@digipair/skill-s3 0.136.3 → 0.136.5

package/dist/index.esm6.js

@@ -1,97 +1,704 @@
-import { i as fromUtf8, t as toUtf8 } from './index.esm3.js';
-export { j as EventStreamCodec, k as EventStreamMarshaller, H as HeaderMarshaller, I as Int64, M as MessageDecoderStream, m as MessageEncoderStream, S as SmithyMessageDecoderStream, n as SmithyMessageEncoderStream, o as UniversalEventStreamMarshaller, p as eventStreamSerdeProvider, q as getChunkedStream, r as getMessageUnmarshaller, u as getUnmarshalledStream, v as resolveEventStreamSerdeConfig, w as universalEventStreamSerdeProvider } from './index.esm3.js';
-import 'node:crypto';
-import 'node:path';
-import 'node:os';
+import { g as getSSOTokenFilepath, a as getSSOTokenFromFile } from './getSSOTokenFromFile.esm.js';
+import { T as TokenProviderError, l as loadSsoSessionData } from './loadSsoSessionData.esm.js';
+import { promises } from 'fs';
+import { p as parseKnownFiles } from './parseKnownFiles.esm.js';
+import { g as getProfileName, C as CredentialsProviderError, s as setCredentialFeature } from './index.esm2.js';
+import 'fs/promises';
+import 'crypto';
+import 'path';
+import 'buffer';
+import 'os';
 import 'node:fs/promises';
+import 'stream';
 import 'node:stream';
-import 'node:process';
-import 'buffer';
+import 'http';
+import 'https';
+import 'process';
 import 'node:fs';
-import 'node:https';
-import 'node:zlib';
+import 'zlib';
+
+var isSsoProfile = function(arg) {
+    return arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string");
+};
 
-function _async_generator$1(gen) {
-    var front, back;
-    function send(key, arg) {
+var EXPIRE_WINDOW_MS = 5 * 60 * 1000;
+var REFRESH_MESSAGE = "To refresh this SSO session run 'aws sso login' with the corresponding profile.";
+
+function asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$4(fn) {
+    return function() {
+        var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
-            var request = {
-                key: key,
-                arg: arg,
-                resolve: resolve,
-                reject: reject,
-                next: null
-            };
-            if (back) {
-                back = back.next = request;
-            } else {
-                front = back = request;
-                resume(key, arg);
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _ts_generator$4(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var getSsoOidcClient = function() {
+    var _ref = _async_to_generator$4(function(ssoRegion) {
+        var init, callerClientConfig, _init_clientConfig, SSOOIDCClient, coalesce, _init_clientConfig1, ssoOidcClient;
+        var _arguments = arguments;
+        return _ts_generator$4(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    init = _arguments.length > 1 && _arguments[1] !== void 0 ? _arguments[1] : {}, callerClientConfig = _arguments.length > 2 ? _arguments[2] : void 0;
+                    return [
+                        4,
+                        import('./index.esm11.js')
+                    ];
+                case 1:
+                    SSOOIDCClient = _state.sent().SSOOIDCClient;
+                    coalesce = function(prop) {
+                        var _init_clientConfig, _init_parentClientConfig;
+                        var _init_clientConfig_prop, _ref;
+                        return (_ref = (_init_clientConfig_prop = (_init_clientConfig = init.clientConfig) === null || _init_clientConfig === void 0 ? void 0 : _init_clientConfig[prop]) !== null && _init_clientConfig_prop !== void 0 ? _init_clientConfig_prop : (_init_parentClientConfig = init.parentClientConfig) === null || _init_parentClientConfig === void 0 ? void 0 : _init_parentClientConfig[prop]) !== null && _ref !== void 0 ? _ref : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig[prop];
+                    };
+                    ssoOidcClient = new SSOOIDCClient(Object.assign({}, (_init_clientConfig1 = init.clientConfig) !== null && _init_clientConfig1 !== void 0 ? _init_clientConfig1 : {}, {
+                        region: ssoRegion !== null && ssoRegion !== void 0 ? ssoRegion : (_init_clientConfig = init.clientConfig) === null || _init_clientConfig === void 0 ? void 0 : _init_clientConfig.region,
+                        logger: coalesce("logger"),
+                        userAgentAppId: coalesce("userAgentAppId")
+                    }));
+                    return [
+                        2,
+                        ssoOidcClient
+                    ];
+            }
+        });
+    });
+    return function getSsoOidcClient(ssoRegion) {
+        return _ref.apply(this, arguments);
+    };
+}();
+
+function asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$3(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _ts_generator$3(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var getNewSsoOidcToken = function() {
+    var _ref = _async_to_generator$3(function(ssoToken, ssoRegion) {
+        var init, callerClientConfig, CreateTokenCommand, ssoOidcClient;
+        var _arguments = arguments;
+        return _ts_generator$3(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    init = _arguments.length > 2 && _arguments[2] !== void 0 ? _arguments[2] : {}, callerClientConfig = _arguments.length > 3 ? _arguments[3] : void 0;
+                    return [
+                        4,
+                        import('./index.esm11.js')
+                    ];
+                case 1:
+                    CreateTokenCommand = _state.sent().CreateTokenCommand;
+                    return [
+                        4,
+                        getSsoOidcClient(ssoRegion, init, callerClientConfig)
+                    ];
+                case 2:
+                    ssoOidcClient = _state.sent();
+                    return [
+                        2,
+                        ssoOidcClient.send(new CreateTokenCommand({
+                            clientId: ssoToken.clientId,
+                            clientSecret: ssoToken.clientSecret,
+                            refreshToken: ssoToken.refreshToken,
+                            grantType: "refresh_token"
+                        }))
+                    ];
+            }
+        });
+    });
+    return function getNewSsoOidcToken(ssoToken, ssoRegion) {
+        return _ref.apply(this, arguments);
+    };
+}();
+
+var validateTokenExpiry = function(token) {
+    if (token.expiration && token.expiration.getTime() < Date.now()) {
+        throw new TokenProviderError("Token is expired. ".concat(REFRESH_MESSAGE), false);
+    }
+};
+
+var validateTokenKey = function(key, value) {
+    var forRefresh = arguments.length > 2 && arguments[2] !== void 0 ? arguments[2] : false;
+    if (typeof value === "undefined") {
+        throw new TokenProviderError("Value not present for '".concat(key, "' in SSO Token").concat(forRefresh ? ". Cannot refresh" : "", ". ").concat(REFRESH_MESSAGE), false);
+    }
+};
+
+var writeFile = promises.writeFile;
+var writeSSOTokenToFile = function(id, ssoToken) {
+    var tokenFilepath = getSSOTokenFilepath(id);
+    var tokenString = JSON.stringify(ssoToken, null, 2);
+    return writeFile(tokenFilepath, tokenString);
+};
+
+function asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$2(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _define_property$1(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread$1(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$1(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+function _ts_generator$2(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var lastRefreshAttemptTime = new Date(0);
+var fromSso = function() {
+    var init = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
+    return /*#__PURE__*/ _async_to_generator$2(function() {
+        var callerClientConfig, _init_logger, profiles, _init_profile, profileName, profile, ssoSessionName, ssoSessions, ssoSession, _i, _iter, ssoSessionRequiredKey, ssoRegion, ssoToken, accessToken, expiresAt, existingToken, newSsoOidcToken, newTokenExpiration;
+        var _arguments = arguments;
+        return _ts_generator$2(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    callerClientConfig = (_arguments.length > 0 && _arguments[0] !== void 0 ? _arguments[0] : {}).callerClientConfig;
+                    (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : _init_logger.debug("@aws-sdk/token-providers - fromSso");
+                    return [
+                        4,
+                        parseKnownFiles(init)
+                    ];
+                case 1:
+                    profiles = _state.sent();
+                    profileName = getProfileName({
+                        profile: (_init_profile = init.profile) !== null && _init_profile !== void 0 ? _init_profile : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.profile
+                    });
+                    profile = profiles[profileName];
+                    if (!profile) {
+                        throw new TokenProviderError("Profile '".concat(profileName, "' could not be found in shared credentials file."), false);
+                    } else if (!profile["sso_session"]) {
+                        throw new TokenProviderError("Profile '".concat(profileName, "' is missing required property 'sso_session'."));
+                    }
+                    ssoSessionName = profile["sso_session"];
+                    return [
+                        4,
+                        loadSsoSessionData(init)
+                    ];
+                case 2:
+                    ssoSessions = _state.sent();
+                    ssoSession = ssoSessions[ssoSessionName];
+                    if (!ssoSession) {
+                        throw new TokenProviderError("Sso session '".concat(ssoSessionName, "' could not be found in shared credentials file."), false);
+                    }
+                    for(_i = 0, _iter = [
+                        "sso_start_url",
+                        "sso_region"
+                    ]; _i < _iter.length; _i++){
+                        ssoSessionRequiredKey = _iter[_i];
+                        if (!ssoSession[ssoSessionRequiredKey]) {
+                            throw new TokenProviderError("Sso session '".concat(ssoSessionName, "' is missing required property '").concat(ssoSessionRequiredKey, "'."), false);
+                        }
+                    }
+                    ssoSession["sso_start_url"];
+                    ssoRegion = ssoSession["sso_region"];
+                    _state.label = 3;
+                case 3:
+                    _state.trys.push([
+                        3,
+                        5,
+                        ,
+                        6
+                    ]);
+                    return [
+                        4,
+                        getSSOTokenFromFile(ssoSessionName)
+                    ];
+                case 4:
+                    ssoToken = _state.sent();
+                    return [
+                        3,
+                        6
+                    ];
+                case 5:
+                    _state.sent();
+                    throw new TokenProviderError("The SSO session token associated with profile=".concat(profileName, " was not found or is invalid. ").concat(REFRESH_MESSAGE), false);
+                case 6:
+                    validateTokenKey("accessToken", ssoToken.accessToken);
+                    validateTokenKey("expiresAt", ssoToken.expiresAt);
+                    accessToken = ssoToken.accessToken, expiresAt = ssoToken.expiresAt;
+                    existingToken = {
+                        token: accessToken,
+                        expiration: new Date(expiresAt)
+                    };
+                    if (existingToken.expiration.getTime() - Date.now() > EXPIRE_WINDOW_MS) {
+                        return [
+                            2,
+                            existingToken
+                        ];
+                    }
+                    if (Date.now() - lastRefreshAttemptTime.getTime() < 30 * 1000) {
+                        validateTokenExpiry(existingToken);
+                        return [
+                            2,
+                            existingToken
+                        ];
+                    }
+                    validateTokenKey("clientId", ssoToken.clientId, true);
+                    validateTokenKey("clientSecret", ssoToken.clientSecret, true);
+                    validateTokenKey("refreshToken", ssoToken.refreshToken, true);
+                    _state.label = 7;
+                case 7:
+                    _state.trys.push([
+                        7,
+                        13,
+                        ,
+                        14
+                    ]);
+                    lastRefreshAttemptTime.setTime(Date.now());
+                    return [
+                        4,
+                        getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig)
+                    ];
+                case 8:
+                    newSsoOidcToken = _state.sent();
+                    validateTokenKey("accessToken", newSsoOidcToken.accessToken);
+                    validateTokenKey("expiresIn", newSsoOidcToken.expiresIn);
+                    newTokenExpiration = new Date(Date.now() + newSsoOidcToken.expiresIn * 1000);
+                    _state.label = 9;
+                case 9:
+                    _state.trys.push([
+                        9,
+                        11,
+                        ,
+                        12
+                    ]);
+                    return [
+                        4,
+                        writeSSOTokenToFile(ssoSessionName, _object_spread_props(_object_spread$1({}, ssoToken), {
+                            accessToken: newSsoOidcToken.accessToken,
+                            expiresAt: newTokenExpiration.toISOString(),
+                            refreshToken: newSsoOidcToken.refreshToken
+                        }))
+                    ];
+                case 10:
+                    _state.sent();
+                    return [
+                        3,
+                        12
+                    ];
+                case 11:
+                    _state.sent();
+                    return [
+                        3,
+                        12
+                    ];
+                case 12:
+                    return [
+                        2,
+                        {
+                            token: newSsoOidcToken.accessToken,
+                            expiration: newTokenExpiration
+                        }
+                    ];
+                case 13:
+                    _state.sent();
+                    validateTokenExpiry(existingToken);
+                    return [
+                        2,
+                        existingToken
+                    ];
+                case 14:
+                    return [
+                        2
+                    ];
             }
         });
-    }
-    function resume(key, arg) {
-        try {
-            var result = gen[key](arg);
-            var value = result.value;
-            var wrappedAwait = value instanceof _await_value$1;
-            Promise.resolve(wrappedAwait ? value.wrapped : value).then(function(arg) {
-                if (wrappedAwait) {
-                    resume("next", arg);
-                    return;
-                }
-                settle(result.done ? "return" : "normal", arg);
-            }, function(err) {
-                resume("throw", err);
-            });
-        } catch (err) {
-            settle("throw", err);
-        }
-    }
-    function settle(type, value) {
-        switch(type){
-            case "return":
-                front.resolve({
-                    value: value,
-                    done: true
-                });
-                break;
-            case "throw":
-                front.reject(value);
-                break;
-            default:
-                front.resolve({
-                    value: value,
-                    done: false
-                });
-                break;
-        }
-        front = front.next;
-        if (front) {
-            resume(front.key, front.arg);
-        } else {
-            back = null;
-        }
-    }
-    this._invoke = send;
-    if (typeof gen.return !== "function") {
-        this.return = undefined;
-    }
-}
-if (typeof Symbol === "function" && Symbol.asyncIterator) {
-    _async_generator$1.prototype[Symbol.asyncIterator] = function() {
-        return this;
-    };
-}
-_async_generator$1.prototype.next = function(arg) {
-    return this._invoke("next", arg);
-};
-_async_generator$1.prototype.throw = function(arg) {
-    return this._invoke("throw", arg);
-};
-_async_generator$1.prototype.return = function(arg) {
-    return this._invoke("return", arg);
+    });
 };
+
 function asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
@@ -121,13 +728,7 @@ function _async_to_generator$1(fn) {
         });
     };
 }
-function _await_async_generator(value) {
-    return new _await_value$1(value);
-}
-function _await_value$1(value) {
-    this.wrapped = value;
-}
-function _define_property$1(obj, key, value) {
+function _define_property(obj, key, value) {
     if (key in obj) {
         Object.defineProperty(obj, key, {
             value: value,
@@ -140,10 +741,20 @@ function _define_property$1(obj, key, value) {
     }
     return obj;
 }
-function _wrap_async_generator$1(fn) {
-    return function() {
-        return new _async_generator$1(fn.apply(this, arguments));
-    };
+function _object_spread(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property(target, key, source[key]);
+        });
+    }
+    return target;
 }
 function _ts_generator$1(thisArg, body) {
     var f, y, t, g, _ = {
@@ -240,222 +851,173 @@ function _ts_generator$1(thisArg, body) {
         };
     }
 }
-var readableStreamToIterable = function(readableStream) {
-    return _define_property$1({}, Symbol.asyncIterator, /*#__PURE__*/ _wrap_async_generator$1(function() {
-        var reader, _ref, done, value;
+var SHOULD_FAIL_CREDENTIAL_CHAIN = false;
+var resolveSSOCredentials = function() {
+    var _ref = _async_to_generator$1(function(param) {
+        var ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, callerClientConfig, profile, filepath, configFilepath, ignoreCache, logger, token, refreshMessage, _token, e, accessToken, _ref, SSOClient, GetRoleCredentialsCommand, _clientConfig_logger, _ref1, _clientConfig_region, _clientConfig_userAgentAppId, _ref2, sso, ssoResp, e2, tmp, _ref3, accessKeyId, secretAccessKey, sessionToken, expiration, credentialScope, accountId, credentials;
         return _ts_generator$1(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    reader = readableStream.getReader();
+                    ssoStartUrl = param.ssoStartUrl, ssoSession = param.ssoSession, ssoAccountId = param.ssoAccountId, ssoRegion = param.ssoRegion, ssoRoleName = param.ssoRoleName, ssoClient = param.ssoClient, clientConfig = param.clientConfig, parentClientConfig = param.parentClientConfig, callerClientConfig = param.callerClientConfig, profile = param.profile, filepath = param.filepath, configFilepath = param.configFilepath, ignoreCache = param.ignoreCache, logger = param.logger;
+                    refreshMessage = "To refresh this SSO session run aws sso login with the corresponding profile.";
+                    if (!ssoSession) return [
+                        3,
+                        5
+                    ];
                     _state.label = 1;
                 case 1:
                     _state.trys.push([
                         1,
+                        3,
                         ,
-                        6,
-                        7
+                        4
                     ]);
-                    _state.label = 2;
-                case 2:
                     return [
                         4,
-                        _await_async_generator(reader.read())
-                    ];
-                case 3:
-                    _ref = _state.sent(), done = _ref.done, value = _ref.value;
-                    if (done) return [
-                        2
+                        fromSso({
+                            profile: profile,
+                            filepath: filepath,
+                            configFilepath: configFilepath,
+                            ignoreCache: ignoreCache
+                        })()
                     ];
+                case 2:
+                    _token = _state.sent();
+                    token = {
+                        accessToken: _token.token,
+                        expiresAt: new Date(_token.expiration).toISOString()
+                    };
                     return [
-                        4,
-                        value
+                        3,
+                        4
                     ];
+                case 3:
+                    e = _state.sent();
+                    throw new CredentialsProviderError(e.message, {
+                        tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
+                        logger: logger
+                    });
                 case 4:
-                    _state.sent();
                     return [
                         3,
-                        2
+                        8
                     ];
                 case 5:
+                    _state.trys.push([
+                        5,
+                        7,
+                        ,
+                        8
+                    ]);
                     return [
-                        3,
-                        7
+                        4,
+                        getSSOTokenFromFile(ssoStartUrl)
                     ];
                 case 6:
-                    reader.releaseLock();
+                    token = _state.sent();
                     return [
-                        7
+                        3,
+                        8
                     ];
                 case 7:
+                    _state.sent();
+                    throw new CredentialsProviderError("The SSO session associated with this profile is invalid. ".concat(refreshMessage), {
+                        tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
+                        logger: logger
+                    });
+                case 8:
+                    if (new Date(token.expiresAt).getTime() - Date.now() <= 0) {
+                        throw new CredentialsProviderError("The SSO session associated with this profile has expired. ".concat(refreshMessage), {
+                            tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
+                            logger: logger
+                        });
+                    }
+                    accessToken = token.accessToken;
                     return [
-                        2
+                        4,
+                        import('./loadSso.esm.js')
+                    ];
+                case 9:
+                    _ref = _state.sent(), SSOClient = _ref.SSOClient, GetRoleCredentialsCommand = _ref.GetRoleCredentialsCommand;
+                    sso = ssoClient || new SSOClient(Object.assign({}, clientConfig !== null && clientConfig !== void 0 ? clientConfig : {}, {
+                        logger: (_ref1 = (_clientConfig_logger = clientConfig === null || clientConfig === void 0 ? void 0 : clientConfig.logger) !== null && _clientConfig_logger !== void 0 ? _clientConfig_logger : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.logger) !== null && _ref1 !== void 0 ? _ref1 : parentClientConfig === null || parentClientConfig === void 0 ? void 0 : parentClientConfig.logger,
+                        region: (_clientConfig_region = clientConfig === null || clientConfig === void 0 ? void 0 : clientConfig.region) !== null && _clientConfig_region !== void 0 ? _clientConfig_region : ssoRegion,
+                        userAgentAppId: (_ref2 = (_clientConfig_userAgentAppId = clientConfig === null || clientConfig === void 0 ? void 0 : clientConfig.userAgentAppId) !== null && _clientConfig_userAgentAppId !== void 0 ? _clientConfig_userAgentAppId : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.userAgentAppId) !== null && _ref2 !== void 0 ? _ref2 : parentClientConfig === null || parentClientConfig === void 0 ? void 0 : parentClientConfig.userAgentAppId
+                    }));
+                    _state.label = 10;
+                case 10:
+                    _state.trys.push([
+                        10,
+                        12,
+                        ,
+                        13
+                    ]);
+                    return [
+                        4,
+                        sso.send(new GetRoleCredentialsCommand({
+                            accountId: ssoAccountId,
+                            roleName: ssoRoleName,
+                            accessToken: accessToken
+                        }))
+                    ];
+                case 11:
+                    ssoResp = _state.sent();
+                    return [
+                        3,
+                        13
+                    ];
+                case 12:
+                    e2 = _state.sent();
+                    throw new CredentialsProviderError(e2, {
+                        tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
+                        logger: logger
+                    });
+                case 13:
+                    tmp = ssoResp.roleCredentials, _ref3 = tmp === void 0 ? {} : tmp, accessKeyId = _ref3.accessKeyId, secretAccessKey = _ref3.secretAccessKey, sessionToken = _ref3.sessionToken, expiration = _ref3.expiration, credentialScope = _ref3.credentialScope, accountId = _ref3.accountId;
+                    if (!accessKeyId || !secretAccessKey || !sessionToken || !expiration) {
+                        throw new CredentialsProviderError("SSO returns an invalid temporary credential.", {
+                            tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,
+                            logger: logger
+                        });
+                    }
+                    credentials = _object_spread({
+                        accessKeyId: accessKeyId,
+                        secretAccessKey: secretAccessKey,
+                        sessionToken: sessionToken,
+                        expiration: new Date(expiration)
+                    }, credentialScope && {
+                        credentialScope: credentialScope
+                    }, accountId && {
+                        accountId: accountId
+                    });
+                    if (ssoSession) {
+                        setCredentialFeature(credentials, "CREDENTIALS_SSO", "s");
+                    } else {
+                        setCredentialFeature(credentials, "CREDENTIALS_SSO_LEGACY", "u");
+                    }
+                    return [
+                        2,
+                        credentials
                     ];
             }
         });
-    }));
-};
-var iterableToReadableStream = function(asyncIterable) {
-    var iterator = asyncIterable[Symbol.asyncIterator]();
-    return new ReadableStream({
-        pull: function pull(controller) {
-            return _async_to_generator$1(function() {
-                var _ref, done, value;
-                return _ts_generator$1(this, function(_state) {
-                    switch(_state.label){
-                        case 0:
-                            return [
-                                4,
-                                iterator.next()
-                            ];
-                        case 1:
-                            _ref = _state.sent(), done = _ref.done, value = _ref.value;
-                            if (done) {
-                                return [
-                                    2,
-                                    controller.close()
-                                ];
-                            }
-                            controller.enqueue(value);
-                            return [
-                                2
-                            ];
-                    }
-                });
-            })();
-        }
     });
-};
+    return function resolveSSOCredentials(_) {
+        return _ref.apply(this, arguments);
+    };
+}();
 
-function _array_like_to_array(arr, len) {
-    if (len == null || len > arr.length) len = arr.length;
-    for(var i = 0, arr2 = new Array(len); i < len; i++)arr2[i] = arr[i];
-    return arr2;
-}
-function _array_with_holes(arr) {
-    if (Array.isArray(arr)) return arr;
-}
-function _async_generator(gen) {
-    var front, back;
-    function send(key, arg) {
-        return new Promise(function(resolve, reject) {
-            var request = {
-                key: key,
-                arg: arg,
-                resolve: resolve,
-                reject: reject,
-                next: null
-            };
-            if (back) {
-                back = back.next = request;
-            } else {
-                front = back = request;
-                resume(key, arg);
-            }
+var validateSsoProfile = function(profile, logger) {
+    var sso_start_url = profile.sso_start_url, sso_account_id = profile.sso_account_id, sso_region = profile.sso_region, sso_role_name = profile.sso_role_name;
+    if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {
+        throw new CredentialsProviderError('Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", ' + '"sso_region", "sso_role_name", "sso_start_url". Got '.concat(Object.keys(profile).join(", "), "\nReference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html"), {
+            tryNextLink: false,
+            logger: logger
         });
     }
-    function resume(key, arg) {
-        try {
-            var result = gen[key](arg);
-            var value = result.value;
-            var wrappedAwait = value instanceof _await_value;
-            Promise.resolve(wrappedAwait ? value.wrapped : value).then(function(arg) {
-                if (wrappedAwait) {
-                    resume("next", arg);
-                    return;
-                }
-                settle(result.done ? "return" : "normal", arg);
-            }, function(err) {
-                resume("throw", err);
-            });
-        } catch (err) {
-            settle("throw", err);
-        }
-    }
-    function settle(type, value) {
-        switch(type){
-            case "return":
-                front.resolve({
-                    value: value,
-                    done: true
-                });
-                break;
-            case "throw":
-                front.reject(value);
-                break;
-            default:
-                front.resolve({
-                    value: value,
-                    done: false
-                });
-                break;
-        }
-        front = front.next;
-        if (front) {
-            resume(front.key, front.arg);
-        } else {
-            back = null;
-        }
-    }
-    this._invoke = send;
-    if (typeof gen.return !== "function") {
-        this.return = undefined;
-    }
-}
-if (typeof Symbol === "function" && Symbol.asyncIterator) {
-    _async_generator.prototype[Symbol.asyncIterator] = function() {
-        return this;
-    };
-}
-_async_generator.prototype.next = function(arg) {
-    return this._invoke("next", arg);
-};
-_async_generator.prototype.throw = function(arg) {
-    return this._invoke("throw", arg);
-};
-_async_generator.prototype.return = function(arg) {
-    return this._invoke("return", arg);
+    return profile;
 };
-function _async_iterator(iterable) {
-    var method, async, sync, retry = 2;
-    for("undefined" != typeof Symbol && (async = Symbol.asyncIterator, sync = Symbol.iterator); retry--;){
-        if (async && null != (method = iterable[async])) return method.call(iterable);
-        if (sync && null != (method = iterable[sync])) return new AsyncFromSyncIterator(method.call(iterable));
-        async = "@@asyncIterator", sync = "@@iterator";
-    }
-    throw new TypeError("Object is not async iterable");
-}
-function AsyncFromSyncIterator(s) {
-    function AsyncFromSyncIteratorContinuation(r) {
-        if (Object(r) !== r) return Promise.reject(new TypeError(r + " is not an object."));
-        var done = r.done;
-        return Promise.resolve(r.value).then(function(value) {
-            return {
-                value: value,
-                done: done
-            };
-        });
-    }
-    return AsyncFromSyncIterator = function(s) {
-        this.s = s, this.n = s.next;
-    }, AsyncFromSyncIterator.prototype = {
-        s: null,
-        n: null,
-        next: function() {
-            return AsyncFromSyncIteratorContinuation(this.n.apply(this.s, arguments));
-        },
-        return: function(value) {
-            var ret = this.s.return;
-            return void 0 === ret ? Promise.resolve({
-                value: value,
-                done: true
-            }) : AsyncFromSyncIteratorContinuation(ret.apply(this.s, arguments));
-        },
-        throw: function(value) {
-            var thr = this.s.return;
-            return void 0 === thr ? Promise.reject(value) : AsyncFromSyncIteratorContinuation(thr.apply(this.s, arguments));
-        }
-    }, new AsyncFromSyncIterator(s);
-}
+
 function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
@@ -485,102 +1047,6 @@ function _async_to_generator(fn) {
         });
     };
 }
-function _await_value(value) {
-    this.wrapped = value;
-}
-function _class_call_check(instance, Constructor) {
-    if (!(instance instanceof Constructor)) {
-        throw new TypeError("Cannot call a class as a function");
-    }
-}
-function _defineProperties(target, props) {
-    for(var i = 0; i < props.length; i++){
-        var descriptor = props[i];
-        descriptor.enumerable = descriptor.enumerable || false;
-        descriptor.configurable = true;
-        if ("value" in descriptor) descriptor.writable = true;
-        Object.defineProperty(target, descriptor.key, descriptor);
-    }
-}
-function _create_class(Constructor, protoProps, staticProps) {
-    if (protoProps) _defineProperties(Constructor.prototype, protoProps);
-    return Constructor;
-}
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _iterable_to_array_limit(arr, i) {
-    var _i = arr == null ? null : typeof Symbol !== "undefined" && arr[Symbol.iterator] || arr["@@iterator"];
-    if (_i == null) return;
-    var _arr = [];
-    var _n = true;
-    var _d = false;
-    var _s, _e;
-    try {
-        for(_i = _i.call(arr); !(_n = (_s = _i.next()).done); _n = true){
-            _arr.push(_s.value);
-            if (i && _arr.length === i) break;
-        }
-    } catch (err) {
-        _d = true;
-        _e = err;
-    } finally{
-        try {
-            if (!_n && _i["return"] != null) _i["return"]();
-        } finally{
-            if (_d) throw _e;
-        }
-    }
-    return _arr;
-}
-function _non_iterable_rest() {
-    throw new TypeError("Invalid attempt to destructure non-iterable instance.\\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.");
-}
-function _object_spread(target) {
-    for(var i = 1; i < arguments.length; i++){
-        var source = arguments[i] != null ? arguments[i] : {};
-        var ownKeys = Object.keys(source);
-        if (typeof Object.getOwnPropertySymbols === "function") {
-            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
-                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
-            }));
-        }
-        ownKeys.forEach(function(key) {
-            _define_property(target, key, source[key]);
-        });
-    }
-    return target;
-}
-function _sliced_to_array(arr, i) {
-    return _array_with_holes(arr) || _iterable_to_array_limit(arr, i) || _unsupported_iterable_to_array(arr, i) || _non_iterable_rest();
-}
-function _type_of(obj) {
-    "@swc/helpers - typeof";
-    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
-}
-function _unsupported_iterable_to_array(o, minLen) {
-    if (!o) return;
-    if (typeof o === "string") return _array_like_to_array(o, minLen);
-    var n = Object.prototype.toString.call(o).slice(8, -1);
-    if (n === "Object" && o.constructor) n = o.constructor.name;
-    if (n === "Map" || n === "Set") return Array.from(n);
-    if (n === "Arguments" || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)) return _array_like_to_array(o, minLen);
-}
-function _wrap_async_generator(fn) {
-    return function() {
-        return new _async_generator(fn.apply(this, arguments));
-    };
-}
 function _ts_generator(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
@@ -676,587 +1142,124 @@ function _ts_generator(thisArg, body) {
         };
     }
 }
-var EventStreamSerde = /*#__PURE__*/ function() {
-    function EventStreamSerde(param) {
-        var marshaller = param.marshaller, serializer = param.serializer, deserializer = param.deserializer, serdeContext = param.serdeContext, defaultContentType = param.defaultContentType;
-        _class_call_check(this, EventStreamSerde);
-        _define_property(this, "marshaller", void 0);
-        _define_property(this, "serializer", void 0);
-        _define_property(this, "deserializer", void 0);
-        _define_property(this, "serdeContext", void 0);
-        _define_property(this, "defaultContentType", void 0);
-        this.marshaller = marshaller;
-        this.serializer = serializer;
-        this.deserializer = deserializer;
-        this.serdeContext = serdeContext;
-        this.defaultContentType = defaultContentType;
-    }
-    _create_class(EventStreamSerde, [
-        {
-            key: "serializeEventStream",
-            value: function serializeEventStream(param) {
-                var eventStream = param.eventStream, requestSchema = param.requestSchema, initialRequest = param.initialRequest;
-                var _this = this;
-                return _async_to_generator(function() {
-                    var marshaller, eventStreamMember, unionSchema, serializer, defaultContentType, initialRequestMarker, eventStreamIterable;
-                    return _ts_generator(this, function(_state) {
-                        marshaller = _this.marshaller;
-                        eventStreamMember = requestSchema.getEventStreamMember();
-                        unionSchema = requestSchema.getMemberSchema(eventStreamMember);
-                        serializer = _this.serializer;
-                        defaultContentType = _this.defaultContentType;
-                        initialRequestMarker = Symbol("initialRequestMarker");
-                        eventStreamIterable = _define_property({}, Symbol.asyncIterator, function() {
-                            return _wrap_async_generator(function() {
-                                var headers, body, _obj, _iteratorAbruptCompletion, _didIteratorError, _iteratorError, _iterator, _step, _value, page, err;
-                                return _ts_generator(this, function(_state) {
-                                    switch(_state.label){
-                                        case 0:
-                                            if (!initialRequest) return [
-                                                3,
-                                                2
-                                            ];
-                                            headers = {
-                                                ":event-type": {
-                                                    type: "string",
-                                                    value: "initial-request"
-                                                },
-                                                ":message-type": {
-                                                    type: "string",
-                                                    value: "event"
-                                                },
-                                                ":content-type": {
-                                                    type: "string",
-                                                    value: defaultContentType
-                                                }
-                                            };
-                                            serializer.write(requestSchema, initialRequest);
-                                            body = serializer.flush();
-                                            return [
-                                                4,
-                                                (_obj = {}, _define_property(_obj, initialRequestMarker, true), _define_property(_obj, "headers", headers), _define_property(_obj, "body", body), _obj)
-                                            ];
-                                        case 1:
-                                            _state.sent();
-                                            _state.label = 2;
-                                        case 2:
-                                            _iteratorAbruptCompletion = false, _didIteratorError = false;
-                                            _state.label = 3;
-                                        case 3:
-                                            _state.trys.push([
-                                                3,
-                                                9,
-                                                10,
-                                                15
-                                            ]);
-                                            _iterator = _async_iterator(eventStream);
-                                            _state.label = 4;
-                                        case 4:
-                                            return [
-                                                4,
-                                                _iterator.next()
-                                            ];
-                                        case 5:
-                                            if (!(_iteratorAbruptCompletion = !(_step = _state.sent()).done)) return [
-                                                3,
-                                                8
-                                            ];
-                                            _value = _step.value;
-                                            page = _value;
-                                            return [
-                                                4,
-                                                page
-                                            ];
-                                        case 6:
-                                            _state.sent();
-                                            _state.label = 7;
-                                        case 7:
-                                            _iteratorAbruptCompletion = false;
-                                            return [
-                                                3,
-                                                4
-                                            ];
-                                        case 8:
-                                            return [
-                                                3,
-                                                15
-                                            ];
-                                        case 9:
-                                            err = _state.sent();
-                                            _didIteratorError = true;
-                                            _iteratorError = err;
-                                            return [
-                                                3,
-                                                15
-                                            ];
-                                        case 10:
-                                            _state.trys.push([
-                                                10,
-                                                ,
-                                                13,
-                                                14
-                                            ]);
-                                            if (!(_iteratorAbruptCompletion && _iterator.return != null)) return [
-                                                3,
-                                                12
-                                            ];
-                                            return [
-                                                4,
-                                                _iterator.return()
-                                            ];
-                                        case 11:
-                                            _state.sent();
-                                            _state.label = 12;
-                                        case 12:
-                                            return [
-                                                3,
-                                                14
-                                            ];
-                                        case 13:
-                                            if (_didIteratorError) {
-                                                throw _iteratorError;
-                                            }
-                                            return [
-                                                7
-                                            ];
-                                        case 14:
-                                            return [
-                                                7
-                                            ];
-                                        case 15:
-                                            return [
-                                                2
-                                            ];
-                                    }
-                                });
-                            })();
+var fromSSO = function() {
+    var init = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
+    return /*#__PURE__*/ _async_to_generator(function() {
+        var callerClientConfig, _init_logger, ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession, ssoClient, _init_profile, profileName, profiles, profile, ssoSessions, session, conflictMsg, _validateSsoProfile, sso_start_url, sso_account_id, sso_region, sso_role_name, sso_session;
+        var _arguments = arguments;
+        return _ts_generator(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    callerClientConfig = (_arguments.length > 0 && _arguments[0] !== void 0 ? _arguments[0] : {}).callerClientConfig;
+                    (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : _init_logger.debug("@aws-sdk/credential-provider-sso - fromSSO");
+                    ssoStartUrl = init.ssoStartUrl, ssoAccountId = init.ssoAccountId, ssoRegion = init.ssoRegion, ssoRoleName = init.ssoRoleName, ssoSession = init.ssoSession;
+                    ssoClient = init.ssoClient;
+                    profileName = getProfileName({
+                        profile: (_init_profile = init.profile) !== null && _init_profile !== void 0 ? _init_profile : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.profile
+                    });
+                    if (!(!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession)) return [
+                        3,
+                        4
+                    ];
+                    return [
+                        4,
+                        parseKnownFiles(init)
+                    ];
+                case 1:
+                    profiles = _state.sent();
+                    profile = profiles[profileName];
+                    if (!profile) {
+                        throw new CredentialsProviderError("Profile ".concat(profileName, " was not found."), {
+                            logger: init.logger
+                        });
+                    }
+                    if (!isSsoProfile(profile)) {
+                        throw new CredentialsProviderError("Profile ".concat(profileName, " is not configured with SSO credentials."), {
+                            logger: init.logger
+                        });
+                    }
+                    if (!(profile === null || profile === void 0 ? void 0 : profile.sso_session)) return [
+                        3,
+                        3
+                    ];
+                    return [
+                        4,
+                        loadSsoSessionData(init)
+                    ];
+                case 2:
+                    ssoSessions = _state.sent();
+                    session = ssoSessions[profile.sso_session];
+                    conflictMsg = " configurations in profile ".concat(profileName, " and sso-session ").concat(profile.sso_session);
+                    if (ssoRegion && ssoRegion !== session.sso_region) {
+                        throw new CredentialsProviderError("Conflicting SSO region" + conflictMsg, {
+                            tryNextLink: false,
+                            logger: init.logger
+                        });
+                    }
+                    if (ssoStartUrl && ssoStartUrl !== session.sso_start_url) {
+                        throw new CredentialsProviderError("Conflicting SSO start_url" + conflictMsg, {
+                            tryNextLink: false,
+                            logger: init.logger
+                        });
+                    }
+                    profile.sso_region = session.sso_region;
+                    profile.sso_start_url = session.sso_start_url;
+                    _state.label = 3;
+                case 3:
+                    _validateSsoProfile = validateSsoProfile(profile, init.logger), sso_start_url = _validateSsoProfile.sso_start_url, sso_account_id = _validateSsoProfile.sso_account_id, sso_region = _validateSsoProfile.sso_region, sso_role_name = _validateSsoProfile.sso_role_name, sso_session = _validateSsoProfile.sso_session;
+                    return [
+                        2,
+                        resolveSSOCredentials({
+                            ssoStartUrl: sso_start_url,
+                            ssoSession: sso_session,
+                            ssoAccountId: sso_account_id,
+                            ssoRegion: sso_region,
+                            ssoRoleName: sso_role_name,
+                            ssoClient: ssoClient,
+                            clientConfig: init.clientConfig,
+                            parentClientConfig: init.parentClientConfig,
+                            callerClientConfig: init.callerClientConfig,
+                            profile: profileName,
+                            filepath: init.filepath,
+                            configFilepath: init.configFilepath,
+                            ignoreCache: init.ignoreCache,
+                            logger: init.logger
+                        })
+                    ];
+                case 4:
+                    if (!ssoStartUrl || !ssoAccountId || !ssoRegion || !ssoRoleName) {
+                        throw new CredentialsProviderError("Incomplete configuration. The fromSSO() argument hash must include " + '"ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"', {
+                            tryNextLink: false,
+                            logger: init.logger
                         });
+                    } else {
                         return [
                             2,
-                            marshaller.serialize(eventStreamIterable, function(event) {
-                                if (event[initialRequestMarker]) {
-                                    return {
-                                        headers: event.headers,
-                                        body: event.body
-                                    };
-                                }
-                                var unionMember = "";
-                                for(var key in event){
-                                    if (key !== "__type") {
-                                        unionMember = key;
-                                        break;
-                                    }
-                                }
-                                var _this_writeEventBody = _this.writeEventBody(unionMember, unionSchema, event), additionalHeaders = _this_writeEventBody.additionalHeaders, body = _this_writeEventBody.body, eventType = _this_writeEventBody.eventType, explicitPayloadContentType = _this_writeEventBody.explicitPayloadContentType;
-                                var headers = _object_spread({
-                                    ":event-type": {
-                                        type: "string",
-                                        value: eventType
-                                    },
-                                    ":message-type": {
-                                        type: "string",
-                                        value: "event"
-                                    },
-                                    ":content-type": {
-                                        type: "string",
-                                        value: explicitPayloadContentType !== null && explicitPayloadContentType !== void 0 ? explicitPayloadContentType : defaultContentType
-                                    }
-                                }, additionalHeaders);
-                                return {
-                                    headers: headers,
-                                    body: body
-                                };
+                            resolveSSOCredentials({
+                                ssoStartUrl: ssoStartUrl,
+                                ssoSession: ssoSession,
+                                ssoAccountId: ssoAccountId,
+                                ssoRegion: ssoRegion,
+                                ssoRoleName: ssoRoleName,
+                                ssoClient: ssoClient,
+                                clientConfig: init.clientConfig,
+                                parentClientConfig: init.parentClientConfig,
+                                callerClientConfig: init.callerClientConfig,
+                                profile: profileName,
+                                filepath: init.filepath,
+                                configFilepath: init.configFilepath,
+                                ignoreCache: init.ignoreCache,
+                                logger: init.logger
                             })
                         ];
-                    });
-                })();
-            }
-        },
-        {
-            key: "deserializeEventStream",
-            value: function deserializeEventStream(param) {
-                var response = param.response, responseSchema = param.responseSchema, initialResponseContainer = param.initialResponseContainer;
-                var _this = this;
-                return _async_to_generator(function() {
-                    var _firstEvent_value, marshaller, eventStreamMember, unionSchema, memberSchemas, initialResponseMarker, asyncIterable, asyncIterator, firstEvent;
-                    return _ts_generator(this, function(_state) {
-                        switch(_state.label){
-                            case 0:
-                                marshaller = _this.marshaller;
-                                eventStreamMember = responseSchema.getEventStreamMember();
-                                unionSchema = responseSchema.getMemberSchema(eventStreamMember);
-                                memberSchemas = unionSchema.getMemberSchemas();
-                                initialResponseMarker = Symbol("initialResponseMarker");
-                                asyncIterable = marshaller.deserialize(response.body, function() {
-                                    var _ref = _async_to_generator(function(event) {
-                                        var unionMember, body, dataObject, eventStreamSchema, out, hasBindings, _iteratorNormalCompletion, _didIteratorError, _iteratorError, _iterator, _step, _step_value, name, member, _member_getMergedTraits, eventHeader, eventPayload, _this_serdeContext, _this_serdeContext_utf8Encoder, _event_unionMember_headers_name, value, err, _tmp;
-                                        return _ts_generator(this, function(_state) {
-                                            switch(_state.label){
-                                                case 0:
-                                                    unionMember = "";
-                                                    for(var key in event){
-                                                        if (key !== "__type") {
-                                                            unionMember = key;
-                                                            break;
-                                                        }
-                                                    }
-                                                    body = event[unionMember].body;
-                                                    if (!(unionMember === "initial-response")) return [
-                                                        3,
-                                                        2
-                                                    ];
-                                                    return [
-                                                        4,
-                                                        _this.deserializer.read(responseSchema, body)
-                                                    ];
-                                                case 1:
-                                                    dataObject = _state.sent();
-                                                    delete dataObject[eventStreamMember];
-                                                    return [
-                                                        2,
-                                                        _object_spread(_define_property({}, initialResponseMarker, true), dataObject)
-                                                    ];
-                                                case 2:
-                                                    if (!(unionMember in memberSchemas)) return [
-                                                        3,
-                                                        17
-                                                    ];
-                                                    eventStreamSchema = memberSchemas[unionMember];
-                                                    if (!eventStreamSchema.isStructSchema()) return [
-                                                        3,
-                                                        15
-                                                    ];
-                                                    out = {};
-                                                    hasBindings = false;
-                                                    _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
-                                                    _state.label = 3;
-                                                case 3:
-                                                    _state.trys.push([
-                                                        3,
-                                                        12,
-                                                        13,
-                                                        14
-                                                    ]);
-                                                    _iterator = eventStreamSchema.structIterator()[Symbol.iterator]();
-                                                    _state.label = 4;
-                                                case 4:
-                                                    if (!!(_iteratorNormalCompletion = (_step = _iterator.next()).done)) return [
-                                                        3,
-                                                        11
-                                                    ];
-                                                    _step_value = _sliced_to_array(_step.value, 2), name = _step_value[0], member = _step_value[1];
-                                                    _member_getMergedTraits = member.getMergedTraits(), eventHeader = _member_getMergedTraits.eventHeader, eventPayload = _member_getMergedTraits.eventPayload;
-                                                    hasBindings = hasBindings || Boolean(eventHeader || eventPayload);
-                                                    if (!eventPayload) return [
-                                                        3,
-                                                        9
-                                                    ];
-                                                    if (!member.isBlobSchema()) return [
-                                                        3,
-                                                        5
-                                                    ];
-                                                    out[name] = body;
-                                                    return [
-                                                        3,
-                                                        8
-                                                    ];
-                                                case 5:
-                                                    if (!member.isStringSchema()) return [
-                                                        3,
-                                                        6
-                                                    ];
-                                                    out[name] = ((_this_serdeContext_utf8Encoder = (_this_serdeContext = _this.serdeContext) === null || _this_serdeContext === void 0 ? void 0 : _this_serdeContext.utf8Encoder) !== null && _this_serdeContext_utf8Encoder !== void 0 ? _this_serdeContext_utf8Encoder : toUtf8)(body);
-                                                    return [
-                                                        3,
-                                                        8
-                                                    ];
-                                                case 6:
-                                                    if (!member.isStructSchema()) return [
-                                                        3,
-                                                        8
-                                                    ];
-                                                    return [
-                                                        4,
-                                                        _this.deserializer.read(member, body)
-                                                    ];
-                                                case 7:
-                                                    out[name] = _state.sent();
-                                                    _state.label = 8;
-                                                case 8:
-                                                    return [
-                                                        3,
-                                                        10
-                                                    ];
-                                                case 9:
-                                                    if (eventHeader) {
-                                                        value = (_event_unionMember_headers_name = event[unionMember].headers[name]) === null || _event_unionMember_headers_name === void 0 ? void 0 : _event_unionMember_headers_name.value;
-                                                        if (value != null) {
-                                                            if (member.isNumericSchema()) {
-                                                                if (value && (typeof value === "undefined" ? "undefined" : _type_of(value)) === "object" && "bytes" in value) {
-                                                                    out[name] = BigInt(value.toString());
-                                                                } else {
-                                                                    out[name] = Number(value);
-                                                                }
-                                                            } else {
-                                                                out[name] = value;
-                                                            }
-                                                        }
-                                                    }
-                                                    _state.label = 10;
-                                                case 10:
-                                                    _iteratorNormalCompletion = true;
-                                                    return [
-                                                        3,
-                                                        4
-                                                    ];
-                                                case 11:
-                                                    return [
-                                                        3,
-                                                        14
-                                                    ];
-                                                case 12:
-                                                    err = _state.sent();
-                                                    _didIteratorError = true;
-                                                    _iteratorError = err;
-                                                    return [
-                                                        3,
-                                                        14
-                                                    ];
-                                                case 13:
-                                                    try {
-                                                        if (!_iteratorNormalCompletion && _iterator.return != null) {
-                                                            _iterator.return();
-                                                        }
-                                                    } finally{
-                                                        if (_didIteratorError) {
-                                                            throw _iteratorError;
-                                                        }
-                                                    }
-                                                    return [
-                                                        7
-                                                    ];
-                                                case 14:
-                                                    if (hasBindings) {
-                                                        return [
-                                                            2,
-                                                            _define_property({}, unionMember, out)
-                                                        ];
-                                                    }
-                                                    if (body.byteLength === 0) {
-                                                        return [
-                                                            2,
-                                                            _define_property({}, unionMember, {})
-                                                        ];
-                                                    }
-                                                    _state.label = 15;
-                                                case 15:
-                                                    _tmp = [
-                                                        {},
-                                                        unionMember
-                                                    ];
-                                                    return [
-                                                        4,
-                                                        _this.deserializer.read(eventStreamSchema, body)
-                                                    ];
-                                                case 16:
-                                                    return [
-                                                        2,
-                                                        _define_property.apply(void 0, _tmp.concat([
-                                                            _state.sent()
-                                                        ]))
-                                                    ];
-                                                case 17:
-                                                    return [
-                                                        2,
-                                                        {
-                                                            $unknown: event
-                                                        }
-                                                    ];
-                                                case 18:
-                                                    return [
-                                                        2
-                                                    ];
-                                            }
-                                        });
-                                    });
-                                    return function(event) {
-                                        return _ref.apply(this, arguments);
-                                    };
-                                }());
-                                asyncIterator = asyncIterable[Symbol.asyncIterator]();
-                                return [
-                                    4,
-                                    asyncIterator.next()
-                                ];
-                            case 1:
-                                firstEvent = _state.sent();
-                                if (firstEvent.done) {
-                                    return [
-                                        2,
-                                        asyncIterable
-                                    ];
-                                }
-                                if ((_firstEvent_value = firstEvent.value) === null || _firstEvent_value === void 0 ? void 0 : _firstEvent_value[initialResponseMarker]) {
-                                    if (!responseSchema) {
-                                        throw new Error("@smithy::core/protocols - initial-response event encountered in event stream but no response schema given.");
-                                    }
-                                    for(var key in firstEvent.value){
-                                        initialResponseContainer[key] = firstEvent.value[key];
-                                    }
-                                }
-                                return [
-                                    2,
-                                    _define_property({}, Symbol.asyncIterator, function() {
-                                        return _wrap_async_generator(function() {
-                                            var _firstEvent_value, _ref, done, value;
-                                            return _ts_generator(this, function(_state) {
-                                                switch(_state.label){
-                                                    case 0:
-                                                        if (!!(firstEvent === null || firstEvent === void 0 ? void 0 : (_firstEvent_value = firstEvent.value) === null || _firstEvent_value === void 0 ? void 0 : _firstEvent_value[initialResponseMarker])) return [
-                                                            3,
-                                                            2
-                                                        ];
-                                                        return [
-                                                            4,
-                                                            firstEvent.value
-                                                        ];
-                                                    case 1:
-                                                        _state.sent();
-                                                        _state.label = 2;
-                                                    case 2:
-                                                        return [
-                                                            4,
-                                                            asyncIterator.next()
-                                                        ];
-                                                    case 3:
-                                                        _ref = _state.sent(), done = _ref.done, value = _ref.value;
-                                                        if (done) {
-                                                            return [
-                                                                3,
-                                                                5
-                                                            ];
-                                                        }
-                                                        return [
-                                                            4,
-                                                            value
-                                                        ];
-                                                    case 4:
-                                                        _state.sent();
-                                                        return [
-                                                            3,
-                                                            2
-                                                        ];
-                                                    case 5:
-                                                        return [
-                                                            2
-                                                        ];
-                                                }
-                                            });
-                                        })();
-                                    })
-                                ];
-                        }
-                    });
-                })();
-            }
-        },
-        {
-            key: "writeEventBody",
-            value: function writeEventBody(unionMember, unionSchema, event) {
-                var _this_serdeContext;
-                var serializer = this.serializer;
-                var eventType = unionMember;
-                var explicitPayloadMember = null;
-                var explicitPayloadContentType;
-                var isKnownSchema = function() {
-                    var struct = unionSchema.getSchema();
-                    return struct[4].includes(unionMember);
-                }();
-                var additionalHeaders = {};
-                if (!isKnownSchema) {
-                    var _event_unionMember = _sliced_to_array(event[unionMember], 2), type = _event_unionMember[0], value = _event_unionMember[1];
-                    eventType = type;
-                    serializer.write(15, value);
-                } else {
-                    var eventSchema = unionSchema.getMemberSchema(unionMember);
-                    if (eventSchema.isStructSchema()) {
-                        var _iteratorNormalCompletion = true, _didIteratorError = false, _iteratorError = undefined;
-                        try {
-                            for(var _iterator = eventSchema.structIterator()[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = true){
-                                var _step_value = _sliced_to_array(_step.value, 2), memberName = _step_value[0], memberSchema = _step_value[1];
-                                var _memberSchema_getMergedTraits = memberSchema.getMergedTraits(), eventHeader = _memberSchema_getMergedTraits.eventHeader, eventPayload = _memberSchema_getMergedTraits.eventPayload;
-                                if (eventPayload) {
-                                    explicitPayloadMember = memberName;
-                                } else if (eventHeader) {
-                                    var value1 = event[unionMember][memberName];
-                                    var type1 = "binary";
-                                    if (memberSchema.isNumericSchema()) {
-                                        if (Math.pow(-2, 31) <= value1 && value1 <= Math.pow(2, 31) - 1) {
-                                            type1 = "integer";
-                                        } else {
-                                            type1 = "long";
-                                        }
-                                    } else if (memberSchema.isTimestampSchema()) {
-                                        type1 = "timestamp";
-                                    } else if (memberSchema.isStringSchema()) {
-                                        type1 = "string";
-                                    } else if (memberSchema.isBooleanSchema()) {
-                                        type1 = "boolean";
-                                    }
-                                    if (value1 != null) {
-                                        additionalHeaders[memberName] = {
-                                            type: type1,
-                                            value: value1
-                                        };
-                                        delete event[unionMember][memberName];
-                                    }
-                                }
-                            }
-                        } catch (err) {
-                            _didIteratorError = true;
-                            _iteratorError = err;
-                        } finally{
-                            try {
-                                if (!_iteratorNormalCompletion && _iterator.return != null) {
-                                    _iterator.return();
-                                }
-                            } finally{
-                                if (_didIteratorError) {
-                                    throw _iteratorError;
-                                }
-                            }
-                        }
-                        if (explicitPayloadMember !== null) {
-                            var payloadSchema = eventSchema.getMemberSchema(explicitPayloadMember);
-                            if (payloadSchema.isBlobSchema()) {
-                                explicitPayloadContentType = "application/octet-stream";
-                            } else if (payloadSchema.isStringSchema()) {
-                                explicitPayloadContentType = "text/plain";
-                            }
-                            serializer.write(payloadSchema, event[unionMember][explicitPayloadMember]);
-                        } else {
-                            serializer.write(eventSchema, event[unionMember]);
-                        }
-                    } else if (eventSchema.isUnitSchema()) {
-                        serializer.write(eventSchema, {});
-                    } else {
-                        throw new Error("@smithy/core/event-streams - non-struct member not supported in event stream union.");
                     }
-                }
-                var _serializer_flush;
-                var messageSerialization = (_serializer_flush = serializer.flush()) !== null && _serializer_flush !== void 0 ? _serializer_flush : new Uint8Array();
-                var _this_serdeContext_utf8Decoder;
-                var body = typeof messageSerialization === "string" ? ((_this_serdeContext_utf8Decoder = (_this_serdeContext = this.serdeContext) === null || _this_serdeContext === void 0 ? void 0 : _this_serdeContext.utf8Decoder) !== null && _this_serdeContext_utf8Decoder !== void 0 ? _this_serdeContext_utf8Decoder : fromUtf8)(messageSerialization) : messageSerialization;
-                return {
-                    body: body,
-                    eventType: eventType,
-                    explicitPayloadContentType: explicitPayloadContentType,
-                    additionalHeaders: additionalHeaders
-                };
+                case 5:
+                    return [
+                        2
+                    ];
             }
-        }
-    ]);
-    return EventStreamSerde;
-}();
+        });
+    });
+};
 
-export { EventStreamSerde, iterableToReadableStream, readableStreamToIterable };
+export { fromSSO, isSsoProfile, validateSsoProfile };