@karmaniverous/get-dotenv 7.0.6 → 7.0.7

package/dist/chunks/{AwsRestJsonProtocol-4m7HHwvS.mjs → AwsRestJsonProtocol-BWWvLZiw.mjs}

@@ -1,6 +1,6 @@
-import { m as HttpProtocol, z as NormalizedSchema, n as HttpRequest, aU as translateTraits, a3 as extendedEncodeURIComponent, X as collectBody, aP as splitHeader, S as SerdeContext, F as FromStringShapeDeserializer, aT as toUtf8, a8 as fromUtf8, a9 as generateIdempotencyToken, L as LazyJsonString, aR as toBase64, a0 as determineTimestampFormat, _ as dateToUtcString, G as NumericValue, K as SerdeContextConfig, U as UnionSerde, a6 as fromBase64, av as parseEpochTimestamp, az as parseRfc7231DateTime, ay as parseRfc3339DateTimeWithOffset, P as ProtocolLib } from './index-BuxEK_Z4.mjs';
+import { m as HttpProtocol, z as NormalizedSchema, n as HttpRequest, aU as translateTraits, a3 as extendedEncodeURIComponent, X as collectBody, aP as splitHeader, S as SerdeContext, F as FromStringShapeDeserializer, aT as toUtf8, a8 as fromUtf8, a9 as generateIdempotencyToken, L as LazyJsonString, aR as toBase64, a0 as determineTimestampFormat, _ as dateToUtcString, G as NumericValue, K as SerdeContextConfig, U as UnionSerde, a6 as fromBase64, av as parseEpochTimestamp, az as parseRfc7231DateTime, ay as parseRfc3339DateTimeWithOffset, P as ProtocolLib } from './index-4kbkrHS9.mjs';
 import 'node:crypto';
-import { s as sdkStreamMixin } from './sdk-stream-mixin-BL49AxZx.mjs';
+import { s as sdkStreamMixin } from './sdk-stream-mixin-B_ajKWho.mjs';
 
 function quoteHeader(part) {
     if (part.includes(",") || part.includes('"')) {

package/dist/chunks/{createCli-BkHLeYXL.mjs → createCli-DRgcaM2D.mjs}

@@ -6,19 +6,19 @@ import 'fs-extra';
 import 'node:path';
 import 'radash';
 import 'node:buffer';
-import { d as defaultsDeep, h as getDotenvCliOptions2Options, c as baseRootOptionDefaults, G as GetDotenvCli, b as attachRootOptions } from './readMergedOptions-CraAnYdB.mjs';
+import { d as defaultsDeep, h as getDotenvCliOptions2Options, c as baseRootOptionDefaults, G as GetDotenvCli, b as attachRootOptions } from './readMergedOptions-x80ltQO_.mjs';
 import 'crypto';
 import 'url';
 import '@commander-js/extra-typings';
 import 'dotenv';
 import 'execa';
 import { t as toHelpConfig } from './helpConfig-CGejgwWW.mjs';
-import { r as resolveCliOptions } from './resolveCliOptions-BMBkWDYJ.mjs';
+import { r as resolveCliOptions } from './resolveCliOptions-CR-BEUmS.mjs';
 import { v as validateEnvAgainstSources } from './validate-CDl0rE6k.mjs';
 import { awsPlugin } from '../plugins-aws.mjs';
-import { R as awsWhoamiPlugin } from './index-BuxEK_Z4.mjs';
+import { R as awsWhoamiPlugin } from './index-4kbkrHS9.mjs';
 import { batchPlugin } from '../plugins-batch.mjs';
-import { c as cmdPlugin } from './index-Dd6S1nZ-.mjs';
+import { c as cmdPlugin } from './index-BzoCat8h.mjs';
 import { initPlugin } from '../plugins-init.mjs';
 
 const dbg = (...args) => {
@@ -66,7 +66,7 @@ function installRootHooks(program, defaults) {
         }
     };
     // Hook: preSubcommand — always runs for subcommand flows.
-    program.hook('preSubcommand', async (thisCommand) => {
+    program.hook('preSubcommand', async (thisCommand, actionCommand) => {
         const sources = await resolveGetDotenvConfigSources(import.meta.url);
         const rawArgs = thisCommand.rawArgs ?? [];
         dbg('preSubcommand:rawArgs', rawArgs);
@@ -83,7 +83,9 @@ function installRootHooks(program, defaults) {
         program._setOptionsBag(merged);
         // Resolve context for this run via programmatic converter.
         const serviceOptions = getDotenvCliOptions2Options(merged);
-        await program.resolveAndLoad(serviceOptions);
+        await program.resolveAndLoad(serviceOptions, {
+            invokedSubcommand: actionCommand.name(),
+        });
         propagateResolvedEnv(merged);
         // Refresh dynamic help text using the resolved config slices.
         try {
@@ -130,7 +132,7 @@ function installRootHooks(program, defaults) {
         program._setOptionsBag(merged);
         if (!program.hasCtx()) {
             const serviceOptions = getDotenvCliOptions2Options(merged);
-            await program.resolveAndLoad(serviceOptions);
+            await program.resolveAndLoad(serviceOptions, { runAfterResolve: false });
         }
         // Always propagate resolved env into the merged bag — even when
         // preSubcommand already set the context.  preAction unconditionally

package/dist/chunks/{externalDataInterceptor-DyDNbv-D.mjs → externalDataInterceptor-Bbvq4sdd.mjs}

@@ -1,5 +1,5 @@
-import { t as tokenIntercept } from './getSSOTokenFromFile-CkYcEieD.mjs';
-import { a4 as fileIntercept } from './index-BuxEK_Z4.mjs';
+import { t as tokenIntercept } from './getSSOTokenFromFile-ClTzvS3i.mjs';
+import { a4 as fileIntercept } from './index-4kbkrHS9.mjs';
 
 const externalDataInterceptor = {
     getFileRecord() {

package/dist/chunks/{getSSOTokenFromFile-CkYcEieD.mjs → getSSOTokenFromFile-ClTzvS3i.mjs}

@@ -1,7 +1,7 @@
 import { readFile } from 'node:fs/promises';
 import { createHash } from 'node:crypto';
 import { join } from 'node:path';
-import { af as getHomeDir } from './index-BuxEK_Z4.mjs';
+import { af as getHomeDir } from './index-4kbkrHS9.mjs';
 
 const getSSOTokenFilepath = (id) => {
     const hasher = createHash("sha1");

package/dist/chunks/{index-BuxEK_Z4.mjs → index-4kbkrHS9.mjs}

@@ -1,4 +1,4 @@
-import { g as definePlugin } from './readMergedOptions-CraAnYdB.mjs';
+import { g as definePlugin } from './readMergedOptions-x80ltQO_.mjs';
 import 'execa';
 import 'radash';
 import 'node:buffer';
@@ -2572,7 +2572,7 @@ class HttpProtocol extends SerdeContext {
         });
     }
     async loadEventStreamCapability() {
-        const { EventStreamSerde } = await import('./index-Dl8qC51H.mjs');
+        const { EventStreamSerde } = await import('./index-IOQ1o3w3.mjs');
         return new EventStreamSerde({
             marshaller: this.getEventStreamMarshaller(),
             serializer: this.serializer,
@@ -6431,10 +6431,10 @@ const fromEnv = (init) => async () => {
 
 const ENV_IMDS_DISABLED = "AWS_EC2_METADATA_DISABLED";
 const remoteProvider = async (init) => {
-    const { ENV_CMDS_FULL_URI, ENV_CMDS_RELATIVE_URI, fromContainerMetadata, fromInstanceMetadata } = await import('./index-C58EanKv.mjs');
+    const { ENV_CMDS_FULL_URI, ENV_CMDS_RELATIVE_URI, fromContainerMetadata, fromInstanceMetadata } = await import('./index-Tm4WDj9R.mjs');
     if (process.env[ENV_CMDS_RELATIVE_URI] || process.env[ENV_CMDS_FULL_URI]) {
         init.logger?.debug("@aws-sdk/credential-provider-node - remoteProvider::fromHttp/fromContainerMetadata");
-        const { fromHttp } = await import('./index-CsI5JuIM.mjs');
+        const { fromHttp } = await import('./index-DFNP_Nrx.mjs');
         return chain(fromHttp(init), fromContainerMetadata(init));
     }
     if (process.env[ENV_IMDS_DISABLED] && process.env[ENV_IMDS_DISABLED] !== "false") {
@@ -6544,22 +6544,22 @@ const defaultProvider = (init = {}) => memoizeChain([
         if (!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession) {
             throw new CredentialsProviderError("Skipping SSO provider in default chain (inputs do not include SSO fields).", { logger: init.logger });
         }
-        const { fromSSO } = await import('./index-B3fM_U6F.mjs');
+        const { fromSSO } = await import('./index-D7Lv-lxm.mjs');
         return fromSSO(init)(awsIdentityProperties);
     },
     async (awsIdentityProperties) => {
         init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromIni");
-        const { fromIni } = await import('./index-QkVZTs6l.mjs');
+        const { fromIni } = await import('./index-Db08BBL5.mjs');
         return fromIni(init)(awsIdentityProperties);
     },
     async (awsIdentityProperties) => {
         init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromProcess");
-        const { fromProcess } = await import('./index-CjWZ4uNg.mjs');
+        const { fromProcess } = await import('./index-DO68RbZ8.mjs');
         return fromProcess(init)(awsIdentityProperties);
     },
     async (awsIdentityProperties) => {
         init.logger?.debug("@aws-sdk/credential-provider-node - defaultProvider::fromTokenFile");
-        const { fromTokenFile } = await import('./index-D-a5vkZL.mjs');
+        const { fromTokenFile } = await import('./index-Cl6wXPYD.mjs');
         return fromTokenFile(init)(awsIdentityProperties);
     },
     async () => {

package/dist/chunks/{index-B35hOhgq.mjs → index-B5GwHCSX.mjs}

@@ -1,8 +1,8 @@
-import { aE as resolveAwsSdkSigV4Config, au as normalizeProvider, ap as getSmithyContext, B as BinaryDecisionDiagram, l as EndpointCache, $ as decideEndpoint, Q as awsEndpointFunctions, Z as customEndpointFunctions, M as ServiceException, T as TypeRegistry, aT as toUtf8, a8 as fromUtf8, aA as parseUrl, x as NoOpLogger, b as AwsSdkSigV4Signer, w as NoAuthSigner, aR as toBase64, a6 as fromBase64, a1 as emitWarningIfUnsupportedVersion, aG as resolveDefaultsModeConfig, a2 as emitWarningIfUnsupportedVersion$1, aQ as streamCollector, V as calculateBodyLength, ar as loadConfig, N as NODE_APP_ID_CONFIG_OPTIONS, v as NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, u as NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, H as Hash, s as NODE_RETRY_MODE_CONFIG_OPTIONS, D as DEFAULT_RETRY_MODE, y as NodeHttpHandler, q as NODE_REGION_CONFIG_FILE_OPTIONS, r as NODE_REGION_CONFIG_OPTIONS, p as NODE_MAX_ATTEMPT_CONFIG_OPTIONS, Y as createDefaultUserAgentProvider, o as NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, as as loadConfigsForDefaultMode, aa as getAwsRegionExtensionConfiguration, ad as getDefaultExtensionConfiguration, ai as getHttpHandlerExtensionConfiguration, aC as resolveAwsRegionExtensionConfiguration, aF as resolveDefaultRuntimeConfig, aJ as resolveHttpHandlerRuntimeConfig, c as Client, aN as resolveUserAgentConfig, aM as resolveRetryConfig, aL as resolveRegionConfig, aH as resolveEndpointConfig, ao as getSchemaSerdePlugin, aq as getUserAgentPlugin, an as getRetryPlugin, ac as getContentLengthPlugin, ag as getHostHeaderPlugin, ak as getLoggerPlugin, am as getRecursionDetectionPlugin, ah as getHttpAuthSchemeEndpointRuleSetPlugin, f as DefaultIdentityProviderConfig, aj as getHttpSigningPlugin, aI as resolveHostHeaderConfig, d as Command, ae as getEndpointPlugin } from './index-BuxEK_Z4.mjs';
+import { aE as resolveAwsSdkSigV4Config, au as normalizeProvider, ap as getSmithyContext, B as BinaryDecisionDiagram, l as EndpointCache, $ as decideEndpoint, Q as awsEndpointFunctions, Z as customEndpointFunctions, M as ServiceException, T as TypeRegistry, aT as toUtf8, a8 as fromUtf8, aA as parseUrl, x as NoOpLogger, b as AwsSdkSigV4Signer, w as NoAuthSigner, aR as toBase64, a6 as fromBase64, a1 as emitWarningIfUnsupportedVersion, aG as resolveDefaultsModeConfig, a2 as emitWarningIfUnsupportedVersion$1, aQ as streamCollector, V as calculateBodyLength, ar as loadConfig, N as NODE_APP_ID_CONFIG_OPTIONS, v as NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, u as NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, H as Hash, s as NODE_RETRY_MODE_CONFIG_OPTIONS, D as DEFAULT_RETRY_MODE, y as NodeHttpHandler, q as NODE_REGION_CONFIG_FILE_OPTIONS, r as NODE_REGION_CONFIG_OPTIONS, p as NODE_MAX_ATTEMPT_CONFIG_OPTIONS, Y as createDefaultUserAgentProvider, o as NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, as as loadConfigsForDefaultMode, aa as getAwsRegionExtensionConfiguration, ad as getDefaultExtensionConfiguration, ai as getHttpHandlerExtensionConfiguration, aC as resolveAwsRegionExtensionConfiguration, aF as resolveDefaultRuntimeConfig, aJ as resolveHttpHandlerRuntimeConfig, c as Client, aN as resolveUserAgentConfig, aM as resolveRetryConfig, aL as resolveRegionConfig, aH as resolveEndpointConfig, ao as getSchemaSerdePlugin, aq as getUserAgentPlugin, an as getRetryPlugin, ac as getContentLengthPlugin, ag as getHostHeaderPlugin, ak as getLoggerPlugin, am as getRecursionDetectionPlugin, ah as getHttpAuthSchemeEndpointRuleSetPlugin, f as DefaultIdentityProviderConfig, aj as getHttpSigningPlugin, aI as resolveHostHeaderConfig, d as Command, ae as getEndpointPlugin } from './index-4kbkrHS9.mjs';
 import { p as packageInfo } from './package-DbbYaehr.mjs';
 import 'node:crypto';
-import { A as AwsRestJsonProtocol } from './AwsRestJsonProtocol-4m7HHwvS.mjs';
-import './readMergedOptions-CraAnYdB.mjs';
+import { A as AwsRestJsonProtocol } from './AwsRestJsonProtocol-BWWvLZiw.mjs';
+import './readMergedOptions-x80ltQO_.mjs';
 import 'zod';
 import '@commander-js/extra-typings';
 import './readDotenvCascade-Dgx4SC1p.mjs';
@@ -26,7 +26,7 @@ import 'node:stream';
 import 'node:fs';
 import 'node:https';
 import 'node:process';
-import './sdk-stream-mixin-BL49AxZx.mjs';
+import './sdk-stream-mixin-B_ajKWho.mjs';
 
 const defaultSSOOIDCHttpAuthSchemeParametersProvider = async (config, context, input) => {
     return {

package/dist/chunks/{index-Dd6S1nZ-.mjs → index-BzoCat8h.mjs}

@@ -1,5 +1,5 @@
 import { camel } from 'radash';
-import { r as readMergedOptions, d as defaultsDeep, h as getDotenvCliOptions2Options, g as definePlugin } from './readMergedOptions-CraAnYdB.mjs';
+import { r as readMergedOptions, d as defaultsDeep, h as getDotenvCliOptions2Options, g as definePlugin } from './readMergedOptions-x80ltQO_.mjs';
 import 'execa';
 import 'node:buffer';
 import 'fs-extra';
@@ -17,7 +17,7 @@ import { z } from 'zod';
 import { r as resolveCommand, a as resolveShell, t as tokenize, s as shouldCapture, c as runCommand, b as buildSpawnEnv } from './spawnEnv-CKgnHGpr.mjs';
 import { m as maybePreserveNodeEvalArgv, c as composeNestedEnv, s as stripOne } from './invoke-DuRPU1oC.mjs';
 import { f as dotenvExpandFromProcessEnv } from './readDotenvCascade-Dgx4SC1p.mjs';
-import { b as baseGetDotenvCliOptions, r as resolveCliOptions } from './resolveCliOptions-BMBkWDYJ.mjs';
+import { b as baseGetDotenvCliOptions, r as resolveCliOptions } from './resolveCliOptions-CR-BEUmS.mjs';
 
 /** src/diagnostics/entropy.ts
  * Entropy diagnostics (presentation-only).

package/dist/chunks/{index-D-a5vkZL.mjs → index-Cl6wXPYD.mjs}

@@ -1,7 +1,7 @@
 import { readFileSync } from 'node:fs';
-import { e as CredentialsProviderError, aO as setCredentialFeature } from './index-BuxEK_Z4.mjs';
-import { e as externalDataInterceptor } from './externalDataInterceptor-DyDNbv-D.mjs';
-import './readMergedOptions-CraAnYdB.mjs';
+import { e as CredentialsProviderError, aO as setCredentialFeature } from './index-4kbkrHS9.mjs';
+import { e as externalDataInterceptor } from './externalDataInterceptor-Bbvq4sdd.mjs';
+import './readMergedOptions-x80ltQO_.mjs';
 import 'zod';
 import '@commander-js/extra-typings';
 import './readDotenvCascade-Dgx4SC1p.mjs';
@@ -25,14 +25,14 @@ import 'node:stream';
 import 'node:crypto';
 import 'node:https';
 import 'node:process';
-import './getSSOTokenFromFile-CkYcEieD.mjs';
+import './getSSOTokenFromFile-ClTzvS3i.mjs';
 
 const fromWebToken = (init) => async (awsIdentityProperties) => {
     init.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");
     const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;
     let { roleAssumerWithWebIdentity } = init;
     if (!roleAssumerWithWebIdentity) {
-        const { getDefaultRoleAssumerWithWebIdentity } = await import('./index-D6iVe1wh.mjs');
+        const { getDefaultRoleAssumerWithWebIdentity } = await import('./index-fNrNPp4e.mjs');
         roleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity({
             ...init.clientConfig,
             credentialProviderLogger: init.logger,

package/dist/chunks/{index-B3fM_U6F.mjs → index-D7Lv-lxm.mjs}

@@ -1,8 +1,8 @@
-import { J as ProviderError, I as IniSectionType, C as CONFIG_PREFIX_SEPARATOR, aB as readFile, ab as getConfigFilepath, aw as parseIni, al as getProfileName, e as CredentialsProviderError, aO as setCredentialFeature } from './index-BuxEK_Z4.mjs';
+import { J as ProviderError, I as IniSectionType, C as CONFIG_PREFIX_SEPARATOR, aB as readFile, ab as getConfigFilepath, aw as parseIni, al as getProfileName, e as CredentialsProviderError, aO as setCredentialFeature } from './index-4kbkrHS9.mjs';
 import { promises } from 'node:fs';
-import { g as getSSOTokenFilepath, a as getSSOTokenFromFile } from './getSSOTokenFromFile-CkYcEieD.mjs';
-import { p as parseKnownFiles } from './parseKnownFiles-BZNrX_JE.mjs';
-import './readMergedOptions-CraAnYdB.mjs';
+import { g as getSSOTokenFilepath, a as getSSOTokenFromFile } from './getSSOTokenFromFile-ClTzvS3i.mjs';
+import { p as parseKnownFiles } from './parseKnownFiles-BCL0L7aP.mjs';
+import './readMergedOptions-x80ltQO_.mjs';
 import 'zod';
 import '@commander-js/extra-typings';
 import './readDotenvCascade-Dgx4SC1p.mjs';
@@ -56,7 +56,7 @@ const EXPIRE_WINDOW_MS = 5 * 60 * 1000;
 const REFRESH_MESSAGE = `To refresh this SSO session run 'aws sso login' with the corresponding profile.`;
 
 const getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {
-    const { SSOOIDCClient } = await import('./index-B35hOhgq.mjs');
+    const { SSOOIDCClient } = await import('./index-B5GwHCSX.mjs');
     const coalesce = (prop) => init.clientConfig?.[prop] ?? init.parentClientConfig?.[prop] ?? callerClientConfig?.[prop];
     const ssoOidcClient = new SSOOIDCClient(Object.assign({}, init.clientConfig ?? {}, {
         region: ssoRegion ?? init.clientConfig?.region,
@@ -67,7 +67,7 @@ const getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {
 };
 
 const getNewSsoOidcToken = async (ssoToken, ssoRegion, init = {}, callerClientConfig) => {
-    const { CreateTokenCommand } = await import('./index-B35hOhgq.mjs');
+    const { CreateTokenCommand } = await import('./index-B5GwHCSX.mjs');
     const ssoOidcClient = await getSsoOidcClient(ssoRegion, init, callerClientConfig);
     return ssoOidcClient.send(new CreateTokenCommand({
         clientId: ssoToken.clientId,
@@ -213,7 +213,7 @@ const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ss
         });
     }
     const { accessToken } = token;
-    const { SSOClient, GetRoleCredentialsCommand } = await import('./loadSso-DF7GLUZf.mjs');
+    const { SSOClient, GetRoleCredentialsCommand } = await import('./loadSso-Ce3ChPPj.mjs');
     const sso = ssoClient ||
         new SSOClient(Object.assign({}, clientConfig ?? {}, {
             logger: clientConfig?.logger ?? callerClientConfig?.logger ?? parentClientConfig?.logger,

package/dist/chunks/{index-CsI5JuIM.mjs → index-DFNP_Nrx.mjs}

@@ -1,7 +1,7 @@
 import fs from 'node:fs/promises';
-import { e as CredentialsProviderError, n as HttpRequest, ax as parseRfc3339DateTime, y as NodeHttpHandler, aO as setCredentialFeature } from './index-BuxEK_Z4.mjs';
-import { s as sdkStreamMixin } from './sdk-stream-mixin-BL49AxZx.mjs';
-import './readMergedOptions-CraAnYdB.mjs';
+import { e as CredentialsProviderError, n as HttpRequest, ax as parseRfc3339DateTime, y as NodeHttpHandler, aO as setCredentialFeature } from './index-4kbkrHS9.mjs';
+import { s as sdkStreamMixin } from './sdk-stream-mixin-B_ajKWho.mjs';
+import './readMergedOptions-x80ltQO_.mjs';
 import 'zod';
 import '@commander-js/extra-typings';
 import './readDotenvCascade-Dgx4SC1p.mjs';

package/dist/chunks/{index-CjWZ4uNg.mjs → index-DO68RbZ8.mjs}

@@ -1,9 +1,9 @@
 import { exec } from 'node:child_process';
 import { promisify } from 'node:util';
-import { aO as setCredentialFeature, e as CredentialsProviderError, al as getProfileName } from './index-BuxEK_Z4.mjs';
-import { e as externalDataInterceptor } from './externalDataInterceptor-DyDNbv-D.mjs';
-import { p as parseKnownFiles } from './parseKnownFiles-BZNrX_JE.mjs';
-import './readMergedOptions-CraAnYdB.mjs';
+import { aO as setCredentialFeature, e as CredentialsProviderError, al as getProfileName } from './index-4kbkrHS9.mjs';
+import { e as externalDataInterceptor } from './externalDataInterceptor-Bbvq4sdd.mjs';
+import { p as parseKnownFiles } from './parseKnownFiles-BCL0L7aP.mjs';
+import './readMergedOptions-x80ltQO_.mjs';
 import 'zod';
 import '@commander-js/extra-typings';
 import './readDotenvCascade-Dgx4SC1p.mjs';
@@ -28,7 +28,7 @@ import 'node:crypto';
 import 'node:fs';
 import 'node:https';
 import 'node:process';
-import './getSSOTokenFromFile-CkYcEieD.mjs';
+import './getSSOTokenFromFile-ClTzvS3i.mjs';
 
 const getValidatedProcessCredentials = (profileName, data, profiles) => {
     if (data.Version !== 1) {

package/dist/chunks/{index-QkVZTs6l.mjs → index-Db08BBL5.mjs}

@@ -1,10 +1,10 @@
-import { e as CredentialsProviderError, W as chain, aO as setCredentialFeature, al as getProfileName, aB as readFile, n as HttpRequest } from './index-BuxEK_Z4.mjs';
+import { e as CredentialsProviderError, W as chain, aO as setCredentialFeature, al as getProfileName, aB as readFile, n as HttpRequest } from './index-4kbkrHS9.mjs';
 import { createHash, createPrivateKey, createPublicKey, sign } from 'node:crypto';
 import { promises } from 'node:fs';
 import { homedir } from 'node:os';
 import { dirname, join } from 'node:path';
-import { p as parseKnownFiles } from './parseKnownFiles-BZNrX_JE.mjs';
-import './readMergedOptions-CraAnYdB.mjs';
+import { p as parseKnownFiles } from './parseKnownFiles-BCL0L7aP.mjs';
+import './readMergedOptions-x80ltQO_.mjs';
 import 'zod';
 import '@commander-js/extra-typings';
 import './readDotenvCascade-Dgx4SC1p.mjs';
@@ -29,19 +29,19 @@ import 'node:process';
 const resolveCredentialSource = (credentialSource, profileName, logger) => {
     const sourceProvidersMap = {
         EcsContainer: async (options) => {
-            const { fromHttp } = await import('./index-CsI5JuIM.mjs');
-            const { fromContainerMetadata } = await import('./index-C58EanKv.mjs');
+            const { fromHttp } = await import('./index-DFNP_Nrx.mjs');
+            const { fromContainerMetadata } = await import('./index-Tm4WDj9R.mjs');
             logger?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer");
             return async () => chain(fromHttp(options ?? {}), fromContainerMetadata(options))().then(setNamedProvider);
         },
         Ec2InstanceMetadata: async (options) => {
             logger?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");
-            const { fromInstanceMetadata } = await import('./index-C58EanKv.mjs');
+            const { fromInstanceMetadata } = await import('./index-Tm4WDj9R.mjs');
             return async () => fromInstanceMetadata(options)().then(setNamedProvider);
         },
         Environment: async (options) => {
             logger?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");
-            const { fromEnv } = await import('./index-FT37CtcF.mjs');
+            const { fromEnv } = await import('./index-w8gK2SKP.mjs');
             return async () => fromEnv(options)().then(setNamedProvider);
         },
     };
@@ -83,7 +83,7 @@ const resolveAssumeRoleCredentials = async (profileName, profiles, options, call
     const profileData = profiles[profileName];
     const { source_profile, region } = profileData;
     if (!options.roleAssumer) {
-        const { getDefaultRoleAssumer } = await import('./index-D6iVe1wh.mjs');
+        const { getDefaultRoleAssumer } = await import('./index-fNrNPp4e.mjs');
         options.roleAssumer = getDefaultRoleAssumer({
             ...options.clientConfig,
             credentialProviderLogger: options.logger,
@@ -169,7 +169,7 @@ class LoginCredentialsFetcher {
         return this.profileData.login_session;
     }
     async refresh(token) {
-        const { SigninClient, CreateOAuth2TokenCommand } = await import('./index-B_yJRqty.mjs');
+        const { SigninClient, CreateOAuth2TokenCommand } = await import('./index-De2jIOhi.mjs');
         const { logger, userAgentAppId } = this.callerClientConfig ?? {};
         const isH2 = (requestHandler) => {
             return requestHandler?.metadata?.handlerProtocol === "h2";
@@ -418,13 +418,13 @@ const resolveLoginCredentials = async (profileName, options, callerClientConfig)
 };
 
 const isProcessProfile = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.credential_process === "string";
-const resolveProcessCredentials = async (options, profile) => import('./index-CjWZ4uNg.mjs').then(({ fromProcess }) => fromProcess({
+const resolveProcessCredentials = async (options, profile) => import('./index-DO68RbZ8.mjs').then(({ fromProcess }) => fromProcess({
     ...options,
     profile,
 })().then((creds) => setCredentialFeature(creds, "CREDENTIALS_PROFILE_PROCESS", "v")));
 
 const resolveSsoCredentials = async (profile, profileData, options = {}, callerClientConfig) => {
-    const { fromSSO } = await import('./index-B3fM_U6F.mjs');
+    const { fromSSO } = await import('./index-D7Lv-lxm.mjs');
     return fromSSO({
         profile,
         logger: options.logger,
@@ -471,7 +471,7 @@ const isWebIdentityProfile = (arg) => Boolean(arg) &&
     typeof arg.web_identity_token_file === "string" &&
     typeof arg.role_arn === "string" &&
     ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1;
-const resolveWebIdentityCredentials = async (profile, options, callerClientConfig) => import('./index-D-a5vkZL.mjs').then(({ fromTokenFile }) => fromTokenFile({
+const resolveWebIdentityCredentials = async (profile, options, callerClientConfig) => import('./index-Cl6wXPYD.mjs').then(({ fromTokenFile }) => fromTokenFile({
     webIdentityTokenFile: profile.web_identity_token_file,
     roleArn: profile.role_arn,
     roleSessionName: profile.role_session_name,

package/dist/chunks/{index-B_yJRqty.mjs → index-De2jIOhi.mjs}

@@ -1,8 +1,8 @@
-import { aE as resolveAwsSdkSigV4Config, au as normalizeProvider, ap as getSmithyContext, B as BinaryDecisionDiagram, l as EndpointCache, $ as decideEndpoint, Q as awsEndpointFunctions, Z as customEndpointFunctions, M as ServiceException, T as TypeRegistry, aT as toUtf8, a8 as fromUtf8, aA as parseUrl, x as NoOpLogger, b as AwsSdkSigV4Signer, w as NoAuthSigner, aR as toBase64, a6 as fromBase64, a1 as emitWarningIfUnsupportedVersion, aG as resolveDefaultsModeConfig, a2 as emitWarningIfUnsupportedVersion$1, aQ as streamCollector, V as calculateBodyLength, ar as loadConfig, N as NODE_APP_ID_CONFIG_OPTIONS, v as NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, u as NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, H as Hash, s as NODE_RETRY_MODE_CONFIG_OPTIONS, D as DEFAULT_RETRY_MODE, y as NodeHttpHandler, q as NODE_REGION_CONFIG_FILE_OPTIONS, r as NODE_REGION_CONFIG_OPTIONS, p as NODE_MAX_ATTEMPT_CONFIG_OPTIONS, Y as createDefaultUserAgentProvider, o as NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, as as loadConfigsForDefaultMode, aa as getAwsRegionExtensionConfiguration, ad as getDefaultExtensionConfiguration, ai as getHttpHandlerExtensionConfiguration, aC as resolveAwsRegionExtensionConfiguration, aF as resolveDefaultRuntimeConfig, aJ as resolveHttpHandlerRuntimeConfig, c as Client, aN as resolveUserAgentConfig, aM as resolveRetryConfig, aL as resolveRegionConfig, aH as resolveEndpointConfig, ao as getSchemaSerdePlugin, aq as getUserAgentPlugin, an as getRetryPlugin, ac as getContentLengthPlugin, ag as getHostHeaderPlugin, ak as getLoggerPlugin, am as getRecursionDetectionPlugin, ah as getHttpAuthSchemeEndpointRuleSetPlugin, f as DefaultIdentityProviderConfig, aj as getHttpSigningPlugin, aI as resolveHostHeaderConfig, d as Command, ae as getEndpointPlugin } from './index-BuxEK_Z4.mjs';
+import { aE as resolveAwsSdkSigV4Config, au as normalizeProvider, ap as getSmithyContext, B as BinaryDecisionDiagram, l as EndpointCache, $ as decideEndpoint, Q as awsEndpointFunctions, Z as customEndpointFunctions, M as ServiceException, T as TypeRegistry, aT as toUtf8, a8 as fromUtf8, aA as parseUrl, x as NoOpLogger, b as AwsSdkSigV4Signer, w as NoAuthSigner, aR as toBase64, a6 as fromBase64, a1 as emitWarningIfUnsupportedVersion, aG as resolveDefaultsModeConfig, a2 as emitWarningIfUnsupportedVersion$1, aQ as streamCollector, V as calculateBodyLength, ar as loadConfig, N as NODE_APP_ID_CONFIG_OPTIONS, v as NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, u as NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, H as Hash, s as NODE_RETRY_MODE_CONFIG_OPTIONS, D as DEFAULT_RETRY_MODE, y as NodeHttpHandler, q as NODE_REGION_CONFIG_FILE_OPTIONS, r as NODE_REGION_CONFIG_OPTIONS, p as NODE_MAX_ATTEMPT_CONFIG_OPTIONS, Y as createDefaultUserAgentProvider, o as NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, as as loadConfigsForDefaultMode, aa as getAwsRegionExtensionConfiguration, ad as getDefaultExtensionConfiguration, ai as getHttpHandlerExtensionConfiguration, aC as resolveAwsRegionExtensionConfiguration, aF as resolveDefaultRuntimeConfig, aJ as resolveHttpHandlerRuntimeConfig, c as Client, aN as resolveUserAgentConfig, aM as resolveRetryConfig, aL as resolveRegionConfig, aH as resolveEndpointConfig, ao as getSchemaSerdePlugin, aq as getUserAgentPlugin, an as getRetryPlugin, ac as getContentLengthPlugin, ag as getHostHeaderPlugin, ak as getLoggerPlugin, am as getRecursionDetectionPlugin, ah as getHttpAuthSchemeEndpointRuleSetPlugin, f as DefaultIdentityProviderConfig, aj as getHttpSigningPlugin, aI as resolveHostHeaderConfig, d as Command, ae as getEndpointPlugin } from './index-4kbkrHS9.mjs';
 import { p as packageInfo } from './package-DbbYaehr.mjs';
 import 'node:crypto';
-import { A as AwsRestJsonProtocol } from './AwsRestJsonProtocol-4m7HHwvS.mjs';
-import './readMergedOptions-CraAnYdB.mjs';
+import { A as AwsRestJsonProtocol } from './AwsRestJsonProtocol-BWWvLZiw.mjs';
+import './readMergedOptions-x80ltQO_.mjs';
 import 'zod';
 import '@commander-js/extra-typings';
 import './readDotenvCascade-Dgx4SC1p.mjs';
@@ -26,7 +26,7 @@ import 'node:stream';
 import 'node:fs';
 import 'node:https';
 import 'node:process';
-import './sdk-stream-mixin-BL49AxZx.mjs';
+import './sdk-stream-mixin-B_ajKWho.mjs';
 
 const defaultSigninHttpAuthSchemeParametersProvider = async (config, context, input) => {
     return {

package/dist/chunks/{index-Dl8qC51H.mjs → index-IOQ1o3w3.mjs}

@@ -1,6 +1,6 @@
 import 'node:crypto';
-import { aT as toUtf8, a8 as fromUtf8 } from './index-BuxEK_Z4.mjs';
-import './readMergedOptions-CraAnYdB.mjs';
+import { aT as toUtf8, a8 as fromUtf8 } from './index-4kbkrHS9.mjs';
+import './readMergedOptions-x80ltQO_.mjs';
 import 'zod';
 import '@commander-js/extra-typings';
 import './readDotenvCascade-Dgx4SC1p.mjs';

package/dist/chunks/{index-C58EanKv.mjs → index-Tm4WDj9R.mjs}

@@ -1,7 +1,7 @@
 import { parse } from 'node:url';
 import { request } from 'node:http';
-import { J as ProviderError, e as CredentialsProviderError, aA as parseUrl, ar as loadConfig } from './index-BuxEK_Z4.mjs';
-import './readMergedOptions-CraAnYdB.mjs';
+import { J as ProviderError, e as CredentialsProviderError, aA as parseUrl, ar as loadConfig } from './index-4kbkrHS9.mjs';
+import './readMergedOptions-x80ltQO_.mjs';
 import 'zod';
 import '@commander-js/extra-typings';
 import './readDotenvCascade-Dgx4SC1p.mjs';

package/dist/chunks/{index-D6iVe1wh.mjs → index-fNrNPp4e.mjs}

@@ -1,7 +1,7 @@
-import { ar as loadConfig, q as NODE_REGION_CONFIG_FILE_OPTIONS, r as NODE_REGION_CONFIG_OPTIONS, B as BinaryDecisionDiagram, l as EndpointCache, $ as decideEndpoint, Q as awsEndpointFunctions, Z as customEndpointFunctions, aE as resolveAwsSdkSigV4Config, aD as resolveAwsSdkSigV4AConfig, au as normalizeProvider, ap as getSmithyContext, aK as resolveParams, O as SignatureV4MultiRegion, M as ServiceException, T as TypeRegistry, aT as toUtf8, a8 as fromUtf8, aA as parseUrl, A as AwsQueryProtocol, x as NoOpLogger, b as AwsSdkSigV4Signer, a as AwsSdkSigV4ASigner, w as NoAuthSigner, aR as toBase64, a6 as fromBase64, a1 as emitWarningIfUnsupportedVersion, aG as resolveDefaultsModeConfig, a2 as emitWarningIfUnsupportedVersion$1, aQ as streamCollector, V as calculateBodyLength, N as NODE_APP_ID_CONFIG_OPTIONS, v as NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, u as NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, t as NODE_SIGV4A_CONFIG_OPTIONS, H as Hash, s as NODE_RETRY_MODE_CONFIG_OPTIONS, D as DEFAULT_RETRY_MODE, y as NodeHttpHandler, p as NODE_MAX_ATTEMPT_CONFIG_OPTIONS, Y as createDefaultUserAgentProvider, o as NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, as as loadConfigsForDefaultMode, aa as getAwsRegionExtensionConfiguration, ad as getDefaultExtensionConfiguration, ai as getHttpHandlerExtensionConfiguration, aC as resolveAwsRegionExtensionConfiguration, aF as resolveDefaultRuntimeConfig, aJ as resolveHttpHandlerRuntimeConfig, c as Client, aN as resolveUserAgentConfig, aM as resolveRetryConfig, aL as resolveRegionConfig, aH as resolveEndpointConfig, ao as getSchemaSerdePlugin, aq as getUserAgentPlugin, an as getRetryPlugin, ac as getContentLengthPlugin, ag as getHostHeaderPlugin, ak as getLoggerPlugin, am as getRecursionDetectionPlugin, ah as getHttpAuthSchemeEndpointRuleSetPlugin, f as DefaultIdentityProviderConfig, aj as getHttpSigningPlugin, aI as resolveHostHeaderConfig, d as Command, ae as getEndpointPlugin, aO as setCredentialFeature } from './index-BuxEK_Z4.mjs';
+import { ar as loadConfig, q as NODE_REGION_CONFIG_FILE_OPTIONS, r as NODE_REGION_CONFIG_OPTIONS, B as BinaryDecisionDiagram, l as EndpointCache, $ as decideEndpoint, Q as awsEndpointFunctions, Z as customEndpointFunctions, aE as resolveAwsSdkSigV4Config, aD as resolveAwsSdkSigV4AConfig, au as normalizeProvider, ap as getSmithyContext, aK as resolveParams, O as SignatureV4MultiRegion, M as ServiceException, T as TypeRegistry, aT as toUtf8, a8 as fromUtf8, aA as parseUrl, A as AwsQueryProtocol, x as NoOpLogger, b as AwsSdkSigV4Signer, a as AwsSdkSigV4ASigner, w as NoAuthSigner, aR as toBase64, a6 as fromBase64, a1 as emitWarningIfUnsupportedVersion, aG as resolveDefaultsModeConfig, a2 as emitWarningIfUnsupportedVersion$1, aQ as streamCollector, V as calculateBodyLength, N as NODE_APP_ID_CONFIG_OPTIONS, v as NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, u as NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, t as NODE_SIGV4A_CONFIG_OPTIONS, H as Hash, s as NODE_RETRY_MODE_CONFIG_OPTIONS, D as DEFAULT_RETRY_MODE, y as NodeHttpHandler, p as NODE_MAX_ATTEMPT_CONFIG_OPTIONS, Y as createDefaultUserAgentProvider, o as NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, as as loadConfigsForDefaultMode, aa as getAwsRegionExtensionConfiguration, ad as getDefaultExtensionConfiguration, ai as getHttpHandlerExtensionConfiguration, aC as resolveAwsRegionExtensionConfiguration, aF as resolveDefaultRuntimeConfig, aJ as resolveHttpHandlerRuntimeConfig, c as Client, aN as resolveUserAgentConfig, aM as resolveRetryConfig, aL as resolveRegionConfig, aH as resolveEndpointConfig, ao as getSchemaSerdePlugin, aq as getUserAgentPlugin, an as getRetryPlugin, ac as getContentLengthPlugin, ag as getHostHeaderPlugin, ak as getLoggerPlugin, am as getRecursionDetectionPlugin, ah as getHttpAuthSchemeEndpointRuleSetPlugin, f as DefaultIdentityProviderConfig, aj as getHttpSigningPlugin, aI as resolveHostHeaderConfig, d as Command, ae as getEndpointPlugin, aO as setCredentialFeature } from './index-4kbkrHS9.mjs';
 import { p as packageInfo } from './package-DbbYaehr.mjs';
 import 'node:crypto';
-import './readMergedOptions-CraAnYdB.mjs';
+import './readMergedOptions-x80ltQO_.mjs';
 import 'zod';
 import '@commander-js/extra-typings';
 import './readDotenvCascade-Dgx4SC1p.mjs';

package/dist/chunks/{index-FT37CtcF.mjs → index-w8gK2SKP.mjs}

@@ -1,6 +1,6 @@
-import { a7 as fromEnv } from './index-BuxEK_Z4.mjs';
-export { E as ENV_ACCOUNT_ID, g as ENV_CREDENTIAL_SCOPE, h as ENV_EXPIRATION, i as ENV_KEY, j as ENV_SECRET, k as ENV_SESSION } from './index-BuxEK_Z4.mjs';
-import './readMergedOptions-CraAnYdB.mjs';
+import { a7 as fromEnv } from './index-4kbkrHS9.mjs';
+export { E as ENV_ACCOUNT_ID, g as ENV_CREDENTIAL_SCOPE, h as ENV_EXPIRATION, i as ENV_KEY, j as ENV_SECRET, k as ENV_SESSION } from './index-4kbkrHS9.mjs';
+import './readMergedOptions-x80ltQO_.mjs';
 import 'zod';
 import '@commander-js/extra-typings';
 import './readDotenvCascade-Dgx4SC1p.mjs';

package/dist/chunks/{loadSso-DF7GLUZf.mjs → loadSso-Ce3ChPPj.mjs}

@@ -1,8 +1,8 @@
-import { aE as resolveAwsSdkSigV4Config, au as normalizeProvider, ap as getSmithyContext, B as BinaryDecisionDiagram, l as EndpointCache, $ as decideEndpoint, Q as awsEndpointFunctions, Z as customEndpointFunctions, M as ServiceException, T as TypeRegistry, aT as toUtf8, a8 as fromUtf8, aA as parseUrl, x as NoOpLogger, b as AwsSdkSigV4Signer, w as NoAuthSigner, aR as toBase64, a6 as fromBase64, a1 as emitWarningIfUnsupportedVersion, aG as resolveDefaultsModeConfig, a2 as emitWarningIfUnsupportedVersion$1, aQ as streamCollector, V as calculateBodyLength, ar as loadConfig, N as NODE_APP_ID_CONFIG_OPTIONS, v as NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, u as NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, H as Hash, s as NODE_RETRY_MODE_CONFIG_OPTIONS, D as DEFAULT_RETRY_MODE, y as NodeHttpHandler, q as NODE_REGION_CONFIG_FILE_OPTIONS, r as NODE_REGION_CONFIG_OPTIONS, p as NODE_MAX_ATTEMPT_CONFIG_OPTIONS, Y as createDefaultUserAgentProvider, o as NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, as as loadConfigsForDefaultMode, aa as getAwsRegionExtensionConfiguration, ad as getDefaultExtensionConfiguration, ai as getHttpHandlerExtensionConfiguration, aC as resolveAwsRegionExtensionConfiguration, aF as resolveDefaultRuntimeConfig, aJ as resolveHttpHandlerRuntimeConfig, c as Client, aN as resolveUserAgentConfig, aM as resolveRetryConfig, aL as resolveRegionConfig, aH as resolveEndpointConfig, ao as getSchemaSerdePlugin, aq as getUserAgentPlugin, an as getRetryPlugin, ac as getContentLengthPlugin, ag as getHostHeaderPlugin, ak as getLoggerPlugin, am as getRecursionDetectionPlugin, ah as getHttpAuthSchemeEndpointRuleSetPlugin, f as DefaultIdentityProviderConfig, aj as getHttpSigningPlugin, aI as resolveHostHeaderConfig, d as Command, ae as getEndpointPlugin } from './index-BuxEK_Z4.mjs';
+import { aE as resolveAwsSdkSigV4Config, au as normalizeProvider, ap as getSmithyContext, B as BinaryDecisionDiagram, l as EndpointCache, $ as decideEndpoint, Q as awsEndpointFunctions, Z as customEndpointFunctions, M as ServiceException, T as TypeRegistry, aT as toUtf8, a8 as fromUtf8, aA as parseUrl, x as NoOpLogger, b as AwsSdkSigV4Signer, w as NoAuthSigner, aR as toBase64, a6 as fromBase64, a1 as emitWarningIfUnsupportedVersion, aG as resolveDefaultsModeConfig, a2 as emitWarningIfUnsupportedVersion$1, aQ as streamCollector, V as calculateBodyLength, ar as loadConfig, N as NODE_APP_ID_CONFIG_OPTIONS, v as NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, u as NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, H as Hash, s as NODE_RETRY_MODE_CONFIG_OPTIONS, D as DEFAULT_RETRY_MODE, y as NodeHttpHandler, q as NODE_REGION_CONFIG_FILE_OPTIONS, r as NODE_REGION_CONFIG_OPTIONS, p as NODE_MAX_ATTEMPT_CONFIG_OPTIONS, Y as createDefaultUserAgentProvider, o as NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, as as loadConfigsForDefaultMode, aa as getAwsRegionExtensionConfiguration, ad as getDefaultExtensionConfiguration, ai as getHttpHandlerExtensionConfiguration, aC as resolveAwsRegionExtensionConfiguration, aF as resolveDefaultRuntimeConfig, aJ as resolveHttpHandlerRuntimeConfig, c as Client, aN as resolveUserAgentConfig, aM as resolveRetryConfig, aL as resolveRegionConfig, aH as resolveEndpointConfig, ao as getSchemaSerdePlugin, aq as getUserAgentPlugin, an as getRetryPlugin, ac as getContentLengthPlugin, ag as getHostHeaderPlugin, ak as getLoggerPlugin, am as getRecursionDetectionPlugin, ah as getHttpAuthSchemeEndpointRuleSetPlugin, f as DefaultIdentityProviderConfig, aj as getHttpSigningPlugin, aI as resolveHostHeaderConfig, d as Command, ae as getEndpointPlugin } from './index-4kbkrHS9.mjs';
 import { p as packageInfo } from './package-DbbYaehr.mjs';
 import 'node:crypto';
-import { A as AwsRestJsonProtocol } from './AwsRestJsonProtocol-4m7HHwvS.mjs';
-import './readMergedOptions-CraAnYdB.mjs';
+import { A as AwsRestJsonProtocol } from './AwsRestJsonProtocol-BWWvLZiw.mjs';
+import './readMergedOptions-x80ltQO_.mjs';
 import 'zod';
 import '@commander-js/extra-typings';
 import './readDotenvCascade-Dgx4SC1p.mjs';
@@ -26,7 +26,7 @@ import 'node:stream';
 import 'node:fs';
 import 'node:https';
 import 'node:process';
-import './sdk-stream-mixin-BL49AxZx.mjs';
+import './sdk-stream-mixin-B_ajKWho.mjs';
 
 const defaultSSOHttpAuthSchemeParametersProvider = async (config, context, input) => {
     return {

package/dist/chunks/{parseKnownFiles-BZNrX_JE.mjs → parseKnownFiles-BCL0L7aP.mjs}

@@ -1,4 +1,4 @@
-import { at as loadSharedConfigFiles } from './index-BuxEK_Z4.mjs';
+import { at as loadSharedConfigFiles } from './index-4kbkrHS9.mjs';
 
 const mergeConfigFiles = (...files) => {
     const merged = {};

package/dist/chunks/{readMergedOptions-CraAnYdB.mjs → readMergedOptions-x80ltQO_.mjs}

@@ -1078,12 +1078,14 @@ function initializeInstance(cli, headerGetter) {
     cli.hook('preSubcommand', async () => {
         if (cli.hasCtx())
             return;
-        await cli.resolveAndLoad({ loadProcess: false });
+        await cli.resolveAndLoad({ loadProcess: false }, { runAfterResolve: false });
     });
 }
 
 /**
  * Determine the effective namespace for a child plugin (override \> default).
+ * Uses a structural parameter so any entry with `.override?.ns` and `.plugin.ns`
+ * is accepted regardless of full generic variance.
  */
 const effectiveNs = (child) => {
     const o = child.override;
@@ -1258,10 +1260,14 @@ class GetDotenvCli extends Command {
      * Resolve options (strict) and compute dotenv context.
      * Stores the context on the instance under a symbol.
      *
-     * Options:
-     * - opts.runAfterResolve (default true): when false, skips running plugin
-     *   afterResolve hooks. Useful for top-level help rendering to avoid
-     *   long-running side-effects while still evaluating dynamic help text.
+     * @param customOptions - Partial options to overlay for this invocation.
+     * @param opts - Optional resolver behavior switches.
+     *   - `runAfterResolve` (default `true`): when false, skips running plugin
+     *     afterResolve hooks. Useful for top-level help rendering to avoid
+     *     long-running side-effects while still evaluating dynamic help text.
+     *   - `invokedSubcommand`: when provided, only the plugin subtree whose
+     *     namespace matches this name runs afterResolve hooks. When omitted,
+     *     all plugins run afterResolve (backward compatibility).
      */
     async resolveAndLoad(customOptions = {}, opts) {
         const ctx = await resolveAndComputeContext(customOptions, 
@@ -1272,7 +1278,7 @@ class GetDotenvCli extends Command {
         // Ensure plugins are installed exactly once, then run afterResolve.
         await this.install();
         if (opts?.runAfterResolve ?? true) {
-            await this._runAfterResolve(ctx);
+            await this._runAfterResolve(ctx, opts?.invokedSubcommand);
         }
         return ctx;
     }
@@ -1431,10 +1437,17 @@ class GetDotenvCli extends Command {
         }
     }
     /**
-     * Run afterResolve hooks for all plugins (parent → children).
+     * Run afterResolve hooks for registered plugins (parent → children).
+     * When {@link invokedSubcommand} is provided, only the matching plugin
+     * subtree runs; otherwise all plugins run (backward compatibility).
      */
-    async _runAfterResolve(ctx) {
-        await runAfterResolveTree(this, this._plugins.map((e) => e.plugin), ctx);
+    async _runAfterResolve(ctx, invokedSubcommand) {
+        const plugins = invokedSubcommand
+            ? this._plugins
+                .filter((e) => effectiveNs(e) === invokedSubcommand)
+                .map((e) => e.plugin)
+            : this._plugins.map((e) => e.plugin);
+        await runAfterResolveTree(this, plugins, ctx);
     }
 }
 

package/dist/chunks/{resolveCliOptions-BMBkWDYJ.mjs → resolveCliOptions-CR-BEUmS.mjs}

@@ -1,4 +1,4 @@
-import { c as baseRootOptionDefaults, d as defaultsDeep } from './readMergedOptions-CraAnYdB.mjs';
+import { c as baseRootOptionDefaults, d as defaultsDeep } from './readMergedOptions-x80ltQO_.mjs';
 import 'radash';
 import 'node:buffer';
 import 'fs-extra';

package/dist/chunks/{sdk-stream-mixin-BL49AxZx.mjs → sdk-stream-mixin-B_ajKWho.mjs}

@@ -1,5 +1,5 @@
 import { Writable, Readable } from 'node:stream';
-import { aS as toHex, a5 as fromArrayBuffer } from './index-BuxEK_Z4.mjs';
+import { aS as toHex, a5 as fromArrayBuffer } from './index-4kbkrHS9.mjs';
 
 const isReadableStream = (stream) => typeof ReadableStream === "function" &&
     (stream?.constructor?.name === ReadableStream.name || stream instanceof ReadableStream);

package/dist/chunks/{types-BthqmnDr.mjs → types-poB1VAs_.mjs}

@@ -1,4 +1,4 @@
-import { g as definePlugin } from './readMergedOptions-CraAnYdB.mjs';
+import { g as definePlugin } from './readMergedOptions-x80ltQO_.mjs';
 
 /**
  * Create a namespace-only parent plugin (a group command) for composing plugins

package/dist/cli.d.ts

@@ -464,6 +464,12 @@ interface ResolveAndLoadOptions {
      * @default true
      */
     runAfterResolve?: boolean;
+    /**
+     * Name of the invoked subcommand (plugin namespace). When provided,
+     * only the matching plugin subtree runs afterResolve hooks.
+     * When omitted, all plugins run afterResolve (backward compatibility).
+     */
+    invokedSubcommand?: string;
 }
 /**
  * Structural public interface for the host exposed to plugins.
@@ -557,6 +563,11 @@ interface GetDotenvCliPlugin<TOptions extends GetDotenvOptions = GetDotenvOption
      * After the dotenv context is resolved, initialize any clients/secrets
      * or attach per-plugin state under ctx.plugins (by convention).
      * Runs parent → children (pre-order).
+     *
+     * **Scoping**: When the host provides an invoked subcommand filter,
+     * afterResolve only fires for plugins whose namespace matches the
+     * invoked command path. A plugin's afterResolve should never produce
+     * side effects for commands outside its subtree.
      */
     afterResolve?: (cli: GetDotenvCliPublic<TOptions, TArgs, TOpts, TGlobal>, ctx: GetDotenvCliCtx<TOptions>) => void | Promise<void>;
     /** Zod schema for this plugin's config slice (from config.plugins[…]). */
@@ -622,10 +633,14 @@ declare class GetDotenvCli<TOptions extends GetDotenvOptions = GetDotenvOptions,
      * Resolve options (strict) and compute dotenv context.
      * Stores the context on the instance under a symbol.
      *
-     * Options:
-     * - opts.runAfterResolve (default true): when false, skips running plugin
-     *   afterResolve hooks. Useful for top-level help rendering to avoid
-     *   long-running side-effects while still evaluating dynamic help text.
+     * @param customOptions - Partial options to overlay for this invocation.
+     * @param opts - Optional resolver behavior switches.
+     *   - `runAfterResolve` (default `true`): when false, skips running plugin
+     *     afterResolve hooks. Useful for top-level help rendering to avoid
+     *     long-running side-effects while still evaluating dynamic help text.
+     *   - `invokedSubcommand`: when provided, only the plugin subtree whose
+     *     namespace matches this name runs afterResolve hooks. When omitted,
+     *     all plugins run afterResolve (backward compatibility).
      */
     resolveAndLoad(customOptions?: Partial<TOptions>, opts?: ResolveAndLoadOptions): Promise<GetDotenvCliCtx<TOptions>>;
     /**
@@ -697,7 +712,9 @@ declare class GetDotenvCli<TOptions extends GetDotenvOptions = GetDotenvOptions,
      */
     install(): Promise<void>;
     /**
-     * Run afterResolve hooks for all plugins (parent → children).
+     * Run afterResolve hooks for registered plugins (parent → children).
+     * When {@link invokedSubcommand} is provided, only the matching plugin
+     * subtree runs; otherwise all plugins run (backward compatibility).
      */
     private _runAfterResolve;
 }

package/dist/cli.mjs

@@ -1,4 +1,4 @@
-export { c as createCli } from './chunks/createCli-BkHLeYXL.mjs';
+export { c as createCli } from './chunks/createCli-DRgcaM2D.mjs';
 import 'zod';
 import 'path';
 import './chunks/loader-V1vbmtyw.mjs';
@@ -13,16 +13,16 @@ import './chunks/loadModuleDefault-Dj8B3Stt.mjs';
 import 'crypto';
 import '@commander-js/extra-typings';
 import 'nanoid';
-import './chunks/readMergedOptions-CraAnYdB.mjs';
+import './chunks/readMergedOptions-x80ltQO_.mjs';
 import './chunks/readDotenvCascade-Dgx4SC1p.mjs';
 import 'dotenv';
 import 'execa';
 import './chunks/helpConfig-CGejgwWW.mjs';
-import './chunks/resolveCliOptions-BMBkWDYJ.mjs';
+import './chunks/resolveCliOptions-CR-BEUmS.mjs';
 import './chunks/validate-CDl0rE6k.mjs';
 import './plugins-aws.mjs';
 import './chunks/spawnEnv-CKgnHGpr.mjs';
-import './chunks/index-BuxEK_Z4.mjs';
+import './chunks/index-4kbkrHS9.mjs';
 import 'node:os';
 import 'node:fs/promises';
 import 'node:stream';
@@ -33,7 +33,7 @@ import 'node:process';
 import './plugins-batch.mjs';
 import './chunks/invoke-DuRPU1oC.mjs';
 import 'globby';
-import './chunks/index-Dd6S1nZ-.mjs';
+import './chunks/index-BzoCat8h.mjs';
 import './plugins-init.mjs';
 import 'readline/promises';
 import 'node:url';

package/dist/cliHost.d.ts

@@ -480,6 +480,12 @@ interface ResolveAndLoadOptions {
      * @default true
      */
     runAfterResolve?: boolean;
+    /**
+     * Name of the invoked subcommand (plugin namespace). When provided,
+     * only the matching plugin subtree runs afterResolve hooks.
+     * When omitted, all plugins run afterResolve (backward compatibility).
+     */
+    invokedSubcommand?: string;
 }
 /**
  * Structural public interface for the host exposed to plugins.
@@ -573,6 +579,11 @@ interface GetDotenvCliPlugin<TOptions extends GetDotenvOptions = GetDotenvOption
      * After the dotenv context is resolved, initialize any clients/secrets
      * or attach per-plugin state under ctx.plugins (by convention).
      * Runs parent → children (pre-order).
+     *
+     * **Scoping**: When the host provides an invoked subcommand filter,
+     * afterResolve only fires for plugins whose namespace matches the
+     * invoked command path. A plugin's afterResolve should never produce
+     * side effects for commands outside its subtree.
      */
     afterResolve?: (cli: GetDotenvCliPublic<TOptions, TArgs, TOpts, TGlobal>, ctx: GetDotenvCliCtx<TOptions>) => void | Promise<void>;
     /** Zod schema for this plugin's config slice (from config.plugins[…]). */
@@ -812,10 +823,14 @@ declare class GetDotenvCli<TOptions extends GetDotenvOptions = GetDotenvOptions,
      * Resolve options (strict) and compute dotenv context.
      * Stores the context on the instance under a symbol.
      *
-     * Options:
-     * - opts.runAfterResolve (default true): when false, skips running plugin
-     *   afterResolve hooks. Useful for top-level help rendering to avoid
-     *   long-running side-effects while still evaluating dynamic help text.
+     * @param customOptions - Partial options to overlay for this invocation.
+     * @param opts - Optional resolver behavior switches.
+     *   - `runAfterResolve` (default `true`): when false, skips running plugin
+     *     afterResolve hooks. Useful for top-level help rendering to avoid
+     *     long-running side-effects while still evaluating dynamic help text.
+     *   - `invokedSubcommand`: when provided, only the plugin subtree whose
+     *     namespace matches this name runs afterResolve hooks. When omitted,
+     *     all plugins run afterResolve (backward compatibility).
      */
     resolveAndLoad(customOptions?: Partial<TOptions>, opts?: ResolveAndLoadOptions): Promise<GetDotenvCliCtx<TOptions>>;
     /**
@@ -887,7 +902,9 @@ declare class GetDotenvCli<TOptions extends GetDotenvOptions = GetDotenvOptions,
      */
     install(): Promise<void>;
     /**
-     * Run afterResolve hooks for all plugins (parent → children).
+     * Run afterResolve hooks for registered plugins (parent → children).
+     * When {@link invokedSubcommand} is provided, only the matching plugin
+     * subtree runs; otherwise all plugins run (backward compatibility).
      */
     private _runAfterResolve;
 }

package/dist/cliHost.mjs

@@ -1,7 +1,7 @@
-export { G as GetDotenvCli, g as definePlugin, r as readMergedOptions } from './chunks/readMergedOptions-CraAnYdB.mjs';
+export { G as GetDotenvCli, g as definePlugin, r as readMergedOptions } from './chunks/readMergedOptions-x80ltQO_.mjs';
 export { b as buildSpawnEnv, r as resolveCommand, a as resolveShell, c as runCommand, d as runCommandResult, s as shouldCapture } from './chunks/spawnEnv-CKgnHGpr.mjs';
-export { b as baseGetDotenvCliOptions, r as resolveCliOptions } from './chunks/resolveCliOptions-BMBkWDYJ.mjs';
-export { d as defineScripts, g as groupPlugins } from './chunks/types-BthqmnDr.mjs';
+export { b as baseGetDotenvCliOptions, r as resolveCliOptions } from './chunks/resolveCliOptions-CR-BEUmS.mjs';
+export { d as defineScripts, g as groupPlugins } from './chunks/types-poB1VAs_.mjs';
 export { t as toHelpConfig } from './chunks/helpConfig-CGejgwWW.mjs';
 export { c as composeNestedEnv, m as maybePreserveNodeEvalArgv, s as stripOne } from './chunks/invoke-DuRPU1oC.mjs';
 export { z } from 'zod';

package/dist/getdotenv.cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { c as createCli } from './chunks/createCli-BkHLeYXL.mjs';
+import { c as createCli } from './chunks/createCli-DRgcaM2D.mjs';
 import 'zod';
 import 'path';
 import './chunks/loader-V1vbmtyw.mjs';
@@ -14,16 +14,16 @@ import './chunks/loadModuleDefault-Dj8B3Stt.mjs';
 import 'crypto';
 import '@commander-js/extra-typings';
 import 'nanoid';
-import './chunks/readMergedOptions-CraAnYdB.mjs';
+import './chunks/readMergedOptions-x80ltQO_.mjs';
 import './chunks/readDotenvCascade-Dgx4SC1p.mjs';
 import 'dotenv';
 import 'execa';
 import './chunks/helpConfig-CGejgwWW.mjs';
-import './chunks/resolveCliOptions-BMBkWDYJ.mjs';
+import './chunks/resolveCliOptions-CR-BEUmS.mjs';
 import './chunks/validate-CDl0rE6k.mjs';
 import './plugins-aws.mjs';
 import './chunks/spawnEnv-CKgnHGpr.mjs';
-import './chunks/index-BuxEK_Z4.mjs';
+import './chunks/index-4kbkrHS9.mjs';
 import 'node:os';
 import 'node:fs/promises';
 import 'node:stream';
@@ -34,7 +34,7 @@ import 'node:process';
 import './plugins-batch.mjs';
 import './chunks/invoke-DuRPU1oC.mjs';
 import 'globby';
-import './chunks/index-Dd6S1nZ-.mjs';
+import './chunks/index-BzoCat8h.mjs';
 import './plugins-init.mjs';
 import 'readline/promises';
 import 'node:url';

package/dist/index.d.ts

@@ -632,6 +632,12 @@ interface ResolveAndLoadOptions {
      * @default true
      */
     runAfterResolve?: boolean;
+    /**
+     * Name of the invoked subcommand (plugin namespace). When provided,
+     * only the matching plugin subtree runs afterResolve hooks.
+     * When omitted, all plugins run afterResolve (backward compatibility).
+     */
+    invokedSubcommand?: string;
 }
 /**
  * Structural public interface for the host exposed to plugins.
@@ -725,6 +731,11 @@ interface GetDotenvCliPlugin<TOptions extends GetDotenvOptions = GetDotenvOption
      * After the dotenv context is resolved, initialize any clients/secrets
      * or attach per-plugin state under ctx.plugins (by convention).
      * Runs parent → children (pre-order).
+     *
+     * **Scoping**: When the host provides an invoked subcommand filter,
+     * afterResolve only fires for plugins whose namespace matches the
+     * invoked command path. A plugin's afterResolve should never produce
+     * side effects for commands outside its subtree.
      */
     afterResolve?: (cli: GetDotenvCliPublic<TOptions, TArgs, TOpts, TGlobal>, ctx: GetDotenvCliCtx<TOptions>) => void | Promise<void>;
     /** Zod schema for this plugin's config slice (from config.plugins[…]). */
@@ -861,10 +872,14 @@ declare class GetDotenvCli<TOptions extends GetDotenvOptions = GetDotenvOptions,
      * Resolve options (strict) and compute dotenv context.
      * Stores the context on the instance under a symbol.
      *
-     * Options:
-     * - opts.runAfterResolve (default true): when false, skips running plugin
-     *   afterResolve hooks. Useful for top-level help rendering to avoid
-     *   long-running side-effects while still evaluating dynamic help text.
+     * @param customOptions - Partial options to overlay for this invocation.
+     * @param opts - Optional resolver behavior switches.
+     *   - `runAfterResolve` (default `true`): when false, skips running plugin
+     *     afterResolve hooks. Useful for top-level help rendering to avoid
+     *     long-running side-effects while still evaluating dynamic help text.
+     *   - `invokedSubcommand`: when provided, only the plugin subtree whose
+     *     namespace matches this name runs afterResolve hooks. When omitted,
+     *     all plugins run afterResolve (backward compatibility).
      */
     resolveAndLoad(customOptions?: Partial<TOptions>, opts?: ResolveAndLoadOptions): Promise<GetDotenvCliCtx<TOptions>>;
     /**
@@ -936,7 +951,9 @@ declare class GetDotenvCli<TOptions extends GetDotenvOptions = GetDotenvOptions,
      */
     install(): Promise<void>;
     /**
-     * Run afterResolve hooks for all plugins (parent → children).
+     * Run afterResolve hooks for registered plugins (parent → children).
+     * When {@link invokedSubcommand} is provided, only the matching plugin
+     * subtree runs; otherwise all plugins run (backward compatibility).
      */
     private _runAfterResolve;
 }

package/dist/index.mjs

@@ -1,8 +1,8 @@
-export { c as createCli } from './chunks/createCli-BkHLeYXL.mjs';
-import { j as resolveGetDotenvOptions, w as writeDotenvFile } from './chunks/readMergedOptions-CraAnYdB.mjs';
-export { G as GetDotenvCli, a as assertLogger, c as baseRootOptionDefaults, d as defaultsDeep, e as defineDynamic, f as defineGetDotenvConfig, g as definePlugin, h as getDotenvCliOptions2Options, i as interpolateDeep, r as readMergedOptions } from './chunks/readMergedOptions-CraAnYdB.mjs';
+export { c as createCli } from './chunks/createCli-DRgcaM2D.mjs';
+import { j as resolveGetDotenvOptions, w as writeDotenvFile } from './chunks/readMergedOptions-x80ltQO_.mjs';
+export { G as GetDotenvCli, a as assertLogger, c as baseRootOptionDefaults, d as defaultsDeep, e as defineDynamic, f as defineGetDotenvConfig, g as definePlugin, h as getDotenvCliOptions2Options, i as interpolateDeep, r as readMergedOptions } from './chunks/readMergedOptions-x80ltQO_.mjs';
 export { b as buildSpawnEnv, s as shouldCapture, t as tokenize } from './chunks/spawnEnv-CKgnHGpr.mjs';
-export { d as defineScripts, g as groupPlugins } from './chunks/types-BthqmnDr.mjs';
+export { d as defineScripts, g as groupPlugins } from './chunks/types-poB1VAs_.mjs';
 import { omit, pick } from 'radash';
 import { Buffer } from 'node:buffer';
 export { l as loadModuleDefault } from './chunks/loadModuleDefault-Dj8B3Stt.mjs';
@@ -10,8 +10,8 @@ import { InvalidArgumentError } from '@commander-js/extra-typings';
 import 'zod';
 import { nanoid } from 'nanoid';
 import path$1 from 'path';
-import { a as redactObject, m as maybeWarnEntropy } from './chunks/index-Dd6S1nZ-.mjs';
-export { r as redactDisplay, t as traceChildEnv } from './chunks/index-Dd6S1nZ-.mjs';
+import { a as redactObject, m as maybeWarnEntropy } from './chunks/index-BzoCat8h.mjs';
+export { r as redactDisplay, t as traceChildEnv } from './chunks/index-BzoCat8h.mjs';
 import { r as readDotenv, e as dotenvExpandAll, a as applyDynamicMap, l as loadAndApplyDynamic } from './chunks/readDotenvCascade-Dgx4SC1p.mjs';
 export { d as dotenvExpand, f as dotenvExpandFromProcessEnv } from './chunks/readDotenvCascade-Dgx4SC1p.mjs';
 import fs from 'fs-extra';
@@ -24,10 +24,10 @@ import 'package-directory';
 import 'yaml';
 import 'execa';
 import './chunks/helpConfig-CGejgwWW.mjs';
-import './chunks/resolveCliOptions-BMBkWDYJ.mjs';
+import './chunks/resolveCliOptions-CR-BEUmS.mjs';
 import './chunks/validate-CDl0rE6k.mjs';
 import './plugins-aws.mjs';
-import './chunks/index-BuxEK_Z4.mjs';
+import './chunks/index-4kbkrHS9.mjs';
 import 'node:os';
 import 'node:fs/promises';
 import 'node:stream';

package/dist/plugins-aws.d.ts

@@ -358,6 +358,12 @@ interface ResolveAndLoadOptions {
      * @default true
      */
     runAfterResolve?: boolean;
+    /**
+     * Name of the invoked subcommand (plugin namespace). When provided,
+     * only the matching plugin subtree runs afterResolve hooks.
+     * When omitted, all plugins run afterResolve (backward compatibility).
+     */
+    invokedSubcommand?: string;
 }
 /**
  * Structural public interface for the host exposed to plugins.
@@ -451,6 +457,11 @@ interface GetDotenvCliPlugin<TOptions extends GetDotenvOptions = GetDotenvOption
      * After the dotenv context is resolved, initialize any clients/secrets
      * or attach per-plugin state under ctx.plugins (by convention).
      * Runs parent → children (pre-order).
+     *
+     * **Scoping**: When the host provides an invoked subcommand filter,
+     * afterResolve only fires for plugins whose namespace matches the
+     * invoked command path. A plugin's afterResolve should never produce
+     * side effects for commands outside its subtree.
      */
     afterResolve?: (cli: GetDotenvCliPublic<TOptions, TArgs, TOpts, TGlobal>, ctx: GetDotenvCliCtx<TOptions>) => void | Promise<void>;
     /** Zod schema for this plugin's config slice (from config.plugins[…]). */

package/dist/plugins-aws.mjs

@@ -1,4 +1,4 @@
-import { r as readMergedOptions, g as definePlugin } from './chunks/readMergedOptions-CraAnYdB.mjs';
+import { r as readMergedOptions, g as definePlugin } from './chunks/readMergedOptions-x80ltQO_.mjs';
 import 'execa';
 import { isObject } from 'radash';
 import 'node:buffer';
@@ -329,12 +329,13 @@ const resolveAwsContext = async ({ dotenv, cfg, }) => {
 };
 
 /**
- * Create the AWS plugin `afterResolve` hook.
+ * Create the AWS plugin afterResolve hook.
  *
- * This runs once per invocation after the host resolves dotenv context.
+ * This runs after the host resolves dotenv context, but only when the aws
+ * plugin (or a child of it) is in the invoked command path.
  *
  * @param plugin - The AWS plugin instance.
- * @returns An `afterResolve` hook function suitable for assigning to `plugin.afterResolve`.
+ * @returns An afterResolve hook function suitable for assigning to plugin.afterResolve.
  *
  * @internal
  */

package/dist/plugins-batch.d.ts

@@ -358,6 +358,12 @@ interface ResolveAndLoadOptions {
      * @default true
      */
     runAfterResolve?: boolean;
+    /**
+     * Name of the invoked subcommand (plugin namespace). When provided,
+     * only the matching plugin subtree runs afterResolve hooks.
+     * When omitted, all plugins run afterResolve (backward compatibility).
+     */
+    invokedSubcommand?: string;
 }
 /**
  * Structural public interface for the host exposed to plugins.
@@ -451,6 +457,11 @@ interface GetDotenvCliPlugin<TOptions extends GetDotenvOptions = GetDotenvOption
      * After the dotenv context is resolved, initialize any clients/secrets
      * or attach per-plugin state under ctx.plugins (by convention).
      * Runs parent → children (pre-order).
+     *
+     * **Scoping**: When the host provides an invoked subcommand filter,
+     * afterResolve only fires for plugins whose namespace matches the
+     * invoked command path. A plugin's afterResolve should never produce
+     * side effects for commands outside its subtree.
      */
     afterResolve?: (cli: GetDotenvCliPublic<TOptions, TArgs, TOpts, TGlobal>, ctx: GetDotenvCliCtx<TOptions>) => void | Promise<void>;
     /** Zod schema for this plugin's config slice (from config.plugins[…]). */

package/dist/plugins-batch.mjs

@@ -1,4 +1,4 @@
-import { r as readMergedOptions, g as definePlugin } from './chunks/readMergedOptions-CraAnYdB.mjs';
+import { r as readMergedOptions, g as definePlugin } from './chunks/readMergedOptions-x80ltQO_.mjs';
 import 'execa';
 import 'radash';
 import 'node:buffer';

package/dist/plugins-cmd.d.ts

@@ -358,6 +358,12 @@ interface ResolveAndLoadOptions {
      * @default true
      */
     runAfterResolve?: boolean;
+    /**
+     * Name of the invoked subcommand (plugin namespace). When provided,
+     * only the matching plugin subtree runs afterResolve hooks.
+     * When omitted, all plugins run afterResolve (backward compatibility).
+     */
+    invokedSubcommand?: string;
 }
 /**
  * Structural public interface for the host exposed to plugins.
@@ -451,6 +457,11 @@ interface GetDotenvCliPlugin<TOptions extends GetDotenvOptions = GetDotenvOption
      * After the dotenv context is resolved, initialize any clients/secrets
      * or attach per-plugin state under ctx.plugins (by convention).
      * Runs parent → children (pre-order).
+     *
+     * **Scoping**: When the host provides an invoked subcommand filter,
+     * afterResolve only fires for plugins whose namespace matches the
+     * invoked command path. A plugin's afterResolve should never produce
+     * side effects for commands outside its subtree.
      */
     afterResolve?: (cli: GetDotenvCliPublic<TOptions, TArgs, TOpts, TGlobal>, ctx: GetDotenvCliCtx<TOptions>) => void | Promise<void>;
     /** Zod schema for this plugin's config slice (from config.plugins[…]). */

package/dist/plugins-cmd.mjs

@@ -1,5 +1,5 @@
 import 'radash';
-import './chunks/readMergedOptions-CraAnYdB.mjs';
+import './chunks/readMergedOptions-x80ltQO_.mjs';
 import 'execa';
 import 'node:buffer';
 import 'fs-extra';
@@ -14,9 +14,9 @@ import './chunks/loader-V1vbmtyw.mjs';
 import 'package-directory';
 import 'yaml';
 import 'zod';
-export { c as cmdPlugin } from './chunks/index-Dd6S1nZ-.mjs';
+export { c as cmdPlugin } from './chunks/index-BzoCat8h.mjs';
 import './chunks/readDotenvCascade-Dgx4SC1p.mjs';
 import './chunks/loadModuleDefault-Dj8B3Stt.mjs';
 import './chunks/spawnEnv-CKgnHGpr.mjs';
 import './chunks/invoke-DuRPU1oC.mjs';
-import './chunks/resolveCliOptions-BMBkWDYJ.mjs';
+import './chunks/resolveCliOptions-CR-BEUmS.mjs';

package/dist/plugins-init.d.ts

@@ -358,6 +358,12 @@ interface ResolveAndLoadOptions {
      * @default true
      */
     runAfterResolve?: boolean;
+    /**
+     * Name of the invoked subcommand (plugin namespace). When provided,
+     * only the matching plugin subtree runs afterResolve hooks.
+     * When omitted, all plugins run afterResolve (backward compatibility).
+     */
+    invokedSubcommand?: string;
 }
 /**
  * Structural public interface for the host exposed to plugins.
@@ -451,6 +457,11 @@ interface GetDotenvCliPlugin<TOptions extends GetDotenvOptions = GetDotenvOption
      * After the dotenv context is resolved, initialize any clients/secrets
      * or attach per-plugin state under ctx.plugins (by convention).
      * Runs parent → children (pre-order).
+     *
+     * **Scoping**: When the host provides an invoked subcommand filter,
+     * afterResolve only fires for plugins whose namespace matches the
+     * invoked command path. A plugin's afterResolve should never produce
+     * side effects for commands outside its subtree.
      */
     afterResolve?: (cli: GetDotenvCliPublic<TOptions, TArgs, TOpts, TGlobal>, ctx: GetDotenvCliCtx<TOptions>) => void | Promise<void>;
     /** Zod schema for this plugin's config slice (from config.plugins[…]). */

package/dist/plugins-init.mjs

@@ -1,4 +1,4 @@
-import { r as readMergedOptions, g as definePlugin } from './chunks/readMergedOptions-CraAnYdB.mjs';
+import { r as readMergedOptions, g as definePlugin } from './chunks/readMergedOptions-x80ltQO_.mjs';
 import 'execa';
 import 'radash';
 import 'node:buffer';

package/dist/plugins.d.ts

@@ -358,6 +358,12 @@ interface ResolveAndLoadOptions {
      * @default true
      */
     runAfterResolve?: boolean;
+    /**
+     * Name of the invoked subcommand (plugin namespace). When provided,
+     * only the matching plugin subtree runs afterResolve hooks.
+     * When omitted, all plugins run afterResolve (backward compatibility).
+     */
+    invokedSubcommand?: string;
 }
 /**
  * Structural public interface for the host exposed to plugins.
@@ -451,6 +457,11 @@ interface GetDotenvCliPlugin<TOptions extends GetDotenvOptions = GetDotenvOption
      * After the dotenv context is resolved, initialize any clients/secrets
      * or attach per-plugin state under ctx.plugins (by convention).
      * Runs parent → children (pre-order).
+     *
+     * **Scoping**: When the host provides an invoked subcommand filter,
+     * afterResolve only fires for plugins whose namespace matches the
+     * invoked command path. A plugin's afterResolve should never produce
+     * side effects for commands outside its subtree.
      */
     afterResolve?: (cli: GetDotenvCliPublic<TOptions, TArgs, TOpts, TGlobal>, ctx: GetDotenvCliCtx<TOptions>) => void | Promise<void>;
     /** Zod schema for this plugin's config slice (from config.plugins[…]). */

package/dist/plugins.mjs

@@ -1,9 +1,9 @@
 export { awsPlugin, getAwsRegion } from './plugins-aws.mjs';
-export { R as awsWhoamiPlugin } from './chunks/index-BuxEK_Z4.mjs';
+export { R as awsWhoamiPlugin } from './chunks/index-4kbkrHS9.mjs';
 export { batchPlugin } from './plugins-batch.mjs';
-export { c as cmdPlugin } from './chunks/index-Dd6S1nZ-.mjs';
+export { c as cmdPlugin } from './chunks/index-BzoCat8h.mjs';
 export { initPlugin } from './plugins-init.mjs';
-import './chunks/readMergedOptions-CraAnYdB.mjs';
+import './chunks/readMergedOptions-x80ltQO_.mjs';
 import 'zod';
 import '@commander-js/extra-typings';
 import './chunks/readDotenvCascade-Dgx4SC1p.mjs';
@@ -31,6 +31,6 @@ import 'node:https';
 import 'node:process';
 import './chunks/invoke-DuRPU1oC.mjs';
 import 'globby';
-import './chunks/resolveCliOptions-BMBkWDYJ.mjs';
+import './chunks/resolveCliOptions-CR-BEUmS.mjs';
 import 'readline/promises';
 import 'node:url';

package/package.json

@@ -221,5 +221,5 @@
   },
   "type": "module",
   "types": "dist/index.d.ts",
-  "version": "7.0.6"
+  "version": "7.0.7"
 }