@shumai-one/shumai 0.6.1 → 0.6.2

package/bin/{chunk-r9gp9yqw.js → chunk-hzkjgcre.js}

@@ -1,2 +1,2 @@
 // @bun
-import{Sa}from"./chunk-hzv1mhr5.js";import{Ls,Qo}from"./chunk-n412a1hp.js";import{Ko}from"./chunk-hc0xbmtt.js";import{Wo,vo,Ot}from"./chunk-k9q4nn8b.js";import{wn,sr,Ge,nn,er,xo,Ht}from"./chunk-6mrgtn78.js";var{awsEndpointFunctions:it,emitWarningIfUnsupportedVersion:at,createDefaultUserAgentProvider:ct,NODE_APP_ID_CONFIG_OPTIONS:ut,getAwsRegionExtensionConfiguration:dt,resolveAwsRegionExtensionConfiguration:lt,resolveUserAgentConfig:pt,resolveHostHeaderConfig:gt,getUserAgentPlugin:ht,getHostHeaderPlugin:mt,getLoggerPlugin:Pt,getRecursionDetectionPlugin:ft,setCredentialFeature:B,stsRegionDefaultResolver:St}=Ot(),{NoAuthSigner:le,getHttpAuthSchemeEndpointRuleSetPlugin:At,DefaultIdentityProviderConfig:Et,getHttpSigningPlugin:vt}=vo(),{normalizeProvider:pe,getSmithyContext:ge,ServiceException:yt,NoOpLogger:It,emitWarningIfUnsupportedVersion:Rt,loadConfigsForDefaultMode:_t,getDefaultExtensionConfiguration:Ct,resolveDefaultRuntimeConfig:xt,Client:he,makeBuilder:wt,createAggregatedClient:Tt}=sr(),{Command:Dt}=sr();var Wn=Dt,Hn=he;var{resolveDefaultsModeConfig:bt,loadConfig:A,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:$t,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:kt,NODE_REGION_CONFIG_OPTIONS:Nt,NODE_REGION_CONFIG_FILE_OPTIONS:Wt,resolveRegionConfig:Ut}=Ge(),{BinaryDecisionDiagram:qt,EndpointCache:Ft,decideEndpoint:Lt,customEndpointFunctions:Kt,resolveParams:Mt,resolveEndpointConfig:jt,getEndpointPlugin:Gt}=nn(),{parseUrl:Vt,getHttpHandlerExtensionConfiguration:zt,resolveHttpHandlerRuntimeConfig:Bt,getContentLengthPlugin:Qt}=Ht(),{DEFAULT_RETRY_MODE:Yt,NODE_RETRY_MODE_CONFIG_OPTIONS:Xt,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:Jt,resolveRetryConfig:Zt,getRetryPlugin:es}=Wo(),{TypeRegistry:me,getSchemaSerdePlugin:ts}=wn(),{resolveAwsSdkSigV4Config:ss,resolveAwsSdkSigV4AConfig:ns,AwsSdkSigV4Signer:Pe,AwsSdkSigV4ASigner:fe,NODE_SIGV4A_CONFIG_OPTIONS:os,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:rs}=Qo(),{SignatureV4MultiRegion:Se}=Sa(),{toUtf8:is,fromUtf8:as,toBase64:cs,fromBase64:us,calculateBodyLength:ds}=er(),{streamCollector:ls,NodeHttpHandler:ps}=Ko(),{AwsQueryProtocol:gs}=Ls(),{Sha256:hs}=xo(),D="ref",y=-1,b=!0,ne="isSet",Ae="PartitionResult",k="booleanEquals",u="stringEquals",V="getAttr",oe="us-east-1",re="sigv4",ie="sts",ae="https://sts.{Region}.{PartitionResult#dnsSuffix}",ce={[D]:"Endpoint"},d={[D]:"Region"},z={[D]:Ae},T={},ue=[d],de={conditions:[[ne,[ce]],[ne,ue],["aws.partition",ue,Ae],[k,[{[D]:"UseFIPS"},b]],[k,[{[D]:"UseDualStack"},b]],[u,[d,"aws-global"]],[k,[{[D]:"UseGlobalEndpoint"},b]],[u,[d,"eu-central-1"]],[k,[{fn:V,argv:[z,"supportsDualStack"]},b]],[k,[{fn:V,argv:[z,"supportsFIPS"]},b]],[u,[d,"ap-south-1"]],[u,[d,"eu-north-1"]],[u,[d,"eu-west-1"]],[u,[d,"eu-west-2"]],[u,[d,"eu-west-3"]],[u,[d,"sa-east-1"]],[u,[d,oe]],[u,[d,"us-east-2"]],[u,[d,"us-west-2"]],[u,[d,"us-west-1"]],[u,[d,"ca-central-1"]],[u,[d,"ap-southeast-1"]],[u,[d,"ap-northeast-1"]],[u,[d,"ap-southeast-2"]],[u,[{fn:V,argv:[z,"name"]},"aws-us-gov"]]],results:[[y],["https://sts.amazonaws.com",{authSchemes:[{name:re,signingName:ie,signingRegion:oe}]}],[ae,{authSchemes:[{name:re,signingName:ie,signingRegion:"{Region}"}]}],[y,"Invalid Configuration: FIPS and custom endpoint are not supported"],[y,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[ce,T],["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",T],[y,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://sts.{Region}.amazonaws.com",T],["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",T],[y,"FIPS is enabled but this partition does not support FIPS"],["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",T],[y,"DualStack is enabled but this partition does not support DualStack"],[ae,T],[y,"Invalid Configuration: Missing Region"]]},ms=2,o=1e8,Ps=new Int32Array([-1,1,-1,0,30,3,1,4,o+14,2,5,o+14,3,25,6,4,24,7,5,o+1,8,6,9,o+13,7,o+1,10,10,o+1,11,11,o+1,12,12,o+1,13,13,o+1,14,14,o+1,15,15,o+1,16,16,o+1,17,17,o+1,18,18,o+1,19,19,o+1,20,20,o+1,21,21,o+1,22,22,o+1,23,23,o+1,o+2,8,o+11,o+12,4,28,26,9,27,o+10,24,o+8,o+9,8,29,o+7,9,o+6,o+7,3,o+3,31,4,o+4,o+5]),fs=qt.from(Ps,ms,de.conditions,de.results),Ss=new Ft({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),Ee=(e,t={})=>Ss.get(e,()=>Lt(fs,{endpointParams:e,logger:t.logger}));Kt.aws=it;var As=(e)=>async(t,s,i)=>{if(!i)throw Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");let n=await e(t,s,i),c=ge(s)?.commandInstance?.constructor?.getEndpointParameterInstructions;if(!c)throw Error(`getEndpointParameterInstructions() is not defined on '${s.commandName}'`);let r=await Mt(i,{getEndpointParameterInstructions:c},t);return Object.assign(n,r)},Es=async(e,t,s)=>({operation:ge(t).operation,region:await pe(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),vs=As(Es);function ve(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,s)=>({signingProperties:{config:t,context:s}})}}function Q(e){return{schemeId:"aws.auth#sigv4a",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,s)=>({signingProperties:{config:t,context:s}})}}function ye(e){return{schemeId:"smithy.api#noAuth"}}var ys=(e,t,s)=>(n)=>{let r=e(n).properties?.authSchemes;if(!r)return t(n);let l=[];for(let m of r){let{name:p,properties:P={},...v}=m,f=p.toLowerCase();if(p!==f)console.warn(`HttpAuthScheme has been normalized with lowercasing: '${p}' to '${f}'`);let h;if(f==="sigv4a"){h="aws.auth#sigv4a";let j=r.find((G)=>{let se=G.name.toLowerCase();return se!=="sigv4a"&&se.startsWith("sigv4")});if(Se.sigv4aDependency()==="none"&&j)continue}else if(f.startsWith("sigv4"))h="aws.auth#sigv4";else throw Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${f}'`);let w=s[h];if(!w)throw Error(`Could not find HttpAuthOption create function for '${h}'`);let S=w(n);S.schemeId=h,S.signingProperties={...S.signingProperties||{},...v,...P},l.push(S)}return l},Is=(e)=>{let t=[];switch(e.operation){case"AssumeRoleWithWebIdentity":{t.push(ye()),t.push(Q(e));break}default:t.push(ve(e)),t.push(Q(e))}return t},Rs=ys(Ee,Is,{"aws.auth#sigv4":ve,"aws.auth#sigv4a":Q,"smithy.api#noAuth":ye}),_s=(e)=>{let t=ss(e),s=ns(t);return Object.assign(s,{authSchemePreference:pe(e.authSchemePreference??[])})},Cs=(e)=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,useGlobalEndpoint:e.useGlobalEndpoint??!1,defaultSigningName:"sts"}),xs={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},ws="3.997.43",Ts={version:ws};class g extends yt{constructor(e){super(e);Object.setPrototypeOf(this,g.prototype)}}class N extends g{name="ExpiredTokenException";$fault="client";constructor(e){super({name:"ExpiredTokenException",$fault:"client",...e});Object.setPrototypeOf(this,N.prototype)}}class W extends g{name="MalformedPolicyDocumentException";$fault="client";constructor(e){super({name:"MalformedPolicyDocumentException",$fault:"client",...e});Object.setPrototypeOf(this,W.prototype)}}class H extends g{name="PackedPolicyTooLargeException";$fault="client";constructor(e){super({name:"PackedPolicyTooLargeException",$fault:"client",...e});Object.setPrototypeOf(this,H.prototype)}}class U extends g{name="RegionDisabledException";$fault="client";constructor(e){super({name:"RegionDisabledException",$fault:"client",...e});Object.setPrototypeOf(this,U.prototype)}}class q extends g{name="IDPRejectedClaimException";$fault="client";constructor(e){super({name:"IDPRejectedClaimException",$fault:"client",...e});Object.setPrototypeOf(this,q.prototype)}}class F extends g{name="InvalidIdentityTokenException";$fault="client";constructor(e){super({name:"InvalidIdentityTokenException",$fault:"client",...e});Object.setPrototypeOf(this,F.prototype)}}class L extends g{name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor(e){super({name:"IDPCommunicationErrorException",$fault:"client",...e});Object.setPrototypeOf(this,L.prototype)}}var Ds="Arn",bs="AccessKeyId",$s="AssumeRole",ks="AssumedRoleId",Os="AssumeRoleRequest",Ns="AssumeRoleResponse",Y="AssumedRoleUser",Ws="AssumeRoleWithWebIdentity",Hs="AssumeRoleWithWebIdentityRequest",Us="AssumeRoleWithWebIdentityResponse",qs="Audience",X="Credentials",Fs="ContextAssertion",Ie="DurationSeconds",Ks="Expiration",Ms="ExternalId",js="ExpiredTokenException",Gs="IDPCommunicationErrorException",Vs="IDPRejectedClaimException",zs="InvalidIdentityTokenException",Bs="Key",Qs="MalformedPolicyDocumentException",Re="Policy",_e="PolicyArns",Ys="ProviderArn",Xs="ProvidedContexts",Js="ProvidedContextsListType",Zs="ProvidedContext",en="PolicyDescriptorType",tn="ProviderId",Ce="PackedPolicySize",sn="PackedPolicyTooLargeException",on="Provider",xe="RoleArn",rn="RegionDisabledException",we="RoleSessionName",an="SecretAccessKey",cn="SubjectFromWebIdentityToken",J="SourceIdentity",un="SerialNumber",dn="SessionToken",ln="Tags",pn="TokenCode",gn="TransitiveTagKeys",hn="Tag",mn="Value",Pn="WebIdentityToken",fn="arn",Sn="accessKeySecretType",I="awsQueryError",R="client",An="clientTokenType",_="error",C="httpError",x="message",En="policyDescriptorListType",Te="smithy.ts.sdk.synthetic.com.amazonaws.sts",vn="tagListType",a="com.amazonaws.sts",De=me.for(Te),be=[-3,Te,"STSServiceException",0,[],[]];De.registerError(be,g);var E=me.for(a),$e=[-3,a,js,{[I]:["ExpiredTokenException",400],[_]:R,[C]:400},[x],[0]];E.registerError($e,N);var ke=[-3,a,Gs,{[I]:["IDPCommunicationError",400],[_]:R,[C]:400},[x],[0]];E.registerError(ke,L);var Oe=[-3,a,Vs,{[I]:["IDPRejectedClaim",403],[_]:R,[C]:403},[x],[0]];E.registerError(Oe,q);var Ne=[-3,a,zs,{[I]:["InvalidIdentityToken",400],[_]:R,[C]:400},[x],[0]];E.registerError(Ne,F);var We=[-3,a,Qs,{[I]:["MalformedPolicyDocument",400],[_]:R,[C]:400},[x],[0]];E.registerError(We,W);var He=[-3,a,sn,{[I]:["PackedPolicyTooLarge",400],[_]:R,[C]:400},[x],[0]];E.registerError(He,H);var Ue=[-3,a,rn,{[I]:["RegionDisabledException",403],[_]:R,[C]:403},[x],[0]];E.registerError(Ue,U);var qe=[De,E],yn=[0,a,Sn,8,0],In=[0,a,An,8,0],Z=[3,a,Y,0,[ks,Ds],[0,0],2],Fe=[3,a,Os,0,[xe,we,_e,Re,Ie,ln,gn,Ms,un,pn,J,Xs],[0,0,()=>Be,0,1,()=>_n,64,0,0,0,0,()=>Rn],2],Le=[3,a,Ns,0,[X,Y,Ce,J],[[()=>ee,0],()=>Z,1,0]],Ke=[3,a,Hs,0,[xe,we,Pn,tn,_e,Re,Ie],[0,0,[()=>In,0],0,()=>Be,0,1],3],Me=[3,a,Us,0,[X,cn,Y,Ce,on,qs,J],[[()=>ee,0],0,()=>Z,1,0,0,0]],ee=[3,a,X,0,[bs,an,dn,Ks],[0,[()=>yn,0],0,4],4],je=[3,a,en,0,[fn],[0]],Ve=[3,a,Zs,0,[Ys,Fs],[0,0]],ze=[3,a,hn,0,[Bs,mn],[0,0],2],Be=[1,a,En,0,()=>je],Rn=[1,a,Js,0,()=>Ve],_n=[1,a,vn,0,()=>ze],Qe=[9,a,$s,0,()=>Fe,()=>Le],Ye=[9,a,Ws,0,()=>Ke,()=>Me],Cn=(e)=>({apiVersion:"2011-06-15",base64Decoder:e?.base64Decoder??us,base64Encoder:e?.base64Encoder??cs,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Ee,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Rs,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4"),signer:new Pe},{schemeId:"aws.auth#sigv4a",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4a"),signer:new fe},{schemeId:"smithy.api#noAuth",identityProvider:(t)=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new le}],logger:e?.logger??new It,protocol:e?.protocol??gs,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:qe,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:e?.serviceId??"STS",sha256:e?.sha256??hs,signerConstructor:e?.signerConstructor??Se,urlParser:e?.urlParser??Vt,utf8Decoder:e?.utf8Decoder??as,utf8Encoder:e?.utf8Encoder??is}),xn=(e)=>{Rt(process.version);let t=bt(e),s=()=>t().then(_t),i=Cn(e);at(process.version);let n={profile:e?.profile,logger:i.logger};return{...i,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??A(rs,n),bodyLengthChecker:e?.bodyLengthChecker??ds,defaultUserAgentProvider:e?.defaultUserAgentProvider??ct({serviceId:i.serviceId,clientVersion:Ts.version}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(c)=>c.getIdentityProvider("aws.auth#sigv4")||(async(r)=>await e.credentialDefaultProvider(r?.__config||{})()),signer:new Pe},{schemeId:"aws.auth#sigv4a",identityProvider:(c)=>c.getIdentityProvider("aws.auth#sigv4a"),signer:new fe},{schemeId:"smithy.api#noAuth",identityProvider:(c)=>c.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new le}],maxAttempts:e?.maxAttempts??A(Jt,e),region:e?.region??A(Nt,{...Wt,...n}),requestHandler:ps.create(e?.requestHandler??s),retryMode:e?.retryMode??A({...Xt,default:async()=>(await s()).retryMode||Yt},e),sigv4aSigningRegionSet:e?.sigv4aSigningRegionSet??A(os,n),streamCollector:e?.streamCollector??ls,useDualstackEndpoint:e?.useDualstackEndpoint??A(kt,n),useFipsEndpoint:e?.useFipsEndpoint??A($t,n),userAgentAppId:e?.userAgentAppId??A(ut,n)}},Tn=(e)=>{let{httpAuthSchemes:t,httpAuthSchemeProvider:s,credentials:i}=e;return{setHttpAuthScheme(n){let c=t.findIndex((r)=>r.schemeId===n.schemeId);if(c===-1)t.push(n);else t.splice(c,1,n)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(n){s=n},httpAuthSchemeProvider(){return s},setCredentials(n){i=n},credentials(){return i}}},Dn=(e)=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}),bn=(e,t)=>{let s=Object.assign(dt(e),Ct(e),zt(e),Tn(e));return t.forEach((i)=>i.configure(s)),Object.assign(e,lt(s),xt(s),Bt(s),Dn(s))};class O extends he{config;constructor(...[e]){let t=xn(e||{});super(t);this.initConfig=t;let s=Cs(t),i=pt(s),n=Zt(i),c=Ut(n),r=gt(c),l=jt(r),m=_s(l),p=bn(m,e?.extensions||[]);this.config=p,this.middlewareStack.use(ts(this.config)),this.middlewareStack.use(ht(this.config)),this.middlewareStack.use(es(this.config)),this.middlewareStack.use(Qt(this.config)),this.middlewareStack.use(mt(this.config)),this.middlewareStack.use(Pt(this.config)),this.middlewareStack.use(ft(this.config)),this.middlewareStack.use(At(this.config,{httpAuthSchemeParametersProvider:vs,identityProviderConfigProvider:async(P)=>new Et({"aws.auth#sigv4":P.credentials,"aws.auth#sigv4a":P.credentials})})),this.middlewareStack.use(vt(this.config))}destroy(){super.destroy()}}var Xe=wt(xs,"AWSSecurityTokenServiceV20110615","STSClient",Gt),Je={},Ze=(e,t,s,i)=>[];class K extends Xe(Je,Ze,"AssumeRole",Qe){}class M extends Xe(Je,Ze,"AssumeRoleWithWebIdentity",Ye){}var $n={AssumeRoleCommand:K,AssumeRoleWithWebIdentityCommand:M};class te extends O{}Tt($n,te);var et=(e)=>{if(typeof e?.Arn==="string"){let t=e.Arn.split(":");if(t.length>4&&t[4]!=="")return t[4]}return},tt=async(e,t,s,i={})=>{let n=typeof e==="function"?await e():e,c=typeof t==="function"?await t():t,r="",l=n??c??(r=await St(i)());return s?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${n} (credential provider clientConfig)`,`${c} (contextual client)`,`${r} (STS default: AWS_REGION, profile region, or us-east-1)`),l},kn=(e,t)=>{let s,i;return async(n,c)=>{if(i=n,!s){let{logger:P=e?.parentClientConfig?.logger,profile:v=e?.parentClientConfig?.profile,region:f,requestHandler:h=e?.parentClientConfig?.requestHandler,credentialProviderLogger:w,userAgentAppId:S=e?.parentClientConfig?.userAgentAppId}=e,j=await tt(f,e?.parentClientConfig?.region,w,{logger:P,profile:v}),G=!st(h);s=new t({...e,userAgentAppId:S,profile:v,credentialDefaultProvider:()=>async()=>i,region:j,requestHandler:G?h:void 0,logger:P})}let{Credentials:r,AssumedRoleUser:l}=await s.send(new K(c));if(!r||!r.AccessKeyId||!r.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${c.RoleArn}`);let m=et(l),p={accessKeyId:r.AccessKeyId,secretAccessKey:r.SecretAccessKey,sessionToken:r.SessionToken,expiration:r.Expiration,...r.CredentialScope&&{credentialScope:r.CredentialScope},...m&&{accountId:m}};return B(p,"CREDENTIALS_STS_ASSUME_ROLE","i"),p}},On=(e,t)=>{let s;return async(i)=>{if(!s){let{logger:m=e?.parentClientConfig?.logger,profile:p=e?.parentClientConfig?.profile,region:P,requestHandler:v=e?.parentClientConfig?.requestHandler,credentialProviderLogger:f,userAgentAppId:h=e?.parentClientConfig?.userAgentAppId}=e,w=await tt(P,e?.parentClientConfig?.region,f,{logger:m,profile:p}),S=!st(v);s=new t({...e,userAgentAppId:h,profile:p,region:w,requestHandler:S?v:void 0,logger:m})}let{Credentials:n,AssumedRoleUser:c}=await s.send(new M(i));if(!n||!n.AccessKeyId||!n.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${i.RoleArn}`);let r=et(c),l={accessKeyId:n.AccessKeyId,secretAccessKey:n.SecretAccessKey,sessionToken:n.SessionToken,expiration:n.Expiration,...n.CredentialScope&&{credentialScope:n.CredentialScope},...r&&{accountId:r}};if(r)B(l,"RESOLVED_ACCOUNT_ID","T");return B(l,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),l}},st=(e)=>e?.metadata?.handlerProtocol==="h2",nt=(e,t)=>{if(!t)return e;else return class extends e{constructor(i){super(i);for(let n of t)this.middlewareStack.use(n)}}},ot=(e={},t)=>kn(e,nt(O,t)),rt=(e={},t)=>On(e,nt(O,t)),Nn=(e)=>(t)=>e({roleAssumer:ot(t),roleAssumerWithWebIdentity:rt(t),...t});var Un=Qe,qn=K,Fn=Fe,Ln=Le,Kn=Ye,Mn=M,jn=Ke,Gn=Me,Vn=Z,zn=ee,Bn=N,Qn=$e,Yn=L,Xn=ke,Jn=q,Zn=Oe,eo=F,to=Ne,so=W,no=We,oo=H,ro=He,io=je,ao=Ve,co=U,uo=Ue,lo=te,po=O,go=g,ho=be,mo=ze,Po=Nn,fo=qe,So=ot,Ao=rt;export{Wn as $Command,Hn as __Client,Un as AssumeRole$,qn as AssumeRoleCommand,Fn as AssumeRoleRequest$,Ln as AssumeRoleResponse$,Kn as AssumeRoleWithWebIdentity$,Mn as AssumeRoleWithWebIdentityCommand,jn as AssumeRoleWithWebIdentityRequest$,Gn as AssumeRoleWithWebIdentityResponse$,Vn as AssumedRoleUser$,zn as Credentials$,Bn as ExpiredTokenException,Qn as ExpiredTokenException$,Yn as IDPCommunicationErrorException,Xn as IDPCommunicationErrorException$,Jn as IDPRejectedClaimException,Zn as IDPRejectedClaimException$,eo as InvalidIdentityTokenException,to as InvalidIdentityTokenException$,so as MalformedPolicyDocumentException,no as MalformedPolicyDocumentException$,oo as PackedPolicyTooLargeException,ro as PackedPolicyTooLargeException$,io as PolicyDescriptorType$,ao as ProvidedContext$,co as RegionDisabledException,uo as RegionDisabledException$,lo as STS,po as STSClient,go as STSServiceException,ho as STSServiceException$,mo as Tag$,Po as decorateDefaultCredentialProvider,fo as errorTypeRegistries,So as getDefaultRoleAssumer,Ao as getDefaultRoleAssumerWithWebIdentity};
+import{wl}from"./chunk-q83h0hkx.js";import{Ei,Ss}from"./chunk-yq32evnn.js";import{Is}from"./chunk-4mws03es.js";import{Ts,Ko,Yt}from"./chunk-9xhjy897.js";import{Kn,br,at,Tn,hr,Jo,sr}from"./chunk-e4yscwen.js";var{awsEndpointFunctions:rt,emitWarningIfUnsupportedVersion:it,createDefaultUserAgentProvider:ct,NODE_APP_ID_CONFIG_OPTIONS:ut,getAwsRegionExtensionConfiguration:dt,resolveAwsRegionExtensionConfiguration:lt,resolveUserAgentConfig:pt,resolveHostHeaderConfig:gt,getUserAgentPlugin:ht,getHostHeaderPlugin:mt,getLoggerPlugin:Pt,getRecursionDetectionPlugin:ft,setCredentialFeature:B,stsRegionDefaultResolver:St}=Yt(),{NoAuthSigner:le,getHttpAuthSchemeEndpointRuleSetPlugin:At,DefaultIdentityProviderConfig:Et,getHttpSigningPlugin:vt}=Ko(),{normalizeProvider:pe,getSmithyContext:ge,ServiceException:yt,NoOpLogger:It,emitWarningIfUnsupportedVersion:Rt,loadConfigsForDefaultMode:_t,getDefaultExtensionConfiguration:Ct,resolveDefaultRuntimeConfig:xt,Client:he,makeBuilder:wt,createAggregatedClient:Tt}=br(),{Command:Dt}=br();var Wn=Dt,Hn=he;var{resolveDefaultsModeConfig:bt,loadConfig:A,NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS:$t,NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS:kt,NODE_REGION_CONFIG_OPTIONS:Ot,NODE_REGION_CONFIG_FILE_OPTIONS:Nt,resolveRegionConfig:Wt}=at(),{BinaryDecisionDiagram:Ht,EndpointCache:Ut,decideEndpoint:qt,customEndpointFunctions:Ft,resolveParams:Lt,resolveEndpointConfig:Kt,getEndpointPlugin:Mt}=Tn(),{parseUrl:jt,getHttpHandlerExtensionConfiguration:Gt,resolveHttpHandlerRuntimeConfig:Vt,getContentLengthPlugin:zt}=sr(),{DEFAULT_RETRY_MODE:Bt,NODE_RETRY_MODE_CONFIG_OPTIONS:Qt,NODE_MAX_ATTEMPT_CONFIG_OPTIONS:Xt,resolveRetryConfig:Jt,getRetryPlugin:Zt}=Ts(),{TypeRegistry:me,getSchemaSerdePlugin:es}=Kn(),{resolveAwsSdkSigV4Config:ts,resolveAwsSdkSigV4AConfig:ss,AwsSdkSigV4Signer:Pe,AwsSdkSigV4ASigner:fe,NODE_SIGV4A_CONFIG_OPTIONS:ns,NODE_AUTH_SCHEME_PREFERENCE_OPTIONS:os}=Ss(),{SignatureV4MultiRegion:Se}=wl(),{toUtf8:rs,fromUtf8:is,toBase64:as,fromBase64:cs,calculateBodyLength:us}=hr(),{streamCollector:ds,NodeHttpHandler:ls}=Is(),{AwsQueryProtocol:ps}=Ei(),{Sha256:gs}=Jo(),D="ref",y=-1,b=!0,ne="isSet",Ae="PartitionResult",k="booleanEquals",u="stringEquals",V="getAttr",oe="us-east-1",re="sigv4",ie="sts",ae="https://sts.{Region}.{PartitionResult#dnsSuffix}",ce={[D]:"Endpoint"},d={[D]:"Region"},z={[D]:Ae},T={},ue=[d],de={conditions:[[ne,[ce]],[ne,ue],["aws.partition",ue,Ae],[k,[{[D]:"UseFIPS"},b]],[k,[{[D]:"UseDualStack"},b]],[u,[d,"aws-global"]],[k,[{[D]:"UseGlobalEndpoint"},b]],[u,[d,"eu-central-1"]],[k,[{fn:V,argv:[z,"supportsDualStack"]},b]],[k,[{fn:V,argv:[z,"supportsFIPS"]},b]],[u,[d,"ap-south-1"]],[u,[d,"eu-north-1"]],[u,[d,"eu-west-1"]],[u,[d,"eu-west-2"]],[u,[d,"eu-west-3"]],[u,[d,"sa-east-1"]],[u,[d,oe]],[u,[d,"us-east-2"]],[u,[d,"us-west-2"]],[u,[d,"us-west-1"]],[u,[d,"ca-central-1"]],[u,[d,"ap-southeast-1"]],[u,[d,"ap-northeast-1"]],[u,[d,"ap-southeast-2"]],[u,[{fn:V,argv:[z,"name"]},"aws-us-gov"]]],results:[[y],["https://sts.amazonaws.com",{authSchemes:[{name:re,signingName:ie,signingRegion:oe}]}],[ae,{authSchemes:[{name:re,signingName:ie,signingRegion:"{Region}"}]}],[y,"Invalid Configuration: FIPS and custom endpoint are not supported"],[y,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[ce,T],["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",T],[y,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://sts.{Region}.amazonaws.com",T],["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",T],[y,"FIPS is enabled but this partition does not support FIPS"],["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",T],[y,"DualStack is enabled but this partition does not support DualStack"],[ae,T],[y,"Invalid Configuration: Missing Region"]]},hs=2,o=1e8,ms=new Int32Array([-1,1,-1,0,30,3,1,4,o+14,2,5,o+14,3,25,6,4,24,7,5,o+1,8,6,9,o+13,7,o+1,10,10,o+1,11,11,o+1,12,12,o+1,13,13,o+1,14,14,o+1,15,15,o+1,16,16,o+1,17,17,o+1,18,18,o+1,19,19,o+1,20,20,o+1,21,21,o+1,22,22,o+1,23,23,o+1,o+2,8,o+11,o+12,4,28,26,9,27,o+10,24,o+8,o+9,8,29,o+7,9,o+6,o+7,3,o+3,31,4,o+4,o+5]),Ps=Ht.from(ms,hs,de.conditions,de.results),fs=new Ut({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),Ee=(e,t={})=>fs.get(e,()=>qt(Ps,{endpointParams:e,logger:t.logger}));Ft.aws=rt;var As=(e)=>async(t,s,i)=>{if(!i)throw Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");let n=await e(t,s,i),c=ge(s)?.commandInstance?.constructor?.getEndpointParameterInstructions;if(!c)throw Error(`getEndpointParameterInstructions() is not defined on '${s.commandName}'`);let r=await Lt(i,{getEndpointParameterInstructions:c},t);return Object.assign(n,r)},Es=async(e,t,s)=>({operation:ge(t).operation,region:await pe(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),vs=As(Es);function ve(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,s)=>({signingProperties:{config:t,context:s}})}}function Q(e){return{schemeId:"aws.auth#sigv4a",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,s)=>({signingProperties:{config:t,context:s}})}}function ye(e){return{schemeId:"smithy.api#noAuth"}}var ys=(e,t,s)=>(n)=>{let r=e(n).properties?.authSchemes;if(!r)return t(n);let l=[];for(let m of r){let{name:p,properties:P={},...v}=m,f=p.toLowerCase();if(p!==f)console.warn(`HttpAuthScheme has been normalized with lowercasing: '${p}' to '${f}'`);let h;if(f==="sigv4a"){h="aws.auth#sigv4a";let j=r.find((G)=>{let se=G.name.toLowerCase();return se!=="sigv4a"&&se.startsWith("sigv4")});if(Se.sigv4aDependency()==="none"&&j)continue}else if(f.startsWith("sigv4"))h="aws.auth#sigv4";else throw Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${f}'`);let w=s[h];if(!w)throw Error(`Could not find HttpAuthOption create function for '${h}'`);let S=w(n);S.schemeId=h,S.signingProperties={...S.signingProperties||{},...v,...P},l.push(S)}return l},Rs=(e)=>{let t=[];switch(e.operation){case"AssumeRoleWithWebIdentity":{t.push(ye()),t.push(Q(e));break}default:t.push(ve(e)),t.push(Q(e))}return t},_s=ys(Ee,Rs,{"aws.auth#sigv4":ve,"aws.auth#sigv4a":Q,"smithy.api#noAuth":ye}),Cs=(e)=>{let t=ts(e),s=ss(t);return Object.assign(s,{authSchemePreference:pe(e.authSchemePreference??[])})},xs=(e)=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,useGlobalEndpoint:e.useGlobalEndpoint??!1,defaultSigningName:"sts"}),ws={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},Ds="3.997.43",bs={version:Ds};class g extends yt{constructor(e){super(e);Object.setPrototypeOf(this,g.prototype)}}class N extends g{name="ExpiredTokenException";$fault="client";constructor(e){super({name:"ExpiredTokenException",$fault:"client",...e});Object.setPrototypeOf(this,N.prototype)}}class W extends g{name="MalformedPolicyDocumentException";$fault="client";constructor(e){super({name:"MalformedPolicyDocumentException",$fault:"client",...e});Object.setPrototypeOf(this,W.prototype)}}class H extends g{name="PackedPolicyTooLargeException";$fault="client";constructor(e){super({name:"PackedPolicyTooLargeException",$fault:"client",...e});Object.setPrototypeOf(this,H.prototype)}}class U extends g{name="RegionDisabledException";$fault="client";constructor(e){super({name:"RegionDisabledException",$fault:"client",...e});Object.setPrototypeOf(this,U.prototype)}}class q extends g{name="IDPRejectedClaimException";$fault="client";constructor(e){super({name:"IDPRejectedClaimException",$fault:"client",...e});Object.setPrototypeOf(this,q.prototype)}}class F extends g{name="InvalidIdentityTokenException";$fault="client";constructor(e){super({name:"InvalidIdentityTokenException",$fault:"client",...e});Object.setPrototypeOf(this,F.prototype)}}class L extends g{name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor(e){super({name:"IDPCommunicationErrorException",$fault:"client",...e});Object.setPrototypeOf(this,L.prototype)}}var $s="Arn",ks="AccessKeyId",Os="AssumeRole",Ns="AssumedRoleId",Ws="AssumeRoleRequest",Hs="AssumeRoleResponse",Y="AssumedRoleUser",Us="AssumeRoleWithWebIdentity",qs="AssumeRoleWithWebIdentityRequest",Fs="AssumeRoleWithWebIdentityResponse",Ls="Audience",X="Credentials",Ks="ContextAssertion",Ie="DurationSeconds",Ms="Expiration",js="ExternalId",Gs="ExpiredTokenException",Vs="IDPCommunicationErrorException",zs="IDPRejectedClaimException",Bs="InvalidIdentityTokenException",Qs="Key",Ys="MalformedPolicyDocumentException",Re="Policy",_e="PolicyArns",Xs="ProviderArn",Js="ProvidedContexts",Zs="ProvidedContextsListType",en="ProvidedContext",tn="PolicyDescriptorType",sn="ProviderId",Ce="PackedPolicySize",nn="PackedPolicyTooLargeException",on="Provider",xe="RoleArn",rn="RegionDisabledException",we="RoleSessionName",an="SecretAccessKey",cn="SubjectFromWebIdentityToken",J="SourceIdentity",un="SerialNumber",dn="SessionToken",ln="Tags",pn="TokenCode",gn="TransitiveTagKeys",hn="Tag",mn="Value",Pn="WebIdentityToken",fn="arn",Sn="accessKeySecretType",I="awsQueryError",R="client",An="clientTokenType",_="error",C="httpError",x="message",En="policyDescriptorListType",Te="smithy.ts.sdk.synthetic.com.amazonaws.sts",vn="tagListType",a="com.amazonaws.sts",De=me.for(Te),be=[-3,Te,"STSServiceException",0,[],[]];De.registerError(be,g);var E=me.for(a),$e=[-3,a,Gs,{[I]:["ExpiredTokenException",400],[_]:R,[C]:400},[x],[0]];E.registerError($e,N);var ke=[-3,a,Vs,{[I]:["IDPCommunicationError",400],[_]:R,[C]:400},[x],[0]];E.registerError(ke,L);var Oe=[-3,a,zs,{[I]:["IDPRejectedClaim",403],[_]:R,[C]:403},[x],[0]];E.registerError(Oe,q);var Ne=[-3,a,Bs,{[I]:["InvalidIdentityToken",400],[_]:R,[C]:400},[x],[0]];E.registerError(Ne,F);var We=[-3,a,Ys,{[I]:["MalformedPolicyDocument",400],[_]:R,[C]:400},[x],[0]];E.registerError(We,W);var He=[-3,a,nn,{[I]:["PackedPolicyTooLarge",400],[_]:R,[C]:400},[x],[0]];E.registerError(He,H);var Ue=[-3,a,rn,{[I]:["RegionDisabledException",403],[_]:R,[C]:403},[x],[0]];E.registerError(Ue,U);var qe=[De,E],yn=[0,a,Sn,8,0],In=[0,a,An,8,0],Z=[3,a,Y,0,[Ns,$s],[0,0],2],Fe=[3,a,Ws,0,[xe,we,_e,Re,Ie,ln,gn,js,un,pn,J,Js],[0,0,()=>ze,0,1,()=>_n,64,0,0,0,0,()=>Rn],2],Le=[3,a,Hs,0,[X,Y,Ce,J],[[()=>ee,0],()=>Z,1,0]],Ke=[3,a,qs,0,[xe,we,Pn,sn,_e,Re,Ie],[0,0,[()=>In,0],0,()=>ze,0,1],3],Me=[3,a,Fs,0,[X,cn,Y,Ce,on,Ls,J],[[()=>ee,0],0,()=>Z,1,0,0,0]],ee=[3,a,X,0,[ks,an,dn,Ms],[0,[()=>yn,0],0,4],4],je=[3,a,tn,0,[fn],[0]],Ge=[3,a,en,0,[Xs,Ks],[0,0]],Ve=[3,a,hn,0,[Qs,mn],[0,0],2],ze=[1,a,En,0,()=>je],Rn=[1,a,Zs,0,()=>Ge],_n=[1,a,vn,0,()=>Ve],Be=[9,a,Os,0,()=>Fe,()=>Le],Qe=[9,a,Us,0,()=>Ke,()=>Me],Cn=(e)=>({apiVersion:"2011-06-15",base64Decoder:e?.base64Decoder??cs,base64Encoder:e?.base64Encoder??as,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Ee,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??_s,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4"),signer:new Pe},{schemeId:"aws.auth#sigv4a",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4a"),signer:new fe},{schemeId:"smithy.api#noAuth",identityProvider:(t)=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new le}],logger:e?.logger??new It,protocol:e?.protocol??ps,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:qe,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:e?.serviceId??"STS",sha256:e?.sha256??gs,signerConstructor:e?.signerConstructor??Se,urlParser:e?.urlParser??jt,utf8Decoder:e?.utf8Decoder??is,utf8Encoder:e?.utf8Encoder??rs}),xn=(e)=>{Rt(process.version);let t=bt(e),s=()=>t().then(_t),i=Cn(e);it(process.version);let n={profile:e?.profile,logger:i.logger};return{...i,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??A(os,n),bodyLengthChecker:e?.bodyLengthChecker??us,defaultUserAgentProvider:e?.defaultUserAgentProvider??ct({serviceId:i.serviceId,clientVersion:bs.version}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(c)=>c.getIdentityProvider("aws.auth#sigv4")||(async(r)=>await e.credentialDefaultProvider(r?.__config||{})()),signer:new Pe},{schemeId:"aws.auth#sigv4a",identityProvider:(c)=>c.getIdentityProvider("aws.auth#sigv4a"),signer:new fe},{schemeId:"smithy.api#noAuth",identityProvider:(c)=>c.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new le}],maxAttempts:e?.maxAttempts??A(Xt,e),region:e?.region??A(Ot,{...Nt,...n}),requestHandler:ls.create(e?.requestHandler??s),retryMode:e?.retryMode??A({...Qt,default:async()=>(await s()).retryMode||Bt},e),sigv4aSigningRegionSet:e?.sigv4aSigningRegionSet??A(ns,n),streamCollector:e?.streamCollector??ds,useDualstackEndpoint:e?.useDualstackEndpoint??A(kt,n),useFipsEndpoint:e?.useFipsEndpoint??A($t,n),userAgentAppId:e?.userAgentAppId??A(ut,n)}},wn=(e)=>{let{httpAuthSchemes:t,httpAuthSchemeProvider:s,credentials:i}=e;return{setHttpAuthScheme(n){let c=t.findIndex((r)=>r.schemeId===n.schemeId);if(c===-1)t.push(n);else t.splice(c,1,n)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(n){s=n},httpAuthSchemeProvider(){return s},setCredentials(n){i=n},credentials(){return i}}},Dn=(e)=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}),bn=(e,t)=>{let s=Object.assign(dt(e),Ct(e),Gt(e),wn(e));return t.forEach((i)=>i.configure(s)),Object.assign(e,lt(s),xt(s),Vt(s),Dn(s))};class O extends he{config;constructor(...[e]){let t=xn(e||{});super(t);this.initConfig=t;let s=xs(t),i=pt(s),n=Jt(i),c=Wt(n),r=gt(c),l=Kt(r),m=Cs(l),p=bn(m,e?.extensions||[]);this.config=p,this.middlewareStack.use(es(this.config)),this.middlewareStack.use(ht(this.config)),this.middlewareStack.use(Zt(this.config)),this.middlewareStack.use(zt(this.config)),this.middlewareStack.use(mt(this.config)),this.middlewareStack.use(Pt(this.config)),this.middlewareStack.use(ft(this.config)),this.middlewareStack.use(At(this.config,{httpAuthSchemeParametersProvider:vs,identityProviderConfigProvider:async(P)=>new Et({"aws.auth#sigv4":P.credentials,"aws.auth#sigv4a":P.credentials})})),this.middlewareStack.use(vt(this.config))}destroy(){super.destroy()}}var Ye=wt(ws,"AWSSecurityTokenServiceV20110615","STSClient",Mt),Xe={},Je=(e,t,s,i)=>[];class K extends Ye(Xe,Je,"AssumeRole",Be){}class M extends Ye(Xe,Je,"AssumeRoleWithWebIdentity",Qe){}var $n={AssumeRoleCommand:K,AssumeRoleWithWebIdentityCommand:M};class te extends O{}Tt($n,te);var Ze=(e)=>{if(typeof e?.Arn==="string"){let t=e.Arn.split(":");if(t.length>4&&t[4]!=="")return t[4]}return},et=async(e,t,s,i={})=>{let n=typeof e==="function"?await e():e,c=typeof t==="function"?await t():t,r="",l=n??c??(r=await St(i)());return s?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${n} (credential provider clientConfig)`,`${c} (contextual client)`,`${r} (STS default: AWS_REGION, profile region, or us-east-1)`),l},kn=(e,t)=>{let s,i;return async(n,c)=>{if(i=n,!s){let{logger:P=e?.parentClientConfig?.logger,profile:v=e?.parentClientConfig?.profile,region:f,requestHandler:h=e?.parentClientConfig?.requestHandler,credentialProviderLogger:w,userAgentAppId:S=e?.parentClientConfig?.userAgentAppId}=e,j=await et(f,e?.parentClientConfig?.region,w,{logger:P,profile:v}),G=!tt(h);s=new t({...e,userAgentAppId:S,profile:v,credentialDefaultProvider:()=>async()=>i,region:j,requestHandler:G?h:void 0,logger:P})}let{Credentials:r,AssumedRoleUser:l}=await s.send(new K(c));if(!r||!r.AccessKeyId||!r.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${c.RoleArn}`);let m=Ze(l),p={accessKeyId:r.AccessKeyId,secretAccessKey:r.SecretAccessKey,sessionToken:r.SessionToken,expiration:r.Expiration,...r.CredentialScope&&{credentialScope:r.CredentialScope},...m&&{accountId:m}};return B(p,"CREDENTIALS_STS_ASSUME_ROLE","i"),p}},On=(e,t)=>{let s;return async(i)=>{if(!s){let{logger:m=e?.parentClientConfig?.logger,profile:p=e?.parentClientConfig?.profile,region:P,requestHandler:v=e?.parentClientConfig?.requestHandler,credentialProviderLogger:f,userAgentAppId:h=e?.parentClientConfig?.userAgentAppId}=e,w=await et(P,e?.parentClientConfig?.region,f,{logger:m,profile:p}),S=!tt(v);s=new t({...e,userAgentAppId:h,profile:p,region:w,requestHandler:S?v:void 0,logger:m})}let{Credentials:n,AssumedRoleUser:c}=await s.send(new M(i));if(!n||!n.AccessKeyId||!n.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${i.RoleArn}`);let r=Ze(c),l={accessKeyId:n.AccessKeyId,secretAccessKey:n.SecretAccessKey,sessionToken:n.SessionToken,expiration:n.Expiration,...n.CredentialScope&&{credentialScope:n.CredentialScope},...r&&{accountId:r}};if(r)B(l,"RESOLVED_ACCOUNT_ID","T");return B(l,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),l}},tt=(e)=>e?.metadata?.handlerProtocol==="h2",st=(e,t)=>{if(!t)return e;else return class extends e{constructor(i){super(i);for(let n of t)this.middlewareStack.use(n)}}},nt=(e={},t)=>kn(e,st(O,t)),ot=(e={},t)=>On(e,st(O,t)),Nn=(e)=>(t)=>e({roleAssumer:nt(t),roleAssumerWithWebIdentity:ot(t),...t});var Un=Be,qn=K,Fn=Fe,Ln=Le,Mn=Qe,jn=M,Gn=Ke,Vn=Me,zn=Z,Bn=ee,Qn=N,Yn=$e,Xn=L,Jn=ke,Zn=q,eo=Oe,to=F,so=Ne,no=W,oo=We,ro=H,io=He,ao=je,co=Ge,uo=U,lo=Ue,po=te,go=O,ho=g,mo=be,Po=Ve,fo=Nn,So=qe,Ao=nt,Eo=ot;export{Wn as $Command,Hn as __Client,Un as AssumeRole$,qn as AssumeRoleCommand,Fn as AssumeRoleRequest$,Ln as AssumeRoleResponse$,Mn as AssumeRoleWithWebIdentity$,jn as AssumeRoleWithWebIdentityCommand,Gn as AssumeRoleWithWebIdentityRequest$,Vn as AssumeRoleWithWebIdentityResponse$,zn as AssumedRoleUser$,Bn as Credentials$,Qn as ExpiredTokenException,Yn as ExpiredTokenException$,Xn as IDPCommunicationErrorException,Jn as IDPCommunicationErrorException$,Zn as IDPRejectedClaimException,eo as IDPRejectedClaimException$,to as InvalidIdentityTokenException,so as InvalidIdentityTokenException$,no as MalformedPolicyDocumentException,oo as MalformedPolicyDocumentException$,ro as PackedPolicyTooLargeException,io as PackedPolicyTooLargeException$,ao as PolicyDescriptorType$,co as ProvidedContext$,uo as RegionDisabledException,lo as RegionDisabledException$,po as STS,go as STSClient,ho as STSServiceException,mo as STSServiceException$,Po as Tag$,fo as decorateDefaultCredentialProvider,So as errorTypeRegistries,Ao as getDefaultRoleAssumer,Eo as getDefaultRoleAssumerWithWebIdentity};

package/bin/chunk-j2s311yc.js

@@ -0,0 +1,3 @@
+// @bun
+function Bs(_){if(_===void 0)return;let n=Array.from(_);if(n.length<=64)return _;return n.slice(0,64).join("")}
+export{Bs};

package/bin/{chunk-6hzktewz.js → chunk-jt02kpfc.js}

@@ -1,3 +1,3 @@
 // @bun
-function c(e){if(!(e instanceof Error)||!("status"in e)||!("headers"in e))return!1;return(e.status===void 0||typeof e.status==="number")&&(e.headers===void 0||e.headers instanceof Headers)}function d(e){let t=e.headers?.get("x-should-retry");if(t==="true")return!0;if(t==="false")return!1;if(e.status===void 0)return!0;return e.status===408||e.status===409||e.status===429||typeof e.status==="number"&&e.status>=500}function o(e,t,a){let r=t??60000;if(r>0&&e>r)throw Error(`Server requested ${Math.ceil(e/1000)}s retry delay (max: ${Math.ceil(r/1000)}s). ${a}`);return e}function l(e,t,a){let r=e.headers?.get("retry-after-ms");if(r){let s=Number.parseFloat(r);if(!Number.isNaN(s))return o(s,a,e.message)}let n=e.headers?.get("retry-after");if(n){let s=Number.parseFloat(n),f=Number.isNaN(s)?Date.parse(n)-Date.now():s*1000;return o(f,a,e.message)}return Math.min(0.5*2**t,8)*1000*(1-Math.random()*0.25)}function i(){let e=Error("Request aborted");return e.name="AbortError",e}function m(e,t){return new Promise((a,r)=>{if(t?.aborted){r(i());return}let n=()=>{clearTimeout(u),r(i())},u=setTimeout(()=>{t?.removeEventListener("abort",n),a()},Math.max(0,e));t?.addEventListener("abort",n,{once:!0})})}async function ls(e,t={}){let a=t.maxRetries??0,r=a;for(;;)try{return await e()}catch(n){if(t.signal?.aborted)throw i();if(r<=0||!c(n)||!d(n))throw n;let u=a-r;r--,await m(l(n,u,t.maxRetryDelayMs),t.signal)}}
-export{ls};
+function c(e){if(!(e instanceof Error)||!("status"in e)||!("headers"in e))return!1;return(e.status===void 0||typeof e.status==="number")&&(e.headers===void 0||e.headers instanceof Headers)}function d(e){let t=e.headers?.get("x-should-retry");if(t==="true")return!0;if(t==="false")return!1;if(e.status===void 0)return!0;return e.status===408||e.status===409||e.status===429||typeof e.status==="number"&&e.status>=500}function o(e,t,a){let r=t??60000;if(r>0&&e>r)throw Error(`Server requested ${Math.ceil(e/1000)}s retry delay (max: ${Math.ceil(r/1000)}s). ${a}`);return e}function l(e,t,a){let r=e.headers?.get("retry-after-ms");if(r){let s=Number.parseFloat(r);if(!Number.isNaN(s))return o(s,a,e.message)}let n=e.headers?.get("retry-after");if(n){let s=Number.parseFloat(n),f=Number.isNaN(s)?Date.parse(n)-Date.now():s*1000;return o(f,a,e.message)}return Math.min(0.5*2**t,8)*1000*(1-Math.random()*0.25)}function i(){let e=Error("Request aborted");return e.name="AbortError",e}function m(e,t){return new Promise((a,r)=>{if(t?.aborted){r(i());return}let n=()=>{clearTimeout(u),r(i())},u=setTimeout(()=>{t?.removeEventListener("abort",n),a()},Math.max(0,e));t?.addEventListener("abort",n,{once:!0})})}async function Us(e,t={}){let a=t.maxRetries??0,r=a;for(;;)try{return await e()}catch(n){if(t.signal?.aborted)throw i();if(r<=0||!c(n)||!d(n))throw n;let u=a-r;r--,await m(l(n,u,t.maxRetryDelayMs),t.signal)}}
+export{Us};

package/bin/{chunk-c60j1b4w.js → chunk-jt0ykktx.js}

@@ -1,2 +1,2 @@
 // @bun
-import{rt}from"./chunk-w4ydfy9d.js";import{pr}from"./chunk-q5j3b0h5.js";import"./chunk-ckczqmrz.js";import{zi}from"./chunk-3me1v3z5.js";import{ji,qi}from"./chunk-bg6waaf9.js";import{ni,oi,si}from"./chunk-kywdke0y.js";import{as}from"./chunk-23780yj6.js";import{kn,Rn}from"./chunk-bs6saf4d.js";import{ls}from"./chunk-6hzktewz.js";import{Xn,kr}from"./chunk-jb8vbeb0.js";import{bn}from"./chunk-3pw7z25v.js";import{Yr}from"./chunk-sd6w0z6a.js";import{Xt}from"./chunk-c6f8x05m.js";var O=new Set(["openai","openai-codex","opencode"]),E=16;function h(e,o){if(!e)return!1;let r=o.toLowerCase();for(let[t,s]of Object.entries(e))if(t.toLowerCase()===r&&s!==null&&s.trim().length>0)return!0;return!1}function g(e,o,r){if(o)return o;if(h(r,"authorization")||h(r,"cf-aig-authorization"))return"unused";throw Error(`No API key for provider: ${e}`)}function I(e){return e.provider==="openrouter"||e.baseUrl.includes("openrouter.ai")?"openrouter":"openai"}function R(e,o){if(e)return e;if(pr("PI_CACHE_RETENTION",o)==="long")return"long";return"short"}function m(e){return{supportsDeveloperRole:e.compat?.supportsDeveloperRole??!0,sessionAffinityFormat:e.compat?.sessionAffinityFormat??I(e),supportsLongCacheRetention:e.compat?.supportsLongCacheRetention??!0,supportsStrictMode:e.compat?.supportsStrictMode??!1,supportsOpenAIGrammarTools:e.compat?.supportsOpenAIGrammarTools??!1,supportsToolSearch:e.compat?.supportsToolSearch??!1,supportsExplicitPromptCacheMode:e.compat?.supportsExplicitPromptCacheMode??!1}}function P(e,o){return o==="long"&&e.supportsLongCacheRetention?"24h":void 0}function S(e){return Rn(kn(e),"OpenAI API error")}var C=(e,o,r)=>{let t=new Xt;return(async()=>{let s={role:"assistant",content:[],api:e.api,provider:e.provider,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:"stop",timestamp:Date.now()};try{let i=g(e.provider,r?.apiKey,r?.headers),c=R(r?.cacheRetention,r?.env)==="none"?void 0:r?.sessionId,p=m(e),a=Xn(o.tools,p.supportsOpenAIGrammarTools),u=w(e,o,i,r?.headers,c),f=M(e,o,r,p,a),l=await r?.onPayload?.(f,e);if(l!==void 0)f=l;let v={...r?.signal?{signal:r.signal}:{},...r?.timeoutMs!==void 0?{timeout:r.timeoutMs}:{},maxRetries:0},{data:y,response:d}=await ls(()=>u.responses.create(f,v).withResponse(),{maxRetries:r?.maxRetries,maxRetryDelayMs:r?.maxRetryDelayMs,signal:r?.signal});if(await r?.onResponse?.({status:d.status,headers:bn(d.headers)},e),t.push({type:"start",partial:s}),await si(y,s,t,e,{serviceTier:r?.serviceTier,grammarToolInputProperties:a,applyServiceTierPricing:(T,A)=>b(T,A,e)}),r?.signal?.aborted)throw Error("Request was aborted");if(s.stopReason==="aborted"||s.stopReason==="error")throw Error("An unknown error occurred");t.push({type:"done",reason:s.stopReason,message:s}),t.end()}catch(i){for(let n of s.content)delete n.index,delete n.partialJson,delete n.customInput;s.stopReason=r?.signal?.aborted?"aborted":"error",s.errorMessage=S(i),t.push({type:"error",reason:s.stopReason,error:s}),t.end()}})(),t},z=(e,o,r)=>{g(e.provider,r?.apiKey,r?.headers);let t=kr(e,o,r,r?.apiKey),s=r?.reasoning?Yr(e,r.reasoning):void 0;return C(e,o,{...t,reasoningEffort:s==="off"?void 0:s})};function w(e,o,r,t,s){let i=m(e),n={...e.headers};if(e.provider==="github-copilot"){let c=ji(o.messages),p=qi({messages:o.messages,hasImages:c});Object.assign(n,p)}if(s)if(i.sessionAffinityFormat==="openrouter")n["x-session-id"]=s;else{if(i.sessionAffinityFormat==="openai")n.session_id=s;n["x-client-request-id"]=s}if(t)Object.assign(n,t);return new rt({apiKey:r,baseURL:e.baseUrl,dangerouslyAllowBrowser:!0,defaultHeaders:n})}function M(e,o,r,t=m(e),s=Xn(o.tools,t.supportsOpenAIGrammarTools)){let i=zi(o,t.supportsToolSearch),n=ni(e,o,O,{grammarToolInputProperties:s,deferredTools:i.deferred,toolOptions:{supportsStrictMode:t.supportsStrictMode,supportsOpenAIGrammarTools:t.supportsOpenAIGrammarTools}}),c=R(r?.cacheRetention,r?.env),p=c==="none"&&t.supportsExplicitPromptCacheMode,a={model:e.id,input:n,stream:!0,prompt_cache_key:c==="none"?void 0:as(r?.sessionId),prompt_cache_retention:P(t,c),prompt_cache_options:p?{mode:"explicit"}:void 0,store:!1};if(r?.maxTokens)a.max_output_tokens=Math.max(r.maxTokens,E);if(r?.temperature!==void 0)a.temperature=r?.temperature;if(r?.serviceTier!==void 0)a.service_tier=r.serviceTier;if(i.immediate.length>0)a.tools=oi(i.immediate,{supportsStrictMode:t.supportsStrictMode,supportsOpenAIGrammarTools:t.supportsOpenAIGrammarTools});if(r?.toolChoice!==void 0)a.tool_choice=r.toolChoice;if(e.reasoning){if(r?.reasoningEffort||r?.reasoningSummary){let u=r?.reasoningEffort?e.thinkingLevelMap?.[r.reasoningEffort]??r.reasoningEffort:"medium";a.reasoning={effort:u,summary:r?.reasoningSummary||"auto"},a.include=["reasoning.encrypted_content"]}else if(e.provider!=="github-copilot"&&e.thinkingLevelMap?.off!==null)a.reasoning={effort:e.thinkingLevelMap?.off??"none"};if(e.provider==="xai")a.include=["reasoning.encrypted_content"]}return a}function _(e,o){switch(o){case"flex":return 0.5;case"priority":return e.id==="gpt-5.5"?2.5:2;default:return 1}}function b(e,o,r){let t=_(r,o);if(t===1)return;e.cost.input*=t,e.cost.output*=t,e.cost.cacheRead*=t,e.cost.cacheWrite*=t,e.cost.total=e.cost.input+e.cost.output+e.cost.cacheRead+e.cost.cacheWrite}export{C as stream,z as streamSimple};
+import{At}from"./chunk-02fvcrej.js";import{kr}from"./chunk-cwat1jwx.js";import"./chunk-x8mjh387.js";import{Oa}from"./chunk-7v7mypc6.js";import{Pa,Da}from"./chunk-b7bnp021.js";import{$i,Hi,Qi}from"./chunk-1wfg56z3.js";import{Bs}from"./chunk-j2s311yc.js";import{no,oo}from"./chunk-eyjfhdp9.js";import{Us}from"./chunk-jt02kpfc.js";import{Hn}from"./chunk-7g46e1wy.js";import{Co,Yr}from"./chunk-vcrmjtcz.js";import{vn}from"./chunk-jzgbxqdg.js";import{mr}from"./chunk-v05rrxp5.js";var O=new Set(["openai","openai-codex","opencode"]),E=16;function h(e,o){if(!e)return!1;let r=o.toLowerCase();for(let[t,s]of Object.entries(e))if(t.toLowerCase()===r&&s!==null&&s.trim().length>0)return!0;return!1}function g(e,o,r){if(o)return o;if(h(r,"authorization")||h(r,"cf-aig-authorization"))return"unused";throw Error(`No API key for provider: ${e}`)}function I(e){return e.provider==="openrouter"||e.baseUrl.includes("openrouter.ai")?"openrouter":"openai"}function R(e,o){if(e)return e;if(kr("PI_CACHE_RETENTION",o)==="long")return"long";return"short"}function m(e){return{supportsDeveloperRole:e.compat?.supportsDeveloperRole??!0,sessionAffinityFormat:e.compat?.sessionAffinityFormat??I(e),supportsLongCacheRetention:e.compat?.supportsLongCacheRetention??!0,supportsStrictMode:e.compat?.supportsStrictMode??!1,supportsOpenAIGrammarTools:e.compat?.supportsOpenAIGrammarTools??!1,supportsToolSearch:e.compat?.supportsToolSearch??!1,supportsExplicitPromptCacheMode:e.compat?.supportsExplicitPromptCacheMode??!1}}function P(e,o){return o==="long"&&e.supportsLongCacheRetention?"24h":void 0}function S(e){return oo(no(e),"OpenAI API error")}var C=(e,o,r)=>{let t=new mr;return(async()=>{let s={role:"assistant",content:[],api:e.api,provider:e.provider,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:"stop",timestamp:Date.now()};try{let i=g(e.provider,r?.apiKey,r?.headers),c=R(r?.cacheRetention,r?.env)==="none"?void 0:r?.sessionId,p=m(e),a=Co(o.tools,p.supportsOpenAIGrammarTools),u=w(e,o,i,r?.headers,c),f=M(e,o,r,p,a),l=await r?.onPayload?.(f,e);if(l!==void 0)f=l;let v={...r?.signal?{signal:r.signal}:{},...r?.timeoutMs!==void 0?{timeout:r.timeoutMs}:{},maxRetries:0},{data:y,response:d}=await Us(()=>u.responses.create(f,v).withResponse(),{maxRetries:r?.maxRetries,maxRetryDelayMs:r?.maxRetryDelayMs,signal:r?.signal});if(await r?.onResponse?.({status:d.status,headers:Hn(d.headers)},e),t.push({type:"start",partial:s}),await Qi(y,s,t,e,{serviceTier:r?.serviceTier,grammarToolInputProperties:a,applyServiceTierPricing:(T,A)=>b(T,A,e)}),r?.signal?.aborted)throw Error("Request was aborted");if(s.stopReason==="aborted"||s.stopReason==="error")throw Error("An unknown error occurred");t.push({type:"done",reason:s.stopReason,message:s}),t.end()}catch(i){for(let n of s.content)delete n.index,delete n.partialJson,delete n.customInput;s.stopReason=r?.signal?.aborted?"aborted":"error",s.errorMessage=S(i),t.push({type:"error",reason:s.stopReason,error:s}),t.end()}})(),t},z=(e,o,r)=>{g(e.provider,r?.apiKey,r?.headers);let t=Yr(e,o,r,r?.apiKey),s=r?.reasoning?vn(e,r.reasoning):void 0;return C(e,o,{...t,reasoningEffort:s==="off"?void 0:s})};function w(e,o,r,t,s){let i=m(e),n={...e.headers};if(e.provider==="github-copilot"){let c=Pa(o.messages),p=Da({messages:o.messages,hasImages:c});Object.assign(n,p)}if(s)if(i.sessionAffinityFormat==="openrouter")n["x-session-id"]=s;else{if(i.sessionAffinityFormat==="openai")n.session_id=s;n["x-client-request-id"]=s}if(t)Object.assign(n,t);return new At({apiKey:r,baseURL:e.baseUrl,dangerouslyAllowBrowser:!0,defaultHeaders:n})}function M(e,o,r,t=m(e),s=Co(o.tools,t.supportsOpenAIGrammarTools)){let i=Oa(o,t.supportsToolSearch),n=$i(e,o,O,{grammarToolInputProperties:s,deferredTools:i.deferred,toolOptions:{supportsStrictMode:t.supportsStrictMode,supportsOpenAIGrammarTools:t.supportsOpenAIGrammarTools}}),c=R(r?.cacheRetention,r?.env),p=c==="none"&&t.supportsExplicitPromptCacheMode,a={model:e.id,input:n,stream:!0,prompt_cache_key:c==="none"?void 0:Bs(r?.sessionId),prompt_cache_retention:P(t,c),prompt_cache_options:p?{mode:"explicit"}:void 0,store:!1};if(r?.maxTokens)a.max_output_tokens=Math.max(r.maxTokens,E);if(r?.temperature!==void 0)a.temperature=r?.temperature;if(r?.serviceTier!==void 0)a.service_tier=r.serviceTier;if(i.immediate.length>0)a.tools=Hi(i.immediate,{supportsStrictMode:t.supportsStrictMode,supportsOpenAIGrammarTools:t.supportsOpenAIGrammarTools});if(r?.toolChoice!==void 0)a.tool_choice=r.toolChoice;if(e.reasoning){if(r?.reasoningEffort||r?.reasoningSummary){let u=r?.reasoningEffort?e.thinkingLevelMap?.[r.reasoningEffort]??r.reasoningEffort:"medium";a.reasoning={effort:u,summary:r?.reasoningSummary||"auto"},a.include=["reasoning.encrypted_content"]}else if(e.provider!=="github-copilot"&&e.thinkingLevelMap?.off!==null)a.reasoning={effort:e.thinkingLevelMap?.off??"none"};if(e.provider==="xai")a.include=["reasoning.encrypted_content"]}return a}function _(e,o){switch(o){case"flex":return 0.5;case"priority":return e.id==="gpt-5.5"?2.5:2;default:return 1}}function b(e,o,r){let t=_(r,o);if(t===1)return;e.cost.input*=t,e.cost.output*=t,e.cost.cacheRead*=t,e.cost.cacheWrite*=t,e.cost.total=e.cost.input+e.cost.output+e.cost.cacheRead+e.cost.cacheWrite}export{C as stream,z as streamSimple};

package/bin/{chunk-sd6w0z6a.js → chunk-jzgbxqdg.js}

@@ -1,3 +1,3 @@
 // @bun
-import{Qi,Xt}from"./chunk-c6f8x05m.js";var C=function(e,t){if(typeof e==="string"&&/^\.\.?\//.test(e))return e.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i,function(r,n,a,s,i){return n?t?".jsx":".js":a&&(!s||!i)?r:a+s+"."+i.toLowerCase()+"js"});return e},x=(e)=>import(C(e));function P(){return globalThis.process?.env}function A(){return{async env(e){let t=P()?.[e];return typeof t==="string"&&t.trim().length>0?t:void 0},async fileExists(e){try{let t=await x("node:fs/promises"),r=e;if(r.startsWith("~"))r=(await x("node:os")).homedir()+r.slice(1);return await t.access(r),!0}catch{return!1}}}}class kc{credentials=new Map;chains=new Map;enqueue(e,t){let r=this.chains.get(e)??Promise.resolve(),n=(async()=>(await r.catch(()=>{}),t()))();return this.chains.set(e,n.catch(()=>{})),n}async read(e){return this.credentials.get(e)}async list(){return[...this.credentials].map(([e,t])=>({providerId:e,type:t.type}))}modify(e,t){return this.enqueue(e,async()=>{let r=this.credentials.get(e),n=await t(r);if(n!==void 0)this.credentials.set(e,n);return n??r})}delete(e){return this.enqueue(e,async()=>{this.credentials.delete(e)})}}class u extends Error{code;constructor(e,t,r){super(S(t,r?.cause),r);this.name="ModelsError",this.code=e}}function S(e,t){if(t===void 0||t===null)return e;let r=Qi(t).trim();if(!r||e.includes(r))return e;return`${e}: ${r}`}async function v(e,t,r,n){let a=n?.env?K(r,n.env):r;if(n?.apiKey!==void 0&&e.auth.apiKey)return m(a,e.auth.apiKey,e.id,{type:"api_key",key:n.apiKey,env:n.env});let s=await q(t,e.id);if(s){if(s.type==="oauth"&&e.auth.oauth)return b(t,e.id,e.auth.oauth,s);if(s.type==="api_key"&&e.auth.apiKey){let i=n?.env?{...s,env:{...s.env,...n.env}}:s;return m(a,e.auth.apiKey,e.id,i)}return}return e.auth.apiKey?m(a,e.auth.apiKey,e.id,void 0):void 0}function K(e,t){return{env:async(r)=>t[r]||await e.env(r),fileExists:(r)=>e.fileExists(r)}}async function b(e,t,r,n){let a=n;if(Date.now()>=a.expires){let s;try{s=await e.modify(t,async(i)=>{if(i?.type!=="oauth")return;if(Date.now()<i.expires)return;try{return await r.refresh(i)}catch(c){throw new u("oauth",`OAuth refresh failed for ${t}`,{cause:c})}})}catch(i){if(i instanceof u)throw i;throw new u("auth",`Credential store modify failed for ${t}`,{cause:i})}if(s?.type!=="oauth")return;a=s}try{return{auth:await r.toAuth(a),source:"OAuth"}}catch(s){throw new u("oauth",`OAuth auth derivation failed for ${t}`,{cause:s})}}async function m(e,t,r,n){try{return await t.resolve({ctx:e,credential:n})}catch(a){throw new u("auth",`API key auth failed for provider ${r}`,{cause:a})}}async function q(e,t){try{return await e.read(t)}catch(r){throw new u("auth",`Credential store read failed for ${t}`,{cause:r})}}function E(e,t){return{role:"assistant",content:[],api:e.api,provider:e.provider,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:"error",errorMessage:t instanceof Error?t.message:String(t),timestamp:Date.now()}}function R(e){return typeof e.result==="function"}async function _(e,t){for await(let r of t)e.push(r);e.end(R(t)?await t.result():void 0)}function y(e,t){let r=new Xt;return t().then((n)=>_(r,n)).catch((n)=>{let a=E(e,n);r.push({type:"error",reason:"error",error:a}),r.end(a)}),r}function Wr(e){return{stream:(t,r,n)=>y(t,async()=>(await e()).stream(t,r,n)),streamSimple:(t,r,n)=>y(t,async()=>(await e()).streamSimple(t,r,n))}}class g{entries=new Map;async read(e){let t=this.entries.get(e);return t?structuredClone(t):void 0}async write(e,t){this.entries.set(e,structuredClone(t))}async delete(e){this.entries.delete(e)}}function k(e,t){if(!e&&!t)return;let r={...e};for(let[n,a]of Object.entries(t??{})){let s=n.toLowerCase();for(let i of Object.keys(r))if(i.toLowerCase()===s)delete r[i];r[n]=a}return r}class M{providers=new Map;credentials;modelsStore;authContext;constructor(e){this.credentials=e?.credentials??new kc,this.modelsStore=e?.modelsStore??new g,this.authContext=e?.authContext??A()}setProvider(e){this.providers.set(e.id,e)}deleteProvider(e){this.providers.delete(e)}clearProviders(){this.providers.clear()}getProviders(){return Array.from(this.providers.values())}getProvider(e){return this.providers.get(e)}getModels(e){if(e!==void 0){let r=this.providers.get(e);if(!r)return[];try{return r.getModels()}catch{return[]}}let t=[];for(let r of this.providers.values())try{t.push(...r.getModels())}catch{}return t}getModel(e,t){return this.getModels(e).find((r)=>r.id===t)}async refresh(e={}){let t=e.allowNetwork??!0,r=new Map,n=Array.from(this.providers.values()).filter((a)=>a.refreshModels!==void 0);return await Promise.all(n.map(async(a)=>{if(e.signal?.aborted)return;let s={read:()=>this.modelsStore.read(a.id),write:(c)=>this.modelsStore.write(a.id,c),delete:()=>this.modelsStore.delete(a.id)},i;try{i=await this.readCredential(a.id);let c=await this.resolveRefreshCredential(a,i,t,e.signal);if(!c)return;await a.refreshModels({credential:c,store:s,allowNetwork:t,force:e.force,signal:e.signal})}catch(c){if(!e.signal?.aborted)r.set(a.id,c instanceof Error?c:new u("model_source",`Model refresh failed for ${a.id}`,{cause:c}));try{await a.refreshModels({credential:i,store:s,allowNetwork:!1,signal:e.signal})}catch{}}})),{aborted:e.signal?.aborted??!1,errors:r}}async resolveRefreshCredential(e,t,r,n){if(t?.type==="oauth"){let c=e.auth.oauth;if(!c)return;if(!r||Date.now()<t.expires)return t;if(n?.aborted)return;let p=await this.credentials.modify(e.id,async(l)=>{if(l?.type!=="oauth"||Date.now()<l.expires)return;return c.refresh(l,n)});return p?.type==="oauth"?p:void 0}let a=e.auth.apiKey;if(!a)return;let s=t?.type==="api_key"?t:void 0,i=await a.resolve({ctx:this.authContext,credential:s});if(!i)return;return{type:"api_key",key:i.auth.apiKey,env:i.env}}async readCredential(e){try{return await this.credentials.read(e)}catch(t){throw new u("auth",`Credential store read failed for ${e}`,{cause:t})}}async checkProviderAuth(e,t){if(t?.type==="oauth")return e.auth.oauth?{source:"OAuth",type:"oauth"}:void 0;let r=e.auth.apiKey;if(!r)return;if(r.check)try{return await r.check({ctx:this.authContext,credential:t?.type==="api_key"?t:void 0})}catch(a){throw new u("auth",`API key auth check failed for provider ${e.id}`,{cause:a})}let n=await v(e,this.credentials,this.authContext);return n?{source:n.source,type:"api_key"}:void 0}async checkAuth(e){let t=this.providers.get(e);if(!t)return;return this.checkProviderAuth(t,await this.readCredential(e))}async getAvailable(e){let t=e?[this.providers.get(e)].filter((n)=>n!==void 0):this.getProviders();return(await Promise.all(t.map(async(n)=>{let a=await this.readCredential(n.id);return{provider:n,credential:a,auth:await this.checkProviderAuth(n,a)}}))).flatMap(({provider:n,credential:a,auth:s})=>{if(!s)return[];let i=n.getModels();return n.filterModels?.(i,a)??i})}async getAuth(e,t){let r=typeof e==="string"?e:e.provider,n=this.providers.get(r);if(!n)return;let a=await v(n,this.credentials,this.authContext,t);if(!a||typeof e==="string"||!e.headers)return a;return{...a,auth:{...a.auth,headers:k(a.auth.headers,e.headers)}}}async login(e,t,r){let n=this.providers.get(e);if(!n)throw new u("provider",`Unknown provider: ${e}`);let a=t==="oauth"?n.auth.oauth:n.auth.apiKey;if(!a?.login)throw new u("auth",`${n.name} does not support ${t} login`);let s=await a.login(r);try{await this.credentials.modify(e,async()=>s)}catch(i){throw new u("auth",`Credential store modify failed for ${e}`,{cause:i})}return s}async logout(e){try{await this.credentials.delete(e)}catch(t){throw new u("auth",`Credential store delete failed for ${e}`,{cause:t})}}requireProvider(e){let t=this.providers.get(e.provider);if(!t)throw new u("provider",`Unknown provider: ${e.provider}`);return t}async applyAuth(e,t){this.requireProvider(e);let r=await this.getAuth(e,{apiKey:t?.apiKey,env:t?.env});if(!r)throw new u("auth",`Provider is not configured: ${e.provider}`);let n=r.auth,a=t?.apiKey??n.apiKey,s=k(n.headers,t?.headers);if(t?.transformHeaders)s=await t.transformHeaders(s??{});let i=r.env||t?.env?{...r.env??{},...t?.env??{}}:void 0,c=n.baseUrl?{...e,baseUrl:n.baseUrl}:e,{transformHeaders:p,...l}=t??{},o={...l,apiKey:a,headers:s,env:i};return{requestModel:c,requestOptions:o}}stream(e,t,r){return y(e,async()=>{let n=this.requireProvider(e),{requestModel:a,requestOptions:s}=await this.applyAuth(e,r);return n.stream(a,t,s)})}async complete(e,t,r){return this.stream(e,t,r).result()}streamSimple(e,t,r){return y(e,async()=>{let n=this.requireProvider(e),{requestModel:a,requestOptions:s}=await this.applyAuth(e,r);return n.streamSimple(a,t,s)})}async completeSimple(e,t,r){return this.streamSimple(e,t,r).result()}}function Fm(e){return new M(e)}function be(e){let t=e.models,r=[],n,a=e.fetchModels,s=()=>{let o=[...t];for(let h of r){let d=o.findIndex((f)=>f.id===h.id);if(d>=0)o[d]=h;else o.push(h)}return o},i=typeof e.api.stream==="function"?e.api:void 0,c=i?void 0:e.api,p=(o)=>i??c?.[o.api],l=(o,h)=>{let d=p(o);if(!d)return y(o,async()=>{throw new u("stream",`Provider ${e.id} has no API implementation for "${o.api}"`)});return h(d)};return{id:e.id,name:e.name??e.id,baseUrl:e.baseUrl,headers:e.headers,auth:e.auth,getModels:s,refreshModels:a?(o)=>(n??=(async()=>{try{let h=await o.store.read();if(h)r=h.models.filter((f)=>f.provider===e.id).map((f)=>f);if(!o.allowNetwork||o.signal?.aborted)return;let d=await a(o);if(o.signal?.aborted)return;r=d,await o.store.write({models:d,checkedAt:Date.now()})}finally{n=void 0}})(),n):void 0,filterModels:e.filterModels,stream:(o,h,d)=>l(o,(f)=>f.stream(o,h,d)),streamSimple:(o,h,d)=>l(o,(f)=>f.streamSimple(o,h,d))}}function vn(e,t){let r=t.input+t.cacheRead+t.cacheWrite,n=e.cost,a=-1;for(let c of e.cost.tiers??[])if(r>c.inputTokensAbove&&c.inputTokensAbove>a)n=c,a=c.inputTokensAbove;let s=t.cacheWrite1h??0,i=t.cacheWrite-s;return t.cost.input=n.input/1e6*t.input,t.cost.output=n.output/1e6*t.output,t.cost.cacheRead=n.cacheRead/1e6*t.cacheRead,t.cost.cacheWrite=(n.cacheWrite*i+n.input*2*s)/1e6,t.cost.total=t.cost.input+t.cost.output+t.cost.cacheRead+t.cost.cacheWrite,t.cost}var w=["off","minimal","low","medium","high","xhigh","max"];function T(e){if(!e.reasoning)return["off"];return w.filter((t)=>{let r=e.thinkingLevelMap?.[t];if(r===null)return!1;if(t==="xhigh"||t==="max")return r!==void 0;return!0})}function Yr(e,t){let r=T(e);if(r.includes(t))return t;let n=w.indexOf(t);if(n===-1)return r[0]??"off";for(let a=n;a<w.length;a++){let s=w[a];if(r.includes(s))return s}for(let a=n-1;a>=0;a--){let s=w[a];if(r.includes(s))return s}return r[0]??"off"}
-export{kc,Wr,Fm,be,vn,Yr};
+import{ja,mr}from"./chunk-v05rrxp5.js";var C=function(e,t){if(typeof e==="string"&&/^\.\.?\//.test(e))return e.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i,function(r,n,a,s,i){return n?t?".jsx":".js":a&&(!s||!i)?r:a+s+"."+i.toLowerCase()+"js"});return e},x=(e)=>import(C(e));function P(){return globalThis.process?.env}function A(){return{async env(e){let t=P()?.[e];return typeof t==="string"&&t.trim().length>0?t:void 0},async fileExists(e){try{let t=await x("node:fs/promises"),r=e;if(r.startsWith("~"))r=(await x("node:os")).homedir()+r.slice(1);return await t.access(r),!0}catch{return!1}}}}class Wu{credentials=new Map;chains=new Map;enqueue(e,t){let r=this.chains.get(e)??Promise.resolve(),n=(async()=>(await r.catch(()=>{}),t()))();return this.chains.set(e,n.catch(()=>{})),n}async read(e){return this.credentials.get(e)}async list(){return[...this.credentials].map(([e,t])=>({providerId:e,type:t.type}))}modify(e,t){return this.enqueue(e,async()=>{let r=this.credentials.get(e),n=await t(r);if(n!==void 0)this.credentials.set(e,n);return n??r})}delete(e){return this.enqueue(e,async()=>{this.credentials.delete(e)})}}class u extends Error{code;constructor(e,t,r){super(S(t,r?.cause),r);this.name="ModelsError",this.code=e}}function S(e,t){if(t===void 0||t===null)return e;let r=ja(t).trim();if(!r||e.includes(r))return e;return`${e}: ${r}`}async function v(e,t,r,n){let a=n?.env?K(r,n.env):r;if(n?.apiKey!==void 0&&e.auth.apiKey)return m(a,e.auth.apiKey,e.id,{type:"api_key",key:n.apiKey,env:n.env});let s=await q(t,e.id);if(s){if(s.type==="oauth"&&e.auth.oauth)return b(t,e.id,e.auth.oauth,s);if(s.type==="api_key"&&e.auth.apiKey){let i=n?.env?{...s,env:{...s.env,...n.env}}:s;return m(a,e.auth.apiKey,e.id,i)}return}return e.auth.apiKey?m(a,e.auth.apiKey,e.id,void 0):void 0}function K(e,t){return{env:async(r)=>t[r]||await e.env(r),fileExists:(r)=>e.fileExists(r)}}async function b(e,t,r,n){let a=n;if(Date.now()>=a.expires){let s;try{s=await e.modify(t,async(i)=>{if(i?.type!=="oauth")return;if(Date.now()<i.expires)return;try{return await r.refresh(i)}catch(c){throw new u("oauth",`OAuth refresh failed for ${t}`,{cause:c})}})}catch(i){if(i instanceof u)throw i;throw new u("auth",`Credential store modify failed for ${t}`,{cause:i})}if(s?.type!=="oauth")return;a=s}try{return{auth:await r.toAuth(a),source:"OAuth"}}catch(s){throw new u("oauth",`OAuth auth derivation failed for ${t}`,{cause:s})}}async function m(e,t,r,n){try{return await t.resolve({ctx:e,credential:n})}catch(a){throw new u("auth",`API key auth failed for provider ${r}`,{cause:a})}}async function q(e,t){try{return await e.read(t)}catch(r){throw new u("auth",`Credential store read failed for ${t}`,{cause:r})}}function E(e,t){return{role:"assistant",content:[],api:e.api,provider:e.provider,model:e.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:"error",errorMessage:t instanceof Error?t.message:String(t),timestamp:Date.now()}}function R(e){return typeof e.result==="function"}async function _(e,t){for await(let r of t)e.push(r);e.end(R(t)?await t.result():void 0)}function y(e,t){let r=new mr;return t().then((n)=>_(r,n)).catch((n)=>{let a=E(e,n);r.push({type:"error",reason:"error",error:a}),r.end(a)}),r}function yn(e){return{stream:(t,r,n)=>y(t,async()=>(await e()).stream(t,r,n)),streamSimple:(t,r,n)=>y(t,async()=>(await e()).streamSimple(t,r,n))}}class g{entries=new Map;async read(e){let t=this.entries.get(e);return t?structuredClone(t):void 0}async write(e,t){this.entries.set(e,structuredClone(t))}async delete(e){this.entries.delete(e)}}function k(e,t){if(!e&&!t)return;let r={...e};for(let[n,a]of Object.entries(t??{})){let s=n.toLowerCase();for(let i of Object.keys(r))if(i.toLowerCase()===s)delete r[i];r[n]=a}return r}class M{providers=new Map;credentials;modelsStore;authContext;constructor(e){this.credentials=e?.credentials??new Wu,this.modelsStore=e?.modelsStore??new g,this.authContext=e?.authContext??A()}setProvider(e){this.providers.set(e.id,e)}deleteProvider(e){this.providers.delete(e)}clearProviders(){this.providers.clear()}getProviders(){return Array.from(this.providers.values())}getProvider(e){return this.providers.get(e)}getModels(e){if(e!==void 0){let r=this.providers.get(e);if(!r)return[];try{return r.getModels()}catch{return[]}}let t=[];for(let r of this.providers.values())try{t.push(...r.getModels())}catch{}return t}getModel(e,t){return this.getModels(e).find((r)=>r.id===t)}async refresh(e={}){let t=e.allowNetwork??!0,r=new Map,n=Array.from(this.providers.values()).filter((a)=>a.refreshModels!==void 0);return await Promise.all(n.map(async(a)=>{if(e.signal?.aborted)return;let s={read:()=>this.modelsStore.read(a.id),write:(c)=>this.modelsStore.write(a.id,c),delete:()=>this.modelsStore.delete(a.id)},i;try{i=await this.readCredential(a.id);let c=await this.resolveRefreshCredential(a,i,t,e.signal);if(!c)return;await a.refreshModels({credential:c,store:s,allowNetwork:t,force:e.force,signal:e.signal})}catch(c){if(!e.signal?.aborted)r.set(a.id,c instanceof Error?c:new u("model_source",`Model refresh failed for ${a.id}`,{cause:c}));try{await a.refreshModels({credential:i,store:s,allowNetwork:!1,signal:e.signal})}catch{}}})),{aborted:e.signal?.aborted??!1,errors:r}}async resolveRefreshCredential(e,t,r,n){if(t?.type==="oauth"){let c=e.auth.oauth;if(!c)return;if(!r||Date.now()<t.expires)return t;if(n?.aborted)return;let p=await this.credentials.modify(e.id,async(l)=>{if(l?.type!=="oauth"||Date.now()<l.expires)return;return c.refresh(l,n)});return p?.type==="oauth"?p:void 0}let a=e.auth.apiKey;if(!a)return;let s=t?.type==="api_key"?t:void 0,i=await a.resolve({ctx:this.authContext,credential:s});if(!i)return;return{type:"api_key",key:i.auth.apiKey,env:i.env}}async readCredential(e){try{return await this.credentials.read(e)}catch(t){throw new u("auth",`Credential store read failed for ${e}`,{cause:t})}}async checkProviderAuth(e,t){if(t?.type==="oauth")return e.auth.oauth?{source:"OAuth",type:"oauth"}:void 0;let r=e.auth.apiKey;if(!r)return;if(r.check)try{return await r.check({ctx:this.authContext,credential:t?.type==="api_key"?t:void 0})}catch(a){throw new u("auth",`API key auth check failed for provider ${e.id}`,{cause:a})}let n=await v(e,this.credentials,this.authContext);return n?{source:n.source,type:"api_key"}:void 0}async checkAuth(e){let t=this.providers.get(e);if(!t)return;return this.checkProviderAuth(t,await this.readCredential(e))}async getAvailable(e){let t=e?[this.providers.get(e)].filter((n)=>n!==void 0):this.getProviders();return(await Promise.all(t.map(async(n)=>{let a=await this.readCredential(n.id);return{provider:n,credential:a,auth:await this.checkProviderAuth(n,a)}}))).flatMap(({provider:n,credential:a,auth:s})=>{if(!s)return[];let i=n.getModels();return n.filterModels?.(i,a)??i})}async getAuth(e,t){let r=typeof e==="string"?e:e.provider,n=this.providers.get(r);if(!n)return;let a=await v(n,this.credentials,this.authContext,t);if(!a||typeof e==="string"||!e.headers)return a;return{...a,auth:{...a.auth,headers:k(a.auth.headers,e.headers)}}}async login(e,t,r){let n=this.providers.get(e);if(!n)throw new u("provider",`Unknown provider: ${e}`);let a=t==="oauth"?n.auth.oauth:n.auth.apiKey;if(!a?.login)throw new u("auth",`${n.name} does not support ${t} login`);let s=await a.login(r);try{await this.credentials.modify(e,async()=>s)}catch(i){throw new u("auth",`Credential store modify failed for ${e}`,{cause:i})}return s}async logout(e){try{await this.credentials.delete(e)}catch(t){throw new u("auth",`Credential store delete failed for ${e}`,{cause:t})}}requireProvider(e){let t=this.providers.get(e.provider);if(!t)throw new u("provider",`Unknown provider: ${e.provider}`);return t}async applyAuth(e,t){this.requireProvider(e);let r=await this.getAuth(e,{apiKey:t?.apiKey,env:t?.env});if(!r)throw new u("auth",`Provider is not configured: ${e.provider}`);let n=r.auth,a=t?.apiKey??n.apiKey,s=k(n.headers,t?.headers);if(t?.transformHeaders)s=await t.transformHeaders(s??{});let i=r.env||t?.env?{...r.env??{},...t?.env??{}}:void 0,c=n.baseUrl?{...e,baseUrl:n.baseUrl}:e,{transformHeaders:p,...l}=t??{},o={...l,apiKey:a,headers:s,env:i};return{requestModel:c,requestOptions:o}}stream(e,t,r){return y(e,async()=>{let n=this.requireProvider(e),{requestModel:a,requestOptions:s}=await this.applyAuth(e,r);return n.stream(a,t,s)})}async complete(e,t,r){return this.stream(e,t,r).result()}streamSimple(e,t,r){return y(e,async()=>{let n=this.requireProvider(e),{requestModel:a,requestOptions:s}=await this.applyAuth(e,r);return n.streamSimple(a,t,s)})}async completeSimple(e,t,r){return this.streamSimple(e,t,r).result()}}function eA(e){return new M(e)}function Ze(e){let t=e.models,r=[],n,a=e.fetchModels,s=()=>{let o=[...t];for(let h of r){let d=o.findIndex((f)=>f.id===h.id);if(d>=0)o[d]=h;else o.push(h)}return o},i=typeof e.api.stream==="function"?e.api:void 0,c=i?void 0:e.api,p=(o)=>i??c?.[o.api],l=(o,h)=>{let d=p(o);if(!d)return y(o,async()=>{throw new u("stream",`Provider ${e.id} has no API implementation for "${o.api}"`)});return h(d)};return{id:e.id,name:e.name??e.id,baseUrl:e.baseUrl,headers:e.headers,auth:e.auth,getModels:s,refreshModels:a?(o)=>(n??=(async()=>{try{let h=await o.store.read();if(h)r=h.models.filter((f)=>f.provider===e.id).map((f)=>f);if(!o.allowNetwork||o.signal?.aborted)return;let d=await a(o);if(o.signal?.aborted)return;r=d,await o.store.write({models:d,checkedAt:Date.now()})}finally{n=void 0}})(),n):void 0,filterModels:e.filterModels,stream:(o,h,d)=>l(o,(f)=>f.stream(o,h,d)),streamSimple:(o,h,d)=>l(o,(f)=>f.streamSimple(o,h,d))}}function Gn(e,t){let r=t.input+t.cacheRead+t.cacheWrite,n=e.cost,a=-1;for(let c of e.cost.tiers??[])if(r>c.inputTokensAbove&&c.inputTokensAbove>a)n=c,a=c.inputTokensAbove;let s=t.cacheWrite1h??0,i=t.cacheWrite-s;return t.cost.input=n.input/1e6*t.input,t.cost.output=n.output/1e6*t.output,t.cost.cacheRead=n.cacheRead/1e6*t.cacheRead,t.cost.cacheWrite=(n.cacheWrite*i+n.input*2*s)/1e6,t.cost.total=t.cost.input+t.cost.output+t.cost.cacheRead+t.cost.cacheWrite,t.cost}var w=["off","minimal","low","medium","high","xhigh","max"];function T(e){if(!e.reasoning)return["off"];return w.filter((t)=>{let r=e.thinkingLevelMap?.[t];if(r===null)return!1;if(t==="xhigh"||t==="max")return r!==void 0;return!0})}function vn(e,t){let r=T(e);if(r.includes(t))return t;let n=w.indexOf(t);if(n===-1)return r[0]??"off";for(let a=n;a<w.length;a++){let s=w[a];if(r.includes(s))return s}for(let a=n-1;a>=0;a--){let s=w[a];if(r.includes(s))return s}return r[0]??"off"}
+export{Wu,yn,eA,Ze,Gn,vn};