quidproquo-webserver 0.1.17 → 0.1.18

package/lib/commonjs/actionProcessor/api/getHttpApiEventAutoRespondActionProcessor.js

@@ -41,7 +41,11 @@ const getProcessAutoRespond = (qpqConfig) => {
             event: qpqEventRecord,
             routeAuthSettings: (_b = matchResult.config) === null || _b === void 0 ? void 0 : _b.routeAuthSettings,
         };
-        const [authValid, authError] = yield validateAuth(authPayload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader);
+        // The matched route's processor overrides must be visible HERE, in the
+        // framework preamble: auth decode runs before the route story, so without
+        // this merge a per-route auth override would never see its own requests.
+        const mergedActionProcessorList = yield (0, quidproquo_core_1.mergeRuntimeActionProcessors)(qpqConfig, matchResult.runtime, actionProcessorList, dynamicModuleLoader);
+        const [authValid, authError] = yield validateAuth(authPayload, session, mergedActionProcessorList, logger, updateSession, dynamicModuleLoader);
         if (authError || !authValid) {
             return (0, quidproquo_core_1.actionResult)({
                 status: 401,

package/lib/commonjs/actionProcessor/api/getHttpApiEventAutoRespondActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getHttpApiEventAutoRespondActionProcessor.js","sourceRoot":"","sources":["../../../../src/actionProcessor/api/getHttpApiEventAutoRespondActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAUyB;AAGzB,6EAAoG;AACpG,qDAA8F;AAC9F,yDAAyD;AAIzD,MAAM,4BAA4B,GAA4C;IAC5E,CAAC,mCAAuB,CAAC,YAAY,CAAC,EAAE,GAAG;IAC3C,CAAC,mCAAuB,CAAC,YAAY,CAAC,EAAE,GAAG;IAC3C,CAAC,mCAAuB,CAAC,aAAa,CAAC,EAAE,GAAG;IAC5C,CAAC,mCAAuB,CAAC,kBAAkB,CAAC,EAAE,GAAG;IACjD,CAAC,mCAAuB,CAAC,SAAS,CAAC,EAAE,GAAG;CACzC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAAgD,EAAE;IACnG,MAAM,YAAY,GAAG,IAAA,gDAA8B,EACjD,SAAS,EACT,2CAAoB,EACpB,qBAAqB,EACrB,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,8BAAY,CACb,CAAC;IAEF,OAAO,yFAAkI,EAAE,gIAA7H,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB;;QACrI,iFAAiF;QACjF,+CAA+C;QAC/C,MAAM,cAAc,GAAG,cAA2B,CAAC;QACnD,yCAAyC;QACzC,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,IAAA,8BAAY,EAAC;gBAClB,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,KAAK;gBACtB,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,IAAA,4BAAc,EAAC,SAAS,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAA6B;YAC5C,KAAK,EAAE,cAAc;YACrB,iBAAiB,EAAE,MAAA,WAAW,CAAC,MAAM,0CAAE,iBAAiB;SACzD,CAAC;QAEF,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;QAEzI,IAAI,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAA,8BAAY,EAAC;gBAClB,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,KAAK;gBACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,OAAO,EAAE,8CAA8C;iBACxD,CAAC;gBACF,OAAO,EAAE,IAAA,4BAAc,EAAC,SAAS,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,2FAA2F;QAC3F,IAAI,cAAc,CAAC,eAAe,EAAE,CAAC;YACnC,OAAO,IAAA,8BAAY,EAAC;gBAClB,MAAM,EAAE,4BAA4B,CAAC,cAAc,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,GAAG;gBACrF,eAAe,EAAE,KAAK;gBACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,cAAc,CAAC,eAAe,CAAC,SAAS;oBACnD,SAAS,EAAE,cAAc,CAAC,eAAe,CAAC,OAAO;iBAClD,CAAC;gBACF,OAAO,EAAE,IAAA,4BAAc,EAAC,SAAS,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAA,8BAAY,EAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEW,QAAA,yCAAyC,GAAG,IAAA,uCAAqB,EAAC,yCAAuB,EAAE,qBAAqB,CAAC,CAAC","sourcesContent":["import {\n  actionResult,\n  askEventAutoRespondBase,\n  createActionProcessor,\n  EventActionType,\n  generateUuid,\n  getProcessCustomImplementation,\n  MatchStoryResult,\n  ProcessorFor,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { RouteOptions } from '../../config/settings/route';\nimport { askValidateRouteAuth, ValidateRouteAuthPayload } from '../../stories/askValidateRouteAuth';\nimport { FileUploadErrorTypeEnum, HTTPEvent, HTTPEventResponse } from '../../types/HTTPEvent';\nimport { getCorsHeaders } from '../../utils/headerUtils';\n\ntype InternalMatchResult = MatchStoryResult<any, RouteOptions>;\n\nconst fileUploadErrorHttpStatusMap: Record<FileUploadErrorTypeEnum, number> = {\n  [FileUploadErrorTypeEnum.fileTooLarge]: 413,\n  [FileUploadErrorTypeEnum.tooManyFiles]: 413,\n  [FileUploadErrorTypeEnum.tooManyFields]: 400,\n  [FileUploadErrorTypeEnum.disallowedMimeType]: 415,\n  [FileUploadErrorTypeEnum.malformed]: 400,\n};\n\nconst getProcessAutoRespond = (qpqConfig: QPQConfig): ProcessorFor<typeof askEventAutoRespondBase> => {\n  const validateAuth = getProcessCustomImplementation<any>(\n    qpqConfig,\n    askValidateRouteAuth,\n    'API Auth Validation',\n    null,\n    () => new Date().toISOString(),\n    generateUuid,\n  );\n\n  return async ({ qpqEventRecord: rawEventRecord, matchResult }, session, actionProcessorList, logger, updateSession, dynamicModuleLoader) => {\n    // This processor is registered only for the http api event source, so the base's\n    // source-agnostic record is an HTTPEvent here.\n    const qpqEventRecord = rawEventRecord as HTTPEvent;\n    // Just auto respond for options requests\n    if (qpqEventRecord.method === 'OPTIONS') {\n      return actionResult({\n        status: 200,\n        isBase64Encoded: false,\n        body: '',\n        headers: getCorsHeaders(qpqConfig, matchResult.config || {}, qpqEventRecord.headers),\n      });\n    }\n\n    const authPayload: ValidateRouteAuthPayload = {\n      event: qpqEventRecord,\n      routeAuthSettings: matchResult.config?.routeAuthSettings,\n    };\n\n    const [authValid, authError] = await validateAuth(authPayload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader);\n\n    if (authError || !authValid) {\n      return actionResult({\n        status: 401,\n        isBase64Encoded: false,\n        body: JSON.stringify({\n          message: 'You are unauthorized to access this resource',\n        }),\n        headers: getCorsHeaders(qpqConfig, matchResult.config || {}, qpqEventRecord.headers),\n      });\n    }\n\n    // Reject invalid multipart uploads before the route story runs (after auth, so a 401 wins)\n    if (qpqEventRecord.fileUploadError) {\n      return actionResult({\n        status: fileUploadErrorHttpStatusMap[qpqEventRecord.fileUploadError.errorType] || 400,\n        isBase64Encoded: false,\n        body: JSON.stringify({\n          errorType: qpqEventRecord.fileUploadError.errorType,\n          errorText: qpqEventRecord.fileUploadError.message,\n        }),\n        headers: getCorsHeaders(qpqConfig, matchResult.config || {}, qpqEventRecord.headers),\n      });\n    }\n\n    return actionResult(null);\n  };\n};\n\nexport const getHttpApiEventAutoRespondActionProcessor = createActionProcessor(askEventAutoRespondBase, getProcessAutoRespond);\n"]}
+{"version":3,"file":"getHttpApiEventAutoRespondActionProcessor.js","sourceRoot":"","sources":["../../../../src/actionProcessor/api/getHttpApiEventAutoRespondActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAWyB;AAGzB,6EAAoG;AACpG,qDAA8F;AAC9F,yDAAyD;AAIzD,MAAM,4BAA4B,GAA4C;IAC5E,CAAC,mCAAuB,CAAC,YAAY,CAAC,EAAE,GAAG;IAC3C,CAAC,mCAAuB,CAAC,YAAY,CAAC,EAAE,GAAG;IAC3C,CAAC,mCAAuB,CAAC,aAAa,CAAC,EAAE,GAAG;IAC5C,CAAC,mCAAuB,CAAC,kBAAkB,CAAC,EAAE,GAAG;IACjD,CAAC,mCAAuB,CAAC,SAAS,CAAC,EAAE,GAAG;CACzC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAAgD,EAAE;IACnG,MAAM,YAAY,GAAG,IAAA,gDAA8B,EACjD,SAAS,EACT,2CAAoB,EACpB,qBAAqB,EACrB,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,8BAAY,CACb,CAAC;IAEF,OAAO,yFAAkI,EAAE,gIAA7H,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB;;QACrI,iFAAiF;QACjF,+CAA+C;QAC/C,MAAM,cAAc,GAAG,cAA2B,CAAC;QACnD,yCAAyC;QACzC,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,IAAA,8BAAY,EAAC;gBAClB,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,KAAK;gBACtB,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,IAAA,4BAAc,EAAC,SAAS,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAA6B;YAC5C,KAAK,EAAE,cAAc;YACrB,iBAAiB,EAAE,MAAA,WAAW,CAAC,MAAM,0CAAE,iBAAiB;SACzD,CAAC;QAEF,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,yBAAyB,GAAG,MAAM,IAAA,8CAA4B,EAAC,SAAS,EAAE,WAAW,CAAC,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;QAE/I,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;QAE/I,IAAI,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAA,8BAAY,EAAC;gBAClB,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,KAAK;gBACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,OAAO,EAAE,8CAA8C;iBACxD,CAAC;gBACF,OAAO,EAAE,IAAA,4BAAc,EAAC,SAAS,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,2FAA2F;QAC3F,IAAI,cAAc,CAAC,eAAe,EAAE,CAAC;YACnC,OAAO,IAAA,8BAAY,EAAC;gBAClB,MAAM,EAAE,4BAA4B,CAAC,cAAc,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,GAAG;gBACrF,eAAe,EAAE,KAAK;gBACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,cAAc,CAAC,eAAe,CAAC,SAAS;oBACnD,SAAS,EAAE,cAAc,CAAC,eAAe,CAAC,OAAO;iBAClD,CAAC;gBACF,OAAO,EAAE,IAAA,4BAAc,EAAC,SAAS,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAA,8BAAY,EAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEW,QAAA,yCAAyC,GAAG,IAAA,uCAAqB,EAAC,yCAAuB,EAAE,qBAAqB,CAAC,CAAC","sourcesContent":["import {\n  actionResult,\n  askEventAutoRespondBase,\n  createActionProcessor,\n  EventActionType,\n  generateUuid,\n  getProcessCustomImplementation,\n  MatchStoryResult,\n  mergeRuntimeActionProcessors,\n  ProcessorFor,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { RouteOptions } from '../../config/settings/route';\nimport { askValidateRouteAuth, ValidateRouteAuthPayload } from '../../stories/askValidateRouteAuth';\nimport { FileUploadErrorTypeEnum, HTTPEvent, HTTPEventResponse } from '../../types/HTTPEvent';\nimport { getCorsHeaders } from '../../utils/headerUtils';\n\ntype InternalMatchResult = MatchStoryResult<any, RouteOptions>;\n\nconst fileUploadErrorHttpStatusMap: Record<FileUploadErrorTypeEnum, number> = {\n  [FileUploadErrorTypeEnum.fileTooLarge]: 413,\n  [FileUploadErrorTypeEnum.tooManyFiles]: 413,\n  [FileUploadErrorTypeEnum.tooManyFields]: 400,\n  [FileUploadErrorTypeEnum.disallowedMimeType]: 415,\n  [FileUploadErrorTypeEnum.malformed]: 400,\n};\n\nconst getProcessAutoRespond = (qpqConfig: QPQConfig): ProcessorFor<typeof askEventAutoRespondBase> => {\n  const validateAuth = getProcessCustomImplementation<any>(\n    qpqConfig,\n    askValidateRouteAuth,\n    'API Auth Validation',\n    null,\n    () => new Date().toISOString(),\n    generateUuid,\n  );\n\n  return async ({ qpqEventRecord: rawEventRecord, matchResult }, session, actionProcessorList, logger, updateSession, dynamicModuleLoader) => {\n    // This processor is registered only for the http api event source, so the base's\n    // source-agnostic record is an HTTPEvent here.\n    const qpqEventRecord = rawEventRecord as HTTPEvent;\n    // Just auto respond for options requests\n    if (qpqEventRecord.method === 'OPTIONS') {\n      return actionResult({\n        status: 200,\n        isBase64Encoded: false,\n        body: '',\n        headers: getCorsHeaders(qpqConfig, matchResult.config || {}, qpqEventRecord.headers),\n      });\n    }\n\n    const authPayload: ValidateRouteAuthPayload = {\n      event: qpqEventRecord,\n      routeAuthSettings: matchResult.config?.routeAuthSettings,\n    };\n\n    // The matched route's processor overrides must be visible HERE, in the\n    // framework preamble: auth decode runs before the route story, so without\n    // this merge a per-route auth override would never see its own requests.\n    const mergedActionProcessorList = await mergeRuntimeActionProcessors(qpqConfig, matchResult.runtime, actionProcessorList, dynamicModuleLoader);\n\n    const [authValid, authError] = await validateAuth(authPayload, session, mergedActionProcessorList, logger, updateSession, dynamicModuleLoader);\n\n    if (authError || !authValid) {\n      return actionResult({\n        status: 401,\n        isBase64Encoded: false,\n        body: JSON.stringify({\n          message: 'You are unauthorized to access this resource',\n        }),\n        headers: getCorsHeaders(qpqConfig, matchResult.config || {}, qpqEventRecord.headers),\n      });\n    }\n\n    // Reject invalid multipart uploads before the route story runs (after auth, so a 401 wins)\n    if (qpqEventRecord.fileUploadError) {\n      return actionResult({\n        status: fileUploadErrorHttpStatusMap[qpqEventRecord.fileUploadError.errorType] || 400,\n        isBase64Encoded: false,\n        body: JSON.stringify({\n          errorType: qpqEventRecord.fileUploadError.errorType,\n          errorText: qpqEventRecord.fileUploadError.message,\n        }),\n        headers: getCorsHeaders(qpqConfig, matchResult.config || {}, qpqEventRecord.headers),\n      });\n    }\n\n    return actionResult(null);\n  };\n};\n\nexport const getHttpApiEventAutoRespondActionProcessor = createActionProcessor(askEventAutoRespondBase, getProcessAutoRespond);\n"]}

package/lib/commonjs/actionProcessor/api/getHttpApiEventGetStorySessionActionProcessor.js

@@ -23,7 +23,11 @@ const getProcessGetStorySession = (qpqConfig) => {
             routeAuthSettings: (_b = matchStoryResult.config) === null || _b === void 0 ? void 0 : _b.routeAuthSettings,
             session,
         };
-        const [storySession, error] = yield getSession(payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader);
+        // Same merge as the auto-respond preamble: the session-seeding decode must
+        // also see the matched route's processor overrides, or a custom validator's
+        // decoded identity would never reach the story session.
+        const mergedActionProcessorList = yield (0, quidproquo_core_1.mergeRuntimeActionProcessors)(qpqConfig, matchStoryResult.runtime, actionProcessorList, dynamicModuleLoader);
+        const [storySession, error] = yield getSession(payload, session, mergedActionProcessorList, logger, updateSession, dynamicModuleLoader);
         if (error) {
             return (0, quidproquo_core_1.actionResult)(void 0);
         }

package/lib/commonjs/actionProcessor/api/getHttpApiEventGetStorySessionActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getHttpApiEventGetStorySessionActionProcessor.js","sourceRoot":"","sources":["../../../../src/actionProcessor/api/getHttpApiEventGetStorySessionActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAWyB;AAGzB,iGAAkI;AAKlI,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAAoD,EAAE;IAC3G,MAAM,UAAU,GAAG,IAAA,gDAA8B,EAC/C,SAAS,EACT,+DAA8B,EAC9B,uBAAuB,EACvB,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,8BAAY,CACb,CAAC;IAEF,OAAO,yFAAuH,EAAE,gIAAlH,EAAE,gBAAgB,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB;;QAC1H,MAAM,OAAO,GAAuC;YAClD,+EAA+E;YAC/E,+BAA+B;YAC/B,KAAK,EAAE,cAA2B;YAClC,iBAAiB,EAAE,MAAA,gBAAgB,CAAC,MAAM,0CAAE,iBAAiB;YAC7D,OAAO;SACR,CAAC;QAEF,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;QAElI,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAA,8BAAY,EAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,IAAA,8BAAY,EAAC,YAAY,CAAC,CAAC;IACpC,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEW,QAAA,6CAA6C,GAAG,IAAA,uCAAqB,EAAC,6CAA2B,EAAE,yBAAyB,CAAC,CAAC","sourcesContent":["import {\n  actionResult,\n  askEventGetStorySessionBase,\n  createActionProcessor,\n  EventActionType,\n  generateUuid,\n  getProcessCustomImplementation,\n  MatchStoryResult,\n  ProcessorFor,\n  QPQConfig,\n  StorySession,\n} from 'quidproquo-core';\n\nimport { RouteOptions } from '../../config/settings/route';\nimport { askGetHttpApiEventStorySession, GetHttpApiEventStorySessionPayload } from '../../stories/askGetHttpApiEventStorySession';\nimport { HTTPEvent } from '../../types/HTTPEvent';\n\ntype InternalMatchResult = MatchStoryResult<any, RouteOptions>;\n\nconst getProcessGetStorySession = (qpqConfig: QPQConfig): ProcessorFor<typeof askEventGetStorySessionBase> => {\n  const getSession = getProcessCustomImplementation<any>(\n    qpqConfig,\n    askGetHttpApiEventStorySession,\n    'API Get Story Session',\n    null,\n    () => new Date().toISOString(),\n    generateUuid,\n  );\n\n  return async ({ matchStoryResult, qpqEventRecord }, session, actionProcessorList, logger, updateSession, dynamicModuleLoader) => {\n    const payload: GetHttpApiEventStorySessionPayload = {\n      // Registered only for the http api event source, so the base's source-agnostic\n      // record is an HTTPEvent here.\n      event: qpqEventRecord as HTTPEvent,\n      routeAuthSettings: matchStoryResult.config?.routeAuthSettings,\n      session,\n    };\n\n    const [storySession, error] = await getSession(payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader);\n\n    if (error) {\n      return actionResult(void 0);\n    }\n\n    return actionResult(storySession);\n  };\n};\n\nexport const getHttpApiEventGetStorySessionActionProcessor = createActionProcessor(askEventGetStorySessionBase, getProcessGetStorySession);\n"]}
+{"version":3,"file":"getHttpApiEventGetStorySessionActionProcessor.js","sourceRoot":"","sources":["../../../../src/actionProcessor/api/getHttpApiEventGetStorySessionActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAYyB;AAGzB,iGAAkI;AAKlI,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAAoD,EAAE;IAC3G,MAAM,UAAU,GAAG,IAAA,gDAA8B,EAC/C,SAAS,EACT,+DAA8B,EAC9B,uBAAuB,EACvB,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,8BAAY,CACb,CAAC;IAEF,OAAO,yFAAuH,EAAE,gIAAlH,EAAE,gBAAgB,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB;;QAC1H,MAAM,OAAO,GAAuC;YAClD,+EAA+E;YAC/E,+BAA+B;YAC/B,KAAK,EAAE,cAA2B;YAClC,iBAAiB,EAAE,MAAA,gBAAgB,CAAC,MAAM,0CAAE,iBAAiB;YAC7D,OAAO;SACR,CAAC;QAEF,2EAA2E;QAC3E,4EAA4E;QAC5E,wDAAwD;QACxD,MAAM,yBAAyB,GAAG,MAAM,IAAA,8CAA4B,EAClE,SAAS,EACT,gBAAgB,CAAC,OAAO,EACxB,mBAAmB,EACnB,mBAAmB,CACpB,CAAC;QAEF,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;QAExI,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAA,8BAAY,EAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,IAAA,8BAAY,EAAC,YAAY,CAAC,CAAC;IACpC,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEW,QAAA,6CAA6C,GAAG,IAAA,uCAAqB,EAAC,6CAA2B,EAAE,yBAAyB,CAAC,CAAC","sourcesContent":["import {\n  actionResult,\n  askEventGetStorySessionBase,\n  createActionProcessor,\n  EventActionType,\n  generateUuid,\n  getProcessCustomImplementation,\n  MatchStoryResult,\n  mergeRuntimeActionProcessors,\n  ProcessorFor,\n  QPQConfig,\n  StorySession,\n} from 'quidproquo-core';\n\nimport { RouteOptions } from '../../config/settings/route';\nimport { askGetHttpApiEventStorySession, GetHttpApiEventStorySessionPayload } from '../../stories/askGetHttpApiEventStorySession';\nimport { HTTPEvent } from '../../types/HTTPEvent';\n\ntype InternalMatchResult = MatchStoryResult<any, RouteOptions>;\n\nconst getProcessGetStorySession = (qpqConfig: QPQConfig): ProcessorFor<typeof askEventGetStorySessionBase> => {\n  const getSession = getProcessCustomImplementation<any>(\n    qpqConfig,\n    askGetHttpApiEventStorySession,\n    'API Get Story Session',\n    null,\n    () => new Date().toISOString(),\n    generateUuid,\n  );\n\n  return async ({ matchStoryResult, qpqEventRecord }, session, actionProcessorList, logger, updateSession, dynamicModuleLoader) => {\n    const payload: GetHttpApiEventStorySessionPayload = {\n      // Registered only for the http api event source, so the base's source-agnostic\n      // record is an HTTPEvent here.\n      event: qpqEventRecord as HTTPEvent,\n      routeAuthSettings: matchStoryResult.config?.routeAuthSettings,\n      session,\n    };\n\n    // Same merge as the auto-respond preamble: the session-seeding decode must\n    // also see the matched route's processor overrides, or a custom validator's\n    // decoded identity would never reach the story session.\n    const mergedActionProcessorList = await mergeRuntimeActionProcessors(\n      qpqConfig,\n      matchStoryResult.runtime,\n      actionProcessorList,\n      dynamicModuleLoader,\n    );\n\n    const [storySession, error] = await getSession(payload, session, mergedActionProcessorList, logger, updateSession, dynamicModuleLoader);\n\n    if (error) {\n      return actionResult(void 0);\n    }\n\n    return actionResult(storySession);\n  };\n};\n\nexport const getHttpApiEventGetStorySessionActionProcessor = createActionProcessor(askEventGetStorySessionBase, getProcessGetStorySession);\n"]}

package/lib/commonjs/actionProcessor/routeAuthValidation/getRouteAuthValidationDecodeActionProcessor.js

@@ -17,10 +17,12 @@ const getProcessRouteAuthValidationDecode = (qpqConfig) => {
     const decodeAuth = (0, quidproquo_core_1.getProcessCustomImplementation)(qpqConfig, askRouteAuthValidationDecodeDefault_1.askRouteAuthValidationDecodeDefault, 'Route Auth Validation Decode', null, () => new Date().toISOString(), quidproquo_core_1.generateUuid);
     return (payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader, streamRegistry) => __awaiter(void 0, void 0, void 0, function* () {
         const [result, error] = yield decodeAuth(payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader, streamRegistry);
-        if (error) {
-            return (0, quidproquo_core_1.actionResult)(null);
+        // A decode that errored (or returned nothing) is invalid, never
+        // notApplicable: failing open here would skip token auth entirely.
+        if (error || !result) {
+            return (0, quidproquo_core_1.actionResult)({ outcome: routeAuthValidation_1.RouteAuthDecodeOutcome.invalid });
         }
-        return (0, quidproquo_core_1.actionResult)(result !== null && result !== void 0 ? result : null);
+        return (0, quidproquo_core_1.actionResult)(result);
     });
 };
 exports.getRouteAuthValidationDecodeActionProcessor = (0, quidproquo_core_1.createActionProcessor)(routeAuthValidation_1.askRouteAuthValidationDecode, getProcessRouteAuthValidationDecode);

package/lib/commonjs/actionProcessor/routeAuthValidation/getRouteAuthValidationDecodeActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getRouteAuthValidationDecodeActionProcessor.js","sourceRoot":"","sources":["../../../../src/actionProcessor/routeAuthValidation/getRouteAuthValidationDecodeActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAA6I;AAE7I,2EAAgH;AAChH,2GAAwG;AAExG,MAAM,mCAAmC,GAAG,CAAC,SAAoB,EAAqD,EAAE;IACtH,MAAM,UAAU,GAAG,IAAA,gDAA8B,EAC/C,SAAS,EACT,yEAAmC,EACnC,8BAA8B,EAC9B,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,8BAAY,CACb,CAAC;IAEF,OAAO,CAAO,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,cAAc,EAAE,EAAE;QACjH,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC;QAE5I,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,IAAA,8BAAY,EAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,IAAA,8BAAY,EAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,IAAI,CAAC,CAAC;IACtC,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEW,QAAA,2CAA2C,GAAG,IAAA,uCAAqB,EAAC,kDAA4B,EAAE,mCAAmC,CAAC,CAAC","sourcesContent":["import { actionResult, createActionProcessor, generateUuid, getProcessCustomImplementation, ProcessorFor, QPQConfig } from 'quidproquo-core';\n\nimport { askRouteAuthValidationDecode, RouteAuthValidationActionType } from '../../actions/routeAuthValidation';\nimport { askRouteAuthValidationDecodeDefault } from '../../stories/askRouteAuthValidationDecodeDefault';\n\nconst getProcessRouteAuthValidationDecode = (qpqConfig: QPQConfig): ProcessorFor<typeof askRouteAuthValidationDecode> => {\n  const decodeAuth = getProcessCustomImplementation<ProcessorFor<typeof askRouteAuthValidationDecode>>(\n    qpqConfig,\n    askRouteAuthValidationDecodeDefault,\n    'Route Auth Validation Decode',\n    null,\n    () => new Date().toISOString(),\n    generateUuid,\n  );\n\n  return async (payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader, streamRegistry) => {\n    const [result, error] = await decodeAuth(payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader, streamRegistry);\n\n    if (error) {\n      return actionResult(null);\n    }\n\n    return actionResult(result ?? null);\n  };\n};\n\nexport const getRouteAuthValidationDecodeActionProcessor = createActionProcessor(askRouteAuthValidationDecode, getProcessRouteAuthValidationDecode);\n"]}
+{"version":3,"file":"getRouteAuthValidationDecodeActionProcessor.js","sourceRoot":"","sources":["../../../../src/actionProcessor/routeAuthValidation/getRouteAuthValidationDecodeActionProcessor.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAA6I;AAE7I,2EAAwI;AACxI,2GAAwG;AAExG,MAAM,mCAAmC,GAAG,CAAC,SAAoB,EAAqD,EAAE;IACtH,MAAM,UAAU,GAAG,IAAA,gDAA8B,EAC/C,SAAS,EACT,yEAAmC,EACnC,8BAA8B,EAC9B,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,8BAAY,CACb,CAAC;IAEF,OAAO,CAAO,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,cAAc,EAAE,EAAE;QACjH,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC;QAE5I,gEAAgE;QAChE,mEAAmE;QACnE,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YACrB,OAAO,IAAA,8BAAY,EAAC,EAAE,OAAO,EAAE,4CAAsB,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,IAAA,8BAAY,EAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAA,CAAC;AACJ,CAAC,CAAC;AAEW,QAAA,2CAA2C,GAAG,IAAA,uCAAqB,EAAC,kDAA4B,EAAE,mCAAmC,CAAC,CAAC","sourcesContent":["import { actionResult, createActionProcessor, generateUuid, getProcessCustomImplementation, ProcessorFor, QPQConfig } from 'quidproquo-core';\n\nimport { askRouteAuthValidationDecode, RouteAuthDecodeOutcome, RouteAuthValidationActionType } from '../../actions/routeAuthValidation';\nimport { askRouteAuthValidationDecodeDefault } from '../../stories/askRouteAuthValidationDecodeDefault';\n\nconst getProcessRouteAuthValidationDecode = (qpqConfig: QPQConfig): ProcessorFor<typeof askRouteAuthValidationDecode> => {\n  const decodeAuth = getProcessCustomImplementation<ProcessorFor<typeof askRouteAuthValidationDecode>>(\n    qpqConfig,\n    askRouteAuthValidationDecodeDefault,\n    'Route Auth Validation Decode',\n    null,\n    () => new Date().toISOString(),\n    generateUuid,\n  );\n\n  return async (payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader, streamRegistry) => {\n    const [result, error] = await decodeAuth(payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader, streamRegistry);\n\n    // A decode that errored (or returned nothing) is invalid, never\n    // notApplicable: failing open here would skip token auth entirely.\n    if (error || !result) {\n      return actionResult({ outcome: RouteAuthDecodeOutcome.invalid });\n    }\n\n    return actionResult(result);\n  };\n};\n\nexport const getRouteAuthValidationDecodeActionProcessor = createActionProcessor(askRouteAuthValidationDecode, getProcessRouteAuthValidationDecode);\n"]}

package/lib/commonjs/actions/routeAuthValidation/RouteAuthDecodeOutcome.d.ts

@@ -0,0 +1,5 @@
+export declare enum RouteAuthDecodeOutcome {
+    notApplicable = "notApplicable",
+    valid = "valid",
+    invalid = "invalid"
+}

package/lib/commonjs/actions/routeAuthValidation/RouteAuthDecodeOutcome.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RouteAuthDecodeOutcome = void 0;
+var RouteAuthDecodeOutcome;
+(function (RouteAuthDecodeOutcome) {
+    // No token auth is configured for the route: the request passes with an
+    // anonymous session.
+    RouteAuthDecodeOutcome["notApplicable"] = "notApplicable";
+    // The token decoded and validated: the request passes and the decoded token
+    // is seeded onto the story session.
+    RouteAuthDecodeOutcome["valid"] = "valid";
+    // Token auth applies and the request did not satisfy it: 401.
+    RouteAuthDecodeOutcome["invalid"] = "invalid";
+})(RouteAuthDecodeOutcome || (exports.RouteAuthDecodeOutcome = RouteAuthDecodeOutcome = {}));
+//# sourceMappingURL=RouteAuthDecodeOutcome.js.map

package/lib/commonjs/actions/routeAuthValidation/RouteAuthDecodeOutcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RouteAuthDecodeOutcome.js","sourceRoot":"","sources":["../../../../src/actions/routeAuthValidation/RouteAuthDecodeOutcome.ts"],"names":[],"mappings":";;;AAAA,IAAY,sBAWX;AAXD,WAAY,sBAAsB;IAChC,wEAAwE;IACxE,qBAAqB;IACrB,yDAA+B,CAAA;IAE/B,4EAA4E;IAC5E,oCAAoC;IACpC,yCAAe,CAAA;IAEf,8DAA8D;IAC9D,6CAAmB,CAAA;AACrB,CAAC,EAXW,sBAAsB,sCAAtB,sBAAsB,QAWjC","sourcesContent":["export enum RouteAuthDecodeOutcome {\n  // No token auth is configured for the route: the request passes with an\n  // anonymous session.\n  notApplicable = 'notApplicable',\n\n  // The token decoded and validated: the request passes and the decoded token\n  // is seeded onto the story session.\n  valid = 'valid',\n\n  // Token auth applies and the request did not satisfy it: 401.\n  invalid = 'invalid',\n}\n"]}

package/lib/commonjs/actions/routeAuthValidation/RouteAuthDecodeResult.d.ts

@@ -0,0 +1,10 @@
+import { DecodedAccessToken } from 'quidproquo-core';
+import { RouteAuthDecodeOutcome } from './RouteAuthDecodeOutcome';
+export type RouteAuthDecodeResult = {
+    outcome: RouteAuthDecodeOutcome.notApplicable;
+} | {
+    outcome: RouteAuthDecodeOutcome.valid;
+    decodedAccessToken: DecodedAccessToken;
+} | {
+    outcome: RouteAuthDecodeOutcome.invalid;
+};

package/lib/commonjs/actions/routeAuthValidation/RouteAuthDecodeResult.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=RouteAuthDecodeResult.js.map

package/lib/commonjs/actions/routeAuthValidation/RouteAuthDecodeResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RouteAuthDecodeResult.js","sourceRoot":"","sources":["../../../../src/actions/routeAuthValidation/RouteAuthDecodeResult.ts"],"names":[],"mappings":"","sourcesContent":["import { DecodedAccessToken } from 'quidproquo-core';\n\nimport { RouteAuthDecodeOutcome } from './RouteAuthDecodeOutcome';\n\n// The tri-state result of the route auth decode action. The outcomes are\n// explicit (no null overloading) because \"no token auth configured\" and\n// \"token auth failed\" must never be conflated: the first passes as anonymous,\n// the second is a 401.\nexport type RouteAuthDecodeResult =\n  | { outcome: RouteAuthDecodeOutcome.notApplicable }\n  | { outcome: RouteAuthDecodeOutcome.valid; decodedAccessToken: DecodedAccessToken }\n  | { outcome: RouteAuthDecodeOutcome.invalid };\n"]}

package/lib/commonjs/actions/routeAuthValidation/askRouteAuthValidationDecode.d.ts

@@ -1,6 +1,6 @@
-import { DecodedAccessToken } from 'quidproquo-core';
 import { RouteAuthSettings } from '../../config/settings/route';
 import { HTTPEvent } from '../../types/HTTPEvent';
+import { RouteAuthDecodeResult } from './RouteAuthDecodeResult';
 import { RouteAuthValidationActionType } from './RouteAuthValidationActionType';
 export interface RouteAuthValidationDecodeActionPayload {
     event: HTTPEvent;
@@ -11,4 +11,4 @@ export declare const askRouteAuthValidationDecode: import("quidproquo-core").Act
     event: HTTPEvent;
     routeAuthSettings: RouteAuthSettings;
     ignoreExpiration: boolean;
-}, DecodedAccessToken | null, never>;
+}, RouteAuthDecodeResult, never>;

package/lib/commonjs/actions/routeAuthValidation/askRouteAuthValidationDecode.js.map

@@ -1 +1 @@
-{"version":3,"file":"askRouteAuthValidationDecode.js","sourceRoot":"","sources":["../../../../src/actions/routeAuthValidation/askRouteAuthValidationDecode.ts"],"names":[],"mappings":";;;AAAA,qDAA4E;AAI5E,mFAAgF;AAQnE,QAAA,4BAA4B,GAAG,IAAA,uCAAqB,GAA6B,CAAC;IAC7F,UAAU,EAAE,6DAA6B,CAAC,MAAM;IAChD,UAAU,EAAE,CAAC,KAAgB,EAAE,iBAAoC,EAAE,gBAAyB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;CACpJ,CAAC,CAAC","sourcesContent":["import { createActionRequester, DecodedAccessToken } from 'quidproquo-core';\n\nimport { RouteAuthSettings } from '../../config/settings/route';\nimport { HTTPEvent } from '../../types/HTTPEvent';\nimport { RouteAuthValidationActionType } from './RouteAuthValidationActionType';\n\nexport interface RouteAuthValidationDecodeActionPayload {\n  event: HTTPEvent;\n  routeAuthSettings: RouteAuthSettings;\n  ignoreExpiration: boolean;\n}\n\nexport const askRouteAuthValidationDecode = createActionRequester<DecodedAccessToken | null>()({\n  actionType: RouteAuthValidationActionType.Decode,\n  getPayload: (event: HTTPEvent, routeAuthSettings: RouteAuthSettings, ignoreExpiration: boolean) => ({ event, routeAuthSettings, ignoreExpiration }),\n});\n"]}
+{"version":3,"file":"askRouteAuthValidationDecode.js","sourceRoot":"","sources":["../../../../src/actions/routeAuthValidation/askRouteAuthValidationDecode.ts"],"names":[],"mappings":";;;AAAA,qDAAwD;AAKxD,mFAAgF;AAQnE,QAAA,4BAA4B,GAAG,IAAA,uCAAqB,GAAyB,CAAC;IACzF,UAAU,EAAE,6DAA6B,CAAC,MAAM;IAChD,UAAU,EAAE,CAAC,KAAgB,EAAE,iBAAoC,EAAE,gBAAyB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;CACpJ,CAAC,CAAC","sourcesContent":["import { createActionRequester } from 'quidproquo-core';\n\nimport { RouteAuthSettings } from '../../config/settings/route';\nimport { HTTPEvent } from '../../types/HTTPEvent';\nimport { RouteAuthDecodeResult } from './RouteAuthDecodeResult';\nimport { RouteAuthValidationActionType } from './RouteAuthValidationActionType';\n\nexport interface RouteAuthValidationDecodeActionPayload {\n  event: HTTPEvent;\n  routeAuthSettings: RouteAuthSettings;\n  ignoreExpiration: boolean;\n}\n\nexport const askRouteAuthValidationDecode = createActionRequester<RouteAuthDecodeResult>()({\n  actionType: RouteAuthValidationActionType.Decode,\n  getPayload: (event: HTTPEvent, routeAuthSettings: RouteAuthSettings, ignoreExpiration: boolean) => ({ event, routeAuthSettings, ignoreExpiration }),\n});\n"]}

package/lib/commonjs/actions/routeAuthValidation/index.d.ts

@@ -1,2 +1,4 @@
 export * from './askRouteAuthValidationDecode';
+export * from './RouteAuthDecodeOutcome';
+export * from './RouteAuthDecodeResult';
 export * from './RouteAuthValidationActionType';

package/lib/commonjs/actions/routeAuthValidation/index.js

@@ -15,5 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./askRouteAuthValidationDecode"), exports);
+__exportStar(require("./RouteAuthDecodeOutcome"), exports);
+__exportStar(require("./RouteAuthDecodeResult"), exports);
 __exportStar(require("./RouteAuthValidationActionType"), exports);
 //# sourceMappingURL=index.js.map

package/lib/commonjs/actions/routeAuthValidation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/routeAuthValidation/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iEAA+C;AAC/C,kEAAgD","sourcesContent":["export * from './askRouteAuthValidationDecode';\nexport * from './RouteAuthValidationActionType';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/routeAuthValidation/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iEAA+C;AAC/C,2DAAyC;AACzC,0DAAwC;AACxC,kEAAgD","sourcesContent":["export * from './askRouteAuthValidationDecode';\nexport * from './RouteAuthDecodeOutcome';\nexport * from './RouteAuthDecodeResult';\nexport * from './RouteAuthValidationActionType';\n"]}

package/lib/commonjs/stories/askGetHttpApiEventStorySession.js

@@ -5,27 +5,30 @@ const routeAuthValidation_1 = require("../actions/routeAuthValidation");
 const headerUtils_1 = require("../utils/headerUtils");
 const jwtUtils_1 = require("../utils/jwtUtils");
 function* askGetHttpApiEventStorySession({ event, routeAuthSettings, session, }) {
-    const accessToken = (0, headerUtils_1.getAccessTokenFromHeaders)(event.headers);
-    if (!accessToken) {
-        return void 0;
+    // Always yield the decode, mirroring askValidateRouteAuth, so a per-route
+    // processor override's identity reaches the session. Auth already ran in the
+    // auto-respond preamble, hence ignoreExpiration: true.
+    const decodeResult = yield* (0, routeAuthValidation_1.askRouteAuthValidationDecode)(event, routeAuthSettings || {}, true);
+    if (decodeResult.outcome === routeAuthValidation_1.RouteAuthDecodeOutcome.valid) {
+        return Object.assign(Object.assign({}, session), { decodedAccessToken: decodeResult.decodedAccessToken });
     }
-    // If this endpoint has no auth settings, BUT we do have an access token
-    // then we want to just attempt to extract info for logs, but we will say that its wasValid = false
-    if (!(routeAuthSettings === null || routeAuthSettings === void 0 ? void 0 : routeAuthSettings.userDirectoryName)) {
-        const info = (0, jwtUtils_1.unsafeDecodeJWTPayload)(accessToken);
-        return Object.assign(Object.assign({}, session), { decodedAccessToken: {
-                exp: (info === null || info === void 0 ? void 0 : info.exp) || 0,
-                userDirectory: '',
-                userId: (info === null || info === void 0 ? void 0 : info.sub) || (info === null || info === void 0 ? void 0 : info.id) || (info === null || info === void 0 ? void 0 : info.userId) || (info === null || info === void 0 ? void 0 : info.username) || '',
-                username: (info === null || info === void 0 ? void 0 : info.username) || (info === null || info === void 0 ? void 0 : info.userId) || (info === null || info === void 0 ? void 0 : info.sub) || (info === null || info === void 0 ? void 0 : info.id) || '',
-                wasValid: false,
-            } });
+    // Normally unreachable: an invalid request already 401'd in the preamble.
+    if (decodeResult.outcome === routeAuthValidation_1.RouteAuthDecodeOutcome.invalid) {
+        return void 0;
     }
-    // Auth was already validated in auto-respond, so we can use ignoreExpiration: true
-    const decoded = yield* (0, routeAuthValidation_1.askRouteAuthValidationDecode)(event, routeAuthSettings, true);
-    if (!decoded) {
+    // Not applicable: no token auth configured for this route. If an access token
+    // was sent anyway, extract info for the logs only, marked wasValid: false.
+    const accessToken = (0, headerUtils_1.getAccessTokenFromHeaders)(event.headers);
+    if (!accessToken) {
         return void 0;
     }
-    return Object.assign(Object.assign({}, session), { decodedAccessToken: decoded });
+    const info = (0, jwtUtils_1.unsafeDecodeJWTPayload)(accessToken);
+    return Object.assign(Object.assign({}, session), { decodedAccessToken: {
+            exp: (info === null || info === void 0 ? void 0 : info.exp) || 0,
+            userDirectory: '',
+            userId: (info === null || info === void 0 ? void 0 : info.sub) || (info === null || info === void 0 ? void 0 : info.id) || (info === null || info === void 0 ? void 0 : info.userId) || (info === null || info === void 0 ? void 0 : info.username) || '',
+            username: (info === null || info === void 0 ? void 0 : info.username) || (info === null || info === void 0 ? void 0 : info.userId) || (info === null || info === void 0 ? void 0 : info.sub) || (info === null || info === void 0 ? void 0 : info.id) || '',
+            wasValid: false,
+        } });
 }
 //# sourceMappingURL=askGetHttpApiEventStorySession.js.map

package/lib/commonjs/stories/askGetHttpApiEventStorySession.js.map

@@ -1 +1 @@
-{"version":3,"file":"askGetHttpApiEventStorySession.js","sourceRoot":"","sources":["../../../src/stories/askGetHttpApiEventStorySession.ts"],"names":[],"mappings":";;AAcA,wEA+CC;AA3DD,wEAA8E;AAG9E,sDAAiE;AACjE,gDAA2D;AAQ3D,QAAe,CAAC,CAAC,8BAA8B,CAAC,EAC9C,KAAK,EACL,iBAAiB,EACjB,OAAO,GAC4B;IACnC,MAAM,WAAW,GAAG,IAAA,uCAAyB,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC,CAAC;IAChB,CAAC;IAED,wEAAwE;IACxE,mGAAmG;IACnG,IAAI,CAAC,CAAA,iBAAiB,aAAjB,iBAAiB,uBAAjB,iBAAiB,CAAE,iBAAiB,CAAA,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAA,iCAAsB,EAMhC,WAAW,CAAC,CAAC;QAEhB,uCACK,OAAO,KAEV,kBAAkB,EAAE;gBAClB,GAAG,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,KAAI,CAAC;gBACnB,aAAa,EAAE,EAAE;gBACjB,MAAM,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,MAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,EAAE,CAAA,KAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,CAAA,KAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,CAAA,IAAI,EAAE;gBACrE,QAAQ,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,MAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,CAAA,KAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,CAAA,KAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,EAAE,CAAA,IAAI,EAAE;gBACvE,QAAQ,EAAE,KAAK;aAChB,IACD;IACJ,CAAC;IAED,mFAAmF;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAA,kDAA4B,EAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAEpF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC,CAAC;IAChB,CAAC;IAED,uCACK,OAAO,KAEV,kBAAkB,EAAE,OAAO,IAC3B;AACJ,CAAC","sourcesContent":["import { AskResponse, StorySession } from 'quidproquo-core';\n\nimport { askRouteAuthValidationDecode } from '../actions/routeAuthValidation';\nimport { RouteAuthSettings } from '../config/settings/route';\nimport { HTTPEvent } from '../types/HTTPEvent';\nimport { getAccessTokenFromHeaders } from '../utils/headerUtils';\nimport { unsafeDecodeJWTPayload } from '../utils/jwtUtils';\n\nexport interface GetHttpApiEventStorySessionPayload {\n  event: HTTPEvent;\n  routeAuthSettings?: RouteAuthSettings;\n  session: StorySession;\n}\n\nexport function* askGetHttpApiEventStorySession({\n  event,\n  routeAuthSettings,\n  session,\n}: GetHttpApiEventStorySessionPayload): AskResponse<StorySession | undefined> {\n  const accessToken = getAccessTokenFromHeaders(event.headers);\n\n  if (!accessToken) {\n    return void 0;\n  }\n\n  // If this endpoint has no auth settings, BUT we do have an access token\n  // then we want to just attempt to extract info for logs, but we will say that its wasValid = false\n  if (!routeAuthSettings?.userDirectoryName) {\n    const info = unsafeDecodeJWTPayload<{\n      sub?: string;\n      userId?: string;\n      username?: string;\n      id?: string;\n      exp?: number;\n    }>(accessToken);\n\n    return {\n      ...session,\n\n      decodedAccessToken: {\n        exp: info?.exp || 0,\n        userDirectory: '',\n        userId: info?.sub || info?.id || info?.userId || info?.username || '',\n        username: info?.username || info?.userId || info?.sub || info?.id || '',\n        wasValid: false,\n      },\n    };\n  }\n\n  // Auth was already validated in auto-respond, so we can use ignoreExpiration: true\n  const decoded = yield* askRouteAuthValidationDecode(event, routeAuthSettings, true);\n\n  if (!decoded) {\n    return void 0;\n  }\n\n  return {\n    ...session,\n\n    decodedAccessToken: decoded,\n  };\n}\n"]}
+{"version":3,"file":"askGetHttpApiEventStorySession.js","sourceRoot":"","sources":["../../../src/stories/askGetHttpApiEventStorySession.ts"],"names":[],"mappings":";;AAcA,wEAkDC;AA9DD,wEAAsG;AAGtG,sDAAiE;AACjE,gDAA2D;AAQ3D,QAAe,CAAC,CAAC,8BAA8B,CAAC,EAC9C,KAAK,EACL,iBAAiB,EACjB,OAAO,GAC4B;IACnC,0EAA0E;IAC1E,6EAA6E;IAC7E,uDAAuD;IACvD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,IAAA,kDAA4B,EAAC,KAAK,EAAE,iBAAiB,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IAE/F,IAAI,YAAY,CAAC,OAAO,KAAK,4CAAsB,CAAC,KAAK,EAAE,CAAC;QAC1D,uCACK,OAAO,KAEV,kBAAkB,EAAE,YAAY,CAAC,kBAAkB,IACnD;IACJ,CAAC;IAED,0EAA0E;IAC1E,IAAI,YAAY,CAAC,OAAO,KAAK,4CAAsB,CAAC,OAAO,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC,CAAC;IAChB,CAAC;IAED,8EAA8E;IAC9E,2EAA2E;IAC3E,MAAM,WAAW,GAAG,IAAA,uCAAyB,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,IAAA,iCAAsB,EAMhC,WAAW,CAAC,CAAC;IAEhB,uCACK,OAAO,KAEV,kBAAkB,EAAE;YAClB,GAAG,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,KAAI,CAAC;YACnB,aAAa,EAAE,EAAE;YACjB,MAAM,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,MAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,EAAE,CAAA,KAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,CAAA,KAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,CAAA,IAAI,EAAE;YACrE,QAAQ,EAAE,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,MAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,CAAA,KAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,CAAA,KAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,EAAE,CAAA,IAAI,EAAE;YACvE,QAAQ,EAAE,KAAK;SAChB,IACD;AACJ,CAAC","sourcesContent":["import { AskResponse, StorySession } from 'quidproquo-core';\n\nimport { askRouteAuthValidationDecode, RouteAuthDecodeOutcome } from '../actions/routeAuthValidation';\nimport { RouteAuthSettings } from '../config/settings/route';\nimport { HTTPEvent } from '../types/HTTPEvent';\nimport { getAccessTokenFromHeaders } from '../utils/headerUtils';\nimport { unsafeDecodeJWTPayload } from '../utils/jwtUtils';\n\nexport interface GetHttpApiEventStorySessionPayload {\n  event: HTTPEvent;\n  routeAuthSettings?: RouteAuthSettings;\n  session: StorySession;\n}\n\nexport function* askGetHttpApiEventStorySession({\n  event,\n  routeAuthSettings,\n  session,\n}: GetHttpApiEventStorySessionPayload): AskResponse<StorySession | undefined> {\n  // Always yield the decode, mirroring askValidateRouteAuth, so a per-route\n  // processor override's identity reaches the session. Auth already ran in the\n  // auto-respond preamble, hence ignoreExpiration: true.\n  const decodeResult = yield* askRouteAuthValidationDecode(event, routeAuthSettings || {}, true);\n\n  if (decodeResult.outcome === RouteAuthDecodeOutcome.valid) {\n    return {\n      ...session,\n\n      decodedAccessToken: decodeResult.decodedAccessToken,\n    };\n  }\n\n  // Normally unreachable: an invalid request already 401'd in the preamble.\n  if (decodeResult.outcome === RouteAuthDecodeOutcome.invalid) {\n    return void 0;\n  }\n\n  // Not applicable: no token auth configured for this route. If an access token\n  // was sent anyway, extract info for the logs only, marked wasValid: false.\n  const accessToken = getAccessTokenFromHeaders(event.headers);\n\n  if (!accessToken) {\n    return void 0;\n  }\n\n  const info = unsafeDecodeJWTPayload<{\n    sub?: string;\n    userId?: string;\n    username?: string;\n    id?: string;\n    exp?: number;\n  }>(accessToken);\n\n  return {\n    ...session,\n\n    decodedAccessToken: {\n      exp: info?.exp || 0,\n      userDirectory: '',\n      userId: info?.sub || info?.id || info?.userId || info?.username || '',\n      username: info?.username || info?.userId || info?.sub || info?.id || '',\n      wasValid: false,\n    },\n  };\n}\n"]}

package/lib/commonjs/stories/askRouteAuthValidationDecodeDefault.d.ts

@@ -1,3 +1,3 @@
-import { AskResponse, DecodedAccessToken } from 'quidproquo-core';
-import { RouteAuthValidationDecodeActionPayload } from '../actions/routeAuthValidation';
-export declare function askRouteAuthValidationDecodeDefault({ event, routeAuthSettings, ignoreExpiration, }: RouteAuthValidationDecodeActionPayload): AskResponse<DecodedAccessToken | null>;
+import { AskResponse } from 'quidproquo-core';
+import { RouteAuthDecodeResult, RouteAuthValidationDecodeActionPayload } from '../actions/routeAuthValidation';
+export declare function askRouteAuthValidationDecodeDefault({ event, routeAuthSettings, ignoreExpiration, }: RouteAuthValidationDecodeActionPayload): AskResponse<RouteAuthDecodeResult>;

package/lib/commonjs/stories/askRouteAuthValidationDecodeDefault.js

@@ -2,23 +2,27 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.askRouteAuthValidationDecodeDefault = askRouteAuthValidationDecodeDefault;
 const quidproquo_core_1 = require("quidproquo-core");
+const routeAuthValidation_1 = require("../actions/routeAuthValidation");
 const headerUtils_1 = require("../utils/headerUtils");
 function* askRouteAuthValidationDecodeDefault({ event, routeAuthSettings, ignoreExpiration, }) {
+    // No user directory means the route has no token auth under the default
+    // processor: not applicable, the request passes as anonymous. A per-route
+    // override that implements its own auth never reaches this story.
     if (!routeAuthSettings.userDirectoryName) {
-        return null;
+        return { outcome: routeAuthValidation_1.RouteAuthDecodeOutcome.notApplicable };
     }
     const authHeader = (0, headerUtils_1.getHeaderValue)('Authorization', event.headers);
     if (!authHeader) {
-        return null;
+        return { outcome: routeAuthValidation_1.RouteAuthDecodeOutcome.invalid };
     }
     const [authType, accessToken] = authHeader.split(' ');
     if (authType !== 'Bearer' || !accessToken) {
-        return null;
+        return { outcome: routeAuthValidation_1.RouteAuthDecodeOutcome.invalid };
     }
     const result = yield* (0, quidproquo_core_1.askCatch)((0, quidproquo_core_1.askUserDirectoryDecodeAccessToken)(routeAuthSettings.userDirectoryName, ignoreExpiration, accessToken));
-    if (!result.success) {
-        return null;
+    if (!result.success || !result.result.wasValid) {
+        return { outcome: routeAuthValidation_1.RouteAuthDecodeOutcome.invalid };
     }
-    return result.result;
+    return { outcome: routeAuthValidation_1.RouteAuthDecodeOutcome.valid, decodedAccessToken: result.result };
 }
 //# sourceMappingURL=askRouteAuthValidationDecodeDefault.js.map

package/lib/commonjs/stories/askRouteAuthValidationDecodeDefault.js.map

@@ -1 +1 @@
-{"version":3,"file":"askRouteAuthValidationDecodeDefault.js","sourceRoot":"","sources":["../../../src/stories/askRouteAuthValidationDecodeDefault.ts"],"names":[],"mappings":";;AAKA,kFA0BC;AA/BD,qDAA+G;AAG/G,sDAAsD;AAEtD,QAAe,CAAC,CAAC,mCAAmC,CAAC,EACnD,KAAK,EACL,iBAAiB,EACjB,gBAAgB,GACuB;IACvC,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,4BAAc,EAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAA,0BAAQ,EAAC,IAAA,mDAAiC,EAAC,iBAAiB,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC;IAEtI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC","sourcesContent":["import { askCatch, AskResponse, askUserDirectoryDecodeAccessToken, DecodedAccessToken } from 'quidproquo-core';\n\nimport { RouteAuthValidationDecodeActionPayload } from '../actions/routeAuthValidation';\nimport { getHeaderValue } from '../utils/headerUtils';\n\nexport function* askRouteAuthValidationDecodeDefault({\n  event,\n  routeAuthSettings,\n  ignoreExpiration,\n}: RouteAuthValidationDecodeActionPayload): AskResponse<DecodedAccessToken | null> {\n  if (!routeAuthSettings.userDirectoryName) {\n    return null;\n  }\n\n  const authHeader = getHeaderValue('Authorization', event.headers);\n  if (!authHeader) {\n    return null;\n  }\n\n  const [authType, accessToken] = authHeader.split(' ');\n  if (authType !== 'Bearer' || !accessToken) {\n    return null;\n  }\n\n  const result = yield* askCatch(askUserDirectoryDecodeAccessToken(routeAuthSettings.userDirectoryName, ignoreExpiration, accessToken));\n\n  if (!result.success) {\n    return null;\n  }\n\n  return result.result;\n}\n"]}
+{"version":3,"file":"askRouteAuthValidationDecodeDefault.js","sourceRoot":"","sources":["../../../src/stories/askRouteAuthValidationDecodeDefault.ts"],"names":[],"mappings":";;AAKA,kFA6BC;AAlCD,qDAA2F;AAE3F,wEAAuI;AACvI,sDAAsD;AAEtD,QAAe,CAAC,CAAC,mCAAmC,CAAC,EACnD,KAAK,EACL,iBAAiB,EACjB,gBAAgB,GACuB;IACvC,wEAAwE;IACxE,0EAA0E;IAC1E,kEAAkE;IAClE,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,4CAAsB,CAAC,aAAa,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,4BAAc,EAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,4CAAsB,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,4CAAsB,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAA,0BAAQ,EAAC,IAAA,mDAAiC,EAAC,iBAAiB,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC;IAEtI,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,4CAAsB,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,4CAAsB,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACtF,CAAC","sourcesContent":["import { askCatch, AskResponse, askUserDirectoryDecodeAccessToken } from 'quidproquo-core';\n\nimport { RouteAuthDecodeOutcome, RouteAuthDecodeResult, RouteAuthValidationDecodeActionPayload } from '../actions/routeAuthValidation';\nimport { getHeaderValue } from '../utils/headerUtils';\n\nexport function* askRouteAuthValidationDecodeDefault({\n  event,\n  routeAuthSettings,\n  ignoreExpiration,\n}: RouteAuthValidationDecodeActionPayload): AskResponse<RouteAuthDecodeResult> {\n  // No user directory means the route has no token auth under the default\n  // processor: not applicable, the request passes as anonymous. A per-route\n  // override that implements its own auth never reaches this story.\n  if (!routeAuthSettings.userDirectoryName) {\n    return { outcome: RouteAuthDecodeOutcome.notApplicable };\n  }\n\n  const authHeader = getHeaderValue('Authorization', event.headers);\n  if (!authHeader) {\n    return { outcome: RouteAuthDecodeOutcome.invalid };\n  }\n\n  const [authType, accessToken] = authHeader.split(' ');\n  if (authType !== 'Bearer' || !accessToken) {\n    return { outcome: RouteAuthDecodeOutcome.invalid };\n  }\n\n  const result = yield* askCatch(askUserDirectoryDecodeAccessToken(routeAuthSettings.userDirectoryName, ignoreExpiration, accessToken));\n\n  if (!result.success || !result.result.wasValid) {\n    return { outcome: RouteAuthDecodeOutcome.invalid };\n  }\n\n  return { outcome: RouteAuthDecodeOutcome.valid, decodedAccessToken: result.result };\n}\n"]}

package/lib/commonjs/stories/askValidateRouteAuth.js

@@ -8,14 +8,15 @@ function* askValidateRouteAuth({ event, routeAuthSettings }) {
     if (!routeAuthSettings) {
         return true;
     }
-    // Token auth validation via swappable action
-    if (routeAuthSettings.userDirectoryName) {
-        const decoded = yield* (0, routeAuthValidation_1.askRouteAuthValidationDecode)(event, routeAuthSettings, false);
-        if (!decoded || !decoded.wasValid) {
-            return false;
-        }
+    // Token auth via the swappable decode action: always yielded, so a per-route
+    // processor override can implement completely custom auth. The default
+    // processor keeps the user-directory check internally and returns
+    // notApplicable when the route has no token auth configured.
+    const decodeResult = yield* (0, routeAuthValidation_1.askRouteAuthValidationDecode)(event, routeAuthSettings, false);
+    if (decodeResult.outcome === routeAuthValidation_1.RouteAuthDecodeOutcome.invalid) {
+        return false;
     }
-    // API key validation via action
+    // API key validation via action, composing with AND semantics
     const apiKeys = routeAuthSettings.apiKeys || [];
     if (apiKeys.length > 0) {
         const apiKeyHeader = (0, headerUtils_1.getHeaderValue)('x-api-key', event.headers);

package/lib/commonjs/stories/askValidateRouteAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"askValidateRouteAuth.js","sourceRoot":"","sources":["../../../src/stories/askValidateRouteAuth.ts"],"names":[],"mappings":";;AAaA,oDA4BC;AAvCD,kEAA0E;AAC1E,wEAA8E;AAG9E,sDAAsD;AAOtD,QAAe,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAA4B;IAC1F,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6CAA6C;IAC7C,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAA,kDAA4B,EAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,IAAI,EAAE,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,IAAA,4BAAc,EAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAA,8CAA2B,EAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { AskResponse } from 'quidproquo-core';\n\nimport { askApiKeyValidationValidate } from '../actions/apiKeyValidation';\nimport { askRouteAuthValidationDecode } from '../actions/routeAuthValidation';\nimport { RouteAuthSettings } from '../config/settings/route';\nimport { HTTPEvent } from '../types/HTTPEvent';\nimport { getHeaderValue } from '../utils/headerUtils';\n\nexport interface ValidateRouteAuthPayload {\n  event: HTTPEvent;\n  routeAuthSettings?: RouteAuthSettings;\n}\n\nexport function* askValidateRouteAuth({ event, routeAuthSettings }: ValidateRouteAuthPayload): AskResponse<boolean> {\n  if (!routeAuthSettings) {\n    return true;\n  }\n\n  // Token auth validation via swappable action\n  if (routeAuthSettings.userDirectoryName) {\n    const decoded = yield* askRouteAuthValidationDecode(event, routeAuthSettings, false);\n    if (!decoded || !decoded.wasValid) {\n      return false;\n    }\n  }\n\n  // API key validation via action\n  const apiKeys = routeAuthSettings.apiKeys || [];\n  if (apiKeys.length > 0) {\n    const apiKeyHeader = getHeaderValue('x-api-key', event.headers);\n    if (!apiKeyHeader) {\n      return false;\n    }\n\n    const valid = yield* askApiKeyValidationValidate(apiKeyHeader, apiKeys);\n    if (!valid) {\n      return false;\n    }\n  }\n\n  return true;\n}\n"]}
+{"version":3,"file":"askValidateRouteAuth.js","sourceRoot":"","sources":["../../../src/stories/askValidateRouteAuth.ts"],"names":[],"mappings":";;AAaA,oDA6BC;AAxCD,kEAA0E;AAC1E,wEAAsG;AAGtG,sDAAsD;AAOtD,QAAe,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAA4B;IAC1F,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,uEAAuE;IACvE,kEAAkE;IAClE,6DAA6D;IAC7D,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,IAAA,kDAA4B,EAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAC1F,IAAI,YAAY,CAAC,OAAO,KAAK,4CAAsB,CAAC,OAAO,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8DAA8D;IAC9D,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,IAAI,EAAE,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,IAAA,4BAAc,EAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAA,8CAA2B,EAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { AskResponse } from 'quidproquo-core';\n\nimport { askApiKeyValidationValidate } from '../actions/apiKeyValidation';\nimport { askRouteAuthValidationDecode, RouteAuthDecodeOutcome } from '../actions/routeAuthValidation';\nimport { RouteAuthSettings } from '../config/settings/route';\nimport { HTTPEvent } from '../types/HTTPEvent';\nimport { getHeaderValue } from '../utils/headerUtils';\n\nexport interface ValidateRouteAuthPayload {\n  event: HTTPEvent;\n  routeAuthSettings?: RouteAuthSettings;\n}\n\nexport function* askValidateRouteAuth({ event, routeAuthSettings }: ValidateRouteAuthPayload): AskResponse<boolean> {\n  if (!routeAuthSettings) {\n    return true;\n  }\n\n  // Token auth via the swappable decode action: always yielded, so a per-route\n  // processor override can implement completely custom auth. The default\n  // processor keeps the user-directory check internally and returns\n  // notApplicable when the route has no token auth configured.\n  const decodeResult = yield* askRouteAuthValidationDecode(event, routeAuthSettings, false);\n  if (decodeResult.outcome === RouteAuthDecodeOutcome.invalid) {\n    return false;\n  }\n\n  // API key validation via action, composing with AND semantics\n  const apiKeys = routeAuthSettings.apiKeys || [];\n  if (apiKeys.length > 0) {\n    const apiKeyHeader = getHeaderValue('x-api-key', event.headers);\n    if (!apiKeyHeader) {\n      return false;\n    }\n\n    const valid = yield* askApiKeyValidationValidate(apiKeyHeader, apiKeys);\n    if (!valid) {\n      return false;\n    }\n  }\n\n  return true;\n}\n"]}

package/lib/commonjs/utils/qpqConfigAccessorsUtils.js

@@ -47,13 +47,13 @@ exports.getAllWebsocketSrcEntries = getAllWebsocketSrcEntries;
 // Used in bundlers to know where and what to build and index
 // Events, routes, etc
 const getAllSrcEntries = (configs) => {
-    return [
+    return quidproquo_core_1.qpqCoreUtils.expandSrcEntriesWithActionProcessors([
         ...(0, exports.getAllRoutes)(configs).map((r) => r.runtime),
         // ...getAllOpenApiSpecs(configs).map((r) => r.openApiSpecPath),
         ...(0, exports.getAllSeo)(configs).map((seo) => seo.runtime),
         ...(0, exports.getAllServiceFunctions)(configs).map((sf) => sf.runtime),
         ...(0, exports.getAllWebsocketSrcEntries)(configs),
-    ];
+    ]);
 };
 exports.getAllSrcEntries = getAllSrcEntries;
 const getDomainName = (configs) => {

package/lib/commonjs/utils/qpqConfigAccessorsUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"qpqConfigAccessorsUtils.js","sourceRoot":"","sources":["../../../src/utils/qpqConfigAccessorsUtils.ts"],"names":[],"mappings":";;;AAAA,qDAAyF;AAEzF,sCAkBmB;AAGZ,MAAM,YAAY,GAAG,CAAC,SAAoB,EAAoC,EAAE;IACrF,MAAM,MAAM,GAAG,8BAAY,CAAC,iBAAiB,CAAiC,SAAS,EAAE,sCAA6B,CAAC,KAAK,CAAC,CAAC;IAE9H,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAJW,QAAA,YAAY,gBAIvB;AAEK,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAE,SAAoB,EAAoC,EAAE;IAC5G,MAAM,MAAM,GAAG,IAAA,oBAAY,EAAC,SAAS,CAAC,CAAC;IAEvC,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAJW,QAAA,kBAAkB,sBAI7B;AAEK,MAAM,mBAAmB,GAAG,CAAC,SAAoB,EAAqC,EAAE;IAC7F,MAAM,aAAa,GAAG,8BAAY,CAAC,iBAAiB,CAAkC,SAAS,EAAE,sCAA6B,CAAC,MAAM,CAAC,CAAC;IAEvI,OAAO,aAAa,CAAC;AACvB,CAAC,CAAC;AAJW,QAAA,mBAAmB,uBAI9B;AAEK,MAAM,SAAS,GAAG,CAAC,SAAoB,EAAkC,EAAE;IAChF,MAAM,UAAU,GAAG,8BAAY,CAAC,iBAAiB,CAA+B,SAAS,EAAE,sCAA6B,CAAC,GAAG,CAAC,CAAC;IAE9H,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAJW,QAAA,SAAS,aAIpB;AAEK,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAA8C,EAAE;IACzG,MAAM,gBAAgB,GAAG,8BAAY,CAAC,iBAAiB,CACrD,SAAS,EACT,sCAA6B,CAAC,eAAe,CAC9C,CAAC;IAEF,OAAO,gBAAgB,CAAC;AAC1B,CAAC,CAAC;AAPW,QAAA,sBAAsB,0BAOjC;AAEK,MAAM,wBAAwB,GAAG,CAAC,SAAoB,EAA8C,EAAE;IAC3G,MAAM,gBAAgB,GAAG,IAAA,8BAAsB,EAAC,SAAS,CAAC,CAAC;IAE3D,OAAO,8BAAY,CAAC,aAAa,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;AACjE,CAAC,CAAC;AAJW,QAAA,wBAAwB,4BAInC;AAEK,MAAM,kBAAkB,GAAG,CAAC,OAAkB,EAAsC,EAAE;IAC3F,MAAM,YAAY,GAAG,8BAAY,CAAC,iBAAiB,CAAmC,OAAO,EAAE,sCAA6B,CAAC,OAAO,CAAC,CAAC;IAEtI,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAJW,QAAA,kBAAkB,sBAI7B;AAEK,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAAwB,EAAE;IACtF,OAAO,IAAA,iCAAyB,EAAC,SAAS,CAAC;SACxC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;SAC1G,MAAM,CAAC,2BAAS,CAAC,CAAC;AACvB,CAAC,CAAC;AAJW,QAAA,yBAAyB,6BAIpC;AAEF,6DAA6D;AAC7D,sBAAsB;AACf,MAAM,gBAAgB,GAAG,CAAC,OAAkB,EAAwB,EAAE;IAC3E,OAAO;QACL,GAAG,IAAA,oBAAY,EAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9C,gEAAgE;QAChE,GAAG,IAAA,iBAAS,EAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/C,GAAG,IAAA,8BAAsB,EAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC;QAC1D,GAAG,IAAA,iCAAyB,EAAC,OAAO,CAAC;KACtC,CAAC;AACJ,CAAC,CAAC;AARW,QAAA,gBAAgB,oBAQ3B;AAEK,MAAM,aAAa,GAAG,CAAC,OAAkB,EAAU,EAAE;IAC1D,MAAM,WAAW,GAAG,8BAAY,CAAC,gBAAgB,CAA+B,OAAO,EAAE,sCAA6B,CAAC,GAAG,CAAC,CAAC;IAE5H,OAAO,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,OAAO,KAAI,EAAE,CAAC;AACpC,CAAC,CAAC;AAJW,QAAA,aAAa,iBAIxB;AAEK,MAAM,WAAW,GAAG,CAAC,OAAkB,EAAU,EAAE;IACxD,MAAM,QAAQ,GAAG,8BAAY,CAAC,gBAAgB,CAAoC,OAAO,EAAE,sCAA6B,CAAC,QAAQ,CAAC,CAAC;IAEnI,IAAI,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,SAAS,CAAA,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,SAAS,CAAC;AAC7B,CAAC,CAAC;AARW,QAAA,WAAW,eAQtB;AAEK,MAAM,0BAA0B,GAAG,CAAC,OAAe,EAAE,SAAoB,EAAsC,EAAE;IACtH,MAAM,iBAAiB,GAAG,IAAA,4BAAoB,EAAC,SAAS,CAAC,CAAC;IAE1D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAE9E,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,GAAG,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC,CAAC;AAVW,QAAA,0BAA0B,8BAUrC;AAEK,MAAM,qBAAqB,GAAG,CAAC,OAAkB,EAAgD,EAAE;IACxG,MAAM,kBAAkB,GAAG,8BAAY,CAAC,iBAAiB,CACvD,OAAO,EACP,sCAA6B,CAAC,iBAAiB,CAChD,CAAC;IAEF,OAAO,kBAAkB,CAAC;AAC5B,CAAC,CAAC;AAPW,QAAA,qBAAqB,yBAOhC;AAEK,MAAM,aAAa,GAAG,CAAC,OAAkB,EAAkC,EAAE;IAClF,OAAO,8BAAY,CAAC,iBAAiB,CAA+B,OAAO,EAAE,sCAA6B,CAAC,GAAG,CAAC,CAAC;AAClH,CAAC,CAAC;AAFW,QAAA,aAAa,iBAExB;AAEK,MAAM,aAAa,GAAG,CAAC,OAAkB,EAAkC,EAAE;IAClF,OAAO,8BAAY,CAAC,iBAAiB,CAA+B,OAAO,EAAE,sCAA6B,CAAC,GAAG,CAAC,CAAC;AAClH,CAAC,CAAC;AAFW,QAAA,aAAa,iBAExB;AAEK,MAAM,kBAAkB,GAAG,CAAC,OAAkB,EAAuC,EAAE;IAC5F,OAAO,8BAAY,CAAC,iBAAiB,CAAoC,OAAO,EAAE,sCAA6B,CAAC,QAAQ,CAAC,CAAC;AAC5H,CAAC,CAAC;AAFW,QAAA,kBAAkB,sBAE7B;AAEK,MAAM,qBAAqB,GAAG,CAAC,OAAkB,EAA0C,EAAE;IAClG,OAAO,8BAAY,CAAC,iBAAiB,CAAuC,OAAO,EAAE,sCAA6B,CAAC,WAAW,CAAC,CAAC;AAClI,CAAC,CAAC;AAFW,QAAA,qBAAqB,yBAEhC;AAEK,MAAM,uBAAuB,GAAG,CAAC,SAAoB,EAAoC,EAAE;IAChG,MAAM,aAAa,GAAG,8BAAY,CAAC,iBAAiB,CAAiC,SAAS,EAAE,sCAA6B,CAAC,KAAK,CAAC,CAAC;IAErI,OAAO,8BAAY,CAAC,aAAa,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC,CAAC;AAJW,QAAA,uBAAuB,2BAIlC;AAEK,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAA0C,EAAE;IAC3G,MAAM,mBAAmB,GAAG,8BAAY,CAAC,iBAAiB,CACxD,SAAS,EACT,sCAA6B,CAAC,WAAW,CAC1C,CAAC;IAEF,OAAO,8BAAY,CAAC,aAAa,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;AACpE,CAAC,CAAC;AAPW,QAAA,4BAA4B,gCAOvC;AAEK,MAAM,oBAAoB,GAAG,CAAC,eAAuB,EAAE,SAAoB,EAAkC,EAAE;IACpH,MAAM,YAAY,GAAG,8BAAY;SAC9B,iBAAiB,CAAiC,SAAS,EAAE,sCAA6B,CAAC,KAAK,CAAC;SACjG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;IAE3C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,mCAAmC,eAAe,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAVW,QAAA,oBAAoB,wBAU/B;AAEK,MAAM,wBAAwB,GAAG,CAAC,OAAkB,EAAU,EAAE;IACrE,MAAM,WAAW,GAAG,8BAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,IAAA,qBAAa,EAAC,OAAO,CAAC,CAAC;IAE9C,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,OAAO,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;AAC5C,CAAC,CAAC;AATW,QAAA,wBAAwB,4BASnC;AAEK,MAAM,iBAAiB,GAAG,CAAC,SAAoB,EAAU,EAAE;IAChE,MAAM,iBAAiB,GAAG,IAAA,gCAAwB,EAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,8BAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;IAEpE,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,GAAG,OAAO,IAAI,iBAAiB,EAAE,CAAC;IAC3C,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC,CAAC;AATW,QAAA,iBAAiB,qBAS5B;AAEK,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAU,EAAE;IACnE,MAAM,OAAO,GAAG,8BAAY,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,IAAA,yBAAiB,EAAC,SAAS,CAAC,CAAC;IAEhD,OAAO,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;AACpC,CAAC,CAAC;AALW,QAAA,oBAAoB,wBAK/B;AAEF;;;;;;;;GAQG;AACI,MAAM,sCAAsC,GAAG,CAAC,SAAoB,EAAE,eAA0B,EAAY,EAAE;IACnH,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,IAAI,CAAC,IAAA,qBAAa,EAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,yBAAiB,EAAC,SAAS,CAAC,CAAC;IAChD,OAAO,CAAC,WAAW,UAAU,EAAE,EAAE,aAAa,UAAU,EAAE,CAAC,CAAC;AAC9D,CAAC,CAAC;AAXW,QAAA,sCAAsC,0CAWjD;AAEF;;;;GAIG;AACI,MAAM,iCAAiC,GAAG,CAAC,SAAoB,EAAE,gBAAwB,EAAY,EAAE;IAC5G,MAAM,WAAW,GAAG,8BAAY;SAC7B,iBAAiB,CAAoD,SAAS,EAAE,sCAA6B,CAAC,wBAAwB,CAAC;SACvI,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,KAAK,gBAAgB,CAAC,CAAC;IAEpE,OAAO,IAAA,8CAAsC,EAAC,SAAS,EAAE,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,cAAc,CAAC,CAAC;AACxF,CAAC,CAAC;AANW,QAAA,iCAAiC,qCAM5C;AAEF;;;;;GAKG;AACI,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAAE,gBAAwB,EAAW,EAAE;IACtG,OAAO,IAAA,0BAAkB,EAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,kBAAkB,KAAK,gBAAgB,CAAC,CAAC;AACzH,CAAC,CAAC;AAFW,QAAA,4BAA4B,gCAEvC;AAEF,yFAAyF;AACzF,qFAAqF;AACxE,QAAA,yBAAyB,GAAuB;IAC3D,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAClC,YAAY,EAAE,EAAE;IAChB,aAAa,EAAE,GAAG;IAClB,iBAAiB,EAAE,IAAI,GAAG,IAAI;CAC/B,CAAC;AAEK,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAAsB,EAAE;IAChF,MAAM,OAAO,GAAG,8BAAY,CAAC,gBAAgB,CAC3C,SAAS,EACT,sCAA6B,CAAC,kBAAkB,CACjD,CAAC;IAEF,uCACK,iCAAyB,GACzB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,kBAAkB,KAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAA,2BAAS,EAAC,KAAK,CAAC,CAAC,CAAC,EAChH;AACJ,CAAC,CAAC;AAVW,QAAA,qBAAqB,yBAUhC;AAEK,MAAM,qCAAqC,GAAG,CAAC,SAAoB,EAAE,UAAkB,EAAE,YAAqB,EAAU,EAAE;IAC/H,MAAM,OAAO,GAAG,8BAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,8BAAY,CAAC,+BAA+B,CAAC,SAAS,CAAC,CAAC;IAE5E,MAAM,UAAU,GAAG,YAAY;QAC7B,CAAC,CAAC,IAAA,qBAAa,EAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC;QACjD,CAAC,CAAC,IAAA,kCAA0B,EAAC,UAAU,EAAE,WAAW,EAAE,8BAAY,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAEnH,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AATW,QAAA,qCAAqC,yCAShD;AAEK,MAAM,0BAA0B,GAAG,CAAC,UAAkB,EAAE,WAAmB,EAAE,OAAe,EAAE,OAAgB,EAAE,EAAE;IACvH,MAAM,UAAU,GAAG,IAAA,qBAAa,EAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAEnE,OAAO,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;AACpC,CAAC,CAAC;AAJW,QAAA,0BAA0B,8BAIrC;AAEK,MAAM,8BAA8B,GAAG,CAAC,WAAmB,EAAE,MAAc,EAAU,EAAE;IAC5F,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,GAAG,WAAW,IAAI,MAAM,EAAE,CAAC;AACpC,CAAC,CAAC;AANW,QAAA,8BAA8B,kCAMzC;AAEK,MAAM,uBAAuB,GAAG,CAAC,SAAoB,EAAkD,EAAE;IAC9G,MAAM,oBAAoB,GACxB,8BAAY,CAAC,iBAAiB,CAA+C,SAAS,EAAE,sCAA6B,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;IAEnJ,OAAO,oBAAoB,CAAC;AAC9B,CAAC,CAAC;AALW,QAAA,uBAAuB,2BAKlC;AAEK,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAE,WAAmB,EAAE,OAAgB,EAAU,EAAE;IACjG,IAAI,YAAY,GAAG,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,IAAI,OAAO,EAAE,CAAC;QACZ,YAAY,GAAG,GAAG,OAAO,IAAI,YAAY,EAAE,CAAC;IAC9C,CAAC;IAED,OAAO,GAAG,YAAY,GAAG,UAAU,EAAE,CAAC;AACxC,CAAC,CAAC;AAPW,QAAA,aAAa,iBAOxB;AAEK,MAAM,iBAAiB,GAAG,CAAC,UAAkB,EAAE,SAAoB,EAAU,EAAE;IACpF,MAAM,MAAM,GAAG,IAAA,qBAAa,EAC1B,UAAU,EACV,8BAAY,CAAC,+BAA+B,CAAC,SAAS,CAAC,EACvD,8BAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CACpD,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AARW,QAAA,iBAAiB,qBAQ5B;AAEK,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAA0C,EAAE;IACrG,MAAM,mBAAmB,GACvB,8BAAY,CAAC,iBAAiB,CAAuC,SAAS,EAAE,sCAA6B,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAEnI,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC;AALW,QAAA,sBAAsB,0BAKjC;AAEK,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAwC,EAAE;IACjG,MAAM,iBAAiB,GACrB,8BAAY,CAAC,iBAAiB,CAAqC,SAAS,EAAE,sCAA6B,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAE/H,OAAO,iBAAiB,CAAC;AAC3B,CAAC,CAAC;AALW,QAAA,oBAAoB,wBAK/B;AAEK,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAAwC,EAAE;IACtG,MAAM,iBAAiB,GAAG,IAAA,4BAAoB,EAAC,SAAS,CAAC,CAAC;IAE1D,OAAO,8BAAY,CAAC,aAAa,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAClE,CAAC,CAAC;AAJW,QAAA,yBAAyB,6BAIpC","sourcesContent":["import { isDefined, QPQConfig, qpqCoreUtils, QpqFunctionRuntime } from 'quidproquo-core';\n\nimport {\n  ApiKeyQPQWebServerConfigSetting,\n  CacheQPQWebServerConfigSetting,\n  CertificateQPQWebServerConfigSetting,\n  DefaultRouteOptionsQPQWebServerConfigSetting,\n  DnsQPQWebServerConfigSetting,\n  DomainProxyQPQWebServerConfigSetting,\n  EmailSenderQPQWebServerConfigSetting,\n  FileUploadSettings,\n  FileUploadSettingsQPQWebServerConfigSetting,\n  OpenApiQPQWebServerConfigSetting,\n  QPQWebServerConfigSettingType,\n  RouteQPQWebServerConfigSetting,\n  SeoQPQWebServerConfigSetting,\n  ServiceFunctionQPQWebServerConfigSetting,\n  StorageDriveCorsSettingsQPQWebServerConfigSetting,\n  SubdomainRedirectQPQWebServerConfigSetting,\n  WebSocketQPQWebServerConfigSetting,\n} from '../config';\nimport { ApiQPQWebServerConfigSetting, WebEntryQPQWebServerConfigSetting } from '../config';\n\nexport const getAllRoutes = (qpqConfig: QPQConfig): RouteQPQWebServerConfigSetting[] => {\n  const routes = qpqCoreUtils.getConfigSettings<RouteQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Route);\n\n  return routes;\n};\n\nexport const getAllRoutesForApi = (apiName: string, qpqConfig: QPQConfig): RouteQPQWebServerConfigSetting[] => {\n  const routes = getAllRoutes(qpqConfig);\n\n  return routes;\n};\n\nexport const getAllApiKeyConfigs = (qpqConfig: QPQConfig): ApiKeyQPQWebServerConfigSetting[] => {\n  const apiKeyConfigs = qpqCoreUtils.getConfigSettings<ApiKeyQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.ApiKey);\n\n  return apiKeyConfigs;\n};\n\nexport const getAllSeo = (qpqConfig: QPQConfig): SeoQPQWebServerConfigSetting[] => {\n  const seoConfigs = qpqCoreUtils.getConfigSettings<SeoQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Seo);\n\n  return seoConfigs;\n};\n\nexport const getAllServiceFunctions = (qpqConfig: QPQConfig): ServiceFunctionQPQWebServerConfigSetting[] => {\n  const serviceFunctions = qpqCoreUtils.getConfigSettings<ServiceFunctionQPQWebServerConfigSetting>(\n    qpqConfig,\n    QPQWebServerConfigSettingType.ServiceFunction,\n  );\n\n  return serviceFunctions;\n};\n\nexport const getOwnedServiceFunctions = (qpqConfig: QPQConfig): ServiceFunctionQPQWebServerConfigSetting[] => {\n  const serviceFunctions = getAllServiceFunctions(qpqConfig);\n\n  return qpqCoreUtils.getOwnedItems(serviceFunctions, qpqConfig);\n};\n\nexport const getAllOpenApiSpecs = (configs: QPQConfig): OpenApiQPQWebServerConfigSetting[] => {\n  const openApiSpecs = qpqCoreUtils.getConfigSettings<OpenApiQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.OpenApi);\n\n  return openApiSpecs;\n};\n\nexport const getAllWebsocketSrcEntries = (qpqConfig: QPQConfig): QpqFunctionRuntime[] => {\n  return getOwnedWebsocketSettings(qpqConfig)\n    .flatMap((s) => [s.eventProcessors.onConnect, s.eventProcessors.onDisconnect, s.eventProcessors.onMessage])\n    .filter(isDefined);\n};\n\n// Used in bundlers to know where and what to build and index\n// Events, routes, etc\nexport const getAllSrcEntries = (configs: QPQConfig): QpqFunctionRuntime[] => {\n  return [\n    ...getAllRoutes(configs).map((r) => r.runtime),\n    // ...getAllOpenApiSpecs(configs).map((r) => r.openApiSpecPath),\n    ...getAllSeo(configs).map((seo) => seo.runtime),\n    ...getAllServiceFunctions(configs).map((sf) => sf.runtime),\n    ...getAllWebsocketSrcEntries(configs),\n  ];\n};\n\nexport const getDomainName = (configs: QPQConfig): string => {\n  const dnsSettings = qpqCoreUtils.getConfigSetting<DnsQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.Dns);\n\n  return dnsSettings?.dnsBase || '';\n};\n\nexport const getWebEntry = (configs: QPQConfig): string => {\n  const webEntry = qpqCoreUtils.getConfigSetting<WebEntryQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.WebEntry);\n\n  if (!webEntry?.buildPath) {\n    throw new Error('please use defineWebEntry in your qpq config');\n  }\n\n  return webEntry?.buildPath;\n};\n\nexport const getWebsocketEntryByApiName = (apiName: string, qpqConfig: QPQConfig): WebSocketQPQWebServerConfigSetting => {\n  const websocketSettings = getWebsocketSettings(qpqConfig);\n\n  const websocketSetting = websocketSettings.find((s) => s.apiName === apiName);\n\n  if (!websocketSetting) {\n    throw new Error(`No websocket setting found for api [${apiName}]`);\n  }\n\n  return websocketSetting;\n};\n\nexport const getSubdomainRedirects = (configs: QPQConfig): SubdomainRedirectQPQWebServerConfigSetting[] => {\n  const subdomainRedirects = qpqCoreUtils.getConfigSettings<SubdomainRedirectQPQWebServerConfigSetting>(\n    configs,\n    QPQWebServerConfigSettingType.SubdomainRedirect,\n  );\n\n  return subdomainRedirects;\n};\n\nexport const getApiConfigs = (configs: QPQConfig): ApiQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<ApiQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.Api);\n};\n\nexport const getDnsConfigs = (configs: QPQConfig): DnsQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<DnsQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.Dns);\n};\n\nexport const getWebEntryConfigs = (configs: QPQConfig): WebEntryQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<WebEntryQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.WebEntry);\n};\n\nexport const getDomainProxyConfigs = (configs: QPQConfig): DomainProxyQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<DomainProxyQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.DomainProxy);\n};\n\nexport const getAllOwnedCacheConfigs = (qpqConfig: QPQConfig): CacheQPQWebServerConfigSetting[] => {\n  const cacheSettings = qpqCoreUtils.getConfigSettings<CacheQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Cache);\n\n  return qpqCoreUtils.getOwnedItems(cacheSettings, qpqConfig);\n};\n\nexport const getAllOwnedCertifcateConfigs = (qpqConfig: QPQConfig): CertificateQPQWebServerConfigSetting[] => {\n  const certificateSettings = qpqCoreUtils.getConfigSettings<CertificateQPQWebServerConfigSetting>(\n    qpqConfig,\n    QPQWebServerConfigSettingType.Certificate,\n  );\n\n  return qpqCoreUtils.getOwnedItems(certificateSettings, qpqConfig);\n};\n\nexport const getCacheConfigByName = (cacheConfigName: string, qpqConfig: QPQConfig): CacheQPQWebServerConfigSetting => {\n  const cacheSetting = qpqCoreUtils\n    .getConfigSettings<CacheQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Cache)\n    .find((c) => c.name === cacheConfigName);\n\n  if (!cacheSetting) {\n    throw new Error(`No cache config found for name [${cacheConfigName}]`);\n  }\n\n  return cacheSetting;\n};\n\nexport const getEnvironmentDomainName = (configs: QPQConfig): string => {\n  const environment = qpqCoreUtils.getApplicationModuleEnvironment(configs);\n  const apexDomainName = getDomainName(configs);\n\n  if (environment === 'production') {\n    return apexDomainName;\n  }\n\n  return `${environment}.${apexDomainName}`;\n};\n\nexport const getBaseDomainName = (qpqConfig: QPQConfig): string => {\n  const environmentDomain = getEnvironmentDomainName(qpqConfig);\n  const feature = qpqCoreUtils.getApplicationModuleFeature(qpqConfig);\n\n  if (feature) {\n    return `${feature}.${environmentDomain}`;\n  }\n\n  return environmentDomain;\n};\n\nexport const getServiceDomainName = (qpqConfig: QPQConfig): string => {\n  const service = qpqCoreUtils.getApplicationModuleName(qpqConfig);\n  const domainBase = getBaseDomainName(qpqConfig);\n\n  return `${service}.${domainBase}`;\n};\n\n/**\n * Resolve browser CORS origins for a service resource. An explicit list wins;\n * otherwise scope to this service's own domain (apex + one-level subdomain\n * wildcard, which S3/CloudFront both support). Falls back to '*' only when the\n * service declares no domain at all (nothing browser-facing).\n *\n * Note: key off the raw dns base (`getDomainName`) to detect \"no domain\" —\n * `getBaseDomainName` still returns an env prefix like `development.` here.\n */\nexport const resolveServiceScopedCorsAllowedOrigins = (qpqConfig: QPQConfig, explicitOrigins?: string[]): string[] => {\n  if (explicitOrigins) {\n    return explicitOrigins;\n  }\n\n  if (!getDomainName(qpqConfig)) {\n    return ['*'];\n  }\n\n  const baseDomain = getBaseDomainName(qpqConfig);\n  return [`https://${baseDomain}`, `https://*.${baseDomain}`];\n};\n\n/**\n * Browser origins allowed to read/write a storage drive's objects cross-origin\n * (e.g. presigned uploads/downloads), looked up by the drive's name. An explicit\n * `defineStorageDriveCorsSettings` wins; otherwise the service-scoped default.\n */\nexport const getStorageDriveCorsAllowedOrigins = (qpqConfig: QPQConfig, storageDriveName: string): string[] => {\n  const corsSetting = qpqCoreUtils\n    .getConfigSettings<StorageDriveCorsSettingsQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.StorageDriveCorsSettings)\n    .find((setting) => setting.storageDriveName === storageDriveName);\n\n  return resolveServiceScopedCorsAllowedOrigins(qpqConfig, corsSetting?.allowedOrigins);\n};\n\n/**\n * Whether any web entry in this service serves its assets from the named storage\n * drive (`storageDrive.sourceStorageDrive`) — i.e. the drive's bucket is a\n * CloudFront origin. Drives with no web entry consumer need no CloudFront access\n * to their bucket at all.\n */\nexport const isStorageDriveWebEntryOrigin = (qpqConfig: QPQConfig, storageDriveName: string): boolean => {\n  return getWebEntryConfigs(qpqConfig).some((webEntry) => webEntry.storageDrive.sourceStorageDrive === storageDriveName);\n};\n\n// API Gateway caps request payloads at 10MB, so the default per-file ceiling matches it;\n// the other defaults exist to bound parser memory rather than to be hit in practice.\nexport const defaultFileUploadSettings: FileUploadSettings = {\n  maxFileSizeBytes: 10 * 1024 * 1024,\n  maxFileCount: 10,\n  maxFieldCount: 100,\n  maxFieldSizeBytes: 1024 * 1024,\n};\n\nexport const getFileUploadSettings = (qpqConfig: QPQConfig): FileUploadSettings => {\n  const setting = qpqCoreUtils.getConfigSetting<FileUploadSettingsQPQWebServerConfigSetting>(\n    qpqConfig,\n    QPQWebServerConfigSettingType.FileUploadSettings,\n  );\n\n  return {\n    ...defaultFileUploadSettings,\n    ...Object.fromEntries(Object.entries(setting?.fileUploadSettings || {}).filter(([, value]) => isDefined(value))),\n  };\n};\n\nexport const resolveApexDomainNameFromDomainConfig = (qpqConfig: QPQConfig, rootDomain: string, onRootDomain: boolean): string => {\n  const feature = qpqCoreUtils.getApplicationModuleFeature(qpqConfig);\n  const environment = qpqCoreUtils.getApplicationModuleEnvironment(qpqConfig);\n\n  const apexDomain = onRootDomain\n    ? getDomainRoot(rootDomain, environment, feature)\n    : constructServiceDomainName(rootDomain, environment, qpqCoreUtils.getApplicationModuleName(qpqConfig), feature);\n\n  return apexDomain;\n};\n\nexport const constructServiceDomainName = (rootDomain: string, environment: string, service: string, feature?: string) => {\n  const domainBase = getDomainRoot(rootDomain, environment, feature);\n\n  return `${service}.${domainBase}`;\n};\n\nexport const constructEnvironmentDomainName = (environment: string, domain: string): string => {\n  if (environment === 'production') {\n    return domain;\n  }\n\n  return `${environment}.${domain}`;\n};\n\nexport const getDefaultRouteSettings = (qpqConfig: QPQConfig): DefaultRouteOptionsQPQWebServerConfigSetting[] => {\n  const defaultRouteSettings =\n    qpqCoreUtils.getConfigSettings<DefaultRouteOptionsQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.DefaultRouteOptions) || [];\n\n  return defaultRouteSettings;\n};\n\nexport const getDomainRoot = (rootDomain: string, environment: string, feature?: string): string => {\n  let domainPrefix = environment !== 'production' ? `${environment}.` : '';\n  if (feature) {\n    domainPrefix = `${feature}.${domainPrefix}`;\n  }\n\n  return `${domainPrefix}${rootDomain}`;\n};\n\nexport const resolveDomainRoot = (rootDomain: string, qpqConfig: QPQConfig): string => {\n  const domain = getDomainRoot(\n    rootDomain,\n    qpqCoreUtils.getApplicationModuleEnvironment(qpqConfig),\n    qpqCoreUtils.getApplicationModuleFeature(qpqConfig),\n  );\n\n  return domain;\n};\n\nexport const getEmailSenderSettings = (qpqConfig: QPQConfig): EmailSenderQPQWebServerConfigSetting[] => {\n  const emailSenderSettings =\n    qpqCoreUtils.getConfigSettings<EmailSenderQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.EmailSender) || [];\n\n  return emailSenderSettings;\n};\n\nexport const getWebsocketSettings = (qpqConfig: QPQConfig): WebSocketQPQWebServerConfigSetting[] => {\n  const websocketSettings =\n    qpqCoreUtils.getConfigSettings<WebSocketQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.WebSocket) || [];\n\n  return websocketSettings;\n};\n\nexport const getOwnedWebsocketSettings = (qpqConfig: QPQConfig): WebSocketQPQWebServerConfigSetting[] => {\n  const websocketSettings = getWebsocketSettings(qpqConfig);\n\n  return qpqCoreUtils.getOwnedItems(websocketSettings, qpqConfig);\n};\n"]}
+{"version":3,"file":"qpqConfigAccessorsUtils.js","sourceRoot":"","sources":["../../../src/utils/qpqConfigAccessorsUtils.ts"],"names":[],"mappings":";;;AAAA,qDAAyF;AAEzF,sCAkBmB;AAGZ,MAAM,YAAY,GAAG,CAAC,SAAoB,EAAoC,EAAE;IACrF,MAAM,MAAM,GAAG,8BAAY,CAAC,iBAAiB,CAAiC,SAAS,EAAE,sCAA6B,CAAC,KAAK,CAAC,CAAC;IAE9H,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAJW,QAAA,YAAY,gBAIvB;AAEK,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAE,SAAoB,EAAoC,EAAE;IAC5G,MAAM,MAAM,GAAG,IAAA,oBAAY,EAAC,SAAS,CAAC,CAAC;IAEvC,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAJW,QAAA,kBAAkB,sBAI7B;AAEK,MAAM,mBAAmB,GAAG,CAAC,SAAoB,EAAqC,EAAE;IAC7F,MAAM,aAAa,GAAG,8BAAY,CAAC,iBAAiB,CAAkC,SAAS,EAAE,sCAA6B,CAAC,MAAM,CAAC,CAAC;IAEvI,OAAO,aAAa,CAAC;AACvB,CAAC,CAAC;AAJW,QAAA,mBAAmB,uBAI9B;AAEK,MAAM,SAAS,GAAG,CAAC,SAAoB,EAAkC,EAAE;IAChF,MAAM,UAAU,GAAG,8BAAY,CAAC,iBAAiB,CAA+B,SAAS,EAAE,sCAA6B,CAAC,GAAG,CAAC,CAAC;IAE9H,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAJW,QAAA,SAAS,aAIpB;AAEK,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAA8C,EAAE;IACzG,MAAM,gBAAgB,GAAG,8BAAY,CAAC,iBAAiB,CACrD,SAAS,EACT,sCAA6B,CAAC,eAAe,CAC9C,CAAC;IAEF,OAAO,gBAAgB,CAAC;AAC1B,CAAC,CAAC;AAPW,QAAA,sBAAsB,0BAOjC;AAEK,MAAM,wBAAwB,GAAG,CAAC,SAAoB,EAA8C,EAAE;IAC3G,MAAM,gBAAgB,GAAG,IAAA,8BAAsB,EAAC,SAAS,CAAC,CAAC;IAE3D,OAAO,8BAAY,CAAC,aAAa,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;AACjE,CAAC,CAAC;AAJW,QAAA,wBAAwB,4BAInC;AAEK,MAAM,kBAAkB,GAAG,CAAC,OAAkB,EAAsC,EAAE;IAC3F,MAAM,YAAY,GAAG,8BAAY,CAAC,iBAAiB,CAAmC,OAAO,EAAE,sCAA6B,CAAC,OAAO,CAAC,CAAC;IAEtI,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAJW,QAAA,kBAAkB,sBAI7B;AAEK,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAAwB,EAAE;IACtF,OAAO,IAAA,iCAAyB,EAAC,SAAS,CAAC;SACxC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;SAC1G,MAAM,CAAC,2BAAS,CAAC,CAAC;AACvB,CAAC,CAAC;AAJW,QAAA,yBAAyB,6BAIpC;AAEF,6DAA6D;AAC7D,sBAAsB;AACf,MAAM,gBAAgB,GAAG,CAAC,OAAkB,EAAwB,EAAE;IAC3E,OAAO,8BAAY,CAAC,oCAAoC,CAAC;QACvD,GAAG,IAAA,oBAAY,EAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9C,gEAAgE;QAChE,GAAG,IAAA,iBAAS,EAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/C,GAAG,IAAA,8BAAsB,EAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC;QAC1D,GAAG,IAAA,iCAAyB,EAAC,OAAO,CAAC;KACtC,CAAC,CAAC;AACL,CAAC,CAAC;AARW,QAAA,gBAAgB,oBAQ3B;AAEK,MAAM,aAAa,GAAG,CAAC,OAAkB,EAAU,EAAE;IAC1D,MAAM,WAAW,GAAG,8BAAY,CAAC,gBAAgB,CAA+B,OAAO,EAAE,sCAA6B,CAAC,GAAG,CAAC,CAAC;IAE5H,OAAO,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,OAAO,KAAI,EAAE,CAAC;AACpC,CAAC,CAAC;AAJW,QAAA,aAAa,iBAIxB;AAEK,MAAM,WAAW,GAAG,CAAC,OAAkB,EAAU,EAAE;IACxD,MAAM,QAAQ,GAAG,8BAAY,CAAC,gBAAgB,CAAoC,OAAO,EAAE,sCAA6B,CAAC,QAAQ,CAAC,CAAC;IAEnI,IAAI,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,SAAS,CAAA,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,SAAS,CAAC;AAC7B,CAAC,CAAC;AARW,QAAA,WAAW,eAQtB;AAEK,MAAM,0BAA0B,GAAG,CAAC,OAAe,EAAE,SAAoB,EAAsC,EAAE;IACtH,MAAM,iBAAiB,GAAG,IAAA,4BAAoB,EAAC,SAAS,CAAC,CAAC;IAE1D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAE9E,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,GAAG,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC,CAAC;AAVW,QAAA,0BAA0B,8BAUrC;AAEK,MAAM,qBAAqB,GAAG,CAAC,OAAkB,EAAgD,EAAE;IACxG,MAAM,kBAAkB,GAAG,8BAAY,CAAC,iBAAiB,CACvD,OAAO,EACP,sCAA6B,CAAC,iBAAiB,CAChD,CAAC;IAEF,OAAO,kBAAkB,CAAC;AAC5B,CAAC,CAAC;AAPW,QAAA,qBAAqB,yBAOhC;AAEK,MAAM,aAAa,GAAG,CAAC,OAAkB,EAAkC,EAAE;IAClF,OAAO,8BAAY,CAAC,iBAAiB,CAA+B,OAAO,EAAE,sCAA6B,CAAC,GAAG,CAAC,CAAC;AAClH,CAAC,CAAC;AAFW,QAAA,aAAa,iBAExB;AAEK,MAAM,aAAa,GAAG,CAAC,OAAkB,EAAkC,EAAE;IAClF,OAAO,8BAAY,CAAC,iBAAiB,CAA+B,OAAO,EAAE,sCAA6B,CAAC,GAAG,CAAC,CAAC;AAClH,CAAC,CAAC;AAFW,QAAA,aAAa,iBAExB;AAEK,MAAM,kBAAkB,GAAG,CAAC,OAAkB,EAAuC,EAAE;IAC5F,OAAO,8BAAY,CAAC,iBAAiB,CAAoC,OAAO,EAAE,sCAA6B,CAAC,QAAQ,CAAC,CAAC;AAC5H,CAAC,CAAC;AAFW,QAAA,kBAAkB,sBAE7B;AAEK,MAAM,qBAAqB,GAAG,CAAC,OAAkB,EAA0C,EAAE;IAClG,OAAO,8BAAY,CAAC,iBAAiB,CAAuC,OAAO,EAAE,sCAA6B,CAAC,WAAW,CAAC,CAAC;AAClI,CAAC,CAAC;AAFW,QAAA,qBAAqB,yBAEhC;AAEK,MAAM,uBAAuB,GAAG,CAAC,SAAoB,EAAoC,EAAE;IAChG,MAAM,aAAa,GAAG,8BAAY,CAAC,iBAAiB,CAAiC,SAAS,EAAE,sCAA6B,CAAC,KAAK,CAAC,CAAC;IAErI,OAAO,8BAAY,CAAC,aAAa,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC,CAAC;AAJW,QAAA,uBAAuB,2BAIlC;AAEK,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAA0C,EAAE;IAC3G,MAAM,mBAAmB,GAAG,8BAAY,CAAC,iBAAiB,CACxD,SAAS,EACT,sCAA6B,CAAC,WAAW,CAC1C,CAAC;IAEF,OAAO,8BAAY,CAAC,aAAa,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;AACpE,CAAC,CAAC;AAPW,QAAA,4BAA4B,gCAOvC;AAEK,MAAM,oBAAoB,GAAG,CAAC,eAAuB,EAAE,SAAoB,EAAkC,EAAE;IACpH,MAAM,YAAY,GAAG,8BAAY;SAC9B,iBAAiB,CAAiC,SAAS,EAAE,sCAA6B,CAAC,KAAK,CAAC;SACjG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;IAE3C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,mCAAmC,eAAe,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAVW,QAAA,oBAAoB,wBAU/B;AAEK,MAAM,wBAAwB,GAAG,CAAC,OAAkB,EAAU,EAAE;IACrE,MAAM,WAAW,GAAG,8BAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,IAAA,qBAAa,EAAC,OAAO,CAAC,CAAC;IAE9C,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,OAAO,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;AAC5C,CAAC,CAAC;AATW,QAAA,wBAAwB,4BASnC;AAEK,MAAM,iBAAiB,GAAG,CAAC,SAAoB,EAAU,EAAE;IAChE,MAAM,iBAAiB,GAAG,IAAA,gCAAwB,EAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,8BAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;IAEpE,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,GAAG,OAAO,IAAI,iBAAiB,EAAE,CAAC;IAC3C,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC,CAAC;AATW,QAAA,iBAAiB,qBAS5B;AAEK,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAU,EAAE;IACnE,MAAM,OAAO,GAAG,8BAAY,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,IAAA,yBAAiB,EAAC,SAAS,CAAC,CAAC;IAEhD,OAAO,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;AACpC,CAAC,CAAC;AALW,QAAA,oBAAoB,wBAK/B;AAEF;;;;;;;;GAQG;AACI,MAAM,sCAAsC,GAAG,CAAC,SAAoB,EAAE,eAA0B,EAAY,EAAE;IACnH,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,IAAI,CAAC,IAAA,qBAAa,EAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,yBAAiB,EAAC,SAAS,CAAC,CAAC;IAChD,OAAO,CAAC,WAAW,UAAU,EAAE,EAAE,aAAa,UAAU,EAAE,CAAC,CAAC;AAC9D,CAAC,CAAC;AAXW,QAAA,sCAAsC,0CAWjD;AAEF;;;;GAIG;AACI,MAAM,iCAAiC,GAAG,CAAC,SAAoB,EAAE,gBAAwB,EAAY,EAAE;IAC5G,MAAM,WAAW,GAAG,8BAAY;SAC7B,iBAAiB,CAAoD,SAAS,EAAE,sCAA6B,CAAC,wBAAwB,CAAC;SACvI,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,KAAK,gBAAgB,CAAC,CAAC;IAEpE,OAAO,IAAA,8CAAsC,EAAC,SAAS,EAAE,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,cAAc,CAAC,CAAC;AACxF,CAAC,CAAC;AANW,QAAA,iCAAiC,qCAM5C;AAEF;;;;;GAKG;AACI,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAAE,gBAAwB,EAAW,EAAE;IACtG,OAAO,IAAA,0BAAkB,EAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,kBAAkB,KAAK,gBAAgB,CAAC,CAAC;AACzH,CAAC,CAAC;AAFW,QAAA,4BAA4B,gCAEvC;AAEF,yFAAyF;AACzF,qFAAqF;AACxE,QAAA,yBAAyB,GAAuB;IAC3D,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAClC,YAAY,EAAE,EAAE;IAChB,aAAa,EAAE,GAAG;IAClB,iBAAiB,EAAE,IAAI,GAAG,IAAI;CAC/B,CAAC;AAEK,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAAsB,EAAE;IAChF,MAAM,OAAO,GAAG,8BAAY,CAAC,gBAAgB,CAC3C,SAAS,EACT,sCAA6B,CAAC,kBAAkB,CACjD,CAAC;IAEF,uCACK,iCAAyB,GACzB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,kBAAkB,KAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAA,2BAAS,EAAC,KAAK,CAAC,CAAC,CAAC,EAChH;AACJ,CAAC,CAAC;AAVW,QAAA,qBAAqB,yBAUhC;AAEK,MAAM,qCAAqC,GAAG,CAAC,SAAoB,EAAE,UAAkB,EAAE,YAAqB,EAAU,EAAE;IAC/H,MAAM,OAAO,GAAG,8BAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,8BAAY,CAAC,+BAA+B,CAAC,SAAS,CAAC,CAAC;IAE5E,MAAM,UAAU,GAAG,YAAY;QAC7B,CAAC,CAAC,IAAA,qBAAa,EAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC;QACjD,CAAC,CAAC,IAAA,kCAA0B,EAAC,UAAU,EAAE,WAAW,EAAE,8BAAY,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAEnH,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AATW,QAAA,qCAAqC,yCAShD;AAEK,MAAM,0BAA0B,GAAG,CAAC,UAAkB,EAAE,WAAmB,EAAE,OAAe,EAAE,OAAgB,EAAE,EAAE;IACvH,MAAM,UAAU,GAAG,IAAA,qBAAa,EAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAEnE,OAAO,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;AACpC,CAAC,CAAC;AAJW,QAAA,0BAA0B,8BAIrC;AAEK,MAAM,8BAA8B,GAAG,CAAC,WAAmB,EAAE,MAAc,EAAU,EAAE;IAC5F,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,GAAG,WAAW,IAAI,MAAM,EAAE,CAAC;AACpC,CAAC,CAAC;AANW,QAAA,8BAA8B,kCAMzC;AAEK,MAAM,uBAAuB,GAAG,CAAC,SAAoB,EAAkD,EAAE;IAC9G,MAAM,oBAAoB,GACxB,8BAAY,CAAC,iBAAiB,CAA+C,SAAS,EAAE,sCAA6B,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;IAEnJ,OAAO,oBAAoB,CAAC;AAC9B,CAAC,CAAC;AALW,QAAA,uBAAuB,2BAKlC;AAEK,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAE,WAAmB,EAAE,OAAgB,EAAU,EAAE;IACjG,IAAI,YAAY,GAAG,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,IAAI,OAAO,EAAE,CAAC;QACZ,YAAY,GAAG,GAAG,OAAO,IAAI,YAAY,EAAE,CAAC;IAC9C,CAAC;IAED,OAAO,GAAG,YAAY,GAAG,UAAU,EAAE,CAAC;AACxC,CAAC,CAAC;AAPW,QAAA,aAAa,iBAOxB;AAEK,MAAM,iBAAiB,GAAG,CAAC,UAAkB,EAAE,SAAoB,EAAU,EAAE;IACpF,MAAM,MAAM,GAAG,IAAA,qBAAa,EAC1B,UAAU,EACV,8BAAY,CAAC,+BAA+B,CAAC,SAAS,CAAC,EACvD,8BAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CACpD,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AARW,QAAA,iBAAiB,qBAQ5B;AAEK,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAA0C,EAAE;IACrG,MAAM,mBAAmB,GACvB,8BAAY,CAAC,iBAAiB,CAAuC,SAAS,EAAE,sCAA6B,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAEnI,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC;AALW,QAAA,sBAAsB,0BAKjC;AAEK,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAwC,EAAE;IACjG,MAAM,iBAAiB,GACrB,8BAAY,CAAC,iBAAiB,CAAqC,SAAS,EAAE,sCAA6B,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAE/H,OAAO,iBAAiB,CAAC;AAC3B,CAAC,CAAC;AALW,QAAA,oBAAoB,wBAK/B;AAEK,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAAwC,EAAE;IACtG,MAAM,iBAAiB,GAAG,IAAA,4BAAoB,EAAC,SAAS,CAAC,CAAC;IAE1D,OAAO,8BAAY,CAAC,aAAa,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAClE,CAAC,CAAC;AAJW,QAAA,yBAAyB,6BAIpC","sourcesContent":["import { isDefined, QPQConfig, qpqCoreUtils, QpqFunctionRuntime } from 'quidproquo-core';\n\nimport {\n  ApiKeyQPQWebServerConfigSetting,\n  CacheQPQWebServerConfigSetting,\n  CertificateQPQWebServerConfigSetting,\n  DefaultRouteOptionsQPQWebServerConfigSetting,\n  DnsQPQWebServerConfigSetting,\n  DomainProxyQPQWebServerConfigSetting,\n  EmailSenderQPQWebServerConfigSetting,\n  FileUploadSettings,\n  FileUploadSettingsQPQWebServerConfigSetting,\n  OpenApiQPQWebServerConfigSetting,\n  QPQWebServerConfigSettingType,\n  RouteQPQWebServerConfigSetting,\n  SeoQPQWebServerConfigSetting,\n  ServiceFunctionQPQWebServerConfigSetting,\n  StorageDriveCorsSettingsQPQWebServerConfigSetting,\n  SubdomainRedirectQPQWebServerConfigSetting,\n  WebSocketQPQWebServerConfigSetting,\n} from '../config';\nimport { ApiQPQWebServerConfigSetting, WebEntryQPQWebServerConfigSetting } from '../config';\n\nexport const getAllRoutes = (qpqConfig: QPQConfig): RouteQPQWebServerConfigSetting[] => {\n  const routes = qpqCoreUtils.getConfigSettings<RouteQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Route);\n\n  return routes;\n};\n\nexport const getAllRoutesForApi = (apiName: string, qpqConfig: QPQConfig): RouteQPQWebServerConfigSetting[] => {\n  const routes = getAllRoutes(qpqConfig);\n\n  return routes;\n};\n\nexport const getAllApiKeyConfigs = (qpqConfig: QPQConfig): ApiKeyQPQWebServerConfigSetting[] => {\n  const apiKeyConfigs = qpqCoreUtils.getConfigSettings<ApiKeyQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.ApiKey);\n\n  return apiKeyConfigs;\n};\n\nexport const getAllSeo = (qpqConfig: QPQConfig): SeoQPQWebServerConfigSetting[] => {\n  const seoConfigs = qpqCoreUtils.getConfigSettings<SeoQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Seo);\n\n  return seoConfigs;\n};\n\nexport const getAllServiceFunctions = (qpqConfig: QPQConfig): ServiceFunctionQPQWebServerConfigSetting[] => {\n  const serviceFunctions = qpqCoreUtils.getConfigSettings<ServiceFunctionQPQWebServerConfigSetting>(\n    qpqConfig,\n    QPQWebServerConfigSettingType.ServiceFunction,\n  );\n\n  return serviceFunctions;\n};\n\nexport const getOwnedServiceFunctions = (qpqConfig: QPQConfig): ServiceFunctionQPQWebServerConfigSetting[] => {\n  const serviceFunctions = getAllServiceFunctions(qpqConfig);\n\n  return qpqCoreUtils.getOwnedItems(serviceFunctions, qpqConfig);\n};\n\nexport const getAllOpenApiSpecs = (configs: QPQConfig): OpenApiQPQWebServerConfigSetting[] => {\n  const openApiSpecs = qpqCoreUtils.getConfigSettings<OpenApiQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.OpenApi);\n\n  return openApiSpecs;\n};\n\nexport const getAllWebsocketSrcEntries = (qpqConfig: QPQConfig): QpqFunctionRuntime[] => {\n  return getOwnedWebsocketSettings(qpqConfig)\n    .flatMap((s) => [s.eventProcessors.onConnect, s.eventProcessors.onDisconnect, s.eventProcessors.onMessage])\n    .filter(isDefined);\n};\n\n// Used in bundlers to know where and what to build and index\n// Events, routes, etc\nexport const getAllSrcEntries = (configs: QPQConfig): QpqFunctionRuntime[] => {\n  return qpqCoreUtils.expandSrcEntriesWithActionProcessors([\n    ...getAllRoutes(configs).map((r) => r.runtime),\n    // ...getAllOpenApiSpecs(configs).map((r) => r.openApiSpecPath),\n    ...getAllSeo(configs).map((seo) => seo.runtime),\n    ...getAllServiceFunctions(configs).map((sf) => sf.runtime),\n    ...getAllWebsocketSrcEntries(configs),\n  ]);\n};\n\nexport const getDomainName = (configs: QPQConfig): string => {\n  const dnsSettings = qpqCoreUtils.getConfigSetting<DnsQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.Dns);\n\n  return dnsSettings?.dnsBase || '';\n};\n\nexport const getWebEntry = (configs: QPQConfig): string => {\n  const webEntry = qpqCoreUtils.getConfigSetting<WebEntryQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.WebEntry);\n\n  if (!webEntry?.buildPath) {\n    throw new Error('please use defineWebEntry in your qpq config');\n  }\n\n  return webEntry?.buildPath;\n};\n\nexport const getWebsocketEntryByApiName = (apiName: string, qpqConfig: QPQConfig): WebSocketQPQWebServerConfigSetting => {\n  const websocketSettings = getWebsocketSettings(qpqConfig);\n\n  const websocketSetting = websocketSettings.find((s) => s.apiName === apiName);\n\n  if (!websocketSetting) {\n    throw new Error(`No websocket setting found for api [${apiName}]`);\n  }\n\n  return websocketSetting;\n};\n\nexport const getSubdomainRedirects = (configs: QPQConfig): SubdomainRedirectQPQWebServerConfigSetting[] => {\n  const subdomainRedirects = qpqCoreUtils.getConfigSettings<SubdomainRedirectQPQWebServerConfigSetting>(\n    configs,\n    QPQWebServerConfigSettingType.SubdomainRedirect,\n  );\n\n  return subdomainRedirects;\n};\n\nexport const getApiConfigs = (configs: QPQConfig): ApiQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<ApiQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.Api);\n};\n\nexport const getDnsConfigs = (configs: QPQConfig): DnsQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<DnsQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.Dns);\n};\n\nexport const getWebEntryConfigs = (configs: QPQConfig): WebEntryQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<WebEntryQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.WebEntry);\n};\n\nexport const getDomainProxyConfigs = (configs: QPQConfig): DomainProxyQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<DomainProxyQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.DomainProxy);\n};\n\nexport const getAllOwnedCacheConfigs = (qpqConfig: QPQConfig): CacheQPQWebServerConfigSetting[] => {\n  const cacheSettings = qpqCoreUtils.getConfigSettings<CacheQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Cache);\n\n  return qpqCoreUtils.getOwnedItems(cacheSettings, qpqConfig);\n};\n\nexport const getAllOwnedCertifcateConfigs = (qpqConfig: QPQConfig): CertificateQPQWebServerConfigSetting[] => {\n  const certificateSettings = qpqCoreUtils.getConfigSettings<CertificateQPQWebServerConfigSetting>(\n    qpqConfig,\n    QPQWebServerConfigSettingType.Certificate,\n  );\n\n  return qpqCoreUtils.getOwnedItems(certificateSettings, qpqConfig);\n};\n\nexport const getCacheConfigByName = (cacheConfigName: string, qpqConfig: QPQConfig): CacheQPQWebServerConfigSetting => {\n  const cacheSetting = qpqCoreUtils\n    .getConfigSettings<CacheQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Cache)\n    .find((c) => c.name === cacheConfigName);\n\n  if (!cacheSetting) {\n    throw new Error(`No cache config found for name [${cacheConfigName}]`);\n  }\n\n  return cacheSetting;\n};\n\nexport const getEnvironmentDomainName = (configs: QPQConfig): string => {\n  const environment = qpqCoreUtils.getApplicationModuleEnvironment(configs);\n  const apexDomainName = getDomainName(configs);\n\n  if (environment === 'production') {\n    return apexDomainName;\n  }\n\n  return `${environment}.${apexDomainName}`;\n};\n\nexport const getBaseDomainName = (qpqConfig: QPQConfig): string => {\n  const environmentDomain = getEnvironmentDomainName(qpqConfig);\n  const feature = qpqCoreUtils.getApplicationModuleFeature(qpqConfig);\n\n  if (feature) {\n    return `${feature}.${environmentDomain}`;\n  }\n\n  return environmentDomain;\n};\n\nexport const getServiceDomainName = (qpqConfig: QPQConfig): string => {\n  const service = qpqCoreUtils.getApplicationModuleName(qpqConfig);\n  const domainBase = getBaseDomainName(qpqConfig);\n\n  return `${service}.${domainBase}`;\n};\n\n/**\n * Resolve browser CORS origins for a service resource. An explicit list wins;\n * otherwise scope to this service's own domain (apex + one-level subdomain\n * wildcard, which S3/CloudFront both support). Falls back to '*' only when the\n * service declares no domain at all (nothing browser-facing).\n *\n * Note: key off the raw dns base (`getDomainName`) to detect \"no domain\" —\n * `getBaseDomainName` still returns an env prefix like `development.` here.\n */\nexport const resolveServiceScopedCorsAllowedOrigins = (qpqConfig: QPQConfig, explicitOrigins?: string[]): string[] => {\n  if (explicitOrigins) {\n    return explicitOrigins;\n  }\n\n  if (!getDomainName(qpqConfig)) {\n    return ['*'];\n  }\n\n  const baseDomain = getBaseDomainName(qpqConfig);\n  return [`https://${baseDomain}`, `https://*.${baseDomain}`];\n};\n\n/**\n * Browser origins allowed to read/write a storage drive's objects cross-origin\n * (e.g. presigned uploads/downloads), looked up by the drive's name. An explicit\n * `defineStorageDriveCorsSettings` wins; otherwise the service-scoped default.\n */\nexport const getStorageDriveCorsAllowedOrigins = (qpqConfig: QPQConfig, storageDriveName: string): string[] => {\n  const corsSetting = qpqCoreUtils\n    .getConfigSettings<StorageDriveCorsSettingsQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.StorageDriveCorsSettings)\n    .find((setting) => setting.storageDriveName === storageDriveName);\n\n  return resolveServiceScopedCorsAllowedOrigins(qpqConfig, corsSetting?.allowedOrigins);\n};\n\n/**\n * Whether any web entry in this service serves its assets from the named storage\n * drive (`storageDrive.sourceStorageDrive`) — i.e. the drive's bucket is a\n * CloudFront origin. Drives with no web entry consumer need no CloudFront access\n * to their bucket at all.\n */\nexport const isStorageDriveWebEntryOrigin = (qpqConfig: QPQConfig, storageDriveName: string): boolean => {\n  return getWebEntryConfigs(qpqConfig).some((webEntry) => webEntry.storageDrive.sourceStorageDrive === storageDriveName);\n};\n\n// API Gateway caps request payloads at 10MB, so the default per-file ceiling matches it;\n// the other defaults exist to bound parser memory rather than to be hit in practice.\nexport const defaultFileUploadSettings: FileUploadSettings = {\n  maxFileSizeBytes: 10 * 1024 * 1024,\n  maxFileCount: 10,\n  maxFieldCount: 100,\n  maxFieldSizeBytes: 1024 * 1024,\n};\n\nexport const getFileUploadSettings = (qpqConfig: QPQConfig): FileUploadSettings => {\n  const setting = qpqCoreUtils.getConfigSetting<FileUploadSettingsQPQWebServerConfigSetting>(\n    qpqConfig,\n    QPQWebServerConfigSettingType.FileUploadSettings,\n  );\n\n  return {\n    ...defaultFileUploadSettings,\n    ...Object.fromEntries(Object.entries(setting?.fileUploadSettings || {}).filter(([, value]) => isDefined(value))),\n  };\n};\n\nexport const resolveApexDomainNameFromDomainConfig = (qpqConfig: QPQConfig, rootDomain: string, onRootDomain: boolean): string => {\n  const feature = qpqCoreUtils.getApplicationModuleFeature(qpqConfig);\n  const environment = qpqCoreUtils.getApplicationModuleEnvironment(qpqConfig);\n\n  const apexDomain = onRootDomain\n    ? getDomainRoot(rootDomain, environment, feature)\n    : constructServiceDomainName(rootDomain, environment, qpqCoreUtils.getApplicationModuleName(qpqConfig), feature);\n\n  return apexDomain;\n};\n\nexport const constructServiceDomainName = (rootDomain: string, environment: string, service: string, feature?: string) => {\n  const domainBase = getDomainRoot(rootDomain, environment, feature);\n\n  return `${service}.${domainBase}`;\n};\n\nexport const constructEnvironmentDomainName = (environment: string, domain: string): string => {\n  if (environment === 'production') {\n    return domain;\n  }\n\n  return `${environment}.${domain}`;\n};\n\nexport const getDefaultRouteSettings = (qpqConfig: QPQConfig): DefaultRouteOptionsQPQWebServerConfigSetting[] => {\n  const defaultRouteSettings =\n    qpqCoreUtils.getConfigSettings<DefaultRouteOptionsQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.DefaultRouteOptions) || [];\n\n  return defaultRouteSettings;\n};\n\nexport const getDomainRoot = (rootDomain: string, environment: string, feature?: string): string => {\n  let domainPrefix = environment !== 'production' ? `${environment}.` : '';\n  if (feature) {\n    domainPrefix = `${feature}.${domainPrefix}`;\n  }\n\n  return `${domainPrefix}${rootDomain}`;\n};\n\nexport const resolveDomainRoot = (rootDomain: string, qpqConfig: QPQConfig): string => {\n  const domain = getDomainRoot(\n    rootDomain,\n    qpqCoreUtils.getApplicationModuleEnvironment(qpqConfig),\n    qpqCoreUtils.getApplicationModuleFeature(qpqConfig),\n  );\n\n  return domain;\n};\n\nexport const getEmailSenderSettings = (qpqConfig: QPQConfig): EmailSenderQPQWebServerConfigSetting[] => {\n  const emailSenderSettings =\n    qpqCoreUtils.getConfigSettings<EmailSenderQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.EmailSender) || [];\n\n  return emailSenderSettings;\n};\n\nexport const getWebsocketSettings = (qpqConfig: QPQConfig): WebSocketQPQWebServerConfigSetting[] => {\n  const websocketSettings =\n    qpqCoreUtils.getConfigSettings<WebSocketQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.WebSocket) || [];\n\n  return websocketSettings;\n};\n\nexport const getOwnedWebsocketSettings = (qpqConfig: QPQConfig): WebSocketQPQWebServerConfigSetting[] => {\n  const websocketSettings = getWebsocketSettings(qpqConfig);\n\n  return qpqCoreUtils.getOwnedItems(websocketSettings, qpqConfig);\n};\n"]}

package/lib/esm/actionProcessor/api/getHttpApiEventAutoRespondActionProcessor.js

@@ -1,4 +1,4 @@
-import { actionResult, askEventAutoRespondBase, createActionProcessor, generateUuid, getProcessCustomImplementation, } from 'quidproquo-core';
+import { actionResult, askEventAutoRespondBase, createActionProcessor, generateUuid, getProcessCustomImplementation, mergeRuntimeActionProcessors, } from 'quidproquo-core';
 import { askValidateRouteAuth } from '../../stories/askValidateRouteAuth';
 import { FileUploadErrorTypeEnum } from '../../types/HTTPEvent';
 import { getCorsHeaders } from '../../utils/headerUtils';
@@ -28,7 +28,11 @@ const getProcessAutoRespond = (qpqConfig) => {
             event: qpqEventRecord,
             routeAuthSettings: matchResult.config?.routeAuthSettings,
         };
-        const [authValid, authError] = await validateAuth(authPayload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader);
+        // The matched route's processor overrides must be visible HERE, in the
+        // framework preamble: auth decode runs before the route story, so without
+        // this merge a per-route auth override would never see its own requests.
+        const mergedActionProcessorList = await mergeRuntimeActionProcessors(qpqConfig, matchResult.runtime, actionProcessorList, dynamicModuleLoader);
+        const [authValid, authError] = await validateAuth(authPayload, session, mergedActionProcessorList, logger, updateSession, dynamicModuleLoader);
         if (authError || !authValid) {
             return actionResult({
                 status: 401,

package/lib/esm/actionProcessor/api/getHttpApiEventAutoRespondActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getHttpApiEventAutoRespondActionProcessor.js","sourceRoot":"","sources":["../../../../src/actionProcessor/api/getHttpApiEventAutoRespondActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,qBAAqB,EAErB,YAAY,EACZ,8BAA8B,GAI/B,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,oBAAoB,EAA4B,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,uBAAuB,EAAgC,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAIzD,MAAM,4BAA4B,GAA4C;IAC5E,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,GAAG;IAC3C,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,GAAG;IAC3C,CAAC,uBAAuB,CAAC,aAAa,CAAC,EAAE,GAAG;IAC5C,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,EAAE,GAAG;IACjD,CAAC,uBAAuB,CAAC,SAAS,CAAC,EAAE,GAAG;CACzC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAAgD,EAAE;IACnG,MAAM,YAAY,GAAG,8BAA8B,CACjD,SAAS,EACT,oBAAoB,EACpB,qBAAqB,EACrB,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,YAAY,CACb,CAAC;IAEF,OAAO,KAAK,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,EAAE;QACzI,iFAAiF;QACjF,+CAA+C;QAC/C,MAAM,cAAc,GAAG,cAA2B,CAAC;QACnD,yCAAyC;QACzC,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,YAAY,CAAC;gBAClB,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,KAAK;gBACtB,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAA6B;YAC5C,KAAK,EAAE,cAAc;YACrB,iBAAiB,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB;SACzD,CAAC;QAEF,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;QAEzI,IAAI,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO,YAAY,CAAC;gBAClB,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,KAAK;gBACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,OAAO,EAAE,8CAA8C;iBACxD,CAAC;gBACF,OAAO,EAAE,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,2FAA2F;QAC3F,IAAI,cAAc,CAAC,eAAe,EAAE,CAAC;YACnC,OAAO,YAAY,CAAC;gBAClB,MAAM,EAAE,4BAA4B,CAAC,cAAc,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,GAAG;gBACrF,eAAe,EAAE,KAAK;gBACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,cAAc,CAAC,eAAe,CAAC,SAAS;oBACnD,SAAS,EAAE,cAAc,CAAC,eAAe,CAAC,OAAO;iBAClD,CAAC;gBACF,OAAO,EAAE,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yCAAyC,GAAG,qBAAqB,CAAC,uBAAuB,EAAE,qBAAqB,CAAC,CAAC","sourcesContent":["import {\n  actionResult,\n  askEventAutoRespondBase,\n  createActionProcessor,\n  EventActionType,\n  generateUuid,\n  getProcessCustomImplementation,\n  MatchStoryResult,\n  ProcessorFor,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { RouteOptions } from '../../config/settings/route';\nimport { askValidateRouteAuth, ValidateRouteAuthPayload } from '../../stories/askValidateRouteAuth';\nimport { FileUploadErrorTypeEnum, HTTPEvent, HTTPEventResponse } from '../../types/HTTPEvent';\nimport { getCorsHeaders } from '../../utils/headerUtils';\n\ntype InternalMatchResult = MatchStoryResult<any, RouteOptions>;\n\nconst fileUploadErrorHttpStatusMap: Record<FileUploadErrorTypeEnum, number> = {\n  [FileUploadErrorTypeEnum.fileTooLarge]: 413,\n  [FileUploadErrorTypeEnum.tooManyFiles]: 413,\n  [FileUploadErrorTypeEnum.tooManyFields]: 400,\n  [FileUploadErrorTypeEnum.disallowedMimeType]: 415,\n  [FileUploadErrorTypeEnum.malformed]: 400,\n};\n\nconst getProcessAutoRespond = (qpqConfig: QPQConfig): ProcessorFor<typeof askEventAutoRespondBase> => {\n  const validateAuth = getProcessCustomImplementation<any>(\n    qpqConfig,\n    askValidateRouteAuth,\n    'API Auth Validation',\n    null,\n    () => new Date().toISOString(),\n    generateUuid,\n  );\n\n  return async ({ qpqEventRecord: rawEventRecord, matchResult }, session, actionProcessorList, logger, updateSession, dynamicModuleLoader) => {\n    // This processor is registered only for the http api event source, so the base's\n    // source-agnostic record is an HTTPEvent here.\n    const qpqEventRecord = rawEventRecord as HTTPEvent;\n    // Just auto respond for options requests\n    if (qpqEventRecord.method === 'OPTIONS') {\n      return actionResult({\n        status: 200,\n        isBase64Encoded: false,\n        body: '',\n        headers: getCorsHeaders(qpqConfig, matchResult.config || {}, qpqEventRecord.headers),\n      });\n    }\n\n    const authPayload: ValidateRouteAuthPayload = {\n      event: qpqEventRecord,\n      routeAuthSettings: matchResult.config?.routeAuthSettings,\n    };\n\n    const [authValid, authError] = await validateAuth(authPayload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader);\n\n    if (authError || !authValid) {\n      return actionResult({\n        status: 401,\n        isBase64Encoded: false,\n        body: JSON.stringify({\n          message: 'You are unauthorized to access this resource',\n        }),\n        headers: getCorsHeaders(qpqConfig, matchResult.config || {}, qpqEventRecord.headers),\n      });\n    }\n\n    // Reject invalid multipart uploads before the route story runs (after auth, so a 401 wins)\n    if (qpqEventRecord.fileUploadError) {\n      return actionResult({\n        status: fileUploadErrorHttpStatusMap[qpqEventRecord.fileUploadError.errorType] || 400,\n        isBase64Encoded: false,\n        body: JSON.stringify({\n          errorType: qpqEventRecord.fileUploadError.errorType,\n          errorText: qpqEventRecord.fileUploadError.message,\n        }),\n        headers: getCorsHeaders(qpqConfig, matchResult.config || {}, qpqEventRecord.headers),\n      });\n    }\n\n    return actionResult(null);\n  };\n};\n\nexport const getHttpApiEventAutoRespondActionProcessor = createActionProcessor(askEventAutoRespondBase, getProcessAutoRespond);\n"]}
+{"version":3,"file":"getHttpApiEventAutoRespondActionProcessor.js","sourceRoot":"","sources":["../../../../src/actionProcessor/api/getHttpApiEventAutoRespondActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,qBAAqB,EAErB,YAAY,EACZ,8BAA8B,EAE9B,4BAA4B,GAG7B,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,oBAAoB,EAA4B,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,uBAAuB,EAAgC,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAIzD,MAAM,4BAA4B,GAA4C;IAC5E,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,GAAG;IAC3C,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,GAAG;IAC3C,CAAC,uBAAuB,CAAC,aAAa,CAAC,EAAE,GAAG;IAC5C,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,EAAE,GAAG;IACjD,CAAC,uBAAuB,CAAC,SAAS,CAAC,EAAE,GAAG;CACzC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAAgD,EAAE;IACnG,MAAM,YAAY,GAAG,8BAA8B,CACjD,SAAS,EACT,oBAAoB,EACpB,qBAAqB,EACrB,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,YAAY,CACb,CAAC;IAEF,OAAO,KAAK,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,EAAE;QACzI,iFAAiF;QACjF,+CAA+C;QAC/C,MAAM,cAAc,GAAG,cAA2B,CAAC;QACnD,yCAAyC;QACzC,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,YAAY,CAAC;gBAClB,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,KAAK;gBACtB,IAAI,EAAE,EAAE;gBACR,OAAO,EAAE,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAA6B;YAC5C,KAAK,EAAE,cAAc;YACrB,iBAAiB,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB;SACzD,CAAC;QAEF,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,yBAAyB,GAAG,MAAM,4BAA4B,CAAC,SAAS,EAAE,WAAW,CAAC,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;QAE/I,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;QAE/I,IAAI,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO,YAAY,CAAC;gBAClB,MAAM,EAAE,GAAG;gBACX,eAAe,EAAE,KAAK;gBACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,OAAO,EAAE,8CAA8C;iBACxD,CAAC;gBACF,OAAO,EAAE,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,2FAA2F;QAC3F,IAAI,cAAc,CAAC,eAAe,EAAE,CAAC;YACnC,OAAO,YAAY,CAAC;gBAClB,MAAM,EAAE,4BAA4B,CAAC,cAAc,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,GAAG;gBACrF,eAAe,EAAE,KAAK;gBACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,cAAc,CAAC,eAAe,CAAC,SAAS;oBACnD,SAAS,EAAE,cAAc,CAAC,eAAe,CAAC,OAAO;iBAClD,CAAC;gBACF,OAAO,EAAE,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yCAAyC,GAAG,qBAAqB,CAAC,uBAAuB,EAAE,qBAAqB,CAAC,CAAC","sourcesContent":["import {\n  actionResult,\n  askEventAutoRespondBase,\n  createActionProcessor,\n  EventActionType,\n  generateUuid,\n  getProcessCustomImplementation,\n  MatchStoryResult,\n  mergeRuntimeActionProcessors,\n  ProcessorFor,\n  QPQConfig,\n} from 'quidproquo-core';\n\nimport { RouteOptions } from '../../config/settings/route';\nimport { askValidateRouteAuth, ValidateRouteAuthPayload } from '../../stories/askValidateRouteAuth';\nimport { FileUploadErrorTypeEnum, HTTPEvent, HTTPEventResponse } from '../../types/HTTPEvent';\nimport { getCorsHeaders } from '../../utils/headerUtils';\n\ntype InternalMatchResult = MatchStoryResult<any, RouteOptions>;\n\nconst fileUploadErrorHttpStatusMap: Record<FileUploadErrorTypeEnum, number> = {\n  [FileUploadErrorTypeEnum.fileTooLarge]: 413,\n  [FileUploadErrorTypeEnum.tooManyFiles]: 413,\n  [FileUploadErrorTypeEnum.tooManyFields]: 400,\n  [FileUploadErrorTypeEnum.disallowedMimeType]: 415,\n  [FileUploadErrorTypeEnum.malformed]: 400,\n};\n\nconst getProcessAutoRespond = (qpqConfig: QPQConfig): ProcessorFor<typeof askEventAutoRespondBase> => {\n  const validateAuth = getProcessCustomImplementation<any>(\n    qpqConfig,\n    askValidateRouteAuth,\n    'API Auth Validation',\n    null,\n    () => new Date().toISOString(),\n    generateUuid,\n  );\n\n  return async ({ qpqEventRecord: rawEventRecord, matchResult }, session, actionProcessorList, logger, updateSession, dynamicModuleLoader) => {\n    // This processor is registered only for the http api event source, so the base's\n    // source-agnostic record is an HTTPEvent here.\n    const qpqEventRecord = rawEventRecord as HTTPEvent;\n    // Just auto respond for options requests\n    if (qpqEventRecord.method === 'OPTIONS') {\n      return actionResult({\n        status: 200,\n        isBase64Encoded: false,\n        body: '',\n        headers: getCorsHeaders(qpqConfig, matchResult.config || {}, qpqEventRecord.headers),\n      });\n    }\n\n    const authPayload: ValidateRouteAuthPayload = {\n      event: qpqEventRecord,\n      routeAuthSettings: matchResult.config?.routeAuthSettings,\n    };\n\n    // The matched route's processor overrides must be visible HERE, in the\n    // framework preamble: auth decode runs before the route story, so without\n    // this merge a per-route auth override would never see its own requests.\n    const mergedActionProcessorList = await mergeRuntimeActionProcessors(qpqConfig, matchResult.runtime, actionProcessorList, dynamicModuleLoader);\n\n    const [authValid, authError] = await validateAuth(authPayload, session, mergedActionProcessorList, logger, updateSession, dynamicModuleLoader);\n\n    if (authError || !authValid) {\n      return actionResult({\n        status: 401,\n        isBase64Encoded: false,\n        body: JSON.stringify({\n          message: 'You are unauthorized to access this resource',\n        }),\n        headers: getCorsHeaders(qpqConfig, matchResult.config || {}, qpqEventRecord.headers),\n      });\n    }\n\n    // Reject invalid multipart uploads before the route story runs (after auth, so a 401 wins)\n    if (qpqEventRecord.fileUploadError) {\n      return actionResult({\n        status: fileUploadErrorHttpStatusMap[qpqEventRecord.fileUploadError.errorType] || 400,\n        isBase64Encoded: false,\n        body: JSON.stringify({\n          errorType: qpqEventRecord.fileUploadError.errorType,\n          errorText: qpqEventRecord.fileUploadError.message,\n        }),\n        headers: getCorsHeaders(qpqConfig, matchResult.config || {}, qpqEventRecord.headers),\n      });\n    }\n\n    return actionResult(null);\n  };\n};\n\nexport const getHttpApiEventAutoRespondActionProcessor = createActionProcessor(askEventAutoRespondBase, getProcessAutoRespond);\n"]}

package/lib/esm/actionProcessor/api/getHttpApiEventGetStorySessionActionProcessor.js

@@ -1,4 +1,4 @@
-import { actionResult, askEventGetStorySessionBase, createActionProcessor, generateUuid, getProcessCustomImplementation, } from 'quidproquo-core';
+import { actionResult, askEventGetStorySessionBase, createActionProcessor, generateUuid, getProcessCustomImplementation, mergeRuntimeActionProcessors, } from 'quidproquo-core';
 import { askGetHttpApiEventStorySession } from '../../stories/askGetHttpApiEventStorySession';
 const getProcessGetStorySession = (qpqConfig) => {
     const getSession = getProcessCustomImplementation(qpqConfig, askGetHttpApiEventStorySession, 'API Get Story Session', null, () => new Date().toISOString(), generateUuid);
@@ -10,7 +10,11 @@ const getProcessGetStorySession = (qpqConfig) => {
             routeAuthSettings: matchStoryResult.config?.routeAuthSettings,
             session,
         };
-        const [storySession, error] = await getSession(payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader);
+        // Same merge as the auto-respond preamble: the session-seeding decode must
+        // also see the matched route's processor overrides, or a custom validator's
+        // decoded identity would never reach the story session.
+        const mergedActionProcessorList = await mergeRuntimeActionProcessors(qpqConfig, matchStoryResult.runtime, actionProcessorList, dynamicModuleLoader);
+        const [storySession, error] = await getSession(payload, session, mergedActionProcessorList, logger, updateSession, dynamicModuleLoader);
         if (error) {
             return actionResult(void 0);
         }

package/lib/esm/actionProcessor/api/getHttpApiEventGetStorySessionActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getHttpApiEventGetStorySessionActionProcessor.js","sourceRoot":"","sources":["../../../../src/actionProcessor/api/getHttpApiEventGetStorySessionActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,2BAA2B,EAC3B,qBAAqB,EAErB,YAAY,EACZ,8BAA8B,GAK/B,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,8BAA8B,EAAsC,MAAM,8CAA8C,CAAC;AAKlI,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAAoD,EAAE;IAC3G,MAAM,UAAU,GAAG,8BAA8B,CAC/C,SAAS,EACT,8BAA8B,EAC9B,uBAAuB,EACvB,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,YAAY,CACb,CAAC;IAEF,OAAO,KAAK,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,EAAE;QAC9H,MAAM,OAAO,GAAuC;YAClD,+EAA+E;YAC/E,+BAA+B;YAC/B,KAAK,EAAE,cAA2B;YAClC,iBAAiB,EAAE,gBAAgB,CAAC,MAAM,EAAE,iBAAiB;YAC7D,OAAO;SACR,CAAC;QAEF,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;QAElI,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,YAAY,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,6CAA6C,GAAG,qBAAqB,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CAAC","sourcesContent":["import {\n  actionResult,\n  askEventGetStorySessionBase,\n  createActionProcessor,\n  EventActionType,\n  generateUuid,\n  getProcessCustomImplementation,\n  MatchStoryResult,\n  ProcessorFor,\n  QPQConfig,\n  StorySession,\n} from 'quidproquo-core';\n\nimport { RouteOptions } from '../../config/settings/route';\nimport { askGetHttpApiEventStorySession, GetHttpApiEventStorySessionPayload } from '../../stories/askGetHttpApiEventStorySession';\nimport { HTTPEvent } from '../../types/HTTPEvent';\n\ntype InternalMatchResult = MatchStoryResult<any, RouteOptions>;\n\nconst getProcessGetStorySession = (qpqConfig: QPQConfig): ProcessorFor<typeof askEventGetStorySessionBase> => {\n  const getSession = getProcessCustomImplementation<any>(\n    qpqConfig,\n    askGetHttpApiEventStorySession,\n    'API Get Story Session',\n    null,\n    () => new Date().toISOString(),\n    generateUuid,\n  );\n\n  return async ({ matchStoryResult, qpqEventRecord }, session, actionProcessorList, logger, updateSession, dynamicModuleLoader) => {\n    const payload: GetHttpApiEventStorySessionPayload = {\n      // Registered only for the http api event source, so the base's source-agnostic\n      // record is an HTTPEvent here.\n      event: qpqEventRecord as HTTPEvent,\n      routeAuthSettings: matchStoryResult.config?.routeAuthSettings,\n      session,\n    };\n\n    const [storySession, error] = await getSession(payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader);\n\n    if (error) {\n      return actionResult(void 0);\n    }\n\n    return actionResult(storySession);\n  };\n};\n\nexport const getHttpApiEventGetStorySessionActionProcessor = createActionProcessor(askEventGetStorySessionBase, getProcessGetStorySession);\n"]}
+{"version":3,"file":"getHttpApiEventGetStorySessionActionProcessor.js","sourceRoot":"","sources":["../../../../src/actionProcessor/api/getHttpApiEventGetStorySessionActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,2BAA2B,EAC3B,qBAAqB,EAErB,YAAY,EACZ,8BAA8B,EAE9B,4BAA4B,GAI7B,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,8BAA8B,EAAsC,MAAM,8CAA8C,CAAC;AAKlI,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAAoD,EAAE;IAC3G,MAAM,UAAU,GAAG,8BAA8B,CAC/C,SAAS,EACT,8BAA8B,EAC9B,uBAAuB,EACvB,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,YAAY,CACb,CAAC;IAEF,OAAO,KAAK,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,EAAE;QAC9H,MAAM,OAAO,GAAuC;YAClD,+EAA+E;YAC/E,+BAA+B;YAC/B,KAAK,EAAE,cAA2B;YAClC,iBAAiB,EAAE,gBAAgB,CAAC,MAAM,EAAE,iBAAiB;YAC7D,OAAO;SACR,CAAC;QAEF,2EAA2E;QAC3E,4EAA4E;QAC5E,wDAAwD;QACxD,MAAM,yBAAyB,GAAG,MAAM,4BAA4B,CAClE,SAAS,EACT,gBAAgB,CAAC,OAAO,EACxB,mBAAmB,EACnB,mBAAmB,CACpB,CAAC;QAEF,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;QAExI,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,YAAY,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,6CAA6C,GAAG,qBAAqB,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CAAC","sourcesContent":["import {\n  actionResult,\n  askEventGetStorySessionBase,\n  createActionProcessor,\n  EventActionType,\n  generateUuid,\n  getProcessCustomImplementation,\n  MatchStoryResult,\n  mergeRuntimeActionProcessors,\n  ProcessorFor,\n  QPQConfig,\n  StorySession,\n} from 'quidproquo-core';\n\nimport { RouteOptions } from '../../config/settings/route';\nimport { askGetHttpApiEventStorySession, GetHttpApiEventStorySessionPayload } from '../../stories/askGetHttpApiEventStorySession';\nimport { HTTPEvent } from '../../types/HTTPEvent';\n\ntype InternalMatchResult = MatchStoryResult<any, RouteOptions>;\n\nconst getProcessGetStorySession = (qpqConfig: QPQConfig): ProcessorFor<typeof askEventGetStorySessionBase> => {\n  const getSession = getProcessCustomImplementation<any>(\n    qpqConfig,\n    askGetHttpApiEventStorySession,\n    'API Get Story Session',\n    null,\n    () => new Date().toISOString(),\n    generateUuid,\n  );\n\n  return async ({ matchStoryResult, qpqEventRecord }, session, actionProcessorList, logger, updateSession, dynamicModuleLoader) => {\n    const payload: GetHttpApiEventStorySessionPayload = {\n      // Registered only for the http api event source, so the base's source-agnostic\n      // record is an HTTPEvent here.\n      event: qpqEventRecord as HTTPEvent,\n      routeAuthSettings: matchStoryResult.config?.routeAuthSettings,\n      session,\n    };\n\n    // Same merge as the auto-respond preamble: the session-seeding decode must\n    // also see the matched route's processor overrides, or a custom validator's\n    // decoded identity would never reach the story session.\n    const mergedActionProcessorList = await mergeRuntimeActionProcessors(\n      qpqConfig,\n      matchStoryResult.runtime,\n      actionProcessorList,\n      dynamicModuleLoader,\n    );\n\n    const [storySession, error] = await getSession(payload, session, mergedActionProcessorList, logger, updateSession, dynamicModuleLoader);\n\n    if (error) {\n      return actionResult(void 0);\n    }\n\n    return actionResult(storySession);\n  };\n};\n\nexport const getHttpApiEventGetStorySessionActionProcessor = createActionProcessor(askEventGetStorySessionBase, getProcessGetStorySession);\n"]}

package/lib/esm/actionProcessor/routeAuthValidation/getRouteAuthValidationDecodeActionProcessor.js

@@ -1,14 +1,16 @@
 import { actionResult, createActionProcessor, generateUuid, getProcessCustomImplementation } from 'quidproquo-core';
-import { askRouteAuthValidationDecode } from '../../actions/routeAuthValidation';
+import { askRouteAuthValidationDecode, RouteAuthDecodeOutcome } from '../../actions/routeAuthValidation';
 import { askRouteAuthValidationDecodeDefault } from '../../stories/askRouteAuthValidationDecodeDefault';
 const getProcessRouteAuthValidationDecode = (qpqConfig) => {
     const decodeAuth = getProcessCustomImplementation(qpqConfig, askRouteAuthValidationDecodeDefault, 'Route Auth Validation Decode', null, () => new Date().toISOString(), generateUuid);
     return async (payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader, streamRegistry) => {
         const [result, error] = await decodeAuth(payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader, streamRegistry);
-        if (error) {
-            return actionResult(null);
+        // A decode that errored (or returned nothing) is invalid, never
+        // notApplicable: failing open here would skip token auth entirely.
+        if (error || !result) {
+            return actionResult({ outcome: RouteAuthDecodeOutcome.invalid });
         }
-        return actionResult(result ?? null);
+        return actionResult(result);
     };
 };
 export const getRouteAuthValidationDecodeActionProcessor = createActionProcessor(askRouteAuthValidationDecode, getProcessRouteAuthValidationDecode);

package/lib/esm/actionProcessor/routeAuthValidation/getRouteAuthValidationDecodeActionProcessor.js.map

@@ -1 +1 @@
-{"version":3,"file":"getRouteAuthValidationDecodeActionProcessor.js","sourceRoot":"","sources":["../../../../src/actionProcessor/routeAuthValidation/getRouteAuthValidationDecodeActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,YAAY,EAAE,8BAA8B,EAA2B,MAAM,iBAAiB,CAAC;AAE7I,OAAO,EAAE,4BAA4B,EAAiC,MAAM,mCAAmC,CAAC;AAChH,OAAO,EAAE,mCAAmC,EAAE,MAAM,mDAAmD,CAAC;AAExG,MAAM,mCAAmC,GAAG,CAAC,SAAoB,EAAqD,EAAE;IACtH,MAAM,UAAU,GAAG,8BAA8B,CAC/C,SAAS,EACT,mCAAmC,EACnC,8BAA8B,EAC9B,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,YAAY,CACb,CAAC;IAEF,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,cAAc,EAAE,EAAE;QACjH,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC;QAE5I,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,YAAY,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2CAA2C,GAAG,qBAAqB,CAAC,4BAA4B,EAAE,mCAAmC,CAAC,CAAC","sourcesContent":["import { actionResult, createActionProcessor, generateUuid, getProcessCustomImplementation, ProcessorFor, QPQConfig } from 'quidproquo-core';\n\nimport { askRouteAuthValidationDecode, RouteAuthValidationActionType } from '../../actions/routeAuthValidation';\nimport { askRouteAuthValidationDecodeDefault } from '../../stories/askRouteAuthValidationDecodeDefault';\n\nconst getProcessRouteAuthValidationDecode = (qpqConfig: QPQConfig): ProcessorFor<typeof askRouteAuthValidationDecode> => {\n  const decodeAuth = getProcessCustomImplementation<ProcessorFor<typeof askRouteAuthValidationDecode>>(\n    qpqConfig,\n    askRouteAuthValidationDecodeDefault,\n    'Route Auth Validation Decode',\n    null,\n    () => new Date().toISOString(),\n    generateUuid,\n  );\n\n  return async (payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader, streamRegistry) => {\n    const [result, error] = await decodeAuth(payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader, streamRegistry);\n\n    if (error) {\n      return actionResult(null);\n    }\n\n    return actionResult(result ?? null);\n  };\n};\n\nexport const getRouteAuthValidationDecodeActionProcessor = createActionProcessor(askRouteAuthValidationDecode, getProcessRouteAuthValidationDecode);\n"]}
+{"version":3,"file":"getRouteAuthValidationDecodeActionProcessor.js","sourceRoot":"","sources":["../../../../src/actionProcessor/routeAuthValidation/getRouteAuthValidationDecodeActionProcessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,YAAY,EAAE,8BAA8B,EAA2B,MAAM,iBAAiB,CAAC;AAE7I,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAiC,MAAM,mCAAmC,CAAC;AACxI,OAAO,EAAE,mCAAmC,EAAE,MAAM,mDAAmD,CAAC;AAExG,MAAM,mCAAmC,GAAG,CAAC,SAAoB,EAAqD,EAAE;IACtH,MAAM,UAAU,GAAG,8BAA8B,CAC/C,SAAS,EACT,mCAAmC,EACnC,8BAA8B,EAC9B,IAAI,EACJ,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC9B,YAAY,CACb,CAAC;IAEF,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,cAAc,EAAE,EAAE;QACjH,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC;QAE5I,gEAAgE;QAChE,mEAAmE;QACnE,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YACrB,OAAO,YAAY,CAAC,EAAE,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2CAA2C,GAAG,qBAAqB,CAAC,4BAA4B,EAAE,mCAAmC,CAAC,CAAC","sourcesContent":["import { actionResult, createActionProcessor, generateUuid, getProcessCustomImplementation, ProcessorFor, QPQConfig } from 'quidproquo-core';\n\nimport { askRouteAuthValidationDecode, RouteAuthDecodeOutcome, RouteAuthValidationActionType } from '../../actions/routeAuthValidation';\nimport { askRouteAuthValidationDecodeDefault } from '../../stories/askRouteAuthValidationDecodeDefault';\n\nconst getProcessRouteAuthValidationDecode = (qpqConfig: QPQConfig): ProcessorFor<typeof askRouteAuthValidationDecode> => {\n  const decodeAuth = getProcessCustomImplementation<ProcessorFor<typeof askRouteAuthValidationDecode>>(\n    qpqConfig,\n    askRouteAuthValidationDecodeDefault,\n    'Route Auth Validation Decode',\n    null,\n    () => new Date().toISOString(),\n    generateUuid,\n  );\n\n  return async (payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader, streamRegistry) => {\n    const [result, error] = await decodeAuth(payload, session, actionProcessorList, logger, updateSession, dynamicModuleLoader, streamRegistry);\n\n    // A decode that errored (or returned nothing) is invalid, never\n    // notApplicable: failing open here would skip token auth entirely.\n    if (error || !result) {\n      return actionResult({ outcome: RouteAuthDecodeOutcome.invalid });\n    }\n\n    return actionResult(result);\n  };\n};\n\nexport const getRouteAuthValidationDecodeActionProcessor = createActionProcessor(askRouteAuthValidationDecode, getProcessRouteAuthValidationDecode);\n"]}

package/lib/esm/actions/routeAuthValidation/RouteAuthDecodeOutcome.d.ts

@@ -0,0 +1,5 @@
+export declare enum RouteAuthDecodeOutcome {
+    notApplicable = "notApplicable",
+    valid = "valid",
+    invalid = "invalid"
+}

package/lib/esm/actions/routeAuthValidation/RouteAuthDecodeOutcome.js

@@ -0,0 +1,12 @@
+export var RouteAuthDecodeOutcome;
+(function (RouteAuthDecodeOutcome) {
+    // No token auth is configured for the route: the request passes with an
+    // anonymous session.
+    RouteAuthDecodeOutcome["notApplicable"] = "notApplicable";
+    // The token decoded and validated: the request passes and the decoded token
+    // is seeded onto the story session.
+    RouteAuthDecodeOutcome["valid"] = "valid";
+    // Token auth applies and the request did not satisfy it: 401.
+    RouteAuthDecodeOutcome["invalid"] = "invalid";
+})(RouteAuthDecodeOutcome || (RouteAuthDecodeOutcome = {}));
+//# sourceMappingURL=RouteAuthDecodeOutcome.js.map

package/lib/esm/actions/routeAuthValidation/RouteAuthDecodeOutcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RouteAuthDecodeOutcome.js","sourceRoot":"","sources":["../../../../src/actions/routeAuthValidation/RouteAuthDecodeOutcome.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,sBAWX;AAXD,WAAY,sBAAsB;IAChC,wEAAwE;IACxE,qBAAqB;IACrB,yDAA+B,CAAA;IAE/B,4EAA4E;IAC5E,oCAAoC;IACpC,yCAAe,CAAA;IAEf,8DAA8D;IAC9D,6CAAmB,CAAA;AACrB,CAAC,EAXW,sBAAsB,KAAtB,sBAAsB,QAWjC","sourcesContent":["export enum RouteAuthDecodeOutcome {\n  // No token auth is configured for the route: the request passes with an\n  // anonymous session.\n  notApplicable = 'notApplicable',\n\n  // The token decoded and validated: the request passes and the decoded token\n  // is seeded onto the story session.\n  valid = 'valid',\n\n  // Token auth applies and the request did not satisfy it: 401.\n  invalid = 'invalid',\n}\n"]}

package/lib/esm/actions/routeAuthValidation/RouteAuthDecodeResult.d.ts

@@ -0,0 +1,10 @@
+import { DecodedAccessToken } from 'quidproquo-core';
+import { RouteAuthDecodeOutcome } from './RouteAuthDecodeOutcome';
+export type RouteAuthDecodeResult = {
+    outcome: RouteAuthDecodeOutcome.notApplicable;
+} | {
+    outcome: RouteAuthDecodeOutcome.valid;
+    decodedAccessToken: DecodedAccessToken;
+} | {
+    outcome: RouteAuthDecodeOutcome.invalid;
+};

package/lib/esm/actions/routeAuthValidation/RouteAuthDecodeResult.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=RouteAuthDecodeResult.js.map

package/lib/esm/actions/routeAuthValidation/RouteAuthDecodeResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RouteAuthDecodeResult.js","sourceRoot":"","sources":["../../../../src/actions/routeAuthValidation/RouteAuthDecodeResult.ts"],"names":[],"mappings":"","sourcesContent":["import { DecodedAccessToken } from 'quidproquo-core';\n\nimport { RouteAuthDecodeOutcome } from './RouteAuthDecodeOutcome';\n\n// The tri-state result of the route auth decode action. The outcomes are\n// explicit (no null overloading) because \"no token auth configured\" and\n// \"token auth failed\" must never be conflated: the first passes as anonymous,\n// the second is a 401.\nexport type RouteAuthDecodeResult =\n  | { outcome: RouteAuthDecodeOutcome.notApplicable }\n  | { outcome: RouteAuthDecodeOutcome.valid; decodedAccessToken: DecodedAccessToken }\n  | { outcome: RouteAuthDecodeOutcome.invalid };\n"]}

package/lib/esm/actions/routeAuthValidation/askRouteAuthValidationDecode.d.ts

@@ -1,6 +1,6 @@
-import { DecodedAccessToken } from 'quidproquo-core';
 import { RouteAuthSettings } from '../../config/settings/route';
 import { HTTPEvent } from '../../types/HTTPEvent';
+import { RouteAuthDecodeResult } from './RouteAuthDecodeResult';
 import { RouteAuthValidationActionType } from './RouteAuthValidationActionType';
 export interface RouteAuthValidationDecodeActionPayload {
     event: HTTPEvent;
@@ -11,4 +11,4 @@ export declare const askRouteAuthValidationDecode: import("quidproquo-core").Act
     event: HTTPEvent;
     routeAuthSettings: RouteAuthSettings;
     ignoreExpiration: boolean;
-}, DecodedAccessToken | null, never>;
+}, RouteAuthDecodeResult, never>;

package/lib/esm/actions/routeAuthValidation/askRouteAuthValidationDecode.js.map

@@ -1 +1 @@
-{"version":3,"file":"askRouteAuthValidationDecode.js","sourceRoot":"","sources":["../../../../src/actions/routeAuthValidation/askRouteAuthValidationDecode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAsB,MAAM,iBAAiB,CAAC;AAI5E,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAQhF,MAAM,CAAC,MAAM,4BAA4B,GAAG,qBAAqB,EAA6B,CAAC;IAC7F,UAAU,EAAE,6BAA6B,CAAC,MAAM;IAChD,UAAU,EAAE,CAAC,KAAgB,EAAE,iBAAoC,EAAE,gBAAyB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;CACpJ,CAAC,CAAC","sourcesContent":["import { createActionRequester, DecodedAccessToken } from 'quidproquo-core';\n\nimport { RouteAuthSettings } from '../../config/settings/route';\nimport { HTTPEvent } from '../../types/HTTPEvent';\nimport { RouteAuthValidationActionType } from './RouteAuthValidationActionType';\n\nexport interface RouteAuthValidationDecodeActionPayload {\n  event: HTTPEvent;\n  routeAuthSettings: RouteAuthSettings;\n  ignoreExpiration: boolean;\n}\n\nexport const askRouteAuthValidationDecode = createActionRequester<DecodedAccessToken | null>()({\n  actionType: RouteAuthValidationActionType.Decode,\n  getPayload: (event: HTTPEvent, routeAuthSettings: RouteAuthSettings, ignoreExpiration: boolean) => ({ event, routeAuthSettings, ignoreExpiration }),\n});\n"]}
+{"version":3,"file":"askRouteAuthValidationDecode.js","sourceRoot":"","sources":["../../../../src/actions/routeAuthValidation/askRouteAuthValidationDecode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAKxD,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAQhF,MAAM,CAAC,MAAM,4BAA4B,GAAG,qBAAqB,EAAyB,CAAC;IACzF,UAAU,EAAE,6BAA6B,CAAC,MAAM;IAChD,UAAU,EAAE,CAAC,KAAgB,EAAE,iBAAoC,EAAE,gBAAyB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;CACpJ,CAAC,CAAC","sourcesContent":["import { createActionRequester } from 'quidproquo-core';\n\nimport { RouteAuthSettings } from '../../config/settings/route';\nimport { HTTPEvent } from '../../types/HTTPEvent';\nimport { RouteAuthDecodeResult } from './RouteAuthDecodeResult';\nimport { RouteAuthValidationActionType } from './RouteAuthValidationActionType';\n\nexport interface RouteAuthValidationDecodeActionPayload {\n  event: HTTPEvent;\n  routeAuthSettings: RouteAuthSettings;\n  ignoreExpiration: boolean;\n}\n\nexport const askRouteAuthValidationDecode = createActionRequester<RouteAuthDecodeResult>()({\n  actionType: RouteAuthValidationActionType.Decode,\n  getPayload: (event: HTTPEvent, routeAuthSettings: RouteAuthSettings, ignoreExpiration: boolean) => ({ event, routeAuthSettings, ignoreExpiration }),\n});\n"]}

package/lib/esm/actions/routeAuthValidation/index.d.ts

@@ -1,2 +1,4 @@
 export * from './askRouteAuthValidationDecode';
+export * from './RouteAuthDecodeOutcome';
+export * from './RouteAuthDecodeResult';
 export * from './RouteAuthValidationActionType';

package/lib/esm/actions/routeAuthValidation/index.js

@@ -1,3 +1,5 @@
 export * from './askRouteAuthValidationDecode';
+export * from './RouteAuthDecodeOutcome';
+export * from './RouteAuthDecodeResult';
 export * from './RouteAuthValidationActionType';
 //# sourceMappingURL=index.js.map

package/lib/esm/actions/routeAuthValidation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/routeAuthValidation/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iCAAiC,CAAC","sourcesContent":["export * from './askRouteAuthValidationDecode';\nexport * from './RouteAuthValidationActionType';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/routeAuthValidation/index.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iCAAiC,CAAC","sourcesContent":["export * from './askRouteAuthValidationDecode';\nexport * from './RouteAuthDecodeOutcome';\nexport * from './RouteAuthDecodeResult';\nexport * from './RouteAuthValidationActionType';\n"]}

package/lib/esm/stories/askGetHttpApiEventStorySession.js

@@ -1,34 +1,37 @@
-import { askRouteAuthValidationDecode } from '../actions/routeAuthValidation';
+import { askRouteAuthValidationDecode, RouteAuthDecodeOutcome } from '../actions/routeAuthValidation';
 import { getAccessTokenFromHeaders } from '../utils/headerUtils';
 import { unsafeDecodeJWTPayload } from '../utils/jwtUtils';
 export function* askGetHttpApiEventStorySession({ event, routeAuthSettings, session, }) {
-    const accessToken = getAccessTokenFromHeaders(event.headers);
-    if (!accessToken) {
-        return void 0;
-    }
-    // If this endpoint has no auth settings, BUT we do have an access token
-    // then we want to just attempt to extract info for logs, but we will say that its wasValid = false
-    if (!routeAuthSettings?.userDirectoryName) {
-        const info = unsafeDecodeJWTPayload(accessToken);
+    // Always yield the decode, mirroring askValidateRouteAuth, so a per-route
+    // processor override's identity reaches the session. Auth already ran in the
+    // auto-respond preamble, hence ignoreExpiration: true.
+    const decodeResult = yield* askRouteAuthValidationDecode(event, routeAuthSettings || {}, true);
+    if (decodeResult.outcome === RouteAuthDecodeOutcome.valid) {
         return {
             ...session,
-            decodedAccessToken: {
-                exp: info?.exp || 0,
-                userDirectory: '',
-                userId: info?.sub || info?.id || info?.userId || info?.username || '',
-                username: info?.username || info?.userId || info?.sub || info?.id || '',
-                wasValid: false,
-            },
+            decodedAccessToken: decodeResult.decodedAccessToken,
         };
     }
-    // Auth was already validated in auto-respond, so we can use ignoreExpiration: true
-    const decoded = yield* askRouteAuthValidationDecode(event, routeAuthSettings, true);
-    if (!decoded) {
+    // Normally unreachable: an invalid request already 401'd in the preamble.
+    if (decodeResult.outcome === RouteAuthDecodeOutcome.invalid) {
+        return void 0;
+    }
+    // Not applicable: no token auth configured for this route. If an access token
+    // was sent anyway, extract info for the logs only, marked wasValid: false.
+    const accessToken = getAccessTokenFromHeaders(event.headers);
+    if (!accessToken) {
         return void 0;
     }
+    const info = unsafeDecodeJWTPayload(accessToken);
     return {
         ...session,
-        decodedAccessToken: decoded,
+        decodedAccessToken: {
+            exp: info?.exp || 0,
+            userDirectory: '',
+            userId: info?.sub || info?.id || info?.userId || info?.username || '',
+            username: info?.username || info?.userId || info?.sub || info?.id || '',
+            wasValid: false,
+        },
     };
 }
 //# sourceMappingURL=askGetHttpApiEventStorySession.js.map

package/lib/esm/stories/askGetHttpApiEventStorySession.js.map

@@ -1 +1 @@
-{"version":3,"file":"askGetHttpApiEventStorySession.js","sourceRoot":"","sources":["../../../src/stories/askGetHttpApiEventStorySession.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAG9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAQ3D,MAAM,SAAS,CAAC,CAAC,8BAA8B,CAAC,EAC9C,KAAK,EACL,iBAAiB,EACjB,OAAO,GAC4B;IACnC,MAAM,WAAW,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC,CAAC;IAChB,CAAC;IAED,wEAAwE;IACxE,mGAAmG;IACnG,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,sBAAsB,CAMhC,WAAW,CAAC,CAAC;QAEhB,OAAO;YACL,GAAG,OAAO;YAEV,kBAAkB,EAAE;gBAClB,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;gBACnB,aAAa,EAAE,EAAE;gBACjB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,QAAQ,IAAI,EAAE;gBACrE,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE;gBACvE,QAAQ,EAAE,KAAK;aAChB;SACF,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,4BAA4B,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAEpF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC,CAAC;IAChB,CAAC;IAED,OAAO;QACL,GAAG,OAAO;QAEV,kBAAkB,EAAE,OAAO;KAC5B,CAAC;AACJ,CAAC","sourcesContent":["import { AskResponse, StorySession } from 'quidproquo-core';\n\nimport { askRouteAuthValidationDecode } from '../actions/routeAuthValidation';\nimport { RouteAuthSettings } from '../config/settings/route';\nimport { HTTPEvent } from '../types/HTTPEvent';\nimport { getAccessTokenFromHeaders } from '../utils/headerUtils';\nimport { unsafeDecodeJWTPayload } from '../utils/jwtUtils';\n\nexport interface GetHttpApiEventStorySessionPayload {\n  event: HTTPEvent;\n  routeAuthSettings?: RouteAuthSettings;\n  session: StorySession;\n}\n\nexport function* askGetHttpApiEventStorySession({\n  event,\n  routeAuthSettings,\n  session,\n}: GetHttpApiEventStorySessionPayload): AskResponse<StorySession | undefined> {\n  const accessToken = getAccessTokenFromHeaders(event.headers);\n\n  if (!accessToken) {\n    return void 0;\n  }\n\n  // If this endpoint has no auth settings, BUT we do have an access token\n  // then we want to just attempt to extract info for logs, but we will say that its wasValid = false\n  if (!routeAuthSettings?.userDirectoryName) {\n    const info = unsafeDecodeJWTPayload<{\n      sub?: string;\n      userId?: string;\n      username?: string;\n      id?: string;\n      exp?: number;\n    }>(accessToken);\n\n    return {\n      ...session,\n\n      decodedAccessToken: {\n        exp: info?.exp || 0,\n        userDirectory: '',\n        userId: info?.sub || info?.id || info?.userId || info?.username || '',\n        username: info?.username || info?.userId || info?.sub || info?.id || '',\n        wasValid: false,\n      },\n    };\n  }\n\n  // Auth was already validated in auto-respond, so we can use ignoreExpiration: true\n  const decoded = yield* askRouteAuthValidationDecode(event, routeAuthSettings, true);\n\n  if (!decoded) {\n    return void 0;\n  }\n\n  return {\n    ...session,\n\n    decodedAccessToken: decoded,\n  };\n}\n"]}
+{"version":3,"file":"askGetHttpApiEventStorySession.js","sourceRoot":"","sources":["../../../src/stories/askGetHttpApiEventStorySession.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAGtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAQ3D,MAAM,SAAS,CAAC,CAAC,8BAA8B,CAAC,EAC9C,KAAK,EACL,iBAAiB,EACjB,OAAO,GAC4B;IACnC,0EAA0E;IAC1E,6EAA6E;IAC7E,uDAAuD;IACvD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,4BAA4B,CAAC,KAAK,EAAE,iBAAiB,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IAE/F,IAAI,YAAY,CAAC,OAAO,KAAK,sBAAsB,CAAC,KAAK,EAAE,CAAC;QAC1D,OAAO;YACL,GAAG,OAAO;YAEV,kBAAkB,EAAE,YAAY,CAAC,kBAAkB;SACpD,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,IAAI,YAAY,CAAC,OAAO,KAAK,sBAAsB,CAAC,OAAO,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC,CAAC;IAChB,CAAC;IAED,8EAA8E;IAC9E,2EAA2E;IAC3E,MAAM,WAAW,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,sBAAsB,CAMhC,WAAW,CAAC,CAAC;IAEhB,OAAO;QACL,GAAG,OAAO;QAEV,kBAAkB,EAAE;YAClB,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;YACnB,aAAa,EAAE,EAAE;YACjB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,QAAQ,IAAI,EAAE;YACrE,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE;YACvE,QAAQ,EAAE,KAAK;SAChB;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { AskResponse, StorySession } from 'quidproquo-core';\n\nimport { askRouteAuthValidationDecode, RouteAuthDecodeOutcome } from '../actions/routeAuthValidation';\nimport { RouteAuthSettings } from '../config/settings/route';\nimport { HTTPEvent } from '../types/HTTPEvent';\nimport { getAccessTokenFromHeaders } from '../utils/headerUtils';\nimport { unsafeDecodeJWTPayload } from '../utils/jwtUtils';\n\nexport interface GetHttpApiEventStorySessionPayload {\n  event: HTTPEvent;\n  routeAuthSettings?: RouteAuthSettings;\n  session: StorySession;\n}\n\nexport function* askGetHttpApiEventStorySession({\n  event,\n  routeAuthSettings,\n  session,\n}: GetHttpApiEventStorySessionPayload): AskResponse<StorySession | undefined> {\n  // Always yield the decode, mirroring askValidateRouteAuth, so a per-route\n  // processor override's identity reaches the session. Auth already ran in the\n  // auto-respond preamble, hence ignoreExpiration: true.\n  const decodeResult = yield* askRouteAuthValidationDecode(event, routeAuthSettings || {}, true);\n\n  if (decodeResult.outcome === RouteAuthDecodeOutcome.valid) {\n    return {\n      ...session,\n\n      decodedAccessToken: decodeResult.decodedAccessToken,\n    };\n  }\n\n  // Normally unreachable: an invalid request already 401'd in the preamble.\n  if (decodeResult.outcome === RouteAuthDecodeOutcome.invalid) {\n    return void 0;\n  }\n\n  // Not applicable: no token auth configured for this route. If an access token\n  // was sent anyway, extract info for the logs only, marked wasValid: false.\n  const accessToken = getAccessTokenFromHeaders(event.headers);\n\n  if (!accessToken) {\n    return void 0;\n  }\n\n  const info = unsafeDecodeJWTPayload<{\n    sub?: string;\n    userId?: string;\n    username?: string;\n    id?: string;\n    exp?: number;\n  }>(accessToken);\n\n  return {\n    ...session,\n\n    decodedAccessToken: {\n      exp: info?.exp || 0,\n      userDirectory: '',\n      userId: info?.sub || info?.id || info?.userId || info?.username || '',\n      username: info?.username || info?.userId || info?.sub || info?.id || '',\n      wasValid: false,\n    },\n  };\n}\n"]}

package/lib/esm/stories/askRouteAuthValidationDecodeDefault.d.ts

@@ -1,3 +1,3 @@
-import { AskResponse, DecodedAccessToken } from 'quidproquo-core';
-import { RouteAuthValidationDecodeActionPayload } from '../actions/routeAuthValidation';
-export declare function askRouteAuthValidationDecodeDefault({ event, routeAuthSettings, ignoreExpiration, }: RouteAuthValidationDecodeActionPayload): AskResponse<DecodedAccessToken | null>;
+import { AskResponse } from 'quidproquo-core';
+import { RouteAuthDecodeResult, RouteAuthValidationDecodeActionPayload } from '../actions/routeAuthValidation';
+export declare function askRouteAuthValidationDecodeDefault({ event, routeAuthSettings, ignoreExpiration, }: RouteAuthValidationDecodeActionPayload): AskResponse<RouteAuthDecodeResult>;

package/lib/esm/stories/askRouteAuthValidationDecodeDefault.js

@@ -1,21 +1,25 @@
 import { askCatch, askUserDirectoryDecodeAccessToken } from 'quidproquo-core';
+import { RouteAuthDecodeOutcome } from '../actions/routeAuthValidation';
 import { getHeaderValue } from '../utils/headerUtils';
 export function* askRouteAuthValidationDecodeDefault({ event, routeAuthSettings, ignoreExpiration, }) {
+    // No user directory means the route has no token auth under the default
+    // processor: not applicable, the request passes as anonymous. A per-route
+    // override that implements its own auth never reaches this story.
     if (!routeAuthSettings.userDirectoryName) {
-        return null;
+        return { outcome: RouteAuthDecodeOutcome.notApplicable };
     }
     const authHeader = getHeaderValue('Authorization', event.headers);
     if (!authHeader) {
-        return null;
+        return { outcome: RouteAuthDecodeOutcome.invalid };
     }
     const [authType, accessToken] = authHeader.split(' ');
     if (authType !== 'Bearer' || !accessToken) {
-        return null;
+        return { outcome: RouteAuthDecodeOutcome.invalid };
     }
     const result = yield* askCatch(askUserDirectoryDecodeAccessToken(routeAuthSettings.userDirectoryName, ignoreExpiration, accessToken));
-    if (!result.success) {
-        return null;
+    if (!result.success || !result.result.wasValid) {
+        return { outcome: RouteAuthDecodeOutcome.invalid };
     }
-    return result.result;
+    return { outcome: RouteAuthDecodeOutcome.valid, decodedAccessToken: result.result };
 }
 //# sourceMappingURL=askRouteAuthValidationDecodeDefault.js.map

package/lib/esm/stories/askRouteAuthValidationDecodeDefault.js.map

@@ -1 +1 @@
-{"version":3,"file":"askRouteAuthValidationDecodeDefault.js","sourceRoot":"","sources":["../../../src/stories/askRouteAuthValidationDecodeDefault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAe,iCAAiC,EAAsB,MAAM,iBAAiB,CAAC;AAG/G,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,SAAS,CAAC,CAAC,mCAAmC,CAAC,EACnD,KAAK,EACL,iBAAiB,EACjB,gBAAgB,GACuB;IACvC,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC;IAEtI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC","sourcesContent":["import { askCatch, AskResponse, askUserDirectoryDecodeAccessToken, DecodedAccessToken } from 'quidproquo-core';\n\nimport { RouteAuthValidationDecodeActionPayload } from '../actions/routeAuthValidation';\nimport { getHeaderValue } from '../utils/headerUtils';\n\nexport function* askRouteAuthValidationDecodeDefault({\n  event,\n  routeAuthSettings,\n  ignoreExpiration,\n}: RouteAuthValidationDecodeActionPayload): AskResponse<DecodedAccessToken | null> {\n  if (!routeAuthSettings.userDirectoryName) {\n    return null;\n  }\n\n  const authHeader = getHeaderValue('Authorization', event.headers);\n  if (!authHeader) {\n    return null;\n  }\n\n  const [authType, accessToken] = authHeader.split(' ');\n  if (authType !== 'Bearer' || !accessToken) {\n    return null;\n  }\n\n  const result = yield* askCatch(askUserDirectoryDecodeAccessToken(routeAuthSettings.userDirectoryName, ignoreExpiration, accessToken));\n\n  if (!result.success) {\n    return null;\n  }\n\n  return result.result;\n}\n"]}
+{"version":3,"file":"askRouteAuthValidationDecodeDefault.js","sourceRoot":"","sources":["../../../src/stories/askRouteAuthValidationDecodeDefault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAe,iCAAiC,EAAE,MAAM,iBAAiB,CAAC;AAE3F,OAAO,EAAE,sBAAsB,EAAiE,MAAM,gCAAgC,CAAC;AACvI,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,SAAS,CAAC,CAAC,mCAAmC,CAAC,EACnD,KAAK,EACL,iBAAiB,EACjB,gBAAgB,GACuB;IACvC,wEAAwE;IACxE,0EAA0E;IAC1E,kEAAkE;IAClE,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,sBAAsB,CAAC,aAAa,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC;IAEtI,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,sBAAsB,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACtF,CAAC","sourcesContent":["import { askCatch, AskResponse, askUserDirectoryDecodeAccessToken } from 'quidproquo-core';\n\nimport { RouteAuthDecodeOutcome, RouteAuthDecodeResult, RouteAuthValidationDecodeActionPayload } from '../actions/routeAuthValidation';\nimport { getHeaderValue } from '../utils/headerUtils';\n\nexport function* askRouteAuthValidationDecodeDefault({\n  event,\n  routeAuthSettings,\n  ignoreExpiration,\n}: RouteAuthValidationDecodeActionPayload): AskResponse<RouteAuthDecodeResult> {\n  // No user directory means the route has no token auth under the default\n  // processor: not applicable, the request passes as anonymous. A per-route\n  // override that implements its own auth never reaches this story.\n  if (!routeAuthSettings.userDirectoryName) {\n    return { outcome: RouteAuthDecodeOutcome.notApplicable };\n  }\n\n  const authHeader = getHeaderValue('Authorization', event.headers);\n  if (!authHeader) {\n    return { outcome: RouteAuthDecodeOutcome.invalid };\n  }\n\n  const [authType, accessToken] = authHeader.split(' ');\n  if (authType !== 'Bearer' || !accessToken) {\n    return { outcome: RouteAuthDecodeOutcome.invalid };\n  }\n\n  const result = yield* askCatch(askUserDirectoryDecodeAccessToken(routeAuthSettings.userDirectoryName, ignoreExpiration, accessToken));\n\n  if (!result.success || !result.result.wasValid) {\n    return { outcome: RouteAuthDecodeOutcome.invalid };\n  }\n\n  return { outcome: RouteAuthDecodeOutcome.valid, decodedAccessToken: result.result };\n}\n"]}

package/lib/esm/stories/askValidateRouteAuth.js

@@ -1,18 +1,19 @@
 import { askApiKeyValidationValidate } from '../actions/apiKeyValidation';
-import { askRouteAuthValidationDecode } from '../actions/routeAuthValidation';
+import { askRouteAuthValidationDecode, RouteAuthDecodeOutcome } from '../actions/routeAuthValidation';
 import { getHeaderValue } from '../utils/headerUtils';
 export function* askValidateRouteAuth({ event, routeAuthSettings }) {
     if (!routeAuthSettings) {
         return true;
     }
-    // Token auth validation via swappable action
-    if (routeAuthSettings.userDirectoryName) {
-        const decoded = yield* askRouteAuthValidationDecode(event, routeAuthSettings, false);
-        if (!decoded || !decoded.wasValid) {
-            return false;
-        }
+    // Token auth via the swappable decode action: always yielded, so a per-route
+    // processor override can implement completely custom auth. The default
+    // processor keeps the user-directory check internally and returns
+    // notApplicable when the route has no token auth configured.
+    const decodeResult = yield* askRouteAuthValidationDecode(event, routeAuthSettings, false);
+    if (decodeResult.outcome === RouteAuthDecodeOutcome.invalid) {
+        return false;
     }
-    // API key validation via action
+    // API key validation via action, composing with AND semantics
     const apiKeys = routeAuthSettings.apiKeys || [];
     if (apiKeys.length > 0) {
         const apiKeyHeader = getHeaderValue('x-api-key', event.headers);

package/lib/esm/stories/askValidateRouteAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"askValidateRouteAuth.js","sourceRoot":"","sources":["../../../src/stories/askValidateRouteAuth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAG9E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAOtD,MAAM,SAAS,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAA4B;IAC1F,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6CAA6C;IAC7C,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,4BAA4B,CAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,IAAI,EAAE,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,2BAA2B,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { AskResponse } from 'quidproquo-core';\n\nimport { askApiKeyValidationValidate } from '../actions/apiKeyValidation';\nimport { askRouteAuthValidationDecode } from '../actions/routeAuthValidation';\nimport { RouteAuthSettings } from '../config/settings/route';\nimport { HTTPEvent } from '../types/HTTPEvent';\nimport { getHeaderValue } from '../utils/headerUtils';\n\nexport interface ValidateRouteAuthPayload {\n  event: HTTPEvent;\n  routeAuthSettings?: RouteAuthSettings;\n}\n\nexport function* askValidateRouteAuth({ event, routeAuthSettings }: ValidateRouteAuthPayload): AskResponse<boolean> {\n  if (!routeAuthSettings) {\n    return true;\n  }\n\n  // Token auth validation via swappable action\n  if (routeAuthSettings.userDirectoryName) {\n    const decoded = yield* askRouteAuthValidationDecode(event, routeAuthSettings, false);\n    if (!decoded || !decoded.wasValid) {\n      return false;\n    }\n  }\n\n  // API key validation via action\n  const apiKeys = routeAuthSettings.apiKeys || [];\n  if (apiKeys.length > 0) {\n    const apiKeyHeader = getHeaderValue('x-api-key', event.headers);\n    if (!apiKeyHeader) {\n      return false;\n    }\n\n    const valid = yield* askApiKeyValidationValidate(apiKeyHeader, apiKeys);\n    if (!valid) {\n      return false;\n    }\n  }\n\n  return true;\n}\n"]}
+{"version":3,"file":"askValidateRouteAuth.js","sourceRoot":"","sources":["../../../src/stories/askValidateRouteAuth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAGtG,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAOtD,MAAM,SAAS,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAA4B;IAC1F,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,uEAAuE;IACvE,kEAAkE;IAClE,6DAA6D;IAC7D,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,4BAA4B,CAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAC1F,IAAI,YAAY,CAAC,OAAO,KAAK,sBAAsB,CAAC,OAAO,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8DAA8D;IAC9D,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,IAAI,EAAE,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,2BAA2B,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { AskResponse } from 'quidproquo-core';\n\nimport { askApiKeyValidationValidate } from '../actions/apiKeyValidation';\nimport { askRouteAuthValidationDecode, RouteAuthDecodeOutcome } from '../actions/routeAuthValidation';\nimport { RouteAuthSettings } from '../config/settings/route';\nimport { HTTPEvent } from '../types/HTTPEvent';\nimport { getHeaderValue } from '../utils/headerUtils';\n\nexport interface ValidateRouteAuthPayload {\n  event: HTTPEvent;\n  routeAuthSettings?: RouteAuthSettings;\n}\n\nexport function* askValidateRouteAuth({ event, routeAuthSettings }: ValidateRouteAuthPayload): AskResponse<boolean> {\n  if (!routeAuthSettings) {\n    return true;\n  }\n\n  // Token auth via the swappable decode action: always yielded, so a per-route\n  // processor override can implement completely custom auth. The default\n  // processor keeps the user-directory check internally and returns\n  // notApplicable when the route has no token auth configured.\n  const decodeResult = yield* askRouteAuthValidationDecode(event, routeAuthSettings, false);\n  if (decodeResult.outcome === RouteAuthDecodeOutcome.invalid) {\n    return false;\n  }\n\n  // API key validation via action, composing with AND semantics\n  const apiKeys = routeAuthSettings.apiKeys || [];\n  if (apiKeys.length > 0) {\n    const apiKeyHeader = getHeaderValue('x-api-key', event.headers);\n    if (!apiKeyHeader) {\n      return false;\n    }\n\n    const valid = yield* askApiKeyValidationValidate(apiKeyHeader, apiKeys);\n    if (!valid) {\n      return false;\n    }\n  }\n\n  return true;\n}\n"]}

package/lib/esm/utils/qpqConfigAccessorsUtils.js

@@ -36,13 +36,13 @@ export const getAllWebsocketSrcEntries = (qpqConfig) => {
 // Used in bundlers to know where and what to build and index
 // Events, routes, etc
 export const getAllSrcEntries = (configs) => {
-    return [
+    return qpqCoreUtils.expandSrcEntriesWithActionProcessors([
         ...getAllRoutes(configs).map((r) => r.runtime),
         // ...getAllOpenApiSpecs(configs).map((r) => r.openApiSpecPath),
         ...getAllSeo(configs).map((seo) => seo.runtime),
         ...getAllServiceFunctions(configs).map((sf) => sf.runtime),
         ...getAllWebsocketSrcEntries(configs),
-    ];
+    ]);
 };
 export const getDomainName = (configs) => {
     const dnsSettings = qpqCoreUtils.getConfigSetting(configs, QPQWebServerConfigSettingType.Dns);

package/lib/esm/utils/qpqConfigAccessorsUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"qpqConfigAccessorsUtils.js","sourceRoot":"","sources":["../../../src/utils/qpqConfigAccessorsUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAa,YAAY,EAAsB,MAAM,iBAAiB,CAAC;AAEzF,OAAO,EAWL,6BAA6B,GAO9B,MAAM,WAAW,CAAC;AAGnB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,SAAoB,EAAoC,EAAE;IACrF,MAAM,MAAM,GAAG,YAAY,CAAC,iBAAiB,CAAiC,SAAS,EAAE,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAE9H,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAE,SAAoB,EAAoC,EAAE;IAC5G,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAEvC,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,SAAoB,EAAqC,EAAE;IAC7F,MAAM,aAAa,GAAG,YAAY,CAAC,iBAAiB,CAAkC,SAAS,EAAE,6BAA6B,CAAC,MAAM,CAAC,CAAC;IAEvI,OAAO,aAAa,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,SAAoB,EAAkC,EAAE;IAChF,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAA+B,SAAS,EAAE,6BAA6B,CAAC,GAAG,CAAC,CAAC;IAE9H,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAA8C,EAAE;IACzG,MAAM,gBAAgB,GAAG,YAAY,CAAC,iBAAiB,CACrD,SAAS,EACT,6BAA6B,CAAC,eAAe,CAC9C,CAAC;IAEF,OAAO,gBAAgB,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,SAAoB,EAA8C,EAAE;IAC3G,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAE3D,OAAO,YAAY,CAAC,aAAa,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAkB,EAAsC,EAAE;IAC3F,MAAM,YAAY,GAAG,YAAY,CAAC,iBAAiB,CAAmC,OAAO,EAAE,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAEtI,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAAwB,EAAE;IACtF,OAAO,yBAAyB,CAAC,SAAS,CAAC;SACxC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;SAC1G,MAAM,CAAC,SAAS,CAAC,CAAC;AACvB,CAAC,CAAC;AAEF,6DAA6D;AAC7D,sBAAsB;AACtB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAkB,EAAwB,EAAE;IAC3E,OAAO;QACL,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9C,gEAAgE;QAChE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/C,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC;QAC1D,GAAG,yBAAyB,CAAC,OAAO,CAAC;KACtC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAkB,EAAU,EAAE;IAC1D,MAAM,WAAW,GAAG,YAAY,CAAC,gBAAgB,CAA+B,OAAO,EAAE,6BAA6B,CAAC,GAAG,CAAC,CAAC;IAE5H,OAAO,WAAW,EAAE,OAAO,IAAI,EAAE,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAkB,EAAU,EAAE;IACxD,MAAM,QAAQ,GAAG,YAAY,CAAC,gBAAgB,CAAoC,OAAO,EAAE,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IAEnI,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,QAAQ,EAAE,SAAS,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,OAAe,EAAE,SAAoB,EAAsC,EAAE;IACtH,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAE1D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAE9E,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,GAAG,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAkB,EAAgD,EAAE;IACxG,MAAM,kBAAkB,GAAG,YAAY,CAAC,iBAAiB,CACvD,OAAO,EACP,6BAA6B,CAAC,iBAAiB,CAChD,CAAC;IAEF,OAAO,kBAAkB,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAkB,EAAkC,EAAE;IAClF,OAAO,YAAY,CAAC,iBAAiB,CAA+B,OAAO,EAAE,6BAA6B,CAAC,GAAG,CAAC,CAAC;AAClH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAkB,EAAkC,EAAE;IAClF,OAAO,YAAY,CAAC,iBAAiB,CAA+B,OAAO,EAAE,6BAA6B,CAAC,GAAG,CAAC,CAAC;AAClH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAkB,EAAuC,EAAE;IAC5F,OAAO,YAAY,CAAC,iBAAiB,CAAoC,OAAO,EAAE,6BAA6B,CAAC,QAAQ,CAAC,CAAC;AAC5H,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAkB,EAA0C,EAAE;IAClG,OAAO,YAAY,CAAC,iBAAiB,CAAuC,OAAO,EAAE,6BAA6B,CAAC,WAAW,CAAC,CAAC;AAClI,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,SAAoB,EAAoC,EAAE;IAChG,MAAM,aAAa,GAAG,YAAY,CAAC,iBAAiB,CAAiC,SAAS,EAAE,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAErI,OAAO,YAAY,CAAC,aAAa,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAA0C,EAAE;IAC3G,MAAM,mBAAmB,GAAG,YAAY,CAAC,iBAAiB,CACxD,SAAS,EACT,6BAA6B,CAAC,WAAW,CAC1C,CAAC;IAEF,OAAO,YAAY,CAAC,aAAa,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,eAAuB,EAAE,SAAoB,EAAkC,EAAE;IACpH,MAAM,YAAY,GAAG,YAAY;SAC9B,iBAAiB,CAAiC,SAAS,EAAE,6BAA6B,CAAC,KAAK,CAAC;SACjG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;IAE3C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,mCAAmC,eAAe,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,OAAkB,EAAU,EAAE;IACrE,MAAM,WAAW,GAAG,YAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAE9C,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,OAAO,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;AAC5C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAAoB,EAAU,EAAE;IAChE,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,YAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;IAEpE,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,GAAG,OAAO,IAAI,iBAAiB,EAAE,CAAC;IAC3C,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAU,EAAE;IACnE,MAAM,OAAO,GAAG,YAAY,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAEhD,OAAO,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;AACpC,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,SAAoB,EAAE,eAA0B,EAAY,EAAE;IACnH,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAChD,OAAO,CAAC,WAAW,UAAU,EAAE,EAAE,aAAa,UAAU,EAAE,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,SAAoB,EAAE,gBAAwB,EAAY,EAAE;IAC5G,MAAM,WAAW,GAAG,YAAY;SAC7B,iBAAiB,CAAoD,SAAS,EAAE,6BAA6B,CAAC,wBAAwB,CAAC;SACvI,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,KAAK,gBAAgB,CAAC,CAAC;IAEpE,OAAO,sCAAsC,CAAC,SAAS,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AACxF,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAAE,gBAAwB,EAAW,EAAE;IACtG,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,kBAAkB,KAAK,gBAAgB,CAAC,CAAC;AACzH,CAAC,CAAC;AAEF,yFAAyF;AACzF,qFAAqF;AACrF,MAAM,CAAC,MAAM,yBAAyB,GAAuB;IAC3D,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAClC,YAAY,EAAE,EAAE;IAChB,aAAa,EAAE,GAAG;IAClB,iBAAiB,EAAE,IAAI,GAAG,IAAI;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAAsB,EAAE;IAChF,MAAM,OAAO,GAAG,YAAY,CAAC,gBAAgB,CAC3C,SAAS,EACT,6BAA6B,CAAC,kBAAkB,CACjD,CAAC;IAEF,OAAO;QACL,GAAG,yBAAyB;QAC5B,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;KACjH,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,SAAoB,EAAE,UAAkB,EAAE,YAAqB,EAAU,EAAE;IAC/H,MAAM,OAAO,GAAG,YAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,YAAY,CAAC,+BAA+B,CAAC,SAAS,CAAC,CAAC;IAE5E,MAAM,UAAU,GAAG,YAAY;QAC7B,CAAC,CAAC,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC;QACjD,CAAC,CAAC,0BAA0B,CAAC,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAEnH,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,UAAkB,EAAE,WAAmB,EAAE,OAAe,EAAE,OAAgB,EAAE,EAAE;IACvH,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAEnE,OAAO,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,WAAmB,EAAE,MAAc,EAAU,EAAE;IAC5F,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,GAAG,WAAW,IAAI,MAAM,EAAE,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,SAAoB,EAAkD,EAAE;IAC9G,MAAM,oBAAoB,GACxB,YAAY,CAAC,iBAAiB,CAA+C,SAAS,EAAE,6BAA6B,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;IAEnJ,OAAO,oBAAoB,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAE,WAAmB,EAAE,OAAgB,EAAU,EAAE;IACjG,IAAI,YAAY,GAAG,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,IAAI,OAAO,EAAE,CAAC;QACZ,YAAY,GAAG,GAAG,OAAO,IAAI,YAAY,EAAE,CAAC;IAC9C,CAAC;IAED,OAAO,GAAG,YAAY,GAAG,UAAU,EAAE,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,UAAkB,EAAE,SAAoB,EAAU,EAAE;IACpF,MAAM,MAAM,GAAG,aAAa,CAC1B,UAAU,EACV,YAAY,CAAC,+BAA+B,CAAC,SAAS,CAAC,EACvD,YAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CACpD,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAA0C,EAAE;IACrG,MAAM,mBAAmB,GACvB,YAAY,CAAC,iBAAiB,CAAuC,SAAS,EAAE,6BAA6B,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAEnI,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAwC,EAAE;IACjG,MAAM,iBAAiB,GACrB,YAAY,CAAC,iBAAiB,CAAqC,SAAS,EAAE,6BAA6B,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAE/H,OAAO,iBAAiB,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAAwC,EAAE;IACtG,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAE1D,OAAO,YAAY,CAAC,aAAa,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAClE,CAAC,CAAC","sourcesContent":["import { isDefined, QPQConfig, qpqCoreUtils, QpqFunctionRuntime } from 'quidproquo-core';\n\nimport {\n  ApiKeyQPQWebServerConfigSetting,\n  CacheQPQWebServerConfigSetting,\n  CertificateQPQWebServerConfigSetting,\n  DefaultRouteOptionsQPQWebServerConfigSetting,\n  DnsQPQWebServerConfigSetting,\n  DomainProxyQPQWebServerConfigSetting,\n  EmailSenderQPQWebServerConfigSetting,\n  FileUploadSettings,\n  FileUploadSettingsQPQWebServerConfigSetting,\n  OpenApiQPQWebServerConfigSetting,\n  QPQWebServerConfigSettingType,\n  RouteQPQWebServerConfigSetting,\n  SeoQPQWebServerConfigSetting,\n  ServiceFunctionQPQWebServerConfigSetting,\n  StorageDriveCorsSettingsQPQWebServerConfigSetting,\n  SubdomainRedirectQPQWebServerConfigSetting,\n  WebSocketQPQWebServerConfigSetting,\n} from '../config';\nimport { ApiQPQWebServerConfigSetting, WebEntryQPQWebServerConfigSetting } from '../config';\n\nexport const getAllRoutes = (qpqConfig: QPQConfig): RouteQPQWebServerConfigSetting[] => {\n  const routes = qpqCoreUtils.getConfigSettings<RouteQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Route);\n\n  return routes;\n};\n\nexport const getAllRoutesForApi = (apiName: string, qpqConfig: QPQConfig): RouteQPQWebServerConfigSetting[] => {\n  const routes = getAllRoutes(qpqConfig);\n\n  return routes;\n};\n\nexport const getAllApiKeyConfigs = (qpqConfig: QPQConfig): ApiKeyQPQWebServerConfigSetting[] => {\n  const apiKeyConfigs = qpqCoreUtils.getConfigSettings<ApiKeyQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.ApiKey);\n\n  return apiKeyConfigs;\n};\n\nexport const getAllSeo = (qpqConfig: QPQConfig): SeoQPQWebServerConfigSetting[] => {\n  const seoConfigs = qpqCoreUtils.getConfigSettings<SeoQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Seo);\n\n  return seoConfigs;\n};\n\nexport const getAllServiceFunctions = (qpqConfig: QPQConfig): ServiceFunctionQPQWebServerConfigSetting[] => {\n  const serviceFunctions = qpqCoreUtils.getConfigSettings<ServiceFunctionQPQWebServerConfigSetting>(\n    qpqConfig,\n    QPQWebServerConfigSettingType.ServiceFunction,\n  );\n\n  return serviceFunctions;\n};\n\nexport const getOwnedServiceFunctions = (qpqConfig: QPQConfig): ServiceFunctionQPQWebServerConfigSetting[] => {\n  const serviceFunctions = getAllServiceFunctions(qpqConfig);\n\n  return qpqCoreUtils.getOwnedItems(serviceFunctions, qpqConfig);\n};\n\nexport const getAllOpenApiSpecs = (configs: QPQConfig): OpenApiQPQWebServerConfigSetting[] => {\n  const openApiSpecs = qpqCoreUtils.getConfigSettings<OpenApiQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.OpenApi);\n\n  return openApiSpecs;\n};\n\nexport const getAllWebsocketSrcEntries = (qpqConfig: QPQConfig): QpqFunctionRuntime[] => {\n  return getOwnedWebsocketSettings(qpqConfig)\n    .flatMap((s) => [s.eventProcessors.onConnect, s.eventProcessors.onDisconnect, s.eventProcessors.onMessage])\n    .filter(isDefined);\n};\n\n// Used in bundlers to know where and what to build and index\n// Events, routes, etc\nexport const getAllSrcEntries = (configs: QPQConfig): QpqFunctionRuntime[] => {\n  return [\n    ...getAllRoutes(configs).map((r) => r.runtime),\n    // ...getAllOpenApiSpecs(configs).map((r) => r.openApiSpecPath),\n    ...getAllSeo(configs).map((seo) => seo.runtime),\n    ...getAllServiceFunctions(configs).map((sf) => sf.runtime),\n    ...getAllWebsocketSrcEntries(configs),\n  ];\n};\n\nexport const getDomainName = (configs: QPQConfig): string => {\n  const dnsSettings = qpqCoreUtils.getConfigSetting<DnsQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.Dns);\n\n  return dnsSettings?.dnsBase || '';\n};\n\nexport const getWebEntry = (configs: QPQConfig): string => {\n  const webEntry = qpqCoreUtils.getConfigSetting<WebEntryQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.WebEntry);\n\n  if (!webEntry?.buildPath) {\n    throw new Error('please use defineWebEntry in your qpq config');\n  }\n\n  return webEntry?.buildPath;\n};\n\nexport const getWebsocketEntryByApiName = (apiName: string, qpqConfig: QPQConfig): WebSocketQPQWebServerConfigSetting => {\n  const websocketSettings = getWebsocketSettings(qpqConfig);\n\n  const websocketSetting = websocketSettings.find((s) => s.apiName === apiName);\n\n  if (!websocketSetting) {\n    throw new Error(`No websocket setting found for api [${apiName}]`);\n  }\n\n  return websocketSetting;\n};\n\nexport const getSubdomainRedirects = (configs: QPQConfig): SubdomainRedirectQPQWebServerConfigSetting[] => {\n  const subdomainRedirects = qpqCoreUtils.getConfigSettings<SubdomainRedirectQPQWebServerConfigSetting>(\n    configs,\n    QPQWebServerConfigSettingType.SubdomainRedirect,\n  );\n\n  return subdomainRedirects;\n};\n\nexport const getApiConfigs = (configs: QPQConfig): ApiQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<ApiQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.Api);\n};\n\nexport const getDnsConfigs = (configs: QPQConfig): DnsQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<DnsQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.Dns);\n};\n\nexport const getWebEntryConfigs = (configs: QPQConfig): WebEntryQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<WebEntryQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.WebEntry);\n};\n\nexport const getDomainProxyConfigs = (configs: QPQConfig): DomainProxyQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<DomainProxyQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.DomainProxy);\n};\n\nexport const getAllOwnedCacheConfigs = (qpqConfig: QPQConfig): CacheQPQWebServerConfigSetting[] => {\n  const cacheSettings = qpqCoreUtils.getConfigSettings<CacheQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Cache);\n\n  return qpqCoreUtils.getOwnedItems(cacheSettings, qpqConfig);\n};\n\nexport const getAllOwnedCertifcateConfigs = (qpqConfig: QPQConfig): CertificateQPQWebServerConfigSetting[] => {\n  const certificateSettings = qpqCoreUtils.getConfigSettings<CertificateQPQWebServerConfigSetting>(\n    qpqConfig,\n    QPQWebServerConfigSettingType.Certificate,\n  );\n\n  return qpqCoreUtils.getOwnedItems(certificateSettings, qpqConfig);\n};\n\nexport const getCacheConfigByName = (cacheConfigName: string, qpqConfig: QPQConfig): CacheQPQWebServerConfigSetting => {\n  const cacheSetting = qpqCoreUtils\n    .getConfigSettings<CacheQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Cache)\n    .find((c) => c.name === cacheConfigName);\n\n  if (!cacheSetting) {\n    throw new Error(`No cache config found for name [${cacheConfigName}]`);\n  }\n\n  return cacheSetting;\n};\n\nexport const getEnvironmentDomainName = (configs: QPQConfig): string => {\n  const environment = qpqCoreUtils.getApplicationModuleEnvironment(configs);\n  const apexDomainName = getDomainName(configs);\n\n  if (environment === 'production') {\n    return apexDomainName;\n  }\n\n  return `${environment}.${apexDomainName}`;\n};\n\nexport const getBaseDomainName = (qpqConfig: QPQConfig): string => {\n  const environmentDomain = getEnvironmentDomainName(qpqConfig);\n  const feature = qpqCoreUtils.getApplicationModuleFeature(qpqConfig);\n\n  if (feature) {\n    return `${feature}.${environmentDomain}`;\n  }\n\n  return environmentDomain;\n};\n\nexport const getServiceDomainName = (qpqConfig: QPQConfig): string => {\n  const service = qpqCoreUtils.getApplicationModuleName(qpqConfig);\n  const domainBase = getBaseDomainName(qpqConfig);\n\n  return `${service}.${domainBase}`;\n};\n\n/**\n * Resolve browser CORS origins for a service resource. An explicit list wins;\n * otherwise scope to this service's own domain (apex + one-level subdomain\n * wildcard, which S3/CloudFront both support). Falls back to '*' only when the\n * service declares no domain at all (nothing browser-facing).\n *\n * Note: key off the raw dns base (`getDomainName`) to detect \"no domain\" —\n * `getBaseDomainName` still returns an env prefix like `development.` here.\n */\nexport const resolveServiceScopedCorsAllowedOrigins = (qpqConfig: QPQConfig, explicitOrigins?: string[]): string[] => {\n  if (explicitOrigins) {\n    return explicitOrigins;\n  }\n\n  if (!getDomainName(qpqConfig)) {\n    return ['*'];\n  }\n\n  const baseDomain = getBaseDomainName(qpqConfig);\n  return [`https://${baseDomain}`, `https://*.${baseDomain}`];\n};\n\n/**\n * Browser origins allowed to read/write a storage drive's objects cross-origin\n * (e.g. presigned uploads/downloads), looked up by the drive's name. An explicit\n * `defineStorageDriveCorsSettings` wins; otherwise the service-scoped default.\n */\nexport const getStorageDriveCorsAllowedOrigins = (qpqConfig: QPQConfig, storageDriveName: string): string[] => {\n  const corsSetting = qpqCoreUtils\n    .getConfigSettings<StorageDriveCorsSettingsQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.StorageDriveCorsSettings)\n    .find((setting) => setting.storageDriveName === storageDriveName);\n\n  return resolveServiceScopedCorsAllowedOrigins(qpqConfig, corsSetting?.allowedOrigins);\n};\n\n/**\n * Whether any web entry in this service serves its assets from the named storage\n * drive (`storageDrive.sourceStorageDrive`) — i.e. the drive's bucket is a\n * CloudFront origin. Drives with no web entry consumer need no CloudFront access\n * to their bucket at all.\n */\nexport const isStorageDriveWebEntryOrigin = (qpqConfig: QPQConfig, storageDriveName: string): boolean => {\n  return getWebEntryConfigs(qpqConfig).some((webEntry) => webEntry.storageDrive.sourceStorageDrive === storageDriveName);\n};\n\n// API Gateway caps request payloads at 10MB, so the default per-file ceiling matches it;\n// the other defaults exist to bound parser memory rather than to be hit in practice.\nexport const defaultFileUploadSettings: FileUploadSettings = {\n  maxFileSizeBytes: 10 * 1024 * 1024,\n  maxFileCount: 10,\n  maxFieldCount: 100,\n  maxFieldSizeBytes: 1024 * 1024,\n};\n\nexport const getFileUploadSettings = (qpqConfig: QPQConfig): FileUploadSettings => {\n  const setting = qpqCoreUtils.getConfigSetting<FileUploadSettingsQPQWebServerConfigSetting>(\n    qpqConfig,\n    QPQWebServerConfigSettingType.FileUploadSettings,\n  );\n\n  return {\n    ...defaultFileUploadSettings,\n    ...Object.fromEntries(Object.entries(setting?.fileUploadSettings || {}).filter(([, value]) => isDefined(value))),\n  };\n};\n\nexport const resolveApexDomainNameFromDomainConfig = (qpqConfig: QPQConfig, rootDomain: string, onRootDomain: boolean): string => {\n  const feature = qpqCoreUtils.getApplicationModuleFeature(qpqConfig);\n  const environment = qpqCoreUtils.getApplicationModuleEnvironment(qpqConfig);\n\n  const apexDomain = onRootDomain\n    ? getDomainRoot(rootDomain, environment, feature)\n    : constructServiceDomainName(rootDomain, environment, qpqCoreUtils.getApplicationModuleName(qpqConfig), feature);\n\n  return apexDomain;\n};\n\nexport const constructServiceDomainName = (rootDomain: string, environment: string, service: string, feature?: string) => {\n  const domainBase = getDomainRoot(rootDomain, environment, feature);\n\n  return `${service}.${domainBase}`;\n};\n\nexport const constructEnvironmentDomainName = (environment: string, domain: string): string => {\n  if (environment === 'production') {\n    return domain;\n  }\n\n  return `${environment}.${domain}`;\n};\n\nexport const getDefaultRouteSettings = (qpqConfig: QPQConfig): DefaultRouteOptionsQPQWebServerConfigSetting[] => {\n  const defaultRouteSettings =\n    qpqCoreUtils.getConfigSettings<DefaultRouteOptionsQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.DefaultRouteOptions) || [];\n\n  return defaultRouteSettings;\n};\n\nexport const getDomainRoot = (rootDomain: string, environment: string, feature?: string): string => {\n  let domainPrefix = environment !== 'production' ? `${environment}.` : '';\n  if (feature) {\n    domainPrefix = `${feature}.${domainPrefix}`;\n  }\n\n  return `${domainPrefix}${rootDomain}`;\n};\n\nexport const resolveDomainRoot = (rootDomain: string, qpqConfig: QPQConfig): string => {\n  const domain = getDomainRoot(\n    rootDomain,\n    qpqCoreUtils.getApplicationModuleEnvironment(qpqConfig),\n    qpqCoreUtils.getApplicationModuleFeature(qpqConfig),\n  );\n\n  return domain;\n};\n\nexport const getEmailSenderSettings = (qpqConfig: QPQConfig): EmailSenderQPQWebServerConfigSetting[] => {\n  const emailSenderSettings =\n    qpqCoreUtils.getConfigSettings<EmailSenderQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.EmailSender) || [];\n\n  return emailSenderSettings;\n};\n\nexport const getWebsocketSettings = (qpqConfig: QPQConfig): WebSocketQPQWebServerConfigSetting[] => {\n  const websocketSettings =\n    qpqCoreUtils.getConfigSettings<WebSocketQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.WebSocket) || [];\n\n  return websocketSettings;\n};\n\nexport const getOwnedWebsocketSettings = (qpqConfig: QPQConfig): WebSocketQPQWebServerConfigSetting[] => {\n  const websocketSettings = getWebsocketSettings(qpqConfig);\n\n  return qpqCoreUtils.getOwnedItems(websocketSettings, qpqConfig);\n};\n"]}
+{"version":3,"file":"qpqConfigAccessorsUtils.js","sourceRoot":"","sources":["../../../src/utils/qpqConfigAccessorsUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAa,YAAY,EAAsB,MAAM,iBAAiB,CAAC;AAEzF,OAAO,EAWL,6BAA6B,GAO9B,MAAM,WAAW,CAAC;AAGnB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,SAAoB,EAAoC,EAAE;IACrF,MAAM,MAAM,GAAG,YAAY,CAAC,iBAAiB,CAAiC,SAAS,EAAE,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAE9H,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAE,SAAoB,EAAoC,EAAE;IAC5G,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAEvC,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,SAAoB,EAAqC,EAAE;IAC7F,MAAM,aAAa,GAAG,YAAY,CAAC,iBAAiB,CAAkC,SAAS,EAAE,6BAA6B,CAAC,MAAM,CAAC,CAAC;IAEvI,OAAO,aAAa,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,SAAoB,EAAkC,EAAE;IAChF,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAA+B,SAAS,EAAE,6BAA6B,CAAC,GAAG,CAAC,CAAC;IAE9H,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAA8C,EAAE;IACzG,MAAM,gBAAgB,GAAG,YAAY,CAAC,iBAAiB,CACrD,SAAS,EACT,6BAA6B,CAAC,eAAe,CAC9C,CAAC;IAEF,OAAO,gBAAgB,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,SAAoB,EAA8C,EAAE;IAC3G,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAE3D,OAAO,YAAY,CAAC,aAAa,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAkB,EAAsC,EAAE;IAC3F,MAAM,YAAY,GAAG,YAAY,CAAC,iBAAiB,CAAmC,OAAO,EAAE,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAEtI,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAAwB,EAAE;IACtF,OAAO,yBAAyB,CAAC,SAAS,CAAC;SACxC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;SAC1G,MAAM,CAAC,SAAS,CAAC,CAAC;AACvB,CAAC,CAAC;AAEF,6DAA6D;AAC7D,sBAAsB;AACtB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAkB,EAAwB,EAAE;IAC3E,OAAO,YAAY,CAAC,oCAAoC,CAAC;QACvD,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9C,gEAAgE;QAChE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/C,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC;QAC1D,GAAG,yBAAyB,CAAC,OAAO,CAAC;KACtC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAkB,EAAU,EAAE;IAC1D,MAAM,WAAW,GAAG,YAAY,CAAC,gBAAgB,CAA+B,OAAO,EAAE,6BAA6B,CAAC,GAAG,CAAC,CAAC;IAE5H,OAAO,WAAW,EAAE,OAAO,IAAI,EAAE,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAkB,EAAU,EAAE;IACxD,MAAM,QAAQ,GAAG,YAAY,CAAC,gBAAgB,CAAoC,OAAO,EAAE,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IAEnI,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,QAAQ,EAAE,SAAS,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,OAAe,EAAE,SAAoB,EAAsC,EAAE;IACtH,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAE1D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAE9E,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,GAAG,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAkB,EAAgD,EAAE;IACxG,MAAM,kBAAkB,GAAG,YAAY,CAAC,iBAAiB,CACvD,OAAO,EACP,6BAA6B,CAAC,iBAAiB,CAChD,CAAC;IAEF,OAAO,kBAAkB,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAkB,EAAkC,EAAE;IAClF,OAAO,YAAY,CAAC,iBAAiB,CAA+B,OAAO,EAAE,6BAA6B,CAAC,GAAG,CAAC,CAAC;AAClH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAkB,EAAkC,EAAE;IAClF,OAAO,YAAY,CAAC,iBAAiB,CAA+B,OAAO,EAAE,6BAA6B,CAAC,GAAG,CAAC,CAAC;AAClH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAkB,EAAuC,EAAE;IAC5F,OAAO,YAAY,CAAC,iBAAiB,CAAoC,OAAO,EAAE,6BAA6B,CAAC,QAAQ,CAAC,CAAC;AAC5H,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAkB,EAA0C,EAAE;IAClG,OAAO,YAAY,CAAC,iBAAiB,CAAuC,OAAO,EAAE,6BAA6B,CAAC,WAAW,CAAC,CAAC;AAClI,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,SAAoB,EAAoC,EAAE;IAChG,MAAM,aAAa,GAAG,YAAY,CAAC,iBAAiB,CAAiC,SAAS,EAAE,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAErI,OAAO,YAAY,CAAC,aAAa,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAA0C,EAAE;IAC3G,MAAM,mBAAmB,GAAG,YAAY,CAAC,iBAAiB,CACxD,SAAS,EACT,6BAA6B,CAAC,WAAW,CAC1C,CAAC;IAEF,OAAO,YAAY,CAAC,aAAa,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,eAAuB,EAAE,SAAoB,EAAkC,EAAE;IACpH,MAAM,YAAY,GAAG,YAAY;SAC9B,iBAAiB,CAAiC,SAAS,EAAE,6BAA6B,CAAC,KAAK,CAAC;SACjG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;IAE3C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,mCAAmC,eAAe,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,OAAkB,EAAU,EAAE;IACrE,MAAM,WAAW,GAAG,YAAY,CAAC,+BAA+B,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAE9C,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,OAAO,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;AAC5C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAAoB,EAAU,EAAE;IAChE,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,YAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;IAEpE,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,GAAG,OAAO,IAAI,iBAAiB,EAAE,CAAC;IAC3C,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAU,EAAE;IACnE,MAAM,OAAO,GAAG,YAAY,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAEhD,OAAO,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;AACpC,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,SAAoB,EAAE,eAA0B,EAAY,EAAE;IACnH,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAChD,OAAO,CAAC,WAAW,UAAU,EAAE,EAAE,aAAa,UAAU,EAAE,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,SAAoB,EAAE,gBAAwB,EAAY,EAAE;IAC5G,MAAM,WAAW,GAAG,YAAY;SAC7B,iBAAiB,CAAoD,SAAS,EAAE,6BAA6B,CAAC,wBAAwB,CAAC;SACvI,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,KAAK,gBAAgB,CAAC,CAAC;IAEpE,OAAO,sCAAsC,CAAC,SAAS,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AACxF,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,SAAoB,EAAE,gBAAwB,EAAW,EAAE;IACtG,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,kBAAkB,KAAK,gBAAgB,CAAC,CAAC;AACzH,CAAC,CAAC;AAEF,yFAAyF;AACzF,qFAAqF;AACrF,MAAM,CAAC,MAAM,yBAAyB,GAAuB;IAC3D,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAClC,YAAY,EAAE,EAAE;IAChB,aAAa,EAAE,GAAG;IAClB,iBAAiB,EAAE,IAAI,GAAG,IAAI;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,SAAoB,EAAsB,EAAE;IAChF,MAAM,OAAO,GAAG,YAAY,CAAC,gBAAgB,CAC3C,SAAS,EACT,6BAA6B,CAAC,kBAAkB,CACjD,CAAC;IAEF,OAAO;QACL,GAAG,yBAAyB;QAC5B,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;KACjH,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,SAAoB,EAAE,UAAkB,EAAE,YAAqB,EAAU,EAAE;IAC/H,MAAM,OAAO,GAAG,YAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,YAAY,CAAC,+BAA+B,CAAC,SAAS,CAAC,CAAC;IAE5E,MAAM,UAAU,GAAG,YAAY;QAC7B,CAAC,CAAC,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC;QACjD,CAAC,CAAC,0BAA0B,CAAC,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAEnH,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,UAAkB,EAAE,WAAmB,EAAE,OAAe,EAAE,OAAgB,EAAE,EAAE;IACvH,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAEnE,OAAO,GAAG,OAAO,IAAI,UAAU,EAAE,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,WAAmB,EAAE,MAAc,EAAU,EAAE;IAC5F,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,GAAG,WAAW,IAAI,MAAM,EAAE,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,SAAoB,EAAkD,EAAE;IAC9G,MAAM,oBAAoB,GACxB,YAAY,CAAC,iBAAiB,CAA+C,SAAS,EAAE,6BAA6B,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;IAEnJ,OAAO,oBAAoB,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAE,WAAmB,EAAE,OAAgB,EAAU,EAAE;IACjG,IAAI,YAAY,GAAG,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,IAAI,OAAO,EAAE,CAAC;QACZ,YAAY,GAAG,GAAG,OAAO,IAAI,YAAY,EAAE,CAAC;IAC9C,CAAC;IAED,OAAO,GAAG,YAAY,GAAG,UAAU,EAAE,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,UAAkB,EAAE,SAAoB,EAAU,EAAE;IACpF,MAAM,MAAM,GAAG,aAAa,CAC1B,UAAU,EACV,YAAY,CAAC,+BAA+B,CAAC,SAAS,CAAC,EACvD,YAAY,CAAC,2BAA2B,CAAC,SAAS,CAAC,CACpD,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,SAAoB,EAA0C,EAAE;IACrG,MAAM,mBAAmB,GACvB,YAAY,CAAC,iBAAiB,CAAuC,SAAS,EAAE,6BAA6B,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAEnI,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,SAAoB,EAAwC,EAAE;IACjG,MAAM,iBAAiB,GACrB,YAAY,CAAC,iBAAiB,CAAqC,SAAS,EAAE,6BAA6B,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAE/H,OAAO,iBAAiB,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,SAAoB,EAAwC,EAAE;IACtG,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAE1D,OAAO,YAAY,CAAC,aAAa,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAClE,CAAC,CAAC","sourcesContent":["import { isDefined, QPQConfig, qpqCoreUtils, QpqFunctionRuntime } from 'quidproquo-core';\n\nimport {\n  ApiKeyQPQWebServerConfigSetting,\n  CacheQPQWebServerConfigSetting,\n  CertificateQPQWebServerConfigSetting,\n  DefaultRouteOptionsQPQWebServerConfigSetting,\n  DnsQPQWebServerConfigSetting,\n  DomainProxyQPQWebServerConfigSetting,\n  EmailSenderQPQWebServerConfigSetting,\n  FileUploadSettings,\n  FileUploadSettingsQPQWebServerConfigSetting,\n  OpenApiQPQWebServerConfigSetting,\n  QPQWebServerConfigSettingType,\n  RouteQPQWebServerConfigSetting,\n  SeoQPQWebServerConfigSetting,\n  ServiceFunctionQPQWebServerConfigSetting,\n  StorageDriveCorsSettingsQPQWebServerConfigSetting,\n  SubdomainRedirectQPQWebServerConfigSetting,\n  WebSocketQPQWebServerConfigSetting,\n} from '../config';\nimport { ApiQPQWebServerConfigSetting, WebEntryQPQWebServerConfigSetting } from '../config';\n\nexport const getAllRoutes = (qpqConfig: QPQConfig): RouteQPQWebServerConfigSetting[] => {\n  const routes = qpqCoreUtils.getConfigSettings<RouteQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Route);\n\n  return routes;\n};\n\nexport const getAllRoutesForApi = (apiName: string, qpqConfig: QPQConfig): RouteQPQWebServerConfigSetting[] => {\n  const routes = getAllRoutes(qpqConfig);\n\n  return routes;\n};\n\nexport const getAllApiKeyConfigs = (qpqConfig: QPQConfig): ApiKeyQPQWebServerConfigSetting[] => {\n  const apiKeyConfigs = qpqCoreUtils.getConfigSettings<ApiKeyQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.ApiKey);\n\n  return apiKeyConfigs;\n};\n\nexport const getAllSeo = (qpqConfig: QPQConfig): SeoQPQWebServerConfigSetting[] => {\n  const seoConfigs = qpqCoreUtils.getConfigSettings<SeoQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Seo);\n\n  return seoConfigs;\n};\n\nexport const getAllServiceFunctions = (qpqConfig: QPQConfig): ServiceFunctionQPQWebServerConfigSetting[] => {\n  const serviceFunctions = qpqCoreUtils.getConfigSettings<ServiceFunctionQPQWebServerConfigSetting>(\n    qpqConfig,\n    QPQWebServerConfigSettingType.ServiceFunction,\n  );\n\n  return serviceFunctions;\n};\n\nexport const getOwnedServiceFunctions = (qpqConfig: QPQConfig): ServiceFunctionQPQWebServerConfigSetting[] => {\n  const serviceFunctions = getAllServiceFunctions(qpqConfig);\n\n  return qpqCoreUtils.getOwnedItems(serviceFunctions, qpqConfig);\n};\n\nexport const getAllOpenApiSpecs = (configs: QPQConfig): OpenApiQPQWebServerConfigSetting[] => {\n  const openApiSpecs = qpqCoreUtils.getConfigSettings<OpenApiQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.OpenApi);\n\n  return openApiSpecs;\n};\n\nexport const getAllWebsocketSrcEntries = (qpqConfig: QPQConfig): QpqFunctionRuntime[] => {\n  return getOwnedWebsocketSettings(qpqConfig)\n    .flatMap((s) => [s.eventProcessors.onConnect, s.eventProcessors.onDisconnect, s.eventProcessors.onMessage])\n    .filter(isDefined);\n};\n\n// Used in bundlers to know where and what to build and index\n// Events, routes, etc\nexport const getAllSrcEntries = (configs: QPQConfig): QpqFunctionRuntime[] => {\n  return qpqCoreUtils.expandSrcEntriesWithActionProcessors([\n    ...getAllRoutes(configs).map((r) => r.runtime),\n    // ...getAllOpenApiSpecs(configs).map((r) => r.openApiSpecPath),\n    ...getAllSeo(configs).map((seo) => seo.runtime),\n    ...getAllServiceFunctions(configs).map((sf) => sf.runtime),\n    ...getAllWebsocketSrcEntries(configs),\n  ]);\n};\n\nexport const getDomainName = (configs: QPQConfig): string => {\n  const dnsSettings = qpqCoreUtils.getConfigSetting<DnsQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.Dns);\n\n  return dnsSettings?.dnsBase || '';\n};\n\nexport const getWebEntry = (configs: QPQConfig): string => {\n  const webEntry = qpqCoreUtils.getConfigSetting<WebEntryQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.WebEntry);\n\n  if (!webEntry?.buildPath) {\n    throw new Error('please use defineWebEntry in your qpq config');\n  }\n\n  return webEntry?.buildPath;\n};\n\nexport const getWebsocketEntryByApiName = (apiName: string, qpqConfig: QPQConfig): WebSocketQPQWebServerConfigSetting => {\n  const websocketSettings = getWebsocketSettings(qpqConfig);\n\n  const websocketSetting = websocketSettings.find((s) => s.apiName === apiName);\n\n  if (!websocketSetting) {\n    throw new Error(`No websocket setting found for api [${apiName}]`);\n  }\n\n  return websocketSetting;\n};\n\nexport const getSubdomainRedirects = (configs: QPQConfig): SubdomainRedirectQPQWebServerConfigSetting[] => {\n  const subdomainRedirects = qpqCoreUtils.getConfigSettings<SubdomainRedirectQPQWebServerConfigSetting>(\n    configs,\n    QPQWebServerConfigSettingType.SubdomainRedirect,\n  );\n\n  return subdomainRedirects;\n};\n\nexport const getApiConfigs = (configs: QPQConfig): ApiQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<ApiQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.Api);\n};\n\nexport const getDnsConfigs = (configs: QPQConfig): DnsQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<DnsQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.Dns);\n};\n\nexport const getWebEntryConfigs = (configs: QPQConfig): WebEntryQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<WebEntryQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.WebEntry);\n};\n\nexport const getDomainProxyConfigs = (configs: QPQConfig): DomainProxyQPQWebServerConfigSetting[] => {\n  return qpqCoreUtils.getConfigSettings<DomainProxyQPQWebServerConfigSetting>(configs, QPQWebServerConfigSettingType.DomainProxy);\n};\n\nexport const getAllOwnedCacheConfigs = (qpqConfig: QPQConfig): CacheQPQWebServerConfigSetting[] => {\n  const cacheSettings = qpqCoreUtils.getConfigSettings<CacheQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Cache);\n\n  return qpqCoreUtils.getOwnedItems(cacheSettings, qpqConfig);\n};\n\nexport const getAllOwnedCertifcateConfigs = (qpqConfig: QPQConfig): CertificateQPQWebServerConfigSetting[] => {\n  const certificateSettings = qpqCoreUtils.getConfigSettings<CertificateQPQWebServerConfigSetting>(\n    qpqConfig,\n    QPQWebServerConfigSettingType.Certificate,\n  );\n\n  return qpqCoreUtils.getOwnedItems(certificateSettings, qpqConfig);\n};\n\nexport const getCacheConfigByName = (cacheConfigName: string, qpqConfig: QPQConfig): CacheQPQWebServerConfigSetting => {\n  const cacheSetting = qpqCoreUtils\n    .getConfigSettings<CacheQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.Cache)\n    .find((c) => c.name === cacheConfigName);\n\n  if (!cacheSetting) {\n    throw new Error(`No cache config found for name [${cacheConfigName}]`);\n  }\n\n  return cacheSetting;\n};\n\nexport const getEnvironmentDomainName = (configs: QPQConfig): string => {\n  const environment = qpqCoreUtils.getApplicationModuleEnvironment(configs);\n  const apexDomainName = getDomainName(configs);\n\n  if (environment === 'production') {\n    return apexDomainName;\n  }\n\n  return `${environment}.${apexDomainName}`;\n};\n\nexport const getBaseDomainName = (qpqConfig: QPQConfig): string => {\n  const environmentDomain = getEnvironmentDomainName(qpqConfig);\n  const feature = qpqCoreUtils.getApplicationModuleFeature(qpqConfig);\n\n  if (feature) {\n    return `${feature}.${environmentDomain}`;\n  }\n\n  return environmentDomain;\n};\n\nexport const getServiceDomainName = (qpqConfig: QPQConfig): string => {\n  const service = qpqCoreUtils.getApplicationModuleName(qpqConfig);\n  const domainBase = getBaseDomainName(qpqConfig);\n\n  return `${service}.${domainBase}`;\n};\n\n/**\n * Resolve browser CORS origins for a service resource. An explicit list wins;\n * otherwise scope to this service's own domain (apex + one-level subdomain\n * wildcard, which S3/CloudFront both support). Falls back to '*' only when the\n * service declares no domain at all (nothing browser-facing).\n *\n * Note: key off the raw dns base (`getDomainName`) to detect \"no domain\" —\n * `getBaseDomainName` still returns an env prefix like `development.` here.\n */\nexport const resolveServiceScopedCorsAllowedOrigins = (qpqConfig: QPQConfig, explicitOrigins?: string[]): string[] => {\n  if (explicitOrigins) {\n    return explicitOrigins;\n  }\n\n  if (!getDomainName(qpqConfig)) {\n    return ['*'];\n  }\n\n  const baseDomain = getBaseDomainName(qpqConfig);\n  return [`https://${baseDomain}`, `https://*.${baseDomain}`];\n};\n\n/**\n * Browser origins allowed to read/write a storage drive's objects cross-origin\n * (e.g. presigned uploads/downloads), looked up by the drive's name. An explicit\n * `defineStorageDriveCorsSettings` wins; otherwise the service-scoped default.\n */\nexport const getStorageDriveCorsAllowedOrigins = (qpqConfig: QPQConfig, storageDriveName: string): string[] => {\n  const corsSetting = qpqCoreUtils\n    .getConfigSettings<StorageDriveCorsSettingsQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.StorageDriveCorsSettings)\n    .find((setting) => setting.storageDriveName === storageDriveName);\n\n  return resolveServiceScopedCorsAllowedOrigins(qpqConfig, corsSetting?.allowedOrigins);\n};\n\n/**\n * Whether any web entry in this service serves its assets from the named storage\n * drive (`storageDrive.sourceStorageDrive`) — i.e. the drive's bucket is a\n * CloudFront origin. Drives with no web entry consumer need no CloudFront access\n * to their bucket at all.\n */\nexport const isStorageDriveWebEntryOrigin = (qpqConfig: QPQConfig, storageDriveName: string): boolean => {\n  return getWebEntryConfigs(qpqConfig).some((webEntry) => webEntry.storageDrive.sourceStorageDrive === storageDriveName);\n};\n\n// API Gateway caps request payloads at 10MB, so the default per-file ceiling matches it;\n// the other defaults exist to bound parser memory rather than to be hit in practice.\nexport const defaultFileUploadSettings: FileUploadSettings = {\n  maxFileSizeBytes: 10 * 1024 * 1024,\n  maxFileCount: 10,\n  maxFieldCount: 100,\n  maxFieldSizeBytes: 1024 * 1024,\n};\n\nexport const getFileUploadSettings = (qpqConfig: QPQConfig): FileUploadSettings => {\n  const setting = qpqCoreUtils.getConfigSetting<FileUploadSettingsQPQWebServerConfigSetting>(\n    qpqConfig,\n    QPQWebServerConfigSettingType.FileUploadSettings,\n  );\n\n  return {\n    ...defaultFileUploadSettings,\n    ...Object.fromEntries(Object.entries(setting?.fileUploadSettings || {}).filter(([, value]) => isDefined(value))),\n  };\n};\n\nexport const resolveApexDomainNameFromDomainConfig = (qpqConfig: QPQConfig, rootDomain: string, onRootDomain: boolean): string => {\n  const feature = qpqCoreUtils.getApplicationModuleFeature(qpqConfig);\n  const environment = qpqCoreUtils.getApplicationModuleEnvironment(qpqConfig);\n\n  const apexDomain = onRootDomain\n    ? getDomainRoot(rootDomain, environment, feature)\n    : constructServiceDomainName(rootDomain, environment, qpqCoreUtils.getApplicationModuleName(qpqConfig), feature);\n\n  return apexDomain;\n};\n\nexport const constructServiceDomainName = (rootDomain: string, environment: string, service: string, feature?: string) => {\n  const domainBase = getDomainRoot(rootDomain, environment, feature);\n\n  return `${service}.${domainBase}`;\n};\n\nexport const constructEnvironmentDomainName = (environment: string, domain: string): string => {\n  if (environment === 'production') {\n    return domain;\n  }\n\n  return `${environment}.${domain}`;\n};\n\nexport const getDefaultRouteSettings = (qpqConfig: QPQConfig): DefaultRouteOptionsQPQWebServerConfigSetting[] => {\n  const defaultRouteSettings =\n    qpqCoreUtils.getConfigSettings<DefaultRouteOptionsQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.DefaultRouteOptions) || [];\n\n  return defaultRouteSettings;\n};\n\nexport const getDomainRoot = (rootDomain: string, environment: string, feature?: string): string => {\n  let domainPrefix = environment !== 'production' ? `${environment}.` : '';\n  if (feature) {\n    domainPrefix = `${feature}.${domainPrefix}`;\n  }\n\n  return `${domainPrefix}${rootDomain}`;\n};\n\nexport const resolveDomainRoot = (rootDomain: string, qpqConfig: QPQConfig): string => {\n  const domain = getDomainRoot(\n    rootDomain,\n    qpqCoreUtils.getApplicationModuleEnvironment(qpqConfig),\n    qpqCoreUtils.getApplicationModuleFeature(qpqConfig),\n  );\n\n  return domain;\n};\n\nexport const getEmailSenderSettings = (qpqConfig: QPQConfig): EmailSenderQPQWebServerConfigSetting[] => {\n  const emailSenderSettings =\n    qpqCoreUtils.getConfigSettings<EmailSenderQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.EmailSender) || [];\n\n  return emailSenderSettings;\n};\n\nexport const getWebsocketSettings = (qpqConfig: QPQConfig): WebSocketQPQWebServerConfigSetting[] => {\n  const websocketSettings =\n    qpqCoreUtils.getConfigSettings<WebSocketQPQWebServerConfigSetting>(qpqConfig, QPQWebServerConfigSettingType.WebSocket) || [];\n\n  return websocketSettings;\n};\n\nexport const getOwnedWebsocketSettings = (qpqConfig: QPQConfig): WebSocketQPQWebServerConfigSetting[] => {\n  const websocketSettings = getWebsocketSettings(qpqConfig);\n\n  return qpqCoreUtils.getOwnedItems(websocketSettings, qpqConfig);\n};\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "quidproquo-webserver",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "description": "",
   "main": "./lib/commonjs/index.js",
   "module": "./lib/esm/index.js",
@@ -35,10 +35,10 @@
   },
   "homepage": "https://github.com/qpqjs/quidproquo#readme",
   "dependencies": {
-    "quidproquo-core": "0.1.17"
+    "quidproquo-core": "0.1.18"
   },
   "devDependencies": {
-    "quidproquo-tsconfig": "0.1.17",
+    "quidproquo-tsconfig": "0.1.18",
     "typescript": "^5.8.2"
   }
 }