@stacksjs/buddy 0.69.2 → 0.69.3

package/dist/chunk-jp1cpn4c.js

@@ -0,0 +1,2 @@
+// @bun
+import{Ba as LI,Ca as WI,Da as YI,Ea as fd,Fa as yd,Ga as JI,Ha as Vl,Ia as KI,Ja as II,Ka as xd,La as I1,Ma as PI,Na as Bl,Oa as EI,Pa as SI,Qa as DI,Ra as NI,Sa as FI,Ta as BI}from"./chunk-e9y3crm2.js";import{ac as kd,bc as xl,cc as l1,dc as dI,ec as T,fc as m}from"./chunk-7s1btaqf.js";import{hc as jl,kc as Cd,lc as id,nc as lI}from"./chunk-5ey9ff1q.js";import"./chunk-fcxvht52.js";import{Dc as fI}from"./chunk-2wv7ydnj.js";import"./chunk-pafhfx4f.js";import{Hc as V}from"./chunk-pm84yb18.js";var o=V((H1)=>{Object.defineProperty(H1,"__esModule",{value:!0});H1.resolveHttpAuthSchemeConfig=H1.resolveStsAuthConfig=H1.defaultSTSHttpAuthSchemeProvider=H1.defaultSTSHttpAuthSchemeParametersProvider=void 0;var Ld=m(),j1=kd(),Wd=O(),Yd=async(l,I,d)=>{return{operation:j1.getSmithyContext(I).operation,region:await j1.normalizeProvider(l.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()}};H1.defaultSTSHttpAuthSchemeParametersProvider=Yd;function Jd(l){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:l.region},propertiesExtractor:(I,d)=>({signingProperties:{config:I,context:d}})}}function Kd(l){return{schemeId:"smithy.api#noAuth"}}var Xd=(l)=>{let I=[];switch(l.operation){case"AssumeRoleWithWebIdentity":{I.push(Kd(l));break}default:I.push(Jd(l))}return I};H1.defaultSTSHttpAuthSchemeProvider=Xd;var Qd=(l)=>({...l,stsClientCtor:Wd.STSClient});H1.resolveStsAuthConfig=Qd;var Zd=(l)=>{let I=H1.resolveStsAuthConfig(l);return{...Ld.resolveAwsSdkSigV4Config(I)}};H1.resolveHttpAuthSchemeConfig=Zd});var s=V((f1)=>{Object.defineProperty(f1,"__esModule",{value:!0});f1.commonParams=f1.resolveClientEndpointParameters=void 0;var Hd=(l)=>{return{...l,useDualstackEndpoint:l.useDualstackEndpoint??!1,useFipsEndpoint:l.useFipsEndpoint??!1,useGlobalEndpoint:l.useGlobalEndpoint??!1,defaultSigningName:"sts"}};f1.resolveClientEndpointParameters=Hd;f1.commonParams={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}}});var ql=V((Nl)=>{Object.defineProperty(Nl,"__esModule",{value:!0});Nl.ruleSet=void 0;var p1="required",D="type",F="fn",q="argv",J="ref",O1=!1,n=!0,Y="booleanEquals",U="stringEquals",u1="sigv4",t1="sts",ll="us-east-1",r="endpoint",s1="https://sts.{Region}.{PartitionResult#dnsSuffix}",B="tree",X="error",u="getAttr",g1={[p1]:!1,[D]:"String"},p={[p1]:!0,default:!1,[D]:"Boolean"},dl={[J]:"Endpoint"},m1={[F]:"isSet",[q]:[{[J]:"Region"}]},G={[J]:"Region"},C1={[F]:"aws.partition",[q]:[G],assign:"PartitionResult"},Il={[J]:"UseFIPS"},Pl={[J]:"UseDualStack"},M={url:"https://sts.amazonaws.com",properties:{authSchemes:[{name:u1,signingName:t1,signingRegion:ll}]},headers:{}},_={},i1={conditions:[{[F]:U,[q]:[G,"aws-global"]}],[r]:M,[D]:r},El={[F]:Y,[q]:[Il,!0]},Sl={[F]:Y,[q]:[Pl,!0]},x1={[F]:u,[q]:[{[J]:"PartitionResult"},"supportsFIPS"]},Dl={[J]:"PartitionResult"},c1={[F]:Y,[q]:[!0,{[F]:u,[q]:[Dl,"supportsDualStack"]}]},e1=[{[F]:"isSet",[q]:[dl]}],o1=[El],n1=[Sl],bd={version:"1.0",parameters:{Region:g1,UseDualStack:p,UseFIPS:p,Endpoint:g1,UseGlobalEndpoint:p},rules:[{conditions:[{[F]:Y,[q]:[{[J]:"UseGlobalEndpoint"},n]},{[F]:"not",[q]:e1},m1,C1,{[F]:Y,[q]:[Il,O1]},{[F]:Y,[q]:[Pl,O1]}],rules:[{conditions:[{[F]:U,[q]:[G,"ap-northeast-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"ap-south-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"ap-southeast-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"ap-southeast-2"]}],endpoint:M,[D]:r},i1,{conditions:[{[F]:U,[q]:[G,"ca-central-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"eu-central-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"eu-north-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"eu-west-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"eu-west-2"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"eu-west-3"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"sa-east-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,ll]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"us-east-2"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"us-west-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"us-west-2"]}],endpoint:M,[D]:r},{endpoint:{url:s1,properties:{authSchemes:[{name:u1,signingName:t1,signingRegion:"{Region}"}]},headers:_},[D]:r}],[D]:B},{conditions:e1,rules:[{conditions:o1,error:"Invalid Configuration: FIPS and custom endpoint are not supported",[D]:X},{conditions:n1,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",[D]:X},{endpoint:{url:dl,properties:_,headers:_},[D]:r}],[D]:B},{conditions:[m1],rules:[{conditions:[C1],rules:[{conditions:[El,Sl],rules:[{conditions:[{[F]:Y,[q]:[n,x1]},c1],rules:[{endpoint:{url:"https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:_,headers:_},[D]:r}],[D]:B},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",[D]:X}],[D]:B},{conditions:o1,rules:[{conditions:[{[F]:Y,[q]:[x1,n]}],rules:[{conditions:[{[F]:U,[q]:[{[F]:u,[q]:[Dl,"name"]},"aws-us-gov"]}],endpoint:{url:"https://sts.{Region}.amazonaws.com",properties:_,headers:_},[D]:r},{endpoint:{url:"https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",properties:_,headers:_},[D]:r}],[D]:B},{error:"FIPS is enabled but this partition does not support FIPS",[D]:X}],[D]:B},{conditions:n1,rules:[{conditions:[c1],rules:[{endpoint:{url:"https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:_,headers:_},[D]:r}],[D]:B},{error:"DualStack is enabled but this partition does not support DualStack",[D]:X}],[D]:B},i1,{endpoint:{url:s1,properties:_,headers:_},[D]:r}],[D]:B}],[D]:B},{error:"Invalid Configuration: Missing Region",[D]:X}]};Nl.ruleSet=bd});var rl=V((vl)=>{Object.defineProperty(vl,"__esModule",{value:!0});vl.defaultEndpointResolver=void 0;var Od=yd(),t=fd(),sd=ql(),gd=new t.EndpointCache({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),md=(l,I={})=>{return gd.get(l,()=>t.resolveEndpoint(sd.ruleSet,{endpointParams:l,logger:I.logger}))};vl.defaultEndpointResolver=md;t.customEndpointFunctions.aws=Od.awsEndpointFunctions});var hl=V((Gl)=>{Object.defineProperty(Gl,"__esModule",{value:!0});Gl.getRuntimeConfig=void 0;var cd=m(),ed=l1(),od=T(),nd=xd(),Rl=id(),Ul=Cd(),pd=o(),ud=rl(),td=(l)=>{return{apiVersion:"2011-06-15",base64Decoder:l?.base64Decoder??Rl.fromBase64,base64Encoder:l?.base64Encoder??Rl.toBase64,disableHostPrefix:l?.disableHostPrefix??!1,endpointProvider:l?.endpointProvider??ud.defaultEndpointResolver,extensions:l?.extensions??[],httpAuthSchemeProvider:l?.httpAuthSchemeProvider??pd.defaultSTSHttpAuthSchemeProvider,httpAuthSchemes:l?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(I)=>I.getIdentityProvider("aws.auth#sigv4"),signer:new cd.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(I)=>I.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new ed.NoAuthSigner}],logger:l?.logger??new od.NoOpLogger,serviceId:l?.serviceId??"STS",urlParser:l?.urlParser??nd.parseUrl,utf8Decoder:l?.utf8Decoder??Ul.fromUtf8,utf8Encoder:l?.utf8Encoder??Ul.toUtf8}};Gl.getRuntimeConfig=td});var Wl=V((kl)=>{Object.defineProperty(kl,"__esModule",{value:!0});kl.getRuntimeConfig=void 0;var qI=dI(),vI=qI.__importDefault(EI()),_l=m(),Al=SI(),C=Vl(),wI=l1(),rI=DI(),Tl=Bl(),Q=II(),al=lI(),RI=NI(),UI=PI(),GI=hl(),MI=T(),hI=FI(),_I=T(),AI=(l)=>{_I.emitWarningIfUnsupportedVersion(process.version);let I=hI.resolveDefaultsModeConfig(l),d=()=>I().then(MI.loadConfigsForDefaultMode),E=GI.getRuntimeConfig(l);_l.emitWarningIfUnsupportedVersion(process.version);let P={profile:l?.profile};return{...E,...l,runtime:"node",defaultsMode:I,bodyLengthChecker:l?.bodyLengthChecker??RI.calculateBodyLength,defaultUserAgentProvider:l?.defaultUserAgentProvider??Al.createDefaultUserAgentProvider({serviceId:E.serviceId,clientVersion:vI.default.version}),httpAuthSchemes:l?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(v)=>v.getIdentityProvider("aws.auth#sigv4")||(async(N)=>await l.credentialDefaultProvider(N?.__config||{})()),signer:new _l.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(v)=>v.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new wI.NoAuthSigner}],maxAttempts:l?.maxAttempts??Q.loadConfig(Tl.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,l),region:l?.region??Q.loadConfig(C.NODE_REGION_CONFIG_OPTIONS,{...C.NODE_REGION_CONFIG_FILE_OPTIONS,...P}),requestHandler:al.NodeHttpHandler.create(l?.requestHandler??d),retryMode:l?.retryMode??Q.loadConfig({...Tl.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await d()).retryMode||UI.DEFAULT_RETRY_MODE},l),sha256:l?.sha256??rI.Hash.bind(null,"sha256"),streamCollector:l?.streamCollector??al.streamCollector,useDualstackEndpoint:l?.useDualstackEndpoint??Q.loadConfig(C.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,P),useFipsEndpoint:l?.useFipsEndpoint??Q.loadConfig(C.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,P),userAgentAppId:l?.userAgentAppId??Q.loadConfig(Al.NODE_APP_ID_CONFIG_OPTIONS,P)}};kl.getRuntimeConfig=AI});var Kl=V((Yl)=>{Object.defineProperty(Yl,"__esModule",{value:!0});Yl.resolveHttpAuthRuntimeConfig=Yl.getHttpAuthExtensionConfiguration=void 0;var TI=(l)=>{let{httpAuthSchemes:I,httpAuthSchemeProvider:d,credentials:E}=l;return{setHttpAuthScheme(P){let v=I.findIndex((N)=>N.schemeId===P.schemeId);if(v===-1)I.push(P);else I.splice(v,1,P)},httpAuthSchemes(){return I},setHttpAuthSchemeProvider(P){d=P},httpAuthSchemeProvider(){return d},setCredentials(P){E=P},credentials(){return E}}};Yl.getHttpAuthExtensionConfiguration=TI;var aI=(l)=>{return{httpAuthSchemes:l.httpAuthSchemes(),httpAuthSchemeProvider:l.httpAuthSchemeProvider(),credentials:l.credentials()}};Yl.resolveHttpAuthRuntimeConfig=aI});var bl=V((Hl)=>{Object.defineProperty(Hl,"__esModule",{value:!0});Hl.resolveRuntimeExtensions=void 0;var Xl=BI(),Ql=jl(),Zl=T(),$l=Kl(),i=(l)=>l,kI=(l,I)=>{let d={...i(Xl.getAwsRegionExtensionConfiguration(l)),...i(Zl.getDefaultExtensionConfiguration(l)),...i(Ql.getHttpHandlerExtensionConfiguration(l)),...i($l.getHttpAuthExtensionConfiguration(l))};return I.forEach((E)=>E.configure(d)),{...l,...Xl.resolveAwsRegionExtensionConfiguration(d),...Zl.resolveDefaultRuntimeConfig(d),...Ql.resolveHttpHandlerRuntimeConfig(d),...$l.resolveHttpAuthRuntimeConfig(d)}};Hl.resolveRuntimeExtensions=kI});var O=V((P1)=>{Object.defineProperty(P1,"__esModule",{value:!0});P1.STSClient=P1.__Client=void 0;var fl=LI(),XI=WI(),QI=YI(),yl=JI(),ZI=Vl(),d1=l1(),$I=KI(),jI=I1(),Ol=Bl(),gl=T();Object.defineProperty(P1,"__Client",{enumerable:!0,get:function(){return gl.Client}});var sl=o(),HI=s(),zI=Wl(),bI=bl();class ml extends gl.Client{config;constructor(...[l]){let I=zI.getRuntimeConfig(l||{}),d=HI.resolveClientEndpointParameters(I),E=yl.resolveUserAgentConfig(d),P=Ol.resolveRetryConfig(E),v=ZI.resolveRegionConfig(P),N=fl.resolveHostHeaderConfig(v),h=jI.resolveEndpointConfig(N),a=sl.resolveHttpAuthSchemeConfig(h),A=bI.resolveRuntimeExtensions(a,l?.extensions||[]);super(A);this.config=A,this.middlewareStack.use(yl.getUserAgentPlugin(this.config)),this.middlewareStack.use(Ol.getRetryPlugin(this.config)),this.middlewareStack.use($I.getContentLengthPlugin(this.config)),this.middlewareStack.use(fl.getHostHeaderPlugin(this.config)),this.middlewareStack.use(XI.getLoggerPlugin(this.config)),this.middlewareStack.use(QI.getRecursionDetectionPlugin(this.config)),this.middlewareStack.use(d1.getHttpAuthSchemeEndpointRuleSetPlugin(this.config,{httpAuthSchemeParametersProvider:sl.defaultSTSHttpAuthSchemeParametersProvider,identityProviderConfigProvider:async(K)=>new d1.DefaultIdentityProviderConfig({"aws.auth#sigv4":K.credentials})})),this.middlewareStack.use(d1.getHttpSigningPlugin(this.config))}destroy(){super.destroy()}}P1.STSClient=ml});var OP=V((pP,$1)=>{var{defineProperty:x,getOwnPropertyDescriptor:yI,getOwnPropertyNames:OI}=Object,sI=Object.prototype.hasOwnProperty,S=(l,I)=>x(l,"name",{value:I,configurable:!0}),gI=(l,I)=>{for(var d in I)x(l,d,{get:I[d],enumerable:!0})},W1=(l,I,d,E)=>{if(I&&typeof I==="object"||typeof I==="function"){for(let P of OI(I))if(!sI.call(l,P)&&P!==d)x(l,P,{get:()=>I[P],enumerable:!(E=yI(I,P))||E.enumerable})}return l},mI=(l,I,d)=>(W1(l,I,"default"),d&&W1(d,I,"default")),CI=(l)=>W1(x({},"__esModule",{value:!0}),l),J1={};gI(J1,{AssumeRoleCommand:()=>Q1,AssumeRoleResponseFilterSensitiveLog:()=>el,AssumeRoleWithWebIdentityCommand:()=>Z1,AssumeRoleWithWebIdentityRequestFilterSensitiveLog:()=>dd,AssumeRoleWithWebIdentityResponseFilterSensitiveLog:()=>Id,ClientInputEndpointParameters:()=>zP.ClientInputEndpointParameters,CredentialsFilterSensitiveLog:()=>K1,ExpiredTokenException:()=>ol,IDPCommunicationErrorException:()=>Pd,IDPRejectedClaimException:()=>tl,InvalidIdentityTokenException:()=>ld,MalformedPolicyDocumentException:()=>nl,PackedPolicyTooLargeException:()=>pl,RegionDisabledException:()=>ul,STS:()=>Ud,STSServiceException:()=>L,decorateDefaultCredentialProvider:()=>yP,getDefaultRoleAssumer:()=>Td,getDefaultRoleAssumerWithWebIdentity:()=>ad});$1.exports=CI(J1);mI(J1,O(),$1.exports);var iI=T(),xI=I1(),cI=xl(),eI=T(),oI=s(),cl=T(),nI=T(),L=class l extends nI.ServiceException{static{S(this,"STSServiceException")}constructor(I){super(I);Object.setPrototypeOf(this,l.prototype)}},K1=S((l)=>({...l,...l.SecretAccessKey&&{SecretAccessKey:cl.SENSITIVE_STRING}}),"CredentialsFilterSensitiveLog"),el=S((l)=>({...l,...l.Credentials&&{Credentials:K1(l.Credentials)}}),"AssumeRoleResponseFilterSensitiveLog"),ol=class l extends L{static{S(this,"ExpiredTokenException")}name="ExpiredTokenException";$fault="client";constructor(I){super({name:"ExpiredTokenException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},nl=class l extends L{static{S(this,"MalformedPolicyDocumentException")}name="MalformedPolicyDocumentException";$fault="client";constructor(I){super({name:"MalformedPolicyDocumentException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},pl=class l extends L{static{S(this,"PackedPolicyTooLargeException")}name="PackedPolicyTooLargeException";$fault="client";constructor(I){super({name:"PackedPolicyTooLargeException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},ul=class l extends L{static{S(this,"RegionDisabledException")}name="RegionDisabledException";$fault="client";constructor(I){super({name:"RegionDisabledException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},tl=class l extends L{static{S(this,"IDPRejectedClaimException")}name="IDPRejectedClaimException";$fault="client";constructor(I){super({name:"IDPRejectedClaimException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},ld=class l extends L{static{S(this,"InvalidIdentityTokenException")}name="InvalidIdentityTokenException";$fault="client";constructor(I){super({name:"InvalidIdentityTokenException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},dd=S((l)=>({...l,...l.WebIdentityToken&&{WebIdentityToken:cl.SENSITIVE_STRING}}),"AssumeRoleWithWebIdentityRequestFilterSensitiveLog"),Id=S((l)=>({...l,...l.Credentials&&{Credentials:K1(l.Credentials)}}),"AssumeRoleWithWebIdentityResponseFilterSensitiveLog"),Pd=class l extends L{static{S(this,"IDPCommunicationErrorException")}name="IDPCommunicationErrorException";$fault="client";constructor(I){super({name:"IDPCommunicationErrorException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},X1=m(),pI=jl(),w=T(),uI=S(async(l,I)=>{let d=qd,E;return E=Rd({...qP(l,I),[wd]:YP,[rd]:vd}),Fd(I,d,"/",void 0,E)},"se_AssumeRoleCommand"),tI=S(async(l,I)=>{let d=qd,E;return E=Rd({...vP(l,I),[wd]:JP,[rd]:vd}),Fd(I,d,"/",void 0,E)},"se_AssumeRoleWithWebIdentityCommand"),lP=S(async(l,I)=>{if(l.statusCode>=300)return Ed(l,I);let d=await X1.parseXmlBody(l.body,I),E={};return E=hP(d.AssumeRoleResult,I),{$metadata:W(l),...E}},"de_AssumeRoleCommand"),dP=S(async(l,I)=>{if(l.statusCode>=300)return Ed(l,I);let d=await X1.parseXmlBody(l.body,I),E={};return E=_P(d.AssumeRoleWithWebIdentityResult,I),{$metadata:W(l),...E}},"de_AssumeRoleWithWebIdentityCommand"),Ed=S(async(l,I)=>{let d={...l,body:await X1.parseXmlErrorBody(l.body,I)},E=KP(l,d.body);switch(E){case"ExpiredTokenException":case"com.amazonaws.sts#ExpiredTokenException":throw await IP(d,I);case"MalformedPolicyDocument":case"com.amazonaws.sts#MalformedPolicyDocumentException":throw await DP(d,I);case"PackedPolicyTooLarge":case"com.amazonaws.sts#PackedPolicyTooLargeException":throw await NP(d,I);case"RegionDisabledException":case"com.amazonaws.sts#RegionDisabledException":throw await FP(d,I);case"IDPCommunicationError":case"com.amazonaws.sts#IDPCommunicationErrorException":throw await PP(d,I);case"IDPRejectedClaim":case"com.amazonaws.sts#IDPRejectedClaimException":throw await EP(d,I);case"InvalidIdentityToken":case"com.amazonaws.sts#InvalidIdentityTokenException":throw await SP(d,I);default:let P=d.body;return WP({output:l,parsedBody:P.Error,errorCode:E})}},"de_CommandError"),IP=S(async(l,I)=>{let d=l.body,E=AP(d.Error,I),P=new ol({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_ExpiredTokenExceptionRes"),PP=S(async(l,I)=>{let d=l.body,E=TP(d.Error,I),P=new Pd({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_IDPCommunicationErrorExceptionRes"),EP=S(async(l,I)=>{let d=l.body,E=aP(d.Error,I),P=new tl({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_IDPRejectedClaimExceptionRes"),SP=S(async(l,I)=>{let d=l.body,E=VP(d.Error,I),P=new ld({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_InvalidIdentityTokenExceptionRes"),DP=S(async(l,I)=>{let d=l.body,E=BP(d.Error,I),P=new nl({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_MalformedPolicyDocumentExceptionRes"),NP=S(async(l,I)=>{let d=l.body,E=kP(d.Error,I),P=new pl({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_PackedPolicyTooLargeExceptionRes"),FP=S(async(l,I)=>{let d=l.body,E=LP(d.Error,I),P=new ul({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_RegionDisabledExceptionRes"),qP=S((l,I)=>{let d={};if(l[f]!=null)d[f]=l[f];if(l[y]!=null)d[y]=l[y];if(l[z]!=null){let E=Sd(l[z],I);if(l[z]?.length===0)d.PolicyArns=[];Object.entries(E).forEach(([P,v])=>{let N=`PolicyArns.${P}`;d[N]=v})}if(l[H]!=null)d[H]=l[H];if(l[j]!=null)d[j]=l[j];if(l[T1]!=null){let E=MP(l[T1],I);if(l[T1]?.length===0)d.Tags=[];Object.entries(E).forEach(([P,v])=>{let N=`Tags.${P}`;d[N]=v})}if(l[V1]!=null){let E=GP(l[V1],I);if(l[V1]?.length===0)d.TransitiveTagKeys=[];Object.entries(E).forEach(([P,v])=>{let N=`TransitiveTagKeys.${P}`;d[N]=v})}if(l[v1]!=null)d[v1]=l[v1];if(l[_1]!=null)d[_1]=l[_1];if(l[a1]!=null)d[a1]=l[a1];if(l[k]!=null)d[k]=l[k];if(l[R1]!=null){let E=RP(l[R1],I);if(l[R1]?.length===0)d.ProvidedContexts=[];Object.entries(E).forEach(([P,v])=>{let N=`ProvidedContexts.${P}`;d[N]=v})}return d},"se_AssumeRoleRequest"),vP=S((l,I)=>{let d={};if(l[f]!=null)d[f]=l[f];if(l[y]!=null)d[y]=l[y];if(l[k1]!=null)d[k1]=l[k1];if(l[U1]!=null)d[U1]=l[U1];if(l[z]!=null){let E=Sd(l[z],I);if(l[z]?.length===0)d.PolicyArns=[];Object.entries(E).forEach(([P,v])=>{let N=`PolicyArns.${P}`;d[N]=v})}if(l[H]!=null)d[H]=l[H];if(l[j]!=null)d[j]=l[j];return d},"se_AssumeRoleWithWebIdentityRequest"),Sd=S((l,I)=>{let d={},E=1;for(let P of l){if(P===null)continue;let v=wP(P,I);Object.entries(v).forEach(([N,h])=>{d[`member.${E}.${N}`]=h}),E++}return d},"se_policyDescriptorListType"),wP=S((l,I)=>{let d={};if(l[L1]!=null)d[L1]=l[L1];return d},"se_PolicyDescriptorType"),rP=S((l,I)=>{let d={};if(l[r1]!=null)d[r1]=l[r1];if(l[F1]!=null)d[F1]=l[F1];return d},"se_ProvidedContext"),RP=S((l,I)=>{let d={},E=1;for(let P of l){if(P===null)continue;let v=rP(P,I);Object.entries(v).forEach(([N,h])=>{d[`member.${E}.${N}`]=h}),E++}return d},"se_ProvidedContextsListType"),UP=S((l,I)=>{let d={};if(l[w1]!=null)d[w1]=l[w1];if(l[B1]!=null)d[B1]=l[B1];return d},"se_Tag"),GP=S((l,I)=>{let d={},E=1;for(let P of l){if(P===null)continue;d[`member.${E}`]=P,E++}return d},"se_tagKeyListType"),MP=S((l,I)=>{let d={},E=1;for(let P of l){if(P===null)continue;let v=UP(P,I);Object.entries(v).forEach(([N,h])=>{d[`member.${E}.${N}`]=h}),E++}return d},"se_tagListType"),Dd=S((l,I)=>{let d={};if(l[S1]!=null)d[S1]=w.expectString(l[S1]);if(l[D1]!=null)d[D1]=w.expectString(l[D1]);return d},"de_AssumedRoleUser"),hP=S((l,I)=>{let d={};if(l[$]!=null)d[$]=Nd(l[$],I);if(l[Z]!=null)d[Z]=Dd(l[Z],I);if(l[b]!=null)d[b]=w.strictParseInt32(l[b]);if(l[k]!=null)d[k]=w.expectString(l[k]);return d},"de_AssumeRoleResponse"),_P=S((l,I)=>{let d={};if(l[$]!=null)d[$]=Nd(l[$],I);if(l[h1]!=null)d[h1]=w.expectString(l[h1]);if(l[Z]!=null)d[Z]=Dd(l[Z],I);if(l[b]!=null)d[b]=w.strictParseInt32(l[b]);if(l[G1]!=null)d[G1]=w.expectString(l[G1]);if(l[N1]!=null)d[N1]=w.expectString(l[N1]);if(l[k]!=null)d[k]=w.expectString(l[k]);return d},"de_AssumeRoleWithWebIdentityResponse"),Nd=S((l,I)=>{let d={};if(l[E1]!=null)d[E1]=w.expectString(l[E1]);if(l[M1]!=null)d[M1]=w.expectString(l[M1]);if(l[A1]!=null)d[A1]=w.expectString(l[A1]);if(l[q1]!=null)d[q1]=w.expectNonNull(w.parseRfc3339DateTimeWithOffset(l[q1]));return d},"de_Credentials"),AP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_ExpiredTokenException"),TP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_IDPCommunicationErrorException"),aP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_IDPRejectedClaimException"),VP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_InvalidIdentityTokenException"),BP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_MalformedPolicyDocumentException"),kP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_PackedPolicyTooLargeException"),LP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_RegionDisabledException"),W=S((l)=>({httpStatusCode:l.statusCode,requestId:l.headers["x-amzn-requestid"]??l.headers["x-amzn-request-id"]??l.headers["x-amz-request-id"],extendedRequestId:l.headers["x-amz-id-2"],cfId:l.headers["x-amz-cf-id"]}),"deserializeMetadata"),WP=w.withBaseException(L),Fd=S(async(l,I,d,E,P)=>{let{hostname:v,protocol:N="https",port:h,path:a}=await l.endpoint(),A={protocol:N,hostname:v,port:h,method:"POST",path:a.endsWith("/")?a.slice(0,-1)+d:a+d,headers:I};if(E!==void 0)A.hostname=E;if(P!==void 0)A.body=P;return new pI.HttpRequest(A)},"buildHttpRpcRequest"),qd={"content-type":"application/x-www-form-urlencoded"},vd="2011-06-15",wd="Action",E1="AccessKeyId",YP="AssumeRole",S1="AssumedRoleId",Z="AssumedRoleUser",JP="AssumeRoleWithWebIdentity",D1="Arn",N1="Audience",$="Credentials",F1="ContextAssertion",j="DurationSeconds",q1="Expiration",v1="ExternalId",w1="Key",H="Policy",z="PolicyArns",r1="ProviderArn",R1="ProvidedContexts",U1="ProviderId",b="PackedPolicySize",G1="Provider",f="RoleArn",y="RoleSessionName",M1="SecretAccessKey",h1="SubjectFromWebIdentityToken",k="SourceIdentity",_1="SerialNumber",A1="SessionToken",T1="Tags",a1="TokenCode",V1="TransitiveTagKeys",rd="Version",B1="Value",k1="WebIdentityToken",L1="arn",R="message",Rd=S((l)=>Object.entries(l).map(([I,d])=>w.extendedEncodeURIComponent(I)+"="+w.extendedEncodeURIComponent(d)).join("&"),"buildFormUrlencodedString"),KP=S((l,I)=>{if(I.Error?.Code!==void 0)return I.Error.Code;if(l.statusCode==404)return"NotFound"},"loadQueryErrorCode"),Q1=class extends eI.Command.classBuilder().ep(oI.commonParams).m(function(l,I,d,E){return[cI.getSerdePlugin(d,this.serialize,this.deserialize),xI.getEndpointPlugin(d,l.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRole",{}).n("STSClient","AssumeRoleCommand").f(void 0,el).ser(uI).de(lP).build(){static{S(this,"AssumeRoleCommand")}},XP=I1(),QP=xl(),ZP=T(),$P=s(),Z1=class extends ZP.Command.classBuilder().ep($P.commonParams).m(function(l,I,d,E){return[QP.getSerdePlugin(d,this.serialize,this.deserialize),XP.getEndpointPlugin(d,l.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoleWithWebIdentity",{}).n("STSClient","AssumeRoleWithWebIdentityCommand").f(dd,Id).ser(tI).de(dP).build(){static{S(this,"AssumeRoleWithWebIdentityCommand")}},jP=O(),HP={AssumeRoleCommand:Q1,AssumeRoleWithWebIdentityCommand:Z1},Ud=class extends jP.STSClient{static{S(this,"STS")}};iI.createAggregatedClient(HP,Ud);var zP=s(),Y1=fI(),il="us-east-1",Gd=S((l)=>{if(typeof l?.Arn==="string"){let I=l.Arn.split(":");if(I.length>4&&I[4]!=="")return I[4]}return},"getAccountIdFromAssumedRoleUser"),Md=S(async(l,I,d)=>{let E=typeof l==="function"?await l():l,P=typeof I==="function"?await I():I;return d?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${E} (provider)`,`${P} (parent client)`,`${il} (STS default)`),E??P??il},"resolveRegion"),bP=S((l,I)=>{let d,E;return async(P,v)=>{if(E=P,!d){let{logger:K=l?.parentClientConfig?.logger,region:c,requestHandler:g=l?.parentClientConfig?.requestHandler,credentialProviderLogger:e}=l,Vd=await Md(c,l?.parentClientConfig?.region,e),Bd=!hd(g);d=new I({profile:l?.parentClientConfig?.profile,credentialDefaultProvider:()=>async()=>E,region:Vd,requestHandler:Bd?g:void 0,logger:K})}let{Credentials:N,AssumedRoleUser:h}=await d.send(new Q1(v));if(!N||!N.AccessKeyId||!N.SecretAccessKey)throw new Error(`Invalid response from STS.assumeRole call with role ${v.RoleArn}`);let a=Gd(h),A={accessKeyId:N.AccessKeyId,secretAccessKey:N.SecretAccessKey,sessionToken:N.SessionToken,expiration:N.Expiration,...N.CredentialScope&&{credentialScope:N.CredentialScope},...a&&{accountId:a}};return Y1.setCredentialFeature(A,"CREDENTIALS_STS_ASSUME_ROLE","i"),A}},"getDefaultRoleAssumer"),fP=S((l,I)=>{let d;return async(E)=>{if(!d){let{logger:a=l?.parentClientConfig?.logger,region:A,requestHandler:K=l?.parentClientConfig?.requestHandler,credentialProviderLogger:c}=l,g=await Md(A,l?.parentClientConfig?.region,c),e=!hd(K);d=new I({profile:l?.parentClientConfig?.profile,region:g,requestHandler:e?K:void 0,logger:a})}let{Credentials:P,AssumedRoleUser:v}=await d.send(new Z1(E));if(!P||!P.AccessKeyId||!P.SecretAccessKey)throw new Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${E.RoleArn}`);let N=Gd(v),h={accessKeyId:P.AccessKeyId,secretAccessKey:P.SecretAccessKey,sessionToken:P.SessionToken,expiration:P.Expiration,...P.CredentialScope&&{credentialScope:P.CredentialScope},...N&&{accountId:N}};if(N)Y1.setCredentialFeature(h,"RESOLVED_ACCOUNT_ID","T");return Y1.setCredentialFeature(h,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),h}},"getDefaultRoleAssumerWithWebIdentity"),hd=S((l)=>{return l?.metadata?.handlerProtocol==="h2"},"isH2"),_d=O(),Ad=S((l,I)=>{if(!I)return l;else return class d extends l{static{S(this,"CustomizableSTSClient")}constructor(E){super(E);for(let P of I)this.middlewareStack.use(P)}}},"getCustomizableStsClientCtor"),Td=S((l={},I)=>bP(l,Ad(_d.STSClient,I)),"getDefaultRoleAssumer"),ad=S((l={},I)=>fP(l,Ad(_d.STSClient,I)),"getDefaultRoleAssumerWithWebIdentity"),yP=S((l)=>(I)=>l({roleAssumer:Td(I),roleAssumerWithWebIdentity:ad(I),...I}),"decorateDefaultCredentialProvider")});export default OP();

package/dist/chunk-m6akavpb.js

@@ -0,0 +1,3 @@
+// @bun
+import{sc as I,tc as z,uc as R,xc as v,yc as A}from"./chunk-wvgaj0sz.js";import"./chunk-fcxvht52.js";import{Dc as oe}from"./chunk-2wv7ydnj.js";import{Ec as u}from"./chunk-pafhfx4f.js";import{Fc as S,Kc as D}from"./chunk-pm84yb18.js";var T=S(u(),1);var H=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string");var F=S(oe(),1);var x=S(u(),1);var U=300000,h="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var q=async(e,s={})=>{let{SSOOIDCClient:o}=await import("./chunk-qrzctsb0.js");return new o(Object.assign({},s.clientConfig??{},{region:e??s.clientConfig?.region,logger:s.clientConfig?.logger??s.parentClientConfig?.logger}))};var W=async(e,s,o={})=>{let{CreateTokenCommand:i}=await import("./chunk-qrzctsb0.js");return(await q(s,o)).send(new i({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))};var j=S(u(),1);var $=(e)=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new j.TokenProviderError(`Token is expired. ${h}`,!1)};var X=S(u(),1);var g=(e,s,o=!1)=>{if(typeof s==="undefined")throw new X.TokenProviderError(`Value not present for '${e}' in SSO Token${o?". Cannot refresh":""}. ${h}`,!1)};import{promises as Z}from"fs";var{writeFile:ee}=Z,J=(e,s)=>{let o=z(e),i=JSON.stringify(s,null,2);return ee(o,i)};var V=new Date(0),Y=(e={})=>async({callerClientConfig:s}={})=>{let o={...e,parentClientConfig:{...s,...e.parentClientConfig}};o.logger?.debug("@aws-sdk/token-providers - fromSso");let i=await A(o),r=I({profile:o.profile??s?.profile}),f=i[r];if(!f)throw new x.TokenProviderError(`Profile '${r}' could not be found in shared credentials file.`,!1);else if(!f.sso_session)throw new x.TokenProviderError(`Profile '${r}' is missing required property 'sso_session'.`);let l=f.sso_session,a=(await v(o))[l];if(!a)throw new x.TokenProviderError(`Sso session '${l}' could not be found in shared credentials file.`,!1);for(let n of["sso_start_url","sso_region"])if(!a[n])throw new x.TokenProviderError(`Sso session '${l}' is missing required property '${n}'.`,!1);let{sso_start_url:w,sso_region:t}=a,c;try{c=await R(l)}catch(n){throw new x.TokenProviderError(`The SSO session token associated with profile=${r} was not found or is invalid. ${h}`,!1)}g("accessToken",c.accessToken),g("expiresAt",c.expiresAt);let{accessToken:E,expiresAt:O}=c,p={token:E,expiration:new Date(O)};if(p.expiration.getTime()-Date.now()>U)return p;if(Date.now()-V.getTime()<30000)return $(p),p;g("clientId",c.clientId,!0),g("clientSecret",c.clientSecret,!0),g("refreshToken",c.refreshToken,!0);try{V.setTime(Date.now());let n=await W(c,t,o);g("accessToken",n.accessToken),g("expiresIn",n.expiresIn);let _=new Date(Date.now()+n.expiresIn*1000);try{await J(l,{...c,accessToken:n.accessToken,expiresAt:_.toISOString(),refreshToken:n.refreshToken})}catch(m){}return{token:n.accessToken,expiration:_}}catch(n){return $(p),p}};var k=S(u(),1);var N=!1,L=async({ssoStartUrl:e,ssoSession:s,ssoAccountId:o,ssoRegion:i,ssoRoleName:r,ssoClient:f,clientConfig:l,parentClientConfig:y,profile:a,logger:w})=>{let t,c="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let d=await Y({profile:a})();t={accessToken:d.token,expiresAt:new Date(d.expiration).toISOString()}}catch(d){throw new k.CredentialsProviderError(d.message,{tryNextLink:N,logger:w})}else try{t=await R(e)}catch(d){throw new k.CredentialsProviderError("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:N,logger:w})}if(new Date(t.expiresAt).getTime()-Date.now()<=0)throw new k.CredentialsProviderError("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:N,logger:w});let{accessToken:E}=t,{SSOClient:O,GetRoleCredentialsCommand:p}=await import("./chunk-ca4ny9cp.js"),n=f||new O(Object.assign({},l??{},{logger:l?.logger??y?.logger,region:l?.region??i})),_;try{_=await n.send(new p({accountId:o,roleName:r,accessToken:E}))}catch(d){throw new k.CredentialsProviderError(d,{tryNextLink:N,logger:w})}let{roleCredentials:{accessKeyId:m,secretAccessKey:C,sessionToken:M,expiration:G,credentialScope:K,accountId:b}={}}=_;if(!m||!C||!M||!G)throw new k.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:N,logger:w});let P={accessKeyId:m,secretAccessKey:C,sessionToken:M,expiration:new Date(G),...K&&{credentialScope:K},...b&&{accountId:b}};if(s)F.setCredentialFeature(P,"CREDENTIALS_SSO","s");else F.setCredentialFeature(P,"CREDENTIALS_SSO_LEGACY","u");return P};var B=S(u(),1),Q=(e,s)=>{let{sso_start_url:o,sso_account_id:i,sso_region:r,sso_role_name:f}=e;if(!o||!i||!r||!f)throw new B.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
+Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:s});return e};var Re=(e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:o,ssoAccountId:i,ssoRegion:r,ssoRoleName:f,ssoSession:l}=e,{ssoClient:y}=e,a=I({profile:e.profile??s?.profile});if(!o&&!i&&!r&&!f&&!l){let t=(await A(e))[a];if(!t)throw new T.CredentialsProviderError(`Profile ${a} was not found.`,{logger:e.logger});if(!H(t))throw new T.CredentialsProviderError(`Profile ${a} is not configured with SSO credentials.`,{logger:e.logger});if(t?.sso_session){let m=(await v(e))[t.sso_session],C=` configurations in profile ${a} and sso-session ${t.sso_session}`;if(r&&r!==m.sso_region)throw new T.CredentialsProviderError("Conflicting SSO region"+C,{tryNextLink:!1,logger:e.logger});if(o&&o!==m.sso_start_url)throw new T.CredentialsProviderError("Conflicting SSO start_url"+C,{tryNextLink:!1,logger:e.logger});t.sso_region=m.sso_region,t.sso_start_url=m.sso_start_url}let{sso_start_url:c,sso_account_id:E,sso_region:O,sso_role_name:p,sso_session:n}=Q(t,e.logger);return L({ssoStartUrl:c,ssoSession:n,ssoAccountId:E,ssoRegion:O,ssoRoleName:p,ssoClient:y,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,profile:a})}else if(!o||!i||!r||!f)throw new T.CredentialsProviderError('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});else return L({ssoStartUrl:o,ssoSession:l,ssoAccountId:i,ssoRegion:r,ssoRoleName:f,ssoClient:y,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,profile:a})};export{Q as validateSsoProfile,H as isSsoProfile,Re as fromSSO};

package/dist/chunk-n2rrwvk3.js

@@ -0,0 +1,6 @@
+// @bun
+import{Cb as g,Lb as w,_b as x}from"./chunk-fjy5503c.js";import{pc as b}from"./chunk-5ey9ff1q.js";import"./chunk-fcxvht52.js";import{Dc as v}from"./chunk-2wv7ydnj.js";import{Ec as i}from"./chunk-pafhfx4f.js";import{Fc as n}from"./chunk-pm84yb18.js";var E=n(v(),1);var d=n(i(),1);import _ from"fs/promises";var C=n(i(),1);var u="169.254.170.2",A="169.254.170.23",O="[fd00:ec2::23]",S=(e,a)=>{if(e.protocol==="https:")return;if(e.hostname===u||e.hostname===A||e.hostname===O)return;if(e.hostname.includes("[")){if(e.hostname==="[::1]"||e.hostname==="[0000:0000:0000:0000:0000:0000:0000:0001]")return}else{if(e.hostname==="localhost")return;let c=e.hostname.split("."),r=(t)=>{let s=parseInt(t,10);return 0<=s&&s<=255};if(c[0]==="127"&&r(c[1])&&r(c[2])&&r(c[3])&&c.length===4)return}throw new C.CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
+  - loopback CIDR 127.0.0.0/8 or [::1/128]
+  - ECS container host 169.254.170.2
+  - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:a})};var o=n(i(),1);var I=n(b(),1);function P(e){return new g({protocol:e.protocol,hostname:e.hostname,port:Number(e.port),path:e.pathname,query:Array.from(e.searchParams.entries()).reduce((a,[c,r])=>{return a[c]=r,a},{}),fragment:e.hash})}async function K(e,a){let r=await I.sdkStreamMixin(e.body).transformToString();if(e.statusCode===200){let t=JSON.parse(r);if(typeof t.AccessKeyId!=="string"||typeof t.SecretAccessKey!=="string"||typeof t.Token!=="string"||typeof t.Expiration!=="string")throw new o.CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:a});return{accessKeyId:t.AccessKeyId,secretAccessKey:t.SecretAccessKey,sessionToken:t.Token,expiration:w(t.Expiration)}}if(e.statusCode>=400&&e.statusCode<500){let t={};try{t=JSON.parse(r)}catch(s){}throw Object.assign(new o.CredentialsProviderError(`Server responded with status: ${e.statusCode}`,{logger:a}),{Code:t.Code,Message:t.Message})}throw new o.CredentialsProviderError(`Server responded with status: ${e.statusCode}`,{logger:a})}var T=(e,a,c)=>{return async()=>{for(let r=0;r<a;++r)try{return await e()}catch(t){await new Promise((s)=>setTimeout(s,c))}return await e()}};var B="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",D="http://169.254.170.2",M="AWS_CONTAINER_CREDENTIALS_FULL_URI",N="AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",j="AWS_CONTAINER_AUTHORIZATION_TOKEN",H=(e={})=>{e.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");let a,c=e.awsContainerCredentialsRelativeUri??process.env[B],r=e.awsContainerCredentialsFullUri??process.env[M],t=e.awsContainerAuthorizationToken??process.env[j],s=e.awsContainerAuthorizationTokenFile??process.env[N],m=e.logger?.constructor?.name==="NoOpLogger"||!e.logger?console.warn:e.logger.warn;if(c&&r)m("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),m("awsContainerCredentialsFullUri will take precedence.");if(t&&s)m("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),m("awsContainerAuthorizationToken will take precedence.");if(r)a=r;else if(c)a=`${D}${c}`;else throw new d.CredentialsProviderError(`No HTTP credential provider host provided.
+Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:e.logger});let y=new URL(a);S(y,e.logger);let R=new x({requestTimeout:e.timeout??1000,connectionTimeout:e.timeout??1000});return T(async()=>{let f=P(y);if(t)f.headers.Authorization=t;else if(s)f.headers.Authorization=(await _.readFile(s)).toString();try{let h=await R.handle(f);return K(h.response).then((p)=>E.setCredentialFeature(p,"CREDENTIALS_HTTP","z"))}catch(h){throw new d.CredentialsProviderError(String(h),{logger:e.logger})}},e.maxRetries??3,e.timeout??1000)};export{H as fromHttp};

package/dist/chunk-pafhfx4f.js

@@ -0,0 +1,2 @@
+import{Hc as $}from"./chunk-pm84yb18.js";var S=$((N,Z)=>{var{defineProperty:I,getOwnPropertyDescriptor:z,getOwnPropertyNames:A}=Object,D=Object.prototype.hasOwnProperty,H=(j,b)=>I(j,"name",{value:b,configurable:!0}),M=(j,b)=>{for(var F in b)I(j,F,{get:b[F],enumerable:!0})},J=(j,b,F,B)=>{if(b&&typeof b==="object"||typeof b==="function"){for(let G of A(b))if(!D.call(j,G)&&G!==F)I(j,G,{get:()=>b[G],enumerable:!(B=z(b,G))||B.enumerable})}return j},T=(j)=>J(I({},"__esModule",{value:!0}),j),Y={};M(Y,{CredentialsProviderError:()=>V,ProviderError:()=>K,TokenProviderError:()=>w,chain:()=>O,fromStatic:()=>q,memoize:()=>L});Z.exports=T(Y);var K=class j extends Error{constructor(b,F=!0){let B,G=!0;if(typeof F==="boolean")B=void 0,G=F;else if(F!=null&&typeof F==="object")B=F.logger,G=F.tryNextLink??!0;super(b);this.name="ProviderError",this.tryNextLink=G,Object.setPrototypeOf(this,j.prototype),B?.debug?.(`@smithy/property-provider ${G?"->":"(!)"} ${b}`)}static{H(this,"ProviderError")}static from(b,F=!0){return Object.assign(new this(b.message,F),b)}},V=class j extends K{constructor(b,F=!0){super(b,F);this.name="CredentialsProviderError",Object.setPrototypeOf(this,j.prototype)}static{H(this,"CredentialsProviderError")}},w=class j extends K{constructor(b,F=!0){super(b,F);this.name="TokenProviderError",Object.setPrototypeOf(this,j.prototype)}static{H(this,"TokenProviderError")}},O=H((...j)=>async()=>{if(j.length===0)throw new K("No providers in chain");let b;for(let F of j)try{return await F()}catch(B){if(b=B,B?.tryNextLink)continue;throw B}throw b},"chain"),q=H((j)=>()=>Promise.resolve(j),"fromStatic"),L=H((j,b,F)=>{let B,G,Q,U=!1,W=H(async()=>{if(!G)G=j();try{B=await G,Q=!0,U=!1}finally{G=void 0}return B},"coalesceProvider");if(b===void 0)return async(X)=>{if(!Q||X?.forceRefresh)B=await W();return B};return async(X)=>{if(!Q||X?.forceRefresh)B=await W();if(U)return B;if(F&&!F(B))return U=!0,B;if(b(B))return await W(),B;return B}},"memoize")});
+export{S as Ec};

package/dist/{chunk-f0ywgmn1.js → chunk-pm84yb18.js}

@@ -1,2 +1,2 @@
 var j=Object.create;var{getPrototypeOf:k,defineProperty:e,getOwnPropertyNames:h,getOwnPropertyDescriptor:l}=Object,i=Object.prototype.hasOwnProperty;var m=(a,b,c)=>{c=a!=null?j(k(a)):{};let d=b||!a||!a.__esModule?e(c,"default",{value:a,enumerable:!0}):c;for(let f of h(a))if(!i.call(d,f))e(d,f,{get:()=>a[f],enumerable:!0});return d},g=new WeakMap,n=(a)=>{var b=g.get(a),c;if(b)return b;if(b=e({},"__esModule",{value:!0}),a&&typeof a==="object"||typeof a==="function")h(a).map((d)=>!i.call(b,d)&&e(b,d,{get:()=>a[d],enumerable:!(c=l(a,d))||c.enumerable}));return g.set(a,b),b},o=(a,b)=>()=>(b||a((b={exports:{}}).exports,b),b.exports);var p=(a,b)=>{for(var c in b)e(a,c,{get:b[c],enumerable:!0,configurable:!0,set:(d)=>b[c]=()=>d})};var q=(a,b)=>()=>(a&&(b=a(a=0)),b);var r=import.meta.require;
-export{m as Qc,n as Rc,o as Sc,p as Tc,q as Uc,r as Vc};
+export{m as Fc,n as Gc,o as Hc,p as Ic,q as Jc,r as Kc};

package/dist/chunk-qrzctsb0.js

@@ -0,0 +1,2 @@
+// @bun
+import{Ba as nr,Ca as jr,Da as ar,Ea as Ir,Fa as vr,Ga as fr,Ha as Re,Ia as mr,Ja as wr,Ka as Rr,La as Ae,Ma as Cr,Na as Ee,Oa as Ar,Pa as Gr,Qa as Hr,Ra as Lr,Sa as Vr,Ta as Or}from"./chunk-e9y3crm2.js";import{ac as xe,bc as hr,cc as W,dc as kr,ec as E,fc as w}from"./chunk-7s1btaqf.js";import{hc as gr,kc as Sr,lc as Nr,nc as Tr}from"./chunk-5ey9ff1q.js";import"./chunk-fcxvht52.js";import"./chunk-2wv7ydnj.js";import"./chunk-pafhfx4f.js";import{Hc as d}from"./chunk-pm84yb18.js";var L=d((J)=>{Object.defineProperty(J,"__esModule",{value:!0});J.resolveHttpAuthSchemeConfig=J.defaultSSOOIDCHttpAuthSchemeProvider=J.defaultSSOOIDCHttpAuthSchemeParametersProvider=void 0;var ce=w(),z=xe(),oe=async(e,r,l)=>{return{operation:z.getSmithyContext(r).operation,region:await z.normalizeProvider(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()}};J.defaultSSOOIDCHttpAuthSchemeParametersProvider=oe;function ue(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sso-oauth",region:e.region},propertiesExtractor:(r,l)=>({signingProperties:{config:r,context:l}})}}function pe(e){return{schemeId:"smithy.api#noAuth"}}var te=(e)=>{let r=[];switch(e.operation){case"CreateToken":{r.push(pe(e));break}default:r.push(ue(e))}return r};J.defaultSSOOIDCHttpAuthSchemeProvider=te;var er=(e)=>{return{...ce.resolveAwsSdkSigV4Config(e)}};J.resolveHttpAuthSchemeConfig=er});var ee=d((p)=>{Object.defineProperty(p,"__esModule",{value:!0});p.ruleSet=void 0;var x="required",S="fn",N="argv",U="ref",Z=!0,$="isSet",k="booleanEquals",F="error",_="endpoint",s="tree",V="PartitionResult",b="getAttr",h={[x]:!1,type:"String"},g={[x]:!0,default:!1,type:"Boolean"},n={[U]:"Endpoint"},c={[S]:k,[N]:[{[U]:"UseFIPS"},!0]},o={[S]:k,[N]:[{[U]:"UseDualStack"},!0]},P={},j={[S]:b,[N]:[{[U]:V},"supportsFIPS"]},u={[U]:V},a={[S]:k,[N]:[!0,{[S]:b,[N]:[u,"supportsDualStack"]}]},f=[c],m=[o],O=[{[U]:"Region"}],ir={version:"1.0",parameters:{Region:h,UseDualStack:g,UseFIPS:g,Endpoint:h},rules:[{conditions:[{[S]:$,[N]:[n]}],rules:[{conditions:f,error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:F},{conditions:m,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:F},{endpoint:{url:n,properties:P,headers:P},type:_}],type:s},{conditions:[{[S]:$,[N]:O}],rules:[{conditions:[{[S]:"aws.partition",[N]:O,assign:V}],rules:[{conditions:[c,o],rules:[{conditions:[{[S]:k,[N]:[Z,j]},a],rules:[{endpoint:{url:"https://oidc-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:P,headers:P},type:_}],type:s},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:F}],type:s},{conditions:f,rules:[{conditions:[{[S]:k,[N]:[j,Z]}],rules:[{conditions:[{[S]:"stringEquals",[N]:[{[S]:b,[N]:[u,"name"]},"aws-us-gov"]}],endpoint:{url:"https://oidc.{Region}.amazonaws.com",properties:P,headers:P},type:_},{endpoint:{url:"https://oidc-fips.{Region}.{PartitionResult#dnsSuffix}",properties:P,headers:P},type:_}],type:s},{error:"FIPS is enabled but this partition does not support FIPS",type:F}],type:s},{conditions:m,rules:[{conditions:[a],rules:[{endpoint:{url:"https://oidc.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:P,headers:P},type:_}],type:s},{error:"DualStack is enabled but this partition does not support DualStack",type:F}],type:s},{endpoint:{url:"https://oidc.{Region}.{PartitionResult#dnsSuffix}",properties:P,headers:P},type:_}],type:s}],type:s},{error:"Invalid Configuration: Missing Region",type:F}]};p.ruleSet=ir});var ie=d((re)=>{Object.defineProperty(re,"__esModule",{value:!0});re.defaultEndpointResolver=void 0;var Dr=vr(),B=Ir(),qr=ee(),yr=new B.EndpointCache({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),Pr=(e,r={})=>{return yr.get(e,()=>B.resolveEndpoint(qr.ruleSet,{endpointParams:e,logger:r.logger}))};re.defaultEndpointResolver=Pr;B.customEndpointFunctions.aws=Dr.awsEndpointFunctions});var ye=d((De)=>{Object.defineProperty(De,"__esModule",{value:!0});De.getRuntimeConfig=void 0;var Er=w(),sr=W(),dr=E(),Fr=Rr(),Ie=Nr(),ve=Sr(),_r=L(),Ur=ie(),Mr=(e)=>{return{apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??Ie.fromBase64,base64Encoder:e?.base64Encoder??Ie.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Ur.defaultEndpointResolver,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??_r.defaultSSOOIDCHttpAuthSchemeProvider,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(r)=>r.getIdentityProvider("aws.auth#sigv4"),signer:new Er.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(r)=>r.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new sr.NoAuthSigner}],logger:e?.logger??new dr.NoOpLogger,serviceId:e?.serviceId??"SSO OIDC",urlParser:e?.urlParser??Fr.parseUrl,utf8Decoder:e?.utf8Decoder??ve.fromUtf8,utf8Encoder:e?.utf8Encoder??ve.toUtf8}};De.getRuntimeConfig=Mr});var Fe=d((se)=>{Object.defineProperty(se,"__esModule",{value:!0});se.getRuntimeConfig=void 0;var br=kr(),Br=br.__importDefault(Ar()),Wr=w(),Pe=Gr(),C=Re(),Yr=Hr(),Se=Ee(),M=wr(),Ne=Tr(),Kr=Lr(),Xr=Cr(),zr=ye(),Jr=E(),Qr=Vr(),Zr=E(),$r=(e)=>{Zr.emitWarningIfUnsupportedVersion(process.version);let r=Qr.resolveDefaultsModeConfig(e),l=()=>r().then(Jr.loadConfigsForDefaultMode),v=zr.getRuntimeConfig(e);Wr.emitWarningIfUnsupportedVersion(process.version);let I={profile:e?.profile};return{...v,...e,runtime:"node",defaultsMode:r,bodyLengthChecker:e?.bodyLengthChecker??Kr.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??Pe.createDefaultUserAgentProvider({serviceId:v.serviceId,clientVersion:Br.default.version}),maxAttempts:e?.maxAttempts??M.loadConfig(Se.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??M.loadConfig(C.NODE_REGION_CONFIG_OPTIONS,{...C.NODE_REGION_CONFIG_FILE_OPTIONS,...I}),requestHandler:Ne.NodeHttpHandler.create(e?.requestHandler??l),retryMode:e?.retryMode??M.loadConfig({...Se.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await l()).retryMode||Xr.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??Yr.Hash.bind(null,"sha256"),streamCollector:e?.streamCollector??Ne.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??M.loadConfig(C.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,I),useFipsEndpoint:e?.useFipsEndpoint??M.loadConfig(C.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,I),userAgentAppId:e?.userAgentAppId??M.loadConfig(Pe.NODE_APP_ID_CONFIG_OPTIONS,I)}};se.getRuntimeConfig=$r});var Yl=d((Zl,ae)=>{var{defineProperty:G,getOwnPropertyDescriptor:xr,getOwnPropertyNames:cr}=Object,or=Object.prototype.hasOwnProperty,D=(e,r)=>G(e,"name",{value:r,configurable:!0}),ur=(e,r)=>{for(var l in r)G(e,l,{get:r[l],enumerable:!0})},pr=(e,r,l,v)=>{if(r&&typeof r==="object"||typeof r==="function"){for(let I of cr(r))if(!or.call(e,I)&&I!==l)G(e,I,{get:()=>r[I],enumerable:!(v=xr(r,I))||v.enumerable})}return e},tr=(e)=>pr(G({},"__esModule",{value:!0}),e),Ge={};ur(Ge,{$Command:()=>Ve.Command,AccessDeniedException:()=>be,AuthorizationPendingException:()=>Be,CreateTokenCommand:()=>ne,CreateTokenRequestFilterSensitiveLog:()=>We,CreateTokenResponseFilterSensitiveLog:()=>Ye,ExpiredTokenException:()=>Ke,InternalServerException:()=>Xe,InvalidClientException:()=>ze,InvalidGrantException:()=>Je,InvalidRequestException:()=>Qe,InvalidScopeException:()=>Ze,SSOOIDC:()=>je,SSOOIDCClient:()=>Le,SSOOIDCServiceException:()=>y,SlowDownException:()=>$e,UnauthorizedClientException:()=>he,UnsupportedGrantTypeException:()=>ge,__Client:()=>He.Client});ae.exports=tr(Ge);var _e=nr(),el=jr(),rl=ar(),Ue=fr(),ll=Re(),Y=W(),il=mr(),Il=Ae(),Me=Ee(),He=E(),Te=L(),vl=D((e)=>{return{...e,useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"sso-oauth"}},"resolveClientEndpointParameters"),Dl={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},ql=Fe(),ke=Or(),we=gr(),Ce=E(),yl=D((e)=>{let{httpAuthSchemes:r,httpAuthSchemeProvider:l,credentials:v}=e;return{setHttpAuthScheme(I){let q=r.findIndex((H)=>H.schemeId===I.schemeId);if(q===-1)r.push(I);else r.splice(q,1,I)},httpAuthSchemes(){return r},setHttpAuthSchemeProvider(I){l=I},httpAuthSchemeProvider(){return l},setCredentials(I){v=I},credentials(){return v}}},"getHttpAuthExtensionConfiguration"),Pl=D((e)=>{return{httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}},"resolveHttpAuthRuntimeConfig"),A=D((e)=>e,"asPartial"),Sl=D((e,r)=>{let l={...A(ke.getAwsRegionExtensionConfiguration(e)),...A(Ce.getDefaultExtensionConfiguration(e)),...A(we.getHttpHandlerExtensionConfiguration(e)),...A(yl(e))};return r.forEach((v)=>v.configure(l)),{...e,...ke.resolveAwsRegionExtensionConfiguration(l),...Ce.resolveDefaultRuntimeConfig(l),...we.resolveHttpHandlerRuntimeConfig(l),...Pl(l)}},"resolveRuntimeExtensions"),Le=class extends He.Client{static{D(this,"SSOOIDCClient")}config;constructor(...[e]){let r=ql.getRuntimeConfig(e||{}),l=vl(r),v=Ue.resolveUserAgentConfig(l),I=Me.resolveRetryConfig(v),q=ll.resolveRegionConfig(I),H=_e.resolveHostHeaderConfig(q),fe=Il.resolveEndpointConfig(H),me=Te.resolveHttpAuthSchemeConfig(fe),X=Sl(me,e?.extensions||[]);super(X);this.config=X,this.middlewareStack.use(Ue.getUserAgentPlugin(this.config)),this.middlewareStack.use(Me.getRetryPlugin(this.config)),this.middlewareStack.use(il.getContentLengthPlugin(this.config)),this.middlewareStack.use(_e.getHostHeaderPlugin(this.config)),this.middlewareStack.use(el.getLoggerPlugin(this.config)),this.middlewareStack.use(rl.getRecursionDetectionPlugin(this.config)),this.middlewareStack.use(Y.getHttpAuthSchemeEndpointRuleSetPlugin(this.config,{httpAuthSchemeParametersProvider:Te.defaultSSOOIDCHttpAuthSchemeParametersProvider,identityProviderConfigProvider:async(Oe)=>new Y.DefaultIdentityProviderConfig({"aws.auth#sigv4":Oe.credentials})})),this.middlewareStack.use(Y.getHttpSigningPlugin(this.config))}destroy(){super.destroy()}},Nl=E(),Rl=Ae(),El=hr(),Ve=E(),T=E(),sl=E(),y=class e extends sl.ServiceException{static{D(this,"SSOOIDCServiceException")}constructor(r){super(r);Object.setPrototypeOf(this,e.prototype)}},be=class e extends y{static{D(this,"AccessDeniedException")}name="AccessDeniedException";$fault="client";error;error_description;constructor(r){super({name:"AccessDeniedException",$fault:"client",...r});Object.setPrototypeOf(this,e.prototype),this.error=r.error,this.error_description=r.error_description}},Be=class e extends y{static{D(this,"AuthorizationPendingException")}name="AuthorizationPendingException";$fault="client";error;error_description;constructor(r){super({name:"AuthorizationPendingException",$fault:"client",...r});Object.setPrototypeOf(this,e.prototype),this.error=r.error,this.error_description=r.error_description}},We=D((e)=>({...e,...e.clientSecret&&{clientSecret:T.SENSITIVE_STRING},...e.refreshToken&&{refreshToken:T.SENSITIVE_STRING},...e.codeVerifier&&{codeVerifier:T.SENSITIVE_STRING}}),"CreateTokenRequestFilterSensitiveLog"),Ye=D((e)=>({...e,...e.accessToken&&{accessToken:T.SENSITIVE_STRING},...e.refreshToken&&{refreshToken:T.SENSITIVE_STRING},...e.idToken&&{idToken:T.SENSITIVE_STRING}}),"CreateTokenResponseFilterSensitiveLog"),Ke=class e extends y{static{D(this,"ExpiredTokenException")}name="ExpiredTokenException";$fault="client";error;error_description;constructor(r){super({name:"ExpiredTokenException",$fault:"client",...r});Object.setPrototypeOf(this,e.prototype),this.error=r.error,this.error_description=r.error_description}},Xe=class e extends y{static{D(this,"InternalServerException")}name="InternalServerException";$fault="server";error;error_description;constructor(r){super({name:"InternalServerException",$fault:"server",...r});Object.setPrototypeOf(this,e.prototype),this.error=r.error,this.error_description=r.error_description}},ze=class e extends y{static{D(this,"InvalidClientException")}name="InvalidClientException";$fault="client";error;error_description;constructor(r){super({name:"InvalidClientException",$fault:"client",...r});Object.setPrototypeOf(this,e.prototype),this.error=r.error,this.error_description=r.error_description}},Je=class e extends y{static{D(this,"InvalidGrantException")}name="InvalidGrantException";$fault="client";error;error_description;constructor(r){super({name:"InvalidGrantException",$fault:"client",...r});Object.setPrototypeOf(this,e.prototype),this.error=r.error,this.error_description=r.error_description}},Qe=class e extends y{static{D(this,"InvalidRequestException")}name="InvalidRequestException";$fault="client";error;error_description;constructor(r){super({name:"InvalidRequestException",$fault:"client",...r});Object.setPrototypeOf(this,e.prototype),this.error=r.error,this.error_description=r.error_description}},Ze=class e extends y{static{D(this,"InvalidScopeException")}name="InvalidScopeException";$fault="client";error;error_description;constructor(r){super({name:"InvalidScopeException",$fault:"client",...r});Object.setPrototypeOf(this,e.prototype),this.error=r.error,this.error_description=r.error_description}},$e=class e extends y{static{D(this,"SlowDownException")}name="SlowDownException";$fault="client";error;error_description;constructor(r){super({name:"SlowDownException",$fault:"client",...r});Object.setPrototypeOf(this,e.prototype),this.error=r.error,this.error_description=r.error_description}},he=class e extends y{static{D(this,"UnauthorizedClientException")}name="UnauthorizedClientException";$fault="client";error;error_description;constructor(r){super({name:"UnauthorizedClientException",$fault:"client",...r});Object.setPrototypeOf(this,e.prototype),this.error=r.error,this.error_description=r.error_description}},ge=class e extends y{static{D(this,"UnsupportedGrantTypeException")}name="UnsupportedGrantTypeException";$fault="client";error;error_description;constructor(r){super({name:"UnsupportedGrantTypeException",$fault:"client",...r});Object.setPrototypeOf(this,e.prototype),this.error=r.error,this.error_description=r.error_description}},K=w(),dl=W(),i=E(),Fl=D(async(e,r)=>{let l=dl.requestBuilder(e,r),v={"content-type":"application/json"};l.bp("/token");let I;return I=JSON.stringify(i.take(e,{clientId:[],clientSecret:[],code:[],codeVerifier:[],deviceCode:[],grantType:[],redirectUri:[],refreshToken:[],scope:(q)=>i._json(q)})),l.m("POST").h(v).b(I),l.build()},"se_CreateTokenCommand"),_l=D(async(e,r)=>{if(e.statusCode!==200&&e.statusCode>=300)return Ul(e,r);let l=i.map({$metadata:R(e)}),v=i.expectNonNull(i.expectObject(await K.parseJsonBody(e.body,r)),"body"),I=i.take(v,{accessToken:i.expectString,expiresIn:i.expectInt32,idToken:i.expectString,refreshToken:i.expectString,tokenType:i.expectString});return Object.assign(l,I),l},"de_CreateTokenCommand"),Ul=D(async(e,r)=>{let l={...e,body:await K.parseJsonErrorBody(e.body,r)},v=K.loadRestJsonErrorCode(e,l.body);switch(v){case"AccessDeniedException":case"com.amazonaws.ssooidc#AccessDeniedException":throw await Tl(l,r);case"AuthorizationPendingException":case"com.amazonaws.ssooidc#AuthorizationPendingException":throw await kl(l,r);case"ExpiredTokenException":case"com.amazonaws.ssooidc#ExpiredTokenException":throw await wl(l,r);case"InternalServerException":case"com.amazonaws.ssooidc#InternalServerException":throw await Cl(l,r);case"InvalidClientException":case"com.amazonaws.ssooidc#InvalidClientException":throw await Al(l,r);case"InvalidGrantException":case"com.amazonaws.ssooidc#InvalidGrantException":throw await Gl(l,r);case"InvalidRequestException":case"com.amazonaws.ssooidc#InvalidRequestException":throw await Hl(l,r);case"InvalidScopeException":case"com.amazonaws.ssooidc#InvalidScopeException":throw await Ll(l,r);case"SlowDownException":case"com.amazonaws.ssooidc#SlowDownException":throw await Vl(l,r);case"UnauthorizedClientException":case"com.amazonaws.ssooidc#UnauthorizedClientException":throw await bl(l,r);case"UnsupportedGrantTypeException":case"com.amazonaws.ssooidc#UnsupportedGrantTypeException":throw await Bl(l,r);default:let I=l.body;return Ml({output:e,parsedBody:I,errorCode:v})}},"de_CommandError"),Ml=i.withBaseException(y),Tl=D(async(e,r)=>{let l=i.map({}),v=e.body,I=i.take(v,{error:i.expectString,error_description:i.expectString});Object.assign(l,I);let q=new be({$metadata:R(e),...l});return i.decorateServiceException(q,e.body)},"de_AccessDeniedExceptionRes"),kl=D(async(e,r)=>{let l=i.map({}),v=e.body,I=i.take(v,{error:i.expectString,error_description:i.expectString});Object.assign(l,I);let q=new Be({$metadata:R(e),...l});return i.decorateServiceException(q,e.body)},"de_AuthorizationPendingExceptionRes"),wl=D(async(e,r)=>{let l=i.map({}),v=e.body,I=i.take(v,{error:i.expectString,error_description:i.expectString});Object.assign(l,I);let q=new Ke({$metadata:R(e),...l});return i.decorateServiceException(q,e.body)},"de_ExpiredTokenExceptionRes"),Cl=D(async(e,r)=>{let l=i.map({}),v=e.body,I=i.take(v,{error:i.expectString,error_description:i.expectString});Object.assign(l,I);let q=new Xe({$metadata:R(e),...l});return i.decorateServiceException(q,e.body)},"de_InternalServerExceptionRes"),Al=D(async(e,r)=>{let l=i.map({}),v=e.body,I=i.take(v,{error:i.expectString,error_description:i.expectString});Object.assign(l,I);let q=new ze({$metadata:R(e),...l});return i.decorateServiceException(q,e.body)},"de_InvalidClientExceptionRes"),Gl=D(async(e,r)=>{let l=i.map({}),v=e.body,I=i.take(v,{error:i.expectString,error_description:i.expectString});Object.assign(l,I);let q=new Je({$metadata:R(e),...l});return i.decorateServiceException(q,e.body)},"de_InvalidGrantExceptionRes"),Hl=D(async(e,r)=>{let l=i.map({}),v=e.body,I=i.take(v,{error:i.expectString,error_description:i.expectString});Object.assign(l,I);let q=new Qe({$metadata:R(e),...l});return i.decorateServiceException(q,e.body)},"de_InvalidRequestExceptionRes"),Ll=D(async(e,r)=>{let l=i.map({}),v=e.body,I=i.take(v,{error:i.expectString,error_description:i.expectString});Object.assign(l,I);let q=new Ze({$metadata:R(e),...l});return i.decorateServiceException(q,e.body)},"de_InvalidScopeExceptionRes"),Vl=D(async(e,r)=>{let l=i.map({}),v=e.body,I=i.take(v,{error:i.expectString,error_description:i.expectString});Object.assign(l,I);let q=new $e({$metadata:R(e),...l});return i.decorateServiceException(q,e.body)},"de_SlowDownExceptionRes"),bl=D(async(e,r)=>{let l=i.map({}),v=e.body,I=i.take(v,{error:i.expectString,error_description:i.expectString});Object.assign(l,I);let q=new he({$metadata:R(e),...l});return i.decorateServiceException(q,e.body)},"de_UnauthorizedClientExceptionRes"),Bl=D(async(e,r)=>{let l=i.map({}),v=e.body,I=i.take(v,{error:i.expectString,error_description:i.expectString});Object.assign(l,I);let q=new ge({$metadata:R(e),...l});return i.decorateServiceException(q,e.body)},"de_UnsupportedGrantTypeExceptionRes"),R=D((e)=>({httpStatusCode:e.statusCode,requestId:e.headers["x-amzn-requestid"]??e.headers["x-amzn-request-id"]??e.headers["x-amz-request-id"],extendedRequestId:e.headers["x-amz-id-2"],cfId:e.headers["x-amz-cf-id"]}),"deserializeMetadata"),ne=class extends Ve.Command.classBuilder().ep(Dl).m(function(e,r,l,v){return[El.getSerdePlugin(l,this.serialize,this.deserialize),Rl.getEndpointPlugin(l,e.getEndpointParameterInstructions())]}).s("AWSSSOOIDCService","CreateToken",{}).n("SSOOIDCClient","CreateTokenCommand").f(We,Ye).ser(Fl).de(_l).build(){static{D(this,"CreateTokenCommand")}},Wl={CreateTokenCommand:ne},je=class extends Le{static{D(this,"SSOOIDC")}};Nl.createAggregatedClient(Wl,je)});export default Yl();

package/dist/chunk-rkpdhpd4.js

@@ -0,0 +1,2 @@
+// @bun
+import{sc as A,yc as E}from"./chunk-wvgaj0sz.js";import"./chunk-fcxvht52.js";import{Dc as K}from"./chunk-2wv7ydnj.js";import{Ec as T}from"./chunk-pafhfx4f.js";import{Fc as w}from"./chunk-pm84yb18.js";var o=w(T(),1);import{exec as y}from"child_process";import{promisify as I}from"util";var S=w(K(),1),x=(c,n,e)=>{if(n.Version!==1)throw Error(`Profile ${c} credential_process did not return Version 1.`);if(n.AccessKeyId===void 0||n.SecretAccessKey===void 0)throw Error(`Profile ${c} credential_process returned invalid credentials.`);if(n.Expiration){let i=new Date;if(new Date(n.Expiration)<i)throw Error(`Profile ${c} credential_process returned expired credentials.`)}let s=n.AccountId;if(!s&&e?.[c]?.aws_account_id)s=e[c].aws_account_id;let t={accessKeyId:n.AccessKeyId,secretAccessKey:n.SecretAccessKey,...n.SessionToken&&{sessionToken:n.SessionToken},...n.Expiration&&{expiration:new Date(n.Expiration)},...n.CredentialScope&&{credentialScope:n.CredentialScope},...s&&{accountId:s}};return S.setCredentialFeature(t,"CREDENTIALS_PROCESS","w"),t};var _=async(c,n,e)=>{let s=n[c];if(n[c]){let t=s.credential_process;if(t!==void 0){let i=I(y);try{let{stdout:r}=await i(t),u;try{u=JSON.parse(r.trim())}catch{throw Error(`Profile ${c} credential_process returned invalid JSON.`)}return x(c,u,n)}catch(r){throw new o.CredentialsProviderError(r.message,{logger:e})}}else throw new o.CredentialsProviderError(`Profile ${c} did not contain credential_process.`,{logger:e})}else throw new o.CredentialsProviderError(`Profile ${c} could not be found in shared credentials file.`,{logger:e})};var F=(c={})=>async({callerClientConfig:n}={})=>{c.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");let e=await E(c);return _(A({profile:c.profile??n?.profile}),e,c.logger)};export{F as fromProcess};