@remotion/lambda 4.0.0-webhook.26 → 4.1.0-alpha2

package/dist/shared/aws-clients.js

@@ -1,11 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getServiceQuotasClient = exports.getIamClient = exports.getLambdaClient = exports.getS3Client = exports.getCloudWatchLogsClient = exports.getServiceClient = void 0;
+exports.getStsClient = exports.getServiceQuotasClient = exports.getIamClient = exports.getLambdaClient = exports.getS3Client = exports.getCloudWatchLogsClient = exports.getServiceClient = void 0;
 const client_cloudwatch_logs_1 = require("@aws-sdk/client-cloudwatch-logs");
 const client_iam_1 = require("@aws-sdk/client-iam");
 const client_lambda_1 = require("@aws-sdk/client-lambda");
 const client_s3_1 = require("@aws-sdk/client-s3");
 const client_service_quotas_1 = require("@aws-sdk/client-service-quotas");
+const client_sts_1 = require("@aws-sdk/client-sts");
+const credential_providers_1 = require("@aws-sdk/credential-providers");
+const node_crypto_1 = require("node:crypto");
 const check_credentials_1 = require("./check-credentials");
 const is_in_lambda_1 = require("./is-in-lambda");
 const _clients = {};
@@ -13,6 +16,21 @@ const getCredentials = () => {
     if ((0, is_in_lambda_1.isInsideLambda)()) {
         return undefined;
     }
+    if (process.env.REMOTION_AWS_PROFILE) {
+        return (0, credential_providers_1.fromIni)({
+            profile: process.env.REMOTION_AWS_PROFILE,
+        });
+    }
+    if (process.env.REMOTION_AWS_ACCESS_KEY_ID &&
+        process.env.REMOTION_AWS_SECRET_ACCESS_KEY &&
+        process.env.REMOTION_AWS_SESSION_TOKEN) {
+        console.log('Using credentials from Remotion assumed role.');
+        return {
+            accessKeyId: process.env.REMOTION_AWS_ACCESS_KEY_ID,
+            secretAccessKey: process.env.REMOTION_AWS_SECRET_ACCESS_KEY,
+            sessionToken: process.env.REMOTION_AWS_SESSION_TOKEN,
+        };
+    }
     if (process.env.REMOTION_AWS_ACCESS_KEY_ID &&
         process.env.REMOTION_AWS_SECRET_ACCESS_KEY) {
         return {
@@ -20,6 +38,21 @@ const getCredentials = () => {
             secretAccessKey: process.env.REMOTION_AWS_SECRET_ACCESS_KEY,
         };
     }
+    if (process.env.AWS_PROFILE) {
+        return (0, credential_providers_1.fromIni)({
+            profile: process.env.AWS_PROFILE,
+        });
+    }
+    if (process.env.AWS_ACCESS_KEY_ID &&
+        process.env.AWS_SECRET_ACCESS_KEY &&
+        process.env.AWS_SESSION_TOKEN) {
+        console.log('Using credentials from AWS STS');
+        return {
+            accessKeyId: process.env.AWS_ACCESS_KEY_ID,
+            secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,
+            sessionToken: process.env.AWS_SESSION_TOKEN,
+        };
+    }
     if (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) {
         return {
             accessKeyId: process.env.AWS_ACCESS_KEY_ID,
@@ -28,17 +61,40 @@ const getCredentials = () => {
     }
     return undefined;
 };
-const getKey = ({ credentials, customCredentials, region, service, }) => [
-    credentials === null || credentials === void 0 ? void 0 : credentials.accessKeyId,
-    credentials === null || credentials === void 0 ? void 0 : credentials.secretAccessKey,
-    customCredentials === null || customCredentials === void 0 ? void 0 : customCredentials.accessKeyId,
-    customCredentials === null || customCredentials === void 0 ? void 0 : customCredentials.endpoint,
-    customCredentials === null || customCredentials === void 0 ? void 0 : customCredentials.secretAccessKey,
-    region,
-    service,
-].join('-');
+const getCredentialsHash = ({ customCredentials, region, service, }) => {
+    const hashComponents = {};
+    if (process.env.REMOTION_AWS_PROFILE) {
+        hashComponents.credentials = {
+            awsProfile: process.env.REMOTION_AWS_PROFILE,
+        };
+    }
+    else if (process.env.REMOTION_AWS_ACCESS_KEY_ID &&
+        process.env.REMOTION_AWS_SECRET_ACCESS_KEY) {
+        hashComponents.credentials = {
+            accessKeyId: process.env.REMOTION_AWS_ACCESS_KEY_ID,
+            secretAccessKey: process.env.REMOTION_AWS_SECRET_ACCESS_KEY,
+        };
+    }
+    else if (process.env.AWS_PROFILE) {
+        hashComponents.credentials = {
+            awsProfile: process.env.AWS_PROFILE,
+        };
+    }
+    else if (process.env.AWS_ACCESS_KEY_ID &&
+        process.env.AWS_SECRET_ACCESS_KEY) {
+        hashComponents.credentials = {
+            accessKeyId: process.env.AWS_ACCESS_KEY_ID,
+            secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY,
+        };
+    }
+    hashComponents.customCredentials = customCredentials;
+    hashComponents.region = region;
+    hashComponents.service = service;
+    return (0, node_crypto_1.createHash)('sha256')
+        .update(JSON.stringify(hashComponents))
+        .digest('base64');
+};
 const getServiceClient = ({ region, service, customCredentials, }) => {
-    var _a;
     const Client = (() => {
         if (service === 'cloudwatch') {
             return client_cloudwatch_logs_1.CloudWatchLogsClient;
@@ -55,10 +111,12 @@ const getServiceClient = ({ region, service, customCredentials, }) => {
         if (service === 'servicequotas') {
             return client_service_quotas_1.ServiceQuotasClient;
         }
+        if (service === 'sts') {
+            return client_sts_1.STSClient;
+        }
         throw new TypeError('unknown client ' + service);
     })();
-    const key = getKey({
-        credentials: (_a = getCredentials()) !== null && _a !== void 0 ? _a : null,
+    const key = getCredentialsHash({
         region,
         customCredentials,
         service,
@@ -119,3 +177,7 @@ const getServiceQuotasClient = (region) => {
     });
 };
 exports.getServiceQuotasClient = getServiceQuotasClient;
+const getStsClient = (region) => {
+    return (0, exports.getServiceClient)({ region, service: 'sts', customCredentials: null });
+};
+exports.getStsClient = getStsClient;

package/dist/shared/call-lambda.js

@@ -5,12 +5,29 @@ const client_lambda_1 = require("@aws-sdk/client-lambda");
 const aws_clients_1 = require("./aws-clients");
 const callLambda = async ({ functionName, type, payload, region, }) => {
     var _a;
-    const res = await (0, aws_clients_1.getLambdaClient)(region).send(new client_lambda_1.InvokeCommand({
+    const res = await (0, aws_clients_1.getLambdaClient)(region).send(new client_lambda_1.InvokeWithResponseStreamCommand({
         FunctionName: functionName,
         // @ts-expect-error
         Payload: JSON.stringify({ type, ...payload }),
     }));
-    const string = Buffer.from(res.Payload).toString();
+    const events = res.EventStream;
+    let responsePayload = new Uint8Array();
+    for await (const event of events) {
+        // There are two types of events you can get on a stream.
+        // `PayloadChunk`: These contain the actual raw bytes of the chunk
+        // It has a single property: `Payload`
+        if (event.PayloadChunk) {
+            // Decode the raw bytes into a string a human can read
+            const decoded = new TextDecoder('utf-8').decode(event.PayloadChunk.Payload);
+            responsePayload = Buffer.concat([responsePayload, Buffer.from(decoded)]);
+        }
+        if (event.InvokeComplete) {
+            if (event.InvokeComplete.ErrorCode) {
+                throw new Error(`Lambda function ${functionName} failed with error code ${event.InvokeComplete.ErrorCode}: ${event.InvokeComplete.ErrorDetails}}`);
+            }
+        }
+    }
+    const string = Buffer.from(responsePayload).toString();
     const json = JSON.parse(string);
     if ('errorMessage' in json) {
         const err = new Error(json.errorMessage);
@@ -18,6 +35,14 @@ const callLambda = async ({ functionName, type, payload, region, }) => {
         err.stack = ((_a = json.trace) !== null && _a !== void 0 ? _a : []).join('\n');
         throw err;
     }
+    // Streaming: 3.3.96+
+    if ('statusCode' in json) {
+        if (json.statusCode !== 200) {
+            throw new Error(`Lambda function ${functionName} failed with status code ${json.statusCode}: ${json.body}`);
+        }
+        return JSON.parse(json.body);
+    }
+    // Non-streaming: 3.3.95 and below
     return json;
 };
 exports.callLambda = callLambda;

package/dist/shared/check-credentials.js

@@ -17,6 +17,9 @@ const messageForVariable = (variable) => {
         .join('\n');
 };
 const checkCredentials = () => {
+    if (process.env.REMOTION_AWS_PROFILE || process.env.AWS_PROFILE) {
+        return;
+    }
     if (!process.env.AWS_ACCESS_KEY_ID &&
         !process.env.REMOTION_AWS_ACCESS_KEY_ID) {
         throw new Error(messageForVariable('AWS_ACCESS_KEY_ID or REMOTION_AWS_ACCESS_KEY_ID'));

package/dist/shared/chunk-progress.d.ts

@@ -0,0 +1,9 @@
+export declare const writeLambdaInitializedFile: ({ bucketName, expectedBucketOwner, attempt, chunk, renderId, framesRendered, }: {
+    bucketName: string;
+    expectedBucketOwner: string;
+    renderId: string;
+    chunk: number;
+    attempt: number;
+    framesRendered: number;
+}) => Promise<void>;
+export declare const getProgressOfChunk: (etag: string) => number;