Something went wrong. Try again.
source dump of claude code forked from oppi.li/claude-code
Something went wrong. Try again.
2.3 kB · 74 lines
TypeScript
at main
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475import { logForDebugging } from './debug.js'
/** AWS short-term credentials format. */export type AwsCredentials = { AccessKeyId: string SecretAccessKey: string SessionToken: string Expiration?: string}
/** Output from `aws sts get-session-token` or `aws sts assume-role`. */export type AwsStsOutput = { Credentials: AwsCredentials}
type AwsError = { name: string}
export function isAwsCredentialsProviderError(err: unknown) { return (err as AwsError | undefined)?.name === 'CredentialsProviderError'}
/** Typeguard to validate AWS STS assume-role output */export function isValidAwsStsOutput(obj: unknown): obj is AwsStsOutput { if (!obj || typeof obj !== 'object') { return false }
const output = obj as Record<string, unknown>
// Check if Credentials exists and has required fields if (!output.Credentials || typeof output.Credentials !== 'object') { return false }
const credentials = output.Credentials as Record<string, unknown>
return ( typeof credentials.AccessKeyId === 'string' && typeof credentials.SecretAccessKey === 'string' && typeof credentials.SessionToken === 'string' && credentials.AccessKeyId.length > 0 && credentials.SecretAccessKey.length > 0 && credentials.SessionToken.length > 0 )}
/** Throws if STS caller identity cannot be retrieved. */export async function checkStsCallerIdentity(): Promise<void> { const { STSClient, GetCallerIdentityCommand } = await import( '@aws-sdk/client-sts' ) await new STSClient().send(new GetCallerIdentityCommand({}))}
/** * Clear AWS credential provider cache by forcing a refresh * This ensures that any changes to ~/.aws/credentials are picked up immediately */export async function clearAwsIniCache(): Promise<void> { try { logForDebugging('Clearing AWS credential provider cache') const { fromIni } = await import('@aws-sdk/credential-providers') const iniProvider = fromIni({ ignoreCache: true }) await iniProvider() // This updates the global file cache logForDebugging('AWS credential provider cache refreshed') } catch (_error) { // Ignore errors - we're just clearing the cache logForDebugging( 'Failed to clear AWS credential cache (this is expected if no credentials are configured)', ) }}