@claudiolabs/claudio 0.1.11 → 0.1.13

package/dist/chunks/cli-0.1.13-d8wkcw90.mjs

@@ -0,0 +1,25 @@
+import{$5 as st,R5 as nt,S5 as hl,T5 as bl,U5 as ml,V5 as fn,W5 as $c,X5 as fu,Y5 as Al,Z5 as ys,_5 as El,a6 as hs,b6 as k,c6 as ur,d6 as Qc,e6 as Bc,f6 as ra,g6 as Xc,h6 as Yc,i6 as Zc,j6 as Jc,k6 as el,l6 as Hc,m6 as cr,n6 as Cc,o6 as Ts,p6 as gl}from"./cli-0.1.13-ky4z1s1h.mjs";import{q6 as ie}from"./cli-0.1.13-84tbx1nf.mjs";import{Ina as kc,Jna as Le}from"./cli-0.1.13-0hyneh5t.mjs";import{Lna as Vc}from"./cli-0.1.13-579v6j6d.mjs";import{Nna as Fe,Ona as ve,Rna as De,Sna as ee}from"./cli-0.1.13-tknwgkgp.mjs";import{Vna as E,Yna as Bs}from"./cli-0.1.13-bj67mp7n.mjs";var _t=E((S)=>{Object.defineProperty(S,"__esModule",{value:!0});S.resolveHttpHandlerRuntimeConfig=S.getHttpHandlerExtensionConfiguration=S.isValidHostname=S.HttpResponse=S.HttpRequest=S.Fields=S.Field=void 0;var N=ee();Object.defineProperty(S,"Field",{enumerable:!0,get:function(){return N.Field}});Object.defineProperty(S,"Fields",{enumerable:!0,get:function(){return N.Fields}});Object.defineProperty(S,"HttpRequest",{enumerable:!0,get:function(){return N.HttpRequest}});Object.defineProperty(S,"HttpResponse",{enumerable:!0,get:function(){return N.HttpResponse}});Object.defineProperty(S,"isValidHostname",{enumerable:!0,get:function(){return N.isValidHostname}});Object.defineProperty(S,"getHttpHandlerExtensionConfiguration",{enumerable:!0,get:function(){return N.getHttpHandlerExtensionConfiguration}});Object.defineProperty(S,"resolveHttpHandlerRuntimeConfig",{enumerable:!0,get:function(){return N.resolveHttpHandlerRuntimeConfig}})});var Ot=E((c)=>{Object.defineProperty(c,"__esModule",{value:!0});c.createAggregatedClient=c.convertMap=c._json=c.ServiceException=c.SENSITIVE_STRING=c.NoOpLogger=c.Command=c.Client=c.strictParseShort=c.strictParseLong=c.strictParseInt32=c.strictParseInt=c.strictParseFloat32=c.strictParseFloat=c.strictParseDouble=c.strictParseByte=c.splitHeader=c.splitEvery=c.quoteHeader=c.parseRfc7231DateTime=c.parseRfc3339DateTimeWithOffset=c.parseRfc3339DateTime=c.parseEpochTimestamp=c.parseBoolean=c.nv=c.logger=c.limitedParseFloat32=c.limitedParseFloat=c.limitedParseDouble=c.handleFloat=c.generateIdempotencyToken=c.expectUnion=c.expectString=c.expectShort=c.expectObject=c.expectNumber=c.expectNonNull=c.expectLong=c.expectInt32=c.expectInt=c.expectFloat32=c.expectByte=c.expectBoolean=c.dateToUtcString=c.copyDocumentWithTransform=c._parseRfc7231DateTime=c._parseRfc3339DateTimeWithOffset=c._parseEpochTimestamp=c.NumericValue=c.LazyJsonString=void 0;c.resolvedPath=c.extendedEncodeURIComponent=c.collectBody=c.withBaseException=c.throwDefaultError=c.take=c.serializeFloat=c.serializeDateTime=c.resolveDefaultRuntimeConfig=c.map=c.loadConfigsForDefaultMode=c.isSerializableHeaderValue=c.getValueFromTextNode=c.getDefaultExtensionConfiguration=c.getDefaultClientConfiguration=c.getArrayIfSingleItem=c.emitWarningIfUnsupportedVersion=c.decorateServiceException=void 0;var p=De();Object.defineProperty(c,"LazyJsonString",{enumerable:!0,get:function(){return p.LazyJsonString}});Object.defineProperty(c,"NumericValue",{enumerable:!0,get:function(){return p.NumericValue}});Object.defineProperty(c,"_parseEpochTimestamp",{enumerable:!0,get:function(){return p._parseEpochTimestamp}});Object.defineProperty(c,"_parseRfc3339DateTimeWithOffset",{enumerable:!0,get:function(){return p._parseRfc3339DateTimeWithOffset}});Object.defineProperty(c,"_parseRfc7231DateTime",{enumerable:!0,get:function(){return p._parseRfc7231DateTime}});Object.defineProperty(c,"copyDocumentWithTransform",{enumerable:!0,get:function(){return p.copyDocumentWithTransform}});Object.defineProperty(c,"dateToUtcString",{enumerable:!0,get:function(){return p.dateToUtcString}});Object.defineProperty(c,"expectBoolean",{enumerable:!0,get:function(){return p.expectBoolean}});Object.defineProperty(c,"expectByte",{enumerable:!0,get:function(){return p.expectByte}});Object.defineProperty(c,"expectFloat32",{enumerable:!0,get:function(){return p.expectFloat32}});Object.defineProperty(c,"expectInt",{enumerable:!0,get:function(){return p.expectInt}});Object.defineProperty(c,"expectInt32",{enumerable:!0,get:function(){return p.expectInt32}});Object.defineProperty(c,"expectLong",{enumerable:!0,get:function(){return p.expectLong}});Object.defineProperty(c,"expectNonNull",{enumerable:!0,get:function(){return p.expectNonNull}});Object.defineProperty(c,"expectNumber",{enumerable:!0,get:function(){return p.expectNumber}});Object.defineProperty(c,"expectObject",{enumerable:!0,get:function(){return p.expectObject}});Object.defineProperty(c,"expectShort",{enumerable:!0,get:function(){return p.expectShort}});Object.defineProperty(c,"expectString",{enumerable:!0,get:function(){return p.expectString}});Object.defineProperty(c,"expectUnion",{enumerable:!0,get:function(){return p.expectUnion}});Object.defineProperty(c,"generateIdempotencyToken",{enumerable:!0,get:function(){return p.generateIdempotencyToken}});Object.defineProperty(c,"handleFloat",{enumerable:!0,get:function(){return p.handleFloat}});Object.defineProperty(c,"limitedParseDouble",{enumerable:!0,get:function(){return p.limitedParseDouble}});Object.defineProperty(c,"limitedParseFloat",{enumerable:!0,get:function(){return p.limitedParseFloat}});Object.defineProperty(c,"limitedParseFloat32",{enumerable:!0,get:function(){return p.limitedParseFloat32}});Object.defineProperty(c,"logger",{enumerable:!0,get:function(){return p.logger}});Object.defineProperty(c,"nv",{enumerable:!0,get:function(){return p.nv}});Object.defineProperty(c,"parseBoolean",{enumerable:!0,get:function(){return p.parseBoolean}});Object.defineProperty(c,"parseEpochTimestamp",{enumerable:!0,get:function(){return p.parseEpochTimestamp}});Object.defineProperty(c,"parseRfc3339DateTime",{enumerable:!0,get:function(){return p.parseRfc3339DateTime}});Object.defineProperty(c,"parseRfc3339DateTimeWithOffset",{enumerable:!0,get:function(){return p.parseRfc3339DateTimeWithOffset}});Object.defineProperty(c,"parseRfc7231DateTime",{enumerable:!0,get:function(){return p.parseRfc7231DateTime}});Object.defineProperty(c,"quoteHeader",{enumerable:!0,get:function(){return p.quoteHeader}});Object.defineProperty(c,"splitEvery",{enumerable:!0,get:function(){return p.splitEvery}});Object.defineProperty(c,"splitHeader",{enumerable:!0,get:function(){return p.splitHeader}});Object.defineProperty(c,"strictParseByte",{enumerable:!0,get:function(){return p.strictParseByte}});Object.defineProperty(c,"strictParseDouble",{enumerable:!0,get:function(){return p.strictParseDouble}});Object.defineProperty(c,"strictParseFloat",{enumerable:!0,get:function(){return p.strictParseFloat}});Object.defineProperty(c,"strictParseFloat32",{enumerable:!0,get:function(){return p.strictParseFloat32}});Object.defineProperty(c,"strictParseInt",{enumerable:!0,get:function(){return p.strictParseInt}});Object.defineProperty(c,"strictParseInt32",{enumerable:!0,get:function(){return p.strictParseInt32}});Object.defineProperty(c,"strictParseLong",{enumerable:!0,get:function(){return p.strictParseLong}});Object.defineProperty(c,"strictParseShort",{enumerable:!0,get:function(){return p.strictParseShort}});var A=ve();Object.defineProperty(c,"Client",{enumerable:!0,get:function(){return A.Client}});Object.defineProperty(c,"Command",{enumerable:!0,get:function(){return A.Command}});Object.defineProperty(c,"NoOpLogger",{enumerable:!0,get:function(){return A.NoOpLogger}});Object.defineProperty(c,"SENSITIVE_STRING",{enumerable:!0,get:function(){return A.SENSITIVE_STRING}});Object.defineProperty(c,"ServiceException",{enumerable:!0,get:function(){return A.ServiceException}});Object.defineProperty(c,"_json",{enumerable:!0,get:function(){return A._json}});Object.defineProperty(c,"convertMap",{enumerable:!0,get:function(){return A.convertMap}});Object.defineProperty(c,"createAggregatedClient",{enumerable:!0,get:function(){return A.createAggregatedClient}});Object.defineProperty(c,"decorateServiceException",{enumerable:!0,get:function(){return A.decorateServiceException}});Object.defineProperty(c,"emitWarningIfUnsupportedVersion",{enumerable:!0,get:function(){return A.emitWarningIfUnsupportedVersion}});Object.defineProperty(c,"getArrayIfSingleItem",{enumerable:!0,get:function(){return A.getArrayIfSingleItem}});Object.defineProperty(c,"getDefaultClientConfiguration",{enumerable:!0,get:function(){return A.getDefaultClientConfiguration}});Object.defineProperty(c,"getDefaultExtensionConfiguration",{enumerable:!0,get:function(){return A.getDefaultExtensionConfiguration}});Object.defineProperty(c,"getValueFromTextNode",{enumerable:!0,get:function(){return A.getValueFromTextNode}});Object.defineProperty(c,"isSerializableHeaderValue",{enumerable:!0,get:function(){return A.isSerializableHeaderValue}});Object.defineProperty(c,"loadConfigsForDefaultMode",{enumerable:!0,get:function(){return A.loadConfigsForDefaultMode}});Object.defineProperty(c,"map",{enumerable:!0,get:function(){return A.map}});Object.defineProperty(c,"resolveDefaultRuntimeConfig",{enumerable:!0,get:function(){return A.resolveDefaultRuntimeConfig}});Object.defineProperty(c,"serializeDateTime",{enumerable:!0,get:function(){return A.serializeDateTime}});Object.defineProperty(c,"serializeFloat",{enumerable:!0,get:function(){return A.serializeFloat}});Object.defineProperty(c,"take",{enumerable:!0,get:function(){return A.take}});Object.defineProperty(c,"throwDefaultError",{enumerable:!0,get:function(){return A.throwDefaultError}});Object.defineProperty(c,"withBaseException",{enumerable:!0,get:function(){return A.withBaseException}});var Ie=ee();Object.defineProperty(c,"collectBody",{enumerable:!0,get:function(){return Ie.collectBody}});Object.defineProperty(c,"extendedEncodeURIComponent",{enumerable:!0,get:function(){return Ie.extendedEncodeURIComponent}});Object.defineProperty(c,"resolvedPath",{enumerable:!0,get:function(){return Ie.resolvedPath}})});var xt=E((Nt)=>{Object.defineProperty(Nt,"__esModule",{value:!0});Nt.toStream=Ys;var Xs=Bs("node:stream");function Ys(e){return Xs.Readable.from(Buffer.from(e))}});var jt=E((ro)=>{var Js=(e)=>typeof e==="string"&&e.indexOf("arn:")===0&&e.split(":").length>=6,eo=(e)=>{let t=e.split(":");if(t.length<6||t[0]!=="arn")throw Error("Malformed ARN");let[,r,n,s,o,...a]=t;return{partition:r,service:n,region:s,accountId:o,resource:a.join(":")}},to=(e)=>{let{partition:t="aws",service:r,region:n,accountId:s,resource:o}=e;if([r,n,s,o].some((a)=>typeof a!=="string"))throw Error("Input ARN object is invalid");return`arn:${t}:${r}:${n}:${s}:${o}`};ro.build=to;ro.parse=eo;ro.validate=Js});var or=E((ho)=>{var v=De(),$t=ve(),W=ee();class Mt{format(e){let t=[];for(let s of Object.keys(e)){let o=v.fromUtf8(s);t.push(Uint8Array.from([o.byteLength]),o,this.formatHeaderValue(e[s]))}let r=new Uint8Array(t.reduce((s,o)=>s+o.byteLength,0)),n=0;for(let s of t)r.set(s,n),n+=s.byteLength;return r}formatHeaderValue(e){switch(e.type){case"boolean":return Uint8Array.from([e.value?0:1]);case"byte":return Uint8Array.from([2,e.value]);case"short":let t=new DataView(new ArrayBuffer(3));return t.setUint8(0,3),t.setInt16(1,e.value,!1),new Uint8Array(t.buffer);case"integer":let r=new DataView(new ArrayBuffer(5));return r.setUint8(0,4),r.setInt32(1,e.value,!1),new Uint8Array(r.buffer);case"long":let n=new Uint8Array(9);return n[0]=5,n.set(e.value.bytes,1),n;case"binary":let s=new DataView(new ArrayBuffer(3+e.value.byteLength));s.setUint8(0,6),s.setUint16(1,e.value.byteLength,!1);let o=new Uint8Array(s.buffer);return o.set(e.value,3),o;case"string":let a=v.fromUtf8(e.value),u=new DataView(new ArrayBuffer(3+a.byteLength));u.setUint8(0,7),u.setUint16(1,a.byteLength,!1);let i=new Uint8Array(u.buffer);return i.set(a,3),i;case"timestamp":let d=new Uint8Array(9);return d[0]=8,d.set(_e.fromNumber(e.value.valueOf()).bytes,1),d;case"uuid":if(!ao.test(e.value))throw Error(`Invalid UUID received: ${e.value}`);let l=new Uint8Array(17);return l[0]=9,l.set(v.fromHex(e.value.replace(/\-/g,"")),1),l}}}var Ht;(function(e){e[e.boolTrue=0]="boolTrue",e[e.boolFalse=1]="boolFalse",e[e.byte=2]="byte",e[e.short=3]="short",e[e.integer=4]="integer",e[e.long=5]="long",e[e.byteArray=6]="byteArray",e[e.string=7]="string",e[e.timestamp=8]="timestamp",e[e.uuid=9]="uuid"})(Ht||(Ht={}));var ao=/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;class _e{bytes;constructor(e){if(this.bytes=e,e.byteLength!==8)throw Error("Int64 buffers must be exactly 8 bytes")}static fromNumber(e){if(e>9223372036854776000||e<-9223372036854776000)throw Error(`${e} is too large (or, if negative, too small) to represent as an Int64`);let t=new Uint8Array(8);for(let r=7,n=Math.abs(Math.round(e));r>-1&&n>0;r--,n/=256)t[r]=n;if(e<0)Ct(t);return new _e(t)}valueOf(){let e=this.bytes.slice(0),t=e[0]&128;if(t)Ct(e);return parseInt(v.toHex(e),16)*(t?-1:1)}toString(){return String(this.valueOf())}}function Ct(e){for(let t=0;t<8;t++)e[t]^=255;for(let t=7;t>-1;t--)if(e[t]++,e[t]!==0)break}var Ft="X-Amz-Algorithm",Lt="X-Amz-Credential",Oe="X-Amz-Date",Gt="X-Amz-SignedHeaders",Wt="X-Amz-Expires",Ne="X-Amz-Signature",xe="X-Amz-Security-Token",io="X-Amz-Region-Set",je="authorization",$e=Oe.toLowerCase(),Kt="date",zt=[je,$e,Kt],qt=Ne.toLowerCase(),oe="x-amz-content-sha256",Vt=xe.toLowerCase(),uo="host",kt={authorization:!0,"cache-control":!0,connection:!0,expect:!0,from:!0,"keep-alive":!0,"max-forwards":!0,pragma:!0,referer:!0,te:!0,trailer:!0,"transfer-encoding":!0,upgrade:!0,"user-agent":!0,"x-amzn-trace-id":!0},Qt=/^proxy-/,Bt=/^sec-/,co=[/^proxy-/i,/^sec-/i],te="AWS4-HMAC-SHA256",lo="AWS4-ECDSA-P256-SHA256",Xt="AWS4-HMAC-SHA256-PAYLOAD",Yt="UNSIGNED-PAYLOAD",Zt=50,He="aws4_request",Jt=604800,er=({query:e={}})=>{let t=[],r={};for(let n of Object.keys(e)){if(n.toLowerCase()===qt)continue;let s=W.escapeUri(n);t.push(s);let o=e[n];if(typeof o==="string")r[s]=`${s}=${W.escapeUri(o)}`;else if(Array.isArray(o))r[s]=o.slice(0).reduce((a,u)=>a.concat([`${s}=${W.escapeUri(u)}`]),[]).sort().join("&")}return t.sort().map((n)=>r[n]).filter((n)=>n).join("&")},po=(e)=>fo(e).toISOString().replace(/\.\d{3}Z$/,"Z"),fo=(e)=>{if(typeof e==="number")return new Date(e*1000);if(typeof e==="string"){if(Number(e))return new Date(Number(e)*1000);return new Date(e)}return e};class Ce{service;regionProvider;credentialProvider;sha256;uriEscapePath;applyChecksum;constructor({applyChecksum:e,credentials:t,region:r,service:n,sha256:s,uriEscapePath:o=!0}){this.service=n,this.sha256=s,this.uriEscapePath=o,this.applyChecksum=typeof e==="boolean"?e:!0,this.regionProvider=$t.normalizeProvider(r),this.credentialProvider=$t.normalizeProvider(t)}createCanonicalRequest(e,t,r){let n=Object.keys(t).sort();return`${e.method}
+${this.getCanonicalPath(e)}
+${er(e)}
+${n.map((s)=>`${s}:${t[s]}`).join(`
+`)}
+
+${n.join(";")}
+${r}`}async createStringToSign(e,t,r,n){let s=new this.sha256;s.update(v.toUint8Array(r));let o=await s.digest();return`${n}
+${e}
+${t}
+${v.toHex(o)}`}getCanonicalPath({path:e}){if(this.uriEscapePath){let t=[];for(let s of e.split("/")){if(s?.length===0)continue;if(s===".")continue;if(s==="..")t.pop();else t.push(s)}let r=`${e?.startsWith("/")?"/":""}${t.join("/")}${t.length>0&&e?.endsWith("/")?"/":""}`;return W.escapeUri(r).replace(/%2F/g,"/")}return e}validateResolvedCredentials(e){if(typeof e!=="object"||typeof e.accessKeyId!=="string"||typeof e.secretAccessKey!=="string")throw Error("Resolved credential object is not valid")}formatDate(e){let t=po(e).replace(/[\-:]/g,"");return{longDate:t,shortDate:t.slice(0,8)}}getCanonicalHeaderList(e){return Object.keys(e).sort().join(";")}}var G={},re=[],ne=(e,t,r)=>`${e}/${t}/${r}/${He}`,tr=async(e,t,r,n,s)=>{let o=await Ut(e,t.secretAccessKey,t.accessKeyId),a=`${r}:${n}:${s}:${v.toHex(o)}:${t.sessionToken}`;if(a in G)return G[a];re.push(a);while(re.length>Zt)delete G[re.shift()];let u=`AWS4${t.secretAccessKey}`;for(let i of[r,n,s,He])u=await Ut(e,u,i);return G[a]=u},go=()=>{re.length=0,Object.keys(G).forEach((e)=>{delete G[e]})},Ut=(e,t,r)=>{let n=new e(t);return n.update(v.toUint8Array(r)),n.digest()},Te=({headers:e},t,r)=>{let n={};for(let s of Object.keys(e).sort()){if(e[s]==null)continue;let o=s.toLowerCase();if(o in kt||t?.has(o)||Qt.test(o)||Bt.test(o)){if(!r||r&&!r.has(o))continue}n[o]=e[s].trim().replace(/\s+/g," ")}return n},se=async({headers:e,body:t},r)=>{for(let n of Object.keys(e))if(n.toLowerCase()===oe)return e[n];if(t==null)return"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855";else if(typeof t==="string"||ArrayBuffer.isView(t)||v.isArrayBuffer(t)){let n=new r;return n.update(v.toUint8Array(t)),v.toHex(await n.digest())}return Yt},rr=(e,t)=>{e=e.toLowerCase();for(let r of Object.keys(t))if(e===r.toLowerCase())return!0;return!1},nr=(e,t={})=>{let{headers:r,query:n={}}=W.HttpRequest.clone(e);for(let s of Object.keys(r)){let o=s.toLowerCase();if(o.slice(0,6)==="x-amz-"&&!t.unhoistableHeaders?.has(o)||t.hoistableHeaders?.has(o))n[s]=r[s],delete r[s]}return{...e,headers:r,query:n}},Se=(e)=>{e=W.HttpRequest.clone(e);for(let t of Object.keys(e.headers))if(zt.indexOf(t.toLowerCase())>-1)delete e.headers[t];return e};class sr extends Ce{headerFormatter=new Mt;constructor({applyChecksum:e,credentials:t,region:r,service:n,sha256:s,uriEscapePath:o=!0}){super({applyChecksum:e,credentials:t,region:r,service:n,sha256:s,uriEscapePath:o})}async presign(e,t={}){let{signingDate:r=new Date,expiresIn:n=3600,unsignableHeaders:s,unhoistableHeaders:o,signableHeaders:a,hoistableHeaders:u,signingRegion:i,signingService:d}=t,l=await this.credentialProvider();this.validateResolvedCredentials(l);let b=i??await this.regionProvider(),{longDate:y,shortDate:h}=this.formatDate(r);if(n>Jt)return Promise.reject("Signature version 4 presigned URLs must have an expiration date less than one week in the future");let R=ne(h,b,d??this.service),g=nr(Se(e),{unhoistableHeaders:o,hoistableHeaders:u});if(l.sessionToken)g.query[xe]=l.sessionToken;g.query[Ft]=te,g.query[Lt]=`${l.accessKeyId}/${R}`,g.query[Oe]=y,g.query[Wt]=n.toString(10);let T=Te(g,s,a);return g.query[Gt]=this.getCanonicalHeaderList(T),g.query[Ne]=await this.getSignature(y,R,this.getSigningKey(l,b,h,d),this.createCanonicalRequest(g,T,await se(e,this.sha256))),g}async sign(e,t){if(typeof e==="string")return this.signString(e,t);else if(e.headers&&e.payload)return this.signEvent(e,t);else if(e.message)return this.signMessage(e,t);else return this.signRequest(e,t)}async signEvent({headers:e,payload:t},{signingDate:r=new Date,priorSignature:n,signingRegion:s,signingService:o,eventStreamCredentials:a}){let u=s??await this.regionProvider(),{shortDate:i,longDate:d}=this.formatDate(r),l=ne(i,u,o??this.service),b=await se({headers:{},body:t},this.sha256),y=new this.sha256;y.update(e);let h=v.toHex(await y.digest()),R=[Xt,d,l,n,h,b].join(`
+`);return this.signString(R,{signingDate:r,signingRegion:u,signingService:o,eventStreamCredentials:a})}async signMessage(e,{signingDate:t=new Date,signingRegion:r,signingService:n,eventStreamCredentials:s}){return this.signEvent({headers:this.headerFormatter.format(e.message.headers),payload:e.message.body},{signingDate:t,signingRegion:r,signingService:n,priorSignature:e.priorSignature,eventStreamCredentials:s}).then((a)=>{return{message:e.message,signature:a}})}async signString(e,{signingDate:t=new Date,signingRegion:r,signingService:n,eventStreamCredentials:s}={}){let o=s??await this.credentialProvider();this.validateResolvedCredentials(o);let a=r??await this.regionProvider(),{shortDate:u}=this.formatDate(t),i=new this.sha256(await this.getSigningKey(o,a,u,n));return i.update(v.toUint8Array(e)),v.toHex(await i.digest())}async signRequest(e,{signingDate:t=new Date,signableHeaders:r,unsignableHeaders:n,signingRegion:s,signingService:o}={}){let a=await this.credentialProvider();this.validateResolvedCredentials(a);let u=s??await this.regionProvider(),i=Se(e),{longDate:d,shortDate:l}=this.formatDate(t),b=ne(l,u,o??this.service);if(i.headers[$e]=d,a.sessionToken)i.headers[Vt]=a.sessionToken;let y=await se(i,this.sha256);if(!rr(oe,i.headers)&&this.applyChecksum)i.headers[oe]=y;let h=Te(i,n,r),R=await this.getSignature(d,b,this.getSigningKey(a,u,l,o),this.createCanonicalRequest(i,h,y));return i.headers[je]=`${te} Credential=${a.accessKeyId}/${b}, SignedHeaders=${this.getCanonicalHeaderList(h)}, Signature=${R}`,i}async getSignature(e,t,r,n){let s=await this.createStringToSign(e,t,n,te),o=new this.sha256(await r);return o.update(v.toUint8Array(s)),v.toHex(await o.digest())}getSigningKey(e,t,r,n){return tr(this.sha256,e,r,t,n||this.service)}}var yo={SignatureV4a:null};ho.ALGORITHM_IDENTIFIER=te;ho.ALGORITHM_IDENTIFIER_V4A=lo;ho.ALGORITHM_QUERY_PARAM=Ft;ho.ALWAYS_UNSIGNABLE_HEADERS=kt;ho.AMZ_DATE_HEADER=$e;ho.AMZ_DATE_QUERY_PARAM=Oe;ho.AUTH_HEADER=je;ho.CREDENTIAL_QUERY_PARAM=Lt;ho.DATE_HEADER=Kt;ho.EVENT_ALGORITHM_IDENTIFIER=Xt;ho.EXPIRES_QUERY_PARAM=Wt;ho.GENERATED_HEADERS=zt;ho.HOST_HEADER=uo;ho.KEY_TYPE_IDENTIFIER=He;ho.MAX_CACHE_SIZE=Zt;ho.MAX_PRESIGNED_TTL=Jt;ho.PROXY_HEADER_PATTERN=Qt;ho.REGION_SET_PARAM=io;ho.SEC_HEADER_PATTERN=Bt;ho.SHA256_HEADER=oe;ho.SIGNATURE_HEADER=qt;ho.SIGNATURE_QUERY_PARAM=Ne;ho.SIGNED_HEADERS_QUERY_PARAM=Gt;ho.SignatureV4=sr;ho.SignatureV4Base=Ce;ho.TOKEN_HEADER=Vt;ho.TOKEN_QUERY_PARAM=xe;ho.UNSIGNABLE_PATTERNS=co;ho.UNSIGNED_PAYLOAD=Yt;ho.clearCredentialCache=go;ho.createScope=ne;ho.getCanonicalHeaders=Te;ho.getCanonicalQuery=er;ho.getPayloadHash=se;ho.getSigningKey=tr;ho.hasHeader=rr;ho.moveHeadersToQuery=nr;ho.prepareRequest=Se;ho.signatureV4aContainer=yo});var _r=E(($a)=>{var X=_t(),lr=Ot(),na=xt(),sa=jt(),oa=cr(),aa=Fe(),ia=or(),ae=ra(),ua=Le(),dr=ie(),ca=ur(),la="content-length",da="x-amz-decoded-content-length";function pr(){return(e,t)=>async(r)=>{let{request:n}=r;if(X.HttpRequest.isInstance(n)){if(!(la in n.headers)&&!(da in n.headers))if(typeof t?.logger?.warn==="function"&&!(t.logger instanceof lr.NoOpLogger))t.logger.warn("Are you using a Stream of unknown length as the Body of a PutObject request? Consider using Upload instead from @aws-sdk/lib-storage.");else console.warn("Are you using a Stream of unknown length as the Body of a PutObject request? Consider using Upload instead from @aws-sdk/lib-storage.")}return e({...r})}}var fr={step:"finalizeRequest",tags:["CHECK_CONTENT_LENGTH_HEADER"],name:"getCheckContentLengthHeaderPlugin",override:!0},pa=(e)=>({applyToStack:(t)=>{t.add(pr(),fr)}}),gr=(e)=>{return(t,r)=>async(n)=>{let s=await e.region(),o=e.region,a=()=>{};if(r.__s3RegionRedirect)Object.defineProperty(e,"region",{writable:!1,value:async()=>{return r.__s3RegionRedirect}}),a=()=>Object.defineProperty(e,"region",{writable:!0,value:o});try{let u=await t(n);if(r.__s3RegionRedirect){a();let i=await e.region();if(s!==i)throw Error("Region was not restored following S3 region redirect.")}return u}catch(u){throw a(),u}}},yr={tags:["REGION_REDIRECT","S3"],name:"regionRedirectEndpointMiddleware",override:!0,relation:"before",toMiddleware:"endpointV2Middleware"};function hr(e){return(t,r)=>async(n)=>{try{return await t(n)}catch(s){if(e.followRegionRedirects){let o=s?.$metadata?.httpStatusCode,a=r.commandName==="HeadBucketCommand",u=s?.$response?.headers?.["x-amz-bucket-region"];if(u){if(o===301||o===400&&(s?.name==="IllegalLocationConstraintException"||a)){try{let i=u;r.logger?.debug(`Redirecting from ${await e.region()} to ${i}`),r.__s3RegionRedirect=i}catch(i){throw Error("Region redirect failed: "+i)}return t(n)}}}throw s}}}var br={step:"initialize",tags:["REGION_REDIRECT","S3"],name:"regionRedirectMiddleware",override:!0},fa=(e)=>({applyToStack:(t)=>{t.add(hr(e),br),t.addRelativeTo(gr(e),yr)}}),mr=(e)=>{return(t,r)=>async(n)=>{let s=await t(n),{response:o}=s;if(X.HttpResponse.isInstance(o)){if(o.headers.expires){o.headers.expiresstring=o.headers.expires;try{lr.parseRfc7231DateTime(o.headers.expires)}catch(a){r.logger?.warn(`AWS SDK Warning for ${r.clientName}::${r.commandName} response parsing (${o.headers.expires}): ${a}`),delete o.headers.expires}}}return s}},Ar={tags:["S3"],name:"s3ExpiresMiddleware",override:!0,relation:"after",toMiddleware:"deserializerMiddleware"},ga=(e)=>({applyToStack:(t)=>{t.addRelativeTo(mr(),Ar)}});class ue{data;lastPurgeTime=Date.now();static EXPIRED_CREDENTIAL_PURGE_INTERVAL_MS=30000;constructor(e={}){this.data=e}get(e){let t=this.data[e];if(!t)return;return t}set(e,t){return this.data[e]=t,t}delete(e){delete this.data[e]}async purgeExpired(){let e=Date.now();if(this.lastPurgeTime+ue.EXPIRED_CREDENTIAL_PURGE_INTERVAL_MS>e)return;for(let t in this.data){let r=this.data[t];if(!r.isRefreshing){let n=await r.identity;if(n.expiration){if(n.expiration.getTime()<e)delete this.data[t]}}}}}class B{_identity;isRefreshing;accessed;constructor(e,t=!1,r=Date.now()){this._identity=e,this.isRefreshing=t,this.accessed=r}get identity(){return this.accessed=Date.now(),this._identity}}class ce{createSessionFn;cache;static REFRESH_WINDOW_MS=60000;constructor(e,t=new ue){this.createSessionFn=e,this.cache=t}async getS3ExpressIdentity(e,t){let r=t.Bucket,{cache:n}=this,s=n.get(r);if(s)return s.identity.then((o)=>{if((o.expiration?.getTime()??0)<Date.now())return n.set(r,new B(this.getIdentity(r))).identity;if((o.expiration?.getTime()??0)<Date.now()+ce.REFRESH_WINDOW_MS&&!s.isRefreshing)s.isRefreshing=!0,this.getIdentity(r).then((i)=>{n.set(r,new B(Promise.resolve(i)))});return o});return n.set(r,new B(this.getIdentity(r))).identity}async getIdentity(e){await this.cache.purgeExpired().catch((n)=>{console.warn(`Error while clearing expired entries in S3ExpressIdentityCache: 
+`+n)});let t=await this.createSessionFn(e);if(!t.Credentials?.AccessKeyId||!t.Credentials?.SecretAccessKey)throw Error("s3#createSession response credential missing AccessKeyId or SecretAccessKey.");return{accessKeyId:t.Credentials.AccessKeyId,secretAccessKey:t.Credentials.SecretAccessKey,sessionToken:t.Credentials.SessionToken,expiration:t.Credentials.Expiration?new Date(t.Credentials.Expiration):void 0}}}var ya="Directory",ha="S3Express",ba="sigv4-s3express",Ue="X-Amz-S3session-Token",Me=Ue.toLowerCase(),ma="AWS_S3_DISABLE_EXPRESS_SESSION_AUTH",Aa="s3_disable_express_session_auth",Ea={environmentVariableSelector:(e)=>ae.booleanSelector(e,ma,ae.SelectorType.ENV),configFileSelector:(e)=>ae.booleanSelector(e,Aa,ae.SelectorType.CONFIG),default:!1};class Er extends ia.SignatureV4{async signWithCredentials(e,t,r){let n=ar(t);e.headers[Me]=t.sessionToken;let s=this;return ir(s,n),s.signRequest(e,r??{})}async presignWithCredentials(e,t,r){let n=ar(t);return delete e.headers[Me],e.headers[Ue]=t.sessionToken,e.query=e.query??{},e.query[Ue]=t.sessionToken,ir(this,n),this.presign(e,r)}}function ar(e){return{accessKeyId:e.accessKeyId,secretAccessKey:e.secretAccessKey,expiration:e.expiration}}function ir(e,t){let r=setTimeout(()=>{throw Error("SignatureV4S3Express credential override was created but not called.")},10),n=e.credentialProvider,s=()=>{return clearTimeout(r),e.credentialProvider=n,Promise.resolve(t)};e.credentialProvider=s}var Rr=(e)=>{return(t,r)=>async(n)=>{if(r.endpointV2){let s=r.endpointV2,o=s.properties?.authSchemes?.[0]?.name===ba;if(s.properties?.backend===ha||s.properties?.bucketType===ya)ua.setFeature(r,"S3_EXPRESS_BUCKET","J"),r.isS3ExpressBucket=!0;if(o){let u=n.input.Bucket;if(u){let i=await e.s3ExpressIdentityProvider.getS3ExpressIdentity(await e.credentials(),{Bucket:u});if(r.s3ExpressIdentity=i,X.HttpRequest.isInstance(n.request)&&i.sessionToken)n.request.headers[Me]=i.sessionToken}}}return t(n)}},wr={name:"s3ExpressMiddleware",step:"build",tags:["S3","S3_EXPRESS"],override:!0},Ra=(e)=>({applyToStack:(t)=>{t.add(Rr(e),wr)}}),wa=async(e,t,r,n)=>{let s=await n.signWithCredentials(r,e,{});if(s.headers["X-Amz-Security-Token"]||s.headers["x-amz-security-token"])throw Error("X-Amz-Security-Token must not be set for s3-express requests.");return s},Pa=(e)=>(t)=>{throw t},va=(e,t)=>{},Da=dr.httpSigningMiddlewareOptions,Pr=(e)=>(t,r)=>async(n)=>{if(!X.HttpRequest.isInstance(n.request))return t(n);let o=ca.getSmithyContext(r).selectedHttpAuthScheme;if(!o)throw Error("No HttpAuthScheme was selected: unable to sign request");let{httpAuthOption:{signingProperties:a={}},identity:u,signer:i}=o,d;if(r.s3ExpressIdentity)d=await wa(r.s3ExpressIdentity,a,n.request,await e.signer());else d=await i.sign(n.request,u,a);let l=await t({...n,request:d}).catch((i.errorHandler||Pa)(a));return(i.successHandler||va)(l.response,a),l},Ia=(e)=>({applyToStack:(t)=>{t.addRelativeTo(Pr(e),dr.httpSigningMiddlewareOptions)}}),Ta=(e,{session:t})=>{let[r,n]=t,{forcePathStyle:s,useAccelerateEndpoint:o,disableMultiregionAccessPoints:a,followRegionRedirects:u,s3ExpressIdentityProvider:i,bucketEndpoint:d,expectContinueHeader:l}=e;return Object.assign(e,{forcePathStyle:s??!1,useAccelerateEndpoint:o??!1,disableMultiregionAccessPoints:a??!1,followRegionRedirects:u??!1,s3ExpressIdentityProvider:i??new ce(async(b)=>r().send(new n({Bucket:b}))),bucketEndpoint:d??!1,expectContinueHeader:l??2097152})},Sa={CopyObjectCommand:!0,UploadPartCopyCommand:!0,CompleteMultipartUploadCommand:!0},vr=(e)=>(t,r)=>async(n)=>{let s=await t(n),{response:o}=s;if(!X.HttpResponse.isInstance(o))return s;let{statusCode:a,body:u}=o;if(a<200||a>=300)return s;let i=await _a(u,e);if(o.body=na.toStream(i),i.length===0&&Sa[r.commandName]){let l=Error("S3 aborted request");throw l.$metadata={httpStatusCode:503},l.name="InternalError",l}let d=e.utf8Encoder(i.subarray(i.length-16));if(d&&d.endsWith("</Error>"))o.statusCode=503;return s},_a=(e=new Uint8Array,t)=>{if(e instanceof Uint8Array)return Promise.resolve(e);return t.streamCollector(e)||Promise.resolve(new Uint8Array)},Dr={relation:"after",toMiddleware:"deserializerMiddleware",tags:["THROW_200_EXCEPTIONS","S3"],name:"throw200ExceptionsMiddleware",override:!0},Oa=(e)=>({applyToStack:(t)=>{t.addRelativeTo(vr(e),Dr)}});function Na(e){return(t,r)=>async(n)=>{if(e.bucketEndpoint){let s=r.endpointV2;if(s){let o=n.input.Bucket;if(typeof o==="string")try{let a=new URL(o);r.endpointV2={...s,url:a}}catch(a){let u=`@aws-sdk/middleware-sdk-s3: bucketEndpoint=true was set but Bucket=${o} could not be parsed as URL.`;if(r.logger?.constructor?.name==="NoOpLogger")console.warn(u);else r.logger?.warn?.(u);throw a}}}return t(n)}}var xa={name:"bucketEndpointMiddleware",override:!0,relation:"after",toMiddleware:"endpointV2Middleware"};function Ir({bucketEndpoint:e}){return(t)=>async(r)=>{let{input:{Bucket:n}}=r;if(!e&&typeof n==="string"&&!sa.validate(n)&&n.indexOf("/")>=0){let s=Error(`Bucket name shouldn't contain '/', received '${n}'`);throw s.name="InvalidBucketName",s}return t({...r})}}var Tr={step:"initialize",tags:["VALIDATE_BUCKET_NAME"],name:"validateBucketNameMiddleware",override:!0},ja=(e)=>({applyToStack:(t)=>{t.add(Ir(e),Tr),t.addRelativeTo(Na(e),xa)}});class Sr extends oa.AwsRestXmlProtocol{async serializeRequest(e,t,r){let n=await super.serializeRequest(e,t,r),s=aa.NormalizedSchema.of(e.input),o=s.getSchema(),a=0,u=o[6]??0;if(t&&typeof t==="object")for(let[i,d]of s.structIterator()){if(++a>u)break;if(i==="Bucket"){if(!t.Bucket&&d.getMergedTraits().httpLabel)throw Error("No value provided for input HTTP label: Bucket.");break}}return n}}$a.NODE_DISABLE_S3_EXPRESS_SESSION_AUTH_OPTIONS=Ea;$a.S3ExpressIdentityCache=ue;$a.S3ExpressIdentityCacheEntry=B;$a.S3ExpressIdentityProviderImpl=ce;$a.S3RestXmlProtocol=Sr;$a.SignatureV4S3Express=Er;$a.checkContentLengthHeader=pr;$a.checkContentLengthHeaderMiddlewareOptions=fr;$a.getCheckContentLengthHeaderPlugin=pa;$a.getRegionRedirectMiddlewarePlugin=fa;$a.getS3ExpiresMiddlewarePlugin=ga;$a.getS3ExpressHttpSigningPlugin=Ia;$a.getS3ExpressPlugin=Ra;$a.getThrow200ExceptionsPlugin=Oa;$a.getValidateBucketNamePlugin=ja;$a.regionRedirectEndpointMiddleware=gr;$a.regionRedirectEndpointMiddlewareOptions=yr;$a.regionRedirectMiddleware=hr;$a.regionRedirectMiddlewareOptions=br;$a.resolveS3Config=Ta;$a.s3ExpiresMiddleware=mr;$a.s3ExpiresMiddlewareOptions=Ar;$a.s3ExpressHttpSigningMiddleware=Pr;$a.s3ExpressHttpSigningMiddlewareOptions=Da;$a.s3ExpressMiddleware=Rr;$a.s3ExpressMiddlewareOptions=wr;$a.throw200ExceptionsMiddleware=vr;$a.throw200ExceptionsMiddlewareOptions=Dr;$a.validateBucketNameMiddleware=Ir;$a.validateBucketNameMiddlewareOptions=Tr});var tn=E((Ei)=>{var D=De(),Or=ve(),z=ee();class $r{format(e){let t=[];for(let s of Object.keys(e)){let o=D.fromUtf8(s);t.push(Uint8Array.from([o.byteLength]),o,this.formatHeaderValue(e[s]))}let r=new Uint8Array(t.reduce((s,o)=>s+o.byteLength,0)),n=0;for(let s of t)r.set(s,n),n+=s.byteLength;return r}formatHeaderValue(e){switch(e.type){case"boolean":return Uint8Array.from([e.value?0:1]);case"byte":return Uint8Array.from([2,e.value]);case"short":let t=new DataView(new ArrayBuffer(3));return t.setUint8(0,3),t.setInt16(1,e.value,!1),new Uint8Array(t.buffer);case"integer":let r=new DataView(new ArrayBuffer(5));return r.setUint8(0,4),r.setInt32(1,e.value,!1),new Uint8Array(r.buffer);case"long":let n=new Uint8Array(9);return n[0]=5,n.set(e.value.bytes,1),n;case"binary":let s=new DataView(new ArrayBuffer(3+e.value.byteLength));s.setUint8(0,6),s.setUint16(1,e.value.byteLength,!1);let o=new Uint8Array(s.buffer);return o.set(e.value,3),o;case"string":let a=D.fromUtf8(e.value),u=new DataView(new ArrayBuffer(3+a.byteLength));u.setUint8(0,7),u.setUint16(1,a.byteLength,!1);let i=new Uint8Array(u.buffer);return i.set(a,3),i;case"timestamp":let d=new Uint8Array(9);return d[0]=8,d.set(Ke.fromNumber(e.value.valueOf()).bytes,1),d;case"uuid":if(!di.test(e.value))throw Error(`Invalid UUID received: ${e.value}`);let l=new Uint8Array(17);return l[0]=9,l.set(D.fromHex(e.value.replace(/\-/g,"")),1),l}}}var Nr;(function(e){e[e.boolTrue=0]="boolTrue",e[e.boolFalse=1]="boolFalse",e[e.byte=2]="byte",e[e.short=3]="short",e[e.integer=4]="integer",e[e.long=5]="long",e[e.byteArray=6]="byteArray",e[e.string=7]="string",e[e.timestamp=8]="timestamp",e[e.uuid=9]="uuid"})(Nr||(Nr={}));var di=/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;class Ke{bytes;constructor(e){if(this.bytes=e,e.byteLength!==8)throw Error("Int64 buffers must be exactly 8 bytes")}static fromNumber(e){if(e>9223372036854776000||e<-9223372036854776000)throw Error(`${e} is too large (or, if negative, too small) to represent as an Int64`);let t=new Uint8Array(8);for(let r=7,n=Math.abs(Math.round(e));r>-1&&n>0;r--,n/=256)t[r]=n;if(e<0)xr(t);return new Ke(t)}valueOf(){let e=this.bytes.slice(0),t=e[0]&128;if(t)xr(e);return parseInt(D.toHex(e),16)*(t?-1:1)}toString(){return String(this.valueOf())}}function xr(e){for(let t=0;t<8;t++)e[t]^=255;for(let t=7;t>-1;t--)if(e[t]++,e[t]!==0)break}var Hr="X-Amz-Algorithm",Cr="X-Amz-Credential",ze="X-Amz-Date",Ur="X-Amz-SignedHeaders",Mr="X-Amz-Expires",qe="X-Amz-Signature",Ve="X-Amz-Security-Token",pi="X-Amz-Region-Set",ke="authorization",Qe=ze.toLowerCase(),Fr="date",Lr=[ke,Qe,Fr],Gr=qe.toLowerCase(),ge="x-amz-content-sha256",Wr=Ve.toLowerCase(),fi="host",Kr={authorization:!0,"cache-control":!0,connection:!0,expect:!0,from:!0,"keep-alive":!0,"max-forwards":!0,pragma:!0,referer:!0,te:!0,trailer:!0,"transfer-encoding":!0,upgrade:!0,"user-agent":!0,"x-amzn-trace-id":!0},zr=/^proxy-/,qr=/^sec-/,gi=[/^proxy-/i,/^sec-/i],le="AWS4-HMAC-SHA256",yi="AWS4-ECDSA-P256-SHA256",Vr="AWS4-HMAC-SHA256-PAYLOAD",kr="UNSIGNED-PAYLOAD",Qr=50,Be="aws4_request",Br=604800,Xr=({query:e={}})=>{let t=[],r={};for(let n of Object.keys(e)){if(n.toLowerCase()===Gr)continue;let s=z.escapeUri(n);t.push(s);let o=e[n];if(typeof o==="string")r[s]=`${s}=${z.escapeUri(o)}`;else if(Array.isArray(o))r[s]=o.slice(0).reduce((a,u)=>a.concat([`${s}=${z.escapeUri(u)}`]),[]).sort().join("&")}return t.sort().map((n)=>r[n]).filter((n)=>n).join("&")},hi=(e)=>bi(e).toISOString().replace(/\.\d{3}Z$/,"Z"),bi=(e)=>{if(typeof e==="number")return new Date(e*1000);if(typeof e==="string"){if(Number(e))return new Date(Number(e)*1000);return new Date(e)}return e};class Xe{service;regionProvider;credentialProvider;sha256;uriEscapePath;applyChecksum;constructor({applyChecksum:e,credentials:t,region:r,service:n,sha256:s,uriEscapePath:o=!0}){this.service=n,this.sha256=s,this.uriEscapePath=o,this.applyChecksum=typeof e==="boolean"?e:!0,this.regionProvider=Or.normalizeProvider(r),this.credentialProvider=Or.normalizeProvider(t)}createCanonicalRequest(e,t,r){let n=Object.keys(t).sort();return`${e.method}
+${this.getCanonicalPath(e)}
+${Xr(e)}
+${n.map((s)=>`${s}:${t[s]}`).join(`
+`)}
+
+${n.join(";")}
+${r}`}async createStringToSign(e,t,r,n){let s=new this.sha256;s.update(D.toUint8Array(r));let o=await s.digest();return`${n}
+${e}
+${t}
+${D.toHex(o)}`}getCanonicalPath({path:e}){if(this.uriEscapePath){let t=[];for(let s of e.split("/")){if(s?.length===0)continue;if(s===".")continue;if(s==="..")t.pop();else t.push(s)}let r=`${e?.startsWith("/")?"/":""}${t.join("/")}${t.length>0&&e?.endsWith("/")?"/":""}`;return z.escapeUri(r).replace(/%2F/g,"/")}return e}validateResolvedCredentials(e){if(typeof e!=="object"||typeof e.accessKeyId!=="string"||typeof e.secretAccessKey!=="string")throw Error("Resolved credential object is not valid")}formatDate(e){let t=hi(e).replace(/[\-:]/g,"");return{longDate:t,shortDate:t.slice(0,8)}}getCanonicalHeaderList(e){return Object.keys(e).sort().join(";")}}var K={},de=[],pe=(e,t,r)=>`${e}/${t}/${r}/${Be}`,Yr=async(e,t,r,n,s)=>{let o=await jr(e,t.secretAccessKey,t.accessKeyId),a=`${r}:${n}:${s}:${D.toHex(o)}:${t.sessionToken}`;if(a in K)return K[a];de.push(a);while(de.length>Qr)delete K[de.shift()];let u=`AWS4${t.secretAccessKey}`;for(let i of[r,n,s,Be])u=await jr(e,u,i);return K[a]=u},mi=()=>{de.length=0,Object.keys(K).forEach((e)=>{delete K[e]})},jr=(e,t,r)=>{let n=new e(t);return n.update(D.toUint8Array(r)),n.digest()},Ge=({headers:e},t,r)=>{let n={};for(let s of Object.keys(e).sort()){if(e[s]==null)continue;let o=s.toLowerCase();if(o in Kr||t?.has(o)||zr.test(o)||qr.test(o)){if(!r||r&&!r.has(o))continue}n[o]=e[s].trim().replace(/\s+/g," ")}return n},fe=async({headers:e,body:t},r)=>{for(let n of Object.keys(e))if(n.toLowerCase()===ge)return e[n];if(t==null)return"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855";else if(typeof t==="string"||ArrayBuffer.isView(t)||D.isArrayBuffer(t)){let n=new r;return n.update(D.toUint8Array(t)),D.toHex(await n.digest())}return kr},Zr=(e,t)=>{e=e.toLowerCase();for(let r of Object.keys(t))if(e===r.toLowerCase())return!0;return!1},Jr=(e,t={})=>{let{headers:r,query:n={}}=z.HttpRequest.clone(e);for(let s of Object.keys(r)){let o=s.toLowerCase();if(o.slice(0,6)==="x-amz-"&&!t.unhoistableHeaders?.has(o)||t.hoistableHeaders?.has(o))n[s]=r[s],delete r[s]}return{...e,headers:r,query:n}},We=(e)=>{e=z.HttpRequest.clone(e);for(let t of Object.keys(e.headers))if(Lr.indexOf(t.toLowerCase())>-1)delete e.headers[t];return e};class en extends Xe{headerFormatter=new $r;constructor({applyChecksum:e,credentials:t,region:r,service:n,sha256:s,uriEscapePath:o=!0}){super({applyChecksum:e,credentials:t,region:r,service:n,sha256:s,uriEscapePath:o})}async presign(e,t={}){let{signingDate:r=new Date,expiresIn:n=3600,unsignableHeaders:s,unhoistableHeaders:o,signableHeaders:a,hoistableHeaders:u,signingRegion:i,signingService:d}=t,l=await this.credentialProvider();this.validateResolvedCredentials(l);let b=i??await this.regionProvider(),{longDate:y,shortDate:h}=this.formatDate(r);if(n>Br)return Promise.reject("Signature version 4 presigned URLs must have an expiration date less than one week in the future");let R=pe(h,b,d??this.service),g=Jr(We(e),{unhoistableHeaders:o,hoistableHeaders:u});if(l.sessionToken)g.query[Ve]=l.sessionToken;g.query[Hr]=le,g.query[Cr]=`${l.accessKeyId}/${R}`,g.query[ze]=y,g.query[Mr]=n.toString(10);let T=Ge(g,s,a);return g.query[Ur]=this.getCanonicalHeaderList(T),g.query[qe]=await this.getSignature(y,R,this.getSigningKey(l,b,h,d),this.createCanonicalRequest(g,T,await fe(e,this.sha256))),g}async sign(e,t){if(typeof e==="string")return this.signString(e,t);else if(e.headers&&e.payload)return this.signEvent(e,t);else if(e.message)return this.signMessage(e,t);else return this.signRequest(e,t)}async signEvent({headers:e,payload:t},{signingDate:r=new Date,priorSignature:n,signingRegion:s,signingService:o,eventStreamCredentials:a}){let u=s??await this.regionProvider(),{shortDate:i,longDate:d}=this.formatDate(r),l=pe(i,u,o??this.service),b=await fe({headers:{},body:t},this.sha256),y=new this.sha256;y.update(e);let h=D.toHex(await y.digest()),R=[Vr,d,l,n,h,b].join(`
+`);return this.signString(R,{signingDate:r,signingRegion:u,signingService:o,eventStreamCredentials:a})}async signMessage(e,{signingDate:t=new Date,signingRegion:r,signingService:n,eventStreamCredentials:s}){return this.signEvent({headers:this.headerFormatter.format(e.message.headers),payload:e.message.body},{signingDate:t,signingRegion:r,signingService:n,priorSignature:e.priorSignature,eventStreamCredentials:s}).then((a)=>{return{message:e.message,signature:a}})}async signString(e,{signingDate:t=new Date,signingRegion:r,signingService:n,eventStreamCredentials:s}={}){let o=s??await this.credentialProvider();this.validateResolvedCredentials(o);let a=r??await this.regionProvider(),{shortDate:u}=this.formatDate(t),i=new this.sha256(await this.getSigningKey(o,a,u,n));return i.update(D.toUint8Array(e)),D.toHex(await i.digest())}async signRequest(e,{signingDate:t=new Date,signableHeaders:r,unsignableHeaders:n,signingRegion:s,signingService:o}={}){let a=await this.credentialProvider();this.validateResolvedCredentials(a);let u=s??await this.regionProvider(),i=We(e),{longDate:d,shortDate:l}=this.formatDate(t),b=pe(l,u,o??this.service);if(i.headers[Qe]=d,a.sessionToken)i.headers[Wr]=a.sessionToken;let y=await fe(i,this.sha256);if(!Zr(ge,i.headers)&&this.applyChecksum)i.headers[ge]=y;let h=Ge(i,n,r),R=await this.getSignature(d,b,this.getSigningKey(a,u,l,o),this.createCanonicalRequest(i,h,y));return i.headers[ke]=`${le} Credential=${a.accessKeyId}/${b}, SignedHeaders=${this.getCanonicalHeaderList(h)}, Signature=${R}`,i}async getSignature(e,t,r,n){let s=await this.createStringToSign(e,t,n,le),o=new this.sha256(await r);return o.update(D.toUint8Array(s)),D.toHex(await o.digest())}getSigningKey(e,t,r,n){return Yr(this.sha256,e,r,t,n||this.service)}}var Ai={SignatureV4a:null};Ei.ALGORITHM_IDENTIFIER=le;Ei.ALGORITHM_IDENTIFIER_V4A=yi;Ei.ALGORITHM_QUERY_PARAM=Hr;Ei.ALWAYS_UNSIGNABLE_HEADERS=Kr;Ei.AMZ_DATE_HEADER=Qe;Ei.AMZ_DATE_QUERY_PARAM=ze;Ei.AUTH_HEADER=ke;Ei.CREDENTIAL_QUERY_PARAM=Cr;Ei.DATE_HEADER=Fr;Ei.EVENT_ALGORITHM_IDENTIFIER=Vr;Ei.EXPIRES_QUERY_PARAM=Mr;Ei.GENERATED_HEADERS=Lr;Ei.HOST_HEADER=fi;Ei.KEY_TYPE_IDENTIFIER=Be;Ei.MAX_CACHE_SIZE=Qr;Ei.MAX_PRESIGNED_TTL=Br;Ei.PROXY_HEADER_PATTERN=zr;Ei.REGION_SET_PARAM=pi;Ei.SEC_HEADER_PATTERN=qr;Ei.SHA256_HEADER=ge;Ei.SIGNATURE_HEADER=Gr;Ei.SIGNATURE_QUERY_PARAM=qe;Ei.SIGNED_HEADERS_QUERY_PARAM=Ur;Ei.SignatureV4=en;Ei.SignatureV4Base=Xe;Ei.TOKEN_HEADER=Wr;Ei.TOKEN_QUERY_PARAM=Ve;Ei.UNSIGNABLE_PATTERNS=gi;Ei.UNSIGNED_PAYLOAD=kr;Ei.clearCredentialCache=mi;Ei.createScope=pe;Ei.getCanonicalHeaders=Ge;Ei.getCanonicalQuery=Xr;Ei.getPayloadHash=fe;Ei.getSigningKey=Yr;Ei.hasHeader=Zr;Ei.moveHeadersToQuery=Jr;Ei.prepareRequest=We;Ei.signatureV4aContainer=Ai});var Ye=E((iu)=>{var au=_r(),rn=tn(),Y={CrtSignerV4:null};class nn{sigv4aSigner;sigv4Signer;signerOptions;static sigv4aDependency(){if(typeof Y.CrtSignerV4==="function")return"crt";else if(typeof rn.signatureV4aContainer.SignatureV4a==="function")return"js";return"none"}constructor(e){this.sigv4Signer=new au.SignatureV4S3Express(e),this.signerOptions=e}async sign(e,t={}){if(t.signingRegion==="*")return this.getSigv4aSigner().sign(e,t);return this.sigv4Signer.sign(e,t)}async signWithCredentials(e,t,r={}){if(r.signingRegion==="*"){let n=this.getSigv4aSigner(),s=Y.CrtSignerV4;if(s&&n instanceof s)return n.signWithCredentials(e,t,r);else throw Error(`signWithCredentials with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt`)}return this.sigv4Signer.signWithCredentials(e,t,r)}async presign(e,t={}){if(t.signingRegion==="*"){let r=this.getSigv4aSigner(),n=Y.CrtSignerV4;if(n&&r instanceof n)return r.presign(e,t);else throw Error(`presign with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt`)}return this.sigv4Signer.presign(e,t)}async presignWithCredentials(e,t,r={}){if(r.signingRegion==="*")throw Error("Method presignWithCredentials is not supported for [signingRegion=*].");return this.sigv4Signer.presignWithCredentials(e,t,r)}getSigv4aSigner(){if(!this.sigv4aSigner){let e=Y.CrtSignerV4,t=rn.signatureV4aContainer.SignatureV4a;if(this.signerOptions.runtime==="node"){if(!e&&!t)throw Error("Neither CRT nor JS SigV4a implementation is available. Please load either @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");if(e&&typeof e==="function")this.sigv4aSigner=new e({...this.signerOptions,signingAlgorithm:1});else if(t&&typeof t==="function")this.sigv4aSigner=new t({...this.signerOptions});else throw Error("Available SigV4a implementation is not a valid constructor. Please ensure you've properly imported @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a.For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt")}else{if(!t||typeof t!=="function")throw Error("JS SigV4a implementation is not available or not a valid constructor. Please check whether you have installed the @aws-sdk/signature-v4a package explicitly. The CRT implementation is not available for browsers. You must also register the package by calling [require('@aws-sdk/signature-v4a');] or an ESM equivalent such as [import '@aws-sdk/signature-v4a';]. For more information please go to https://github.com/aws/aws-sdk-js-v3#using-javascript-non-crt-implementation-of-sigv4a");this.sigv4aSigner=new t({...this.signerOptions})}}return this.sigv4aSigner}}iu.SignatureV4MultiRegion=nn;iu.signatureV4CrtContainer=Y});var bn=E((yn)=>{Object.defineProperty(yn,"__esModule",{value:!0});yn.bdd=void 0;var lu=fn(),V="ref",x=-1,Z=!0,sn="isSet",gn="PartitionResult",J="booleanEquals",w="stringEquals",Ze="getAttr",on="us-east-1",an="sigv4",un="sts",cn="https://sts.{Region}.{PartitionResult#dnsSuffix}",ln={[V]:"Endpoint"},P={[V]:"Region"},Je={[V]:gn},q={},dn=[P],pn={conditions:[[sn,[ln]],[sn,dn],["aws.partition",dn,gn],[J,[{[V]:"UseFIPS"},Z]],[J,[{[V]:"UseDualStack"},Z]],[w,[P,"aws-global"]],[J,[{[V]:"UseGlobalEndpoint"},Z]],[w,[P,"eu-central-1"]],[J,[{fn:Ze,argv:[Je,"supportsDualStack"]},Z]],[J,[{fn:Ze,argv:[Je,"supportsFIPS"]},Z]],[w,[P,"ap-south-1"]],[w,[P,"eu-north-1"]],[w,[P,"eu-west-1"]],[w,[P,"eu-west-2"]],[w,[P,"eu-west-3"]],[w,[P,"sa-east-1"]],[w,[P,on]],[w,[P,"us-east-2"]],[w,[P,"us-west-2"]],[w,[P,"us-west-1"]],[w,[P,"ca-central-1"]],[w,[P,"ap-southeast-1"]],[w,[P,"ap-northeast-1"]],[w,[P,"ap-southeast-2"]],[w,[{fn:Ze,argv:[Je,"name"]},"aws-us-gov"]]],results:[[x],["https://sts.amazonaws.com",{authSchemes:[{name:an,signingName:un,signingRegion:on}]}],[cn,{authSchemes:[{name:an,signingName:un,signingRegion:"{Region}"}]}],[x,"Invalid Configuration: FIPS and custom endpoint are not supported"],[x,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[ln,q],["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",q],[x,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://sts.{Region}.amazonaws.com",q],["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",q],[x,"FIPS is enabled but this partition does not support FIPS"],["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",q],[x,"DualStack is enabled but this partition does not support DualStack"],[cn,q],[x,"Invalid Configuration: Missing Region"]]},du=2,f=1e8,pu=new Int32Array([-1,1,-1,0,30,3,1,4,f+14,2,5,f+14,3,25,6,4,24,7,5,f+1,8,6,9,f+13,7,f+1,10,10,f+1,11,11,f+1,12,12,f+1,13,13,f+1,14,14,f+1,15,15,f+1,16,16,f+1,17,17,f+1,18,18,f+1,19,19,f+1,20,20,f+1,21,21,f+1,22,22,f+1,23,23,f+1,f+2,8,f+11,f+12,4,28,26,9,27,f+10,24,f+8,f+9,8,29,f+7,9,f+6,f+7,3,f+3,31,4,f+4,f+5]);yn.bdd=lu.BinaryDecisionDiagram.from(pu,du,pn.conditions,pn.results)});var tt=E((mn)=>{Object.defineProperty(mn,"__esModule",{value:!0});mn.defaultEndpointResolver=void 0;var gu=fu(),et=fn(),yu=bn(),hu=new et.EndpointCache({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),bu=(e,t={})=>{return hu.get(e,()=>(0,et.decideEndpoint)(yu.bdd,{endpointParams:e,logger:t.logger}))};mn.defaultEndpointResolver=bu;et.customEndpointFunctions.aws=gu.awsEndpointFunctions});var ot=E((Pn)=>{Object.defineProperty(Pn,"__esModule",{value:!0});Pn.resolveHttpAuthSchemeConfig=Pn.resolveStsAuthConfig=Pn.defaultSTSHttpAuthSchemeProvider=Pn.defaultSTSHttpAuthSchemeParametersProvider=void 0;var En=nt(),mu=Ye(),Au=st(),ye=ur(),Eu=tt(),Ru=at(),wu=(e)=>async(t,r,n)=>{if(!n)throw Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");let s=await e(t,r,n),o=(0,ye.getSmithyContext)(r)?.commandInstance?.constructor?.getEndpointParameterInstructions;if(!o)throw Error(`getEndpointParameterInstructions() is not defined on '${r.commandName}'`);let a=await(0,Au.resolveParams)(n,{getEndpointParameterInstructions:o},t);return Object.assign(s,a)},Pu=async(e,t,r)=>{return{operation:(0,ye.getSmithyContext)(t).operation,region:await(0,ye.normalizeProvider)(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}};Pn.defaultSTSHttpAuthSchemeParametersProvider=wu(Pu);function Rn(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,r)=>({signingProperties:{config:t,context:r}})}}function rt(e){return{schemeId:"aws.auth#sigv4a",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,r)=>({signingProperties:{config:t,context:r}})}}function wn(e){return{schemeId:"smithy.api#noAuth"}}var vu=(e,t,r)=>{return(s)=>{let a=e(s).properties?.authSchemes;if(!a)return t(s);let u=[];for(let i of a){let{name:d,properties:l={},...b}=i,y=d.toLowerCase();if(d!==y)console.warn(`HttpAuthScheme has been normalized with lowercasing: '${d}' to '${y}'`);let h;if(y==="sigv4a"){h="aws.auth#sigv4a";let T=a.find((Pe)=>{let St=Pe.name.toLowerCase();return St!=="sigv4a"&&St.startsWith("sigv4")});if(mu.SignatureV4MultiRegion.sigv4aDependency()==="none"&&T)continue}else if(y.startsWith("sigv4"))h="aws.auth#sigv4";else throw Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${y}'`);let R=r[h];if(!R)throw Error(`Could not find HttpAuthOption create function for '${h}'`);let g=R(s);g.schemeId=h,g.signingProperties={...g.signingProperties||{},...b,...l},u.push(g)}return u}},Du=(e)=>{let t=[];switch(e.operation){case"AssumeRoleWithWebIdentity":{t.push(wn(e)),t.push(rt(e));break}default:t.push(Rn(e)),t.push(rt(e))}return t};Pn.defaultSTSHttpAuthSchemeProvider=vu(Eu.defaultEndpointResolver,Du,{"aws.auth#sigv4":Rn,"aws.auth#sigv4a":rt,"smithy.api#noAuth":wn});var Iu=(e)=>Object.assign(e,{stsClientCtor:Ru.STSClient});Pn.resolveStsAuthConfig=Iu;var Tu=(e)=>{let t=Pn.resolveStsAuthConfig(e),r=(0,En.resolveAwsSdkSigV4Config)(t),n=(0,En.resolveAwsSdkSigV4AConfig)(r);return Object.assign(n,{authSchemePreference:(0,ye.normalizeProvider)(e.authSchemePreference??[])})};Pn.resolveHttpAuthSchemeConfig=Tu});var it=E((In)=>{Object.defineProperty(In,"__esModule",{value:!0});In.commonParams=In.resolveClientEndpointParameters=void 0;var Ou=(e)=>{return Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,useGlobalEndpoint:e.useGlobalEndpoint??!1,defaultSigningName:"sts"})};In.resolveClientEndpointParameters=Ou;In.commonParams={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}}});var he=E((ct)=>{Object.defineProperty(ct,"__esModule",{value:!0});ct.STSServiceException=ct.__ServiceException=void 0;var Sn=k();Object.defineProperty(ct,"__ServiceException",{enumerable:!0,get:function(){return Sn.ServiceException}});class ut extends Sn.ServiceException{constructor(e){super(e);Object.setPrototypeOf(this,ut.prototype)}}ct.STSServiceException=ut});var bt=E((On)=>{Object.defineProperty(On,"__esModule",{value:!0});On.IDPCommunicationErrorException=On.InvalidIdentityTokenException=On.IDPRejectedClaimException=On.RegionDisabledException=On.PackedPolicyTooLargeException=On.MalformedPolicyDocumentException=On.ExpiredTokenException=void 0;var j=he();class lt extends j.STSServiceException{name="ExpiredTokenException";$fault="client";constructor(e){super({name:"ExpiredTokenException",$fault:"client",...e});Object.setPrototypeOf(this,lt.prototype)}}On.ExpiredTokenException=lt;class dt extends j.STSServiceException{name="MalformedPolicyDocumentException";$fault="client";constructor(e){super({name:"MalformedPolicyDocumentException",$fault:"client",...e});Object.setPrototypeOf(this,dt.prototype)}}On.MalformedPolicyDocumentException=dt;class pt extends j.STSServiceException{name="PackedPolicyTooLargeException";$fault="client";constructor(e){super({name:"PackedPolicyTooLargeException",$fault:"client",...e});Object.setPrototypeOf(this,pt.prototype)}}On.PackedPolicyTooLargeException=pt;class ft extends j.STSServiceException{name="RegionDisabledException";$fault="client";constructor(e){super({name:"RegionDisabledException",$fault:"client",...e});Object.setPrototypeOf(this,ft.prototype)}}On.RegionDisabledException=ft;class gt extends j.STSServiceException{name="IDPRejectedClaimException";$fault="client";constructor(e){super({name:"IDPRejectedClaimException",$fault:"client",...e});Object.setPrototypeOf(this,gt.prototype)}}On.IDPRejectedClaimException=gt;class yt extends j.STSServiceException{name="InvalidIdentityTokenException";$fault="client";constructor(e){super({name:"InvalidIdentityTokenException",$fault:"client",...e});Object.setPrototypeOf(this,yt.prototype)}}On.InvalidIdentityTokenException=yt;class ht extends j.STSServiceException{name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor(e){super({name:"IDPCommunicationErrorException",$fault:"client",...e});Object.setPrototypeOf(this,ht.prototype)}}On.IDPCommunicationErrorException=ht});var Pt=E((Wn)=>{Object.defineProperty(Wn,"__esModule",{value:!0});Wn.AssumeRoleWithWebIdentity$=Wn.AssumeRole$=Wn.Tag$=Wn.ProvidedContext$=Wn.PolicyDescriptorType$=Wn.Credentials$=Wn.AssumeRoleWithWebIdentityResponse$=Wn.AssumeRoleWithWebIdentityRequest$=Wn.AssumeRoleResponse$=Wn.AssumeRoleRequest$=Wn.AssumedRoleUser$=Wn.errorTypeRegistries=Wn.RegionDisabledException$=Wn.PackedPolicyTooLargeException$=Wn.MalformedPolicyDocumentException$=Wn.InvalidIdentityTokenException$=Wn.IDPRejectedClaimException$=Wn.IDPCommunicationErrorException$=Wn.ExpiredTokenException$=Wn.STSServiceException$=void 0;var Mu="Arn",Fu="AccessKeyId",Lu="AssumeRole",Gu="AssumedRoleId",Wu="AssumeRoleRequest",Ku="AssumeRoleResponse",mt="AssumedRoleUser",zu="AssumeRoleWithWebIdentity",qu="AssumeRoleWithWebIdentityRequest",Vu="AssumeRoleWithWebIdentityResponse",ku="Audience",At="Credentials",Qu="ContextAssertion",xn="DurationSeconds",Bu="Expiration",Xu="ExternalId",Yu="ExpiredTokenException",Zu="IDPCommunicationErrorException",Ju="IDPRejectedClaimException",ec="InvalidIdentityTokenException",tc="Key",rc="MalformedPolicyDocumentException",jn="Policy",$n="PolicyArns",nc="ProviderArn",sc="ProvidedContexts",oc="ProvidedContextsListType",ac="ProvidedContext",ic="PolicyDescriptorType",uc="ProviderId",Hn="PackedPolicySize",cc="PackedPolicyTooLargeException",lc="Provider",Cn="RoleArn",dc="RegionDisabledException",Un="RoleSessionName",pc="SecretAccessKey",fc="SubjectFromWebIdentityToken",Et="SourceIdentity",gc="SerialNumber",yc="SessionToken",hc="Tags",bc="TokenCode",mc="TransitiveTagKeys",Ac="Tag",Ec="Value",Rc="WebIdentityToken",wc="arn",Pc="accessKeySecretType",$="awsQueryError",H="client",vc="clientTokenType",C="error",U="httpError",M="message",Dc="policyDescriptorListType",Mn="smithy.ts.sdk.synthetic.com.amazonaws.sts",Ic="tagListType",m="com.amazonaws.sts",Fn=Fe(),F=bt(),Tc=he(),Ln=Fn.TypeRegistry.for(Mn);Wn.STSServiceException$=[-3,Mn,"STSServiceException",0,[],[]];Ln.registerError(Wn.STSServiceException$,Tc.STSServiceException);var _=Fn.TypeRegistry.for(m);Wn.ExpiredTokenException$=[-3,m,Yu,{[$]:["ExpiredTokenException",400],[C]:H,[U]:400},[M],[0]];_.registerError(Wn.ExpiredTokenException$,F.ExpiredTokenException);Wn.IDPCommunicationErrorException$=[-3,m,Zu,{[$]:["IDPCommunicationError",400],[C]:H,[U]:400},[M],[0]];_.registerError(Wn.IDPCommunicationErrorException$,F.IDPCommunicationErrorException);Wn.IDPRejectedClaimException$=[-3,m,Ju,{[$]:["IDPRejectedClaim",403],[C]:H,[U]:403},[M],[0]];_.registerError(Wn.IDPRejectedClaimException$,F.IDPRejectedClaimException);Wn.InvalidIdentityTokenException$=[-3,m,ec,{[$]:["InvalidIdentityToken",400],[C]:H,[U]:400},[M],[0]];_.registerError(Wn.InvalidIdentityTokenException$,F.InvalidIdentityTokenException);Wn.MalformedPolicyDocumentException$=[-3,m,rc,{[$]:["MalformedPolicyDocument",400],[C]:H,[U]:400},[M],[0]];_.registerError(Wn.MalformedPolicyDocumentException$,F.MalformedPolicyDocumentException);Wn.PackedPolicyTooLargeException$=[-3,m,cc,{[$]:["PackedPolicyTooLarge",400],[C]:H,[U]:400},[M],[0]];_.registerError(Wn.PackedPolicyTooLargeException$,F.PackedPolicyTooLargeException);Wn.RegionDisabledException$=[-3,m,dc,{[$]:["RegionDisabledException",403],[C]:H,[U]:403},[M],[0]];_.registerError(Wn.RegionDisabledException$,F.RegionDisabledException);Wn.errorTypeRegistries=[Ln,_];var Sc=[0,m,Pc,8,0],_c=[0,m,vc,8,0];Wn.AssumedRoleUser$=[3,m,mt,0,[Gu,Mu],[0,0],2];Wn.AssumeRoleRequest$=[3,m,Wu,0,[Cn,Un,$n,jn,xn,hc,mc,Xu,gc,bc,Et,sc],[0,0,()=>Gn,0,1,()=>Nc,64,0,0,0,0,()=>Oc],2];Wn.AssumeRoleResponse$=[3,m,Ku,0,[At,mt,Hn,Et],[[()=>Wn.Credentials$,0],()=>Wn.AssumedRoleUser$,1,0]];Wn.AssumeRoleWithWebIdentityRequest$=[3,m,qu,0,[Cn,Un,Rc,uc,$n,jn,xn],[0,0,[()=>_c,0],0,()=>Gn,0,1],3];Wn.AssumeRoleWithWebIdentityResponse$=[3,m,Vu,0,[At,fc,mt,Hn,lc,ku,Et],[[()=>Wn.Credentials$,0],0,()=>Wn.AssumedRoleUser$,1,0,0,0]];Wn.Credentials$=[3,m,At,0,[Fu,pc,yc,Bu],[0,[()=>Sc,0],0,4],4];Wn.PolicyDescriptorType$=[3,m,ic,0,[wc],[0]];Wn.ProvidedContext$=[3,m,ac,0,[nc,Qu],[0,0]];Wn.Tag$=[3,m,Ac,0,[tc,Ec],[0,0],2];var Gn=[1,m,Dc,0,()=>Wn.PolicyDescriptorType$],Oc=[1,m,oc,0,()=>Wn.ProvidedContext$],Nc=[1,m,Ic,0,()=>Wn.Tag$];Wn.AssumeRole$=[9,m,Lu,0,()=>Wn.AssumeRoleRequest$,()=>Wn.AssumeRoleResponse$];Wn.AssumeRoleWithWebIdentity$=[9,m,zu,0,()=>Wn.AssumeRoleWithWebIdentityRequest$,()=>Wn.AssumeRoleWithWebIdentityResponse$]});var ls=E((us)=>{Object.defineProperty(us,"__esModule",{value:!0});us.getRuntimeConfig=void 0;var os=nt(),Uc=cr(),Mc=Ye(),Fc=ie(),Lc=k(),Gc=$c(),as=Cc(),is=Hc(),Wc=ot(),Kc=tt(),zc=Pt(),qc=(e)=>{return{apiVersion:"2011-06-15",base64Decoder:e?.base64Decoder??as.fromBase64,base64Encoder:e?.base64Encoder??as.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Kc.defaultEndpointResolver,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Wc.defaultSTSHttpAuthSchemeProvider,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4"),signer:new os.AwsSdkSigV4Signer},{schemeId:"aws.auth#sigv4a",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4a"),signer:new os.AwsSdkSigV4ASigner},{schemeId:"smithy.api#noAuth",identityProvider:(t)=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new Fc.NoAuthSigner}],logger:e?.logger??new Lc.NoOpLogger,protocol:e?.protocol??Uc.AwsQueryProtocol,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:zc.errorTypeRegistries,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:e?.serviceId??"STS",signerConstructor:e?.signerConstructor??Mc.SignatureV4MultiRegion,urlParser:e?.urlParser??Gc.parseUrl,utf8Decoder:e?.utf8Decoder??is.fromUtf8,utf8Encoder:e?.utf8Encoder??is.toUtf8}};us.getRuntimeConfig=qc});var As=E((bs)=>{Object.defineProperty(bs,"__esModule",{value:!0});bs.getRuntimeConfig=void 0;var tl=Qc(),rl=tl.__importDefault(Bc()),nl=Le(),be=nt(),ds=Xc(),me=ys(),sl=ie(),ol=Yc(),ps=hs(),O=Zc(),fs=Vc(),gs=k(),al=Jc(),il=el(),ul=kc(),cl=ls(),ll=(e)=>{(0,gs.emitWarningIfUnsupportedVersion)(process.version);let t=(0,il.resolveDefaultsModeConfig)(e),r=()=>t().then(gs.loadConfigsForDefaultMode),n=(0,cl.getRuntimeConfig)(e);(0,nl.emitWarningIfUnsupportedVersion)(process.version);let s={profile:e?.profile,logger:n.logger};return{...n,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??(0,O.loadConfig)(be.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS,s),bodyLengthChecker:e?.bodyLengthChecker??al.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,ds.createDefaultUserAgentProvider)({serviceId:n.serviceId,clientVersion:rl.default.version}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(o)=>o.getIdentityProvider("aws.auth#sigv4")||(async(a)=>await e.credentialDefaultProvider(a?.__config||{})()),signer:new be.AwsSdkSigV4Signer},{schemeId:"aws.auth#sigv4a",identityProvider:(o)=>o.getIdentityProvider("aws.auth#sigv4a"),signer:new be.AwsSdkSigV4ASigner},{schemeId:"smithy.api#noAuth",identityProvider:(o)=>o.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new sl.NoAuthSigner}],maxAttempts:e?.maxAttempts??(0,O.loadConfig)(ps.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??(0,O.loadConfig)(me.NODE_REGION_CONFIG_OPTIONS,{...me.NODE_REGION_CONFIG_FILE_OPTIONS,...s}),requestHandler:fs.NodeHttpHandler.create(e?.requestHandler??r),retryMode:e?.retryMode??(0,O.loadConfig)({...ps.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await r()).retryMode||ul.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??ol.Hash.bind(null,"sha256"),sigv4aSigningRegionSet:e?.sigv4aSigningRegionSet??(0,O.loadConfig)(be.NODE_SIGV4A_CONFIG_OPTIONS,s),streamCollector:e?.streamCollector??fs.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??(0,O.loadConfig)(me.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,s),useFipsEndpoint:e?.useFipsEndpoint??(0,O.loadConfig)(me.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,s),userAgentAppId:e?.userAgentAppId??(0,O.loadConfig)(ds.NODE_APP_ID_CONFIG_OPTIONS,s)}};bs.getRuntimeConfig=ll});var ws=E((Es)=>{Object.defineProperty(Es,"__esModule",{value:!0});Es.resolveHttpAuthRuntimeConfig=Es.getHttpAuthExtensionConfiguration=void 0;var dl=(e)=>{let{httpAuthSchemes:t,httpAuthSchemeProvider:r,credentials:n}=e;return{setHttpAuthScheme(s){let o=t.findIndex((a)=>a.schemeId===s.schemeId);if(o===-1)t.push(s);else t.splice(o,1,s)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(s){r=s},httpAuthSchemeProvider(){return r},setCredentials(s){n=s},credentials(){return n}}};Es.getHttpAuthExtensionConfiguration=dl;var pl=(e)=>{return{httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}};Es.resolveHttpAuthRuntimeConfig=pl});var Os=E((Ss)=>{Object.defineProperty(Ss,"__esModule",{value:!0});Ss.resolveRuntimeExtensions=void 0;var Ps=Ts(),vs=gl(),Ds=k(),Is=ws(),yl=(e,t)=>{let r=Object.assign((0,Ps.getAwsRegionExtensionConfiguration)(e),(0,Ds.getDefaultExtensionConfiguration)(e),(0,vs.getHttpHandlerExtensionConfiguration)(e),(0,Is.getHttpAuthExtensionConfiguration)(e));return t.forEach((n)=>n.configure(r)),Object.assign(e,(0,Ps.resolveAwsRegionExtensionConfiguration)(r),(0,Ds.resolveDefaultRuntimeConfig)(r),(0,vs.resolveHttpHandlerRuntimeConfig)(r),(0,Is.resolveHttpAuthRuntimeConfig)(r))};Ss.resolveRuntimeExtensions=yl});var at=E((Dt)=>{Object.defineProperty(Dt,"__esModule",{value:!0});Dt.STSClient=Dt.__Client=void 0;var Ns=hl(),Rl=bl(),wl=ml(),xs=Al(),Pl=ys(),vt=ie(),vl=Fe(),Dl=El(),Il=st(),js=hs(),Hs=k();Object.defineProperty(Dt,"__Client",{enumerable:!0,get:function(){return Hs.Client}});var $s=ot(),Tl=it(),Sl=As(),_l=Os();class Cs extends Hs.Client{config;constructor(...[e]){let t=(0,Sl.getRuntimeConfig)(e||{});super(t);this.initConfig=t;let r=(0,Tl.resolveClientEndpointParameters)(t),n=(0,xs.resolveUserAgentConfig)(r),s=(0,js.resolveRetryConfig)(n),o=(0,Pl.resolveRegionConfig)(s),a=(0,Ns.resolveHostHeaderConfig)(o),u=(0,Il.resolveEndpointConfig)(a),i=(0,$s.resolveHttpAuthSchemeConfig)(u),d=(0,_l.resolveRuntimeExtensions)(i,e?.extensions||[]);this.config=d,this.middlewareStack.use((0,vl.getSchemaSerdePlugin)(this.config)),this.middlewareStack.use((0,xs.getUserAgentPlugin)(this.config)),this.middlewareStack.use((0,js.getRetryPlugin)(this.config)),this.middlewareStack.use((0,Dl.getContentLengthPlugin)(this.config)),this.middlewareStack.use((0,Ns.getHostHeaderPlugin)(this.config)),this.middlewareStack.use((0,Rl.getLoggerPlugin)(this.config)),this.middlewareStack.use((0,wl.getRecursionDetectionPlugin)(this.config)),this.middlewareStack.use((0,vt.getHttpAuthSchemeEndpointRuleSetPlugin)(this.config,{httpAuthSchemeParametersProvider:$s.defaultSTSHttpAuthSchemeParametersProvider,identityProviderConfigProvider:async(l)=>new vt.DefaultIdentityProviderConfig({"aws.auth#sigv4":l.credentials,"aws.auth#sigv4a":l.credentials})})),this.middlewareStack.use((0,vt.getHttpSigningPlugin)(this.config))}destroy(){super.destroy()}}Dt.STSClient=Cs});var zl=E((I)=>{var L=at(),Ee=k(),Ms=st(),Fs=it(),Q=Pt(),Ae=bt(),It=Le(),Ol=Ts(),Nl=he();class Re extends Ee.Command.classBuilder().ep(Fs.commonParams).m(function(e,t,r,n){return[Ms.getEndpointPlugin(r,e.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRole",{}).n("STSClient","AssumeRoleCommand").sc(Q.AssumeRole$).build(){}class we extends Ee.Command.classBuilder().ep(Fs.commonParams).m(function(e,t,r,n){return[Ms.getEndpointPlugin(r,e.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoleWithWebIdentity",{}).n("STSClient","AssumeRoleWithWebIdentityCommand").sc(Q.AssumeRoleWithWebIdentity$).build(){}var xl={AssumeRoleCommand:Re,AssumeRoleWithWebIdentityCommand:we};class Tt extends L.STSClient{}Ee.createAggregatedClient(xl,Tt);var Ls=(e)=>{if(typeof e?.Arn==="string"){let t=e.Arn.split(":");if(t.length>4&&t[4]!=="")return t[4]}return},Gs=async(e,t,r,n={})=>{let s=typeof e==="function"?await e():e,o=typeof t==="function"?await t():t,a="",u=s??o??(a=await Ol.stsRegionDefaultResolver(n)());return r?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${s} (credential provider clientConfig)`,`${o} (contextual client)`,`${a} (STS default: AWS_REGION, profile region, or us-east-1)`),u},jl=(e,t)=>{let r,n;return async(s,o)=>{if(n=s,!r){let{logger:l=e?.parentClientConfig?.logger,profile:b=e?.parentClientConfig?.profile,region:y,requestHandler:h=e?.parentClientConfig?.requestHandler,credentialProviderLogger:R,userAgentAppId:g=e?.parentClientConfig?.userAgentAppId}=e,T=await Gs(y,e?.parentClientConfig?.region,R,{logger:l,profile:b}),Pe=!Ws(h);r=new t({...e,userAgentAppId:g,profile:b,credentialDefaultProvider:()=>async()=>n,region:T,requestHandler:Pe?h:void 0,logger:l})}let{Credentials:a,AssumedRoleUser:u}=await r.send(new Re(o));if(!a||!a.AccessKeyId||!a.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${o.RoleArn}`);let i=Ls(u),d={accessKeyId:a.AccessKeyId,secretAccessKey:a.SecretAccessKey,sessionToken:a.SessionToken,expiration:a.Expiration,...a.CredentialScope&&{credentialScope:a.CredentialScope},...i&&{accountId:i}};return It.setCredentialFeature(d,"CREDENTIALS_STS_ASSUME_ROLE","i"),d}},$l=(e,t)=>{let r;return async(n)=>{if(!r){let{logger:i=e?.parentClientConfig?.logger,profile:d=e?.parentClientConfig?.profile,region:l,requestHandler:b=e?.parentClientConfig?.requestHandler,credentialProviderLogger:y,userAgentAppId:h=e?.parentClientConfig?.userAgentAppId}=e,R=await Gs(l,e?.parentClientConfig?.region,y,{logger:i,profile:d}),g=!Ws(b);r=new t({...e,userAgentAppId:h,profile:d,region:R,requestHandler:g?b:void 0,logger:i})}let{Credentials:s,AssumedRoleUser:o}=await r.send(new we(n));if(!s||!s.AccessKeyId||!s.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${n.RoleArn}`);let a=Ls(o),u={accessKeyId:s.AccessKeyId,secretAccessKey:s.SecretAccessKey,sessionToken:s.SessionToken,expiration:s.Expiration,...s.CredentialScope&&{credentialScope:s.CredentialScope},...a&&{accountId:a}};if(a)It.setCredentialFeature(u,"RESOLVED_ACCOUNT_ID","T");return It.setCredentialFeature(u,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),u}},Ws=(e)=>{return e?.metadata?.handlerProtocol==="h2"},Ks=(e,t)=>{if(!t)return e;else return class extends e{constructor(n){super(n);for(let s of t)this.middlewareStack.use(s)}}},zs=(e={},t)=>jl(e,Ks(L.STSClient,t)),qs=(e={},t)=>$l(e,Ks(L.STSClient,t)),Hl=(e)=>(t)=>e({roleAssumer:zs(t),roleAssumerWithWebIdentity:qs(t),...t});I.$Command=Ee.Command;I.STSServiceException=Nl.STSServiceException;I.AssumeRoleCommand=Re;I.AssumeRoleWithWebIdentityCommand=we;I.STS=Tt;I.decorateDefaultCredentialProvider=Hl;I.getDefaultRoleAssumer=zs;I.getDefaultRoleAssumerWithWebIdentity=qs;Object.prototype.hasOwnProperty.call(L,"__proto__")&&!Object.prototype.hasOwnProperty.call(I,"__proto__")&&Object.defineProperty(I,"__proto__",{enumerable:!0,value:L.__proto__});Object.keys(L).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(I,e))I[e]=L[e]});Object.prototype.hasOwnProperty.call(Q,"__proto__")&&!Object.prototype.hasOwnProperty.call(I,"__proto__")&&Object.defineProperty(I,"__proto__",{enumerable:!0,value:Q.__proto__});Object.keys(Q).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(I,e))I[e]=Q[e]});Object.prototype.hasOwnProperty.call(Ae,"__proto__")&&!Object.prototype.hasOwnProperty.call(I,"__proto__")&&Object.defineProperty(I,"__proto__",{enumerable:!0,value:Ae.__proto__});Object.keys(Ae).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(I,e))I[e]=Ae[e]})});
+export{zl as Q5};