@stacksjs/buddy 0.69.2 → 0.70.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@stacksjs/buddy",
   "type": "module",
-  "version": "0.69.2",
+  "version": "0.70.0",
   "description": "Meet Buddy. The Stacks runtime.",
   "author": "Chris Breuer",
   "contributors": ["Chris Breuer <chris@stacksjs.org>"],
@@ -71,52 +71,52 @@
     "prepublishOnly": "bun run build && bun run compile:all"
   },
   "dependencies": {
-    "@stacksjs/actions": "0.69.2",
-    "@stacksjs/ai": "0.69.2",
-    "@stacksjs/alias": "0.69.2",
-    "@stacksjs/arrays": "0.69.2",
-    "@stacksjs/auth": "0.69.2",
-    "@stacksjs/build": "0.69.2",
-    "@stacksjs/cache": "0.69.2",
-    "@stacksjs/cli": "0.69.2",
-    "@stacksjs/cloud": "0.69.2",
-    "@stacksjs/collections": "0.69.2",
-    "@stacksjs/config": "0.69.2",
-    "@stacksjs/database": "0.69.2",
-    "@stacksjs/desktop": "0.69.2",
-    "@stacksjs/development": "0.69.2",
-    "@stacksjs/dns": "0.69.2",
-    "@stacksjs/docs": "0.69.2",
-    "@stacksjs/email": "0.69.2",
-    "@stacksjs/enums": "0.69.2",
-    "@stacksjs/error-handling": "0.69.2",
-    "@stacksjs/events": "0.69.2",
-    "@stacksjs/faker": "0.69.2",
-    "@stacksjs/git": "0.69.2",
-    "@stacksjs/health": "0.69.2",
-    "@stacksjs/lint": "0.69.2",
-    "@stacksjs/logging": "0.69.2",
-    "@stacksjs/notifications": "0.69.2",
-    "@stacksjs/objects": "0.69.2",
-    "@stacksjs/orm": "0.69.2",
-    "@stacksjs/path": "0.69.2",
-    "@stacksjs/payments": "0.69.2",
-    "@stacksjs/realtime": "0.69.2",
-    "@stacksjs/router": "0.69.2",
-    "@stacksjs/search-engine": "0.69.2",
-    "@stacksjs/security": "0.69.2",
-    "@stacksjs/server": "0.69.2",
-    "@stacksjs/storage": "0.69.2",
-    "@stacksjs/strings": "0.69.2",
-    "@stacksjs/testing": "0.69.2",
-    "@stacksjs/tunnel": "0.69.2",
-    "@stacksjs/types": "0.69.2",
-    "@stacksjs/ui": "0.69.2",
-    "@stacksjs/utils": "0.69.2",
-    "@stacksjs/validation": "0.69.2"
+    "@stacksjs/actions": "0.70.0",
+    "@stacksjs/ai": "0.70.0",
+    "@stacksjs/alias": "0.70.0",
+    "@stacksjs/arrays": "0.70.0",
+    "@stacksjs/auth": "0.70.0",
+    "@stacksjs/build": "0.70.0",
+    "@stacksjs/cache": "0.70.0",
+    "@stacksjs/cli": "0.70.0",
+    "@stacksjs/cloud": "0.70.0",
+    "@stacksjs/collections": "0.70.0",
+    "@stacksjs/config": "0.70.0",
+    "@stacksjs/database": "0.70.0",
+    "@stacksjs/desktop": "0.70.0",
+    "@stacksjs/development": "0.70.0",
+    "@stacksjs/dns": "0.70.0",
+    "@stacksjs/docs": "0.70.0",
+    "@stacksjs/email": "0.70.0",
+    "@stacksjs/enums": "0.70.0",
+    "@stacksjs/error-handling": "0.70.0",
+    "@stacksjs/events": "0.70.0",
+    "@stacksjs/faker": "0.70.0",
+    "@stacksjs/git": "0.70.0",
+    "@stacksjs/health": "0.70.0",
+    "@stacksjs/lint": "0.70.0",
+    "@stacksjs/logging": "0.70.0",
+    "@stacksjs/notifications": "0.70.0",
+    "@stacksjs/objects": "0.70.0",
+    "@stacksjs/orm": "0.70.0",
+    "@stacksjs/path": "0.70.0",
+    "@stacksjs/payments": "0.70.0",
+    "@stacksjs/realtime": "0.70.0",
+    "@stacksjs/router": "0.70.0",
+    "@stacksjs/search-engine": "0.70.0",
+    "@stacksjs/security": "0.70.0",
+    "@stacksjs/server": "0.70.0",
+    "@stacksjs/storage": "0.70.0",
+    "@stacksjs/strings": "0.70.0",
+    "@stacksjs/testing": "0.70.0",
+    "@stacksjs/tunnel": "0.70.0",
+    "@stacksjs/types": "0.70.0",
+    "@stacksjs/ui": "0.70.0",
+    "@stacksjs/utils": "0.70.0",
+    "@stacksjs/validation": "0.70.0"
   },
   "devDependencies": {
-    "@stacksjs/development": "0.69.2"
+    "@stacksjs/development": "0.70.0"
   },
   "config": {
     "commitizen": {

package/dist/chunk-0ara6h0a.js

@@ -1,2 +0,0 @@
-// @bun
-import{Kc as c}from"./chunk-5d1pmfaj.js";import{Pc as T}from"./chunk-zmz07e1t.js";import{Qc as E,Vc as p}from"./chunk-f0ywgmn1.js";var N=E(T(),1);import{readFileSync as f}from"fs";var i=(e)=>async(o)=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:r,roleSessionName:s,webIdentityToken:n,providerId:S,policyArns:d,policy:l,durationSeconds:m}=e,{roleAssumerWithWebIdentity:t}=e;if(!t){let{getDefaultRoleAssumerWithWebIdentity:a}=await import("./chunk-1v5v7cn7.js");t=a({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...o?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return t({RoleArn:r,RoleSessionName:s??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:n,ProviderId:S,PolicyArns:d,Policy:l,DurationSeconds:m})};var _="AWS_WEB_IDENTITY_TOKEN_FILE",A="AWS_ROLE_ARN",I="AWS_ROLE_SESSION_NAME",k=(e={})=>async()=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let o=e?.webIdentityTokenFile??process.env[_],r=e?.roleArn??process.env[A],s=e?.roleSessionName??process.env[I];if(!o||!r)throw new c("Web identity configuration not specified",{logger:e.logger});let n=await i({...e,webIdentityToken:f(o,{encoding:"ascii"}),roleArn:r,roleSessionName:s})();if(o===process.env[_])N.setCredentialFeature(n,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h");return n};export{i as fromWebToken,k as fromTokenFile};

package/dist/chunk-0pxb6cz2.js

@@ -1,3 +0,0 @@
-// @bun
-import{Ac as N,Dc as I,Ec as R,yc as C,zc as q}from"./chunk-cdnqz7bt.js";import"./chunk-vs0pve8j.js";import{Kc as a,Lc as m}from"./chunk-5d1pmfaj.js";import{Pc as Y}from"./chunk-zmz07e1t.js";import{Qc as O,Vc as A}from"./chunk-f0ywgmn1.js";var K=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string");var D=O(Y(),1);var b=300000,u="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var H=async(e,s={})=>{let{SSOOIDCClient:o}=await import("./chunk-8y9rns0z.js");return new o(Object.assign({},s.clientConfig??{},{region:e??s.clientConfig?.region,logger:s.clientConfig?.logger??s.parentClientConfig?.logger}))};var U=async(e,s,o={})=>{let{CreateTokenCommand:i}=await import("./chunk-8y9rns0z.js");return(await H(s,o)).send(new i({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))};var P=(e)=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new m(`Token is expired. ${u}`,!1)};var w=(e,s,o=!1)=>{if(typeof s==="undefined")throw new m(`Value not present for '${e}' in SSO Token${o?". Cannot refresh":""}. ${u}`,!1)};import{promises as J}from"fs";var{writeFile:V}=J,W=(e,s)=>{let o=q(e),i=JSON.stringify(s,null,2);return V(o,i)};var j=new Date(0),X=(e={})=>async({callerClientConfig:s}={})=>{let o={...e,parentClientConfig:{...s,...e.parentClientConfig}};o.logger?.debug("@aws-sdk/token-providers - fromSso");let i=await R(o),r=C({profile:o.profile??s?.profile}),p=i[r];if(!p)throw new m(`Profile '${r}' could not be found in shared credentials file.`,!1);else if(!p.sso_session)throw new m(`Profile '${r}' is missing required property 'sso_session'.`);let c=p.sso_session,l=(await I(o))[c];if(!l)throw new m(`Sso session '${c}' could not be found in shared credentials file.`,!1);for(let n of["sso_start_url","sso_region"])if(!l[n])throw new m(`Sso session '${c}' is missing required property '${n}'.`,!1);let{sso_start_url:d,sso_region:t}=l,f;try{f=await N(c)}catch(n){throw new m(`The SSO session token associated with profile=${r} was not found or is invalid. ${u}`,!1)}w("accessToken",f.accessToken),w("expiresAt",f.expiresAt);let{accessToken:k,expiresAt:T}=f,S={token:k,expiration:new Date(T)};if(S.expiration.getTime()-Date.now()>b)return S;if(Date.now()-j.getTime()<30000)return P(S),S;w("clientId",f.clientId,!0),w("clientSecret",f.clientSecret,!0),w("refreshToken",f.refreshToken,!0);try{j.setTime(Date.now());let n=await U(f,t,o);w("accessToken",n.accessToken),w("expiresIn",n.expiresIn);let h=new Date(Date.now()+n.expiresIn*1000);try{await W(c,{...f,accessToken:n.accessToken,expiresAt:h.toISOString(),refreshToken:n.refreshToken})}catch(g){}return{token:n.accessToken,expiration:h}}catch(n){return P(S),S}};var E=!1,$=async({ssoStartUrl:e,ssoSession:s,ssoAccountId:o,ssoRegion:i,ssoRoleName:r,ssoClient:p,clientConfig:c,parentClientConfig:x,profile:l,logger:d})=>{let t,f="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let _=await X({profile:l})();t={accessToken:_.token,expiresAt:new Date(_.expiration).toISOString()}}catch(_){throw new a(_.message,{tryNextLink:E,logger:d})}else try{t=await N(e)}catch(_){throw new a("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:E,logger:d})}if(new Date(t.expiresAt).getTime()-Date.now()<=0)throw new a("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:E,logger:d});let{accessToken:k}=t,{SSOClient:T,GetRoleCredentialsCommand:S}=await import("./chunk-3v3zq8w4.js"),n=p||new T(Object.assign({},c??{},{logger:c?.logger??x?.logger,region:c?.region??i})),h;try{h=await n.send(new S({accountId:o,roleName:r,accessToken:k}))}catch(_){throw new a(_,{tryNextLink:E,logger:d})}let{roleCredentials:{accessKeyId:g,secretAccessKey:y,sessionToken:F,expiration:L,credentialScope:M,accountId:G}={}}=h;if(!g||!y||!F||!L)throw new a("SSO returns an invalid temporary credential.",{tryNextLink:E,logger:d});let v={accessKeyId:g,secretAccessKey:y,sessionToken:F,expiration:new Date(L),...M&&{credentialScope:M},...G&&{accountId:G}};if(s)D.setCredentialFeature(v,"CREDENTIALS_SSO","s");else D.setCredentialFeature(v,"CREDENTIALS_SSO_LEGACY","u");return v};var z=(e,s)=>{let{sso_start_url:o,sso_account_id:i,sso_region:r,sso_role_name:p}=e;if(!o||!i||!r||!p)throw new a(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
-Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:s});return e};var ve=(e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:o,ssoAccountId:i,ssoRegion:r,ssoRoleName:p,ssoSession:c}=e,{ssoClient:x}=e,l=C({profile:e.profile??s?.profile});if(!o&&!i&&!r&&!p&&!c){let t=(await R(e))[l];if(!t)throw new a(`Profile ${l} was not found.`,{logger:e.logger});if(!K(t))throw new a(`Profile ${l} is not configured with SSO credentials.`,{logger:e.logger});if(t?.sso_session){let g=(await I(e))[t.sso_session],y=` configurations in profile ${l} and sso-session ${t.sso_session}`;if(r&&r!==g.sso_region)throw new a("Conflicting SSO region"+y,{tryNextLink:!1,logger:e.logger});if(o&&o!==g.sso_start_url)throw new a("Conflicting SSO start_url"+y,{tryNextLink:!1,logger:e.logger});t.sso_region=g.sso_region,t.sso_start_url=g.sso_start_url}let{sso_start_url:f,sso_account_id:k,sso_region:T,sso_role_name:S,sso_session:n}=z(t,e.logger);return $({ssoStartUrl:f,ssoSession:n,ssoAccountId:k,ssoRegion:T,ssoRoleName:S,ssoClient:x,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,profile:l})}else if(!o||!i||!r||!p)throw new a('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});else return $({ssoStartUrl:o,ssoSession:c,ssoAccountId:i,ssoRegion:r,ssoRoleName:p,ssoClient:x,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,profile:l})};export{z as validateSsoProfile,K as isSsoProfile,ve as fromSSO};

package/dist/chunk-1v5v7cn7.js

@@ -1,2 +0,0 @@
-// @bun
-import{Ba as LI,Ca as WI,Da as YI,Ea as fd,Fa as yd,Ga as JI,Ha as Vl,Ia as KI,Ja as II,Ka as xd,La as I1,Ma as PI,Na as Bl,Oa as EI,Pa as SI,Qa as DI,Ra as NI,Sa as FI,Ta as BI}from"./chunk-c6ermrr1.js";import{fc as kd,gc as xl,hc as l1,ic as dI,kc as T,lc as m}from"./chunk-hmvbpz4z.js";import{nc as jl,qc as Cd,rc as id,tc as lI}from"./chunk-c0awzy8k.js";import"./chunk-vs0pve8j.js";import{Pc as fI}from"./chunk-zmz07e1t.js";import{Sc as V}from"./chunk-f0ywgmn1.js";var o=V((H1)=>{Object.defineProperty(H1,"__esModule",{value:!0});H1.resolveHttpAuthSchemeConfig=H1.resolveStsAuthConfig=H1.defaultSTSHttpAuthSchemeProvider=H1.defaultSTSHttpAuthSchemeParametersProvider=void 0;var Ld=m(),j1=kd(),Wd=O(),Yd=async(l,I,d)=>{return{operation:j1.getSmithyContext(I).operation,region:await j1.normalizeProvider(l.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()}};H1.defaultSTSHttpAuthSchemeParametersProvider=Yd;function Jd(l){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:l.region},propertiesExtractor:(I,d)=>({signingProperties:{config:I,context:d}})}}function Kd(l){return{schemeId:"smithy.api#noAuth"}}var Xd=(l)=>{let I=[];switch(l.operation){case"AssumeRoleWithWebIdentity":{I.push(Kd(l));break}default:I.push(Jd(l))}return I};H1.defaultSTSHttpAuthSchemeProvider=Xd;var Qd=(l)=>({...l,stsClientCtor:Wd.STSClient});H1.resolveStsAuthConfig=Qd;var Zd=(l)=>{let I=H1.resolveStsAuthConfig(l);return{...Ld.resolveAwsSdkSigV4Config(I)}};H1.resolveHttpAuthSchemeConfig=Zd});var s=V((f1)=>{Object.defineProperty(f1,"__esModule",{value:!0});f1.commonParams=f1.resolveClientEndpointParameters=void 0;var Hd=(l)=>{return{...l,useDualstackEndpoint:l.useDualstackEndpoint??!1,useFipsEndpoint:l.useFipsEndpoint??!1,useGlobalEndpoint:l.useGlobalEndpoint??!1,defaultSigningName:"sts"}};f1.resolveClientEndpointParameters=Hd;f1.commonParams={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}}});var ql=V((Nl)=>{Object.defineProperty(Nl,"__esModule",{value:!0});Nl.ruleSet=void 0;var p1="required",D="type",F="fn",q="argv",J="ref",O1=!1,n=!0,Y="booleanEquals",U="stringEquals",u1="sigv4",t1="sts",ll="us-east-1",r="endpoint",s1="https://sts.{Region}.{PartitionResult#dnsSuffix}",B="tree",X="error",u="getAttr",g1={[p1]:!1,[D]:"String"},p={[p1]:!0,default:!1,[D]:"Boolean"},dl={[J]:"Endpoint"},m1={[F]:"isSet",[q]:[{[J]:"Region"}]},G={[J]:"Region"},C1={[F]:"aws.partition",[q]:[G],assign:"PartitionResult"},Il={[J]:"UseFIPS"},Pl={[J]:"UseDualStack"},M={url:"https://sts.amazonaws.com",properties:{authSchemes:[{name:u1,signingName:t1,signingRegion:ll}]},headers:{}},_={},i1={conditions:[{[F]:U,[q]:[G,"aws-global"]}],[r]:M,[D]:r},El={[F]:Y,[q]:[Il,!0]},Sl={[F]:Y,[q]:[Pl,!0]},x1={[F]:u,[q]:[{[J]:"PartitionResult"},"supportsFIPS"]},Dl={[J]:"PartitionResult"},c1={[F]:Y,[q]:[!0,{[F]:u,[q]:[Dl,"supportsDualStack"]}]},e1=[{[F]:"isSet",[q]:[dl]}],o1=[El],n1=[Sl],bd={version:"1.0",parameters:{Region:g1,UseDualStack:p,UseFIPS:p,Endpoint:g1,UseGlobalEndpoint:p},rules:[{conditions:[{[F]:Y,[q]:[{[J]:"UseGlobalEndpoint"},n]},{[F]:"not",[q]:e1},m1,C1,{[F]:Y,[q]:[Il,O1]},{[F]:Y,[q]:[Pl,O1]}],rules:[{conditions:[{[F]:U,[q]:[G,"ap-northeast-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"ap-south-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"ap-southeast-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"ap-southeast-2"]}],endpoint:M,[D]:r},i1,{conditions:[{[F]:U,[q]:[G,"ca-central-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"eu-central-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"eu-north-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"eu-west-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"eu-west-2"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"eu-west-3"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"sa-east-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,ll]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"us-east-2"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"us-west-1"]}],endpoint:M,[D]:r},{conditions:[{[F]:U,[q]:[G,"us-west-2"]}],endpoint:M,[D]:r},{endpoint:{url:s1,properties:{authSchemes:[{name:u1,signingName:t1,signingRegion:"{Region}"}]},headers:_},[D]:r}],[D]:B},{conditions:e1,rules:[{conditions:o1,error:"Invalid Configuration: FIPS and custom endpoint are not supported",[D]:X},{conditions:n1,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",[D]:X},{endpoint:{url:dl,properties:_,headers:_},[D]:r}],[D]:B},{conditions:[m1],rules:[{conditions:[C1],rules:[{conditions:[El,Sl],rules:[{conditions:[{[F]:Y,[q]:[n,x1]},c1],rules:[{endpoint:{url:"https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:_,headers:_},[D]:r}],[D]:B},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",[D]:X}],[D]:B},{conditions:o1,rules:[{conditions:[{[F]:Y,[q]:[x1,n]}],rules:[{conditions:[{[F]:U,[q]:[{[F]:u,[q]:[Dl,"name"]},"aws-us-gov"]}],endpoint:{url:"https://sts.{Region}.amazonaws.com",properties:_,headers:_},[D]:r},{endpoint:{url:"https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",properties:_,headers:_},[D]:r}],[D]:B},{error:"FIPS is enabled but this partition does not support FIPS",[D]:X}],[D]:B},{conditions:n1,rules:[{conditions:[c1],rules:[{endpoint:{url:"https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:_,headers:_},[D]:r}],[D]:B},{error:"DualStack is enabled but this partition does not support DualStack",[D]:X}],[D]:B},i1,{endpoint:{url:s1,properties:_,headers:_},[D]:r}],[D]:B}],[D]:B},{error:"Invalid Configuration: Missing Region",[D]:X}]};Nl.ruleSet=bd});var rl=V((vl)=>{Object.defineProperty(vl,"__esModule",{value:!0});vl.defaultEndpointResolver=void 0;var Od=yd(),t=fd(),sd=ql(),gd=new t.EndpointCache({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),md=(l,I={})=>{return gd.get(l,()=>t.resolveEndpoint(sd.ruleSet,{endpointParams:l,logger:I.logger}))};vl.defaultEndpointResolver=md;t.customEndpointFunctions.aws=Od.awsEndpointFunctions});var hl=V((Gl)=>{Object.defineProperty(Gl,"__esModule",{value:!0});Gl.getRuntimeConfig=void 0;var cd=m(),ed=l1(),od=T(),nd=xd(),Rl=id(),Ul=Cd(),pd=o(),ud=rl(),td=(l)=>{return{apiVersion:"2011-06-15",base64Decoder:l?.base64Decoder??Rl.fromBase64,base64Encoder:l?.base64Encoder??Rl.toBase64,disableHostPrefix:l?.disableHostPrefix??!1,endpointProvider:l?.endpointProvider??ud.defaultEndpointResolver,extensions:l?.extensions??[],httpAuthSchemeProvider:l?.httpAuthSchemeProvider??pd.defaultSTSHttpAuthSchemeProvider,httpAuthSchemes:l?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(I)=>I.getIdentityProvider("aws.auth#sigv4"),signer:new cd.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(I)=>I.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new ed.NoAuthSigner}],logger:l?.logger??new od.NoOpLogger,serviceId:l?.serviceId??"STS",urlParser:l?.urlParser??nd.parseUrl,utf8Decoder:l?.utf8Decoder??Ul.fromUtf8,utf8Encoder:l?.utf8Encoder??Ul.toUtf8}};Gl.getRuntimeConfig=td});var Wl=V((kl)=>{Object.defineProperty(kl,"__esModule",{value:!0});kl.getRuntimeConfig=void 0;var qI=dI(),vI=qI.__importDefault(EI()),_l=m(),Al=SI(),C=Vl(),wI=l1(),rI=DI(),Tl=Bl(),Q=II(),al=lI(),RI=NI(),UI=PI(),GI=hl(),MI=T(),hI=FI(),_I=T(),AI=(l)=>{_I.emitWarningIfUnsupportedVersion(process.version);let I=hI.resolveDefaultsModeConfig(l),d=()=>I().then(MI.loadConfigsForDefaultMode),E=GI.getRuntimeConfig(l);_l.emitWarningIfUnsupportedVersion(process.version);let P={profile:l?.profile};return{...E,...l,runtime:"node",defaultsMode:I,bodyLengthChecker:l?.bodyLengthChecker??RI.calculateBodyLength,defaultUserAgentProvider:l?.defaultUserAgentProvider??Al.createDefaultUserAgentProvider({serviceId:E.serviceId,clientVersion:vI.default.version}),httpAuthSchemes:l?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(v)=>v.getIdentityProvider("aws.auth#sigv4")||(async(N)=>await l.credentialDefaultProvider(N?.__config||{})()),signer:new _l.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(v)=>v.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new wI.NoAuthSigner}],maxAttempts:l?.maxAttempts??Q.loadConfig(Tl.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,l),region:l?.region??Q.loadConfig(C.NODE_REGION_CONFIG_OPTIONS,{...C.NODE_REGION_CONFIG_FILE_OPTIONS,...P}),requestHandler:al.NodeHttpHandler.create(l?.requestHandler??d),retryMode:l?.retryMode??Q.loadConfig({...Tl.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await d()).retryMode||UI.DEFAULT_RETRY_MODE},l),sha256:l?.sha256??rI.Hash.bind(null,"sha256"),streamCollector:l?.streamCollector??al.streamCollector,useDualstackEndpoint:l?.useDualstackEndpoint??Q.loadConfig(C.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,P),useFipsEndpoint:l?.useFipsEndpoint??Q.loadConfig(C.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,P),userAgentAppId:l?.userAgentAppId??Q.loadConfig(Al.NODE_APP_ID_CONFIG_OPTIONS,P)}};kl.getRuntimeConfig=AI});var Kl=V((Yl)=>{Object.defineProperty(Yl,"__esModule",{value:!0});Yl.resolveHttpAuthRuntimeConfig=Yl.getHttpAuthExtensionConfiguration=void 0;var TI=(l)=>{let{httpAuthSchemes:I,httpAuthSchemeProvider:d,credentials:E}=l;return{setHttpAuthScheme(P){let v=I.findIndex((N)=>N.schemeId===P.schemeId);if(v===-1)I.push(P);else I.splice(v,1,P)},httpAuthSchemes(){return I},setHttpAuthSchemeProvider(P){d=P},httpAuthSchemeProvider(){return d},setCredentials(P){E=P},credentials(){return E}}};Yl.getHttpAuthExtensionConfiguration=TI;var aI=(l)=>{return{httpAuthSchemes:l.httpAuthSchemes(),httpAuthSchemeProvider:l.httpAuthSchemeProvider(),credentials:l.credentials()}};Yl.resolveHttpAuthRuntimeConfig=aI});var bl=V((Hl)=>{Object.defineProperty(Hl,"__esModule",{value:!0});Hl.resolveRuntimeExtensions=void 0;var Xl=BI(),Ql=jl(),Zl=T(),$l=Kl(),i=(l)=>l,kI=(l,I)=>{let d={...i(Xl.getAwsRegionExtensionConfiguration(l)),...i(Zl.getDefaultExtensionConfiguration(l)),...i(Ql.getHttpHandlerExtensionConfiguration(l)),...i($l.getHttpAuthExtensionConfiguration(l))};return I.forEach((E)=>E.configure(d)),{...l,...Xl.resolveAwsRegionExtensionConfiguration(d),...Zl.resolveDefaultRuntimeConfig(d),...Ql.resolveHttpHandlerRuntimeConfig(d),...$l.resolveHttpAuthRuntimeConfig(d)}};Hl.resolveRuntimeExtensions=kI});var O=V((P1)=>{Object.defineProperty(P1,"__esModule",{value:!0});P1.STSClient=P1.__Client=void 0;var fl=LI(),XI=WI(),QI=YI(),yl=JI(),ZI=Vl(),d1=l1(),$I=KI(),jI=I1(),Ol=Bl(),gl=T();Object.defineProperty(P1,"__Client",{enumerable:!0,get:function(){return gl.Client}});var sl=o(),HI=s(),zI=Wl(),bI=bl();class ml extends gl.Client{config;constructor(...[l]){let I=zI.getRuntimeConfig(l||{}),d=HI.resolveClientEndpointParameters(I),E=yl.resolveUserAgentConfig(d),P=Ol.resolveRetryConfig(E),v=ZI.resolveRegionConfig(P),N=fl.resolveHostHeaderConfig(v),h=jI.resolveEndpointConfig(N),a=sl.resolveHttpAuthSchemeConfig(h),A=bI.resolveRuntimeExtensions(a,l?.extensions||[]);super(A);this.config=A,this.middlewareStack.use(yl.getUserAgentPlugin(this.config)),this.middlewareStack.use(Ol.getRetryPlugin(this.config)),this.middlewareStack.use($I.getContentLengthPlugin(this.config)),this.middlewareStack.use(fl.getHostHeaderPlugin(this.config)),this.middlewareStack.use(XI.getLoggerPlugin(this.config)),this.middlewareStack.use(QI.getRecursionDetectionPlugin(this.config)),this.middlewareStack.use(d1.getHttpAuthSchemeEndpointRuleSetPlugin(this.config,{httpAuthSchemeParametersProvider:sl.defaultSTSHttpAuthSchemeParametersProvider,identityProviderConfigProvider:async(K)=>new d1.DefaultIdentityProviderConfig({"aws.auth#sigv4":K.credentials})})),this.middlewareStack.use(d1.getHttpSigningPlugin(this.config))}destroy(){super.destroy()}}P1.STSClient=ml});var OP=V((pP,$1)=>{var{defineProperty:x,getOwnPropertyDescriptor:yI,getOwnPropertyNames:OI}=Object,sI=Object.prototype.hasOwnProperty,S=(l,I)=>x(l,"name",{value:I,configurable:!0}),gI=(l,I)=>{for(var d in I)x(l,d,{get:I[d],enumerable:!0})},W1=(l,I,d,E)=>{if(I&&typeof I==="object"||typeof I==="function"){for(let P of OI(I))if(!sI.call(l,P)&&P!==d)x(l,P,{get:()=>I[P],enumerable:!(E=yI(I,P))||E.enumerable})}return l},mI=(l,I,d)=>(W1(l,I,"default"),d&&W1(d,I,"default")),CI=(l)=>W1(x({},"__esModule",{value:!0}),l),J1={};gI(J1,{AssumeRoleCommand:()=>Q1,AssumeRoleResponseFilterSensitiveLog:()=>el,AssumeRoleWithWebIdentityCommand:()=>Z1,AssumeRoleWithWebIdentityRequestFilterSensitiveLog:()=>dd,AssumeRoleWithWebIdentityResponseFilterSensitiveLog:()=>Id,ClientInputEndpointParameters:()=>zP.ClientInputEndpointParameters,CredentialsFilterSensitiveLog:()=>K1,ExpiredTokenException:()=>ol,IDPCommunicationErrorException:()=>Pd,IDPRejectedClaimException:()=>tl,InvalidIdentityTokenException:()=>ld,MalformedPolicyDocumentException:()=>nl,PackedPolicyTooLargeException:()=>pl,RegionDisabledException:()=>ul,STS:()=>Ud,STSServiceException:()=>L,decorateDefaultCredentialProvider:()=>yP,getDefaultRoleAssumer:()=>Td,getDefaultRoleAssumerWithWebIdentity:()=>ad});$1.exports=CI(J1);mI(J1,O(),$1.exports);var iI=T(),xI=I1(),cI=xl(),eI=T(),oI=s(),cl=T(),nI=T(),L=class l extends nI.ServiceException{static{S(this,"STSServiceException")}constructor(I){super(I);Object.setPrototypeOf(this,l.prototype)}},K1=S((l)=>({...l,...l.SecretAccessKey&&{SecretAccessKey:cl.SENSITIVE_STRING}}),"CredentialsFilterSensitiveLog"),el=S((l)=>({...l,...l.Credentials&&{Credentials:K1(l.Credentials)}}),"AssumeRoleResponseFilterSensitiveLog"),ol=class l extends L{static{S(this,"ExpiredTokenException")}name="ExpiredTokenException";$fault="client";constructor(I){super({name:"ExpiredTokenException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},nl=class l extends L{static{S(this,"MalformedPolicyDocumentException")}name="MalformedPolicyDocumentException";$fault="client";constructor(I){super({name:"MalformedPolicyDocumentException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},pl=class l extends L{static{S(this,"PackedPolicyTooLargeException")}name="PackedPolicyTooLargeException";$fault="client";constructor(I){super({name:"PackedPolicyTooLargeException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},ul=class l extends L{static{S(this,"RegionDisabledException")}name="RegionDisabledException";$fault="client";constructor(I){super({name:"RegionDisabledException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},tl=class l extends L{static{S(this,"IDPRejectedClaimException")}name="IDPRejectedClaimException";$fault="client";constructor(I){super({name:"IDPRejectedClaimException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},ld=class l extends L{static{S(this,"InvalidIdentityTokenException")}name="InvalidIdentityTokenException";$fault="client";constructor(I){super({name:"InvalidIdentityTokenException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},dd=S((l)=>({...l,...l.WebIdentityToken&&{WebIdentityToken:cl.SENSITIVE_STRING}}),"AssumeRoleWithWebIdentityRequestFilterSensitiveLog"),Id=S((l)=>({...l,...l.Credentials&&{Credentials:K1(l.Credentials)}}),"AssumeRoleWithWebIdentityResponseFilterSensitiveLog"),Pd=class l extends L{static{S(this,"IDPCommunicationErrorException")}name="IDPCommunicationErrorException";$fault="client";constructor(I){super({name:"IDPCommunicationErrorException",$fault:"client",...I});Object.setPrototypeOf(this,l.prototype)}},X1=m(),pI=jl(),w=T(),uI=S(async(l,I)=>{let d=qd,E;return E=Rd({...qP(l,I),[wd]:YP,[rd]:vd}),Fd(I,d,"/",void 0,E)},"se_AssumeRoleCommand"),tI=S(async(l,I)=>{let d=qd,E;return E=Rd({...vP(l,I),[wd]:JP,[rd]:vd}),Fd(I,d,"/",void 0,E)},"se_AssumeRoleWithWebIdentityCommand"),lP=S(async(l,I)=>{if(l.statusCode>=300)return Ed(l,I);let d=await X1.parseXmlBody(l.body,I),E={};return E=hP(d.AssumeRoleResult,I),{$metadata:W(l),...E}},"de_AssumeRoleCommand"),dP=S(async(l,I)=>{if(l.statusCode>=300)return Ed(l,I);let d=await X1.parseXmlBody(l.body,I),E={};return E=_P(d.AssumeRoleWithWebIdentityResult,I),{$metadata:W(l),...E}},"de_AssumeRoleWithWebIdentityCommand"),Ed=S(async(l,I)=>{let d={...l,body:await X1.parseXmlErrorBody(l.body,I)},E=KP(l,d.body);switch(E){case"ExpiredTokenException":case"com.amazonaws.sts#ExpiredTokenException":throw await IP(d,I);case"MalformedPolicyDocument":case"com.amazonaws.sts#MalformedPolicyDocumentException":throw await DP(d,I);case"PackedPolicyTooLarge":case"com.amazonaws.sts#PackedPolicyTooLargeException":throw await NP(d,I);case"RegionDisabledException":case"com.amazonaws.sts#RegionDisabledException":throw await FP(d,I);case"IDPCommunicationError":case"com.amazonaws.sts#IDPCommunicationErrorException":throw await PP(d,I);case"IDPRejectedClaim":case"com.amazonaws.sts#IDPRejectedClaimException":throw await EP(d,I);case"InvalidIdentityToken":case"com.amazonaws.sts#InvalidIdentityTokenException":throw await SP(d,I);default:let P=d.body;return WP({output:l,parsedBody:P.Error,errorCode:E})}},"de_CommandError"),IP=S(async(l,I)=>{let d=l.body,E=AP(d.Error,I),P=new ol({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_ExpiredTokenExceptionRes"),PP=S(async(l,I)=>{let d=l.body,E=TP(d.Error,I),P=new Pd({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_IDPCommunicationErrorExceptionRes"),EP=S(async(l,I)=>{let d=l.body,E=aP(d.Error,I),P=new tl({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_IDPRejectedClaimExceptionRes"),SP=S(async(l,I)=>{let d=l.body,E=VP(d.Error,I),P=new ld({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_InvalidIdentityTokenExceptionRes"),DP=S(async(l,I)=>{let d=l.body,E=BP(d.Error,I),P=new nl({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_MalformedPolicyDocumentExceptionRes"),NP=S(async(l,I)=>{let d=l.body,E=kP(d.Error,I),P=new pl({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_PackedPolicyTooLargeExceptionRes"),FP=S(async(l,I)=>{let d=l.body,E=LP(d.Error,I),P=new ul({$metadata:W(l),...E});return w.decorateServiceException(P,d)},"de_RegionDisabledExceptionRes"),qP=S((l,I)=>{let d={};if(l[f]!=null)d[f]=l[f];if(l[y]!=null)d[y]=l[y];if(l[z]!=null){let E=Sd(l[z],I);if(l[z]?.length===0)d.PolicyArns=[];Object.entries(E).forEach(([P,v])=>{let N=`PolicyArns.${P}`;d[N]=v})}if(l[H]!=null)d[H]=l[H];if(l[j]!=null)d[j]=l[j];if(l[T1]!=null){let E=MP(l[T1],I);if(l[T1]?.length===0)d.Tags=[];Object.entries(E).forEach(([P,v])=>{let N=`Tags.${P}`;d[N]=v})}if(l[V1]!=null){let E=GP(l[V1],I);if(l[V1]?.length===0)d.TransitiveTagKeys=[];Object.entries(E).forEach(([P,v])=>{let N=`TransitiveTagKeys.${P}`;d[N]=v})}if(l[v1]!=null)d[v1]=l[v1];if(l[_1]!=null)d[_1]=l[_1];if(l[a1]!=null)d[a1]=l[a1];if(l[k]!=null)d[k]=l[k];if(l[R1]!=null){let E=RP(l[R1],I);if(l[R1]?.length===0)d.ProvidedContexts=[];Object.entries(E).forEach(([P,v])=>{let N=`ProvidedContexts.${P}`;d[N]=v})}return d},"se_AssumeRoleRequest"),vP=S((l,I)=>{let d={};if(l[f]!=null)d[f]=l[f];if(l[y]!=null)d[y]=l[y];if(l[k1]!=null)d[k1]=l[k1];if(l[U1]!=null)d[U1]=l[U1];if(l[z]!=null){let E=Sd(l[z],I);if(l[z]?.length===0)d.PolicyArns=[];Object.entries(E).forEach(([P,v])=>{let N=`PolicyArns.${P}`;d[N]=v})}if(l[H]!=null)d[H]=l[H];if(l[j]!=null)d[j]=l[j];return d},"se_AssumeRoleWithWebIdentityRequest"),Sd=S((l,I)=>{let d={},E=1;for(let P of l){if(P===null)continue;let v=wP(P,I);Object.entries(v).forEach(([N,h])=>{d[`member.${E}.${N}`]=h}),E++}return d},"se_policyDescriptorListType"),wP=S((l,I)=>{let d={};if(l[L1]!=null)d[L1]=l[L1];return d},"se_PolicyDescriptorType"),rP=S((l,I)=>{let d={};if(l[r1]!=null)d[r1]=l[r1];if(l[F1]!=null)d[F1]=l[F1];return d},"se_ProvidedContext"),RP=S((l,I)=>{let d={},E=1;for(let P of l){if(P===null)continue;let v=rP(P,I);Object.entries(v).forEach(([N,h])=>{d[`member.${E}.${N}`]=h}),E++}return d},"se_ProvidedContextsListType"),UP=S((l,I)=>{let d={};if(l[w1]!=null)d[w1]=l[w1];if(l[B1]!=null)d[B1]=l[B1];return d},"se_Tag"),GP=S((l,I)=>{let d={},E=1;for(let P of l){if(P===null)continue;d[`member.${E}`]=P,E++}return d},"se_tagKeyListType"),MP=S((l,I)=>{let d={},E=1;for(let P of l){if(P===null)continue;let v=UP(P,I);Object.entries(v).forEach(([N,h])=>{d[`member.${E}.${N}`]=h}),E++}return d},"se_tagListType"),Dd=S((l,I)=>{let d={};if(l[S1]!=null)d[S1]=w.expectString(l[S1]);if(l[D1]!=null)d[D1]=w.expectString(l[D1]);return d},"de_AssumedRoleUser"),hP=S((l,I)=>{let d={};if(l[$]!=null)d[$]=Nd(l[$],I);if(l[Z]!=null)d[Z]=Dd(l[Z],I);if(l[b]!=null)d[b]=w.strictParseInt32(l[b]);if(l[k]!=null)d[k]=w.expectString(l[k]);return d},"de_AssumeRoleResponse"),_P=S((l,I)=>{let d={};if(l[$]!=null)d[$]=Nd(l[$],I);if(l[h1]!=null)d[h1]=w.expectString(l[h1]);if(l[Z]!=null)d[Z]=Dd(l[Z],I);if(l[b]!=null)d[b]=w.strictParseInt32(l[b]);if(l[G1]!=null)d[G1]=w.expectString(l[G1]);if(l[N1]!=null)d[N1]=w.expectString(l[N1]);if(l[k]!=null)d[k]=w.expectString(l[k]);return d},"de_AssumeRoleWithWebIdentityResponse"),Nd=S((l,I)=>{let d={};if(l[E1]!=null)d[E1]=w.expectString(l[E1]);if(l[M1]!=null)d[M1]=w.expectString(l[M1]);if(l[A1]!=null)d[A1]=w.expectString(l[A1]);if(l[q1]!=null)d[q1]=w.expectNonNull(w.parseRfc3339DateTimeWithOffset(l[q1]));return d},"de_Credentials"),AP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_ExpiredTokenException"),TP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_IDPCommunicationErrorException"),aP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_IDPRejectedClaimException"),VP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_InvalidIdentityTokenException"),BP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_MalformedPolicyDocumentException"),kP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_PackedPolicyTooLargeException"),LP=S((l,I)=>{let d={};if(l[R]!=null)d[R]=w.expectString(l[R]);return d},"de_RegionDisabledException"),W=S((l)=>({httpStatusCode:l.statusCode,requestId:l.headers["x-amzn-requestid"]??l.headers["x-amzn-request-id"]??l.headers["x-amz-request-id"],extendedRequestId:l.headers["x-amz-id-2"],cfId:l.headers["x-amz-cf-id"]}),"deserializeMetadata"),WP=w.withBaseException(L),Fd=S(async(l,I,d,E,P)=>{let{hostname:v,protocol:N="https",port:h,path:a}=await l.endpoint(),A={protocol:N,hostname:v,port:h,method:"POST",path:a.endsWith("/")?a.slice(0,-1)+d:a+d,headers:I};if(E!==void 0)A.hostname=E;if(P!==void 0)A.body=P;return new pI.HttpRequest(A)},"buildHttpRpcRequest"),qd={"content-type":"application/x-www-form-urlencoded"},vd="2011-06-15",wd="Action",E1="AccessKeyId",YP="AssumeRole",S1="AssumedRoleId",Z="AssumedRoleUser",JP="AssumeRoleWithWebIdentity",D1="Arn",N1="Audience",$="Credentials",F1="ContextAssertion",j="DurationSeconds",q1="Expiration",v1="ExternalId",w1="Key",H="Policy",z="PolicyArns",r1="ProviderArn",R1="ProvidedContexts",U1="ProviderId",b="PackedPolicySize",G1="Provider",f="RoleArn",y="RoleSessionName",M1="SecretAccessKey",h1="SubjectFromWebIdentityToken",k="SourceIdentity",_1="SerialNumber",A1="SessionToken",T1="Tags",a1="TokenCode",V1="TransitiveTagKeys",rd="Version",B1="Value",k1="WebIdentityToken",L1="arn",R="message",Rd=S((l)=>Object.entries(l).map(([I,d])=>w.extendedEncodeURIComponent(I)+"="+w.extendedEncodeURIComponent(d)).join("&"),"buildFormUrlencodedString"),KP=S((l,I)=>{if(I.Error?.Code!==void 0)return I.Error.Code;if(l.statusCode==404)return"NotFound"},"loadQueryErrorCode"),Q1=class extends eI.Command.classBuilder().ep(oI.commonParams).m(function(l,I,d,E){return[cI.getSerdePlugin(d,this.serialize,this.deserialize),xI.getEndpointPlugin(d,l.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRole",{}).n("STSClient","AssumeRoleCommand").f(void 0,el).ser(uI).de(lP).build(){static{S(this,"AssumeRoleCommand")}},XP=I1(),QP=xl(),ZP=T(),$P=s(),Z1=class extends ZP.Command.classBuilder().ep($P.commonParams).m(function(l,I,d,E){return[QP.getSerdePlugin(d,this.serialize,this.deserialize),XP.getEndpointPlugin(d,l.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoleWithWebIdentity",{}).n("STSClient","AssumeRoleWithWebIdentityCommand").f(dd,Id).ser(tI).de(dP).build(){static{S(this,"AssumeRoleWithWebIdentityCommand")}},jP=O(),HP={AssumeRoleCommand:Q1,AssumeRoleWithWebIdentityCommand:Z1},Ud=class extends jP.STSClient{static{S(this,"STS")}};iI.createAggregatedClient(HP,Ud);var zP=s(),Y1=fI(),il="us-east-1",Gd=S((l)=>{if(typeof l?.Arn==="string"){let I=l.Arn.split(":");if(I.length>4&&I[4]!=="")return I[4]}return},"getAccountIdFromAssumedRoleUser"),Md=S(async(l,I,d)=>{let E=typeof l==="function"?await l():l,P=typeof I==="function"?await I():I;return d?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${E} (provider)`,`${P} (parent client)`,`${il} (STS default)`),E??P??il},"resolveRegion"),bP=S((l,I)=>{let d,E;return async(P,v)=>{if(E=P,!d){let{logger:K=l?.parentClientConfig?.logger,region:c,requestHandler:g=l?.parentClientConfig?.requestHandler,credentialProviderLogger:e}=l,Vd=await Md(c,l?.parentClientConfig?.region,e),Bd=!hd(g);d=new I({profile:l?.parentClientConfig?.profile,credentialDefaultProvider:()=>async()=>E,region:Vd,requestHandler:Bd?g:void 0,logger:K})}let{Credentials:N,AssumedRoleUser:h}=await d.send(new Q1(v));if(!N||!N.AccessKeyId||!N.SecretAccessKey)throw new Error(`Invalid response from STS.assumeRole call with role ${v.RoleArn}`);let a=Gd(h),A={accessKeyId:N.AccessKeyId,secretAccessKey:N.SecretAccessKey,sessionToken:N.SessionToken,expiration:N.Expiration,...N.CredentialScope&&{credentialScope:N.CredentialScope},...a&&{accountId:a}};return Y1.setCredentialFeature(A,"CREDENTIALS_STS_ASSUME_ROLE","i"),A}},"getDefaultRoleAssumer"),fP=S((l,I)=>{let d;return async(E)=>{if(!d){let{logger:a=l?.parentClientConfig?.logger,region:A,requestHandler:K=l?.parentClientConfig?.requestHandler,credentialProviderLogger:c}=l,g=await Md(A,l?.parentClientConfig?.region,c),e=!hd(K);d=new I({profile:l?.parentClientConfig?.profile,region:g,requestHandler:e?K:void 0,logger:a})}let{Credentials:P,AssumedRoleUser:v}=await d.send(new Z1(E));if(!P||!P.AccessKeyId||!P.SecretAccessKey)throw new Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${E.RoleArn}`);let N=Gd(v),h={accessKeyId:P.AccessKeyId,secretAccessKey:P.SecretAccessKey,sessionToken:P.SessionToken,expiration:P.Expiration,...P.CredentialScope&&{credentialScope:P.CredentialScope},...N&&{accountId:N}};if(N)Y1.setCredentialFeature(h,"RESOLVED_ACCOUNT_ID","T");return Y1.setCredentialFeature(h,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),h}},"getDefaultRoleAssumerWithWebIdentity"),hd=S((l)=>{return l?.metadata?.handlerProtocol==="h2"},"isH2"),_d=O(),Ad=S((l,I)=>{if(!I)return l;else return class d extends l{static{S(this,"CustomizableSTSClient")}constructor(E){super(E);for(let P of I)this.middlewareStack.use(P)}}},"getCustomizableStsClientCtor"),Td=S((l={},I)=>bP(l,Ad(_d.STSClient,I)),"getDefaultRoleAssumer"),ad=S((l={},I)=>fP(l,Ad(_d.STSClient,I)),"getDefaultRoleAssumerWithWebIdentity"),yP=S((l)=>(I)=>l({roleAssumer:Td(I),roleAssumerWithWebIdentity:ad(I),...I}),"decorateDefaultCredentialProvider")});export default OP();

package/dist/chunk-3yp4xe8e.js

@@ -1,2 +0,0 @@
-// @bun
-import{Kc as _}from"./chunk-5d1pmfaj.js";import{Pc as A}from"./chunk-zmz07e1t.js";import{Qc as p}from"./chunk-f0ywgmn1.js";var S=p(A(),1);var C="AWS_ACCESS_KEY_ID",N="AWS_SECRET_ACCESS_KEY",a="AWS_SESSION_TOKEN",i="AWS_CREDENTIAL_EXPIRATION",I="AWS_CREDENTIAL_SCOPE",d="AWS_ACCOUNT_ID",T=(e)=>async()=>{e?.logger?.debug("@aws-sdk/credential-provider-env - fromEnv");let o=process.env[C],r=process.env[N],n=process.env[a],s=process.env[i],t=process.env[I],E=process.env[d];if(o&&r){let c={accessKeyId:o,secretAccessKey:r,...n&&{sessionToken:n},...s&&{expiration:new Date(s)},...t&&{credentialScope:t},...E&&{accountId:E}};return S.setCredentialFeature(c,"CREDENTIALS_ENV_VARS","g"),c}throw new _("Unable to find environment variable credentials.",{logger:e?.logger})};export{T as fromEnv,a as ENV_SESSION,N as ENV_SECRET,C as ENV_KEY,i as ENV_EXPIRATION,I as ENV_CREDENTIAL_SCOPE,d as ENV_ACCOUNT_ID};export{C as Gc,N as Hc,T as Ic};

package/dist/chunk-5d1pmfaj.js

@@ -1 +0,0 @@
-class n extends Error{constructor(t,e=!0){let o,r=!0;if(typeof e==="boolean")o=void 0,r=e;else if(e!=null&&typeof e==="object")o=e.logger,r=e.tryNextLink??!0;super(t);this.name="ProviderError",this.tryNextLink=r,Object.setPrototypeOf(this,n.prototype),o?.debug?.(`@smithy/property-provider ${r?"->":"(!)"} ${t}`)}static from(t,e=!0){return Object.assign(new this(t.message,e),t)}}class u extends n{constructor(t,e=!0){super(t,e);this.name="CredentialsProviderError",Object.setPrototypeOf(this,u.prototype)}}class l extends n{constructor(t,e=!0){super(t,e);this.name="TokenProviderError",Object.setPrototypeOf(this,l.prototype)}}var v=(...t)=>async()=>{if(t.length===0)throw new n("No providers in chain");let e;for(let o of t)try{return await o()}catch(r){if(e=r,r?.tryNextLink)continue;throw r}throw e};var w=(t)=>()=>Promise.resolve(t);var b=(t,e,o)=>{let r,i,s,f=!1,a=async()=>{if(!i)i=t();try{r=await i,s=!0,f=!1}finally{i=void 0}return r};if(e===void 0)return async(c)=>{if(!s||c?.forceRefresh)r=await a();return r};return async(c)=>{if(!s||c?.forceRefresh)r=await a();if(f)return r;if(o&&!o(r))return f=!0,r;if(e(r))return await a(),r;return r}};export{n as Jc,u as Kc,l as Lc,v as Mc,w as Nc,b as Oc};