refactor(toolkit): move aws-auth and plugin to shared package

This intentionally only moves the source, and not the tests. Tests will be moved later to keep the diff size managable. Code is still tested as the tests are still running from `aws-cdk` package.

Author: mrgrain

.projenrc.ts

@@ -676,16 +676,54 @@ const tmpToolkitHelpers = configureProject(
     devDeps: [
       '@types/archiver',
       '@types/semver',
+      'aws-sdk-client-mock',
+      'aws-sdk-client-mock-jest',
       'fast-check',
+      'nock',
+      '@smithy/util-stream',
+      'xml-js',
     ],
     deps: [
       cloudAssemblySchema.name,
       cloudFormationDiff,
       cxApi,
+      `@aws-sdk/client-appsync@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-cloudcontrol@${CLI_SDK_V3_RANGE}`,
       `@aws-sdk/client-cloudformation@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-cloudwatch-logs@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-codebuild@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-ec2@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-ecr@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-ecs@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-elastic-load-balancing-v2@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-iam@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-kms@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-lambda@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-route-53@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-s3@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-secrets-manager@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-sfn@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-ssm@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/client-sts@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/credential-providers@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/lib-storage@${CLI_SDK_V3_RANGE}`,
+      `@aws-sdk/ec2-metadata-service@${CLI_SDK_V3_RANGE}`,
+      '@smithy/middleware-endpoint',
+      '@smithy/node-http-handler',
+      '@smithy/property-provider',
+      '@smithy/shared-ini-file-loader',
+      '@smithy/types',
+      '@smithy/util-retry',
+      '@smithy/util-waiter',
+      cdkAssets,
       'archiver',
       'chalk@4',
+      'fs-extra@^9',
       'glob',
+      'minimatch',
+      'p-limit@^3',
+      'promptly', // @todo remove this should only be in CLI
+      'proxy-agent', // @todo remove this should only be in CLI
       'semver',
       'uuid',
       'wrap-ansi@^7', // Last non-ESM version
@@ -870,9 +908,6 @@ const cli = configureProject(
         // We have many tests here that commonly time out
         testTimeout: 60_000,
         coveragePathIgnorePatterns: [
-          // Mostly wrappers around the SDK, which get mocked in unit tests
-          '<rootDir>/lib/api/aws-auth/sdk.ts',
-
           // Files generated by cli-args-gen
           '<rootDir>/lib/cli/parse-command-line-arguments.ts',
           '<rootDir>/lib/cli/user-input.ts',

packages/@aws-cdk/tmp-toolkit-helpers/.projen/deps.json

@@ -8,8 +8,8 @@ import * as promptly from 'promptly';
 import { makeCachingProvider } from './provider-caching';
 import { ProxyAgentProvider } from './proxy-agent';
 import type { SdkHttpOptions } from './sdk-provider';
-import { AuthenticationError } from '../../../../@aws-cdk/tmp-toolkit-helpers/src/api';
-import { IO, type IoHelper } from '../../../../@aws-cdk/tmp-toolkit-helpers/src/api/io/private';
+import { IO, type IoHelper } from '../io/private';
+import { AuthenticationError } from '../toolkit-error';
 
 const DEFAULT_CONNECTION_TIMEOUT = 10000;
 const DEFAULT_TIMEOUT = 300000;