@aws-amplify/graphql-api-construct 1.20.1 → 1.20.3

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-ini/node_modules/@smithy/types/dist-types/waiter.d.ts

@@ -0,0 +1,35 @@
+import { AbortController as DeprecatedAbortController } from "./abort";
+/**
+ * @public
+ */
+export interface WaiterConfiguration<Client> {
+    /**
+     * Required service client
+     */
+    client: Client;
+    /**
+     * The amount of time in seconds a user is willing to wait for a waiter to complete.
+     */
+    maxWaitTime: number;
+    /**
+     * @deprecated Use abortSignal
+     * Abort controller. Used for ending the waiter early.
+     */
+    abortController?: AbortController | DeprecatedAbortController;
+    /**
+     * Abort Signal. Used for ending the waiter early.
+     */
+    abortSignal?: AbortController["signal"] | DeprecatedAbortController["signal"];
+    /**
+     * The minimum amount of time to delay between retries in seconds. This is the
+     * floor of the exponential backoff. This value defaults to service default
+     * if not specified. This value MUST be less than or equal to maxDelay and greater than 0.
+     */
+    minDelay?: number;
+    /**
+     * The maximum amount of time to delay between retries in seconds. This is the
+     * ceiling of the exponential backoff. This value defaults to service default
+     * if not specified. If specified, this value MUST be greater than or equal to 1.
+     */
+    maxDelay?: number;
+}

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-ini/node_modules/@smithy/types/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@smithy/types",
+  "version": "3.7.2",
+  "scripts": {
+    "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types && yarn build:types:downlevel'",
+    "build:cjs": "node ../../scripts/inline types",
+    "build:es": "yarn g:tsc -p tsconfig.es.json",
+    "build:types": "yarn g:tsc -p tsconfig.types.json",
+    "build:types:downlevel": "rimraf dist-types/ts3.4 && downlevel-dts dist-types dist-types/ts3.4 && node scripts/downlevel",
+    "stage-release": "rimraf ./.release && yarn pack && mkdir ./.release && tar zxvf ./package.tgz --directory ./.release && rm ./package.tgz",
+    "clean": "rimraf ./dist-* && rimraf *.tsbuildinfo || exit 0",
+    "lint": "eslint -c ../../.eslintrc.js \"src/**/*.ts\"",
+    "format": "prettier --config ../../prettier.config.js --ignore-path ../.prettierignore --write \"**/*.{ts,md,json}\"",
+    "test": "yarn g:tsc -p tsconfig.test.json",
+    "extract:docs": "api-extractor run --local"
+  },
+  "main": "./dist-cjs/index.js",
+  "module": "./dist-es/index.js",
+  "types": "./dist-types/index.d.ts",
+  "author": {
+    "name": "AWS Smithy Team",
+    "email": "",
+    "url": "https://smithy.io"
+  },
+  "license": "Apache-2.0",
+  "dependencies": {
+    "tslib": "^2.6.2"
+  },
+  "engines": {
+    "node": ">=16.0.0"
+  },
+  "typesVersions": {
+    "<=4.0": {
+      "dist-types/*": [
+        "dist-types/ts3.4/*"
+      ]
+    }
+  },
+  "files": [
+    "dist-*/**"
+  ],
+  "homepage": "https://github.com/awslabs/smithy-typescript/tree/main/packages/types",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/awslabs/smithy-typescript.git",
+    "directory": "packages/types"
+  },
+  "devDependencies": {
+    "concurrently": "7.0.0",
+    "downlevel-dts": "0.10.1",
+    "rimraf": "3.0.2",
+    "typedoc": "0.23.23"
+  },
+  "typedoc": {
+    "entryPoint": "src/index.ts"
+  },
+  "publishConfig": {
+    "directory": ".release/package"
+  }
+}

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-ini/package.json

@@ -0,0 +1,70 @@
+{
+  "name": "@aws-sdk/credential-provider-ini",
+  "version": "3.622.0",
+  "description": "AWS credential provider that sources credentials from ~/.aws/credentials and ~/.aws/config",
+  "main": "./dist-cjs/index.js",
+  "module": "./dist-es/index.js",
+  "scripts": {
+    "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
+    "build:cjs": "node ../../scripts/compilation/inline credential-provider-ini",
+    "build:es": "tsc -p tsconfig.es.json",
+    "build:include:deps": "lerna run --scope $npm_package_name --include-dependencies build",
+    "build:types": "tsc -p tsconfig.types.json",
+    "build:types:downlevel": "downlevel-dts dist-types dist-types/ts3.4",
+    "clean": "rimraf ./dist-* && rimraf *.tsbuildinfo",
+    "test": "jest"
+  },
+  "keywords": [
+    "aws",
+    "credentials"
+  ],
+  "author": {
+    "name": "AWS SDK for JavaScript Team",
+    "url": "https://aws.amazon.com/javascript/"
+  },
+  "license": "Apache-2.0",
+  "dependencies": {
+    "@aws-sdk/credential-provider-env": "3.620.1",
+    "@aws-sdk/credential-provider-http": "3.622.0",
+    "@aws-sdk/credential-provider-process": "3.620.1",
+    "@aws-sdk/credential-provider-sso": "3.622.0",
+    "@aws-sdk/credential-provider-web-identity": "3.621.0",
+    "@aws-sdk/types": "3.609.0",
+    "@smithy/credential-provider-imds": "^3.2.0",
+    "@smithy/property-provider": "^3.1.3",
+    "@smithy/shared-ini-file-loader": "^3.1.4",
+    "@smithy/types": "^3.3.0",
+    "tslib": "^2.6.2"
+  },
+  "devDependencies": {
+    "@tsconfig/recommended": "1.0.1",
+    "@types/node": "^16.18.96",
+    "concurrently": "7.0.0",
+    "downlevel-dts": "0.10.1",
+    "rimraf": "3.0.2",
+    "typescript": "~4.9.5"
+  },
+  "peerDependencies": {
+    "@aws-sdk/client-sts": "^3.622.0"
+  },
+  "types": "./dist-types/index.d.ts",
+  "engines": {
+    "node": ">=16.0.0"
+  },
+  "typesVersions": {
+    "<4.0": {
+      "dist-types/*": [
+        "dist-types/ts3.4/*"
+      ]
+    }
+  },
+  "files": [
+    "dist-*/**"
+  ],
+  "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/packages/credential-provider-ini",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws/aws-sdk-js-v3.git",
+    "directory": "packages/credential-provider-ini"
+  }
+}

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-node/README.md

@@ -0,0 +1,104 @@
+# @aws-sdk/credential-provider-node
+
+[![NPM version](https://img.shields.io/npm/v/@aws-sdk/credential-provider-node/latest.svg)](https://www.npmjs.com/package/@aws-sdk/credential-provider-node)
+[![NPM downloads](https://img.shields.io/npm/dm/@aws-sdk/credential-provider-node.svg)](https://www.npmjs.com/package/@aws-sdk/credential-provider-node)
+
+## AWS Credential Provider for Node.JS
+
+This module provides a factory function, `defaultProvider`, that will attempt to
+source AWS credentials from a Node.JS environment. It will attempt to find
+credentials from the following sources (listed in order of precedence):
+
+- Environment variables exposed via `process.env`
+- SSO credentials from token cache
+- Web identity token credentials
+- Shared credentials and config ini files
+- The EC2/ECS Instance Metadata Service
+
+The default credential provider will invoke one provider at a time and only
+continue to the next if no credentials have been located. For example, if the
+process finds values defined via the `AWS_ACCESS_KEY_ID` and
+`AWS_SECRET_ACCESS_KEY` environment variables, the files at `~/.aws/credentials`
+and `~/.aws/config` will not be read, nor will any messages be sent to the
+Instance Metadata Service.
+
+If invalid configuration is encountered (such as a profile in
+`~/.aws/credentials` specifying as its `source_profile` the name of a profile
+that does not exist), then the chained provider will be rejected with an error
+and will not invoke the next provider in the list.
+
+_IMPORTANT_: if you intend to acquire credentials using EKS 
+[IAM Roles for Service Accounts](https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html), 
+then you must explicitly specify a value for `roleAssumerWithWebIdentity`. There is a
+default function available in `@aws-sdk/client-sts` package. An example of using
+this:
+
+```js
+const { getDefaultRoleAssumerWithWebIdentity } = require("@aws-sdk/client-sts");
+const { defaultProvider } = require("@aws-sdk/credential-provider-node");
+const { S3Client, GetObjectCommand } = require("@aws-sdk/client-s3");
+
+const provider = defaultProvider({
+  roleAssumerWithWebIdentity: getDefaultRoleAssumerWithWebIdentity({
+    // You must explicitly pass a region if you are not using us-east-1
+    region: "eu-west-1"
+  }),
+});
+
+const client = new S3Client({ credentialDefaultProvider: provider });
+```
+
+_IMPORTANT_: We provide a wrapper of this provider in `@aws-sdk/credential-providers`
+package to save you from importing `getDefaultRoleAssumerWithWebIdentity()` or
+`getDefaultRoleAssume()` from STS package. Similarly, you can do:
+
+```js
+const { fromNodeProviderChain } = require("@aws-sdk/credential-providers");
+
+const credentials = fromNodeProviderChain();
+
+const client = new S3Client({ credentials });
+```
+
+## Supported configuration
+
+You may customize how credentials are resolved by providing an options hash to
+the `defaultProvider` factory function. The following options are
+supported:
+
+- `profile` - The configuration profile to use. If not specified, the provider
+  will use the value in the `AWS_PROFILE` environment variable or a default of
+  `default`.
+- `filepath` - The path to the shared credentials file. If not specified, the
+  provider will use the value in the `AWS_SHARED_CREDENTIALS_FILE` environment
+  variable or a default of `~/.aws/credentials`.
+- `configFilepath` - The path to the shared config file. If not specified, the
+  provider will use the value in the `AWS_CONFIG_FILE` environment variable or a
+  default of `~/.aws/config`.
+- `mfaCodeProvider` - A function that returns a a promise fulfilled with an
+  MFA token code for the provided MFA Serial code. If a profile requires an MFA
+  code and `mfaCodeProvider` is not a valid function, the credential provider
+  promise will be rejected.
+- `roleAssumer` - A function that assumes a role and returns a promise
+  fulfilled with credentials for the assumed role. If not specified, no role
+  will be assumed, and an error will be thrown.
+- `roleArn` - ARN to assume. If not specified, the provider will use the value
+  in the `AWS_ROLE_ARN` environment variable.
+- `webIdentityTokenFile` - File location of where the `OIDC` token is stored.
+  If not specified, the provider will use the value in the `AWS_WEB_IDENTITY_TOKEN_FILE`
+  environment variable.
+- `roleAssumerWithWebIdentity` - A function that assumes a role with web identity and
+  returns a promise fulfilled with credentials for the assumed role.
+- `timeout` - The connection timeout (in milliseconds) to apply to any remote
+  requests. If not specified, a default value of `1000` (one second) is used.
+- `maxRetries` - The maximum number of times any HTTP connections should be
+  retried. If not specified, a default value of `0` will be used.
+
+## Related packages:
+
+- [AWS Credential Provider for Node.JS - Environment Variables](../credential-provider-env)
+- [AWS Credential Provider for Node.JS - SSO](../credential-provider-sso)
+- [AWS Credential Provider for Node.JS - Web Identity](../credential-provider-web-identity)
+- [AWS Credential Provider for Node.JS - Shared Configuration Files](../credential-provider-ini)
+- [AWS Credential Provider for Node.JS - Instance and Container Metadata](../credential-provider-imds)
+- [AWS Shared Configuration File Loader](../shared-ini-file-loader)

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-node/dist-cjs/index.js

@@ -0,0 +1,154 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var src_exports = {};
+__export(src_exports, {
+  credentialsTreatedAsExpired: () => credentialsTreatedAsExpired,
+  credentialsWillNeedRefresh: () => credentialsWillNeedRefresh,
+  defaultProvider: () => defaultProvider
+});
+module.exports = __toCommonJS(src_exports);
+
+// src/defaultProvider.ts
+var import_credential_provider_env = require("@aws-sdk/credential-provider-env");
+
+var import_shared_ini_file_loader = require("@smithy/shared-ini-file-loader");
+
+// src/remoteProvider.ts
+var import_property_provider = require("@smithy/property-provider");
+var ENV_IMDS_DISABLED = "AWS_EC2_METADATA_DISABLED";
+var remoteProvider = /* @__PURE__ */ __name(async (init) => {
+  var _a, _b;
+  const { ENV_CMDS_FULL_URI, ENV_CMDS_RELATIVE_URI, fromContainerMetadata, fromInstanceMetadata } = await Promise.resolve().then(() => __toESM(require("@smithy/credential-provider-imds")));
+  if (process.env[ENV_CMDS_RELATIVE_URI] || process.env[ENV_CMDS_FULL_URI]) {
+    (_a = init.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-node - remoteProvider::fromHttp/fromContainerMetadata");
+    const { fromHttp } = await Promise.resolve().then(() => __toESM(require("@aws-sdk/credential-provider-http")));
+    return (0, import_property_provider.chain)(fromHttp(init), fromContainerMetadata(init));
+  }
+  if (process.env[ENV_IMDS_DISABLED]) {
+    return async () => {
+      throw new import_property_provider.CredentialsProviderError("EC2 Instance Metadata Service access disabled", { logger: init.logger });
+    };
+  }
+  (_b = init.logger) == null ? void 0 : _b.debug("@aws-sdk/credential-provider-node - remoteProvider::fromInstanceMetadata");
+  return fromInstanceMetadata(init);
+}, "remoteProvider");
+
+// src/defaultProvider.ts
+var multipleCredentialSourceWarningEmitted = false;
+var defaultProvider = /* @__PURE__ */ __name((init = {}) => (0, import_property_provider.memoize)(
+  (0, import_property_provider.chain)(
+    async () => {
+      var _a, _b, _c, _d;
+      const profile = init.profile ?? process.env[import_shared_ini_file_loader.ENV_PROFILE];
+      if (profile) {
+        const envStaticCredentialsAreSet = process.env[import_credential_provider_env.ENV_KEY] && process.env[import_credential_provider_env.ENV_SECRET];
+        if (envStaticCredentialsAreSet) {
+          if (!multipleCredentialSourceWarningEmitted) {
+            const warnFn = ((_a = init.logger) == null ? void 0 : _a.warn) && ((_c = (_b = init.logger) == null ? void 0 : _b.constructor) == null ? void 0 : _c.name) !== "NoOpLogger" ? init.logger.warn : console.warn;
+            warnFn(
+              `@aws-sdk/credential-provider-node - defaultProvider::fromEnv WARNING:
+    Multiple credential sources detected: 
+    Both AWS_PROFILE and the pair AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY static credentials are set.
+    This SDK will proceed with the AWS_PROFILE value.
+    
+    However, a future version may change this behavior to prefer the ENV static credentials.
+    Please ensure that your environment only sets either the AWS_PROFILE or the
+    AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY pair.
+`
+            );
+            multipleCredentialSourceWarningEmitted = true;
+          }
+        }
+        throw new import_property_provider.CredentialsProviderError("AWS_PROFILE is set, skipping fromEnv provider.", {
+          logger: init.logger,
+          tryNextLink: true
+        });
+      }
+      (_d = init.logger) == null ? void 0 : _d.debug("@aws-sdk/credential-provider-node - defaultProvider::fromEnv");
+      return (0, import_credential_provider_env.fromEnv)(init)();
+    },
+    async () => {
+      var _a;
+      (_a = init.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-node - defaultProvider::fromSSO");
+      const { ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession } = init;
+      if (!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession) {
+        throw new import_property_provider.CredentialsProviderError(
+          "Skipping SSO provider in default chain (inputs do not include SSO fields).",
+          { logger: init.logger }
+        );
+      }
+      const { fromSSO } = await Promise.resolve().then(() => __toESM(require("@aws-sdk/credential-provider-sso")));
+      return fromSSO(init)();
+    },
+    async () => {
+      var _a;
+      (_a = init.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-node - defaultProvider::fromIni");
+      const { fromIni } = await Promise.resolve().then(() => __toESM(require("@aws-sdk/credential-provider-ini")));
+      return fromIni(init)();
+    },
+    async () => {
+      var _a;
+      (_a = init.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-node - defaultProvider::fromProcess");
+      const { fromProcess } = await Promise.resolve().then(() => __toESM(require("@aws-sdk/credential-provider-process")));
+      return fromProcess(init)();
+    },
+    async () => {
+      var _a;
+      (_a = init.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-node - defaultProvider::fromTokenFile");
+      const { fromTokenFile } = await Promise.resolve().then(() => __toESM(require("@aws-sdk/credential-provider-web-identity")));
+      return fromTokenFile(init)();
+    },
+    async () => {
+      var _a;
+      (_a = init.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-node - defaultProvider::remoteProvider");
+      return (await remoteProvider(init))();
+    },
+    async () => {
+      throw new import_property_provider.CredentialsProviderError("Could not load credentials from any providers", {
+        tryNextLink: false,
+        logger: init.logger
+      });
+    }
+  ),
+  credentialsTreatedAsExpired,
+  credentialsWillNeedRefresh
+), "defaultProvider");
+var credentialsWillNeedRefresh = /* @__PURE__ */ __name((credentials) => (credentials == null ? void 0 : credentials.expiration) !== void 0, "credentialsWillNeedRefresh");
+var credentialsTreatedAsExpired = /* @__PURE__ */ __name((credentials) => (credentials == null ? void 0 : credentials.expiration) !== void 0 && credentials.expiration.getTime() - Date.now() < 3e5, "credentialsTreatedAsExpired");
+// Annotate the CommonJS export names for ESM import in node:
+
+0 && (module.exports = {
+  defaultProvider,
+  credentialsWillNeedRefresh,
+  credentialsTreatedAsExpired
+});
+

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-node/dist-es/defaultProvider.js

@@ -0,0 +1,62 @@
+import { ENV_KEY, ENV_SECRET, fromEnv } from "@aws-sdk/credential-provider-env";
+import { chain, CredentialsProviderError, memoize } from "@smithy/property-provider";
+import { ENV_PROFILE } from "@smithy/shared-ini-file-loader";
+import { remoteProvider } from "./remoteProvider";
+let multipleCredentialSourceWarningEmitted = false;
+export const defaultProvider = (init = {}) => memoize(chain(async () => {
+    const profile = init.profile ?? process.env[ENV_PROFILE];
+    if (profile) {
+        const envStaticCredentialsAreSet = process.env[ENV_KEY] && process.env[ENV_SECRET];
+        if (envStaticCredentialsAreSet) {
+            if (!multipleCredentialSourceWarningEmitted) {
+                const warnFn = init.logger?.warn && init.logger?.constructor?.name !== "NoOpLogger" ? init.logger.warn : console.warn;
+                warnFn(`@aws-sdk/credential-provider-node - defaultProvider::fromEnv WARNING:
+    Multiple credential sources detected: 
+    Both AWS_PROFILE and the pair AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY static credentials are set.
+    This SDK will proceed with the AWS_PROFILE value.
+    
+    However, a future version may change this behavior to prefer the ENV static credentials.
+    Please ensure that your environment only sets either the AWS_PROFILE or the
+    AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY pair.
+`);
+                multipleCredentialSourceWarningEmitted = true;
+            }
+        }
+        throw new CredentialsProviderError("AWS_PROFILE is set, skipping fromEnv provider.", {
+            logger: init.logger,
+            tryNextLink: true,
+        });
+    }
+    init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromEnv");
+    return fromEnv(init)();
+}, async () => {
+    init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromSSO");
+    const { ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession } = init;
+    if (!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession) {
+        throw new CredentialsProviderError("Skipping SSO provider in default chain (inputs do not include SSO fields).", { logger: init.logger });
+    }
+    const { fromSSO } = await import("@aws-sdk/credential-provider-sso");
+    return fromSSO(init)();
+}, async () => {
+    init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromIni");
+    const { fromIni } = await import("@aws-sdk/credential-provider-ini");
+    return fromIni(init)();
+}, async () => {
+    init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromProcess");
+    const { fromProcess } = await import("@aws-sdk/credential-provider-process");
+    return fromProcess(init)();
+}, async () => {
+    init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromTokenFile");
+    const { fromTokenFile } = await import("@aws-sdk/credential-provider-web-identity");
+    return fromTokenFile(init)();
+}, async () => {
+    init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::remoteProvider");
+    return (await remoteProvider(init))();
+}, async () => {
+    throw new CredentialsProviderError("Could not load credentials from any providers", {
+        tryNextLink: false,
+        logger: init.logger,
+    });
+}), credentialsTreatedAsExpired, credentialsWillNeedRefresh);
+export const credentialsWillNeedRefresh = (credentials) => credentials?.expiration !== undefined;
+export const credentialsTreatedAsExpired = (credentials) => credentials?.expiration !== undefined && credentials.expiration.getTime() - Date.now() < 300000;

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-node/dist-es/index.js

@@ -0,0 +1 @@
+export * from "./defaultProvider";

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-node/dist-es/remoteProvider.js

@@ -0,0 +1,17 @@
+import { chain, CredentialsProviderError } from "@smithy/property-provider";
+export const ENV_IMDS_DISABLED = "AWS_EC2_METADATA_DISABLED";
+export const remoteProvider = async (init) => {
+    const { ENV_CMDS_FULL_URI, ENV_CMDS_RELATIVE_URI, fromContainerMetadata, fromInstanceMetadata } = await import("@smithy/credential-provider-imds");
+    if (process.env[ENV_CMDS_RELATIVE_URI] || process.env[ENV_CMDS_FULL_URI]) {
+        init.logger?.debug("@aws-sdk/credential-provider-node - remoteProvider::fromHttp/fromContainerMetadata");
+        const { fromHttp } = await import("@aws-sdk/credential-provider-http");
+        return chain(fromHttp(init), fromContainerMetadata(init));
+    }
+    if (process.env[ENV_IMDS_DISABLED]) {
+        return async () => {
+            throw new CredentialsProviderError("EC2 Instance Metadata Service access disabled", { logger: init.logger });
+        };
+    }
+    init.logger?.debug("@aws-sdk/credential-provider-node - remoteProvider::fromInstanceMetadata");
+    return fromInstanceMetadata(init);
+};

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-node/dist-types/defaultProvider.d.ts

@@ -0,0 +1,58 @@
+import type { FromHttpOptions } from "@aws-sdk/credential-provider-http";
+import type { FromIniInit } from "@aws-sdk/credential-provider-ini";
+import type { FromProcessInit } from "@aws-sdk/credential-provider-process";
+import type { FromSSOInit, SsoCredentialsParameters } from "@aws-sdk/credential-provider-sso";
+import type { FromTokenFileInit } from "@aws-sdk/credential-provider-web-identity";
+import type { RemoteProviderInit } from "@smithy/credential-provider-imds";
+import { AwsCredentialIdentity, MemoizedProvider } from "@smithy/types";
+/**
+ * @public
+ */
+export type DefaultProviderInit = FromIniInit & FromHttpOptions & RemoteProviderInit & FromProcessInit & (FromSSOInit & Partial<SsoCredentialsParameters>) & FromTokenFileInit;
+/**
+ * Creates a credential provider that will attempt to find credentials from the
+ * following sources (listed in order of precedence):
+ *   * Environment variables exposed via `process.env`
+ *   * SSO credentials from token cache
+ *   * Web identity token credentials
+ *   * Shared credentials and config ini files
+ *   * The EC2/ECS Instance Metadata Service
+ *
+ * The default credential provider will invoke one provider at a time and only
+ * continue to the next if no credentials have been located. For example, if
+ * the process finds values defined via the `AWS_ACCESS_KEY_ID` and
+ * `AWS_SECRET_ACCESS_KEY` environment variables, the files at
+ * `~/.aws/credentials` and `~/.aws/config` will not be read, nor will any
+ * messages be sent to the Instance Metadata Service.
+ *
+ * @param init                  Configuration that is passed to each individual
+ *                              provider
+ *
+ * @see {@link fromEnv}         The function used to source credentials from
+ *                              environment variables.
+ * @see {@link fromSSO}         The function used to source credentials from
+ *                              resolved SSO token cache.
+ * @see {@link fromTokenFile}   The function used to source credentials from
+ *                              token file.
+ * @see {@link fromIni}         The function used to source credentials from INI
+ *                              files.
+ * @see {@link fromProcess}     The function used to sources credentials from
+ *                              credential_process in INI files.
+ * @see {@link fromInstanceMetadata}    The function used to source credentials from the
+ *                                      EC2 Instance Metadata Service.
+ * @see {@link fromContainerMetadata}   The function used to source credentials from the
+ *                                      ECS Container Metadata Service.
+ */
+export declare const defaultProvider: (init?: DefaultProviderInit) => MemoizedProvider<AwsCredentialIdentity>;
+/**
+ * @internal
+ *
+ * @returns credentials have expiration.
+ */
+export declare const credentialsWillNeedRefresh: (credentials: AwsCredentialIdentity) => boolean;
+/**
+ * @internal
+ *
+ * @returns credentials with less than 5 minutes left.
+ */
+export declare const credentialsTreatedAsExpired: (credentials: AwsCredentialIdentity) => boolean;

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-node/dist-types/index.d.ts

@@ -0,0 +1 @@
+export * from "./defaultProvider";

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-node/dist-types/remoteProvider.d.ts

@@ -0,0 +1,11 @@
+import type { FromHttpOptions } from "@aws-sdk/credential-provider-http";
+import type { RemoteProviderInit } from "@smithy/credential-provider-imds";
+import type { AwsCredentialIdentityProvider } from "@smithy/types";
+/**
+ * @internal
+ */
+export declare const ENV_IMDS_DISABLED = "AWS_EC2_METADATA_DISABLED";
+/**
+ * @internal
+ */
+export declare const remoteProvider: (init: RemoteProviderInit | FromHttpOptions) => Promise<AwsCredentialIdentityProvider>;

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-node/dist-types/ts3.4/defaultProvider.d.ts

@@ -0,0 +1,25 @@
+import { FromHttpOptions } from "@aws-sdk/credential-provider-http";
+import { FromIniInit } from "@aws-sdk/credential-provider-ini";
+import { FromProcessInit } from "@aws-sdk/credential-provider-process";
+import {
+  FromSSOInit,
+  SsoCredentialsParameters,
+} from "@aws-sdk/credential-provider-sso";
+import { FromTokenFileInit } from "@aws-sdk/credential-provider-web-identity";
+import { RemoteProviderInit } from "@smithy/credential-provider-imds";
+import { AwsCredentialIdentity, MemoizedProvider } from "@smithy/types";
+export type DefaultProviderInit = FromIniInit &
+  FromHttpOptions &
+  RemoteProviderInit &
+  FromProcessInit &
+  (FromSSOInit & Partial<SsoCredentialsParameters>) &
+  FromTokenFileInit;
+export declare const defaultProvider: (
+  init?: DefaultProviderInit
+) => MemoizedProvider<AwsCredentialIdentity>;
+export declare const credentialsWillNeedRefresh: (
+  credentials: AwsCredentialIdentity
+) => boolean;
+export declare const credentialsTreatedAsExpired: (
+  credentials: AwsCredentialIdentity
+) => boolean;

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-node/dist-types/ts3.4/index.d.ts

@@ -0,0 +1 @@
+export * from "./defaultProvider";

package/node_modules/@aws-amplify/ai-constructs/node_modules/@aws-sdk/credential-provider-node/dist-types/ts3.4/remoteProvider.d.ts

@@ -0,0 +1,7 @@
+import { FromHttpOptions } from "@aws-sdk/credential-provider-http";
+import { RemoteProviderInit } from "@smithy/credential-provider-imds";
+import { AwsCredentialIdentityProvider } from "@smithy/types";
+export declare const ENV_IMDS_DISABLED = "AWS_EC2_METADATA_DISABLED";
+export declare const remoteProvider: (
+  init: RemoteProviderInit | FromHttpOptions
+) => Promise<AwsCredentialIdentityProvider>;