@claudiolabs/claudin 1.0.0 → 1.0.3

package/dist/chunks/index-1.0.3-fp6xhcab.mjs

@@ -0,0 +1,2 @@
+import{A8 as xr,B8 as vr,C8 as Kt,D8 as kt,E8 as er,F8 as Ur,G8 as Mr,g8 as F,h8 as Nr,i8 as Dr,j8 as br,k8 as Ge,l8 as Zt,m8 as Et,n8 as $r,o8 as Is,p8 as Ar,q8 as Fr,r8 as hs,s8 as G,t8 as tt,u8 as pr,v8 as _r,x8 as Er,y8 as Sr,z8 as Rr}from"./cli-1.0.3-e0s97hx3.mjs";import{H8 as ps}from"./cli-1.0.3-mkse8qp1.mjs";import{I8 as we}from"./cli-1.0.3-7m0nfffq.mjs";import{Iqa as dr,Jqa as Z,Kqa as Ce}from"./cli-1.0.3-v0jtfqtw.mjs";import{Lqa as ir}from"./cli-1.0.3-1grrrgvh.mjs";import{Nqa as Xe}from"./cli-1.0.3-k99msp02.mjs";import{Tqa as ge,Vqa as S,Xqa as no,Yqa as X}from"./cli-1.0.3-vzm5gxzn.mjs";var De=S((Zs)=>{var Ls=Z(),Ts=F(),p=Ce(),w=we(),zs=X("node:fs"),Hs=({logger:e,signingName:s}={})=>async()=>{if(e?.debug?.("@aws-sdk/token-providers - fromEnvSigningName"),!s)throw new p.TokenProviderError("Please pass 'signingName' to compute environment variable key",{logger:e});let t=Ts.getBearerTokenEnvKey(s);if(!(t in process.env))throw new p.TokenProviderError(`Token not present in '${t}' environment variable`,{logger:e});let o={token:process.env[t]};return Ls.setTokenFeature(o,"BEARER_SERVICE_ENV_VARS","3"),o},Vs=300000,K="To refresh this SSO session run 'aws sso login' with the corresponding profile.",Bs=async(e,s={},t)=>{let{SSOOIDCClient:o}=await import("./index-1.0.3-j1rfqkax.mjs").then((m)=>ge(m.default)),r=(c)=>s.clientConfig?.[c]??s.parentClientConfig?.[c]??t?.[c];return new o(Object.assign({},s.clientConfig??{},{region:e??s.clientConfig?.region,logger:r("logger"),userAgentAppId:r("userAgentAppId")}))},Ys=async(e,s,t={},o)=>{let{CreateTokenCommand:r}=await import("./index-1.0.3-j1rfqkax.mjs").then((m)=>ge(m.default));return(await Bs(s,t,o)).send(new r({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))},Pe=(e)=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new p.TokenProviderError(`Token is expired. ${K}`,!1)},h=(e,s,t=!1)=>{if(typeof s>"u")throw new p.TokenProviderError(`Value not present for '${e}' in SSO Token${t?". Cannot refresh":""}. ${K}`,!1)},{writeFile:Qs}=zs.promises,Js=(e,s)=>{let t=w.getSSOTokenFilepath(e),o=JSON.stringify(s,null,2);return Qs(t,o)},ye=new Date(0),Ne=(e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let t=await w.parseKnownFiles(e),o=w.getProfileName({profile:e.profile??s?.profile}),r=t[o];if(!r)throw new p.TokenProviderError(`Profile '${o}' could not be found in shared credentials file.`,!1);else if(!r.sso_session)throw new p.TokenProviderError(`Profile '${o}' is missing required property 'sso_session'.`);let n=r.sso_session,_=(await w.loadSsoSessionData(e))[n];if(!_)throw new p.TokenProviderError(`Sso session '${n}' could not be found in shared credentials file.`,!1);for(let a of["sso_start_url","sso_region"])if(!_[a])throw new p.TokenProviderError(`Sso session '${n}' is missing required property '${a}'.`,!1);_.sso_start_url;let d=_.sso_region,l;try{l=await w.getSSOTokenFromFile(n)}catch(a){throw new p.TokenProviderError(`The SSO session token associated with profile=${o} was not found or is invalid. ${K}`,!1)}h("accessToken",l.accessToken),h("expiresAt",l.expiresAt);let{accessToken:u,expiresAt:C}=l,x={token:u,expiration:new Date(C)};if(x.expiration.getTime()-Date.now()>Vs)return x;if(Date.now()-ye.getTime()<30000)return Pe(x),x;h("clientId",l.clientId,!0),h("clientSecret",l.clientSecret,!0),h("refreshToken",l.refreshToken,!0);try{ye.setTime(Date.now());let a=await Ys(l,d,e,s);h("accessToken",a.accessToken),h("expiresIn",a.expiresIn);let v=new Date(Date.now()+a.expiresIn*1000);try{await Js(n,{...l,accessToken:a.accessToken,expiresAt:v.toISOString(),refreshToken:a.refreshToken})}catch(J){}return{token:a.accessToken,expiration:v}}catch(a){return Pe(x),x}},Ws=({token:e,logger:s})=>async()=>{if(s?.debug("@aws-sdk/token-providers - fromStatic"),!e||!e.token)throw new p.TokenProviderError("Please pass a valid token to fromStatic",!1);return e},Xs=(e={})=>p.memoize(p.chain(Ne(e),async()=>{throw new p.TokenProviderError("Could not load token from any providers",!1)}),(s)=>s.expiration!==void 0&&s.expiration.getTime()-Date.now()<300000,(s)=>s.expiration!==void 0);Zs.fromEnvSigningName=Hs;Zs.fromSso=Ne;Zs.fromStatic=Ws;Zs.nodeProvider=Xs});var ee=S((be)=>{Object.defineProperty(be,"__esModule",{value:!0});be.resolveHttpAuthSchemeConfig=be.defaultSSOHttpAuthSchemeProvider=be.defaultSSOHttpAuthSchemeParametersProvider=void 0;var rt=F(),k=tt(),ot=async(e,s,t)=>{return{operation:(0,k.getSmithyContext)(s).operation,region:await(0,k.normalizeProvider)(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}};be.defaultSSOHttpAuthSchemeParametersProvider=ot;function nt(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:e.region},propertiesExtractor:(s,t)=>({signingProperties:{config:s,context:t}})}}function at(e){return{schemeId:"smithy.api#noAuth"}}var ct=(e)=>{let s=[];switch(e.operation){case"GetRoleCredentials":{s.push(at(e));break}default:s.push(nt(e))}return s};be.defaultSSOHttpAuthSchemeProvider=ct;var lt=(e)=>{let s=(0,rt.resolveAwsSdkSigV4Config)(e);return Object.assign(s,{authSchemePreference:(0,k.normalizeProvider)(e.authSchemePreference??[])})};be.resolveHttpAuthSchemeConfig=lt});var Te=S((je)=>{Object.defineProperty(je,"__esModule",{value:!0});je.bdd=void 0;var dt=Ge(),N="ref",f=-1,U=!0,Ae="isSet",me="PartitionResult",M="booleanEquals",se="getAttr",Fe={[N]:"Endpoint"},te={[N]:me},g={},Ue=[{[N]:"Region"}],Me={conditions:[[Ae,[Fe]],[Ae,Ue],["aws.partition",Ue,me],[M,[{[N]:"UseFIPS"},U]],[M,[{[N]:"UseDualStack"},U]],[M,[{fn:se,argv:[te,"supportsDualStack"]},U]],[M,[{fn:se,argv:[te,"supportsFIPS"]},U]],["stringEquals",[{fn:se,argv:[te,"name"]},"aws-us-gov"]]],results:[[f],[f,"Invalid Configuration: FIPS and custom endpoint are not supported"],[f,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[Fe,g],["https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",g],[f,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://portal.sso.{Region}.amazonaws.com",g],["https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",g],[f,"FIPS is enabled but this partition does not support FIPS"],["https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",g],[f,"DualStack is enabled but this partition does not support DualStack"],["https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",g],[f,"Invalid Configuration: Missing Region"]]},pt=2,i=1e8,_t=new Int32Array([-1,1,-1,0,13,3,1,4,i+12,2,5,i+12,3,8,6,4,7,i+11,5,i+9,i+10,4,11,9,6,10,i+8,7,i+6,i+7,5,12,i+5,6,i+4,i+5,3,i+1,14,4,i+2,i+3]);je.bdd=dt.BinaryDecisionDiagram.from(_t,pt,Me.conditions,Me.results)});var Ve=S((ze)=>{Object.defineProperty(ze,"__esModule",{value:!0});ze.defaultEndpointResolver=void 0;var St=Et(),re=Ge(),Rt=Te(),xt=new re.EndpointCache({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),vt=(e,s={})=>{return xt.get(e,()=>(0,re.decideEndpoint)(Rt.bdd,{endpointParams:e,logger:s.logger}))};ze.defaultEndpointResolver=vt;re.customEndpointFunctions.aws=St.awsEndpointFunctions});var m=S((ne)=>{Object.defineProperty(ne,"__esModule",{value:!0});ne.SSOServiceException=ne.__ServiceException=void 0;var Be=G();Object.defineProperty(ne,"__ServiceException",{enumerable:!0,get:function(){return Be.ServiceException}});class oe extends Be.ServiceException{constructor(e){super(e);Object.setPrototypeOf(this,oe.prototype)}}ne.SSOServiceException=oe});var ie=S((Qe)=>{Object.defineProperty(Qe,"__esModule",{value:!0});Qe.UnauthorizedException=Qe.TooManyRequestsException=Qe.ResourceNotFoundException=Qe.InvalidRequestException=void 0;var j=m();class ae extends j.SSOServiceException{name="InvalidRequestException";$fault="client";constructor(e){super({name:"InvalidRequestException",$fault:"client",...e});Object.setPrototypeOf(this,ae.prototype)}}Qe.InvalidRequestException=ae;class ce extends j.SSOServiceException{name="ResourceNotFoundException";$fault="client";constructor(e){super({name:"ResourceNotFoundException",$fault:"client",...e});Object.setPrototypeOf(this,ce.prototype)}}Qe.ResourceNotFoundException=ce;class le extends j.SSOServiceException{name="TooManyRequestsException";$fault="client";constructor(e){super({name:"TooManyRequestsException",$fault:"client",...e});Object.setPrototypeOf(this,le.prototype)}}Qe.TooManyRequestsException=le;class ue extends j.SSOServiceException{name="UnauthorizedException";$fault="client";constructor(e){super({name:"UnauthorizedException",$fault:"client",...e});Object.setPrototypeOf(this,ue.prototype)}}Qe.UnauthorizedException=ue});var de=S((es)=>{Object.defineProperty(es,"__esModule",{value:!0});es.GetRoleCredentials$=es.RoleCredentials$=es.GetRoleCredentialsResponse$=es.GetRoleCredentialsRequest$=es.errorTypeRegistries=es.UnauthorizedException$=es.TooManyRequestsException$=es.ResourceNotFoundException$=es.InvalidRequestException$=es.SSOServiceException$=void 0;var ft="AccessTokenType",qt="GetRoleCredentials",Pt="GetRoleCredentialsRequest",yt="GetRoleCredentialsResponse",gt="InvalidRequestException",Ct="RoleCredentials",wt="ResourceNotFoundException",Nt="SecretAccessKeyType",Dt="SessionTokenType",bt="TooManyRequestsException",$t="UnauthorizedException",At="accountId",Ft="accessKeyId",Ut="accessToken",Mt="account_id",L="client",T="error",Gt="expiration",mt="http",z="httpError",jt="httpHeader",We="httpQuery",H="message",Lt="roleCredentials",Tt="roleName",zt="role_name",Ze="smithy.ts.sdk.synthetic.com.amazonaws.sso",Ht="secretAccessKey",Vt="sessionToken",Bt="x-amz-sso_bearer_token",E="com.amazonaws.sso",Ke=Xe(),V=ie(),Yt=m(),ke=Ke.TypeRegistry.for(Ze);es.SSOServiceException$=[-3,Ze,"SSOServiceException",0,[],[]];ke.registerError(es.SSOServiceException$,Yt.SSOServiceException);var D=Ke.TypeRegistry.for(E);es.InvalidRequestException$=[-3,E,gt,{[T]:L,[z]:400},[H],[0]];D.registerError(es.InvalidRequestException$,V.InvalidRequestException);es.ResourceNotFoundException$=[-3,E,wt,{[T]:L,[z]:404},[H],[0]];D.registerError(es.ResourceNotFoundException$,V.ResourceNotFoundException);es.TooManyRequestsException$=[-3,E,bt,{[T]:L,[z]:429},[H],[0]];D.registerError(es.TooManyRequestsException$,V.TooManyRequestsException);es.UnauthorizedException$=[-3,E,$t,{[T]:L,[z]:401},[H],[0]];D.registerError(es.UnauthorizedException$,V.UnauthorizedException);es.errorTypeRegistries=[ke,D];var Qt=[0,E,ft,8,0],Jt=[0,E,Nt,8,0],Wt=[0,E,Dt,8,0];es.GetRoleCredentialsRequest$=[3,E,Pt,0,[Tt,At,Ut],[[0,{[We]:zt}],[0,{[We]:Mt}],[()=>Qt,{[jt]:Bt}]],3];es.GetRoleCredentialsResponse$=[3,E,yt,0,[Lt],[[()=>es.RoleCredentials$,0]]];es.RoleCredentials$=[3,E,Ct,0,[Ft,Ht,Vt,Gt],[0,[()=>Jt,0],[()=>Wt,0],1]];es.GetRoleCredentials$=[9,E,qt,{[mt]:["GET","/federation/credentials",200]},()=>es.GetRoleCredentialsRequest$,()=>es.GetRoleCredentialsResponse$]});var Ss=S((_s)=>{Object.defineProperty(_s,"__esModule",{value:!0});_s.getRuntimeConfig=void 0;var sr=F(),tr=kt(),rr=ps(),or=G(),nr=Zt(),is=er(),ds=Kt(),ar=ee(),cr=Ve(),lr=de(),ur=(e)=>{return{apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??is.fromBase64,base64Encoder:e?.base64Encoder??is.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??cr.defaultEndpointResolver,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??ar.defaultSSOHttpAuthSchemeProvider,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(s)=>s.getIdentityProvider("aws.auth#sigv4"),signer:new sr.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(s)=>s.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new rr.NoAuthSigner}],logger:e?.logger??new or.NoOpLogger,protocol:e?.protocol??tr.AwsRestJsonProtocol,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:lr.errorTypeRegistries,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:e?.serviceId??"SSO",urlParser:e?.urlParser??nr.parseUrl,utf8Decoder:e?.utf8Decoder??ds.fromUtf8,utf8Encoder:e?.utf8Encoder??ds.toUtf8}};_s.getRuntimeConfig=ur});var Ps=S((fs)=>{Object.defineProperty(fs,"__esModule",{value:!0});fs.getRuntimeConfig=void 0;var Or=pr(),Ir=Or.__importDefault(_r()),hr=Z(),fr=F(),Rs=Er(),B=Is(),qr=Sr(),xs=hs(),q=Rr(),vs=ir(),Os=G(),Pr=xr(),yr=vr(),gr=dr(),Cr=Ss(),wr=(e)=>{(0,Os.emitWarningIfUnsupportedVersion)(process.version);let s=(0,yr.resolveDefaultsModeConfig)(e),t=()=>s().then(Os.loadConfigsForDefaultMode),o=(0,Cr.getRuntimeConfig)(e);(0,hr.emitWarningIfUnsupportedVersion)(process.version);let r={profile:e?.profile,logger:o.logger};return{...o,...e,runtime:"node",defaultsMode:s,authSchemePreference:e?.authSchemePreference??(0,q.loadConfig)(fr.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS,r),bodyLengthChecker:e?.bodyLengthChecker??Pr.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,Rs.createDefaultUserAgentProvider)({serviceId:o.serviceId,clientVersion:Ir.default.version}),maxAttempts:e?.maxAttempts??(0,q.loadConfig)(xs.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??(0,q.loadConfig)(B.NODE_REGION_CONFIG_OPTIONS,{...B.NODE_REGION_CONFIG_FILE_OPTIONS,...r}),requestHandler:vs.NodeHttpHandler.create(e?.requestHandler??t),retryMode:e?.retryMode??(0,q.loadConfig)({...xs.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await t()).retryMode||gr.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??qr.Hash.bind(null,"sha256"),streamCollector:e?.streamCollector??vs.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??(0,q.loadConfig)(B.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,r),useFipsEndpoint:e?.useFipsEndpoint??(0,q.loadConfig)(B.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,r),userAgentAppId:e?.userAgentAppId??(0,q.loadConfig)(Rs.NODE_APP_ID_CONFIG_OPTIONS,r)}};fs.getRuntimeConfig=wr});var $s=S((O)=>{var ys=Nr(),Gr=Dr(),mr=br(),gs=$r(),jr=Is(),pe=ps(),Lr=Xe(),Tr=Ar(),bs=Fr(),Cs=hs(),P=G(),ws=ee(),zr=Ps(),Ns=Ur(),Ds=Mr(),b=de(),Y=ie(),Hr=m(),Vr=(e)=>{return Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"})},Br={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Yr=(e)=>{let{httpAuthSchemes:s,httpAuthSchemeProvider:t,credentials:o}=e;return{setHttpAuthScheme(r){let n=s.findIndex((c)=>c.schemeId===r.schemeId);if(n===-1)s.push(r);else s.splice(n,1,r)},httpAuthSchemes(){return s},setHttpAuthSchemeProvider(r){t=r},httpAuthSchemeProvider(){return t},setCredentials(r){o=r},credentials(){return o}}},Qr=(e)=>{return{httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}},Jr=(e,s)=>{let t=Object.assign(Ns.getAwsRegionExtensionConfiguration(e),P.getDefaultExtensionConfiguration(e),Ds.getHttpHandlerExtensionConfiguration(e),Yr(e));return s.forEach((o)=>o.configure(t)),Object.assign(e,Ns.resolveAwsRegionExtensionConfiguration(t),P.resolveDefaultRuntimeConfig(t),Ds.resolveHttpHandlerRuntimeConfig(t),Qr(t))};class _e extends P.Client{config;constructor(...[e]){let s=zr.getRuntimeConfig(e||{});super(s);this.initConfig=s;let t=Vr(s),o=gs.resolveUserAgentConfig(t),r=Cs.resolveRetryConfig(o),n=jr.resolveRegionConfig(r),c=ys.resolveHostHeaderConfig(n),_=bs.resolveEndpointConfig(c),d=ws.resolveHttpAuthSchemeConfig(_),l=Jr(d,e?.extensions||[]);this.config=l,this.middlewareStack.use(Lr.getSchemaSerdePlugin(this.config)),this.middlewareStack.use(gs.getUserAgentPlugin(this.config)),this.middlewareStack.use(Cs.getRetryPlugin(this.config)),this.middlewareStack.use(Tr.getContentLengthPlugin(this.config)),this.middlewareStack.use(ys.getHostHeaderPlugin(this.config)),this.middlewareStack.use(Gr.getLoggerPlugin(this.config)),this.middlewareStack.use(mr.getRecursionDetectionPlugin(this.config)),this.middlewareStack.use(pe.getHttpAuthSchemeEndpointRuleSetPlugin(this.config,{httpAuthSchemeParametersProvider:ws.defaultSSOHttpAuthSchemeParametersProvider,identityProviderConfigProvider:async(u)=>new pe.DefaultIdentityProviderConfig({"aws.auth#sigv4":u.credentials})})),this.middlewareStack.use(pe.getHttpSigningPlugin(this.config))}destroy(){super.destroy()}}class Ee extends P.Command.classBuilder().ep(Br).m(function(e,s,t,o){return[bs.getEndpointPlugin(t,e.getEndpointParameterInstructions())]}).s("SWBPortalService","GetRoleCredentials",{}).n("SSOClient","GetRoleCredentialsCommand").sc(b.GetRoleCredentials$).build(){}var Wr={GetRoleCredentialsCommand:Ee};class Se extends _e{}P.createAggregatedClient(Wr,Se);O.$Command=P.Command;O.__Client=P.Client;O.SSOServiceException=Hr.SSOServiceException;O.GetRoleCredentialsCommand=Ee;O.SSO=Se;O.SSOClient=_e;Object.prototype.hasOwnProperty.call(b,"__proto__")&&!Object.prototype.hasOwnProperty.call(O,"__proto__")&&Object.defineProperty(O,"__proto__",{enumerable:!0,value:b.__proto__});Object.keys(b).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(O,e))O[e]=b[e]});Object.prototype.hasOwnProperty.call(Y,"__proto__")&&!Object.prototype.hasOwnProperty.call(O,"__proto__")&&Object.defineProperty(O,"__proto__",{enumerable:!0,value:Y.__proto__});Object.keys(Y).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(O,e))O[e]=Y[e]})});var Fs=S((to)=>{var As=$s();to.GetRoleCredentialsCommand=As.GetRoleCredentialsCommand;to.SSOClient=As.SSOClient});var R,Q,Us,ao,Gs=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string"),$=!1,Ms=async({ssoStartUrl:e,ssoSession:s,ssoAccountId:t,ssoRegion:o,ssoRoleName:r,ssoClient:n,clientConfig:c,parentClientConfig:_,callerClientConfig:d,profile:l,filepath:u,configFilepath:C,ignoreCache:x,logger:a})=>{let v,J="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let I=await ao.fromSso({profile:l,filepath:u,configFilepath:C,ignoreCache:x})();v={accessToken:I.token,expiresAt:new Date(I.expiration).toISOString()}}catch(I){throw new R.CredentialsProviderError(I.message,{tryNextLink:$,logger:a})}else try{v=await Q.getSSOTokenFromFile(e)}catch(I){throw new R.CredentialsProviderError("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:$,logger:a})}if(new Date(v.expiresAt).getTime()-Date.now()<=0)throw new R.CredentialsProviderError("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:$,logger:a});let{accessToken:Re}=v,{SSOClient:y,GetRoleCredentialsCommand:A}=await Promise.resolve().then(function(){return Fs()}),js=n||new y(Object.assign({},c??{},{logger:c?.logger??d?.logger??_?.logger,region:c?.region??o,userAgentAppId:c?.userAgentAppId??d?.userAgentAppId??_?.userAgentAppId})),xe;try{xe=await js.send(new A({accountId:t,roleName:r,accessToken:Re}))}catch(I){throw new R.CredentialsProviderError(I,{tryNextLink:$,logger:a})}let{roleCredentials:{accessKeyId:ve,secretAccessKey:Oe,sessionToken:Ie,expiration:he,credentialScope:fe,accountId:qe}={}}=xe;if(!ve||!Oe||!Ie||!he)throw new R.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:$,logger:a});let W={accessKeyId:ve,secretAccessKey:Oe,sessionToken:Ie,expiration:new Date(he),...fe&&{credentialScope:fe},...qe&&{accountId:qe}};if(s)Us.setCredentialFeature(W,"CREDENTIALS_SSO","s");else Us.setCredentialFeature(W,"CREDENTIALS_SSO_LEGACY","u");return W},ms=(e,s)=>{let{sso_start_url:t,sso_account_id:o,sso_region:r,sso_role_name:n}=e;if(!t||!o||!r||!n)throw new R.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
+Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:s});return e},co=(e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:t,ssoAccountId:o,ssoRegion:r,ssoRoleName:n,ssoSession:c}=e,{ssoClient:_}=e,d=Q.getProfileName({profile:e.profile??s?.profile});if(!t&&!o&&!r&&!n&&!c){let u=(await Q.parseKnownFiles(e))[d];if(!u)throw new R.CredentialsProviderError(`Profile ${d} was not found.`,{logger:e.logger});if(!Gs(u))throw new R.CredentialsProviderError(`Profile ${d} is not configured with SSO credentials.`,{logger:e.logger});if(u?.sso_session){let y=(await Q.loadSsoSessionData(e))[u.sso_session],A=` configurations in profile ${d} and sso-session ${u.sso_session}`;if(r&&r!==y.sso_region)throw new R.CredentialsProviderError("Conflicting SSO region"+A,{tryNextLink:!1,logger:e.logger});if(t&&t!==y.sso_start_url)throw new R.CredentialsProviderError("Conflicting SSO start_url"+A,{tryNextLink:!1,logger:e.logger});u.sso_region=y.sso_region,u.sso_start_url=y.sso_start_url}let{sso_start_url:C,sso_account_id:x,sso_region:a,sso_role_name:v,sso_session:J}=ms(u,e.logger);return Ms({ssoStartUrl:C,ssoSession:J,ssoAccountId:x,ssoRegion:a,ssoRoleName:v,ssoClient:_,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:d,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}else if(!t||!o||!r||!n)throw new R.CredentialsProviderError('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});else return Ms({ssoStartUrl:t,ssoSession:c,ssoAccountId:o,ssoRegion:r,ssoRoleName:n,ssoClient:_,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:d,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})},lo,uo,io;var po=no(()=>{R=Ce(),Q=we(),Us=Z(),ao=De();lo=co,uo=Gs,io=ms});po();export{io as validateSsoProfile,uo as isSsoProfile,lo as fromSSO};export default {get validateSsoProfile(){return io},get isSsoProfile(){return uo},get fromSSO(){return lo}};

package/dist/chunks/index-1.0.3-gecs01pd.mjs

@@ -0,0 +1 @@
+import{f8 as S}from"./cli-1.0.3-bct9r8s9.mjs";import"./cli-1.0.3-e0s97hx3.mjs";import"./cli-1.0.3-mkse8qp1.mjs";import{I8 as A}from"./cli-1.0.3-7m0nfffq.mjs";import{Jqa as I,Kqa as h}from"./cli-1.0.3-v0jtfqtw.mjs";import"./cli-1.0.3-1grrrgvh.mjs";import"./cli-1.0.3-k99msp02.mjs";import{Vqa as p,Yqa as F}from"./cli-1.0.3-vzm5gxzn.mjs";var d=p((n)=>{var w=n&&n.__createBinding||(Object.create?function(e,r,o,t){if(t===void 0)t=o;var _=Object.getOwnPropertyDescriptor(r,o);if(!_||("get"in _?!r.__esModule:_.writable||_.configurable))_={enumerable:!0,get:function(){return r[o]}};Object.defineProperty(e,t,_)}:function(e,r,o,t){if(t===void 0)t=o;e[t]=r[o]}),v=n&&n.__setModuleDefault||(Object.create?function(e,r){Object.defineProperty(e,"default",{enumerable:!0,value:r})}:function(e,r){e.default=r}),j=n&&n.__importStar||function(){var e=function(r){return e=Object.getOwnPropertyNames||function(o){var t=[];for(var _ in o)if(Object.prototype.hasOwnProperty.call(o,_))t[t.length]=_;return t},e(r)};return function(r){if(r&&r.__esModule)return r;var o={};if(r!=null){for(var t=e(r),_=0;_<t.length;_++)if(t[_]!=="default")w(o,r,t[_])}return v(o,r),o}}();Object.defineProperty(n,"__esModule",{value:!0});n.fromWebToken=void 0;var m=(e)=>async(r)=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:o,roleSessionName:t,webIdentityToken:_,providerId:s,policyArns:y,policy:b,durationSeconds:T}=e,{roleAssumerWithWebIdentity:l}=e;if(!l){let{getDefaultRoleAssumerWithWebIdentity:N}=await Promise.resolve().then(()=>j(S()));l=N({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...r?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return l({RoleArn:o,RoleSessionName:t??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:_,ProviderId:s,PolicyArns:y,Policy:b,DurationSeconds:T})};n.fromWebToken=m});var u=p((E)=>{Object.defineProperty(E,"__esModule",{value:!0});E.fromTokenFile=void 0;var P=I(),g=h(),k=A(),R=F("node:fs"),q=d(),O="AWS_WEB_IDENTITY_TOKEN_FILE",L="AWS_ROLE_ARN",W="AWS_ROLE_SESSION_NAME",V=(e={})=>async(r)=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let o=e?.webIdentityTokenFile??process.env[O],t=e?.roleArn??process.env[L],_=e?.roleSessionName??process.env[W];if(!o||!t)throw new g.CredentialsProviderError("Web identity configuration not specified",{logger:e.logger});let s=await(0,q.fromWebToken)({...e,webIdentityToken:k.externalDataInterceptor?.getTokenRecord?.()[o]??(0,R.readFileSync)(o,{encoding:"ascii"}),roleArn:t,roleSessionName:_})(r);if(o===process.env[O])(0,P.setCredentialFeature)(s,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h");return s};E.fromTokenFile=V});var x=p((c)=>{var i=u(),a=d();Object.prototype.hasOwnProperty.call(i,"__proto__")&&!Object.prototype.hasOwnProperty.call(c,"__proto__")&&Object.defineProperty(c,"__proto__",{enumerable:!0,value:i.__proto__});Object.keys(i).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(c,e))c[e]=i[e]});Object.prototype.hasOwnProperty.call(a,"__proto__")&&!Object.prototype.hasOwnProperty.call(c,"__proto__")&&Object.defineProperty(c,"__proto__",{enumerable:!0,value:a.__proto__});Object.keys(a).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(c,e))c[e]=a[e]})});export default x();