@mavogel/awscdk-rootmail 0.1.35 → 0.1.37

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/signin/models/errors.d.ts

@@ -2,14 +2,7 @@ import type { ExceptionOptionType as __ExceptionOptionType } from "@smithy/core/
 import type { OAuth2ErrorCode } from "./enums";
 import { SigninServiceException as __BaseException } from "./SigninServiceException";
 /**
- * Error thrown for access denied scenarios with flexible HTTP status mapping
- *
- * Runtime HTTP Status Code Mapping:
- * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
- * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
- *
- * The specific HTTP status code is determined at runtime based on the error enum value.
- * Consumers should use the error field to determine the specific access denial reason.
+ * You do not have sufficient access to perform this action.
  * @public
  */
 export declare class AccessDeniedException extends __BaseException {
@@ -17,8 +10,7 @@ export declare class AccessDeniedException extends __BaseException {
     readonly name: "AccessDeniedException";
     readonly $fault: "client";
     /**
-     * OAuth 2.0 error code indicating the specific type of access denial
-     * Can be TOKEN_EXPIRED, AUTHCODE_EXPIRED, USER_CREDENTIALS_CHANGED, or INSUFFICIENT_PERMISSIONS
+     * One of TOKEN_EXPIRED, AUTHCODE_EXPIRED, USER_CREDENTIALS_CHANGED, or INSUFFICIENT_PERMISSIONS.
      * @public
      */
     error: OAuth2ErrorCode | undefined;
@@ -28,11 +20,7 @@ export declare class AccessDeniedException extends __BaseException {
     constructor(opts: __ExceptionOptionType<AccessDeniedException, __BaseException>);
 }
 /**
- * Error thrown when an internal server error occurs
- *
- * HTTP Status Code: 500 Internal Server Error
- *
- * Used for unexpected server-side errors that prevent request processing.
+ * The request failed because of an internal server error.
  * @public
  */
 export declare class InternalServerException extends __BaseException {
@@ -40,8 +28,7 @@ export declare class InternalServerException extends __BaseException {
     readonly name: "InternalServerException";
     readonly $fault: "server";
     /**
-     * OAuth 2.0 error code indicating server error
-     * Will be SERVER_ERROR for internal server errors
+     * Will be server_error.
      * @public
      */
     error: OAuth2ErrorCode | undefined;
@@ -51,18 +38,7 @@ export declare class InternalServerException extends __BaseException {
     constructor(opts: __ExceptionOptionType<InternalServerException, __BaseException>);
 }
 /**
- * Error thrown when rate limit is exceeded
- *
- * HTTP Status Code: 429 Too Many Requests
- *
- * Possible OAuth2ErrorCode values:
- * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
- *
- * Possible causes:
- * - Too many token requests from the same client
- * - Rate limiting based on client_id or IP address
- * - Abuse prevention mechanisms triggered
- * - Service protection against excessive token generation
+ * The request failed because you exceeded the request rate limit for this operation.
  * @public
  */
 export declare class TooManyRequestsError extends __BaseException {
@@ -70,8 +46,7 @@ export declare class TooManyRequestsError extends __BaseException {
     readonly name: "TooManyRequestsError";
     readonly $fault: "client";
     /**
-     * OAuth 2.0 error code indicating the specific type of error
-     * Will be INVALID_REQUEST for rate limiting scenarios
+     * Will be rate_exceeded.
      * @public
      */
     error: OAuth2ErrorCode | undefined;
@@ -81,12 +56,7 @@ export declare class TooManyRequestsError extends __BaseException {
     constructor(opts: __ExceptionOptionType<TooManyRequestsError, __BaseException>);
 }
 /**
- * Error thrown when request validation fails
- *
- * HTTP Status Code: 400 Bad Request
- *
- * Used for request validation errors such as malformed parameters,
- * missing required fields, or invalid parameter values.
+ * The request failed because it contains a malformed, missing, or invalid parameter.
  * @public
  */
 export declare class ValidationException extends __BaseException {
@@ -94,8 +64,7 @@ export declare class ValidationException extends __BaseException {
     readonly name: "ValidationException";
     readonly $fault: "client";
     /**
-     * OAuth 2.0 error code indicating validation failure
-     * Will be INVALID_REQUEST for validation errors
+     * The specific code depends on which validation failed.
      * @public
      */
     error: OAuth2ErrorCode | undefined;

package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/signin/models/models_0.d.ts

@@ -1,68 +1,64 @@
 /**
- * AWS credentials structure containing temporary access credentials
- *
- * Scoped, temporary AWS credentials with a 15-minute duration.
+ * Contains the scoped, temporary AWS credentials used to sign requests with SigV4. Valid for 15 minutes.
  * @public
  */
 export interface AccessToken {
     /**
-     * AWS access key ID for temporary credentials
+     * The AWS access key ID for the temporary credentials.
      * @public
      */
     accessKeyId: string | undefined;
     /**
-     * AWS secret access key for temporary credentials
+     * The AWS secret access key used to sign requests.
      * @public
      */
     secretAccessKey: string | undefined;
     /**
-     * AWS session token for temporary credentials
+     * The session token that validates the temporary security credentials.
      * @public
      */
     sessionToken: string | undefined;
 }
 /**
- * Request body payload for CreateOAuth2Token operation
- *
- * The operation type is determined by the grant_type parameter:
- * - grant_type=authorization_code: Requires code, redirect_uri, code_verifier
- * - grant_type=refresh_token: Requires refresh_token
+ * The request body for creating an OAuth 2.0 token. Supports both the authorization code and
+ * refresh token flows, selected by the "grant_type" parameter.
  * @public
  */
 export interface CreateOAuth2TokenRequestBody {
     /**
-     * The client identifier (ARN) used during Sign-In onboarding
-     * Required for both authorization code and refresh token flows
+     * The OAuth 2.0 client identifier. Expected values: "arn:aws:signin:::devtools/same-device"
+     * or "arn:aws:signin:::devtools/cross-device".
      * @public
      */
     clientId: string | undefined;
     /**
-     * OAuth 2.0 grant type - determines which flow is used
-     * Must be "authorization_code" or "refresh_token"
+     * The OAuth 2.0 grant type. Supported values:
+     * - "authorization_code" - Exchange an authorization code for tokens.
+     * - "refresh_token" - Use a refresh token to obtain a new access token.
      * @public
      */
     grantType: string | undefined;
     /**
-     * The authorization code received from /v1/authorize
-     * Required only when grant_type=authorization_code
+     * The authorization code received from the "/v1/authorize" endpoint.
+     * Required when "grant_type=authorization_code".
      * @public
      */
     code?: string | undefined;
     /**
-     * The redirect URI that must match the original authorization request
-     * Required only when grant_type=authorization_code
+     * The redirect URI that was used in the original authorization request. Must match exactly.
+     * Required when "grant_type=authorization_code".
      * @public
      */
     redirectUri?: string | undefined;
     /**
-     * PKCE code verifier to prove possession of the original code challenge
-     * Required only when grant_type=authorization_code
+     * The PKCE code verifier that proves possession of the original code challenge.
+     * Required when "grant_type=authorization_code".
      * @public
      */
     codeVerifier?: string | undefined;
     /**
-     * The refresh token returned from auth_code redemption
-     * Required only when grant_type=refresh_token
+     * The refresh token issued by a previous token response.
+     * Required when "grant_type=refresh_token".
      * @public
      */
     refreshToken?: string | undefined;
@@ -76,49 +72,41 @@ export interface CreateOAuth2TokenRequestBody {
  */
 export interface CreateOAuth2TokenRequest {
     /**
-     * Flattened token operation inputs
-     * The specific operation is determined by grant_type in the request body
+     * Flattened token operation inputs. The "grant_type" in the request body determines the specific operation.
      * @public
      */
     tokenInput: CreateOAuth2TokenRequestBody | undefined;
 }
 /**
- * Response body payload for CreateOAuth2Token operation
- *
- * The response content depends on the grant_type from the request:
- * - grant_type=authorization_code: Returns all fields including refresh_token and id_token
- * - grant_type=refresh_token: Returns access_token, token_type, expires_in, refresh_token (no id_token)
+ * The response body for an OAuth 2.0 token request. The fields returned depend on the "grant_type".
+ * The authorization code flow returns "refresh_token" and "id_token". The refresh token flow omits "id_token".
  * @public
  */
 export interface CreateOAuth2TokenResponseBody {
     /**
-     * Scoped-down AWS credentials (15 minute duration)
-     * Present for both authorization code redemption and token refresh
+     * The access token issued by the authorization server. The token contains temporary
+     * AWS security credentials that you use to sign requests with SigV4.
      * @public
      */
     accessToken: AccessToken | undefined;
     /**
-     * Token type indicating this is AWS SigV4 credentials
-     * Value is "aws_sigv4" for both flows
+     * The type of token issued. Value is "aws_sigv4".
      * @public
      */
     tokenType: string | undefined;
     /**
-     * Time to expiry in seconds (maximum 900)
-     * Present for both authorization code redemption and token refresh
+     * The number of seconds until the access token expires. Maximum value is 900 seconds (15 minutes).
      * @public
      */
     expiresIn: number | undefined;
     /**
-     * Encrypted refresh token with cnf.jkt (SHA-256 thumbprint of presented jwk)
-     * Always present in responses (required for both flows)
+     * A refresh token that can be used to obtain new access tokens without re-authenticating.
      * @public
      */
     refreshToken: string | undefined;
     /**
-     * ID token containing user identity information
-     * Present only in authorization code redemption response (grant_type=authorization_code)
-     * Not included in token refresh responses
+     * A JSON Web Token (JWT) containing user identity claims. Present only when
+     * "grant_type=authorization_code". Not included in refresh token responses.
      * @public
      */
     idToken?: string | undefined;
@@ -132,8 +120,8 @@ export interface CreateOAuth2TokenResponseBody {
  */
 export interface CreateOAuth2TokenResponse {
     /**
-     * Flattened token operation outputs
-     * The specific response fields depend on the grant_type used in the request
+     * Flattened token operation outputs.
+     * The specific response fields depend on the grant_type used in the request.
      * @public
      */
     tokenOutput: CreateOAuth2TokenResponseBody | undefined;
@@ -144,7 +132,7 @@ export interface CreateOAuth2TokenResponse {
  */
 export interface CreateOAuth2TokenWithIAMRequest {
     /**
-     * OAuth 2.0 grant type. Must be "client_credentials".
+     * The OAuth 2.0 grant type. Must be "client_credentials".
      * @public
      */
     grantType: string | undefined;
@@ -158,22 +146,22 @@ export interface CreateOAuth2TokenWithIAMRequest {
 /**
  * Output structure for CreateOAuth2TokenWithIAM operation
  *
- * Contains the JWT access token, token type, and expiration per RFC 6749 §5.1.
+ * Contains the access token, token type, and expiration as defined in RFC 6749 §5.1.
  * @public
  */
 export interface CreateOAuth2TokenWithIAMResponse {
     /**
-     * JWT access token containing principal identity, resource scope, and session metadata
+     * Access token containing principal identity, resource scope, and session metadata.
      * @public
      */
     accessToken: string | undefined;
     /**
-     * Always "Bearer" per OAuth 2.1 specification
+     * The token type. Always "Bearer" as defined in RFC 6749.
      * @public
      */
     tokenType: string | undefined;
     /**
-     * Token lifetime in seconds. Value is the minimum of session validity and 1 hour.
+     * Token lifetime in seconds. Value is the minimum of the caller's session validity and 1 hour (3600 seconds).
      * @public
      */
     expiresIn: number | undefined;

package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/signin/models/enums.d.ts

@@ -3,6 +3,13 @@ export declare const OAuth2ErrorCode: {
   readonly CONFLICT: "CONFLICT";
   readonly INSUFFICIENT_PERMISSIONS: "INSUFFICIENT_PERMISSIONS";
   readonly INVALID_REQUEST: "INVALID_REQUEST";
+  readonly OAUTH_INVALID_GRANT: "invalid_grant";
+  readonly OAUTH_INVALID_REQUEST: "invalid_request";
+  readonly OAUTH_INVALID_SCOPE: "invalid_scope";
+  readonly OAUTH_INVALID_TARGET: "invalid_target";
+  readonly OAUTH_RATE_EXCEEDED: "rate_exceeded";
+  readonly OAUTH_SERVICE_UNAVAILABLE: "service_unavailable";
+  readonly OAUTH_UNSUPPORTED_GRANT_TYPE: "unsupported_grant_type";
   readonly RESOURCE_NOT_FOUND: "RESOURCE_NOT_FOUND";
   readonly SERVER_ERROR: "server_error";
   readonly SERVICE_QUOTA_EXCEEDED: "SERVICE_QUOTA_EXCEEDED";

package/node_modules/@aws-sdk/nested-clients/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/nested-clients",
-  "version": "3.997.53",
+  "version": "3.997.54",
   "description": "Nested clients for AWS SDK packages.",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/packages/nested-clients",
   "license": "Apache-2.0",
@@ -100,12 +100,12 @@
     "test:watch": "yarn g:vitest watch"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.979.0",
-    "@aws-sdk/signature-v4-multi-region": "^3.996.50",
+    "@aws-sdk/core": "^3.979.1",
+    "@aws-sdk/signature-v4-multi-region": "^3.996.51",
     "@aws-sdk/types": "^3.975.0",
-    "@smithy/core": "^3.37.0",
+    "@smithy/core": "^3.38.0",
     "@smithy/fetch-http-handler": "^5.8.0",
-    "@smithy/node-http-handler": "^4.13.0",
+    "@smithy/node-http-handler": "^4.14.0",
     "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },

package/node_modules/@aws-sdk/signature-v4-multi-region/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/signature-v4-multi-region",
-  "version": "3.996.50",
+  "version": "3.996.51",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/packages/signature-v4-multi-region",
   "license": "Apache-2.0",
   "author": {
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@aws-sdk/types": "^3.975.0",
-    "@smithy/signature-v4": "^5.7.4",
+    "@smithy/signature-v4": "^5.7.5",
     "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },

package/node_modules/@aws-sdk/token-providers/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/token-providers",
-  "version": "3.1160.0",
+  "version": "3.1161.0",
   "description": "A collection of token providers",
   "keywords": [
     "aws",
@@ -48,10 +48,10 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.979.0",
-    "@aws-sdk/nested-clients": "^3.997.53",
+    "@aws-sdk/core": "^3.979.1",
+    "@aws-sdk/nested-clients": "^3.997.54",
     "@aws-sdk/types": "^3.975.0",
-    "@smithy/core": "^3.37.0",
+    "@smithy/core": "^3.38.0",
     "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },

package/node_modules/@smithy/core/dist-cjs/index.js

@@ -139,8 +139,9 @@ const getHttpSigningPlugin = (config) => ({
 });
 
 const normalizeProvider = (input) => {
-    if (typeof input === "function")
+    if (typeof input === "function") {
         return input;
+    }
     const promisified = Promise.resolve(input);
     return () => promisified;
 };
@@ -203,8 +204,9 @@ class DefaultIdentityProviderConfig {
     authSchemes = new Map();
     constructor(config) {
         for (const key in config) {
-            if (!hasOwn(config, key))
+            if (!hasOwn(config, key)) {
                 continue;
+            }
             const value = config[key];
             if (value !== undefined) {
                 this.authSchemes.set(key, value);

package/node_modules/@smithy/core/dist-cjs/submodules/cbor/index.js

@@ -931,8 +931,9 @@ const buildHttpRpcRequest = async (context, headers, path, resolvedHostname, bod
     }
     if (endpoint.headers) {
         for (const name in endpoint.headers) {
-            if (!hasOwn(endpoint.headers, name))
+            if (!hasOwn(endpoint.headers, name)) {
                 continue;
+            }
             contents.headers[name] = endpoint.headers[name];
         }
     }
@@ -1193,8 +1194,9 @@ function writeStruct(ns, value, serdeContext) {
     }
     if (typeof value.__type === "string") {
         for (const k in value) {
-            if (!hasOwn(value, k))
+            if (!hasOwn(value, k)) {
                 continue;
+            }
             if (!memberNames.includes(k)) {
                 writeString(k);
                 writeUntypedValue(value[k]);
@@ -1260,8 +1262,9 @@ function writeMap(ns, value, isDocument, serdeContext) {
     const valueSchema = ns.getValueSchema();
     const keys = [];
     for (const k in value) {
-        if (!hasOwn(value, k))
+        if (!hasOwn(value, k)) {
             continue;
+        }
         const v = value[k];
         if (isDocument ? v !== undefined : v != null || sparse) {
             keys.push(k);
@@ -1675,8 +1678,9 @@ function readStruct(ns, count, startPos) {
     if (isUnion) {
         let resultEmpty = true;
         for (const _ in result) {
-            if (!hasOwn(result, _))
+            if (!hasOwn(result, _)) {
                 continue;
+            }
             resultEmpty = false;
             break;
         }
@@ -1845,8 +1849,9 @@ function readMapIndefinite(ns) {
                 if (isUnion) {
                     let resultEmpty = true;
                     for (const _ in result) {
-                        if (!hasOwn(result, _))
+                        if (!hasOwn(result, _)) {
                             continue;
+                        }
                         resultEmpty = false;
                         break;
                     }
@@ -2151,8 +2156,9 @@ function transformObject(ns, value) {
     if (ns.isMapSchema()) {
         const targetSchema = ns.getValueSchema();
         for (const key in value) {
-            if (!hasOwn(value, key))
+            if (!hasOwn(value, key)) {
                 continue;
+            }
             newObject[key] = transformObject(targetSchema, value[key]);
         }
     }
@@ -2162,8 +2168,9 @@ function transformObject(ns, value) {
         if (isUnion) {
             keys = new Set();
             for (const k in value) {
-                if (!hasOwn(value, k))
+                if (!hasOwn(value, k)) {
                     continue;
+                }
                 if (k !== "__type") {
                     keys.add(k);
                 }
@@ -2180,8 +2187,9 @@ function transformObject(ns, value) {
         if (isUnion && keys?.size === 1) {
             let newObjectEmpty = true;
             for (const _ in newObject) {
-                if (!hasOwn(newObject, _))
+                if (!hasOwn(newObject, _)) {
                     continue;
+                }
                 newObjectEmpty = false;
                 break;
             }
@@ -2192,8 +2200,9 @@ function transformObject(ns, value) {
         }
         else if (typeof value.__type === "string") {
             for (const k in value) {
-                if (!hasOwn(value, k))
+                if (!hasOwn(value, k)) {
                     continue;
+                }
                 if (!(k in newObject)) {
                     newObject[k] = value[k];
                 }
@@ -2332,8 +2341,9 @@ class CborShapeSerializer extends SerdeContext {
             if (ns.isMapSchema()) {
                 const sparse = !!ns.getMergedTraits().sparse;
                 for (const key in sourceObject) {
-                    if (!hasOwn(sourceObject, key))
+                    if (!hasOwn(sourceObject, key)) {
                         continue;
+                    }
                     const value = this.serialize(ns.getValueSchema(), sourceObject[key]);
                     if (value != null || sparse) {
                         newObject[key] = value;
@@ -2354,8 +2364,9 @@ class CborShapeSerializer extends SerdeContext {
                 }
                 else if (typeof sourceObject.__type === "string") {
                     for (const k in sourceObject) {
-                        if (!hasOwn(sourceObject, k))
+                        if (!hasOwn(sourceObject, k)) {
                             continue;
+                        }
                         if (!(k in newObject)) {
                             newObject[k] = this.serialize(15, sourceObject[k]);
                         }
@@ -2372,8 +2383,9 @@ class CborShapeSerializer extends SerdeContext {
                     return newArray;
                 }
                 for (const key in sourceObject) {
-                    if (!hasOwn(sourceObject, key))
+                    if (!hasOwn(sourceObject, key)) {
                         continue;
+                    }
                     newObject[key] = this.serialize(ns.getValueSchema(), sourceObject[key]);
                 }
             }
@@ -2448,8 +2460,9 @@ class CborShapeDeserializer extends SerdeContext {
             if (ns.isMapSchema()) {
                 const targetSchema = ns.getValueSchema();
                 for (const key in value) {
-                    if (!hasOwn(value, key))
+                    if (!hasOwn(value, key)) {
                         continue;
+                    }
                     const itemValue = this.readValue(targetSchema, value[key]);
                     newObject[key] = itemValue;
                 }
@@ -2460,8 +2473,9 @@ class CborShapeDeserializer extends SerdeContext {
                 if (isUnion) {
                     keys = new Set();
                     for (const k in value) {
-                        if (!hasOwn(value, k))
+                        if (!hasOwn(value, k)) {
                             continue;
+                        }
                         if (k !== "__type") {
                             keys.add(k);
                         }
@@ -2478,8 +2492,9 @@ class CborShapeDeserializer extends SerdeContext {
                 if (isUnion && keys?.size === 1) {
                     let newObjectEmpty = true;
                     for (const _ in newObject) {
-                        if (!hasOwn(newObject, _))
+                        if (!hasOwn(newObject, _)) {
                             continue;
+                        }
                         newObjectEmpty = false;
                         break;
                     }
@@ -2490,8 +2505,9 @@ class CborShapeDeserializer extends SerdeContext {
                 }
                 else if (typeof value.__type === "string") {
                     for (const k in value) {
-                        if (!hasOwn(value, k))
+                        if (!hasOwn(value, k)) {
                             continue;
+                        }
                         if (!(k in newObject)) {
                             newObject[k] = value[k];
                         }