@bkm016/basalt 0.1.6 → 0.1.8

package/{chunk-s6dejhfj.js → chunk-26cz8et8.js}

@@ -1,2 +1,2 @@
 // @bun
-import{Ko,Ue,it}from"./chunk-8wv5t0w6.js";import{Be}from"./chunk-ecf896fz.js";import{qe,ve,L}from"./chunk-q9dd6fhj.js";import{be,X,b,Se,J,Qe,H}from"./chunk-c7rcw9fb.js";import{r}from"./chunk-bwawt15q.js";var fe=r(function(Dt){var{SignatureV4:kt,signatureV4aContainer:de}=Ko(),O={CrtSignerV4:null},ge="X-Amz-S3session-Token".toLowerCase();class Z extends kt{async signWithCredentials(e,t,s){let o=pe(t);e.headers[ge]=t.sessionToken;let n=this;return he(n,o),n.signRequest(e,s??{})}async presignWithCredentials(e,t,s){let o=pe(t);return delete e.headers[ge],e.headers["X-Amz-S3session-Token"]=t.sessionToken,e.query=e.query??{},e.query["X-Amz-S3session-Token"]=t.sessionToken,he(this,o),this.presign(e,s)}}function pe(e){return{accessKeyId:e.accessKeyId,secretAccessKey:e.secretAccessKey,expiration:e.expiration}}function he(e,t){let s=e.credentialProvider;e.credentialProvider=()=>(e.credentialProvider=s,Promise.resolve(t))}class me{sigv4aSigner;sigv4Signer;signerOptions;static sigv4aDependency(){if(typeof O.CrtSignerV4==="function")return"crt";else if(typeof de.SignatureV4a==="function")return"js";return"none"}constructor(e){this.sigv4Signer=new Z(e),this.signerOptions=e}async sign(e,t={}){if(t.signingRegion==="*")return this.getSigv4aSigner().sign(e,t);return this.sigv4Signer.sign(e,t)}async signWithCredentials(e,t,s={}){if(s.signingRegion==="*"){let o=this.getSigv4aSigner(),n=O.CrtSignerV4;if(n&&o instanceof n)return o.signWithCredentials(e,t,s);else throw Error(`signWithCredentials with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt`)}return this.sigv4Signer.signWithCredentials(e,t,s)}async presign(e,t={}){if(t.signingRegion==="*"){let s=this.getSigv4aSigner(),o=O.CrtSignerV4;if(o&&s instanceof o)return s.presign(e,t);else throw Error(`presign with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt`)}return this.sigv4Signer.presign(e,t)}async presignWithCredentials(e,t,s={}){if(s.signingRegion==="*")throw Error("Method presignWithCredentials is not supported for [signingRegion=*].");return this.sigv4Signer.presignWithCredentials(e,t,s)}getSigv4aSigner(){if(!this.sigv4aSigner){let e=O.CrtSignerV4,t=de.SignatureV4a;if(this.signerOptions.runtime==="node"){if(!e&&!t)throw Error("Neither CRT nor JS SigV4a implementation is available. Please load either @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");if(e&&typeof e==="function")this.sigv4aSigner=new e({...this.signerOptions,signingAlgorithm:1});else if(t&&typeof t==="function")this.sigv4aSigner=new t({...this.signerOptions});else throw Error("Available SigV4a implementation is not a valid constructor. Please ensure you've properly imported @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a.For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt")}else{if(!t||typeof t!=="function")throw Error("JS SigV4a implementation is not available or not a valid constructor. Please check whether you have installed the @aws-sdk/signature-v4a package explicitly. The CRT implementation is not available for browsers. You must also register the package by calling [require('@aws-sdk/signature-v4a');] or an ESM equivalent such as [import '@aws-sdk/signature-v4a';]. For more information please go to https://github.com/aws/aws-sdk-js-v3#using-javascript-non-crt-implementation-of-sigv4a");this.sigv4aSigner=new t({...this.signerOptions})}}return this.sigv4aSigner}}Dt.SignatureV4MultiRegion=me;Dt.SignatureV4SignWithCredentials=Z;Dt.signatureV4CrtContainer=O});var{awsEndpointFunctions:Nt,emitWarningIfUnsupportedVersion:Wt,createDefaultUserAgentProvider:Ht,NODE_APP_ID_CONFIG_OPTIONS:Ut,getAwsRegionExtensionConfiguration:qt,resolveAwsRegionExtensionConfiguration:Ft,resolveUserAgentConfig:Vt,resolveHostHeaderConfig:Lt,getUserAgentPlugin:Kt,getHostHeaderPlugin:Mt,getLoggerPlugin:jt,getRecursionDetectionPlugin:zt,setCredentialFeature:se,stsRegionDefaultResolver:Gt}=L(),{NoAuthSigner:_e,getHttpAuthSchemeEndpointRuleSetPlugin:Yt,DefaultIdentityProviderConfig:Qt,getHttpSigningPlugin:Bt}=ve(),{normalizeProvider:xe,getSmithyContext:Te,ServiceException:Jt,NoOpLogger:Xt,emitWarningIfUnsupportedVersion:Zt,loadConfigsForDefaultMode:es,getDefaultExtensionConfiguration:ts,resolveDefaultRuntimeConfig:ss,Client:ke,makeBuilder:ns,createAggregatedClient:os}=X(),{Command:rs}=X();var io=rs,ao=ke;var{resolveDefaultsModeConfig:is,loadConfig:y,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:as,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:cs,NODE_REGION_CONFIG_OPTIONS:us,NODE_REGION_CONFIG_FILE_OPTIONS:ls,resolveRegionConfig:ds}=b(),{BinaryDecisionDiagram:gs,EndpointCache:ps,decideEndpoint:hs,customEndpointFunctions:ms,resolveParams:Ss,resolveEndpointConfig:vs,getEndpointPlugin:fs}=Se(),{parseUrl:Ps,getHttpHandlerExtensionConfiguration:ys,resolveHttpHandlerRuntimeConfig:Es,getContentLengthPlugin:As}=H(),{DEFAULT_RETRY_MODE:Is,NODE_RETRY_MODE_CONFIG_OPTIONS:ws,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:Rs,resolveRetryConfig:Cs,getRetryPlugin:_s}=qe(),{TypeRegistry:De,getSchemaSerdePlugin:xs}=be(),{resolveAwsSdkSigV4Config:Ts,resolveAwsSdkSigV4AConfig:ks,AwsSdkSigV4Signer:Oe,AwsSdkSigV4ASigner:$e,NODE_SIGV4A_CONFIG_OPTIONS:Ds,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:bs}=Ue(),{SignatureV4MultiRegion:Ne}=fe(),{toUtf8:Os,fromUtf8:$s,toBase64:Ns,fromBase64:Ws,calculateBodyLength:Hs}=J(),{streamCollector:Us,NodeHttpHandler:qs}=Be(),{AwsQueryProtocol:Fs}=it(),{Sha256:Vs}=Qe(),D="ref",I=-1,N=!0,Pe="isSet",We="PartitionResult",W="booleanEquals",l="stringEquals",ee="getAttr",ye="us-east-1",Ee="sigv4",Ae="sts",Ie="https://sts.{Region}.{PartitionResult#dnsSuffix}",we={[D]:"Endpoint"},d={[D]:"Region"},te={[D]:We},k={},Re=[d],Ce={conditions:[[Pe,[we]],[Pe,Re],["aws.partition",Re,We],[W,[{[D]:"UseFIPS"},N]],[W,[{[D]:"UseDualStack"},N]],[l,[d,"aws-global"]],[W,[{[D]:"UseGlobalEndpoint"},N]],[l,[d,"eu-central-1"]],[W,[{fn:ee,argv:[te,"supportsDualStack"]},N]],[W,[{fn:ee,argv:[te,"supportsFIPS"]},N]],[l,[d,"ap-south-1"]],[l,[d,"eu-north-1"]],[l,[d,"eu-west-1"]],[l,[d,"eu-west-2"]],[l,[d,"eu-west-3"]],[l,[d,"sa-east-1"]],[l,[d,ye]],[l,[d,"us-east-2"]],[l,[d,"us-west-2"]],[l,[d,"us-west-1"]],[l,[d,"ca-central-1"]],[l,[d,"ap-southeast-1"]],[l,[d,"ap-northeast-1"]],[l,[d,"ap-southeast-2"]],[l,[{fn:ee,argv:[te,"name"]},"aws-us-gov"]]],results:[[I],["https://sts.amazonaws.com",{authSchemes:[{name:Ee,signingName:Ae,signingRegion:ye}]}],[Ie,{authSchemes:[{name:Ee,signingName:Ae,signingRegion:"{Region}"}]}],[I,"Invalid Configuration: FIPS and custom endpoint are not supported"],[I,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[we,k],["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",k],[I,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://sts.{Region}.amazonaws.com",k],["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",k],[I,"FIPS is enabled but this partition does not support FIPS"],["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",k],[I,"DualStack is enabled but this partition does not support DualStack"],[Ie,k],[I,"Invalid Configuration: Missing Region"]]},Ls=2,i=1e8,Ks=new Int32Array([-1,1,-1,0,30,3,1,4,i+14,2,5,i+14,3,25,6,4,24,7,5,i+1,8,6,9,i+13,7,i+1,10,10,i+1,11,11,i+1,12,12,i+1,13,13,i+1,14,14,i+1,15,15,i+1,16,16,i+1,17,17,i+1,18,18,i+1,19,19,i+1,20,20,i+1,21,21,i+1,22,22,i+1,23,23,i+1,i+2,8,i+11,i+12,4,28,26,9,27,i+10,24,i+8,i+9,8,29,i+7,9,i+6,i+7,3,i+3,31,4,i+4,i+5]),Ms=gs.from(Ks,Ls,Ce.conditions,Ce.results),js=new ps({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),He=(e,t={})=>js.get(e,()=>hs(Ms,{endpointParams:e,logger:t.logger}));ms.aws=Nt;var zs=(e)=>async(t,s,o)=>{if(!o)throw Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");let n=await e(t,s,o),u=Te(s)?.commandInstance?.constructor?.getEndpointParameterInstructions;if(!u)throw Error(`getEndpointParameterInstructions() is not defined on '${s.commandName}'`);let a=await Ss(o,{getEndpointParameterInstructions:u},t);return Object.assign(n,a)},Gs=async(e,t,s)=>({operation:Te(t).operation,region:await xe(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),Ys=zs(Gs);function Fe(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,s)=>({signingProperties:{config:t,context:s}})}}function ne(e){return{schemeId:"aws.auth#sigv4a",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,s)=>({signingProperties:{config:t,context:s}})}}function Ve(e){return{schemeId:"smithy.api#noAuth"}}var Qs=(e,t,s)=>(n)=>{let a=e(n).properties?.authSchemes;if(!a)return t(n);let g=[];for(let S of a){let{name:p,properties:v={},...A}=S,f=p.toLowerCase();if(p!==f)console.warn(`HttpAuthScheme has been normalized with lowercasing: '${p}' to '${f}'`);let m;if(f==="sigv4a"){m="aws.auth#sigv4a";let Q=a.find((B)=>{let le=B.name.toLowerCase();return le!=="sigv4a"&&le.startsWith("sigv4")});if(Ne.sigv4aDependency()==="none"&&Q)continue}else if(f.startsWith("sigv4"))m="aws.auth#sigv4";else throw Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${f}'`);let T=s[m];if(!T)throw Error(`Could not find HttpAuthOption create function for '${m}'`);let P=T(n);P.schemeId=m,P.signingProperties={...P.signingProperties||{},...A,...v},g.push(P)}return g},Bs=(e)=>{let t=[];switch(e.operation){case"AssumeRoleWithWebIdentity":{t.push(Ve()),t.push(ne(e));break}default:t.push(Fe(e)),t.push(ne(e))}return t},Js=Qs(He,Bs,{"aws.auth#sigv4":Fe,"aws.auth#sigv4a":ne,"smithy.api#noAuth":Ve}),Xs=(e)=>{let t=Ts(e),s=ks(t);return Object.assign(s,{authSchemePreference:xe(e.authSchemePreference??[])})},Zs=(e)=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,useGlobalEndpoint:e.useGlobalEndpoint??!1,defaultSigningName:"sts"}),en={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},tn="3.997.47",sn={version:tn};class h extends Jt{static shapeId="smithy.ts.sdk.synthetic.com.amazonaws.sts#STSServiceException";constructor(e){super(e);Object.setPrototypeOf(this,h.prototype)}}class q extends h{static shapeId="com.amazonaws.sts#ExpiredTokenException";name="ExpiredTokenException";$fault="client";constructor(e){super({name:"ExpiredTokenException",$fault:"client",...e});Object.setPrototypeOf(this,q.prototype)}}class F extends h{static shapeId="com.amazonaws.sts#MalformedPolicyDocumentException";name="MalformedPolicyDocumentException";$fault="client";constructor(e){super({name:"MalformedPolicyDocumentException",$fault:"client",...e});Object.setPrototypeOf(this,F.prototype)}}class V extends h{static shapeId="com.amazonaws.sts#PackedPolicyTooLargeException";name="PackedPolicyTooLargeException";$fault="client";constructor(e){super({name:"PackedPolicyTooLargeException",$fault:"client",...e});Object.setPrototypeOf(this,V.prototype)}}class K extends h{static shapeId="com.amazonaws.sts#RegionDisabledException";name="RegionDisabledException";$fault="client";constructor(e){super({name:"RegionDisabledException",$fault:"client",...e});Object.setPrototypeOf(this,K.prototype)}}class M extends h{static shapeId="com.amazonaws.sts#IDPRejectedClaimException";name="IDPRejectedClaimException";$fault="client";constructor(e){super({name:"IDPRejectedClaimException",$fault:"client",...e});Object.setPrototypeOf(this,M.prototype)}}class j extends h{static shapeId="com.amazonaws.sts#InvalidIdentityTokenException";name="InvalidIdentityTokenException";$fault="client";constructor(e){super({name:"InvalidIdentityTokenException",$fault:"client",...e});Object.setPrototypeOf(this,j.prototype)}}class z extends h{static shapeId="com.amazonaws.sts#IDPCommunicationErrorException";name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor(e){super({name:"IDPCommunicationErrorException",$fault:"client",...e});Object.setPrototypeOf(this,z.prototype)}}var nn="Arn",on="AccessKeyId",rn="AssumeRole",an="AssumedRoleId",cn="AssumeRoleRequest",un="AssumeRoleResponse",oe="AssumedRoleUser",ln="AssumeRoleWithWebIdentity",dn="AssumeRoleWithWebIdentityRequest",gn="AssumeRoleWithWebIdentityResponse",pn="Audience",re="Credentials",hn="ContextAssertion",Le="DurationSeconds",mn="Expiration",Sn="ExternalId",vn="ExpiredTokenException",fn="IDPCommunicationErrorException",Pn="IDPRejectedClaimException",yn="InvalidIdentityTokenException",En="Key",An="MalformedPolicyDocumentException",Ke="MinimumSessionTokenSize",Me="Policy",je="PolicyArns",In="ProviderArn",wn="ProvidedContexts",Rn="ProvidedContextsListType",Cn="ProvidedContext",_n="PolicyDescriptorType",xn="ProviderId",ze="PackedPolicySize",Tn="PackedPolicyTooLargeException",kn="Provider",Ge="RoleArn",Dn="RegionDisabledException",Ye="RoleSessionName",bn="SecretAccessKey",On="SubjectFromWebIdentityToken",ie="SourceIdentity",$n="SerialNumber",Nn="SessionToken",Je="SessionTokenSize",Xe="SessionTokenUtilization",Wn="Tags",Hn="TokenCode",Un="TransitiveTagKeys",qn="Tag",Fn="Value",Vn="WebIdentityToken",Ln="arn",Kn="accessKeySecretType",w="awsQueryError",R="client",Mn="clientTokenType",C="error",_="httpError",x="message",jn="policyDescriptorListType",Ze="smithy.ts.sdk.synthetic.com.amazonaws.sts",zn="tagListType",c="com.amazonaws.sts",et=new De(Ze),tt=[-3,Ze,"STSServiceException",0,[],[]];et.registerError(tt,h);var E=new De(c),st=[-3,c,vn,{[w]:["ExpiredTokenException",400],[C]:R,[_]:400},[x],[0]];E.registerError(st,q);var nt=[-3,c,fn,{[w]:["IDPCommunicationError",400],[C]:R,[_]:400},[x],[0]];E.registerError(nt,z);var ot=[-3,c,Pn,{[w]:["IDPRejectedClaim",403],[C]:R,[_]:403},[x],[0]];E.registerError(ot,M);var rt=[-3,c,yn,{[w]:["InvalidIdentityToken",400],[C]:R,[_]:400},[x],[0]];E.registerError(rt,j);var at=[-3,c,An,{[w]:["MalformedPolicyDocument",400],[C]:R,[_]:400},[x],[0]];E.registerError(at,F);var ct=[-3,c,Tn,{[w]:["PackedPolicyTooLarge",400],[C]:R,[_]:400},[x],[0]];E.registerError(ct,V);var ut=[-3,c,Dn,{[w]:["RegionDisabledException",403],[C]:R,[_]:403},[x],[0]];E.registerError(ut,K);var lt=[et,E],Gn=[0,c,Kn,8,0],Yn=[0,c,Mn,8,0],ae=[3,c,oe,0,[an,nn],[0,0],2],dt=[3,c,cn,0,[Ge,Ye,je,Me,Le,Wn,Un,Sn,$n,Hn,ie,wn,Ke],[0,0,()=>ft,0,1,()=>Bn,64,0,0,0,0,()=>Qn,1],2],gt=[3,c,un,0,[re,oe,ze,ie,Xe,Je],[[()=>ce,0],()=>ae,1,0,1,1]],pt=[3,c,dn,0,[Ge,Ye,Vn,xn,je,Me,Le,Ke],[0,0,[()=>Yn,0],0,()=>ft,0,1,1],3],ht=[3,c,gn,0,[re,On,oe,ze,kn,pn,ie,Xe,Je],[[()=>ce,0],0,()=>ae,1,0,0,0,1,1]],ce=[3,c,re,0,[on,bn,Nn,mn],[0,[()=>Gn,0],0,4],4],mt=[3,c,_n,0,[Ln],[0]],St=[3,c,Cn,0,[In,hn],[0,0]],vt=[3,c,qn,0,[En,Fn],[0,0],2],ft=[1,c,jn,0,()=>mt],Qn=[1,c,Rn,0,()=>St],Bn=[1,c,zn,0,()=>vt],Pt=[9,c,rn,0,()=>dt,()=>gt],yt=[9,c,ln,0,()=>pt,()=>ht],Jn=(e)=>({apiVersion:"2011-06-15",base64Decoder:e?.base64Decoder??Ws,base64Encoder:e?.base64Encoder??Ns,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??He,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Js,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4"),signer:new Oe},{schemeId:"aws.auth#sigv4a",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4a"),signer:new $e},{schemeId:"smithy.api#noAuth",identityProvider:(t)=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new _e}],logger:e?.logger??new Xt,protocol:e?.protocol??Fs,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:lt,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:e?.serviceId??"STS",sha256:e?.sha256??Vs,signerConstructor:e?.signerConstructor??Ne,urlParser:e?.urlParser??Ps,utf8Decoder:e?.utf8Decoder??$s,utf8Encoder:e?.utf8Encoder??Os}),Xn=(e)=>{Zt(process.version);let t=is(e),s=()=>t().then(es),o=Jn(e);Wt(process.version);let n={profile:e?.profile,logger:o.logger};return{...o,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??y(bs,n),bodyLengthChecker:e?.bodyLengthChecker??Hs,defaultUserAgentProvider:e?.defaultUserAgentProvider??Ht({serviceId:o.serviceId,clientVersion:sn.version}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(u)=>u.getIdentityProvider("aws.auth#sigv4")||(async(a)=>await e.credentialDefaultProvider(a?.__config||{})()),signer:new Oe},{schemeId:"aws.auth#sigv4a",identityProvider:(u)=>u.getIdentityProvider("aws.auth#sigv4a"),signer:new $e},{schemeId:"smithy.api#noAuth",identityProvider:(u)=>u.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new _e}],maxAttempts:e?.maxAttempts??y(Rs,e),region:e?.region??y(us,{...ls,...n}),requestHandler:qs.create(e?.requestHandler??s),retryMode:e?.retryMode??y({...ws,default:async()=>(await s()).retryMode||Is},e),sigv4aSigningRegionSet:e?.sigv4aSigningRegionSet??y(Ds,n),streamCollector:e?.streamCollector??Us,useDualstackEndpoint:e?.useDualstackEndpoint??y(cs,n),useFipsEndpoint:e?.useFipsEndpoint??y(as,n),userAgentAppId:e?.userAgentAppId??y(Ut,n)}},Zn=(e)=>{let{httpAuthSchemes:t,httpAuthSchemeProvider:s,credentials:o}=e;return{setHttpAuthScheme(n){let u=t.findIndex((a)=>a.schemeId===n.schemeId);if(u===-1)t.push(n);else t.splice(u,1,n)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(n){s=n},httpAuthSchemeProvider(){return s},setCredentials(n){o=n},credentials(){return o}}},eo=(e)=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}),to=(e,t)=>{let s=Object.assign(qt(e),ts(e),ys(e),Zn(e));return t.forEach((o)=>o.configure(s)),Object.assign(e,Ft(s),ss(s),Es(s),eo(s))};class U extends ke{config;constructor(...[e]){let t=Xn(e||{});super(t);this.initConfig=t;let s=Zs(t),o=Vt(s),n=Cs(o),u=ds(n),a=Lt(u),g=vs(a),S=Xs(g),p=to(S,e?.extensions||[]);this.config=p,this.middlewareStack.use(xs(this.config)),this.middlewareStack.use(Kt(this.config)),this.middlewareStack.use(_s(this.config)),this.middlewareStack.use(As(this.config)),this.middlewareStack.use(Mt(this.config)),this.middlewareStack.use(jt(this.config)),this.middlewareStack.use(zt(this.config)),this.middlewareStack.use(Yt(this.config,{httpAuthSchemeParametersProvider:Ys,identityProviderConfigProvider:async(v)=>new Qt({"aws.auth#sigv4":v.credentials,"aws.auth#sigv4a":v.credentials})})),this.middlewareStack.use(Bt(this.config))}destroy(){super.destroy()}}var Et=ns(en,"AWSSecurityTokenServiceV20110615","STSClient",fs),At={},It=(e,t,s,o)=>[];class G extends Et(At,It,"AssumeRole",Pt){}class Y extends Et(At,It,"AssumeRoleWithWebIdentity",yt){}var so={AssumeRoleCommand:G,AssumeRoleWithWebIdentityCommand:Y};class ue extends U{}os(so,ue);var wt=(e)=>{if(typeof e?.Arn==="string"){let t=e.Arn.split(":");if(t.length>4&&t[4]!=="")return t[4]}return},Rt=async(e,t,s,o={})=>{let n=typeof e==="function"?await e():e,u=typeof t==="function"?await t():t,a="",g=n??u??(a=await Gt(o)());return s?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${n} (credential provider clientConfig)`,`${u} (contextual client)`,`${a} (STS default: AWS_REGION, profile region, or us-east-1)`),g},no=(e,t)=>{let s,o;return async(n,u)=>{if(o=n,!s){let{logger:v=e?.parentClientConfig?.logger,profile:A=e?.parentClientConfig?.profile,region:f,requestHandler:m=e?.parentClientConfig?.requestHandler,credentialProviderLogger:T,userAgentAppId:P=e?.parentClientConfig?.userAgentAppId}=e,Q=await Rt(f,e?.parentClientConfig?.region,T,{logger:v,profile:A}),B=!Ct(m);s=new t({...e,userAgentAppId:P,profile:A,credentialDefaultProvider:()=>async()=>o,region:Q,requestHandler:B?m:void 0,logger:v})}let{Credentials:a,AssumedRoleUser:g}=await s.send(new G(u));if(!a||!a.AccessKeyId||!a.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${u.RoleArn}`);let S=wt(g),p={accessKeyId:a.AccessKeyId,secretAccessKey:a.SecretAccessKey,sessionToken:a.SessionToken,expiration:a.Expiration,...a.CredentialScope&&{credentialScope:a.CredentialScope},...S&&{accountId:S}};return se(p,"CREDENTIALS_STS_ASSUME_ROLE","i"),p}},oo=(e,t)=>{let s;return async(o)=>{if(!s){let{logger:S=e?.parentClientConfig?.logger,profile:p=e?.parentClientConfig?.profile,region:v,requestHandler:A=e?.parentClientConfig?.requestHandler,credentialProviderLogger:f,userAgentAppId:m=e?.parentClientConfig?.userAgentAppId}=e,T=await Rt(v,e?.parentClientConfig?.region,f,{logger:S,profile:p}),P=!Ct(A);s=new t({...e,userAgentAppId:m,profile:p,region:T,requestHandler:P?A:void 0,logger:S})}let{Credentials:n,AssumedRoleUser:u}=await s.send(new Y(o));if(!n||!n.AccessKeyId||!n.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${o.RoleArn}`);let a=wt(u),g={accessKeyId:n.AccessKeyId,secretAccessKey:n.SecretAccessKey,sessionToken:n.SessionToken,expiration:n.Expiration,...n.CredentialScope&&{credentialScope:n.CredentialScope},...a&&{accountId:a}};if(a)se(g,"RESOLVED_ACCOUNT_ID","T");return se(g,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),g}},Ct=(e)=>e?.metadata?.handlerProtocol==="h2",_t=(e,t)=>{if(!t)return e;else return class extends e{constructor(o){super(o);for(let n of t)this.middlewareStack.use(n)}}},xt=(e={},t)=>no(e,_t(U,t)),Tt=(e={},t)=>oo(e,_t(U,t)),ro=(e)=>(t)=>e({roleAssumer:xt(t),roleAssumerWithWebIdentity:Tt(t),...t});var co=Pt,uo=G,lo=dt,go=gt,po=yt,ho=Y,mo=pt,So=ht,vo=ae,fo=ce,Po=q,yo=st,Eo=z,Ao=nt,Io=M,wo=ot,Ro=j,Co=rt,_o=F,xo=at,To=V,ko=ct,Do=mt,bo=St,Oo=K,$o=ut,No=ue,Wo=U,Ho=h,Uo=tt,qo=vt,Fo=ro,Vo=lt,Lo=xt,Mo=Tt;export{io as $Command,ao as __Client,co as AssumeRole$,uo as AssumeRoleCommand,lo as AssumeRoleRequest$,go as AssumeRoleResponse$,po as AssumeRoleWithWebIdentity$,ho as AssumeRoleWithWebIdentityCommand,mo as AssumeRoleWithWebIdentityRequest$,So as AssumeRoleWithWebIdentityResponse$,vo as AssumedRoleUser$,fo as Credentials$,Po as ExpiredTokenException,yo as ExpiredTokenException$,Eo as IDPCommunicationErrorException,Ao as IDPCommunicationErrorException$,Io as IDPRejectedClaimException,wo as IDPRejectedClaimException$,Ro as InvalidIdentityTokenException,Co as InvalidIdentityTokenException$,_o as MalformedPolicyDocumentException,xo as MalformedPolicyDocumentException$,To as PackedPolicyTooLargeException,ko as PackedPolicyTooLargeException$,Do as PolicyDescriptorType$,bo as ProvidedContext$,Oo as RegionDisabledException,$o as RegionDisabledException$,No as STS,Wo as STSClient,Ho as STSServiceException,Uo as STSServiceException$,qo as Tag$,Fo as decorateDefaultCredentialProvider,Vo as errorTypeRegistries,Lo as getDefaultRoleAssumer,Mo as getDefaultRoleAssumerWithWebIdentity};
+import{Xo,Be,it}from"./chunk-rnt1ckk9.js";import{Fe}from"./chunk-fpxc6qjr.js";import{qe,_e,L}from"./chunk-g3ed130w.js";import{Se,X,b,we,J,Qe,H}from"./chunk-adys4qq4.js";import{r}from"./chunk-bwawt15q.js";var ve=r(function(Dt){var{SignatureV4:kt,signatureV4aContainer:de}=Xo(),O={CrtSignerV4:null},ge="X-Amz-S3session-Token".toLowerCase();class Z extends kt{async signWithCredentials(e,t,s){let o=pe(t);e.headers[ge]=t.sessionToken;let n=this;return he(n,o),n.signRequest(e,s??{})}async presignWithCredentials(e,t,s){let o=pe(t);return delete e.headers[ge],e.headers["X-Amz-S3session-Token"]=t.sessionToken,e.query=e.query??{},e.query["X-Amz-S3session-Token"]=t.sessionToken,he(this,o),this.presign(e,s)}}function pe(e){return{accessKeyId:e.accessKeyId,secretAccessKey:e.secretAccessKey,expiration:e.expiration}}function he(e,t){let s=e.credentialProvider;e.credentialProvider=()=>(e.credentialProvider=s,Promise.resolve(t))}class me{sigv4aSigner;sigv4Signer;signerOptions;static sigv4aDependency(){if(typeof O.CrtSignerV4==="function")return"crt";else if(typeof de.SignatureV4a==="function")return"js";return"none"}constructor(e){this.sigv4Signer=new Z(e),this.signerOptions=e}async sign(e,t={}){if(t.signingRegion==="*")return this.getSigv4aSigner().sign(e,t);return this.sigv4Signer.sign(e,t)}async signWithCredentials(e,t,s={}){if(s.signingRegion==="*"){let o=this.getSigv4aSigner(),n=O.CrtSignerV4;if(n&&o instanceof n)return o.signWithCredentials(e,t,s);else throw Error(`signWithCredentials with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt`)}return this.sigv4Signer.signWithCredentials(e,t,s)}async presign(e,t={}){if(t.signingRegion==="*"){let s=this.getSigv4aSigner(),o=O.CrtSignerV4;if(o&&s instanceof o)return s.presign(e,t);else throw Error(`presign with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt`)}return this.sigv4Signer.presign(e,t)}async presignWithCredentials(e,t,s={}){if(s.signingRegion==="*")throw Error("Method presignWithCredentials is not supported for [signingRegion=*].");return this.sigv4Signer.presignWithCredentials(e,t,s)}getSigv4aSigner(){if(!this.sigv4aSigner){let e=O.CrtSignerV4,t=de.SignatureV4a;if(this.signerOptions.runtime==="node"){if(!e&&!t)throw Error("Neither CRT nor JS SigV4a implementation is available. Please load either @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");if(e&&typeof e==="function")this.sigv4aSigner=new e({...this.signerOptions,signingAlgorithm:1});else if(t&&typeof t==="function")this.sigv4aSigner=new t({...this.signerOptions});else throw Error("Available SigV4a implementation is not a valid constructor. Please ensure you've properly imported @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a.For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt")}else{if(!t||typeof t!=="function")throw Error("JS SigV4a implementation is not available or not a valid constructor. Please check whether you have installed the @aws-sdk/signature-v4a package explicitly. The CRT implementation is not available for browsers. You must also register the package by calling [require('@aws-sdk/signature-v4a');] or an ESM equivalent such as [import '@aws-sdk/signature-v4a';]. For more information please go to https://github.com/aws/aws-sdk-js-v3#using-javascript-non-crt-implementation-of-sigv4a");this.sigv4aSigner=new t({...this.signerOptions})}}return this.sigv4aSigner}}Dt.SignatureV4MultiRegion=me;Dt.SignatureV4SignWithCredentials=Z;Dt.signatureV4CrtContainer=O});var{awsEndpointFunctions:Nt,emitWarningIfUnsupportedVersion:Wt,createDefaultUserAgentProvider:Ht,NODE_APP_ID_CONFIG_OPTIONS:Ut,getAwsRegionExtensionConfiguration:qt,resolveAwsRegionExtensionConfiguration:Ft,resolveUserAgentConfig:Vt,resolveHostHeaderConfig:Lt,getUserAgentPlugin:Kt,getHostHeaderPlugin:Mt,getLoggerPlugin:jt,getRecursionDetectionPlugin:zt,setCredentialFeature:se,stsRegionDefaultResolver:Gt}=L(),{NoAuthSigner:xe,getHttpAuthSchemeEndpointRuleSetPlugin:Yt,DefaultIdentityProviderConfig:Qt,getHttpSigningPlugin:Bt}=_e(),{normalizeProvider:Te,getSmithyContext:ke,ServiceException:Jt,NoOpLogger:Xt,emitWarningIfUnsupportedVersion:Zt,loadConfigsForDefaultMode:es,getDefaultExtensionConfiguration:ts,resolveDefaultRuntimeConfig:ss,Client:De,makeBuilder:ns,createAggregatedClient:os}=X(),{Command:rs}=X();var io=rs,ao=De;var{resolveDefaultsModeConfig:is,loadConfig:y,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:as,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:cs,NODE_REGION_CONFIG_OPTIONS:us,NODE_REGION_CONFIG_FILE_OPTIONS:ls,resolveRegionConfig:ds}=b(),{BinaryDecisionDiagram:gs,EndpointCache:ps,decideEndpoint:hs,customEndpointFunctions:ms,resolveParams:Ss,resolveEndpointConfig:vs,getEndpointPlugin:fs}=we(),{parseUrl:Ps,getHttpHandlerExtensionConfiguration:ys,resolveHttpHandlerRuntimeConfig:Es,getContentLengthPlugin:As}=H(),{DEFAULT_RETRY_MODE:Is,NODE_RETRY_MODE_CONFIG_OPTIONS:ws,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:Rs,resolveRetryConfig:Cs,getRetryPlugin:_s}=qe(),{TypeRegistry:be,getSchemaSerdePlugin:xs}=Se(),{resolveAwsSdkSigV4Config:Ts,resolveAwsSdkSigV4AConfig:ks,AwsSdkSigV4Signer:Oe,AwsSdkSigV4ASigner:$e,NODE_SIGV4A_CONFIG_OPTIONS:Ds,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:bs}=Be(),{SignatureV4MultiRegion:Ne}=ve(),{toUtf8:Os,fromUtf8:$s,toBase64:Ns,fromBase64:Ws,calculateBodyLength:Hs}=J(),{streamCollector:Us,NodeHttpHandler:qs}=Fe(),{AwsQueryProtocol:Fs}=it(),{Sha256:Vs}=Qe(),D="ref",I=-1,N=!0,fe="isSet",We="PartitionResult",W="booleanEquals",l="stringEquals",ee="getAttr",Pe="us-east-1",ye="sigv4",Ee="sts",Ae="https://sts.{Region}.{PartitionResult#dnsSuffix}",Ie={[D]:"Endpoint"},d={[D]:"Region"},te={[D]:We},k={},Re=[d],Ce={conditions:[[fe,[Ie]],[fe,Re],["aws.partition",Re,We],[W,[{[D]:"UseFIPS"},N]],[W,[{[D]:"UseDualStack"},N]],[l,[d,"aws-global"]],[W,[{[D]:"UseGlobalEndpoint"},N]],[l,[d,"eu-central-1"]],[W,[{fn:ee,argv:[te,"supportsDualStack"]},N]],[W,[{fn:ee,argv:[te,"supportsFIPS"]},N]],[l,[d,"ap-south-1"]],[l,[d,"eu-north-1"]],[l,[d,"eu-west-1"]],[l,[d,"eu-west-2"]],[l,[d,"eu-west-3"]],[l,[d,"sa-east-1"]],[l,[d,Pe]],[l,[d,"us-east-2"]],[l,[d,"us-west-2"]],[l,[d,"us-west-1"]],[l,[d,"ca-central-1"]],[l,[d,"ap-southeast-1"]],[l,[d,"ap-northeast-1"]],[l,[d,"ap-southeast-2"]],[l,[{fn:ee,argv:[te,"name"]},"aws-us-gov"]]],results:[[I],["https://sts.amazonaws.com",{authSchemes:[{name:ye,signingName:Ee,signingRegion:Pe}]}],[Ae,{authSchemes:[{name:ye,signingName:Ee,signingRegion:"{Region}"}]}],[I,"Invalid Configuration: FIPS and custom endpoint are not supported"],[I,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[Ie,k],["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",k],[I,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://sts.{Region}.amazonaws.com",k],["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",k],[I,"FIPS is enabled but this partition does not support FIPS"],["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",k],[I,"DualStack is enabled but this partition does not support DualStack"],[Ae,k],[I,"Invalid Configuration: Missing Region"]]},Ls=2,i=1e8,Ks=new Int32Array([-1,1,-1,0,30,3,1,4,i+14,2,5,i+14,3,25,6,4,24,7,5,i+1,8,6,9,i+13,7,i+1,10,10,i+1,11,11,i+1,12,12,i+1,13,13,i+1,14,14,i+1,15,15,i+1,16,16,i+1,17,17,i+1,18,18,i+1,19,19,i+1,20,20,i+1,21,21,i+1,22,22,i+1,23,23,i+1,i+2,8,i+11,i+12,4,28,26,9,27,i+10,24,i+8,i+9,8,29,i+7,9,i+6,i+7,3,i+3,31,4,i+4,i+5]),Ms=gs.from(Ks,Ls,Ce.conditions,Ce.results),js=new ps({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),He=(e,t={})=>js.get(e,()=>hs(Ms,{endpointParams:e,logger:t.logger}));ms.aws=Nt;var zs=(e)=>async(t,s,o)=>{if(!o)throw Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");let n=await e(t,s,o),u=ke(s)?.commandInstance?.constructor?.getEndpointParameterInstructions;if(!u)throw Error(`getEndpointParameterInstructions() is not defined on '${s.commandName}'`);let a=await Ss(o,{getEndpointParameterInstructions:u},t);return Object.assign(n,a)},Gs=async(e,t,s)=>({operation:ke(t).operation,region:await Te(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),Ys=zs(Gs);function Ue(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,s)=>({signingProperties:{config:t,context:s}})}}function ne(e){return{schemeId:"aws.auth#sigv4a",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,s)=>({signingProperties:{config:t,context:s}})}}function Ve(e){return{schemeId:"smithy.api#noAuth"}}var Qs=(e,t,s)=>(n)=>{let a=e(n).properties?.authSchemes;if(!a)return t(n);let g=[];for(let S of a){let{name:p,properties:v={},...A}=S,f=p.toLowerCase();if(p!==f)console.warn(`HttpAuthScheme has been normalized with lowercasing: '${p}' to '${f}'`);let m;if(f==="sigv4a"){m="aws.auth#sigv4a";let Q=a.find((B)=>{let le=B.name.toLowerCase();return le!=="sigv4a"&&le.startsWith("sigv4")});if(Ne.sigv4aDependency()==="none"&&Q)continue}else if(f.startsWith("sigv4"))m="aws.auth#sigv4";else throw Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${f}'`);let T=s[m];if(!T)throw Error(`Could not find HttpAuthOption create function for '${m}'`);let P=T(n);P.schemeId=m,P.signingProperties={...P.signingProperties||{},...A,...v},g.push(P)}return g},Bs=(e)=>{let t=[];switch(e.operation){case"AssumeRoleWithWebIdentity":{t.push(Ve()),t.push(ne(e));break}default:t.push(Ue(e)),t.push(ne(e))}return t},Js=Qs(He,Bs,{"aws.auth#sigv4":Ue,"aws.auth#sigv4a":ne,"smithy.api#noAuth":Ve}),Xs=(e)=>{let t=Ts(e),s=ks(t);return Object.assign(s,{authSchemePreference:Te(e.authSchemePreference??[])})},Zs=(e)=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,useGlobalEndpoint:e.useGlobalEndpoint??!1,defaultSigningName:"sts"}),en={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},tn="3.997.47",sn={version:tn};class h extends Jt{static shapeId="smithy.ts.sdk.synthetic.com.amazonaws.sts#STSServiceException";constructor(e){super(e);Object.setPrototypeOf(this,h.prototype)}}class q extends h{static shapeId="com.amazonaws.sts#ExpiredTokenException";name="ExpiredTokenException";$fault="client";constructor(e){super({name:"ExpiredTokenException",$fault:"client",...e});Object.setPrototypeOf(this,q.prototype)}}class F extends h{static shapeId="com.amazonaws.sts#MalformedPolicyDocumentException";name="MalformedPolicyDocumentException";$fault="client";constructor(e){super({name:"MalformedPolicyDocumentException",$fault:"client",...e});Object.setPrototypeOf(this,F.prototype)}}class V extends h{static shapeId="com.amazonaws.sts#PackedPolicyTooLargeException";name="PackedPolicyTooLargeException";$fault="client";constructor(e){super({name:"PackedPolicyTooLargeException",$fault:"client",...e});Object.setPrototypeOf(this,V.prototype)}}class K extends h{static shapeId="com.amazonaws.sts#RegionDisabledException";name="RegionDisabledException";$fault="client";constructor(e){super({name:"RegionDisabledException",$fault:"client",...e});Object.setPrototypeOf(this,K.prototype)}}class M extends h{static shapeId="com.amazonaws.sts#IDPRejectedClaimException";name="IDPRejectedClaimException";$fault="client";constructor(e){super({name:"IDPRejectedClaimException",$fault:"client",...e});Object.setPrototypeOf(this,M.prototype)}}class j extends h{static shapeId="com.amazonaws.sts#InvalidIdentityTokenException";name="InvalidIdentityTokenException";$fault="client";constructor(e){super({name:"InvalidIdentityTokenException",$fault:"client",...e});Object.setPrototypeOf(this,j.prototype)}}class z extends h{static shapeId="com.amazonaws.sts#IDPCommunicationErrorException";name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor(e){super({name:"IDPCommunicationErrorException",$fault:"client",...e});Object.setPrototypeOf(this,z.prototype)}}var nn="Arn",on="AccessKeyId",rn="AssumeRole",an="AssumedRoleId",cn="AssumeRoleRequest",un="AssumeRoleResponse",oe="AssumedRoleUser",ln="AssumeRoleWithWebIdentity",dn="AssumeRoleWithWebIdentityRequest",gn="AssumeRoleWithWebIdentityResponse",pn="Audience",re="Credentials",hn="ContextAssertion",Le="DurationSeconds",mn="Expiration",Sn="ExternalId",vn="ExpiredTokenException",fn="IDPCommunicationErrorException",Pn="IDPRejectedClaimException",yn="InvalidIdentityTokenException",En="Key",An="MalformedPolicyDocumentException",Ke="MinimumSessionTokenSize",Me="Policy",je="PolicyArns",In="ProviderArn",wn="ProvidedContexts",Rn="ProvidedContextsListType",Cn="ProvidedContext",_n="PolicyDescriptorType",xn="ProviderId",ze="PackedPolicySize",Tn="PackedPolicyTooLargeException",kn="Provider",Ge="RoleArn",Dn="RegionDisabledException",Ye="RoleSessionName",bn="SecretAccessKey",On="SubjectFromWebIdentityToken",ie="SourceIdentity",$n="SerialNumber",Nn="SessionToken",Je="SessionTokenSize",Xe="SessionTokenUtilization",Wn="Tags",Hn="TokenCode",Un="TransitiveTagKeys",qn="Tag",Fn="Value",Vn="WebIdentityToken",Ln="arn",Kn="accessKeySecretType",w="awsQueryError",R="client",Mn="clientTokenType",C="error",_="httpError",x="message",jn="policyDescriptorListType",Ze="smithy.ts.sdk.synthetic.com.amazonaws.sts",zn="tagListType",c="com.amazonaws.sts",et=new be(Ze),tt=[-3,Ze,"STSServiceException",0,[],[]];et.registerError(tt,h);var E=new be(c),st=[-3,c,vn,{[w]:["ExpiredTokenException",400],[C]:R,[_]:400},[x],[0]];E.registerError(st,q);var nt=[-3,c,fn,{[w]:["IDPCommunicationError",400],[C]:R,[_]:400},[x],[0]];E.registerError(nt,z);var ot=[-3,c,Pn,{[w]:["IDPRejectedClaim",403],[C]:R,[_]:403},[x],[0]];E.registerError(ot,M);var rt=[-3,c,yn,{[w]:["InvalidIdentityToken",400],[C]:R,[_]:400},[x],[0]];E.registerError(rt,j);var at=[-3,c,An,{[w]:["MalformedPolicyDocument",400],[C]:R,[_]:400},[x],[0]];E.registerError(at,F);var ct=[-3,c,Tn,{[w]:["PackedPolicyTooLarge",400],[C]:R,[_]:400},[x],[0]];E.registerError(ct,V);var ut=[-3,c,Dn,{[w]:["RegionDisabledException",403],[C]:R,[_]:403},[x],[0]];E.registerError(ut,K);var lt=[et,E],Gn=[0,c,Kn,8,0],Yn=[0,c,Mn,8,0],ae=[3,c,oe,0,[an,nn],[0,0],2],dt=[3,c,cn,0,[Ge,Ye,je,Me,Le,Wn,Un,Sn,$n,Hn,ie,wn,Ke],[0,0,()=>ft,0,1,()=>Bn,64,0,0,0,0,()=>Qn,1],2],gt=[3,c,un,0,[re,oe,ze,ie,Xe,Je],[[()=>ce,0],()=>ae,1,0,1,1]],pt=[3,c,dn,0,[Ge,Ye,Vn,xn,je,Me,Le,Ke],[0,0,[()=>Yn,0],0,()=>ft,0,1,1],3],ht=[3,c,gn,0,[re,On,oe,ze,kn,pn,ie,Xe,Je],[[()=>ce,0],0,()=>ae,1,0,0,0,1,1]],ce=[3,c,re,0,[on,bn,Nn,mn],[0,[()=>Gn,0],0,4],4],mt=[3,c,_n,0,[Ln],[0]],St=[3,c,Cn,0,[In,hn],[0,0]],vt=[3,c,qn,0,[En,Fn],[0,0],2],ft=[1,c,jn,0,()=>mt],Qn=[1,c,Rn,0,()=>St],Bn=[1,c,zn,0,()=>vt],Pt=[9,c,rn,0,()=>dt,()=>gt],yt=[9,c,ln,0,()=>pt,()=>ht],Jn=(e)=>({apiVersion:"2011-06-15",base64Decoder:e?.base64Decoder??Ws,base64Encoder:e?.base64Encoder??Ns,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??He,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Js,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4"),signer:new Oe},{schemeId:"aws.auth#sigv4a",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4a"),signer:new $e},{schemeId:"smithy.api#noAuth",identityProvider:(t)=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new xe}],logger:e?.logger??new Xt,protocol:e?.protocol??Fs,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:lt,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:e?.serviceId??"STS",sha256:e?.sha256??Vs,signerConstructor:e?.signerConstructor??Ne,urlParser:e?.urlParser??Ps,utf8Decoder:e?.utf8Decoder??$s,utf8Encoder:e?.utf8Encoder??Os}),Xn=(e)=>{Zt(process.version);let t=is(e),s=()=>t().then(es),o=Jn(e);Wt(process.version);let n={profile:e?.profile,logger:o.logger};return{...o,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??y(bs,n),bodyLengthChecker:e?.bodyLengthChecker??Hs,defaultUserAgentProvider:e?.defaultUserAgentProvider??Ht({serviceId:o.serviceId,clientVersion:sn.version}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(u)=>u.getIdentityProvider("aws.auth#sigv4")||(async(a)=>await e.credentialDefaultProvider(a?.__config||{})()),signer:new Oe},{schemeId:"aws.auth#sigv4a",identityProvider:(u)=>u.getIdentityProvider("aws.auth#sigv4a"),signer:new $e},{schemeId:"smithy.api#noAuth",identityProvider:(u)=>u.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new xe}],maxAttempts:e?.maxAttempts??y(Rs,e),region:e?.region??y(us,{...ls,...n}),requestHandler:qs.create(e?.requestHandler??s),retryMode:e?.retryMode??y({...ws,default:async()=>(await s()).retryMode||Is},e),sigv4aSigningRegionSet:e?.sigv4aSigningRegionSet??y(Ds,n),streamCollector:e?.streamCollector??Us,useDualstackEndpoint:e?.useDualstackEndpoint??y(cs,n),useFipsEndpoint:e?.useFipsEndpoint??y(as,n),userAgentAppId:e?.userAgentAppId??y(Ut,n)}},Zn=(e)=>{let{httpAuthSchemes:t,httpAuthSchemeProvider:s,credentials:o}=e;return{setHttpAuthScheme(n){let u=t.findIndex((a)=>a.schemeId===n.schemeId);if(u===-1)t.push(n);else t.splice(u,1,n)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(n){s=n},httpAuthSchemeProvider(){return s},setCredentials(n){o=n},credentials(){return o}}},eo=(e)=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}),to=(e,t)=>{let s=Object.assign(qt(e),ts(e),ys(e),Zn(e));return t.forEach((o)=>o.configure(s)),Object.assign(e,Ft(s),ss(s),Es(s),eo(s))};class U extends De{config;constructor(...[e]){let t=Xn(e||{});super(t);this.initConfig=t;let s=Zs(t),o=Vt(s),n=Cs(o),u=ds(n),a=Lt(u),g=vs(a),S=Xs(g),p=to(S,e?.extensions||[]);this.config=p,this.middlewareStack.use(xs(this.config)),this.middlewareStack.use(Kt(this.config)),this.middlewareStack.use(_s(this.config)),this.middlewareStack.use(As(this.config)),this.middlewareStack.use(Mt(this.config)),this.middlewareStack.use(jt(this.config)),this.middlewareStack.use(zt(this.config)),this.middlewareStack.use(Yt(this.config,{httpAuthSchemeParametersProvider:Ys,identityProviderConfigProvider:async(v)=>new Qt({"aws.auth#sigv4":v.credentials,"aws.auth#sigv4a":v.credentials})})),this.middlewareStack.use(Bt(this.config))}destroy(){super.destroy()}}var Et=ns(en,"AWSSecurityTokenServiceV20110615","STSClient",fs),At={},It=(e,t,s,o)=>[];class G extends Et(At,It,"AssumeRole",Pt){}class Y extends Et(At,It,"AssumeRoleWithWebIdentity",yt){}var so={AssumeRoleCommand:G,AssumeRoleWithWebIdentityCommand:Y};class ue extends U{}os(so,ue);var wt=(e)=>{if(typeof e?.Arn==="string"){let t=e.Arn.split(":");if(t.length>4&&t[4]!=="")return t[4]}return},Rt=async(e,t,s,o={})=>{let n=typeof e==="function"?await e():e,u=typeof t==="function"?await t():t,a="",g=n??u??(a=await Gt(o)());return s?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${n} (credential provider clientConfig)`,`${u} (contextual client)`,`${a} (STS default: AWS_REGION, profile region, or us-east-1)`),g},no=(e,t)=>{let s,o;return async(n,u)=>{if(o=n,!s){let{logger:v=e?.parentClientConfig?.logger,profile:A=e?.parentClientConfig?.profile,region:f,requestHandler:m=e?.parentClientConfig?.requestHandler,credentialProviderLogger:T,userAgentAppId:P=e?.parentClientConfig?.userAgentAppId}=e,Q=await Rt(f,e?.parentClientConfig?.region,T,{logger:v,profile:A}),B=!Ct(m);s=new t({...e,userAgentAppId:P,profile:A,credentialDefaultProvider:()=>async()=>o,region:Q,requestHandler:B?m:void 0,logger:v})}let{Credentials:a,AssumedRoleUser:g}=await s.send(new G(u));if(!a||!a.AccessKeyId||!a.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${u.RoleArn}`);let S=wt(g),p={accessKeyId:a.AccessKeyId,secretAccessKey:a.SecretAccessKey,sessionToken:a.SessionToken,expiration:a.Expiration,...a.CredentialScope&&{credentialScope:a.CredentialScope},...S&&{accountId:S}};return se(p,"CREDENTIALS_STS_ASSUME_ROLE","i"),p}},oo=(e,t)=>{let s;return async(o)=>{if(!s){let{logger:S=e?.parentClientConfig?.logger,profile:p=e?.parentClientConfig?.profile,region:v,requestHandler:A=e?.parentClientConfig?.requestHandler,credentialProviderLogger:f,userAgentAppId:m=e?.parentClientConfig?.userAgentAppId}=e,T=await Rt(v,e?.parentClientConfig?.region,f,{logger:S,profile:p}),P=!Ct(A);s=new t({...e,userAgentAppId:m,profile:p,region:T,requestHandler:P?A:void 0,logger:S})}let{Credentials:n,AssumedRoleUser:u}=await s.send(new Y(o));if(!n||!n.AccessKeyId||!n.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${o.RoleArn}`);let a=wt(u),g={accessKeyId:n.AccessKeyId,secretAccessKey:n.SecretAccessKey,sessionToken:n.SessionToken,expiration:n.Expiration,...n.CredentialScope&&{credentialScope:n.CredentialScope},...a&&{accountId:a}};if(a)se(g,"RESOLVED_ACCOUNT_ID","T");return se(g,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),g}},Ct=(e)=>e?.metadata?.handlerProtocol==="h2",_t=(e,t)=>{if(!t)return e;else return class extends e{constructor(o){super(o);for(let n of t)this.middlewareStack.use(n)}}},xt=(e={},t)=>no(e,_t(U,t)),Tt=(e={},t)=>oo(e,_t(U,t)),ro=(e)=>(t)=>e({roleAssumer:xt(t),roleAssumerWithWebIdentity:Tt(t),...t});var co=Pt,uo=G,lo=dt,go=gt,po=yt,ho=Y,mo=pt,So=ht,vo=ae,fo=ce,Po=q,yo=st,Eo=z,Ao=nt,Io=M,wo=ot,Ro=j,Co=rt,_o=F,xo=at,To=V,ko=ct,Do=mt,bo=St,Oo=K,$o=ut,No=ue,Wo=U,Ho=h,Uo=tt,qo=vt,Fo=ro,Vo=lt,Lo=xt,Ko=Tt;export{io as $Command,ao as __Client,co as AssumeRole$,uo as AssumeRoleCommand,lo as AssumeRoleRequest$,go as AssumeRoleResponse$,po as AssumeRoleWithWebIdentity$,ho as AssumeRoleWithWebIdentityCommand,mo as AssumeRoleWithWebIdentityRequest$,So as AssumeRoleWithWebIdentityResponse$,vo as AssumedRoleUser$,fo as Credentials$,Po as ExpiredTokenException,yo as ExpiredTokenException$,Eo as IDPCommunicationErrorException,Ao as IDPCommunicationErrorException$,Io as IDPRejectedClaimException,wo as IDPRejectedClaimException$,Ro as InvalidIdentityTokenException,Co as InvalidIdentityTokenException$,_o as MalformedPolicyDocumentException,xo as MalformedPolicyDocumentException$,To as PackedPolicyTooLargeException,ko as PackedPolicyTooLargeException$,Do as PolicyDescriptorType$,bo as ProvidedContext$,Oo as RegionDisabledException,$o as RegionDisabledException$,No as STS,Wo as STSClient,Ho as STSServiceException,Uo as STSServiceException$,qo as Tag$,Fo as decorateDefaultCredentialProvider,Vo as errorTypeRegistries,Lo as getDefaultRoleAssumer,Ko as getDefaultRoleAssumerWithWebIdentity};

package/{chunk-zxkq9m8e.js → chunk-2ek3wq4b.js}

@@ -1,3 +1,3 @@
 // @bun
-import{ie}from"./chunk-d48bfd2e.js";import{z,fe}from"./chunk-x4874m8e.js";import{Q}from"./chunk-n981vx1t.js";function w(e,t,n){let a=Error(`${e} returned ${t.status}`);return a.status=t.status,a.headers=t.headers,a.body=n,a}function b(e){let t=Error(`Request timed out after ${e}ms`);return t.name="TimeoutError",t.status=void 0,t.headers=void 0,t.body="",t}function se(e){return typeof e==="object"&&e!==null&&!Array.isArray(e)}function De(e,t,n){if(typeof t!=="number"||!Number.isFinite(t))throw Error(`${e} returned an invalid ${n}`);return t}function g(e,t,n){return fe({authorization:`Bearer ${t}`,"content-type":"application/json"},e.headers,n)??{}}async function Ar(e,t,n,a,r,f){if(!r?.apiKey)throw Error(`No API key for provider: ${n.provider}`);let h=r.apiKey,s=a,u=await r.onPayload?.(s,n);if(u!==void 0)s=u;let y=r.fetch??globalThis.fetch,{response:d,json:m}=await ie(async()=>{let i=r.timeoutMs!==void 0?AbortSignal.timeout(r.timeoutMs):void 0,p=r.signal&&i?AbortSignal.any([r.signal,i]):r.signal??i;try{let o=await y(t,{method:"POST",headers:g(n,h,r.headers),body:JSON.stringify(s),signal:p});if(!o.ok)throw w(e,o,await o.text());return{response:o,json:await o.json()}}catch(o){if(i?.aborted&&!r.signal?.aborted)throw b(r.timeoutMs);throw o}},{maxRetries:r.maxRetries??2,maxRetryDelayMs:r.maxRetryDelayMs,signal:r.signal,noRetryStatuses:f});return await r.onResponse?.({status:d.status,headers:z(d.headers)},n),m}function c(e){return typeof e==="number"&&Number.isFinite(e)&&e>0?e:0}function Er(e,t){if(!se(e)||e.input_tokens===void 0&&e.output_tokens===void 0)return;let n=c(e.input_tokens),a=c(e.output_tokens),r={input:n,output:a,cacheRead:0,cacheWrite:0,totalTokens:n+a,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}};return Q(t,r),r}
-export{se,De,Ar,Er};
+import{se}from"./chunk-h1kb8b49.js";import{j,ge}from"./chunk-2ks2tnac.js";import{Q}from"./chunk-0d51ggzj.js";function w(e,t,n){let a=Error(`${e} returned ${t.status}`);return a.status=t.status,a.headers=t.headers,a.body=n,a}function b(e){let t=Error(`Request timed out after ${e}ms`);return t.name="TimeoutError",t.status=void 0,t.headers=void 0,t.body="",t}function ae(e){return typeof e==="object"&&e!==null&&!Array.isArray(e)}function Ue(e,t,n){if(typeof t!=="number"||!Number.isFinite(t))throw Error(`${e} returned an invalid ${n}`);return t}function g(e,t,n){return ge({authorization:`Bearer ${t}`,"content-type":"application/json"},e.headers,n)??{}}async function Ar(e,t,n,a,r,f){if(!r?.apiKey)throw Error(`No API key for provider: ${n.provider}`);let h=r.apiKey,s=a,u=await r.onPayload?.(s,n);if(u!==void 0)s=u;let y=r.fetch??globalThis.fetch,{response:d,json:m}=await se(async()=>{let i=r.timeoutMs!==void 0?AbortSignal.timeout(r.timeoutMs):void 0,p=r.signal&&i?AbortSignal.any([r.signal,i]):r.signal??i;try{let o=await y(t,{method:"POST",headers:g(n,h,r.headers),body:JSON.stringify(s),signal:p});if(!o.ok)throw w(e,o,await o.text());return{response:o,json:await o.json()}}catch(o){if(i?.aborted&&!r.signal?.aborted)throw b(r.timeoutMs);throw o}},{maxRetries:r.maxRetries??2,maxRetryDelayMs:r.maxRetryDelayMs,signal:r.signal,noRetryStatuses:f});return await r.onResponse?.({status:d.status,headers:j(d.headers)},n),m}function c(e){return typeof e==="number"&&Number.isFinite(e)&&e>0?e:0}function Er(e,t){if(!ae(e)||e.input_tokens===void 0&&e.output_tokens===void 0)return;let n=c(e.input_tokens),a=c(e.output_tokens),r={input:n,output:a,cacheRead:0,cacheWrite:0,totalTokens:n+a,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}};return Q(t,r),r}
+export{ae,Ue,Ar,Er};

package/chunk-2gcp3xdc.js

@@ -0,0 +1,2 @@
+// @bun
+import{bo,wt,at,w,pn,So}from"./chunk-320174qe.js";export{bo as child_process,wt as crypto,at as fs,w as path,pn as stream,So as util};

package/{chunk-x4874m8e.js → chunk-2ks2tnac.js}

@@ -1,3 +1,3 @@
 // @bun
-function z(r){let e={};for(let[n,o]of r.entries())e[n]=o;return e}function fe(...r){let e=new Map;for(let n of r)for(let[o,t]of Object.entries(n??{})){let s=o.toLowerCase();if(e.delete(s),t!==null)e.set(s,[o,t])}return e.size>0?Object.fromEntries(e.values()):void 0}
-export{z,fe};
+function j(r){let e={};for(let[n,o]of r.entries())e[n]=o;return e}function ge(...r){let e=new Map;for(let n of r)for(let[o,t]of Object.entries(n??{})){let s=o.toLowerCase();if(e.delete(s),t!==null)e.set(s,[o,t])}return e.size>0?Object.fromEntries(e.values()):void 0}
+export{j,ge};