@shumai-one/shumai-transcode 0.4.3 → 0.4.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/chunk-2e9nq7wq.js +2 -0
- package/bin/chunk-2fba2vk9.js +3 -0
- package/bin/chunk-4qc7zf67.js +2 -0
- package/bin/chunk-654ghfdr.js +2 -0
- package/bin/chunk-dknhnbqw.js +2 -0
- package/bin/{chunk-d01fsnef.js → chunk-jhv9nzz8.js} +26 -6
- package/bin/chunk-m11f0hs9.js +2 -0
- package/bin/chunk-mgxwax3j.js +3 -0
- package/bin/chunk-s5zdcqxd.js +7 -0
- package/bin/chunk-vghdswb8.js +2 -0
- package/bin/chunk-vjvzngsy.js +2 -0
- package/bin/chunk-vtq7z7wd.js +2 -0
- package/bin/chunk-y32t8e97.js +2 -0
- package/bin/shumai-transcode-app.js +307 -41
- package/package.json +7 -7
- package/prisma/migrations/20260907021754_add_asset_upload_id/migration.sql +2 -0
- package/prisma/migrations/20260913130237_add_asset_comment_asset_id_idx/migration.sql +2 -0
- package/prisma/schema.prisma +2 -0
|
@@ -0,0 +1,2 @@
|
|
|
1
|
+
// @bun
|
|
2
|
+
import{A,e,t}from"./shumai-transcode-app.js";var _=A(e());var B=A(e());var C=A(t()),f=A(e());var S=A(t()),u=A(e()),v=(r,n,o)=>{let s={EcsContainer:async(a)=>{let{fromHttp:c}=await import("./chunk-s5zdcqxd.js"),{fromContainerMetadata:i}=await import("./chunk-mgxwax3j.js");return o?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>u.chain(c(a??{}),i(a))().then(p)},Ec2InstanceMetadata:async(a)=>{o?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");let{fromInstanceMetadata:c}=await import("./chunk-mgxwax3j.js");return async()=>c(a)().then(p)},Environment:async(a)=>{o?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");let{fromEnv:c}=await import("./chunk-dknhnbqw.js");return async()=>c(a)().then(p)}};if(r in s)return s[r];else throw new u.CredentialsProviderError(`Unsupported credential source in profile ${n}. Got ${r}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:o})},p=(r)=>S.setCredentialFeature(r,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p");var R=(r,{profile:n="default",logger:o}={})=>Boolean(r)&&typeof r==="object"&&typeof r.role_arn==="string"&&["undefined","string"].indexOf(typeof r.role_session_name)>-1&&["undefined","string"].indexOf(typeof r.external_id)>-1&&["undefined","string"].indexOf(typeof r.mfa_serial)>-1&&(q(r,{profile:n,logger:o})||H(r,{profile:n,logger:o})),q=(r,{profile:n,logger:o})=>{let s=typeof r.source_profile==="string"&&typeof r.credential_source>"u";if(s)o?.debug?.(` ${n} isAssumeRoleWithSourceProfile source_profile=${r.source_profile}`);return s},H=(r,{profile:n,logger:o})=>{let s=typeof r.credential_source==="string"&&typeof r.source_profile>"u";if(s)o?.debug?.(` ${n} isCredentialSourceProfile credential_source=${r.credential_source}`);return s},L=async(r,n,o,s,a={},c)=>{o.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");let i=n[r],{source_profile:l,region:K}=i;if(!o.roleAssumer){let{getDefaultRoleAssumer:d}=await import("./chunk-654ghfdr.js");o.roleAssumer=d({...o.clientConfig,credentialProviderLogger:o.logger,parentClientConfig:{...s,...o?.parentClientConfig,region:K??o?.parentClientConfig?.region??s?.region}},o.clientPlugins)}if(l&&l in a)throw new f.CredentialsProviderError(`Detected a cycle attempting to resolve credentials for profile ${f.getProfileName(o)}. Profiles visited: `+Object.keys(a).join(", "),{logger:o.logger});o.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${l?`source_profile=[${l}]`:`profile=[${r}]`}`);let P=l?c(l,n,o,s,{...a,[l]:!0},I(n[l]??{})):(await v(i.credential_source,r,o.logger)(o))();if(I(i))return P.then((d)=>C.setCredentialFeature(d,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));else{let d={RoleArn:i.role_arn,RoleSessionName:i.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:i.external_id,DurationSeconds:parseInt(i.duration_seconds||"3600",10)},{mfa_serial:m}=i;if(m){if(!o.mfaCodeProvider)throw new f.CredentialsProviderError(`Profile ${r} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:o.logger,tryNextLink:!1});d.SerialNumber=m,d.TokenCode=await o.mfaCodeProvider(m)}let G=await P;return o.roleAssumer(G,d).then((U)=>C.setCredentialFeature(U,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},I=(r)=>!r.role_arn&&!!r.credential_source;var O=A(t()),b=(r)=>Boolean(r&&r.login_session),x=async(r,n,o)=>{let{fromLoginCredentials:s}=await import("./chunk-y32t8e97.js"),a=await s({...n,profile:r})({callerClientConfig:o});return O.setCredentialFeature(a,"CREDENTIALS_PROFILE_LOGIN","AC")};var k=A(t()),F=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.credential_process==="string",h=async(r,n)=>{let{fromProcess:o}=await import("./chunk-vjvzngsy.js"),s=await o({...r,profile:n})();return k.setCredentialFeature(s,"CREDENTIALS_PROFILE_PROCESS","v")};var y=A(t()),D=async(r,n,o={},s)=>{let{fromSSO:a}=await import("./chunk-2fba2vk9.js");return a({profile:r,logger:o.logger,parentClientConfig:o.parentClientConfig,clientConfig:o.clientConfig})({callerClientConfig:s}).then((c)=>{if(n.sso_session)return y.setCredentialFeature(c,"CREDENTIALS_PROFILE_SSO","r");else return y.setCredentialFeature(c,"CREDENTIALS_PROFILE_SSO_LEGACY","t")})},T=(r)=>r&&(typeof r.sso_start_url==="string"||typeof r.sso_account_id==="string"||typeof r.sso_session==="string"||typeof r.sso_region==="string"||typeof r.sso_role_name==="string");var W=A(t()),g=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.aws_access_key_id==="string"&&typeof r.aws_secret_access_key==="string"&&["undefined","string"].indexOf(typeof r.aws_session_token)>-1&&["undefined","string"].indexOf(typeof r.aws_account_id)>-1,w=async(r,n)=>{n?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");let o={accessKeyId:r.aws_access_key_id,secretAccessKey:r.aws_secret_access_key,sessionToken:r.aws_session_token,...r.aws_credential_scope&&{credentialScope:r.aws_credential_scope},...r.aws_account_id&&{accountId:r.aws_account_id}};return W.setCredentialFeature(o,"CREDENTIALS_PROFILE","n")};var N=A(t()),j=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.web_identity_token_file==="string"&&typeof r.role_arn==="string"&&["undefined","string"].indexOf(typeof r.role_session_name)>-1,M=async(r,n,o)=>{let{fromTokenFile:s}=await import("./chunk-vtq7z7wd.js"),a=await s({webIdentityTokenFile:r.web_identity_token_file,roleArn:r.role_arn,roleSessionName:r.role_session_name,roleAssumerWithWebIdentity:n.roleAssumerWithWebIdentity,logger:n.logger,parentClientConfig:n.parentClientConfig})({callerClientConfig:o});return N.setCredentialFeature(a,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q")};var E=async(r,n,o,s,a={},c=!1)=>{let i=n[r];if(Object.keys(a).length>0&&g(i))return w(i,o);if(c||R(i,{profile:r,logger:o.logger}))return L(r,n,o,s,a,E);if(g(i))return w(i,o);if(j(i))return M(i,o,s);if(F(i))return h(o,r);if(T(i))return await D(r,i,o,s);if(b(i))return x(r,o,s);throw new B.CredentialsProviderError(`Could not resolve credentials using profile: [${r}] in configuration/credentials file(s).`,{logger:o.logger})};var V=(r={})=>async({callerClientConfig:n}={})=>{r.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");let o=await _.parseKnownFiles(r);return E(_.getProfileName({profile:r.profile??n?.profile}),o,r,n)};export{V as fromIni};
|
|
@@ -0,0 +1,3 @@
|
|
|
1
|
+
// @bun
|
|
2
|
+
import{A,e,t}from"./shumai-transcode-app.js";var S=A(e());var U=(o)=>o&&(typeof o.sso_start_url==="string"||typeof o.sso_account_id==="string"||typeof o.sso_session==="string"||typeof o.sso_region==="string"||typeof o.sso_role_name==="string");var P=A(t());var p=A(e());var j=300000,T="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var q=async(o,s={},n)=>{let{SSOOIDCClient:i}=await import("./chunk-m11f0hs9.js"),a=(g)=>s.clientConfig?.[g]??s.parentClientConfig?.[g]??n?.[g];return new i(Object.assign({},s.clientConfig??{},{region:o??s.clientConfig?.region,logger:a("logger"),userAgentAppId:a("userAgentAppId")}))};var W=async(o,s,n={},i)=>{let{CreateTokenCommand:a}=await import("./chunk-m11f0hs9.js");return(await q(s,n,i)).send(new a({clientId:o.clientId,clientSecret:o.clientSecret,refreshToken:o.refreshToken,grantType:"refresh_token"}))};var X=A(e());var R=(o)=>{if(o.expiration&&o.expiration.getTime()<Date.now())throw new X.TokenProviderError(`Token is expired. ${T}`,!1)};var z=A(e());var h=(o,s,n=!1)=>{if(typeof s>"u")throw new z.TokenProviderError(`Value not present for '${o}' in SSO Token${n?". Cannot refresh":""}. ${T}`,!1)};var J=A(e());import{promises as ee}from"fs";var{writeFile:oe}=ee,V=(o,s)=>{let n=J.getSSOTokenFilepath(o),i=JSON.stringify(s,null,2);return oe(n,i)};var Y=new Map,v=(o={})=>async({callerClientConfig:s}={})=>{o.logger?.debug("@aws-sdk/token-providers - fromSso");let n=await p.parseKnownFiles(o),i=p.getProfileName({profile:o.profile??s?.profile}),a=n[i];if(!a)throw new p.TokenProviderError(`Profile '${i}' could not be found in shared credentials file.`,!1);else if(!a.sso_session)throw new p.TokenProviderError(`Profile '${i}' is missing required property 'sso_session'.`);let l=a.sso_session,d=(await p.loadSsoSessionData(o))[l];if(!d)throw new p.TokenProviderError(`Sso session '${l}' could not be found in shared credentials file.`,!1);for(let f of["sso_start_url","sso_region"])if(!d[f])throw new p.TokenProviderError(`Sso session '${l}' is missing required property '${f}'.`,!1);let{sso_start_url:m,sso_region:E}=d,r;try{r=await p.getSSOTokenFromFile(l)}catch(f){throw new p.TokenProviderError(`The SSO session token associated with profile=${i} was not found or is invalid. ${T}`,!1)}h("accessToken",r.accessToken),h("expiresAt",r.expiresAt);let{accessToken:x,expiresAt:C}=r,c={token:x,expiration:new Date(C)};if(c.expiration.getTime()-Date.now()>j)return c;let w=Y.get(l)??0;if(Date.now()-w<30000)return R(c),c;h("clientId",r.clientId,!0),h("clientSecret",r.clientSecret,!0),h("refreshToken",r.refreshToken,!0);try{Y.set(l,Date.now());let f=await W(r,E,o,s);h("accessToken",f.accessToken),h("expiresIn",f.expiresIn);let O=new Date(Date.now()+f.expiresIn*1000);try{await V(l,{...r,accessToken:f.accessToken,expiresAt:O.toISOString(),refreshToken:f.refreshToken})}catch(_){}return{token:f.accessToken,expiration:O}}catch(f){return R(c),c}};var u=A(e()),y=!1,F=async({ssoStartUrl:o,ssoSession:s,ssoAccountId:n,ssoRegion:i,ssoRoleName:a,ssoClient:l,clientConfig:g,parentClientConfig:d,callerClientConfig:m,profile:E,filepath:r,configFilepath:x,ignoreCache:C,logger:c})=>{let w,f="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let k=await v({profile:E,filepath:r,configFilepath:x,ignoreCache:C,clientConfig:g,parentClientConfig:d,logger:c})({callerClientConfig:m});w={accessToken:k.token,expiresAt:new Date(k.expiration).toISOString()}}catch(k){throw new u.CredentialsProviderError(k.message,{tryNextLink:y,logger:c})}else try{w=await u.getSSOTokenFromFile(o)}catch(k){throw new u.CredentialsProviderError("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:y,logger:c})}if(new Date(w.expiresAt).getTime()-Date.now()<=0)throw new u.CredentialsProviderError("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:y,logger:c});let{accessToken:O}=w,{SSOClient:_,GetRoleCredentialsCommand:I}=await import("./chunk-4qc7zf67.js"),Z=l||new _(Object.assign({},g??{},{logger:g?.logger??m?.logger??d?.logger,region:g?.region??i,userAgentAppId:g?.userAgentAppId??m?.userAgentAppId??d?.userAgentAppId})),D;try{D=await Z.send(new I({accountId:n,roleName:a,accessToken:O}))}catch(k){throw new u.CredentialsProviderError(k,{tryNextLink:y,logger:c})}let{roleCredentials:{accessKeyId:L,secretAccessKey:M,sessionToken:b,expiration:G,credentialScope:K,accountId:H}={}}=D;if(!L||!M||!b||!G)throw new u.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:y,logger:c});let N={accessKeyId:L,secretAccessKey:M,sessionToken:b,expiration:new Date(G),...K&&{credentialScope:K},...H&&{accountId:H}};if(s)P.setCredentialFeature(N,"CREDENTIALS_SSO","s");else P.setCredentialFeature(N,"CREDENTIALS_SSO_LEGACY","u");return N};var B=A(e()),Q=(o,s)=>{let{sso_start_url:n,sso_account_id:i,sso_region:a,sso_role_name:l}=o;if(!n||!i||!a||!l)throw new B.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(o).join(", ")}
|
|
3
|
+
Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:s});return o};var se=(o={})=>async({callerClientConfig:s}={})=>{o.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:n,ssoAccountId:i,ssoRegion:a,ssoRoleName:l,ssoSession:g}=o,{ssoClient:d}=o,m=S.getProfileName({profile:o.profile??s?.profile});if(!n&&!i&&!a&&!l&&!g){let r=(await S.parseKnownFiles(o))[m];if(!r)throw new S.CredentialsProviderError(`Profile ${m} was not found.`,{logger:o.logger});if(!U(r))throw new S.CredentialsProviderError(`Profile ${m} is not configured with SSO credentials.`,{logger:o.logger});if(r?.sso_session){let _=(await S.loadSsoSessionData(o))[r.sso_session],I=` configurations in profile ${m} and sso-session ${r.sso_session}`;if(a&&a!==_.sso_region)throw new S.CredentialsProviderError("Conflicting SSO region"+I,{tryNextLink:!1,logger:o.logger});if(n&&n!==_.sso_start_url)throw new S.CredentialsProviderError("Conflicting SSO start_url"+I,{tryNextLink:!1,logger:o.logger});r.sso_region=_.sso_region,r.sso_start_url=_.sso_start_url}let{sso_start_url:x,sso_account_id:C,sso_region:c,sso_role_name:w,sso_session:f}=Q(r,o.logger);return F({ssoStartUrl:x,ssoSession:f,ssoAccountId:C,ssoRegion:c,ssoRoleName:w,ssoClient:d,clientConfig:o.clientConfig,parentClientConfig:o.parentClientConfig,callerClientConfig:o.callerClientConfig,profile:m,filepath:o.filepath,configFilepath:o.configFilepath,ignoreCache:o.ignoreCache,logger:o.logger})}else if(!n||!i||!a||!l)throw new S.CredentialsProviderError('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:o.logger});else return F({ssoStartUrl:n,ssoSession:g,ssoAccountId:i,ssoRegion:a,ssoRoleName:l,ssoClient:d,clientConfig:o.clientConfig,parentClientConfig:o.parentClientConfig,callerClientConfig:o.callerClientConfig,profile:m,filepath:o.filepath,configFilepath:o.configFilepath,ignoreCache:o.ignoreCache,logger:o.logger})};export{se as fromSSO};
|
|
@@ -0,0 +1,2 @@
|
|
|
1
|
+
// @bun
|
|
2
|
+
import{i,s,e,r,a,o,n,l,c,t,d,g,B}from"./shumai-transcode-app.js";var{awsEndpointFunctions:ie,emitWarningIfUnsupportedVersion:ae,createDefaultUserAgentProvider:ce,NODE_APP_ID_CONFIG_OPTIONS:ue,getAwsRegionExtensionConfiguration:de,resolveAwsRegionExtensionConfiguration:le,resolveUserAgentConfig:pe,resolveHostHeaderConfig:he,getUserAgentPlugin:ge,getHostHeaderPlugin:me,getLoggerPlugin:_e,getRecursionDetectionPlugin:Se}=t(),{NoAuthSigner:fe,getHttpAuthSchemeEndpointRuleSetPlugin:Ee,DefaultIdentityProviderConfig:Pe,getHttpSigningPlugin:ve}=c(),{normalizeProvider:W,getSmithyContext:Re,ServiceException:Ce,NoOpLogger:xe,emitWarningIfUnsupportedVersion:Ie,loadConfigsForDefaultMode:Ae,getDefaultExtensionConfiguration:ye,resolveDefaultRuntimeConfig:Oe,Client:Te,makeBuilder:De,createAggregatedClient:Ne}=s(),{Command:fs}=s();var{resolveDefaultsModeConfig:we,loadConfig:E,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:ke,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:be,NODE_REGION_CONFIG_OPTIONS:Fe,NODE_REGION_CONFIG_FILE_OPTIONS:$e,resolveRegionConfig:qe}=e(),{BinaryDecisionDiagram:He,EndpointCache:Ue,decideEndpoint:Ge,customEndpointFunctions:Me,resolveEndpointConfig:ze,getEndpointPlugin:je}=r(),{parseUrl:Le,getHttpHandlerExtensionConfiguration:Ke,resolveHttpHandlerRuntimeConfig:Ve,getContentLengthPlugin:Be}=n(),{DEFAULT_RETRY_MODE:We,NODE_RETRY_MODE_CONFIG_OPTIONS:Qe,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:Ye,resolveRetryConfig:Je,getRetryPlugin:Xe}=l(),{TypeRegistry:Q,getSchemaSerdePlugin:Ze}=i(),{resolveAwsSdkSigV4Config:et,AwsSdkSigV4Signer:tt,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:st}=g(),{toUtf8:ot,fromUtf8:nt,toBase64:rt,fromBase64:it,calculateBodyLength:at}=a(),{streamCollector:ct,NodeHttpHandler:ut}=B(),{AwsRestJsonProtocol:dt}=d(),{Sha256:lt}=o(),pt=async(u,p,h)=>({operation:Re(p).operation,region:await W(u.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function ht(u){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:u.region},propertiesExtractor:(p,h)=>({signingProperties:{config:p,context:h}})}}function gt(u){return{schemeId:"smithy.api#noAuth"}}var mt=(u)=>{let p=[];switch(u.operation){case"GetRoleCredentials":{p.push(gt());break}default:p.push(ht(u))}return p},_t=(u)=>{let p=et(u);return Object.assign(p,{authSchemePreference:W(u.authSchemePreference??[])})},St=(u)=>Object.assign(u,{useDualstackEndpoint:u.useDualstackEndpoint??!1,useFipsEndpoint:u.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"}),ft={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Et="3.997.43",Pt={version:Et},C="ref",P=-1,A=!0,z="isSet",Y="PartitionResult",y="booleanEquals",k="getAttr",j={[C]:"Endpoint"},b={[C]:Y},R={},L=[{[C]:"Region"}],K={conditions:[[z,[j]],[z,L],["aws.partition",L,Y],[y,[{[C]:"UseFIPS"},A]],[y,[{[C]:"UseDualStack"},A]],[y,[{fn:k,argv:[b,"supportsDualStack"]},A]],[y,[{fn:k,argv:[b,"supportsFIPS"]},A]],["stringEquals",[{fn:k,argv:[b,"name"]},"aws-us-gov"]]],results:[[P],[P,"Invalid Configuration: FIPS and custom endpoint are not supported"],[P,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[j,R],["https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",R],[P,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://portal.sso.{Region}.amazonaws.com",R],["https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",R],[P,"FIPS is enabled but this partition does not support FIPS"],["https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",R],[P,"DualStack is enabled but this partition does not support DualStack"],["https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",R],[P,"Invalid Configuration: Missing Region"]]},vt=2,_=1e8,Rt=new Int32Array([-1,1,-1,0,13,3,1,4,_+12,2,5,_+12,3,8,6,4,7,_+11,5,_+9,_+10,4,11,9,6,10,_+8,7,_+6,_+7,5,12,_+5,6,_+4,_+5,3,_+1,14,4,_+2,_+3]),Ct=He.from(Rt,vt,K.conditions,K.results),xt=new Ue({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),It=(u,p={})=>xt.get(u,()=>Ge(Ct,{endpointParams:u,logger:p.logger}));Me.aws=ie;class v extends Ce{constructor(u){super(u);Object.setPrototypeOf(this,v.prototype)}}class F extends v{name="InvalidRequestException";$fault="client";constructor(u){super({name:"InvalidRequestException",$fault:"client",...u});Object.setPrototypeOf(this,F.prototype)}}class q extends v{name="ResourceNotFoundException";$fault="client";constructor(u){super({name:"ResourceNotFoundException",$fault:"client",...u});Object.setPrototypeOf(this,q.prototype)}}class H extends v{name="TooManyRequestsException";$fault="client";constructor(u){super({name:"TooManyRequestsException",$fault:"client",...u});Object.setPrototypeOf(this,H.prototype)}}class U extends v{name="UnauthorizedException";$fault="client";constructor(u){super({name:"UnauthorizedException",$fault:"client",...u});Object.setPrototypeOf(this,U.prototype)}}var At="AccessTokenType",yt="GetRoleCredentials",Ot="GetRoleCredentialsRequest",Tt="GetRoleCredentialsResponse",Dt="InvalidRequestException",Nt="RoleCredentials",wt="ResourceNotFoundException",kt="SecretAccessKeyType",bt="SessionTokenType",Ft="TooManyRequestsException",$t="UnauthorizedException",qt="accountId",Ht="accessKeyId",Ut="accessToken",Gt="account_id",O="client",T="error",Mt="expiration",zt="http",D="httpError",jt="httpHeader",V="httpQuery",N="message",Lt="roleCredentials",Kt="roleName",Vt="role_name",J="smithy.ts.sdk.synthetic.com.amazonaws.sso",Bt="secretAccessKey",Wt="sessionToken",Qt="x-amz-sso_bearer_token",S="com.amazonaws.sso",X=Q.for(J),Yt=[-3,J,"SSOServiceException",0,[],[]];X.registerError(Yt,v);var x=Q.for(S),Jt=[-3,S,Dt,{[T]:O,[D]:400},[N],[0]];x.registerError(Jt,F);var Xt=[-3,S,wt,{[T]:O,[D]:404},[N],[0]];x.registerError(Xt,q);var Zt=[-3,S,Ft,{[T]:O,[D]:429},[N],[0]];x.registerError(Zt,H);var es=[-3,S,$t,{[T]:O,[D]:401},[N],[0]];x.registerError(es,U);var ts=[X,x],ss=[0,S,At,8,0],os=[0,S,kt,8,0],ns=[0,S,bt,8,0],rs=[3,S,Ot,0,[Kt,qt,Ut],[[0,{[V]:Vt}],[0,{[V]:Gt}],[()=>ss,{[jt]:Qt}]],3],is=[3,S,Tt,0,[Lt],[[()=>as,0]]],as=[3,S,Nt,0,[Ht,Bt,Wt,Mt],[0,[()=>os,0],[()=>ns,0],1]],cs=[9,S,yt,{[zt]:["GET","/federation/credentials",200]},()=>rs,()=>is],us=(u)=>({apiVersion:"2019-06-10",base64Decoder:u?.base64Decoder??it,base64Encoder:u?.base64Encoder??rt,disableHostPrefix:u?.disableHostPrefix??!1,endpointProvider:u?.endpointProvider??It,extensions:u?.extensions??[],httpAuthSchemeProvider:u?.httpAuthSchemeProvider??mt,httpAuthSchemes:u?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(p)=>p.getIdentityProvider("aws.auth#sigv4"),signer:new tt},{schemeId:"smithy.api#noAuth",identityProvider:(p)=>p.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new fe}],logger:u?.logger??new xe,protocol:u?.protocol??dt,protocolSettings:u?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:ts,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:u?.serviceId??"SSO",sha256:u?.sha256??lt,urlParser:u?.urlParser??Le,utf8Decoder:u?.utf8Decoder??nt,utf8Encoder:u?.utf8Encoder??ot}),ds=(u)=>{Ie(process.version);let p=we(u),h=()=>p().then(Ae),f=us(u);ae(process.version);let m={profile:u?.profile,logger:f.logger};return{...f,...u,runtime:"node",defaultsMode:p,authSchemePreference:u?.authSchemePreference??E(st,m),bodyLengthChecker:u?.bodyLengthChecker??at,defaultUserAgentProvider:u?.defaultUserAgentProvider??ce({serviceId:f.serviceId,clientVersion:Pt.version}),maxAttempts:u?.maxAttempts??E(Ye,u),region:u?.region??E(Fe,{...$e,...m}),requestHandler:ut.create(u?.requestHandler??h),retryMode:u?.retryMode??E({...Qe,default:async()=>(await h()).retryMode||We},u),streamCollector:u?.streamCollector??ct,useDualstackEndpoint:u?.useDualstackEndpoint??E(be,m),useFipsEndpoint:u?.useFipsEndpoint??E(ke,m),userAgentAppId:u?.userAgentAppId??E(ue,m)}},ls=(u)=>{let{httpAuthSchemes:p,httpAuthSchemeProvider:h,credentials:f}=u;return{setHttpAuthScheme(m){let I=p.findIndex((w)=>w.schemeId===m.schemeId);if(I===-1)p.push(m);else p.splice(I,1,m)},httpAuthSchemes(){return p},setHttpAuthSchemeProvider(m){h=m},httpAuthSchemeProvider(){return h},setCredentials(m){f=m},credentials(){return f}}},ps=(u)=>({httpAuthSchemes:u.httpAuthSchemes(),httpAuthSchemeProvider:u.httpAuthSchemeProvider(),credentials:u.credentials()}),hs=(u,p)=>{let h=Object.assign(de(u),ye(u),Ke(u),ls(u));return p.forEach((f)=>f.configure(h)),Object.assign(u,le(h),Oe(h),Ve(h),ps(h))};class G extends Te{config;constructor(...[u]){let p=ds(u||{});super(p);this.initConfig=p;let h=St(p),f=pe(h),m=Je(f),I=qe(m),w=he(I),se=ze(w),oe=_t(se),ne=hs(oe,u?.extensions||[]);this.config=ne,this.middlewareStack.use(Ze(this.config)),this.middlewareStack.use(ge(this.config)),this.middlewareStack.use(Xe(this.config)),this.middlewareStack.use(Be(this.config)),this.middlewareStack.use(me(this.config)),this.middlewareStack.use(_e(this.config)),this.middlewareStack.use(Se(this.config)),this.middlewareStack.use(Ee(this.config,{httpAuthSchemeParametersProvider:pt,identityProviderConfigProvider:async(re)=>new Pe({"aws.auth#sigv4":re.credentials})})),this.middlewareStack.use(ve(this.config))}destroy(){super.destroy()}}var gs=De(ft,"SWBPortalService","SSOClient",je),ms={},_s=(u,p,h,f)=>[];class M extends gs(ms,_s,"GetRoleCredentials",cs){}var Ss={GetRoleCredentialsCommand:M};class Z extends G{}Ne(Ss,Z);var ee=M;var te=G;export{ee as GetRoleCredentialsCommand,te as SSOClient};
|
|
@@ -0,0 +1,2 @@
|
|
|
1
|
+
// @bun
|
|
2
|
+
import{i,s,e,r,a,o,n,l,c,t,Q,d,g,B}from"./shumai-transcode-app.js";var{awsEndpointFunctions:At,emitWarningIfUnsupportedVersion:Et,createDefaultUserAgentProvider:vt,NODE_APP_ID_CONFIG_OPTIONS:yt,getAwsRegionExtensionConfiguration:It,resolveAwsRegionExtensionConfiguration:Rt,resolveUserAgentConfig:_t,resolveHostHeaderConfig:Ct,getUserAgentPlugin:xt,getHostHeaderPlugin:wt,getLoggerPlugin:Tt,getRecursionDetectionPlugin:Dt,setCredentialFeature:ce,stsRegionDefaultResolver:bt}=t(),{NoAuthSigner:_e,getHttpAuthSchemeEndpointRuleSetPlugin:$t,DefaultIdentityProviderConfig:kt,getHttpSigningPlugin:Ot}=c(),{normalizeProvider:Ce,getSmithyContext:xe,ServiceException:Nt,NoOpLogger:Wt,emitWarningIfUnsupportedVersion:Ht,loadConfigsForDefaultMode:Ut,getDefaultExtensionConfiguration:qt,resolveDefaultRuntimeConfig:Ft,Client:we,makeBuilder:Lt,createAggregatedClient:Kt}=s(),{Command:Mt}=s();var jn=Mt,Gn=we;var{resolveDefaultsModeConfig:jt,loadConfig:b,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:Gt,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:Vt,NODE_REGION_CONFIG_OPTIONS:zt,NODE_REGION_CONFIG_FILE_OPTIONS:Bt,resolveRegionConfig:Qt}=e(),{BinaryDecisionDiagram:Yt,EndpointCache:Xt,decideEndpoint:Jt,customEndpointFunctions:Zt,resolveParams:es,resolveEndpointConfig:ts,getEndpointPlugin:ss}=r(),{parseUrl:ns,getHttpHandlerExtensionConfiguration:os,resolveHttpHandlerRuntimeConfig:rs,getContentLengthPlugin:is}=n(),{DEFAULT_RETRY_MODE:as,NODE_RETRY_MODE_CONFIG_OPTIONS:cs,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:us,resolveRetryConfig:ds,getRetryPlugin:ls}=l(),{TypeRegistry:Te,getSchemaSerdePlugin:ps}=i(),{resolveAwsSdkSigV4Config:gs,resolveAwsSdkSigV4AConfig:hs,AwsSdkSigV4Signer:De,AwsSdkSigV4ASigner:be,NODE_SIGV4A_CONFIG_OPTIONS:ms,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:Ps}=g(),{SignatureV4MultiRegion:$e}=Q(),{toUtf8:fs,fromUtf8:Ss,toBase64:As,fromBase64:Es,calculateBodyLength:vs}=a(),{streamCollector:ys,NodeHttpHandler:Is}=B(),{AwsQueryProtocol:Rs}=d(),{Sha256:_s}=o(),M="ref",N=-1,j=!0,fe="isSet",ke="PartitionResult",G="booleanEquals",v="stringEquals",ie="getAttr",Se="us-east-1",Ae="sigv4",Ee="sts",ve="https://sts.{Region}.{PartitionResult#dnsSuffix}",ye={[M]:"Endpoint"},y={[M]:"Region"},ae={[M]:ke},K={},Ie=[y],Re={conditions:[[fe,[ye]],[fe,Ie],["aws.partition",Ie,ke],[G,[{[M]:"UseFIPS"},j]],[G,[{[M]:"UseDualStack"},j]],[v,[y,"aws-global"]],[G,[{[M]:"UseGlobalEndpoint"},j]],[v,[y,"eu-central-1"]],[G,[{fn:ie,argv:[ae,"supportsDualStack"]},j]],[G,[{fn:ie,argv:[ae,"supportsFIPS"]},j]],[v,[y,"ap-south-1"]],[v,[y,"eu-north-1"]],[v,[y,"eu-west-1"]],[v,[y,"eu-west-2"]],[v,[y,"eu-west-3"]],[v,[y,"sa-east-1"]],[v,[y,Se]],[v,[y,"us-east-2"]],[v,[y,"us-west-2"]],[v,[y,"us-west-1"]],[v,[y,"ca-central-1"]],[v,[y,"ap-southeast-1"]],[v,[y,"ap-northeast-1"]],[v,[y,"ap-southeast-2"]],[v,[{fn:ie,argv:[ae,"name"]},"aws-us-gov"]]],results:[[N],["https://sts.amazonaws.com",{authSchemes:[{name:Ae,signingName:Ee,signingRegion:Se}]}],[ve,{authSchemes:[{name:Ae,signingName:Ee,signingRegion:"{Region}"}]}],[N,"Invalid Configuration: FIPS and custom endpoint are not supported"],[N,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[ye,K],["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",K],[N,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://sts.{Region}.amazonaws.com",K],["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",K],[N,"FIPS is enabled but this partition does not support FIPS"],["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",K],[N,"DualStack is enabled but this partition does not support DualStack"],[ve,K],[N,"Invalid Configuration: Missing Region"]]},Cs=2,P=1e8,xs=new Int32Array([-1,1,-1,0,30,3,1,4,P+14,2,5,P+14,3,25,6,4,24,7,5,P+1,8,6,9,P+13,7,P+1,10,10,P+1,11,11,P+1,12,12,P+1,13,13,P+1,14,14,P+1,15,15,P+1,16,16,P+1,17,17,P+1,18,18,P+1,19,19,P+1,20,20,P+1,21,21,P+1,22,22,P+1,23,23,P+1,P+2,8,P+11,P+12,4,28,26,9,27,P+10,24,P+8,P+9,8,29,P+7,9,P+6,P+7,3,P+3,31,4,P+4,P+5]),ws=Yt.from(xs,Cs,Re.conditions,Re.results),Ts=new Xt({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),Oe=(u,p={})=>Ts.get(u,()=>Jt(ws,{endpointParams:u,logger:p.logger}));Zt.aws=At;var Ds=(u)=>async(p,h,S)=>{if(!S)throw Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");let m=await u(p,h,S),E=xe(h)?.commandInstance?.constructor?.getEndpointParameterInstructions;if(!E)throw Error(`getEndpointParameterInstructions() is not defined on '${h.commandName}'`);let f=await es(S,{getEndpointParameterInstructions:E},p);return Object.assign(m,f)},bs=async(u,p,h)=>({operation:xe(p).operation,region:await Ce(u.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),$s=Ds(bs);function Ne(u){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:u.region},propertiesExtractor:(p,h)=>({signingProperties:{config:p,context:h}})}}function ue(u){return{schemeId:"aws.auth#sigv4a",signingProperties:{name:"sts",region:u.region},propertiesExtractor:(p,h)=>({signingProperties:{config:p,context:h}})}}function We(u){return{schemeId:"smithy.api#noAuth"}}var ks=(u,p,h)=>(m)=>{let f=u(m).properties?.authSchemes;if(!f)return p(m);let I=[];for(let x of f){let{name:R,properties:w={},...O}=x,T=R.toLowerCase();if(R!==T)console.warn(`HttpAuthScheme has been normalized with lowercasing: '${R}' to '${T}'`);let C;if(T==="sigv4a"){C="aws.auth#sigv4a";let oe=f.find((re)=>{let Pe=re.name.toLowerCase();return Pe!=="sigv4a"&&Pe.startsWith("sigv4")});if($e.sigv4aDependency()==="none"&&oe)continue}else if(T.startsWith("sigv4"))C="aws.auth#sigv4";else throw Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${T}'`);let L=h[C];if(!L)throw Error(`Could not find HttpAuthOption create function for '${C}'`);let D=L(m);D.schemeId=C,D.signingProperties={...D.signingProperties||{},...O,...w},I.push(D)}return I},Os=(u)=>{let p=[];switch(u.operation){case"AssumeRoleWithWebIdentity":{p.push(We()),p.push(ue(u));break}default:p.push(Ne(u)),p.push(ue(u))}return p},Ns=ks(Oe,Os,{"aws.auth#sigv4":Ne,"aws.auth#sigv4a":ue,"smithy.api#noAuth":We}),Ws=(u)=>{let p=gs(u),h=hs(p);return Object.assign(h,{authSchemePreference:Ce(u.authSchemePreference??[])})},Hs=(u)=>Object.assign(u,{useDualstackEndpoint:u.useDualstackEndpoint??!1,useFipsEndpoint:u.useFipsEndpoint??!1,useGlobalEndpoint:u.useGlobalEndpoint??!1,defaultSigningName:"sts"}),Us={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},qs="3.997.43",Fs={version:qs};class _ extends Nt{constructor(u){super(u);Object.setPrototypeOf(this,_.prototype)}}class z extends _{name="ExpiredTokenException";$fault="client";constructor(u){super({name:"ExpiredTokenException",$fault:"client",...u});Object.setPrototypeOf(this,z.prototype)}}class Y extends _{name="MalformedPolicyDocumentException";$fault="client";constructor(u){super({name:"MalformedPolicyDocumentException",$fault:"client",...u});Object.setPrototypeOf(this,Y.prototype)}}class X extends _{name="PackedPolicyTooLargeException";$fault="client";constructor(u){super({name:"PackedPolicyTooLargeException",$fault:"client",...u});Object.setPrototypeOf(this,X.prototype)}}class J extends _{name="RegionDisabledException";$fault="client";constructor(u){super({name:"RegionDisabledException",$fault:"client",...u});Object.setPrototypeOf(this,J.prototype)}}class Z extends _{name="IDPRejectedClaimException";$fault="client";constructor(u){super({name:"IDPRejectedClaimException",$fault:"client",...u});Object.setPrototypeOf(this,Z.prototype)}}class ee extends _{name="InvalidIdentityTokenException";$fault="client";constructor(u){super({name:"InvalidIdentityTokenException",$fault:"client",...u});Object.setPrototypeOf(this,ee.prototype)}}class te extends _{name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor(u){super({name:"IDPCommunicationErrorException",$fault:"client",...u});Object.setPrototypeOf(this,te.prototype)}}var Ls="Arn",Ks="AccessKeyId",Ms="AssumeRole",js="AssumedRoleId",Gs="AssumeRoleRequest",Vs="AssumeRoleResponse",de="AssumedRoleUser",zs="AssumeRoleWithWebIdentity",Bs="AssumeRoleWithWebIdentityRequest",Qs="AssumeRoleWithWebIdentityResponse",Ys="Audience",le="Credentials",Xs="ContextAssertion",He="DurationSeconds",Js="Expiration",Zs="ExternalId",en="ExpiredTokenException",tn="IDPCommunicationErrorException",sn="IDPRejectedClaimException",nn="InvalidIdentityTokenException",on="Key",rn="MalformedPolicyDocumentException",Ue="Policy",qe="PolicyArns",an="ProviderArn",cn="ProvidedContexts",un="ProvidedContextsListType",dn="ProvidedContext",ln="PolicyDescriptorType",pn="ProviderId",Fe="PackedPolicySize",gn="PackedPolicyTooLargeException",hn="Provider",Le="RoleArn",mn="RegionDisabledException",Ke="RoleSessionName",Pn="SecretAccessKey",fn="SubjectFromWebIdentityToken",pe="SourceIdentity",Sn="SerialNumber",An="SessionToken",En="Tags",vn="TokenCode",yn="TransitiveTagKeys",In="Tag",Rn="Value",_n="WebIdentityToken",Cn="arn",xn="accessKeySecretType",W="awsQueryError",H="client",wn="clientTokenType",U="error",q="httpError",F="message",Tn="policyDescriptorListType",Me="smithy.ts.sdk.synthetic.com.amazonaws.sts",Dn="tagListType",A="com.amazonaws.sts",je=Te.for(Me),Ge=[-3,Me,"STSServiceException",0,[],[]];je.registerError(Ge,_);var k=Te.for(A),Ve=[-3,A,en,{[W]:["ExpiredTokenException",400],[U]:H,[q]:400},[F],[0]];k.registerError(Ve,z);var ze=[-3,A,tn,{[W]:["IDPCommunicationError",400],[U]:H,[q]:400},[F],[0]];k.registerError(ze,te);var Be=[-3,A,sn,{[W]:["IDPRejectedClaim",403],[U]:H,[q]:403},[F],[0]];k.registerError(Be,Z);var Qe=[-3,A,nn,{[W]:["InvalidIdentityToken",400],[U]:H,[q]:400},[F],[0]];k.registerError(Qe,ee);var Ye=[-3,A,rn,{[W]:["MalformedPolicyDocument",400],[U]:H,[q]:400},[F],[0]];k.registerError(Ye,Y);var Xe=[-3,A,gn,{[W]:["PackedPolicyTooLarge",400],[U]:H,[q]:400},[F],[0]];k.registerError(Xe,X);var Je=[-3,A,mn,{[W]:["RegionDisabledException",403],[U]:H,[q]:403},[F],[0]];k.registerError(Je,J);var Ze=[je,k],bn=[0,A,xn,8,0],$n=[0,A,wn,8,0],ge=[3,A,de,0,[js,Ls],[0,0],2],et=[3,A,Gs,0,[Le,Ke,qe,Ue,He,En,yn,Zs,Sn,vn,pe,cn],[0,0,()=>at,0,1,()=>On,64,0,0,0,0,()=>kn],2],tt=[3,A,Vs,0,[le,de,Fe,pe],[[()=>he,0],()=>ge,1,0]],st=[3,A,Bs,0,[Le,Ke,_n,pn,qe,Ue,He],[0,0,[()=>$n,0],0,()=>at,0,1],3],nt=[3,A,Qs,0,[le,fn,de,Fe,hn,Ys,pe],[[()=>he,0],0,()=>ge,1,0,0,0]],he=[3,A,le,0,[Ks,Pn,An,Js],[0,[()=>bn,0],0,4],4],ot=[3,A,ln,0,[Cn],[0]],rt=[3,A,dn,0,[an,Xs],[0,0]],it=[3,A,In,0,[on,Rn],[0,0],2],at=[1,A,Tn,0,()=>ot],kn=[1,A,un,0,()=>rt],On=[1,A,Dn,0,()=>it],ct=[9,A,Ms,0,()=>et,()=>tt],ut=[9,A,zs,0,()=>st,()=>nt],Nn=(u)=>({apiVersion:"2011-06-15",base64Decoder:u?.base64Decoder??Es,base64Encoder:u?.base64Encoder??As,disableHostPrefix:u?.disableHostPrefix??!1,endpointProvider:u?.endpointProvider??Oe,extensions:u?.extensions??[],httpAuthSchemeProvider:u?.httpAuthSchemeProvider??Ns,httpAuthSchemes:u?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(p)=>p.getIdentityProvider("aws.auth#sigv4"),signer:new De},{schemeId:"aws.auth#sigv4a",identityProvider:(p)=>p.getIdentityProvider("aws.auth#sigv4a"),signer:new be},{schemeId:"smithy.api#noAuth",identityProvider:(p)=>p.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new _e}],logger:u?.logger??new Wt,protocol:u?.protocol??Rs,protocolSettings:u?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:Ze,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:u?.serviceId??"STS",sha256:u?.sha256??_s,signerConstructor:u?.signerConstructor??$e,urlParser:u?.urlParser??ns,utf8Decoder:u?.utf8Decoder??Ss,utf8Encoder:u?.utf8Encoder??fs}),Wn=(u)=>{Ht(process.version);let p=jt(u),h=()=>p().then(Ut),S=Nn(u);Et(process.version);let m={profile:u?.profile,logger:S.logger};return{...S,...u,runtime:"node",defaultsMode:p,authSchemePreference:u?.authSchemePreference??b(Ps,m),bodyLengthChecker:u?.bodyLengthChecker??vs,defaultUserAgentProvider:u?.defaultUserAgentProvider??vt({serviceId:S.serviceId,clientVersion:Fs.version}),httpAuthSchemes:u?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(E)=>E.getIdentityProvider("aws.auth#sigv4")||(async(f)=>await u.credentialDefaultProvider(f?.__config||{})()),signer:new De},{schemeId:"aws.auth#sigv4a",identityProvider:(E)=>E.getIdentityProvider("aws.auth#sigv4a"),signer:new be},{schemeId:"smithy.api#noAuth",identityProvider:(E)=>E.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new _e}],maxAttempts:u?.maxAttempts??b(us,u),region:u?.region??b(zt,{...Bt,...m}),requestHandler:Is.create(u?.requestHandler??h),retryMode:u?.retryMode??b({...cs,default:async()=>(await h()).retryMode||as},u),sigv4aSigningRegionSet:u?.sigv4aSigningRegionSet??b(ms,m),streamCollector:u?.streamCollector??ys,useDualstackEndpoint:u?.useDualstackEndpoint??b(Vt,m),useFipsEndpoint:u?.useFipsEndpoint??b(Gt,m),userAgentAppId:u?.userAgentAppId??b(yt,m)}},Hn=(u)=>{let{httpAuthSchemes:p,httpAuthSchemeProvider:h,credentials:S}=u;return{setHttpAuthScheme(m){let E=p.findIndex((f)=>f.schemeId===m.schemeId);if(E===-1)p.push(m);else p.splice(E,1,m)},httpAuthSchemes(){return p},setHttpAuthSchemeProvider(m){h=m},httpAuthSchemeProvider(){return h},setCredentials(m){S=m},credentials(){return S}}},Un=(u)=>({httpAuthSchemes:u.httpAuthSchemes(),httpAuthSchemeProvider:u.httpAuthSchemeProvider(),credentials:u.credentials()}),qn=(u,p)=>{let h=Object.assign(It(u),qt(u),os(u),Hn(u));return p.forEach((S)=>S.configure(h)),Object.assign(u,Rt(h),Ft(h),rs(h),Un(h))};class V extends we{config;constructor(...[u]){let p=Wn(u||{});super(p);this.initConfig=p;let h=Hs(p),S=_t(h),m=ds(S),E=Qt(m),f=Ct(E),I=ts(f),x=Ws(I),R=qn(x,u?.extensions||[]);this.config=R,this.middlewareStack.use(ps(this.config)),this.middlewareStack.use(xt(this.config)),this.middlewareStack.use(ls(this.config)),this.middlewareStack.use(is(this.config)),this.middlewareStack.use(wt(this.config)),this.middlewareStack.use(Tt(this.config)),this.middlewareStack.use(Dt(this.config)),this.middlewareStack.use($t(this.config,{httpAuthSchemeParametersProvider:$s,identityProviderConfigProvider:async(w)=>new kt({"aws.auth#sigv4":w.credentials,"aws.auth#sigv4a":w.credentials})})),this.middlewareStack.use(Ot(this.config))}destroy(){super.destroy()}}var dt=Lt(Us,"AWSSecurityTokenServiceV20110615","STSClient",ss),lt={},pt=(u,p,h,S)=>[];class se extends dt(lt,pt,"AssumeRole",ct){}class ne extends dt(lt,pt,"AssumeRoleWithWebIdentity",ut){}var Fn={AssumeRoleCommand:se,AssumeRoleWithWebIdentityCommand:ne};class me extends V{}Kt(Fn,me);var gt=(u)=>{if(typeof u?.Arn==="string"){let p=u.Arn.split(":");if(p.length>4&&p[4]!=="")return p[4]}return},ht=async(u,p,h,S={})=>{let m=typeof u==="function"?await u():u,E=typeof p==="function"?await p():p,f="",I=m??E??(f=await bt(S)());return h?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${m} (credential provider clientConfig)`,`${E} (contextual client)`,`${f} (STS default: AWS_REGION, profile region, or us-east-1)`),I},Ln=(u,p)=>{let h,S;return async(m,E)=>{if(S=m,!h){let{logger:w=u?.parentClientConfig?.logger,profile:O=u?.parentClientConfig?.profile,region:T,requestHandler:C=u?.parentClientConfig?.requestHandler,credentialProviderLogger:L,userAgentAppId:D=u?.parentClientConfig?.userAgentAppId}=u,oe=await ht(T,u?.parentClientConfig?.region,L,{logger:w,profile:O}),re=!mt(C);h=new p({...u,userAgentAppId:D,profile:O,credentialDefaultProvider:()=>async()=>S,region:oe,requestHandler:re?C:void 0,logger:w})}let{Credentials:f,AssumedRoleUser:I}=await h.send(new se(E));if(!f||!f.AccessKeyId||!f.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${E.RoleArn}`);let x=gt(I),R={accessKeyId:f.AccessKeyId,secretAccessKey:f.SecretAccessKey,sessionToken:f.SessionToken,expiration:f.Expiration,...f.CredentialScope&&{credentialScope:f.CredentialScope},...x&&{accountId:x}};return ce(R,"CREDENTIALS_STS_ASSUME_ROLE","i"),R}},Kn=(u,p)=>{let h;return async(S)=>{if(!h){let{logger:x=u?.parentClientConfig?.logger,profile:R=u?.parentClientConfig?.profile,region:w,requestHandler:O=u?.parentClientConfig?.requestHandler,credentialProviderLogger:T,userAgentAppId:C=u?.parentClientConfig?.userAgentAppId}=u,L=await ht(w,u?.parentClientConfig?.region,T,{logger:x,profile:R}),D=!mt(O);h=new p({...u,userAgentAppId:C,profile:R,region:L,requestHandler:D?O:void 0,logger:x})}let{Credentials:m,AssumedRoleUser:E}=await h.send(new ne(S));if(!m||!m.AccessKeyId||!m.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${S.RoleArn}`);let f=gt(E),I={accessKeyId:m.AccessKeyId,secretAccessKey:m.SecretAccessKey,sessionToken:m.SessionToken,expiration:m.Expiration,...m.CredentialScope&&{credentialScope:m.CredentialScope},...f&&{accountId:f}};if(f)ce(I,"RESOLVED_ACCOUNT_ID","T");return ce(I,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),I}},mt=(u)=>u?.metadata?.handlerProtocol==="h2",Pt=(u,p)=>{if(!p)return u;else return class extends u{constructor(S){super(S);for(let m of p)this.middlewareStack.use(m)}}},ft=(u={},p)=>Ln(u,Pt(V,p)),St=(u={},p)=>Kn(u,Pt(V,p)),Mn=(u)=>(p)=>u({roleAssumer:ft(p),roleAssumerWithWebIdentity:St(p),...p});var Vn=ct,zn=se,Bn=et,Qn=tt,Yn=ut,Xn=ne,Jn=st,Zn=nt,eo=ge,to=he,so=z,no=Ve,oo=te,ro=ze,io=Z,ao=Be,co=ee,uo=Qe,lo=Y,po=Ye,go=X,ho=Xe,mo=ot,Po=rt,fo=J,So=Je,Ao=me,Eo=V,vo=_,yo=Ge,Io=it,Ro=Mn,_o=Ze,Co=ft,xo=St;export{jn as $Command,Gn as __Client,Vn as AssumeRole$,zn as AssumeRoleCommand,Bn as AssumeRoleRequest$,Qn as AssumeRoleResponse$,Yn as AssumeRoleWithWebIdentity$,Xn as AssumeRoleWithWebIdentityCommand,Jn as AssumeRoleWithWebIdentityRequest$,Zn as AssumeRoleWithWebIdentityResponse$,eo as AssumedRoleUser$,to as Credentials$,so as ExpiredTokenException,no as ExpiredTokenException$,oo as IDPCommunicationErrorException,ro as IDPCommunicationErrorException$,io as IDPRejectedClaimException,ao as IDPRejectedClaimException$,co as InvalidIdentityTokenException,uo as InvalidIdentityTokenException$,lo as MalformedPolicyDocumentException,po as MalformedPolicyDocumentException$,go as PackedPolicyTooLargeException,ho as PackedPolicyTooLargeException$,mo as PolicyDescriptorType$,Po as ProvidedContext$,fo as RegionDisabledException,So as RegionDisabledException$,Ao as STS,Eo as STSClient,vo as STSServiceException,yo as STSServiceException$,Io as Tag$,Ro as decorateDefaultCredentialProvider,_o as errorTypeRegistries,Co as getDefaultRoleAssumer,xo as getDefaultRoleAssumerWithWebIdentity};
|