@shumai-one/shumai-transcode 0.4.4 → 0.4.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,2 +1,2 @@
1
1
  // @bun
2
- import{i,s,e,r,a,o,n,l,c,t,d,g,B}from"./shumai-transcode-app.js";var{awsEndpointFunctions:ie,emitWarningIfUnsupportedVersion:ae,createDefaultUserAgentProvider:ce,NODE_APP_ID_CONFIG_OPTIONS:ue,getAwsRegionExtensionConfiguration:de,resolveAwsRegionExtensionConfiguration:le,resolveUserAgentConfig:pe,resolveHostHeaderConfig:he,getUserAgentPlugin:ge,getHostHeaderPlugin:me,getLoggerPlugin:_e,getRecursionDetectionPlugin:Se}=t(),{NoAuthSigner:fe,getHttpAuthSchemeEndpointRuleSetPlugin:Ee,DefaultIdentityProviderConfig:Pe,getHttpSigningPlugin:ve}=c(),{normalizeProvider:W,getSmithyContext:Re,ServiceException:Ce,NoOpLogger:xe,emitWarningIfUnsupportedVersion:Ie,loadConfigsForDefaultMode:Ae,getDefaultExtensionConfiguration:ye,resolveDefaultRuntimeConfig:Oe,Client:Te,makeBuilder:De,createAggregatedClient:Ne}=s(),{Command:fs}=s();var{resolveDefaultsModeConfig:we,loadConfig:E,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:ke,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:be,NODE_REGION_CONFIG_OPTIONS:Fe,NODE_REGION_CONFIG_FILE_OPTIONS:$e,resolveRegionConfig:qe}=e(),{BinaryDecisionDiagram:He,EndpointCache:Ue,decideEndpoint:Ge,customEndpointFunctions:Me,resolveEndpointConfig:ze,getEndpointPlugin:je}=r(),{parseUrl:Le,getHttpHandlerExtensionConfiguration:Ke,resolveHttpHandlerRuntimeConfig:Ve,getContentLengthPlugin:Be}=n(),{DEFAULT_RETRY_MODE:We,NODE_RETRY_MODE_CONFIG_OPTIONS:Qe,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:Ye,resolveRetryConfig:Je,getRetryPlugin:Xe}=l(),{TypeRegistry:Q,getSchemaSerdePlugin:Ze}=i(),{resolveAwsSdkSigV4Config:et,AwsSdkSigV4Signer:tt,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:st}=g(),{toUtf8:ot,fromUtf8:nt,toBase64:rt,fromBase64:it,calculateBodyLength:at}=a(),{streamCollector:ct,NodeHttpHandler:ut}=B(),{AwsRestJsonProtocol:dt}=d(),{Sha256:lt}=o(),pt=async(u,p,h)=>({operation:Re(p).operation,region:await W(u.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function ht(u){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:u.region},propertiesExtractor:(p,h)=>({signingProperties:{config:p,context:h}})}}function gt(u){return{schemeId:"smithy.api#noAuth"}}var mt=(u)=>{let p=[];switch(u.operation){case"GetRoleCredentials":{p.push(gt());break}default:p.push(ht(u))}return p},_t=(u)=>{let p=et(u);return Object.assign(p,{authSchemePreference:W(u.authSchemePreference??[])})},St=(u)=>Object.assign(u,{useDualstackEndpoint:u.useDualstackEndpoint??!1,useFipsEndpoint:u.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"}),ft={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Et="3.997.43",Pt={version:Et},C="ref",P=-1,A=!0,z="isSet",Y="PartitionResult",y="booleanEquals",k="getAttr",j={[C]:"Endpoint"},b={[C]:Y},R={},L=[{[C]:"Region"}],K={conditions:[[z,[j]],[z,L],["aws.partition",L,Y],[y,[{[C]:"UseFIPS"},A]],[y,[{[C]:"UseDualStack"},A]],[y,[{fn:k,argv:[b,"supportsDualStack"]},A]],[y,[{fn:k,argv:[b,"supportsFIPS"]},A]],["stringEquals",[{fn:k,argv:[b,"name"]},"aws-us-gov"]]],results:[[P],[P,"Invalid Configuration: FIPS and custom endpoint are not supported"],[P,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[j,R],["https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",R],[P,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://portal.sso.{Region}.amazonaws.com",R],["https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",R],[P,"FIPS is enabled but this partition does not support FIPS"],["https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",R],[P,"DualStack is enabled but this partition does not support DualStack"],["https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",R],[P,"Invalid Configuration: Missing Region"]]},vt=2,_=1e8,Rt=new Int32Array([-1,1,-1,0,13,3,1,4,_+12,2,5,_+12,3,8,6,4,7,_+11,5,_+9,_+10,4,11,9,6,10,_+8,7,_+6,_+7,5,12,_+5,6,_+4,_+5,3,_+1,14,4,_+2,_+3]),Ct=He.from(Rt,vt,K.conditions,K.results),xt=new Ue({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),It=(u,p={})=>xt.get(u,()=>Ge(Ct,{endpointParams:u,logger:p.logger}));Me.aws=ie;class v extends Ce{constructor(u){super(u);Object.setPrototypeOf(this,v.prototype)}}class F extends v{name="InvalidRequestException";$fault="client";constructor(u){super({name:"InvalidRequestException",$fault:"client",...u});Object.setPrototypeOf(this,F.prototype)}}class q extends v{name="ResourceNotFoundException";$fault="client";constructor(u){super({name:"ResourceNotFoundException",$fault:"client",...u});Object.setPrototypeOf(this,q.prototype)}}class H extends v{name="TooManyRequestsException";$fault="client";constructor(u){super({name:"TooManyRequestsException",$fault:"client",...u});Object.setPrototypeOf(this,H.prototype)}}class U extends v{name="UnauthorizedException";$fault="client";constructor(u){super({name:"UnauthorizedException",$fault:"client",...u});Object.setPrototypeOf(this,U.prototype)}}var At="AccessTokenType",yt="GetRoleCredentials",Ot="GetRoleCredentialsRequest",Tt="GetRoleCredentialsResponse",Dt="InvalidRequestException",Nt="RoleCredentials",wt="ResourceNotFoundException",kt="SecretAccessKeyType",bt="SessionTokenType",Ft="TooManyRequestsException",$t="UnauthorizedException",qt="accountId",Ht="accessKeyId",Ut="accessToken",Gt="account_id",O="client",T="error",Mt="expiration",zt="http",D="httpError",jt="httpHeader",V="httpQuery",N="message",Lt="roleCredentials",Kt="roleName",Vt="role_name",J="smithy.ts.sdk.synthetic.com.amazonaws.sso",Bt="secretAccessKey",Wt="sessionToken",Qt="x-amz-sso_bearer_token",S="com.amazonaws.sso",X=Q.for(J),Yt=[-3,J,"SSOServiceException",0,[],[]];X.registerError(Yt,v);var x=Q.for(S),Jt=[-3,S,Dt,{[T]:O,[D]:400},[N],[0]];x.registerError(Jt,F);var Xt=[-3,S,wt,{[T]:O,[D]:404},[N],[0]];x.registerError(Xt,q);var Zt=[-3,S,Ft,{[T]:O,[D]:429},[N],[0]];x.registerError(Zt,H);var es=[-3,S,$t,{[T]:O,[D]:401},[N],[0]];x.registerError(es,U);var ts=[X,x],ss=[0,S,At,8,0],os=[0,S,kt,8,0],ns=[0,S,bt,8,0],rs=[3,S,Ot,0,[Kt,qt,Ut],[[0,{[V]:Vt}],[0,{[V]:Gt}],[()=>ss,{[jt]:Qt}]],3],is=[3,S,Tt,0,[Lt],[[()=>as,0]]],as=[3,S,Nt,0,[Ht,Bt,Wt,Mt],[0,[()=>os,0],[()=>ns,0],1]],cs=[9,S,yt,{[zt]:["GET","/federation/credentials",200]},()=>rs,()=>is],us=(u)=>({apiVersion:"2019-06-10",base64Decoder:u?.base64Decoder??it,base64Encoder:u?.base64Encoder??rt,disableHostPrefix:u?.disableHostPrefix??!1,endpointProvider:u?.endpointProvider??It,extensions:u?.extensions??[],httpAuthSchemeProvider:u?.httpAuthSchemeProvider??mt,httpAuthSchemes:u?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(p)=>p.getIdentityProvider("aws.auth#sigv4"),signer:new tt},{schemeId:"smithy.api#noAuth",identityProvider:(p)=>p.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new fe}],logger:u?.logger??new xe,protocol:u?.protocol??dt,protocolSettings:u?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:ts,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:u?.serviceId??"SSO",sha256:u?.sha256??lt,urlParser:u?.urlParser??Le,utf8Decoder:u?.utf8Decoder??nt,utf8Encoder:u?.utf8Encoder??ot}),ds=(u)=>{Ie(process.version);let p=we(u),h=()=>p().then(Ae),f=us(u);ae(process.version);let m={profile:u?.profile,logger:f.logger};return{...f,...u,runtime:"node",defaultsMode:p,authSchemePreference:u?.authSchemePreference??E(st,m),bodyLengthChecker:u?.bodyLengthChecker??at,defaultUserAgentProvider:u?.defaultUserAgentProvider??ce({serviceId:f.serviceId,clientVersion:Pt.version}),maxAttempts:u?.maxAttempts??E(Ye,u),region:u?.region??E(Fe,{...$e,...m}),requestHandler:ut.create(u?.requestHandler??h),retryMode:u?.retryMode??E({...Qe,default:async()=>(await h()).retryMode||We},u),streamCollector:u?.streamCollector??ct,useDualstackEndpoint:u?.useDualstackEndpoint??E(be,m),useFipsEndpoint:u?.useFipsEndpoint??E(ke,m),userAgentAppId:u?.userAgentAppId??E(ue,m)}},ls=(u)=>{let{httpAuthSchemes:p,httpAuthSchemeProvider:h,credentials:f}=u;return{setHttpAuthScheme(m){let I=p.findIndex((w)=>w.schemeId===m.schemeId);if(I===-1)p.push(m);else p.splice(I,1,m)},httpAuthSchemes(){return p},setHttpAuthSchemeProvider(m){h=m},httpAuthSchemeProvider(){return h},setCredentials(m){f=m},credentials(){return f}}},ps=(u)=>({httpAuthSchemes:u.httpAuthSchemes(),httpAuthSchemeProvider:u.httpAuthSchemeProvider(),credentials:u.credentials()}),hs=(u,p)=>{let h=Object.assign(de(u),ye(u),Ke(u),ls(u));return p.forEach((f)=>f.configure(h)),Object.assign(u,le(h),Oe(h),Ve(h),ps(h))};class G extends Te{config;constructor(...[u]){let p=ds(u||{});super(p);this.initConfig=p;let h=St(p),f=pe(h),m=Je(f),I=qe(m),w=he(I),se=ze(w),oe=_t(se),ne=hs(oe,u?.extensions||[]);this.config=ne,this.middlewareStack.use(Ze(this.config)),this.middlewareStack.use(ge(this.config)),this.middlewareStack.use(Xe(this.config)),this.middlewareStack.use(Be(this.config)),this.middlewareStack.use(me(this.config)),this.middlewareStack.use(_e(this.config)),this.middlewareStack.use(Se(this.config)),this.middlewareStack.use(Ee(this.config,{httpAuthSchemeParametersProvider:pt,identityProviderConfigProvider:async(re)=>new Pe({"aws.auth#sigv4":re.credentials})})),this.middlewareStack.use(ve(this.config))}destroy(){super.destroy()}}var gs=De(ft,"SWBPortalService","SSOClient",je),ms={},_s=(u,p,h,f)=>[];class M extends gs(ms,_s,"GetRoleCredentials",cs){}var Ss={GetRoleCredentialsCommand:M};class Z extends G{}Ne(Ss,Z);var ee=M;var te=G;export{ee as GetRoleCredentialsCommand,te as SSOClient};
2
+ import{i,s,e,r,a,o,n,g,c,t,B,l,d}from"./shumai-transcode-app.js";var{awsEndpointFunctions:ie,emitWarningIfUnsupportedVersion:ae,createDefaultUserAgentProvider:ce,NODE_APP_ID_CONFIG_OPTIONS:ue,getAwsRegionExtensionConfiguration:de,resolveAwsRegionExtensionConfiguration:le,resolveUserAgentConfig:pe,resolveHostHeaderConfig:he,getUserAgentPlugin:ge,getHostHeaderPlugin:me,getLoggerPlugin:_e,getRecursionDetectionPlugin:Se}=t(),{NoAuthSigner:fe,getHttpAuthSchemeEndpointRuleSetPlugin:Ee,DefaultIdentityProviderConfig:Pe,getHttpSigningPlugin:ve}=c(),{normalizeProvider:W,getSmithyContext:Re,ServiceException:Ce,NoOpLogger:xe,emitWarningIfUnsupportedVersion:Ie,loadConfigsForDefaultMode:Ae,getDefaultExtensionConfiguration:ye,resolveDefaultRuntimeConfig:Oe,Client:Te,makeBuilder:De,createAggregatedClient:Ne}=s(),{Command:fs}=s();var{resolveDefaultsModeConfig:we,loadConfig:E,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:ke,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:be,NODE_REGION_CONFIG_OPTIONS:Fe,NODE_REGION_CONFIG_FILE_OPTIONS:$e,resolveRegionConfig:qe}=e(),{BinaryDecisionDiagram:He,EndpointCache:Ue,decideEndpoint:Ge,customEndpointFunctions:Me,resolveEndpointConfig:ze,getEndpointPlugin:je}=r(),{parseUrl:Le,getHttpHandlerExtensionConfiguration:Ke,resolveHttpHandlerRuntimeConfig:Ve,getContentLengthPlugin:Be}=n(),{DEFAULT_RETRY_MODE:We,NODE_RETRY_MODE_CONFIG_OPTIONS:Qe,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:Ye,resolveRetryConfig:Je,getRetryPlugin:Xe}=g(),{TypeRegistry:Q,getSchemaSerdePlugin:Ze}=i(),{resolveAwsSdkSigV4Config:et,AwsSdkSigV4Signer:tt,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:st}=l(),{toUtf8:ot,fromUtf8:nt,toBase64:rt,fromBase64:it,calculateBodyLength:at}=a(),{streamCollector:ct,NodeHttpHandler:ut}=d(),{AwsRestJsonProtocol:dt}=B(),{Sha256:lt}=o(),pt=async(u,p,h)=>({operation:Re(p).operation,region:await W(u.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function ht(u){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:u.region},propertiesExtractor:(p,h)=>({signingProperties:{config:p,context:h}})}}function gt(u){return{schemeId:"smithy.api#noAuth"}}var mt=(u)=>{let p=[];switch(u.operation){case"GetRoleCredentials":{p.push(gt());break}default:p.push(ht(u))}return p},_t=(u)=>{let p=et(u);return Object.assign(p,{authSchemePreference:W(u.authSchemePreference??[])})},St=(u)=>Object.assign(u,{useDualstackEndpoint:u.useDualstackEndpoint??!1,useFipsEndpoint:u.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"}),ft={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Et="3.997.43",Pt={version:Et},C="ref",P=-1,A=!0,z="isSet",Y="PartitionResult",y="booleanEquals",k="getAttr",j={[C]:"Endpoint"},b={[C]:Y},R={},L=[{[C]:"Region"}],K={conditions:[[z,[j]],[z,L],["aws.partition",L,Y],[y,[{[C]:"UseFIPS"},A]],[y,[{[C]:"UseDualStack"},A]],[y,[{fn:k,argv:[b,"supportsDualStack"]},A]],[y,[{fn:k,argv:[b,"supportsFIPS"]},A]],["stringEquals",[{fn:k,argv:[b,"name"]},"aws-us-gov"]]],results:[[P],[P,"Invalid Configuration: FIPS and custom endpoint are not supported"],[P,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[j,R],["https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",R],[P,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://portal.sso.{Region}.amazonaws.com",R],["https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",R],[P,"FIPS is enabled but this partition does not support FIPS"],["https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",R],[P,"DualStack is enabled but this partition does not support DualStack"],["https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",R],[P,"Invalid Configuration: Missing Region"]]},vt=2,_=1e8,Rt=new Int32Array([-1,1,-1,0,13,3,1,4,_+12,2,5,_+12,3,8,6,4,7,_+11,5,_+9,_+10,4,11,9,6,10,_+8,7,_+6,_+7,5,12,_+5,6,_+4,_+5,3,_+1,14,4,_+2,_+3]),Ct=He.from(Rt,vt,K.conditions,K.results),xt=new Ue({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),It=(u,p={})=>xt.get(u,()=>Ge(Ct,{endpointParams:u,logger:p.logger}));Me.aws=ie;class v extends Ce{constructor(u){super(u);Object.setPrototypeOf(this,v.prototype)}}class F extends v{name="InvalidRequestException";$fault="client";constructor(u){super({name:"InvalidRequestException",$fault:"client",...u});Object.setPrototypeOf(this,F.prototype)}}class q extends v{name="ResourceNotFoundException";$fault="client";constructor(u){super({name:"ResourceNotFoundException",$fault:"client",...u});Object.setPrototypeOf(this,q.prototype)}}class H extends v{name="TooManyRequestsException";$fault="client";constructor(u){super({name:"TooManyRequestsException",$fault:"client",...u});Object.setPrototypeOf(this,H.prototype)}}class U extends v{name="UnauthorizedException";$fault="client";constructor(u){super({name:"UnauthorizedException",$fault:"client",...u});Object.setPrototypeOf(this,U.prototype)}}var At="AccessTokenType",yt="GetRoleCredentials",Ot="GetRoleCredentialsRequest",Tt="GetRoleCredentialsResponse",Dt="InvalidRequestException",Nt="RoleCredentials",wt="ResourceNotFoundException",kt="SecretAccessKeyType",bt="SessionTokenType",Ft="TooManyRequestsException",$t="UnauthorizedException",qt="accountId",Ht="accessKeyId",Ut="accessToken",Gt="account_id",O="client",T="error",Mt="expiration",zt="http",D="httpError",jt="httpHeader",V="httpQuery",N="message",Lt="roleCredentials",Kt="roleName",Vt="role_name",J="smithy.ts.sdk.synthetic.com.amazonaws.sso",Bt="secretAccessKey",Wt="sessionToken",Qt="x-amz-sso_bearer_token",S="com.amazonaws.sso",X=Q.for(J),Yt=[-3,J,"SSOServiceException",0,[],[]];X.registerError(Yt,v);var x=Q.for(S),Jt=[-3,S,Dt,{[T]:O,[D]:400},[N],[0]];x.registerError(Jt,F);var Xt=[-3,S,wt,{[T]:O,[D]:404},[N],[0]];x.registerError(Xt,q);var Zt=[-3,S,Ft,{[T]:O,[D]:429},[N],[0]];x.registerError(Zt,H);var es=[-3,S,$t,{[T]:O,[D]:401},[N],[0]];x.registerError(es,U);var ts=[X,x],ss=[0,S,At,8,0],os=[0,S,kt,8,0],ns=[0,S,bt,8,0],rs=[3,S,Ot,0,[Kt,qt,Ut],[[0,{[V]:Vt}],[0,{[V]:Gt}],[()=>ss,{[jt]:Qt}]],3],is=[3,S,Tt,0,[Lt],[[()=>as,0]]],as=[3,S,Nt,0,[Ht,Bt,Wt,Mt],[0,[()=>os,0],[()=>ns,0],1]],cs=[9,S,yt,{[zt]:["GET","/federation/credentials",200]},()=>rs,()=>is],us=(u)=>({apiVersion:"2019-06-10",base64Decoder:u?.base64Decoder??it,base64Encoder:u?.base64Encoder??rt,disableHostPrefix:u?.disableHostPrefix??!1,endpointProvider:u?.endpointProvider??It,extensions:u?.extensions??[],httpAuthSchemeProvider:u?.httpAuthSchemeProvider??mt,httpAuthSchemes:u?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(p)=>p.getIdentityProvider("aws.auth#sigv4"),signer:new tt},{schemeId:"smithy.api#noAuth",identityProvider:(p)=>p.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new fe}],logger:u?.logger??new xe,protocol:u?.protocol??dt,protocolSettings:u?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:ts,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:u?.serviceId??"SSO",sha256:u?.sha256??lt,urlParser:u?.urlParser??Le,utf8Decoder:u?.utf8Decoder??nt,utf8Encoder:u?.utf8Encoder??ot}),ds=(u)=>{Ie(process.version);let p=we(u),h=()=>p().then(Ae),f=us(u);ae(process.version);let m={profile:u?.profile,logger:f.logger};return{...f,...u,runtime:"node",defaultsMode:p,authSchemePreference:u?.authSchemePreference??E(st,m),bodyLengthChecker:u?.bodyLengthChecker??at,defaultUserAgentProvider:u?.defaultUserAgentProvider??ce({serviceId:f.serviceId,clientVersion:Pt.version}),maxAttempts:u?.maxAttempts??E(Ye,u),region:u?.region??E(Fe,{...$e,...m}),requestHandler:ut.create(u?.requestHandler??h),retryMode:u?.retryMode??E({...Qe,default:async()=>(await h()).retryMode||We},u),streamCollector:u?.streamCollector??ct,useDualstackEndpoint:u?.useDualstackEndpoint??E(be,m),useFipsEndpoint:u?.useFipsEndpoint??E(ke,m),userAgentAppId:u?.userAgentAppId??E(ue,m)}},ls=(u)=>{let{httpAuthSchemes:p,httpAuthSchemeProvider:h,credentials:f}=u;return{setHttpAuthScheme(m){let I=p.findIndex((w)=>w.schemeId===m.schemeId);if(I===-1)p.push(m);else p.splice(I,1,m)},httpAuthSchemes(){return p},setHttpAuthSchemeProvider(m){h=m},httpAuthSchemeProvider(){return h},setCredentials(m){f=m},credentials(){return f}}},ps=(u)=>({httpAuthSchemes:u.httpAuthSchemes(),httpAuthSchemeProvider:u.httpAuthSchemeProvider(),credentials:u.credentials()}),hs=(u,p)=>{let h=Object.assign(de(u),ye(u),Ke(u),ls(u));return p.forEach((f)=>f.configure(h)),Object.assign(u,le(h),Oe(h),Ve(h),ps(h))};class G extends Te{config;constructor(...[u]){let p=ds(u||{});super(p);this.initConfig=p;let h=St(p),f=pe(h),m=Je(f),I=qe(m),w=he(I),se=ze(w),oe=_t(se),ne=hs(oe,u?.extensions||[]);this.config=ne,this.middlewareStack.use(Ze(this.config)),this.middlewareStack.use(ge(this.config)),this.middlewareStack.use(Xe(this.config)),this.middlewareStack.use(Be(this.config)),this.middlewareStack.use(me(this.config)),this.middlewareStack.use(_e(this.config)),this.middlewareStack.use(Se(this.config)),this.middlewareStack.use(Ee(this.config,{httpAuthSchemeParametersProvider:pt,identityProviderConfigProvider:async(re)=>new Pe({"aws.auth#sigv4":re.credentials})})),this.middlewareStack.use(ve(this.config))}destroy(){super.destroy()}}var gs=De(ft,"SWBPortalService","SSOClient",je),ms={},_s=(u,p,h,f)=>[];class M extends gs(ms,_s,"GetRoleCredentials",cs){}var Ss={GetRoleCredentialsCommand:M};class Z extends G{}Ne(Ss,Z);var ee=M;var te=G;export{ee as GetRoleCredentialsCommand,te as SSOClient};
@@ -1,2 +1,2 @@
1
1
  // @bun
2
- import{i,s,e,r,a,o,n,l,c,t,d,g,B}from"./shumai-transcode-app.js";var{awsEndpointFunctions:De,emitWarningIfUnsupportedVersion:ke,createDefaultUserAgentProvider:$e,NODE_APP_ID_CONFIG_OPTIONS:we,getAwsRegionExtensionConfiguration:Ne,resolveAwsRegionExtensionConfiguration:be,resolveUserAgentConfig:Ue,resolveHostHeaderConfig:Fe,getUserAgentPlugin:qe,getHostHeaderPlugin:He,getLoggerPlugin:Me,getRecursionDetectionPlugin:Ge}=t(),{NoAuthSigner:je,getHttpAuthSchemeEndpointRuleSetPlugin:Ke,DefaultIdentityProviderConfig:Ve,getHttpSigningPlugin:ze}=c(),{normalizeProvider:te,getSmithyContext:Le,ServiceException:Be,NoOpLogger:We,emitWarningIfUnsupportedVersion:Ye,loadConfigsForDefaultMode:Je,getDefaultExtensionConfiguration:Xe,resolveDefaultRuntimeConfig:Qe,Client:re,makeBuilder:Ze,createAggregatedClient:et}=s(),{Command:tt}=s();var Vr=tt,zr=re;var{resolveDefaultsModeConfig:rt,loadConfig:A,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:ot,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:nt,NODE_REGION_CONFIG_OPTIONS:st,NODE_REGION_CONFIG_FILE_OPTIONS:it,resolveRegionConfig:ct}=e(),{BinaryDecisionDiagram:at,EndpointCache:pt,decideEndpoint:dt,customEndpointFunctions:ut,resolveEndpointConfig:lt,getEndpointPlugin:ht}=r(),{parseUrl:_t,getHttpHandlerExtensionConfiguration:gt,resolveHttpHandlerRuntimeConfig:Et,getContentLengthPlugin:mt}=n(),{DEFAULT_RETRY_MODE:xt,NODE_RETRY_MODE_CONFIG_OPTIONS:ft,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:St,resolveRetryConfig:vt,getRetryPlugin:Pt}=l(),{TypeRegistry:oe,getSchemaSerdePlugin:It}=i(),{resolveAwsSdkSigV4Config:Ct,AwsSdkSigV4Signer:At,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:yt}=g(),{toUtf8:Tt,fromUtf8:Ot,toBase64:Rt,fromBase64:Dt,calculateBodyLength:kt}=a(),{streamCollector:$t,NodeHttpHandler:wt}=B(),{AwsRestJsonProtocol:Nt}=d(),{Sha256:bt}=o(),Ut=async(p,u,E)=>({operation:Le(u).operation,region:await te(p.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function Ft(p){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sso-oauth",region:p.region},propertiesExtractor:(u,E)=>({signingProperties:{config:u,context:E}})}}function qt(p){return{schemeId:"smithy.api#noAuth"}}var Ht=(p)=>{let u=[];switch(p.operation){case"CreateToken":{u.push(qt());break}default:u.push(Ft(p))}return u},Mt=(p)=>{let u=Ct(p);return Object.assign(u,{authSchemePreference:te(p.authSchemePreference??[])})},Gt=(p)=>Object.assign(p,{useDualstackEndpoint:p.useDualstackEndpoint??!1,useFipsEndpoint:p.useFipsEndpoint??!1,defaultSigningName:"sso-oauth"}),jt={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Kt="3.997.43",Vt={version:Kt},O="ref",y=-1,D=!0,X="isSet",ne="PartitionResult",k="booleanEquals",z="getAttr",Q={[O]:"Endpoint"},L={[O]:ne},T={},Z=[{[O]:"Region"}],ee={conditions:[[X,[Q]],[X,Z],["aws.partition",Z,ne],[k,[{[O]:"UseFIPS"},D]],[k,[{[O]:"UseDualStack"},D]],[k,[{fn:z,argv:[L,"supportsDualStack"]},D]],[k,[{fn:z,argv:[L,"supportsFIPS"]},D]],["stringEquals",[{fn:z,argv:[L,"name"]},"aws-us-gov"]]],results:[[y],[y,"Invalid Configuration: FIPS and custom endpoint are not supported"],[y,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[Q,T],["https://oidc-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",T],[y,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://oidc.{Region}.amazonaws.com",T],["https://oidc-fips.{Region}.{PartitionResult#dnsSuffix}",T],[y,"FIPS is enabled but this partition does not support FIPS"],["https://oidc.{Region}.{PartitionResult#dualStackDnsSuffix}",T],[y,"DualStack is enabled but this partition does not support DualStack"],["https://oidc.{Region}.{PartitionResult#dnsSuffix}",T],[y,"Invalid Configuration: Missing Region"]]},zt=2,f=1e8,Lt=new Int32Array([-1,1,-1,0,13,3,1,4,f+12,2,5,f+12,3,8,6,4,7,f+11,5,f+9,f+10,4,11,9,6,10,f+8,7,f+6,f+7,5,12,f+5,6,f+4,f+5,3,f+1,14,4,f+2,f+3]),Bt=at.from(Lt,zt,ee.conditions,ee.results),Wt=new pt({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),Yt=(p,u={})=>Wt.get(p,()=>dt(Bt,{endpointParams:p,logger:u.logger}));ut.aws=De;class x extends Be{constructor(p){super(p);Object.setPrototypeOf(this,x.prototype)}}class w extends x{name="AccessDeniedException";$fault="client";error;reason;error_description;constructor(p){super({name:"AccessDeniedException",$fault:"client",...p});Object.setPrototypeOf(this,w.prototype),this.error=p.error,this.reason=p.reason,this.error_description=p.error_description}}class N extends x{name="AuthorizationPendingException";$fault="client";error;error_description;constructor(p){super({name:"AuthorizationPendingException",$fault:"client",...p});Object.setPrototypeOf(this,N.prototype),this.error=p.error,this.error_description=p.error_description}}class b extends x{name="ExpiredTokenException";$fault="client";error;error_description;constructor(p){super({name:"ExpiredTokenException",$fault:"client",...p});Object.setPrototypeOf(this,b.prototype),this.error=p.error,this.error_description=p.error_description}}class U extends x{name="InternalServerException";$fault="server";error;error_description;constructor(p){super({name:"InternalServerException",$fault:"server",...p});Object.setPrototypeOf(this,U.prototype),this.error=p.error,this.error_description=p.error_description}}class F extends x{name="InvalidClientException";$fault="client";error;error_description;constructor(p){super({name:"InvalidClientException",$fault:"client",...p});Object.setPrototypeOf(this,F.prototype),this.error=p.error,this.error_description=p.error_description}}class q extends x{name="InvalidGrantException";$fault="client";error;error_description;constructor(p){super({name:"InvalidGrantException",$fault:"client",...p});Object.setPrototypeOf(this,q.prototype),this.error=p.error,this.error_description=p.error_description}}class H extends x{name="InvalidRequestException";$fault="client";error;reason;error_description;constructor(p){super({name:"InvalidRequestException",$fault:"client",...p});Object.setPrototypeOf(this,H.prototype),this.error=p.error,this.reason=p.reason,this.error_description=p.error_description}}class M extends x{name="InvalidScopeException";$fault="client";error;error_description;constructor(p){super({name:"InvalidScopeException",$fault:"client",...p});Object.setPrototypeOf(this,M.prototype),this.error=p.error,this.error_description=p.error_description}}class G extends x{name="SlowDownException";$fault="client";error;error_description;constructor(p){super({name:"SlowDownException",$fault:"client",...p});Object.setPrototypeOf(this,G.prototype),this.error=p.error,this.error_description=p.error_description}}class j extends x{name="UnauthorizedClientException";$fault="client";error;error_description;constructor(p){super({name:"UnauthorizedClientException",$fault:"client",...p});Object.setPrototypeOf(this,j.prototype),this.error=p.error,this.error_description=p.error_description}}class K extends x{name="UnsupportedGrantTypeException";$fault="client";error;error_description;constructor(p){super({name:"UnsupportedGrantTypeException",$fault:"client",...p});Object.setPrototypeOf(this,K.prototype),this.error=p.error,this.error_description=p.error_description}}var Jt="AccessDeniedException",Xt="AuthorizationPendingException",Qt="AccessToken",Zt="ClientSecret",er="CreateToken",tr="CreateTokenRequest",rr="CreateTokenResponse",or="CodeVerifier",nr="ExpiredTokenException",sr="InvalidClientException",ir="InvalidGrantException",cr="InvalidRequestException",ar="InternalServerException",pr="InvalidScopeException",dr="IdToken",ur="RefreshToken",lr="SlowDownException",hr="UnauthorizedClientException",_r="UnsupportedGrantTypeException",gr="accessToken",C="client",Er="clientId",mr="clientSecret",xr="codeVerifier",fr="code",Sr="deviceCode",h="error",vr="expiresIn",P="error_description",Pr="grantType",Ir="http",I="httpError",Cr="idToken",se="reason",ie="refreshToken",Ar="redirectUri",ce="smithy.ts.sdk.synthetic.com.amazonaws.ssooidc",yr="scope",Tr="server",Or="tokenType",_="com.amazonaws.ssooidc",ae=oe.for(ce),pe=[-3,ce,"SSOOIDCServiceException",0,[],[]];ae.registerError(pe,x);var S=oe.for(_),de=[-3,_,Jt,{[h]:C,[I]:400},[h,se,P],[0,0,0]];S.registerError(de,w);var ue=[-3,_,Xt,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(ue,N);var le=[-3,_,nr,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(le,b);var he=[-3,_,ar,{[h]:Tr,[I]:500},[h,P],[0,0]];S.registerError(he,U);var _e=[-3,_,sr,{[h]:C,[I]:401},[h,P],[0,0]];S.registerError(_e,F);var ge=[-3,_,ir,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(ge,q);var Ee=[-3,_,cr,{[h]:C,[I]:400},[h,se,P],[0,0,0]];S.registerError(Ee,H);var me=[-3,_,pr,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(me,M);var xe=[-3,_,lr,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(xe,G);var fe=[-3,_,hr,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(fe,j);var Se=[-3,_,_r,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(Se,K);var ve=[ae,S],Rr=[0,_,Qt,8,0],Dr=[0,_,Zt,8,0],kr=[0,_,or,8,0],$r=[0,_,dr,8,0],Pe=[0,_,ur,8,0],Ie=[3,_,tr,0,[Er,mr,Pr,Sr,fr,ie,yr,Ar,xr],[0,[()=>Dr,0],0,0,0,[()=>Pe,0],64,0,[()=>kr,0]],3],Ce=[3,_,rr,0,[gr,Or,vr,ie,Cr],[[()=>Rr,0],0,1,[()=>Pe,0],[()=>$r,0]]],Ae=[9,_,er,{[Ir]:["POST","/token",200]},()=>Ie,()=>Ce],wr=(p)=>({apiVersion:"2019-06-10",base64Decoder:p?.base64Decoder??Dt,base64Encoder:p?.base64Encoder??Rt,disableHostPrefix:p?.disableHostPrefix??!1,endpointProvider:p?.endpointProvider??Yt,extensions:p?.extensions??[],httpAuthSchemeProvider:p?.httpAuthSchemeProvider??Ht,httpAuthSchemes:p?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(u)=>u.getIdentityProvider("aws.auth#sigv4"),signer:new At},{schemeId:"smithy.api#noAuth",identityProvider:(u)=>u.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new je}],logger:p?.logger??new We,protocol:p?.protocol??Nt,protocolSettings:p?.protocolSettings??{defaultNamespace:"com.amazonaws.ssooidc",errorTypeRegistries:ve,version:"2019-06-10",serviceTarget:"AWSSSOOIDCService"},serviceId:p?.serviceId??"SSO OIDC",sha256:p?.sha256??bt,urlParser:p?.urlParser??_t,utf8Decoder:p?.utf8Decoder??Ot,utf8Encoder:p?.utf8Encoder??Tt}),Nr=(p)=>{Ye(process.version);let u=rt(p),E=()=>u().then(Je),v=wr(p);ke(process.version);let m={profile:p?.profile,logger:v.logger};return{...v,...p,runtime:"node",defaultsMode:u,authSchemePreference:p?.authSchemePreference??A(yt,m),bodyLengthChecker:p?.bodyLengthChecker??kt,defaultUserAgentProvider:p?.defaultUserAgentProvider??$e({serviceId:v.serviceId,clientVersion:Vt.version}),maxAttempts:p?.maxAttempts??A(St,p),region:p?.region??A(st,{...it,...m}),requestHandler:wt.create(p?.requestHandler??E),retryMode:p?.retryMode??A({...ft,default:async()=>(await E()).retryMode||xt},p),streamCollector:p?.streamCollector??$t,useDualstackEndpoint:p?.useDualstackEndpoint??A(nt,m),useFipsEndpoint:p?.useFipsEndpoint??A(ot,m),userAgentAppId:p?.userAgentAppId??A(we,m)}},br=(p)=>{let{httpAuthSchemes:u,httpAuthSchemeProvider:E,credentials:v}=p;return{setHttpAuthScheme(m){let R=u.findIndex((V)=>V.schemeId===m.schemeId);if(R===-1)u.push(m);else u.splice(R,1,m)},httpAuthSchemes(){return u},setHttpAuthSchemeProvider(m){E=m},httpAuthSchemeProvider(){return E},setCredentials(m){v=m},credentials(){return v}}},Ur=(p)=>({httpAuthSchemes:p.httpAuthSchemes(),httpAuthSchemeProvider:p.httpAuthSchemeProvider(),credentials:p.credentials()}),Fr=(p,u)=>{let E=Object.assign(Ne(p),Xe(p),gt(p),br(p));return u.forEach((v)=>v.configure(E)),Object.assign(p,be(E),Qe(E),Et(E),Ur(E))};class W extends re{config;constructor(...[p]){let u=Nr(p||{});super(u);this.initConfig=u;let E=Gt(u),v=Ue(E),m=vt(v),R=ct(m),V=Fe(R),ye=lt(V),Te=Mt(ye),Oe=Fr(Te,p?.extensions||[]);this.config=Oe,this.middlewareStack.use(It(this.config)),this.middlewareStack.use(qe(this.config)),this.middlewareStack.use(Pt(this.config)),this.middlewareStack.use(mt(this.config)),this.middlewareStack.use(He(this.config)),this.middlewareStack.use(Me(this.config)),this.middlewareStack.use(Ge(this.config)),this.middlewareStack.use(Ke(this.config,{httpAuthSchemeParametersProvider:Ut,identityProviderConfigProvider:async(Re)=>new Ve({"aws.auth#sigv4":Re.credentials})})),this.middlewareStack.use(ze(this.config))}destroy(){super.destroy()}}var qr=Ze(jt,"AWSSSOOIDCService","SSOOIDCClient",ht),Hr={},Mr=(p,u,E,v)=>[];class Y extends qr(Hr,Mr,"CreateToken",Ae){}var Gr={CreateTokenCommand:Y};class J extends W{}et(Gr,J);var jr={KMS_ACCESS_DENIED:"KMS_AccessDeniedException"},Kr={KMS_DISABLED_KEY:"KMS_DisabledException",KMS_INVALID_KEY_USAGE:"KMS_InvalidKeyUsageException",KMS_INVALID_STATE:"KMS_InvalidStateException",KMS_KEY_NOT_FOUND:"KMS_NotFoundException"};var Lr=w,Br=de,Wr=jr,Yr=N,Jr=ue,Xr=Ae,Qr=Y,Zr=Ie,eo=Ce,to=b,ro=le,oo=U,no=he,so=F,io=_e,co=q,ao=ge,po=H,uo=Ee,lo=Kr,ho=M,_o=me,go=J,Eo=W,mo=x,xo=pe,fo=G,So=xe,vo=j,Po=fe,Io=K,Co=Se,Ao=ve;export{Vr as $Command,zr as __Client,Lr as AccessDeniedException,Br as AccessDeniedException$,Wr as AccessDeniedExceptionReason,Yr as AuthorizationPendingException,Jr as AuthorizationPendingException$,Xr as CreateToken$,Qr as CreateTokenCommand,Zr as CreateTokenRequest$,eo as CreateTokenResponse$,to as ExpiredTokenException,ro as ExpiredTokenException$,oo as InternalServerException,no as InternalServerException$,so as InvalidClientException,io as InvalidClientException$,co as InvalidGrantException,ao as InvalidGrantException$,po as InvalidRequestException,uo as InvalidRequestException$,lo as InvalidRequestExceptionReason,ho as InvalidScopeException,_o as InvalidScopeException$,go as SSOOIDC,Eo as SSOOIDCClient,mo as SSOOIDCServiceException,xo as SSOOIDCServiceException$,fo as SlowDownException,So as SlowDownException$,vo as UnauthorizedClientException,Po as UnauthorizedClientException$,Io as UnsupportedGrantTypeException,Co as UnsupportedGrantTypeException$,Ao as errorTypeRegistries};
2
+ import{i,s,e,r,a,o,n,g,c,t,B,l,d}from"./shumai-transcode-app.js";var{awsEndpointFunctions:De,emitWarningIfUnsupportedVersion:ke,createDefaultUserAgentProvider:$e,NODE_APP_ID_CONFIG_OPTIONS:we,getAwsRegionExtensionConfiguration:Ne,resolveAwsRegionExtensionConfiguration:be,resolveUserAgentConfig:Ue,resolveHostHeaderConfig:Fe,getUserAgentPlugin:qe,getHostHeaderPlugin:He,getLoggerPlugin:Me,getRecursionDetectionPlugin:Ge}=t(),{NoAuthSigner:je,getHttpAuthSchemeEndpointRuleSetPlugin:Ke,DefaultIdentityProviderConfig:Ve,getHttpSigningPlugin:ze}=c(),{normalizeProvider:te,getSmithyContext:Le,ServiceException:Be,NoOpLogger:We,emitWarningIfUnsupportedVersion:Ye,loadConfigsForDefaultMode:Je,getDefaultExtensionConfiguration:Xe,resolveDefaultRuntimeConfig:Qe,Client:re,makeBuilder:Ze,createAggregatedClient:et}=s(),{Command:tt}=s();var Vr=tt,zr=re;var{resolveDefaultsModeConfig:rt,loadConfig:A,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:ot,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:nt,NODE_REGION_CONFIG_OPTIONS:st,NODE_REGION_CONFIG_FILE_OPTIONS:it,resolveRegionConfig:ct}=e(),{BinaryDecisionDiagram:at,EndpointCache:pt,decideEndpoint:dt,customEndpointFunctions:ut,resolveEndpointConfig:lt,getEndpointPlugin:ht}=r(),{parseUrl:_t,getHttpHandlerExtensionConfiguration:gt,resolveHttpHandlerRuntimeConfig:Et,getContentLengthPlugin:mt}=n(),{DEFAULT_RETRY_MODE:xt,NODE_RETRY_MODE_CONFIG_OPTIONS:ft,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:St,resolveRetryConfig:vt,getRetryPlugin:Pt}=g(),{TypeRegistry:oe,getSchemaSerdePlugin:It}=i(),{resolveAwsSdkSigV4Config:Ct,AwsSdkSigV4Signer:At,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:yt}=l(),{toUtf8:Tt,fromUtf8:Ot,toBase64:Rt,fromBase64:Dt,calculateBodyLength:kt}=a(),{streamCollector:$t,NodeHttpHandler:wt}=d(),{AwsRestJsonProtocol:Nt}=B(),{Sha256:bt}=o(),Ut=async(p,u,E)=>({operation:Le(u).operation,region:await te(p.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function Ft(p){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sso-oauth",region:p.region},propertiesExtractor:(u,E)=>({signingProperties:{config:u,context:E}})}}function qt(p){return{schemeId:"smithy.api#noAuth"}}var Ht=(p)=>{let u=[];switch(p.operation){case"CreateToken":{u.push(qt());break}default:u.push(Ft(p))}return u},Mt=(p)=>{let u=Ct(p);return Object.assign(u,{authSchemePreference:te(p.authSchemePreference??[])})},Gt=(p)=>Object.assign(p,{useDualstackEndpoint:p.useDualstackEndpoint??!1,useFipsEndpoint:p.useFipsEndpoint??!1,defaultSigningName:"sso-oauth"}),jt={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Kt="3.997.43",Vt={version:Kt},O="ref",y=-1,D=!0,X="isSet",ne="PartitionResult",k="booleanEquals",z="getAttr",Q={[O]:"Endpoint"},L={[O]:ne},T={},Z=[{[O]:"Region"}],ee={conditions:[[X,[Q]],[X,Z],["aws.partition",Z,ne],[k,[{[O]:"UseFIPS"},D]],[k,[{[O]:"UseDualStack"},D]],[k,[{fn:z,argv:[L,"supportsDualStack"]},D]],[k,[{fn:z,argv:[L,"supportsFIPS"]},D]],["stringEquals",[{fn:z,argv:[L,"name"]},"aws-us-gov"]]],results:[[y],[y,"Invalid Configuration: FIPS and custom endpoint are not supported"],[y,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[Q,T],["https://oidc-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",T],[y,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://oidc.{Region}.amazonaws.com",T],["https://oidc-fips.{Region}.{PartitionResult#dnsSuffix}",T],[y,"FIPS is enabled but this partition does not support FIPS"],["https://oidc.{Region}.{PartitionResult#dualStackDnsSuffix}",T],[y,"DualStack is enabled but this partition does not support DualStack"],["https://oidc.{Region}.{PartitionResult#dnsSuffix}",T],[y,"Invalid Configuration: Missing Region"]]},zt=2,f=1e8,Lt=new Int32Array([-1,1,-1,0,13,3,1,4,f+12,2,5,f+12,3,8,6,4,7,f+11,5,f+9,f+10,4,11,9,6,10,f+8,7,f+6,f+7,5,12,f+5,6,f+4,f+5,3,f+1,14,4,f+2,f+3]),Bt=at.from(Lt,zt,ee.conditions,ee.results),Wt=new pt({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),Yt=(p,u={})=>Wt.get(p,()=>dt(Bt,{endpointParams:p,logger:u.logger}));ut.aws=De;class x extends Be{constructor(p){super(p);Object.setPrototypeOf(this,x.prototype)}}class w extends x{name="AccessDeniedException";$fault="client";error;reason;error_description;constructor(p){super({name:"AccessDeniedException",$fault:"client",...p});Object.setPrototypeOf(this,w.prototype),this.error=p.error,this.reason=p.reason,this.error_description=p.error_description}}class N extends x{name="AuthorizationPendingException";$fault="client";error;error_description;constructor(p){super({name:"AuthorizationPendingException",$fault:"client",...p});Object.setPrototypeOf(this,N.prototype),this.error=p.error,this.error_description=p.error_description}}class b extends x{name="ExpiredTokenException";$fault="client";error;error_description;constructor(p){super({name:"ExpiredTokenException",$fault:"client",...p});Object.setPrototypeOf(this,b.prototype),this.error=p.error,this.error_description=p.error_description}}class U extends x{name="InternalServerException";$fault="server";error;error_description;constructor(p){super({name:"InternalServerException",$fault:"server",...p});Object.setPrototypeOf(this,U.prototype),this.error=p.error,this.error_description=p.error_description}}class F extends x{name="InvalidClientException";$fault="client";error;error_description;constructor(p){super({name:"InvalidClientException",$fault:"client",...p});Object.setPrototypeOf(this,F.prototype),this.error=p.error,this.error_description=p.error_description}}class q extends x{name="InvalidGrantException";$fault="client";error;error_description;constructor(p){super({name:"InvalidGrantException",$fault:"client",...p});Object.setPrototypeOf(this,q.prototype),this.error=p.error,this.error_description=p.error_description}}class H extends x{name="InvalidRequestException";$fault="client";error;reason;error_description;constructor(p){super({name:"InvalidRequestException",$fault:"client",...p});Object.setPrototypeOf(this,H.prototype),this.error=p.error,this.reason=p.reason,this.error_description=p.error_description}}class M extends x{name="InvalidScopeException";$fault="client";error;error_description;constructor(p){super({name:"InvalidScopeException",$fault:"client",...p});Object.setPrototypeOf(this,M.prototype),this.error=p.error,this.error_description=p.error_description}}class G extends x{name="SlowDownException";$fault="client";error;error_description;constructor(p){super({name:"SlowDownException",$fault:"client",...p});Object.setPrototypeOf(this,G.prototype),this.error=p.error,this.error_description=p.error_description}}class j extends x{name="UnauthorizedClientException";$fault="client";error;error_description;constructor(p){super({name:"UnauthorizedClientException",$fault:"client",...p});Object.setPrototypeOf(this,j.prototype),this.error=p.error,this.error_description=p.error_description}}class K extends x{name="UnsupportedGrantTypeException";$fault="client";error;error_description;constructor(p){super({name:"UnsupportedGrantTypeException",$fault:"client",...p});Object.setPrototypeOf(this,K.prototype),this.error=p.error,this.error_description=p.error_description}}var Jt="AccessDeniedException",Xt="AuthorizationPendingException",Qt="AccessToken",Zt="ClientSecret",er="CreateToken",tr="CreateTokenRequest",rr="CreateTokenResponse",or="CodeVerifier",nr="ExpiredTokenException",sr="InvalidClientException",ir="InvalidGrantException",cr="InvalidRequestException",ar="InternalServerException",pr="InvalidScopeException",dr="IdToken",ur="RefreshToken",lr="SlowDownException",hr="UnauthorizedClientException",_r="UnsupportedGrantTypeException",gr="accessToken",C="client",Er="clientId",mr="clientSecret",xr="codeVerifier",fr="code",Sr="deviceCode",h="error",vr="expiresIn",P="error_description",Pr="grantType",Ir="http",I="httpError",Cr="idToken",se="reason",ie="refreshToken",Ar="redirectUri",ce="smithy.ts.sdk.synthetic.com.amazonaws.ssooidc",yr="scope",Tr="server",Or="tokenType",_="com.amazonaws.ssooidc",ae=oe.for(ce),pe=[-3,ce,"SSOOIDCServiceException",0,[],[]];ae.registerError(pe,x);var S=oe.for(_),de=[-3,_,Jt,{[h]:C,[I]:400},[h,se,P],[0,0,0]];S.registerError(de,w);var ue=[-3,_,Xt,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(ue,N);var le=[-3,_,nr,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(le,b);var he=[-3,_,ar,{[h]:Tr,[I]:500},[h,P],[0,0]];S.registerError(he,U);var _e=[-3,_,sr,{[h]:C,[I]:401},[h,P],[0,0]];S.registerError(_e,F);var ge=[-3,_,ir,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(ge,q);var Ee=[-3,_,cr,{[h]:C,[I]:400},[h,se,P],[0,0,0]];S.registerError(Ee,H);var me=[-3,_,pr,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(me,M);var xe=[-3,_,lr,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(xe,G);var fe=[-3,_,hr,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(fe,j);var Se=[-3,_,_r,{[h]:C,[I]:400},[h,P],[0,0]];S.registerError(Se,K);var ve=[ae,S],Rr=[0,_,Qt,8,0],Dr=[0,_,Zt,8,0],kr=[0,_,or,8,0],$r=[0,_,dr,8,0],Pe=[0,_,ur,8,0],Ie=[3,_,tr,0,[Er,mr,Pr,Sr,fr,ie,yr,Ar,xr],[0,[()=>Dr,0],0,0,0,[()=>Pe,0],64,0,[()=>kr,0]],3],Ce=[3,_,rr,0,[gr,Or,vr,ie,Cr],[[()=>Rr,0],0,1,[()=>Pe,0],[()=>$r,0]]],Ae=[9,_,er,{[Ir]:["POST","/token",200]},()=>Ie,()=>Ce],wr=(p)=>({apiVersion:"2019-06-10",base64Decoder:p?.base64Decoder??Dt,base64Encoder:p?.base64Encoder??Rt,disableHostPrefix:p?.disableHostPrefix??!1,endpointProvider:p?.endpointProvider??Yt,extensions:p?.extensions??[],httpAuthSchemeProvider:p?.httpAuthSchemeProvider??Ht,httpAuthSchemes:p?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(u)=>u.getIdentityProvider("aws.auth#sigv4"),signer:new At},{schemeId:"smithy.api#noAuth",identityProvider:(u)=>u.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new je}],logger:p?.logger??new We,protocol:p?.protocol??Nt,protocolSettings:p?.protocolSettings??{defaultNamespace:"com.amazonaws.ssooidc",errorTypeRegistries:ve,version:"2019-06-10",serviceTarget:"AWSSSOOIDCService"},serviceId:p?.serviceId??"SSO OIDC",sha256:p?.sha256??bt,urlParser:p?.urlParser??_t,utf8Decoder:p?.utf8Decoder??Ot,utf8Encoder:p?.utf8Encoder??Tt}),Nr=(p)=>{Ye(process.version);let u=rt(p),E=()=>u().then(Je),v=wr(p);ke(process.version);let m={profile:p?.profile,logger:v.logger};return{...v,...p,runtime:"node",defaultsMode:u,authSchemePreference:p?.authSchemePreference??A(yt,m),bodyLengthChecker:p?.bodyLengthChecker??kt,defaultUserAgentProvider:p?.defaultUserAgentProvider??$e({serviceId:v.serviceId,clientVersion:Vt.version}),maxAttempts:p?.maxAttempts??A(St,p),region:p?.region??A(st,{...it,...m}),requestHandler:wt.create(p?.requestHandler??E),retryMode:p?.retryMode??A({...ft,default:async()=>(await E()).retryMode||xt},p),streamCollector:p?.streamCollector??$t,useDualstackEndpoint:p?.useDualstackEndpoint??A(nt,m),useFipsEndpoint:p?.useFipsEndpoint??A(ot,m),userAgentAppId:p?.userAgentAppId??A(we,m)}},br=(p)=>{let{httpAuthSchemes:u,httpAuthSchemeProvider:E,credentials:v}=p;return{setHttpAuthScheme(m){let R=u.findIndex((V)=>V.schemeId===m.schemeId);if(R===-1)u.push(m);else u.splice(R,1,m)},httpAuthSchemes(){return u},setHttpAuthSchemeProvider(m){E=m},httpAuthSchemeProvider(){return E},setCredentials(m){v=m},credentials(){return v}}},Ur=(p)=>({httpAuthSchemes:p.httpAuthSchemes(),httpAuthSchemeProvider:p.httpAuthSchemeProvider(),credentials:p.credentials()}),Fr=(p,u)=>{let E=Object.assign(Ne(p),Xe(p),gt(p),br(p));return u.forEach((v)=>v.configure(E)),Object.assign(p,be(E),Qe(E),Et(E),Ur(E))};class W extends re{config;constructor(...[p]){let u=Nr(p||{});super(u);this.initConfig=u;let E=Gt(u),v=Ue(E),m=vt(v),R=ct(m),V=Fe(R),ye=lt(V),Te=Mt(ye),Oe=Fr(Te,p?.extensions||[]);this.config=Oe,this.middlewareStack.use(It(this.config)),this.middlewareStack.use(qe(this.config)),this.middlewareStack.use(Pt(this.config)),this.middlewareStack.use(mt(this.config)),this.middlewareStack.use(He(this.config)),this.middlewareStack.use(Me(this.config)),this.middlewareStack.use(Ge(this.config)),this.middlewareStack.use(Ke(this.config,{httpAuthSchemeParametersProvider:Ut,identityProviderConfigProvider:async(Re)=>new Ve({"aws.auth#sigv4":Re.credentials})})),this.middlewareStack.use(ze(this.config))}destroy(){super.destroy()}}var qr=Ze(jt,"AWSSSOOIDCService","SSOOIDCClient",ht),Hr={},Mr=(p,u,E,v)=>[];class Y extends qr(Hr,Mr,"CreateToken",Ae){}var Gr={CreateTokenCommand:Y};class J extends W{}et(Gr,J);var jr={KMS_ACCESS_DENIED:"KMS_AccessDeniedException"},Kr={KMS_DISABLED_KEY:"KMS_DisabledException",KMS_INVALID_KEY_USAGE:"KMS_InvalidKeyUsageException",KMS_INVALID_STATE:"KMS_InvalidStateException",KMS_KEY_NOT_FOUND:"KMS_NotFoundException"};var Lr=w,Br=de,Wr=jr,Yr=N,Jr=ue,Xr=Ae,Qr=Y,Zr=Ie,eo=Ce,to=b,ro=le,oo=U,no=he,so=F,io=_e,co=q,ao=ge,po=H,uo=Ee,lo=Kr,ho=M,_o=me,go=J,Eo=W,mo=x,xo=pe,fo=G,So=xe,vo=j,Po=fe,Io=K,Co=Se,Ao=ve;export{Vr as $Command,zr as __Client,Lr as AccessDeniedException,Br as AccessDeniedException$,Wr as AccessDeniedExceptionReason,Yr as AuthorizationPendingException,Jr as AuthorizationPendingException$,Xr as CreateToken$,Qr as CreateTokenCommand,Zr as CreateTokenRequest$,eo as CreateTokenResponse$,to as ExpiredTokenException,ro as ExpiredTokenException$,oo as InternalServerException,no as InternalServerException$,so as InvalidClientException,io as InvalidClientException$,co as InvalidGrantException,ao as InvalidGrantException$,po as InvalidRequestException,uo as InvalidRequestException$,lo as InvalidRequestExceptionReason,ho as InvalidScopeException,_o as InvalidScopeException$,go as SSOOIDC,Eo as SSOOIDCClient,mo as SSOOIDCServiceException,xo as SSOOIDCServiceException$,fo as SlowDownException,So as SlowDownException$,vo as UnauthorizedClientException,Po as UnauthorizedClientException$,Io as UnsupportedGrantTypeException,Co as UnsupportedGrantTypeException$,Ao as errorTypeRegistries};
@@ -0,0 +1,2 @@
1
+ // @bun
2
+ import{Q,u,C}from"./shumai-transcode-app.js";export{Q as ENV_KEY,u as ENV_SECRET,C as fromEnv};
@@ -0,0 +1,7 @@
1
+ // @bun
2
+ import{A,e,a,n,t,d}from"./shumai-transcode-app.js";var y=A(t()),l=A(e()),v=A(d());import F from"fs/promises";var I=A(e());var H="169.254.170.2",K="169.254.170.23",P="[fd00:ec2::23]",u=(r,i)=>{if(r.protocol==="https:")return;if(r.hostname===H||r.hostname===K||r.hostname===P)return;if(r.hostname.includes("[")){if(r.hostname==="[::1]"||r.hostname==="[0000:0000:0000:0000:0000:0000:0000:0001]")return}else{if(r.hostname==="localhost")return;let c=r.hostname.split("."),s=(o)=>{let m=parseInt(o,10);return 0<=m&&m<=255};if(c[0]==="127"&&s(c[1])&&s(c[2])&&s(c[3])&&c.length===4)return}throw new I.CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
3
+ - loopback CIDR 127.0.0.0/8 or [::1/128]
4
+ - ECS container host 169.254.170.2
5
+ - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:i})};var h=A(e()),E=A(n()),N=A(a()),w=A(a());function R(r){return new E.HttpRequest({protocol:r.protocol,hostname:r.hostname,port:Number(r.port),path:r.pathname,query:Array.from(r.searchParams.entries()).reduce((i,[c,s])=>(i[c]=s,i),{}),fragment:r.hash})}async function g(r,i){let s=await w.sdkStreamMixin(r.body).transformToString();if(r.statusCode===200){let o=JSON.parse(s);if(typeof o.AccessKeyId!=="string"||typeof o.SecretAccessKey!=="string"||typeof o.Token!=="string"||typeof o.Expiration!=="string")throw new h.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:i});return{accessKeyId:o.AccessKeyId,secretAccessKey:o.SecretAccessKey,sessionToken:o.Token,expiration:N.parseRfc3339DateTime(o.Expiration)}}if(r.statusCode>=400&&r.statusCode<500){let o={};try{o=JSON.parse(s)}catch(m){}throw Object.assign(new h.CredentialsProviderError(`Server responded with status: ${r.statusCode}`,{logger:i}),{Code:o.Code,Message:o.Message})}throw new h.CredentialsProviderError(`Server responded with status: ${r.statusCode}`,{logger:i})}var S=(r,i,c)=>async()=>{for(let s=0;s<i;++s)try{return await r()}catch(o){await new Promise((m)=>setTimeout(m,c))}return await r()};var x="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",D="http://169.254.170.2",W="AWS_CONTAINER_CREDENTIALS_FULL_URI",b="AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",q="AWS_CONTAINER_AUTHORIZATION_TOKEN",z=(r={})=>{r.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");let i,c=r.awsContainerCredentialsRelativeUri??process.env[x],s=r.awsContainerCredentialsFullUri??process.env[W],o=r.awsContainerAuthorizationToken??process.env[q],m=r.awsContainerAuthorizationTokenFile??process.env[b],T=r.logger?.constructor?.name==="NoOpLogger"||!r.logger?.warn?console.warn:r.logger.warn.bind(r.logger);if(c&&s)T("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),T("awsContainerCredentialsRelativeUri will take precedence.");if(o&&m)T("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),T("awsContainerAuthorizationTokenFile will take precedence.");if(c)i=`${D}${c}`;else if(s)i=s;else throw new l.CredentialsProviderError(`No HTTP credential provider host provided.
6
+ Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:r.logger});let _=new URL(i);u(_,r.logger);let f=v.NodeHttpHandler.create({connectionTimeout:r.timeout??1000}),L=r.timeout??1000,U=S(async()=>{let C=R(_);if(m)C.headers.Authorization=O((await F.readFile(m)).toString());else if(o)C.headers.Authorization=O(o);try{let p=await f.handle(C,{requestTimeout:L});return g(p.response).then((k)=>y.setCredentialFeature(k,"CREDENTIALS_HTTP","z"))}catch(p){throw new l.CredentialsProviderError(String(p),{logger:r.logger})}},r.maxRetries??3,r.timeout??1000);return async()=>{try{return await U()}finally{f.destroy?.()}}},O=(r)=>{if(r.includes(`\r
7
+ `))throw new l.CredentialsProviderError("Authorization token contains invalid \\r\\n sequence.");return r};export{z as fromHttp};
@@ -1,2 +1,2 @@
1
1
  // @bun
2
- import{A,e,t}from"./shumai-transcode-app.js";var f=A(t()),i=A(e());import{readFileSync as S}from"fs";var a=(o)=>async(l)=>{o.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:r,roleSessionName:n,webIdentityToken:c,providerId:s,policyArns:g,policy:E,durationSeconds:p}=o,{roleAssumerWithWebIdentity:d}=o;if(!d){let{getDefaultRoleAssumerWithWebIdentity:_}=await import("./chunk-600pvb4n.js");d=_({...o.clientConfig,credentialProviderLogger:o.logger,parentClientConfig:{...l?.callerClientConfig,...o.parentClientConfig}},o.clientPlugins)}return d({RoleArn:r,RoleSessionName:n??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:c,ProviderId:s,PolicyArns:g,Policy:E,DurationSeconds:p})};var m="AWS_WEB_IDENTITY_TOKEN_FILE",T="AWS_ROLE_ARN",N="AWS_ROLE_SESSION_NAME",I=(o={})=>async(l)=>{o.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let r=o?.webIdentityTokenFile??process.env[m],n=o?.roleArn??process.env[T],c=o?.roleSessionName??process.env[N];if(!r||!n)throw new i.CredentialsProviderError("Web identity configuration not specified",{logger:o.logger});let s=await a({...o,webIdentityToken:i.externalDataInterceptor?.getTokenRecord?.()[r]??S(r,{encoding:"ascii"}),roleArn:n,roleSessionName:c})(l);if(r===process.env[m])f.setCredentialFeature(s,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h");return s};export{I as fromTokenFile};
2
+ import{A,e,t}from"./shumai-transcode-app.js";var f=A(t()),i=A(e());import{readFileSync as S}from"fs";var a=(o)=>async(l)=>{o.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:r,roleSessionName:n,webIdentityToken:c,providerId:s,policyArns:g,policy:E,durationSeconds:p}=o,{roleAssumerWithWebIdentity:d}=o;if(!d){let{getDefaultRoleAssumerWithWebIdentity:_}=await import("./chunk-yzpg15g3.js");d=_({...o.clientConfig,credentialProviderLogger:o.logger,parentClientConfig:{...l?.callerClientConfig,...o.parentClientConfig}},o.clientPlugins)}return d({RoleArn:r,RoleSessionName:n??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:c,ProviderId:s,PolicyArns:g,Policy:E,DurationSeconds:p})};var m="AWS_WEB_IDENTITY_TOKEN_FILE",T="AWS_ROLE_ARN",N="AWS_ROLE_SESSION_NAME",I=(o={})=>async(l)=>{o.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let r=o?.webIdentityTokenFile??process.env[m],n=o?.roleArn??process.env[T],c=o?.roleSessionName??process.env[N];if(!r||!n)throw new i.CredentialsProviderError("Web identity configuration not specified",{logger:o.logger});let s=await a({...o,webIdentityToken:i.externalDataInterceptor?.getTokenRecord?.()[r]??S(r,{encoding:"ascii"}),roleArn:n,roleSessionName:c})(l);if(r===process.env[m])f.setCredentialFeature(s,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h");return s};export{I as fromTokenFile};
@@ -1,2 +1,2 @@
1
1
  // @bun
2
- import{A,e,n,t}from"./shumai-transcode-app.js";var F=A(t()),d=A(e());var h=A(e()),b=A(n());import{createHash as K,createPrivateKey as _,createPublicKey as v,sign as B}from"crypto";import{promises as D}from"fs";import{homedir as q}from"os";import{dirname as U,join as R}from"path";class k{profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300000;constructor(r,s,i){this.profileData=r,this.init=s,this.callerClientConfig=i}async loadCredentials(){let r=await this.loadToken();if(!r)throw new h.CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let s=r.accessToken,i=Date.now();if(new Date(s.expiresAt).getTime()-i<=k.REFRESH_THRESHOLD)return this.refresh(r);return this.toCredentials(r.accessToken)}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}toCredentials(r){return{accessKeyId:r.accessKeyId,secretAccessKey:r.secretAccessKey,sessionToken:r.sessionToken,accountId:r.accountId,expiration:new Date(r.expiresAt)}}async refresh(r){let s=await this.loadToken().catch(()=>r),i=Date.now(),o=new Date(s.accessToken.expiresAt).getTime(),c=new Date(r.accessToken.expiresAt).getTime(),a=o<=i&&c>i?r:s;if(new Date(a.accessToken.expiresAt).getTime()-Date.now()>k.REFRESH_THRESHOLD)return this.toCredentials(a.accessToken);let{SigninClient:u,CreateOAuth2TokenCommand:T}=await import("./chunk-rx1m1mhx.js"),{logger:x,userAgentAppId:E}=this.callerClientConfig??{},S=((l)=>l?.metadata?.handlerProtocol==="h2")(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,w=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,y=new u({credentials:{accessKeyId:"",secretAccessKey:""},region:w,requestHandler:S,logger:x,userAgentAppId:E,...this.init?.clientConfig});this.createDPoPInterceptor(y.middlewareStack);let I={tokenInput:{clientId:a.clientId,refreshToken:a.refreshToken,grantType:"refresh_token"}};try{let l=await y.send(new T(I)),{accessKeyId:f,secretAccessKey:m,sessionToken:p}=l.tokenOutput?.accessToken??{},{refreshToken:P,expiresIn:L}=l.tokenOutput??{};if(!f||!m||!p||!P)throw new h.CredentialsProviderError("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let O=(L??900)*1000,H=new Date(Date.now()+O),N={...a,accessToken:{...a.accessToken,accessKeyId:f,secretAccessKey:m,sessionToken:p,expiresAt:H.toISOString()},refreshToken:P};return await this.saveToken(N),this.toCredentials(N.accessToken)}catch(l){if(l.name==="AccessDeniedException"){let m=l.error,p;switch(m){case"TOKEN_EXPIRED":p="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":p="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":p="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:p=`Failed to refresh token: ${String(l)}. Please re-authenticate using \`aws login\``}throw new h.CredentialsProviderError(p,{logger:this.logger,tryNextLink:!1})}if(new Date(a.accessToken.expiresAt).getTime()>Date.now())return this.logger?.warn?.(`Failed to refresh token: ${String(l)}. Using existing token until expiry.`),this.toCredentials(a.accessToken);throw new h.CredentialsProviderError(`Failed to refresh token: ${String(l)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let r=this.getTokenFilePath();try{let s=await D.readFile(r,"utf8"),i=JSON.parse(s),o=["accessToken","clientId","refreshToken","dpopKey"].filter((c)=>!i[c]);if(!i.accessToken?.accountId)o.push("accountId");if(o.length>0)throw new h.CredentialsProviderError(`Token validation failed, missing fields: ${o.join(", ")}`,{logger:this.logger,tryNextLink:!1});return i}catch(s){throw new h.CredentialsProviderError(`Failed to load token from ${r}: ${String(s)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(r){let s=this.getTokenFilePath(),i=U(s);try{await D.mkdir(i,{recursive:!0})}catch(o){}await D.writeFile(s,JSON.stringify(r,null,2),"utf8")}getTokenFilePath(){let r=process.env.AWS_LOGIN_CACHE_DIRECTORY??R(q(),".aws","login","cache"),s=Buffer.from(this.loginSession,"utf8"),i=K("sha256").update(s).digest("hex");return R(r,`${i}.json`)}derToRawSignature(r){let s=2;if(r[s]!==2)throw Error("Invalid DER signature");s++;let i=r[s++],o=r.subarray(s,s+i);if(s+=i,r[s]!==2)throw Error("Invalid DER signature");s++;let c=r[s++],a=r.subarray(s,s+c);o=o[0]===0?o.subarray(1):o,a=a[0]===0?a.subarray(1):a;let g=Buffer.concat([Buffer.alloc(32-o.length),o]),u=Buffer.concat([Buffer.alloc(32-a.length),a]);return Buffer.concat([g,u])}createDPoPInterceptor(r){r.add((s)=>async(i)=>{if(b.HttpRequest.isInstance(i.request)){let o=i.request,c=`${o.protocol}//${o.hostname}${o.port?`:${o.port}`:""}${o.path}`,a=await this.generateDpop(o.method,c);o.headers={...o.headers,DPoP:a}}return s(i)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(r="POST",s){let i=await this.loadToken();try{let o=_({key:i.dpopKey,format:"pem",type:"sec1"}),a=v(o).export({format:"der",type:"spki"}),g=-1;for(let f=0;f<a.length;f++)if(a[f]===4){g=f;break}let u=a.slice(g+1,g+33),T=a.slice(g+33,g+65),x={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:u.toString("base64url"),y:T.toString("base64url")}},E={jti:crypto.randomUUID(),htm:r,htu:s,iat:Math.floor(Date.now()/1000)},C=Buffer.from(JSON.stringify(x)).toString("base64url"),S=Buffer.from(JSON.stringify(E)).toString("base64url"),w=`${C}.${S}`,y=B("sha256",Buffer.from(w),o),l=this.derToRawSignature(y).toString("base64url");return`${w}.${l}`}catch(o){throw new h.CredentialsProviderError(`Failed to generate Dpop proof: ${o instanceof Error?o.message:String(o)}`,{logger:this.logger,tryNextLink:!1})}}}var j=(r)=>async({callerClientConfig:s}={})=>{r?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let i=await d.parseKnownFiles(r||{}),o=d.getProfileName({profile:r?.profile??s?.profile}),c=i[o];if(!c?.login_session)throw new d.CredentialsProviderError(`Profile ${o} does not contain login_session.`,{tryNextLink:!0,logger:r?.logger});let g=await new k(c,r,s).loadCredentials();return F.setCredentialFeature(g,"CREDENTIALS_LOGIN","AD")};export{j as fromLoginCredentials};
2
+ import{A,e,n,t}from"./shumai-transcode-app.js";var F=A(t()),d=A(e());var h=A(e()),b=A(n());import{createHash as K,createPrivateKey as _,createPublicKey as v,sign as B}from"crypto";import{promises as D}from"fs";import{homedir as q}from"os";import{dirname as U,join as R}from"path";class k{profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300000;constructor(r,s,i){this.profileData=r,this.init=s,this.callerClientConfig=i}async loadCredentials(){let r=await this.loadToken();if(!r)throw new h.CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let s=r.accessToken,i=Date.now();if(new Date(s.expiresAt).getTime()-i<=k.REFRESH_THRESHOLD)return this.refresh(r);return this.toCredentials(r.accessToken)}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}toCredentials(r){return{accessKeyId:r.accessKeyId,secretAccessKey:r.secretAccessKey,sessionToken:r.sessionToken,accountId:r.accountId,expiration:new Date(r.expiresAt)}}async refresh(r){let s=await this.loadToken().catch(()=>r),i=Date.now(),o=new Date(s.accessToken.expiresAt).getTime(),c=new Date(r.accessToken.expiresAt).getTime(),a=o<=i&&c>i?r:s;if(new Date(a.accessToken.expiresAt).getTime()-Date.now()>k.REFRESH_THRESHOLD)return this.toCredentials(a.accessToken);let{SigninClient:u,CreateOAuth2TokenCommand:T}=await import("./chunk-pvfsxs9k.js"),{logger:x,userAgentAppId:E}=this.callerClientConfig??{},S=((l)=>l?.metadata?.handlerProtocol==="h2")(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,w=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,y=new u({credentials:{accessKeyId:"",secretAccessKey:""},region:w,requestHandler:S,logger:x,userAgentAppId:E,...this.init?.clientConfig});this.createDPoPInterceptor(y.middlewareStack);let I={tokenInput:{clientId:a.clientId,refreshToken:a.refreshToken,grantType:"refresh_token"}};try{let l=await y.send(new T(I)),{accessKeyId:f,secretAccessKey:m,sessionToken:p}=l.tokenOutput?.accessToken??{},{refreshToken:P,expiresIn:L}=l.tokenOutput??{};if(!f||!m||!p||!P)throw new h.CredentialsProviderError("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let O=(L??900)*1000,H=new Date(Date.now()+O),N={...a,accessToken:{...a.accessToken,accessKeyId:f,secretAccessKey:m,sessionToken:p,expiresAt:H.toISOString()},refreshToken:P};return await this.saveToken(N),this.toCredentials(N.accessToken)}catch(l){if(l.name==="AccessDeniedException"){let m=l.error,p;switch(m){case"TOKEN_EXPIRED":p="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":p="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":p="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:p=`Failed to refresh token: ${String(l)}. Please re-authenticate using \`aws login\``}throw new h.CredentialsProviderError(p,{logger:this.logger,tryNextLink:!1})}if(new Date(a.accessToken.expiresAt).getTime()>Date.now())return this.logger?.warn?.(`Failed to refresh token: ${String(l)}. Using existing token until expiry.`),this.toCredentials(a.accessToken);throw new h.CredentialsProviderError(`Failed to refresh token: ${String(l)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let r=this.getTokenFilePath();try{let s=await D.readFile(r,"utf8"),i=JSON.parse(s),o=["accessToken","clientId","refreshToken","dpopKey"].filter((c)=>!i[c]);if(!i.accessToken?.accountId)o.push("accountId");if(o.length>0)throw new h.CredentialsProviderError(`Token validation failed, missing fields: ${o.join(", ")}`,{logger:this.logger,tryNextLink:!1});return i}catch(s){throw new h.CredentialsProviderError(`Failed to load token from ${r}: ${String(s)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(r){let s=this.getTokenFilePath(),i=U(s);try{await D.mkdir(i,{recursive:!0})}catch(o){}await D.writeFile(s,JSON.stringify(r,null,2),"utf8")}getTokenFilePath(){let r=process.env.AWS_LOGIN_CACHE_DIRECTORY??R(q(),".aws","login","cache"),s=Buffer.from(this.loginSession,"utf8"),i=K("sha256").update(s).digest("hex");return R(r,`${i}.json`)}derToRawSignature(r){let s=2;if(r[s]!==2)throw Error("Invalid DER signature");s++;let i=r[s++],o=r.subarray(s,s+i);if(s+=i,r[s]!==2)throw Error("Invalid DER signature");s++;let c=r[s++],a=r.subarray(s,s+c);o=o[0]===0?o.subarray(1):o,a=a[0]===0?a.subarray(1):a;let g=Buffer.concat([Buffer.alloc(32-o.length),o]),u=Buffer.concat([Buffer.alloc(32-a.length),a]);return Buffer.concat([g,u])}createDPoPInterceptor(r){r.add((s)=>async(i)=>{if(b.HttpRequest.isInstance(i.request)){let o=i.request,c=`${o.protocol}//${o.hostname}${o.port?`:${o.port}`:""}${o.path}`,a=await this.generateDpop(o.method,c);o.headers={...o.headers,DPoP:a}}return s(i)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(r="POST",s){let i=await this.loadToken();try{let o=_({key:i.dpopKey,format:"pem",type:"sec1"}),a=v(o).export({format:"der",type:"spki"}),g=-1;for(let f=0;f<a.length;f++)if(a[f]===4){g=f;break}let u=a.slice(g+1,g+33),T=a.slice(g+33,g+65),x={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:u.toString("base64url"),y:T.toString("base64url")}},E={jti:crypto.randomUUID(),htm:r,htu:s,iat:Math.floor(Date.now()/1000)},C=Buffer.from(JSON.stringify(x)).toString("base64url"),S=Buffer.from(JSON.stringify(E)).toString("base64url"),w=`${C}.${S}`,y=B("sha256",Buffer.from(w),o),l=this.derToRawSignature(y).toString("base64url");return`${w}.${l}`}catch(o){throw new h.CredentialsProviderError(`Failed to generate Dpop proof: ${o instanceof Error?o.message:String(o)}`,{logger:this.logger,tryNextLink:!1})}}}var j=(r)=>async({callerClientConfig:s}={})=>{r?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let i=await d.parseKnownFiles(r||{}),o=d.getProfileName({profile:r?.profile??s?.profile}),c=i[o];if(!c?.login_session)throw new d.CredentialsProviderError(`Profile ${o} does not contain login_session.`,{tryNextLink:!0,logger:r?.logger});let g=await new k(c,r,s).loadCredentials();return F.setCredentialFeature(g,"CREDENTIALS_LOGIN","AD")};export{j as fromLoginCredentials};