@claudiolabs/claudin 1.0.13 → 1.0.14

package/dist/chunks/index-1.0.14-xn2m6vyc.mjs

@@ -0,0 +1 @@
+import{R9 as G}from"./cli-1.0.14-bk3ss9tt.mjs";import{Vra as _,Wra as U}from"./cli-1.0.14-xtwtqzg9.mjs";import{csa as X}from"./cli-1.0.14-j51dm8c6.mjs";import{dsa as K,fsa as B,hsa as l,isa as E}from"./cli-1.0.14-ks6tgvs0.mjs";var v=B((k)=>{Object.defineProperty(k,"__esModule",{value:!0});k.resolveHttpHandlerRuntimeConfig=k.getHttpHandlerExtensionConfiguration=k.isValidHostname=k.HttpResponse=k.HttpRequest=k.Fields=k.Field=void 0;var H=X();Object.defineProperty(k,"Field",{enumerable:!0,get:function(){return H.Field}});Object.defineProperty(k,"Fields",{enumerable:!0,get:function(){return H.Fields}});Object.defineProperty(k,"HttpRequest",{enumerable:!0,get:function(){return H.HttpRequest}});Object.defineProperty(k,"HttpResponse",{enumerable:!0,get:function(){return H.HttpResponse}});Object.defineProperty(k,"isValidHostname",{enumerable:!0,get:function(){return H.isValidHostname}});Object.defineProperty(k,"getHttpHandlerExtensionConfiguration",{enumerable:!0,get:function(){return H.getHttpHandlerExtensionConfiguration}});Object.defineProperty(k,"resolveHttpHandlerRuntimeConfig",{enumerable:!0,get:function(){return H.resolveHttpHandlerRuntimeConfig}})});var J=B((C)=>{var Q=_(),T=U(),P=G(),W=v(),F=E("node:crypto"),q=E("node:fs"),Z=E("node:os"),A=E("node:path");class ${profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300000;constructor(e,n,t){this.profileData=e,this.init=n,this.callerClientConfig=t}async loadCredentials(){let e=await this.loadToken();if(!e)throw new T.CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let n=e.accessToken,t=Date.now();if(new Date(n.expiresAt).getTime()-t<=$.REFRESH_THRESHOLD)return this.refresh(e);return{accessKeyId:n.accessKeyId,secretAccessKey:n.secretAccessKey,sessionToken:n.sessionToken,accountId:n.accountId,expiration:new Date(n.expiresAt)}}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}async refresh(e){let{SigninClient:n,CreateOAuth2TokenCommand:t}=await import("./index-1.0.14-76ed957m.mjs").then((m)=>K(m.default)),{logger:s,userAgentAppId:c}=this.callerClientConfig??{},r=((h)=>{return h?.metadata?.handlerProtocol==="h2"})(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,a=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,i=new n({credentials:{accessKeyId:"",secretAccessKey:""},region:a,requestHandler:r,logger:s,userAgentAppId:c,...this.init?.clientConfig});this.createDPoPInterceptor(i.middlewareStack);let x={tokenInput:{clientId:e.clientId,refreshToken:e.refreshToken,grantType:"refresh_token"}};try{let h=await i.send(new t(x)),{accessKeyId:y,secretAccessKey:d,sessionToken:I}=h.tokenOutput?.accessToken??{},{refreshToken:S,expiresIn:m}=h.tokenOutput??{};if(!y||!d||!I||!S)throw new T.CredentialsProviderError("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let R=(m??900)*1000,b=new Date(Date.now()+R),j={...e,accessToken:{...e.accessToken,accessKeyId:y,secretAccessKey:d,sessionToken:I,expiresAt:b.toISOString()},refreshToken:S};await this.saveToken(j);let o=j.accessToken;return{accessKeyId:o.accessKeyId,secretAccessKey:o.secretAccessKey,sessionToken:o.sessionToken,accountId:o.accountId,expiration:b}}catch(h){if(h.name==="AccessDeniedException"){let y=h.error,d;switch(y){case"TOKEN_EXPIRED":d="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":d="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":d="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:d=`Failed to refresh token: ${String(h)}. Please re-authenticate using \`aws login\``}throw new T.CredentialsProviderError(d,{logger:this.logger,tryNextLink:!1})}throw new T.CredentialsProviderError(`Failed to refresh token: ${String(h)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let e=this.getTokenFilePath();try{let n;try{n=await P.readFile(e,{ignoreCache:this.init?.ignoreCache})}catch{n=await q.promises.readFile(e,"utf8")}let t=JSON.parse(n),s=["accessToken","clientId","refreshToken","dpopKey"].filter((c)=>!t[c]);if(!t.accessToken?.accountId)s.push("accountId");if(s.length>0)throw new T.CredentialsProviderError(`Token validation failed, missing fields: ${s.join(", ")}`,{logger:this.logger,tryNextLink:!1});return t}catch(n){throw new T.CredentialsProviderError(`Failed to load token from ${e}: ${String(n)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(e){let n=this.getTokenFilePath(),t=A.dirname(n);try{await q.promises.mkdir(t,{recursive:!0})}catch(s){}await q.promises.writeFile(n,JSON.stringify(e,null,2),"utf8")}getTokenFilePath(){let e=process.env.AWS_LOGIN_CACHE_DIRECTORY??A.join(Z.homedir(),".aws","login","cache"),n=Buffer.from(this.loginSession,"utf8"),t=F.createHash("sha256").update(n).digest("hex");return A.join(e,`${t}.json`)}derToRawSignature(e){let n=2;if(e[n]!==2)throw Error("Invalid DER signature");n++;let t=e[n++],s=e.subarray(n,n+t);if(n+=t,e[n]!==2)throw Error("Invalid DER signature");n++;let c=e[n++],u=e.subarray(n,n+c);s=s[0]===0?s.subarray(1):s,u=u[0]===0?u.subarray(1):u;let r=Buffer.concat([Buffer.alloc(32-s.length),s]),a=Buffer.concat([Buffer.alloc(32-u.length),u]);return Buffer.concat([r,a])}createDPoPInterceptor(e){e.add((n)=>async(t)=>{if(W.HttpRequest.isInstance(t.request)){let s=t.request,c=`${s.protocol}//${s.hostname}${s.port?`:${s.port}`:""}${s.path}`,u=await this.generateDpop(s.method,c);s.headers={...s.headers,DPoP:u}}return n(t)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(e="POST",n){let t=await this.loadToken();try{let s=F.createPrivateKey({key:t.dpopKey,format:"pem",type:"sec1"}),u=F.createPublicKey(s).export({format:"der",type:"spki"}),r=-1;for(let b=0;b<u.length;b++)if(u[b]===4){r=b;break}let a=u.slice(r+1,r+33),i=u.slice(r+33,r+65),x={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:a.toString("base64url"),y:i.toString("base64url")}},h={jti:crypto.randomUUID(),htm:e,htu:n,iat:Math.floor(Date.now()/1000)},y=Buffer.from(JSON.stringify(x)).toString("base64url"),d=Buffer.from(JSON.stringify(h)).toString("base64url"),I=`${y}.${d}`,S=F.sign("sha256",Buffer.from(I),s),R=this.derToRawSignature(S).toString("base64url");return`${I}.${R}`}catch(s){throw new T.CredentialsProviderError(`Failed to generate Dpop proof: ${s instanceof Error?s.message:String(s)}`,{logger:this.logger,tryNextLink:!1})}}}var N=(e)=>async({callerClientConfig:n}={})=>{e?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let t=await P.parseKnownFiles(e||{}),s=P.getProfileName({profile:e?.profile??n?.profile}),c=t[s];if(!c?.login_session)throw new T.CredentialsProviderError(`Profile ${s} does not contain login_session.`,{tryNextLink:!0,logger:e?.logger});let r=await new $(c,e,n).loadCredentials();return Q.setCredentialFeature(r,"CREDENTIALS_LOGIN","AD")};C.fromLoginCredentials=N});var L,O,w,p,ee=(e,n,t)=>{let s={EcsContainer:async(c)=>{let{fromHttp:u}=await import("./index-1.0.14-mt1a6s7m.mjs").then((m)=>K(m.default,1)),{fromContainerMetadata:r}=await import("./index-1.0.14-pfztmgj3.mjs");return t?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>O.chain(u(c??{}),r(c))().then(D)},Ec2InstanceMetadata:async(c)=>{t?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");let{fromInstanceMetadata:u}=await import("./index-1.0.14-pfztmgj3.mjs");return async()=>u(c)().then(D)},Environment:async(c)=>{t?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");let{fromEnv:u}=await import("./index-1.0.14-bb2w8nxz.mjs");return async()=>u(c)().then(D)}};if(e in s)return s[e];else throw new O.CredentialsProviderError(`Unsupported credential source in profile ${n}. Got ${e}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:t})},D=(e)=>w.setCredentialFeature(e,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p"),te=(e,{profile:n="default",logger:t}={})=>{return Boolean(e)&&typeof e==="object"&&typeof e.role_arn==="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1&&["undefined","string"].indexOf(typeof e.external_id)>-1&&["undefined","string"].indexOf(typeof e.mfa_serial)>-1&&(ne(e,{profile:n,logger:t})||se(e,{profile:n,logger:t}))},ne=(e,{profile:n,logger:t})=>{let s=typeof e.source_profile==="string"&&typeof e.credential_source>"u";if(s)t?.debug?.(`    ${n} isAssumeRoleWithSourceProfile source_profile=${e.source_profile}`);return s},se=(e,{profile:n,logger:t})=>{let s=typeof e.credential_source==="string"&&typeof e.source_profile>"u";if(s)t?.debug?.(`    ${n} isCredentialSourceProfile credential_source=${e.credential_source}`);return s},re=async(e,n,t,s,c={},u)=>{t.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");let r=n[e],{source_profile:a,region:i}=r;if(!t.roleAssumer){let{getDefaultRoleAssumer:h}=await import("./index-1.0.14-2xbsva4c.mjs").then((m)=>K(m.default,1));t.roleAssumer=h({...t.clientConfig,credentialProviderLogger:t.logger,parentClientConfig:{...s,...t?.parentClientConfig,region:i??t?.parentClientConfig?.region??s?.region}},t.clientPlugins)}if(a&&a in c)throw new O.CredentialsProviderError(`Detected a cycle attempting to resolve credentials for profile ${L.getProfileName(t)}. Profiles visited: `+Object.keys(c).join(", "),{logger:t.logger});t.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${a?`source_profile=[${a}]`:`profile=[${e}]`}`);let x=a?u(a,n,t,s,{...c,[a]:!0},V(n[a]??{})):(await ee(r.credential_source,e,t.logger)(t))();if(V(r))return x.then((h)=>w.setCredentialFeature(h,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));else{let h={RoleArn:r.role_arn,RoleSessionName:r.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:r.external_id,DurationSeconds:parseInt(r.duration_seconds||"3600",10)},{mfa_serial:y}=r;if(y){if(!t.mfaCodeProvider)throw new O.CredentialsProviderError(`Profile ${e} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:t.logger,tryNextLink:!1});h.SerialNumber=y,h.TokenCode=await t.mfaCodeProvider(y)}let d=await x;return t.roleAssumer(d,h).then((I)=>w.setCredentialFeature(I,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},V=(e)=>{return!e.role_arn&&!!e.credential_source},ce=(e)=>{return Boolean(e&&e.login_session)},ue=async(e,n,t)=>{let s=await p.fromLoginCredentials({...n,profile:e})({callerClientConfig:t});return w.setCredentialFeature(s,"CREDENTIALS_PROFILE_LOGIN","AC")},he=(e)=>Boolean(e)&&typeof e==="object"&&typeof e.credential_process==="string",ae=async(e,n)=>import("./index-1.0.14-tqttfghe.mjs").then(({fromProcess:t})=>t({...e,profile:n})().then((s)=>w.setCredentialFeature(s,"CREDENTIALS_PROFILE_PROCESS","v"))),de=async(e,n,t={},s)=>{let{fromSSO:c}=await import("./index-1.0.14-y355w9gp.mjs");return c({profile:e,logger:t.logger,parentClientConfig:t.parentClientConfig,clientConfig:t.clientConfig})({callerClientConfig:s}).then((u)=>{if(n.sso_session)return w.setCredentialFeature(u,"CREDENTIALS_PROFILE_SSO","r");else return w.setCredentialFeature(u,"CREDENTIALS_PROFILE_SSO_LEGACY","t")})},ye=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string"),Y=(e)=>Boolean(e)&&typeof e==="object"&&typeof e.aws_access_key_id==="string"&&typeof e.aws_secret_access_key==="string"&&["undefined","string"].indexOf(typeof e.aws_session_token)>-1&&["undefined","string"].indexOf(typeof e.aws_account_id)>-1,g=async(e,n)=>{n?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");let t={accessKeyId:e.aws_access_key_id,secretAccessKey:e.aws_secret_access_key,sessionToken:e.aws_session_token,...e.aws_credential_scope&&{credentialScope:e.aws_credential_scope},...e.aws_account_id&&{accountId:e.aws_account_id}};return w.setCredentialFeature(t,"CREDENTIALS_PROFILE","n")},ke=(e)=>Boolean(e)&&typeof e==="object"&&typeof e.web_identity_token_file==="string"&&typeof e.role_arn==="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1,we=async(e,n,t)=>import("./index-1.0.14-q3b475mg.mjs").then((m)=>K(m.default,1)).then(({fromTokenFile:s})=>s({webIdentityTokenFile:e.web_identity_token_file,roleArn:e.role_arn,roleSessionName:e.role_session_name,roleAssumerWithWebIdentity:n.roleAssumerWithWebIdentity,logger:n.logger,parentClientConfig:n.parentClientConfig})({callerClientConfig:t}).then((c)=>w.setCredentialFeature(c,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q"))),z=async(e,n,t,s,c={},u=!1)=>{let r=n[e];if(Object.keys(c).length>0&&Y(r))return g(r,t);if(u||te(r,{profile:e,logger:t.logger}))return re(e,n,t,s,c,z);if(Y(r))return g(r,t);if(ke(r))return we(r,t,s);if(he(r))return ae(t,e);if(ye(r))return await de(e,r,t,s);if(ce(r))return ue(e,t,s);throw new O.CredentialsProviderError(`Could not resolve credentials using profile: [${e}] in configuration/credentials file(s).`,{logger:t.logger})},Te=(e={})=>async({callerClientConfig:n}={})=>{e.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");let t=await L.parseKnownFiles(e);return z(L.getProfileName({profile:e.profile??n?.profile}),t,e,n)},Ee;var Ie=l(()=>{L=G(),O=U(),w=_(),p=J();Ee=Te});Ie();export{Ee as fromIni};export default {get fromIni(){return Ee}};

package/dist/chunks/index-1.0.14-y355w9gp.mjs

@@ -0,0 +1,2 @@
+import{A9 as hs,B9 as G,C9 as tt,D9 as pr,E9 as _r,G9 as Er,H9 as Sr,I9 as Rr,J9 as xr,K9 as vr,L9 as Kt,M9 as kt,N9 as er,O9 as Ur,P9 as Mr,p9 as F,q9 as Nr,r9 as Dr,s9 as br,t9 as Ge,u9 as Zt,v9 as Et,w9 as $r,x9 as Is,y9 as Ar,z9 as Fr}from"./cli-1.0.14-vw06jpp7.mjs";import{Q9 as ps}from"./cli-1.0.14-1t5z0ek3.mjs";import{R9 as we}from"./cli-1.0.14-bk3ss9tt.mjs";import{Ura as dr,Vra as Z,Wra as Ce}from"./cli-1.0.14-xtwtqzg9.mjs";import{Xra as ir}from"./cli-1.0.14-dbvshaqg.mjs";import{Zra as Xe}from"./cli-1.0.14-j51dm8c6.mjs";import{dsa as ge,fsa as S,hsa as no,isa as X}from"./cli-1.0.14-ks6tgvs0.mjs";var De=S((Zs)=>{var Ls=Z(),Ts=F(),p=Ce(),w=we(),zs=X("node:fs"),Hs=({logger:e,signingName:s}={})=>async()=>{if(e?.debug?.("@aws-sdk/token-providers - fromEnvSigningName"),!s)throw new p.TokenProviderError("Please pass 'signingName' to compute environment variable key",{logger:e});let t=Ts.getBearerTokenEnvKey(s);if(!(t in process.env))throw new p.TokenProviderError(`Token not present in '${t}' environment variable`,{logger:e});let o={token:process.env[t]};return Ls.setTokenFeature(o,"BEARER_SERVICE_ENV_VARS","3"),o},Vs=300000,K="To refresh this SSO session run 'aws sso login' with the corresponding profile.",Bs=async(e,s={},t)=>{let{SSOOIDCClient:o}=await import("./index-1.0.14-9mv1tydz.mjs").then((m)=>ge(m.default)),r=(c)=>s.clientConfig?.[c]??s.parentClientConfig?.[c]??t?.[c];return new o(Object.assign({},s.clientConfig??{},{region:e??s.clientConfig?.region,logger:r("logger"),userAgentAppId:r("userAgentAppId")}))},Ys=async(e,s,t={},o)=>{let{CreateTokenCommand:r}=await import("./index-1.0.14-9mv1tydz.mjs").then((m)=>ge(m.default));return(await Bs(s,t,o)).send(new r({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))},Pe=(e)=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new p.TokenProviderError(`Token is expired. ${K}`,!1)},h=(e,s,t=!1)=>{if(typeof s>"u")throw new p.TokenProviderError(`Value not present for '${e}' in SSO Token${t?". Cannot refresh":""}. ${K}`,!1)},{writeFile:Qs}=zs.promises,Js=(e,s)=>{let t=w.getSSOTokenFilepath(e),o=JSON.stringify(s,null,2);return Qs(t,o)},ye=new Date(0),Ne=(e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let t=await w.parseKnownFiles(e),o=w.getProfileName({profile:e.profile??s?.profile}),r=t[o];if(!r)throw new p.TokenProviderError(`Profile '${o}' could not be found in shared credentials file.`,!1);else if(!r.sso_session)throw new p.TokenProviderError(`Profile '${o}' is missing required property 'sso_session'.`);let n=r.sso_session,_=(await w.loadSsoSessionData(e))[n];if(!_)throw new p.TokenProviderError(`Sso session '${n}' could not be found in shared credentials file.`,!1);for(let a of["sso_start_url","sso_region"])if(!_[a])throw new p.TokenProviderError(`Sso session '${n}' is missing required property '${a}'.`,!1);_.sso_start_url;let d=_.sso_region,l;try{l=await w.getSSOTokenFromFile(n)}catch(a){throw new p.TokenProviderError(`The SSO session token associated with profile=${o} was not found or is invalid. ${K}`,!1)}h("accessToken",l.accessToken),h("expiresAt",l.expiresAt);let{accessToken:u,expiresAt:C}=l,x={token:u,expiration:new Date(C)};if(x.expiration.getTime()-Date.now()>Vs)return x;if(Date.now()-ye.getTime()<30000)return Pe(x),x;h("clientId",l.clientId,!0),h("clientSecret",l.clientSecret,!0),h("refreshToken",l.refreshToken,!0);try{ye.setTime(Date.now());let a=await Ys(l,d,e,s);h("accessToken",a.accessToken),h("expiresIn",a.expiresIn);let v=new Date(Date.now()+a.expiresIn*1000);try{await Js(n,{...l,accessToken:a.accessToken,expiresAt:v.toISOString(),refreshToken:a.refreshToken})}catch(J){}return{token:a.accessToken,expiration:v}}catch(a){return Pe(x),x}},Ws=({token:e,logger:s})=>async()=>{if(s?.debug("@aws-sdk/token-providers - fromStatic"),!e||!e.token)throw new p.TokenProviderError("Please pass a valid token to fromStatic",!1);return e},Xs=(e={})=>p.memoize(p.chain(Ne(e),async()=>{throw new p.TokenProviderError("Could not load token from any providers",!1)}),(s)=>s.expiration!==void 0&&s.expiration.getTime()-Date.now()<300000,(s)=>s.expiration!==void 0);Zs.fromEnvSigningName=Hs;Zs.fromSso=Ne;Zs.fromStatic=Ws;Zs.nodeProvider=Xs});var ee=S((be)=>{Object.defineProperty(be,"__esModule",{value:!0});be.resolveHttpAuthSchemeConfig=be.defaultSSOHttpAuthSchemeProvider=be.defaultSSOHttpAuthSchemeParametersProvider=void 0;var rt=F(),k=tt(),ot=async(e,s,t)=>{return{operation:(0,k.getSmithyContext)(s).operation,region:await(0,k.normalizeProvider)(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}};be.defaultSSOHttpAuthSchemeParametersProvider=ot;function nt(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:e.region},propertiesExtractor:(s,t)=>({signingProperties:{config:s,context:t}})}}function at(e){return{schemeId:"smithy.api#noAuth"}}var ct=(e)=>{let s=[];switch(e.operation){case"GetRoleCredentials":{s.push(at(e));break}default:s.push(nt(e))}return s};be.defaultSSOHttpAuthSchemeProvider=ct;var lt=(e)=>{let s=(0,rt.resolveAwsSdkSigV4Config)(e);return Object.assign(s,{authSchemePreference:(0,k.normalizeProvider)(e.authSchemePreference??[])})};be.resolveHttpAuthSchemeConfig=lt});var Te=S((je)=>{Object.defineProperty(je,"__esModule",{value:!0});je.bdd=void 0;var dt=Ge(),N="ref",f=-1,U=!0,Ae="isSet",me="PartitionResult",M="booleanEquals",se="getAttr",Fe={[N]:"Endpoint"},te={[N]:me},g={},Ue=[{[N]:"Region"}],Me={conditions:[[Ae,[Fe]],[Ae,Ue],["aws.partition",Ue,me],[M,[{[N]:"UseFIPS"},U]],[M,[{[N]:"UseDualStack"},U]],[M,[{fn:se,argv:[te,"supportsDualStack"]},U]],[M,[{fn:se,argv:[te,"supportsFIPS"]},U]],["stringEquals",[{fn:se,argv:[te,"name"]},"aws-us-gov"]]],results:[[f],[f,"Invalid Configuration: FIPS and custom endpoint are not supported"],[f,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[Fe,g],["https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",g],[f,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://portal.sso.{Region}.amazonaws.com",g],["https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",g],[f,"FIPS is enabled but this partition does not support FIPS"],["https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",g],[f,"DualStack is enabled but this partition does not support DualStack"],["https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",g],[f,"Invalid Configuration: Missing Region"]]},pt=2,i=1e8,_t=new Int32Array([-1,1,-1,0,13,3,1,4,i+12,2,5,i+12,3,8,6,4,7,i+11,5,i+9,i+10,4,11,9,6,10,i+8,7,i+6,i+7,5,12,i+5,6,i+4,i+5,3,i+1,14,4,i+2,i+3]);je.bdd=dt.BinaryDecisionDiagram.from(_t,pt,Me.conditions,Me.results)});var Ve=S((ze)=>{Object.defineProperty(ze,"__esModule",{value:!0});ze.defaultEndpointResolver=void 0;var St=Et(),re=Ge(),Rt=Te(),xt=new re.EndpointCache({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),vt=(e,s={})=>{return xt.get(e,()=>(0,re.decideEndpoint)(Rt.bdd,{endpointParams:e,logger:s.logger}))};ze.defaultEndpointResolver=vt;re.customEndpointFunctions.aws=St.awsEndpointFunctions});var m=S((ne)=>{Object.defineProperty(ne,"__esModule",{value:!0});ne.SSOServiceException=ne.__ServiceException=void 0;var Be=G();Object.defineProperty(ne,"__ServiceException",{enumerable:!0,get:function(){return Be.ServiceException}});class oe extends Be.ServiceException{constructor(e){super(e);Object.setPrototypeOf(this,oe.prototype)}}ne.SSOServiceException=oe});var ie=S((Qe)=>{Object.defineProperty(Qe,"__esModule",{value:!0});Qe.UnauthorizedException=Qe.TooManyRequestsException=Qe.ResourceNotFoundException=Qe.InvalidRequestException=void 0;var j=m();class ae extends j.SSOServiceException{name="InvalidRequestException";$fault="client";constructor(e){super({name:"InvalidRequestException",$fault:"client",...e});Object.setPrototypeOf(this,ae.prototype)}}Qe.InvalidRequestException=ae;class ce extends j.SSOServiceException{name="ResourceNotFoundException";$fault="client";constructor(e){super({name:"ResourceNotFoundException",$fault:"client",...e});Object.setPrototypeOf(this,ce.prototype)}}Qe.ResourceNotFoundException=ce;class le extends j.SSOServiceException{name="TooManyRequestsException";$fault="client";constructor(e){super({name:"TooManyRequestsException",$fault:"client",...e});Object.setPrototypeOf(this,le.prototype)}}Qe.TooManyRequestsException=le;class ue extends j.SSOServiceException{name="UnauthorizedException";$fault="client";constructor(e){super({name:"UnauthorizedException",$fault:"client",...e});Object.setPrototypeOf(this,ue.prototype)}}Qe.UnauthorizedException=ue});var de=S((es)=>{Object.defineProperty(es,"__esModule",{value:!0});es.GetRoleCredentials$=es.RoleCredentials$=es.GetRoleCredentialsResponse$=es.GetRoleCredentialsRequest$=es.errorTypeRegistries=es.UnauthorizedException$=es.TooManyRequestsException$=es.ResourceNotFoundException$=es.InvalidRequestException$=es.SSOServiceException$=void 0;var ft="AccessTokenType",qt="GetRoleCredentials",Pt="GetRoleCredentialsRequest",yt="GetRoleCredentialsResponse",gt="InvalidRequestException",Ct="RoleCredentials",wt="ResourceNotFoundException",Nt="SecretAccessKeyType",Dt="SessionTokenType",bt="TooManyRequestsException",$t="UnauthorizedException",At="accountId",Ft="accessKeyId",Ut="accessToken",Mt="account_id",L="client",T="error",Gt="expiration",mt="http",z="httpError",jt="httpHeader",We="httpQuery",H="message",Lt="roleCredentials",Tt="roleName",zt="role_name",Ze="smithy.ts.sdk.synthetic.com.amazonaws.sso",Ht="secretAccessKey",Vt="sessionToken",Bt="x-amz-sso_bearer_token",E="com.amazonaws.sso",Ke=Xe(),V=ie(),Yt=m(),ke=Ke.TypeRegistry.for(Ze);es.SSOServiceException$=[-3,Ze,"SSOServiceException",0,[],[]];ke.registerError(es.SSOServiceException$,Yt.SSOServiceException);var D=Ke.TypeRegistry.for(E);es.InvalidRequestException$=[-3,E,gt,{[T]:L,[z]:400},[H],[0]];D.registerError(es.InvalidRequestException$,V.InvalidRequestException);es.ResourceNotFoundException$=[-3,E,wt,{[T]:L,[z]:404},[H],[0]];D.registerError(es.ResourceNotFoundException$,V.ResourceNotFoundException);es.TooManyRequestsException$=[-3,E,bt,{[T]:L,[z]:429},[H],[0]];D.registerError(es.TooManyRequestsException$,V.TooManyRequestsException);es.UnauthorizedException$=[-3,E,$t,{[T]:L,[z]:401},[H],[0]];D.registerError(es.UnauthorizedException$,V.UnauthorizedException);es.errorTypeRegistries=[ke,D];var Qt=[0,E,ft,8,0],Jt=[0,E,Nt,8,0],Wt=[0,E,Dt,8,0];es.GetRoleCredentialsRequest$=[3,E,Pt,0,[Tt,At,Ut],[[0,{[We]:zt}],[0,{[We]:Mt}],[()=>Qt,{[jt]:Bt}]],3];es.GetRoleCredentialsResponse$=[3,E,yt,0,[Lt],[[()=>es.RoleCredentials$,0]]];es.RoleCredentials$=[3,E,Ct,0,[Ft,Ht,Vt,Gt],[0,[()=>Jt,0],[()=>Wt,0],1]];es.GetRoleCredentials$=[9,E,qt,{[mt]:["GET","/federation/credentials",200]},()=>es.GetRoleCredentialsRequest$,()=>es.GetRoleCredentialsResponse$]});var Ss=S((_s)=>{Object.defineProperty(_s,"__esModule",{value:!0});_s.getRuntimeConfig=void 0;var sr=F(),tr=kt(),rr=ps(),or=G(),nr=Zt(),is=er(),ds=Kt(),ar=ee(),cr=Ve(),lr=de(),ur=(e)=>{return{apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??is.fromBase64,base64Encoder:e?.base64Encoder??is.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??cr.defaultEndpointResolver,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??ar.defaultSSOHttpAuthSchemeProvider,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(s)=>s.getIdentityProvider("aws.auth#sigv4"),signer:new sr.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(s)=>s.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new rr.NoAuthSigner}],logger:e?.logger??new or.NoOpLogger,protocol:e?.protocol??tr.AwsRestJsonProtocol,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:lr.errorTypeRegistries,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:e?.serviceId??"SSO",urlParser:e?.urlParser??nr.parseUrl,utf8Decoder:e?.utf8Decoder??ds.fromUtf8,utf8Encoder:e?.utf8Encoder??ds.toUtf8}};_s.getRuntimeConfig=ur});var Ps=S((fs)=>{Object.defineProperty(fs,"__esModule",{value:!0});fs.getRuntimeConfig=void 0;var Or=pr(),Ir=Or.__importDefault(_r()),hr=Z(),fr=F(),Rs=Er(),B=Is(),qr=Sr(),xs=hs(),q=Rr(),vs=ir(),Os=G(),Pr=xr(),yr=vr(),gr=dr(),Cr=Ss(),wr=(e)=>{(0,Os.emitWarningIfUnsupportedVersion)(process.version);let s=(0,yr.resolveDefaultsModeConfig)(e),t=()=>s().then(Os.loadConfigsForDefaultMode),o=(0,Cr.getRuntimeConfig)(e);(0,hr.emitWarningIfUnsupportedVersion)(process.version);let r={profile:e?.profile,logger:o.logger};return{...o,...e,runtime:"node",defaultsMode:s,authSchemePreference:e?.authSchemePreference??(0,q.loadConfig)(fr.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS,r),bodyLengthChecker:e?.bodyLengthChecker??Pr.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,Rs.createDefaultUserAgentProvider)({serviceId:o.serviceId,clientVersion:Ir.default.version}),maxAttempts:e?.maxAttempts??(0,q.loadConfig)(xs.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??(0,q.loadConfig)(B.NODE_REGION_CONFIG_OPTIONS,{...B.NODE_REGION_CONFIG_FILE_OPTIONS,...r}),requestHandler:vs.NodeHttpHandler.create(e?.requestHandler??t),retryMode:e?.retryMode??(0,q.loadConfig)({...xs.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await t()).retryMode||gr.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??qr.Hash.bind(null,"sha256"),streamCollector:e?.streamCollector??vs.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??(0,q.loadConfig)(B.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,r),useFipsEndpoint:e?.useFipsEndpoint??(0,q.loadConfig)(B.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,r),userAgentAppId:e?.userAgentAppId??(0,q.loadConfig)(Rs.NODE_APP_ID_CONFIG_OPTIONS,r)}};fs.getRuntimeConfig=wr});var $s=S((O)=>{var ys=Nr(),Gr=Dr(),mr=br(),gs=$r(),jr=Is(),pe=ps(),Lr=Xe(),Tr=Ar(),bs=Fr(),Cs=hs(),P=G(),ws=ee(),zr=Ps(),Ns=Ur(),Ds=Mr(),b=de(),Y=ie(),Hr=m(),Vr=(e)=>{return Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"})},Br={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Yr=(e)=>{let{httpAuthSchemes:s,httpAuthSchemeProvider:t,credentials:o}=e;return{setHttpAuthScheme(r){let n=s.findIndex((c)=>c.schemeId===r.schemeId);if(n===-1)s.push(r);else s.splice(n,1,r)},httpAuthSchemes(){return s},setHttpAuthSchemeProvider(r){t=r},httpAuthSchemeProvider(){return t},setCredentials(r){o=r},credentials(){return o}}},Qr=(e)=>{return{httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}},Jr=(e,s)=>{let t=Object.assign(Ns.getAwsRegionExtensionConfiguration(e),P.getDefaultExtensionConfiguration(e),Ds.getHttpHandlerExtensionConfiguration(e),Yr(e));return s.forEach((o)=>o.configure(t)),Object.assign(e,Ns.resolveAwsRegionExtensionConfiguration(t),P.resolveDefaultRuntimeConfig(t),Ds.resolveHttpHandlerRuntimeConfig(t),Qr(t))};class _e extends P.Client{config;constructor(...[e]){let s=zr.getRuntimeConfig(e||{});super(s);this.initConfig=s;let t=Vr(s),o=gs.resolveUserAgentConfig(t),r=Cs.resolveRetryConfig(o),n=jr.resolveRegionConfig(r),c=ys.resolveHostHeaderConfig(n),_=bs.resolveEndpointConfig(c),d=ws.resolveHttpAuthSchemeConfig(_),l=Jr(d,e?.extensions||[]);this.config=l,this.middlewareStack.use(Lr.getSchemaSerdePlugin(this.config)),this.middlewareStack.use(gs.getUserAgentPlugin(this.config)),this.middlewareStack.use(Cs.getRetryPlugin(this.config)),this.middlewareStack.use(Tr.getContentLengthPlugin(this.config)),this.middlewareStack.use(ys.getHostHeaderPlugin(this.config)),this.middlewareStack.use(Gr.getLoggerPlugin(this.config)),this.middlewareStack.use(mr.getRecursionDetectionPlugin(this.config)),this.middlewareStack.use(pe.getHttpAuthSchemeEndpointRuleSetPlugin(this.config,{httpAuthSchemeParametersProvider:ws.defaultSSOHttpAuthSchemeParametersProvider,identityProviderConfigProvider:async(u)=>new pe.DefaultIdentityProviderConfig({"aws.auth#sigv4":u.credentials})})),this.middlewareStack.use(pe.getHttpSigningPlugin(this.config))}destroy(){super.destroy()}}class Ee extends P.Command.classBuilder().ep(Br).m(function(e,s,t,o){return[bs.getEndpointPlugin(t,e.getEndpointParameterInstructions())]}).s("SWBPortalService","GetRoleCredentials",{}).n("SSOClient","GetRoleCredentialsCommand").sc(b.GetRoleCredentials$).build(){}var Wr={GetRoleCredentialsCommand:Ee};class Se extends _e{}P.createAggregatedClient(Wr,Se);O.$Command=P.Command;O.__Client=P.Client;O.SSOServiceException=Hr.SSOServiceException;O.GetRoleCredentialsCommand=Ee;O.SSO=Se;O.SSOClient=_e;Object.prototype.hasOwnProperty.call(b,"__proto__")&&!Object.prototype.hasOwnProperty.call(O,"__proto__")&&Object.defineProperty(O,"__proto__",{enumerable:!0,value:b.__proto__});Object.keys(b).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(O,e))O[e]=b[e]});Object.prototype.hasOwnProperty.call(Y,"__proto__")&&!Object.prototype.hasOwnProperty.call(O,"__proto__")&&Object.defineProperty(O,"__proto__",{enumerable:!0,value:Y.__proto__});Object.keys(Y).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(O,e))O[e]=Y[e]})});var Fs=S((to)=>{var As=$s();to.GetRoleCredentialsCommand=As.GetRoleCredentialsCommand;to.SSOClient=As.SSOClient});var R,Q,Us,ao,Gs=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string"),$=!1,Ms=async({ssoStartUrl:e,ssoSession:s,ssoAccountId:t,ssoRegion:o,ssoRoleName:r,ssoClient:n,clientConfig:c,parentClientConfig:_,callerClientConfig:d,profile:l,filepath:u,configFilepath:C,ignoreCache:x,logger:a})=>{let v,J="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let I=await ao.fromSso({profile:l,filepath:u,configFilepath:C,ignoreCache:x})();v={accessToken:I.token,expiresAt:new Date(I.expiration).toISOString()}}catch(I){throw new R.CredentialsProviderError(I.message,{tryNextLink:$,logger:a})}else try{v=await Q.getSSOTokenFromFile(e)}catch(I){throw new R.CredentialsProviderError("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:$,logger:a})}if(new Date(v.expiresAt).getTime()-Date.now()<=0)throw new R.CredentialsProviderError("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:$,logger:a});let{accessToken:Re}=v,{SSOClient:y,GetRoleCredentialsCommand:A}=await Promise.resolve().then(function(){return Fs()}),js=n||new y(Object.assign({},c??{},{logger:c?.logger??d?.logger??_?.logger,region:c?.region??o,userAgentAppId:c?.userAgentAppId??d?.userAgentAppId??_?.userAgentAppId})),xe;try{xe=await js.send(new A({accountId:t,roleName:r,accessToken:Re}))}catch(I){throw new R.CredentialsProviderError(I,{tryNextLink:$,logger:a})}let{roleCredentials:{accessKeyId:ve,secretAccessKey:Oe,sessionToken:Ie,expiration:he,credentialScope:fe,accountId:qe}={}}=xe;if(!ve||!Oe||!Ie||!he)throw new R.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:$,logger:a});let W={accessKeyId:ve,secretAccessKey:Oe,sessionToken:Ie,expiration:new Date(he),...fe&&{credentialScope:fe},...qe&&{accountId:qe}};if(s)Us.setCredentialFeature(W,"CREDENTIALS_SSO","s");else Us.setCredentialFeature(W,"CREDENTIALS_SSO_LEGACY","u");return W},ms=(e,s)=>{let{sso_start_url:t,sso_account_id:o,sso_region:r,sso_role_name:n}=e;if(!t||!o||!r||!n)throw new R.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
+Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:s});return e},co=(e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:t,ssoAccountId:o,ssoRegion:r,ssoRoleName:n,ssoSession:c}=e,{ssoClient:_}=e,d=Q.getProfileName({profile:e.profile??s?.profile});if(!t&&!o&&!r&&!n&&!c){let u=(await Q.parseKnownFiles(e))[d];if(!u)throw new R.CredentialsProviderError(`Profile ${d} was not found.`,{logger:e.logger});if(!Gs(u))throw new R.CredentialsProviderError(`Profile ${d} is not configured with SSO credentials.`,{logger:e.logger});if(u?.sso_session){let y=(await Q.loadSsoSessionData(e))[u.sso_session],A=` configurations in profile ${d} and sso-session ${u.sso_session}`;if(r&&r!==y.sso_region)throw new R.CredentialsProviderError("Conflicting SSO region"+A,{tryNextLink:!1,logger:e.logger});if(t&&t!==y.sso_start_url)throw new R.CredentialsProviderError("Conflicting SSO start_url"+A,{tryNextLink:!1,logger:e.logger});u.sso_region=y.sso_region,u.sso_start_url=y.sso_start_url}let{sso_start_url:C,sso_account_id:x,sso_region:a,sso_role_name:v,sso_session:J}=ms(u,e.logger);return Ms({ssoStartUrl:C,ssoSession:J,ssoAccountId:x,ssoRegion:a,ssoRoleName:v,ssoClient:_,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:d,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}else if(!t||!o||!r||!n)throw new R.CredentialsProviderError('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});else return Ms({ssoStartUrl:t,ssoSession:c,ssoAccountId:o,ssoRegion:r,ssoRoleName:n,ssoClient:_,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:d,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})},lo,uo,io;var po=no(()=>{R=Ce(),Q=we(),Us=Z(),ao=De();lo=co,uo=Gs,io=ms});po();export{io as validateSsoProfile,uo as isSsoProfile,lo as fromSSO};export default {get validateSsoProfile(){return io},get isSsoProfile(){return uo},get fromSSO(){return lo}};

package/dist/chunks/init-1.0.14-1efcnp5z.mjs

@@ -0,0 +1 @@
+import{$ as a,aa as b}from"./cli-1.0.14-85hb2c4v.mjs";import"./cli-1.0.14-s2pgxnbv.mjs";import"./cli-1.0.14-v4p41dwz.mjs";import"./cli-1.0.14-h1w8rqag.mjs";import"./cli-1.0.14-fhfpsmvp.mjs";import"./cli-1.0.14-tdqp99kc.mjs";import"./cli-1.0.14-phhmzjmr.mjs";import"./cli-1.0.14-ve3fgjyt.mjs";import"./cli-1.0.14-dk082sx4.mjs";import"./cli-1.0.14-yzy55kht.mjs";import"./cli-1.0.14-6knmqxp0.mjs";import"./cli-1.0.14-ghnyd53e.mjs";import"./cli-1.0.14-zbhe3r2k.mjs";import"./cli-1.0.14-adwprsmr.mjs";import"./cli-1.0.14-dxb8x0rz.mjs";import"./cli-1.0.14-ct1wcd17.mjs";import"./cli-1.0.14-sbczqn9p.mjs";import"./cli-1.0.14-hdmedxpt.mjs";import"./cli-1.0.14-4hcxmq25.mjs";import"./cli-1.0.14-67n1r865.mjs";import"./cli-1.0.14-m7rhvjxj.mjs";import"./cli-1.0.14-g3gc4e8t.mjs";import"./cli-1.0.14-peg6ppst.mjs";import"./cli-1.0.14-m70b5kbd.mjs";import"./cli-1.0.14-t1sj3p5p.mjs";import"./cli-1.0.14-2m0sc9nm.mjs";import"./cli-1.0.14-e4rbgkh3.mjs";import"./cli-1.0.14-ya2azx0f.mjs";import"./cli-1.0.14-myb8xers.mjs";import"./cli-1.0.14-n0fpj4mm.mjs";import"./cli-1.0.14-xa9jge5n.mjs";import"./cli-1.0.14-zak89hnm.mjs";import"./cli-1.0.14-255cjybd.mjs";import"./cli-1.0.14-wjjb5egc.mjs";import"./cli-1.0.14-xf07bsa7.mjs";import"./cli-1.0.14-psw8gbp1.mjs";import"./cli-1.0.14-vvvyddeg.mjs";import"./cli-1.0.14-ap4xyggx.mjs";import"./cli-1.0.14-080f910z.mjs";import"./cli-1.0.14-xvkary9q.mjs";import"./cli-1.0.14-pcpqbb0b.mjs";import"./cli-1.0.14-asbc8xx1.mjs";import"./cli-1.0.14-m470pppj.mjs";import"./cli-1.0.14-p8g9b6qs.mjs";import"./cli-1.0.14-hhk3wp4p.mjs";import"./cli-1.0.14-vz26zg7a.mjs";import"./cli-1.0.14-d0xsytrn.mjs";import"./cli-1.0.14-6v1pc51c.mjs";import"./cli-1.0.14-gjg1vjat.mjs";import"./cli-1.0.14-brabf1jv.mjs";import"./cli-1.0.14-95d1hyag.mjs";import"./cli-1.0.14-ya91z6q2.mjs";import"./cli-1.0.14-q4pb7169.mjs";import"./cli-1.0.14-y10j25g4.mjs";import"./cli-1.0.14-sn3z317d.mjs";import"./cli-1.0.14-k8eysm02.mjs";import"./cli-1.0.14-pxda0cqk.mjs";import"./cli-1.0.14-ccc05p60.mjs";import"./cli-1.0.14-tdv8sv8w.mjs";import"./cli-1.0.14-dzhv160v.mjs";import"./cli-1.0.14-5z2gnwr2.mjs";import"./cli-1.0.14-bhtptg08.mjs";import"./cli-1.0.14-zar1mrp1.mjs";import"./cli-1.0.14-7ce0zgxz.mjs";import"./cli-1.0.14-b11ne5s1.mjs";import"./cli-1.0.14-5d4wcwg0.mjs";import"./cli-1.0.14-ks6tgvs0.mjs";export{b as initializeTelemetryAfterTrust,a as init};

package/dist/chunks/initReplBridge-1.0.14-kv23c7gd.mjs

@@ -0,0 +1 @@
+import{Bb as RQ}from"./cli-1.0.14-knxqt3hz.mjs";import{Cb as GQ,Db as AJ,Eb as WQ,Fb as NQ,Gb as OQ,Hb as fQ}from"./cli-1.0.14-bpe70zxn.mjs";import{Ib as vJ,Jb as zZ}from"./cli-1.0.14-adsfxzzd.mjs";import{Kb as PQ,Lb as UQ,Mb as wQ}from"./cli-1.0.14-95vxrp6k.mjs";import"./cli-1.0.14-k1e7b44j.mjs";import{Rb as yQ,Sb as BQ,Tb as bJ,Ub as AQ}from"./cli-1.0.14-ftd45b68.mjs";import"./cli-1.0.14-2hd7h509.mjs";import{$b as LQ,Yb as TJ,Zb as _Q,_b as qQ,ac as CJ,bc as mJ}from"./cli-1.0.14-r7268arv.mjs";import"./cli-1.0.14-0e04z9y7.mjs";import{oc as QZ,qc as bZ}from"./cli-1.0.14-qwte1vj6.mjs";import{xe as sQ,ye as nQ,ze as TZ}from"./cli-1.0.14-9peasp0t.mjs";import{ef as pJ,hf as mZ}from"./cli-1.0.14-mm39qawq.mjs";import"./cli-1.0.14-et0mrzhj.mjs";import{uf as rQ,wf as eQ,xf as JZ,yf as CZ}from"./cli-1.0.14-mkw8yfc5.mjs";import{Bf as VQ,Cf as HQ,Ef as i,Ff as xQ}from"./cli-1.0.14-h3hwpsy4.mjs";import{pi as lQ,ri as KJ,si as aQ,ti as kZ}from"./cli-1.0.14-c75wkkj6.mjs";import{$E as hZ,BR as $Z,PR as vZ,UE as uQ,VE as dQ,XS as qJ,im as pQ,jk as IQ,jm as EZ,sT as SZ,uR as ZZ}from"./cli-1.0.14-v4p41dwz.mjs";import"./cli-1.0.14-h1w8rqag.mjs";import"./cli-1.0.14-fhfpsmvp.mjs";import"./cli-1.0.14-tdqp99kc.mjs";import"./cli-1.0.14-phhmzjmr.mjs";import"./cli-1.0.14-ve3fgjyt.mjs";import"./cli-1.0.14-dk082sx4.mjs";import"./cli-1.0.14-yzy55kht.mjs";import"./cli-1.0.14-6knmqxp0.mjs";import"./cli-1.0.14-ghnyd53e.mjs";import"./cli-1.0.14-zbhe3r2k.mjs";import"./cli-1.0.14-adwprsmr.mjs";import{rW as DJ,sW as _Z}from"./cli-1.0.14-dxb8x0rz.mjs";import{CW as XQ,GW as qZ}from"./cli-1.0.14-ct1wcd17.mjs";import{IW as gQ,KW as iQ,LW as tQ,MW as oQ,PW as DZ}from"./cli-1.0.14-sbczqn9p.mjs";import"./cli-1.0.14-hdmedxpt.mjs";import"./cli-1.0.14-4hcxmq25.mjs";import{wX as jQ,yX as LZ}from"./cli-1.0.14-67n1r865.mjs";import"./cli-1.0.14-m7rhvjxj.mjs";import"./cli-1.0.14-g3gc4e8t.mjs";import"./cli-1.0.14-peg6ppst.mjs";import"./cli-1.0.14-m70b5kbd.mjs";import"./cli-1.0.14-t1sj3p5p.mjs";import"./cli-1.0.14-2m0sc9nm.mjs";import"./cli-1.0.14-e4rbgkh3.mjs";import{j2 as cQ,k2 as zQ,l2 as KQ,n2 as YQ}from"./cli-1.0.14-ya2azx0f.mjs";import"./cli-1.0.14-myb8xers.mjs";import"./cli-1.0.14-n0fpj4mm.mjs";import"./cli-1.0.14-xa9jge5n.mjs";import"./cli-1.0.14-zak89hnm.mjs";import"./cli-1.0.14-255cjybd.mjs";import"./cli-1.0.14-wjjb5egc.mjs";import"./cli-1.0.14-xf07bsa7.mjs";import"./cli-1.0.14-psw8gbp1.mjs";import"./cli-1.0.14-vvvyddeg.mjs";import"./cli-1.0.14-ap4xyggx.mjs";import"./cli-1.0.14-080f910z.mjs";import"./cli-1.0.14-xvkary9q.mjs";import"./cli-1.0.14-pcpqbb0b.mjs";import{E8 as FZ,e8 as SJ,g8 as IJ,i8 as SQ,m5 as vQ,p5 as MZ,y7 as OJ,z7 as OZ}from"./cli-1.0.14-asbc8xx1.mjs";import"./cli-1.0.14-m470pppj.mjs";import"./cli-1.0.14-p8g9b6qs.mjs";import"./cli-1.0.14-hhk3wp4p.mjs";import"./cli-1.0.14-vz26zg7a.mjs";import"./cli-1.0.14-d0xsytrn.mjs";import{Tea as fZ,c$ as DQ,e$ as TQ,kga as bQ,mga as wZ,r_ as GJ,t_ as NZ,u$ as UZ,vea as CQ,yea as mQ}from"./cli-1.0.14-6v1pc51c.mjs";import"./cli-1.0.14-gjg1vjat.mjs";import"./cli-1.0.14-brabf1jv.mjs";import"./cli-1.0.14-95d1hyag.mjs";import{Kha as PZ,zha as kQ}from"./cli-1.0.14-ya91z6q2.mjs";import"./cli-1.0.14-q4pb7169.mjs";import"./cli-1.0.14-y10j25g4.mjs";import"./cli-1.0.14-sn3z317d.mjs";import{Xia as q,_ia as xZ}from"./cli-1.0.14-k8eysm02.mjs";import{_ja as J,bja as eJ,bka as $Q,dja as GZ}from"./cli-1.0.14-pxda0cqk.mjs";import"./cli-1.0.14-ccc05p60.mjs";import{Fka as ZQ,yka as D}from"./cli-1.0.14-tdv8sv8w.mjs";import{Lka as JQ,Tka as QQ,Vka as WZ}from"./cli-1.0.14-dzhv160v.mjs";import{Fma as hQ,yqa as RZ,zma as _J}from"./cli-1.0.14-5z2gnwr2.mjs";import"./cli-1.0.14-bhtptg08.mjs";import"./cli-1.0.14-zar1mrp1.mjs";import"./cli-1.0.14-7ce0zgxz.mjs";import"./cli-1.0.14-b11ne5s1.mjs";import"./cli-1.0.14-5d4wcwg0.mjs";import{isa as rJ}from"./cli-1.0.14-ks6tgvs0.mjs";RZ();PZ();MZ();hZ();FZ();fZ();$Q();wZ();ZQ();UZ();mZ();vZ();SZ();TZ();EZ();kZ();DZ();CZ();xQ();bZ();import{hostname as IZ}from"os";import{randomUUID as oJ}from"crypto";$Q();NZ();xZ();GZ();YQ();LZ();qZ();_Z();WZ();xQ();ZQ();OZ();var yZ=2000,sJ=60000,nJ=900000,BZ=0;async function MQ(p){let{dir:L,machineName:T,branch:y,gitRepoUrl:t,title:o,baseUrl:s,sessionIngressUrl:w,workerType:S,getAccessToken:n,createSession:r,archiveSession:l,getCurrentTitle:ZJ=()=>o,toSDKMessages:YJ=()=>{throw Error("BridgeCoreParams.toSDKMessages not provided. Pass it if you use writeMessages() or initialMessages — daemon callers that only use writeSdkMessages() never hit this path.")},onAuth401:P,getPollIntervalConfig:U=()=>vJ,initialHistoryCap:M=200,initialMessages:x,previouslyFlushedUUIDs:m,onInboundMessage:C,onPermissionResponse:e,onInterrupt:c,onSetModel:V,onSetMaxThinkingTokens:F,onSetPermissionMode:B,onStateChange:G,onUserMessage:b,perpetual:E,initialSSESequenceNum:u=0}=p,O=++BZ,{writeBridgePointer:h,clearBridgePointer:JJ,readBridgePointer:j}=await import("./bridgePointer-1.0.14-rg9vg3mq.mjs"),H=E?await j(L):null,K=H?.source==="repl"?H:null;J(`[bridge:repl] initBridgeCore #${O} starting (initialMessages=${x?.length??0}${K?` perpetual prior=env:${K.environmentId}`:""})`);let R=WQ({baseUrl:s,getAccessToken:n,runnerVersion:"99.0.0",onDebug:J,onAuth401:P,getTrustedDeviceToken:XQ}),QJ={dir:L,machineName:T,branch:y,gitRepoUrl:t,maxSessions:1,spawnMode:"single-session",verbose:!1,sandbox:!1,bridgeId:oJ(),workerType:S,environmentId:oJ(),reuseEnvironmentId:K?.environmentId,apiBaseUrl:s,sessionIngressUrl:w},X,LJ;try{let Q=await R.registerBridgeEnvironment(QJ);X=Q.environment_id,LJ=Q.environment_secret}catch(Q){if(i("registration_failed",`[bridge:repl] Environment registration failed: ${D(Q)}`),K)await JJ(L);return G?.("failed",D(Q)),null}J(`[bridge:repl] Environment registered: ${X}`),GJ("info","bridge_repl_env_registered"),q("tengu_bridge_repl_env_registered",{});async function cJ(Q,$){if(X!==Q)return J(`[bridge:repl] Env mismatch (requested ${Q}, got ${X}) — cannot reconnect in place`),!1;let W=KQ($),Y=W===$?[$]:[$,W];for(let A of Y)try{return await R.reconnectSession(X,A),J(`[bridge:repl] Reconnected session ${A} in place on env ${X}`),!0}catch(d){J(`[bridge:repl] reconnectSession(${A}) failed: ${D(d)}`)}return J("[bridge:repl] reconnectSession exhausted — falling through to fresh session"),!1}let RJ=K?await cJ(K.environmentId,K.sessionId):!1;if(K&&!RJ)await JJ(L);let z;if(RJ&&K){if(z=K.sessionId,J(`[bridge:repl] Perpetual session reused: ${z}`),x&&m)for(let Q of x)m.add(Q.uuid)}else{let Q=await r({environmentId:X,title:o,gitRepoUrl:t,branch:y,signal:AbortSignal.timeout(15000)});if(!Q)return J("[bridge:repl] Session creation failed, deregistering environment"),q("tengu_bridge_repl_session_failed",{}),await R.deregisterEnvironment(X).catch(()=>{}),G?.("failed","Session creation failed"),null;z=Q,J(`[bridge:repl] Session created: ${z}`)}await h(L,{sessionId:z,environmentId:X,source:"repl"}),GJ("info","bridge_repl_session_created"),q("tengu_bridge_repl_started",{has_initial_messages:!!(x&&x.length>0),inProtectedNamespace:QQ()});let PJ=new Set;if(x)for(let Q of x)PJ.add(Q.uuid);let $J=new mJ(2000);for(let Q of PJ)$J.add(Q);let uJ=new mJ(2000),a=new AbortController,Z=null,XJ=0,v=RJ?u:0,k=null,jJ=null,dJ=fQ(a.signal),WJ=dJ.wake,KZ=dJ.signal,g=new wQ,UJ=!b,fJ=3,zJ=0,VJ=null;async function lJ(){if(VJ)return VJ;VJ=YZ();try{return await VJ}finally{VJ=null}}async function YZ(){if(zJ++,XJ++,J(`[bridge:repl] Reconnecting after env lost (attempt ${zJ}/${fJ})`),zJ>fJ)return J(`[bridge:repl] Environment reconnect limit reached (${fJ}), giving up`),!1;if(Z){let Y=Z.getLastSequenceNum();if(Y>v)v=Y;Z.close(),Z=null}if(WJ(),g.drop(),k){let Y=k;if(await R.stopWork(X,Y,!1).catch(()=>{}),k!==Y)return J("[bridge:repl] Poll loop recovered during stopWork await — deferring to it"),zJ=0,!0;k=null,jJ=null}if(a.signal.aborted)return J("[bridge:repl] Reconnect aborted by teardown"),!1;let Q=X;QJ.reuseEnvironmentId=Q;try{let Y=await R.registerBridgeEnvironment(QJ);X=Y.environment_id,LJ=Y.environment_secret}catch(Y){return QJ.reuseEnvironmentId=void 0,J(`[bridge:repl] Environment re-registration failed: ${D(Y)}`),!1}if(QJ.reuseEnvironmentId=void 0,J(`[bridge:repl] Re-registered: requested=${Q} got=${X}`),a.signal.aborted)return J("[bridge:repl] Reconnect aborted after env registration, cleaning up"),await R.deregisterEnvironment(X).catch(()=>{}),!1;if(Z!==null)return J("[bridge:repl] Poll loop recovered during registerBridgeEnvironment await — deferring to it"),zJ=0,!0;if(await cJ(Q,z))return q("tengu_bridge_repl_reconnected_in_place",{}),zJ=0,!0;if(X!==Q)q("tengu_bridge_repl_env_expired_fresh_session",{});if(await l(z),a.signal.aborted)return J("[bridge:repl] Reconnect aborted after archive, cleaning up"),await R.deregisterEnvironment(X).catch(()=>{}),!1;let $=ZJ(),W=await r({environmentId:X,title:$,gitRepoUrl:t,branch:y,signal:AbortSignal.timeout(15000)});if(!W)return J("[bridge:repl] Session creation failed during reconnection"),!1;if(a.signal.aborted)return J("[bridge:repl] Reconnect aborted after session creation, cleaning up"),await l(W),!1;return z=W,jQ(zQ(W)).catch(()=>{}),v=0,uJ.clear(),UJ=!b,J(`[bridge:repl] Re-created session: ${z}`),await h(L,{sessionId:z,environmentId:X,source:"repl"}),m?.clear(),zJ=0,!0}function wJ(){return n()}function aJ(){let Q=g.end();if(Q.length===0)return;if(!Z){J(`[bridge:repl] Cannot drain ${Q.length} pending message(s): no transport`);return}for(let Y of Q)$J.add(Y.uuid);let W=YJ(Q).map((Y)=>({...Y,session_id:z}));J(`[bridge:repl] Drained ${Q.length} pending message(s) after flush`),Z.writeBatch(W)}let yJ=null;function MJ(){yJ?.()}function XZ(Q){if(J(`[bridge:repl] Transport permanently closed: code=${Q}`),q("tengu_bridge_repl_ws_closed",{code:Q}),Z){let W=Z.getLastSequenceNum();if(W>v)v=W;Z=null}WJ();let $=g.drop();if($>0)J(`[bridge:repl] Dropping ${$} pending message(s) on transport close (code=${Q})`,{level:"warn"});if(Q===1000){G?.("failed","session ended"),a.abort(),MJ();return}G?.("reconnecting",`Remote Control connection lost (code ${Q})`),J(`[bridge:repl] Transport reconnect budget exhausted (code=${Q}), attempting env reconnect`),lJ().then((W)=>{if(W)return;if(a.signal.aborted)return;J("[bridge:repl] reconnectEnvironmentWithSession resolved false — tearing down"),q("tengu_bridge_repl_reconnect_failed",{close_code:Q}),G?.("failed","reconnection failed"),MJ()})}let jZ={api:R,getCredentials:()=>({environmentId:X,environmentSecret:LJ}),signal:a.signal,getPollIntervalConfig:U,onStateChange:G,getWsState:()=>Z?.getStateLabel()??"null",isAtCapacity:()=>Z!==null,capacitySignal:KZ,onFatalError:MJ,getHeartbeatInfo:()=>{if(!k||!jJ)return null;return{environmentId:X,workId:k,sessionToken:jJ}},onHeartbeatFatal:(Q)=>{if(J(`[bridge:repl] heartbeatWork fatal (status=${Q.status}) — tearing down work item for fast re-dispatch`),Z){let $=Z.getLastSequenceNum();if($>v)v=$;Z.close(),Z=null}if(g.drop(),k)R.stopWork(X,k,!1).catch(($)=>{J(`[bridge:repl] stopWork after heartbeat fatal: ${D($)}`)});k=null,jJ=null,WJ(),G?.("reconnecting","Work item lease expired, fetching fresh token")},async onEnvironmentLost(){if(!await lJ())return null;return{environmentId:X,environmentSecret:LJ}},onWorkReceived:(Q,$,W,Y)=>{if(Z?.isConnectedStatus())J(`[bridge:repl] Work received while transport connected, replacing with fresh token (workId=${W})`);if(J(`[bridge:repl] Work received: workId=${W} workSessionId=${Q} currentSessionId=${z} match=${bJ(Q,z)}`),h(L,{sessionId:z,environmentId:X,source:"repl"}),!bJ(Q,z)){J(`[bridge:repl] Rejecting foreign session: expected=${z} got=${Q}`);return}k=W,jJ=$;let A=Y||JQ(process.env.CLAUDE_BRIDGE_USE_CCR_V2),d;if(!A){if(d=wJ(),!d){J("[bridge:repl] No OAuth token available for session ingress, skipping work");return}DJ(d)}if(q("tengu_bridge_repl_work_received",{}),Z){let N=Z;Z=null;let _=N.getLastSequenceNum();if(_>v)v=_;N.close()}g.deactivate();let HZ=(N)=>LQ(N,{transport:Z,sessionId:z,onInterrupt:c,onSetModel:V,onSetMaxThinkingTokens:F,onSetPermissionMode:B}),kJ=!1,iJ=(N)=>{if(Z=N,N.setOnConnect(()=>{if(Z!==N)return;if(J("[bridge:repl] Ingress transport connected"),q("tengu_bridge_repl_ws_connected",{}),!A){let _=wJ();if(_)DJ(_)}if(hJ=!1,!kJ&&x&&x.length>0){kJ=!0;let _=M,I=x.filter((BJ)=>TJ(BJ)&&!m?.has(BJ.uuid)),HJ=_>0&&I.length>_?I.slice(-_):I;if(HJ.length<I.length)J(`[bridge:repl] Capped initial flush: ${I.length} -> ${HJ.length} (cap=${_})`),q("tengu_bridge_repl_history_capped",{eligible_count:I.length,capped_count:HJ.length});let NJ=YJ(HJ);if(NJ.length>0){J(`[bridge:repl] Flushing ${NJ.length} initial message(s) via transport`);let BJ=NJ.map((xJ)=>({...xJ,session_id:z})),tJ=N.droppedBatchCount;N.writeBatch(BJ).then(()=>{if(N.droppedBatchCount>tJ){J(`[bridge:repl] Initial flush dropped ${N.droppedBatchCount-tJ} batch(es) — not marking ${NJ.length} UUID(s) as flushed`);return}if(m){for(let xJ of NJ)if(xJ.uuid)m.add(xJ.uuid)}}).catch((xJ)=>J(`[bridge:repl] Initial flush failed: ${xJ}`)).finally(()=>{if(Z!==N)return;aJ(),G?.("connected")})}else aJ(),G?.("connected")}else if(!g.active)G?.("connected")}),N.setOnData((_)=>{qQ(_,$J,uJ,C,e,HZ)}),N.setOnClose((_)=>{if(Z!==N)return;XZ(_)}),!kJ&&x&&x.length>0)g.start();N.connect()};if(XJ++,A){let N=AQ(s,Q),_=XJ;J(`[bridge:repl] CCR v2: sessionUrl=${N} session=${Q} gen=${_}`),UQ({sessionUrl:N,ingressToken:$,sessionId:Q,initialSequenceNum:v}).then((I)=>{if(a.signal.aborted){I.close();return}if(_!==XJ){J(`[bridge:repl] CCR v2: discarding stale handshake gen=${_} current=${XJ}`),I.close();return}iJ(I)},(I)=>{if(J(`[bridge:repl] CCR v2: createV2ReplTransport failed: ${D(I)}`,{level:"error"}),q("tengu_bridge_repl_ccr_v2_init_failed",{}),_!==XJ)return;if(k)R.stopWork(X,k,!1).catch((HJ)=>{J(`[bridge:repl] stopWork after v2 init failure: ${D(HJ)}`)}),k=null,jJ=null;WJ()})}else{let N=BQ(w,Q);J(`[bridge:repl] Ingress URL: ${N}`),J(`[bridge:repl] Creating HybridTransport: session=${Q}`);let _=d??"";iJ(PQ(new RQ(new URL(N),{Authorization:`Bearer ${_}`,"anthropic-version":"2023-06-01"},Q,()=>({Authorization:`Bearer ${wJ()??_}`,"anthropic-version":"2023-06-01"}),{maxConsecutiveFailures:50,isBridge:!0,onBatchDropped:()=>{G?.("reconnecting","Lost sync with Remote Control — events could not be delivered"),WJ()}})))}}};AZ(jZ);let FJ=E?setInterval(()=>{if(VJ)return;h(L,{sessionId:z,environmentId:X,source:"repl"})},3600000):null;FJ?.unref?.();let gJ=U().session_keepalive_interval_v2_ms,EJ=gJ>0?setInterval(()=>{if(!Z)return;J("[bridge:repl] keep_alive sent"),Z.write({type:"keep_alive"}).catch((Q)=>{J(`[bridge:repl] keep_alive write failed: ${D(Q)}`)})},gJ):null;EJ?.unref?.();let hJ=!1;yJ=async()=>{if(hJ){J(`[bridge:repl] Teardown already in progress, skipping duplicate call env=${X} session=${z}`);return}hJ=!0;let Q=Date.now();if(J(`[bridge:repl] Teardown starting: env=${X} session=${z} workId=${k??"none"} transportState=${Z?.getStateLabel()??"null"}`),FJ!==null)clearInterval(FJ);if(EJ!==null)clearInterval(EJ);if(a.abort(),J("[bridge:repl] Teardown: poll loop aborted"),Z){let Y=Z.getLastSequenceNum();if(Y>v)v=Y}if(E){Z=null,g.drop(),await h(L,{sessionId:z,environmentId:X,source:"repl"}),J(`[bridge:repl] Teardown (perpetual): leaving env=${X} session=${z} alive on server, duration=${Date.now()-Q}ms`);return}let $=Z;if(Z=null,g.drop(),$)$.write(CJ(z));let W=k?R.stopWork(X,k,!0).then(()=>{J("[bridge:repl] Teardown: stopWork completed")}).catch((Y)=>{J(`[bridge:repl] Teardown stopWork failed: ${D(Y)}`)}):Promise.resolve();await Promise.all([W,l(z)]),$?.close(),J("[bridge:repl] Teardown: transport closed"),await R.deregisterEnvironment(X).catch((Y)=>{J(`[bridge:repl] Teardown deregister failed: ${D(Y)}`)}),await JJ(L),J(`[bridge:repl] Teardown complete: env=${X} duration=${Date.now()-Q}ms`)};let VZ=eJ(()=>yJ?.());return J(`[bridge:repl] Ready: env=${X} session=${z}`),G?.("ready"),{get bridgeSessionId(){return z},get environmentId(){return X},getSSESequenceNum(){let Q=Z?.getLastSequenceNum()??0;return Math.max(v,Q)},sessionIngressUrl:w,writeMessages(Q){let $=Q.filter((A)=>TJ(A)&&!PJ.has(A.uuid)&&!$J.has(A.uuid));if($.length===0)return;if(!UJ)for(let A of $){let d=_Q(A);if(d!==void 0&&b?.(d,z)){UJ=!0;break}}if(g.enqueue(...$)){J(`[bridge:repl] Queued ${$.length} message(s) during initial flush`);return}if(!Z){let A=$.map((d)=>d.type).join(",");J(`[bridge:repl] Transport not configured, dropping ${$.length} message(s) [${A}] for session=${z}`,{level:"warn"});return}for(let A of $)$J.add(A.uuid);J(`[bridge:repl] Sending ${$.length} message(s) via transport`);let Y=YJ($).map((A)=>({...A,session_id:z}));Z.writeBatch(Y)},writeSdkMessages(Q){let $=Q.filter((Y)=>!Y.uuid||!$J.has(Y.uuid));if($.length===0)return;if(!Z){J(`[bridge:repl] Transport not configured, dropping ${$.length} SDK message(s) for session=${z}`,{level:"warn"});return}for(let Y of $)if(Y.uuid)$J.add(Y.uuid);let W=$.map((Y)=>({...Y,session_id:z}));Z.writeBatch(W)},sendControlRequest(Q){if(!Z){J("[bridge:repl] Transport not configured, skipping control_request");return}let $={...Q,session_id:z};Z.write($),J(`[bridge:repl] Sent control_request request_id=${Q.request_id}`)},sendControlResponse(Q){if(!Z){J("[bridge:repl] Transport not configured, skipping control_response");return}let $={...Q,session_id:z};Z.write($),J("[bridge:repl] Sent control_response")},sendControlCancelRequest(Q){if(!Z){J("[bridge:repl] Transport not configured, skipping control_cancel_request");return}let $={type:"control_cancel_request",request_id:Q,session_id:z};Z.write($),J(`[bridge:repl] Sent control_cancel_request request_id=${Q}`)},sendResult(){if(!Z){J(`[bridge:repl] sendResult: skipping, transport not configured session=${z}`);return}Z.write(CJ(z)),J(`[bridge:repl] Sent result for session=${z}`)},async teardown(){VZ(),await yJ?.(),J("[bridge:repl] Torn down"),q("tengu_bridge_repl_teardown",{})}}}async function AZ({api:p,getCredentials:L,signal:T,onStateChange:y,onWorkReceived:t,onEnvironmentLost:o,getWsState:s,isAtCapacity:w,capacitySignal:S,onFatalError:n,getPollIntervalConfig:r=()=>vJ,getHeartbeatInfo:l,onHeartbeatFatal:ZJ}){J(`[bridge:repl] Starting work poll loop for env=${L().environmentId}`);let P=0,U=null,M=null,x=0,m=!1;while(!T.aborted){let{environmentId:C,environmentSecret:e}=L(),c=r();try{let V=await p.pollForWork(C,e,T,c.reclaim_older_than_ms);if(x=0,P>0)J(`[bridge:repl] Poll recovered after ${P} consecutive error(s)`),P=0,U=null,M=null,y?.("ready");if(!V){let B=m;if(m=!1,w?.()&&S&&!B){let G=c.poll_interval_ms_at_capacity;if(c.non_exclusive_heartbeat_interval_ms>0&&l){q("tengu_bridge_heartbeat_mode_entered",{heartbeat_interval_ms:c.non_exclusive_heartbeat_interval_ms});let E=G>0?Date.now()+G:null,u=!1,O=0;while(!T.aborted&&w()&&(E===null||Date.now()<E)){let JJ=r();if(JJ.non_exclusive_heartbeat_interval_ms<=0)break;let j=l();if(!j)break;let H=S();try{await p.heartbeatWork(j.environmentId,j.workId,j.sessionToken)}catch(K){if(J(`[bridge:repl:heartbeat] Failed: ${D(K)}`),K instanceof AJ){if(H.cleanup(),q("tengu_bridge_heartbeat_error",{status:K.status,error_type:K.status===401||K.status===403?"auth_failed":"fatal"}),ZJ)ZJ(K),J(`[bridge:repl:heartbeat] Fatal (status=${K.status}), work state cleared — fast-polling for re-dispatch`);else u=!0;break}}O++,await OJ(JJ.non_exclusive_heartbeat_interval_ms,H.signal),H.cleanup()}let h=u?"error":T.aborted?"shutdown":!w()?"capacity_changed":E!==null&&Date.now()>=E?"poll_due":"config_disabled";if(q("tengu_bridge_heartbeat_mode_exited",{reason:h,heartbeat_cycles:O}),!u){if(h==="poll_due")J(`[bridge:repl] Heartbeat poll_due after ${O} cycles — falling through to pollForWork`);continue}}let b=G>0?G:c.non_exclusive_heartbeat_interval_ms;if(b>0){let E=S(),u=Date.now();await OJ(b,E.signal),E.cleanup();let O=Date.now()-u-b;if(O>60000)J(`[bridge:repl] At-capacity sleep overran by ${Math.round(O/1000)}s — process suspension detected, forcing one fast-poll cycle`),q("tengu_bridge_repl_suspension_detected",{overrun_ms:O}),m=!0}}else await OJ(c.poll_interval_ms_not_at_capacity,T);continue}let F;try{F=yQ(V.secret)}catch(B){J(`[bridge:repl] Failed to decode work secret: ${D(B)}`),q("tengu_bridge_repl_work_secret_failed",{}),await p.stopWork(C,V.id,!1).catch(()=>{});continue}J(`[bridge:repl] Acknowledging workId=${V.id}`);try{await p.acknowledgeWork(C,V.id,F.session_ingress_token)}catch(B){J(`[bridge:repl] Acknowledge failed workId=${V.id}: ${D(B)}`)}if(V.data.type==="healthcheck"){J("[bridge:repl] Healthcheck received");continue}if(V.data.type==="session"){let B=V.data.id;try{GQ(B,"session_id")}catch{J(`[bridge:repl] Invalid session_id in work: ${B}`);continue}t(B,F.session_ingress_token,V.id,F.use_code_sessions===!0),J("[bridge:repl] Work accepted, continuing poll loop")}}catch(V){if(T.aborted)break;if(V instanceof AJ&&V.status===404&&o){let O=L().environmentId;if(C!==O){J(`[bridge:repl] Stale poll error for old env=${C}, current env=${O} — skipping onEnvironmentLost`),P=0,U=null;continue}if(x++,J(`[bridge:repl] Environment deleted, attempting re-registration (attempt ${x}/3)`),q("tengu_bridge_repl_env_lost",{attempt:x}),x>3){J("[bridge:repl] Environment re-registration limit reached (3), giving up"),y?.("failed","Environment deleted and re-registration limit reached"),n?.();break}y?.("reconnecting","environment lost, recreating session");let h=await o();if(T.aborted)break;if(h){P=0,U=null,y?.("ready"),J(`[bridge:repl] Re-registered environment: ${h.environmentId}`);continue}y?.("failed","Environment deleted and re-registration failed"),n?.();break}if(V instanceof AJ){let O=NQ(V.errorType),h=OQ(V);if(J(`[bridge:repl] Fatal poll error: ${V.message} (status=${V.status}, type=${V.errorType??"unknown"})${h?" (suppressed)":""}`),q("tengu_bridge_repl_fatal_error",{status:V.status,error_type:V.errorType}),GJ(O?"info":"error","bridge_repl_fatal_error",{status:V.status,error_type:V.errorType}),!h)y?.("failed",O?"session expired · /remote-control to reconnect":V.message);n?.();break}let F=Date.now();if(M!==null&&F-M>sJ*2)J(`[bridge:repl] Detected system sleep (${Math.round((F-M)/1000)}s gap), resetting poll error budget`),GJ("info","bridge_repl_poll_sleep_detected",{gapMs:F-M}),P=0,U=null;if(M=F,P++,U===null)U=F;let B=F-U,G=HQ(V),b=VQ(V),E=s?.()??"unknown";if(J(`[bridge:repl] Poll error (attempt ${P}, elapsed ${Math.round(B/1000)}s, ws=${E}): ${b}`),q("tengu_bridge_repl_poll_error",{status:G,consecutiveErrors:P,elapsedMs:B}),P===1)y?.("reconnecting",b);if(B>=nJ){J(`[bridge:repl] Poll failures exceeded ${nJ/1000}s (${P} errors), giving up`),GJ("info","bridge_repl_poll_give_up"),q("tengu_bridge_repl_poll_give_up",{consecutiveErrors:P,elapsedMs:B,lastStatus:G}),y?.("failed","connection to server lost");break}let u=Math.min(yZ*2**(P-1),sJ);if(r().non_exclusive_heartbeat_interval_ms>0){let O=l?.();if(O)try{await p.heartbeatWork(O.environmentId,O.workId,O.sessionToken)}catch{}}await OJ(u,T)}}J(`[bridge:repl] Work poll loop ended (aborted=${T.aborted}) env=${L().environmentId}`)}YQ();async function T0(p){let{onInboundMessage:L,onPermissionResponse:T,onInterrupt:y,onSetModel:t,onSetMaxThinkingTokens:o,onSetPermissionMode:s,onStateChange:w,initialMessages:S,getMessages:n,previouslyFlushedUUIDs:r,initialName:l,perpetual:ZJ,outboundOnly:YJ,tags:P}=p??{};if(cQ(tQ),!await gQ())return i("not_enabled","[bridge:repl] Skipping: bridge not enabled"),null;if(!KJ())return i("no_oauth","[bridge:repl] Skipping: no OAuth tokens"),w?.("failed","/login"),null;if(await uQ(),!dQ("allow_remote_control"))return i("policy_denied","[bridge:repl] Skipping: allow_remote_control policy not allowed"),w?.("failed","disabled by your organization's policy"),null;if(!lQ()){let j=mQ();if(j.bridgeOauthDeadExpiresAt!=null&&(j.bridgeOauthDeadFailCount??0)>=3&&SJ()?.expiresAt===j.bridgeOauthDeadExpiresAt)return J(`[bridge:repl] Skipping: cross-process backoff (dead token seen ${j.bridgeOauthDeadFailCount} times)`),null;await SQ();let H=SJ();if(H&&H.expiresAt!==null&&H.expiresAt<=Date.now()){i("oauth_expired_unrefreshable","[bridge:repl] Skipping: OAuth token expired and refresh failed (re-login required)"),w?.("failed","/login");let K=H.expiresAt;return CQ((f)=>({...f,bridgeOauthDeadExpiresAt:K,bridgeOauthDeadFailCount:f.bridgeOauthDeadExpiresAt===K?(f.bridgeOauthDeadFailCount??0)+1:1})),null}}let U=aQ(),M=`remote-control-${pQ()}`,x=!1,m=!1;if(l)M=l,x=!0,m=!0;else{let j=_J(),H=j?qJ(j):void 0;if(H)M=H,x=!0,m=!0;else if(S&&S.length>0)for(let K=S.length-1;K>=0;K--){let f=S[K];if(f.type!=="user"||f.isMeta||f.toolUseResult||f.isCompactSummary||f.origin&&f.origin.kind!=="human"||ZZ(f))continue;let R=IQ(f.message.content);if(!R)continue;let QJ=EQ(R);if(!QJ)continue;M=QJ,x=!0;break}}let C=0,e,c=0,V=(j,H,K)=>{x=!0,M=j,J(`[bridge:repl] derived title from message ${K}: ${j}`),JZ(H,j,{baseUrl:U,getAccessToken:KJ}).catch(()=>{})},F=(j,H)=>{let K=++c,f=C;nQ(j,AbortSignal.timeout(15000)).then((R)=>{if(R&&K===c&&e===H&&!qJ(_J()))V(R,H,f)})},B=(j,H)=>{if(m||qJ(_J()))return!0;if(e!==void 0&&e!==H)C=0;if(e=H,C++,C===1&&!x){let K=EQ(j);if(K)V(K,H,C);F(j,H)}else if(C===3){let K=n?.(),f=K?sQ($Z(K)):j;F(f,H)}return C>=3},G=kQ("tengu_bridge_initial_history_cap",200,300000),b=await vQ();if(!b)return i("no_org_uuid","[bridge:repl] Skipping: no org UUID"),w?.("failed","/login"),null;if(iQ()&&!ZJ){let j=await QZ();if(j)return i("version_too_old",`[bridge:repl] Skipping: ${j}`,!0),w?.("failed","run `claude update` to upgrade"),null;J("[bridge:repl] Using env-less bridge path (tengu_bridge_repl_v2)");let{initEnvLessBridgeCore:H}=await import("./remoteBridgeCore-1.0.14-8r8xr5x5.mjs");return H({baseUrl:U,orgUUID:b,title:M,getAccessToken:KJ,onAuth401:IJ,toSDKMessages:pJ,initialHistoryCap:G,initialMessages:S,onInboundMessage:L,onUserMessage:B,onPermissionResponse:T,onInterrupt:y,onSetModel:t,onSetMaxThinkingTokens:o,onSetPermissionMode:s,onStateChange:w,outboundOnly:YJ,tags:P})}let E=oQ();if(E)return i("version_too_old",`[bridge:repl] Skipping: ${E}`),w?.("failed","run `claude update` to upgrade"),null;let u=await DQ(),O=await TQ(),h=process.env.CLAUDE_BRIDGE_SESSION_INGRESS_URL||U,JJ="claude_code";return MQ({dir:hQ(),machineName:IZ(),branch:u,gitRepoUrl:O,title:M,baseUrl:U,sessionIngressUrl:h,workerType:JJ,getAccessToken:KJ,createSession:(j)=>rQ({...j,events:[],baseUrl:U,getAccessToken:KJ}),archiveSession:(j)=>eQ(j,{baseUrl:U,getAccessToken:KJ,timeoutMs:1500}).catch((H)=>{J(`[bridge:repl] archiveBridgeSession threw: ${D(H)}`,{level:"error"})}),getCurrentTitle:()=>qJ(_J())??M,onUserMessage:B,toSDKMessages:pJ,onAuth401:IJ,getPollIntervalConfig:zZ,initialHistoryCap:G,initialMessages:S,previouslyFlushedUUIDs:r,onInboundMessage:L,onPermissionResponse:T,onInterrupt:y,onSetModel:t,onSetMaxThinkingTokens:o,onSetPermissionMode:s,onStateChange:w,perpetual:ZJ})}var FQ=50;function EQ(p){let L=bQ(p),y=(/^(.*?[.!?])\s/.exec(L)?.[1]??L).replace(/\s+/g," ").trim();if(!y)return;return y.length>FQ?y.slice(0,FQ-1)+"…":y}export{T0 as initReplBridge};

package/dist/chunks/ink-1.0.14-9k6231ba.mjs

@@ -0,0 +1 @@
+import{$Z as l,E0 as q,G0 as r,I0 as s,M0 as t,MZ as i,NZ as j,O0 as u,P0 as v,Q0 as w,R0 as x,S0 as y,T0 as z,U0 as A,W0 as B,X0 as C,XZ as k,a1 as D,b1 as E,c1 as F,d1 as G,g1 as H,h1 as I,i1 as J,iZ as a,j1 as K,k0 as m,k1 as L,l1 as M,lZ as b,mZ as c,p0 as n,pZ as d,r0 as o,sZ as e,tZ as f,uZ as g,vZ as h,x0 as p}from"./cli-1.0.14-m70b5kbd.mjs";import"./cli-1.0.14-t1sj3p5p.mjs";import"./cli-1.0.14-2m0sc9nm.mjs";import"./cli-1.0.14-e4rbgkh3.mjs";import"./cli-1.0.14-psw8gbp1.mjs";import"./cli-1.0.14-vvvyddeg.mjs";import"./cli-1.0.14-p8g9b6qs.mjs";import"./cli-1.0.14-6v1pc51c.mjs";import"./cli-1.0.14-gjg1vjat.mjs";import"./cli-1.0.14-brabf1jv.mjs";import"./cli-1.0.14-95d1hyag.mjs";import"./cli-1.0.14-ya91z6q2.mjs";import"./cli-1.0.14-q4pb7169.mjs";import"./cli-1.0.14-y10j25g4.mjs";import"./cli-1.0.14-sn3z317d.mjs";import"./cli-1.0.14-k8eysm02.mjs";import"./cli-1.0.14-pxda0cqk.mjs";import"./cli-1.0.14-ccc05p60.mjs";import"./cli-1.0.14-tdv8sv8w.mjs";import"./cli-1.0.14-dzhv160v.mjs";import"./cli-1.0.14-5z2gnwr2.mjs";import"./cli-1.0.14-bhtptg08.mjs";import"./cli-1.0.14-zar1mrp1.mjs";import"./cli-1.0.14-5d4wcwg0.mjs";import"./cli-1.0.14-ks6tgvs0.mjs";M();export{k as wrapText,g as useThemeSetting,f as useTheme,A as useTerminalViewport,I as useTerminalTitle,m as useTerminalFocus,H as useTabStatus,d as useStdin,G as useSelection,h as usePreviewTheme,F as useInterval,D as useInput,C as useApp,E as useAnimationTimer,B as useAnimationFrame,a as supportsTabStatus,K as render,J as measureElement,L as createRoot,q as color,e as ThemeProvider,s as Text,j as TerminalFocusEvent,z as Spacer,y as RawAnsi,x as NoSelect,w as Newline,t as Link,i as InputEvent,l as FocusManager,c as EventEmitter,b as Event,p as ClickEvent,v as Button,r as Box,o as BaseText,n as BaseBox,u as Ansi};