@ndlib/ndlib-cdk2 1.0.19 → 1.0.20

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/client-sts/dist/cjs/commands/GetCallerIdentityCommand.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetCallerIdentityCommand = void 0;
+const models_0_1 = require("../models/models_0");
+const Aws_query_1 = require("../protocols/Aws_query");
+const middleware_serde_1 = require("@aws-sdk/middleware-serde");
+const middleware_signing_1 = require("@aws-sdk/middleware-signing");
+const smithy_client_1 = require("@aws-sdk/smithy-client");
+/**
+ * <p>Returns details about the IAM user or role whose credentials are used to call the
+ *             operation.</p>
+ *         <note>
+ *             <p>No permissions are required to perform this operation. If an administrator adds a
+ *                 policy to your IAM user or role that explicitly denies access to the
+ *                     <code>sts:GetCallerIdentity</code> action, you can still perform this operation.
+ *                 Permissions are not required because the same information is returned when an IAM
+ *                 user or role is denied access. To view an example response, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/troubleshoot_general.html#troubleshoot_general_access-denied-delete-mfa">I Am Not Authorized to Perform: iam:DeleteVirtualMFADevice</a> in the
+ *                     <i>IAM User Guide</i>.</p>
+ *         </note>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { STSClient, GetCallerIdentityCommand } from "@aws-sdk/client-sts"; // ES Modules import
+ * // const { STSClient, GetCallerIdentityCommand } = require("@aws-sdk/client-sts"); // CommonJS import
+ * const client = new STSClient(config);
+ * const command = new GetCallerIdentityCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link GetCallerIdentityCommandInput} for command's `input` shape.
+ * @see {@link GetCallerIdentityCommandOutput} for command's `response` shape.
+ * @see {@link STSClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+class GetCallerIdentityCommand extends smithy_client_1.Command {
+    // Start section: command_properties
+    // End section: command_properties
+    constructor(input) {
+        // Start section: command_constructor
+        super();
+        this.input = input;
+        // End section: command_constructor
+    }
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack, configuration, options) {
+        this.middlewareStack.use(middleware_serde_1.getSerdePlugin(configuration, this.serialize, this.deserialize));
+        this.middlewareStack.use(middleware_signing_1.getAwsAuthPlugin(configuration));
+        const stack = clientStack.concat(this.middlewareStack);
+        const { logger } = configuration;
+        const clientName = "STSClient";
+        const commandName = "GetCallerIdentityCommand";
+        const handlerExecutionContext = {
+            logger,
+            clientName,
+            commandName,
+            inputFilterSensitiveLog: models_0_1.GetCallerIdentityRequest.filterSensitiveLog,
+            outputFilterSensitiveLog: models_0_1.GetCallerIdentityResponse.filterSensitiveLog,
+        };
+        const { requestHandler } = configuration;
+        return stack.resolve((request) => requestHandler.handle(request.request, options || {}), handlerExecutionContext);
+    }
+    serialize(input, context) {
+        return Aws_query_1.serializeAws_queryGetCallerIdentityCommand(input, context);
+    }
+    deserialize(output, context) {
+        return Aws_query_1.deserializeAws_queryGetCallerIdentityCommand(output, context);
+    }
+}
+exports.GetCallerIdentityCommand = GetCallerIdentityCommand;
+//# sourceMappingURL=GetCallerIdentityCommand.js.map

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/client-sts/dist/cjs/commands/GetCallerIdentityCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GetCallerIdentityCommand.js","sourceRoot":"","sources":["../../../commands/GetCallerIdentityCommand.ts"],"names":[],"mappings":";;;AACA,iDAAyF;AACzF,sDAGgC;AAChC,gEAA2D;AAC3D,oEAA+D;AAE/D,0DAA6D;AAc7D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAa,wBAAyB,SAAQ,uBAI7C;IACC,oCAAoC;IACpC,kCAAkC;IAElC,YAAqB,KAAoC;QACvD,qCAAqC;QACrC,KAAK,EAAE,CAAC;QAFW,UAAK,GAAL,KAAK,CAA+B;QAGvD,mCAAmC;IACrC,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,WAAmE,EACnE,aAAsC,EACtC,OAA8B;QAE9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,iCAAc,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,qCAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAEvD,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC;QACjC,MAAM,UAAU,GAAG,WAAW,CAAC;QAC/B,MAAM,WAAW,GAAG,0BAA0B,CAAC;QAC/C,MAAM,uBAAuB,GAA4B;YACvD,MAAM;YACN,UAAU;YACV,WAAW;YACX,uBAAuB,EAAE,mCAAwB,CAAC,kBAAkB;YACpE,wBAAwB,EAAE,oCAAyB,CAAC,kBAAkB;SACvE,CAAC;QACF,MAAM,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC;QACzC,OAAO,KAAK,CAAC,OAAO,CAClB,CAAC,OAAsC,EAAE,EAAE,CACzC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAwB,EAAE,OAAO,IAAI,EAAE,CAAC,EACxE,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,KAAoC,EAAE,OAAuB;QAC7E,OAAO,sDAA0C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAEO,WAAW,CAAC,MAAsB,EAAE,OAAuB;QACjE,OAAO,wDAA4C,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;CAIF;AAvDD,4DAuDC"}

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/client-sts/dist/cjs/commands/GetFederationTokenCommand.js

@@ -0,0 +1,201 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetFederationTokenCommand = void 0;
+const models_0_1 = require("../models/models_0");
+const Aws_query_1 = require("../protocols/Aws_query");
+const middleware_serde_1 = require("@aws-sdk/middleware-serde");
+const middleware_signing_1 = require("@aws-sdk/middleware-signing");
+const smithy_client_1 = require("@aws-sdk/smithy-client");
+/**
+ * <p>Returns a set of temporary security credentials (consisting of an access key ID, a
+ *          secret access key, and a security token) for a federated user. A typical use is in a proxy
+ *          application that gets temporary security credentials on behalf of distributed applications
+ *          inside a corporate network. You must call the <code>GetFederationToken</code> operation
+ *          using the long-term security credentials of an IAM user. As a result, this call is
+ *          appropriate in contexts where those credentials can be safely stored, usually in a
+ *          server-based application. For a comparison of <code>GetFederationToken</code> with the
+ *          other API operations that produce temporary credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html">Requesting Temporary Security
+ *             Credentials</a> and <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison">Comparing the
+ *             AWS STS API operations</a> in the <i>IAM User Guide</i>.</p>
+ *          <note>
+ *             <p>You can create a mobile-based or browser-based app that can authenticate users using
+ *             a web identity provider like Login with Amazon, Facebook, Google, or an OpenID
+ *             Connect-compatible identity provider. In this case, we recommend that you use <a href="http://aws.amazon.com/cognito/">Amazon Cognito</a> or
+ *                <code>AssumeRoleWithWebIdentity</code>. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_assumerolewithwebidentity">Federation Through a Web-based Identity Provider</a> in the
+ *                <i>IAM User Guide</i>.</p>
+ *          </note>
+ *          <p>You can also call <code>GetFederationToken</code> using the security credentials of an
+ *          AWS account root user, but we do not recommend it. Instead, we recommend that you create
+ *          an IAM user for the purpose of the proxy application. Then attach a policy to the IAM
+ *          user that limits federated users to only the actions and resources that they need to
+ *          access. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html">IAM Best Practices</a> in the
+ *             <i>IAM User Guide</i>. </p>
+ *          <p>
+ *             <b>Session duration</b>
+ *          </p>
+ *          <p>The temporary credentials are valid for the specified duration, from 900 seconds (15
+ *          minutes) up to a maximum of 129,600 seconds (36 hours). The default session duration is
+ *          43,200 seconds (12 hours). Temporary credentials that are obtained by using AWS account
+ *          root user credentials have a maximum duration of 3,600 seconds (1 hour).</p>
+ *          <p>
+ *             <b>Permissions</b>
+ *          </p>
+ *          <p>You can use the temporary credentials created by <code>GetFederationToken</code> in any
+ *          AWS service except the following:</p>
+ *          <ul>
+ *             <li>
+ *                <p>You cannot call any IAM operations using the AWS CLI or the AWS API. </p>
+ *             </li>
+ *             <li>
+ *                <p>You cannot call any STS operations except <code>GetCallerIdentity</code>.</p>
+ *             </li>
+ *          </ul>
+ *          <p>You must pass an inline or managed <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">session policy</a> to
+ *          this operation. You can pass a single JSON policy document to use as an inline session
+ *          policy. You can also specify up to 10 managed policies to use as managed session policies.
+ *          The plaintext that you use for both inline and managed session policies can't exceed 2,048
+ *          characters.</p>
+ *          <p>Though the session policy parameters are optional, if you do not pass a policy, then the
+ *          resulting federated user session has no permissions. When you pass session policies, the
+ *          session permissions are the intersection of the IAM user policies and the session
+ *          policies that you pass. This gives you a way to further restrict the permissions for a
+ *          federated user. You cannot use session policies to grant more permissions than those that
+ *          are defined in the permissions policy of the IAM user. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session
+ *             Policies</a> in the <i>IAM User Guide</i>. For information about
+ *          using <code>GetFederationToken</code> to create temporary security credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_getfederationtoken">GetFederationToken—Federation Through a Custom Identity Broker</a>. </p>
+ *          <p>You can use the credentials to access a resource that has a resource-based policy. If
+ *          that policy specifically references the federated user session in the
+ *             <code>Principal</code> element of the policy, the session has the permissions allowed by
+ *          the policy. These permissions are granted in addition to the permissions granted by the
+ *          session policies.</p>
+ *          <p>
+ *             <b>Tags</b>
+ *          </p>
+ *          <p>(Optional) You can pass tag key-value pairs to your session. These are called session
+ *          tags. For more information about session tags, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html">Passing Session Tags in STS</a> in the
+ *             <i>IAM User Guide</i>.</p>
+ *         <note>
+ *             <p>You can create a mobile-based or browser-based app that can authenticate users
+ *                 using a web identity provider like Login with Amazon, Facebook, Google, or an OpenID
+ *                 Connect-compatible identity provider. In this case, we recommend that you use <a href="http://aws.amazon.com/cognito/">Amazon Cognito</a> or
+ *                     <code>AssumeRoleWithWebIdentity</code>. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_assumerolewithwebidentity">Federation Through a Web-based Identity Provider</a> in the
+ *                     <i>IAM User Guide</i>.</p>
+ *         </note>
+ *         <p>You can also call <code>GetFederationToken</code> using the security credentials of an
+ *             AWS account root user, but we do not recommend it. Instead, we recommend that you
+ *             create an IAM user for the purpose of the proxy application. Then attach a policy to
+ *             the IAM user that limits federated users to only the actions and resources that they
+ *             need to access. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html">IAM Best Practices</a> in the
+ *                 <i>IAM User Guide</i>. </p>
+ *         <p>
+ *             <b>Session duration</b>
+ *          </p>
+ *         <p>The temporary credentials are valid for the specified duration, from 900 seconds (15
+ *             minutes) up to a maximum of 129,600 seconds (36 hours). The default session duration is
+ *             43,200 seconds (12 hours). Temporary credentials that are obtained by using AWS
+ *             account root user credentials have a maximum duration of 3,600 seconds (1 hour).</p>
+ *         <p>
+ *             <b>Permissions</b>
+ *         </p>
+ *         <p>You can use the temporary credentials created by <code>GetFederationToken</code> in
+ *             any AWS service except the following:</p>
+ *         <ul>
+ *             <li>
+ *                 <p>You cannot call any IAM operations using the AWS CLI or the AWS API.
+ *                 </p>
+ *             </li>
+ *             <li>
+ *                 <p>You cannot call any STS operations except
+ *                     <code>GetCallerIdentity</code>.</p>
+ *             </li>
+ *          </ul>
+ *         <p>You must pass an inline or managed <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">session policy</a> to
+ *             this operation. You can pass a single JSON policy document to use as an inline session
+ *             policy. You can also specify up to 10 managed policies to use as managed session
+ *             policies. The plain text that you use for both inline and managed session policies can't
+ *             exceed 2,048 characters.</p>
+ *         <p>Though the session policy parameters are optional, if you do not pass a policy, then
+ *             the resulting federated user session has no permissions. When you pass session policies,
+ *             the session permissions are the intersection of the IAM user policies and the session
+ *             policies that you pass. This gives you a way to further restrict the permissions for a
+ *             federated user. You cannot use session policies to grant more permissions than those
+ *             that are defined in the permissions policy of the IAM user. For more information, see
+ *                 <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session">Session Policies</a>
+ *             in the <i>IAM User Guide</i>. For information about using
+ *                 <code>GetFederationToken</code> to create temporary security credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_getfederationtoken">GetFederationToken—Federation Through a Custom Identity Broker</a>. </p>
+ *         <p>You can use the credentials to access a resource that has a resource-based policy. If
+ *             that policy specifically references the federated user session in the
+ *                 <code>Principal</code> element of the policy, the session has the permissions
+ *             allowed by the policy. These permissions are granted in addition to the permissions
+ *             granted by the session policies.</p>
+ *         <p>
+ *             <b>Tags</b>
+ *          </p>
+ *         <p>(Optional) You can pass tag key-value pairs to your session. These are called session
+ *             tags. For more information about session tags, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html">Passing Session Tags in STS</a> in
+ *             the <i>IAM User Guide</i>.</p>
+ *         <p>An administrator must grant you the permissions necessary to pass session tags. The
+ *             administrator can also create granular permissions to allow you to pass only specific
+ *             session tags. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_attribute-based-access-control.html">Tutorial: Using
+ *                 Tags for Attribute-Based Access Control</a> in the
+ *                 <i>IAM User Guide</i>.</p>
+ *         <p>Tag key–value pairs are not case sensitive, but case is preserved. This means that you
+ *             cannot have separate <code>Department</code> and <code>department</code> tag keys.
+ *             Assume that the user that you are federating has the
+ *                 <code>Department</code>=<code>Marketing</code> tag and you pass the
+ *                 <code>department</code>=<code>engineering</code> session tag.
+ *                 <code>Department</code> and <code>department</code> are not saved as separate tags,
+ *             and the session tag passed in the request takes precedence over the user tag.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { STSClient, GetFederationTokenCommand } from "@aws-sdk/client-sts"; // ES Modules import
+ * // const { STSClient, GetFederationTokenCommand } = require("@aws-sdk/client-sts"); // CommonJS import
+ * const client = new STSClient(config);
+ * const command = new GetFederationTokenCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link GetFederationTokenCommandInput} for command's `input` shape.
+ * @see {@link GetFederationTokenCommandOutput} for command's `response` shape.
+ * @see {@link STSClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+class GetFederationTokenCommand extends smithy_client_1.Command {
+    // Start section: command_properties
+    // End section: command_properties
+    constructor(input) {
+        // Start section: command_constructor
+        super();
+        this.input = input;
+        // End section: command_constructor
+    }
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack, configuration, options) {
+        this.middlewareStack.use(middleware_serde_1.getSerdePlugin(configuration, this.serialize, this.deserialize));
+        this.middlewareStack.use(middleware_signing_1.getAwsAuthPlugin(configuration));
+        const stack = clientStack.concat(this.middlewareStack);
+        const { logger } = configuration;
+        const clientName = "STSClient";
+        const commandName = "GetFederationTokenCommand";
+        const handlerExecutionContext = {
+            logger,
+            clientName,
+            commandName,
+            inputFilterSensitiveLog: models_0_1.GetFederationTokenRequest.filterSensitiveLog,
+            outputFilterSensitiveLog: models_0_1.GetFederationTokenResponse.filterSensitiveLog,
+        };
+        const { requestHandler } = configuration;
+        return stack.resolve((request) => requestHandler.handle(request.request, options || {}), handlerExecutionContext);
+    }
+    serialize(input, context) {
+        return Aws_query_1.serializeAws_queryGetFederationTokenCommand(input, context);
+    }
+    deserialize(output, context) {
+        return Aws_query_1.deserializeAws_queryGetFederationTokenCommand(output, context);
+    }
+}
+exports.GetFederationTokenCommand = GetFederationTokenCommand;
+//# sourceMappingURL=GetFederationTokenCommand.js.map

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/client-sts/dist/cjs/commands/GetFederationTokenCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GetFederationTokenCommand.js","sourceRoot":"","sources":["../../../commands/GetFederationTokenCommand.ts"],"names":[],"mappings":";;;AACA,iDAA2F;AAC3F,sDAGgC;AAChC,gEAA2D;AAC3D,oEAA+D;AAE/D,0DAA6D;AAc7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0JG;AACH,MAAa,yBAA0B,SAAQ,uBAI9C;IACC,oCAAoC;IACpC,kCAAkC;IAElC,YAAqB,KAAqC;QACxD,qCAAqC;QACrC,KAAK,EAAE,CAAC;QAFW,UAAK,GAAL,KAAK,CAAgC;QAGxD,mCAAmC;IACrC,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,WAAmE,EACnE,aAAsC,EACtC,OAA8B;QAE9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,iCAAc,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,qCAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAEvD,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC;QACjC,MAAM,UAAU,GAAG,WAAW,CAAC;QAC/B,MAAM,WAAW,GAAG,2BAA2B,CAAC;QAChD,MAAM,uBAAuB,GAA4B;YACvD,MAAM;YACN,UAAU;YACV,WAAW;YACX,uBAAuB,EAAE,oCAAyB,CAAC,kBAAkB;YACrE,wBAAwB,EAAE,qCAA0B,CAAC,kBAAkB;SACxE,CAAC;QACF,MAAM,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC;QACzC,OAAO,KAAK,CAAC,OAAO,CAClB,CAAC,OAAsC,EAAE,EAAE,CACzC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAwB,EAAE,OAAO,IAAI,EAAE,CAAC,EACxE,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,KAAqC,EAAE,OAAuB;QAC9E,OAAO,uDAA2C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAEO,WAAW,CAAC,MAAsB,EAAE,OAAuB;QACjE,OAAO,yDAA6C,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxE,CAAC;CAIF;AAvDD,8DAuDC"}

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/client-sts/dist/cjs/commands/GetSessionTokenCommand.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GetSessionTokenCommand = void 0;
+const models_0_1 = require("../models/models_0");
+const Aws_query_1 = require("../protocols/Aws_query");
+const middleware_serde_1 = require("@aws-sdk/middleware-serde");
+const middleware_signing_1 = require("@aws-sdk/middleware-signing");
+const smithy_client_1 = require("@aws-sdk/smithy-client");
+/**
+ * <p>Returns a set of temporary credentials for an AWS account or IAM user. The
+ *          credentials consist of an access key ID, a secret access key, and a security token.
+ *          Typically, you use <code>GetSessionToken</code> if you want to use MFA to protect
+ *          programmatic calls to specific AWS API operations like Amazon EC2 <code>StopInstances</code>.
+ *          MFA-enabled IAM users would need to call <code>GetSessionToken</code> and submit an MFA
+ *          code that is associated with their MFA device. Using the temporary security credentials
+ *          that are returned from the call, IAM users can then make programmatic calls to API
+ *          operations that require MFA authentication. If you do not supply a correct MFA code, then
+ *          the API returns an access denied error. For a comparison of <code>GetSessionToken</code>
+ *          with the other API operations that produce temporary credentials, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html">Requesting
+ *             Temporary Security Credentials</a> and <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison">Comparing the
+ *             AWS STS API operations</a> in the <i>IAM User Guide</i>.</p>
+ *          <p>
+ *             <b>Session Duration</b>
+ *          </p>
+ *          <p>The <code>GetSessionToken</code> operation must be called by using the long-term AWS
+ *          security credentials of the AWS account root user or an IAM user. Credentials that are
+ *          created by IAM users are valid for the duration that you specify. This duration can range
+ *          from 900 seconds (15 minutes) up to a maximum of 129,600 seconds (36 hours), with a default
+ *          of 43,200 seconds (12 hours). Credentials based on account credentials can range from 900
+ *          seconds (15 minutes) up to 3,600 seconds (1 hour), with a default of 1 hour. </p>
+ *          <p>
+ *             <b>Permissions</b>
+ *          </p>
+ *          <p>The temporary security credentials created by <code>GetSessionToken</code> can be used
+ *          to make API calls to any AWS service with the following exceptions:</p>
+ *          <ul>
+ *             <li>
+ *                <p>You cannot call any IAM API operations unless MFA authentication information is
+ *                included in the request.</p>
+ *             </li>
+ *             <li>
+ *                <p>You cannot call any STS API <i>except</i>
+ *                   <code>AssumeRole</code> or <code>GetCallerIdentity</code>.</p>
+ *             </li>
+ *          </ul>
+ *          <note>
+ *             <p>We recommend that you do not call <code>GetSessionToken</code> with AWS account
+ *             root user credentials. Instead, follow our <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#create-iam-users">best practices</a> by
+ *             creating one or more IAM users, giving them the necessary permissions, and using IAM
+ *             users for everyday interaction with AWS. </p>
+ *          </note>
+ *          <p>The credentials that are returned by <code>GetSessionToken</code> are based on
+ *          permissions associated with the user whose credentials were used to call the operation. If
+ *             <code>GetSessionToken</code> is called using AWS account root user credentials, the
+ *          temporary credentials have root user permissions. Similarly, if
+ *             <code>GetSessionToken</code> is called using the credentials of an IAM user, the
+ *          temporary credentials have the same permissions as the IAM user. </p>
+ *          <p>For more information about using <code>GetSessionToken</code> to create temporary
+ *          credentials, go to <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_getsessiontoken">Temporary
+ *             Credentials for Users in Untrusted Environments</a> in the
+ *             <i>IAM User Guide</i>. </p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { STSClient, GetSessionTokenCommand } from "@aws-sdk/client-sts"; // ES Modules import
+ * // const { STSClient, GetSessionTokenCommand } = require("@aws-sdk/client-sts"); // CommonJS import
+ * const client = new STSClient(config);
+ * const command = new GetSessionTokenCommand(input);
+ * const response = await client.send(command);
+ * ```
+ *
+ * @see {@link GetSessionTokenCommandInput} for command's `input` shape.
+ * @see {@link GetSessionTokenCommandOutput} for command's `response` shape.
+ * @see {@link STSClientResolvedConfig | config} for command's `input` shape.
+ *
+ */
+class GetSessionTokenCommand extends smithy_client_1.Command {
+    // Start section: command_properties
+    // End section: command_properties
+    constructor(input) {
+        // Start section: command_constructor
+        super();
+        this.input = input;
+        // End section: command_constructor
+    }
+    /**
+     * @internal
+     */
+    resolveMiddleware(clientStack, configuration, options) {
+        this.middlewareStack.use(middleware_serde_1.getSerdePlugin(configuration, this.serialize, this.deserialize));
+        this.middlewareStack.use(middleware_signing_1.getAwsAuthPlugin(configuration));
+        const stack = clientStack.concat(this.middlewareStack);
+        const { logger } = configuration;
+        const clientName = "STSClient";
+        const commandName = "GetSessionTokenCommand";
+        const handlerExecutionContext = {
+            logger,
+            clientName,
+            commandName,
+            inputFilterSensitiveLog: models_0_1.GetSessionTokenRequest.filterSensitiveLog,
+            outputFilterSensitiveLog: models_0_1.GetSessionTokenResponse.filterSensitiveLog,
+        };
+        const { requestHandler } = configuration;
+        return stack.resolve((request) => requestHandler.handle(request.request, options || {}), handlerExecutionContext);
+    }
+    serialize(input, context) {
+        return Aws_query_1.serializeAws_queryGetSessionTokenCommand(input, context);
+    }
+    deserialize(output, context) {
+        return Aws_query_1.deserializeAws_queryGetSessionTokenCommand(output, context);
+    }
+}
+exports.GetSessionTokenCommand = GetSessionTokenCommand;
+//# sourceMappingURL=GetSessionTokenCommand.js.map

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/client-sts/dist/cjs/commands/GetSessionTokenCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GetSessionTokenCommand.js","sourceRoot":"","sources":["../../../commands/GetSessionTokenCommand.ts"],"names":[],"mappings":";;;AACA,iDAAqF;AACrF,sDAGgC;AAChC,gEAA2D;AAC3D,oEAA+D;AAE/D,0DAA6D;AAc7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,MAAa,sBAAuB,SAAQ,uBAI3C;IACC,oCAAoC;IACpC,kCAAkC;IAElC,YAAqB,KAAkC;QACrD,qCAAqC;QACrC,KAAK,EAAE,CAAC;QAFW,UAAK,GAAL,KAAK,CAA6B;QAGrD,mCAAmC;IACrC,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,WAAmE,EACnE,aAAsC,EACtC,OAA8B;QAE9B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,iCAAc,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,qCAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAEvD,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC;QACjC,MAAM,UAAU,GAAG,WAAW,CAAC;QAC/B,MAAM,WAAW,GAAG,wBAAwB,CAAC;QAC7C,MAAM,uBAAuB,GAA4B;YACvD,MAAM;YACN,UAAU;YACV,WAAW;YACX,uBAAuB,EAAE,iCAAsB,CAAC,kBAAkB;YAClE,wBAAwB,EAAE,kCAAuB,CAAC,kBAAkB;SACrE,CAAC;QACF,MAAM,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC;QACzC,OAAO,KAAK,CAAC,OAAO,CAClB,CAAC,OAAsC,EAAE,EAAE,CACzC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,OAAwB,EAAE,OAAO,IAAI,EAAE,CAAC,EACxE,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,KAAkC,EAAE,OAAuB;QAC3E,OAAO,oDAAwC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAEO,WAAW,CAAC,MAAsB,EAAE,OAAuB;QACjE,OAAO,sDAA0C,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;CAIF;AAvDD,wDAuDC"}

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/client-sts/dist/cjs/defaultRoleAssumers.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decorateDefaultCredentialProvider = exports.getDefaultRoleAssumerWithWebIdentity = exports.getDefaultRoleAssumer = void 0;
+// Please do not touch this file. It's generated from template in:
+// https://github.com/aws/aws-sdk-js-v3/blob/main/codegen/smithy-aws-typescript-codegen/src/main/resources/software/amazon/smithy/aws/typescript/codegen/sts-client-defaultRoleAssumers.ts
+const defaultStsRoleAssumers_1 = require("./defaultStsRoleAssumers");
+const STSClient_1 = require("./STSClient");
+/**
+ * The default role assumer that used by credential providers when sts:AssumeRole API is needed.
+ */
+const getDefaultRoleAssumer = (stsOptions = {}) => defaultStsRoleAssumers_1.getDefaultRoleAssumer(stsOptions, STSClient_1.STSClient);
+exports.getDefaultRoleAssumer = getDefaultRoleAssumer;
+/**
+ * The default role assumer that used by credential providers when sts:AssumeRoleWithWebIdentity API is needed.
+ */
+const getDefaultRoleAssumerWithWebIdentity = (stsOptions = {}) => defaultStsRoleAssumers_1.getDefaultRoleAssumerWithWebIdentity(stsOptions, STSClient_1.STSClient);
+exports.getDefaultRoleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity;
+/**
+ * The default credential providers depend STS client to assume role with desired API: sts:assumeRole,
+ * sts:assumeRoleWithWebIdentity, etc. This function decorates the default credential provider with role assumers which
+ * encapsulates the process of calling STS commands. This can only be imported by AWS client packages to avoid circular
+ * dependencies.
+ *
+ * @internal
+ */
+const decorateDefaultCredentialProvider = (provider) => (input) => provider({
+    roleAssumer: exports.getDefaultRoleAssumer(input),
+    roleAssumerWithWebIdentity: exports.getDefaultRoleAssumerWithWebIdentity(input),
+    ...input,
+});
+exports.decorateDefaultCredentialProvider = decorateDefaultCredentialProvider;
+//# sourceMappingURL=defaultRoleAssumers.js.map

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/client-sts/dist/cjs/defaultRoleAssumers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultRoleAssumers.js","sourceRoot":"","sources":["../../defaultRoleAssumers.ts"],"names":[],"mappings":";;;AAAA,kEAAkE;AAClE,0LAA0L;AAC1L,qEAMkC;AAClC,2CAAyD;AAEzD;;GAEG;AACI,MAAM,qBAAqB,GAAG,CACnC,aAA4E,EAAE,EACjE,EAAE,CAAC,8CAAwB,CAAC,UAAU,EAAE,qBAAS,CAAC,CAAC;AAFrD,QAAA,qBAAqB,yBAEgC;AAElE;;GAEG;AACI,MAAM,oCAAoC,GAAG,CAClD,aAA4E,EAAE,EAClD,EAAE,CAAC,6DAAuC,CAAC,UAAU,EAAE,qBAAS,CAAC,CAAC;AAFnF,QAAA,oCAAoC,wCAE+C;AAEhG;;;;;;;GAOG;AACI,MAAM,iCAAiC,GAC5C,CAAC,QAAmC,EAA6B,EAAE,CACnE,CAAC,KAAU,EAAE,EAAE,CACb,QAAQ,CAAC;IACP,WAAW,EAAE,6BAAqB,CAAC,KAAK,CAAC;IACzC,0BAA0B,EAAE,4CAAoC,CAAC,KAAK,CAAC;IACvE,GAAG,KAAK;CACT,CAAC,CAAC;AAPM,QAAA,iCAAiC,qCAOvC"}

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/client-sts/dist/cjs/defaultRoleAssumers.spec.js

@@ -0,0 +1,135 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+// Please do not touch this file. It's generated from template in:
+// https://github.com/aws/aws-sdk-js-v3/blob/main/codegen/smithy-aws-typescript-codegen/src/main/resources/software/amazon/smithy/aws/typescript/codegen/sts-client-defaultRoleAssumers.spec.ts
+const protocol_http_1 = require("@aws-sdk/protocol-http");
+const stream_1 = require("stream");
+const mockHandle = jest.fn().mockResolvedValue({
+    response: new protocol_http_1.HttpResponse({
+        statusCode: 200,
+        body: stream_1.Readable.from([""]),
+    }),
+});
+jest.mock("@aws-sdk/node-http-handler", () => ({
+    NodeHttpHandler: jest.fn().mockImplementation(() => ({
+        destroy: () => { },
+        handle: mockHandle,
+    })),
+    streamCollector: jest.fn(),
+}));
+const defaultRoleAssumers_1 = require("./defaultRoleAssumers");
+const node_http_handler_1 = require("@aws-sdk/node-http-handler");
+const mockConstructorInput = jest.fn();
+jest.mock("./STSClient", () => ({
+    STSClient: function (params) {
+        mockConstructorInput(params);
+        //@ts-ignore
+        return new (jest.requireActual("./STSClient").STSClient)(params);
+    },
+}));
+describe("getDefaultRoleAssumer", () => {
+    const assumeRoleResponse = `<AssumeRoleResponse xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
+<AssumeRoleResult>
+  <AssumedRoleUser>
+    <AssumedRoleId>AROAZOX2IL27GNRBJHWC2:session</AssumedRoleId>
+    <Arn>arn:aws:sts::123:assumed-role/assume-role-test/session</Arn>
+  </AssumedRoleUser>
+  <Credentials>
+    <AccessKeyId>key</AccessKeyId>
+    <SecretAccessKey>secrete</SecretAccessKey>
+    <SessionToken>session-token</SessionToken>
+    <Expiration>2021-05-05T23:22:08Z</Expiration>
+  </Credentials>
+</AssumeRoleResult>
+<ResponseMetadata>
+  <RequestId>12345678id</RequestId>
+</ResponseMetadata>
+</AssumeRoleResponse>`;
+    beforeAll(() => {
+        node_http_handler_1.streamCollector.mockImplementation(async () => Buffer.from(assumeRoleResponse));
+    });
+    beforeEach(() => {
+        jest.clearAllMocks();
+    });
+    it("should use supplied source credentials", async () => {
+        var _a, _b;
+        const roleAssumer = defaultRoleAssumers_1.getDefaultRoleAssumer();
+        const params = {
+            RoleArn: "arn:aws:foo",
+            RoleSessionName: "session",
+        };
+        const sourceCred1 = { accessKeyId: "key1", secretAccessKey: "secrete1" };
+        await roleAssumer(sourceCred1, params);
+        expect(mockHandle).toBeCalledTimes(1);
+        // Validate request is signed by sourceCred1
+        expect((_a = mockHandle.mock.calls[0][0].headers) === null || _a === void 0 ? void 0 : _a.authorization).toEqual(expect.stringContaining("AWS4-HMAC-SHA256 Credential=key1/"));
+        const sourceCred2 = { accessKeyId: "key2", secretAccessKey: "secrete1" };
+        await roleAssumer(sourceCred2, params);
+        // Validate request is signed by sourceCred2
+        expect(mockHandle).toBeCalledTimes(2);
+        expect((_b = mockHandle.mock.calls[1][0].headers) === null || _b === void 0 ? void 0 : _b.authorization).toEqual(expect.stringContaining("AWS4-HMAC-SHA256 Credential=key2/"));
+    });
+    it("should use the STS client config", async () => {
+        const logger = console;
+        const region = "some-region";
+        const handler = new node_http_handler_1.NodeHttpHandler();
+        const roleAssumer = defaultRoleAssumers_1.getDefaultRoleAssumer({
+            region,
+            logger,
+            requestHandler: handler,
+        });
+        const params = {
+            RoleArn: "arn:aws:foo",
+            RoleSessionName: "session",
+        };
+        const sourceCred = { accessKeyId: "key", secretAccessKey: "secrete" };
+        await roleAssumer(sourceCred, params);
+        expect(mockConstructorInput).toHaveBeenCalledTimes(1);
+        expect(mockConstructorInput.mock.calls[0][0]).toMatchObject({
+            logger,
+            requestHandler: handler,
+            region,
+        });
+    });
+});
+describe("getDefaultRoleAssumerWithWebIdentity", () => {
+    const assumeRoleResponse = `<Response xmlns="https://sts.amazonaws.com/doc/2011-06-15/">
+  <AssumeRoleWithWebIdentityResult>
+    <Credentials>
+      <AccessKeyId>key</AccessKeyId>
+      <SecretAccessKey>secrete</SecretAccessKey>
+      <SessionToken>session-token</SessionToken>
+      <Expiration>2021-05-05T23:22:08Z</Expiration>
+    </Credentials>
+  </AssumeRoleWithWebIdentityResult>
+  </Response>`;
+    beforeAll(() => {
+        node_http_handler_1.streamCollector.mockImplementation(async () => Buffer.from(assumeRoleResponse));
+    });
+    beforeEach(() => {
+        jest.clearAllMocks();
+    });
+    it("should use the STS client config", async () => {
+        const logger = console;
+        const region = "some-region";
+        const handler = new node_http_handler_1.NodeHttpHandler();
+        const roleAssumerWithWebIdentity = defaultRoleAssumers_1.getDefaultRoleAssumerWithWebIdentity({
+            region,
+            logger,
+            requestHandler: handler,
+        });
+        const params = {
+            RoleArn: "arn:aws:foo",
+            RoleSessionName: "session",
+            WebIdentityToken: "token",
+        };
+        await roleAssumerWithWebIdentity(params);
+        expect(mockConstructorInput).toHaveBeenCalledTimes(1);
+        expect(mockConstructorInput.mock.calls[0][0]).toMatchObject({
+            logger,
+            requestHandler: handler,
+            region,
+        });
+    });
+});
+//# sourceMappingURL=defaultRoleAssumers.spec.js.map

package/lib/internal-lambdas/sourceWatcherLambda/src/node_modules/@aws-sdk/client-sts/dist/cjs/defaultRoleAssumers.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultRoleAssumers.spec.js","sourceRoot":"","sources":["../../defaultRoleAssumers.spec.ts"],"names":[],"mappings":";;AAAA,kEAAkE;AAClE,+LAA+L;AAC/L,0DAAsD;AACtD,mCAAkC;AAElC,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;IAC7C,QAAQ,EAAE,IAAI,4BAAY,CAAC;QACzB,UAAU,EAAE,GAAG;QACf,IAAI,EAAE,iBAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;KAC1B,CAAC;CACH,CAAC,CAAC;AACH,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,eAAe,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;QACnD,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;QACjB,MAAM,EAAE,UAAU;KACnB,CAAC,CAAC;IACH,eAAe,EAAE,IAAI,CAAC,EAAE,EAAE;CAC3B,CAAC,CAAC,CAAC;AAEJ,+DAAoG;AAEpG,kEAA8E;AAE9E,MAAM,oBAAoB,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;AACvC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9B,SAAS,EAAE,UAAU,MAAW;QAC9B,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC7B,YAAY;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;sBAgBP,CAAC;IAErB,SAAS,CAAC,GAAG,EAAE;QACZ,mCAA6B,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;;QACtD,MAAM,WAAW,GAAG,2CAAqB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAA2B;YACrC,OAAO,EAAE,aAAa;YACtB,eAAe,EAAE,SAAS;SAC3B,CAAC;QACF,MAAM,WAAW,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;QACzE,MAAM,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACtC,4CAA4C;QAC5C,MAAM,CAAC,MAAA,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,0CAAE,aAAa,CAAC,CAAC,OAAO,CAChE,MAAM,CAAC,gBAAgB,CAAC,mCAAmC,CAAC,CAC7D,CAAC;QACF,MAAM,WAAW,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;QACzE,MAAM,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACvC,4CAA4C;QAC5C,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,MAAA,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,0CAAE,aAAa,CAAC,CAAC,OAAO,CAChE,MAAM,CAAC,gBAAgB,CAAC,mCAAmC,CAAC,CAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC;QACvB,MAAM,MAAM,GAAG,aAAa,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,mCAAe,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,2CAAqB,CAAC;YACxC,MAAM;YACN,MAAM;YACN,cAAc,EAAE,OAAO;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAA2B;YACrC,OAAO,EAAE,aAAa;YACtB,eAAe,EAAE,SAAS;SAC3B,CAAC;QACF,MAAM,UAAU,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;QACtE,MAAM,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,oBAAoB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC1D,MAAM;YACN,cAAc,EAAE,OAAO;YACvB,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,MAAM,kBAAkB,GAAG;;;;;;;;;cASf,CAAC;IAEb,SAAS,CAAC,GAAG,EAAE;QACZ,mCAA6B,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,MAAM,GAAG,OAAO,CAAC;QACvB,MAAM,MAAM,GAAG,aAAa,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,mCAAe,EAAE,CAAC;QACtC,MAAM,0BAA0B,GAAG,0DAAoC,CAAC;YACtE,MAAM;YACN,MAAM;YACN,cAAc,EAAE,OAAO;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAA0C;YACpD,OAAO,EAAE,aAAa;YACtB,eAAe,EAAE,SAAS;YAC1B,gBAAgB,EAAE,OAAO;SAC1B,CAAC;QACF,MAAM,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,oBAAoB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC1D,MAAM;YACN,cAAc,EAAE,OAAO;YACvB,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}