quidproquo-webserver 0.1.9 → 0.1.11

package/lib/commonjs/actions/api/ApiActionType.d.ts

@@ -0,0 +1,3 @@
+export declare enum ApiActionType {
+    Request = "@quidproquo-webserver/Api/Request"
+}

package/lib/commonjs/actions/api/ApiActionType.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiActionType = void 0;
+var ApiActionType;
+(function (ApiActionType) {
+    ApiActionType["Request"] = "@quidproquo-webserver/Api/Request";
+})(ApiActionType || (exports.ApiActionType = ApiActionType = {}));
+//# sourceMappingURL=ApiActionType.js.map

package/lib/commonjs/actions/api/ApiActionType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiActionType.js","sourceRoot":"","sources":["../../../../src/actions/api/ApiActionType.ts"],"names":[],"mappings":";;;AAAA,IAAY,aAEX;AAFD,WAAY,aAAa;IACvB,8DAA6C,CAAA;AAC/C,CAAC,EAFW,aAAa,6BAAb,aAAa,QAExB","sourcesContent":["export enum ApiActionType {\n  Request = '@quidproquo-webserver/Api/Request',\n}\n"]}

package/lib/commonjs/actions/api/ApiRequestActionRequester.d.ts

@@ -0,0 +1,3 @@
+import { HTTPMethod } from 'quidproquo-core';
+import { ApiRequestActionRequester, ApiRequestOptions } from './ApiRequestActionRequesterTypes';
+export declare function askApiRequest<T, R>(service: string, method: HTTPMethod, endpoint: string, options?: ApiRequestOptions<T>): ApiRequestActionRequester<T, R>;

package/lib/commonjs/actions/api/ApiRequestActionRequester.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.askApiRequest = askApiRequest;
+const ApiActionType_1 = require("./ApiActionType");
+function* askApiRequest(service, method, endpoint, options) {
+    return yield {
+        type: ApiActionType_1.ApiActionType.Request,
+        payload: {
+            service,
+            endpoint,
+            method,
+            body: options === null || options === void 0 ? void 0 : options.body,
+            headers: options === null || options === void 0 ? void 0 : options.headers,
+            params: options === null || options === void 0 ? void 0 : options.params,
+            responseType: (options === null || options === void 0 ? void 0 : options.responseType) || 'json',
+        },
+    };
+}
+//# sourceMappingURL=ApiRequestActionRequester.js.map

package/lib/commonjs/actions/api/ApiRequestActionRequester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiRequestActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/api/ApiRequestActionRequester.ts"],"names":[],"mappings":";;AAKA,sCAkBC;AArBD,mDAAgD;AAGhD,QAAe,CAAC,CAAC,aAAa,CAC5B,OAAe,EACf,MAAkB,EAClB,QAAgB,EAChB,OAA8B;IAE9B,OAAO,MAAM;QACX,IAAI,EAAE,6BAAa,CAAC,OAAO;QAC3B,OAAO,EAAE;YACP,OAAO;YACP,QAAQ;YACR,MAAM;YACN,IAAI,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI;YACnB,OAAO,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO;YACzB,MAAM,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM;YACvB,YAAY,EAAE,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,KAAI,MAAM;SAC9C;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { HTTPMethod } from 'quidproquo-core';\n\nimport { ApiActionType } from './ApiActionType';\nimport { ApiRequestActionRequester, ApiRequestOptions } from './ApiRequestActionRequesterTypes';\n\nexport function* askApiRequest<T, R>(\n  service: string,\n  method: HTTPMethod,\n  endpoint: string,\n  options?: ApiRequestOptions<T>,\n): ApiRequestActionRequester<T, R> {\n  return yield {\n    type: ApiActionType.Request,\n    payload: {\n      service,\n      endpoint,\n      method,\n      body: options?.body,\n      headers: options?.headers,\n      params: options?.params,\n      responseType: options?.responseType || 'json',\n    },\n  };\n}\n"]}

package/lib/commonjs/actions/api/ApiRequestActionRequesterTypes.d.ts

@@ -0,0 +1,18 @@
+import { Action, ActionProcessor, ActionRequester, HTTPMethod, HTTPNetworkResponse, HTTPRequestOptions, ResponseType } from 'quidproquo-core';
+import { ApiActionType } from './ApiActionType';
+export type ApiRequestOptions<T> = Omit<HTTPRequestOptions<T>, 'basePath'>;
+export interface ApiRequestActionPayload<T> {
+    service: string;
+    endpoint: string;
+    method: HTTPMethod;
+    body?: T;
+    params?: Record<string, string>;
+    headers?: Record<string, string>;
+    responseType: ResponseType;
+}
+export interface ApiRequestAction<T> extends Action<ApiRequestActionPayload<T>> {
+    type: ApiActionType.Request;
+    payload: ApiRequestActionPayload<T>;
+}
+export type ApiRequestActionProcessor<T, R> = ActionProcessor<ApiRequestAction<T>, HTTPNetworkResponse<R>>;
+export type ApiRequestActionRequester<T, R> = ActionRequester<ApiRequestAction<T>, HTTPNetworkResponse<R>>;

package/lib/commonjs/actions/api/ApiRequestActionRequesterTypes.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=ApiRequestActionRequesterTypes.js.map

package/lib/commonjs/actions/api/ApiRequestActionRequesterTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiRequestActionRequesterTypes.js","sourceRoot":"","sources":["../../../../src/actions/api/ApiRequestActionRequesterTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { Action, ActionProcessor, ActionRequester, HTTPMethod, HTTPNetworkResponse, HTTPRequestOptions, ResponseType } from 'quidproquo-core';\n\nimport { ApiActionType } from './ApiActionType';\n\n// basePath is resolved by the processor, so it is omitted from the caller options\nexport type ApiRequestOptions<T> = Omit<HTTPRequestOptions<T>, 'basePath'>;\n\n// Payload\nexport interface ApiRequestActionPayload<T> {\n  service: string;\n  endpoint: string;\n  method: HTTPMethod;\n  body?: T;\n  params?: Record<string, string>;\n  headers?: Record<string, string>;\n  responseType: ResponseType;\n}\n\n// Action\nexport interface ApiRequestAction<T> extends Action<ApiRequestActionPayload<T>> {\n  type: ApiActionType.Request;\n  payload: ApiRequestActionPayload<T>;\n}\n\n// Function Types\nexport type ApiRequestActionProcessor<T, R> = ActionProcessor<ApiRequestAction<T>, HTTPNetworkResponse<R>>;\nexport type ApiRequestActionRequester<T, R> = ActionRequester<ApiRequestAction<T>, HTTPNetworkResponse<R>>;\n"]}

package/lib/commonjs/actions/api/index.d.ts

@@ -0,0 +1,3 @@
+export * from './ApiActionType';
+export * from './ApiRequestActionRequester';
+export * from './ApiRequestActionRequesterTypes';

package/lib/commonjs/actions/api/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./ApiActionType"), exports);
+__exportStar(require("./ApiRequestActionRequester"), exports);
+__exportStar(require("./ApiRequestActionRequesterTypes"), exports);
+//# sourceMappingURL=index.js.map

package/lib/commonjs/actions/api/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/api/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAAgC;AAChC,8DAA4C;AAC5C,mEAAiD","sourcesContent":["export * from './ApiActionType';\nexport * from './ApiRequestActionRequester';\nexport * from './ApiRequestActionRequesterTypes';\n"]}

package/lib/commonjs/actions/email/EmailActionType.d.ts

@@ -0,0 +1,4 @@
+export declare enum EmailActionType {
+    SendEmail = "@quidproquo-webserver/Email/SendEmail",
+    SetDeliveryStatus = "@quidproquo-webserver/Email/SetDeliveryStatus"
+}

package/lib/commonjs/actions/email/EmailActionType.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailActionType = void 0;
+var EmailActionType;
+(function (EmailActionType) {
+    EmailActionType["SendEmail"] = "@quidproquo-webserver/Email/SendEmail";
+    EmailActionType["SetDeliveryStatus"] = "@quidproquo-webserver/Email/SetDeliveryStatus";
+})(EmailActionType || (exports.EmailActionType = EmailActionType = {}));
+//# sourceMappingURL=EmailActionType.js.map

package/lib/commonjs/actions/email/EmailActionType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailActionType.js","sourceRoot":"","sources":["../../../../src/actions/email/EmailActionType.ts"],"names":[],"mappings":";;;AAAA,IAAY,eAGX;AAHD,WAAY,eAAe;IACzB,sEAAmD,CAAA;IACnD,sFAAmE,CAAA;AACrE,CAAC,EAHW,eAAe,+BAAf,eAAe,QAG1B","sourcesContent":["export enum EmailActionType {\n  SendEmail = '@quidproquo-webserver/Email/SendEmail',\n  SetDeliveryStatus = '@quidproquo-webserver/Email/SetDeliveryStatus',\n}\n"]}

package/lib/commonjs/actions/email/EmailDeliveryStatus.d.ts

@@ -0,0 +1,9 @@
+export declare enum EmailDeliveryStatus {
+    sent = "sent",
+    processed = "processed",
+    deferred = "deferred",
+    delivered = "delivered",
+    dropped = "dropped",
+    bounce = "bounce",
+    block = "block"
+}

package/lib/commonjs/actions/email/EmailDeliveryStatus.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailDeliveryStatus = void 0;
+// SendGrid's delivery event statuses, plus `sent`: the default state a send
+// starts in before any delivery events arrive.
+var EmailDeliveryStatus;
+(function (EmailDeliveryStatus) {
+    // The send action succeeded; no delivery events yet
+    EmailDeliveryStatus["sent"] = "sent";
+    // Provider received the message and is preparing to send it
+    EmailDeliveryStatus["processed"] = "processed";
+    // Receiving server temporarily rejected it; the provider will retry (reason = SMTP response)
+    EmailDeliveryStatus["deferred"] = "deferred";
+    // Accepted by the receiving server
+    EmailDeliveryStatus["delivered"] = "delivered";
+    // Provider did not attempt delivery: suppression list, invalid, prior bounce (reason attached)
+    EmailDeliveryStatus["dropped"] = "dropped";
+    // Permanent rejection
+    EmailDeliveryStatus["bounce"] = "bounce";
+    // Blocked by the receiving server
+    EmailDeliveryStatus["block"] = "block";
+})(EmailDeliveryStatus || (exports.EmailDeliveryStatus = EmailDeliveryStatus = {}));
+//# sourceMappingURL=EmailDeliveryStatus.js.map

package/lib/commonjs/actions/email/EmailDeliveryStatus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailDeliveryStatus.js","sourceRoot":"","sources":["../../../../src/actions/email/EmailDeliveryStatus.ts"],"names":[],"mappings":";;;AAAA,4EAA4E;AAC5E,+CAA+C;AAC/C,IAAY,mBAqBX;AArBD,WAAY,mBAAmB;IAC7B,oDAAoD;IACpD,oCAAa,CAAA;IAEb,4DAA4D;IAC5D,8CAAuB,CAAA;IAEvB,6FAA6F;IAC7F,4CAAqB,CAAA;IAErB,mCAAmC;IACnC,8CAAuB,CAAA;IAEvB,+FAA+F;IAC/F,0CAAmB,CAAA;IAEnB,sBAAsB;IACtB,wCAAiB,CAAA;IAEjB,kCAAkC;IAClC,sCAAe,CAAA;AACjB,CAAC,EArBW,mBAAmB,mCAAnB,mBAAmB,QAqB9B","sourcesContent":["// SendGrid's delivery event statuses, plus `sent`: the default state a send\n// starts in before any delivery events arrive.\nexport enum EmailDeliveryStatus {\n  // The send action succeeded; no delivery events yet\n  sent = 'sent',\n\n  // Provider received the message and is preparing to send it\n  processed = 'processed',\n\n  // Receiving server temporarily rejected it; the provider will retry (reason = SMTP response)\n  deferred = 'deferred',\n\n  // Accepted by the receiving server\n  delivered = 'delivered',\n\n  // Provider did not attempt delivery: suppression list, invalid, prior bounce (reason attached)\n  dropped = 'dropped',\n\n  // Permanent rejection\n  bounce = 'bounce',\n\n  // Blocked by the receiving server\n  block = 'block',\n}\n"]}

package/lib/commonjs/actions/email/EmailSendEmailActionRequester.d.ts

@@ -0,0 +1,11 @@
+import { EmailSendEmailActionPayload, EmailSendEmailActionRequester } from './EmailSendEmailActionTypes';
+export declare const EmailSendEmailErrorTypeEnum: {
+    MessageRejected: string;
+    SenderNotVerified: string;
+    AccountSuspended: string;
+    SendingPaused: string;
+    Throttled: string;
+    LimitExceeded: string;
+    BadRequest: string;
+};
+export declare function askEmailSendEmail(payload: EmailSendEmailActionPayload): EmailSendEmailActionRequester;

package/lib/commonjs/actions/email/EmailSendEmailActionRequester.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailSendEmailErrorTypeEnum = void 0;
+exports.askEmailSendEmail = askEmailSendEmail;
+const quidproquo_core_1 = require("quidproquo-core");
+const EmailActionType_1 = require("./EmailActionType");
+exports.EmailSendEmailErrorTypeEnum = (0, quidproquo_core_1.createErrorEnumForAction)(EmailActionType_1.EmailActionType.SendEmail, [
+    'MessageRejected',
+    'SenderNotVerified',
+    'AccountSuspended',
+    'SendingPaused',
+    'Throttled',
+    'LimitExceeded',
+    'BadRequest',
+]);
+function* askEmailSendEmail(payload) {
+    return yield {
+        type: EmailActionType_1.EmailActionType.SendEmail,
+        payload,
+    };
+}
+//# sourceMappingURL=EmailSendEmailActionRequester.js.map

package/lib/commonjs/actions/email/EmailSendEmailActionRequester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailSendEmailActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/email/EmailSendEmailActionRequester.ts"],"names":[],"mappings":";;;AAeA,8CAKC;AApBD,qDAA2D;AAE3D,uDAAoD;AAGvC,QAAA,2BAA2B,GAAG,IAAA,0CAAwB,EAAC,iCAAe,CAAC,SAAS,EAAE;IAC7F,iBAAiB;IACjB,mBAAmB;IACnB,kBAAkB;IAClB,eAAe;IACf,WAAW;IACX,eAAe;IACf,YAAY;CACb,CAAC,CAAC;AAEH,QAAe,CAAC,CAAC,iBAAiB,CAAC,OAAoC;IACrE,OAAO,MAAM;QACX,IAAI,EAAE,iCAAe,CAAC,SAAS;QAC/B,OAAO;KACR,CAAC;AACJ,CAAC","sourcesContent":["import { createErrorEnumForAction } from 'quidproquo-core';\n\nimport { EmailActionType } from './EmailActionType';\nimport { EmailSendEmailActionPayload, EmailSendEmailActionRequester } from './EmailSendEmailActionTypes';\n\nexport const EmailSendEmailErrorTypeEnum = createErrorEnumForAction(EmailActionType.SendEmail, [\n  'MessageRejected',\n  'SenderNotVerified',\n  'AccountSuspended',\n  'SendingPaused',\n  'Throttled',\n  'LimitExceeded',\n  'BadRequest',\n]);\n\nexport function* askEmailSendEmail(payload: EmailSendEmailActionPayload): EmailSendEmailActionRequester {\n  return yield {\n    type: EmailActionType.SendEmail,\n    payload,\n  };\n}\n"]}

package/lib/commonjs/actions/email/EmailSendEmailActionTypes.d.ts

@@ -0,0 +1,24 @@
+import { Action, ActionProcessor, ActionRequester, QPQBinaryData } from 'quidproquo-core';
+import { EmailActionType } from './EmailActionType';
+export type EmailSendEmailBody = {
+    bodyText: string;
+    bodyHtml?: string;
+} | {
+    bodyText?: string;
+    bodyHtml: string;
+};
+export type EmailSendEmailActionPayload = {
+    from: string;
+    to: string[];
+    cc?: string[];
+    bcc?: string[];
+    replyTo?: string[];
+    subject: string;
+    attachments?: QPQBinaryData[];
+} & EmailSendEmailBody;
+export interface EmailSendEmailAction extends Action<EmailSendEmailActionPayload> {
+    type: EmailActionType.SendEmail;
+    payload: EmailSendEmailActionPayload;
+}
+export type EmailSendEmailActionProcessor = ActionProcessor<EmailSendEmailAction, string>;
+export type EmailSendEmailActionRequester = ActionRequester<EmailSendEmailAction, string>;

package/lib/commonjs/actions/email/EmailSendEmailActionTypes.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=EmailSendEmailActionTypes.js.map

package/lib/commonjs/actions/email/EmailSendEmailActionTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailSendEmailActionTypes.js","sourceRoot":"","sources":["../../../../src/actions/email/EmailSendEmailActionTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { Action, ActionProcessor, ActionRequester, QPQBinaryData } from 'quidproquo-core';\n\nimport { EmailActionType } from './EmailActionType';\n\n// At least one of bodyText / bodyHtml must be provided\nexport type EmailSendEmailBody = { bodyText: string; bodyHtml?: string } | { bodyText?: string; bodyHtml: string };\n\n// Payload\nexport type EmailSendEmailActionPayload = {\n  from: string;\n  to: string[];\n  cc?: string[];\n  bcc?: string[];\n  replyTo?: string[];\n  subject: string;\n  attachments?: QPQBinaryData[];\n} & EmailSendEmailBody;\n\n// Action\nexport interface EmailSendEmailAction extends Action<EmailSendEmailActionPayload> {\n  type: EmailActionType.SendEmail;\n  payload: EmailSendEmailActionPayload;\n}\n\n// Function Types\nexport type EmailSendEmailActionProcessor = ActionProcessor<EmailSendEmailAction, string>;\nexport type EmailSendEmailActionRequester = ActionRequester<EmailSendEmailAction, string>;\n"]}

package/lib/commonjs/actions/email/EmailSetDeliveryStatusActionRequester.d.ts

@@ -0,0 +1,3 @@
+import { EmailDeliveryStatus } from './EmailDeliveryStatus';
+import { EmailSetDeliveryStatusActionRequester } from './EmailSetDeliveryStatusActionTypes';
+export declare function askEmailSetDeliveryStatus(messageId: string, deliveryStatus: EmailDeliveryStatus, reason?: string): EmailSetDeliveryStatusActionRequester;

package/lib/commonjs/actions/email/EmailSetDeliveryStatusActionRequester.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.askEmailSetDeliveryStatus = askEmailSetDeliveryStatus;
+const EmailActionType_1 = require("./EmailActionType");
+// Records a delivery status change for a previously sent email. The action itself
+// does nothing at runtime: its meaning is the log entry, which the admin action
+// search folds into the email's entity via the messageId link key.
+function* askEmailSetDeliveryStatus(messageId, deliveryStatus, reason) {
+    return yield {
+        type: EmailActionType_1.EmailActionType.SetDeliveryStatus,
+        payload: {
+            messageId,
+            deliveryStatus,
+            reason,
+        },
+    };
+}
+//# sourceMappingURL=EmailSetDeliveryStatusActionRequester.js.map

package/lib/commonjs/actions/email/EmailSetDeliveryStatusActionRequester.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailSetDeliveryStatusActionRequester.js","sourceRoot":"","sources":["../../../../src/actions/email/EmailSetDeliveryStatusActionRequester.ts"],"names":[],"mappings":";;AAOA,8DAaC;AApBD,uDAAoD;AAIpD,kFAAkF;AAClF,gFAAgF;AAChF,mEAAmE;AACnE,QAAe,CAAC,CAAC,yBAAyB,CACxC,SAAiB,EACjB,cAAmC,EACnC,MAAe;IAEf,OAAO,MAAM;QACX,IAAI,EAAE,iCAAe,CAAC,iBAAiB;QACvC,OAAO,EAAE;YACP,SAAS;YACT,cAAc;YACd,MAAM;SACP;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { EmailActionType } from './EmailActionType';\nimport { EmailDeliveryStatus } from './EmailDeliveryStatus';\nimport { EmailSetDeliveryStatusActionRequester } from './EmailSetDeliveryStatusActionTypes';\n\n// Records a delivery status change for a previously sent email. The action itself\n// does nothing at runtime: its meaning is the log entry, which the admin action\n// search folds into the email's entity via the messageId link key.\nexport function* askEmailSetDeliveryStatus(\n  messageId: string,\n  deliveryStatus: EmailDeliveryStatus,\n  reason?: string,\n): EmailSetDeliveryStatusActionRequester {\n  return yield {\n    type: EmailActionType.SetDeliveryStatus,\n    payload: {\n      messageId,\n      deliveryStatus,\n      reason,\n    },\n  };\n}\n"]}

package/lib/commonjs/actions/email/EmailSetDeliveryStatusActionTypes.d.ts

@@ -0,0 +1,14 @@
+import { Action, ActionProcessor, ActionRequester } from 'quidproquo-core';
+import { EmailActionType } from './EmailActionType';
+import { EmailDeliveryStatus } from './EmailDeliveryStatus';
+export type EmailSetDeliveryStatusActionPayload = {
+    messageId: string;
+    deliveryStatus: EmailDeliveryStatus;
+    reason?: string;
+};
+export interface EmailSetDeliveryStatusAction extends Action<EmailSetDeliveryStatusActionPayload> {
+    type: EmailActionType.SetDeliveryStatus;
+    payload: EmailSetDeliveryStatusActionPayload;
+}
+export type EmailSetDeliveryStatusActionProcessor = ActionProcessor<EmailSetDeliveryStatusAction, void>;
+export type EmailSetDeliveryStatusActionRequester = ActionRequester<EmailSetDeliveryStatusAction, void>;

package/lib/commonjs/actions/email/EmailSetDeliveryStatusActionTypes.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=EmailSetDeliveryStatusActionTypes.js.map

package/lib/commonjs/actions/email/EmailSetDeliveryStatusActionTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailSetDeliveryStatusActionTypes.js","sourceRoot":"","sources":["../../../../src/actions/email/EmailSetDeliveryStatusActionTypes.ts"],"names":[],"mappings":"","sourcesContent":["import { Action, ActionProcessor, ActionRequester } from 'quidproquo-core';\n\nimport { EmailActionType } from './EmailActionType';\nimport { EmailDeliveryStatus } from './EmailDeliveryStatus';\n\n// Payload\nexport type EmailSetDeliveryStatusActionPayload = {\n  messageId: string;\n  deliveryStatus: EmailDeliveryStatus;\n\n  // Provider detail: drop reason, SMTP response for deferrals, bounce text\n  reason?: string;\n};\n\n// Action\nexport interface EmailSetDeliveryStatusAction extends Action<EmailSetDeliveryStatusActionPayload> {\n  type: EmailActionType.SetDeliveryStatus;\n  payload: EmailSetDeliveryStatusActionPayload;\n}\n\n// Function Types\nexport type EmailSetDeliveryStatusActionProcessor = ActionProcessor<EmailSetDeliveryStatusAction, void>;\nexport type EmailSetDeliveryStatusActionRequester = ActionRequester<EmailSetDeliveryStatusAction, void>;\n"]}

package/lib/commonjs/actions/email/index.d.ts

@@ -0,0 +1,6 @@
+export * from './EmailActionType';
+export * from './EmailDeliveryStatus';
+export * from './EmailSendEmailActionRequester';
+export * from './EmailSendEmailActionTypes';
+export * from './EmailSetDeliveryStatusActionRequester';
+export * from './EmailSetDeliveryStatusActionTypes';

package/lib/commonjs/actions/email/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./EmailActionType"), exports);
+__exportStar(require("./EmailDeliveryStatus"), exports);
+__exportStar(require("./EmailSendEmailActionRequester"), exports);
+__exportStar(require("./EmailSendEmailActionTypes"), exports);
+__exportStar(require("./EmailSetDeliveryStatusActionRequester"), exports);
+__exportStar(require("./EmailSetDeliveryStatusActionTypes"), exports);
+//# sourceMappingURL=index.js.map

package/lib/commonjs/actions/email/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/email/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,wDAAsC;AACtC,kEAAgD;AAChD,8DAA4C;AAC5C,0EAAwD;AACxD,sEAAoD","sourcesContent":["export * from './EmailActionType';\nexport * from './EmailDeliveryStatus';\nexport * from './EmailSendEmailActionRequester';\nexport * from './EmailSendEmailActionTypes';\nexport * from './EmailSetDeliveryStatusActionRequester';\nexport * from './EmailSetDeliveryStatusActionTypes';\n"]}

package/lib/commonjs/actions/index.d.ts

@@ -1,6 +1,8 @@
 export * from './admin';
+export * from './api';
 export * from './apiKeyValidation';
 export * from './dns';
+export * from './email';
 export * from './genericDataResource';
 export * from './openApiSpec';
 export * from './routeAuthValidation';

package/lib/commonjs/actions/index.js

@@ -15,8 +15,10 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./admin"), exports);
+__exportStar(require("./api"), exports);
 __exportStar(require("./apiKeyValidation"), exports);
 __exportStar(require("./dns"), exports);
+__exportStar(require("./email"), exports);
 __exportStar(require("./genericDataResource"), exports);
 __exportStar(require("./openApiSpec"), exports);
 __exportStar(require("./routeAuthValidation"), exports);

package/lib/commonjs/actions/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/actions/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,qDAAmC;AACnC,wCAAsB;AACtB,wDAAsC;AACtC,gDAA8B;AAC9B,wDAAsC;AACtC,oDAAkC;AAClC,6CAA2B;AAC3B,8CAA4B","sourcesContent":["export * from './admin';\nexport * from './apiKeyValidation';\nexport * from './dns';\nexport * from './genericDataResource';\nexport * from './openApiSpec';\nexport * from './routeAuthValidation';\nexport * from './serviceFunction';\nexport * from './webEntry';\nexport * from './websocket';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/actions/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,wCAAsB;AACtB,qDAAmC;AACnC,wCAAsB;AACtB,0CAAwB;AACxB,wDAAsC;AACtC,gDAA8B;AAC9B,wDAAsC;AACtC,oDAAkC;AAClC,6CAA2B;AAC3B,8CAA4B","sourcesContent":["export * from './admin';\nexport * from './api';\nexport * from './apiKeyValidation';\nexport * from './dns';\nexport * from './email';\nexport * from './genericDataResource';\nexport * from './openApiSpec';\nexport * from './routeAuthValidation';\nexport * from './serviceFunction';\nexport * from './webEntry';\nexport * from './websocket';\n"]}

package/lib/commonjs/config/QPQConfig.d.ts

@@ -2,6 +2,7 @@ export declare enum QPQWebServerConfigSettingType {
     Route = "@quidproquo-webserver/config/Route",
     DefaultRouteOptions = "@quidproquo-webserver/config/DefaultRouteOptions",
     Dns = "@quidproquo-webserver/config/Dns",
+    EmailSender = "@quidproquo-webserver/config/EmailSender",
     OpenApi = "@quidproquo-webserver/config/OpenApi",
     Seo = "@quidproquo-webserver/config/Seo",
     SubdomainRedirect = "@quidproquo-webserver/config/SubdomainRedirect",

package/lib/commonjs/config/QPQConfig.js

@@ -6,6 +6,7 @@ var QPQWebServerConfigSettingType;
     QPQWebServerConfigSettingType["Route"] = "@quidproquo-webserver/config/Route";
     QPQWebServerConfigSettingType["DefaultRouteOptions"] = "@quidproquo-webserver/config/DefaultRouteOptions";
     QPQWebServerConfigSettingType["Dns"] = "@quidproquo-webserver/config/Dns";
+    QPQWebServerConfigSettingType["EmailSender"] = "@quidproquo-webserver/config/EmailSender";
     QPQWebServerConfigSettingType["OpenApi"] = "@quidproquo-webserver/config/OpenApi";
     QPQWebServerConfigSettingType["Seo"] = "@quidproquo-webserver/config/Seo";
     QPQWebServerConfigSettingType["SubdomainRedirect"] = "@quidproquo-webserver/config/SubdomainRedirect";

package/lib/commonjs/config/QPQConfig.js.map

@@ -1 +1 @@
-{"version":3,"file":"QPQConfig.js","sourceRoot":"","sources":["../../../src/config/QPQConfig.ts"],"names":[],"mappings":";;;AAAA,IAAY,6BAiBX;AAjBD,WAAY,6BAA6B;IACvC,6EAA4C,CAAA;IAC5C,yGAAwE,CAAA;IACxE,yEAAwC,CAAA;IACxC,iFAAgD,CAAA;IAChD,yEAAwC,CAAA;IACxC,qGAAoE,CAAA;IACpE,mFAAkD,CAAA;IAClD,yEAAwC,CAAA;IACxC,+EAA8C,CAAA;IAC9C,iGAAgE,CAAA;IAChE,qFAAoD,CAAA;IACpD,6EAA4C,CAAA;IAC5C,yFAAwD,CAAA;IACxD,yFAAwD,CAAA;IACxD,mHAAkF,CAAA;IAClF,uGAAsE,CAAA;AACxE,CAAC,EAjBW,6BAA6B,6CAA7B,6BAA6B,QAiBxC","sourcesContent":["export enum QPQWebServerConfigSettingType {\n  Route = '@quidproquo-webserver/config/Route',\n  DefaultRouteOptions = '@quidproquo-webserver/config/DefaultRouteOptions',\n  Dns = '@quidproquo-webserver/config/Dns',\n  OpenApi = '@quidproquo-webserver/config/OpenApi',\n  Seo = '@quidproquo-webserver/config/Seo',\n  SubdomainRedirect = '@quidproquo-webserver/config/SubdomainRedirect',\n  WebEntry = '@quidproquo-webserver/config/WebEntry',\n  Api = '@quidproquo-webserver/config/Api',\n  ApiKey = '@quidproquo-webserver/config/ApiKey',\n  ServiceFunction = '@quidproquo-webserver/config/ServiceFunction',\n  WebSocket = '@quidproquo-webserver/config/WebSocket',\n  Cache = '@quidproquo-webserver/config/Cache',\n  Certificate = '@quidproquo-webserver/config/Certificate',\n  DomainProxy = '@quidproquo-webserver/config/DomainProxy',\n  StorageDriveCorsSettings = '@quidproquo-webserver/config/StorageDriveCorsSettings',\n  FileUploadSettings = '@quidproquo-webserver/config/FileUploadSettings',\n}\n\n// TODO: move this somewhere better\nexport interface CacheSettings {\n  minTTLInSeconds: number;\n  maxTTLInSeconds: number;\n  defaultTTLInSeconds: number;\n  mustRevalidate: boolean;\n}\n"]}
+{"version":3,"file":"QPQConfig.js","sourceRoot":"","sources":["../../../src/config/QPQConfig.ts"],"names":[],"mappings":";;;AAAA,IAAY,6BAkBX;AAlBD,WAAY,6BAA6B;IACvC,6EAA4C,CAAA;IAC5C,yGAAwE,CAAA;IACxE,yEAAwC,CAAA;IACxC,yFAAwD,CAAA;IACxD,iFAAgD,CAAA;IAChD,yEAAwC,CAAA;IACxC,qGAAoE,CAAA;IACpE,mFAAkD,CAAA;IAClD,yEAAwC,CAAA;IACxC,+EAA8C,CAAA;IAC9C,iGAAgE,CAAA;IAChE,qFAAoD,CAAA;IACpD,6EAA4C,CAAA;IAC5C,yFAAwD,CAAA;IACxD,yFAAwD,CAAA;IACxD,mHAAkF,CAAA;IAClF,uGAAsE,CAAA;AACxE,CAAC,EAlBW,6BAA6B,6CAA7B,6BAA6B,QAkBxC","sourcesContent":["export enum QPQWebServerConfigSettingType {\n  Route = '@quidproquo-webserver/config/Route',\n  DefaultRouteOptions = '@quidproquo-webserver/config/DefaultRouteOptions',\n  Dns = '@quidproquo-webserver/config/Dns',\n  EmailSender = '@quidproquo-webserver/config/EmailSender',\n  OpenApi = '@quidproquo-webserver/config/OpenApi',\n  Seo = '@quidproquo-webserver/config/Seo',\n  SubdomainRedirect = '@quidproquo-webserver/config/SubdomainRedirect',\n  WebEntry = '@quidproquo-webserver/config/WebEntry',\n  Api = '@quidproquo-webserver/config/Api',\n  ApiKey = '@quidproquo-webserver/config/ApiKey',\n  ServiceFunction = '@quidproquo-webserver/config/ServiceFunction',\n  WebSocket = '@quidproquo-webserver/config/WebSocket',\n  Cache = '@quidproquo-webserver/config/Cache',\n  Certificate = '@quidproquo-webserver/config/Certificate',\n  DomainProxy = '@quidproquo-webserver/config/DomainProxy',\n  StorageDriveCorsSettings = '@quidproquo-webserver/config/StorageDriveCorsSettings',\n  FileUploadSettings = '@quidproquo-webserver/config/FileUploadSettings',\n}\n\n// TODO: move this somewhere better\nexport interface CacheSettings {\n  minTTLInSeconds: number;\n  maxTTLInSeconds: number;\n  defaultTTLInSeconds: number;\n  mustRevalidate: boolean;\n}\n"]}

package/lib/commonjs/config/settings/defineAuthSystem/defineAuthSystem.d.ts

@@ -6,5 +6,6 @@ export interface AuthSystemOptions {
     mfa?: UserDirectoryMfaSettings;
     basePath?: string;
     allowedOrigins?: string[];
+    accessTokenValidityMinutes?: number;
 }
 export declare const defineAuthSystem: (service: string, directoryName: string, options?: AuthSystemOptions) => QPQConfig;

package/lib/commonjs/config/settings/defineAuthSystem/defineAuthSystem.js

@@ -23,6 +23,7 @@ const defineAuthSystem = (service, directoryName, options) => {
             selfSignUpEnabled: options === null || options === void 0 ? void 0 : options.selfSignUpEnabled,
             emailTemplates: options === null || options === void 0 ? void 0 : options.emailTemplates,
             mfa: options === null || options === void 0 ? void 0 : options.mfa,
+            accessTokenValidityMinutes: options === null || options === void 0 ? void 0 : options.accessTokenValidityMinutes,
             owner: { module: service },
         }),
         // The login endpoints and their handlers only deploy with the owning service.
@@ -31,6 +32,12 @@ const defineAuthSystem = (service, directoryName, options) => {
                 (0, quidproquo_core_1.defineGlobal)(config_1.AUTH_USER_DIRECTORY_GLOBAL_KEY, directoryName),
                 (0, defineAuthServiceRoute_1.defineAuthServiceRoute)('POST', `${basePath}/login`, 'login', routeOptions),
                 (0, defineAuthServiceRoute_1.defineAuthServiceRoute)('POST', `${basePath}/refreshToken`, 'refreshToken', routeOptions),
+                // Public + best-effort (logout must never fail for the client, so it isn't
+                // edge-gated). /logout revokes just the caller's own refresh token (this device);
+                // /logoutEverywhere revokes all of the user's sessions (settings "sign out of all
+                // devices"). Each is self-authorizing: the refresh token / access token it carries.
+                (0, defineAuthServiceRoute_1.defineAuthServiceRoute)('POST', `${basePath}/logout`, 'logout', routeOptions),
+                (0, defineAuthServiceRoute_1.defineAuthServiceRoute)('POST', `${basePath}/logoutEverywhere`, 'logoutEverywhere', routeOptions),
                 (0, defineAuthServiceRoute_1.defineAuthServiceRoute)('POST', `${basePath}/challenge`, 'respondToAuthChallenge', routeOptions),
                 (0, defineAuthServiceRoute_1.defineAuthServiceRoute)('POST', `${basePath}/associateSoftwareToken`, 'associateSoftwareToken', routeOptions),
                 (0, defineAuthServiceRoute_1.defineAuthServiceRoute)('POST', `${basePath}/forgotPassword`, 'forgotPassword', routeOptions),

package/lib/commonjs/config/settings/defineAuthSystem/defineAuthSystem.js.map

@@ -1 +1 @@
-{"version":3,"file":"defineAuthSystem.js","sourceRoot":"","sources":["../../../../../src/config/settings/defineAuthSystem/defineAuthSystem.ts"],"names":[],"mappings":";;;AAAA,qDAAgJ;AAEhJ,0DAA+E;AAC/E,iGAA8F;AAiB9F,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,8EAA8E;AAC9E,iCAAiC;AAC1B,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAE,aAAqB,EAAE,OAA2B,EAAa,EAAE;;IACjH,MAAM,QAAQ,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,QAAQ,mCAAI,EAAE,CAAC;IAEzC,MAAM,YAAY,GAAG;QACnB,cAAc,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc;KACxC,CAAC;IAEF,OAAO;QACL,qEAAqE;QACrE,0EAA0E;QAC1E,IAAA,qCAAmB,EAAC,aAAa,EAAE;YACjC,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;YACrC,iBAAiB,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,iBAAiB;YAC7C,cAAc,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc;YACvC,GAAG,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG;YACjB,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;SAC3B,CAAC;QAEF,8EAA8E;QAC9E,IAAA,uCAAqB,EAAC;YACpB,CAAC,OAAO,CAAC,EAAE;gBACT,IAAA,8BAAY,EAAC,uCAA8B,EAAE,aAAa,CAAC;gBAE3D,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC;gBAC1E,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,eAAe,EAAE,cAAc,EAAE,YAAY,CAAC;gBACxF,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,YAAY,EAAE,wBAAwB,EAAE,YAAY,CAAC;gBAC/F,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,yBAAyB,EAAE,wBAAwB,EAAE,YAAY,CAAC;gBAC5G,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,CAAC;gBAC5F,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,yBAAyB,EAAE,uBAAuB,EAAE,YAAY,CAAC;gBAE3G,+DAA+D;gBAC/D,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,iBAAiB,EAAE,gBAAgB,kCACxE,YAAY,KACf,iBAAiB,EAAE;wBACjB,iBAAiB,EAAE,aAAa;qBACjC,IACD;aACH;SACF,CAAC;KACH,CAAC;AACJ,CAAC,CAAC;AAxCW,QAAA,gBAAgB,oBAwC3B","sourcesContent":["import { defineGlobal, defineServiceSettings, defineUserDirectory, EmailTemplates, QPQConfig, UserDirectoryMfaSettings } from 'quidproquo-core';\n\nimport { AUTH_USER_DIRECTORY_GLOBAL_KEY } from '../../../services/auth/config';\nimport { defineAuthServiceRoute } from '../../../services/auth/config/defineAuthServiceRoute';\n\nexport interface AuthSystemOptions {\n  phoneRequired?: boolean;\n\n  selfSignUpEnabled?: boolean;\n\n  emailTemplates?: EmailTemplates;\n\n  mfa?: UserDirectoryMfaSettings;\n\n  // Path prefix applied to every auth route, e.g. '/auth' => '/auth/login'.\n  basePath?: string;\n\n  allowedOrigins?: string[];\n}\n\n// Bundles a complete username/password login flow: a user directory plus the\n// endpoints needed to log in, refresh tokens, respond to challenges, recover a\n// forgotten password, and change a password. The handler stories ship inside\n// quidproquo-webserver (services/auth) and resolve `directoryName` at runtime\n// from the global emitted below.\nexport const defineAuthSystem = (service: string, directoryName: string, options?: AuthSystemOptions): QPQConfig => {\n  const basePath = options?.basePath ?? '';\n\n  const routeOptions = {\n    allowedOrigins: options?.allowedOrigins,\n  };\n\n  return [\n    // The user directory is declared at the top level (ungated) so other\n    // services in the application can reference it to validate access tokens.\n    defineUserDirectory(directoryName, {\n      phoneRequired: options?.phoneRequired,\n      selfSignUpEnabled: options?.selfSignUpEnabled,\n      emailTemplates: options?.emailTemplates,\n      mfa: options?.mfa,\n      owner: { module: service },\n    }),\n\n    // The login endpoints and their handlers only deploy with the owning service.\n    defineServiceSettings({\n      [service]: [\n        defineGlobal(AUTH_USER_DIRECTORY_GLOBAL_KEY, directoryName),\n\n        defineAuthServiceRoute('POST', `${basePath}/login`, 'login', routeOptions),\n        defineAuthServiceRoute('POST', `${basePath}/refreshToken`, 'refreshToken', routeOptions),\n        defineAuthServiceRoute('POST', `${basePath}/challenge`, 'respondToAuthChallenge', routeOptions),\n        defineAuthServiceRoute('POST', `${basePath}/associateSoftwareToken`, 'associateSoftwareToken', routeOptions),\n        defineAuthServiceRoute('POST', `${basePath}/forgotPassword`, 'forgotPassword', routeOptions),\n        defineAuthServiceRoute('POST', `${basePath}/forgotPassword/confirm`, 'confirmForgotPassword', routeOptions),\n\n        // Authenticated: the caller must present a valid access token.\n        defineAuthServiceRoute('POST', `${basePath}/changePassword`, 'changePassword', {\n          ...routeOptions,\n          routeAuthSettings: {\n            userDirectoryName: directoryName,\n          },\n        }),\n      ],\n    }),\n  ];\n};\n"]}
+{"version":3,"file":"defineAuthSystem.js","sourceRoot":"","sources":["../../../../../src/config/settings/defineAuthSystem/defineAuthSystem.ts"],"names":[],"mappings":";;;AAAA,qDAAgJ;AAEhJ,0DAA+E;AAC/E,iGAA8F;AAsB9F,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,8EAA8E;AAC9E,iCAAiC;AAC1B,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAE,aAAqB,EAAE,OAA2B,EAAa,EAAE;;IACjH,MAAM,QAAQ,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,QAAQ,mCAAI,EAAE,CAAC;IAEzC,MAAM,YAAY,GAAG;QACnB,cAAc,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc;KACxC,CAAC;IAEF,OAAO;QACL,qEAAqE;QACrE,0EAA0E;QAC1E,IAAA,qCAAmB,EAAC,aAAa,EAAE;YACjC,aAAa,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,aAAa;YACrC,iBAAiB,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,iBAAiB;YAC7C,cAAc,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc;YACvC,GAAG,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG;YACjB,0BAA0B,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,0BAA0B;YAC/D,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE;SAC3B,CAAC;QAEF,8EAA8E;QAC9E,IAAA,uCAAqB,EAAC;YACpB,CAAC,OAAO,CAAC,EAAE;gBACT,IAAA,8BAAY,EAAC,uCAA8B,EAAE,aAAa,CAAC;gBAE3D,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC;gBAC1E,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,eAAe,EAAE,cAAc,EAAE,YAAY,CAAC;gBACxF,2EAA2E;gBAC3E,kFAAkF;gBAClF,kFAAkF;gBAClF,oFAAoF;gBACpF,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC;gBAC5E,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,mBAAmB,EAAE,kBAAkB,EAAE,YAAY,CAAC;gBAChG,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,YAAY,EAAE,wBAAwB,EAAE,YAAY,CAAC;gBAC/F,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,yBAAyB,EAAE,wBAAwB,EAAE,YAAY,CAAC;gBAC5G,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,iBAAiB,EAAE,gBAAgB,EAAE,YAAY,CAAC;gBAC5F,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,yBAAyB,EAAE,uBAAuB,EAAE,YAAY,CAAC;gBAE3G,+DAA+D;gBAC/D,IAAA,+CAAsB,EAAC,MAAM,EAAE,GAAG,QAAQ,iBAAiB,EAAE,gBAAgB,kCACxE,YAAY,KACf,iBAAiB,EAAE;wBACjB,iBAAiB,EAAE,aAAa;qBACjC,IACD;aACH;SACF,CAAC;KACH,CAAC;AACJ,CAAC,CAAC;AA/CW,QAAA,gBAAgB,oBA+C3B","sourcesContent":["import { defineGlobal, defineServiceSettings, defineUserDirectory, EmailTemplates, QPQConfig, UserDirectoryMfaSettings } from 'quidproquo-core';\n\nimport { AUTH_USER_DIRECTORY_GLOBAL_KEY } from '../../../services/auth/config';\nimport { defineAuthServiceRoute } from '../../../services/auth/config/defineAuthServiceRoute';\n\nexport interface AuthSystemOptions {\n  phoneRequired?: boolean;\n\n  selfSignUpEnabled?: boolean;\n\n  emailTemplates?: EmailTemplates;\n\n  mfa?: UserDirectoryMfaSettings;\n\n  // Path prefix applied to every auth route, e.g. '/auth' => '/auth/login'.\n  basePath?: string;\n\n  allowedOrigins?: string[];\n\n  // Access/ID token (JWT) lifetime in minutes (Cognito 5–1440; omitted → default 60).\n  // Shorter shrinks the post-revocation window in which a stateless access token still\n  // works. Keep comfortably above 10 (the web client refreshes ~10 min before expiry).\n  accessTokenValidityMinutes?: number;\n}\n\n// Bundles a complete username/password login flow: a user directory plus the\n// endpoints needed to log in, refresh tokens, respond to challenges, recover a\n// forgotten password, and change a password. The handler stories ship inside\n// quidproquo-webserver (services/auth) and resolve `directoryName` at runtime\n// from the global emitted below.\nexport const defineAuthSystem = (service: string, directoryName: string, options?: AuthSystemOptions): QPQConfig => {\n  const basePath = options?.basePath ?? '';\n\n  const routeOptions = {\n    allowedOrigins: options?.allowedOrigins,\n  };\n\n  return [\n    // The user directory is declared at the top level (ungated) so other\n    // services in the application can reference it to validate access tokens.\n    defineUserDirectory(directoryName, {\n      phoneRequired: options?.phoneRequired,\n      selfSignUpEnabled: options?.selfSignUpEnabled,\n      emailTemplates: options?.emailTemplates,\n      mfa: options?.mfa,\n      accessTokenValidityMinutes: options?.accessTokenValidityMinutes,\n      owner: { module: service },\n    }),\n\n    // The login endpoints and their handlers only deploy with the owning service.\n    defineServiceSettings({\n      [service]: [\n        defineGlobal(AUTH_USER_DIRECTORY_GLOBAL_KEY, directoryName),\n\n        defineAuthServiceRoute('POST', `${basePath}/login`, 'login', routeOptions),\n        defineAuthServiceRoute('POST', `${basePath}/refreshToken`, 'refreshToken', routeOptions),\n        // Public + best-effort (logout must never fail for the client, so it isn't\n        // edge-gated). /logout revokes just the caller's own refresh token (this device);\n        // /logoutEverywhere revokes all of the user's sessions (settings \"sign out of all\n        // devices\"). Each is self-authorizing: the refresh token / access token it carries.\n        defineAuthServiceRoute('POST', `${basePath}/logout`, 'logout', routeOptions),\n        defineAuthServiceRoute('POST', `${basePath}/logoutEverywhere`, 'logoutEverywhere', routeOptions),\n        defineAuthServiceRoute('POST', `${basePath}/challenge`, 'respondToAuthChallenge', routeOptions),\n        defineAuthServiceRoute('POST', `${basePath}/associateSoftwareToken`, 'associateSoftwareToken', routeOptions),\n        defineAuthServiceRoute('POST', `${basePath}/forgotPassword`, 'forgotPassword', routeOptions),\n        defineAuthServiceRoute('POST', `${basePath}/forgotPassword/confirm`, 'confirmForgotPassword', routeOptions),\n\n        // Authenticated: the caller must present a valid access token.\n        defineAuthServiceRoute('POST', `${basePath}/changePassword`, 'changePassword', {\n          ...routeOptions,\n          routeAuthSettings: {\n            userDirectoryName: directoryName,\n          },\n        }),\n      ],\n    }),\n  ];\n};\n"]}

package/lib/commonjs/config/settings/emailSender.d.ts

@@ -0,0 +1,5 @@
+import { QPQConfigSetting } from 'quidproquo-core';
+export interface EmailSenderQPQWebServerConfigSetting extends QPQConfigSetting {
+    rootDomain: string;
+}
+export declare const defineEmailSender: (rootDomain: string) => EmailSenderQPQWebServerConfigSetting;

package/lib/commonjs/config/settings/emailSender.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defineEmailSender = void 0;
+const QPQConfig_1 = require("../QPQConfig");
+const defineEmailSender = (rootDomain) => {
+    return {
+        configSettingType: QPQConfig_1.QPQWebServerConfigSettingType.EmailSender,
+        uniqueKey: rootDomain,
+        rootDomain,
+    };
+};
+exports.defineEmailSender = defineEmailSender;
+//# sourceMappingURL=emailSender.js.map

package/lib/commonjs/config/settings/emailSender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emailSender.js","sourceRoot":"","sources":["../../../../src/config/settings/emailSender.ts"],"names":[],"mappings":";;;AAEA,4CAA6D;AAMtD,MAAM,iBAAiB,GAAG,CAAC,UAAkB,EAAwC,EAAE;IAC5F,OAAO;QACL,iBAAiB,EAAE,yCAA6B,CAAC,WAAW;QAC5D,SAAS,EAAE,UAAU;QAErB,UAAU;KACX,CAAC;AACJ,CAAC,CAAC;AAPW,QAAA,iBAAiB,qBAO5B","sourcesContent":["import { QPQConfigSetting } from 'quidproquo-core';\n\nimport { QPQWebServerConfigSettingType } from '../QPQConfig';\n\nexport interface EmailSenderQPQWebServerConfigSetting extends QPQConfigSetting {\n  rootDomain: string;\n}\n\nexport const defineEmailSender = (rootDomain: string): EmailSenderQPQWebServerConfigSetting => {\n  return {\n    configSettingType: QPQWebServerConfigSettingType.EmailSender,\n    uniqueKey: rootDomain,\n\n    rootDomain,\n  };\n};\n"]}

package/lib/commonjs/config/settings/index.d.ts

@@ -6,6 +6,7 @@ export * from './defaultRouteOptions';
 export * from './defineAuthSystem';
 export * from './dns';
 export * from './domainProxy';
+export * from './emailSender';
 export * from './fileUploadSettings';
 export * from './migration';
 export * from './openApi';

package/lib/commonjs/config/settings/index.js

@@ -22,6 +22,7 @@ __exportStar(require("./defaultRouteOptions"), exports);
 __exportStar(require("./defineAuthSystem"), exports);
 __exportStar(require("./dns"), exports);
 __exportStar(require("./domainProxy"), exports);
+__exportStar(require("./emailSender"), exports);
 __exportStar(require("./fileUploadSettings"), exports);
 __exportStar(require("./migration"), exports);
 __exportStar(require("./openApi"), exports);

package/lib/commonjs/config/settings/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/config/settings/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wCAAsB;AACtB,2CAAyB;AACzB,0CAAwB;AACxB,gDAA8B;AAC9B,wDAAsC;AACtC,qDAAmC;AACnC,wCAAsB;AACtB,gDAA8B;AAC9B,uDAAqC;AACrC,8CAA4B;AAC5B,4CAA0B;AAC1B,0CAAwB;AACxB,yCAAuB;AACvB,wCAAsB;AACtB,oDAAkC;AAClC,6DAA2C;AAC3C,sDAAoC;AACpC,6CAA2B;AAC3B,8CAA4B","sourcesContent":["export * from './api';\nexport * from './apiKey';\nexport * from './cache';\nexport * from './certificate';\nexport * from './defaultRouteOptions';\nexport * from './defineAuthSystem';\nexport * from './dns';\nexport * from './domainProxy';\nexport * from './fileUploadSettings';\nexport * from './migration';\nexport * from './openApi';\nexport * from './route';\nexport * from './seed';\nexport * from './seo';\nexport * from './serviceFunction';\nexport * from './storageDriveCorsSettings';\nexport * from './subdomainRedirect';\nexport * from './webEntry';\nexport * from './websocket';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/config/settings/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wCAAsB;AACtB,2CAAyB;AACzB,0CAAwB;AACxB,gDAA8B;AAC9B,wDAAsC;AACtC,qDAAmC;AACnC,wCAAsB;AACtB,gDAA8B;AAC9B,gDAA8B;AAC9B,uDAAqC;AACrC,8CAA4B;AAC5B,4CAA0B;AAC1B,0CAAwB;AACxB,yCAAuB;AACvB,wCAAsB;AACtB,oDAAkC;AAClC,6DAA2C;AAC3C,sDAAoC;AACpC,6CAA2B;AAC3B,8CAA4B","sourcesContent":["export * from './api';\nexport * from './apiKey';\nexport * from './cache';\nexport * from './certificate';\nexport * from './defaultRouteOptions';\nexport * from './defineAuthSystem';\nexport * from './dns';\nexport * from './domainProxy';\nexport * from './emailSender';\nexport * from './fileUploadSettings';\nexport * from './migration';\nexport * from './openApi';\nexport * from './route';\nexport * from './seed';\nexport * from './seo';\nexport * from './serviceFunction';\nexport * from './storageDriveCorsSettings';\nexport * from './subdomainRedirect';\nexport * from './webEntry';\nexport * from './websocket';\n"]}

package/lib/commonjs/services/auth/entry/controller/authController.d.ts

@@ -2,6 +2,8 @@ import { AskResponse } from 'quidproquo-core';
 import { HTTPEvent, HTTPEventResponse } from '../../../../types';
 export declare function login(event: HTTPEvent): AskResponse<HTTPEventResponse>;
 export declare function refreshToken(event: HTTPEvent): AskResponse<HTTPEventResponse>;
+export declare function logout(event: HTTPEvent): AskResponse<HTTPEventResponse>;
+export declare function logoutEverywhere(event: HTTPEvent): AskResponse<HTTPEventResponse>;
 export declare function respondToAuthChallenge(event: HTTPEvent): AskResponse<HTTPEventResponse>;
 export declare function associateSoftwareToken(event: HTTPEvent): AskResponse<HTTPEventResponse>;
 export declare function forgotPassword(event: HTTPEvent): AskResponse<HTTPEventResponse>;

package/lib/commonjs/services/auth/entry/controller/authController.js

@@ -2,6 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.login = login;
 exports.refreshToken = refreshToken;
+exports.logout = logout;
+exports.logoutEverywhere = logoutEverywhere;
 exports.respondToAuthChallenge = respondToAuthChallenge;
 exports.associateSoftwareToken = associateSoftwareToken;
 exports.forgotPassword = forgotPassword;
@@ -65,6 +67,27 @@ function* refreshToken(event) {
     const refreshResponse = yield* logic_1.authLogic.askRefreshToken(refreshToken);
     return index_1.qpqWebServerUtils.toJsonEventResponse(refreshResponse);
 }
+function* logout(event) {
+    // "Log out this device": revoke ONLY the caller's own refresh token (Cognito RevokeToken),
+    // leaving the user's other sessions signed in. The client sends its refresh token in the
+    // body. Best-effort — logout must always succeed for the client (it clears local state
+    // regardless), so an already-revoked/invalid token is swallowed rather than 4xx'd. Public
+    // route: possessing the refresh token is the authorization (you can only revoke your own).
+    const { refreshToken } = yield* index_1.qpqWebServerUtils.askFromValidJsonEventRequest(event, requireStringFields('refreshToken'));
+    yield* (0, quidproquo_core_1.askCatch)(logic_1.authLogic.askRevokeSession(refreshToken));
+    return index_1.qpqWebServerUtils.toJsonEventResponse({ success: true });
+}
+function* logoutEverywhere(event) {
+    // "Log out everywhere": revoke EVERY refresh token for the user (Cognito GlobalSignOut),
+    // for a user-settings "sign out of all devices" action. Authorized by the access token in
+    // the header (GlobalSignOut validates it at Cognito). Best-effort / always 200, same as
+    // above — swallow an invalid/expired token rather than failing the client's logout.
+    const accessToken = index_1.qpqWebServerUtils.getAccessTokenFromHeaders(event.headers);
+    if (accessToken) {
+        yield* (0, quidproquo_core_1.askCatch)(logic_1.authLogic.askSignOut(accessToken));
+    }
+    return index_1.qpqWebServerUtils.toJsonEventResponse({ success: true });
+}
 function* respondToAuthChallenge(event) {
     const payload = yield* index_1.qpqWebServerUtils.askFromValidJsonEventRequest(event, requireStringFields('email', 'session', 'challenge'));
     const authChallenge = yield* askChallengePayloadToAuthChallenge(payload);