@beesolve/analytics-processor 0.2.2 → 0.2.4

package/dist/monthlyRollup/dist-es-FPBJ7DAB.mjs

@@ -1,2 +0,0 @@
-/* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
-import{b as l}from"./chunk-ZH5DZOB5.mjs";import"./chunk-5JDAL5HL.mjs";import"./chunk-NX6AKUU3.mjs";import{a as i}from"./chunk-CFZ5JWD3.mjs";function I(o){return Promise.all(Object.keys(o).reduce((e,r)=>{let t=o[r];return typeof t=="string"?e.push([r,t]):e.push(t().then(n=>[r,n])),e},[])).then(e=>e.reduce((r,[t,n])=>(r[t]=n,r),{}))}i(I,"resolveLogins");function A(o){return async e=>{o.logger?.debug("@aws-sdk/credential-provider-cognito-identity - fromCognitoIdentity");let{GetCredentialsForIdentityCommand:r,CognitoIdentityClient:t}=await import("./loadCognitoIdentity-3OXED256.mjs"),n=i(u=>o.clientConfig?.[u]??o.parentClientConfig?.[u]??e?.callerClientConfig?.[u],"fromConfigs"),{Credentials:{AccessKeyId:s=P(o.logger),Expiration:c,SecretKey:f=k(o.logger),SessionToken:m}=j(o.logger)}=await(o.client??new t(Object.assign({},o.clientConfig??{},{region:n("region"),profile:n("profile"),userAgentAppId:n("userAgentAppId")}))).send(new r({CustomRoleArn:o.customRoleArn,IdentityId:o.identityId,Logins:o.logins?await I(o.logins):void 0}));return{identityId:o.identityId,accessKeyId:s,secretAccessKey:f,sessionToken:m,expiration:c}}}i(A,"fromCognitoIdentity");function P(o){throw new l("Response from Amazon Cognito contained no access key ID",{logger:o})}i(P,"throwOnMissingAccessKeyId");function j(o){throw new l("Response from Amazon Cognito contained no credentials",{logger:o})}i(j,"throwOnMissingCredentials");function k(o){throw new l("Response from Amazon Cognito contained no secret key",{logger:o})}i(k,"throwOnMissingSecretKey");var O="IdentityIds",h=class{static{i(this,"IndexedDbStorage")}dbName;constructor(e="aws:cognito-identity-ids"){this.dbName=e}getItem(e){return this.withObjectStore("readonly",r=>{let t=r.get(e);return new Promise(n=>{t.onerror=()=>n(null),t.onsuccess=()=>n(t.result?t.result.value:null)})}).catch(()=>null)}removeItem(e){return this.withObjectStore("readwrite",r=>{let t=r.delete(e);return new Promise((n,s)=>{t.onerror=()=>s(t.error),t.onsuccess=()=>n()})})}setItem(e,r){return this.withObjectStore("readwrite",t=>{let n=t.put({id:e,value:r});return new Promise((s,c)=>{n.onerror=()=>c(n.error),n.onsuccess=()=>s()})})}getDb(){let e=self.indexedDB.open(this.dbName,1);return new Promise((r,t)=>{e.onsuccess=()=>{r(e.result)},e.onerror=()=>{t(e.error)},e.onblocked=()=>{t(new Error("Unable to access DB"))},e.onupgradeneeded=()=>{let n=e.result;n.onerror=()=>{t(new Error("Failed to create object store"))},n.createObjectStore(O,{keyPath:"id"})}})}withObjectStore(e,r){return this.getDb().then(t=>{let n=t.transaction(O,e);return n.oncomplete=()=>t.close(),new Promise((s,c)=>{n.onerror=()=>c(n.error),s(r(n.objectStore(O)))}).catch(s=>{throw t.close(),s})})}};var y=class{static{i(this,"InMemoryStorage")}store;constructor(e={}){this.store=e}getItem(e){return e in this.store?this.store[e]:null}removeItem(e){delete this.store[e]}setItem(e,r){this.store[e]=r}};var D=new y;function v(){return typeof self=="object"&&self.indexedDB?new h:typeof window=="object"&&window.localStorage?window.localStorage:D}i(v,"localStorage");function R({accountId:o,cache:e=v(),client:r,clientConfig:t,customRoleArn:n,identityPoolId:s,logins:c,userIdentifier:f=!c||Object.keys(c).length===0?"ANONYMOUS":void 0,logger:m,parentClientConfig:u}){m?.debug("@aws-sdk/credential-provider-cognito-identity - fromCognitoIdentity");let d=f?`aws:cognito-identity-credentials:${s}:${f}`:void 0,C=i(async a=>{let{GetIdCommand:p,CognitoIdentityClient:x}=await import("./loadCognitoIdentity-3OXED256.mjs"),b=i(g=>t?.[g]??u?.[g]??a?.callerClientConfig?.[g],"fromConfigs"),S=r??new x(Object.assign({},t??{},{region:b("region"),profile:b("profile"),userAgentAppId:b("userAgentAppId")})),w=d&&await e.getItem(d);if(!w){let{IdentityId:g=E(m)}=await S.send(new p({AccountId:o,IdentityPoolId:s,Logins:c?await I(c):void 0}));w=g,d&&Promise.resolve(e.setItem(d,w)).catch(()=>{})}return C=A({client:S,customRoleArn:n,logins:c,identityId:w}),C(a)},"provider");return a=>C(a).catch(async p=>{throw d&&Promise.resolve(e.removeItem(d)).catch(()=>{}),p})}i(R,"fromCognitoIdentityPool");function E(o){throw new l("Response from Amazon Cognito contained no identity ID",{logger:o})}i(E,"throwOnMissingId");export{A as fromCognitoIdentity,R as fromCognitoIdentityPool};

package/dist/monthlyRollup/dist-es-G4DL2UUB.mjs

@@ -1,7 +0,0 @@
-/* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
-import{b as A,p as a}from"./chunk-YIZKQ2WK.mjs";import{K as _,c as C,u as p}from"./chunk-IHCR62UU.mjs";import{a as l}from"./chunk-FLISSIFQ.mjs";import"./chunk-C4CD3R2M.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-3GD7PA4I.mjs";import"./chunk-VG37NXBO.mjs";import"./chunk-NX6AKUU3.mjs";import{a as s}from"./chunk-CFZ5JWD3.mjs";import v from"node:fs/promises";var S="169.254.170.2",O="169.254.170.23",y="[fd00:ec2::23]",f=s((e,o)=>{if(e.protocol!=="https:"&&!(e.hostname===S||e.hostname===O||e.hostname===y)){if(e.hostname.includes("[")){if(e.hostname==="[::1]"||e.hostname==="[0000:0000:0000:0000:0000:0000:0000:0001]")return}else{if(e.hostname==="localhost")return;let n=e.hostname.split("."),r=s(t=>{let i=parseInt(t,10);return 0<=i&&i<=255},"inRange");if(n[0]==="127"&&r(n[1])&&r(n[2])&&r(n[3])&&n.length===4)return}throw new a(`URL not accepted. It must either be HTTPS or match one of the following:
-  - loopback CIDR 127.0.0.0/8 or [::1/128]
-  - ECS container host 169.254.170.2
-  - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:o})}},"checkUrl");function I(e){return new C({protocol:e.protocol,hostname:e.hostname,port:Number(e.port),path:e.pathname,query:Array.from(e.searchParams.entries()).reduce((o,[n,r])=>(o[n]=r,o),{}),fragment:e.hash})}s(I,"createGetRequest");async function u(e,o){let r=await _(e.body).transformToString();if(e.statusCode===200){let t=JSON.parse(r);if(typeof t.AccessKeyId!="string"||typeof t.SecretAccessKey!="string"||typeof t.Token!="string"||typeof t.Expiration!="string")throw new a("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:o});return{accessKeyId:t.AccessKeyId,secretAccessKey:t.SecretAccessKey,sessionToken:t.Token,expiration:p(t.Expiration)}}if(e.statusCode>=400&&e.statusCode<500){let t={};try{t=JSON.parse(r)}catch{}throw Object.assign(new a(`Server responded with status: ${e.statusCode}`,{logger:o}),{Code:t.Code,Message:t.Message})}throw new a(`Server responded with status: ${e.statusCode}`,{logger:o})}s(u,"getCredentials");var E=s((e,o,n)=>async()=>{for(let r=0;r<o;++r)try{return await e()}catch{await new Promise(i=>setTimeout(i,n))}return await e()},"retryWrapper");var L="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",U="http://169.254.170.2",k="AWS_CONTAINER_CREDENTIALS_FULL_URI",H="AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",K="AWS_CONTAINER_AUTHORIZATION_TOKEN",P=s((e={})=>{e.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");let o,n=e.awsContainerCredentialsRelativeUri??process.env[L],r=e.awsContainerCredentialsFullUri??process.env[k],t=e.awsContainerAuthorizationToken??process.env[K],i=e.awsContainerAuthorizationTokenFile??process.env[H],c=e.logger?.constructor?.name==="NoOpLogger"||!e.logger?.warn?console.warn:e.logger.warn.bind(e.logger);if(n&&r&&(c("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),c("awsContainerCredentialsRelativeUri will take precedence.")),t&&i&&(c("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),c("awsContainerAuthorizationTokenFile will take precedence.")),n)o=`${U}${n}`;else if(r)o=r;else throw new a(`No HTTP credential provider host provided.
-Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:e.logger});let T=new URL(o);f(T,e.logger);let h=l.create({connectionTimeout:e.timeout??1e3}),w=e.timeout??1e3,R=E(async()=>{let d=I(T);i?d.headers.Authorization=N((await v.readFile(i)).toString()):t&&(d.headers.Authorization=N(t));try{let m=await h.handle(d,{requestTimeout:w});return u(m.response).then(g=>A(g,"CREDENTIALS_HTTP","z"))}catch(m){throw new a(String(m),{logger:e.logger})}},e.maxRetries??3,e.timeout??1e3);return async()=>{try{return await R()}finally{h.destroy?.()}}},"fromHttp"),N=s(e=>{if(e.includes(`\r
-`))throw new a("Authorization token contains invalid \\r\\n sequence.");return e},"validateToken");export{P as fromHttp};

package/dist/monthlyRollup/dist-es-G4DL2UUB.mjs.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.75/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.75/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/checkUrl.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.75/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/requestHelpers.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.75/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/retry-wrapper.js"],
-  "sourcesContent": ["import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { CredentialsProviderError } from \"@smithy/core/config\";\nimport { NodeHttpHandler } from \"@smithy/node-http-handler\";\nimport fs from \"node:fs/promises\";\nimport { checkUrl } from \"./checkUrl\";\nimport { createGetRequest, getCredentials } from \"./requestHelpers\";\nimport { retryWrapper } from \"./retry-wrapper\";\nconst AWS_CONTAINER_CREDENTIALS_RELATIVE_URI = \"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI\";\nconst DEFAULT_LINK_LOCAL_HOST = \"http://169.254.170.2\";\nconst AWS_CONTAINER_CREDENTIALS_FULL_URI = \"AWS_CONTAINER_CREDENTIALS_FULL_URI\";\nconst AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE = \"AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE\";\nconst AWS_CONTAINER_AUTHORIZATION_TOKEN = \"AWS_CONTAINER_AUTHORIZATION_TOKEN\";\nexport const fromHttp = (options = {}) => {\n    options.logger?.debug(\"@aws-sdk/credential-provider-http - fromHttp\");\n    let host;\n    const relative = options.awsContainerCredentialsRelativeUri ?? process.env[AWS_CONTAINER_CREDENTIALS_RELATIVE_URI];\n    const full = options.awsContainerCredentialsFullUri ?? process.env[AWS_CONTAINER_CREDENTIALS_FULL_URI];\n    const token = options.awsContainerAuthorizationToken ?? process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN];\n    const tokenFile = options.awsContainerAuthorizationTokenFile ?? process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE];\n    const warn = options.logger?.constructor?.name === \"NoOpLogger\" || !options.logger?.warn\n        ? console.warn\n        : options.logger.warn.bind(options.logger);\n    if (relative && full) {\n        warn(\"@aws-sdk/credential-provider-http: \" +\n            \"you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri.\");\n        warn(\"awsContainerCredentialsRelativeUri will take precedence.\");\n    }\n    if (token && tokenFile) {\n        warn(\"@aws-sdk/credential-provider-http: \" +\n            \"you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile.\");\n        warn(\"awsContainerAuthorizationTokenFile will take precedence.\");\n    }\n    if (relative) {\n        host = `${DEFAULT_LINK_LOCAL_HOST}${relative}`;\n    }\n    else if (full) {\n        host = full;\n    }\n    else {\n        throw new CredentialsProviderError(`No HTTP credential provider host provided.\nSet AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`, { logger: options.logger });\n    }\n    const url = new URL(host);\n    checkUrl(url, options.logger);\n    const requestHandler = NodeHttpHandler.create({ connectionTimeout: options.timeout ?? 1000 });\n    const requestTimeout = options.timeout ?? 1000;\n    const provider = retryWrapper(async () => {\n        const request = createGetRequest(url);\n        if (tokenFile) {\n            request.headers.Authorization = validateToken((await fs.readFile(tokenFile)).toString());\n        }\n        else if (token) {\n            request.headers.Authorization = validateToken(token);\n        }\n        try {\n            const result = await requestHandler.handle(request, { requestTimeout });\n            return getCredentials(result.response).then((creds) => setCredentialFeature(creds, \"CREDENTIALS_HTTP\", \"z\"));\n        }\n        catch (e) {\n            throw new CredentialsProviderError(String(e), { logger: options.logger });\n        }\n    }, options.maxRetries ?? 3, options.timeout ?? 1000);\n    return async () => {\n        try {\n            return await provider();\n        }\n        finally {\n            requestHandler.destroy?.();\n        }\n    };\n};\nconst validateToken = (token) => {\n    if (token.includes(\"\\r\\n\")) {\n        throw new CredentialsProviderError(\"Authorization token contains invalid \\\\r\\\\n sequence.\");\n    }\n    return token;\n};\n", "import { CredentialsProviderError } from \"@smithy/core/config\";\nconst LOOPBACK_CIDR_IPv4 = \"127.0.0.0/8\";\nconst LOOPBACK_CIDR_IPv6 = \"::1/128\";\nconst ECS_CONTAINER_HOST = \"169.254.170.2\";\nconst EKS_CONTAINER_HOST_IPv4 = \"169.254.170.23\";\nconst EKS_CONTAINER_HOST_IPv6 = \"[fd00:ec2::23]\";\nexport const checkUrl = (url, logger) => {\n    if (url.protocol === \"https:\") {\n        return;\n    }\n    if (url.hostname === ECS_CONTAINER_HOST ||\n        url.hostname === EKS_CONTAINER_HOST_IPv4 ||\n        url.hostname === EKS_CONTAINER_HOST_IPv6) {\n        return;\n    }\n    if (url.hostname.includes(\"[\")) {\n        if (url.hostname === \"[::1]\" || url.hostname === \"[0000:0000:0000:0000:0000:0000:0000:0001]\") {\n            return;\n        }\n    }\n    else {\n        if (url.hostname === \"localhost\") {\n            return;\n        }\n        const ipComponents = url.hostname.split(\".\");\n        const inRange = (component) => {\n            const num = parseInt(component, 10);\n            return 0 <= num && num <= 255;\n        };\n        if (ipComponents[0] === \"127\" &&\n            inRange(ipComponents[1]) &&\n            inRange(ipComponents[2]) &&\n            inRange(ipComponents[3]) &&\n            ipComponents.length === 4) {\n            return;\n        }\n    }\n    throw new CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:\n  - loopback CIDR 127.0.0.0/8 or [::1/128]\n  - ECS container host 169.254.170.2\n  - EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger });\n};\n", "import { CredentialsProviderError } from \"@smithy/core/config\";\nimport { HttpRequest } from \"@smithy/core/protocols\";\nimport { parseRfc3339DateTime } from \"@smithy/core/serde\";\nimport { sdkStreamMixin } from \"@smithy/core/serde\";\nexport function createGetRequest(url) {\n    return new HttpRequest({\n        protocol: url.protocol,\n        hostname: url.hostname,\n        port: Number(url.port),\n        path: url.pathname,\n        query: Array.from(url.searchParams.entries()).reduce((acc, [k, v]) => {\n            acc[k] = v;\n            return acc;\n        }, {}),\n        fragment: url.hash,\n    });\n}\nexport async function getCredentials(response, logger) {\n    const stream = sdkStreamMixin(response.body);\n    const str = await stream.transformToString();\n    if (response.statusCode === 200) {\n        const parsed = JSON.parse(str);\n        if (typeof parsed.AccessKeyId !== \"string\" ||\n            typeof parsed.SecretAccessKey !== \"string\" ||\n            typeof parsed.Token !== \"string\" ||\n            typeof parsed.Expiration !== \"string\") {\n            throw new CredentialsProviderError(\"HTTP credential provider response not of the required format, an object matching: \" +\n                \"{ AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }\", { logger });\n        }\n        return {\n            accessKeyId: parsed.AccessKeyId,\n            secretAccessKey: parsed.SecretAccessKey,\n            sessionToken: parsed.Token,\n            expiration: parseRfc3339DateTime(parsed.Expiration),\n        };\n    }\n    if (response.statusCode >= 400 && response.statusCode < 500) {\n        let parsedBody = {};\n        try {\n            parsedBody = JSON.parse(str);\n        }\n        catch (e) { }\n        throw Object.assign(new CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger }), {\n            Code: parsedBody.Code,\n            Message: parsedBody.Message,\n        });\n    }\n    throw new CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger });\n}\n", "export const retryWrapper = (toRetry, maxRetries, delayMs) => {\n    return async () => {\n        for (let i = 0; i < maxRetries; ++i) {\n            try {\n                return await toRetry();\n            }\n            catch (e) {\n                await new Promise((resolve) => setTimeout(resolve, delayMs));\n            }\n        }\n        return await toRetry();\n    };\n};\n"],
-  "mappings": ";0UAGA,OAAOA,MAAQ,mBCAf,IAAMC,EAAqB,gBACrBC,EAA0B,iBAC1BC,EAA0B,iBACnBC,EAAWC,EAAA,CAACC,EAAKC,IAAW,CACrC,GAAID,EAAI,WAAa,UAGjB,EAAAA,EAAI,WAAaL,GACjBK,EAAI,WAAaJ,GACjBI,EAAI,WAAaH,GAGrB,IAAIG,EAAI,SAAS,SAAS,GAAG,GACzB,GAAIA,EAAI,WAAa,SAAWA,EAAI,WAAa,4CAC7C,WAGH,CACD,GAAIA,EAAI,WAAa,YACjB,OAEJ,IAAME,EAAeF,EAAI,SAAS,MAAM,GAAG,EACrCG,EAAUJ,EAACK,GAAc,CAC3B,IAAMC,EAAM,SAASD,EAAW,EAAE,EAClC,MAAO,IAAKC,GAAOA,GAAO,GAC9B,EAHgB,WAIhB,GAAIH,EAAa,CAAC,IAAM,OACpBC,EAAQD,EAAa,CAAC,CAAC,GACvBC,EAAQD,EAAa,CAAC,CAAC,GACvBC,EAAQD,EAAa,CAAC,CAAC,GACvBA,EAAa,SAAW,EACxB,MAER,CACA,MAAM,IAAII,EAAyB;AAAA;AAAA;AAAA,yDAGmB,CAAE,OAAAL,CAAO,CAAC,EACpE,EAnCwB,YCFjB,SAASM,EAAiBC,EAAK,CAClC,OAAO,IAAIC,EAAY,CACnB,SAAUD,EAAI,SACd,SAAUA,EAAI,SACd,KAAM,OAAOA,EAAI,IAAI,EACrB,KAAMA,EAAI,SACV,MAAO,MAAM,KAAKA,EAAI,aAAa,QAAQ,CAAC,EAAE,OAAO,CAACE,EAAK,CAACC,EAAGC,CAAC,KAC5DF,EAAIC,CAAC,EAAIC,EACFF,GACR,CAAC,CAAC,EACL,SAAUF,EAAI,IAClB,CAAC,CACL,CAZgBK,EAAAN,EAAA,oBAahB,eAAsBO,EAAeC,EAAUC,EAAQ,CAEnD,IAAMC,EAAM,MADGC,EAAeH,EAAS,IAAI,EAClB,kBAAkB,EAC3C,GAAIA,EAAS,aAAe,IAAK,CAC7B,IAAMI,EAAS,KAAK,MAAMF,CAAG,EAC7B,GAAI,OAAOE,EAAO,aAAgB,UAC9B,OAAOA,EAAO,iBAAoB,UAClC,OAAOA,EAAO,OAAU,UACxB,OAAOA,EAAO,YAAe,SAC7B,MAAM,IAAIC,EAAyB,iLACiE,CAAE,OAAAJ,CAAO,CAAC,EAElH,MAAO,CACH,YAAaG,EAAO,YACpB,gBAAiBA,EAAO,gBACxB,aAAcA,EAAO,MACrB,WAAYE,EAAqBF,EAAO,UAAU,CACtD,CACJ,CACA,GAAIJ,EAAS,YAAc,KAAOA,EAAS,WAAa,IAAK,CACzD,IAAIO,EAAa,CAAC,EAClB,GAAI,CACAA,EAAa,KAAK,MAAML,CAAG,CAC/B,MACU,CAAE,CACZ,MAAM,OAAO,OAAO,IAAIG,EAAyB,iCAAiCL,EAAS,UAAU,GAAI,CAAE,OAAAC,CAAO,CAAC,EAAG,CAClH,KAAMM,EAAW,KACjB,QAASA,EAAW,OACxB,CAAC,CACL,CACA,MAAM,IAAIF,EAAyB,iCAAiCL,EAAS,UAAU,GAAI,CAAE,OAAAC,CAAO,CAAC,CACzG,CA/BsBH,EAAAC,EAAA,kBCjBf,IAAMS,EAAeC,EAAA,CAACC,EAASC,EAAYC,IACvC,SAAY,CACf,QAASC,EAAI,EAAGA,EAAIF,EAAY,EAAEE,EAC9B,GAAI,CACA,OAAO,MAAMH,EAAQ,CACzB,MACU,CACN,MAAM,IAAI,QAASI,GAAY,WAAWA,EAASF,CAAO,CAAC,CAC/D,CAEJ,OAAO,MAAMF,EAAQ,CACzB,EAXwB,gBHO5B,IAAMK,EAAyC,yCACzCC,EAA0B,uBAC1BC,EAAqC,qCACrCC,EAAyC,yCACzCC,EAAoC,oCAC7BC,EAAWC,EAAA,CAACC,EAAU,CAAC,IAAM,CACtCA,EAAQ,QAAQ,MAAM,8CAA8C,EACpE,IAAIC,EACEC,EAAWF,EAAQ,oCAAsC,QAAQ,IAAIP,CAAsC,EAC3GU,EAAOH,EAAQ,gCAAkC,QAAQ,IAAIL,CAAkC,EAC/FS,EAAQJ,EAAQ,gCAAkC,QAAQ,IAAIH,CAAiC,EAC/FQ,EAAYL,EAAQ,oCAAsC,QAAQ,IAAIJ,CAAsC,EAC5GU,EAAON,EAAQ,QAAQ,aAAa,OAAS,cAAgB,CAACA,EAAQ,QAAQ,KAC9E,QAAQ,KACRA,EAAQ,OAAO,KAAK,KAAKA,EAAQ,MAAM,EAW7C,GAVIE,GAAYC,IACZG,EAAK,6HACyF,EAC9FA,EAAK,0DAA0D,GAE/DF,GAASC,IACTC,EAAK,6HACyF,EAC9FA,EAAK,0DAA0D,GAE/DJ,EACAD,EAAO,GAAGP,CAAuB,GAAGQ,CAAQ,WAEvCC,EACLF,EAAOE,MAGP,OAAM,IAAII,EAAyB;AAAA,mFACyC,CAAE,OAAQP,EAAQ,MAAO,CAAC,EAE1G,IAAMQ,EAAM,IAAI,IAAIP,CAAI,EACxBQ,EAASD,EAAKR,EAAQ,MAAM,EAC5B,IAAMU,EAAiBC,EAAgB,OAAO,CAAE,kBAAmBX,EAAQ,SAAW,GAAK,CAAC,EACtFY,EAAiBZ,EAAQ,SAAW,IACpCa,EAAWC,EAAa,SAAY,CACtC,IAAMC,EAAUC,EAAiBR,CAAG,EAChCH,EACAU,EAAQ,QAAQ,cAAgBE,GAAe,MAAMC,EAAG,SAASb,CAAS,GAAG,SAAS,CAAC,EAElFD,IACLW,EAAQ,QAAQ,cAAgBE,EAAcb,CAAK,GAEvD,GAAI,CACA,IAAMe,EAAS,MAAMT,EAAe,OAAOK,EAAS,CAAE,eAAAH,CAAe,CAAC,EACtE,OAAOQ,EAAeD,EAAO,QAAQ,EAAE,KAAME,GAAUC,EAAqBD,EAAO,mBAAoB,GAAG,CAAC,CAC/G,OACOE,EAAG,CACN,MAAM,IAAIhB,EAAyB,OAAOgB,CAAC,EAAG,CAAE,OAAQvB,EAAQ,MAAO,CAAC,CAC5E,CACJ,EAAGA,EAAQ,YAAc,EAAGA,EAAQ,SAAW,GAAI,EACnD,MAAO,UAAY,CACf,GAAI,CACA,OAAO,MAAMa,EAAS,CAC1B,QACA,CACIH,EAAe,UAAU,CAC7B,CACJ,CACJ,EA1DwB,YA2DlBO,EAAgBlB,EAACK,GAAU,CAC7B,GAAIA,EAAM,SAAS;AAAA,CAAM,EACrB,MAAM,IAAIG,EAAyB,uDAAuD,EAE9F,OAAOH,CACX,EALsB",
-  "names": ["fs", "ECS_CONTAINER_HOST", "EKS_CONTAINER_HOST_IPv4", "EKS_CONTAINER_HOST_IPv6", "checkUrl", "__name", "url", "logger", "ipComponents", "inRange", "component", "num", "CredentialsProviderError", "createGetRequest", "url", "HttpRequest", "acc", "k", "v", "__name", "getCredentials", "response", "logger", "str", "sdkStreamMixin", "parsed", "CredentialsProviderError", "parseRfc3339DateTime", "parsedBody", "retryWrapper", "__name", "toRetry", "maxRetries", "delayMs", "i", "resolve", "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI", "DEFAULT_LINK_LOCAL_HOST", "AWS_CONTAINER_CREDENTIALS_FULL_URI", "AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE", "AWS_CONTAINER_AUTHORIZATION_TOKEN", "fromHttp", "__name", "options", "host", "relative", "full", "token", "tokenFile", "warn", "CredentialsProviderError", "url", "checkUrl", "requestHandler", "NodeHttpHandler", "requestTimeout", "provider", "retryWrapper", "request", "createGetRequest", "validateToken", "fs", "result", "getCredentials", "creds", "setCredentialFeature", "e"]
-}

package/dist/monthlyRollup/dist-es-IRYFH3EH.mjs

@@ -1,2 +0,0 @@
-/* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
-import{a,b,c}from"./chunk-PBJCPHYW.mjs";import"./chunk-KT7DZL3D.mjs";import"./chunk-3YRRUMLY.mjs";import"./chunk-ZH5DZOB5.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-MATUPZWL.mjs";import"./chunk-5JDAL5HL.mjs";import"./chunk-NX6AKUU3.mjs";import"./chunk-CFZ5JWD3.mjs";export{c as credentialsTreatedAsExpired,b as credentialsWillNeedRefresh,a as defaultProvider};

package/dist/monthlyRollup/dist-es-L5F6PNYU.mjs

@@ -1,2 +0,0 @@
-/* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
-import{b as d,p as a,z as m}from"./chunk-YIZKQ2WK.mjs";import"./chunk-IHCR62UU.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-NX6AKUU3.mjs";import{a as t}from"./chunk-CFZ5JWD3.mjs";import{readFileSync as S}from"node:fs";var c=t(e=>async s=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:o,roleSessionName:r,webIdentityToken:i,providerId:n,policyArns:g,policy:E,durationSeconds:p}=e,{roleAssumerWithWebIdentity:l}=e;if(!l){let{getDefaultRoleAssumerWithWebIdentity:_}=await import("./sts-AQIPDWOX.mjs");l=_({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...s?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return l({RoleArn:o,RoleSessionName:r??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:i,ProviderId:n,PolicyArns:g,Policy:E,DurationSeconds:p})},"fromWebToken");var f="AWS_WEB_IDENTITY_TOKEN_FILE",T="AWS_ROLE_ARN",N="AWS_ROLE_SESSION_NAME",I=t((e={})=>async s=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let o=e?.webIdentityTokenFile??process.env[f],r=e?.roleArn??process.env[T],i=e?.roleSessionName??process.env[N];if(!o||!r)throw new a("Web identity configuration not specified",{logger:e.logger});let n=await c({...e,webIdentityToken:m?.getTokenRecord?.()[o]??S(o,{encoding:"ascii"}),roleArn:r,roleSessionName:i})(s);return o===process.env[f]&&d(n,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h"),n},"fromTokenFile");export{I as fromTokenFile,c as fromWebToken};

package/dist/monthlyRollup/dist-es-L5F6PNYU.mjs.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.79/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-web-identity@3.972.79/node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromWebToken.js"],
-  "sourcesContent": ["import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { CredentialsProviderError, externalDataInterceptor } from \"@smithy/core/config\";\nimport { readFileSync } from \"node:fs\";\nimport { fromWebToken } from \"./fromWebToken\";\nconst ENV_TOKEN_FILE = \"AWS_WEB_IDENTITY_TOKEN_FILE\";\nconst ENV_ROLE_ARN = \"AWS_ROLE_ARN\";\nconst ENV_ROLE_SESSION_NAME = \"AWS_ROLE_SESSION_NAME\";\nexport const fromTokenFile = (init = {}) => async (awsIdentityProperties) => {\n    init.logger?.debug(\"@aws-sdk/credential-provider-web-identity - fromTokenFile\");\n    const webIdentityTokenFile = init?.webIdentityTokenFile ?? process.env[ENV_TOKEN_FILE];\n    const roleArn = init?.roleArn ?? process.env[ENV_ROLE_ARN];\n    const roleSessionName = init?.roleSessionName ?? process.env[ENV_ROLE_SESSION_NAME];\n    if (!webIdentityTokenFile || !roleArn) {\n        throw new CredentialsProviderError(\"Web identity configuration not specified\", {\n            logger: init.logger,\n        });\n    }\n    const credentials = await fromWebToken({\n        ...init,\n        webIdentityToken: externalDataInterceptor?.getTokenRecord?.()[webIdentityTokenFile] ??\n            readFileSync(webIdentityTokenFile, { encoding: \"ascii\" }),\n        roleArn,\n        roleSessionName,\n    })(awsIdentityProperties);\n    if (webIdentityTokenFile === process.env[ENV_TOKEN_FILE]) {\n        setCredentialFeature(credentials, \"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN\", \"h\");\n    }\n    return credentials;\n};\n", "export const fromWebToken = (init) => async (awsIdentityProperties) => {\n    init.logger?.debug(\"@aws-sdk/credential-provider-web-identity - fromWebToken\");\n    const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;\n    let { roleAssumerWithWebIdentity } = init;\n    if (!roleAssumerWithWebIdentity) {\n        const { getDefaultRoleAssumerWithWebIdentity } = await import(\"@aws-sdk/nested-clients/sts\");\n        roleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity({\n            ...init.clientConfig,\n            credentialProviderLogger: init.logger,\n            parentClientConfig: {\n                ...awsIdentityProperties?.callerClientConfig,\n                ...init.parentClientConfig,\n            },\n        }, init.clientPlugins);\n    }\n    return roleAssumerWithWebIdentity({\n        RoleArn: roleArn,\n        RoleSessionName: roleSessionName ?? `aws-sdk-js-session-${Date.now()}`,\n        WebIdentityToken: webIdentityToken,\n        ProviderId: providerId,\n        PolicyArns: policyArns,\n        Policy: policy,\n        DurationSeconds: durationSeconds,\n    });\n};\n"],
-  "mappings": ";uLAEA,OAAS,gBAAAA,MAAoB,UCFtB,IAAMC,EAAeC,EAACC,GAAS,MAAOC,GAA0B,CACnED,EAAK,QAAQ,MAAM,0DAA0D,EAC7E,GAAM,CAAE,QAAAE,EAAS,gBAAAC,EAAiB,iBAAAC,EAAkB,WAAAC,EAAY,WAAAC,EAAY,OAAAC,EAAQ,gBAAAC,CAAgB,EAAIR,EACpG,CAAE,2BAAAS,CAA2B,EAAIT,EACrC,GAAI,CAACS,EAA4B,CAC7B,GAAM,CAAE,qCAAAC,CAAqC,EAAI,KAAM,QAAO,oBAA6B,EAC3FD,EAA6BC,EAAqC,CAC9D,GAAGV,EAAK,aACR,yBAA0BA,EAAK,OAC/B,mBAAoB,CAChB,GAAGC,GAAuB,mBAC1B,GAAGD,EAAK,kBACZ,CACJ,EAAGA,EAAK,aAAa,CACzB,CACA,OAAOS,EAA2B,CAC9B,QAASP,EACT,gBAAiBC,GAAmB,sBAAsB,KAAK,IAAI,CAAC,GACpE,iBAAkBC,EAClB,WAAYC,EACZ,WAAYC,EACZ,OAAQC,EACR,gBAAiBC,CACrB,CAAC,CACL,EAxB4B,gBDI5B,IAAMG,EAAiB,8BACjBC,EAAe,eACfC,EAAwB,wBACjBC,EAAgBC,EAAA,CAACC,EAAO,CAAC,IAAM,MAAOC,GAA0B,CACzED,EAAK,QAAQ,MAAM,2DAA2D,EAC9E,IAAME,EAAuBF,GAAM,sBAAwB,QAAQ,IAAIL,CAAc,EAC/EQ,EAAUH,GAAM,SAAW,QAAQ,IAAIJ,CAAY,EACnDQ,EAAkBJ,GAAM,iBAAmB,QAAQ,IAAIH,CAAqB,EAClF,GAAI,CAACK,GAAwB,CAACC,EAC1B,MAAM,IAAIE,EAAyB,2CAA4C,CAC3E,OAAQL,EAAK,MACjB,CAAC,EAEL,IAAMM,EAAc,MAAMC,EAAa,CACnC,GAAGP,EACH,iBAAkBQ,GAAyB,iBAAiB,EAAEN,CAAoB,GAC9EO,EAAaP,EAAsB,CAAE,SAAU,OAAQ,CAAC,EAC5D,QAAAC,EACA,gBAAAC,CACJ,CAAC,EAAEH,CAAqB,EACxB,OAAIC,IAAyB,QAAQ,IAAIP,CAAc,GACnDe,EAAqBJ,EAAa,wCAAyC,GAAG,EAE3EA,CACX,EArB6B",
-  "names": ["readFileSync", "fromWebToken", "__name", "init", "awsIdentityProperties", "roleArn", "roleSessionName", "webIdentityToken", "providerId", "policyArns", "policy", "durationSeconds", "roleAssumerWithWebIdentity", "getDefaultRoleAssumerWithWebIdentity", "ENV_TOKEN_FILE", "ENV_ROLE_ARN", "ENV_ROLE_SESSION_NAME", "fromTokenFile", "__name", "init", "awsIdentityProperties", "webIdentityTokenFile", "roleArn", "roleSessionName", "CredentialsProviderError", "credentials", "fromWebToken", "externalDataInterceptor", "readFileSync", "setCredentialFeature"]
-}

package/dist/monthlyRollup/dist-es-LEKBJS4E.mjs

@@ -1,2 +0,0 @@
-/* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
-import{a,b,c,d,e,f,g}from"./chunk-KT7DZL3D.mjs";import"./chunk-3YRRUMLY.mjs";import"./chunk-ZH5DZOB5.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-MATUPZWL.mjs";import"./chunk-5JDAL5HL.mjs";import"./chunk-NX6AKUU3.mjs";import"./chunk-CFZ5JWD3.mjs";export{f as ENV_ACCOUNT_ID,e as ENV_CREDENTIAL_SCOPE,d as ENV_EXPIRATION,a as ENV_KEY,b as ENV_SECRET,c as ENV_SESSION,g as fromEnv};

package/dist/monthlyRollup/dist-es-NMUDTELL.mjs

@@ -1,2 +0,0 @@
-/* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
-import{b as a,p as i,u as p,y as f,z as u}from"./chunk-YIZKQ2WK.mjs";import"./chunk-IHCR62UU.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-NX6AKUU3.mjs";import{a as t}from"./chunk-CFZ5JWD3.mjs";import{exec as m}from"node:child_process";import{promisify as x}from"node:util";var w=t((r,e,o)=>{if(e.Version!==1)throw Error(`Profile ${r} credential_process did not return Version 1.`);if(e.AccessKeyId===void 0||e.SecretAccessKey===void 0)throw Error(`Profile ${r} credential_process returned invalid credentials.`);if(e.Expiration){let d=new Date;if(new Date(e.Expiration)<d)throw Error(`Profile ${r} credential_process returned expired credentials.`)}let s=e.AccountId;!s&&o?.[r]?.aws_account_id&&(s=o[r].aws_account_id);let n={accessKeyId:e.AccessKeyId,secretAccessKey:e.SecretAccessKey,...e.SessionToken&&{sessionToken:e.SessionToken},...e.Expiration&&{expiration:new Date(e.Expiration)},...e.CredentialScope&&{credentialScope:e.CredentialScope},...s&&{accountId:s}};return a(n,"CREDENTIALS_PROCESS","w"),n},"getValidatedProcessCredentials");var P=t(async(r,e,o)=>{let s=e[r];if(e[r]){let n=s.credential_process;if(n!==void 0){let d=x(u?.getTokenRecord?.().exec??m);try{let{stdout:c}=await d(n),l;try{l=JSON.parse(c.trim())}catch{throw Error(`Profile ${r} credential_process returned invalid JSON.`)}return w(r,l,e)}catch(c){throw new i(c.message,{logger:o})}}else throw new i(`Profile ${r} did not contain credential_process.`,{logger:o})}else throw new i(`Profile ${r} could not be found in shared credentials file.`,{logger:o})},"resolveProcessCredentials");var E=t((r={})=>async({callerClientConfig:e}={})=>{r.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");let o=await f(r);return P(p({profile:r.profile??e?.profile}),o,r.logger)},"fromProcess");export{E as fromProcess};

package/dist/monthlyRollup/dist-es-NMUDTELL.mjs.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.73/node_modules/@aws-sdk/credential-provider-process/dist-es/resolveProcessCredentials.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.73/node_modules/@aws-sdk/credential-provider-process/dist-es/getValidatedProcessCredentials.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-process@3.972.73/node_modules/@aws-sdk/credential-provider-process/dist-es/fromProcess.js"],
-  "sourcesContent": ["import { CredentialsProviderError, externalDataInterceptor } from \"@smithy/core/config\";\nimport { exec } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { getValidatedProcessCredentials } from \"./getValidatedProcessCredentials\";\nexport const resolveProcessCredentials = async (profileName, profiles, logger) => {\n    const profile = profiles[profileName];\n    if (profiles[profileName]) {\n        const credentialProcess = profile[\"credential_process\"];\n        if (credentialProcess !== undefined) {\n            const execPromise = promisify(externalDataInterceptor?.getTokenRecord?.().exec ?? exec);\n            try {\n                const { stdout } = await execPromise(credentialProcess);\n                let data;\n                try {\n                    data = JSON.parse(stdout.trim());\n                }\n                catch {\n                    throw Error(`Profile ${profileName} credential_process returned invalid JSON.`);\n                }\n                return getValidatedProcessCredentials(profileName, data, profiles);\n            }\n            catch (error) {\n                throw new CredentialsProviderError(error.message, { logger });\n            }\n        }\n        else {\n            throw new CredentialsProviderError(`Profile ${profileName} did not contain credential_process.`, { logger });\n        }\n    }\n    else {\n        throw new CredentialsProviderError(`Profile ${profileName} could not be found in shared credentials file.`, {\n            logger,\n        });\n    }\n};\n", "import { setCredentialFeature } from \"@aws-sdk/core/client\";\nexport const getValidatedProcessCredentials = (profileName, data, profiles) => {\n    if (data.Version !== 1) {\n        throw Error(`Profile ${profileName} credential_process did not return Version 1.`);\n    }\n    if (data.AccessKeyId === undefined || data.SecretAccessKey === undefined) {\n        throw Error(`Profile ${profileName} credential_process returned invalid credentials.`);\n    }\n    if (data.Expiration) {\n        const currentTime = new Date();\n        const expireTime = new Date(data.Expiration);\n        if (expireTime < currentTime) {\n            throw Error(`Profile ${profileName} credential_process returned expired credentials.`);\n        }\n    }\n    let accountId = data.AccountId;\n    if (!accountId && profiles?.[profileName]?.aws_account_id) {\n        accountId = profiles[profileName].aws_account_id;\n    }\n    const credentials = {\n        accessKeyId: data.AccessKeyId,\n        secretAccessKey: data.SecretAccessKey,\n        ...(data.SessionToken && { sessionToken: data.SessionToken }),\n        ...(data.Expiration && { expiration: new Date(data.Expiration) }),\n        ...(data.CredentialScope && { credentialScope: data.CredentialScope }),\n        ...(accountId && { accountId }),\n    };\n    setCredentialFeature(credentials, \"CREDENTIALS_PROCESS\", \"w\");\n    return credentials;\n};\n", "import { getProfileName, parseKnownFiles } from \"@smithy/core/config\";\nimport { resolveProcessCredentials } from \"./resolveProcessCredentials\";\nexport const fromProcess = (init = {}) => async ({ callerClientConfig } = {}) => {\n    init.logger?.debug(\"@aws-sdk/credential-provider-process - fromProcess\");\n    const profiles = await parseKnownFiles(init);\n    return resolveProcessCredentials(getProfileName({\n        profile: init.profile ?? callerClientConfig?.profile,\n    }), profiles, init.logger);\n};\n"],
-  "mappings": ";qMACA,OAAS,QAAAA,MAAY,qBACrB,OAAS,aAAAC,MAAiB,YCDnB,IAAMC,EAAiCC,EAAA,CAACC,EAAaC,EAAMC,IAAa,CAC3E,GAAID,EAAK,UAAY,EACjB,MAAM,MAAM,WAAWD,CAAW,+CAA+C,EAErF,GAAIC,EAAK,cAAgB,QAAaA,EAAK,kBAAoB,OAC3D,MAAM,MAAM,WAAWD,CAAW,mDAAmD,EAEzF,GAAIC,EAAK,WAAY,CACjB,IAAME,EAAc,IAAI,KAExB,GADmB,IAAI,KAAKF,EAAK,UAAU,EAC1BE,EACb,MAAM,MAAM,WAAWH,CAAW,mDAAmD,CAE7F,CACA,IAAII,EAAYH,EAAK,UACjB,CAACG,GAAaF,IAAWF,CAAW,GAAG,iBACvCI,EAAYF,EAASF,CAAW,EAAE,gBAEtC,IAAMK,EAAc,CAChB,YAAaJ,EAAK,YAClB,gBAAiBA,EAAK,gBACtB,GAAIA,EAAK,cAAgB,CAAE,aAAcA,EAAK,YAAa,EAC3D,GAAIA,EAAK,YAAc,CAAE,WAAY,IAAI,KAAKA,EAAK,UAAU,CAAE,EAC/D,GAAIA,EAAK,iBAAmB,CAAE,gBAAiBA,EAAK,eAAgB,EACpE,GAAIG,GAAa,CAAE,UAAAA,CAAU,CACjC,EACA,OAAAE,EAAqBD,EAAa,sBAAuB,GAAG,EACrDA,CACX,EA5B8C,kCDGvC,IAAME,EAA4BC,EAAA,MAAOC,EAAaC,EAAUC,IAAW,CAC9E,IAAMC,EAAUF,EAASD,CAAW,EACpC,GAAIC,EAASD,CAAW,EAAG,CACvB,IAAMI,EAAoBD,EAAQ,mBAClC,GAAIC,IAAsB,OAAW,CACjC,IAAMC,EAAcC,EAAUC,GAAyB,iBAAiB,EAAE,MAAQC,CAAI,EACtF,GAAI,CACA,GAAM,CAAE,OAAAC,CAAO,EAAI,MAAMJ,EAAYD,CAAiB,EAClDM,EACJ,GAAI,CACAA,EAAO,KAAK,MAAMD,EAAO,KAAK,CAAC,CACnC,MACM,CACF,MAAM,MAAM,WAAWT,CAAW,4CAA4C,CAClF,CACA,OAAOW,EAA+BX,EAAaU,EAAMT,CAAQ,CACrE,OACOW,EAAO,CACV,MAAM,IAAIC,EAAyBD,EAAM,QAAS,CAAE,OAAAV,CAAO,CAAC,CAChE,CACJ,KAEI,OAAM,IAAIW,EAAyB,WAAWb,CAAW,uCAAwC,CAAE,OAAAE,CAAO,CAAC,CAEnH,KAEI,OAAM,IAAIW,EAAyB,WAAWb,CAAW,kDAAmD,CACxG,OAAAE,CACJ,CAAC,CAET,EA9ByC,6BEFlC,IAAMY,EAAcC,EAAA,CAACC,EAAO,CAAC,IAAM,MAAO,CAAE,mBAAAC,CAAmB,EAAI,CAAC,IAAM,CAC7ED,EAAK,QAAQ,MAAM,oDAAoD,EACvE,IAAME,EAAW,MAAMC,EAAgBH,CAAI,EAC3C,OAAOI,EAA0BC,EAAe,CAC5C,QAASL,EAAK,SAAWC,GAAoB,OACjD,CAAC,EAAGC,EAAUF,EAAK,MAAM,CAC7B,EAN2B",
-  "names": ["exec", "promisify", "getValidatedProcessCredentials", "__name", "profileName", "data", "profiles", "currentTime", "accountId", "credentials", "setCredentialFeature", "resolveProcessCredentials", "__name", "profileName", "profiles", "logger", "profile", "credentialProcess", "execPromise", "promisify", "externalDataInterceptor", "exec", "stdout", "data", "getValidatedProcessCredentials", "error", "CredentialsProviderError", "fromProcess", "__name", "init", "callerClientConfig", "profiles", "parseKnownFiles", "resolveProcessCredentials", "getProfileName"]
-}

package/dist/monthlyRollup/dist-es-OY2VA72W.mjs

@@ -1,2 +0,0 @@
-/* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
-import{p as A}from"./chunk-3YRRUMLY.mjs";import{b as a,h as N,l as R}from"./chunk-ZH5DZOB5.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-MATUPZWL.mjs";import{c as P}from"./chunk-5JDAL5HL.mjs";import"./chunk-NX6AKUU3.mjs";import{a as h}from"./chunk-CFZ5JWD3.mjs";import{createHash as $,createPrivateKey as H,createPublicKey as K,sign as v}from"node:crypto";import{promises as E}from"node:fs";import{homedir as _}from"node:os";import{dirname as B,join as b}from"node:path";var w=class c{static{h(this,"LoginCredentialsFetcher")}profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300*1e3;constructor(e,t,s){this.profileData=e,this.init=t,this.callerClientConfig=s}async loadCredentials(){let e=await this.loadToken();if(!e)throw new a(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let t=e.accessToken,s=Date.now();return new Date(t.expiresAt).getTime()-s<=c.REFRESH_THRESHOLD?this.refresh(e):this.toCredentials(e.accessToken)}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}toCredentials(e){return{accessKeyId:e.accessKeyId,secretAccessKey:e.secretAccessKey,sessionToken:e.sessionToken,accountId:e.accountId,expiration:new Date(e.expiresAt)}}async refresh(e){let t=await this.loadToken().catch(()=>e),s=Date.now(),r=new Date(t.accessToken.expiresAt).getTime(),i=new Date(e.accessToken.expiresAt).getTime(),o=r<=s&&i>s?e:t;if(new Date(o.accessToken.expiresAt).getTime()-Date.now()>c.REFRESH_THRESHOLD)return this.toCredentials(o.accessToken);let{SigninClient:p,CreateOAuth2TokenCommand:y}=await import("./signin-THWW5VM5.mjs"),{logger:m,userAgentAppId:T}=this.callerClientConfig??{},x=h(n=>n?.metadata?.handlerProtocol==="h2","isH2")(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,d=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,u=new p({credentials:{accessKeyId:"",secretAccessKey:""},region:d,requestHandler:x,logger:m,userAgentAppId:T,...this.init?.clientConfig});this.createDPoPInterceptor(u.middlewareStack);let D={tokenInput:{clientId:o.clientId,refreshToken:o.refreshToken,grantType:"refresh_token"}};try{let n=await u.send(new y(D)),{accessKeyId:g,secretAccessKey:k,sessionToken:f}=n.tokenOutput?.accessToken??{},{refreshToken:C,expiresIn:F}=n.tokenOutput??{};if(!g||!k||!f||!C)throw new a("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let L=(F??900)*1e3,O=new Date(Date.now()+L),I={...o,accessToken:{...o.accessToken,accessKeyId:g,secretAccessKey:k,sessionToken:f,expiresAt:O.toISOString()},refreshToken:C};return await this.saveToken(I),this.toCredentials(I.accessToken)}catch(n){if(n.name==="AccessDeniedException"){let k=n.error,f;switch(k){case"TOKEN_EXPIRED":f="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":f="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":f="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:f=`Failed to refresh token: ${String(n)}. Please re-authenticate using \`aws login\``}throw new a(f,{logger:this.logger,tryNextLink:!1})}if(new Date(o.accessToken.expiresAt).getTime()>Date.now())return this.logger?.warn?.(`Failed to refresh token: ${String(n)}. Using existing token until expiry.`),this.toCredentials(o.accessToken);throw new a(`Failed to refresh token: ${String(n)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let e=this.getTokenFilePath();try{let t=await E.readFile(e,"utf8"),s=JSON.parse(t),r=["accessToken","clientId","refreshToken","dpopKey"].filter(i=>!s[i]);if(s.accessToken?.accountId||r.push("accountId"),r.length>0)throw new a(`Token validation failed, missing fields: ${r.join(", ")}`,{logger:this.logger,tryNextLink:!1});return s}catch(t){throw new a(`Failed to load token from ${e}: ${String(t)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(e){let t=this.getTokenFilePath(),s=B(t);try{await E.mkdir(s,{recursive:!0})}catch{}await E.writeFile(t,JSON.stringify(e,null,2),"utf8")}getTokenFilePath(){let e=process.env.AWS_LOGIN_CACHE_DIRECTORY??b(_(),".aws","login","cache"),t=Buffer.from(this.loginSession,"utf8"),s=$("sha256").update(t).digest("hex");return b(e,`${s}.json`)}derToRawSignature(e){let t=2;if(e[t]!==2)throw new Error("Invalid DER signature");t++;let s=e[t++],r=e.subarray(t,t+s);if(t+=s,e[t]!==2)throw new Error("Invalid DER signature");t++;let i=e[t++],o=e.subarray(t,t+i);r=r[0]===0?r.subarray(1):r,o=o[0]===0?o.subarray(1):o;let l=Buffer.concat([Buffer.alloc(32-r.length),r]),p=Buffer.concat([Buffer.alloc(32-o.length),o]);return Buffer.concat([l,p])}createDPoPInterceptor(e){e.add(t=>async s=>{if(P.isInstance(s.request)){let r=s.request,i=`${r.protocol}//${r.hostname}${r.port?`:${r.port}`:""}${r.path}`,o=await this.generateDpop(r.method,i);r.headers={...r.headers,DPoP:o}}return t(s)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(e="POST",t){let s=await this.loadToken();try{let r=H({key:s.dpopKey,format:"pem",type:"sec1"}),o=K(r).export({format:"der",type:"spki"}),l=-1;for(let g=0;g<o.length;g++)if(o[g]===4){l=g;break}let p=o.slice(l+1,l+33),y=o.slice(l+33,l+65),m={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:p.toString("base64url"),y:y.toString("base64url")}},T={jti:crypto.randomUUID(),htm:e,htu:t,iat:Math.floor(Date.now()/1e3)},S=Buffer.from(JSON.stringify(m)).toString("base64url"),x=Buffer.from(JSON.stringify(T)).toString("base64url"),d=`${S}.${x}`,u=v("sha256",Buffer.from(d),r),n=this.derToRawSignature(u).toString("base64url");return`${d}.${n}`}catch(r){throw new a(`Failed to generate Dpop proof: ${r instanceof Error?r.message:String(r)}`,{logger:this.logger,tryNextLink:!1})}}};var q=h(c=>async({callerClientConfig:e}={})=>{c?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let t=await R(c||{}),s=N({profile:c?.profile??e?.profile}),r=t[s];if(!r?.login_session)throw new a(`Profile ${s} does not contain login_session.`,{tryNextLink:!0,logger:c?.logger});let o=await new w(r,c,e).loadCredentials();return A(o,"CREDENTIALS_LOGIN","AD")},"fromLoginCredentials");export{q as fromLoginCredentials};

package/dist/monthlyRollup/dist-es-OY2VA72W.mjs.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.79/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.79/node_modules/@aws-sdk/credential-provider-login/dist-es/fromLoginCredentials.js"],
-  "sourcesContent": ["import { CredentialsProviderError } from \"@smithy/core/config\";\nimport { HttpRequest } from \"@smithy/core/protocols\";\nimport { createHash, createPrivateKey, createPublicKey, sign } from \"node:crypto\";\nimport { promises as fs } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nexport class LoginCredentialsFetcher {\n    profileData;\n    init;\n    callerClientConfig;\n    static REFRESH_THRESHOLD = 5 * 60 * 1000;\n    constructor(profileData, init, callerClientConfig) {\n        this.profileData = profileData;\n        this.init = init;\n        this.callerClientConfig = callerClientConfig;\n    }\n    async loadCredentials() {\n        const token = await this.loadToken();\n        if (!token) {\n            throw new CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`, { tryNextLink: false, logger: this.logger });\n        }\n        const accessToken = token.accessToken;\n        const now = Date.now();\n        const expiryTime = new Date(accessToken.expiresAt).getTime();\n        const timeUntilExpiry = expiryTime - now;\n        if (timeUntilExpiry <= LoginCredentialsFetcher.REFRESH_THRESHOLD) {\n            return this.refresh(token);\n        }\n        return this.toCredentials(token.accessToken);\n    }\n    get logger() {\n        return this.init?.logger;\n    }\n    get loginSession() {\n        return this.profileData.login_session;\n    }\n    toCredentials(token) {\n        return {\n            accessKeyId: token.accessKeyId,\n            secretAccessKey: token.secretAccessKey,\n            sessionToken: token.sessionToken,\n            accountId: token.accountId,\n            expiration: new Date(token.expiresAt),\n        };\n    }\n    async refresh(token) {\n        const diskToken = await this.loadToken().catch(() => token);\n        const now = Date.now();\n        const diskExpiry = new Date(diskToken.accessToken.expiresAt).getTime();\n        const tokenExpiry = new Date(token.accessToken.expiresAt).getTime();\n        const freshToken = diskExpiry <= now && tokenExpiry > now ? token : diskToken;\n        const freshExpiry = new Date(freshToken.accessToken.expiresAt).getTime();\n        if (freshExpiry - Date.now() > LoginCredentialsFetcher.REFRESH_THRESHOLD) {\n            return this.toCredentials(freshToken.accessToken);\n        }\n        const { SigninClient, CreateOAuth2TokenCommand } = await import(\"@aws-sdk/nested-clients/signin\");\n        const { logger, userAgentAppId } = this.callerClientConfig ?? {};\n        const isH2 = (requestHandler) => {\n            return requestHandler?.metadata?.handlerProtocol === \"h2\";\n        };\n        const requestHandler = isH2(this.callerClientConfig?.requestHandler)\n            ? undefined\n            : this.callerClientConfig?.requestHandler;\n        const region = this.profileData.region ?? (await this.callerClientConfig?.region?.()) ?? process.env.AWS_REGION;\n        const client = new SigninClient({\n            credentials: {\n                accessKeyId: \"\",\n                secretAccessKey: \"\",\n            },\n            region,\n            requestHandler,\n            logger,\n            userAgentAppId,\n            ...this.init?.clientConfig,\n        });\n        this.createDPoPInterceptor(client.middlewareStack);\n        const commandInput = {\n            tokenInput: {\n                clientId: freshToken.clientId,\n                refreshToken: freshToken.refreshToken,\n                grantType: \"refresh_token\",\n            },\n        };\n        try {\n            const response = await client.send(new CreateOAuth2TokenCommand(commandInput));\n            const { accessKeyId, secretAccessKey, sessionToken } = response.tokenOutput?.accessToken ?? {};\n            const { refreshToken, expiresIn } = response.tokenOutput ?? {};\n            if (!accessKeyId || !secretAccessKey || !sessionToken || !refreshToken) {\n                throw new CredentialsProviderError(\"Token refresh response missing required fields\", {\n                    logger: this.logger,\n                    tryNextLink: false,\n                });\n            }\n            const expiresInMs = (expiresIn ?? 900) * 1000;\n            const expiration = new Date(Date.now() + expiresInMs);\n            const updatedToken = {\n                ...freshToken,\n                accessToken: {\n                    ...freshToken.accessToken,\n                    accessKeyId,\n                    secretAccessKey,\n                    sessionToken,\n                    expiresAt: expiration.toISOString(),\n                },\n                refreshToken,\n            };\n            await this.saveToken(updatedToken);\n            return this.toCredentials(updatedToken.accessToken);\n        }\n        catch (error) {\n            if (error.name === \"AccessDeniedException\") {\n                const errorType = error.error;\n                let message;\n                switch (errorType) {\n                    case \"TOKEN_EXPIRED\":\n                        message = \"Your session has expired. Please reauthenticate.\";\n                        break;\n                    case \"USER_CREDENTIALS_CHANGED\":\n                        message =\n                            \"Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.\";\n                        break;\n                    case \"INSUFFICIENT_PERMISSIONS\":\n                        message =\n                            \"Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.\";\n                        break;\n                    default:\n                        message = `Failed to refresh token: ${String(error)}. Please re-authenticate using \\`aws login\\``;\n                }\n                throw new CredentialsProviderError(message, {\n                    logger: this.logger,\n                    tryNextLink: false,\n                });\n            }\n            const tokenExpiry = new Date(freshToken.accessToken.expiresAt).getTime();\n            if (tokenExpiry > Date.now()) {\n                this.logger?.warn?.(`Failed to refresh token: ${String(error)}. Using existing token until expiry.`);\n                return this.toCredentials(freshToken.accessToken);\n            }\n            throw new CredentialsProviderError(`Failed to refresh token: ${String(error)}. Please re-authenticate using aws login`, { logger: this.logger });\n        }\n    }\n    async loadToken() {\n        const tokenFilePath = this.getTokenFilePath();\n        try {\n            const tokenData = await fs.readFile(tokenFilePath, \"utf8\");\n            const token = JSON.parse(tokenData);\n            const missingFields = [\"accessToken\", \"clientId\", \"refreshToken\", \"dpopKey\"].filter((k) => !token[k]);\n            if (!token.accessToken?.accountId) {\n                missingFields.push(\"accountId\");\n            }\n            if (missingFields.length > 0) {\n                throw new CredentialsProviderError(`Token validation failed, missing fields: ${missingFields.join(\", \")}`, {\n                    logger: this.logger,\n                    tryNextLink: false,\n                });\n            }\n            return token;\n        }\n        catch (error) {\n            throw new CredentialsProviderError(`Failed to load token from ${tokenFilePath}: ${String(error)}`, {\n                logger: this.logger,\n                tryNextLink: false,\n            });\n        }\n    }\n    async saveToken(token) {\n        const tokenFilePath = this.getTokenFilePath();\n        const directory = dirname(tokenFilePath);\n        try {\n            await fs.mkdir(directory, { recursive: true });\n        }\n        catch (error) {\n        }\n        await fs.writeFile(tokenFilePath, JSON.stringify(token, null, 2), \"utf8\");\n    }\n    getTokenFilePath() {\n        const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? join(homedir(), \".aws\", \"login\", \"cache\");\n        const loginSessionBytes = Buffer.from(this.loginSession, \"utf8\");\n        const loginSessionSha256 = createHash(\"sha256\").update(loginSessionBytes).digest(\"hex\");\n        return join(directory, `${loginSessionSha256}.json`);\n    }\n    derToRawSignature(derSignature) {\n        let offset = 2;\n        if (derSignature[offset] !== 0x02) {\n            throw new Error(\"Invalid DER signature\");\n        }\n        offset++;\n        const rLength = derSignature[offset++];\n        let r = derSignature.subarray(offset, offset + rLength);\n        offset += rLength;\n        if (derSignature[offset] !== 0x02) {\n            throw new Error(\"Invalid DER signature\");\n        }\n        offset++;\n        const sLength = derSignature[offset++];\n        let s = derSignature.subarray(offset, offset + sLength);\n        r = r[0] === 0x00 ? r.subarray(1) : r;\n        s = s[0] === 0x00 ? s.subarray(1) : s;\n        const rPadded = Buffer.concat([Buffer.alloc(32 - r.length), r]);\n        const sPadded = Buffer.concat([Buffer.alloc(32 - s.length), s]);\n        return Buffer.concat([rPadded, sPadded]);\n    }\n    createDPoPInterceptor(middlewareStack) {\n        middlewareStack.add((next) => async (args) => {\n            if (HttpRequest.isInstance(args.request)) {\n                const request = args.request;\n                const actualEndpoint = `${request.protocol}//${request.hostname}${request.port ? `:${request.port}` : \"\"}${request.path}`;\n                const dpop = await this.generateDpop(request.method, actualEndpoint);\n                request.headers = {\n                    ...request.headers,\n                    DPoP: dpop,\n                };\n            }\n            return next(args);\n        }, {\n            step: \"finalizeRequest\",\n            name: \"dpopInterceptor\",\n            override: true,\n        });\n    }\n    async generateDpop(method = \"POST\", endpoint) {\n        const token = await this.loadToken();\n        try {\n            const privateKey = createPrivateKey({\n                key: token.dpopKey,\n                format: \"pem\",\n                type: \"sec1\",\n            });\n            const publicKey = createPublicKey(privateKey);\n            const publicDer = publicKey.export({ format: \"der\", type: \"spki\" });\n            let pointStart = -1;\n            for (let i = 0; i < publicDer.length; i++) {\n                if (publicDer[i] === 0x04) {\n                    pointStart = i;\n                    break;\n                }\n            }\n            const x = publicDer.slice(pointStart + 1, pointStart + 33);\n            const y = publicDer.slice(pointStart + 33, pointStart + 65);\n            const header = {\n                alg: \"ES256\",\n                typ: \"dpop+jwt\",\n                jwk: {\n                    kty: \"EC\",\n                    crv: \"P-256\",\n                    x: x.toString(\"base64url\"),\n                    y: y.toString(\"base64url\"),\n                },\n            };\n            const payload = {\n                jti: crypto.randomUUID(),\n                htm: method,\n                htu: endpoint,\n                iat: Math.floor(Date.now() / 1000),\n            };\n            const headerB64 = Buffer.from(JSON.stringify(header)).toString(\"base64url\");\n            const payloadB64 = Buffer.from(JSON.stringify(payload)).toString(\"base64url\");\n            const message = `${headerB64}.${payloadB64}`;\n            const asn1Signature = sign(\"sha256\", Buffer.from(message), privateKey);\n            const rawSignature = this.derToRawSignature(asn1Signature);\n            const signatureB64 = rawSignature.toString(\"base64url\");\n            return `${message}.${signatureB64}`;\n        }\n        catch (error) {\n            throw new CredentialsProviderError(`Failed to generate Dpop proof: ${error instanceof Error ? error.message : String(error)}`, { logger: this.logger, tryNextLink: false });\n        }\n    }\n}\n", "import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { CredentialsProviderError, getProfileName, parseKnownFiles } from \"@smithy/core/config\";\nimport { LoginCredentialsFetcher } from \"./LoginCredentialsFetcher\";\nexport const fromLoginCredentials = (init) => async ({ callerClientConfig } = {}) => {\n    init?.logger?.debug?.(\"@aws-sdk/credential-providers - fromLoginCredentials\");\n    const profiles = await parseKnownFiles(init || {});\n    const profileName = getProfileName({\n        profile: init?.profile ?? callerClientConfig?.profile,\n    });\n    const profile = profiles[profileName];\n    if (!profile?.login_session) {\n        throw new CredentialsProviderError(`Profile ${profileName} does not contain login_session.`, {\n            tryNextLink: true,\n            logger: init?.logger,\n        });\n    }\n    const fetcher = new LoginCredentialsFetcher(profile, init, callerClientConfig);\n    const credentials = await fetcher.loadCredentials();\n    return setCredentialFeature(credentials, \"CREDENTIALS_LOGIN\", \"AD\");\n};\n"],
-  "mappings": ";yQAEA,OAAS,cAAAA,EAAY,oBAAAC,EAAkB,mBAAAC,EAAiB,QAAAC,MAAY,cACpE,OAAS,YAAYC,MAAU,UAC/B,OAAS,WAAAC,MAAe,UACxB,OAAS,WAAAC,EAAS,QAAAC,MAAY,YACvB,IAAMC,EAAN,MAAMC,CAAwB,CANrC,MAMqC,CAAAC,EAAA,gCACjC,YACA,KACA,mBACA,OAAO,kBAAoB,IAAS,IACpC,YAAYC,EAAaC,EAAMC,EAAoB,CAC/C,KAAK,YAAcF,EACnB,KAAK,KAAOC,EACZ,KAAK,mBAAqBC,CAC9B,CACA,MAAM,iBAAkB,CACpB,IAAMC,EAAQ,MAAM,KAAK,UAAU,EACnC,GAAI,CAACA,EACD,MAAM,IAAIC,EAAyB,sCAAsC,KAAK,YAAY,2CAA4C,CAAE,YAAa,GAAO,OAAQ,KAAK,MAAO,CAAC,EAErL,IAAMC,EAAcF,EAAM,YACpBG,EAAM,KAAK,IAAI,EAGrB,OAFmB,IAAI,KAAKD,EAAY,SAAS,EAAE,QAAQ,EACtBC,GACdR,EAAwB,kBACpC,KAAK,QAAQK,CAAK,EAEtB,KAAK,cAAcA,EAAM,WAAW,CAC/C,CACA,IAAI,QAAS,CACT,OAAO,KAAK,MAAM,MACtB,CACA,IAAI,cAAe,CACf,OAAO,KAAK,YAAY,aAC5B,CACA,cAAcA,EAAO,CACjB,MAAO,CACH,YAAaA,EAAM,YACnB,gBAAiBA,EAAM,gBACvB,aAAcA,EAAM,aACpB,UAAWA,EAAM,UACjB,WAAY,IAAI,KAAKA,EAAM,SAAS,CACxC,CACJ,CACA,MAAM,QAAQA,EAAO,CACjB,IAAMI,EAAY,MAAM,KAAK,UAAU,EAAE,MAAM,IAAMJ,CAAK,EACpDG,EAAM,KAAK,IAAI,EACfE,EAAa,IAAI,KAAKD,EAAU,YAAY,SAAS,EAAE,QAAQ,EAC/DE,EAAc,IAAI,KAAKN,EAAM,YAAY,SAAS,EAAE,QAAQ,EAC5DO,EAAaF,GAAcF,GAAOG,EAAcH,EAAMH,EAAQI,EAEpE,GADoB,IAAI,KAAKG,EAAW,YAAY,SAAS,EAAE,QAAQ,EACrD,KAAK,IAAI,EAAIZ,EAAwB,kBACnD,OAAO,KAAK,cAAcY,EAAW,WAAW,EAEpD,GAAM,CAAE,aAAAC,EAAc,yBAAAC,CAAyB,EAAI,KAAM,QAAO,uBAAgC,EAC1F,CAAE,OAAAC,EAAQ,eAAAC,CAAe,EAAI,KAAK,oBAAsB,CAAC,EAIzDC,EAHOhB,EAACgB,GACHA,GAAgB,UAAU,kBAAoB,KAD5C,QAGe,KAAK,oBAAoB,cAAc,EAC7D,OACA,KAAK,oBAAoB,eACzBC,EAAS,KAAK,YAAY,QAAW,MAAM,KAAK,oBAAoB,SAAS,GAAM,QAAQ,IAAI,WAC/FC,EAAS,IAAIN,EAAa,CAC5B,YAAa,CACT,YAAa,GACb,gBAAiB,EACrB,EACA,OAAAK,EACA,eAAAD,EACA,OAAAF,EACA,eAAAC,EACA,GAAG,KAAK,MAAM,YAClB,CAAC,EACD,KAAK,sBAAsBG,EAAO,eAAe,EACjD,IAAMC,EAAe,CACjB,WAAY,CACR,SAAUR,EAAW,SACrB,aAAcA,EAAW,aACzB,UAAW,eACf,CACJ,EACA,GAAI,CACA,IAAMS,EAAW,MAAMF,EAAO,KAAK,IAAIL,EAAyBM,CAAY,CAAC,EACvE,CAAE,YAAAE,EAAa,gBAAAC,EAAiB,aAAAC,CAAa,EAAIH,EAAS,aAAa,aAAe,CAAC,EACvF,CAAE,aAAAI,EAAc,UAAAC,CAAU,EAAIL,EAAS,aAAe,CAAC,EAC7D,GAAI,CAACC,GAAe,CAACC,GAAmB,CAACC,GAAgB,CAACC,EACtD,MAAM,IAAInB,EAAyB,iDAAkD,CACjF,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,EAEL,IAAMqB,GAAeD,GAAa,KAAO,IACnCE,EAAa,IAAI,KAAK,KAAK,IAAI,EAAID,CAAW,EAC9CE,EAAe,CACjB,GAAGjB,EACH,YAAa,CACT,GAAGA,EAAW,YACd,YAAAU,EACA,gBAAAC,EACA,aAAAC,EACA,UAAWI,EAAW,YAAY,CACtC,EACA,aAAAH,CACJ,EACA,aAAM,KAAK,UAAUI,CAAY,EAC1B,KAAK,cAAcA,EAAa,WAAW,CACtD,OACOC,EAAO,CACV,GAAIA,EAAM,OAAS,wBAAyB,CACxC,IAAMC,EAAYD,EAAM,MACpBE,EACJ,OAAQD,EAAW,CACf,IAAK,gBACDC,EAAU,mDACV,MACJ,IAAK,2BACDA,EACI,oHACJ,MACJ,IAAK,2BACDA,EACI,mIACJ,MACJ,QACIA,EAAU,4BAA4B,OAAOF,CAAK,CAAC,8CAC3D,CACA,MAAM,IAAIxB,EAAyB0B,EAAS,CACxC,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,CACL,CAEA,GADoB,IAAI,KAAKpB,EAAW,YAAY,SAAS,EAAE,QAAQ,EACrD,KAAK,IAAI,EACvB,YAAK,QAAQ,OAAO,4BAA4B,OAAOkB,CAAK,CAAC,sCAAsC,EAC5F,KAAK,cAAclB,EAAW,WAAW,EAEpD,MAAM,IAAIN,EAAyB,4BAA4B,OAAOwB,CAAK,CAAC,2CAA4C,CAAE,OAAQ,KAAK,MAAO,CAAC,CACnJ,CACJ,CACA,MAAM,WAAY,CACd,IAAMG,EAAgB,KAAK,iBAAiB,EAC5C,GAAI,CACA,IAAMC,EAAY,MAAMC,EAAG,SAASF,EAAe,MAAM,EACnD5B,EAAQ,KAAK,MAAM6B,CAAS,EAC5BE,EAAgB,CAAC,cAAe,WAAY,eAAgB,SAAS,EAAE,OAAQC,GAAM,CAAChC,EAAMgC,CAAC,CAAC,EAIpG,GAHKhC,EAAM,aAAa,WACpB+B,EAAc,KAAK,WAAW,EAE9BA,EAAc,OAAS,EACvB,MAAM,IAAI9B,EAAyB,4CAA4C8B,EAAc,KAAK,IAAI,CAAC,GAAI,CACvG,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,EAEL,OAAO/B,CACX,OACOyB,EAAO,CACV,MAAM,IAAIxB,EAAyB,6BAA6B2B,CAAa,KAAK,OAAOH,CAAK,CAAC,GAAI,CAC/F,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,CACL,CACJ,CACA,MAAM,UAAUzB,EAAO,CACnB,IAAM4B,EAAgB,KAAK,iBAAiB,EACtCK,EAAYC,EAAQN,CAAa,EACvC,GAAI,CACA,MAAME,EAAG,MAAMG,EAAW,CAAE,UAAW,EAAK,CAAC,CACjD,MACc,CACd,CACA,MAAMH,EAAG,UAAUF,EAAe,KAAK,UAAU5B,EAAO,KAAM,CAAC,EAAG,MAAM,CAC5E,CACA,kBAAmB,CACf,IAAMiC,EAAY,QAAQ,IAAI,2BAA6BE,EAAKC,EAAQ,EAAG,OAAQ,QAAS,OAAO,EAC7FC,EAAoB,OAAO,KAAK,KAAK,aAAc,MAAM,EACzDC,EAAqBC,EAAW,QAAQ,EAAE,OAAOF,CAAiB,EAAE,OAAO,KAAK,EACtF,OAAOF,EAAKF,EAAW,GAAGK,CAAkB,OAAO,CACvD,CACA,kBAAkBE,EAAc,CAC5B,IAAIC,EAAS,EACb,GAAID,EAAaC,CAAM,IAAM,EACzB,MAAM,IAAI,MAAM,uBAAuB,EAE3CA,IACA,IAAMC,EAAUF,EAAaC,GAAQ,EACjC,EAAID,EAAa,SAASC,EAAQA,EAASC,CAAO,EAEtD,GADAD,GAAUC,EACNF,EAAaC,CAAM,IAAM,EACzB,MAAM,IAAI,MAAM,uBAAuB,EAE3CA,IACA,IAAME,EAAUH,EAAaC,GAAQ,EACjCG,EAAIJ,EAAa,SAASC,EAAQA,EAASE,CAAO,EACtD,EAAI,EAAE,CAAC,IAAM,EAAO,EAAE,SAAS,CAAC,EAAI,EACpCC,EAAIA,EAAE,CAAC,IAAM,EAAOA,EAAE,SAAS,CAAC,EAAIA,EACpC,IAAMC,EAAU,OAAO,OAAO,CAAC,OAAO,MAAM,GAAK,EAAE,MAAM,EAAG,CAAC,CAAC,EACxDC,EAAU,OAAO,OAAO,CAAC,OAAO,MAAM,GAAKF,EAAE,MAAM,EAAGA,CAAC,CAAC,EAC9D,OAAO,OAAO,OAAO,CAACC,EAASC,CAAO,CAAC,CAC3C,CACA,sBAAsBC,EAAiB,CACnCA,EAAgB,IAAKC,GAAS,MAAOC,GAAS,CAC1C,GAAIC,EAAY,WAAWD,EAAK,OAAO,EAAG,CACtC,IAAME,EAAUF,EAAK,QACfG,EAAiB,GAAGD,EAAQ,QAAQ,KAAKA,EAAQ,QAAQ,GAAGA,EAAQ,KAAO,IAAIA,EAAQ,IAAI,GAAK,EAAE,GAAGA,EAAQ,IAAI,GACjHE,EAAO,MAAM,KAAK,aAAaF,EAAQ,OAAQC,CAAc,EACnED,EAAQ,QAAU,CACd,GAAGA,EAAQ,QACX,KAAME,CACV,CACJ,CACA,OAAOL,EAAKC,CAAI,CACpB,EAAG,CACC,KAAM,kBACN,KAAM,kBACN,SAAU,EACd,CAAC,CACL,CACA,MAAM,aAAaK,EAAS,OAAQC,EAAU,CAC1C,IAAMvD,EAAQ,MAAM,KAAK,UAAU,EACnC,GAAI,CACA,IAAMwD,EAAaC,EAAiB,CAChC,IAAKzD,EAAM,QACX,OAAQ,MACR,KAAM,MACV,CAAC,EAEK0D,EADYC,EAAgBH,CAAU,EAChB,OAAO,CAAE,OAAQ,MAAO,KAAM,MAAO,CAAC,EAC9DI,EAAa,GACjB,QAASC,EAAI,EAAGA,EAAIH,EAAU,OAAQG,IAClC,GAAIH,EAAUG,CAAC,IAAM,EAAM,CACvBD,EAAaC,EACb,KACJ,CAEJ,IAAMC,EAAIJ,EAAU,MAAME,EAAa,EAAGA,EAAa,EAAE,EACnD,EAAIF,EAAU,MAAME,EAAa,GAAIA,EAAa,EAAE,EACpDG,EAAS,CACX,IAAK,QACL,IAAK,WACL,IAAK,CACD,IAAK,KACL,IAAK,QACL,EAAGD,EAAE,SAAS,WAAW,EACzB,EAAG,EAAE,SAAS,WAAW,CAC7B,CACJ,EACME,EAAU,CACZ,IAAK,OAAO,WAAW,EACvB,IAAKV,EACL,IAAKC,EACL,IAAK,KAAK,MAAM,KAAK,IAAI,EAAI,GAAI,CACrC,EACMU,EAAY,OAAO,KAAK,KAAK,UAAUF,CAAM,CAAC,EAAE,SAAS,WAAW,EACpEG,EAAa,OAAO,KAAK,KAAK,UAAUF,CAAO,CAAC,EAAE,SAAS,WAAW,EACtErC,EAAU,GAAGsC,CAAS,IAAIC,CAAU,GACpCC,EAAgBC,EAAK,SAAU,OAAO,KAAKzC,CAAO,EAAG6B,CAAU,EAE/Da,EADe,KAAK,kBAAkBF,CAAa,EACvB,SAAS,WAAW,EACtD,MAAO,GAAGxC,CAAO,IAAI0C,CAAY,EACrC,OACO5C,EAAO,CACV,MAAM,IAAIxB,EAAyB,kCAAkCwB,aAAiB,MAAQA,EAAM,QAAU,OAAOA,CAAK,CAAC,GAAI,CAAE,OAAQ,KAAK,OAAQ,YAAa,EAAM,CAAC,CAC9K,CACJ,CACJ,ECxQO,IAAM6C,EAAuBC,EAACC,GAAS,MAAO,CAAE,mBAAAC,CAAmB,EAAI,CAAC,IAAM,CACjFD,GAAM,QAAQ,QAAQ,sDAAsD,EAC5E,IAAME,EAAW,MAAMC,EAAgBH,GAAQ,CAAC,CAAC,EAC3CI,EAAcC,EAAe,CAC/B,QAASL,GAAM,SAAWC,GAAoB,OAClD,CAAC,EACKK,EAAUJ,EAASE,CAAW,EACpC,GAAI,CAACE,GAAS,cACV,MAAM,IAAIC,EAAyB,WAAWH,CAAW,mCAAoC,CACzF,YAAa,GACb,OAAQJ,GAAM,MAClB,CAAC,EAGL,IAAMQ,EAAc,MADJ,IAAIC,EAAwBH,EAASN,EAAMC,CAAkB,EAC3C,gBAAgB,EAClD,OAAOS,EAAqBF,EAAa,oBAAqB,IAAI,CACtE,EAhBoC",
-  "names": ["createHash", "createPrivateKey", "createPublicKey", "sign", "fs", "homedir", "dirname", "join", "LoginCredentialsFetcher", "_LoginCredentialsFetcher", "__name", "profileData", "init", "callerClientConfig", "token", "CredentialsProviderError", "accessToken", "now", "diskToken", "diskExpiry", "tokenExpiry", "freshToken", "SigninClient", "CreateOAuth2TokenCommand", "logger", "userAgentAppId", "requestHandler", "region", "client", "commandInput", "response", "accessKeyId", "secretAccessKey", "sessionToken", "refreshToken", "expiresIn", "expiresInMs", "expiration", "updatedToken", "error", "errorType", "message", "tokenFilePath", "tokenData", "fs", "missingFields", "k", "directory", "dirname", "join", "homedir", "loginSessionBytes", "loginSessionSha256", "createHash", "derSignature", "offset", "rLength", "sLength", "s", "rPadded", "sPadded", "middlewareStack", "next", "args", "HttpRequest", "request", "actualEndpoint", "dpop", "method", "endpoint", "privateKey", "createPrivateKey", "publicDer", "createPublicKey", "pointStart", "i", "x", "header", "payload", "headerB64", "payloadB64", "asn1Signature", "sign", "signatureB64", "fromLoginCredentials", "__name", "init", "callerClientConfig", "profiles", "parseKnownFiles", "profileName", "getProfileName", "profile", "CredentialsProviderError", "credentials", "LoginCredentialsFetcher", "setCredentialFeature"]
-}

package/dist/monthlyRollup/dist-es-SJKDRHZJ.mjs

@@ -1,2 +0,0 @@
-/* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
-import{b as P,p as a,u as N,y as R}from"./chunk-YIZKQ2WK.mjs";import{c as A}from"./chunk-IHCR62UU.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-NX6AKUU3.mjs";import{a as h}from"./chunk-CFZ5JWD3.mjs";import{createHash as $,createPrivateKey as H,createPublicKey as K,sign as v}from"node:crypto";import{promises as E}from"node:fs";import{homedir as _}from"node:os";import{dirname as B,join as b}from"node:path";var w=class c{static{h(this,"LoginCredentialsFetcher")}profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300*1e3;constructor(e,t,s){this.profileData=e,this.init=t,this.callerClientConfig=s}async loadCredentials(){let e=await this.loadToken();if(!e)throw new a(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let t=e.accessToken,s=Date.now();return new Date(t.expiresAt).getTime()-s<=c.REFRESH_THRESHOLD?this.refresh(e):this.toCredentials(e.accessToken)}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}toCredentials(e){return{accessKeyId:e.accessKeyId,secretAccessKey:e.secretAccessKey,sessionToken:e.sessionToken,accountId:e.accountId,expiration:new Date(e.expiresAt)}}async refresh(e){let t=await this.loadToken().catch(()=>e),s=Date.now(),r=new Date(t.accessToken.expiresAt).getTime(),i=new Date(e.accessToken.expiresAt).getTime(),o=r<=s&&i>s?e:t;if(new Date(o.accessToken.expiresAt).getTime()-Date.now()>c.REFRESH_THRESHOLD)return this.toCredentials(o.accessToken);let{SigninClient:p,CreateOAuth2TokenCommand:y}=await import("./signin-ZKLDJEMJ.mjs"),{logger:m,userAgentAppId:T}=this.callerClientConfig??{},x=h(n=>n?.metadata?.handlerProtocol==="h2","isH2")(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,d=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,u=new p({credentials:{accessKeyId:"",secretAccessKey:""},region:d,requestHandler:x,logger:m,userAgentAppId:T,...this.init?.clientConfig});this.createDPoPInterceptor(u.middlewareStack);let D={tokenInput:{clientId:o.clientId,refreshToken:o.refreshToken,grantType:"refresh_token"}};try{let n=await u.send(new y(D)),{accessKeyId:g,secretAccessKey:k,sessionToken:f}=n.tokenOutput?.accessToken??{},{refreshToken:C,expiresIn:F}=n.tokenOutput??{};if(!g||!k||!f||!C)throw new a("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let L=(F??900)*1e3,O=new Date(Date.now()+L),I={...o,accessToken:{...o.accessToken,accessKeyId:g,secretAccessKey:k,sessionToken:f,expiresAt:O.toISOString()},refreshToken:C};return await this.saveToken(I),this.toCredentials(I.accessToken)}catch(n){if(n.name==="AccessDeniedException"){let k=n.error,f;switch(k){case"TOKEN_EXPIRED":f="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":f="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":f="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:f=`Failed to refresh token: ${String(n)}. Please re-authenticate using \`aws login\``}throw new a(f,{logger:this.logger,tryNextLink:!1})}if(new Date(o.accessToken.expiresAt).getTime()>Date.now())return this.logger?.warn?.(`Failed to refresh token: ${String(n)}. Using existing token until expiry.`),this.toCredentials(o.accessToken);throw new a(`Failed to refresh token: ${String(n)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let e=this.getTokenFilePath();try{let t=await E.readFile(e,"utf8"),s=JSON.parse(t),r=["accessToken","clientId","refreshToken","dpopKey"].filter(i=>!s[i]);if(s.accessToken?.accountId||r.push("accountId"),r.length>0)throw new a(`Token validation failed, missing fields: ${r.join(", ")}`,{logger:this.logger,tryNextLink:!1});return s}catch(t){throw new a(`Failed to load token from ${e}: ${String(t)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(e){let t=this.getTokenFilePath(),s=B(t);try{await E.mkdir(s,{recursive:!0})}catch{}await E.writeFile(t,JSON.stringify(e,null,2),"utf8")}getTokenFilePath(){let e=process.env.AWS_LOGIN_CACHE_DIRECTORY??b(_(),".aws","login","cache"),t=Buffer.from(this.loginSession,"utf8"),s=$("sha256").update(t).digest("hex");return b(e,`${s}.json`)}derToRawSignature(e){let t=2;if(e[t]!==2)throw new Error("Invalid DER signature");t++;let s=e[t++],r=e.subarray(t,t+s);if(t+=s,e[t]!==2)throw new Error("Invalid DER signature");t++;let i=e[t++],o=e.subarray(t,t+i);r=r[0]===0?r.subarray(1):r,o=o[0]===0?o.subarray(1):o;let l=Buffer.concat([Buffer.alloc(32-r.length),r]),p=Buffer.concat([Buffer.alloc(32-o.length),o]);return Buffer.concat([l,p])}createDPoPInterceptor(e){e.add(t=>async s=>{if(A.isInstance(s.request)){let r=s.request,i=`${r.protocol}//${r.hostname}${r.port?`:${r.port}`:""}${r.path}`,o=await this.generateDpop(r.method,i);r.headers={...r.headers,DPoP:o}}return t(s)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(e="POST",t){let s=await this.loadToken();try{let r=H({key:s.dpopKey,format:"pem",type:"sec1"}),o=K(r).export({format:"der",type:"spki"}),l=-1;for(let g=0;g<o.length;g++)if(o[g]===4){l=g;break}let p=o.slice(l+1,l+33),y=o.slice(l+33,l+65),m={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:p.toString("base64url"),y:y.toString("base64url")}},T={jti:crypto.randomUUID(),htm:e,htu:t,iat:Math.floor(Date.now()/1e3)},S=Buffer.from(JSON.stringify(m)).toString("base64url"),x=Buffer.from(JSON.stringify(T)).toString("base64url"),d=`${S}.${x}`,u=v("sha256",Buffer.from(d),r),n=this.derToRawSignature(u).toString("base64url");return`${d}.${n}`}catch(r){throw new a(`Failed to generate Dpop proof: ${r instanceof Error?r.message:String(r)}`,{logger:this.logger,tryNextLink:!1})}}};var q=h(c=>async({callerClientConfig:e}={})=>{c?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let t=await R(c||{}),s=N({profile:c?.profile??e?.profile}),r=t[s];if(!r?.login_session)throw new a(`Profile ${s} does not contain login_session.`,{tryNextLink:!0,logger:c?.logger});let o=await new w(r,c,e).loadCredentials();return P(o,"CREDENTIALS_LOGIN","AD")},"fromLoginCredentials");export{q as fromLoginCredentials};

package/dist/monthlyRollup/dist-es-SJKDRHZJ.mjs.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.80/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-login@3.972.80/node_modules/@aws-sdk/credential-provider-login/dist-es/fromLoginCredentials.js"],
-  "sourcesContent": ["import { CredentialsProviderError } from \"@smithy/core/config\";\nimport { HttpRequest } from \"@smithy/core/protocols\";\nimport { createHash, createPrivateKey, createPublicKey, sign } from \"node:crypto\";\nimport { promises as fs } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nexport class LoginCredentialsFetcher {\n    profileData;\n    init;\n    callerClientConfig;\n    static REFRESH_THRESHOLD = 5 * 60 * 1000;\n    constructor(profileData, init, callerClientConfig) {\n        this.profileData = profileData;\n        this.init = init;\n        this.callerClientConfig = callerClientConfig;\n    }\n    async loadCredentials() {\n        const token = await this.loadToken();\n        if (!token) {\n            throw new CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`, { tryNextLink: false, logger: this.logger });\n        }\n        const accessToken = token.accessToken;\n        const now = Date.now();\n        const expiryTime = new Date(accessToken.expiresAt).getTime();\n        const timeUntilExpiry = expiryTime - now;\n        if (timeUntilExpiry <= LoginCredentialsFetcher.REFRESH_THRESHOLD) {\n            return this.refresh(token);\n        }\n        return this.toCredentials(token.accessToken);\n    }\n    get logger() {\n        return this.init?.logger;\n    }\n    get loginSession() {\n        return this.profileData.login_session;\n    }\n    toCredentials(token) {\n        return {\n            accessKeyId: token.accessKeyId,\n            secretAccessKey: token.secretAccessKey,\n            sessionToken: token.sessionToken,\n            accountId: token.accountId,\n            expiration: new Date(token.expiresAt),\n        };\n    }\n    async refresh(token) {\n        const diskToken = await this.loadToken().catch(() => token);\n        const now = Date.now();\n        const diskExpiry = new Date(diskToken.accessToken.expiresAt).getTime();\n        const tokenExpiry = new Date(token.accessToken.expiresAt).getTime();\n        const freshToken = diskExpiry <= now && tokenExpiry > now ? token : diskToken;\n        const freshExpiry = new Date(freshToken.accessToken.expiresAt).getTime();\n        if (freshExpiry - Date.now() > LoginCredentialsFetcher.REFRESH_THRESHOLD) {\n            return this.toCredentials(freshToken.accessToken);\n        }\n        const { SigninClient, CreateOAuth2TokenCommand } = await import(\"@aws-sdk/nested-clients/signin\");\n        const { logger, userAgentAppId } = this.callerClientConfig ?? {};\n        const isH2 = (requestHandler) => {\n            return requestHandler?.metadata?.handlerProtocol === \"h2\";\n        };\n        const requestHandler = isH2(this.callerClientConfig?.requestHandler)\n            ? undefined\n            : this.callerClientConfig?.requestHandler;\n        const region = this.profileData.region ?? (await this.callerClientConfig?.region?.()) ?? process.env.AWS_REGION;\n        const client = new SigninClient({\n            credentials: {\n                accessKeyId: \"\",\n                secretAccessKey: \"\",\n            },\n            region,\n            requestHandler,\n            logger,\n            userAgentAppId,\n            ...this.init?.clientConfig,\n        });\n        this.createDPoPInterceptor(client.middlewareStack);\n        const commandInput = {\n            tokenInput: {\n                clientId: freshToken.clientId,\n                refreshToken: freshToken.refreshToken,\n                grantType: \"refresh_token\",\n            },\n        };\n        try {\n            const response = await client.send(new CreateOAuth2TokenCommand(commandInput));\n            const { accessKeyId, secretAccessKey, sessionToken } = response.tokenOutput?.accessToken ?? {};\n            const { refreshToken, expiresIn } = response.tokenOutput ?? {};\n            if (!accessKeyId || !secretAccessKey || !sessionToken || !refreshToken) {\n                throw new CredentialsProviderError(\"Token refresh response missing required fields\", {\n                    logger: this.logger,\n                    tryNextLink: false,\n                });\n            }\n            const expiresInMs = (expiresIn ?? 900) * 1000;\n            const expiration = new Date(Date.now() + expiresInMs);\n            const updatedToken = {\n                ...freshToken,\n                accessToken: {\n                    ...freshToken.accessToken,\n                    accessKeyId,\n                    secretAccessKey,\n                    sessionToken,\n                    expiresAt: expiration.toISOString(),\n                },\n                refreshToken,\n            };\n            await this.saveToken(updatedToken);\n            return this.toCredentials(updatedToken.accessToken);\n        }\n        catch (error) {\n            if (error.name === \"AccessDeniedException\") {\n                const errorType = error.error;\n                let message;\n                switch (errorType) {\n                    case \"TOKEN_EXPIRED\":\n                        message = \"Your session has expired. Please reauthenticate.\";\n                        break;\n                    case \"USER_CREDENTIALS_CHANGED\":\n                        message =\n                            \"Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.\";\n                        break;\n                    case \"INSUFFICIENT_PERMISSIONS\":\n                        message =\n                            \"Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.\";\n                        break;\n                    default:\n                        message = `Failed to refresh token: ${String(error)}. Please re-authenticate using \\`aws login\\``;\n                }\n                throw new CredentialsProviderError(message, {\n                    logger: this.logger,\n                    tryNextLink: false,\n                });\n            }\n            const tokenExpiry = new Date(freshToken.accessToken.expiresAt).getTime();\n            if (tokenExpiry > Date.now()) {\n                this.logger?.warn?.(`Failed to refresh token: ${String(error)}. Using existing token until expiry.`);\n                return this.toCredentials(freshToken.accessToken);\n            }\n            throw new CredentialsProviderError(`Failed to refresh token: ${String(error)}. Please re-authenticate using aws login`, { logger: this.logger });\n        }\n    }\n    async loadToken() {\n        const tokenFilePath = this.getTokenFilePath();\n        try {\n            const tokenData = await fs.readFile(tokenFilePath, \"utf8\");\n            const token = JSON.parse(tokenData);\n            const missingFields = [\"accessToken\", \"clientId\", \"refreshToken\", \"dpopKey\"].filter((k) => !token[k]);\n            if (!token.accessToken?.accountId) {\n                missingFields.push(\"accountId\");\n            }\n            if (missingFields.length > 0) {\n                throw new CredentialsProviderError(`Token validation failed, missing fields: ${missingFields.join(\", \")}`, {\n                    logger: this.logger,\n                    tryNextLink: false,\n                });\n            }\n            return token;\n        }\n        catch (error) {\n            throw new CredentialsProviderError(`Failed to load token from ${tokenFilePath}: ${String(error)}`, {\n                logger: this.logger,\n                tryNextLink: false,\n            });\n        }\n    }\n    async saveToken(token) {\n        const tokenFilePath = this.getTokenFilePath();\n        const directory = dirname(tokenFilePath);\n        try {\n            await fs.mkdir(directory, { recursive: true });\n        }\n        catch (error) {\n        }\n        await fs.writeFile(tokenFilePath, JSON.stringify(token, null, 2), \"utf8\");\n    }\n    getTokenFilePath() {\n        const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? join(homedir(), \".aws\", \"login\", \"cache\");\n        const loginSessionBytes = Buffer.from(this.loginSession, \"utf8\");\n        const loginSessionSha256 = createHash(\"sha256\").update(loginSessionBytes).digest(\"hex\");\n        return join(directory, `${loginSessionSha256}.json`);\n    }\n    derToRawSignature(derSignature) {\n        let offset = 2;\n        if (derSignature[offset] !== 0x02) {\n            throw new Error(\"Invalid DER signature\");\n        }\n        offset++;\n        const rLength = derSignature[offset++];\n        let r = derSignature.subarray(offset, offset + rLength);\n        offset += rLength;\n        if (derSignature[offset] !== 0x02) {\n            throw new Error(\"Invalid DER signature\");\n        }\n        offset++;\n        const sLength = derSignature[offset++];\n        let s = derSignature.subarray(offset, offset + sLength);\n        r = r[0] === 0x00 ? r.subarray(1) : r;\n        s = s[0] === 0x00 ? s.subarray(1) : s;\n        const rPadded = Buffer.concat([Buffer.alloc(32 - r.length), r]);\n        const sPadded = Buffer.concat([Buffer.alloc(32 - s.length), s]);\n        return Buffer.concat([rPadded, sPadded]);\n    }\n    createDPoPInterceptor(middlewareStack) {\n        middlewareStack.add((next) => async (args) => {\n            if (HttpRequest.isInstance(args.request)) {\n                const request = args.request;\n                const actualEndpoint = `${request.protocol}//${request.hostname}${request.port ? `:${request.port}` : \"\"}${request.path}`;\n                const dpop = await this.generateDpop(request.method, actualEndpoint);\n                request.headers = {\n                    ...request.headers,\n                    DPoP: dpop,\n                };\n            }\n            return next(args);\n        }, {\n            step: \"finalizeRequest\",\n            name: \"dpopInterceptor\",\n            override: true,\n        });\n    }\n    async generateDpop(method = \"POST\", endpoint) {\n        const token = await this.loadToken();\n        try {\n            const privateKey = createPrivateKey({\n                key: token.dpopKey,\n                format: \"pem\",\n                type: \"sec1\",\n            });\n            const publicKey = createPublicKey(privateKey);\n            const publicDer = publicKey.export({ format: \"der\", type: \"spki\" });\n            let pointStart = -1;\n            for (let i = 0; i < publicDer.length; i++) {\n                if (publicDer[i] === 0x04) {\n                    pointStart = i;\n                    break;\n                }\n            }\n            const x = publicDer.slice(pointStart + 1, pointStart + 33);\n            const y = publicDer.slice(pointStart + 33, pointStart + 65);\n            const header = {\n                alg: \"ES256\",\n                typ: \"dpop+jwt\",\n                jwk: {\n                    kty: \"EC\",\n                    crv: \"P-256\",\n                    x: x.toString(\"base64url\"),\n                    y: y.toString(\"base64url\"),\n                },\n            };\n            const payload = {\n                jti: crypto.randomUUID(),\n                htm: method,\n                htu: endpoint,\n                iat: Math.floor(Date.now() / 1000),\n            };\n            const headerB64 = Buffer.from(JSON.stringify(header)).toString(\"base64url\");\n            const payloadB64 = Buffer.from(JSON.stringify(payload)).toString(\"base64url\");\n            const message = `${headerB64}.${payloadB64}`;\n            const asn1Signature = sign(\"sha256\", Buffer.from(message), privateKey);\n            const rawSignature = this.derToRawSignature(asn1Signature);\n            const signatureB64 = rawSignature.toString(\"base64url\");\n            return `${message}.${signatureB64}`;\n        }\n        catch (error) {\n            throw new CredentialsProviderError(`Failed to generate Dpop proof: ${error instanceof Error ? error.message : String(error)}`, { logger: this.logger, tryNextLink: false });\n        }\n    }\n}\n", "import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { CredentialsProviderError, getProfileName, parseKnownFiles } from \"@smithy/core/config\";\nimport { LoginCredentialsFetcher } from \"./LoginCredentialsFetcher\";\nexport const fromLoginCredentials = (init) => async ({ callerClientConfig } = {}) => {\n    init?.logger?.debug?.(\"@aws-sdk/credential-providers - fromLoginCredentials\");\n    const profiles = await parseKnownFiles(init || {});\n    const profileName = getProfileName({\n        profile: init?.profile ?? callerClientConfig?.profile,\n    });\n    const profile = profiles[profileName];\n    if (!profile?.login_session) {\n        throw new CredentialsProviderError(`Profile ${profileName} does not contain login_session.`, {\n            tryNextLink: true,\n            logger: init?.logger,\n        });\n    }\n    const fetcher = new LoginCredentialsFetcher(profile, init, callerClientConfig);\n    const credentials = await fetcher.loadCredentials();\n    return setCredentialFeature(credentials, \"CREDENTIALS_LOGIN\", \"AD\");\n};\n"],
-  "mappings": ";0MAEA,OAAS,cAAAA,EAAY,oBAAAC,EAAkB,mBAAAC,EAAiB,QAAAC,MAAY,cACpE,OAAS,YAAYC,MAAU,UAC/B,OAAS,WAAAC,MAAe,UACxB,OAAS,WAAAC,EAAS,QAAAC,MAAY,YACvB,IAAMC,EAAN,MAAMC,CAAwB,CANrC,MAMqC,CAAAC,EAAA,gCACjC,YACA,KACA,mBACA,OAAO,kBAAoB,IAAS,IACpC,YAAYC,EAAaC,EAAMC,EAAoB,CAC/C,KAAK,YAAcF,EACnB,KAAK,KAAOC,EACZ,KAAK,mBAAqBC,CAC9B,CACA,MAAM,iBAAkB,CACpB,IAAMC,EAAQ,MAAM,KAAK,UAAU,EACnC,GAAI,CAACA,EACD,MAAM,IAAIC,EAAyB,sCAAsC,KAAK,YAAY,2CAA4C,CAAE,YAAa,GAAO,OAAQ,KAAK,MAAO,CAAC,EAErL,IAAMC,EAAcF,EAAM,YACpBG,EAAM,KAAK,IAAI,EAGrB,OAFmB,IAAI,KAAKD,EAAY,SAAS,EAAE,QAAQ,EACtBC,GACdR,EAAwB,kBACpC,KAAK,QAAQK,CAAK,EAEtB,KAAK,cAAcA,EAAM,WAAW,CAC/C,CACA,IAAI,QAAS,CACT,OAAO,KAAK,MAAM,MACtB,CACA,IAAI,cAAe,CACf,OAAO,KAAK,YAAY,aAC5B,CACA,cAAcA,EAAO,CACjB,MAAO,CACH,YAAaA,EAAM,YACnB,gBAAiBA,EAAM,gBACvB,aAAcA,EAAM,aACpB,UAAWA,EAAM,UACjB,WAAY,IAAI,KAAKA,EAAM,SAAS,CACxC,CACJ,CACA,MAAM,QAAQA,EAAO,CACjB,IAAMI,EAAY,MAAM,KAAK,UAAU,EAAE,MAAM,IAAMJ,CAAK,EACpDG,EAAM,KAAK,IAAI,EACfE,EAAa,IAAI,KAAKD,EAAU,YAAY,SAAS,EAAE,QAAQ,EAC/DE,EAAc,IAAI,KAAKN,EAAM,YAAY,SAAS,EAAE,QAAQ,EAC5DO,EAAaF,GAAcF,GAAOG,EAAcH,EAAMH,EAAQI,EAEpE,GADoB,IAAI,KAAKG,EAAW,YAAY,SAAS,EAAE,QAAQ,EACrD,KAAK,IAAI,EAAIZ,EAAwB,kBACnD,OAAO,KAAK,cAAcY,EAAW,WAAW,EAEpD,GAAM,CAAE,aAAAC,EAAc,yBAAAC,CAAyB,EAAI,KAAM,QAAO,uBAAgC,EAC1F,CAAE,OAAAC,EAAQ,eAAAC,CAAe,EAAI,KAAK,oBAAsB,CAAC,EAIzDC,EAHOhB,EAACgB,GACHA,GAAgB,UAAU,kBAAoB,KAD5C,QAGe,KAAK,oBAAoB,cAAc,EAC7D,OACA,KAAK,oBAAoB,eACzBC,EAAS,KAAK,YAAY,QAAW,MAAM,KAAK,oBAAoB,SAAS,GAAM,QAAQ,IAAI,WAC/FC,EAAS,IAAIN,EAAa,CAC5B,YAAa,CACT,YAAa,GACb,gBAAiB,EACrB,EACA,OAAAK,EACA,eAAAD,EACA,OAAAF,EACA,eAAAC,EACA,GAAG,KAAK,MAAM,YAClB,CAAC,EACD,KAAK,sBAAsBG,EAAO,eAAe,EACjD,IAAMC,EAAe,CACjB,WAAY,CACR,SAAUR,EAAW,SACrB,aAAcA,EAAW,aACzB,UAAW,eACf,CACJ,EACA,GAAI,CACA,IAAMS,EAAW,MAAMF,EAAO,KAAK,IAAIL,EAAyBM,CAAY,CAAC,EACvE,CAAE,YAAAE,EAAa,gBAAAC,EAAiB,aAAAC,CAAa,EAAIH,EAAS,aAAa,aAAe,CAAC,EACvF,CAAE,aAAAI,EAAc,UAAAC,CAAU,EAAIL,EAAS,aAAe,CAAC,EAC7D,GAAI,CAACC,GAAe,CAACC,GAAmB,CAACC,GAAgB,CAACC,EACtD,MAAM,IAAInB,EAAyB,iDAAkD,CACjF,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,EAEL,IAAMqB,GAAeD,GAAa,KAAO,IACnCE,EAAa,IAAI,KAAK,KAAK,IAAI,EAAID,CAAW,EAC9CE,EAAe,CACjB,GAAGjB,EACH,YAAa,CACT,GAAGA,EAAW,YACd,YAAAU,EACA,gBAAAC,EACA,aAAAC,EACA,UAAWI,EAAW,YAAY,CACtC,EACA,aAAAH,CACJ,EACA,aAAM,KAAK,UAAUI,CAAY,EAC1B,KAAK,cAAcA,EAAa,WAAW,CACtD,OACOC,EAAO,CACV,GAAIA,EAAM,OAAS,wBAAyB,CACxC,IAAMC,EAAYD,EAAM,MACpBE,EACJ,OAAQD,EAAW,CACf,IAAK,gBACDC,EAAU,mDACV,MACJ,IAAK,2BACDA,EACI,oHACJ,MACJ,IAAK,2BACDA,EACI,mIACJ,MACJ,QACIA,EAAU,4BAA4B,OAAOF,CAAK,CAAC,8CAC3D,CACA,MAAM,IAAIxB,EAAyB0B,EAAS,CACxC,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,CACL,CAEA,GADoB,IAAI,KAAKpB,EAAW,YAAY,SAAS,EAAE,QAAQ,EACrD,KAAK,IAAI,EACvB,YAAK,QAAQ,OAAO,4BAA4B,OAAOkB,CAAK,CAAC,sCAAsC,EAC5F,KAAK,cAAclB,EAAW,WAAW,EAEpD,MAAM,IAAIN,EAAyB,4BAA4B,OAAOwB,CAAK,CAAC,2CAA4C,CAAE,OAAQ,KAAK,MAAO,CAAC,CACnJ,CACJ,CACA,MAAM,WAAY,CACd,IAAMG,EAAgB,KAAK,iBAAiB,EAC5C,GAAI,CACA,IAAMC,EAAY,MAAMC,EAAG,SAASF,EAAe,MAAM,EACnD5B,EAAQ,KAAK,MAAM6B,CAAS,EAC5BE,EAAgB,CAAC,cAAe,WAAY,eAAgB,SAAS,EAAE,OAAQC,GAAM,CAAChC,EAAMgC,CAAC,CAAC,EAIpG,GAHKhC,EAAM,aAAa,WACpB+B,EAAc,KAAK,WAAW,EAE9BA,EAAc,OAAS,EACvB,MAAM,IAAI9B,EAAyB,4CAA4C8B,EAAc,KAAK,IAAI,CAAC,GAAI,CACvG,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,EAEL,OAAO/B,CACX,OACOyB,EAAO,CACV,MAAM,IAAIxB,EAAyB,6BAA6B2B,CAAa,KAAK,OAAOH,CAAK,CAAC,GAAI,CAC/F,OAAQ,KAAK,OACb,YAAa,EACjB,CAAC,CACL,CACJ,CACA,MAAM,UAAUzB,EAAO,CACnB,IAAM4B,EAAgB,KAAK,iBAAiB,EACtCK,EAAYC,EAAQN,CAAa,EACvC,GAAI,CACA,MAAME,EAAG,MAAMG,EAAW,CAAE,UAAW,EAAK,CAAC,CACjD,MACc,CACd,CACA,MAAMH,EAAG,UAAUF,EAAe,KAAK,UAAU5B,EAAO,KAAM,CAAC,EAAG,MAAM,CAC5E,CACA,kBAAmB,CACf,IAAMiC,EAAY,QAAQ,IAAI,2BAA6BE,EAAKC,EAAQ,EAAG,OAAQ,QAAS,OAAO,EAC7FC,EAAoB,OAAO,KAAK,KAAK,aAAc,MAAM,EACzDC,EAAqBC,EAAW,QAAQ,EAAE,OAAOF,CAAiB,EAAE,OAAO,KAAK,EACtF,OAAOF,EAAKF,EAAW,GAAGK,CAAkB,OAAO,CACvD,CACA,kBAAkBE,EAAc,CAC5B,IAAIC,EAAS,EACb,GAAID,EAAaC,CAAM,IAAM,EACzB,MAAM,IAAI,MAAM,uBAAuB,EAE3CA,IACA,IAAMC,EAAUF,EAAaC,GAAQ,EACjC,EAAID,EAAa,SAASC,EAAQA,EAASC,CAAO,EAEtD,GADAD,GAAUC,EACNF,EAAaC,CAAM,IAAM,EACzB,MAAM,IAAI,MAAM,uBAAuB,EAE3CA,IACA,IAAME,EAAUH,EAAaC,GAAQ,EACjCG,EAAIJ,EAAa,SAASC,EAAQA,EAASE,CAAO,EACtD,EAAI,EAAE,CAAC,IAAM,EAAO,EAAE,SAAS,CAAC,EAAI,EACpCC,EAAIA,EAAE,CAAC,IAAM,EAAOA,EAAE,SAAS,CAAC,EAAIA,EACpC,IAAMC,EAAU,OAAO,OAAO,CAAC,OAAO,MAAM,GAAK,EAAE,MAAM,EAAG,CAAC,CAAC,EACxDC,EAAU,OAAO,OAAO,CAAC,OAAO,MAAM,GAAKF,EAAE,MAAM,EAAGA,CAAC,CAAC,EAC9D,OAAO,OAAO,OAAO,CAACC,EAASC,CAAO,CAAC,CAC3C,CACA,sBAAsBC,EAAiB,CACnCA,EAAgB,IAAKC,GAAS,MAAOC,GAAS,CAC1C,GAAIC,EAAY,WAAWD,EAAK,OAAO,EAAG,CACtC,IAAME,EAAUF,EAAK,QACfG,EAAiB,GAAGD,EAAQ,QAAQ,KAAKA,EAAQ,QAAQ,GAAGA,EAAQ,KAAO,IAAIA,EAAQ,IAAI,GAAK,EAAE,GAAGA,EAAQ,IAAI,GACjHE,EAAO,MAAM,KAAK,aAAaF,EAAQ,OAAQC,CAAc,EACnED,EAAQ,QAAU,CACd,GAAGA,EAAQ,QACX,KAAME,CACV,CACJ,CACA,OAAOL,EAAKC,CAAI,CACpB,EAAG,CACC,KAAM,kBACN,KAAM,kBACN,SAAU,EACd,CAAC,CACL,CACA,MAAM,aAAaK,EAAS,OAAQC,EAAU,CAC1C,IAAMvD,EAAQ,MAAM,KAAK,UAAU,EACnC,GAAI,CACA,IAAMwD,EAAaC,EAAiB,CAChC,IAAKzD,EAAM,QACX,OAAQ,MACR,KAAM,MACV,CAAC,EAEK0D,EADYC,EAAgBH,CAAU,EAChB,OAAO,CAAE,OAAQ,MAAO,KAAM,MAAO,CAAC,EAC9DI,EAAa,GACjB,QAASC,EAAI,EAAGA,EAAIH,EAAU,OAAQG,IAClC,GAAIH,EAAUG,CAAC,IAAM,EAAM,CACvBD,EAAaC,EACb,KACJ,CAEJ,IAAMC,EAAIJ,EAAU,MAAME,EAAa,EAAGA,EAAa,EAAE,EACnD,EAAIF,EAAU,MAAME,EAAa,GAAIA,EAAa,EAAE,EACpDG,EAAS,CACX,IAAK,QACL,IAAK,WACL,IAAK,CACD,IAAK,KACL,IAAK,QACL,EAAGD,EAAE,SAAS,WAAW,EACzB,EAAG,EAAE,SAAS,WAAW,CAC7B,CACJ,EACME,EAAU,CACZ,IAAK,OAAO,WAAW,EACvB,IAAKV,EACL,IAAKC,EACL,IAAK,KAAK,MAAM,KAAK,IAAI,EAAI,GAAI,CACrC,EACMU,EAAY,OAAO,KAAK,KAAK,UAAUF,CAAM,CAAC,EAAE,SAAS,WAAW,EACpEG,EAAa,OAAO,KAAK,KAAK,UAAUF,CAAO,CAAC,EAAE,SAAS,WAAW,EACtErC,EAAU,GAAGsC,CAAS,IAAIC,CAAU,GACpCC,EAAgBC,EAAK,SAAU,OAAO,KAAKzC,CAAO,EAAG6B,CAAU,EAE/Da,EADe,KAAK,kBAAkBF,CAAa,EACvB,SAAS,WAAW,EACtD,MAAO,GAAGxC,CAAO,IAAI0C,CAAY,EACrC,OACO5C,EAAO,CACV,MAAM,IAAIxB,EAAyB,kCAAkCwB,aAAiB,MAAQA,EAAM,QAAU,OAAOA,CAAK,CAAC,GAAI,CAAE,OAAQ,KAAK,OAAQ,YAAa,EAAM,CAAC,CAC9K,CACJ,CACJ,ECxQO,IAAM6C,EAAuBC,EAACC,GAAS,MAAO,CAAE,mBAAAC,CAAmB,EAAI,CAAC,IAAM,CACjFD,GAAM,QAAQ,QAAQ,sDAAsD,EAC5E,IAAME,EAAW,MAAMC,EAAgBH,GAAQ,CAAC,CAAC,EAC3CI,EAAcC,EAAe,CAC/B,QAASL,GAAM,SAAWC,GAAoB,OAClD,CAAC,EACKK,EAAUJ,EAASE,CAAW,EACpC,GAAI,CAACE,GAAS,cACV,MAAM,IAAIC,EAAyB,WAAWH,CAAW,mCAAoC,CACzF,YAAa,GACb,OAAQJ,GAAM,MAClB,CAAC,EAGL,IAAMQ,EAAc,MADJ,IAAIC,EAAwBH,EAASN,EAAMC,CAAkB,EAC3C,gBAAgB,EAClD,OAAOS,EAAqBF,EAAa,oBAAqB,IAAI,CACtE,EAhBoC",
-  "names": ["createHash", "createPrivateKey", "createPublicKey", "sign", "fs", "homedir", "dirname", "join", "LoginCredentialsFetcher", "_LoginCredentialsFetcher", "__name", "profileData", "init", "callerClientConfig", "token", "CredentialsProviderError", "accessToken", "now", "diskToken", "diskExpiry", "tokenExpiry", "freshToken", "SigninClient", "CreateOAuth2TokenCommand", "logger", "userAgentAppId", "requestHandler", "region", "client", "commandInput", "response", "accessKeyId", "secretAccessKey", "sessionToken", "refreshToken", "expiresIn", "expiresInMs", "expiration", "updatedToken", "error", "errorType", "message", "tokenFilePath", "tokenData", "fs", "missingFields", "k", "directory", "dirname", "join", "homedir", "loginSessionBytes", "loginSessionSha256", "createHash", "derSignature", "offset", "rLength", "sLength", "s", "rPadded", "sPadded", "middlewareStack", "next", "args", "HttpRequest", "request", "actualEndpoint", "dpop", "method", "endpoint", "privateKey", "createPrivateKey", "publicDer", "createPublicKey", "pointStart", "i", "x", "header", "payload", "headerB64", "payloadB64", "asn1Signature", "sign", "signatureB64", "fromLoginCredentials", "__name", "init", "callerClientConfig", "profiles", "parseKnownFiles", "profileName", "getProfileName", "profile", "CredentialsProviderError", "credentials", "LoginCredentialsFetcher", "setCredentialFeature"]
-}

package/dist/monthlyRollup/dist-es-UGFAGDM2.mjs.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.74/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.74/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/checkUrl.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.74/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/requestHelpers.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-http@3.972.74/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/retry-wrapper.js"],
-  "sourcesContent": ["import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { CredentialsProviderError } from \"@smithy/core/config\";\nimport { NodeHttpHandler } from \"@smithy/node-http-handler\";\nimport fs from \"node:fs/promises\";\nimport { checkUrl } from \"./checkUrl\";\nimport { createGetRequest, getCredentials } from \"./requestHelpers\";\nimport { retryWrapper } from \"./retry-wrapper\";\nconst AWS_CONTAINER_CREDENTIALS_RELATIVE_URI = \"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI\";\nconst DEFAULT_LINK_LOCAL_HOST = \"http://169.254.170.2\";\nconst AWS_CONTAINER_CREDENTIALS_FULL_URI = \"AWS_CONTAINER_CREDENTIALS_FULL_URI\";\nconst AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE = \"AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE\";\nconst AWS_CONTAINER_AUTHORIZATION_TOKEN = \"AWS_CONTAINER_AUTHORIZATION_TOKEN\";\nexport const fromHttp = (options = {}) => {\n    options.logger?.debug(\"@aws-sdk/credential-provider-http - fromHttp\");\n    let host;\n    const relative = options.awsContainerCredentialsRelativeUri ?? process.env[AWS_CONTAINER_CREDENTIALS_RELATIVE_URI];\n    const full = options.awsContainerCredentialsFullUri ?? process.env[AWS_CONTAINER_CREDENTIALS_FULL_URI];\n    const token = options.awsContainerAuthorizationToken ?? process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN];\n    const tokenFile = options.awsContainerAuthorizationTokenFile ?? process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE];\n    const warn = options.logger?.constructor?.name === \"NoOpLogger\" || !options.logger?.warn\n        ? console.warn\n        : options.logger.warn.bind(options.logger);\n    if (relative && full) {\n        warn(\"@aws-sdk/credential-provider-http: \" +\n            \"you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri.\");\n        warn(\"awsContainerCredentialsRelativeUri will take precedence.\");\n    }\n    if (token && tokenFile) {\n        warn(\"@aws-sdk/credential-provider-http: \" +\n            \"you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile.\");\n        warn(\"awsContainerAuthorizationTokenFile will take precedence.\");\n    }\n    if (relative) {\n        host = `${DEFAULT_LINK_LOCAL_HOST}${relative}`;\n    }\n    else if (full) {\n        host = full;\n    }\n    else {\n        throw new CredentialsProviderError(`No HTTP credential provider host provided.\nSet AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`, { logger: options.logger });\n    }\n    const url = new URL(host);\n    checkUrl(url, options.logger);\n    const requestHandler = NodeHttpHandler.create({ connectionTimeout: options.timeout ?? 1000 });\n    const requestTimeout = options.timeout ?? 1000;\n    const provider = retryWrapper(async () => {\n        const request = createGetRequest(url);\n        if (tokenFile) {\n            request.headers.Authorization = validateToken((await fs.readFile(tokenFile)).toString());\n        }\n        else if (token) {\n            request.headers.Authorization = validateToken(token);\n        }\n        try {\n            const result = await requestHandler.handle(request, { requestTimeout });\n            return getCredentials(result.response).then((creds) => setCredentialFeature(creds, \"CREDENTIALS_HTTP\", \"z\"));\n        }\n        catch (e) {\n            throw new CredentialsProviderError(String(e), { logger: options.logger });\n        }\n    }, options.maxRetries ?? 3, options.timeout ?? 1000);\n    return async () => {\n        try {\n            return await provider();\n        }\n        finally {\n            requestHandler.destroy?.();\n        }\n    };\n};\nconst validateToken = (token) => {\n    if (token.includes(\"\\r\\n\")) {\n        throw new CredentialsProviderError(\"Authorization token contains invalid \\\\r\\\\n sequence.\");\n    }\n    return token;\n};\n", "import { CredentialsProviderError } from \"@smithy/core/config\";\nconst LOOPBACK_CIDR_IPv4 = \"127.0.0.0/8\";\nconst LOOPBACK_CIDR_IPv6 = \"::1/128\";\nconst ECS_CONTAINER_HOST = \"169.254.170.2\";\nconst EKS_CONTAINER_HOST_IPv4 = \"169.254.170.23\";\nconst EKS_CONTAINER_HOST_IPv6 = \"[fd00:ec2::23]\";\nexport const checkUrl = (url, logger) => {\n    if (url.protocol === \"https:\") {\n        return;\n    }\n    if (url.hostname === ECS_CONTAINER_HOST ||\n        url.hostname === EKS_CONTAINER_HOST_IPv4 ||\n        url.hostname === EKS_CONTAINER_HOST_IPv6) {\n        return;\n    }\n    if (url.hostname.includes(\"[\")) {\n        if (url.hostname === \"[::1]\" || url.hostname === \"[0000:0000:0000:0000:0000:0000:0000:0001]\") {\n            return;\n        }\n    }\n    else {\n        if (url.hostname === \"localhost\") {\n            return;\n        }\n        const ipComponents = url.hostname.split(\".\");\n        const inRange = (component) => {\n            const num = parseInt(component, 10);\n            return 0 <= num && num <= 255;\n        };\n        if (ipComponents[0] === \"127\" &&\n            inRange(ipComponents[1]) &&\n            inRange(ipComponents[2]) &&\n            inRange(ipComponents[3]) &&\n            ipComponents.length === 4) {\n            return;\n        }\n    }\n    throw new CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:\n  - loopback CIDR 127.0.0.0/8 or [::1/128]\n  - ECS container host 169.254.170.2\n  - EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger });\n};\n", "import { CredentialsProviderError } from \"@smithy/core/config\";\nimport { HttpRequest } from \"@smithy/core/protocols\";\nimport { parseRfc3339DateTime } from \"@smithy/core/serde\";\nimport { sdkStreamMixin } from \"@smithy/core/serde\";\nexport function createGetRequest(url) {\n    return new HttpRequest({\n        protocol: url.protocol,\n        hostname: url.hostname,\n        port: Number(url.port),\n        path: url.pathname,\n        query: Array.from(url.searchParams.entries()).reduce((acc, [k, v]) => {\n            acc[k] = v;\n            return acc;\n        }, {}),\n        fragment: url.hash,\n    });\n}\nexport async function getCredentials(response, logger) {\n    const stream = sdkStreamMixin(response.body);\n    const str = await stream.transformToString();\n    if (response.statusCode === 200) {\n        const parsed = JSON.parse(str);\n        if (typeof parsed.AccessKeyId !== \"string\" ||\n            typeof parsed.SecretAccessKey !== \"string\" ||\n            typeof parsed.Token !== \"string\" ||\n            typeof parsed.Expiration !== \"string\") {\n            throw new CredentialsProviderError(\"HTTP credential provider response not of the required format, an object matching: \" +\n                \"{ AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }\", { logger });\n        }\n        return {\n            accessKeyId: parsed.AccessKeyId,\n            secretAccessKey: parsed.SecretAccessKey,\n            sessionToken: parsed.Token,\n            expiration: parseRfc3339DateTime(parsed.Expiration),\n        };\n    }\n    if (response.statusCode >= 400 && response.statusCode < 500) {\n        let parsedBody = {};\n        try {\n            parsedBody = JSON.parse(str);\n        }\n        catch (e) { }\n        throw Object.assign(new CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger }), {\n            Code: parsedBody.Code,\n            Message: parsedBody.Message,\n        });\n    }\n    throw new CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger });\n}\n", "export const retryWrapper = (toRetry, maxRetries, delayMs) => {\n    return async () => {\n        for (let i = 0; i < maxRetries; ++i) {\n            try {\n                return await toRetry();\n            }\n            catch (e) {\n                await new Promise((resolve) => setTimeout(resolve, delayMs));\n            }\n        }\n        return await toRetry();\n    };\n};\n"],
-  "mappings": ";8YAGA,OAAOA,MAAQ,mBCAf,IAAMC,EAAqB,gBACrBC,EAA0B,iBAC1BC,EAA0B,iBACnBC,EAAWC,EAAA,CAACC,EAAKC,IAAW,CACrC,GAAID,EAAI,WAAa,UAGjB,EAAAA,EAAI,WAAaL,GACjBK,EAAI,WAAaJ,GACjBI,EAAI,WAAaH,GAGrB,IAAIG,EAAI,SAAS,SAAS,GAAG,GACzB,GAAIA,EAAI,WAAa,SAAWA,EAAI,WAAa,4CAC7C,WAGH,CACD,GAAIA,EAAI,WAAa,YACjB,OAEJ,IAAME,EAAeF,EAAI,SAAS,MAAM,GAAG,EACrCG,EAAUJ,EAACK,GAAc,CAC3B,IAAMC,EAAM,SAASD,EAAW,EAAE,EAClC,MAAO,IAAKC,GAAOA,GAAO,GAC9B,EAHgB,WAIhB,GAAIH,EAAa,CAAC,IAAM,OACpBC,EAAQD,EAAa,CAAC,CAAC,GACvBC,EAAQD,EAAa,CAAC,CAAC,GACvBC,EAAQD,EAAa,CAAC,CAAC,GACvBA,EAAa,SAAW,EACxB,MAER,CACA,MAAM,IAAII,EAAyB;AAAA;AAAA;AAAA,yDAGmB,CAAE,OAAAL,CAAO,CAAC,EACpE,EAnCwB,YCFjB,SAASM,EAAiBC,EAAK,CAClC,OAAO,IAAIC,EAAY,CACnB,SAAUD,EAAI,SACd,SAAUA,EAAI,SACd,KAAM,OAAOA,EAAI,IAAI,EACrB,KAAMA,EAAI,SACV,MAAO,MAAM,KAAKA,EAAI,aAAa,QAAQ,CAAC,EAAE,OAAO,CAACE,EAAK,CAACC,EAAGC,CAAC,KAC5DF,EAAIC,CAAC,EAAIC,EACFF,GACR,CAAC,CAAC,EACL,SAAUF,EAAI,IAClB,CAAC,CACL,CAZgBK,EAAAN,EAAA,oBAahB,eAAsBO,EAAeC,EAAUC,EAAQ,CAEnD,IAAMC,EAAM,MADGC,EAAeH,EAAS,IAAI,EAClB,kBAAkB,EAC3C,GAAIA,EAAS,aAAe,IAAK,CAC7B,IAAMI,EAAS,KAAK,MAAMF,CAAG,EAC7B,GAAI,OAAOE,EAAO,aAAgB,UAC9B,OAAOA,EAAO,iBAAoB,UAClC,OAAOA,EAAO,OAAU,UACxB,OAAOA,EAAO,YAAe,SAC7B,MAAM,IAAIC,EAAyB,iLACiE,CAAE,OAAAJ,CAAO,CAAC,EAElH,MAAO,CACH,YAAaG,EAAO,YACpB,gBAAiBA,EAAO,gBACxB,aAAcA,EAAO,MACrB,WAAYE,EAAqBF,EAAO,UAAU,CACtD,CACJ,CACA,GAAIJ,EAAS,YAAc,KAAOA,EAAS,WAAa,IAAK,CACzD,IAAIO,EAAa,CAAC,EAClB,GAAI,CACAA,EAAa,KAAK,MAAML,CAAG,CAC/B,MACU,CAAE,CACZ,MAAM,OAAO,OAAO,IAAIG,EAAyB,iCAAiCL,EAAS,UAAU,GAAI,CAAE,OAAAC,CAAO,CAAC,EAAG,CAClH,KAAMM,EAAW,KACjB,QAASA,EAAW,OACxB,CAAC,CACL,CACA,MAAM,IAAIF,EAAyB,iCAAiCL,EAAS,UAAU,GAAI,CAAE,OAAAC,CAAO,CAAC,CACzG,CA/BsBH,EAAAC,EAAA,kBCjBf,IAAMS,EAAeC,EAAA,CAACC,EAASC,EAAYC,IACvC,SAAY,CACf,QAASC,EAAI,EAAGA,EAAIF,EAAY,EAAEE,EAC9B,GAAI,CACA,OAAO,MAAMH,EAAQ,CACzB,MACU,CACN,MAAM,IAAI,QAASI,GAAY,WAAWA,EAASF,CAAO,CAAC,CAC/D,CAEJ,OAAO,MAAMF,EAAQ,CACzB,EAXwB,gBHO5B,IAAMK,EAAyC,yCACzCC,EAA0B,uBAC1BC,EAAqC,qCACrCC,EAAyC,yCACzCC,EAAoC,oCAC7BC,EAAWC,EAAA,CAACC,EAAU,CAAC,IAAM,CACtCA,EAAQ,QAAQ,MAAM,8CAA8C,EACpE,IAAIC,EACEC,EAAWF,EAAQ,oCAAsC,QAAQ,IAAIP,CAAsC,EAC3GU,EAAOH,EAAQ,gCAAkC,QAAQ,IAAIL,CAAkC,EAC/FS,EAAQJ,EAAQ,gCAAkC,QAAQ,IAAIH,CAAiC,EAC/FQ,EAAYL,EAAQ,oCAAsC,QAAQ,IAAIJ,CAAsC,EAC5GU,EAAON,EAAQ,QAAQ,aAAa,OAAS,cAAgB,CAACA,EAAQ,QAAQ,KAC9E,QAAQ,KACRA,EAAQ,OAAO,KAAK,KAAKA,EAAQ,MAAM,EAW7C,GAVIE,GAAYC,IACZG,EAAK,6HACyF,EAC9FA,EAAK,0DAA0D,GAE/DF,GAASC,IACTC,EAAK,6HACyF,EAC9FA,EAAK,0DAA0D,GAE/DJ,EACAD,EAAO,GAAGP,CAAuB,GAAGQ,CAAQ,WAEvCC,EACLF,EAAOE,MAGP,OAAM,IAAII,EAAyB;AAAA,mFACyC,CAAE,OAAQP,EAAQ,MAAO,CAAC,EAE1G,IAAMQ,EAAM,IAAI,IAAIP,CAAI,EACxBQ,EAASD,EAAKR,EAAQ,MAAM,EAC5B,IAAMU,EAAiBC,EAAgB,OAAO,CAAE,kBAAmBX,EAAQ,SAAW,GAAK,CAAC,EACtFY,EAAiBZ,EAAQ,SAAW,IACpCa,EAAWC,EAAa,SAAY,CACtC,IAAMC,EAAUC,EAAiBR,CAAG,EAChCH,EACAU,EAAQ,QAAQ,cAAgBE,GAAe,MAAMC,EAAG,SAASb,CAAS,GAAG,SAAS,CAAC,EAElFD,IACLW,EAAQ,QAAQ,cAAgBE,EAAcb,CAAK,GAEvD,GAAI,CACA,IAAMe,EAAS,MAAMT,EAAe,OAAOK,EAAS,CAAE,eAAAH,CAAe,CAAC,EACtE,OAAOQ,EAAeD,EAAO,QAAQ,EAAE,KAAME,GAAUC,EAAqBD,EAAO,mBAAoB,GAAG,CAAC,CAC/G,OACOE,EAAG,CACN,MAAM,IAAIhB,EAAyB,OAAOgB,CAAC,EAAG,CAAE,OAAQvB,EAAQ,MAAO,CAAC,CAC5E,CACJ,EAAGA,EAAQ,YAAc,EAAGA,EAAQ,SAAW,GAAI,EACnD,MAAO,UAAY,CACf,GAAI,CACA,OAAO,MAAMa,EAAS,CAC1B,QACA,CACIH,EAAe,UAAU,CAC7B,CACJ,CACJ,EA1DwB,YA2DlBO,EAAgBlB,EAACK,GAAU,CAC7B,GAAIA,EAAM,SAAS;AAAA,CAAM,EACrB,MAAM,IAAIG,EAAyB,uDAAuD,EAE9F,OAAOH,CACX,EALsB",
-  "names": ["fs", "ECS_CONTAINER_HOST", "EKS_CONTAINER_HOST_IPv4", "EKS_CONTAINER_HOST_IPv6", "checkUrl", "__name", "url", "logger", "ipComponents", "inRange", "component", "num", "CredentialsProviderError", "createGetRequest", "url", "HttpRequest", "acc", "k", "v", "__name", "getCredentials", "response", "logger", "str", "sdkStreamMixin", "parsed", "CredentialsProviderError", "parseRfc3339DateTime", "parsedBody", "retryWrapper", "__name", "toRetry", "maxRetries", "delayMs", "i", "resolve", "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI", "DEFAULT_LINK_LOCAL_HOST", "AWS_CONTAINER_CREDENTIALS_FULL_URI", "AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE", "AWS_CONTAINER_AUTHORIZATION_TOKEN", "fromHttp", "__name", "options", "host", "relative", "full", "token", "tokenFile", "warn", "CredentialsProviderError", "url", "checkUrl", "requestHandler", "NodeHttpHandler", "requestTimeout", "provider", "retryWrapper", "request", "createGetRequest", "validateToken", "fs", "result", "getCredentials", "creds", "setCredentialFeature", "e"]
-}

package/dist/monthlyRollup/dist-es-YRXTT57X.mjs

@@ -1,3 +0,0 @@
-/* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
-import{b as v,p as f,q as d,u as E,v as q,w as A,x as I,y as N}from"./chunk-YIZKQ2WK.mjs";import"./chunk-IHCR62UU.mjs";import"./chunk-RO44VKXZ.mjs";import"./chunk-NX6AKUU3.mjs";import{a as o}from"./chunk-CFZ5JWD3.mjs";var P=o(e=>e&&(typeof e.sso_start_url=="string"||typeof e.sso_account_id=="string"||typeof e.sso_session=="string"||typeof e.sso_region=="string"||typeof e.sso_role_name=="string"),"isSsoProfile");var _="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var W=o(async(e,s={},t)=>{let{SSOOIDCClient:n}=await import("./sso-oidc-MI4NLGSV.mjs"),i=o(p=>s.clientConfig?.[p]??s.parentClientConfig?.[p]??t?.[p],"coalesce");return new n(Object.assign({},s.clientConfig??{},{region:e??s.clientConfig?.region,logger:i("logger"),userAgentAppId:i("userAgentAppId")}))},"getSsoOidcClient");var X=o(async(e,s,t={},n)=>{let{CreateTokenCommand:i}=await import("./sso-oidc-MI4NLGSV.mjs");return(await W(s,t,n)).send(new i({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))},"getNewSsoOidcToken");var F=o(e=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new d(`Token is expired. ${_}`,!1)},"validateTokenExpiry");var w=o((e,s,t=!1)=>{if(typeof s>"u")throw new d(`Value not present for '${e}' in SSO Token${t?". Cannot refresh":""}. ${_}`,!1)},"validateTokenKey");import{promises as Y}from"node:fs";var{writeFile:B}=Y,z=o((e,s)=>{let t=q(e),n=JSON.stringify(s,null,2);return B(t,n)},"writeSSOTokenToFile");var J=new Map,D=o((e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let t=await N(e),n=E({profile:e.profile??s?.profile}),i=t[n];if(i){if(!i.sso_session)throw new d(`Profile '${n}' is missing required property 'sso_session'.`)}else throw new d(`Profile '${n}' could not be found in shared credentials file.`,!1);let a=i.sso_session,g=(await I(e))[a];if(!g)throw new d(`Sso session '${a}' could not be found in shared credentials file.`,!1);for(let l of["sso_start_url","sso_region"])if(!g[l])throw new d(`Sso session '${a}' is missing required property '${l}'.`,!1);let S=g.sso_start_url,O=g.sso_region,r;try{r=await A(a)}catch{throw new d(`The SSO session token associated with profile=${n} was not found or is invalid. ${_}`,!1)}w("accessToken",r.accessToken),w("expiresAt",r.expiresAt);let{accessToken:k,expiresAt:T}=r,c={token:k,expiration:new Date(T)};if(c.expiration.getTime()-Date.now()>3e5)return c;let m=J.get(a)??0;if(Date.now()-m<30*1e3)return F(c),c;w("clientId",r.clientId,!0),w("clientSecret",r.clientSecret,!0),w("refreshToken",r.refreshToken,!0);try{J.set(a,Date.now());let l=await X(r,O,e,s);w("accessToken",l.accessToken),w("expiresIn",l.expiresIn);let x=new Date(Date.now()+l.expiresIn*1e3);try{await z(a,{...r,accessToken:l.accessToken,expiresAt:x.toISOString(),refreshToken:l.refreshToken})}catch{}return{token:l.accessToken,expiration:x}}catch{return F(c),c}},"fromSso");var C=!1,$=o(async({ssoStartUrl:e,ssoSession:s,ssoAccountId:t,ssoRegion:n,ssoRoleName:i,ssoClient:a,clientConfig:p,parentClientConfig:g,callerClientConfig:S,profile:O,filepath:r,configFilepath:k,ignoreCache:T,logger:c})=>{let m,l="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let u=await D({profile:O,filepath:r,configFilepath:k,ignoreCache:T,clientConfig:p,parentClientConfig:g,logger:c})({callerClientConfig:S});m={accessToken:u.token,expiresAt:new Date(u.expiration).toISOString()}}catch(u){throw new f(u.message,{tryNextLink:C,logger:c})}else try{m=await A(e)}catch{throw new f(`The SSO session associated with this profile is invalid. ${l}`,{tryNextLink:C,logger:c})}if(new Date(m.expiresAt).getTime()-Date.now()<=0)throw new f(`The SSO session associated with this profile has expired. ${l}`,{tryNextLink:C,logger:c});let{accessToken:x}=m,{SSOClient:h,GetRoleCredentialsCommand:y}=await import("./loadSso-6KWTKR23.mjs"),V=a||new h(Object.assign({},p??{},{logger:p?.logger??S?.logger??g?.logger,region:p?.region??n,userAgentAppId:p?.userAgentAppId??S?.userAgentAppId??g?.userAgentAppId})),M;try{M=await V.send(new y({accountId:t,roleName:i,accessToken:x}))}catch(u){throw new f(u,{tryNextLink:C,logger:c})}let{roleCredentials:{accessKeyId:b,secretAccessKey:G,sessionToken:K,expiration:H,credentialScope:U,accountId:j}={}}=M;if(!b||!G||!K||!H)throw new f("SSO returns an invalid temporary credential.",{tryNextLink:C,logger:c});let R={accessKeyId:b,secretAccessKey:G,sessionToken:K,expiration:new Date(H),...U&&{credentialScope:U},...j&&{accountId:j}};return s?v(R,"CREDENTIALS_SSO","s"):v(R,"CREDENTIALS_SSO_LEGACY","u"),R},"resolveSSOCredentials");var L=o((e,s)=>{let{sso_start_url:t,sso_account_id:n,sso_region:i,sso_role_name:a}=e;if(!t||!n||!i||!a)throw new f(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
-Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:s});return e},"validateSsoProfile");var Z=o((e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:t,ssoAccountId:n,ssoRegion:i,ssoRoleName:a,ssoSession:p}=e,{ssoClient:g}=e,S=E({profile:e.profile??s?.profile});if(!t&&!n&&!i&&!a&&!p){let r=(await N(e))[S];if(!r)throw new f(`Profile ${S} was not found.`,{logger:e.logger});if(!P(r))throw new f(`Profile ${S} is not configured with SSO credentials.`,{logger:e.logger});if(r?.sso_session){let h=(await I(e))[r.sso_session],y=` configurations in profile ${S} and sso-session ${r.sso_session}`;if(i&&i!==h.sso_region)throw new f("Conflicting SSO region"+y,{tryNextLink:!1,logger:e.logger});if(t&&t!==h.sso_start_url)throw new f("Conflicting SSO start_url"+y,{tryNextLink:!1,logger:e.logger});r.sso_region=h.sso_region,r.sso_start_url=h.sso_start_url}let{sso_start_url:k,sso_account_id:T,sso_region:c,sso_role_name:m,sso_session:l}=L(r,e.logger);return $({ssoStartUrl:k,ssoSession:l,ssoAccountId:T,ssoRegion:c,ssoRoleName:m,ssoClient:g,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:S,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}else{if(!t||!n||!i||!a)throw new f('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});return $({ssoStartUrl:t,ssoSession:p,ssoAccountId:n,ssoRegion:i,ssoRoleName:a,ssoClient:g,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:S,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}},"fromSSO");export{Z as fromSSO,P as isSsoProfile,L as validateSsoProfile};

package/dist/monthlyRollup/dist-es-YRXTT57X.mjs.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.17/node_modules/@aws-sdk/credential-provider-sso/dist-es/isSsoProfile.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/constants.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/getSsoOidcClient.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/getNewSsoOidcToken.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/validateTokenExpiry.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/validateTokenKey.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/writeSSOTokenToFile.js", "../../../../node_modules/.bun/@aws-sdk+token-providers@3.1149.0/node_modules/@aws-sdk/token-providers/dist-es/fromSso.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.17/node_modules/@aws-sdk/credential-provider-sso/dist-es/resolveSSOCredentials.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.17/node_modules/@aws-sdk/credential-provider-sso/dist-es/validateSsoProfile.js", "../../../../node_modules/.bun/@aws-sdk+credential-provider-sso@3.973.17/node_modules/@aws-sdk/credential-provider-sso/dist-es/fromSSO.js"],
-  "sourcesContent": ["export const isSsoProfile = (arg) => arg &&\n    (typeof arg.sso_start_url === \"string\" ||\n        typeof arg.sso_account_id === \"string\" ||\n        typeof arg.sso_session === \"string\" ||\n        typeof arg.sso_region === \"string\" ||\n        typeof arg.sso_role_name === \"string\");\n", "export const EXPIRE_WINDOW_MS = 5 * 60 * 1000;\nexport const REFRESH_MESSAGE = `To refresh this SSO session run 'aws sso login' with the corresponding profile.`;\n", "export const getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {\n    const { SSOOIDCClient } = await import(\"@aws-sdk/nested-clients/sso-oidc\");\n    const coalesce = (prop) => init.clientConfig?.[prop] ?? init.parentClientConfig?.[prop] ?? callerClientConfig?.[prop];\n    const ssoOidcClient = new SSOOIDCClient(Object.assign({}, init.clientConfig ?? {}, {\n        region: ssoRegion ?? init.clientConfig?.region,\n        logger: coalesce(\"logger\"),\n        userAgentAppId: coalesce(\"userAgentAppId\"),\n    }));\n    return ssoOidcClient;\n};\n", "import { getSsoOidcClient } from \"./getSsoOidcClient\";\nexport const getNewSsoOidcToken = async (ssoToken, ssoRegion, init = {}, callerClientConfig) => {\n    const { CreateTokenCommand } = await import(\"@aws-sdk/nested-clients/sso-oidc\");\n    const ssoOidcClient = await getSsoOidcClient(ssoRegion, init, callerClientConfig);\n    return ssoOidcClient.send(new CreateTokenCommand({\n        clientId: ssoToken.clientId,\n        clientSecret: ssoToken.clientSecret,\n        refreshToken: ssoToken.refreshToken,\n        grantType: \"refresh_token\",\n    }));\n};\n", "import { TokenProviderError } from \"@smithy/core/config\";\nimport { REFRESH_MESSAGE } from \"./constants\";\nexport const validateTokenExpiry = (token) => {\n    if (token.expiration && token.expiration.getTime() < Date.now()) {\n        throw new TokenProviderError(`Token is expired. ${REFRESH_MESSAGE}`, false);\n    }\n};\n", "import { TokenProviderError } from \"@smithy/core/config\";\nimport { REFRESH_MESSAGE } from \"./constants\";\nexport const validateTokenKey = (key, value, forRefresh = false) => {\n    if (typeof value === \"undefined\") {\n        throw new TokenProviderError(`Value not present for '${key}' in SSO Token${forRefresh ? \". Cannot refresh\" : \"\"}. ${REFRESH_MESSAGE}`, false);\n    }\n};\n", "import { getSSOTokenFilepath } from \"@smithy/core/config\";\nimport { promises as fsPromises } from \"node:fs\";\nconst { writeFile } = fsPromises;\nexport const writeSSOTokenToFile = (id, ssoToken) => {\n    const tokenFilepath = getSSOTokenFilepath(id);\n    const tokenString = JSON.stringify(ssoToken, null, 2);\n    return writeFile(tokenFilepath, tokenString);\n};\n", "import { getProfileName, getSSOTokenFromFile, loadSsoSessionData, parseKnownFiles, TokenProviderError, } from \"@smithy/core/config\";\nimport { EXPIRE_WINDOW_MS, REFRESH_MESSAGE } from \"./constants\";\nimport { getNewSsoOidcToken } from \"./getNewSsoOidcToken\";\nimport { validateTokenExpiry } from \"./validateTokenExpiry\";\nimport { validateTokenKey } from \"./validateTokenKey\";\nimport { writeSSOTokenToFile } from \"./writeSSOTokenToFile\";\nconst lastRefreshAttemptTimes = new Map();\nexport const fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {\n    init.logger?.debug(\"@aws-sdk/token-providers - fromSso\");\n    const profiles = await parseKnownFiles(init);\n    const profileName = getProfileName({\n        profile: init.profile ?? callerClientConfig?.profile,\n    });\n    const profile = profiles[profileName];\n    if (!profile) {\n        throw new TokenProviderError(`Profile '${profileName}' could not be found in shared credentials file.`, false);\n    }\n    else if (!profile[\"sso_session\"]) {\n        throw new TokenProviderError(`Profile '${profileName}' is missing required property 'sso_session'.`);\n    }\n    const ssoSessionName = profile[\"sso_session\"];\n    const ssoSessions = await loadSsoSessionData(init);\n    const ssoSession = ssoSessions[ssoSessionName];\n    if (!ssoSession) {\n        throw new TokenProviderError(`Sso session '${ssoSessionName}' could not be found in shared credentials file.`, false);\n    }\n    for (const ssoSessionRequiredKey of [\"sso_start_url\", \"sso_region\"]) {\n        if (!ssoSession[ssoSessionRequiredKey]) {\n            throw new TokenProviderError(`Sso session '${ssoSessionName}' is missing required property '${ssoSessionRequiredKey}'.`, false);\n        }\n    }\n    const ssoStartUrl = ssoSession[\"sso_start_url\"];\n    const ssoRegion = ssoSession[\"sso_region\"];\n    let ssoToken;\n    try {\n        ssoToken = await getSSOTokenFromFile(ssoSessionName);\n    }\n    catch (e) {\n        throw new TokenProviderError(`The SSO session token associated with profile=${profileName} was not found or is invalid. ${REFRESH_MESSAGE}`, false);\n    }\n    validateTokenKey(\"accessToken\", ssoToken.accessToken);\n    validateTokenKey(\"expiresAt\", ssoToken.expiresAt);\n    const { accessToken, expiresAt } = ssoToken;\n    const existingToken = {\n        token: accessToken,\n        expiration: new Date(expiresAt),\n    };\n    if (existingToken.expiration.getTime() - Date.now() > EXPIRE_WINDOW_MS) {\n        return existingToken;\n    }\n    const lastRefreshAttemptTime = lastRefreshAttemptTimes.get(ssoSessionName) ?? 0;\n    if (Date.now() - lastRefreshAttemptTime < 30 * 1000) {\n        validateTokenExpiry(existingToken);\n        return existingToken;\n    }\n    validateTokenKey(\"clientId\", ssoToken.clientId, true);\n    validateTokenKey(\"clientSecret\", ssoToken.clientSecret, true);\n    validateTokenKey(\"refreshToken\", ssoToken.refreshToken, true);\n    try {\n        lastRefreshAttemptTimes.set(ssoSessionName, Date.now());\n        const newSsoOidcToken = await getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig);\n        validateTokenKey(\"accessToken\", newSsoOidcToken.accessToken);\n        validateTokenKey(\"expiresIn\", newSsoOidcToken.expiresIn);\n        const newTokenExpiration = new Date(Date.now() + newSsoOidcToken.expiresIn * 1000);\n        try {\n            await writeSSOTokenToFile(ssoSessionName, {\n                ...ssoToken,\n                accessToken: newSsoOidcToken.accessToken,\n                expiresAt: newTokenExpiration.toISOString(),\n                refreshToken: newSsoOidcToken.refreshToken,\n            });\n        }\n        catch (error) {\n        }\n        return {\n            token: newSsoOidcToken.accessToken,\n            expiration: newTokenExpiration,\n        };\n    }\n    catch (error) {\n        validateTokenExpiry(existingToken);\n        return existingToken;\n    }\n};\n", "import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { fromSso as getSsoTokenProvider } from \"@aws-sdk/token-providers\";\nimport { CredentialsProviderError, getSSOTokenFromFile } from \"@smithy/core/config\";\nconst SHOULD_FAIL_CREDENTIAL_CHAIN = false;\nexport const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, callerClientConfig, profile, filepath, configFilepath, ignoreCache, logger, }) => {\n    let token;\n    const refreshMessage = `To refresh this SSO session run aws sso login with the corresponding profile.`;\n    if (ssoSession) {\n        try {\n            const _token = await getSsoTokenProvider({\n                profile,\n                filepath,\n                configFilepath,\n                ignoreCache,\n                clientConfig,\n                parentClientConfig,\n                logger,\n            })({ callerClientConfig });\n            token = {\n                accessToken: _token.token,\n                expiresAt: new Date(_token.expiration).toISOString(),\n            };\n        }\n        catch (e) {\n            throw new CredentialsProviderError(e.message, {\n                tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n                logger,\n            });\n        }\n    }\n    else {\n        try {\n            token = await getSSOTokenFromFile(ssoStartUrl);\n        }\n        catch (e) {\n            throw new CredentialsProviderError(`The SSO session associated with this profile is invalid. ${refreshMessage}`, {\n                tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n                logger,\n            });\n        }\n    }\n    if (new Date(token.expiresAt).getTime() - Date.now() <= 0) {\n        throw new CredentialsProviderError(`The SSO session associated with this profile has expired. ${refreshMessage}`, {\n            tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n            logger,\n        });\n    }\n    const { accessToken } = token;\n    const { SSOClient, GetRoleCredentialsCommand } = await import(\"./loadSso.js\");\n    const sso = ssoClient ||\n        new SSOClient(Object.assign({}, clientConfig ?? {}, {\n            logger: clientConfig?.logger ?? callerClientConfig?.logger ?? parentClientConfig?.logger,\n            region: clientConfig?.region ?? ssoRegion,\n            userAgentAppId: clientConfig?.userAgentAppId ?? callerClientConfig?.userAgentAppId ?? parentClientConfig?.userAgentAppId,\n        }));\n    let ssoResp;\n    try {\n        ssoResp = await sso.send(new GetRoleCredentialsCommand({\n            accountId: ssoAccountId,\n            roleName: ssoRoleName,\n            accessToken,\n        }));\n    }\n    catch (e) {\n        throw new CredentialsProviderError(e, {\n            tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n            logger,\n        });\n    }\n    const { roleCredentials: { accessKeyId, secretAccessKey, sessionToken, expiration, credentialScope, accountId } = {}, } = ssoResp;\n    if (!accessKeyId || !secretAccessKey || !sessionToken || !expiration) {\n        throw new CredentialsProviderError(\"SSO returns an invalid temporary credential.\", {\n            tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n            logger,\n        });\n    }\n    const credentials = {\n        accessKeyId,\n        secretAccessKey,\n        sessionToken,\n        expiration: new Date(expiration),\n        ...(credentialScope && { credentialScope }),\n        ...(accountId && { accountId }),\n    };\n    if (ssoSession) {\n        setCredentialFeature(credentials, \"CREDENTIALS_SSO\", \"s\");\n    }\n    else {\n        setCredentialFeature(credentials, \"CREDENTIALS_SSO_LEGACY\", \"u\");\n    }\n    return credentials;\n};\n", "import { CredentialsProviderError } from \"@smithy/core/config\";\nexport const validateSsoProfile = (profile, logger) => {\n    const { sso_start_url, sso_account_id, sso_region, sso_role_name } = profile;\n    if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {\n        throw new CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters \"sso_account_id\", ` +\n            `\"sso_region\", \"sso_role_name\", \"sso_start_url\". Got ${Object.keys(profile).join(\", \")}\\nReference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger });\n    }\n    return profile;\n};\n", "import { CredentialsProviderError, getProfileName, loadSsoSessionData, parseKnownFiles } from \"@smithy/core/config\";\nimport { isSsoProfile } from \"./isSsoProfile\";\nimport { resolveSSOCredentials } from \"./resolveSSOCredentials\";\nimport { validateSsoProfile } from \"./validateSsoProfile\";\nexport const fromSSO = (init = {}) => async ({ callerClientConfig } = {}) => {\n    init.logger?.debug(\"@aws-sdk/credential-provider-sso - fromSSO\");\n    const { ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession } = init;\n    const { ssoClient } = init;\n    const profileName = getProfileName({\n        profile: init.profile ?? callerClientConfig?.profile,\n    });\n    if (!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession) {\n        const profiles = await parseKnownFiles(init);\n        const profile = profiles[profileName];\n        if (!profile) {\n            throw new CredentialsProviderError(`Profile ${profileName} was not found.`, { logger: init.logger });\n        }\n        if (!isSsoProfile(profile)) {\n            throw new CredentialsProviderError(`Profile ${profileName} is not configured with SSO credentials.`, {\n                logger: init.logger,\n            });\n        }\n        if (profile?.sso_session) {\n            const ssoSessions = await loadSsoSessionData(init);\n            const session = ssoSessions[profile.sso_session];\n            const conflictMsg = ` configurations in profile ${profileName} and sso-session ${profile.sso_session}`;\n            if (ssoRegion && ssoRegion !== session.sso_region) {\n                throw new CredentialsProviderError(`Conflicting SSO region` + conflictMsg, {\n                    tryNextLink: false,\n                    logger: init.logger,\n                });\n            }\n            if (ssoStartUrl && ssoStartUrl !== session.sso_start_url) {\n                throw new CredentialsProviderError(`Conflicting SSO start_url` + conflictMsg, {\n                    tryNextLink: false,\n                    logger: init.logger,\n                });\n            }\n            profile.sso_region = session.sso_region;\n            profile.sso_start_url = session.sso_start_url;\n        }\n        const { sso_start_url, sso_account_id, sso_region, sso_role_name, sso_session } = validateSsoProfile(profile, init.logger);\n        return resolveSSOCredentials({\n            ssoStartUrl: sso_start_url,\n            ssoSession: sso_session,\n            ssoAccountId: sso_account_id,\n            ssoRegion: sso_region,\n            ssoRoleName: sso_role_name,\n            ssoClient: ssoClient,\n            clientConfig: init.clientConfig,\n            parentClientConfig: init.parentClientConfig,\n            callerClientConfig: init.callerClientConfig,\n            profile: profileName,\n            filepath: init.filepath,\n            configFilepath: init.configFilepath,\n            ignoreCache: init.ignoreCache,\n            logger: init.logger,\n        });\n    }\n    else if (!ssoStartUrl || !ssoAccountId || !ssoRegion || !ssoRoleName) {\n        throw new CredentialsProviderError(\"Incomplete configuration. The fromSSO() argument hash must include \" +\n            '\"ssoStartUrl\", \"ssoAccountId\", \"ssoRegion\", \"ssoRoleName\"', { tryNextLink: false, logger: init.logger });\n    }\n    else {\n        return resolveSSOCredentials({\n            ssoStartUrl,\n            ssoSession,\n            ssoAccountId,\n            ssoRegion,\n            ssoRoleName,\n            ssoClient,\n            clientConfig: init.clientConfig,\n            parentClientConfig: init.parentClientConfig,\n            callerClientConfig: init.callerClientConfig,\n            profile: profileName,\n            filepath: init.filepath,\n            configFilepath: init.configFilepath,\n            ignoreCache: init.ignoreCache,\n            logger: init.logger,\n        });\n    }\n};\n"],
-  "mappings": ";0NAAO,IAAMA,EAAeC,EAACC,GAAQA,IAChC,OAAOA,EAAI,eAAkB,UAC1B,OAAOA,EAAI,gBAAmB,UAC9B,OAAOA,EAAI,aAAgB,UAC3B,OAAOA,EAAI,YAAe,UAC1B,OAAOA,EAAI,eAAkB,UALT,gBCCrB,IAAMC,EAAkB,kFCDxB,IAAMC,EAAmBC,EAAA,MAAOC,EAAWC,EAAO,CAAC,EAAGC,IAAuB,CAChF,GAAM,CAAE,cAAAC,CAAc,EAAI,KAAM,QAAO,yBAAkC,EACnEC,EAAWL,EAACM,GAASJ,EAAK,eAAeI,CAAI,GAAKJ,EAAK,qBAAqBI,CAAI,GAAKH,IAAqBG,CAAI,EAAnG,YAMjB,OALsB,IAAIF,EAAc,OAAO,OAAO,CAAC,EAAGF,EAAK,cAAgB,CAAC,EAAG,CAC/E,OAAQD,GAAaC,EAAK,cAAc,OACxC,OAAQG,EAAS,QAAQ,EACzB,eAAgBA,EAAS,gBAAgB,CAC7C,CAAC,CAAC,CAEN,EATgC,oBCCzB,IAAME,EAAqBC,EAAA,MAAOC,EAAUC,EAAWC,EAAO,CAAC,EAAGC,IAAuB,CAC5F,GAAM,CAAE,mBAAAC,CAAmB,EAAI,KAAM,QAAO,yBAAkC,EAE9E,OADsB,MAAMC,EAAiBJ,EAAWC,EAAMC,CAAkB,GAC3D,KAAK,IAAIC,EAAmB,CAC7C,SAAUJ,EAAS,SACnB,aAAcA,EAAS,aACvB,aAAcA,EAAS,aACvB,UAAW,eACf,CAAC,CAAC,CACN,EATkC,sBCC3B,IAAMM,EAAsBC,EAACC,GAAU,CAC1C,GAAIA,EAAM,YAAcA,EAAM,WAAW,QAAQ,EAAI,KAAK,IAAI,EAC1D,MAAM,IAAIC,EAAmB,qBAAqBC,CAAe,GAAI,EAAK,CAElF,EAJmC,uBCA5B,IAAMC,EAAmBC,EAAA,CAACC,EAAKC,EAAOC,EAAa,KAAU,CAChE,GAAI,OAAOD,EAAU,IACjB,MAAM,IAAIE,EAAmB,0BAA0BH,CAAG,iBAAiBE,EAAa,mBAAqB,EAAE,KAAKE,CAAe,GAAI,EAAK,CAEpJ,EAJgC,oBCDhC,OAAS,YAAYC,MAAkB,UACvC,GAAM,CAAE,UAAAC,CAAU,EAAIC,EACTC,EAAsBC,EAAA,CAACC,EAAIC,IAAa,CACjD,IAAMC,EAAgBC,EAAoBH,CAAE,EACtCI,EAAc,KAAK,UAAUH,EAAU,KAAM,CAAC,EACpD,OAAOL,EAAUM,EAAeE,CAAW,CAC/C,EAJmC,uBCGnC,IAAMC,EAA0B,IAAI,IACvBC,EAAUC,EAAA,CAACC,EAAO,CAAC,IAAM,MAAO,CAAE,mBAAAC,CAAmB,EAAI,CAAC,IAAM,CACzED,EAAK,QAAQ,MAAM,oCAAoC,EACvD,IAAME,EAAW,MAAMC,EAAgBH,CAAI,EACrCI,EAAcC,EAAe,CAC/B,QAASL,EAAK,SAAWC,GAAoB,OACjD,CAAC,EACKK,EAAUJ,EAASE,CAAW,EACpC,GAAKE,GAGA,GAAI,CAACA,EAAQ,YACd,MAAM,IAAIC,EAAmB,YAAYH,CAAW,+CAA+C,MAHnG,OAAM,IAAIG,EAAmB,YAAYH,CAAW,mDAAoD,EAAK,EAKjH,IAAMI,EAAiBF,EAAQ,YAEzBG,GADc,MAAMC,EAAmBV,CAAI,GAClBQ,CAAc,EAC7C,GAAI,CAACC,EACD,MAAM,IAAIF,EAAmB,gBAAgBC,CAAc,mDAAoD,EAAK,EAExH,QAAWG,IAAyB,CAAC,gBAAiB,YAAY,EAC9D,GAAI,CAACF,EAAWE,CAAqB,EACjC,MAAM,IAAIJ,EAAmB,gBAAgBC,CAAc,mCAAmCG,CAAqB,KAAM,EAAK,EAGtI,IAAMC,EAAcH,EAAW,cACzBI,EAAYJ,EAAW,WACzBK,EACJ,GAAI,CACAA,EAAW,MAAMC,EAAoBP,CAAc,CACvD,MACU,CACN,MAAM,IAAID,EAAmB,iDAAiDH,CAAW,iCAAiCY,CAAe,GAAI,EAAK,CACtJ,CACAC,EAAiB,cAAeH,EAAS,WAAW,EACpDG,EAAiB,YAAaH,EAAS,SAAS,EAChD,GAAM,CAAE,YAAAI,EAAa,UAAAC,CAAU,EAAIL,EAC7BM,EAAgB,CAClB,MAAOF,EACP,WAAY,IAAI,KAAKC,CAAS,CAClC,EACA,GAAIC,EAAc,WAAW,QAAQ,EAAI,KAAK,IAAI,EAAI,IAClD,OAAOA,EAEX,IAAMC,EAAyBxB,EAAwB,IAAIW,CAAc,GAAK,EAC9E,GAAI,KAAK,IAAI,EAAIa,EAAyB,GAAK,IAC3C,OAAAC,EAAoBF,CAAa,EAC1BA,EAEXH,EAAiB,WAAYH,EAAS,SAAU,EAAI,EACpDG,EAAiB,eAAgBH,EAAS,aAAc,EAAI,EAC5DG,EAAiB,eAAgBH,EAAS,aAAc,EAAI,EAC5D,GAAI,CACAjB,EAAwB,IAAIW,EAAgB,KAAK,IAAI,CAAC,EACtD,IAAMe,EAAkB,MAAMC,EAAmBV,EAAUD,EAAWb,EAAMC,CAAkB,EAC9FgB,EAAiB,cAAeM,EAAgB,WAAW,EAC3DN,EAAiB,YAAaM,EAAgB,SAAS,EACvD,IAAME,EAAqB,IAAI,KAAK,KAAK,IAAI,EAAIF,EAAgB,UAAY,GAAI,EACjF,GAAI,CACA,MAAMG,EAAoBlB,EAAgB,CACtC,GAAGM,EACH,YAAaS,EAAgB,YAC7B,UAAWE,EAAmB,YAAY,EAC1C,aAAcF,EAAgB,YAClC,CAAC,CACL,MACc,CACd,CACA,MAAO,CACH,MAAOA,EAAgB,YACvB,WAAYE,CAChB,CACJ,MACc,CACV,OAAAH,EAAoBF,CAAa,EAC1BA,CACX,CACJ,EA5EuB,WCJvB,IAAMO,EAA+B,GACxBC,EAAwBC,EAAA,MAAO,CAAE,YAAAC,EAAa,WAAAC,EAAY,aAAAC,EAAc,UAAAC,EAAW,YAAAC,EAAa,UAAAC,EAAW,aAAAC,EAAc,mBAAAC,EAAoB,mBAAAC,EAAoB,QAAAC,EAAS,SAAAC,EAAU,eAAAC,EAAgB,YAAAC,EAAa,OAAAC,CAAQ,IAAM,CACxO,IAAIC,EACEC,EAAiB,gFACvB,GAAId,EACA,GAAI,CACA,IAAMe,EAAS,MAAMC,EAAoB,CACrC,QAAAR,EACA,SAAAC,EACA,eAAAC,EACA,YAAAC,EACA,aAAAN,EACA,mBAAAC,EACA,OAAAM,CACJ,CAAC,EAAE,CAAE,mBAAAL,CAAmB,CAAC,EACzBM,EAAQ,CACJ,YAAaE,EAAO,MACpB,UAAW,IAAI,KAAKA,EAAO,UAAU,EAAE,YAAY,CACvD,CACJ,OACOE,EAAG,CACN,MAAM,IAAIC,EAAyBD,EAAE,QAAS,CAC1C,YAAarB,EACb,OAAAgB,CACJ,CAAC,CACL,KAGA,IAAI,CACAC,EAAQ,MAAMM,EAAoBpB,CAAW,CACjD,MACU,CACN,MAAM,IAAImB,EAAyB,4DAA4DJ,CAAc,GAAI,CAC7G,YAAalB,EACb,OAAAgB,CACJ,CAAC,CACL,CAEJ,GAAI,IAAI,KAAKC,EAAM,SAAS,EAAE,QAAQ,EAAI,KAAK,IAAI,GAAK,EACpD,MAAM,IAAIK,EAAyB,6DAA6DJ,CAAc,GAAI,CAC9G,YAAalB,EACb,OAAAgB,CACJ,CAAC,EAEL,GAAM,CAAE,YAAAQ,CAAY,EAAIP,EAClB,CAAE,UAAAQ,EAAW,0BAAAC,CAA0B,EAAI,KAAM,QAAO,wBAAc,EACtEC,EAAMnB,GACR,IAAIiB,EAAU,OAAO,OAAO,CAAC,EAAGhB,GAAgB,CAAC,EAAG,CAChD,OAAQA,GAAc,QAAUE,GAAoB,QAAUD,GAAoB,OAClF,OAAQD,GAAc,QAAUH,EAChC,eAAgBG,GAAc,gBAAkBE,GAAoB,gBAAkBD,GAAoB,cAC9G,CAAC,CAAC,EACFkB,EACJ,GAAI,CACAA,EAAU,MAAMD,EAAI,KAAK,IAAID,EAA0B,CACnD,UAAWrB,EACX,SAAUE,EACV,YAAAiB,CACJ,CAAC,CAAC,CACN,OACOH,EAAG,CACN,MAAM,IAAIC,EAAyBD,EAAG,CAClC,YAAarB,EACb,OAAAgB,CACJ,CAAC,CACL,CACA,GAAM,CAAE,gBAAiB,CAAE,YAAAa,EAAa,gBAAAC,EAAiB,aAAAC,EAAc,WAAAC,EAAY,gBAAAC,EAAiB,UAAAC,CAAU,EAAI,CAAC,CAAG,EAAIN,EAC1H,GAAI,CAACC,GAAe,CAACC,GAAmB,CAACC,GAAgB,CAACC,EACtD,MAAM,IAAIV,EAAyB,+CAAgD,CAC/E,YAAatB,EACb,OAAAgB,CACJ,CAAC,EAEL,IAAMmB,EAAc,CAChB,YAAAN,EACA,gBAAAC,EACA,aAAAC,EACA,WAAY,IAAI,KAAKC,CAAU,EAC/B,GAAIC,GAAmB,CAAE,gBAAAA,CAAgB,EACzC,GAAIC,GAAa,CAAE,UAAAA,CAAU,CACjC,EACA,OAAI9B,EACAgC,EAAqBD,EAAa,kBAAmB,GAAG,EAGxDC,EAAqBD,EAAa,yBAA0B,GAAG,EAE5DA,CACX,EAvFqC,yBCH9B,IAAME,EAAqBC,EAAA,CAACC,EAASC,IAAW,CACnD,GAAM,CAAE,cAAAC,EAAe,eAAAC,EAAgB,WAAAC,EAAY,cAAAC,CAAc,EAAIL,EACrE,GAAI,CAACE,GAAiB,CAACC,GAAkB,CAACC,GAAc,CAACC,EACrD,MAAM,IAAIC,EAAyB,iJACwB,OAAO,KAAKN,CAAO,EAAE,KAAK,IAAI,CAAC;AAAA,oFAAwF,CAAE,YAAa,GAAO,OAAAC,CAAO,CAAC,EAEpN,OAAOD,CACX,EAPkC,sBCG3B,IAAMO,EAAUC,EAAA,CAACC,EAAO,CAAC,IAAM,MAAO,CAAE,mBAAAC,CAAmB,EAAI,CAAC,IAAM,CACzED,EAAK,QAAQ,MAAM,4CAA4C,EAC/D,GAAM,CAAE,YAAAE,EAAa,aAAAC,EAAc,UAAAC,EAAW,YAAAC,EAAa,WAAAC,CAAW,EAAIN,EACpE,CAAE,UAAAO,CAAU,EAAIP,EAChBQ,EAAcC,EAAe,CAC/B,QAAST,EAAK,SAAWC,GAAoB,OACjD,CAAC,EACD,GAAI,CAACC,GAAe,CAACC,GAAgB,CAACC,GAAa,CAACC,GAAe,CAACC,EAAY,CAE5E,IAAMI,GADW,MAAMC,EAAgBX,CAAI,GAClBQ,CAAW,EACpC,GAAI,CAACE,EACD,MAAM,IAAIE,EAAyB,WAAWJ,CAAW,kBAAmB,CAAE,OAAQR,EAAK,MAAO,CAAC,EAEvG,GAAI,CAACa,EAAaH,CAAO,EACrB,MAAM,IAAIE,EAAyB,WAAWJ,CAAW,2CAA4C,CACjG,OAAQR,EAAK,MACjB,CAAC,EAEL,GAAIU,GAAS,YAAa,CAEtB,IAAMI,GADc,MAAMC,EAAmBf,CAAI,GACrBU,EAAQ,WAAW,EACzCM,EAAc,8BAA8BR,CAAW,oBAAoBE,EAAQ,WAAW,GACpG,GAAIN,GAAaA,IAAcU,EAAQ,WACnC,MAAM,IAAIF,EAAyB,yBAA2BI,EAAa,CACvE,YAAa,GACb,OAAQhB,EAAK,MACjB,CAAC,EAEL,GAAIE,GAAeA,IAAgBY,EAAQ,cACvC,MAAM,IAAIF,EAAyB,4BAA8BI,EAAa,CAC1E,YAAa,GACb,OAAQhB,EAAK,MACjB,CAAC,EAELU,EAAQ,WAAaI,EAAQ,WAC7BJ,EAAQ,cAAgBI,EAAQ,aACpC,CACA,GAAM,CAAE,cAAAG,EAAe,eAAAC,EAAgB,WAAAC,EAAY,cAAAC,EAAe,YAAAC,CAAY,EAAIC,EAAmBZ,EAASV,EAAK,MAAM,EACzH,OAAOuB,EAAsB,CACzB,YAAaN,EACb,WAAYI,EACZ,aAAcH,EACd,UAAWC,EACX,YAAaC,EACb,UAAWb,EACX,aAAcP,EAAK,aACnB,mBAAoBA,EAAK,mBACzB,mBAAoBA,EAAK,mBACzB,QAASQ,EACT,SAAUR,EAAK,SACf,eAAgBA,EAAK,eACrB,YAAaA,EAAK,YAClB,OAAQA,EAAK,MACjB,CAAC,CACL,KACK,IAAI,CAACE,GAAe,CAACC,GAAgB,CAACC,GAAa,CAACC,EACrD,MAAM,IAAIO,EAAyB,+HAC8B,CAAE,YAAa,GAAO,OAAQZ,EAAK,MAAO,CAAC,EAG5G,OAAOuB,EAAsB,CACzB,YAAArB,EACA,WAAAI,EACA,aAAAH,EACA,UAAAC,EACA,YAAAC,EACA,UAAAE,EACA,aAAcP,EAAK,aACnB,mBAAoBA,EAAK,mBACzB,mBAAoBA,EAAK,mBACzB,QAASQ,EACT,SAAUR,EAAK,SACf,eAAgBA,EAAK,eACrB,YAAaA,EAAK,YAClB,OAAQA,EAAK,MACjB,CAAC,EAET,EA7EuB",
-  "names": ["isSsoProfile", "__name", "arg", "REFRESH_MESSAGE", "getSsoOidcClient", "__name", "ssoRegion", "init", "callerClientConfig", "SSOOIDCClient", "coalesce", "prop", "getNewSsoOidcToken", "__name", "ssoToken", "ssoRegion", "init", "callerClientConfig", "CreateTokenCommand", "getSsoOidcClient", "validateTokenExpiry", "__name", "token", "TokenProviderError", "REFRESH_MESSAGE", "validateTokenKey", "__name", "key", "value", "forRefresh", "TokenProviderError", "REFRESH_MESSAGE", "fsPromises", "writeFile", "fsPromises", "writeSSOTokenToFile", "__name", "id", "ssoToken", "tokenFilepath", "getSSOTokenFilepath", "tokenString", "lastRefreshAttemptTimes", "fromSso", "__name", "init", "callerClientConfig", "profiles", "parseKnownFiles", "profileName", "getProfileName", "profile", "TokenProviderError", "ssoSessionName", "ssoSession", "loadSsoSessionData", "ssoSessionRequiredKey", "ssoStartUrl", "ssoRegion", "ssoToken", "getSSOTokenFromFile", "REFRESH_MESSAGE", "validateTokenKey", "accessToken", "expiresAt", "existingToken", "lastRefreshAttemptTime", "validateTokenExpiry", "newSsoOidcToken", "getNewSsoOidcToken", "newTokenExpiration", "writeSSOTokenToFile", "SHOULD_FAIL_CREDENTIAL_CHAIN", "resolveSSOCredentials", "__name", "ssoStartUrl", "ssoSession", "ssoAccountId", "ssoRegion", "ssoRoleName", "ssoClient", "clientConfig", "parentClientConfig", "callerClientConfig", "profile", "filepath", "configFilepath", "ignoreCache", "logger", "token", "refreshMessage", "_token", "fromSso", "e", "CredentialsProviderError", "getSSOTokenFromFile", "accessToken", "SSOClient", "GetRoleCredentialsCommand", "sso", "ssoResp", "accessKeyId", "secretAccessKey", "sessionToken", "expiration", "credentialScope", "accountId", "credentials", "setCredentialFeature", "validateSsoProfile", "__name", "profile", "logger", "sso_start_url", "sso_account_id", "sso_region", "sso_role_name", "CredentialsProviderError", "fromSSO", "__name", "init", "callerClientConfig", "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName", "ssoSession", "ssoClient", "profileName", "getProfileName", "profile", "parseKnownFiles", "CredentialsProviderError", "isSsoProfile", "session", "loadSsoSessionData", "conflictMsg", "sso_start_url", "sso_account_id", "sso_region", "sso_role_name", "sso_session", "validateSsoProfile", "resolveSSOCredentials"]
-}

package/dist/monthlyRollup/event-streams-G2EZD32F.mjs

@@ -1,2 +0,0 @@
-/* CommonJS polyfills */import { fileURLToPath } from 'node:url';import { createRequire } from 'node:module';const __filename = fileURLToPath(import.meta.url);const __dirname = fileURLToPath(new URL('.', import.meta.url));const require = createRequire(import.meta.url);/* end of CommonJS polyfills */
-import{a as A}from"./chunk-LK4IXOEA.mjs";import{e as q,g as P,i as W,w as D,x as v}from"./chunk-MATUPZWL.mjs";import{b as B}from"./chunk-5JDAL5HL.mjs";import"./chunk-NX6AKUU3.mjs";import{a as i}from"./chunk-CFZ5JWD3.mjs";var x=class n{static{i(this,"Int64")}bytes;constructor(e){if(this.bytes=e,e.byteLength!==8)throw new Error("Int64 buffers must be exactly 8 bytes")}static fromNumber(e){if(e>9223372036854776e3||e<-9223372036854776e3)throw new Error(`${e} is too large (or, if negative, too small) to represent as an Int64`);let t=new Uint8Array(8);for(let r=7,s=Math.abs(Math.round(e));r>-1&&s>0;r--,s/=256)t[r]=s;return e<0&&J(t),new n(t)}valueOf(){let e=this.bytes.slice(0),t=e[0]&128;return t&&J(e),parseInt(v(e),16)*(t?-1:1)}toString(){return String(this.valueOf())}};function J(n){for(let e=0;e<8;e++)n[e]^=255;for(let e=7;e>-1&&(n[e]++,n[e]===0);e--);}i(J,"negate");var T=class{static{i(this,"HeaderMarshaller")}toUtf8;fromUtf8;constructor(e,t){this.toUtf8=e,this.fromUtf8=t}format(e){let t=[];for(let a in e){if(!B(e,a))continue;let o=this.fromUtf8(a);t.push(Uint8Array.from([o.byteLength]),o,this.formatHeaderValue(e[a]))}let r=new Uint8Array(t.reduce((a,o)=>a+o.byteLength,0)),s=0;for(let a of t)r.set(a,s),s+=a.byteLength;return r}formatHeaderValue(e){switch(e.type){case"boolean":return Uint8Array.from([e.value?0:1]);case"byte":return Uint8Array.from([2,e.value]);case"short":let t=new DataView(new ArrayBuffer(3));return t.setUint8(0,3),t.setInt16(1,e.value,!1),new Uint8Array(t.buffer);case"integer":let r=new DataView(new ArrayBuffer(5));return r.setUint8(0,4),r.setInt32(1,e.value,!1),new Uint8Array(r.buffer);case"long":let s=new Uint8Array(9);return s[0]=5,s.set(e.value.bytes,1),s;case"binary":let a=new DataView(new ArrayBuffer(3+e.value.byteLength));a.setUint8(0,6),a.setUint16(1,e.value.byteLength,!1);let o=new Uint8Array(a.buffer);return o.set(e.value,3),o;case"string":let c=this.fromUtf8(e.value),l=new DataView(new ArrayBuffer(3+c.byteLength));l.setUint8(0,7),l.setUint16(1,c.byteLength,!1);let y=new Uint8Array(l.buffer);return y.set(c,3),y;case"timestamp":let d=new Uint8Array(9);return d[0]=8,d.set(x.fromNumber(e.value.valueOf()).bytes,1),d;case"uuid":if(!ae.test(e.value))throw new Error(`Invalid UUID received: ${e.value}`);let h=new Uint8Array(17);return h[0]=9,h.set(D(e.value.replace(/-/g,"")),1),h}}parse(e){let t={},r=0;for(;r<e.byteLength;){let s=e.getUint8(r++),a=this.toUtf8(new Uint8Array(e.buffer,e.byteOffset+r,s));switch(r+=s,e.getUint8(r++)){case 0:t[a]={type:X,value:!0};break;case 1:t[a]={type:X,value:!1};break;case 2:t[a]={type:V,value:e.getInt8(r++)};break;case 3:t[a]={type:_,value:e.getInt16(r,!1)},r+=2;break;case 4:t[a]={type:Y,value:e.getInt32(r,!1)},r+=4;break;case 5:t[a]={type:ee,value:new x(new Uint8Array(e.buffer,e.byteOffset+r,8))},r+=8;break;case 6:let o=e.getUint16(r,!1);r+=2,t[a]={type:te,value:new Uint8Array(e.buffer,e.byteOffset+r,o)},r+=o;break;case 7:let c=e.getUint16(r,!1);r+=2,t[a]={type:re,value:this.toUtf8(new Uint8Array(e.buffer,e.byteOffset+r,c))},r+=c;break;case 8:t[a]={type:ne,value:new Date(new x(new Uint8Array(e.buffer,e.byteOffset+r,8)).valueOf())},r+=8;break;case 9:let l=new Uint8Array(e.buffer,e.byteOffset+r,16);r+=16,t[a]={type:se,value:`${v(l.subarray(0,4))}-${v(l.subarray(4,6))}-${v(l.subarray(6,8))}-${v(l.subarray(8,10))}-${v(l.subarray(10))}`};break;default:throw new Error("Unrecognized header type tag")}}return t}},Q;(function(n){n[n.boolTrue=0]="boolTrue",n[n.boolFalse=1]="boolFalse",n[n.byte=2]="byte",n[n.short=3]="short",n[n.integer=4]="integer",n[n.long=5]="long",n[n.byteArray=6]="byteArray",n[n.string=7]="string",n[n.timestamp=8]="timestamp",n[n.uuid=9]="uuid"})(Q||(Q={}));var X="boolean",V="byte",_="short",Y="integer",ee="long",te="binary",re="string",ne="timestamp",se="uuid",ae=/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;var Z=4,M=Z*2,I=4,oe=M+I*2;function H({byteLength:n,byteOffset:e,buffer:t}){if(n<oe)throw new Error("Provided message too short to accommodate event stream message overhead");let r=new DataView(t,e,n),s=r.getUint32(0,!1);if(n!==s)throw new Error("Reported message length does not match received message length");let a=r.getUint32(Z,!1),o=r.getUint32(M,!1),c=r.getUint32(n-I,!1),l=new A;if(l.update(new Uint8Array(t,e,M)),o!==l.digestSync())throw new Error(`The prelude checksum specified in the message (${o}) does not match the calculated CRC32 checksum (${l.digestSync()})`);if(l.update(new Uint8Array(t,e+M,n-(M+I))),c!==l.digestSync())throw new Error(`The message checksum (${l.digestSync()}) did not match the expected value of ${c}`);return{headers:new DataView(t,e+M+I,a),body:new Uint8Array(t,e+M+I+a,s-a-(M+I+I))}}i(H,"splitMessage");var z=class{static{i(this,"EventStreamCodec")}headerMarshaller;messageBuffer;isEndOfStream;constructor(e,t){this.headerMarshaller=new T(e,t),this.messageBuffer=[],this.isEndOfStream=!1}feed(e){this.messageBuffer.push(this.decode(e))}endOfStream(){this.isEndOfStream=!0}getMessage(){let e=this.messageBuffer.pop(),t=this.isEndOfStream;return{getMessage(){return e},isEndOfStream(){return t}}}getAvailableMessages(){let e=this.messageBuffer;this.messageBuffer=[];let t=this.isEndOfStream;return{getMessages(){return e},isEndOfStream(){return t}}}encode({headers:e,body:t}){let r=this.headerMarshaller.format(e),s=r.byteLength+t.byteLength+16,a=new Uint8Array(s),o=new DataView(a.buffer,a.byteOffset,a.byteLength),c=new A;return o.setUint32(0,s,!1),o.setUint32(4,r.byteLength,!1),c.update(a.subarray(0,8)),o.setUint32(8,c.digestSync(),!1),a.set(r,12),a.set(t,r.byteLength+12),c.update(a.subarray(8,s-4)),o.setUint32(s-4,c.digestSync(),!1),a}decode(e){let{headers:t,body:r}=H(e);return{headers:this.headerMarshaller.parse(t),body:r}}formatHeaders(e){return this.headerMarshaller.format(e)}};var O=class{static{i(this,"MessageDecoderStream")}options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(let e of this.options.inputStream)yield this.options.decoder.decode(e)}};var N=class{static{i(this,"MessageEncoderStream")}options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(let e of this.options.messageStream)yield this.options.encoder.encode(e);this.options.includeEndFrame&&(yield new Uint8Array(0))}};var $=class{static{i(this,"SmithyMessageDecoderStream")}options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(let e of this.options.messageStream){let t=await this.options.deserializer(e);t!==void 0&&(yield t)}}};var G=class{static{i(this,"SmithyMessageEncoderStream")}options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(let e of this.options.inputStream)yield this.options.serializer(e)}};import{Readable as le}from"node:stream";function R(n){let e=0,t=0,r=null,s=null,a=i(c=>{if(typeof c!="number")throw new Error("Attempted to allocate an event message where size was not a number: "+c);e=c,t=4,r=new Uint8Array(c),new DataView(r.buffer).setUint32(0,c,!1)},"allocateMessage"),o=i(async function*(){let c=n[Symbol.asyncIterator]();for(;;){let{value:l,done:y}=await c.next();if(y){if(e)if(e===t)yield r;else throw new Error("Truncated event message received.");else return;return}let d=l.length,h=0;for(;h<d;){if(!r){let u=d-h;s||(s=new Uint8Array(4));let m=Math.min(4-t,u);if(s.set(l.slice(h,h+m),t),t+=m,h+=m,t<4)break;a(new DataView(s.buffer).getUint32(0,!1)),s=null}let f=Math.min(e-t,d-h);r.set(l.slice(h,h+f),t),t+=f,h+=f,e&&e===t&&(yield r,r=null,e=0,t=0)}}},"iterator");return{[Symbol.asyncIterator]:o}}i(R,"getChunkedStream");function ie(n,e){let t=L(e.deserializer,e.toUtf8);return{[Symbol.asyncIterator]:async function*(){for await(let r of n){let s=e.eventStreamCodec.decode(r),a=await t(s);a!==void 0&&(yield a)}}}}i(ie,"getUnmarshalledStream");function L(n,e){return async function(t){let{value:r}=t.headers[":message-type"];if(r==="error"){let s=new Error(t.headers[":error-message"].value||"UnknownError");throw s.name=t.headers[":error-code"].value,s}else if(r==="exception"){let s=t.headers[":exception-type"].value,a={[s]:t},o=await n(a);if(o.$unknown){let c=new Error(e(t.body));throw c.name=s,c}throw o[s]}else if(r==="event"){let s={[t.headers[":event-type"].value]:t},a=await n(s);return a.$unknown?void 0:a}else throw Error(`Unrecognizable event type: ${t.headers[":event-type"].value}`)}}i(L,"getMessageUnmarshaller");var C=class{static{i(this,"EventStreamMarshaller")}eventStreamCodec;utfEncoder;constructor({utf8Encoder:e,utf8Decoder:t}){this.eventStreamCodec=new z(e,t),this.utfEncoder=e}deserialize(e,t){let r=R(e);return new $({messageStream:new O({inputStream:r,decoder:this.eventStreamCodec}),deserializer:L(t,this.utfEncoder)})}serialize(e,t){return new N({messageStream:new G({inputStream:e,serializer:t}),encoder:this.eventStreamCodec,includeEndFrame:!0})}},ce=i(n=>new C(n),"eventStreamSerdeProvider");var F=class{static{i(this,"EventStreamMarshaller")}universalMarshaller;constructor({utf8Encoder:e,utf8Decoder:t}){this.universalMarshaller=new C({utf8Decoder:t,utf8Encoder:e})}deserialize(e,t){let r=typeof e[Symbol.asyncIterator]=="function"?e:ue(e);return this.universalMarshaller.deserialize(r,t)}serialize(e,t){return le.from(this.universalMarshaller.serialize(e,t))}},fe=i(n=>new F(n),"eventStreamSerdeProvider");async function*ue(n){let e=!1,t=!1,r=new Array;for(n.on("error",s=>{if(e||(e=!0),s)throw s}),n.on("data",s=>{r.push(s)}),n.on("end",()=>{e=!0});!t;){let s=await new Promise(a=>setTimeout(()=>a(r.shift()),0));s&&(yield s),t=e&&r.length===0}}i(ue,"readableToIterable");var me=i(n=>({[Symbol.asyncIterator]:async function*(){let e=n.getReader();try{for(;;){let{done:t,value:r}=await e.read();if(t)return;yield r}}finally{e.releaseLock()}}}),"readableStreamToIterable"),ye=i(n=>{let e=n[Symbol.asyncIterator]();return new ReadableStream({async pull(t){let{done:r,value:s}=await e.next();if(r)return t.close();t.enqueue(s)}})},"iterableToReadableStream");var de=i(n=>Object.assign(n,{eventStreamMarshaller:n.eventStreamSerdeProvider(n)}),"resolveEventStreamSerdeConfig");var j=class{static{i(this,"EventStreamSerde")}marshaller;serializer;deserializer;serdeContext;defaultContentType;compositeErrorRegistry;constructor({marshaller:e,serializer:t,deserializer:r,serdeContext:s,defaultContentType:a,compositeErrorRegistry:o}){this.marshaller=e,this.serializer=t,this.deserializer=r,this.serdeContext=s,this.defaultContentType=a,this.compositeErrorRegistry=o}async serializeEventStream({eventStream:e,requestSchema:t,initialRequest:r,initialMessageType:s}){let a=this.marshaller,o=t.getEventStreamMember(),c=t.getMemberSchema(o),l=this.serializer,y=this.defaultContentType,d=Symbol("initialRequestMarker"),h={async*[Symbol.asyncIterator](){if(r){let f={":event-type":{type:"string",value:s??"initial-request"},":message-type":{type:"string",value:"event"},":content-type":{type:"string",value:y}};l.write(t,r);let u=l.flush();yield{[d]:!0,headers:f,body:u}}for await(let f of e)yield f}};return a.serialize(h,f=>{if(f[d])return{headers:f.headers,body:f.body};let u="";for(let b in f)if(B(f,b)&&b!=="__type"){u=b;break}let{additionalHeaders:m,body:S,eventType:g,explicitPayloadContentType:p}=this.writeEventBody(u,c,f);return{headers:{":event-type":{type:"string",value:g},":message-type":{type:"string",value:"event"},":content-type":{type:"string",value:p??y},...m},body:S}})}async deserializeEventStream({response:e,responseSchema:t,initialResponseContainer:r,initialMessageType:s}){let a=this.marshaller,o=t.getEventStreamMember(),l=t.getMemberSchema(o).getMemberSchemas(),y=Symbol("initialResponseMarker"),d=a.deserialize(e.body,async u=>{let m="";for(let g in u)if(B(u,g)&&g!=="__type"){m=g;break}let S=u[m].body;if(m===(s??"initial-response")){let g=await this.deserializer.read(t,S);return delete g[o],{[y]:!0,...g}}else if(m in l){let g=l[m];if(g.isStructSchema()){let p={},w=!1;for(let[b,k]of g.structIterator()){let{eventHeader:E,eventPayload:K}=k.getMergedTraits();if(w=w||!!(E||K),K)k.isBlobSchema()?p[b]=S:k.isStringSchema()?p[b]=(this.serdeContext?.utf8Encoder??W)(S):k.isStructSchema()&&(p[b]=await this.deserializer.read(k,S));else if(E){let U=u[m].headers[b]?.value;U!=null&&(k.isNumericSchema()?U&&typeof U=="object"&&"bytes"in U?p[b]=BigInt(U.toString()):p[b]=Number(U):p[b]=U)}}return{[m]:await this.readEventMember(g,S,w,p)}}return{[m]:await this.deserializer.read(g,S)}}else return{$unknown:u}}),h=d[Symbol.asyncIterator](),f=await h.next();if(f.done)return d;if(f.value?.[y]){if(!t)throw new Error("@smithy::core/protocols - initial-response event encountered in event stream but no response schema given.");for(let u in f.value)B(f.value,u)&&(r[u]=f.value[u])}return{async*[Symbol.asyncIterator](){for(f?.value?.[y]||(yield f.value);;){let{done:u,value:m}=await h.next();if(u)break;yield m}}}}async readEventMember(e,t,r,s){let a,o=e.getSchema();if(Array.isArray(o)&&o[0]===-3){let l=o[1],y=q.for(l);this.compositeErrorRegistry?.copyFrom(y),a=(this.compositeErrorRegistry??y)?.getErrorCtor(o)}let c=r?s:t.byteLength===0?{}:await this.deserializer.read(e,t);if(a){let l=c.message??c.Message??"Unknown",y={},d=e.getMergedTraits().error;return d&&(y.$fault=d),Object.assign(new a({}),y,{message:l},c)}return c}writeEventBody(e,t,r){let s=this.serializer,a=e,o=null,c,l=t.getSchema()[4].includes(e),y={};if(l){let f=t.getMemberSchema(e);if(f.isStructSchema()){for(let[u,m]of f.structIterator()){let{eventHeader:S,eventPayload:g}=m.getMergedTraits();if(g)o=u;else if(S){let p=r[e][u],w="binary";m.isNumericSchema()?(-2)**31<=p&&p<=2**31-1?w="integer":w="long":m.isTimestampSchema()?w="timestamp":m.isStringSchema()?w="string":m.isBooleanSchema()&&(w="boolean"),p!=null&&(y[u]={type:w,value:p},delete r[e][u])}}if(o!==null){let u=f.getMemberSchema(o);u.isBlobSchema()?c="application/octet-stream":u.isStringSchema()&&(c="text/plain"),s.write(u,r[e][o])}else s.write(f,r[e])}else if(f.isUnitSchema())s.write(f,{});else throw new Error("@smithy/core/event-streams - non-struct member not supported in event stream union.")}else{let[f,u]=r[e];a=f,s.write(15,u)}let d=s.flush()??new Uint8Array;return{body:typeof d=="string"?(this.serdeContext?.utf8Decoder??P)(d):d,eventType:a,explicitPayloadContentType:c,additionalHeaders:y}}};export{z as EventStreamCodec,F as EventStreamMarshaller,j as EventStreamSerde,T as HeaderMarshaller,x as Int64,O as MessageDecoderStream,N as MessageEncoderStream,$ as SmithyMessageDecoderStream,G as SmithyMessageEncoderStream,C as UniversalEventStreamMarshaller,fe as eventStreamSerdeProvider,R as getChunkedStream,L as getMessageUnmarshaller,ie as getUnmarshalledStream,ye as iterableToReadableStream,me as readableStreamToIterable,de as resolveEventStreamSerdeConfig,ce as universalEventStreamSerdeProvider};