@semiont/graph 0.5.27 → 0.5.29

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (57) hide show
  1. package/README.md +1 -1
  2. package/dist/{chunk-GPJBZ6EG.js → chunk-2FPUYYXX.js} +9 -1
  3. package/dist/chunk-2FPUYYXX.js.map +1 -0
  4. package/dist/{chunk-Y62BMZ25.js → chunk-52FQCX5M.js} +18 -6
  5. package/dist/chunk-52FQCX5M.js.map +1 -0
  6. package/dist/{chunk-NYHKKGBV.js → chunk-MO34K2LQ.js} +32 -19
  7. package/dist/chunk-MO34K2LQ.js.map +1 -0
  8. package/dist/{chunk-7BYJ5YHD.js → chunk-SFMOIR7Y.js} +10 -10
  9. package/dist/{chunk-7BYJ5YHD.js.map → chunk-SFMOIR7Y.js.map} +1 -1
  10. package/dist/{chunk-YYVVWLB2.js → chunk-TKWHSSPF.js} +35 -16
  11. package/dist/chunk-TKWHSSPF.js.map +1 -0
  12. package/dist/{chunk-RRZDPP7Z.js → chunk-X77CPJUJ.js} +2 -2
  13. package/dist/{chunk-UKT6IXAM.js → chunk-XTHXGGIJ.js} +3 -3
  14. package/dist/{chunk-RBRHTAJN.js → chunk-ZPM4D2XD.js} +14 -5
  15. package/dist/chunk-ZPM4D2XD.js.map +1 -0
  16. package/dist/{dist-es-7CR3IHJD.js → dist-es-DYVW35LB.js} +13 -13
  17. package/dist/{dist-es-2ZN6SLSG.js → dist-es-F44WH2AS.js} +25 -25
  18. package/dist/dist-es-F44WH2AS.js.map +1 -0
  19. package/dist/{dist-es-M72B762W.js → dist-es-FTEZAK7G.js} +5 -5
  20. package/dist/{dist-es-NGG7JHEH.js → dist-es-FV5JDCUX.js} +4 -4
  21. package/dist/{dist-es-ILOZ33QI.js → dist-es-ISXX5KU4.js} +5 -5
  22. package/dist/{dist-es-V3UQXKNJ.js → dist-es-RTE7BVXX.js} +5 -5
  23. package/dist/{dist-es-LN4LZWKV.js → dist-es-V7467ELV.js} +3 -3
  24. package/dist/{dist-es-RZ3HNVJG.js → dist-es-WEW6PTSK.js} +15 -11
  25. package/dist/dist-es-WEW6PTSK.js.map +1 -0
  26. package/dist/{dist-es-J63OY2RR.js → dist-es-Z4NFJDXO.js} +5 -5
  27. package/dist/{event-streams-2HBIXE6X.js → event-streams-UU2VASBU.js} +36 -27
  28. package/dist/event-streams-UU2VASBU.js.map +1 -0
  29. package/dist/index.d.ts +3 -6
  30. package/dist/index.js +250 -359
  31. package/dist/index.js.map +1 -1
  32. package/dist/{loadSso-JTXSMWFI.js → loadSso-2Y2JSLM2.js} +8 -8
  33. package/dist/{signin-BM6IHIKX.js → signin-3VN2CNSY.js} +8 -8
  34. package/dist/{sso-oidc-IBGZ52NP.js → sso-oidc-76COL3D2.js} +8 -8
  35. package/dist/{sts-44HZWQDH.js → sts-BLFDXC4J.js} +8 -8
  36. package/package.json +10 -10
  37. package/dist/chunk-GPJBZ6EG.js.map +0 -1
  38. package/dist/chunk-NYHKKGBV.js.map +0 -1
  39. package/dist/chunk-RBRHTAJN.js.map +0 -1
  40. package/dist/chunk-Y62BMZ25.js.map +0 -1
  41. package/dist/chunk-YYVVWLB2.js.map +0 -1
  42. package/dist/dist-es-2ZN6SLSG.js.map +0 -1
  43. package/dist/dist-es-RZ3HNVJG.js.map +0 -1
  44. package/dist/event-streams-2HBIXE6X.js.map +0 -1
  45. /package/dist/{chunk-RRZDPP7Z.js.map → chunk-X77CPJUJ.js.map} +0 -0
  46. /package/dist/{chunk-UKT6IXAM.js.map → chunk-XTHXGGIJ.js.map} +0 -0
  47. /package/dist/{dist-es-7CR3IHJD.js.map → dist-es-DYVW35LB.js.map} +0 -0
  48. /package/dist/{dist-es-M72B762W.js.map → dist-es-FTEZAK7G.js.map} +0 -0
  49. /package/dist/{dist-es-NGG7JHEH.js.map → dist-es-FV5JDCUX.js.map} +0 -0
  50. /package/dist/{dist-es-ILOZ33QI.js.map → dist-es-ISXX5KU4.js.map} +0 -0
  51. /package/dist/{dist-es-V3UQXKNJ.js.map → dist-es-RTE7BVXX.js.map} +0 -0
  52. /package/dist/{dist-es-LN4LZWKV.js.map → dist-es-V7467ELV.js.map} +0 -0
  53. /package/dist/{dist-es-J63OY2RR.js.map → dist-es-Z4NFJDXO.js.map} +0 -0
  54. /package/dist/{loadSso-JTXSMWFI.js.map → loadSso-2Y2JSLM2.js.map} +0 -0
  55. /package/dist/{signin-BM6IHIKX.js.map → signin-3VN2CNSY.js.map} +0 -0
  56. /package/dist/{sso-oidc-IBGZ52NP.js.map → sso-oidc-76COL3D2.js.map} +0 -0
  57. /package/dist/{sts-44HZWQDH.js.map → sts-BLFDXC4J.js.map} +0 -0
@@ -1,17 +1,17 @@
1
1
  import {
2
2
  NodeHttpHandler
3
- } from "./chunk-Y62BMZ25.js";
3
+ } from "./chunk-52FQCX5M.js";
4
4
  import {
5
5
  setCredentialFeature
6
- } from "./chunk-RBRHTAJN.js";
6
+ } from "./chunk-ZPM4D2XD.js";
7
7
  import {
8
8
  CredentialsProviderError
9
- } from "./chunk-YYVVWLB2.js";
9
+ } from "./chunk-TKWHSSPF.js";
10
10
  import {
11
11
  HttpRequest,
12
12
  parseRfc3339DateTime,
13
13
  sdkStreamMixin
14
- } from "./chunk-GPJBZ6EG.js";
14
+ } from "./chunk-2FPUYYXX.js";
15
15
 
16
16
  // ../../node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
17
17
  import fs from "fs/promises";
@@ -172,4 +172,4 @@ var validateToken = (token) => {
172
172
  export {
173
173
  fromHttp
174
174
  };
175
- //# sourceMappingURL=dist-es-M72B762W.js.map
175
+ //# sourceMappingURL=dist-es-FTEZAK7G.js.map
@@ -1,13 +1,13 @@
1
1
  import {
2
2
  setCredentialFeature
3
- } from "./chunk-RBRHTAJN.js";
3
+ } from "./chunk-ZPM4D2XD.js";
4
4
  import {
5
5
  CredentialsProviderError,
6
6
  externalDataInterceptor,
7
7
  getProfileName,
8
8
  parseKnownFiles
9
- } from "./chunk-YYVVWLB2.js";
10
- import "./chunk-GPJBZ6EG.js";
9
+ } from "./chunk-TKWHSSPF.js";
10
+ import "./chunk-2FPUYYXX.js";
11
11
 
12
12
  // ../../node_modules/@aws-sdk/credential-provider-process/dist-es/resolveProcessCredentials.js
13
13
  import { exec } from "child_process";
@@ -84,4 +84,4 @@ var fromProcess = (init = {}) => async ({ callerClientConfig } = {}) => {
84
84
  export {
85
85
  fromProcess
86
86
  };
87
- //# sourceMappingURL=dist-es-NGG7JHEH.js.map
87
+ //# sourceMappingURL=dist-es-FV5JDCUX.js.map
@@ -6,10 +6,10 @@ import {
6
6
  ENV_SECRET,
7
7
  ENV_SESSION,
8
8
  fromEnv
9
- } from "./chunk-UKT6IXAM.js";
10
- import "./chunk-RBRHTAJN.js";
11
- import "./chunk-YYVVWLB2.js";
12
- import "./chunk-GPJBZ6EG.js";
9
+ } from "./chunk-XTHXGGIJ.js";
10
+ import "./chunk-ZPM4D2XD.js";
11
+ import "./chunk-TKWHSSPF.js";
12
+ import "./chunk-2FPUYYXX.js";
13
13
  export {
14
14
  ENV_ACCOUNT_ID,
15
15
  ENV_CREDENTIAL_SCOPE,
@@ -19,4 +19,4 @@ export {
19
19
  ENV_SESSION,
20
20
  fromEnv
21
21
  };
22
- //# sourceMappingURL=dist-es-ILOZ33QI.js.map
22
+ //# sourceMappingURL=dist-es-ISXX5KU4.js.map
@@ -1,14 +1,14 @@
1
1
  import {
2
2
  setCredentialFeature
3
- } from "./chunk-RBRHTAJN.js";
3
+ } from "./chunk-ZPM4D2XD.js";
4
4
  import {
5
5
  CredentialsProviderError,
6
6
  getProfileName,
7
7
  parseKnownFiles
8
- } from "./chunk-YYVVWLB2.js";
8
+ } from "./chunk-TKWHSSPF.js";
9
9
  import {
10
10
  HttpRequest
11
- } from "./chunk-GPJBZ6EG.js";
11
+ } from "./chunk-2FPUYYXX.js";
12
12
 
13
13
  // ../../node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js
14
14
  import { createHash, createPrivateKey, createPublicKey, sign } from "crypto";
@@ -64,7 +64,7 @@ var LoginCredentialsFetcher = class _LoginCredentialsFetcher {
64
64
  if (freshExpiry - Date.now() > _LoginCredentialsFetcher.REFRESH_THRESHOLD) {
65
65
  return this.toCredentials(freshToken.accessToken);
66
66
  }
67
- const { SigninClient, CreateOAuth2TokenCommand } = await import("./signin-BM6IHIKX.js");
67
+ const { SigninClient, CreateOAuth2TokenCommand } = await import("./signin-3VN2CNSY.js");
68
68
  const { logger, userAgentAppId } = this.callerClientConfig ?? {};
69
69
  const isH2 = (requestHandler2) => {
70
70
  return requestHandler2?.metadata?.handlerProtocol === "h2";
@@ -291,4 +291,4 @@ var fromLoginCredentials = (init) => async ({ callerClientConfig } = {}) => {
291
291
  export {
292
292
  fromLoginCredentials
293
293
  };
294
- //# sourceMappingURL=dist-es-V3UQXKNJ.js.map
294
+ //# sourceMappingURL=dist-es-RTE7BVXX.js.map
@@ -2,10 +2,10 @@ import {
2
2
  CredentialsProviderError,
3
3
  ProviderError,
4
4
  loadConfig
5
- } from "./chunk-YYVVWLB2.js";
5
+ } from "./chunk-TKWHSSPF.js";
6
6
  import {
7
7
  parseUrl
8
- } from "./chunk-GPJBZ6EG.js";
8
+ } from "./chunk-2FPUYYXX.js";
9
9
 
10
10
  // ../../node_modules/@smithy/credential-provider-imds/dist-es/remoteProvider/ImdsCredentials.js
11
11
  var isImdsCredentials = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.AccessKeyId === "string" && typeof arg.SecretAccessKey === "string" && typeof arg.Token === "string" && typeof arg.Expiration === "string";
@@ -374,4 +374,4 @@ export {
374
374
  httpRequest,
375
375
  providerConfigFromInit
376
376
  };
377
- //# sourceMappingURL=dist-es-LN4LZWKV.js.map
377
+ //# sourceMappingURL=dist-es-V7467ELV.js.map
@@ -1,6 +1,6 @@
1
1
  import {
2
2
  setCredentialFeature
3
- } from "./chunk-RBRHTAJN.js";
3
+ } from "./chunk-ZPM4D2XD.js";
4
4
  import {
5
5
  CredentialsProviderError,
6
6
  TokenProviderError,
@@ -9,8 +9,8 @@ import {
9
9
  getSSOTokenFromFile,
10
10
  loadSsoSessionData,
11
11
  parseKnownFiles
12
- } from "./chunk-YYVVWLB2.js";
13
- import "./chunk-GPJBZ6EG.js";
12
+ } from "./chunk-TKWHSSPF.js";
13
+ import "./chunk-2FPUYYXX.js";
14
14
 
15
15
  // ../../node_modules/@aws-sdk/credential-provider-sso/dist-es/isSsoProfile.js
16
16
  var isSsoProfile = (arg) => arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string");
@@ -21,7 +21,7 @@ var REFRESH_MESSAGE = `To refresh this SSO session run 'aws sso login' with the
21
21
 
22
22
  // ../../node_modules/@aws-sdk/token-providers/dist-es/getSsoOidcClient.js
23
23
  var getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {
24
- const { SSOOIDCClient } = await import("./sso-oidc-IBGZ52NP.js");
24
+ const { SSOOIDCClient } = await import("./sso-oidc-76COL3D2.js");
25
25
  const coalesce = (prop) => init.clientConfig?.[prop] ?? init.parentClientConfig?.[prop] ?? callerClientConfig?.[prop];
26
26
  const ssoOidcClient = new SSOOIDCClient(Object.assign({}, init.clientConfig ?? {}, {
27
27
  region: ssoRegion ?? init.clientConfig?.region,
@@ -33,7 +33,7 @@ var getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {
33
33
 
34
34
  // ../../node_modules/@aws-sdk/token-providers/dist-es/getNewSsoOidcToken.js
35
35
  var getNewSsoOidcToken = async (ssoToken, ssoRegion, init = {}, callerClientConfig) => {
36
- const { CreateTokenCommand } = await import("./sso-oidc-IBGZ52NP.js");
36
+ const { CreateTokenCommand } = await import("./sso-oidc-76COL3D2.js");
37
37
  const ssoOidcClient = await getSsoOidcClient(ssoRegion, init, callerClientConfig);
38
38
  return ssoOidcClient.send(new CreateTokenCommand({
39
39
  clientId: ssoToken.clientId,
@@ -67,7 +67,7 @@ var writeSSOTokenToFile = (id, ssoToken) => {
67
67
  };
68
68
 
69
69
  // ../../node_modules/@aws-sdk/token-providers/dist-es/fromSso.js
70
- var lastRefreshAttemptTime = /* @__PURE__ */ new Date(0);
70
+ var lastRefreshAttemptTimes = /* @__PURE__ */ new Map();
71
71
  var fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
72
72
  init.logger?.debug("@aws-sdk/token-providers - fromSso");
73
73
  const profiles = await parseKnownFiles(init);
@@ -102,11 +102,15 @@ var fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
102
102
  validateTokenKey("accessToken", ssoToken.accessToken);
103
103
  validateTokenKey("expiresAt", ssoToken.expiresAt);
104
104
  const { accessToken, expiresAt } = ssoToken;
105
- const existingToken = { token: accessToken, expiration: new Date(expiresAt) };
105
+ const existingToken = {
106
+ token: accessToken,
107
+ expiration: new Date(expiresAt)
108
+ };
106
109
  if (existingToken.expiration.getTime() - Date.now() > EXPIRE_WINDOW_MS) {
107
110
  return existingToken;
108
111
  }
109
- if (Date.now() - lastRefreshAttemptTime.getTime() < 30 * 1e3) {
112
+ const lastRefreshAttemptTime = lastRefreshAttemptTimes.get(ssoSessionName) ?? 0;
113
+ if (Date.now() - lastRefreshAttemptTime < 30 * 1e3) {
110
114
  validateTokenExpiry(existingToken);
111
115
  return existingToken;
112
116
  }
@@ -114,7 +118,7 @@ var fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {
114
118
  validateTokenKey("clientSecret", ssoToken.clientSecret, true);
115
119
  validateTokenKey("refreshToken", ssoToken.refreshToken, true);
116
120
  try {
117
- lastRefreshAttemptTime.setTime(Date.now());
121
+ lastRefreshAttemptTimes.set(ssoSessionName, Date.now());
118
122
  const newSsoOidcToken = await getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig);
119
123
  validateTokenKey("accessToken", newSsoOidcToken.accessToken);
120
124
  validateTokenKey("expiresIn", newSsoOidcToken.expiresIn);
@@ -181,7 +185,7 @@ var resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoR
181
185
  });
182
186
  }
183
187
  const { accessToken } = token;
184
- const { SSOClient, GetRoleCredentialsCommand } = await import("./loadSso-JTXSMWFI.js");
188
+ const { SSOClient, GetRoleCredentialsCommand } = await import("./loadSso-2Y2JSLM2.js");
185
189
  const sso = ssoClient || new SSOClient(Object.assign({}, clientConfig ?? {}, {
186
190
  logger: clientConfig?.logger ?? callerClientConfig?.logger ?? parentClientConfig?.logger,
187
191
  region: clientConfig?.region ?? ssoRegion,
@@ -314,4 +318,4 @@ export {
314
318
  isSsoProfile,
315
319
  validateSsoProfile
316
320
  };
317
- //# sourceMappingURL=dist-es-RZ3HNVJG.js.map
321
+ //# sourceMappingURL=dist-es-WEW6PTSK.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../../node_modules/@aws-sdk/credential-provider-sso/dist-es/isSsoProfile.js","../../../node_modules/@aws-sdk/token-providers/dist-es/constants.js","../../../node_modules/@aws-sdk/token-providers/dist-es/getSsoOidcClient.js","../../../node_modules/@aws-sdk/token-providers/dist-es/getNewSsoOidcToken.js","../../../node_modules/@aws-sdk/token-providers/dist-es/validateTokenExpiry.js","../../../node_modules/@aws-sdk/token-providers/dist-es/validateTokenKey.js","../../../node_modules/@aws-sdk/token-providers/dist-es/writeSSOTokenToFile.js","../../../node_modules/@aws-sdk/token-providers/dist-es/fromSso.js","../../../node_modules/@aws-sdk/credential-provider-sso/dist-es/resolveSSOCredentials.js","../../../node_modules/@aws-sdk/credential-provider-sso/dist-es/validateSsoProfile.js","../../../node_modules/@aws-sdk/credential-provider-sso/dist-es/fromSSO.js"],"sourcesContent":["export const isSsoProfile = (arg) => arg &&\n (typeof arg.sso_start_url === \"string\" ||\n typeof arg.sso_account_id === \"string\" ||\n typeof arg.sso_session === \"string\" ||\n typeof arg.sso_region === \"string\" ||\n typeof arg.sso_role_name === \"string\");\n","export const EXPIRE_WINDOW_MS = 5 * 60 * 1000;\nexport const REFRESH_MESSAGE = `To refresh this SSO session run 'aws sso login' with the corresponding profile.`;\n","export const getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {\n const { SSOOIDCClient } = await import(\"@aws-sdk/nested-clients/sso-oidc\");\n const coalesce = (prop) => init.clientConfig?.[prop] ?? init.parentClientConfig?.[prop] ?? callerClientConfig?.[prop];\n const ssoOidcClient = new SSOOIDCClient(Object.assign({}, init.clientConfig ?? {}, {\n region: ssoRegion ?? init.clientConfig?.region,\n logger: coalesce(\"logger\"),\n userAgentAppId: coalesce(\"userAgentAppId\"),\n }));\n return ssoOidcClient;\n};\n","import { getSsoOidcClient } from \"./getSsoOidcClient\";\nexport const getNewSsoOidcToken = async (ssoToken, ssoRegion, init = {}, callerClientConfig) => {\n const { CreateTokenCommand } = await import(\"@aws-sdk/nested-clients/sso-oidc\");\n const ssoOidcClient = await getSsoOidcClient(ssoRegion, init, callerClientConfig);\n return ssoOidcClient.send(new CreateTokenCommand({\n clientId: ssoToken.clientId,\n clientSecret: ssoToken.clientSecret,\n refreshToken: ssoToken.refreshToken,\n grantType: \"refresh_token\",\n }));\n};\n","import { TokenProviderError } from \"@smithy/core/config\";\nimport { REFRESH_MESSAGE } from \"./constants\";\nexport const validateTokenExpiry = (token) => {\n if (token.expiration && token.expiration.getTime() < Date.now()) {\n throw new TokenProviderError(`Token is expired. ${REFRESH_MESSAGE}`, false);\n }\n};\n","import { TokenProviderError } from \"@smithy/core/config\";\nimport { REFRESH_MESSAGE } from \"./constants\";\nexport const validateTokenKey = (key, value, forRefresh = false) => {\n if (typeof value === \"undefined\") {\n throw new TokenProviderError(`Value not present for '${key}' in SSO Token${forRefresh ? \". Cannot refresh\" : \"\"}. ${REFRESH_MESSAGE}`, false);\n }\n};\n","import { getSSOTokenFilepath } from \"@smithy/core/config\";\nimport { promises as fsPromises } from \"node:fs\";\nconst { writeFile } = fsPromises;\nexport const writeSSOTokenToFile = (id, ssoToken) => {\n const tokenFilepath = getSSOTokenFilepath(id);\n const tokenString = JSON.stringify(ssoToken, null, 2);\n return writeFile(tokenFilepath, tokenString);\n};\n","import { getProfileName, getSSOTokenFromFile, loadSsoSessionData, parseKnownFiles, TokenProviderError, } from \"@smithy/core/config\";\nimport { EXPIRE_WINDOW_MS, REFRESH_MESSAGE } from \"./constants\";\nimport { getNewSsoOidcToken } from \"./getNewSsoOidcToken\";\nimport { validateTokenExpiry } from \"./validateTokenExpiry\";\nimport { validateTokenKey } from \"./validateTokenKey\";\nimport { writeSSOTokenToFile } from \"./writeSSOTokenToFile\";\nconst lastRefreshAttemptTimes = new Map();\nexport const fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {\n init.logger?.debug(\"@aws-sdk/token-providers - fromSso\");\n const profiles = await parseKnownFiles(init);\n const profileName = getProfileName({\n profile: init.profile ?? callerClientConfig?.profile,\n });\n const profile = profiles[profileName];\n if (!profile) {\n throw new TokenProviderError(`Profile '${profileName}' could not be found in shared credentials file.`, false);\n }\n else if (!profile[\"sso_session\"]) {\n throw new TokenProviderError(`Profile '${profileName}' is missing required property 'sso_session'.`);\n }\n const ssoSessionName = profile[\"sso_session\"];\n const ssoSessions = await loadSsoSessionData(init);\n const ssoSession = ssoSessions[ssoSessionName];\n if (!ssoSession) {\n throw new TokenProviderError(`Sso session '${ssoSessionName}' could not be found in shared credentials file.`, false);\n }\n for (const ssoSessionRequiredKey of [\"sso_start_url\", \"sso_region\"]) {\n if (!ssoSession[ssoSessionRequiredKey]) {\n throw new TokenProviderError(`Sso session '${ssoSessionName}' is missing required property '${ssoSessionRequiredKey}'.`, false);\n }\n }\n const ssoStartUrl = ssoSession[\"sso_start_url\"];\n const ssoRegion = ssoSession[\"sso_region\"];\n let ssoToken;\n try {\n ssoToken = await getSSOTokenFromFile(ssoSessionName);\n }\n catch (e) {\n throw new TokenProviderError(`The SSO session token associated with profile=${profileName} was not found or is invalid. ${REFRESH_MESSAGE}`, false);\n }\n validateTokenKey(\"accessToken\", ssoToken.accessToken);\n validateTokenKey(\"expiresAt\", ssoToken.expiresAt);\n const { accessToken, expiresAt } = ssoToken;\n const existingToken = {\n token: accessToken,\n expiration: new Date(expiresAt),\n };\n if (existingToken.expiration.getTime() - Date.now() > EXPIRE_WINDOW_MS) {\n return existingToken;\n }\n const lastRefreshAttemptTime = lastRefreshAttemptTimes.get(ssoSessionName) ?? 0;\n if (Date.now() - lastRefreshAttemptTime < 30 * 1000) {\n validateTokenExpiry(existingToken);\n return existingToken;\n }\n validateTokenKey(\"clientId\", ssoToken.clientId, true);\n validateTokenKey(\"clientSecret\", ssoToken.clientSecret, true);\n validateTokenKey(\"refreshToken\", ssoToken.refreshToken, true);\n try {\n lastRefreshAttemptTimes.set(ssoSessionName, Date.now());\n const newSsoOidcToken = await getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig);\n validateTokenKey(\"accessToken\", newSsoOidcToken.accessToken);\n validateTokenKey(\"expiresIn\", newSsoOidcToken.expiresIn);\n const newTokenExpiration = new Date(Date.now() + newSsoOidcToken.expiresIn * 1000);\n try {\n await writeSSOTokenToFile(ssoSessionName, {\n ...ssoToken,\n accessToken: newSsoOidcToken.accessToken,\n expiresAt: newTokenExpiration.toISOString(),\n refreshToken: newSsoOidcToken.refreshToken,\n });\n }\n catch (error) {\n }\n return {\n token: newSsoOidcToken.accessToken,\n expiration: newTokenExpiration,\n };\n }\n catch (error) {\n validateTokenExpiry(existingToken);\n return existingToken;\n }\n};\n","import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { fromSso as getSsoTokenProvider } from \"@aws-sdk/token-providers\";\nimport { CredentialsProviderError, getSSOTokenFromFile } from \"@smithy/core/config\";\nconst SHOULD_FAIL_CREDENTIAL_CHAIN = false;\nexport const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, callerClientConfig, profile, filepath, configFilepath, ignoreCache, logger, }) => {\n let token;\n const refreshMessage = `To refresh this SSO session run aws sso login with the corresponding profile.`;\n if (ssoSession) {\n try {\n const _token = await getSsoTokenProvider({\n profile,\n filepath,\n configFilepath,\n ignoreCache,\n clientConfig,\n parentClientConfig,\n logger,\n })({ callerClientConfig });\n token = {\n accessToken: _token.token,\n expiresAt: new Date(_token.expiration).toISOString(),\n };\n }\n catch (e) {\n throw new CredentialsProviderError(e.message, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n }\n else {\n try {\n token = await getSSOTokenFromFile(ssoStartUrl);\n }\n catch (e) {\n throw new CredentialsProviderError(`The SSO session associated with this profile is invalid. ${refreshMessage}`, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n }\n if (new Date(token.expiresAt).getTime() - Date.now() <= 0) {\n throw new CredentialsProviderError(`The SSO session associated with this profile has expired. ${refreshMessage}`, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n const { accessToken } = token;\n const { SSOClient, GetRoleCredentialsCommand } = await import(\"./loadSso.js\");\n const sso = ssoClient ||\n new SSOClient(Object.assign({}, clientConfig ?? {}, {\n logger: clientConfig?.logger ?? callerClientConfig?.logger ?? parentClientConfig?.logger,\n region: clientConfig?.region ?? ssoRegion,\n userAgentAppId: clientConfig?.userAgentAppId ?? callerClientConfig?.userAgentAppId ?? parentClientConfig?.userAgentAppId,\n }));\n let ssoResp;\n try {\n ssoResp = await sso.send(new GetRoleCredentialsCommand({\n accountId: ssoAccountId,\n roleName: ssoRoleName,\n accessToken,\n }));\n }\n catch (e) {\n throw new CredentialsProviderError(e, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n const { roleCredentials: { accessKeyId, secretAccessKey, sessionToken, expiration, credentialScope, accountId } = {}, } = ssoResp;\n if (!accessKeyId || !secretAccessKey || !sessionToken || !expiration) {\n throw new CredentialsProviderError(\"SSO returns an invalid temporary credential.\", {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n const credentials = {\n accessKeyId,\n secretAccessKey,\n sessionToken,\n expiration: new Date(expiration),\n ...(credentialScope && { credentialScope }),\n ...(accountId && { accountId }),\n };\n if (ssoSession) {\n setCredentialFeature(credentials, \"CREDENTIALS_SSO\", \"s\");\n }\n else {\n setCredentialFeature(credentials, \"CREDENTIALS_SSO_LEGACY\", \"u\");\n }\n return credentials;\n};\n","import { CredentialsProviderError } from \"@smithy/core/config\";\nexport const validateSsoProfile = (profile, logger) => {\n const { sso_start_url, sso_account_id, sso_region, sso_role_name } = profile;\n if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {\n throw new CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters \"sso_account_id\", ` +\n `\"sso_region\", \"sso_role_name\", \"sso_start_url\". Got ${Object.keys(profile).join(\", \")}\\nReference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger });\n }\n return profile;\n};\n","import { CredentialsProviderError, getProfileName, loadSsoSessionData, parseKnownFiles } from \"@smithy/core/config\";\nimport { isSsoProfile } from \"./isSsoProfile\";\nimport { resolveSSOCredentials } from \"./resolveSSOCredentials\";\nimport { validateSsoProfile } from \"./validateSsoProfile\";\nexport const fromSSO = (init = {}) => async ({ callerClientConfig } = {}) => {\n init.logger?.debug(\"@aws-sdk/credential-provider-sso - fromSSO\");\n const { ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession } = init;\n const { ssoClient } = init;\n const profileName = getProfileName({\n profile: init.profile ?? callerClientConfig?.profile,\n });\n if (!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession) {\n const profiles = await parseKnownFiles(init);\n const profile = profiles[profileName];\n if (!profile) {\n throw new CredentialsProviderError(`Profile ${profileName} was not found.`, { logger: init.logger });\n }\n if (!isSsoProfile(profile)) {\n throw new CredentialsProviderError(`Profile ${profileName} is not configured with SSO credentials.`, {\n logger: init.logger,\n });\n }\n if (profile?.sso_session) {\n const ssoSessions = await loadSsoSessionData(init);\n const session = ssoSessions[profile.sso_session];\n const conflictMsg = ` configurations in profile ${profileName} and sso-session ${profile.sso_session}`;\n if (ssoRegion && ssoRegion !== session.sso_region) {\n throw new CredentialsProviderError(`Conflicting SSO region` + conflictMsg, {\n tryNextLink: false,\n logger: init.logger,\n });\n }\n if (ssoStartUrl && ssoStartUrl !== session.sso_start_url) {\n throw new CredentialsProviderError(`Conflicting SSO start_url` + conflictMsg, {\n tryNextLink: false,\n logger: init.logger,\n });\n }\n profile.sso_region = session.sso_region;\n profile.sso_start_url = session.sso_start_url;\n }\n const { sso_start_url, sso_account_id, sso_region, sso_role_name, sso_session } = validateSsoProfile(profile, init.logger);\n return resolveSSOCredentials({\n ssoStartUrl: sso_start_url,\n ssoSession: sso_session,\n ssoAccountId: sso_account_id,\n ssoRegion: sso_region,\n ssoRoleName: sso_role_name,\n ssoClient: ssoClient,\n clientConfig: init.clientConfig,\n parentClientConfig: init.parentClientConfig,\n callerClientConfig: init.callerClientConfig,\n profile: profileName,\n filepath: init.filepath,\n configFilepath: init.configFilepath,\n ignoreCache: init.ignoreCache,\n logger: init.logger,\n });\n }\n else if (!ssoStartUrl || !ssoAccountId || !ssoRegion || !ssoRoleName) {\n throw new CredentialsProviderError(\"Incomplete configuration. The fromSSO() argument hash must include \" +\n '\"ssoStartUrl\", \"ssoAccountId\", \"ssoRegion\", \"ssoRoleName\"', { tryNextLink: false, logger: init.logger });\n }\n else {\n return resolveSSOCredentials({\n ssoStartUrl,\n ssoSession,\n ssoAccountId,\n ssoRegion,\n ssoRoleName,\n ssoClient,\n clientConfig: init.clientConfig,\n parentClientConfig: init.parentClientConfig,\n callerClientConfig: init.callerClientConfig,\n profile: profileName,\n filepath: init.filepath,\n configFilepath: init.configFilepath,\n ignoreCache: init.ignoreCache,\n logger: init.logger,\n });\n }\n};\n"],"mappings":";;;;;;;;;;;;;;;AAAO,IAAM,eAAe,CAAC,QAAQ,QAChC,OAAO,IAAI,kBAAkB,YAC1B,OAAO,IAAI,mBAAmB,YAC9B,OAAO,IAAI,gBAAgB,YAC3B,OAAO,IAAI,eAAe,YAC1B,OAAO,IAAI,kBAAkB;;;ACL9B,IAAM,mBAAmB,IAAI,KAAK;AAClC,IAAM,kBAAkB;;;ACDxB,IAAM,mBAAmB,OAAO,WAAW,OAAO,CAAC,GAAG,uBAAuB;AAChF,QAAM,EAAE,cAAc,IAAI,MAAM,OAAO,wBAAkC;AACzE,QAAM,WAAW,CAAC,SAAS,KAAK,eAAe,IAAI,KAAK,KAAK,qBAAqB,IAAI,KAAK,qBAAqB,IAAI;AACpH,QAAM,gBAAgB,IAAI,cAAc,OAAO,OAAO,CAAC,GAAG,KAAK,gBAAgB,CAAC,GAAG;AAAA,IAC/E,QAAQ,aAAa,KAAK,cAAc;AAAA,IACxC,QAAQ,SAAS,QAAQ;AAAA,IACzB,gBAAgB,SAAS,gBAAgB;AAAA,EAC7C,CAAC,CAAC;AACF,SAAO;AACX;;;ACRO,IAAM,qBAAqB,OAAO,UAAU,WAAW,OAAO,CAAC,GAAG,uBAAuB;AAC5F,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,wBAAkC;AAC9E,QAAM,gBAAgB,MAAM,iBAAiB,WAAW,MAAM,kBAAkB;AAChF,SAAO,cAAc,KAAK,IAAI,mBAAmB;AAAA,IAC7C,UAAU,SAAS;AAAA,IACnB,cAAc,SAAS;AAAA,IACvB,cAAc,SAAS;AAAA,IACvB,WAAW;AAAA,EACf,CAAC,CAAC;AACN;;;ACRO,IAAM,sBAAsB,CAAC,UAAU;AAC1C,MAAI,MAAM,cAAc,MAAM,WAAW,QAAQ,IAAI,KAAK,IAAI,GAAG;AAC7D,UAAM,IAAI,mBAAmB,qBAAqB,eAAe,IAAI,KAAK;AAAA,EAC9E;AACJ;;;ACJO,IAAM,mBAAmB,CAAC,KAAK,OAAO,aAAa,UAAU;AAChE,MAAI,OAAO,UAAU,aAAa;AAC9B,UAAM,IAAI,mBAAmB,0BAA0B,GAAG,iBAAiB,aAAa,qBAAqB,EAAE,KAAK,eAAe,IAAI,KAAK;AAAA,EAChJ;AACJ;;;ACLA,SAAS,YAAY,kBAAkB;AACvC,IAAM,EAAE,UAAU,IAAI;AACf,IAAM,sBAAsB,CAAC,IAAI,aAAa;AACjD,QAAM,gBAAgB,oBAAoB,EAAE;AAC5C,QAAM,cAAc,KAAK,UAAU,UAAU,MAAM,CAAC;AACpD,SAAO,UAAU,eAAe,WAAW;AAC/C;;;ACDA,IAAM,0BAA0B,oBAAI,IAAI;AACjC,IAAM,UAAU,CAAC,OAAO,CAAC,MAAM,OAAO,EAAE,mBAAmB,IAAI,CAAC,MAAM;AACzE,OAAK,QAAQ,MAAM,oCAAoC;AACvD,QAAM,WAAW,MAAM,gBAAgB,IAAI;AAC3C,QAAM,cAAc,eAAe;AAAA,IAC/B,SAAS,KAAK,WAAW,oBAAoB;AAAA,EACjD,CAAC;AACD,QAAM,UAAU,SAAS,WAAW;AACpC,MAAI,CAAC,SAAS;AACV,UAAM,IAAI,mBAAmB,YAAY,WAAW,oDAAoD,KAAK;AAAA,EACjH,WACS,CAAC,QAAQ,aAAa,GAAG;AAC9B,UAAM,IAAI,mBAAmB,YAAY,WAAW,+CAA+C;AAAA,EACvG;AACA,QAAM,iBAAiB,QAAQ,aAAa;AAC5C,QAAM,cAAc,MAAM,mBAAmB,IAAI;AACjD,QAAM,aAAa,YAAY,cAAc;AAC7C,MAAI,CAAC,YAAY;AACb,UAAM,IAAI,mBAAmB,gBAAgB,cAAc,oDAAoD,KAAK;AAAA,EACxH;AACA,aAAW,yBAAyB,CAAC,iBAAiB,YAAY,GAAG;AACjE,QAAI,CAAC,WAAW,qBAAqB,GAAG;AACpC,YAAM,IAAI,mBAAmB,gBAAgB,cAAc,mCAAmC,qBAAqB,MAAM,KAAK;AAAA,IAClI;AAAA,EACJ;AACA,QAAM,cAAc,WAAW,eAAe;AAC9C,QAAM,YAAY,WAAW,YAAY;AACzC,MAAI;AACJ,MAAI;AACA,eAAW,MAAM,oBAAoB,cAAc;AAAA,EACvD,SACO,GAAG;AACN,UAAM,IAAI,mBAAmB,iDAAiD,WAAW,iCAAiC,eAAe,IAAI,KAAK;AAAA,EACtJ;AACA,mBAAiB,eAAe,SAAS,WAAW;AACpD,mBAAiB,aAAa,SAAS,SAAS;AAChD,QAAM,EAAE,aAAa,UAAU,IAAI;AACnC,QAAM,gBAAgB;AAAA,IAClB,OAAO;AAAA,IACP,YAAY,IAAI,KAAK,SAAS;AAAA,EAClC;AACA,MAAI,cAAc,WAAW,QAAQ,IAAI,KAAK,IAAI,IAAI,kBAAkB;AACpE,WAAO;AAAA,EACX;AACA,QAAM,yBAAyB,wBAAwB,IAAI,cAAc,KAAK;AAC9E,MAAI,KAAK,IAAI,IAAI,yBAAyB,KAAK,KAAM;AACjD,wBAAoB,aAAa;AACjC,WAAO;AAAA,EACX;AACA,mBAAiB,YAAY,SAAS,UAAU,IAAI;AACpD,mBAAiB,gBAAgB,SAAS,cAAc,IAAI;AAC5D,mBAAiB,gBAAgB,SAAS,cAAc,IAAI;AAC5D,MAAI;AACA,4BAAwB,IAAI,gBAAgB,KAAK,IAAI,CAAC;AACtD,UAAM,kBAAkB,MAAM,mBAAmB,UAAU,WAAW,MAAM,kBAAkB;AAC9F,qBAAiB,eAAe,gBAAgB,WAAW;AAC3D,qBAAiB,aAAa,gBAAgB,SAAS;AACvD,UAAM,qBAAqB,IAAI,KAAK,KAAK,IAAI,IAAI,gBAAgB,YAAY,GAAI;AACjF,QAAI;AACA,YAAM,oBAAoB,gBAAgB;AAAA,QACtC,GAAG;AAAA,QACH,aAAa,gBAAgB;AAAA,QAC7B,WAAW,mBAAmB,YAAY;AAAA,QAC1C,cAAc,gBAAgB;AAAA,MAClC,CAAC;AAAA,IACL,SACO,OAAO;AAAA,IACd;AACA,WAAO;AAAA,MACH,OAAO,gBAAgB;AAAA,MACvB,YAAY;AAAA,IAChB;AAAA,EACJ,SACO,OAAO;AACV,wBAAoB,aAAa;AACjC,WAAO;AAAA,EACX;AACJ;;;AChFA,IAAM,+BAA+B;AAC9B,IAAM,wBAAwB,OAAO,EAAE,aAAa,YAAY,cAAc,WAAW,aAAa,WAAW,cAAc,oBAAoB,oBAAoB,SAAS,UAAU,gBAAgB,aAAa,OAAQ,MAAM;AACxO,MAAI;AACJ,QAAM,iBAAiB;AACvB,MAAI,YAAY;AACZ,QAAI;AACA,YAAM,SAAS,MAAM,QAAoB;AAAA,QACrC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACJ,CAAC,EAAE,EAAE,mBAAmB,CAAC;AACzB,cAAQ;AAAA,QACJ,aAAa,OAAO;AAAA,QACpB,WAAW,IAAI,KAAK,OAAO,UAAU,EAAE,YAAY;AAAA,MACvD;AAAA,IACJ,SACO,GAAG;AACN,YAAM,IAAI,yBAAyB,EAAE,SAAS;AAAA,QAC1C,aAAa;AAAA,QACb;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,EACJ,OACK;AACD,QAAI;AACA,cAAQ,MAAM,oBAAoB,WAAW;AAAA,IACjD,SACO,GAAG;AACN,YAAM,IAAI,yBAAyB,4DAA4D,cAAc,IAAI;AAAA,QAC7G,aAAa;AAAA,QACb;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,EACJ;AACA,MAAI,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ,IAAI,KAAK,IAAI,KAAK,GAAG;AACvD,UAAM,IAAI,yBAAyB,6DAA6D,cAAc,IAAI;AAAA,MAC9G,aAAa;AAAA,MACb;AAAA,IACJ,CAAC;AAAA,EACL;AACA,QAAM,EAAE,YAAY,IAAI;AACxB,QAAM,EAAE,WAAW,0BAA0B,IAAI,MAAM,OAAO,uBAAc;AAC5E,QAAM,MAAM,aACR,IAAI,UAAU,OAAO,OAAO,CAAC,GAAG,gBAAgB,CAAC,GAAG;AAAA,IAChD,QAAQ,cAAc,UAAU,oBAAoB,UAAU,oBAAoB;AAAA,IAClF,QAAQ,cAAc,UAAU;AAAA,IAChC,gBAAgB,cAAc,kBAAkB,oBAAoB,kBAAkB,oBAAoB;AAAA,EAC9G,CAAC,CAAC;AACN,MAAI;AACJ,MAAI;AACA,cAAU,MAAM,IAAI,KAAK,IAAI,0BAA0B;AAAA,MACnD,WAAW;AAAA,MACX,UAAU;AAAA,MACV;AAAA,IACJ,CAAC,CAAC;AAAA,EACN,SACO,GAAG;AACN,UAAM,IAAI,yBAAyB,GAAG;AAAA,MAClC,aAAa;AAAA,MACb;AAAA,IACJ,CAAC;AAAA,EACL;AACA,QAAM,EAAE,iBAAiB,EAAE,aAAa,iBAAiB,cAAc,YAAY,iBAAiB,UAAU,IAAI,CAAC,EAAG,IAAI;AAC1H,MAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,YAAY;AAClE,UAAM,IAAI,yBAAyB,gDAAgD;AAAA,MAC/E,aAAa;AAAA,MACb;AAAA,IACJ,CAAC;AAAA,EACL;AACA,QAAM,cAAc;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,IAAI,KAAK,UAAU;AAAA,IAC/B,GAAI,mBAAmB,EAAE,gBAAgB;AAAA,IACzC,GAAI,aAAa,EAAE,UAAU;AAAA,EACjC;AACA,MAAI,YAAY;AACZ,yBAAqB,aAAa,mBAAmB,GAAG;AAAA,EAC5D,OACK;AACD,yBAAqB,aAAa,0BAA0B,GAAG;AAAA,EACnE;AACA,SAAO;AACX;;;AC1FO,IAAM,qBAAqB,CAAC,SAAS,WAAW;AACnD,QAAM,EAAE,eAAe,gBAAgB,YAAY,cAAc,IAAI;AACrE,MAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,cAAc,CAAC,eAAe;AACpE,UAAM,IAAI,yBAAyB,iJACwB,OAAO,KAAK,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,qFAAwF,EAAE,aAAa,OAAO,OAAO,CAAC;AAAA,EACpN;AACA,SAAO;AACX;;;ACJO,IAAM,UAAU,CAAC,OAAO,CAAC,MAAM,OAAO,EAAE,mBAAmB,IAAI,CAAC,MAAM;AACzE,OAAK,QAAQ,MAAM,4CAA4C;AAC/D,QAAM,EAAE,aAAa,cAAc,WAAW,aAAa,WAAW,IAAI;AAC1E,QAAM,EAAE,UAAU,IAAI;AACtB,QAAM,cAAc,eAAe;AAAA,IAC/B,SAAS,KAAK,WAAW,oBAAoB;AAAA,EACjD,CAAC;AACD,MAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,aAAa,CAAC,eAAe,CAAC,YAAY;AAC5E,UAAM,WAAW,MAAM,gBAAgB,IAAI;AAC3C,UAAM,UAAU,SAAS,WAAW;AACpC,QAAI,CAAC,SAAS;AACV,YAAM,IAAI,yBAAyB,WAAW,WAAW,mBAAmB,EAAE,QAAQ,KAAK,OAAO,CAAC;AAAA,IACvG;AACA,QAAI,CAAC,aAAa,OAAO,GAAG;AACxB,YAAM,IAAI,yBAAyB,WAAW,WAAW,4CAA4C;AAAA,QACjG,QAAQ,KAAK;AAAA,MACjB,CAAC;AAAA,IACL;AACA,QAAI,SAAS,aAAa;AACtB,YAAM,cAAc,MAAM,mBAAmB,IAAI;AACjD,YAAM,UAAU,YAAY,QAAQ,WAAW;AAC/C,YAAM,cAAc,8BAA8B,WAAW,oBAAoB,QAAQ,WAAW;AACpG,UAAI,aAAa,cAAc,QAAQ,YAAY;AAC/C,cAAM,IAAI,yBAAyB,2BAA2B,aAAa;AAAA,UACvE,aAAa;AAAA,UACb,QAAQ,KAAK;AAAA,QACjB,CAAC;AAAA,MACL;AACA,UAAI,eAAe,gBAAgB,QAAQ,eAAe;AACtD,cAAM,IAAI,yBAAyB,8BAA8B,aAAa;AAAA,UAC1E,aAAa;AAAA,UACb,QAAQ,KAAK;AAAA,QACjB,CAAC;AAAA,MACL;AACA,cAAQ,aAAa,QAAQ;AAC7B,cAAQ,gBAAgB,QAAQ;AAAA,IACpC;AACA,UAAM,EAAE,eAAe,gBAAgB,YAAY,eAAe,YAAY,IAAI,mBAAmB,SAAS,KAAK,MAAM;AACzH,WAAO,sBAAsB;AAAA,MACzB,aAAa;AAAA,MACb,YAAY;AAAA,MACZ,cAAc;AAAA,MACd,WAAW;AAAA,MACX,aAAa;AAAA,MACb;AAAA,MACA,cAAc,KAAK;AAAA,MACnB,oBAAoB,KAAK;AAAA,MACzB,oBAAoB,KAAK;AAAA,MACzB,SAAS;AAAA,MACT,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,aAAa,KAAK;AAAA,MAClB,QAAQ,KAAK;AAAA,IACjB,CAAC;AAAA,EACL,WACS,CAAC,eAAe,CAAC,gBAAgB,CAAC,aAAa,CAAC,aAAa;AAClE,UAAM,IAAI,yBAAyB,gIAC8B,EAAE,aAAa,OAAO,QAAQ,KAAK,OAAO,CAAC;AAAA,EAChH,OACK;AACD,WAAO,sBAAsB;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,KAAK;AAAA,MACnB,oBAAoB,KAAK;AAAA,MACzB,oBAAoB,KAAK;AAAA,MACzB,SAAS;AAAA,MACT,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,aAAa,KAAK;AAAA,MAClB,QAAQ,KAAK;AAAA,IACjB,CAAC;AAAA,EACL;AACJ;","names":[]}
@@ -1,11 +1,11 @@
1
1
  import {
2
2
  setCredentialFeature
3
- } from "./chunk-RBRHTAJN.js";
3
+ } from "./chunk-ZPM4D2XD.js";
4
4
  import {
5
5
  CredentialsProviderError,
6
6
  externalDataInterceptor
7
- } from "./chunk-YYVVWLB2.js";
8
- import "./chunk-GPJBZ6EG.js";
7
+ } from "./chunk-TKWHSSPF.js";
8
+ import "./chunk-2FPUYYXX.js";
9
9
 
10
10
  // ../../node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js
11
11
  import { readFileSync } from "fs";
@@ -16,7 +16,7 @@ var fromWebToken = (init) => async (awsIdentityProperties) => {
16
16
  const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;
17
17
  let { roleAssumerWithWebIdentity } = init;
18
18
  if (!roleAssumerWithWebIdentity) {
19
- const { getDefaultRoleAssumerWithWebIdentity } = await import("./sts-44HZWQDH.js");
19
+ const { getDefaultRoleAssumerWithWebIdentity } = await import("./sts-BLFDXC4J.js");
20
20
  roleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity({
21
21
  ...init.clientConfig,
22
22
  credentialProviderLogger: init.logger,
@@ -66,4 +66,4 @@ export {
66
66
  fromTokenFile,
67
67
  fromWebToken
68
68
  };
69
- //# sourceMappingURL=dist-es-J63OY2RR.js.map
69
+ //# sourceMappingURL=dist-es-Z4NFJDXO.js.map
@@ -1,13 +1,14 @@
1
1
  import {
2
2
  Crc32Node
3
- } from "./chunk-RRZDPP7Z.js";
3
+ } from "./chunk-X77CPJUJ.js";
4
4
  import {
5
5
  TypeRegistry,
6
6
  fromHex,
7
7
  fromUtf8,
8
+ hasOwn,
8
9
  toHex,
9
10
  toUtf8
10
- } from "./chunk-GPJBZ6EG.js";
11
+ } from "./chunk-2FPUYYXX.js";
11
12
 
12
13
  // ../../node_modules/@smithy/core/dist-es/submodules/event-streams/eventstream-codec/Int64.js
13
14
  var Int64 = class _Int64 {
@@ -64,7 +65,9 @@ var HeaderMarshaller = class {
64
65
  }
65
66
  format(headers) {
66
67
  const chunks = [];
67
- for (const headerName of Object.keys(headers)) {
68
+ for (const headerName in headers) {
69
+ if (!hasOwn(headers, headerName))
70
+ continue;
68
71
  const bytes = this.fromUtf8(headerName);
69
72
  chunks.push(Uint8Array.from([bytes.byteLength]), bytes, this.formatHeaderValue(headers[headerName]));
70
73
  }
@@ -79,27 +82,27 @@ var HeaderMarshaller = class {
79
82
  formatHeaderValue(header) {
80
83
  switch (header.type) {
81
84
  case "boolean":
82
- return Uint8Array.from([header.value ? HEADER_VALUE_TYPE.boolTrue : HEADER_VALUE_TYPE.boolFalse]);
85
+ return Uint8Array.from([header.value ? 0 : 1]);
83
86
  case "byte":
84
- return Uint8Array.from([HEADER_VALUE_TYPE.byte, header.value]);
87
+ return Uint8Array.from([2, header.value]);
85
88
  case "short":
86
89
  const shortView = new DataView(new ArrayBuffer(3));
87
- shortView.setUint8(0, HEADER_VALUE_TYPE.short);
90
+ shortView.setUint8(0, 3);
88
91
  shortView.setInt16(1, header.value, false);
89
92
  return new Uint8Array(shortView.buffer);
90
93
  case "integer":
91
94
  const intView = new DataView(new ArrayBuffer(5));
92
- intView.setUint8(0, HEADER_VALUE_TYPE.integer);
95
+ intView.setUint8(0, 4);
93
96
  intView.setInt32(1, header.value, false);
94
97
  return new Uint8Array(intView.buffer);
95
98
  case "long":
96
99
  const longBytes = new Uint8Array(9);
97
- longBytes[0] = HEADER_VALUE_TYPE.long;
100
+ longBytes[0] = 5;
98
101
  longBytes.set(header.value.bytes, 1);
99
102
  return longBytes;
100
103
  case "binary":
101
104
  const binView = new DataView(new ArrayBuffer(3 + header.value.byteLength));
102
- binView.setUint8(0, HEADER_VALUE_TYPE.byteArray);
105
+ binView.setUint8(0, 6);
103
106
  binView.setUint16(1, header.value.byteLength, false);
104
107
  const binBytes = new Uint8Array(binView.buffer);
105
108
  binBytes.set(header.value, 3);
@@ -107,14 +110,14 @@ var HeaderMarshaller = class {
107
110
  case "string":
108
111
  const utf8Bytes = this.fromUtf8(header.value);
109
112
  const strView = new DataView(new ArrayBuffer(3 + utf8Bytes.byteLength));
110
- strView.setUint8(0, HEADER_VALUE_TYPE.string);
113
+ strView.setUint8(0, 7);
111
114
  strView.setUint16(1, utf8Bytes.byteLength, false);
112
115
  const strBytes = new Uint8Array(strView.buffer);
113
116
  strBytes.set(utf8Bytes, 3);
114
117
  return strBytes;
115
118
  case "timestamp":
116
119
  const tsBytes = new Uint8Array(9);
117
- tsBytes[0] = HEADER_VALUE_TYPE.timestamp;
120
+ tsBytes[0] = 8;
118
121
  tsBytes.set(Int64.fromNumber(header.value.valueOf()).bytes, 1);
119
122
  return tsBytes;
120
123
  case "uuid":
@@ -122,7 +125,7 @@ var HeaderMarshaller = class {
122
125
  throw new Error(`Invalid UUID received: ${header.value}`);
123
126
  }
124
127
  const uuidBytes = new Uint8Array(17);
125
- uuidBytes[0] = HEADER_VALUE_TYPE.uuid;
128
+ uuidBytes[0] = 9;
126
129
  uuidBytes.set(fromHex(header.value.replace(/-/g, "")), 1);
127
130
  return uuidBytes;
128
131
  }
@@ -135,46 +138,46 @@ var HeaderMarshaller = class {
135
138
  const name = this.toUtf8(new Uint8Array(headers.buffer, headers.byteOffset + position, nameLength));
136
139
  position += nameLength;
137
140
  switch (headers.getUint8(position++)) {
138
- case HEADER_VALUE_TYPE.boolTrue:
141
+ case 0:
139
142
  out[name] = {
140
143
  type: BOOLEAN_TAG,
141
144
  value: true
142
145
  };
143
146
  break;
144
- case HEADER_VALUE_TYPE.boolFalse:
147
+ case 1:
145
148
  out[name] = {
146
149
  type: BOOLEAN_TAG,
147
150
  value: false
148
151
  };
149
152
  break;
150
- case HEADER_VALUE_TYPE.byte:
153
+ case 2:
151
154
  out[name] = {
152
155
  type: BYTE_TAG,
153
156
  value: headers.getInt8(position++)
154
157
  };
155
158
  break;
156
- case HEADER_VALUE_TYPE.short:
159
+ case 3:
157
160
  out[name] = {
158
161
  type: SHORT_TAG,
159
162
  value: headers.getInt16(position, false)
160
163
  };
161
164
  position += 2;
162
165
  break;
163
- case HEADER_VALUE_TYPE.integer:
166
+ case 4:
164
167
  out[name] = {
165
168
  type: INT_TAG,
166
169
  value: headers.getInt32(position, false)
167
170
  };
168
171
  position += 4;
169
172
  break;
170
- case HEADER_VALUE_TYPE.long:
173
+ case 5:
171
174
  out[name] = {
172
175
  type: LONG_TAG,
173
176
  value: new Int64(new Uint8Array(headers.buffer, headers.byteOffset + position, 8))
174
177
  };
175
178
  position += 8;
176
179
  break;
177
- case HEADER_VALUE_TYPE.byteArray:
180
+ case 6:
178
181
  const binaryLength = headers.getUint16(position, false);
179
182
  position += 2;
180
183
  out[name] = {
@@ -183,7 +186,7 @@ var HeaderMarshaller = class {
183
186
  };
184
187
  position += binaryLength;
185
188
  break;
186
- case HEADER_VALUE_TYPE.string:
189
+ case 7:
187
190
  const stringLength = headers.getUint16(position, false);
188
191
  position += 2;
189
192
  out[name] = {
@@ -192,14 +195,14 @@ var HeaderMarshaller = class {
192
195
  };
193
196
  position += stringLength;
194
197
  break;
195
- case HEADER_VALUE_TYPE.timestamp:
198
+ case 8:
196
199
  out[name] = {
197
200
  type: TIMESTAMP_TAG,
198
201
  value: new Date(new Int64(new Uint8Array(headers.buffer, headers.byteOffset + position, 8)).valueOf())
199
202
  };
200
203
  position += 8;
201
204
  break;
202
- case HEADER_VALUE_TYPE.uuid:
205
+ case 9:
203
206
  const uuidBytes = new Uint8Array(headers.buffer, headers.byteOffset + position, 16);
204
207
  position += 16;
205
208
  out[name] = {
@@ -644,7 +647,7 @@ var EventStreamSerde = class {
644
647
  this.defaultContentType = defaultContentType;
645
648
  this.compositeErrorRegistry = compositeErrorRegistry;
646
649
  }
647
- async serializeEventStream({ eventStream, requestSchema, initialRequest }) {
650
+ async serializeEventStream({ eventStream, requestSchema, initialRequest, initialMessageType }) {
648
651
  const marshaller = this.marshaller;
649
652
  const eventStreamMember = requestSchema.getEventStreamMember();
650
653
  const unionSchema = requestSchema.getMemberSchema(eventStreamMember);
@@ -655,7 +658,7 @@ var EventStreamSerde = class {
655
658
  async *[Symbol.asyncIterator]() {
656
659
  if (initialRequest) {
657
660
  const headers = {
658
- ":event-type": { type: "string", value: "initial-request" },
661
+ ":event-type": { type: "string", value: initialMessageType ?? "initial-request" },
659
662
  ":message-type": { type: "string", value: "event" },
660
663
  ":content-type": { type: "string", value: defaultContentType }
661
664
  };
@@ -681,6 +684,8 @@ var EventStreamSerde = class {
681
684
  }
682
685
  let unionMember = "";
683
686
  for (const key in event) {
687
+ if (!hasOwn(event, key))
688
+ continue;
684
689
  if (key !== "__type") {
685
690
  unionMember = key;
686
691
  break;
@@ -699,7 +704,7 @@ var EventStreamSerde = class {
699
704
  };
700
705
  });
701
706
  }
702
- async deserializeEventStream({ response, responseSchema, initialResponseContainer }) {
707
+ async deserializeEventStream({ response, responseSchema, initialResponseContainer, initialMessageType }) {
703
708
  const marshaller = this.marshaller;
704
709
  const eventStreamMember = responseSchema.getEventStreamMember();
705
710
  const unionSchema = responseSchema.getMemberSchema(eventStreamMember);
@@ -708,13 +713,15 @@ var EventStreamSerde = class {
708
713
  const asyncIterable = marshaller.deserialize(response.body, async (event) => {
709
714
  let unionMember = "";
710
715
  for (const key in event) {
716
+ if (!hasOwn(event, key))
717
+ continue;
711
718
  if (key !== "__type") {
712
719
  unionMember = key;
713
720
  break;
714
721
  }
715
722
  }
716
723
  const body = event[unionMember].body;
717
- if (unionMember === "initial-response") {
724
+ if (unionMember === (initialMessageType ?? "initial-response")) {
718
725
  const dataObject = await this.deserializer.read(responseSchema, body);
719
726
  delete dataObject[eventStreamMember];
720
727
  return {
@@ -775,6 +782,8 @@ var EventStreamSerde = class {
775
782
  throw new Error("@smithy::core/protocols - initial-response event encountered in event stream but no response schema given.");
776
783
  }
777
784
  for (const key in firstEvent.value) {
785
+ if (!hasOwn(firstEvent.value, key))
786
+ continue;
778
787
  initialResponseContainer[key] = firstEvent.value[key];
779
788
  }
780
789
  }
@@ -909,4 +918,4 @@ export {
909
918
  resolveEventStreamSerdeConfig,
910
919
  eventStreamSerdeProvider as universalEventStreamSerdeProvider
911
920
  };
912
- //# sourceMappingURL=event-streams-2HBIXE6X.js.map
921
+ //# sourceMappingURL=event-streams-UU2VASBU.js.map