@claudiolabs/claudin 1.1.37 → 1.1.38

package/dist/chunks/index-1.1.38-r550x6ay.mjs

@@ -0,0 +1,2 @@
+import{Hqa as u,Kqa as k}from"./cli-1.1.38-dfcp3asv.mjs";import{Pqa as f,Qqa as y}from"./cli-1.1.38-y66mw08s.mjs";function j(z){return new Promise((G,U)=>{let K=g.request({method:"GET",...z,hostname:z.hostname?.replace(/^\[(.+)\]$/,"$1")});K.on("error",(Q)=>{U(Object.assign(new X.ProviderError("Unable to connect to instance metadata service"),Q)),K.destroy()}),K.on("timeout",()=>{U(new X.ProviderError("TimeoutError from instance metadata service")),K.destroy()}),K.on("response",(Q)=>{let{statusCode:Z=400}=Q;if(Z<200||300<=Z)U(Object.assign(new X.ProviderError("Error response received from instance metadata service"),{statusCode:Z})),K.destroy();let w=[];Q.on("data",($)=>{w.push($)}),Q.on("end",()=>{G(Buffer.concat(w)),K.destroy()})}),K.end()})}var m,X,g,c,C=(z)=>Boolean(z)&&typeof z==="object"&&typeof z.AccessKeyId==="string"&&typeof z.SecretAccessKey==="string"&&typeof z.Token==="string"&&typeof z.Expiration==="string",T=(z)=>({accessKeyId:z.AccessKeyId,secretAccessKey:z.SecretAccessKey,sessionToken:z.Token,expiration:new Date(z.Expiration),...z.AccountId&&{accountId:z.AccountId}}),b=1000,F=0,M=({maxRetries:z=F,timeout:G=b})=>({maxRetries:z,timeout:G}),N=(z,G)=>{let U=z();for(let K=0;K<G;K++)U=U.catch(z);return U},L="AWS_CONTAINER_CREDENTIALS_FULL_URI",_="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",P="AWS_CONTAINER_AUTHORIZATION_TOKEN",p=(z={})=>{let{timeout:G,maxRetries:U}=M(z);return()=>N(async()=>{let K=await n({logger:z.logger}),Q=JSON.parse(await d(G,K));if(!C(Q))throw new X.CredentialsProviderError("Invalid response received from instance metadata service.",{logger:z.logger});return T(Q)},U)},d=async(z,G)=>{if(process.env[P])G.headers={...G.headers,Authorization:process.env[P]};return(await j({...G,timeout:z})).toString()},l="169.254.170.2",a,s,n=async({logger:z})=>{if(process.env[_])return{hostname:l,path:process.env[_]};if(process.env[L]){let G=m.parse(process.env[L]);if(!G.hostname||!(G.hostname in a))throw new X.CredentialsProviderError(`${G.hostname} is not a valid container metadata service hostname`,{tryNextLink:!1,logger:z});if(!G.protocol||!(G.protocol in s))throw new X.CredentialsProviderError(`${G.protocol} is not a valid container metadata service protocol`,{tryNextLink:!1,logger:z});return{...G,port:G.port?parseInt(G.port,10):void 0}}throw new X.CredentialsProviderError(`The container metadata credential provider cannot be used unless the ${_} or ${L} environment variable is set`,{tryNextLink:!1,logger:z})},V,S=void 0,o="AWS_EC2_METADATA_SERVICE_ENDPOINT",t="ec2_metadata_service_endpoint",i,A,r="AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE",e="ec2_metadata_service_endpoint_mode",zz,v=async()=>c.parseUrl(await Gz()||await Kz()),Gz=async()=>X.loadConfig(i)(),Kz=async()=>{let z=await X.loadConfig(zz)();switch(z){case A.IPv4:return S.IPv4;case A.IPv6:return S.IPv6;default:throw Error(`Unsupported endpoint mode: ${z}. Select from ${Object.values(A)}`)}},Qz=300,Uz=300,Xz="https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html",h=(z,G)=>{let U=Qz+Math.floor(Math.random()*Uz),K=new Date(Date.now()+U*1000);G.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(K)}.
+For more information, please visit: `+Xz);let Q=z.originalExpiration??z.expiration;return{...z,...Q?{originalExpiration:Q}:{},expiration:K}},Zz=(z,G={})=>{let U=G?.logger||console,K;return async()=>{let Q;try{if(Q=await z(),Q.expiration&&Q.expiration.getTime()<Date.now())Q=h(Q,U)}catch(Z){if(K)U.warn("Credential renew failed: ",Z),Q=h(K,U);else throw Z}return K=Q,Q}},x="/latest/meta-data/iam/security-credentials/",$z="/latest/api/token",B="AWS_EC2_METADATA_V1_DISABLED",q="ec2_metadata_v1_disabled",I="x-aws-ec2-metadata-token",Hz=(z={})=>Zz(Jz(z),{logger:z.logger}),Jz=(z={})=>{let G=!1,{logger:U,profile:K}=z,{timeout:Q,maxRetries:Z}=M(z),w=async($,D)=>{if(G||D.headers?.[I]==null){let H=!1,J=!1,R=await X.loadConfig({environmentVariableSelector:(Y)=>{let W=Y[B];if(J=!!W&&W!=="false",W===void 0)throw new X.CredentialsProviderError(`${B} not set in env, checking config file next.`,{logger:z.logger});return J},configFileSelector:(Y)=>{let W=Y[q];return H=!!W&&W!=="false",H},default:!1},{profile:K})();if(z.ec2MetadataV1Disabled||R){let Y=[];if(z.ec2MetadataV1Disabled)Y.push("credential provider initialization (runtime option ec2MetadataV1Disabled)");if(H)Y.push(`config file profile (${q})`);if(J)Y.push(`process environment variable (${B})`);throw new V(`AWS EC2 Metadata v1 fallback has been blocked by AWS SDK configuration in the following: [${Y.join(", ")}].`)}}let E=(await N(async()=>{let H;try{H=await wz(D)}catch(J){if(J.statusCode===401)G=!1;throw J}return H},$)).trim();return N(async()=>{let H;try{H=await Dz(E,D,z)}catch(J){if(J.statusCode===401)G=!1;throw J}return H},$)};return async()=>{let $=await v();if(G)return U?.debug("AWS SDK Instance Metadata","using v1 fallback (no token fetch)"),w(Z,{...$,timeout:Q});else{let D;try{D=(await Yz({...$,timeout:Q})).toString()}catch(O){if(O?.statusCode===400)throw Object.assign(O,{message:"EC2 Metadata token request returned error"});else if(O.message==="TimeoutError"||[403,404,405].includes(O.statusCode))G=!0;return U?.debug("AWS SDK Instance Metadata","using v1 fallback (initial)"),w(Z,{...$,timeout:Q})}return w(Z,{...$,headers:{[I]:D},timeout:Q})}}},Yz=async(z)=>j({...z,path:$z,method:"PUT",headers:{"x-aws-ec2-metadata-token-ttl-seconds":"21600"}}),wz=async(z)=>(await j({...z,path:x})).toString(),Dz=async(z,G,U)=>{let K=JSON.parse((await j({...G,path:x+z})).toString());if(!C(K))throw new X.CredentialsProviderError("Invalid response received from instance metadata service.",{logger:U.logger});return T(K)},Wz,Az,Oz,Sz,jz,Lz,_z,Bz,Nz,Pz;var Mz=f(()=>{m=y("node:url"),X=u(),g=y("node:http"),c=k();a={localhost:!0,"127.0.0.1":!0},s={"http:":!0,"https:":!0};V=class V extends X.CredentialsProviderError{tryNextLink;name="InstanceMetadataV1FallbackError";constructor(z,G=!0){super(z,G);this.tryNextLink=G,Object.setPrototypeOf(this,V.prototype)}};(function(z){z.IPv4="http://169.254.169.254",z.IPv6="http://[fd00:ec2::254]"})(S||(S={}));i={environmentVariableSelector:(z)=>z[o],configFileSelector:(z)=>z[t],default:void 0};(function(z){z.IPv4="IPv4",z.IPv6="IPv6"})(A||(A={}));zz={environmentVariableSelector:(z)=>z[r],configFileSelector:(z)=>z[e],default:A.IPv4};Wz=F,Az=b,Oz=P,Sz=L,jz=_,Lz=p,_z=Hz,Bz=v,Nz=j,Pz=M});Mz();export{Pz as providerConfigFromInit,Nz as httpRequest,Bz as getInstanceMetadataEndpoint,_z as fromInstanceMetadata,Lz as fromContainerMetadata,S as Endpoint,jz as ENV_CMDS_RELATIVE_URI,Sz as ENV_CMDS_FULL_URI,Oz as ENV_CMDS_AUTH_TOKEN,Az as DEFAULT_TIMEOUT,Wz as DEFAULT_MAX_RETRIES};export default {get providerConfigFromInit(){return Pz},get httpRequest(){return Nz},get getInstanceMetadataEndpoint(){return Bz},get fromInstanceMetadata(){return _z},get fromContainerMetadata(){return Lz},get Endpoint(){return S},get ENV_CMDS_RELATIVE_URI(){return jz},get ENV_CMDS_FULL_URI(){return Sz},get ENV_CMDS_AUTH_TOKEN(){return Oz},get DEFAULT_TIMEOUT(){return Az},get DEFAULT_MAX_RETRIES(){return Wz}};

package/dist/chunks/index-1.1.38-t56hya6b.mjs

@@ -0,0 +1,9 @@
+import{J7 as V}from"./cli-1.1.38-pksnvm8s.mjs";import{l8 as W}from"./cli-1.1.38-1k5hq477.mjs";import{p8 as g}from"./cli-1.1.38-4dvqxnwp.mjs";import"./cli-1.1.38-dfcp3asv.mjs";import{Lqa as H,Pqa as F,Qqa as O}from"./cli-1.1.38-y66mw08s.mjs";function M(b,q){let j=N(b),B,G,z,Q=async(J)=>{if(J?.forceRefresh)return await j(J);if(z?.expiration){if(z?.expiration?.getTime()<Date.now())z=void 0}if(B)await B;else if(!z||q?.(z))if(z){if(!G)G=j(J).then((X)=>{z=X}).finally(()=>{G=void 0})}else return B=j(J).then((X)=>{z=X}).finally(()=>{B=void 0}),Q(J);return z};return Q}var Y,K,h,Z="AWS_EC2_METADATA_DISABLED",x=async(b)=>{let{ENV_CMDS_FULL_URI:q,ENV_CMDS_RELATIVE_URI:j,fromContainerMetadata:B,fromInstanceMetadata:G}=await import("./index-1.1.38-r550x6ay.mjs");if(process.env[j]||process.env[q]){b.logger?.debug("@aws-sdk/credential-provider-node - remoteProvider::fromHttp/fromContainerMetadata");let{fromHttp:z}=await import("./index-1.1.38-x4crzvcp.mjs").then((m)=>H(m.default,1));return K.chain(z(b),B(b))}if(process.env[Z]&&process.env[Z]!=="false")return async()=>{throw new K.CredentialsProviderError("EC2 Instance Metadata Service access disabled",{logger:b.logger})};return b.logger?.debug("@aws-sdk/credential-provider-node - remoteProvider::fromInstanceMetadata"),G(b)},N=(b)=>async(q)=>{let j;for(let B of b)try{return await B(q)}catch(G){if(j=G,G?.tryNextLink)continue;throw G}throw j},$=!1,T=(b={})=>M([async()=>{if(b.profile??process.env[h.ENV_PROFILE]){if(process.env[Y.ENV_KEY]&&process.env[Y.ENV_SECRET]){if(!$)(b.logger?.warn&&b.logger?.constructor?.name!=="NoOpLogger"?b.logger.warn.bind(b.logger):console.warn)(`@aws-sdk/credential-provider-node - defaultProvider::fromEnv WARNING:
+    Multiple credential sources detected: 
+    Both AWS_PROFILE and the pair AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY static credentials are set.
+    This SDK will proceed with the AWS_PROFILE value.
+    
+    However, a future version may change this behavior to prefer the ENV static credentials.
+    Please ensure that your environment only sets either the AWS_PROFILE or the
+    AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY pair.
+`),$=!0}throw new K.CredentialsProviderError("AWS_PROFILE is set, skipping fromEnv provider.",{logger:b.logger,tryNextLink:!0})}return b.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromEnv"),Y.fromEnv(b)()},async(q)=>{b.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromSSO");let{ssoStartUrl:j,ssoAccountId:B,ssoRegion:G,ssoRoleName:z,ssoSession:Q}=b;if(!j&&!B&&!G&&!z&&!Q)throw new K.CredentialsProviderError("Skipping SSO provider in default chain (inputs do not include SSO fields).",{logger:b.logger});let{fromSSO:J}=await import("./index-1.1.38-e7f6p4gc.mjs");return J(b)(q)},async(q)=>{b.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromIni");let{fromIni:j}=await import("./index-1.1.38-trn75xj8.mjs");return j(b)(q)},async(q)=>{b.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromProcess");let{fromProcess:j}=await import("./index-1.1.38-h6safnqh.mjs");return j(b)(q)},async(q)=>{b.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromTokenFile");let{fromTokenFile:j}=await import("./index-1.1.38-0p1da46q.mjs").then((m)=>H(m.default,1));return j(b)(q)},async()=>{return b.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::remoteProvider"),(await x(b))()},async()=>{throw new K.CredentialsProviderError("Could not load credentials from any providers",{tryNextLink:!1,logger:b.logger})}],D),U=(b)=>b?.expiration!==void 0,D=(b)=>b?.expiration!==void 0&&b.expiration.getTime()-Date.now()<300000,C,u,A;var R=F(()=>{Y=V(),K=g(),h=W();C=D,u=U,A=T});R();export{A as defaultProvider,u as credentialsWillNeedRefresh,C as credentialsTreatedAsExpired};export default {get defaultProvider(){return A},get credentialsWillNeedRefresh(){return u},get credentialsTreatedAsExpired(){return C}};

package/dist/chunks/index-1.1.38-t8ehet13.mjs

@@ -0,0 +1 @@
+import{Dqa as a}from"./cli-1.1.38-jr0vb3er.mjs";import"./cli-1.1.38-dfcp3asv.mjs";import"./cli-1.1.38-y66mw08s.mjs";export default a();

package/dist/chunks/index-1.1.38-trn75xj8.mjs

@@ -0,0 +1 @@
+import{l8 as G}from"./cli-1.1.38-1k5hq477.mjs";import{o8 as _,p8 as U}from"./cli-1.1.38-4dvqxnwp.mjs";import{Kqa as X}from"./cli-1.1.38-dfcp3asv.mjs";import{Lqa as K,Nqa as B,Pqa as l,Qqa as E}from"./cli-1.1.38-y66mw08s.mjs";var v=B((k)=>{Object.defineProperty(k,"__esModule",{value:!0});k.resolveHttpHandlerRuntimeConfig=k.getHttpHandlerExtensionConfiguration=k.isValidHostname=k.HttpResponse=k.HttpRequest=k.Fields=k.Field=void 0;var H=X();Object.defineProperty(k,"Field",{enumerable:!0,get:function(){return H.Field}});Object.defineProperty(k,"Fields",{enumerable:!0,get:function(){return H.Fields}});Object.defineProperty(k,"HttpRequest",{enumerable:!0,get:function(){return H.HttpRequest}});Object.defineProperty(k,"HttpResponse",{enumerable:!0,get:function(){return H.HttpResponse}});Object.defineProperty(k,"isValidHostname",{enumerable:!0,get:function(){return H.isValidHostname}});Object.defineProperty(k,"getHttpHandlerExtensionConfiguration",{enumerable:!0,get:function(){return H.getHttpHandlerExtensionConfiguration}});Object.defineProperty(k,"resolveHttpHandlerRuntimeConfig",{enumerable:!0,get:function(){return H.resolveHttpHandlerRuntimeConfig}})});var J=B((C)=>{var Q=_(),T=U(),P=G(),W=v(),F=E("node:crypto"),q=E("node:fs"),Z=E("node:os"),A=E("node:path");class ${profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300000;constructor(e,n,t){this.profileData=e,this.init=n,this.callerClientConfig=t}async loadCredentials(){let e=await this.loadToken();if(!e)throw new T.CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let n=e.accessToken,t=Date.now();if(new Date(n.expiresAt).getTime()-t<=$.REFRESH_THRESHOLD)return this.refresh(e);return{accessKeyId:n.accessKeyId,secretAccessKey:n.secretAccessKey,sessionToken:n.sessionToken,accountId:n.accountId,expiration:new Date(n.expiresAt)}}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}async refresh(e){let{SigninClient:n,CreateOAuth2TokenCommand:t}=await import("./index-1.1.38-xwfqwn8f.mjs").then((m)=>K(m.default)),{logger:s,userAgentAppId:c}=this.callerClientConfig??{},r=((h)=>{return h?.metadata?.handlerProtocol==="h2"})(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,a=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,i=new n({credentials:{accessKeyId:"",secretAccessKey:""},region:a,requestHandler:r,logger:s,userAgentAppId:c,...this.init?.clientConfig});this.createDPoPInterceptor(i.middlewareStack);let x={tokenInput:{clientId:e.clientId,refreshToken:e.refreshToken,grantType:"refresh_token"}};try{let h=await i.send(new t(x)),{accessKeyId:y,secretAccessKey:d,sessionToken:I}=h.tokenOutput?.accessToken??{},{refreshToken:S,expiresIn:m}=h.tokenOutput??{};if(!y||!d||!I||!S)throw new T.CredentialsProviderError("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let R=(m??900)*1000,b=new Date(Date.now()+R),j={...e,accessToken:{...e.accessToken,accessKeyId:y,secretAccessKey:d,sessionToken:I,expiresAt:b.toISOString()},refreshToken:S};await this.saveToken(j);let o=j.accessToken;return{accessKeyId:o.accessKeyId,secretAccessKey:o.secretAccessKey,sessionToken:o.sessionToken,accountId:o.accountId,expiration:b}}catch(h){if(h.name==="AccessDeniedException"){let y=h.error,d;switch(y){case"TOKEN_EXPIRED":d="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":d="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":d="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:d=`Failed to refresh token: ${String(h)}. Please re-authenticate using \`aws login\``}throw new T.CredentialsProviderError(d,{logger:this.logger,tryNextLink:!1})}throw new T.CredentialsProviderError(`Failed to refresh token: ${String(h)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let e=this.getTokenFilePath();try{let n;try{n=await P.readFile(e,{ignoreCache:this.init?.ignoreCache})}catch{n=await q.promises.readFile(e,"utf8")}let t=JSON.parse(n),s=["accessToken","clientId","refreshToken","dpopKey"].filter((c)=>!t[c]);if(!t.accessToken?.accountId)s.push("accountId");if(s.length>0)throw new T.CredentialsProviderError(`Token validation failed, missing fields: ${s.join(", ")}`,{logger:this.logger,tryNextLink:!1});return t}catch(n){throw new T.CredentialsProviderError(`Failed to load token from ${e}: ${String(n)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(e){let n=this.getTokenFilePath(),t=A.dirname(n);try{await q.promises.mkdir(t,{recursive:!0})}catch(s){}await q.promises.writeFile(n,JSON.stringify(e,null,2),"utf8")}getTokenFilePath(){let e=process.env.AWS_LOGIN_CACHE_DIRECTORY??A.join(Z.homedir(),".aws","login","cache"),n=Buffer.from(this.loginSession,"utf8"),t=F.createHash("sha256").update(n).digest("hex");return A.join(e,`${t}.json`)}derToRawSignature(e){let n=2;if(e[n]!==2)throw Error("Invalid DER signature");n++;let t=e[n++],s=e.subarray(n,n+t);if(n+=t,e[n]!==2)throw Error("Invalid DER signature");n++;let c=e[n++],u=e.subarray(n,n+c);s=s[0]===0?s.subarray(1):s,u=u[0]===0?u.subarray(1):u;let r=Buffer.concat([Buffer.alloc(32-s.length),s]),a=Buffer.concat([Buffer.alloc(32-u.length),u]);return Buffer.concat([r,a])}createDPoPInterceptor(e){e.add((n)=>async(t)=>{if(W.HttpRequest.isInstance(t.request)){let s=t.request,c=`${s.protocol}//${s.hostname}${s.port?`:${s.port}`:""}${s.path}`,u=await this.generateDpop(s.method,c);s.headers={...s.headers,DPoP:u}}return n(t)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(e="POST",n){let t=await this.loadToken();try{let s=F.createPrivateKey({key:t.dpopKey,format:"pem",type:"sec1"}),u=F.createPublicKey(s).export({format:"der",type:"spki"}),r=-1;for(let b=0;b<u.length;b++)if(u[b]===4){r=b;break}let a=u.slice(r+1,r+33),i=u.slice(r+33,r+65),x={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:a.toString("base64url"),y:i.toString("base64url")}},h={jti:crypto.randomUUID(),htm:e,htu:n,iat:Math.floor(Date.now()/1000)},y=Buffer.from(JSON.stringify(x)).toString("base64url"),d=Buffer.from(JSON.stringify(h)).toString("base64url"),I=`${y}.${d}`,S=F.sign("sha256",Buffer.from(I),s),R=this.derToRawSignature(S).toString("base64url");return`${I}.${R}`}catch(s){throw new T.CredentialsProviderError(`Failed to generate Dpop proof: ${s instanceof Error?s.message:String(s)}`,{logger:this.logger,tryNextLink:!1})}}}var N=(e)=>async({callerClientConfig:n}={})=>{e?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let t=await P.parseKnownFiles(e||{}),s=P.getProfileName({profile:e?.profile??n?.profile}),c=t[s];if(!c?.login_session)throw new T.CredentialsProviderError(`Profile ${s} does not contain login_session.`,{tryNextLink:!0,logger:e?.logger});let r=await new $(c,e,n).loadCredentials();return Q.setCredentialFeature(r,"CREDENTIALS_LOGIN","AD")};C.fromLoginCredentials=N});var L,O,w,p,ee=(e,n,t)=>{let s={EcsContainer:async(c)=>{let{fromHttp:u}=await import("./index-1.1.38-x4crzvcp.mjs").then((m)=>K(m.default,1)),{fromContainerMetadata:r}=await import("./index-1.1.38-r550x6ay.mjs");return t?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>O.chain(u(c??{}),r(c))().then(D)},Ec2InstanceMetadata:async(c)=>{t?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");let{fromInstanceMetadata:u}=await import("./index-1.1.38-r550x6ay.mjs");return async()=>u(c)().then(D)},Environment:async(c)=>{t?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");let{fromEnv:u}=await import("./index-1.1.38-he0r1v5h.mjs");return async()=>u(c)().then(D)}};if(e in s)return s[e];else throw new O.CredentialsProviderError(`Unsupported credential source in profile ${n}. Got ${e}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:t})},D=(e)=>w.setCredentialFeature(e,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p"),te=(e,{profile:n="default",logger:t}={})=>{return Boolean(e)&&typeof e==="object"&&typeof e.role_arn==="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1&&["undefined","string"].indexOf(typeof e.external_id)>-1&&["undefined","string"].indexOf(typeof e.mfa_serial)>-1&&(ne(e,{profile:n,logger:t})||se(e,{profile:n,logger:t}))},ne=(e,{profile:n,logger:t})=>{let s=typeof e.source_profile==="string"&&typeof e.credential_source>"u";if(s)t?.debug?.(`    ${n} isAssumeRoleWithSourceProfile source_profile=${e.source_profile}`);return s},se=(e,{profile:n,logger:t})=>{let s=typeof e.credential_source==="string"&&typeof e.source_profile>"u";if(s)t?.debug?.(`    ${n} isCredentialSourceProfile credential_source=${e.credential_source}`);return s},re=async(e,n,t,s,c={},u)=>{t.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");let r=n[e],{source_profile:a,region:i}=r;if(!t.roleAssumer){let{getDefaultRoleAssumer:h}=await import("./index-1.1.38-32wb94y5.mjs").then((m)=>K(m.default,1));t.roleAssumer=h({...t.clientConfig,credentialProviderLogger:t.logger,parentClientConfig:{...s,...t?.parentClientConfig,region:i??t?.parentClientConfig?.region??s?.region}},t.clientPlugins)}if(a&&a in c)throw new O.CredentialsProviderError(`Detected a cycle attempting to resolve credentials for profile ${L.getProfileName(t)}. Profiles visited: `+Object.keys(c).join(", "),{logger:t.logger});t.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${a?`source_profile=[${a}]`:`profile=[${e}]`}`);let x=a?u(a,n,t,s,{...c,[a]:!0},V(n[a]??{})):(await ee(r.credential_source,e,t.logger)(t))();if(V(r))return x.then((h)=>w.setCredentialFeature(h,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));else{let h={RoleArn:r.role_arn,RoleSessionName:r.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:r.external_id,DurationSeconds:parseInt(r.duration_seconds||"3600",10)},{mfa_serial:y}=r;if(y){if(!t.mfaCodeProvider)throw new O.CredentialsProviderError(`Profile ${e} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:t.logger,tryNextLink:!1});h.SerialNumber=y,h.TokenCode=await t.mfaCodeProvider(y)}let d=await x;return t.roleAssumer(d,h).then((I)=>w.setCredentialFeature(I,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},V=(e)=>{return!e.role_arn&&!!e.credential_source},ce=(e)=>{return Boolean(e&&e.login_session)},ue=async(e,n,t)=>{let s=await p.fromLoginCredentials({...n,profile:e})({callerClientConfig:t});return w.setCredentialFeature(s,"CREDENTIALS_PROFILE_LOGIN","AC")},he=(e)=>Boolean(e)&&typeof e==="object"&&typeof e.credential_process==="string",ae=async(e,n)=>import("./index-1.1.38-h6safnqh.mjs").then(({fromProcess:t})=>t({...e,profile:n})().then((s)=>w.setCredentialFeature(s,"CREDENTIALS_PROFILE_PROCESS","v"))),de=async(e,n,t={},s)=>{let{fromSSO:c}=await import("./index-1.1.38-e7f6p4gc.mjs");return c({profile:e,logger:t.logger,parentClientConfig:t.parentClientConfig,clientConfig:t.clientConfig})({callerClientConfig:s}).then((u)=>{if(n.sso_session)return w.setCredentialFeature(u,"CREDENTIALS_PROFILE_SSO","r");else return w.setCredentialFeature(u,"CREDENTIALS_PROFILE_SSO_LEGACY","t")})},ye=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string"),Y=(e)=>Boolean(e)&&typeof e==="object"&&typeof e.aws_access_key_id==="string"&&typeof e.aws_secret_access_key==="string"&&["undefined","string"].indexOf(typeof e.aws_session_token)>-1&&["undefined","string"].indexOf(typeof e.aws_account_id)>-1,g=async(e,n)=>{n?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");let t={accessKeyId:e.aws_access_key_id,secretAccessKey:e.aws_secret_access_key,sessionToken:e.aws_session_token,...e.aws_credential_scope&&{credentialScope:e.aws_credential_scope},...e.aws_account_id&&{accountId:e.aws_account_id}};return w.setCredentialFeature(t,"CREDENTIALS_PROFILE","n")},ke=(e)=>Boolean(e)&&typeof e==="object"&&typeof e.web_identity_token_file==="string"&&typeof e.role_arn==="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1,we=async(e,n,t)=>import("./index-1.1.38-0p1da46q.mjs").then((m)=>K(m.default,1)).then(({fromTokenFile:s})=>s({webIdentityTokenFile:e.web_identity_token_file,roleArn:e.role_arn,roleSessionName:e.role_session_name,roleAssumerWithWebIdentity:n.roleAssumerWithWebIdentity,logger:n.logger,parentClientConfig:n.parentClientConfig})({callerClientConfig:t}).then((c)=>w.setCredentialFeature(c,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q"))),z=async(e,n,t,s,c={},u=!1)=>{let r=n[e];if(Object.keys(c).length>0&&Y(r))return g(r,t);if(u||te(r,{profile:e,logger:t.logger}))return re(e,n,t,s,c,z);if(Y(r))return g(r,t);if(ke(r))return we(r,t,s);if(he(r))return ae(t,e);if(ye(r))return await de(e,r,t,s);if(ce(r))return ue(e,t,s);throw new O.CredentialsProviderError(`Could not resolve credentials using profile: [${e}] in configuration/credentials file(s).`,{logger:t.logger})},Te=(e={})=>async({callerClientConfig:n}={})=>{e.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");let t=await L.parseKnownFiles(e);return z(L.getProfileName({profile:e.profile??n?.profile}),t,e,n)},Ee;var Ie=l(()=>{L=G(),O=U(),w=_(),p=J();Ee=Te});Ie();export{Ee as fromIni};export default {get fromIni(){return Ee}};

package/dist/chunks/index-1.1.38-tz1ab367.mjs

@@ -0,0 +1 @@
+import{AE as i,BE as j,CE as k,sE as a,tE as b,uE as c,vE as d,wE as e,xE as f,yE as g,zE as h}from"./cli-1.1.38-tk968ykv.mjs";import"./cli-1.1.38-xr1c1bn4.mjs";import"./cli-1.1.38-n5tx4p12.mjs";import"./cli-1.1.38-pah268nz.mjs";import"./cli-1.1.38-hkbb3sr7.mjs";import"./cli-1.1.38-qackcmc3.mjs";import"./cli-1.1.38-y3k2y9f2.mjs";import"./cli-1.1.38-q3emeb23.mjs";import"./cli-1.1.38-dggxcj2x.mjs";import"./cli-1.1.38-0q1t1zs8.mjs";import"./cli-1.1.38-fembxywm.mjs";import"./cli-1.1.38-3c43sfc3.mjs";import"./cli-1.1.38-y79rqp8p.mjs";import"./cli-1.1.38-cp5m26rk.mjs";import"./cli-1.1.38-mnr9k9j8.mjs";import"./cli-1.1.38-h2f789qa.mjs";import"./cli-1.1.38-62gxd3va.mjs";import"./cli-1.1.38-h83nx1a5.mjs";import"./cli-1.1.38-q3yhkwkh.mjs";import"./cli-1.1.38-jrf85w1a.mjs";import"./cli-1.1.38-1kce30qe.mjs";import"./cli-1.1.38-ww8j7xpn.mjs";import"./cli-1.1.38-pnngv0r7.mjs";import"./cli-1.1.38-h1fqbjjb.mjs";import"./cli-1.1.38-h6qtpp5r.mjs";import"./cli-1.1.38-8m9096qg.mjs";import"./cli-1.1.38-s1nggz9g.mjs";import"./cli-1.1.38-z8x4q5cc.mjs";import"./cli-1.1.38-z9faf3ft.mjs";import"./cli-1.1.38-4g2k1n93.mjs";import"./cli-1.1.38-zx5nqvq6.mjs";import"./cli-1.1.38-3j9z8bce.mjs";import"./cli-1.1.38-6dwdjwfe.mjs";import"./cli-1.1.38-8br976cg.mjs";import"./cli-1.1.38-xpjv8r2g.mjs";import"./cli-1.1.38-rp0tsnde.mjs";import"./cli-1.1.38-abavft6n.mjs";import"./cli-1.1.38-t8k5snq9.mjs";import"./cli-1.1.38-e5by1ynv.mjs";import"./cli-1.1.38-cq1f1j06.mjs";import"./cli-1.1.38-38f3b9as.mjs";import"./cli-1.1.38-a678cgp1.mjs";import"./cli-1.1.38-qv0rqvhj.mjs";import"./cli-1.1.38-f6be5pxz.mjs";import"./cli-1.1.38-6g33twaj.mjs";import"./cli-1.1.38-h0643t2a.mjs";import"./cli-1.1.38-fr1kxnk2.mjs";import"./cli-1.1.38-z02gnn41.mjs";import"./cli-1.1.38-yfhvhcvt.mjs";import"./cli-1.1.38-wbww08bk.mjs";import"./cli-1.1.38-mh6a6g83.mjs";import"./cli-1.1.38-nzbcas3j.mjs";import"./cli-1.1.38-44ay6q12.mjs";import"./cli-1.1.38-n9xftqbp.mjs";import"./cli-1.1.38-ffkc8ker.mjs";import"./cli-1.1.38-y66mw08s.mjs";k();export{d as waitForPolicyLimitsToLoad,j as stopBackgroundPolling,i as startBackgroundPolling,g as refreshPolicyLimits,f as loadPolicyLimits,c as isPolicyLimitsEligible,e as isPolicyAllowed,b as initializePolicyLimitsLoadingPromise,h as clearPolicyLimitsCache,a as _resetPolicyLimitsForTesting};

package/dist/chunks/index-1.1.38-wj6bvgqh.mjs

@@ -0,0 +1 @@
+import{Vi as a}from"./cli-1.1.38-axhwttsc.mjs";import"./cli-1.1.38-abavft6n.mjs";import"./cli-1.1.38-y66mw08s.mjs";export default a();