@code-yeongyu/senpi 2026.8.20-2 → 2026.8.20

package/node_modules/@aws-sdk/credential-provider-http/node_modules/@smithy/node-http-handler/dist-types/ts3.4/node-http2-connection-manager.d.ts

@@ -0,0 +1,46 @@
+import { ClientSessionOptions, SecureClientSessionOptions } from "node:http2";
+import { ConnectConfiguration, ConnectionManager, ConnectionManagerConfiguration, RequestContext } from "@smithy/types";
+import { ClientHttp2SessionRef } from "./http2/ClientHttp2SessionRef";
+/**
+ * This class previously implemented the ConnectionManager<ClientHttp2Session> interface,
+ * but this class isn't exported from this package, except as a private property of NodeHttp2Handler.
+ *
+ * @since 4.6.0
+ * @internal
+ */
+export declare class NodeHttp2ConnectionManager implements ConnectionManager<ClientHttp2SessionRef> {
+    private config;
+    private connectOptions?;
+    private readonly connectionPools;
+    constructor(config: ConnectionManagerConfiguration);
+    /**
+     * Acquire a session for making a request.
+     */
+    lease(requestContext: RequestContext, connectionConfiguration: ConnectConfiguration): ClientHttp2SessionRef;
+    /**
+     * Signal that a request using this session has completed.
+     *
+     * The session remains in its pool for reuse.
+     * This method is not called for isolated sessions.
+     */
+    release(_requestContext: RequestContext, ref: ClientHttp2SessionRef): void;
+    /**
+     * Create an isolated session that isn't part of the connection pools.
+     * For use in event-streams or when concurrency is turned off.
+     */
+    createIsolatedSession(requestContext: RequestContext, connectionConfiguration: ConnectConfiguration): ClientHttp2SessionRef;
+    destroy(): void;
+    setMaxConcurrentStreams(maxConcurrentStreams: number): void;
+    setDisableConcurrentStreams(disableConcurrentStreams: boolean): void;
+    setNodeHttp2ConnectOptions(nodeHttp2ConnectOptions: Partial<SecureClientSessionOptions | ClientSessionOptions>): void;
+    /**
+     * @internal
+     * @returns a snapshot of the state of all connection pools and their sessions.
+     */
+    debug(): Record<string, any>;
+    private removeFromPoolAndClose;
+    private removeFromPoolAndCheckedDestroy;
+    private getPool;
+    private getUrlString;
+    private connect;
+}

package/node_modules/@aws-sdk/credential-provider-http/node_modules/@smithy/node-http-handler/dist-types/ts3.4/node-http2-connection-pool.d.ts

@@ -0,0 +1,36 @@
+import { ClientHttp2Session } from "node:http2";
+import { ConnectionPool } from "@smithy/types";
+import { ClientHttp2SessionRef } from "./http2/ClientHttp2SessionRef";
+/**
+ * These are keyed by URL, therefore all sessions within this class' state
+ * are for the same URL.
+ *
+ * Sessions remain in the pool for their entire lifetime (until destroyed or
+ * removed). The pool tracks capacity via each session's ref count.
+ *
+ * Interface implementation changed from ConnectionPool<ClientHttp2Session>.
+ * @since 4.6.0
+ * @internal
+ */
+export declare class NodeHttp2ConnectionPool implements ConnectionPool<ClientHttp2SessionRef> {
+    private readonly sessions;
+    private maxConcurrency;
+    constructor(sessions?: ClientHttp2Session[]);
+    /**
+     * Find a session with available capacity (refs < maxConcurrency).
+     * Returns undefined if all sessions are at capacity or the pool is empty.
+     */
+    poll(): ClientHttp2SessionRef | undefined;
+    /**
+     * Add a session to the pool.
+     */
+    offerLast(ref: ClientHttp2SessionRef): void;
+    remove(ref: ClientHttp2SessionRef): void;
+    [Symbol.iterator](): ArrayIterator<ClientHttp2SessionRef>;
+    setMaxConcurrency(maxConcurrency: number): void;
+    /**
+     * This is unused, but part of the interface.
+     * @deprecated
+     */
+    destroy(ref: ClientHttp2SessionRef): void;
+}

package/node_modules/@aws-sdk/credential-provider-http/node_modules/@smithy/node-http-handler/dist-types/ts3.4/node-http2-handler.d.ts

@@ -0,0 +1,76 @@
+import { ClientSessionOptions, SecureClientSessionOptions } from "node:http2";
+import { HttpResponse, HttpHandler, HttpRequest } from "@smithy/core/protocols";
+import { HttpHandlerOptions, Provider } from "@smithy/types";
+/**
+ * Represents the http2 options that can be passed to a node http2 client.
+ * @public
+ */
+export interface NodeHttp2HandlerOptions {
+    /**
+     * The maximum time in milliseconds that a stream may remain idle before it
+     * is closed.
+     */
+    requestTimeout?: number;
+    /**
+     * The maximum time in milliseconds that a session or socket may remain idle
+     * before it is closed.
+     * https://nodejs.org/docs/latest-v12.x/api/http2.html#http2_http2session_and_sockets
+     */
+    sessionTimeout?: number;
+    /**
+     * Disables processing concurrent streams on a ClientHttp2Session instance. When set
+     * to true, a new session instance is created for each request to a URL.
+     * **Default:** false.
+     * https://nodejs.org/api/http2.html#http2_class_clienthttp2session
+     */
+    disableConcurrentStreams?: boolean;
+    /**
+     * Maximum number of concurrent Http2Stream instances per ClientHttp2Session. Each session
+     * may have up to 2^31-1 Http2Stream instances over its lifetime.
+     * This value must be greater than or equal to 0.
+     * https://nodejs.org/api/http2.html#class-http2stream
+     */
+    maxConcurrentStreams?: number;
+    /**
+     * A set of raw options that will be passed to http2.connect.
+     * https://nodejs.org/api/http2.html#http2connectauthority-options-listener
+     */
+    nodeHttp2ConnectOptions?: Partial<SecureClientSessionOptions | ClientSessionOptions>;
+}
+/**
+ * This is derived from the smithyContext object. This signals to the NodeHttp2Handler specifically
+ * that the connection pool should not be used to acquire a connection. The event stream should
+ * have its own new connection.
+ *
+ * This does not apply to WebSocket event streams, since there is no pooling.
+ *
+ * @internal
+ */
+type EventStreamSignal = {
+    isEventStream?: boolean;
+};
+/**
+ * A request handler using the node:http2 package.
+ * @public
+ */
+export declare class NodeHttp2Handler implements HttpHandler<NodeHttp2HandlerOptions> {
+    private config?;
+    private configProvider;
+    readonly metadata: {
+        handlerProtocol: string;
+    };
+    private readonly connectionManager;
+    /**
+     * @returns the input if it is an HttpHandler of any class,
+     * or instantiates a new instance of this handler.
+     */
+    static create(instanceOrOptions?: HttpHandler<any> | NodeHttp2HandlerOptions | Provider<NodeHttp2HandlerOptions | void>): HttpHandler<any> | NodeHttp2Handler;
+    constructor(options?: NodeHttp2HandlerOptions | Provider<NodeHttp2HandlerOptions | void>);
+    destroy(): void;
+    handle(request: HttpRequest, { abortSignal, requestTimeout, isEventStream }?: HttpHandlerOptions & EventStreamSignal): Promise<{
+        response: HttpResponse;
+    }>;
+    updateHttpClientConfig(key: keyof NodeHttp2HandlerOptions, value: NodeHttp2HandlerOptions[typeof key]): void;
+    httpHandlerConfigs(): NodeHttp2HandlerOptions;
+}
+export {};

package/node_modules/@aws-sdk/credential-provider-http/node_modules/@smithy/node-http-handler/dist-types/ts3.4/node-http2.d.ts

@@ -0,0 +1,2 @@
+import node_http2 from "node:http2";
+export { node_http2 };

package/node_modules/@aws-sdk/credential-provider-http/node_modules/@smithy/node-http-handler/dist-types/ts3.4/node-https.d.ts

@@ -0,0 +1,2 @@
+import node_https from "node:https";
+export { node_https };

package/node_modules/@aws-sdk/credential-provider-http/node_modules/@smithy/node-http-handler/dist-types/ts3.4/set-connection-timeout.d.ts

@@ -0,0 +1,2 @@
+import { ClientRequest } from "node:http";
+export declare const setConnectionTimeout: (request: ClientRequest, reject: (err: Error) => void, timeoutInMs?: number) => NodeJS.Timeout | number;

package/node_modules/@aws-sdk/credential-provider-http/node_modules/@smithy/node-http-handler/dist-types/ts3.4/set-request-timeout.d.ts

@@ -0,0 +1,6 @@
+import { ClientRequest } from "node:http";
+import { Logger } from "@smithy/types";
+/**
+ * @internal
+ */
+export declare const setRequestTimeout: (req: ClientRequest, reject: (err: Error) => void, timeoutInMs?: number, throwOnRequestTimeout?: boolean, logger?: Logger) => number;

package/node_modules/@aws-sdk/credential-provider-http/node_modules/@smithy/node-http-handler/dist-types/ts3.4/set-socket-keep-alive.d.ts

@@ -0,0 +1,6 @@
+import { ClientRequest } from "node:http";
+export interface SocketKeepAliveOptions {
+    keepAlive: boolean;
+    keepAliveMsecs?: number;
+}
+export declare const setSocketKeepAlive: (request: ClientRequest, { keepAlive, keepAliveMsecs }: SocketKeepAliveOptions, deferTimeMs?: number) => NodeJS.Timeout | number;

package/node_modules/@aws-sdk/credential-provider-http/node_modules/@smithy/node-http-handler/dist-types/ts3.4/set-socket-timeout.d.ts

@@ -0,0 +1,2 @@
+import { ClientRequest } from "node:http";
+export declare const setSocketTimeout: (request: ClientRequest, reject: (err: Error) => void, timeoutInMs?: number) => NodeJS.Timeout | number;

package/node_modules/@aws-sdk/credential-provider-http/node_modules/@smithy/node-http-handler/dist-types/ts3.4/timing.d.ts

@@ -0,0 +1,9 @@
+/**
+ * For test spies.
+ *
+ * @internal
+ */
+export declare const timing: {
+    setTimeout: (cb: (...ignored: any[]) => void | unknown, ms?: number) => number;
+    clearTimeout: (timeoutId: string | number | undefined | unknown) => void;
+};

package/node_modules/@aws-sdk/credential-provider-http/node_modules/@smithy/node-http-handler/dist-types/ts3.4/write-request-body.d.ts

@@ -0,0 +1,12 @@
+import { ClientHttp2Stream } from "node:http2";
+import { ClientRequest } from "node:http";
+import { HttpRequest } from "@smithy/types";
+/**
+ * This resolves when writeBody has been called.
+ *
+ * @param httpRequest - opened Node.js request.
+ * @param request - container with the request body.
+ * @param maxContinueTimeoutMs - time to wait for the continue event.
+ * @param externalAgent - whether agent is owned by caller code.
+ */
+export declare function writeRequestBody(httpRequest: ClientRequest | ClientHttp2Stream, request: HttpRequest, maxContinueTimeoutMs?: number, externalAgent?: boolean): Promise<void>;

package/node_modules/@aws-sdk/credential-provider-http/node_modules/@smithy/node-http-handler/dist-types/write-request-body.d.ts

@@ -0,0 +1,12 @@
+import type { ClientHttp2Stream } from "node:http2";
+import type { ClientRequest } from "node:http";
+import type { HttpRequest } from "@smithy/types";
+/**
+ * This resolves when writeBody has been called.
+ *
+ * @param httpRequest - opened Node.js request.
+ * @param request - container with the request body.
+ * @param maxContinueTimeoutMs - time to wait for the continue event.
+ * @param externalAgent - whether agent is owned by caller code.
+ */
+export declare function writeRequestBody(httpRequest: ClientRequest | ClientHttp2Stream, request: HttpRequest, maxContinueTimeoutMs?: number, externalAgent?: boolean): Promise<void>;

package/node_modules/@aws-sdk/credential-provider-http/node_modules/@smithy/node-http-handler/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "@smithy/node-http-handler",
+  "version": "4.9.11",
+  "description": "Provides a way to make requests",
+  "homepage": "https://github.com/smithy-lang/smithy-typescript/tree/main/packages/node-http-handler",
+  "license": "Apache-2.0",
+  "author": {
+    "name": "AWS SDK for JavaScript Team",
+    "email": "",
+    "url": "https://aws.amazon.com/sdk-for-javascript/"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/smithy-lang/smithy-typescript.git",
+    "directory": "packages/node-http-handler"
+  },
+  "files": [
+    "dist-*/**"
+  ],
+  "sideEffects": false,
+  "main": "./dist-cjs/index.js",
+  "module": "./dist-es/index.js",
+  "types": "./dist-types/index.d.ts",
+  "typesVersions": {
+    "<4.5": {
+      "dist-types/*": [
+        "dist-types/ts3.4/*"
+      ]
+    }
+  },
+  "publishConfig": {
+    "directory": ".release/package"
+  },
+  "scripts": {
+    "build": "concurrently 'yarn:build:types' 'yarn:build:es:cjs'",
+    "build:es:cjs": "node ../../scripts/compilation/es_cjs.js",
+    "build:types": "premove dist-types && yarn g:tsc -p tsconfig.types.json",
+    "build:types:downlevel": "premove dist-types/ts3.4 && downlevel-dts dist-types dist-types/ts3.4",
+    "clean": "premove dist-cjs dist-es dist-types",
+    "extract:docs": "api-extractor run --local",
+    "stage-release": "premove .release && yarn pack && mkdir ./.release && tar zxvf ./package.tgz --directory ./.release && rm ./package.tgz",
+    "test": "yarn g:vitest run",
+    "test:watch": "yarn g:vitest watch"
+  },
+  "dependencies": {
+    "@smithy/core": "^3.30.0",
+    "@smithy/types": "^4.16.1",
+    "tslib": "^2.6.2"
+  },
+  "devDependencies": {
+    "@smithy/abort-controller": "^4.3.3",
+    "@types/node": "^18.11.9",
+    "concurrently": "7.0.0",
+    "downlevel-dts": "0.10.1",
+    "premove": "4.0.0",
+    "typedoc": "0.23.23"
+  },
+  "typedoc": {
+    "entryPoint": "src/index.ts"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}

package/node_modules/@aws-sdk/credential-provider-http/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-http",
-  "version": "3.972.71",
+  "version": "3.972.63",
   "description": "AWS credential provider for containers and HTTP sources",
   "keywords": [
     "aws",
@@ -53,11 +53,11 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.977.8",
-    "@aws-sdk/types": "^3.974.4",
-    "@smithy/core": "^3.31.1",
-    "@smithy/fetch-http-handler": "^5.6.13",
-    "@smithy/node-http-handler": "^4.9.13",
+    "@aws-sdk/core": "^3.977.0",
+    "@aws-sdk/types": "^3.974.2",
+    "@smithy/core": "^3.29.8",
+    "@smithy/fetch-http-handler": "^5.6.10",
+    "@smithy/node-http-handler": "^4.9.10",
     "@smithy/types": "^4.16.1",
     "tslib": "^2.6.2"
   },
@@ -67,7 +67,7 @@
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "premove": "4.0.0",
-    "typescript": "~7.0.2"
+    "typescript": "~5.8.3"
   },
   "engines": {
     "node": ">=20.0.0"

package/node_modules/@aws-sdk/credential-provider-ini/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-ini",
-  "version": "3.973.14",
+  "version": "3.973.6",
   "description": "AWS credential provider that sources credentials from ~/.aws/credentials and ~/.aws/config",
   "keywords": [
     "aws",
@@ -45,17 +45,17 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.977.8",
-    "@aws-sdk/credential-provider-env": "^3.972.69",
-    "@aws-sdk/credential-provider-http": "^3.972.71",
-    "@aws-sdk/credential-provider-login": "^3.972.76",
-    "@aws-sdk/credential-provider-process": "^3.972.69",
-    "@aws-sdk/credential-provider-sso": "^3.973.13",
-    "@aws-sdk/credential-provider-web-identity": "^3.972.75",
-    "@aws-sdk/nested-clients": "^3.997.43",
-    "@aws-sdk/types": "^3.974.4",
-    "@smithy/core": "^3.31.1",
-    "@smithy/credential-provider-imds": "^4.4.16",
+    "@aws-sdk/core": "^3.977.0",
+    "@aws-sdk/credential-provider-env": "^3.972.61",
+    "@aws-sdk/credential-provider-http": "^3.972.63",
+    "@aws-sdk/credential-provider-login": "^3.972.68",
+    "@aws-sdk/credential-provider-process": "^3.972.61",
+    "@aws-sdk/credential-provider-sso": "^3.973.5",
+    "@aws-sdk/credential-provider-web-identity": "^3.972.67",
+    "@aws-sdk/nested-clients": "^3.997.35",
+    "@aws-sdk/types": "^3.974.2",
+    "@smithy/core": "^3.29.8",
+    "@smithy/credential-provider-imds": "^4.4.13",
     "@smithy/types": "^4.16.1",
     "tslib": "^2.6.2"
   },
@@ -65,7 +65,7 @@
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "premove": "4.0.0",
-    "typescript": "~7.0.2"
+    "typescript": "~5.8.3"
   },
   "engines": {
     "node": ">=20.0.0"

package/node_modules/@aws-sdk/credential-provider-login/dist-cjs/index.js

@@ -1,5 +1,5 @@
 const { setCredentialFeature } = require("@aws-sdk/core/client");
-const { CredentialsProviderError, parseKnownFiles, getProfileName } = require("@smithy/core/config");
+const { CredentialsProviderError, readFile, parseKnownFiles, getProfileName } = require("@smithy/core/config");
 const { HttpRequest } = require("@smithy/core/protocols");
 const { createHash, createPrivateKey, createPublicKey, sign } = require("node:crypto");
 const { promises } = require("node:fs");
@@ -28,7 +28,13 @@ class LoginCredentialsFetcher {
         if (timeUntilExpiry <= LoginCredentialsFetcher.REFRESH_THRESHOLD) {
             return this.refresh(token);
         }
-        return this.toCredentials(token.accessToken);
+        return {
+            accessKeyId: accessToken.accessKeyId,
+            secretAccessKey: accessToken.secretAccessKey,
+            sessionToken: accessToken.sessionToken,
+            accountId: accessToken.accountId,
+            expiration: new Date(accessToken.expiresAt),
+        };
     }
     get logger() {
         return this.init?.logger;
@@ -36,25 +42,7 @@ class LoginCredentialsFetcher {
     get loginSession() {
         return this.profileData.login_session;
     }
-    toCredentials(token) {
-        return {
-            accessKeyId: token.accessKeyId,
-            secretAccessKey: token.secretAccessKey,
-            sessionToken: token.sessionToken,
-            accountId: token.accountId,
-            expiration: new Date(token.expiresAt),
-        };
-    }
     async refresh(token) {
-        const diskToken = await this.loadToken().catch(() => token);
-        const now = Date.now();
-        const diskExpiry = new Date(diskToken.accessToken.expiresAt).getTime();
-        const tokenExpiry = new Date(token.accessToken.expiresAt).getTime();
-        const freshToken = diskExpiry <= now && tokenExpiry > now ? token : diskToken;
-        const freshExpiry = new Date(freshToken.accessToken.expiresAt).getTime();
-        if (freshExpiry - Date.now() > LoginCredentialsFetcher.REFRESH_THRESHOLD) {
-            return this.toCredentials(freshToken.accessToken);
-        }
         const { SigninClient, CreateOAuth2TokenCommand } = require('@aws-sdk/nested-clients/signin');
         const { logger, userAgentAppId } = this.callerClientConfig ?? {};
         const isH2 = (requestHandler) => {
@@ -78,8 +66,8 @@ class LoginCredentialsFetcher {
         this.createDPoPInterceptor(client.middlewareStack);
         const commandInput = {
             tokenInput: {
-                clientId: freshToken.clientId,
-                refreshToken: freshToken.refreshToken,
+                clientId: token.clientId,
+                refreshToken: token.refreshToken,
                 grantType: "refresh_token",
             },
         };
@@ -96,9 +84,9 @@ class LoginCredentialsFetcher {
             const expiresInMs = (expiresIn ?? 900) * 1000;
             const expiration = new Date(Date.now() + expiresInMs);
             const updatedToken = {
-                ...freshToken,
+                ...token,
                 accessToken: {
-                    ...freshToken.accessToken,
+                    ...token.accessToken,
                     accessKeyId,
                     secretAccessKey,
                     sessionToken,
@@ -107,7 +95,14 @@ class LoginCredentialsFetcher {
                 refreshToken,
             };
             await this.saveToken(updatedToken);
-            return this.toCredentials(updatedToken.accessToken);
+            const newAccessToken = updatedToken.accessToken;
+            return {
+                accessKeyId: newAccessToken.accessKeyId,
+                secretAccessKey: newAccessToken.secretAccessKey,
+                sessionToken: newAccessToken.sessionToken,
+                accountId: newAccessToken.accountId,
+                expiration,
+            };
         }
         catch (error) {
             if (error.name === "AccessDeniedException") {
@@ -128,15 +123,7 @@ class LoginCredentialsFetcher {
                     default:
                         message = `Failed to refresh token: ${String(error)}. Please re-authenticate using \`aws login\``;
                 }
-                throw new CredentialsProviderError(message, {
-                    logger: this.logger,
-                    tryNextLink: false,
-                });
-            }
-            const tokenExpiry = new Date(freshToken.accessToken.expiresAt).getTime();
-            if (tokenExpiry > Date.now()) {
-                this.logger?.warn?.(`Failed to refresh token: ${String(error)}. Using existing token until expiry.`);
-                return this.toCredentials(freshToken.accessToken);
+                throw new CredentialsProviderError(message, { logger: this.logger, tryNextLink: false });
             }
             throw new CredentialsProviderError(`Failed to refresh token: ${String(error)}. Please re-authenticate using aws login`, { logger: this.logger });
         }
@@ -144,7 +131,13 @@ class LoginCredentialsFetcher {
     async loadToken() {
         const tokenFilePath = this.getTokenFilePath();
         try {
-            const tokenData = await promises.readFile(tokenFilePath, "utf8");
+            let tokenData;
+            try {
+                tokenData = await readFile(tokenFilePath, { ignoreCache: this.init?.ignoreCache });
+            }
+            catch {
+                tokenData = await promises.readFile(tokenFilePath, "utf8");
+            }
             const token = JSON.parse(tokenData);
             const missingFields = ["accessToken", "clientId", "refreshToken", "dpopKey"].filter((k) => !token[k]);
             if (!token.accessToken?.accountId) {

package/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js

@@ -1,4 +1,4 @@
-import { CredentialsProviderError } from "@smithy/core/config";
+import { CredentialsProviderError, readFile } from "@smithy/core/config";
 import { HttpRequest } from "@smithy/core/protocols";
 import { createHash, createPrivateKey, createPublicKey, sign } from "node:crypto";
 import { promises as fs } from "node:fs";
@@ -26,7 +26,13 @@ export class LoginCredentialsFetcher {
         if (timeUntilExpiry <= LoginCredentialsFetcher.REFRESH_THRESHOLD) {
             return this.refresh(token);
         }
-        return this.toCredentials(token.accessToken);
+        return {
+            accessKeyId: accessToken.accessKeyId,
+            secretAccessKey: accessToken.secretAccessKey,
+            sessionToken: accessToken.sessionToken,
+            accountId: accessToken.accountId,
+            expiration: new Date(accessToken.expiresAt),
+        };
     }
     get logger() {
         return this.init?.logger;
@@ -34,25 +40,7 @@ export class LoginCredentialsFetcher {
     get loginSession() {
         return this.profileData.login_session;
     }
-    toCredentials(token) {
-        return {
-            accessKeyId: token.accessKeyId,
-            secretAccessKey: token.secretAccessKey,
-            sessionToken: token.sessionToken,
-            accountId: token.accountId,
-            expiration: new Date(token.expiresAt),
-        };
-    }
     async refresh(token) {
-        const diskToken = await this.loadToken().catch(() => token);
-        const now = Date.now();
-        const diskExpiry = new Date(diskToken.accessToken.expiresAt).getTime();
-        const tokenExpiry = new Date(token.accessToken.expiresAt).getTime();
-        const freshToken = diskExpiry <= now && tokenExpiry > now ? token : diskToken;
-        const freshExpiry = new Date(freshToken.accessToken.expiresAt).getTime();
-        if (freshExpiry - Date.now() > LoginCredentialsFetcher.REFRESH_THRESHOLD) {
-            return this.toCredentials(freshToken.accessToken);
-        }
         const { SigninClient, CreateOAuth2TokenCommand } = await import("@aws-sdk/nested-clients/signin");
         const { logger, userAgentAppId } = this.callerClientConfig ?? {};
         const isH2 = (requestHandler) => {
@@ -76,8 +64,8 @@ export class LoginCredentialsFetcher {
         this.createDPoPInterceptor(client.middlewareStack);
         const commandInput = {
             tokenInput: {
-                clientId: freshToken.clientId,
-                refreshToken: freshToken.refreshToken,
+                clientId: token.clientId,
+                refreshToken: token.refreshToken,
                 grantType: "refresh_token",
             },
         };
@@ -94,9 +82,9 @@ export class LoginCredentialsFetcher {
             const expiresInMs = (expiresIn ?? 900) * 1000;
             const expiration = new Date(Date.now() + expiresInMs);
             const updatedToken = {
-                ...freshToken,
+                ...token,
                 accessToken: {
-                    ...freshToken.accessToken,
+                    ...token.accessToken,
                     accessKeyId,
                     secretAccessKey,
                     sessionToken,
@@ -105,7 +93,14 @@ export class LoginCredentialsFetcher {
                 refreshToken,
             };
             await this.saveToken(updatedToken);
-            return this.toCredentials(updatedToken.accessToken);
+            const newAccessToken = updatedToken.accessToken;
+            return {
+                accessKeyId: newAccessToken.accessKeyId,
+                secretAccessKey: newAccessToken.secretAccessKey,
+                sessionToken: newAccessToken.sessionToken,
+                accountId: newAccessToken.accountId,
+                expiration,
+            };
         }
         catch (error) {
             if (error.name === "AccessDeniedException") {
@@ -126,15 +121,7 @@ export class LoginCredentialsFetcher {
                     default:
                         message = `Failed to refresh token: ${String(error)}. Please re-authenticate using \`aws login\``;
                 }
-                throw new CredentialsProviderError(message, {
-                    logger: this.logger,
-                    tryNextLink: false,
-                });
-            }
-            const tokenExpiry = new Date(freshToken.accessToken.expiresAt).getTime();
-            if (tokenExpiry > Date.now()) {
-                this.logger?.warn?.(`Failed to refresh token: ${String(error)}. Using existing token until expiry.`);
-                return this.toCredentials(freshToken.accessToken);
+                throw new CredentialsProviderError(message, { logger: this.logger, tryNextLink: false });
             }
             throw new CredentialsProviderError(`Failed to refresh token: ${String(error)}. Please re-authenticate using aws login`, { logger: this.logger });
         }
@@ -142,7 +129,13 @@ export class LoginCredentialsFetcher {
     async loadToken() {
         const tokenFilePath = this.getTokenFilePath();
         try {
-            const tokenData = await fs.readFile(tokenFilePath, "utf8");
+            let tokenData;
+            try {
+                tokenData = await readFile(tokenFilePath, { ignoreCache: this.init?.ignoreCache });
+            }
+            catch {
+                tokenData = await fs.readFile(tokenFilePath, "utf8");
+            }
             const token = JSON.parse(tokenData);
             const missingFields = ["accessToken", "clientId", "refreshToken", "dpopKey"].filter((k) => !token[k]);
             if (!token.accessToken?.accountId) {

package/node_modules/@aws-sdk/credential-provider-login/dist-types/LoginCredentialsFetcher.d.ts

@@ -17,7 +17,6 @@ export declare class LoginCredentialsFetcher {
     loadCredentials(): Promise<AwsCredentialIdentity>;
     private get logger();
     private get loginSession();
-    private toCredentials;
     private refresh;
     private loadToken;
     private saveToken;

package/node_modules/@aws-sdk/credential-provider-login/dist-types/ts3.4/LoginCredentialsFetcher.d.ts

@@ -14,7 +14,6 @@ export declare class LoginCredentialsFetcher {
   loadCredentials(): Promise<AwsCredentialIdentity>;
   private readonly logger: any;
   private readonly loginSession: any;
-  private toCredentials;
   private refresh;
   private loadToken;
   private saveToken;