@alienplatform/sdk 1.11.2 → 1.13.0

package/dist/sts.js

@@ -1,1329 +0,0 @@
-import { n as __esmMin, t as __commonJSMin } from "./rolldown-runtime.js";
-import { A as getHttpSigningPlugin, B as resolveHostHeaderConfig, E as DefaultIdentityProviderConfig, G as NODE_RETRY_MODE_CONFIG_OPTIONS, H as init_retry, I as getLoggerPlugin, J as DEFAULT_RETRY_MODE, M as getHttpAuthSchemeEndpointRuleSetPlugin, P as getRecursionDetectionPlugin, Q as emitWarningIfUnsupportedVersion, R as getHostHeaderPlugin, V as getRetryPlugin, W as NODE_MAX_ATTEMPT_CONFIG_OPTIONS, Z as setCredentialFeature, _ as resolveUserAgentConfig, a as resolveAwsRegionExtensionConfiguration, c as awsEndpointFunctions, f as createDefaultUserAgentProvider, m as getUserAgentPlugin, n as init_client, q as resolveRetryConfig, r as getAwsRegionExtensionConfiguration, s as stsRegionDefaultResolver, u as NODE_APP_ID_CONFIG_OPTIONS, w as NoAuthSigner, y as init_dist_es } from "./client.js";
-import { $ as calculateBodyLength, $t as TypeRegistry, Bt as emitWarningIfUnsupportedVersion$1, Dt as fromUtf8, E as BinaryDecisionDiagram, En as getSmithyContext, Et as toBase64, F as resolveRegionConfig, I as NODE_REGION_CONFIG_FILE_OPTIONS, K as loadConfig, L as NODE_REGION_CONFIG_OPTIONS, Lt as getDefaultExtensionConfiguration, Mt as init_client$1, N as resolveDefaultsModeConfig, Nt as NoOpLogger, U as NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, Ut as loadConfigsForDefaultMode, V as NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, Wt as ServiceException, Yt as Command, Zt as init_schema, _n as normalizeProvider, an as getSchemaSerdePlugin, b as customEndpointFunctions, c as Hash, d as getEndpointPlugin, f as init_endpoints, g as decideEndpoint, j as init_config$1, k as resolveParams, kt as fromBase64, ln as Client, p as resolveEndpointConfig, pn as parseUrl, qt as createAggregatedClient, r as init_serde, w as EndpointCache, wt as toUtf8, zt as resolveDefaultRuntimeConfig } from "./serde.js";
-import { a as getHttpHandlerExtensionConfiguration, r as getContentLengthPlugin, s as resolveHttpHandlerRuntimeConfig, t as init_protocols } from "./protocols.js";
-import { _ as AwsSdkSigV4ASigner, c as init_httpAuthSchemes, d as require_dist_cjs$1, f as NODE_SIGV4A_CONFIG_OPTIONS, h as NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, m as resolveAwsSdkSigV4AConfig, r as AwsQueryProtocol, t as init_protocols$1, u as resolveAwsSdkSigV4Config, y as AwsSdkSigV4Signer } from "./protocols2.js";
-import { t as require_dist_cjs$2 } from "./dist-cjs2.js";
-import { t as version } from "./package.js";
-//#region ../../node_modules/.pnpm/@aws-sdk+signature-v4-multi-region@3.996.34/node_modules/@aws-sdk/signature-v4-multi-region/dist-cjs/index.js
-var require_dist_cjs = /* @__PURE__ */ __commonJSMin(((exports) => {
-	var signatureV4 = require_dist_cjs$1();
-	const signatureV4CrtContainer = { CrtSignerV4: null };
-	const SESSION_TOKEN_QUERY_PARAM = "X-Amz-S3session-Token";
-	const SESSION_TOKEN_HEADER = SESSION_TOKEN_QUERY_PARAM.toLowerCase();
-	var SignatureV4SignWithCredentials = class extends signatureV4.SignatureV4 {
-		async signWithCredentials(requestToSign, credentials, options) {
-			const credentialsWithoutSessionToken = getCredentialsWithoutSessionToken(credentials);
-			requestToSign.headers[SESSION_TOKEN_HEADER] = credentials.sessionToken;
-			const privateAccess = this;
-			setSingleOverride(privateAccess, credentialsWithoutSessionToken);
-			return privateAccess.signRequest(requestToSign, options ?? {});
-		}
-		async presignWithCredentials(requestToSign, credentials, options) {
-			const credentialsWithoutSessionToken = getCredentialsWithoutSessionToken(credentials);
-			delete requestToSign.headers[SESSION_TOKEN_HEADER];
-			requestToSign.headers[SESSION_TOKEN_QUERY_PARAM] = credentials.sessionToken;
-			requestToSign.query = requestToSign.query ?? {};
-			requestToSign.query[SESSION_TOKEN_QUERY_PARAM] = credentials.sessionToken;
-			setSingleOverride(this, credentialsWithoutSessionToken);
-			return this.presign(requestToSign, options);
-		}
-	};
-	function getCredentialsWithoutSessionToken(credentials) {
-		return {
-			accessKeyId: credentials.accessKeyId,
-			secretAccessKey: credentials.secretAccessKey,
-			expiration: credentials.expiration
-		};
-	}
-	function setSingleOverride(privateAccess, credentialsWithoutSessionToken) {
-		const currentCredentialProvider = privateAccess.credentialProvider;
-		privateAccess.credentialProvider = () => {
-			privateAccess.credentialProvider = currentCredentialProvider;
-			return Promise.resolve(credentialsWithoutSessionToken);
-		};
-	}
-	var SignatureV4MultiRegion = class {
-		sigv4aSigner;
-		sigv4Signer;
-		signerOptions;
-		static sigv4aDependency() {
-			if (typeof signatureV4CrtContainer.CrtSignerV4 === "function") return "crt";
-			else if (typeof signatureV4.signatureV4aContainer.SignatureV4a === "function") return "js";
-			return "none";
-		}
-		constructor(options) {
-			this.sigv4Signer = new SignatureV4SignWithCredentials(options);
-			this.signerOptions = options;
-		}
-		async sign(requestToSign, options = {}) {
-			if (options.signingRegion === "*") return this.getSigv4aSigner().sign(requestToSign, options);
-			return this.sigv4Signer.sign(requestToSign, options);
-		}
-		async signWithCredentials(requestToSign, credentials, options = {}) {
-			if (options.signingRegion === "*") {
-				const signer = this.getSigv4aSigner();
-				const CrtSignerV4 = signatureV4CrtContainer.CrtSignerV4;
-				if (CrtSignerV4 && signer instanceof CrtSignerV4) return signer.signWithCredentials(requestToSign, credentials, options);
-				else throw new Error("signWithCredentials with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the \"@aws-sdk/signature-v4-crt\" package explicitly. You must also register the package by calling [require(\"@aws-sdk/signature-v4-crt\");] or an ESM equivalent such as [import \"@aws-sdk/signature-v4-crt\";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");
-			}
-			return this.sigv4Signer.signWithCredentials(requestToSign, credentials, options);
-		}
-		async presign(originalRequest, options = {}) {
-			if (options.signingRegion === "*") {
-				const signer = this.getSigv4aSigner();
-				const CrtSignerV4 = signatureV4CrtContainer.CrtSignerV4;
-				if (CrtSignerV4 && signer instanceof CrtSignerV4) return signer.presign(originalRequest, options);
-				else throw new Error("presign with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the \"@aws-sdk/signature-v4-crt\" package explicitly. You must also register the package by calling [require(\"@aws-sdk/signature-v4-crt\");] or an ESM equivalent such as [import \"@aws-sdk/signature-v4-crt\";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");
-			}
-			return this.sigv4Signer.presign(originalRequest, options);
-		}
-		async presignWithCredentials(originalRequest, credentials, options = {}) {
-			if (options.signingRegion === "*") throw new Error("Method presignWithCredentials is not supported for [signingRegion=*].");
-			return this.sigv4Signer.presignWithCredentials(originalRequest, credentials, options);
-		}
-		getSigv4aSigner() {
-			if (!this.sigv4aSigner) {
-				const CrtSignerV4 = signatureV4CrtContainer.CrtSignerV4;
-				const JsSigV4aSigner = signatureV4.signatureV4aContainer.SignatureV4a;
-				if (this.signerOptions.runtime === "node") {
-					if (!CrtSignerV4 && !JsSigV4aSigner) throw new Error("Neither CRT nor JS SigV4a implementation is available. Please load either @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");
-					if (CrtSignerV4 && typeof CrtSignerV4 === "function") this.sigv4aSigner = new CrtSignerV4({
-						...this.signerOptions,
-						signingAlgorithm: 1
-					});
-					else if (JsSigV4aSigner && typeof JsSigV4aSigner === "function") this.sigv4aSigner = new JsSigV4aSigner({ ...this.signerOptions });
-					else throw new Error("Available SigV4a implementation is not a valid constructor. Please ensure you've properly imported @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a.For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");
-				} else {
-					if (!JsSigV4aSigner || typeof JsSigV4aSigner !== "function") throw new Error("JS SigV4a implementation is not available or not a valid constructor. Please check whether you have installed the @aws-sdk/signature-v4a package explicitly. The CRT implementation is not available for browsers. You must also register the package by calling [require('@aws-sdk/signature-v4a');] or an ESM equivalent such as [import '@aws-sdk/signature-v4a';]. For more information please go to https://github.com/aws/aws-sdk-js-v3#using-javascript-non-crt-implementation-of-sigv4a");
-					this.sigv4aSigner = new JsSigV4aSigner({ ...this.signerOptions });
-				}
-			}
-			return this.sigv4aSigner;
-		}
-	};
-	exports.SignatureV4MultiRegion = SignatureV4MultiRegion;
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/endpoint/bdd.js
-var q, a, b, c, d, e, f, g, h, i, j, k, l, m, n, o, p, _data, root, nodes, bdd;
-var init_bdd = __esmMin((() => {
-	init_endpoints();
-	q = "ref";
-	a = -1, b = true, c = "isSet", d = "PartitionResult", e = "booleanEquals", f = "stringEquals", g = "getAttr", h = "us-east-1", i = "sigv4", j = "sts", k = "https://sts.{Region}.{PartitionResult#dnsSuffix}", l = { [q]: "Endpoint" }, m = { [q]: "Region" }, n = { [q]: d }, o = {}, p = [m];
-	_data = {
-		conditions: [
-			[c, [l]],
-			[c, p],
-			[
-				"aws.partition",
-				p,
-				d
-			],
-			[e, [{ [q]: "UseFIPS" }, b]],
-			[e, [{ [q]: "UseDualStack" }, b]],
-			[f, [m, "aws-global"]],
-			[e, [{ [q]: "UseGlobalEndpoint" }, b]],
-			[f, [m, "eu-central-1"]],
-			[e, [{
-				fn: g,
-				argv: [n, "supportsDualStack"]
-			}, b]],
-			[e, [{
-				fn: g,
-				argv: [n, "supportsFIPS"]
-			}, b]],
-			[f, [m, "ap-south-1"]],
-			[f, [m, "eu-north-1"]],
-			[f, [m, "eu-west-1"]],
-			[f, [m, "eu-west-2"]],
-			[f, [m, "eu-west-3"]],
-			[f, [m, "sa-east-1"]],
-			[f, [m, h]],
-			[f, [m, "us-east-2"]],
-			[f, [m, "us-west-2"]],
-			[f, [m, "us-west-1"]],
-			[f, [m, "ca-central-1"]],
-			[f, [m, "ap-southeast-1"]],
-			[f, [m, "ap-northeast-1"]],
-			[f, [m, "ap-southeast-2"]],
-			[f, [{
-				fn: g,
-				argv: [n, "name"]
-			}, "aws-us-gov"]]
-		],
-		results: [
-			[a],
-			["https://sts.amazonaws.com", { authSchemes: [{
-				name: i,
-				signingName: j,
-				signingRegion: h
-			}] }],
-			[k, { authSchemes: [{
-				name: i,
-				signingName: j,
-				signingRegion: "{Region}"
-			}] }],
-			[a, "Invalid Configuration: FIPS and custom endpoint are not supported"],
-			[a, "Invalid Configuration: Dualstack and custom endpoint are not supported"],
-			[l, o],
-			["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", o],
-			[a, "FIPS and DualStack are enabled, but this partition does not support one or both"],
-			["https://sts.{Region}.amazonaws.com", o],
-			["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}", o],
-			[a, "FIPS is enabled but this partition does not support FIPS"],
-			["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}", o],
-			[a, "DualStack is enabled but this partition does not support DualStack"],
-			[k, o],
-			[a, "Invalid Configuration: Missing Region"]
-		]
-	};
-	root = 2;
-	nodes = new Int32Array([
-		-1,
-		1,
-		-1,
-		0,
-		30,
-		3,
-		1,
-		4,
-		100000014,
-		2,
-		5,
-		100000014,
-		3,
-		25,
-		6,
-		4,
-		24,
-		7,
-		5,
-		100000001,
-		8,
-		6,
-		9,
-		100000013,
-		7,
-		100000001,
-		10,
-		10,
-		100000001,
-		11,
-		11,
-		100000001,
-		12,
-		12,
-		100000001,
-		13,
-		13,
-		100000001,
-		14,
-		14,
-		100000001,
-		15,
-		15,
-		100000001,
-		16,
-		16,
-		100000001,
-		17,
-		17,
-		100000001,
-		18,
-		18,
-		100000001,
-		19,
-		19,
-		100000001,
-		20,
-		20,
-		100000001,
-		21,
-		21,
-		100000001,
-		22,
-		22,
-		100000001,
-		23,
-		23,
-		100000001,
-		100000002,
-		8,
-		100000011,
-		100000012,
-		4,
-		28,
-		26,
-		9,
-		27,
-		100000010,
-		24,
-		100000008,
-		100000009,
-		8,
-		29,
-		100000007,
-		9,
-		100000006,
-		100000007,
-		3,
-		100000003,
-		31,
-		4,
-		100000004,
-		100000005
-	]);
-	bdd = BinaryDecisionDiagram.from(nodes, root, _data.conditions, _data.results);
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/endpoint/endpointResolver.js
-var cache, defaultEndpointResolver;
-var init_endpointResolver = __esmMin((() => {
-	init_client();
-	init_endpoints();
-	init_bdd();
-	cache = new EndpointCache({
-		size: 50,
-		params: [
-			"Endpoint",
-			"Region",
-			"UseDualStack",
-			"UseFIPS",
-			"UseGlobalEndpoint"
-		]
-	});
-	defaultEndpointResolver = (endpointParams, context = {}) => {
-		return cache.get(endpointParams, () => decideEndpoint(bdd, {
-			endpointParams,
-			logger: context.logger
-		}));
-	};
-	customEndpointFunctions.aws = awsEndpointFunctions;
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/auth/httpAuthSchemeProvider.js
-function createAwsAuthSigv4HttpAuthOption(authParameters) {
-	return {
-		schemeId: "aws.auth#sigv4",
-		signingProperties: {
-			name: "sts",
-			region: authParameters.region
-		},
-		propertiesExtractor: (config, context) => ({ signingProperties: {
-			config,
-			context
-		} })
-	};
-}
-function createAwsAuthSigv4aHttpAuthOption(authParameters) {
-	return {
-		schemeId: "aws.auth#sigv4a",
-		signingProperties: {
-			name: "sts",
-			region: authParameters.region
-		},
-		propertiesExtractor: (config, context) => ({ signingProperties: {
-			config,
-			context
-		} })
-	};
-}
-function createSmithyApiNoAuthHttpAuthOption(authParameters) {
-	return { schemeId: "smithy.api#noAuth" };
-}
-var import_dist_cjs$2, createEndpointRuleSetHttpAuthSchemeParametersProvider, _defaultSTSHttpAuthSchemeParametersProvider, defaultSTSHttpAuthSchemeParametersProvider, createEndpointRuleSetHttpAuthSchemeProvider, _defaultSTSHttpAuthSchemeProvider, defaultSTSHttpAuthSchemeProvider, resolveHttpAuthSchemeConfig;
-var init_httpAuthSchemeProvider = __esmMin((() => {
-	init_httpAuthSchemes();
-	import_dist_cjs$2 = require_dist_cjs();
-	init_client$1();
-	init_endpoints();
-	init_endpointResolver();
-	createEndpointRuleSetHttpAuthSchemeParametersProvider = (defaultHttpAuthSchemeParametersProvider) => async (config, context, input) => {
-		if (!input) throw new Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");
-		const defaultParameters = await defaultHttpAuthSchemeParametersProvider(config, context, input);
-		const instructionsFn = getSmithyContext(context)?.commandInstance?.constructor?.getEndpointParameterInstructions;
-		if (!instructionsFn) throw new Error(`getEndpointParameterInstructions() is not defined on '${context.commandName}'`);
-		const endpointParameters = await resolveParams(input, { getEndpointParameterInstructions: instructionsFn }, config);
-		return Object.assign(defaultParameters, endpointParameters);
-	};
-	_defaultSTSHttpAuthSchemeParametersProvider = async (config, context, input) => {
-		return {
-			operation: getSmithyContext(context).operation,
-			region: await normalizeProvider(config.region)() || (() => {
-				throw new Error("expected `region` to be configured for `aws.auth#sigv4`");
-			})()
-		};
-	};
-	defaultSTSHttpAuthSchemeParametersProvider = createEndpointRuleSetHttpAuthSchemeParametersProvider(_defaultSTSHttpAuthSchemeParametersProvider);
-	createEndpointRuleSetHttpAuthSchemeProvider = (defaultEndpointResolver, defaultHttpAuthSchemeResolver, createHttpAuthOptionFunctions) => {
-		const endpointRuleSetHttpAuthSchemeProvider = (authParameters) => {
-			const authSchemes = defaultEndpointResolver(authParameters).properties?.authSchemes;
-			if (!authSchemes) return defaultHttpAuthSchemeResolver(authParameters);
-			const options = [];
-			for (const scheme of authSchemes) {
-				const { name: resolvedName, properties = {}, ...rest } = scheme;
-				const name = resolvedName.toLowerCase();
-				if (resolvedName !== name) console.warn(`HttpAuthScheme has been normalized with lowercasing: '${resolvedName}' to '${name}'`);
-				let schemeId;
-				if (name === "sigv4a") {
-					schemeId = "aws.auth#sigv4a";
-					const sigv4Present = authSchemes.find((s) => {
-						const name = s.name.toLowerCase();
-						return name !== "sigv4a" && name.startsWith("sigv4");
-					});
-					if (import_dist_cjs$2.SignatureV4MultiRegion.sigv4aDependency() === "none" && sigv4Present) continue;
-				} else if (name.startsWith("sigv4")) schemeId = "aws.auth#sigv4";
-				else throw new Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${name}'`);
-				const createOption = createHttpAuthOptionFunctions[schemeId];
-				if (!createOption) throw new Error(`Could not find HttpAuthOption create function for '${schemeId}'`);
-				const option = createOption(authParameters);
-				option.schemeId = schemeId;
-				option.signingProperties = {
-					...option.signingProperties || {},
-					...rest,
-					...properties
-				};
-				options.push(option);
-			}
-			return options;
-		};
-		return endpointRuleSetHttpAuthSchemeProvider;
-	};
-	_defaultSTSHttpAuthSchemeProvider = (authParameters) => {
-		const options = [];
-		switch (authParameters.operation) {
-			case "AssumeRoleWithWebIdentity":
-				options.push(createSmithyApiNoAuthHttpAuthOption(authParameters));
-				options.push(createAwsAuthSigv4aHttpAuthOption(authParameters));
-				break;
-			default:
-				options.push(createAwsAuthSigv4HttpAuthOption(authParameters));
-				options.push(createAwsAuthSigv4aHttpAuthOption(authParameters));
-		}
-		return options;
-	};
-	defaultSTSHttpAuthSchemeProvider = createEndpointRuleSetHttpAuthSchemeProvider(defaultEndpointResolver, _defaultSTSHttpAuthSchemeProvider, {
-		"aws.auth#sigv4": createAwsAuthSigv4HttpAuthOption,
-		"aws.auth#sigv4a": createAwsAuthSigv4aHttpAuthOption,
-		"smithy.api#noAuth": createSmithyApiNoAuthHttpAuthOption
-	});
-	resolveHttpAuthSchemeConfig = (config) => {
-		const config_1 = resolveAwsSdkSigV4AConfig(resolveAwsSdkSigV4Config(config));
-		return Object.assign(config_1, { authSchemePreference: normalizeProvider(config.authSchemePreference ?? []) });
-	};
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/endpoint/EndpointParameters.js
-var resolveClientEndpointParameters, commonParams;
-var init_EndpointParameters = __esmMin((() => {
-	resolveClientEndpointParameters = (options) => {
-		return Object.assign(options, {
-			useDualstackEndpoint: options.useDualstackEndpoint ?? false,
-			useFipsEndpoint: options.useFipsEndpoint ?? false,
-			useGlobalEndpoint: options.useGlobalEndpoint ?? false,
-			defaultSigningName: "sts"
-		});
-	};
-	commonParams = {
-		UseGlobalEndpoint: {
-			type: "builtInParams",
-			name: "useGlobalEndpoint"
-		},
-		UseFIPS: {
-			type: "builtInParams",
-			name: "useFipsEndpoint"
-		},
-		Endpoint: {
-			type: "builtInParams",
-			name: "endpoint"
-		},
-		Region: {
-			type: "builtInParams",
-			name: "region"
-		},
-		UseDualStack: {
-			type: "builtInParams",
-			name: "useDualstackEndpoint"
-		}
-	};
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/models/STSServiceException.js
-var STSServiceException;
-var init_STSServiceException = __esmMin((() => {
-	init_client$1();
-	STSServiceException = class STSServiceException extends ServiceException {
-		constructor(options) {
-			super(options);
-			Object.setPrototypeOf(this, STSServiceException.prototype);
-		}
-	};
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/models/errors.js
-var ExpiredTokenException, MalformedPolicyDocumentException, PackedPolicyTooLargeException, RegionDisabledException, IDPRejectedClaimException, InvalidIdentityTokenException, IDPCommunicationErrorException;
-var init_errors = __esmMin((() => {
-	init_STSServiceException();
-	ExpiredTokenException = class ExpiredTokenException extends STSServiceException {
-		name = "ExpiredTokenException";
-		$fault = "client";
-		constructor(opts) {
-			super({
-				name: "ExpiredTokenException",
-				$fault: "client",
-				...opts
-			});
-			Object.setPrototypeOf(this, ExpiredTokenException.prototype);
-		}
-	};
-	MalformedPolicyDocumentException = class MalformedPolicyDocumentException extends STSServiceException {
-		name = "MalformedPolicyDocumentException";
-		$fault = "client";
-		constructor(opts) {
-			super({
-				name: "MalformedPolicyDocumentException",
-				$fault: "client",
-				...opts
-			});
-			Object.setPrototypeOf(this, MalformedPolicyDocumentException.prototype);
-		}
-	};
-	PackedPolicyTooLargeException = class PackedPolicyTooLargeException extends STSServiceException {
-		name = "PackedPolicyTooLargeException";
-		$fault = "client";
-		constructor(opts) {
-			super({
-				name: "PackedPolicyTooLargeException",
-				$fault: "client",
-				...opts
-			});
-			Object.setPrototypeOf(this, PackedPolicyTooLargeException.prototype);
-		}
-	};
-	RegionDisabledException = class RegionDisabledException extends STSServiceException {
-		name = "RegionDisabledException";
-		$fault = "client";
-		constructor(opts) {
-			super({
-				name: "RegionDisabledException",
-				$fault: "client",
-				...opts
-			});
-			Object.setPrototypeOf(this, RegionDisabledException.prototype);
-		}
-	};
-	IDPRejectedClaimException = class IDPRejectedClaimException extends STSServiceException {
-		name = "IDPRejectedClaimException";
-		$fault = "client";
-		constructor(opts) {
-			super({
-				name: "IDPRejectedClaimException",
-				$fault: "client",
-				...opts
-			});
-			Object.setPrototypeOf(this, IDPRejectedClaimException.prototype);
-		}
-	};
-	InvalidIdentityTokenException = class InvalidIdentityTokenException extends STSServiceException {
-		name = "InvalidIdentityTokenException";
-		$fault = "client";
-		constructor(opts) {
-			super({
-				name: "InvalidIdentityTokenException",
-				$fault: "client",
-				...opts
-			});
-			Object.setPrototypeOf(this, InvalidIdentityTokenException.prototype);
-		}
-	};
-	IDPCommunicationErrorException = class IDPCommunicationErrorException extends STSServiceException {
-		name = "IDPCommunicationErrorException";
-		$fault = "client";
-		$retryable = {};
-		constructor(opts) {
-			super({
-				name: "IDPCommunicationErrorException",
-				$fault: "client",
-				...opts
-			});
-			Object.setPrototypeOf(this, IDPCommunicationErrorException.prototype);
-		}
-	};
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/schemas/schemas_0.js
-var _A, _AKI, _AR, _ARI, _ARR, _ARRs, _ARU, _ARWWI, _ARWWIR, _ARWWIRs, _Au, _C, _CA, _DS, _E, _EI, _ETE, _IDPCEE, _IDPRCE, _IITE, _K, _MPDE, _P, _PA, _PAr, _PC, _PCLT, _PCr, _PDT, _PI, _PPS, _PPTLE, _Pr, _RA, _RDE, _RSN, _SAK, _SFWIT, _SI, _SN, _ST, _T, _TC, _TTK, _Ta, _V, _WIT, _a, _aKST, _aQE, _c, _cTT, _e, _hE, _m, _pDLT, _s, _tLT, n0, _s_registry, STSServiceException$, n0_registry, ExpiredTokenException$, IDPCommunicationErrorException$, IDPRejectedClaimException$, InvalidIdentityTokenException$, MalformedPolicyDocumentException$, PackedPolicyTooLargeException$, RegionDisabledException$, errorTypeRegistries, accessKeySecretType, clientTokenType, AssumedRoleUser$, AssumeRoleRequest$, AssumeRoleResponse$, AssumeRoleWithWebIdentityRequest$, AssumeRoleWithWebIdentityResponse$, Credentials$, PolicyDescriptorType$, ProvidedContext$, Tag$, policyDescriptorListType, ProvidedContextsListType, tagListType, AssumeRole$, AssumeRoleWithWebIdentity$;
-var init_schemas_0 = __esmMin((() => {
-	init_schema();
-	init_errors();
-	init_STSServiceException();
-	_A = "Arn";
-	_AKI = "AccessKeyId";
-	_AR = "AssumeRole";
-	_ARI = "AssumedRoleId";
-	_ARR = "AssumeRoleRequest";
-	_ARRs = "AssumeRoleResponse";
-	_ARU = "AssumedRoleUser";
-	_ARWWI = "AssumeRoleWithWebIdentity";
-	_ARWWIR = "AssumeRoleWithWebIdentityRequest";
-	_ARWWIRs = "AssumeRoleWithWebIdentityResponse";
-	_Au = "Audience";
-	_C = "Credentials";
-	_CA = "ContextAssertion";
-	_DS = "DurationSeconds";
-	_E = "Expiration";
-	_EI = "ExternalId";
-	_ETE = "ExpiredTokenException";
-	_IDPCEE = "IDPCommunicationErrorException";
-	_IDPRCE = "IDPRejectedClaimException";
-	_IITE = "InvalidIdentityTokenException";
-	_K = "Key";
-	_MPDE = "MalformedPolicyDocumentException";
-	_P = "Policy";
-	_PA = "PolicyArns";
-	_PAr = "ProviderArn";
-	_PC = "ProvidedContexts";
-	_PCLT = "ProvidedContextsListType";
-	_PCr = "ProvidedContext";
-	_PDT = "PolicyDescriptorType";
-	_PI = "ProviderId";
-	_PPS = "PackedPolicySize";
-	_PPTLE = "PackedPolicyTooLargeException";
-	_Pr = "Provider";
-	_RA = "RoleArn";
-	_RDE = "RegionDisabledException";
-	_RSN = "RoleSessionName";
-	_SAK = "SecretAccessKey";
-	_SFWIT = "SubjectFromWebIdentityToken";
-	_SI = "SourceIdentity";
-	_SN = "SerialNumber";
-	_ST = "SessionToken";
-	_T = "Tags";
-	_TC = "TokenCode";
-	_TTK = "TransitiveTagKeys";
-	_Ta = "Tag";
-	_V = "Value";
-	_WIT = "WebIdentityToken";
-	_a = "arn";
-	_aKST = "accessKeySecretType";
-	_aQE = "awsQueryError";
-	_c = "client";
-	_cTT = "clientTokenType";
-	_e = "error";
-	_hE = "httpError";
-	_m = "message";
-	_pDLT = "policyDescriptorListType";
-	_s = "smithy.ts.sdk.synthetic.com.amazonaws.sts";
-	_tLT = "tagListType";
-	n0 = "com.amazonaws.sts";
-	_s_registry = TypeRegistry.for(_s);
-	STSServiceException$ = [
-		-3,
-		_s,
-		"STSServiceException",
-		0,
-		[],
-		[]
-	];
-	_s_registry.registerError(STSServiceException$, STSServiceException);
-	n0_registry = TypeRegistry.for(n0);
-	ExpiredTokenException$ = [
-		-3,
-		n0,
-		_ETE,
-		{
-			[_aQE]: [`ExpiredTokenException`, 400],
-			[_e]: _c,
-			[_hE]: 400
-		},
-		[_m],
-		[0]
-	];
-	n0_registry.registerError(ExpiredTokenException$, ExpiredTokenException);
-	IDPCommunicationErrorException$ = [
-		-3,
-		n0,
-		_IDPCEE,
-		{
-			[_aQE]: [`IDPCommunicationError`, 400],
-			[_e]: _c,
-			[_hE]: 400
-		},
-		[_m],
-		[0]
-	];
-	n0_registry.registerError(IDPCommunicationErrorException$, IDPCommunicationErrorException);
-	IDPRejectedClaimException$ = [
-		-3,
-		n0,
-		_IDPRCE,
-		{
-			[_aQE]: [`IDPRejectedClaim`, 403],
-			[_e]: _c,
-			[_hE]: 403
-		},
-		[_m],
-		[0]
-	];
-	n0_registry.registerError(IDPRejectedClaimException$, IDPRejectedClaimException);
-	InvalidIdentityTokenException$ = [
-		-3,
-		n0,
-		_IITE,
-		{
-			[_aQE]: [`InvalidIdentityToken`, 400],
-			[_e]: _c,
-			[_hE]: 400
-		},
-		[_m],
-		[0]
-	];
-	n0_registry.registerError(InvalidIdentityTokenException$, InvalidIdentityTokenException);
-	MalformedPolicyDocumentException$ = [
-		-3,
-		n0,
-		_MPDE,
-		{
-			[_aQE]: [`MalformedPolicyDocument`, 400],
-			[_e]: _c,
-			[_hE]: 400
-		},
-		[_m],
-		[0]
-	];
-	n0_registry.registerError(MalformedPolicyDocumentException$, MalformedPolicyDocumentException);
-	PackedPolicyTooLargeException$ = [
-		-3,
-		n0,
-		_PPTLE,
-		{
-			[_aQE]: [`PackedPolicyTooLarge`, 400],
-			[_e]: _c,
-			[_hE]: 400
-		},
-		[_m],
-		[0]
-	];
-	n0_registry.registerError(PackedPolicyTooLargeException$, PackedPolicyTooLargeException);
-	RegionDisabledException$ = [
-		-3,
-		n0,
-		_RDE,
-		{
-			[_aQE]: [`RegionDisabledException`, 403],
-			[_e]: _c,
-			[_hE]: 403
-		},
-		[_m],
-		[0]
-	];
-	n0_registry.registerError(RegionDisabledException$, RegionDisabledException);
-	errorTypeRegistries = [_s_registry, n0_registry];
-	accessKeySecretType = [
-		0,
-		n0,
-		_aKST,
-		8,
-		0
-	];
-	clientTokenType = [
-		0,
-		n0,
-		_cTT,
-		8,
-		0
-	];
-	AssumedRoleUser$ = [
-		3,
-		n0,
-		_ARU,
-		0,
-		[_ARI, _A],
-		[0, 0],
-		2
-	];
-	AssumeRoleRequest$ = [
-		3,
-		n0,
-		_ARR,
-		0,
-		[
-			_RA,
-			_RSN,
-			_PA,
-			_P,
-			_DS,
-			_T,
-			_TTK,
-			_EI,
-			_SN,
-			_TC,
-			_SI,
-			_PC
-		],
-		[
-			0,
-			0,
-			() => policyDescriptorListType,
-			0,
-			1,
-			() => tagListType,
-			64,
-			0,
-			0,
-			0,
-			0,
-			() => ProvidedContextsListType
-		],
-		2
-	];
-	AssumeRoleResponse$ = [
-		3,
-		n0,
-		_ARRs,
-		0,
-		[
-			_C,
-			_ARU,
-			_PPS,
-			_SI
-		],
-		[
-			[() => Credentials$, 0],
-			() => AssumedRoleUser$,
-			1,
-			0
-		]
-	];
-	AssumeRoleWithWebIdentityRequest$ = [
-		3,
-		n0,
-		_ARWWIR,
-		0,
-		[
-			_RA,
-			_RSN,
-			_WIT,
-			_PI,
-			_PA,
-			_P,
-			_DS
-		],
-		[
-			0,
-			0,
-			[() => clientTokenType, 0],
-			0,
-			() => policyDescriptorListType,
-			0,
-			1
-		],
-		3
-	];
-	AssumeRoleWithWebIdentityResponse$ = [
-		3,
-		n0,
-		_ARWWIRs,
-		0,
-		[
-			_C,
-			_SFWIT,
-			_ARU,
-			_PPS,
-			_Pr,
-			_Au,
-			_SI
-		],
-		[
-			[() => Credentials$, 0],
-			0,
-			() => AssumedRoleUser$,
-			1,
-			0,
-			0,
-			0
-		]
-	];
-	Credentials$ = [
-		3,
-		n0,
-		_C,
-		0,
-		[
-			_AKI,
-			_SAK,
-			_ST,
-			_E
-		],
-		[
-			0,
-			[() => accessKeySecretType, 0],
-			0,
-			4
-		],
-		4
-	];
-	PolicyDescriptorType$ = [
-		3,
-		n0,
-		_PDT,
-		0,
-		[_a],
-		[0]
-	];
-	ProvidedContext$ = [
-		3,
-		n0,
-		_PCr,
-		0,
-		[_PAr, _CA],
-		[0, 0]
-	];
-	Tag$ = [
-		3,
-		n0,
-		_Ta,
-		0,
-		[_K, _V],
-		[0, 0],
-		2
-	];
-	policyDescriptorListType = [
-		1,
-		n0,
-		_pDLT,
-		0,
-		() => PolicyDescriptorType$
-	];
-	ProvidedContextsListType = [
-		1,
-		n0,
-		_PCLT,
-		0,
-		() => ProvidedContext$
-	];
-	tagListType = [
-		1,
-		n0,
-		_tLT,
-		0,
-		() => Tag$
-	];
-	AssumeRole$ = [
-		9,
-		n0,
-		_AR,
-		0,
-		() => AssumeRoleRequest$,
-		() => AssumeRoleResponse$
-	];
-	AssumeRoleWithWebIdentity$ = [
-		9,
-		n0,
-		_ARWWI,
-		0,
-		() => AssumeRoleWithWebIdentityRequest$,
-		() => AssumeRoleWithWebIdentityResponse$
-	];
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/runtimeConfig.shared.js
-var import_dist_cjs$1, getRuntimeConfig$1;
-var init_runtimeConfig_shared = __esmMin((() => {
-	init_httpAuthSchemes();
-	init_protocols$1();
-	import_dist_cjs$1 = require_dist_cjs();
-	init_dist_es();
-	init_client$1();
-	init_protocols();
-	init_serde();
-	init_httpAuthSchemeProvider();
-	init_endpointResolver();
-	init_schemas_0();
-	getRuntimeConfig$1 = (config) => {
-		return {
-			apiVersion: "2011-06-15",
-			base64Decoder: config?.base64Decoder ?? fromBase64,
-			base64Encoder: config?.base64Encoder ?? toBase64,
-			disableHostPrefix: config?.disableHostPrefix ?? false,
-			endpointProvider: config?.endpointProvider ?? defaultEndpointResolver,
-			extensions: config?.extensions ?? [],
-			httpAuthSchemeProvider: config?.httpAuthSchemeProvider ?? defaultSTSHttpAuthSchemeProvider,
-			httpAuthSchemes: config?.httpAuthSchemes ?? [
-				{
-					schemeId: "aws.auth#sigv4",
-					identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4"),
-					signer: new AwsSdkSigV4Signer()
-				},
-				{
-					schemeId: "aws.auth#sigv4a",
-					identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4a"),
-					signer: new AwsSdkSigV4ASigner()
-				},
-				{
-					schemeId: "smithy.api#noAuth",
-					identityProvider: (ipc) => ipc.getIdentityProvider("smithy.api#noAuth") || (async () => ({})),
-					signer: new NoAuthSigner()
-				}
-			],
-			logger: config?.logger ?? new NoOpLogger(),
-			protocol: config?.protocol ?? AwsQueryProtocol,
-			protocolSettings: config?.protocolSettings ?? {
-				defaultNamespace: "com.amazonaws.sts",
-				errorTypeRegistries,
-				xmlNamespace: "https://sts.amazonaws.com/doc/2011-06-15/",
-				version: "2011-06-15",
-				serviceTarget: "AWSSecurityTokenServiceV20110615"
-			},
-			serviceId: config?.serviceId ?? "STS",
-			signerConstructor: config?.signerConstructor ?? import_dist_cjs$1.SignatureV4MultiRegion,
-			urlParser: config?.urlParser ?? parseUrl,
-			utf8Decoder: config?.utf8Decoder ?? fromUtf8,
-			utf8Encoder: config?.utf8Encoder ?? toUtf8
-		};
-	};
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/runtimeConfig.js
-var import_dist_cjs, getRuntimeConfig;
-var init_runtimeConfig = __esmMin((() => {
-	init_client();
-	init_httpAuthSchemes();
-	init_dist_es();
-	init_client$1();
-	init_config$1();
-	init_retry();
-	init_serde();
-	import_dist_cjs = require_dist_cjs$2();
-	init_runtimeConfig_shared();
-	getRuntimeConfig = (config) => {
-		emitWarningIfUnsupportedVersion$1(process.version);
-		const defaultsMode = resolveDefaultsModeConfig(config);
-		const defaultConfigProvider = () => defaultsMode().then(loadConfigsForDefaultMode);
-		const clientSharedValues = getRuntimeConfig$1(config);
-		emitWarningIfUnsupportedVersion(process.version);
-		const loaderConfig = {
-			profile: config?.profile,
-			logger: clientSharedValues.logger
-		};
-		return {
-			...clientSharedValues,
-			...config,
-			runtime: "node",
-			defaultsMode,
-			authSchemePreference: config?.authSchemePreference ?? loadConfig(NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, loaderConfig),
-			bodyLengthChecker: config?.bodyLengthChecker ?? calculateBodyLength,
-			defaultUserAgentProvider: config?.defaultUserAgentProvider ?? createDefaultUserAgentProvider({
-				serviceId: clientSharedValues.serviceId,
-				clientVersion: version
-			}),
-			httpAuthSchemes: config?.httpAuthSchemes ?? [
-				{
-					schemeId: "aws.auth#sigv4",
-					identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4") || (async (idProps) => await config.credentialDefaultProvider(idProps?.__config || {})()),
-					signer: new AwsSdkSigV4Signer()
-				},
-				{
-					schemeId: "aws.auth#sigv4a",
-					identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4a"),
-					signer: new AwsSdkSigV4ASigner()
-				},
-				{
-					schemeId: "smithy.api#noAuth",
-					identityProvider: (ipc) => ipc.getIdentityProvider("smithy.api#noAuth") || (async () => ({})),
-					signer: new NoAuthSigner()
-				}
-			],
-			maxAttempts: config?.maxAttempts ?? loadConfig(NODE_MAX_ATTEMPT_CONFIG_OPTIONS, config),
-			region: config?.region ?? loadConfig(NODE_REGION_CONFIG_OPTIONS, {
-				...NODE_REGION_CONFIG_FILE_OPTIONS,
-				...loaderConfig
-			}),
-			requestHandler: import_dist_cjs.NodeHttpHandler.create(config?.requestHandler ?? defaultConfigProvider),
-			retryMode: config?.retryMode ?? loadConfig({
-				...NODE_RETRY_MODE_CONFIG_OPTIONS,
-				default: async () => (await defaultConfigProvider()).retryMode || DEFAULT_RETRY_MODE
-			}, config),
-			sha256: config?.sha256 ?? Hash.bind(null, "sha256"),
-			sigv4aSigningRegionSet: config?.sigv4aSigningRegionSet ?? loadConfig(NODE_SIGV4A_CONFIG_OPTIONS, loaderConfig),
-			streamCollector: config?.streamCollector ?? import_dist_cjs.streamCollector,
-			useDualstackEndpoint: config?.useDualstackEndpoint ?? loadConfig(NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
-			useFipsEndpoint: config?.useFipsEndpoint ?? loadConfig(NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
-			userAgentAppId: config?.userAgentAppId ?? loadConfig(NODE_APP_ID_CONFIG_OPTIONS, loaderConfig)
-		};
-	};
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/auth/httpAuthExtensionConfiguration.js
-var getHttpAuthExtensionConfiguration, resolveHttpAuthRuntimeConfig;
-var init_httpAuthExtensionConfiguration = __esmMin((() => {
-	getHttpAuthExtensionConfiguration = (runtimeConfig) => {
-		const _httpAuthSchemes = runtimeConfig.httpAuthSchemes;
-		let _httpAuthSchemeProvider = runtimeConfig.httpAuthSchemeProvider;
-		let _credentials = runtimeConfig.credentials;
-		return {
-			setHttpAuthScheme(httpAuthScheme) {
-				const index = _httpAuthSchemes.findIndex((scheme) => scheme.schemeId === httpAuthScheme.schemeId);
-				if (index === -1) _httpAuthSchemes.push(httpAuthScheme);
-				else _httpAuthSchemes.splice(index, 1, httpAuthScheme);
-			},
-			httpAuthSchemes() {
-				return _httpAuthSchemes;
-			},
-			setHttpAuthSchemeProvider(httpAuthSchemeProvider) {
-				_httpAuthSchemeProvider = httpAuthSchemeProvider;
-			},
-			httpAuthSchemeProvider() {
-				return _httpAuthSchemeProvider;
-			},
-			setCredentials(credentials) {
-				_credentials = credentials;
-			},
-			credentials() {
-				return _credentials;
-			}
-		};
-	};
-	resolveHttpAuthRuntimeConfig = (config) => {
-		return {
-			httpAuthSchemes: config.httpAuthSchemes(),
-			httpAuthSchemeProvider: config.httpAuthSchemeProvider(),
-			credentials: config.credentials()
-		};
-	};
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/runtimeExtensions.js
-var resolveRuntimeExtensions;
-var init_runtimeExtensions = __esmMin((() => {
-	init_client();
-	init_client$1();
-	init_protocols();
-	init_httpAuthExtensionConfiguration();
-	resolveRuntimeExtensions = (runtimeConfig, extensions) => {
-		const extensionConfiguration = Object.assign(getAwsRegionExtensionConfiguration(runtimeConfig), getDefaultExtensionConfiguration(runtimeConfig), getHttpHandlerExtensionConfiguration(runtimeConfig), getHttpAuthExtensionConfiguration(runtimeConfig));
-		extensions.forEach((extension) => extension.configure(extensionConfiguration));
-		return Object.assign(runtimeConfig, resolveAwsRegionExtensionConfiguration(extensionConfiguration), resolveDefaultRuntimeConfig(extensionConfiguration), resolveHttpHandlerRuntimeConfig(extensionConfiguration), resolveHttpAuthRuntimeConfig(extensionConfiguration));
-	};
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/STSClient.js
-var STSClient;
-var init_STSClient = __esmMin((() => {
-	init_client();
-	init_dist_es();
-	init_client$1();
-	init_config$1();
-	init_endpoints();
-	init_protocols();
-	init_retry();
-	init_schema();
-	init_httpAuthSchemeProvider();
-	init_EndpointParameters();
-	init_runtimeConfig();
-	init_runtimeExtensions();
-	STSClient = class extends Client {
-		config;
-		constructor(...[configuration]) {
-			const _config_0 = getRuntimeConfig(configuration || {});
-			super(_config_0);
-			this.initConfig = _config_0;
-			const _config_8 = resolveRuntimeExtensions(resolveHttpAuthSchemeConfig(resolveEndpointConfig(resolveHostHeaderConfig(resolveRegionConfig(resolveRetryConfig(resolveUserAgentConfig(resolveClientEndpointParameters(_config_0))))))), configuration?.extensions || []);
-			this.config = _config_8;
-			this.middlewareStack.use(getSchemaSerdePlugin(this.config));
-			this.middlewareStack.use(getUserAgentPlugin(this.config));
-			this.middlewareStack.use(getRetryPlugin(this.config));
-			this.middlewareStack.use(getContentLengthPlugin(this.config));
-			this.middlewareStack.use(getHostHeaderPlugin(this.config));
-			this.middlewareStack.use(getLoggerPlugin(this.config));
-			this.middlewareStack.use(getRecursionDetectionPlugin(this.config));
-			this.middlewareStack.use(getHttpAuthSchemeEndpointRuleSetPlugin(this.config, {
-				httpAuthSchemeParametersProvider: defaultSTSHttpAuthSchemeParametersProvider,
-				identityProviderConfigProvider: async (config) => new DefaultIdentityProviderConfig({
-					"aws.auth#sigv4": config.credentials,
-					"aws.auth#sigv4a": config.credentials
-				})
-			}));
-			this.middlewareStack.use(getHttpSigningPlugin(this.config));
-		}
-		destroy() {
-			super.destroy();
-		}
-	};
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/commands/AssumeRoleCommand.js
-var AssumeRoleCommand;
-var init_AssumeRoleCommand = __esmMin((() => {
-	init_client$1();
-	init_endpoints();
-	init_EndpointParameters();
-	init_schemas_0();
-	AssumeRoleCommand = class extends Command.classBuilder().ep(commonParams).m(function(Command, cs, config, o) {
-		return [getEndpointPlugin(config, Command.getEndpointParameterInstructions())];
-	}).s("AWSSecurityTokenServiceV20110615", "AssumeRole", {}).n("STSClient", "AssumeRoleCommand").sc(AssumeRole$).build() {};
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/commands/AssumeRoleWithWebIdentityCommand.js
-var AssumeRoleWithWebIdentityCommand;
-var init_AssumeRoleWithWebIdentityCommand = __esmMin((() => {
-	init_client$1();
-	init_endpoints();
-	init_EndpointParameters();
-	init_schemas_0();
-	AssumeRoleWithWebIdentityCommand = class extends Command.classBuilder().ep(commonParams).m(function(Command, cs, config, o) {
-		return [getEndpointPlugin(config, Command.getEndpointParameterInstructions())];
-	}).s("AWSSecurityTokenServiceV20110615", "AssumeRoleWithWebIdentity", {}).n("STSClient", "AssumeRoleWithWebIdentityCommand").sc(AssumeRoleWithWebIdentity$).build() {};
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/STS.js
-var commands, STS;
-var init_STS = __esmMin((() => {
-	init_client$1();
-	init_AssumeRoleCommand();
-	init_AssumeRoleWithWebIdentityCommand();
-	init_STSClient();
-	commands = {
-		AssumeRoleCommand,
-		AssumeRoleWithWebIdentityCommand
-	};
-	STS = class extends STSClient {};
-	createAggregatedClient(commands, STS);
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/commands/index.js
-var init_commands = __esmMin((() => {
-	init_AssumeRoleCommand();
-	init_AssumeRoleWithWebIdentityCommand();
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/models/models_0.js
-var init_models_0 = __esmMin((() => {}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/defaultStsRoleAssumers.js
-var getAccountIdFromAssumedRoleUser, resolveRegion, getDefaultRoleAssumer$1, getDefaultRoleAssumerWithWebIdentity$1, isH2;
-var init_defaultStsRoleAssumers = __esmMin((() => {
-	init_client();
-	init_AssumeRoleCommand();
-	init_AssumeRoleWithWebIdentityCommand();
-	getAccountIdFromAssumedRoleUser = (assumedRoleUser) => {
-		if (typeof assumedRoleUser?.Arn === "string") {
-			const arnComponents = assumedRoleUser.Arn.split(":");
-			if (arnComponents.length > 4 && arnComponents[4] !== "") return arnComponents[4];
-		}
-	};
-	resolveRegion = async (_region, _parentRegion, credentialProviderLogger, loaderConfig = {}) => {
-		const region = typeof _region === "function" ? await _region() : _region;
-		const parentRegion = typeof _parentRegion === "function" ? await _parentRegion() : _parentRegion;
-		let stsDefaultRegion = "";
-		const resolvedRegion = region ?? parentRegion ?? (stsDefaultRegion = await stsRegionDefaultResolver(loaderConfig)());
-		credentialProviderLogger?.debug?.("@aws-sdk/client-sts::resolveRegion", "accepting first of:", `${region} (credential provider clientConfig)`, `${parentRegion} (contextual client)`, `${stsDefaultRegion} (STS default: AWS_REGION, profile region, or us-east-1)`);
-		return resolvedRegion;
-	};
-	getDefaultRoleAssumer$1 = (stsOptions, STSClient) => {
-		let stsClient;
-		let closureSourceCreds;
-		return async (sourceCreds, params) => {
-			closureSourceCreds = sourceCreds;
-			if (!stsClient) {
-				const { logger = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
-				const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
-					logger,
-					profile
-				});
-				const isCompatibleRequestHandler = !isH2(requestHandler);
-				stsClient = new STSClient({
-					...stsOptions,
-					userAgentAppId,
-					profile,
-					credentialDefaultProvider: () => async () => closureSourceCreds,
-					region: resolvedRegion,
-					requestHandler: isCompatibleRequestHandler ? requestHandler : void 0,
-					logger
-				});
-			}
-			const { Credentials, AssumedRoleUser } = await stsClient.send(new AssumeRoleCommand(params));
-			if (!Credentials || !Credentials.AccessKeyId || !Credentials.SecretAccessKey) throw new Error(`Invalid response from STS.assumeRole call with role ${params.RoleArn}`);
-			const accountId = getAccountIdFromAssumedRoleUser(AssumedRoleUser);
-			const credentials = {
-				accessKeyId: Credentials.AccessKeyId,
-				secretAccessKey: Credentials.SecretAccessKey,
-				sessionToken: Credentials.SessionToken,
-				expiration: Credentials.Expiration,
-				...Credentials.CredentialScope && { credentialScope: Credentials.CredentialScope },
-				...accountId && { accountId }
-			};
-			setCredentialFeature(credentials, "CREDENTIALS_STS_ASSUME_ROLE", "i");
-			return credentials;
-		};
-	};
-	getDefaultRoleAssumerWithWebIdentity$1 = (stsOptions, STSClient) => {
-		let stsClient;
-		return async (params) => {
-			if (!stsClient) {
-				const { logger = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
-				const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
-					logger,
-					profile
-				});
-				const isCompatibleRequestHandler = !isH2(requestHandler);
-				stsClient = new STSClient({
-					...stsOptions,
-					userAgentAppId,
-					profile,
-					region: resolvedRegion,
-					requestHandler: isCompatibleRequestHandler ? requestHandler : void 0,
-					logger
-				});
-			}
-			const { Credentials, AssumedRoleUser } = await stsClient.send(new AssumeRoleWithWebIdentityCommand(params));
-			if (!Credentials || !Credentials.AccessKeyId || !Credentials.SecretAccessKey) throw new Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${params.RoleArn}`);
-			const accountId = getAccountIdFromAssumedRoleUser(AssumedRoleUser);
-			const credentials = {
-				accessKeyId: Credentials.AccessKeyId,
-				secretAccessKey: Credentials.SecretAccessKey,
-				sessionToken: Credentials.SessionToken,
-				expiration: Credentials.Expiration,
-				...Credentials.CredentialScope && { credentialScope: Credentials.CredentialScope },
-				...accountId && { accountId }
-			};
-			if (accountId) setCredentialFeature(credentials, "RESOLVED_ACCOUNT_ID", "T");
-			setCredentialFeature(credentials, "CREDENTIALS_STS_ASSUME_ROLE_WEB_ID", "k");
-			return credentials;
-		};
-	};
-	isH2 = (requestHandler) => {
-		return requestHandler?.metadata?.handlerProtocol === "h2";
-	};
-}));
-//#endregion
-//#region ../../node_modules/.pnpm/@aws-sdk+nested-clients@3.997.20/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/defaultRoleAssumers.js
-var getCustomizableStsClientCtor, getDefaultRoleAssumer, getDefaultRoleAssumerWithWebIdentity;
-var init_defaultRoleAssumers = __esmMin((() => {
-	init_defaultStsRoleAssumers();
-	init_STSClient();
-	getCustomizableStsClientCtor = (baseCtor, customizations) => {
-		if (!customizations) return baseCtor;
-		else return class CustomizableSTSClient extends baseCtor {
-			constructor(config) {
-				super(config);
-				for (const customization of customizations) this.middlewareStack.use(customization);
-			}
-		};
-	};
-	getDefaultRoleAssumer = (stsOptions = {}, stsPlugins) => getDefaultRoleAssumer$1(stsOptions, getCustomizableStsClientCtor(STSClient, stsPlugins));
-	getDefaultRoleAssumerWithWebIdentity = (stsOptions = {}, stsPlugins) => getDefaultRoleAssumerWithWebIdentity$1(stsOptions, getCustomizableStsClientCtor(STSClient, stsPlugins));
-}));
-//#endregion
-__esmMin((() => {
-	init_STSClient();
-	init_STS();
-	init_commands();
-	init_schemas_0();
-	init_errors();
-	init_models_0();
-	init_defaultRoleAssumers();
-	init_STSServiceException();
-}))();
-export { getDefaultRoleAssumer, getDefaultRoleAssumerWithWebIdentity };