@claudiolabs/claudin 0.5.13 → 0.6.0

package/dist/chunks/image-processor-napi-0.6.0-tyyms96b.mjs

@@ -0,0 +1 @@
+import{fpa as z}from"./cli-0.6.0-szxjcmcn.mjs";var g=()=>null,c=class{},q,A,a,D=!0,E=null,F,G,H,I,J=null,K=null,L,M,P,Q,R,S,U,V,W,X,Y,Z,_,$,b,i,k,u,w,y,N,O="service.name",T="service.version",h="service.name",x="service.version",d,f,m,t,e;var B=z(()=>{q={get(v,j){if(j==="__esModule")return!0;if(j==="default")return new Proxy({},q);if(j==="ExportResultCode")return{SUCCESS:0,FAILED:1};if(j==="resourceFromAttributes")return()=>({});if(j==="SandboxRuntimeConfigSchema")return{parse:()=>({})};return g}},A=new Proxy(g,q),a=A,F=new Proxy({},{get:()=>g}),G={parse:()=>({})},H=[],I=g,L=g,M=g,P={SUCCESS:0,FAILED:1},Q=g,R=c,S=c,U=c,V=c,W=c,X=c,Y=c,Z=c,_=c,$=c,b=c,i=c,k=c,u=c,w={getTracer:()=>({startSpan:()=>({end:g,setAttribute:g,setStatus:g,recordException:g})})},y={active:g,with:(v,j)=>j()},N={OK:0,ERROR:1,UNSET:2},d={CUMULATIVE:0,DELTA:1},f={HISTOGRAM:0,SUM:1,GAUGE:2},m={COUNTER:0,HISTOGRAM:1,UP_DOWN_COUNTER:2},t=c,e={}});B();export{w as trace,Q as resourceFromAttributes,M as plot,L as getSyntaxTheme,I as getMcpConfigForManifest,a as default,y as context,D as __stub,N as SpanStatusCode,S as SimpleSpanProcessor,b as SimpleLogRecordProcessor,e as SeverityNumber,E as SandboxViolationStore,G as SandboxRuntimeConfigSchema,F as SandboxManager,x as SEMRESATTRS_SERVICE_VERSION,h as SEMRESATTRS_SERVICE_NAME,R as Resource,t as PushMetricExporter,_ as PrometheusExporter,u as PeriodicExportingMetricReader,X as OTLPTraceExporter,Z as OTLPMetricExporter,Y as OTLPLogExporter,V as NodeTracerProvider,k as MeterProvider,$ as LoggerProvider,m as InstrumentType,P as ExportResultCode,f as DataPointType,K as ColorFile,J as ColorDiff,U as BatchSpanProcessor,i as BatchLogRecordProcessor,W as BasicTracerProvider,H as BROWSER_TOOLS,d as AggregationTemporality,T as ATTR_SERVICE_VERSION,O as ATTR_SERVICE_NAME};

package/dist/chunks/index-0.6.0-1c8mc7c5.mjs

@@ -0,0 +1 @@
+import{g7 as G}from"./cli-0.6.0-v7kten40.mjs";import{Toa as _,Uoa as U}from"./cli-0.6.0-jpsf0t8a.mjs";import{apa as X}from"./cli-0.6.0-59hncecf.mjs";import{bpa as K,dpa as B,fpa as l,gpa as E}from"./cli-0.6.0-szxjcmcn.mjs";var v=B((k)=>{Object.defineProperty(k,"__esModule",{value:!0});k.resolveHttpHandlerRuntimeConfig=k.getHttpHandlerExtensionConfiguration=k.isValidHostname=k.HttpResponse=k.HttpRequest=k.Fields=k.Field=void 0;var H=X();Object.defineProperty(k,"Field",{enumerable:!0,get:function(){return H.Field}});Object.defineProperty(k,"Fields",{enumerable:!0,get:function(){return H.Fields}});Object.defineProperty(k,"HttpRequest",{enumerable:!0,get:function(){return H.HttpRequest}});Object.defineProperty(k,"HttpResponse",{enumerable:!0,get:function(){return H.HttpResponse}});Object.defineProperty(k,"isValidHostname",{enumerable:!0,get:function(){return H.isValidHostname}});Object.defineProperty(k,"getHttpHandlerExtensionConfiguration",{enumerable:!0,get:function(){return H.getHttpHandlerExtensionConfiguration}});Object.defineProperty(k,"resolveHttpHandlerRuntimeConfig",{enumerable:!0,get:function(){return H.resolveHttpHandlerRuntimeConfig}})});var J=B((C)=>{var Q=_(),T=U(),P=G(),W=v(),F=E("node:crypto"),q=E("node:fs"),Z=E("node:os"),A=E("node:path");class ${profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300000;constructor(e,n,t){this.profileData=e,this.init=n,this.callerClientConfig=t}async loadCredentials(){let e=await this.loadToken();if(!e)throw new T.CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let n=e.accessToken,t=Date.now();if(new Date(n.expiresAt).getTime()-t<=$.REFRESH_THRESHOLD)return this.refresh(e);return{accessKeyId:n.accessKeyId,secretAccessKey:n.secretAccessKey,sessionToken:n.sessionToken,accountId:n.accountId,expiration:new Date(n.expiresAt)}}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}async refresh(e){let{SigninClient:n,CreateOAuth2TokenCommand:t}=await import("./index-0.6.0-scwzrsg7.mjs").then((m)=>K(m.default)),{logger:s,userAgentAppId:c}=this.callerClientConfig??{},r=((h)=>{return h?.metadata?.handlerProtocol==="h2"})(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,a=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,i=new n({credentials:{accessKeyId:"",secretAccessKey:""},region:a,requestHandler:r,logger:s,userAgentAppId:c,...this.init?.clientConfig});this.createDPoPInterceptor(i.middlewareStack);let x={tokenInput:{clientId:e.clientId,refreshToken:e.refreshToken,grantType:"refresh_token"}};try{let h=await i.send(new t(x)),{accessKeyId:y,secretAccessKey:d,sessionToken:I}=h.tokenOutput?.accessToken??{},{refreshToken:S,expiresIn:m}=h.tokenOutput??{};if(!y||!d||!I||!S)throw new T.CredentialsProviderError("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let R=(m??900)*1000,b=new Date(Date.now()+R),j={...e,accessToken:{...e.accessToken,accessKeyId:y,secretAccessKey:d,sessionToken:I,expiresAt:b.toISOString()},refreshToken:S};await this.saveToken(j);let o=j.accessToken;return{accessKeyId:o.accessKeyId,secretAccessKey:o.secretAccessKey,sessionToken:o.sessionToken,accountId:o.accountId,expiration:b}}catch(h){if(h.name==="AccessDeniedException"){let y=h.error,d;switch(y){case"TOKEN_EXPIRED":d="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":d="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":d="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:d=`Failed to refresh token: ${String(h)}. Please re-authenticate using \`aws login\``}throw new T.CredentialsProviderError(d,{logger:this.logger,tryNextLink:!1})}throw new T.CredentialsProviderError(`Failed to refresh token: ${String(h)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let e=this.getTokenFilePath();try{let n;try{n=await P.readFile(e,{ignoreCache:this.init?.ignoreCache})}catch{n=await q.promises.readFile(e,"utf8")}let t=JSON.parse(n),s=["accessToken","clientId","refreshToken","dpopKey"].filter((c)=>!t[c]);if(!t.accessToken?.accountId)s.push("accountId");if(s.length>0)throw new T.CredentialsProviderError(`Token validation failed, missing fields: ${s.join(", ")}`,{logger:this.logger,tryNextLink:!1});return t}catch(n){throw new T.CredentialsProviderError(`Failed to load token from ${e}: ${String(n)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(e){let n=this.getTokenFilePath(),t=A.dirname(n);try{await q.promises.mkdir(t,{recursive:!0})}catch(s){}await q.promises.writeFile(n,JSON.stringify(e,null,2),"utf8")}getTokenFilePath(){let e=process.env.AWS_LOGIN_CACHE_DIRECTORY??A.join(Z.homedir(),".aws","login","cache"),n=Buffer.from(this.loginSession,"utf8"),t=F.createHash("sha256").update(n).digest("hex");return A.join(e,`${t}.json`)}derToRawSignature(e){let n=2;if(e[n]!==2)throw Error("Invalid DER signature");n++;let t=e[n++],s=e.subarray(n,n+t);if(n+=t,e[n]!==2)throw Error("Invalid DER signature");n++;let c=e[n++],u=e.subarray(n,n+c);s=s[0]===0?s.subarray(1):s,u=u[0]===0?u.subarray(1):u;let r=Buffer.concat([Buffer.alloc(32-s.length),s]),a=Buffer.concat([Buffer.alloc(32-u.length),u]);return Buffer.concat([r,a])}createDPoPInterceptor(e){e.add((n)=>async(t)=>{if(W.HttpRequest.isInstance(t.request)){let s=t.request,c=`${s.protocol}//${s.hostname}${s.port?`:${s.port}`:""}${s.path}`,u=await this.generateDpop(s.method,c);s.headers={...s.headers,DPoP:u}}return n(t)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(e="POST",n){let t=await this.loadToken();try{let s=F.createPrivateKey({key:t.dpopKey,format:"pem",type:"sec1"}),u=F.createPublicKey(s).export({format:"der",type:"spki"}),r=-1;for(let b=0;b<u.length;b++)if(u[b]===4){r=b;break}let a=u.slice(r+1,r+33),i=u.slice(r+33,r+65),x={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:a.toString("base64url"),y:i.toString("base64url")}},h={jti:crypto.randomUUID(),htm:e,htu:n,iat:Math.floor(Date.now()/1000)},y=Buffer.from(JSON.stringify(x)).toString("base64url"),d=Buffer.from(JSON.stringify(h)).toString("base64url"),I=`${y}.${d}`,S=F.sign("sha256",Buffer.from(I),s),R=this.derToRawSignature(S).toString("base64url");return`${I}.${R}`}catch(s){throw new T.CredentialsProviderError(`Failed to generate Dpop proof: ${s instanceof Error?s.message:String(s)}`,{logger:this.logger,tryNextLink:!1})}}}var N=(e)=>async({callerClientConfig:n}={})=>{e?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let t=await P.parseKnownFiles(e||{}),s=P.getProfileName({profile:e?.profile??n?.profile}),c=t[s];if(!c?.login_session)throw new T.CredentialsProviderError(`Profile ${s} does not contain login_session.`,{tryNextLink:!0,logger:e?.logger});let r=await new $(c,e,n).loadCredentials();return Q.setCredentialFeature(r,"CREDENTIALS_LOGIN","AD")};C.fromLoginCredentials=N});var L,O,w,p,ee=(e,n,t)=>{let s={EcsContainer:async(c)=>{let{fromHttp:u}=await import("./index-0.6.0-kbwkgp90.mjs").then((m)=>K(m.default,1)),{fromContainerMetadata:r}=await import("./index-0.6.0-8r6qtdvj.mjs");return t?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>O.chain(u(c??{}),r(c))().then(D)},Ec2InstanceMetadata:async(c)=>{t?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");let{fromInstanceMetadata:u}=await import("./index-0.6.0-8r6qtdvj.mjs");return async()=>u(c)().then(D)},Environment:async(c)=>{t?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");let{fromEnv:u}=await import("./index-0.6.0-apr64dfb.mjs");return async()=>u(c)().then(D)}};if(e in s)return s[e];else throw new O.CredentialsProviderError(`Unsupported credential source in profile ${n}. Got ${e}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:t})},D=(e)=>w.setCredentialFeature(e,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p"),te=(e,{profile:n="default",logger:t}={})=>{return Boolean(e)&&typeof e==="object"&&typeof e.role_arn==="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1&&["undefined","string"].indexOf(typeof e.external_id)>-1&&["undefined","string"].indexOf(typeof e.mfa_serial)>-1&&(ne(e,{profile:n,logger:t})||se(e,{profile:n,logger:t}))},ne=(e,{profile:n,logger:t})=>{let s=typeof e.source_profile==="string"&&typeof e.credential_source>"u";if(s)t?.debug?.(`    ${n} isAssumeRoleWithSourceProfile source_profile=${e.source_profile}`);return s},se=(e,{profile:n,logger:t})=>{let s=typeof e.credential_source==="string"&&typeof e.source_profile>"u";if(s)t?.debug?.(`    ${n} isCredentialSourceProfile credential_source=${e.credential_source}`);return s},re=async(e,n,t,s,c={},u)=>{t.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");let r=n[e],{source_profile:a,region:i}=r;if(!t.roleAssumer){let{getDefaultRoleAssumer:h}=await import("./index-0.6.0-rv4pntam.mjs").then((m)=>K(m.default,1));t.roleAssumer=h({...t.clientConfig,credentialProviderLogger:t.logger,parentClientConfig:{...s,...t?.parentClientConfig,region:i??t?.parentClientConfig?.region??s?.region}},t.clientPlugins)}if(a&&a in c)throw new O.CredentialsProviderError(`Detected a cycle attempting to resolve credentials for profile ${L.getProfileName(t)}. Profiles visited: `+Object.keys(c).join(", "),{logger:t.logger});t.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${a?`source_profile=[${a}]`:`profile=[${e}]`}`);let x=a?u(a,n,t,s,{...c,[a]:!0},V(n[a]??{})):(await ee(r.credential_source,e,t.logger)(t))();if(V(r))return x.then((h)=>w.setCredentialFeature(h,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));else{let h={RoleArn:r.role_arn,RoleSessionName:r.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:r.external_id,DurationSeconds:parseInt(r.duration_seconds||"3600",10)},{mfa_serial:y}=r;if(y){if(!t.mfaCodeProvider)throw new O.CredentialsProviderError(`Profile ${e} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:t.logger,tryNextLink:!1});h.SerialNumber=y,h.TokenCode=await t.mfaCodeProvider(y)}let d=await x;return t.roleAssumer(d,h).then((I)=>w.setCredentialFeature(I,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},V=(e)=>{return!e.role_arn&&!!e.credential_source},ce=(e)=>{return Boolean(e&&e.login_session)},ue=async(e,n,t)=>{let s=await p.fromLoginCredentials({...n,profile:e})({callerClientConfig:t});return w.setCredentialFeature(s,"CREDENTIALS_PROFILE_LOGIN","AC")},he=(e)=>Boolean(e)&&typeof e==="object"&&typeof e.credential_process==="string",ae=async(e,n)=>import("./index-0.6.0-mhvzn9h5.mjs").then(({fromProcess:t})=>t({...e,profile:n})().then((s)=>w.setCredentialFeature(s,"CREDENTIALS_PROFILE_PROCESS","v"))),de=async(e,n,t={},s)=>{let{fromSSO:c}=await import("./index-0.6.0-4cjwvzjk.mjs");return c({profile:e,logger:t.logger,parentClientConfig:t.parentClientConfig,clientConfig:t.clientConfig})({callerClientConfig:s}).then((u)=>{if(n.sso_session)return w.setCredentialFeature(u,"CREDENTIALS_PROFILE_SSO","r");else return w.setCredentialFeature(u,"CREDENTIALS_PROFILE_SSO_LEGACY","t")})},ye=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string"),Y=(e)=>Boolean(e)&&typeof e==="object"&&typeof e.aws_access_key_id==="string"&&typeof e.aws_secret_access_key==="string"&&["undefined","string"].indexOf(typeof e.aws_session_token)>-1&&["undefined","string"].indexOf(typeof e.aws_account_id)>-1,g=async(e,n)=>{n?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");let t={accessKeyId:e.aws_access_key_id,secretAccessKey:e.aws_secret_access_key,sessionToken:e.aws_session_token,...e.aws_credential_scope&&{credentialScope:e.aws_credential_scope},...e.aws_account_id&&{accountId:e.aws_account_id}};return w.setCredentialFeature(t,"CREDENTIALS_PROFILE","n")},ke=(e)=>Boolean(e)&&typeof e==="object"&&typeof e.web_identity_token_file==="string"&&typeof e.role_arn==="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1,we=async(e,n,t)=>import("./index-0.6.0-33tqx1q0.mjs").then((m)=>K(m.default,1)).then(({fromTokenFile:s})=>s({webIdentityTokenFile:e.web_identity_token_file,roleArn:e.role_arn,roleSessionName:e.role_session_name,roleAssumerWithWebIdentity:n.roleAssumerWithWebIdentity,logger:n.logger,parentClientConfig:n.parentClientConfig})({callerClientConfig:t}).then((c)=>w.setCredentialFeature(c,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q"))),z=async(e,n,t,s,c={},u=!1)=>{let r=n[e];if(Object.keys(c).length>0&&Y(r))return g(r,t);if(u||te(r,{profile:e,logger:t.logger}))return re(e,n,t,s,c,z);if(Y(r))return g(r,t);if(ke(r))return we(r,t,s);if(he(r))return ae(t,e);if(ye(r))return await de(e,r,t,s);if(ce(r))return ue(e,t,s);throw new O.CredentialsProviderError(`Could not resolve credentials using profile: [${e}] in configuration/credentials file(s).`,{logger:t.logger})},Te=(e={})=>async({callerClientConfig:n}={})=>{e.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");let t=await L.parseKnownFiles(e);return z(L.getProfileName({profile:e.profile??n?.profile}),t,e,n)},Ee;var Ie=l(()=>{L=G(),O=U(),w=_(),p=J();Ee=Te});Ie();export{Ee as fromIni};export default {get fromIni(){return Ee}};

package/dist/chunks/index-0.6.0-33tqx1q0.mjs

@@ -0,0 +1 @@
+import{F6 as S}from"./cli-0.6.0-v56hqc26.mjs";import"./cli-0.6.0-1cfghz45.mjs";import"./cli-0.6.0-g7exm24t.mjs";import{g7 as A}from"./cli-0.6.0-v7kten40.mjs";import{Toa as I,Uoa as h}from"./cli-0.6.0-jpsf0t8a.mjs";import"./cli-0.6.0-r8g9yjbx.mjs";import"./cli-0.6.0-59hncecf.mjs";import{dpa as p,gpa as F}from"./cli-0.6.0-szxjcmcn.mjs";var d=p((n)=>{var w=n&&n.__createBinding||(Object.create?function(e,r,o,t){if(t===void 0)t=o;var _=Object.getOwnPropertyDescriptor(r,o);if(!_||("get"in _?!r.__esModule:_.writable||_.configurable))_={enumerable:!0,get:function(){return r[o]}};Object.defineProperty(e,t,_)}:function(e,r,o,t){if(t===void 0)t=o;e[t]=r[o]}),v=n&&n.__setModuleDefault||(Object.create?function(e,r){Object.defineProperty(e,"default",{enumerable:!0,value:r})}:function(e,r){e.default=r}),j=n&&n.__importStar||function(){var e=function(r){return e=Object.getOwnPropertyNames||function(o){var t=[];for(var _ in o)if(Object.prototype.hasOwnProperty.call(o,_))t[t.length]=_;return t},e(r)};return function(r){if(r&&r.__esModule)return r;var o={};if(r!=null){for(var t=e(r),_=0;_<t.length;_++)if(t[_]!=="default")w(o,r,t[_])}return v(o,r),o}}();Object.defineProperty(n,"__esModule",{value:!0});n.fromWebToken=void 0;var m=(e)=>async(r)=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:o,roleSessionName:t,webIdentityToken:_,providerId:s,policyArns:y,policy:b,durationSeconds:T}=e,{roleAssumerWithWebIdentity:l}=e;if(!l){let{getDefaultRoleAssumerWithWebIdentity:N}=await Promise.resolve().then(()=>j(S()));l=N({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...r?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return l({RoleArn:o,RoleSessionName:t??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:_,ProviderId:s,PolicyArns:y,Policy:b,DurationSeconds:T})};n.fromWebToken=m});var u=p((E)=>{Object.defineProperty(E,"__esModule",{value:!0});E.fromTokenFile=void 0;var P=I(),g=h(),k=A(),R=F("node:fs"),q=d(),O="AWS_WEB_IDENTITY_TOKEN_FILE",L="AWS_ROLE_ARN",W="AWS_ROLE_SESSION_NAME",V=(e={})=>async(r)=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let o=e?.webIdentityTokenFile??process.env[O],t=e?.roleArn??process.env[L],_=e?.roleSessionName??process.env[W];if(!o||!t)throw new g.CredentialsProviderError("Web identity configuration not specified",{logger:e.logger});let s=await(0,q.fromWebToken)({...e,webIdentityToken:k.externalDataInterceptor?.getTokenRecord?.()[o]??(0,R.readFileSync)(o,{encoding:"ascii"}),roleArn:t,roleSessionName:_})(r);if(o===process.env[O])(0,P.setCredentialFeature)(s,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h");return s};E.fromTokenFile=V});var x=p((c)=>{var i=u(),a=d();Object.prototype.hasOwnProperty.call(i,"__proto__")&&!Object.prototype.hasOwnProperty.call(c,"__proto__")&&Object.defineProperty(c,"__proto__",{enumerable:!0,value:i.__proto__});Object.keys(i).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(c,e))c[e]=i[e]});Object.prototype.hasOwnProperty.call(a,"__proto__")&&!Object.prototype.hasOwnProperty.call(c,"__proto__")&&Object.defineProperty(c,"__proto__",{enumerable:!0,value:a.__proto__});Object.keys(a).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(c,e))c[e]=a[e]})});export default x();

package/dist/chunks/index-0.6.0-4cjwvzjk.mjs

@@ -0,0 +1,2 @@
+import{$6 as vr,G6 as F,H6 as Nr,I6 as Dr,J6 as br,K6 as Ge,L6 as Zt,M6 as Et,N6 as $r,O6 as Is,P6 as Ar,Q6 as Fr,R6 as hs,S6 as G,T6 as tt,U6 as pr,V6 as _r,X6 as Er,Y6 as Sr,Z6 as Rr,_6 as xr,a7 as Kt,b7 as kt,c7 as er,d7 as Ur,e7 as Mr}from"./cli-0.6.0-1cfghz45.mjs";import{f7 as ps}from"./cli-0.6.0-g7exm24t.mjs";import{g7 as we}from"./cli-0.6.0-v7kten40.mjs";import{Soa as dr,Toa as Z,Uoa as Ce}from"./cli-0.6.0-jpsf0t8a.mjs";import{Voa as ir}from"./cli-0.6.0-r8g9yjbx.mjs";import{Xoa as Xe}from"./cli-0.6.0-59hncecf.mjs";import{bpa as ge,dpa as S,fpa as no,gpa as X}from"./cli-0.6.0-szxjcmcn.mjs";var De=S((Zs)=>{var Ls=Z(),Ts=F(),p=Ce(),w=we(),zs=X("node:fs"),Hs=({logger:e,signingName:s}={})=>async()=>{if(e?.debug?.("@aws-sdk/token-providers - fromEnvSigningName"),!s)throw new p.TokenProviderError("Please pass 'signingName' to compute environment variable key",{logger:e});let t=Ts.getBearerTokenEnvKey(s);if(!(t in process.env))throw new p.TokenProviderError(`Token not present in '${t}' environment variable`,{logger:e});let o={token:process.env[t]};return Ls.setTokenFeature(o,"BEARER_SERVICE_ENV_VARS","3"),o},Vs=300000,K="To refresh this SSO session run 'aws sso login' with the corresponding profile.",Bs=async(e,s={},t)=>{let{SSOOIDCClient:o}=await import("./index-0.6.0-gxd56xhn.mjs").then((m)=>ge(m.default)),r=(c)=>s.clientConfig?.[c]??s.parentClientConfig?.[c]??t?.[c];return new o(Object.assign({},s.clientConfig??{},{region:e??s.clientConfig?.region,logger:r("logger"),userAgentAppId:r("userAgentAppId")}))},Ys=async(e,s,t={},o)=>{let{CreateTokenCommand:r}=await import("./index-0.6.0-gxd56xhn.mjs").then((m)=>ge(m.default));return(await Bs(s,t,o)).send(new r({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))},Pe=(e)=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new p.TokenProviderError(`Token is expired. ${K}`,!1)},h=(e,s,t=!1)=>{if(typeof s>"u")throw new p.TokenProviderError(`Value not present for '${e}' in SSO Token${t?". Cannot refresh":""}. ${K}`,!1)},{writeFile:Qs}=zs.promises,Js=(e,s)=>{let t=w.getSSOTokenFilepath(e),o=JSON.stringify(s,null,2);return Qs(t,o)},ye=new Date(0),Ne=(e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let t=await w.parseKnownFiles(e),o=w.getProfileName({profile:e.profile??s?.profile}),r=t[o];if(!r)throw new p.TokenProviderError(`Profile '${o}' could not be found in shared credentials file.`,!1);else if(!r.sso_session)throw new p.TokenProviderError(`Profile '${o}' is missing required property 'sso_session'.`);let n=r.sso_session,_=(await w.loadSsoSessionData(e))[n];if(!_)throw new p.TokenProviderError(`Sso session '${n}' could not be found in shared credentials file.`,!1);for(let a of["sso_start_url","sso_region"])if(!_[a])throw new p.TokenProviderError(`Sso session '${n}' is missing required property '${a}'.`,!1);_.sso_start_url;let d=_.sso_region,l;try{l=await w.getSSOTokenFromFile(n)}catch(a){throw new p.TokenProviderError(`The SSO session token associated with profile=${o} was not found or is invalid. ${K}`,!1)}h("accessToken",l.accessToken),h("expiresAt",l.expiresAt);let{accessToken:u,expiresAt:C}=l,x={token:u,expiration:new Date(C)};if(x.expiration.getTime()-Date.now()>Vs)return x;if(Date.now()-ye.getTime()<30000)return Pe(x),x;h("clientId",l.clientId,!0),h("clientSecret",l.clientSecret,!0),h("refreshToken",l.refreshToken,!0);try{ye.setTime(Date.now());let a=await Ys(l,d,e,s);h("accessToken",a.accessToken),h("expiresIn",a.expiresIn);let v=new Date(Date.now()+a.expiresIn*1000);try{await Js(n,{...l,accessToken:a.accessToken,expiresAt:v.toISOString(),refreshToken:a.refreshToken})}catch(J){}return{token:a.accessToken,expiration:v}}catch(a){return Pe(x),x}},Ws=({token:e,logger:s})=>async()=>{if(s?.debug("@aws-sdk/token-providers - fromStatic"),!e||!e.token)throw new p.TokenProviderError("Please pass a valid token to fromStatic",!1);return e},Xs=(e={})=>p.memoize(p.chain(Ne(e),async()=>{throw new p.TokenProviderError("Could not load token from any providers",!1)}),(s)=>s.expiration!==void 0&&s.expiration.getTime()-Date.now()<300000,(s)=>s.expiration!==void 0);Zs.fromEnvSigningName=Hs;Zs.fromSso=Ne;Zs.fromStatic=Ws;Zs.nodeProvider=Xs});var ee=S((be)=>{Object.defineProperty(be,"__esModule",{value:!0});be.resolveHttpAuthSchemeConfig=be.defaultSSOHttpAuthSchemeProvider=be.defaultSSOHttpAuthSchemeParametersProvider=void 0;var rt=F(),k=tt(),ot=async(e,s,t)=>{return{operation:(0,k.getSmithyContext)(s).operation,region:await(0,k.normalizeProvider)(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}};be.defaultSSOHttpAuthSchemeParametersProvider=ot;function nt(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:e.region},propertiesExtractor:(s,t)=>({signingProperties:{config:s,context:t}})}}function at(e){return{schemeId:"smithy.api#noAuth"}}var ct=(e)=>{let s=[];switch(e.operation){case"GetRoleCredentials":{s.push(at(e));break}default:s.push(nt(e))}return s};be.defaultSSOHttpAuthSchemeProvider=ct;var lt=(e)=>{let s=(0,rt.resolveAwsSdkSigV4Config)(e);return Object.assign(s,{authSchemePreference:(0,k.normalizeProvider)(e.authSchemePreference??[])})};be.resolveHttpAuthSchemeConfig=lt});var Te=S((je)=>{Object.defineProperty(je,"__esModule",{value:!0});je.bdd=void 0;var dt=Ge(),N="ref",f=-1,U=!0,Ae="isSet",me="PartitionResult",M="booleanEquals",se="getAttr",Fe={[N]:"Endpoint"},te={[N]:me},g={},Ue=[{[N]:"Region"}],Me={conditions:[[Ae,[Fe]],[Ae,Ue],["aws.partition",Ue,me],[M,[{[N]:"UseFIPS"},U]],[M,[{[N]:"UseDualStack"},U]],[M,[{fn:se,argv:[te,"supportsDualStack"]},U]],[M,[{fn:se,argv:[te,"supportsFIPS"]},U]],["stringEquals",[{fn:se,argv:[te,"name"]},"aws-us-gov"]]],results:[[f],[f,"Invalid Configuration: FIPS and custom endpoint are not supported"],[f,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[Fe,g],["https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",g],[f,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://portal.sso.{Region}.amazonaws.com",g],["https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",g],[f,"FIPS is enabled but this partition does not support FIPS"],["https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",g],[f,"DualStack is enabled but this partition does not support DualStack"],["https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",g],[f,"Invalid Configuration: Missing Region"]]},pt=2,i=1e8,_t=new Int32Array([-1,1,-1,0,13,3,1,4,i+12,2,5,i+12,3,8,6,4,7,i+11,5,i+9,i+10,4,11,9,6,10,i+8,7,i+6,i+7,5,12,i+5,6,i+4,i+5,3,i+1,14,4,i+2,i+3]);je.bdd=dt.BinaryDecisionDiagram.from(_t,pt,Me.conditions,Me.results)});var Ve=S((ze)=>{Object.defineProperty(ze,"__esModule",{value:!0});ze.defaultEndpointResolver=void 0;var St=Et(),re=Ge(),Rt=Te(),xt=new re.EndpointCache({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),vt=(e,s={})=>{return xt.get(e,()=>(0,re.decideEndpoint)(Rt.bdd,{endpointParams:e,logger:s.logger}))};ze.defaultEndpointResolver=vt;re.customEndpointFunctions.aws=St.awsEndpointFunctions});var m=S((ne)=>{Object.defineProperty(ne,"__esModule",{value:!0});ne.SSOServiceException=ne.__ServiceException=void 0;var Be=G();Object.defineProperty(ne,"__ServiceException",{enumerable:!0,get:function(){return Be.ServiceException}});class oe extends Be.ServiceException{constructor(e){super(e);Object.setPrototypeOf(this,oe.prototype)}}ne.SSOServiceException=oe});var ie=S((Qe)=>{Object.defineProperty(Qe,"__esModule",{value:!0});Qe.UnauthorizedException=Qe.TooManyRequestsException=Qe.ResourceNotFoundException=Qe.InvalidRequestException=void 0;var j=m();class ae extends j.SSOServiceException{name="InvalidRequestException";$fault="client";constructor(e){super({name:"InvalidRequestException",$fault:"client",...e});Object.setPrototypeOf(this,ae.prototype)}}Qe.InvalidRequestException=ae;class ce extends j.SSOServiceException{name="ResourceNotFoundException";$fault="client";constructor(e){super({name:"ResourceNotFoundException",$fault:"client",...e});Object.setPrototypeOf(this,ce.prototype)}}Qe.ResourceNotFoundException=ce;class le extends j.SSOServiceException{name="TooManyRequestsException";$fault="client";constructor(e){super({name:"TooManyRequestsException",$fault:"client",...e});Object.setPrototypeOf(this,le.prototype)}}Qe.TooManyRequestsException=le;class ue extends j.SSOServiceException{name="UnauthorizedException";$fault="client";constructor(e){super({name:"UnauthorizedException",$fault:"client",...e});Object.setPrototypeOf(this,ue.prototype)}}Qe.UnauthorizedException=ue});var de=S((es)=>{Object.defineProperty(es,"__esModule",{value:!0});es.GetRoleCredentials$=es.RoleCredentials$=es.GetRoleCredentialsResponse$=es.GetRoleCredentialsRequest$=es.errorTypeRegistries=es.UnauthorizedException$=es.TooManyRequestsException$=es.ResourceNotFoundException$=es.InvalidRequestException$=es.SSOServiceException$=void 0;var ft="AccessTokenType",qt="GetRoleCredentials",Pt="GetRoleCredentialsRequest",yt="GetRoleCredentialsResponse",gt="InvalidRequestException",Ct="RoleCredentials",wt="ResourceNotFoundException",Nt="SecretAccessKeyType",Dt="SessionTokenType",bt="TooManyRequestsException",$t="UnauthorizedException",At="accountId",Ft="accessKeyId",Ut="accessToken",Mt="account_id",L="client",T="error",Gt="expiration",mt="http",z="httpError",jt="httpHeader",We="httpQuery",H="message",Lt="roleCredentials",Tt="roleName",zt="role_name",Ze="smithy.ts.sdk.synthetic.com.amazonaws.sso",Ht="secretAccessKey",Vt="sessionToken",Bt="x-amz-sso_bearer_token",E="com.amazonaws.sso",Ke=Xe(),V=ie(),Yt=m(),ke=Ke.TypeRegistry.for(Ze);es.SSOServiceException$=[-3,Ze,"SSOServiceException",0,[],[]];ke.registerError(es.SSOServiceException$,Yt.SSOServiceException);var D=Ke.TypeRegistry.for(E);es.InvalidRequestException$=[-3,E,gt,{[T]:L,[z]:400},[H],[0]];D.registerError(es.InvalidRequestException$,V.InvalidRequestException);es.ResourceNotFoundException$=[-3,E,wt,{[T]:L,[z]:404},[H],[0]];D.registerError(es.ResourceNotFoundException$,V.ResourceNotFoundException);es.TooManyRequestsException$=[-3,E,bt,{[T]:L,[z]:429},[H],[0]];D.registerError(es.TooManyRequestsException$,V.TooManyRequestsException);es.UnauthorizedException$=[-3,E,$t,{[T]:L,[z]:401},[H],[0]];D.registerError(es.UnauthorizedException$,V.UnauthorizedException);es.errorTypeRegistries=[ke,D];var Qt=[0,E,ft,8,0],Jt=[0,E,Nt,8,0],Wt=[0,E,Dt,8,0];es.GetRoleCredentialsRequest$=[3,E,Pt,0,[Tt,At,Ut],[[0,{[We]:zt}],[0,{[We]:Mt}],[()=>Qt,{[jt]:Bt}]],3];es.GetRoleCredentialsResponse$=[3,E,yt,0,[Lt],[[()=>es.RoleCredentials$,0]]];es.RoleCredentials$=[3,E,Ct,0,[Ft,Ht,Vt,Gt],[0,[()=>Jt,0],[()=>Wt,0],1]];es.GetRoleCredentials$=[9,E,qt,{[mt]:["GET","/federation/credentials",200]},()=>es.GetRoleCredentialsRequest$,()=>es.GetRoleCredentialsResponse$]});var Ss=S((_s)=>{Object.defineProperty(_s,"__esModule",{value:!0});_s.getRuntimeConfig=void 0;var sr=F(),tr=kt(),rr=ps(),or=G(),nr=Zt(),is=er(),ds=Kt(),ar=ee(),cr=Ve(),lr=de(),ur=(e)=>{return{apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??is.fromBase64,base64Encoder:e?.base64Encoder??is.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??cr.defaultEndpointResolver,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??ar.defaultSSOHttpAuthSchemeProvider,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(s)=>s.getIdentityProvider("aws.auth#sigv4"),signer:new sr.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(s)=>s.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new rr.NoAuthSigner}],logger:e?.logger??new or.NoOpLogger,protocol:e?.protocol??tr.AwsRestJsonProtocol,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:lr.errorTypeRegistries,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:e?.serviceId??"SSO",urlParser:e?.urlParser??nr.parseUrl,utf8Decoder:e?.utf8Decoder??ds.fromUtf8,utf8Encoder:e?.utf8Encoder??ds.toUtf8}};_s.getRuntimeConfig=ur});var Ps=S((fs)=>{Object.defineProperty(fs,"__esModule",{value:!0});fs.getRuntimeConfig=void 0;var Or=pr(),Ir=Or.__importDefault(_r()),hr=Z(),fr=F(),Rs=Er(),B=Is(),qr=Sr(),xs=hs(),q=Rr(),vs=ir(),Os=G(),Pr=xr(),yr=vr(),gr=dr(),Cr=Ss(),wr=(e)=>{(0,Os.emitWarningIfUnsupportedVersion)(process.version);let s=(0,yr.resolveDefaultsModeConfig)(e),t=()=>s().then(Os.loadConfigsForDefaultMode),o=(0,Cr.getRuntimeConfig)(e);(0,hr.emitWarningIfUnsupportedVersion)(process.version);let r={profile:e?.profile,logger:o.logger};return{...o,...e,runtime:"node",defaultsMode:s,authSchemePreference:e?.authSchemePreference??(0,q.loadConfig)(fr.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS,r),bodyLengthChecker:e?.bodyLengthChecker??Pr.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,Rs.createDefaultUserAgentProvider)({serviceId:o.serviceId,clientVersion:Ir.default.version}),maxAttempts:e?.maxAttempts??(0,q.loadConfig)(xs.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??(0,q.loadConfig)(B.NODE_REGION_CONFIG_OPTIONS,{...B.NODE_REGION_CONFIG_FILE_OPTIONS,...r}),requestHandler:vs.NodeHttpHandler.create(e?.requestHandler??t),retryMode:e?.retryMode??(0,q.loadConfig)({...xs.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await t()).retryMode||gr.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??qr.Hash.bind(null,"sha256"),streamCollector:e?.streamCollector??vs.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??(0,q.loadConfig)(B.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,r),useFipsEndpoint:e?.useFipsEndpoint??(0,q.loadConfig)(B.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,r),userAgentAppId:e?.userAgentAppId??(0,q.loadConfig)(Rs.NODE_APP_ID_CONFIG_OPTIONS,r)}};fs.getRuntimeConfig=wr});var $s=S((O)=>{var ys=Nr(),Gr=Dr(),mr=br(),gs=$r(),jr=Is(),pe=ps(),Lr=Xe(),Tr=Ar(),bs=Fr(),Cs=hs(),P=G(),ws=ee(),zr=Ps(),Ns=Ur(),Ds=Mr(),b=de(),Y=ie(),Hr=m(),Vr=(e)=>{return Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"})},Br={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Yr=(e)=>{let{httpAuthSchemes:s,httpAuthSchemeProvider:t,credentials:o}=e;return{setHttpAuthScheme(r){let n=s.findIndex((c)=>c.schemeId===r.schemeId);if(n===-1)s.push(r);else s.splice(n,1,r)},httpAuthSchemes(){return s},setHttpAuthSchemeProvider(r){t=r},httpAuthSchemeProvider(){return t},setCredentials(r){o=r},credentials(){return o}}},Qr=(e)=>{return{httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}},Jr=(e,s)=>{let t=Object.assign(Ns.getAwsRegionExtensionConfiguration(e),P.getDefaultExtensionConfiguration(e),Ds.getHttpHandlerExtensionConfiguration(e),Yr(e));return s.forEach((o)=>o.configure(t)),Object.assign(e,Ns.resolveAwsRegionExtensionConfiguration(t),P.resolveDefaultRuntimeConfig(t),Ds.resolveHttpHandlerRuntimeConfig(t),Qr(t))};class _e extends P.Client{config;constructor(...[e]){let s=zr.getRuntimeConfig(e||{});super(s);this.initConfig=s;let t=Vr(s),o=gs.resolveUserAgentConfig(t),r=Cs.resolveRetryConfig(o),n=jr.resolveRegionConfig(r),c=ys.resolveHostHeaderConfig(n),_=bs.resolveEndpointConfig(c),d=ws.resolveHttpAuthSchemeConfig(_),l=Jr(d,e?.extensions||[]);this.config=l,this.middlewareStack.use(Lr.getSchemaSerdePlugin(this.config)),this.middlewareStack.use(gs.getUserAgentPlugin(this.config)),this.middlewareStack.use(Cs.getRetryPlugin(this.config)),this.middlewareStack.use(Tr.getContentLengthPlugin(this.config)),this.middlewareStack.use(ys.getHostHeaderPlugin(this.config)),this.middlewareStack.use(Gr.getLoggerPlugin(this.config)),this.middlewareStack.use(mr.getRecursionDetectionPlugin(this.config)),this.middlewareStack.use(pe.getHttpAuthSchemeEndpointRuleSetPlugin(this.config,{httpAuthSchemeParametersProvider:ws.defaultSSOHttpAuthSchemeParametersProvider,identityProviderConfigProvider:async(u)=>new pe.DefaultIdentityProviderConfig({"aws.auth#sigv4":u.credentials})})),this.middlewareStack.use(pe.getHttpSigningPlugin(this.config))}destroy(){super.destroy()}}class Ee extends P.Command.classBuilder().ep(Br).m(function(e,s,t,o){return[bs.getEndpointPlugin(t,e.getEndpointParameterInstructions())]}).s("SWBPortalService","GetRoleCredentials",{}).n("SSOClient","GetRoleCredentialsCommand").sc(b.GetRoleCredentials$).build(){}var Wr={GetRoleCredentialsCommand:Ee};class Se extends _e{}P.createAggregatedClient(Wr,Se);O.$Command=P.Command;O.__Client=P.Client;O.SSOServiceException=Hr.SSOServiceException;O.GetRoleCredentialsCommand=Ee;O.SSO=Se;O.SSOClient=_e;Object.prototype.hasOwnProperty.call(b,"__proto__")&&!Object.prototype.hasOwnProperty.call(O,"__proto__")&&Object.defineProperty(O,"__proto__",{enumerable:!0,value:b.__proto__});Object.keys(b).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(O,e))O[e]=b[e]});Object.prototype.hasOwnProperty.call(Y,"__proto__")&&!Object.prototype.hasOwnProperty.call(O,"__proto__")&&Object.defineProperty(O,"__proto__",{enumerable:!0,value:Y.__proto__});Object.keys(Y).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(O,e))O[e]=Y[e]})});var Fs=S((to)=>{var As=$s();to.GetRoleCredentialsCommand=As.GetRoleCredentialsCommand;to.SSOClient=As.SSOClient});var R,Q,Us,ao,Gs=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string"),$=!1,Ms=async({ssoStartUrl:e,ssoSession:s,ssoAccountId:t,ssoRegion:o,ssoRoleName:r,ssoClient:n,clientConfig:c,parentClientConfig:_,callerClientConfig:d,profile:l,filepath:u,configFilepath:C,ignoreCache:x,logger:a})=>{let v,J="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let I=await ao.fromSso({profile:l,filepath:u,configFilepath:C,ignoreCache:x})();v={accessToken:I.token,expiresAt:new Date(I.expiration).toISOString()}}catch(I){throw new R.CredentialsProviderError(I.message,{tryNextLink:$,logger:a})}else try{v=await Q.getSSOTokenFromFile(e)}catch(I){throw new R.CredentialsProviderError("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:$,logger:a})}if(new Date(v.expiresAt).getTime()-Date.now()<=0)throw new R.CredentialsProviderError("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:$,logger:a});let{accessToken:Re}=v,{SSOClient:y,GetRoleCredentialsCommand:A}=await Promise.resolve().then(function(){return Fs()}),js=n||new y(Object.assign({},c??{},{logger:c?.logger??d?.logger??_?.logger,region:c?.region??o,userAgentAppId:c?.userAgentAppId??d?.userAgentAppId??_?.userAgentAppId})),xe;try{xe=await js.send(new A({accountId:t,roleName:r,accessToken:Re}))}catch(I){throw new R.CredentialsProviderError(I,{tryNextLink:$,logger:a})}let{roleCredentials:{accessKeyId:ve,secretAccessKey:Oe,sessionToken:Ie,expiration:he,credentialScope:fe,accountId:qe}={}}=xe;if(!ve||!Oe||!Ie||!he)throw new R.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:$,logger:a});let W={accessKeyId:ve,secretAccessKey:Oe,sessionToken:Ie,expiration:new Date(he),...fe&&{credentialScope:fe},...qe&&{accountId:qe}};if(s)Us.setCredentialFeature(W,"CREDENTIALS_SSO","s");else Us.setCredentialFeature(W,"CREDENTIALS_SSO_LEGACY","u");return W},ms=(e,s)=>{let{sso_start_url:t,sso_account_id:o,sso_region:r,sso_role_name:n}=e;if(!t||!o||!r||!n)throw new R.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
+Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:s});return e},co=(e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:t,ssoAccountId:o,ssoRegion:r,ssoRoleName:n,ssoSession:c}=e,{ssoClient:_}=e,d=Q.getProfileName({profile:e.profile??s?.profile});if(!t&&!o&&!r&&!n&&!c){let u=(await Q.parseKnownFiles(e))[d];if(!u)throw new R.CredentialsProviderError(`Profile ${d} was not found.`,{logger:e.logger});if(!Gs(u))throw new R.CredentialsProviderError(`Profile ${d} is not configured with SSO credentials.`,{logger:e.logger});if(u?.sso_session){let y=(await Q.loadSsoSessionData(e))[u.sso_session],A=` configurations in profile ${d} and sso-session ${u.sso_session}`;if(r&&r!==y.sso_region)throw new R.CredentialsProviderError("Conflicting SSO region"+A,{tryNextLink:!1,logger:e.logger});if(t&&t!==y.sso_start_url)throw new R.CredentialsProviderError("Conflicting SSO start_url"+A,{tryNextLink:!1,logger:e.logger});u.sso_region=y.sso_region,u.sso_start_url=y.sso_start_url}let{sso_start_url:C,sso_account_id:x,sso_region:a,sso_role_name:v,sso_session:J}=ms(u,e.logger);return Ms({ssoStartUrl:C,ssoSession:J,ssoAccountId:x,ssoRegion:a,ssoRoleName:v,ssoClient:_,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:d,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}else if(!t||!o||!r||!n)throw new R.CredentialsProviderError('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});else return Ms({ssoStartUrl:t,ssoSession:c,ssoAccountId:o,ssoRegion:r,ssoRoleName:n,ssoClient:_,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:d,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})},lo,uo,io;var po=no(()=>{R=Ce(),Q=we(),Us=Z(),ao=De();lo=co,uo=Gs,io=ms});po();export{io as validateSsoProfile,uo as isSsoProfile,lo as fromSSO};export default {get validateSsoProfile(){return io},get isSsoProfile(){return uo},get fromSSO(){return lo}};

package/dist/chunks/index-0.6.0-8r6qtdvj.mjs

@@ -0,0 +1,2 @@
+import{Zoa as u,apa as k}from"./cli-0.6.0-59hncecf.mjs";import{fpa as f,gpa as y}from"./cli-0.6.0-szxjcmcn.mjs";function j(z){return new Promise((G,U)=>{let K=g.request({method:"GET",...z,hostname:z.hostname?.replace(/^\[(.+)\]$/,"$1")});K.on("error",(Q)=>{U(Object.assign(new X.ProviderError("Unable to connect to instance metadata service"),Q)),K.destroy()}),K.on("timeout",()=>{U(new X.ProviderError("TimeoutError from instance metadata service")),K.destroy()}),K.on("response",(Q)=>{let{statusCode:Z=400}=Q;if(Z<200||300<=Z)U(Object.assign(new X.ProviderError("Error response received from instance metadata service"),{statusCode:Z})),K.destroy();let w=[];Q.on("data",($)=>{w.push($)}),Q.on("end",()=>{G(Buffer.concat(w)),K.destroy()})}),K.end()})}var m,X,g,c,C=(z)=>Boolean(z)&&typeof z==="object"&&typeof z.AccessKeyId==="string"&&typeof z.SecretAccessKey==="string"&&typeof z.Token==="string"&&typeof z.Expiration==="string",T=(z)=>({accessKeyId:z.AccessKeyId,secretAccessKey:z.SecretAccessKey,sessionToken:z.Token,expiration:new Date(z.Expiration),...z.AccountId&&{accountId:z.AccountId}}),b=1000,F=0,M=({maxRetries:z=F,timeout:G=b})=>({maxRetries:z,timeout:G}),N=(z,G)=>{let U=z();for(let K=0;K<G;K++)U=U.catch(z);return U},L="AWS_CONTAINER_CREDENTIALS_FULL_URI",_="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",P="AWS_CONTAINER_AUTHORIZATION_TOKEN",p=(z={})=>{let{timeout:G,maxRetries:U}=M(z);return()=>N(async()=>{let K=await n({logger:z.logger}),Q=JSON.parse(await d(G,K));if(!C(Q))throw new X.CredentialsProviderError("Invalid response received from instance metadata service.",{logger:z.logger});return T(Q)},U)},d=async(z,G)=>{if(process.env[P])G.headers={...G.headers,Authorization:process.env[P]};return(await j({...G,timeout:z})).toString()},l="169.254.170.2",a,s,n=async({logger:z})=>{if(process.env[_])return{hostname:l,path:process.env[_]};if(process.env[L]){let G=m.parse(process.env[L]);if(!G.hostname||!(G.hostname in a))throw new X.CredentialsProviderError(`${G.hostname} is not a valid container metadata service hostname`,{tryNextLink:!1,logger:z});if(!G.protocol||!(G.protocol in s))throw new X.CredentialsProviderError(`${G.protocol} is not a valid container metadata service protocol`,{tryNextLink:!1,logger:z});return{...G,port:G.port?parseInt(G.port,10):void 0}}throw new X.CredentialsProviderError(`The container metadata credential provider cannot be used unless the ${_} or ${L} environment variable is set`,{tryNextLink:!1,logger:z})},V,S=void 0,o="AWS_EC2_METADATA_SERVICE_ENDPOINT",t="ec2_metadata_service_endpoint",i,A,r="AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE",e="ec2_metadata_service_endpoint_mode",zz,v=async()=>c.parseUrl(await Gz()||await Kz()),Gz=async()=>X.loadConfig(i)(),Kz=async()=>{let z=await X.loadConfig(zz)();switch(z){case A.IPv4:return S.IPv4;case A.IPv6:return S.IPv6;default:throw Error(`Unsupported endpoint mode: ${z}. Select from ${Object.values(A)}`)}},Qz=300,Uz=300,Xz="https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html",h=(z,G)=>{let U=Qz+Math.floor(Math.random()*Uz),K=new Date(Date.now()+U*1000);G.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(K)}.
+For more information, please visit: `+Xz);let Q=z.originalExpiration??z.expiration;return{...z,...Q?{originalExpiration:Q}:{},expiration:K}},Zz=(z,G={})=>{let U=G?.logger||console,K;return async()=>{let Q;try{if(Q=await z(),Q.expiration&&Q.expiration.getTime()<Date.now())Q=h(Q,U)}catch(Z){if(K)U.warn("Credential renew failed: ",Z),Q=h(K,U);else throw Z}return K=Q,Q}},x="/latest/meta-data/iam/security-credentials/",$z="/latest/api/token",B="AWS_EC2_METADATA_V1_DISABLED",q="ec2_metadata_v1_disabled",I="x-aws-ec2-metadata-token",Hz=(z={})=>Zz(Jz(z),{logger:z.logger}),Jz=(z={})=>{let G=!1,{logger:U,profile:K}=z,{timeout:Q,maxRetries:Z}=M(z),w=async($,D)=>{if(G||D.headers?.[I]==null){let H=!1,J=!1,R=await X.loadConfig({environmentVariableSelector:(Y)=>{let W=Y[B];if(J=!!W&&W!=="false",W===void 0)throw new X.CredentialsProviderError(`${B} not set in env, checking config file next.`,{logger:z.logger});return J},configFileSelector:(Y)=>{let W=Y[q];return H=!!W&&W!=="false",H},default:!1},{profile:K})();if(z.ec2MetadataV1Disabled||R){let Y=[];if(z.ec2MetadataV1Disabled)Y.push("credential provider initialization (runtime option ec2MetadataV1Disabled)");if(H)Y.push(`config file profile (${q})`);if(J)Y.push(`process environment variable (${B})`);throw new V(`AWS EC2 Metadata v1 fallback has been blocked by AWS SDK configuration in the following: [${Y.join(", ")}].`)}}let E=(await N(async()=>{let H;try{H=await wz(D)}catch(J){if(J.statusCode===401)G=!1;throw J}return H},$)).trim();return N(async()=>{let H;try{H=await Dz(E,D,z)}catch(J){if(J.statusCode===401)G=!1;throw J}return H},$)};return async()=>{let $=await v();if(G)return U?.debug("AWS SDK Instance Metadata","using v1 fallback (no token fetch)"),w(Z,{...$,timeout:Q});else{let D;try{D=(await Yz({...$,timeout:Q})).toString()}catch(O){if(O?.statusCode===400)throw Object.assign(O,{message:"EC2 Metadata token request returned error"});else if(O.message==="TimeoutError"||[403,404,405].includes(O.statusCode))G=!0;return U?.debug("AWS SDK Instance Metadata","using v1 fallback (initial)"),w(Z,{...$,timeout:Q})}return w(Z,{...$,headers:{[I]:D},timeout:Q})}}},Yz=async(z)=>j({...z,path:$z,method:"PUT",headers:{"x-aws-ec2-metadata-token-ttl-seconds":"21600"}}),wz=async(z)=>(await j({...z,path:x})).toString(),Dz=async(z,G,U)=>{let K=JSON.parse((await j({...G,path:x+z})).toString());if(!C(K))throw new X.CredentialsProviderError("Invalid response received from instance metadata service.",{logger:U.logger});return T(K)},Wz,Az,Oz,Sz,jz,Lz,_z,Bz,Nz,Pz;var Mz=f(()=>{m=y("node:url"),X=u(),g=y("node:http"),c=k();a={localhost:!0,"127.0.0.1":!0},s={"http:":!0,"https:":!0};V=class V extends X.CredentialsProviderError{tryNextLink;name="InstanceMetadataV1FallbackError";constructor(z,G=!0){super(z,G);this.tryNextLink=G,Object.setPrototypeOf(this,V.prototype)}};(function(z){z.IPv4="http://169.254.169.254",z.IPv6="http://[fd00:ec2::254]"})(S||(S={}));i={environmentVariableSelector:(z)=>z[o],configFileSelector:(z)=>z[t],default:void 0};(function(z){z.IPv4="IPv4",z.IPv6="IPv6"})(A||(A={}));zz={environmentVariableSelector:(z)=>z[r],configFileSelector:(z)=>z[e],default:A.IPv4};Wz=F,Az=b,Oz=P,Sz=L,jz=_,Lz=p,_z=Hz,Bz=v,Nz=j,Pz=M});Mz();export{Pz as providerConfigFromInit,Nz as httpRequest,Bz as getInstanceMetadataEndpoint,_z as fromInstanceMetadata,Lz as fromContainerMetadata,S as Endpoint,jz as ENV_CMDS_RELATIVE_URI,Sz as ENV_CMDS_FULL_URI,Oz as ENV_CMDS_AUTH_TOKEN,Az as DEFAULT_TIMEOUT,Wz as DEFAULT_MAX_RETRIES};export default {get providerConfigFromInit(){return Pz},get httpRequest(){return Nz},get getInstanceMetadataEndpoint(){return Bz},get fromInstanceMetadata(){return _z},get fromContainerMetadata(){return Lz},get Endpoint(){return S},get ENV_CMDS_RELATIVE_URI(){return jz},get ENV_CMDS_FULL_URI(){return Sz},get ENV_CMDS_AUTH_TOKEN(){return Oz},get DEFAULT_TIMEOUT(){return Az},get DEFAULT_MAX_RETRIES(){return Wz}};

package/dist/chunks/index-0.6.0-9br46rw2.mjs

@@ -0,0 +1 @@
+import{Voa as a}from"./cli-0.6.0-r8g9yjbx.mjs";import"./cli-0.6.0-59hncecf.mjs";import"./cli-0.6.0-szxjcmcn.mjs";export default a();

package/dist/chunks/index-0.6.0-apr64dfb.mjs

@@ -0,0 +1 @@
+import{E6 as a}from"./cli-0.6.0-fx65e0yv.mjs";import"./cli-0.6.0-jpsf0t8a.mjs";import"./cli-0.6.0-59hncecf.mjs";import"./cli-0.6.0-szxjcmcn.mjs";export default a();