@hasna/skills 0.10.6 → 0.10.9

package/bin/server.js

@@ -4827,7 +4827,6 @@ var require_serde = __commonJS((exports) => {
     const { base64Encoder, bodyLengthChecker, checksumAlgorithmFn, checksumLocationName, streamHasher } = options;
     const checksumRequired = base64Encoder !== undefined && bodyLengthChecker !== undefined && checksumAlgorithmFn !== undefined && checksumLocationName !== undefined && streamHasher !== undefined;
     const digest = checksumRequired ? streamHasher(checksumAlgorithmFn, readableStream) : undefined;
-    Promise.resolve(digest).catch(() => {});
     const reader = readableStream.getReader();
     return new ReadableStream({
       async pull(controller) {
@@ -4860,11 +4859,8 @@ ${value}\r
     const { base64Encoder, bodyLengthChecker, checksumAlgorithmFn, checksumLocationName, streamHasher } = options;
     const checksumRequired = base64Encoder !== undefined && checksumAlgorithmFn !== undefined && checksumLocationName !== undefined && streamHasher !== undefined;
     const digest = checksumRequired ? streamHasher(checksumAlgorithmFn, readable) : undefined;
-    Promise.resolve(digest).catch(() => {});
     const awsChunkedEncodingStream = new Readable({
-      read() {
-        readable.resume();
-      }
+      read: () => {}
     });
     readable.on("data", (data) => {
       const length = bodyLengthChecker(data) || 0;
@@ -4874,30 +4870,20 @@ ${value}\r
       awsChunkedEncodingStream.push(`${length.toString(16)}\r
 `);
       awsChunkedEncodingStream.push(data);
-      if (!awsChunkedEncodingStream.push(`\r
-`)) {
-        readable.pause();
-      }
-    });
-    readable.on("error", (err) => {
-      awsChunkedEncodingStream.destroy(err);
+      awsChunkedEncodingStream.push(`\r
+`);
     });
-    readable.pause();
     readable.on("end", async () => {
-      try {
-        awsChunkedEncodingStream.push(`0\r
+      awsChunkedEncodingStream.push(`0\r
 `);
-        if (checksumRequired) {
-          const checksum = base64Encoder(await digest);
-          awsChunkedEncodingStream.push(`${checksumLocationName}:${checksum}\r
+      if (checksumRequired) {
+        const checksum = base64Encoder(await digest);
+        awsChunkedEncodingStream.push(`${checksumLocationName}:${checksum}\r
 `);
-          awsChunkedEncodingStream.push(`\r
+        awsChunkedEncodingStream.push(`\r
 `);
-        }
-        awsChunkedEncodingStream.push(null);
-      } catch (err) {
-        awsChunkedEncodingStream.destroy(err);
       }
+      awsChunkedEncodingStream.push(null);
     });
     return awsChunkedEncodingStream;
   }
@@ -7791,7 +7777,7 @@ var require_retry = __commonJS((exports) => {
     return errorMessages.has(error.message);
   };
   var isThrottlingError = (error) => error.$metadata?.httpStatusCode === 429 || THROTTLING_ERROR_CODES.includes(error.name) || error.$retryable?.throttling == true;
-  var isTransientError = (error, depth = 0) => error?.name !== "AbortError" && (isRetryableByTrait(error) || isClockSkewCorrectedError(error) || error.name === "InvalidSignatureException" && error.message?.includes("Signature expired") || TRANSIENT_ERROR_CODES.includes(error.name) || NODEJS_TIMEOUT_ERROR_CODES.includes(error?.code || "") || NODEJS_NETWORK_ERROR_CODES.includes(error?.code || "") || TRANSIENT_ERROR_STATUS_CODES.includes(error.$metadata?.httpStatusCode || 0) || isBrowserNetworkError(error) || isNodeJsHttp2TransientError(error) || error.cause !== undefined && depth <= 10 && isTransientError(error.cause, depth + 1));
+  var isTransientError = (error, depth = 0) => isRetryableByTrait(error) || isClockSkewCorrectedError(error) || error.name === "InvalidSignatureException" && error.message?.includes("Signature expired") || TRANSIENT_ERROR_CODES.includes(error.name) || NODEJS_TIMEOUT_ERROR_CODES.includes(error?.code || "") || NODEJS_NETWORK_ERROR_CODES.includes(error?.code || "") || TRANSIENT_ERROR_STATUS_CODES.includes(error.$metadata?.httpStatusCode || 0) || isBrowserNetworkError(error) || isNodeJsHttp2TransientError(error) || error.cause !== undefined && depth <= 10 && isTransientError(error.cause, depth + 1);
   var isServerError = (error) => {
     if (error.$metadata?.httpStatusCode !== undefined) {
       const statusCode = error.$metadata.httpStatusCode;
@@ -11664,12 +11650,8 @@ var require_util = __commonJS((exports) => {
     }
     return `${protocol}//${auth}${hostname}${path}${queryString}${fragment}`;
   }
-  function hasOwn(container, key) {
-    return Object.prototype.hasOwnProperty.call(container, key);
-  }
   exports.build = build;
   exports.formatUrl = formatUrl;
-  exports.hasOwn = hasOwn;
   exports.parse = parse;
   exports.validate = validate;
 });
@@ -19111,7 +19093,7 @@ var init_constants = __esm(() => {
   EXPIRE_WINDOW_MS = 5 * 60 * 1000;
 });
 
-// node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/index.js
+// node_modules/@aws-sdk/token-providers/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/index.js
 var require_sso_oidc = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions2, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$1, createDefaultUserAgentProvider, NODE_APP_ID_CONFIG_OPTIONS, getAwsRegionExtensionConfiguration, resolveAwsRegionExtensionConfiguration, resolveUserAgentConfig, resolveHostHeaderConfig, getUserAgentPlugin, getHostHeaderPlugin, getLoggerPlugin, getRecursionDetectionPlugin } = require_client2();
   var { NoAuthSigner, getHttpAuthSchemeEndpointRuleSetPlugin, DefaultIdentityProviderConfig, getHttpSigningPlugin } = require_dist_cjs2();
@@ -19189,7 +19171,7 @@ var require_sso_oidc = __commonJS((exports) => {
     Region: { type: "builtInParams", name: "region" },
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" }
   };
-  var version = "3.997.44";
+  var version = "3.997.43";
   var packageInfo = {
     version
   };
@@ -20013,7 +19995,7 @@ var init_dist_es4 = __esm(() => {
   init_fromSso();
 });
 
-// node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso/index.js
+// node_modules/@aws-sdk/credential-provider-sso/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso/index.js
 function createAwsAuthSigv4HttpAuthOption2(authParameters) {
   return {
     schemeId: "aws.auth#sigv4",
@@ -20064,7 +20046,7 @@ var awsEndpointFunctions2, emitWarningIfUnsupportedVersion$1, createDefaultUserA
     useFipsEndpoint: options.useFipsEndpoint ?? false,
     defaultSigningName: "awsssoportal"
   });
-}, commonParams2, version = "3.997.44", packageInfo, k2 = "ref", a2 = -1, b2 = true, c2 = "isSet", d2 = "PartitionResult", e2 = "booleanEquals", f2 = "getAttr", g2, h2, i2, j2, _data2, root2 = 2, r2 = 1e8, nodes2, bdd2, cache2, defaultEndpointResolver2 = (endpointParams, context = {}) => {
+}, commonParams2, version = "3.997.43", packageInfo, k2 = "ref", a2 = -1, b2 = true, c2 = "isSet", d2 = "PartitionResult", e2 = "booleanEquals", f2 = "getAttr", g2, h2, i2, j2, _data2, root2 = 2, r2 = 1e8, nodes2, bdd2, cache2, defaultEndpointResolver2 = (endpointParams, context = {}) => {
   return cache2.get(endpointParams, () => decideEndpoint2(bdd2, {
     endpointParams,
     logger: context.logger
@@ -20698,7 +20680,7 @@ var init_resolveCredentialSource = __esm(() => {
   import_config18 = __toESM(require_config(), 1);
 });
 
-// node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js
+// node_modules/@aws-sdk/credential-provider-ini/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js
 var require_sts = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$12, createDefaultUserAgentProvider: createDefaultUserAgentProvider2, NODE_APP_ID_CONFIG_OPTIONS: NODE_APP_ID_CONFIG_OPTIONS2, getAwsRegionExtensionConfiguration: getAwsRegionExtensionConfiguration2, resolveAwsRegionExtensionConfiguration: resolveAwsRegionExtensionConfiguration2, resolveUserAgentConfig: resolveUserAgentConfig2, resolveHostHeaderConfig: resolveHostHeaderConfig2, getUserAgentPlugin: getUserAgentPlugin2, getHostHeaderPlugin: getHostHeaderPlugin2, getLoggerPlugin: getLoggerPlugin2, getRecursionDetectionPlugin: getRecursionDetectionPlugin2, setCredentialFeature: setCredentialFeature5, stsRegionDefaultResolver } = require_client2();
   var { NoAuthSigner: NoAuthSigner2, getHttpAuthSchemeEndpointRuleSetPlugin: getHttpAuthSchemeEndpointRuleSetPlugin2, DefaultIdentityProviderConfig: DefaultIdentityProviderConfig2, getHttpSigningPlugin: getHttpSigningPlugin2 } = require_dist_cjs2();
@@ -21029,7 +21011,7 @@ var require_sts = __commonJS((exports) => {
     Region: { type: "builtInParams", name: "region" },
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" }
   };
-  var version2 = "3.997.44";
+  var version2 = "3.997.43";
   var packageInfo2 = {
     version: version2
   };
@@ -21788,7 +21770,7 @@ var init_resolveAssumeRoleCredentials = __esm(() => {
   import_config19 = __toESM(require_config(), 1);
 });
 
-// node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/signin/index.js
+// node_modules/@aws-sdk/credential-provider-ini/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/signin/index.js
 var require_signin = __commonJS((exports) => {
   var { awsEndpointFunctions: awsEndpointFunctions3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$12, createDefaultUserAgentProvider: createDefaultUserAgentProvider2, NODE_APP_ID_CONFIG_OPTIONS: NODE_APP_ID_CONFIG_OPTIONS2, getAwsRegionExtensionConfiguration: getAwsRegionExtensionConfiguration2, resolveAwsRegionExtensionConfiguration: resolveAwsRegionExtensionConfiguration2, resolveUserAgentConfig: resolveUserAgentConfig2, resolveHostHeaderConfig: resolveHostHeaderConfig2, getUserAgentPlugin: getUserAgentPlugin2, getHostHeaderPlugin: getHostHeaderPlugin2, getLoggerPlugin: getLoggerPlugin2, getRecursionDetectionPlugin: getRecursionDetectionPlugin2 } = require_client2();
   var { NoAuthSigner: NoAuthSigner2, getHttpAuthSchemeEndpointRuleSetPlugin: getHttpAuthSchemeEndpointRuleSetPlugin2, DefaultIdentityProviderConfig: DefaultIdentityProviderConfig2, getHttpSigningPlugin: getHttpSigningPlugin2 } = require_dist_cjs2();
@@ -21866,7 +21848,7 @@ var require_signin = __commonJS((exports) => {
     Region: { type: "builtInParams", name: "region" },
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" }
   };
-  var version2 = "3.997.44";
+  var version2 = "3.997.43";
   var packageInfo2 = {
     version: version2
   };
@@ -22520,7 +22502,7 @@ var require_signin = __commonJS((exports) => {
   exports.errorTypeRegistries = errorTypeRegistries3;
 });
 
-// node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
+// node_modules/@aws-sdk/credential-provider-ini/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
 import { createHash as createHash2, createPrivateKey, createPublicKey, sign } from "crypto";
 import { promises as fs2 } from "fs";
 import { homedir } from "os";
@@ -22784,7 +22766,7 @@ var init_LoginCredentialsFetcher = __esm(() => {
   };
 });
 
-// node_modules/@aws-sdk/credential-provider-login/dist-es/fromLoginCredentials.js
+// node_modules/@aws-sdk/credential-provider-ini/node_modules/@aws-sdk/credential-provider-login/dist-es/fromLoginCredentials.js
 var import_client10, import_config21, fromLoginCredentials = (init) => async ({ callerClientConfig } = {}) => {
   init?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");
   const profiles = await import_config21.parseKnownFiles(init || {});
@@ -22808,7 +22790,7 @@ var init_fromLoginCredentials = __esm(() => {
   import_config21 = __toESM(require_config(), 1);
 });
 
-// node_modules/@aws-sdk/credential-provider-login/dist-es/index.js
+// node_modules/@aws-sdk/credential-provider-ini/node_modules/@aws-sdk/credential-provider-login/dist-es/index.js
 var exports_dist_es5 = {};
 __export(exports_dist_es5, {
   fromLoginCredentials: () => fromLoginCredentials
@@ -22974,129 +22956,1151 @@ var init_resolveStaticCredentials = __esm(() => {
   import_client15 = __toESM(require_client2(), 1);
 });
 
-// node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromWebToken.js
-var fromWebToken = (init) => async (awsIdentityProperties) => {
-  init.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");
-  const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;
-  let { roleAssumerWithWebIdentity } = init;
-  if (!roleAssumerWithWebIdentity) {
-    const { getDefaultRoleAssumerWithWebIdentity } = await Promise.resolve().then(() => __toESM(require_sts(), 1));
-    roleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity({
-      ...init.clientConfig,
-      credentialProviderLogger: init.logger,
-      parentClientConfig: {
-        ...awsIdentityProperties?.callerClientConfig,
-        ...init.parentClientConfig
-      }
-    }, init.clientPlugins);
-  }
-  return roleAssumerWithWebIdentity({
-    RoleArn: roleArn,
-    RoleSessionName: roleSessionName ?? `aws-sdk-js-session-${Date.now()}`,
-    WebIdentityToken: webIdentityToken,
-    ProviderId: providerId,
-    PolicyArns: policyArns,
-    Policy: policy,
-    DurationSeconds: durationSeconds
+// node_modules/@aws-sdk/credential-provider-web-identity/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js
+var require_sts2 = __commonJS((exports) => {
+  var { awsEndpointFunctions: awsEndpointFunctions3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion$12, createDefaultUserAgentProvider: createDefaultUserAgentProvider2, NODE_APP_ID_CONFIG_OPTIONS: NODE_APP_ID_CONFIG_OPTIONS2, getAwsRegionExtensionConfiguration: getAwsRegionExtensionConfiguration2, resolveAwsRegionExtensionConfiguration: resolveAwsRegionExtensionConfiguration2, resolveUserAgentConfig: resolveUserAgentConfig2, resolveHostHeaderConfig: resolveHostHeaderConfig2, getUserAgentPlugin: getUserAgentPlugin2, getHostHeaderPlugin: getHostHeaderPlugin2, getLoggerPlugin: getLoggerPlugin2, getRecursionDetectionPlugin: getRecursionDetectionPlugin2, setCredentialFeature: setCredentialFeature12, stsRegionDefaultResolver } = require_client2();
+  var { NoAuthSigner: NoAuthSigner2, getHttpAuthSchemeEndpointRuleSetPlugin: getHttpAuthSchemeEndpointRuleSetPlugin2, DefaultIdentityProviderConfig: DefaultIdentityProviderConfig2, getHttpSigningPlugin: getHttpSigningPlugin2 } = require_dist_cjs2();
+  var { normalizeProvider: normalizeProvider4, getSmithyContext: getSmithyContext4, ServiceException: ServiceException2, NoOpLogger: NoOpLogger3, emitWarningIfUnsupportedVersion: emitWarningIfUnsupportedVersion2, loadConfigsForDefaultMode: loadConfigsForDefaultMode2, getDefaultExtensionConfiguration: getDefaultExtensionConfiguration2, resolveDefaultRuntimeConfig: resolveDefaultRuntimeConfig2, Client: Client2, makeBuilder: makeBuilder3, createAggregatedClient: createAggregatedClient2 } = require_client();
+  var { Command: $Command2 } = require_client();
+  exports.$Command = $Command2;
+  exports.__Client = Client2;
+  var { resolveDefaultsModeConfig: resolveDefaultsModeConfig2, loadConfig: loadConfig4, NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS: NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS2, NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS: NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS2, NODE_REGION_CONFIG_OPTIONS: NODE_REGION_CONFIG_OPTIONS2, NODE_REGION_CONFIG_FILE_OPTIONS: NODE_REGION_CONFIG_FILE_OPTIONS2, resolveRegionConfig: resolveRegionConfig2 } = require_config();
+  var { BinaryDecisionDiagram: BinaryDecisionDiagram3, EndpointCache: EndpointCache3, decideEndpoint: decideEndpoint3, customEndpointFunctions: customEndpointFunctions3, resolveParams: resolveParams2, resolveEndpointConfig: resolveEndpointConfig2, getEndpointPlugin: getEndpointPlugin3 } = require_endpoints();
+  var { parseUrl: parseUrl3, getHttpHandlerExtensionConfiguration: getHttpHandlerExtensionConfiguration2, resolveHttpHandlerRuntimeConfig: resolveHttpHandlerRuntimeConfig2, getContentLengthPlugin: getContentLengthPlugin2 } = require_protocols();
+  var { DEFAULT_RETRY_MODE: DEFAULT_RETRY_MODE2, NODE_RETRY_MODE_CONFIG_OPTIONS: NODE_RETRY_MODE_CONFIG_OPTIONS2, NODE_MAX_ATTEMPT_CONFIG_OPTIONS: NODE_MAX_ATTEMPT_CONFIG_OPTIONS2, resolveRetryConfig: resolveRetryConfig2, getRetryPlugin: getRetryPlugin2 } = require_retry();
+  var { TypeRegistry: TypeRegistry3, getSchemaSerdePlugin: getSchemaSerdePlugin2 } = require_schema();
+  var { resolveAwsSdkSigV4Config: resolveAwsSdkSigV4Config3, resolveAwsSdkSigV4AConfig: resolveAwsSdkSigV4AConfig2, AwsSdkSigV4Signer: AwsSdkSigV4Signer2, AwsSdkSigV4ASigner, NODE_SIGV4A_CONFIG_OPTIONS, NODE_AUTH_SCHEME_PREFERENCE_OPTIONS: NODE_AUTH_SCHEME_PREFERENCE_OPTIONS2 } = require_httpAuthSchemes();
+  var { SignatureV4MultiRegion: SignatureV4MultiRegion2 } = require_dist_cjs4();
+  var { toUtf8: toUtf82, fromUtf8: fromUtf82, toBase64: toBase642, fromBase64: fromBase642, calculateBodyLength: calculateBodyLength2 } = require_serde();
+  var { streamCollector: streamCollector2, NodeHttpHandler: NodeHttpHandler3 } = require_dist_cjs6();
+  var { AwsQueryProtocol } = require_protocols2();
+  var { Sha256: Sha2562 } = require_checksum();
+  var q2 = "ref";
+  var a3 = -1;
+  var b3 = true;
+  var c3 = "isSet";
+  var d3 = "PartitionResult";
+  var e3 = "booleanEquals";
+  var f3 = "stringEquals";
+  var g3 = "getAttr";
+  var h3 = "us-east-1";
+  var i3 = "sigv4";
+  var j3 = "sts";
+  var k3 = "https://sts.{Region}.{PartitionResult#dnsSuffix}";
+  var l2 = { [q2]: "Endpoint" };
+  var m2 = { [q2]: "Region" };
+  var n2 = { [q2]: d3 };
+  var o2 = {};
+  var p2 = [m2];
+  var _data3 = {
+    conditions: [
+      [c3, [l2]],
+      [c3, p2],
+      ["aws.partition", p2, d3],
+      [e3, [{ [q2]: "UseFIPS" }, b3]],
+      [e3, [{ [q2]: "UseDualStack" }, b3]],
+      [f3, [m2, "aws-global"]],
+      [e3, [{ [q2]: "UseGlobalEndpoint" }, b3]],
+      [f3, [m2, "eu-central-1"]],
+      [e3, [{ fn: g3, argv: [n2, "supportsDualStack"] }, b3]],
+      [e3, [{ fn: g3, argv: [n2, "supportsFIPS"] }, b3]],
+      [f3, [m2, "ap-south-1"]],
+      [f3, [m2, "eu-north-1"]],
+      [f3, [m2, "eu-west-1"]],
+      [f3, [m2, "eu-west-2"]],
+      [f3, [m2, "eu-west-3"]],
+      [f3, [m2, "sa-east-1"]],
+      [f3, [m2, h3]],
+      [f3, [m2, "us-east-2"]],
+      [f3, [m2, "us-west-2"]],
+      [f3, [m2, "us-west-1"]],
+      [f3, [m2, "ca-central-1"]],
+      [f3, [m2, "ap-southeast-1"]],
+      [f3, [m2, "ap-northeast-1"]],
+      [f3, [m2, "ap-southeast-2"]],
+      [f3, [{ fn: g3, argv: [n2, "name"] }, "aws-us-gov"]]
+    ],
+    results: [
+      [a3],
+      ["https://sts.amazonaws.com", { authSchemes: [{ name: i3, signingName: j3, signingRegion: h3 }] }],
+      [k3, { authSchemes: [{ name: i3, signingName: j3, signingRegion: "{Region}" }] }],
+      [a3, "Invalid Configuration: FIPS and custom endpoint are not supported"],
+      [a3, "Invalid Configuration: Dualstack and custom endpoint are not supported"],
+      [l2, o2],
+      ["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", o2],
+      [a3, "FIPS and DualStack are enabled, but this partition does not support one or both"],
+      ["https://sts.{Region}.amazonaws.com", o2],
+      ["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}", o2],
+      [a3, "FIPS is enabled but this partition does not support FIPS"],
+      ["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}", o2],
+      [a3, "DualStack is enabled but this partition does not support DualStack"],
+      [k3, o2],
+      [a3, "Invalid Configuration: Missing Region"]
+    ]
+  };
+  var root3 = 2;
+  var r3 = 1e8;
+  var nodes3 = new Int32Array([
+    -1,
+    1,
+    -1,
+    0,
+    30,
+    3,
+    1,
+    4,
+    r3 + 14,
+    2,
+    5,
+    r3 + 14,
+    3,
+    25,
+    6,
+    4,
+    24,
+    7,
+    5,
+    r3 + 1,
+    8,
+    6,
+    9,
+    r3 + 13,
+    7,
+    r3 + 1,
+    10,
+    10,
+    r3 + 1,
+    11,
+    11,
+    r3 + 1,
+    12,
+    12,
+    r3 + 1,
+    13,
+    13,
+    r3 + 1,
+    14,
+    14,
+    r3 + 1,
+    15,
+    15,
+    r3 + 1,
+    16,
+    16,
+    r3 + 1,
+    17,
+    17,
+    r3 + 1,
+    18,
+    18,
+    r3 + 1,
+    19,
+    19,
+    r3 + 1,
+    20,
+    20,
+    r3 + 1,
+    21,
+    21,
+    r3 + 1,
+    22,
+    22,
+    r3 + 1,
+    23,
+    23,
+    r3 + 1,
+    r3 + 2,
+    8,
+    r3 + 11,
+    r3 + 12,
+    4,
+    28,
+    26,
+    9,
+    27,
+    r3 + 10,
+    24,
+    r3 + 8,
+    r3 + 9,
+    8,
+    29,
+    r3 + 7,
+    9,
+    r3 + 6,
+    r3 + 7,
+    3,
+    r3 + 3,
+    31,
+    4,
+    r3 + 4,
+    r3 + 5
+  ]);
+  var bdd3 = BinaryDecisionDiagram3.from(nodes3, root3, _data3.conditions, _data3.results);
+  var cache3 = new EndpointCache3({
+    size: 50,
+    params: ["Endpoint", "Region", "UseDualStack", "UseFIPS", "UseGlobalEndpoint"]
   });
-};
-
-// node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js
-import { readFileSync } from "fs";
-var import_client16, import_config24, ENV_TOKEN_FILE = "AWS_WEB_IDENTITY_TOKEN_FILE", ENV_ROLE_ARN = "AWS_ROLE_ARN", ENV_ROLE_SESSION_NAME = "AWS_ROLE_SESSION_NAME", fromTokenFile = (init = {}) => async (awsIdentityProperties) => {
-  init.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");
-  const webIdentityTokenFile = init?.webIdentityTokenFile ?? process.env[ENV_TOKEN_FILE];
-  const roleArn = init?.roleArn ?? process.env[ENV_ROLE_ARN];
-  const roleSessionName = init?.roleSessionName ?? process.env[ENV_ROLE_SESSION_NAME];
-  if (!webIdentityTokenFile || !roleArn) {
-    throw new import_config24.CredentialsProviderError("Web identity configuration not specified", {
-      logger: init.logger
-    });
+  var defaultEndpointResolver3 = (endpointParams, context = {}) => {
+    return cache3.get(endpointParams, () => decideEndpoint3(bdd3, {
+      endpointParams,
+      logger: context.logger
+    }));
+  };
+  customEndpointFunctions3.aws = awsEndpointFunctions3;
+  var createEndpointRuleSetHttpAuthSchemeParametersProvider2 = (defaultHttpAuthSchemeParametersProvider) => async (config, context, input) => {
+    if (!input) {
+      throw new Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");
+    }
+    const defaultParameters = await defaultHttpAuthSchemeParametersProvider(config, context, input);
+    const instructionsFn = getSmithyContext4(context)?.commandInstance?.constructor?.getEndpointParameterInstructions;
+    if (!instructionsFn) {
+      throw new Error(`getEndpointParameterInstructions() is not defined on '${context.commandName}'`);
+    }
+    const endpointParameters = await resolveParams2(input, { getEndpointParameterInstructions: instructionsFn }, config);
+    return Object.assign(defaultParameters, endpointParameters);
+  };
+  var _defaultSTSHttpAuthSchemeParametersProvider = async (config, context, input) => {
+    return {
+      operation: getSmithyContext4(context).operation,
+      region: await normalizeProvider4(config.region)() || (() => {
+        throw new Error("expected `region` to be configured for `aws.auth#sigv4`");
+      })()
+    };
+  };
+  var defaultSTSHttpAuthSchemeParametersProvider = createEndpointRuleSetHttpAuthSchemeParametersProvider2(_defaultSTSHttpAuthSchemeParametersProvider);
+  function createAwsAuthSigv4HttpAuthOption3(authParameters) {
+    return {
+      schemeId: "aws.auth#sigv4",
+      signingProperties: {
+        name: "sts",
+        region: authParameters.region
+      },
+      propertiesExtractor: (config, context) => ({
+        signingProperties: {
+          config,
+          context
+        }
+      })
+    };
   }
-  const credentials = await fromWebToken({
-    ...init,
-    webIdentityToken: import_config24.externalDataInterceptor?.getTokenRecord?.()[webIdentityTokenFile] ?? readFileSync(webIdentityTokenFile, { encoding: "ascii" }),
-    roleArn,
-    roleSessionName
-  })(awsIdentityProperties);
-  if (webIdentityTokenFile === process.env[ENV_TOKEN_FILE]) {
-    import_client16.setCredentialFeature(credentials, "CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN", "h");
+  function createAwsAuthSigv4aHttpAuthOption2(authParameters) {
+    return {
+      schemeId: "aws.auth#sigv4a",
+      signingProperties: {
+        name: "sts",
+        region: authParameters.region
+      },
+      propertiesExtractor: (config, context) => ({
+        signingProperties: {
+          config,
+          context
+        }
+      })
+    };
   }
-  return credentials;
-};
-var init_fromTokenFile = __esm(() => {
-  import_client16 = __toESM(require_client2(), 1);
-  import_config24 = __toESM(require_config(), 1);
-});
-
-// node_modules/@aws-sdk/credential-provider-web-identity/dist-es/index.js
-var exports_dist_es7 = {};
-__export(exports_dist_es7, {
-  fromWebToken: () => fromWebToken,
-  fromTokenFile: () => fromTokenFile
-});
-var init_dist_es8 = __esm(() => {
-  init_fromTokenFile();
-});
-
-// node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveWebIdentityCredentials.js
-var import_client17, isWebIdentityProfile = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.web_identity_token_file === "string" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1, resolveWebIdentityCredentials = async (profile, options, callerClientConfig) => {
-  const { fromTokenFile: fromTokenFile2 } = await Promise.resolve().then(() => (init_dist_es8(), exports_dist_es7));
-  const credentials = await fromTokenFile2({
-    webIdentityTokenFile: profile.web_identity_token_file,
-    roleArn: profile.role_arn,
-    roleSessionName: profile.role_session_name,
-    roleAssumerWithWebIdentity: options.roleAssumerWithWebIdentity,
-    logger: options.logger,
-    parentClientConfig: options.parentClientConfig
-  })({
-    callerClientConfig
+  function createSmithyApiNoAuthHttpAuthOption2(authParameters) {
+    return {
+      schemeId: "smithy.api#noAuth"
+    };
+  }
+  var createEndpointRuleSetHttpAuthSchemeProvider2 = (defaultEndpointResolver4, defaultHttpAuthSchemeResolver, createHttpAuthOptionFunctions) => {
+    const endpointRuleSetHttpAuthSchemeProvider = (authParameters) => {
+      const endpoint = defaultEndpointResolver4(authParameters);
+      const authSchemes = endpoint.properties?.authSchemes;
+      if (!authSchemes) {
+        return defaultHttpAuthSchemeResolver(authParameters);
+      }
+      const options = [];
+      for (const scheme of authSchemes) {
+        const { name: resolvedName, properties = {}, ...rest } = scheme;
+        const name = resolvedName.toLowerCase();
+        if (resolvedName !== name) {
+          console.warn(`HttpAuthScheme has been normalized with lowercasing: '${resolvedName}' to '${name}'`);
+        }
+        let schemeId;
+        if (name === "sigv4a") {
+          schemeId = "aws.auth#sigv4a";
+          const sigv4Present = authSchemes.find((s2) => {
+            const name2 = s2.name.toLowerCase();
+            return name2 !== "sigv4a" && name2.startsWith("sigv4");
+          });
+          if (SignatureV4MultiRegion2.sigv4aDependency() === "none" && sigv4Present) {
+            continue;
+          }
+        } else if (name.startsWith("sigv4")) {
+          schemeId = "aws.auth#sigv4";
+        } else {
+          throw new Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${name}'`);
+        }
+        const createOption = createHttpAuthOptionFunctions[schemeId];
+        if (!createOption) {
+          throw new Error(`Could not find HttpAuthOption create function for '${schemeId}'`);
+        }
+        const option = createOption(authParameters);
+        option.schemeId = schemeId;
+        option.signingProperties = { ...option.signingProperties || {}, ...rest, ...properties };
+        options.push(option);
+      }
+      return options;
+    };
+    return endpointRuleSetHttpAuthSchemeProvider;
+  };
+  var _defaultSTSHttpAuthSchemeProvider = (authParameters) => {
+    const options = [];
+    switch (authParameters.operation) {
+      case "AssumeRoleWithWebIdentity": {
+        options.push(createSmithyApiNoAuthHttpAuthOption2());
+        options.push(createAwsAuthSigv4aHttpAuthOption2(authParameters));
+        break;
+      }
+      default: {
+        options.push(createAwsAuthSigv4HttpAuthOption3(authParameters));
+        options.push(createAwsAuthSigv4aHttpAuthOption2(authParameters));
+      }
+    }
+    return options;
+  };
+  var defaultSTSHttpAuthSchemeProvider = createEndpointRuleSetHttpAuthSchemeProvider2(defaultEndpointResolver3, _defaultSTSHttpAuthSchemeProvider, {
+    "aws.auth#sigv4": createAwsAuthSigv4HttpAuthOption3,
+    "aws.auth#sigv4a": createAwsAuthSigv4aHttpAuthOption2,
+    "smithy.api#noAuth": createSmithyApiNoAuthHttpAuthOption2
   });
-  return import_client17.setCredentialFeature(credentials, "CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN", "q");
-};
-var init_resolveWebIdentityCredentials = __esm(() => {
-  import_client17 = __toESM(require_client2(), 1);
-});
+  var resolveHttpAuthSchemeConfig3 = (config) => {
+    const config_0 = resolveAwsSdkSigV4Config3(config);
+    const config_1 = resolveAwsSdkSigV4AConfig2(config_0);
+    return Object.assign(config_1, {
+      authSchemePreference: normalizeProvider4(config.authSchemePreference ?? [])
+    });
+  };
+  var resolveClientEndpointParameters3 = (options) => {
+    return Object.assign(options, {
+      useDualstackEndpoint: options.useDualstackEndpoint ?? false,
+      useFipsEndpoint: options.useFipsEndpoint ?? false,
+      useGlobalEndpoint: options.useGlobalEndpoint ?? false,
+      defaultSigningName: "sts"
+    });
+  };
+  var commonParams3 = {
+    UseGlobalEndpoint: { type: "builtInParams", name: "useGlobalEndpoint" },
+    UseFIPS: { type: "builtInParams", name: "useFipsEndpoint" },
+    Endpoint: { type: "builtInParams", name: "endpoint" },
+    Region: { type: "builtInParams", name: "region" },
+    UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" }
+  };
+  var version2 = "3.997.43";
+  var packageInfo2 = {
+    version: version2
+  };
 
-// node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProfileData.js
-var import_config25, resolveProfileData = async (profileName, profiles, options, callerClientConfig, visitedProfiles = {}, isAssumeRoleRecursiveCall = false) => {
-  const data = profiles[profileName];
-  if (Object.keys(visitedProfiles).length > 0 && isStaticCredsProfile(data)) {
-    return resolveStaticCredentials(data, options);
-  }
-  if (isAssumeRoleRecursiveCall || isAssumeRoleProfile(data, { profile: profileName, logger: options.logger })) {
-    return resolveAssumeRoleCredentials(profileName, profiles, options, callerClientConfig, visitedProfiles, resolveProfileData);
+  class STSServiceException extends ServiceException2 {
+    constructor(options) {
+      super(options);
+      Object.setPrototypeOf(this, STSServiceException.prototype);
+    }
   }
-  if (isStaticCredsProfile(data)) {
-    return resolveStaticCredentials(data, options);
+
+  class ExpiredTokenException extends STSServiceException {
+    name = "ExpiredTokenException";
+    $fault = "client";
+    constructor(opts) {
+      super({
+        name: "ExpiredTokenException",
+        $fault: "client",
+        ...opts
+      });
+      Object.setPrototypeOf(this, ExpiredTokenException.prototype);
+    }
   }
-  if (isWebIdentityProfile(data)) {
-    return resolveWebIdentityCredentials(data, options, callerClientConfig);
+
+  class MalformedPolicyDocumentException extends STSServiceException {
+    name = "MalformedPolicyDocumentException";
+    $fault = "client";
+    constructor(opts) {
+      super({
+        name: "MalformedPolicyDocumentException",
+        $fault: "client",
+        ...opts
+      });
+      Object.setPrototypeOf(this, MalformedPolicyDocumentException.prototype);
+    }
   }
-  if (isProcessProfile(data)) {
-    return resolveProcessCredentials2(options, profileName);
+
+  class PackedPolicyTooLargeException extends STSServiceException {
+    name = "PackedPolicyTooLargeException";
+    $fault = "client";
+    constructor(opts) {
+      super({
+        name: "PackedPolicyTooLargeException",
+        $fault: "client",
+        ...opts
+      });
+      Object.setPrototypeOf(this, PackedPolicyTooLargeException.prototype);
+    }
   }
-  if (isSsoProfile2(data)) {
-    return await resolveSsoCredentials(profileName, data, options, callerClientConfig);
+
+  class RegionDisabledException extends STSServiceException {
+    name = "RegionDisabledException";
+    $fault = "client";
+    constructor(opts) {
+      super({
+        name: "RegionDisabledException",
+        $fault: "client",
+        ...opts
+      });
+      Object.setPrototypeOf(this, RegionDisabledException.prototype);
+    }
   }
-  if (isLoginProfile(data)) {
-    return resolveLoginCredentials(profileName, options, callerClientConfig);
+
+  class IDPRejectedClaimException extends STSServiceException {
+    name = "IDPRejectedClaimException";
+    $fault = "client";
+    constructor(opts) {
+      super({
+        name: "IDPRejectedClaimException",
+        $fault: "client",
+        ...opts
+      });
+      Object.setPrototypeOf(this, IDPRejectedClaimException.prototype);
+    }
   }
-  throw new import_config25.CredentialsProviderError(`Could not resolve credentials using profile: [${profileName}] in configuration/credentials file(s).`, { logger: options.logger });
-};
-var init_resolveProfileData = __esm(() => {
-  init_resolveAssumeRoleCredentials();
-  init_resolveLoginCredentials();
-  init_resolveProcessCredentials2();
-  init_resolveSsoCredentials();
-  init_resolveStaticCredentials();
-  init_resolveWebIdentityCredentials();
-  import_config25 = __toESM(require_config(), 1);
-});
 
-// node_modules/@aws-sdk/credential-provider-ini/dist-es/fromIni.js
-var import_config26, fromIni = (init = {}) => async ({ callerClientConfig } = {}) => {
-  init.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");
+  class InvalidIdentityTokenException extends STSServiceException {
+    name = "InvalidIdentityTokenException";
+    $fault = "client";
+    constructor(opts) {
+      super({
+        name: "InvalidIdentityTokenException",
+        $fault: "client",
+        ...opts
+      });
+      Object.setPrototypeOf(this, InvalidIdentityTokenException.prototype);
+    }
+  }
+
+  class IDPCommunicationErrorException extends STSServiceException {
+    name = "IDPCommunicationErrorException";
+    $fault = "client";
+    $retryable = {};
+    constructor(opts) {
+      super({
+        name: "IDPCommunicationErrorException",
+        $fault: "client",
+        ...opts
+      });
+      Object.setPrototypeOf(this, IDPCommunicationErrorException.prototype);
+    }
+  }
+  var _A2 = "Arn";
+  var _AKI2 = "AccessKeyId";
+  var _AR2 = "AssumeRole";
+  var _ARI2 = "AssumedRoleId";
+  var _ARR = "AssumeRoleRequest";
+  var _ARRs = "AssumeRoleResponse";
+  var _ARU = "AssumedRoleUser";
+  var _ARWWI = "AssumeRoleWithWebIdentity";
+  var _ARWWIR = "AssumeRoleWithWebIdentityRequest";
+  var _ARWWIRs = "AssumeRoleWithWebIdentityResponse";
+  var _Au = "Audience";
+  var _C2 = "Credentials";
+  var _CA2 = "ContextAssertion";
+  var _DS = "DurationSeconds";
+  var _E2 = "Expiration";
+  var _EI = "ExternalId";
+  var _ETE = "ExpiredTokenException";
+  var _IDPCEE = "IDPCommunicationErrorException";
+  var _IDPRCE = "IDPRejectedClaimException";
+  var _IITE = "InvalidIdentityTokenException";
+  var _K2 = "Key";
+  var _MPDE = "MalformedPolicyDocumentException";
+  var _P2 = "Policy";
+  var _PA = "PolicyArns";
+  var _PAr = "ProviderArn";
+  var _PC2 = "ProvidedContexts";
+  var _PCLT = "ProvidedContextsListType";
+  var _PCr = "ProvidedContext";
+  var _PDT = "PolicyDescriptorType";
+  var _PI2 = "ProviderId";
+  var _PPS = "PackedPolicySize";
+  var _PPTLE = "PackedPolicyTooLargeException";
+  var _Pr2 = "Provider";
+  var _RA = "RoleArn";
+  var _RDE = "RegionDisabledException";
+  var _RSN = "RoleSessionName";
+  var _SAK2 = "SecretAccessKey";
+  var _SFWIT = "SubjectFromWebIdentityToken";
+  var _SI = "SourceIdentity";
+  var _SN = "SerialNumber";
+  var _ST2 = "SessionToken";
+  var _T2 = "Tags";
+  var _TC2 = "TokenCode";
+  var _TTK = "TransitiveTagKeys";
+  var _Ta2 = "Tag";
+  var _V2 = "Value";
+  var _WIT = "WebIdentityToken";
+  var _a = "arn";
+  var _aKST = "accessKeySecretType";
+  var _aQE = "awsQueryError";
+  var _c3 = "client";
+  var _cTT = "clientTokenType";
+  var _e3 = "error";
+  var _hE3 = "httpError";
+  var _m3 = "message";
+  var _pDLT = "policyDescriptorListType";
+  var _s3 = "smithy.ts.sdk.synthetic.com.amazonaws.sts";
+  var _tLT = "tagListType";
+  var n03 = "com.amazonaws.sts";
+  var _s_registry3 = TypeRegistry3.for(_s3);
+  var STSServiceException$ = [-3, _s3, "STSServiceException", 0, [], []];
+  _s_registry3.registerError(STSServiceException$, STSServiceException);
+  var n0_registry3 = TypeRegistry3.for(n03);
+  var ExpiredTokenException$ = [
+    -3,
+    n03,
+    _ETE,
+    { [_aQE]: [`ExpiredTokenException`, 400], [_e3]: _c3, [_hE3]: 400 },
+    [_m3],
+    [0]
+  ];
+  n0_registry3.registerError(ExpiredTokenException$, ExpiredTokenException);
+  var IDPCommunicationErrorException$ = [
+    -3,
+    n03,
+    _IDPCEE,
+    { [_aQE]: [`IDPCommunicationError`, 400], [_e3]: _c3, [_hE3]: 400 },
+    [_m3],
+    [0]
+  ];
+  n0_registry3.registerError(IDPCommunicationErrorException$, IDPCommunicationErrorException);
+  var IDPRejectedClaimException$ = [
+    -3,
+    n03,
+    _IDPRCE,
+    { [_aQE]: [`IDPRejectedClaim`, 403], [_e3]: _c3, [_hE3]: 403 },
+    [_m3],
+    [0]
+  ];
+  n0_registry3.registerError(IDPRejectedClaimException$, IDPRejectedClaimException);
+  var InvalidIdentityTokenException$ = [
+    -3,
+    n03,
+    _IITE,
+    { [_aQE]: [`InvalidIdentityToken`, 400], [_e3]: _c3, [_hE3]: 400 },
+    [_m3],
+    [0]
+  ];
+  n0_registry3.registerError(InvalidIdentityTokenException$, InvalidIdentityTokenException);
+  var MalformedPolicyDocumentException$ = [
+    -3,
+    n03,
+    _MPDE,
+    { [_aQE]: [`MalformedPolicyDocument`, 400], [_e3]: _c3, [_hE3]: 400 },
+    [_m3],
+    [0]
+  ];
+  n0_registry3.registerError(MalformedPolicyDocumentException$, MalformedPolicyDocumentException);
+  var PackedPolicyTooLargeException$ = [
+    -3,
+    n03,
+    _PPTLE,
+    { [_aQE]: [`PackedPolicyTooLarge`, 400], [_e3]: _c3, [_hE3]: 400 },
+    [_m3],
+    [0]
+  ];
+  n0_registry3.registerError(PackedPolicyTooLargeException$, PackedPolicyTooLargeException);
+  var RegionDisabledException$ = [
+    -3,
+    n03,
+    _RDE,
+    { [_aQE]: [`RegionDisabledException`, 403], [_e3]: _c3, [_hE3]: 403 },
+    [_m3],
+    [0]
+  ];
+  n0_registry3.registerError(RegionDisabledException$, RegionDisabledException);
+  var errorTypeRegistries3 = [
+    _s_registry3,
+    n0_registry3
+  ];
+  var accessKeySecretType = [0, n03, _aKST, 8, 0];
+  var clientTokenType = [0, n03, _cTT, 8, 0];
+  var AssumedRoleUser$ = [
+    3,
+    n03,
+    _ARU,
+    0,
+    [_ARI2, _A2],
+    [0, 0],
+    2
+  ];
+  var AssumeRoleRequest$ = [
+    3,
+    n03,
+    _ARR,
+    0,
+    [_RA, _RSN, _PA, _P2, _DS, _T2, _TTK, _EI, _SN, _TC2, _SI, _PC2],
+    [0, 0, () => policyDescriptorListType, 0, 1, () => tagListType, 64 | 0, 0, 0, 0, 0, () => ProvidedContextsListType],
+    2
+  ];
+  var AssumeRoleResponse$ = [
+    3,
+    n03,
+    _ARRs,
+    0,
+    [_C2, _ARU, _PPS, _SI],
+    [[() => Credentials$, 0], () => AssumedRoleUser$, 1, 0]
+  ];
+  var AssumeRoleWithWebIdentityRequest$ = [
+    3,
+    n03,
+    _ARWWIR,
+    0,
+    [_RA, _RSN, _WIT, _PI2, _PA, _P2, _DS],
+    [0, 0, [() => clientTokenType, 0], 0, () => policyDescriptorListType, 0, 1],
+    3
+  ];
+  var AssumeRoleWithWebIdentityResponse$ = [
+    3,
+    n03,
+    _ARWWIRs,
+    0,
+    [_C2, _SFWIT, _ARU, _PPS, _Pr2, _Au, _SI],
+    [[() => Credentials$, 0], 0, () => AssumedRoleUser$, 1, 0, 0, 0]
+  ];
+  var Credentials$ = [
+    3,
+    n03,
+    _C2,
+    0,
+    [_AKI2, _SAK2, _ST2, _E2],
+    [0, [() => accessKeySecretType, 0], 0, 4],
+    4
+  ];
+  var PolicyDescriptorType$ = [
+    3,
+    n03,
+    _PDT,
+    0,
+    [_a],
+    [0]
+  ];
+  var ProvidedContext$ = [
+    3,
+    n03,
+    _PCr,
+    0,
+    [_PAr, _CA2],
+    [0, 0]
+  ];
+  var Tag$2 = [
+    3,
+    n03,
+    _Ta2,
+    0,
+    [_K2, _V2],
+    [0, 0],
+    2
+  ];
+  var policyDescriptorListType = [
+    1,
+    n03,
+    _pDLT,
+    0,
+    () => PolicyDescriptorType$
+  ];
+  var ProvidedContextsListType = [
+    1,
+    n03,
+    _PCLT,
+    0,
+    () => ProvidedContext$
+  ];
+  var tagListType = [
+    1,
+    n03,
+    _tLT,
+    0,
+    () => Tag$2
+  ];
+  var AssumeRole$ = [
+    9,
+    n03,
+    _AR2,
+    0,
+    () => AssumeRoleRequest$,
+    () => AssumeRoleResponse$
+  ];
+  var AssumeRoleWithWebIdentity$ = [
+    9,
+    n03,
+    _ARWWI,
+    0,
+    () => AssumeRoleWithWebIdentityRequest$,
+    () => AssumeRoleWithWebIdentityResponse$
+  ];
+  var getRuntimeConfig$12 = (config) => {
+    return {
+      apiVersion: "2011-06-15",
+      base64Decoder: config?.base64Decoder ?? fromBase642,
+      base64Encoder: config?.base64Encoder ?? toBase642,
+      disableHostPrefix: config?.disableHostPrefix ?? false,
+      endpointProvider: config?.endpointProvider ?? defaultEndpointResolver3,
+      extensions: config?.extensions ?? [],
+      httpAuthSchemeProvider: config?.httpAuthSchemeProvider ?? defaultSTSHttpAuthSchemeProvider,
+      httpAuthSchemes: config?.httpAuthSchemes ?? [
+        {
+          schemeId: "aws.auth#sigv4",
+          identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4"),
+          signer: new AwsSdkSigV4Signer2
+        },
+        {
+          schemeId: "aws.auth#sigv4a",
+          identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4a"),
+          signer: new AwsSdkSigV4ASigner
+        },
+        {
+          schemeId: "smithy.api#noAuth",
+          identityProvider: (ipc) => ipc.getIdentityProvider("smithy.api#noAuth") || (async () => ({})),
+          signer: new NoAuthSigner2
+        }
+      ],
+      logger: config?.logger ?? new NoOpLogger3,
+      protocol: config?.protocol ?? AwsQueryProtocol,
+      protocolSettings: config?.protocolSettings ?? {
+        defaultNamespace: "com.amazonaws.sts",
+        errorTypeRegistries: errorTypeRegistries3,
+        xmlNamespace: "https://sts.amazonaws.com/doc/2011-06-15/",
+        version: "2011-06-15",
+        serviceTarget: "AWSSecurityTokenServiceV20110615"
+      },
+      serviceId: config?.serviceId ?? "STS",
+      sha256: config?.sha256 ?? Sha2562,
+      signerConstructor: config?.signerConstructor ?? SignatureV4MultiRegion2,
+      urlParser: config?.urlParser ?? parseUrl3,
+      utf8Decoder: config?.utf8Decoder ?? fromUtf82,
+      utf8Encoder: config?.utf8Encoder ?? toUtf82
+    };
+  };
+  var getRuntimeConfig2 = (config) => {
+    emitWarningIfUnsupportedVersion2(process.version);
+    const defaultsMode = resolveDefaultsModeConfig2(config);
+    const defaultConfigProvider = () => defaultsMode().then(loadConfigsForDefaultMode2);
+    const clientSharedValues = getRuntimeConfig$12(config);
+    emitWarningIfUnsupportedVersion$12(process.version);
+    const loaderConfig = {
+      profile: config?.profile,
+      logger: clientSharedValues.logger
+    };
+    return {
+      ...clientSharedValues,
+      ...config,
+      runtime: "node",
+      defaultsMode,
+      authSchemePreference: config?.authSchemePreference ?? loadConfig4(NODE_AUTH_SCHEME_PREFERENCE_OPTIONS2, loaderConfig),
+      bodyLengthChecker: config?.bodyLengthChecker ?? calculateBodyLength2,
+      defaultUserAgentProvider: config?.defaultUserAgentProvider ?? createDefaultUserAgentProvider2({ serviceId: clientSharedValues.serviceId, clientVersion: packageInfo2.version }),
+      httpAuthSchemes: config?.httpAuthSchemes ?? [
+        {
+          schemeId: "aws.auth#sigv4",
+          identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4") || (async (idProps) => await config.credentialDefaultProvider(idProps?.__config || {})()),
+          signer: new AwsSdkSigV4Signer2
+        },
+        {
+          schemeId: "aws.auth#sigv4a",
+          identityProvider: (ipc) => ipc.getIdentityProvider("aws.auth#sigv4a"),
+          signer: new AwsSdkSigV4ASigner
+        },
+        {
+          schemeId: "smithy.api#noAuth",
+          identityProvider: (ipc) => ipc.getIdentityProvider("smithy.api#noAuth") || (async () => ({})),
+          signer: new NoAuthSigner2
+        }
+      ],
+      maxAttempts: config?.maxAttempts ?? loadConfig4(NODE_MAX_ATTEMPT_CONFIG_OPTIONS2, config),
+      region: config?.region ?? loadConfig4(NODE_REGION_CONFIG_OPTIONS2, { ...NODE_REGION_CONFIG_FILE_OPTIONS2, ...loaderConfig }),
+      requestHandler: NodeHttpHandler3.create(config?.requestHandler ?? defaultConfigProvider),
+      retryMode: config?.retryMode ?? loadConfig4({
+        ...NODE_RETRY_MODE_CONFIG_OPTIONS2,
+        default: async () => (await defaultConfigProvider()).retryMode || DEFAULT_RETRY_MODE2
+      }, config),
+      sigv4aSigningRegionSet: config?.sigv4aSigningRegionSet ?? loadConfig4(NODE_SIGV4A_CONFIG_OPTIONS, loaderConfig),
+      streamCollector: config?.streamCollector ?? streamCollector2,
+      useDualstackEndpoint: config?.useDualstackEndpoint ?? loadConfig4(NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS2, loaderConfig),
+      useFipsEndpoint: config?.useFipsEndpoint ?? loadConfig4(NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS2, loaderConfig),
+      userAgentAppId: config?.userAgentAppId ?? loadConfig4(NODE_APP_ID_CONFIG_OPTIONS2, loaderConfig)
+    };
+  };
+  var getHttpAuthExtensionConfiguration2 = (runtimeConfig) => {
+    const _httpAuthSchemes = runtimeConfig.httpAuthSchemes;
+    let _httpAuthSchemeProvider = runtimeConfig.httpAuthSchemeProvider;
+    let _credentials = runtimeConfig.credentials;
+    return {
+      setHttpAuthScheme(httpAuthScheme) {
+        const index = _httpAuthSchemes.findIndex((scheme) => scheme.schemeId === httpAuthScheme.schemeId);
+        if (index === -1) {
+          _httpAuthSchemes.push(httpAuthScheme);
+        } else {
+          _httpAuthSchemes.splice(index, 1, httpAuthScheme);
+        }
+      },
+      httpAuthSchemes() {
+        return _httpAuthSchemes;
+      },
+      setHttpAuthSchemeProvider(httpAuthSchemeProvider) {
+        _httpAuthSchemeProvider = httpAuthSchemeProvider;
+      },
+      httpAuthSchemeProvider() {
+        return _httpAuthSchemeProvider;
+      },
+      setCredentials(credentials) {
+        _credentials = credentials;
+      },
+      credentials() {
+        return _credentials;
+      }
+    };
+  };
+  var resolveHttpAuthRuntimeConfig2 = (config) => {
+    return {
+      httpAuthSchemes: config.httpAuthSchemes(),
+      httpAuthSchemeProvider: config.httpAuthSchemeProvider(),
+      credentials: config.credentials()
+    };
+  };
+  var resolveRuntimeExtensions2 = (runtimeConfig, extensions) => {
+    const extensionConfiguration = Object.assign(getAwsRegionExtensionConfiguration2(runtimeConfig), getDefaultExtensionConfiguration2(runtimeConfig), getHttpHandlerExtensionConfiguration2(runtimeConfig), getHttpAuthExtensionConfiguration2(runtimeConfig));
+    extensions.forEach((extension) => extension.configure(extensionConfiguration));
+    return Object.assign(runtimeConfig, resolveAwsRegionExtensionConfiguration2(extensionConfiguration), resolveDefaultRuntimeConfig2(extensionConfiguration), resolveHttpHandlerRuntimeConfig2(extensionConfiguration), resolveHttpAuthRuntimeConfig2(extensionConfiguration));
+  };
+
+  class STSClient extends Client2 {
+    config;
+    constructor(...[configuration]) {
+      const _config_0 = getRuntimeConfig2(configuration || {});
+      super(_config_0);
+      this.initConfig = _config_0;
+      const _config_1 = resolveClientEndpointParameters3(_config_0);
+      const _config_2 = resolveUserAgentConfig2(_config_1);
+      const _config_3 = resolveRetryConfig2(_config_2);
+      const _config_4 = resolveRegionConfig2(_config_3);
+      const _config_5 = resolveHostHeaderConfig2(_config_4);
+      const _config_6 = resolveEndpointConfig2(_config_5);
+      const _config_7 = resolveHttpAuthSchemeConfig3(_config_6);
+      const _config_8 = resolveRuntimeExtensions2(_config_7, configuration?.extensions || []);
+      this.config = _config_8;
+      this.middlewareStack.use(getSchemaSerdePlugin2(this.config));
+      this.middlewareStack.use(getUserAgentPlugin2(this.config));
+      this.middlewareStack.use(getRetryPlugin2(this.config));
+      this.middlewareStack.use(getContentLengthPlugin2(this.config));
+      this.middlewareStack.use(getHostHeaderPlugin2(this.config));
+      this.middlewareStack.use(getLoggerPlugin2(this.config));
+      this.middlewareStack.use(getRecursionDetectionPlugin2(this.config));
+      this.middlewareStack.use(getHttpAuthSchemeEndpointRuleSetPlugin2(this.config, {
+        httpAuthSchemeParametersProvider: defaultSTSHttpAuthSchemeParametersProvider,
+        identityProviderConfigProvider: async (config) => new DefaultIdentityProviderConfig2({
+          "aws.auth#sigv4": config.credentials,
+          "aws.auth#sigv4a": config.credentials
+        })
+      }));
+      this.middlewareStack.use(getHttpSigningPlugin2(this.config));
+    }
+    destroy() {
+      super.destroy();
+    }
+  }
+  var command3 = makeBuilder3(commonParams3, "AWSSecurityTokenServiceV20110615", "STSClient", getEndpointPlugin3);
+  var _ep03 = {};
+  var _mw03 = (Command, cs, config, o3) => [];
+
+  class AssumeRoleCommand extends command3(_ep03, _mw03, "AssumeRole", AssumeRole$) {
+  }
+
+  class AssumeRoleWithWebIdentityCommand extends command3(_ep03, _mw03, "AssumeRoleWithWebIdentity", AssumeRoleWithWebIdentity$) {
+  }
+  var commands2 = {
+    AssumeRoleCommand,
+    AssumeRoleWithWebIdentityCommand
+  };
+
+  class STS extends STSClient {
+  }
+  createAggregatedClient2(commands2, STS);
+  var getAccountIdFromAssumedRoleUser = (assumedRoleUser) => {
+    if (typeof assumedRoleUser?.Arn === "string") {
+      const arnComponents = assumedRoleUser.Arn.split(":");
+      if (arnComponents.length > 4 && arnComponents[4] !== "") {
+        return arnComponents[4];
+      }
+    }
+    return;
+  };
+  var resolveRegion = async (_region, _parentRegion, credentialProviderLogger, loaderConfig = {}) => {
+    const region = typeof _region === "function" ? await _region() : _region;
+    const parentRegion = typeof _parentRegion === "function" ? await _parentRegion() : _parentRegion;
+    let stsDefaultRegion = "";
+    const resolvedRegion = region ?? parentRegion ?? (stsDefaultRegion = await stsRegionDefaultResolver(loaderConfig)());
+    credentialProviderLogger?.debug?.("@aws-sdk/client-sts::resolveRegion", "accepting first of:", `${region} (credential provider clientConfig)`, `${parentRegion} (contextual client)`, `${stsDefaultRegion} (STS default: AWS_REGION, profile region, or us-east-1)`);
+    return resolvedRegion;
+  };
+  var getDefaultRoleAssumer$1 = (stsOptions, STSClient2) => {
+    let stsClient;
+    let closureSourceCreds;
+    return async (sourceCreds, params) => {
+      closureSourceCreds = sourceCreds;
+      if (!stsClient) {
+        const { logger = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
+        const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
+          logger,
+          profile
+        });
+        const isCompatibleRequestHandler = !isH2(requestHandler);
+        stsClient = new STSClient2({
+          ...stsOptions,
+          userAgentAppId,
+          profile,
+          credentialDefaultProvider: () => async () => closureSourceCreds,
+          region: resolvedRegion,
+          requestHandler: isCompatibleRequestHandler ? requestHandler : undefined,
+          logger
+        });
+      }
+      const { Credentials, AssumedRoleUser } = await stsClient.send(new AssumeRoleCommand(params));
+      if (!Credentials || !Credentials.AccessKeyId || !Credentials.SecretAccessKey) {
+        throw new Error(`Invalid response from STS.assumeRole call with role ${params.RoleArn}`);
+      }
+      const accountId = getAccountIdFromAssumedRoleUser(AssumedRoleUser);
+      const credentials = {
+        accessKeyId: Credentials.AccessKeyId,
+        secretAccessKey: Credentials.SecretAccessKey,
+        sessionToken: Credentials.SessionToken,
+        expiration: Credentials.Expiration,
+        ...Credentials.CredentialScope && { credentialScope: Credentials.CredentialScope },
+        ...accountId && { accountId }
+      };
+      setCredentialFeature12(credentials, "CREDENTIALS_STS_ASSUME_ROLE", "i");
+      return credentials;
+    };
+  };
+  var getDefaultRoleAssumerWithWebIdentity$1 = (stsOptions, STSClient2) => {
+    let stsClient;
+    return async (params) => {
+      if (!stsClient) {
+        const { logger = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId } = stsOptions;
+        const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {
+          logger,
+          profile
+        });
+        const isCompatibleRequestHandler = !isH2(requestHandler);
+        stsClient = new STSClient2({
+          ...stsOptions,
+          userAgentAppId,
+          profile,
+          region: resolvedRegion,
+          requestHandler: isCompatibleRequestHandler ? requestHandler : undefined,
+          logger
+        });
+      }
+      const { Credentials, AssumedRoleUser } = await stsClient.send(new AssumeRoleWithWebIdentityCommand(params));
+      if (!Credentials || !Credentials.AccessKeyId || !Credentials.SecretAccessKey) {
+        throw new Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${params.RoleArn}`);
+      }
+      const accountId = getAccountIdFromAssumedRoleUser(AssumedRoleUser);
+      const credentials = {
+        accessKeyId: Credentials.AccessKeyId,
+        secretAccessKey: Credentials.SecretAccessKey,
+        sessionToken: Credentials.SessionToken,
+        expiration: Credentials.Expiration,
+        ...Credentials.CredentialScope && { credentialScope: Credentials.CredentialScope },
+        ...accountId && { accountId }
+      };
+      if (accountId) {
+        setCredentialFeature12(credentials, "RESOLVED_ACCOUNT_ID", "T");
+      }
+      setCredentialFeature12(credentials, "CREDENTIALS_STS_ASSUME_ROLE_WEB_ID", "k");
+      return credentials;
+    };
+  };
+  var isH2 = (requestHandler) => {
+    return requestHandler?.metadata?.handlerProtocol === "h2";
+  };
+  var getCustomizableStsClientCtor = (baseCtor, customizations) => {
+    if (!customizations)
+      return baseCtor;
+    else
+      return class CustomizableSTSClient extends baseCtor {
+        constructor(config) {
+          super(config);
+          for (const customization of customizations) {
+            this.middlewareStack.use(customization);
+          }
+        }
+      };
+  };
+  var getDefaultRoleAssumer = (stsOptions = {}, stsPlugins) => getDefaultRoleAssumer$1(stsOptions, getCustomizableStsClientCtor(STSClient, stsPlugins));
+  var getDefaultRoleAssumerWithWebIdentity = (stsOptions = {}, stsPlugins) => getDefaultRoleAssumerWithWebIdentity$1(stsOptions, getCustomizableStsClientCtor(STSClient, stsPlugins));
+  var decorateDefaultCredentialProvider = (provider) => (input) => provider({
+    roleAssumer: getDefaultRoleAssumer(input),
+    roleAssumerWithWebIdentity: getDefaultRoleAssumerWithWebIdentity(input),
+    ...input
+  });
+  exports.AssumeRole$ = AssumeRole$;
+  exports.AssumeRoleCommand = AssumeRoleCommand;
+  exports.AssumeRoleRequest$ = AssumeRoleRequest$;
+  exports.AssumeRoleResponse$ = AssumeRoleResponse$;
+  exports.AssumeRoleWithWebIdentity$ = AssumeRoleWithWebIdentity$;
+  exports.AssumeRoleWithWebIdentityCommand = AssumeRoleWithWebIdentityCommand;
+  exports.AssumeRoleWithWebIdentityRequest$ = AssumeRoleWithWebIdentityRequest$;
+  exports.AssumeRoleWithWebIdentityResponse$ = AssumeRoleWithWebIdentityResponse$;
+  exports.AssumedRoleUser$ = AssumedRoleUser$;
+  exports.Credentials$ = Credentials$;
+  exports.ExpiredTokenException = ExpiredTokenException;
+  exports.ExpiredTokenException$ = ExpiredTokenException$;
+  exports.IDPCommunicationErrorException = IDPCommunicationErrorException;
+  exports.IDPCommunicationErrorException$ = IDPCommunicationErrorException$;
+  exports.IDPRejectedClaimException = IDPRejectedClaimException;
+  exports.IDPRejectedClaimException$ = IDPRejectedClaimException$;
+  exports.InvalidIdentityTokenException = InvalidIdentityTokenException;
+  exports.InvalidIdentityTokenException$ = InvalidIdentityTokenException$;
+  exports.MalformedPolicyDocumentException = MalformedPolicyDocumentException;
+  exports.MalformedPolicyDocumentException$ = MalformedPolicyDocumentException$;
+  exports.PackedPolicyTooLargeException = PackedPolicyTooLargeException;
+  exports.PackedPolicyTooLargeException$ = PackedPolicyTooLargeException$;
+  exports.PolicyDescriptorType$ = PolicyDescriptorType$;
+  exports.ProvidedContext$ = ProvidedContext$;
+  exports.RegionDisabledException = RegionDisabledException;
+  exports.RegionDisabledException$ = RegionDisabledException$;
+  exports.STS = STS;
+  exports.STSClient = STSClient;
+  exports.STSServiceException = STSServiceException;
+  exports.STSServiceException$ = STSServiceException$;
+  exports.Tag$ = Tag$2;
+  exports.decorateDefaultCredentialProvider = decorateDefaultCredentialProvider;
+  exports.errorTypeRegistries = errorTypeRegistries3;
+  exports.getDefaultRoleAssumer = getDefaultRoleAssumer;
+  exports.getDefaultRoleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity;
+});
+
+// node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromWebToken.js
+var fromWebToken = (init) => async (awsIdentityProperties) => {
+  init.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");
+  const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;
+  let { roleAssumerWithWebIdentity } = init;
+  if (!roleAssumerWithWebIdentity) {
+    const { getDefaultRoleAssumerWithWebIdentity } = await Promise.resolve().then(() => __toESM(require_sts2(), 1));
+    roleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity({
+      ...init.clientConfig,
+      credentialProviderLogger: init.logger,
+      parentClientConfig: {
+        ...awsIdentityProperties?.callerClientConfig,
+        ...init.parentClientConfig
+      }
+    }, init.clientPlugins);
+  }
+  return roleAssumerWithWebIdentity({
+    RoleArn: roleArn,
+    RoleSessionName: roleSessionName ?? `aws-sdk-js-session-${Date.now()}`,
+    WebIdentityToken: webIdentityToken,
+    ProviderId: providerId,
+    PolicyArns: policyArns,
+    Policy: policy,
+    DurationSeconds: durationSeconds
+  });
+};
+
+// node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js
+import { readFileSync } from "fs";
+var import_client16, import_config24, ENV_TOKEN_FILE = "AWS_WEB_IDENTITY_TOKEN_FILE", ENV_ROLE_ARN = "AWS_ROLE_ARN", ENV_ROLE_SESSION_NAME = "AWS_ROLE_SESSION_NAME", fromTokenFile = (init = {}) => async (awsIdentityProperties) => {
+  init.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");
+  const webIdentityTokenFile = init?.webIdentityTokenFile ?? process.env[ENV_TOKEN_FILE];
+  const roleArn = init?.roleArn ?? process.env[ENV_ROLE_ARN];
+  const roleSessionName = init?.roleSessionName ?? process.env[ENV_ROLE_SESSION_NAME];
+  if (!webIdentityTokenFile || !roleArn) {
+    throw new import_config24.CredentialsProviderError("Web identity configuration not specified", {
+      logger: init.logger
+    });
+  }
+  const credentials = await fromWebToken({
+    ...init,
+    webIdentityToken: import_config24.externalDataInterceptor?.getTokenRecord?.()[webIdentityTokenFile] ?? readFileSync(webIdentityTokenFile, { encoding: "ascii" }),
+    roleArn,
+    roleSessionName
+  })(awsIdentityProperties);
+  if (webIdentityTokenFile === process.env[ENV_TOKEN_FILE]) {
+    import_client16.setCredentialFeature(credentials, "CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN", "h");
+  }
+  return credentials;
+};
+var init_fromTokenFile = __esm(() => {
+  import_client16 = __toESM(require_client2(), 1);
+  import_config24 = __toESM(require_config(), 1);
+});
+
+// node_modules/@aws-sdk/credential-provider-web-identity/dist-es/index.js
+var exports_dist_es7 = {};
+__export(exports_dist_es7, {
+  fromWebToken: () => fromWebToken,
+  fromTokenFile: () => fromTokenFile
+});
+var init_dist_es8 = __esm(() => {
+  init_fromTokenFile();
+});
+
+// node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveWebIdentityCredentials.js
+var import_client17, isWebIdentityProfile = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.web_identity_token_file === "string" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1, resolveWebIdentityCredentials = async (profile, options, callerClientConfig) => {
+  const { fromTokenFile: fromTokenFile2 } = await Promise.resolve().then(() => (init_dist_es8(), exports_dist_es7));
+  const credentials = await fromTokenFile2({
+    webIdentityTokenFile: profile.web_identity_token_file,
+    roleArn: profile.role_arn,
+    roleSessionName: profile.role_session_name,
+    roleAssumerWithWebIdentity: options.roleAssumerWithWebIdentity,
+    logger: options.logger,
+    parentClientConfig: options.parentClientConfig
+  })({
+    callerClientConfig
+  });
+  return import_client17.setCredentialFeature(credentials, "CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN", "q");
+};
+var init_resolveWebIdentityCredentials = __esm(() => {
+  import_client17 = __toESM(require_client2(), 1);
+});
+
+// node_modules/@aws-sdk/credential-provider-ini/dist-es/resolveProfileData.js
+var import_config25, resolveProfileData = async (profileName, profiles, options, callerClientConfig, visitedProfiles = {}, isAssumeRoleRecursiveCall = false) => {
+  const data = profiles[profileName];
+  if (Object.keys(visitedProfiles).length > 0 && isStaticCredsProfile(data)) {
+    return resolveStaticCredentials(data, options);
+  }
+  if (isAssumeRoleRecursiveCall || isAssumeRoleProfile(data, { profile: profileName, logger: options.logger })) {
+    return resolveAssumeRoleCredentials(profileName, profiles, options, callerClientConfig, visitedProfiles, resolveProfileData);
+  }
+  if (isStaticCredsProfile(data)) {
+    return resolveStaticCredentials(data, options);
+  }
+  if (isWebIdentityProfile(data)) {
+    return resolveWebIdentityCredentials(data, options, callerClientConfig);
+  }
+  if (isProcessProfile(data)) {
+    return resolveProcessCredentials2(options, profileName);
+  }
+  if (isSsoProfile2(data)) {
+    return await resolveSsoCredentials(profileName, data, options, callerClientConfig);
+  }
+  if (isLoginProfile(data)) {
+    return resolveLoginCredentials(profileName, options, callerClientConfig);
+  }
+  throw new import_config25.CredentialsProviderError(`Could not resolve credentials using profile: [${profileName}] in configuration/credentials file(s).`, { logger: options.logger });
+};
+var init_resolveProfileData = __esm(() => {
+  init_resolveAssumeRoleCredentials();
+  init_resolveLoginCredentials();
+  init_resolveProcessCredentials2();
+  init_resolveSsoCredentials();
+  init_resolveStaticCredentials();
+  init_resolveWebIdentityCredentials();
+  import_config25 = __toESM(require_config(), 1);
+});
+
+// node_modules/@aws-sdk/credential-provider-ini/dist-es/fromIni.js
+var import_config26, fromIni = (init = {}) => async ({ callerClientConfig } = {}) => {
+  init.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");
   const profiles = await import_config26.parseKnownFiles(init);
   return resolveProfileData(import_config26.getProfileName({
     profile: init.profile ?? callerClientConfig?.profile
@@ -23118,7 +24122,7 @@ var init_dist_es9 = __esm(() => {
 // package.json
 var package_default = {
   name: "@hasna/skills",
-  version: "0.10.6",
+  version: "0.10.9",
   description: "Skills library for AI coding agents",
   type: "module",
   bin: {
@@ -23180,6 +24184,7 @@ var package_default = {
     migrate: "bun run ./src/server/migrate.ts",
     typecheck: "tsc --noEmit",
     "verify:release": "bun run scripts/release-guard.ts",
+    "verify:release-review": "bun run scripts/verify-release-review.ts",
     "verify:consumer-types": "bun run scripts/consumer-types.ts",
     prepack: "bun run verify:generated && bun run verify:release && bun run verify:consumer-types",
     prepublishOnly: "bun run verify:producer && bun run typecheck && bun run test",
@@ -23239,12 +24244,12 @@ var package_default = {
   },
   repository: {
     type: "git",
-    url: "https://github.com/hasna/apps.git",
+    url: "https://github.com/hasna/skills.git",
     directory: "apps/skills"
   },
-  homepage: "https://github.com/hasna/apps/tree/main/apps/skills",
+  homepage: "https://github.com/hasna/skills/tree/main/apps/skills",
   bugs: {
-    url: "https://github.com/hasna/apps/issues"
+    url: "https://github.com/hasna/skills/issues"
   }
 };
 
@@ -27309,7 +28314,6 @@ var _DBTR = "DeleteBucketTaggingRequest";
 var _DBW = "DeleteBucketWebsite";
 var _DBWR = "DeleteBucketWebsiteRequest";
 var _DE = "DataExport";
-var _DEH = "DefaultEventHold";
 var _DIM = "DestinationIfMatch";
 var _DIMS = "DestinationIfModifiedSince";
 var _DINM = "DestinationIfNoneMatch";
@@ -27357,8 +28361,6 @@ var _ED = "ErrorDetails";
 var _EDr = "ErrorDocument";
 var _EE = "EndEvent";
 var _EH = "ExposeHeaders";
-var _EHD = "EventHoldDuration";
-var _EHv = "EventHold";
 var _EHx = "ExposeHeader";
 var _EM = "ErrorMessage";
 var _EODM = "ExpiredObjectDeleteMarker";
@@ -27703,9 +28705,6 @@ var _OL = "OutputLocation";
 var _OLC = "ObjectLockConfiguration";
 var _OLE = "ObjectLockEnabled";
 var _OLEFB = "ObjectLockEnabledForBucket";
-var _OLEH = "ObjectLockEventHold";
-var _OLEHDD = "ObjectLockEventHoldDurationDays";
-var _OLEHDY = "ObjectLockEventHoldDurationYears";
 var _OLLH = "ObjectLockLegalHold";
 var _OLLHS = "ObjectLockLegalHoldStatus";
 var _OLM = "ObjectLockMode";
@@ -28149,9 +29148,6 @@ var _xampc = "x-amz-mp-parts-count";
 var _xaoa = "x-amz-object-attributes";
 var _xaoad = "x-amz-object-annotation-directive";
 var _xaoim = "x-amz-object-if-match";
-var _xaoleh = "x-amz-object-lock-event-hold";
-var _xaolehdd = "x-amz-object-lock-event-hold-duration-days";
-var _xaolehdy = "x-amz-object-lock-event-hold-duration-years";
 var _xaollh = "x-amz-object-lock-legal-hold";
 var _xaolm = "x-amz-object-lock-mode";
 var _xaolrud = "x-amz-object-lock-retain-until-date";
@@ -28644,8 +29640,8 @@ var CopyObjectRequest$ = [
   n0,
   _CORo,
   0,
-  [_B, _CSo, _K, _ACL_, _CC, _CA, _CDo, _CEo, _CL, _CTo, _CSIM, _CSIMS, _CSINM, _CSIUS, _Exp, _GFC, _GR, _GRACP, _GWACP, _IM, _INM, _M, _MD, _TD, _ADn, _SSE, _SC, _WRL, _SSECA, _SSECK, _SSECKMD, _SSEKMSKI, _SSEKMSEC, _BKE, _CSSSECA, _CSSSECK, _CSSSECKMD, _RP, _Tag, _OLM, _OLRUD, _OLLHS, _OLEH, _OLEHDD, _OLEHDY, _EBO, _ESBO],
-  [[0, 1], [0, { [_hH]: _xacs___ }], [0, 1], [0, { [_hH]: _xaa }], [0, { [_hH]: _CC_ }], [0, { [_hH]: _xaca }], [0, { [_hH]: _CD_ }], [0, { [_hH]: _CE_ }], [0, { [_hH]: _CL_ }], [0, { [_hH]: _CT_ }], [0, { [_hH]: _xacsim }], [4, { [_hH]: _xacsims }], [0, { [_hH]: _xacsinm }], [4, { [_hH]: _xacsius }], [4, { [_hH]: _Exp }], [0, { [_hH]: _xagfc }], [0, { [_hH]: _xagr }], [0, { [_hH]: _xagra }], [0, { [_hH]: _xagwa }], [0, { [_hH]: _IM_ }], [0, { [_hH]: _INM_ }], [128 | 0, { [_hPH]: _xam }], [0, { [_hH]: _xamd }], [0, { [_hH]: _xatd }], [0, { [_hH]: _xaoad }], [0, { [_hH]: _xasse }], [0, { [_hH]: _xasc }], [0, { [_hH]: _xawrl }], [0, { [_hH]: _xasseca }], [() => SSECustomerKey, { [_hH]: _xasseck }], [0, { [_hH]: _xasseckM }], [() => SSEKMSKeyId, { [_hH]: _xasseakki }], [() => SSEKMSEncryptionContext, { [_hH]: _xassec }], [2, { [_hH]: _xassebke }], [0, { [_hH]: _xacssseca }], [() => CopySourceSSECustomerKey, { [_hH]: _xacssseck }], [0, { [_hH]: _xacssseckM }], [0, { [_hH]: _xarp }], [0, { [_hH]: _xat }], [0, { [_hH]: _xaolm }], [5, { [_hH]: _xaolrud }], [0, { [_hH]: _xaollh }], [0, { [_hH]: _xaoleh }], [1, { [_hH]: _xaolehdd }], [1, { [_hH]: _xaolehdy }], [0, { [_hH]: _xaebo }], [0, { [_hH]: _xasebo }]],
+  [_B, _CSo, _K, _ACL_, _CC, _CA, _CDo, _CEo, _CL, _CTo, _CSIM, _CSIMS, _CSINM, _CSIUS, _Exp, _GFC, _GR, _GRACP, _GWACP, _IM, _INM, _M, _MD, _TD, _ADn, _SSE, _SC, _WRL, _SSECA, _SSECK, _SSECKMD, _SSEKMSKI, _SSEKMSEC, _BKE, _CSSSECA, _CSSSECK, _CSSSECKMD, _RP, _Tag, _OLM, _OLRUD, _OLLHS, _EBO, _ESBO],
+  [[0, 1], [0, { [_hH]: _xacs___ }], [0, 1], [0, { [_hH]: _xaa }], [0, { [_hH]: _CC_ }], [0, { [_hH]: _xaca }], [0, { [_hH]: _CD_ }], [0, { [_hH]: _CE_ }], [0, { [_hH]: _CL_ }], [0, { [_hH]: _CT_ }], [0, { [_hH]: _xacsim }], [4, { [_hH]: _xacsims }], [0, { [_hH]: _xacsinm }], [4, { [_hH]: _xacsius }], [4, { [_hH]: _Exp }], [0, { [_hH]: _xagfc }], [0, { [_hH]: _xagr }], [0, { [_hH]: _xagra }], [0, { [_hH]: _xagwa }], [0, { [_hH]: _IM_ }], [0, { [_hH]: _INM_ }], [128 | 0, { [_hPH]: _xam }], [0, { [_hH]: _xamd }], [0, { [_hH]: _xatd }], [0, { [_hH]: _xaoad }], [0, { [_hH]: _xasse }], [0, { [_hH]: _xasc }], [0, { [_hH]: _xawrl }], [0, { [_hH]: _xasseca }], [() => SSECustomerKey, { [_hH]: _xasseck }], [0, { [_hH]: _xasseckM }], [() => SSEKMSKeyId, { [_hH]: _xasseakki }], [() => SSEKMSEncryptionContext, { [_hH]: _xassec }], [2, { [_hH]: _xassebke }], [0, { [_hH]: _xacssseca }], [() => CopySourceSSECustomerKey, { [_hH]: _xacssseck }], [0, { [_hH]: _xacssseckM }], [0, { [_hH]: _xarp }], [0, { [_hH]: _xat }], [0, { [_hH]: _xaolm }], [5, { [_hH]: _xaolrud }], [0, { [_hH]: _xaollh }], [0, { [_hH]: _xaebo }], [0, { [_hH]: _xasebo }]],
   3
 ];
 var CopyObjectResult$ = [
@@ -28738,8 +29734,8 @@ var CreateMultipartUploadRequest$ = [
   n0,
   _CMURr,
   0,
-  [_B, _K, _ACL_, _CC, _CDo, _CEo, _CL, _CTo, _Exp, _GFC, _GR, _GRACP, _GWACP, _M, _SSE, _SC, _WRL, _SSECA, _SSECK, _SSECKMD, _SSEKMSKI, _SSEKMSEC, _BKE, _RP, _Tag, _OLM, _OLRUD, _OLLHS, _OLEH, _OLEHDD, _OLEHDY, _EBO, _CA, _CT],
-  [[0, 1], [0, 1], [0, { [_hH]: _xaa }], [0, { [_hH]: _CC_ }], [0, { [_hH]: _CD_ }], [0, { [_hH]: _CE_ }], [0, { [_hH]: _CL_ }], [0, { [_hH]: _CT_ }], [4, { [_hH]: _Exp }], [0, { [_hH]: _xagfc }], [0, { [_hH]: _xagr }], [0, { [_hH]: _xagra }], [0, { [_hH]: _xagwa }], [128 | 0, { [_hPH]: _xam }], [0, { [_hH]: _xasse }], [0, { [_hH]: _xasc }], [0, { [_hH]: _xawrl }], [0, { [_hH]: _xasseca }], [() => SSECustomerKey, { [_hH]: _xasseck }], [0, { [_hH]: _xasseckM }], [() => SSEKMSKeyId, { [_hH]: _xasseakki }], [() => SSEKMSEncryptionContext, { [_hH]: _xassec }], [2, { [_hH]: _xassebke }], [0, { [_hH]: _xarp }], [0, { [_hH]: _xat }], [0, { [_hH]: _xaolm }], [5, { [_hH]: _xaolrud }], [0, { [_hH]: _xaollh }], [0, { [_hH]: _xaoleh }], [1, { [_hH]: _xaolehdd }], [1, { [_hH]: _xaolehdy }], [0, { [_hH]: _xaebo }], [0, { [_hH]: _xaca }], [0, { [_hH]: _xact }]],
+  [_B, _K, _ACL_, _CC, _CDo, _CEo, _CL, _CTo, _Exp, _GFC, _GR, _GRACP, _GWACP, _M, _SSE, _SC, _WRL, _SSECA, _SSECK, _SSECKMD, _SSEKMSKI, _SSEKMSEC, _BKE, _RP, _Tag, _OLM, _OLRUD, _OLLHS, _EBO, _CA, _CT],
+  [[0, 1], [0, 1], [0, { [_hH]: _xaa }], [0, { [_hH]: _CC_ }], [0, { [_hH]: _CD_ }], [0, { [_hH]: _CE_ }], [0, { [_hH]: _CL_ }], [0, { [_hH]: _CT_ }], [4, { [_hH]: _Exp }], [0, { [_hH]: _xagfc }], [0, { [_hH]: _xagr }], [0, { [_hH]: _xagra }], [0, { [_hH]: _xagwa }], [128 | 0, { [_hPH]: _xam }], [0, { [_hH]: _xasse }], [0, { [_hH]: _xasc }], [0, { [_hH]: _xawrl }], [0, { [_hH]: _xasseca }], [() => SSECustomerKey, { [_hH]: _xasseck }], [0, { [_hH]: _xasseckM }], [() => SSEKMSKeyId, { [_hH]: _xasseakki }], [() => SSEKMSEncryptionContext, { [_hH]: _xassec }], [2, { [_hH]: _xassebke }], [0, { [_hH]: _xarp }], [0, { [_hH]: _xat }], [0, { [_hH]: _xaolm }], [5, { [_hH]: _xaolrud }], [0, { [_hH]: _xaollh }], [0, { [_hH]: _xaebo }], [0, { [_hH]: _xaca }], [0, { [_hH]: _xact }]],
   2
 ];
 var CreateSessionOutput$ = [
@@ -28781,8 +29777,8 @@ var DefaultRetention$ = [
   n0,
   _DRe,
   0,
-  [_Mo, _D, _Y, _DEH],
-  [0, 1, 1, () => EventHoldDuration$]
+  [_Mo, _D, _Y],
+  [0, 1, 1]
 ];
 var Delete$ = [
   3,
@@ -29104,14 +30100,6 @@ var EventBridgeConfiguration$ = [
   [],
   []
 ];
-var EventHoldDuration$ = [
-  3,
-  n0,
-  _EHD,
-  0,
-  [_D, _Y],
-  [1, 1]
-];
 var ExistingObjectReplication$ = [
   3,
   n0,
@@ -29629,8 +30617,8 @@ var GetObjectOutput$ = [
   n0,
   _GOO,
   0,
-  [_Bo, _DM, _AR, _Ex, _Re, _LM, _CLo, _ET, _CCRC, _CCRCC, _CCRCNVME, _CSHA, _CSHAh, _CSHAhe, _CMD, _CXXHASH, _CXXHASHh, _CXXHASHhe, _CT, _MM, _VI, _CC, _CDo, _CEo, _CL, _CR, _CTo, _Exp, _ES, _WRL, _SSE, _M, _SSECA, _SSECKMD, _SSEKMSKI, _BKE, _SC, _RC, _RS, _PC, _TC, _OLM, _OLRUD, _OLLHS, _OLEH, _OLEHDD, _OLEHDY],
-  [[() => StreamingBlob, 16], [2, { [_hH]: _xadm }], [0, { [_hH]: _ar }], [0, { [_hH]: _xae }], [0, { [_hH]: _xar }], [4, { [_hH]: _LM_ }], [1, { [_hH]: _CL__ }], [0, { [_hH]: _ET }], [0, { [_hH]: _xacc }], [0, { [_hH]: _xacc_ }], [0, { [_hH]: _xacc__ }], [0, { [_hH]: _xacs }], [0, { [_hH]: _xacs_ }], [0, { [_hH]: _xacs__ }], [0, { [_hH]: _xacm }], [0, { [_hH]: _xacx }], [0, { [_hH]: _xacx_ }], [0, { [_hH]: _xacx__ }], [0, { [_hH]: _xact }], [1, { [_hH]: _xamm }], [0, { [_hH]: _xavi }], [0, { [_hH]: _CC_ }], [0, { [_hH]: _CD_ }], [0, { [_hH]: _CE_ }], [0, { [_hH]: _CL_ }], [0, { [_hH]: _CR_ }], [0, { [_hH]: _CT_ }], [4, { [_hH]: _Exp }], [0, { [_hH]: _ES }], [0, { [_hH]: _xawrl }], [0, { [_hH]: _xasse }], [128 | 0, { [_hPH]: _xam }], [0, { [_hH]: _xasseca }], [0, { [_hH]: _xasseckM }], [() => SSEKMSKeyId, { [_hH]: _xasseakki }], [2, { [_hH]: _xassebke }], [0, { [_hH]: _xasc }], [0, { [_hH]: _xarc }], [0, { [_hH]: _xars }], [1, { [_hH]: _xampc }], [1, { [_hH]: _xatc }], [0, { [_hH]: _xaolm }], [5, { [_hH]: _xaolrud }], [0, { [_hH]: _xaollh }], [0, { [_hH]: _xaoleh }], [1, { [_hH]: _xaolehdd }], [1, { [_hH]: _xaolehdy }]]
+  [_Bo, _DM, _AR, _Ex, _Re, _LM, _CLo, _ET, _CCRC, _CCRCC, _CCRCNVME, _CSHA, _CSHAh, _CSHAhe, _CMD, _CXXHASH, _CXXHASHh, _CXXHASHhe, _CT, _MM, _VI, _CC, _CDo, _CEo, _CL, _CR, _CTo, _Exp, _ES, _WRL, _SSE, _M, _SSECA, _SSECKMD, _SSEKMSKI, _BKE, _SC, _RC, _RS, _PC, _TC, _OLM, _OLRUD, _OLLHS],
+  [[() => StreamingBlob, 16], [2, { [_hH]: _xadm }], [0, { [_hH]: _ar }], [0, { [_hH]: _xae }], [0, { [_hH]: _xar }], [4, { [_hH]: _LM_ }], [1, { [_hH]: _CL__ }], [0, { [_hH]: _ET }], [0, { [_hH]: _xacc }], [0, { [_hH]: _xacc_ }], [0, { [_hH]: _xacc__ }], [0, { [_hH]: _xacs }], [0, { [_hH]: _xacs_ }], [0, { [_hH]: _xacs__ }], [0, { [_hH]: _xacm }], [0, { [_hH]: _xacx }], [0, { [_hH]: _xacx_ }], [0, { [_hH]: _xacx__ }], [0, { [_hH]: _xact }], [1, { [_hH]: _xamm }], [0, { [_hH]: _xavi }], [0, { [_hH]: _CC_ }], [0, { [_hH]: _CD_ }], [0, { [_hH]: _CE_ }], [0, { [_hH]: _CL_ }], [0, { [_hH]: _CR_ }], [0, { [_hH]: _CT_ }], [4, { [_hH]: _Exp }], [0, { [_hH]: _ES }], [0, { [_hH]: _xawrl }], [0, { [_hH]: _xasse }], [128 | 0, { [_hPH]: _xam }], [0, { [_hH]: _xasseca }], [0, { [_hH]: _xasseckM }], [() => SSEKMSKeyId, { [_hH]: _xasseakki }], [2, { [_hH]: _xassebke }], [0, { [_hH]: _xasc }], [0, { [_hH]: _xarc }], [0, { [_hH]: _xars }], [1, { [_hH]: _xampc }], [1, { [_hH]: _xatc }], [0, { [_hH]: _xaolm }], [5, { [_hH]: _xaolrud }], [0, { [_hH]: _xaollh }]]
 ];
 var GetObjectRequest$ = [
   3,
@@ -29758,8 +30746,8 @@ var HeadObjectOutput$ = [
   n0,
   _HOO,
   0,
-  [_DM, _AR, _Ex, _Re, _ASr, _LM, _CLo, _CCRC, _CCRCC, _CCRCNVME, _CSHA, _CSHAh, _CSHAhe, _CMD, _CXXHASH, _CXXHASHh, _CXXHASHhe, _CT, _ET, _MM, _VI, _CC, _CDo, _CEo, _CL, _CTo, _CR, _Exp, _ES, _WRL, _SSE, _M, _SSECA, _SSECKMD, _SSEKMSKI, _BKE, _SC, _RC, _RS, _PC, _TC, _OLM, _OLRUD, _OLLHS, _OLEH, _OLEHDD, _OLEHDY],
-  [[2, { [_hH]: _xadm }], [0, { [_hH]: _ar }], [0, { [_hH]: _xae }], [0, { [_hH]: _xar }], [0, { [_hH]: _xaas }], [4, { [_hH]: _LM_ }], [1, { [_hH]: _CL__ }], [0, { [_hH]: _xacc }], [0, { [_hH]: _xacc_ }], [0, { [_hH]: _xacc__ }], [0, { [_hH]: _xacs }], [0, { [_hH]: _xacs_ }], [0, { [_hH]: _xacs__ }], [0, { [_hH]: _xacm }], [0, { [_hH]: _xacx }], [0, { [_hH]: _xacx_ }], [0, { [_hH]: _xacx__ }], [0, { [_hH]: _xact }], [0, { [_hH]: _ET }], [1, { [_hH]: _xamm }], [0, { [_hH]: _xavi }], [0, { [_hH]: _CC_ }], [0, { [_hH]: _CD_ }], [0, { [_hH]: _CE_ }], [0, { [_hH]: _CL_ }], [0, { [_hH]: _CT_ }], [0, { [_hH]: _CR_ }], [4, { [_hH]: _Exp }], [0, { [_hH]: _ES }], [0, { [_hH]: _xawrl }], [0, { [_hH]: _xasse }], [128 | 0, { [_hPH]: _xam }], [0, { [_hH]: _xasseca }], [0, { [_hH]: _xasseckM }], [() => SSEKMSKeyId, { [_hH]: _xasseakki }], [2, { [_hH]: _xassebke }], [0, { [_hH]: _xasc }], [0, { [_hH]: _xarc }], [0, { [_hH]: _xars }], [1, { [_hH]: _xampc }], [1, { [_hH]: _xatc }], [0, { [_hH]: _xaolm }], [5, { [_hH]: _xaolrud }], [0, { [_hH]: _xaollh }], [0, { [_hH]: _xaoleh }], [1, { [_hH]: _xaolehdd }], [1, { [_hH]: _xaolehdy }]]
+  [_DM, _AR, _Ex, _Re, _ASr, _LM, _CLo, _CCRC, _CCRCC, _CCRCNVME, _CSHA, _CSHAh, _CSHAhe, _CMD, _CXXHASH, _CXXHASHh, _CXXHASHhe, _CT, _ET, _MM, _VI, _CC, _CDo, _CEo, _CL, _CTo, _CR, _Exp, _ES, _WRL, _SSE, _M, _SSECA, _SSECKMD, _SSEKMSKI, _BKE, _SC, _RC, _RS, _PC, _TC, _OLM, _OLRUD, _OLLHS],
+  [[2, { [_hH]: _xadm }], [0, { [_hH]: _ar }], [0, { [_hH]: _xae }], [0, { [_hH]: _xar }], [0, { [_hH]: _xaas }], [4, { [_hH]: _LM_ }], [1, { [_hH]: _CL__ }], [0, { [_hH]: _xacc }], [0, { [_hH]: _xacc_ }], [0, { [_hH]: _xacc__ }], [0, { [_hH]: _xacs }], [0, { [_hH]: _xacs_ }], [0, { [_hH]: _xacs__ }], [0, { [_hH]: _xacm }], [0, { [_hH]: _xacx }], [0, { [_hH]: _xacx_ }], [0, { [_hH]: _xacx__ }], [0, { [_hH]: _xact }], [0, { [_hH]: _ET }], [1, { [_hH]: _xamm }], [0, { [_hH]: _xavi }], [0, { [_hH]: _CC_ }], [0, { [_hH]: _CD_ }], [0, { [_hH]: _CE_ }], [0, { [_hH]: _CL_ }], [0, { [_hH]: _CT_ }], [0, { [_hH]: _CR_ }], [4, { [_hH]: _Exp }], [0, { [_hH]: _ES }], [0, { [_hH]: _xawrl }], [0, { [_hH]: _xasse }], [128 | 0, { [_hPH]: _xam }], [0, { [_hH]: _xasseca }], [0, { [_hH]: _xasseckM }], [() => SSEKMSKeyId, { [_hH]: _xasseakki }], [2, { [_hH]: _xassebke }], [0, { [_hH]: _xasc }], [0, { [_hH]: _xarc }], [0, { [_hH]: _xars }], [1, { [_hH]: _xampc }], [1, { [_hH]: _xatc }], [0, { [_hH]: _xaolm }], [5, { [_hH]: _xaolrud }], [0, { [_hH]: _xaollh }]]
 ];
 var HeadObjectRequest$ = [
   3,
@@ -30361,8 +31349,8 @@ var ObjectLockRetention$ = [
   n0,
   _OLR,
   0,
-  [_Mo, _RUD, _EHv, _EHD],
-  [0, 5, 0, () => EventHoldDuration$]
+  [_Mo, _RUD],
+  [0, 5]
 ];
 var ObjectLockRule$ = [
   3,
@@ -30746,8 +31734,8 @@ var PutObjectRequest$ = [
   n0,
   _POR,
   0,
-  [_B, _K, _ACL_, _Bo, _CC, _CDo, _CEo, _CL, _CLo, _CMDo, _CTo, _CA, _CCRC, _CCRCC, _CCRCNVME, _CSHA, _CSHAh, _CSHAhe, _CMD, _CXXHASH, _CXXHASHh, _CXXHASHhe, _Exp, _IM, _INM, _GFC, _GR, _GRACP, _GWACP, _WOB, _M, _SSE, _SC, _WRL, _SSECA, _SSECK, _SSECKMD, _SSEKMSKI, _SSEKMSEC, _BKE, _RP, _Tag, _OLM, _OLRUD, _OLLHS, _OLEH, _OLEHDD, _OLEHDY, _EBO],
-  [[0, 1], [0, 1], [0, { [_hH]: _xaa }], [() => StreamingBlob, 16], [0, { [_hH]: _CC_ }], [0, { [_hH]: _CD_ }], [0, { [_hH]: _CE_ }], [0, { [_hH]: _CL_ }], [1, { [_hH]: _CL__ }], [0, { [_hH]: _CM }], [0, { [_hH]: _CT_ }], [0, { [_hH]: _xasca }], [0, { [_hH]: _xacc }], [0, { [_hH]: _xacc_ }], [0, { [_hH]: _xacc__ }], [0, { [_hH]: _xacs }], [0, { [_hH]: _xacs_ }], [0, { [_hH]: _xacs__ }], [0, { [_hH]: _xacm }], [0, { [_hH]: _xacx }], [0, { [_hH]: _xacx_ }], [0, { [_hH]: _xacx__ }], [4, { [_hH]: _Exp }], [0, { [_hH]: _IM_ }], [0, { [_hH]: _INM_ }], [0, { [_hH]: _xagfc }], [0, { [_hH]: _xagr }], [0, { [_hH]: _xagra }], [0, { [_hH]: _xagwa }], [1, { [_hH]: _xawob }], [128 | 0, { [_hPH]: _xam }], [0, { [_hH]: _xasse }], [0, { [_hH]: _xasc }], [0, { [_hH]: _xawrl }], [0, { [_hH]: _xasseca }], [() => SSECustomerKey, { [_hH]: _xasseck }], [0, { [_hH]: _xasseckM }], [() => SSEKMSKeyId, { [_hH]: _xasseakki }], [() => SSEKMSEncryptionContext, { [_hH]: _xassec }], [2, { [_hH]: _xassebke }], [0, { [_hH]: _xarp }], [0, { [_hH]: _xat }], [0, { [_hH]: _xaolm }], [5, { [_hH]: _xaolrud }], [0, { [_hH]: _xaollh }], [0, { [_hH]: _xaoleh }], [1, { [_hH]: _xaolehdd }], [1, { [_hH]: _xaolehdy }], [0, { [_hH]: _xaebo }]],
+  [_B, _K, _ACL_, _Bo, _CC, _CDo, _CEo, _CL, _CLo, _CMDo, _CTo, _CA, _CCRC, _CCRCC, _CCRCNVME, _CSHA, _CSHAh, _CSHAhe, _CMD, _CXXHASH, _CXXHASHh, _CXXHASHhe, _Exp, _IM, _INM, _GFC, _GR, _GRACP, _GWACP, _WOB, _M, _SSE, _SC, _WRL, _SSECA, _SSECK, _SSECKMD, _SSEKMSKI, _SSEKMSEC, _BKE, _RP, _Tag, _OLM, _OLRUD, _OLLHS, _EBO],
+  [[0, 1], [0, 1], [0, { [_hH]: _xaa }], [() => StreamingBlob, 16], [0, { [_hH]: _CC_ }], [0, { [_hH]: _CD_ }], [0, { [_hH]: _CE_ }], [0, { [_hH]: _CL_ }], [1, { [_hH]: _CL__ }], [0, { [_hH]: _CM }], [0, { [_hH]: _CT_ }], [0, { [_hH]: _xasca }], [0, { [_hH]: _xacc }], [0, { [_hH]: _xacc_ }], [0, { [_hH]: _xacc__ }], [0, { [_hH]: _xacs }], [0, { [_hH]: _xacs_ }], [0, { [_hH]: _xacs__ }], [0, { [_hH]: _xacm }], [0, { [_hH]: _xacx }], [0, { [_hH]: _xacx_ }], [0, { [_hH]: _xacx__ }], [4, { [_hH]: _Exp }], [0, { [_hH]: _IM_ }], [0, { [_hH]: _INM_ }], [0, { [_hH]: _xagfc }], [0, { [_hH]: _xagr }], [0, { [_hH]: _xagra }], [0, { [_hH]: _xagwa }], [1, { [_hH]: _xawob }], [128 | 0, { [_hPH]: _xam }], [0, { [_hH]: _xasse }], [0, { [_hH]: _xasc }], [0, { [_hH]: _xawrl }], [0, { [_hH]: _xasseca }], [() => SSECustomerKey, { [_hH]: _xasseck }], [0, { [_hH]: _xasseckM }], [() => SSEKMSKeyId, { [_hH]: _xasseakki }], [() => SSEKMSEncryptionContext, { [_hH]: _xassec }], [2, { [_hH]: _xassebke }], [0, { [_hH]: _xarp }], [0, { [_hH]: _xat }], [0, { [_hH]: _xaolm }], [5, { [_hH]: _xaolrud }], [0, { [_hH]: _xaollh }], [0, { [_hH]: _xaebo }]],
   2
 ];
 var PutObjectRetentionOutput$ = [
@@ -32586,7 +33574,7 @@ class CreateSessionCommand extends command(_ep4, _mw0, "CreateSession", CreateSe
 // node_modules/@aws-sdk/client-s3/package.json
 var package_default2 = {
   name: "@aws-sdk/client-s3",
-  version: "3.1136.0",
+  version: "3.1127.0",
   description: "AWS SDK for JavaScript S3 Client for Node.js, Browser and React Native",
   homepage: "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-s3",
   license: "Apache-2.0",
@@ -32640,10 +33628,10 @@ var package_default2 = {
     "test:index": "tsc -p tsconfig.test.json && node ./test/index-objects.spec.mjs"
   },
   dependencies: {
-    "@aws-sdk/checksums": "^3.1001.0",
-    "@aws-sdk/core": "^3.978.0",
-    "@aws-sdk/credential-provider-node": "^3.972.83",
-    "@aws-sdk/middleware-sdk-s3": "^3.972.76",
+    "@aws-sdk/checksums": "^3.1000.29",
+    "@aws-sdk/core": "^3.977.9",
+    "@aws-sdk/credential-provider-node": "^3.972.82",
+    "@aws-sdk/middleware-sdk-s3": "^3.972.75",
     "@aws-sdk/signature-v4-multi-region": "^3.996.46",
     "@aws-sdk/types": "^3.974.5",
     "@smithy/core": "^3.33.3",
@@ -32653,7 +33641,7 @@ var package_default2 = {
     tslib: "^2.6.2"
   },
   devDependencies: {
-    "@aws-sdk/signature-v4-crt": "3.1136.0",
+    "@aws-sdk/signature-v4-crt": "3.1127.0",
     "@smithy/snapshot-testing": "^2.3.2",
     "@tsconfig/node20": "20.1.8",
     "@types/node": "^20.14.8",
@@ -37672,7 +38660,7 @@ var commonParams3 = {
 // node_modules/@aws-sdk/client-ecs/package.json
 var package_default3 = {
   name: "@aws-sdk/client-ecs",
-  version: "3.1136.0",
+  version: "3.1127.0",
   description: "AWS SDK for JavaScript Ecs Client for Node.js, Browser and React Native",
   homepage: "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-ecs",
   license: "Apache-2.0",
@@ -37720,8 +38708,8 @@ var package_default3 = {
     "test:index": "tsc -p tsconfig.test.json && node ./test/index-objects.spec.mjs"
   },
   dependencies: {
-    "@aws-sdk/core": "^3.978.0",
-    "@aws-sdk/credential-provider-node": "^3.972.83",
+    "@aws-sdk/core": "^3.977.9",
+    "@aws-sdk/credential-provider-node": "^3.972.82",
     "@aws-sdk/types": "^3.974.5",
     "@smithy/core": "^3.33.3",
     "@smithy/fetch-http-handler": "^5.7.2",