@beesolve/analytics-processor 0.0.0 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (341) hide show
  1. package/DOCS.md +20 -0
  2. package/README.md +87 -3
  3. package/dist/cdk.d.ts +49 -0
  4. package/dist/cdk.js +127 -0
  5. package/dist/dailyRollup/bowser-UJEXXM6S.mjs +2 -0
  6. package/dist/dailyRollup/bowser-UJEXXM6S.mjs.map +7 -0
  7. package/dist/dailyRollup/chunk-3GD7PA4I.mjs +2 -0
  8. package/dist/dailyRollup/chunk-3GD7PA4I.mjs.map +7 -0
  9. package/dist/dailyRollup/chunk-3YRRUMLY.mjs +10 -0
  10. package/dist/dailyRollup/chunk-3YRRUMLY.mjs.map +7 -0
  11. package/dist/dailyRollup/chunk-5JDAL5HL.mjs +2 -0
  12. package/dist/dailyRollup/chunk-5JDAL5HL.mjs.map +7 -0
  13. package/dist/dailyRollup/chunk-C4CD3R2M.mjs +2 -0
  14. package/dist/dailyRollup/chunk-C4CD3R2M.mjs.map +7 -0
  15. package/dist/dailyRollup/chunk-CFZ5JWD3.mjs +2 -0
  16. package/dist/dailyRollup/chunk-CFZ5JWD3.mjs.map +7 -0
  17. package/dist/dailyRollup/chunk-FLISSIFQ.mjs +4 -0
  18. package/dist/dailyRollup/chunk-FLISSIFQ.mjs.map +7 -0
  19. package/dist/dailyRollup/chunk-G7FCKJTE.mjs +8 -0
  20. package/dist/dailyRollup/chunk-G7FCKJTE.mjs.map +7 -0
  21. package/dist/dailyRollup/chunk-GHMUY3QB.mjs +13 -0
  22. package/dist/dailyRollup/chunk-GHMUY3QB.mjs.map +7 -0
  23. package/dist/dailyRollup/chunk-HGD7WY52.mjs +2 -0
  24. package/dist/dailyRollup/chunk-HGD7WY52.mjs.map +7 -0
  25. package/dist/dailyRollup/chunk-IHCR62UU.mjs +6 -0
  26. package/dist/dailyRollup/chunk-IHCR62UU.mjs.map +7 -0
  27. package/dist/dailyRollup/chunk-KT7DZL3D.mjs +2 -0
  28. package/dist/dailyRollup/chunk-KT7DZL3D.mjs.map +7 -0
  29. package/dist/dailyRollup/chunk-LK4IXOEA.mjs +2 -0
  30. package/dist/dailyRollup/chunk-LK4IXOEA.mjs.map +7 -0
  31. package/dist/dailyRollup/chunk-MATUPZWL.mjs +6 -0
  32. package/dist/dailyRollup/chunk-MATUPZWL.mjs.map +7 -0
  33. package/dist/dailyRollup/chunk-NX6AKUU3.mjs +2 -0
  34. package/dist/dailyRollup/chunk-NX6AKUU3.mjs.map +7 -0
  35. package/dist/dailyRollup/chunk-PBJCPHYW.mjs +10 -0
  36. package/dist/dailyRollup/chunk-PBJCPHYW.mjs.map +7 -0
  37. package/dist/dailyRollup/chunk-PNUYSX4A.mjs +2 -0
  38. package/dist/dailyRollup/chunk-PNUYSX4A.mjs.map +7 -0
  39. package/dist/dailyRollup/chunk-RO44VKXZ.mjs +2 -0
  40. package/dist/dailyRollup/chunk-RO44VKXZ.mjs.map +7 -0
  41. package/dist/dailyRollup/chunk-RU3KGSS6.mjs +2 -0
  42. package/dist/dailyRollup/chunk-RU3KGSS6.mjs.map +7 -0
  43. package/dist/dailyRollup/chunk-VG37NXBO.mjs +2 -0
  44. package/dist/dailyRollup/chunk-VG37NXBO.mjs.map +7 -0
  45. package/dist/dailyRollup/chunk-VVG5B2RA.mjs +13 -0
  46. package/dist/dailyRollup/chunk-VVG5B2RA.mjs.map +7 -0
  47. package/dist/dailyRollup/chunk-YIZKQ2WK.mjs +10 -0
  48. package/dist/dailyRollup/chunk-YIZKQ2WK.mjs.map +7 -0
  49. package/dist/dailyRollup/chunk-ZH5DZOB5.mjs +2 -0
  50. package/dist/dailyRollup/chunk-ZH5DZOB5.mjs.map +7 -0
  51. package/dist/dailyRollup/client-7VYWT6KE.mjs +2 -0
  52. package/dist/dailyRollup/client-7VYWT6KE.mjs.map +7 -0
  53. package/dist/dailyRollup/dailyRollup.mjs +2 -0
  54. package/dist/dailyRollup/dailyRollup.mjs.map +7 -0
  55. package/dist/dailyRollup/dist-es-3PO6WBRA.mjs +2 -0
  56. package/dist/dailyRollup/dist-es-3PO6WBRA.mjs.map +7 -0
  57. package/dist/dailyRollup/dist-es-4375P743.mjs +2 -0
  58. package/dist/dailyRollup/dist-es-4375P743.mjs.map +7 -0
  59. package/dist/dailyRollup/dist-es-43J27JDM.mjs +3 -0
  60. package/dist/dailyRollup/dist-es-43J27JDM.mjs.map +7 -0
  61. package/dist/dailyRollup/dist-es-6SRW3I3T.mjs +2 -0
  62. package/dist/dailyRollup/dist-es-6SRW3I3T.mjs.map +7 -0
  63. package/dist/dailyRollup/dist-es-BMGNYEV6.mjs +3 -0
  64. package/dist/dailyRollup/dist-es-BMGNYEV6.mjs.map +7 -0
  65. package/dist/dailyRollup/dist-es-BQ5OLCIJ.mjs +2 -0
  66. package/dist/dailyRollup/dist-es-BQ5OLCIJ.mjs.map +7 -0
  67. package/dist/dailyRollup/dist-es-CFDT5MDO.mjs +2 -0
  68. package/dist/dailyRollup/dist-es-CFDT5MDO.mjs.map +7 -0
  69. package/dist/dailyRollup/dist-es-FPBJ7DAB.mjs +2 -0
  70. package/dist/dailyRollup/dist-es-FPBJ7DAB.mjs.map +7 -0
  71. package/dist/dailyRollup/dist-es-G4DL2UUB.mjs +7 -0
  72. package/dist/dailyRollup/dist-es-G4DL2UUB.mjs.map +7 -0
  73. package/dist/dailyRollup/dist-es-IRYFH3EH.mjs +2 -0
  74. package/dist/dailyRollup/dist-es-IRYFH3EH.mjs.map +7 -0
  75. package/dist/dailyRollup/dist-es-L5F6PNYU.mjs +2 -0
  76. package/dist/dailyRollup/dist-es-L5F6PNYU.mjs.map +7 -0
  77. package/dist/dailyRollup/dist-es-LEKBJS4E.mjs +2 -0
  78. package/dist/dailyRollup/dist-es-LEKBJS4E.mjs.map +7 -0
  79. package/dist/dailyRollup/dist-es-NMUDTELL.mjs +2 -0
  80. package/dist/dailyRollup/dist-es-NMUDTELL.mjs.map +7 -0
  81. package/dist/dailyRollup/dist-es-OY2VA72W.mjs +2 -0
  82. package/dist/dailyRollup/dist-es-OY2VA72W.mjs.map +7 -0
  83. package/dist/dailyRollup/dist-es-SJKDRHZJ.mjs +2 -0
  84. package/dist/dailyRollup/dist-es-SJKDRHZJ.mjs.map +7 -0
  85. package/dist/dailyRollup/dist-es-UGFAGDM2.mjs +7 -0
  86. package/dist/dailyRollup/dist-es-UGFAGDM2.mjs.map +7 -0
  87. package/dist/dailyRollup/dist-es-YRXTT57X.mjs +3 -0
  88. package/dist/dailyRollup/dist-es-YRXTT57X.mjs.map +7 -0
  89. package/dist/dailyRollup/event-streams-G2EZD32F.mjs +2 -0
  90. package/dist/dailyRollup/event-streams-G2EZD32F.mjs.map +7 -0
  91. package/dist/dailyRollup/event-streams-H4LI66VS.mjs +2 -0
  92. package/dist/dailyRollup/event-streams-H4LI66VS.mjs.map +7 -0
  93. package/dist/dailyRollup/event-streams-U52YN65T.mjs +2 -0
  94. package/dist/dailyRollup/event-streams-U52YN65T.mjs.map +7 -0
  95. package/dist/dailyRollup/loadCognitoIdentity-3OXED256.mjs +2 -0
  96. package/dist/dailyRollup/loadCognitoIdentity-3OXED256.mjs.map +7 -0
  97. package/dist/dailyRollup/loadSso-6KWTKR23.mjs +2 -0
  98. package/dist/dailyRollup/loadSso-6KWTKR23.mjs.map +7 -0
  99. package/dist/dailyRollup/loadSso-AITTIS6M.mjs +2 -0
  100. package/dist/dailyRollup/loadSso-AITTIS6M.mjs.map +7 -0
  101. package/dist/dailyRollup/loadSts-LQCNCE76.mjs +2 -0
  102. package/dist/dailyRollup/loadSts-LQCNCE76.mjs.map +7 -0
  103. package/dist/dailyRollup/signin-THWW5VM5.mjs +2 -0
  104. package/dist/dailyRollup/signin-THWW5VM5.mjs.map +7 -0
  105. package/dist/dailyRollup/signin-ZKLDJEMJ.mjs +2 -0
  106. package/dist/dailyRollup/signin-ZKLDJEMJ.mjs.map +7 -0
  107. package/dist/dailyRollup/sso-oidc-MI4NLGSV.mjs +2 -0
  108. package/dist/dailyRollup/sso-oidc-MI4NLGSV.mjs.map +7 -0
  109. package/dist/dailyRollup/sso-oidc-OWLWHDBI.mjs +2 -0
  110. package/dist/dailyRollup/sso-oidc-OWLWHDBI.mjs.map +7 -0
  111. package/dist/dailyRollup/sts-AQIPDWOX.mjs +2 -0
  112. package/dist/dailyRollup/sts-AQIPDWOX.mjs.map +7 -0
  113. package/dist/dailyRollup/sts-EN7K54DW.mjs +2 -0
  114. package/dist/dailyRollup/sts-EN7K54DW.mjs.map +7 -0
  115. package/dist/hourly/bowser-UJEXXM6S.mjs +2 -0
  116. package/dist/hourly/bowser-UJEXXM6S.mjs.map +7 -0
  117. package/dist/hourly/chunk-2LV65MUY.mjs +2 -0
  118. package/dist/hourly/chunk-2LV65MUY.mjs.map +7 -0
  119. package/dist/hourly/chunk-3GD7PA4I.mjs +2 -0
  120. package/dist/hourly/chunk-3GD7PA4I.mjs.map +7 -0
  121. package/dist/hourly/chunk-4X6M4ZIM.mjs +13 -0
  122. package/dist/hourly/chunk-4X6M4ZIM.mjs.map +7 -0
  123. package/dist/hourly/chunk-5EEREEGM.mjs +10 -0
  124. package/dist/hourly/chunk-5EEREEGM.mjs.map +7 -0
  125. package/dist/hourly/chunk-5JDAL5HL.mjs +2 -0
  126. package/dist/hourly/chunk-5JDAL5HL.mjs.map +7 -0
  127. package/dist/hourly/chunk-C4CD3R2M.mjs +2 -0
  128. package/dist/hourly/chunk-C4CD3R2M.mjs.map +7 -0
  129. package/dist/hourly/chunk-CDK2TDZ3.mjs +2 -0
  130. package/dist/hourly/chunk-CDK2TDZ3.mjs.map +7 -0
  131. package/dist/hourly/chunk-CFZ5JWD3.mjs +2 -0
  132. package/dist/hourly/chunk-CFZ5JWD3.mjs.map +7 -0
  133. package/dist/hourly/chunk-DDOSB7QU.mjs +10 -0
  134. package/dist/hourly/chunk-DDOSB7QU.mjs.map +7 -0
  135. package/dist/hourly/chunk-FLISSIFQ.mjs +4 -0
  136. package/dist/hourly/chunk-FLISSIFQ.mjs.map +7 -0
  137. package/dist/hourly/chunk-G7FCKJTE.mjs +8 -0
  138. package/dist/hourly/chunk-G7FCKJTE.mjs.map +7 -0
  139. package/dist/hourly/chunk-HGD7WY52.mjs +2 -0
  140. package/dist/hourly/chunk-HGD7WY52.mjs.map +7 -0
  141. package/dist/hourly/chunk-IHCR62UU.mjs +6 -0
  142. package/dist/hourly/chunk-IHCR62UU.mjs.map +7 -0
  143. package/dist/hourly/chunk-LK4IXOEA.mjs +2 -0
  144. package/dist/hourly/chunk-LK4IXOEA.mjs.map +7 -0
  145. package/dist/hourly/chunk-MATUPZWL.mjs +6 -0
  146. package/dist/hourly/chunk-MATUPZWL.mjs.map +7 -0
  147. package/dist/hourly/chunk-NX6AKUU3.mjs +2 -0
  148. package/dist/hourly/chunk-NX6AKUU3.mjs.map +7 -0
  149. package/dist/hourly/chunk-OV75J3RB.mjs +10 -0
  150. package/dist/hourly/chunk-OV75J3RB.mjs.map +7 -0
  151. package/dist/hourly/chunk-RO44VKXZ.mjs +2 -0
  152. package/dist/hourly/chunk-RO44VKXZ.mjs.map +7 -0
  153. package/dist/hourly/chunk-RU3KGSS6.mjs +2 -0
  154. package/dist/hourly/chunk-RU3KGSS6.mjs.map +7 -0
  155. package/dist/hourly/chunk-SEATMW6H.mjs +2 -0
  156. package/dist/hourly/chunk-SEATMW6H.mjs.map +7 -0
  157. package/dist/hourly/chunk-UEL4UF23.mjs +2 -0
  158. package/dist/hourly/chunk-UEL4UF23.mjs.map +7 -0
  159. package/dist/hourly/chunk-VG37NXBO.mjs +2 -0
  160. package/dist/hourly/chunk-VG37NXBO.mjs.map +7 -0
  161. package/dist/hourly/chunk-YLTURKBY.mjs +13 -0
  162. package/dist/hourly/chunk-YLTURKBY.mjs.map +7 -0
  163. package/dist/hourly/chunk-ZH5DZOB5.mjs +2 -0
  164. package/dist/hourly/chunk-ZH5DZOB5.mjs.map +7 -0
  165. package/dist/hourly/client-YFAS5DGU.mjs +2 -0
  166. package/dist/hourly/client-YFAS5DGU.mjs.map +7 -0
  167. package/dist/hourly/dist-es-2QGRGQLF.mjs +7 -0
  168. package/dist/hourly/dist-es-2QGRGQLF.mjs.map +7 -0
  169. package/dist/hourly/dist-es-4JJUYAKR.mjs +2 -0
  170. package/dist/hourly/dist-es-4JJUYAKR.mjs.map +7 -0
  171. package/dist/hourly/dist-es-4NUPISR6.mjs +3 -0
  172. package/dist/hourly/dist-es-4NUPISR6.mjs.map +7 -0
  173. package/dist/hourly/dist-es-4PFASTED.mjs +2 -0
  174. package/dist/hourly/dist-es-4PFASTED.mjs.map +7 -0
  175. package/dist/hourly/dist-es-ARVZEK2B.mjs +2 -0
  176. package/dist/hourly/dist-es-ARVZEK2B.mjs.map +7 -0
  177. package/dist/hourly/dist-es-BH4D2XQ2.mjs +2 -0
  178. package/dist/hourly/dist-es-BH4D2XQ2.mjs.map +7 -0
  179. package/dist/hourly/dist-es-D46ET7B3.mjs +2 -0
  180. package/dist/hourly/dist-es-D46ET7B3.mjs.map +7 -0
  181. package/dist/hourly/dist-es-DQHOM6HA.mjs +3 -0
  182. package/dist/hourly/dist-es-DQHOM6HA.mjs.map +7 -0
  183. package/dist/hourly/dist-es-ETNPEJSC.mjs +2 -0
  184. package/dist/hourly/dist-es-ETNPEJSC.mjs.map +7 -0
  185. package/dist/hourly/dist-es-HCGEEOBW.mjs +2 -0
  186. package/dist/hourly/dist-es-HCGEEOBW.mjs.map +7 -0
  187. package/dist/hourly/dist-es-LONCZIHI.mjs +2 -0
  188. package/dist/hourly/dist-es-LONCZIHI.mjs.map +7 -0
  189. package/dist/hourly/dist-es-PV5J6DAM.mjs +2 -0
  190. package/dist/hourly/dist-es-PV5J6DAM.mjs.map +7 -0
  191. package/dist/hourly/dist-es-S4EGUNEL.mjs +2 -0
  192. package/dist/hourly/dist-es-S4EGUNEL.mjs.map +7 -0
  193. package/dist/hourly/dist-es-VDZMHJW2.mjs +7 -0
  194. package/dist/hourly/dist-es-VDZMHJW2.mjs.map +7 -0
  195. package/dist/hourly/dist-es-WBVL2T3J.mjs +2 -0
  196. package/dist/hourly/dist-es-WBVL2T3J.mjs.map +7 -0
  197. package/dist/hourly/dist-es-YFKUCAP2.mjs +2 -0
  198. package/dist/hourly/dist-es-YFKUCAP2.mjs.map +7 -0
  199. package/dist/hourly/dist-es-YZBMXOS5.mjs +3 -0
  200. package/dist/hourly/dist-es-YZBMXOS5.mjs.map +7 -0
  201. package/dist/hourly/event-streams-G2EZD32F.mjs +2 -0
  202. package/dist/hourly/event-streams-G2EZD32F.mjs.map +7 -0
  203. package/dist/hourly/event-streams-H4LI66VS.mjs +2 -0
  204. package/dist/hourly/event-streams-H4LI66VS.mjs.map +7 -0
  205. package/dist/hourly/event-streams-U52YN65T.mjs +2 -0
  206. package/dist/hourly/event-streams-U52YN65T.mjs.map +7 -0
  207. package/dist/hourly/hourly.mjs +11 -0
  208. package/dist/hourly/hourly.mjs.map +7 -0
  209. package/dist/hourly/loadCognitoIdentity-KHSY4IOA.mjs +2 -0
  210. package/dist/hourly/loadCognitoIdentity-KHSY4IOA.mjs.map +7 -0
  211. package/dist/hourly/loadSso-HHJP34KX.mjs +2 -0
  212. package/dist/hourly/loadSso-HHJP34KX.mjs.map +7 -0
  213. package/dist/hourly/loadSso-R47RBCPJ.mjs +2 -0
  214. package/dist/hourly/loadSso-R47RBCPJ.mjs.map +7 -0
  215. package/dist/hourly/loadSts-5X55AJY5.mjs +2 -0
  216. package/dist/hourly/loadSts-5X55AJY5.mjs.map +7 -0
  217. package/dist/hourly/signin-F7JF6BF6.mjs +2 -0
  218. package/dist/hourly/signin-F7JF6BF6.mjs.map +7 -0
  219. package/dist/hourly/signin-WDXS6SW2.mjs +2 -0
  220. package/dist/hourly/signin-WDXS6SW2.mjs.map +7 -0
  221. package/dist/hourly/sso-oidc-63EGB35D.mjs +2 -0
  222. package/dist/hourly/sso-oidc-63EGB35D.mjs.map +7 -0
  223. package/dist/hourly/sso-oidc-UVLJZI2R.mjs +2 -0
  224. package/dist/hourly/sso-oidc-UVLJZI2R.mjs.map +7 -0
  225. package/dist/hourly/sts-4M7S3GN4.mjs +2 -0
  226. package/dist/hourly/sts-4M7S3GN4.mjs.map +7 -0
  227. package/dist/hourly/sts-YXUOYWFS.mjs +2 -0
  228. package/dist/hourly/sts-YXUOYWFS.mjs.map +7 -0
  229. package/dist/index.d.ts +359 -0
  230. package/dist/index.js +1011 -0
  231. package/dist/monthlyRollup/bowser-UJEXXM6S.mjs +2 -0
  232. package/dist/monthlyRollup/bowser-UJEXXM6S.mjs.map +7 -0
  233. package/dist/monthlyRollup/chunk-3GD7PA4I.mjs +2 -0
  234. package/dist/monthlyRollup/chunk-3GD7PA4I.mjs.map +7 -0
  235. package/dist/monthlyRollup/chunk-3YRRUMLY.mjs +10 -0
  236. package/dist/monthlyRollup/chunk-3YRRUMLY.mjs.map +7 -0
  237. package/dist/monthlyRollup/chunk-5JDAL5HL.mjs +2 -0
  238. package/dist/monthlyRollup/chunk-5JDAL5HL.mjs.map +7 -0
  239. package/dist/monthlyRollup/chunk-C4CD3R2M.mjs +2 -0
  240. package/dist/monthlyRollup/chunk-C4CD3R2M.mjs.map +7 -0
  241. package/dist/monthlyRollup/chunk-CFZ5JWD3.mjs +2 -0
  242. package/dist/monthlyRollup/chunk-CFZ5JWD3.mjs.map +7 -0
  243. package/dist/monthlyRollup/chunk-FLISSIFQ.mjs +4 -0
  244. package/dist/monthlyRollup/chunk-FLISSIFQ.mjs.map +7 -0
  245. package/dist/monthlyRollup/chunk-G7FCKJTE.mjs +8 -0
  246. package/dist/monthlyRollup/chunk-G7FCKJTE.mjs.map +7 -0
  247. package/dist/monthlyRollup/chunk-GHMUY3QB.mjs +13 -0
  248. package/dist/monthlyRollup/chunk-GHMUY3QB.mjs.map +7 -0
  249. package/dist/monthlyRollup/chunk-HGD7WY52.mjs +2 -0
  250. package/dist/monthlyRollup/chunk-HGD7WY52.mjs.map +7 -0
  251. package/dist/monthlyRollup/chunk-IHCR62UU.mjs +6 -0
  252. package/dist/monthlyRollup/chunk-IHCR62UU.mjs.map +7 -0
  253. package/dist/monthlyRollup/chunk-KT7DZL3D.mjs +2 -0
  254. package/dist/monthlyRollup/chunk-KT7DZL3D.mjs.map +7 -0
  255. package/dist/monthlyRollup/chunk-LK4IXOEA.mjs +2 -0
  256. package/dist/monthlyRollup/chunk-LK4IXOEA.mjs.map +7 -0
  257. package/dist/monthlyRollup/chunk-MATUPZWL.mjs +6 -0
  258. package/dist/monthlyRollup/chunk-MATUPZWL.mjs.map +7 -0
  259. package/dist/monthlyRollup/chunk-NX6AKUU3.mjs +2 -0
  260. package/dist/monthlyRollup/chunk-NX6AKUU3.mjs.map +7 -0
  261. package/dist/monthlyRollup/chunk-PBJCPHYW.mjs +10 -0
  262. package/dist/monthlyRollup/chunk-PBJCPHYW.mjs.map +7 -0
  263. package/dist/monthlyRollup/chunk-PNUYSX4A.mjs +2 -0
  264. package/dist/monthlyRollup/chunk-PNUYSX4A.mjs.map +7 -0
  265. package/dist/monthlyRollup/chunk-RO44VKXZ.mjs +2 -0
  266. package/dist/monthlyRollup/chunk-RO44VKXZ.mjs.map +7 -0
  267. package/dist/monthlyRollup/chunk-RU3KGSS6.mjs +2 -0
  268. package/dist/monthlyRollup/chunk-RU3KGSS6.mjs.map +7 -0
  269. package/dist/monthlyRollup/chunk-VG37NXBO.mjs +2 -0
  270. package/dist/monthlyRollup/chunk-VG37NXBO.mjs.map +7 -0
  271. package/dist/monthlyRollup/chunk-VVG5B2RA.mjs +13 -0
  272. package/dist/monthlyRollup/chunk-VVG5B2RA.mjs.map +7 -0
  273. package/dist/monthlyRollup/chunk-YIZKQ2WK.mjs +10 -0
  274. package/dist/monthlyRollup/chunk-YIZKQ2WK.mjs.map +7 -0
  275. package/dist/monthlyRollup/chunk-ZH5DZOB5.mjs +2 -0
  276. package/dist/monthlyRollup/chunk-ZH5DZOB5.mjs.map +7 -0
  277. package/dist/monthlyRollup/client-7VYWT6KE.mjs +2 -0
  278. package/dist/monthlyRollup/client-7VYWT6KE.mjs.map +7 -0
  279. package/dist/monthlyRollup/dist-es-3PO6WBRA.mjs +2 -0
  280. package/dist/monthlyRollup/dist-es-3PO6WBRA.mjs.map +7 -0
  281. package/dist/monthlyRollup/dist-es-4375P743.mjs +2 -0
  282. package/dist/monthlyRollup/dist-es-4375P743.mjs.map +7 -0
  283. package/dist/monthlyRollup/dist-es-43J27JDM.mjs +3 -0
  284. package/dist/monthlyRollup/dist-es-43J27JDM.mjs.map +7 -0
  285. package/dist/monthlyRollup/dist-es-6SRW3I3T.mjs +2 -0
  286. package/dist/monthlyRollup/dist-es-6SRW3I3T.mjs.map +7 -0
  287. package/dist/monthlyRollup/dist-es-BMGNYEV6.mjs +3 -0
  288. package/dist/monthlyRollup/dist-es-BMGNYEV6.mjs.map +7 -0
  289. package/dist/monthlyRollup/dist-es-BQ5OLCIJ.mjs +2 -0
  290. package/dist/monthlyRollup/dist-es-BQ5OLCIJ.mjs.map +7 -0
  291. package/dist/monthlyRollup/dist-es-CFDT5MDO.mjs +2 -0
  292. package/dist/monthlyRollup/dist-es-CFDT5MDO.mjs.map +7 -0
  293. package/dist/monthlyRollup/dist-es-FPBJ7DAB.mjs +2 -0
  294. package/dist/monthlyRollup/dist-es-FPBJ7DAB.mjs.map +7 -0
  295. package/dist/monthlyRollup/dist-es-G4DL2UUB.mjs +7 -0
  296. package/dist/monthlyRollup/dist-es-G4DL2UUB.mjs.map +7 -0
  297. package/dist/monthlyRollup/dist-es-IRYFH3EH.mjs +2 -0
  298. package/dist/monthlyRollup/dist-es-IRYFH3EH.mjs.map +7 -0
  299. package/dist/monthlyRollup/dist-es-L5F6PNYU.mjs +2 -0
  300. package/dist/monthlyRollup/dist-es-L5F6PNYU.mjs.map +7 -0
  301. package/dist/monthlyRollup/dist-es-LEKBJS4E.mjs +2 -0
  302. package/dist/monthlyRollup/dist-es-LEKBJS4E.mjs.map +7 -0
  303. package/dist/monthlyRollup/dist-es-NMUDTELL.mjs +2 -0
  304. package/dist/monthlyRollup/dist-es-NMUDTELL.mjs.map +7 -0
  305. package/dist/monthlyRollup/dist-es-OY2VA72W.mjs +2 -0
  306. package/dist/monthlyRollup/dist-es-OY2VA72W.mjs.map +7 -0
  307. package/dist/monthlyRollup/dist-es-SJKDRHZJ.mjs +2 -0
  308. package/dist/monthlyRollup/dist-es-SJKDRHZJ.mjs.map +7 -0
  309. package/dist/monthlyRollup/dist-es-UGFAGDM2.mjs +7 -0
  310. package/dist/monthlyRollup/dist-es-UGFAGDM2.mjs.map +7 -0
  311. package/dist/monthlyRollup/dist-es-YRXTT57X.mjs +3 -0
  312. package/dist/monthlyRollup/dist-es-YRXTT57X.mjs.map +7 -0
  313. package/dist/monthlyRollup/event-streams-G2EZD32F.mjs +2 -0
  314. package/dist/monthlyRollup/event-streams-G2EZD32F.mjs.map +7 -0
  315. package/dist/monthlyRollup/event-streams-H4LI66VS.mjs +2 -0
  316. package/dist/monthlyRollup/event-streams-H4LI66VS.mjs.map +7 -0
  317. package/dist/monthlyRollup/event-streams-U52YN65T.mjs +2 -0
  318. package/dist/monthlyRollup/event-streams-U52YN65T.mjs.map +7 -0
  319. package/dist/monthlyRollup/loadCognitoIdentity-3OXED256.mjs +2 -0
  320. package/dist/monthlyRollup/loadCognitoIdentity-3OXED256.mjs.map +7 -0
  321. package/dist/monthlyRollup/loadSso-6KWTKR23.mjs +2 -0
  322. package/dist/monthlyRollup/loadSso-6KWTKR23.mjs.map +7 -0
  323. package/dist/monthlyRollup/loadSso-AITTIS6M.mjs +2 -0
  324. package/dist/monthlyRollup/loadSso-AITTIS6M.mjs.map +7 -0
  325. package/dist/monthlyRollup/loadSts-LQCNCE76.mjs +2 -0
  326. package/dist/monthlyRollup/loadSts-LQCNCE76.mjs.map +7 -0
  327. package/dist/monthlyRollup/monthlyRollup.mjs +2 -0
  328. package/dist/monthlyRollup/monthlyRollup.mjs.map +7 -0
  329. package/dist/monthlyRollup/signin-THWW5VM5.mjs +2 -0
  330. package/dist/monthlyRollup/signin-THWW5VM5.mjs.map +7 -0
  331. package/dist/monthlyRollup/signin-ZKLDJEMJ.mjs +2 -0
  332. package/dist/monthlyRollup/signin-ZKLDJEMJ.mjs.map +7 -0
  333. package/dist/monthlyRollup/sso-oidc-MI4NLGSV.mjs +2 -0
  334. package/dist/monthlyRollup/sso-oidc-MI4NLGSV.mjs.map +7 -0
  335. package/dist/monthlyRollup/sso-oidc-OWLWHDBI.mjs +2 -0
  336. package/dist/monthlyRollup/sso-oidc-OWLWHDBI.mjs.map +7 -0
  337. package/dist/monthlyRollup/sts-AQIPDWOX.mjs +2 -0
  338. package/dist/monthlyRollup/sts-AQIPDWOX.mjs.map +7 -0
  339. package/dist/monthlyRollup/sts-EN7K54DW.mjs +2 -0
  340. package/dist/monthlyRollup/sts-EN7K54DW.mjs.map +7 -0
  341. package/package.json +55 -6
@@ -0,0 +1,7 @@
1
+ {
2
+ "version": 3,
3
+ "sources": ["../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/defaults-mode/constants.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/config-resolver/regionConfig/getInstanceMetadataRegion.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/config-resolver/regionConfig/config.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/config-resolver/regionConfig/checkRegion.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/config-resolver/regionConfig/isFipsRegion.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/config-resolver/regionConfig/getRealRegion.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/config-resolver/regionConfig/resolveRegionConfig.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/property-provider/ProviderError.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/property-provider/CredentialsProviderError.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/property-provider/TokenProviderError.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/property-provider/chain.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/property-provider/fromValue.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/property-provider/memoize.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/util-config-provider/booleanSelector.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/util-config-provider/types.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getHomeDir.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getProfileName.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getSSOTokenFilepath.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getSSOTokenFromFile.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/loadSharedConfigFiles.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getConfigData.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getConfigFilepath.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getCredentialsFilepath.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/parseIni.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/readFile.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/getSsoSessionData.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/loadSsoSessionData.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/mergeConfigFiles.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/parseKnownFiles.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/shared-ini-file-loader/externalDataInterceptor.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/node-config-provider/getSelectorName.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/node-config-provider/fromEnv.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/node-config-provider/fromSharedConfigFiles.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/node-config-provider/fromStatic.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/node-config-provider/configLoader.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/config-resolver/endpointsConfig/NodeUseDualstackEndpointConfigOptions.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/config-resolver/endpointsConfig/NodeUseFipsEndpointConfigOptions.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/defaults-mode/defaultsModeConfig.js", "../../../../node_modules/.bun/@smithy+core@3.35.1/node_modules/@smithy/core/dist-es/submodules/config/defaults-mode/resolveDefaultsModeConfig.js"],
4
+ "sourcesContent": ["export const AWS_EXECUTION_ENV = \"AWS_EXECUTION_ENV\";\nexport const AWS_REGION_ENV = \"AWS_REGION\";\nexport const AWS_DEFAULT_REGION_ENV = \"AWS_DEFAULT_REGION\";\nexport const ENV_IMDS_DISABLED = \"AWS_EC2_METADATA_DISABLED\";\nexport const DEFAULTS_MODE_OPTIONS = [\"in-region\", \"cross-region\", \"mobile\", \"standard\", \"legacy\"];\nexport const IMDS_REGION_PATH = \"/latest/meta-data/placement/region\";\nexport const IMDS_TOKEN_PATH = \"/latest/api/token\";\nexport const X_AWS_EC2_METADATA_TOKEN = \"x-aws-ec2-metadata-token\";\nexport const X_AWS_EC2_METADATA_TOKEN_TTL = \"x-aws-ec2-metadata-token-ttl-seconds\";\n", "import { ENV_IMDS_DISABLED, IMDS_REGION_PATH, IMDS_TOKEN_PATH, X_AWS_EC2_METADATA_TOKEN, X_AWS_EC2_METADATA_TOKEN_TTL, } from \"../../defaults-mode/constants\";\nconst TIMEOUT_MS = 1000;\nconst NEG_CACHE_TTL_MS = 60_000;\nlet negativeCacheUntil = 0;\nexport const getInstanceMetadataRegion = async () => {\n if (process.env[ENV_IMDS_DISABLED]) {\n return undefined;\n }\n if (Date.now() < negativeCacheUntil) {\n return undefined;\n }\n try {\n const endpoint = resolveImdsEndpoint();\n const token = (await imdsRequest({\n ...endpoint,\n path: IMDS_TOKEN_PATH,\n method: \"PUT\",\n headers: {\n [X_AWS_EC2_METADATA_TOKEN_TTL]: \"21600\",\n },\n })).toString();\n const region = (await imdsRequest({\n ...endpoint,\n path: IMDS_REGION_PATH,\n method: \"GET\",\n headers: {\n [X_AWS_EC2_METADATA_TOKEN]: token,\n },\n }))\n .toString()\n .trim();\n return region || cacheNegativeAndReturnUndefined();\n }\n catch {\n return cacheNegativeAndReturnUndefined();\n }\n};\nconst cacheNegativeAndReturnUndefined = () => {\n negativeCacheUntil = Date.now() + NEG_CACHE_TTL_MS;\n return undefined;\n};\nconst resolveImdsEndpoint = () => {\n const envEndpoint = process.env.AWS_EC2_METADATA_SERVICE_ENDPOINT;\n if (envEndpoint) {\n const url = new URL(envEndpoint);\n return {\n hostname: url.hostname.replace(/^\\[(.+)]$/, \"$1\"),\n port: url.port ? Number(url.port) : undefined,\n };\n }\n if (process.env.AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE === \"IPv6\") {\n return { hostname: \"fd00:ec2::254\" };\n }\n return { hostname: \"169.254.169.254\" };\n};\nconst imdsRequest = async (options) => {\n const { request } = await import(\"node:http\");\n return new Promise((resolve, reject) => {\n const req = request({\n hostname: options.hostname,\n port: options.port,\n path: options.path,\n method: options.method,\n headers: options.headers,\n timeout: TIMEOUT_MS,\n signal: AbortSignal.timeout(TIMEOUT_MS),\n });\n req.on(\"error\", (err) => {\n reject(err);\n req.destroy();\n });\n req.on(\"timeout\", () => {\n reject(new Error(\"TimeoutError from instance metadata service\"));\n req.destroy();\n });\n req.on(\"response\", (res) => {\n const { statusCode = 400 } = res;\n if (statusCode < 200 || statusCode >= 300) {\n reject(Object.assign(new Error(\"Error response received from instance metadata service\"), { statusCode }));\n req.destroy();\n return;\n }\n const chunks = [];\n res.on(\"data\", (chunk) => chunks.push(chunk));\n res.on(\"end\", () => {\n resolve(Buffer.concat(chunks));\n req.destroy();\n });\n });\n req.end();\n });\n};\n", "import { getInstanceMetadataRegion } from \"./getInstanceMetadataRegion\";\nexport const REGION_ENV_NAME = \"AWS_REGION\";\nexport const REGION_INI_NAME = \"region\";\nexport const NODE_REGION_CONFIG_OPTIONS = {\n environmentVariableSelector: (env) => env[REGION_ENV_NAME],\n configFileSelector: (profile) => profile[REGION_INI_NAME],\n default: async () => {\n const region = await getInstanceMetadataRegion();\n if (region) {\n return region;\n }\n throw new Error(\"Region is missing\");\n },\n};\nexport const NODE_REGION_CONFIG_FILE_OPTIONS = {\n preferredFile: \"credentials\",\n};\n", "import { isValidHostLabel } from \"@smithy/core/transport\";\nconst validRegions = new Set();\nexport const checkRegion = (region, check = isValidHostLabel) => {\n if (!validRegions.has(region) && !check(region)) {\n if (region === \"*\") {\n console.warn(`@smithy/config-resolver WARN - Please use the caller region instead of \"*\". See \"sigv4a\" in https://github.com/aws/aws-sdk-js-v3/blob/main/supplemental-docs/CLIENTS.md.`);\n }\n else {\n throw new Error(`Region not accepted: region=\"${region}\" is not a valid hostname component.`);\n }\n }\n else {\n validRegions.add(region);\n }\n};\n", "export const isFipsRegion = (region) => typeof region === \"string\" && (region.startsWith(\"fips-\") || region.endsWith(\"-fips\"));\n", "import { isFipsRegion } from \"./isFipsRegion\";\nexport const getRealRegion = (region) => isFipsRegion(region)\n ? [\"fips-aws-global\", \"aws-fips\"].includes(region)\n ? \"us-east-1\"\n : region.replace(/fips-(dkr-|prod-)?|-fips/, \"\")\n : region;\n", "import { checkRegion } from \"./checkRegion\";\nimport { getRealRegion } from \"./getRealRegion\";\nimport { isFipsRegion } from \"./isFipsRegion\";\nexport const resolveRegionConfig = (input) => {\n const { region, useFipsEndpoint } = input;\n if (!region) {\n throw new Error(\"Region is missing\");\n }\n return Object.assign(input, {\n region: async () => {\n const providedRegion = typeof region === \"function\" ? await region() : region;\n const realRegion = getRealRegion(providedRegion);\n checkRegion(realRegion);\n return realRegion;\n },\n useFipsEndpoint: async () => {\n const providedRegion = typeof region === \"string\" ? region : await region();\n if (isFipsRegion(providedRegion)) {\n return true;\n }\n return typeof useFipsEndpoint !== \"function\" ? Promise.resolve(!!useFipsEndpoint) : useFipsEndpoint();\n },\n });\n};\n", "export class ProviderError extends Error {\n name = \"ProviderError\";\n tryNextLink;\n constructor(message, options = true) {\n let logger;\n let tryNextLink = true;\n if (typeof options === \"boolean\") {\n logger = undefined;\n tryNextLink = options;\n }\n else if (options != null && typeof options === \"object\") {\n logger = options.logger;\n tryNextLink = options.tryNextLink ?? true;\n }\n super(message);\n this.tryNextLink = tryNextLink;\n Object.setPrototypeOf(this, ProviderError.prototype);\n logger?.debug?.(`@smithy/property-provider ${tryNextLink ? \"->\" : \"(!)\"} ${message}`);\n }\n static from(error, options = true) {\n return Object.assign(new this(error.message, options), error);\n }\n}\n", "import { ProviderError } from \"./ProviderError\";\nexport class CredentialsProviderError extends ProviderError {\n name = \"CredentialsProviderError\";\n constructor(message, options = true) {\n super(message, options);\n Object.setPrototypeOf(this, CredentialsProviderError.prototype);\n }\n}\n", "import { ProviderError } from \"./ProviderError\";\nexport class TokenProviderError extends ProviderError {\n name = \"TokenProviderError\";\n constructor(message, options = true) {\n super(message, options);\n Object.setPrototypeOf(this, TokenProviderError.prototype);\n }\n}\n", "import { ProviderError } from \"./ProviderError\";\nexport const chain = (...providers) => async () => {\n if (providers.length === 0) {\n throw new ProviderError(\"No providers in chain\");\n }\n let lastProviderError;\n for (const provider of providers) {\n try {\n const credentials = await provider();\n return credentials;\n }\n catch (err) {\n lastProviderError = err;\n if (err?.tryNextLink) {\n continue;\n }\n throw err;\n }\n }\n throw lastProviderError;\n};\n", "export const fromValue = (staticValue) => () => Promise.resolve(staticValue);\n", "export const memoize = (provider, isExpired, requiresRefresh) => {\n let resolved;\n let pending;\n let hasResult;\n let isConstant = false;\n const coalesceProvider = async () => {\n if (!pending) {\n pending = provider();\n }\n try {\n resolved = await pending;\n hasResult = true;\n isConstant = false;\n }\n finally {\n pending = undefined;\n }\n return resolved;\n };\n if (isExpired === undefined) {\n return async (options) => {\n if (!hasResult || options?.forceRefresh) {\n resolved = await coalesceProvider();\n }\n return resolved;\n };\n }\n return async (options) => {\n if (!hasResult || options?.forceRefresh) {\n resolved = await coalesceProvider();\n }\n if (isConstant) {\n return resolved;\n }\n if (requiresRefresh && !requiresRefresh(resolved)) {\n isConstant = true;\n return resolved;\n }\n if (isExpired(resolved)) {\n await coalesceProvider();\n return resolved;\n }\n return resolved;\n };\n};\n", "export const booleanSelector = (obj, key, type) => {\n if (!(key in obj))\n return undefined;\n if (obj[key] === \"true\")\n return true;\n if (obj[key] === \"false\")\n return false;\n throw new Error(`Cannot load ${type} \"${key}\". Expected \"true\" or \"false\", got ${obj[key]}.`);\n};\n", "export var SelectorType;\n(function (SelectorType) {\n SelectorType[\"ENV\"] = \"env\";\n SelectorType[\"CONFIG\"] = \"shared config entry\";\n})(SelectorType || (SelectorType = {}));\n", "import { homedir } from \"node:os\";\nimport { sep } from \"node:path\";\nconst homeDirCache = {};\nconst getHomeDirCacheKey = () => {\n if (process && process.geteuid) {\n return `${process.geteuid()}`;\n }\n return \"DEFAULT\";\n};\nexport const getHomeDir = () => {\n const { HOME, USERPROFILE, HOMEPATH, HOMEDRIVE = `C:${sep}` } = process.env;\n if (HOME)\n return HOME;\n if (USERPROFILE)\n return USERPROFILE;\n if (HOMEPATH)\n return `${HOMEDRIVE}${HOMEPATH}`;\n const homeDirCacheKey = getHomeDirCacheKey();\n if (!homeDirCache[homeDirCacheKey])\n homeDirCache[homeDirCacheKey] = homedir();\n return homeDirCache[homeDirCacheKey];\n};\n", "export const ENV_PROFILE = \"AWS_PROFILE\";\nexport const DEFAULT_PROFILE = \"default\";\nexport const getProfileName = (init) => init.profile || process.env[ENV_PROFILE] || DEFAULT_PROFILE;\n", "import { createHash } from \"node:crypto\";\nimport { join } from \"node:path\";\nimport { getHomeDir } from \"./getHomeDir\";\nexport const getSSOTokenFilepath = (id) => {\n const hasher = createHash(\"sha1\");\n const cacheName = hasher.update(id).digest(\"hex\");\n return join(getHomeDir(), \".aws\", \"sso\", \"cache\", `${cacheName}.json`);\n};\n", "import { readFile } from \"node:fs/promises\";\nimport { getSSOTokenFilepath } from \"./getSSOTokenFilepath\";\nexport const tokenIntercept = {};\nexport const getSSOTokenFromFile = async (id) => {\n if (tokenIntercept[id]) {\n return tokenIntercept[id];\n }\n const ssoTokenFilepath = getSSOTokenFilepath(id);\n const ssoTokenText = await readFile(ssoTokenFilepath, \"utf8\");\n return JSON.parse(ssoTokenText);\n};\n", "import { join } from \"node:path\";\nimport { getConfigData } from \"./getConfigData\";\nimport { getConfigFilepath } from \"./getConfigFilepath\";\nimport { getCredentialsFilepath } from \"./getCredentialsFilepath\";\nimport { getHomeDir } from \"./getHomeDir\";\nimport { parseIni } from \"./parseIni\";\nimport { readFile } from \"./readFile\";\nconst swallowError = () => ({});\nexport { CONFIG_PREFIX_SEPARATOR } from \"./constants\";\nexport const loadSharedConfigFiles = async (init = {}) => {\n const { filepath = getCredentialsFilepath(), configFilepath = getConfigFilepath() } = init;\n const homeDir = getHomeDir();\n const relativeHomeDirPrefix = \"~/\";\n let resolvedFilepath = filepath;\n if (filepath.startsWith(relativeHomeDirPrefix)) {\n resolvedFilepath = join(homeDir, filepath.slice(2));\n }\n let resolvedConfigFilepath = configFilepath;\n if (configFilepath.startsWith(relativeHomeDirPrefix)) {\n resolvedConfigFilepath = join(homeDir, configFilepath.slice(2));\n }\n const parsedFiles = await Promise.all([\n readFile(resolvedConfigFilepath, {\n ignoreCache: init.ignoreCache,\n })\n .then(parseIni)\n .then(getConfigData)\n .catch(swallowError),\n readFile(resolvedFilepath, {\n ignoreCache: init.ignoreCache,\n })\n .then(parseIni)\n .catch(swallowError),\n ]);\n return {\n configFile: parsedFiles[0],\n credentialsFile: parsedFiles[1],\n };\n};\n", "import { IniSectionType } from \"@smithy/types\";\nimport { CONFIG_PREFIX_SEPARATOR } from \"./constants\";\nexport const getConfigData = (data) => Object.entries(data)\n .filter(([key]) => {\n const indexOfSeparator = key.indexOf(CONFIG_PREFIX_SEPARATOR);\n if (indexOfSeparator === -1) {\n return false;\n }\n return Object.values(IniSectionType).includes(key.substring(0, indexOfSeparator));\n})\n .reduce((acc, [key, value]) => {\n const indexOfSeparator = key.indexOf(CONFIG_PREFIX_SEPARATOR);\n const updatedKey = key.substring(0, indexOfSeparator) === IniSectionType.PROFILE ? key.substring(indexOfSeparator + 1) : key;\n acc[updatedKey] = value;\n return acc;\n}, {\n ...(data.default && { default: data.default }),\n});\n", "import { join } from \"node:path\";\nimport { getHomeDir } from \"./getHomeDir\";\nexport const ENV_CONFIG_PATH = \"AWS_CONFIG_FILE\";\nexport const getConfigFilepath = () => process.env[ENV_CONFIG_PATH] || join(getHomeDir(), \".aws\", \"config\");\n", "import { join } from \"node:path\";\nimport { getHomeDir } from \"./getHomeDir\";\nexport const ENV_CREDENTIALS_PATH = \"AWS_SHARED_CREDENTIALS_FILE\";\nexport const getCredentialsFilepath = () => process.env[ENV_CREDENTIALS_PATH] || join(getHomeDir(), \".aws\", \"credentials\");\n", "import { IniSectionType } from \"@smithy/types\";\nimport { CONFIG_PREFIX_SEPARATOR } from \"./constants\";\nconst prefixKeyRegex = /^([\\w-]+)\\s([\"'])?([\\w-@+.%:/]+)\\2$/;\nconst profileNameBlockList = [\"__proto__\", \"profile __proto__\"];\nexport const parseIni = (iniData) => {\n const map = {};\n let currentSection;\n let currentSubSection;\n for (const iniLine of iniData.split(/\\r?\\n/)) {\n const trimmedLine = iniLine.split(/(^|\\s)[;#]/)[0].trim();\n const isSection = trimmedLine[0] === \"[\" && trimmedLine[trimmedLine.length - 1] === \"]\";\n if (isSection) {\n currentSection = undefined;\n currentSubSection = undefined;\n const sectionName = trimmedLine.substring(1, trimmedLine.length - 1);\n const matches = prefixKeyRegex.exec(sectionName);\n if (matches) {\n const [, prefix, , name] = matches;\n if (Object.values(IniSectionType).includes(prefix)) {\n currentSection = [prefix, name].join(CONFIG_PREFIX_SEPARATOR);\n }\n }\n else {\n currentSection = sectionName;\n }\n if (profileNameBlockList.includes(sectionName)) {\n throw new Error(`Found invalid profile name \"${sectionName}\"`);\n }\n }\n else if (currentSection) {\n const indexOfEqualsSign = trimmedLine.indexOf(\"=\");\n if (![0, -1].includes(indexOfEqualsSign)) {\n const [name, value] = [\n trimmedLine.substring(0, indexOfEqualsSign).trim(),\n trimmedLine.substring(indexOfEqualsSign + 1).trim(),\n ];\n if (value === \"\") {\n currentSubSection = name;\n }\n else {\n if (currentSubSection && iniLine.trimStart() === iniLine) {\n currentSubSection = undefined;\n }\n map[currentSection] = map[currentSection] || {};\n const key = currentSubSection ? [currentSubSection, name].join(CONFIG_PREFIX_SEPARATOR) : name;\n map[currentSection][key] = value;\n }\n }\n }\n }\n return map;\n};\n", "import { readFile as fsReadFile } from \"node:fs/promises\";\nexport const filePromises = {};\nexport const fileIntercept = {};\nexport const readFile = (path, options) => {\n if (fileIntercept[path] !== undefined) {\n return fileIntercept[path];\n }\n if (!filePromises[path] || options?.ignoreCache) {\n filePromises[path] = fsReadFile(path, \"utf8\");\n }\n return filePromises[path];\n};\n", "import { IniSectionType } from \"@smithy/types\";\nimport { CONFIG_PREFIX_SEPARATOR } from \"./loadSharedConfigFiles\";\nexport const getSsoSessionData = (data) => Object.entries(data)\n .filter(([key]) => key.startsWith(IniSectionType.SSO_SESSION + CONFIG_PREFIX_SEPARATOR))\n .reduce((acc, [key, value]) => ({ ...acc, [key.substring(key.indexOf(CONFIG_PREFIX_SEPARATOR) + 1)]: value }), {});\n", "import { getConfigFilepath } from \"./getConfigFilepath\";\nimport { getSsoSessionData } from \"./getSsoSessionData\";\nimport { parseIni } from \"./parseIni\";\nimport { readFile } from \"./readFile\";\nconst swallowError = () => ({});\nexport const loadSsoSessionData = async (init = {}) => readFile(init.configFilepath ?? getConfigFilepath())\n .then(parseIni)\n .then(getSsoSessionData)\n .catch(swallowError);\n", "export const mergeConfigFiles = (...files) => {\n const merged = {};\n for (const file of files) {\n for (const [key, values] of Object.entries(file)) {\n if (merged[key] !== undefined) {\n Object.assign(merged[key], values);\n }\n else {\n merged[key] = values;\n }\n }\n }\n return merged;\n};\n", "import { loadSharedConfigFiles } from \"./loadSharedConfigFiles\";\nimport { mergeConfigFiles } from \"./mergeConfigFiles\";\nexport const parseKnownFiles = async (init) => {\n const parsedFiles = await loadSharedConfigFiles(init);\n return mergeConfigFiles(parsedFiles.configFile, parsedFiles.credentialsFile);\n};\n", "import { tokenIntercept } from \"./getSSOTokenFromFile\";\nimport { fileIntercept } from \"./readFile\";\nexport const externalDataInterceptor = {\n getFileRecord() {\n return fileIntercept;\n },\n interceptFile(path, contents) {\n fileIntercept[path] = Promise.resolve(contents);\n },\n getTokenRecord() {\n return tokenIntercept;\n },\n interceptToken(id, contents) {\n tokenIntercept[id] = contents;\n },\n};\n", "export function getSelectorName(functionString) {\n try {\n const constants = new Set(Array.from(functionString.match(/([A-Z_]){3,}/g) ?? []));\n constants.delete(\"CONFIG\");\n constants.delete(\"CONFIG_PREFIX_SEPARATOR\");\n constants.delete(\"ENV\");\n return [...constants].join(\", \");\n }\n catch (ignored) {\n return functionString;\n }\n}\n", "import { CredentialsProviderError } from \"../property-provider/CredentialsProviderError\";\nimport { getSelectorName } from \"./getSelectorName\";\nexport const fromEnv = (envVarSelector, options) => async () => {\n try {\n const config = envVarSelector(process.env, options);\n if (config === undefined) {\n throw new Error();\n }\n return config;\n }\n catch (e) {\n throw new CredentialsProviderError(e.message || `Not found in ENV: ${getSelectorName(envVarSelector.toString())}`, { logger: options?.logger });\n }\n};\n", "import { CredentialsProviderError } from \"../property-provider/CredentialsProviderError\";\nimport { getProfileName } from \"../shared-ini-file-loader/getProfileName\";\nimport { loadSharedConfigFiles } from \"../shared-ini-file-loader/loadSharedConfigFiles\";\nimport { getSelectorName } from \"./getSelectorName\";\nexport const fromSharedConfigFiles = (configSelector, { preferredFile = \"config\", ...init } = {}) => async () => {\n const profile = getProfileName(init);\n const { configFile, credentialsFile } = await loadSharedConfigFiles(init);\n const profileFromCredentials = credentialsFile[profile] || {};\n const profileFromConfig = configFile[profile] || {};\n const mergedProfile = preferredFile === \"config\"\n ? { ...profileFromCredentials, ...profileFromConfig }\n : { ...profileFromConfig, ...profileFromCredentials };\n try {\n const cfgFile = preferredFile === \"config\" ? configFile : credentialsFile;\n const configValue = configSelector(mergedProfile, cfgFile);\n if (configValue === undefined) {\n throw new Error();\n }\n return configValue;\n }\n catch (e) {\n throw new CredentialsProviderError(e.message || `Not found in config files w/ profile [${profile}]: ${getSelectorName(configSelector.toString())}`, { logger: init.logger });\n }\n};\n", "import { fromValue } from \"../property-provider/fromValue\";\nconst isFunction = (func) => typeof func === \"function\";\nexport const fromStatic = (defaultValue) => isFunction(defaultValue) ? async () => await defaultValue() : fromValue(defaultValue);\n", "import { chain } from \"../property-provider/chain\";\nimport { memoize } from \"../property-provider/memoize\";\nimport { fromEnv } from \"./fromEnv\";\nimport { fromSharedConfigFiles } from \"./fromSharedConfigFiles\";\nimport { fromStatic } from \"./fromStatic\";\nexport const loadConfig = ({ environmentVariableSelector, configFileSelector, default: defaultValue }, configuration = {}) => {\n const { signingName, logger } = configuration;\n const envOptions = { signingName, logger };\n return memoize(chain(fromEnv(environmentVariableSelector, envOptions), fromSharedConfigFiles(configFileSelector, configuration), fromStatic(defaultValue)));\n};\n", "import { booleanSelector } from \"../../util-config-provider/booleanSelector\";\nimport { SelectorType } from \"../../util-config-provider/types\";\nexport const ENV_USE_DUALSTACK_ENDPOINT = \"AWS_USE_DUALSTACK_ENDPOINT\";\nexport const CONFIG_USE_DUALSTACK_ENDPOINT = \"use_dualstack_endpoint\";\nexport const DEFAULT_USE_DUALSTACK_ENDPOINT = false;\nexport const NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS = {\n environmentVariableSelector: (env) => booleanSelector(env, ENV_USE_DUALSTACK_ENDPOINT, SelectorType.ENV),\n configFileSelector: (profile) => booleanSelector(profile, CONFIG_USE_DUALSTACK_ENDPOINT, SelectorType.CONFIG),\n default: false,\n};\nexport const nodeDualstackConfigSelectors = {\n environmentVariableSelector: (env) => booleanSelector(env, ENV_USE_DUALSTACK_ENDPOINT, SelectorType.ENV),\n configFileSelector: (profile) => booleanSelector(profile, CONFIG_USE_DUALSTACK_ENDPOINT, SelectorType.CONFIG),\n default: undefined,\n};\n", "import { booleanSelector } from \"../../util-config-provider/booleanSelector\";\nimport { SelectorType } from \"../../util-config-provider/types\";\nexport const ENV_USE_FIPS_ENDPOINT = \"AWS_USE_FIPS_ENDPOINT\";\nexport const CONFIG_USE_FIPS_ENDPOINT = \"use_fips_endpoint\";\nexport const DEFAULT_USE_FIPS_ENDPOINT = false;\nexport const NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS = {\n environmentVariableSelector: (env) => booleanSelector(env, ENV_USE_FIPS_ENDPOINT, SelectorType.ENV),\n configFileSelector: (profile) => booleanSelector(profile, CONFIG_USE_FIPS_ENDPOINT, SelectorType.CONFIG),\n default: false,\n};\nexport const nodeFipsConfigSelectors = {\n environmentVariableSelector: (env) => booleanSelector(env, ENV_USE_FIPS_ENDPOINT, SelectorType.ENV),\n configFileSelector: (profile) => booleanSelector(profile, CONFIG_USE_FIPS_ENDPOINT, SelectorType.CONFIG),\n default: undefined,\n};\n", "const AWS_DEFAULTS_MODE_ENV = \"AWS_DEFAULTS_MODE\";\nconst AWS_DEFAULTS_MODE_CONFIG = \"defaults_mode\";\nexport const NODE_DEFAULTS_MODE_CONFIG_OPTIONS = {\n environmentVariableSelector: (env) => {\n return env[AWS_DEFAULTS_MODE_ENV];\n },\n configFileSelector: (profile) => {\n return profile[AWS_DEFAULTS_MODE_CONFIG];\n },\n default: \"legacy\",\n};\n", "import { NODE_REGION_CONFIG_OPTIONS } from \"../config-resolver/regionConfig/config\";\nimport { getInstanceMetadataRegion } from \"../config-resolver/regionConfig/getInstanceMetadataRegion\";\nimport { loadConfig } from \"../node-config-provider/configLoader\";\nimport { memoize } from \"../property-provider/memoize\";\nimport { AWS_DEFAULT_REGION_ENV, AWS_EXECUTION_ENV, AWS_REGION_ENV, DEFAULTS_MODE_OPTIONS } from \"./constants\";\nimport { NODE_DEFAULTS_MODE_CONFIG_OPTIONS } from \"./defaultsModeConfig\";\nexport const resolveDefaultsModeConfig = ({ region = loadConfig(NODE_REGION_CONFIG_OPTIONS), defaultsMode = loadConfig(NODE_DEFAULTS_MODE_CONFIG_OPTIONS), } = {}) => memoize(async () => {\n const mode = typeof defaultsMode === \"function\" ? await defaultsMode() : defaultsMode;\n switch (mode?.toLowerCase()) {\n case \"auto\":\n return resolveNodeDefaultsModeAuto(region);\n case \"in-region\":\n case \"cross-region\":\n case \"mobile\":\n case \"standard\":\n case \"legacy\":\n return Promise.resolve(mode?.toLocaleLowerCase());\n case undefined:\n return Promise.resolve(\"legacy\");\n default:\n throw new Error(`Invalid parameter for \"defaultsMode\", expect ${DEFAULTS_MODE_OPTIONS.join(\", \")}, got ${mode}`);\n }\n});\nconst resolveNodeDefaultsModeAuto = async (clientRegion) => {\n if (clientRegion) {\n const resolvedRegion = typeof clientRegion === \"function\" ? await clientRegion() : clientRegion;\n const inferredRegion = await inferPhysicalRegion();\n if (!inferredRegion) {\n return \"standard\";\n }\n if (resolvedRegion === inferredRegion) {\n return \"in-region\";\n }\n else {\n return \"cross-region\";\n }\n }\n return \"standard\";\n};\nconst inferPhysicalRegion = async () => {\n if (process.env[AWS_EXECUTION_ENV] && (process.env[AWS_REGION_ENV] || process.env[AWS_DEFAULT_REGION_ENV])) {\n return process.env[AWS_REGION_ENV] ?? process.env[AWS_DEFAULT_REGION_ENV];\n }\n return getInstanceMetadataRegion();\n};\n"],
5
+ "mappings": ";sHAAO,IAAMA,EAAoB,oBACpBC,EAAiB,aACjBC,EAAyB,qBACzBC,EAAoB,4BACpBC,EAAwB,CAAC,YAAa,eAAgB,SAAU,WAAY,QAAQ,EACpFC,EAAmB,qCACnBC,EAAkB,oBAClBC,EAA2B,2BAC3BC,EAA+B,uCCP5C,IAAMC,EAAa,IACbC,GAAmB,IACrBC,EAAqB,EACZC,EAA4BC,EAAA,SAAY,CACjD,GAAI,SAAQ,IAAIC,CAAiB,GAG7B,OAAK,IAAI,EAAIH,GAGjB,GAAI,CACA,IAAMI,EAAWC,GAAoB,EAC/BC,GAAS,MAAMC,EAAY,CAC7B,GAAGH,EACH,KAAMI,EACN,OAAQ,MACR,QAAS,CACL,CAACC,CAA4B,EAAG,OACpC,CACJ,CAAC,GAAG,SAAS,EAWb,OAVgB,MAAMF,EAAY,CAC9B,GAAGH,EACH,KAAMM,EACN,OAAQ,MACR,QAAS,CACL,CAACC,CAAwB,EAAGL,CAChC,CACJ,CAAC,GACI,SAAS,EACT,KAAK,GACOM,EAAgC,CACrD,MACM,CACF,OAAOA,EAAgC,CAC3C,CACJ,EAhCyC,6BAiCnCA,EAAkCV,EAAA,IAAM,CAC1CF,EAAqB,KAAK,IAAI,EAAID,EAEtC,EAHwC,mCAIlCM,GAAsBH,EAAA,IAAM,CAC9B,IAAMW,EAAc,QAAQ,IAAI,kCAChC,GAAIA,EAAa,CACb,IAAMC,EAAM,IAAI,IAAID,CAAW,EAC/B,MAAO,CACH,SAAUC,EAAI,SAAS,QAAQ,YAAa,IAAI,EAChD,KAAMA,EAAI,KAAO,OAAOA,EAAI,IAAI,EAAI,MACxC,CACJ,CACA,OAAI,QAAQ,IAAI,yCAA2C,OAChD,CAAE,SAAU,eAAgB,EAEhC,CAAE,SAAU,iBAAkB,CACzC,EAb4B,uBActBP,EAAcL,EAAA,MAAOa,GAAY,CACnC,GAAM,CAAE,QAAAC,CAAQ,EAAI,KAAM,QAAO,WAAW,EAC5C,OAAO,IAAI,QAAQ,CAACC,EAASC,IAAW,CACpC,IAAMC,EAAMH,EAAQ,CAChB,SAAUD,EAAQ,SAClB,KAAMA,EAAQ,KACd,KAAMA,EAAQ,KACd,OAAQA,EAAQ,OAChB,QAASA,EAAQ,QACjB,QAASjB,EACT,OAAQ,YAAY,QAAQA,CAAU,CAC1C,CAAC,EACDqB,EAAI,GAAG,QAAUC,GAAQ,CACrBF,EAAOE,CAAG,EACVD,EAAI,QAAQ,CAChB,CAAC,EACDA,EAAI,GAAG,UAAW,IAAM,CACpBD,EAAO,IAAI,MAAM,6CAA6C,CAAC,EAC/DC,EAAI,QAAQ,CAChB,CAAC,EACDA,EAAI,GAAG,WAAaE,GAAQ,CACxB,GAAM,CAAE,WAAAC,EAAa,GAAI,EAAID,EAC7B,GAAIC,EAAa,KAAOA,GAAc,IAAK,CACvCJ,EAAO,OAAO,OAAO,IAAI,MAAM,wDAAwD,EAAG,CAAE,WAAAI,CAAW,CAAC,CAAC,EACzGH,EAAI,QAAQ,EACZ,MACJ,CACA,IAAMI,EAAS,CAAC,EAChBF,EAAI,GAAG,OAASG,GAAUD,EAAO,KAAKC,CAAK,CAAC,EAC5CH,EAAI,GAAG,MAAO,IAAM,CAChBJ,EAAQ,OAAO,OAAOM,CAAM,CAAC,EAC7BJ,EAAI,QAAQ,CAChB,CAAC,CACL,CAAC,EACDA,EAAI,IAAI,CACZ,CAAC,CACL,EApCoB,eCtDb,IAAMM,EAAkB,aAClBC,EAAkB,SAClBC,EAA6B,CACtC,4BAA6BC,EAACC,GAAQA,EAAIJ,CAAe,EAA5B,+BAC7B,mBAAoBG,EAACE,GAAYA,EAAQJ,CAAe,EAApC,sBACpB,QAASE,EAAA,SAAY,CACjB,IAAMG,EAAS,MAAMC,EAA0B,EAC/C,GAAID,EACA,OAAOA,EAEX,MAAM,IAAI,MAAM,mBAAmB,CACvC,EANS,UAOb,EACaE,GAAkC,CAC3C,cAAe,aACnB,ECfA,IAAMC,EAAe,IAAI,IACZC,GAAcC,EAAA,CAACC,EAAQC,EAAQC,IAAqB,CAC7D,GAAI,CAACL,EAAa,IAAIG,CAAM,GAAK,CAACC,EAAMD,CAAM,EAC1C,GAAIA,IAAW,IACX,QAAQ,KAAK,0KAA0K,MAGvL,OAAM,IAAI,MAAM,gCAAgCA,CAAM,sCAAsC,OAIhGH,EAAa,IAAIG,CAAM,CAE/B,EAZ2B,eCFpB,IAAMG,EAAeC,EAACC,GAAW,OAAOA,GAAW,WAAaA,EAAO,WAAW,OAAO,GAAKA,EAAO,SAAS,OAAO,GAAhG,gBCCrB,IAAMC,GAAgBC,EAACC,GAAWC,EAAaD,CAAM,EACtD,CAAC,kBAAmB,UAAU,EAAE,SAASA,CAAM,EAC3C,YACAA,EAAO,QAAQ,2BAA4B,EAAE,EACjDA,EAJuB,iBCEtB,IAAME,GAAsBC,EAACC,GAAU,CAC1C,GAAM,CAAE,OAAAC,EAAQ,gBAAAC,CAAgB,EAAIF,EACpC,GAAI,CAACC,EACD,MAAM,IAAI,MAAM,mBAAmB,EAEvC,OAAO,OAAO,OAAOD,EAAO,CACxB,OAAQD,EAAA,SAAY,CAChB,IAAMI,EAAiB,OAAOF,GAAW,WAAa,MAAMA,EAAO,EAAIA,EACjEG,EAAaC,GAAcF,CAAc,EAC/C,OAAAG,GAAYF,CAAU,EACfA,CACX,EALQ,UAMR,gBAAiBL,EAAA,SAAY,CACzB,IAAMI,EAAiB,OAAOF,GAAW,SAAWA,EAAS,MAAMA,EAAO,EAC1E,OAAIM,EAAaJ,CAAc,EACpB,GAEJ,OAAOD,GAAoB,WAAa,QAAQ,QAAQ,CAAC,CAACA,CAAe,EAAIA,EAAgB,CACxG,EANiB,kBAOrB,CAAC,CACL,EApBmC,uBCH5B,IAAMM,EAAN,MAAMC,UAAsB,KAAM,CAAzC,MAAyC,CAAAC,EAAA,sBACrC,KAAO,gBACP,YACA,YAAYC,EAASC,EAAU,GAAM,CACjC,IAAIC,EACAC,EAAc,GACd,OAAOF,GAAY,WACnBC,EAAS,OACTC,EAAcF,GAETA,GAAW,MAAQ,OAAOA,GAAY,WAC3CC,EAASD,EAAQ,OACjBE,EAAcF,EAAQ,aAAe,IAEzC,MAAMD,CAAO,EACb,KAAK,YAAcG,EACnB,OAAO,eAAe,KAAML,EAAc,SAAS,EACnDI,GAAQ,QAAQ,6BAA6BC,EAAc,KAAO,KAAK,IAAIH,CAAO,EAAE,CACxF,CACA,OAAO,KAAKI,EAAOH,EAAU,GAAM,CAC/B,OAAO,OAAO,OAAO,IAAI,KAAKG,EAAM,QAASH,CAAO,EAAGG,CAAK,CAChE,CACJ,ECrBO,IAAMC,EAAN,MAAMC,UAAiCC,CAAc,CAD5D,MAC4D,CAAAC,EAAA,iCACxD,KAAO,2BACP,YAAYC,EAASC,EAAU,GAAM,CACjC,MAAMD,EAASC,CAAO,EACtB,OAAO,eAAe,KAAMJ,EAAyB,SAAS,CAClE,CACJ,ECNO,IAAMK,EAAN,MAAMC,UAA2BC,CAAc,CADtD,MACsD,CAAAC,EAAA,2BAClD,KAAO,qBACP,YAAYC,EAASC,EAAU,GAAM,CACjC,MAAMD,EAASC,CAAO,EACtB,OAAO,eAAe,KAAMJ,EAAmB,SAAS,CAC5D,CACJ,ECNO,IAAMK,EAAQC,EAAA,IAAIC,IAAc,SAAY,CAC/C,GAAIA,EAAU,SAAW,EACrB,MAAM,IAAIC,EAAc,uBAAuB,EAEnD,IAAIC,EACJ,QAAWC,KAAYH,EACnB,GAAI,CAEA,OADoB,MAAMG,EAAS,CAEvC,OACOC,EAAK,CAER,GADAF,EAAoBE,EAChBA,GAAK,YACL,SAEJ,MAAMA,CACV,CAEJ,MAAMF,CACV,EAnBqB,SCDd,IAAMG,GAAYC,EAACC,GAAgB,IAAM,QAAQ,QAAQA,CAAW,EAAlD,aCAlB,IAAMC,EAAUC,EAAA,CAACC,EAAUC,EAAWC,IAAoB,CAC7D,IAAIC,EACAC,EACAC,EACAC,EAAa,GACXC,EAAmBR,EAAA,SAAY,CAC5BK,IACDA,EAAUJ,EAAS,GAEvB,GAAI,CACAG,EAAW,MAAMC,EACjBC,EAAY,GACZC,EAAa,EACjB,QACA,CACIF,EAAU,MACd,CACA,OAAOD,CACX,EAbyB,oBAczB,OAAIF,IAAc,OACP,MAAOO,KACN,CAACH,GAAaG,GAAS,gBACvBL,EAAW,MAAMI,EAAiB,GAE/BJ,GAGR,MAAOK,KACN,CAACH,GAAaG,GAAS,gBACvBL,EAAW,MAAMI,EAAiB,GAElCD,EACOH,EAEPD,GAAmB,CAACA,EAAgBC,CAAQ,GAC5CG,EAAa,GACNH,IAEPF,EAAUE,CAAQ,GAClB,MAAMI,EAAiB,EAChBJ,GAInB,EA5CuB,WCAhB,IAAMM,EAAkBC,EAAA,CAACC,EAAKC,EAAKC,IAAS,CAC/C,GAAMD,KAAOD,EAEb,IAAIA,EAAIC,CAAG,IAAM,OACb,MAAO,GACX,GAAID,EAAIC,CAAG,IAAM,QACb,MAAO,GACX,MAAM,IAAI,MAAM,eAAeC,CAAI,KAAKD,CAAG,sCAAsCD,EAAIC,CAAG,CAAC,GAAG,EAChG,EAR+B,mBCAxB,IAAIE,GACV,SAAUA,EAAc,CACrBA,EAAa,IAAS,MACtBA,EAAa,OAAY,qBAC7B,GAAGA,IAAiBA,EAAe,CAAC,EAAE,ECJtC,OAAS,WAAAC,OAAe,UACxB,OAAS,OAAAC,OAAW,YACpB,IAAMC,EAAe,CAAC,EAChBC,GAAqBC,EAAA,IACnB,SAAW,QAAQ,QACZ,GAAG,QAAQ,QAAQ,CAAC,GAExB,UAJgB,sBAMdC,EAAaD,EAAA,IAAM,CAC5B,GAAM,CAAE,KAAAE,EAAM,YAAAC,EAAa,SAAAC,EAAU,UAAAC,EAAY,KAAKC,EAAG,EAAG,EAAI,QAAQ,IACxE,GAAIJ,EACA,OAAOA,EACX,GAAIC,EACA,OAAOA,EACX,GAAIC,EACA,MAAO,GAAGC,CAAS,GAAGD,CAAQ,GAClC,IAAMG,EAAkBR,GAAmB,EAC3C,OAAKD,EAAaS,CAAe,IAC7BT,EAAaS,CAAe,EAAIC,GAAQ,GACrCV,EAAaS,CAAe,CACvC,EAZ0B,cCTnB,IAAME,GAAc,cACdC,GAAkB,UAClBC,EAAiBC,EAACC,GAASA,EAAK,SAAW,QAAQ,IAAIJ,EAAW,GAAKC,GAAtD,kBCF9B,OAAS,cAAAI,OAAkB,cAC3B,OAAS,QAAAC,OAAY,YAEd,IAAMC,EAAsBC,EAACC,GAAO,CAEvC,IAAMC,EADSC,GAAW,MAAM,EACP,OAAOF,CAAE,EAAE,OAAO,KAAK,EAChD,OAAOG,GAAKC,EAAW,EAAG,OAAQ,MAAO,QAAS,GAAGH,CAAS,OAAO,CACzE,EAJmC,uBCHnC,OAAS,YAAAI,OAAgB,mBAElB,IAAMC,EAAiB,CAAC,EAClBC,GAAsBC,EAAA,MAAOC,GAAO,CAC7C,GAAIH,EAAeG,CAAE,EACjB,OAAOH,EAAeG,CAAE,EAE5B,IAAMC,EAAmBC,EAAoBF,CAAE,EACzCG,EAAe,MAAMC,GAASH,EAAkB,MAAM,EAC5D,OAAO,KAAK,MAAME,CAAY,CAClC,EAPmC,uBCHnC,OAAS,QAAAE,OAAY,YCEd,IAAMC,GAAgBC,EAACC,GAAS,OAAO,QAAQA,CAAI,EACrD,OAAO,CAAC,CAACC,CAAG,IAAM,CACnB,IAAMC,EAAmBD,EAAI,QAAQ,GAAuB,EAC5D,OAAIC,IAAqB,GACd,GAEJ,OAAO,OAAOC,CAAc,EAAE,SAASF,EAAI,UAAU,EAAGC,CAAgB,CAAC,CACpF,CAAC,EACI,OAAO,CAACE,EAAK,CAACH,EAAKI,CAAK,IAAM,CAC/B,IAAMH,EAAmBD,EAAI,QAAQ,GAAuB,EACtDK,EAAaL,EAAI,UAAU,EAAGC,CAAgB,IAAMC,EAAe,QAAUF,EAAI,UAAUC,EAAmB,CAAC,EAAID,EACzH,OAAAG,EAAIE,CAAU,EAAID,EACXD,CACX,EAAG,CACC,GAAIJ,EAAK,SAAW,CAAE,QAASA,EAAK,OAAQ,CAChD,CAAC,EAf4B,iBCF7B,OAAS,QAAAO,OAAY,YAEd,IAAMC,GAAkB,kBAClBC,EAAoBC,EAAA,IAAM,QAAQ,IAAIF,EAAe,GAAKG,GAAKC,EAAW,EAAG,OAAQ,QAAQ,EAAzE,qBCHjC,OAAS,QAAAC,OAAY,YAEd,IAAMC,GAAuB,8BACvBC,GAAyBC,EAAA,IAAM,QAAQ,IAAIF,EAAoB,GAAKG,GAAKC,EAAW,EAAG,OAAQ,aAAa,EAAnF,0BCDtC,IAAMC,GAAiB,sCACjBC,GAAuB,CAAC,YAAa,mBAAmB,EACjDC,EAAWC,EAACC,GAAY,CACjC,IAAMC,EAAM,CAAC,EACTC,EACAC,EACJ,QAAWC,KAAWJ,EAAQ,MAAM,OAAO,EAAG,CAC1C,IAAMK,EAAcD,EAAQ,MAAM,YAAY,EAAE,CAAC,EAAE,KAAK,EAExD,GADkBC,EAAY,CAAC,IAAM,KAAOA,EAAYA,EAAY,OAAS,CAAC,IAAM,IACrE,CACXH,EAAiB,OACjBC,EAAoB,OACpB,IAAMG,EAAcD,EAAY,UAAU,EAAGA,EAAY,OAAS,CAAC,EAC7DE,EAAUX,GAAe,KAAKU,CAAW,EAC/C,GAAIC,EAAS,CACT,GAAM,CAAC,CAAEC,EAAQ,CAAEC,CAAI,EAAIF,EACvB,OAAO,OAAOG,CAAc,EAAE,SAASF,CAAM,IAC7CN,EAAiB,CAACM,EAAQC,CAAI,EAAE,KAAK,GAAuB,EAEpE,MAEIP,EAAiBI,EAErB,GAAIT,GAAqB,SAASS,CAAW,EACzC,MAAM,IAAI,MAAM,+BAA+BA,CAAW,GAAG,CAErE,SACSJ,EAAgB,CACrB,IAAMS,EAAoBN,EAAY,QAAQ,GAAG,EACjD,GAAI,CAAC,CAAC,EAAG,EAAE,EAAE,SAASM,CAAiB,EAAG,CACtC,GAAM,CAACF,EAAMG,CAAK,EAAI,CAClBP,EAAY,UAAU,EAAGM,CAAiB,EAAE,KAAK,EACjDN,EAAY,UAAUM,EAAoB,CAAC,EAAE,KAAK,CACtD,EACA,GAAIC,IAAU,GACVT,EAAoBM,MAEnB,CACGN,GAAqBC,EAAQ,UAAU,IAAMA,IAC7CD,EAAoB,QAExBF,EAAIC,CAAc,EAAID,EAAIC,CAAc,GAAK,CAAC,EAC9C,IAAMW,EAAMV,EAAoB,CAACA,EAAmBM,CAAI,EAAE,KAAK,GAAuB,EAAIA,EAC1FR,EAAIC,CAAc,EAAEW,CAAG,EAAID,CAC/B,CACJ,CACJ,CACJ,CACA,OAAOX,CACX,EA/CwB,YCJxB,OAAS,YAAYa,OAAkB,mBAChC,IAAMC,EAAe,CAAC,EAChBC,EAAgB,CAAC,EACjBC,EAAWC,EAAA,CAACC,EAAMC,IACvBJ,EAAcG,CAAI,IAAM,OACjBH,EAAcG,CAAI,IAEzB,CAACJ,EAAaI,CAAI,GAAKC,GAAS,eAChCL,EAAaI,CAAI,EAAIE,GAAWF,EAAM,MAAM,GAEzCJ,EAAaI,CAAI,GAPJ,YLIxB,IAAMG,GAAeC,EAAA,KAAO,CAAC,GAAR,gBAERC,EAAwBD,EAAA,MAAOE,EAAO,CAAC,IAAM,CACtD,GAAM,CAAE,SAAAC,EAAWC,GAAuB,EAAG,eAAAC,EAAiBC,EAAkB,CAAE,EAAIJ,EAChFK,EAAUC,EAAW,EACrBC,EAAwB,KAC1BC,EAAmBP,EACnBA,EAAS,WAAWM,CAAqB,IACzCC,EAAmBC,GAAKJ,EAASJ,EAAS,MAAM,CAAC,CAAC,GAEtD,IAAIS,EAAyBP,EACzBA,EAAe,WAAWI,CAAqB,IAC/CG,EAAyBD,GAAKJ,EAASF,EAAe,MAAM,CAAC,CAAC,GAElE,IAAMQ,EAAc,MAAM,QAAQ,IAAI,CAClCC,EAASF,EAAwB,CAC7B,YAAaV,EAAK,WACtB,CAAC,EACI,KAAKa,CAAQ,EACb,KAAKC,EAAa,EAClB,MAAMjB,EAAY,EACvBe,EAASJ,EAAkB,CACvB,YAAaR,EAAK,WACtB,CAAC,EACI,KAAKa,CAAQ,EACb,MAAMhB,EAAY,CAC3B,CAAC,EACD,MAAO,CACH,WAAYc,EAAY,CAAC,EACzB,gBAAiBA,EAAY,CAAC,CAClC,CACJ,EA7BqC,yBMP9B,IAAMI,GAAoBC,EAACC,GAAS,OAAO,QAAQA,CAAI,EACzD,OAAO,CAAC,CAACC,CAAG,IAAMA,EAAI,WAAWC,EAAe,YAAc,GAAuB,CAAC,EACtF,OAAO,CAACC,EAAK,CAACF,EAAKG,CAAK,KAAO,CAAE,GAAGD,EAAK,CAACF,EAAI,UAAUA,EAAI,QAAQ,GAAuB,EAAI,CAAC,CAAC,EAAGG,CAAM,GAAI,CAAC,CAAC,EAFpF,qBCEjC,IAAMC,GAAeC,EAAA,KAAO,CAAC,GAAR,gBACRC,GAAqBD,EAAA,MAAOE,EAAO,CAAC,IAAMC,EAASD,EAAK,gBAAkBE,EAAkB,CAAC,EACrG,KAAKC,CAAQ,EACb,KAAKC,EAAiB,EACtB,MAAMP,EAAY,EAHW,sBCL3B,IAAMQ,GAAmBC,EAAA,IAAIC,IAAU,CAC1C,IAAMC,EAAS,CAAC,EAChB,QAAWC,KAAQF,EACf,OAAW,CAACG,EAAKC,CAAM,IAAK,OAAO,QAAQF,CAAI,EACvCD,EAAOE,CAAG,IAAM,OAChB,OAAO,OAAOF,EAAOE,CAAG,EAAGC,CAAM,EAGjCH,EAAOE,CAAG,EAAIC,EAI1B,OAAOH,CACX,EAbgC,oBCEzB,IAAMI,GAAkBC,EAAA,MAAOC,GAAS,CAC3C,IAAMC,EAAc,MAAMC,EAAsBF,CAAI,EACpD,OAAOG,GAAiBF,EAAY,WAAYA,EAAY,eAAe,CAC/E,EAH+B,mBCAxB,IAAMG,GAA0B,CACnC,eAAgB,CACZ,OAAOC,CACX,EACA,cAAcC,EAAMC,EAAU,CAC1BF,EAAcC,CAAI,EAAI,QAAQ,QAAQC,CAAQ,CAClD,EACA,gBAAiB,CACb,OAAOC,CACX,EACA,eAAeC,EAAIF,EAAU,CACzBC,EAAeC,CAAE,EAAIF,CACzB,CACJ,ECfO,SAASG,EAAgBC,EAAgB,CAC5C,GAAI,CACA,IAAMC,EAAY,IAAI,IAAI,MAAM,KAAKD,EAAe,MAAM,eAAe,GAAK,CAAC,CAAC,CAAC,EACjF,OAAAC,EAAU,OAAO,QAAQ,EACzBA,EAAU,OAAO,yBAAyB,EAC1CA,EAAU,OAAO,KAAK,EACf,CAAC,GAAGA,CAAS,EAAE,KAAK,IAAI,CACnC,MACgB,CACZ,OAAOD,CACX,CACJ,CAXgBE,EAAAH,EAAA,mBCET,IAAMI,GAAUC,EAAA,CAACC,EAAgBC,IAAY,SAAY,CAC5D,GAAI,CACA,IAAMC,EAASF,EAAe,QAAQ,IAAKC,CAAO,EAClD,GAAIC,IAAW,OACX,MAAM,IAAI,MAEd,OAAOA,CACX,OACOC,EAAG,CACN,MAAM,IAAIC,EAAyBD,EAAE,SAAW,qBAAqBE,EAAgBL,EAAe,SAAS,CAAC,CAAC,GAAI,CAAE,OAAQC,GAAS,MAAO,CAAC,CAClJ,CACJ,EAXuB,WCEhB,IAAMK,GAAwBC,EAAA,CAACC,EAAgB,CAAE,cAAAC,EAAgB,SAAU,GAAGC,CAAK,EAAI,CAAC,IAAM,SAAY,CAC7G,IAAMC,EAAUC,EAAeF,CAAI,EAC7B,CAAE,WAAAG,EAAY,gBAAAC,CAAgB,EAAI,MAAMC,EAAsBL,CAAI,EAClEM,EAAyBF,EAAgBH,CAAO,GAAK,CAAC,EACtDM,EAAoBJ,EAAWF,CAAO,GAAK,CAAC,EAC5CO,EAAgBT,IAAkB,SAClC,CAAE,GAAGO,EAAwB,GAAGC,CAAkB,EAClD,CAAE,GAAGA,EAAmB,GAAGD,CAAuB,EACxD,GAAI,CAEA,IAAMG,EAAcX,EAAeU,EADnBT,IAAkB,SAAWI,EAAaC,CACD,EACzD,GAAIK,IAAgB,OAChB,MAAM,IAAI,MAEd,OAAOA,CACX,OACOC,EAAG,CACN,MAAM,IAAIC,EAAyBD,EAAE,SAAW,yCAAyCT,CAAO,MAAMW,EAAgBd,EAAe,SAAS,CAAC,CAAC,GAAI,CAAE,OAAQE,EAAK,MAAO,CAAC,CAC/K,CACJ,EAnBqC,yBCHrC,IAAMa,GAAaC,EAACC,GAAS,OAAOA,GAAS,WAA1B,cACNC,GAAaF,EAACG,GAAiBJ,GAAWI,CAAY,EAAI,SAAY,MAAMA,EAAa,EAAIC,GAAUD,CAAY,EAAtG,cCGnB,IAAME,EAAaC,EAAA,CAAC,CAAE,4BAAAC,EAA6B,mBAAAC,EAAoB,QAASC,CAAa,EAAGC,EAAgB,CAAC,IAAM,CAC1H,GAAM,CAAE,YAAAC,EAAa,OAAAC,CAAO,EAAIF,EAEhC,OAAOG,EAAQC,EAAMC,GAAQR,EADV,CAAE,YAAAI,EAAa,OAAAC,CAAO,CAC2B,EAAGI,GAAsBR,EAAoBE,CAAa,EAAGO,GAAWR,CAAY,CAAC,CAAC,CAC9J,EAJ0B,cCHnB,IAAMS,GAA6B,6BAC7BC,GAAgC,yBAEtC,IAAMC,GAA6C,CACtD,4BAA6BC,EAACC,GAAQC,EAAgBD,EAAKE,GAA4BC,EAAa,GAAG,EAA1E,+BAC7B,mBAAoBJ,EAACK,GAAYH,EAAgBG,EAASC,GAA+BF,EAAa,MAAM,EAAxF,sBACpB,QAAS,EACb,ECPO,IAAMG,GAAwB,wBACxBC,GAA2B,oBAEjC,IAAMC,GAAwC,CACjD,4BAA6BC,EAACC,GAAQC,EAAgBD,EAAKE,GAAuBC,EAAa,GAAG,EAArE,+BAC7B,mBAAoBJ,EAACK,GAAYH,EAAgBG,EAASC,GAA0BF,EAAa,MAAM,EAAnF,sBACpB,QAAS,EACb,ECTA,IAAMG,GAAwB,oBACxBC,GAA2B,gBACpBC,GAAoC,CAC7C,4BAA6BC,EAACC,GACnBA,EAAIJ,EAAqB,EADP,+BAG7B,mBAAoBG,EAACE,GACVA,EAAQJ,EAAwB,EADvB,sBAGpB,QAAS,QACb,ECJO,IAAMK,GAA4BC,EAAA,CAAC,CAAE,OAAAC,EAASC,EAAWC,CAA0B,EAAG,aAAAC,EAAeF,EAAWG,EAAiC,CAAG,EAAI,CAAC,IAAMC,EAAQ,SAAY,CACtL,IAAMC,EAAO,OAAOH,GAAiB,WAAa,MAAMA,EAAa,EAAIA,EACzE,OAAQG,GAAM,YAAY,EAAG,CACzB,IAAK,OACD,OAAOC,GAA4BP,CAAM,EAC7C,IAAK,YACL,IAAK,eACL,IAAK,SACL,IAAK,WACL,IAAK,SACD,OAAO,QAAQ,QAAQM,GAAM,kBAAkB,CAAC,EACpD,KAAK,OACD,OAAO,QAAQ,QAAQ,QAAQ,EACnC,QACI,MAAM,IAAI,MAAM,gDAAgDE,EAAsB,KAAK,IAAI,CAAC,SAASF,CAAI,EAAE,CACvH,CACJ,CAAC,EAhBwC,6BAiBnCC,GAA8BR,EAAA,MAAOU,GAAiB,CACxD,GAAIA,EAAc,CACd,IAAMC,EAAiB,OAAOD,GAAiB,WAAa,MAAMA,EAAa,EAAIA,EAC7EE,EAAiB,MAAMC,GAAoB,EACjD,OAAKD,EAGDD,IAAmBC,EACZ,YAGA,eANA,UAQf,CACA,MAAO,UACX,EAfoC,+BAgB9BC,GAAsBb,EAAA,SACpB,QAAQ,IAAIc,CAAiB,IAAM,QAAQ,IAAIC,CAAc,GAAK,QAAQ,IAAIC,CAAsB,GAC7F,QAAQ,IAAID,CAAc,GAAK,QAAQ,IAAIC,CAAsB,EAErEC,EAA0B,EAJT",
6
+ "names": ["AWS_EXECUTION_ENV", "AWS_REGION_ENV", "AWS_DEFAULT_REGION_ENV", "ENV_IMDS_DISABLED", "DEFAULTS_MODE_OPTIONS", "IMDS_REGION_PATH", "IMDS_TOKEN_PATH", "X_AWS_EC2_METADATA_TOKEN", "X_AWS_EC2_METADATA_TOKEN_TTL", "TIMEOUT_MS", "NEG_CACHE_TTL_MS", "negativeCacheUntil", "getInstanceMetadataRegion", "__name", "ENV_IMDS_DISABLED", "endpoint", "resolveImdsEndpoint", "token", "imdsRequest", "IMDS_TOKEN_PATH", "X_AWS_EC2_METADATA_TOKEN_TTL", "IMDS_REGION_PATH", "X_AWS_EC2_METADATA_TOKEN", "cacheNegativeAndReturnUndefined", "envEndpoint", "url", "options", "request", "resolve", "reject", "req", "err", "res", "statusCode", "chunks", "chunk", "REGION_ENV_NAME", "REGION_INI_NAME", "NODE_REGION_CONFIG_OPTIONS", "__name", "env", "profile", "region", "getInstanceMetadataRegion", "NODE_REGION_CONFIG_FILE_OPTIONS", "validRegions", "checkRegion", "__name", "region", "check", "isValidHostLabel", "isFipsRegion", "__name", "region", "getRealRegion", "__name", "region", "isFipsRegion", "resolveRegionConfig", "__name", "input", "region", "useFipsEndpoint", "providedRegion", "realRegion", "getRealRegion", "checkRegion", "isFipsRegion", "ProviderError", "_ProviderError", "__name", "message", "options", "logger", "tryNextLink", "error", "CredentialsProviderError", "_CredentialsProviderError", "ProviderError", "__name", "message", "options", "TokenProviderError", "_TokenProviderError", "ProviderError", "__name", "message", "options", "chain", "__name", "providers", "ProviderError", "lastProviderError", "provider", "err", "fromValue", "__name", "staticValue", "memoize", "__name", "provider", "isExpired", "requiresRefresh", "resolved", "pending", "hasResult", "isConstant", "coalesceProvider", "options", "booleanSelector", "__name", "obj", "key", "type", "SelectorType", "homedir", "sep", "homeDirCache", "getHomeDirCacheKey", "__name", "getHomeDir", "HOME", "USERPROFILE", "HOMEPATH", "HOMEDRIVE", "sep", "homeDirCacheKey", "homedir", "ENV_PROFILE", "DEFAULT_PROFILE", "getProfileName", "__name", "init", "createHash", "join", "getSSOTokenFilepath", "__name", "id", "cacheName", "createHash", "join", "getHomeDir", "readFile", "tokenIntercept", "getSSOTokenFromFile", "__name", "id", "ssoTokenFilepath", "getSSOTokenFilepath", "ssoTokenText", "readFile", "join", "getConfigData", "__name", "data", "key", "indexOfSeparator", "IniSectionType", "acc", "value", "updatedKey", "join", "ENV_CONFIG_PATH", "getConfigFilepath", "__name", "join", "getHomeDir", "join", "ENV_CREDENTIALS_PATH", "getCredentialsFilepath", "__name", "join", "getHomeDir", "prefixKeyRegex", "profileNameBlockList", "parseIni", "__name", "iniData", "map", "currentSection", "currentSubSection", "iniLine", "trimmedLine", "sectionName", "matches", "prefix", "name", "IniSectionType", "indexOfEqualsSign", "value", "key", "fsReadFile", "filePromises", "fileIntercept", "readFile", "__name", "path", "options", "fsReadFile", "swallowError", "__name", "loadSharedConfigFiles", "init", "filepath", "getCredentialsFilepath", "configFilepath", "getConfigFilepath", "homeDir", "getHomeDir", "relativeHomeDirPrefix", "resolvedFilepath", "join", "resolvedConfigFilepath", "parsedFiles", "readFile", "parseIni", "getConfigData", "getSsoSessionData", "__name", "data", "key", "IniSectionType", "acc", "value", "swallowError", "__name", "loadSsoSessionData", "init", "readFile", "getConfigFilepath", "parseIni", "getSsoSessionData", "mergeConfigFiles", "__name", "files", "merged", "file", "key", "values", "parseKnownFiles", "__name", "init", "parsedFiles", "loadSharedConfigFiles", "mergeConfigFiles", "externalDataInterceptor", "fileIntercept", "path", "contents", "tokenIntercept", "id", "getSelectorName", "functionString", "constants", "__name", "fromEnv", "__name", "envVarSelector", "options", "config", "e", "CredentialsProviderError", "getSelectorName", "fromSharedConfigFiles", "__name", "configSelector", "preferredFile", "init", "profile", "getProfileName", "configFile", "credentialsFile", "loadSharedConfigFiles", "profileFromCredentials", "profileFromConfig", "mergedProfile", "configValue", "e", "CredentialsProviderError", "getSelectorName", "isFunction", "__name", "func", "fromStatic", "defaultValue", "fromValue", "loadConfig", "__name", "environmentVariableSelector", "configFileSelector", "defaultValue", "configuration", "signingName", "logger", "memoize", "chain", "fromEnv", "fromSharedConfigFiles", "fromStatic", "ENV_USE_DUALSTACK_ENDPOINT", "CONFIG_USE_DUALSTACK_ENDPOINT", "NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS", "__name", "env", "booleanSelector", "ENV_USE_DUALSTACK_ENDPOINT", "SelectorType", "profile", "CONFIG_USE_DUALSTACK_ENDPOINT", "ENV_USE_FIPS_ENDPOINT", "CONFIG_USE_FIPS_ENDPOINT", "NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS", "__name", "env", "booleanSelector", "ENV_USE_FIPS_ENDPOINT", "SelectorType", "profile", "CONFIG_USE_FIPS_ENDPOINT", "AWS_DEFAULTS_MODE_ENV", "AWS_DEFAULTS_MODE_CONFIG", "NODE_DEFAULTS_MODE_CONFIG_OPTIONS", "__name", "env", "profile", "resolveDefaultsModeConfig", "__name", "region", "loadConfig", "NODE_REGION_CONFIG_OPTIONS", "defaultsMode", "NODE_DEFAULTS_MODE_CONFIG_OPTIONS", "memoize", "mode", "resolveNodeDefaultsModeAuto", "DEFAULTS_MODE_OPTIONS", "clientRegion", "resolvedRegion", "inferredRegion", "inferPhysicalRegion", "AWS_EXECUTION_ENV", "AWS_REGION_ENV", "AWS_DEFAULT_REGION_ENV", "getInstanceMetadataRegion"]
7
+ }
@@ -0,0 +1,2 @@
1
+ /* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
2
+ import{$ as w,Aa as O,Ba as P,Ca as Q,Da as R,Ea as S,Fa as T,Ga as U,Ha as V,Ia as W,Ja as X,R as m,S as n,T as o,U as p,V as q,W as r,X as s,Y as t,Z as u,_ as v,aa as x,ka as y,la as z,m as a,ma as A,n as b,na as B,o as c,oa as C,p as d,pa as D,qa as E,ra as F,sa as G,t as j,ta as H,ua as I,v as k,va as J,wa as K,x as l,xa as L,ya as M,za as N}from"./chunk-OV75J3RB.mjs";import{q as e,r as f,s as g,t as h,u as i}from"./chunk-ZH5DZOB5.mjs";import"./chunk-MATUPZWL.mjs";import"./chunk-5JDAL5HL.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-NX6AKUU3.mjs";import"./chunk-CFZ5JWD3.mjs";export{y as DEFAULT_UA_APP_ID,j as EndpointError,M as NODE_APP_ID_CONFIG_OPTIONS,h as NODE_REGION_CONFIG_FILE_OPTIONS,g as NODE_REGION_CONFIG_OPTIONS,e as REGION_ENV_NAME,f as REGION_INI_NAME,K as UA_APP_ID_ENV_NAME,L as UA_APP_ID_INI_NAME,R as awsEndpointFunctions,I as createDefaultUserAgentProvider,N as createUserAgentStringParsingProvider,H as crtAvailability,J as defaultUserAgent,b as emitWarningIfUnsupportedVersion,O as fallback,W as getAwsRegionExtensionConfiguration,r as getHostHeaderPlugin,u as getLoggerPlugin,c as getLongPollPlugin,x as getRecursionDetectionPlugin,F as getUserAgentMiddlewareOptions,G as getUserAgentPlugin,D as getUserAgentPrefix,p as hostHeaderMiddleware,q as hostHeaderMiddlewareOptions,k as isIpAddress,P as isVirtualHostableS3Bucket,s as loggerMiddleware,t as loggerMiddlewareOptions,Q as parseArn,A as partition,w as recursionDetectionMiddleware,v as recursionDetectionMiddlewareOptions,X as resolveAwsRegionExtensionConfiguration,S as resolveDefaultAwsRegionalEndpointsConfig,l as resolveEndpoint,o as resolveHostHeaderConfig,i as resolveRegionConfig,z as resolveUserAgentConfig,d as setCredentialFeature,m as setFeature,B as setPartitionInfo,n as setTokenFeature,a as state,U as stsRegionDefaultResolver,V as stsRegionWarning,T as toEndpointV1,C as useDefaultPartitionInfo,E as userAgentMiddleware};
@@ -0,0 +1,7 @@
1
+ {
2
+ "version": 3,
3
+ "sources": [],
4
+ "sourcesContent": [],
5
+ "mappings": "",
6
+ "names": []
7
+ }
@@ -0,0 +1,7 @@
1
+ /* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
2
+ import{p as C}from"./chunk-OV75J3RB.mjs";import{b as a}from"./chunk-ZH5DZOB5.mjs";import{A as _,k as p}from"./chunk-MATUPZWL.mjs";import{c as A}from"./chunk-5JDAL5HL.mjs";import{a as l}from"./chunk-FLISSIFQ.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-C4CD3R2M.mjs";import"./chunk-3GD7PA4I.mjs";import"./chunk-NX6AKUU3.mjs";import"./chunk-VG37NXBO.mjs";import{a as s}from"./chunk-CFZ5JWD3.mjs";import v from"node:fs/promises";var S="169.254.170.2",O="169.254.170.23",y="[fd00:ec2::23]",f=s((e,o)=>{if(e.protocol!=="https:"&&!(e.hostname===S||e.hostname===O||e.hostname===y)){if(e.hostname.includes("[")){if(e.hostname==="[::1]"||e.hostname==="[0000:0000:0000:0000:0000:0000:0000:0001]")return}else{if(e.hostname==="localhost")return;let n=e.hostname.split("."),r=s(t=>{let i=parseInt(t,10);return 0<=i&&i<=255},"inRange");if(n[0]==="127"&&r(n[1])&&r(n[2])&&r(n[3])&&n.length===4)return}throw new a(`URL not accepted. It must either be HTTPS or match one of the following:
3
+ - loopback CIDR 127.0.0.0/8 or [::1/128]
4
+ - ECS container host 169.254.170.2
5
+ - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:o})}},"checkUrl");function I(e){return new A({protocol:e.protocol,hostname:e.hostname,port:Number(e.port),path:e.pathname,query:Array.from(e.searchParams.entries()).reduce((o,[n,r])=>(o[n]=r,o),{}),fragment:e.hash})}s(I,"createGetRequest");async function u(e,o){let r=await _(e.body).transformToString();if(e.statusCode===200){let t=JSON.parse(r);if(typeof t.AccessKeyId!="string"||typeof t.SecretAccessKey!="string"||typeof t.Token!="string"||typeof t.Expiration!="string")throw new a("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:o});return{accessKeyId:t.AccessKeyId,secretAccessKey:t.SecretAccessKey,sessionToken:t.Token,expiration:p(t.Expiration)}}if(e.statusCode>=400&&e.statusCode<500){let t={};try{t=JSON.parse(r)}catch{}throw Object.assign(new a(`Server responded with status: ${e.statusCode}`,{logger:o}),{Code:t.Code,Message:t.Message})}throw new a(`Server responded with status: ${e.statusCode}`,{logger:o})}s(u,"getCredentials");var E=s((e,o,n)=>async()=>{for(let r=0;r<o;++r)try{return await e()}catch{await new Promise(i=>setTimeout(i,n))}return await e()},"retryWrapper");var L="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",U="http://169.254.170.2",k="AWS_CONTAINER_CREDENTIALS_FULL_URI",H="AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",K="AWS_CONTAINER_AUTHORIZATION_TOKEN",P=s((e={})=>{e.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");let o,n=e.awsContainerCredentialsRelativeUri??process.env[L],r=e.awsContainerCredentialsFullUri??process.env[k],t=e.awsContainerAuthorizationToken??process.env[K],i=e.awsContainerAuthorizationTokenFile??process.env[H],c=e.logger?.constructor?.name==="NoOpLogger"||!e.logger?.warn?console.warn:e.logger.warn.bind(e.logger);if(n&&r&&(c("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),c("awsContainerCredentialsRelativeUri will take precedence.")),t&&i&&(c("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),c("awsContainerAuthorizationTokenFile will take precedence.")),n)o=`${U}${n}`;else if(r)o=r;else throw new a(`No HTTP credential provider host provided.
6
+ Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:e.logger});let T=new URL(o);f(T,e.logger);let h=l.create({connectionTimeout:e.timeout??1e3}),w=e.timeout??1e3,R=E(async()=>{let d=I(T);i?d.headers.Authorization=N((await v.readFile(i)).toString()):t&&(d.headers.Authorization=N(t));try{let m=await h.handle(d,{requestTimeout:w});return u(m.response).then(g=>C(g,"CREDENTIALS_HTTP","z"))}catch(m){throw new a(String(m),{logger:e.logger})}},e.maxRetries??3,e.timeout??1e3);return async()=>{try{return await R()}finally{h.destroy?.()}}},"fromHttp"),N=s(e=>{if(e.includes(`\r
7
+ `))throw new a("Authorization token contains invalid \\r\\n sequence.");return e},"validateToken");export{P as fromHttp};
@@ -0,0 +1,7 @@
1
+ {
2
+ "version": 3,
3
+ "sources": ["../../../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.74/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.74/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/checkUrl.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.74/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/requestHelpers.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.74/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/retry-wrapper.js"],
4
+ "sourcesContent": ["import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { CredentialsProviderError } from \"@smithy/core/config\";\nimport { NodeHttpHandler } from \"@smithy/node-http-handler\";\nimport fs from \"node:fs/promises\";\nimport { checkUrl } from \"./checkUrl\";\nimport { createGetRequest, getCredentials } from \"./requestHelpers\";\nimport { retryWrapper } from \"./retry-wrapper\";\nconst AWS_CONTAINER_CREDENTIALS_RELATIVE_URI = \"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI\";\nconst DEFAULT_LINK_LOCAL_HOST = \"http://169.254.170.2\";\nconst AWS_CONTAINER_CREDENTIALS_FULL_URI = \"AWS_CONTAINER_CREDENTIALS_FULL_URI\";\nconst AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE = \"AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE\";\nconst AWS_CONTAINER_AUTHORIZATION_TOKEN = \"AWS_CONTAINER_AUTHORIZATION_TOKEN\";\nexport const fromHttp = (options = {}) => {\n options.logger?.debug(\"@aws-sdk/credential-provider-http - fromHttp\");\n let host;\n const relative = options.awsContainerCredentialsRelativeUri ?? process.env[AWS_CONTAINER_CREDENTIALS_RELATIVE_URI];\n const full = options.awsContainerCredentialsFullUri ?? process.env[AWS_CONTAINER_CREDENTIALS_FULL_URI];\n const token = options.awsContainerAuthorizationToken ?? process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN];\n const tokenFile = options.awsContainerAuthorizationTokenFile ?? process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE];\n const warn = options.logger?.constructor?.name === \"NoOpLogger\" || !options.logger?.warn\n ? console.warn\n : options.logger.warn.bind(options.logger);\n if (relative && full) {\n warn(\"@aws-sdk/credential-provider-http: \" +\n \"you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri.\");\n warn(\"awsContainerCredentialsRelativeUri will take precedence.\");\n }\n if (token && tokenFile) {\n warn(\"@aws-sdk/credential-provider-http: \" +\n \"you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile.\");\n warn(\"awsContainerAuthorizationTokenFile will take precedence.\");\n }\n if (relative) {\n host = `${DEFAULT_LINK_LOCAL_HOST}${relative}`;\n }\n else if (full) {\n host = full;\n }\n else {\n throw new CredentialsProviderError(`No HTTP credential provider host provided.\nSet AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`, { logger: options.logger });\n }\n const url = new URL(host);\n checkUrl(url, options.logger);\n const requestHandler = NodeHttpHandler.create({ connectionTimeout: options.timeout ?? 1000 });\n const requestTimeout = options.timeout ?? 1000;\n const provider = retryWrapper(async () => {\n const request = createGetRequest(url);\n if (tokenFile) {\n request.headers.Authorization = validateToken((await fs.readFile(tokenFile)).toString());\n }\n else if (token) {\n request.headers.Authorization = validateToken(token);\n }\n try {\n const result = await requestHandler.handle(request, { requestTimeout });\n return getCredentials(result.response).then((creds) => setCredentialFeature(creds, \"CREDENTIALS_HTTP\", \"z\"));\n }\n catch (e) {\n throw new CredentialsProviderError(String(e), { logger: options.logger });\n }\n }, options.maxRetries ?? 3, options.timeout ?? 1000);\n return async () => {\n try {\n return await provider();\n }\n finally {\n requestHandler.destroy?.();\n }\n };\n};\nconst validateToken = (token) => {\n if (token.includes(\"\\r\\n\")) {\n throw new CredentialsProviderError(\"Authorization token contains invalid \\\\r\\\\n sequence.\");\n }\n return token;\n};\n", "import { CredentialsProviderError } from \"@smithy/core/config\";\nconst LOOPBACK_CIDR_IPv4 = \"127.0.0.0/8\";\nconst LOOPBACK_CIDR_IPv6 = \"::1/128\";\nconst ECS_CONTAINER_HOST = \"169.254.170.2\";\nconst EKS_CONTAINER_HOST_IPv4 = \"169.254.170.23\";\nconst EKS_CONTAINER_HOST_IPv6 = \"[fd00:ec2::23]\";\nexport const checkUrl = (url, logger) => {\n if (url.protocol === \"https:\") {\n return;\n }\n if (url.hostname === ECS_CONTAINER_HOST ||\n url.hostname === EKS_CONTAINER_HOST_IPv4 ||\n url.hostname === EKS_CONTAINER_HOST_IPv6) {\n return;\n }\n if (url.hostname.includes(\"[\")) {\n if (url.hostname === \"[::1]\" || url.hostname === \"[0000:0000:0000:0000:0000:0000:0000:0001]\") {\n return;\n }\n }\n else {\n if (url.hostname === \"localhost\") {\n return;\n }\n const ipComponents = url.hostname.split(\".\");\n const inRange = (component) => {\n const num = parseInt(component, 10);\n return 0 <= num && num <= 255;\n };\n if (ipComponents[0] === \"127\" &&\n inRange(ipComponents[1]) &&\n inRange(ipComponents[2]) &&\n inRange(ipComponents[3]) &&\n ipComponents.length === 4) {\n return;\n }\n }\n throw new CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:\n - loopback CIDR 127.0.0.0/8 or [::1/128]\n - ECS container host 169.254.170.2\n - EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger });\n};\n", "import { CredentialsProviderError } from \"@smithy/core/config\";\nimport { HttpRequest } from \"@smithy/core/protocols\";\nimport { parseRfc3339DateTime } from \"@smithy/core/serde\";\nimport { sdkStreamMixin } from \"@smithy/core/serde\";\nexport function createGetRequest(url) {\n return new HttpRequest({\n protocol: url.protocol,\n hostname: url.hostname,\n port: Number(url.port),\n path: url.pathname,\n query: Array.from(url.searchParams.entries()).reduce((acc, [k, v]) => {\n acc[k] = v;\n return acc;\n }, {}),\n fragment: url.hash,\n });\n}\nexport async function getCredentials(response, logger) {\n const stream = sdkStreamMixin(response.body);\n const str = await stream.transformToString();\n if (response.statusCode === 200) {\n const parsed = JSON.parse(str);\n if (typeof parsed.AccessKeyId !== \"string\" ||\n typeof parsed.SecretAccessKey !== \"string\" ||\n typeof parsed.Token !== \"string\" ||\n typeof parsed.Expiration !== \"string\") {\n throw new CredentialsProviderError(\"HTTP credential provider response not of the required format, an object matching: \" +\n \"{ AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }\", { logger });\n }\n return {\n accessKeyId: parsed.AccessKeyId,\n secretAccessKey: parsed.SecretAccessKey,\n sessionToken: parsed.Token,\n expiration: parseRfc3339DateTime(parsed.Expiration),\n };\n }\n if (response.statusCode >= 400 && response.statusCode < 500) {\n let parsedBody = {};\n try {\n parsedBody = JSON.parse(str);\n }\n catch (e) { }\n throw Object.assign(new CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger }), {\n Code: parsedBody.Code,\n Message: parsedBody.Message,\n });\n }\n throw new CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger });\n}\n", "export const retryWrapper = (toRetry, maxRetries, delayMs) => {\n return async () => {\n for (let i = 0; i < maxRetries; ++i) {\n try {\n return await toRetry();\n }\n catch (e) {\n await new Promise((resolve) => setTimeout(resolve, delayMs));\n }\n }\n return await toRetry();\n };\n};\n"],
5
+ "mappings": ";8YAGA,OAAOA,MAAQ,mBCAf,IAAMC,EAAqB,gBACrBC,EAA0B,iBAC1BC,EAA0B,iBACnBC,EAAWC,EAAA,CAACC,EAAKC,IAAW,CACrC,GAAID,EAAI,WAAa,UAGjB,EAAAA,EAAI,WAAaL,GACjBK,EAAI,WAAaJ,GACjBI,EAAI,WAAaH,GAGrB,IAAIG,EAAI,SAAS,SAAS,GAAG,GACzB,GAAIA,EAAI,WAAa,SAAWA,EAAI,WAAa,4CAC7C,WAGH,CACD,GAAIA,EAAI,WAAa,YACjB,OAEJ,IAAME,EAAeF,EAAI,SAAS,MAAM,GAAG,EACrCG,EAAUJ,EAACK,GAAc,CAC3B,IAAMC,EAAM,SAASD,EAAW,EAAE,EAClC,MAAO,IAAKC,GAAOA,GAAO,GAC9B,EAHgB,WAIhB,GAAIH,EAAa,CAAC,IAAM,OACpBC,EAAQD,EAAa,CAAC,CAAC,GACvBC,EAAQD,EAAa,CAAC,CAAC,GACvBC,EAAQD,EAAa,CAAC,CAAC,GACvBA,EAAa,SAAW,EACxB,MAER,CACA,MAAM,IAAII,EAAyB;AAAA;AAAA;AAAA,yDAGmB,CAAE,OAAAL,CAAO,CAAC,EACpE,EAnCwB,YCFjB,SAASM,EAAiBC,EAAK,CAClC,OAAO,IAAIC,EAAY,CACnB,SAAUD,EAAI,SACd,SAAUA,EAAI,SACd,KAAM,OAAOA,EAAI,IAAI,EACrB,KAAMA,EAAI,SACV,MAAO,MAAM,KAAKA,EAAI,aAAa,QAAQ,CAAC,EAAE,OAAO,CAACE,EAAK,CAACC,EAAGC,CAAC,KAC5DF,EAAIC,CAAC,EAAIC,EACFF,GACR,CAAC,CAAC,EACL,SAAUF,EAAI,IAClB,CAAC,CACL,CAZgBK,EAAAN,EAAA,oBAahB,eAAsBO,EAAeC,EAAUC,EAAQ,CAEnD,IAAMC,EAAM,MADGC,EAAeH,EAAS,IAAI,EAClB,kBAAkB,EAC3C,GAAIA,EAAS,aAAe,IAAK,CAC7B,IAAMI,EAAS,KAAK,MAAMF,CAAG,EAC7B,GAAI,OAAOE,EAAO,aAAgB,UAC9B,OAAOA,EAAO,iBAAoB,UAClC,OAAOA,EAAO,OAAU,UACxB,OAAOA,EAAO,YAAe,SAC7B,MAAM,IAAIC,EAAyB,iLACiE,CAAE,OAAAJ,CAAO,CAAC,EAElH,MAAO,CACH,YAAaG,EAAO,YACpB,gBAAiBA,EAAO,gBACxB,aAAcA,EAAO,MACrB,WAAYE,EAAqBF,EAAO,UAAU,CACtD,CACJ,CACA,GAAIJ,EAAS,YAAc,KAAOA,EAAS,WAAa,IAAK,CACzD,IAAIO,EAAa,CAAC,EAClB,GAAI,CACAA,EAAa,KAAK,MAAML,CAAG,CAC/B,MACU,CAAE,CACZ,MAAM,OAAO,OAAO,IAAIG,EAAyB,iCAAiCL,EAAS,UAAU,GAAI,CAAE,OAAAC,CAAO,CAAC,EAAG,CAClH,KAAMM,EAAW,KACjB,QAASA,EAAW,OACxB,CAAC,CACL,CACA,MAAM,IAAIF,EAAyB,iCAAiCL,EAAS,UAAU,GAAI,CAAE,OAAAC,CAAO,CAAC,CACzG,CA/BsBH,EAAAC,EAAA,kBCjBf,IAAMS,EAAeC,EAAA,CAACC,EAASC,EAAYC,IACvC,SAAY,CACf,QAASC,EAAI,EAAGA,EAAIF,EAAY,EAAEE,EAC9B,GAAI,CACA,OAAO,MAAMH,EAAQ,CACzB,MACU,CACN,MAAM,IAAI,QAASI,GAAY,WAAWA,EAASF,CAAO,CAAC,CAC/D,CAEJ,OAAO,MAAMF,EAAQ,CACzB,EAXwB,gBHO5B,IAAMK,EAAyC,yCACzCC,EAA0B,uBAC1BC,EAAqC,qCACrCC,EAAyC,yCACzCC,EAAoC,oCAC7BC,EAAWC,EAAA,CAACC,EAAU,CAAC,IAAM,CACtCA,EAAQ,QAAQ,MAAM,8CAA8C,EACpE,IAAIC,EACEC,EAAWF,EAAQ,oCAAsC,QAAQ,IAAIP,CAAsC,EAC3GU,EAAOH,EAAQ,gCAAkC,QAAQ,IAAIL,CAAkC,EAC/FS,EAAQJ,EAAQ,gCAAkC,QAAQ,IAAIH,CAAiC,EAC/FQ,EAAYL,EAAQ,oCAAsC,QAAQ,IAAIJ,CAAsC,EAC5GU,EAAON,EAAQ,QAAQ,aAAa,OAAS,cAAgB,CAACA,EAAQ,QAAQ,KAC9E,QAAQ,KACRA,EAAQ,OAAO,KAAK,KAAKA,EAAQ,MAAM,EAW7C,GAVIE,GAAYC,IACZG,EAAK,6HACyF,EAC9FA,EAAK,0DAA0D,GAE/DF,GAASC,IACTC,EAAK,6HACyF,EAC9FA,EAAK,0DAA0D,GAE/DJ,EACAD,EAAO,GAAGP,CAAuB,GAAGQ,CAAQ,WAEvCC,EACLF,EAAOE,MAGP,OAAM,IAAII,EAAyB;AAAA,mFACyC,CAAE,OAAQP,EAAQ,MAAO,CAAC,EAE1G,IAAMQ,EAAM,IAAI,IAAIP,CAAI,EACxBQ,EAASD,EAAKR,EAAQ,MAAM,EAC5B,IAAMU,EAAiBC,EAAgB,OAAO,CAAE,kBAAmBX,EAAQ,SAAW,GAAK,CAAC,EACtFY,EAAiBZ,EAAQ,SAAW,IACpCa,EAAWC,EAAa,SAAY,CACtC,IAAMC,EAAUC,EAAiBR,CAAG,EAChCH,EACAU,EAAQ,QAAQ,cAAgBE,GAAe,MAAMC,EAAG,SAASb,CAAS,GAAG,SAAS,CAAC,EAElFD,IACLW,EAAQ,QAAQ,cAAgBE,EAAcb,CAAK,GAEvD,GAAI,CACA,IAAMe,EAAS,MAAMT,EAAe,OAAOK,EAAS,CAAE,eAAAH,CAAe,CAAC,EACtE,OAAOQ,EAAeD,EAAO,QAAQ,EAAE,KAAME,GAAUC,EAAqBD,EAAO,mBAAoB,GAAG,CAAC,CAC/G,OACOE,EAAG,CACN,MAAM,IAAIhB,EAAyB,OAAOgB,CAAC,EAAG,CAAE,OAAQvB,EAAQ,MAAO,CAAC,CAC5E,CACJ,EAAGA,EAAQ,YAAc,EAAGA,EAAQ,SAAW,GAAI,EACnD,MAAO,UAAY,CACf,GAAI,CACA,OAAO,MAAMa,EAAS,CAC1B,QACA,CACIH,EAAe,UAAU,CAC7B,CACJ,CACJ,EA1DwB,YA2DlBO,EAAgBlB,EAACK,GAAU,CAC7B,GAAIA,EAAM,SAAS;AAAA,CAAM,EACrB,MAAM,IAAIG,EAAyB,uDAAuD,EAE9F,OAAOH,CACX,EALsB",
6
+ "names": ["fs", "ECS_CONTAINER_HOST", "EKS_CONTAINER_HOST_IPv4", "EKS_CONTAINER_HOST_IPv6", "checkUrl", "__name", "url", "logger", "ipComponents", "inRange", "component", "num", "CredentialsProviderError", "createGetRequest", "url", "HttpRequest", "acc", "k", "v", "__name", "getCredentials", "response", "logger", "str", "sdkStreamMixin", "parsed", "CredentialsProviderError", "parseRfc3339DateTime", "parsedBody", "retryWrapper", "__name", "toRetry", "maxRetries", "delayMs", "i", "resolve", "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI", "DEFAULT_LINK_LOCAL_HOST", "AWS_CONTAINER_CREDENTIALS_FULL_URI", "AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE", "AWS_CONTAINER_AUTHORIZATION_TOKEN", "fromHttp", "__name", "options", "host", "relative", "full", "token", "tokenFile", "warn", "CredentialsProviderError", "url", "checkUrl", "requestHandler", "NodeHttpHandler", "requestTimeout", "provider", "retryWrapper", "request", "createGetRequest", "validateToken", "fs", "result", "getCredentials", "creds", "setCredentialFeature", "e"]
7
+ }
@@ -0,0 +1,2 @@
1
+ /* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
2
+ import{p as a}from"./chunk-OV75J3RB.mjs";import{b as i,h as p,l as f,m as u}from"./chunk-ZH5DZOB5.mjs";import"./chunk-MATUPZWL.mjs";import"./chunk-5JDAL5HL.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-NX6AKUU3.mjs";import{a as t}from"./chunk-CFZ5JWD3.mjs";import{exec as m}from"node:child_process";import{promisify as x}from"node:util";var w=t((r,e,o)=>{if(e.Version!==1)throw Error(`Profile ${r} credential_process did not return Version 1.`);if(e.AccessKeyId===void 0||e.SecretAccessKey===void 0)throw Error(`Profile ${r} credential_process returned invalid credentials.`);if(e.Expiration){let d=new Date;if(new Date(e.Expiration)<d)throw Error(`Profile ${r} credential_process returned expired credentials.`)}let s=e.AccountId;!s&&o?.[r]?.aws_account_id&&(s=o[r].aws_account_id);let n={accessKeyId:e.AccessKeyId,secretAccessKey:e.SecretAccessKey,...e.SessionToken&&{sessionToken:e.SessionToken},...e.Expiration&&{expiration:new Date(e.Expiration)},...e.CredentialScope&&{credentialScope:e.CredentialScope},...s&&{accountId:s}};return a(n,"CREDENTIALS_PROCESS","w"),n},"getValidatedProcessCredentials");var P=t(async(r,e,o)=>{let s=e[r];if(e[r]){let n=s.credential_process;if(n!==void 0){let d=x(u?.getTokenRecord?.().exec??m);try{let{stdout:c}=await d(n),l;try{l=JSON.parse(c.trim())}catch{throw Error(`Profile ${r} credential_process returned invalid JSON.`)}return w(r,l,e)}catch(c){throw new i(c.message,{logger:o})}}else throw new i(`Profile ${r} did not contain credential_process.`,{logger:o})}else throw new i(`Profile ${r} could not be found in shared credentials file.`,{logger:o})},"resolveProcessCredentials");var E=t((r={})=>async({callerClientConfig:e}={})=>{r.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");let o=await f(r);return P(p({profile:r.profile??e?.profile}),o,r.logger)},"fromProcess");export{E as fromProcess};
@@ -0,0 +1,7 @@
1
+ {
2
+ "version": 3,
3
+ "sources": ["../../../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.72/node_modules/@aws-sdk/credential-provider-process/dist-es/resolveProcessCredentials.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.72/node_modules/@aws-sdk/credential-provider-process/dist-es/getValidatedProcessCredentials.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.72/node_modules/@aws-sdk/credential-provider-process/dist-es/fromProcess.js"],
4
+ "sourcesContent": ["import { CredentialsProviderError, externalDataInterceptor } from \"@smithy/core/config\";\nimport { exec } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { getValidatedProcessCredentials } from \"./getValidatedProcessCredentials\";\nexport const resolveProcessCredentials = async (profileName, profiles, logger) => {\n const profile = profiles[profileName];\n if (profiles[profileName]) {\n const credentialProcess = profile[\"credential_process\"];\n if (credentialProcess !== undefined) {\n const execPromise = promisify(externalDataInterceptor?.getTokenRecord?.().exec ?? exec);\n try {\n const { stdout } = await execPromise(credentialProcess);\n let data;\n try {\n data = JSON.parse(stdout.trim());\n }\n catch {\n throw Error(`Profile ${profileName} credential_process returned invalid JSON.`);\n }\n return getValidatedProcessCredentials(profileName, data, profiles);\n }\n catch (error) {\n throw new CredentialsProviderError(error.message, { logger });\n }\n }\n else {\n throw new CredentialsProviderError(`Profile ${profileName} did not contain credential_process.`, { logger });\n }\n }\n else {\n throw new CredentialsProviderError(`Profile ${profileName} could not be found in shared credentials file.`, {\n logger,\n });\n }\n};\n", "import { setCredentialFeature } from \"@aws-sdk/core/client\";\nexport const getValidatedProcessCredentials = (profileName, data, profiles) => {\n if (data.Version !== 1) {\n throw Error(`Profile ${profileName} credential_process did not return Version 1.`);\n }\n if (data.AccessKeyId === undefined || data.SecretAccessKey === undefined) {\n throw Error(`Profile ${profileName} credential_process returned invalid credentials.`);\n }\n if (data.Expiration) {\n const currentTime = new Date();\n const expireTime = new Date(data.Expiration);\n if (expireTime < currentTime) {\n throw Error(`Profile ${profileName} credential_process returned expired credentials.`);\n }\n }\n let accountId = data.AccountId;\n if (!accountId && profiles?.[profileName]?.aws_account_id) {\n accountId = profiles[profileName].aws_account_id;\n }\n const credentials = {\n accessKeyId: data.AccessKeyId,\n secretAccessKey: data.SecretAccessKey,\n ...(data.SessionToken && { sessionToken: data.SessionToken }),\n ...(data.Expiration && { expiration: new Date(data.Expiration) }),\n ...(data.CredentialScope && { credentialScope: data.CredentialScope }),\n ...(accountId && { accountId }),\n };\n setCredentialFeature(credentials, \"CREDENTIALS_PROCESS\", \"w\");\n return credentials;\n};\n", "import { getProfileName, parseKnownFiles } from \"@smithy/core/config\";\nimport { resolveProcessCredentials } from \"./resolveProcessCredentials\";\nexport const fromProcess = (init = {}) => async ({ callerClientConfig } = {}) => {\n init.logger?.debug(\"@aws-sdk/credential-provider-process - fromProcess\");\n const profiles = await parseKnownFiles(init);\n return resolveProcessCredentials(getProfileName({\n profile: init.profile ?? callerClientConfig?.profile,\n }), profiles, init.logger);\n};\n"],
5
+ "mappings": ";oQACA,OAAS,QAAAA,MAAY,qBACrB,OAAS,aAAAC,MAAiB,YCDnB,IAAMC,EAAiCC,EAAA,CAACC,EAAaC,EAAMC,IAAa,CAC3E,GAAID,EAAK,UAAY,EACjB,MAAM,MAAM,WAAWD,CAAW,+CAA+C,EAErF,GAAIC,EAAK,cAAgB,QAAaA,EAAK,kBAAoB,OAC3D,MAAM,MAAM,WAAWD,CAAW,mDAAmD,EAEzF,GAAIC,EAAK,WAAY,CACjB,IAAME,EAAc,IAAI,KAExB,GADmB,IAAI,KAAKF,EAAK,UAAU,EAC1BE,EACb,MAAM,MAAM,WAAWH,CAAW,mDAAmD,CAE7F,CACA,IAAII,EAAYH,EAAK,UACjB,CAACG,GAAaF,IAAWF,CAAW,GAAG,iBACvCI,EAAYF,EAASF,CAAW,EAAE,gBAEtC,IAAMK,EAAc,CAChB,YAAaJ,EAAK,YAClB,gBAAiBA,EAAK,gBACtB,GAAIA,EAAK,cAAgB,CAAE,aAAcA,EAAK,YAAa,EAC3D,GAAIA,EAAK,YAAc,CAAE,WAAY,IAAI,KAAKA,EAAK,UAAU,CAAE,EAC/D,GAAIA,EAAK,iBAAmB,CAAE,gBAAiBA,EAAK,eAAgB,EACpE,GAAIG,GAAa,CAAE,UAAAA,CAAU,CACjC,EACA,OAAAE,EAAqBD,EAAa,sBAAuB,GAAG,EACrDA,CACX,EA5B8C,kCDGvC,IAAME,EAA4BC,EAAA,MAAOC,EAAaC,EAAUC,IAAW,CAC9E,IAAMC,EAAUF,EAASD,CAAW,EACpC,GAAIC,EAASD,CAAW,EAAG,CACvB,IAAMI,EAAoBD,EAAQ,mBAClC,GAAIC,IAAsB,OAAW,CACjC,IAAMC,EAAcC,EAAUC,GAAyB,iBAAiB,EAAE,MAAQC,CAAI,EACtF,GAAI,CACA,GAAM,CAAE,OAAAC,CAAO,EAAI,MAAMJ,EAAYD,CAAiB,EAClDM,EACJ,GAAI,CACAA,EAAO,KAAK,MAAMD,EAAO,KAAK,CAAC,CACnC,MACM,CACF,MAAM,MAAM,WAAWT,CAAW,4CAA4C,CAClF,CACA,OAAOW,EAA+BX,EAAaU,EAAMT,CAAQ,CACrE,OACOW,EAAO,CACV,MAAM,IAAIC,EAAyBD,EAAM,QAAS,CAAE,OAAAV,CAAO,CAAC,CAChE,CACJ,KAEI,OAAM,IAAIW,EAAyB,WAAWb,CAAW,uCAAwC,CAAE,OAAAE,CAAO,CAAC,CAEnH,KAEI,OAAM,IAAIW,EAAyB,WAAWb,CAAW,kDAAmD,CACxG,OAAAE,CACJ,CAAC,CAET,EA9ByC,6BEFlC,IAAMY,EAAcC,EAAA,CAACC,EAAO,CAAC,IAAM,MAAO,CAAE,mBAAAC,CAAmB,EAAI,CAAC,IAAM,CAC7ED,EAAK,QAAQ,MAAM,oDAAoD,EACvE,IAAME,EAAW,MAAMC,EAAgBH,CAAI,EAC3C,OAAOI,EAA0BC,EAAe,CAC5C,QAASL,EAAK,SAAWC,GAAoB,OACjD,CAAC,EAAGC,EAAUF,EAAK,MAAM,CAC7B,EAN2B",
6
+ "names": ["exec", "promisify", "getValidatedProcessCredentials", "__name", "profileName", "data", "profiles", "currentTime", "accountId", "credentials", "setCredentialFeature", "resolveProcessCredentials", "__name", "profileName", "profiles", "logger", "profile", "credentialProcess", "execPromise", "promisify", "externalDataInterceptor", "exec", "stdout", "data", "getValidatedProcessCredentials", "error", "CredentialsProviderError", "fromProcess", "__name", "init", "callerClientConfig", "profiles", "parseKnownFiles", "resolveProcessCredentials", "getProfileName"]
7
+ }
@@ -0,0 +1,3 @@
1
+ /* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
2
+ import{b as v,p as f,q as d,v as E,w as q,x as A,y as I,z as N}from"./chunk-DDOSB7QU.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-IHCR62UU.mjs";import"./chunk-NX6AKUU3.mjs";import{a as o}from"./chunk-CFZ5JWD3.mjs";var P=o(e=>e&&(typeof e.sso_start_url=="string"||typeof e.sso_account_id=="string"||typeof e.sso_session=="string"||typeof e.sso_region=="string"||typeof e.sso_role_name=="string"),"isSsoProfile");var _="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var W=o(async(e,s={},t)=>{let{SSOOIDCClient:n}=await import("./sso-oidc-63EGB35D.mjs"),i=o(p=>s.clientConfig?.[p]??s.parentClientConfig?.[p]??t?.[p],"coalesce");return new n(Object.assign({},s.clientConfig??{},{region:e??s.clientConfig?.region,logger:i("logger"),userAgentAppId:i("userAgentAppId")}))},"getSsoOidcClient");var X=o(async(e,s,t={},n)=>{let{CreateTokenCommand:i}=await import("./sso-oidc-63EGB35D.mjs");return(await W(s,t,n)).send(new i({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))},"getNewSsoOidcToken");var F=o(e=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new d(`Token is expired. ${_}`,!1)},"validateTokenExpiry");var w=o((e,s,t=!1)=>{if(typeof s>"u")throw new d(`Value not present for '${e}' in SSO Token${t?". Cannot refresh":""}. ${_}`,!1)},"validateTokenKey");import{promises as Y}from"node:fs";var{writeFile:B}=Y,z=o((e,s)=>{let t=q(e),n=JSON.stringify(s,null,2);return B(t,n)},"writeSSOTokenToFile");var J=new Map,D=o((e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let t=await N(e),n=E({profile:e.profile??s?.profile}),i=t[n];if(i){if(!i.sso_session)throw new d(`Profile '${n}' is missing required property 'sso_session'.`)}else throw new d(`Profile '${n}' could not be found in shared credentials file.`,!1);let a=i.sso_session,g=(await I(e))[a];if(!g)throw new d(`Sso session '${a}' could not be found in shared credentials file.`,!1);for(let l of["sso_start_url","sso_region"])if(!g[l])throw new d(`Sso session '${a}' is missing required property '${l}'.`,!1);let S=g.sso_start_url,O=g.sso_region,r;try{r=await A(a)}catch{throw new d(`The SSO session token associated with profile=${n} was not found or is invalid. ${_}`,!1)}w("accessToken",r.accessToken),w("expiresAt",r.expiresAt);let{accessToken:k,expiresAt:T}=r,c={token:k,expiration:new Date(T)};if(c.expiration.getTime()-Date.now()>3e5)return c;let m=J.get(a)??0;if(Date.now()-m<30*1e3)return F(c),c;w("clientId",r.clientId,!0),w("clientSecret",r.clientSecret,!0),w("refreshToken",r.refreshToken,!0);try{J.set(a,Date.now());let l=await X(r,O,e,s);w("accessToken",l.accessToken),w("expiresIn",l.expiresIn);let x=new Date(Date.now()+l.expiresIn*1e3);try{await z(a,{...r,accessToken:l.accessToken,expiresAt:x.toISOString(),refreshToken:l.refreshToken})}catch{}return{token:l.accessToken,expiration:x}}catch{return F(c),c}},"fromSso");var C=!1,$=o(async({ssoStartUrl:e,ssoSession:s,ssoAccountId:t,ssoRegion:n,ssoRoleName:i,ssoClient:a,clientConfig:p,parentClientConfig:g,callerClientConfig:S,profile:O,filepath:r,configFilepath:k,ignoreCache:T,logger:c})=>{let m,l="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let u=await D({profile:O,filepath:r,configFilepath:k,ignoreCache:T,clientConfig:p,parentClientConfig:g,logger:c})({callerClientConfig:S});m={accessToken:u.token,expiresAt:new Date(u.expiration).toISOString()}}catch(u){throw new f(u.message,{tryNextLink:C,logger:c})}else try{m=await A(e)}catch{throw new f(`The SSO session associated with this profile is invalid. ${l}`,{tryNextLink:C,logger:c})}if(new Date(m.expiresAt).getTime()-Date.now()<=0)throw new f(`The SSO session associated with this profile has expired. ${l}`,{tryNextLink:C,logger:c});let{accessToken:x}=m,{SSOClient:h,GetRoleCredentialsCommand:y}=await import("./loadSso-HHJP34KX.mjs"),V=a||new h(Object.assign({},p??{},{logger:p?.logger??S?.logger??g?.logger,region:p?.region??n,userAgentAppId:p?.userAgentAppId??S?.userAgentAppId??g?.userAgentAppId})),M;try{M=await V.send(new y({accountId:t,roleName:i,accessToken:x}))}catch(u){throw new f(u,{tryNextLink:C,logger:c})}let{roleCredentials:{accessKeyId:b,secretAccessKey:G,sessionToken:K,expiration:H,credentialScope:U,accountId:j}={}}=M;if(!b||!G||!K||!H)throw new f("SSO returns an invalid temporary credential.",{tryNextLink:C,logger:c});let R={accessKeyId:b,secretAccessKey:G,sessionToken:K,expiration:new Date(H),...U&&{credentialScope:U},...j&&{accountId:j}};return s?v(R,"CREDENTIALS_SSO","s"):v(R,"CREDENTIALS_SSO_LEGACY","u"),R},"resolveSSOCredentials");var L=o((e,s)=>{let{sso_start_url:t,sso_account_id:n,sso_region:i,sso_role_name:a}=e;if(!t||!n||!i||!a)throw new f(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
3
+ Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:s});return e},"validateSsoProfile");var Z=o((e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:t,ssoAccountId:n,ssoRegion:i,ssoRoleName:a,ssoSession:p}=e,{ssoClient:g}=e,S=E({profile:e.profile??s?.profile});if(!t&&!n&&!i&&!a&&!p){let r=(await N(e))[S];if(!r)throw new f(`Profile ${S} was not found.`,{logger:e.logger});if(!P(r))throw new f(`Profile ${S} is not configured with SSO credentials.`,{logger:e.logger});if(r?.sso_session){let h=(await I(e))[r.sso_session],y=` configurations in profile ${S} and sso-session ${r.sso_session}`;if(i&&i!==h.sso_region)throw new f("Conflicting SSO region"+y,{tryNextLink:!1,logger:e.logger});if(t&&t!==h.sso_start_url)throw new f("Conflicting SSO start_url"+y,{tryNextLink:!1,logger:e.logger});r.sso_region=h.sso_region,r.sso_start_url=h.sso_start_url}let{sso_start_url:k,sso_account_id:T,sso_region:c,sso_role_name:m,sso_session:l}=L(r,e.logger);return $({ssoStartUrl:k,ssoSession:l,ssoAccountId:T,ssoRegion:c,ssoRoleName:m,ssoClient:g,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:S,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}else{if(!t||!n||!i||!a)throw new f('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});return $({ssoStartUrl:t,ssoSession:p,ssoAccountId:n,ssoRegion:i,ssoRoleName:a,ssoClient:g,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:S,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}},"fromSSO");export{Z as fromSSO,P as isSsoProfile,L as validateSsoProfile};
@@ -0,0 +1,7 @@
1
+ {
2
+ "version": 3,
3
+ "sources": ["../../../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.17/node_modules/@aws-sdk/credential-provider-sso/dist-es/isSsoProfile.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/constants.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/getSsoOidcClient.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/getNewSsoOidcToken.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/validateTokenExpiry.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/validateTokenKey.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/writeSSOTokenToFile.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/fromSso.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.17/node_modules/@aws-sdk/credential-provider-sso/dist-es/resolveSSOCredentials.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.17/node_modules/@aws-sdk/credential-provider-sso/dist-es/validateSsoProfile.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.17/node_modules/@aws-sdk/credential-provider-sso/dist-es/fromSSO.js"],
4
+ "sourcesContent": ["export const isSsoProfile = (arg) => arg &&\n (typeof arg.sso_start_url === \"string\" ||\n typeof arg.sso_account_id === \"string\" ||\n typeof arg.sso_session === \"string\" ||\n typeof arg.sso_region === \"string\" ||\n typeof arg.sso_role_name === \"string\");\n", "export const EXPIRE_WINDOW_MS = 5 * 60 * 1000;\nexport const REFRESH_MESSAGE = `To refresh this SSO session run 'aws sso login' with the corresponding profile.`;\n", "export const getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {\n const { SSOOIDCClient } = await import(\"@aws-sdk/nested-clients/sso-oidc\");\n const coalesce = (prop) => init.clientConfig?.[prop] ?? init.parentClientConfig?.[prop] ?? callerClientConfig?.[prop];\n const ssoOidcClient = new SSOOIDCClient(Object.assign({}, init.clientConfig ?? {}, {\n region: ssoRegion ?? init.clientConfig?.region,\n logger: coalesce(\"logger\"),\n userAgentAppId: coalesce(\"userAgentAppId\"),\n }));\n return ssoOidcClient;\n};\n", "import { getSsoOidcClient } from \"./getSsoOidcClient\";\nexport const getNewSsoOidcToken = async (ssoToken, ssoRegion, init = {}, callerClientConfig) => {\n const { CreateTokenCommand } = await import(\"@aws-sdk/nested-clients/sso-oidc\");\n const ssoOidcClient = await getSsoOidcClient(ssoRegion, init, callerClientConfig);\n return ssoOidcClient.send(new CreateTokenCommand({\n clientId: ssoToken.clientId,\n clientSecret: ssoToken.clientSecret,\n refreshToken: ssoToken.refreshToken,\n grantType: \"refresh_token\",\n }));\n};\n", "import { TokenProviderError } from \"@smithy/core/config\";\nimport { REFRESH_MESSAGE } from \"./constants\";\nexport const validateTokenExpiry = (token) => {\n if (token.expiration && token.expiration.getTime() < Date.now()) {\n throw new TokenProviderError(`Token is expired. ${REFRESH_MESSAGE}`, false);\n }\n};\n", "import { TokenProviderError } from \"@smithy/core/config\";\nimport { REFRESH_MESSAGE } from \"./constants\";\nexport const validateTokenKey = (key, value, forRefresh = false) => {\n if (typeof value === \"undefined\") {\n throw new TokenProviderError(`Value not present for '${key}' in SSO Token${forRefresh ? \". Cannot refresh\" : \"\"}. ${REFRESH_MESSAGE}`, false);\n }\n};\n", "import { getSSOTokenFilepath } from \"@smithy/core/config\";\nimport { promises as fsPromises } from \"node:fs\";\nconst { writeFile } = fsPromises;\nexport const writeSSOTokenToFile = (id, ssoToken) => {\n const tokenFilepath = getSSOTokenFilepath(id);\n const tokenString = JSON.stringify(ssoToken, null, 2);\n return writeFile(tokenFilepath, tokenString);\n};\n", "import { getProfileName, getSSOTokenFromFile, loadSsoSessionData, parseKnownFiles, TokenProviderError, } from \"@smithy/core/config\";\nimport { EXPIRE_WINDOW_MS, REFRESH_MESSAGE } from \"./constants\";\nimport { getNewSsoOidcToken } from \"./getNewSsoOidcToken\";\nimport { validateTokenExpiry } from \"./validateTokenExpiry\";\nimport { validateTokenKey } from \"./validateTokenKey\";\nimport { writeSSOTokenToFile } from \"./writeSSOTokenToFile\";\nconst lastRefreshAttemptTimes = new Map();\nexport const fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {\n init.logger?.debug(\"@aws-sdk/token-providers - fromSso\");\n const profiles = await parseKnownFiles(init);\n const profileName = getProfileName({\n profile: init.profile ?? callerClientConfig?.profile,\n });\n const profile = profiles[profileName];\n if (!profile) {\n throw new TokenProviderError(`Profile '${profileName}' could not be found in shared credentials file.`, false);\n }\n else if (!profile[\"sso_session\"]) {\n throw new TokenProviderError(`Profile '${profileName}' is missing required property 'sso_session'.`);\n }\n const ssoSessionName = profile[\"sso_session\"];\n const ssoSessions = await loadSsoSessionData(init);\n const ssoSession = ssoSessions[ssoSessionName];\n if (!ssoSession) {\n throw new TokenProviderError(`Sso session '${ssoSessionName}' could not be found in shared credentials file.`, false);\n }\n for (const ssoSessionRequiredKey of [\"sso_start_url\", \"sso_region\"]) {\n if (!ssoSession[ssoSessionRequiredKey]) {\n throw new TokenProviderError(`Sso session '${ssoSessionName}' is missing required property '${ssoSessionRequiredKey}'.`, false);\n }\n }\n const ssoStartUrl = ssoSession[\"sso_start_url\"];\n const ssoRegion = ssoSession[\"sso_region\"];\n let ssoToken;\n try {\n ssoToken = await getSSOTokenFromFile(ssoSessionName);\n }\n catch (e) {\n throw new TokenProviderError(`The SSO session token associated with profile=${profileName} was not found or is invalid. ${REFRESH_MESSAGE}`, false);\n }\n validateTokenKey(\"accessToken\", ssoToken.accessToken);\n validateTokenKey(\"expiresAt\", ssoToken.expiresAt);\n const { accessToken, expiresAt } = ssoToken;\n const existingToken = {\n token: accessToken,\n expiration: new Date(expiresAt),\n };\n if (existingToken.expiration.getTime() - Date.now() > EXPIRE_WINDOW_MS) {\n return existingToken;\n }\n const lastRefreshAttemptTime = lastRefreshAttemptTimes.get(ssoSessionName) ?? 0;\n if (Date.now() - lastRefreshAttemptTime < 30 * 1000) {\n validateTokenExpiry(existingToken);\n return existingToken;\n }\n validateTokenKey(\"clientId\", ssoToken.clientId, true);\n validateTokenKey(\"clientSecret\", ssoToken.clientSecret, true);\n validateTokenKey(\"refreshToken\", ssoToken.refreshToken, true);\n try {\n lastRefreshAttemptTimes.set(ssoSessionName, Date.now());\n const newSsoOidcToken = await getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig);\n validateTokenKey(\"accessToken\", newSsoOidcToken.accessToken);\n validateTokenKey(\"expiresIn\", newSsoOidcToken.expiresIn);\n const newTokenExpiration = new Date(Date.now() + newSsoOidcToken.expiresIn * 1000);\n try {\n await writeSSOTokenToFile(ssoSessionName, {\n ...ssoToken,\n accessToken: newSsoOidcToken.accessToken,\n expiresAt: newTokenExpiration.toISOString(),\n refreshToken: newSsoOidcToken.refreshToken,\n });\n }\n catch (error) {\n }\n return {\n token: newSsoOidcToken.accessToken,\n expiration: newTokenExpiration,\n };\n }\n catch (error) {\n validateTokenExpiry(existingToken);\n return existingToken;\n }\n};\n", "import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { fromSso as getSsoTokenProvider } from \"@aws-sdk/token-providers\";\nimport { CredentialsProviderError, getSSOTokenFromFile } from \"@smithy/core/config\";\nconst SHOULD_FAIL_CREDENTIAL_CHAIN = false;\nexport const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, callerClientConfig, profile, filepath, configFilepath, ignoreCache, logger, }) => {\n let token;\n const refreshMessage = `To refresh this SSO session run aws sso login with the corresponding profile.`;\n if (ssoSession) {\n try {\n const _token = await getSsoTokenProvider({\n profile,\n filepath,\n configFilepath,\n ignoreCache,\n clientConfig,\n parentClientConfig,\n logger,\n })({ callerClientConfig });\n token = {\n accessToken: _token.token,\n expiresAt: new Date(_token.expiration).toISOString(),\n };\n }\n catch (e) {\n throw new CredentialsProviderError(e.message, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n }\n else {\n try {\n token = await getSSOTokenFromFile(ssoStartUrl);\n }\n catch (e) {\n throw new CredentialsProviderError(`The SSO session associated with this profile is invalid. ${refreshMessage}`, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n }\n if (new Date(token.expiresAt).getTime() - Date.now() <= 0) {\n throw new CredentialsProviderError(`The SSO session associated with this profile has expired. ${refreshMessage}`, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n const { accessToken } = token;\n const { SSOClient, GetRoleCredentialsCommand } = await import(\"./loadSso.js\");\n const sso = ssoClient ||\n new SSOClient(Object.assign({}, clientConfig ?? {}, {\n logger: clientConfig?.logger ?? callerClientConfig?.logger ?? parentClientConfig?.logger,\n region: clientConfig?.region ?? ssoRegion,\n userAgentAppId: clientConfig?.userAgentAppId ?? callerClientConfig?.userAgentAppId ?? parentClientConfig?.userAgentAppId,\n }));\n let ssoResp;\n try {\n ssoResp = await sso.send(new GetRoleCredentialsCommand({\n accountId: ssoAccountId,\n roleName: ssoRoleName,\n accessToken,\n }));\n }\n catch (e) {\n throw new CredentialsProviderError(e, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n const { roleCredentials: { accessKeyId, secretAccessKey, sessionToken, expiration, credentialScope, accountId } = {}, } = ssoResp;\n if (!accessKeyId || !secretAccessKey || !sessionToken || !expiration) {\n throw new CredentialsProviderError(\"SSO returns an invalid temporary credential.\", {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n const credentials = {\n accessKeyId,\n secretAccessKey,\n sessionToken,\n expiration: new Date(expiration),\n ...(credentialScope && { credentialScope }),\n ...(accountId && { accountId }),\n };\n if (ssoSession) {\n setCredentialFeature(credentials, \"CREDENTIALS_SSO\", \"s\");\n }\n else {\n setCredentialFeature(credentials, \"CREDENTIALS_SSO_LEGACY\", \"u\");\n }\n return credentials;\n};\n", "import { CredentialsProviderError } from \"@smithy/core/config\";\nexport const validateSsoProfile = (profile, logger) => {\n const { sso_start_url, sso_account_id, sso_region, sso_role_name } = profile;\n if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {\n throw new CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters \"sso_account_id\", ` +\n `\"sso_region\", \"sso_role_name\", \"sso_start_url\". Got ${Object.keys(profile).join(\", \")}\\nReference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger });\n }\n return profile;\n};\n", "import { CredentialsProviderError, getProfileName, loadSsoSessionData, parseKnownFiles } from \"@smithy/core/config\";\nimport { isSsoProfile } from \"./isSsoProfile\";\nimport { resolveSSOCredentials } from \"./resolveSSOCredentials\";\nimport { validateSsoProfile } from \"./validateSsoProfile\";\nexport const fromSSO = (init = {}) => async ({ callerClientConfig } = {}) => {\n init.logger?.debug(\"@aws-sdk/credential-provider-sso - fromSSO\");\n const { ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession } = init;\n const { ssoClient } = init;\n const profileName = getProfileName({\n profile: init.profile ?? callerClientConfig?.profile,\n });\n if (!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession) {\n const profiles = await parseKnownFiles(init);\n const profile = profiles[profileName];\n if (!profile) {\n throw new CredentialsProviderError(`Profile ${profileName} was not found.`, { logger: init.logger });\n }\n if (!isSsoProfile(profile)) {\n throw new CredentialsProviderError(`Profile ${profileName} is not configured with SSO credentials.`, {\n logger: init.logger,\n });\n }\n if (profile?.sso_session) {\n const ssoSessions = await loadSsoSessionData(init);\n const session = ssoSessions[profile.sso_session];\n const conflictMsg = ` configurations in profile ${profileName} and sso-session ${profile.sso_session}`;\n if (ssoRegion && ssoRegion !== session.sso_region) {\n throw new CredentialsProviderError(`Conflicting SSO region` + conflictMsg, {\n tryNextLink: false,\n logger: init.logger,\n });\n }\n if (ssoStartUrl && ssoStartUrl !== session.sso_start_url) {\n throw new CredentialsProviderError(`Conflicting SSO start_url` + conflictMsg, {\n tryNextLink: false,\n logger: init.logger,\n });\n }\n profile.sso_region = session.sso_region;\n profile.sso_start_url = session.sso_start_url;\n }\n const { sso_start_url, sso_account_id, sso_region, sso_role_name, sso_session } = validateSsoProfile(profile, init.logger);\n return resolveSSOCredentials({\n ssoStartUrl: sso_start_url,\n ssoSession: sso_session,\n ssoAccountId: sso_account_id,\n ssoRegion: sso_region,\n ssoRoleName: sso_role_name,\n ssoClient: ssoClient,\n clientConfig: init.clientConfig,\n parentClientConfig: init.parentClientConfig,\n callerClientConfig: init.callerClientConfig,\n profile: profileName,\n filepath: init.filepath,\n configFilepath: init.configFilepath,\n ignoreCache: init.ignoreCache,\n logger: init.logger,\n });\n }\n else if (!ssoStartUrl || !ssoAccountId || !ssoRegion || !ssoRoleName) {\n throw new CredentialsProviderError(\"Incomplete configuration. The fromSSO() argument hash must include \" +\n '\"ssoStartUrl\", \"ssoAccountId\", \"ssoRegion\", \"ssoRoleName\"', { tryNextLink: false, logger: init.logger });\n }\n else {\n return resolveSSOCredentials({\n ssoStartUrl,\n ssoSession,\n ssoAccountId,\n ssoRegion,\n ssoRoleName,\n ssoClient,\n clientConfig: init.clientConfig,\n parentClientConfig: init.parentClientConfig,\n callerClientConfig: init.callerClientConfig,\n profile: profileName,\n filepath: init.filepath,\n configFilepath: init.configFilepath,\n ignoreCache: init.ignoreCache,\n logger: init.logger,\n });\n }\n};\n"],
5
+ "mappings": ";0NAAO,IAAMA,EAAeC,EAACC,GAAQA,IAChC,OAAOA,EAAI,eAAkB,UAC1B,OAAOA,EAAI,gBAAmB,UAC9B,OAAOA,EAAI,aAAgB,UAC3B,OAAOA,EAAI,YAAe,UAC1B,OAAOA,EAAI,eAAkB,UALT,gBCCrB,IAAMC,EAAkB,kFCDxB,IAAMC,EAAmBC,EAAA,MAAOC,EAAWC,EAAO,CAAC,EAAGC,IAAuB,CAChF,GAAM,CAAE,cAAAC,CAAc,EAAI,KAAM,QAAO,yBAAkC,EACnEC,EAAWL,EAACM,GAASJ,EAAK,eAAeI,CAAI,GAAKJ,EAAK,qBAAqBI,CAAI,GAAKH,IAAqBG,CAAI,EAAnG,YAMjB,OALsB,IAAIF,EAAc,OAAO,OAAO,CAAC,EAAGF,EAAK,cAAgB,CAAC,EAAG,CAC/E,OAAQD,GAAaC,EAAK,cAAc,OACxC,OAAQG,EAAS,QAAQ,EACzB,eAAgBA,EAAS,gBAAgB,CAC7C,CAAC,CAAC,CAEN,EATgC,oBCCzB,IAAME,EAAqBC,EAAA,MAAOC,EAAUC,EAAWC,EAAO,CAAC,EAAGC,IAAuB,CAC5F,GAAM,CAAE,mBAAAC,CAAmB,EAAI,KAAM,QAAO,yBAAkC,EAE9E,OADsB,MAAMC,EAAiBJ,EAAWC,EAAMC,CAAkB,GAC3D,KAAK,IAAIC,EAAmB,CAC7C,SAAUJ,EAAS,SACnB,aAAcA,EAAS,aACvB,aAAcA,EAAS,aACvB,UAAW,eACf,CAAC,CAAC,CACN,EATkC,sBCC3B,IAAMM,EAAsBC,EAACC,GAAU,CAC1C,GAAIA,EAAM,YAAcA,EAAM,WAAW,QAAQ,EAAI,KAAK,IAAI,EAC1D,MAAM,IAAIC,EAAmB,qBAAqBC,CAAe,GAAI,EAAK,CAElF,EAJmC,uBCA5B,IAAMC,EAAmBC,EAAA,CAACC,EAAKC,EAAOC,EAAa,KAAU,CAChE,GAAI,OAAOD,EAAU,IACjB,MAAM,IAAIE,EAAmB,0BAA0BH,CAAG,iBAAiBE,EAAa,mBAAqB,EAAE,KAAKE,CAAe,GAAI,EAAK,CAEpJ,EAJgC,oBCDhC,OAAS,YAAYC,MAAkB,UACvC,GAAM,CAAE,UAAAC,CAAU,EAAIC,EACTC,EAAsBC,EAAA,CAACC,EAAIC,IAAa,CACjD,IAAMC,EAAgBC,EAAoBH,CAAE,EACtCI,EAAc,KAAK,UAAUH,EAAU,KAAM,CAAC,EACpD,OAAOL,EAAUM,EAAeE,CAAW,CAC/C,EAJmC,uBCGnC,IAAMC,EAA0B,IAAI,IACvBC,EAAUC,EAAA,CAACC,EAAO,CAAC,IAAM,MAAO,CAAE,mBAAAC,CAAmB,EAAI,CAAC,IAAM,CACzED,EAAK,QAAQ,MAAM,oCAAoC,EACvD,IAAME,EAAW,MAAMC,EAAgBH,CAAI,EACrCI,EAAcC,EAAe,CAC/B,QAASL,EAAK,SAAWC,GAAoB,OACjD,CAAC,EACKK,EAAUJ,EAASE,CAAW,EACpC,GAAKE,GAGA,GAAI,CAACA,EAAQ,YACd,MAAM,IAAIC,EAAmB,YAAYH,CAAW,+CAA+C,MAHnG,OAAM,IAAIG,EAAmB,YAAYH,CAAW,mDAAoD,EAAK,EAKjH,IAAMI,EAAiBF,EAAQ,YAEzBG,GADc,MAAMC,EAAmBV,CAAI,GAClBQ,CAAc,EAC7C,GAAI,CAACC,EACD,MAAM,IAAIF,EAAmB,gBAAgBC,CAAc,mDAAoD,EAAK,EAExH,QAAWG,IAAyB,CAAC,gBAAiB,YAAY,EAC9D,GAAI,CAACF,EAAWE,CAAqB,EACjC,MAAM,IAAIJ,EAAmB,gBAAgBC,CAAc,mCAAmCG,CAAqB,KAAM,EAAK,EAGtI,IAAMC,EAAcH,EAAW,cACzBI,EAAYJ,EAAW,WACzBK,EACJ,GAAI,CACAA,EAAW,MAAMC,EAAoBP,CAAc,CACvD,MACU,CACN,MAAM,IAAID,EAAmB,iDAAiDH,CAAW,iCAAiCY,CAAe,GAAI,EAAK,CACtJ,CACAC,EAAiB,cAAeH,EAAS,WAAW,EACpDG,EAAiB,YAAaH,EAAS,SAAS,EAChD,GAAM,CAAE,YAAAI,EAAa,UAAAC,CAAU,EAAIL,EAC7BM,EAAgB,CAClB,MAAOF,EACP,WAAY,IAAI,KAAKC,CAAS,CAClC,EACA,GAAIC,EAAc,WAAW,QAAQ,EAAI,KAAK,IAAI,EAAI,IAClD,OAAOA,EAEX,IAAMC,EAAyBxB,EAAwB,IAAIW,CAAc,GAAK,EAC9E,GAAI,KAAK,IAAI,EAAIa,EAAyB,GAAK,IAC3C,OAAAC,EAAoBF,CAAa,EAC1BA,EAEXH,EAAiB,WAAYH,EAAS,SAAU,EAAI,EACpDG,EAAiB,eAAgBH,EAAS,aAAc,EAAI,EAC5DG,EAAiB,eAAgBH,EAAS,aAAc,EAAI,EAC5D,GAAI,CACAjB,EAAwB,IAAIW,EAAgB,KAAK,IAAI,CAAC,EACtD,IAAMe,EAAkB,MAAMC,EAAmBV,EAAUD,EAAWb,EAAMC,CAAkB,EAC9FgB,EAAiB,cAAeM,EAAgB,WAAW,EAC3DN,EAAiB,YAAaM,EAAgB,SAAS,EACvD,IAAME,EAAqB,IAAI,KAAK,KAAK,IAAI,EAAIF,EAAgB,UAAY,GAAI,EACjF,GAAI,CACA,MAAMG,EAAoBlB,EAAgB,CACtC,GAAGM,EACH,YAAaS,EAAgB,YAC7B,UAAWE,EAAmB,YAAY,EAC1C,aAAcF,EAAgB,YAClC,CAAC,CACL,MACc,CACd,CACA,MAAO,CACH,MAAOA,EAAgB,YACvB,WAAYE,CAChB,CACJ,MACc,CACV,OAAAH,EAAoBF,CAAa,EAC1BA,CACX,CACJ,EA5EuB,WCJvB,IAAMO,EAA+B,GACxBC,EAAwBC,EAAA,MAAO,CAAE,YAAAC,EAAa,WAAAC,EAAY,aAAAC,EAAc,UAAAC,EAAW,YAAAC,EAAa,UAAAC,EAAW,aAAAC,EAAc,mBAAAC,EAAoB,mBAAAC,EAAoB,QAAAC,EAAS,SAAAC,EAAU,eAAAC,EAAgB,YAAAC,EAAa,OAAAC,CAAQ,IAAM,CACxO,IAAIC,EACEC,EAAiB,gFACvB,GAAId,EACA,GAAI,CACA,IAAMe,EAAS,MAAMC,EAAoB,CACrC,QAAAR,EACA,SAAAC,EACA,eAAAC,EACA,YAAAC,EACA,aAAAN,EACA,mBAAAC,EACA,OAAAM,CACJ,CAAC,EAAE,CAAE,mBAAAL,CAAmB,CAAC,EACzBM,EAAQ,CACJ,YAAaE,EAAO,MACpB,UAAW,IAAI,KAAKA,EAAO,UAAU,EAAE,YAAY,CACvD,CACJ,OACOE,EAAG,CACN,MAAM,IAAIC,EAAyBD,EAAE,QAAS,CAC1C,YAAarB,EACb,OAAAgB,CACJ,CAAC,CACL,KAGA,IAAI,CACAC,EAAQ,MAAMM,EAAoBpB,CAAW,CACjD,MACU,CACN,MAAM,IAAImB,EAAyB,4DAA4DJ,CAAc,GAAI,CAC7G,YAAalB,EACb,OAAAgB,CACJ,CAAC,CACL,CAEJ,GAAI,IAAI,KAAKC,EAAM,SAAS,EAAE,QAAQ,EAAI,KAAK,IAAI,GAAK,EACpD,MAAM,IAAIK,EAAyB,6DAA6DJ,CAAc,GAAI,CAC9G,YAAalB,EACb,OAAAgB,CACJ,CAAC,EAEL,GAAM,CAAE,YAAAQ,CAAY,EAAIP,EAClB,CAAE,UAAAQ,EAAW,0BAAAC,CAA0B,EAAI,KAAM,QAAO,wBAAc,EACtEC,EAAMnB,GACR,IAAIiB,EAAU,OAAO,OAAO,CAAC,EAAGhB,GAAgB,CAAC,EAAG,CAChD,OAAQA,GAAc,QAAUE,GAAoB,QAAUD,GAAoB,OAClF,OAAQD,GAAc,QAAUH,EAChC,eAAgBG,GAAc,gBAAkBE,GAAoB,gBAAkBD,GAAoB,cAC9G,CAAC,CAAC,EACFkB,EACJ,GAAI,CACAA,EAAU,MAAMD,EAAI,KAAK,IAAID,EAA0B,CACnD,UAAWrB,EACX,SAAUE,EACV,YAAAiB,CACJ,CAAC,CAAC,CACN,OACOH,EAAG,CACN,MAAM,IAAIC,EAAyBD,EAAG,CAClC,YAAarB,EACb,OAAAgB,CACJ,CAAC,CACL,CACA,GAAM,CAAE,gBAAiB,CAAE,YAAAa,EAAa,gBAAAC,EAAiB,aAAAC,EAAc,WAAAC,EAAY,gBAAAC,EAAiB,UAAAC,CAAU,EAAI,CAAC,CAAG,EAAIN,EAC1H,GAAI,CAACC,GAAe,CAACC,GAAmB,CAACC,GAAgB,CAACC,EACtD,MAAM,IAAIV,EAAyB,+CAAgD,CAC/E,YAAatB,EACb,OAAAgB,CACJ,CAAC,EAEL,IAAMmB,EAAc,CAChB,YAAAN,EACA,gBAAAC,EACA,aAAAC,EACA,WAAY,IAAI,KAAKC,CAAU,EAC/B,GAAIC,GAAmB,CAAE,gBAAAA,CAAgB,EACzC,GAAIC,GAAa,CAAE,UAAAA,CAAU,CACjC,EACA,OAAI9B,EACAgC,EAAqBD,EAAa,kBAAmB,GAAG,EAGxDC,EAAqBD,EAAa,yBAA0B,GAAG,EAE5DA,CACX,EAvFqC,yBCH9B,IAAME,EAAqBC,EAAA,CAACC,EAASC,IAAW,CACnD,GAAM,CAAE,cAAAC,EAAe,eAAAC,EAAgB,WAAAC,EAAY,cAAAC,CAAc,EAAIL,EACrE,GAAI,CAACE,GAAiB,CAACC,GAAkB,CAACC,GAAc,CAACC,EACrD,MAAM,IAAIC,EAAyB,iJACwB,OAAO,KAAKN,CAAO,EAAE,KAAK,IAAI,CAAC;AAAA,oFAAwF,CAAE,YAAa,GAAO,OAAAC,CAAO,CAAC,EAEpN,OAAOD,CACX,EAPkC,sBCG3B,IAAMO,EAAUC,EAAA,CAACC,EAAO,CAAC,IAAM,MAAO,CAAE,mBAAAC,CAAmB,EAAI,CAAC,IAAM,CACzED,EAAK,QAAQ,MAAM,4CAA4C,EAC/D,GAAM,CAAE,YAAAE,EAAa,aAAAC,EAAc,UAAAC,EAAW,YAAAC,EAAa,WAAAC,CAAW,EAAIN,EACpE,CAAE,UAAAO,CAAU,EAAIP,EAChBQ,EAAcC,EAAe,CAC/B,QAAST,EAAK,SAAWC,GAAoB,OACjD,CAAC,EACD,GAAI,CAACC,GAAe,CAACC,GAAgB,CAACC,GAAa,CAACC,GAAe,CAACC,EAAY,CAE5E,IAAMI,GADW,MAAMC,EAAgBX,CAAI,GAClBQ,CAAW,EACpC,GAAI,CAACE,EACD,MAAM,IAAIE,EAAyB,WAAWJ,CAAW,kBAAmB,CAAE,OAAQR,EAAK,MAAO,CAAC,EAEvG,GAAI,CAACa,EAAaH,CAAO,EACrB,MAAM,IAAIE,EAAyB,WAAWJ,CAAW,2CAA4C,CACjG,OAAQR,EAAK,MACjB,CAAC,EAEL,GAAIU,GAAS,YAAa,CAEtB,IAAMI,GADc,MAAMC,EAAmBf,CAAI,GACrBU,EAAQ,WAAW,EACzCM,EAAc,8BAA8BR,CAAW,oBAAoBE,EAAQ,WAAW,GACpG,GAAIN,GAAaA,IAAcU,EAAQ,WACnC,MAAM,IAAIF,EAAyB,yBAA2BI,EAAa,CACvE,YAAa,GACb,OAAQhB,EAAK,MACjB,CAAC,EAEL,GAAIE,GAAeA,IAAgBY,EAAQ,cACvC,MAAM,IAAIF,EAAyB,4BAA8BI,EAAa,CAC1E,YAAa,GACb,OAAQhB,EAAK,MACjB,CAAC,EAELU,EAAQ,WAAaI,EAAQ,WAC7BJ,EAAQ,cAAgBI,EAAQ,aACpC,CACA,GAAM,CAAE,cAAAG,EAAe,eAAAC,EAAgB,WAAAC,EAAY,cAAAC,EAAe,YAAAC,CAAY,EAAIC,EAAmBZ,EAASV,EAAK,MAAM,EACzH,OAAOuB,EAAsB,CACzB,YAAaN,EACb,WAAYI,EACZ,aAAcH,EACd,UAAWC,EACX,YAAaC,EACb,UAAWb,EACX,aAAcP,EAAK,aACnB,mBAAoBA,EAAK,mBACzB,mBAAoBA,EAAK,mBACzB,QAASQ,EACT,SAAUR,EAAK,SACf,eAAgBA,EAAK,eACrB,YAAaA,EAAK,YAClB,OAAQA,EAAK,MACjB,CAAC,CACL,KACK,IAAI,CAACE,GAAe,CAACC,GAAgB,CAACC,GAAa,CAACC,EACrD,MAAM,IAAIO,EAAyB,+HAC8B,CAAE,YAAa,GAAO,OAAQZ,EAAK,MAAO,CAAC,EAG5G,OAAOuB,EAAsB,CACzB,YAAArB,EACA,WAAAI,EACA,aAAAH,EACA,UAAAC,EACA,YAAAC,EACA,UAAAE,EACA,aAAcP,EAAK,aACnB,mBAAoBA,EAAK,mBACzB,mBAAoBA,EAAK,mBACzB,QAASQ,EACT,SAAUR,EAAK,SACf,eAAgBA,EAAK,eACrB,YAAaA,EAAK,YAClB,OAAQA,EAAK,MACjB,CAAC,EAET,EA7EuB",
6
+ "names": ["isSsoProfile", "__name", "arg", "REFRESH_MESSAGE", "getSsoOidcClient", "__name", "ssoRegion", "init", "callerClientConfig", "SSOOIDCClient", "coalesce", "prop", "getNewSsoOidcToken", "__name", "ssoToken", "ssoRegion", "init", "callerClientConfig", "CreateTokenCommand", "getSsoOidcClient", "validateTokenExpiry", "__name", "token", "TokenProviderError", "REFRESH_MESSAGE", "validateTokenKey", "__name", "key", "value", "forRefresh", "TokenProviderError", "REFRESH_MESSAGE", "fsPromises", "writeFile", "fsPromises", "writeSSOTokenToFile", "__name", "id", "ssoToken", "tokenFilepath", "getSSOTokenFilepath", "tokenString", "lastRefreshAttemptTimes", "fromSso", "__name", "init", "callerClientConfig", "profiles", "parseKnownFiles", "profileName", "getProfileName", "profile", "TokenProviderError", "ssoSessionName", "ssoSession", "loadSsoSessionData", "ssoSessionRequiredKey", "ssoStartUrl", "ssoRegion", "ssoToken", "getSSOTokenFromFile", "REFRESH_MESSAGE", "validateTokenKey", "accessToken", "expiresAt", "existingToken", "lastRefreshAttemptTime", "validateTokenExpiry", "newSsoOidcToken", "getNewSsoOidcToken", "newTokenExpiration", "writeSSOTokenToFile", "SHOULD_FAIL_CREDENTIAL_CHAIN", "resolveSSOCredentials", "__name", "ssoStartUrl", "ssoSession", "ssoAccountId", "ssoRegion", "ssoRoleName", "ssoClient", "clientConfig", "parentClientConfig", "callerClientConfig", "profile", "filepath", "configFilepath", "ignoreCache", "logger", "token", "refreshMessage", "_token", "fromSso", "e", "CredentialsProviderError", "getSSOTokenFromFile", "accessToken", "SSOClient", "GetRoleCredentialsCommand", "sso", "ssoResp", "accessKeyId", "secretAccessKey", "sessionToken", "expiration", "credentialScope", "accountId", "credentials", "setCredentialFeature", "validateSsoProfile", "__name", "profile", "logger", "sso_start_url", "sso_account_id", "sso_region", "sso_role_name", "CredentialsProviderError", "fromSSO", "__name", "init", "callerClientConfig", "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName", "ssoSession", "ssoClient", "profileName", "getProfileName", "profile", "parseKnownFiles", "CredentialsProviderError", "isSsoProfile", "session", "loadSsoSessionData", "conflictMsg", "sso_start_url", "sso_account_id", "sso_region", "sso_role_name", "sso_session", "validateSsoProfile", "resolveSSOCredentials"]
7
+ }
@@ -0,0 +1,2 @@
1
+ /* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
2
+ import{a,b,c}from"./chunk-5EEREEGM.mjs";import"./chunk-UEL4UF23.mjs";import"./chunk-OV75J3RB.mjs";import"./chunk-ZH5DZOB5.mjs";import"./chunk-MATUPZWL.mjs";import"./chunk-5JDAL5HL.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-NX6AKUU3.mjs";import"./chunk-CFZ5JWD3.mjs";export{c as credentialsTreatedAsExpired,b as credentialsWillNeedRefresh,a as defaultProvider};
@@ -0,0 +1,7 @@
1
+ {
2
+ "version": 3,
3
+ "sources": [],
4
+ "sourcesContent": [],
5
+ "mappings": "",
6
+ "names": []
7
+ }
@@ -0,0 +1,2 @@
1
+ /* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
2
+ import{b as P,p as a,v as N,z as R}from"./chunk-DDOSB7QU.mjs";import"./chunk-RO44VKXZ.mjs";import{c as A}from"./chunk-IHCR62UU.mjs";import"./chunk-NX6AKUU3.mjs";import{a as h}from"./chunk-CFZ5JWD3.mjs";import{createHash as $,createPrivateKey as H,createPublicKey as K,sign as v}from"node:crypto";import{promises as E}from"node:fs";import{homedir as _}from"node:os";import{dirname as B,join as b}from"node:path";var w=class c{static{h(this,"LoginCredentialsFetcher")}profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300*1e3;constructor(e,t,s){this.profileData=e,this.init=t,this.callerClientConfig=s}async loadCredentials(){let e=await this.loadToken();if(!e)throw new a(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let t=e.accessToken,s=Date.now();return new Date(t.expiresAt).getTime()-s<=c.REFRESH_THRESHOLD?this.refresh(e):this.toCredentials(e.accessToken)}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}toCredentials(e){return{accessKeyId:e.accessKeyId,secretAccessKey:e.secretAccessKey,sessionToken:e.sessionToken,accountId:e.accountId,expiration:new Date(e.expiresAt)}}async refresh(e){let t=await this.loadToken().catch(()=>e),s=Date.now(),r=new Date(t.accessToken.expiresAt).getTime(),i=new Date(e.accessToken.expiresAt).getTime(),o=r<=s&&i>s?e:t;if(new Date(o.accessToken.expiresAt).getTime()-Date.now()>c.REFRESH_THRESHOLD)return this.toCredentials(o.accessToken);let{SigninClient:p,CreateOAuth2TokenCommand:y}=await import("./signin-WDXS6SW2.mjs"),{logger:m,userAgentAppId:T}=this.callerClientConfig??{},x=h(n=>n?.metadata?.handlerProtocol==="h2","isH2")(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,d=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,u=new p({credentials:{accessKeyId:"",secretAccessKey:""},region:d,requestHandler:x,logger:m,userAgentAppId:T,...this.init?.clientConfig});this.createDPoPInterceptor(u.middlewareStack);let D={tokenInput:{clientId:o.clientId,refreshToken:o.refreshToken,grantType:"refresh_token"}};try{let n=await u.send(new y(D)),{accessKeyId:g,secretAccessKey:k,sessionToken:f}=n.tokenOutput?.accessToken??{},{refreshToken:C,expiresIn:F}=n.tokenOutput??{};if(!g||!k||!f||!C)throw new a("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let L=(F??900)*1e3,O=new Date(Date.now()+L),I={...o,accessToken:{...o.accessToken,accessKeyId:g,secretAccessKey:k,sessionToken:f,expiresAt:O.toISOString()},refreshToken:C};return await this.saveToken(I),this.toCredentials(I.accessToken)}catch(n){if(n.name==="AccessDeniedException"){let k=n.error,f;switch(k){case"TOKEN_EXPIRED":f="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":f="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":f="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:f=`Failed to refresh token: ${String(n)}. Please re-authenticate using \`aws login\``}throw new a(f,{logger:this.logger,tryNextLink:!1})}if(new Date(o.accessToken.expiresAt).getTime()>Date.now())return this.logger?.warn?.(`Failed to refresh token: ${String(n)}. Using existing token until expiry.`),this.toCredentials(o.accessToken);throw new a(`Failed to refresh token: ${String(n)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let e=this.getTokenFilePath();try{let t=await E.readFile(e,"utf8"),s=JSON.parse(t),r=["accessToken","clientId","refreshToken","dpopKey"].filter(i=>!s[i]);if(s.accessToken?.accountId||r.push("accountId"),r.length>0)throw new a(`Token validation failed, missing fields: ${r.join(", ")}`,{logger:this.logger,tryNextLink:!1});return s}catch(t){throw new a(`Failed to load token from ${e}: ${String(t)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(e){let t=this.getTokenFilePath(),s=B(t);try{await E.mkdir(s,{recursive:!0})}catch{}await E.writeFile(t,JSON.stringify(e,null,2),"utf8")}getTokenFilePath(){let e=process.env.AWS_LOGIN_CACHE_DIRECTORY??b(_(),".aws","login","cache"),t=Buffer.from(this.loginSession,"utf8"),s=$("sha256").update(t).digest("hex");return b(e,`${s}.json`)}derToRawSignature(e){let t=2;if(e[t]!==2)throw new Error("Invalid DER signature");t++;let s=e[t++],r=e.subarray(t,t+s);if(t+=s,e[t]!==2)throw new Error("Invalid DER signature");t++;let i=e[t++],o=e.subarray(t,t+i);r=r[0]===0?r.subarray(1):r,o=o[0]===0?o.subarray(1):o;let l=Buffer.concat([Buffer.alloc(32-r.length),r]),p=Buffer.concat([Buffer.alloc(32-o.length),o]);return Buffer.concat([l,p])}createDPoPInterceptor(e){e.add(t=>async s=>{if(A.isInstance(s.request)){let r=s.request,i=`${r.protocol}//${r.hostname}${r.port?`:${r.port}`:""}${r.path}`,o=await this.generateDpop(r.method,i);r.headers={...r.headers,DPoP:o}}return t(s)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(e="POST",t){let s=await this.loadToken();try{let r=H({key:s.dpopKey,format:"pem",type:"sec1"}),o=K(r).export({format:"der",type:"spki"}),l=-1;for(let g=0;g<o.length;g++)if(o[g]===4){l=g;break}let p=o.slice(l+1,l+33),y=o.slice(l+33,l+65),m={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:p.toString("base64url"),y:y.toString("base64url")}},T={jti:crypto.randomUUID(),htm:e,htu:t,iat:Math.floor(Date.now()/1e3)},S=Buffer.from(JSON.stringify(m)).toString("base64url"),x=Buffer.from(JSON.stringify(T)).toString("base64url"),d=`${S}.${x}`,u=v("sha256",Buffer.from(d),r),n=this.derToRawSignature(u).toString("base64url");return`${d}.${n}`}catch(r){throw new a(`Failed to generate Dpop proof: ${r instanceof Error?r.message:String(r)}`,{logger:this.logger,tryNextLink:!1})}}};var q=h(c=>async({callerClientConfig:e}={})=>{c?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let t=await R(c||{}),s=N({profile:c?.profile??e?.profile}),r=t[s];if(!r?.login_session)throw new a(`Profile ${s} does not contain login_session.`,{tryNextLink:!0,logger:c?.logger});let o=await new w(r,c,e).loadCredentials();return P(o,"CREDENTIALS_LOGIN","AD")},"fromLoginCredentials");export{q as fromLoginCredentials};
@@ -0,0 +1,7 @@
1
+ {
2
+ "version": 3,
3
+ "sources": ["../../../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.80/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.80/node_modules/@aws-sdk/credential-provider-login/dist-es/fromLoginCredentials.js"],
4
+ "sourcesContent": ["import { CredentialsProviderError } from \"@smithy/core/config\";\nimport { HttpRequest } from \"@smithy/core/protocols\";\nimport { createHash, createPrivateKey, createPublicKey, sign } from \"node:crypto\";\nimport { promises as fs } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nexport class LoginCredentialsFetcher {\n profileData;\n init;\n callerClientConfig;\n static REFRESH_THRESHOLD = 5 * 60 * 1000;\n constructor(profileData, init, callerClientConfig) {\n this.profileData = profileData;\n this.init = init;\n this.callerClientConfig = callerClientConfig;\n }\n async loadCredentials() {\n const token = await this.loadToken();\n if (!token) {\n throw new CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`, { tryNextLink: false, logger: this.logger });\n }\n const accessToken = token.accessToken;\n const now = Date.now();\n const expiryTime = new Date(accessToken.expiresAt).getTime();\n const timeUntilExpiry = expiryTime - now;\n if (timeUntilExpiry <= LoginCredentialsFetcher.REFRESH_THRESHOLD) {\n return this.refresh(token);\n }\n return this.toCredentials(token.accessToken);\n }\n get logger() {\n return this.init?.logger;\n }\n get loginSession() {\n return this.profileData.login_session;\n }\n toCredentials(token) {\n return {\n accessKeyId: token.accessKeyId,\n secretAccessKey: token.secretAccessKey,\n sessionToken: token.sessionToken,\n accountId: token.accountId,\n expiration: new Date(token.expiresAt),\n };\n }\n async refresh(token) {\n const diskToken = await this.loadToken().catch(() => token);\n const now = Date.now();\n const diskExpiry = new Date(diskToken.accessToken.expiresAt).getTime();\n const tokenExpiry = new Date(token.accessToken.expiresAt).getTime();\n const freshToken = diskExpiry <= now && tokenExpiry > now ? token : diskToken;\n const freshExpiry = new Date(freshToken.accessToken.expiresAt).getTime();\n if (freshExpiry - Date.now() > LoginCredentialsFetcher.REFRESH_THRESHOLD) {\n return this.toCredentials(freshToken.accessToken);\n }\n const { SigninClient, CreateOAuth2TokenCommand } = await import(\"@aws-sdk/nested-clients/signin\");\n const { logger, userAgentAppId } = this.callerClientConfig ?? {};\n const isH2 = (requestHandler) => {\n return requestHandler?.metadata?.handlerProtocol === \"h2\";\n };\n const requestHandler = isH2(this.callerClientConfig?.requestHandler)\n ? undefined\n : this.callerClientConfig?.requestHandler;\n const region = this.profileData.region ?? (await this.callerClientConfig?.region?.()) ?? process.env.AWS_REGION;\n const client = new SigninClient({\n credentials: {\n accessKeyId: \"\",\n secretAccessKey: \"\",\n },\n region,\n requestHandler,\n logger,\n userAgentAppId,\n ...this.init?.clientConfig,\n });\n this.createDPoPInterceptor(client.middlewareStack);\n const commandInput = {\n tokenInput: {\n clientId: freshToken.clientId,\n refreshToken: freshToken.refreshToken,\n grantType: \"refresh_token\",\n },\n };\n try {\n const response = await client.send(new CreateOAuth2TokenCommand(commandInput));\n const { accessKeyId, secretAccessKey, sessionToken } = response.tokenOutput?.accessToken ?? {};\n const { refreshToken, expiresIn } = response.tokenOutput ?? {};\n if (!accessKeyId || !secretAccessKey || !sessionToken || !refreshToken) {\n throw new CredentialsProviderError(\"Token refresh response missing required fields\", {\n logger: this.logger,\n tryNextLink: false,\n });\n }\n const expiresInMs = (expiresIn ?? 900) * 1000;\n const expiration = new Date(Date.now() + expiresInMs);\n const updatedToken = {\n ...freshToken,\n accessToken: {\n ...freshToken.accessToken,\n accessKeyId,\n secretAccessKey,\n sessionToken,\n expiresAt: expiration.toISOString(),\n },\n refreshToken,\n };\n await this.saveToken(updatedToken);\n return this.toCredentials(updatedToken.accessToken);\n }\n catch (error) {\n if (error.name === \"AccessDeniedException\") {\n const errorType = error.error;\n let message;\n switch (errorType) {\n case \"TOKEN_EXPIRED\":\n message = \"Your session has expired. Please reauthenticate.\";\n break;\n case \"USER_CREDENTIALS_CHANGED\":\n message =\n \"Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.\";\n break;\n case \"INSUFFICIENT_PERMISSIONS\":\n message =\n \"Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.\";\n break;\n default:\n message = `Failed to refresh token: ${String(error)}. Please re-authenticate using \\`aws login\\``;\n }\n throw new CredentialsProviderError(message, {\n logger: this.logger,\n tryNextLink: false,\n });\n }\n const tokenExpiry = new Date(freshToken.accessToken.expiresAt).getTime();\n if (tokenExpiry > Date.now()) {\n this.logger?.warn?.(`Failed to refresh token: ${String(error)}. Using existing token until expiry.`);\n return this.toCredentials(freshToken.accessToken);\n }\n throw new CredentialsProviderError(`Failed to refresh token: ${String(error)}. Please re-authenticate using aws login`, { logger: this.logger });\n }\n }\n async loadToken() {\n const tokenFilePath = this.getTokenFilePath();\n try {\n const tokenData = await fs.readFile(tokenFilePath, \"utf8\");\n const token = JSON.parse(tokenData);\n const missingFields = [\"accessToken\", \"clientId\", \"refreshToken\", \"dpopKey\"].filter((k) => !token[k]);\n if (!token.accessToken?.accountId) {\n missingFields.push(\"accountId\");\n }\n if (missingFields.length > 0) {\n throw new CredentialsProviderError(`Token validation failed, missing fields: ${missingFields.join(\", \")}`, {\n logger: this.logger,\n tryNextLink: false,\n });\n }\n return token;\n }\n catch (error) {\n throw new CredentialsProviderError(`Failed to load token from ${tokenFilePath}: ${String(error)}`, {\n logger: this.logger,\n tryNextLink: false,\n });\n }\n }\n async saveToken(token) {\n const tokenFilePath = this.getTokenFilePath();\n const directory = dirname(tokenFilePath);\n try {\n await fs.mkdir(directory, { recursive: true });\n }\n catch (error) {\n }\n await fs.writeFile(tokenFilePath, JSON.stringify(token, null, 2), \"utf8\");\n }\n getTokenFilePath() {\n const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? join(homedir(), \".aws\", \"login\", \"cache\");\n const loginSessionBytes = Buffer.from(this.loginSession, \"utf8\");\n const loginSessionSha256 = createHash(\"sha256\").update(loginSessionBytes).digest(\"hex\");\n return join(directory, `${loginSessionSha256}.json`);\n }\n derToRawSignature(derSignature) {\n let offset = 2;\n if (derSignature[offset] !== 0x02) {\n throw new Error(\"Invalid DER signature\");\n }\n offset++;\n const rLength = derSignature[offset++];\n let r = derSignature.subarray(offset, offset + rLength);\n offset += rLength;\n if (derSignature[offset] !== 0x02) {\n throw new Error(\"Invalid DER signature\");\n }\n offset++;\n const sLength = derSignature[offset++];\n let s = derSignature.subarray(offset, offset + sLength);\n r = r[0] === 0x00 ? r.subarray(1) : r;\n s = s[0] === 0x00 ? s.subarray(1) : s;\n const rPadded = Buffer.concat([Buffer.alloc(32 - r.length), r]);\n const sPadded = Buffer.concat([Buffer.alloc(32 - s.length), s]);\n return Buffer.concat([rPadded, sPadded]);\n }\n createDPoPInterceptor(middlewareStack) {\n middlewareStack.add((next) => async (args) => {\n if (HttpRequest.isInstance(args.request)) {\n const request = args.request;\n const actualEndpoint = `${request.protocol}//${request.hostname}${request.port ? `:${request.port}` : \"\"}${request.path}`;\n const dpop = await this.generateDpop(request.method, actualEndpoint);\n request.headers = {\n ...request.headers,\n DPoP: dpop,\n };\n }\n return next(args);\n }, {\n step: \"finalizeRequest\",\n name: \"dpopInterceptor\",\n override: true,\n });\n }\n async generateDpop(method = \"POST\", endpoint) {\n const token = await this.loadToken();\n try {\n const privateKey = createPrivateKey({\n key: token.dpopKey,\n format: \"pem\",\n type: \"sec1\",\n });\n const publicKey = createPublicKey(privateKey);\n const publicDer = publicKey.export({ format: \"der\", type: \"spki\" });\n let pointStart = -1;\n for (let i = 0; i < publicDer.length; i++) {\n if (publicDer[i] === 0x04) {\n pointStart = i;\n break;\n }\n }\n const x = publicDer.slice(pointStart + 1, pointStart + 33);\n const y = publicDer.slice(pointStart + 33, pointStart + 65);\n const header = {\n alg: \"ES256\",\n typ: \"dpop+jwt\",\n jwk: {\n kty: \"EC\",\n crv: \"P-256\",\n x: x.toString(\"base64url\"),\n y: y.toString(\"base64url\"),\n },\n };\n const payload = {\n jti: crypto.randomUUID(),\n htm: method,\n htu: endpoint,\n iat: Math.floor(Date.now() / 1000),\n };\n const headerB64 = Buffer.from(JSON.stringify(header)).toString(\"base64url\");\n const payloadB64 = Buffer.from(JSON.stringify(payload)).toString(\"base64url\");\n const message = `${headerB64}.${payloadB64}`;\n const asn1Signature = sign(\"sha256\", Buffer.from(message), privateKey);\n const rawSignature = this.derToRawSignature(asn1Signature);\n const signatureB64 = rawSignature.toString(\"base64url\");\n return `${message}.${signatureB64}`;\n }\n catch (error) {\n throw new CredentialsProviderError(`Failed to generate Dpop proof: ${error instanceof Error ? error.message : String(error)}`, { logger: this.logger, tryNextLink: false });\n }\n }\n}\n", "import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { CredentialsProviderError, getProfileName, parseKnownFiles } from \"@smithy/core/config\";\nimport { LoginCredentialsFetcher } from \"./LoginCredentialsFetcher\";\nexport const fromLoginCredentials = (init) => async ({ callerClientConfig } = {}) => {\n init?.logger?.debug?.(\"@aws-sdk/credential-providers - fromLoginCredentials\");\n const profiles = await parseKnownFiles(init || {});\n const profileName = getProfileName({\n profile: init?.profile ?? callerClientConfig?.profile,\n });\n const profile = profiles[profileName];\n if (!profile?.login_session) {\n throw new CredentialsProviderError(`Profile ${profileName} does not contain login_session.`, {\n tryNextLink: true,\n logger: init?.logger,\n });\n }\n const fetcher = new LoginCredentialsFetcher(profile, init, callerClientConfig);\n const credentials = await fetcher.loadCredentials();\n return setCredentialFeature(credentials, \"CREDENTIALS_LOGIN\", \"AD\");\n};\n"],
5
+ "mappings": ";0MAEA,OAAS,cAAAA,EAAY,oBAAAC,EAAkB,mBAAAC,EAAiB,QAAAC,MAAY,cACpE,OAAS,YAAYC,MAAU,UAC/B,OAAS,WAAAC,MAAe,UACxB,OAAS,WAAAC,EAAS,QAAAC,MAAY,YACvB,IAAMC,EAAN,MAAMC,CAAwB,CANrC,MAMqC,CAAAC,EAAA,gCACjC,YACA,KACA,mBACA,OAAO,kBAAoB,IAAS,IACpC,YAAYC,EAAaC,EAAMC,EAAoB,CAC/C,KAAK,YAAcF,EACnB,KAAK,KAAOC,EACZ,KAAK,mBAAqBC,CAC9B,CACA,MAAM,iBAAkB,CACpB,IAAMC,EAAQ,MAAM,KAAK,UAAU,EACnC,GAAI,CAACA,EACD,MAAM,IAAIC,EAAyB,sCAAsC,KAAK,YAAY,2CAA4C,CAAE,YAAa,GAAO,OAAQ,KAAK,MAAO,CAAC,EAErL,IAAMC,EAAcF,EAAM,YACpBG,EAAM,KAAK,IAAI,EAGrB,OAFmB,IAAI,KAAKD,EAAY,SAAS,EAAE,QAAQ,EACtBC,GACdR,EAAwB,kBACpC,KAAK,QAAQK,CAAK,EAEtB,KAAK,cAAcA,EAAM,WAAW,CAC/C,CACA,IAAI,QAAS,CACT,OAAO,KAAK,MAAM,MACtB,CACA,IAAI,cAAe,CACf,OAAO,KAAK,YAAY,aAC5B,CACA,cAAcA,EAAO,CACjB,MAAO,CACH,YAAaA,EAAM,YACnB,gBAAiBA,EAAM,gBACvB,aAAcA,EAAM,aACpB,UAAWA,EAAM,UACjB,WAAY,IAAI,KAAKA,EAAM,SAAS,CACxC,CACJ,CACA,MAAM,QAAQA,EAAO,CACjB,IAAMI,EAAY,MAAM,KAAK,UAAU,EAAE,MAAM,IAAMJ,CAAK,EACpDG,EAAM,KAAK,IAAI,EACfE,EAAa,IAAI,KAAKD,EAAU,YAAY,SAAS,EAAE,QAAQ,EAC/DE,EAAc,IAAI,KAAKN,EAAM,YAAY,SAAS,EAAE,QAAQ,EAC5DO,EAAaF,GAAcF,GAAOG,EAAcH,EAAMH,EAAQI,EAEpE,GADoB,IAAI,KAAKG,EAAW,YAAY,SAAS,EAAE,QAAQ,EACrD,KAAK,IAAI,EAAIZ,EAAwB,kBACnD,OAAO,KAAK,cAAcY,EAAW,WAAW,EAEpD,GAAM,CAAE,aAAAC,EAAc,yBAAAC,CAAyB,EAAI,KAAM,QAAO,uBAAgC,EAC1F,CAAE,OAAAC,EAAQ,eAAAC,CAAe,EAAI,KAAK,oBAAsB,CAAC,EAIzDC,EAHOhB,EAACgB,GACHA,GAAgB,UAAU,kBAAoB,KAD5C,QAGe,KAAK,oBAAoB,cAAc,EAC7D,OACA,KAAK,oBAAoB,eACzBC,EAAS,KAAK,YAAY,QAAW,MAAM,KAAK,oBAAoB,SAAS,GAAM,QAAQ,IAAI,WAC/FC,EAAS,IAAIN,EAAa,CAC5B,YAAa,CACT,YAAa,GACb,gBAAiB,EACrB,EACA,OAAAK,EACA,eAAAD,EACA,OAAAF,EACA,eAAAC,EACA,GAAG,KAAK,MAAM,YAClB,CAAC,EACD,KAAK,sBAAsBG,EAAO,eAAe,EACjD,IAAMC,EAAe,CACjB,WAAY,CACR,SAAUR,EAAW,SACrB,aAAcA,EAAW,aACzB,UAAW,eACf,CACJ,EACA,GAAI,CACA,IAAMS,EAAW,MAAMF,EAAO,KAAK,IAAIL,EAAyBM,CAAY,CAAC,EACvE,CAAE,YAAAE,EAAa,gBAAAC,EAAiB,aAAAC,CAAa,EAAIH,EAAS,aAAa,aAAe,CAAC,EACvF,CAAE,aAAAI,EAAc,UAAAC,CAAU,EAAIL,EAAS,aAAe,CAAC,EAC7D,GAAI,CAACC,GAAe,CAACC,GAAmB,CAACC,GAAgB,CAACC,EACtD,MAAM,IAAInB,EAAyB,iDAAkD,CACjF,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,EAEL,IAAMqB,GAAeD,GAAa,KAAO,IACnCE,EAAa,IAAI,KAAK,KAAK,IAAI,EAAID,CAAW,EAC9CE,EAAe,CACjB,GAAGjB,EACH,YAAa,CACT,GAAGA,EAAW,YACd,YAAAU,EACA,gBAAAC,EACA,aAAAC,EACA,UAAWI,EAAW,YAAY,CACtC,EACA,aAAAH,CACJ,EACA,aAAM,KAAK,UAAUI,CAAY,EAC1B,KAAK,cAAcA,EAAa,WAAW,CACtD,OACOC,EAAO,CACV,GAAIA,EAAM,OAAS,wBAAyB,CACxC,IAAMC,EAAYD,EAAM,MACpBE,EACJ,OAAQD,EAAW,CACf,IAAK,gBACDC,EAAU,mDACV,MACJ,IAAK,2BACDA,EACI,oHACJ,MACJ,IAAK,2BACDA,EACI,mIACJ,MACJ,QACIA,EAAU,4BAA4B,OAAOF,CAAK,CAAC,8CAC3D,CACA,MAAM,IAAIxB,EAAyB0B,EAAS,CACxC,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,CACL,CAEA,GADoB,IAAI,KAAKpB,EAAW,YAAY,SAAS,EAAE,QAAQ,EACrD,KAAK,IAAI,EACvB,YAAK,QAAQ,OAAO,4BAA4B,OAAOkB,CAAK,CAAC,sCAAsC,EAC5F,KAAK,cAAclB,EAAW,WAAW,EAEpD,MAAM,IAAIN,EAAyB,4BAA4B,OAAOwB,CAAK,CAAC,2CAA4C,CAAE,OAAQ,KAAK,MAAO,CAAC,CACnJ,CACJ,CACA,MAAM,WAAY,CACd,IAAMG,EAAgB,KAAK,iBAAiB,EAC5C,GAAI,CACA,IAAMC,EAAY,MAAMC,EAAG,SAASF,EAAe,MAAM,EACnD5B,EAAQ,KAAK,MAAM6B,CAAS,EAC5BE,EAAgB,CAAC,cAAe,WAAY,eAAgB,SAAS,EAAE,OAAQC,GAAM,CAAChC,EAAMgC,CAAC,CAAC,EAIpG,GAHKhC,EAAM,aAAa,WACpB+B,EAAc,KAAK,WAAW,EAE9BA,EAAc,OAAS,EACvB,MAAM,IAAI9B,EAAyB,4CAA4C8B,EAAc,KAAK,IAAI,CAAC,GAAI,CACvG,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,EAEL,OAAO/B,CACX,OACOyB,EAAO,CACV,MAAM,IAAIxB,EAAyB,6BAA6B2B,CAAa,KAAK,OAAOH,CAAK,CAAC,GAAI,CAC/F,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,CACL,CACJ,CACA,MAAM,UAAUzB,EAAO,CACnB,IAAM4B,EAAgB,KAAK,iBAAiB,EACtCK,EAAYC,EAAQN,CAAa,EACvC,GAAI,CACA,MAAME,EAAG,MAAMG,EAAW,CAAE,UAAW,EAAK,CAAC,CACjD,MACc,CACd,CACA,MAAMH,EAAG,UAAUF,EAAe,KAAK,UAAU5B,EAAO,KAAM,CAAC,EAAG,MAAM,CAC5E,CACA,kBAAmB,CACf,IAAMiC,EAAY,QAAQ,IAAI,2BAA6BE,EAAKC,EAAQ,EAAG,OAAQ,QAAS,OAAO,EAC7FC,EAAoB,OAAO,KAAK,KAAK,aAAc,MAAM,EACzDC,EAAqBC,EAAW,QAAQ,EAAE,OAAOF,CAAiB,EAAE,OAAO,KAAK,EACtF,OAAOF,EAAKF,EAAW,GAAGK,CAAkB,OAAO,CACvD,CACA,kBAAkBE,EAAc,CAC5B,IAAIC,EAAS,EACb,GAAID,EAAaC,CAAM,IAAM,EACzB,MAAM,IAAI,MAAM,uBAAuB,EAE3CA,IACA,IAAMC,EAAUF,EAAaC,GAAQ,EACjC,EAAID,EAAa,SAASC,EAAQA,EAASC,CAAO,EAEtD,GADAD,GAAUC,EACNF,EAAaC,CAAM,IAAM,EACzB,MAAM,IAAI,MAAM,uBAAuB,EAE3CA,IACA,IAAME,EAAUH,EAAaC,GAAQ,EACjCG,EAAIJ,EAAa,SAASC,EAAQA,EAASE,CAAO,EACtD,EAAI,EAAE,CAAC,IAAM,EAAO,EAAE,SAAS,CAAC,EAAI,EACpCC,EAAIA,EAAE,CAAC,IAAM,EAAOA,EAAE,SAAS,CAAC,EAAIA,EACpC,IAAMC,EAAU,OAAO,OAAO,CAAC,OAAO,MAAM,GAAK,EAAE,MAAM,EAAG,CAAC,CAAC,EACxDC,EAAU,OAAO,OAAO,CAAC,OAAO,MAAM,GAAKF,EAAE,MAAM,EAAGA,CAAC,CAAC,EAC9D,OAAO,OAAO,OAAO,CAACC,EAASC,CAAO,CAAC,CAC3C,CACA,sBAAsBC,EAAiB,CACnCA,EAAgB,IAAKC,GAAS,MAAOC,GAAS,CAC1C,GAAIC,EAAY,WAAWD,EAAK,OAAO,EAAG,CACtC,IAAME,EAAUF,EAAK,QACfG,EAAiB,GAAGD,EAAQ,QAAQ,KAAKA,EAAQ,QAAQ,GAAGA,EAAQ,KAAO,IAAIA,EAAQ,IAAI,GAAK,EAAE,GAAGA,EAAQ,IAAI,GACjHE,EAAO,MAAM,KAAK,aAAaF,EAAQ,OAAQC,CAAc,EACnED,EAAQ,QAAU,CACd,GAAGA,EAAQ,QACX,KAAME,CACV,CACJ,CACA,OAAOL,EAAKC,CAAI,CACpB,EAAG,CACC,KAAM,kBACN,KAAM,kBACN,SAAU,EACd,CAAC,CACL,CACA,MAAM,aAAaK,EAAS,OAAQC,EAAU,CAC1C,IAAMvD,EAAQ,MAAM,KAAK,UAAU,EACnC,GAAI,CACA,IAAMwD,EAAaC,EAAiB,CAChC,IAAKzD,EAAM,QACX,OAAQ,MACR,KAAM,MACV,CAAC,EAEK0D,EADYC,EAAgBH,CAAU,EAChB,OAAO,CAAE,OAAQ,MAAO,KAAM,MAAO,CAAC,EAC9DI,EAAa,GACjB,QAASC,EAAI,EAAGA,EAAIH,EAAU,OAAQG,IAClC,GAAIH,EAAUG,CAAC,IAAM,EAAM,CACvBD,EAAaC,EACb,KACJ,CAEJ,IAAMC,EAAIJ,EAAU,MAAME,EAAa,EAAGA,EAAa,EAAE,EACnD,EAAIF,EAAU,MAAME,EAAa,GAAIA,EAAa,EAAE,EACpDG,EAAS,CACX,IAAK,QACL,IAAK,WACL,IAAK,CACD,IAAK,KACL,IAAK,QACL,EAAGD,EAAE,SAAS,WAAW,EACzB,EAAG,EAAE,SAAS,WAAW,CAC7B,CACJ,EACME,EAAU,CACZ,IAAK,OAAO,WAAW,EACvB,IAAKV,EACL,IAAKC,EACL,IAAK,KAAK,MAAM,KAAK,IAAI,EAAI,GAAI,CACrC,EACMU,EAAY,OAAO,KAAK,KAAK,UAAUF,CAAM,CAAC,EAAE,SAAS,WAAW,EACpEG,EAAa,OAAO,KAAK,KAAK,UAAUF,CAAO,CAAC,EAAE,SAAS,WAAW,EACtErC,EAAU,GAAGsC,CAAS,IAAIC,CAAU,GACpCC,EAAgBC,EAAK,SAAU,OAAO,KAAKzC,CAAO,EAAG6B,CAAU,EAE/Da,EADe,KAAK,kBAAkBF,CAAa,EACvB,SAAS,WAAW,EACtD,MAAO,GAAGxC,CAAO,IAAI0C,CAAY,EACrC,OACO5C,EAAO,CACV,MAAM,IAAIxB,EAAyB,kCAAkCwB,aAAiB,MAAQA,EAAM,QAAU,OAAOA,CAAK,CAAC,GAAI,CAAE,OAAQ,KAAK,OAAQ,YAAa,EAAM,CAAC,CAC9K,CACJ,CACJ,ECxQO,IAAM6C,EAAuBC,EAACC,GAAS,MAAO,CAAE,mBAAAC,CAAmB,EAAI,CAAC,IAAM,CACjFD,GAAM,QAAQ,QAAQ,sDAAsD,EAC5E,IAAME,EAAW,MAAMC,EAAgBH,GAAQ,CAAC,CAAC,EAC3CI,EAAcC,EAAe,CAC/B,QAASL,GAAM,SAAWC,GAAoB,OAClD,CAAC,EACKK,EAAUJ,EAASE,CAAW,EACpC,GAAI,CAACE,GAAS,cACV,MAAM,IAAIC,EAAyB,WAAWH,CAAW,mCAAoC,CACzF,YAAa,GACb,OAAQJ,GAAM,MAClB,CAAC,EAGL,IAAMQ,EAAc,MADJ,IAAIC,EAAwBH,EAASN,EAAMC,CAAkB,EAC3C,gBAAgB,EAClD,OAAOS,EAAqBF,EAAa,oBAAqB,IAAI,CACtE,EAhBoC",
6
+ "names": ["createHash", "createPrivateKey", "createPublicKey", "sign", "fs", "homedir", "dirname", "join", "LoginCredentialsFetcher", "_LoginCredentialsFetcher", "__name", "profileData", "init", "callerClientConfig", "token", "CredentialsProviderError", "accessToken", "now", "diskToken", "diskExpiry", "tokenExpiry", "freshToken", "SigninClient", "CreateOAuth2TokenCommand", "logger", "userAgentAppId", "requestHandler", "region", "client", "commandInput", "response", "accessKeyId", "secretAccessKey", "sessionToken", "refreshToken", "expiresIn", "expiresInMs", "expiration", "updatedToken", "error", "errorType", "message", "tokenFilePath", "tokenData", "fs", "missingFields", "k", "directory", "dirname", "join", "homedir", "loginSessionBytes", "loginSessionSha256", "createHash", "derSignature", "offset", "rLength", "sLength", "s", "rPadded", "sPadded", "middlewareStack", "next", "args", "HttpRequest", "request", "actualEndpoint", "dpop", "method", "endpoint", "privateKey", "createPrivateKey", "publicDer", "createPublicKey", "pointStart", "i", "x", "header", "payload", "headerB64", "payloadB64", "asn1Signature", "sign", "signatureB64", "fromLoginCredentials", "__name", "init", "callerClientConfig", "profiles", "parseKnownFiles", "profileName", "getProfileName", "profile", "CredentialsProviderError", "credentials", "LoginCredentialsFetcher", "setCredentialFeature"]
7
+ }
@@ -0,0 +1,2 @@
1
+ /* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
2
+ import{p as A}from"./chunk-OV75J3RB.mjs";import{b as a,h as N,l as R}from"./chunk-ZH5DZOB5.mjs";import"./chunk-MATUPZWL.mjs";import{c as P}from"./chunk-5JDAL5HL.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-NX6AKUU3.mjs";import{a as h}from"./chunk-CFZ5JWD3.mjs";import{createHash as $,createPrivateKey as H,createPublicKey as K,sign as v}from"node:crypto";import{promises as E}from"node:fs";import{homedir as _}from"node:os";import{dirname as B,join as b}from"node:path";var w=class c{static{h(this,"LoginCredentialsFetcher")}profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300*1e3;constructor(e,t,s){this.profileData=e,this.init=t,this.callerClientConfig=s}async loadCredentials(){let e=await this.loadToken();if(!e)throw new a(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let t=e.accessToken,s=Date.now();return new Date(t.expiresAt).getTime()-s<=c.REFRESH_THRESHOLD?this.refresh(e):this.toCredentials(e.accessToken)}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}toCredentials(e){return{accessKeyId:e.accessKeyId,secretAccessKey:e.secretAccessKey,sessionToken:e.sessionToken,accountId:e.accountId,expiration:new Date(e.expiresAt)}}async refresh(e){let t=await this.loadToken().catch(()=>e),s=Date.now(),r=new Date(t.accessToken.expiresAt).getTime(),i=new Date(e.accessToken.expiresAt).getTime(),o=r<=s&&i>s?e:t;if(new Date(o.accessToken.expiresAt).getTime()-Date.now()>c.REFRESH_THRESHOLD)return this.toCredentials(o.accessToken);let{SigninClient:p,CreateOAuth2TokenCommand:y}=await import("./signin-F7JF6BF6.mjs"),{logger:m,userAgentAppId:T}=this.callerClientConfig??{},x=h(n=>n?.metadata?.handlerProtocol==="h2","isH2")(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,d=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,u=new p({credentials:{accessKeyId:"",secretAccessKey:""},region:d,requestHandler:x,logger:m,userAgentAppId:T,...this.init?.clientConfig});this.createDPoPInterceptor(u.middlewareStack);let D={tokenInput:{clientId:o.clientId,refreshToken:o.refreshToken,grantType:"refresh_token"}};try{let n=await u.send(new y(D)),{accessKeyId:g,secretAccessKey:k,sessionToken:f}=n.tokenOutput?.accessToken??{},{refreshToken:C,expiresIn:F}=n.tokenOutput??{};if(!g||!k||!f||!C)throw new a("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let L=(F??900)*1e3,O=new Date(Date.now()+L),I={...o,accessToken:{...o.accessToken,accessKeyId:g,secretAccessKey:k,sessionToken:f,expiresAt:O.toISOString()},refreshToken:C};return await this.saveToken(I),this.toCredentials(I.accessToken)}catch(n){if(n.name==="AccessDeniedException"){let k=n.error,f;switch(k){case"TOKEN_EXPIRED":f="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":f="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":f="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:f=`Failed to refresh token: ${String(n)}. Please re-authenticate using \`aws login\``}throw new a(f,{logger:this.logger,tryNextLink:!1})}if(new Date(o.accessToken.expiresAt).getTime()>Date.now())return this.logger?.warn?.(`Failed to refresh token: ${String(n)}. Using existing token until expiry.`),this.toCredentials(o.accessToken);throw new a(`Failed to refresh token: ${String(n)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let e=this.getTokenFilePath();try{let t=await E.readFile(e,"utf8"),s=JSON.parse(t),r=["accessToken","clientId","refreshToken","dpopKey"].filter(i=>!s[i]);if(s.accessToken?.accountId||r.push("accountId"),r.length>0)throw new a(`Token validation failed, missing fields: ${r.join(", ")}`,{logger:this.logger,tryNextLink:!1});return s}catch(t){throw new a(`Failed to load token from ${e}: ${String(t)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(e){let t=this.getTokenFilePath(),s=B(t);try{await E.mkdir(s,{recursive:!0})}catch{}await E.writeFile(t,JSON.stringify(e,null,2),"utf8")}getTokenFilePath(){let e=process.env.AWS_LOGIN_CACHE_DIRECTORY??b(_(),".aws","login","cache"),t=Buffer.from(this.loginSession,"utf8"),s=$("sha256").update(t).digest("hex");return b(e,`${s}.json`)}derToRawSignature(e){let t=2;if(e[t]!==2)throw new Error("Invalid DER signature");t++;let s=e[t++],r=e.subarray(t,t+s);if(t+=s,e[t]!==2)throw new Error("Invalid DER signature");t++;let i=e[t++],o=e.subarray(t,t+i);r=r[0]===0?r.subarray(1):r,o=o[0]===0?o.subarray(1):o;let l=Buffer.concat([Buffer.alloc(32-r.length),r]),p=Buffer.concat([Buffer.alloc(32-o.length),o]);return Buffer.concat([l,p])}createDPoPInterceptor(e){e.add(t=>async s=>{if(P.isInstance(s.request)){let r=s.request,i=`${r.protocol}//${r.hostname}${r.port?`:${r.port}`:""}${r.path}`,o=await this.generateDpop(r.method,i);r.headers={...r.headers,DPoP:o}}return t(s)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(e="POST",t){let s=await this.loadToken();try{let r=H({key:s.dpopKey,format:"pem",type:"sec1"}),o=K(r).export({format:"der",type:"spki"}),l=-1;for(let g=0;g<o.length;g++)if(o[g]===4){l=g;break}let p=o.slice(l+1,l+33),y=o.slice(l+33,l+65),m={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:p.toString("base64url"),y:y.toString("base64url")}},T={jti:crypto.randomUUID(),htm:e,htu:t,iat:Math.floor(Date.now()/1e3)},S=Buffer.from(JSON.stringify(m)).toString("base64url"),x=Buffer.from(JSON.stringify(T)).toString("base64url"),d=`${S}.${x}`,u=v("sha256",Buffer.from(d),r),n=this.derToRawSignature(u).toString("base64url");return`${d}.${n}`}catch(r){throw new a(`Failed to generate Dpop proof: ${r instanceof Error?r.message:String(r)}`,{logger:this.logger,tryNextLink:!1})}}};var q=h(c=>async({callerClientConfig:e}={})=>{c?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let t=await R(c||{}),s=N({profile:c?.profile??e?.profile}),r=t[s];if(!r?.login_session)throw new a(`Profile ${s} does not contain login_session.`,{tryNextLink:!0,logger:c?.logger});let o=await new w(r,c,e).loadCredentials();return A(o,"CREDENTIALS_LOGIN","AD")},"fromLoginCredentials");export{q as fromLoginCredentials};
@@ -0,0 +1,7 @@
1
+ {
2
+ "version": 3,
3
+ "sources": ["../../../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.79/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.79/node_modules/@aws-sdk/credential-provider-login/dist-es/fromLoginCredentials.js"],
4
+ "sourcesContent": ["import { CredentialsProviderError } from \"@smithy/core/config\";\nimport { HttpRequest } from \"@smithy/core/protocols\";\nimport { createHash, createPrivateKey, createPublicKey, sign } from \"node:crypto\";\nimport { promises as fs } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nexport class LoginCredentialsFetcher {\n profileData;\n init;\n callerClientConfig;\n static REFRESH_THRESHOLD = 5 * 60 * 1000;\n constructor(profileData, init, callerClientConfig) {\n this.profileData = profileData;\n this.init = init;\n this.callerClientConfig = callerClientConfig;\n }\n async loadCredentials() {\n const token = await this.loadToken();\n if (!token) {\n throw new CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`, { tryNextLink: false, logger: this.logger });\n }\n const accessToken = token.accessToken;\n const now = Date.now();\n const expiryTime = new Date(accessToken.expiresAt).getTime();\n const timeUntilExpiry = expiryTime - now;\n if (timeUntilExpiry <= LoginCredentialsFetcher.REFRESH_THRESHOLD) {\n return this.refresh(token);\n }\n return this.toCredentials(token.accessToken);\n }\n get logger() {\n return this.init?.logger;\n }\n get loginSession() {\n return this.profileData.login_session;\n }\n toCredentials(token) {\n return {\n accessKeyId: token.accessKeyId,\n secretAccessKey: token.secretAccessKey,\n sessionToken: token.sessionToken,\n accountId: token.accountId,\n expiration: new Date(token.expiresAt),\n };\n }\n async refresh(token) {\n const diskToken = await this.loadToken().catch(() => token);\n const now = Date.now();\n const diskExpiry = new Date(diskToken.accessToken.expiresAt).getTime();\n const tokenExpiry = new Date(token.accessToken.expiresAt).getTime();\n const freshToken = diskExpiry <= now && tokenExpiry > now ? token : diskToken;\n const freshExpiry = new Date(freshToken.accessToken.expiresAt).getTime();\n if (freshExpiry - Date.now() > LoginCredentialsFetcher.REFRESH_THRESHOLD) {\n return this.toCredentials(freshToken.accessToken);\n }\n const { SigninClient, CreateOAuth2TokenCommand } = await import(\"@aws-sdk/nested-clients/signin\");\n const { logger, userAgentAppId } = this.callerClientConfig ?? {};\n const isH2 = (requestHandler) => {\n return requestHandler?.metadata?.handlerProtocol === \"h2\";\n };\n const requestHandler = isH2(this.callerClientConfig?.requestHandler)\n ? undefined\n : this.callerClientConfig?.requestHandler;\n const region = this.profileData.region ?? (await this.callerClientConfig?.region?.()) ?? process.env.AWS_REGION;\n const client = new SigninClient({\n credentials: {\n accessKeyId: \"\",\n secretAccessKey: \"\",\n },\n region,\n requestHandler,\n logger,\n userAgentAppId,\n ...this.init?.clientConfig,\n });\n this.createDPoPInterceptor(client.middlewareStack);\n const commandInput = {\n tokenInput: {\n clientId: freshToken.clientId,\n refreshToken: freshToken.refreshToken,\n grantType: \"refresh_token\",\n },\n };\n try {\n const response = await client.send(new CreateOAuth2TokenCommand(commandInput));\n const { accessKeyId, secretAccessKey, sessionToken } = response.tokenOutput?.accessToken ?? {};\n const { refreshToken, expiresIn } = response.tokenOutput ?? {};\n if (!accessKeyId || !secretAccessKey || !sessionToken || !refreshToken) {\n throw new CredentialsProviderError(\"Token refresh response missing required fields\", {\n logger: this.logger,\n tryNextLink: false,\n });\n }\n const expiresInMs = (expiresIn ?? 900) * 1000;\n const expiration = new Date(Date.now() + expiresInMs);\n const updatedToken = {\n ...freshToken,\n accessToken: {\n ...freshToken.accessToken,\n accessKeyId,\n secretAccessKey,\n sessionToken,\n expiresAt: expiration.toISOString(),\n },\n refreshToken,\n };\n await this.saveToken(updatedToken);\n return this.toCredentials(updatedToken.accessToken);\n }\n catch (error) {\n if (error.name === \"AccessDeniedException\") {\n const errorType = error.error;\n let message;\n switch (errorType) {\n case \"TOKEN_EXPIRED\":\n message = \"Your session has expired. Please reauthenticate.\";\n break;\n case \"USER_CREDENTIALS_CHANGED\":\n message =\n \"Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.\";\n break;\n case \"INSUFFICIENT_PERMISSIONS\":\n message =\n \"Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.\";\n break;\n default:\n message = `Failed to refresh token: ${String(error)}. Please re-authenticate using \\`aws login\\``;\n }\n throw new CredentialsProviderError(message, {\n logger: this.logger,\n tryNextLink: false,\n });\n }\n const tokenExpiry = new Date(freshToken.accessToken.expiresAt).getTime();\n if (tokenExpiry > Date.now()) {\n this.logger?.warn?.(`Failed to refresh token: ${String(error)}. Using existing token until expiry.`);\n return this.toCredentials(freshToken.accessToken);\n }\n throw new CredentialsProviderError(`Failed to refresh token: ${String(error)}. Please re-authenticate using aws login`, { logger: this.logger });\n }\n }\n async loadToken() {\n const tokenFilePath = this.getTokenFilePath();\n try {\n const tokenData = await fs.readFile(tokenFilePath, \"utf8\");\n const token = JSON.parse(tokenData);\n const missingFields = [\"accessToken\", \"clientId\", \"refreshToken\", \"dpopKey\"].filter((k) => !token[k]);\n if (!token.accessToken?.accountId) {\n missingFields.push(\"accountId\");\n }\n if (missingFields.length > 0) {\n throw new CredentialsProviderError(`Token validation failed, missing fields: ${missingFields.join(\", \")}`, {\n logger: this.logger,\n tryNextLink: false,\n });\n }\n return token;\n }\n catch (error) {\n throw new CredentialsProviderError(`Failed to load token from ${tokenFilePath}: ${String(error)}`, {\n logger: this.logger,\n tryNextLink: false,\n });\n }\n }\n async saveToken(token) {\n const tokenFilePath = this.getTokenFilePath();\n const directory = dirname(tokenFilePath);\n try {\n await fs.mkdir(directory, { recursive: true });\n }\n catch (error) {\n }\n await fs.writeFile(tokenFilePath, JSON.stringify(token, null, 2), \"utf8\");\n }\n getTokenFilePath() {\n const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? join(homedir(), \".aws\", \"login\", \"cache\");\n const loginSessionBytes = Buffer.from(this.loginSession, \"utf8\");\n const loginSessionSha256 = createHash(\"sha256\").update(loginSessionBytes).digest(\"hex\");\n return join(directory, `${loginSessionSha256}.json`);\n }\n derToRawSignature(derSignature) {\n let offset = 2;\n if (derSignature[offset] !== 0x02) {\n throw new Error(\"Invalid DER signature\");\n }\n offset++;\n const rLength = derSignature[offset++];\n let r = derSignature.subarray(offset, offset + rLength);\n offset += rLength;\n if (derSignature[offset] !== 0x02) {\n throw new Error(\"Invalid DER signature\");\n }\n offset++;\n const sLength = derSignature[offset++];\n let s = derSignature.subarray(offset, offset + sLength);\n r = r[0] === 0x00 ? r.subarray(1) : r;\n s = s[0] === 0x00 ? s.subarray(1) : s;\n const rPadded = Buffer.concat([Buffer.alloc(32 - r.length), r]);\n const sPadded = Buffer.concat([Buffer.alloc(32 - s.length), s]);\n return Buffer.concat([rPadded, sPadded]);\n }\n createDPoPInterceptor(middlewareStack) {\n middlewareStack.add((next) => async (args) => {\n if (HttpRequest.isInstance(args.request)) {\n const request = args.request;\n const actualEndpoint = `${request.protocol}//${request.hostname}${request.port ? `:${request.port}` : \"\"}${request.path}`;\n const dpop = await this.generateDpop(request.method, actualEndpoint);\n request.headers = {\n ...request.headers,\n DPoP: dpop,\n };\n }\n return next(args);\n }, {\n step: \"finalizeRequest\",\n name: \"dpopInterceptor\",\n override: true,\n });\n }\n async generateDpop(method = \"POST\", endpoint) {\n const token = await this.loadToken();\n try {\n const privateKey = createPrivateKey({\n key: token.dpopKey,\n format: \"pem\",\n type: \"sec1\",\n });\n const publicKey = createPublicKey(privateKey);\n const publicDer = publicKey.export({ format: \"der\", type: \"spki\" });\n let pointStart = -1;\n for (let i = 0; i < publicDer.length; i++) {\n if (publicDer[i] === 0x04) {\n pointStart = i;\n break;\n }\n }\n const x = publicDer.slice(pointStart + 1, pointStart + 33);\n const y = publicDer.slice(pointStart + 33, pointStart + 65);\n const header = {\n alg: \"ES256\",\n typ: \"dpop+jwt\",\n jwk: {\n kty: \"EC\",\n crv: \"P-256\",\n x: x.toString(\"base64url\"),\n y: y.toString(\"base64url\"),\n },\n };\n const payload = {\n jti: crypto.randomUUID(),\n htm: method,\n htu: endpoint,\n iat: Math.floor(Date.now() / 1000),\n };\n const headerB64 = Buffer.from(JSON.stringify(header)).toString(\"base64url\");\n const payloadB64 = Buffer.from(JSON.stringify(payload)).toString(\"base64url\");\n const message = `${headerB64}.${payloadB64}`;\n const asn1Signature = sign(\"sha256\", Buffer.from(message), privateKey);\n const rawSignature = this.derToRawSignature(asn1Signature);\n const signatureB64 = rawSignature.toString(\"base64url\");\n return `${message}.${signatureB64}`;\n }\n catch (error) {\n throw new CredentialsProviderError(`Failed to generate Dpop proof: ${error instanceof Error ? error.message : String(error)}`, { logger: this.logger, tryNextLink: false });\n }\n }\n}\n", "import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { CredentialsProviderError, getProfileName, parseKnownFiles } from \"@smithy/core/config\";\nimport { LoginCredentialsFetcher } from \"./LoginCredentialsFetcher\";\nexport const fromLoginCredentials = (init) => async ({ callerClientConfig } = {}) => {\n init?.logger?.debug?.(\"@aws-sdk/credential-providers - fromLoginCredentials\");\n const profiles = await parseKnownFiles(init || {});\n const profileName = getProfileName({\n profile: init?.profile ?? callerClientConfig?.profile,\n });\n const profile = profiles[profileName];\n if (!profile?.login_session) {\n throw new CredentialsProviderError(`Profile ${profileName} does not contain login_session.`, {\n tryNextLink: true,\n logger: init?.logger,\n });\n }\n const fetcher = new LoginCredentialsFetcher(profile, init, callerClientConfig);\n const credentials = await fetcher.loadCredentials();\n return setCredentialFeature(credentials, \"CREDENTIALS_LOGIN\", \"AD\");\n};\n"],
5
+ "mappings": ";yQAEA,OAAS,cAAAA,EAAY,oBAAAC,EAAkB,mBAAAC,EAAiB,QAAAC,MAAY,cACpE,OAAS,YAAYC,MAAU,UAC/B,OAAS,WAAAC,MAAe,UACxB,OAAS,WAAAC,EAAS,QAAAC,MAAY,YACvB,IAAMC,EAAN,MAAMC,CAAwB,CANrC,MAMqC,CAAAC,EAAA,gCACjC,YACA,KACA,mBACA,OAAO,kBAAoB,IAAS,IACpC,YAAYC,EAAaC,EAAMC,EAAoB,CAC/C,KAAK,YAAcF,EACnB,KAAK,KAAOC,EACZ,KAAK,mBAAqBC,CAC9B,CACA,MAAM,iBAAkB,CACpB,IAAMC,EAAQ,MAAM,KAAK,UAAU,EACnC,GAAI,CAACA,EACD,MAAM,IAAIC,EAAyB,sCAAsC,KAAK,YAAY,2CAA4C,CAAE,YAAa,GAAO,OAAQ,KAAK,MAAO,CAAC,EAErL,IAAMC,EAAcF,EAAM,YACpBG,EAAM,KAAK,IAAI,EAGrB,OAFmB,IAAI,KAAKD,EAAY,SAAS,EAAE,QAAQ,EACtBC,GACdR,EAAwB,kBACpC,KAAK,QAAQK,CAAK,EAEtB,KAAK,cAAcA,EAAM,WAAW,CAC/C,CACA,IAAI,QAAS,CACT,OAAO,KAAK,MAAM,MACtB,CACA,IAAI,cAAe,CACf,OAAO,KAAK,YAAY,aAC5B,CACA,cAAcA,EAAO,CACjB,MAAO,CACH,YAAaA,EAAM,YACnB,gBAAiBA,EAAM,gBACvB,aAAcA,EAAM,aACpB,UAAWA,EAAM,UACjB,WAAY,IAAI,KAAKA,EAAM,SAAS,CACxC,CACJ,CACA,MAAM,QAAQA,EAAO,CACjB,IAAMI,EAAY,MAAM,KAAK,UAAU,EAAE,MAAM,IAAMJ,CAAK,EACpDG,EAAM,KAAK,IAAI,EACfE,EAAa,IAAI,KAAKD,EAAU,YAAY,SAAS,EAAE,QAAQ,EAC/DE,EAAc,IAAI,KAAKN,EAAM,YAAY,SAAS,EAAE,QAAQ,EAC5DO,EAAaF,GAAcF,GAAOG,EAAcH,EAAMH,EAAQI,EAEpE,GADoB,IAAI,KAAKG,EAAW,YAAY,SAAS,EAAE,QAAQ,EACrD,KAAK,IAAI,EAAIZ,EAAwB,kBACnD,OAAO,KAAK,cAAcY,EAAW,WAAW,EAEpD,GAAM,CAAE,aAAAC,EAAc,yBAAAC,CAAyB,EAAI,KAAM,QAAO,uBAAgC,EAC1F,CAAE,OAAAC,EAAQ,eAAAC,CAAe,EAAI,KAAK,oBAAsB,CAAC,EAIzDC,EAHOhB,EAACgB,GACHA,GAAgB,UAAU,kBAAoB,KAD5C,QAGe,KAAK,oBAAoB,cAAc,EAC7D,OACA,KAAK,oBAAoB,eACzBC,EAAS,KAAK,YAAY,QAAW,MAAM,KAAK,oBAAoB,SAAS,GAAM,QAAQ,IAAI,WAC/FC,EAAS,IAAIN,EAAa,CAC5B,YAAa,CACT,YAAa,GACb,gBAAiB,EACrB,EACA,OAAAK,EACA,eAAAD,EACA,OAAAF,EACA,eAAAC,EACA,GAAG,KAAK,MAAM,YAClB,CAAC,EACD,KAAK,sBAAsBG,EAAO,eAAe,EACjD,IAAMC,EAAe,CACjB,WAAY,CACR,SAAUR,EAAW,SACrB,aAAcA,EAAW,aACzB,UAAW,eACf,CACJ,EACA,GAAI,CACA,IAAMS,EAAW,MAAMF,EAAO,KAAK,IAAIL,EAAyBM,CAAY,CAAC,EACvE,CAAE,YAAAE,EAAa,gBAAAC,EAAiB,aAAAC,CAAa,EAAIH,EAAS,aAAa,aAAe,CAAC,EACvF,CAAE,aAAAI,EAAc,UAAAC,CAAU,EAAIL,EAAS,aAAe,CAAC,EAC7D,GAAI,CAACC,GAAe,CAACC,GAAmB,CAACC,GAAgB,CAACC,EACtD,MAAM,IAAInB,EAAyB,iDAAkD,CACjF,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,EAEL,IAAMqB,GAAeD,GAAa,KAAO,IACnCE,EAAa,IAAI,KAAK,KAAK,IAAI,EAAID,CAAW,EAC9CE,EAAe,CACjB,GAAGjB,EACH,YAAa,CACT,GAAGA,EAAW,YACd,YAAAU,EACA,gBAAAC,EACA,aAAAC,EACA,UAAWI,EAAW,YAAY,CACtC,EACA,aAAAH,CACJ,EACA,aAAM,KAAK,UAAUI,CAAY,EAC1B,KAAK,cAAcA,EAAa,WAAW,CACtD,OACOC,EAAO,CACV,GAAIA,EAAM,OAAS,wBAAyB,CACxC,IAAMC,EAAYD,EAAM,MACpBE,EACJ,OAAQD,EAAW,CACf,IAAK,gBACDC,EAAU,mDACV,MACJ,IAAK,2BACDA,EACI,oHACJ,MACJ,IAAK,2BACDA,EACI,mIACJ,MACJ,QACIA,EAAU,4BAA4B,OAAOF,CAAK,CAAC,8CAC3D,CACA,MAAM,IAAIxB,EAAyB0B,EAAS,CACxC,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,CACL,CAEA,GADoB,IAAI,KAAKpB,EAAW,YAAY,SAAS,EAAE,QAAQ,EACrD,KAAK,IAAI,EACvB,YAAK,QAAQ,OAAO,4BAA4B,OAAOkB,CAAK,CAAC,sCAAsC,EAC5F,KAAK,cAAclB,EAAW,WAAW,EAEpD,MAAM,IAAIN,EAAyB,4BAA4B,OAAOwB,CAAK,CAAC,2CAA4C,CAAE,OAAQ,KAAK,MAAO,CAAC,CACnJ,CACJ,CACA,MAAM,WAAY,CACd,IAAMG,EAAgB,KAAK,iBAAiB,EAC5C,GAAI,CACA,IAAMC,EAAY,MAAMC,EAAG,SAASF,EAAe,MAAM,EACnD5B,EAAQ,KAAK,MAAM6B,CAAS,EAC5BE,EAAgB,CAAC,cAAe,WAAY,eAAgB,SAAS,EAAE,OAAQC,GAAM,CAAChC,EAAMgC,CAAC,CAAC,EAIpG,GAHKhC,EAAM,aAAa,WACpB+B,EAAc,KAAK,WAAW,EAE9BA,EAAc,OAAS,EACvB,MAAM,IAAI9B,EAAyB,4CAA4C8B,EAAc,KAAK,IAAI,CAAC,GAAI,CACvG,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,EAEL,OAAO/B,CACX,OACOyB,EAAO,CACV,MAAM,IAAIxB,EAAyB,6BAA6B2B,CAAa,KAAK,OAAOH,CAAK,CAAC,GAAI,CAC/F,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,CACL,CACJ,CACA,MAAM,UAAUzB,EAAO,CACnB,IAAM4B,EAAgB,KAAK,iBAAiB,EACtCK,EAAYC,EAAQN,CAAa,EACvC,GAAI,CACA,MAAME,EAAG,MAAMG,EAAW,CAAE,UAAW,EAAK,CAAC,CACjD,MACc,CACd,CACA,MAAMH,EAAG,UAAUF,EAAe,KAAK,UAAU5B,EAAO,KAAM,CAAC,EAAG,MAAM,CAC5E,CACA,kBAAmB,CACf,IAAMiC,EAAY,QAAQ,IAAI,2BAA6BE,EAAKC,EAAQ,EAAG,OAAQ,QAAS,OAAO,EAC7FC,EAAoB,OAAO,KAAK,KAAK,aAAc,MAAM,EACzDC,EAAqBC,EAAW,QAAQ,EAAE,OAAOF,CAAiB,EAAE,OAAO,KAAK,EACtF,OAAOF,EAAKF,EAAW,GAAGK,CAAkB,OAAO,CACvD,CACA,kBAAkBE,EAAc,CAC5B,IAAIC,EAAS,EACb,GAAID,EAAaC,CAAM,IAAM,EACzB,MAAM,IAAI,MAAM,uBAAuB,EAE3CA,IACA,IAAMC,EAAUF,EAAaC,GAAQ,EACjC,EAAID,EAAa,SAASC,EAAQA,EAASC,CAAO,EAEtD,GADAD,GAAUC,EACNF,EAAaC,CAAM,IAAM,EACzB,MAAM,IAAI,MAAM,uBAAuB,EAE3CA,IACA,IAAME,EAAUH,EAAaC,GAAQ,EACjCG,EAAIJ,EAAa,SAASC,EAAQA,EAASE,CAAO,EACtD,EAAI,EAAE,CAAC,IAAM,EAAO,EAAE,SAAS,CAAC,EAAI,EACpCC,EAAIA,EAAE,CAAC,IAAM,EAAOA,EAAE,SAAS,CAAC,EAAIA,EACpC,IAAMC,EAAU,OAAO,OAAO,CAAC,OAAO,MAAM,GAAK,EAAE,MAAM,EAAG,CAAC,CAAC,EACxDC,EAAU,OAAO,OAAO,CAAC,OAAO,MAAM,GAAKF,EAAE,MAAM,EAAGA,CAAC,CAAC,EAC9D,OAAO,OAAO,OAAO,CAACC,EAASC,CAAO,CAAC,CAC3C,CACA,sBAAsBC,EAAiB,CACnCA,EAAgB,IAAKC,GAAS,MAAOC,GAAS,CAC1C,GAAIC,EAAY,WAAWD,EAAK,OAAO,EAAG,CACtC,IAAME,EAAUF,EAAK,QACfG,EAAiB,GAAGD,EAAQ,QAAQ,KAAKA,EAAQ,QAAQ,GAAGA,EAAQ,KAAO,IAAIA,EAAQ,IAAI,GAAK,EAAE,GAAGA,EAAQ,IAAI,GACjHE,EAAO,MAAM,KAAK,aAAaF,EAAQ,OAAQC,CAAc,EACnED,EAAQ,QAAU,CACd,GAAGA,EAAQ,QACX,KAAME,CACV,CACJ,CACA,OAAOL,EAAKC,CAAI,CACpB,EAAG,CACC,KAAM,kBACN,KAAM,kBACN,SAAU,EACd,CAAC,CACL,CACA,MAAM,aAAaK,EAAS,OAAQC,EAAU,CAC1C,IAAMvD,EAAQ,MAAM,KAAK,UAAU,EACnC,GAAI,CACA,IAAMwD,EAAaC,EAAiB,CAChC,IAAKzD,EAAM,QACX,OAAQ,MACR,KAAM,MACV,CAAC,EAEK0D,EADYC,EAAgBH,CAAU,EAChB,OAAO,CAAE,OAAQ,MAAO,KAAM,MAAO,CAAC,EAC9DI,EAAa,GACjB,QAASC,EAAI,EAAGA,EAAIH,EAAU,OAAQG,IAClC,GAAIH,EAAUG,CAAC,IAAM,EAAM,CACvBD,EAAaC,EACb,KACJ,CAEJ,IAAMC,EAAIJ,EAAU,MAAME,EAAa,EAAGA,EAAa,EAAE,EACnD,EAAIF,EAAU,MAAME,EAAa,GAAIA,EAAa,EAAE,EACpDG,EAAS,CACX,IAAK,QACL,IAAK,WACL,IAAK,CACD,IAAK,KACL,IAAK,QACL,EAAGD,EAAE,SAAS,WAAW,EACzB,EAAG,EAAE,SAAS,WAAW,CAC7B,CACJ,EACME,EAAU,CACZ,IAAK,OAAO,WAAW,EACvB,IAAKV,EACL,IAAKC,EACL,IAAK,KAAK,MAAM,KAAK,IAAI,EAAI,GAAI,CACrC,EACMU,EAAY,OAAO,KAAK,KAAK,UAAUF,CAAM,CAAC,EAAE,SAAS,WAAW,EACpEG,EAAa,OAAO,KAAK,KAAK,UAAUF,CAAO,CAAC,EAAE,SAAS,WAAW,EACtErC,EAAU,GAAGsC,CAAS,IAAIC,CAAU,GACpCC,EAAgBC,EAAK,SAAU,OAAO,KAAKzC,CAAO,EAAG6B,CAAU,EAE/Da,EADe,KAAK,kBAAkBF,CAAa,EACvB,SAAS,WAAW,EACtD,MAAO,GAAGxC,CAAO,IAAI0C,CAAY,EACrC,OACO5C,EAAO,CACV,MAAM,IAAIxB,EAAyB,kCAAkCwB,aAAiB,MAAQA,EAAM,QAAU,OAAOA,CAAK,CAAC,GAAI,CAAE,OAAQ,KAAK,OAAQ,YAAa,EAAM,CAAC,CAC9K,CACJ,CACJ,ECxQO,IAAM6C,EAAuBC,EAACC,GAAS,MAAO,CAAE,mBAAAC,CAAmB,EAAI,CAAC,IAAM,CACjFD,GAAM,QAAQ,QAAQ,sDAAsD,EAC5E,IAAME,EAAW,MAAMC,EAAgBH,GAAQ,CAAC,CAAC,EAC3CI,EAAcC,EAAe,CAC/B,QAASL,GAAM,SAAWC,GAAoB,OAClD,CAAC,EACKK,EAAUJ,EAASE,CAAW,EACpC,GAAI,CAACE,GAAS,cACV,MAAM,IAAIC,EAAyB,WAAWH,CAAW,mCAAoC,CACzF,YAAa,GACb,OAAQJ,GAAM,MAClB,CAAC,EAGL,IAAMQ,EAAc,MADJ,IAAIC,EAAwBH,EAASN,EAAMC,CAAkB,EAC3C,gBAAgB,EAClD,OAAOS,EAAqBF,EAAa,oBAAqB,IAAI,CACtE,EAhBoC",
6
+ "names": ["createHash", "createPrivateKey", "createPublicKey", "sign", "fs", "homedir", "dirname", "join", "LoginCredentialsFetcher", "_LoginCredentialsFetcher", "__name", "profileData", "init", "callerClientConfig", "token", "CredentialsProviderError", "accessToken", "now", "diskToken", "diskExpiry", "tokenExpiry", "freshToken", "SigninClient", "CreateOAuth2TokenCommand", "logger", "userAgentAppId", "requestHandler", "region", "client", "commandInput", "response", "accessKeyId", "secretAccessKey", "sessionToken", "refreshToken", "expiresIn", "expiresInMs", "expiration", "updatedToken", "error", "errorType", "message", "tokenFilePath", "tokenData", "fs", "missingFields", "k", "directory", "dirname", "join", "homedir", "loginSessionBytes", "loginSessionSha256", "createHash", "derSignature", "offset", "rLength", "sLength", "s", "rPadded", "sPadded", "middlewareStack", "next", "args", "HttpRequest", "request", "actualEndpoint", "dpop", "method", "endpoint", "privateKey", "createPrivateKey", "publicDer", "createPublicKey", "pointStart", "i", "x", "header", "payload", "headerB64", "payloadB64", "asn1Signature", "sign", "signatureB64", "fromLoginCredentials", "__name", "init", "callerClientConfig", "profiles", "parseKnownFiles", "profileName", "getProfileName", "profile", "CredentialsProviderError", "credentials", "LoginCredentialsFetcher", "setCredentialFeature"]
7
+ }
@@ -0,0 +1,2 @@
1
+ /* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
2
+ import{p as d}from"./chunk-OV75J3RB.mjs";import{b as a,m}from"./chunk-ZH5DZOB5.mjs";import"./chunk-MATUPZWL.mjs";import"./chunk-5JDAL5HL.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-NX6AKUU3.mjs";import{a as t}from"./chunk-CFZ5JWD3.mjs";import{readFileSync as S}from"node:fs";var c=t(e=>async s=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:o,roleSessionName:r,webIdentityToken:i,providerId:n,policyArns:g,policy:E,durationSeconds:p}=e,{roleAssumerWithWebIdentity:l}=e;if(!l){let{getDefaultRoleAssumerWithWebIdentity:_}=await import("./sts-4M7S3GN4.mjs");l=_({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...s?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return l({RoleArn:o,RoleSessionName:r??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:i,ProviderId:n,PolicyArns:g,Policy:E,DurationSeconds:p})},"fromWebToken");var f="AWS_WEB_IDENTITY_TOKEN_FILE",T="AWS_ROLE_ARN",N="AWS_ROLE_SESSION_NAME",I=t((e={})=>async s=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let o=e?.webIdentityTokenFile??process.env[f],r=e?.roleArn??process.env[T],i=e?.roleSessionName??process.env[N];if(!o||!r)throw new a("Web identity configuration not specified",{logger:e.logger});let n=await c({...e,webIdentityToken:m?.getTokenRecord?.()[o]??S(o,{encoding:"ascii"}),roleArn:r,roleSessionName:i})(s);return o===process.env[f]&&d(n,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h"),n},"fromTokenFile");export{I as fromTokenFile,c as fromWebToken};
@@ -0,0 +1,7 @@
1
+ {
2
+ "version": 3,
3
+ "sources": ["../../../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.78/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.78/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromWebToken.js"],
4
+ "sourcesContent": ["import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { CredentialsProviderError, externalDataInterceptor } from \"@smithy/core/config\";\nimport { readFileSync } from \"node:fs\";\nimport { fromWebToken } from \"./fromWebToken\";\nconst ENV_TOKEN_FILE = \"AWS_WEB_IDENTITY_TOKEN_FILE\";\nconst ENV_ROLE_ARN = \"AWS_ROLE_ARN\";\nconst ENV_ROLE_SESSION_NAME = \"AWS_ROLE_SESSION_NAME\";\nexport const fromTokenFile = (init = {}) => async (awsIdentityProperties) => {\n init.logger?.debug(\"@aws-sdk/credential-provider-web-identity - fromTokenFile\");\n const webIdentityTokenFile = init?.webIdentityTokenFile ?? process.env[ENV_TOKEN_FILE];\n const roleArn = init?.roleArn ?? process.env[ENV_ROLE_ARN];\n const roleSessionName = init?.roleSessionName ?? process.env[ENV_ROLE_SESSION_NAME];\n if (!webIdentityTokenFile || !roleArn) {\n throw new CredentialsProviderError(\"Web identity configuration not specified\", {\n logger: init.logger,\n });\n }\n const credentials = await fromWebToken({\n ...init,\n webIdentityToken: externalDataInterceptor?.getTokenRecord?.()[webIdentityTokenFile] ??\n readFileSync(webIdentityTokenFile, { encoding: \"ascii\" }),\n roleArn,\n roleSessionName,\n })(awsIdentityProperties);\n if (webIdentityTokenFile === process.env[ENV_TOKEN_FILE]) {\n setCredentialFeature(credentials, \"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN\", \"h\");\n }\n return credentials;\n};\n", "export const fromWebToken = (init) => async (awsIdentityProperties) => {\n init.logger?.debug(\"@aws-sdk/credential-provider-web-identity - fromWebToken\");\n const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;\n let { roleAssumerWithWebIdentity } = init;\n if (!roleAssumerWithWebIdentity) {\n const { getDefaultRoleAssumerWithWebIdentity } = await import(\"@aws-sdk/nested-clients/sts\");\n roleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity({\n ...init.clientConfig,\n credentialProviderLogger: init.logger,\n parentClientConfig: {\n ...awsIdentityProperties?.callerClientConfig,\n ...init.parentClientConfig,\n },\n }, init.clientPlugins);\n }\n return roleAssumerWithWebIdentity({\n RoleArn: roleArn,\n RoleSessionName: roleSessionName ?? `aws-sdk-js-session-${Date.now()}`,\n WebIdentityToken: webIdentityToken,\n ProviderId: providerId,\n PolicyArns: policyArns,\n Policy: policy,\n DurationSeconds: durationSeconds,\n });\n};\n"],
5
+ "mappings": ";iPAEA,OAAS,gBAAAA,MAAoB,UCFtB,IAAMC,EAAeC,EAACC,GAAS,MAAOC,GAA0B,CACnED,EAAK,QAAQ,MAAM,0DAA0D,EAC7E,GAAM,CAAE,QAAAE,EAAS,gBAAAC,EAAiB,iBAAAC,EAAkB,WAAAC,EAAY,WAAAC,EAAY,OAAAC,EAAQ,gBAAAC,CAAgB,EAAIR,EACpG,CAAE,2BAAAS,CAA2B,EAAIT,EACrC,GAAI,CAACS,EAA4B,CAC7B,GAAM,CAAE,qCAAAC,CAAqC,EAAI,KAAM,QAAO,oBAA6B,EAC3FD,EAA6BC,EAAqC,CAC9D,GAAGV,EAAK,aACR,yBAA0BA,EAAK,OAC/B,mBAAoB,CAChB,GAAGC,GAAuB,mBAC1B,GAAGD,EAAK,kBACZ,CACJ,EAAGA,EAAK,aAAa,CACzB,CACA,OAAOS,EAA2B,CAC9B,QAASP,EACT,gBAAiBC,GAAmB,sBAAsB,KAAK,IAAI,CAAC,GACpE,iBAAkBC,EAClB,WAAYC,EACZ,WAAYC,EACZ,OAAQC,EACR,gBAAiBC,CACrB,CAAC,CACL,EAxB4B,gBDI5B,IAAMG,EAAiB,8BACjBC,EAAe,eACfC,EAAwB,wBACjBC,EAAgBC,EAAA,CAACC,EAAO,CAAC,IAAM,MAAOC,GAA0B,CACzED,EAAK,QAAQ,MAAM,2DAA2D,EAC9E,IAAME,EAAuBF,GAAM,sBAAwB,QAAQ,IAAIL,CAAc,EAC/EQ,EAAUH,GAAM,SAAW,QAAQ,IAAIJ,CAAY,EACnDQ,EAAkBJ,GAAM,iBAAmB,QAAQ,IAAIH,CAAqB,EAClF,GAAI,CAACK,GAAwB,CAACC,EAC1B,MAAM,IAAIE,EAAyB,2CAA4C,CAC3E,OAAQL,EAAK,MACjB,CAAC,EAEL,IAAMM,EAAc,MAAMC,EAAa,CACnC,GAAGP,EACH,iBAAkBQ,GAAyB,iBAAiB,EAAEN,CAAoB,GAC9EO,EAAaP,EAAsB,CAAE,SAAU,OAAQ,CAAC,EAC5D,QAAAC,EACA,gBAAAC,CACJ,CAAC,EAAEH,CAAqB,EACxB,OAAIC,IAAyB,QAAQ,IAAIP,CAAc,GACnDe,EAAqBJ,EAAa,wCAAyC,GAAG,EAE3EA,CACX,EArB6B",
6
+ "names": ["readFileSync", "fromWebToken", "__name", "init", "awsIdentityProperties", "roleArn", "roleSessionName", "webIdentityToken", "providerId", "policyArns", "policy", "durationSeconds", "roleAssumerWithWebIdentity", "getDefaultRoleAssumerWithWebIdentity", "ENV_TOKEN_FILE", "ENV_ROLE_ARN", "ENV_ROLE_SESSION_NAME", "fromTokenFile", "__name", "init", "awsIdentityProperties", "webIdentityTokenFile", "roleArn", "roleSessionName", "CredentialsProviderError", "credentials", "fromWebToken", "externalDataInterceptor", "readFileSync", "setCredentialFeature"]
7
+ }
@@ -0,0 +1,3 @@
1
+ /* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
2
+ import{p as v}from"./chunk-OV75J3RB.mjs";import{b as f,c as d,h as E,i as q,j as A,k as I,l as N}from"./chunk-ZH5DZOB5.mjs";import"./chunk-MATUPZWL.mjs";import"./chunk-5JDAL5HL.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-NX6AKUU3.mjs";import{a as o}from"./chunk-CFZ5JWD3.mjs";var P=o(e=>e&&(typeof e.sso_start_url=="string"||typeof e.sso_account_id=="string"||typeof e.sso_session=="string"||typeof e.sso_region=="string"||typeof e.sso_role_name=="string"),"isSsoProfile");var _="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var W=o(async(e,s={},t)=>{let{SSOOIDCClient:n}=await import("./sso-oidc-UVLJZI2R.mjs"),i=o(p=>s.clientConfig?.[p]??s.parentClientConfig?.[p]??t?.[p],"coalesce");return new n(Object.assign({},s.clientConfig??{},{region:e??s.clientConfig?.region,logger:i("logger"),userAgentAppId:i("userAgentAppId")}))},"getSsoOidcClient");var X=o(async(e,s,t={},n)=>{let{CreateTokenCommand:i}=await import("./sso-oidc-UVLJZI2R.mjs");return(await W(s,t,n)).send(new i({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))},"getNewSsoOidcToken");var F=o(e=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new d(`Token is expired. ${_}`,!1)},"validateTokenExpiry");var w=o((e,s,t=!1)=>{if(typeof s>"u")throw new d(`Value not present for '${e}' in SSO Token${t?". Cannot refresh":""}. ${_}`,!1)},"validateTokenKey");import{promises as Y}from"node:fs";var{writeFile:B}=Y,z=o((e,s)=>{let t=q(e),n=JSON.stringify(s,null,2);return B(t,n)},"writeSSOTokenToFile");var J=new Map,D=o((e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let t=await N(e),n=E({profile:e.profile??s?.profile}),i=t[n];if(i){if(!i.sso_session)throw new d(`Profile '${n}' is missing required property 'sso_session'.`)}else throw new d(`Profile '${n}' could not be found in shared credentials file.`,!1);let a=i.sso_session,g=(await I(e))[a];if(!g)throw new d(`Sso session '${a}' could not be found in shared credentials file.`,!1);for(let l of["sso_start_url","sso_region"])if(!g[l])throw new d(`Sso session '${a}' is missing required property '${l}'.`,!1);let S=g.sso_start_url,O=g.sso_region,r;try{r=await A(a)}catch{throw new d(`The SSO session token associated with profile=${n} was not found or is invalid. ${_}`,!1)}w("accessToken",r.accessToken),w("expiresAt",r.expiresAt);let{accessToken:k,expiresAt:T}=r,c={token:k,expiration:new Date(T)};if(c.expiration.getTime()-Date.now()>3e5)return c;let m=J.get(a)??0;if(Date.now()-m<30*1e3)return F(c),c;w("clientId",r.clientId,!0),w("clientSecret",r.clientSecret,!0),w("refreshToken",r.refreshToken,!0);try{J.set(a,Date.now());let l=await X(r,O,e,s);w("accessToken",l.accessToken),w("expiresIn",l.expiresIn);let x=new Date(Date.now()+l.expiresIn*1e3);try{await z(a,{...r,accessToken:l.accessToken,expiresAt:x.toISOString(),refreshToken:l.refreshToken})}catch{}return{token:l.accessToken,expiration:x}}catch{return F(c),c}},"fromSso");var C=!1,$=o(async({ssoStartUrl:e,ssoSession:s,ssoAccountId:t,ssoRegion:n,ssoRoleName:i,ssoClient:a,clientConfig:p,parentClientConfig:g,callerClientConfig:S,profile:O,filepath:r,configFilepath:k,ignoreCache:T,logger:c})=>{let m,l="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let u=await D({profile:O,filepath:r,configFilepath:k,ignoreCache:T,clientConfig:p,parentClientConfig:g,logger:c})({callerClientConfig:S});m={accessToken:u.token,expiresAt:new Date(u.expiration).toISOString()}}catch(u){throw new f(u.message,{tryNextLink:C,logger:c})}else try{m=await A(e)}catch{throw new f(`The SSO session associated with this profile is invalid. ${l}`,{tryNextLink:C,logger:c})}if(new Date(m.expiresAt).getTime()-Date.now()<=0)throw new f(`The SSO session associated with this profile has expired. ${l}`,{tryNextLink:C,logger:c});let{accessToken:x}=m,{SSOClient:h,GetRoleCredentialsCommand:y}=await import("./loadSso-R47RBCPJ.mjs"),V=a||new h(Object.assign({},p??{},{logger:p?.logger??S?.logger??g?.logger,region:p?.region??n,userAgentAppId:p?.userAgentAppId??S?.userAgentAppId??g?.userAgentAppId})),M;try{M=await V.send(new y({accountId:t,roleName:i,accessToken:x}))}catch(u){throw new f(u,{tryNextLink:C,logger:c})}let{roleCredentials:{accessKeyId:b,secretAccessKey:G,sessionToken:K,expiration:H,credentialScope:U,accountId:j}={}}=M;if(!b||!G||!K||!H)throw new f("SSO returns an invalid temporary credential.",{tryNextLink:C,logger:c});let R={accessKeyId:b,secretAccessKey:G,sessionToken:K,expiration:new Date(H),...U&&{credentialScope:U},...j&&{accountId:j}};return s?v(R,"CREDENTIALS_SSO","s"):v(R,"CREDENTIALS_SSO_LEGACY","u"),R},"resolveSSOCredentials");var L=o((e,s)=>{let{sso_start_url:t,sso_account_id:n,sso_region:i,sso_role_name:a}=e;if(!t||!n||!i||!a)throw new f(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
3
+ Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:s});return e},"validateSsoProfile");var Z=o((e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:t,ssoAccountId:n,ssoRegion:i,ssoRoleName:a,ssoSession:p}=e,{ssoClient:g}=e,S=E({profile:e.profile??s?.profile});if(!t&&!n&&!i&&!a&&!p){let r=(await N(e))[S];if(!r)throw new f(`Profile ${S} was not found.`,{logger:e.logger});if(!P(r))throw new f(`Profile ${S} is not configured with SSO credentials.`,{logger:e.logger});if(r?.sso_session){let h=(await I(e))[r.sso_session],y=` configurations in profile ${S} and sso-session ${r.sso_session}`;if(i&&i!==h.sso_region)throw new f("Conflicting SSO region"+y,{tryNextLink:!1,logger:e.logger});if(t&&t!==h.sso_start_url)throw new f("Conflicting SSO start_url"+y,{tryNextLink:!1,logger:e.logger});r.sso_region=h.sso_region,r.sso_start_url=h.sso_start_url}let{sso_start_url:k,sso_account_id:T,sso_region:c,sso_role_name:m,sso_session:l}=L(r,e.logger);return $({ssoStartUrl:k,ssoSession:l,ssoAccountId:T,ssoRegion:c,ssoRoleName:m,ssoClient:g,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:S,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}else{if(!t||!n||!i||!a)throw new f('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});return $({ssoStartUrl:t,ssoSession:p,ssoAccountId:n,ssoRegion:i,ssoRoleName:a,ssoClient:g,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:S,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}},"fromSSO");export{Z as fromSSO,P as isSsoProfile,L as validateSsoProfile};