@alienplatform/sdk 1.10.7 → 1.11.0

package/dist/sts.js

@@ -0,0 +1,1329 @@
+import { n as __esmMin, t as __commonJSMin } from "./rolldown-runtime.js";
+import { A as getHttpSigningPlugin, B as resolveHostHeaderConfig, E as DefaultIdentityProviderConfig, G as NODE_RETRY_MODE_CONFIG_OPTIONS, H as init_retry, I as getLoggerPlugin, J as DEFAULT_RETRY_MODE, M as getHttpAuthSchemeEndpointRuleSetPlugin, P as getRecursionDetectionPlugin, Q as emitWarningIfUnsupportedVersion, R as getHostHeaderPlugin, V as getRetryPlugin, W as NODE_MAX_ATTEMPT_CONFIG_OPTIONS, Z as setCredentialFeature, _ as resolveUserAgentConfig, a as resolveAwsRegionExtensionConfiguration, c as awsEndpointFunctions, f as createDefaultUserAgentProvider, m as getUserAgentPlugin, n as init_client, q as resolveRetryConfig, r as getAwsRegionExtensionConfiguration, s as stsRegionDefaultResolver, u as NODE_APP_ID_CONFIG_OPTIONS, w as NoAuthSigner, y as init_dist_es } from "./client.js";
+import { $ as calculateBodyLength, $t as TypeRegistry, Bt as emitWarningIfUnsupportedVersion$1, Dt as fromUtf8, E as BinaryDecisionDiagram, En as getSmithyContext, Et as toBase64, F as resolveRegionConfig, I as NODE_REGION_CONFIG_FILE_OPTIONS, K as loadConfig, L as NODE_REGION_CONFIG_OPTIONS, Lt as getDefaultExtensionConfiguration, Mt as init_client$1, N as resolveDefaultsModeConfig, Nt as NoOpLogger, U as NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, Ut as loadConfigsForDefaultMode, V as NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, Wt as ServiceException, Yt as Command, Zt as init_schema, _n as normalizeProvider, an as getSchemaSerdePlugin, b as customEndpointFunctions, c as Hash, d as getEndpointPlugin, f as init_endpoints, g as decideEndpoint, j as init_config$1, k as resolveParams, kt as fromBase64, ln as Client, p as resolveEndpointConfig, pn as parseUrl, qt as createAggregatedClient, r as init_serde, w as EndpointCache, wt as toUtf8, zt as resolveDefaultRuntimeConfig } from "./serde.js";
+import { a as getHttpHandlerExtensionConfiguration, r as getContentLengthPlugin, s as resolveHttpHandlerRuntimeConfig, t as init_protocols } from "./protocols.js";
+import { _ as AwsSdkSigV4ASigner, c as init_httpAuthSchemes, d as require_dist_cjs$1, f as NODE_SIGV4A_CONFIG_OPTIONS, h as NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, m as resolveAwsSdkSigV4AConfig, r as AwsQueryProtocol, t as init_protocols$1, u as resolveAwsSdkSigV4Config, y as AwsSdkSigV4Signer } from "./protocols2.js";
+import { t as require_dist_cjs$2 } from "./dist-cjs2.js";
+import { t as version } from "./package.js";
+//#region ../../node_modules/.pnpm/@aws-sdk+signature-v4-multi-region@3.996.34/node_modules/@aws-sdk/signature-v4-multi-region/dist-cjs/index.js
+var require_dist_cjs = /* @__PURE__ */ __commonJSMin(((exports) => {
+	var signatureV4 = require_dist_cjs$1();
+	const signatureV4CrtContainer = { CrtSignerV4: null };
+	const SESSION_TOKEN_QUERY_PARAM = "X-Amz-S3session-Token";
+	const SESSION_TOKEN_HEADER = SESSION_TOKEN_QUERY_PARAM.toLowerCase();
+	var SignatureV4SignWithCredentials = class extends signatureV4.SignatureV4 {
+		async signWithCredentials(requestToSign, credentials, options) {
+			const credentialsWithoutSessionToken = getCredentialsWithoutSessionToken(credentials);
+			requestToSign.headers[SESSION_TOKEN_HEADER] = credentials.sessionToken;
+			const privateAccess = this;
+			setSingleOverride(privateAccess, credentialsWithoutSessionToken);
+			return privateAccess.signRequest(requestToSign, options ?? {});
+		}
+		async presignWithCredentials(requestToSign, credentials, options) {
+			const credentialsWithoutSessionToken = getCredentialsWithoutSessionToken(credentials);
+			delete requestToSign.headers[SESSION_TOKEN_HEADER];
+			requestToSign.headers[SESSION_TOKEN_QUERY_PARAM] = credentials.sessionToken;
+			requestToSign.query = requestToSign.query ?? {};
+			requestToSign.query[SESSION_TOKEN_QUERY_PARAM] = credentials.sessionToken;
+			setSingleOverride(this, credentialsWithoutSessionToken);
+			return this.presign(requestToSign, options);
+		}
+	};
+	function getCredentialsWithoutSessionToken(credentials) {
+		return {
+			accessKeyId: credentials.accessKeyId,
+			secretAccessKey: credentials.secretAccessKey,
+			expiration: credentials.expiration
+		};
+	}
+	function setSingleOverride(privateAccess, credentialsWithoutSessionToken) {
+		const currentCredentialProvider = privateAccess.credentialProvider;
+		privateAccess.credentialProvider = () => {
+			privateAccess.credentialProvider = currentCredentialProvider;
+			return Promise.resolve(credentialsWithoutSessionToken);
+		};
+	}
+	var SignatureV4MultiRegion = class {
+		sigv4aSigner;
+		sigv4Signer;
+		signerOptions;
+		static sigv4aDependency() {
+			if (typeof signatureV4CrtContainer.CrtSignerV4 === "function") return "crt";
+			else if (typeof signatureV4.signatureV4aContainer.SignatureV4a === "function") return "js";
+			return "none";
+		}
+		constructor(options) {
+			this.sigv4Signer = new SignatureV4SignWithCredentials(options);
+			this.signerOptions = options;
+		}
+		async sign(requestToSign, options = {}) {
+			if (options.signingRegion === "*") return this.getSigv4aSigner().sign(requestToSign, options);
+			return this.sigv4Signer.sign(requestToSign, options);
+		}
+		async signWithCredentials(requestToSign, credentials, options = {}) {
+			if (options.signingRegion === "*") {
+				const signer = this.getSigv4aSigner();
+				const CrtSignerV4 = signatureV4CrtContainer.CrtSignerV4;
+				if (CrtSignerV4 && signer instanceof CrtSignerV4) return signer.signWithCredentials(requestToSign, credentials, options);
+				else throw new Error("signWithCredentials with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the \"@aws-sdk/signature-v4-crt\" package explicitly. You must also register the package by calling [require(\"@aws-sdk/signature-v4-crt\");] or an ESM equivalent such as [import \"@aws-sdk/signature-v4-crt\";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");
+			}
+			return this.sigv4Signer.signWithCredentials(requestToSign, credentials, options);
+		}
+		async presign(originalRequest, options = {}) {
+			if (options.signingRegion === "*") {
+				const signer = this.getSigv4aSigner();
+				const CrtSignerV4 = signatureV4CrtContainer.CrtSignerV4;
+				if (CrtSignerV4 && signer instanceof CrtSignerV4) return signer.presign(originalRequest, options);
+				else throw new Error("presign with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the \"@aws-sdk/signature-v4-crt\" package explicitly. You must also register the package by calling [require(\"@aws-sdk/signature-v4-crt\");] or an ESM equivalent such as [import \"@aws-sdk/signature-v4-crt\";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");
+			}
+			return this.sigv4Signer.presign(originalRequest, options);
+		}
+		async presignWithCredentials(originalRequest, credentials, options = {}) {
+			if (options.signingRegion === "*") throw new Error("Method presignWithCredentials is not supported for [signingRegion=*].");
+			return this.sigv4Signer.presignWithCredentials(originalRequest, credentials, options);
+		}
+		getSigv4aSigner() {
+			if (!this.sigv4aSigner) {
+				const CrtSignerV4 = signatureV4CrtContainer.CrtSignerV4;
+				const JsSigV4aSigner = signatureV4.signatureV4aContainer.SignatureV4a;
+				if (this.signerOptions.runtime === "node") {
+					if (!CrtSignerV4 && !JsSigV4aSigner) throw new Error("Neither CRT nor JS SigV4a implementation is available. Please load either @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");
+					if (CrtSignerV4 && typeof CrtSignerV4 === "function") this.sigv4aSigner = new CrtSignerV4({
+						...this.signerOptions,
+						signingAlgorithm: 1
+					});
+					else if (JsSigV4aSigner && typeof JsSigV4aSigner === "function") this.sigv4aSigner = new JsSigV4aSigner({ ...this.signerOptions });
+					else throw new Error("Available SigV4a implementation is not a valid constructor. Please ensure you've properly imported @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a.For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");
+				} else {
+					if (!JsSigV4aSigner || typeof JsSigV4aSigner !== "function") throw new Error("JS SigV4a implementation is not available or not a valid constructor. Please check whether you have installed the @aws-sdk/signature-v4a package explicitly. The CRT implementation is not available for browsers. You must also register the package by calling [require('@aws-sdk/signature-v4a');] or an ESM equivalent such as [import '@aws-sdk/signature-v4a';]. For more information please go to https://github.com/aws/aws-sdk-js-v3#using-javascript-non-crt-implementation-of-sigv4a");
+					this.sigv4aSigner = new JsSigV4aSigner({ ...this.signerOptions });
+				}
+			}
+			return this.sigv4aSigner;
+		}
+	};
+	exports.SignatureV4MultiRegion = SignatureV4MultiRegion;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/endpoint/bdd.js
+var q, a, b, c, d, e, f, g, h, i, j, k, l, m, n, o, p, _data, root, nodes, bdd;
+var init_bdd = __esmMin((() => {
+	init_endpoints();
+	q = "ref";
+	a = -1, b = true, c = "isSet", d = "PartitionResult", e = "booleanEquals", f = "stringEquals", g = "getAttr", h = "us-east-1", i = "sigv4", j = "sts", k = "https://sts.{Region}.{PartitionResult#dnsSuffix}", l = { [q]: "Endpoint" }, m = { [q]: "Region" }, n = { [q]: d }, o = {}, p = [m];
+	_data = {
+		conditions: [
+			[c, [l]],
+			[c, p],
+			[
+				"aws.partition",
+				p,
+				d
+			],
+			[e, [{ [q]: "UseFIPS" }, b]],
+			[e, [{ [q]: "UseDualStack" }, b]],
+			[f, [m, "aws-global"]],
+			[e, [{ [q]: "UseGlobalEndpoint" }, b]],
+			[f, [m, "eu-central-1"]],
+			[e, [{
+				fn: g,
+				argv: [n, "supportsDualStack"]
+			}, b]],
+			[e, [{
+				fn: g,
+				argv: [n, "supportsFIPS"]
+			}, b]],
+			[f, [m, "ap-south-1"]],
+			[f, [m, "eu-north-1"]],
+			[f, [m, "eu-west-1"]],
+			[f, [m, "eu-west-2"]],
+			[f, [m, "eu-west-3"]],
+			[f, [m, "sa-east-1"]],
+			[f, [m, h]],
+			[f, [m, "us-east-2"]],
+			[f, [m, "us-west-2"]],
+			[f, [m, "us-west-1"]],
+			[f, [m, "ca-central-1"]],
+			[f, [m, "ap-southeast-1"]],
+			[f, [m, "ap-northeast-1"]],
+			[f, [m, "ap-southeast-2"]],
+			[f, [{
+				fn: g,
+				argv: [n, "name"]
+			}, "aws-us-gov"]]
+		],
+		results: [
+			[a],
+			["https://sts.amazonaws.com", { authSchemes: [{
+				name: i,
+				signingName: j,
+				signingRegion: h
+			}] }],
+			[k, { authSchemes: [{
+				name: i,
+				signingName: j,
+				signingRegion: "{Region}"
+			}] }],
+			[a, "Invalid Configuration: FIPS and custom endpoint are not supported"],
+			[a, "Invalid Configuration: Dualstack and custom endpoint are not supported"],
+			[l, o],
+			["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", o],
+			[a, "FIPS and DualStack are enabled, but this partition does not support one or both"],
+			["https://sts.{Region}.amazonaws.com", o],
+			["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}", o],
+			[a, "FIPS is enabled but this partition does not support FIPS"],
+			["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}", o],
+			[a, "DualStack is enabled but this partition does not support DualStack"],
+			[k, o],
+			[a, "Invalid Configuration: Missing Region"]
+		]
+	};
+	root = 2;
+	nodes = new Int32Array([
+		-1,
+		1,
+		-1,
+		0,
+		30,
+		3,
+		1,
+		4,
+		100000014,
+		2,
+		5,
+		100000014,
+		3,
+		25,
+		6,
+		4,
+		24,
+		7,
+		5,
+		100000001,
+		8,
+		6,
+		9,
+		100000013,
+		7,
+		100000001,
+		10,
+		10,
+		100000001,
+		11,
+		11,
+		100000001,
+		12,
+		12,
+		100000001,
+		13,
+		13,
+		100000001,
+		14,
+		14,
+		100000001,
+		15,
+		15,
+		100000001,
+		16,
+		16,
+		100000001,
+		17,
+		17,
+		100000001,
+		18,
+		18,
+		100000001,
+		19,
+		19,
+		100000001,
+		20,
+		20,
+		100000001,
+		21,
+		21,
+		100000001,
+		22,
+		22,
+		100000001,
+		23,
+		23,
+		100000001,
+		100000002,
+		8,
+		100000011,
+		100000012,
+		4,
+		28,
+		26,
+		9,
+		27,
+		100000010,
+		24,
+		100000008,
+		100000009,
+		8,
+		29,
+		100000007,
+		9,
+		100000006,
+		100000007,
+		3,
+		100000003,
+		31,
+		4,
+		100000004,
+		100000005
+	]);
+	bdd = BinaryDecisionDiagram.from(nodes, root, _data.conditions, _data.results);
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/endpoint/endpointResolver.js
+var cache, defaultEndpointResolver;
+var init_endpointResolver = __esmMin((() => {
+	init_client();
+	init_endpoints();
+	init_bdd();
+	cache = new EndpointCache({
+		size: 50,
+		params: [
+			"Endpoint",
+			"Region",
+			"UseDualStack",
+			"UseFIPS",
+			"UseGlobalEndpoint"
+		]
+	});
+	defaultEndpointResolver = (endpointParams, context = {}) => {
+		return cache.get(endpointParams, () => decideEndpoint(bdd, {
+			endpointParams,
+			logger: context.logger
+		}));
+	};
+	customEndpointFunctions.aws = awsEndpointFunctions;
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/auth/httpAuthSchemeProvider.js
+function createAwsAuthSigv4HttpAuthOption(authParameters) {
+	return {
+		schemeId: "aws.auth#sigv4",
+		signingProperties: {
+			name: "sts",
+			region: authParameters.region
+		},
+		propertiesExtractor: (config, context) => ({ signingProperties: {
+			config,
+			context
+		} })
+	};
+}
+function createAwsAuthSigv4aHttpAuthOption(authParameters) {
+	return {
+		schemeId: "aws.auth#sigv4a",
+		signingProperties: {
+			name: "sts",
+			region: authParameters.region
+		},
+		propertiesExtractor: (config, context) => ({ signingProperties: {
+			config,
+			context
+		} })
+	};
+}
+function createSmithyApiNoAuthHttpAuthOption(authParameters) {
+	return { schemeId: "smithy.api#noAuth" };
+}
+var import_dist_cjs$2, createEndpointRuleSetHttpAuthSchemeParametersProvider, _defaultSTSHttpAuthSchemeParametersProvider, defaultSTSHttpAuthSchemeParametersProvider, createEndpointRuleSetHttpAuthSchemeProvider, _defaultSTSHttpAuthSchemeProvider, defaultSTSHttpAuthSchemeProvider, resolveHttpAuthSchemeConfig;
+var init_httpAuthSchemeProvider = __esmMin((() => {
+	init_httpAuthSchemes();
+	import_dist_cjs$2 = require_dist_cjs();
+	init_client$1();
+	init_endpoints();
+	init_endpointResolver();
+	createEndpointRuleSetHttpAuthSchemeParametersProvider = (defaultHttpAuthSchemeParametersProvider) => async (config, context, input) => {
+		if (!input) throw new Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");
+		const defaultParameters = await defaultHttpAuthSchemeParametersProvider(config, context, input);
+		const instructionsFn = getSmithyContext(context)?.commandInstance?.constructor?.getEndpointParameterInstructions;
+		if (!instructionsFn) throw new Error(`getEndpointParameterInstructions() is not defined on '${context.commandName}'`);
+		const endpointParameters = await resolveParams(input, { getEndpointParameterInstructions: instructionsFn }, config);
+		return Object.assign(defaultParameters, endpointParameters);
+	};
+	_defaultSTSHttpAuthSchemeParametersProvider = async (config, context, input) => {
+		return {
+			operation: getSmithyContext(context).operation,
+			region: await normalizeProvider(config.region)() || (() => {
+				throw new Error("expected `region` to be configured for `aws.auth#sigv4`");
+			})()
+		};
+	};
+	defaultSTSHttpAuthSchemeParametersProvider = createEndpointRuleSetHttpAuthSchemeParametersProvider(_defaultSTSHttpAuthSchemeParametersProvider);
+	createEndpointRuleSetHttpAuthSchemeProvider = (defaultEndpointResolver, defaultHttpAuthSchemeResolver, createHttpAuthOptionFunctions) => {
+		const endpointRuleSetHttpAuthSchemeProvider = (authParameters) => {
+			const authSchemes = defaultEndpointResolver(authParameters).properties?.authSchemes;
+			if (!authSchemes) return defaultHttpAuthSchemeResolver(authParameters);
+			const options = [];
+			for (const scheme of authSchemes) {
+				const { name: resolvedName, properties = {}, ...rest } = scheme;
+				const name = resolvedName.toLowerCase();
+				if (resolvedName !== name) console.warn(`HttpAuthScheme has been normalized with lowercasing: '${resolvedName}' to '${name}'`);
+				let schemeId;
+				if (name === "sigv4a") {
+					schemeId = "aws.auth#sigv4a";
+					const sigv4Present = authSchemes.find((s) => {
+						const name = s.name.toLowerCase();
+						return name !== "sigv4a" && name.startsWith("sigv4");
+					});
+					if (import_dist_cjs$2.SignatureV4MultiRegion.sigv4aDependency() === "none" && sigv4Present) continue;
+				} else if (name.startsWith("sigv4")) schemeId = "aws.auth#sigv4";
+				else throw new Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${name}'`);
+				const createOption = createHttpAuthOptionFunctions[schemeId];
+				if (!createOption) throw new Error(`Could not find HttpAuthOption create function for '${schemeId}'`);
+				const option = createOption(authParameters);
+				option.schemeId = schemeId;
+				option.signingProperties = {
+					...option.signingProperties || {},
+					...rest,
+					...properties
+				};
+				options.push(option);
+			}
+			return options;
+		};
+		return endpointRuleSetHttpAuthSchemeProvider;
+	};
+	_defaultSTSHttpAuthSchemeProvider = (authParameters) => {
+		const options = [];
+		switch (authParameters.operation) {
+			case "AssumeRoleWithWebIdentity":
+				options.push(createSmithyApiNoAuthHttpAuthOption(authParameters));
+				options.push(createAwsAuthSigv4aHttpAuthOption(authParameters));
+				break;
+			default:
+				options.push(createAwsAuthSigv4HttpAuthOption(authParameters));
+				options.push(createAwsAuthSigv4aHttpAuthOption(authParameters));
+		}
+		return options;
+	};
+	defaultSTSHttpAuthSchemeProvider = createEndpointRuleSetHttpAuthSchemeProvider(defaultEndpointResolver, _defaultSTSHttpAuthSchemeProvider, {
+		"aws.auth#sigv4": createAwsAuthSigv4HttpAuthOption,
+		"aws.auth#sigv4a": createAwsAuthSigv4aHttpAuthOption,
+		"smithy.api#noAuth": createSmithyApiNoAuthHttpAuthOption
+	});
+	resolveHttpAuthSchemeConfig = (config) => {
+		const config_1 = resolveAwsSdkSigV4AConfig(resolveAwsSdkSigV4Config(config));
+		return Object.assign(config_1, { authSchemePreference: normalizeProvider(config.authSchemePreference ?? []) });
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/endpoint/EndpointParameters.js
+var resolveClientEndpointParameters, commonParams;
+var init_EndpointParameters = __esmMin((() => {
+	resolveClientEndpointParameters = (options) => {
+		return Object.assign(options, {
+			useDualstackEndpoint: options.useDualstackEndpoint ?? false,
+			useFipsEndpoint: options.useFipsEndpoint ?? false,
+			useGlobalEndpoint: options.useGlobalEndpoint ?? false,
+			defaultSigningName: "sts"
+		});
+	};
+	commonParams = {
+		UseGlobalEndpoint: {
+			type: "builtInParams",
+			name: "useGlobalEndpoint"
+		},
+		UseFIPS: {
+			type: "builtInParams",
+			name: "useFipsEndpoint"
+		},
+		Endpoint: {
+			type: "builtInParams",
+			name: "endpoint"
+		},
+		Region: {
+			type: "builtInParams",
+			name: "region"
+		},
+		UseDualStack: {
+			type: "builtInParams",
+			name: "useDualstackEndpoint"
+		}
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/models/STSServiceException.js
+var STSServiceException;
+var init_STSServiceException = __esmMin((() => {
+	init_client$1();
+	STSServiceException = class STSServiceException extends ServiceException {
+		constructor(options) {
+			super(options);
+			Object.setPrototypeOf(this, STSServiceException.prototype);
+		}
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/models/errors.js
+var ExpiredTokenException, MalformedPolicyDocumentException, PackedPolicyTooLargeException, RegionDisabledException, IDPRejectedClaimException, InvalidIdentityTokenException, IDPCommunicationErrorException;
+var init_errors = __esmMin((() => {
+	init_STSServiceException();
+	ExpiredTokenException = class ExpiredTokenException extends STSServiceException {
+		name = "ExpiredTokenException";
+		$fault = "client";
+		constructor(opts) {
+			super({
+				name: "ExpiredTokenException",
+				$fault: "client",
+				...opts
+			});
+			Object.setPrototypeOf(this, ExpiredTokenException.prototype);
+		}
+	};
+	MalformedPolicyDocumentException = class MalformedPolicyDocumentException extends STSServiceException {
+		name = "MalformedPolicyDocumentException";
+		$fault = "client";
+		constructor(opts) {
+			super({
+				name: "MalformedPolicyDocumentException",
+				$fault: "client",
+				...opts
+			});
+			Object.setPrototypeOf(this, MalformedPolicyDocumentException.prototype);
+		}
+	};
+	PackedPolicyTooLargeException = class PackedPolicyTooLargeException extends STSServiceException {
+		name = "PackedPolicyTooLargeException";
+		$fault = "client";
+		constructor(opts) {
+			super({
+				name: "PackedPolicyTooLargeException",
+				$fault: "client",
+				...opts
+			});
+			Object.setPrototypeOf(this, PackedPolicyTooLargeException.prototype);
+		}
+	};
+	RegionDisabledException = class RegionDisabledException extends STSServiceException {
+		name = "RegionDisabledException";
+		$fault = "client";
+		constructor(opts) {
+			super({
+				name: "RegionDisabledException",
+				$fault: "client",
+				...opts
+			});
+			Object.setPrototypeOf(this, RegionDisabledException.prototype);
+		}
+	};
+	IDPRejectedClaimException = class IDPRejectedClaimException extends STSServiceException {
+		name = "IDPRejectedClaimException";
+		$fault = "client";
+		constructor(opts) {
+			super({
+				name: "IDPRejectedClaimException",
+				$fault: "client",
+				...opts
+			});
+			Object.setPrototypeOf(this, IDPRejectedClaimException.prototype);
+		}
+	};
+	InvalidIdentityTokenException = class InvalidIdentityTokenException extends STSServiceException {
+		name = "InvalidIdentityTokenException";
+		$fault = "client";
+		constructor(opts) {
+			super({
+				name: "InvalidIdentityTokenException",
+				$fault: "client",
+				...opts
+			});
+			Object.setPrototypeOf(this, InvalidIdentityTokenException.prototype);
+		}
+	};
+	IDPCommunicationErrorException = class IDPCommunicationErrorException extends STSServiceException {
+		name = "IDPCommunicationErrorException";
+		$fault = "client";
+		$retryable = {};
+		constructor(opts) {
+			super({
+				name: "IDPCommunicationErrorException",
+				$fault: "client",
+				...opts
+			});
+			Object.setPrototypeOf(this, IDPCommunicationErrorException.prototype);
+		}
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/schemas/schemas_0.js
+var _A, _AKI, _AR, _ARI, _ARR, _ARRs, _ARU, _ARWWI, _ARWWIR, _ARWWIRs, _Au, _C, _CA, _DS, _E, _EI, _ETE, _IDPCEE, _IDPRCE, _IITE, _K, _MPDE, _P, _PA, _PAr, _PC, _PCLT, _PCr, _PDT, _PI, _PPS, _PPTLE, _Pr, _RA, _RDE, _RSN, _SAK, _SFWIT, _SI, _SN, _ST, _T, _TC, _TTK, _Ta, _V, _WIT, _a, _aKST, _aQE, _c, _cTT, _e, _hE, _m, _pDLT, _s, _tLT, n0, _s_registry, STSServiceException$, n0_registry, ExpiredTokenException$, IDPCommunicationErrorException$, IDPRejectedClaimException$, InvalidIdentityTokenException$, MalformedPolicyDocumentException$, PackedPolicyTooLargeException$, RegionDisabledException$, errorTypeRegistries, accessKeySecretType, clientTokenType, AssumedRoleUser$, AssumeRoleRequest$, AssumeRoleResponse$, AssumeRoleWithWebIdentityRequest$, AssumeRoleWithWebIdentityResponse$, Credentials$, PolicyDescriptorType$, ProvidedContext$, Tag$, policyDescriptorListType, ProvidedContextsListType, tagListType, AssumeRole$, AssumeRoleWithWebIdentity$;
+var init_schemas_0 = __esmMin((() => {
+	init_schema();
+	init_errors();
+	init_STSServiceException();
+	_A = "Arn";
+	_AKI = "AccessKeyId";
+	_AR = "AssumeRole";
+	_ARI = "AssumedRoleId";
+	_ARR = "AssumeRoleRequest";
+	_ARRs = "AssumeRoleResponse";
+	_ARU = "AssumedRoleUser";
+	_ARWWI = "AssumeRoleWithWebIdentity";
+	_ARWWIR = "AssumeRoleWithWebIdentityRequest";
+	_ARWWIRs = "AssumeRoleWithWebIdentityResponse";
+	_Au = "Audience";
+	_C = "Credentials";
+	_CA = "ContextAssertion";
+	_DS = "DurationSeconds";
+	_E = "Expiration";
+	_EI = "ExternalId";
+	_ETE = "ExpiredTokenException";
+	_IDPCEE = "IDPCommunicationErrorException";
+	_IDPRCE = "IDPRejectedClaimException";
+	_IITE = "InvalidIdentityTokenException";
+	_K = "Key";
+	_MPDE = "MalformedPolicyDocumentException";
+	_P = "Policy";
+	_PA = "PolicyArns";
+	_PAr = "ProviderArn";
+	_PC = "ProvidedContexts";
+	_PCLT = "ProvidedContextsListType";
+	_PCr = "ProvidedContext";
+	_PDT = "PolicyDescriptorType";
+	_PI = "ProviderId";
+	_PPS = "PackedPolicySize";
+	_PPTLE = "PackedPolicyTooLargeException";
+	_Pr = "Provider";
+	_RA = "RoleArn";
+	_RDE = "RegionDisabledException";
+	_RSN = "RoleSessionName";
+	_SAK = "SecretAccessKey";
+	_SFWIT = "SubjectFromWebIdentityToken";
+	_SI = "SourceIdentity";
+	_SN = "SerialNumber";
+	_ST = "SessionToken";
+	_T = "Tags";
+	_TC = "TokenCode";
+	_TTK = "TransitiveTagKeys";
+	_Ta = "Tag";
+	_V = "Value";
+	_WIT = "WebIdentityToken";
+	_a = "arn";
+	_aKST = "accessKeySecretType";
+	_aQE = "awsQueryError";
+	_c = "client";
+	_cTT = "clientTokenType";
+	_e = "error";
+	_hE = "httpError";
+	_m = "message";
+	_pDLT = "policyDescriptorListType";
+	_s = "smithy.ts.sdk.synthetic.com.amazonaws.sts";
+	_tLT = "tagListType";
+	n0 = "com.amazonaws.sts";
+	_s_registry = TypeRegistry.for(_s);
+	STSServiceException$ = [
+		-3,
+		_s,
+		"STSServiceException",
+		0,
+		[],
+		[]
+	];
+	_s_registry.registerError(STSServiceException$, STSServiceException);
+	n0_registry = TypeRegistry.for(n0);
+	ExpiredTokenException$ = [
+		-3,
+		n0,
+		_ETE,
+		{
+			[_aQE]: [`ExpiredTokenException`, 400],
+			[_e]: _c,
+			[_hE]: 400
+		},
+		[_m],
+		[0]
+	];
+	n0_registry.registerError(ExpiredTokenException$, ExpiredTokenException);
+	IDPCommunicationErrorException$ = [
+		-3,
+		n0,
+		_IDPCEE,
+		{
+			[_aQE]: [`IDPCommunicationError`, 400],
+			[_e]: _c,
+			[_hE]: 400
+		},
+		[_m],
+		[0]
+	];
+	n0_registry.registerError(IDPCommunicationErrorException$, IDPCommunicationErrorException);
+	IDPRejectedClaimException$ = [
+		-3,
+		n0,
+		_IDPRCE,
+		{
+			[_aQE]: [`IDPRejectedClaim`, 403],
+			[_e]: _c,
+			[_hE]: 403
+		},
+		[_m],
+		[0]
+	];
+	n0_registry.registerError(IDPRejectedClaimException$, IDPRejectedClaimException);
+	InvalidIdentityTokenException$ = [
+		-3,
+		n0,
+		_IITE,
+		{
+			[_aQE]: [`InvalidIdentityToken`, 400],
+			[_e]: _c,
+			[_hE]: 400
+		},
+		[_m],
+		[0]
+	];
+	n0_registry.registerError(InvalidIdentityTokenException$, InvalidIdentityTokenException);
+	MalformedPolicyDocumentException$ = [
+		-3,
+		n0,
+		_MPDE,
+		{
+			[_aQE]: [`MalformedPolicyDocument`, 400],
+			[_e]: _c,
+			[_hE]: 400
+		},
+		[_m],
+		[0]
+	];
+	n0_registry.registerError(MalformedPolicyDocumentException$, MalformedPolicyDocumentException);
+	PackedPolicyTooLargeException$ = [
+		-3,
+		n0,
+		_PPTLE,
+		{
+			[_aQE]: [`PackedPolicyTooLarge`, 400],
+			[_e]: _c,
+			[_hE]: 400
+		},
+		[_m],
+		[0]
+	];
+	n0_registry.registerError(PackedPolicyTooLargeException$, PackedPolicyTooLargeException);
+	RegionDisabledException$ = [
+		-3,
+		n0,
+		_RDE,
+		{
+			[_aQE]: [`RegionDisabledException`, 403],
+			[_e]: _c,
+			[_hE]: 403
+		},
+		[_m],
+		[0]
+	];
+	n0_registry.registerError(RegionDisabledException$, RegionDisabledException);
+	errorTypeRegistries = [_s_registry, n0_registry];
+	accessKeySecretType = [
+		0,
+		n0,
+		_aKST,
+		8,
+		0
+	];
+	clientTokenType = [
+		0,
+		n0,
+		_cTT,
+		8,
+		0
+	];
+	AssumedRoleUser$ = [
+		3,
+		n0,
+		_ARU,
+		0,
+		[_ARI, _A],
+		[0, 0],
+		2
+	];
+	AssumeRoleRequest$ = [
+		3,
+		n0,
+		_ARR,
+		0,
+		[
+			_RA,
+			_RSN,
+			_PA,
+			_P,
+			_DS,
+			_T,
+			_TTK,
+			_EI,
+			_SN,
+			_TC,
+			_SI,
+			_PC
+		],
+		[
+			0,
+			0,
+			() => policyDescriptorListType,
+			0,
+			1,
+			() => tagListType,
+			64,
+			0,
+			0,
+			0,
+			0,
+			() => ProvidedContextsListType
+		],
+		2
+	];
+	AssumeRoleResponse$ = [
+		3,
+		n0,
+		_ARRs,
+		0,
+		[
+			_C,
+			_ARU,
+			_PPS,
+			_SI
+		],
+		[
+			[() => Credentials$, 0],
+			() => AssumedRoleUser$,
+			1,
+			0
+		]
+	];
+	AssumeRoleWithWebIdentityRequest$ = [
+		3,
+		n0,
+		_ARWWIR,
+		0,
+		[
+			_RA,
+			_RSN,
+			_WIT,
+			_PI,
+			_PA,
+			_P,
+			_DS
+		],
+		[
+			0,
+			0,
+			[() => clientTokenType, 0],
+			0,
+			() => policyDescriptorListType,
+			0,
+			1
+		],
+		3
+	];
+	AssumeRoleWithWebIdentityResponse$ = [
+		3,
+		n0,
+		_ARWWIRs,
+		0,
+		[
+			_C,
+			_SFWIT,
+			_ARU,
+			_PPS,
+			_Pr,
+			_Au,
+			_SI
+		],
+		[
+			[() => Credentials$, 0],
+			0,
+			() => AssumedRoleUser$,
+			1,
+			0,
+			0,
+			0
+		]
+	];
+	Credentials$ = [
+		3,
+		n0,
+		_C,
+		0,
+		[
+			_AKI,
+			_SAK,
+			_ST,
+			_E
+		],
+		[
+			0,
+			[() => accessKeySecretType, 0],
+			0,
+			4
+		],
+		4
+	];
+	PolicyDescriptorType$ = [
+		3,
+		n0,
+		_PDT,
+		0,
+		[_a],
+		[0]
+	];
+	ProvidedContext$ = [
+		3,
+		n0,
+		_PCr,
+		0,
+		[_PAr, _CA],
+		[0, 0]
+	];
+	Tag$ = [
+		3,
+		n0,
+		_Ta,
+		0,
+		[_K, _V],
+		[0, 0],
+		2
+	];
+	policyDescriptorListType = [
+		1,
+		n0,
+		_pDLT,
+		0,
+		() => PolicyDescriptorType$
+	];
+	ProvidedContextsListType = [
+		1,
+		n0,
+		_PCLT,
+		0,
+		() => ProvidedContext$
+	];
+	tagListType = [
+		1,
+		n0,
+		_tLT,
+		0,
+		() => Tag$
+	];
+	AssumeRole$ = [
+		9,
+		n0,
+		_AR,
+		0,
+		() => AssumeRoleRequest$,
+		() => AssumeRoleResponse$
+	];
+	AssumeRoleWithWebIdentity$ = [
+		9,
+		n0,
+		_ARWWI,
+		0,
+		() => AssumeRoleWithWebIdentityRequest$,
+		() => AssumeRoleWithWebIdentityResponse$
+	];
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/runtimeConfig.shared.js
+var import_dist_cjs$1, getRuntimeConfig$1;
+var init_runtimeConfig_shared = __esmMin((() => {
+	init_httpAuthSchemes();
+	init_protocols$1();
+	import_dist_cjs$1 = require_dist_cjs();
+	init_dist_es();
+	init_client$1();
+	init_protocols();
+	init_serde();
+	init_httpAuthSchemeProvider();
+	init_endpointResolver();
+	init_schemas_0();
+	getRuntimeConfig$1 = (config) => {
+		return {
+			apiVersion: "2011-06-15",
+			base64Decoder: config?.base64Decoder ?? fromBase64,
+			base64Encoder: config?.base64Encoder ?? toBase64,
+			disableHostPrefix: config?.disableHostPrefix ?? false,
+			endpointProvider: config?.endpointProvider ?? defaultEndpointResolver,
+			extensions: config?.extensions ?? [],
+			httpAuthSchemeProvider: config?.httpAuthSchemeProvider ?? defaultSTSHttpAuthSchemeProvider,
+			httpAuthSchemes: config?.httpAuthSchemes ?? [
+				{
+					schemeId: "aws.auth#sigv4",
+					identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4"),
+					signer: new AwsSdkSigV4Signer()
+				},
+				{
+					schemeId: "aws.auth#sigv4a",
+					identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4a"),
+					signer: new AwsSdkSigV4ASigner()
+				},
+				{
+					schemeId: "smithy.api#noAuth",
+					identityProvider: (ipc) => ipc.getIdentityProvider("smithy.api#noAuth") || (async () => ({})),
+					signer: new NoAuthSigner()
+				}
+			],
+			logger: config?.logger ?? new NoOpLogger(),
+			protocol: config?.protocol ?? AwsQueryProtocol,
+			protocolSettings: config?.protocolSettings ?? {
+				defaultNamespace: "com.amazonaws.sts",
+				errorTypeRegistries,
+				xmlNamespace: "https://sts.amazonaws.com/doc/2011-06-15/",
+				version: "2011-06-15",
+				serviceTarget: "AWSSecurityTokenServiceV20110615"
+			},
+			serviceId: config?.serviceId ?? "STS",
+			signerConstructor: config?.signerConstructor ?? import_dist_cjs$1.SignatureV4MultiRegion,
+			urlParser: config?.urlParser ?? parseUrl,
+			utf8Decoder: config?.utf8Decoder ?? fromUtf8,
+			utf8Encoder: config?.utf8Encoder ?? toUtf8
+		};
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/runtimeConfig.js
+var import_dist_cjs, getRuntimeConfig;
+var init_runtimeConfig = __esmMin((() => {
+	init_client();
+	init_httpAuthSchemes();
+	init_dist_es();
+	init_client$1();
+	init_config$1();
+	init_retry();
+	init_serde();
+	import_dist_cjs = require_dist_cjs$2();
+	init_runtimeConfig_shared();
+	getRuntimeConfig = (config) => {
+		emitWarningIfUnsupportedVersion$1(process.version);
+		const defaultsMode = resolveDefaultsModeConfig(config);
+		const defaultConfigProvider = () => defaultsMode().then(loadConfigsForDefaultMode);
+		const clientSharedValues = getRuntimeConfig$1(config);
+		emitWarningIfUnsupportedVersion(process.version);
+		const loaderConfig = {
+			profile: config?.profile,
+			logger: clientSharedValues.logger
+		};
+		return {
+			...clientSharedValues,
+			...config,
+			runtime: "node",
+			defaultsMode,
+			authSchemePreference: config?.authSchemePreference ?? loadConfig(NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, loaderConfig),
+			bodyLengthChecker: config?.bodyLengthChecker ?? calculateBodyLength,
+			defaultUserAgentProvider: config?.defaultUserAgentProvider ?? createDefaultUserAgentProvider({
+				serviceId: clientSharedValues.serviceId,
+				clientVersion: version
+			}),
+			httpAuthSchemes: config?.httpAuthSchemes ?? [
+				{
+					schemeId: "aws.auth#sigv4",
+					identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4") || (async (idProps) => await config.credentialDefaultProvider(idProps?.__config || {})()),
+					signer: new AwsSdkSigV4Signer()
+				},
+				{
+					schemeId: "aws.auth#sigv4a",
+					identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4a"),
+					signer: new AwsSdkSigV4ASigner()
+				},
+				{
+					schemeId: "smithy.api#noAuth",
+					identityProvider: (ipc) => ipc.getIdentityProvider("smithy.api#noAuth") || (async () => ({})),
+					signer: new NoAuthSigner()
+				}
+			],
+			maxAttempts: config?.maxAttempts ?? loadConfig(NODE_MAX_ATTEMPT_CONFIG_OPTIONS, config),
+			region: config?.region ?? loadConfig(NODE_REGION_CONFIG_OPTIONS, {
+				...NODE_REGION_CONFIG_FILE_OPTIONS,
+				...loaderConfig
+			}),
+			requestHandler: import_dist_cjs.NodeHttpHandler.create(config?.requestHandler ?? defaultConfigProvider),
+			retryMode: config?.retryMode ?? loadConfig({
+				...NODE_RETRY_MODE_CONFIG_OPTIONS,
+				default: async () => (await defaultConfigProvider()).retryMode || DEFAULT_RETRY_MODE
+			}, config),
+			sha256: config?.sha256 ?? Hash.bind(null, "sha256"),
+			sigv4aSigningRegionSet: config?.sigv4aSigningRegionSet ?? loadConfig(NODE_SIGV4A_CONFIG_OPTIONS, loaderConfig),
+			streamCollector: config?.streamCollector ?? import_dist_cjs.streamCollector,
+			useDualstackEndpoint: config?.useDualstackEndpoint ?? loadConfig(NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
+			useFipsEndpoint: config?.useFipsEndpoint ?? loadConfig(NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
+			userAgentAppId: config?.userAgentAppId ?? loadConfig(NODE_APP_ID_CONFIG_OPTIONS, loaderConfig)
+		};
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/auth/httpAuthExtensionConfiguration.js
+var getHttpAuthExtensionConfiguration, resolveHttpAuthRuntimeConfig;
+var init_httpAuthExtensionConfiguration = __esmMin((() => {
+	getHttpAuthExtensionConfiguration = (runtimeConfig) => {
+		const _httpAuthSchemes = runtimeConfig.httpAuthSchemes;
+		let _httpAuthSchemeProvider = runtimeConfig.httpAuthSchemeProvider;
+		let _credentials = runtimeConfig.credentials;
+		return {
+			setHttpAuthScheme(httpAuthScheme) {
+				const index = _httpAuthSchemes.findIndex((scheme) => scheme.schemeId === httpAuthScheme.schemeId);
+				if (index === -1) _httpAuthSchemes.push(httpAuthScheme);
+				else _httpAuthSchemes.splice(index, 1, httpAuthScheme);
+			},
+			httpAuthSchemes() {
+				return _httpAuthSchemes;
+			},
+			setHttpAuthSchemeProvider(httpAuthSchemeProvider) {
+				_httpAuthSchemeProvider = httpAuthSchemeProvider;
+			},
+			httpAuthSchemeProvider() {
+				return _httpAuthSchemeProvider;
+			},
+			setCredentials(credentials) {
+				_credentials = credentials;
+			},
+			credentials() {
+				return _credentials;
+			}
+		};
+	};
+	resolveHttpAuthRuntimeConfig = (config) => {
+		return {
+			httpAuthSchemes: config.httpAuthSchemes(),
+			httpAuthSchemeProvider: config.httpAuthSchemeProvider(),
+			credentials: config.credentials()
+		};
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/runtimeExtensions.js
+var resolveRuntimeExtensions;
+var init_runtimeExtensions = __esmMin((() => {
+	init_client();
+	init_client$1();
+	init_protocols();
+	init_httpAuthExtensionConfiguration();
+	resolveRuntimeExtensions = (runtimeConfig, extensions) => {
+		const extensionConfiguration = Object.assign(getAwsRegionExtensionConfiguration(runtimeConfig), getDefaultExtensionConfiguration(runtimeConfig), getHttpHandlerExtensionConfiguration(runtimeConfig), getHttpAuthExtensionConfiguration(runtimeConfig));
+		extensions.forEach((extension) => extension.configure(extensionConfiguration));
+		return Object.assign(runtimeConfig, resolveAwsRegionExtensionConfiguration(extensionConfiguration), resolveDefaultRuntimeConfig(extensionConfiguration), resolveHttpHandlerRuntimeConfig(extensionConfiguration), resolveHttpAuthRuntimeConfig(extensionConfiguration));
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/STSClient.js
+var STSClient;
+var init_STSClient = __esmMin((() => {
+	init_client();
+	init_dist_es();
+	init_client$1();
+	init_config$1();
+	init_endpoints();
+	init_protocols();
+	init_retry();
+	init_schema();
+	init_httpAuthSchemeProvider();
+	init_EndpointParameters();
+	init_runtimeConfig();
+	init_runtimeExtensions();
+	STSClient = class extends Client {
+		config;
+		constructor(...[configuration]) {
+			const _config_0 = getRuntimeConfig(configuration || {});
+			super(_config_0);
+			this.initConfig = _config_0;
+			const _config_8 = resolveRuntimeExtensions(resolveHttpAuthSchemeConfig(resolveEndpointConfig(resolveHostHeaderConfig(resolveRegionConfig(resolveRetryConfig(resolveUserAgentConfig(resolveClientEndpointParameters(_config_0))))))), configuration?.extensions || []);
+			this.config = _config_8;
+			this.middlewareStack.use(getSchemaSerdePlugin(this.config));
+			this.middlewareStack.use(getUserAgentPlugin(this.config));
+			this.middlewareStack.use(getRetryPlugin(this.config));
+			this.middlewareStack.use(getContentLengthPlugin(this.config));
+			this.middlewareStack.use(getHostHeaderPlugin(this.config));
+			this.middlewareStack.use(getLoggerPlugin(this.config));
+			this.middlewareStack.use(getRecursionDetectionPlugin(this.config));
+			this.middlewareStack.use(getHttpAuthSchemeEndpointRuleSetPlugin(this.config, {
+				httpAuthSchemeParametersProvider: defaultSTSHttpAuthSchemeParametersProvider,
+				identityProviderConfigProvider: async (config) => new DefaultIdentityProviderConfig({
+					"aws.auth#sigv4": config.credentials,
+					"aws.auth#sigv4a": config.credentials
+				})
+			}));
+			this.middlewareStack.use(getHttpSigningPlugin(this.config));
+		}
+		destroy() {
+			super.destroy();
+		}
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/commands/AssumeRoleCommand.js
+var AssumeRoleCommand;
+var init_AssumeRoleCommand = __esmMin((() => {
+	init_client$1();
+	init_endpoints();
+	init_EndpointParameters();
+	init_schemas_0();
+	AssumeRoleCommand = class extends Command.classBuilder().ep(commonParams).m(function(Command, cs, config, o) {
+		return [getEndpointPlugin(config, Command.getEndpointParameterInstructions())];
+	}).s("AWSSecurityTokenServiceV20110615", "AssumeRole", {}).n("STSClient", "AssumeRoleCommand").sc(AssumeRole$).build() {};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/commands/AssumeRoleWithWebIdentityCommand.js
+var AssumeRoleWithWebIdentityCommand;
+var init_AssumeRoleWithWebIdentityCommand = __esmMin((() => {
+	init_client$1();
+	init_endpoints();
+	init_EndpointParameters();
+	init_schemas_0();
+	AssumeRoleWithWebIdentityCommand = class extends Command.classBuilder().ep(commonParams).m(function(Command, cs, config, o) {
+		return [getEndpointPlugin(config, Command.getEndpointParameterInstructions())];
+	}).s("AWSSecurityTokenServiceV20110615", "AssumeRoleWithWebIdentity", {}).n("STSClient", "AssumeRoleWithWebIdentityCommand").sc(AssumeRoleWithWebIdentity$).build() {};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/STS.js
+var commands, STS;
+var init_STS = __esmMin((() => {
+	init_client$1();
+	init_AssumeRoleCommand();
+	init_AssumeRoleWithWebIdentityCommand();
+	init_STSClient();
+	commands = {
+		AssumeRoleCommand,
+		AssumeRoleWithWebIdentityCommand
+	};
+	STS = class extends STSClient {};
+	createAggregatedClient(commands, STS);
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/commands/index.js
+var init_commands = __esmMin((() => {
+	init_AssumeRoleCommand();
+	init_AssumeRoleWithWebIdentityCommand();
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/models/models_0.js
+var init_models_0 = __esmMin((() => {}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/defaultStsRoleAssumers.js
+var getAccountIdFromAssumedRoleUser, resolveRegion, getDefaultRoleAssumer$1, getDefaultRoleAssumerWithWebIdentity$1, isH2;
+var init_defaultStsRoleAssumers = __esmMin((() => {
+	init_client();
+	init_AssumeRoleCommand();
+	init_AssumeRoleWithWebIdentityCommand();
+	getAccountIdFromAssumedRoleUser = (assumedRoleUser) => {
+		if (typeof assumedRoleUser?.Arn === "string") {
+			const arnComponents = assumedRoleUser.Arn.split(":");
+			if (arnComponents.length > 4 && arnComponents[4] !== "") return arnComponents[4];
+		}
+	};
+	resolveRegion = async (_region, _parentRegion, credentialProviderLogger, loaderConfig = {}) => {
+		const region = typeof _region === "function" ? await _region() : _region;
+		const parentRegion = typeof _parentRegion === "function" ? await _parentRegion() : _parentRegion;
+		let stsDefaultRegion = "";
+		const resolvedRegion = region ?? parentRegion ?? (stsDefaultRegion = await stsRegionDefaultResolver(loaderConfig)());
+		credentialProviderLogger?.debug?.("@aws-sdk/client-sts::resolveRegion", "accepting first of:", `${region} (credential provider clientConfig)`, `${parentRegion} (contextual client)`, `${stsDefaultRegion} (STS default: AWS_REGION, profile region, or us-east-1)`);
+		return resolvedRegion;
+	};
+	getDefaultRoleAssumer$1 = (stsOptions, STSClient) => {
+		let stsClient;
+		let closureSourceCreds;
+		return async (sourceCreds, params) => {
+			closureSourceCreds = sourceCreds;
+			if (!stsClient) {
+				const { logger = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
+				const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
+					logger,
+					profile
+				});
+				const isCompatibleRequestHandler = !isH2(requestHandler);
+				stsClient = new STSClient({
+					...stsOptions,
+					userAgentAppId,
+					profile,
+					credentialDefaultProvider: () => async () => closureSourceCreds,
+					region: resolvedRegion,
+					requestHandler: isCompatibleRequestHandler ? requestHandler : void 0,
+					logger
+				});
+			}
+			const { Credentials, AssumedRoleUser } = await stsClient.send(new AssumeRoleCommand(params));
+			if (!Credentials || !Credentials.AccessKeyId || !Credentials.SecretAccessKey) throw new Error(`Invalid response from STS.assumeRole call with role ${params.RoleArn}`);
+			const accountId = getAccountIdFromAssumedRoleUser(AssumedRoleUser);
+			const credentials = {
+				accessKeyId: Credentials.AccessKeyId,
+				secretAccessKey: Credentials.SecretAccessKey,
+				sessionToken: Credentials.SessionToken,
+				expiration: Credentials.Expiration,
+				...Credentials.CredentialScope && { credentialScope: Credentials.CredentialScope },
+				...accountId && { accountId }
+			};
+			setCredentialFeature(credentials, "CREDENTIALS_STS_ASSUME_ROLE", "i");
+			return credentials;
+		};
+	};
+	getDefaultRoleAssumerWithWebIdentity$1 = (stsOptions, STSClient) => {
+		let stsClient;
+		return async (params) => {
+			if (!stsClient) {
+				const { logger = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
+				const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
+					logger,
+					profile
+				});
+				const isCompatibleRequestHandler = !isH2(requestHandler);
+				stsClient = new STSClient({
+					...stsOptions,
+					userAgentAppId,
+					profile,
+					region: resolvedRegion,
+					requestHandler: isCompatibleRequestHandler ? requestHandler : void 0,
+					logger
+				});
+			}
+			const { Credentials, AssumedRoleUser } = await stsClient.send(new AssumeRoleWithWebIdentityCommand(params));
+			if (!Credentials || !Credentials.AccessKeyId || !Credentials.SecretAccessKey) throw new Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${params.RoleArn}`);
+			const accountId = getAccountIdFromAssumedRoleUser(AssumedRoleUser);
+			const credentials = {
+				accessKeyId: Credentials.AccessKeyId,
+				secretAccessKey: Credentials.SecretAccessKey,
+				sessionToken: Credentials.SessionToken,
+				expiration: Credentials.Expiration,
+				...Credentials.CredentialScope && { credentialScope: Credentials.CredentialScope },
+				...accountId && { accountId }
+			};
+			if (accountId) setCredentialFeature(credentials, "RESOLVED_ACCOUNT_ID", "T");
+			setCredentialFeature(credentials, "CREDENTIALS_STS_ASSUME_ROLE_WEB_ID", "k");
+			return credentials;
+		};
+	};
+	isH2 = (requestHandler) => {
+		return requestHandler?.metadata?.handlerProtocol === "h2";
+	};
+}));
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/defaultRoleAssumers.js
+var getCustomizableStsClientCtor, getDefaultRoleAssumer, getDefaultRoleAssumerWithWebIdentity;
+var init_defaultRoleAssumers = __esmMin((() => {
+	init_defaultStsRoleAssumers();
+	init_STSClient();
+	getCustomizableStsClientCtor = (baseCtor, customizations) => {
+		if (!customizations) return baseCtor;
+		else return class CustomizableSTSClient extends baseCtor {
+			constructor(config) {
+				super(config);
+				for (const customization of customizations) this.middlewareStack.use(customization);
+			}
+		};
+	};
+	getDefaultRoleAssumer = (stsOptions = {}, stsPlugins) => getDefaultRoleAssumer$1(stsOptions, getCustomizableStsClientCtor(STSClient, stsPlugins));
+	getDefaultRoleAssumerWithWebIdentity = (stsOptions = {}, stsPlugins) => getDefaultRoleAssumerWithWebIdentity$1(stsOptions, getCustomizableStsClientCtor(STSClient, stsPlugins));
+}));
+//#endregion
+__esmMin((() => {
+	init_STSClient();
+	init_STS();
+	init_commands();
+	init_schemas_0();
+	init_errors();
+	init_models_0();
+	init_defaultRoleAssumers();
+	init_STSServiceException();
+}))();
+export { getDefaultRoleAssumer, getDefaultRoleAssumerWithWebIdentity };