@shumai-one/shumai-transcode 0.4.9 → 0.5.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,3 +1,3 @@
1
1
  // @bun
2
- import{A,e,t}from"./shumai-transcode-app.js";var S=A(e());var U=(o)=>o&&(typeof o.sso_start_url==="string"||typeof o.sso_account_id==="string"||typeof o.sso_session==="string"||typeof o.sso_region==="string"||typeof o.sso_role_name==="string");var P=A(t());var p=A(e());var j=300000,T="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var q=async(o,s={},n)=>{let{SSOOIDCClient:i}=await import("./chunk-zr1jpkt3.js"),a=(g)=>s.clientConfig?.[g]??s.parentClientConfig?.[g]??n?.[g];return new i(Object.assign({},s.clientConfig??{},{region:o??s.clientConfig?.region,logger:a("logger"),userAgentAppId:a("userAgentAppId")}))};var W=async(o,s,n={},i)=>{let{CreateTokenCommand:a}=await import("./chunk-zr1jpkt3.js");return(await q(s,n,i)).send(new a({clientId:o.clientId,clientSecret:o.clientSecret,refreshToken:o.refreshToken,grantType:"refresh_token"}))};var X=A(e());var R=(o)=>{if(o.expiration&&o.expiration.getTime()<Date.now())throw new X.TokenProviderError(`Token is expired. ${T}`,!1)};var z=A(e());var h=(o,s,n=!1)=>{if(typeof s>"u")throw new z.TokenProviderError(`Value not present for '${o}' in SSO Token${n?". Cannot refresh":""}. ${T}`,!1)};var J=A(e());import{promises as ee}from"fs";var{writeFile:oe}=ee,V=(o,s)=>{let n=J.getSSOTokenFilepath(o),i=JSON.stringify(s,null,2);return oe(n,i)};var Y=new Map,v=(o={})=>async({callerClientConfig:s}={})=>{o.logger?.debug("@aws-sdk/token-providers - fromSso");let n=await p.parseKnownFiles(o),i=p.getProfileName({profile:o.profile??s?.profile}),a=n[i];if(!a)throw new p.TokenProviderError(`Profile '${i}' could not be found in shared credentials file.`,!1);else if(!a.sso_session)throw new p.TokenProviderError(`Profile '${i}' is missing required property 'sso_session'.`);let l=a.sso_session,d=(await p.loadSsoSessionData(o))[l];if(!d)throw new p.TokenProviderError(`Sso session '${l}' could not be found in shared credentials file.`,!1);for(let f of["sso_start_url","sso_region"])if(!d[f])throw new p.TokenProviderError(`Sso session '${l}' is missing required property '${f}'.`,!1);let{sso_start_url:m,sso_region:E}=d,r;try{r=await p.getSSOTokenFromFile(l)}catch(f){throw new p.TokenProviderError(`The SSO session token associated with profile=${i} was not found or is invalid. ${T}`,!1)}h("accessToken",r.accessToken),h("expiresAt",r.expiresAt);let{accessToken:x,expiresAt:C}=r,c={token:x,expiration:new Date(C)};if(c.expiration.getTime()-Date.now()>j)return c;let w=Y.get(l)??0;if(Date.now()-w<30000)return R(c),c;h("clientId",r.clientId,!0),h("clientSecret",r.clientSecret,!0),h("refreshToken",r.refreshToken,!0);try{Y.set(l,Date.now());let f=await W(r,E,o,s);h("accessToken",f.accessToken),h("expiresIn",f.expiresIn);let O=new Date(Date.now()+f.expiresIn*1000);try{await V(l,{...r,accessToken:f.accessToken,expiresAt:O.toISOString(),refreshToken:f.refreshToken})}catch(_){}return{token:f.accessToken,expiration:O}}catch(f){return R(c),c}};var u=A(e()),y=!1,F=async({ssoStartUrl:o,ssoSession:s,ssoAccountId:n,ssoRegion:i,ssoRoleName:a,ssoClient:l,clientConfig:g,parentClientConfig:d,callerClientConfig:m,profile:E,filepath:r,configFilepath:x,ignoreCache:C,logger:c})=>{let w,f="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let k=await v({profile:E,filepath:r,configFilepath:x,ignoreCache:C,clientConfig:g,parentClientConfig:d,logger:c})({callerClientConfig:m});w={accessToken:k.token,expiresAt:new Date(k.expiration).toISOString()}}catch(k){throw new u.CredentialsProviderError(k.message,{tryNextLink:y,logger:c})}else try{w=await u.getSSOTokenFromFile(o)}catch(k){throw new u.CredentialsProviderError("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:y,logger:c})}if(new Date(w.expiresAt).getTime()-Date.now()<=0)throw new u.CredentialsProviderError("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:y,logger:c});let{accessToken:O}=w,{SSOClient:_,GetRoleCredentialsCommand:I}=await import("./chunk-5vp3cwqf.js"),Z=l||new _(Object.assign({},g??{},{logger:g?.logger??m?.logger??d?.logger,region:g?.region??i,userAgentAppId:g?.userAgentAppId??m?.userAgentAppId??d?.userAgentAppId})),D;try{D=await Z.send(new I({accountId:n,roleName:a,accessToken:O}))}catch(k){throw new u.CredentialsProviderError(k,{tryNextLink:y,logger:c})}let{roleCredentials:{accessKeyId:L,secretAccessKey:M,sessionToken:b,expiration:G,credentialScope:K,accountId:H}={}}=D;if(!L||!M||!b||!G)throw new u.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:y,logger:c});let N={accessKeyId:L,secretAccessKey:M,sessionToken:b,expiration:new Date(G),...K&&{credentialScope:K},...H&&{accountId:H}};if(s)P.setCredentialFeature(N,"CREDENTIALS_SSO","s");else P.setCredentialFeature(N,"CREDENTIALS_SSO_LEGACY","u");return N};var B=A(e()),Q=(o,s)=>{let{sso_start_url:n,sso_account_id:i,sso_region:a,sso_role_name:l}=o;if(!n||!i||!a||!l)throw new B.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(o).join(", ")}
2
+ import{e,A,t}from"./shumai-transcode-app.js";var S=e(A());var U=(o)=>o&&(typeof o.sso_start_url==="string"||typeof o.sso_account_id==="string"||typeof o.sso_session==="string"||typeof o.sso_region==="string"||typeof o.sso_role_name==="string");var P=e(t());var p=e(A());var j=300000,T="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var q=async(o,s={},n)=>{let{SSOOIDCClient:i}=await import("./chunk-crsg2q79.js"),a=(g)=>s.clientConfig?.[g]??s.parentClientConfig?.[g]??n?.[g];return new i(Object.assign({},s.clientConfig??{},{region:o??s.clientConfig?.region,logger:a("logger"),userAgentAppId:a("userAgentAppId")}))};var W=async(o,s,n={},i)=>{let{CreateTokenCommand:a}=await import("./chunk-crsg2q79.js");return(await q(s,n,i)).send(new a({clientId:o.clientId,clientSecret:o.clientSecret,refreshToken:o.refreshToken,grantType:"refresh_token"}))};var X=e(A());var R=(o)=>{if(o.expiration&&o.expiration.getTime()<Date.now())throw new X.TokenProviderError(`Token is expired. ${T}`,!1)};var z=e(A());var h=(o,s,n=!1)=>{if(typeof s>"u")throw new z.TokenProviderError(`Value not present for '${o}' in SSO Token${n?". Cannot refresh":""}. ${T}`,!1)};var J=e(A());import{promises as ee}from"fs";var{writeFile:oe}=ee,V=(o,s)=>{let n=J.getSSOTokenFilepath(o),i=JSON.stringify(s,null,2);return oe(n,i)};var Y=new Map,v=(o={})=>async({callerClientConfig:s}={})=>{o.logger?.debug("@aws-sdk/token-providers - fromSso");let n=await p.parseKnownFiles(o),i=p.getProfileName({profile:o.profile??s?.profile}),a=n[i];if(!a)throw new p.TokenProviderError(`Profile '${i}' could not be found in shared credentials file.`,!1);else if(!a.sso_session)throw new p.TokenProviderError(`Profile '${i}' is missing required property 'sso_session'.`);let l=a.sso_session,d=(await p.loadSsoSessionData(o))[l];if(!d)throw new p.TokenProviderError(`Sso session '${l}' could not be found in shared credentials file.`,!1);for(let f of["sso_start_url","sso_region"])if(!d[f])throw new p.TokenProviderError(`Sso session '${l}' is missing required property '${f}'.`,!1);let{sso_start_url:m,sso_region:E}=d,r;try{r=await p.getSSOTokenFromFile(l)}catch(f){throw new p.TokenProviderError(`The SSO session token associated with profile=${i} was not found or is invalid. ${T}`,!1)}h("accessToken",r.accessToken),h("expiresAt",r.expiresAt);let{accessToken:x,expiresAt:C}=r,c={token:x,expiration:new Date(C)};if(c.expiration.getTime()-Date.now()>j)return c;let w=Y.get(l)??0;if(Date.now()-w<30000)return R(c),c;h("clientId",r.clientId,!0),h("clientSecret",r.clientSecret,!0),h("refreshToken",r.refreshToken,!0);try{Y.set(l,Date.now());let f=await W(r,E,o,s);h("accessToken",f.accessToken),h("expiresIn",f.expiresIn);let O=new Date(Date.now()+f.expiresIn*1000);try{await V(l,{...r,accessToken:f.accessToken,expiresAt:O.toISOString(),refreshToken:f.refreshToken})}catch(_){}return{token:f.accessToken,expiration:O}}catch(f){return R(c),c}};var u=e(A()),y=!1,F=async({ssoStartUrl:o,ssoSession:s,ssoAccountId:n,ssoRegion:i,ssoRoleName:a,ssoClient:l,clientConfig:g,parentClientConfig:d,callerClientConfig:m,profile:E,filepath:r,configFilepath:x,ignoreCache:C,logger:c})=>{let w,f="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let k=await v({profile:E,filepath:r,configFilepath:x,ignoreCache:C,clientConfig:g,parentClientConfig:d,logger:c})({callerClientConfig:m});w={accessToken:k.token,expiresAt:new Date(k.expiration).toISOString()}}catch(k){throw new u.CredentialsProviderError(k.message,{tryNextLink:y,logger:c})}else try{w=await u.getSSOTokenFromFile(o)}catch(k){throw new u.CredentialsProviderError("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:y,logger:c})}if(new Date(w.expiresAt).getTime()-Date.now()<=0)throw new u.CredentialsProviderError("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:y,logger:c});let{accessToken:O}=w,{SSOClient:_,GetRoleCredentialsCommand:I}=await import("./chunk-04qpv0fj.js"),Z=l||new _(Object.assign({},g??{},{logger:g?.logger??m?.logger??d?.logger,region:g?.region??i,userAgentAppId:g?.userAgentAppId??m?.userAgentAppId??d?.userAgentAppId})),D;try{D=await Z.send(new I({accountId:n,roleName:a,accessToken:O}))}catch(k){throw new u.CredentialsProviderError(k,{tryNextLink:y,logger:c})}let{roleCredentials:{accessKeyId:L,secretAccessKey:M,sessionToken:b,expiration:G,credentialScope:K,accountId:H}={}}=D;if(!L||!M||!b||!G)throw new u.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:y,logger:c});let N={accessKeyId:L,secretAccessKey:M,sessionToken:b,expiration:new Date(G),...K&&{credentialScope:K},...H&&{accountId:H}};if(s)P.setCredentialFeature(N,"CREDENTIALS_SSO","s");else P.setCredentialFeature(N,"CREDENTIALS_SSO_LEGACY","u");return N};var B=e(A()),Q=(o,s)=>{let{sso_start_url:n,sso_account_id:i,sso_region:a,sso_role_name:l}=o;if(!n||!i||!a||!l)throw new B.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(o).join(", ")}
3
3
  Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:s});return o};var se=(o={})=>async({callerClientConfig:s}={})=>{o.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:n,ssoAccountId:i,ssoRegion:a,ssoRoleName:l,ssoSession:g}=o,{ssoClient:d}=o,m=S.getProfileName({profile:o.profile??s?.profile});if(!n&&!i&&!a&&!l&&!g){let r=(await S.parseKnownFiles(o))[m];if(!r)throw new S.CredentialsProviderError(`Profile ${m} was not found.`,{logger:o.logger});if(!U(r))throw new S.CredentialsProviderError(`Profile ${m} is not configured with SSO credentials.`,{logger:o.logger});if(r?.sso_session){let _=(await S.loadSsoSessionData(o))[r.sso_session],I=` configurations in profile ${m} and sso-session ${r.sso_session}`;if(a&&a!==_.sso_region)throw new S.CredentialsProviderError("Conflicting SSO region"+I,{tryNextLink:!1,logger:o.logger});if(n&&n!==_.sso_start_url)throw new S.CredentialsProviderError("Conflicting SSO start_url"+I,{tryNextLink:!1,logger:o.logger});r.sso_region=_.sso_region,r.sso_start_url=_.sso_start_url}let{sso_start_url:x,sso_account_id:C,sso_region:c,sso_role_name:w,sso_session:f}=Q(r,o.logger);return F({ssoStartUrl:x,ssoSession:f,ssoAccountId:C,ssoRegion:c,ssoRoleName:w,ssoClient:d,clientConfig:o.clientConfig,parentClientConfig:o.parentClientConfig,callerClientConfig:o.callerClientConfig,profile:m,filepath:o.filepath,configFilepath:o.configFilepath,ignoreCache:o.ignoreCache,logger:o.logger})}else if(!n||!i||!a||!l)throw new S.CredentialsProviderError('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:o.logger});else return F({ssoStartUrl:n,ssoSession:g,ssoAccountId:i,ssoRegion:a,ssoRoleName:l,ssoClient:d,clientConfig:o.clientConfig,parentClientConfig:o.parentClientConfig,callerClientConfig:o.callerClientConfig,profile:m,filepath:o.filepath,configFilepath:o.configFilepath,ignoreCache:o.ignoreCache,logger:o.logger})};export{se as fromSSO};
@@ -1,2 +1,2 @@
1
1
  // @bun
2
- import{A,e,t}from"./shumai-transcode-app.js";var _=A(e());var B=A(e());var C=A(t()),f=A(e());var S=A(t()),u=A(e()),v=(r,n,o)=>{let s={EcsContainer:async(a)=>{let{fromHttp:c}=await import("./chunk-k6yxzkm9.js"),{fromContainerMetadata:i}=await import("./chunk-a80yfk5e.js");return o?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>u.chain(c(a??{}),i(a))().then(p)},Ec2InstanceMetadata:async(a)=>{o?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");let{fromInstanceMetadata:c}=await import("./chunk-a80yfk5e.js");return async()=>c(a)().then(p)},Environment:async(a)=>{o?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");let{fromEnv:c}=await import("./chunk-0xhpqhfw.js");return async()=>c(a)().then(p)}};if(r in s)return s[r];else throw new u.CredentialsProviderError(`Unsupported credential source in profile ${n}. Got ${r}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:o})},p=(r)=>S.setCredentialFeature(r,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p");var R=(r,{profile:n="default",logger:o}={})=>Boolean(r)&&typeof r==="object"&&typeof r.role_arn==="string"&&["undefined","string"].indexOf(typeof r.role_session_name)>-1&&["undefined","string"].indexOf(typeof r.external_id)>-1&&["undefined","string"].indexOf(typeof r.mfa_serial)>-1&&(q(r,{profile:n,logger:o})||H(r,{profile:n,logger:o})),q=(r,{profile:n,logger:o})=>{let s=typeof r.source_profile==="string"&&typeof r.credential_source>"u";if(s)o?.debug?.(` ${n} isAssumeRoleWithSourceProfile source_profile=${r.source_profile}`);return s},H=(r,{profile:n,logger:o})=>{let s=typeof r.credential_source==="string"&&typeof r.source_profile>"u";if(s)o?.debug?.(` ${n} isCredentialSourceProfile credential_source=${r.credential_source}`);return s},L=async(r,n,o,s,a={},c)=>{o.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");let i=n[r],{source_profile:l,region:K}=i;if(!o.roleAssumer){let{getDefaultRoleAssumer:d}=await import("./chunk-jw6bzfdf.js");o.roleAssumer=d({...o.clientConfig,credentialProviderLogger:o.logger,parentClientConfig:{...s,...o?.parentClientConfig,region:K??o?.parentClientConfig?.region??s?.region}},o.clientPlugins)}if(l&&l in a)throw new f.CredentialsProviderError(`Detected a cycle attempting to resolve credentials for profile ${f.getProfileName(o)}. Profiles visited: `+Object.keys(a).join(", "),{logger:o.logger});o.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${l?`source_profile=[${l}]`:`profile=[${r}]`}`);let P=l?c(l,n,o,s,{...a,[l]:!0},I(n[l]??{})):(await v(i.credential_source,r,o.logger)(o))();if(I(i))return P.then((d)=>C.setCredentialFeature(d,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));else{let d={RoleArn:i.role_arn,RoleSessionName:i.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:i.external_id,DurationSeconds:parseInt(i.duration_seconds||"3600",10)},{mfa_serial:m}=i;if(m){if(!o.mfaCodeProvider)throw new f.CredentialsProviderError(`Profile ${r} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:o.logger,tryNextLink:!1});d.SerialNumber=m,d.TokenCode=await o.mfaCodeProvider(m)}let G=await P;return o.roleAssumer(G,d).then((U)=>C.setCredentialFeature(U,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},I=(r)=>!r.role_arn&&!!r.credential_source;var O=A(t()),b=(r)=>Boolean(r&&r.login_session),x=async(r,n,o)=>{let{fromLoginCredentials:s}=await import("./chunk-4qrcmkw7.js"),a=await s({...n,profile:r})({callerClientConfig:o});return O.setCredentialFeature(a,"CREDENTIALS_PROFILE_LOGIN","AC")};var k=A(t()),F=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.credential_process==="string",h=async(r,n)=>{let{fromProcess:o}=await import("./chunk-hk0bnv8t.js"),s=await o({...r,profile:n})();return k.setCredentialFeature(s,"CREDENTIALS_PROFILE_PROCESS","v")};var y=A(t()),D=async(r,n,o={},s)=>{let{fromSSO:a}=await import("./chunk-1h2vdfab.js");return a({profile:r,logger:o.logger,parentClientConfig:o.parentClientConfig,clientConfig:o.clientConfig})({callerClientConfig:s}).then((c)=>{if(n.sso_session)return y.setCredentialFeature(c,"CREDENTIALS_PROFILE_SSO","r");else return y.setCredentialFeature(c,"CREDENTIALS_PROFILE_SSO_LEGACY","t")})},T=(r)=>r&&(typeof r.sso_start_url==="string"||typeof r.sso_account_id==="string"||typeof r.sso_session==="string"||typeof r.sso_region==="string"||typeof r.sso_role_name==="string");var W=A(t()),g=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.aws_access_key_id==="string"&&typeof r.aws_secret_access_key==="string"&&["undefined","string"].indexOf(typeof r.aws_session_token)>-1&&["undefined","string"].indexOf(typeof r.aws_account_id)>-1,w=async(r,n)=>{n?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");let o={accessKeyId:r.aws_access_key_id,secretAccessKey:r.aws_secret_access_key,sessionToken:r.aws_session_token,...r.aws_credential_scope&&{credentialScope:r.aws_credential_scope},...r.aws_account_id&&{accountId:r.aws_account_id}};return W.setCredentialFeature(o,"CREDENTIALS_PROFILE","n")};var N=A(t()),j=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.web_identity_token_file==="string"&&typeof r.role_arn==="string"&&["undefined","string"].indexOf(typeof r.role_session_name)>-1,M=async(r,n,o)=>{let{fromTokenFile:s}=await import("./chunk-azergkcd.js"),a=await s({webIdentityTokenFile:r.web_identity_token_file,roleArn:r.role_arn,roleSessionName:r.role_session_name,roleAssumerWithWebIdentity:n.roleAssumerWithWebIdentity,logger:n.logger,parentClientConfig:n.parentClientConfig})({callerClientConfig:o});return N.setCredentialFeature(a,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q")};var E=async(r,n,o,s,a={},c=!1)=>{let i=n[r];if(Object.keys(a).length>0&&g(i))return w(i,o);if(c||R(i,{profile:r,logger:o.logger}))return L(r,n,o,s,a,E);if(g(i))return w(i,o);if(j(i))return M(i,o,s);if(F(i))return h(o,r);if(T(i))return await D(r,i,o,s);if(b(i))return x(r,o,s);throw new B.CredentialsProviderError(`Could not resolve credentials using profile: [${r}] in configuration/credentials file(s).`,{logger:o.logger})};var V=(r={})=>async({callerClientConfig:n}={})=>{r.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");let o=await _.parseKnownFiles(r);return E(_.getProfileName({profile:r.profile??n?.profile}),o,r,n)};export{V as fromIni};
2
+ import{e,A,t}from"./shumai-transcode-app.js";var _=e(A());var B=e(A());var C=e(t()),f=e(A());var S=e(t()),u=e(A()),v=(r,n,o)=>{let s={EcsContainer:async(a)=>{let{fromHttp:c}=await import("./chunk-wpvj8p6e.js"),{fromContainerMetadata:i}=await import("./chunk-f1ymg5dw.js");return o?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>u.chain(c(a??{}),i(a))().then(p)},Ec2InstanceMetadata:async(a)=>{o?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");let{fromInstanceMetadata:c}=await import("./chunk-f1ymg5dw.js");return async()=>c(a)().then(p)},Environment:async(a)=>{o?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");let{fromEnv:c}=await import("./chunk-7s1cd5cc.js");return async()=>c(a)().then(p)}};if(r in s)return s[r];else throw new u.CredentialsProviderError(`Unsupported credential source in profile ${n}. Got ${r}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:o})},p=(r)=>S.setCredentialFeature(r,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p");var R=(r,{profile:n="default",logger:o}={})=>Boolean(r)&&typeof r==="object"&&typeof r.role_arn==="string"&&["undefined","string"].indexOf(typeof r.role_session_name)>-1&&["undefined","string"].indexOf(typeof r.external_id)>-1&&["undefined","string"].indexOf(typeof r.mfa_serial)>-1&&(q(r,{profile:n,logger:o})||H(r,{profile:n,logger:o})),q=(r,{profile:n,logger:o})=>{let s=typeof r.source_profile==="string"&&typeof r.credential_source>"u";if(s)o?.debug?.(` ${n} isAssumeRoleWithSourceProfile source_profile=${r.source_profile}`);return s},H=(r,{profile:n,logger:o})=>{let s=typeof r.credential_source==="string"&&typeof r.source_profile>"u";if(s)o?.debug?.(` ${n} isCredentialSourceProfile credential_source=${r.credential_source}`);return s},L=async(r,n,o,s,a={},c)=>{o.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");let i=n[r],{source_profile:l,region:K}=i;if(!o.roleAssumer){let{getDefaultRoleAssumer:d}=await import("./chunk-9qnnjajd.js");o.roleAssumer=d({...o.clientConfig,credentialProviderLogger:o.logger,parentClientConfig:{...s,...o?.parentClientConfig,region:K??o?.parentClientConfig?.region??s?.region}},o.clientPlugins)}if(l&&l in a)throw new f.CredentialsProviderError(`Detected a cycle attempting to resolve credentials for profile ${f.getProfileName(o)}. Profiles visited: `+Object.keys(a).join(", "),{logger:o.logger});o.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${l?`source_profile=[${l}]`:`profile=[${r}]`}`);let P=l?c(l,n,o,s,{...a,[l]:!0},I(n[l]??{})):(await v(i.credential_source,r,o.logger)(o))();if(I(i))return P.then((d)=>C.setCredentialFeature(d,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));else{let d={RoleArn:i.role_arn,RoleSessionName:i.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:i.external_id,DurationSeconds:parseInt(i.duration_seconds||"3600",10)},{mfa_serial:m}=i;if(m){if(!o.mfaCodeProvider)throw new f.CredentialsProviderError(`Profile ${r} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:o.logger,tryNextLink:!1});d.SerialNumber=m,d.TokenCode=await o.mfaCodeProvider(m)}let G=await P;return o.roleAssumer(G,d).then((U)=>C.setCredentialFeature(U,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},I=(r)=>!r.role_arn&&!!r.credential_source;var O=e(t()),b=(r)=>Boolean(r&&r.login_session),x=async(r,n,o)=>{let{fromLoginCredentials:s}=await import("./chunk-0gb17zaf.js"),a=await s({...n,profile:r})({callerClientConfig:o});return O.setCredentialFeature(a,"CREDENTIALS_PROFILE_LOGIN","AC")};var k=e(t()),F=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.credential_process==="string",h=async(r,n)=>{let{fromProcess:o}=await import("./chunk-b7d2chyn.js"),s=await o({...r,profile:n})();return k.setCredentialFeature(s,"CREDENTIALS_PROFILE_PROCESS","v")};var y=e(t()),D=async(r,n,o={},s)=>{let{fromSSO:a}=await import("./chunk-pnkq5pg6.js");return a({profile:r,logger:o.logger,parentClientConfig:o.parentClientConfig,clientConfig:o.clientConfig})({callerClientConfig:s}).then((c)=>{if(n.sso_session)return y.setCredentialFeature(c,"CREDENTIALS_PROFILE_SSO","r");else return y.setCredentialFeature(c,"CREDENTIALS_PROFILE_SSO_LEGACY","t")})},T=(r)=>r&&(typeof r.sso_start_url==="string"||typeof r.sso_account_id==="string"||typeof r.sso_session==="string"||typeof r.sso_region==="string"||typeof r.sso_role_name==="string");var W=e(t()),g=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.aws_access_key_id==="string"&&typeof r.aws_secret_access_key==="string"&&["undefined","string"].indexOf(typeof r.aws_session_token)>-1&&["undefined","string"].indexOf(typeof r.aws_account_id)>-1,w=async(r,n)=>{n?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");let o={accessKeyId:r.aws_access_key_id,secretAccessKey:r.aws_secret_access_key,sessionToken:r.aws_session_token,...r.aws_credential_scope&&{credentialScope:r.aws_credential_scope},...r.aws_account_id&&{accountId:r.aws_account_id}};return W.setCredentialFeature(o,"CREDENTIALS_PROFILE","n")};var N=e(t()),j=(r)=>Boolean(r)&&typeof r==="object"&&typeof r.web_identity_token_file==="string"&&typeof r.role_arn==="string"&&["undefined","string"].indexOf(typeof r.role_session_name)>-1,M=async(r,n,o)=>{let{fromTokenFile:s}=await import("./chunk-1kfz7hxj.js"),a=await s({webIdentityTokenFile:r.web_identity_token_file,roleArn:r.role_arn,roleSessionName:r.role_session_name,roleAssumerWithWebIdentity:n.roleAssumerWithWebIdentity,logger:n.logger,parentClientConfig:n.parentClientConfig})({callerClientConfig:o});return N.setCredentialFeature(a,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q")};var E=async(r,n,o,s,a={},c=!1)=>{let i=n[r];if(Object.keys(a).length>0&&g(i))return w(i,o);if(c||R(i,{profile:r,logger:o.logger}))return L(r,n,o,s,a,E);if(g(i))return w(i,o);if(j(i))return M(i,o,s);if(F(i))return h(o,r);if(T(i))return await D(r,i,o,s);if(b(i))return x(r,o,s);throw new B.CredentialsProviderError(`Could not resolve credentials using profile: [${r}] in configuration/credentials file(s).`,{logger:o.logger})};var V=(r={})=>async({callerClientConfig:n}={})=>{r.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");let o=await _.parseKnownFiles(r);return E(_.getProfileName({profile:r.profile??n?.profile}),o,r,n)};export{V as fromIni};
@@ -1,2 +1,2 @@
1
1
  // @bun
2
- import{i,s,e,r,a,o,n,l,c,t,B,g,d}from"./shumai-transcode-app.js";var{awsEndpointFunctions:ze,emitWarningIfUnsupportedVersion:Be,createDefaultUserAgentProvider:je,NODE_APP_ID_CONFIG_OPTIONS:Ge,getAwsRegionExtensionConfiguration:Ke,resolveAwsRegionExtensionConfiguration:Xe,resolveUserAgentConfig:Qe,resolveHostHeaderConfig:Ye,getUserAgentPlugin:Je,getHostHeaderPlugin:Ze,getLoggerPlugin:et,getRecursionDetectionPlugin:tt}=t(),{NoAuthSigner:st,getHttpAuthSchemeEndpointRuleSetPlugin:nt,DefaultIdentityProviderConfig:ot,getHttpSigningPlugin:rt}=c(),{normalizeProvider:Ee,getSmithyContext:it,ServiceException:at,NoOpLogger:ct,emitWarningIfUnsupportedVersion:ut,loadConfigsForDefaultMode:pt,getDefaultExtensionConfiguration:dt,resolveDefaultRuntimeConfig:ht,Client:me,makeBuilder:gt,createAggregatedClient:lt}=s(),{Command:Et}=s();var zs=Et,Bs=me;var{resolveDefaultsModeConfig:mt,loadConfig:T,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:At,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:_t,NODE_REGION_CONFIG_OPTIONS:Ot,NODE_REGION_CONFIG_FILE_OPTIONS:St,resolveRegionConfig:It}=e(),{BinaryDecisionDiagram:Ct,EndpointCache:Rt,decideEndpoint:vt,customEndpointFunctions:ft,resolveEndpointConfig:Pt,getEndpointPlugin:Tt}=r(),{parseUrl:kt,getHttpHandlerExtensionConfiguration:xt,resolveHttpHandlerRuntimeConfig:yt,getContentLengthPlugin:Dt}=n(),{DEFAULT_RETRY_MODE:Nt,NODE_RETRY_MODE_CONFIG_OPTIONS:wt,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:$t,resolveRetryConfig:Ut,getRetryPlugin:Ft}=l(),{TypeRegistry:Ae,getSchemaSerdePlugin:bt}=i(),{resolveAwsSdkSigV4Config:qt,AwsSdkSigV4Signer:Mt,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:Ht}=g(),{toUtf8:Vt,fromUtf8:Wt,toBase64:Lt,fromBase64:zt,calculateBodyLength:Bt}=a(),{streamCollector:jt,NodeHttpHandler:Gt}=d(),{AwsRestJsonProtocol:Kt}=B(),{Sha256:Xt}=o(),Qt=async(u,h,E)=>({operation:it(h).operation,region:await Ee(u.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function Yt(u){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"signin",region:u.region},propertiesExtractor:(h,E)=>({signingProperties:{config:h,context:E}})}}function Jt(u){return{schemeId:"smithy.api#noAuth"}}var Zt=(u)=>{let h=[];switch(u.operation){case"CreateOAuth2Token":{h.push(Jt());break}default:h.push(Yt(u))}return h},es=(u)=>{let h=qt(u);return Object.assign(h,{authSchemePreference:Ee(u.authSchemePreference??[])})},ts=(u)=>Object.assign(u,{useDualstackEndpoint:u.useDualstackEndpoint??!1,useFipsEndpoint:u.useFipsEndpoint??!1,defaultSigningName:"signin"}),ss={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},ns="3.997.43",os={version:ns},v="ref",C=-1,ee=!1,k=!0,te="isSet",x="booleanEquals",se="coalesce",G="PartitionResult",I="stringEquals",V="getAttr",ne="https://signin.{Region}.{PartitionResult#dualStackDnsSuffix}",oe={[v]:"Endpoint"},R={fn:V,argv:[{[v]:G},"name"]},_e={[v]:"Region"},re={[v]:G},N={authSchemes:[{name:"sigv4",signingName:"signin",signingRegion:"{Region}"}]},A={},ie=[_e],ae={conditions:[[te,ie],[x,[{fn:se,argv:[{[v]:"IsControlPlane"},ee]},k]],[te,[oe]],["aws.partition",ie,G],[x,[{[v]:"UseFIPS"},k]],[I,[R,"aws"]],[x,[{fn:se,argv:[{[v]:"IsOAuthEndpoint"},ee]},k]],[x,[{[v]:"UseDualStack"},k]],[I,[R,"aws-cn"]],[I,[_e,"us-gov-west-1"]],[I,[R,"aws-us-gov"]],[x,[{fn:V,argv:[re,"supportsFIPS"]},k]],[I,[R,"aws-iso"]],[I,[R,"aws-iso-b"]],[I,[R,"aws-iso-f"]],[I,[R,"aws-iso-e"]],[I,[R,"aws-eusc"]],[x,[{fn:V,argv:[re,"supportsDualStack"]},k]]],results:[[C],["https://signin.{Region}.api.aws",N],["https://signin.{Region}.api.amazonwebservices.com.cn",N],[ne,N],[C,"FIPS endpoints are not supported for OAuth operations. Disable FIPS or use a non-OAuth operation."],["https://{Region}.oauth.signin.aws",N],["https://{Region}.signin.aws.amazon.com",A],["https://{Region}.signin.amazonaws.cn",A],["https://{Region}.signin.amazonaws-us-gov.com",A],["https://{Region}.signin.c2shome.ic.gov",A],["https://{Region}.signin.sc2shome.sgov.gov",A],["https://{Region}.signin.csphome.hci.ic.gov",A],["https://{Region}.signin.csphome.adc-e.uk",A],["https://{Region}.signin.amazonaws-eusc.eu",A],["https://signin-fips.amazonaws-us-gov.com",A],["https://{Region}.signin-fips.amazonaws-us-gov.com",A],["https://{Region}.signin.{PartitionResult#dnsSuffix}",A],[C,"Invalid Configuration: FIPS and custom endpoint are not supported"],[C,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[oe,A],["https://signin-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",A],[C,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://signin-fips.{Region}.{PartitionResult#dnsSuffix}",A],[C,"FIPS is enabled but this partition does not support FIPS"],[ne,A],[C,"DualStack is enabled but this partition does not support DualStack"],["https://signin.{Region}.{PartitionResult#dnsSuffix}",A],[C,"Invalid Configuration: Missing Region"]]},rs=2,p=1e8,is=new Int32Array([-1,1,-1,0,6,3,2,36,4,4,5,p+27,6,p+4,p+27,1,29,7,2,36,8,3,9,31,4,22,10,5,19,11,7,21,12,8,p+7,13,10,p+8,14,12,p+9,15,13,p+10,16,14,p+11,17,15,p+12,18,16,p+13,p+16,6,p+5,20,7,21,p+6,17,p+24,p+25,6,p+4,23,7,27,24,9,p+14,25,10,p+15,26,11,p+22,p+23,11,28,p+21,17,p+20,p+21,2,35,30,3,39,31,4,32,p+27,6,p+4,33,7,p+27,34,9,p+14,p+27,3,39,36,4,38,37,7,p+18,p+19,6,p+4,p+17,5,p+1,40,8,p+2,p+3]),as=Ct.from(is,rs,ae.conditions,ae.results),cs=new Rt({size:50,params:["Endpoint","IsControlPlane","IsOAuthEndpoint","Region","UseDualStack","UseFIPS"]}),us=(u,h={})=>cs.get(u,()=>vt(as,{endpointParams:u,logger:h.logger}));ft.aws=ze;class P extends at{constructor(u){super(u);Object.setPrototypeOf(this,P.prototype)}}class U extends P{name="AccessDeniedException";$fault="client";error;constructor(u){super({name:"AccessDeniedException",$fault:"client",...u});Object.setPrototypeOf(this,U.prototype),this.error=u.error}}class F extends P{name="InternalServerException";$fault="server";error;constructor(u){super({name:"InternalServerException",$fault:"server",...u});Object.setPrototypeOf(this,F.prototype),this.error=u.error}}class b extends P{name="TooManyRequestsError";$fault="client";error;constructor(u){super({name:"TooManyRequestsError",$fault:"client",...u});Object.setPrototypeOf(this,b.prototype),this.error=u.error}}class q extends P{name="ValidationException";$fault="client";error;constructor(u){super({name:"ValidationException",$fault:"client",...u});Object.setPrototypeOf(this,q.prototype),this.error=u.error}}var ps="AccessDeniedException",ds="AccessToken",hs="CreateOAuth2Token",gs="CreateOAuth2TokenRequest",ls="CreateOAuth2TokenRequestBody",Es="CreateOAuth2TokenResponseBody",ms="CreateOAuth2TokenResponse",As="CreateOAuth2TokenWithIAM",_s="CreateOAuth2TokenWithIAMRequest",Os="CreateOAuth2TokenWithIAMResponse",Ss="InternalServerException",Is="OAuthAccessToken",Cs="RefreshToken",Rs="TooManyRequestsError",vs="ValidationException",ce="accessKeyId",W="accessToken",fs="access_token",K="client",ue="clientId",pe="codeVerifier",Ps="code",f="error",L="expiresIn",Ts="expires_in",z="grantType",ks="grant_type",Oe="http",X="httpError",de="idToken",m="jsonName",M="message",xs="resource",w="refreshToken",he="redirectUri",Se="smithy.ts.sdk.synthetic.com.amazonaws.signin",ge="secretAccessKey",le="sessionToken",ys="server",Ds="tokenInput",Ns="tokenOutput",j="tokenType",ws="token_type",_="com.amazonaws.signin",Ie=Ae.for(Se),Ce=[-3,Se,"SigninServiceException",0,[],[]];Ie.registerError(Ce,P);var y=Ae.for(_),Re=[-3,_,ps,{[f]:K},[f,M],[0,0],2];y.registerError(Re,U);var ve=[-3,_,Ss,{[f]:ys,[X]:500},[f,M],[0,0],2];y.registerError(ve,F);var fe=[-3,_,Rs,{[f]:K,[X]:429},[f,M],[0,0],2];y.registerError(fe,b);var Pe=[-3,_,vs,{[f]:K,[X]:400},[f,M],[0,0],2];y.registerError(Pe,q);var Te=[Ie,y],$s=[0,_,Is,8,0],ke=[0,_,Cs,8,0],xe=[3,_,ds,8,[ce,ge,le],[[0,{[m]:ce}],[0,{[m]:ge}],[0,{[m]:le}]],3],ye=[3,_,gs,0,[Ds],[[()=>De,16]],1],De=[3,_,ls,0,[ue,z,Ps,he,pe,w],[[0,{[m]:ue}],[0,{[m]:z}],0,[0,{[m]:he}],[0,{[m]:pe}],[()=>ke,{[m]:w}]],2],Ne=[3,_,ms,0,[Ns],[[()=>we,16]],1],we=[3,_,Es,0,[W,j,L,w,de],[[()=>xe,{[m]:W}],[0,{[m]:j}],[1,{[m]:L}],[()=>ke,{[m]:w}],[0,{[m]:de}]],4],$e=[3,_,_s,0,[z,xs],[[0,{[m]:ks}],0],2],Ue=[3,_,Os,0,[W,j,L],[[()=>$s,{[m]:fs}],[0,{[m]:ws}],[1,{[m]:Ts}]],3],Fe=[9,_,hs,{[Oe]:["POST","/v1/token",200]},()=>ye,()=>Ne],be=[9,_,As,{[Oe]:["POST","/v1/token?x-amz-client-auth-method=iam",200]},()=>$e,()=>Ue],Us=(u)=>({apiVersion:"2023-01-01",base64Decoder:u?.base64Decoder??zt,base64Encoder:u?.base64Encoder??Lt,disableHostPrefix:u?.disableHostPrefix??!1,endpointProvider:u?.endpointProvider??us,extensions:u?.extensions??[],httpAuthSchemeProvider:u?.httpAuthSchemeProvider??Zt,httpAuthSchemes:u?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(h)=>h.getIdentityProvider("aws.auth#sigv4"),signer:new Mt},{schemeId:"smithy.api#noAuth",identityProvider:(h)=>h.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new st}],logger:u?.logger??new ct,protocol:u?.protocol??Kt,protocolSettings:u?.protocolSettings??{defaultNamespace:"com.amazonaws.signin",errorTypeRegistries:Te,version:"2023-01-01",serviceTarget:"Signin"},serviceId:u?.serviceId??"Signin",sha256:u?.sha256??Xt,urlParser:u?.urlParser??kt,utf8Decoder:u?.utf8Decoder??Wt,utf8Encoder:u?.utf8Encoder??Vt}),Fs=(u)=>{ut(process.version);let h=mt(u),E=()=>h().then(pt),S=Us(u);Be(process.version);let O={profile:u?.profile,logger:S.logger};return{...S,...u,runtime:"node",defaultsMode:h,authSchemePreference:u?.authSchemePreference??T(Ht,O),bodyLengthChecker:u?.bodyLengthChecker??Bt,defaultUserAgentProvider:u?.defaultUserAgentProvider??je({serviceId:S.serviceId,clientVersion:os.version}),maxAttempts:u?.maxAttempts??T($t,u),region:u?.region??T(Ot,{...St,...O}),requestHandler:Gt.create(u?.requestHandler??E),retryMode:u?.retryMode??T({...wt,default:async()=>(await E()).retryMode||Nt},u),streamCollector:u?.streamCollector??jt,useDualstackEndpoint:u?.useDualstackEndpoint??T(_t,O),useFipsEndpoint:u?.useFipsEndpoint??T(At,O),userAgentAppId:u?.userAgentAppId??T(Ge,O)}},bs=(u)=>{let{httpAuthSchemes:h,httpAuthSchemeProvider:E,credentials:S}=u;return{setHttpAuthScheme(O){let D=h.findIndex((H)=>H.schemeId===O.schemeId);if(D===-1)h.push(O);else h.splice(D,1,O)},httpAuthSchemes(){return h},setHttpAuthSchemeProvider(O){E=O},httpAuthSchemeProvider(){return E},setCredentials(O){S=O},credentials(){return S}}},qs=(u)=>({httpAuthSchemes:u.httpAuthSchemes(),httpAuthSchemeProvider:u.httpAuthSchemeProvider(),credentials:u.credentials()}),Ms=(u,h)=>{let E=Object.assign(Ke(u),dt(u),xt(u),bs(u));return h.forEach((S)=>S.configure(E)),Object.assign(u,Xe(E),ht(E),yt(E),qs(E))};class Q extends me{config;constructor(...[u]){let h=Fs(u||{});super(h);this.initConfig=h;let E=ts(h),S=Qe(E),O=Ut(S),D=It(O),H=Ye(D),He=Pt(H),Ve=es(He),We=Ms(Ve,u?.extensions||[]);this.config=We,this.middlewareStack.use(bt(this.config)),this.middlewareStack.use(Je(this.config)),this.middlewareStack.use(Ft(this.config)),this.middlewareStack.use(Dt(this.config)),this.middlewareStack.use(Ze(this.config)),this.middlewareStack.use(et(this.config)),this.middlewareStack.use(tt(this.config)),this.middlewareStack.use(nt(this.config,{httpAuthSchemeParametersProvider:Qt,identityProviderConfigProvider:async(Le)=>new ot({"aws.auth#sigv4":Le.credentials})})),this.middlewareStack.use(rt(this.config))}destroy(){super.destroy()}}var qe=gt(ss,"Signin","SigninClient",Tt),Hs={IsControlPlane:{type:"staticContextParams",value:!1}},Vs={IsOAuthEndpoint:{type:"staticContextParams",value:!0}},Me=(u,h,E,S)=>[];class Y extends qe(Hs,Me,"CreateOAuth2Token",Fe){}class J extends qe(Vs,Me,"CreateOAuth2TokenWithIAM",be){}var Ws={CreateOAuth2TokenCommand:Y,CreateOAuth2TokenWithIAMCommand:J};class Z extends Q{}lt(Ws,Z);var Ls={AUTHCODE_EXPIRED:"AUTHCODE_EXPIRED",CONFLICT:"CONFLICT",INSUFFICIENT_PERMISSIONS:"INSUFFICIENT_PERMISSIONS",INVALID_REQUEST:"INVALID_REQUEST",RESOURCE_NOT_FOUND:"RESOURCE_NOT_FOUND",SERVER_ERROR:"server_error",SERVICE_QUOTA_EXCEEDED:"SERVICE_QUOTA_EXCEEDED",TOKEN_EXPIRED:"TOKEN_EXPIRED",USER_CREDENTIALS_CHANGED:"USER_CREDENTIALS_CHANGED"};var js=U,Gs=Re,Ks=xe,Xs=Fe,Qs=Y,Ys=ye,Js=De,Zs=Ne,en=we,tn=be,sn=J,nn=$e,on=Ue,rn=F,an=ve,cn=Ls,un=Z,pn=Q,dn=P,hn=Ce,gn=b,ln=fe,En=q,mn=Pe,An=Te;export{zs as $Command,Bs as __Client,js as AccessDeniedException,Gs as AccessDeniedException$,Ks as AccessToken$,Xs as CreateOAuth2Token$,Qs as CreateOAuth2TokenCommand,Ys as CreateOAuth2TokenRequest$,Js as CreateOAuth2TokenRequestBody$,Zs as CreateOAuth2TokenResponse$,en as CreateOAuth2TokenResponseBody$,tn as CreateOAuth2TokenWithIAM$,sn as CreateOAuth2TokenWithIAMCommand,nn as CreateOAuth2TokenWithIAMRequest$,on as CreateOAuth2TokenWithIAMResponse$,rn as InternalServerException,an as InternalServerException$,cn as OAuth2ErrorCode,un as Signin,pn as SigninClient,dn as SigninServiceException,hn as SigninServiceException$,gn as TooManyRequestsError,ln as TooManyRequestsError$,En as ValidationException,mn as ValidationException$,An as errorTypeRegistries};
2
+ import{i,s,A,r,a,o,n,l,c,t,B,g,d}from"./shumai-transcode-app.js";var{awsEndpointFunctions:ze,emitWarningIfUnsupportedVersion:Be,createDefaultUserAgentProvider:je,NODE_APP_ID_CONFIG_OPTIONS:Ge,getAwsRegionExtensionConfiguration:Ke,resolveAwsRegionExtensionConfiguration:Xe,resolveUserAgentConfig:Qe,resolveHostHeaderConfig:Ye,getUserAgentPlugin:Je,getHostHeaderPlugin:Ze,getLoggerPlugin:et,getRecursionDetectionPlugin:tt}=t(),{NoAuthSigner:st,getHttpAuthSchemeEndpointRuleSetPlugin:nt,DefaultIdentityProviderConfig:ot,getHttpSigningPlugin:rt}=c(),{normalizeProvider:Ee,getSmithyContext:it,ServiceException:at,NoOpLogger:ct,emitWarningIfUnsupportedVersion:ut,loadConfigsForDefaultMode:pt,getDefaultExtensionConfiguration:dt,resolveDefaultRuntimeConfig:ht,Client:me,makeBuilder:gt,createAggregatedClient:lt}=s(),{Command:Et}=s();var zs=Et,Bs=me;var{resolveDefaultsModeConfig:mt,loadConfig:T,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:At,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:_t,NODE_REGION_CONFIG_OPTIONS:Ot,NODE_REGION_CONFIG_FILE_OPTIONS:St,resolveRegionConfig:It}=A(),{BinaryDecisionDiagram:Ct,EndpointCache:Rt,decideEndpoint:vt,customEndpointFunctions:ft,resolveEndpointConfig:Pt,getEndpointPlugin:Tt}=r(),{parseUrl:kt,getHttpHandlerExtensionConfiguration:xt,resolveHttpHandlerRuntimeConfig:yt,getContentLengthPlugin:Dt}=n(),{DEFAULT_RETRY_MODE:Nt,NODE_RETRY_MODE_CONFIG_OPTIONS:wt,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:$t,resolveRetryConfig:Ut,getRetryPlugin:Ft}=l(),{TypeRegistry:Ae,getSchemaSerdePlugin:bt}=i(),{resolveAwsSdkSigV4Config:qt,AwsSdkSigV4Signer:Mt,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:Ht}=g(),{toUtf8:Vt,fromUtf8:Wt,toBase64:Lt,fromBase64:zt,calculateBodyLength:Bt}=a(),{streamCollector:jt,NodeHttpHandler:Gt}=d(),{AwsRestJsonProtocol:Kt}=B(),{Sha256:Xt}=o(),Qt=async(e,p,h)=>({operation:it(p).operation,region:await Ee(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function Yt(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"signin",region:e.region},propertiesExtractor:(p,h)=>({signingProperties:{config:p,context:h}})}}function Jt(e){return{schemeId:"smithy.api#noAuth"}}var Zt=(e)=>{let p=[];switch(e.operation){case"CreateOAuth2Token":{p.push(Jt());break}default:p.push(Yt(e))}return p},es=(e)=>{let p=qt(e);return Object.assign(p,{authSchemePreference:Ee(e.authSchemePreference??[])})},ts=(e)=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"signin"}),ss={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},ns="3.997.43",os={version:ns},v="ref",C=-1,ee=!1,k=!0,te="isSet",x="booleanEquals",se="coalesce",G="PartitionResult",I="stringEquals",V="getAttr",ne="https://signin.{Region}.{PartitionResult#dualStackDnsSuffix}",oe={[v]:"Endpoint"},R={fn:V,argv:[{[v]:G},"name"]},_e={[v]:"Region"},re={[v]:G},N={authSchemes:[{name:"sigv4",signingName:"signin",signingRegion:"{Region}"}]},m={},ie=[_e],ae={conditions:[[te,ie],[x,[{fn:se,argv:[{[v]:"IsControlPlane"},ee]},k]],[te,[oe]],["aws.partition",ie,G],[x,[{[v]:"UseFIPS"},k]],[I,[R,"aws"]],[x,[{fn:se,argv:[{[v]:"IsOAuthEndpoint"},ee]},k]],[x,[{[v]:"UseDualStack"},k]],[I,[R,"aws-cn"]],[I,[_e,"us-gov-west-1"]],[I,[R,"aws-us-gov"]],[x,[{fn:V,argv:[re,"supportsFIPS"]},k]],[I,[R,"aws-iso"]],[I,[R,"aws-iso-b"]],[I,[R,"aws-iso-f"]],[I,[R,"aws-iso-e"]],[I,[R,"aws-eusc"]],[x,[{fn:V,argv:[re,"supportsDualStack"]},k]]],results:[[C],["https://signin.{Region}.api.aws",N],["https://signin.{Region}.api.amazonwebservices.com.cn",N],[ne,N],[C,"FIPS endpoints are not supported for OAuth operations. Disable FIPS or use a non-OAuth operation."],["https://{Region}.oauth.signin.aws",N],["https://{Region}.signin.aws.amazon.com",m],["https://{Region}.signin.amazonaws.cn",m],["https://{Region}.signin.amazonaws-us-gov.com",m],["https://{Region}.signin.c2shome.ic.gov",m],["https://{Region}.signin.sc2shome.sgov.gov",m],["https://{Region}.signin.csphome.hci.ic.gov",m],["https://{Region}.signin.csphome.adc-e.uk",m],["https://{Region}.signin.amazonaws-eusc.eu",m],["https://signin-fips.amazonaws-us-gov.com",m],["https://{Region}.signin-fips.amazonaws-us-gov.com",m],["https://{Region}.signin.{PartitionResult#dnsSuffix}",m],[C,"Invalid Configuration: FIPS and custom endpoint are not supported"],[C,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[oe,m],["https://signin-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",m],[C,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://signin-fips.{Region}.{PartitionResult#dnsSuffix}",m],[C,"FIPS is enabled but this partition does not support FIPS"],[ne,m],[C,"DualStack is enabled but this partition does not support DualStack"],["https://signin.{Region}.{PartitionResult#dnsSuffix}",m],[C,"Invalid Configuration: Missing Region"]]},rs=2,u=1e8,is=new Int32Array([-1,1,-1,0,6,3,2,36,4,4,5,u+27,6,u+4,u+27,1,29,7,2,36,8,3,9,31,4,22,10,5,19,11,7,21,12,8,u+7,13,10,u+8,14,12,u+9,15,13,u+10,16,14,u+11,17,15,u+12,18,16,u+13,u+16,6,u+5,20,7,21,u+6,17,u+24,u+25,6,u+4,23,7,27,24,9,u+14,25,10,u+15,26,11,u+22,u+23,11,28,u+21,17,u+20,u+21,2,35,30,3,39,31,4,32,u+27,6,u+4,33,7,u+27,34,9,u+14,u+27,3,39,36,4,38,37,7,u+18,u+19,6,u+4,u+17,5,u+1,40,8,u+2,u+3]),as=Ct.from(is,rs,ae.conditions,ae.results),cs=new Rt({size:50,params:["Endpoint","IsControlPlane","IsOAuthEndpoint","Region","UseDualStack","UseFIPS"]}),us=(e,p={})=>cs.get(e,()=>vt(as,{endpointParams:e,logger:p.logger}));ft.aws=ze;class P extends at{constructor(e){super(e);Object.setPrototypeOf(this,P.prototype)}}class U extends P{name="AccessDeniedException";$fault="client";error;constructor(e){super({name:"AccessDeniedException",$fault:"client",...e});Object.setPrototypeOf(this,U.prototype),this.error=e.error}}class F extends P{name="InternalServerException";$fault="server";error;constructor(e){super({name:"InternalServerException",$fault:"server",...e});Object.setPrototypeOf(this,F.prototype),this.error=e.error}}class b extends P{name="TooManyRequestsError";$fault="client";error;constructor(e){super({name:"TooManyRequestsError",$fault:"client",...e});Object.setPrototypeOf(this,b.prototype),this.error=e.error}}class q extends P{name="ValidationException";$fault="client";error;constructor(e){super({name:"ValidationException",$fault:"client",...e});Object.setPrototypeOf(this,q.prototype),this.error=e.error}}var ps="AccessDeniedException",ds="AccessToken",hs="CreateOAuth2Token",gs="CreateOAuth2TokenRequest",ls="CreateOAuth2TokenRequestBody",Es="CreateOAuth2TokenResponseBody",ms="CreateOAuth2TokenResponse",As="CreateOAuth2TokenWithIAM",_s="CreateOAuth2TokenWithIAMRequest",Os="CreateOAuth2TokenWithIAMResponse",Ss="InternalServerException",Is="OAuthAccessToken",Cs="RefreshToken",Rs="TooManyRequestsError",vs="ValidationException",ce="accessKeyId",W="accessToken",fs="access_token",K="client",ue="clientId",pe="codeVerifier",Ps="code",f="error",L="expiresIn",Ts="expires_in",z="grantType",ks="grant_type",Oe="http",X="httpError",de="idToken",E="jsonName",M="message",xs="resource",w="refreshToken",he="redirectUri",Se="smithy.ts.sdk.synthetic.com.amazonaws.signin",ge="secretAccessKey",le="sessionToken",ys="server",Ds="tokenInput",Ns="tokenOutput",j="tokenType",ws="token_type",_="com.amazonaws.signin",Ie=Ae.for(Se),Ce=[-3,Se,"SigninServiceException",0,[],[]];Ie.registerError(Ce,P);var y=Ae.for(_),Re=[-3,_,ps,{[f]:K},[f,M],[0,0],2];y.registerError(Re,U);var ve=[-3,_,Ss,{[f]:ys,[X]:500},[f,M],[0,0],2];y.registerError(ve,F);var fe=[-3,_,Rs,{[f]:K,[X]:429},[f,M],[0,0],2];y.registerError(fe,b);var Pe=[-3,_,vs,{[f]:K,[X]:400},[f,M],[0,0],2];y.registerError(Pe,q);var Te=[Ie,y],$s=[0,_,Is,8,0],ke=[0,_,Cs,8,0],xe=[3,_,ds,8,[ce,ge,le],[[0,{[E]:ce}],[0,{[E]:ge}],[0,{[E]:le}]],3],ye=[3,_,gs,0,[Ds],[[()=>De,16]],1],De=[3,_,ls,0,[ue,z,Ps,he,pe,w],[[0,{[E]:ue}],[0,{[E]:z}],0,[0,{[E]:he}],[0,{[E]:pe}],[()=>ke,{[E]:w}]],2],Ne=[3,_,ms,0,[Ns],[[()=>we,16]],1],we=[3,_,Es,0,[W,j,L,w,de],[[()=>xe,{[E]:W}],[0,{[E]:j}],[1,{[E]:L}],[()=>ke,{[E]:w}],[0,{[E]:de}]],4],$e=[3,_,_s,0,[z,xs],[[0,{[E]:ks}],0],2],Ue=[3,_,Os,0,[W,j,L],[[()=>$s,{[E]:fs}],[0,{[E]:ws}],[1,{[E]:Ts}]],3],Fe=[9,_,hs,{[Oe]:["POST","/v1/token",200]},()=>ye,()=>Ne],be=[9,_,As,{[Oe]:["POST","/v1/token?x-amz-client-auth-method=iam",200]},()=>$e,()=>Ue],Us=(e)=>({apiVersion:"2023-01-01",base64Decoder:e?.base64Decoder??zt,base64Encoder:e?.base64Encoder??Lt,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??us,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Zt,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(p)=>p.getIdentityProvider("aws.auth#sigv4"),signer:new Mt},{schemeId:"smithy.api#noAuth",identityProvider:(p)=>p.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new st}],logger:e?.logger??new ct,protocol:e?.protocol??Kt,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.signin",errorTypeRegistries:Te,version:"2023-01-01",serviceTarget:"Signin"},serviceId:e?.serviceId??"Signin",sha256:e?.sha256??Xt,urlParser:e?.urlParser??kt,utf8Decoder:e?.utf8Decoder??Wt,utf8Encoder:e?.utf8Encoder??Vt}),Fs=(e)=>{ut(process.version);let p=mt(e),h=()=>p().then(pt),S=Us(e);Be(process.version);let O={profile:e?.profile,logger:S.logger};return{...S,...e,runtime:"node",defaultsMode:p,authSchemePreference:e?.authSchemePreference??T(Ht,O),bodyLengthChecker:e?.bodyLengthChecker??Bt,defaultUserAgentProvider:e?.defaultUserAgentProvider??je({serviceId:S.serviceId,clientVersion:os.version}),maxAttempts:e?.maxAttempts??T($t,e),region:e?.region??T(Ot,{...St,...O}),requestHandler:Gt.create(e?.requestHandler??h),retryMode:e?.retryMode??T({...wt,default:async()=>(await h()).retryMode||Nt},e),streamCollector:e?.streamCollector??jt,useDualstackEndpoint:e?.useDualstackEndpoint??T(_t,O),useFipsEndpoint:e?.useFipsEndpoint??T(At,O),userAgentAppId:e?.userAgentAppId??T(Ge,O)}},bs=(e)=>{let{httpAuthSchemes:p,httpAuthSchemeProvider:h,credentials:S}=e;return{setHttpAuthScheme(O){let D=p.findIndex((H)=>H.schemeId===O.schemeId);if(D===-1)p.push(O);else p.splice(D,1,O)},httpAuthSchemes(){return p},setHttpAuthSchemeProvider(O){h=O},httpAuthSchemeProvider(){return h},setCredentials(O){S=O},credentials(){return S}}},qs=(e)=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}),Ms=(e,p)=>{let h=Object.assign(Ke(e),dt(e),xt(e),bs(e));return p.forEach((S)=>S.configure(h)),Object.assign(e,Xe(h),ht(h),yt(h),qs(h))};class Q extends me{config;constructor(...[e]){let p=Fs(e||{});super(p);this.initConfig=p;let h=ts(p),S=Qe(h),O=Ut(S),D=It(O),H=Ye(D),He=Pt(H),Ve=es(He),We=Ms(Ve,e?.extensions||[]);this.config=We,this.middlewareStack.use(bt(this.config)),this.middlewareStack.use(Je(this.config)),this.middlewareStack.use(Ft(this.config)),this.middlewareStack.use(Dt(this.config)),this.middlewareStack.use(Ze(this.config)),this.middlewareStack.use(et(this.config)),this.middlewareStack.use(tt(this.config)),this.middlewareStack.use(nt(this.config,{httpAuthSchemeParametersProvider:Qt,identityProviderConfigProvider:async(Le)=>new ot({"aws.auth#sigv4":Le.credentials})})),this.middlewareStack.use(rt(this.config))}destroy(){super.destroy()}}var qe=gt(ss,"Signin","SigninClient",Tt),Hs={IsControlPlane:{type:"staticContextParams",value:!1}},Vs={IsOAuthEndpoint:{type:"staticContextParams",value:!0}},Me=(e,p,h,S)=>[];class Y extends qe(Hs,Me,"CreateOAuth2Token",Fe){}class J extends qe(Vs,Me,"CreateOAuth2TokenWithIAM",be){}var Ws={CreateOAuth2TokenCommand:Y,CreateOAuth2TokenWithIAMCommand:J};class Z extends Q{}lt(Ws,Z);var Ls={AUTHCODE_EXPIRED:"AUTHCODE_EXPIRED",CONFLICT:"CONFLICT",INSUFFICIENT_PERMISSIONS:"INSUFFICIENT_PERMISSIONS",INVALID_REQUEST:"INVALID_REQUEST",RESOURCE_NOT_FOUND:"RESOURCE_NOT_FOUND",SERVER_ERROR:"server_error",SERVICE_QUOTA_EXCEEDED:"SERVICE_QUOTA_EXCEEDED",TOKEN_EXPIRED:"TOKEN_EXPIRED",USER_CREDENTIALS_CHANGED:"USER_CREDENTIALS_CHANGED"};var js=U,Gs=Re,Ks=xe,Xs=Fe,Qs=Y,Ys=ye,Js=De,Zs=Ne,en=we,tn=be,sn=J,nn=$e,on=Ue,rn=F,an=ve,cn=Ls,un=Z,pn=Q,dn=P,hn=Ce,gn=b,ln=fe,En=q,mn=Pe,An=Te;export{zs as $Command,Bs as __Client,js as AccessDeniedException,Gs as AccessDeniedException$,Ks as AccessToken$,Xs as CreateOAuth2Token$,Qs as CreateOAuth2TokenCommand,Ys as CreateOAuth2TokenRequest$,Js as CreateOAuth2TokenRequestBody$,Zs as CreateOAuth2TokenResponse$,en as CreateOAuth2TokenResponseBody$,tn as CreateOAuth2TokenWithIAM$,sn as CreateOAuth2TokenWithIAMCommand,nn as CreateOAuth2TokenWithIAMRequest$,on as CreateOAuth2TokenWithIAMResponse$,rn as InternalServerException,an as InternalServerException$,cn as OAuth2ErrorCode,un as Signin,pn as SigninClient,dn as SigninServiceException,hn as SigninServiceException$,gn as TooManyRequestsError,ln as TooManyRequestsError$,En as ValidationException,mn as ValidationException$,An as errorTypeRegistries};
@@ -1,7 +1,7 @@
1
1
  // @bun
2
- import{A,e,a,n,t,d}from"./shumai-transcode-app.js";var y=A(t()),l=A(e()),v=A(d());import F from"fs/promises";var I=A(e());var H="169.254.170.2",K="169.254.170.23",P="[fd00:ec2::23]",u=(r,i)=>{if(r.protocol==="https:")return;if(r.hostname===H||r.hostname===K||r.hostname===P)return;if(r.hostname.includes("[")){if(r.hostname==="[::1]"||r.hostname==="[0000:0000:0000:0000:0000:0000:0000:0001]")return}else{if(r.hostname==="localhost")return;let c=r.hostname.split("."),s=(o)=>{let m=parseInt(o,10);return 0<=m&&m<=255};if(c[0]==="127"&&s(c[1])&&s(c[2])&&s(c[3])&&c.length===4)return}throw new I.CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
2
+ import{e,A,a,n,t,d}from"./shumai-transcode-app.js";var y=e(t()),l=e(A()),v=e(d());import F from"fs/promises";var I=e(A());var H="169.254.170.2",K="169.254.170.23",P="[fd00:ec2::23]",u=(r,i)=>{if(r.protocol==="https:")return;if(r.hostname===H||r.hostname===K||r.hostname===P)return;if(r.hostname.includes("[")){if(r.hostname==="[::1]"||r.hostname==="[0000:0000:0000:0000:0000:0000:0000:0001]")return}else{if(r.hostname==="localhost")return;let c=r.hostname.split("."),s=(o)=>{let m=parseInt(o,10);return 0<=m&&m<=255};if(c[0]==="127"&&s(c[1])&&s(c[2])&&s(c[3])&&c.length===4)return}throw new I.CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
3
3
  - loopback CIDR 127.0.0.0/8 or [::1/128]
4
4
  - ECS container host 169.254.170.2
5
- - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:i})};var h=A(e()),E=A(n()),N=A(a()),w=A(a());function R(r){return new E.HttpRequest({protocol:r.protocol,hostname:r.hostname,port:Number(r.port),path:r.pathname,query:Array.from(r.searchParams.entries()).reduce((i,[c,s])=>(i[c]=s,i),{}),fragment:r.hash})}async function g(r,i){let s=await w.sdkStreamMixin(r.body).transformToString();if(r.statusCode===200){let o=JSON.parse(s);if(typeof o.AccessKeyId!=="string"||typeof o.SecretAccessKey!=="string"||typeof o.Token!=="string"||typeof o.Expiration!=="string")throw new h.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:i});return{accessKeyId:o.AccessKeyId,secretAccessKey:o.SecretAccessKey,sessionToken:o.Token,expiration:N.parseRfc3339DateTime(o.Expiration)}}if(r.statusCode>=400&&r.statusCode<500){let o={};try{o=JSON.parse(s)}catch(m){}throw Object.assign(new h.CredentialsProviderError(`Server responded with status: ${r.statusCode}`,{logger:i}),{Code:o.Code,Message:o.Message})}throw new h.CredentialsProviderError(`Server responded with status: ${r.statusCode}`,{logger:i})}var S=(r,i,c)=>async()=>{for(let s=0;s<i;++s)try{return await r()}catch(o){await new Promise((m)=>setTimeout(m,c))}return await r()};var x="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",D="http://169.254.170.2",W="AWS_CONTAINER_CREDENTIALS_FULL_URI",b="AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",q="AWS_CONTAINER_AUTHORIZATION_TOKEN",z=(r={})=>{r.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");let i,c=r.awsContainerCredentialsRelativeUri??process.env[x],s=r.awsContainerCredentialsFullUri??process.env[W],o=r.awsContainerAuthorizationToken??process.env[q],m=r.awsContainerAuthorizationTokenFile??process.env[b],T=r.logger?.constructor?.name==="NoOpLogger"||!r.logger?.warn?console.warn:r.logger.warn.bind(r.logger);if(c&&s)T("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),T("awsContainerCredentialsRelativeUri will take precedence.");if(o&&m)T("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),T("awsContainerAuthorizationTokenFile will take precedence.");if(c)i=`${D}${c}`;else if(s)i=s;else throw new l.CredentialsProviderError(`No HTTP credential provider host provided.
5
+ - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:i})};var h=e(A()),E=e(n()),N=e(a()),w=e(a());function R(r){return new E.HttpRequest({protocol:r.protocol,hostname:r.hostname,port:Number(r.port),path:r.pathname,query:Array.from(r.searchParams.entries()).reduce((i,[c,s])=>(i[c]=s,i),{}),fragment:r.hash})}async function g(r,i){let s=await w.sdkStreamMixin(r.body).transformToString();if(r.statusCode===200){let o=JSON.parse(s);if(typeof o.AccessKeyId!=="string"||typeof o.SecretAccessKey!=="string"||typeof o.Token!=="string"||typeof o.Expiration!=="string")throw new h.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:i});return{accessKeyId:o.AccessKeyId,secretAccessKey:o.SecretAccessKey,sessionToken:o.Token,expiration:N.parseRfc3339DateTime(o.Expiration)}}if(r.statusCode>=400&&r.statusCode<500){let o={};try{o=JSON.parse(s)}catch(m){}throw Object.assign(new h.CredentialsProviderError(`Server responded with status: ${r.statusCode}`,{logger:i}),{Code:o.Code,Message:o.Message})}throw new h.CredentialsProviderError(`Server responded with status: ${r.statusCode}`,{logger:i})}var S=(r,i,c)=>async()=>{for(let s=0;s<i;++s)try{return await r()}catch(o){await new Promise((m)=>setTimeout(m,c))}return await r()};var x="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",D="http://169.254.170.2",W="AWS_CONTAINER_CREDENTIALS_FULL_URI",b="AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",q="AWS_CONTAINER_AUTHORIZATION_TOKEN",z=(r={})=>{r.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");let i,c=r.awsContainerCredentialsRelativeUri??process.env[x],s=r.awsContainerCredentialsFullUri??process.env[W],o=r.awsContainerAuthorizationToken??process.env[q],m=r.awsContainerAuthorizationTokenFile??process.env[b],T=r.logger?.constructor?.name==="NoOpLogger"||!r.logger?.warn?console.warn:r.logger.warn.bind(r.logger);if(c&&s)T("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),T("awsContainerCredentialsRelativeUri will take precedence.");if(o&&m)T("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),T("awsContainerAuthorizationTokenFile will take precedence.");if(c)i=`${D}${c}`;else if(s)i=s;else throw new l.CredentialsProviderError(`No HTTP credential provider host provided.
6
6
  Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:r.logger});let _=new URL(i);u(_,r.logger);let f=v.NodeHttpHandler.create({connectionTimeout:r.timeout??1000}),L=r.timeout??1000,U=S(async()=>{let C=R(_);if(m)C.headers.Authorization=O((await F.readFile(m)).toString());else if(o)C.headers.Authorization=O(o);try{let p=await f.handle(C,{requestTimeout:L});return g(p.response).then((k)=>y.setCredentialFeature(k,"CREDENTIALS_HTTP","z"))}catch(p){throw new l.CredentialsProviderError(String(p),{logger:r.logger})}},r.maxRetries??3,r.timeout??1000);return async()=>{try{return await U()}finally{f.destroy?.()}}},O=(r)=>{if(r.includes(`\r
7
7
  `))throw new l.CredentialsProviderError("Authorization token contains invalid \\r\\n sequence.");return r};export{z as fromHttp};