@aws-amplify/storage 6.6.5 → 6.6.6-storage-browser.4949269.0

package/dist/esm/providers/s3/utils/validateStorageOperationInputWithPrefix.mjs

@@ -1,6 +1,7 @@
 import { assertValidationError } from '../../../errors/utils/assertValidationError.mjs';
 import { StorageValidationErrorCode } from '../../../errors/types/validation.mjs';
 import { STORAGE_INPUT_PATH, STORAGE_INPUT_PREFIX } from './constants.mjs';
+import { resolveIdentityId } from './resolveIdentityId.mjs';
 
 // Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0
@@ -13,7 +14,9 @@ const validateStorageOperationInputWithPrefix = (input, identityId) => {
     assertValidationError(!(input.prefix && input.path), StorageValidationErrorCode.InvalidStorageOperationPrefixInput);
     if (_isInputWithPath(input)) {
         const { path } = input;
-        const objectKey = typeof path === 'string' ? path : path({ identityId });
+        const objectKey = typeof path === 'string'
+            ? path
+            : path({ identityId: resolveIdentityId(identityId) });
         // Assert on no leading slash in the path parameter
         assertValidationError(!objectKey.startsWith('/'), StorageValidationErrorCode.InvalidStoragePathInput);
         return {

package/dist/esm/providers/s3/utils/validateStorageOperationInputWithPrefix.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validateStorageOperationInputWithPrefix.mjs","sources":["../../../../../src/providers/s3/utils/validateStorageOperationInputWithPrefix.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { assertValidationError } from '../../../errors/utils/assertValidationError';\nimport { StorageValidationErrorCode } from '../../../errors/types/validation';\nimport { STORAGE_INPUT_PATH, STORAGE_INPUT_PREFIX } from './constants';\n// Local assertion function with StorageOperationInputWithPrefixPath as Input\nconst _isInputWithPath = (input) => {\n    return input.path !== undefined;\n};\nexport const validateStorageOperationInputWithPrefix = (input, identityId) => {\n    // Validate prefix & path not present at the same time\n    assertValidationError(!(input.prefix && input.path), StorageValidationErrorCode.InvalidStorageOperationPrefixInput);\n    if (_isInputWithPath(input)) {\n        const { path } = input;\n        const objectKey = typeof path === 'string' ? path : path({ identityId });\n        // Assert on no leading slash in the path parameter\n        assertValidationError(!objectKey.startsWith('/'), StorageValidationErrorCode.InvalidStoragePathInput);\n        return {\n            inputType: STORAGE_INPUT_PATH,\n            objectKey,\n        };\n    }\n    else {\n        return { inputType: STORAGE_INPUT_PREFIX, objectKey: input.prefix ?? '' };\n    }\n};\n"],"names":[],"mappings":";;;;AAAA;AACA;AAIA;AACA,MAAM,gBAAgB,GAAG,CAAC,KAAK,KAAK;AACpC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;AACpC,CAAC,CAAC;AACU,MAAC,uCAAuC,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK;AAC9E;AACA,IAAI,qBAAqB,CAAC,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,kCAAkC,CAAC,CAAC;AACxH,IAAI,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE;AACjC,QAAQ,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;AAC/B,QAAQ,MAAM,SAAS,GAAG,OAAO,IAAI,KAAK,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;AACjF;AACA,QAAQ,qBAAqB,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;AAC9G,QAAQ,OAAO;AACf,YAAY,SAAS,EAAE,kBAAkB;AACzC,YAAY,SAAS;AACrB,SAAS,CAAC;AACV,KAAK;AACL,SAAS;AACT,QAAQ,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AAClF,KAAK;AACL;;;;"}
+{"version":3,"file":"validateStorageOperationInputWithPrefix.mjs","sources":["../../../../../src/providers/s3/utils/validateStorageOperationInputWithPrefix.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { assertValidationError } from '../../../errors/utils/assertValidationError';\nimport { StorageValidationErrorCode } from '../../../errors/types/validation';\nimport { STORAGE_INPUT_PATH, STORAGE_INPUT_PREFIX } from './constants';\nimport { resolveIdentityId } from './resolveIdentityId';\n// Local assertion function with StorageOperationInputWithPrefixPath as Input\nconst _isInputWithPath = (input) => {\n    return input.path !== undefined;\n};\nexport const validateStorageOperationInputWithPrefix = (input, identityId) => {\n    // Validate prefix & path not present at the same time\n    assertValidationError(!(input.prefix && input.path), StorageValidationErrorCode.InvalidStorageOperationPrefixInput);\n    if (_isInputWithPath(input)) {\n        const { path } = input;\n        const objectKey = typeof path === 'string'\n            ? path\n            : path({ identityId: resolveIdentityId(identityId) });\n        // Assert on no leading slash in the path parameter\n        assertValidationError(!objectKey.startsWith('/'), StorageValidationErrorCode.InvalidStoragePathInput);\n        return {\n            inputType: STORAGE_INPUT_PATH,\n            objectKey,\n        };\n    }\n    else {\n        return { inputType: STORAGE_INPUT_PREFIX, objectKey: input.prefix ?? '' };\n    }\n};\n"],"names":[],"mappings":";;;;;AAAA;AACA;AAKA;AACA,MAAM,gBAAgB,GAAG,CAAC,KAAK,KAAK;AACpC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;AACpC,CAAC,CAAC;AACU,MAAC,uCAAuC,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK;AAC9E;AACA,IAAI,qBAAqB,CAAC,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,kCAAkC,CAAC,CAAC;AACxH,IAAI,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE;AACjC,QAAQ,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;AAC/B,QAAQ,MAAM,SAAS,GAAG,OAAO,IAAI,KAAK,QAAQ;AAClD,cAAc,IAAI;AAClB,cAAc,IAAI,CAAC,EAAE,UAAU,EAAE,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AAClE;AACA,QAAQ,qBAAqB,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,0BAA0B,CAAC,uBAAuB,CAAC,CAAC;AAC9G,QAAQ,OAAO;AACf,YAAY,SAAS,EAAE,kBAAkB;AACzC,YAAY,SAAS;AACrB,SAAS,CAAC;AACV,KAAK;AACL,SAAS;AACT,QAAQ,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AAClF,KAAK;AACL;;;;"}

package/dist/esm/storageBrowser/apis/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const DEFAULT_CRED_TTL: number;
+export declare const MAX_PAGE_SIZE = 1000;

package/dist/esm/storageBrowser/apis/constants.mjs

@@ -0,0 +1,7 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+const DEFAULT_CRED_TTL = 15 * 60; // 15 minutes
+const MAX_PAGE_SIZE = 1000;
+
+export { DEFAULT_CRED_TTL, MAX_PAGE_SIZE };
+//# sourceMappingURL=constants.mjs.map

package/dist/esm/storageBrowser/apis/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","sources":["../../../../src/storageBrowser/apis/constants.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nexport const DEFAULT_CRED_TTL = 15 * 60; // 15 minutes\nexport const MAX_PAGE_SIZE = 1000;\n"],"names":[],"mappings":"AAAA;AACA;AACY,MAAC,gBAAgB,GAAG,EAAE,GAAG,GAAG;AAC5B,MAAC,aAAa,GAAG;;;;"}

package/dist/esm/storageBrowser/apis/getDataAccess.d.ts

@@ -0,0 +1,2 @@
+import { GetDataAccessInput, GetDataAccessOutput } from './types';
+export declare const getDataAccess: (input: GetDataAccessInput) => Promise<GetDataAccessOutput>;

package/dist/esm/storageBrowser/apis/getDataAccess.mjs

@@ -0,0 +1,57 @@
+import { StorageAction, AmplifyErrorCode } from '@aws-amplify/core/internals/utils';
+import { getStorageUserAgentValue } from '../../providers/s3/utils/userAgent.mjs';
+import { getDataAccess as getDataAccess$1 } from '../../providers/s3/utils/client/s3control/getDataAccess.mjs';
+import '../../providers/s3/utils/client/s3control/listCallerAccessGrants.mjs';
+import { StorageError } from '../../errors/StorageError.mjs';
+import '../../errors/types/validation.mjs';
+import { logger } from '../../utils/logger.mjs';
+import { DEFAULT_CRED_TTL } from './constants.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+const getDataAccess = async (input) => {
+    const targetType = input.scope.endsWith('*') ? undefined : 'Object';
+    const clientCredentialsProvider = async (options) => {
+        const { credentials } = await input.credentialsProvider(options);
+        return credentials;
+    };
+    const result = await getDataAccess$1({
+        credentials: clientCredentialsProvider,
+        region: input.region,
+        userAgentValue: getStorageUserAgentValue(StorageAction.GetDataAccess),
+    }, {
+        AccountId: input.accountId,
+        Target: input.scope,
+        Permission: input.permission,
+        TargetType: targetType,
+        DurationSeconds: DEFAULT_CRED_TTL,
+    });
+    const grantCredentials = result.Credentials;
+    // Ensure that S3 returned credentials (this shouldn't happen)
+    if (!grantCredentials ||
+        !grantCredentials.AccessKeyId ||
+        !grantCredentials.SecretAccessKey ||
+        !grantCredentials.SessionToken ||
+        !grantCredentials.Expiration) {
+        throw new StorageError({
+            name: AmplifyErrorCode.Unknown,
+            message: 'Service did not return valid temporary credentials.',
+        });
+    }
+    else {
+        logger.debug(`Retrieved credentials for: ${result.MatchedGrantTarget}`);
+    }
+    const { AccessKeyId: accessKeyId, SecretAccessKey: secretAccessKey, SessionToken: sessionToken, Expiration: expiration, } = grantCredentials;
+    return {
+        credentials: {
+            accessKeyId,
+            secretAccessKey,
+            sessionToken,
+            expiration,
+        },
+        scope: result.MatchedGrantTarget,
+    };
+};
+
+export { getDataAccess };
+//# sourceMappingURL=getDataAccess.mjs.map

package/dist/esm/storageBrowser/apis/getDataAccess.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getDataAccess.mjs","sources":["../../../../src/storageBrowser/apis/getDataAccess.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { AmplifyErrorCode, StorageAction, } from '@aws-amplify/core/internals/utils';\nimport { getStorageUserAgentValue } from '../../providers/s3/utils/userAgent';\nimport { getDataAccess as getDataAccessClient } from '../../providers/s3/utils/client/s3control';\nimport { StorageError } from '../../errors/StorageError';\nimport { logger } from '../../utils';\nimport { DEFAULT_CRED_TTL } from './constants';\nexport const getDataAccess = async (input) => {\n    const targetType = input.scope.endsWith('*') ? undefined : 'Object';\n    const clientCredentialsProvider = async (options) => {\n        const { credentials } = await input.credentialsProvider(options);\n        return credentials;\n    };\n    const result = await getDataAccessClient({\n        credentials: clientCredentialsProvider,\n        region: input.region,\n        userAgentValue: getStorageUserAgentValue(StorageAction.GetDataAccess),\n    }, {\n        AccountId: input.accountId,\n        Target: input.scope,\n        Permission: input.permission,\n        TargetType: targetType,\n        DurationSeconds: DEFAULT_CRED_TTL,\n    });\n    const grantCredentials = result.Credentials;\n    // Ensure that S3 returned credentials (this shouldn't happen)\n    if (!grantCredentials ||\n        !grantCredentials.AccessKeyId ||\n        !grantCredentials.SecretAccessKey ||\n        !grantCredentials.SessionToken ||\n        !grantCredentials.Expiration) {\n        throw new StorageError({\n            name: AmplifyErrorCode.Unknown,\n            message: 'Service did not return valid temporary credentials.',\n        });\n    }\n    else {\n        logger.debug(`Retrieved credentials for: ${result.MatchedGrantTarget}`);\n    }\n    const { AccessKeyId: accessKeyId, SecretAccessKey: secretAccessKey, SessionToken: sessionToken, Expiration: expiration, } = grantCredentials;\n    return {\n        credentials: {\n            accessKeyId,\n            secretAccessKey,\n            sessionToken,\n            expiration,\n        },\n        scope: result.MatchedGrantTarget,\n    };\n};\n"],"names":["getDataAccessClient"],"mappings":";;;;;;;;;AAAA;AACA;AAOY,MAAC,aAAa,GAAG,OAAO,KAAK,KAAK;AAC9C,IAAI,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS,GAAG,QAAQ,CAAC;AACxE,IAAI,MAAM,yBAAyB,GAAG,OAAO,OAAO,KAAK;AACzD,QAAQ,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACzE,QAAQ,OAAO,WAAW,CAAC;AAC3B,KAAK,CAAC;AACN,IAAI,MAAM,MAAM,GAAG,MAAMA,eAAmB,CAAC;AAC7C,QAAQ,WAAW,EAAE,yBAAyB;AAC9C,QAAQ,MAAM,EAAE,KAAK,CAAC,MAAM;AAC5B,QAAQ,cAAc,EAAE,wBAAwB,CAAC,aAAa,CAAC,aAAa,CAAC;AAC7E,KAAK,EAAE;AACP,QAAQ,SAAS,EAAE,KAAK,CAAC,SAAS;AAClC,QAAQ,MAAM,EAAE,KAAK,CAAC,KAAK;AAC3B,QAAQ,UAAU,EAAE,KAAK,CAAC,UAAU;AACpC,QAAQ,UAAU,EAAE,UAAU;AAC9B,QAAQ,eAAe,EAAE,gBAAgB;AACzC,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,CAAC;AAChD;AACA,IAAI,IAAI,CAAC,gBAAgB;AACzB,QAAQ,CAAC,gBAAgB,CAAC,WAAW;AACrC,QAAQ,CAAC,gBAAgB,CAAC,eAAe;AACzC,QAAQ,CAAC,gBAAgB,CAAC,YAAY;AACtC,QAAQ,CAAC,gBAAgB,CAAC,UAAU,EAAE;AACtC,QAAQ,MAAM,IAAI,YAAY,CAAC;AAC/B,YAAY,IAAI,EAAE,gBAAgB,CAAC,OAAO;AAC1C,YAAY,OAAO,EAAE,qDAAqD;AAC1E,SAAS,CAAC,CAAC;AACX,KAAK;AACL,SAAS;AACT,QAAQ,MAAM,CAAC,KAAK,CAAC,CAAC,2BAA2B,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;AAChF,KAAK;AACL,IAAI,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,GAAG,GAAG,gBAAgB,CAAC;AACjJ,IAAI,OAAO;AACX,QAAQ,WAAW,EAAE;AACrB,YAAY,WAAW;AACvB,YAAY,eAAe;AAC3B,YAAY,YAAY;AACxB,YAAY,UAAU;AACtB,SAAS;AACT,QAAQ,KAAK,EAAE,MAAM,CAAC,kBAAkB;AACxC,KAAK,CAAC;AACN;;;;"}

package/dist/esm/storageBrowser/apis/listCallerAccessGrants.d.ts

@@ -0,0 +1,2 @@
+import { ListCallerAccessGrantsInput, ListCallerAccessGrantsOutput } from './types';
+export declare const listCallerAccessGrants: (input: ListCallerAccessGrantsInput) => Promise<ListCallerAccessGrantsOutput>;

package/dist/esm/storageBrowser/apis/listCallerAccessGrants.mjs

@@ -0,0 +1,69 @@
+import { StorageAction } from '@aws-amplify/core/internals/utils';
+import '../../errors/types/validation.mjs';
+import { StorageError } from '../../errors/StorageError.mjs';
+import { logger } from '../../utils/logger.mjs';
+import '../../providers/s3/utils/client/s3control/getDataAccess.mjs';
+import { listCallerAccessGrants as listCallerAccessGrants$1 } from '../../providers/s3/utils/client/s3control/listCallerAccessGrants.mjs';
+import { getStorageUserAgentValue } from '../../providers/s3/utils/userAgent.mjs';
+import { MAX_PAGE_SIZE } from './constants.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+const listCallerAccessGrants = async (input) => {
+    const { credentialsProvider, accountId, region, nextToken, pageSize } = input;
+    logger.debug(`listing available locations from account ${input.accountId}`);
+    if (!!pageSize && pageSize > MAX_PAGE_SIZE) {
+        logger.debug(`defaulting pageSize to ${MAX_PAGE_SIZE}.`);
+    }
+    const clientCredentialsProvider = async (options) => {
+        const { credentials } = await credentialsProvider(options);
+        return credentials;
+    };
+    const { CallerAccessGrantsList, NextToken } = await listCallerAccessGrants$1({
+        credentials: clientCredentialsProvider,
+        region,
+        userAgentValue: getStorageUserAgentValue(StorageAction.ListCallerAccessGrants),
+    }, {
+        AccountId: accountId,
+        NextToken: nextToken,
+        MaxResults: pageSize ?? MAX_PAGE_SIZE,
+    });
+    const accessGrants = CallerAccessGrantsList?.map(grant => {
+        assertGrantScope(grant.GrantScope);
+        return {
+            scope: grant.GrantScope,
+            permission: grant.Permission,
+            type: parseGrantType(grant.GrantScope),
+        };
+    }) ?? [];
+    return {
+        locations: accessGrants,
+        nextToken: NextToken,
+    };
+};
+const parseGrantType = (grantScope) => {
+    const bucketScopeReg = /^s3:\/\/(.*)\/\*$/;
+    const possibleBucketName = grantScope.match(bucketScopeReg)?.[1];
+    if (!grantScope.endsWith('*')) {
+        return 'OBJECT';
+    }
+    else if (grantScope.endsWith('/*') &&
+        possibleBucketName &&
+        possibleBucketName.indexOf('/') === -1) {
+        return 'BUCKET';
+    }
+    else {
+        return 'PREFIX';
+    }
+};
+function assertGrantScope(value) {
+    if (typeof value !== 'string' || !value.startsWith('s3://')) {
+        throw new StorageError({
+            name: 'InvalidGrantScope',
+            message: `Expected a valid grant scope, got ${value}`,
+        });
+    }
+}
+
+export { listCallerAccessGrants };
+//# sourceMappingURL=listCallerAccessGrants.mjs.map

package/dist/esm/storageBrowser/apis/listCallerAccessGrants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"listCallerAccessGrants.mjs","sources":["../../../../src/storageBrowser/apis/listCallerAccessGrants.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { StorageAction } from '@aws-amplify/core/internals/utils';\nimport { logger } from '../../utils';\nimport { listCallerAccessGrants as listCallerAccessGrantsClient } from '../../providers/s3/utils/client/s3control';\nimport { StorageError } from '../../errors/StorageError';\nimport { getStorageUserAgentValue } from '../../providers/s3/utils/userAgent';\nimport { MAX_PAGE_SIZE } from './constants';\nexport const listCallerAccessGrants = async (input) => {\n    const { credentialsProvider, accountId, region, nextToken, pageSize } = input;\n    logger.debug(`listing available locations from account ${input.accountId}`);\n    if (!!pageSize && pageSize > MAX_PAGE_SIZE) {\n        logger.debug(`defaulting pageSize to ${MAX_PAGE_SIZE}.`);\n    }\n    const clientCredentialsProvider = async (options) => {\n        const { credentials } = await credentialsProvider(options);\n        return credentials;\n    };\n    const { CallerAccessGrantsList, NextToken } = await listCallerAccessGrantsClient({\n        credentials: clientCredentialsProvider,\n        region,\n        userAgentValue: getStorageUserAgentValue(StorageAction.ListCallerAccessGrants),\n    }, {\n        AccountId: accountId,\n        NextToken: nextToken,\n        MaxResults: pageSize ?? MAX_PAGE_SIZE,\n    });\n    const accessGrants = CallerAccessGrantsList?.map(grant => {\n        assertGrantScope(grant.GrantScope);\n        return {\n            scope: grant.GrantScope,\n            permission: grant.Permission,\n            type: parseGrantType(grant.GrantScope),\n        };\n    }) ?? [];\n    return {\n        locations: accessGrants,\n        nextToken: NextToken,\n    };\n};\nconst parseGrantType = (grantScope) => {\n    const bucketScopeReg = /^s3:\\/\\/(.*)\\/\\*$/;\n    const possibleBucketName = grantScope.match(bucketScopeReg)?.[1];\n    if (!grantScope.endsWith('*')) {\n        return 'OBJECT';\n    }\n    else if (grantScope.endsWith('/*') &&\n        possibleBucketName &&\n        possibleBucketName.indexOf('/') === -1) {\n        return 'BUCKET';\n    }\n    else {\n        return 'PREFIX';\n    }\n};\nfunction assertGrantScope(value) {\n    if (typeof value !== 'string' || !value.startsWith('s3://')) {\n        throw new StorageError({\n            name: 'InvalidGrantScope',\n            message: `Expected a valid grant scope, got ${value}`,\n        });\n    }\n}\n"],"names":["listCallerAccessGrantsClient"],"mappings":";;;;;;;;;AAAA;AACA;AAOY,MAAC,sBAAsB,GAAG,OAAO,KAAK,KAAK;AACvD,IAAI,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;AAClF,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,yCAAyC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAChF,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,GAAG,aAAa,EAAE;AAChD,QAAQ,MAAM,CAAC,KAAK,CAAC,CAAC,uBAAuB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,KAAK;AACL,IAAI,MAAM,yBAAyB,GAAG,OAAO,OAAO,KAAK;AACzD,QAAQ,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACnE,QAAQ,OAAO,WAAW,CAAC;AAC3B,KAAK,CAAC;AACN,IAAI,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,GAAG,MAAMA,wBAA4B,CAAC;AACrF,QAAQ,WAAW,EAAE,yBAAyB;AAC9C,QAAQ,MAAM;AACd,QAAQ,cAAc,EAAE,wBAAwB,CAAC,aAAa,CAAC,sBAAsB,CAAC;AACtF,KAAK,EAAE;AACP,QAAQ,SAAS,EAAE,SAAS;AAC5B,QAAQ,SAAS,EAAE,SAAS;AAC5B,QAAQ,UAAU,EAAE,QAAQ,IAAI,aAAa;AAC7C,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,YAAY,GAAG,sBAAsB,EAAE,GAAG,CAAC,KAAK,IAAI;AAC9D,QAAQ,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAC3C,QAAQ,OAAO;AACf,YAAY,KAAK,EAAE,KAAK,CAAC,UAAU;AACnC,YAAY,UAAU,EAAE,KAAK,CAAC,UAAU;AACxC,YAAY,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC;AAClD,SAAS,CAAC;AACV,KAAK,CAAC,IAAI,EAAE,CAAC;AACb,IAAI,OAAO;AACX,QAAQ,SAAS,EAAE,YAAY;AAC/B,QAAQ,SAAS,EAAE,SAAS;AAC5B,KAAK,CAAC;AACN,EAAE;AACF,MAAM,cAAc,GAAG,CAAC,UAAU,KAAK;AACvC,IAAI,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC/C,IAAI,MAAM,kBAAkB,GAAG,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;AACrE,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;AACnC,QAAQ,OAAO,QAAQ,CAAC;AACxB,KAAK;AACL,SAAS,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;AACtC,QAAQ,kBAAkB;AAC1B,QAAQ,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE;AAChD,QAAQ,OAAO,QAAQ,CAAC;AACxB,KAAK;AACL,SAAS;AACT,QAAQ,OAAO,QAAQ,CAAC;AACxB,KAAK;AACL,CAAC,CAAC;AACF,SAAS,gBAAgB,CAAC,KAAK,EAAE;AACjC,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AACjE,QAAQ,MAAM,IAAI,YAAY,CAAC;AAC/B,YAAY,IAAI,EAAE,mBAAmB;AACrC,YAAY,OAAO,EAAE,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;AACjE,SAAS,CAAC,CAAC;AACX,KAAK;AACL;;;;"}

package/dist/esm/storageBrowser/apis/types.d.ts

@@ -0,0 +1,18 @@
+import { CredentialsProvider, ListLocationsInput, ListLocationsOutput, LocationCredentials, Permission, PrefixType, Privilege } from '../types';
+export interface ListCallerAccessGrantsInput extends ListLocationsInput {
+    accountId: string;
+    credentialsProvider: CredentialsProvider;
+    region: string;
+}
+export type ListCallerAccessGrantsOutput = ListLocationsOutput;
+export interface GetDataAccessInput {
+    accountId: string;
+    credentialsProvider: CredentialsProvider;
+    durationSeconds?: number;
+    permission: Permission;
+    prefixType?: PrefixType;
+    privilege?: Privilege;
+    region: string;
+    scope: string;
+}
+export type GetDataAccessOutput = LocationCredentials;

package/dist/esm/storageBrowser/apis/types.mjs

@@ -0,0 +1,2 @@
+
+//# sourceMappingURL=types.mjs.map

package/dist/esm/storageBrowser/apis/types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.mjs","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/esm/storageBrowser/index.d.ts

@@ -0,0 +1,6 @@
+export { LocationCredentialsProvider } from '../providers/s3/types/options';
+export { StorageSubpathStrategy } from '../types/options';
+export { createLocationCredentialsStore } from './locationCredentialsStore';
+export { AuthConfigAdapter, createManagedAuthConfigAdapter, CreateManagedAuthConfigAdapterInput, } from './managedAuthConfigAdapter';
+export { GetLocationCredentials, ListLocations, LocationCredentialsStore, CreateLocationCredentialsStoreInput, LocationCredentials, ListLocationsInput, ListLocationsOutput, GetLocationCredentialsInput, GetLocationCredentialsOutput, Permission, } from './types';
+export { AWSTemporaryCredentials } from '../providers/s3/types/options';

package/dist/esm/storageBrowser/index.mjs

@@ -0,0 +1,3 @@
+export { createLocationCredentialsStore } from './locationCredentialsStore/create.mjs';
+export { createManagedAuthConfigAdapter } from './managedAuthConfigAdapter/createManagedAuthConfigAdapter.mjs';
+//# sourceMappingURL=index.mjs.map

package/dist/esm/storageBrowser/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":[],"sourcesContent":[],"names":[],"mappings":";"}

package/dist/esm/storageBrowser/locationCredentialsStore/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const CREDENTIALS_STORE_DEFAULT_SIZE = 10;
+export declare const CREDENTIALS_REFRESH_WINDOW_MS = 30000;

package/dist/esm/storageBrowser/locationCredentialsStore/constants.mjs

@@ -0,0 +1,7 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+const CREDENTIALS_STORE_DEFAULT_SIZE = 10;
+const CREDENTIALS_REFRESH_WINDOW_MS = 30000;
+
+export { CREDENTIALS_REFRESH_WINDOW_MS, CREDENTIALS_STORE_DEFAULT_SIZE };
+//# sourceMappingURL=constants.mjs.map

package/dist/esm/storageBrowser/locationCredentialsStore/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","sources":["../../../../src/storageBrowser/locationCredentialsStore/constants.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nexport const CREDENTIALS_STORE_DEFAULT_SIZE = 10;\nexport const CREDENTIALS_REFRESH_WINDOW_MS = 30000;\n"],"names":[],"mappings":"AAAA;AACA;AACY,MAAC,8BAA8B,GAAG,GAAG;AACrC,MAAC,6BAA6B,GAAG;;;;"}

package/dist/esm/storageBrowser/locationCredentialsStore/create.d.ts

@@ -0,0 +1,2 @@
+import { CreateLocationCredentialsStoreInput, LocationCredentialsStore } from '../types';
+export declare const createLocationCredentialsStore: (input: CreateLocationCredentialsStoreInput) => LocationCredentialsStore;

package/dist/esm/storageBrowser/locationCredentialsStore/create.mjs

@@ -0,0 +1,34 @@
+import { StorageValidationErrorCode } from '../../errors/types/validation.mjs';
+import { assertValidationError } from '../../errors/utils/assertValidationError.mjs';
+import { createStore, removeStore, getValue } from './registry.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+const createLocationCredentialsStore = (input) => {
+    const storeSymbol = createStore(input.handler);
+    const store = {
+        getProvider(providerLocation) {
+            const locationCredentialsProvider = async ({ forceRefresh = false, } = {}) => {
+                validateS3Uri(providerLocation.scope);
+                // TODO(@AllanZhengYP): validate the action bucket and paths matches provider scope.
+                return getValue({
+                    storeSymbol,
+                    location: { ...providerLocation },
+                    forceRefresh,
+                });
+            };
+            return locationCredentialsProvider;
+        },
+        destroy() {
+            removeStore(storeSymbol);
+        },
+    };
+    return store;
+};
+const validateS3Uri = (uri) => {
+    const s3UrlSchemaRegex = /^s3:\/\/[^/]+/;
+    assertValidationError(s3UrlSchemaRegex.test(uri), StorageValidationErrorCode.InvalidS3Uri);
+};
+
+export { createLocationCredentialsStore };
+//# sourceMappingURL=create.mjs.map

package/dist/esm/storageBrowser/locationCredentialsStore/create.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.mjs","sources":["../../../../src/storageBrowser/locationCredentialsStore/create.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { StorageValidationErrorCode } from '../../errors/types/validation';\nimport { assertValidationError } from '../../errors/utils/assertValidationError';\nimport { createStore, getValue, removeStore } from './registry';\nexport const createLocationCredentialsStore = (input) => {\n    const storeSymbol = createStore(input.handler);\n    const store = {\n        getProvider(providerLocation) {\n            const locationCredentialsProvider = async ({ forceRefresh = false, } = {}) => {\n                validateS3Uri(providerLocation.scope);\n                // TODO(@AllanZhengYP): validate the action bucket and paths matches provider scope.\n                return getValue({\n                    storeSymbol,\n                    location: { ...providerLocation },\n                    forceRefresh,\n                });\n            };\n            return locationCredentialsProvider;\n        },\n        destroy() {\n            removeStore(storeSymbol);\n        },\n    };\n    return store;\n};\nconst validateS3Uri = (uri) => {\n    const s3UrlSchemaRegex = /^s3:\\/\\/[^/]+/;\n    assertValidationError(s3UrlSchemaRegex.test(uri), StorageValidationErrorCode.InvalidS3Uri);\n};\n"],"names":[],"mappings":";;;;AAAA;AACA;AAIY,MAAC,8BAA8B,GAAG,CAAC,KAAK,KAAK;AACzD,IAAI,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACnD,IAAI,MAAM,KAAK,GAAG;AAClB,QAAQ,WAAW,CAAC,gBAAgB,EAAE;AACtC,YAAY,MAAM,2BAA2B,GAAG,OAAO,EAAE,YAAY,GAAG,KAAK,GAAG,GAAG,EAAE,KAAK;AAC1F,gBAAgB,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACtD;AACA,gBAAgB,OAAO,QAAQ,CAAC;AAChC,oBAAoB,WAAW;AAC/B,oBAAoB,QAAQ,EAAE,EAAE,GAAG,gBAAgB,EAAE;AACrD,oBAAoB,YAAY;AAChC,iBAAiB,CAAC,CAAC;AACnB,aAAa,CAAC;AACd,YAAY,OAAO,2BAA2B,CAAC;AAC/C,SAAS;AACT,QAAQ,OAAO,GAAG;AAClB,YAAY,WAAW,CAAC,WAAW,CAAC,CAAC;AACrC,SAAS;AACT,KAAK,CAAC;AACN,IAAI,OAAO,KAAK,CAAC;AACjB,EAAE;AACF,MAAM,aAAa,GAAG,CAAC,GAAG,KAAK;AAC/B,IAAI,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAC7C,IAAI,qBAAqB,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,0BAA0B,CAAC,YAAY,CAAC,CAAC;AAC/F,CAAC;;;;"}

package/dist/esm/storageBrowser/locationCredentialsStore/index.d.ts

@@ -0,0 +1 @@
+export { createLocationCredentialsStore } from './create';

package/dist/esm/storageBrowser/locationCredentialsStore/index.mjs

@@ -0,0 +1,2 @@
+export { createLocationCredentialsStore } from './create.mjs';
+//# sourceMappingURL=index.mjs.map

package/dist/esm/storageBrowser/locationCredentialsStore/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/esm/storageBrowser/locationCredentialsStore/registry.d.ts

@@ -0,0 +1,23 @@
+import { AWSTemporaryCredentials } from '../../providers/s3/types/options';
+import { CredentialsLocation, GetLocationCredentials } from '../types';
+interface StoreRegistrySymbol {
+    readonly value: symbol;
+}
+/**
+ * @internal
+ */
+export declare const createStore: (refreshHandler: GetLocationCredentials, size?: number) => {
+    value: symbol;
+};
+/**
+ * @internal
+ */
+export declare const getValue: (input: {
+    storeSymbol: StoreRegistrySymbol;
+    location: CredentialsLocation;
+    forceRefresh: boolean;
+}) => Promise<{
+    credentials: AWSTemporaryCredentials;
+}>;
+export declare const removeStore: (storeSymbol: StoreRegistrySymbol) => void;
+export {};

package/dist/esm/storageBrowser/locationCredentialsStore/registry.mjs

@@ -0,0 +1,54 @@
+import { assertValidationError } from '../../errors/utils/assertValidationError.mjs';
+import { StorageValidationErrorCode } from '../../errors/types/validation.mjs';
+import { initStore, getCacheValue, fetchNewValue } from './store.mjs';
+
+/* eslint-disable unused-imports/no-unused-vars */
+/**
+ * Keep all cache records for all instances of credentials store in a singleton
+ * so we can reliably de-reference from the memory when we destroy a store
+ * instance.
+ */
+const storeRegistry = new WeakMap();
+/**
+ * @internal
+ */
+const createStore = (refreshHandler, size) => {
+    const storeSymbol = { value: Symbol('LocationCredentialsStore') };
+    storeRegistry.set(storeSymbol, initStore(refreshHandler, size));
+    return storeSymbol;
+};
+const getLookUpLocations = (location) => {
+    const { scope, permission } = location;
+    const locations = [{ scope, permission }];
+    if (permission === 'READ' || permission === 'WRITE') {
+        locations.push({ scope, permission: 'READWRITE' });
+    }
+    return locations;
+};
+const getCredentialsStore = (storeSymbol) => {
+    assertValidationError(storeRegistry.has(storeSymbol), StorageValidationErrorCode.LocationCredentialsStoreDestroyed);
+    return storeRegistry.get(storeSymbol);
+};
+/**
+ * @internal
+ */
+const getValue = async (input) => {
+    const { storeSymbol: storeReference, location, forceRefresh } = input;
+    const store = getCredentialsStore(storeReference);
+    if (!forceRefresh) {
+        const lookupLocations = getLookUpLocations(location);
+        for (const lookupLocation of lookupLocations) {
+            const credentials = getCacheValue(store, lookupLocation);
+            if (credentials !== null) {
+                return { credentials };
+            }
+        }
+    }
+    return fetchNewValue(store, location);
+};
+const removeStore = (storeSymbol) => {
+    storeRegistry.delete(storeSymbol);
+};
+
+export { createStore, getValue, removeStore };
+//# sourceMappingURL=registry.mjs.map

package/dist/esm/storageBrowser/locationCredentialsStore/registry.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.mjs","sources":["../../../../src/storageBrowser/locationCredentialsStore/registry.ts"],"sourcesContent":["/* eslint-disable unused-imports/no-unused-vars */\nimport { assertValidationError } from '../../errors/utils/assertValidationError';\nimport { StorageValidationErrorCode } from '../../errors/types/validation';\nimport { fetchNewValue, getCacheValue, initStore, } from './store';\n/**\n * Keep all cache records for all instances of credentials store in a singleton\n * so we can reliably de-reference from the memory when we destroy a store\n * instance.\n */\nconst storeRegistry = new WeakMap();\n/**\n * @internal\n */\nexport const createStore = (refreshHandler, size) => {\n    const storeSymbol = { value: Symbol('LocationCredentialsStore') };\n    storeRegistry.set(storeSymbol, initStore(refreshHandler, size));\n    return storeSymbol;\n};\nconst getLookUpLocations = (location) => {\n    const { scope, permission } = location;\n    const locations = [{ scope, permission }];\n    if (permission === 'READ' || permission === 'WRITE') {\n        locations.push({ scope, permission: 'READWRITE' });\n    }\n    return locations;\n};\nconst getCredentialsStore = (storeSymbol) => {\n    assertValidationError(storeRegistry.has(storeSymbol), StorageValidationErrorCode.LocationCredentialsStoreDestroyed);\n    return storeRegistry.get(storeSymbol);\n};\n/**\n * @internal\n */\nexport const getValue = async (input) => {\n    const { storeSymbol: storeReference, location, forceRefresh } = input;\n    const store = getCredentialsStore(storeReference);\n    if (!forceRefresh) {\n        const lookupLocations = getLookUpLocations(location);\n        for (const lookupLocation of lookupLocations) {\n            const credentials = getCacheValue(store, lookupLocation);\n            if (credentials !== null) {\n                return { credentials };\n            }\n        }\n    }\n    return fetchNewValue(store, location);\n};\nexport const removeStore = (storeSymbol) => {\n    storeRegistry.delete(storeSymbol);\n};\n"],"names":[],"mappings":";;;;AAAA;AAIA;AACA;AACA;AACA;AACA;AACA,MAAM,aAAa,GAAG,IAAI,OAAO,EAAE,CAAC;AACpC;AACA;AACA;AACY,MAAC,WAAW,GAAG,CAAC,cAAc,EAAE,IAAI,KAAK;AACrD,IAAI,MAAM,WAAW,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,0BAA0B,CAAC,EAAE,CAAC;AACtE,IAAI,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;AACpE,IAAI,OAAO,WAAW,CAAC;AACvB,EAAE;AACF,MAAM,kBAAkB,GAAG,CAAC,QAAQ,KAAK;AACzC,IAAI,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;AAC3C,IAAI,MAAM,SAAS,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;AAC9C,IAAI,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,OAAO,EAAE;AACzD,QAAQ,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;AAC3D,KAAK;AACL,IAAI,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AACF,MAAM,mBAAmB,GAAG,CAAC,WAAW,KAAK;AAC7C,IAAI,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,0BAA0B,CAAC,iCAAiC,CAAC,CAAC;AACxH,IAAI,OAAO,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAC1C,CAAC,CAAC;AACF;AACA;AACA;AACY,MAAC,QAAQ,GAAG,OAAO,KAAK,KAAK;AACzC,IAAI,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;AAC1E,IAAI,MAAM,KAAK,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;AACtD,IAAI,IAAI,CAAC,YAAY,EAAE;AACvB,QAAQ,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AAC7D,QAAQ,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE;AACtD,YAAY,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;AACrE,YAAY,IAAI,WAAW,KAAK,IAAI,EAAE;AACtC,gBAAgB,OAAO,EAAE,WAAW,EAAE,CAAC;AACvC,aAAa;AACb,SAAS;AACT,KAAK;AACL,IAAI,OAAO,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC1C,EAAE;AACU,MAAC,WAAW,GAAG,CAAC,WAAW,KAAK;AAC5C,IAAI,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACtC;;;;"}

package/dist/esm/storageBrowser/locationCredentialsStore/store.d.ts

@@ -0,0 +1,35 @@
+import { CredentialsLocation, GetLocationCredentials, Permission } from '../types';
+import { AWSTemporaryCredentials } from '../../providers/s3/types/options';
+interface StoreValue extends CredentialsLocation {
+    credentials?: AWSTemporaryCredentials;
+    inflightCredentials?: Promise<{
+        credentials: AWSTemporaryCredentials;
+    }>;
+}
+type S3Uri = string;
+type CacheKey = `${S3Uri}_${Permission}`;
+/**
+ * LRU implementation for Location Credentials Store
+ * O(n) for get and set for simplicity.
+ *
+ * @internal
+ */
+export interface LruLocationCredentialsStore {
+    capacity: number;
+    refreshHandler: GetLocationCredentials;
+    values: Map<CacheKey, StoreValue>;
+}
+/**
+ * @internal
+ */
+export declare const initStore: (refreshHandler: GetLocationCredentials, size?: number) => LruLocationCredentialsStore;
+export declare const getCacheValue: (store: LruLocationCredentialsStore, location: CredentialsLocation) => AWSTemporaryCredentials | null;
+/**
+ * Fetch new credentials value with refresh handler and cache the result in
+ * LRU cache.
+ * @internal
+ */
+export declare const fetchNewValue: (store: LruLocationCredentialsStore, location: CredentialsLocation) => Promise<{
+    credentials: AWSTemporaryCredentials;
+}>;
+export {};

package/dist/esm/storageBrowser/locationCredentialsStore/store.mjs

@@ -0,0 +1,95 @@
+import { assertValidationError } from '../../errors/utils/assertValidationError.mjs';
+import { StorageValidationErrorCode } from '../../errors/types/validation.mjs';
+import { CREDENTIALS_STORE_DEFAULT_SIZE, CREDENTIALS_REFRESH_WINDOW_MS } from './constants.mjs';
+
+/* eslint-disable unused-imports/no-unused-vars */
+const createCacheKey = (location) => `${location.scope}_${location.permission}`;
+/**
+ * @internal
+ */
+const initStore = (refreshHandler, size = CREDENTIALS_STORE_DEFAULT_SIZE) => {
+    assertValidationError(size > 0, StorageValidationErrorCode.InvalidLocationCredentialsCacheSize);
+    return {
+        capacity: size,
+        refreshHandler,
+        values: new Map(),
+    };
+};
+const getCacheValue = (store, location) => {
+    const cacheKey = createCacheKey(location);
+    const cachedValue = store.values.get(cacheKey);
+    const cachedCredentials = cachedValue?.credentials;
+    if (!cachedCredentials) {
+        return null;
+    }
+    // Delete and re-insert to key to map to indicate a latest reference in LRU.
+    store.values.delete(cacheKey);
+    if (!pastTTL(cachedCredentials)) {
+        // TODO(@AllanZhengYP): If the credential is still valid but will expire
+        // soon, we should return credentials AND dispatch a refresh.
+        store.values.set(cacheKey, cachedValue);
+        return cachedCredentials;
+    }
+    return null;
+};
+const pastTTL = (credentials) => {
+    const { expiration } = credentials;
+    return expiration.getTime() - CREDENTIALS_REFRESH_WINDOW_MS <= Date.now();
+};
+/**
+ * Fetch new credentials value with refresh handler and cache the result in
+ * LRU cache.
+ * @internal
+ */
+const fetchNewValue = async (store, location) => {
+    const storeValues = store.values;
+    const key = createCacheKey(location);
+    if (!storeValues.has(key)) {
+        const newStoreValue = {
+            scope: location.scope,
+            permission: location.permission,
+        };
+        setCacheRecord(store, key, newStoreValue);
+    }
+    const storeValue = storeValues.get(key);
+    return dispatchRefresh(store.refreshHandler, storeValue, () => {
+        store.values.delete(key);
+    });
+};
+const dispatchRefresh = (refreshHandler, value, onRefreshFailure) => {
+    if (value.inflightCredentials) {
+        return value.inflightCredentials;
+    }
+    value.inflightCredentials = (async () => {
+        try {
+            const { credentials } = await refreshHandler({
+                scope: value.scope,
+                permission: value.permission,
+            });
+            value.credentials = credentials;
+            return { credentials };
+        }
+        catch (e) {
+            onRefreshFailure();
+            throw e;
+        }
+        finally {
+            value.inflightCredentials = undefined;
+        }
+    })();
+    return value.inflightCredentials;
+};
+const setCacheRecord = (store, key, value) => {
+    if (store.capacity === store.values.size) {
+        // Pop least used entry. The Map's key are in insertion order.
+        // So first key is the last recently inserted.
+        const [oldestKey] = store.values.keys();
+        store.values.delete(oldestKey);
+        // TODO(@AllanZhengYP): Add log info when record is evicted.
+    }
+    // Add latest used value to the cache.
+    store.values.set(key, value);
+};
+
+export { fetchNewValue, getCacheValue, initStore };
+//# sourceMappingURL=store.mjs.map

package/dist/esm/storageBrowser/locationCredentialsStore/store.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.mjs","sources":["../../../../src/storageBrowser/locationCredentialsStore/store.ts"],"sourcesContent":["/* eslint-disable unused-imports/no-unused-vars */\nimport { assertValidationError } from '../../errors/utils/assertValidationError';\nimport { StorageValidationErrorCode } from '../../errors/types/validation';\nimport { CREDENTIALS_REFRESH_WINDOW_MS, CREDENTIALS_STORE_DEFAULT_SIZE, } from './constants';\nconst createCacheKey = (location) => `${location.scope}_${location.permission}`;\n/**\n * @internal\n */\nexport const initStore = (refreshHandler, size = CREDENTIALS_STORE_DEFAULT_SIZE) => {\n    assertValidationError(size > 0, StorageValidationErrorCode.InvalidLocationCredentialsCacheSize);\n    return {\n        capacity: size,\n        refreshHandler,\n        values: new Map(),\n    };\n};\nexport const getCacheValue = (store, location) => {\n    const cacheKey = createCacheKey(location);\n    const cachedValue = store.values.get(cacheKey);\n    const cachedCredentials = cachedValue?.credentials;\n    if (!cachedCredentials) {\n        return null;\n    }\n    // Delete and re-insert to key to map to indicate a latest reference in LRU.\n    store.values.delete(cacheKey);\n    if (!pastTTL(cachedCredentials)) {\n        // TODO(@AllanZhengYP): If the credential is still valid but will expire\n        // soon, we should return credentials AND dispatch a refresh.\n        store.values.set(cacheKey, cachedValue);\n        return cachedCredentials;\n    }\n    return null;\n};\nconst pastTTL = (credentials) => {\n    const { expiration } = credentials;\n    return expiration.getTime() - CREDENTIALS_REFRESH_WINDOW_MS <= Date.now();\n};\n/**\n * Fetch new credentials value with refresh handler and cache the result in\n * LRU cache.\n * @internal\n */\nexport const fetchNewValue = async (store, location) => {\n    const storeValues = store.values;\n    const key = createCacheKey(location);\n    if (!storeValues.has(key)) {\n        const newStoreValue = {\n            scope: location.scope,\n            permission: location.permission,\n        };\n        setCacheRecord(store, key, newStoreValue);\n    }\n    const storeValue = storeValues.get(key);\n    return dispatchRefresh(store.refreshHandler, storeValue, () => {\n        store.values.delete(key);\n    });\n};\nconst dispatchRefresh = (refreshHandler, value, onRefreshFailure) => {\n    if (value.inflightCredentials) {\n        return value.inflightCredentials;\n    }\n    value.inflightCredentials = (async () => {\n        try {\n            const { credentials } = await refreshHandler({\n                scope: value.scope,\n                permission: value.permission,\n            });\n            value.credentials = credentials;\n            return { credentials };\n        }\n        catch (e) {\n            onRefreshFailure();\n            throw e;\n        }\n        finally {\n            value.inflightCredentials = undefined;\n        }\n    })();\n    return value.inflightCredentials;\n};\nconst setCacheRecord = (store, key, value) => {\n    if (store.capacity === store.values.size) {\n        // Pop least used entry. The Map's key are in insertion order.\n        // So first key is the last recently inserted.\n        const [oldestKey] = store.values.keys();\n        store.values.delete(oldestKey);\n        // TODO(@AllanZhengYP): Add log info when record is evicted.\n    }\n    // Add latest used value to the cache.\n    store.values.set(key, value);\n};\n"],"names":[],"mappings":";;;;AAAA;AAIA,MAAM,cAAc,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AAChF;AACA;AACA;AACY,MAAC,SAAS,GAAG,CAAC,cAAc,EAAE,IAAI,GAAG,8BAA8B,KAAK;AACpF,IAAI,qBAAqB,CAAC,IAAI,GAAG,CAAC,EAAE,0BAA0B,CAAC,mCAAmC,CAAC,CAAC;AACpG,IAAI,OAAO;AACX,QAAQ,QAAQ,EAAE,IAAI;AACtB,QAAQ,cAAc;AACtB,QAAQ,MAAM,EAAE,IAAI,GAAG,EAAE;AACzB,KAAK,CAAC;AACN,EAAE;AACU,MAAC,aAAa,GAAG,CAAC,KAAK,EAAE,QAAQ,KAAK;AAClD,IAAI,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;AAC9C,IAAI,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACnD,IAAI,MAAM,iBAAiB,GAAG,WAAW,EAAE,WAAW,CAAC;AACvD,IAAI,IAAI,CAAC,iBAAiB,EAAE;AAC5B,QAAQ,OAAO,IAAI,CAAC;AACpB,KAAK;AACL;AACA,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAClC,IAAI,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE;AACrC;AACA;AACA,QAAQ,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAChD,QAAQ,OAAO,iBAAiB,CAAC;AACjC,KAAK;AACL,IAAI,OAAO,IAAI,CAAC;AAChB,EAAE;AACF,MAAM,OAAO,GAAG,CAAC,WAAW,KAAK;AACjC,IAAI,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC;AACvC,IAAI,OAAO,UAAU,CAAC,OAAO,EAAE,GAAG,6BAA6B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;AAC9E,CAAC,CAAC;AACF;AACA;AACA;AACA;AACA;AACY,MAAC,aAAa,GAAG,OAAO,KAAK,EAAE,QAAQ,KAAK;AACxD,IAAI,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC;AACrC,IAAI,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;AACzC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AAC/B,QAAQ,MAAM,aAAa,GAAG;AAC9B,YAAY,KAAK,EAAE,QAAQ,CAAC,KAAK;AACjC,YAAY,UAAU,EAAE,QAAQ,CAAC,UAAU;AAC3C,SAAS,CAAC;AACV,QAAQ,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;AAClD,KAAK;AACL,IAAI,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5C,IAAI,OAAO,eAAe,CAAC,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,MAAM;AACnE,QAAQ,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACjC,KAAK,CAAC,CAAC;AACP,EAAE;AACF,MAAM,eAAe,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,gBAAgB,KAAK;AACrE,IAAI,IAAI,KAAK,CAAC,mBAAmB,EAAE;AACnC,QAAQ,OAAO,KAAK,CAAC,mBAAmB,CAAC;AACzC,KAAK;AACL,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,YAAY;AAC7C,QAAQ,IAAI;AACZ,YAAY,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,cAAc,CAAC;AACzD,gBAAgB,KAAK,EAAE,KAAK,CAAC,KAAK;AAClC,gBAAgB,UAAU,EAAE,KAAK,CAAC,UAAU;AAC5C,aAAa,CAAC,CAAC;AACf,YAAY,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;AAC5C,YAAY,OAAO,EAAE,WAAW,EAAE,CAAC;AACnC,SAAS;AACT,QAAQ,OAAO,CAAC,EAAE;AAClB,YAAY,gBAAgB,EAAE,CAAC;AAC/B,YAAY,MAAM,CAAC,CAAC;AACpB,SAAS;AACT,gBAAgB;AAChB,YAAY,KAAK,CAAC,mBAAmB,GAAG,SAAS,CAAC;AAClD,SAAS;AACT,KAAK,GAAG,CAAC;AACT,IAAI,OAAO,KAAK,CAAC,mBAAmB,CAAC;AACrC,CAAC,CAAC;AACF,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,KAAK;AAC9C,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;AAC9C;AACA;AACA,QAAQ,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAChD,QAAQ,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACvC;AACA,KAAK;AACL;AACA,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;;;;"}

package/dist/esm/storageBrowser/managedAuthConfigAdapter/createListLocationsHandler.d.ts

@@ -0,0 +1,8 @@
+import { CredentialsProvider, ListLocations } from '../types';
+interface CreateListLocationsHandlerInput {
+    accountId: string;
+    credentialsProvider: CredentialsProvider;
+    region: string;
+}
+export declare const createListLocationsHandler: (handlerInput: CreateListLocationsHandlerInput) => ListLocations;
+export {};

package/dist/esm/storageBrowser/managedAuthConfigAdapter/createListLocationsHandler.mjs

@@ -0,0 +1,13 @@
+import { listCallerAccessGrants } from '../apis/listCallerAccessGrants.mjs';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+const createListLocationsHandler = (handlerInput) => {
+    return async function listLocations(input = {}) {
+        const result = await listCallerAccessGrants({ ...input, ...handlerInput });
+        return result;
+    };
+};
+
+export { createListLocationsHandler };
+//# sourceMappingURL=createListLocationsHandler.mjs.map

package/dist/esm/storageBrowser/managedAuthConfigAdapter/createListLocationsHandler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"createListLocationsHandler.mjs","sources":["../../../../src/storageBrowser/managedAuthConfigAdapter/createListLocationsHandler.ts"],"sourcesContent":["// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nimport { listCallerAccessGrants } from '../apis/listCallerAccessGrants';\nexport const createListLocationsHandler = (handlerInput) => {\n    return async function listLocations(input = {}) {\n        const result = await listCallerAccessGrants({ ...input, ...handlerInput });\n        return result;\n    };\n};\n"],"names":[],"mappings":";;AAAA;AACA;AAEY,MAAC,0BAA0B,GAAG,CAAC,YAAY,KAAK;AAC5D,IAAI,OAAO,eAAe,aAAa,CAAC,KAAK,GAAG,EAAE,EAAE;AACpD,QAAQ,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;AACnF,QAAQ,OAAO,MAAM,CAAC;AACtB,KAAK,CAAC;AACN;;;;"}

package/dist/esm/storageBrowser/managedAuthConfigAdapter/createLocationCredentialsHandler.d.ts

@@ -0,0 +1,8 @@
+import { CredentialsProvider, GetLocationCredentials } from '../types';
+interface CreateLocationCredentialsHandlerInput {
+    accountId: string;
+    credentialsProvider: CredentialsProvider;
+    region: string;
+}
+export declare const createLocationCredentialsHandler: (handlerInput: CreateLocationCredentialsHandlerInput) => GetLocationCredentials;
+export {};