@digipair/skill-s3 0.136.3 → 0.136.5

package/dist/index.esm8.js

@@ -1,284 +1,85 @@
-import { C as CredentialsProviderError, y as HttpRequest, z as parseRfc3339DateTime, A as sdkStreamMixin, N as NodeHttpHandler, s as setCredentialFeature } from './index.esm3.js';
-import fs from 'node:fs/promises';
-import 'node:crypto';
-import 'node:path';
-import 'node:os';
-import 'node:stream';
-import 'node:process';
+import { exec } from 'child_process';
+import { promisify } from 'util';
+import { s as setCredentialFeature, C as CredentialsProviderError, g as getProfileName } from './index.esm2.js';
+import { e as externalDataInterceptor } from './externalDataInterceptor.esm.js';
+import { p as parseKnownFiles } from './parseKnownFiles.esm.js';
 import 'buffer';
+import 'path';
+import 'os';
+import 'node:fs/promises';
+import 'stream';
+import 'crypto';
+import 'node:stream';
+import 'http';
+import 'https';
+import 'process';
 import 'node:fs';
-import 'node:https';
-import 'node:zlib';
-
-var ECS_CONTAINER_HOST = "169.254.170.2";
-var EKS_CONTAINER_HOST_IPv4 = "169.254.170.23";
-var EKS_CONTAINER_HOST_IPv6 = "[fd00:ec2::23]";
-var checkUrl = function(url, logger) {
-    if (url.protocol === "https:") {
-        return;
-    }
-    if (url.hostname === ECS_CONTAINER_HOST || url.hostname === EKS_CONTAINER_HOST_IPv4 || url.hostname === EKS_CONTAINER_HOST_IPv6) {
-        return;
-    }
-    if (url.hostname.includes("[")) {
-        if (url.hostname === "[::1]" || url.hostname === "[0000:0000:0000:0000:0000:0000:0000:0001]") {
-            return;
-        }
-    } else {
-        if (url.hostname === "localhost") {
-            return;
-        }
-        var ipComponents = url.hostname.split(".");
-        var inRange = function(component) {
-            var num = parseInt(component, 10);
-            return 0 <= num && num <= 255;
-        };
-        if (ipComponents[0] === "127" && inRange(ipComponents[1]) && inRange(ipComponents[2]) && inRange(ipComponents[3]) && ipComponents.length === 4) {
-            return;
-        }
-    }
-    throw new CredentialsProviderError("URL not accepted. It must either be HTTPS or match one of the following:\n  - loopback CIDR 127.0.0.0/8 or [::1/128]\n  - ECS container host 169.254.170.2\n  - EKS container host 169.254.170.23 or [fd00:ec2::23]", {
-        logger: logger
-    });
-};
+import 'zlib';
+import './getSSOTokenFromFile.esm.js';
+import 'fs/promises';
 
-function _array_like_to_array(arr, len) {
-    if (len == null || len > arr.length) len = arr.length;
-    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
-    return arr2;
-}
-function _array_with_holes(arr) {
-    if (Array.isArray(arr)) return arr;
-}
-function asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, key, arg) {
-    try {
-        var info = gen[key](arg);
-        var value = info.value;
-    } catch (error) {
-        reject(error);
-        return;
-    }
-    if (info.done) {
-        resolve(value);
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
     } else {
-        Promise.resolve(value).then(_next, _throw);
+        obj[key] = value;
     }
+    return obj;
 }
-function _async_to_generator$2(fn) {
-    return function() {
-        var self = this, args = arguments;
-        return new Promise(function(resolve, reject) {
-            var gen = fn.apply(self, args);
-            function _next(value) {
-                asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, "next", value);
-            }
-            function _throw(err) {
-                asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, "throw", err);
-            }
-            _next(undefined);
-        });
-    };
-}
-function _iterable_to_array_limit(arr, i) {
-    var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
-    if (_i == null) return;
-    var _arr = [];
-    var _n = true;
-    var _d = false;
-    var _s, _e;
-    try {
-        for(_i = _i.call(arr); !(_n = (_s = _i.next()).done); _n = true){
-            _arr.push(_s.value);
-            if (i && _arr.length === i) break;
-        }
-    } catch (err) {
-        _d = true;
-        _e = err;
-    } finally{
-        try {
-            if (!_n && _i["return"] != null) _i["return"]();
-        } finally{
-            if (_d) throw _e;
+function _object_spread(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
         }
+        ownKeys.forEach(function(key) {
+            _define_property(target, key, source[key]);
+        });
     }
-    return _arr;
-}
-function _non_iterable_rest() {
-    throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
-}
-function _sliced_to_array(arr, i) {
-    return _array_with_holes(arr) || _iterable_to_array_limit(arr, i) || _unsupported_iterable_to_array(arr, i) || _non_iterable_rest();
+    return target;
 }
-function _unsupported_iterable_to_array(o, minLen) {
-    if (!o) return;
-    if (typeof o === "string") return _array_like_to_array(o, minLen);
-    var n = Object.prototype.toString.call(o).slice(8, -1);
-    if (n === "Object" && o.constructor) n = o.constructor.name;
-    if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array(o, minLen);
-}
-function _ts_generator$2(thisArg, body) {
-    var f, y, t, g, _ = {
-        label: 0,
-        sent: function() {
-            if (t[0] & 1) throw t[1];
-            return t[1];
-        },
-        trys: [],
-        ops: []
-    };
-    return g = {
-        next: verb(0),
-        "throw": verb(1),
-        "return": verb(2)
-    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
-        return this;
-    }), g;
-    function verb(n) {
-        return function(v) {
-            return step([
-                n,
-                v
-            ]);
-        };
+var getValidatedProcessCredentials = function(profileName, data, profiles) {
+    var _profiles_profileName;
+    if (data.Version !== 1) {
+        throw Error("Profile ".concat(profileName, " credential_process did not return Version 1."));
     }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while(_)try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [
-                op[0] & 2,
-                t.value
-            ];
-            switch(op[0]){
-                case 0:
-                case 1:
-                    t = op;
-                    break;
-                case 4:
-                    _.label++;
-                    return {
-                        value: op[1],
-                        done: false
-                    };
-                case 5:
-                    _.label++;
-                    y = op[1];
-                    op = [
-                        0
-                    ];
-                    continue;
-                case 7:
-                    op = _.ops.pop();
-                    _.trys.pop();
-                    continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
-                        _ = 0;
-                        continue;
-                    }
-                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
-                        _.label = op[1];
-                        break;
-                    }
-                    if (op[0] === 6 && _.label < t[1]) {
-                        _.label = t[1];
-                        t = op;
-                        break;
-                    }
-                    if (t && _.label < t[2]) {
-                        _.label = t[2];
-                        _.ops.push(op);
-                        break;
-                    }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop();
-                    continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) {
-            op = [
-                6,
-                e
-            ];
-            y = 0;
-        } finally{
-            f = t = 0;
+    if (data.AccessKeyId === undefined || data.SecretAccessKey === undefined) {
+        throw Error("Profile ".concat(profileName, " credential_process returned invalid credentials."));
+    }
+    if (data.Expiration) {
+        var currentTime = new Date();
+        var expireTime = new Date(data.Expiration);
+        if (expireTime < currentTime) {
+            throw Error("Profile ".concat(profileName, " credential_process returned expired credentials."));
         }
-        if (op[0] & 5) throw op[1];
-        return {
-            value: op[0] ? op[1] : void 0,
-            done: true
-        };
     }
-}
-function createGetRequest(url) {
-    return new HttpRequest({
-        protocol: url.protocol,
-        hostname: url.hostname,
-        port: Number(url.port),
-        path: url.pathname,
-        query: Array.from(url.searchParams.entries()).reduce(function(acc, param) {
-            var _param = _sliced_to_array(param, 2), k = _param[0], v = _param[1];
-            acc[k] = v;
-            return acc;
-        }, {}),
-        fragment: url.hash
-    });
-}
-function getCredentials(response, logger) {
-    return _getCredentials.apply(this, arguments);
-}
-function _getCredentials() {
-    _getCredentials = _async_to_generator$2(function(response, logger) {
-        var stream, str, parsed, parsedBody;
-        return _ts_generator$2(this, function(_state) {
-            switch(_state.label){
-                case 0:
-                    stream = sdkStreamMixin(response.body);
-                    return [
-                        4,
-                        stream.transformToString()
-                    ];
-                case 1:
-                    str = _state.sent();
-                    if (response.statusCode === 200) {
-                        parsed = JSON.parse(str);
-                        if (typeof parsed.AccessKeyId !== "string" || typeof parsed.SecretAccessKey !== "string" || typeof parsed.Token !== "string" || typeof parsed.Expiration !== "string") {
-                            throw new CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: " + "{ AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }", {
-                                logger: logger
-                            });
-                        }
-                        return [
-                            2,
-                            {
-                                accessKeyId: parsed.AccessKeyId,
-                                secretAccessKey: parsed.SecretAccessKey,
-                                sessionToken: parsed.Token,
-                                expiration: parseRfc3339DateTime(parsed.Expiration)
-                            }
-                        ];
-                    }
-                    if (response.statusCode >= 400 && response.statusCode < 500) {
-                        parsedBody = {};
-                        try {
-                            parsedBody = JSON.parse(str);
-                        } catch (e) {}
-                        throw Object.assign(new CredentialsProviderError("Server responded with status: ".concat(response.statusCode), {
-                            logger: logger
-                        }), {
-                            Code: parsedBody.Code,
-                            Message: parsedBody.Message
-                        });
-                    }
-                    throw new CredentialsProviderError("Server responded with status: ".concat(response.statusCode), {
-                        logger: logger
-                    });
-            }
-        });
+    var accountId = data.AccountId;
+    if (!accountId && (profiles === null || profiles === void 0 ? void 0 : (_profiles_profileName = profiles[profileName]) === null || _profiles_profileName === void 0 ? void 0 : _profiles_profileName.aws_account_id)) {
+        accountId = profiles[profileName].aws_account_id;
+    }
+    var credentials = _object_spread({
+        accessKeyId: data.AccessKeyId,
+        secretAccessKey: data.SecretAccessKey
+    }, data.SessionToken && {
+        sessionToken: data.SessionToken
+    }, data.Expiration && {
+        expiration: new Date(data.Expiration)
+    }, data.CredentialScope && {
+        credentialScope: data.CredentialScope
+    }, accountId && {
+        accountId: accountId
     });
-    return _getCredentials.apply(this, arguments);
-}
+    setCredentialFeature(credentials, "CREDENTIALS_PROCESS", "w");
+    return credentials;
+};
 
 function asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, key, arg) {
     try {
@@ -404,70 +205,80 @@ function _ts_generator$1(thisArg, body) {
         };
     }
 }
-var retryWrapper = function(toRetry, maxRetries, delayMs) {
-    return /*#__PURE__*/ _async_to_generator$1(function() {
-        var i;
+var resolveProcessCredentials = function() {
+    var _ref = _async_to_generator$1(function(profileName, profiles, logger) {
+        var profile, credentialProcess, _externalDataInterceptor_getTokenRecord, _externalDataInterceptor_getTokenRecord_exec, execPromise, stdout, data, error;
         return _ts_generator$1(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    i = 0;
-                    _state.label = 1;
-                case 1:
-                    if (!(i < maxRetries)) return [
+                    profile = profiles[profileName];
+                    if (!profiles[profileName]) return [
                         3,
                         7
                     ];
-                    _state.label = 2;
-                case 2:
+                    credentialProcess = profile["credential_process"];
+                    if (!(credentialProcess !== undefined)) return [
+                        3,
+                        5
+                    ];
+                    execPromise = promisify((_externalDataInterceptor_getTokenRecord_exec = externalDataInterceptor === null || externalDataInterceptor === void 0 ? void 0 : (_externalDataInterceptor_getTokenRecord = externalDataInterceptor.getTokenRecord) === null || _externalDataInterceptor_getTokenRecord === void 0 ? void 0 : _externalDataInterceptor_getTokenRecord.call(externalDataInterceptor).exec) !== null && _externalDataInterceptor_getTokenRecord_exec !== void 0 ? _externalDataInterceptor_getTokenRecord_exec : exec);
+                    _state.label = 1;
+                case 1:
                     _state.trys.push([
-                        2,
-                        4,
+                        1,
+                        3,
                         ,
-                        6
+                        4
                     ]);
                     return [
                         4,
-                        toRetry()
+                        execPromise(credentialProcess)
                     ];
-                case 3:
+                case 2:
+                    stdout = _state.sent().stdout;
+                    try {
+                        data = JSON.parse(stdout.trim());
+                    } catch (e) {
+                        throw Error("Profile ".concat(profileName, " credential_process returned invalid JSON."));
+                    }
                     return [
                         2,
-                        _state.sent()
+                        getValidatedProcessCredentials(profileName, data, profiles)
                     ];
+                case 3:
+                    error = _state.sent();
+                    throw new CredentialsProviderError(error.message, {
+                        logger: logger
+                    });
                 case 4:
-                    _state.sent();
-                    return [
-                        4,
-                        new Promise(function(resolve) {
-                            return setTimeout(resolve, delayMs);
-                        })
-                    ];
-                case 5:
-                    _state.sent();
                     return [
                         3,
                         6
                     ];
+                case 5:
+                    throw new CredentialsProviderError("Profile ".concat(profileName, " did not contain credential_process."), {
+                        logger: logger
+                    });
                 case 6:
-                    ++i;
                     return [
                         3,
-                        1
+                        8
                     ];
                 case 7:
-                    return [
-                        4,
-                        toRetry()
-                    ];
+                    throw new CredentialsProviderError("Profile ".concat(profileName, " could not be found in shared credentials file."), {
+                        logger: logger
+                    });
                 case 8:
                     return [
-                        2,
-                        _state.sent()
+                        2
                     ];
             }
         });
     });
-};
+    return function resolveProcessCredentials(profileName, profiles, logger) {
+        return _ref.apply(this, arguments);
+    };
+}();
 
 function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
     try {
@@ -593,144 +404,31 @@ function _ts_generator(thisArg, body) {
         };
     }
 }
-var AWS_CONTAINER_CREDENTIALS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI";
-var DEFAULT_LINK_LOCAL_HOST = "http://169.254.170.2";
-var AWS_CONTAINER_CREDENTIALS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI";
-var AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE = "AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE";
-var AWS_CONTAINER_AUTHORIZATION_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
-var fromHttp = function() {
-    var options = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
-    var _options_logger, _options_logger_constructor, _options_logger1, _options_logger2;
-    (_options_logger = options.logger) === null || _options_logger === void 0 ? void 0 : _options_logger.debug("@aws-sdk/credential-provider-http - fromHttp");
-    var host;
-    var _options_awsContainerCredentialsRelativeUri;
-    var relative = (_options_awsContainerCredentialsRelativeUri = options.awsContainerCredentialsRelativeUri) !== null && _options_awsContainerCredentialsRelativeUri !== void 0 ? _options_awsContainerCredentialsRelativeUri : process.env[AWS_CONTAINER_CREDENTIALS_RELATIVE_URI];
-    var _options_awsContainerCredentialsFullUri;
-    var full = (_options_awsContainerCredentialsFullUri = options.awsContainerCredentialsFullUri) !== null && _options_awsContainerCredentialsFullUri !== void 0 ? _options_awsContainerCredentialsFullUri : process.env[AWS_CONTAINER_CREDENTIALS_FULL_URI];
-    var _options_awsContainerAuthorizationToken;
-    var token = (_options_awsContainerAuthorizationToken = options.awsContainerAuthorizationToken) !== null && _options_awsContainerAuthorizationToken !== void 0 ? _options_awsContainerAuthorizationToken : process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN];
-    var _options_awsContainerAuthorizationTokenFile;
-    var tokenFile = (_options_awsContainerAuthorizationTokenFile = options.awsContainerAuthorizationTokenFile) !== null && _options_awsContainerAuthorizationTokenFile !== void 0 ? _options_awsContainerAuthorizationTokenFile : process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE];
-    var warn = ((_options_logger1 = options.logger) === null || _options_logger1 === void 0 ? void 0 : (_options_logger_constructor = _options_logger1.constructor) === null || _options_logger_constructor === void 0 ? void 0 : _options_logger_constructor.name) === "NoOpLogger" || !((_options_logger2 = options.logger) === null || _options_logger2 === void 0 ? void 0 : _options_logger2.warn) ? console.warn : options.logger.warn.bind(options.logger);
-    if (relative && full) {
-        warn("@aws-sdk/credential-provider-http: " + "you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri.");
-        warn("awsContainerCredentialsFullUri will take precedence.");
-    }
-    if (token && tokenFile) {
-        warn("@aws-sdk/credential-provider-http: " + "you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile.");
-        warn("awsContainerAuthorizationToken will take precedence.");
-    }
-    if (full) {
-        host = full;
-    } else if (relative) {
-        host = "".concat(DEFAULT_LINK_LOCAL_HOST).concat(relative);
-    } else {
-        throw new CredentialsProviderError("No HTTP credential provider host provided.\nSet AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.", {
-            logger: options.logger
-        });
-    }
-    var url = new URL(host);
-    checkUrl(url, options.logger);
-    var _options_timeout;
-    var requestHandler = NodeHttpHandler.create({
-        connectionTimeout: (_options_timeout = options.timeout) !== null && _options_timeout !== void 0 ? _options_timeout : 1000
-    });
-    var _options_timeout1;
-    var requestTimeout = (_options_timeout1 = options.timeout) !== null && _options_timeout1 !== void 0 ? _options_timeout1 : 1000;
-    var _options_maxRetries, _options_timeout2;
-    var provider = retryWrapper(/*#__PURE__*/ _async_to_generator(function() {
-        var request, _, result, e;
-        return _ts_generator(this, function(_state) {
-            switch(_state.label){
-                case 0:
-                    request = createGetRequest(url);
-                    if (!token) return [
-                        3,
-                        1
-                    ];
-                    request.headers.Authorization = token;
-                    return [
-                        3,
-                        3
-                    ];
-                case 1:
-                    if (!tokenFile) return [
-                        3,
-                        3
-                    ];
-                    _ = request.headers;
-                    return [
-                        4,
-                        fs.readFile(tokenFile)
-                    ];
-                case 2:
-                    _.Authorization = _state.sent().toString();
-                    _state.label = 3;
-                case 3:
-                    _state.trys.push([
-                        3,
-                        5,
-                        ,
-                        6
-                    ]);
-                    return [
-                        4,
-                        requestHandler.handle(request, {
-                            requestTimeout: requestTimeout
-                        })
-                    ];
-                case 4:
-                    result = _state.sent();
-                    return [
-                        2,
-                        getCredentials(result.response).then(function(creds) {
-                            return setCredentialFeature(creds, "CREDENTIALS_HTTP", "z");
-                        })
-                    ];
-                case 5:
-                    e = _state.sent();
-                    throw new CredentialsProviderError(String(e), {
-                        logger: options.logger
-                    });
-                case 6:
-                    return [
-                        2
-                    ];
-            }
-        });
-    }), (_options_maxRetries = options.maxRetries) !== null && _options_maxRetries !== void 0 ? _options_maxRetries : 3, (_options_timeout2 = options.timeout) !== null && _options_timeout2 !== void 0 ? _options_timeout2 : 1000);
+var fromProcess = function() {
+    var init = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
     return /*#__PURE__*/ _async_to_generator(function() {
-        var _requestHandler_destroy;
+        var callerClientConfig, _init_logger, profiles, _init_profile;
+        var _arguments = arguments;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    _state.trys.push([
-                        0,
-                        ,
-                        2,
-                        3
-                    ]);
+                    callerClientConfig = (_arguments.length > 0 && _arguments[0] !== void 0 ? _arguments[0] : {}).callerClientConfig;
+                    (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : _init_logger.debug("@aws-sdk/credential-provider-process - fromProcess");
                     return [
                         4,
-                        provider()
+                        parseKnownFiles(init)
                     ];
                 case 1:
+                    profiles = _state.sent();
                     return [
                         2,
-                        _state.sent()
-                    ];
-                case 2:
-                    (_requestHandler_destroy = requestHandler.destroy) === null || _requestHandler_destroy === void 0 ? void 0 : _requestHandler_destroy.call(requestHandler);
-                    return [
-                        7
-                    ];
-                case 3:
-                    return [
-                        2
+                        resolveProcessCredentials(getProfileName({
+                            profile: (_init_profile = init.profile) !== null && _init_profile !== void 0 ? _init_profile : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.profile
+                        }), profiles, init.logger)
                     ];
             }
         });
     });
 };
 
-export { fromHttp };
+export { fromProcess };