@cdklabs/cdk-ssm-documents 0.0.73 → 0.0.75

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/client/util-endpoints/lib/aws/partitions.d.ts

@@ -149,15 +149,6 @@ export declare const partitionsInfo: {
         };
         regionRegex: string;
         regions: {
-          "aws-cn-global": {
-            description: string;
-          };
-          "cn-north-1": {
-            description: string;
-          };
-          "cn-northwest-1": {
-            description: string;
-          };
           "af-south-1"?: undefined;
           "ap-east-1"?: undefined;
           "ap-east-2"?: undefined;
@@ -193,6 +184,15 @@ export declare const partitionsInfo: {
           "us-east-2"?: undefined;
           "us-west-1"?: undefined;
           "us-west-2"?: undefined;
+          "aws-cn-global": {
+            description: string;
+          };
+          "cn-north-1": {
+            description: string;
+          };
+          "cn-northwest-1": {
+            description: string;
+          };
           "eusc-de-east-1"?: undefined;
           "aws-iso-global"?: undefined;
           "us-iso-east-1"?: undefined;
@@ -222,9 +222,6 @@ export declare const partitionsInfo: {
         };
         regionRegex: string;
         regions: {
-          "eusc-de-east-1": {
-            description: string;
-          };
           "af-south-1"?: undefined;
           "ap-east-1"?: undefined;
           "ap-east-2"?: undefined;
@@ -263,6 +260,9 @@ export declare const partitionsInfo: {
           "aws-cn-global"?: undefined;
           "cn-north-1"?: undefined;
           "cn-northwest-1"?: undefined;
+          "eusc-de-east-1": {
+            description: string;
+          };
           "aws-iso-global"?: undefined;
           "us-iso-east-1"?: undefined;
           "us-iso-west-1"?: undefined;
@@ -291,15 +291,6 @@ export declare const partitionsInfo: {
         };
         regionRegex: string;
         regions: {
-          "aws-iso-global": {
-            description: string;
-          };
-          "us-iso-east-1": {
-            description: string;
-          };
-          "us-iso-west-1": {
-            description: string;
-          };
           "af-south-1"?: undefined;
           "ap-east-1"?: undefined;
           "ap-east-2"?: undefined;
@@ -339,6 +330,15 @@ export declare const partitionsInfo: {
           "cn-north-1"?: undefined;
           "cn-northwest-1"?: undefined;
           "eusc-de-east-1"?: undefined;
+          "aws-iso-global": {
+            description: string;
+          };
+          "us-iso-east-1": {
+            description: string;
+          };
+          "us-iso-west-1": {
+            description: string;
+          };
           "aws-iso-b-global"?: undefined;
           "us-isob-east-1"?: undefined;
           "us-isob-west-1"?: undefined;
@@ -364,15 +364,6 @@ export declare const partitionsInfo: {
         };
         regionRegex: string;
         regions: {
-          "aws-iso-b-global": {
-            description: string;
-          };
-          "us-isob-east-1": {
-            description: string;
-          };
-          "us-isob-west-1": {
-            description: string;
-          };
           "af-south-1"?: undefined;
           "ap-east-1"?: undefined;
           "ap-east-2"?: undefined;
@@ -415,6 +406,15 @@ export declare const partitionsInfo: {
           "aws-iso-global"?: undefined;
           "us-iso-east-1"?: undefined;
           "us-iso-west-1"?: undefined;
+          "aws-iso-b-global": {
+            description: string;
+          };
+          "us-isob-east-1": {
+            description: string;
+          };
+          "us-isob-west-1": {
+            description: string;
+          };
           "aws-iso-e-global"?: undefined;
           "eu-isoe-west-1"?: undefined;
           "aws-iso-f-global"?: undefined;
@@ -437,12 +437,6 @@ export declare const partitionsInfo: {
         };
         regionRegex: string;
         regions: {
-          "aws-iso-e-global": {
-            description: string;
-          };
-          "eu-isoe-west-1": {
-            description: string;
-          };
           "af-south-1"?: undefined;
           "ap-east-1"?: undefined;
           "ap-east-2"?: undefined;
@@ -488,6 +482,12 @@ export declare const partitionsInfo: {
           "aws-iso-b-global"?: undefined;
           "us-isob-east-1"?: undefined;
           "us-isob-west-1"?: undefined;
+          "aws-iso-e-global": {
+            description: string;
+          };
+          "eu-isoe-west-1": {
+            description: string;
+          };
           "aws-iso-f-global"?: undefined;
           "us-isof-east-1"?: undefined;
           "us-isof-south-1"?: undefined;
@@ -508,15 +508,6 @@ export declare const partitionsInfo: {
         };
         regionRegex: string;
         regions: {
-          "aws-iso-f-global": {
-            description: string;
-          };
-          "us-isof-east-1": {
-            description: string;
-          };
-          "us-isof-south-1": {
-            description: string;
-          };
           "af-south-1"?: undefined;
           "ap-east-1"?: undefined;
           "ap-east-2"?: undefined;
@@ -564,6 +555,15 @@ export declare const partitionsInfo: {
           "us-isob-west-1"?: undefined;
           "aws-iso-e-global"?: undefined;
           "eu-isoe-west-1"?: undefined;
+          "aws-iso-f-global": {
+            description: string;
+          };
+          "us-isof-east-1": {
+            description: string;
+          };
+          "us-isof-south-1": {
+            description: string;
+          };
           "aws-us-gov-global"?: undefined;
           "us-gov-east-1"?: undefined;
           "us-gov-west-1"?: undefined;
@@ -581,15 +581,6 @@ export declare const partitionsInfo: {
         };
         regionRegex: string;
         regions: {
-          "aws-us-gov-global": {
-            description: string;
-          };
-          "us-gov-east-1": {
-            description: string;
-          };
-          "us-gov-west-1": {
-            description: string;
-          };
           "af-south-1"?: undefined;
           "ap-east-1"?: undefined;
           "ap-east-2"?: undefined;
@@ -640,6 +631,15 @@ export declare const partitionsInfo: {
           "aws-iso-f-global"?: undefined;
           "us-isof-east-1"?: undefined;
           "us-isof-south-1"?: undefined;
+          "aws-us-gov-global": {
+            description: string;
+          };
+          "us-gov-east-1": {
+            description: string;
+          };
+          "us-gov-west-1": {
+            description: string;
+          };
         };
       }
   )[];

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/client/util-user-agent-browser/defaultUserAgent.d.ts

@@ -12,7 +12,4 @@ export declare const fallback: {
   os(ua: string): string | undefined;
   browser(ua: string): string | undefined;
 };
-export declare const defaultUserAgent: ({
-  serviceId,
-  clientVersion,
-}: DefaultUserAgentOptions) => (config?: PreviouslyResolved) => Promise<UserAgent>;
+export declare const defaultUserAgent: typeof createDefaultUserAgentProvider;

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/client/util-user-agent-browser/defaultUserAgent.native.d.ts

@@ -7,7 +7,4 @@ export declare const createDefaultUserAgentProvider: ({
   serviceId,
   clientVersion,
 }: DefaultUserAgentOptions) => (config?: PreviouslyResolved) => Promise<UserAgent>;
-export declare const defaultUserAgent: ({
-  serviceId,
-  clientVersion,
-}: DefaultUserAgentOptions) => (config?: PreviouslyResolved) => Promise<UserAgent>;
+export declare const defaultUserAgent: typeof createDefaultUserAgentProvider;

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/client/util-user-agent-node/defaultUserAgent.d.ts

@@ -11,7 +11,4 @@ export declare const createDefaultUserAgentProvider: ({
   serviceId,
   clientVersion,
 }: DefaultUserAgentOptions) => (config?: PreviouslyResolved) => Promise<UserAgent>;
-export declare const defaultUserAgent: ({
-  serviceId,
-  clientVersion,
-}: DefaultUserAgentOptions) => (config?: PreviouslyResolved) => Promise<UserAgent>;
+export declare const defaultUserAgent: typeof createDefaultUserAgentProvider;

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/protocols/json/AwsJson1_0Protocol.d.ts

@@ -1,6 +1,7 @@
 import { TypeRegistry } from "@smithy/core/schema";
 import { AwsJsonRpcProtocol } from "./AwsJsonRpcProtocol";
 import { JsonCodec } from "./codec-v1/JsonCodec";
+import { JsonCodec2 } from "./codec-v2/JsonCodec2";
 export declare class AwsJson1_0Protocol extends AwsJsonRpcProtocol {
   constructor({
     defaultNamespace,
@@ -13,7 +14,7 @@ export declare class AwsJson1_0Protocol extends AwsJsonRpcProtocol {
     errorTypeRegistries?: TypeRegistry[];
     serviceTarget: string;
     awsQueryCompatible?: boolean;
-    jsonCodec?: JsonCodec;
+    jsonCodec?: JsonCodec | JsonCodec2;
   });
   getShapeId(): string;
   protected getJsonRpcVersion(): "1.0";

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/protocols/json/AwsJson1_1Protocol.d.ts

@@ -1,6 +1,7 @@
 import { TypeRegistry } from "@smithy/core/schema";
 import { AwsJsonRpcProtocol } from "./AwsJsonRpcProtocol";
 import { JsonCodec } from "./codec-v1/JsonCodec";
+import { JsonCodec2 } from "./codec-v2/JsonCodec2";
 export declare class AwsJson1_1Protocol extends AwsJsonRpcProtocol {
   constructor({
     defaultNamespace,
@@ -13,7 +14,7 @@ export declare class AwsJson1_1Protocol extends AwsJsonRpcProtocol {
     errorTypeRegistries?: TypeRegistry[];
     serviceTarget: string;
     awsQueryCompatible?: boolean;
-    jsonCodec?: JsonCodec;
+    jsonCodec?: JsonCodec | JsonCodec2;
   });
   getShapeId(): string;
   protected getJsonRpcVersion(): "1.1";

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/protocols/json/AwsJsonRpcProtocol.d.ts

@@ -12,6 +12,7 @@ import {
   ShapeSerializer,
 } from "@smithy/types";
 import { JsonCodec } from "./codec-v1/JsonCodec";
+import { JsonCodec2 } from "./codec-v2/JsonCodec2";
 export declare abstract class AwsJsonRpcProtocol extends RpcProtocol {
   protected serializer: ShapeSerializer<string | Uint8Array>;
   protected deserializer: ShapeDeserializer<string | Uint8Array>;
@@ -30,14 +31,14 @@ export declare abstract class AwsJsonRpcProtocol extends RpcProtocol {
     errorTypeRegistries?: TypeRegistry[];
     serviceTarget: string;
     awsQueryCompatible?: boolean;
-    jsonCodec?: JsonCodec;
+    jsonCodec?: JsonCodec | JsonCodec2;
   });
   serializeRequest<Input extends object>(
     operationSchema: OperationSchema,
     input: Input,
     context: HandlerExecutionContext & SerdeFunctions & EndpointBearer,
   ): Promise<HttpRequest>;
-  getPayloadCodec(): JsonCodec;
+  getPayloadCodec(): JsonCodec | JsonCodec2;
   protected abstract getJsonRpcVersion(): "1.1" | "1.0";
   protected handleError(
     operationSchema: OperationSchema,

package/node_modules/@aws-sdk/core/dist-types/ts3.4/submodules/protocols/json/AwsRestJsonProtocol.d.ts

@@ -13,6 +13,7 @@ import {
   ShapeSerializer,
 } from "@smithy/types";
 import { JsonCodec } from "./codec-v1/JsonCodec";
+import { JsonCodec2 } from "./codec-v2/JsonCodec2";
 export declare class AwsRestJsonProtocol extends HttpBindingProtocol {
   protected serializer: ShapeSerializer<string | Uint8Array>;
   protected deserializer: ShapeDeserializer<string | Uint8Array>;
@@ -21,12 +22,14 @@ export declare class AwsRestJsonProtocol extends HttpBindingProtocol {
   constructor({
     defaultNamespace,
     errorTypeRegistries,
+    jsonCodec,
   }: {
     defaultNamespace: string;
     errorTypeRegistries?: TypeRegistry[];
+    jsonCodec?: JsonCodec | JsonCodec2;
   });
   getShapeId(): string;
-  getPayloadCodec(): JsonCodec;
+  getPayloadCodec(): JsonCodec | JsonCodec2;
   setSerdeContext(serdeContext: SerdeFunctions): void;
   serializeRequest<Input extends object>(
     operationSchema: OperationSchema,

package/node_modules/@aws-sdk/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/core",
-  "version": "3.977.4",
+  "version": "3.977.9",
   "description": "Core functions & classes shared by multiple AWS SDK clients.",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/packages-internal/core",
   "license": "Apache-2.0",
@@ -124,12 +124,12 @@
     "test:temp:retry": "SMITHY_NEW_RETRIES_2026=true node ./integ/retry.integ.spec && AWS_NEW_RETRIES_2026=true node ./integ/retry.integ.spec && node ./integ/retry.integ.spec"
   },
   "dependencies": {
-    "@aws-sdk/types": "^3.974.2",
-    "@aws-sdk/xml-builder": "^3.972.37",
+    "@aws-sdk/types": "^3.974.5",
+    "@aws-sdk/xml-builder": "^3.972.40",
     "@aws/lambda-invoke-store": "^0.3.0",
-    "@smithy/core": "^3.31.1",
+    "@smithy/core": "^3.33.3",
     "@smithy/signature-v4": "^5.6.12",
-    "@smithy/types": "^4.16.1",
+    "@smithy/types": "^4.17.2",
     "bowser": "^2.11.0",
     "tslib": "^2.6.2"
   },
@@ -138,7 +138,7 @@
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "premove": "4.0.0",
-    "typescript": "~5.8.3"
+    "typescript": "~7.0.2"
   },
   "engines": {
     "node": ">=20.0.0"

package/node_modules/@aws-sdk/credential-provider-env/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-env",
-  "version": "3.972.65",
+  "version": "3.972.70",
   "description": "AWS credential provider that sources credentials from known environment variables",
   "keywords": [
     "aws",
@@ -43,10 +43,10 @@
     "test:watch": "yarn g:vitest watch"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.977.4",
-    "@aws-sdk/types": "^3.974.2",
-    "@smithy/core": "^3.31.1",
-    "@smithy/types": "^4.16.1",
+    "@aws-sdk/core": "^3.977.9",
+    "@aws-sdk/types": "^3.974.5",
+    "@smithy/core": "^3.33.3",
+    "@smithy/types": "^4.17.2",
     "tslib": "^2.6.2"
   },
   "devDependencies": {
@@ -55,7 +55,7 @@
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "premove": "4.0.0",
-    "typescript": "~5.8.3"
+    "typescript": "~7.0.2"
   },
   "engines": {
     "node": ">=20.0.0"

package/node_modules/@aws-sdk/credential-provider-http/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-http",
-  "version": "3.972.67",
+  "version": "3.972.72",
   "description": "AWS credential provider for containers and HTTP sources",
   "keywords": [
     "aws",
@@ -53,12 +53,12 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.977.4",
-    "@aws-sdk/types": "^3.974.2",
-    "@smithy/core": "^3.31.1",
-    "@smithy/fetch-http-handler": "^5.6.13",
-    "@smithy/node-http-handler": "^4.9.13",
-    "@smithy/types": "^4.16.1",
+    "@aws-sdk/core": "^3.977.9",
+    "@aws-sdk/types": "^3.974.5",
+    "@smithy/core": "^3.33.3",
+    "@smithy/fetch-http-handler": "^5.7.2",
+    "@smithy/node-http-handler": "^4.11.3",
+    "@smithy/types": "^4.17.2",
     "tslib": "^2.6.2"
   },
   "devDependencies": {
@@ -67,7 +67,7 @@
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "premove": "4.0.0",
-    "typescript": "~5.8.3"
+    "typescript": "~7.0.2"
   },
   "engines": {
     "node": ">=20.0.0"

package/node_modules/@aws-sdk/credential-provider-ini/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-ini",
-  "version": "3.973.10",
+  "version": "3.973.15",
   "description": "AWS credential provider that sources credentials from ~/.aws/credentials and ~/.aws/config",
   "keywords": [
     "aws",
@@ -45,18 +45,18 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.977.4",
-    "@aws-sdk/credential-provider-env": "^3.972.65",
-    "@aws-sdk/credential-provider-http": "^3.972.67",
-    "@aws-sdk/credential-provider-login": "^3.972.72",
-    "@aws-sdk/credential-provider-process": "^3.972.65",
-    "@aws-sdk/credential-provider-sso": "^3.973.9",
-    "@aws-sdk/credential-provider-web-identity": "^3.972.71",
-    "@aws-sdk/nested-clients": "^3.997.39",
-    "@aws-sdk/types": "^3.974.2",
-    "@smithy/core": "^3.31.1",
+    "@aws-sdk/core": "^3.977.9",
+    "@aws-sdk/credential-provider-env": "^3.972.70",
+    "@aws-sdk/credential-provider-http": "^3.972.72",
+    "@aws-sdk/credential-provider-login": "^3.972.77",
+    "@aws-sdk/credential-provider-process": "^3.972.70",
+    "@aws-sdk/credential-provider-sso": "^3.973.14",
+    "@aws-sdk/credential-provider-web-identity": "^3.972.76",
+    "@aws-sdk/nested-clients": "^3.997.44",
+    "@aws-sdk/types": "^3.974.5",
+    "@smithy/core": "^3.33.3",
     "@smithy/credential-provider-imds": "^4.4.16",
-    "@smithy/types": "^4.16.1",
+    "@smithy/types": "^4.17.2",
     "tslib": "^2.6.2"
   },
   "devDependencies": {
@@ -65,7 +65,7 @@
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "premove": "4.0.0",
-    "typescript": "~5.8.3"
+    "typescript": "~7.0.2"
   },
   "engines": {
     "node": ">=20.0.0"

package/node_modules/@aws-sdk/credential-provider-login/dist-cjs/index.js

@@ -1,5 +1,5 @@
 const { setCredentialFeature } = require("@aws-sdk/core/client");
-const { CredentialsProviderError, readFile, parseKnownFiles, getProfileName } = require("@smithy/core/config");
+const { CredentialsProviderError, parseKnownFiles, getProfileName } = require("@smithy/core/config");
 const { HttpRequest } = require("@smithy/core/protocols");
 const { createHash, createPrivateKey, createPublicKey, sign } = require("node:crypto");
 const { promises } = require("node:fs");
@@ -28,13 +28,7 @@ class LoginCredentialsFetcher {
         if (timeUntilExpiry <= LoginCredentialsFetcher.REFRESH_THRESHOLD) {
             return this.refresh(token);
         }
-        return {
-            accessKeyId: accessToken.accessKeyId,
-            secretAccessKey: accessToken.secretAccessKey,
-            sessionToken: accessToken.sessionToken,
-            accountId: accessToken.accountId,
-            expiration: new Date(accessToken.expiresAt),
-        };
+        return this.toCredentials(token.accessToken);
     }
     get logger() {
         return this.init?.logger;
@@ -42,7 +36,25 @@ class LoginCredentialsFetcher {
     get loginSession() {
         return this.profileData.login_session;
     }
+    toCredentials(token) {
+        return {
+            accessKeyId: token.accessKeyId,
+            secretAccessKey: token.secretAccessKey,
+            sessionToken: token.sessionToken,
+            accountId: token.accountId,
+            expiration: new Date(token.expiresAt),
+        };
+    }
     async refresh(token) {
+        const diskToken = await this.loadToken().catch(() => token);
+        const now = Date.now();
+        const diskExpiry = new Date(diskToken.accessToken.expiresAt).getTime();
+        const tokenExpiry = new Date(token.accessToken.expiresAt).getTime();
+        const freshToken = diskExpiry <= now && tokenExpiry > now ? token : diskToken;
+        const freshExpiry = new Date(freshToken.accessToken.expiresAt).getTime();
+        if (freshExpiry - Date.now() > LoginCredentialsFetcher.REFRESH_THRESHOLD) {
+            return this.toCredentials(freshToken.accessToken);
+        }
         const { SigninClient, CreateOAuth2TokenCommand } = require('@aws-sdk/nested-clients/signin');
         const { logger, userAgentAppId } = this.callerClientConfig ?? {};
         const isH2 = (requestHandler) => {
@@ -66,8 +78,8 @@ class LoginCredentialsFetcher {
         this.createDPoPInterceptor(client.middlewareStack);
         const commandInput = {
             tokenInput: {
-                clientId: token.clientId,
-                refreshToken: token.refreshToken,
+                clientId: freshToken.clientId,
+                refreshToken: freshToken.refreshToken,
                 grantType: "refresh_token",
             },
         };
@@ -84,9 +96,9 @@ class LoginCredentialsFetcher {
             const expiresInMs = (expiresIn ?? 900) * 1000;
             const expiration = new Date(Date.now() + expiresInMs);
             const updatedToken = {
-                ...token,
+                ...freshToken,
                 accessToken: {
-                    ...token.accessToken,
+                    ...freshToken.accessToken,
                     accessKeyId,
                     secretAccessKey,
                     sessionToken,
@@ -95,14 +107,7 @@ class LoginCredentialsFetcher {
                 refreshToken,
             };
             await this.saveToken(updatedToken);
-            const newAccessToken = updatedToken.accessToken;
-            return {
-                accessKeyId: newAccessToken.accessKeyId,
-                secretAccessKey: newAccessToken.secretAccessKey,
-                sessionToken: newAccessToken.sessionToken,
-                accountId: newAccessToken.accountId,
-                expiration,
-            };
+            return this.toCredentials(updatedToken.accessToken);
         }
         catch (error) {
             if (error.name === "AccessDeniedException") {
@@ -123,7 +128,15 @@ class LoginCredentialsFetcher {
                     default:
                         message = `Failed to refresh token: ${String(error)}. Please re-authenticate using \`aws login\``;
                 }
-                throw new CredentialsProviderError(message, { logger: this.logger, tryNextLink: false });
+                throw new CredentialsProviderError(message, {
+                    logger: this.logger,
+                    tryNextLink: false,
+                });
+            }
+            const tokenExpiry = new Date(freshToken.accessToken.expiresAt).getTime();
+            if (tokenExpiry > Date.now()) {
+                this.logger?.warn?.(`Failed to refresh token: ${String(error)}. Using existing token until expiry.`);
+                return this.toCredentials(freshToken.accessToken);
             }
             throw new CredentialsProviderError(`Failed to refresh token: ${String(error)}. Please re-authenticate using aws login`, { logger: this.logger });
         }
@@ -131,13 +144,7 @@ class LoginCredentialsFetcher {
     async loadToken() {
         const tokenFilePath = this.getTokenFilePath();
         try {
-            let tokenData;
-            try {
-                tokenData = await readFile(tokenFilePath, { ignoreCache: this.init?.ignoreCache });
-            }
-            catch {
-                tokenData = await promises.readFile(tokenFilePath, "utf8");
-            }
+            const tokenData = await promises.readFile(tokenFilePath, "utf8");
             const token = JSON.parse(tokenData);
             const missingFields = ["accessToken", "clientId", "refreshToken", "dpopKey"].filter((k) => !token[k]);
             if (!token.accessToken?.accountId) {