@digipair/skill-s3 0.136.3 → 0.136.5

package/dist/index.esm7.js

@@ -1,84 +1,260 @@
-import { exec } from 'node:child_process';
-import { promisify } from 'node:util';
-import { s as setCredentialFeature, C as CredentialsProviderError, x as getProfileName } from './index.esm3.js';
-import { e as externalDataInterceptor } from './externalDataInterceptor.esm.js';
+import { C as CredentialsProviderError, c as chain, s as setCredentialFeature, g as getProfileName, r as readFile, H as HttpRequest } from './index.esm2.js';
+import { createHash, createPrivateKey, createPublicKey, sign } from 'node:crypto';
+import { promises } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, dirname } from 'node:path';
 import { p as parseKnownFiles } from './parseKnownFiles.esm.js';
-import 'node:crypto';
-import 'node:path';
-import 'node:os';
+import 'buffer';
+import 'path';
+import 'os';
 import 'node:fs/promises';
+import 'stream';
+import 'crypto';
 import 'node:stream';
-import 'node:process';
-import 'buffer';
-import 'node:fs';
-import 'node:https';
-import 'node:zlib';
-import './getSSOTokenFromFile.esm.js';
+import 'http';
+import 'https';
+import 'process';
+import 'zlib';
 
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
+function asyncGeneratorStep$a(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
     } else {
-        obj[key] = value;
+        Promise.resolve(value).then(_next, _throw);
     }
-    return obj;
 }
-function _object_spread(target) {
-    for(var i = 1; i < arguments.length; i++){
-        var source = arguments[i] != null ? arguments[i] : {};
-        var ownKeys = Object.keys(source);
-        if (typeof Object.getOwnPropertySymbols === "function") {
-            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
-                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
-            }));
-        }
-        ownKeys.forEach(function(key) {
-            _define_property(target, key, source[key]);
+function _async_to_generator$a(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$a(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$a(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
         });
-    }
-    return target;
+    };
 }
-var getValidatedProcessCredentials = function(profileName, data, profiles) {
-    var _profiles_profileName;
-    if (data.Version !== 1) {
-        throw Error("Profile ".concat(profileName, " credential_process did not return Version 1."));
-    }
-    if (data.AccessKeyId === undefined || data.SecretAccessKey === undefined) {
-        throw Error("Profile ".concat(profileName, " credential_process returned invalid credentials."));
+function _ts_generator$a(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
     }
-    if (data.Expiration) {
-        var currentTime = new Date();
-        var expireTime = new Date(data.Expiration);
-        if (expireTime < currentTime) {
-            throw Error("Profile ".concat(profileName, " credential_process returned expired credentials."));
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
         }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
     }
-    var accountId = data.AccountId;
-    if (!accountId && (profiles === null || profiles === void 0 ? void 0 : (_profiles_profileName = profiles[profileName]) === null || _profiles_profileName === void 0 ? void 0 : _profiles_profileName.aws_account_id)) {
-        accountId = profiles[profileName].aws_account_id;
-    }
-    var credentials = _object_spread({
-        accessKeyId: data.AccessKeyId,
-        secretAccessKey: data.SecretAccessKey
-    }, data.SessionToken && {
-        sessionToken: data.SessionToken
-    }, data.Expiration && {
-        expiration: new Date(data.Expiration)
-    }, data.CredentialScope && {
-        credentialScope: data.CredentialScope
-    }, accountId && {
-        accountId: accountId
-    });
-    setCredentialFeature(credentials, "CREDENTIALS_PROCESS", "w");
-    return credentials;
+}
+var resolveCredentialSource = function(credentialSource, profileName, logger) {
+    var sourceProvidersMap = {
+        EcsContainer: function() {
+            var _ref = _async_to_generator$a(function(options) {
+                var fromHttp, fromContainerMetadata;
+                return _ts_generator$a(this, function(_state) {
+                    switch(_state.label){
+                        case 0:
+                            return [
+                                4,
+                                import('./index.esm12.js')
+                            ];
+                        case 1:
+                            fromHttp = _state.sent().fromHttp;
+                            return [
+                                4,
+                                import('./index.esm13.js')
+                            ];
+                        case 2:
+                            fromContainerMetadata = _state.sent().fromContainerMetadata;
+                            logger === null || logger === void 0 ? void 0 : logger.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer");
+                            return [
+                                2,
+                                /*#__PURE__*/ _async_to_generator$a(function() {
+                                    return _ts_generator$a(this, function(_state) {
+                                        return [
+                                            2,
+                                            chain(fromHttp(options !== null && options !== void 0 ? options : {}), fromContainerMetadata(options))().then(setNamedProvider)
+                                        ];
+                                    });
+                                })
+                            ];
+                    }
+                });
+            });
+            return function(options) {
+                return _ref.apply(this, arguments);
+            };
+        }(),
+        Ec2InstanceMetadata: function() {
+            var _ref = _async_to_generator$a(function(options) {
+                var fromInstanceMetadata;
+                return _ts_generator$a(this, function(_state) {
+                    switch(_state.label){
+                        case 0:
+                            logger === null || logger === void 0 ? void 0 : logger.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");
+                            return [
+                                4,
+                                import('./index.esm13.js')
+                            ];
+                        case 1:
+                            fromInstanceMetadata = _state.sent().fromInstanceMetadata;
+                            return [
+                                2,
+                                /*#__PURE__*/ _async_to_generator$a(function() {
+                                    return _ts_generator$a(this, function(_state) {
+                                        return [
+                                            2,
+                                            fromInstanceMetadata(options)().then(setNamedProvider)
+                                        ];
+                                    });
+                                })
+                            ];
+                    }
+                });
+            });
+            return function(options) {
+                return _ref.apply(this, arguments);
+            };
+        }(),
+        Environment: function() {
+            var _ref = _async_to_generator$a(function(options) {
+                var fromEnv;
+                return _ts_generator$a(this, function(_state) {
+                    switch(_state.label){
+                        case 0:
+                            logger === null || logger === void 0 ? void 0 : logger.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");
+                            return [
+                                4,
+                                import('./index.esm14.js')
+                            ];
+                        case 1:
+                            fromEnv = _state.sent().fromEnv;
+                            return [
+                                2,
+                                /*#__PURE__*/ _async_to_generator$a(function() {
+                                    return _ts_generator$a(this, function(_state) {
+                                        return [
+                                            2,
+                                            fromEnv(options)().then(setNamedProvider)
+                                        ];
+                                    });
+                                })
+                            ];
+                    }
+                });
+            });
+            return function(options) {
+                return _ref.apply(this, arguments);
+            };
+        }()
+    };
+    if (credentialSource in sourceProvidersMap) {
+        return sourceProvidersMap[credentialSource];
+    } else {
+        throw new CredentialsProviderError("Unsupported credential source in profile ".concat(profileName, ". Got ").concat(credentialSource, ", ") + "expected EcsContainer or Ec2InstanceMetadata or Environment.", {
+            logger: logger
+        });
+    }
+};
+var setNamedProvider = function(creds) {
+    return setCredentialFeature(creds, "CREDENTIALS_PROFILE_NAMED_PROVIDER", "p");
 };
 
-function asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, key, arg) {
+function asyncGeneratorStep$9(gen, resolve, reject, _next, _throw, key, arg) {
     try {
         var info = gen[key](arg);
         var value = info.value;
@@ -92,22 +268,73 @@ function asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, key, arg) {
         Promise.resolve(value).then(_next, _throw);
     }
 }
-function _async_to_generator$1(fn) {
+function _async_to_generator$9(fn) {
     return function() {
         var self = this, args = arguments;
         return new Promise(function(resolve, reject) {
             var gen = fn.apply(self, args);
             function _next(value) {
-                asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, "next", value);
+                asyncGeneratorStep$9(gen, resolve, reject, _next, _throw, "next", value);
             }
             function _throw(err) {
-                asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, "throw", err);
+                asyncGeneratorStep$9(gen, resolve, reject, _next, _throw, "throw", err);
             }
             _next(undefined);
         });
     };
 }
-function _ts_generator$1(thisArg, body) {
+function _define_property$4(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread$4(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$4(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys$3(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props$3(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys$3(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+function _type_of$3(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
+function _ts_generator$9(thisArg, body) {
     var f, y, t, g, _ = {
         label: 0,
         sent: function() {
@@ -202,77 +429,2156 @@ function _ts_generator$1(thisArg, body) {
         };
     }
 }
-var resolveProcessCredentials = function() {
-    var _ref = _async_to_generator$1(function(profileName, profiles, logger) {
-        var profile, credentialProcess, _externalDataInterceptor_getTokenRecord, _externalDataInterceptor_getTokenRecord_exec, execPromise, stdout, data, error;
-        return _ts_generator$1(this, function(_state) {
+var isAssumeRoleProfile = function(arg) {
+    var _ref = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : {}, _ref_profile = _ref.profile, profile = _ref_profile === void 0 ? "default" : _ref_profile, logger = _ref.logger;
+    return Boolean(arg) && (typeof arg === "undefined" ? "undefined" : _type_of$3(arg)) === "object" && typeof arg.role_arn === "string" && [
+        "undefined",
+        "string"
+    ].indexOf(_type_of$3(arg.role_session_name)) > -1 && [
+        "undefined",
+        "string"
+    ].indexOf(_type_of$3(arg.external_id)) > -1 && [
+        "undefined",
+        "string"
+    ].indexOf(_type_of$3(arg.mfa_serial)) > -1 && (isAssumeRoleWithSourceProfile(arg, {
+        profile: profile,
+        logger: logger
+    }) || isCredentialSourceProfile(arg, {
+        profile: profile,
+        logger: logger
+    }));
+};
+var isAssumeRoleWithSourceProfile = function(arg, param) {
+    var profile = param.profile, logger = param.logger;
+    var withSourceProfile = typeof arg.source_profile === "string" && typeof arg.credential_source === "undefined";
+    if (withSourceProfile) {
+        var _logger_debug;
+        logger === null || logger === void 0 ? void 0 : (_logger_debug = logger.debug) === null || _logger_debug === void 0 ? void 0 : _logger_debug.call(logger, "    ".concat(profile, " isAssumeRoleWithSourceProfile source_profile=").concat(arg.source_profile));
+    }
+    return withSourceProfile;
+};
+var isCredentialSourceProfile = function(arg, param) {
+    var profile = param.profile, logger = param.logger;
+    var withProviderProfile = typeof arg.credential_source === "string" && typeof arg.source_profile === "undefined";
+    if (withProviderProfile) {
+        var _logger_debug;
+        logger === null || logger === void 0 ? void 0 : (_logger_debug = logger.debug) === null || _logger_debug === void 0 ? void 0 : _logger_debug.call(logger, "    ".concat(profile, " isCredentialSourceProfile credential_source=").concat(arg.credential_source));
+    }
+    return withProviderProfile;
+};
+var resolveAssumeRoleCredentials = function() {
+    var _ref = _async_to_generator$9(function(profileName, profiles, options, callerClientConfig) {
+        var visitedProfiles, resolveProfileData, _options_logger, _options_logger1, profileData, source_profile, region, _options_parentClientConfig, getDefaultRoleAssumer, _ref, _profiles_source_profile, sourceCredsProvider, _tmp, params, mfa_serial, sourceCreds;
+        var _arguments = arguments;
+        return _ts_generator$9(this, function(_state) {
             switch(_state.label){
                 case 0:
-                    profile = profiles[profileName];
-                    if (!profiles[profileName]) return [
-                        3,
-                        7
-                    ];
-                    credentialProcess = profile["credential_process"];
-                    if (!(credentialProcess !== undefined)) return [
+                    visitedProfiles = _arguments.length > 4 && _arguments[4] !== void 0 ? _arguments[4] : {}, resolveProfileData = _arguments.length > 5 ? _arguments[5] : void 0;
+                    (_options_logger = options.logger) === null || _options_logger === void 0 ? void 0 : _options_logger.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");
+                    profileData = profiles[profileName];
+                    source_profile = profileData.source_profile, region = profileData.region;
+                    if (!!options.roleAssumer) return [
                         3,
-                        5
+                        2
                     ];
-                    execPromise = promisify((_externalDataInterceptor_getTokenRecord_exec = externalDataInterceptor === null || externalDataInterceptor === void 0 ? void 0 : (_externalDataInterceptor_getTokenRecord = externalDataInterceptor.getTokenRecord) === null || _externalDataInterceptor_getTokenRecord === void 0 ? void 0 : _externalDataInterceptor_getTokenRecord.call(externalDataInterceptor).exec) !== null && _externalDataInterceptor_getTokenRecord_exec !== void 0 ? _externalDataInterceptor_getTokenRecord_exec : exec);
-                    _state.label = 1;
-                case 1:
-                    _state.trys.push([
-                        1,
-                        3,
-                        ,
-                        4
-                    ]);
                     return [
                         4,
-                        execPromise(credentialProcess)
+                        import('./index.esm15.js')
                     ];
+                case 1:
+                    getDefaultRoleAssumer = _state.sent().getDefaultRoleAssumer;
+                    options.roleAssumer = getDefaultRoleAssumer(_object_spread_props$3(_object_spread$4({}, options.clientConfig), {
+                        credentialProviderLogger: options.logger,
+                        parentClientConfig: _object_spread_props$3(_object_spread$4({}, callerClientConfig, options === null || options === void 0 ? void 0 : options.parentClientConfig), {
+                            region: (_ref = region !== null && region !== void 0 ? region : options === null || options === void 0 ? void 0 : (_options_parentClientConfig = options.parentClientConfig) === null || _options_parentClientConfig === void 0 ? void 0 : _options_parentClientConfig.region) !== null && _ref !== void 0 ? _ref : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.region
+                        })
+                    }), options.clientPlugins);
+                    _state.label = 2;
                 case 2:
-                    stdout = _state.sent().stdout;
-                    try {
-                        data = JSON.parse(stdout.trim());
-                    } catch (e) {
-                        throw Error("Profile ".concat(profileName, " credential_process returned invalid JSON."));
+                    if (source_profile && source_profile in visitedProfiles) {
+                        throw new CredentialsProviderError("Detected a cycle attempting to resolve credentials for profile" + " ".concat(getProfileName(options), ". Profiles visited: ") + Object.keys(visitedProfiles).join(", "), {
+                            logger: options.logger
+                        });
                     }
+                    (_options_logger1 = options.logger) === null || _options_logger1 === void 0 ? void 0 : _options_logger1.debug("@aws-sdk/credential-provider-ini - finding credential resolver using ".concat(source_profile ? "source_profile=[".concat(source_profile, "]") : "profile=[".concat(profileName, "]")));
+                    if (!source_profile) return [
+                        3,
+                        3
+                    ];
+                    _tmp = resolveProfileData(source_profile, profiles, options, callerClientConfig, _object_spread_props$3(_object_spread$4({}, visitedProfiles), _define_property$4({}, source_profile, true)), isCredentialSourceWithoutRoleArn((_profiles_source_profile = profiles[source_profile]) !== null && _profiles_source_profile !== void 0 ? _profiles_source_profile : {}));
                     return [
-                        2,
-                        getValidatedProcessCredentials(profileName, data, profiles)
+                        3,
+                        5
                     ];
                 case 3:
-                    error = _state.sent();
-                    throw new CredentialsProviderError(error.message, {
-                        logger: logger
-                    });
-                case 4:
                     return [
+                        4,
+                        resolveCredentialSource(profileData.credential_source, profileName, options.logger)(options)
+                    ];
+                case 4:
+                    _tmp = _state.sent()();
+                    _state.label = 5;
+                case 5:
+                    sourceCredsProvider = _tmp;
+                    if (!isCredentialSourceWithoutRoleArn(profileData)) return [
                         3,
                         6
                     ];
-                case 5:
-                    throw new CredentialsProviderError("Profile ".concat(profileName, " did not contain credential_process."), {
-                        logger: logger
-                    });
-                case 6:
                     return [
+                        2,
+                        sourceCredsProvider.then(function(creds) {
+                            return setCredentialFeature(creds, "CREDENTIALS_PROFILE_SOURCE_PROFILE", "o");
+                        })
+                    ];
+                case 6:
+                    params = {
+                        RoleArn: profileData.role_arn,
+                        RoleSessionName: profileData.role_session_name || "aws-sdk-js-".concat(Date.now()),
+                        ExternalId: profileData.external_id,
+                        DurationSeconds: parseInt(profileData.duration_seconds || "3600", 10)
+                    };
+                    mfa_serial = profileData.mfa_serial;
+                    if (!mfa_serial) return [
                         3,
                         8
                     ];
+                    if (!options.mfaCodeProvider) {
+                        throw new CredentialsProviderError("Profile ".concat(profileName, " requires multi-factor authentication, but no MFA code callback was provided."), {
+                            logger: options.logger,
+                            tryNextLink: false
+                        });
+                    }
+                    params.SerialNumber = mfa_serial;
+                    return [
+                        4,
+                        options.mfaCodeProvider(mfa_serial)
+                    ];
                 case 7:
-                    throw new CredentialsProviderError("Profile ".concat(profileName, " could not be found in shared credentials file."), {
-                        logger: logger
-                    });
+                    params.TokenCode = _state.sent();
+                    _state.label = 8;
                 case 8:
+                    return [
+                        4,
+                        sourceCredsProvider
+                    ];
+                case 9:
+                    sourceCreds = _state.sent();
+                    return [
+                        2,
+                        options.roleAssumer(sourceCreds, params).then(function(creds) {
+                            return setCredentialFeature(creds, "CREDENTIALS_PROFILE_SOURCE_PROFILE", "o");
+                        })
+                    ];
+                case 10:
                     return [
                         2
                     ];
             }
         });
     });
-    return function resolveProcessCredentials(profileName, profiles, logger) {
+    return function resolveAssumeRoleCredentials(profileName, profiles, options, callerClientConfig) {
+        return _ref.apply(this, arguments);
+    };
+}();
+var isCredentialSourceWithoutRoleArn = function(section) {
+    return !section.role_arn && !!section.credential_source;
+};
+
+function asyncGeneratorStep$8(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$8(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$8(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$8(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _class_call_check(instance, Constructor) {
+    if (!(instance instanceof Constructor)) {
+        throw new TypeError("Cannot call a class as a function");
+    }
+}
+function _defineProperties(target, props) {
+    for(var i = 0; i < props.length; i++){
+        var descriptor = props[i];
+        descriptor.enumerable = descriptor.enumerable || false;
+        descriptor.configurable = true;
+        if ("value" in descriptor) descriptor.writable = true;
+        Object.defineProperty(target, descriptor.key, descriptor);
+    }
+}
+function _create_class(Constructor, protoProps, staticProps) {
+    if (protoProps) _defineProperties(Constructor.prototype, protoProps);
+    return Constructor;
+}
+function _define_property$3(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _instanceof(left, right) {
+    if (right != null && typeof Symbol !== "undefined" && right[Symbol.hasInstance]) {
+        return !!right[Symbol.hasInstance](left);
+    } else {
+        return left instanceof right;
+    }
+}
+function _object_spread$3(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$3(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys$2(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props$2(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys$2(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+function _ts_generator$8(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var LoginCredentialsFetcher = /*#__PURE__*/ function() {
+    function LoginCredentialsFetcher(profileData, init, callerClientConfig) {
+        _class_call_check(this, LoginCredentialsFetcher);
+        _define_property$3(this, "profileData", void 0);
+        _define_property$3(this, "init", void 0);
+        _define_property$3(this, "callerClientConfig", void 0);
+        this.profileData = profileData;
+        this.init = init;
+        this.callerClientConfig = callerClientConfig;
+    }
+    _create_class(LoginCredentialsFetcher, [
+        {
+            key: "loadCredentials",
+            value: function loadCredentials() {
+                var _this = this;
+                return _async_to_generator$8(function() {
+                    var token, accessToken, now, expiryTime, timeUntilExpiry;
+                    return _ts_generator$8(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                return [
+                                    4,
+                                    _this.loadToken()
+                                ];
+                            case 1:
+                                token = _state.sent();
+                                if (!token) {
+                                    throw new CredentialsProviderError("Failed to load a token for session ".concat(_this.loginSession, ", please re-authenticate using aws login"), {
+                                        tryNextLink: false,
+                                        logger: _this.logger
+                                    });
+                                }
+                                accessToken = token.accessToken;
+                                now = Date.now();
+                                expiryTime = new Date(accessToken.expiresAt).getTime();
+                                timeUntilExpiry = expiryTime - now;
+                                if (timeUntilExpiry <= LoginCredentialsFetcher.REFRESH_THRESHOLD) {
+                                    return [
+                                        2,
+                                        _this.refresh(token)
+                                    ];
+                                }
+                                return [
+                                    2,
+                                    {
+                                        accessKeyId: accessToken.accessKeyId,
+                                        secretAccessKey: accessToken.secretAccessKey,
+                                        sessionToken: accessToken.sessionToken,
+                                        accountId: accessToken.accountId,
+                                        expiration: new Date(accessToken.expiresAt)
+                                    }
+                                ];
+                        }
+                    });
+                })();
+            }
+        },
+        {
+            key: "logger",
+            get: function get() {
+                var _this_init;
+                return (_this_init = this.init) === null || _this_init === void 0 ? void 0 : _this_init.logger;
+            }
+        },
+        {
+            key: "loginSession",
+            get: function get() {
+                return this.profileData.login_session;
+            }
+        },
+        {
+            key: "refresh",
+            value: function refresh(token) {
+                var _this = this;
+                return _async_to_generator$8(function() {
+                    var _this_callerClientConfig, _this_callerClientConfig1, _this_callerClientConfig_region, _this_callerClientConfig2, _this_init, _ref, SigninClient, CreateOAuth2TokenCommand, _this_callerClientConfig3, _ref1, logger, userAgentAppId, isH2, requestHandler, _this_profileData_region, _ref2, region, _tmp, client, commandInput, _response_tokenOutput, response, _response_tokenOutput_accessToken, _ref3, accessKeyId, secretAccessKey, sessionToken, _response_tokenOutput1, _ref4, refreshToken, expiresIn, expiresInMs, expiration, updatedToken, newAccessToken, error, errorType, message;
+                    return _ts_generator$8(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                return [
+                                    4,
+                                    import('./index.esm16.js')
+                                ];
+                            case 1:
+                                _ref = _state.sent(), SigninClient = _ref.SigninClient, CreateOAuth2TokenCommand = _ref.CreateOAuth2TokenCommand;
+                                _ref1 = (_this_callerClientConfig3 = _this.callerClientConfig) !== null && _this_callerClientConfig3 !== void 0 ? _this_callerClientConfig3 : {}, logger = _ref1.logger, userAgentAppId = _ref1.userAgentAppId;
+                                isH2 = function(requestHandler) {
+                                    var _requestHandler_metadata;
+                                    return (requestHandler === null || requestHandler === void 0 ? void 0 : (_requestHandler_metadata = requestHandler.metadata) === null || _requestHandler_metadata === void 0 ? void 0 : _requestHandler_metadata.handlerProtocol) === "h2";
+                                };
+                                requestHandler = isH2((_this_callerClientConfig = _this.callerClientConfig) === null || _this_callerClientConfig === void 0 ? void 0 : _this_callerClientConfig.requestHandler) ? undefined : (_this_callerClientConfig1 = _this.callerClientConfig) === null || _this_callerClientConfig1 === void 0 ? void 0 : _this_callerClientConfig1.requestHandler;
+                                if (!((_this_profileData_region = _this.profileData.region) !== null && _this_profileData_region !== void 0)) return [
+                                    3,
+                                    2
+                                ];
+                                _tmp = _this_profileData_region;
+                                return [
+                                    3,
+                                    4
+                                ];
+                            case 2:
+                                return [
+                                    4,
+                                    (_this_callerClientConfig2 = _this.callerClientConfig) === null || _this_callerClientConfig2 === void 0 ? void 0 : (_this_callerClientConfig_region = _this_callerClientConfig2.region) === null || _this_callerClientConfig_region === void 0 ? void 0 : _this_callerClientConfig_region.call(_this_callerClientConfig2)
+                                ];
+                            case 3:
+                                _tmp = _state.sent();
+                                _state.label = 4;
+                            case 4:
+                                region = (_ref2 = _tmp) !== null && _ref2 !== void 0 ? _ref2 : process.env.AWS_REGION;
+                                client = new SigninClient(_object_spread$3({
+                                    credentials: {
+                                        accessKeyId: "",
+                                        secretAccessKey: ""
+                                    },
+                                    region: region,
+                                    requestHandler: requestHandler,
+                                    logger: logger,
+                                    userAgentAppId: userAgentAppId
+                                }, (_this_init = _this.init) === null || _this_init === void 0 ? void 0 : _this_init.clientConfig));
+                                _this.createDPoPInterceptor(client.middlewareStack);
+                                commandInput = {
+                                    tokenInput: {
+                                        clientId: token.clientId,
+                                        refreshToken: token.refreshToken,
+                                        grantType: "refresh_token"
+                                    }
+                                };
+                                _state.label = 5;
+                            case 5:
+                                _state.trys.push([
+                                    5,
+                                    8,
+                                    ,
+                                    9
+                                ]);
+                                return [
+                                    4,
+                                    client.send(new CreateOAuth2TokenCommand(commandInput))
+                                ];
+                            case 6:
+                                response = _state.sent();
+                                _ref3 = (_response_tokenOutput_accessToken = (_response_tokenOutput = response.tokenOutput) === null || _response_tokenOutput === void 0 ? void 0 : _response_tokenOutput.accessToken) !== null && _response_tokenOutput_accessToken !== void 0 ? _response_tokenOutput_accessToken : {}, accessKeyId = _ref3.accessKeyId, secretAccessKey = _ref3.secretAccessKey, sessionToken = _ref3.sessionToken;
+                                _ref4 = (_response_tokenOutput1 = response.tokenOutput) !== null && _response_tokenOutput1 !== void 0 ? _response_tokenOutput1 : {}, refreshToken = _ref4.refreshToken, expiresIn = _ref4.expiresIn;
+                                if (!accessKeyId || !secretAccessKey || !sessionToken || !refreshToken) {
+                                    throw new CredentialsProviderError("Token refresh response missing required fields", {
+                                        logger: _this.logger,
+                                        tryNextLink: false
+                                    });
+                                }
+                                expiresInMs = (expiresIn !== null && expiresIn !== void 0 ? expiresIn : 900) * 1000;
+                                expiration = new Date(Date.now() + expiresInMs);
+                                updatedToken = _object_spread_props$2(_object_spread$3({}, token), {
+                                    accessToken: _object_spread_props$2(_object_spread$3({}, token.accessToken), {
+                                        accessKeyId: accessKeyId,
+                                        secretAccessKey: secretAccessKey,
+                                        sessionToken: sessionToken,
+                                        expiresAt: expiration.toISOString()
+                                    }),
+                                    refreshToken: refreshToken
+                                });
+                                return [
+                                    4,
+                                    _this.saveToken(updatedToken)
+                                ];
+                            case 7:
+                                _state.sent();
+                                newAccessToken = updatedToken.accessToken;
+                                return [
+                                    2,
+                                    {
+                                        accessKeyId: newAccessToken.accessKeyId,
+                                        secretAccessKey: newAccessToken.secretAccessKey,
+                                        sessionToken: newAccessToken.sessionToken,
+                                        accountId: newAccessToken.accountId,
+                                        expiration: expiration
+                                    }
+                                ];
+                            case 8:
+                                error = _state.sent();
+                                if (error.name === "AccessDeniedException") {
+                                    errorType = error.error;
+                                    switch(errorType){
+                                        case "TOKEN_EXPIRED":
+                                            message = "Your session has expired. Please reauthenticate.";
+                                            break;
+                                        case "USER_CREDENTIALS_CHANGED":
+                                            message = "Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";
+                                            break;
+                                        case "INSUFFICIENT_PERMISSIONS":
+                                            message = "Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";
+                                            break;
+                                        default:
+                                            message = "Failed to refresh token: ".concat(String(error), ". Please re-authenticate using `aws login`");
+                                    }
+                                    throw new CredentialsProviderError(message, {
+                                        logger: _this.logger,
+                                        tryNextLink: false
+                                    });
+                                }
+                                throw new CredentialsProviderError("Failed to refresh token: ".concat(String(error), ". Please re-authenticate using aws login"), {
+                                    logger: _this.logger
+                                });
+                            case 9:
+                                return [
+                                    2
+                                ];
+                        }
+                    });
+                })();
+            }
+        },
+        {
+            key: "loadToken",
+            value: function loadToken() {
+                var _this = this;
+                return _async_to_generator$8(function() {
+                    var tokenFilePath, _token_accessToken, tokenData, _this_init, token, missingFields, error;
+                    return _ts_generator$8(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                tokenFilePath = _this.getTokenFilePath();
+                                _state.label = 1;
+                            case 1:
+                                _state.trys.push([
+                                    1,
+                                    7,
+                                    ,
+                                    8
+                                ]);
+                                _state.label = 2;
+                            case 2:
+                                _state.trys.push([
+                                    2,
+                                    4,
+                                    ,
+                                    6
+                                ]);
+                                return [
+                                    4,
+                                    readFile(tokenFilePath, {
+                                        ignoreCache: (_this_init = _this.init) === null || _this_init === void 0 ? void 0 : _this_init.ignoreCache
+                                    })
+                                ];
+                            case 3:
+                                tokenData = _state.sent();
+                                return [
+                                    3,
+                                    6
+                                ];
+                            case 4:
+                                _state.sent();
+                                return [
+                                    4,
+                                    promises.readFile(tokenFilePath, "utf8")
+                                ];
+                            case 5:
+                                tokenData = _state.sent();
+                                return [
+                                    3,
+                                    6
+                                ];
+                            case 6:
+                                token = JSON.parse(tokenData);
+                                missingFields = [
+                                    "accessToken",
+                                    "clientId",
+                                    "refreshToken",
+                                    "dpopKey"
+                                ].filter(function(k) {
+                                    return !token[k];
+                                });
+                                if (!((_token_accessToken = token.accessToken) === null || _token_accessToken === void 0 ? void 0 : _token_accessToken.accountId)) {
+                                    missingFields.push("accountId");
+                                }
+                                if (missingFields.length > 0) {
+                                    throw new CredentialsProviderError("Token validation failed, missing fields: ".concat(missingFields.join(", ")), {
+                                        logger: _this.logger,
+                                        tryNextLink: false
+                                    });
+                                }
+                                return [
+                                    2,
+                                    token
+                                ];
+                            case 7:
+                                error = _state.sent();
+                                throw new CredentialsProviderError("Failed to load token from ".concat(tokenFilePath, ": ").concat(String(error)), {
+                                    logger: _this.logger,
+                                    tryNextLink: false
+                                });
+                            case 8:
+                                return [
+                                    2
+                                ];
+                        }
+                    });
+                })();
+            }
+        },
+        {
+            key: "saveToken",
+            value: function saveToken(token) {
+                var _this = this;
+                return _async_to_generator$8(function() {
+                    var tokenFilePath, directory;
+                    return _ts_generator$8(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                tokenFilePath = _this.getTokenFilePath();
+                                directory = dirname(tokenFilePath);
+                                _state.label = 1;
+                            case 1:
+                                _state.trys.push([
+                                    1,
+                                    3,
+                                    ,
+                                    4
+                                ]);
+                                return [
+                                    4,
+                                    promises.mkdir(directory, {
+                                        recursive: true
+                                    })
+                                ];
+                            case 2:
+                                _state.sent();
+                                return [
+                                    3,
+                                    4
+                                ];
+                            case 3:
+                                _state.sent();
+                                return [
+                                    3,
+                                    4
+                                ];
+                            case 4:
+                                return [
+                                    4,
+                                    promises.writeFile(tokenFilePath, JSON.stringify(token, null, 2), "utf8")
+                                ];
+                            case 5:
+                                _state.sent();
+                                return [
+                                    2
+                                ];
+                        }
+                    });
+                })();
+            }
+        },
+        {
+            key: "getTokenFilePath",
+            value: function getTokenFilePath() {
+                var _process_env_AWS_LOGIN_CACHE_DIRECTORY;
+                var directory = (_process_env_AWS_LOGIN_CACHE_DIRECTORY = process.env.AWS_LOGIN_CACHE_DIRECTORY) !== null && _process_env_AWS_LOGIN_CACHE_DIRECTORY !== void 0 ? _process_env_AWS_LOGIN_CACHE_DIRECTORY : join(homedir(), ".aws", "login", "cache");
+                var loginSessionBytes = Buffer.from(this.loginSession, "utf8");
+                var loginSessionSha256 = createHash("sha256").update(loginSessionBytes).digest("hex");
+                return join(directory, "".concat(loginSessionSha256, ".json"));
+            }
+        },
+        {
+            key: "derToRawSignature",
+            value: function derToRawSignature(derSignature) {
+                var offset = 2;
+                if (derSignature[offset] !== 0x02) {
+                    throw new Error("Invalid DER signature");
+                }
+                offset++;
+                var rLength = derSignature[offset++];
+                var r = derSignature.subarray(offset, offset + rLength);
+                offset += rLength;
+                if (derSignature[offset] !== 0x02) {
+                    throw new Error("Invalid DER signature");
+                }
+                offset++;
+                var sLength = derSignature[offset++];
+                var s = derSignature.subarray(offset, offset + sLength);
+                r = r[0] === 0x00 ? r.subarray(1) : r;
+                s = s[0] === 0x00 ? s.subarray(1) : s;
+                var rPadded = Buffer.concat([
+                    Buffer.alloc(32 - r.length),
+                    r
+                ]);
+                var sPadded = Buffer.concat([
+                    Buffer.alloc(32 - s.length),
+                    s
+                ]);
+                return Buffer.concat([
+                    rPadded,
+                    sPadded
+                ]);
+            }
+        },
+        {
+            key: "createDPoPInterceptor",
+            value: function createDPoPInterceptor(middlewareStack) {
+                var _this = this;
+                middlewareStack.add(function(next) {
+                    return function() {
+                        var _ref = _async_to_generator$8(function(args) {
+                            var request, actualEndpoint, dpop;
+                            return _ts_generator$8(this, function(_state) {
+                                switch(_state.label){
+                                    case 0:
+                                        if (!HttpRequest.isInstance(args.request)) return [
+                                            3,
+                                            2
+                                        ];
+                                        request = args.request;
+                                        actualEndpoint = "".concat(request.protocol, "//").concat(request.hostname).concat(request.port ? ":".concat(request.port) : "").concat(request.path);
+                                        return [
+                                            4,
+                                            _this.generateDpop(request.method, actualEndpoint)
+                                        ];
+                                    case 1:
+                                        dpop = _state.sent();
+                                        request.headers = _object_spread_props$2(_object_spread$3({}, request.headers), {
+                                            DPoP: dpop
+                                        });
+                                        _state.label = 2;
+                                    case 2:
+                                        return [
+                                            2,
+                                            next(args)
+                                        ];
+                                }
+                            });
+                        });
+                        return function(args) {
+                            return _ref.apply(this, arguments);
+                        };
+                    }();
+                }, {
+                    step: "finalizeRequest",
+                    name: "dpopInterceptor",
+                    override: true
+                });
+            }
+        },
+        {
+            key: "generateDpop",
+            value: function generateDpop() {
+                var method = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : "POST", endpoint = arguments.length > 1 ? arguments[1] : void 0;
+                var _this = this;
+                return _async_to_generator$8(function() {
+                    var token, privateKey, publicKey, publicDer, pointStart, i, x, y, header, payload, headerB64, payloadB64, message, asn1Signature, rawSignature, signatureB64;
+                    return _ts_generator$8(this, function(_state) {
+                        switch(_state.label){
+                            case 0:
+                                return [
+                                    4,
+                                    _this.loadToken()
+                                ];
+                            case 1:
+                                token = _state.sent();
+                                try {
+                                    privateKey = createPrivateKey({
+                                        key: token.dpopKey,
+                                        format: "pem",
+                                        type: "sec1"
+                                    });
+                                    publicKey = createPublicKey(privateKey);
+                                    publicDer = publicKey.export({
+                                        format: "der",
+                                        type: "spki"
+                                    });
+                                    pointStart = -1;
+                                    for(i = 0; i < publicDer.length; i++){
+                                        if (publicDer[i] === 0x04) {
+                                            pointStart = i;
+                                            break;
+                                        }
+                                    }
+                                    x = publicDer.slice(pointStart + 1, pointStart + 33);
+                                    y = publicDer.slice(pointStart + 33, pointStart + 65);
+                                    header = {
+                                        alg: "ES256",
+                                        typ: "dpop+jwt",
+                                        jwk: {
+                                            kty: "EC",
+                                            crv: "P-256",
+                                            x: x.toString("base64url"),
+                                            y: y.toString("base64url")
+                                        }
+                                    };
+                                    payload = {
+                                        jti: crypto.randomUUID(),
+                                        htm: method,
+                                        htu: endpoint,
+                                        iat: Math.floor(Date.now() / 1000)
+                                    };
+                                    headerB64 = Buffer.from(JSON.stringify(header)).toString("base64url");
+                                    payloadB64 = Buffer.from(JSON.stringify(payload)).toString("base64url");
+                                    message = "".concat(headerB64, ".").concat(payloadB64);
+                                    asn1Signature = sign("sha256", Buffer.from(message), privateKey);
+                                    rawSignature = _this.derToRawSignature(asn1Signature);
+                                    signatureB64 = rawSignature.toString("base64url");
+                                    return [
+                                        2,
+                                        "".concat(message, ".").concat(signatureB64)
+                                    ];
+                                } catch (error) {
+                                    throw new CredentialsProviderError("Failed to generate Dpop proof: ".concat(_instanceof(error, Error) ? error.message : String(error)), {
+                                        logger: _this.logger,
+                                        tryNextLink: false
+                                    });
+                                }
+                                return [
+                                    2
+                                ];
+                        }
+                    });
+                })();
+            }
+        }
+    ]);
+    return LoginCredentialsFetcher;
+}();
+_define_property$3(LoginCredentialsFetcher, "REFRESH_THRESHOLD", 5 * 60 * 1000);
+
+function asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$7(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$7(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _ts_generator$7(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var fromLoginCredentials = function(init) {
+    return /*#__PURE__*/ _async_to_generator$7(function() {
+        var callerClientConfig, _init_logger_debug, _init_logger, profiles, _init_profile, profileName, profile, fetcher, credentials;
+        var _arguments = arguments;
+        return _ts_generator$7(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    callerClientConfig = (_arguments.length > 0 && _arguments[0] !== void 0 ? _arguments[0] : {}).callerClientConfig;
+                    init === null || init === void 0 ? void 0 : (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : (_init_logger_debug = _init_logger.debug) === null || _init_logger_debug === void 0 ? void 0 : _init_logger_debug.call(_init_logger, "@aws-sdk/credential-providers - fromLoginCredentials");
+                    return [
+                        4,
+                        parseKnownFiles(init || {})
+                    ];
+                case 1:
+                    profiles = _state.sent();
+                    profileName = getProfileName({
+                        profile: (_init_profile = init === null || init === void 0 ? void 0 : init.profile) !== null && _init_profile !== void 0 ? _init_profile : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.profile
+                    });
+                    profile = profiles[profileName];
+                    if (!(profile === null || profile === void 0 ? void 0 : profile.login_session)) {
+                        throw new CredentialsProviderError("Profile ".concat(profileName, " does not contain login_session."), {
+                            tryNextLink: true,
+                            logger: init === null || init === void 0 ? void 0 : init.logger
+                        });
+                    }
+                    fetcher = new LoginCredentialsFetcher(profile, init, callerClientConfig);
+                    return [
+                        4,
+                        fetcher.loadCredentials()
+                    ];
+                case 2:
+                    credentials = _state.sent();
+                    return [
+                        2,
+                        setCredentialFeature(credentials, "CREDENTIALS_LOGIN", "AD")
+                    ];
+            }
+        });
+    });
+};
+
+function asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$6(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$6(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _define_property$2(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread$2(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$2(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys$1(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props$1(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys$1(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+function _ts_generator$6(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var isLoginProfile = function(data) {
+    return Boolean(data && data.login_session);
+};
+var resolveLoginCredentials = function() {
+    var _ref = _async_to_generator$6(function(profileName, options, callerClientConfig) {
+        var credentials;
+        return _ts_generator$6(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    return [
+                        4,
+                        fromLoginCredentials(_object_spread_props$1(_object_spread$2({}, options), {
+                            profile: profileName
+                        }))({
+                            callerClientConfig: callerClientConfig
+                        })
+                    ];
+                case 1:
+                    credentials = _state.sent();
+                    return [
+                        2,
+                        setCredentialFeature(credentials, "CREDENTIALS_PROFILE_LOGIN", "AC")
+                    ];
+            }
+        });
+    });
+    return function resolveLoginCredentials(profileName, options, callerClientConfig) {
+        return _ref.apply(this, arguments);
+    };
+}();
+
+function asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$5(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$5(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _define_property$1(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread$1(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property$1(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function ownKeys(object, enumerableOnly) {
+    var keys = Object.keys(object);
+    if (Object.getOwnPropertySymbols) {
+        var symbols = Object.getOwnPropertySymbols(object);
+        keys.push.apply(keys, symbols);
+    }
+    return keys;
+}
+function _object_spread_props(target, source) {
+    source = source != null ? source : {};
+    if (Object.getOwnPropertyDescriptors) {
+        Object.defineProperties(target, Object.getOwnPropertyDescriptors(source));
+    } else {
+        ownKeys(Object(source)).forEach(function(key) {
+            Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));
+        });
+    }
+    return target;
+}
+function _type_of$2(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
+function _ts_generator$5(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var isProcessProfile = function(arg) {
+    return Boolean(arg) && (typeof arg === "undefined" ? "undefined" : _type_of$2(arg)) === "object" && typeof arg.credential_process === "string";
+};
+var resolveProcessCredentials = function() {
+    var _ref = _async_to_generator$5(function(options, profile) {
+        return _ts_generator$5(this, function(_state) {
+            return [
+                2,
+                import('./index.esm17.js').then(function(param) {
+                    var fromProcess = param.fromProcess;
+                    return fromProcess(_object_spread_props(_object_spread$1({}, options), {
+                        profile: profile
+                    }))().then(function(creds) {
+                        return setCredentialFeature(creds, "CREDENTIALS_PROFILE_PROCESS", "v");
+                    });
+                })
+            ];
+        });
+    });
+    return function resolveProcessCredentials(options, profile) {
+        return _ref.apply(this, arguments);
+    };
+}();
+
+function asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$4(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$4(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _ts_generator$4(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var resolveSsoCredentials = function() {
+    var _ref = _async_to_generator$4(function(profile, profileData) {
+        var options, callerClientConfig, fromSSO;
+        var _arguments = arguments;
+        return _ts_generator$4(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    options = _arguments.length > 2 && _arguments[2] !== void 0 ? _arguments[2] : {}, callerClientConfig = _arguments.length > 3 ? _arguments[3] : void 0;
+                    return [
+                        4,
+                        import('./index.esm18.js')
+                    ];
+                case 1:
+                    fromSSO = _state.sent().fromSSO;
+                    return [
+                        2,
+                        fromSSO({
+                            profile: profile,
+                            logger: options.logger,
+                            parentClientConfig: options.parentClientConfig,
+                            clientConfig: options.clientConfig
+                        })({
+                            callerClientConfig: callerClientConfig
+                        }).then(function(creds) {
+                            if (profileData.sso_session) {
+                                return setCredentialFeature(creds, "CREDENTIALS_PROFILE_SSO", "r");
+                            } else {
+                                return setCredentialFeature(creds, "CREDENTIALS_PROFILE_SSO_LEGACY", "t");
+                            }
+                        })
+                    ];
+            }
+        });
+    });
+    return function resolveSsoCredentials(profile, profileData) {
+        return _ref.apply(this, arguments);
+    };
+}();
+var isSsoProfile = function(arg) {
+    return arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string");
+};
+
+function asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$3(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$3(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _define_property(obj, key, value) {
+    if (key in obj) {
+        Object.defineProperty(obj, key, {
+            value: value,
+            enumerable: true,
+            configurable: true,
+            writable: true
+        });
+    } else {
+        obj[key] = value;
+    }
+    return obj;
+}
+function _object_spread(target) {
+    for(var i = 1; i < arguments.length; i++){
+        var source = arguments[i] != null ? arguments[i] : {};
+        var ownKeys = Object.keys(source);
+        if (typeof Object.getOwnPropertySymbols === "function") {
+            ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function(sym) {
+                return Object.getOwnPropertyDescriptor(source, sym).enumerable;
+            }));
+        }
+        ownKeys.forEach(function(key) {
+            _define_property(target, key, source[key]);
+        });
+    }
+    return target;
+}
+function _type_of$1(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
+function _ts_generator$3(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var isStaticCredsProfile = function(arg) {
+    return Boolean(arg) && (typeof arg === "undefined" ? "undefined" : _type_of$1(arg)) === "object" && typeof arg.aws_access_key_id === "string" && typeof arg.aws_secret_access_key === "string" && [
+        "undefined",
+        "string"
+    ].indexOf(_type_of$1(arg.aws_session_token)) > -1 && [
+        "undefined",
+        "string"
+    ].indexOf(_type_of$1(arg.aws_account_id)) > -1;
+};
+var resolveStaticCredentials = function() {
+    var _ref = _async_to_generator$3(function(profile, options) {
+        var _options_logger, credentials;
+        return _ts_generator$3(this, function(_state) {
+            options === null || options === void 0 ? void 0 : (_options_logger = options.logger) === null || _options_logger === void 0 ? void 0 : _options_logger.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");
+            credentials = _object_spread({
+                accessKeyId: profile.aws_access_key_id,
+                secretAccessKey: profile.aws_secret_access_key,
+                sessionToken: profile.aws_session_token
+            }, profile.aws_credential_scope && {
+                credentialScope: profile.aws_credential_scope
+            }, profile.aws_account_id && {
+                accountId: profile.aws_account_id
+            });
+            return [
+                2,
+                setCredentialFeature(credentials, "CREDENTIALS_PROFILE", "n")
+            ];
+        });
+    });
+    return function resolveStaticCredentials(profile, options) {
+        return _ref.apply(this, arguments);
+    };
+}();
+
+function asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$2(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$2(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _type_of(obj) {
+    "@swc/helpers - typeof";
+    return obj && typeof Symbol !== "undefined" && obj.constructor === Symbol ? "symbol" : typeof obj;
+}
+function _ts_generator$2(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var isWebIdentityProfile = function(arg) {
+    return Boolean(arg) && (typeof arg === "undefined" ? "undefined" : _type_of(arg)) === "object" && typeof arg.web_identity_token_file === "string" && typeof arg.role_arn === "string" && [
+        "undefined",
+        "string"
+    ].indexOf(_type_of(arg.role_session_name)) > -1;
+};
+var resolveWebIdentityCredentials = function() {
+    var _ref = _async_to_generator$2(function(profile, options, callerClientConfig) {
+        return _ts_generator$2(this, function(_state) {
+            return [
+                2,
+                import('./index.esm19.js').then(function(param) {
+                    var fromTokenFile = param.fromTokenFile;
+                    return fromTokenFile({
+                        webIdentityTokenFile: profile.web_identity_token_file,
+                        roleArn: profile.role_arn,
+                        roleSessionName: profile.role_session_name,
+                        roleAssumerWithWebIdentity: options.roleAssumerWithWebIdentity,
+                        logger: options.logger,
+                        parentClientConfig: options.parentClientConfig
+                    })({
+                        callerClientConfig: callerClientConfig
+                    }).then(function(creds) {
+                        return setCredentialFeature(creds, "CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN", "q");
+                    });
+                })
+            ];
+        });
+    });
+    return function resolveWebIdentityCredentials(profile, options, callerClientConfig) {
+        return _ref.apply(this, arguments);
+    };
+}();
+
+function asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, key, arg) {
+    try {
+        var info = gen[key](arg);
+        var value = info.value;
+    } catch (error) {
+        reject(error);
+        return;
+    }
+    if (info.done) {
+        resolve(value);
+    } else {
+        Promise.resolve(value).then(_next, _throw);
+    }
+}
+function _async_to_generator$1(fn) {
+    return function() {
+        var self = this, args = arguments;
+        return new Promise(function(resolve, reject) {
+            var gen = fn.apply(self, args);
+            function _next(value) {
+                asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, "next", value);
+            }
+            function _throw(err) {
+                asyncGeneratorStep$1(gen, resolve, reject, _next, _throw, "throw", err);
+            }
+            _next(undefined);
+        });
+    };
+}
+function _ts_generator$1(thisArg, body) {
+    var f, y, t, g, _ = {
+        label: 0,
+        sent: function() {
+            if (t[0] & 1) throw t[1];
+            return t[1];
+        },
+        trys: [],
+        ops: []
+    };
+    return g = {
+        next: verb(0),
+        "throw": verb(1),
+        "return": verb(2)
+    }, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
+        return this;
+    }), g;
+    function verb(n) {
+        return function(v) {
+            return step([
+                n,
+                v
+            ]);
+        };
+    }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while(_)try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [
+                op[0] & 2,
+                t.value
+            ];
+            switch(op[0]){
+                case 0:
+                case 1:
+                    t = op;
+                    break;
+                case 4:
+                    _.label++;
+                    return {
+                        value: op[1],
+                        done: false
+                    };
+                case 5:
+                    _.label++;
+                    y = op[1];
+                    op = [
+                        0
+                    ];
+                    continue;
+                case 7:
+                    op = _.ops.pop();
+                    _.trys.pop();
+                    continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
+                        _ = 0;
+                        continue;
+                    }
+                    if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
+                        _.label = op[1];
+                        break;
+                    }
+                    if (op[0] === 6 && _.label < t[1]) {
+                        _.label = t[1];
+                        t = op;
+                        break;
+                    }
+                    if (t && _.label < t[2]) {
+                        _.label = t[2];
+                        _.ops.push(op);
+                        break;
+                    }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop();
+                    continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) {
+            op = [
+                6,
+                e
+            ];
+            y = 0;
+        } finally{
+            f = t = 0;
+        }
+        if (op[0] & 5) throw op[1];
+        return {
+            value: op[0] ? op[1] : void 0,
+            done: true
+        };
+    }
+}
+var resolveProfileData = function() {
+    var _ref = _async_to_generator$1(function(profileName, profiles, options, callerClientConfig) {
+        var visitedProfiles, isAssumeRoleRecursiveCall, data;
+        var _arguments = arguments;
+        return _ts_generator$1(this, function(_state) {
+            switch(_state.label){
+                case 0:
+                    visitedProfiles = _arguments.length > 4 && _arguments[4] !== void 0 ? _arguments[4] : {}, isAssumeRoleRecursiveCall = _arguments.length > 5 && _arguments[5] !== void 0 ? _arguments[5] : false;
+                    data = profiles[profileName];
+                    if (Object.keys(visitedProfiles).length > 0 && isStaticCredsProfile(data)) {
+                        return [
+                            2,
+                            resolveStaticCredentials(data, options)
+                        ];
+                    }
+                    if (isAssumeRoleRecursiveCall || isAssumeRoleProfile(data, {
+                        profile: profileName,
+                        logger: options.logger
+                    })) {
+                        return [
+                            2,
+                            resolveAssumeRoleCredentials(profileName, profiles, options, callerClientConfig, visitedProfiles, resolveProfileData)
+                        ];
+                    }
+                    if (isStaticCredsProfile(data)) {
+                        return [
+                            2,
+                            resolveStaticCredentials(data, options)
+                        ];
+                    }
+                    if (isWebIdentityProfile(data)) {
+                        return [
+                            2,
+                            resolveWebIdentityCredentials(data, options, callerClientConfig)
+                        ];
+                    }
+                    if (isProcessProfile(data)) {
+                        return [
+                            2,
+                            resolveProcessCredentials(options, profileName)
+                        ];
+                    }
+                    if (!isSsoProfile(data)) return [
+                        3,
+                        2
+                    ];
+                    return [
+                        4,
+                        resolveSsoCredentials(profileName, data, options, callerClientConfig)
+                    ];
+                case 1:
+                    return [
+                        2,
+                        _state.sent()
+                    ];
+                case 2:
+                    if (isLoginProfile(data)) {
+                        return [
+                            2,
+                            resolveLoginCredentials(profileName, options, callerClientConfig)
+                        ];
+                    }
+                    throw new CredentialsProviderError("Could not resolve credentials using profile: [".concat(profileName, "] in configuration/credentials file(s)."), {
+                        logger: options.logger
+                    });
+            }
+        });
+    });
+    return function resolveProfileData(profileName, profiles, options, callerClientConfig) {
         return _ref.apply(this, arguments);
     };
 }();
@@ -401,7 +2707,7 @@ function _ts_generator(thisArg, body) {
         };
     }
 }
-var fromProcess = function() {
+var fromIni = function() {
     var init = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : {};
     return /*#__PURE__*/ _async_to_generator(function() {
         var callerClientConfig, _init_logger, profiles, _init_profile;
@@ -410,7 +2716,7 @@ var fromProcess = function() {
             switch(_state.label){
                 case 0:
                     callerClientConfig = (_arguments.length > 0 && _arguments[0] !== void 0 ? _arguments[0] : {}).callerClientConfig;
-                    (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : _init_logger.debug("@aws-sdk/credential-provider-process - fromProcess");
+                    (_init_logger = init.logger) === null || _init_logger === void 0 ? void 0 : _init_logger.debug("@aws-sdk/credential-provider-ini - fromIni");
                     return [
                         4,
                         parseKnownFiles(init)
@@ -419,13 +2725,13 @@ var fromProcess = function() {
                     profiles = _state.sent();
                     return [
                         2,
-                        resolveProcessCredentials(getProfileName({
+                        resolveProfileData(getProfileName({
                             profile: (_init_profile = init.profile) !== null && _init_profile !== void 0 ? _init_profile : callerClientConfig === null || callerClientConfig === void 0 ? void 0 : callerClientConfig.profile
-                        }), profiles, init.logger)
+                        }), profiles, init, callerClientConfig)
                     ];
             }
         });
     });
 };
 
-export { fromProcess };
+export { fromIni };