@claudiolabs/claudin 1.1.19 → 1.1.21

package/dist/chunks/index-1.1.21-m167t33s.mjs

@@ -0,0 +1 @@
+import{kW as a,lW as b,mW as c,nW as d,oW as e}from"./cli-1.1.21-wwrjy8z7.mjs";import"./cli-1.1.21-13kr6en7.mjs";e();export{c as watch,d as default,a as WatchHelper,b as FSWatcher};

package/dist/chunks/index-1.1.21-q5vrbm1a.mjs

@@ -0,0 +1 @@
+import{$9 as Dr,H9 as G,I9 as fr,J9 as Hr,K9 as Lr,L9 as oe,M9 as er,N9 as Ut,O9 as Vr,P9 as et,Q9 as zr,R9 as hr,S9 as tt,T9 as D,U9 as St,V9 as Sr,W9 as Or,Y9 as Ir,Z9 as br,_9 as qr,a_ as Rr,b_ as tr,c_ as rr,d_ as sr,e_ as Ar,f_ as Br}from"./cli-1.1.21-gyh1fxbr.mjs";import{g_ as Qe}from"./cli-1.1.21-fdf1j366.mjs";import{eta as Er,fta as Pr}from"./cli-1.1.21-jqy3a4ze.mjs";import{hta as vr}from"./cli-1.1.21-er4j34m5.mjs";import{jta as we}from"./cli-1.1.21-aa0dfxt3.mjs";import{rta as a}from"./cli-1.1.21-13kr6en7.mjs";var $=a((_)=>{Object.defineProperty(_,"__esModule",{value:!0});_.resolveHttpAuthSchemeConfig=_.defaultSigninHttpAuthSchemeProvider=_.defaultSigninHttpAuthSchemeParametersProvider=void 0;var Ot=G(),g=St(),It=async(e,t,r)=>{return{operation:(0,g.getSmithyContext)(t).operation,region:await(0,g.normalizeProvider)(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}};_.defaultSigninHttpAuthSchemeParametersProvider=It;function bt(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"signin",region:e.region},propertiesExtractor:(t,r)=>({signingProperties:{config:t,context:r}})}}function qt(e){return{schemeId:"smithy.api#noAuth"}}var Dt=(e)=>{let t=[];switch(e.operation){case"CreateOAuth2Token":{t.push(qt(e));break}default:t.push(bt(e))}return t};_.defaultSigninHttpAuthSchemeProvider=Dt;var Rt=(e)=>{let t=(0,Ot.resolveAwsSdkSigV4Config)(e);return Object.assign(t,{authSchemePreference:(0,g.normalizeProvider)(e.authSchemePreference??[])})};_.resolveHttpAuthSchemeConfig=Rt});var ae=a((ie)=>{Object.defineProperty(ie,"__esModule",{value:!0});ie.bdd=void 0;var Nt=oe(),P="ref",c=-1,b=!0,ee="isSet",ne="PartitionResult",q="booleanEquals",L="getAttr",f="stringEquals",te={[P]:"Endpoint"},V={[P]:ne},H={fn:L,argv:[V,"name"]},l={},re=[{[P]:"Region"}],se={conditions:[[ee,[te]],[ee,re],["aws.partition",re,ne],[q,[{[P]:"UseFIPS"},b]],[q,[{[P]:"UseDualStack"},b]],[q,[{fn:L,argv:[V,"supportsDualStack"]},b]],[q,[{fn:L,argv:[V,"supportsFIPS"]},b]],[f,[H,"aws"]],[f,[H,"aws-cn"]],[f,[H,"aws-us-gov"]]],results:[[c],[c,"Invalid Configuration: FIPS and custom endpoint are not supported"],[c,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[te,l],["https://{Region}.signin.aws.amazon.com",l],["https://{Region}.signin.amazonaws.cn",l],["https://{Region}.signin.amazonaws-us-gov.com",l],["https://signin-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",l],[c,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://signin-fips.{Region}.{PartitionResult#dnsSuffix}",l],[c,"FIPS is enabled but this partition does not support FIPS"],["https://signin.{Region}.{PartitionResult#dualStackDnsSuffix}",l],[c,"DualStack is enabled but this partition does not support DualStack"],["https://signin.{Region}.{PartitionResult#dnsSuffix}",l],[c,"Invalid Configuration: Missing Region"]]},Mt=2,s=1e8,wt=new Int32Array([-1,1,-1,0,15,3,1,4,s+14,2,5,s+14,3,11,6,4,10,7,7,s+4,8,8,s+5,9,9,s+6,s+13,5,s+11,s+12,4,13,12,6,s+9,s+10,5,14,s+8,6,s+7,s+8,3,s+1,16,4,s+2,s+3]);ie.bdd=Nt.BinaryDecisionDiagram.from(wt,Mt,se.conditions,se.results)});var pe=a((ue)=>{Object.defineProperty(ue,"__esModule",{value:!0});ue.defaultEndpointResolver=void 0;var xt=Ut(),z=oe(),gt=ae(),Gt=new z.EndpointCache({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),$t=(e,t={})=>{return Gt.get(e,()=>(0,z.decideEndpoint)(gt.bdd,{endpointParams:e,logger:t.logger}))};ue.defaultEndpointResolver=$t;z.customEndpointFunctions.aws=xt.awsEndpointFunctions});var R=a((A)=>{Object.defineProperty(A,"__esModule",{value:!0});A.SigninServiceException=A.__ServiceException=void 0;var ce=D();Object.defineProperty(A,"__ServiceException",{enumerable:!0,get:function(){return ce.ServiceException}});class h extends ce.ServiceException{constructor(e){super(e);Object.setPrototypeOf(this,h.prototype)}}A.SigninServiceException=h});var J=a((Ee)=>{Object.defineProperty(Ee,"__esModule",{value:!0});Ee.ValidationException=Ee.TooManyRequestsError=Ee.InternalServerException=Ee.AccessDeniedException=void 0;var y=R();class B extends y.SigninServiceException{name="AccessDeniedException";$fault="client";error;constructor(e){super({name:"AccessDeniedException",$fault:"client",...e});Object.setPrototypeOf(this,B.prototype),this.error=e.error}}Ee.AccessDeniedException=B;class W extends y.SigninServiceException{name="InternalServerException";$fault="server";error;constructor(e){super({name:"InternalServerException",$fault:"server",...e});Object.setPrototypeOf(this,W.prototype),this.error=e.error}}Ee.InternalServerException=W;class Y extends y.SigninServiceException{name="TooManyRequestsError";$fault="client";error;constructor(e){super({name:"TooManyRequestsError",$fault:"client",...e});Object.setPrototypeOf(this,Y.prototype),this.error=e.error}}Ee.TooManyRequestsError=Y;class j extends y.SigninServiceException{name="ValidationException";$fault="client";error;constructor(e){super({name:"ValidationException",$fault:"client",...e});Object.setPrototypeOf(this,j.prototype),this.error=e.error}}Ee.ValidationException=j});var Z=a(($e)=>{Object.defineProperty($e,"__esModule",{value:!0});$e.CreateOAuth2Token$=$e.CreateOAuth2TokenResponseBody$=$e.CreateOAuth2TokenResponse$=$e.CreateOAuth2TokenRequestBody$=$e.CreateOAuth2TokenRequest$=$e.AccessToken$=$e.errorTypeRegistries=$e.ValidationException$=$e.TooManyRequestsError$=$e.InternalServerException$=$e.AccessDeniedException$=$e.SigninServiceException$=void 0;var Vt="AccessDeniedException",zt="AccessToken",ht="CreateOAuth2Token",At="CreateOAuth2TokenRequest",Bt="CreateOAuth2TokenRequestBody",Wt="CreateOAuth2TokenResponseBody",Yt="CreateOAuth2TokenResponse",jt="InternalServerException",Jt="RefreshToken",Xt="TooManyRequestsError",Qt="ValidationException",Se="accessKeyId",Oe="accessToken",X="client",Ie="clientId",be="codeVerifier",Zt="code",p="error",qe="expiresIn",De="grantType",Kt="http",Q="httpError",Re="idToken",n="jsonName",N="message",F="refreshToken",ye="redirectUri",Ue="smithy.ts.sdk.synthetic.com.amazonaws.signin",Fe="secretAccessKey",Ne="sessionToken",Tt="server",mt="tokenInput",kt="tokenOutput",Me="tokenType",i="com.amazonaws.signin",xe=we(),M=J(),_t=R(),ge=xe.TypeRegistry.for(Ue);$e.SigninServiceException$=[-3,Ue,"SigninServiceException",0,[],[]];ge.registerError($e.SigninServiceException$,_t.SigninServiceException);var S=xe.TypeRegistry.for(i);$e.AccessDeniedException$=[-3,i,Vt,{[p]:X},[p,N],[0,0],2];S.registerError($e.AccessDeniedException$,M.AccessDeniedException);$e.InternalServerException$=[-3,i,jt,{[p]:Tt,[Q]:500},[p,N],[0,0],2];S.registerError($e.InternalServerException$,M.InternalServerException);$e.TooManyRequestsError$=[-3,i,Xt,{[p]:X,[Q]:429},[p,N],[0,0],2];S.registerError($e.TooManyRequestsError$,M.TooManyRequestsError);$e.ValidationException$=[-3,i,Qt,{[p]:X,[Q]:400},[p,N],[0,0],2];S.registerError($e.ValidationException$,M.ValidationException);$e.errorTypeRegistries=[ge,S];var Ge=[0,i,Jt,8,0];$e.AccessToken$=[3,i,zt,8,[Se,Fe,Ne],[[0,{[n]:Se}],[0,{[n]:Fe}],[0,{[n]:Ne}]],3];$e.CreateOAuth2TokenRequest$=[3,i,At,0,[mt],[[()=>$e.CreateOAuth2TokenRequestBody$,16]],1];$e.CreateOAuth2TokenRequestBody$=[3,i,Bt,0,[Ie,De,Zt,ye,be,F],[[0,{[n]:Ie}],[0,{[n]:De}],0,[0,{[n]:ye}],[0,{[n]:be}],[()=>Ge,{[n]:F}]],2];$e.CreateOAuth2TokenResponse$=[3,i,Yt,0,[kt],[[()=>$e.CreateOAuth2TokenResponseBody$,16]],1];$e.CreateOAuth2TokenResponseBody$=[3,i,Wt,0,[Oe,Me,qe,F,Re],[[()=>$e.AccessToken$,{[n]:Oe}],[0,{[n]:Me}],[1,{[n]:qe}],[()=>Ge,{[n]:F}],[0,{[n]:Re}]],4];$e.CreateOAuth2Token$=[9,i,ht,{[Kt]:["POST","/v1/token",200]},()=>$e.CreateOAuth2TokenRequest$,()=>$e.CreateOAuth2TokenResponse$]});var Te=a((Ze)=>{Object.defineProperty(Ze,"__esModule",{value:!0});Ze.getRuntimeConfig=void 0;var or=G(),nr=rr(),ir=Qe(),dr=D(),ar=er(),Je=sr(),Xe=tr(),ur=$(),lr=pe(),pr=Z(),cr=(e)=>{return{apiVersion:"2023-01-01",base64Decoder:e?.base64Decoder??Je.fromBase64,base64Encoder:e?.base64Encoder??Je.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??lr.defaultEndpointResolver,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??ur.defaultSigninHttpAuthSchemeProvider,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4"),signer:new or.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(t)=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new ir.NoAuthSigner}],logger:e?.logger??new dr.NoOpLogger,protocol:e?.protocol??nr.AwsRestJsonProtocol,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.signin",errorTypeRegistries:pr.errorTypeRegistries,version:"2023-01-01",serviceTarget:"Signin"},serviceId:e?.serviceId??"Signin",urlParser:e?.urlParser??ar.parseUrl,utf8Decoder:e?.utf8Decoder??Xe.fromUtf8,utf8Encoder:e?.utf8Encoder??Xe.toUtf8}};Ze.getRuntimeConfig=cr});var ot=a((rt)=>{Object.defineProperty(rt,"__esModule",{value:!0});rt.getRuntimeConfig=void 0;var yr=Sr(),Fr=yr.__importDefault(Or()),Nr=Pr(),Mr=G(),me=Ir(),w=et(),wr=br(),ke=tt(),v=qr(),_e=vr(),Ce=D(),Ur=Dr(),xr=Rr(),gr=Er(),Gr=Te(),$r=(e)=>{(0,Ce.emitWarningIfUnsupportedVersion)(process.version);let t=(0,xr.resolveDefaultsModeConfig)(e),r=()=>t().then(Ce.loadConfigsForDefaultMode),d=(0,Gr.getRuntimeConfig)(e);(0,Nr.emitWarningIfUnsupportedVersion)(process.version);let o={profile:e?.profile,logger:d.logger};return{...d,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??(0,v.loadConfig)(Mr.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS,o),bodyLengthChecker:e?.bodyLengthChecker??Ur.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,me.createDefaultUserAgentProvider)({serviceId:d.serviceId,clientVersion:Fr.default.version}),maxAttempts:e?.maxAttempts??(0,v.loadConfig)(ke.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??(0,v.loadConfig)(w.NODE_REGION_CONFIG_OPTIONS,{...w.NODE_REGION_CONFIG_FILE_OPTIONS,...o}),requestHandler:_e.NodeHttpHandler.create(e?.requestHandler??r),retryMode:e?.retryMode??(0,v.loadConfig)({...ke.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await r()).retryMode||gr.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??wr.Hash.bind(null,"sha256"),streamCollector:e?.streamCollector??_e.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??(0,v.loadConfig)(w.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,o),useFipsEndpoint:e?.useFipsEndpoint??(0,v.loadConfig)(w.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,o),userAgentAppId:e?.userAgentAppId??(0,v.loadConfig)(me.NODE_APP_ID_CONFIG_OPTIONS,o)}};rt.getRuntimeConfig=$r});var as=a((u)=>{var nt=fr(),Wr=Hr(),Yr=Lr(),it=Vr(),jr=et(),K=Qe(),Jr=we(),Xr=zr(),pt=hr(),dt=tt(),E=D(),at=$(),Qr=ot(),ut=Ar(),lt=Br(),O=Z(),U=J(),Zr=R(),Kr=(e)=>{return Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"signin"})},Tr={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},mr=(e)=>{let{httpAuthSchemes:t,httpAuthSchemeProvider:r,credentials:d}=e;return{setHttpAuthScheme(o){let I=t.findIndex((x)=>x.schemeId===o.schemeId);if(I===-1)t.push(o);else t.splice(I,1,o)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(o){r=o},httpAuthSchemeProvider(){return r},setCredentials(o){d=o},credentials(){return d}}},kr=(e)=>{return{httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}},_r=(e,t)=>{let r=Object.assign(ut.getAwsRegionExtensionConfiguration(e),E.getDefaultExtensionConfiguration(e),lt.getHttpHandlerExtensionConfiguration(e),mr(e));return t.forEach((d)=>d.configure(r)),Object.assign(e,ut.resolveAwsRegionExtensionConfiguration(r),E.resolveDefaultRuntimeConfig(r),lt.resolveHttpHandlerRuntimeConfig(r),kr(r))};class T extends E.Client{config;constructor(...[e]){let t=Qr.getRuntimeConfig(e||{});super(t);this.initConfig=t;let r=Kr(t),d=it.resolveUserAgentConfig(r),o=dt.resolveRetryConfig(d),I=jr.resolveRegionConfig(o),x=nt.resolveHostHeaderConfig(I),ct=pt.resolveEndpointConfig(x),vt=at.resolveHttpAuthSchemeConfig(ct),Et=_r(vt,e?.extensions||[]);this.config=Et,this.middlewareStack.use(Jr.getSchemaSerdePlugin(this.config)),this.middlewareStack.use(it.getUserAgentPlugin(this.config)),this.middlewareStack.use(dt.getRetryPlugin(this.config)),this.middlewareStack.use(Xr.getContentLengthPlugin(this.config)),this.middlewareStack.use(nt.getHostHeaderPlugin(this.config)),this.middlewareStack.use(Wr.getLoggerPlugin(this.config)),this.middlewareStack.use(Yr.getRecursionDetectionPlugin(this.config)),this.middlewareStack.use(K.getHttpAuthSchemeEndpointRuleSetPlugin(this.config,{httpAuthSchemeParametersProvider:at.defaultSigninHttpAuthSchemeParametersProvider,identityProviderConfigProvider:async(Pt)=>new K.DefaultIdentityProviderConfig({"aws.auth#sigv4":Pt.credentials})})),this.middlewareStack.use(K.getHttpSigningPlugin(this.config))}destroy(){super.destroy()}}class m extends E.Command.classBuilder().ep(Tr).m(function(e,t,r,d){return[pt.getEndpointPlugin(r,e.getEndpointParameterInstructions())]}).s("Signin","CreateOAuth2Token",{}).n("SigninClient","CreateOAuth2TokenCommand").sc(O.CreateOAuth2Token$).build(){}var Cr={CreateOAuth2TokenCommand:m};class k extends T{}E.createAggregatedClient(Cr,k);var es={AUTHCODE_EXPIRED:"AUTHCODE_EXPIRED",INSUFFICIENT_PERMISSIONS:"INSUFFICIENT_PERMISSIONS",INVALID_REQUEST:"INVALID_REQUEST",SERVER_ERROR:"server_error",TOKEN_EXPIRED:"TOKEN_EXPIRED",USER_CREDENTIALS_CHANGED:"USER_CREDENTIALS_CHANGED"};u.$Command=E.Command;u.__Client=E.Client;u.SigninServiceException=Zr.SigninServiceException;u.CreateOAuth2TokenCommand=m;u.OAuth2ErrorCode=es;u.Signin=k;u.SigninClient=T;Object.prototype.hasOwnProperty.call(O,"__proto__")&&!Object.prototype.hasOwnProperty.call(u,"__proto__")&&Object.defineProperty(u,"__proto__",{enumerable:!0,value:O.__proto__});Object.keys(O).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(u,e))u[e]=O[e]});Object.prototype.hasOwnProperty.call(U,"__proto__")&&!Object.prototype.hasOwnProperty.call(u,"__proto__")&&Object.defineProperty(u,"__proto__",{enumerable:!0,value:U.__proto__});Object.keys(U).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(u,e))u[e]=U[e]})});export default as();

package/dist/chunks/index-1.1.21-s1aj62xz.mjs

@@ -0,0 +1 @@
+import{hta as a}from"./cli-1.1.21-er4j34m5.mjs";import"./cli-1.1.21-aa0dfxt3.mjs";import"./cli-1.1.21-13kr6en7.mjs";export default a();

package/dist/chunks/index-1.1.21-srxg6mfj.mjs

@@ -0,0 +1 @@
+import{h_ as G}from"./cli-1.1.21-9za692z5.mjs";import{fta as _,gta as U}from"./cli-1.1.21-jqy3a4ze.mjs";import{ota as X}from"./cli-1.1.21-aa0dfxt3.mjs";import{pta as K,rta as B,tta as l,uta as E}from"./cli-1.1.21-13kr6en7.mjs";var v=B((k)=>{Object.defineProperty(k,"__esModule",{value:!0});k.resolveHttpHandlerRuntimeConfig=k.getHttpHandlerExtensionConfiguration=k.isValidHostname=k.HttpResponse=k.HttpRequest=k.Fields=k.Field=void 0;var H=X();Object.defineProperty(k,"Field",{enumerable:!0,get:function(){return H.Field}});Object.defineProperty(k,"Fields",{enumerable:!0,get:function(){return H.Fields}});Object.defineProperty(k,"HttpRequest",{enumerable:!0,get:function(){return H.HttpRequest}});Object.defineProperty(k,"HttpResponse",{enumerable:!0,get:function(){return H.HttpResponse}});Object.defineProperty(k,"isValidHostname",{enumerable:!0,get:function(){return H.isValidHostname}});Object.defineProperty(k,"getHttpHandlerExtensionConfiguration",{enumerable:!0,get:function(){return H.getHttpHandlerExtensionConfiguration}});Object.defineProperty(k,"resolveHttpHandlerRuntimeConfig",{enumerable:!0,get:function(){return H.resolveHttpHandlerRuntimeConfig}})});var J=B((C)=>{var Q=_(),T=U(),P=G(),W=v(),F=E("node:crypto"),q=E("node:fs"),Z=E("node:os"),A=E("node:path");class ${profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300000;constructor(e,n,t){this.profileData=e,this.init=n,this.callerClientConfig=t}async loadCredentials(){let e=await this.loadToken();if(!e)throw new T.CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let n=e.accessToken,t=Date.now();if(new Date(n.expiresAt).getTime()-t<=$.REFRESH_THRESHOLD)return this.refresh(e);return{accessKeyId:n.accessKeyId,secretAccessKey:n.secretAccessKey,sessionToken:n.sessionToken,accountId:n.accountId,expiration:new Date(n.expiresAt)}}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}async refresh(e){let{SigninClient:n,CreateOAuth2TokenCommand:t}=await import("./index-1.1.21-q5vrbm1a.mjs").then((m)=>K(m.default)),{logger:s,userAgentAppId:c}=this.callerClientConfig??{},r=((h)=>{return h?.metadata?.handlerProtocol==="h2"})(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,a=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,i=new n({credentials:{accessKeyId:"",secretAccessKey:""},region:a,requestHandler:r,logger:s,userAgentAppId:c,...this.init?.clientConfig});this.createDPoPInterceptor(i.middlewareStack);let x={tokenInput:{clientId:e.clientId,refreshToken:e.refreshToken,grantType:"refresh_token"}};try{let h=await i.send(new t(x)),{accessKeyId:y,secretAccessKey:d,sessionToken:I}=h.tokenOutput?.accessToken??{},{refreshToken:S,expiresIn:m}=h.tokenOutput??{};if(!y||!d||!I||!S)throw new T.CredentialsProviderError("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let R=(m??900)*1000,b=new Date(Date.now()+R),j={...e,accessToken:{...e.accessToken,accessKeyId:y,secretAccessKey:d,sessionToken:I,expiresAt:b.toISOString()},refreshToken:S};await this.saveToken(j);let o=j.accessToken;return{accessKeyId:o.accessKeyId,secretAccessKey:o.secretAccessKey,sessionToken:o.sessionToken,accountId:o.accountId,expiration:b}}catch(h){if(h.name==="AccessDeniedException"){let y=h.error,d;switch(y){case"TOKEN_EXPIRED":d="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":d="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":d="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:d=`Failed to refresh token: ${String(h)}. Please re-authenticate using \`aws login\``}throw new T.CredentialsProviderError(d,{logger:this.logger,tryNextLink:!1})}throw new T.CredentialsProviderError(`Failed to refresh token: ${String(h)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let e=this.getTokenFilePath();try{let n;try{n=await P.readFile(e,{ignoreCache:this.init?.ignoreCache})}catch{n=await q.promises.readFile(e,"utf8")}let t=JSON.parse(n),s=["accessToken","clientId","refreshToken","dpopKey"].filter((c)=>!t[c]);if(!t.accessToken?.accountId)s.push("accountId");if(s.length>0)throw new T.CredentialsProviderError(`Token validation failed, missing fields: ${s.join(", ")}`,{logger:this.logger,tryNextLink:!1});return t}catch(n){throw new T.CredentialsProviderError(`Failed to load token from ${e}: ${String(n)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(e){let n=this.getTokenFilePath(),t=A.dirname(n);try{await q.promises.mkdir(t,{recursive:!0})}catch(s){}await q.promises.writeFile(n,JSON.stringify(e,null,2),"utf8")}getTokenFilePath(){let e=process.env.AWS_LOGIN_CACHE_DIRECTORY??A.join(Z.homedir(),".aws","login","cache"),n=Buffer.from(this.loginSession,"utf8"),t=F.createHash("sha256").update(n).digest("hex");return A.join(e,`${t}.json`)}derToRawSignature(e){let n=2;if(e[n]!==2)throw Error("Invalid DER signature");n++;let t=e[n++],s=e.subarray(n,n+t);if(n+=t,e[n]!==2)throw Error("Invalid DER signature");n++;let c=e[n++],u=e.subarray(n,n+c);s=s[0]===0?s.subarray(1):s,u=u[0]===0?u.subarray(1):u;let r=Buffer.concat([Buffer.alloc(32-s.length),s]),a=Buffer.concat([Buffer.alloc(32-u.length),u]);return Buffer.concat([r,a])}createDPoPInterceptor(e){e.add((n)=>async(t)=>{if(W.HttpRequest.isInstance(t.request)){let s=t.request,c=`${s.protocol}//${s.hostname}${s.port?`:${s.port}`:""}${s.path}`,u=await this.generateDpop(s.method,c);s.headers={...s.headers,DPoP:u}}return n(t)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(e="POST",n){let t=await this.loadToken();try{let s=F.createPrivateKey({key:t.dpopKey,format:"pem",type:"sec1"}),u=F.createPublicKey(s).export({format:"der",type:"spki"}),r=-1;for(let b=0;b<u.length;b++)if(u[b]===4){r=b;break}let a=u.slice(r+1,r+33),i=u.slice(r+33,r+65),x={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:a.toString("base64url"),y:i.toString("base64url")}},h={jti:crypto.randomUUID(),htm:e,htu:n,iat:Math.floor(Date.now()/1000)},y=Buffer.from(JSON.stringify(x)).toString("base64url"),d=Buffer.from(JSON.stringify(h)).toString("base64url"),I=`${y}.${d}`,S=F.sign("sha256",Buffer.from(I),s),R=this.derToRawSignature(S).toString("base64url");return`${I}.${R}`}catch(s){throw new T.CredentialsProviderError(`Failed to generate Dpop proof: ${s instanceof Error?s.message:String(s)}`,{logger:this.logger,tryNextLink:!1})}}}var N=(e)=>async({callerClientConfig:n}={})=>{e?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let t=await P.parseKnownFiles(e||{}),s=P.getProfileName({profile:e?.profile??n?.profile}),c=t[s];if(!c?.login_session)throw new T.CredentialsProviderError(`Profile ${s} does not contain login_session.`,{tryNextLink:!0,logger:e?.logger});let r=await new $(c,e,n).loadCredentials();return Q.setCredentialFeature(r,"CREDENTIALS_LOGIN","AD")};C.fromLoginCredentials=N});var L,O,w,p,ee=(e,n,t)=>{let s={EcsContainer:async(c)=>{let{fromHttp:u}=await import("./index-1.1.21-8bhdk6jc.mjs").then((m)=>K(m.default,1)),{fromContainerMetadata:r}=await import("./index-1.1.21-zn4zb4j6.mjs");return t?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>O.chain(u(c??{}),r(c))().then(D)},Ec2InstanceMetadata:async(c)=>{t?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");let{fromInstanceMetadata:u}=await import("./index-1.1.21-zn4zb4j6.mjs");return async()=>u(c)().then(D)},Environment:async(c)=>{t?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");let{fromEnv:u}=await import("./index-1.1.21-zphh9zyt.mjs");return async()=>u(c)().then(D)}};if(e in s)return s[e];else throw new O.CredentialsProviderError(`Unsupported credential source in profile ${n}. Got ${e}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:t})},D=(e)=>w.setCredentialFeature(e,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p"),te=(e,{profile:n="default",logger:t}={})=>{return Boolean(e)&&typeof e==="object"&&typeof e.role_arn==="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1&&["undefined","string"].indexOf(typeof e.external_id)>-1&&["undefined","string"].indexOf(typeof e.mfa_serial)>-1&&(ne(e,{profile:n,logger:t})||se(e,{profile:n,logger:t}))},ne=(e,{profile:n,logger:t})=>{let s=typeof e.source_profile==="string"&&typeof e.credential_source>"u";if(s)t?.debug?.(`    ${n} isAssumeRoleWithSourceProfile source_profile=${e.source_profile}`);return s},se=(e,{profile:n,logger:t})=>{let s=typeof e.credential_source==="string"&&typeof e.source_profile>"u";if(s)t?.debug?.(`    ${n} isCredentialSourceProfile credential_source=${e.credential_source}`);return s},re=async(e,n,t,s,c={},u)=>{t.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");let r=n[e],{source_profile:a,region:i}=r;if(!t.roleAssumer){let{getDefaultRoleAssumer:h}=await import("./index-1.1.21-57kd6ptp.mjs").then((m)=>K(m.default,1));t.roleAssumer=h({...t.clientConfig,credentialProviderLogger:t.logger,parentClientConfig:{...s,...t?.parentClientConfig,region:i??t?.parentClientConfig?.region??s?.region}},t.clientPlugins)}if(a&&a in c)throw new O.CredentialsProviderError(`Detected a cycle attempting to resolve credentials for profile ${L.getProfileName(t)}. Profiles visited: `+Object.keys(c).join(", "),{logger:t.logger});t.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${a?`source_profile=[${a}]`:`profile=[${e}]`}`);let x=a?u(a,n,t,s,{...c,[a]:!0},V(n[a]??{})):(await ee(r.credential_source,e,t.logger)(t))();if(V(r))return x.then((h)=>w.setCredentialFeature(h,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));else{let h={RoleArn:r.role_arn,RoleSessionName:r.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:r.external_id,DurationSeconds:parseInt(r.duration_seconds||"3600",10)},{mfa_serial:y}=r;if(y){if(!t.mfaCodeProvider)throw new O.CredentialsProviderError(`Profile ${e} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:t.logger,tryNextLink:!1});h.SerialNumber=y,h.TokenCode=await t.mfaCodeProvider(y)}let d=await x;return t.roleAssumer(d,h).then((I)=>w.setCredentialFeature(I,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},V=(e)=>{return!e.role_arn&&!!e.credential_source},ce=(e)=>{return Boolean(e&&e.login_session)},ue=async(e,n,t)=>{let s=await p.fromLoginCredentials({...n,profile:e})({callerClientConfig:t});return w.setCredentialFeature(s,"CREDENTIALS_PROFILE_LOGIN","AC")},he=(e)=>Boolean(e)&&typeof e==="object"&&typeof e.credential_process==="string",ae=async(e,n)=>import("./index-1.1.21-hytfcvqs.mjs").then(({fromProcess:t})=>t({...e,profile:n})().then((s)=>w.setCredentialFeature(s,"CREDENTIALS_PROFILE_PROCESS","v"))),de=async(e,n,t={},s)=>{let{fromSSO:c}=await import("./index-1.1.21-wqh7rgwt.mjs");return c({profile:e,logger:t.logger,parentClientConfig:t.parentClientConfig,clientConfig:t.clientConfig})({callerClientConfig:s}).then((u)=>{if(n.sso_session)return w.setCredentialFeature(u,"CREDENTIALS_PROFILE_SSO","r");else return w.setCredentialFeature(u,"CREDENTIALS_PROFILE_SSO_LEGACY","t")})},ye=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string"),Y=(e)=>Boolean(e)&&typeof e==="object"&&typeof e.aws_access_key_id==="string"&&typeof e.aws_secret_access_key==="string"&&["undefined","string"].indexOf(typeof e.aws_session_token)>-1&&["undefined","string"].indexOf(typeof e.aws_account_id)>-1,g=async(e,n)=>{n?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");let t={accessKeyId:e.aws_access_key_id,secretAccessKey:e.aws_secret_access_key,sessionToken:e.aws_session_token,...e.aws_credential_scope&&{credentialScope:e.aws_credential_scope},...e.aws_account_id&&{accountId:e.aws_account_id}};return w.setCredentialFeature(t,"CREDENTIALS_PROFILE","n")},ke=(e)=>Boolean(e)&&typeof e==="object"&&typeof e.web_identity_token_file==="string"&&typeof e.role_arn==="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1,we=async(e,n,t)=>import("./index-1.1.21-hbxv4pgp.mjs").then((m)=>K(m.default,1)).then(({fromTokenFile:s})=>s({webIdentityTokenFile:e.web_identity_token_file,roleArn:e.role_arn,roleSessionName:e.role_session_name,roleAssumerWithWebIdentity:n.roleAssumerWithWebIdentity,logger:n.logger,parentClientConfig:n.parentClientConfig})({callerClientConfig:t}).then((c)=>w.setCredentialFeature(c,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q"))),z=async(e,n,t,s,c={},u=!1)=>{let r=n[e];if(Object.keys(c).length>0&&Y(r))return g(r,t);if(u||te(r,{profile:e,logger:t.logger}))return re(e,n,t,s,c,z);if(Y(r))return g(r,t);if(ke(r))return we(r,t,s);if(he(r))return ae(t,e);if(ye(r))return await de(e,r,t,s);if(ce(r))return ue(e,t,s);throw new O.CredentialsProviderError(`Could not resolve credentials using profile: [${e}] in configuration/credentials file(s).`,{logger:t.logger})},Te=(e={})=>async({callerClientConfig:n}={})=>{e.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");let t=await L.parseKnownFiles(e);return z(L.getProfileName({profile:e.profile??n?.profile}),t,e,n)},Ee;var Ie=l(()=>{L=G(),O=U(),w=_(),p=J();Ee=Te});Ie();export{Ee as fromIni};export default {get fromIni(){return Ee}};

package/dist/chunks/index-1.1.21-vcbqyp49.mjs

@@ -0,0 +1 @@
+import{$9 as Xt,H9 as w,I9 as so,J9 as no,K9 as co,L9 as ce,M9 as Rt,N9 as Rr,O9 as ao,P9 as _e,Q9 as po,R9 as lo,S9 as ge,T9 as h,U9 as vr,V9 as Vt,W9 as Wt,Y9 as Yt,Z9 as Jt,_9 as Kt,a_ as Ct,b_ as ft,c_ as Ft,d_ as $t,e_ as uo,f_ as Oo}from"./cli-1.1.21-gyh1fxbr.mjs";import{g_ as Ye}from"./cli-1.1.21-fdf1j366.mjs";import{eta as Tt,fta as Bt}from"./cli-1.1.21-jqy3a4ze.mjs";import{hta as Lt}from"./cli-1.1.21-er4j34m5.mjs";import{jta as xe}from"./cli-1.1.21-aa0dfxt3.mjs";import{rta as v}from"./cli-1.1.21-13kr6en7.mjs";var U=v((re)=>{Object.defineProperty(re,"__esModule",{value:!0});re.resolveHttpAuthSchemeConfig=re.defaultSSOOIDCHttpAuthSchemeProvider=re.defaultSSOOIDCHttpAuthSchemeParametersProvider=void 0;var Er=w(),j=vr(),Sr=async(e,r,i)=>{return{operation:(0,j.getSmithyContext)(r).operation,region:await(0,j.normalizeProvider)(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}};re.defaultSSOOIDCHttpAuthSchemeParametersProvider=Sr;function Ir(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sso-oauth",region:e.region},propertiesExtractor:(r,i)=>({signingProperties:{config:r,context:i}})}}function Pr(e){return{schemeId:"smithy.api#noAuth"}}var xr=(e)=>{let r=[];switch(e.operation){case"CreateToken":{r.push(Pr(e));break}default:r.push(Ir(e))}return r};re.defaultSSOOIDCHttpAuthSchemeProvider=xr;var Dr=(e)=>{let r=(0,Er.resolveAwsSdkSigV4Config)(e);return Object.assign(r,{authSchemePreference:(0,j.normalizeProvider)(e.authSchemePreference??[])})};re.resolveHttpAuthSchemeConfig=Dr});var le=v((ae)=>{Object.defineProperty(ae,"__esModule",{value:!0});ae.bdd=void 0;var yr=ce(),D="ref",S=-1,y=!0,oe="isSet",de="PartitionResult",N="booleanEquals",M="getAttr",ie={[D]:"Endpoint"},A={[D]:de},x={},se=[{[D]:"Region"}],ne={conditions:[[oe,[ie]],[oe,se],["aws.partition",se,de],[N,[{[D]:"UseFIPS"},y]],[N,[{[D]:"UseDualStack"},y]],[N,[{fn:M,argv:[A,"supportsDualStack"]},y]],[N,[{fn:M,argv:[A,"supportsFIPS"]},y]],["stringEquals",[{fn:M,argv:[A,"name"]},"aws-us-gov"]]],results:[[S],[S,"Invalid Configuration: FIPS and custom endpoint are not supported"],[S,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[ie,x],["https://oidc-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",x],[S,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://oidc.{Region}.amazonaws.com",x],["https://oidc-fips.{Region}.{PartitionResult#dnsSuffix}",x],[S,"FIPS is enabled but this partition does not support FIPS"],["https://oidc.{Region}.{PartitionResult#dualStackDnsSuffix}",x],[S,"DualStack is enabled but this partition does not support DualStack"],["https://oidc.{Region}.{PartitionResult#dnsSuffix}",x],[S,"Invalid Configuration: Missing Region"]]},Nr=2,n=1e8,hr=new Int32Array([-1,1,-1,0,13,3,1,4,n+12,2,5,n+12,3,8,6,4,7,n+11,5,n+9,n+10,4,11,9,6,10,n+8,7,n+6,n+7,5,12,n+5,6,n+4,n+5,3,n+1,14,4,n+2,n+3]);ae.bdd=yr.BinaryDecisionDiagram.from(hr,Nr,ne.conditions,ne.results)});var ve=v((ue)=>{Object.defineProperty(ue,"__esModule",{value:!0});ue.defaultEndpointResolver=void 0;var fr=Rr(),G=ce(),Fr=le(),$r=new G.EndpointCache({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),jr=(e,r={})=>{return $r.get(e,()=>(0,G.decideEndpoint)(Fr.bdd,{endpointParams:e,logger:r.logger}))};ue.defaultEndpointResolver=jr;G.customEndpointFunctions.aws=fr.awsEndpointFunctions});var R=v((z)=>{Object.defineProperty(z,"__esModule",{value:!0});z.SSOOIDCServiceException=z.__ServiceException=void 0;var Ee=h();Object.defineProperty(z,"__ServiceException",{enumerable:!0,get:function(){return Ee.ServiceException}});class m extends Ee.ServiceException{constructor(e){super(e);Object.setPrototypeOf(this,m.prototype)}}z.SSOOIDCServiceException=m});var Q=v((Ie)=>{Object.defineProperty(Ie,"__esModule",{value:!0});Ie.UnsupportedGrantTypeException=Ie.UnauthorizedClientException=Ie.SlowDownException=Ie.InvalidScopeException=Ie.InvalidRequestException=Ie.InvalidGrantException=Ie.InvalidClientException=Ie.InternalServerException=Ie.ExpiredTokenException=Ie.AuthorizationPendingException=Ie.AccessDeniedException=void 0;var a=R();class H extends a.SSOOIDCServiceException{name="AccessDeniedException";$fault="client";error;reason;error_description;constructor(e){super({name:"AccessDeniedException",$fault:"client",...e});Object.setPrototypeOf(this,H.prototype),this.error=e.error,this.reason=e.reason,this.error_description=e.error_description}}Ie.AccessDeniedException=H;class L extends a.SSOOIDCServiceException{name="AuthorizationPendingException";$fault="client";error;error_description;constructor(e){super({name:"AuthorizationPendingException",$fault:"client",...e});Object.setPrototypeOf(this,L.prototype),this.error=e.error,this.error_description=e.error_description}}Ie.AuthorizationPendingException=L;class T extends a.SSOOIDCServiceException{name="ExpiredTokenException";$fault="client";error;error_description;constructor(e){super({name:"ExpiredTokenException",$fault:"client",...e});Object.setPrototypeOf(this,T.prototype),this.error=e.error,this.error_description=e.error_description}}Ie.ExpiredTokenException=T;class B extends a.SSOOIDCServiceException{name="InternalServerException";$fault="server";error;error_description;constructor(e){super({name:"InternalServerException",$fault:"server",...e});Object.setPrototypeOf(this,B.prototype),this.error=e.error,this.error_description=e.error_description}}Ie.InternalServerException=B;class V extends a.SSOOIDCServiceException{name="InvalidClientException";$fault="client";error;error_description;constructor(e){super({name:"InvalidClientException",$fault:"client",...e});Object.setPrototypeOf(this,V.prototype),this.error=e.error,this.error_description=e.error_description}}Ie.InvalidClientException=V;class W extends a.SSOOIDCServiceException{name="InvalidGrantException";$fault="client";error;error_description;constructor(e){super({name:"InvalidGrantException",$fault:"client",...e});Object.setPrototypeOf(this,W.prototype),this.error=e.error,this.error_description=e.error_description}}Ie.InvalidGrantException=W;class Y extends a.SSOOIDCServiceException{name="InvalidRequestException";$fault="client";error;reason;error_description;constructor(e){super({name:"InvalidRequestException",$fault:"client",...e});Object.setPrototypeOf(this,Y.prototype),this.error=e.error,this.reason=e.reason,this.error_description=e.error_description}}Ie.InvalidRequestException=Y;class J extends a.SSOOIDCServiceException{name="InvalidScopeException";$fault="client";error;error_description;constructor(e){super({name:"InvalidScopeException",$fault:"client",...e});Object.setPrototypeOf(this,J.prototype),this.error=e.error,this.error_description=e.error_description}}Ie.InvalidScopeException=J;class K extends a.SSOOIDCServiceException{name="SlowDownException";$fault="client";error;error_description;constructor(e){super({name:"SlowDownException",$fault:"client",...e});Object.setPrototypeOf(this,K.prototype),this.error=e.error,this.error_description=e.error_description}}Ie.SlowDownException=K;class X extends a.SSOOIDCServiceException{name="UnauthorizedClientException";$fault="client";error;error_description;constructor(e){super({name:"UnauthorizedClientException",$fault:"client",...e});Object.setPrototypeOf(this,X.prototype),this.error=e.error,this.error_description=e.error_description}}Ie.UnauthorizedClientException=X;class C extends a.SSOOIDCServiceException{name="UnsupportedGrantTypeException";$fault="client";error;error_description;constructor(e){super({name:"UnsupportedGrantTypeException",$fault:"client",...e});Object.setPrototypeOf(this,C.prototype),this.error=e.error,this.error_description=e.error_description}}Ie.UnsupportedGrantTypeException=C});var Z=v((Re)=>{Object.defineProperty(Re,"__esModule",{value:!0});Re.CreateToken$=Re.CreateTokenResponse$=Re.CreateTokenRequest$=Re.errorTypeRegistries=Re.UnsupportedGrantTypeException$=Re.UnauthorizedClientException$=Re.SlowDownException$=Re.InvalidScopeException$=Re.InvalidRequestException$=Re.InvalidGrantException$=Re.InvalidClientException$=Re.InternalServerException$=Re.ExpiredTokenException$=Re.AuthorizationPendingException$=Re.AccessDeniedException$=Re.SSOOIDCServiceException$=void 0;var Br="AccessDeniedException",Vr="AuthorizationPendingException",Wr="AccessToken",Yr="ClientSecret",Jr="CreateToken",Kr="CreateTokenRequest",Xr="CreateTokenResponse",Cr="CodeVerifier",Qr="ExpiredTokenException",Zr="InvalidClientException",kr="InvalidGrantException",_r="InvalidRequestException",gr="InternalServerException",et="InvalidScopeException",rt="IdToken",tt="RefreshToken",ot="SlowDownException",it="UnauthorizedClientException",st="UnsupportedGrantTypeException",nt="accessToken",O="client",ct="clientId",dt="clientSecret",at="codeVerifier",pt="code",lt="deviceCode",t="error",ut="expiresIn",p="error_description",Ot="grantType",vt="http",l="httpError",Et="idToken",De="reason",be="refreshToken",St="redirectUri",qe="smithy.ts.sdk.synthetic.com.amazonaws.ssooidc",It="scope",Pt="server",xt="tokenType",o="com.amazonaws.ssooidc",ye=xe(),u=Q(),Dt=R(),Ne=ye.TypeRegistry.for(qe);Re.SSOOIDCServiceException$=[-3,qe,"SSOOIDCServiceException",0,[],[]];Ne.registerError(Re.SSOOIDCServiceException$,Dt.SSOOIDCServiceException);var c=ye.TypeRegistry.for(o);Re.AccessDeniedException$=[-3,o,Br,{[t]:O,[l]:400},[t,De,p],[0,0,0]];c.registerError(Re.AccessDeniedException$,u.AccessDeniedException);Re.AuthorizationPendingException$=[-3,o,Vr,{[t]:O,[l]:400},[t,p],[0,0]];c.registerError(Re.AuthorizationPendingException$,u.AuthorizationPendingException);Re.ExpiredTokenException$=[-3,o,Qr,{[t]:O,[l]:400},[t,p],[0,0]];c.registerError(Re.ExpiredTokenException$,u.ExpiredTokenException);Re.InternalServerException$=[-3,o,gr,{[t]:Pt,[l]:500},[t,p],[0,0]];c.registerError(Re.InternalServerException$,u.InternalServerException);Re.InvalidClientException$=[-3,o,Zr,{[t]:O,[l]:401},[t,p],[0,0]];c.registerError(Re.InvalidClientException$,u.InvalidClientException);Re.InvalidGrantException$=[-3,o,kr,{[t]:O,[l]:400},[t,p],[0,0]];c.registerError(Re.InvalidGrantException$,u.InvalidGrantException);Re.InvalidRequestException$=[-3,o,_r,{[t]:O,[l]:400},[t,De,p],[0,0,0]];c.registerError(Re.InvalidRequestException$,u.InvalidRequestException);Re.InvalidScopeException$=[-3,o,et,{[t]:O,[l]:400},[t,p],[0,0]];c.registerError(Re.InvalidScopeException$,u.InvalidScopeException);Re.SlowDownException$=[-3,o,ot,{[t]:O,[l]:400},[t,p],[0,0]];c.registerError(Re.SlowDownException$,u.SlowDownException);Re.UnauthorizedClientException$=[-3,o,it,{[t]:O,[l]:400},[t,p],[0,0]];c.registerError(Re.UnauthorizedClientException$,u.UnauthorizedClientException);Re.UnsupportedGrantTypeException$=[-3,o,st,{[t]:O,[l]:400},[t,p],[0,0]];c.registerError(Re.UnsupportedGrantTypeException$,u.UnsupportedGrantTypeException);Re.errorTypeRegistries=[Ne,c];var bt=[0,o,Wr,8,0],qt=[0,o,Yr,8,0],yt=[0,o,Cr,8,0],Nt=[0,o,rt,8,0],he=[0,o,tt,8,0];Re.CreateTokenRequest$=[3,o,Kr,0,[ct,dt,Ot,lt,pt,be,It,St,at],[0,[()=>qt,0],0,0,0,[()=>he,0],64,0,[()=>yt,0]],3];Re.CreateTokenResponse$=[3,o,Xr,0,[nt,xt,ut,be,Et],[[()=>bt,0],0,1,[()=>he,0],[()=>Nt,0]]];Re.CreateToken$=[9,o,Jr,{[vt]:["POST","/token",200]},()=>Re.CreateTokenRequest$,()=>Re.CreateTokenResponse$]});var Xe=v((Je)=>{Object.defineProperty(Je,"__esModule",{value:!0});Je.getRuntimeConfig=void 0;var jt=w(),wt=Ft(),Ut=Ye(),Mt=h(),At=Rt(),Ve=$t(),We=ft(),Gt=U(),mt=ve(),zt=Z(),Ht=(e)=>{return{apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??Ve.fromBase64,base64Encoder:e?.base64Encoder??Ve.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??mt.defaultEndpointResolver,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Gt.defaultSSOOIDCHttpAuthSchemeProvider,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(r)=>r.getIdentityProvider("aws.auth#sigv4"),signer:new jt.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(r)=>r.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new Ut.NoAuthSigner}],logger:e?.logger??new Mt.NoOpLogger,protocol:e?.protocol??wt.AwsRestJsonProtocol,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.ssooidc",errorTypeRegistries:zt.errorTypeRegistries,version:"2019-06-10",serviceTarget:"AWSSSOOIDCService"},serviceId:e?.serviceId??"SSO OIDC",urlParser:e?.urlParser??At.parseUrl,utf8Decoder:e?.utf8Decoder??We.fromUtf8,utf8Encoder:e?.utf8Encoder??We.toUtf8}};Je.getRuntimeConfig=Ht});var tr=v((er)=>{Object.defineProperty(er,"__esModule",{value:!0});er.getRuntimeConfig=void 0;var Qt=Vt(),Zt=Qt.__importDefault(Wt()),kt=Bt(),_t=w(),Ce=Yt(),f=_e(),gt=Jt(),Qe=ge(),I=Kt(),Ze=Lt(),ke=h(),eo=Xt(),ro=Ct(),to=Tt(),oo=Xe(),io=(e)=>{(0,ke.emitWarningIfUnsupportedVersion)(process.version);let r=(0,ro.resolveDefaultsModeConfig)(e),i=()=>r().then(ke.loadConfigsForDefaultMode),d=(0,oo.getRuntimeConfig)(e);(0,kt.emitWarningIfUnsupportedVersion)(process.version);let s={profile:e?.profile,logger:d.logger};return{...d,...e,runtime:"node",defaultsMode:r,authSchemePreference:e?.authSchemePreference??(0,I.loadConfig)(_t.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS,s),bodyLengthChecker:e?.bodyLengthChecker??eo.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,Ce.createDefaultUserAgentProvider)({serviceId:d.serviceId,clientVersion:Zt.default.version}),maxAttempts:e?.maxAttempts??(0,I.loadConfig)(Qe.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??(0,I.loadConfig)(f.NODE_REGION_CONFIG_OPTIONS,{...f.NODE_REGION_CONFIG_FILE_OPTIONS,...s}),requestHandler:Ze.NodeHttpHandler.create(e?.requestHandler??i),retryMode:e?.retryMode??(0,I.loadConfig)({...Qe.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await i()).retryMode||to.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??gt.Hash.bind(null,"sha256"),streamCollector:e?.streamCollector??Ze.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??(0,I.loadConfig)(f.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,s),useFipsEndpoint:e?.useFipsEndpoint??(0,I.loadConfig)(f.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,s),userAgentAppId:e?.userAgentAppId??(0,I.loadConfig)(Ce.NODE_APP_ID_CONFIG_OPTIONS,s)}};er.getRuntimeConfig=io});var zo=v((E)=>{var or=so(),vo=no(),Eo=co(),ir=ao(),So=_e(),k=Ye(),Io=xe(),Po=po(),ar=lo(),sr=ge(),P=h(),nr=U(),xo=tr(),cr=uo(),dr=Oo(),b=Z(),F=Q(),Do=R(),bo=(e)=>{return Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"sso-oauth"})},qo={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},yo=(e)=>{let{httpAuthSchemes:r,httpAuthSchemeProvider:i,credentials:d}=e;return{setHttpAuthScheme(s){let q=r.findIndex(($)=>$.schemeId===s.schemeId);if(q===-1)r.push(s);else r.splice(q,1,s)},httpAuthSchemes(){return r},setHttpAuthSchemeProvider(s){i=s},httpAuthSchemeProvider(){return i},setCredentials(s){d=s},credentials(){return d}}},No=(e)=>{return{httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}},ho=(e,r)=>{let i=Object.assign(cr.getAwsRegionExtensionConfiguration(e),P.getDefaultExtensionConfiguration(e),dr.getHttpHandlerExtensionConfiguration(e),yo(e));return r.forEach((d)=>d.configure(i)),Object.assign(e,cr.resolveAwsRegionExtensionConfiguration(i),P.resolveDefaultRuntimeConfig(i),dr.resolveHttpHandlerRuntimeConfig(i),No(i))};class _ extends P.Client{config;constructor(...[e]){let r=xo.getRuntimeConfig(e||{});super(r);this.initConfig=r;let i=bo(r),d=ir.resolveUserAgentConfig(i),s=sr.resolveRetryConfig(d),q=So.resolveRegionConfig(s),$=or.resolveHostHeaderConfig(q),pr=ar.resolveEndpointConfig($),lr=nr.resolveHttpAuthSchemeConfig(pr),ur=ho(lr,e?.extensions||[]);this.config=ur,this.middlewareStack.use(Io.getSchemaSerdePlugin(this.config)),this.middlewareStack.use(ir.getUserAgentPlugin(this.config)),this.middlewareStack.use(sr.getRetryPlugin(this.config)),this.middlewareStack.use(Po.getContentLengthPlugin(this.config)),this.middlewareStack.use(or.getHostHeaderPlugin(this.config)),this.middlewareStack.use(vo.getLoggerPlugin(this.config)),this.middlewareStack.use(Eo.getRecursionDetectionPlugin(this.config)),this.middlewareStack.use(k.getHttpAuthSchemeEndpointRuleSetPlugin(this.config,{httpAuthSchemeParametersProvider:nr.defaultSSOOIDCHttpAuthSchemeParametersProvider,identityProviderConfigProvider:async(Or)=>new k.DefaultIdentityProviderConfig({"aws.auth#sigv4":Or.credentials})})),this.middlewareStack.use(k.getHttpSigningPlugin(this.config))}destroy(){super.destroy()}}class g extends P.Command.classBuilder().ep(qo).m(function(e,r,i,d){return[ar.getEndpointPlugin(i,e.getEndpointParameterInstructions())]}).s("AWSSSOOIDCService","CreateToken",{}).n("SSOOIDCClient","CreateTokenCommand").sc(b.CreateToken$).build(){}var Ro={CreateTokenCommand:g};class ee extends _{}P.createAggregatedClient(Ro,ee);var fo={KMS_ACCESS_DENIED:"KMS_AccessDeniedException"},Fo={KMS_DISABLED_KEY:"KMS_DisabledException",KMS_INVALID_KEY_USAGE:"KMS_InvalidKeyUsageException",KMS_INVALID_STATE:"KMS_InvalidStateException",KMS_KEY_NOT_FOUND:"KMS_NotFoundException"};E.$Command=P.Command;E.__Client=P.Client;E.SSOOIDCServiceException=Do.SSOOIDCServiceException;E.AccessDeniedExceptionReason=fo;E.CreateTokenCommand=g;E.InvalidRequestExceptionReason=Fo;E.SSOOIDC=ee;E.SSOOIDCClient=_;Object.prototype.hasOwnProperty.call(b,"__proto__")&&!Object.prototype.hasOwnProperty.call(E,"__proto__")&&Object.defineProperty(E,"__proto__",{enumerable:!0,value:b.__proto__});Object.keys(b).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(E,e))E[e]=b[e]});Object.prototype.hasOwnProperty.call(F,"__proto__")&&!Object.prototype.hasOwnProperty.call(E,"__proto__")&&Object.defineProperty(E,"__proto__",{enumerable:!0,value:F.__proto__});Object.keys(F).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(E,e))E[e]=F[e]})});export default zo();

package/dist/chunks/index-1.1.21-wqh7rgwt.mjs

@@ -0,0 +1,2 @@
+import{$9 as xr,H9 as F,I9 as Nr,J9 as Dr,K9 as br,L9 as Ge,M9 as Zt,N9 as Et,O9 as $r,P9 as Is,Q9 as Ar,R9 as Fr,S9 as hs,T9 as G,U9 as tt,V9 as pr,W9 as _r,Y9 as Er,Z9 as Sr,_9 as Rr,a_ as vr,b_ as Kt,c_ as kt,d_ as er,e_ as Ur,f_ as Mr}from"./cli-1.1.21-gyh1fxbr.mjs";import{g_ as ps}from"./cli-1.1.21-fdf1j366.mjs";import{h_ as we}from"./cli-1.1.21-9za692z5.mjs";import{eta as dr,fta as Z,gta as Ce}from"./cli-1.1.21-jqy3a4ze.mjs";import{hta as ir}from"./cli-1.1.21-er4j34m5.mjs";import{jta as Xe}from"./cli-1.1.21-aa0dfxt3.mjs";import{pta as ge,rta as S,tta as no,uta as X}from"./cli-1.1.21-13kr6en7.mjs";var De=S((Zs)=>{var Ls=Z(),Ts=F(),p=Ce(),w=we(),zs=X("node:fs"),Hs=({logger:e,signingName:s}={})=>async()=>{if(e?.debug?.("@aws-sdk/token-providers - fromEnvSigningName"),!s)throw new p.TokenProviderError("Please pass 'signingName' to compute environment variable key",{logger:e});let t=Ts.getBearerTokenEnvKey(s);if(!(t in process.env))throw new p.TokenProviderError(`Token not present in '${t}' environment variable`,{logger:e});let o={token:process.env[t]};return Ls.setTokenFeature(o,"BEARER_SERVICE_ENV_VARS","3"),o},Vs=300000,K="To refresh this SSO session run 'aws sso login' with the corresponding profile.",Bs=async(e,s={},t)=>{let{SSOOIDCClient:o}=await import("./index-1.1.21-vcbqyp49.mjs").then((m)=>ge(m.default)),r=(c)=>s.clientConfig?.[c]??s.parentClientConfig?.[c]??t?.[c];return new o(Object.assign({},s.clientConfig??{},{region:e??s.clientConfig?.region,logger:r("logger"),userAgentAppId:r("userAgentAppId")}))},Ys=async(e,s,t={},o)=>{let{CreateTokenCommand:r}=await import("./index-1.1.21-vcbqyp49.mjs").then((m)=>ge(m.default));return(await Bs(s,t,o)).send(new r({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))},Pe=(e)=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new p.TokenProviderError(`Token is expired. ${K}`,!1)},h=(e,s,t=!1)=>{if(typeof s>"u")throw new p.TokenProviderError(`Value not present for '${e}' in SSO Token${t?". Cannot refresh":""}. ${K}`,!1)},{writeFile:Qs}=zs.promises,Js=(e,s)=>{let t=w.getSSOTokenFilepath(e),o=JSON.stringify(s,null,2);return Qs(t,o)},ye=new Date(0),Ne=(e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let t=await w.parseKnownFiles(e),o=w.getProfileName({profile:e.profile??s?.profile}),r=t[o];if(!r)throw new p.TokenProviderError(`Profile '${o}' could not be found in shared credentials file.`,!1);else if(!r.sso_session)throw new p.TokenProviderError(`Profile '${o}' is missing required property 'sso_session'.`);let n=r.sso_session,_=(await w.loadSsoSessionData(e))[n];if(!_)throw new p.TokenProviderError(`Sso session '${n}' could not be found in shared credentials file.`,!1);for(let a of["sso_start_url","sso_region"])if(!_[a])throw new p.TokenProviderError(`Sso session '${n}' is missing required property '${a}'.`,!1);_.sso_start_url;let d=_.sso_region,l;try{l=await w.getSSOTokenFromFile(n)}catch(a){throw new p.TokenProviderError(`The SSO session token associated with profile=${o} was not found or is invalid. ${K}`,!1)}h("accessToken",l.accessToken),h("expiresAt",l.expiresAt);let{accessToken:u,expiresAt:C}=l,x={token:u,expiration:new Date(C)};if(x.expiration.getTime()-Date.now()>Vs)return x;if(Date.now()-ye.getTime()<30000)return Pe(x),x;h("clientId",l.clientId,!0),h("clientSecret",l.clientSecret,!0),h("refreshToken",l.refreshToken,!0);try{ye.setTime(Date.now());let a=await Ys(l,d,e,s);h("accessToken",a.accessToken),h("expiresIn",a.expiresIn);let v=new Date(Date.now()+a.expiresIn*1000);try{await Js(n,{...l,accessToken:a.accessToken,expiresAt:v.toISOString(),refreshToken:a.refreshToken})}catch(J){}return{token:a.accessToken,expiration:v}}catch(a){return Pe(x),x}},Ws=({token:e,logger:s})=>async()=>{if(s?.debug("@aws-sdk/token-providers - fromStatic"),!e||!e.token)throw new p.TokenProviderError("Please pass a valid token to fromStatic",!1);return e},Xs=(e={})=>p.memoize(p.chain(Ne(e),async()=>{throw new p.TokenProviderError("Could not load token from any providers",!1)}),(s)=>s.expiration!==void 0&&s.expiration.getTime()-Date.now()<300000,(s)=>s.expiration!==void 0);Zs.fromEnvSigningName=Hs;Zs.fromSso=Ne;Zs.fromStatic=Ws;Zs.nodeProvider=Xs});var ee=S((be)=>{Object.defineProperty(be,"__esModule",{value:!0});be.resolveHttpAuthSchemeConfig=be.defaultSSOHttpAuthSchemeProvider=be.defaultSSOHttpAuthSchemeParametersProvider=void 0;var rt=F(),k=tt(),ot=async(e,s,t)=>{return{operation:(0,k.getSmithyContext)(s).operation,region:await(0,k.normalizeProvider)(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}};be.defaultSSOHttpAuthSchemeParametersProvider=ot;function nt(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:e.region},propertiesExtractor:(s,t)=>({signingProperties:{config:s,context:t}})}}function at(e){return{schemeId:"smithy.api#noAuth"}}var ct=(e)=>{let s=[];switch(e.operation){case"GetRoleCredentials":{s.push(at(e));break}default:s.push(nt(e))}return s};be.defaultSSOHttpAuthSchemeProvider=ct;var lt=(e)=>{let s=(0,rt.resolveAwsSdkSigV4Config)(e);return Object.assign(s,{authSchemePreference:(0,k.normalizeProvider)(e.authSchemePreference??[])})};be.resolveHttpAuthSchemeConfig=lt});var Te=S((je)=>{Object.defineProperty(je,"__esModule",{value:!0});je.bdd=void 0;var dt=Ge(),N="ref",f=-1,U=!0,Ae="isSet",me="PartitionResult",M="booleanEquals",se="getAttr",Fe={[N]:"Endpoint"},te={[N]:me},g={},Ue=[{[N]:"Region"}],Me={conditions:[[Ae,[Fe]],[Ae,Ue],["aws.partition",Ue,me],[M,[{[N]:"UseFIPS"},U]],[M,[{[N]:"UseDualStack"},U]],[M,[{fn:se,argv:[te,"supportsDualStack"]},U]],[M,[{fn:se,argv:[te,"supportsFIPS"]},U]],["stringEquals",[{fn:se,argv:[te,"name"]},"aws-us-gov"]]],results:[[f],[f,"Invalid Configuration: FIPS and custom endpoint are not supported"],[f,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[Fe,g],["https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",g],[f,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://portal.sso.{Region}.amazonaws.com",g],["https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",g],[f,"FIPS is enabled but this partition does not support FIPS"],["https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",g],[f,"DualStack is enabled but this partition does not support DualStack"],["https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",g],[f,"Invalid Configuration: Missing Region"]]},pt=2,i=1e8,_t=new Int32Array([-1,1,-1,0,13,3,1,4,i+12,2,5,i+12,3,8,6,4,7,i+11,5,i+9,i+10,4,11,9,6,10,i+8,7,i+6,i+7,5,12,i+5,6,i+4,i+5,3,i+1,14,4,i+2,i+3]);je.bdd=dt.BinaryDecisionDiagram.from(_t,pt,Me.conditions,Me.results)});var Ve=S((ze)=>{Object.defineProperty(ze,"__esModule",{value:!0});ze.defaultEndpointResolver=void 0;var St=Et(),re=Ge(),Rt=Te(),xt=new re.EndpointCache({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),vt=(e,s={})=>{return xt.get(e,()=>(0,re.decideEndpoint)(Rt.bdd,{endpointParams:e,logger:s.logger}))};ze.defaultEndpointResolver=vt;re.customEndpointFunctions.aws=St.awsEndpointFunctions});var m=S((ne)=>{Object.defineProperty(ne,"__esModule",{value:!0});ne.SSOServiceException=ne.__ServiceException=void 0;var Be=G();Object.defineProperty(ne,"__ServiceException",{enumerable:!0,get:function(){return Be.ServiceException}});class oe extends Be.ServiceException{constructor(e){super(e);Object.setPrototypeOf(this,oe.prototype)}}ne.SSOServiceException=oe});var ie=S((Qe)=>{Object.defineProperty(Qe,"__esModule",{value:!0});Qe.UnauthorizedException=Qe.TooManyRequestsException=Qe.ResourceNotFoundException=Qe.InvalidRequestException=void 0;var j=m();class ae extends j.SSOServiceException{name="InvalidRequestException";$fault="client";constructor(e){super({name:"InvalidRequestException",$fault:"client",...e});Object.setPrototypeOf(this,ae.prototype)}}Qe.InvalidRequestException=ae;class ce extends j.SSOServiceException{name="ResourceNotFoundException";$fault="client";constructor(e){super({name:"ResourceNotFoundException",$fault:"client",...e});Object.setPrototypeOf(this,ce.prototype)}}Qe.ResourceNotFoundException=ce;class le extends j.SSOServiceException{name="TooManyRequestsException";$fault="client";constructor(e){super({name:"TooManyRequestsException",$fault:"client",...e});Object.setPrototypeOf(this,le.prototype)}}Qe.TooManyRequestsException=le;class ue extends j.SSOServiceException{name="UnauthorizedException";$fault="client";constructor(e){super({name:"UnauthorizedException",$fault:"client",...e});Object.setPrototypeOf(this,ue.prototype)}}Qe.UnauthorizedException=ue});var de=S((es)=>{Object.defineProperty(es,"__esModule",{value:!0});es.GetRoleCredentials$=es.RoleCredentials$=es.GetRoleCredentialsResponse$=es.GetRoleCredentialsRequest$=es.errorTypeRegistries=es.UnauthorizedException$=es.TooManyRequestsException$=es.ResourceNotFoundException$=es.InvalidRequestException$=es.SSOServiceException$=void 0;var ft="AccessTokenType",qt="GetRoleCredentials",Pt="GetRoleCredentialsRequest",yt="GetRoleCredentialsResponse",gt="InvalidRequestException",Ct="RoleCredentials",wt="ResourceNotFoundException",Nt="SecretAccessKeyType",Dt="SessionTokenType",bt="TooManyRequestsException",$t="UnauthorizedException",At="accountId",Ft="accessKeyId",Ut="accessToken",Mt="account_id",L="client",T="error",Gt="expiration",mt="http",z="httpError",jt="httpHeader",We="httpQuery",H="message",Lt="roleCredentials",Tt="roleName",zt="role_name",Ze="smithy.ts.sdk.synthetic.com.amazonaws.sso",Ht="secretAccessKey",Vt="sessionToken",Bt="x-amz-sso_bearer_token",E="com.amazonaws.sso",Ke=Xe(),V=ie(),Yt=m(),ke=Ke.TypeRegistry.for(Ze);es.SSOServiceException$=[-3,Ze,"SSOServiceException",0,[],[]];ke.registerError(es.SSOServiceException$,Yt.SSOServiceException);var D=Ke.TypeRegistry.for(E);es.InvalidRequestException$=[-3,E,gt,{[T]:L,[z]:400},[H],[0]];D.registerError(es.InvalidRequestException$,V.InvalidRequestException);es.ResourceNotFoundException$=[-3,E,wt,{[T]:L,[z]:404},[H],[0]];D.registerError(es.ResourceNotFoundException$,V.ResourceNotFoundException);es.TooManyRequestsException$=[-3,E,bt,{[T]:L,[z]:429},[H],[0]];D.registerError(es.TooManyRequestsException$,V.TooManyRequestsException);es.UnauthorizedException$=[-3,E,$t,{[T]:L,[z]:401},[H],[0]];D.registerError(es.UnauthorizedException$,V.UnauthorizedException);es.errorTypeRegistries=[ke,D];var Qt=[0,E,ft,8,0],Jt=[0,E,Nt,8,0],Wt=[0,E,Dt,8,0];es.GetRoleCredentialsRequest$=[3,E,Pt,0,[Tt,At,Ut],[[0,{[We]:zt}],[0,{[We]:Mt}],[()=>Qt,{[jt]:Bt}]],3];es.GetRoleCredentialsResponse$=[3,E,yt,0,[Lt],[[()=>es.RoleCredentials$,0]]];es.RoleCredentials$=[3,E,Ct,0,[Ft,Ht,Vt,Gt],[0,[()=>Jt,0],[()=>Wt,0],1]];es.GetRoleCredentials$=[9,E,qt,{[mt]:["GET","/federation/credentials",200]},()=>es.GetRoleCredentialsRequest$,()=>es.GetRoleCredentialsResponse$]});var Ss=S((_s)=>{Object.defineProperty(_s,"__esModule",{value:!0});_s.getRuntimeConfig=void 0;var sr=F(),tr=kt(),rr=ps(),or=G(),nr=Zt(),is=er(),ds=Kt(),ar=ee(),cr=Ve(),lr=de(),ur=(e)=>{return{apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??is.fromBase64,base64Encoder:e?.base64Encoder??is.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??cr.defaultEndpointResolver,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??ar.defaultSSOHttpAuthSchemeProvider,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(s)=>s.getIdentityProvider("aws.auth#sigv4"),signer:new sr.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(s)=>s.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new rr.NoAuthSigner}],logger:e?.logger??new or.NoOpLogger,protocol:e?.protocol??tr.AwsRestJsonProtocol,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:lr.errorTypeRegistries,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:e?.serviceId??"SSO",urlParser:e?.urlParser??nr.parseUrl,utf8Decoder:e?.utf8Decoder??ds.fromUtf8,utf8Encoder:e?.utf8Encoder??ds.toUtf8}};_s.getRuntimeConfig=ur});var Ps=S((fs)=>{Object.defineProperty(fs,"__esModule",{value:!0});fs.getRuntimeConfig=void 0;var Or=pr(),Ir=Or.__importDefault(_r()),hr=Z(),fr=F(),Rs=Er(),B=Is(),qr=Sr(),xs=hs(),q=Rr(),vs=ir(),Os=G(),Pr=xr(),yr=vr(),gr=dr(),Cr=Ss(),wr=(e)=>{(0,Os.emitWarningIfUnsupportedVersion)(process.version);let s=(0,yr.resolveDefaultsModeConfig)(e),t=()=>s().then(Os.loadConfigsForDefaultMode),o=(0,Cr.getRuntimeConfig)(e);(0,hr.emitWarningIfUnsupportedVersion)(process.version);let r={profile:e?.profile,logger:o.logger};return{...o,...e,runtime:"node",defaultsMode:s,authSchemePreference:e?.authSchemePreference??(0,q.loadConfig)(fr.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS,r),bodyLengthChecker:e?.bodyLengthChecker??Pr.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,Rs.createDefaultUserAgentProvider)({serviceId:o.serviceId,clientVersion:Ir.default.version}),maxAttempts:e?.maxAttempts??(0,q.loadConfig)(xs.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??(0,q.loadConfig)(B.NODE_REGION_CONFIG_OPTIONS,{...B.NODE_REGION_CONFIG_FILE_OPTIONS,...r}),requestHandler:vs.NodeHttpHandler.create(e?.requestHandler??t),retryMode:e?.retryMode??(0,q.loadConfig)({...xs.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await t()).retryMode||gr.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??qr.Hash.bind(null,"sha256"),streamCollector:e?.streamCollector??vs.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??(0,q.loadConfig)(B.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,r),useFipsEndpoint:e?.useFipsEndpoint??(0,q.loadConfig)(B.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,r),userAgentAppId:e?.userAgentAppId??(0,q.loadConfig)(Rs.NODE_APP_ID_CONFIG_OPTIONS,r)}};fs.getRuntimeConfig=wr});var $s=S((O)=>{var ys=Nr(),Gr=Dr(),mr=br(),gs=$r(),jr=Is(),pe=ps(),Lr=Xe(),Tr=Ar(),bs=Fr(),Cs=hs(),P=G(),ws=ee(),zr=Ps(),Ns=Ur(),Ds=Mr(),b=de(),Y=ie(),Hr=m(),Vr=(e)=>{return Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"})},Br={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Yr=(e)=>{let{httpAuthSchemes:s,httpAuthSchemeProvider:t,credentials:o}=e;return{setHttpAuthScheme(r){let n=s.findIndex((c)=>c.schemeId===r.schemeId);if(n===-1)s.push(r);else s.splice(n,1,r)},httpAuthSchemes(){return s},setHttpAuthSchemeProvider(r){t=r},httpAuthSchemeProvider(){return t},setCredentials(r){o=r},credentials(){return o}}},Qr=(e)=>{return{httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}},Jr=(e,s)=>{let t=Object.assign(Ns.getAwsRegionExtensionConfiguration(e),P.getDefaultExtensionConfiguration(e),Ds.getHttpHandlerExtensionConfiguration(e),Yr(e));return s.forEach((o)=>o.configure(t)),Object.assign(e,Ns.resolveAwsRegionExtensionConfiguration(t),P.resolveDefaultRuntimeConfig(t),Ds.resolveHttpHandlerRuntimeConfig(t),Qr(t))};class _e extends P.Client{config;constructor(...[e]){let s=zr.getRuntimeConfig(e||{});super(s);this.initConfig=s;let t=Vr(s),o=gs.resolveUserAgentConfig(t),r=Cs.resolveRetryConfig(o),n=jr.resolveRegionConfig(r),c=ys.resolveHostHeaderConfig(n),_=bs.resolveEndpointConfig(c),d=ws.resolveHttpAuthSchemeConfig(_),l=Jr(d,e?.extensions||[]);this.config=l,this.middlewareStack.use(Lr.getSchemaSerdePlugin(this.config)),this.middlewareStack.use(gs.getUserAgentPlugin(this.config)),this.middlewareStack.use(Cs.getRetryPlugin(this.config)),this.middlewareStack.use(Tr.getContentLengthPlugin(this.config)),this.middlewareStack.use(ys.getHostHeaderPlugin(this.config)),this.middlewareStack.use(Gr.getLoggerPlugin(this.config)),this.middlewareStack.use(mr.getRecursionDetectionPlugin(this.config)),this.middlewareStack.use(pe.getHttpAuthSchemeEndpointRuleSetPlugin(this.config,{httpAuthSchemeParametersProvider:ws.defaultSSOHttpAuthSchemeParametersProvider,identityProviderConfigProvider:async(u)=>new pe.DefaultIdentityProviderConfig({"aws.auth#sigv4":u.credentials})})),this.middlewareStack.use(pe.getHttpSigningPlugin(this.config))}destroy(){super.destroy()}}class Ee extends P.Command.classBuilder().ep(Br).m(function(e,s,t,o){return[bs.getEndpointPlugin(t,e.getEndpointParameterInstructions())]}).s("SWBPortalService","GetRoleCredentials",{}).n("SSOClient","GetRoleCredentialsCommand").sc(b.GetRoleCredentials$).build(){}var Wr={GetRoleCredentialsCommand:Ee};class Se extends _e{}P.createAggregatedClient(Wr,Se);O.$Command=P.Command;O.__Client=P.Client;O.SSOServiceException=Hr.SSOServiceException;O.GetRoleCredentialsCommand=Ee;O.SSO=Se;O.SSOClient=_e;Object.prototype.hasOwnProperty.call(b,"__proto__")&&!Object.prototype.hasOwnProperty.call(O,"__proto__")&&Object.defineProperty(O,"__proto__",{enumerable:!0,value:b.__proto__});Object.keys(b).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(O,e))O[e]=b[e]});Object.prototype.hasOwnProperty.call(Y,"__proto__")&&!Object.prototype.hasOwnProperty.call(O,"__proto__")&&Object.defineProperty(O,"__proto__",{enumerable:!0,value:Y.__proto__});Object.keys(Y).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(O,e))O[e]=Y[e]})});var Fs=S((to)=>{var As=$s();to.GetRoleCredentialsCommand=As.GetRoleCredentialsCommand;to.SSOClient=As.SSOClient});var R,Q,Us,ao,Gs=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string"),$=!1,Ms=async({ssoStartUrl:e,ssoSession:s,ssoAccountId:t,ssoRegion:o,ssoRoleName:r,ssoClient:n,clientConfig:c,parentClientConfig:_,callerClientConfig:d,profile:l,filepath:u,configFilepath:C,ignoreCache:x,logger:a})=>{let v,J="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let I=await ao.fromSso({profile:l,filepath:u,configFilepath:C,ignoreCache:x})();v={accessToken:I.token,expiresAt:new Date(I.expiration).toISOString()}}catch(I){throw new R.CredentialsProviderError(I.message,{tryNextLink:$,logger:a})}else try{v=await Q.getSSOTokenFromFile(e)}catch(I){throw new R.CredentialsProviderError("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:$,logger:a})}if(new Date(v.expiresAt).getTime()-Date.now()<=0)throw new R.CredentialsProviderError("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:$,logger:a});let{accessToken:Re}=v,{SSOClient:y,GetRoleCredentialsCommand:A}=await Promise.resolve().then(function(){return Fs()}),js=n||new y(Object.assign({},c??{},{logger:c?.logger??d?.logger??_?.logger,region:c?.region??o,userAgentAppId:c?.userAgentAppId??d?.userAgentAppId??_?.userAgentAppId})),xe;try{xe=await js.send(new A({accountId:t,roleName:r,accessToken:Re}))}catch(I){throw new R.CredentialsProviderError(I,{tryNextLink:$,logger:a})}let{roleCredentials:{accessKeyId:ve,secretAccessKey:Oe,sessionToken:Ie,expiration:he,credentialScope:fe,accountId:qe}={}}=xe;if(!ve||!Oe||!Ie||!he)throw new R.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:$,logger:a});let W={accessKeyId:ve,secretAccessKey:Oe,sessionToken:Ie,expiration:new Date(he),...fe&&{credentialScope:fe},...qe&&{accountId:qe}};if(s)Us.setCredentialFeature(W,"CREDENTIALS_SSO","s");else Us.setCredentialFeature(W,"CREDENTIALS_SSO_LEGACY","u");return W},ms=(e,s)=>{let{sso_start_url:t,sso_account_id:o,sso_region:r,sso_role_name:n}=e;if(!t||!o||!r||!n)throw new R.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
+Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:s});return e},co=(e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:t,ssoAccountId:o,ssoRegion:r,ssoRoleName:n,ssoSession:c}=e,{ssoClient:_}=e,d=Q.getProfileName({profile:e.profile??s?.profile});if(!t&&!o&&!r&&!n&&!c){let u=(await Q.parseKnownFiles(e))[d];if(!u)throw new R.CredentialsProviderError(`Profile ${d} was not found.`,{logger:e.logger});if(!Gs(u))throw new R.CredentialsProviderError(`Profile ${d} is not configured with SSO credentials.`,{logger:e.logger});if(u?.sso_session){let y=(await Q.loadSsoSessionData(e))[u.sso_session],A=` configurations in profile ${d} and sso-session ${u.sso_session}`;if(r&&r!==y.sso_region)throw new R.CredentialsProviderError("Conflicting SSO region"+A,{tryNextLink:!1,logger:e.logger});if(t&&t!==y.sso_start_url)throw new R.CredentialsProviderError("Conflicting SSO start_url"+A,{tryNextLink:!1,logger:e.logger});u.sso_region=y.sso_region,u.sso_start_url=y.sso_start_url}let{sso_start_url:C,sso_account_id:x,sso_region:a,sso_role_name:v,sso_session:J}=ms(u,e.logger);return Ms({ssoStartUrl:C,ssoSession:J,ssoAccountId:x,ssoRegion:a,ssoRoleName:v,ssoClient:_,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:d,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}else if(!t||!o||!r||!n)throw new R.CredentialsProviderError('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});else return Ms({ssoStartUrl:t,ssoSession:c,ssoAccountId:o,ssoRegion:r,ssoRoleName:n,ssoClient:_,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:d,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})},lo,uo,io;var po=no(()=>{R=Ce(),Q=we(),Us=Z(),ao=De();lo=co,uo=Gs,io=ms});po();export{io as validateSsoProfile,uo as isSsoProfile,lo as fromSSO};export default {get validateSsoProfile(){return io},get isSsoProfile(){return uo},get fromSSO(){return lo}};