@shumai-one/shumai-transcode 0.4.9 → 0.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/{chunk-2dk7dgz7.js → chunk-2bqy5xzb.js} +147 -64
- package/bin/{chunk-4qrcmkw7.js → chunk-5e8ac6db.js} +1 -1
- package/bin/{chunk-a80yfk5e.js → chunk-5m5mdh6c.js} +1 -1
- package/bin/{chunk-k6yxzkm9.js → chunk-8bjt1vj2.js} +2 -2
- package/bin/chunk-8t98yceq.js +2 -0
- package/bin/{chunk-jjpexsjf.js → chunk-earmf1w2.js} +1 -1
- package/bin/{chunk-azergkcd.js → chunk-g1e4yv2g.js} +1 -1
- package/bin/{chunk-mm0gpeyf.js → chunk-ks9a5eje.js} +1 -1
- package/bin/{chunk-hk0bnv8t.js → chunk-pptpr3vn.js} +1 -1
- package/bin/{chunk-1h2vdfab.js → chunk-rjfxk4yp.js} +1 -1
- package/bin/chunk-tf25cx5y.js +2 -0
- package/bin/{chunk-jw6bzfdf.js → chunk-z03rvtg1.js} +1 -1
- package/bin/shumai-transcode-app.js +76 -69
- package/package.json +9 -8
- package/prisma/migrations/20261001015042_migrate_video_strategy_multi_and_resolutions/migration.sql +16 -0
- package/prisma/migrations/20261002104921_add_asset_status_failed/migration.sql +2 -0
- package/prisma/schema.prisma +1 -0
- package/bin/chunk-5vp3cwqf.js +0 -2
- package/bin/chunk-zr1jpkt3.js +0 -2
- /package/bin/{chunk-0xhpqhfw.js → chunk-n7f6kn4x.js} +0 -0
|
@@ -1,2 +1,2 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
import{A,
|
|
2
|
+
import{e,A,n,t}from"./shumai-transcode-app.js";var F=e(t()),d=e(A());var h=e(A()),b=e(n());import{createHash as K,createPrivateKey as _,createPublicKey as v,sign as B}from"crypto";import{promises as D}from"fs";import{homedir as q}from"os";import{dirname as U,join as R}from"path";class k{profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300000;constructor(r,s,i){this.profileData=r,this.init=s,this.callerClientConfig=i}async loadCredentials(){let r=await this.loadToken();if(!r)throw new h.CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let s=r.accessToken,i=Date.now();if(new Date(s.expiresAt).getTime()-i<=k.REFRESH_THRESHOLD)return this.refresh(r);return this.toCredentials(r.accessToken)}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}toCredentials(r){return{accessKeyId:r.accessKeyId,secretAccessKey:r.secretAccessKey,sessionToken:r.sessionToken,accountId:r.accountId,expiration:new Date(r.expiresAt)}}async refresh(r){let s=await this.loadToken().catch(()=>r),i=Date.now(),o=new Date(s.accessToken.expiresAt).getTime(),c=new Date(r.accessToken.expiresAt).getTime(),a=o<=i&&c>i?r:s;if(new Date(a.accessToken.expiresAt).getTime()-Date.now()>k.REFRESH_THRESHOLD)return this.toCredentials(a.accessToken);let{SigninClient:u,CreateOAuth2TokenCommand:T}=await import("./chunk-earmf1w2.js"),{logger:x,userAgentAppId:E}=this.callerClientConfig??{},S=((l)=>l?.metadata?.handlerProtocol==="h2")(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,w=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,y=new u({credentials:{accessKeyId:"",secretAccessKey:""},region:w,requestHandler:S,logger:x,userAgentAppId:E,...this.init?.clientConfig});this.createDPoPInterceptor(y.middlewareStack);let I={tokenInput:{clientId:a.clientId,refreshToken:a.refreshToken,grantType:"refresh_token"}};try{let l=await y.send(new T(I)),{accessKeyId:f,secretAccessKey:m,sessionToken:p}=l.tokenOutput?.accessToken??{},{refreshToken:P,expiresIn:L}=l.tokenOutput??{};if(!f||!m||!p||!P)throw new h.CredentialsProviderError("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let O=(L??900)*1000,H=new Date(Date.now()+O),N={...a,accessToken:{...a.accessToken,accessKeyId:f,secretAccessKey:m,sessionToken:p,expiresAt:H.toISOString()},refreshToken:P};return await this.saveToken(N),this.toCredentials(N.accessToken)}catch(l){if(l.name==="AccessDeniedException"){let m=l.error,p;switch(m){case"TOKEN_EXPIRED":p="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":p="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":p="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:p=`Failed to refresh token: ${String(l)}. Please re-authenticate using \`aws login\``}throw new h.CredentialsProviderError(p,{logger:this.logger,tryNextLink:!1})}if(new Date(a.accessToken.expiresAt).getTime()>Date.now())return this.logger?.warn?.(`Failed to refresh token: ${String(l)}. Using existing token until expiry.`),this.toCredentials(a.accessToken);throw new h.CredentialsProviderError(`Failed to refresh token: ${String(l)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let r=this.getTokenFilePath();try{let s=await D.readFile(r,"utf8"),i=JSON.parse(s),o=["accessToken","clientId","refreshToken","dpopKey"].filter((c)=>!i[c]);if(!i.accessToken?.accountId)o.push("accountId");if(o.length>0)throw new h.CredentialsProviderError(`Token validation failed, missing fields: ${o.join(", ")}`,{logger:this.logger,tryNextLink:!1});return i}catch(s){throw new h.CredentialsProviderError(`Failed to load token from ${r}: ${String(s)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(r){let s=this.getTokenFilePath(),i=U(s);try{await D.mkdir(i,{recursive:!0})}catch(o){}await D.writeFile(s,JSON.stringify(r,null,2),"utf8")}getTokenFilePath(){let r=process.env.AWS_LOGIN_CACHE_DIRECTORY??R(q(),".aws","login","cache"),s=Buffer.from(this.loginSession,"utf8"),i=K("sha256").update(s).digest("hex");return R(r,`${i}.json`)}derToRawSignature(r){let s=2;if(r[s]!==2)throw Error("Invalid DER signature");s++;let i=r[s++],o=r.subarray(s,s+i);if(s+=i,r[s]!==2)throw Error("Invalid DER signature");s++;let c=r[s++],a=r.subarray(s,s+c);o=o[0]===0?o.subarray(1):o,a=a[0]===0?a.subarray(1):a;let g=Buffer.concat([Buffer.alloc(32-o.length),o]),u=Buffer.concat([Buffer.alloc(32-a.length),a]);return Buffer.concat([g,u])}createDPoPInterceptor(r){r.add((s)=>async(i)=>{if(b.HttpRequest.isInstance(i.request)){let o=i.request,c=`${o.protocol}//${o.hostname}${o.port?`:${o.port}`:""}${o.path}`,a=await this.generateDpop(o.method,c);o.headers={...o.headers,DPoP:a}}return s(i)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(r="POST",s){let i=await this.loadToken();try{let o=_({key:i.dpopKey,format:"pem",type:"sec1"}),a=v(o).export({format:"der",type:"spki"}),g=-1;for(let f=0;f<a.length;f++)if(a[f]===4){g=f;break}let u=a.slice(g+1,g+33),T=a.slice(g+33,g+65),x={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:u.toString("base64url"),y:T.toString("base64url")}},E={jti:crypto.randomUUID(),htm:r,htu:s,iat:Math.floor(Date.now()/1000)},C=Buffer.from(JSON.stringify(x)).toString("base64url"),S=Buffer.from(JSON.stringify(E)).toString("base64url"),w=`${C}.${S}`,y=B("sha256",Buffer.from(w),o),l=this.derToRawSignature(y).toString("base64url");return`${w}.${l}`}catch(o){throw new h.CredentialsProviderError(`Failed to generate Dpop proof: ${o instanceof Error?o.message:String(o)}`,{logger:this.logger,tryNextLink:!1})}}}var j=(r)=>async({callerClientConfig:s}={})=>{r?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let i=await d.parseKnownFiles(r||{}),o=d.getProfileName({profile:r?.profile??s?.profile}),c=i[o];if(!c?.login_session)throw new d.CredentialsProviderError(`Profile ${o} does not contain login_session.`,{tryNextLink:!0,logger:r?.logger});let g=await new k(c,r,s).loadCredentials();return F.setCredentialFeature(g,"CREDENTIALS_LOGIN","AD")};export{j as fromLoginCredentials};
|
|
@@ -1,3 +1,3 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
import{A,
|
|
2
|
+
import{e,A,n}from"./shumai-transcode-app.js";var T=e(A());var v=(t)=>Boolean(t)&&typeof t==="object"&&typeof t.AccessKeyId==="string"&&typeof t.SecretAccessKey==="string"&&typeof t.Token==="string"&&typeof t.Expiration==="string",g=(t)=>({accessKeyId:t.AccessKeyId,secretAccessKey:t.SecretAccessKey,sessionToken:t.Token,expiration:new Date(t.Expiration),...t.AccountId&&{accountId:t.AccountId}});var O=({maxRetries:t=0,timeout:o=1000})=>({maxRetries:t,timeout:o});var D=e(A());import L from"http";function I(t){return new Promise((o,s)=>{let r=L.request({method:"GET",...t,hostname:t.hostname?.replace(/^\[(.+)\]$/,"$1")});r.on("error",(a)=>{s(Object.assign(new D.ProviderError("Unable to connect to instance metadata service"),a)),r.destroy()}),r.on("timeout",()=>{s(new D.ProviderError("TimeoutError from instance metadata service")),r.destroy()}),r.on("response",(a)=>{let{statusCode:i=400}=a;if(i<200||300<=i)s(Object.assign(new D.ProviderError("Error response received from instance metadata service"),{statusCode:i})),r.destroy();let f=[];a.on("data",(c)=>{f.push(c)}),a.on("end",()=>{o(Buffer.concat(f)),r.destroy()})}),r.end()})}var u=(t,o)=>{let s=t();for(let r=0;r<o;r++)s=s.catch(t);return s};var N="AWS_CONTAINER_CREDENTIALS_FULL_URI",w="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",x="AWS_CONTAINER_AUTHORIZATION_TOKEN",Y=(t={})=>{let{timeout:o,maxRetries:s}=O(t);return()=>u(async()=>{let r=await Z({logger:t.logger}),a=JSON.parse(await j(o,r));if(!v(a))throw new T.CredentialsProviderError("Invalid response received from instance metadata service.",{logger:t.logger});return g(a)},s)},j=async(t,o)=>{if(process.env[x])o.headers={...o.headers,Authorization:process.env[x]};return(await I({...o,timeout:t})).toString()},J="169.254.170.2",X=new Set(["localhost","127.0.0.1"]),z=new Set(["http:","https:"]),Z=async({logger:t})=>{if(process.env[w])return{hostname:J,path:process.env[w]};if(process.env[N]){let o;try{o=new URL(process.env[N])}catch{throw new T.CredentialsProviderError(`${process.env[N]} is not a valid container metadata service URL`,{tryNextLink:!1,logger:t})}if(!o.hostname||!X.has(o.hostname))throw new T.CredentialsProviderError(`${o.hostname} is not a valid container metadata service hostname`,{tryNextLink:!1,logger:t});if(!o.protocol||!z.has(o.protocol))throw new T.CredentialsProviderError(`${o.protocol} is not a valid container metadata service protocol`,{tryNextLink:!1,logger:t});return{protocol:o.protocol,hostname:o.hostname,path:o.pathname+o.search,port:o.port?parseInt(o.port,10):void 0}}throw new T.CredentialsProviderError(`The container metadata credential provider cannot be used unless the ${w} or ${N} environment variable is set`,{tryNextLink:!1,logger:t})};var C=e(A());var F=e(A());class M extends F.CredentialsProviderError{tryNextLink;name="InstanceMetadataV1FallbackError";constructor(t,o=!0){super(t,o);this.tryNextLink=o,Object.setPrototypeOf(this,M.prototype)}}var R=e(A()),k=e(n());var h;(function(t){t.IPv4="http://169.254.169.254",t.IPv6="http://[fd00:ec2::254]"})(h||(h={}));var b={environmentVariableSelector:(t)=>t.AWS_EC2_METADATA_SERVICE_ENDPOINT,configFileSelector:(t)=>t.ec2_metadata_service_endpoint,default:void 0};var m;(function(t){t.IPv4="IPv4",t.IPv6="IPv6"})(m||(m={}));var Q="AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE",ee="ec2_metadata_service_endpoint_mode",V={environmentVariableSelector:(t)=>t[Q],configFileSelector:(t)=>t[ee],default:m.IPv4};var U=async()=>k.parseUrl(await te()||await oe()),te=async()=>R.loadConfig(b)(),oe=async()=>{let t=await R.loadConfig(V)();switch(t){case m.IPv4:return h.IPv4;case m.IPv6:return h.IPv6;default:throw Error(`Unsupported endpoint mode: ${t}. Select from ${Object.values(m)}`)}};var y=(t,o)=>{let s=300+Math.floor(Math.random()*300),r=new Date(Date.now()+s*1000);o.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(r)}.
|
|
3
3
|
For more information, please visit: https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html`);let a=t.originalExpiration??t.expiration;return{...t,...a?{originalExpiration:a}:{},expiration:r}};var W=(t,o={})=>{let s=o?.logger||console,r;return async()=>{let a;try{if(a=await t(),a.expiration&&a.expiration.getTime()<Date.now())a=y(a,s)}catch(i){if(r)s.warn("Credential renew failed: ",i),a=y(r,s);else throw i}return r=a,a}};var G="/latest/meta-data/iam/security-credentials/",re="/latest/api/token",P="AWS_EC2_METADATA_V1_DISABLED",K="ec2_metadata_v1_disabled",B="x-aws-ec2-metadata-token",ne=(t={})=>W(ae(t),{logger:t.logger}),ae=(t={})=>{let o=!1,{logger:s,profile:r}=t,{timeout:a,maxRetries:i}=O(t),f=async(c,E)=>{if(o||E.headers?.[B]==null){let d=!1,l=!1,q=await C.loadConfig({environmentVariableSelector:(p)=>{let _=p[P];if(l=!!_&&_!=="false",_===void 0)throw new C.CredentialsProviderError(`${P} not set in env, checking config file next.`,{logger:t.logger});return l},configFileSelector:(p)=>{let _=p[K];return d=!!_&&_!=="false",d},default:!1},{profile:r})();if(t.ec2MetadataV1Disabled||q){let p=[];if(t.ec2MetadataV1Disabled)p.push("credential provider initialization (runtime option ec2MetadataV1Disabled)");if(d)p.push(`config file profile (${K})`);if(l)p.push(`process environment variable (${P})`);throw new M(`AWS EC2 Metadata v1 fallback has been blocked by AWS SDK configuration in the following: [${p.join(", ")}].`)}}let H=(await u(async()=>{let d;try{d=await ie(E)}catch(l){if(l.statusCode===401)o=!1;throw l}return d},c)).trim();return u(async()=>{let d;try{d=await ce(H,E,t)}catch(l){if(l.statusCode===401)o=!1;throw l}return d},c)};return async()=>{let c=await U();if(o)return s?.debug("AWS SDK Instance Metadata","using v1 fallback (no token fetch)"),f(i,{...c,timeout:a});else{let E;try{E=(await se({...c,timeout:a})).toString()}catch(S){if(S?.statusCode===400)throw Object.assign(S,{message:"EC2 Metadata token request returned error"});else if(S.message==="TimeoutError"||[403,404,405].includes(S.statusCode))o=!0;return s?.debug("AWS SDK Instance Metadata","using v1 fallback (initial)"),f(i,{...c,timeout:a})}return f(i,{...c,headers:{[B]:E},timeout:a})}}},se=async(t)=>I({...t,path:re,method:"PUT",headers:{"x-aws-ec2-metadata-token-ttl-seconds":"21600"}}),ie=async(t)=>(await I({...t,path:G})).toString(),ce=async(t,o,s)=>{let r=JSON.parse((await I({...o,path:G+t})).toString());if(!v(r))throw new C.CredentialsProviderError("Invalid response received from instance metadata service.",{logger:s.logger});return g(r)};export{N as ENV_CMDS_FULL_URI,w as ENV_CMDS_RELATIVE_URI,Y as fromContainerMetadata,ne as fromInstanceMetadata};
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
import{A,
|
|
2
|
+
import{e,A,a,n,t,d}from"./shumai-transcode-app.js";var y=e(t()),l=e(A()),v=e(d());import F from"fs/promises";var I=e(A());var H="169.254.170.2",K="169.254.170.23",P="[fd00:ec2::23]",u=(r,i)=>{if(r.protocol==="https:")return;if(r.hostname===H||r.hostname===K||r.hostname===P)return;if(r.hostname.includes("[")){if(r.hostname==="[::1]"||r.hostname==="[0000:0000:0000:0000:0000:0000:0000:0001]")return}else{if(r.hostname==="localhost")return;let c=r.hostname.split("."),s=(o)=>{let m=parseInt(o,10);return 0<=m&&m<=255};if(c[0]==="127"&&s(c[1])&&s(c[2])&&s(c[3])&&c.length===4)return}throw new I.CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
|
|
3
3
|
- loopback CIDR 127.0.0.0/8 or [::1/128]
|
|
4
4
|
- ECS container host 169.254.170.2
|
|
5
|
-
- EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:i})};var h=A(
|
|
5
|
+
- EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:i})};var h=e(A()),E=e(n()),N=e(a()),w=e(a());function R(r){return new E.HttpRequest({protocol:r.protocol,hostname:r.hostname,port:Number(r.port),path:r.pathname,query:Array.from(r.searchParams.entries()).reduce((i,[c,s])=>(i[c]=s,i),{}),fragment:r.hash})}async function g(r,i){let s=await w.sdkStreamMixin(r.body).transformToString();if(r.statusCode===200){let o=JSON.parse(s);if(typeof o.AccessKeyId!=="string"||typeof o.SecretAccessKey!=="string"||typeof o.Token!=="string"||typeof o.Expiration!=="string")throw new h.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:i});return{accessKeyId:o.AccessKeyId,secretAccessKey:o.SecretAccessKey,sessionToken:o.Token,expiration:N.parseRfc3339DateTime(o.Expiration)}}if(r.statusCode>=400&&r.statusCode<500){let o={};try{o=JSON.parse(s)}catch(m){}throw Object.assign(new h.CredentialsProviderError(`Server responded with status: ${r.statusCode}`,{logger:i}),{Code:o.Code,Message:o.Message})}throw new h.CredentialsProviderError(`Server responded with status: ${r.statusCode}`,{logger:i})}var S=(r,i,c)=>async()=>{for(let s=0;s<i;++s)try{return await r()}catch(o){await new Promise((m)=>setTimeout(m,c))}return await r()};var x="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",D="http://169.254.170.2",W="AWS_CONTAINER_CREDENTIALS_FULL_URI",b="AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",q="AWS_CONTAINER_AUTHORIZATION_TOKEN",z=(r={})=>{r.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");let i,c=r.awsContainerCredentialsRelativeUri??process.env[x],s=r.awsContainerCredentialsFullUri??process.env[W],o=r.awsContainerAuthorizationToken??process.env[q],m=r.awsContainerAuthorizationTokenFile??process.env[b],T=r.logger?.constructor?.name==="NoOpLogger"||!r.logger?.warn?console.warn:r.logger.warn.bind(r.logger);if(c&&s)T("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),T("awsContainerCredentialsRelativeUri will take precedence.");if(o&&m)T("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),T("awsContainerAuthorizationTokenFile will take precedence.");if(c)i=`${D}${c}`;else if(s)i=s;else throw new l.CredentialsProviderError(`No HTTP credential provider host provided.
|
|
6
6
|
Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:r.logger});let _=new URL(i);u(_,r.logger);let f=v.NodeHttpHandler.create({connectionTimeout:r.timeout??1000}),L=r.timeout??1000,U=S(async()=>{let C=R(_);if(m)C.headers.Authorization=O((await F.readFile(m)).toString());else if(o)C.headers.Authorization=O(o);try{let p=await f.handle(C,{requestTimeout:L});return g(p.response).then((k)=>y.setCredentialFeature(k,"CREDENTIALS_HTTP","z"))}catch(p){throw new l.CredentialsProviderError(String(p),{logger:r.logger})}},r.maxRetries??3,r.timeout??1000);return async()=>{try{return await U()}finally{f.destroy?.()}}},O=(r)=>{if(r.includes(`\r
|
|
7
7
|
`))throw new l.CredentialsProviderError("Authorization token contains invalid \\r\\n sequence.");return r};export{z as fromHttp};
|
|
@@ -0,0 +1,2 @@
|
|
|
1
|
+
// @bun
|
|
2
|
+
import{i,s,A,r,a,o,n,l,c,t,B,g,d}from"./shumai-transcode-app.js";var{awsEndpointFunctions:De,emitWarningIfUnsupportedVersion:ke,createDefaultUserAgentProvider:$e,NODE_APP_ID_CONFIG_OPTIONS:we,getAwsRegionExtensionConfiguration:Ne,resolveAwsRegionExtensionConfiguration:be,resolveUserAgentConfig:Ue,resolveHostHeaderConfig:Fe,getUserAgentPlugin:qe,getHostHeaderPlugin:He,getLoggerPlugin:Me,getRecursionDetectionPlugin:Ge}=t(),{NoAuthSigner:je,getHttpAuthSchemeEndpointRuleSetPlugin:Ke,DefaultIdentityProviderConfig:Ve,getHttpSigningPlugin:ze}=c(),{normalizeProvider:te,getSmithyContext:Le,ServiceException:Be,NoOpLogger:We,emitWarningIfUnsupportedVersion:Ye,loadConfigsForDefaultMode:Je,getDefaultExtensionConfiguration:Xe,resolveDefaultRuntimeConfig:Qe,Client:re,makeBuilder:Ze,createAggregatedClient:et}=s(),{Command:tt}=s();var Vr=tt,zr=re;var{resolveDefaultsModeConfig:rt,loadConfig:C,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:ot,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:nt,NODE_REGION_CONFIG_OPTIONS:st,NODE_REGION_CONFIG_FILE_OPTIONS:it,resolveRegionConfig:ct}=A(),{BinaryDecisionDiagram:at,EndpointCache:pt,decideEndpoint:dt,customEndpointFunctions:ut,resolveEndpointConfig:lt,getEndpointPlugin:ht}=r(),{parseUrl:_t,getHttpHandlerExtensionConfiguration:gt,resolveHttpHandlerRuntimeConfig:Et,getContentLengthPlugin:mt}=n(),{DEFAULT_RETRY_MODE:xt,NODE_RETRY_MODE_CONFIG_OPTIONS:ft,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:St,resolveRetryConfig:vt,getRetryPlugin:Pt}=l(),{TypeRegistry:oe,getSchemaSerdePlugin:It}=i(),{resolveAwsSdkSigV4Config:Ct,AwsSdkSigV4Signer:At,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:yt}=g(),{toUtf8:Tt,fromUtf8:Ot,toBase64:Rt,fromBase64:Dt,calculateBodyLength:kt}=a(),{streamCollector:$t,NodeHttpHandler:wt}=d(),{AwsRestJsonProtocol:Nt}=B(),{Sha256:bt}=o(),Ut=async(e,p,_)=>({operation:Le(p).operation,region:await te(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function Ft(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sso-oauth",region:e.region},propertiesExtractor:(p,_)=>({signingProperties:{config:p,context:_}})}}function qt(e){return{schemeId:"smithy.api#noAuth"}}var Ht=(e)=>{let p=[];switch(e.operation){case"CreateToken":{p.push(qt());break}default:p.push(Ft(e))}return p},Mt=(e)=>{let p=Ct(e);return Object.assign(p,{authSchemePreference:te(e.authSchemePreference??[])})},Gt=(e)=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"sso-oauth"}),jt={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Kt="3.997.43",Vt={version:Kt},O="ref",y=-1,D=!0,X="isSet",ne="PartitionResult",k="booleanEquals",z="getAttr",Q={[O]:"Endpoint"},L={[O]:ne},T={},Z=[{[O]:"Region"}],ee={conditions:[[X,[Q]],[X,Z],["aws.partition",Z,ne],[k,[{[O]:"UseFIPS"},D]],[k,[{[O]:"UseDualStack"},D]],[k,[{fn:z,argv:[L,"supportsDualStack"]},D]],[k,[{fn:z,argv:[L,"supportsFIPS"]},D]],["stringEquals",[{fn:z,argv:[L,"name"]},"aws-us-gov"]]],results:[[y],[y,"Invalid Configuration: FIPS and custom endpoint are not supported"],[y,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[Q,T],["https://oidc-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",T],[y,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://oidc.{Region}.amazonaws.com",T],["https://oidc-fips.{Region}.{PartitionResult#dnsSuffix}",T],[y,"FIPS is enabled but this partition does not support FIPS"],["https://oidc.{Region}.{PartitionResult#dualStackDnsSuffix}",T],[y,"DualStack is enabled but this partition does not support DualStack"],["https://oidc.{Region}.{PartitionResult#dnsSuffix}",T],[y,"Invalid Configuration: Missing Region"]]},zt=2,x=1e8,Lt=new Int32Array([-1,1,-1,0,13,3,1,4,x+12,2,5,x+12,3,8,6,4,7,x+11,5,x+9,x+10,4,11,9,6,10,x+8,7,x+6,x+7,5,12,x+5,6,x+4,x+5,3,x+1,14,4,x+2,x+3]),Bt=at.from(Lt,zt,ee.conditions,ee.results),Wt=new pt({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),Yt=(e,p={})=>Wt.get(e,()=>dt(Bt,{endpointParams:e,logger:p.logger}));ut.aws=De;class m extends Be{constructor(e){super(e);Object.setPrototypeOf(this,m.prototype)}}class w extends m{name="AccessDeniedException";$fault="client";error;reason;error_description;constructor(e){super({name:"AccessDeniedException",$fault:"client",...e});Object.setPrototypeOf(this,w.prototype),this.error=e.error,this.reason=e.reason,this.error_description=e.error_description}}class N extends m{name="AuthorizationPendingException";$fault="client";error;error_description;constructor(e){super({name:"AuthorizationPendingException",$fault:"client",...e});Object.setPrototypeOf(this,N.prototype),this.error=e.error,this.error_description=e.error_description}}class b extends m{name="ExpiredTokenException";$fault="client";error;error_description;constructor(e){super({name:"ExpiredTokenException",$fault:"client",...e});Object.setPrototypeOf(this,b.prototype),this.error=e.error,this.error_description=e.error_description}}class U extends m{name="InternalServerException";$fault="server";error;error_description;constructor(e){super({name:"InternalServerException",$fault:"server",...e});Object.setPrototypeOf(this,U.prototype),this.error=e.error,this.error_description=e.error_description}}class F extends m{name="InvalidClientException";$fault="client";error;error_description;constructor(e){super({name:"InvalidClientException",$fault:"client",...e});Object.setPrototypeOf(this,F.prototype),this.error=e.error,this.error_description=e.error_description}}class q extends m{name="InvalidGrantException";$fault="client";error;error_description;constructor(e){super({name:"InvalidGrantException",$fault:"client",...e});Object.setPrototypeOf(this,q.prototype),this.error=e.error,this.error_description=e.error_description}}class H extends m{name="InvalidRequestException";$fault="client";error;reason;error_description;constructor(e){super({name:"InvalidRequestException",$fault:"client",...e});Object.setPrototypeOf(this,H.prototype),this.error=e.error,this.reason=e.reason,this.error_description=e.error_description}}class M extends m{name="InvalidScopeException";$fault="client";error;error_description;constructor(e){super({name:"InvalidScopeException",$fault:"client",...e});Object.setPrototypeOf(this,M.prototype),this.error=e.error,this.error_description=e.error_description}}class G extends m{name="SlowDownException";$fault="client";error;error_description;constructor(e){super({name:"SlowDownException",$fault:"client",...e});Object.setPrototypeOf(this,G.prototype),this.error=e.error,this.error_description=e.error_description}}class j extends m{name="UnauthorizedClientException";$fault="client";error;error_description;constructor(e){super({name:"UnauthorizedClientException",$fault:"client",...e});Object.setPrototypeOf(this,j.prototype),this.error=e.error,this.error_description=e.error_description}}class K extends m{name="UnsupportedGrantTypeException";$fault="client";error;error_description;constructor(e){super({name:"UnsupportedGrantTypeException",$fault:"client",...e});Object.setPrototypeOf(this,K.prototype),this.error=e.error,this.error_description=e.error_description}}var Jt="AccessDeniedException",Xt="AuthorizationPendingException",Qt="AccessToken",Zt="ClientSecret",er="CreateToken",tr="CreateTokenRequest",rr="CreateTokenResponse",or="CodeVerifier",nr="ExpiredTokenException",sr="InvalidClientException",ir="InvalidGrantException",cr="InvalidRequestException",ar="InternalServerException",pr="InvalidScopeException",dr="IdToken",ur="RefreshToken",lr="SlowDownException",hr="UnauthorizedClientException",_r="UnsupportedGrantTypeException",gr="accessToken",I="client",Er="clientId",mr="clientSecret",xr="codeVerifier",fr="code",Sr="deviceCode",u="error",vr="expiresIn",v="error_description",Pr="grantType",Ir="http",P="httpError",Cr="idToken",se="reason",ie="refreshToken",Ar="redirectUri",ce="smithy.ts.sdk.synthetic.com.amazonaws.ssooidc",yr="scope",Tr="server",Or="tokenType",h="com.amazonaws.ssooidc",ae=oe.for(ce),pe=[-3,ce,"SSOOIDCServiceException",0,[],[]];ae.registerError(pe,m);var f=oe.for(h),de=[-3,h,Jt,{[u]:I,[P]:400},[u,se,v],[0,0,0]];f.registerError(de,w);var ue=[-3,h,Xt,{[u]:I,[P]:400},[u,v],[0,0]];f.registerError(ue,N);var le=[-3,h,nr,{[u]:I,[P]:400},[u,v],[0,0]];f.registerError(le,b);var he=[-3,h,ar,{[u]:Tr,[P]:500},[u,v],[0,0]];f.registerError(he,U);var _e=[-3,h,sr,{[u]:I,[P]:401},[u,v],[0,0]];f.registerError(_e,F);var ge=[-3,h,ir,{[u]:I,[P]:400},[u,v],[0,0]];f.registerError(ge,q);var Ee=[-3,h,cr,{[u]:I,[P]:400},[u,se,v],[0,0,0]];f.registerError(Ee,H);var me=[-3,h,pr,{[u]:I,[P]:400},[u,v],[0,0]];f.registerError(me,M);var xe=[-3,h,lr,{[u]:I,[P]:400},[u,v],[0,0]];f.registerError(xe,G);var fe=[-3,h,hr,{[u]:I,[P]:400},[u,v],[0,0]];f.registerError(fe,j);var Se=[-3,h,_r,{[u]:I,[P]:400},[u,v],[0,0]];f.registerError(Se,K);var ve=[ae,f],Rr=[0,h,Qt,8,0],Dr=[0,h,Zt,8,0],kr=[0,h,or,8,0],$r=[0,h,dr,8,0],Pe=[0,h,ur,8,0],Ie=[3,h,tr,0,[Er,mr,Pr,Sr,fr,ie,yr,Ar,xr],[0,[()=>Dr,0],0,0,0,[()=>Pe,0],64,0,[()=>kr,0]],3],Ce=[3,h,rr,0,[gr,Or,vr,ie,Cr],[[()=>Rr,0],0,1,[()=>Pe,0],[()=>$r,0]]],Ae=[9,h,er,{[Ir]:["POST","/token",200]},()=>Ie,()=>Ce],wr=(e)=>({apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??Dt,base64Encoder:e?.base64Encoder??Rt,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Yt,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Ht,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(p)=>p.getIdentityProvider("aws.auth#sigv4"),signer:new At},{schemeId:"smithy.api#noAuth",identityProvider:(p)=>p.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new je}],logger:e?.logger??new We,protocol:e?.protocol??Nt,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.ssooidc",errorTypeRegistries:ve,version:"2019-06-10",serviceTarget:"AWSSSOOIDCService"},serviceId:e?.serviceId??"SSO OIDC",sha256:e?.sha256??bt,urlParser:e?.urlParser??_t,utf8Decoder:e?.utf8Decoder??Ot,utf8Encoder:e?.utf8Encoder??Tt}),Nr=(e)=>{Ye(process.version);let p=rt(e),_=()=>p().then(Je),S=wr(e);ke(process.version);let E={profile:e?.profile,logger:S.logger};return{...S,...e,runtime:"node",defaultsMode:p,authSchemePreference:e?.authSchemePreference??C(yt,E),bodyLengthChecker:e?.bodyLengthChecker??kt,defaultUserAgentProvider:e?.defaultUserAgentProvider??$e({serviceId:S.serviceId,clientVersion:Vt.version}),maxAttempts:e?.maxAttempts??C(St,e),region:e?.region??C(st,{...it,...E}),requestHandler:wt.create(e?.requestHandler??_),retryMode:e?.retryMode??C({...ft,default:async()=>(await _()).retryMode||xt},e),streamCollector:e?.streamCollector??$t,useDualstackEndpoint:e?.useDualstackEndpoint??C(nt,E),useFipsEndpoint:e?.useFipsEndpoint??C(ot,E),userAgentAppId:e?.userAgentAppId??C(we,E)}},br=(e)=>{let{httpAuthSchemes:p,httpAuthSchemeProvider:_,credentials:S}=e;return{setHttpAuthScheme(E){let R=p.findIndex((V)=>V.schemeId===E.schemeId);if(R===-1)p.push(E);else p.splice(R,1,E)},httpAuthSchemes(){return p},setHttpAuthSchemeProvider(E){_=E},httpAuthSchemeProvider(){return _},setCredentials(E){S=E},credentials(){return S}}},Ur=(e)=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}),Fr=(e,p)=>{let _=Object.assign(Ne(e),Xe(e),gt(e),br(e));return p.forEach((S)=>S.configure(_)),Object.assign(e,be(_),Qe(_),Et(_),Ur(_))};class W extends re{config;constructor(...[e]){let p=Nr(e||{});super(p);this.initConfig=p;let _=Gt(p),S=Ue(_),E=vt(S),R=ct(E),V=Fe(R),ye=lt(V),Te=Mt(ye),Oe=Fr(Te,e?.extensions||[]);this.config=Oe,this.middlewareStack.use(It(this.config)),this.middlewareStack.use(qe(this.config)),this.middlewareStack.use(Pt(this.config)),this.middlewareStack.use(mt(this.config)),this.middlewareStack.use(He(this.config)),this.middlewareStack.use(Me(this.config)),this.middlewareStack.use(Ge(this.config)),this.middlewareStack.use(Ke(this.config,{httpAuthSchemeParametersProvider:Ut,identityProviderConfigProvider:async(Re)=>new Ve({"aws.auth#sigv4":Re.credentials})})),this.middlewareStack.use(ze(this.config))}destroy(){super.destroy()}}var qr=Ze(jt,"AWSSSOOIDCService","SSOOIDCClient",ht),Hr={},Mr=(e,p,_,S)=>[];class Y extends qr(Hr,Mr,"CreateToken",Ae){}var Gr={CreateTokenCommand:Y};class J extends W{}et(Gr,J);var jr={KMS_ACCESS_DENIED:"KMS_AccessDeniedException"},Kr={KMS_DISABLED_KEY:"KMS_DisabledException",KMS_INVALID_KEY_USAGE:"KMS_InvalidKeyUsageException",KMS_INVALID_STATE:"KMS_InvalidStateException",KMS_KEY_NOT_FOUND:"KMS_NotFoundException"};var Lr=w,Br=de,Wr=jr,Yr=N,Jr=ue,Xr=Ae,Qr=Y,Zr=Ie,eo=Ce,to=b,ro=le,oo=U,no=he,so=F,io=_e,co=q,ao=ge,po=H,uo=Ee,lo=Kr,ho=M,_o=me,go=J,Eo=W,mo=m,xo=pe,fo=G,So=xe,vo=j,Po=fe,Io=K,Co=Se,Ao=ve;export{Vr as $Command,zr as __Client,Lr as AccessDeniedException,Br as AccessDeniedException$,Wr as AccessDeniedExceptionReason,Yr as AuthorizationPendingException,Jr as AuthorizationPendingException$,Xr as CreateToken$,Qr as CreateTokenCommand,Zr as CreateTokenRequest$,eo as CreateTokenResponse$,to as ExpiredTokenException,ro as ExpiredTokenException$,oo as InternalServerException,no as InternalServerException$,so as InvalidClientException,io as InvalidClientException$,co as InvalidGrantException,ao as InvalidGrantException$,po as InvalidRequestException,uo as InvalidRequestException$,lo as InvalidRequestExceptionReason,ho as InvalidScopeException,_o as InvalidScopeException$,go as SSOOIDC,Eo as SSOOIDCClient,mo as SSOOIDCServiceException,xo as SSOOIDCServiceException$,fo as SlowDownException,So as SlowDownException$,vo as UnauthorizedClientException,Po as UnauthorizedClientException$,Io as UnsupportedGrantTypeException,Co as UnsupportedGrantTypeException$,Ao as errorTypeRegistries};
|
|
@@ -1,2 +1,2 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
import{i,s,e,r,a,o,n,l,c,t,B,g,d}from"./shumai-transcode-app.js";var{awsEndpointFunctions:ze,emitWarningIfUnsupportedVersion:Be,createDefaultUserAgentProvider:je,NODE_APP_ID_CONFIG_OPTIONS:Ge,getAwsRegionExtensionConfiguration:Ke,resolveAwsRegionExtensionConfiguration:Xe,resolveUserAgentConfig:Qe,resolveHostHeaderConfig:Ye,getUserAgentPlugin:Je,getHostHeaderPlugin:Ze,getLoggerPlugin:et,getRecursionDetectionPlugin:tt}=t(),{NoAuthSigner:st,getHttpAuthSchemeEndpointRuleSetPlugin:nt,DefaultIdentityProviderConfig:ot,getHttpSigningPlugin:rt}=c(),{normalizeProvider:Ee,getSmithyContext:it,ServiceException:at,NoOpLogger:ct,emitWarningIfUnsupportedVersion:ut,loadConfigsForDefaultMode:pt,getDefaultExtensionConfiguration:dt,resolveDefaultRuntimeConfig:ht,Client:me,makeBuilder:gt,createAggregatedClient:lt}=s(),{Command:Et}=s();var zs=Et,Bs=me;var{resolveDefaultsModeConfig:mt,loadConfig:T,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:At,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:_t,NODE_REGION_CONFIG_OPTIONS:Ot,NODE_REGION_CONFIG_FILE_OPTIONS:St,resolveRegionConfig:It}=e(),{BinaryDecisionDiagram:Ct,EndpointCache:Rt,decideEndpoint:vt,customEndpointFunctions:ft,resolveEndpointConfig:Pt,getEndpointPlugin:Tt}=r(),{parseUrl:kt,getHttpHandlerExtensionConfiguration:xt,resolveHttpHandlerRuntimeConfig:yt,getContentLengthPlugin:Dt}=n(),{DEFAULT_RETRY_MODE:Nt,NODE_RETRY_MODE_CONFIG_OPTIONS:wt,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:$t,resolveRetryConfig:Ut,getRetryPlugin:Ft}=l(),{TypeRegistry:Ae,getSchemaSerdePlugin:bt}=i(),{resolveAwsSdkSigV4Config:qt,AwsSdkSigV4Signer:Mt,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:Ht}=g(),{toUtf8:Vt,fromUtf8:Wt,toBase64:Lt,fromBase64:zt,calculateBodyLength:Bt}=a(),{streamCollector:jt,NodeHttpHandler:Gt}=d(),{AwsRestJsonProtocol:Kt}=B(),{Sha256:Xt}=o(),Qt=async(u,h,E)=>({operation:it(h).operation,region:await Ee(u.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function Yt(u){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"signin",region:u.region},propertiesExtractor:(h,E)=>({signingProperties:{config:h,context:E}})}}function Jt(u){return{schemeId:"smithy.api#noAuth"}}var Zt=(u)=>{let h=[];switch(u.operation){case"CreateOAuth2Token":{h.push(Jt());break}default:h.push(Yt(u))}return h},es=(u)=>{let h=qt(u);return Object.assign(h,{authSchemePreference:Ee(u.authSchemePreference??[])})},ts=(u)=>Object.assign(u,{useDualstackEndpoint:u.useDualstackEndpoint??!1,useFipsEndpoint:u.useFipsEndpoint??!1,defaultSigningName:"signin"}),ss={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},ns="3.997.43",os={version:ns},v="ref",C=-1,ee=!1,k=!0,te="isSet",x="booleanEquals",se="coalesce",G="PartitionResult",I="stringEquals",V="getAttr",ne="https://signin.{Region}.{PartitionResult#dualStackDnsSuffix}",oe={[v]:"Endpoint"},R={fn:V,argv:[{[v]:G},"name"]},_e={[v]:"Region"},re={[v]:G},N={authSchemes:[{name:"sigv4",signingName:"signin",signingRegion:"{Region}"}]},A={},ie=[_e],ae={conditions:[[te,ie],[x,[{fn:se,argv:[{[v]:"IsControlPlane"},ee]},k]],[te,[oe]],["aws.partition",ie,G],[x,[{[v]:"UseFIPS"},k]],[I,[R,"aws"]],[x,[{fn:se,argv:[{[v]:"IsOAuthEndpoint"},ee]},k]],[x,[{[v]:"UseDualStack"},k]],[I,[R,"aws-cn"]],[I,[_e,"us-gov-west-1"]],[I,[R,"aws-us-gov"]],[x,[{fn:V,argv:[re,"supportsFIPS"]},k]],[I,[R,"aws-iso"]],[I,[R,"aws-iso-b"]],[I,[R,"aws-iso-f"]],[I,[R,"aws-iso-e"]],[I,[R,"aws-eusc"]],[x,[{fn:V,argv:[re,"supportsDualStack"]},k]]],results:[[C],["https://signin.{Region}.api.aws",N],["https://signin.{Region}.api.amazonwebservices.com.cn",N],[ne,N],[C,"FIPS endpoints are not supported for OAuth operations. Disable FIPS or use a non-OAuth operation."],["https://{Region}.oauth.signin.aws",N],["https://{Region}.signin.aws.amazon.com",A],["https://{Region}.signin.amazonaws.cn",A],["https://{Region}.signin.amazonaws-us-gov.com",A],["https://{Region}.signin.c2shome.ic.gov",A],["https://{Region}.signin.sc2shome.sgov.gov",A],["https://{Region}.signin.csphome.hci.ic.gov",A],["https://{Region}.signin.csphome.adc-e.uk",A],["https://{Region}.signin.amazonaws-eusc.eu",A],["https://signin-fips.amazonaws-us-gov.com",A],["https://{Region}.signin-fips.amazonaws-us-gov.com",A],["https://{Region}.signin.{PartitionResult#dnsSuffix}",A],[C,"Invalid Configuration: FIPS and custom endpoint are not supported"],[C,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[oe,A],["https://signin-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",A],[C,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://signin-fips.{Region}.{PartitionResult#dnsSuffix}",A],[C,"FIPS is enabled but this partition does not support FIPS"],[ne,A],[C,"DualStack is enabled but this partition does not support DualStack"],["https://signin.{Region}.{PartitionResult#dnsSuffix}",A],[C,"Invalid Configuration: Missing Region"]]},rs=2,p=1e8,is=new Int32Array([-1,1,-1,0,6,3,2,36,4,4,5,p+27,6,p+4,p+27,1,29,7,2,36,8,3,9,31,4,22,10,5,19,11,7,21,12,8,p+7,13,10,p+8,14,12,p+9,15,13,p+10,16,14,p+11,17,15,p+12,18,16,p+13,p+16,6,p+5,20,7,21,p+6,17,p+24,p+25,6,p+4,23,7,27,24,9,p+14,25,10,p+15,26,11,p+22,p+23,11,28,p+21,17,p+20,p+21,2,35,30,3,39,31,4,32,p+27,6,p+4,33,7,p+27,34,9,p+14,p+27,3,39,36,4,38,37,7,p+18,p+19,6,p+4,p+17,5,p+1,40,8,p+2,p+3]),as=Ct.from(is,rs,ae.conditions,ae.results),cs=new Rt({size:50,params:["Endpoint","IsControlPlane","IsOAuthEndpoint","Region","UseDualStack","UseFIPS"]}),us=(u,h={})=>cs.get(u,()=>vt(as,{endpointParams:u,logger:h.logger}));ft.aws=ze;class P extends at{constructor(u){super(u);Object.setPrototypeOf(this,P.prototype)}}class U extends P{name="AccessDeniedException";$fault="client";error;constructor(u){super({name:"AccessDeniedException",$fault:"client",...u});Object.setPrototypeOf(this,U.prototype),this.error=u.error}}class F extends P{name="InternalServerException";$fault="server";error;constructor(u){super({name:"InternalServerException",$fault:"server",...u});Object.setPrototypeOf(this,F.prototype),this.error=u.error}}class b extends P{name="TooManyRequestsError";$fault="client";error;constructor(u){super({name:"TooManyRequestsError",$fault:"client",...u});Object.setPrototypeOf(this,b.prototype),this.error=u.error}}class q extends P{name="ValidationException";$fault="client";error;constructor(u){super({name:"ValidationException",$fault:"client",...u});Object.setPrototypeOf(this,q.prototype),this.error=u.error}}var ps="AccessDeniedException",ds="AccessToken",hs="CreateOAuth2Token",gs="CreateOAuth2TokenRequest",ls="CreateOAuth2TokenRequestBody",Es="CreateOAuth2TokenResponseBody",ms="CreateOAuth2TokenResponse",As="CreateOAuth2TokenWithIAM",_s="CreateOAuth2TokenWithIAMRequest",Os="CreateOAuth2TokenWithIAMResponse",Ss="InternalServerException",Is="OAuthAccessToken",Cs="RefreshToken",Rs="TooManyRequestsError",vs="ValidationException",ce="accessKeyId",W="accessToken",fs="access_token",K="client",ue="clientId",pe="codeVerifier",Ps="code",f="error",L="expiresIn",Ts="expires_in",z="grantType",ks="grant_type",Oe="http",X="httpError",de="idToken",m="jsonName",M="message",xs="resource",w="refreshToken",he="redirectUri",Se="smithy.ts.sdk.synthetic.com.amazonaws.signin",ge="secretAccessKey",le="sessionToken",ys="server",Ds="tokenInput",Ns="tokenOutput",j="tokenType",ws="token_type",_="com.amazonaws.signin",Ie=Ae.for(Se),Ce=[-3,Se,"SigninServiceException",0,[],[]];Ie.registerError(Ce,P);var y=Ae.for(_),Re=[-3,_,ps,{[f]:K},[f,M],[0,0],2];y.registerError(Re,U);var ve=[-3,_,Ss,{[f]:ys,[X]:500},[f,M],[0,0],2];y.registerError(ve,F);var fe=[-3,_,Rs,{[f]:K,[X]:429},[f,M],[0,0],2];y.registerError(fe,b);var Pe=[-3,_,vs,{[f]:K,[X]:400},[f,M],[0,0],2];y.registerError(Pe,q);var Te=[Ie,y],$s=[0,_,Is,8,0],ke=[0,_,Cs,8,0],xe=[3,_,ds,8,[ce,ge,le],[[0,{[m]:ce}],[0,{[m]:ge}],[0,{[m]:le}]],3],ye=[3,_,gs,0,[Ds],[[()=>De,16]],1],De=[3,_,ls,0,[ue,z,Ps,he,pe,w],[[0,{[m]:ue}],[0,{[m]:z}],0,[0,{[m]:he}],[0,{[m]:pe}],[()=>ke,{[m]:w}]],2],Ne=[3,_,ms,0,[Ns],[[()=>we,16]],1],we=[3,_,Es,0,[W,j,L,w,de],[[()=>xe,{[m]:W}],[0,{[m]:j}],[1,{[m]:L}],[()=>ke,{[m]:w}],[0,{[m]:de}]],4],$e=[3,_,_s,0,[z,xs],[[0,{[m]:ks}],0],2],Ue=[3,_,Os,0,[W,j,L],[[()=>$s,{[m]:fs}],[0,{[m]:ws}],[1,{[m]:Ts}]],3],Fe=[9,_,hs,{[Oe]:["POST","/v1/token",200]},()=>ye,()=>Ne],be=[9,_,As,{[Oe]:["POST","/v1/token?x-amz-client-auth-method=iam",200]},()=>$e,()=>Ue],Us=(u)=>({apiVersion:"2023-01-01",base64Decoder:u?.base64Decoder??zt,base64Encoder:u?.base64Encoder??Lt,disableHostPrefix:u?.disableHostPrefix??!1,endpointProvider:u?.endpointProvider??us,extensions:u?.extensions??[],httpAuthSchemeProvider:u?.httpAuthSchemeProvider??Zt,httpAuthSchemes:u?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(h)=>h.getIdentityProvider("aws.auth#sigv4"),signer:new Mt},{schemeId:"smithy.api#noAuth",identityProvider:(h)=>h.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new st}],logger:u?.logger??new ct,protocol:u?.protocol??Kt,protocolSettings:u?.protocolSettings??{defaultNamespace:"com.amazonaws.signin",errorTypeRegistries:Te,version:"2023-01-01",serviceTarget:"Signin"},serviceId:u?.serviceId??"Signin",sha256:u?.sha256??Xt,urlParser:u?.urlParser??kt,utf8Decoder:u?.utf8Decoder??Wt,utf8Encoder:u?.utf8Encoder??Vt}),Fs=(u)=>{ut(process.version);let h=mt(u),E=()=>h().then(pt),S=Us(u);Be(process.version);let O={profile:u?.profile,logger:S.logger};return{...S,...u,runtime:"node",defaultsMode:h,authSchemePreference:u?.authSchemePreference??T(Ht,O),bodyLengthChecker:u?.bodyLengthChecker??Bt,defaultUserAgentProvider:u?.defaultUserAgentProvider??je({serviceId:S.serviceId,clientVersion:os.version}),maxAttempts:u?.maxAttempts??T($t,u),region:u?.region??T(Ot,{...St,...O}),requestHandler:Gt.create(u?.requestHandler??E),retryMode:u?.retryMode??T({...wt,default:async()=>(await E()).retryMode||Nt},u),streamCollector:u?.streamCollector??jt,useDualstackEndpoint:u?.useDualstackEndpoint??T(_t,O),useFipsEndpoint:u?.useFipsEndpoint??T(At,O),userAgentAppId:u?.userAgentAppId??T(Ge,O)}},bs=(u)=>{let{httpAuthSchemes:h,httpAuthSchemeProvider:E,credentials:S}=u;return{setHttpAuthScheme(O){let D=h.findIndex((H)=>H.schemeId===O.schemeId);if(D===-1)h.push(O);else h.splice(D,1,O)},httpAuthSchemes(){return h},setHttpAuthSchemeProvider(O){E=O},httpAuthSchemeProvider(){return E},setCredentials(O){S=O},credentials(){return S}}},qs=(u)=>({httpAuthSchemes:u.httpAuthSchemes(),httpAuthSchemeProvider:u.httpAuthSchemeProvider(),credentials:u.credentials()}),Ms=(u,h)=>{let E=Object.assign(Ke(u),dt(u),xt(u),bs(u));return h.forEach((S)=>S.configure(E)),Object.assign(u,Xe(E),ht(E),yt(E),qs(E))};class Q extends me{config;constructor(...[u]){let h=Fs(u||{});super(h);this.initConfig=h;let E=ts(h),S=Qe(E),O=Ut(S),D=It(O),H=Ye(D),He=Pt(H),Ve=es(He),We=Ms(Ve,u?.extensions||[]);this.config=We,this.middlewareStack.use(bt(this.config)),this.middlewareStack.use(Je(this.config)),this.middlewareStack.use(Ft(this.config)),this.middlewareStack.use(Dt(this.config)),this.middlewareStack.use(Ze(this.config)),this.middlewareStack.use(et(this.config)),this.middlewareStack.use(tt(this.config)),this.middlewareStack.use(nt(this.config,{httpAuthSchemeParametersProvider:Qt,identityProviderConfigProvider:async(Le)=>new ot({"aws.auth#sigv4":Le.credentials})})),this.middlewareStack.use(rt(this.config))}destroy(){super.destroy()}}var qe=gt(ss,"Signin","SigninClient",Tt),Hs={IsControlPlane:{type:"staticContextParams",value:!1}},Vs={IsOAuthEndpoint:{type:"staticContextParams",value:!0}},Me=(u,h,E,S)=>[];class Y extends qe(Hs,Me,"CreateOAuth2Token",Fe){}class J extends qe(Vs,Me,"CreateOAuth2TokenWithIAM",be){}var Ws={CreateOAuth2TokenCommand:Y,CreateOAuth2TokenWithIAMCommand:J};class Z extends Q{}lt(Ws,Z);var Ls={AUTHCODE_EXPIRED:"AUTHCODE_EXPIRED",CONFLICT:"CONFLICT",INSUFFICIENT_PERMISSIONS:"INSUFFICIENT_PERMISSIONS",INVALID_REQUEST:"INVALID_REQUEST",RESOURCE_NOT_FOUND:"RESOURCE_NOT_FOUND",SERVER_ERROR:"server_error",SERVICE_QUOTA_EXCEEDED:"SERVICE_QUOTA_EXCEEDED",TOKEN_EXPIRED:"TOKEN_EXPIRED",USER_CREDENTIALS_CHANGED:"USER_CREDENTIALS_CHANGED"};var js=U,Gs=Re,Ks=xe,Xs=Fe,Qs=Y,Ys=ye,Js=De,Zs=Ne,en=we,tn=be,sn=J,nn=$e,on=Ue,rn=F,an=ve,cn=Ls,un=Z,pn=Q,dn=P,hn=Ce,gn=b,ln=fe,En=q,mn=Pe,An=Te;export{zs as $Command,Bs as __Client,js as AccessDeniedException,Gs as AccessDeniedException$,Ks as AccessToken$,Xs as CreateOAuth2Token$,Qs as CreateOAuth2TokenCommand,Ys as CreateOAuth2TokenRequest$,Js as CreateOAuth2TokenRequestBody$,Zs as CreateOAuth2TokenResponse$,en as CreateOAuth2TokenResponseBody$,tn as CreateOAuth2TokenWithIAM$,sn as CreateOAuth2TokenWithIAMCommand,nn as CreateOAuth2TokenWithIAMRequest$,on as CreateOAuth2TokenWithIAMResponse$,rn as InternalServerException,an as InternalServerException$,cn as OAuth2ErrorCode,un as Signin,pn as SigninClient,dn as SigninServiceException,hn as SigninServiceException$,gn as TooManyRequestsError,ln as TooManyRequestsError$,En as ValidationException,mn as ValidationException$,An as errorTypeRegistries};
|
|
2
|
+
import{i,s,A,r,a,o,n,l,c,t,B,g,d}from"./shumai-transcode-app.js";var{awsEndpointFunctions:ze,emitWarningIfUnsupportedVersion:Be,createDefaultUserAgentProvider:je,NODE_APP_ID_CONFIG_OPTIONS:Ge,getAwsRegionExtensionConfiguration:Ke,resolveAwsRegionExtensionConfiguration:Xe,resolveUserAgentConfig:Qe,resolveHostHeaderConfig:Ye,getUserAgentPlugin:Je,getHostHeaderPlugin:Ze,getLoggerPlugin:et,getRecursionDetectionPlugin:tt}=t(),{NoAuthSigner:st,getHttpAuthSchemeEndpointRuleSetPlugin:nt,DefaultIdentityProviderConfig:ot,getHttpSigningPlugin:rt}=c(),{normalizeProvider:Ee,getSmithyContext:it,ServiceException:at,NoOpLogger:ct,emitWarningIfUnsupportedVersion:ut,loadConfigsForDefaultMode:pt,getDefaultExtensionConfiguration:dt,resolveDefaultRuntimeConfig:ht,Client:me,makeBuilder:gt,createAggregatedClient:lt}=s(),{Command:Et}=s();var zs=Et,Bs=me;var{resolveDefaultsModeConfig:mt,loadConfig:T,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:At,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:_t,NODE_REGION_CONFIG_OPTIONS:Ot,NODE_REGION_CONFIG_FILE_OPTIONS:St,resolveRegionConfig:It}=A(),{BinaryDecisionDiagram:Ct,EndpointCache:Rt,decideEndpoint:vt,customEndpointFunctions:ft,resolveEndpointConfig:Pt,getEndpointPlugin:Tt}=r(),{parseUrl:kt,getHttpHandlerExtensionConfiguration:xt,resolveHttpHandlerRuntimeConfig:yt,getContentLengthPlugin:Dt}=n(),{DEFAULT_RETRY_MODE:Nt,NODE_RETRY_MODE_CONFIG_OPTIONS:wt,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:$t,resolveRetryConfig:Ut,getRetryPlugin:Ft}=l(),{TypeRegistry:Ae,getSchemaSerdePlugin:bt}=i(),{resolveAwsSdkSigV4Config:qt,AwsSdkSigV4Signer:Mt,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:Ht}=g(),{toUtf8:Vt,fromUtf8:Wt,toBase64:Lt,fromBase64:zt,calculateBodyLength:Bt}=a(),{streamCollector:jt,NodeHttpHandler:Gt}=d(),{AwsRestJsonProtocol:Kt}=B(),{Sha256:Xt}=o(),Qt=async(e,p,h)=>({operation:it(p).operation,region:await Ee(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function Yt(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"signin",region:e.region},propertiesExtractor:(p,h)=>({signingProperties:{config:p,context:h}})}}function Jt(e){return{schemeId:"smithy.api#noAuth"}}var Zt=(e)=>{let p=[];switch(e.operation){case"CreateOAuth2Token":{p.push(Jt());break}default:p.push(Yt(e))}return p},es=(e)=>{let p=qt(e);return Object.assign(p,{authSchemePreference:Ee(e.authSchemePreference??[])})},ts=(e)=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"signin"}),ss={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},ns="3.997.43",os={version:ns},v="ref",C=-1,ee=!1,k=!0,te="isSet",x="booleanEquals",se="coalesce",G="PartitionResult",I="stringEquals",V="getAttr",ne="https://signin.{Region}.{PartitionResult#dualStackDnsSuffix}",oe={[v]:"Endpoint"},R={fn:V,argv:[{[v]:G},"name"]},_e={[v]:"Region"},re={[v]:G},N={authSchemes:[{name:"sigv4",signingName:"signin",signingRegion:"{Region}"}]},m={},ie=[_e],ae={conditions:[[te,ie],[x,[{fn:se,argv:[{[v]:"IsControlPlane"},ee]},k]],[te,[oe]],["aws.partition",ie,G],[x,[{[v]:"UseFIPS"},k]],[I,[R,"aws"]],[x,[{fn:se,argv:[{[v]:"IsOAuthEndpoint"},ee]},k]],[x,[{[v]:"UseDualStack"},k]],[I,[R,"aws-cn"]],[I,[_e,"us-gov-west-1"]],[I,[R,"aws-us-gov"]],[x,[{fn:V,argv:[re,"supportsFIPS"]},k]],[I,[R,"aws-iso"]],[I,[R,"aws-iso-b"]],[I,[R,"aws-iso-f"]],[I,[R,"aws-iso-e"]],[I,[R,"aws-eusc"]],[x,[{fn:V,argv:[re,"supportsDualStack"]},k]]],results:[[C],["https://signin.{Region}.api.aws",N],["https://signin.{Region}.api.amazonwebservices.com.cn",N],[ne,N],[C,"FIPS endpoints are not supported for OAuth operations. Disable FIPS or use a non-OAuth operation."],["https://{Region}.oauth.signin.aws",N],["https://{Region}.signin.aws.amazon.com",m],["https://{Region}.signin.amazonaws.cn",m],["https://{Region}.signin.amazonaws-us-gov.com",m],["https://{Region}.signin.c2shome.ic.gov",m],["https://{Region}.signin.sc2shome.sgov.gov",m],["https://{Region}.signin.csphome.hci.ic.gov",m],["https://{Region}.signin.csphome.adc-e.uk",m],["https://{Region}.signin.amazonaws-eusc.eu",m],["https://signin-fips.amazonaws-us-gov.com",m],["https://{Region}.signin-fips.amazonaws-us-gov.com",m],["https://{Region}.signin.{PartitionResult#dnsSuffix}",m],[C,"Invalid Configuration: FIPS and custom endpoint are not supported"],[C,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[oe,m],["https://signin-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",m],[C,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://signin-fips.{Region}.{PartitionResult#dnsSuffix}",m],[C,"FIPS is enabled but this partition does not support FIPS"],[ne,m],[C,"DualStack is enabled but this partition does not support DualStack"],["https://signin.{Region}.{PartitionResult#dnsSuffix}",m],[C,"Invalid Configuration: Missing Region"]]},rs=2,u=1e8,is=new Int32Array([-1,1,-1,0,6,3,2,36,4,4,5,u+27,6,u+4,u+27,1,29,7,2,36,8,3,9,31,4,22,10,5,19,11,7,21,12,8,u+7,13,10,u+8,14,12,u+9,15,13,u+10,16,14,u+11,17,15,u+12,18,16,u+13,u+16,6,u+5,20,7,21,u+6,17,u+24,u+25,6,u+4,23,7,27,24,9,u+14,25,10,u+15,26,11,u+22,u+23,11,28,u+21,17,u+20,u+21,2,35,30,3,39,31,4,32,u+27,6,u+4,33,7,u+27,34,9,u+14,u+27,3,39,36,4,38,37,7,u+18,u+19,6,u+4,u+17,5,u+1,40,8,u+2,u+3]),as=Ct.from(is,rs,ae.conditions,ae.results),cs=new Rt({size:50,params:["Endpoint","IsControlPlane","IsOAuthEndpoint","Region","UseDualStack","UseFIPS"]}),us=(e,p={})=>cs.get(e,()=>vt(as,{endpointParams:e,logger:p.logger}));ft.aws=ze;class P extends at{constructor(e){super(e);Object.setPrototypeOf(this,P.prototype)}}class U extends P{name="AccessDeniedException";$fault="client";error;constructor(e){super({name:"AccessDeniedException",$fault:"client",...e});Object.setPrototypeOf(this,U.prototype),this.error=e.error}}class F extends P{name="InternalServerException";$fault="server";error;constructor(e){super({name:"InternalServerException",$fault:"server",...e});Object.setPrototypeOf(this,F.prototype),this.error=e.error}}class b extends P{name="TooManyRequestsError";$fault="client";error;constructor(e){super({name:"TooManyRequestsError",$fault:"client",...e});Object.setPrototypeOf(this,b.prototype),this.error=e.error}}class q extends P{name="ValidationException";$fault="client";error;constructor(e){super({name:"ValidationException",$fault:"client",...e});Object.setPrototypeOf(this,q.prototype),this.error=e.error}}var ps="AccessDeniedException",ds="AccessToken",hs="CreateOAuth2Token",gs="CreateOAuth2TokenRequest",ls="CreateOAuth2TokenRequestBody",Es="CreateOAuth2TokenResponseBody",ms="CreateOAuth2TokenResponse",As="CreateOAuth2TokenWithIAM",_s="CreateOAuth2TokenWithIAMRequest",Os="CreateOAuth2TokenWithIAMResponse",Ss="InternalServerException",Is="OAuthAccessToken",Cs="RefreshToken",Rs="TooManyRequestsError",vs="ValidationException",ce="accessKeyId",W="accessToken",fs="access_token",K="client",ue="clientId",pe="codeVerifier",Ps="code",f="error",L="expiresIn",Ts="expires_in",z="grantType",ks="grant_type",Oe="http",X="httpError",de="idToken",E="jsonName",M="message",xs="resource",w="refreshToken",he="redirectUri",Se="smithy.ts.sdk.synthetic.com.amazonaws.signin",ge="secretAccessKey",le="sessionToken",ys="server",Ds="tokenInput",Ns="tokenOutput",j="tokenType",ws="token_type",_="com.amazonaws.signin",Ie=Ae.for(Se),Ce=[-3,Se,"SigninServiceException",0,[],[]];Ie.registerError(Ce,P);var y=Ae.for(_),Re=[-3,_,ps,{[f]:K},[f,M],[0,0],2];y.registerError(Re,U);var ve=[-3,_,Ss,{[f]:ys,[X]:500},[f,M],[0,0],2];y.registerError(ve,F);var fe=[-3,_,Rs,{[f]:K,[X]:429},[f,M],[0,0],2];y.registerError(fe,b);var Pe=[-3,_,vs,{[f]:K,[X]:400},[f,M],[0,0],2];y.registerError(Pe,q);var Te=[Ie,y],$s=[0,_,Is,8,0],ke=[0,_,Cs,8,0],xe=[3,_,ds,8,[ce,ge,le],[[0,{[E]:ce}],[0,{[E]:ge}],[0,{[E]:le}]],3],ye=[3,_,gs,0,[Ds],[[()=>De,16]],1],De=[3,_,ls,0,[ue,z,Ps,he,pe,w],[[0,{[E]:ue}],[0,{[E]:z}],0,[0,{[E]:he}],[0,{[E]:pe}],[()=>ke,{[E]:w}]],2],Ne=[3,_,ms,0,[Ns],[[()=>we,16]],1],we=[3,_,Es,0,[W,j,L,w,de],[[()=>xe,{[E]:W}],[0,{[E]:j}],[1,{[E]:L}],[()=>ke,{[E]:w}],[0,{[E]:de}]],4],$e=[3,_,_s,0,[z,xs],[[0,{[E]:ks}],0],2],Ue=[3,_,Os,0,[W,j,L],[[()=>$s,{[E]:fs}],[0,{[E]:ws}],[1,{[E]:Ts}]],3],Fe=[9,_,hs,{[Oe]:["POST","/v1/token",200]},()=>ye,()=>Ne],be=[9,_,As,{[Oe]:["POST","/v1/token?x-amz-client-auth-method=iam",200]},()=>$e,()=>Ue],Us=(e)=>({apiVersion:"2023-01-01",base64Decoder:e?.base64Decoder??zt,base64Encoder:e?.base64Encoder??Lt,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??us,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Zt,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(p)=>p.getIdentityProvider("aws.auth#sigv4"),signer:new Mt},{schemeId:"smithy.api#noAuth",identityProvider:(p)=>p.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new st}],logger:e?.logger??new ct,protocol:e?.protocol??Kt,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.signin",errorTypeRegistries:Te,version:"2023-01-01",serviceTarget:"Signin"},serviceId:e?.serviceId??"Signin",sha256:e?.sha256??Xt,urlParser:e?.urlParser??kt,utf8Decoder:e?.utf8Decoder??Wt,utf8Encoder:e?.utf8Encoder??Vt}),Fs=(e)=>{ut(process.version);let p=mt(e),h=()=>p().then(pt),S=Us(e);Be(process.version);let O={profile:e?.profile,logger:S.logger};return{...S,...e,runtime:"node",defaultsMode:p,authSchemePreference:e?.authSchemePreference??T(Ht,O),bodyLengthChecker:e?.bodyLengthChecker??Bt,defaultUserAgentProvider:e?.defaultUserAgentProvider??je({serviceId:S.serviceId,clientVersion:os.version}),maxAttempts:e?.maxAttempts??T($t,e),region:e?.region??T(Ot,{...St,...O}),requestHandler:Gt.create(e?.requestHandler??h),retryMode:e?.retryMode??T({...wt,default:async()=>(await h()).retryMode||Nt},e),streamCollector:e?.streamCollector??jt,useDualstackEndpoint:e?.useDualstackEndpoint??T(_t,O),useFipsEndpoint:e?.useFipsEndpoint??T(At,O),userAgentAppId:e?.userAgentAppId??T(Ge,O)}},bs=(e)=>{let{httpAuthSchemes:p,httpAuthSchemeProvider:h,credentials:S}=e;return{setHttpAuthScheme(O){let D=p.findIndex((H)=>H.schemeId===O.schemeId);if(D===-1)p.push(O);else p.splice(D,1,O)},httpAuthSchemes(){return p},setHttpAuthSchemeProvider(O){h=O},httpAuthSchemeProvider(){return h},setCredentials(O){S=O},credentials(){return S}}},qs=(e)=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}),Ms=(e,p)=>{let h=Object.assign(Ke(e),dt(e),xt(e),bs(e));return p.forEach((S)=>S.configure(h)),Object.assign(e,Xe(h),ht(h),yt(h),qs(h))};class Q extends me{config;constructor(...[e]){let p=Fs(e||{});super(p);this.initConfig=p;let h=ts(p),S=Qe(h),O=Ut(S),D=It(O),H=Ye(D),He=Pt(H),Ve=es(He),We=Ms(Ve,e?.extensions||[]);this.config=We,this.middlewareStack.use(bt(this.config)),this.middlewareStack.use(Je(this.config)),this.middlewareStack.use(Ft(this.config)),this.middlewareStack.use(Dt(this.config)),this.middlewareStack.use(Ze(this.config)),this.middlewareStack.use(et(this.config)),this.middlewareStack.use(tt(this.config)),this.middlewareStack.use(nt(this.config,{httpAuthSchemeParametersProvider:Qt,identityProviderConfigProvider:async(Le)=>new ot({"aws.auth#sigv4":Le.credentials})})),this.middlewareStack.use(rt(this.config))}destroy(){super.destroy()}}var qe=gt(ss,"Signin","SigninClient",Tt),Hs={IsControlPlane:{type:"staticContextParams",value:!1}},Vs={IsOAuthEndpoint:{type:"staticContextParams",value:!0}},Me=(e,p,h,S)=>[];class Y extends qe(Hs,Me,"CreateOAuth2Token",Fe){}class J extends qe(Vs,Me,"CreateOAuth2TokenWithIAM",be){}var Ws={CreateOAuth2TokenCommand:Y,CreateOAuth2TokenWithIAMCommand:J};class Z extends Q{}lt(Ws,Z);var Ls={AUTHCODE_EXPIRED:"AUTHCODE_EXPIRED",CONFLICT:"CONFLICT",INSUFFICIENT_PERMISSIONS:"INSUFFICIENT_PERMISSIONS",INVALID_REQUEST:"INVALID_REQUEST",RESOURCE_NOT_FOUND:"RESOURCE_NOT_FOUND",SERVER_ERROR:"server_error",SERVICE_QUOTA_EXCEEDED:"SERVICE_QUOTA_EXCEEDED",TOKEN_EXPIRED:"TOKEN_EXPIRED",USER_CREDENTIALS_CHANGED:"USER_CREDENTIALS_CHANGED"};var js=U,Gs=Re,Ks=xe,Xs=Fe,Qs=Y,Ys=ye,Js=De,Zs=Ne,en=we,tn=be,sn=J,nn=$e,on=Ue,rn=F,an=ve,cn=Ls,un=Z,pn=Q,dn=P,hn=Ce,gn=b,ln=fe,En=q,mn=Pe,An=Te;export{zs as $Command,Bs as __Client,js as AccessDeniedException,Gs as AccessDeniedException$,Ks as AccessToken$,Xs as CreateOAuth2Token$,Qs as CreateOAuth2TokenCommand,Ys as CreateOAuth2TokenRequest$,Js as CreateOAuth2TokenRequestBody$,Zs as CreateOAuth2TokenResponse$,en as CreateOAuth2TokenResponseBody$,tn as CreateOAuth2TokenWithIAM$,sn as CreateOAuth2TokenWithIAMCommand,nn as CreateOAuth2TokenWithIAMRequest$,on as CreateOAuth2TokenWithIAMResponse$,rn as InternalServerException,an as InternalServerException$,cn as OAuth2ErrorCode,un as Signin,pn as SigninClient,dn as SigninServiceException,hn as SigninServiceException$,gn as TooManyRequestsError,ln as TooManyRequestsError$,En as ValidationException,mn as ValidationException$,An as errorTypeRegistries};
|
|
@@ -1,2 +1,2 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
import{A,
|
|
2
|
+
import{e,A,t}from"./shumai-transcode-app.js";var f=e(t()),i=e(A());import{readFileSync as S}from"fs";var a=(o)=>async(l)=>{o.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:r,roleSessionName:n,webIdentityToken:c,providerId:s,policyArns:g,policy:E,durationSeconds:p}=o,{roleAssumerWithWebIdentity:d}=o;if(!d){let{getDefaultRoleAssumerWithWebIdentity:_}=await import("./chunk-z03rvtg1.js");d=_({...o.clientConfig,credentialProviderLogger:o.logger,parentClientConfig:{...l?.callerClientConfig,...o.parentClientConfig}},o.clientPlugins)}return d({RoleArn:r,RoleSessionName:n??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:c,ProviderId:s,PolicyArns:g,Policy:E,DurationSeconds:p})};var m="AWS_WEB_IDENTITY_TOKEN_FILE",T="AWS_ROLE_ARN",N="AWS_ROLE_SESSION_NAME",I=(o={})=>async(l)=>{o.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let r=o?.webIdentityTokenFile??process.env[m],n=o?.roleArn??process.env[T],c=o?.roleSessionName??process.env[N];if(!r||!n)throw new i.CredentialsProviderError("Web identity configuration not specified",{logger:o.logger});let s=await a({...o,webIdentityToken:i.externalDataInterceptor?.getTokenRecord?.()[r]??S(r,{encoding:"ascii"}),roleArn:n,roleSessionName:c})(l);if(r===process.env[m])f.setCredentialFeature(s,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h");return s};export{I as fromTokenFile};
|
|
@@ -1,2 +1,2 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
import{A,
|
|
2
|
+
import{e,A,t}from"./shumai-transcode-app.js";var _=e(A());var B=e(A());var C=e(t()),f=e(A());var S=e(t()),u=e(A()),v=(r,n,o)=>{let s={EcsContainer:async(a)=>{let{fromHttp:c}=await import("./chunk-8bjt1vj2.js"),{fromContainerMetadata:i}=await import("./chunk-5m5mdh6c.js");return o?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>u.chain(c(a??{}),i(a))().then(p)},Ec2InstanceMetadata:async(a)=>{o?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");let{fromInstanceMetadata:c}=await import("./chunk-5m5mdh6c.js");return async()=>c(a)().then(p)},Environment:async(a)=>{o?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");let{fromEnv:c}=await import("./chunk-n7f6kn4x.js");return async()=>c(a)().then(p)}};if(r in s)return s[r];else throw new u.CredentialsProviderError(`Unsupported credential source in profile ${n}. Got ${r}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:o})},p=(r)=>S.setCredentialFeature(r,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p");var R=(r,{profile:n="default",logger:o}={})=>Boolean(r)&&typeof r==="object"&&typeof r.role_arn==="string"&&["undefined","string"].indexOf(typeof r.role_session_name)>-1&&["undefined","string"].indexOf(typeof r.external_id)>-1&&["undefined","string"].indexOf(typeof r.mfa_serial)>-1&&(q(r,{profile:n,logger:o})||H(r,{profile:n,logger:o})),q=(r,{profile:n,logger:o})=>{let s=typeof r.source_profile==="string"&&typeof r.credential_source>"u";if(s)o?.debug?.(` ${n} isAssumeRoleWithSourceProfile source_profile=${r.source_profile}`);return s},H=(r,{profile:n,logger:o})=>{let s=typeof r.credential_source==="string"&&typeof r.source_profile>"u";if(s)o?.debug?.(` ${n} isCredentialSourceProfile credential_source=${r.credential_source}`);return s},L=async(r,n,o,s,a={},c)=>{o.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");let i=n[r],{source_profile:l,region:K}=i;if(!o.roleAssumer){let{getDefaultRoleAssumer:d}=await import("./chunk-z03rvtg1.js");o.roleAssumer=d({...o.clientConfig,credentialProviderLogger:o.logger,parentClientConfig:{...s,...o?.parentClientConfig,region:K??o?.parentClientConfig?.region??s?.region}},o.clientPlugins)}if(l&&l in a)throw new f.CredentialsProviderError(`Detected a cycle attempting to resolve credentials for profile ${f.getProfileName(o)}. Profiles visited: `+Object.keys(a).join(", "),{logger:o.logger});o.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${l?`source_profile=[${l}]`:`profile=[${r}]`}`);let P=l?c(l,n,o,s,{...a,[l]:!0},I(n[l]??{})):(await v(i.credential_source,r,o.logger)(o))();if(I(i))return P.then((d)=>C.setCredentialFeature(d,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));else{let d={RoleArn:i.role_arn,RoleSessionName:i.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:i.external_id,DurationSeconds:parseInt(i.duration_seconds||"3600",10)},{mfa_serial:m}=i;if(m){if(!o.mfaCodeProvider)throw new f.CredentialsProviderError(`Profile ${r} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:o.logger,tryNextLink:!1});d.SerialNumber=m,d.TokenCode=await o.mfaCodeProvider(m)}let G=await P;return o.roleAssumer(G,d).then((U)=>C.setCredentialFeature(U,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},I=(r)=>!r.role_arn&&!!r.credential_source;var O=e(t()),b=(r)=>Boolean(r&&r.login_session),x=async(r,n,o)=>{let{fromLoginCredentials:s}=await import("./chunk-5e8ac6db.js"),a=await s({...n,profile:r})({callerClientConfig:o});return O.setCredentialFeature(a,"CREDENTIALS_PROFILE_LOGIN","AC")};var k=e(t()),F=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.credential_process==="string",h=async(r,n)=>{let{fromProcess:o}=await import("./chunk-pptpr3vn.js"),s=await o({...r,profile:n})();return k.setCredentialFeature(s,"CREDENTIALS_PROFILE_PROCESS","v")};var y=e(t()),D=async(r,n,o={},s)=>{let{fromSSO:a}=await import("./chunk-rjfxk4yp.js");return a({profile:r,logger:o.logger,parentClientConfig:o.parentClientConfig,clientConfig:o.clientConfig})({callerClientConfig:s}).then((c)=>{if(n.sso_session)return y.setCredentialFeature(c,"CREDENTIALS_PROFILE_SSO","r");else return y.setCredentialFeature(c,"CREDENTIALS_PROFILE_SSO_LEGACY","t")})},T=(r)=>r&&(typeof r.sso_start_url==="string"||typeof r.sso_account_id==="string"||typeof r.sso_session==="string"||typeof r.sso_region==="string"||typeof r.sso_role_name==="string");var W=e(t()),g=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.aws_access_key_id==="string"&&typeof r.aws_secret_access_key==="string"&&["undefined","string"].indexOf(typeof r.aws_session_token)>-1&&["undefined","string"].indexOf(typeof r.aws_account_id)>-1,w=async(r,n)=>{n?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");let o={accessKeyId:r.aws_access_key_id,secretAccessKey:r.aws_secret_access_key,sessionToken:r.aws_session_token,...r.aws_credential_scope&&{credentialScope:r.aws_credential_scope},...r.aws_account_id&&{accountId:r.aws_account_id}};return W.setCredentialFeature(o,"CREDENTIALS_PROFILE","n")};var N=e(t()),j=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.web_identity_token_file==="string"&&typeof r.role_arn==="string"&&["undefined","string"].indexOf(typeof r.role_session_name)>-1,M=async(r,n,o)=>{let{fromTokenFile:s}=await import("./chunk-g1e4yv2g.js"),a=await s({webIdentityTokenFile:r.web_identity_token_file,roleArn:r.role_arn,roleSessionName:r.role_session_name,roleAssumerWithWebIdentity:n.roleAssumerWithWebIdentity,logger:n.logger,parentClientConfig:n.parentClientConfig})({callerClientConfig:o});return N.setCredentialFeature(a,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q")};var E=async(r,n,o,s,a={},c=!1)=>{let i=n[r];if(Object.keys(a).length>0&&g(i))return w(i,o);if(c||R(i,{profile:r,logger:o.logger}))return L(r,n,o,s,a,E);if(g(i))return w(i,o);if(j(i))return M(i,o,s);if(F(i))return h(o,r);if(T(i))return await D(r,i,o,s);if(b(i))return x(r,o,s);throw new B.CredentialsProviderError(`Could not resolve credentials using profile: [${r}] in configuration/credentials file(s).`,{logger:o.logger})};var V=(r={})=>async({callerClientConfig:n}={})=>{r.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");let o=await _.parseKnownFiles(r);return E(_.getProfileName({profile:r.profile??n?.profile}),o,r,n)};export{V as fromIni};
|
|
@@ -1,2 +1,2 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
import{A,
|
|
2
|
+
import{e,A,t}from"./shumai-transcode-app.js";var l=e(A());var c=e(A());import{exec as P}from"child_process";import{promisify as m}from"util";var f=e(t()),u=(o,r,s)=>{if(r.Version!==1)throw Error(`Profile ${o} credential_process did not return Version 1.`);if(r.AccessKeyId===void 0||r.SecretAccessKey===void 0)throw Error(`Profile ${o} credential_process returned invalid credentials.`);if(r.Expiration){let a=new Date;if(new Date(r.Expiration)<a)throw Error(`Profile ${o} credential_process returned expired credentials.`)}let n=r.AccountId;if(!n&&s?.[o]?.aws_account_id)n=s[o].aws_account_id;let i={accessKeyId:r.AccessKeyId,secretAccessKey:r.SecretAccessKey,...r.SessionToken&&{sessionToken:r.SessionToken},...r.Expiration&&{expiration:new Date(r.Expiration)},...r.CredentialScope&&{credentialScope:r.CredentialScope},...n&&{accountId:n}};return f.setCredentialFeature(i,"CREDENTIALS_PROCESS","w"),i};var w=async(o,r,s)=>{let n=r[o];if(r[o]){let i=n.credential_process;if(i!==void 0){let a=m(c.externalDataInterceptor?.getTokenRecord?.().exec??P);try{let{stdout:d}=await a(i),p;try{p=JSON.parse(d.trim())}catch{throw Error(`Profile ${o} credential_process returned invalid JSON.`)}return u(o,p,r)}catch(d){throw new c.CredentialsProviderError(d.message,{logger:s})}}else throw new c.CredentialsProviderError(`Profile ${o} did not contain credential_process.`,{logger:s})}else throw new c.CredentialsProviderError(`Profile ${o} could not be found in shared credentials file.`,{logger:s})};var x=(o={})=>async({callerClientConfig:r}={})=>{o.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");let s=await l.parseKnownFiles(o);return w(l.getProfileName({profile:o.profile??r?.profile}),s,o.logger)};export{x as fromProcess};
|
|
@@ -1,3 +1,3 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
import{A,
|
|
2
|
+
import{e,A,t}from"./shumai-transcode-app.js";var S=e(A());var U=(o)=>o&&(typeof o.sso_start_url==="string"||typeof o.sso_account_id==="string"||typeof o.sso_session==="string"||typeof o.sso_region==="string"||typeof o.sso_role_name==="string");var P=e(t());var p=e(A());var j=300000,T="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var q=async(o,s={},n)=>{let{SSOOIDCClient:i}=await import("./chunk-8t98yceq.js"),a=(g)=>s.clientConfig?.[g]??s.parentClientConfig?.[g]??n?.[g];return new i(Object.assign({},s.clientConfig??{},{region:o??s.clientConfig?.region,logger:a("logger"),userAgentAppId:a("userAgentAppId")}))};var W=async(o,s,n={},i)=>{let{CreateTokenCommand:a}=await import("./chunk-8t98yceq.js");return(await q(s,n,i)).send(new a({clientId:o.clientId,clientSecret:o.clientSecret,refreshToken:o.refreshToken,grantType:"refresh_token"}))};var X=e(A());var R=(o)=>{if(o.expiration&&o.expiration.getTime()<Date.now())throw new X.TokenProviderError(`Token is expired. ${T}`,!1)};var z=e(A());var h=(o,s,n=!1)=>{if(typeof s>"u")throw new z.TokenProviderError(`Value not present for '${o}' in SSO Token${n?". Cannot refresh":""}. ${T}`,!1)};var J=e(A());import{promises as ee}from"fs";var{writeFile:oe}=ee,V=(o,s)=>{let n=J.getSSOTokenFilepath(o),i=JSON.stringify(s,null,2);return oe(n,i)};var Y=new Map,v=(o={})=>async({callerClientConfig:s}={})=>{o.logger?.debug("@aws-sdk/token-providers - fromSso");let n=await p.parseKnownFiles(o),i=p.getProfileName({profile:o.profile??s?.profile}),a=n[i];if(!a)throw new p.TokenProviderError(`Profile '${i}' could not be found in shared credentials file.`,!1);else if(!a.sso_session)throw new p.TokenProviderError(`Profile '${i}' is missing required property 'sso_session'.`);let l=a.sso_session,d=(await p.loadSsoSessionData(o))[l];if(!d)throw new p.TokenProviderError(`Sso session '${l}' could not be found in shared credentials file.`,!1);for(let f of["sso_start_url","sso_region"])if(!d[f])throw new p.TokenProviderError(`Sso session '${l}' is missing required property '${f}'.`,!1);let{sso_start_url:m,sso_region:E}=d,r;try{r=await p.getSSOTokenFromFile(l)}catch(f){throw new p.TokenProviderError(`The SSO session token associated with profile=${i} was not found or is invalid. ${T}`,!1)}h("accessToken",r.accessToken),h("expiresAt",r.expiresAt);let{accessToken:x,expiresAt:C}=r,c={token:x,expiration:new Date(C)};if(c.expiration.getTime()-Date.now()>j)return c;let w=Y.get(l)??0;if(Date.now()-w<30000)return R(c),c;h("clientId",r.clientId,!0),h("clientSecret",r.clientSecret,!0),h("refreshToken",r.refreshToken,!0);try{Y.set(l,Date.now());let f=await W(r,E,o,s);h("accessToken",f.accessToken),h("expiresIn",f.expiresIn);let O=new Date(Date.now()+f.expiresIn*1000);try{await V(l,{...r,accessToken:f.accessToken,expiresAt:O.toISOString(),refreshToken:f.refreshToken})}catch(_){}return{token:f.accessToken,expiration:O}}catch(f){return R(c),c}};var u=e(A()),y=!1,F=async({ssoStartUrl:o,ssoSession:s,ssoAccountId:n,ssoRegion:i,ssoRoleName:a,ssoClient:l,clientConfig:g,parentClientConfig:d,callerClientConfig:m,profile:E,filepath:r,configFilepath:x,ignoreCache:C,logger:c})=>{let w,f="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let k=await v({profile:E,filepath:r,configFilepath:x,ignoreCache:C,clientConfig:g,parentClientConfig:d,logger:c})({callerClientConfig:m});w={accessToken:k.token,expiresAt:new Date(k.expiration).toISOString()}}catch(k){throw new u.CredentialsProviderError(k.message,{tryNextLink:y,logger:c})}else try{w=await u.getSSOTokenFromFile(o)}catch(k){throw new u.CredentialsProviderError("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:y,logger:c})}if(new Date(w.expiresAt).getTime()-Date.now()<=0)throw new u.CredentialsProviderError("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:y,logger:c});let{accessToken:O}=w,{SSOClient:_,GetRoleCredentialsCommand:I}=await import("./chunk-tf25cx5y.js"),Z=l||new _(Object.assign({},g??{},{logger:g?.logger??m?.logger??d?.logger,region:g?.region??i,userAgentAppId:g?.userAgentAppId??m?.userAgentAppId??d?.userAgentAppId})),D;try{D=await Z.send(new I({accountId:n,roleName:a,accessToken:O}))}catch(k){throw new u.CredentialsProviderError(k,{tryNextLink:y,logger:c})}let{roleCredentials:{accessKeyId:L,secretAccessKey:M,sessionToken:b,expiration:G,credentialScope:K,accountId:H}={}}=D;if(!L||!M||!b||!G)throw new u.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:y,logger:c});let N={accessKeyId:L,secretAccessKey:M,sessionToken:b,expiration:new Date(G),...K&&{credentialScope:K},...H&&{accountId:H}};if(s)P.setCredentialFeature(N,"CREDENTIALS_SSO","s");else P.setCredentialFeature(N,"CREDENTIALS_SSO_LEGACY","u");return N};var B=e(A()),Q=(o,s)=>{let{sso_start_url:n,sso_account_id:i,sso_region:a,sso_role_name:l}=o;if(!n||!i||!a||!l)throw new B.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(o).join(", ")}
|
|
3
3
|
Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:s});return o};var se=(o={})=>async({callerClientConfig:s}={})=>{o.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:n,ssoAccountId:i,ssoRegion:a,ssoRoleName:l,ssoSession:g}=o,{ssoClient:d}=o,m=S.getProfileName({profile:o.profile??s?.profile});if(!n&&!i&&!a&&!l&&!g){let r=(await S.parseKnownFiles(o))[m];if(!r)throw new S.CredentialsProviderError(`Profile ${m} was not found.`,{logger:o.logger});if(!U(r))throw new S.CredentialsProviderError(`Profile ${m} is not configured with SSO credentials.`,{logger:o.logger});if(r?.sso_session){let _=(await S.loadSsoSessionData(o))[r.sso_session],I=` configurations in profile ${m} and sso-session ${r.sso_session}`;if(a&&a!==_.sso_region)throw new S.CredentialsProviderError("Conflicting SSO region"+I,{tryNextLink:!1,logger:o.logger});if(n&&n!==_.sso_start_url)throw new S.CredentialsProviderError("Conflicting SSO start_url"+I,{tryNextLink:!1,logger:o.logger});r.sso_region=_.sso_region,r.sso_start_url=_.sso_start_url}let{sso_start_url:x,sso_account_id:C,sso_region:c,sso_role_name:w,sso_session:f}=Q(r,o.logger);return F({ssoStartUrl:x,ssoSession:f,ssoAccountId:C,ssoRegion:c,ssoRoleName:w,ssoClient:d,clientConfig:o.clientConfig,parentClientConfig:o.parentClientConfig,callerClientConfig:o.callerClientConfig,profile:m,filepath:o.filepath,configFilepath:o.configFilepath,ignoreCache:o.ignoreCache,logger:o.logger})}else if(!n||!i||!a||!l)throw new S.CredentialsProviderError('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:o.logger});else return F({ssoStartUrl:n,ssoSession:g,ssoAccountId:i,ssoRegion:a,ssoRoleName:l,ssoClient:d,clientConfig:o.clientConfig,parentClientConfig:o.parentClientConfig,callerClientConfig:o.callerClientConfig,profile:m,filepath:o.filepath,configFilepath:o.configFilepath,ignoreCache:o.ignoreCache,logger:o.logger})};export{se as fromSSO};
|
|
@@ -0,0 +1,2 @@
|
|
|
1
|
+
// @bun
|
|
2
|
+
import{i,s,A,r,a,o,n,l,c,t,B,g,d}from"./shumai-transcode-app.js";var{awsEndpointFunctions:ie,emitWarningIfUnsupportedVersion:ae,createDefaultUserAgentProvider:ce,NODE_APP_ID_CONFIG_OPTIONS:ue,getAwsRegionExtensionConfiguration:de,resolveAwsRegionExtensionConfiguration:le,resolveUserAgentConfig:pe,resolveHostHeaderConfig:he,getUserAgentPlugin:ge,getHostHeaderPlugin:me,getLoggerPlugin:_e,getRecursionDetectionPlugin:Se}=t(),{NoAuthSigner:fe,getHttpAuthSchemeEndpointRuleSetPlugin:Ee,DefaultIdentityProviderConfig:Pe,getHttpSigningPlugin:ve}=c(),{normalizeProvider:W,getSmithyContext:Re,ServiceException:Ce,NoOpLogger:xe,emitWarningIfUnsupportedVersion:Ie,loadConfigsForDefaultMode:Ae,getDefaultExtensionConfiguration:ye,resolveDefaultRuntimeConfig:Oe,Client:Te,makeBuilder:De,createAggregatedClient:Ne}=s(),{Command:fs}=s();var{resolveDefaultsModeConfig:we,loadConfig:f,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:ke,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:be,NODE_REGION_CONFIG_OPTIONS:Fe,NODE_REGION_CONFIG_FILE_OPTIONS:$e,resolveRegionConfig:qe}=A(),{BinaryDecisionDiagram:He,EndpointCache:Ue,decideEndpoint:Ge,customEndpointFunctions:Me,resolveEndpointConfig:ze,getEndpointPlugin:je}=r(),{parseUrl:Le,getHttpHandlerExtensionConfiguration:Ke,resolveHttpHandlerRuntimeConfig:Ve,getContentLengthPlugin:Be}=n(),{DEFAULT_RETRY_MODE:We,NODE_RETRY_MODE_CONFIG_OPTIONS:Qe,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:Ye,resolveRetryConfig:Je,getRetryPlugin:Xe}=l(),{TypeRegistry:Q,getSchemaSerdePlugin:Ze}=i(),{resolveAwsSdkSigV4Config:et,AwsSdkSigV4Signer:tt,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:st}=g(),{toUtf8:ot,fromUtf8:nt,toBase64:rt,fromBase64:it,calculateBodyLength:at}=a(),{streamCollector:ct,NodeHttpHandler:ut}=d(),{AwsRestJsonProtocol:dt}=B(),{Sha256:lt}=o(),pt=async(e,u,p)=>({operation:Re(u).operation,region:await W(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function ht(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:e.region},propertiesExtractor:(u,p)=>({signingProperties:{config:u,context:p}})}}function gt(e){return{schemeId:"smithy.api#noAuth"}}var mt=(e)=>{let u=[];switch(e.operation){case"GetRoleCredentials":{u.push(gt());break}default:u.push(ht(e))}return u},_t=(e)=>{let u=et(e);return Object.assign(u,{authSchemePreference:W(e.authSchemePreference??[])})},St=(e)=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"}),ft={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Et="3.997.43",Pt={version:Et},R="ref",E=-1,I=!0,z="isSet",Y="PartitionResult",y="booleanEquals",k="getAttr",j={[R]:"Endpoint"},b={[R]:Y},v={},L=[{[R]:"Region"}],K={conditions:[[z,[j]],[z,L],["aws.partition",L,Y],[y,[{[R]:"UseFIPS"},I]],[y,[{[R]:"UseDualStack"},I]],[y,[{fn:k,argv:[b,"supportsDualStack"]},I]],[y,[{fn:k,argv:[b,"supportsFIPS"]},I]],["stringEquals",[{fn:k,argv:[b,"name"]},"aws-us-gov"]]],results:[[E],[E,"Invalid Configuration: FIPS and custom endpoint are not supported"],[E,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[j,v],["https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",v],[E,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://portal.sso.{Region}.amazonaws.com",v],["https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",v],[E,"FIPS is enabled but this partition does not support FIPS"],["https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",v],[E,"DualStack is enabled but this partition does not support DualStack"],["https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",v],[E,"Invalid Configuration: Missing Region"]]},vt=2,m=1e8,Rt=new Int32Array([-1,1,-1,0,13,3,1,4,m+12,2,5,m+12,3,8,6,4,7,m+11,5,m+9,m+10,4,11,9,6,10,m+8,7,m+6,m+7,5,12,m+5,6,m+4,m+5,3,m+1,14,4,m+2,m+3]),Ct=He.from(Rt,vt,K.conditions,K.results),xt=new Ue({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),It=(e,u={})=>xt.get(e,()=>Ge(Ct,{endpointParams:e,logger:u.logger}));Me.aws=ie;class P extends Ce{constructor(e){super(e);Object.setPrototypeOf(this,P.prototype)}}class F extends P{name="InvalidRequestException";$fault="client";constructor(e){super({name:"InvalidRequestException",$fault:"client",...e});Object.setPrototypeOf(this,F.prototype)}}class q extends P{name="ResourceNotFoundException";$fault="client";constructor(e){super({name:"ResourceNotFoundException",$fault:"client",...e});Object.setPrototypeOf(this,q.prototype)}}class H extends P{name="TooManyRequestsException";$fault="client";constructor(e){super({name:"TooManyRequestsException",$fault:"client",...e});Object.setPrototypeOf(this,H.prototype)}}class U extends P{name="UnauthorizedException";$fault="client";constructor(e){super({name:"UnauthorizedException",$fault:"client",...e});Object.setPrototypeOf(this,U.prototype)}}var At="AccessTokenType",yt="GetRoleCredentials",Ot="GetRoleCredentialsRequest",Tt="GetRoleCredentialsResponse",Dt="InvalidRequestException",Nt="RoleCredentials",wt="ResourceNotFoundException",kt="SecretAccessKeyType",bt="SessionTokenType",Ft="TooManyRequestsException",$t="UnauthorizedException",qt="accountId",Ht="accessKeyId",Ut="accessToken",Gt="account_id",O="client",T="error",Mt="expiration",zt="http",D="httpError",jt="httpHeader",V="httpQuery",N="message",Lt="roleCredentials",Kt="roleName",Vt="role_name",J="smithy.ts.sdk.synthetic.com.amazonaws.sso",Bt="secretAccessKey",Wt="sessionToken",Qt="x-amz-sso_bearer_token",_="com.amazonaws.sso",X=Q.for(J),Yt=[-3,J,"SSOServiceException",0,[],[]];X.registerError(Yt,P);var C=Q.for(_),Jt=[-3,_,Dt,{[T]:O,[D]:400},[N],[0]];C.registerError(Jt,F);var Xt=[-3,_,wt,{[T]:O,[D]:404},[N],[0]];C.registerError(Xt,q);var Zt=[-3,_,Ft,{[T]:O,[D]:429},[N],[0]];C.registerError(Zt,H);var es=[-3,_,$t,{[T]:O,[D]:401},[N],[0]];C.registerError(es,U);var ts=[X,C],ss=[0,_,At,8,0],os=[0,_,kt,8,0],ns=[0,_,bt,8,0],rs=[3,_,Ot,0,[Kt,qt,Ut],[[0,{[V]:Vt}],[0,{[V]:Gt}],[()=>ss,{[jt]:Qt}]],3],is=[3,_,Tt,0,[Lt],[[()=>as,0]]],as=[3,_,Nt,0,[Ht,Bt,Wt,Mt],[0,[()=>os,0],[()=>ns,0],1]],cs=[9,_,yt,{[zt]:["GET","/federation/credentials",200]},()=>rs,()=>is],us=(e)=>({apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??it,base64Encoder:e?.base64Encoder??rt,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??It,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??mt,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(u)=>u.getIdentityProvider("aws.auth#sigv4"),signer:new tt},{schemeId:"smithy.api#noAuth",identityProvider:(u)=>u.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new fe}],logger:e?.logger??new xe,protocol:e?.protocol??dt,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:ts,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:e?.serviceId??"SSO",sha256:e?.sha256??lt,urlParser:e?.urlParser??Le,utf8Decoder:e?.utf8Decoder??nt,utf8Encoder:e?.utf8Encoder??ot}),ds=(e)=>{Ie(process.version);let u=we(e),p=()=>u().then(Ae),S=us(e);ae(process.version);let h={profile:e?.profile,logger:S.logger};return{...S,...e,runtime:"node",defaultsMode:u,authSchemePreference:e?.authSchemePreference??f(st,h),bodyLengthChecker:e?.bodyLengthChecker??at,defaultUserAgentProvider:e?.defaultUserAgentProvider??ce({serviceId:S.serviceId,clientVersion:Pt.version}),maxAttempts:e?.maxAttempts??f(Ye,e),region:e?.region??f(Fe,{...$e,...h}),requestHandler:ut.create(e?.requestHandler??p),retryMode:e?.retryMode??f({...Qe,default:async()=>(await p()).retryMode||We},e),streamCollector:e?.streamCollector??ct,useDualstackEndpoint:e?.useDualstackEndpoint??f(be,h),useFipsEndpoint:e?.useFipsEndpoint??f(ke,h),userAgentAppId:e?.userAgentAppId??f(ue,h)}},ls=(e)=>{let{httpAuthSchemes:u,httpAuthSchemeProvider:p,credentials:S}=e;return{setHttpAuthScheme(h){let x=u.findIndex((w)=>w.schemeId===h.schemeId);if(x===-1)u.push(h);else u.splice(x,1,h)},httpAuthSchemes(){return u},setHttpAuthSchemeProvider(h){p=h},httpAuthSchemeProvider(){return p},setCredentials(h){S=h},credentials(){return S}}},ps=(e)=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}),hs=(e,u)=>{let p=Object.assign(de(e),ye(e),Ke(e),ls(e));return u.forEach((S)=>S.configure(p)),Object.assign(e,le(p),Oe(p),Ve(p),ps(p))};class G extends Te{config;constructor(...[e]){let u=ds(e||{});super(u);this.initConfig=u;let p=St(u),S=pe(p),h=Je(S),x=qe(h),w=he(x),se=ze(w),oe=_t(se),ne=hs(oe,e?.extensions||[]);this.config=ne,this.middlewareStack.use(Ze(this.config)),this.middlewareStack.use(ge(this.config)),this.middlewareStack.use(Xe(this.config)),this.middlewareStack.use(Be(this.config)),this.middlewareStack.use(me(this.config)),this.middlewareStack.use(_e(this.config)),this.middlewareStack.use(Se(this.config)),this.middlewareStack.use(Ee(this.config,{httpAuthSchemeParametersProvider:pt,identityProviderConfigProvider:async(re)=>new Pe({"aws.auth#sigv4":re.credentials})})),this.middlewareStack.use(ve(this.config))}destroy(){super.destroy()}}var gs=De(ft,"SWBPortalService","SSOClient",je),ms={},_s=(e,u,p,S)=>[];class M extends gs(ms,_s,"GetRoleCredentials",cs){}var Ss={GetRoleCredentialsCommand:M};class Z extends G{}Ne(Ss,Z);var ee=M;var te=G;export{ee as GetRoleCredentialsCommand,te as SSOClient};
|
|
@@ -1,2 +1,2 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
import{i,s,e,r,a,o,n,l,c,t,I,B,g,d}from"./shumai-transcode-app.js";var{awsEndpointFunctions:At,emitWarningIfUnsupportedVersion:Et,createDefaultUserAgentProvider:vt,NODE_APP_ID_CONFIG_OPTIONS:yt,getAwsRegionExtensionConfiguration:It,resolveAwsRegionExtensionConfiguration:Rt,resolveUserAgentConfig:_t,resolveHostHeaderConfig:Ct,getUserAgentPlugin:xt,getHostHeaderPlugin:wt,getLoggerPlugin:Tt,getRecursionDetectionPlugin:Dt,setCredentialFeature:ce,stsRegionDefaultResolver:bt}=t(),{NoAuthSigner:_e,getHttpAuthSchemeEndpointRuleSetPlugin:$t,DefaultIdentityProviderConfig:kt,getHttpSigningPlugin:Ot}=c(),{normalizeProvider:Ce,getSmithyContext:xe,ServiceException:Nt,NoOpLogger:Wt,emitWarningIfUnsupportedVersion:Ht,loadConfigsForDefaultMode:Ut,getDefaultExtensionConfiguration:qt,resolveDefaultRuntimeConfig:Ft,Client:we,makeBuilder:Lt,createAggregatedClient:Kt}=s(),{Command:Mt}=s();var jn=Mt,Gn=we;var{resolveDefaultsModeConfig:jt,loadConfig:k,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:Gt,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:Vt,NODE_REGION_CONFIG_OPTIONS:zt,NODE_REGION_CONFIG_FILE_OPTIONS:Bt,resolveRegionConfig:Qt}=e(),{BinaryDecisionDiagram:Yt,EndpointCache:Xt,decideEndpoint:Jt,customEndpointFunctions:Zt,resolveParams:es,resolveEndpointConfig:ts,getEndpointPlugin:ss}=r(),{parseUrl:ns,getHttpHandlerExtensionConfiguration:os,resolveHttpHandlerRuntimeConfig:rs,getContentLengthPlugin:is}=n(),{DEFAULT_RETRY_MODE:as,NODE_RETRY_MODE_CONFIG_OPTIONS:cs,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:us,resolveRetryConfig:ds,getRetryPlugin:ls}=l(),{TypeRegistry:Te,getSchemaSerdePlugin:ps}=i(),{resolveAwsSdkSigV4Config:gs,resolveAwsSdkSigV4AConfig:hs,AwsSdkSigV4Signer:De,AwsSdkSigV4ASigner:be,NODE_SIGV4A_CONFIG_OPTIONS:ms,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:Ps}=g(),{SignatureV4MultiRegion:$e}=I(),{toUtf8:fs,fromUtf8:Ss,toBase64:As,fromBase64:Es,calculateBodyLength:vs}=a(),{streamCollector:ys,NodeHttpHandler:Is}=d(),{AwsQueryProtocol:Rs}=B(),{Sha256:_s}=o(),j="ref",W=-1,G=!0,fe="isSet",ke="PartitionResult",V="booleanEquals",v="stringEquals",ie="getAttr",Se="us-east-1",Ae="sigv4",Ee="sts",ve="https://sts.{Region}.{PartitionResult#dnsSuffix}",ye={[j]:"Endpoint"},y={[j]:"Region"},ae={[j]:ke},M={},Ie=[y],Re={conditions:[[fe,[ye]],[fe,Ie],["aws.partition",Ie,ke],[V,[{[j]:"UseFIPS"},G]],[V,[{[j]:"UseDualStack"},G]],[v,[y,"aws-global"]],[V,[{[j]:"UseGlobalEndpoint"},G]],[v,[y,"eu-central-1"]],[V,[{fn:ie,argv:[ae,"supportsDualStack"]},G]],[V,[{fn:ie,argv:[ae,"supportsFIPS"]},G]],[v,[y,"ap-south-1"]],[v,[y,"eu-north-1"]],[v,[y,"eu-west-1"]],[v,[y,"eu-west-2"]],[v,[y,"eu-west-3"]],[v,[y,"sa-east-1"]],[v,[y,Se]],[v,[y,"us-east-2"]],[v,[y,"us-west-2"]],[v,[y,"us-west-1"]],[v,[y,"ca-central-1"]],[v,[y,"ap-southeast-1"]],[v,[y,"ap-northeast-1"]],[v,[y,"ap-southeast-2"]],[v,[{fn:ie,argv:[ae,"name"]},"aws-us-gov"]]],results:[[W],["https://sts.amazonaws.com",{authSchemes:[{name:Ae,signingName:Ee,signingRegion:Se}]}],[ve,{authSchemes:[{name:Ae,signingName:Ee,signingRegion:"{Region}"}]}],[W,"Invalid Configuration: FIPS and custom endpoint are not supported"],[W,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[ye,M],["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",M],[W,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://sts.{Region}.amazonaws.com",M],["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",M],[W,"FIPS is enabled but this partition does not support FIPS"],["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",M],[W,"DualStack is enabled but this partition does not support DualStack"],[ve,M],[W,"Invalid Configuration: Missing Region"]]},Cs=2,P=1e8,xs=new Int32Array([-1,1,-1,0,30,3,1,4,P+14,2,5,P+14,3,25,6,4,24,7,5,P+1,8,6,9,P+13,7,P+1,10,10,P+1,11,11,P+1,12,12,P+1,13,13,P+1,14,14,P+1,15,15,P+1,16,16,P+1,17,17,P+1,18,18,P+1,19,19,P+1,20,20,P+1,21,21,P+1,22,22,P+1,23,23,P+1,P+2,8,P+11,P+12,4,28,26,9,27,P+10,24,P+8,P+9,8,29,P+7,9,P+6,P+7,3,P+3,31,4,P+4,P+5]),ws=Yt.from(xs,Cs,Re.conditions,Re.results),Ts=new Xt({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),Oe=(u,p={})=>Ts.get(u,()=>Jt(ws,{endpointParams:u,logger:p.logger}));Zt.aws=At;var Ds=(u)=>async(p,h,S)=>{if(!S)throw Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");let m=await u(p,h,S),E=xe(h)?.commandInstance?.constructor?.getEndpointParameterInstructions;if(!E)throw Error(`getEndpointParameterInstructions() is not defined on '${h.commandName}'`);let f=await es(S,{getEndpointParameterInstructions:E},p);return Object.assign(m,f)},bs=async(u,p,h)=>({operation:xe(p).operation,region:await Ce(u.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),$s=Ds(bs);function Ne(u){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:u.region},propertiesExtractor:(p,h)=>({signingProperties:{config:p,context:h}})}}function ue(u){return{schemeId:"aws.auth#sigv4a",signingProperties:{name:"sts",region:u.region},propertiesExtractor:(p,h)=>({signingProperties:{config:p,context:h}})}}function We(u){return{schemeId:"smithy.api#noAuth"}}var ks=(u,p,h)=>(m)=>{let f=u(m).properties?.authSchemes;if(!f)return p(m);let R=[];for(let w of f){let{name:_,properties:T={},...N}=w,D=_.toLowerCase();if(_!==D)console.warn(`HttpAuthScheme has been normalized with lowercasing: '${_}' to '${D}'`);let x;if(D==="sigv4a"){x="aws.auth#sigv4a";let oe=f.find((re)=>{let Pe=re.name.toLowerCase();return Pe!=="sigv4a"&&Pe.startsWith("sigv4")});if($e.sigv4aDependency()==="none"&&oe)continue}else if(D.startsWith("sigv4"))x="aws.auth#sigv4";else throw Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${D}'`);let K=h[x];if(!K)throw Error(`Could not find HttpAuthOption create function for '${x}'`);let b=K(m);b.schemeId=x,b.signingProperties={...b.signingProperties||{},...N,...T},R.push(b)}return R},Os=(u)=>{let p=[];switch(u.operation){case"AssumeRoleWithWebIdentity":{p.push(We()),p.push(ue(u));break}default:p.push(Ne(u)),p.push(ue(u))}return p},Ns=ks(Oe,Os,{"aws.auth#sigv4":Ne,"aws.auth#sigv4a":ue,"smithy.api#noAuth":We}),Ws=(u)=>{let p=gs(u),h=hs(p);return Object.assign(h,{authSchemePreference:Ce(u.authSchemePreference??[])})},Hs=(u)=>Object.assign(u,{useDualstackEndpoint:u.useDualstackEndpoint??!1,useFipsEndpoint:u.useFipsEndpoint??!1,useGlobalEndpoint:u.useGlobalEndpoint??!1,defaultSigningName:"sts"}),Us={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},qs="3.997.43",Fs={version:qs};class C extends Nt{constructor(u){super(u);Object.setPrototypeOf(this,C.prototype)}}class Q extends C{name="ExpiredTokenException";$fault="client";constructor(u){super({name:"ExpiredTokenException",$fault:"client",...u});Object.setPrototypeOf(this,Q.prototype)}}class Y extends C{name="MalformedPolicyDocumentException";$fault="client";constructor(u){super({name:"MalformedPolicyDocumentException",$fault:"client",...u});Object.setPrototypeOf(this,Y.prototype)}}class X extends C{name="PackedPolicyTooLargeException";$fault="client";constructor(u){super({name:"PackedPolicyTooLargeException",$fault:"client",...u});Object.setPrototypeOf(this,X.prototype)}}class J extends C{name="RegionDisabledException";$fault="client";constructor(u){super({name:"RegionDisabledException",$fault:"client",...u});Object.setPrototypeOf(this,J.prototype)}}class Z extends C{name="IDPRejectedClaimException";$fault="client";constructor(u){super({name:"IDPRejectedClaimException",$fault:"client",...u});Object.setPrototypeOf(this,Z.prototype)}}class ee extends C{name="InvalidIdentityTokenException";$fault="client";constructor(u){super({name:"InvalidIdentityTokenException",$fault:"client",...u});Object.setPrototypeOf(this,ee.prototype)}}class te extends C{name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor(u){super({name:"IDPCommunicationErrorException",$fault:"client",...u});Object.setPrototypeOf(this,te.prototype)}}var Ls="Arn",Ks="AccessKeyId",Ms="AssumeRole",js="AssumedRoleId",Gs="AssumeRoleRequest",Vs="AssumeRoleResponse",de="AssumedRoleUser",zs="AssumeRoleWithWebIdentity",Bs="AssumeRoleWithWebIdentityRequest",Qs="AssumeRoleWithWebIdentityResponse",Ys="Audience",le="Credentials",Xs="ContextAssertion",He="DurationSeconds",Js="Expiration",Zs="ExternalId",en="ExpiredTokenException",tn="IDPCommunicationErrorException",sn="IDPRejectedClaimException",nn="InvalidIdentityTokenException",on="Key",rn="MalformedPolicyDocumentException",Ue="Policy",qe="PolicyArns",an="ProviderArn",cn="ProvidedContexts",un="ProvidedContextsListType",dn="ProvidedContext",ln="PolicyDescriptorType",pn="ProviderId",Fe="PackedPolicySize",gn="PackedPolicyTooLargeException",hn="Provider",Le="RoleArn",mn="RegionDisabledException",Ke="RoleSessionName",Pn="SecretAccessKey",fn="SubjectFromWebIdentityToken",pe="SourceIdentity",Sn="SerialNumber",An="SessionToken",En="Tags",vn="TokenCode",yn="TransitiveTagKeys",In="Tag",Rn="Value",_n="WebIdentityToken",Cn="arn",xn="accessKeySecretType",H="awsQueryError",U="client",wn="clientTokenType",q="error",F="httpError",L="message",Tn="policyDescriptorListType",Me="smithy.ts.sdk.synthetic.com.amazonaws.sts",Dn="tagListType",A="com.amazonaws.sts",je=Te.for(Me),Ge=[-3,Me,"STSServiceException",0,[],[]];je.registerError(Ge,C);var O=Te.for(A),Ve=[-3,A,en,{[H]:["ExpiredTokenException",400],[q]:U,[F]:400},[L],[0]];O.registerError(Ve,Q);var ze=[-3,A,tn,{[H]:["IDPCommunicationError",400],[q]:U,[F]:400},[L],[0]];O.registerError(ze,te);var Be=[-3,A,sn,{[H]:["IDPRejectedClaim",403],[q]:U,[F]:403},[L],[0]];O.registerError(Be,Z);var Qe=[-3,A,nn,{[H]:["InvalidIdentityToken",400],[q]:U,[F]:400},[L],[0]];O.registerError(Qe,ee);var Ye=[-3,A,rn,{[H]:["MalformedPolicyDocument",400],[q]:U,[F]:400},[L],[0]];O.registerError(Ye,Y);var Xe=[-3,A,gn,{[H]:["PackedPolicyTooLarge",400],[q]:U,[F]:400},[L],[0]];O.registerError(Xe,X);var Je=[-3,A,mn,{[H]:["RegionDisabledException",403],[q]:U,[F]:403},[L],[0]];O.registerError(Je,J);var Ze=[je,O],bn=[0,A,xn,8,0],$n=[0,A,wn,8,0],ge=[3,A,de,0,[js,Ls],[0,0],2],et=[3,A,Gs,0,[Le,Ke,qe,Ue,He,En,yn,Zs,Sn,vn,pe,cn],[0,0,()=>at,0,1,()=>On,64,0,0,0,0,()=>kn],2],tt=[3,A,Vs,0,[le,de,Fe,pe],[[()=>he,0],()=>ge,1,0]],st=[3,A,Bs,0,[Le,Ke,_n,pn,qe,Ue,He],[0,0,[()=>$n,0],0,()=>at,0,1],3],nt=[3,A,Qs,0,[le,fn,de,Fe,hn,Ys,pe],[[()=>he,0],0,()=>ge,1,0,0,0]],he=[3,A,le,0,[Ks,Pn,An,Js],[0,[()=>bn,0],0,4],4],ot=[3,A,ln,0,[Cn],[0]],rt=[3,A,dn,0,[an,Xs],[0,0]],it=[3,A,In,0,[on,Rn],[0,0],2],at=[1,A,Tn,0,()=>ot],kn=[1,A,un,0,()=>rt],On=[1,A,Dn,0,()=>it],ct=[9,A,Ms,0,()=>et,()=>tt],ut=[9,A,zs,0,()=>st,()=>nt],Nn=(u)=>({apiVersion:"2011-06-15",base64Decoder:u?.base64Decoder??Es,base64Encoder:u?.base64Encoder??As,disableHostPrefix:u?.disableHostPrefix??!1,endpointProvider:u?.endpointProvider??Oe,extensions:u?.extensions??[],httpAuthSchemeProvider:u?.httpAuthSchemeProvider??Ns,httpAuthSchemes:u?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(p)=>p.getIdentityProvider("aws.auth#sigv4"),signer:new De},{schemeId:"aws.auth#sigv4a",identityProvider:(p)=>p.getIdentityProvider("aws.auth#sigv4a"),signer:new be},{schemeId:"smithy.api#noAuth",identityProvider:(p)=>p.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new _e}],logger:u?.logger??new Wt,protocol:u?.protocol??Rs,protocolSettings:u?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:Ze,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:u?.serviceId??"STS",sha256:u?.sha256??_s,signerConstructor:u?.signerConstructor??$e,urlParser:u?.urlParser??ns,utf8Decoder:u?.utf8Decoder??Ss,utf8Encoder:u?.utf8Encoder??fs}),Wn=(u)=>{Ht(process.version);let p=jt(u),h=()=>p().then(Ut),S=Nn(u);Et(process.version);let m={profile:u?.profile,logger:S.logger};return{...S,...u,runtime:"node",defaultsMode:p,authSchemePreference:u?.authSchemePreference??k(Ps,m),bodyLengthChecker:u?.bodyLengthChecker??vs,defaultUserAgentProvider:u?.defaultUserAgentProvider??vt({serviceId:S.serviceId,clientVersion:Fs.version}),httpAuthSchemes:u?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(E)=>E.getIdentityProvider("aws.auth#sigv4")||(async(f)=>await u.credentialDefaultProvider(f?.__config||{})()),signer:new De},{schemeId:"aws.auth#sigv4a",identityProvider:(E)=>E.getIdentityProvider("aws.auth#sigv4a"),signer:new be},{schemeId:"smithy.api#noAuth",identityProvider:(E)=>E.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new _e}],maxAttempts:u?.maxAttempts??k(us,u),region:u?.region??k(zt,{...Bt,...m}),requestHandler:Is.create(u?.requestHandler??h),retryMode:u?.retryMode??k({...cs,default:async()=>(await h()).retryMode||as},u),sigv4aSigningRegionSet:u?.sigv4aSigningRegionSet??k(ms,m),streamCollector:u?.streamCollector??ys,useDualstackEndpoint:u?.useDualstackEndpoint??k(Vt,m),useFipsEndpoint:u?.useFipsEndpoint??k(Gt,m),userAgentAppId:u?.userAgentAppId??k(yt,m)}},Hn=(u)=>{let{httpAuthSchemes:p,httpAuthSchemeProvider:h,credentials:S}=u;return{setHttpAuthScheme(m){let E=p.findIndex((f)=>f.schemeId===m.schemeId);if(E===-1)p.push(m);else p.splice(E,1,m)},httpAuthSchemes(){return p},setHttpAuthSchemeProvider(m){h=m},httpAuthSchemeProvider(){return h},setCredentials(m){S=m},credentials(){return S}}},Un=(u)=>({httpAuthSchemes:u.httpAuthSchemes(),httpAuthSchemeProvider:u.httpAuthSchemeProvider(),credentials:u.credentials()}),qn=(u,p)=>{let h=Object.assign(It(u),qt(u),os(u),Hn(u));return p.forEach((S)=>S.configure(h)),Object.assign(u,Rt(h),Ft(h),rs(h),Un(h))};class z extends we{config;constructor(...[u]){let p=Wn(u||{});super(p);this.initConfig=p;let h=Hs(p),S=_t(h),m=ds(S),E=Qt(m),f=Ct(E),R=ts(f),w=Ws(R),_=qn(w,u?.extensions||[]);this.config=_,this.middlewareStack.use(ps(this.config)),this.middlewareStack.use(xt(this.config)),this.middlewareStack.use(ls(this.config)),this.middlewareStack.use(is(this.config)),this.middlewareStack.use(wt(this.config)),this.middlewareStack.use(Tt(this.config)),this.middlewareStack.use(Dt(this.config)),this.middlewareStack.use($t(this.config,{httpAuthSchemeParametersProvider:$s,identityProviderConfigProvider:async(T)=>new kt({"aws.auth#sigv4":T.credentials,"aws.auth#sigv4a":T.credentials})})),this.middlewareStack.use(Ot(this.config))}destroy(){super.destroy()}}var dt=Lt(Us,"AWSSecurityTokenServiceV20110615","STSClient",ss),lt={},pt=(u,p,h,S)=>[];class se extends dt(lt,pt,"AssumeRole",ct){}class ne extends dt(lt,pt,"AssumeRoleWithWebIdentity",ut){}var Fn={AssumeRoleCommand:se,AssumeRoleWithWebIdentityCommand:ne};class me extends z{}Kt(Fn,me);var gt=(u)=>{if(typeof u?.Arn==="string"){let p=u.Arn.split(":");if(p.length>4&&p[4]!=="")return p[4]}return},ht=async(u,p,h,S={})=>{let m=typeof u==="function"?await u():u,E=typeof p==="function"?await p():p,f="",R=m??E??(f=await bt(S)());return h?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${m} (credential provider clientConfig)`,`${E} (contextual client)`,`${f} (STS default: AWS_REGION, profile region, or us-east-1)`),R},Ln=(u,p)=>{let h,S;return async(m,E)=>{if(S=m,!h){let{logger:T=u?.parentClientConfig?.logger,profile:N=u?.parentClientConfig?.profile,region:D,requestHandler:x=u?.parentClientConfig?.requestHandler,credentialProviderLogger:K,userAgentAppId:b=u?.parentClientConfig?.userAgentAppId}=u,oe=await ht(D,u?.parentClientConfig?.region,K,{logger:T,profile:N}),re=!mt(x);h=new p({...u,userAgentAppId:b,profile:N,credentialDefaultProvider:()=>async()=>S,region:oe,requestHandler:re?x:void 0,logger:T})}let{Credentials:f,AssumedRoleUser:R}=await h.send(new se(E));if(!f||!f.AccessKeyId||!f.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${E.RoleArn}`);let w=gt(R),_={accessKeyId:f.AccessKeyId,secretAccessKey:f.SecretAccessKey,sessionToken:f.SessionToken,expiration:f.Expiration,...f.CredentialScope&&{credentialScope:f.CredentialScope},...w&&{accountId:w}};return ce(_,"CREDENTIALS_STS_ASSUME_ROLE","i"),_}},Kn=(u,p)=>{let h;return async(S)=>{if(!h){let{logger:w=u?.parentClientConfig?.logger,profile:_=u?.parentClientConfig?.profile,region:T,requestHandler:N=u?.parentClientConfig?.requestHandler,credentialProviderLogger:D,userAgentAppId:x=u?.parentClientConfig?.userAgentAppId}=u,K=await ht(T,u?.parentClientConfig?.region,D,{logger:w,profile:_}),b=!mt(N);h=new p({...u,userAgentAppId:x,profile:_,region:K,requestHandler:b?N:void 0,logger:w})}let{Credentials:m,AssumedRoleUser:E}=await h.send(new ne(S));if(!m||!m.AccessKeyId||!m.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${S.RoleArn}`);let f=gt(E),R={accessKeyId:m.AccessKeyId,secretAccessKey:m.SecretAccessKey,sessionToken:m.SessionToken,expiration:m.Expiration,...m.CredentialScope&&{credentialScope:m.CredentialScope},...f&&{accountId:f}};if(f)ce(R,"RESOLVED_ACCOUNT_ID","T");return ce(R,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),R}},mt=(u)=>u?.metadata?.handlerProtocol==="h2",Pt=(u,p)=>{if(!p)return u;else return class extends u{constructor(S){super(S);for(let m of p)this.middlewareStack.use(m)}}},ft=(u={},p)=>Ln(u,Pt(z,p)),St=(u={},p)=>Kn(u,Pt(z,p)),Mn=(u)=>(p)=>u({roleAssumer:ft(p),roleAssumerWithWebIdentity:St(p),...p});var Vn=ct,zn=se,Bn=et,Qn=tt,Yn=ut,Xn=ne,Jn=st,Zn=nt,eo=ge,to=he,so=Q,no=Ve,oo=te,ro=ze,io=Z,ao=Be,co=ee,uo=Qe,lo=Y,po=Ye,go=X,ho=Xe,mo=ot,Po=rt,fo=J,So=Je,Ao=me,Eo=z,vo=C,yo=Ge,Io=it,Ro=Mn,_o=Ze,Co=ft,xo=St;export{jn as $Command,Gn as __Client,Vn as AssumeRole$,zn as AssumeRoleCommand,Bn as AssumeRoleRequest$,Qn as AssumeRoleResponse$,Yn as AssumeRoleWithWebIdentity$,Xn as AssumeRoleWithWebIdentityCommand,Jn as AssumeRoleWithWebIdentityRequest$,Zn as AssumeRoleWithWebIdentityResponse$,eo as AssumedRoleUser$,to as Credentials$,so as ExpiredTokenException,no as ExpiredTokenException$,oo as IDPCommunicationErrorException,ro as IDPCommunicationErrorException$,io as IDPRejectedClaimException,ao as IDPRejectedClaimException$,co as InvalidIdentityTokenException,uo as InvalidIdentityTokenException$,lo as MalformedPolicyDocumentException,po as MalformedPolicyDocumentException$,go as PackedPolicyTooLargeException,ho as PackedPolicyTooLargeException$,mo as PolicyDescriptorType$,Po as ProvidedContext$,fo as RegionDisabledException,So as RegionDisabledException$,Ao as STS,Eo as STSClient,vo as STSServiceException,yo as STSServiceException$,Io as Tag$,Ro as decorateDefaultCredentialProvider,_o as errorTypeRegistries,Co as getDefaultRoleAssumer,xo as getDefaultRoleAssumerWithWebIdentity};
|
|
2
|
+
import{i,s,A,r,a,o,n,l,c,t,I,B,g,d}from"./shumai-transcode-app.js";var{awsEndpointFunctions:At,emitWarningIfUnsupportedVersion:Et,createDefaultUserAgentProvider:vt,NODE_APP_ID_CONFIG_OPTIONS:yt,getAwsRegionExtensionConfiguration:It,resolveAwsRegionExtensionConfiguration:Rt,resolveUserAgentConfig:_t,resolveHostHeaderConfig:Ct,getUserAgentPlugin:xt,getHostHeaderPlugin:wt,getLoggerPlugin:Tt,getRecursionDetectionPlugin:Dt,setCredentialFeature:ce,stsRegionDefaultResolver:bt}=t(),{NoAuthSigner:_e,getHttpAuthSchemeEndpointRuleSetPlugin:$t,DefaultIdentityProviderConfig:kt,getHttpSigningPlugin:Ot}=c(),{normalizeProvider:Ce,getSmithyContext:xe,ServiceException:Nt,NoOpLogger:Wt,emitWarningIfUnsupportedVersion:Ht,loadConfigsForDefaultMode:Ut,getDefaultExtensionConfiguration:qt,resolveDefaultRuntimeConfig:Ft,Client:we,makeBuilder:Lt,createAggregatedClient:Kt}=s(),{Command:Mt}=s();var jn=Mt,Gn=we;var{resolveDefaultsModeConfig:jt,loadConfig:k,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:Gt,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:Vt,NODE_REGION_CONFIG_OPTIONS:zt,NODE_REGION_CONFIG_FILE_OPTIONS:Bt,resolveRegionConfig:Qt}=A(),{BinaryDecisionDiagram:Yt,EndpointCache:Xt,decideEndpoint:Jt,customEndpointFunctions:Zt,resolveParams:es,resolveEndpointConfig:ts,getEndpointPlugin:ss}=r(),{parseUrl:ns,getHttpHandlerExtensionConfiguration:os,resolveHttpHandlerRuntimeConfig:rs,getContentLengthPlugin:is}=n(),{DEFAULT_RETRY_MODE:as,NODE_RETRY_MODE_CONFIG_OPTIONS:cs,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:us,resolveRetryConfig:ds,getRetryPlugin:ls}=l(),{TypeRegistry:Te,getSchemaSerdePlugin:ps}=i(),{resolveAwsSdkSigV4Config:gs,resolveAwsSdkSigV4AConfig:hs,AwsSdkSigV4Signer:De,AwsSdkSigV4ASigner:be,NODE_SIGV4A_CONFIG_OPTIONS:ms,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:Ps}=g(),{SignatureV4MultiRegion:$e}=I(),{toUtf8:fs,fromUtf8:Ss,toBase64:As,fromBase64:Es,calculateBodyLength:vs}=a(),{streamCollector:ys,NodeHttpHandler:Is}=d(),{AwsQueryProtocol:Rs}=B(),{Sha256:_s}=o(),j="ref",W=-1,G=!0,fe="isSet",ke="PartitionResult",V="booleanEquals",v="stringEquals",ie="getAttr",Se="us-east-1",Ae="sigv4",Ee="sts",ve="https://sts.{Region}.{PartitionResult#dnsSuffix}",ye={[j]:"Endpoint"},y={[j]:"Region"},ae={[j]:ke},M={},Ie=[y],Re={conditions:[[fe,[ye]],[fe,Ie],["aws.partition",Ie,ke],[V,[{[j]:"UseFIPS"},G]],[V,[{[j]:"UseDualStack"},G]],[v,[y,"aws-global"]],[V,[{[j]:"UseGlobalEndpoint"},G]],[v,[y,"eu-central-1"]],[V,[{fn:ie,argv:[ae,"supportsDualStack"]},G]],[V,[{fn:ie,argv:[ae,"supportsFIPS"]},G]],[v,[y,"ap-south-1"]],[v,[y,"eu-north-1"]],[v,[y,"eu-west-1"]],[v,[y,"eu-west-2"]],[v,[y,"eu-west-3"]],[v,[y,"sa-east-1"]],[v,[y,Se]],[v,[y,"us-east-2"]],[v,[y,"us-west-2"]],[v,[y,"us-west-1"]],[v,[y,"ca-central-1"]],[v,[y,"ap-southeast-1"]],[v,[y,"ap-northeast-1"]],[v,[y,"ap-southeast-2"]],[v,[{fn:ie,argv:[ae,"name"]},"aws-us-gov"]]],results:[[W],["https://sts.amazonaws.com",{authSchemes:[{name:Ae,signingName:Ee,signingRegion:Se}]}],[ve,{authSchemes:[{name:Ae,signingName:Ee,signingRegion:"{Region}"}]}],[W,"Invalid Configuration: FIPS and custom endpoint are not supported"],[W,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[ye,M],["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",M],[W,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://sts.{Region}.amazonaws.com",M],["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",M],[W,"FIPS is enabled but this partition does not support FIPS"],["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",M],[W,"DualStack is enabled but this partition does not support DualStack"],[ve,M],[W,"Invalid Configuration: Missing Region"]]},Cs=2,m=1e8,xs=new Int32Array([-1,1,-1,0,30,3,1,4,m+14,2,5,m+14,3,25,6,4,24,7,5,m+1,8,6,9,m+13,7,m+1,10,10,m+1,11,11,m+1,12,12,m+1,13,13,m+1,14,14,m+1,15,15,m+1,16,16,m+1,17,17,m+1,18,18,m+1,19,19,m+1,20,20,m+1,21,21,m+1,22,22,m+1,23,23,m+1,m+2,8,m+11,m+12,4,28,26,9,27,m+10,24,m+8,m+9,8,29,m+7,9,m+6,m+7,3,m+3,31,4,m+4,m+5]),ws=Yt.from(xs,Cs,Re.conditions,Re.results),Ts=new Xt({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),Oe=(e,u={})=>Ts.get(e,()=>Jt(ws,{endpointParams:e,logger:u.logger}));Zt.aws=At;var Ds=(e)=>async(u,p,f)=>{if(!f)throw Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");let h=await e(u,p,f),E=xe(p)?.commandInstance?.constructor?.getEndpointParameterInstructions;if(!E)throw Error(`getEndpointParameterInstructions() is not defined on '${p.commandName}'`);let P=await es(f,{getEndpointParameterInstructions:E},u);return Object.assign(h,P)},bs=async(e,u,p)=>({operation:xe(u).operation,region:await Ce(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),$s=Ds(bs);function Ne(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(u,p)=>({signingProperties:{config:u,context:p}})}}function ue(e){return{schemeId:"aws.auth#sigv4a",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(u,p)=>({signingProperties:{config:u,context:p}})}}function We(e){return{schemeId:"smithy.api#noAuth"}}var ks=(e,u,p)=>(h)=>{let P=e(h).properties?.authSchemes;if(!P)return u(h);let R=[];for(let w of P){let{name:_,properties:T={},...N}=w,D=_.toLowerCase();if(_!==D)console.warn(`HttpAuthScheme has been normalized with lowercasing: '${_}' to '${D}'`);let x;if(D==="sigv4a"){x="aws.auth#sigv4a";let oe=P.find((re)=>{let Pe=re.name.toLowerCase();return Pe!=="sigv4a"&&Pe.startsWith("sigv4")});if($e.sigv4aDependency()==="none"&&oe)continue}else if(D.startsWith("sigv4"))x="aws.auth#sigv4";else throw Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${D}'`);let K=p[x];if(!K)throw Error(`Could not find HttpAuthOption create function for '${x}'`);let b=K(h);b.schemeId=x,b.signingProperties={...b.signingProperties||{},...N,...T},R.push(b)}return R},Os=(e)=>{let u=[];switch(e.operation){case"AssumeRoleWithWebIdentity":{u.push(We()),u.push(ue(e));break}default:u.push(Ne(e)),u.push(ue(e))}return u},Ns=ks(Oe,Os,{"aws.auth#sigv4":Ne,"aws.auth#sigv4a":ue,"smithy.api#noAuth":We}),Ws=(e)=>{let u=gs(e),p=hs(u);return Object.assign(p,{authSchemePreference:Ce(e.authSchemePreference??[])})},Hs=(e)=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,useGlobalEndpoint:e.useGlobalEndpoint??!1,defaultSigningName:"sts"}),Us={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},qs="3.997.43",Fs={version:qs};class C extends Nt{constructor(e){super(e);Object.setPrototypeOf(this,C.prototype)}}class Q extends C{name="ExpiredTokenException";$fault="client";constructor(e){super({name:"ExpiredTokenException",$fault:"client",...e});Object.setPrototypeOf(this,Q.prototype)}}class Y extends C{name="MalformedPolicyDocumentException";$fault="client";constructor(e){super({name:"MalformedPolicyDocumentException",$fault:"client",...e});Object.setPrototypeOf(this,Y.prototype)}}class X extends C{name="PackedPolicyTooLargeException";$fault="client";constructor(e){super({name:"PackedPolicyTooLargeException",$fault:"client",...e});Object.setPrototypeOf(this,X.prototype)}}class J extends C{name="RegionDisabledException";$fault="client";constructor(e){super({name:"RegionDisabledException",$fault:"client",...e});Object.setPrototypeOf(this,J.prototype)}}class Z extends C{name="IDPRejectedClaimException";$fault="client";constructor(e){super({name:"IDPRejectedClaimException",$fault:"client",...e});Object.setPrototypeOf(this,Z.prototype)}}class ee extends C{name="InvalidIdentityTokenException";$fault="client";constructor(e){super({name:"InvalidIdentityTokenException",$fault:"client",...e});Object.setPrototypeOf(this,ee.prototype)}}class te extends C{name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor(e){super({name:"IDPCommunicationErrorException",$fault:"client",...e});Object.setPrototypeOf(this,te.prototype)}}var Ls="Arn",Ks="AccessKeyId",Ms="AssumeRole",js="AssumedRoleId",Gs="AssumeRoleRequest",Vs="AssumeRoleResponse",de="AssumedRoleUser",zs="AssumeRoleWithWebIdentity",Bs="AssumeRoleWithWebIdentityRequest",Qs="AssumeRoleWithWebIdentityResponse",Ys="Audience",le="Credentials",Xs="ContextAssertion",He="DurationSeconds",Js="Expiration",Zs="ExternalId",en="ExpiredTokenException",tn="IDPCommunicationErrorException",sn="IDPRejectedClaimException",nn="InvalidIdentityTokenException",on="Key",rn="MalformedPolicyDocumentException",Ue="Policy",qe="PolicyArns",an="ProviderArn",cn="ProvidedContexts",un="ProvidedContextsListType",dn="ProvidedContext",ln="PolicyDescriptorType",pn="ProviderId",Fe="PackedPolicySize",gn="PackedPolicyTooLargeException",hn="Provider",Le="RoleArn",mn="RegionDisabledException",Ke="RoleSessionName",Pn="SecretAccessKey",fn="SubjectFromWebIdentityToken",pe="SourceIdentity",Sn="SerialNumber",An="SessionToken",En="Tags",vn="TokenCode",yn="TransitiveTagKeys",In="Tag",Rn="Value",_n="WebIdentityToken",Cn="arn",xn="accessKeySecretType",H="awsQueryError",U="client",wn="clientTokenType",q="error",F="httpError",L="message",Tn="policyDescriptorListType",Me="smithy.ts.sdk.synthetic.com.amazonaws.sts",Dn="tagListType",S="com.amazonaws.sts",je=Te.for(Me),Ge=[-3,Me,"STSServiceException",0,[],[]];je.registerError(Ge,C);var O=Te.for(S),Ve=[-3,S,en,{[H]:["ExpiredTokenException",400],[q]:U,[F]:400},[L],[0]];O.registerError(Ve,Q);var ze=[-3,S,tn,{[H]:["IDPCommunicationError",400],[q]:U,[F]:400},[L],[0]];O.registerError(ze,te);var Be=[-3,S,sn,{[H]:["IDPRejectedClaim",403],[q]:U,[F]:403},[L],[0]];O.registerError(Be,Z);var Qe=[-3,S,nn,{[H]:["InvalidIdentityToken",400],[q]:U,[F]:400},[L],[0]];O.registerError(Qe,ee);var Ye=[-3,S,rn,{[H]:["MalformedPolicyDocument",400],[q]:U,[F]:400},[L],[0]];O.registerError(Ye,Y);var Xe=[-3,S,gn,{[H]:["PackedPolicyTooLarge",400],[q]:U,[F]:400},[L],[0]];O.registerError(Xe,X);var Je=[-3,S,mn,{[H]:["RegionDisabledException",403],[q]:U,[F]:403},[L],[0]];O.registerError(Je,J);var Ze=[je,O],bn=[0,S,xn,8,0],$n=[0,S,wn,8,0],ge=[3,S,de,0,[js,Ls],[0,0],2],et=[3,S,Gs,0,[Le,Ke,qe,Ue,He,En,yn,Zs,Sn,vn,pe,cn],[0,0,()=>at,0,1,()=>On,64,0,0,0,0,()=>kn],2],tt=[3,S,Vs,0,[le,de,Fe,pe],[[()=>he,0],()=>ge,1,0]],st=[3,S,Bs,0,[Le,Ke,_n,pn,qe,Ue,He],[0,0,[()=>$n,0],0,()=>at,0,1],3],nt=[3,S,Qs,0,[le,fn,de,Fe,hn,Ys,pe],[[()=>he,0],0,()=>ge,1,0,0,0]],he=[3,S,le,0,[Ks,Pn,An,Js],[0,[()=>bn,0],0,4],4],ot=[3,S,ln,0,[Cn],[0]],rt=[3,S,dn,0,[an,Xs],[0,0]],it=[3,S,In,0,[on,Rn],[0,0],2],at=[1,S,Tn,0,()=>ot],kn=[1,S,un,0,()=>rt],On=[1,S,Dn,0,()=>it],ct=[9,S,Ms,0,()=>et,()=>tt],ut=[9,S,zs,0,()=>st,()=>nt],Nn=(e)=>({apiVersion:"2011-06-15",base64Decoder:e?.base64Decoder??Es,base64Encoder:e?.base64Encoder??As,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Oe,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Ns,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(u)=>u.getIdentityProvider("aws.auth#sigv4"),signer:new De},{schemeId:"aws.auth#sigv4a",identityProvider:(u)=>u.getIdentityProvider("aws.auth#sigv4a"),signer:new be},{schemeId:"smithy.api#noAuth",identityProvider:(u)=>u.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new _e}],logger:e?.logger??new Wt,protocol:e?.protocol??Rs,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:Ze,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:e?.serviceId??"STS",sha256:e?.sha256??_s,signerConstructor:e?.signerConstructor??$e,urlParser:e?.urlParser??ns,utf8Decoder:e?.utf8Decoder??Ss,utf8Encoder:e?.utf8Encoder??fs}),Wn=(e)=>{Ht(process.version);let u=jt(e),p=()=>u().then(Ut),f=Nn(e);Et(process.version);let h={profile:e?.profile,logger:f.logger};return{...f,...e,runtime:"node",defaultsMode:u,authSchemePreference:e?.authSchemePreference??k(Ps,h),bodyLengthChecker:e?.bodyLengthChecker??vs,defaultUserAgentProvider:e?.defaultUserAgentProvider??vt({serviceId:f.serviceId,clientVersion:Fs.version}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(E)=>E.getIdentityProvider("aws.auth#sigv4")||(async(P)=>await e.credentialDefaultProvider(P?.__config||{})()),signer:new De},{schemeId:"aws.auth#sigv4a",identityProvider:(E)=>E.getIdentityProvider("aws.auth#sigv4a"),signer:new be},{schemeId:"smithy.api#noAuth",identityProvider:(E)=>E.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new _e}],maxAttempts:e?.maxAttempts??k(us,e),region:e?.region??k(zt,{...Bt,...h}),requestHandler:Is.create(e?.requestHandler??p),retryMode:e?.retryMode??k({...cs,default:async()=>(await p()).retryMode||as},e),sigv4aSigningRegionSet:e?.sigv4aSigningRegionSet??k(ms,h),streamCollector:e?.streamCollector??ys,useDualstackEndpoint:e?.useDualstackEndpoint??k(Vt,h),useFipsEndpoint:e?.useFipsEndpoint??k(Gt,h),userAgentAppId:e?.userAgentAppId??k(yt,h)}},Hn=(e)=>{let{httpAuthSchemes:u,httpAuthSchemeProvider:p,credentials:f}=e;return{setHttpAuthScheme(h){let E=u.findIndex((P)=>P.schemeId===h.schemeId);if(E===-1)u.push(h);else u.splice(E,1,h)},httpAuthSchemes(){return u},setHttpAuthSchemeProvider(h){p=h},httpAuthSchemeProvider(){return p},setCredentials(h){f=h},credentials(){return f}}},Un=(e)=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}),qn=(e,u)=>{let p=Object.assign(It(e),qt(e),os(e),Hn(e));return u.forEach((f)=>f.configure(p)),Object.assign(e,Rt(p),Ft(p),rs(p),Un(p))};class z extends we{config;constructor(...[e]){let u=Wn(e||{});super(u);this.initConfig=u;let p=Hs(u),f=_t(p),h=ds(f),E=Qt(h),P=Ct(E),R=ts(P),w=Ws(R),_=qn(w,e?.extensions||[]);this.config=_,this.middlewareStack.use(ps(this.config)),this.middlewareStack.use(xt(this.config)),this.middlewareStack.use(ls(this.config)),this.middlewareStack.use(is(this.config)),this.middlewareStack.use(wt(this.config)),this.middlewareStack.use(Tt(this.config)),this.middlewareStack.use(Dt(this.config)),this.middlewareStack.use($t(this.config,{httpAuthSchemeParametersProvider:$s,identityProviderConfigProvider:async(T)=>new kt({"aws.auth#sigv4":T.credentials,"aws.auth#sigv4a":T.credentials})})),this.middlewareStack.use(Ot(this.config))}destroy(){super.destroy()}}var dt=Lt(Us,"AWSSecurityTokenServiceV20110615","STSClient",ss),lt={},pt=(e,u,p,f)=>[];class se extends dt(lt,pt,"AssumeRole",ct){}class ne extends dt(lt,pt,"AssumeRoleWithWebIdentity",ut){}var Fn={AssumeRoleCommand:se,AssumeRoleWithWebIdentityCommand:ne};class me extends z{}Kt(Fn,me);var gt=(e)=>{if(typeof e?.Arn==="string"){let u=e.Arn.split(":");if(u.length>4&&u[4]!=="")return u[4]}return},ht=async(e,u,p,f={})=>{let h=typeof e==="function"?await e():e,E=typeof u==="function"?await u():u,P="",R=h??E??(P=await bt(f)());return p?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${h} (credential provider clientConfig)`,`${E} (contextual client)`,`${P} (STS default: AWS_REGION, profile region, or us-east-1)`),R},Ln=(e,u)=>{let p,f;return async(h,E)=>{if(f=h,!p){let{logger:T=e?.parentClientConfig?.logger,profile:N=e?.parentClientConfig?.profile,region:D,requestHandler:x=e?.parentClientConfig?.requestHandler,credentialProviderLogger:K,userAgentAppId:b=e?.parentClientConfig?.userAgentAppId}=e,oe=await ht(D,e?.parentClientConfig?.region,K,{logger:T,profile:N}),re=!mt(x);p=new u({...e,userAgentAppId:b,profile:N,credentialDefaultProvider:()=>async()=>f,region:oe,requestHandler:re?x:void 0,logger:T})}let{Credentials:P,AssumedRoleUser:R}=await p.send(new se(E));if(!P||!P.AccessKeyId||!P.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${E.RoleArn}`);let w=gt(R),_={accessKeyId:P.AccessKeyId,secretAccessKey:P.SecretAccessKey,sessionToken:P.SessionToken,expiration:P.Expiration,...P.CredentialScope&&{credentialScope:P.CredentialScope},...w&&{accountId:w}};return ce(_,"CREDENTIALS_STS_ASSUME_ROLE","i"),_}},Kn=(e,u)=>{let p;return async(f)=>{if(!p){let{logger:w=e?.parentClientConfig?.logger,profile:_=e?.parentClientConfig?.profile,region:T,requestHandler:N=e?.parentClientConfig?.requestHandler,credentialProviderLogger:D,userAgentAppId:x=e?.parentClientConfig?.userAgentAppId}=e,K=await ht(T,e?.parentClientConfig?.region,D,{logger:w,profile:_}),b=!mt(N);p=new u({...e,userAgentAppId:x,profile:_,region:K,requestHandler:b?N:void 0,logger:w})}let{Credentials:h,AssumedRoleUser:E}=await p.send(new ne(f));if(!h||!h.AccessKeyId||!h.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${f.RoleArn}`);let P=gt(E),R={accessKeyId:h.AccessKeyId,secretAccessKey:h.SecretAccessKey,sessionToken:h.SessionToken,expiration:h.Expiration,...h.CredentialScope&&{credentialScope:h.CredentialScope},...P&&{accountId:P}};if(P)ce(R,"RESOLVED_ACCOUNT_ID","T");return ce(R,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),R}},mt=(e)=>e?.metadata?.handlerProtocol==="h2",Pt=(e,u)=>{if(!u)return e;else return class extends e{constructor(f){super(f);for(let h of u)this.middlewareStack.use(h)}}},ft=(e={},u)=>Ln(e,Pt(z,u)),St=(e={},u)=>Kn(e,Pt(z,u)),Mn=(e)=>(u)=>e({roleAssumer:ft(u),roleAssumerWithWebIdentity:St(u),...u});var Vn=ct,zn=se,Bn=et,Qn=tt,Yn=ut,Xn=ne,Jn=st,Zn=nt,eo=ge,to=he,so=Q,no=Ve,oo=te,ro=ze,io=Z,ao=Be,co=ee,uo=Qe,lo=Y,po=Ye,go=X,ho=Xe,mo=ot,Po=rt,fo=J,So=Je,Ao=me,Eo=z,vo=C,yo=Ge,Io=it,Ro=Mn,_o=Ze,Co=ft,xo=St;export{jn as $Command,Gn as __Client,Vn as AssumeRole$,zn as AssumeRoleCommand,Bn as AssumeRoleRequest$,Qn as AssumeRoleResponse$,Yn as AssumeRoleWithWebIdentity$,Xn as AssumeRoleWithWebIdentityCommand,Jn as AssumeRoleWithWebIdentityRequest$,Zn as AssumeRoleWithWebIdentityResponse$,eo as AssumedRoleUser$,to as Credentials$,so as ExpiredTokenException,no as ExpiredTokenException$,oo as IDPCommunicationErrorException,ro as IDPCommunicationErrorException$,io as IDPRejectedClaimException,ao as IDPRejectedClaimException$,co as InvalidIdentityTokenException,uo as InvalidIdentityTokenException$,lo as MalformedPolicyDocumentException,po as MalformedPolicyDocumentException$,go as PackedPolicyTooLargeException,ho as PackedPolicyTooLargeException$,mo as PolicyDescriptorType$,Po as ProvidedContext$,fo as RegionDisabledException,So as RegionDisabledException$,Ao as STS,Eo as STSClient,vo as STSServiceException,yo as STSServiceException$,Io as Tag$,Ro as decorateDefaultCredentialProvider,_o as errorTypeRegistries,Co as getDefaultRoleAssumer,xo as getDefaultRoleAssumerWithWebIdentity};
|