@thunderclient/cli 1.27.9 → 1.27.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/114.index.js CHANGED
@@ -1,2 +1,2 @@
1
1
  #!/usr/bin/env node
2
- "use strict";exports.id=114,exports.ids=[114,876],exports.modules={836(e,r,t){t.d(r,{fromProcess:()=>f});var o=t(832),n=t(62),s=t(61),c=t(837),i=t(838),a=t(18),d=t(80);const l=async(e,r,t)=>{const o=r[e];if(!r[e])throw new s.C(`Profile ${e} could not be found in shared credentials file.`,{logger:t});{const n=o.credential_process;if(void 0===n)throw new s.C(`Profile ${e} did not contain credential_process.`,{logger:t});{const o=(0,a.promisify)(c.Z?.getTokenRecord?.().exec??i.exec);try{const{stdout:t}=await o(n);let s;try{s=JSON.parse(t.trim())}catch{throw Error(`Profile ${e} credential_process returned invalid JSON.`)}return((e,r,t)=>{if(1!==r.Version)throw Error(`Profile ${e} credential_process did not return Version 1.`);if(void 0===r.AccessKeyId||void 0===r.SecretAccessKey)throw Error(`Profile ${e} credential_process returned invalid credentials.`);if(r.Expiration){const t=new Date;if(new Date(r.Expiration)<t)throw Error(`Profile ${e} credential_process returned expired credentials.`)}let o=r.AccountId;!o&&t?.[e]?.aws_account_id&&(o=t[e].aws_account_id);const n={accessKeyId:r.AccessKeyId,secretAccessKey:r.SecretAccessKey,...r.SessionToken&&{sessionToken:r.SessionToken},...r.Expiration&&{expiration:new Date(r.Expiration)},...r.CredentialScope&&{credentialScope:r.CredentialScope},...o&&{accountId:o}};return(0,d.g)(n,"CREDENTIALS_PROCESS","w"),n})(e,s,r)}catch(e){throw new s.C(e.message,{logger:t})}}}},f=(e={})=>async({callerClientConfig:r}={})=>{e.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");const t=await(0,o.Y)(e);return l((0,n.Bz)({profile:e.profile??r?.profile}),t,e.logger)}},837(e,r,t){t.d(r,{Z:()=>s});var o=t(833),n=t(69);const s={getFileRecord:()=>n.Jj,interceptFile(e,r){n.Jj[e]=Promise.resolve(r)},getTokenRecord:()=>o.a,interceptToken(e,r){o.a[e]=r}}},834(e,r,t){t.d(r,{C:()=>c});var o=t(5),n=t(3),s=t(67);const c=e=>{const r=(0,o.createHash)("sha1").update(e).digest("hex");return(0,n.join)((0,s.R)(),".aws","sso","cache",`${r}.json`)}},833(e,r,t){t.d(r,{a:()=>s,v:()=>c});var o=t(27),n=t(834);const s={},c=async e=>{if(s[e])return s[e];const r=(0,n.C)(e),t=await(0,o.readFile)(r,"utf8");return JSON.parse(t)}},832(e,r,t){t.d(r,{Y:()=>n});var o=t(63);const n=async e=>{const r=await(0,o.p)(e);return((...e)=>{const r={};for(const t of e)for(const[e,o]of Object.entries(t))void 0!==r[e]?Object.assign(r[e],o):r[e]=o;return r})(r.configFile,r.credentialsFile)}}};
2
+ "use strict";exports.id=114,exports.ids=[114,876],exports.modules={844(e,r,t){t.d(r,{fromProcess:()=>f});var o=t(840),n=t(57),s=t(845),c=t(56),i=t(846),a=t(18),d=t(87);const l=async(e,r,t)=>{const o=r[e];if(!r[e])throw new c.C(`Profile ${e} could not be found in shared credentials file.`,{logger:t});{const n=o.credential_process;if(void 0===n)throw new c.C(`Profile ${e} did not contain credential_process.`,{logger:t});{const o=(0,a.promisify)(s.Z?.getTokenRecord?.().exec??i.exec);try{const{stdout:t}=await o(n);let s;try{s=JSON.parse(t.trim())}catch{throw Error(`Profile ${e} credential_process returned invalid JSON.`)}return((e,r,t)=>{if(1!==r.Version)throw Error(`Profile ${e} credential_process did not return Version 1.`);if(void 0===r.AccessKeyId||void 0===r.SecretAccessKey)throw Error(`Profile ${e} credential_process returned invalid credentials.`);if(r.Expiration){const t=new Date;if(new Date(r.Expiration)<t)throw Error(`Profile ${e} credential_process returned expired credentials.`)}let o=r.AccountId;!o&&t?.[e]?.aws_account_id&&(o=t[e].aws_account_id);const n={accessKeyId:r.AccessKeyId,secretAccessKey:r.SecretAccessKey,...r.SessionToken&&{sessionToken:r.SessionToken},...r.Expiration&&{expiration:new Date(r.Expiration)},...r.CredentialScope&&{credentialScope:r.CredentialScope},...o&&{accountId:o}};return(0,d.g)(n,"CREDENTIALS_PROCESS","w"),n})(e,s,r)}catch(e){throw new c.C(e.message,{logger:t})}}}},f=(e={})=>async({callerClientConfig:r}={})=>{e.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");const t=await(0,o.Y)(e);return l((0,n.Bz)({profile:e.profile??r?.profile}),t,e.logger)}},845(e,r,t){t.d(r,{Z:()=>s});var o=t(841),n=t(65);const s={getFileRecord:()=>n.Jj,interceptFile(e,r){n.Jj[e]=Promise.resolve(r)},getTokenRecord:()=>o.a,interceptToken(e,r){o.a[e]=r}}},842(e,r,t){t.d(r,{C:()=>c});var o=t(20),n=t(59),s=t(63);const c=e=>{const r=(0,o.createHash)("sha1").update(e).digest("hex");return(0,n.join)((0,s.R)(),".aws","sso","cache",`${r}.json`)}},841(e,r,t){t.d(r,{a:()=>s,v:()=>c});var o=t(28),n=t(842);const s={},c=async e=>{if(s[e])return s[e];const r=(0,n.C)(e),t=await(0,o.readFile)(r,"utf8");return JSON.parse(t)}},840(e,r,t){t.d(r,{Y:()=>n});var o=t(58);const n=async e=>{const r=await(0,o.p)(e);return((...e)=>{const r={};for(const t of e)for(const[e,o]of Object.entries(t))void 0!==r[e]?Object.assign(r[e],o):r[e]=o;return r})(r.configFile,r.credentialsFile)}}};
package/dist/224.index.js CHANGED
@@ -1,2 +1,2 @@
1
1
  #!/usr/bin/env node
2
- "use strict";exports.id=224,exports.ids=[224],exports.modules={851(e,t,n){n.d(t,{CreateTokenCommand:()=>Ct,SSOOIDCClient:()=>Pt});var r=n(32),i=n(34),s=n(35),o=n(36),a=n(38),c=n(44),p=n(46),d=n(45),u=n(49),l=n(50),h=n(53),m=n(54),v=n(71),S=n(74),x=n(77),f=n(79),g=n(47),E=n(55);const y=async(e,t,n)=>({operation:(0,g.u)(t).operation,region:await(0,E.t)(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()});const I=e=>{const t=[];if("CreateToken"===e.operation)t.push({schemeId:"smithy.api#noAuth"});else t.push(function(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sso-oauth",region:e.region},propertiesExtractor:(e,t)=>({signingProperties:{config:e,context:t}})}}(e));return t},P={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var b=n(845),k=n(87),C=n(88),O=n(90),D=n(94),w=n(95),A=n(96),T=n(97),R=n(98),$=n(57),j=n(99),U=n(100),F=n(102),_=n(101),z=n(103),q=n(105),G=n(43),H=n(106),V=n(846),M=n(850),N=n(75),W=n(52),L=n(112),B=n(113),J=n(83),K=n(114),Q=n(39),X=n(128),Y=n(129),Z=n(40);const ee="required",te="fn",ne="argv",re="ref",ie=!0,se="isSet",oe="booleanEquals",ae="error",ce="endpoint",pe="tree",de="PartitionResult",ue="getAttr",le={[ee]:!1,type:"string"},he={[ee]:!0,default:!1,type:"boolean"},me={[re]:"Endpoint"},ve={[te]:oe,[ne]:[{[re]:"UseFIPS"},!0]},Se={[te]:oe,[ne]:[{[re]:"UseDualStack"},!0]},xe={},fe={[te]:ue,[ne]:[{[re]:de},"supportsFIPS"]},ge={[re]:de},Ee={[te]:oe,[ne]:[!0,{[te]:ue,[ne]:[ge,"supportsDualStack"]}]},ye=[ve],Ie=[Se],Pe=[{[re]:"Region"}],be={version:"1.0",parameters:{Region:le,UseDualStack:he,UseFIPS:he,Endpoint:le},rules:[{conditions:[{[te]:se,[ne]:[me]}],rules:[{conditions:ye,error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:ae},{conditions:Ie,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:ae},{endpoint:{url:me,properties:xe,headers:xe},type:ce}],type:pe},{conditions:[{[te]:se,[ne]:Pe}],rules:[{conditions:[{[te]:"aws.partition",[ne]:Pe,assign:de}],rules:[{conditions:[ve,Se],rules:[{conditions:[{[te]:oe,[ne]:[ie,fe]},Ee],rules:[{endpoint:{url:"https://oidc-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:xe,headers:xe},type:ce}],type:pe},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:ae}],type:pe},{conditions:ye,rules:[{conditions:[{[te]:oe,[ne]:[fe,ie]}],rules:[{conditions:[{[te]:"stringEquals",[ne]:[{[te]:ue,[ne]:[ge,"name"]},"aws-us-gov"]}],endpoint:{url:"https://oidc.{Region}.amazonaws.com",properties:xe,headers:xe},type:ce},{endpoint:{url:"https://oidc-fips.{Region}.{PartitionResult#dnsSuffix}",properties:xe,headers:xe},type:ce}],type:pe},{error:"FIPS is enabled but this partition does not support FIPS",type:ae}],type:pe},{conditions:Ie,rules:[{conditions:[Ee],rules:[{endpoint:{url:"https://oidc.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:xe,headers:xe},type:ce}],type:pe},{error:"DualStack is enabled but this partition does not support DualStack",type:ae}],type:pe},{endpoint:{url:"https://oidc.{Region}.{PartitionResult#dnsSuffix}",properties:xe,headers:xe},type:ce}],type:pe}],type:pe},{error:"Invalid Configuration: Missing Region",type:ae}]},ke=new X.k({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),Ce=(e,t={})=>ke.get(e,()=>(0,Y.s)(be,{endpointParams:e,logger:t.logger}));Z.m.aws=Q.UF;var Oe=n(116),De=n(119);class we extends De.T{constructor(e){super(e),Object.setPrototypeOf(this,we.prototype)}}class Ae extends we{name="AccessDeniedException";$fault="client";error;reason;error_description;constructor(e){super({name:"AccessDeniedException",$fault:"client",...e}),Object.setPrototypeOf(this,Ae.prototype),this.error=e.error,this.reason=e.reason,this.error_description=e.error_description}}class Te extends we{name="AuthorizationPendingException";$fault="client";error;error_description;constructor(e){super({name:"AuthorizationPendingException",$fault:"client",...e}),Object.setPrototypeOf(this,Te.prototype),this.error=e.error,this.error_description=e.error_description}}class Re extends we{name="ExpiredTokenException";$fault="client";error;error_description;constructor(e){super({name:"ExpiredTokenException",$fault:"client",...e}),Object.setPrototypeOf(this,Re.prototype),this.error=e.error,this.error_description=e.error_description}}class $e extends we{name="InternalServerException";$fault="server";error;error_description;constructor(e){super({name:"InternalServerException",$fault:"server",...e}),Object.setPrototypeOf(this,$e.prototype),this.error=e.error,this.error_description=e.error_description}}class je extends we{name="InvalidClientException";$fault="client";error;error_description;constructor(e){super({name:"InvalidClientException",$fault:"client",...e}),Object.setPrototypeOf(this,je.prototype),this.error=e.error,this.error_description=e.error_description}}class Ue extends we{name="InvalidGrantException";$fault="client";error;error_description;constructor(e){super({name:"InvalidGrantException",$fault:"client",...e}),Object.setPrototypeOf(this,Ue.prototype),this.error=e.error,this.error_description=e.error_description}}class Fe extends we{name="InvalidRequestException";$fault="client";error;reason;error_description;constructor(e){super({name:"InvalidRequestException",$fault:"client",...e}),Object.setPrototypeOf(this,Fe.prototype),this.error=e.error,this.reason=e.reason,this.error_description=e.error_description}}class _e extends we{name="InvalidScopeException";$fault="client";error;error_description;constructor(e){super({name:"InvalidScopeException",$fault:"client",...e}),Object.setPrototypeOf(this,_e.prototype),this.error=e.error,this.error_description=e.error_description}}class ze extends we{name="SlowDownException";$fault="client";error;error_description;constructor(e){super({name:"SlowDownException",$fault:"client",...e}),Object.setPrototypeOf(this,ze.prototype),this.error=e.error,this.error_description=e.error_description}}class qe extends we{name="UnauthorizedClientException";$fault="client";error;error_description;constructor(e){super({name:"UnauthorizedClientException",$fault:"client",...e}),Object.setPrototypeOf(this,qe.prototype),this.error=e.error,this.error_description=e.error_description}}class Ge extends we{name="UnsupportedGrantTypeException";$fault="client";error;error_description;constructor(e){super({name:"UnsupportedGrantTypeException",$fault:"client",...e}),Object.setPrototypeOf(this,Ge.prototype),this.error=e.error,this.error_description=e.error_description}}const He="client",Ve="error",Me="error_description",Ne="http",We="httpError",Le="reason",Be="refreshToken",Je="smithy.ts.sdk.synthetic.com.amazonaws.ssooidc",Ke="com.amazonaws.ssooidc",Qe=Oe.O.for(Je);var Xe=[-3,Je,"SSOOIDCServiceException",0,[],[]];Qe.registerError(Xe,we);const Ye=Oe.O.for(Ke);var Ze=[-3,Ke,"AccessDeniedException",{[Ve]:He,[We]:400},[Ve,Le,Me],[0,0,0]];Ye.registerError(Ze,Ae);var et=[-3,Ke,"AuthorizationPendingException",{[Ve]:He,[We]:400},[Ve,Me],[0,0]];Ye.registerError(et,Te);var tt=[-3,Ke,"ExpiredTokenException",{[Ve]:He,[We]:400},[Ve,Me],[0,0]];Ye.registerError(tt,Re);var nt=[-3,Ke,"InternalServerException",{[Ve]:"server",[We]:500},[Ve,Me],[0,0]];Ye.registerError(nt,$e);var rt=[-3,Ke,"InvalidClientException",{[Ve]:He,[We]:401},[Ve,Me],[0,0]];Ye.registerError(rt,je);var it=[-3,Ke,"InvalidGrantException",{[Ve]:He,[We]:400},[Ve,Me],[0,0]];Ye.registerError(it,Ue);var st=[-3,Ke,"InvalidRequestException",{[Ve]:He,[We]:400},[Ve,Le,Me],[0,0,0]];Ye.registerError(st,Fe);var ot=[-3,Ke,"InvalidScopeException",{[Ve]:He,[We]:400},[Ve,Me],[0,0]];Ye.registerError(ot,_e);var at=[-3,Ke,"SlowDownException",{[Ve]:He,[We]:400},[Ve,Me],[0,0]];Ye.registerError(at,ze);var ct=[-3,Ke,"UnauthorizedClientException",{[Ve]:He,[We]:400},[Ve,Me],[0,0]];Ye.registerError(ct,qe);var pt=[-3,Ke,"UnsupportedGrantTypeException",{[Ve]:He,[We]:400},[Ve,Me],[0,0]];Ye.registerError(pt,Ge);const dt=[Qe,Ye];var ut=[0,Ke,"AccessToken",8,0],lt=[0,Ke,"ClientSecret",8,0],ht=[0,Ke,"CodeVerifier",8,0],mt=[0,Ke,"IdToken",8,0],vt=[0,Ke,"RefreshToken",8,0],St=[3,Ke,"CreateTokenRequest",0,["clientId","clientSecret","grantType","deviceCode","code",Be,"scope","redirectUri","codeVerifier"],[0,[()=>lt,0],0,0,0,[()=>vt,0],64,0,[()=>ht,0]],3],xt=[3,Ke,"CreateTokenResponse",0,["accessToken","tokenType","expiresIn",Be,"idToken"],[[()=>ut,0],0,1,[()=>vt,0],[()=>mt,0]]],ft=[9,Ke,"CreateToken",{[Ne]:["POST","/token",200]},()=>St,()=>xt];const gt=e=>{(0,F.I)(process.version);const t=(0,q.I)(e),n=()=>t().then(_.l),r=(e=>({apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??L.E,base64Encoder:e?.base64Encoder??B.n,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Ce,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??I,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:e=>e.getIdentityProvider("aws.auth#sigv4"),signer:new H.f2},{schemeId:"smithy.api#noAuth",identityProvider:e=>e.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new M.m}],logger:e?.logger??new N.N,protocol:e?.protocol??V.Y,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.ssooidc",errorTypeRegistries:dt,version:"2019-06-10",serviceTarget:"AWSSSOOIDCService"},serviceId:e?.serviceId??"SSO OIDC",urlParser:e?.urlParser??W.D,utf8Decoder:e?.utf8Decoder??J.a,utf8Encoder:e?.utf8Encoder??K.P}))(e);(0,k.I)(process.version);const i={profile:e?.profile,logger:r.logger};return{...r,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??(0,$.Z)(C.$,i),bodyLengthChecker:e?.bodyLengthChecker??z.n,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,O.pf)({serviceId:r.serviceId,clientVersion:b.rE}),maxAttempts:e?.maxAttempts??(0,$.Z)(v.qs,e),region:e?.region??(0,$.Z)(w.GG,{...w.zH,...i}),requestHandler:j.$.create(e?.requestHandler??n),retryMode:e?.retryMode??(0,$.Z)({...v.kN,default:async()=>(await n()).retryMode||G.L0},e),sha256:e?.sha256??R.V.bind(null,"sha256"),streamCollector:e?.streamCollector??U.k,useDualstackEndpoint:e?.useDualstackEndpoint??(0,$.Z)(A.e$,i),useFipsEndpoint:e?.useFipsEndpoint??(0,$.Z)(T.Ko,i),userAgentAppId:e?.userAgentAppId??(0,$.Z)(D.hV,i)}};var Et=n(130),yt=n(131),It=n(132);class Pt extends x.K{config;constructor(...[e]){const t=gt(e||{});super(t),this.initConfig=t;const n=(x=t,Object.assign(x,{useDualstackEndpoint:x.useDualstackEndpoint??!1,useFipsEndpoint:x.useFipsEndpoint??!1,defaultSigningName:"sso-oauth"}));var x;const g=(0,o.D)(n),I=(0,v.$z)(g),P=(0,c.T)(I),b=(0,r.OV)(P),k=((e,t)=>{const n=Object.assign((0,Et.R)(e),(0,It.xA)(e),(0,yt.e)(e),(e=>{const t=e.httpAuthSchemes;let n=e.httpAuthSchemeProvider,r=e.credentials;return{setHttpAuthScheme(e){const n=t.findIndex(t=>t.schemeId===e.schemeId);-1===n?t.push(e):t.splice(n,1,e)},httpAuthSchemes:()=>t,setHttpAuthSchemeProvider(e){n=e},httpAuthSchemeProvider:()=>n,setCredentials(e){r=e},credentials:()=>r}})(e));return t.forEach(e=>e.configure(n)),Object.assign(e,(0,Et.$)(n),(0,It.uv)(n),(0,yt.j)(n),{httpAuthSchemes:(r=n).httpAuthSchemes(),httpAuthSchemeProvider:r.httpAuthSchemeProvider(),credentials:r.credentials()});var r})((e=>{const t=(0,f.h)(e);return Object.assign(t,{authSchemePreference:(0,E.t)(e.authSchemePreference??[])})})((0,m.C)(b)),e?.extensions||[]);this.config=k,this.middlewareStack.use((0,l.wq)(this.config)),this.middlewareStack.use((0,a.sM)(this.config)),this.middlewareStack.use((0,S.ey)(this.config)),this.middlewareStack.use((0,h.vK)(this.config)),this.middlewareStack.use((0,r.TC)(this.config)),this.middlewareStack.use((0,i.Y7)(this.config)),this.middlewareStack.use((0,s.n)(this.config)),this.middlewareStack.use((0,p.w)(this.config,{httpAuthSchemeParametersProvider:y,identityProviderConfigProvider:async e=>new d.h({"aws.auth#sigv4":e.credentials})})),this.middlewareStack.use((0,u.l)(this.config))}destroy(){super.destroy()}}var bt=n(133),kt=n(134);class Ct extends(kt.u.classBuilder().ep(P).m(function(e,t,n,r){return[(0,bt.r)(n,e.getEndpointParameterInstructions())]}).s("AWSSSOOIDCService","CreateToken",{}).n("SSOOIDCClient","CreateTokenCommand").sc(ft).build()){}}};
2
+ "use strict";exports.id=224,exports.ids=[224,843],exports.modules={839(e,o,s){s.d(o,{fromSSO:()=>N});var t=s(57),n=s(840),r=s(56),i=s(62),a=s(60),c=s(61);const l=e=>Object.entries(e).filter(([e])=>e.startsWith(a.I.SSO_SESSION+c.Q)).reduce((e,[o,s])=>({...e,[o.substring(o.indexOf(c.Q)+1)]:s}),{});var f=s(64),g=s(65);const w=()=>({}),h=async(e={})=>(0,g.TA)(e.configFilepath??(0,i.g)()).then(f.A).then(l).catch(w);var d=s(87),p=s(54);class u extends p.m{name="TokenProviderError";constructor(e,o=!0){super(e,o),Object.setPrototypeOf(this,u.prototype)}}var S=s(841);const C="To refresh this SSO session run 'aws sso login' with the corresponding profile.",y=async(e,o,t={},n)=>{const{CreateTokenCommand:r}=await Promise.all([s.e(350),s.e(485)]).then(s.bind(s,859)),i=await(async(e,o={},t)=>{const{SSOOIDCClient:n}=await Promise.all([s.e(350),s.e(485)]).then(s.bind(s,859)),r=e=>o.clientConfig?.[e]??o.parentClientConfig?.[e]??t?.[e];return new n(Object.assign({},o.clientConfig??{},{region:e??o.clientConfig?.region,logger:r("logger"),userAgentAppId:r("userAgentAppId")}))})(o,t,n);return i.send(new r({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))},k=e=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new u(`Token is expired. ${C}`,!1)},m=(e,o,s=!1)=>{if(void 0===o)throw new u(`Value not present for '${e}' in SSO Token${s?". Cannot refresh":""}. ${C}`,!1)};var _=s(842),O=s(106);const{writeFile:x}=O.promises,T=new Date(0),A=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");const s=await(0,n.Y)(e),r=(0,t.Bz)({profile:e.profile??o?.profile}),i=s[r];if(!i)throw new u(`Profile '${r}' could not be found in shared credentials file.`,!1);if(!i.sso_session)throw new u(`Profile '${r}' is missing required property 'sso_session'.`);const a=i.sso_session,c=(await h(e))[a];if(!c)throw new u(`Sso session '${a}' could not be found in shared credentials file.`,!1);for(const e of["sso_start_url","sso_region"])if(!c[e])throw new u(`Sso session '${a}' is missing required property '${e}'.`,!1);c.sso_start_url;const l=c.sso_region;let f;try{f=await(0,S.v)(a)}catch(e){throw new u(`The SSO session token associated with profile=${r} was not found or is invalid. ${C}`,!1)}m("accessToken",f.accessToken),m("expiresAt",f.expiresAt);const{accessToken:g,expiresAt:w}=f,d={token:g,expiration:new Date(w)};if(d.expiration.getTime()-Date.now()>3e5)return d;if(Date.now()-T.getTime()<3e4)return k(d),d;m("clientId",f.clientId,!0),m("clientSecret",f.clientSecret,!0),m("refreshToken",f.refreshToken,!0);try{T.setTime(Date.now());const s=await y(f,l,e,o);m("accessToken",s.accessToken),m("expiresIn",s.expiresIn);const t=new Date(Date.now()+1e3*s.expiresIn);try{await((e,o)=>{const s=(0,_.C)(e),t=JSON.stringify(o,null,2);return x(s,t)})(a,{...f,accessToken:s.accessToken,expiresAt:t.toISOString(),refreshToken:s.refreshToken})}catch(e){}return{token:s.accessToken,expiration:t}}catch(e){return k(d),d}},I=!1,v=async({ssoStartUrl:e,ssoSession:o,ssoAccountId:t,ssoRegion:n,ssoRoleName:i,ssoClient:a,clientConfig:c,parentClientConfig:l,callerClientConfig:f,profile:g,filepath:w,configFilepath:h,ignoreCache:p,logger:u})=>{let C;const y="To refresh this SSO session run aws sso login with the corresponding profile.";if(o)try{const e=await A({profile:g,filepath:w,configFilepath:h,ignoreCache:p,clientConfig:c,parentClientConfig:l,logger:u})({callerClientConfig:f});C={accessToken:e.token,expiresAt:new Date(e.expiration).toISOString()}}catch(e){throw new r.C(e.message,{tryNextLink:I,logger:u})}else try{C=await(0,S.v)(e)}catch(e){throw new r.C(`The SSO session associated with this profile is invalid. ${y}`,{tryNextLink:I,logger:u})}if(new Date(C.expiresAt).getTime()-Date.now()<=0)throw new r.C(`The SSO session associated with this profile has expired. ${y}`,{tryNextLink:I,logger:u});const{accessToken:k}=C,{SSOClient:m,GetRoleCredentialsCommand:_}=await Promise.all([s.e(350),s.e(890)]).then(s.bind(s,852)),O=a||new m(Object.assign({},c??{},{logger:c?.logger??f?.logger??l?.logger,region:c?.region??n,userAgentAppId:c?.userAgentAppId??f?.userAgentAppId??l?.userAgentAppId}));let x;try{x=await O.send(new _({accountId:t,roleName:i,accessToken:k}))}catch(e){throw new r.C(e,{tryNextLink:I,logger:u})}const{roleCredentials:{accessKeyId:T,secretAccessKey:v,sessionToken:N,expiration:$,credentialScope:D,accountId:R}={}}=x;if(!(T&&v&&N&&$))throw new r.C("SSO returns an invalid temporary credential.",{tryNextLink:I,logger:u});const L={accessKeyId:T,secretAccessKey:v,sessionToken:N,expiration:new Date($),...D&&{credentialScope:D},...R&&{accountId:R}};return o?(0,d.g)(L,"CREDENTIALS_SSO","s"):(0,d.g)(L,"CREDENTIALS_SSO_LEGACY","u"),L},N=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");const{ssoStartUrl:s,ssoAccountId:i,ssoRegion:a,ssoRoleName:c,ssoSession:l}=e,{ssoClient:f}=e,g=(0,t.Bz)({profile:e.profile??o?.profile});if(s||i||a||c||l){if(s&&i&&a&&c)return v({ssoStartUrl:s,ssoSession:l,ssoAccountId:i,ssoRegion:a,ssoRoleName:c,ssoClient:f,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:g,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger});throw new r.C('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger})}{const o=(await(0,n.Y)(e))[g];if(!o)throw new r.C(`Profile ${g} was not found.`,{logger:e.logger});if(!(w=o)||"string"!=typeof w.sso_start_url&&"string"!=typeof w.sso_account_id&&"string"!=typeof w.sso_session&&"string"!=typeof w.sso_region&&"string"!=typeof w.sso_role_name)throw new r.C(`Profile ${g} is not configured with SSO credentials.`,{logger:e.logger});if(o?.sso_session){const t=(await h(e))[o.sso_session],n=` configurations in profile ${g} and sso-session ${o.sso_session}`;if(a&&a!==t.sso_region)throw new r.C("Conflicting SSO region"+n,{tryNextLink:!1,logger:e.logger});if(s&&s!==t.sso_start_url)throw new r.C("Conflicting SSO start_url"+n,{tryNextLink:!1,logger:e.logger});o.sso_region=t.sso_region,o.sso_start_url=t.sso_start_url}const{sso_start_url:t,sso_account_id:i,sso_region:c,sso_role_name:l,sso_session:d}=((e,o)=>{const{sso_start_url:s,sso_account_id:t,sso_region:n,sso_role_name:i}=e;if(!(s&&t&&n&&i))throw new r.C(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}\nReference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:o});return e})(o,e.logger);return v({ssoStartUrl:t,ssoSession:d,ssoAccountId:i,ssoRegion:c,ssoRoleName:l,ssoClient:f,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:g,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}var w}},842(e,o,s){s.d(o,{C:()=>i});var t=s(20),n=s(59),r=s(63);const i=e=>{const o=(0,t.createHash)("sha1").update(e).digest("hex");return(0,n.join)((0,r.R)(),".aws","sso","cache",`${o}.json`)}},841(e,o,s){s.d(o,{a:()=>r,v:()=>i});var t=s(28),n=s(842);const r={},i=async e=>{if(r[e])return r[e];const o=(0,n.C)(e),s=await(0,t.readFile)(o,"utf8");return JSON.parse(s)}},840(e,o,s){s.d(o,{Y:()=>n});var t=s(58);const n=async e=>{const o=await(0,t.p)(e);return((...e)=>{const o={};for(const s of e)for(const[e,t]of Object.entries(s))void 0!==o[e]?Object.assign(o[e],t):o[e]=t;return o})(o.configFile,o.credentialsFile)}}};
@@ -0,0 +1,2 @@
1
+ #!/usr/bin/env node
2
+ "use strict";exports.id=248,exports.ids=[248],exports.modules={860(e,t,s){s.d(t,{getDefaultRoleAssumer:()=>Ss,getDefaultRoleAssumerWithWebIdentity:()=>Es});var n=s(52),r=s(103);const i={silence:!1};var o=s(87),a=s(138),c=s(51);const u={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var l=s(117),d=s(121);class h extends d.T{constructor(e){super(e),Object.setPrototypeOf(this,h.prototype)}}class p extends h{name="ExpiredTokenException";$fault="client";constructor(e){super({name:"ExpiredTokenException",$fault:"client",...e}),Object.setPrototypeOf(this,p.prototype)}}class g extends h{name="MalformedPolicyDocumentException";$fault="client";constructor(e){super({name:"MalformedPolicyDocumentException",$fault:"client",...e}),Object.setPrototypeOf(this,g.prototype)}}class f extends h{name="PackedPolicyTooLargeException";$fault="client";constructor(e){super({name:"PackedPolicyTooLargeException",$fault:"client",...e}),Object.setPrototypeOf(this,f.prototype)}}class m extends h{name="RegionDisabledException";$fault="client";constructor(e){super({name:"RegionDisabledException",$fault:"client",...e}),Object.setPrototypeOf(this,m.prototype)}}class w extends h{name="IDPRejectedClaimException";$fault="client";constructor(e){super({name:"IDPRejectedClaimException",$fault:"client",...e}),Object.setPrototypeOf(this,w.prototype)}}class y extends h{name="InvalidIdentityTokenException";$fault="client";constructor(e){super({name:"InvalidIdentityTokenException",$fault:"client",...e}),Object.setPrototypeOf(this,y.prototype)}}class v extends h{name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor(e){super({name:"IDPCommunicationErrorException",$fault:"client",...e}),Object.setPrototypeOf(this,v.prototype)}}const S="AssumedRoleUser",E="Credentials",b="DurationSeconds",x="Policy",A="PolicyArns",k="PackedPolicySize",I="RoleArn",P="RoleSessionName",R="SourceIdentity",$="awsQueryError",T="client",D="error",C="httpError",N="message",j="smithy.ts.sdk.synthetic.com.amazonaws.sts",O="com.amazonaws.sts",M=l.O.for(j);var W=[-3,j,"STSServiceException",0,[],[]];M.registerError(W,h);const F=l.O.for(O);var L=[-3,O,"ExpiredTokenException",{[$]:["ExpiredTokenException",400],[D]:T,[C]:400},[N],[0]];F.registerError(L,p);var z=[-3,O,"IDPCommunicationErrorException",{[$]:["IDPCommunicationError",400],[D]:T,[C]:400},[N],[0]];F.registerError(z,v);var q=[-3,O,"IDPRejectedClaimException",{[$]:["IDPRejectedClaim",403],[D]:T,[C]:403},[N],[0]];F.registerError(q,w);var U=[-3,O,"InvalidIdentityTokenException",{[$]:["InvalidIdentityToken",400],[D]:T,[C]:400},[N],[0]];F.registerError(U,y);var _=[-3,O,"MalformedPolicyDocumentException",{[$]:["MalformedPolicyDocument",400],[D]:T,[C]:400},[N],[0]];F.registerError(_,g);var V=[-3,O,"PackedPolicyTooLargeException",{[$]:["PackedPolicyTooLarge",400],[D]:T,[C]:400},[N],[0]];F.registerError(V,f);var K=[-3,O,"RegionDisabledException",{[$]:["RegionDisabledException",403],[D]:T,[C]:403},[N],[0]];F.registerError(K,m);const G=[M,F];var H=[0,O,"accessKeySecretType",8,0],X=[0,O,"clientTokenType",8,0],J=[3,O,S,0,["AssumedRoleId","Arn"],[0,0],2],Q=[3,O,"AssumeRoleRequest",0,[I,P,A,x,b,"Tags","TransitiveTagKeys","ExternalId","SerialNumber","TokenCode",R,"ProvidedContexts"],[0,0,()=>re,0,1,()=>oe,64,0,0,0,0,()=>ie],2],Z=[3,O,"AssumeRoleResponse",0,[E,S,k,R],[[()=>ee,0],()=>J,1,0]],Y=[3,O,"AssumeRoleWithWebIdentityRequest",0,[I,P,"WebIdentityToken","ProviderId",A,x,b],[0,0,[()=>X,0],0,()=>re,0,1],3],B=[3,O,"AssumeRoleWithWebIdentityResponse",0,[E,"SubjectFromWebIdentityToken",S,k,"Provider","Audience",R],[[()=>ee,0],0,()=>J,1,0,0,0]],ee=[3,O,E,0,["AccessKeyId","SecretAccessKey","SessionToken","Expiration"],[0,[()=>H,0],0,4],4],te=[3,O,"PolicyDescriptorType",0,["arn"],[0]],se=[3,O,"ProvidedContext",0,["ProviderArn","ContextAssertion"],[0,0]],ne=[3,O,"Tag",0,["Key","Value"],[0,0],2],re=[1,O,"policyDescriptorListType",0,()=>te],ie=[1,O,"ProvidedContextsListType",0,()=>se],oe=[1,O,"tagListType",0,()=>ne],ae=[9,O,"AssumeRole",0,()=>Q,()=>Z],ce=[9,O,"AssumeRoleWithWebIdentity",0,()=>Y,()=>B];class ue extends(a.u.classBuilder().ep(u).m(function(e,t,s,n){return[(0,c.rD)(s,e.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRole",{}).n("STSClient","AssumeRoleCommand").sc(ae).build()){}class le extends(a.u.classBuilder().ep(u).m(function(e,t,s,n){return[(0,c.rD)(s,e.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoleWithWebIdentity",{}).n("STSClient","AssumeRoleWithWebIdentityCommand").sc(ce).build()){}const de=e=>{if("string"==typeof e?.Arn){const t=e.Arn.split(":");if(t.length>4&&""!==t[4])return t[4]}},he=async(e,t,s,o={})=>{const a="function"==typeof e?await e():e,c="function"==typeof t?await t():t;let u="";const l=a??c??(u=await function(e={}){return(0,n.Z)({...r.GG,default:async()=>(i.silence||console.warn("@aws-sdk - WARN - default STS region of us-east-1 used. See @aws-sdk/credential-providers README and set a region explicitly."),"us-east-1")},{...r.zH,...e})}(o)());return s?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${a} (credential provider clientConfig)`,`${c} (contextual client)`,`${u} (STS default: AWS_REGION, profile region, or us-east-1)`),l},pe=e=>"h2"===e?.metadata?.handlerProtocol;var ge=s(36),fe=s(32),me=s(38),we=s(34),ye=s(35),ve=s(43),Se=s(42),Ee=s(46),be=s(47),xe=s(49),Ae=s(70),ke=s(84),Ie=s(71),Pe=s(85),Re=s(86),$e=s(37),Te=s(54);const De={environmentVariableSelector(e){if(e.AWS_SIGV4A_SIGNING_REGION_SET)return e.AWS_SIGV4A_SIGNING_REGION_SET.split(",").map(e=>e.trim());throw new Te.m("AWS_SIGV4A_SIGNING_REGION_SET not set in env.",{tryNextLink:!0})},configFileSelector(e){if(e.sigv4a_signing_region_set)return(e.sigv4a_signing_region_set??"").split(",").map(e=>e.trim());throw new Te.m("sigv4a_signing_region_set not set in profile.",{tryNextLink:!0})},default:void 0},Ce=null,Ne=null;var je=s(88);const Oe="X-Amz-S3session-Token",Me=Oe.toLowerCase();class We extends je.B{async signWithCredentials(e,t,s){const n=Fe(t);e.headers[Me]=t.sessionToken;return Le(this,n),this.signRequest(e,s??{})}async presignWithCredentials(e,t,s){const n=Fe(t);delete e.headers[Me],e.headers[Oe]=t.sessionToken,e.query=e.query??{},e.query[Oe]=t.sessionToken;return Le(this,n),this.presign(e,s)}}function Fe(e){return{accessKeyId:e.accessKeyId,secretAccessKey:e.secretAccessKey,expiration:e.expiration}}function Le(e,t){const s=e.credentialProvider;e.credentialProvider=()=>(e.credentialProvider=s,Promise.resolve(t))}class ze{sigv4aSigner;sigv4Signer;signerOptions;static sigv4aDependency(){return"function"==typeof Ne?"crt":"function"==typeof Ce?"js":"none"}constructor(e){this.sigv4Signer=new We(e),this.signerOptions=e}async sign(e,t={}){return"*"===t.signingRegion?this.getSigv4aSigner().sign(e,t):this.sigv4Signer.sign(e,t)}async signWithCredentials(e,t,s={}){if("*"===s.signingRegion){const n=this.getSigv4aSigner();if(Ne&&n instanceof Ne)return n.signWithCredentials(e,t,s);throw new Error('signWithCredentials with signingRegion \'*\' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt')}return this.sigv4Signer.signWithCredentials(e,t,s)}async presign(e,t={}){if("*"===t.signingRegion){const s=this.getSigv4aSigner();if(Ne&&s instanceof Ne)return s.presign(e,t);throw new Error('presign with signingRegion \'*\' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt')}return this.sigv4Signer.presign(e,t)}async presignWithCredentials(e,t,s={}){if("*"===s.signingRegion)throw new Error("Method presignWithCredentials is not supported for [signingRegion=*].");return this.sigv4Signer.presignWithCredentials(e,t,s)}getSigv4aSigner(){if(!this.sigv4aSigner){const e=Ne,t=Ce;if("node"===this.signerOptions.runtime){if(!e&&!t)throw new Error("Neither CRT nor JS SigV4a implementation is available. Please load either @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");if(e&&"function"==typeof e)this.sigv4aSigner=new e({...this.signerOptions,signingAlgorithm:1});else{if(!t||"function"!=typeof t)throw new Error("Available SigV4a implementation is not a valid constructor. Please ensure you've properly imported @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a.For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");this.sigv4aSigner=new t({...this.signerOptions})}}else{if(!t||"function"!=typeof t)throw new Error("JS SigV4a implementation is not available or not a valid constructor. Please check whether you have installed the @aws-sdk/signature-v4a package explicitly. The CRT implementation is not available for browsers. You must also register the package by calling [require('@aws-sdk/signature-v4a');] or an ESM equivalent such as [import '@aws-sdk/signature-v4a';]. For more information please go to https://github.com/aws/aws-sdk-js-v3#using-javascript-non-crt-implementation-of-sigv4a");this.sigv4aSigner=new t({...this.signerOptions})}}return this.sigv4aSigner}}var qe=s(44),Ue=s(69),_e=s(66),Ve=s(129),Ke=s(132),Ge=s(133),He=s(130),Xe=s(134);const Je="ref",Qe=-1,Ze=!0,Ye="isSet",Be="PartitionResult",et="booleanEquals",tt="stringEquals",st="getAttr",nt="us-east-1",rt="sigv4",it="https://sts.{Region}.{PartitionResult#dnsSuffix}",ot={[Je]:"Endpoint"},at={[Je]:"Region"},ct={[Je]:Be},ut={},lt=[at],dt={conditions:[[Ye,[ot]],[Ye,lt],["aws.partition",lt,Be],[et,[{[Je]:"UseFIPS"},Ze]],[et,[{[Je]:"UseDualStack"},Ze]],[tt,[at,"aws-global"]],[et,[{[Je]:"UseGlobalEndpoint"},Ze]],[tt,[at,"eu-central-1"]],[et,[{fn:st,argv:[ct,"supportsDualStack"]},Ze]],[et,[{fn:st,argv:[ct,"supportsFIPS"]},Ze]],[tt,[at,"ap-south-1"]],[tt,[at,"eu-north-1"]],[tt,[at,"eu-west-1"]],[tt,[at,"eu-west-2"]],[tt,[at,"eu-west-3"]],[tt,[at,"sa-east-1"]],[tt,[at,nt]],[tt,[at,"us-east-2"]],[tt,[at,"us-west-2"]],[tt,[at,"us-west-1"]],[tt,[at,"ca-central-1"]],[tt,[at,"ap-southeast-1"]],[tt,[at,"ap-northeast-1"]],[tt,[at,"ap-southeast-2"]],[tt,[{fn:st,argv:[ct,"name"]},"aws-us-gov"]]],results:[[Qe],["https://sts.amazonaws.com",{authSchemes:[{name:rt,signingName:"sts",signingRegion:nt}]}],[it,{authSchemes:[{name:rt,signingName:"sts",signingRegion:"{Region}"}]}],[Qe,"Invalid Configuration: FIPS and custom endpoint are not supported"],[Qe,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[ot,ut],["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",ut],[Qe,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://sts.{Region}.amazonaws.com",ut],["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",ut],[Qe,"FIPS is enabled but this partition does not support FIPS"],["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",ut],[Qe,"DualStack is enabled but this partition does not support DualStack"],[it,ut],[Qe,"Invalid Configuration: Missing Region"]]},ht=1e8,pt=new Int32Array([-1,1,-1,0,30,3,1,4,ht+14,2,5,ht+14,3,25,6,4,24,7,5,ht+1,8,6,9,ht+13,7,ht+1,10,10,ht+1,11,11,ht+1,12,12,ht+1,13,13,ht+1,14,14,ht+1,15,15,ht+1,16,16,ht+1,17,17,ht+1,18,18,ht+1,19,19,ht+1,20,20,ht+1,21,21,ht+1,22,22,ht+1,23,23,ht+1,ht+2,8,ht+11,ht+12,4,28,26,9,27,ht+10,24,ht+8,ht+9,8,29,ht+7,9,ht+6,ht+7,3,ht+3,31,4,ht+4,ht+5]),gt=Xe.d.from(pt,2,dt.conditions,dt.results),ft=new Ke.k({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),mt=(e,t={})=>ft.get(e,()=>(0,Ge.c)(gt,{endpointParams:e,logger:t.logger}));He.m.aws=Ve.U;const wt=(yt=async(e,t,s)=>({operation:(0,qe.u)(t).operation,region:await(0,Ue.t)(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),async(e,t,s)=>{if(!s)throw new Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");const n=await yt(e,t,s),r=(0,qe.u)(t)?.commandInstance?.constructor?.getEndpointParameterInstructions;if(!r)throw new Error(`getEndpointParameterInstructions() is not defined on '${t.commandName}'`);const i=await(0,_e.x)(s,{getEndpointParameterInstructions:r},e);return Object.assign(n,i)});var yt;function vt(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(e,t)=>({signingProperties:{config:e,context:t}})}}function St(e){return{schemeId:"aws.auth#sigv4a",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(e,t)=>({signingProperties:{config:e,context:t}})}}function Et(e){return{schemeId:"smithy.api#noAuth"}}const bt=((e,t,s)=>n=>{const r=e(n),i=r.properties?.authSchemes;if(!i)return t(n);const o=[];for(const e of i){const{name:t,properties:r={},...a}=e,c=t.toLowerCase();let u;if(t!==c&&console.warn(`HttpAuthScheme has been normalized with lowercasing: '${t}' to '${c}'`),"sigv4a"===c){u="aws.auth#sigv4a";const e=i.find(e=>{const t=e.name.toLowerCase();return"sigv4a"!==t&&t.startsWith("sigv4")});if("none"===ze.sigv4aDependency()&&e)continue}else{if(!c.startsWith("sigv4"))throw new Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${c}'`);u="aws.auth#sigv4"}const l=s[u];if(!l)throw new Error(`Could not find HttpAuthOption create function for '${u}'`);const d=l(n);d.schemeId=u,d.signingProperties={...d.signingProperties||{},...a,...r},o.push(d)}return o})(mt,e=>{const t=[];if("AssumeRoleWithWebIdentity"===e.operation)t.push({schemeId:"smithy.api#noAuth"}),t.push(St(e));else t.push(vt(e)),t.push(St(e));return t},{"aws.auth#sigv4":vt,"aws.auth#sigv4a":St,"smithy.api#noAuth":Et}),xt=e=>{const t=(e=>(e.sigv4aSigningRegionSet=(0,$e.t)(e.sigv4aSigningRegionSet),e))((0,Re.h)(e));return Object.assign(t,{authSchemePreference:(0,Ue.t)(e.authSchemePreference??[])})};var At=s(853),kt=s(92),It=s(93),Pt=s(96),Rt=s(97),$t=s(110),Tt=s(33),Dt=s(111);class Ct extends $t.f2{async sign(e,t,s){if(!Tt.K.isInstance(e))throw new Error("The request is not an instance of `HttpRequest` and cannot be signed");const{config:n,signer:r,signingRegion:i,signingRegionSet:o,signingName:a}=await(0,$t.pz)(s),c=(await(n.sigv4aSigningRegionSet?.())??o??[i]).join(",");s._preRequestSystemClockOffset=n.systemClockOffset;return await r.sign(e,{signingDate:(0,Dt.C)(n.systemClockOffset),signingRegion:c,signingService:a})}}var Nt=s(858),jt=s(100),Ot=s(99),Mt=s(104),Wt=s(101),Ft=s(102),Lt=s(40),zt=s(105),qt=s(107),Ut=s(108),_t=s(109),Vt=s(112),Kt=s(119),Gt=s(114),Ht=s(113),Xt=s(120);class Jt{x;i=0;z;constructor(e){this.x=e,this.x=e.replace(/\r\n?/g,"\n"),this.z=this.x.length}parse(){const e=this,{z:t}=e;for(;e.i<t&&(e.trim(),!(e.i>=t));)if(e.isNext("<?"))e.readTo("?>"),e.trim();else if(e.isNext("\x3c!--"))e.readTo("--\x3e"),e.trim();else{if(!e.isNext("<!DOCTYPE",!1)){if("<"===e.x[e.i]){const t=e.parseTag();return{[t.tag]:t.value}}throw new Error("@aws-sdk XML parse error: unexpected content.")}e.skipDoctype(),e.trim()}throw new Error("@aws-sdk XML parse error: no root element.")}isNext(e,t=!0){const s=this;return t?s.x.startsWith(e,s.i):s.x.toLowerCase().startsWith(e.toLowerCase(),s.i)}readTo(e){const t=this,s=t.x.indexOf(e,t.i);if(-1===s)throw new Error(`@aws-sdk XML parse error: expected "${e}" not found.`);const n=t.x.slice(t.i,s);return t.i=s+e.length,n}trim(){const e=this;for(;e.i<e.z&&" \t\r\n".includes(e.x[e.i]);)++e.i}readAttrValue(){const e=this,t=e.x[e.i];++e.i;let s="";for(;e.i<e.z&&e.x[e.i]!==t;)s+=e.x[e.i++];return++e.i,e.decodeEntities(s)}parseTag(){const e=this;++e.i;let t="";for(;e.i<e.z&&!" \t\r\n>/".includes(e.x[e.i]);)t+=e.x[e.i++];let s=!1;const n=Object.create(null);for(;e.i<e.z&&(e.trim(),!">/".includes(e.x[e.i]));){let t="";for(;e.i<e.z&&!"= \t\r\n>/?".includes(e.x[e.i]);)t+=e.x[e.i++];if(e.trim(),"="!==e.x[e.i])break;++e.i,e.trim(),n[t]=e.readAttrValue(),s=!0}if(e.i>=e.z)throw new Error("@aws-sdk XML parse error: unexpected end of input.");if("/"===e.x[e.i]){if(++e.i,e.i>=e.z||">"!==e.x[e.i])throw new Error("@aws-sdk XML parse error: expected > at the end of self-closing tag.");return++e.i,Object.setPrototypeOf(n,Object.prototype),{tag:t,value:s?n:""}}if(">"!==e.x[e.i])throw new Error("@aws-sdk XML parse error: expected > at the end of opening tag.");++e.i;const r=[],i=[];let o=!1;for(;e.i<e.z&&!e.isNext("</");)if("<"===e.x[e.i])e.isNext("\x3c!--")?e.readTo("--\x3e"):e.isNext("<![CDATA[")?(e.i+=9,r.push(e.readTo("]]>"))):e.isNext("<?")?e.readTo("?>"):(o=!0,i.push(e.parseTag()));else{let t="";for(;e.i<e.z&&"<"!==e.x[e.i];)t+=e.x[e.i++];r.push(e.decodeEntities(t))}if(!e.isNext("</"))throw new Error(`@aws-sdk XML parse error: missing closing tag </${t}>.`);e.i+=2;const a=e.readTo(">").trim();if(a!==t)throw new Error(`@aws-sdk XML parse error: mismatched tags <${t}> and </${a}>.`);if(!s&&0===r.length&&!o)return{tag:t,value:""};if(!s&&!o){const e=1===r.length?r[0]:r.join("");return""===e.trim()&&e.includes("\n")?{tag:t,value:""}:{tag:t,value:e}}const c=Object.create(null);for(const e of r)""===e.trim()&&e.includes("\n")||(c["#text"]="#text"in c?c["#text"]+e:e);for(const e of i)e.tag in c?Array.isArray(c[e.tag])?c[e.tag].push(e.value):c[e.tag]=[c[e.tag],e.value]:c[e.tag]=e.value;for(const[e,t]of Object.entries(n))c[e]=t;return Object.setPrototypeOf(c,Object.prototype),{tag:t,value:c}}static ENTITIES={amp:"&",lt:"<",gt:">",quot:'"',apos:"'"};skipDoctype(){const e=this;e.i+=9;let t=0;for(;e.i<e.z;){const s=e.x[e.i];if("["===s)++t;else if("]"===s)--t;else if(">"===s&&0===t)return void++e.i;++e.i}throw new Error("@aws-sdk XML parse error: unclosed DOCTYPE.")}decodeEntities(e){return e.replace(/&(?:#x([0-9a-fA-F]{1,6})|#(\d{1,7})|([a-zA-Z][a-zA-Z0-9]{0,30}));/g,(e,t,s,n)=>t?String.fromCharCode(parseInt(t,16)):s?String.fromCharCode(parseInt(s,10)):Jt.ENTITIES[n]??"")}}const Qt=e=>{const t="#text";for(const s in e)Object.prototype.hasOwnProperty.call(e,s)&&void 0!==e[s][t]?e[s]=e[s][t]:"object"==typeof e[s]&&null!==e[s]&&(e[s]=Qt(e[s]));return e};var Zt=s(857),Yt=s(79),Bt=s(123),es=s(127);class ts extends Bt.B{settings;stringDeserializer;constructor(e){super(),this.settings=e,this.stringDeserializer=new Zt.k(e)}setSerdeContext(e){this.serdeContext=e,this.stringDeserializer.setSerdeContext(e)}read(e,t,s){const n=Ht.l1.of(e),r=n.getMemberSchemas();if(n.isStructSchema()&&n.isMemberSchema()&&!!Object.values(r).find(e=>!!e.getMemberTraits().eventPayload)){const e={},s=Object.keys(r)[0];return r[s].isBlobSchema()?e[s]=t:e[s]=this.read(r[s],t),e}const i=(this.serdeContext?.utf8Encoder??Yt.P)(t),o=this.parseXml(i);return this.readSchema(e,s?o[s]:o)}readSchema(e,t){const s=Ht.l1.of(e);if(s.isUnitSchema())return;const n=s.getMergedTraits();if(s.isListSchema()&&!Array.isArray(t))return this.readSchema(s,[t]);if(null==t)return t;if("object"==typeof t){const e=!!n.xmlFlattened;if(s.isListSchema()){const n=s.getValueSchema(),r=[],i=n.getMergedTraits().xmlName??"member",o=e?t:(t[0]??t)[i];if(null==o)return r;const a=Array.isArray(o)?o:[o];for(const e of a)r.push(this.readSchema(n,e));return r}const r={};if(s.isMapSchema()){const n=s.getKeySchema(),i=s.getValueSchema();let o;o=e?Array.isArray(t)?t:[t]:Array.isArray(t.entry)?t.entry:[t.entry];const a=n.getMergedTraits().xmlName??"key",c=i.getMergedTraits().xmlName??"value";for(const e of o){const t=e[a],s=e[c];r[t]=this.readSchema(i,s)}return r}if(s.isStructSchema()){const e=s.isUnionSchema();let n;e&&(n=new es.F(t,r));for(const[i,o]of s.structIterator()){const s=o.getMergedTraits(),a=s.httpPayload?s.xmlName??o.getName():o.getMemberTraits().xmlName??i;e&&n.mark(a),null!=t[a]&&(r[i]=this.readSchema(o,t[a]))}return e&&n.writeUnknown(),r}if(s.isDocumentSchema())return t;throw new Error(`@aws-sdk/core/protocols - xml deserializer unhandled schema type for ${s.getName(!0)}`)}return s.isListSchema()?[]:s.isMapSchema()||s.isStructSchema()?{}:this.stringDeserializer.read(s,t)}parseXml(e){if(e.length){let t;try{t=function(e){return new Jt(e).parse()}(e)}catch(t){throw t&&"object"==typeof t&&Object.defineProperty(t,"$responseBodyText",{value:e}),t}const s="#text",n=Object.keys(t)[0],r=t[n];return r[s]&&(r[n]=r[s],delete r[s]),Qt(r)}return{}}}var ss=s(124),ns=s(856),rs=s(83),is=s(77),os=s(73),as=s(126);class cs extends Bt.B{settings;buffer;constructor(e){super(),this.settings=e}write(e,t,s=""){void 0===this.buffer&&(this.buffer="");const n=Ht.l1.of(e);if(s&&!s.endsWith(".")&&(s+="."),n.isBlobSchema())("string"==typeof t||t instanceof Uint8Array)&&(this.writeKey(s),this.writeValue((this.serdeContext?.base64Encoder??is.n)(t)));else if(n.isBooleanSchema()||n.isNumericSchema()||n.isStringSchema())null!=t?(this.writeKey(s),this.writeValue(String(t))):n.isIdempotencyToken()&&(this.writeKey(s),this.writeValue((0,os.ec)()));else if(n.isBigIntegerSchema())null!=t&&(this.writeKey(s),this.writeValue(String(t)));else if(n.isBigDecimalSchema())null!=t&&(this.writeKey(s),this.writeValue(t instanceof as.D?t.string:String(t)));else if(n.isTimestampSchema()){if(t instanceof Date){this.writeKey(s);switch((0,ss.V)(n,this.settings)){case 5:this.writeValue(t.toISOString().replace(".000Z","Z"));break;case 6:this.writeValue((0,rs.JV)(t));break;case 7:this.writeValue(String(t.getTime()/1e3))}}}else if(n.isDocumentSchema())Array.isArray(t)?this.write(79,t,s):t instanceof Date?this.write(4,t,s):t instanceof Uint8Array?this.write(21,t,s):t&&"object"==typeof t?this.write(143,t,s):(this.writeKey(s),this.writeValue(String(t)));else if(n.isListSchema()){if(Array.isArray(t))if(0===t.length)this.settings.serializeEmptyLists&&(this.writeKey(s),this.writeValue(""));else{const e=n.getValueSchema(),r=this.settings.flattenLists||n.getMergedTraits().xmlFlattened;let i=1;for(const n of t){if(null==n)continue;const t=e.getMergedTraits(),o=this.getKey("member",t.xmlName,t.ec2QueryName),a=r?`${s}${i}`:`${s}${o}.${i}`;this.write(e,n,a),++i}}}else if(n.isMapSchema()){if(t&&"object"==typeof t){const e=n.getKeySchema(),r=n.getValueSchema(),i=n.getMergedTraits().xmlFlattened;let o=1;for(const n in t){const a=t[n];if(null==a)continue;const c=e.getMergedTraits(),u=this.getKey("key",c.xmlName,c.ec2QueryName),l=i?`${s}${o}.${u}`:`${s}entry.${o}.${u}`,d=r.getMergedTraits(),h=this.getKey("value",d.xmlName,d.ec2QueryName),p=i?`${s}${o}.${h}`:`${s}entry.${o}.${h}`;this.write(e,n,l),this.write(r,a,p),++o}}}else if(n.isStructSchema()){if(t&&"object"==typeof t){let e=!1;for(const[r,i]of n.structIterator()){if(null==t[r]&&!i.isIdempotencyToken())continue;const n=i.getMergedTraits(),o=`${s}${this.getKey(r,n.xmlName,n.ec2QueryName,"struct")}`;this.write(i,t[r],o),e=!0}if(!e&&n.isUnionSchema()){const{$unknown:e}=t;if(Array.isArray(e)){const[t,n]=e,r=`${s}${t}`;this.write(15,n,r)}}}}else if(!n.isUnitSchema())throw new Error(`@aws-sdk/core/protocols - QuerySerializer unrecognized schema type ${n.getName(!0)}`)}flush(){if(void 0===this.buffer)throw new Error("@aws-sdk/core/protocols - QuerySerializer cannot flush with nothing written to buffer.");const e=this.buffer;return delete this.buffer,e}getKey(e,t,s,n){const{ec2:r,capitalizeKeys:i}=this.settings;if(r&&s)return s;const o=t??e;return i&&"struct"===n?o[0].toUpperCase()+o.slice(1):o}writeKey(e){e.endsWith(".")&&(e=e.slice(0,e.length-1)),this.buffer+=`&${(0,ns.$)(e)}=`}writeValue(e){this.buffer+=(0,ns.$)(e)}}class us extends Vt.M{options;serializer;deserializer;mixin=new Xt.U;constructor(e){super({defaultNamespace:e.defaultNamespace,errorTypeRegistries:e.errorTypeRegistries}),this.options=e;const t={timestampFormat:{useTrait:!0,default:5},httpBindings:!1,xmlNamespace:e.xmlNamespace,serviceNamespace:e.defaultNamespace,serializeEmptyLists:!0};this.serializer=new cs(t),this.deserializer=new ts(t)}getShapeId(){return"aws.protocols#awsQuery"}setSerdeContext(e){this.serializer.setSerdeContext(e),this.deserializer.setSerdeContext(e)}getPayloadCodec(){throw new Error("AWSQuery protocol has no payload codec.")}async serializeRequest(e,t,s){const n=await super.serializeRequest(e,t,s);n.path.endsWith("/")||(n.path+="/"),n.headers["content-type"]="application/x-www-form-urlencoded","unit"!==(0,Gt.L)(e.input)&&n.body||(n.body="");const r=e.name.split("#")[1]??e.name;return n.body=`Action=${r}&Version=${this.options.version}`+n.body,n.body.endsWith("&")&&(n.body=n.body.slice(-1)),n}async deserializeResponse(e,t,s){const n=this.deserializer,r=Ht.l1.of(e.output),i={};if(s.statusCode>=300){const r=await(0,Kt.P)(s.body,t);r.byteLength>0&&Object.assign(i,await n.read(15,r)),await this.handleError(e,t,s,i,this.deserializeMetadata(s))}for(const e in s.headers){const t=s.headers[e];delete s.headers[e],s.headers[e.toLowerCase()]=t}const o=e.name.split("#")[1]??e.name,a=r.isStructSchema()&&this.useNestedResult()?o+"Result":void 0,c=await(0,Kt.P)(s.body,t);return c.byteLength>0&&Object.assign(i,await n.read(r,c,a)),i.$metadata=this.deserializeMetadata(s),i}useNestedResult(){return!0}async handleError(e,t,s,n,r){const i=this.loadQueryErrorCode(s,n)??"Unknown";this.mixin.compose(this.compositeErrorRegistry,i,this.options.defaultNamespace);const o=this.loadQueryError(n)??{},a=this.loadQueryErrorMessage(n);o.message=a,o.Error={Type:o.Type,Code:o.Code,Message:a};const{errorSchema:c,errorMetadata:u}=await this.mixin.getErrorSchemaOrThrowBaseException(i,this.options.defaultNamespace,s,o,r,this.mixin.findQueryCompatibleError),l=Ht.l1.of(c),d=new(this.compositeErrorRegistry.getErrorCtor(c)??Error)({}),h={Type:o.Error.Type,Code:o.Error.Code,Error:o.Error};for(const[e,t]of l.structIterator()){const s=t.getMergedTraits().xmlName??e,r=o[s]??n[s];h[e]=this.deserializer.readSchema(t,r)}throw this.mixin.decorateServiceException(Object.assign(d,u,{$fault:l.getMergedTraits().error,message:a},h),n)}loadQueryErrorCode(e,t){const s=(t.Errors?.[0]?.Error??t.Errors?.Error??t.Error)?.Code;return void 0!==s?s:404==e.statusCode?"NotFound":void 0}loadQueryError(e){return e.Errors?.[0]?.Error??e.Errors?.Error??e.Error}loadQueryErrorMessage(e){const t=this.loadQueryError(e);return t?.message??t?.Message??e.message??e.Message??"Unknown"}getDefaultContentType(){return"application/x-www-form-urlencoded"}}var ls=s(72),ds=s(68),hs=s(74),ps=s(78);const gs=e=>{(0,jt.I)(process.version);const t=(0,Mt.I)(e),s=()=>t().then(Ot.l),i=(e=>({apiVersion:"2011-06-15",base64Decoder:e?.base64Decoder??hs.E,base64Encoder:e?.base64Encoder??is.n,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??mt,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??bt,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:e=>e.getIdentityProvider("aws.auth#sigv4"),signer:new $t.f2},{schemeId:"aws.auth#sigv4a",identityProvider:e=>e.getIdentityProvider("aws.auth#sigv4a"),signer:new Ct},{schemeId:"smithy.api#noAuth",identityProvider:e=>e.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new Nt.m}],logger:e?.logger??new ls.N,protocol:e?.protocol??us,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:G,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:e?.serviceId??"STS",signerConstructor:e?.signerConstructor??ze,urlParser:e?.urlParser??ds.D,utf8Decoder:e?.utf8Decoder??ps.a,utf8Encoder:e?.utf8Encoder??Yt.P}))(e);(0,kt.I)(process.version);const o={profile:e?.profile,logger:i.logger};return{...i,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??(0,n.Z)(Rt.$,o),bodyLengthChecker:e?.bodyLengthChecker??zt.n,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,It.pf)({serviceId:i.serviceId,clientVersion:At.rE}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:t=>t.getIdentityProvider("aws.auth#sigv4")||(async t=>await e.credentialDefaultProvider(t?.o||{})()),signer:new $t.f2},{schemeId:"aws.auth#sigv4a",identityProvider:e=>e.getIdentityProvider("aws.auth#sigv4a"),signer:new Ct},{schemeId:"smithy.api#noAuth",identityProvider:e=>e.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new Nt.m}],maxAttempts:e?.maxAttempts??(0,n.Z)(ke.qs,e),region:e?.region??(0,n.Z)(r.GG,{...r.zH,...o}),requestHandler:Ut.$.create(e?.requestHandler??s),retryMode:e?.retryMode??(0,n.Z)({...ke.kN,default:async()=>(await s()).retryMode||Lt.L0},e),sha256:e?.sha256??qt.V.bind(null,"sha256"),sigv4aSigningRegionSet:e?.sigv4aSigningRegionSet??(0,n.Z)(De,o),streamCollector:e?.streamCollector??_t.k,useDualstackEndpoint:e?.useDualstackEndpoint??(0,n.Z)(Wt.e$,o),useFipsEndpoint:e?.useFipsEndpoint??(0,n.Z)(Ft.Ko,o),userAgentAppId:e?.userAgentAppId??(0,n.Z)(Pt.hV,o)}};var fs=s(135),ms=s(136),ws=s(137);class ys extends be.K{config;constructor(...[e]){const t=gs(e||{});super(t),this.initConfig=t;const s=(n=t,Object.assign(n,{useDualstackEndpoint:n.useDualstackEndpoint??!1,useFipsEndpoint:n.useFipsEndpoint??!1,useGlobalEndpoint:n.useGlobalEndpoint??!1,defaultSigningName:"sts"}));var n;const r=(0,ge.D)(s),i=(0,ke.$z)(r),o=(0,xe.T)(i),a=(0,fe.OV)(o),u=(0,c.Co)(a),l=((e,t)=>{const s=Object.assign((0,fs.R)(e),(0,ms.xA)(e),(0,ws.e)(e),(e=>{const t=e.httpAuthSchemes;let s=e.httpAuthSchemeProvider,n=e.credentials;return{setHttpAuthScheme(e){const s=t.findIndex(t=>t.schemeId===e.schemeId);-1===s?t.push(e):t.splice(s,1,e)},httpAuthSchemes:()=>t,setHttpAuthSchemeProvider(e){s=e},httpAuthSchemeProvider:()=>s,setCredentials(e){n=e},credentials:()=>n}})(e));return t.forEach(e=>e.configure(s)),Object.assign(e,(0,fs.$)(s),(0,ms.uv)(s),(0,ws.j)(s),{httpAuthSchemes:(n=s).httpAuthSchemes(),httpAuthSchemeProvider:n.httpAuthSchemeProvider(),credentials:n.credentials()});var n})(xt(u),e?.extensions||[]);this.config=l,this.middlewareStack.use((0,Pe.wq)(this.config)),this.middlewareStack.use((0,me.sM)(this.config)),this.middlewareStack.use((0,Ie.ey)(this.config)),this.middlewareStack.use((0,Ae.vK)(this.config)),this.middlewareStack.use((0,fe.TC)(this.config)),this.middlewareStack.use((0,we.Y7)(this.config)),this.middlewareStack.use((0,ye.n)(this.config)),this.middlewareStack.use((0,ve.w)(this.config,{httpAuthSchemeParametersProvider:wt,identityProviderConfigProvider:async e=>new Se.h({"aws.auth#sigv4":e.credentials,"aws.auth#sigv4a":e.credentials})})),this.middlewareStack.use((0,Ee.l)(this.config))}destroy(){super.destroy()}}const vs=(e,t)=>t?class extends e{constructor(e){super(e);for(const e of t)this.middlewareStack.use(e)}}:e,Ss=(e={},t)=>((e,t)=>{let s,n;return async(r,i)=>{if(n=r,!s){const{logger:r=e?.parentClientConfig?.logger,profile:i=e?.parentClientConfig?.profile,region:o,requestHandler:a=e?.parentClientConfig?.requestHandler,credentialProviderLogger:c,userAgentAppId:u=e?.parentClientConfig?.userAgentAppId}=e,l=await he(o,e?.parentClientConfig?.region,c,{logger:r,profile:i}),d=!pe(a);s=new t({...e,userAgentAppId:u,profile:i,credentialDefaultProvider:()=>async()=>n,region:l,requestHandler:d?a:void 0,logger:r})}const{Credentials:a,AssumedRoleUser:c}=await s.send(new ue(i));if(!a||!a.AccessKeyId||!a.SecretAccessKey)throw new Error(`Invalid response from STS.assumeRole call with role ${i.RoleArn}`);const u=de(c),l={accessKeyId:a.AccessKeyId,secretAccessKey:a.SecretAccessKey,sessionToken:a.SessionToken,expiration:a.Expiration,...a.CredentialScope&&{credentialScope:a.CredentialScope},...u&&{accountId:u}};return(0,o.g)(l,"CREDENTIALS_STS_ASSUME_ROLE","i"),l}})(e,vs(ys,t)),Es=(e={},t)=>((e,t)=>{let s;return async n=>{if(!s){const{logger:n=e?.parentClientConfig?.logger,profile:r=e?.parentClientConfig?.profile,region:i,requestHandler:o=e?.parentClientConfig?.requestHandler,credentialProviderLogger:a,userAgentAppId:c=e?.parentClientConfig?.userAgentAppId}=e,u=await he(i,e?.parentClientConfig?.region,a,{logger:n,profile:r}),l=!pe(o);s=new t({...e,userAgentAppId:c,profile:r,region:u,requestHandler:l?o:void 0,logger:n})}const{Credentials:r,AssumedRoleUser:i}=await s.send(new le(n));if(!r||!r.AccessKeyId||!r.SecretAccessKey)throw new Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${n.RoleArn}`);const a=de(i),c={accessKeyId:r.AccessKeyId,secretAccessKey:r.SecretAccessKey,sessionToken:r.SessionToken,expiration:r.Expiration,...r.CredentialScope&&{credentialScope:r.CredentialScope},...a&&{accountId:a}};return a&&(0,o.g)(c,"RESOLVED_ACCOUNT_ID","T"),(0,o.g)(c,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),c}})(e,vs(ys,t))},858(e,t,s){s.d(t,{m:()=>n});class n{async sign(e,t,s){return e}}},856(e,t,s){function n(e){return encodeURIComponent(e).replace(/[!'()*]/g,function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()})}s.d(t,{$:()=>n})},857(e,t,s){s.d(t,{k:()=>b});var n=s(113),r=s(855),i=s(74);const o="(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun)(?:[ne|u?r]?s?day)?",a="(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)",c="(\\d?\\d):(\\d{2}):(\\d{2})(?:\\.(\\d+))?",u="(\\d?\\d)",l="(\\d{4})",d=new RegExp(/^(\d{4})-(\d\d)-(\d\d)[tT](\d\d):(\d\d):(\d\d)(\.(\d+))?(([-+]\d\d:\d\d)|[zZ])$/),h=new RegExp(`^${o}, ${u} ${a} ${l} ${c} GMT$`),p=new RegExp(`^${o}, ${u}-${a}-(\\d\\d) ${c} GMT$`),g=new RegExp(`^${o} ${a} ( [1-9]|\\d\\d) ${c} ${l}$`),f=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"];function m(e,t,s){const n=Number(e);if(n<t||n>s)throw new Error(`Value ${n} out of range [${t}, ${s}]`)}var w=s(125),y=s(126),v=s(79),S=s(118),E=s(124);class b extends S.f{settings;constructor(e){super(),this.settings=e}read(e,t){const s=n.l1.of(e);if(s.isListSchema())return(0,r.G)(t).map(e=>this.read(s.getValueSchema(),e));if(s.isBlobSchema())return(this.serdeContext?.base64Decoder??i.E)(t);if(s.isTimestampSchema()){switch((0,E.V)(s,this.settings)){case 5:return(e=>{if(null==e)return;if("string"!=typeof e)throw new TypeError("RFC3339 timestamps must be strings");const t=d.exec(e);if(!t)throw new TypeError(`Invalid RFC3339 timestamp format ${e}`);const[,s,n,r,i,o,a,,c,u]=t;m(n,1,12),m(r,1,31),m(i,0,23),m(o,0,59),m(a,0,60);const l=new Date(Date.UTC(Number(s),Number(n)-1,Number(r),Number(i),Number(o),Number(a),Number(c)?Math.round(1e3*parseFloat(`0.${c}`)):0));if(l.setUTCFullYear(Number(s)),"Z"!=u.toUpperCase()){const[,e,t,s]=/([+-])(\d\d):(\d\d)/.exec(u)||[void 0,"+",0,0],n="-"===e?1:-1;l.setTime(l.getTime()+n*(60*Number(t)*60*1e3+60*Number(s)*1e3))}return l})(t);case 6:return(e=>{if(null==e)return;if("string"!=typeof e)throw new TypeError("RFC7231 timestamps must be strings.");let t,s,n,r,i,o,a,c;if((c=h.exec(e))?[,t,s,n,r,i,o,a]=c:(c=p.exec(e))?([,t,s,n,r,i,o,a]=c,n=(Number(n)+1900).toString()):(c=g.exec(e))&&([,s,t,r,i,o,a,n]=c),n&&o){const e=Date.UTC(Number(n),f.indexOf(s),Number(t),Number(r),Number(i),Number(o),a?Math.round(1e3*parseFloat(`0.${a}`)):0);m(t,1,31),m(r,0,23),m(i,0,59),m(o,0,60);const c=new Date(e);return c.setUTCFullYear(Number(n)),c}throw new TypeError(`Invalid RFC7231 date-time value ${e}.`)})(t);case 7:return(e=>{if(null==e)return;let t=NaN;if("number"==typeof e)t=e;else if("string"==typeof e){if(!/^-?\d*\.?\d+$/.test(e))throw new TypeError("parseEpochTimestamp - numeric string invalid.");t=Number.parseFloat(e)}else"object"==typeof e&&1===e.tag&&(t=e.value);if(isNaN(t)||Math.abs(t)===1/0)throw new TypeError("Epoch timestamps must be valid finite numbers.");return new Date(Math.round(1e3*t))})(t);default:return console.warn("Missing timestamp format, parsing value with Date constructor:",t),new Date(t)}}if(s.isStringSchema()){const e=s.getMergedTraits().mediaType;let n=t;if(e){s.getMergedTraits().httpHeader&&(n=this.base64ToUtf8(n));return("application/json"===e||e.endsWith("+json"))&&(n=w.A.from(n)),n}}return s.isNumericSchema()?Number(t):s.isBigIntegerSchema()?BigInt(t):s.isBigDecimalSchema()?new y.D(t,"bigDecimal"):s.isBooleanSchema()?"true"===String(t).toLowerCase():t}base64ToUtf8(e){return(this.serdeContext?.utf8Encoder??v.P)((this.serdeContext?.base64Decoder??i.E)(e))}}},855(e,t,s){s.d(t,{G:()=>n});const n=e=>{const t=e.length,s=[];let n,r=!1,i=0;for(let o=0;o<t;++o){const t=e[o];switch(t){case'"':"\\"!==n&&(r=!r);break;case",":r||(s.push(e.slice(i,o)),i=o+1)}n=t}return s.push(e.slice(i)),s.map(e=>{const t=(e=e.trim()).length;return t<2?e:('"'===e[0]&&'"'===e[t-1]&&(e=e.slice(1,t-1)),e.replace(/\\"/g,'"'))})}},853(e){e.exports={rE:"3.997.23"}}};
package/dist/330.index.js CHANGED
@@ -1,2 +1,2 @@
1
1
  #!/usr/bin/env node
2
- "use strict";exports.id=330,exports.ids=[330],exports.modules={840(e,t,a){a.d(t,{ENV_CMDS_FULL_URI:()=>m,ENV_CMDS_RELATIVE_URI:()=>p,fromContainerMetadata:()=>w,fromInstanceMetadata:()=>$,getInstanceMetadataEndpoint:()=>T,httpRequest:()=>c});var n=a(61),r=a(4),o=a(59),i=a(29),s=a(24);function c(e){return new Promise((t,a)=>{const n=(0,s.request)({method:"GET",...e,hostname:e.hostname?.replace(/^\[(.+)\]$/,"$1")});n.on("error",e=>{a(Object.assign(new o.m("Unable to connect to instance metadata service"),e)),n.destroy()}),n.on("timeout",()=>{a(new o.m("TimeoutError from instance metadata service")),n.destroy()}),n.on("response",e=>{const{statusCode:r=400}=e;(r<200||300<=r)&&(a(Object.assign(new o.m("Error response received from instance metadata service"),{statusCode:r})),n.destroy());const s=[];e.on("data",e=>{s.push(e)}),e.on("end",()=>{t(i.Buffer.concat(s)),n.destroy()})}),n.end()})}const l=e=>Boolean(e)&&"object"==typeof e&&"string"==typeof e.AccessKeyId&&"string"==typeof e.SecretAccessKey&&"string"==typeof e.Token&&"string"==typeof e.Expiration,d=e=>({accessKeyId:e.AccessKeyId,secretAccessKey:e.SecretAccessKey,sessionToken:e.Token,expiration:new Date(e.Expiration),...e.AccountId&&{accountId:e.AccountId}}),u=({maxRetries:e=0,timeout:t=1e3})=>({maxRetries:e,timeout:t}),f=(e,t)=>{let a=e();for(let n=0;n<t;n++)a=a.catch(e);return a},m="AWS_CONTAINER_CREDENTIALS_FULL_URI",p="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",h="AWS_CONTAINER_AUTHORIZATION_TOKEN",w=(e={})=>{const{timeout:t,maxRetries:a}=u(e);return()=>f(async()=>{const a=await E({logger:e.logger}),r=JSON.parse(await v(t,a));if(!l(r))throw new n.C("Invalid response received from instance metadata service.",{logger:e.logger});return d(r)},a)},v=async(e,t)=>{process.env[h]&&(t.headers={...t.headers,Authorization:process.env[h]});return(await c({...t,timeout:e})).toString()},g={localhost:!0,"127.0.0.1":!0},y={"http:":!0,"https:":!0},E=async({logger:e})=>{if(process.env[p])return{hostname:"169.254.170.2",path:process.env[p]};if(process.env[m]){const t=(0,r.parse)(process.env[m]);if(!t.hostname||!(t.hostname in g))throw new n.C(`${t.hostname} is not a valid container metadata service hostname`,{tryNextLink:!1,logger:e});if(!t.protocol||!(t.protocol in y))throw new n.C(`${t.protocol} is not a valid container metadata service protocol`,{tryNextLink:!1,logger:e});return{...t,port:t.port?parseInt(t.port,10):void 0}}throw new n.C(`The container metadata credential provider cannot be used unless the ${p} or ${m} environment variable is set`,{tryNextLink:!1,logger:e})};var I=a(57);class A extends n.C{tryNextLink;name="InstanceMetadataV1FallbackError";constructor(e,t=!0){super(e,t),this.tryNextLink=t,Object.setPrototypeOf(this,A.prototype)}}var S,b=a(52);!function(e){e.IPv4="http://169.254.169.254",e.IPv6="http://[fd00:ec2::254]"}(S||(S={}));const _={environmentVariableSelector:e=>e.AWS_EC2_METADATA_SERVICE_ENDPOINT,configFileSelector:e=>e.ec2_metadata_service_endpoint,default:void 0};var x;!function(e){e.IPv4="IPv4",e.IPv6="IPv6"}(x||(x={}));const N={environmentVariableSelector:e=>e.AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE,configFileSelector:e=>e.ec2_metadata_service_endpoint_mode,default:x.IPv4},T=async()=>(0,b.D)(await k()||await R()),k=async()=>(0,I.Z)(_)(),R=async()=>{const e=await(0,I.Z)(N)();switch(e){case x.IPv4:return S.IPv4;case x.IPv6:return S.IPv6;default:throw new Error(`Unsupported endpoint mode: ${e}. Select from ${Object.values(x)}`)}},D=(e,t)=>{const a=300+Math.floor(300*Math.random()),n=new Date(Date.now()+1e3*a);t.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(n)}.\nFor more information, please visit: https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html`);const r=e.originalExpiration??e.expiration;return{...e,...r?{originalExpiration:r}:{},expiration:n}},C="/latest/meta-data/iam/security-credentials/",M="AWS_EC2_METADATA_V1_DISABLED",L="ec2_metadata_v1_disabled",O="x-aws-ec2-metadata-token",$=(e={})=>((e,t={})=>{const a=t?.logger||console;let n;return async()=>{let t;try{t=await e(),t.expiration&&t.expiration.getTime()<Date.now()&&(t=D(t,a))}catch(e){if(!n)throw e;a.warn("Credential renew failed: ",e),t=D(n,a)}return n=t,t}})(U(e),{logger:e.logger}),U=(e={})=>{let t=!1;const{logger:a,profile:r}=e,{timeout:o,maxRetries:i}=u(e),s=async(a,o)=>{if(t||null==o.headers?.[O]){let t=!1,a=!1;const o=await(0,I.Z)({environmentVariableSelector:t=>{const r=t[M];if(a=!!r&&"false"!==r,void 0===r)throw new n.C(`${M} not set in env, checking config file next.`,{logger:e.logger});return a},configFileSelector:e=>{const a=e[L];return t=!!a&&"false"!==a,t},default:!1},{profile:r})();if(e.ec2MetadataV1Disabled||o){const n=[];throw e.ec2MetadataV1Disabled&&n.push("credential provider initialization (runtime option ec2MetadataV1Disabled)"),t&&n.push(`config file profile (${L})`),a&&n.push(`process environment variable (${M})`),new A(`AWS EC2 Metadata v1 fallback has been blocked by AWS SDK configuration in the following: [${n.join(", ")}].`)}}const i=(await f(async()=>{let e;try{e=await W(o)}catch(e){throw 401===e.statusCode&&(t=!1),e}return e},a)).trim();return f(async()=>{let a;try{a=await F(i,o,e)}catch(e){throw 401===e.statusCode&&(t=!1),e}return a},a)};return async()=>{const e=await T();if(t)return a?.debug("AWS SDK Instance Metadata","using v1 fallback (no token fetch)"),s(i,{...e,timeout:o});{let n;try{n=(await V({...e,timeout:o})).toString()}catch(n){if(400===n?.statusCode)throw Object.assign(n,{message:"EC2 Metadata token request returned error"});return("TimeoutError"===n.message||[403,404,405].includes(n.statusCode))&&(t=!0),a?.debug("AWS SDK Instance Metadata","using v1 fallback (initial)"),s(i,{...e,timeout:o})}return s(i,{...e,headers:{[O]:n},timeout:o})}}},V=async e=>c({...e,path:"/latest/api/token",method:"PUT",headers:{"x-aws-ec2-metadata-token-ttl-seconds":"21600"}}),W=async e=>(await c({...e,path:C})).toString(),F=async(e,t,a)=>{const r=JSON.parse((await c({...t,path:C+e})).toString());if(!l(r))throw new n.C("Invalid response received from instance metadata service.",{logger:a.logger});return d(r)}}};
2
+ "use strict";exports.id=330,exports.ids=[330],exports.modules={848(e,t,a){a.d(t,{ENV_CMDS_FULL_URI:()=>f,ENV_CMDS_RELATIVE_URI:()=>m,fromContainerMetadata:()=>h,fromInstanceMetadata:()=>$});var n=a(56);const r=e=>Boolean(e)&&"object"==typeof e&&"string"==typeof e.AccessKeyId&&"string"==typeof e.SecretAccessKey&&"string"==typeof e.Token&&"string"==typeof e.Expiration,o=e=>({accessKeyId:e.AccessKeyId,secretAccessKey:e.SecretAccessKey,sessionToken:e.Token,expiration:new Date(e.Expiration),...e.AccountId&&{accountId:e.AccountId}}),i=({maxRetries:e=0,timeout:t=1e3})=>({maxRetries:e,timeout:t});var s=a(54),c=a(13),l=a.n(c);function d(e){return new Promise((t,a)=>{const n=l().request({method:"GET",...e,hostname:e.hostname?.replace(/^\[(.+)\]$/,"$1")});n.on("error",e=>{a(Object.assign(new s.m("Unable to connect to instance metadata service"),e)),n.destroy()}),n.on("timeout",()=>{a(new s.m("TimeoutError from instance metadata service")),n.destroy()}),n.on("response",e=>{const{statusCode:r=400}=e;(r<200||300<=r)&&(a(Object.assign(new s.m("Error response received from instance metadata service"),{statusCode:r})),n.destroy());const o=[];e.on("data",e=>{o.push(e)}),e.on("end",()=>{t(Buffer.concat(o)),n.destroy()})}),n.end()})}const u=(e,t)=>{let a=e();for(let n=0;n<t;n++)a=a.catch(e);return a},f="AWS_CONTAINER_CREDENTIALS_FULL_URI",m="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",w="AWS_CONTAINER_AUTHORIZATION_TOKEN",h=(e={})=>{const{timeout:t,maxRetries:a}=i(e);return()=>u(async()=>{const a=await y({logger:e.logger}),i=JSON.parse(await p(t,a));if(!r(i))throw new n.C("Invalid response received from instance metadata service.",{logger:e.logger});return o(i)},a)},p=async(e,t)=>{process.env[w]&&(t.headers={...t.headers,Authorization:process.env[w]});return(await d({...t,timeout:e})).toString()},v=new Set(["localhost","127.0.0.1"]),g=new Set(["http:","https:"]),y=async({logger:e})=>{if(process.env[m])return{hostname:"169.254.170.2",path:process.env[m]};if(process.env[f]){let t;try{t=new URL(process.env[f])}catch{throw new n.C(`${process.env[f]} is not a valid container metadata service URL`,{tryNextLink:!1,logger:e})}if(!t.hostname||!v.has(t.hostname))throw new n.C(`${t.hostname} is not a valid container metadata service hostname`,{tryNextLink:!1,logger:e});if(!t.protocol||!g.has(t.protocol))throw new n.C(`${t.protocol} is not a valid container metadata service protocol`,{tryNextLink:!1,logger:e});return{protocol:t.protocol,hostname:t.hostname,path:t.pathname+t.search,port:t.port?parseInt(t.port,10):void 0}}throw new n.C(`The container metadata credential provider cannot be used unless the ${m} or ${f} environment variable is set`,{tryNextLink:!1,logger:e})};var S=a(52);class E extends n.C{tryNextLink;name="InstanceMetadataV1FallbackError";constructor(e,t=!0){super(e,t),this.tryNextLink=t,Object.setPrototypeOf(this,E.prototype)}}var A,I=a(68);!function(e){e.IPv4="http://169.254.169.254",e.IPv6="http://[fd00:ec2::254]"}(A||(A={}));const b={environmentVariableSelector:e=>e.AWS_EC2_METADATA_SERVICE_ENDPOINT,configFileSelector:e=>e.ec2_metadata_service_endpoint,default:void 0};var _;!function(e){e.IPv4="IPv4",e.IPv6="IPv6"}(_||(_={}));const x={environmentVariableSelector:e=>e.AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE,configFileSelector:e=>e.ec2_metadata_service_endpoint_mode,default:_.IPv4},N=async()=>(0,S.Z)(b)(),k=async()=>{const e=await(0,S.Z)(x)();switch(e){case _.IPv4:return A.IPv4;case _.IPv6:return A.IPv6;default:throw new Error(`Unsupported endpoint mode: ${e}. Select from ${Object.values(_)}`)}},R=(e,t)=>{const a=300+Math.floor(300*Math.random()),n=new Date(Date.now()+1e3*a);t.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(n)}.\nFor more information, please visit: https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html`);const r=e.originalExpiration??e.expiration;return{...e,...r?{originalExpiration:r}:{},expiration:n}},T="/latest/meta-data/iam/security-credentials/",D="AWS_EC2_METADATA_V1_DISABLED",L="ec2_metadata_v1_disabled",C="x-aws-ec2-metadata-token",$=(e={})=>((e,t={})=>{const a=t?.logger||console;let n;return async()=>{let t;try{t=await e(),t.expiration&&t.expiration.getTime()<Date.now()&&(t=R(t,a))}catch(e){if(!n)throw e;a.warn("Credential renew failed: ",e),t=R(n,a)}return n=t,t}})(M(e),{logger:e.logger}),M=(e={})=>{let t=!1;const{logger:a,profile:r}=e,{timeout:o,maxRetries:s}=i(e),c=async(a,o)=>{if(t||null==o.headers?.[C]){let t=!1,a=!1;const o=await(0,S.Z)({environmentVariableSelector:t=>{const r=t[D];if(a=!!r&&"false"!==r,void 0===r)throw new n.C(`${D} not set in env, checking config file next.`,{logger:e.logger});return a},configFileSelector:e=>{const a=e[L];return t=!!a&&"false"!==a,t},default:!1},{profile:r})();if(e.ec2MetadataV1Disabled||o){const n=[];throw e.ec2MetadataV1Disabled&&n.push("credential provider initialization (runtime option ec2MetadataV1Disabled)"),t&&n.push(`config file profile (${L})`),a&&n.push(`process environment variable (${D})`),new E(`AWS EC2 Metadata v1 fallback has been blocked by AWS SDK configuration in the following: [${n.join(", ")}].`)}}const i=(await u(async()=>{let e;try{e=await U(o)}catch(e){throw 401===e.statusCode&&(t=!1),e}return e},a)).trim();return u(async()=>{let a;try{a=await V(i,o,e)}catch(e){throw 401===e.statusCode&&(t=!1),e}return a},a)};return async()=>{const e=await(async()=>(0,I.D)(await N()||await k()))();if(t)return a?.debug("AWS SDK Instance Metadata","using v1 fallback (no token fetch)"),c(s,{...e,timeout:o});{let n;try{n=(await O({...e,timeout:o})).toString()}catch(n){if(400===n?.statusCode)throw Object.assign(n,{message:"EC2 Metadata token request returned error"});return("TimeoutError"===n.message||[403,404,405].includes(n.statusCode))&&(t=!0),a?.debug("AWS SDK Instance Metadata","using v1 fallback (initial)"),c(s,{...e,timeout:o})}return c(s,{...e,headers:{[C]:n},timeout:o})}}},O=async e=>d({...e,path:"/latest/api/token",method:"PUT",headers:{"x-aws-ec2-metadata-token-ttl-seconds":"21600"}}),U=async e=>(await d({...e,path:T})).toString(),V=async(e,t,a)=>{const i=JSON.parse((await d({...t,path:T+e})).toString());if(!r(i))throw new n.C("Invalid response received from instance metadata service.",{logger:a.logger});return o(i)}}};
@@ -0,0 +1,2 @@
1
+ #!/usr/bin/env node
2
+ "use strict";exports.id=350,exports.ids=[350],exports.modules={854(e,t,r){r.d(t,{Y:()=>B});var n=r(113),s=r(115),o=r(850);function i(e,t,r){if(r<=0||!Number.isInteger(r))throw new Error("Invalid number of delimiters ("+r+") for splitEvery.");const n=e.split(t);if(1===r)return n;const s=[];let o="";for(let e=0;e<n.length;e++)""===o?o=n[e]:o+=t+n[e],(e+1)%r===0&&(s.push(o),o="");return""!==o&&s.push(o),s}var a=r(855),c=r(33),f=r(116),u=r(119),l=r(856);class h extends f.t{async serializeRequest(e,t,r){const o=t&&"object"==typeof t?t:{},i=this.serializer,a={},f={},u=await r.endpoint(),h=n.l1.of(e?.input),d=[],w=[];let p,m=!1;const y=new c.K({protocol:"",hostname:"",port:void 0,path:"",fragment:void 0,query:a,headers:f,body:void 0});if(u){this.updateServiceEndpoint(y,u),this.setHostPrefix(y,e,o);const t=(0,s.c)(e.traits);if(t.http){y.method=t.http[0];const[e,r]=t.http[1].split("?");"/"==y.path?y.path=e:y.path+=e;const n=new URLSearchParams(r??"");for(const[e,t]of n)a[e]=t}}for(const[e,t]of h.structIterator()){const r=t.getMergedTraits()??{},n=o[e];if(null!=n||t.isIdempotencyToken())if(r.httpPayload){if(t.isStreaming()){t.isStructSchema()?o[e]&&(p=await this.serializeEventStream({eventStream:o[e],requestSchema:h})):p=n}else i.write(t,n),p=i.flush()}else if(r.httpLabel){i.write(t,n);const r=i.flush();y.path.includes(`{${e}+}`)?y.path=y.path.replace(`{${e}+}`,r.split("/").map(l.$).join("/")):y.path.includes(`{${e}}`)&&(y.path=y.path.replace(`{${e}}`,(0,l.$)(r)))}else if(r.httpHeader)i.write(t,n),f[r.httpHeader.toLowerCase()]=String(i.flush());else if("string"==typeof r.httpPrefixHeaders)for(const e in n){const s=n[e],o=r.httpPrefixHeaders+e;i.write([t.getValueSchema(),{httpHeader:o}],s),f[o.toLowerCase()]=i.flush()}else r.httpQuery||r.httpQueryParams?this.serializeQuery(t,n,a):(m=!0,d.push(e),w.push(t));else if(r.httpLabel&&(y.path.includes(`{${e}+}`)||y.path.includes(`{${e}}`)))throw new Error(`No value provided for input HTTP label: ${e}.`)}if(m&&o){const[e,t]=(h.getName(!0)??"#Unknown").split("#"),r=h.getSchema()[6],n=[3,e,t,h.getMergedTraits(),d,w,void 0];r?n[6]=r:n.pop(),i.write(n,o),p=i.flush()}return y.headers=f,y.query=a,y.body=p,y}serializeQuery(e,t,r){const n=this.serializer,s=e.getMergedTraits();if(s.httpQueryParams){for(const n in t)if(!(n in r)){const o=t[n],i=e.getValueSchema();Object.assign(i.getMergedTraits(),{...s,httpQuery:n,httpQueryParams:void 0}),this.serializeQuery(i,o,r)}}else if(e.isListSchema()){const o=!!e.getMergedTraits().sparse,i=[];for(const r of t){n.write([e.getValueSchema(),s],r);const t=n.flush();(o||void 0!==t)&&i.push(t)}r[s.httpQuery]=i}else n.write([e,s],t),r[s.httpQuery]=n.flush()}async deserializeResponse(e,t,r){const s=this.deserializer,o=n.l1.of(e.output),i={};if(r.statusCode>=300){const n=await(0,u.P)(r.body,t);throw n.byteLength>0&&Object.assign(i,await s.read(15,n)),await this.handleError(e,t,r,i,this.deserializeMetadata(r)),new Error("@smithy/core/protocols - HTTP Protocol error handler failed to throw.")}for(const e in r.headers){const t=r.headers[e];delete r.headers[e],r.headers[e.toLowerCase()]=t}const a=await this.deserializeHttpMessage(o,t,r,i);if(a.length){const e=await(0,u.P)(r.body,t);if(e.byteLength>0){const t=await s.read(o,e);for(const e of a)null!=t[e]&&(i[e]=t[e])}}else a.discardResponseBody&&await(0,u.P)(r.body,t);return i.$metadata=this.deserializeMetadata(r),i}async deserializeHttpMessage(e,t,r,s,c){let f;f=s instanceof Set?c:s;let l=!0;const h=this.deserializer,d=n.l1.of(e),w=[];for(const[e,n]of d.structIterator()){const s=n.getMemberTraits();if(s.httpPayload){l=!1;if(n.isStreaming()){const t=n.isStructSchema();f[e]=t?await this.deserializeEventStream({response:r,responseSchema:d}):(0,o.c)(r.body)}else if(r.body){const s=await(0,u.P)(r.body,t);s.byteLength>0&&(f[e]=await h.read(n,s))}}else if(s.httpHeader){const t=String(s.httpHeader).toLowerCase(),o=r.headers[t];if(null!=o)if(n.isListSchema()){const r=n.getValueSchema();let s;r.getMergedTraits().httpHeader=t,s=r.isTimestampSchema()&&4===r.getSchema()?i(o,",",2):(0,a.G)(o);const c=[];for(const e of s)c.push(await h.read(r,e.trim()));f[e]=c}else f[e]=await h.read(n,o)}else if(void 0!==s.httpPrefixHeaders){f[e]={};for(const t in r.headers)if(t.startsWith(s.httpPrefixHeaders)){const o=r.headers[t],i=n.getValueSchema();i.getMergedTraits().httpHeader=t,f[e][t.slice(s.httpPrefixHeaders.length)]=await h.read(i,o)}}else s.httpResponseCode?f[e]=r.statusCode:w.push(e)}return w.discardResponseBody=l,w}}var d=r(83),w=r(77);function p(e){return(e.includes(",")||e.includes('"'))&&(e=`"${e.replace(/"/g,'\\"')}"`),e}var m=r(125),y=r(73),b=r(118),g=r(124);class v extends b.f{settings;stringBuffer="";constructor(e){super(),this.settings=e}write(e,t){const r=n.l1.of(e);switch(typeof t){case"object":if(null===t)return void(this.stringBuffer="null");if(r.isTimestampSchema()){if(!(t instanceof Date))throw new Error(`@smithy/core/protocols - received non-Date value ${t} when schema expected Date in ${r.getName(!0)}`);switch((0,g.V)(r,this.settings)){case 5:this.stringBuffer=t.toISOString().replace(".000Z","Z");break;case 6:this.stringBuffer=(0,d.JV)(t);break;case 7:this.stringBuffer=String(t.getTime()/1e3);break;default:console.warn("Missing timestamp format, using epoch seconds",t),this.stringBuffer=String(t.getTime()/1e3)}return}if(r.isBlobSchema()&&"byteLength"in t)return void(this.stringBuffer=(this.serdeContext?.base64Encoder??w.n)(t));if(r.isListSchema()&&Array.isArray(t)){let e="";for(const n of t){this.write([r.getValueSchema(),r.getMergedTraits()],n);const t=this.flush();""!==e&&(e+=", "),e+=r.getValueSchema().isTimestampSchema()?t:p(t)}return void(this.stringBuffer=e)}this.stringBuffer=JSON.stringify(t,null,2);break;case"string":const e=r.getMergedTraits().mediaType;let n=t;if(e){if(("application/json"===e||e.endsWith("+json"))&&(n=m.A.from(n)),r.getMergedTraits().httpHeader)return void(this.stringBuffer=(this.serdeContext?.base64Encoder??w.n)(n.toString()))}this.stringBuffer=t;break;default:r.isIdempotencyToken()?this.stringBuffer=(0,y.ec)():this.stringBuffer=String(t)}}flush(){const e=this.stringBuffer;return this.stringBuffer="",e}}class ${codecSerializer;stringSerializer;buffer;constructor(e,t,r=new v(t)){this.codecSerializer=e,this.stringSerializer=r}setSerdeContext(e){this.codecSerializer.setSerdeContext(e),this.stringSerializer.setSerdeContext(e)}write(e,t){const r=n.l1.of(e),s=r.getMergedTraits();return s.httpHeader||s.httpLabel||s.httpQuery?(this.stringSerializer.write(r,t),void(this.buffer=this.stringSerializer.flush())):this.codecSerializer.write(r,t)}flush(){if(void 0!==this.buffer){const e=this.buffer;return this.buffer=void 0,e}return this.codecSerializer.flush()}}var E=r(79),T=r(78),N=r(857);class S extends b.f{codecDeserializer;stringDeserializer;constructor(e,t){super(),this.codecDeserializer=e,this.stringDeserializer=new N.k(t)}setSerdeContext(e){this.stringDeserializer.setSerdeContext(e),this.codecDeserializer.setSerdeContext(e),this.serdeContext=e}read(e,t){const r=n.l1.of(e),s=r.getMergedTraits(),o=this.serdeContext?.utf8Encoder??E.P;if(s.httpHeader||s.httpResponseCode)return this.stringDeserializer.read(r,o(t));if(s.httpPayload){if(r.isBlobSchema()){const e=this.serdeContext?.utf8Decoder??T.a;return"string"==typeof t?e(t):t}if(r.isStringSchema())return"byteLength"in t?o(t):t}return this.codecDeserializer.read(r,t)}}var x=r(120),R=r(122),D=r(128);class B extends h{serializer;deserializer;codec;mixin=new x.U;constructor({defaultNamespace:e,errorTypeRegistries:t}){super({defaultNamespace:e,errorTypeRegistries:t});const r={timestampFormat:{useTrait:!0,default:7},httpBindings:!0,jsonName:!0};this.codec=new R.V(r),this.serializer=new $(this.codec.createSerializer(),r),this.deserializer=new S(this.codec.createDeserializer(),r)}getShapeId(){return"aws.protocols#restJson1"}getPayloadCodec(){return this.codec}setSerdeContext(e){this.codec.setSerdeContext(e),super.setSerdeContext(e)}async serializeRequest(e,t,r){const s=await super.serializeRequest(e,t,r),o=n.l1.of(e.input);if(!s.headers["content-type"]){const e=this.mixin.resolveRestContentType(this.getDefaultContentType(),o);e&&(s.headers["content-type"]=e)}return null==s.body&&s.headers["content-type"]===this.getDefaultContentType()&&(s.body="{}"),s}async deserializeResponse(e,t,r){const s=await super.deserializeResponse(e,t,r),o=n.l1.of(e.output);for(const[e,t]of o.structIterator())t.getMemberTraits().httpPayload&&!(e in s)&&(s[e]=null);return s}async handleError(e,t,r,s,o){const i=(0,D.cJ)(r,s)??"Unknown";this.mixin.compose(this.compositeErrorRegistry,i,this.options.defaultNamespace);const{errorSchema:a,errorMetadata:c}=await this.mixin.getErrorSchemaOrThrowBaseException(i,this.options.defaultNamespace,r,s,o),f=n.l1.of(a),u=s.message??s.Message??"UnknownError",l=new(this.compositeErrorRegistry.getErrorCtor(a)??Error)({});await this.deserializeHttpMessage(a,t,r,s);const h={},d=this.codec.createDeserializer();for(const[e,t]of f.structIterator()){const r=t.getMergedTraits().jsonName??e;h[e]=d.readObject(t,s[r])}throw this.mixin.decorateServiceException(Object.assign(l,c,{$fault:f.getMergedTraits().error,message:u},h),s)}getDefaultContentType(){return"application/json"}}},858(e,t,r){r.d(t,{m:()=>n});class n{async sign(e,t,r){return e}}},856(e,t,r){function n(e){return encodeURIComponent(e).replace(/[!'()*]/g,function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()})}r.d(t,{$:()=>n})},857(e,t,r){r.d(t,{k:()=>E});var n=r(113),s=r(855),o=r(74);const i="(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun)(?:[ne|u?r]?s?day)?",a="(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)",c="(\\d?\\d):(\\d{2}):(\\d{2})(?:\\.(\\d+))?",f="(\\d?\\d)",u="(\\d{4})",l=new RegExp(/^(\d{4})-(\d\d)-(\d\d)[tT](\d\d):(\d\d):(\d\d)(\.(\d+))?(([-+]\d\d:\d\d)|[zZ])$/),h=new RegExp(`^${i}, ${f} ${a} ${u} ${c} GMT$`),d=new RegExp(`^${i}, ${f}-${a}-(\\d\\d) ${c} GMT$`),w=new RegExp(`^${i} ${a} ( [1-9]|\\d\\d) ${c} ${u}$`),p=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"];function m(e,t,r){const n=Number(e);if(n<t||n>r)throw new Error(`Value ${n} out of range [${t}, ${r}]`)}var y=r(125),b=r(126),g=r(79),v=r(118),$=r(124);class E extends v.f{settings;constructor(e){super(),this.settings=e}read(e,t){const r=n.l1.of(e);if(r.isListSchema())return(0,s.G)(t).map(e=>this.read(r.getValueSchema(),e));if(r.isBlobSchema())return(this.serdeContext?.base64Decoder??o.E)(t);if(r.isTimestampSchema()){switch((0,$.V)(r,this.settings)){case 5:return(e=>{if(null==e)return;if("string"!=typeof e)throw new TypeError("RFC3339 timestamps must be strings");const t=l.exec(e);if(!t)throw new TypeError(`Invalid RFC3339 timestamp format ${e}`);const[,r,n,s,o,i,a,,c,f]=t;m(n,1,12),m(s,1,31),m(o,0,23),m(i,0,59),m(a,0,60);const u=new Date(Date.UTC(Number(r),Number(n)-1,Number(s),Number(o),Number(i),Number(a),Number(c)?Math.round(1e3*parseFloat(`0.${c}`)):0));if(u.setUTCFullYear(Number(r)),"Z"!=f.toUpperCase()){const[,e,t,r]=/([+-])(\d\d):(\d\d)/.exec(f)||[void 0,"+",0,0],n="-"===e?1:-1;u.setTime(u.getTime()+n*(60*Number(t)*60*1e3+60*Number(r)*1e3))}return u})(t);case 6:return(e=>{if(null==e)return;if("string"!=typeof e)throw new TypeError("RFC7231 timestamps must be strings.");let t,r,n,s,o,i,a,c;if((c=h.exec(e))?[,t,r,n,s,o,i,a]=c:(c=d.exec(e))?([,t,r,n,s,o,i,a]=c,n=(Number(n)+1900).toString()):(c=w.exec(e))&&([,r,t,s,o,i,a,n]=c),n&&i){const e=Date.UTC(Number(n),p.indexOf(r),Number(t),Number(s),Number(o),Number(i),a?Math.round(1e3*parseFloat(`0.${a}`)):0);m(t,1,31),m(s,0,23),m(o,0,59),m(i,0,60);const c=new Date(e);return c.setUTCFullYear(Number(n)),c}throw new TypeError(`Invalid RFC7231 date-time value ${e}.`)})(t);case 7:return(e=>{if(null==e)return;let t=NaN;if("number"==typeof e)t=e;else if("string"==typeof e){if(!/^-?\d*\.?\d+$/.test(e))throw new TypeError("parseEpochTimestamp - numeric string invalid.");t=Number.parseFloat(e)}else"object"==typeof e&&1===e.tag&&(t=e.value);if(isNaN(t)||Math.abs(t)===1/0)throw new TypeError("Epoch timestamps must be valid finite numbers.");return new Date(Math.round(1e3*t))})(t);default:return console.warn("Missing timestamp format, parsing value with Date constructor:",t),new Date(t)}}if(r.isStringSchema()){const e=r.getMergedTraits().mediaType;let n=t;if(e){r.getMergedTraits().httpHeader&&(n=this.base64ToUtf8(n));return("application/json"===e||e.endsWith("+json"))&&(n=y.A.from(n)),n}}return r.isNumericSchema()?Number(t):r.isBigIntegerSchema()?BigInt(t):r.isBigDecimalSchema()?new b.D(t,"bigDecimal"):r.isBooleanSchema()?"true"===String(t).toLowerCase():t}base64ToUtf8(e){return(this.serdeContext?.utf8Encoder??g.P)((this.serdeContext?.base64Decoder??o.E)(e))}}},855(e,t,r){r.d(t,{G:()=>n});const n=e=>{const t=e.length,r=[];let n,s=!1,o=0;for(let i=0;i<t;++i){const t=e[i];switch(t){case'"':"\\"!==n&&(s=!s);break;case",":s||(r.push(e.slice(o,i)),o=i+1)}n=t}return r.push(e.slice(o)),r.map(e=>{const t=(e=e.trim()).length;return t<2?e:('"'===e[0]&&'"'===e[t-1]&&(e=e.slice(1,t-1)),e.replace(/\\"/g,'"'))})}},850(e,t,r){r.d(t,{c:()=>b});var n=r(16),s=r(75);const o="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",i=Object.entries(o).reduce((e,[t,r])=>(e[r]=Number(t),e),{}),a=o.split("");function c(e){let t;t="string"==typeof e?(e=>(new TextEncoder).encode(e))(e):e;const r="object"==typeof t&&"number"==typeof t.length,n="object"==typeof t&&"number"==typeof t.byteOffset&&"number"==typeof t.byteLength;if(!r&&!n)throw new Error("@smithy/util-base64: toBase64 encoder function only accepts string | Uint8Array.");let s="";for(let e=0;e<t.length;e+=3){let r=0,n=0;for(let s=e,o=Math.min(e+3,t.length);s<o;s++)r|=t[s]<<8*(o-s-1),n+=8;const o=Math.ceil(n/6);r<<=6*o-n;for(let e=1;e<=o;e++){const t=6*(o-e);s+=a[(r&63<<t)>>t]}s+="==".slice(0,4-o)}return s}var f=r(89);const u=async e=>"function"==typeof Blob&&e instanceof Blob||"Blob"===e.constructor?.name?void 0!==Blob.prototype.arrayBuffer?new Uint8Array(await e.arrayBuffer()):async function(e){const t=await function(e){return new Promise((t,r)=>{const n=new FileReader;n.onloadend=()=>{if(2!==n.readyState)return r(new Error("Reader aborted too early"));const e=n.result??"",s=e.indexOf(","),o=s>-1?s+1:e.length;t(e.substring(o))},n.onabort=()=>r(new Error("Read aborted")),n.onerror=()=>r(n.error),n.readAsDataURL(e)})}(e),r=(e=>{let t=e.length/4*3;"=="===e.slice(-2)?t-=2:"="===e.slice(-1)&&t--;const r=new ArrayBuffer(t),n=new DataView(r);for(let t=0;t<e.length;t+=4){let r=0,s=0;for(let n=t,o=t+3;n<=o;n++)if("="!==e[n]){if(!(e[n]in i))throw new TypeError(`Invalid character ${e[n]} in base64 string.`);r|=i[e[n]]<<6*(o-n),s+=6}else r>>=6;const o=t/4*3;r>>=s%8;const a=Math.floor(s/8);for(let e=0;e<a;e++){const t=8*(a-e-1);n.setUint8(o+e,(r&255<<t)>>t)}}return new Uint8Array(r)})(t);return new Uint8Array(r)}(e):async function(e){const t=[],r=e.getReader();let n=!1,s=0;for(;!n;){const{done:e,value:o}=await r.read();o&&(t.push(o),s+=o.length),n=e}const o=new Uint8Array(s);let i=0;for(const e of t)o.set(e,i),i+=e.length;return o}(e);const l=e=>"function"==typeof ReadableStream&&(e?.constructor?.name===ReadableStream.name||e instanceof ReadableStream),h="The stream has already been transformed.",d=e=>{if(!w(e)&&!l(e)){throw new Error(`Unexpected stream implementation, expect Blob or ReadableStream, got ${e?.__proto__?.constructor?.name||e}`)}let t=!1;const r=async()=>{if(t)throw new Error(h);return t=!0,await u(e)};return Object.assign(e,{transformToByteArray:r,transformToString:async e=>{const t=await r();if("base64"===e)return c(t);if("hex"===e)return(0,f.n)(t);if(void 0===e||"utf8"===e||"utf-8"===e)return(e=>{if("string"==typeof e)return e;if("object"!=typeof e||"number"!=typeof e.byteOffset||"number"!=typeof e.byteLength)throw new Error("@smithy/util-utf8: toUtf8 encoder function only accepts string | Uint8Array.");return new TextDecoder("utf-8").decode(e)})(t);if("function"==typeof TextDecoder)return new TextDecoder(e).decode(t);throw new Error("TextDecoder is not available, please make sure polyfill is provided.")},transformToWebStream:()=>{if(t)throw new Error(h);if(t=!0,w(e))return(e=>{if("function"!=typeof e.stream)throw new Error("Cannot transform payload Blob to web stream. Please make sure the Blob.stream() is polyfilled.\nIf you are using React Native, this API is not yet supported, see: https://react-native.canny.io/feature-requests/p/fetch-streaming-body");return e.stream()})(e);if(l(e))return e;throw new Error(`Cannot transform payload to web stream, got ${e}`)}})},w=e=>"function"==typeof Blob&&e instanceof Blob;class p extends n.Writable{bufferedBytes=[];_write(e,t,r){this.bufferedBytes.push(e),r()}}const m=e=>(e=>"function"==typeof ReadableStream&&e instanceof ReadableStream)(e)?async function(e){const t=[],r=e.getReader();let n=!1,s=0;for(;!n;){const{done:e,value:o}=await r.read();o&&(t.push(o),s+=o.length),n=e}const o=new Uint8Array(s);let i=0;for(const e of t)o.set(e,i),i+=e.length;return o}(e):new Promise((t,r)=>{const n=new p;e.pipe(n),e.on("error",e=>{n.end(),r(e)}),n.on("error",r),n.on("finish",function(){const e=new Uint8Array(Buffer.concat(this.bufferedBytes));t(e)})}),y="The stream has already been transformed.",b=e=>{if(!(e instanceof n.Readable))try{return d(e)}catch(t){throw new Error(`Unexpected stream implementation, expect Stream.Readable instance, got ${e?.__proto__?.constructor?.name||e}`)}let t=!1;const r=async()=>{if(t)throw new Error(y);return t=!0,await m(e)};return Object.assign(e,{transformToByteArray:r,transformToString:async e=>{const t=await r();if(void 0===e||Buffer.isEncoding(e))return(0,s.Q)(t.buffer,t.byteOffset,t.byteLength).toString(e);return new TextDecoder(e).decode(t)},transformToWebStream:()=>{if(t)throw new Error(y);if(null!==e.readableFlowing)throw new Error("The stream has been consumed by other callbacks.");if("function"!=typeof n.Readable.toWeb)throw new Error("Readable.toWeb() is not supported. Please ensure a polyfill is available.");return t=!0,n.Readable.toWeb(e)}})}},853(e){e.exports={rE:"3.997.23"}}};
@@ -0,0 +1,2 @@
1
+ #!/usr/bin/env node
2
+ "use strict";exports.id=485,exports.ids=[485],exports.modules={859(e,t,n){n.d(t,{CreateTokenCommand:()=>xt,SSOOIDCClient:()=>mt});var r=n(36),s=n(32),i=n(38),o=n(34),a=n(35),c=n(43),p=n(42),u=n(46),d=n(47),l=n(49),h=n(51),m=n(70),v=n(84),x=n(71),S=n(85),f=n(86),g=n(44),E=n(69);const I=async(e,t,n)=>({operation:(0,g.u)(t).operation,region:await(0,E.t)(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()});const P=e=>{const t=[];if("CreateToken"===e.operation)t.push({schemeId:"smithy.api#noAuth"});else t.push(function(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sso-oauth",region:e.region},propertiesExtractor:(e,t)=>({signingProperties:{config:e,context:t}})}}(e));return t},b={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var k=n(853),C=n(92),O=n(93),w=n(96),A=n(97),D=n(100),y=n(99),T=n(104),$=n(52),R=n(103),j=n(101),U=n(102),_=n(40),z=n(105),F=n(107),q=n(108),G=n(109),H=n(110),V=n(854),M=n(858),N=n(72),W=n(68),L=n(74),B=n(77),J=n(78),K=n(79),Q=n(129),X=n(132),Y=n(133),Z=n(130),ee=n(134);const te="ref",ne=-1,re=!0,se="isSet",ie="PartitionResult",oe="booleanEquals",ae="getAttr",ce={[te]:"Endpoint"},pe={[te]:ie},ue={},de=[{[te]:"Region"}],le={conditions:[[se,[ce]],[se,de],["aws.partition",de,ie],[oe,[{[te]:"UseFIPS"},re]],[oe,[{[te]:"UseDualStack"},re]],[oe,[{fn:ae,argv:[pe,"supportsDualStack"]},re]],[oe,[{fn:ae,argv:[pe,"supportsFIPS"]},re]],["stringEquals",[{fn:ae,argv:[pe,"name"]},"aws-us-gov"]]],results:[[ne],[ne,"Invalid Configuration: FIPS and custom endpoint are not supported"],[ne,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[ce,ue],["https://oidc-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",ue],[ne,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://oidc.{Region}.amazonaws.com",ue],["https://oidc-fips.{Region}.{PartitionResult#dnsSuffix}",ue],[ne,"FIPS is enabled but this partition does not support FIPS"],["https://oidc.{Region}.{PartitionResult#dualStackDnsSuffix}",ue],[ne,"DualStack is enabled but this partition does not support DualStack"],["https://oidc.{Region}.{PartitionResult#dnsSuffix}",ue],[ne,"Invalid Configuration: Missing Region"]]},he=1e8,me=new Int32Array([-1,1,-1,0,13,3,1,4,he+12,2,5,he+12,3,8,6,4,7,he+11,5,he+9,he+10,4,11,9,6,10,he+8,7,he+6,he+7,5,12,he+5,6,he+4,he+5,3,he+1,14,4,he+2,he+3]),ve=ee.d.from(me,2,le.conditions,le.results),xe=new X.k({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),Se=(e,t={})=>xe.get(e,()=>(0,Y.c)(ve,{endpointParams:e,logger:t.logger}));Z.m.aws=Q.U;var fe=n(117),ge=n(121);class Ee extends ge.T{constructor(e){super(e),Object.setPrototypeOf(this,Ee.prototype)}}class Ie extends Ee{name="AccessDeniedException";$fault="client";error;reason;error_description;constructor(e){super({name:"AccessDeniedException",$fault:"client",...e}),Object.setPrototypeOf(this,Ie.prototype),this.error=e.error,this.reason=e.reason,this.error_description=e.error_description}}class Pe extends Ee{name="AuthorizationPendingException";$fault="client";error;error_description;constructor(e){super({name:"AuthorizationPendingException",$fault:"client",...e}),Object.setPrototypeOf(this,Pe.prototype),this.error=e.error,this.error_description=e.error_description}}class be extends Ee{name="ExpiredTokenException";$fault="client";error;error_description;constructor(e){super({name:"ExpiredTokenException",$fault:"client",...e}),Object.setPrototypeOf(this,be.prototype),this.error=e.error,this.error_description=e.error_description}}class ke extends Ee{name="InternalServerException";$fault="server";error;error_description;constructor(e){super({name:"InternalServerException",$fault:"server",...e}),Object.setPrototypeOf(this,ke.prototype),this.error=e.error,this.error_description=e.error_description}}class Ce extends Ee{name="InvalidClientException";$fault="client";error;error_description;constructor(e){super({name:"InvalidClientException",$fault:"client",...e}),Object.setPrototypeOf(this,Ce.prototype),this.error=e.error,this.error_description=e.error_description}}class Oe extends Ee{name="InvalidGrantException";$fault="client";error;error_description;constructor(e){super({name:"InvalidGrantException",$fault:"client",...e}),Object.setPrototypeOf(this,Oe.prototype),this.error=e.error,this.error_description=e.error_description}}class we extends Ee{name="InvalidRequestException";$fault="client";error;reason;error_description;constructor(e){super({name:"InvalidRequestException",$fault:"client",...e}),Object.setPrototypeOf(this,we.prototype),this.error=e.error,this.reason=e.reason,this.error_description=e.error_description}}class Ae extends Ee{name="InvalidScopeException";$fault="client";error;error_description;constructor(e){super({name:"InvalidScopeException",$fault:"client",...e}),Object.setPrototypeOf(this,Ae.prototype),this.error=e.error,this.error_description=e.error_description}}class De extends Ee{name="SlowDownException";$fault="client";error;error_description;constructor(e){super({name:"SlowDownException",$fault:"client",...e}),Object.setPrototypeOf(this,De.prototype),this.error=e.error,this.error_description=e.error_description}}class ye extends Ee{name="UnauthorizedClientException";$fault="client";error;error_description;constructor(e){super({name:"UnauthorizedClientException",$fault:"client",...e}),Object.setPrototypeOf(this,ye.prototype),this.error=e.error,this.error_description=e.error_description}}class Te extends Ee{name="UnsupportedGrantTypeException";$fault="client";error;error_description;constructor(e){super({name:"UnsupportedGrantTypeException",$fault:"client",...e}),Object.setPrototypeOf(this,Te.prototype),this.error=e.error,this.error_description=e.error_description}}const $e="client",Re="error",je="error_description",Ue="http",_e="httpError",ze="reason",Fe="refreshToken",qe="smithy.ts.sdk.synthetic.com.amazonaws.ssooidc",Ge="com.amazonaws.ssooidc",He=fe.O.for(qe);var Ve=[-3,qe,"SSOOIDCServiceException",0,[],[]];He.registerError(Ve,Ee);const Me=fe.O.for(Ge);var Ne=[-3,Ge,"AccessDeniedException",{[Re]:$e,[_e]:400},[Re,ze,je],[0,0,0]];Me.registerError(Ne,Ie);var We=[-3,Ge,"AuthorizationPendingException",{[Re]:$e,[_e]:400},[Re,je],[0,0]];Me.registerError(We,Pe);var Le=[-3,Ge,"ExpiredTokenException",{[Re]:$e,[_e]:400},[Re,je],[0,0]];Me.registerError(Le,be);var Be=[-3,Ge,"InternalServerException",{[Re]:"server",[_e]:500},[Re,je],[0,0]];Me.registerError(Be,ke);var Je=[-3,Ge,"InvalidClientException",{[Re]:$e,[_e]:401},[Re,je],[0,0]];Me.registerError(Je,Ce);var Ke=[-3,Ge,"InvalidGrantException",{[Re]:$e,[_e]:400},[Re,je],[0,0]];Me.registerError(Ke,Oe);var Qe=[-3,Ge,"InvalidRequestException",{[Re]:$e,[_e]:400},[Re,ze,je],[0,0,0]];Me.registerError(Qe,we);var Xe=[-3,Ge,"InvalidScopeException",{[Re]:$e,[_e]:400},[Re,je],[0,0]];Me.registerError(Xe,Ae);var Ye=[-3,Ge,"SlowDownException",{[Re]:$e,[_e]:400},[Re,je],[0,0]];Me.registerError(Ye,De);var Ze=[-3,Ge,"UnauthorizedClientException",{[Re]:$e,[_e]:400},[Re,je],[0,0]];Me.registerError(Ze,ye);var et=[-3,Ge,"UnsupportedGrantTypeException",{[Re]:$e,[_e]:400},[Re,je],[0,0]];Me.registerError(et,Te);const tt=[He,Me];var nt=[0,Ge,"AccessToken",8,0],rt=[0,Ge,"ClientSecret",8,0],st=[0,Ge,"CodeVerifier",8,0],it=[0,Ge,"IdToken",8,0],ot=[0,Ge,"RefreshToken",8,0],at=[3,Ge,"CreateTokenRequest",0,["clientId","clientSecret","grantType","deviceCode","code",Fe,"scope","redirectUri","codeVerifier"],[0,[()=>rt,0],0,0,0,[()=>ot,0],64,0,[()=>st,0]],3],ct=[3,Ge,"CreateTokenResponse",0,["accessToken","tokenType","expiresIn",Fe,"idToken"],[[()=>nt,0],0,1,[()=>ot,0],[()=>it,0]]],pt=[9,Ge,"CreateToken",{[Ue]:["POST","/token",200]},()=>at,()=>ct];const ut=e=>{(0,D.I)(process.version);const t=(0,T.I)(e),n=()=>t().then(y.l),r=(e=>({apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??L.E,base64Encoder:e?.base64Encoder??B.n,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Se,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??P,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:e=>e.getIdentityProvider("aws.auth#sigv4"),signer:new H.f2},{schemeId:"smithy.api#noAuth",identityProvider:e=>e.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new M.m}],logger:e?.logger??new N.N,protocol:e?.protocol??V.Y,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.ssooidc",errorTypeRegistries:tt,version:"2019-06-10",serviceTarget:"AWSSSOOIDCService"},serviceId:e?.serviceId??"SSO OIDC",urlParser:e?.urlParser??W.D,utf8Decoder:e?.utf8Decoder??J.a,utf8Encoder:e?.utf8Encoder??K.P}))(e);(0,C.I)(process.version);const s={profile:e?.profile,logger:r.logger};return{...r,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??(0,$.Z)(A.$,s),bodyLengthChecker:e?.bodyLengthChecker??z.n,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,O.pf)({serviceId:r.serviceId,clientVersion:k.rE}),maxAttempts:e?.maxAttempts??(0,$.Z)(v.qs,e),region:e?.region??(0,$.Z)(R.GG,{...R.zH,...s}),requestHandler:q.$.create(e?.requestHandler??n),retryMode:e?.retryMode??(0,$.Z)({...v.kN,default:async()=>(await n()).retryMode||_.L0},e),sha256:e?.sha256??F.V.bind(null,"sha256"),streamCollector:e?.streamCollector??G.k,useDualstackEndpoint:e?.useDualstackEndpoint??(0,$.Z)(j.e$,s),useFipsEndpoint:e?.useFipsEndpoint??(0,$.Z)(U.Ko,s),userAgentAppId:e?.userAgentAppId??(0,$.Z)(w.hV,s)}};var dt=n(135),lt=n(136),ht=n(137);class mt extends d.K{config;constructor(...[e]){const t=ut(e||{});super(t),this.initConfig=t;const n=(d=t,Object.assign(d,{useDualstackEndpoint:d.useDualstackEndpoint??!1,useFipsEndpoint:d.useFipsEndpoint??!1,defaultSigningName:"sso-oauth"}));var d;const g=(0,r.D)(n),P=(0,v.$z)(g),b=(0,l.T)(P),k=(0,s.OV)(b),C=((e,t)=>{const n=Object.assign((0,dt.R)(e),(0,lt.xA)(e),(0,ht.e)(e),(e=>{const t=e.httpAuthSchemes;let n=e.httpAuthSchemeProvider,r=e.credentials;return{setHttpAuthScheme(e){const n=t.findIndex(t=>t.schemeId===e.schemeId);-1===n?t.push(e):t.splice(n,1,e)},httpAuthSchemes:()=>t,setHttpAuthSchemeProvider(e){n=e},httpAuthSchemeProvider:()=>n,setCredentials(e){r=e},credentials:()=>r}})(e));return t.forEach(e=>e.configure(n)),Object.assign(e,(0,dt.$)(n),(0,lt.uv)(n),(0,ht.j)(n),{httpAuthSchemes:(r=n).httpAuthSchemes(),httpAuthSchemeProvider:r.httpAuthSchemeProvider(),credentials:r.credentials()});var r})((e=>{const t=(0,f.h)(e);return Object.assign(t,{authSchemePreference:(0,E.t)(e.authSchemePreference??[])})})((0,h.Co)(k)),e?.extensions||[]);this.config=C,this.middlewareStack.use((0,S.wq)(this.config)),this.middlewareStack.use((0,i.sM)(this.config)),this.middlewareStack.use((0,x.ey)(this.config)),this.middlewareStack.use((0,m.vK)(this.config)),this.middlewareStack.use((0,s.TC)(this.config)),this.middlewareStack.use((0,o.Y7)(this.config)),this.middlewareStack.use((0,a.n)(this.config)),this.middlewareStack.use((0,c.w)(this.config,{httpAuthSchemeParametersProvider:I,identityProviderConfigProvider:async e=>new p.h({"aws.auth#sigv4":e.credentials})})),this.middlewareStack.use((0,u.l)(this.config))}destroy(){super.destroy()}}var vt=n(138);class xt extends(vt.u.classBuilder().ep(b).m(function(e,t,n,r){return[(0,h.rD)(n,e.getEndpointParameterInstructions())]}).s("AWSSSOOIDCService","CreateToken",{}).n("SSOOIDCClient","CreateTokenCommand").sc(pt).build()){}}};
package/dist/522.index.js CHANGED
@@ -1,2 +1,2 @@
1
1
  #!/usr/bin/env node
2
- "use strict";exports.id=522,exports.ids=[522],exports.modules={839(e,o,n){n.d(o,{fromTokenFile:()=>a});var r=n(80),t=n(61),s=n(837),i=n(104);const c="AWS_WEB_IDENTITY_TOKEN_FILE",a=(e={})=>async o=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");const a=e?.webIdentityTokenFile??process.env[c],d=e?.roleArn??process.env.AWS_ROLE_ARN,l=e?.roleSessionName??process.env.AWS_ROLE_SESSION_NAME;if(!a||!d)throw new t.C("Web identity configuration not specified",{logger:e.logger});const p=await(e=>async o=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");const{roleArn:r,roleSessionName:t,webIdentityToken:s,providerId:i,policyArns:c,policy:a,durationSeconds:d}=e;let{roleAssumerWithWebIdentity:l}=e;if(!l){const{getDefaultRoleAssumerWithWebIdentity:r}=await n.e(953).then(n.bind(n,852));l=r({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...o?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return l({RoleArn:r,RoleSessionName:t??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:s,ProviderId:i,PolicyArns:c,Policy:a,DurationSeconds:d})})({...e,webIdentityToken:s.Z?.getTokenRecord?.()[a]??(0,i.readFileSync)(a,{encoding:"ascii"}),roleArn:d,roleSessionName:l})(o);return a===process.env[c]&&(0,r.g)(p,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h"),p}},837(e,o,n){n.d(o,{Z:()=>s});var r=n(833),t=n(69);const s={getFileRecord:()=>t.Jj,interceptFile(e,o){t.Jj[e]=Promise.resolve(o)},getTokenRecord:()=>r.a,interceptToken(e,o){r.a[e]=o}}},834(e,o,n){n.d(o,{C:()=>i});var r=n(5),t=n(3),s=n(67);const i=e=>{const o=(0,r.createHash)("sha1").update(e).digest("hex");return(0,t.join)((0,s.R)(),".aws","sso","cache",`${o}.json`)}},833(e,o,n){n.d(o,{a:()=>s,v:()=>i});var r=n(27),t=n(834);const s={},i=async e=>{if(s[e])return s[e];const o=(0,t.C)(e),n=await(0,r.readFile)(o,"utf8");return JSON.parse(n)}}};
2
+ "use strict";exports.id=522,exports.ids=[522],exports.modules={847(e,o,n){n.d(o,{fromTokenFile:()=>a});var r=n(87),t=n(56),s=n(845),i=n(106);const c="AWS_WEB_IDENTITY_TOKEN_FILE",a=(e={})=>async o=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");const a=e?.webIdentityTokenFile??process.env[c],d=e?.roleArn??process.env.AWS_ROLE_ARN,l=e?.roleSessionName??process.env.AWS_ROLE_SESSION_NAME;if(!a||!d)throw new t.C("Web identity configuration not specified",{logger:e.logger});const p=await(e=>async o=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");const{roleArn:r,roleSessionName:t,webIdentityToken:s,providerId:i,policyArns:c,policy:a,durationSeconds:d}=e;let{roleAssumerWithWebIdentity:l}=e;if(!l){const{getDefaultRoleAssumerWithWebIdentity:r}=await n.e(248).then(n.bind(n,860));l=r({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...o?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return l({RoleArn:r,RoleSessionName:t??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:s,ProviderId:i,PolicyArns:c,Policy:a,DurationSeconds:d})})({...e,webIdentityToken:s.Z?.getTokenRecord?.()[a]??(0,i.readFileSync)(a,{encoding:"ascii"}),roleArn:d,roleSessionName:l})(o);return a===process.env[c]&&(0,r.g)(p,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h"),p}},845(e,o,n){n.d(o,{Z:()=>s});var r=n(841),t=n(65);const s={getFileRecord:()=>t.Jj,interceptFile(e,o){t.Jj[e]=Promise.resolve(o)},getTokenRecord:()=>r.a,interceptToken(e,o){r.a[e]=o}}},842(e,o,n){n.d(o,{C:()=>i});var r=n(20),t=n(59),s=n(63);const i=e=>{const o=(0,r.createHash)("sha1").update(e).digest("hex");return(0,t.join)((0,s.R)(),".aws","sso","cache",`${o}.json`)}},841(e,o,n){n.d(o,{a:()=>s,v:()=>i});var r=n(28),t=n(842);const s={},i=async e=>{if(s[e])return s[e];const o=(0,t.C)(e),n=await(0,r.readFile)(o,"utf8");return JSON.parse(n)}}};
@@ -0,0 +1,2 @@
1
+ #!/usr/bin/env node
2
+ "use strict";exports.id=566,exports.ids=[566],exports.modules={851(e,t,r){r.d(t,{EventStreamSerde:()=>P,eventStreamSerdeProvider:()=>O});var n=r(16);function o(e,t,r,n){return new(r||(r=Promise))(function(o,i){function s(e){try{c(n.next(e))}catch(e){i(e)}}function a(e){try{c(n.throw(e))}catch(e){i(e)}}function c(e){var t;e.done?o(e.value):(t=e.value,t instanceof r?t:new r(function(e){e(t)})).then(s,a)}c((n=n.apply(e,t||[])).next())})}function i(e,t){var r,n,o,i={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]},s=Object.create(("function"==typeof Iterator?Iterator:Object).prototype);return s.next=a(0),s.throw=a(1),s.return=a(2),"function"==typeof Symbol&&(s[Symbol.iterator]=function(){return this}),s;function a(a){return function(c){return function(a){if(r)throw new TypeError("Generator is already executing.");for(;s&&(s=0,a[0]&&(i=0)),i;)try{if(r=1,n&&(o=2&a[0]?n.return:a[0]?n.throw||((o=n.return)&&o.call(n),0):n.next)&&!(o=o.call(n,a[1])).done)return o;switch(n=0,o&&(a=[2&a[0],o.value]),a[0]){case 0:case 1:o=a;break;case 4:return i.label++,{value:a[1],done:!1};case 5:i.label++,n=a[1],a=[0];continue;case 7:a=i.ops.pop(),i.trys.pop();continue;default:if(!(o=i.trys,(o=o.length>0&&o[o.length-1])||6!==a[0]&&2!==a[0])){i=0;continue}if(3===a[0]&&(!o||a[1]>o[0]&&a[1]<o[3])){i.label=a[1];break}if(6===a[0]&&i.label<o[1]){i.label=o[1],o=a;break}if(o&&i.label<o[2]){i.label=o[2],i.ops.push(a);break}o[2]&&i.ops.pop(),i.trys.pop();continue}a=t.call(e,i)}catch(e){a=[6,e],n=0}finally{r=o=0}if(5&a[0])throw a[1];return{value:a[0]?a[1]:void 0,done:!0}}([a,c])}}}Object.create;function s(e){var t="function"==typeof Symbol&&Symbol.iterator,r=t&&e[t],n=0;if(r)return r.call(e);if(e&&"number"==typeof e.length)return{next:function(){return e&&n>=e.length&&(e=void 0),{value:e&&e[n++],done:!e}}};throw new TypeError(t?"Object is not iterable.":"Symbol.iterator is not defined.")}Object.create;"function"==typeof SuppressedError&&SuppressedError;var a=r(29);var c="undefined"!=typeof Buffer&&Buffer.from?function(e){return Buffer.from(e,"utf8")}:e=>{const t=((e,t)=>{if("string"!=typeof e)throw new TypeError(`The "input" argument must be of type string. Received type ${typeof e} (${e})`);return t?a.Buffer.from(e,t):a.Buffer.from(e)})(e,"utf8");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength/Uint8Array.BYTES_PER_ELEMENT)};!function(){function e(){this.crc32=new f}e.prototype.update=function(e){var t;("string"==typeof(t=e)?0!==t.length:0!==t.byteLength)&&this.crc32.update(function(e){return e instanceof Uint8Array?e:"string"==typeof e?c(e):ArrayBuffer.isView(e)?new Uint8Array(e.buffer,e.byteOffset,e.byteLength/Uint8Array.BYTES_PER_ELEMENT):new Uint8Array(e)}(e))},e.prototype.digest=function(){return o(this,void 0,void 0,function(){return i(this,function(e){return[2,(t=this.crc32.digest(),new Uint8Array([(4278190080&t)>>24,(16711680&t)>>16,(65280&t)>>8,255&t]))];var t})})},e.prototype.reset=function(){this.crc32=new f}}();var u,f=function(){function e(){this.checksum=4294967295}return e.prototype.update=function(e){var t,r;try{for(var n=s(e),o=n.next();!o.done;o=n.next()){var i=o.value;this.checksum=this.checksum>>>8^l[255&(this.checksum^i)]}}catch(e){t={error:e}}finally{try{o&&!o.done&&(r=n.return)&&r.call(n)}finally{if(t)throw t.error}}return this},e.prototype.digest=function(){return(4294967295^this.checksum)>>>0},e}(),l=function(e){if(!Uint32Array.from){for(var t=new Uint32Array(e.length),r=0;r<e.length;)t[r]=e[r],r+=1;return t}return Uint32Array.from(e)}([0,1996959894,3993919788,2567524794,124634137,1886057615,3915621685,2657392035,249268274,2044508324,3772115230,2547177864,162941995,2125561021,3887607047,2428444049,498536548,1789927666,4089016648,2227061214,450548861,1843258603,4107580753,2211677639,325883990,1684777152,4251122042,2321926636,335633487,1661365465,4195302755,2366115317,997073096,1281953886,3579855332,2724688242,1006888145,1258607687,3524101629,2768942443,901097722,1119000684,3686517206,2898065728,853044451,1172266101,3705015759,2882616665,651767980,1373503546,3369554304,3218104598,565507253,1454621731,3485111705,3099436303,671266974,1594198024,3322730930,2970347812,795835527,1483230225,3244367275,3060149565,1994146192,31158534,2563907772,4023717930,1907459465,112637215,2680153253,3904427059,2013776290,251722036,2517215374,3775830040,2137656763,141376813,2439277719,3865271297,1802195444,476864866,2238001368,4066508878,1812370925,453092731,2181625025,4111451223,1706088902,314042704,2344532202,4240017532,1658658271,366619977,2362670323,4224994405,1303535960,984961486,2747007092,3569037538,1256170817,1037604311,2765210733,3554079995,1131014506,879679996,2909243462,3663771856,1141124467,855842277,2852801631,3708648649,1342533948,654459306,3188396048,3373015174,1466479909,544179635,3110523913,3462522015,1591671054,702138776,2966460450,3352799412,1504918807,783551873,3082640443,3233442989,3988292384,2596254646,62317068,1957810842,3939845945,2647816111,81470997,1943803523,3814918930,2489596804,225274430,2053790376,3826175755,2466906013,167816743,2097651377,4027552580,2265490386,503444072,1762050814,4150417245,2154129355,426522225,1852507879,4275313526,2312317920,282753626,1742555852,4189708143,2394877945,397917763,1622183637,3604390888,2714866558,953729732,1340076626,3518719985,2797360999,1068828381,1219638859,3624741850,2936675148,906185462,1090812512,3747672003,2825379669,829329135,1181335161,3412177804,3160834842,628085408,1382605366,3423369109,3138078467,570562233,1426400815,3317316542,2998733608,733239954,1555261956,3268935591,3050360625,752459403,1541320221,2607071920,3965973030,1969922972,40735498,2617837225,3943577151,1913087877,83908371,2512341634,3803740692,2075208622,213261112,2463272603,3855990285,2094854071,198958881,2262029012,4057260610,1759359992,534414190,2176718541,4139329115,1873836001,414664567,2282248934,4279200368,1711684554,285281116,2405801727,4167216745,1634467795,376229701,2685067896,3608007406,1308918612,956543938,2808555105,3495958263,1231636301,1047427035,2932959818,3654703836,1088359270,936918e3,2847714899,3736837829,1202900863,817233897,3183342108,3401237130,1404277552,615818150,3134207493,3453421203,1423857449,601450431,3009837614,3294710456,1567103746,711928724,3020668471,3272380065,1510334235,755167117]),y=r(89);class h{bytes;constructor(e){if(this.bytes=e,8!==e.byteLength)throw new Error("Int64 buffers must be exactly 8 bytes")}static fromNumber(e){if(e>0x8000000000000000||e<-0x8000000000000000)throw new Error(`${e} is too large (or, if negative, too small) to represent as an Int64`);const t=new Uint8Array(8);for(let r=7,n=Math.abs(Math.round(e));r>-1&&n>0;r--,n/=256)t[r]=n;return e<0&&w(t),new h(t)}valueOf(){const e=this.bytes.slice(0),t=128&e[0];return t&&w(e),parseInt((0,y.n)(e),16)*(t?-1:1)}toString(){return String(this.valueOf())}}function w(e){for(let t=0;t<8;t++)e[t]^=255;for(let t=7;t>-1&&(e[t]++,0===e[t]);t--);}class d{toUtf8;fromUtf8;constructor(e,t){this.toUtf8=e,this.fromUtf8=t}format(e){const t=[];for(const r of Object.keys(e)){const n=this.fromUtf8(r);t.push(Uint8Array.from([n.byteLength]),n,this.formatHeaderValue(e[r]))}const r=new Uint8Array(t.reduce((e,t)=>e+t.byteLength,0));let n=0;for(const e of t)r.set(e,n),n+=e.byteLength;return r}formatHeaderValue(e){switch(e.type){case"boolean":return Uint8Array.from([e.value?0:1]);case"byte":return Uint8Array.from([2,e.value]);case"short":const t=new DataView(new ArrayBuffer(3));return t.setUint8(0,3),t.setInt16(1,e.value,!1),new Uint8Array(t.buffer);case"integer":const r=new DataView(new ArrayBuffer(5));return r.setUint8(0,4),r.setInt32(1,e.value,!1),new Uint8Array(r.buffer);case"long":const n=new Uint8Array(9);return n[0]=5,n.set(e.value.bytes,1),n;case"binary":const o=new DataView(new ArrayBuffer(3+e.value.byteLength));o.setUint8(0,6),o.setUint16(1,e.value.byteLength,!1);const i=new Uint8Array(o.buffer);return i.set(e.value,3),i;case"string":const s=this.fromUtf8(e.value),a=new DataView(new ArrayBuffer(3+s.byteLength));a.setUint8(0,7),a.setUint16(1,s.byteLength,!1);const c=new Uint8Array(a.buffer);return c.set(s,3),c;case"timestamp":const u=new Uint8Array(9);return u[0]=8,u.set(h.fromNumber(e.value.valueOf()).bytes,1),u;case"uuid":if(!k.test(e.value))throw new Error(`Invalid UUID received: ${e.value}`);const f=new Uint8Array(17);return f[0]=9,f.set((0,y.a)(e.value.replace(/\-/g,"")),1),f}}parse(e){const t={};let r=0;for(;r<e.byteLength;){const n=e.getUint8(r++),o=this.toUtf8(new Uint8Array(e.buffer,e.byteOffset+r,n));switch(r+=n,e.getUint8(r++)){case 0:t[o]={type:p,value:!0};break;case 1:t[o]={type:p,value:!1};break;case 2:t[o]={type:m,value:e.getInt8(r++)};break;case 3:t[o]={type:b,value:e.getInt16(r,!1)},r+=2;break;case 4:t[o]={type:v,value:e.getInt32(r,!1)},r+=4;break;case 5:t[o]={type:g,value:new h(new Uint8Array(e.buffer,e.byteOffset+r,8))},r+=8;break;case 6:const n=e.getUint16(r,!1);r+=2,t[o]={type:A,value:new Uint8Array(e.buffer,e.byteOffset+r,n)},r+=n;break;case 7:const i=e.getUint16(r,!1);r+=2,t[o]={type:U,value:this.toUtf8(new Uint8Array(e.buffer,e.byteOffset+r,i))},r+=i;break;case 8:t[o]={type:S,value:new Date(new h(new Uint8Array(e.buffer,e.byteOffset+r,8)).valueOf())},r+=8;break;case 9:const s=new Uint8Array(e.buffer,e.byteOffset+r,16);r+=16,t[o]={type:E,value:`${(0,y.n)(s.subarray(0,4))}-${(0,y.n)(s.subarray(4,6))}-${(0,y.n)(s.subarray(6,8))}-${(0,y.n)(s.subarray(8,10))}-${(0,y.n)(s.subarray(10))}`};break;default:throw new Error("Unrecognized header type tag")}}return t}}!function(e){e[e.boolTrue=0]="boolTrue",e[e.boolFalse=1]="boolFalse",e[e.byte=2]="byte",e[e.short=3]="short",e[e.integer=4]="integer",e[e.long=5]="long",e[e.byteArray=6]="byteArray",e[e.string=7]="string",e[e.timestamp=8]="timestamp",e[e.uuid=9]="uuid"}(u||(u={}));const p="boolean",m="byte",b="short",v="integer",g="long",A="binary",U="string",S="timestamp",E="uuid",k=/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;class ${headerMarshaller;messageBuffer;isEndOfStream;constructor(e,t){this.headerMarshaller=new d(e,t),this.messageBuffer=[],this.isEndOfStream=!1}feed(e){this.messageBuffer.push(this.decode(e))}endOfStream(){this.isEndOfStream=!0}getMessage(){const e=this.messageBuffer.pop(),t=this.isEndOfStream;return{getMessage:()=>e,isEndOfStream:()=>t}}getAvailableMessages(){const e=this.messageBuffer;this.messageBuffer=[];const t=this.isEndOfStream;return{getMessages:()=>e,isEndOfStream:()=>t}}encode({headers:e,body:t}){const r=this.headerMarshaller.format(e),n=r.byteLength+t.byteLength+16,o=new Uint8Array(n),i=new DataView(o.buffer,o.byteOffset,o.byteLength),s=new f;return i.setUint32(0,n,!1),i.setUint32(4,r.byteLength,!1),i.setUint32(8,s.update(o.subarray(0,8)).digest(),!1),o.set(r,12),o.set(t,r.byteLength+12),i.setUint32(n-4,s.update(o.subarray(8,n-4)).digest(),!1),o}decode(e){const{headers:t,body:r}=function({byteLength:e,byteOffset:t,buffer:r}){if(e<16)throw new Error("Provided message too short to accommodate event stream message overhead");const n=new DataView(r,t,e),o=n.getUint32(0,!1);if(e!==o)throw new Error("Reported message length does not match received message length");const i=n.getUint32(4,!1),s=n.getUint32(8,!1),a=n.getUint32(e-4,!1),c=(new f).update(new Uint8Array(r,t,8));if(s!==c.digest())throw new Error(`The prelude checksum specified in the message (${s}) does not match the calculated CRC32 checksum (${c.digest()})`);if(c.update(new Uint8Array(r,t+8,e-12)),a!==c.digest())throw new Error(`The message checksum (${c.digest()}) did not match the expected value of ${a}`);return{headers:new DataView(r,t+8+4,i),body:new Uint8Array(r,t+8+4+i,o-i-16)}}(e);return{headers:this.headerMarshaller.parse(t),body:r}}formatHeaders(e){return this.headerMarshaller.format(e)}}class x{options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(const e of this.options.inputStream){const t=this.options.decoder.decode(e);yield t}}}class z{options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(const e of this.options.messageStream){const t=this.options.encoder.encode(e);yield t}this.options.includeEndFrame&&(yield new Uint8Array(0))}}class T{options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(const e of this.options.messageStream){const t=await this.options.deserializer(e);void 0!==t&&(yield t)}}}class D{options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(const e of this.options.inputStream){const t=this.options.serializer(e);yield t}}}function B(e,t){return async function(r){const{value:n}=r.headers[":message-type"];if("error"===n){const e=new Error(r.headers[":error-message"].value||"UnknownError");throw e.name=r.headers[":error-code"].value,e}if("exception"===n){const n=r.headers[":exception-type"].value,o={[n]:r},i=await e(o);if(i.$unknown){const e=new Error(t(r.body));throw e.name=n,e}throw i[n]}if("event"===n){const t={[r.headers[":event-type"].value]:r},n=await e(t);if(n.$unknown)return;return n}throw Error(`Unrecognizable event type: ${r.headers[":event-type"].value}`)}}class I{eventStreamCodec;utfEncoder;constructor({utf8Encoder:e,utf8Decoder:t}){this.eventStreamCodec=new $(e,t),this.utfEncoder=e}deserialize(e,t){const r=function(e){let t=0,r=0,n=null,o=null;const i=e=>{if("number"!=typeof e)throw new Error("Attempted to allocate an event message where size was not a number: "+e);t=e,r=4,n=new Uint8Array(e),new DataView(n.buffer).setUint32(0,e,!1)};return{[Symbol.asyncIterator]:async function*(){const s=e[Symbol.asyncIterator]();for(;;){const{value:e,done:a}=await s.next();if(a){if(!t)return;if(t!==r)throw new Error("Truncated event message received.");return void(yield n)}const c=e.length;let u=0;for(;u<c;){if(!n){const t=c-u;o||(o=new Uint8Array(4));const n=Math.min(4-r,t);if(o.set(e.slice(u,u+n),r),r+=n,u+=n,r<4)break;i(new DataView(o.buffer).getUint32(0,!1)),o=null}const s=Math.min(t-r,c-u);n.set(e.slice(u,u+s),r),r+=s,u+=s,t&&t===r&&(yield n,n=null,t=0,r=0)}}}}}(e);return new T({messageStream:new x({inputStream:r,decoder:this.eventStreamCodec}),deserializer:B(t,this.utfEncoder)})}serialize(e,t){return new z({messageStream:new D({inputStream:e,serializer:t}),encoder:this.eventStreamCodec,includeEndFrame:!0})}}class M{universalMarshaller;constructor({utf8Encoder:e,utf8Decoder:t}){this.universalMarshaller=new I({utf8Decoder:t,utf8Encoder:e})}deserialize(e,t){const r="function"==typeof e[Symbol.asyncIterator]?e:async function*(e){let t=!1,r=!1;const n=new Array;e.on("error",e=>{if(t||(t=!0),e)throw e}),e.on("data",e=>{n.push(e)}),e.on("end",()=>{t=!0});for(;!r;){const e=await new Promise(e=>setTimeout(()=>e(n.shift()),0));e&&(yield e),r=t&&0===n.length}}(e);return this.universalMarshaller.deserialize(r,t)}serialize(e,t){return n.Readable.from(this.universalMarshaller.serialize(e,t))}}const O=e=>new M(e);var C=r(79),V=r(78);class P{marshaller;serializer;deserializer;serdeContext;defaultContentType;constructor({marshaller:e,serializer:t,deserializer:r,serdeContext:n,defaultContentType:o}){this.marshaller=e,this.serializer=t,this.deserializer=r,this.serdeContext=n,this.defaultContentType=o}async serializeEventStream({eventStream:e,requestSchema:t,initialRequest:r}){const n=this.marshaller,o=t.getEventStreamMember(),i=t.getMemberSchema(o),s=this.serializer,a=this.defaultContentType,c=Symbol("initialRequestMarker"),u={async*[Symbol.asyncIterator](){if(r){const e={":event-type":{type:"string",value:"initial-request"},":message-type":{type:"string",value:"event"},":content-type":{type:"string",value:a}};s.write(t,r);const n=s.flush();yield{[c]:!0,headers:e,body:n}}for await(const t of e)yield t}};return n.serialize(u,e=>{if(e[c])return{headers:e.headers,body:e.body};let t="";for(const r in e)if("__type"!==r){t=r;break}const{additionalHeaders:r,body:n,eventType:o,explicitPayloadContentType:s}=this.writeEventBody(t,i,e);return{headers:{":event-type":{type:"string",value:o},":message-type":{type:"string",value:"event"},":content-type":{type:"string",value:s??a},...r},body:n}})}async deserializeEventStream({response:e,responseSchema:t,initialResponseContainer:r}){const n=this.marshaller,o=t.getEventStreamMember(),i=t.getMemberSchema(o).getMemberSchemas(),s=Symbol("initialResponseMarker"),a=n.deserialize(e.body,async e=>{let r="";for(const t in e)if("__type"!==t){r=t;break}const n=e[r].body;if("initial-response"===r){const e=await this.deserializer.read(t,n);return delete e[o],{[s]:!0,...e}}if(r in i){const t=i[r];if(t.isStructSchema()){const o={};let i=!1;for(const[s,a]of t.structIterator()){const{eventHeader:t,eventPayload:c}=a.getMergedTraits();if(i=i||Boolean(t||c),c)a.isBlobSchema()?o[s]=n:a.isStringSchema()?o[s]=(this.serdeContext?.utf8Encoder??C.P)(n):a.isStructSchema()&&(o[s]=await this.deserializer.read(a,n));else if(t){const t=e[r].headers[s]?.value;null!=t&&(a.isNumericSchema()?o[s]=t&&"object"==typeof t&&"bytes"in t?BigInt(t.toString()):Number(t):o[s]=t)}}if(i)return{[r]:o};if(0===n.byteLength)return{[r]:{}}}return{[r]:await this.deserializer.read(t,n)}}return{$unknown:e}}),c=a[Symbol.asyncIterator](),u=await c.next();if(u.done)return a;if(u.value?.[s]){if(!t)throw new Error("@smithy::core/protocols - initial-response event encountered in event stream but no response schema given.");for(const e in u.value)r[e]=u.value[e]}return{async*[Symbol.asyncIterator](){for(u?.value?.[s]||(yield u.value);;){const{done:e,value:t}=await c.next();if(e)break;yield t}}}}writeEventBody(e,t,r){const n=this.serializer;let o,i=e,s=null;const a={};if(t.getSchema()[4].includes(e)){const i=t.getMemberSchema(e);if(i.isStructSchema()){for(const[t,n]of i.structIterator()){const{eventHeader:o,eventPayload:i}=n.getMergedTraits();if(i)s=t;else if(o){const o=r[e][t];let i="binary";n.isNumericSchema()?i=(-2)**31<=o&&o<=2**31-1?"integer":"long":n.isTimestampSchema()?i="timestamp":n.isStringSchema()?i="string":n.isBooleanSchema()&&(i="boolean"),null!=o&&(a[t]={type:i,value:o},delete r[e][t])}}if(null!==s){const t=i.getMemberSchema(s);t.isBlobSchema()?o="application/octet-stream":t.isStringSchema()&&(o="text/plain"),n.write(t,r[e][s])}else n.write(i,r[e])}else{if(!i.isUnitSchema())throw new Error("@smithy/core/event-streams - non-struct member not supported in event stream union.");n.write(i,{})}}else{const[t,o]=r[e];i=t,n.write(15,o)}const c=n.flush()??new Uint8Array;return{body:"string"==typeof c?(this.serdeContext?.utf8Decoder??V.a)(c):c,eventType:i,explicitPayloadContentType:o,additionalHeaders:a}}}}};
package/dist/733.index.js CHANGED
@@ -1,2 +1,2 @@
1
1
  #!/usr/bin/env node
2
- "use strict";exports.id=733,exports.ids=[733],exports.modules={835(e,t,r){r.d(t,{fromIni:()=>T});var n=r(832),i=r(62),o=r(61),s=r(80),a=r(58);const c=e=>(0,s.g)(e,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p"),l=(e,{profile:t,logger:r})=>{const n="string"==typeof e.source_profile&&void 0===e.credential_source;return n&&r?.debug?.(` ${t} isAssumeRoleWithSourceProfile source_profile=${e.source_profile}`),n},f=(e,{profile:t,logger:r})=>{const n="string"==typeof e.credential_source&&void 0===e.source_profile;return n&&r?.debug?.(` ${t} isCredentialSourceProfile credential_source=${e.credential_source}`),n},d=async(e,t,n,l,f={},d)=>{n.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");const u=t[e],{source_profile:p,region:h}=u;if(!n.roleAssumer){const{getDefaultRoleAssumer:e}=await r.e(953).then(r.bind(r,852));n.roleAssumer=e({...n.clientConfig,credentialProviderLogger:n.logger,parentClientConfig:{...l,...n?.parentClientConfig,region:h??n?.parentClientConfig?.region??l?.region}},n.clientPlugins)}if(p&&p in f)throw new o.C(`Detected a cycle attempting to resolve credentials for profile ${(0,i.Bz)(n)}. Profiles visited: `+Object.keys(f).join(", "),{logger:n.logger});n.logger?.debug("@aws-sdk/credential-provider-ini - finding credential resolver using "+(p?`source_profile=[${p}]`:`profile=[${e}]`));const y=p?d(p,t,n,l,{...f,[p]:!0},g(t[p]??{})):(await((e,t,n)=>{const i={EcsContainer:async e=>{const{fromHttp:t}=await r.e(963).then(r.bind(r,841)),{fromContainerMetadata:i}=await r.e(330).then(r.bind(r,840));return n?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>(0,a.c)(t(e??{}),i(e))().then(c)},Ec2InstanceMetadata:async e=>{n?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");const{fromInstanceMetadata:t}=await r.e(330).then(r.bind(r,840));return async()=>t(e)().then(c)},Environment:async e=>{n?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");const{fromEnv:t}=await r.e(960).then(r.bind(r,853));return async()=>t(e)().then(c)}};if(e in i)return i[e];throw new o.C(`Unsupported credential source in profile ${t}. Got ${e}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:n})})(u.credential_source,e,n.logger)(n))();if(g(u))return y.then(e=>(0,s.g)(e,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));{const t={RoleArn:u.role_arn,RoleSessionName:u.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:u.external_id,DurationSeconds:parseInt(u.duration_seconds||"3600",10)},{mfa_serial:r}=u;if(r){if(!n.mfaCodeProvider)throw new o.C(`Profile ${e} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:n.logger,tryNextLink:!1});t.SerialNumber=r,t.TokenCode=await n.mfaCodeProvider(r)}const i=await y;return n.roleAssumer(i,t).then(e=>(0,s.g)(e,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},g=e=>!e.role_arn&&!!e.credential_source;var u=r(33),p=r(69),h=r(20),y=r(104),w=r(17),E=r(93);class I{profileData;init;callerClientConfig;static REFRESH_THRESHOLD=3e5;constructor(e,t,r){this.profileData=e,this.init=t,this.callerClientConfig=r}async loadCredentials(){const e=await this.loadToken();if(!e)throw new o.C(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});const t=e.accessToken,r=Date.now();return new Date(t.expiresAt).getTime()-r<=I.REFRESH_THRESHOLD?this.refresh(e):{accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,accountId:t.accountId,expiration:new Date(t.expiresAt)}}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}async refresh(e){const{SigninClient:t,CreateOAuth2TokenCommand:n}=await Promise.all([r.e(905),r.e(780)]).then(r.bind(r,854)),{logger:i,userAgentAppId:s}=this.callerClientConfig??{},a=(e=>"h2"===e?.metadata?.handlerProtocol)(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,c=new t({credentials:{accessKeyId:"",secretAccessKey:""},region:this.profileData.region??await(this.callerClientConfig?.region?.())??process.env.AWS_REGION,requestHandler:a,logger:i,userAgentAppId:s,...this.init?.clientConfig});this.createDPoPInterceptor(c.middlewareStack);const l={tokenInput:{clientId:e.clientId,refreshToken:e.refreshToken,grantType:"refresh_token"}};try{const t=await c.send(new n(l)),{accessKeyId:r,secretAccessKey:i,sessionToken:s}=t.tokenOutput?.accessToken??{},{refreshToken:a,expiresIn:f}=t.tokenOutput??{};if(!(r&&i&&s&&a))throw new o.C("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});const d=1e3*(f??900),g=new Date(Date.now()+d),u={...e,accessToken:{...e.accessToken,accessKeyId:r,secretAccessKey:i,sessionToken:s,expiresAt:g.toISOString()},refreshToken:a};await this.saveToken(u);const p=u.accessToken;return{accessKeyId:p.accessKeyId,secretAccessKey:p.secretAccessKey,sessionToken:p.sessionToken,accountId:p.accountId,expiration:g}}catch(e){if("AccessDeniedException"===e.name){let t;switch(e.error){case"TOKEN_EXPIRED":t="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":t="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":t="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:t=`Failed to refresh token: ${String(e)}. Please re-authenticate using \`aws login\``}throw new o.C(t,{logger:this.logger,tryNextLink:!1})}throw new o.C(`Failed to refresh token: ${String(e)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){const e=this.getTokenFilePath();try{let t;try{t=await(0,p.TA)(e,{ignoreCache:this.init?.ignoreCache})}catch{t=await y.promises.readFile(e,"utf8")}const r=JSON.parse(t),n=["accessToken","clientId","refreshToken","dpopKey"].filter(e=>!r[e]);if(r.accessToken?.accountId||n.push("accountId"),n.length>0)throw new o.C(`Token validation failed, missing fields: ${n.join(", ")}`,{logger:this.logger,tryNextLink:!1});return r}catch(t){throw new o.C(`Failed to load token from ${e}: ${String(t)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(e){const t=this.getTokenFilePath(),r=(0,E.dirname)(t);try{await y.promises.mkdir(r,{recursive:!0})}catch(e){}await y.promises.writeFile(t,JSON.stringify(e,null,2),"utf8")}getTokenFilePath(){const e=process.env.AWS_LOGIN_CACHE_DIRECTORY??(0,E.join)((0,w.homedir)(),".aws","login","cache"),t=Buffer.from(this.loginSession,"utf8"),r=(0,h.createHash)("sha256").update(t).digest("hex");return(0,E.join)(e,`${r}.json`)}derToRawSignature(e){let t=2;if(2!==e[t])throw new Error("Invalid DER signature");t++;const r=e[t++];let n=e.subarray(t,t+r);if(t+=r,2!==e[t])throw new Error("Invalid DER signature");t++;const i=e[t++];let o=e.subarray(t,t+i);n=0===n[0]?n.subarray(1):n,o=0===o[0]?o.subarray(1):o;const s=Buffer.concat([Buffer.alloc(32-n.length),n]),a=Buffer.concat([Buffer.alloc(32-o.length),o]);return Buffer.concat([s,a])}createDPoPInterceptor(e){e.add(e=>async t=>{if(u.K.isInstance(t.request)){const e=t.request,r=`${e.protocol}//${e.hostname}${e.port?`:${e.port}`:""}${e.path}`,n=await this.generateDpop(e.method,r);e.headers={...e.headers,DPoP:n}}return e(t)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(e="POST",t){const r=await this.loadToken();try{const n=(0,h.createPrivateKey)({key:r.dpopKey,format:"pem",type:"sec1"}),i=(0,h.createPublicKey)(n).export({format:"der",type:"spki"});let o=-1;for(let e=0;e<i.length;e++)if(4===i[e]){o=e;break}const s=i.slice(o+1,o+33),a=i.slice(o+33,o+65),c={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:s.toString("base64url"),y:a.toString("base64url")}},l={jti:crypto.randomUUID(),htm:e,htu:t,iat:Math.floor(Date.now()/1e3)},f=Buffer.from(JSON.stringify(c)).toString("base64url"),d=`${f}.${Buffer.from(JSON.stringify(l)).toString("base64url")}`,g=(0,h.sign)("sha256",Buffer.from(d),n),u=this.derToRawSignature(g);return`${d}.${u.toString("base64url")}`}catch(e){throw new o.C(`Failed to generate Dpop proof: ${e instanceof Error?e.message:String(e)}`,{logger:this.logger,tryNextLink:!1})}}}const C=async(e,t,r)=>{const a=await(c={...t,profile:e},async({callerClientConfig:e}={})=>{c?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");const t=await(0,n.Y)(c||{}),r=(0,i.Bz)({profile:c?.profile??e?.profile}),a=t[r];if(!a?.login_session)throw new o.C(`Profile ${r} does not contain login_session.`,{tryNextLink:!0,logger:c?.logger});const l=new I(a,c,e),f=await l.loadCredentials();return(0,s.g)(f,"CREDENTIALS_LOGIN","AD")})({callerClientConfig:r});var c;return(0,s.g)(a,"CREDENTIALS_PROFILE_LOGIN","AC")},k=e=>Boolean(e)&&"object"==typeof e&&"string"==typeof e.aws_access_key_id&&"string"==typeof e.aws_secret_access_key&&["undefined","string"].indexOf(typeof e.aws_session_token)>-1&&["undefined","string"].indexOf(typeof e.aws_account_id)>-1,S=async(e,t)=>{t?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");const r={accessKeyId:e.aws_access_key_id,secretAccessKey:e.aws_secret_access_key,sessionToken:e.aws_session_token,...e.aws_credential_scope&&{credentialScope:e.aws_credential_scope},...e.aws_account_id&&{accountId:e.aws_account_id}};return(0,s.g)(r,"CREDENTIALS_PROFILE","n")},R=async(e,t,n,i,a={},c=!1)=>{const g=t[e];if(Object.keys(a).length>0&&k(g))return S(g,n);if(c||((e,{profile:t="default",logger:r}={})=>Boolean(e)&&"object"==typeof e&&"string"==typeof e.role_arn&&["undefined","string"].indexOf(typeof e.role_session_name)>-1&&["undefined","string"].indexOf(typeof e.external_id)>-1&&["undefined","string"].indexOf(typeof e.mfa_serial)>-1&&(l(e,{profile:t,logger:r})||f(e,{profile:t,logger:r})))(g,{profile:e,logger:n.logger}))return d(e,t,n,i,a,R);if(k(g))return S(g,n);if(u=g,Boolean(u)&&"object"==typeof u&&"string"==typeof u.web_identity_token_file&&"string"==typeof u.role_arn&&["undefined","string"].indexOf(typeof u.role_session_name)>-1)return(async(e,t,n)=>r.e(522).then(r.bind(r,839)).then(({fromTokenFile:r})=>r({webIdentityTokenFile:e.web_identity_token_file,roleArn:e.role_arn,roleSessionName:e.role_session_name,roleAssumerWithWebIdentity:t.roleAssumerWithWebIdentity,logger:t.logger,parentClientConfig:t.parentClientConfig})({callerClientConfig:n}).then(e=>(0,s.g)(e,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q"))))(g,n,i);var u;if((e=>Boolean(e)&&"object"==typeof e&&"string"==typeof e.credential_process)(g))return(async(e,t)=>r.e(876).then(r.bind(r,836)).then(({fromProcess:r})=>r({...e,profile:t})().then(e=>(0,s.g)(e,"CREDENTIALS_PROFILE_PROCESS","v"))))(n,e);if((e=>e&&("string"==typeof e.sso_start_url||"string"==typeof e.sso_account_id||"string"==typeof e.sso_session||"string"==typeof e.sso_region||"string"==typeof e.sso_role_name))(g))return await(async(e,t,n={},i)=>{const{fromSSO:o}=await r.e(593).then(r.bind(r,831));return o({profile:e,logger:n.logger,parentClientConfig:n.parentClientConfig,clientConfig:n.clientConfig})({callerClientConfig:i}).then(e=>t.sso_session?(0,s.g)(e,"CREDENTIALS_PROFILE_SSO","r"):(0,s.g)(e,"CREDENTIALS_PROFILE_SSO_LEGACY","t"))})(e,g,n,i);if((e=>Boolean(e&&e.login_session))(g))return C(e,n,i);throw new o.C(`Could not resolve credentials using profile: [${e}] in configuration/credentials file(s).`,{logger:n.logger})},T=(e={})=>async({callerClientConfig:t}={})=>{e.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");const r=await(0,n.Y)(e);return R((0,i.Bz)({profile:e.profile??t?.profile}),r,e,t)}},832(e,t,r){r.d(t,{Y:()=>i});var n=r(63);const i=async e=>{const t=await(0,n.p)(e);return((...e)=>{const t={};for(const r of e)for(const[e,n]of Object.entries(r))void 0!==t[e]?Object.assign(t[e],n):t[e]=n;return t})(t.configFile,t.credentialsFile)}}};
2
+ "use strict";exports.id=733,exports.ids=[733],exports.modules={843(e,t,r){r.d(t,{fromIni:()=>T});var n=r(840),i=r(57),o=r(56),s=r(87),a=r(53);const c=e=>(0,s.g)(e,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p"),l=(e,{profile:t,logger:r})=>{const n="string"==typeof e.source_profile&&void 0===e.credential_source;return n&&r?.debug?.(` ${t} isAssumeRoleWithSourceProfile source_profile=${e.source_profile}`),n},f=(e,{profile:t,logger:r})=>{const n="string"==typeof e.credential_source&&void 0===e.source_profile;return n&&r?.debug?.(` ${t} isCredentialSourceProfile credential_source=${e.credential_source}`),n},d=async(e,t,n,l,f={},d)=>{n.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");const u=t[e],{source_profile:p,region:w}=u;if(!n.roleAssumer){const{getDefaultRoleAssumer:e}=await r.e(248).then(r.bind(r,860));n.roleAssumer=e({...n.clientConfig,credentialProviderLogger:n.logger,parentClientConfig:{...l,...n?.parentClientConfig,region:w??n?.parentClientConfig?.region??l?.region}},n.clientPlugins)}if(p&&p in f)throw new o.C(`Detected a cycle attempting to resolve credentials for profile ${(0,i.Bz)(n)}. Profiles visited: `+Object.keys(f).join(", "),{logger:n.logger});n.logger?.debug("@aws-sdk/credential-provider-ini - finding credential resolver using "+(p?`source_profile=[${p}]`:`profile=[${e}]`));const h=p?d(p,t,n,l,{...f,[p]:!0},g(t[p]??{})):(await((e,t,n)=>{const i={EcsContainer:async e=>{const{fromHttp:t}=await r.e(963).then(r.bind(r,849)),{fromContainerMetadata:i}=await r.e(330).then(r.bind(r,848));return n?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>(0,a.c)(t(e??{}),i(e))().then(c)},Ec2InstanceMetadata:async e=>{n?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");const{fromInstanceMetadata:t}=await r.e(330).then(r.bind(r,848));return async()=>t(e)().then(c)},Environment:async e=>{n?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");const{fromEnv:t}=await r.e(960).then(r.bind(r,861));return async()=>t(e)().then(c)}};if(e in i)return i[e];throw new o.C(`Unsupported credential source in profile ${t}. Got ${e}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:n})})(u.credential_source,e,n.logger)(n))();if(g(u))return h.then(e=>(0,s.g)(e,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));{const t={RoleArn:u.role_arn,RoleSessionName:u.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:u.external_id,DurationSeconds:parseInt(u.duration_seconds||"3600",10)},{mfa_serial:r}=u;if(r){if(!n.mfaCodeProvider)throw new o.C(`Profile ${e} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:n.logger,tryNextLink:!1});t.SerialNumber=r,t.TokenCode=await n.mfaCodeProvider(r)}const i=await h;return n.roleAssumer(i,t).then(e=>(0,s.g)(e,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},g=e=>!e.role_arn&&!!e.credential_source;var u=r(65),p=r(33),w=r(20),h=r(106),y=r(17),E=r(59);class I{profileData;init;callerClientConfig;static REFRESH_THRESHOLD=3e5;constructor(e,t,r){this.profileData=e,this.init=t,this.callerClientConfig=r}async loadCredentials(){const e=await this.loadToken();if(!e)throw new o.C(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});const t=e.accessToken,r=Date.now();return new Date(t.expiresAt).getTime()-r<=I.REFRESH_THRESHOLD?this.refresh(e):{accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,accountId:t.accountId,expiration:new Date(t.expiresAt)}}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}async refresh(e){const{SigninClient:t,CreateOAuth2TokenCommand:n}=await Promise.all([r.e(350),r.e(785)]).then(r.bind(r,862)),{logger:i,userAgentAppId:s}=this.callerClientConfig??{},a=(e=>"h2"===e?.metadata?.handlerProtocol)(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,c=new t({credentials:{accessKeyId:"",secretAccessKey:""},region:this.profileData.region??await(this.callerClientConfig?.region?.())??process.env.AWS_REGION,requestHandler:a,logger:i,userAgentAppId:s,...this.init?.clientConfig});this.createDPoPInterceptor(c.middlewareStack);const l={tokenInput:{clientId:e.clientId,refreshToken:e.refreshToken,grantType:"refresh_token"}};try{const t=await c.send(new n(l)),{accessKeyId:r,secretAccessKey:i,sessionToken:s}=t.tokenOutput?.accessToken??{},{refreshToken:a,expiresIn:f}=t.tokenOutput??{};if(!(r&&i&&s&&a))throw new o.C("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});const d=1e3*(f??900),g=new Date(Date.now()+d),u={...e,accessToken:{...e.accessToken,accessKeyId:r,secretAccessKey:i,sessionToken:s,expiresAt:g.toISOString()},refreshToken:a};await this.saveToken(u);const p=u.accessToken;return{accessKeyId:p.accessKeyId,secretAccessKey:p.secretAccessKey,sessionToken:p.sessionToken,accountId:p.accountId,expiration:g}}catch(e){if("AccessDeniedException"===e.name){let t;switch(e.error){case"TOKEN_EXPIRED":t="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":t="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":t="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:t=`Failed to refresh token: ${String(e)}. Please re-authenticate using \`aws login\``}throw new o.C(t,{logger:this.logger,tryNextLink:!1})}throw new o.C(`Failed to refresh token: ${String(e)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){const e=this.getTokenFilePath();try{let t;try{t=await(0,u.TA)(e,{ignoreCache:this.init?.ignoreCache})}catch{t=await h.promises.readFile(e,"utf8")}const r=JSON.parse(t),n=["accessToken","clientId","refreshToken","dpopKey"].filter(e=>!r[e]);if(r.accessToken?.accountId||n.push("accountId"),n.length>0)throw new o.C(`Token validation failed, missing fields: ${n.join(", ")}`,{logger:this.logger,tryNextLink:!1});return r}catch(t){throw new o.C(`Failed to load token from ${e}: ${String(t)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(e){const t=this.getTokenFilePath(),r=(0,E.dirname)(t);try{await h.promises.mkdir(r,{recursive:!0})}catch(e){}await h.promises.writeFile(t,JSON.stringify(e,null,2),"utf8")}getTokenFilePath(){const e=process.env.AWS_LOGIN_CACHE_DIRECTORY??(0,E.join)((0,y.homedir)(),".aws","login","cache"),t=Buffer.from(this.loginSession,"utf8"),r=(0,w.createHash)("sha256").update(t).digest("hex");return(0,E.join)(e,`${r}.json`)}derToRawSignature(e){let t=2;if(2!==e[t])throw new Error("Invalid DER signature");t++;const r=e[t++];let n=e.subarray(t,t+r);if(t+=r,2!==e[t])throw new Error("Invalid DER signature");t++;const i=e[t++];let o=e.subarray(t,t+i);n=0===n[0]?n.subarray(1):n,o=0===o[0]?o.subarray(1):o;const s=Buffer.concat([Buffer.alloc(32-n.length),n]),a=Buffer.concat([Buffer.alloc(32-o.length),o]);return Buffer.concat([s,a])}createDPoPInterceptor(e){e.add(e=>async t=>{if(p.K.isInstance(t.request)){const e=t.request,r=`${e.protocol}//${e.hostname}${e.port?`:${e.port}`:""}${e.path}`,n=await this.generateDpop(e.method,r);e.headers={...e.headers,DPoP:n}}return e(t)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(e="POST",t){const r=await this.loadToken();try{const n=(0,w.createPrivateKey)({key:r.dpopKey,format:"pem",type:"sec1"}),i=(0,w.createPublicKey)(n).export({format:"der",type:"spki"});let o=-1;for(let e=0;e<i.length;e++)if(4===i[e]){o=e;break}const s=i.slice(o+1,o+33),a=i.slice(o+33,o+65),c={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:s.toString("base64url"),y:a.toString("base64url")}},l={jti:crypto.randomUUID(),htm:e,htu:t,iat:Math.floor(Date.now()/1e3)},f=Buffer.from(JSON.stringify(c)).toString("base64url"),d=`${f}.${Buffer.from(JSON.stringify(l)).toString("base64url")}`,g=(0,w.sign)("sha256",Buffer.from(d),n),u=this.derToRawSignature(g);return`${d}.${u.toString("base64url")}`}catch(e){throw new o.C(`Failed to generate Dpop proof: ${e instanceof Error?e.message:String(e)}`,{logger:this.logger,tryNextLink:!1})}}}const C=async(e,t,r)=>{const a=await(c={...t,profile:e},async({callerClientConfig:e}={})=>{c?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");const t=await(0,n.Y)(c||{}),r=(0,i.Bz)({profile:c?.profile??e?.profile}),a=t[r];if(!a?.login_session)throw new o.C(`Profile ${r} does not contain login_session.`,{tryNextLink:!0,logger:c?.logger});const l=new I(a,c,e),f=await l.loadCredentials();return(0,s.g)(f,"CREDENTIALS_LOGIN","AD")})({callerClientConfig:r});var c;return(0,s.g)(a,"CREDENTIALS_PROFILE_LOGIN","AC")},k=e=>Boolean(e)&&"object"==typeof e&&"string"==typeof e.aws_access_key_id&&"string"==typeof e.aws_secret_access_key&&["undefined","string"].indexOf(typeof e.aws_session_token)>-1&&["undefined","string"].indexOf(typeof e.aws_account_id)>-1,S=async(e,t)=>{t?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");const r={accessKeyId:e.aws_access_key_id,secretAccessKey:e.aws_secret_access_key,sessionToken:e.aws_session_token,...e.aws_credential_scope&&{credentialScope:e.aws_credential_scope},...e.aws_account_id&&{accountId:e.aws_account_id}};return(0,s.g)(r,"CREDENTIALS_PROFILE","n")},R=async(e,t,n,i,a={},c=!1)=>{const g=t[e];if(Object.keys(a).length>0&&k(g))return S(g,n);if(c||((e,{profile:t="default",logger:r}={})=>Boolean(e)&&"object"==typeof e&&"string"==typeof e.role_arn&&["undefined","string"].indexOf(typeof e.role_session_name)>-1&&["undefined","string"].indexOf(typeof e.external_id)>-1&&["undefined","string"].indexOf(typeof e.mfa_serial)>-1&&(l(e,{profile:t,logger:r})||f(e,{profile:t,logger:r})))(g,{profile:e,logger:n.logger}))return d(e,t,n,i,a,R);if(k(g))return S(g,n);if(u=g,Boolean(u)&&"object"==typeof u&&"string"==typeof u.web_identity_token_file&&"string"==typeof u.role_arn&&["undefined","string"].indexOf(typeof u.role_session_name)>-1)return(async(e,t,n)=>{const{fromTokenFile:i}=await r.e(522).then(r.bind(r,847)),o=await i({webIdentityTokenFile:e.web_identity_token_file,roleArn:e.role_arn,roleSessionName:e.role_session_name,roleAssumerWithWebIdentity:t.roleAssumerWithWebIdentity,logger:t.logger,parentClientConfig:t.parentClientConfig})({callerClientConfig:n});return(0,s.g)(o,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q")})(g,n,i);var u;if((e=>Boolean(e)&&"object"==typeof e&&"string"==typeof e.credential_process)(g))return(async(e,t)=>{const{fromProcess:n}=await r.e(876).then(r.bind(r,844)),i=await n({...e,profile:t})();return(0,s.g)(i,"CREDENTIALS_PROFILE_PROCESS","v")})(n,e);if((e=>e&&("string"==typeof e.sso_start_url||"string"==typeof e.sso_account_id||"string"==typeof e.sso_session||"string"==typeof e.sso_region||"string"==typeof e.sso_role_name))(g))return await(async(e,t,n={},i)=>{const{fromSSO:o}=await r.e(843).then(r.bind(r,839));return o({profile:e,logger:n.logger,parentClientConfig:n.parentClientConfig,clientConfig:n.clientConfig})({callerClientConfig:i}).then(e=>t.sso_session?(0,s.g)(e,"CREDENTIALS_PROFILE_SSO","r"):(0,s.g)(e,"CREDENTIALS_PROFILE_SSO_LEGACY","t"))})(e,g,n,i);if((e=>Boolean(e&&e.login_session))(g))return C(e,n,i);throw new o.C(`Could not resolve credentials using profile: [${e}] in configuration/credentials file(s).`,{logger:n.logger})},T=(e={})=>async({callerClientConfig:t}={})=>{e.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");const r=await(0,n.Y)(e);return R((0,i.Bz)({profile:e.profile??t?.profile}),r,e,t)}},840(e,t,r){r.d(t,{Y:()=>i});var n=r(58);const i=async e=>{const t=await(0,n.p)(e);return((...e)=>{const t={};for(const r of e)for(const[e,n]of Object.entries(r))void 0!==t[e]?Object.assign(t[e],n):t[e]=n;return t})(t.configFile,t.credentialsFile)}}};
@@ -0,0 +1,2 @@
1
+ #!/usr/bin/env node
2
+ "use strict";exports.id=785,exports.ids=[785],exports.modules={862(e,t,n){n.d(t,{CreateOAuth2TokenCommand:()=>ft,SigninClient:()=>mt});var s=n(36),i=n(32),o=n(38),r=n(34),a=n(35),c=n(43),u=n(42),p=n(46),h=n(47),g=n(49),d=n(51),l=n(70),m=n(84),v=n(71),f=n(85),S=n(86),P=n(44),R=n(69);const w=async(e,t,n)=>({operation:(0,P.u)(t).operation,region:await(0,R.t)(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()});const k=e=>{const t=[];if("CreateOAuth2Token"===e.operation)t.push({schemeId:"smithy.api#noAuth"});else t.push(function(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"signin",region:e.region},propertiesExtractor:(e,t)=>({signingProperties:{config:e,context:t}})}}(e));return t},x={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var I=n(853),A=n(92),y=n(93),E=n(96),b=n(97),C=n(100),T=n(99),O=n(104),D=n(52),z=n(103),F=n(101),j=n(102),q=n(40),U=n(105),$=n(107),M=n(108),V=n(109),H=n(110),N=n(854),B=n(858),K=n(72),L=n(68),G=n(74),J=n(77),Q=n(78),W=n(79),X=n(129),Y=n(132),Z=n(133),_=n(130),ee=n(134);const te="ref",ne=-1,se=!0,ie="isSet",oe="booleanEquals",re="PartitionResult",ae="stringEquals",ce="getAttr",ue="https://signin.{Region}.{PartitionResult#dualStackDnsSuffix}",pe={[te]:"Endpoint"},he={fn:ce,argv:[{[te]:re},"name"]},ge={[te]:re},de={[te]:"Region"},le={authSchemes:[{name:"sigv4",signingName:"signin",signingRegion:"{Region}"}]},me={},ve=[de],fe={conditions:[[ie,ve],[oe,[{fn:"coalesce",argv:[{[te]:"IsControlPlane"},!1]},se]],[ie,[pe]],["aws.partition",ve,re],[oe,[{[te]:"UseFIPS"},se]],[oe,[{[te]:"UseDualStack"},se]],[ae,[he,"aws"]],[ae,[he,"aws-cn"]],[oe,[{fn:ce,argv:[ge,"supportsDualStack"]},se]],[ae,[de,"us-gov-west-1"]],[ae,[he,"aws-us-gov"]],[oe,[{fn:ce,argv:[ge,"supportsFIPS"]},se]],[ae,[he,"aws-iso"]],[ae,[he,"aws-iso-b"]],[ae,[he,"aws-iso-f"]],[ae,[he,"aws-iso-e"]],[ae,[he,"aws-eusc"]]],results:[[ne],["https://signin.{Region}.api.aws",le],["https://signin.{Region}.api.amazonwebservices.com.cn",le],[ue,le],["https://{Region}.signin.aws.amazon.com",me],["https://{Region}.signin.amazonaws.cn",me],["https://{Region}.signin.amazonaws-us-gov.com",me],["https://{Region}.signin.c2shome.ic.gov",me],["https://{Region}.signin.sc2shome.sgov.gov",me],["https://{Region}.signin.csphome.hci.ic.gov",me],["https://{Region}.signin.csphome.adc-e.uk",me],["https://{Region}.signin.amazonaws-eusc.eu",me],["https://signin-fips.amazonaws-us-gov.com",me],["https://{Region}.signin-fips.amazonaws-us-gov.com",me],["https://{Region}.signin.{PartitionResult#dnsSuffix}",me],[ne,"Invalid Configuration: FIPS and custom endpoint are not supported"],[ne,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[pe,me],["https://signin-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",me],[ne,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://signin-fips.{Region}.{PartitionResult#dnsSuffix}",me],[ne,"FIPS is enabled but this partition does not support FIPS"],[ue,me],[ne,"DualStack is enabled but this partition does not support DualStack"],["https://signin.{Region}.{PartitionResult#dnsSuffix}",me],[ne,"Invalid Configuration: Missing Region"]]},Se=1e8,Pe=new Int32Array([-1,1,-1,0,4,3,2,30,Se+25,1,24,5,2,30,6,3,7,26,4,18,8,5,17,9,6,Se+4,10,7,Se+5,11,10,Se+6,12,12,Se+7,13,13,Se+8,14,14,Se+9,15,15,Se+10,16,16,Se+11,Se+14,8,Se+22,Se+23,5,22,19,9,Se+12,20,10,Se+13,21,11,Se+20,Se+21,8,23,Se+19,11,Se+18,Se+19,2,29,25,3,32,26,4,27,Se+25,5,Se+25,28,9,Se+12,Se+25,3,32,30,4,Se+15,31,5,Se+16,Se+17,6,Se+1,33,7,Se+2,Se+3]),Re=ee.d.from(Pe,2,fe.conditions,fe.results),we=new Y.k({size:50,params:["Endpoint","IsControlPlane","Region","UseDualStack","UseFIPS"]}),ke=(e,t={})=>we.get(e,()=>(0,Z.c)(Re,{endpointParams:e,logger:t.logger}));_.m.aws=X.U;var xe=n(117),Ie=n(121);class Ae extends Ie.T{constructor(e){super(e),Object.setPrototypeOf(this,Ae.prototype)}}class ye extends Ae{name="AccessDeniedException";$fault="client";error;constructor(e){super({name:"AccessDeniedException",$fault:"client",...e}),Object.setPrototypeOf(this,ye.prototype),this.error=e.error}}class Ee extends Ae{name="InternalServerException";$fault="server";error;constructor(e){super({name:"InternalServerException",$fault:"server",...e}),Object.setPrototypeOf(this,Ee.prototype),this.error=e.error}}class be extends Ae{name="TooManyRequestsError";$fault="client";error;constructor(e){super({name:"TooManyRequestsError",$fault:"client",...e}),Object.setPrototypeOf(this,be.prototype),this.error=e.error}}class Ce extends Ae{name="ValidationException";$fault="client";error;constructor(e){super({name:"ValidationException",$fault:"client",...e}),Object.setPrototypeOf(this,Ce.prototype),this.error=e.error}}const Te="accessKeyId",Oe="accessToken",De="client",ze="clientId",Fe="codeVerifier",je="error",qe="expiresIn",Ue="grantType",$e="http",Me="httpError",Ve="idToken",He="jsonName",Ne="message",Be="refreshToken",Ke="redirectUri",Le="smithy.ts.sdk.synthetic.com.amazonaws.signin",Ge="secretAccessKey",Je="sessionToken",Qe="tokenType",We="com.amazonaws.signin",Xe=xe.O.for(Le);var Ye=[-3,Le,"SigninServiceException",0,[],[]];Xe.registerError(Ye,Ae);const Ze=xe.O.for(We);var _e=[-3,We,"AccessDeniedException",{[je]:De},[je,Ne],[0,0],2];Ze.registerError(_e,ye);var et=[-3,We,"InternalServerException",{[je]:"server",[Me]:500},[je,Ne],[0,0],2];Ze.registerError(et,Ee);var tt=[-3,We,"TooManyRequestsError",{[je]:De,[Me]:429},[je,Ne],[0,0],2];Ze.registerError(tt,be);var nt=[-3,We,"ValidationException",{[je]:De,[Me]:400},[je,Ne],[0,0],2];Ze.registerError(nt,Ce);const st=[Xe,Ze];var it=[0,We,"RefreshToken",8,0],ot=[3,We,"AccessToken",8,[Te,Ge,Je],[[0,{[He]:Te}],[0,{[He]:Ge}],[0,{[He]:Je}]],3],rt=[3,We,"CreateOAuth2TokenRequest",0,["tokenInput"],[[()=>at,16]],1],at=[3,We,"CreateOAuth2TokenRequestBody",0,[ze,Ue,"code",Ke,Fe,Be],[[0,{[He]:ze}],[0,{[He]:Ue}],0,[0,{[He]:Ke}],[0,{[He]:Fe}],[()=>it,{[He]:Be}]],2],ct=[3,We,"CreateOAuth2TokenResponse",0,["tokenOutput"],[[()=>ut,16]],1],ut=[3,We,"CreateOAuth2TokenResponseBody",0,[Oe,Qe,qe,Be,Ve],[[()=>ot,{[He]:Oe}],[0,{[He]:Qe}],[1,{[He]:qe}],[()=>it,{[He]:Be}],[0,{[He]:Ve}]],4],pt=[9,We,"CreateOAuth2Token",{[$e]:["POST","/v1/token",200]},()=>rt,()=>ct];const ht=e=>{(0,C.I)(process.version);const t=(0,O.I)(e),n=()=>t().then(T.l),s=(e=>({apiVersion:"2023-01-01",base64Decoder:e?.base64Decoder??G.E,base64Encoder:e?.base64Encoder??J.n,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??ke,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??k,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:e=>e.getIdentityProvider("aws.auth#sigv4"),signer:new H.f2},{schemeId:"smithy.api#noAuth",identityProvider:e=>e.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new B.m}],logger:e?.logger??new K.N,protocol:e?.protocol??N.Y,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.signin",errorTypeRegistries:st,version:"2023-01-01",serviceTarget:"Signin"},serviceId:e?.serviceId??"Signin",urlParser:e?.urlParser??L.D,utf8Decoder:e?.utf8Decoder??Q.a,utf8Encoder:e?.utf8Encoder??W.P}))(e);(0,A.I)(process.version);const i={profile:e?.profile,logger:s.logger};return{...s,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??(0,D.Z)(b.$,i),bodyLengthChecker:e?.bodyLengthChecker??U.n,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,y.pf)({serviceId:s.serviceId,clientVersion:I.rE}),maxAttempts:e?.maxAttempts??(0,D.Z)(m.qs,e),region:e?.region??(0,D.Z)(z.GG,{...z.zH,...i}),requestHandler:M.$.create(e?.requestHandler??n),retryMode:e?.retryMode??(0,D.Z)({...m.kN,default:async()=>(await n()).retryMode||q.L0},e),sha256:e?.sha256??$.V.bind(null,"sha256"),streamCollector:e?.streamCollector??V.k,useDualstackEndpoint:e?.useDualstackEndpoint??(0,D.Z)(F.e$,i),useFipsEndpoint:e?.useFipsEndpoint??(0,D.Z)(j.Ko,i),userAgentAppId:e?.userAgentAppId??(0,D.Z)(E.hV,i)}};var gt=n(135),dt=n(136),lt=n(137);class mt extends h.K{config;constructor(...[e]){const t=ht(e||{});super(t),this.initConfig=t;const n=(h=t,Object.assign(h,{useDualstackEndpoint:h.useDualstackEndpoint??!1,useFipsEndpoint:h.useFipsEndpoint??!1,defaultSigningName:"signin"}));var h;const P=(0,s.D)(n),k=(0,m.$z)(P),x=(0,g.T)(k),I=(0,i.OV)(x),A=((e,t)=>{const n=Object.assign((0,gt.R)(e),(0,dt.xA)(e),(0,lt.e)(e),(e=>{const t=e.httpAuthSchemes;let n=e.httpAuthSchemeProvider,s=e.credentials;return{setHttpAuthScheme(e){const n=t.findIndex(t=>t.schemeId===e.schemeId);-1===n?t.push(e):t.splice(n,1,e)},httpAuthSchemes:()=>t,setHttpAuthSchemeProvider(e){n=e},httpAuthSchemeProvider:()=>n,setCredentials(e){s=e},credentials:()=>s}})(e));return t.forEach(e=>e.configure(n)),Object.assign(e,(0,gt.$)(n),(0,dt.uv)(n),(0,lt.j)(n),{httpAuthSchemes:(s=n).httpAuthSchemes(),httpAuthSchemeProvider:s.httpAuthSchemeProvider(),credentials:s.credentials()});var s})((e=>{const t=(0,S.h)(e);return Object.assign(t,{authSchemePreference:(0,R.t)(e.authSchemePreference??[])})})((0,d.Co)(I)),e?.extensions||[]);this.config=A,this.middlewareStack.use((0,f.wq)(this.config)),this.middlewareStack.use((0,o.sM)(this.config)),this.middlewareStack.use((0,v.ey)(this.config)),this.middlewareStack.use((0,l.vK)(this.config)),this.middlewareStack.use((0,i.TC)(this.config)),this.middlewareStack.use((0,r.Y7)(this.config)),this.middlewareStack.use((0,a.n)(this.config)),this.middlewareStack.use((0,c.w)(this.config,{httpAuthSchemeParametersProvider:w,identityProviderConfigProvider:async e=>new u.h({"aws.auth#sigv4":e.credentials})})),this.middlewareStack.use((0,p.l)(this.config))}destroy(){super.destroy()}}var vt=n(138);class ft extends(vt.u.classBuilder().ep({...x,IsControlPlane:{type:"staticContextParams",value:!1}}).m(function(e,t,n,s){return[(0,d.rD)(n,e.getEndpointParameterInstructions())]}).s("Signin","CreateOAuth2Token",{}).n("SigninClient","CreateOAuth2TokenCommand").sc(pt).build()){}}};
@@ -0,0 +1,2 @@
1
+ #!/usr/bin/env node
2
+ "use strict";exports.id=843,exports.ids=[843],exports.modules={839(e,o,s){s.d(o,{fromSSO:()=>$});var t=s(57),n=s(840),r=s(56),i=s(62),a=s(60),c=s(61);const l=e=>Object.entries(e).filter(([e])=>e.startsWith(a.I.SSO_SESSION+c.Q)).reduce((e,[o,s])=>({...e,[o.substring(o.indexOf(c.Q)+1)]:s}),{});var g=s(64),f=s(65);const w=()=>({}),h=async(e={})=>(0,f.TA)(e.configFilepath??(0,i.g)()).then(g.A).then(l).catch(w);var p=s(87),d=s(54);class u extends d.m{name="TokenProviderError";constructor(e,o=!0){super(e,o),Object.setPrototypeOf(this,u.prototype)}}var S=s(841);const C="To refresh this SSO session run 'aws sso login' with the corresponding profile.",y=async(e,o,t={},n)=>{const{CreateTokenCommand:r}=await Promise.all([s.e(350),s.e(485)]).then(s.bind(s,859)),i=await(async(e,o={},t)=>{const{SSOOIDCClient:n}=await Promise.all([s.e(350),s.e(485)]).then(s.bind(s,859)),r=e=>o.clientConfig?.[e]??o.parentClientConfig?.[e]??t?.[e];return new n(Object.assign({},o.clientConfig??{},{region:e??o.clientConfig?.region,logger:r("logger"),userAgentAppId:r("userAgentAppId")}))})(o,t,n);return i.send(new r({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))},k=e=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new u(`Token is expired. ${C}`,!1)},m=(e,o,s=!1)=>{if(void 0===o)throw new u(`Value not present for '${e}' in SSO Token${s?". Cannot refresh":""}. ${C}`,!1)};var _=s(842),O=s(106);const{writeFile:x}=O.promises,T=new Date(0),A=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");const s=await(0,n.Y)(e),r=(0,t.Bz)({profile:e.profile??o?.profile}),i=s[r];if(!i)throw new u(`Profile '${r}' could not be found in shared credentials file.`,!1);if(!i.sso_session)throw new u(`Profile '${r}' is missing required property 'sso_session'.`);const a=i.sso_session,c=(await h(e))[a];if(!c)throw new u(`Sso session '${a}' could not be found in shared credentials file.`,!1);for(const e of["sso_start_url","sso_region"])if(!c[e])throw new u(`Sso session '${a}' is missing required property '${e}'.`,!1);c.sso_start_url;const l=c.sso_region;let g;try{g=await(0,S.v)(a)}catch(e){throw new u(`The SSO session token associated with profile=${r} was not found or is invalid. ${C}`,!1)}m("accessToken",g.accessToken),m("expiresAt",g.expiresAt);const{accessToken:f,expiresAt:w}=g,p={token:f,expiration:new Date(w)};if(p.expiration.getTime()-Date.now()>3e5)return p;if(Date.now()-T.getTime()<3e4)return k(p),p;m("clientId",g.clientId,!0),m("clientSecret",g.clientSecret,!0),m("refreshToken",g.refreshToken,!0);try{T.setTime(Date.now());const s=await y(g,l,e,o);m("accessToken",s.accessToken),m("expiresIn",s.expiresIn);const t=new Date(Date.now()+1e3*s.expiresIn);try{await((e,o)=>{const s=(0,_.C)(e),t=JSON.stringify(o,null,2);return x(s,t)})(a,{...g,accessToken:s.accessToken,expiresAt:t.toISOString(),refreshToken:s.refreshToken})}catch(e){}return{token:s.accessToken,expiration:t}}catch(e){return k(p),p}},I=!1,N=async({ssoStartUrl:e,ssoSession:o,ssoAccountId:t,ssoRegion:n,ssoRoleName:i,ssoClient:a,clientConfig:c,parentClientConfig:l,callerClientConfig:g,profile:f,filepath:w,configFilepath:h,ignoreCache:d,logger:u})=>{let C;const y="To refresh this SSO session run aws sso login with the corresponding profile.";if(o)try{const e=await A({profile:f,filepath:w,configFilepath:h,ignoreCache:d,clientConfig:c,parentClientConfig:l,logger:u})({callerClientConfig:g});C={accessToken:e.token,expiresAt:new Date(e.expiration).toISOString()}}catch(e){throw new r.C(e.message,{tryNextLink:I,logger:u})}else try{C=await(0,S.v)(e)}catch(e){throw new r.C(`The SSO session associated with this profile is invalid. ${y}`,{tryNextLink:I,logger:u})}if(new Date(C.expiresAt).getTime()-Date.now()<=0)throw new r.C(`The SSO session associated with this profile has expired. ${y}`,{tryNextLink:I,logger:u});const{accessToken:k}=C,{SSOClient:m,GetRoleCredentialsCommand:_}=await Promise.all([s.e(350),s.e(890)]).then(s.bind(s,852)),O=a||new m(Object.assign({},c??{},{logger:c?.logger??g?.logger??l?.logger,region:c?.region??n,userAgentAppId:c?.userAgentAppId??g?.userAgentAppId??l?.userAgentAppId}));let x;try{x=await O.send(new _({accountId:t,roleName:i,accessToken:k}))}catch(e){throw new r.C(e,{tryNextLink:I,logger:u})}const{roleCredentials:{accessKeyId:T,secretAccessKey:N,sessionToken:$,expiration:v,credentialScope:D,accountId:R}={}}=x;if(!(T&&N&&$&&v))throw new r.C("SSO returns an invalid temporary credential.",{tryNextLink:I,logger:u});const L={accessKeyId:T,secretAccessKey:N,sessionToken:$,expiration:new Date(v),...D&&{credentialScope:D},...R&&{accountId:R}};return o?(0,p.g)(L,"CREDENTIALS_SSO","s"):(0,p.g)(L,"CREDENTIALS_SSO_LEGACY","u"),L},$=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");const{ssoStartUrl:s,ssoAccountId:i,ssoRegion:a,ssoRoleName:c,ssoSession:l}=e,{ssoClient:g}=e,f=(0,t.Bz)({profile:e.profile??o?.profile});if(s||i||a||c||l){if(s&&i&&a&&c)return N({ssoStartUrl:s,ssoSession:l,ssoAccountId:i,ssoRegion:a,ssoRoleName:c,ssoClient:g,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:f,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger});throw new r.C('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger})}{const o=(await(0,n.Y)(e))[f];if(!o)throw new r.C(`Profile ${f} was not found.`,{logger:e.logger});if(!(w=o)||"string"!=typeof w.sso_start_url&&"string"!=typeof w.sso_account_id&&"string"!=typeof w.sso_session&&"string"!=typeof w.sso_region&&"string"!=typeof w.sso_role_name)throw new r.C(`Profile ${f} is not configured with SSO credentials.`,{logger:e.logger});if(o?.sso_session){const t=(await h(e))[o.sso_session],n=` configurations in profile ${f} and sso-session ${o.sso_session}`;if(a&&a!==t.sso_region)throw new r.C("Conflicting SSO region"+n,{tryNextLink:!1,logger:e.logger});if(s&&s!==t.sso_start_url)throw new r.C("Conflicting SSO start_url"+n,{tryNextLink:!1,logger:e.logger});o.sso_region=t.sso_region,o.sso_start_url=t.sso_start_url}const{sso_start_url:t,sso_account_id:i,sso_region:c,sso_role_name:l,sso_session:p}=((e,o)=>{const{sso_start_url:s,sso_account_id:t,sso_region:n,sso_role_name:i}=e;if(!(s&&t&&n&&i))throw new r.C(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}\nReference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:o});return e})(o,e.logger);return N({ssoStartUrl:t,ssoSession:p,ssoAccountId:i,ssoRegion:c,ssoRoleName:l,ssoClient:g,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:f,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}var w}},842(e,o,s){s.d(o,{C:()=>i});var t=s(20),n=s(59),r=s(63);const i=e=>{const o=(0,t.createHash)("sha1").update(e).digest("hex");return(0,n.join)((0,r.R)(),".aws","sso","cache",`${o}.json`)}},841(e,o,s){s.d(o,{a:()=>r,v:()=>i});var t=s(28),n=s(842);const r={},i=async e=>{if(r[e])return r[e];const o=(0,n.C)(e),s=await(0,t.readFile)(o,"utf8");return JSON.parse(s)}}};
package/dist/876.index.js CHANGED
@@ -1,2 +1,2 @@
1
1
  #!/usr/bin/env node
2
- "use strict";exports.id=876,exports.ids=[876],exports.modules={836(e,r,t){t.d(r,{fromProcess:()=>f});var o=t(832),n=t(62),s=t(61),c=t(837),i=t(838),a=t(18),d=t(80);const l=async(e,r,t)=>{const o=r[e];if(!r[e])throw new s.C(`Profile ${e} could not be found in shared credentials file.`,{logger:t});{const n=o.credential_process;if(void 0===n)throw new s.C(`Profile ${e} did not contain credential_process.`,{logger:t});{const o=(0,a.promisify)(c.Z?.getTokenRecord?.().exec??i.exec);try{const{stdout:t}=await o(n);let s;try{s=JSON.parse(t.trim())}catch{throw Error(`Profile ${e} credential_process returned invalid JSON.`)}return((e,r,t)=>{if(1!==r.Version)throw Error(`Profile ${e} credential_process did not return Version 1.`);if(void 0===r.AccessKeyId||void 0===r.SecretAccessKey)throw Error(`Profile ${e} credential_process returned invalid credentials.`);if(r.Expiration){const t=new Date;if(new Date(r.Expiration)<t)throw Error(`Profile ${e} credential_process returned expired credentials.`)}let o=r.AccountId;!o&&t?.[e]?.aws_account_id&&(o=t[e].aws_account_id);const n={accessKeyId:r.AccessKeyId,secretAccessKey:r.SecretAccessKey,...r.SessionToken&&{sessionToken:r.SessionToken},...r.Expiration&&{expiration:new Date(r.Expiration)},...r.CredentialScope&&{credentialScope:r.CredentialScope},...o&&{accountId:o}};return(0,d.g)(n,"CREDENTIALS_PROCESS","w"),n})(e,s,r)}catch(e){throw new s.C(e.message,{logger:t})}}}},f=(e={})=>async({callerClientConfig:r}={})=>{e.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");const t=await(0,o.Y)(e);return l((0,n.Bz)({profile:e.profile??r?.profile}),t,e.logger)}},837(e,r,t){t.d(r,{Z:()=>s});var o=t(833),n=t(69);const s={getFileRecord:()=>n.Jj,interceptFile(e,r){n.Jj[e]=Promise.resolve(r)},getTokenRecord:()=>o.a,interceptToken(e,r){o.a[e]=r}}},834(e,r,t){t.d(r,{C:()=>c});var o=t(5),n=t(3),s=t(67);const c=e=>{const r=(0,o.createHash)("sha1").update(e).digest("hex");return(0,n.join)((0,s.R)(),".aws","sso","cache",`${r}.json`)}},833(e,r,t){t.d(r,{a:()=>s,v:()=>c});var o=t(27),n=t(834);const s={},c=async e=>{if(s[e])return s[e];const r=(0,n.C)(e),t=await(0,o.readFile)(r,"utf8");return JSON.parse(t)}}};
2
+ "use strict";exports.id=876,exports.ids=[876],exports.modules={844(e,r,t){t.d(r,{fromProcess:()=>f});var o=t(840),n=t(57),s=t(845),c=t(56),i=t(846),a=t(18),d=t(87);const l=async(e,r,t)=>{const o=r[e];if(!r[e])throw new c.C(`Profile ${e} could not be found in shared credentials file.`,{logger:t});{const n=o.credential_process;if(void 0===n)throw new c.C(`Profile ${e} did not contain credential_process.`,{logger:t});{const o=(0,a.promisify)(s.Z?.getTokenRecord?.().exec??i.exec);try{const{stdout:t}=await o(n);let s;try{s=JSON.parse(t.trim())}catch{throw Error(`Profile ${e} credential_process returned invalid JSON.`)}return((e,r,t)=>{if(1!==r.Version)throw Error(`Profile ${e} credential_process did not return Version 1.`);if(void 0===r.AccessKeyId||void 0===r.SecretAccessKey)throw Error(`Profile ${e} credential_process returned invalid credentials.`);if(r.Expiration){const t=new Date;if(new Date(r.Expiration)<t)throw Error(`Profile ${e} credential_process returned expired credentials.`)}let o=r.AccountId;!o&&t?.[e]?.aws_account_id&&(o=t[e].aws_account_id);const n={accessKeyId:r.AccessKeyId,secretAccessKey:r.SecretAccessKey,...r.SessionToken&&{sessionToken:r.SessionToken},...r.Expiration&&{expiration:new Date(r.Expiration)},...r.CredentialScope&&{credentialScope:r.CredentialScope},...o&&{accountId:o}};return(0,d.g)(n,"CREDENTIALS_PROCESS","w"),n})(e,s,r)}catch(e){throw new c.C(e.message,{logger:t})}}}},f=(e={})=>async({callerClientConfig:r}={})=>{e.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");const t=await(0,o.Y)(e);return l((0,n.Bz)({profile:e.profile??r?.profile}),t,e.logger)}},845(e,r,t){t.d(r,{Z:()=>s});var o=t(841),n=t(65);const s={getFileRecord:()=>n.Jj,interceptFile(e,r){n.Jj[e]=Promise.resolve(r)},getTokenRecord:()=>o.a,interceptToken(e,r){o.a[e]=r}}},842(e,r,t){t.d(r,{C:()=>c});var o=t(20),n=t(59),s=t(63);const c=e=>{const r=(0,o.createHash)("sha1").update(e).digest("hex");return(0,n.join)((0,s.R)(),".aws","sso","cache",`${r}.json`)}},841(e,r,t){t.d(r,{a:()=>s,v:()=>c});var o=t(28),n=t(842);const s={},c=async e=>{if(s[e])return s[e];const r=(0,n.C)(e),t=await(0,o.readFile)(r,"utf8");return JSON.parse(t)}}};
@@ -0,0 +1,2 @@
1
+ #!/usr/bin/env node
2
+ "use strict";exports.id=890,exports.ids=[890],exports.modules={852(e,t,s){s.d(t,{GetRoleCredentialsCommand:()=>z,SSOClient:()=>tt});var n=s(138),o=s(51);const i={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var r=s(117),a=s(121);class c extends a.T{constructor(e){super(e),Object.setPrototypeOf(this,c.prototype)}}class u extends c{name="InvalidRequestException";$fault="client";constructor(e){super({name:"InvalidRequestException",$fault:"client",...e}),Object.setPrototypeOf(this,u.prototype)}}class l extends c{name="ResourceNotFoundException";$fault="client";constructor(e){super({name:"ResourceNotFoundException",$fault:"client",...e}),Object.setPrototypeOf(this,l.prototype)}}class p extends c{name="TooManyRequestsException";$fault="client";constructor(e){super({name:"TooManyRequestsException",$fault:"client",...e}),Object.setPrototypeOf(this,p.prototype)}}class d extends c{name="UnauthorizedException";$fault="client";constructor(e){super({name:"UnauthorizedException",$fault:"client",...e}),Object.setPrototypeOf(this,d.prototype)}}const h="client",m="error",g="http",S="httpError",v="httpHeader",f="httpQuery",P="message",x="smithy.ts.sdk.synthetic.com.amazonaws.sso",R="com.amazonaws.sso",y=r.O.for(x);var E=[-3,x,"SSOServiceException",0,[],[]];y.registerError(E,c);const I=r.O.for(R);var b=[-3,R,"InvalidRequestException",{[m]:h,[S]:400},[P],[0]];I.registerError(b,u);var w=[-3,R,"ResourceNotFoundException",{[m]:h,[S]:404},[P],[0]];I.registerError(w,l);var A=[-3,R,"TooManyRequestsException",{[m]:h,[S]:429},[P],[0]];I.registerError(A,p);var k=[-3,R,"UnauthorizedException",{[m]:h,[S]:401},[P],[0]];I.registerError(k,d);const C=[y,I];var D=[0,R,"AccessTokenType",8,0],F=[0,R,"SecretAccessKeyType",8,0],O=[0,R,"SessionTokenType",8,0],T=[3,R,"GetRoleCredentialsRequest",0,["roleName","accountId","accessToken"],[[0,{[f]:"role_name"}],[0,{[f]:"account_id"}],[()=>D,{[v]:"x-amz-sso_bearer_token"}]],3],q=[3,R,"GetRoleCredentialsResponse",0,["roleCredentials"],[[()=>U,0]]],U=[3,R,"RoleCredentials",0,["accessKeyId","secretAccessKey","sessionToken","expiration"],[0,[()=>F,0],[()=>O,0],1]],j=[9,R,"GetRoleCredentials",{[g]:["GET","/federation/credentials",200]},()=>T,()=>q];class z extends(n.u.classBuilder().ep(i).m(function(e,t,s,n){return[(0,o.rD)(s,e.getEndpointParameterInstructions())]}).s("SWBPortalService","GetRoleCredentials",{}).n("SSOClient","GetRoleCredentialsCommand").sc(j).build()){}var G=s(36),$=s(32),M=s(38),N=s(34),H=s(35),_=s(43),K=s(42),B=s(46),V=s(47),W=s(49),L=s(70),Q=s(84),J=s(71),X=s(85),Y=s(86),Z=s(44),ee=s(69);const te=async(e,t,s)=>({operation:(0,Z.u)(t).operation,region:await(0,ee.t)(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()});const se=e=>{const t=[];if("GetRoleCredentials"===e.operation)t.push({schemeId:"smithy.api#noAuth"});else t.push(function(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:e.region},propertiesExtractor:(e,t)=>({signingProperties:{config:e,context:t}})}}(e));return t};var ne=s(853),oe=s(92),ie=s(93),re=s(96),ae=s(97),ce=s(100),ue=s(99),le=s(104),pe=s(52),de=s(103),he=s(101),me=s(102),ge=s(40),Se=s(105),ve=s(107),fe=s(108),Pe=s(109),xe=s(110),Re=s(854),ye=s(858),Ee=s(72),Ie=s(68),be=s(74),we=s(77),Ae=s(78),ke=s(79),Ce=s(129),De=s(132),Fe=s(133),Oe=s(130),Te=s(134);const qe="ref",Ue=-1,je=!0,ze="isSet",Ge="PartitionResult",$e="booleanEquals",Me="getAttr",Ne={[qe]:"Endpoint"},He={[qe]:Ge},_e={},Ke=[{[qe]:"Region"}],Be={conditions:[[ze,[Ne]],[ze,Ke],["aws.partition",Ke,Ge],[$e,[{[qe]:"UseFIPS"},je]],[$e,[{[qe]:"UseDualStack"},je]],[$e,[{fn:Me,argv:[He,"supportsDualStack"]},je]],[$e,[{fn:Me,argv:[He,"supportsFIPS"]},je]],["stringEquals",[{fn:Me,argv:[He,"name"]},"aws-us-gov"]]],results:[[Ue],[Ue,"Invalid Configuration: FIPS and custom endpoint are not supported"],[Ue,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[Ne,_e],["https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",_e],[Ue,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://portal.sso.{Region}.amazonaws.com",_e],["https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",_e],[Ue,"FIPS is enabled but this partition does not support FIPS"],["https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",_e],[Ue,"DualStack is enabled but this partition does not support DualStack"],["https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",_e],[Ue,"Invalid Configuration: Missing Region"]]},Ve=1e8,We=new Int32Array([-1,1,-1,0,13,3,1,4,Ve+12,2,5,Ve+12,3,8,6,4,7,Ve+11,5,Ve+9,Ve+10,4,11,9,6,10,Ve+8,7,Ve+6,Ve+7,5,12,Ve+5,6,Ve+4,Ve+5,3,Ve+1,14,4,Ve+2,Ve+3]),Le=Te.d.from(We,2,Be.conditions,Be.results),Qe=new De.k({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),Je=(e,t={})=>Qe.get(e,()=>(0,Fe.c)(Le,{endpointParams:e,logger:t.logger}));Oe.m.aws=Ce.U;const Xe=e=>{(0,ce.I)(process.version);const t=(0,le.I)(e),s=()=>t().then(ue.l),n=(e=>({apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??be.E,base64Encoder:e?.base64Encoder??we.n,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Je,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??se,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:e=>e.getIdentityProvider("aws.auth#sigv4"),signer:new xe.f2},{schemeId:"smithy.api#noAuth",identityProvider:e=>e.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new ye.m}],logger:e?.logger??new Ee.N,protocol:e?.protocol??Re.Y,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:C,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:e?.serviceId??"SSO",urlParser:e?.urlParser??Ie.D,utf8Decoder:e?.utf8Decoder??Ae.a,utf8Encoder:e?.utf8Encoder??ke.P}))(e);(0,oe.I)(process.version);const o={profile:e?.profile,logger:n.logger};return{...n,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??(0,pe.Z)(ae.$,o),bodyLengthChecker:e?.bodyLengthChecker??Se.n,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,ie.pf)({serviceId:n.serviceId,clientVersion:ne.rE}),maxAttempts:e?.maxAttempts??(0,pe.Z)(Q.qs,e),region:e?.region??(0,pe.Z)(de.GG,{...de.zH,...o}),requestHandler:fe.$.create(e?.requestHandler??s),retryMode:e?.retryMode??(0,pe.Z)({...Q.kN,default:async()=>(await s()).retryMode||ge.L0},e),sha256:e?.sha256??ve.V.bind(null,"sha256"),streamCollector:e?.streamCollector??Pe.k,useDualstackEndpoint:e?.useDualstackEndpoint??(0,pe.Z)(he.e$,o),useFipsEndpoint:e?.useFipsEndpoint??(0,pe.Z)(me.Ko,o),userAgentAppId:e?.userAgentAppId??(0,pe.Z)(re.hV,o)}};var Ye=s(135),Ze=s(136),et=s(137);class tt extends V.K{config;constructor(...[e]){const t=Xe(e||{});super(t),this.initConfig=t;const s=(n=t,Object.assign(n,{useDualstackEndpoint:n.useDualstackEndpoint??!1,useFipsEndpoint:n.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"}));var n;const i=(0,G.D)(s),r=(0,Q.$z)(i),a=(0,W.T)(r),c=(0,$.OV)(a),u=((e,t)=>{const s=Object.assign((0,Ye.R)(e),(0,Ze.xA)(e),(0,et.e)(e),(e=>{const t=e.httpAuthSchemes;let s=e.httpAuthSchemeProvider,n=e.credentials;return{setHttpAuthScheme(e){const s=t.findIndex(t=>t.schemeId===e.schemeId);-1===s?t.push(e):t.splice(s,1,e)},httpAuthSchemes:()=>t,setHttpAuthSchemeProvider(e){s=e},httpAuthSchemeProvider:()=>s,setCredentials(e){n=e},credentials:()=>n}})(e));return t.forEach(e=>e.configure(s)),Object.assign(e,(0,Ye.$)(s),(0,Ze.uv)(s),(0,et.j)(s),{httpAuthSchemes:(n=s).httpAuthSchemes(),httpAuthSchemeProvider:n.httpAuthSchemeProvider(),credentials:n.credentials()});var n})((e=>{const t=(0,Y.h)(e);return Object.assign(t,{authSchemePreference:(0,ee.t)(e.authSchemePreference??[])})})((0,o.Co)(c)),e?.extensions||[]);this.config=u,this.middlewareStack.use((0,X.wq)(this.config)),this.middlewareStack.use((0,M.sM)(this.config)),this.middlewareStack.use((0,J.ey)(this.config)),this.middlewareStack.use((0,L.vK)(this.config)),this.middlewareStack.use((0,$.TC)(this.config)),this.middlewareStack.use((0,N.Y7)(this.config)),this.middlewareStack.use((0,H.n)(this.config)),this.middlewareStack.use((0,_.w)(this.config,{httpAuthSchemeParametersProvider:te,identityProviderConfigProvider:async e=>new K.h({"aws.auth#sigv4":e.credentials})})),this.middlewareStack.use((0,B.l)(this.config))}destroy(){super.destroy()}}}};
package/dist/960.index.js CHANGED
@@ -1,2 +1,2 @@
1
1
  #!/usr/bin/env node
2
- "use strict";exports.id=960,exports.ids=[960],exports.modules={853(r,s,t){t.d(s,{fromEnv:()=>e.sF});var e=t(89)}};
2
+ "use strict";exports.id=960,exports.ids=[960],exports.modules={861(r,s,t){t.d(s,{fromEnv:()=>e.sF});var e=t(98)}};
package/dist/963.index.js CHANGED
@@ -1,2 +1,2 @@
1
1
  #!/usr/bin/env node
2
- "use strict";exports.id=963,exports.ids=[963],exports.modules={841(e,t,r){r.d(t,{fromHttp:()=>w});var o=r(80),n=r(99),a=r(61),s=r(28),i=r.n(s);var c=r(33),f=r(123),l=r(842);const w=(e={})=>{let t;e.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");const r=e.awsContainerCredentialsRelativeUri??process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI,s=e.awsContainerCredentialsFullUri??process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI,w=e.awsContainerAuthorizationToken??process.env.AWS_CONTAINER_AUTHORIZATION_TOKEN,u=e.awsContainerAuthorizationTokenFile??process.env.AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE,d="NoOpLogger"!==e.logger?.constructor?.name&&e.logger?.warn?e.logger.warn.bind(e.logger):console.warn;if(r&&s&&(d("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),d("awsContainerCredentialsFullUri will take precedence.")),w&&u&&(d("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),d("awsContainerAuthorizationToken will take precedence.")),s)t=s;else{if(!r)throw new a.C("No HTTP credential provider host provided.\nSet AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.",{logger:e.logger});t=`http://169.254.170.2${r}`}const p=new URL(t);((e,t)=>{if("https:"!==e.protocol&&"169.254.170.2"!==e.hostname&&"169.254.170.23"!==e.hostname&&"[fd00:ec2::23]"!==e.hostname){if(e.hostname.includes("[")){if("[::1]"===e.hostname||"[0000:0000:0000:0000:0000:0000:0000:0001]"===e.hostname)return}else{if("localhost"===e.hostname)return;const t=e.hostname.split("."),r=e=>{const t=parseInt(e,10);return 0<=t&&t<=255};if("127"===t[0]&&r(t[1])&&r(t[2])&&r(t[3])&&4===t.length)return}throw new a.C("URL not accepted. It must either be HTTPS or match one of the following:\n - loopback CIDR 127.0.0.0/8 or [::1/128]\n - ECS container host 169.254.170.2\n - EKS container host 169.254.170.23 or [fd00:ec2::23]",{logger:t})}})(p,e.logger);const h=n.$.create({requestTimeout:e.timeout??1e3,connectionTimeout:e.timeout??1e3});return y=async()=>{const t=function(e){return new c.K({protocol:e.protocol,hostname:e.hostname,port:Number(e.port),path:e.pathname,query:Array.from(e.searchParams.entries()).reduce((e,[t,r])=>(e[t]=r,e),{}),fragment:e.hash})}(p);w?t.headers.Authorization=w:u&&(t.headers.Authorization=(await i().readFile(u)).toString());try{return async function(e,t){const r=(0,l.c)(e.body),o=await r.transformToString();if(200===e.statusCode){const e=JSON.parse(o);if("string"!=typeof e.AccessKeyId||"string"!=typeof e.SecretAccessKey||"string"!=typeof e.Token||"string"!=typeof e.Expiration)throw new a.C("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:t});return{accessKeyId:e.AccessKeyId,secretAccessKey:e.SecretAccessKey,sessionToken:e.Token,expiration:(0,f.EI)(e.Expiration)}}if(e.statusCode>=400&&e.statusCode<500){let r={};try{r=JSON.parse(o)}catch(e){}throw Object.assign(new a.C(`Server responded with status: ${e.statusCode}`,{logger:t}),{Code:r.Code,Message:r.Message})}throw new a.C(`Server responded with status: ${e.statusCode}`,{logger:t})}((await h.handle(t)).response).then(e=>(0,o.g)(e,"CREDENTIALS_HTTP","z"))}catch(t){throw new a.C(String(t),{logger:e.logger})}},m=e.maxRetries??3,b=e.timeout??1e3,async()=>{for(let e=0;e<m;++e)try{return await y()}catch(e){await new Promise(e=>setTimeout(e,b))}return await y()};var y,m,b}},842(e,t,r){r.d(t,{c:()=>y});var o=r(100),n=r(84),a=r(8),s=r(112);const i=async e=>"function"==typeof Blob&&e instanceof Blob||"Blob"===e.constructor?.name?void 0!==Blob.prototype.arrayBuffer?new Uint8Array(await e.arrayBuffer()):async function(e){const t=await function(e){return new Promise((t,r)=>{const o=new FileReader;o.onloadend=()=>{if(2!==o.readyState)return r(new Error("Reader aborted too early"));const e=o.result??"",n=e.indexOf(","),a=n>-1?n+1:e.length;t(e.substring(a))},o.onabort=()=>r(new Error("Read aborted")),o.onerror=()=>r(o.error),o.readAsDataURL(e)})}(e),r=(0,s.E)(t);return new Uint8Array(r)}(e):async function(e){const t=[],r=e.getReader();let o=!1,n=0;for(;!o;){const{done:e,value:a}=await r.read();a&&(t.push(a),n+=a.length),o=e}const a=new Uint8Array(n);let s=0;for(const e of t)a.set(e,s),s+=e.length;return a}(e);var c=r(113),f=r(81),l=r(114);const w=e=>"function"==typeof ReadableStream&&(e?.constructor?.name===ReadableStream.name||e instanceof ReadableStream),u="The stream has already been transformed.",d=e=>{if(!p(e)&&!w(e)){throw new Error(`Unexpected stream implementation, expect Blob or ReadableStream, got ${e?.__proto__?.constructor?.name||e}`)}let t=!1;const r=async()=>{if(t)throw new Error(u);return t=!0,await i(e)};return Object.assign(e,{transformToByteArray:r,transformToString:async e=>{const t=await r();if("base64"===e)return(0,c.n)(t);if("hex"===e)return(0,f.n)(t);if(void 0===e||"utf8"===e||"utf-8"===e)return(0,l.P)(t);if("function"==typeof TextDecoder)return new TextDecoder(e).decode(t);throw new Error("TextDecoder is not available, please make sure polyfill is provided.")},transformToWebStream:()=>{if(t)throw new Error(u);if(t=!0,p(e))return(e=>{if("function"!=typeof e.stream)throw new Error("Cannot transform payload Blob to web stream. Please make sure the Blob.stream() is polyfilled.\nIf you are using React Native, this API is not yet supported, see: https://react-native.canny.io/feature-requests/p/fetch-streaming-body");return e.stream()})(e);if(w(e))return e;throw new Error(`Cannot transform payload to web stream, got ${e}`)}})},p=e=>"function"==typeof Blob&&e instanceof Blob,h="The stream has already been transformed.",y=e=>{if(!(e instanceof a.Readable))try{return d(e)}catch(t){throw new Error(`Unexpected stream implementation, expect Stream.Readable instance, got ${e?.__proto__?.constructor?.name||e}`)}let t=!1;const r=async()=>{if(t)throw new Error(h);return t=!0,await(0,o.k)(e)};return Object.assign(e,{transformToByteArray:r,transformToString:async e=>{const t=await r();if(void 0===e||Buffer.isEncoding(e))return(0,n.Q)(t.buffer,t.byteOffset,t.byteLength).toString(e);return new TextDecoder(e).decode(t)},transformToWebStream:()=>{if(t)throw new Error(h);if(null!==e.readableFlowing)throw new Error("The stream has been consumed by other callbacks.");if("function"!=typeof a.Readable.toWeb)throw new Error("Readable.toWeb() is not supported. Please ensure a polyfill is available.");return t=!0,a.Readable.toWeb(e)}})}}};
2
+ "use strict";exports.id=963,exports.ids=[963],exports.modules={849(e,t,r){r.d(t,{fromHttp:()=>u});var n=r(87),o=r(56),a=r(108),s=r(28),i=r.n(s);var c=r(33),f=r(83),l=r(850);const u=(e={})=>{let t;e.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");const r=e.awsContainerCredentialsRelativeUri??process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI,s=e.awsContainerCredentialsFullUri??process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI,u=e.awsContainerAuthorizationToken??process.env.AWS_CONTAINER_AUTHORIZATION_TOKEN,w=e.awsContainerAuthorizationTokenFile??process.env.AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE,y="NoOpLogger"!==e.logger?.constructor?.name&&e.logger?.warn?e.logger.warn.bind(e.logger):console.warn;if(r&&s&&(y("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),y("awsContainerCredentialsFullUri will take precedence.")),u&&w&&(y("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),y("awsContainerAuthorizationToken will take precedence.")),s)t=s;else{if(!r)throw new o.C("No HTTP credential provider host provided.\nSet AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.",{logger:e.logger});t=`http://169.254.170.2${r}`}const d=new URL(t);((e,t)=>{if("https:"!==e.protocol&&"169.254.170.2"!==e.hostname&&"169.254.170.23"!==e.hostname&&"[fd00:ec2::23]"!==e.hostname){if(e.hostname.includes("[")){if("[::1]"===e.hostname||"[0000:0000:0000:0000:0000:0000:0000:0001]"===e.hostname)return}else{if("localhost"===e.hostname)return;const t=e.hostname.split("."),r=e=>{const t=parseInt(e,10);return 0<=t&&t<=255};if("127"===t[0]&&r(t[1])&&r(t[2])&&r(t[3])&&4===t.length)return}throw new o.C("URL not accepted. It must either be HTTPS or match one of the following:\n - loopback CIDR 127.0.0.0/8 or [::1/128]\n - ECS container host 169.254.170.2\n - EKS container host 169.254.170.23 or [fd00:ec2::23]",{logger:t})}})(d,e.logger);const p=a.$.create({connectionTimeout:e.timeout??1e3}),h=e.timeout??1e3,m=(b=async()=>{const t=function(e){return new c.K({protocol:e.protocol,hostname:e.hostname,port:Number(e.port),path:e.pathname,query:Array.from(e.searchParams.entries()).reduce((e,[t,r])=>(e[t]=r,e),{}),fragment:e.hash})}(d);u?t.headers.Authorization=u:w&&(t.headers.Authorization=(await i().readFile(w)).toString());try{return async function(e,t){const r=(0,l.c)(e.body),n=await r.transformToString();if(200===e.statusCode){const e=JSON.parse(n);if("string"!=typeof e.AccessKeyId||"string"!=typeof e.SecretAccessKey||"string"!=typeof e.Token||"string"!=typeof e.Expiration)throw new o.C("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:t});return{accessKeyId:e.AccessKeyId,secretAccessKey:e.SecretAccessKey,sessionToken:e.Token,expiration:(0,f.EI)(e.Expiration)}}if(e.statusCode>=400&&e.statusCode<500){let r={};try{r=JSON.parse(n)}catch(e){}throw Object.assign(new o.C(`Server responded with status: ${e.statusCode}`,{logger:t}),{Code:r.Code,Message:r.Message})}throw new o.C(`Server responded with status: ${e.statusCode}`,{logger:t})}((await p.handle(t,{requestTimeout:h})).response).then(e=>(0,n.g)(e,"CREDENTIALS_HTTP","z"))}catch(t){throw new o.C(String(t),{logger:e.logger})}},g=e.maxRetries??3,T=e.timeout??1e3,async()=>{for(let e=0;e<g;++e)try{return await b()}catch(e){await new Promise(e=>setTimeout(e,T))}return await b()});var b,g,T;return async()=>{try{return await m()}finally{p.destroy?.()}}}},850(e,t,r){r.d(t,{c:()=>b});var n=r(16),o=r(75);const a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",s=Object.entries(a).reduce((e,[t,r])=>(e[r]=Number(t),e),{}),i=a.split("");function c(e){let t;t="string"==typeof e?(e=>(new TextEncoder).encode(e))(e):e;const r="object"==typeof t&&"number"==typeof t.length,n="object"==typeof t&&"number"==typeof t.byteOffset&&"number"==typeof t.byteLength;if(!r&&!n)throw new Error("@smithy/util-base64: toBase64 encoder function only accepts string | Uint8Array.");let o="";for(let e=0;e<t.length;e+=3){let r=0,n=0;for(let o=e,a=Math.min(e+3,t.length);o<a;o++)r|=t[o]<<8*(a-o-1),n+=8;const a=Math.ceil(n/6);r<<=6*a-n;for(let e=1;e<=a;e++){const t=6*(a-e);o+=i[(r&63<<t)>>t]}o+="==".slice(0,4-a)}return o}var f=r(89);const l=async e=>"function"==typeof Blob&&e instanceof Blob||"Blob"===e.constructor?.name?void 0!==Blob.prototype.arrayBuffer?new Uint8Array(await e.arrayBuffer()):async function(e){const t=await function(e){return new Promise((t,r)=>{const n=new FileReader;n.onloadend=()=>{if(2!==n.readyState)return r(new Error("Reader aborted too early"));const e=n.result??"",o=e.indexOf(","),a=o>-1?o+1:e.length;t(e.substring(a))},n.onabort=()=>r(new Error("Read aborted")),n.onerror=()=>r(n.error),n.readAsDataURL(e)})}(e),r=(e=>{let t=e.length/4*3;"=="===e.slice(-2)?t-=2:"="===e.slice(-1)&&t--;const r=new ArrayBuffer(t),n=new DataView(r);for(let t=0;t<e.length;t+=4){let r=0,o=0;for(let n=t,a=t+3;n<=a;n++)if("="!==e[n]){if(!(e[n]in s))throw new TypeError(`Invalid character ${e[n]} in base64 string.`);r|=s[e[n]]<<6*(a-n),o+=6}else r>>=6;const a=t/4*3;r>>=o%8;const i=Math.floor(o/8);for(let e=0;e<i;e++){const t=8*(i-e-1);n.setUint8(a+e,(r&255<<t)>>t)}}return new Uint8Array(r)})(t);return new Uint8Array(r)}(e):async function(e){const t=[],r=e.getReader();let n=!1,o=0;for(;!n;){const{done:e,value:a}=await r.read();a&&(t.push(a),o+=a.length),n=e}const a=new Uint8Array(o);let s=0;for(const e of t)a.set(e,s),s+=e.length;return a}(e);const u=e=>"function"==typeof ReadableStream&&(e?.constructor?.name===ReadableStream.name||e instanceof ReadableStream),w="The stream has already been transformed.",y=e=>{if(!d(e)&&!u(e)){throw new Error(`Unexpected stream implementation, expect Blob or ReadableStream, got ${e?.__proto__?.constructor?.name||e}`)}let t=!1;const r=async()=>{if(t)throw new Error(w);return t=!0,await l(e)};return Object.assign(e,{transformToByteArray:r,transformToString:async e=>{const t=await r();if("base64"===e)return c(t);if("hex"===e)return(0,f.n)(t);if(void 0===e||"utf8"===e||"utf-8"===e)return(e=>{if("string"==typeof e)return e;if("object"!=typeof e||"number"!=typeof e.byteOffset||"number"!=typeof e.byteLength)throw new Error("@smithy/util-utf8: toUtf8 encoder function only accepts string | Uint8Array.");return new TextDecoder("utf-8").decode(e)})(t);if("function"==typeof TextDecoder)return new TextDecoder(e).decode(t);throw new Error("TextDecoder is not available, please make sure polyfill is provided.")},transformToWebStream:()=>{if(t)throw new Error(w);if(t=!0,d(e))return(e=>{if("function"!=typeof e.stream)throw new Error("Cannot transform payload Blob to web stream. Please make sure the Blob.stream() is polyfilled.\nIf you are using React Native, this API is not yet supported, see: https://react-native.canny.io/feature-requests/p/fetch-streaming-body");return e.stream()})(e);if(u(e))return e;throw new Error(`Cannot transform payload to web stream, got ${e}`)}})},d=e=>"function"==typeof Blob&&e instanceof Blob;class p extends n.Writable{bufferedBytes=[];_write(e,t,r){this.bufferedBytes.push(e),r()}}const h=e=>(e=>"function"==typeof ReadableStream&&e instanceof ReadableStream)(e)?async function(e){const t=[],r=e.getReader();let n=!1,o=0;for(;!n;){const{done:e,value:a}=await r.read();a&&(t.push(a),o+=a.length),n=e}const a=new Uint8Array(o);let s=0;for(const e of t)a.set(e,s),s+=e.length;return a}(e):new Promise((t,r)=>{const n=new p;e.pipe(n),e.on("error",e=>{n.end(),r(e)}),n.on("error",r),n.on("finish",function(){const e=new Uint8Array(Buffer.concat(this.bufferedBytes));t(e)})}),m="The stream has already been transformed.",b=e=>{if(!(e instanceof n.Readable))try{return y(e)}catch(t){throw new Error(`Unexpected stream implementation, expect Stream.Readable instance, got ${e?.__proto__?.constructor?.name||e}`)}let t=!1;const r=async()=>{if(t)throw new Error(m);return t=!0,await h(e)};return Object.assign(e,{transformToByteArray:r,transformToString:async e=>{const t=await r();if(void 0===e||Buffer.isEncoding(e))return(0,o.Q)(t.buffer,t.byteOffset,t.byteLength).toString(e);return new TextDecoder(e).decode(t)},transformToWebStream:()=>{if(t)throw new Error(m);if(null!==e.readableFlowing)throw new Error("The stream has been consumed by other callbacks.");if("function"!=typeof n.Readable.toWeb)throw new Error("Readable.toWeb() is not supported. Please ensure a polyfill is available.");return t=!0,n.Readable.toWeb(e)}})}}};