@shumai-one/shumai-agent 0.4.4 → 0.4.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (55) hide show
  1. package/bin/{chunk-h65eqsrp.js → chunk-0cj5msch.js} +3 -3
  2. package/bin/{chunk-a4xcn19j.js → chunk-1d37m677.js} +1 -1
  3. package/bin/{chunk-edkxjkdy.js → chunk-24txjw7q.js} +1 -1
  4. package/bin/{chunk-wzysrq4c.js → chunk-2t5jbvzs.js} +4 -4
  5. package/bin/{chunk-m8jmvj7p.js → chunk-2vqhhfx4.js} +2 -2
  6. package/bin/{chunk-kd561cva.js → chunk-3j8rhhb6.js} +1 -1
  7. package/bin/{chunk-nmxr1m3s.js → chunk-3tyq01ds.js} +1 -1
  8. package/bin/{chunk-hbmbvjjq.js → chunk-3wpxfzzq.js} +1 -1
  9. package/bin/{chunk-8jd9p0bt.js → chunk-4pec163a.js} +9 -9
  10. package/bin/chunk-7kvx932t.js +5 -0
  11. package/bin/{chunk-1y3q1jce.js → chunk-823cbtyz.js} +1 -1
  12. package/bin/{chunk-zdkpvcak.js → chunk-970g1609.js} +3 -3
  13. package/bin/{chunk-as1vqgag.js → chunk-9h9gtpp6.js} +1 -1
  14. package/bin/{chunk-33n9p9q4.js → chunk-9qmwtpe7.js} +2 -2
  15. package/bin/{chunk-sbtjx4y3.js → chunk-aasm5vyx.js} +1 -1
  16. package/bin/{chunk-vnn8sej7.js → chunk-atats4tw.js} +2 -2
  17. package/bin/{chunk-y2adfzyt.js → chunk-b6mdwex7.js} +1 -1
  18. package/bin/{chunk-2mcnt6jh.js → chunk-d4gn62w3.js} +2 -2
  19. package/bin/{chunk-wg6xrc3y.js → chunk-dsa7hrkt.js} +2 -2
  20. package/bin/chunk-e3zr7z0x.js +2 -0
  21. package/bin/{chunk-cwq65x99.js → chunk-ennft9vd.js} +1 -1
  22. package/bin/chunk-exk9p41a.js +2 -0
  23. package/bin/{chunk-tdah647g.js → chunk-febh99c9.js} +8 -8
  24. package/bin/{chunk-wdvv14a7.js → chunk-grtr9507.js} +1 -1
  25. package/bin/{chunk-b2205272.js → chunk-hede4f0t.js} +2 -2
  26. package/bin/{chunk-bbz8hcag.js → chunk-m29915f4.js} +1 -1
  27. package/bin/{chunk-gekdwjxf.js → chunk-mgbbvwwf.js} +1 -1
  28. package/bin/{chunk-07a5rjnq.js → chunk-n0n9fgn1.js} +1 -1
  29. package/bin/{chunk-5n4wvh5p.js → chunk-qqgj9egf.js} +1 -1
  30. package/bin/{chunk-gqtret3n.js → chunk-tq7ww1gn.js} +1 -1
  31. package/bin/{chunk-td2tpqfb.js → chunk-tynnehxy.js} +4 -4
  32. package/bin/{chunk-4926dhzq.js → chunk-x4jpqkpg.js} +2 -2
  33. package/bin/chunk-xmvfmtgw.js +11 -0
  34. package/bin/{chunk-6195gx01.js → chunk-yn6y5mmz.js} +2 -2
  35. package/bin/{chunk-k975ym8c.js → chunk-z405a2f4.js} +3 -3
  36. package/bin/{chunk-vv932dz6.js → chunk-zep8byj0.js} +1 -1
  37. package/bin/{chunk-e7m6nsvr.js → chunk-zpsghvqm.js} +1 -1
  38. package/bin/shumai-agent-app.js +677 -442
  39. package/package.json +7 -7
  40. package/prisma/migrations/20260913130237_add_asset_comment_asset_id_idx/migration.sql +2 -0
  41. package/prisma/migrations/20260914024424_add_asset_comment_reactions/migration.sql +22 -0
  42. package/prisma/migrations/20260914064432_limit_reaction_code_length/migration.sql +8 -0
  43. package/prisma/migrations/20260914092940_add_jpeg_preview_flags/migration.sql +5 -0
  44. package/prisma/schema.prisma +22 -0
  45. package/bin/chunk-40bcg5we.js +0 -2
  46. package/bin/chunk-s1e2nv5w.js +0 -5
  47. package/bin/chunk-sfx1j3yr.js +0 -11
  48. package/bin/chunk-vvvkt1vd.js +0 -2
  49. /package/bin/{chunk-jt36jdn3.js → chunk-3q76529s.js} +0 -0
  50. /package/bin/{chunk-8tj47emj.js → chunk-3y4jh5dx.js} +0 -0
  51. /package/bin/{chunk-sq5rat8t.js → chunk-5024whgd.js} +0 -0
  52. /package/bin/{chunk-dc4f80kq.js → chunk-c7hmqhad.js} +0 -0
  53. /package/bin/{chunk-fvz08he3.js → chunk-enx8wnya.js} +0 -0
  54. /package/bin/{chunk-1a493esq.js → chunk-qysjx19x.js} +0 -0
  55. /package/bin/{chunk-jkx975yd.js → chunk-tw29jf2n.js} +0 -0
package/bin/{chunk-h65eqsrp.js → chunk-0cj5msch.js} RENAMED
@@ -1,7 +1,7 @@
1
1
  // @bun
2
- import{m,b,h,f,ee}from"./shumai-agent-app.js";import{i}from"./chunk-y2adfzyt.js";var S=i(f()),d=i(m()),O=i(ee());import K from"fs/promises";var p=i(m());var U="169.254.170.2",k="169.254.170.23",H="[fd00:ec2::23]",_=(e,o)=>{if(e.protocol==="https:")return;if(e.hostname===U||e.hostname===k||e.hostname===H)return;if(e.hostname.includes("[")){if(e.hostname==="[::1]"||e.hostname==="[0000:0000:0000:0000:0000:0000:0000:0001]")return}else{if(e.hostname==="localhost")return;let n=e.hostname.split("."),r=(t)=>{let s=parseInt(t,10);return 0<=s&&s<=255};if(n[0]==="127"&&r(n[1])&&r(n[2])&&r(n[3])&&n.length===4)return}throw new p.CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
2
+ import{m,C,h,f,ee}from"./shumai-agent-app.js";import{i}from"./chunk-b6mdwex7.js";var O=i(f()),d=i(m()),y=i(ee());import P from"fs/promises";var _=i(m());var k="169.254.170.2",H="169.254.170.23",K="[fd00:ec2::23]",I=(e,o)=>{if(e.protocol==="https:")return;if(e.hostname===k||e.hostname===H||e.hostname===K)return;if(e.hostname.includes("[")){if(e.hostname==="[::1]"||e.hostname==="[0000:0000:0000:0000:0000:0000:0000:0001]")return}else{if(e.hostname==="localhost")return;let n=e.hostname.split("."),r=(t)=>{let s=parseInt(t,10);return 0<=s&&s<=255};if(n[0]==="127"&&r(n[1])&&r(n[2])&&r(n[3])&&n.length===4)return}throw new _.CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
3
3
  - loopback CIDR 127.0.0.0/8 or [::1/128]
4
4
  - ECS container host 169.254.170.2
5
- - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:o})};var c=i(m()),I=i(h()),u=i(b()),E=i(b());function N(e){return new I.HttpRequest({protocol:e.protocol,hostname:e.hostname,port:Number(e.port),path:e.pathname,query:Array.from(e.searchParams.entries()).reduce((o,[n,r])=>(o[n]=r,o),{}),fragment:e.hash})}async function w(e,o){let r=await E.sdkStreamMixin(e.body).transformToString();if(e.statusCode===200){let t=JSON.parse(r);if(typeof t.AccessKeyId!=="string"||typeof t.SecretAccessKey!=="string"||typeof t.Token!=="string"||typeof t.Expiration!=="string")throw new c.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:o});return{accessKeyId:t.AccessKeyId,secretAccessKey:t.SecretAccessKey,sessionToken:t.Token,expiration:u.parseRfc3339DateTime(t.Expiration)}}if(e.statusCode>=400&&e.statusCode<500){let t={};try{t=JSON.parse(r)}catch(s){}throw Object.assign(new c.CredentialsProviderError(`Server responded with status: ${e.statusCode}`,{logger:o}),{Code:t.Code,Message:t.Message})}throw new c.CredentialsProviderError(`Server responded with status: ${e.statusCode}`,{logger:o})}var R=(e,o,n)=>async()=>{for(let r=0;r<o;++r)try{return await e()}catch(t){await new Promise((s)=>setTimeout(s,n))}return await e()};var P="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",F="http://169.254.170.2",x="AWS_CONTAINER_CREDENTIALS_FULL_URI",D="AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",W="AWS_CONTAINER_AUTHORIZATION_TOKEN",q=(e={})=>{e.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");let o,n=e.awsContainerCredentialsRelativeUri??process.env[P],r=e.awsContainerCredentialsFullUri??process.env[x],t=e.awsContainerAuthorizationToken??process.env[W],s=e.awsContainerAuthorizationTokenFile??process.env[D],a=e.logger?.constructor?.name==="NoOpLogger"||!e.logger?.warn?console.warn:e.logger.warn.bind(e.logger);if(n&&r)a("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),a("awsContainerCredentialsRelativeUri will take precedence.");if(t&&s)a("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),a("awsContainerAuthorizationTokenFile will take precedence.");if(n)o=`${F}${n}`;else if(r)o=r;else throw new d.CredentialsProviderError(`No HTTP credential provider host provided.
6
- Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:e.logger});let A=new URL(o);_(A,e.logger);let C=O.NodeHttpHandler.create({connectionTimeout:e.timeout??1000}),y=e.timeout??1000,v=R(async()=>{let T=N(A);if(s)T.headers.Authorization=g((await K.readFile(s)).toString());else if(t)T.headers.Authorization=g(t);try{let l=await C.handle(T,{requestTimeout:y});return w(l.response).then((L)=>S.setCredentialFeature(L,"CREDENTIALS_HTTP","z"))}catch(l){throw new d.CredentialsProviderError(String(l),{logger:e.logger})}},e.maxRetries??3,e.timeout??1000);return async()=>{try{return await v()}finally{C.destroy?.()}}},g=(e)=>{if(e.includes(`\r
5
+ - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:o})};var c=i(m()),u=i(h()),E=i(C()),N=i(C());function w(e){return new u.HttpRequest({protocol:e.protocol,hostname:e.hostname,port:Number(e.port),path:e.pathname,query:Array.from(e.searchParams.entries()).reduce((o,[n,r])=>(o[n]=r,o),{}),fragment:e.hash})}async function R(e,o){let r=await N.sdkStreamMixin(e.body).transformToString();if(e.statusCode===200){let t=JSON.parse(r);if(typeof t.AccessKeyId!=="string"||typeof t.SecretAccessKey!=="string"||typeof t.Token!=="string"||typeof t.Expiration!=="string")throw new c.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:o});return{accessKeyId:t.AccessKeyId,secretAccessKey:t.SecretAccessKey,sessionToken:t.Token,expiration:E.parseRfc3339DateTime(t.Expiration)}}if(e.statusCode>=400&&e.statusCode<500){let t={};try{t=JSON.parse(r)}catch(s){}throw Object.assign(new c.CredentialsProviderError(`Server responded with status: ${e.statusCode}`,{logger:o}),{Code:t.Code,Message:t.Message})}throw new c.CredentialsProviderError(`Server responded with status: ${e.statusCode}`,{logger:o})}var g=(e,o,n)=>async()=>{for(let r=0;r<o;++r)try{return await e()}catch(t){await new Promise((s)=>setTimeout(s,n))}return await e()};var F="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",x="http://169.254.170.2",D="AWS_CONTAINER_CREDENTIALS_FULL_URI",W="AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",b="AWS_CONTAINER_AUTHORIZATION_TOKEN",q=(e={})=>{e.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");let o,n=e.awsContainerCredentialsRelativeUri??process.env[F],r=e.awsContainerCredentialsFullUri??process.env[D],t=e.awsContainerAuthorizationToken??process.env[b],s=e.awsContainerAuthorizationTokenFile??process.env[W],a=e.logger?.constructor?.name==="NoOpLogger"||!e.logger?.warn?console.warn:e.logger.warn.bind(e.logger);if(n&&r)a("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),a("awsContainerCredentialsRelativeUri will take precedence.");if(t&&s)a("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),a("awsContainerAuthorizationTokenFile will take precedence.");if(n)o=`${x}${n}`;else if(r)o=r;else throw new d.CredentialsProviderError(`No HTTP credential provider host provided.
6
+ Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:e.logger});let A=new URL(o);I(A,e.logger);let p=y.NodeHttpHandler.create({connectionTimeout:e.timeout??1000}),v=e.timeout??1000,L=g(async()=>{let T=w(A);if(s)T.headers.Authorization=S((await P.readFile(s)).toString());else if(t)T.headers.Authorization=S(t);try{let l=await p.handle(T,{requestTimeout:v});return R(l.response).then((U)=>O.setCredentialFeature(U,"CREDENTIALS_HTTP","z"))}catch(l){throw new d.CredentialsProviderError(String(l),{logger:e.logger})}},e.maxRetries??3,e.timeout??1000);return async()=>{try{return await L()}finally{p.destroy?.()}}},S=(e)=>{if(e.includes(`\r
7
7
  `))throw new d.CredentialsProviderError("Authorization token contains invalid \\r\\n sequence.");return e};export{q as fromHttp};
package/bin/{chunk-a4xcn19j.js → chunk-1d37m677.js} RENAMED
@@ -1,3 +1,3 @@
1
1
  // @bun
2
- import{m,f}from"./shumai-agent-app.js";import{i}from"./chunk-y2adfzyt.js";var S=i(m());var U=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string");var P=i(f());var p=i(m());var j=300000,x="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var q=async(e,o={},r)=>{let{SSOOIDCClient:t}=await import("./chunk-vv932dz6.js"),n=(g)=>o.clientConfig?.[g]??o.parentClientConfig?.[g]??r?.[g];return new t(Object.assign({},o.clientConfig??{},{region:e??o.clientConfig?.region,logger:n("logger"),userAgentAppId:n("userAgentAppId")}))};var W=async(e,o,r={},t)=>{let{CreateTokenCommand:n}=await import("./chunk-vv932dz6.js");return(await q(o,r,t)).send(new n({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))};var X=i(m());var R=(e)=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new X.TokenProviderError(`Token is expired. ${x}`,!1)};var z=i(m());var u=(e,o,r=!1)=>{if(typeof o>"u")throw new z.TokenProviderError(`Value not present for '${e}' in SSO Token${r?". Cannot refresh":""}. ${x}`,!1)};var J=i(m());import{promises as ee}from"fs";var{writeFile:oe}=ee,V=(e,o)=>{let r=J.getSSOTokenFilepath(e),t=JSON.stringify(o,null,2);return oe(r,t)};var Y=new Map,v=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let r=await p.parseKnownFiles(e),t=p.getProfileName({profile:e.profile??o?.profile}),n=r[t];if(!n)throw new p.TokenProviderError(`Profile '${t}' could not be found in shared credentials file.`,!1);else if(!n.sso_session)throw new p.TokenProviderError(`Profile '${t}' is missing required property 'sso_session'.`);let a=n.sso_session,d=(await p.loadSsoSessionData(e))[a];if(!d)throw new p.TokenProviderError(`Sso session '${a}' could not be found in shared credentials file.`,!1);for(let c of["sso_start_url","sso_region"])if(!d[c])throw new p.TokenProviderError(`Sso session '${a}' is missing required property '${c}'.`,!1);let{sso_start_url:w,sso_region:A}=d,s;try{s=await p.getSSOTokenFromFile(a)}catch(c){throw new p.TokenProviderError(`The SSO session token associated with profile=${t} was not found or is invalid. ${x}`,!1)}u("accessToken",s.accessToken),u("expiresAt",s.expiresAt);let{accessToken:C,expiresAt:O}=s,l={token:C,expiration:new Date(O)};if(l.expiration.getTime()-Date.now()>j)return l;let h=Y.get(a)??0;if(Date.now()-h<30000)return R(l),l;u("clientId",s.clientId,!0),u("clientSecret",s.clientSecret,!0),u("refreshToken",s.refreshToken,!0);try{Y.set(a,Date.now());let c=await W(s,A,e,o);u("accessToken",c.accessToken),u("expiresIn",c.expiresIn);let y=new Date(Date.now()+c.expiresIn*1000);try{await V(a,{...s,accessToken:c.accessToken,expiresAt:y.toISOString(),refreshToken:c.refreshToken})}catch(k){}return{token:c.accessToken,expiration:y}}catch(c){return R(l),l}};var _=i(m()),E=!1,F=async({ssoStartUrl:e,ssoSession:o,ssoAccountId:r,ssoRegion:t,ssoRoleName:n,ssoClient:a,clientConfig:g,parentClientConfig:d,callerClientConfig:w,profile:A,filepath:s,configFilepath:C,ignoreCache:O,logger:l})=>{let h,c="To refresh this SSO session run aws sso login with the corresponding profile.";if(o)try{let T=await v({profile:A,filepath:s,configFilepath:C,ignoreCache:O,clientConfig:g,parentClientConfig:d,logger:l})({callerClientConfig:w});h={accessToken:T.token,expiresAt:new Date(T.expiration).toISOString()}}catch(T){throw new _.CredentialsProviderError(T.message,{tryNextLink:E,logger:l})}else try{h=await _.getSSOTokenFromFile(e)}catch(T){throw new _.CredentialsProviderError("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:E,logger:l})}if(new Date(h.expiresAt).getTime()-Date.now()<=0)throw new _.CredentialsProviderError("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:E,logger:l});let{accessToken:y}=h,{SSOClient:k,GetRoleCredentialsCommand:I}=await import("./chunk-edkxjkdy.js"),Z=a||new k(Object.assign({},g??{},{logger:g?.logger??w?.logger??d?.logger,region:g?.region??t,userAgentAppId:g?.userAgentAppId??w?.userAgentAppId??d?.userAgentAppId})),D;try{D=await Z.send(new I({accountId:r,roleName:n,accessToken:y}))}catch(T){throw new _.CredentialsProviderError(T,{tryNextLink:E,logger:l})}let{roleCredentials:{accessKeyId:L,secretAccessKey:M,sessionToken:b,expiration:G,credentialScope:K,accountId:H}={}}=D;if(!L||!M||!b||!G)throw new _.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:E,logger:l});let N={accessKeyId:L,secretAccessKey:M,sessionToken:b,expiration:new Date(G),...K&&{credentialScope:K},...H&&{accountId:H}};if(o)P.setCredentialFeature(N,"CREDENTIALS_SSO","s");else P.setCredentialFeature(N,"CREDENTIALS_SSO_LEGACY","u");return N};var B=i(m()),Q=(e,o)=>{let{sso_start_url:r,sso_account_id:t,sso_region:n,sso_role_name:a}=e;if(!r||!t||!n||!a)throw new B.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
2
+ import{m,f}from"./shumai-agent-app.js";import{i}from"./chunk-b6mdwex7.js";var S=i(m());var U=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string");var P=i(f());var p=i(m());var j=300000,x="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var q=async(e,o={},r)=>{let{SSOOIDCClient:t}=await import("./chunk-zep8byj0.js"),n=(g)=>o.clientConfig?.[g]??o.parentClientConfig?.[g]??r?.[g];return new t(Object.assign({},o.clientConfig??{},{region:e??o.clientConfig?.region,logger:n("logger"),userAgentAppId:n("userAgentAppId")}))};var W=async(e,o,r={},t)=>{let{CreateTokenCommand:n}=await import("./chunk-zep8byj0.js");return(await q(o,r,t)).send(new n({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))};var X=i(m());var R=(e)=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new X.TokenProviderError(`Token is expired. ${x}`,!1)};var z=i(m());var u=(e,o,r=!1)=>{if(typeof o>"u")throw new z.TokenProviderError(`Value not present for '${e}' in SSO Token${r?". Cannot refresh":""}. ${x}`,!1)};var J=i(m());import{promises as ee}from"fs";var{writeFile:oe}=ee,V=(e,o)=>{let r=J.getSSOTokenFilepath(e),t=JSON.stringify(o,null,2);return oe(r,t)};var Y=new Map,v=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let r=await p.parseKnownFiles(e),t=p.getProfileName({profile:e.profile??o?.profile}),n=r[t];if(!n)throw new p.TokenProviderError(`Profile '${t}' could not be found in shared credentials file.`,!1);else if(!n.sso_session)throw new p.TokenProviderError(`Profile '${t}' is missing required property 'sso_session'.`);let a=n.sso_session,d=(await p.loadSsoSessionData(e))[a];if(!d)throw new p.TokenProviderError(`Sso session '${a}' could not be found in shared credentials file.`,!1);for(let c of["sso_start_url","sso_region"])if(!d[c])throw new p.TokenProviderError(`Sso session '${a}' is missing required property '${c}'.`,!1);let{sso_start_url:w,sso_region:A}=d,s;try{s=await p.getSSOTokenFromFile(a)}catch(c){throw new p.TokenProviderError(`The SSO session token associated with profile=${t} was not found or is invalid. ${x}`,!1)}u("accessToken",s.accessToken),u("expiresAt",s.expiresAt);let{accessToken:C,expiresAt:O}=s,l={token:C,expiration:new Date(O)};if(l.expiration.getTime()-Date.now()>j)return l;let h=Y.get(a)??0;if(Date.now()-h<30000)return R(l),l;u("clientId",s.clientId,!0),u("clientSecret",s.clientSecret,!0),u("refreshToken",s.refreshToken,!0);try{Y.set(a,Date.now());let c=await W(s,A,e,o);u("accessToken",c.accessToken),u("expiresIn",c.expiresIn);let y=new Date(Date.now()+c.expiresIn*1000);try{await V(a,{...s,accessToken:c.accessToken,expiresAt:y.toISOString(),refreshToken:c.refreshToken})}catch(k){}return{token:c.accessToken,expiration:y}}catch(c){return R(l),l}};var _=i(m()),E=!1,F=async({ssoStartUrl:e,ssoSession:o,ssoAccountId:r,ssoRegion:t,ssoRoleName:n,ssoClient:a,clientConfig:g,parentClientConfig:d,callerClientConfig:w,profile:A,filepath:s,configFilepath:C,ignoreCache:O,logger:l})=>{let h,c="To refresh this SSO session run aws sso login with the corresponding profile.";if(o)try{let T=await v({profile:A,filepath:s,configFilepath:C,ignoreCache:O,clientConfig:g,parentClientConfig:d,logger:l})({callerClientConfig:w});h={accessToken:T.token,expiresAt:new Date(T.expiration).toISOString()}}catch(T){throw new _.CredentialsProviderError(T.message,{tryNextLink:E,logger:l})}else try{h=await _.getSSOTokenFromFile(e)}catch(T){throw new _.CredentialsProviderError("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:E,logger:l})}if(new Date(h.expiresAt).getTime()-Date.now()<=0)throw new _.CredentialsProviderError("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:E,logger:l});let{accessToken:y}=h,{SSOClient:k,GetRoleCredentialsCommand:I}=await import("./chunk-24txjw7q.js"),Z=a||new k(Object.assign({},g??{},{logger:g?.logger??w?.logger??d?.logger,region:g?.region??t,userAgentAppId:g?.userAgentAppId??w?.userAgentAppId??d?.userAgentAppId})),D;try{D=await Z.send(new I({accountId:r,roleName:n,accessToken:y}))}catch(T){throw new _.CredentialsProviderError(T,{tryNextLink:E,logger:l})}let{roleCredentials:{accessKeyId:L,secretAccessKey:M,sessionToken:b,expiration:G,credentialScope:K,accountId:H}={}}=D;if(!L||!M||!b||!G)throw new _.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:E,logger:l});let N={accessKeyId:L,secretAccessKey:M,sessionToken:b,expiration:new Date(G),...K&&{credentialScope:K},...H&&{accountId:H}};if(o)P.setCredentialFeature(N,"CREDENTIALS_SSO","s");else P.setCredentialFeature(N,"CREDENTIALS_SSO_LEGACY","u");return N};var B=i(m()),Q=(e,o)=>{let{sso_start_url:r,sso_account_id:t,sso_region:n,sso_role_name:a}=e;if(!r||!t||!n||!a)throw new B.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
3
3
  Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:o});return e};var se=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:r,ssoAccountId:t,ssoRegion:n,ssoRoleName:a,ssoSession:g}=e,{ssoClient:d}=e,w=S.getProfileName({profile:e.profile??o?.profile});if(!r&&!t&&!n&&!a&&!g){let s=(await S.parseKnownFiles(e))[w];if(!s)throw new S.CredentialsProviderError(`Profile ${w} was not found.`,{logger:e.logger});if(!U(s))throw new S.CredentialsProviderError(`Profile ${w} is not configured with SSO credentials.`,{logger:e.logger});if(s?.sso_session){let k=(await S.loadSsoSessionData(e))[s.sso_session],I=` configurations in profile ${w} and sso-session ${s.sso_session}`;if(n&&n!==k.sso_region)throw new S.CredentialsProviderError("Conflicting SSO region"+I,{tryNextLink:!1,logger:e.logger});if(r&&r!==k.sso_start_url)throw new S.CredentialsProviderError("Conflicting SSO start_url"+I,{tryNextLink:!1,logger:e.logger});s.sso_region=k.sso_region,s.sso_start_url=k.sso_start_url}let{sso_start_url:C,sso_account_id:O,sso_region:l,sso_role_name:h,sso_session:c}=Q(s,e.logger);return F({ssoStartUrl:C,ssoSession:c,ssoAccountId:O,ssoRegion:l,ssoRoleName:h,ssoClient:d,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:w,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}else if(!r||!t||!n||!a)throw new S.CredentialsProviderError('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});else return F({ssoStartUrl:r,ssoSession:g,ssoAccountId:t,ssoRegion:n,ssoRoleName:a,ssoClient:d,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:w,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})};export{se as fromSSO};
package/bin/{chunk-edkxjkdy.js → chunk-24txjw7q.js} RENAMED
@@ -1,2 +1,2 @@
1
1
  // @bun
2
- import{G,E,m,N,b,V,h,q,H,f,pe,K,ee}from"./shumai-agent-app.js";var{awsEndpointFunctions:re,emitWarningIfUnsupportedVersion:ie,createDefaultUserAgentProvider:ae,NODE_APP_ID_CONFIG_OPTIONS:ce,getAwsRegionExtensionConfiguration:ue,resolveAwsRegionExtensionConfiguration:de,resolveUserAgentConfig:le,resolveHostHeaderConfig:he,getUserAgentPlugin:ge,getHostHeaderPlugin:me,getLoggerPlugin:_e,getRecursionDetectionPlugin:Se}=f(),{NoAuthSigner:fe,getHttpAuthSchemeEndpointRuleSetPlugin:Ee,DefaultIdentityProviderConfig:Pe,getHttpSigningPlugin:ve}=H(),{normalizeProvider:L,getSmithyContext:Re,ServiceException:Ce,NoOpLogger:xe,emitWarningIfUnsupportedVersion:Ie,loadConfigsForDefaultMode:Ae,getDefaultExtensionConfiguration:ye,resolveDefaultRuntimeConfig:Oe,Client:Te,makeBuilder:De,createAggregatedClient:Ne}=E(),{Command:fs}=E();var{resolveDefaultsModeConfig:we,loadConfig:a,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:ke,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:be,NODE_REGION_CONFIG_OPTIONS:Fe,NODE_REGION_CONFIG_FILE_OPTIONS:$e,resolveRegionConfig:qe}=m(),{BinaryDecisionDiagram:He,EndpointCache:Ue,decideEndpoint:Ge,customEndpointFunctions:Me,resolveEndpointConfig:ze,getEndpointPlugin:je}=N(),{parseUrl:Le,getHttpHandlerExtensionConfiguration:Ke,resolveHttpHandlerRuntimeConfig:Ve,getContentLengthPlugin:Be}=h(),{DEFAULT_RETRY_MODE:We,NODE_RETRY_MODE_CONFIG_OPTIONS:Qe,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:Ye,resolveRetryConfig:Je,getRetryPlugin:Xe}=q(),{TypeRegistry:B,getSchemaSerdePlugin:Ze}=G(),{resolveAwsSdkSigV4Config:et,AwsSdkSigV4Signer:tt,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:st}=K(),{toUtf8:ot,fromUtf8:nt,toBase64:rt,fromBase64:it,calculateBodyLength:at}=b(),{streamCollector:ct,NodeHttpHandler:ut}=ee(),{AwsRestJsonProtocol:dt}=pe(),{Sha256:lt}=V(),pt=async(e,t,s)=>({operation:Re(t).operation,region:await L(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function ht(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:e.region},propertiesExtractor:(t,s)=>({signingProperties:{config:t,context:s}})}}function gt(e){return{schemeId:"smithy.api#noAuth"}}var mt=(e)=>{let t=[];switch(e.operation){case"GetRoleCredentials":{t.push(gt());break}default:t.push(ht(e))}return t},_t=(e)=>{let t=et(e);return Object.assign(t,{authSchemePreference:L(e.authSchemePreference??[])})},St=(e)=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"}),ft={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Et="3.997.43",Pt={version:Et},l="ref",c=-1,_=!0,F="isSet",W="PartitionResult",S="booleanEquals",I="getAttr",U={[l]:"Endpoint"},A={[l]:W},d={},M=[{[l]:"Region"}],z={conditions:[[F,[U]],[F,M],["aws.partition",M,W],[S,[{[l]:"UseFIPS"},_]],[S,[{[l]:"UseDualStack"},_]],[S,[{fn:I,argv:[A,"supportsDualStack"]},_]],[S,[{fn:I,argv:[A,"supportsFIPS"]},_]],["stringEquals",[{fn:I,argv:[A,"name"]},"aws-us-gov"]]],results:[[c],[c,"Invalid Configuration: FIPS and custom endpoint are not supported"],[c,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[U,d],["https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",d],[c,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://portal.sso.{Region}.amazonaws.com",d],["https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",d],[c,"FIPS is enabled but this partition does not support FIPS"],["https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",d],[c,"DualStack is enabled but this partition does not support DualStack"],["https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",d],[c,"Invalid Configuration: Missing Region"]]},vt=2,n=1e8,Rt=new Int32Array([-1,1,-1,0,13,3,1,4,n+12,2,5,n+12,3,8,6,4,7,n+11,5,n+9,n+10,4,11,9,6,10,n+8,7,n+6,n+7,5,12,n+5,6,n+4,n+5,3,n+1,14,4,n+2,n+3]),Ct=He.from(Rt,vt,z.conditions,z.results),xt=new Ue({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),It=(e,t={})=>xt.get(e,()=>Ge(Ct,{endpointParams:e,logger:t.logger}));Me.aws=re;class u extends Ce{constructor(e){super(e);Object.setPrototypeOf(this,u.prototype)}}class y extends u{name="InvalidRequestException";$fault="client";constructor(e){super({name:"InvalidRequestException",$fault:"client",...e});Object.setPrototypeOf(this,y.prototype)}}class O extends u{name="ResourceNotFoundException";$fault="client";constructor(e){super({name:"ResourceNotFoundException",$fault:"client",...e});Object.setPrototypeOf(this,O.prototype)}}class T extends u{name="TooManyRequestsException";$fault="client";constructor(e){super({name:"TooManyRequestsException",$fault:"client",...e});Object.setPrototypeOf(this,T.prototype)}}class D extends u{name="UnauthorizedException";$fault="client";constructor(e){super({name:"UnauthorizedException",$fault:"client",...e});Object.setPrototypeOf(this,D.prototype)}}var At="AccessTokenType",yt="GetRoleCredentials",Ot="GetRoleCredentialsRequest",Tt="GetRoleCredentialsResponse",Dt="InvalidRequestException",Nt="RoleCredentials",wt="ResourceNotFoundException",kt="SecretAccessKeyType",bt="SessionTokenType",Ft="TooManyRequestsException",$t="UnauthorizedException",qt="accountId",Ht="accessKeyId",Ut="accessToken",Gt="account_id",P="client",v="error",Mt="expiration",zt="http",R="httpError",jt="httpHeader",j="httpQuery",C="message",Lt="roleCredentials",Kt="roleName",Vt="role_name",Q="smithy.ts.sdk.synthetic.com.amazonaws.sso",Bt="secretAccessKey",Wt="sessionToken",Qt="x-amz-sso_bearer_token",r="com.amazonaws.sso",Y=B.for(Q),Yt=[-3,Q,"SSOServiceException",0,[],[]];Y.registerError(Yt,u);var p=B.for(r),Jt=[-3,r,Dt,{[v]:P,[R]:400},[C],[0]];p.registerError(Jt,y);var Xt=[-3,r,wt,{[v]:P,[R]:404},[C],[0]];p.registerError(Xt,O);var Zt=[-3,r,Ft,{[v]:P,[R]:429},[C],[0]];p.registerError(Zt,T);var es=[-3,r,$t,{[v]:P,[R]:401},[C],[0]];p.registerError(es,D);var ts=[Y,p],ss=[0,r,At,8,0],os=[0,r,kt,8,0],ns=[0,r,bt,8,0],rs=[3,r,Ot,0,[Kt,qt,Ut],[[0,{[j]:Vt}],[0,{[j]:Gt}],[()=>ss,{[jt]:Qt}]],3],is=[3,r,Tt,0,[Lt],[[()=>as,0]]],as=[3,r,Nt,0,[Ht,Bt,Wt,Mt],[0,[()=>os,0],[()=>ns,0],1]],cs=[9,r,yt,{[zt]:["GET","/federation/credentials",200]},()=>rs,()=>is],us=(e)=>({apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??it,base64Encoder:e?.base64Encoder??rt,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??It,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??mt,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4"),signer:new tt},{schemeId:"smithy.api#noAuth",identityProvider:(t)=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new fe}],logger:e?.logger??new xe,protocol:e?.protocol??dt,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:ts,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:e?.serviceId??"SSO",sha256:e?.sha256??lt,urlParser:e?.urlParser??Le,utf8Decoder:e?.utf8Decoder??nt,utf8Encoder:e?.utf8Encoder??ot}),ds=(e)=>{Ie(process.version);let t=we(e),s=()=>t().then(Ae),i=us(e);ie(process.version);let o={profile:e?.profile,logger:i.logger};return{...i,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??a(st,o),bodyLengthChecker:e?.bodyLengthChecker??at,defaultUserAgentProvider:e?.defaultUserAgentProvider??ae({serviceId:i.serviceId,clientVersion:Pt.version}),maxAttempts:e?.maxAttempts??a(Ye,e),region:e?.region??a(Fe,{...$e,...o}),requestHandler:ut.create(e?.requestHandler??s),retryMode:e?.retryMode??a({...Qe,default:async()=>(await s()).retryMode||We},e),streamCollector:e?.streamCollector??ct,useDualstackEndpoint:e?.useDualstackEndpoint??a(be,o),useFipsEndpoint:e?.useFipsEndpoint??a(ke,o),userAgentAppId:e?.userAgentAppId??a(ce,o)}},ls=(e)=>{let{httpAuthSchemes:t,httpAuthSchemeProvider:s,credentials:i}=e;return{setHttpAuthScheme(o){let g=t.findIndex((x)=>x.schemeId===o.schemeId);if(g===-1)t.push(o);else t.splice(g,1,o)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(o){s=o},httpAuthSchemeProvider(){return s},setCredentials(o){i=o},credentials(){return i}}},ps=(e)=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}),hs=(e,t)=>{let s=Object.assign(ue(e),ye(e),Ke(e),ls(e));return t.forEach((i)=>i.configure(s)),Object.assign(e,de(s),Oe(s),Ve(s),ps(s))};class w extends Te{config;constructor(...[e]){let t=ds(e||{});super(t);this.initConfig=t;let s=St(t),i=le(s),o=Je(i),g=qe(o),x=he(g),te=ze(x),se=_t(te),oe=hs(se,e?.extensions||[]);this.config=oe,this.middlewareStack.use(Ze(this.config)),this.middlewareStack.use(ge(this.config)),this.middlewareStack.use(Xe(this.config)),this.middlewareStack.use(Be(this.config)),this.middlewareStack.use(me(this.config)),this.middlewareStack.use(_e(this.config)),this.middlewareStack.use(Se(this.config)),this.middlewareStack.use(Ee(this.config,{httpAuthSchemeParametersProvider:pt,identityProviderConfigProvider:async(ne)=>new Pe({"aws.auth#sigv4":ne.credentials})})),this.middlewareStack.use(ve(this.config))}destroy(){super.destroy()}}var gs=De(ft,"SWBPortalService","SSOClient",je),ms={},_s=(e,t,s,i)=>[];class k extends gs(ms,_s,"GetRoleCredentials",cs){}var Ss={GetRoleCredentialsCommand:k};class J extends w{}Ne(Ss,J);var X=k;var Z=w;export{X as GetRoleCredentialsCommand,Z as SSOClient};
2
+ import{G,E,m,N,C,V,h,q,H,f,pe,K,ee}from"./shumai-agent-app.js";var{awsEndpointFunctions:re,emitWarningIfUnsupportedVersion:ie,createDefaultUserAgentProvider:ae,NODE_APP_ID_CONFIG_OPTIONS:ce,getAwsRegionExtensionConfiguration:ue,resolveAwsRegionExtensionConfiguration:de,resolveUserAgentConfig:le,resolveHostHeaderConfig:he,getUserAgentPlugin:ge,getHostHeaderPlugin:me,getLoggerPlugin:_e,getRecursionDetectionPlugin:Se}=f(),{NoAuthSigner:fe,getHttpAuthSchemeEndpointRuleSetPlugin:Ee,DefaultIdentityProviderConfig:Pe,getHttpSigningPlugin:ve}=H(),{normalizeProvider:L,getSmithyContext:Re,ServiceException:Ce,NoOpLogger:xe,emitWarningIfUnsupportedVersion:Ie,loadConfigsForDefaultMode:Ae,getDefaultExtensionConfiguration:ye,resolveDefaultRuntimeConfig:Oe,Client:Te,makeBuilder:De,createAggregatedClient:Ne}=E(),{Command:fs}=E();var{resolveDefaultsModeConfig:we,loadConfig:a,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:ke,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:be,NODE_REGION_CONFIG_OPTIONS:Fe,NODE_REGION_CONFIG_FILE_OPTIONS:$e,resolveRegionConfig:qe}=m(),{BinaryDecisionDiagram:He,EndpointCache:Ue,decideEndpoint:Ge,customEndpointFunctions:Me,resolveEndpointConfig:ze,getEndpointPlugin:je}=N(),{parseUrl:Le,getHttpHandlerExtensionConfiguration:Ke,resolveHttpHandlerRuntimeConfig:Ve,getContentLengthPlugin:Be}=h(),{DEFAULT_RETRY_MODE:We,NODE_RETRY_MODE_CONFIG_OPTIONS:Qe,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:Ye,resolveRetryConfig:Je,getRetryPlugin:Xe}=q(),{TypeRegistry:B,getSchemaSerdePlugin:Ze}=G(),{resolveAwsSdkSigV4Config:et,AwsSdkSigV4Signer:tt,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:st}=K(),{toUtf8:ot,fromUtf8:nt,toBase64:rt,fromBase64:it,calculateBodyLength:at}=C(),{streamCollector:ct,NodeHttpHandler:ut}=ee(),{AwsRestJsonProtocol:dt}=pe(),{Sha256:lt}=V(),pt=async(e,t,s)=>({operation:Re(t).operation,region:await L(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function ht(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:e.region},propertiesExtractor:(t,s)=>({signingProperties:{config:t,context:s}})}}function gt(e){return{schemeId:"smithy.api#noAuth"}}var mt=(e)=>{let t=[];switch(e.operation){case"GetRoleCredentials":{t.push(gt());break}default:t.push(ht(e))}return t},_t=(e)=>{let t=et(e);return Object.assign(t,{authSchemePreference:L(e.authSchemePreference??[])})},St=(e)=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"}),ft={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Et="3.997.43",Pt={version:Et},l="ref",c=-1,_=!0,F="isSet",W="PartitionResult",S="booleanEquals",A="getAttr",U={[l]:"Endpoint"},y={[l]:W},d={},M=[{[l]:"Region"}],z={conditions:[[F,[U]],[F,M],["aws.partition",M,W],[S,[{[l]:"UseFIPS"},_]],[S,[{[l]:"UseDualStack"},_]],[S,[{fn:A,argv:[y,"supportsDualStack"]},_]],[S,[{fn:A,argv:[y,"supportsFIPS"]},_]],["stringEquals",[{fn:A,argv:[y,"name"]},"aws-us-gov"]]],results:[[c],[c,"Invalid Configuration: FIPS and custom endpoint are not supported"],[c,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[U,d],["https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",d],[c,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://portal.sso.{Region}.amazonaws.com",d],["https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",d],[c,"FIPS is enabled but this partition does not support FIPS"],["https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",d],[c,"DualStack is enabled but this partition does not support DualStack"],["https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",d],[c,"Invalid Configuration: Missing Region"]]},vt=2,n=1e8,Rt=new Int32Array([-1,1,-1,0,13,3,1,4,n+12,2,5,n+12,3,8,6,4,7,n+11,5,n+9,n+10,4,11,9,6,10,n+8,7,n+6,n+7,5,12,n+5,6,n+4,n+5,3,n+1,14,4,n+2,n+3]),Ct=He.from(Rt,vt,z.conditions,z.results),xt=new Ue({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),It=(e,t={})=>xt.get(e,()=>Ge(Ct,{endpointParams:e,logger:t.logger}));Me.aws=re;class u extends Ce{constructor(e){super(e);Object.setPrototypeOf(this,u.prototype)}}class O extends u{name="InvalidRequestException";$fault="client";constructor(e){super({name:"InvalidRequestException",$fault:"client",...e});Object.setPrototypeOf(this,O.prototype)}}class T extends u{name="ResourceNotFoundException";$fault="client";constructor(e){super({name:"ResourceNotFoundException",$fault:"client",...e});Object.setPrototypeOf(this,T.prototype)}}class D extends u{name="TooManyRequestsException";$fault="client";constructor(e){super({name:"TooManyRequestsException",$fault:"client",...e});Object.setPrototypeOf(this,D.prototype)}}class w extends u{name="UnauthorizedException";$fault="client";constructor(e){super({name:"UnauthorizedException",$fault:"client",...e});Object.setPrototypeOf(this,w.prototype)}}var At="AccessTokenType",yt="GetRoleCredentials",Ot="GetRoleCredentialsRequest",Tt="GetRoleCredentialsResponse",Dt="InvalidRequestException",Nt="RoleCredentials",wt="ResourceNotFoundException",kt="SecretAccessKeyType",bt="SessionTokenType",Ft="TooManyRequestsException",$t="UnauthorizedException",qt="accountId",Ht="accessKeyId",Ut="accessToken",Gt="account_id",P="client",v="error",Mt="expiration",zt="http",R="httpError",jt="httpHeader",j="httpQuery",x="message",Lt="roleCredentials",Kt="roleName",Vt="role_name",Q="smithy.ts.sdk.synthetic.com.amazonaws.sso",Bt="secretAccessKey",Wt="sessionToken",Qt="x-amz-sso_bearer_token",r="com.amazonaws.sso",Y=B.for(Q),Yt=[-3,Q,"SSOServiceException",0,[],[]];Y.registerError(Yt,u);var p=B.for(r),Jt=[-3,r,Dt,{[v]:P,[R]:400},[x],[0]];p.registerError(Jt,O);var Xt=[-3,r,wt,{[v]:P,[R]:404},[x],[0]];p.registerError(Xt,T);var Zt=[-3,r,Ft,{[v]:P,[R]:429},[x],[0]];p.registerError(Zt,D);var es=[-3,r,$t,{[v]:P,[R]:401},[x],[0]];p.registerError(es,w);var ts=[Y,p],ss=[0,r,At,8,0],os=[0,r,kt,8,0],ns=[0,r,bt,8,0],rs=[3,r,Ot,0,[Kt,qt,Ut],[[0,{[j]:Vt}],[0,{[j]:Gt}],[()=>ss,{[jt]:Qt}]],3],is=[3,r,Tt,0,[Lt],[[()=>as,0]]],as=[3,r,Nt,0,[Ht,Bt,Wt,Mt],[0,[()=>os,0],[()=>ns,0],1]],cs=[9,r,yt,{[zt]:["GET","/federation/credentials",200]},()=>rs,()=>is],us=(e)=>({apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??it,base64Encoder:e?.base64Encoder??rt,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??It,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??mt,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4"),signer:new tt},{schemeId:"smithy.api#noAuth",identityProvider:(t)=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new fe}],logger:e?.logger??new xe,protocol:e?.protocol??dt,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:ts,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:e?.serviceId??"SSO",sha256:e?.sha256??lt,urlParser:e?.urlParser??Le,utf8Decoder:e?.utf8Decoder??nt,utf8Encoder:e?.utf8Encoder??ot}),ds=(e)=>{Ie(process.version);let t=we(e),s=()=>t().then(Ae),i=us(e);ie(process.version);let o={profile:e?.profile,logger:i.logger};return{...i,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??a(st,o),bodyLengthChecker:e?.bodyLengthChecker??at,defaultUserAgentProvider:e?.defaultUserAgentProvider??ae({serviceId:i.serviceId,clientVersion:Pt.version}),maxAttempts:e?.maxAttempts??a(Ye,e),region:e?.region??a(Fe,{...$e,...o}),requestHandler:ut.create(e?.requestHandler??s),retryMode:e?.retryMode??a({...Qe,default:async()=>(await s()).retryMode||We},e),streamCollector:e?.streamCollector??ct,useDualstackEndpoint:e?.useDualstackEndpoint??a(be,o),useFipsEndpoint:e?.useFipsEndpoint??a(ke,o),userAgentAppId:e?.userAgentAppId??a(ce,o)}},ls=(e)=>{let{httpAuthSchemes:t,httpAuthSchemeProvider:s,credentials:i}=e;return{setHttpAuthScheme(o){let g=t.findIndex((I)=>I.schemeId===o.schemeId);if(g===-1)t.push(o);else t.splice(g,1,o)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(o){s=o},httpAuthSchemeProvider(){return s},setCredentials(o){i=o},credentials(){return i}}},ps=(e)=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}),hs=(e,t)=>{let s=Object.assign(ue(e),ye(e),Ke(e),ls(e));return t.forEach((i)=>i.configure(s)),Object.assign(e,de(s),Oe(s),Ve(s),ps(s))};class k extends Te{config;constructor(...[e]){let t=ds(e||{});super(t);this.initConfig=t;let s=St(t),i=le(s),o=Je(i),g=qe(o),I=he(g),te=ze(I),se=_t(te),oe=hs(se,e?.extensions||[]);this.config=oe,this.middlewareStack.use(Ze(this.config)),this.middlewareStack.use(ge(this.config)),this.middlewareStack.use(Xe(this.config)),this.middlewareStack.use(Be(this.config)),this.middlewareStack.use(me(this.config)),this.middlewareStack.use(_e(this.config)),this.middlewareStack.use(Se(this.config)),this.middlewareStack.use(Ee(this.config,{httpAuthSchemeParametersProvider:pt,identityProviderConfigProvider:async(ne)=>new Pe({"aws.auth#sigv4":ne.credentials})})),this.middlewareStack.use(ve(this.config))}destroy(){super.destroy()}}var gs=De(ft,"SWBPortalService","SSOClient",je),ms={},_s=(e,t,s,i)=>[];class b extends gs(ms,_s,"GetRoleCredentials",cs){}var Ss={GetRoleCredentialsCommand:b};class J extends k{}Ne(Ss,J);var X=b;var Z=k;export{X as GetRoleCredentialsCommand,Z as SSOClient};