@aws-amplify/storage 6.6.10 → 6.6.11-storage-browser-integrity.2a9053f.0

package/dist/esm/internals/apis/listCallerAccessGrants.d.ts

@@ -0,0 +1,6 @@
+import { ListCallerAccessGrantsInput } from '../types/inputs';
+import { ListCallerAccessGrantsOutput } from '../types/outputs';
+/**
+ * @internal
+ */
+export declare const listCallerAccessGrants: (input: ListCallerAccessGrantsInput) => Promise<ListCallerAccessGrantsOutput>;

package/dist/esm/internals/apis/listCallerAccessGrants.mjs

@@ -0,0 +1,72 @@
+import { StorageAction } from '@aws-amplify/core/internals/utils';
+import '../../errors/types/validation.mjs';
+import { StorageError } from '../../errors/StorageError.mjs';
+import { logger } from '../../utils/logger.mjs';
+import '../../providers/s3/utils/client/s3control/getDataAccess.mjs';
+import { listCallerAccessGrants as listCallerAccessGrants$1 } from '../../providers/s3/utils/client/s3control/listCallerAccessGrants.mjs';
+import { getStorageUserAgentValue } from '../../providers/s3/utils/userAgent.mjs';
+import { MAX_PAGE_SIZE } from '../utils/constants.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * @internal
+ */
+const listCallerAccessGrants = async (input) => {
+    const { credentialsProvider, accountId, region, nextToken, pageSize } = input;
+    logger.debug(`listing available locations from account ${input.accountId}`);
+    if (!!pageSize && pageSize > MAX_PAGE_SIZE) {
+        logger.debug(`defaulting pageSize to ${MAX_PAGE_SIZE}.`);
+    }
+    const clientCredentialsProvider = async (options) => {
+        const { credentials } = await credentialsProvider(options);
+        return credentials;
+    };
+    const { CallerAccessGrantsList, NextToken } = await listCallerAccessGrants$1({
+        credentials: clientCredentialsProvider,
+        region,
+        userAgentValue: getStorageUserAgentValue(StorageAction.ListCallerAccessGrants),
+    }, {
+        AccountId: accountId,
+        NextToken: nextToken,
+        MaxResults: pageSize ?? MAX_PAGE_SIZE,
+    });
+    const accessGrants = CallerAccessGrantsList?.map(grant => {
+        assertGrantScope(grant.GrantScope);
+        return {
+            scope: grant.GrantScope,
+            permission: grant.Permission,
+            type: parseGrantType(grant.GrantScope),
+        };
+    }) ?? [];
+    return {
+        locations: accessGrants,
+        nextToken: NextToken,
+    };
+};
+const parseGrantType = (grantScope) => {
+    const bucketScopeReg = /^s3:\/\/(.*)\/\*$/;
+    const possibleBucketName = grantScope.match(bucketScopeReg)?.[1];
+    if (!grantScope.endsWith('*')) {
+        return 'OBJECT';
+    }
+    else if (grantScope.endsWith('/*') &&
+        possibleBucketName &&
+        possibleBucketName.indexOf('/') === -1) {
+        return 'BUCKET';
+    }
+    else {
+        return 'PREFIX';
+    }
+};
+function assertGrantScope(value) {
+    if (typeof value !== 'string' || !value.startsWith('s3://')) {
+        throw new StorageError({
+            name: 'InvalidGrantScope',
+            message: `Expected a valid grant scope, got ${value}`,
+        });
+    }
+}
+
+export { listCallerAccessGrants };
+//# sourceMappingURL=listCallerAccessGrants.mjs.map

package/dist/esm/internals/apis/listCallerAccessGrants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"listCallerAccessGrants.mjs","sources":["../../../../src/internals/apis/listCallerAccessGrants.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { StorageAction } from '@aws-amplify/core/internals/utils';\nimport { logger } from '../../utils';\nimport { listCallerAccessGrants as listCallerAccessGrantsClient } from '../../providers/s3/utils/client/s3control';\nimport { StorageError } from '../../errors/StorageError';\nimport { getStorageUserAgentValue } from '../../providers/s3/utils/userAgent';\nimport { MAX_PAGE_SIZE } from '../utils/constants';\n/**\n * @internal\n */\nexport const listCallerAccessGrants = async (input) => {\n    const { credentialsProvider, accountId, region, nextToken, pageSize } = input;\n    logger.debug(`listing available locations from account ${input.accountId}`);\n    if (!!pageSize && pageSize > MAX_PAGE_SIZE) {\n        logger.debug(`defaulting pageSize to ${MAX_PAGE_SIZE}.`);\n    }\n    const clientCredentialsProvider = async (options) => {\n        const { credentials } = await credentialsProvider(options);\n        return credentials;\n    };\n    const { CallerAccessGrantsList, NextToken } = await listCallerAccessGrantsClient({\n        credentials: clientCredentialsProvider,\n        region,\n        userAgentValue: getStorageUserAgentValue(StorageAction.ListCallerAccessGrants),\n    }, {\n        AccountId: accountId,\n        NextToken: nextToken,\n        MaxResults: pageSize ?? MAX_PAGE_SIZE,\n    });\n    const accessGrants = CallerAccessGrantsList?.map(grant => {\n        assertGrantScope(grant.GrantScope);\n        return {\n            scope: grant.GrantScope,\n            permission: grant.Permission,\n            type: parseGrantType(grant.GrantScope),\n        };\n    }) ?? [];\n    return {\n        locations: accessGrants,\n        nextToken: NextToken,\n    };\n};\nconst parseGrantType = (grantScope) => {\n    const bucketScopeReg = /^s3:\\/\\/(.*)\\/\\*$/;\n    const possibleBucketName = grantScope.match(bucketScopeReg)?.[1];\n    if (!grantScope.endsWith('*')) {\n        return 'OBJECT';\n    }\n    else if (grantScope.endsWith('/*') &&\n        possibleBucketName &&\n        possibleBucketName.indexOf('/') === -1) {\n        return 'BUCKET';\n    }\n    else {\n        return 'PREFIX';\n    }\n};\nfunction assertGrantScope(value) {\n    if (typeof value !== 'string' || !value.startsWith('s3://')) {\n        throw new StorageError({\n            name: 'InvalidGrantScope',\n            message: `Expected a valid grant scope, got ${value}`,\n        });\n    }\n}\n"],"names":["listCallerAccessGrantsClient"],"mappings":";;;;;;;;;AAAA;AACA;AAOA;AACA;AACA;AACY,MAAC,sBAAsB,GAAG,OAAO,KAAK,KAAK;AACvD,IAAI,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;AAClF,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,yCAAyC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAChF,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,GAAG,aAAa,EAAE;AAChD,QAAQ,MAAM,CAAC,KAAK,CAAC,CAAC,uBAAuB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,KAAK;AACL,IAAI,MAAM,yBAAyB,GAAG,OAAO,OAAO,KAAK;AACzD,QAAQ,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACnE,QAAQ,OAAO,WAAW,CAAC;AAC3B,KAAK,CAAC;AACN,IAAI,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,GAAG,MAAMA,wBAA4B,CAAC;AACrF,QAAQ,WAAW,EAAE,yBAAyB;AAC9C,QAAQ,MAAM;AACd,QAAQ,cAAc,EAAE,wBAAwB,CAAC,aAAa,CAAC,sBAAsB,CAAC;AACtF,KAAK,EAAE;AACP,QAAQ,SAAS,EAAE,SAAS;AAC5B,QAAQ,SAAS,EAAE,SAAS;AAC5B,QAAQ,UAAU,EAAE,QAAQ,IAAI,aAAa;AAC7C,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,YAAY,GAAG,sBAAsB,EAAE,GAAG,CAAC,KAAK,IAAI;AAC9D,QAAQ,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAC3C,QAAQ,OAAO;AACf,YAAY,KAAK,EAAE,KAAK,CAAC,UAAU;AACnC,YAAY,UAAU,EAAE,KAAK,CAAC,UAAU;AACxC,YAAY,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC;AAClD,SAAS,CAAC;AACV,KAAK,CAAC,IAAI,EAAE,CAAC;AACb,IAAI,OAAO;AACX,QAAQ,SAAS,EAAE,YAAY;AAC/B,QAAQ,SAAS,EAAE,SAAS;AAC5B,KAAK,CAAC;AACN,EAAE;AACF,MAAM,cAAc,GAAG,CAAC,UAAU,KAAK;AACvC,IAAI,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC/C,IAAI,MAAM,kBAAkB,GAAG,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;AACrE,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;AACnC,QAAQ,OAAO,QAAQ,CAAC;AACxB,KAAK;AACL,SAAS,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;AACtC,QAAQ,kBAAkB;AAC1B,QAAQ,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE;AAChD,QAAQ,OAAO,QAAQ,CAAC;AACxB,KAAK;AACL,SAAS;AACT,QAAQ,OAAO,QAAQ,CAAC;AACxB,KAAK;AACL,CAAC,CAAC;AACF,SAAS,gBAAgB,CAAC,KAAK,EAAE;AACjC,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AACjE,QAAQ,MAAM,IAAI,YAAY,CAAC;AAC/B,YAAY,IAAI,EAAE,mBAAmB;AACrC,YAAY,OAAO,EAAE,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;AACjE,SAAS,CAAC,CAAC;AACX,KAAK;AACL;;;;"}

package/dist/esm/internals/apis/remove.d.ts

@@ -0,0 +1,6 @@
+import { RemoveInput } from '../types/inputs';
+import { RemoveOutput } from '../types/outputs';
+/**
+ * @internal
+ */
+export declare const remove: (input: RemoveInput) => Promise<RemoveOutput>;

package/dist/esm/internals/apis/remove.mjs

@@ -0,0 +1,22 @@
+import { Amplify } from '@aws-amplify/core';
+import { remove as remove$1 } from '../../providers/s3/apis/internal/remove.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * @internal
+ */
+const remove = (input) => remove$1(Amplify, {
+    path: input.path,
+    options: {
+        useAccelerateEndpoint: input?.options?.useAccelerateEndpoint,
+        bucket: input?.options?.bucket,
+        expectedBucketOwner: input?.options?.expectedBucketOwner,
+        locationCredentialsProvider: input?.options?.locationCredentialsProvider,
+    },
+    // Type casting is necessary because `removeInternal` supports both Gen1 and Gen2 signatures, but here
+    // given in input can only be Gen2 signature, the return can only ben Gen2 signature.
+});
+
+export { remove };
+//# sourceMappingURL=remove.mjs.map

package/dist/esm/internals/apis/remove.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.mjs","sources":["../../../../src/internals/apis/remove.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { Amplify } from '@aws-amplify/core';\nimport { remove as removeInternal } from '../../providers/s3/apis/internal/remove';\n/**\n * @internal\n */\nexport const remove = (input) => removeInternal(Amplify, {\n    path: input.path,\n    options: {\n        useAccelerateEndpoint: input?.options?.useAccelerateEndpoint,\n        bucket: input?.options?.bucket,\n        expectedBucketOwner: input?.options?.expectedBucketOwner,\n        locationCredentialsProvider: input?.options?.locationCredentialsProvider,\n    },\n    // Type casting is necessary because `removeInternal` supports both Gen1 and Gen2 signatures, but here\n    // given in input can only be Gen2 signature, the return can only ben Gen2 signature.\n});\n"],"names":["removeInternal"],"mappings":";;;AAAA;AACA;AAGA;AACA;AACA;AACY,MAAC,MAAM,GAAG,CAAC,KAAK,KAAKA,QAAc,CAAC,OAAO,EAAE;AACzD,IAAI,IAAI,EAAE,KAAK,CAAC,IAAI;AACpB,IAAI,OAAO,EAAE;AACb,QAAQ,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB;AACpE,QAAQ,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM;AACtC,QAAQ,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB;AAChE,QAAQ,2BAA2B,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B;AAChF,KAAK;AACL;AACA;AACA,CAAC;;;;"}

package/dist/esm/internals/apis/uploadData.d.ts

@@ -0,0 +1,5 @@
+import { UploadDataInput } from '../types/inputs';
+/**
+ * @internal
+ */
+export declare const uploadData: (input: UploadDataInput) => import("../..").UploadDataWithPathOutput;

package/dist/esm/internals/apis/uploadData.mjs

@@ -0,0 +1,32 @@
+import { uploadData as uploadData$1 } from '../../providers/s3/apis/internal/uploadData/index.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * @internal
+ */
+const uploadData = (input) => {
+    const { data, path, options } = input;
+    return uploadData$1({
+        path,
+        data,
+        options: {
+            useAccelerateEndpoint: options?.useAccelerateEndpoint,
+            bucket: options?.bucket,
+            onProgress: options?.onProgress,
+            contentDisposition: options?.contentDisposition,
+            contentEncoding: options?.contentEncoding,
+            contentType: options?.contentType,
+            metadata: options?.metadata,
+            preventOverwrite: options?.preventOverwrite,
+            expectedBucketOwner: options?.expectedBucketOwner,
+            // Advanced options
+            locationCredentialsProvider: options?.locationCredentialsProvider,
+        },
+        // Type casting is necessary because `uploadDataInternal` supports both Gen1 and Gen2 signatures, but here
+        // given in input can only be Gen2 signature, the return can only ben Gen2 signature.
+    });
+};
+
+export { uploadData };
+//# sourceMappingURL=uploadData.mjs.map

package/dist/esm/internals/apis/uploadData.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploadData.mjs","sources":["../../../../src/internals/apis/uploadData.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { uploadData as uploadDataInternal } from '../../providers/s3/apis/internal/uploadData';\n/**\n * @internal\n */\nexport const uploadData = (input) => {\n    const { data, path, options } = input;\n    return uploadDataInternal({\n        path,\n        data,\n        options: {\n            useAccelerateEndpoint: options?.useAccelerateEndpoint,\n            bucket: options?.bucket,\n            onProgress: options?.onProgress,\n            contentDisposition: options?.contentDisposition,\n            contentEncoding: options?.contentEncoding,\n            contentType: options?.contentType,\n            metadata: options?.metadata,\n            preventOverwrite: options?.preventOverwrite,\n            expectedBucketOwner: options?.expectedBucketOwner,\n            // Advanced options\n            locationCredentialsProvider: options?.locationCredentialsProvider,\n        },\n        // Type casting is necessary because `uploadDataInternal` supports both Gen1 and Gen2 signatures, but here\n        // given in input can only be Gen2 signature, the return can only ben Gen2 signature.\n    });\n};\n"],"names":["uploadDataInternal"],"mappings":";;AAAA;AACA;AAEA;AACA;AACA;AACY,MAAC,UAAU,GAAG,CAAC,KAAK,KAAK;AACrC,IAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;AAC1C,IAAI,OAAOA,YAAkB,CAAC;AAC9B,QAAQ,IAAI;AACZ,QAAQ,IAAI;AACZ,QAAQ,OAAO,EAAE;AACjB,YAAY,qBAAqB,EAAE,OAAO,EAAE,qBAAqB;AACjE,YAAY,MAAM,EAAE,OAAO,EAAE,MAAM;AACnC,YAAY,UAAU,EAAE,OAAO,EAAE,UAAU;AAC3C,YAAY,kBAAkB,EAAE,OAAO,EAAE,kBAAkB;AAC3D,YAAY,eAAe,EAAE,OAAO,EAAE,eAAe;AACrD,YAAY,WAAW,EAAE,OAAO,EAAE,WAAW;AAC7C,YAAY,QAAQ,EAAE,OAAO,EAAE,QAAQ;AACvC,YAAY,gBAAgB,EAAE,OAAO,EAAE,gBAAgB;AACvD,YAAY,mBAAmB,EAAE,OAAO,EAAE,mBAAmB;AAC7D;AACA,YAAY,2BAA2B,EAAE,OAAO,EAAE,2BAA2B;AAC7E,SAAS;AACT;AACA;AACA,KAAK,CAAC,CAAC;AACP;;;;"}

package/dist/esm/internals/index.d.ts

@@ -0,0 +1,18 @@
+export { LocationCredentialsProvider } from '../providers/s3/types/options';
+export { StorageSubpathStrategy } from '../types/options';
+export { Permission } from './types/common';
+export { GetDataAccessInput, ListCallerAccessGrantsInput, GetPropertiesInput, GetUrlInput, CopyInput, ListInput, ListAllInput, ListPaginateInput, RemoveInput, UploadDataInput, DownloadDataInput, } from './types/inputs';
+export { GetDataAccessOutput, ListCallerAccessGrantsOutput, GetPropertiesOutput, GetUrlOutput, RemoveOutput, UploadDataOutput, DownloadDataOutput, ListOutput, CopyOutput, } from './types/outputs';
+export { getDataAccess } from './apis/getDataAccess';
+export { listCallerAccessGrants } from './apis/listCallerAccessGrants';
+export { list } from './apis/list';
+export { getProperties } from './apis/getProperties';
+export { getUrl } from './apis/getUrl';
+export { remove } from './apis/remove';
+export { uploadData } from './apis/uploadData';
+export { downloadData } from './apis/downloadData';
+export { copy } from './apis/copy';
+export { createLocationCredentialsStore } from './locationCredentialsStore';
+export { AuthConfigAdapter, createManagedAuthConfigAdapter, CreateManagedAuthConfigAdapterInput, } from './managedAuthConfigAdapter';
+export { GetLocationCredentials, ListLocations, LocationCredentialsStore, CreateLocationCredentialsStoreInput, LocationCredentials, ListLocationsInput, ListLocationsOutput, GetLocationCredentialsInput, GetLocationCredentialsOutput, } from './types/credentials';
+export { AWSTemporaryCredentials } from '../providers/s3/types/options';

package/dist/esm/internals/index.mjs

@@ -0,0 +1,12 @@
+export { getDataAccess } from './apis/getDataAccess.mjs';
+export { listCallerAccessGrants } from './apis/listCallerAccessGrants.mjs';
+export { list } from './apis/list.mjs';
+export { getProperties } from './apis/getProperties.mjs';
+export { getUrl } from './apis/getUrl.mjs';
+export { remove } from './apis/remove.mjs';
+export { uploadData } from './apis/uploadData.mjs';
+export { downloadData } from './apis/downloadData.mjs';
+export { copy } from './apis/copy.mjs';
+export { createLocationCredentialsStore } from './locationCredentialsStore/create.mjs';
+export { createManagedAuthConfigAdapter } from './managedAuthConfigAdapter/createManagedAuthConfigAdapter.mjs';
+//# sourceMappingURL=index.mjs.map

package/dist/esm/internals/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;"}

package/dist/esm/internals/locationCredentialsStore/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const CREDENTIALS_STORE_DEFAULT_SIZE = 10;
+export declare const CREDENTIALS_REFRESH_WINDOW_MS = 30000;

package/dist/esm/internals/locationCredentialsStore/constants.mjs

@@ -0,0 +1,7 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+const CREDENTIALS_STORE_DEFAULT_SIZE = 10;
+const CREDENTIALS_REFRESH_WINDOW_MS = 30000;
+
+export { CREDENTIALS_REFRESH_WINDOW_MS, CREDENTIALS_STORE_DEFAULT_SIZE };
+//# sourceMappingURL=constants.mjs.map

package/dist/esm/internals/locationCredentialsStore/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","sources":["../../../../src/internals/locationCredentialsStore/constants.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nexport const CREDENTIALS_STORE_DEFAULT_SIZE = 10;\nexport const CREDENTIALS_REFRESH_WINDOW_MS = 30000;\n"],"names":[],"mappings":"AAAA;AACA;AACY,MAAC,8BAA8B,GAAG,GAAG;AACrC,MAAC,6BAA6B,GAAG;;;;"}

package/dist/esm/internals/locationCredentialsStore/create.d.ts

@@ -0,0 +1,2 @@
+import { CreateLocationCredentialsStoreInput, LocationCredentialsStore } from '../types/credentials';
+export declare const createLocationCredentialsStore: (input: CreateLocationCredentialsStoreInput) => LocationCredentialsStore;

package/dist/esm/internals/locationCredentialsStore/create.mjs

@@ -0,0 +1,34 @@
+import { StorageValidationErrorCode } from '../../errors/types/validation.mjs';
+import { assertValidationError } from '../../errors/utils/assertValidationError.mjs';
+import { createStore, removeStore, getValue } from './registry.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+const createLocationCredentialsStore = (input) => {
+    const storeSymbol = createStore(input.handler);
+    const store = {
+        getProvider(providerLocation) {
+            const locationCredentialsProvider = async ({ forceRefresh = false, } = {}) => {
+                validateS3Uri(providerLocation.scope);
+                // TODO(@AllanZhengYP): validate the action bucket and paths matches provider scope.
+                return getValue({
+                    storeSymbol,
+                    location: { ...providerLocation },
+                    forceRefresh,
+                });
+            };
+            return locationCredentialsProvider;
+        },
+        destroy() {
+            removeStore(storeSymbol);
+        },
+    };
+    return store;
+};
+const validateS3Uri = (uri) => {
+    const s3UrlSchemaRegex = /^s3:\/\/[^/]+/;
+    assertValidationError(s3UrlSchemaRegex.test(uri), StorageValidationErrorCode.InvalidS3Uri);
+};
+
+export { createLocationCredentialsStore };
+//# sourceMappingURL=create.mjs.map

package/dist/esm/internals/locationCredentialsStore/create.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.mjs","sources":["../../../../src/internals/locationCredentialsStore/create.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { StorageValidationErrorCode } from '../../errors/types/validation';\nimport { assertValidationError } from '../../errors/utils/assertValidationError';\nimport { createStore, getValue, removeStore } from './registry';\nexport const createLocationCredentialsStore = (input) => {\n    const storeSymbol = createStore(input.handler);\n    const store = {\n        getProvider(providerLocation) {\n            const locationCredentialsProvider = async ({ forceRefresh = false, } = {}) => {\n                validateS3Uri(providerLocation.scope);\n                // TODO(@AllanZhengYP): validate the action bucket and paths matches provider scope.\n                return getValue({\n                    storeSymbol,\n                    location: { ...providerLocation },\n                    forceRefresh,\n                });\n            };\n            return locationCredentialsProvider;\n        },\n        destroy() {\n            removeStore(storeSymbol);\n        },\n    };\n    return store;\n};\nconst validateS3Uri = (uri) => {\n    const s3UrlSchemaRegex = /^s3:\\/\\/[^/]+/;\n    assertValidationError(s3UrlSchemaRegex.test(uri), StorageValidationErrorCode.InvalidS3Uri);\n};\n"],"names":[],"mappings":";;;;AAAA;AACA;AAIY,MAAC,8BAA8B,GAAG,CAAC,KAAK,KAAK;AACzD,IAAI,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACnD,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,WAAW,CAAC,gBAAgB,EAAE;AACtC,YAAY,MAAM,2BAA2B,GAAG,OAAO,EAAE,YAAY,GAAG,KAAK,GAAG,GAAG,EAAE,KAAK;AAC1F,gBAAgB,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACtD;AACA,gBAAgB,OAAO,QAAQ,CAAC;AAChC,oBAAoB,WAAW;AAC/B,oBAAoB,QAAQ,EAAE,EAAE,GAAG,gBAAgB,EAAE;AACrD,oBAAoB,YAAY;AAChC,iBAAiB,CAAC,CAAC;AACnB,aAAa,CAAC;AACd,YAAY,OAAO,2BAA2B,CAAC;AAC/C,SAAS;AACT,QAAQ,OAAO,GAAG;AAClB,YAAY,WAAW,CAAC,WAAW,CAAC,CAAC;AACrC,SAAS;AACT,KAAK,CAAC;AACN,IAAI,OAAO,KAAK,CAAC;AACjB,EAAE;AACF,MAAM,aAAa,GAAG,CAAC,GAAG,KAAK;AAC/B,IAAI,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAC7C,IAAI,qBAAqB,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,0BAA0B,CAAC,YAAY,CAAC,CAAC;AAC/F,CAAC;;;;"}

package/dist/esm/internals/locationCredentialsStore/index.d.ts

@@ -0,0 +1 @@
+export { createLocationCredentialsStore } from './create';

package/dist/esm/internals/locationCredentialsStore/index.mjs

@@ -0,0 +1,2 @@
+export { createLocationCredentialsStore } from './create.mjs';
+//# sourceMappingURL=index.mjs.map

package/dist/esm/internals/locationCredentialsStore/registry.d.ts

@@ -0,0 +1,23 @@
+import { AWSTemporaryCredentials } from '../../providers/s3/types/options';
+import { CredentialsLocation, GetLocationCredentials } from '../types/credentials';
+interface StoreRegistrySymbol {
+    readonly value: symbol;
+}
+/**
+ * @internal
+ */
+export declare const createStore: (refreshHandler: GetLocationCredentials, size?: number) => {
+    value: symbol;
+};
+/**
+ * @internal
+ */
+export declare const getValue: (input: {
+    storeSymbol: StoreRegistrySymbol;
+    location: CredentialsLocation;
+    forceRefresh: boolean;
+}) => Promise<{
+    credentials: AWSTemporaryCredentials;
+}>;
+export declare const removeStore: (storeSymbol: StoreRegistrySymbol) => void;
+export {};

package/dist/esm/internals/locationCredentialsStore/registry.mjs

@@ -0,0 +1,53 @@
+import { assertValidationError } from '../../errors/utils/assertValidationError.mjs';
+import { StorageValidationErrorCode } from '../../errors/types/validation.mjs';
+import { initStore, getCacheValue, fetchNewValue } from './store.mjs';
+
+/**
+ * Keep all cache records for all instances of credentials store in a singleton
+ * so we can reliably de-reference from the memory when we destroy a store
+ * instance.
+ */
+const storeRegistry = new WeakMap();
+/**
+ * @internal
+ */
+const createStore = (refreshHandler, size) => {
+    const storeSymbol = { value: Symbol('LocationCredentialsStore') };
+    storeRegistry.set(storeSymbol, initStore(refreshHandler, size));
+    return storeSymbol;
+};
+const getLookUpLocations = (location) => {
+    const { scope, permission } = location;
+    const locations = [{ scope, permission }];
+    if (permission === 'READ' || permission === 'WRITE') {
+        locations.push({ scope, permission: 'READWRITE' });
+    }
+    return locations;
+};
+const getCredentialsStore = (storeSymbol) => {
+    assertValidationError(storeRegistry.has(storeSymbol), StorageValidationErrorCode.LocationCredentialsStoreDestroyed);
+    return storeRegistry.get(storeSymbol);
+};
+/**
+ * @internal
+ */
+const getValue = async (input) => {
+    const { storeSymbol: storeReference, location, forceRefresh } = input;
+    const store = getCredentialsStore(storeReference);
+    if (!forceRefresh) {
+        const lookupLocations = getLookUpLocations(location);
+        for (const lookupLocation of lookupLocations) {
+            const credentials = getCacheValue(store, lookupLocation);
+            if (credentials !== null) {
+                return { credentials };
+            }
+        }
+    }
+    return fetchNewValue(store, location);
+};
+const removeStore = (storeSymbol) => {
+    storeRegistry.delete(storeSymbol);
+};
+
+export { createStore, getValue, removeStore };
+//# sourceMappingURL=registry.mjs.map

package/dist/esm/internals/locationCredentialsStore/registry.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.mjs","sources":["../../../../src/internals/locationCredentialsStore/registry.ts"],"sourcesContent":["import { assertValidationError } from '../../errors/utils/assertValidationError';\nimport { StorageValidationErrorCode } from '../../errors/types/validation';\nimport { fetchNewValue, getCacheValue, initStore, } from './store';\n/**\n * Keep all cache records for all instances of credentials store in a singleton\n * so we can reliably de-reference from the memory when we destroy a store\n * instance.\n */\nconst storeRegistry = new WeakMap();\n/**\n * @internal\n */\nexport const createStore = (refreshHandler, size) => {\n    const storeSymbol = { value: Symbol('LocationCredentialsStore') };\n    storeRegistry.set(storeSymbol, initStore(refreshHandler, size));\n    return storeSymbol;\n};\nconst getLookUpLocations = (location) => {\n    const { scope, permission } = location;\n    const locations = [{ scope, permission }];\n    if (permission === 'READ' || permission === 'WRITE') {\n        locations.push({ scope, permission: 'READWRITE' });\n    }\n    return locations;\n};\nconst getCredentialsStore = (storeSymbol) => {\n    assertValidationError(storeRegistry.has(storeSymbol), StorageValidationErrorCode.LocationCredentialsStoreDestroyed);\n    return storeRegistry.get(storeSymbol);\n};\n/**\n * @internal\n */\nexport const getValue = async (input) => {\n    const { storeSymbol: storeReference, location, forceRefresh } = input;\n    const store = getCredentialsStore(storeReference);\n    if (!forceRefresh) {\n        const lookupLocations = getLookUpLocations(location);\n        for (const lookupLocation of lookupLocations) {\n            const credentials = getCacheValue(store, lookupLocation);\n            if (credentials !== null) {\n                return { credentials };\n            }\n        }\n    }\n    return fetchNewValue(store, location);\n};\nexport const removeStore = (storeSymbol) => {\n    storeRegistry.delete(storeSymbol);\n};\n"],"names":[],"mappings":";;;;AAGA;AACA;AACA;AACA;AACA;AACA,MAAM,aAAa,GAAG,IAAI,OAAO,EAAE,CAAC;AACpC;AACA;AACA;AACY,MAAC,WAAW,GAAG,CAAC,cAAc,EAAE,IAAI,KAAK;AACrD,IAAI,MAAM,WAAW,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,0BAA0B,CAAC,EAAE,CAAC;AACtE,IAAI,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;AACpE,IAAI,OAAO,WAAW,CAAC;AACvB,EAAE;AACF,MAAM,kBAAkB,GAAG,CAAC,QAAQ,KAAK;AACzC,IAAI,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;AAC3C,IAAI,MAAM,SAAS,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;AAC9C,IAAI,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,OAAO,EAAE;AACzD,QAAQ,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;AAC3D,KAAK;AACL,IAAI,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AACF,MAAM,mBAAmB,GAAG,CAAC,WAAW,KAAK;AAC7C,IAAI,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,0BAA0B,CAAC,iCAAiC,CAAC,CAAC;AACxH,IAAI,OAAO,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAC1C,CAAC,CAAC;AACF;AACA;AACA;AACY,MAAC,QAAQ,GAAG,OAAO,KAAK,KAAK;AACzC,IAAI,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;AAC1E,IAAI,MAAM,KAAK,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;AACtD,IAAI,IAAI,CAAC,YAAY,EAAE;AACvB,QAAQ,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AAC7D,QAAQ,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE;AACtD,YAAY,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;AACrE,YAAY,IAAI,WAAW,KAAK,IAAI,EAAE;AACtC,gBAAgB,OAAO,EAAE,WAAW,EAAE,CAAC;AACvC,aAAa;AACb,SAAS;AACT,KAAK;AACL,IAAI,OAAO,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC1C,EAAE;AACU,MAAC,WAAW,GAAG,CAAC,WAAW,KAAK;AAC5C,IAAI,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACtC;;;;"}

package/dist/esm/internals/locationCredentialsStore/store.d.ts

@@ -0,0 +1,36 @@
+import { CredentialsLocation, GetLocationCredentials } from '../types/credentials';
+import { Permission } from '../types/common';
+import { AWSTemporaryCredentials } from '../../providers/s3/types/options';
+interface StoreValue extends CredentialsLocation {
+    credentials?: AWSTemporaryCredentials;
+    inflightCredentials?: Promise<{
+        credentials: AWSTemporaryCredentials;
+    }>;
+}
+type S3Uri = string;
+type CacheKey = `${S3Uri}_${Permission}`;
+/**
+ * LRU implementation for Location Credentials Store
+ * O(n) for get and set for simplicity.
+ *
+ * @internal
+ */
+export interface LruLocationCredentialsStore {
+    capacity: number;
+    refreshHandler: GetLocationCredentials;
+    values: Map<CacheKey, StoreValue>;
+}
+/**
+ * @internal
+ */
+export declare const initStore: (refreshHandler: GetLocationCredentials, size?: number) => LruLocationCredentialsStore;
+export declare const getCacheValue: (store: LruLocationCredentialsStore, location: CredentialsLocation) => AWSTemporaryCredentials | null;
+/**
+ * Fetch new credentials value with refresh handler and cache the result in
+ * LRU cache.
+ * @internal
+ */
+export declare const fetchNewValue: (store: LruLocationCredentialsStore, location: CredentialsLocation) => Promise<{
+    credentials: AWSTemporaryCredentials;
+}>;
+export {};

package/dist/esm/internals/locationCredentialsStore/store.mjs

@@ -0,0 +1,96 @@
+import { assertValidationError } from '../../errors/utils/assertValidationError.mjs';
+import { StorageValidationErrorCode } from '../../errors/types/validation.mjs';
+import { CREDENTIALS_STORE_DEFAULT_SIZE, CREDENTIALS_REFRESH_WINDOW_MS } from './constants.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+const createCacheKey = (location) => `${location.scope}_${location.permission}`;
+/**
+ * @internal
+ */
+const initStore = (refreshHandler, size = CREDENTIALS_STORE_DEFAULT_SIZE) => {
+    assertValidationError(size > 0, StorageValidationErrorCode.InvalidLocationCredentialsCacheSize);
+    return {
+        capacity: size,
+        refreshHandler,
+        values: new Map(),
+    };
+};
+const getCacheValue = (store, location) => {
+    const cacheKey = createCacheKey(location);
+    const cachedValue = store.values.get(cacheKey);
+    const cachedCredentials = cachedValue?.credentials;
+    if (!cachedCredentials) {
+        return null;
+    }
+    // Delete and re-insert to key to map to indicate a latest reference in LRU.
+    store.values.delete(cacheKey);
+    if (!pastTTL(cachedCredentials)) {
+        // TODO(@AllanZhengYP): If the credential is still valid but will expire
+        // soon, we should return credentials AND dispatch a refresh.
+        store.values.set(cacheKey, cachedValue);
+        return cachedCredentials;
+    }
+    return null;
+};
+const pastTTL = (credentials) => {
+    const { expiration } = credentials;
+    return expiration.getTime() - CREDENTIALS_REFRESH_WINDOW_MS <= Date.now();
+};
+/**
+ * Fetch new credentials value with refresh handler and cache the result in
+ * LRU cache.
+ * @internal
+ */
+const fetchNewValue = async (store, location) => {
+    const storeValues = store.values;
+    const key = createCacheKey(location);
+    if (!storeValues.has(key)) {
+        const newStoreValue = {
+            scope: location.scope,
+            permission: location.permission,
+        };
+        setCacheRecord(store, key, newStoreValue);
+    }
+    const storeValue = storeValues.get(key);
+    return dispatchRefresh(store.refreshHandler, storeValue, () => {
+        store.values.delete(key);
+    });
+};
+const dispatchRefresh = (refreshHandler, value, onRefreshFailure) => {
+    if (value.inflightCredentials) {
+        return value.inflightCredentials;
+    }
+    value.inflightCredentials = (async () => {
+        try {
+            const { credentials } = await refreshHandler({
+                scope: value.scope,
+                permission: value.permission,
+            });
+            value.credentials = credentials;
+            return { credentials };
+        }
+        catch (e) {
+            onRefreshFailure();
+            throw e;
+        }
+        finally {
+            value.inflightCredentials = undefined;
+        }
+    })();
+    return value.inflightCredentials;
+};
+const setCacheRecord = (store, key, value) => {
+    if (store.capacity === store.values.size) {
+        // Pop least used entry. The Map's key are in insertion order.
+        // So first key is the last recently inserted.
+        const [oldestKey] = store.values.keys();
+        store.values.delete(oldestKey);
+        // TODO(@AllanZhengYP): Add log info when record is evicted.
+    }
+    // Add latest used value to the cache.
+    store.values.set(key, value);
+};
+
+export { fetchNewValue, getCacheValue, initStore };
+//# sourceMappingURL=store.mjs.map

package/dist/esm/internals/locationCredentialsStore/store.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.mjs","sources":["../../../../src/internals/locationCredentialsStore/store.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { assertValidationError } from '../../errors/utils/assertValidationError';\nimport { StorageValidationErrorCode } from '../../errors/types/validation';\nimport { CREDENTIALS_REFRESH_WINDOW_MS, CREDENTIALS_STORE_DEFAULT_SIZE, } from './constants';\nconst createCacheKey = (location) => `${location.scope}_${location.permission}`;\n/**\n * @internal\n */\nexport const initStore = (refreshHandler, size = CREDENTIALS_STORE_DEFAULT_SIZE) => {\n    assertValidationError(size > 0, StorageValidationErrorCode.InvalidLocationCredentialsCacheSize);\n    return {\n        capacity: size,\n        refreshHandler,\n        values: new Map(),\n    };\n};\nexport const getCacheValue = (store, location) => {\n    const cacheKey = createCacheKey(location);\n    const cachedValue = store.values.get(cacheKey);\n    const cachedCredentials = cachedValue?.credentials;\n    if (!cachedCredentials) {\n        return null;\n    }\n    // Delete and re-insert to key to map to indicate a latest reference in LRU.\n    store.values.delete(cacheKey);\n    if (!pastTTL(cachedCredentials)) {\n        // TODO(@AllanZhengYP): If the credential is still valid but will expire\n        // soon, we should return credentials AND dispatch a refresh.\n        store.values.set(cacheKey, cachedValue);\n        return cachedCredentials;\n    }\n    return null;\n};\nconst pastTTL = (credentials) => {\n    const { expiration } = credentials;\n    return expiration.getTime() - CREDENTIALS_REFRESH_WINDOW_MS <= Date.now();\n};\n/**\n * Fetch new credentials value with refresh handler and cache the result in\n * LRU cache.\n * @internal\n */\nexport const fetchNewValue = async (store, location) => {\n    const storeValues = store.values;\n    const key = createCacheKey(location);\n    if (!storeValues.has(key)) {\n        const newStoreValue = {\n            scope: location.scope,\n            permission: location.permission,\n        };\n        setCacheRecord(store, key, newStoreValue);\n    }\n    const storeValue = storeValues.get(key);\n    return dispatchRefresh(store.refreshHandler, storeValue, () => {\n        store.values.delete(key);\n    });\n};\nconst dispatchRefresh = (refreshHandler, value, onRefreshFailure) => {\n    if (value.inflightCredentials) {\n        return value.inflightCredentials;\n    }\n    value.inflightCredentials = (async () => {\n        try {\n            const { credentials } = await refreshHandler({\n                scope: value.scope,\n                permission: value.permission,\n            });\n            value.credentials = credentials;\n            return { credentials };\n        }\n        catch (e) {\n            onRefreshFailure();\n            throw e;\n        }\n        finally {\n            value.inflightCredentials = undefined;\n        }\n    })();\n    return value.inflightCredentials;\n};\nconst setCacheRecord = (store, key, value) => {\n    if (store.capacity === store.values.size) {\n        // Pop least used entry. The Map's key are in insertion order.\n        // So first key is the last recently inserted.\n        const [oldestKey] = store.values.keys();\n        store.values.delete(oldestKey);\n        // TODO(@AllanZhengYP): Add log info when record is evicted.\n    }\n    // Add latest used value to the cache.\n    store.values.set(key, value);\n};\n"],"names":[],"mappings":";;;;AAAA;AACA;AAIA,MAAM,cAAc,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AAChF;AACA;AACA;AACY,MAAC,SAAS,GAAG,CAAC,cAAc,EAAE,IAAI,GAAG,8BAA8B,KAAK;AACpF,IAAI,qBAAqB,CAAC,IAAI,GAAG,CAAC,EAAE,0BAA0B,CAAC,mCAAmC,CAAC,CAAC;AACpG,IAAI,OAAO;AACX,QAAQ,QAAQ,EAAE,IAAI;AACtB,QAAQ,cAAc;AACtB,QAAQ,MAAM,EAAE,IAAI,GAAG,EAAE;AACzB,KAAK,CAAC;AACN,EAAE;AACU,MAAC,aAAa,GAAG,CAAC,KAAK,EAAE,QAAQ,KAAK;AAClD,IAAI,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;AAC9C,IAAI,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACnD,IAAI,MAAM,iBAAiB,GAAG,WAAW,EAAE,WAAW,CAAC;AACvD,IAAI,IAAI,CAAC,iBAAiB,EAAE;AAC5B,QAAQ,OAAO,IAAI,CAAC;AACpB,KAAK;AACL;AACA,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAClC,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE;AACrC;AACA;AACA,QAAQ,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAChD,QAAQ,OAAO,iBAAiB,CAAC;AACjC,KAAK;AACL,IAAI,OAAO,IAAI,CAAC;AAChB,EAAE;AACF,MAAM,OAAO,GAAG,CAAC,WAAW,KAAK;AACjC,IAAI,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC;AACvC,IAAI,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,6BAA6B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;AAC9E,CAAC,CAAC;AACF;AACA;AACA;AACA;AACA;AACY,MAAC,aAAa,GAAG,OAAO,KAAK,EAAE,QAAQ,KAAK;AACxD,IAAI,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC;AACrC,IAAI,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;AACzC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,MAAM,aAAa,GAAG;AAC9B,YAAY,KAAK,EAAE,QAAQ,CAAC,KAAK;AACjC,YAAY,UAAU,EAAE,QAAQ,CAAC,UAAU;AAC3C,SAAS,CAAC;AACV,QAAQ,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;AAClD,KAAK;AACL,IAAI,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5C,IAAI,OAAO,eAAe,CAAC,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,MAAM;AACnE,QAAQ,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACjC,KAAK,CAAC,CAAC;AACP,EAAE;AACF,MAAM,eAAe,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,gBAAgB,KAAK;AACrE,IAAI,IAAI,KAAK,CAAC,mBAAmB,EAAE;AACnC,QAAQ,OAAO,KAAK,CAAC,mBAAmB,CAAC;AACzC,KAAK;AACL,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,YAAY;AAC7C,QAAQ,IAAI;AACZ,YAAY,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,cAAc,CAAC;AACzD,gBAAgB,KAAK,EAAE,KAAK,CAAC,KAAK;AAClC,gBAAgB,UAAU,EAAE,KAAK,CAAC,UAAU;AAC5C,aAAa,CAAC,CAAC;AACf,YAAY,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;AAC5C,YAAY,OAAO,EAAE,WAAW,EAAE,CAAC;AACnC,SAAS;AACT,QAAQ,OAAO,CAAC,EAAE;AAClB,YAAY,gBAAgB,EAAE,CAAC;AAC/B,YAAY,MAAM,CAAC,CAAC;AACpB,SAAS;AACT,gBAAgB;AAChB,YAAY,KAAK,CAAC,mBAAmB,GAAG,SAAS,CAAC;AAClD,SAAS;AACT,KAAK,GAAG,CAAC;AACT,IAAI,OAAO,KAAK,CAAC,mBAAmB,CAAC;AACrC,CAAC,CAAC;AACF,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,KAAK;AAC9C,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;AAC9C;AACA;AACA,QAAQ,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAChD,QAAQ,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACvC;AACA,KAAK;AACL;AACA,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;;;;"}

package/dist/esm/internals/managedAuthConfigAdapter/createListLocationsHandler.d.ts

@@ -0,0 +1,8 @@
+import { CredentialsProvider, ListLocations } from '../types/credentials';
+interface CreateListLocationsHandlerInput {
+    accountId: string;
+    credentialsProvider: CredentialsProvider;
+    region: string;
+}
+export declare const createListLocationsHandler: (handlerInput: CreateListLocationsHandlerInput) => ListLocations;
+export {};

package/dist/esm/internals/managedAuthConfigAdapter/createListLocationsHandler.mjs

@@ -0,0 +1,13 @@
+import { listCallerAccessGrants } from '../apis/listCallerAccessGrants.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+const createListLocationsHandler = (handlerInput) => {
+    return async function listLocations(input = {}) {
+        const result = await listCallerAccessGrants({ ...input, ...handlerInput });
+        return result;
+    };
+};
+
+export { createListLocationsHandler };
+//# sourceMappingURL=createListLocationsHandler.mjs.map

package/dist/esm/internals/managedAuthConfigAdapter/createListLocationsHandler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"createListLocationsHandler.mjs","sources":["../../../../src/internals/managedAuthConfigAdapter/createListLocationsHandler.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { listCallerAccessGrants } from '../apis/listCallerAccessGrants';\nexport const createListLocationsHandler = (handlerInput) => {\n    return async function listLocations(input = {}) {\n        const result = await listCallerAccessGrants({ ...input, ...handlerInput });\n        return result;\n    };\n};\n"],"names":[],"mappings":";;AAAA;AACA;AAEY,MAAC,0BAA0B,GAAG,CAAC,YAAY,KAAK;AAC5D,IAAI,OAAO,eAAe,aAAa,CAAC,KAAK,GAAG,EAAE,EAAE;AACpD,QAAQ,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;AACnF,QAAQ,OAAO,MAAM,CAAC;AACtB,KAAK,CAAC;AACN;;;;"}

package/dist/esm/internals/managedAuthConfigAdapter/createLocationCredentialsHandler.d.ts

@@ -0,0 +1,8 @@
+import { CredentialsProvider, GetLocationCredentials } from '../types/credentials';
+interface CreateLocationCredentialsHandlerInput {
+    accountId: string;
+    credentialsProvider: CredentialsProvider;
+    region: string;
+}
+export declare const createLocationCredentialsHandler: (handlerInput: CreateLocationCredentialsHandlerInput) => GetLocationCredentials;
+export {};

package/dist/esm/internals/managedAuthConfigAdapter/createLocationCredentialsHandler.mjs

@@ -0,0 +1,27 @@
+import { getDataAccess } from '../apis/getDataAccess.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+const createLocationCredentialsHandler = (handlerInput) => {
+    const { accountId, region, credentialsProvider } = handlerInput;
+    /**
+     * Retrieves credentials for the specified scope & permission.
+     *
+     * @param input - An object specifying the requested scope & permission.
+     *
+     * @returns A promise which will resolve with the requested credentials.
+     */
+    return (input) => {
+        const { scope, permission } = input;
+        return getDataAccess({
+            accountId,
+            credentialsProvider,
+            permission,
+            region,
+            scope,
+        });
+    };
+};
+
+export { createLocationCredentialsHandler };
+//# sourceMappingURL=createLocationCredentialsHandler.mjs.map

package/dist/esm/internals/managedAuthConfigAdapter/createLocationCredentialsHandler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"createLocationCredentialsHandler.mjs","sources":["../../../../src/internals/managedAuthConfigAdapter/createLocationCredentialsHandler.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { getDataAccess } from '../apis/getDataAccess';\nexport const createLocationCredentialsHandler = (handlerInput) => {\n    const { accountId, region, credentialsProvider } = handlerInput;\n    /**\n     * Retrieves credentials for the specified scope & permission.\n     *\n     * @param input - An object specifying the requested scope & permission.\n     *\n     * @returns A promise which will resolve with the requested credentials.\n     */\n    return (input) => {\n        const { scope, permission } = input;\n        return getDataAccess({\n            accountId,\n            credentialsProvider,\n            permission,\n            region,\n            scope,\n        });\n    };\n};\n"],"names":[],"mappings":";;AAAA;AACA;AAEY,MAAC,gCAAgC,GAAG,CAAC,YAAY,KAAK;AAClE,IAAI,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,GAAG,YAAY,CAAC;AACpE;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,OAAO,CAAC,KAAK,KAAK;AACtB,QAAQ,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;AAC5C,QAAQ,OAAO,aAAa,CAAC;AAC7B,YAAY,SAAS;AACrB,YAAY,mBAAmB;AAC/B,YAAY,UAAU;AACtB,YAAY,MAAM;AAClB,YAAY,KAAK;AACjB,SAAS,CAAC,CAAC;AACX,KAAK,CAAC;AACN;;;;"}

package/dist/esm/internals/managedAuthConfigAdapter/createManagedAuthConfigAdapter.d.ts

@@ -0,0 +1,19 @@
+import { CredentialsProvider, GetLocationCredentials, ListLocations } from '../types/credentials';
+export interface CreateManagedAuthConfigAdapterInput {
+    accountId: string;
+    region: string;
+    credentialsProvider: CredentialsProvider;
+}
+export interface AuthConfigAdapter {
+    listLocations: ListLocations;
+    getLocationCredentials: GetLocationCredentials;
+    region: string;
+}
+/**
+ * Create configuration including handlers to call S3 Access Grant APIs to list and get
+ * credentials for different locations.
+ *
+ * @param options - Configuration options for the adapter.
+ * @returns - An object containing the handlers to call S3 Access Grant APIs and region
+ */
+export declare const createManagedAuthConfigAdapter: ({ credentialsProvider, region, accountId, }: CreateManagedAuthConfigAdapterInput) => AuthConfigAdapter;