,CAAA;IACrB,6CAAqB,CAAA;AACvB,CAAC,EAJW,oBAAoB,KAApB,oBAAoB,QAI/B;AAED,MAAM,CAAN,IAAY,4BAGX;AAHD,WAAY,4BAA4B;IACtC,6CAAa,CAAA;IACb,sEAAsE;AACxE,CAAC,EAHW,4BAA4B,KAA5B,4BAA4B,QAGvC;AA2CD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAE,OAAgD,EAAiC,EAAE,CAAC,CAAC;IACrI,iBAAiB,EAAE,wBAAwB,CAAC,aAAa;IACzD,SAAS,EAAE,IAAI;IAEf,IAAI;IAEJ,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,KAAK;IAE9C,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,IAAI,KAAK;IAEtD,cAAc,EAAE;QACd,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW;QACjD,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa;QACrD,kBAAkB,EAAE,OAAO,EAAE,cAAc,EAAE,kBAAkB;KAChE;IAED,SAAS,EAAE,OAAO,EAAE,SAAS;IAC7B,iBAAiB,EAAE,OAAO,EAAE,iBAAiB;IAE7C,GAAG,EAAE;QACH,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,oBAAoB,CAAC,GAAG;QACpD,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,IAAI,CAAC;KACrH;IAED,KAAK,EAAE,oDAAoD,CAAC,OAAO,EAAE,KAAK,CAAC;CAC5E,CAAC,CAAC","sourcesContent":["import { CrossModuleOwner } from '../../types';\nimport { QPQConfigAdvancedSettings, QPQConfigSetting, QPQCoreConfigSettingType } from '../QPQConfig';\nimport { convertCrossModuleOwnerToGenericResourceNameOverride } from '../utils/crossModuleUtils';\nimport { CustomAuthRuntime, EmailTemplates } from './emailTemplates';\n\nexport type AuthDirectoryDnsRecord = {\n  subdomain: string;\n  rootDomain: string;\n};\n\nexport enum UserDirectoryMfaMode {\n  off = 'off',\n  optional = 'optional',\n  required = 'required',\n}\n\nexport enum UserDirectoryMfaSecondFactor {\n  totp = 'totp',\n  // sms = 'sms', // future — additionally needs phone + SNS role infra.\n}\n\nexport interface UserDirectoryMfaSettings {\n  mode: UserDirectoryMfaMode;\n\n  // Enabled second factors. Defaults to [totp] when omitted.\n  secondFactors?: UserDirectoryMfaSecondFactor[];\n}\n\nexport interface QPQConfigAdvancedUserDirectorySettings extends QPQConfigAdvancedSettings {\n  phoneRequired?: boolean;\n\n  selfSignUpEnabled?: boolean;\n\n  emailTemplates?: EmailTemplates;\n\n  owner?: CrossModuleOwner<'userDirectoryName'>;\n\n  dnsRecord?: AuthDirectoryDnsRecord;\n\n  customAuthRuntime?: CustomAuthRuntime;\n\n  mfa?: UserDirectoryMfaSettings;\n}\n\nexport interface UserDirectoryQPQConfigSetting extends QPQConfigSetting {\n  name: string;\n\n  phoneRequired: boolean;\n\n  selfSignUpEnabled: boolean;\n\n  emailTemplates: EmailTemplates;\n\n  owner?: CrossModuleOwner;\n\n  dnsRecord?: AuthDirectoryDnsRecord;\n\n  customAuthRuntime?: CustomAuthRuntime;\n\n  mfa: UserDirectoryMfaSettings;\n}\n\nexport const defineUserDirectory = (name: string, options?: QPQConfigAdvancedUserDirectorySettings): UserDirectoryQPQConfigSetting => ({\n  configSettingType: QPQCoreConfigSettingType.userDirectory,\n  uniqueKey: name,\n\n  name,\n\n  phoneRequired: options?.phoneRequired || false,\n\n  selfSignUpEnabled: options?.selfSignUpEnabled ?? false,\n\n  emailTemplates: {\n    verifyEmail: options?.emailTemplates?.verifyEmail,\n    resetPassword: options?.emailTemplates?.resetPassword,\n    resetPasswordAdmin: options?.emailTemplates?.resetPasswordAdmin,\n  },\n\n  dnsRecord: options?.dnsRecord,\n  customAuthRuntime: options?.customAuthRuntime,\n\n  mfa: {\n    mode: options?.mfa?.mode ?? UserDirectoryMfaMode.off,\n    secondFactors: options?.mfa?.secondFactors?.length ? options.mfa.secondFactors : [UserDirectoryMfaSecondFactor.totp],\n  },\n\n  owner: convertCrossModuleOwnerToGenericResourceNameOverride(options?.owner),\n});\n"]}
+{"version":3,"file":"userDirectory.js","sourceRoot":"","sources":["../../../../src/config/settings/userDirectory.ts"],"names":[],"mappings":"AACA,OAAO,EAA+C,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACrG,OAAO,EAAE,oDAAoD,EAAE,MAAM,2BAA2B,CAAC;AAQjG,MAAM,CAAN,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,mCAAW,CAAA;IACX,6CAAqB,CAAA;IACrB,6CAAqB,CAAA;AACvB,CAAC,EAJW,oBAAoB,KAApB,oBAAoB,QAI/B;AAED,MAAM,CAAN,IAAY,4BAGX;AAHD,WAAY,4BAA4B;IACtC,6CAAa,CAAA;IACb,sEAAsE;AACxE,CAAC,EAHW,4BAA4B,KAA5B,4BAA4B,QAGvC;AAqDD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAE,OAAgD,EAAiC,EAAE,CAAC,CAAC;IACrI,iBAAiB,EAAE,wBAAwB,CAAC,aAAa;IACzD,SAAS,EAAE,IAAI;IAEf,IAAI;IAEJ,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,KAAK;IAE9C,iBAAiB,EAAE,OAAO,EAAE,iBAAiB,IAAI,KAAK;IAEtD,cAAc,EAAE;QACd,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW;QACjD,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,aAAa;QACrD,kBAAkB,EAAE,OAAO,EAAE,cAAc,EAAE,kBAAkB;KAChE;IAED,SAAS,EAAE,OAAO,EAAE,SAAS;IAC7B,iBAAiB,EAAE,OAAO,EAAE,iBAAiB;IAE7C,0BAA0B,EAAE,OAAO,EAAE,0BAA0B;IAE/D,GAAG,EAAE;QACH,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,oBAAoB,CAAC,GAAG;QACpD,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,IAAI,CAAC;KACrH;IAED,KAAK,EAAE,oDAAoD,CAAC,OAAO,EAAE,KAAK,CAAC;CAC5E,CAAC,CAAC","sourcesContent":["import { CrossModuleOwner } from '../../types';\nimport { QPQConfigAdvancedSettings, QPQConfigSetting, QPQCoreConfigSettingType } from '../QPQConfig';\nimport { convertCrossModuleOwnerToGenericResourceNameOverride } from '../utils/crossModuleUtils';\nimport { CustomAuthRuntime, EmailTemplates } from './emailTemplates';\n\nexport type AuthDirectoryDnsRecord = {\n  subdomain: string;\n  rootDomain: string;\n};\n\nexport enum UserDirectoryMfaMode {\n  off = 'off',\n  optional = 'optional',\n  required = 'required',\n}\n\nexport enum UserDirectoryMfaSecondFactor {\n  totp = 'totp',\n  // sms = 'sms', // future — additionally needs phone + SNS role infra.\n}\n\nexport interface UserDirectoryMfaSettings {\n  mode: UserDirectoryMfaMode;\n\n  // Enabled second factors. Defaults to [totp] when omitted.\n  secondFactors?: UserDirectoryMfaSecondFactor[];\n}\n\nexport interface QPQConfigAdvancedUserDirectorySettings extends QPQConfigAdvancedSettings {\n  phoneRequired?: boolean;\n\n  selfSignUpEnabled?: boolean;\n\n  emailTemplates?: EmailTemplates;\n\n  owner?: CrossModuleOwner<'userDirectoryName'>;\n\n  dnsRecord?: AuthDirectoryDnsRecord;\n\n  customAuthRuntime?: CustomAuthRuntime;\n\n  mfa?: UserDirectoryMfaSettings;\n\n  // Access/ID token (JWT) lifetime in minutes. Shorter = a smaller window in which a\n  // revoked session's still-valid access token keeps working (access tokens are stateless\n  // and can't be revoked before expiry). Cognito allows 5–1440; omitted → Cognito default\n  // (60).\n  //\n  // Generally web apps should refresh in the few mins so this should be > 5.\n  accessTokenValidityMinutes?: number;\n}\n\nexport interface UserDirectoryQPQConfigSetting extends QPQConfigSetting {\n  name: string;\n\n  phoneRequired: boolean;\n\n  selfSignUpEnabled: boolean;\n\n  emailTemplates: EmailTemplates;\n\n  owner?: CrossModuleOwner;\n\n  dnsRecord?: AuthDirectoryDnsRecord;\n\n  customAuthRuntime?: CustomAuthRuntime;\n\n  mfa: UserDirectoryMfaSettings;\n\n  accessTokenValidityMinutes?: number;\n}\n\nexport const defineUserDirectory = (name: string, options?: QPQConfigAdvancedUserDirectorySettings): UserDirectoryQPQConfigSetting => ({\n  configSettingType: QPQCoreConfigSettingType.userDirectory,\n  uniqueKey: name,\n\n  name,\n\n  phoneRequired: options?.phoneRequired || false,\n\n  selfSignUpEnabled: options?.selfSignUpEnabled ?? false,\n\n  emailTemplates: {\n    verifyEmail: options?.emailTemplates?.verifyEmail,\n    resetPassword: options?.emailTemplates?.resetPassword,\n    resetPasswordAdmin: options?.emailTemplates?.resetPasswordAdmin,\n  },\n\n  dnsRecord: options?.dnsRecord,\n  customAuthRuntime: options?.customAuthRuntime,\n\n  accessTokenValidityMinutes: options?.accessTokenValidityMinutes,\n\n  mfa: {\n    mode: options?.mfa?.mode ?? UserDirectoryMfaMode.off,\n    secondFactors: options?.mfa?.secondFactors?.length ? options.mfa.secondFactors : [UserDirectoryMfaSecondFactor.totp],\n  },\n\n  owner: convertCrossModuleOwnerToGenericResourceNameOverride(options?.owner),\n});\n"]}

package/lib/esm/createImplementationRuntime.js

@@ -18,6 +18,14 @@ export const createImplementationRuntime = (qpqConfig, tags, getDateNow, randomG
     const moduleName = getApplicationModuleName(qpqConfig);
     const resolveStory = createRuntime(qpqConfig, {
         context: session.context,
+        // Service-local context and the caller's function globals travel into the
+        // nested implementation runtime (a within-service child: tool executor,
+        // drive file resolver, custom implementation), so stories run under it can
+        // read route/function config (e.g. the eventDoc user-directory global an
+        // AI tool needs to resolve the actor, or the tenant scope resolver). Mirrors
+        // the inline-function execute processor, which carries the same fields.
+        localContext: session.localContext,
+        functionGlobals: session.functionGlobals,
         depth: (session.depth || 0) + 1,
         decodedAccessToken: session.decodedAccessToken,
         correlation: session.correlation,

package/lib/esm/createImplementationRuntime.js.map

@@ -1 +1 @@
-{"version":3,"file":"createImplementationRuntime.js","sourceRoot":"","sources":["../../src/createImplementationRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAOL,cAAc,GAGf,MAAM,SAAS,CAAC;AAEjB,4DAA4D;AAC5D,4DAA4D;AAE5D,gFAAgF;AAChF,wFAAwF;AAExF,oGAAoG;AAEpG,8EAA8E;AAC9E,6CAA6C;AAC7C,+CAA+C;AAE/C,4IAA4I;AAC5I,+BAA+B;AAC/B,0BAA0B;AAC1B,KAAK;AAEL,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,SAAoB,EACpB,IAAc,EAEd,UAA+C,EAC/C,UAAwB,EAExB,OAAqB,EACrB,gBAAqC,EACrC,MAAiB,EACjB,mBAAwC,EACxC,cAA+B,EACG,EAAE;IACpC,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAEvD,MAAM,YAAY,GAAG,aAAa,CAChC,SAAS,EACT;QACE,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;QAC/B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,EACD,KAAK,IAAI,EAAE,CAAC,gBAAgB,EAC5B,UAAU,EACV,MAAM;IACN,0BAA0B;IAC1B,GAAG,UAAU,KAAK,UAAU,EAAE,EAAE,EAChC,cAAc,CAAC,4BAA4B,EAC3C,mBAAmB,EACnB,SAAS,EACT,IAAI,EACJ,cAAc,CACf,CAAC;IAEF,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,SAAoB,EACpB,KAAe,EACf,GAAW,EACX,2BAA+D,EAC/D,UAAwB,EACxB,UAAwB,EACrB,EAAE;IACL,MAAM,cAAc,GAA8B,KAAK,EACrD,OAAO,EACP,OAAO,EACP,mBAAmB,EACnB,MAAM,EACN,aAAa,EACb,mBAAmB,EACnB,cAAc,EACd,EAAE;QACF,MAAM,YAAY,GAAG,2BAA2B,CAC9C,SAAS,EACT,CAAC,GAAG,CAAC,EACL,UAAU,EACV,UAAU,EACV,OAAO,EACP;YACE,GAAG,mBAAmB;YACtB,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1G,EACD,MAAM,EACN,mBAAmB,EACnB,cAAc,CACf,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzD,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,OAAO,cAAmB,CAAC;AAC7B,CAAC,CAAC","sourcesContent":["import { actionResult, actionResultError } from './logic/actionLogic';\nimport { QPQConfig } from './config';\nimport { getApplicationModuleName } from './qpqCoreUtils';\nimport { createRuntime } from './runtime';\nimport {\n  ActionProcessor,\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  AnyStory,\n  DynamicModuleLoader,\n  QpqLogger,\n  QpqRuntimeType,\n  StorySession,\n  StreamRegistry,\n} from './types';\n\n// export const getDateNow = () => new Date().toISOString();\n// export const randomGuid = () => new Date().toISOString();\n\n// export type ActionProcessorReturnType<AP extends ActionProcessor<any, any>> =\n//   ReturnType<AP> extends AsyncActionProcessorResult<infer TReturn> ? TReturn : never;\n\n// export type ActionProcessorPayloadType<AP extends ActionProcessor<any, any>> = Parameters<AP>[0];\n\n// export type ActionProcessorNative<AP extends ActionProcessor<any, any>> = (\n//   payload: ActionProcessorPayloadType<AP>,\n// ) => Promise<ActionProcessorReturnType<AP>>;\n\n// export const resolveActionProcessorToNative = <AP extends ActionProcessor<any, any>>(actionProcessor: AP): ActionProcessorNative<AP> => {\n//   // return null as TReturn;\n//   return null as never;\n// };\n\nexport const createImplementationRuntime = (\n  qpqConfig: QPQConfig,\n  tags: string[],\n\n  getDateNow: Parameters<typeof createRuntime>[3],\n  randomGuid: () => string,\n\n  session: StorySession,\n  actionProcessors: ActionProcessorList,\n  logger: QpqLogger,\n  dynamicModuleLoader: DynamicModuleLoader,\n  streamRegistry?: StreamRegistry,\n): ReturnType<typeof createRuntime> => {\n  const moduleName = getApplicationModuleName(qpqConfig);\n\n  const resolveStory = createRuntime(\n    qpqConfig,\n    {\n      context: session.context,\n      depth: (session.depth || 0) + 1,\n      decodedAccessToken: session.decodedAccessToken,\n      correlation: session.correlation,\n    },\n    async () => actionProcessors,\n    getDateNow,\n    logger,\n    // TODO: Share this logic.\n    `${moduleName}::${randomGuid()}`,\n    QpqRuntimeType.EXECUTE_IMPLEMENTATION_STORY,\n    dynamicModuleLoader,\n    undefined,\n    tags,\n    streamRegistry,\n  );\n\n  return resolveStory;\n};\n\nexport const getProcessCustomImplementation = <T extends ActionProcessor<any, any>>(\n  qpqConfig: QPQConfig,\n  story: AnyStory,\n  tag: string,\n  actionProcessorListResolver: ActionProcessorListResolver | null,\n  getDateNow: () => string,\n  getNewGuid: () => string,\n): T => {\n  const actionProcesor: ActionProcessor<any, any> = async (\n    payload,\n    session,\n    actionProcessorList,\n    logger,\n    updateSession,\n    dynamicModuleLoader,\n    streamRegistry,\n  ) => {\n    const resolveStory = createImplementationRuntime(\n      qpqConfig,\n      [tag],\n      getDateNow,\n      getNewGuid,\n      session,\n      {\n        ...actionProcessorList,\n        ...(actionProcessorListResolver ? await actionProcessorListResolver(qpqConfig, dynamicModuleLoader) : {}),\n      },\n      logger,\n      dynamicModuleLoader,\n      streamRegistry,\n    );\n\n    const storyResult = await resolveStory(story, [payload]);\n\n    if (storyResult.error) {\n      return actionResultError(storyResult.error.errorType, storyResult.error.errorText);\n    }\n\n    return actionResult(storyResult.result);\n  };\n\n  return actionProcesor as T;\n};\n"]}
+{"version":3,"file":"createImplementationRuntime.js","sourceRoot":"","sources":["../../src/createImplementationRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAOL,cAAc,GAGf,MAAM,SAAS,CAAC;AAEjB,4DAA4D;AAC5D,4DAA4D;AAE5D,gFAAgF;AAChF,wFAAwF;AAExF,oGAAoG;AAEpG,8EAA8E;AAC9E,6CAA6C;AAC7C,+CAA+C;AAE/C,4IAA4I;AAC5I,+BAA+B;AAC/B,0BAA0B;AAC1B,KAAK;AAEL,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,SAAoB,EACpB,IAAc,EAEd,UAA+C,EAC/C,UAAwB,EAExB,OAAqB,EACrB,gBAAqC,EACrC,MAAiB,EACjB,mBAAwC,EACxC,cAA+B,EACG,EAAE;IACpC,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAEvD,MAAM,YAAY,GAAG,aAAa,CAChC,SAAS,EACT;QACE,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,0EAA0E;QAC1E,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,6EAA6E;QAC7E,wEAAwE;QACxE,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;QAC/B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,EACD,KAAK,IAAI,EAAE,CAAC,gBAAgB,EAC5B,UAAU,EACV,MAAM;IACN,0BAA0B;IAC1B,GAAG,UAAU,KAAK,UAAU,EAAE,EAAE,EAChC,cAAc,CAAC,4BAA4B,EAC3C,mBAAmB,EACnB,SAAS,EACT,IAAI,EACJ,cAAc,CACf,CAAC;IAEF,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,SAAoB,EACpB,KAAe,EACf,GAAW,EACX,2BAA+D,EAC/D,UAAwB,EACxB,UAAwB,EACrB,EAAE;IACL,MAAM,cAAc,GAA8B,KAAK,EACrD,OAAO,EACP,OAAO,EACP,mBAAmB,EACnB,MAAM,EACN,aAAa,EACb,mBAAmB,EACnB,cAAc,EACd,EAAE;QACF,MAAM,YAAY,GAAG,2BAA2B,CAC9C,SAAS,EACT,CAAC,GAAG,CAAC,EACL,UAAU,EACV,UAAU,EACV,OAAO,EACP;YACE,GAAG,mBAAmB;YACtB,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,MAAM,2BAA2B,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1G,EACD,MAAM,EACN,mBAAmB,EACnB,cAAc,CACf,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzD,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,OAAO,cAAmB,CAAC;AAC7B,CAAC,CAAC","sourcesContent":["import { actionResult, actionResultError } from './logic/actionLogic';\nimport { QPQConfig } from './config';\nimport { getApplicationModuleName } from './qpqCoreUtils';\nimport { createRuntime } from './runtime';\nimport {\n  ActionProcessor,\n  ActionProcessorList,\n  ActionProcessorListResolver,\n  AnyStory,\n  DynamicModuleLoader,\n  QpqLogger,\n  QpqRuntimeType,\n  StorySession,\n  StreamRegistry,\n} from './types';\n\n// export const getDateNow = () => new Date().toISOString();\n// export const randomGuid = () => new Date().toISOString();\n\n// export type ActionProcessorReturnType<AP extends ActionProcessor<any, any>> =\n//   ReturnType<AP> extends AsyncActionProcessorResult<infer TReturn> ? TReturn : never;\n\n// export type ActionProcessorPayloadType<AP extends ActionProcessor<any, any>> = Parameters<AP>[0];\n\n// export type ActionProcessorNative<AP extends ActionProcessor<any, any>> = (\n//   payload: ActionProcessorPayloadType<AP>,\n// ) => Promise<ActionProcessorReturnType<AP>>;\n\n// export const resolveActionProcessorToNative = <AP extends ActionProcessor<any, any>>(actionProcessor: AP): ActionProcessorNative<AP> => {\n//   // return null as TReturn;\n//   return null as never;\n// };\n\nexport const createImplementationRuntime = (\n  qpqConfig: QPQConfig,\n  tags: string[],\n\n  getDateNow: Parameters<typeof createRuntime>[3],\n  randomGuid: () => string,\n\n  session: StorySession,\n  actionProcessors: ActionProcessorList,\n  logger: QpqLogger,\n  dynamicModuleLoader: DynamicModuleLoader,\n  streamRegistry?: StreamRegistry,\n): ReturnType<typeof createRuntime> => {\n  const moduleName = getApplicationModuleName(qpqConfig);\n\n  const resolveStory = createRuntime(\n    qpqConfig,\n    {\n      context: session.context,\n      // Service-local context and the caller's function globals travel into the\n      // nested implementation runtime (a within-service child: tool executor,\n      // drive file resolver, custom implementation), so stories run under it can\n      // read route/function config (e.g. the eventDoc user-directory global an\n      // AI tool needs to resolve the actor, or the tenant scope resolver). Mirrors\n      // the inline-function execute processor, which carries the same fields.\n      localContext: session.localContext,\n      functionGlobals: session.functionGlobals,\n      depth: (session.depth || 0) + 1,\n      decodedAccessToken: session.decodedAccessToken,\n      correlation: session.correlation,\n    },\n    async () => actionProcessors,\n    getDateNow,\n    logger,\n    // TODO: Share this logic.\n    `${moduleName}::${randomGuid()}`,\n    QpqRuntimeType.EXECUTE_IMPLEMENTATION_STORY,\n    dynamicModuleLoader,\n    undefined,\n    tags,\n    streamRegistry,\n  );\n\n  return resolveStory;\n};\n\nexport const getProcessCustomImplementation = <T extends ActionProcessor<any, any>>(\n  qpqConfig: QPQConfig,\n  story: AnyStory,\n  tag: string,\n  actionProcessorListResolver: ActionProcessorListResolver | null,\n  getDateNow: () => string,\n  getNewGuid: () => string,\n): T => {\n  const actionProcesor: ActionProcessor<any, any> = async (\n    payload,\n    session,\n    actionProcessorList,\n    logger,\n    updateSession,\n    dynamicModuleLoader,\n    streamRegistry,\n  ) => {\n    const resolveStory = createImplementationRuntime(\n      qpqConfig,\n      [tag],\n      getDateNow,\n      getNewGuid,\n      session,\n      {\n        ...actionProcessorList,\n        ...(actionProcessorListResolver ? await actionProcessorListResolver(qpqConfig, dynamicModuleLoader) : {}),\n      },\n      logger,\n      dynamicModuleLoader,\n      streamRegistry,\n    );\n\n    const storyResult = await resolveStory(story, [payload]);\n\n    if (storyResult.error) {\n      return actionResultError(storyResult.error.errorType, storyResult.error.errorText);\n    }\n\n    return actionResult(storyResult.result);\n  };\n\n  return actionProcesor as T;\n};\n"]}

package/lib/esm/runtime/resolveStory.js

@@ -17,11 +17,15 @@ export async function resolveStory(story, args, qpqConfig, callerSession, getAct
         decodedAccessToken: callerSession.decodedAccessToken,
         context: callerSession.context,
         localContext: callerSession.localContext,
-        // In-process story executions (inline functions) run WITHIN the caller's
-        // function, so they inherit its globals - their own registration wins on
-        // collision. Transport entries (http/queue/ws) start fresh from their own
-        // runtime registration only.
-        functionGlobals: runtimeType === QpqRuntimeType.EXECUTE_STORY
+        // In-process story executions run WITHIN the caller's function, so they
+        // inherit its globals - their own registration wins on collision. This
+        // covers inline functions (EXECUTE_STORY) AND implementation stories
+        // (EXECUTE_IMPLEMENTATION_STORY: tool executors, drive file resolvers,
+        // custom implementations) - both are nested, not transport boundaries, so
+        // an AI tool executor can read the queue/route globals (e.g. the eventDoc
+        // user-directory global needed to resolve the actor). Transport entries
+        // (http/queue/ws) start fresh from their own runtime registration only.
+        functionGlobals: runtimeType === QpqRuntimeType.EXECUTE_STORY || runtimeType === QpqRuntimeType.EXECUTE_IMPLEMENTATION_STORY
             ? {
                 ...callerSession.functionGlobals,
                 ...runtimeGlobals,

package/lib/esm/runtime/resolveStory.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolveStory.js","sourceRoot":"","sources":["../../../src/runtime/resolveStory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAC5G,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAG3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAyD,MAAM,uBAAuB,CAAC;AAC9G,OAAO,EAAE,4BAA4B,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAwB,EACxB,IAAW,EACX,SAAoB,EACpB,aAA2B,EAC3B,mBAAkG,EAClG,UAAwB,EACxB,MAAiB,EACjB,kBAA0B,EAC1B,WAA2B,EAC3B,mBAAwB,EACxB,sBAA2C,EAC3C,WAAsB,EACtB,cAA+B;IAE/B,MAAM,gBAAgB,GAAwB,MAAM,mBAAmB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,cAAc,IAAI,oBAAoB,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAE9B,MAAM,cAAc,GAAG,sBAAsB,IAAI,4BAA4B,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAEnJ,IAAI,aAAa,GAA4C,IAAI,CAAC;IAClE,IAAI,YAAY,GAAiB;QAC/B,WAAW,EAAE,kBAAkB;QAC/B,KAAK,EAAE,aAAa,CAAC,KAAK,GAAG,CAAC;QAC9B,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;QACpD,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,YAAY,EAAE,aAAa,CAAC,YAAY;QACxC,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,6BAA6B;QAC7B,eAAe,EACb,WAAW,KAAK,cAAc,CAAC,aAAa;YAC1C,CAAC,CAAC;gBACE,GAAG,aAAa,CAAC,eAAe;gBAChC,GAAG,cAAc;aAClB;YACH,CAAC,CAAC,cAAc;KACrB,CAAC;IAEF,MAAM,aAAa,GAAwB,CAAC,UAAiC,EAAQ,EAAE;QACrF,YAAY,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,UAAU,EAAE,CAAC;IACpD,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAqB;QACjC,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE,GAAG,YAAY,EAAE;QAC5B,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,UAAU,EAAE;QACvB,UAAU,EAAE,UAAU,EAAE;QACxB,IAAI,EAAE,WAAW,IAAI,EAAE;QACvB,UAAU,EAAE,wBAAwB,CAAC,SAAS,CAAC;QAC/C,WAAW,EAAE,YAAY,CAAC,WAAY;QACtC,eAAe,EAAE,aAAa,CAAC,WAAW;QAC1C,WAAW,EAAE,WAAW;QACxB,IAAI,EAAE,EAAE;QACR,sBAAsB;KACvB,CAAC;IAEF,wBAAwB;IACxB,IAAI,YAAY,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC;QAC7B,OAAO;YACL,GAAG,QAAQ;YACX,UAAU,EAAE,UAAU,EAAE;YACxB,KAAK,EAAE;gBACL,SAAS,EAAE,yBAAyB,YAAY,CAAC,KAAK,IAAI;gBAC1D,SAAS,EAAE,aAAa,CAAC,YAAY;aACtC;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAE9B,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC;YACnC,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;YAEnC,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,QAAQ,CAAC,CAAC;YAEvI,MAAM,YAAY,GAAG;gBACnB,GAAG,EAAE,MAAM;gBACX,GAAG,EAAE,YAAY;gBACjB,SAAS,EAAE,aAAa;gBACxB,UAAU,EAAE,UAAU,EAAE;aACzB,CAAC;YAEF,qIAAqI;YACrI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAEpC,IAAI,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAChE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBACrF,OAAO;oBACL,GAAG,QAAQ;oBACX,UAAU,EAAE,UAAU,EAAE;oBACxB,KAAK,EAAE,wBAAwB,CAAC,YAAY,CAAC;iBAC9C,CAAC;YACJ,CAAC;YAED,8CAA8C;YAC9C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxB,MAAM,SAAS,GAAG,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;gBACvD,MAAM,MAAM,GAAG,SAAS;oBACtB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,CAAC,YAAY,CAAC,EAAE;oBAC9D,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,CAAC,YAAY,CAAC,EAAE,CAAC;gBACtE,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9F,OAAO;gBACL,GAAG,QAAQ;gBACX,UAAU,EAAE,UAAU,EAAE;gBACxB,KAAK,EAAE;oBACL,SAAS,EAAE,GAAG,CAAC,OAAO;oBACtB,SAAS,EAAE,aAAa,CAAC,YAAY;oBACrC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI;iBACvC;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,GAAG,QAAQ;YACX,UAAU,EAAE,UAAU,EAAE;YACxB,KAAK,EAAE;gBACL,SAAS,EAAE,6BAA6B;gBACxC,SAAS,EAAE,aAAa,CAAC,YAAY;gBACrC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI;aACvC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG;QAClB,GAAG,QAAQ;QACX,UAAU,EAAE,UAAU,EAAE;QACxB,MAAM,EAAE,aAAa,CAAC,KAAK;KAC5B,CAAC;IAEF,yHAAyH;IACzH,OAAO,WAAW,CAAC;AACrB,CAAC","sourcesContent":["import { QPQConfig } from '../config';\nimport { isErroredActionResult, resolveActionResult, resolveActionResultError } from '../logic/actionLogic';\nimport { createStreamRegistry } from '../logic/stream';\nimport { getApplicationModuleName } from '../qpqCoreUtils';\nimport { QpqFunctionRuntime, QpqLogger, StreamRegistry } from '../types';\nimport { Action, ActionProcessorList } from '../types/Action';\nimport { ErrorTypeEnum } from '../types/ErrorTypeEnum';\nimport { QpqRuntimeType, Story, StoryResult, StorySession, StorySessionUpdater } from '../types/StorySession';\nimport { isQpqFunctionRuntimeAdvanced } from '../utils';\nimport { processAction } from './processAction';\n\nexport async function resolveStory<TArgs extends Array<any>>(\n  story: Story<TArgs, any>,\n  args: TArgs,\n  qpqConfig: QPQConfig,\n  callerSession: StorySession,\n  getActionProcessors: (config: QPQConfig, dynamicModuleLoader: any) => Promise<ActionProcessorList>,\n  getTimeNow: () => string,\n  logger: QpqLogger,\n  runtimeCorrelation: string,\n  runtimeType: QpqRuntimeType,\n  dynamicModuleLoader: any,\n  qpqFunctionRuntimeInfo?: QpqFunctionRuntime,\n  initialTags?: string[],\n  streamRegistry?: StreamRegistry,\n): Promise<StoryResult<any>> {\n  const actionProcessors: ActionProcessorList = await getActionProcessors(qpqConfig, dynamicModuleLoader);\n  const registry = streamRegistry ?? createStreamRegistry();\n  const reader = story(...args);\n\n  const runtimeGlobals = qpqFunctionRuntimeInfo && isQpqFunctionRuntimeAdvanced(qpqFunctionRuntimeInfo) ? qpqFunctionRuntimeInfo.globals : undefined;\n\n  let storyProgress: IteratorResult<Action<any>, any> | null = null;\n  let storySession: StorySession = {\n    correlation: runtimeCorrelation,\n    depth: callerSession.depth + 1,\n    decodedAccessToken: callerSession.decodedAccessToken,\n    context: callerSession.context,\n    localContext: callerSession.localContext,\n    // In-process story executions (inline functions) run WITHIN the caller's\n    // function, so they inherit its globals - their own registration wins on\n    // collision. Transport entries (http/queue/ws) start fresh from their own\n    // runtime registration only.\n    functionGlobals:\n      runtimeType === QpqRuntimeType.EXECUTE_STORY\n        ? {\n            ...callerSession.functionGlobals,\n            ...runtimeGlobals,\n          }\n        : runtimeGlobals,\n  };\n\n  const updateSession: StorySessionUpdater = (newSession: Partial<StorySession>): void => {\n    storySession = { ...storySession, ...newSession };\n  };\n\n  const response: StoryResult<any> = {\n    input: args,\n    session: { ...storySession },\n    history: [],\n    startedAt: getTimeNow(),\n    finishedAt: getTimeNow(),\n    tags: initialTags || [],\n    moduleName: getApplicationModuleName(qpqConfig),\n    correlation: storySession.correlation!,\n    fromCorrelation: callerSession.correlation,\n    runtimeType: runtimeType,\n    logs: [],\n    qpqFunctionRuntimeInfo,\n  };\n\n  // Enforce maximum depth\n  if (storySession.depth > 100) {\n    return {\n      ...response,\n      finishedAt: getTimeNow(),\n      error: {\n        errorText: `Story depth exceeded [${storySession.depth}]!`,\n        errorType: ErrorTypeEnum.GenericError,\n      },\n    };\n  }\n\n  try {\n    storyProgress = reader.next();\n\n    while (!storyProgress.done) {\n      const action = storyProgress.value;\n      const executionTime = getTimeNow();\n\n      const actionResult = await processAction(action, actionProcessors, storySession, logger, updateSession, dynamicModuleLoader, registry);\n\n      const historyEntry = {\n        act: action,\n        res: actionResult,\n        startedAt: executionTime,\n        finishedAt: getTimeNow(),\n      };\n\n      // console.log(`${action.type}: took ${new Date(historyEntry.finishedAt).getTime() - new Date(historyEntry.startedAt).getTime()}ms`);\n      response.history.push(historyEntry);\n\n      if (isErroredActionResult(actionResult) && !action.returnErrors) {\n        console.log('Caught Error:', JSON.stringify(resolveActionResultError(actionResult)));\n        return {\n          ...response,\n          finishedAt: getTimeNow(),\n          error: resolveActionResultError(actionResult),\n        };\n      }\n\n      // Feed the result back to the story generator\n      if (action.returnErrors) {\n        const isSuccess = !isErroredActionResult(actionResult);\n        const result = isSuccess\n          ? { success: true, result: resolveActionResult(actionResult) }\n          : { success: false, error: resolveActionResultError(actionResult) };\n        storyProgress = reader.next(result);\n      } else {\n        storyProgress = reader.next(resolveActionResult(actionResult));\n      }\n    }\n  } catch (err) {\n    if (err instanceof Error) {\n      console.log(`Uncaught Error: [${JSON.stringify(storyProgress?.value?.type)}] ${err.message}`);\n      return {\n        ...response,\n        finishedAt: getTimeNow(),\n        error: {\n          errorText: err.message,\n          errorType: ErrorTypeEnum.GenericError,\n          errorStack: storyProgress?.value?.type,\n        },\n      };\n    }\n    return {\n      ...response,\n      finishedAt: getTimeNow(),\n      error: {\n        errorText: 'Unknown error has occurred!',\n        errorType: ErrorTypeEnum.GenericError,\n        errorStack: storyProgress?.value?.type,\n      },\n    };\n  }\n\n  const storyResult = {\n    ...response,\n    finishedAt: getTimeNow(),\n    result: storyProgress.value,\n  };\n\n  // console.log(`story took ${new Date(storyResult.finishedAt).getTime() - new Date(storyResult.startedAt).getTime()}ms`);\n  return storyResult;\n}\n"]}
+{"version":3,"file":"resolveStory.js","sourceRoot":"","sources":["../../../src/runtime/resolveStory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAC5G,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAG3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAyD,MAAM,uBAAuB,CAAC;AAC9G,OAAO,EAAE,4BAA4B,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAwB,EACxB,IAAW,EACX,SAAoB,EACpB,aAA2B,EAC3B,mBAAkG,EAClG,UAAwB,EACxB,MAAiB,EACjB,kBAA0B,EAC1B,WAA2B,EAC3B,mBAAwB,EACxB,sBAA2C,EAC3C,WAAsB,EACtB,cAA+B;IAE/B,MAAM,gBAAgB,GAAwB,MAAM,mBAAmB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,cAAc,IAAI,oBAAoB,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAE9B,MAAM,cAAc,GAAG,sBAAsB,IAAI,4BAA4B,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAEnJ,IAAI,aAAa,GAA4C,IAAI,CAAC;IAClE,IAAI,YAAY,GAAiB;QAC/B,WAAW,EAAE,kBAAkB;QAC/B,KAAK,EAAE,aAAa,CAAC,KAAK,GAAG,CAAC;QAC9B,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;QACpD,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,YAAY,EAAE,aAAa,CAAC,YAAY;QACxC,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,eAAe,EACb,WAAW,KAAK,cAAc,CAAC,aAAa,IAAI,WAAW,KAAK,cAAc,CAAC,4BAA4B;YACzG,CAAC,CAAC;gBACE,GAAG,aAAa,CAAC,eAAe;gBAChC,GAAG,cAAc;aAClB;YACH,CAAC,CAAC,cAAc;KACrB,CAAC;IAEF,MAAM,aAAa,GAAwB,CAAC,UAAiC,EAAQ,EAAE;QACrF,YAAY,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,UAAU,EAAE,CAAC;IACpD,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAqB;QACjC,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,EAAE,GAAG,YAAY,EAAE;QAC5B,OAAO,EAAE,EAAE;QACX,SAAS,EAAE,UAAU,EAAE;QACvB,UAAU,EAAE,UAAU,EAAE;QACxB,IAAI,EAAE,WAAW,IAAI,EAAE;QACvB,UAAU,EAAE,wBAAwB,CAAC,SAAS,CAAC;QAC/C,WAAW,EAAE,YAAY,CAAC,WAAY;QACtC,eAAe,EAAE,aAAa,CAAC,WAAW;QAC1C,WAAW,EAAE,WAAW;QACxB,IAAI,EAAE,EAAE;QACR,sBAAsB;KACvB,CAAC;IAEF,wBAAwB;IACxB,IAAI,YAAY,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC;QAC7B,OAAO;YACL,GAAG,QAAQ;YACX,UAAU,EAAE,UAAU,EAAE;YACxB,KAAK,EAAE;gBACL,SAAS,EAAE,yBAAyB,YAAY,CAAC,KAAK,IAAI;gBAC1D,SAAS,EAAE,aAAa,CAAC,YAAY;aACtC;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAE9B,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC;YACnC,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;YAEnC,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,QAAQ,CAAC,CAAC;YAEvI,MAAM,YAAY,GAAG;gBACnB,GAAG,EAAE,MAAM;gBACX,GAAG,EAAE,YAAY;gBACjB,SAAS,EAAE,aAAa;gBACxB,UAAU,EAAE,UAAU,EAAE;aACzB,CAAC;YAEF,qIAAqI;YACrI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAEpC,IAAI,qBAAqB,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAChE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBACrF,OAAO;oBACL,GAAG,QAAQ;oBACX,UAAU,EAAE,UAAU,EAAE;oBACxB,KAAK,EAAE,wBAAwB,CAAC,YAAY,CAAC;iBAC9C,CAAC;YACJ,CAAC;YAED,8CAA8C;YAC9C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxB,MAAM,SAAS,GAAG,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;gBACvD,MAAM,MAAM,GAAG,SAAS;oBACtB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,CAAC,YAAY,CAAC,EAAE;oBAC9D,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,CAAC,YAAY,CAAC,EAAE,CAAC;gBACtE,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9F,OAAO;gBACL,GAAG,QAAQ;gBACX,UAAU,EAAE,UAAU,EAAE;gBACxB,KAAK,EAAE;oBACL,SAAS,EAAE,GAAG,CAAC,OAAO;oBACtB,SAAS,EAAE,aAAa,CAAC,YAAY;oBACrC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI;iBACvC;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,GAAG,QAAQ;YACX,UAAU,EAAE,UAAU,EAAE;YACxB,KAAK,EAAE;gBACL,SAAS,EAAE,6BAA6B;gBACxC,SAAS,EAAE,aAAa,CAAC,YAAY;gBACrC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI;aACvC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG;QAClB,GAAG,QAAQ;QACX,UAAU,EAAE,UAAU,EAAE;QACxB,MAAM,EAAE,aAAa,CAAC,KAAK;KAC5B,CAAC;IAEF,yHAAyH;IACzH,OAAO,WAAW,CAAC;AACrB,CAAC","sourcesContent":["import { QPQConfig } from '../config';\nimport { isErroredActionResult, resolveActionResult, resolveActionResultError } from '../logic/actionLogic';\nimport { createStreamRegistry } from '../logic/stream';\nimport { getApplicationModuleName } from '../qpqCoreUtils';\nimport { QpqFunctionRuntime, QpqLogger, StreamRegistry } from '../types';\nimport { Action, ActionProcessorList } from '../types/Action';\nimport { ErrorTypeEnum } from '../types/ErrorTypeEnum';\nimport { QpqRuntimeType, Story, StoryResult, StorySession, StorySessionUpdater } from '../types/StorySession';\nimport { isQpqFunctionRuntimeAdvanced } from '../utils';\nimport { processAction } from './processAction';\n\nexport async function resolveStory<TArgs extends Array<any>>(\n  story: Story<TArgs, any>,\n  args: TArgs,\n  qpqConfig: QPQConfig,\n  callerSession: StorySession,\n  getActionProcessors: (config: QPQConfig, dynamicModuleLoader: any) => Promise<ActionProcessorList>,\n  getTimeNow: () => string,\n  logger: QpqLogger,\n  runtimeCorrelation: string,\n  runtimeType: QpqRuntimeType,\n  dynamicModuleLoader: any,\n  qpqFunctionRuntimeInfo?: QpqFunctionRuntime,\n  initialTags?: string[],\n  streamRegistry?: StreamRegistry,\n): Promise<StoryResult<any>> {\n  const actionProcessors: ActionProcessorList = await getActionProcessors(qpqConfig, dynamicModuleLoader);\n  const registry = streamRegistry ?? createStreamRegistry();\n  const reader = story(...args);\n\n  const runtimeGlobals = qpqFunctionRuntimeInfo && isQpqFunctionRuntimeAdvanced(qpqFunctionRuntimeInfo) ? qpqFunctionRuntimeInfo.globals : undefined;\n\n  let storyProgress: IteratorResult<Action<any>, any> | null = null;\n  let storySession: StorySession = {\n    correlation: runtimeCorrelation,\n    depth: callerSession.depth + 1,\n    decodedAccessToken: callerSession.decodedAccessToken,\n    context: callerSession.context,\n    localContext: callerSession.localContext,\n    // In-process story executions run WITHIN the caller's function, so they\n    // inherit its globals - their own registration wins on collision. This\n    // covers inline functions (EXECUTE_STORY) AND implementation stories\n    // (EXECUTE_IMPLEMENTATION_STORY: tool executors, drive file resolvers,\n    // custom implementations) - both are nested, not transport boundaries, so\n    // an AI tool executor can read the queue/route globals (e.g. the eventDoc\n    // user-directory global needed to resolve the actor). Transport entries\n    // (http/queue/ws) start fresh from their own runtime registration only.\n    functionGlobals:\n      runtimeType === QpqRuntimeType.EXECUTE_STORY || runtimeType === QpqRuntimeType.EXECUTE_IMPLEMENTATION_STORY\n        ? {\n            ...callerSession.functionGlobals,\n            ...runtimeGlobals,\n          }\n        : runtimeGlobals,\n  };\n\n  const updateSession: StorySessionUpdater = (newSession: Partial<StorySession>): void => {\n    storySession = { ...storySession, ...newSession };\n  };\n\n  const response: StoryResult<any> = {\n    input: args,\n    session: { ...storySession },\n    history: [],\n    startedAt: getTimeNow(),\n    finishedAt: getTimeNow(),\n    tags: initialTags || [],\n    moduleName: getApplicationModuleName(qpqConfig),\n    correlation: storySession.correlation!,\n    fromCorrelation: callerSession.correlation,\n    runtimeType: runtimeType,\n    logs: [],\n    qpqFunctionRuntimeInfo,\n  };\n\n  // Enforce maximum depth\n  if (storySession.depth > 100) {\n    return {\n      ...response,\n      finishedAt: getTimeNow(),\n      error: {\n        errorText: `Story depth exceeded [${storySession.depth}]!`,\n        errorType: ErrorTypeEnum.GenericError,\n      },\n    };\n  }\n\n  try {\n    storyProgress = reader.next();\n\n    while (!storyProgress.done) {\n      const action = storyProgress.value;\n      const executionTime = getTimeNow();\n\n      const actionResult = await processAction(action, actionProcessors, storySession, logger, updateSession, dynamicModuleLoader, registry);\n\n      const historyEntry = {\n        act: action,\n        res: actionResult,\n        startedAt: executionTime,\n        finishedAt: getTimeNow(),\n      };\n\n      // console.log(`${action.type}: took ${new Date(historyEntry.finishedAt).getTime() - new Date(historyEntry.startedAt).getTime()}ms`);\n      response.history.push(historyEntry);\n\n      if (isErroredActionResult(actionResult) && !action.returnErrors) {\n        console.log('Caught Error:', JSON.stringify(resolveActionResultError(actionResult)));\n        return {\n          ...response,\n          finishedAt: getTimeNow(),\n          error: resolveActionResultError(actionResult),\n        };\n      }\n\n      // Feed the result back to the story generator\n      if (action.returnErrors) {\n        const isSuccess = !isErroredActionResult(actionResult);\n        const result = isSuccess\n          ? { success: true, result: resolveActionResult(actionResult) }\n          : { success: false, error: resolveActionResultError(actionResult) };\n        storyProgress = reader.next(result);\n      } else {\n        storyProgress = reader.next(resolveActionResult(actionResult));\n      }\n    }\n  } catch (err) {\n    if (err instanceof Error) {\n      console.log(`Uncaught Error: [${JSON.stringify(storyProgress?.value?.type)}] ${err.message}`);\n      return {\n        ...response,\n        finishedAt: getTimeNow(),\n        error: {\n          errorText: err.message,\n          errorType: ErrorTypeEnum.GenericError,\n          errorStack: storyProgress?.value?.type,\n        },\n      };\n    }\n    return {\n      ...response,\n      finishedAt: getTimeNow(),\n      error: {\n        errorText: 'Unknown error has occurred!',\n        errorType: ErrorTypeEnum.GenericError,\n        errorStack: storyProgress?.value?.type,\n      },\n    };\n  }\n\n  const storyResult = {\n    ...response,\n    finishedAt: getTimeNow(),\n    result: storyProgress.value,\n  };\n\n  // console.log(`story took ${new Date(storyResult.finishedAt).getTime() - new Date(storyResult.startedAt).getTime()}ms`);\n  return storyResult;\n}\n"]}

package/lib/esm/types/UnionToIntersection.d.ts

@@ -0,0 +1 @@
+export type UnionToIntersection<T> = (T extends unknown ? (member: T) => void : never) extends (member: infer TIntersection) => void ? TIntersection : never;

package/lib/esm/types/UnionToIntersection.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=UnionToIntersection.js.map

package/lib/esm/types/UnionToIntersection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UnionToIntersection.js","sourceRoot":"","sources":["../../../src/types/UnionToIntersection.ts"],"names":[],"mappings":"","sourcesContent":["// Standard union-to-intersection: distributing T into a contravariant (parameter)\n// position makes inference produce the intersection of the union's members.\nexport type UnionToIntersection<T> = (T extends unknown ? (member: T) => void : never) extends (member: infer TIntersection) => void\n  ? TIntersection\n  : never;\n"]}

package/lib/esm/types/index.d.ts

@@ -30,4 +30,5 @@ export * from './ScheduledEvent';
 export * from './StorySession';
 export * from './StreamRegistry';
 export * from './UnboundLogicStory';
+export * from './UnionToIntersection';
 export * from './utils';

package/lib/esm/types/index.js

@@ -30,5 +30,6 @@ export * from './ScheduledEvent';
 export * from './StorySession';
 export * from './StreamRegistry';
 export * from './UnboundLogicStory';
+export * from './UnionToIntersection';
 export * from './utils';
 //# sourceMappingURL=index.js.map

package/lib/esm/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,0BAA0B,CAAC;AACzC,cAAc,SAAS,CAAC;AACxB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,SAAS,CAAC","sourcesContent":["export * from './Action';\nexport * from './authChallenge';\nexport * from './BoundLogicStory';\nexport * from './ConfigUrlDefinition';\nexport * from './CrossModuleMessage';\nexport * from './CrossModuleOwner';\nexport * from './CrossServiceResourceName';\nexport * from './DecomposedString';\nexport * from './DeployEvent';\nexport * from './DynamicModuleLoader';\nexport * from './ErrorTypeEnum';\nexport * from './EventMessage';\nexport * from './ExcludeKeys';\nexport * from './FullyQualifiedResource';\nexport * from './KeyOf';\nexport * from './LogLevelEnum';\nexport * from './Lookup';\nexport * from './NotifyErrorQueueEvent';\nexport * from './Nullable';\nexport * from './QPQBinaryData';\nexport * from './QpqContextIdentifier';\nexport * from './QpqExecutionTrace';\nexport * from './QpqFunctionRuntime';\nexport * from './QpqIsoDateTime';\nexport * from './QpqLogger';\nexport * from './QpqPagedData';\nexport * from './QueueEvent';\nexport * from './Readonlyify';\nexport * from './ScheduledEvent';\nexport * from './StorySession';\nexport * from './StreamRegistry';\nexport * from './UnboundLogicStory';\nexport * from './utils';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,0BAA0B,CAAC;AACzC,cAAc,SAAS,CAAC;AACxB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,yBAAyB,CAAC;AACxC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,SAAS,CAAC","sourcesContent":["export * from './Action';\nexport * from './authChallenge';\nexport * from './BoundLogicStory';\nexport * from './ConfigUrlDefinition';\nexport * from './CrossModuleMessage';\nexport * from './CrossModuleOwner';\nexport * from './CrossServiceResourceName';\nexport * from './DecomposedString';\nexport * from './DeployEvent';\nexport * from './DynamicModuleLoader';\nexport * from './ErrorTypeEnum';\nexport * from './EventMessage';\nexport * from './ExcludeKeys';\nexport * from './FullyQualifiedResource';\nexport * from './KeyOf';\nexport * from './LogLevelEnum';\nexport * from './Lookup';\nexport * from './NotifyErrorQueueEvent';\nexport * from './Nullable';\nexport * from './QPQBinaryData';\nexport * from './QpqContextIdentifier';\nexport * from './QpqExecutionTrace';\nexport * from './QpqFunctionRuntime';\nexport * from './QpqIsoDateTime';\nexport * from './QpqLogger';\nexport * from './QpqPagedData';\nexport * from './QueueEvent';\nexport * from './Readonlyify';\nexport * from './ScheduledEvent';\nexport * from './StorySession';\nexport * from './StreamRegistry';\nexport * from './UnboundLogicStory';\nexport * from './UnionToIntersection';\nexport * from './utils';\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "quidproquo-core",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "",
   "main": "./lib/commonjs/index.js",
   "module": "./lib/esm/index.js",
@@ -33,7 +33,7 @@
   "homepage": "https://github.com/joe-coady/quidproquo#readme",
   "devDependencies": {
     "@types/node": "^24.2.1",
-    "quidproquo-tsconfig": "0.1.9",
+    "quidproquo-tsconfig": "0.1.10",
     "typescript": "^5.8.2"
   },
   "dependencies": {