@digipair/skill-s3 0.136.0 → 0.136.3

package/dist/index.esm9.js

@@ -1,433 +1,255 @@
-import fs from 'fs/promises';
-import { aP as escapeUri, K as fromBase64, J as toBase64, aQ as toHex, t as toUtf8, aR as fromArrayBuffer } from './index.esm3.js';
-import { Readable, Writable } from 'stream';
-import { Agent as Agent$1, request as request$1 } from 'http';
-import { Agent, request } from 'https';
-import 'buffer';
-import 'path';
-import 'os';
+import { C as CredentialsProviderError, a4 as chain, s as setCredentialFeature, x as getProfileName, a5 as readFile, y as HttpRequest } from './index.esm3.js';
+import { createHash, createPrivateKey, createPublicKey, sign } from 'node:crypto';
+import { promises } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, dirname } from 'node:path';
+import { p as parseKnownFiles } from './parseKnownFiles.esm.js';
 import 'node:fs/promises';
-import 'crypto';
 import 'node:stream';
-import 'process';
-import 'node:fs';
-import 'zlib';
-
-function setCredentialFeature(credentials, feature, value) {
-    if (!credentials.$source) {
-        credentials.$source = {};
-    }
-    credentials.$source[feature] = value;
-    return credentials;
-}
+import 'node:process';
+import 'buffer';
+import 'node:https';
+import 'node:zlib';
 
-function _array_like_to_array$2(arr, len) {
-    if (len == null || len > arr.length) len = arr.length;
-    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
-    return arr2;
-}
-function _array_without_holes(arr) {
-    if (Array.isArray(arr)) return _array_like_to_array$2(arr);
-}
-function _class_call_check$5(instance, Constructor) {
-    if (!(instance instanceof Constructor)) {
-        throw new TypeError("Cannot call a class as a function");
-    }
-}
-function _defineProperties$4(target, props) {
-    for(var i = 0; i < props.length; i++){
-        var descriptor = props[i];
-        descriptor.enumerable = descriptor.enumerable || false;
-        descriptor.configurable = true;
-        if ("value" in descriptor) descriptor.writable = true;
-        Object.defineProperty(target, descriptor.key, descriptor);
-    }
-}
-function _create_class$4(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$4(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$4(Constructor, staticProps);
-    return Constructor;
-}
-function _define_property$5(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _iterable_to_array(iter) {
-    if (typeof Symbol !== "undefined" && iter[Symbol.iterator] != null || iter["@@iterator"] != null) return Array.from(iter);
-}
-function _non_iterable_spread() {
-    throw new TypeError("Invalid attempt to spread non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
-}
-function _object_spread$1(target) {
-    for(var i = 1; i < arguments.length; i++){
-        var source = arguments[i] != null ? arguments[i] : {};
-        var ownKeys = Object.keys(source);
-        if (typeof Object.getOwnPropertySymbols === "function") {
-            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
-                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
-            }));
-        }
-        ownKeys.forEach(function(key) {
-            _define_property$5(target, key, source[key]);
-        });
-    }
-    return target;
-}
-function ownKeys$1(object, enumerableOnly) {
-    var keys = Object.keys(object);
-    if (Object.getOwnPropertySymbols) {
-        var symbols = Object.getOwnPropertySymbols(object);
-        keys.push.apply(keys, symbols);
+function asyncGeneratorStep$a(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
     }
-    return keys;
-}
-function _object_spread_props$1(target, source) {
-    source = source != null ? source : {};
-    if (Object.getOwnPropertyDescriptors) {
-        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    if (info.done) {
+        resolve(value);
     } else {
-        ownKeys$1(Object(source)).forEach(function(key) {
-            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
-        });
+        Promise.resolve(value).then(_next, _throw);
     }
-    return target;
-}
-function _to_consumable_array(arr) {
-    return _array_without_holes(arr) || _iterable_to_array(arr) || _unsupported_iterable_to_array$2(arr) || _non_iterable_spread();
-}
-function _type_of$7(obj) {
-    "@swc/helpers - typeof";
-    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
-}
-function _unsupported_iterable_to_array$2(o, minLen) {
-    if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$2(o, minLen);
-    var n = Object.prototype.toString.call(o).slice(8, -1);
-    if (n === "Object" && o.constructor) n = o.constructor.name;
-    if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$2(o, minLen);
 }
-var HttpRequest = /*#__PURE__*/ function() {
-    function HttpRequest(options) {
-        _class_call_check$5(this, HttpRequest);
-        _define_property$5(this, "method", void 0);
-        _define_property$5(this, "protocol", void 0);
-        _define_property$5(this, "hostname", void 0);
-        _define_property$5(this, "port", void 0);
-        _define_property$5(this, "path", void 0);
-        _define_property$5(this, "query", void 0);
-        _define_property$5(this, "headers", void 0);
-        _define_property$5(this, "username", void 0);
-        _define_property$5(this, "password", void 0);
-        _define_property$5(this, "fragment", void 0);
-        _define_property$5(this, "body", void 0);
-        this.method = options.method || "GET";
-        this.hostname = options.hostname || "localhost";
-        this.port = options.port;
-        this.query = options.query || {};
-        this.headers = options.headers || {};
-        this.body = options.body;
-        this.protocol = options.protocol ? options.protocol.slice(-1) !== ":" ? "".concat(options.protocol, ":") : options.protocol : "https:";
-        this.path = options.path ? options.path.charAt(0) !== "/" ? "/".concat(options.path) : options.path : "/";
-        this.username = options.username;
-        this.password = options.password;
-        this.fragment = options.fragment;
-    }
-    _create_class$4(HttpRequest, [
-        {
-            key: "clone",
-            value: function clone() {
-                return HttpRequest.clone(this);
-            }
-        }
-    ], [
-        {
-            key: "clone",
-            value: function clone(request) {
-                var cloned = new HttpRequest(_object_spread_props$1(_object_spread$1({}, request), {
-                    headers: _object_spread$1({}, request.headers)
-                }));
-                if (cloned.query) {
-                    cloned.query = cloneQuery(cloned.query);
-                }
-                return cloned;
+function _async_to_generator$a(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$a(gen, resolve, reject, _next, _throw, "next", value);
             }
-        },
-        {
-            key: "isInstance",
-            value: function isInstance(request) {
-                if (!request) {
-                    return false;
-                }
-                var req = request;
-                return "method" in req && "protocol" in req && "hostname" in req && "path" in req && _type_of$7(req["query"]) === "object" && _type_of$7(req["headers"]) === "object";
+            function _throw(err) {
+                asyncGeneratorStep$a(gen, resolve, reject, _next, _throw, "throw", err);
             }
-        }
-    ]);
-    return HttpRequest;
-}();
-function cloneQuery(query) {
-    return Object.keys(query).reduce(function(carry, paramName) {
-        var param = query[paramName];
-        return _object_spread_props$1(_object_spread$1({}, carry), _define_property$5({}, paramName, Array.isArray(param) ? _to_consumable_array(param) : param));
-    }, {});
-}
-
-function _class_call_check$4(instance, Constructor) {
-    if (!(instance instanceof Constructor)) {
-        throw new TypeError("Cannot call a class as a function");
-    }
-}
-function _defineProperties$3(target, props) {
-    for(var i = 0; i < props.length; i++){
-        var descriptor = props[i];
-        descriptor.enumerable = descriptor.enumerable || false;
-        descriptor.configurable = true;
-        if ("value" in descriptor) descriptor.writable = true;
-        Object.defineProperty(target, descriptor.key, descriptor);
-    }
-}
-function _create_class$3(Constructor, protoProps, staticProps) {
-    if (staticProps) _defineProperties$3(Constructor, staticProps);
-    return Constructor;
-}
-function _define_property$4(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
+            _next(undefined);
         });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _type_of$6(obj) {
-    "@swc/helpers - typeof";
-    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+    };
 }
-var HttpResponse = /*#__PURE__*/ function() {
-    function HttpResponse(options) {
-        _class_call_check$4(this, HttpResponse);
-        _define_property$4(this, "statusCode", void 0);
-        _define_property$4(this, "reason", void 0);
-        _define_property$4(this, "headers", void 0);
-        _define_property$4(this, "body", void 0);
-        this.statusCode = options.statusCode;
-        this.reason = options.reason;
-        this.headers = options.headers || {};
-        this.body = options.body;
-    }
-    _create_class$3(HttpResponse, null, [
-        {
-            key: "isInstance",
-            value: function isInstance(response) {
-                if (!response) return false;
-                var resp = response;
-                return typeof resp.statusCode === "number" && _type_of$6(resp.headers) === "object";
-            }
-        }
-    ]);
-    return HttpResponse;
-}();
-
-function buildQueryString(query) {
-    var parts = [];
-    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
-    try {
-        for(var _iterator = Object.keys(query).sort()[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
-            var key = _step.value;
-            var value = query[key];
-            key = escapeUri(key);
-            if (Array.isArray(value)) {
-                for(var i = 0, iLen = value.length; i < iLen; i++){
-                    parts.push("".concat(key, "=").concat(escapeUri(value[i])));
-                }
-            } else {
-                var qsEntry = key;
-                if (value || typeof value === "string") {
-                    qsEntry += "=".concat(escapeUri(value));
-                }
-                parts.push(qsEntry);
-            }
-        }
-    } catch (err) {
-        _didIteratorError = true;
-        _iteratorError = err;
-    } finally{
-        try {
-            if (!_iteratorNormalCompletion && _iterator.return != null) {
-                _iterator.return();
-            }
-        } finally{
-            if (_didIteratorError) {
-                throw _iteratorError;
-            }
-        }
+function _ts_generator$a(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
     }
-    return parts.join("&");
-}
-
-var NODEJS_TIMEOUT_ERROR_CODES = [
-    "ECONNRESET",
-    "EPIPE",
-    "ETIMEDOUT"
-];
-
-var getTransformedHeaders = function(headers) {
-    var transformedHeaders = {};
-    var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
-    try {
-        for(var _iterator = Object.keys(headers)[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
-            var name = _step.value;
-            var headerValues = headers[name];
-            transformedHeaders[name] = Array.isArray(headerValues) ? headerValues.join(",") : headerValues;
-        }
-    } catch (err) {
-        _didIteratorError = true;
-        _iteratorError = err;
-    } finally{
-        try {
-            if (!_iteratorNormalCompletion && _iterator.return != null) {
-                _iterator.return();
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
             }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
         } finally{
-            if (_didIteratorError) {
-                throw _iteratorError;
-            }
+            f = t = 0;
         }
-    }
-    return transformedHeaders;
-};
-
-var timing = {
-    setTimeout: function(cb, ms) {
-        return setTimeout(cb, ms);
-    },
-    clearTimeout: function(timeoutId) {
-        return clearTimeout(timeoutId);
-    }
-};
-
-var DEFER_EVENT_LISTENER_TIME$2 = 1000;
-var setConnectionTimeout = function(request, reject) {
-    var timeoutInMs = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : 0;
-    if (!timeoutInMs) {
-        return -1;
-    }
-    var registerTimeout = function(offset) {
-        var timeoutId = timing.setTimeout(function() {
-            request.destroy();
-            reject(Object.assign(new Error("@smithy/node-http-handler - the request socket did not establish a connection with the server within the configured timeout of ".concat(timeoutInMs, " ms.")), {
-                name: "TimeoutError"
-            }));
-        }, timeoutInMs - offset);
-        var doWithSocket = function(socket) {
-            if (socket === null || socket === void 0 ? void 0 : socket.connecting) {
-                socket.on("connect", function() {
-                    timing.clearTimeout(timeoutId);
-                });
-            } else {
-                timing.clearTimeout(timeoutId);
-            }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
         };
-        if (request.socket) {
-            doWithSocket(request.socket);
-        } else {
-            request.on("socket", doWithSocket);
-        }
-    };
-    if (timeoutInMs < 2000) {
-        registerTimeout(0);
-        return 0;
     }
-    return timing.setTimeout(registerTimeout.bind(null, DEFER_EVENT_LISTENER_TIME$2), DEFER_EVENT_LISTENER_TIME$2);
-};
-
-var setRequestTimeout = function(req, reject) {
-    var timeoutInMs = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : 0, throwOnRequestTimeout = arguments.length > 3 ? arguments[3] : void 0, logger = arguments.length > 4 ? arguments[4] : void 0;
-    if (timeoutInMs) {
-        return timing.setTimeout(function() {
-            var msg = "@smithy/node-http-handler - [".concat(throwOnRequestTimeout ? "ERROR" : "WARN", "] a request has exceeded the configured ").concat(timeoutInMs, " ms requestTimeout.");
-            if (throwOnRequestTimeout) {
-                var error = Object.assign(new Error(msg), {
-                    name: "TimeoutError",
-                    code: "ETIMEDOUT"
+}
+var resolveCredentialSource = function(credentialSource, profileName, logger) {
+    var sourceProvidersMap = {
+        EcsContainer: function() {
+            var _ref = _async_to_generator$a(function(options) {
+                var fromHttp, fromContainerMetadata;
+                return _ts_generator$a(this, function(_state) {
+                    switch(_state.label){
+                        case 0:
+                            return [
+                                4,
+                                import('./index.esm8.js')
+                            ];
+                        case 1:
+                            fromHttp = _state.sent().fromHttp;
+                            return [
+                                4,
+                                import('./index.esm10.js')
+                            ];
+                        case 2:
+                            fromContainerMetadata = _state.sent().fromContainerMetadata;
+                            logger === null || logger === void 0 ? void 0 : logger.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer");
+                            return [
+                                2,
+                                /*#__PURE__*/ _async_to_generator$a(function() {
+                                    return _ts_generator$a(this, function(_state) {
+                                        return [
+                                            2,
+                                            chain(fromHttp(options !== null && options !== void 0 ? options : {}), fromContainerMetadata(options))().then(setNamedProvider)
+                                        ];
+                                    });
+                                })
+                            ];
+                    }
                 });
-                req.destroy(error);
-                reject(error);
-            } else {
-                var _logger_warn;
-                msg += " Init client requestHandler with throwOnRequestTimeout=true to turn this into an error.";
-                logger === null || logger === void 0 ? void 0 : (_logger_warn = logger.warn) === null || _logger_warn === void 0 ? void 0 : _logger_warn.call(logger, msg);
-            }
-        }, timeoutInMs);
-    }
-    return -1;
-};
-
-var DEFER_EVENT_LISTENER_TIME$1 = 3000;
-var setSocketKeepAlive = function(request, param) {
-    var keepAlive = param.keepAlive, keepAliveMsecs = param.keepAliveMsecs, deferTimeMs = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : DEFER_EVENT_LISTENER_TIME$1;
-    if (keepAlive !== true) {
-        return -1;
-    }
-    var registerListener = function() {
-        if (request.socket) {
-            request.socket.setKeepAlive(keepAlive, keepAliveMsecs || 0);
-        } else {
-            request.on("socket", function(socket) {
-                socket.setKeepAlive(keepAlive, keepAliveMsecs || 0);
             });
-        }
-    };
-    if (deferTimeMs === 0) {
-        registerListener();
-        return 0;
-    }
-    return timing.setTimeout(registerListener, deferTimeMs);
-};
-
-var DEFER_EVENT_LISTENER_TIME = 3000;
-var setSocketTimeout = function(request, reject) {
-    var timeoutInMs = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : 0;
-    var registerTimeout = function(offset) {
-        var timeout = timeoutInMs - offset;
-        var onTimeout = function() {
-            request.destroy();
-            reject(Object.assign(new Error("@smithy/node-http-handler - the request socket timed out after ".concat(timeoutInMs, " ms of inactivity (configured by client requestHandler).")), {
-                name: "TimeoutError"
-            }));
-        };
-        if (request.socket) {
-            request.socket.setTimeout(timeout, onTimeout);
-            request.on("close", function() {
-                var _request_socket;
-                return (_request_socket = request.socket) === null || _request_socket === void 0 ? void 0 : _request_socket.removeListener("timeout", onTimeout);
+            return function(options) {
+                return _ref.apply(this, arguments);
+            };
+        }(),
+        Ec2InstanceMetadata: function() {
+            var _ref = _async_to_generator$a(function(options) {
+                var fromInstanceMetadata;
+                return _ts_generator$a(this, function(_state) {
+                    switch(_state.label){
+                        case 0:
+                            logger === null || logger === void 0 ? void 0 : logger.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");
+                            return [
+                                4,
+                                import('./index.esm10.js')
+                            ];
+                        case 1:
+                            fromInstanceMetadata = _state.sent().fromInstanceMetadata;
+                            return [
+                                2,
+                                /*#__PURE__*/ _async_to_generator$a(function() {
+                                    return _ts_generator$a(this, function(_state) {
+                                        return [
+                                            2,
+                                            fromInstanceMetadata(options)().then(setNamedProvider)
+                                        ];
+                                    });
+                                })
+                            ];
+                    }
+                });
             });
-        } else {
-            request.setTimeout(timeout, onTimeout);
-        }
+            return function(options) {
+                return _ref.apply(this, arguments);
+            };
+        }(),
+        Environment: function() {
+            var _ref = _async_to_generator$a(function(options) {
+                var fromEnv;
+                return _ts_generator$a(this, function(_state) {
+                    switch(_state.label){
+                        case 0:
+                            logger === null || logger === void 0 ? void 0 : logger.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");
+                            return [
+                                4,
+                                import('./index.esm2.js')
+                            ];
+                        case 1:
+                            fromEnv = _state.sent().fromEnv;
+                            return [
+                                2,
+                                /*#__PURE__*/ _async_to_generator$a(function() {
+                                    return _ts_generator$a(this, function(_state) {
+                                        return [
+                                            2,
+                                            fromEnv(options)().then(setNamedProvider)
+                                        ];
+                                    });
+                                })
+                            ];
+                    }
+                });
+            });
+            return function(options) {
+                return _ref.apply(this, arguments);
+            };
+        }()
     };
-    if (0 < timeoutInMs && timeoutInMs < 6000) {
-        registerTimeout(0);
-        return 0;
+    if (credentialSource in sourceProvidersMap) {
+        return sourceProvidersMap[credentialSource];
+    } else {
+        throw new CredentialsProviderError("Unsupported credential source in profile ".concat(profileName, ". Got ").concat(credentialSource, ", ") + "expected EcsContainer or Ec2InstanceMetadata or Environment.", {
+            logger: logger
+        });
     }
-    return timing.setTimeout(registerTimeout.bind(null, timeoutInMs === 0 ? 0 : DEFER_EVENT_LISTENER_TIME), DEFER_EVENT_LISTENER_TIME);
+};
+var setNamedProvider = function(creds) {
+    return setCredentialFeature(creds, "CREDENTIALS_PROFILE_NAMED_PROVIDER", "p");
 };
 
-function asyncGeneratorStep$8(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$9(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -441,33 +263,73 @@ function asyncGeneratorStep$8(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$8(fn) {
+function _async_to_generator$9(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$8(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$9(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$8(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$9(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _instanceof$6(left, right) {
-    if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
-        return !!right[Symbol.hasInstance](left);
+function _define_property$4(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
     } else {
-        return left instanceof right;
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread$4(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$4(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys$3(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props$3(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys$3(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
     }
+    return target;
 }
-function _type_of$5(obj) {
+function _type_of$3(obj) {
     "@swc/helpers - typeof";
     return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
-function _ts_generator$8(thisArg, body) {
+function _ts_generator$9(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -562,87 +424,162 @@ function _ts_generator$8(thisArg, body) {
         };
     }
 }
-var MIN_WAIT_TIME = 6000;
-function writeRequestBody(httpRequest, request) {
-    return _writeRequestBody.apply(this, arguments);
-}
-function _writeRequestBody() {
-    _writeRequestBody = _async_to_generator$8(function(httpRequest, request) {
-        var maxContinueTimeoutMs, _request_headers, headers, expect, timeoutId, sendBody;
+var isAssumeRoleProfile = function(arg) {
+    var _ref = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {}, _ref_profile = _ref.profile, profile = _ref_profile === void 0 ? "default" : _ref_profile, logger = _ref.logger;
+    return Boolean(arg) && (typeof arg === "undefined" ? "undefined" : _type_of$3(arg)) === "object" && typeof arg.role_arn === "string" && [
+        "undefined",
+        "string"
+    ].indexOf(_type_of$3(arg.role_session_name)) > -1 && [
+        "undefined",
+        "string"
+    ].indexOf(_type_of$3(arg.external_id)) > -1 && [
+        "undefined",
+        "string"
+    ].indexOf(_type_of$3(arg.mfa_serial)) > -1 && (isAssumeRoleWithSourceProfile(arg, {
+        profile: profile,
+        logger: logger
+    }) || isCredentialSourceProfile(arg, {
+        profile: profile,
+        logger: logger
+    }));
+};
+var isAssumeRoleWithSourceProfile = function(arg, param) {
+    var profile = param.profile, logger = param.logger;
+    var withSourceProfile = typeof arg.source_profile === "string" && typeof arg.credential_source === "undefined";
+    if (withSourceProfile) {
+        var _logger_debug;
+        logger === null || logger === void 0 ? void 0 : (_logger_debug = logger.debug) === null || _logger_debug === void 0 ? void 0 : _logger_debug.call(logger, "    ".concat(profile, " isAssumeRoleWithSourceProfile source_profile=").concat(arg.source_profile));
+    }
+    return withSourceProfile;
+};
+var isCredentialSourceProfile = function(arg, param) {
+    var profile = param.profile, logger = param.logger;
+    var withProviderProfile = typeof arg.credential_source === "string" && typeof arg.source_profile === "undefined";
+    if (withProviderProfile) {
+        var _logger_debug;
+        logger === null || logger === void 0 ? void 0 : (_logger_debug = logger.debug) === null || _logger_debug === void 0 ? void 0 : _logger_debug.call(logger, "    ".concat(profile, " isCredentialSourceProfile credential_source=").concat(arg.credential_source));
+    }
+    return withProviderProfile;
+};
+var resolveAssumeRoleCredentials = function() {
+    var _ref = _async_to_generator$9(function(profileName, profiles, options, callerClientConfig) {
+        var visitedProfiles, resolveProfileData, _options_logger, _options_logger1, profileData, source_profile, region, _options_parentClientConfig, getDefaultRoleAssumer, _ref, _profiles_source_profile, sourceCredsProvider, _tmp, params, mfa_serial, sourceCreds;
         var _arguments = arguments;
-        return _ts_generator$8(this, function(_state) {
+        return _ts_generator$9(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    maxContinueTimeoutMs = _arguments.length > 2 && _arguments[2] !== void 0 ? _arguments[2] : MIN_WAIT_TIME;
-                    headers = (_request_headers = request.headers) !== null && _request_headers !== void 0 ? _request_headers : {};
-                    expect = headers["Expect"] || headers["expect"];
-                    timeoutId = -1;
-                    sendBody = true;
-                    if (!(expect === "100-continue")) return [
+                    visitedProfiles = _arguments.length > 4 && _arguments[4] !== void 0 ? _arguments[4] : {}, resolveProfileData = _arguments.length > 5 ? _arguments[5] : void 0;
+                    (_options_logger = options.logger) === null || _options_logger === void 0 ? void 0 : _options_logger.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");
+                    profileData = profiles[profileName];
+                    source_profile = profileData.source_profile, region = profileData.region;
+                    if (!!options.roleAssumer) return [
                         3,
                         2
                     ];
                     return [
                         4,
-                        Promise.race([
-                            new Promise(function(resolve) {
-                                timeoutId = Number(timing.setTimeout(function() {
-                                    return resolve(true);
-                                }, Math.max(MIN_WAIT_TIME, maxContinueTimeoutMs)));
-                            }),
-                            new Promise(function(resolve) {
-                                httpRequest.on("continue", function() {
-                                    timing.clearTimeout(timeoutId);
-                                    resolve(true);
-                                });
-                                httpRequest.on("response", function() {
-                                    timing.clearTimeout(timeoutId);
-                                    resolve(false);
-                                });
-                                httpRequest.on("error", function() {
-                                    timing.clearTimeout(timeoutId);
-                                    resolve(false);
-                                });
-                            })
-                        ])
+                        import('./index.esm5.js')
                     ];
                 case 1:
-                    sendBody = _state.sent();
+                    getDefaultRoleAssumer = _state.sent().getDefaultRoleAssumer;
+                    options.roleAssumer = getDefaultRoleAssumer(_object_spread_props$3(_object_spread$4({}, options.clientConfig), {
+                        credentialProviderLogger: options.logger,
+                        parentClientConfig: _object_spread_props$3(_object_spread$4({}, callerClientConfig, options === null || options === void 0 ? void 0 : options.parentClientConfig), {
+                            region: (_ref = region !== null && region !== void 0 ? region : options === null || options === void 0 ? void 0 : (_options_parentClientConfig = options.parentClientConfig) === null || _options_parentClientConfig === void 0 ? void 0 : _options_parentClientConfig.region) !== null && _ref !== void 0 ? _ref : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.region
+                        })
+                    }), options.clientPlugins);
                     _state.label = 2;
                 case 2:
-                    if (sendBody) {
-                        writeBody(httpRequest, request.body);
+                    if (source_profile && source_profile in visitedProfiles) {
+                        throw new CredentialsProviderError("Detected a cycle attempting to resolve credentials for profile" + " ".concat(getProfileName(options), ". Profiles visited: ") + Object.keys(visitedProfiles).join(", "), {
+                            logger: options.logger
+                        });
+                    }
+                    (_options_logger1 = options.logger) === null || _options_logger1 === void 0 ? void 0 : _options_logger1.debug("@aws-sdk/credential-provider-ini - finding credential resolver using ".concat(source_profile ? "source_profile=[".concat(source_profile, "]") : "profile=[".concat(profileName, "]")));
+                    if (!source_profile) return [
+                        3,
+                        3
+                    ];
+                    _tmp = resolveProfileData(source_profile, profiles, options, callerClientConfig, _object_spread_props$3(_object_spread$4({}, visitedProfiles), _define_property$4({}, source_profile, true)), isCredentialSourceWithoutRoleArn((_profiles_source_profile = profiles[source_profile]) !== null && _profiles_source_profile !== void 0 ? _profiles_source_profile : {}));
+                    return [
+                        3,
+                        5
+                    ];
+                case 3:
+                    return [
+                        4,
+                        resolveCredentialSource(profileData.credential_source, profileName, options.logger)(options)
+                    ];
+                case 4:
+                    _tmp = _state.sent()();
+                    _state.label = 5;
+                case 5:
+                    sourceCredsProvider = _tmp;
+                    if (!isCredentialSourceWithoutRoleArn(profileData)) return [
+                        3,
+                        6
+                    ];
+                    return [
+                        2,
+                        sourceCredsProvider.then(function(creds) {
+                            return setCredentialFeature(creds, "CREDENTIALS_PROFILE_SOURCE_PROFILE", "o");
+                        })
+                    ];
+                case 6:
+                    params = {
+                        RoleArn: profileData.role_arn,
+                        RoleSessionName: profileData.role_session_name || "aws-sdk-js-".concat(Date.now()),
+                        ExternalId: profileData.external_id,
+                        DurationSeconds: parseInt(profileData.duration_seconds || "3600", 10)
+                    };
+                    mfa_serial = profileData.mfa_serial;
+                    if (!mfa_serial) return [
+                        3,
+                        8
+                    ];
+                    if (!options.mfaCodeProvider) {
+                        throw new CredentialsProviderError("Profile ".concat(profileName, " requires multi-factor authentication, but no MFA code callback was provided."), {
+                            logger: options.logger,
+                            tryNextLink: false
+                        });
                     }
+                    params.SerialNumber = mfa_serial;
+                    return [
+                        4,
+                        options.mfaCodeProvider(mfa_serial)
+                    ];
+                case 7:
+                    params.TokenCode = _state.sent();
+                    _state.label = 8;
+                case 8:
+                    return [
+                        4,
+                        sourceCredsProvider
+                    ];
+                case 9:
+                    sourceCreds = _state.sent();
+                    return [
+                        2,
+                        options.roleAssumer(sourceCreds, params).then(function(creds) {
+                            return setCredentialFeature(creds, "CREDENTIALS_PROFILE_SOURCE_PROFILE", "o");
+                        })
+                    ];
+                case 10:
                     return [
                         2
                     ];
             }
         });
     });
-    return _writeRequestBody.apply(this, arguments);
-}
-function writeBody(httpRequest, body) {
-    if (_instanceof$6(body, Readable)) {
-        body.pipe(httpRequest);
-        return;
-    }
-    if (body) {
-        if (Buffer.isBuffer(body) || typeof body === "string") {
-            httpRequest.end(body);
-            return;
-        }
-        var uint8 = body;
-        if ((typeof uint8 === "undefined" ? "undefined" : _type_of$5(uint8)) === "object" && uint8.buffer && typeof uint8.byteOffset === "number" && typeof uint8.byteLength === "number") {
-            httpRequest.end(Buffer.from(uint8.buffer, uint8.byteOffset, uint8.byteLength));
-            return;
-        }
-        httpRequest.end(Buffer.from(body));
-        return;
-    }
-    httpRequest.end();
-}
+    return function resolveAssumeRoleCredentials(profileName, profiles, options, callerClientConfig) {
+        return _ref.apply(this, arguments);
+    };
+}();
+var isCredentialSourceWithoutRoleArn = function(section) {
+    return !section.role_arn && !!section.credential_source;
+};
 
-function asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$8(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -656,27 +593,27 @@ function asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$7(fn) {
+function _async_to_generator$8(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$8(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$8(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _class_call_check$3(instance, Constructor) {
+function _class_call_check(instance, Constructor) {
     if (!(instance instanceof Constructor)) {
         throw new TypeError("Cannot call a class as a function");
     }
 }
-function _defineProperties$2(target, props) {
+function _defineProperties(target, props) {
     for(var i = 0; i < props.length; i++){
         var descriptor = props[i];
         descriptor.enumerable = descriptor.enumerable || false;
@@ -685,9 +622,8 @@ function _defineProperties$2(target, props) {
         Object.defineProperty(target, descriptor.key, descriptor);
     }
 }
-function _create_class$2(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$2(Constructor.prototype, protoProps);
-    if (staticProps) _defineProperties$2(Constructor, staticProps);
+function _create_class(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties(Constructor.prototype, protoProps);
     return Constructor;
 }
 function _define_property$3(obj, key, value) {
@@ -703,14 +639,14 @@ function _define_property$3(obj, key, value) {
     }
     return obj;
 }
-function _instanceof$5(left, right) {
+function _instanceof(left, right) {
     if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
         return !!right[Symbol.hasInstance](left);
     } else {
         return left instanceof right;
     }
 }
-function _object_spread(target) {
+function _object_spread$3(target) {
     for(var i = 1; i < arguments.length; i++){
         var source = arguments[i] != null ? arguments[i] : {};
         var ownKeys = Object.keys(source);
@@ -725,7 +661,7 @@ function _object_spread(target) {
     }
     return target;
 }
-function ownKeys(object, enumerableOnly) {
+function ownKeys$2(object, enumerableOnly) {
     var keys = Object.keys(object);
     if (Object.getOwnPropertySymbols) {
         var symbols = Object.getOwnPropertySymbols(object);
@@ -733,22 +669,18 @@ function ownKeys(object, enumerableOnly) {
     }
     return keys;
 }
-function _object_spread_props(target, source) {
+function _object_spread_props$2(target, source) {
     source = source != null ? source : {};
     if (Object.getOwnPropertyDescriptors) {
         Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
     } else {
-        ownKeys(Object(source)).forEach(function(key) {
+        ownKeys$2(Object(source)).forEach(function(key) {
             Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
         });
     }
     return target;
 }
-function _type_of$4(obj) {
-    "@swc/helpers - typeof";
-    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
-}
-function _ts_generator$7(thisArg, body) {
+function _ts_generator$8(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -843,430 +775,529 @@ function _ts_generator$7(thisArg, body) {
         };
     }
 }
-var NodeHttpHandler = /*#__PURE__*/ function() {
-    function NodeHttpHandler(options) {
-        var _this = this;
-        _class_call_check$3(this, NodeHttpHandler);
-        _define_property$3(this, "config", void 0);
-        _define_property$3(this, "configProvider", void 0);
-        _define_property$3(this, "socketWarningTimestamp", 0);
-        _define_property$3(this, "metadata", {
-            handlerProtocol: "http/1.1"
-        });
-        this.configProvider = new Promise(function(resolve, reject) {
-            if (typeof options === "function") {
-                options().then(function(_options) {
-                    resolve(_this.resolveDefaultConfig(_options));
-                }).catch(reject);
-            } else {
-                resolve(_this.resolveDefaultConfig(options));
-            }
-        });
+var LoginCredentialsFetcher = /*#__PURE__*/ function() {
+    function LoginCredentialsFetcher(profileData, init, callerClientConfig) {
+        _class_call_check(this, LoginCredentialsFetcher);
+        _define_property$3(this, "profileData", void 0);
+        _define_property$3(this, "init", void 0);
+        _define_property$3(this, "callerClientConfig", void 0);
+        this.profileData = profileData;
+        this.init = init;
+        this.callerClientConfig = callerClientConfig;
     }
-    _create_class$2(NodeHttpHandler, [
+    _create_class(LoginCredentialsFetcher, [
         {
-            key: "resolveDefaultConfig",
-            value: function resolveDefaultConfig(options) {
-                var _ref = options || {}, requestTimeout = _ref.requestTimeout, connectionTimeout = _ref.connectionTimeout, socketTimeout = _ref.socketTimeout, socketAcquisitionWarningTimeout = _ref.socketAcquisitionWarningTimeout, httpAgent = _ref.httpAgent, httpsAgent = _ref.httpsAgent, throwOnRequestTimeout = _ref.throwOnRequestTimeout;
-                var keepAlive = true;
-                var maxSockets = 50;
-                return {
-                    connectionTimeout: connectionTimeout,
-                    requestTimeout: requestTimeout,
-                    socketTimeout: socketTimeout,
-                    socketAcquisitionWarningTimeout: socketAcquisitionWarningTimeout,
-                    throwOnRequestTimeout: throwOnRequestTimeout,
-                    httpAgent: function() {
-                        if (_instanceof$5(httpAgent, Agent$1) || typeof (httpAgent === null || httpAgent === void 0 ? void 0 : httpAgent.destroy) === "function") {
-                            return httpAgent;
-                        }
-                        return new Agent$1(_object_spread({
-                            keepAlive: keepAlive,
-                            maxSockets: maxSockets
-                        }, httpAgent));
-                    }(),
-                    httpsAgent: function() {
-                        if (_instanceof$5(httpsAgent, Agent) || typeof (httpsAgent === null || httpsAgent === void 0 ? void 0 : httpsAgent.destroy) === "function") {
-                            return httpsAgent;
+            key: "loadCredentials",
+            value: function loadCredentials() {
+                var _this = this;
+                return _async_to_generator$8(function() {
+                    var token, accessToken, now, expiryTime, timeUntilExpiry;
+                    return _ts_generator$8(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                return [
+                                    4,
+                                    _this.loadToken()
+                                ];
+                            case 1:
+                                token = _state.sent();
+                                if (!token) {
+                                    throw new CredentialsProviderError("Failed to load a token for session ".concat(_this.loginSession, ", please re-authenticate using aws login"), {
+                                        tryNextLink: false,
+                                        logger: _this.logger
+                                    });
+                                }
+                                accessToken = token.accessToken;
+                                now = Date.now();
+                                expiryTime = new Date(accessToken.expiresAt).getTime();
+                                timeUntilExpiry = expiryTime - now;
+                                if (timeUntilExpiry <= LoginCredentialsFetcher.REFRESH_THRESHOLD) {
+                                    return [
+                                        2,
+                                        _this.refresh(token)
+                                    ];
+                                }
+                                return [
+                                    2,
+                                    {
+                                        accessKeyId: accessToken.accessKeyId,
+                                        secretAccessKey: accessToken.secretAccessKey,
+                                        sessionToken: accessToken.sessionToken,
+                                        accountId: accessToken.accountId,
+                                        expiration: new Date(accessToken.expiresAt)
+                                    }
+                                ];
                         }
-                        return new Agent(_object_spread({
-                            keepAlive: keepAlive,
-                            maxSockets: maxSockets
-                        }, httpsAgent));
-                    }(),
-                    logger: console
-                };
+                    });
+                })();
             }
         },
         {
-            key: "destroy",
-            value: function destroy() {
-                var _this_config_httpAgent, _this_config, _this_config_httpsAgent, _this_config1;
-                (_this_config = this.config) === null || _this_config === void 0 ? void 0 : (_this_config_httpAgent = _this_config.httpAgent) === null || _this_config_httpAgent === void 0 ? void 0 : _this_config_httpAgent.destroy();
-                (_this_config1 = this.config) === null || _this_config1 === void 0 ? void 0 : (_this_config_httpsAgent = _this_config1.httpsAgent) === null || _this_config_httpsAgent === void 0 ? void 0 : _this_config_httpsAgent.destroy();
+            key: "logger",
+            get: function get() {
+                var _this_init;
+                return (_this_init = this.init) === null || _this_init === void 0 ? void 0 : _this_init.logger;
             }
         },
         {
-            key: "handle",
-            value: function handle(request$2) {
-                var _ref = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {}, abortSignal = _ref.abortSignal, requestTimeout = _ref.requestTimeout;
+            key: "loginSession",
+            get: function get() {
+                return this.profileData.login_session;
+            }
+        },
+        {
+            key: "refresh",
+            value: function refresh(token) {
                 var _this = this;
-                return _async_to_generator$7(function() {
-                    return _ts_generator$7(this, function(_state) {
+                return _async_to_generator$8(function() {
+                    var _this_callerClientConfig, _this_callerClientConfig1, _this_callerClientConfig_region, _this_callerClientConfig2, _this_init, _ref, SigninClient, CreateOAuth2TokenCommand, _this_callerClientConfig3, _ref1, logger, userAgentAppId, isH2, requestHandler, _this_profileData_region, _ref2, region, _tmp, client, commandInput, _response_tokenOutput, response, _response_tokenOutput_accessToken, _ref3, accessKeyId, secretAccessKey, sessionToken, _response_tokenOutput1, _ref4, refreshToken, expiresIn, expiresInMs, expiration, updatedToken, newAccessToken, error, errorType, message;
+                    return _ts_generator$8(this, function(_state) {
                         switch(_state.label){
                             case 0:
-                                if (!!_this.config) return [
+                                return [
+                                    4,
+                                    import('./index.esm11.js')
+                                ];
+                            case 1:
+                                _ref = _state.sent(), SigninClient = _ref.SigninClient, CreateOAuth2TokenCommand = _ref.CreateOAuth2TokenCommand;
+                                _ref1 = (_this_callerClientConfig3 = _this.callerClientConfig) !== null && _this_callerClientConfig3 !== void 0 ? _this_callerClientConfig3 : {}, logger = _ref1.logger, userAgentAppId = _ref1.userAgentAppId;
+                                isH2 = function(requestHandler) {
+                                    var _requestHandler_metadata;
+                                    return (requestHandler === null || requestHandler === void 0 ? void 0 : (_requestHandler_metadata = requestHandler.metadata) === null || _requestHandler_metadata === void 0 ? void 0 : _requestHandler_metadata.handlerProtocol) === "h2";
+                                };
+                                requestHandler = isH2((_this_callerClientConfig = _this.callerClientConfig) === null || _this_callerClientConfig === void 0 ? void 0 : _this_callerClientConfig.requestHandler) ? undefined : (_this_callerClientConfig1 = _this.callerClientConfig) === null || _this_callerClientConfig1 === void 0 ? void 0 : _this_callerClientConfig1.requestHandler;
+                                if (!((_this_profileData_region = _this.profileData.region) !== null && _this_profileData_region !== void 0)) return [
                                     3,
                                     2
                                 ];
+                                _tmp = _this_profileData_region;
+                                return [
+                                    3,
+                                    4
+                                ];
+                            case 2:
+                                return [
+                                    4,
+                                    (_this_callerClientConfig2 = _this.callerClientConfig) === null || _this_callerClientConfig2 === void 0 ? void 0 : (_this_callerClientConfig_region = _this_callerClientConfig2.region) === null || _this_callerClientConfig_region === void 0 ? void 0 : _this_callerClientConfig_region.call(_this_callerClientConfig2)
+                                ];
+                            case 3:
+                                _tmp = _state.sent();
+                                _state.label = 4;
+                            case 4:
+                                region = (_ref2 = _tmp) !== null && _ref2 !== void 0 ? _ref2 : process.env.AWS_REGION;
+                                client = new SigninClient(_object_spread$3({
+                                    credentials: {
+                                        accessKeyId: "",
+                                        secretAccessKey: ""
+                                    },
+                                    region: region,
+                                    requestHandler: requestHandler,
+                                    logger: logger,
+                                    userAgentAppId: userAgentAppId
+                                }, (_this_init = _this.init) === null || _this_init === void 0 ? void 0 : _this_init.clientConfig));
+                                _this.createDPoPInterceptor(client.middlewareStack);
+                                commandInput = {
+                                    tokenInput: {
+                                        clientId: token.clientId,
+                                        refreshToken: token.refreshToken,
+                                        grantType: "refresh_token"
+                                    }
+                                };
+                                _state.label = 5;
+                            case 5:
+                                _state.trys.push([
+                                    5,
+                                    8,
+                                    ,
+                                    9
+                                ]);
+                                return [
+                                    4,
+                                    client.send(new CreateOAuth2TokenCommand(commandInput))
+                                ];
+                            case 6:
+                                response = _state.sent();
+                                _ref3 = (_response_tokenOutput_accessToken = (_response_tokenOutput = response.tokenOutput) === null || _response_tokenOutput === void 0 ? void 0 : _response_tokenOutput.accessToken) !== null && _response_tokenOutput_accessToken !== void 0 ? _response_tokenOutput_accessToken : {}, accessKeyId = _ref3.accessKeyId, secretAccessKey = _ref3.secretAccessKey, sessionToken = _ref3.sessionToken;
+                                _ref4 = (_response_tokenOutput1 = response.tokenOutput) !== null && _response_tokenOutput1 !== void 0 ? _response_tokenOutput1 : {}, refreshToken = _ref4.refreshToken, expiresIn = _ref4.expiresIn;
+                                if (!accessKeyId || !secretAccessKey || !sessionToken || !refreshToken) {
+                                    throw new CredentialsProviderError("Token refresh response missing required fields", {
+                                        logger: _this.logger,
+                                        tryNextLink: false
+                                    });
+                                }
+                                expiresInMs = (expiresIn !== null && expiresIn !== void 0 ? expiresIn : 900) * 1000;
+                                expiration = new Date(Date.now() + expiresInMs);
+                                updatedToken = _object_spread_props$2(_object_spread$3({}, token), {
+                                    accessToken: _object_spread_props$2(_object_spread$3({}, token.accessToken), {
+                                        accessKeyId: accessKeyId,
+                                        secretAccessKey: secretAccessKey,
+                                        sessionToken: sessionToken,
+                                        expiresAt: expiration.toISOString()
+                                    }),
+                                    refreshToken: refreshToken
+                                });
                                 return [
                                     4,
-                                    _this.configProvider
+                                    _this.saveToken(updatedToken)
+                                ];
+                            case 7:
+                                _state.sent();
+                                newAccessToken = updatedToken.accessToken;
+                                return [
+                                    2,
+                                    {
+                                        accessKeyId: newAccessToken.accessKeyId,
+                                        secretAccessKey: newAccessToken.secretAccessKey,
+                                        sessionToken: newAccessToken.sessionToken,
+                                        accountId: newAccessToken.accountId,
+                                        expiration: expiration
+                                    }
+                                ];
+                            case 8:
+                                error = _state.sent();
+                                if (error.name === "AccessDeniedException") {
+                                    errorType = error.error;
+                                    switch(errorType){
+                                        case "TOKEN_EXPIRED":
+                                            message = "Your session has expired. Please reauthenticate.";
+                                            break;
+                                        case "USER_CREDENTIALS_CHANGED":
+                                            message = "Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";
+                                            break;
+                                        case "INSUFFICIENT_PERMISSIONS":
+                                            message = "Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";
+                                            break;
+                                        default:
+                                            message = "Failed to refresh token: ".concat(String(error), ". Please re-authenticate using `aws login`");
+                                    }
+                                    throw new CredentialsProviderError(message, {
+                                        logger: _this.logger,
+                                        tryNextLink: false
+                                    });
+                                }
+                                throw new CredentialsProviderError("Failed to refresh token: ".concat(String(error), ". Please re-authenticate using aws login"), {
+                                    logger: _this.logger
+                                });
+                            case 9:
+                                return [
+                                    2
                                 ];
+                        }
+                    });
+                })();
+            }
+        },
+        {
+            key: "loadToken",
+            value: function loadToken() {
+                var _this = this;
+                return _async_to_generator$8(function() {
+                    var tokenFilePath, _token_accessToken, tokenData, _this_init, token, missingFields, error;
+                    return _ts_generator$8(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                tokenFilePath = _this.getTokenFilePath();
+                                _state.label = 1;
                             case 1:
-                                _this.config = _state.sent();
+                                _state.trys.push([
+                                    1,
+                                    7,
+                                    ,
+                                    8
+                                ]);
                                 _state.label = 2;
                             case 2:
-                                return [
+                                _state.trys.push([
                                     2,
-                                    new Promise(function(_resolve, _reject) {
-                                        var writeRequestBodyPromise = undefined;
-                                        var timeouts = [];
-                                        var resolve = function() {
-                                            var _ref = _async_to_generator$7(function(arg) {
-                                                return _ts_generator$7(this, function(_state) {
-                                                    switch(_state.label){
-                                                        case 0:
-                                                            return [
-                                                                4,
-                                                                writeRequestBodyPromise
-                                                            ];
-                                                        case 1:
-                                                            _state.sent();
-                                                            timeouts.forEach(timing.clearTimeout);
-                                                            _resolve(arg);
-                                                            return [
-                                                                2
-                                                            ];
-                                                    }
-                                                });
-                                            });
-                                            return function resolve(arg) {
-                                                return _ref.apply(this, arguments);
-                                            };
-                                        }();
-                                        var reject = function() {
-                                            var _ref = _async_to_generator$7(function(arg) {
-                                                return _ts_generator$7(this, function(_state) {
-                                                    switch(_state.label){
-                                                        case 0:
-                                                            return [
-                                                                4,
-                                                                writeRequestBodyPromise
-                                                            ];
-                                                        case 1:
-                                                            _state.sent();
-                                                            timeouts.forEach(timing.clearTimeout);
-                                                            _reject(arg);
-                                                            return [
-                                                                2
-                                                            ];
-                                                    }
-                                                });
-                                            });
-                                            return function reject(arg) {
-                                                return _ref.apply(this, arguments);
-                                            };
-                                        }();
-                                        if (!_this.config) {
-                                            throw new Error("Node HTTP request handler config is not resolved");
-                                        }
-                                        if (abortSignal === null || abortSignal === void 0 ? void 0 : abortSignal.aborted) {
-                                            var abortError = new Error("Request aborted");
-                                            abortError.name = "AbortError";
-                                            reject(abortError);
-                                            return;
-                                        }
-                                        var isSSL = request$2.protocol === "https:";
-                                        var agent = isSSL ? _this.config.httpsAgent : _this.config.httpAgent;
-                                        var _this_config_requestTimeout, _this_config_connectionTimeout, _this_config_socketAcquisitionWarningTimeout;
-                                        timeouts.push(timing.setTimeout(function() {
-                                            _this.socketWarningTimestamp = NodeHttpHandler.checkSocketUsage(agent, _this.socketWarningTimestamp, _this.config.logger);
-                                        }, (_this_config_socketAcquisitionWarningTimeout = _this.config.socketAcquisitionWarningTimeout) !== null && _this_config_socketAcquisitionWarningTimeout !== void 0 ? _this_config_socketAcquisitionWarningTimeout : ((_this_config_requestTimeout = _this.config.requestTimeout) !== null && _this_config_requestTimeout !== void 0 ? _this_config_requestTimeout : 2000) + ((_this_config_connectionTimeout = _this.config.connectionTimeout) !== null && _this_config_connectionTimeout !== void 0 ? _this_config_connectionTimeout : 1000)));
-                                        var queryString = buildQueryString(request$2.query || {});
-                                        var auth = undefined;
-                                        if (request$2.username != null || request$2.password != null) {
-                                            var _request_username;
-                                            var username = (_request_username = request$2.username) !== null && _request_username !== void 0 ? _request_username : "";
-                                            var _request_password;
-                                            var password = (_request_password = request$2.password) !== null && _request_password !== void 0 ? _request_password : "";
-                                            auth = "".concat(username, ":").concat(password);
-                                        }
-                                        var path = request$2.path;
-                                        if (queryString) {
-                                            path += "?".concat(queryString);
-                                        }
-                                        if (request$2.fragment) {
-                                            path += "#".concat(request$2.fragment);
-                                        }
-                                        var _request_hostname;
-                                        var hostname = (_request_hostname = request$2.hostname) !== null && _request_hostname !== void 0 ? _request_hostname : "";
-                                        if (hostname[0] === "[" && hostname.endsWith("]")) {
-                                            hostname = request$2.hostname.slice(1, -1);
-                                        } else {
-                                            hostname = request$2.hostname;
-                                        }
-                                        var nodeHttpsOptions = {
-                                            headers: request$2.headers,
-                                            host: hostname,
-                                            method: request$2.method,
-                                            path: path,
-                                            port: request$2.port,
-                                            agent: agent,
-                                            auth: auth
-                                        };
-                                        var requestFunc = isSSL ? request : request$1;
-                                        var req = requestFunc(nodeHttpsOptions, function(res) {
-                                            var httpResponse = new HttpResponse({
-                                                statusCode: res.statusCode || -1,
-                                                reason: res.statusMessage,
-                                                headers: getTransformedHeaders(res.headers),
-                                                body: res
-                                            });
-                                            resolve({
-                                                response: httpResponse
-                                            });
-                                        });
-                                        req.on("error", function(err) {
-                                            if (NODEJS_TIMEOUT_ERROR_CODES.includes(err.code)) {
-                                                reject(Object.assign(err, {
-                                                    name: "TimeoutError"
-                                                }));
-                                            } else {
-                                                reject(err);
-                                            }
-                                        });
-                                        if (abortSignal) {
-                                            var onAbort = function() {
-                                                req.destroy();
-                                                var abortError = new Error("Request aborted");
-                                                abortError.name = "AbortError";
-                                                reject(abortError);
-                                            };
-                                            if (typeof abortSignal.addEventListener === "function") {
-                                                var signal = abortSignal;
-                                                signal.addEventListener("abort", onAbort, {
-                                                    once: true
-                                                });
-                                                req.once("close", function() {
-                                                    return signal.removeEventListener("abort", onAbort);
-                                                });
-                                            } else {
-                                                abortSignal.onabort = onAbort;
-                                            }
-                                        }
-                                        var effectiveRequestTimeout = requestTimeout !== null && requestTimeout !== void 0 ? requestTimeout : _this.config.requestTimeout;
-                                        timeouts.push(setConnectionTimeout(req, reject, _this.config.connectionTimeout));
-                                        var _this_config_logger;
-                                        timeouts.push(setRequestTimeout(req, reject, effectiveRequestTimeout, _this.config.throwOnRequestTimeout, (_this_config_logger = _this.config.logger) !== null && _this_config_logger !== void 0 ? _this_config_logger : console));
-                                        timeouts.push(setSocketTimeout(req, reject, _this.config.socketTimeout));
-                                        var httpAgent = nodeHttpsOptions.agent;
-                                        if ((typeof httpAgent === "undefined" ? "undefined" : _type_of$4(httpAgent)) === "object" && "keepAlive" in httpAgent) {
-                                            timeouts.push(setSocketKeepAlive(req, {
-                                                keepAlive: httpAgent.keepAlive,
-                                                keepAliveMsecs: httpAgent.keepAliveMsecs
-                                            }));
-                                        }
-                                        writeRequestBodyPromise = writeRequestBody(req, request$2, effectiveRequestTimeout).catch(function(e) {
-                                            timeouts.forEach(timing.clearTimeout);
-                                            return _reject(e);
-                                        });
+                                    4,
+                                    ,
+                                    6
+                                ]);
+                                return [
+                                    4,
+                                    readFile(tokenFilePath, {
+                                        ignoreCache: (_this_init = _this.init) === null || _this_init === void 0 ? void 0 : _this_init.ignoreCache
                                     })
                                 ];
+                            case 3:
+                                tokenData = _state.sent();
+                                return [
+                                    3,
+                                    6
+                                ];
+                            case 4:
+                                _state.sent();
+                                return [
+                                    4,
+                                    promises.readFile(tokenFilePath, "utf8")
+                                ];
+                            case 5:
+                                tokenData = _state.sent();
+                                return [
+                                    3,
+                                    6
+                                ];
+                            case 6:
+                                token = JSON.parse(tokenData);
+                                missingFields = [
+                                    "accessToken",
+                                    "clientId",
+                                    "refreshToken",
+                                    "dpopKey"
+                                ].filter(function(k) {
+                                    return !token[k];
+                                });
+                                if (!((_token_accessToken = token.accessToken) === null || _token_accessToken === void 0 ? void 0 : _token_accessToken.accountId)) {
+                                    missingFields.push("accountId");
+                                }
+                                if (missingFields.length > 0) {
+                                    throw new CredentialsProviderError("Token validation failed, missing fields: ".concat(missingFields.join(", ")), {
+                                        logger: _this.logger,
+                                        tryNextLink: false
+                                    });
+                                }
+                                return [
+                                    2,
+                                    token
+                                ];
+                            case 7:
+                                error = _state.sent();
+                                throw new CredentialsProviderError("Failed to load token from ".concat(tokenFilePath, ": ").concat(String(error)), {
+                                    logger: _this.logger,
+                                    tryNextLink: false
+                                });
+                            case 8:
+                                return [
+                                    2
+                                ];
                         }
                     });
                 })();
             }
         },
         {
-            key: "updateHttpClientConfig",
-            value: function updateHttpClientConfig(key, value) {
-                this.config = undefined;
-                this.configProvider = this.configProvider.then(function(config) {
-                    return _object_spread_props(_object_spread({}, config), _define_property$3({}, key, value));
-                });
+            key: "saveToken",
+            value: function saveToken(token) {
+                var _this = this;
+                return _async_to_generator$8(function() {
+                    var tokenFilePath, directory;
+                    return _ts_generator$8(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                tokenFilePath = _this.getTokenFilePath();
+                                directory = dirname(tokenFilePath);
+                                _state.label = 1;
+                            case 1:
+                                _state.trys.push([
+                                    1,
+                                    3,
+                                    ,
+                                    4
+                                ]);
+                                return [
+                                    4,
+                                    promises.mkdir(directory, {
+                                        recursive: true
+                                    })
+                                ];
+                            case 2:
+                                _state.sent();
+                                return [
+                                    3,
+                                    4
+                                ];
+                            case 3:
+                                _state.sent();
+                                return [
+                                    3,
+                                    4
+                                ];
+                            case 4:
+                                return [
+                                    4,
+                                    promises.writeFile(tokenFilePath, JSON.stringify(token, null, 2), "utf8")
+                                ];
+                            case 5:
+                                _state.sent();
+                                return [
+                                    2
+                                ];
+                        }
+                    });
+                })();
             }
         },
         {
-            key: "httpHandlerConfigs",
-            value: function httpHandlerConfigs() {
-                var _this_config;
-                return (_this_config = this.config) !== null && _this_config !== void 0 ? _this_config : {};
-            }
-        }
-    ], [
-        {
-            key: "create",
-            value: function create(instanceOrOptions) {
-                if (typeof (instanceOrOptions === null || instanceOrOptions === void 0 ? void 0 : instanceOrOptions.handle) === "function") {
-                    return instanceOrOptions;
-                }
-                return new NodeHttpHandler(instanceOrOptions);
+            key: "getTokenFilePath",
+            value: function getTokenFilePath() {
+                var _process_env_AWS_LOGIN_CACHE_DIRECTORY;
+                var directory = (_process_env_AWS_LOGIN_CACHE_DIRECTORY = process.env.AWS_LOGIN_CACHE_DIRECTORY) !== null && _process_env_AWS_LOGIN_CACHE_DIRECTORY !== void 0 ? _process_env_AWS_LOGIN_CACHE_DIRECTORY : join(homedir(), ".aws", "login", "cache");
+                var loginSessionBytes = Buffer.from(this.loginSession, "utf8");
+                var loginSessionSha256 = createHash("sha256").update(loginSessionBytes).digest("hex");
+                return join(directory, "".concat(loginSessionSha256, ".json"));
             }
         },
         {
-            key: "checkSocketUsage",
-            value: function checkSocketUsage(agent, socketWarningTimestamp) {
-                var logger = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : console;
-                var sockets = agent.sockets, requests = agent.requests, maxSockets = agent.maxSockets;
-                if (typeof maxSockets !== "number" || maxSockets === Infinity) {
-                    return socketWarningTimestamp;
+            key: "derToRawSignature",
+            value: function derToRawSignature(derSignature) {
+                var offset = 2;
+                if (derSignature[offset] !== 0x02) {
+                    throw new Error("Invalid DER signature");
                 }
-                var interval = 15000;
-                if (Date.now() - interval < socketWarningTimestamp) {
-                    return socketWarningTimestamp;
+                offset++;
+                var rLength = derSignature[offset++];
+                var r = derSignature.subarray(offset, offset + rLength);
+                offset += rLength;
+                if (derSignature[offset] !== 0x02) {
+                    throw new Error("Invalid DER signature");
                 }
-                if (sockets && requests) {
-                    for(var origin in sockets){
-                        var _sockets_origin, _requests_origin;
-                        var _sockets_origin_length;
-                        var socketsInUse = (_sockets_origin_length = (_sockets_origin = sockets[origin]) === null || _sockets_origin === void 0 ? void 0 : _sockets_origin.length) !== null && _sockets_origin_length !== void 0 ? _sockets_origin_length : 0;
-                        var _requests_origin_length;
-                        var requestsEnqueued = (_requests_origin_length = (_requests_origin = requests[origin]) === null || _requests_origin === void 0 ? void 0 : _requests_origin.length) !== null && _requests_origin_length !== void 0 ? _requests_origin_length : 0;
-                        if (socketsInUse >= maxSockets && requestsEnqueued >= 2 * maxSockets) {
-                            var _logger_warn;
-                            logger === null || logger === void 0 ? void 0 : (_logger_warn = logger.warn) === null || _logger_warn === void 0 ? void 0 : _logger_warn.call(logger, "@smithy/node-http-handler:WARN - socket usage at capacity=".concat(socketsInUse, " and ").concat(requestsEnqueued, " additional requests are enqueued.\nSee https://docs.aws.amazon.com/sdk-for-javascript/v3/developer-guide/node-configuring-maxsockets.html\nor increase socketAcquisitionWarningTimeout=(millis) in the NodeHttpHandler config."));
-                            return Date.now();
-                        }
-                    }
-                }
-                return socketWarningTimestamp;
+                offset++;
+                var sLength = derSignature[offset++];
+                var s = derSignature.subarray(offset, offset + sLength);
+                r = r[0] === 0x00 ? r.subarray(1) : r;
+                s = s[0] === 0x00 ? s.subarray(1) : s;
+                var rPadded = Buffer.concat([
+                    Buffer.alloc(32 - r.length),
+                    r
+                ]);
+                var sPadded = Buffer.concat([
+                    Buffer.alloc(32 - s.length),
+                    s
+                ]);
+                return Buffer.concat([
+                    rPadded,
+                    sPadded
+                ]);
             }
-        }
-    ]);
-    return NodeHttpHandler;
-}();
-
-function _assert_this_initialized$2(self) {
-    if (self === void 0) {
-        throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
-    }
-    return self;
-}
-function _class_call_check$2(instance, Constructor) {
-    if (!(instance instanceof Constructor)) {
-        throw new TypeError("Cannot call a class as a function");
-    }
-}
-function _defineProperties$1(target, props) {
-    for(var i = 0; i < props.length; i++){
-        var descriptor = props[i];
-        descriptor.enumerable = descriptor.enumerable || false;
-        descriptor.configurable = true;
-        if ("value" in descriptor) descriptor.writable = true;
-        Object.defineProperty(target, descriptor.key, descriptor);
-    }
-}
-function _create_class$1(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties$1(Constructor.prototype, protoProps);
-    return Constructor;
-}
-function _define_property$2(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _get_prototype_of$2(o) {
-    _get_prototype_of$2 = Object.setPrototypeOf ? Object.getPrototypeOf : function getPrototypeOf(o) {
-        return o.__proto__ || Object.getPrototypeOf(o);
-    };
-    return _get_prototype_of$2(o);
-}
-function _inherits$2(subClass, superClass) {
-    if (typeof superClass !== "function" && superClass !== null) {
-        throw new TypeError("Super expression must either be null or a function");
-    }
-    subClass.prototype = Object.create(superClass && superClass.prototype, {
-        constructor: {
-            value: subClass,
-            writable: true,
-            configurable: true
-        }
-    });
-    if (superClass) _set_prototype_of$2(subClass, superClass);
-}
-function _possible_constructor_return$2(self, call) {
-    if (call && (_type_of$3(call) === "object" || typeof call === "function")) {
-        return call;
-    }
-    return _assert_this_initialized$2(self);
-}
-function _set_prototype_of$2(o, p) {
-    _set_prototype_of$2 = Object.setPrototypeOf || function setPrototypeOf(o, p) {
-        o.__proto__ = p;
-        return o;
-    };
-    return _set_prototype_of$2(o, p);
-}
-function _type_of$3(obj) {
-    "@swc/helpers - typeof";
-    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
-}
-function _is_native_reflect_construct$2() {
-    if (typeof Reflect === "undefined" || !Reflect.construct) return false;
-    if (Reflect.construct.sham) return false;
-    if (typeof Proxy === "function") return true;
-    try {
-        Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function() {}));
-        return true;
-    } catch (e) {
-        return false;
-    }
-}
-function _create_super$2(Derived) {
-    var hasNativeReflectConstruct = _is_native_reflect_construct$2();
-    return function _createSuperInternal() {
-        var Super = _get_prototype_of$2(Derived), result;
-        if (hasNativeReflectConstruct) {
-            var NewTarget = _get_prototype_of$2(this).constructor;
-            result = Reflect.construct(Super, arguments, NewTarget);
-        } else {
-            result = Super.apply(this, arguments);
-        }
-        return _possible_constructor_return$2(this, result);
-    };
-}
-var Collector = /*#__PURE__*/ function(Writable) {
-    _inherits$2(Collector, Writable);
-    var _super = _create_super$2(Collector);
-    function Collector() {
-        _class_call_check$2(this, Collector);
-        var _this;
-        _this = _super.apply(this, arguments);
-        _define_property$2(_assert_this_initialized$2(_this), "bufferedBytes", []);
-        return _this;
-    }
-    _create_class$1(Collector, [
+        },
+        {
+            key: "createDPoPInterceptor",
+            value: function createDPoPInterceptor(middlewareStack) {
+                var _this = this;
+                middlewareStack.add(function(next) {
+                    return function() {
+                        var _ref = _async_to_generator$8(function(args) {
+                            var request, actualEndpoint, dpop;
+                            return _ts_generator$8(this, function(_state) {
+                                switch(_state.label){
+                                    case 0:
+                                        if (!HttpRequest.isInstance(args.request)) return [
+                                            3,
+                                            2
+                                        ];
+                                        request = args.request;
+                                        actualEndpoint = "".concat(request.protocol, "//").concat(request.hostname).concat(request.port ? ":".concat(request.port) : "").concat(request.path);
+                                        return [
+                                            4,
+                                            _this.generateDpop(request.method, actualEndpoint)
+                                        ];
+                                    case 1:
+                                        dpop = _state.sent();
+                                        request.headers = _object_spread_props$2(_object_spread$3({}, request.headers), {
+                                            DPoP: dpop
+                                        });
+                                        _state.label = 2;
+                                    case 2:
+                                        return [
+                                            2,
+                                            next(args)
+                                        ];
+                                }
+                            });
+                        });
+                        return function(args) {
+                            return _ref.apply(this, arguments);
+                        };
+                    }();
+                }, {
+                    step: "finalizeRequest",
+                    name: "dpopInterceptor",
+                    override: true
+                });
+            }
+        },
         {
-            key: "_write",
-            value: function _write(chunk, encoding, callback) {
-                this.bufferedBytes.push(chunk);
-                callback();
+            key: "generateDpop",
+            value: function generateDpop() {
+                var method = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : "POST", endpoint = arguments.length > 1 ? arguments[1] : void 0;
+                var _this = this;
+                return _async_to_generator$8(function() {
+                    var token, privateKey, publicKey, publicDer, pointStart, i, x, y, header, payload, headerB64, payloadB64, message, asn1Signature, rawSignature, signatureB64;
+                    return _ts_generator$8(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                return [
+                                    4,
+                                    _this.loadToken()
+                                ];
+                            case 1:
+                                token = _state.sent();
+                                try {
+                                    privateKey = createPrivateKey({
+                                        key: token.dpopKey,
+                                        format: "pem",
+                                        type: "sec1"
+                                    });
+                                    publicKey = createPublicKey(privateKey);
+                                    publicDer = publicKey.export({
+                                        format: "der",
+                                        type: "spki"
+                                    });
+                                    pointStart = -1;
+                                    for(i = 0; i < publicDer.length; i++){
+                                        if (publicDer[i] === 0x04) {
+                                            pointStart = i;
+                                            break;
+                                        }
+                                    }
+                                    x = publicDer.slice(pointStart + 1, pointStart + 33);
+                                    y = publicDer.slice(pointStart + 33, pointStart + 65);
+                                    header = {
+                                        alg: "ES256",
+                                        typ: "dpop+jwt",
+                                        jwk: {
+                                            kty: "EC",
+                                            crv: "P-256",
+                                            x: x.toString("base64url"),
+                                            y: y.toString("base64url")
+                                        }
+                                    };
+                                    payload = {
+                                        jti: crypto.randomUUID(),
+                                        htm: method,
+                                        htu: endpoint,
+                                        iat: Math.floor(Date.now() / 1000)
+                                    };
+                                    headerB64 = Buffer.from(JSON.stringify(header)).toString("base64url");
+                                    payloadB64 = Buffer.from(JSON.stringify(payload)).toString("base64url");
+                                    message = "".concat(headerB64, ".").concat(payloadB64);
+                                    asn1Signature = sign("sha256", Buffer.from(message), privateKey);
+                                    rawSignature = _this.derToRawSignature(asn1Signature);
+                                    signatureB64 = rawSignature.toString("base64url");
+                                    return [
+                                        2,
+                                        "".concat(message, ".").concat(signatureB64)
+                                    ];
+                                } catch (error) {
+                                    throw new CredentialsProviderError("Failed to generate Dpop proof: ".concat(_instanceof(error, Error) ? error.message : String(error)), {
+                                        logger: _this.logger,
+                                        tryNextLink: false
+                                    });
+                                }
+                                return [
+                                    2
+                                ];
+                        }
+                    });
+                })();
             }
         }
     ]);
-    return Collector;
-}(Writable);
+    return LoginCredentialsFetcher;
+}();
+_define_property$3(LoginCredentialsFetcher, "REFRESH_THRESHOLD", 5 * 60 * 1000);
 
-function asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -1280,29 +1311,22 @@ function asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$6(fn) {
+function _async_to_generator$7(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _instanceof$4(left, right) {
-    if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
-        return !!right[Symbol.hasInstance](left);
-    } else {
-        return left instanceof right;
-    }
-}
-function _ts_generator$6(thisArg, body) {
+function _ts_generator$7(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -1397,288 +1421,77 @@ function _ts_generator$6(thisArg, body) {
         };
     }
 }
-var streamCollector$1 = function(stream) {
-    if (isReadableStreamInstance(stream)) {
-        return collectReadableStream(stream);
-    }
-    return new Promise(function(resolve, reject) {
-        var collector = new Collector();
-        stream.pipe(collector);
-        stream.on("error", function(err) {
-            collector.end();
-            reject(err);
-        });
-        collector.on("error", reject);
-        collector.on("finish", function() {
-            var bytes = new Uint8Array(Buffer.concat(this.bufferedBytes));
-            resolve(bytes);
-        });
-    });
-};
-var isReadableStreamInstance = function(stream) {
-    return typeof ReadableStream === "function" && _instanceof$4(stream, ReadableStream);
-};
-function collectReadableStream(stream) {
-    return _collectReadableStream.apply(this, arguments);
-}
-function _collectReadableStream() {
-    _collectReadableStream = _async_to_generator$6(function(stream) {
-        var chunks, reader, isDone, length, _ref, done, value, collected, offset, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, chunk;
-        return _ts_generator$6(this, function(_state) {
+var fromLoginCredentials = function(init) {
+    return /*#__PURE__*/ _async_to_generator$7(function() {
+        var callerClientConfig, _init_logger_debug, _init_logger, profiles, _init_profile, profileName, profile, fetcher, credentials;
+        var _arguments = arguments;
+        return _ts_generator$7(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    chunks = [];
-                    reader = stream.getReader();
-                    isDone = false;
-                    length = 0;
-                    _state.label = 1;
-                case 1:
-                    if (!!isDone) return [
-                        3,
-                        3
-                    ];
+                    callerClientConfig = (_arguments.length > 0 && _arguments[0] !== void 0 ? _arguments[0] : {}).callerClientConfig;
+                    init === null || init === void 0 ? void 0 : (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : (_init_logger_debug = _init_logger.debug) === null || _init_logger_debug === void 0 ? void 0 : _init_logger_debug.call(_init_logger, "@aws-sdk/credential-providers - fromLoginCredentials");
                     return [
                         4,
-                        reader.read()
+                        parseKnownFiles(init || {})
                     ];
-                case 2:
-                    _ref = _state.sent(), done = _ref.done, value = _ref.value;
-                    if (value) {
-                        chunks.push(value);
-                        length += value.length;
+                case 1:
+                    profiles = _state.sent();
+                    profileName = getProfileName({
+                        profile: (_init_profile = init === null || init === void 0 ? void 0 : init.profile) !== null && _init_profile !== void 0 ? _init_profile : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.profile
+                    });
+                    profile = profiles[profileName];
+                    if (!(profile === null || profile === void 0 ? void 0 : profile.login_session)) {
+                        throw new CredentialsProviderError("Profile ".concat(profileName, " does not contain login_session."), {
+                            tryNextLink: true,
+                            logger: init === null || init === void 0 ? void 0 : init.logger
+                        });
                     }
-                    isDone = done;
+                    fetcher = new LoginCredentialsFetcher(profile, init, callerClientConfig);
                     return [
-                        3,
-                        1
+                        4,
+                        fetcher.loadCredentials()
                     ];
-                case 3:
-                    collected = new Uint8Array(length);
-                    offset = 0;
-                    _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
-                    try {
-                        for(_iterator = chunks[Symbol.iterator](); !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
-                            chunk = _step.value;
-                            collected.set(chunk, offset);
-                            offset += chunk.length;
-                        }
-                    } catch (err) {
-                        _didIteratorError = true;
-                        _iteratorError = err;
-                    } finally{
-                        try {
-                            if (!_iteratorNormalCompletion && _iterator.return != null) {
-                                _iterator.return();
-                            }
-                        } finally{
-                            if (_didIteratorError) {
-                                throw _iteratorError;
-                            }
-                        }
-                    }
+                case 2:
+                    credentials = _state.sent();
                     return [
                         2,
-                        collected
+                        setCredentialFeature(credentials, "CREDENTIALS_LOGIN", "AD")
                     ];
             }
         });
     });
-    return _collectReadableStream.apply(this, arguments);
-}
+};
 
-function _assert_this_initialized$1(self) {
-    if (self === void 0) {
-        throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
-    }
-    return self;
-}
-function _class_call_check$1(instance, Constructor) {
-    if (!(instance instanceof Constructor)) {
-        throw new TypeError("Cannot call a class as a function");
-    }
-}
-function _construct(Parent, args, Class) {
-    if (_is_native_reflect_construct$1()) {
-        _construct = Reflect.construct;
-    } else {
-        _construct = function construct(Parent, args, Class) {
-            var a = [
-                null
-            ];
-            a.push.apply(a, args);
-            var Constructor = Function.bind.apply(Parent, a);
-            var instance = new Constructor();
-            if (Class) _set_prototype_of$1(instance, Class.prototype);
-            return instance;
-        };
-    }
-    return _construct.apply(null, arguments);
-}
-function _defineProperties(target, props) {
-    for(var i = 0; i < props.length; i++){
-        var descriptor = props[i];
-        descriptor.enumerable = descriptor.enumerable || false;
-        descriptor.configurable = true;
-        if ("value" in descriptor) descriptor.writable = true;
-        Object.defineProperty(target, descriptor.key, descriptor);
+function asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
     }
-}
-function _create_class(Constructor, protoProps, staticProps) {
-    if (staticProps) _defineProperties(Constructor, staticProps);
-    return Constructor;
-}
-function _define_property$1(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
+    if (info.done) {
+        resolve(value);
     } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _get_prototype_of$1(o) {
-    _get_prototype_of$1 = Object.setPrototypeOf ? Object.getPrototypeOf : function getPrototypeOf(o) {
-        return o.__proto__ || Object.getPrototypeOf(o);
-    };
-    return _get_prototype_of$1(o);
-}
-function _inherits$1(subClass, superClass) {
-    if (typeof superClass !== "function" && superClass !== null) {
-        throw new TypeError("Super expression must either be null or a function");
-    }
-    subClass.prototype = Object.create(superClass && superClass.prototype, {
-        constructor: {
-            value: subClass,
-            writable: true,
-            configurable: true
-        }
-    });
-    if (superClass) _set_prototype_of$1(subClass, superClass);
-}
-function _is_native_function(fn) {
-    return Function.toString.call(fn).indexOf("[native code]") !== -1;
-}
-function _possible_constructor_return$1(self, call) {
-    if (call && (_type_of$2(call) === "object" || typeof call === "function")) {
-        return call;
+        Promise.resolve(value).then(_next, _throw);
     }
-    return _assert_this_initialized$1(self);
-}
-function _set_prototype_of$1(o, p) {
-    _set_prototype_of$1 = Object.setPrototypeOf || function setPrototypeOf(o, p) {
-        o.__proto__ = p;
-        return o;
-    };
-    return _set_prototype_of$1(o, p);
-}
-function _type_of$2(obj) {
-    "@swc/helpers - typeof";
-    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
-function _wrap_native_super(Class) {
-    var _cache = typeof Map === "function" ? new Map() : undefined;
-    _wrap_native_super = function wrapNativeSuper(Class) {
-        if (Class === null || !_is_native_function(Class)) return Class;
-        if (typeof Class !== "function") {
-            throw new TypeError("Super expression must either be null or a function");
-        }
-        if (typeof _cache !== "undefined") {
-            if (_cache.has(Class)) return _cache.get(Class);
-            _cache.set(Class, Wrapper);
-        }
-        function Wrapper() {
-            return _construct(Class, arguments, _get_prototype_of$1(this).constructor);
-        }
-        Wrapper.prototype = Object.create(Class.prototype, {
-            constructor: {
-                value: Wrapper,
-                enumerable: false,
-                writable: true,
-                configurable: true
+function _async_to_generator$6(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, "throw", err);
             }
+            _next(undefined);
         });
-        return _set_prototype_of$1(Wrapper, Class);
-    };
-    return _wrap_native_super(Class);
-}
-function _is_native_reflect_construct$1() {
-    if (typeof Reflect === "undefined" || !Reflect.construct) return false;
-    if (Reflect.construct.sham) return false;
-    if (typeof Proxy === "function") return true;
-    try {
-        Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function() {}));
-        return true;
-    } catch (e) {
-        return false;
-    }
-}
-function _create_super$1(Derived) {
-    var hasNativeReflectConstruct = _is_native_reflect_construct$1();
-    return function _createSuperInternal() {
-        var Super = _get_prototype_of$1(Derived), result;
-        if (hasNativeReflectConstruct) {
-            var NewTarget = _get_prototype_of$1(this).constructor;
-            result = Reflect.construct(Super, arguments, NewTarget);
-        } else {
-            result = Super.apply(this, arguments);
-        }
-        return _possible_constructor_return$1(this, result);
     };
 }
-var ProviderError = /*#__PURE__*/ function(Error1) {
-    _inherits$1(ProviderError, Error1);
-    var _super = _create_super$1(ProviderError);
-    function ProviderError(message) {
-        var options = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : true;
-        _class_call_check$1(this, ProviderError);
-        var _this;
-        var _logger_debug;
-        var logger;
-        var tryNextLink = true;
-        if (typeof options === "boolean") {
-            logger = undefined;
-            tryNextLink = options;
-        } else if (options != null && (typeof options === "undefined" ? "undefined" : _type_of$2(options)) === "object") {
-            logger = options.logger;
-            var _options_tryNextLink;
-            tryNextLink = (_options_tryNextLink = options.tryNextLink) !== null && _options_tryNextLink !== void 0 ? _options_tryNextLink : true;
-        }
-        _this = _super.call(this, message);
-        _define_property$1(_assert_this_initialized$1(_this), "name", "ProviderError");
-        _define_property$1(_assert_this_initialized$1(_this), "tryNextLink", void 0);
-        _this.tryNextLink = tryNextLink;
-        Object.setPrototypeOf(_assert_this_initialized$1(_this), ProviderError.prototype);
-        logger === null || logger === void 0 ? void 0 : (_logger_debug = logger.debug) === null || _logger_debug === void 0 ? void 0 : _logger_debug.call(logger, "@smithy/property-provider ".concat(tryNextLink ? "->" : "(!)", " ").concat(message));
-        return _this;
-    }
-    _create_class(ProviderError, null, [
-        {
-            key: "from",
-            value: function from(error) {
-                var options = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : true;
-                return Object.assign(new this(error.message, options), error);
-            }
-        }
-    ]);
-    return ProviderError;
-}(_wrap_native_super(Error));
-
-function _assert_this_initialized(self) {
-    if (self === void 0) {
-        throw new ReferenceError("this hasn't been initialised - super() hasn't been called");
-    }
-    return self;
-}
-function _class_call_check(instance, Constructor) {
-    if (!(instance instanceof Constructor)) {
-        throw new TypeError("Cannot call a class as a function");
-    }
-}
-function _define_property(obj, key, value) {
+function _define_property$2(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -1691,124 +1504,165 @@ function _define_property(obj, key, value) {
     }
     return obj;
 }
-function _get_prototype_of(o) {
-    _get_prototype_of = Object.setPrototypeOf ? Object.getPrototypeOf : function getPrototypeOf(o) {
-        return o.__proto__ || Object.getPrototypeOf(o);
-    };
-    return _get_prototype_of(o);
-}
-function _inherits(subClass, superClass) {
-    if (typeof superClass !== "function" && superClass !== null) {
-        throw new TypeError("Super expression must either be null or a function");
-    }
-    subClass.prototype = Object.create(superClass && superClass.prototype, {
-        constructor: {
-            value: subClass,
-            writable: true,
-            configurable: true
+function _object_spread$2(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
         }
-    });
-    if (superClass) _set_prototype_of(subClass, superClass);
-}
-function _possible_constructor_return(self, call) {
-    if (call && (_type_of$1(call) === "object" || typeof call === "function")) {
-        return call;
+        ownKeys.forEach(function(key) {
+            _define_property$2(target, key, source[key]);
+        });
     }
-    return _assert_this_initialized(self);
-}
-function _set_prototype_of(o, p) {
-    _set_prototype_of = Object.setPrototypeOf || function setPrototypeOf(o, p) {
-        o.__proto__ = p;
-        return o;
-    };
-    return _set_prototype_of(o, p);
+    return target;
 }
-function _type_of$1(obj) {
-    "@swc/helpers - typeof";
-    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+function ownKeys$1(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
 }
-function _is_native_reflect_construct() {
-    if (typeof Reflect === "undefined" || !Reflect.construct) return false;
-    if (Reflect.construct.sham) return false;
-    if (typeof Proxy === "function") return true;
-    try {
-        Boolean.prototype.valueOf.call(Reflect.construct(Boolean, [], function() {}));
-        return true;
-    } catch (e) {
-        return false;
+function _object_spread_props$1(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys$1(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
     }
+    return target;
 }
-function _create_super(Derived) {
-    var hasNativeReflectConstruct = _is_native_reflect_construct();
-    return function _createSuperInternal() {
-        var Super = _get_prototype_of(Derived), result;
-        if (hasNativeReflectConstruct) {
-            var NewTarget = _get_prototype_of(this).constructor;
-            result = Reflect.construct(Super, arguments, NewTarget);
-        } else {
-            result = Super.apply(this, arguments);
-        }
-        return _possible_constructor_return(this, result);
+function _ts_generator$6(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
     };
-}
-var CredentialsProviderError = /*#__PURE__*/ function(ProviderError) {
-    _inherits(CredentialsProviderError, ProviderError);
-    var _super = _create_super(CredentialsProviderError);
-    function CredentialsProviderError(message) {
-        var options = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : true;
-        _class_call_check(this, CredentialsProviderError);
-        var _this;
-        _this = _super.call(this, message, options);
-        _define_property(_assert_this_initialized(_this), "name", "CredentialsProviderError");
-        Object.setPrototypeOf(_assert_this_initialized(_this), CredentialsProviderError.prototype);
-        return _this;
-    }
-    return CredentialsProviderError;
-}(ProviderError);
-
-var ECS_CONTAINER_HOST = "169.254.170.2";
-var EKS_CONTAINER_HOST_IPv4 = "169.254.170.23";
-var EKS_CONTAINER_HOST_IPv6 = "[fd00:ec2::23]";
-var checkUrl = function(url, logger) {
-    if (url.protocol === "https:") {
-        return;
-    }
-    if (url.hostname === ECS_CONTAINER_HOST || url.hostname === EKS_CONTAINER_HOST_IPv4 || url.hostname === EKS_CONTAINER_HOST_IPv6) {
-        return;
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
     }
-    if (url.hostname.includes("[")) {
-        if (url.hostname === "[::1]" || url.hostname === "[0000:0000:0000:0000:0000:0000:0000:0001]") {
-            return;
-        }
-    } else {
-        if (url.hostname === "localhost") {
-            return;
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
         }
-        var ipComponents = url.hostname.split(".");
-        var inRange = function(component) {
-            var num = parseInt(component, 10);
-            return 0 <= num && num <= 255;
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
         };
-        if (ipComponents[0] === "127" && inRange(ipComponents[1]) && inRange(ipComponents[2]) && inRange(ipComponents[3]) && ipComponents.length === 4) {
-            return;
-        }
-    }
-    throw new CredentialsProviderError("URL not accepted. It must either be HTTPS or match one of the following:\n  - loopback CIDR 127.0.0.0/8 or [::1/128]\n  - ECS container host 169.254.170.2\n  - EKS container host 169.254.170.23 or [fd00:ec2::23]", {
-        logger: logger
-    });
-};
-
-function _instanceof$3(left, right) {
-    if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
-        return !!right[Symbol.hasInstance](left);
-    } else {
-        return left instanceof right;
     }
 }
-var isReadableStream = function(stream) {
-    var _stream_constructor;
-    return typeof ReadableStream === "function" && ((stream === null || stream === void 0 ? void 0 : (_stream_constructor = stream.constructor) === null || _stream_constructor === void 0 ? void 0 : _stream_constructor.name) === ReadableStream.name || _instanceof$3(stream, ReadableStream));
+var isLoginProfile = function(data) {
+    return Boolean(data && data.login_session);
 };
+var resolveLoginCredentials = function() {
+    var _ref = _async_to_generator$6(function(profileName, options, callerClientConfig) {
+        var credentials;
+        return _ts_generator$6(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    return [
+                        4,
+                        fromLoginCredentials(_object_spread_props$1(_object_spread$2({}, options), {
+                            profile: profileName
+                        }))({
+                            callerClientConfig: callerClientConfig
+                        })
+                    ];
+                case 1:
+                    credentials = _state.sent();
+                    return [
+                        2,
+                        setCredentialFeature(credentials, "CREDENTIALS_PROFILE_LOGIN", "AC")
+                    ];
+            }
+        });
+    });
+    return function resolveLoginCredentials(profileName, options, callerClientConfig) {
+        return _ref.apply(this, arguments);
+    };
+}();
 
 function asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, key, arg) {
     try {
@@ -1839,12 +1693,56 @@ function _async_to_generator$5(fn) {
         });
     };
 }
-function _instanceof$2(left, right) {
-    if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
-        return !!right[Symbol.hasInstance](left);
+function _define_property$1(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
     } else {
-        return left instanceof right;
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread$1(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$1(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
     }
+    return target;
+}
+function _type_of$2(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
 function _ts_generator$5(thisArg, body) {
     var f, y, t, g, _ = {
@@ -1941,164 +1839,29 @@ function _ts_generator$5(thisArg, body) {
         };
     }
 }
-var streamCollector = function() {
-    var _ref = _async_to_generator$5(function(stream) {
-        var _stream_constructor, _;
+var isProcessProfile = function(arg) {
+    return Boolean(arg) && (typeof arg === "undefined" ? "undefined" : _type_of$2(arg)) === "object" && typeof arg.credential_process === "string";
+};
+var resolveProcessCredentials = function() {
+    var _ref = _async_to_generator$5(function(options, profile) {
         return _ts_generator$5(this, function(_state) {
-            switch(_state.label){
-                case 0:
-                    if (!(typeof Blob === "function" && _instanceof$2(stream, Blob) || ((_stream_constructor = stream.constructor) === null || _stream_constructor === void 0 ? void 0 : _stream_constructor.name) === "Blob")) return [
-                        3,
-                        3
-                    ];
-                    if (!(Blob.prototype.arrayBuffer !== undefined)) return [
-                        3,
-                        2
-                    ];
-                    _ = Uint8Array.bind;
-                    return [
-                        4,
-                        stream.arrayBuffer()
-                    ];
-                case 1:
-                    return [
-                        2,
-                        new (_.apply(Uint8Array, [
-                            void 0,
-                            _state.sent()
-                        ]))
-                    ];
-                case 2:
-                    return [
-                        2,
-                        collectBlob(stream)
-                    ];
-                case 3:
-                    return [
-                        2,
-                        collectStream(stream)
-                    ];
-            }
+            return [
+                2,
+                import('./index.esm7.js').then(function(param) {
+                    var fromProcess = param.fromProcess;
+                    return fromProcess(_object_spread_props(_object_spread$1({}, options), {
+                        profile: profile
+                    }))().then(function(creds) {
+                        return setCredentialFeature(creds, "CREDENTIALS_PROFILE_PROCESS", "v");
+                    });
+                })
+            ];
         });
     });
-    return function streamCollector(stream) {
+    return function resolveProcessCredentials(options, profile) {
         return _ref.apply(this, arguments);
     };
 }();
-function collectBlob(blob) {
-    return _collectBlob.apply(this, arguments);
-}
-function _collectBlob() {
-    _collectBlob = _async_to_generator$5(function(blob) {
-        var base64, arrayBuffer;
-        return _ts_generator$5(this, function(_state) {
-            switch(_state.label){
-                case 0:
-                    return [
-                        4,
-                        readToBase64(blob)
-                    ];
-                case 1:
-                    base64 = _state.sent();
-                    arrayBuffer = fromBase64(base64);
-                    return [
-                        2,
-                        new Uint8Array(arrayBuffer)
-                    ];
-            }
-        });
-    });
-    return _collectBlob.apply(this, arguments);
-}
-function collectStream(stream) {
-    return _collectStream.apply(this, arguments);
-}
-function _collectStream() {
-    _collectStream = _async_to_generator$5(function(stream) {
-        var chunks, reader, isDone, length, _ref, done, value, collected, offset, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, chunk;
-        return _ts_generator$5(this, function(_state) {
-            switch(_state.label){
-                case 0:
-                    chunks = [];
-                    reader = stream.getReader();
-                    isDone = false;
-                    length = 0;
-                    _state.label = 1;
-                case 1:
-                    if (!!isDone) return [
-                        3,
-                        3
-                    ];
-                    return [
-                        4,
-                        reader.read()
-                    ];
-                case 2:
-                    _ref = _state.sent(), done = _ref.done, value = _ref.value;
-                    if (value) {
-                        chunks.push(value);
-                        length += value.length;
-                    }
-                    isDone = done;
-                    return [
-                        3,
-                        1
-                    ];
-                case 3:
-                    collected = new Uint8Array(length);
-                    offset = 0;
-                    _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
-                    try {
-                        for(_iterator = chunks[Symbol.iterator](); !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
-                            chunk = _step.value;
-                            collected.set(chunk, offset);
-                            offset += chunk.length;
-                        }
-                    } catch (err) {
-                        _didIteratorError = true;
-                        _iteratorError = err;
-                    } finally{
-                        try {
-                            if (!_iteratorNormalCompletion && _iterator.return != null) {
-                                _iterator.return();
-                            }
-                        } finally{
-                            if (_didIteratorError) {
-                                throw _iteratorError;
-                            }
-                        }
-                    }
-                    return [
-                        2,
-                        collected
-                    ];
-            }
-        });
-    });
-    return _collectStream.apply(this, arguments);
-}
-function readToBase64(blob) {
-    return new Promise(function(resolve, reject) {
-        var reader = new FileReader();
-        reader.onloadend = function() {
-            if (reader.readyState !== 2) {
-                return reject(new Error("Reader aborted too early"));
-            }
-            var _reader_result;
-            var result = (_reader_result = reader.result) !== null && _reader_result !== void 0 ? _reader_result : "";
-            var commaIndex = result.indexOf(",");
-            var dataOffset = commaIndex > -1 ? commaIndex + 1 : result.length;
-            resolve(result.substring(dataOffset));
-        };
-        reader.onabort = function() {
-            return reject(new Error("Read aborted"));
-        };
-        reader.onerror = function() {
-            return reject(reader.error);
-        };
-        reader.readAsDataURL(blob);
-    });
-}
 
 function asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, key, arg) {
     try {
@@ -2129,13 +1892,6 @@ function _async_to_generator$4(fn) {
         });
     };
 }
-function _instanceof$1(left, right) {
-    if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
-        return !!right[Symbol.hasInstance](left);
-    } else {
-        return left instanceof right;
-    }
-}
 function _ts_generator$4(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
@@ -2231,106 +1987,46 @@ function _ts_generator$4(thisArg, body) {
         };
     }
 }
-var ERR_MSG_STREAM_HAS_BEEN_TRANSFORMED$1 = "The stream has already been transformed.";
-var sdkStreamMixin$1 = function(stream) {
-    if (!isBlobInstance(stream) && !isReadableStream(stream)) {
-        var _stream___proto___constructor, _stream___proto__;
-        var name = (stream === null || stream === void 0 ? void 0 : (_stream___proto__ = stream.__proto__) === null || _stream___proto__ === void 0 ? void 0 : (_stream___proto___constructor = _stream___proto__.constructor) === null || _stream___proto___constructor === void 0 ? void 0 : _stream___proto___constructor.name) || stream;
-        throw new Error("Unexpected stream implementation, expect Blob or ReadableStream, got ".concat(name));
-    }
-    var transformed = false;
-    var transformToByteArray = function() {
-        var _ref = _async_to_generator$4(function() {
-            return _ts_generator$4(this, function(_state) {
-                switch(_state.label){
-                    case 0:
-                        if (transformed) {
-                            throw new Error(ERR_MSG_STREAM_HAS_BEEN_TRANSFORMED$1);
-                        }
-                        transformed = true;
-                        return [
-                            4,
-                            streamCollector(stream)
-                        ];
-                    case 1:
-                        return [
-                            2,
-                            _state.sent()
-                        ];
-                }
-            });
-        });
-        return function transformToByteArray() {
-            return _ref.apply(this, arguments);
-        };
-    }();
-    var blobToWebStream = function(blob) {
-        if (typeof blob.stream !== "function") {
-            throw new Error("Cannot transform payload Blob to web stream. Please make sure the Blob.stream() is polyfilled.\n" + "If you are using React Native, this API is not yet supported, see: https://react-native.canny.io/feature-requests/p/fetch-streaming-body");
-        }
-        return blob.stream();
-    };
-    return Object.assign(stream, {
-        transformToByteArray: transformToByteArray,
-        transformToString: function() {
-            var _ref = _async_to_generator$4(function(encoding) {
-                var buf;
-                return _ts_generator$4(this, function(_state) {
-                    switch(_state.label){
-                        case 0:
-                            return [
-                                4,
-                                transformToByteArray()
-                            ];
-                        case 1:
-                            buf = _state.sent();
-                            if (encoding === "base64") {
-                                return [
-                                    2,
-                                    toBase64(buf)
-                                ];
-                            } else if (encoding === "hex") {
-                                return [
-                                    2,
-                                    toHex(buf)
-                                ];
-                            } else if (encoding === undefined || encoding === "utf8" || encoding === "utf-8") {
-                                return [
-                                    2,
-                                    toUtf8(buf)
-                                ];
-                            } else if (typeof TextDecoder === "function") {
-                                return [
-                                    2,
-                                    new TextDecoder(encoding).decode(buf)
-                                ];
+var resolveSsoCredentials = function() {
+    var _ref = _async_to_generator$4(function(profile, profileData) {
+        var options, callerClientConfig, fromSSO;
+        var _arguments = arguments;
+        return _ts_generator$4(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    options = _arguments.length > 2 && _arguments[2] !== void 0 ? _arguments[2] : {}, callerClientConfig = _arguments.length > 3 ? _arguments[3] : void 0;
+                    return [
+                        4,
+                        import('./index.esm12.js')
+                    ];
+                case 1:
+                    fromSSO = _state.sent().fromSSO;
+                    return [
+                        2,
+                        fromSSO({
+                            profile: profile,
+                            logger: options.logger,
+                            parentClientConfig: options.parentClientConfig,
+                            clientConfig: options.clientConfig
+                        })({
+                            callerClientConfig: callerClientConfig
+                        }).then(function(creds) {
+                            if (profileData.sso_session) {
+                                return setCredentialFeature(creds, "CREDENTIALS_PROFILE_SSO", "r");
                             } else {
-                                throw new Error("TextDecoder is not available, please make sure polyfill is provided.");
+                                return setCredentialFeature(creds, "CREDENTIALS_PROFILE_SSO_LEGACY", "t");
                             }
-                    }
-                });
-            });
-            return function(encoding) {
-                return _ref.apply(this, arguments);
-            };
-        }(),
-        transformToWebStream: function() {
-            if (transformed) {
-                throw new Error(ERR_MSG_STREAM_HAS_BEEN_TRANSFORMED$1);
-            }
-            transformed = true;
-            if (isBlobInstance(stream)) {
-                return blobToWebStream(stream);
-            } else if (isReadableStream(stream)) {
-                return stream;
-            } else {
-                throw new Error("Cannot transform payload to web stream, got ".concat(stream));
+                        })
+                    ];
             }
-        }
+        });
     });
-};
-var isBlobInstance = function(stream) {
-    return typeof Blob === "function" && _instanceof$1(stream, Blob);
+    return function resolveSsoCredentials(profile, profileData) {
+        return _ref.apply(this, arguments);
+    };
+}();
+var isSsoProfile = function(arg) {
+    return arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string");
 };
 
 function asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, key, arg) {
@@ -2362,12 +2058,37 @@ function _async_to_generator$3(fn) {
         });
     };
 }
-function _instanceof(left, right) {
-    if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
-        return !!right[Symbol.hasInstance](left);
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
     } else {
-        return left instanceof right;
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property(target, key, source[key]);
+        });
     }
+    return target;
+}
+function _type_of$1(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
 function _ts_generator$3(thisArg, body) {
     var f, y, t, g, _ = {
@@ -2464,337 +2185,40 @@ function _ts_generator$3(thisArg, body) {
         };
     }
 }
-var ERR_MSG_STREAM_HAS_BEEN_TRANSFORMED = "The stream has already been transformed.";
-var sdkStreamMixin = function(stream) {
-    if (!_instanceof(stream, Readable)) {
-        try {
-            return sdkStreamMixin$1(stream);
-        } catch (e) {
-            var _stream___proto___constructor, _stream___proto__;
-            var name = (stream === null || stream === void 0 ? void 0 : (_stream___proto__ = stream.__proto__) === null || _stream___proto__ === void 0 ? void 0 : (_stream___proto___constructor = _stream___proto__.constructor) === null || _stream___proto___constructor === void 0 ? void 0 : _stream___proto___constructor.name) || stream;
-            throw new Error("Unexpected stream implementation, expect Stream.Readable instance, got ".concat(name));
-        }
-    }
-    var transformed = false;
-    var transformToByteArray = function() {
-        var _ref = _async_to_generator$3(function() {
-            return _ts_generator$3(this, function(_state) {
-                switch(_state.label){
-                    case 0:
-                        if (transformed) {
-                            throw new Error(ERR_MSG_STREAM_HAS_BEEN_TRANSFORMED);
-                        }
-                        transformed = true;
-                        return [
-                            4,
-                            streamCollector$1(stream)
-                        ];
-                    case 1:
-                        return [
-                            2,
-                            _state.sent()
-                        ];
-                }
+var isStaticCredsProfile = function(arg) {
+    return Boolean(arg) && (typeof arg === "undefined" ? "undefined" : _type_of$1(arg)) === "object" && typeof arg.aws_access_key_id === "string" && typeof arg.aws_secret_access_key === "string" && [
+        "undefined",
+        "string"
+    ].indexOf(_type_of$1(arg.aws_session_token)) > -1 && [
+        "undefined",
+        "string"
+    ].indexOf(_type_of$1(arg.aws_account_id)) > -1;
+};
+var resolveStaticCredentials = function() {
+    var _ref = _async_to_generator$3(function(profile, options) {
+        var _options_logger, credentials;
+        return _ts_generator$3(this, function(_state) {
+            options === null || options === void 0 ? void 0 : (_options_logger = options.logger) === null || _options_logger === void 0 ? void 0 : _options_logger.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");
+            credentials = _object_spread({
+                accessKeyId: profile.aws_access_key_id,
+                secretAccessKey: profile.aws_secret_access_key,
+                sessionToken: profile.aws_session_token
+            }, profile.aws_credential_scope && {
+                credentialScope: profile.aws_credential_scope
+            }, profile.aws_account_id && {
+                accountId: profile.aws_account_id
             });
+            return [
+                2,
+                setCredentialFeature(credentials, "CREDENTIALS_PROFILE", "n")
+            ];
         });
-        return function transformToByteArray() {
-            return _ref.apply(this, arguments);
-        };
-    }();
-    return Object.assign(stream, {
-        transformToByteArray: transformToByteArray,
-        transformToString: function() {
-            var _ref = _async_to_generator$3(function(encoding) {
-                var buf, decoder;
-                return _ts_generator$3(this, function(_state) {
-                    switch(_state.label){
-                        case 0:
-                            return [
-                                4,
-                                transformToByteArray()
-                            ];
-                        case 1:
-                            buf = _state.sent();
-                            if (encoding === undefined || Buffer.isEncoding(encoding)) {
-                                return [
-                                    2,
-                                    fromArrayBuffer(buf.buffer, buf.byteOffset, buf.byteLength).toString(encoding)
-                                ];
-                            } else {
-                                decoder = new TextDecoder(encoding);
-                                return [
-                                    2,
-                                    decoder.decode(buf)
-                                ];
-                            }
-                    }
-                });
-            });
-            return function(encoding) {
-                return _ref.apply(this, arguments);
-            };
-        }(),
-        transformToWebStream: function() {
-            if (transformed) {
-                throw new Error(ERR_MSG_STREAM_HAS_BEEN_TRANSFORMED);
-            }
-            if (stream.readableFlowing !== null) {
-                throw new Error("The stream has been consumed by other callbacks.");
-            }
-            if (typeof Readable.toWeb !== "function") {
-                throw new Error("Readable.toWeb() is not supported. Please ensure a polyfill is available.");
-            }
-            transformed = true;
-            return Readable.toWeb(stream);
-        }
-    });
-};
-
-function _type_of(obj) {
-    "@swc/helpers - typeof";
-    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
-}
-var expectNumber = function(value) {
-    if (value === null || value === undefined) {
-        return undefined;
-    }
-    if (typeof value === "string") {
-        var parsed = parseFloat(value);
-        if (!Number.isNaN(parsed)) {
-            if (String(parsed) !== String(value)) {
-                logger.warn(stackTraceWarning("Expected number but observed string: ".concat(value)));
-            }
-            return parsed;
-        }
-    }
-    if (typeof value === "number") {
-        return value;
-    }
-    throw new TypeError("Expected number, got ".concat(typeof value === "undefined" ? "undefined" : _type_of(value), ": ").concat(value));
-};
-var MAX_FLOAT = Math.ceil(Math.pow(2, 127) * (2 - Math.pow(2, -23)));
-var expectFloat32 = function(value) {
-    var expected = expectNumber(value);
-    if (expected !== undefined && !Number.isNaN(expected) && expected !== Infinity && expected !== -Infinity) {
-        if (Math.abs(expected) > MAX_FLOAT) {
-            throw new TypeError("Expected 32-bit float, got ".concat(value));
-        }
-    }
-    return expected;
-};
-var expectLong = function(value) {
-    if (value === null || value === undefined) {
-        return undefined;
-    }
-    if (Number.isInteger(value) && !Number.isNaN(value)) {
-        return value;
-    }
-    throw new TypeError("Expected integer, got ".concat(typeof value === "undefined" ? "undefined" : _type_of(value), ": ").concat(value));
-};
-var expectShort = function(value) {
-    return expectSizedInt(value, 16);
-};
-var expectByte = function(value) {
-    return expectSizedInt(value, 8);
-};
-var expectSizedInt = function(value, size) {
-    var expected = expectLong(value);
-    if (expected !== undefined && castInt(expected, size) !== expected) {
-        throw new TypeError("Expected ".concat(size, "-bit integer, got ").concat(value));
-    }
-    return expected;
-};
-var castInt = function(value, size) {
-    switch(size){
-        case 32:
-            return Int32Array.of(value)[0];
-        case 16:
-            return Int16Array.of(value)[0];
-        case 8:
-            return Int8Array.of(value)[0];
-    }
-};
-var strictParseFloat32 = function(value) {
-    if (typeof value == "string") {
-        return expectFloat32(parseNumber(value));
-    }
-    return expectFloat32(value);
-};
-var NUMBER_REGEX = /(-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?)|(-?Infinity)|(NaN)/g;
-var parseNumber = function(value) {
-    var matches = value.match(NUMBER_REGEX);
-    if (matches === null || matches[0].length !== value.length) {
-        throw new TypeError("Expected real number, got implicit NaN");
-    }
-    return parseFloat(value);
-};
-var strictParseShort = function(value) {
-    if (typeof value === "string") {
-        return expectShort(parseNumber(value));
-    }
-    return expectShort(value);
-};
-var strictParseByte = function(value) {
-    if (typeof value === "string") {
-        return expectByte(parseNumber(value));
-    }
-    return expectByte(value);
-};
-var stackTraceWarning = function(message) {
-    return String(new TypeError(message).stack || message).split("\n").slice(0, 5).filter(function(s) {
-        return !s.includes("stackTraceWarning");
-    }).join("\n");
-};
-var logger = {
-    warn: console.warn
-};
-
-function _array_like_to_array$1(arr, len) {
-    if (len == null || len > arr.length) len = arr.length;
-    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
-    return arr2;
-}
-function _array_with_holes$1(arr) {
-    if (Array.isArray(arr)) return arr;
-}
-function _iterable_to_array_limit$1(arr, i) {
-    var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
-    if (_i == null) return;
-    var _arr = [];
-    var _n = true;
-    var _d = false;
-    var _s, _e;
-    try {
-        for(_i = _i.call(arr); !(_n = (_s = _i.next()).done); _n = true){
-            _arr.push(_s.value);
-            if (i && _arr.length === i) break;
-        }
-    } catch (err) {
-        _d = true;
-        _e = err;
-    } finally{
-        try {
-            if (!_n && _i["return"] != null) _i["return"]();
-        } finally{
-            if (_d) throw _e;
-        }
-    }
-    return _arr;
-}
-function _non_iterable_rest$1() {
-    throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
-}
-function _sliced_to_array$1(arr, i) {
-    return _array_with_holes$1(arr) || _iterable_to_array_limit$1(arr, i) || _unsupported_iterable_to_array$1(arr, i) || _non_iterable_rest$1();
-}
-function _unsupported_iterable_to_array$1(o, minLen) {
-    if (!o) return;
-    if (typeof o === "string") return _array_like_to_array$1(o, minLen);
-    var n = Object.prototype.toString.call(o).slice(8, -1);
-    if (n === "Object" && o.constructor) n = o.constructor.name;
-    if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array$1(o, minLen);
-}
-var MONTHS = [
-    "Jan",
-    "Feb",
-    "Mar",
-    "Apr",
-    "May",
-    "Jun",
-    "Jul",
-    "Aug",
-    "Sep",
-    "Oct",
-    "Nov",
-    "Dec"
-];
-var RFC3339 = new RegExp(/^(\d{4})-(\d{2})-(\d{2})[tT](\d{2}):(\d{2}):(\d{2})(?:\.(\d+))?[zZ]$/);
-var parseRfc3339DateTime = function(value) {
-    if (value === null || value === undefined) {
-        return undefined;
-    }
-    if (typeof value !== "string") {
-        throw new TypeError("RFC-3339 date-times must be expressed as strings");
-    }
-    var match = RFC3339.exec(value);
-    if (!match) {
-        throw new TypeError("Invalid RFC-3339 date-time value");
-    }
-    var _match = _sliced_to_array$1(match, 8); _match[0]; var yearStr = _match[1], monthStr = _match[2], dayStr = _match[3], hours = _match[4], minutes = _match[5], seconds = _match[6], fractionalMilliseconds = _match[7];
-    var year = strictParseShort(stripLeadingZeroes(yearStr));
-    var month = parseDateValue(monthStr, "month", 1, 12);
-    var day = parseDateValue(dayStr, "day", 1, 31);
-    return buildDate(year, month, day, {
-        hours: hours,
-        minutes: minutes,
-        seconds: seconds,
-        fractionalMilliseconds: fractionalMilliseconds
     });
-};
-var buildDate = function(year, month, day, time) {
-    var adjustedMonth = month - 1;
-    validateDayOfMonth(year, adjustedMonth, day);
-    return new Date(Date.UTC(year, adjustedMonth, day, parseDateValue(time.hours, "hour", 0, 23), parseDateValue(time.minutes, "minute", 0, 59), parseDateValue(time.seconds, "seconds", 0, 60), parseMilliseconds(time.fractionalMilliseconds)));
-};
-var DAYS_IN_MONTH = [
-    31,
-    28,
-    31,
-    30,
-    31,
-    30,
-    31,
-    31,
-    30,
-    31,
-    30,
-    31
-];
-var validateDayOfMonth = function(year, month, day) {
-    var maxDays = DAYS_IN_MONTH[month];
-    if (month === 1 && isLeapYear(year)) {
-        maxDays = 29;
-    }
-    if (day > maxDays) {
-        throw new TypeError("Invalid day for ".concat(MONTHS[month], " in ").concat(year, ": ").concat(day));
-    }
-};
-var isLeapYear = function(year) {
-    return year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
-};
-var parseDateValue = function(value, type, lower, upper) {
-    var dateVal = strictParseByte(stripLeadingZeroes(value));
-    if (dateVal < lower || dateVal > upper) {
-        throw new TypeError("".concat(type, " must be between ").concat(lower, " and ").concat(upper, ", inclusive"));
-    }
-    return dateVal;
-};
-var parseMilliseconds = function(value) {
-    if (value === null || value === undefined) {
-        return 0;
-    }
-    return strictParseFloat32("0." + value) * 1000;
-};
-var stripLeadingZeroes = function(value) {
-    var idx = 0;
-    while(idx < value.length - 1 && value.charAt(idx) === "0"){
-        idx++;
-    }
-    if (idx === 0) {
-        return value;
-    }
-    return value.slice(idx);
-};
+    return function resolveStaticCredentials(profile, options) {
+        return _ref.apply(this, arguments);
+    };
+}();
 
-function _array_like_to_array(arr, len) {
-    if (len == null || len > arr.length) len = arr.length;
-    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
-    return arr2;
-}
-function _array_with_holes(arr) {
-    if (Array.isArray(arr)) return arr;
-}
 function asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
@@ -2824,43 +2248,9 @@ function _async_to_generator$2(fn) {
         });
     };
 }
-function _iterable_to_array_limit(arr, i) {
-    var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
-    if (_i == null) return;
-    var _arr = [];
-    var _n = true;
-    var _d = false;
-    var _s, _e;
-    try {
-        for(_i = _i.call(arr); !(_n = (_s = _i.next()).done); _n = true){
-            _arr.push(_s.value);
-            if (i && _arr.length === i) break;
-        }
-    } catch (err) {
-        _d = true;
-        _e = err;
-    } finally{
-        try {
-            if (!_n && _i["return"] != null) _i["return"]();
-        } finally{
-            if (_d) throw _e;
-        }
-    }
-    return _arr;
-}
-function _non_iterable_rest() {
-    throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
-}
-function _sliced_to_array(arr, i) {
-    return _array_with_holes(arr) || _iterable_to_array_limit(arr, i) || _unsupported_iterable_to_array(arr, i) || _non_iterable_rest();
-}
-function _unsupported_iterable_to_array(o, minLen) {
-    if (!o) return;
-    if (typeof o === "string") return _array_like_to_array(o, minLen);
-    var n = Object.prototype.toString.call(o).slice(8, -1);
-    if (n === "Object" && o.constructor) n = o.constructor.name;
-    if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array(o, minLen);
+function _type_of(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
 }
 function _ts_generator$2(thisArg, body) {
     var f, y, t, g, _ = {
@@ -2957,73 +2347,39 @@ function _ts_generator$2(thisArg, body) {
         };
     }
 }
-function createGetRequest(url) {
-    return new HttpRequest({
-        protocol: url.protocol,
-        hostname: url.hostname,
-        port: Number(url.port),
-        path: url.pathname,
-        query: Array.from(url.searchParams.entries()).reduce(function(acc, param) {
-            var _param = _sliced_to_array(param, 2), k = _param[0], v = _param[1];
-            acc[k] = v;
-            return acc;
-        }, {}),
-        fragment: url.hash
-    });
-}
-function getCredentials(response, logger) {
-    return _getCredentials.apply(this, arguments);
-}
-function _getCredentials() {
-    _getCredentials = _async_to_generator$2(function(response, logger) {
-        var stream, str, parsed, parsedBody;
+var isWebIdentityProfile = function(arg) {
+    return Boolean(arg) && (typeof arg === "undefined" ? "undefined" : _type_of(arg)) === "object" && typeof arg.web_identity_token_file === "string" && typeof arg.role_arn === "string" && [
+        "undefined",
+        "string"
+    ].indexOf(_type_of(arg.role_session_name)) > -1;
+};
+var resolveWebIdentityCredentials = function() {
+    var _ref = _async_to_generator$2(function(profile, options, callerClientConfig) {
         return _ts_generator$2(this, function(_state) {
-            switch(_state.label){
-                case 0:
-                    stream = sdkStreamMixin(response.body);
-                    return [
-                        4,
-                        stream.transformToString()
-                    ];
-                case 1:
-                    str = _state.sent();
-                    if (response.statusCode === 200) {
-                        parsed = JSON.parse(str);
-                        if (typeof parsed.AccessKeyId !== "string" || typeof parsed.SecretAccessKey !== "string" || typeof parsed.Token !== "string" || typeof parsed.Expiration !== "string") {
-                            throw new CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: " + "{ AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }", {
-                                logger: logger
-                            });
-                        }
-                        return [
-                            2,
-                            {
-                                accessKeyId: parsed.AccessKeyId,
-                                secretAccessKey: parsed.SecretAccessKey,
-                                sessionToken: parsed.Token,
-                                expiration: parseRfc3339DateTime(parsed.Expiration)
-                            }
-                        ];
-                    }
-                    if (response.statusCode >= 400 && response.statusCode < 500) {
-                        parsedBody = {};
-                        try {
-                            parsedBody = JSON.parse(str);
-                        } catch (e) {}
-                        throw Object.assign(new CredentialsProviderError("Server responded with status: ".concat(response.statusCode), {
-                            logger: logger
-                        }), {
-                            Code: parsedBody.Code,
-                            Message: parsedBody.Message
-                        });
-                    }
-                    throw new CredentialsProviderError("Server responded with status: ".concat(response.statusCode), {
-                        logger: logger
+            return [
+                2,
+                import('./index.esm4.js').then(function(param) {
+                    var fromTokenFile = param.fromTokenFile;
+                    return fromTokenFile({
+                        webIdentityTokenFile: profile.web_identity_token_file,
+                        roleArn: profile.role_arn,
+                        roleSessionName: profile.role_session_name,
+                        roleAssumerWithWebIdentity: options.roleAssumerWithWebIdentity,
+                        logger: options.logger,
+                        parentClientConfig: options.parentClientConfig
+                    })({
+                        callerClientConfig: callerClientConfig
+                    }).then(function(creds) {
+                        return setCredentialFeature(creds, "CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN", "q");
                     });
-            }
+                })
+            ];
         });
     });
-    return _getCredentials.apply(this, arguments);
-}
+    return function resolveWebIdentityCredentials(profile, options, callerClientConfig) {
+        return _ref.apply(this, arguments);
+    };
+}();
 
 function asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, key, arg) {
     try {
@@ -3149,70 +2505,78 @@ function _ts_generator$1(thisArg, body) {
         };
     }
 }
-var retryWrapper = function(toRetry, maxRetries, delayMs) {
-    return /*#__PURE__*/ _async_to_generator$1(function() {
-        var i;
+var resolveProfileData = function() {
+    var _ref = _async_to_generator$1(function(profileName, profiles, options, callerClientConfig) {
+        var visitedProfiles, isAssumeRoleRecursiveCall, data;
+        var _arguments = arguments;
         return _ts_generator$1(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    i = 0;
-                    _state.label = 1;
-                case 1:
-                    if (!(i < maxRetries)) return [
-                        3,
-                        7
-                    ];
-                    _state.label = 2;
-                case 2:
-                    _state.trys.push([
-                        2,
-                        4,
-                        ,
-                        6
-                    ]);
-                    return [
-                        4,
-                        toRetry()
-                    ];
-                case 3:
-                    return [
-                        2,
-                        _state.sent()
-                    ];
-                case 4:
-                    _state.sent();
-                    return [
-                        4,
-                        new Promise(function(resolve) {
-                            return setTimeout(resolve, delayMs);
-                        })
-                    ];
-                case 5:
-                    _state.sent();
-                    return [
-                        3,
-                        6
-                    ];
-                case 6:
-                    ++i;
-                    return [
+                    visitedProfiles = _arguments.length > 4 && _arguments[4] !== void 0 ? _arguments[4] : {}, isAssumeRoleRecursiveCall = _arguments.length > 5 && _arguments[5] !== void 0 ? _arguments[5] : false;
+                    data = profiles[profileName];
+                    if (Object.keys(visitedProfiles).length > 0 && isStaticCredsProfile(data)) {
+                        return [
+                            2,
+                            resolveStaticCredentials(data, options)
+                        ];
+                    }
+                    if (isAssumeRoleRecursiveCall || isAssumeRoleProfile(data, {
+                        profile: profileName,
+                        logger: options.logger
+                    })) {
+                        return [
+                            2,
+                            resolveAssumeRoleCredentials(profileName, profiles, options, callerClientConfig, visitedProfiles, resolveProfileData)
+                        ];
+                    }
+                    if (isStaticCredsProfile(data)) {
+                        return [
+                            2,
+                            resolveStaticCredentials(data, options)
+                        ];
+                    }
+                    if (isWebIdentityProfile(data)) {
+                        return [
+                            2,
+                            resolveWebIdentityCredentials(data, options, callerClientConfig)
+                        ];
+                    }
+                    if (isProcessProfile(data)) {
+                        return [
+                            2,
+                            resolveProcessCredentials(options, profileName)
+                        ];
+                    }
+                    if (!isSsoProfile(data)) return [
                         3,
-                        1
+                        2
                     ];
-                case 7:
                     return [
                         4,
-                        toRetry()
+                        resolveSsoCredentials(profileName, data, options, callerClientConfig)
                     ];
-                case 8:
+                case 1:
                     return [
                         2,
                         _state.sent()
                     ];
+                case 2:
+                    if (isLoginProfile(data)) {
+                        return [
+                            2,
+                            resolveLoginCredentials(profileName, options, callerClientConfig)
+                        ];
+                    }
+                    throw new CredentialsProviderError("Could not resolve credentials using profile: [".concat(profileName, "] in configuration/credentials file(s)."), {
+                        logger: options.logger
+                    });
             }
         });
     });
-};
+    return function resolveProfileData(profileName, profiles, options, callerClientConfig) {
+        return _ref.apply(this, arguments);
+    };
+}();
 
 function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
     try {
@@ -3338,109 +2702,31 @@ function _ts_generator(thisArg, body) {
         };
     }
 }
-var AWS_CONTAINER_CREDENTIALS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI";
-var DEFAULT_LINK_LOCAL_HOST = "http://169.254.170.2";
-var AWS_CONTAINER_CREDENTIALS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI";
-var AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE = "AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE";
-var AWS_CONTAINER_AUTHORIZATION_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
-var fromHttp = function() {
-    var options = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
-    var _options_logger, _options_logger_constructor, _options_logger1, _options_logger2;
-    (_options_logger = options.logger) === null || _options_logger === void 0 ? void 0 : _options_logger.debug("@aws-sdk/credential-provider-http - fromHttp");
-    var host;
-    var _options_awsContainerCredentialsRelativeUri;
-    var relative = (_options_awsContainerCredentialsRelativeUri = options.awsContainerCredentialsRelativeUri) !== null && _options_awsContainerCredentialsRelativeUri !== void 0 ? _options_awsContainerCredentialsRelativeUri : process.env[AWS_CONTAINER_CREDENTIALS_RELATIVE_URI];
-    var _options_awsContainerCredentialsFullUri;
-    var full = (_options_awsContainerCredentialsFullUri = options.awsContainerCredentialsFullUri) !== null && _options_awsContainerCredentialsFullUri !== void 0 ? _options_awsContainerCredentialsFullUri : process.env[AWS_CONTAINER_CREDENTIALS_FULL_URI];
-    var _options_awsContainerAuthorizationToken;
-    var token = (_options_awsContainerAuthorizationToken = options.awsContainerAuthorizationToken) !== null && _options_awsContainerAuthorizationToken !== void 0 ? _options_awsContainerAuthorizationToken : process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN];
-    var _options_awsContainerAuthorizationTokenFile;
-    var tokenFile = (_options_awsContainerAuthorizationTokenFile = options.awsContainerAuthorizationTokenFile) !== null && _options_awsContainerAuthorizationTokenFile !== void 0 ? _options_awsContainerAuthorizationTokenFile : process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE];
-    var warn = ((_options_logger1 = options.logger) === null || _options_logger1 === void 0 ? void 0 : (_options_logger_constructor = _options_logger1.constructor) === null || _options_logger_constructor === void 0 ? void 0 : _options_logger_constructor.name) === "NoOpLogger" || !((_options_logger2 = options.logger) === null || _options_logger2 === void 0 ? void 0 : _options_logger2.warn) ? console.warn : options.logger.warn.bind(options.logger);
-    if (relative && full) {
-        warn("@aws-sdk/credential-provider-http: " + "you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri.");
-        warn("awsContainerCredentialsFullUri will take precedence.");
-    }
-    if (token && tokenFile) {
-        warn("@aws-sdk/credential-provider-http: " + "you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile.");
-        warn("awsContainerAuthorizationToken will take precedence.");
-    }
-    if (full) {
-        host = full;
-    } else if (relative) {
-        host = "".concat(DEFAULT_LINK_LOCAL_HOST).concat(relative);
-    } else {
-        throw new CredentialsProviderError("No HTTP credential provider host provided.\nSet AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.", {
-            logger: options.logger
-        });
-    }
-    var url = new URL(host);
-    checkUrl(url, options.logger);
-    var _options_timeout, _options_timeout1;
-    var requestHandler = NodeHttpHandler.create({
-        requestTimeout: (_options_timeout = options.timeout) !== null && _options_timeout !== void 0 ? _options_timeout : 1000,
-        connectionTimeout: (_options_timeout1 = options.timeout) !== null && _options_timeout1 !== void 0 ? _options_timeout1 : 1000
-    });
-    var _options_maxRetries, _options_timeout2;
-    return retryWrapper(/*#__PURE__*/ _async_to_generator(function() {
-        var request, _, result, e;
+var fromIni = function() {
+    var init = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
+    return /*#__PURE__*/ _async_to_generator(function() {
+        var callerClientConfig, _init_logger, profiles, _init_profile;
+        var _arguments = arguments;
         return _ts_generator(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    request = createGetRequest(url);
-                    if (!token) return [
-                        3,
-                        1
-                    ];
-                    request.headers.Authorization = token;
-                    return [
-                        3,
-                        3
-                    ];
-                case 1:
-                    if (!tokenFile) return [
-                        3,
-                        3
-                    ];
-                    _ = request.headers;
-                    return [
-                        4,
-                        fs.readFile(tokenFile)
-                    ];
-                case 2:
-                    _.Authorization = _state.sent().toString();
-                    _state.label = 3;
-                case 3:
-                    _state.trys.push([
-                        3,
-                        5,
-                        ,
-                        6
-                    ]);
+                    callerClientConfig = (_arguments.length > 0 && _arguments[0] !== void 0 ? _arguments[0] : {}).callerClientConfig;
+                    (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : _init_logger.debug("@aws-sdk/credential-provider-ini - fromIni");
                     return [
                         4,
-                        requestHandler.handle(request)
+                        parseKnownFiles(init)
                     ];
-                case 4:
-                    result = _state.sent();
+                case 1:
+                    profiles = _state.sent();
                     return [
                         2,
-                        getCredentials(result.response).then(function(creds) {
-                            return setCredentialFeature(creds, "CREDENTIALS_HTTP", "z");
-                        })
-                    ];
-                case 5:
-                    e = _state.sent();
-                    throw new CredentialsProviderError(String(e), {
-                        logger: options.logger
-                    });
-                case 6:
-                    return [
-                        2
+                        resolveProfileData(getProfileName({
+                            profile: (_init_profile = init.profile) !== null && _init_profile !== void 0 ? _init_profile : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.profile
+                        }), profiles, init, callerClientConfig)
                     ];
             }
         });
-    }), (_options_maxRetries = options.maxRetries) !== null && _options_maxRetries !== void 0 ? _options_maxRetries : 3, (_options_timeout2 = options.timeout) !== null && _options_timeout2 !== void 0 ? _options_timeout2 : 1000);
+    });
 };
 
-export { fromHttp };
+export { fromIni };