alchemylab-opencode 2.0.3 → 2.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/{anthropic-ND6UHXWL.js → anthropic-FVULF7C3.js} +1 -1
- package/dist/{app-runtime-ZWWQ4JTM.js → app-runtime-LDQWNGWP.js} +1 -1
- package/dist/{chunk-IQSFXWDQ.js → chunk-2JE3QYG6.js} +1 -1
- package/dist/{chunk-6MAPFAXY.js → chunk-4GJE6OMN.js} +1 -1
- package/dist/{chunk-AUB2TEYJ.js → chunk-5BLZCAU6.js} +1 -1
- package/dist/{chunk-XSKT4AXR.js → chunk-B74WSFN4.js} +3 -3
- package/dist/{chunk-2XWBNI3L.js → chunk-DADVNQTM.js} +80 -80
- package/dist/{chunk-RIA6SDOY.js → chunk-DWEYXIQI.js} +3 -3
- package/dist/{chunk-L3CE2Y3L.js → chunk-FOHYZ7MJ.js} +1 -1
- package/dist/{chunk-WL33KE3H.js → chunk-G7PFO5HG.js} +3 -3
- package/dist/{chunk-DGJQZN2Q.js → chunk-NGT6LCW6.js} +1 -1
- package/dist/{chunk-DZ6G4VSD.js → chunk-OT2YNR56.js} +1 -1
- package/dist/{chunk-WZ4237YY.js → chunk-OUVSKG2H.js} +1 -1
- package/dist/{chunk-F5PY52BY.js → chunk-UPEPL4I2.js} +1 -1
- package/dist/{code-mode-H3HRSD24.js → code-mode-YYOGD36U.js} +1 -1
- package/dist/{dist-KGNO5AP7.js → dist-KM5HCPZX.js} +1 -1
- package/dist/{dist-WZJ3LNRG.js → dist-YUH4RKR5.js} +1 -1
- package/dist/{dist-es-RZ25XEH6.js → dist-es-6PLFRCS4.js} +1 -1
- package/dist/{dist-es-EVVG3KDV.js → dist-es-G5UIJOU7.js} +2 -2
- package/dist/{dist-es-DHCTZZ2E.js → dist-es-HYIIGUNX.js} +1 -1
- package/dist/{dist-es-CH2YKBKX.js → dist-es-LSR2QCFZ.js} +1 -1
- package/dist/{dist-es-HRCONNGK.js → dist-es-W5GYOX6F.js} +1 -1
- package/dist/run.js +1 -1
- package/dist/serve.js +1 -1
- package/dist/{server-XRUYBM7W.js → server-LVIHYOCY.js} +3 -3
- package/dist/{session-4BXV4JJH.js → session-6OPJNJMK.js} +1 -1
- package/dist/{src-QJHT5SCV.js → src-3NCXEROI.js} +1 -1
- package/dist/{worktree-B2LROS2B.js → worktree-32M5MTFE.js} +1 -1
- package/package.json +1 -1
- /package/dist/{dist-LOXU6IEM.js → dist-CYBRID2F.js} +0 -0
- /package/dist/{lib-7VH6D2QJ.js → lib-ZP7Q6A3E.js} +0 -0
- /package/dist/{mime-types-GSWEOYZ5.js → mime-types-46EO4HOZ.js} +0 -0
- /package/dist/{signin-DKBWDEYP.js → signin-OCIW23YM.js} +0 -0
- /package/dist/{src-JODD73WX.js → src-LXWGIUZH.js} +0 -0
- /package/dist/{src-SMM4U63G.js → src-YAAFIGTW.js} +0 -0
- /package/dist/{sso-oidc-S3P64MCY.js → sso-oidc-OMMKINFE.js} +0 -0
- /package/dist/{sts-RG44NMOQ.js → sts-MWK22JIX.js} +0 -0
- /package/dist/{token-2V62AM3G.js → token-QPO3OAGS.js} +0 -0
- /package/dist/{token-util-VXONHEUD.js → token-util-YGPCEEPO.js} +0 -0
|
@@ -15,4 +15,4 @@ import { dirname as __alchemyDirname } from 'node:path';
|
|
|
15
15
|
const __alchemy_filename = __alchemyFileURLToPath(import.meta.url);
|
|
16
16
|
const __alchemy_dirname = __alchemyDirname(__alchemy_filename);
|
|
17
17
|
|
|
18
|
-
import{c as f}from"./chunk-OCWGUTZJ.js";import{f as _}from"./chunk-CYRZU5QM.js";import{a as t,g as c}from"./chunk-2MRHL4B2.js";var p=c(_());var B=c(_());var g=c(f()),u=c(_());var I=c(f()),m=c(_());var R=t((e,o,r)=>{let n={EcsContainer:t(async i=>{let{fromHttp:a}=await import("./dist-es-L2GU465G.js"),{fromContainerMetadata:s}=await import("./dist-es-RGEIM2BP.js");return r?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>(0,m.chain)(a(i??{}),s(i))().then(y)},"EcsContainer"),Ec2InstanceMetadata:t(async i=>{r?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");let{fromInstanceMetadata:a}=await import("./dist-es-RGEIM2BP.js");return async()=>a(i)().then(y)},"Ec2InstanceMetadata"),Environment:t(async i=>{r?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");let{fromEnv:a}=await import("./dist-es-43ZM44MP.js");return async()=>a(i)().then(y)},"Environment")};if(e in n)return n[e];throw new m.CredentialsProviderError(`Unsupported credential source in profile ${o}. Got ${e}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:r})},"resolveCredentialSource"),y=t(e=>(0,I.setCredentialFeature)(e,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p"),"setNamedProvider");var L=t((e,{profile:o="default",logger:r}={})=>!!e&&typeof e=="object"&&typeof e.role_arn=="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1&&["undefined","string"].indexOf(typeof e.external_id)>-1&&["undefined","string"].indexOf(typeof e.mfa_serial)>-1&&(q(e,{profile:o,logger:r})||H(e,{profile:o,logger:r})),"isAssumeRoleProfile"),q=t((e,{profile:o,logger:r})=>{let n=typeof e.source_profile=="string"&&typeof e.credential_source>"u";return n&&r?.debug?.(` ${o} isAssumeRoleWithSourceProfile source_profile=${e.source_profile}`),n},"isAssumeRoleWithSourceProfile"),H=t((e,{profile:o,logger:r})=>{let n=typeof e.credential_source=="string"&&typeof e.source_profile>"u";return n&&r?.debug?.(` ${o} isCredentialSourceProfile credential_source=${e.credential_source}`),n},"isCredentialSourceProfile"),O=t(async(e,o,r,n,i={},a)=>{r.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");let s=o[e],{source_profile:l,region:K}=s;if(!r.roleAssumer){let{getDefaultRoleAssumer:d}=await import("./sts-
|
|
18
|
+
import{c as f}from"./chunk-OCWGUTZJ.js";import{f as _}from"./chunk-CYRZU5QM.js";import{a as t,g as c}from"./chunk-2MRHL4B2.js";var p=c(_());var B=c(_());var g=c(f()),u=c(_());var I=c(f()),m=c(_());var R=t((e,o,r)=>{let n={EcsContainer:t(async i=>{let{fromHttp:a}=await import("./dist-es-L2GU465G.js"),{fromContainerMetadata:s}=await import("./dist-es-RGEIM2BP.js");return r?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>(0,m.chain)(a(i??{}),s(i))().then(y)},"EcsContainer"),Ec2InstanceMetadata:t(async i=>{r?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");let{fromInstanceMetadata:a}=await import("./dist-es-RGEIM2BP.js");return async()=>a(i)().then(y)},"Ec2InstanceMetadata"),Environment:t(async i=>{r?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");let{fromEnv:a}=await import("./dist-es-43ZM44MP.js");return async()=>a(i)().then(y)},"Environment")};if(e in n)return n[e];throw new m.CredentialsProviderError(`Unsupported credential source in profile ${o}. Got ${e}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:r})},"resolveCredentialSource"),y=t(e=>(0,I.setCredentialFeature)(e,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p"),"setNamedProvider");var L=t((e,{profile:o="default",logger:r}={})=>!!e&&typeof e=="object"&&typeof e.role_arn=="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1&&["undefined","string"].indexOf(typeof e.external_id)>-1&&["undefined","string"].indexOf(typeof e.mfa_serial)>-1&&(q(e,{profile:o,logger:r})||H(e,{profile:o,logger:r})),"isAssumeRoleProfile"),q=t((e,{profile:o,logger:r})=>{let n=typeof e.source_profile=="string"&&typeof e.credential_source>"u";return n&&r?.debug?.(` ${o} isAssumeRoleWithSourceProfile source_profile=${e.source_profile}`),n},"isAssumeRoleWithSourceProfile"),H=t((e,{profile:o,logger:r})=>{let n=typeof e.credential_source=="string"&&typeof e.source_profile>"u";return n&&r?.debug?.(` ${o} isCredentialSourceProfile credential_source=${e.credential_source}`),n},"isCredentialSourceProfile"),O=t(async(e,o,r,n,i={},a)=>{r.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");let s=o[e],{source_profile:l,region:K}=s;if(!r.roleAssumer){let{getDefaultRoleAssumer:d}=await import("./sts-MWK22JIX.js");r.roleAssumer=d({...r.clientConfig,credentialProviderLogger:r.logger,parentClientConfig:{...n,...r?.parentClientConfig,region:K??r?.parentClientConfig?.region??n?.region}},r.clientPlugins)}if(l&&l in i)throw new u.CredentialsProviderError(`Detected a cycle attempting to resolve credentials for profile ${(0,u.getProfileName)(r)}. Profiles visited: `+Object.keys(i).join(", "),{logger:r.logger});r.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${l?`source_profile=[${l}]`:`profile=[${e}]`}`);let v=l?a(l,o,r,n,{...i,[l]:!0},A(o[l]??{})):(await R(s.credential_source,e,r.logger)(r))();if(A(s))return v.then(d=>(0,g.setCredentialFeature)(d,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));{let d={RoleArn:s.role_arn,RoleSessionName:s.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:s.external_id,DurationSeconds:parseInt(s.duration_seconds||"3600",10)},{mfa_serial:C}=s;if(C){if(!r.mfaCodeProvider)throw new u.CredentialsProviderError(`Profile ${e} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:r.logger,tryNextLink:!1});d.SerialNumber=C,d.TokenCode=await r.mfaCodeProvider(C)}let G=await v;return r.roleAssumer(G,d).then(U=>(0,g.setCredentialFeature)(U,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},"resolveAssumeRoleCredentials"),A=t(e=>!e.role_arn&&!!e.credential_source,"isCredentialSourceWithoutRoleArn");var b=c(f());var x=t(e=>!!(e&&e.login_session),"isLoginProfile"),k=t(async(e,o,r)=>{let{fromLoginCredentials:n}=await import("./dist-es-6PLFRCS4.js"),i=await n({...o,profile:e})({callerClientConfig:r});return(0,b.setCredentialFeature)(i,"CREDENTIALS_PROFILE_LOGIN","AC")},"resolveLoginCredentials");var F=c(f());var h=t(e=>!!e&&typeof e=="object"&&typeof e.credential_process=="string","isProcessProfile"),D=t(async(e,o)=>{let{fromProcess:r}=await import("./dist-es-SITTNOGV.js"),n=await r({...e,profile:o})();return(0,F.setCredentialFeature)(n,"CREDENTIALS_PROFILE_PROCESS","v")},"resolveProcessCredentials");var w=c(f());var T=t(async(e,o,r={},n)=>{let{fromSSO:i}=await import("./dist-es-LSR2QCFZ.js");return i({profile:e,logger:r.logger,parentClientConfig:r.parentClientConfig,clientConfig:r.clientConfig})({callerClientConfig:n}).then(a=>o.sso_session?(0,w.setCredentialFeature)(a,"CREDENTIALS_PROFILE_SSO","r"):(0,w.setCredentialFeature)(a,"CREDENTIALS_PROFILE_SSO_LEGACY","t"))},"resolveSsoCredentials"),$=t(e=>e&&(typeof e.sso_start_url=="string"||typeof e.sso_account_id=="string"||typeof e.sso_session=="string"||typeof e.sso_region=="string"||typeof e.sso_role_name=="string"),"isSsoProfile");var W=c(f());var E=t(e=>!!e&&typeof e=="object"&&typeof e.aws_access_key_id=="string"&&typeof e.aws_secret_access_key=="string"&&["undefined","string"].indexOf(typeof e.aws_session_token)>-1&&["undefined","string"].indexOf(typeof e.aws_account_id)>-1,"isStaticCredsProfile"),P=t(async(e,o)=>{o?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");let r={accessKeyId:e.aws_access_key_id,secretAccessKey:e.aws_secret_access_key,sessionToken:e.aws_session_token,...e.aws_credential_scope&&{credentialScope:e.aws_credential_scope},...e.aws_account_id&&{accountId:e.aws_account_id}};return(0,W.setCredentialFeature)(r,"CREDENTIALS_PROFILE","n")},"resolveStaticCredentials");var N=c(f());var j=t(e=>!!e&&typeof e=="object"&&typeof e.web_identity_token_file=="string"&&typeof e.role_arn=="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1,"isWebIdentityProfile"),M=t(async(e,o,r)=>{let{fromTokenFile:n}=await import("./dist-es-W5GYOX6F.js"),i=await n({webIdentityTokenFile:e.web_identity_token_file,roleArn:e.role_arn,roleSessionName:e.role_session_name,roleAssumerWithWebIdentity:o.roleAssumerWithWebIdentity,logger:o.logger,parentClientConfig:o.parentClientConfig})({callerClientConfig:r});return(0,N.setCredentialFeature)(i,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q")},"resolveWebIdentityCredentials");var S=t(async(e,o,r,n,i={},a=!1)=>{let s=o[e];if(Object.keys(i).length>0&&E(s))return P(s,r);if(a||L(s,{profile:e,logger:r.logger}))return O(e,o,r,n,i,S);if(E(s))return P(s,r);if(j(s))return M(s,r,n);if(h(s))return D(r,e);if($(s))return await T(e,s,r,n);if(x(s))return k(e,r,n);throw new B.CredentialsProviderError(`Could not resolve credentials using profile: [${e}] in configuration/credentials file(s).`,{logger:r.logger})},"resolveProfileData");var V=t((e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");let r=await(0,p.parseKnownFiles)(e);return S((0,p.getProfileName)({profile:e.profile??o?.profile}),r,e,o)},"fromIni");export{V as a};
|
|
@@ -15,5 +15,5 @@ import { dirname as __alchemyDirname } from 'node:path';
|
|
|
15
15
|
const __alchemy_filename = __alchemyFileURLToPath(import.meta.url);
|
|
16
16
|
const __alchemy_dirname = __alchemyDirname(__alchemy_filename);
|
|
17
17
|
|
|
18
|
-
import{c as Q}from"./chunk-OCWGUTZJ.js";import{f as T}from"./chunk-CYRZU5QM.js";import{a as o,g as w}from"./chunk-2MRHL4B2.js";var g=w(T());var R=o(e=>e&&(typeof e.sso_start_url=="string"||typeof e.sso_account_id=="string"||typeof e.sso_session=="string"||typeof e.sso_region=="string"||typeof e.sso_role_name=="string"),"isSsoProfile");var F=w(Q());var f=w(T());var x="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var j=o(async(e,s={},t)=>{let{SSOOIDCClient:n}=await import("./sso-oidc-
|
|
18
|
+
import{c as Q}from"./chunk-OCWGUTZJ.js";import{f as T}from"./chunk-CYRZU5QM.js";import{a as o,g as w}from"./chunk-2MRHL4B2.js";var g=w(T());var R=o(e=>e&&(typeof e.sso_start_url=="string"||typeof e.sso_account_id=="string"||typeof e.sso_session=="string"||typeof e.sso_region=="string"||typeof e.sso_role_name=="string"),"isSsoProfile");var F=w(Q());var f=w(T());var x="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var j=o(async(e,s={},t)=>{let{SSOOIDCClient:n}=await import("./sso-oidc-OMMKINFE.js"),i=o(p=>s.clientConfig?.[p]??s.parentClientConfig?.[p]??t?.[p],"coalesce");return new n(Object.assign({},s.clientConfig??{},{region:e??s.clientConfig?.region,logger:i("logger"),userAgentAppId:i("userAgentAppId")}))},"getSsoOidcClient");var q=o(async(e,s,t={},n)=>{let{CreateTokenCommand:i}=await import("./sso-oidc-OMMKINFE.js");return(await j(s,t,n)).send(new i({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))},"getNewSsoOidcToken");var W=w(T());var v=o(e=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new W.TokenProviderError(`Token is expired. ${x}`,!1)},"validateTokenExpiry");var X=w(T());var h=o((e,s,t=!1)=>{if(typeof s>"u")throw new X.TokenProviderError(`Value not present for '${e}' in SSO Token${t?". Cannot refresh":""}. ${x}`,!1)},"validateTokenKey");var z=w(T());import{promises as Z}from"node:fs";var{writeFile:ee}=Z,J=o((e,s)=>{let t=(0,z.getSSOTokenFilepath)(e),n=JSON.stringify(s,null,2);return ee(t,n)},"writeSSOTokenToFile");var V=new Map,P=o((e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let t=await(0,f.parseKnownFiles)(e),n=(0,f.getProfileName)({profile:e.profile??s?.profile}),i=t[n];if(i){if(!i.sso_session)throw new f.TokenProviderError(`Profile '${n}' is missing required property 'sso_session'.`)}else throw new f.TokenProviderError(`Profile '${n}' could not be found in shared credentials file.`,!1);let a=i.sso_session,S=(await(0,f.loadSsoSessionData)(e))[a];if(!S)throw new f.TokenProviderError(`Sso session '${a}' could not be found in shared credentials file.`,!1);for(let l of["sso_start_url","sso_region"])if(!S[l])throw new f.TokenProviderError(`Sso session '${a}' is missing required property '${l}'.`,!1);let d=S.sso_start_url,A=S.sso_region,r;try{r=await(0,f.getSSOTokenFromFile)(a)}catch{throw new f.TokenProviderError(`The SSO session token associated with profile=${n} was not found or is invalid. ${x}`,!1)}h("accessToken",r.accessToken),h("expiresAt",r.expiresAt);let{accessToken:C,expiresAt:O}=r,c={token:C,expiration:new Date(O)};if(c.expiration.getTime()-Date.now()>3e5)return c;let m=V.get(a)??0;if(Date.now()-m<30*1e3)return v(c),c;h("clientId",r.clientId,!0),h("clientSecret",r.clientSecret,!0),h("refreshToken",r.refreshToken,!0);try{V.set(a,Date.now());let l=await q(r,A,e,s);h("accessToken",l.accessToken),h("expiresIn",l.expiresIn);let y=new Date(Date.now()+l.expiresIn*1e3);try{await J(a,{...r,accessToken:l.accessToken,expiresAt:y.toISOString(),refreshToken:l.refreshToken})}catch{}return{token:l.accessToken,expiration:y}}catch{return v(c),c}},"fromSso");var u=w(T());var E=!1,D=o(async({ssoStartUrl:e,ssoSession:s,ssoAccountId:t,ssoRegion:n,ssoRoleName:i,ssoClient:a,clientConfig:p,parentClientConfig:S,callerClientConfig:d,profile:A,filepath:r,configFilepath:C,ignoreCache:O,logger:c})=>{let m,l="To refresh this SSO session run aws sso login with the corresponding profile.";if(s)try{let k=await P({profile:A,filepath:r,configFilepath:C,ignoreCache:O,clientConfig:p,parentClientConfig:S,logger:c})({callerClientConfig:d});m={accessToken:k.token,expiresAt:new Date(k.expiration).toISOString()}}catch(k){throw new u.CredentialsProviderError(k.message,{tryNextLink:E,logger:c})}else try{m=await(0,u.getSSOTokenFromFile)(e)}catch{throw new u.CredentialsProviderError(`The SSO session associated with this profile is invalid. ${l}`,{tryNextLink:E,logger:c})}if(new Date(m.expiresAt).getTime()-Date.now()<=0)throw new u.CredentialsProviderError(`The SSO session associated with this profile has expired. ${l}`,{tryNextLink:E,logger:c});let{accessToken:y}=m,{SSOClient:_,GetRoleCredentialsCommand:I}=await import("./loadSso-AGOUE6RL.js"),B=a||new _(Object.assign({},p??{},{logger:p?.logger??d?.logger??S?.logger,region:p?.region??n,userAgentAppId:p?.userAgentAppId??d?.userAgentAppId??S?.userAgentAppId})),L;try{L=await B.send(new I({accountId:t,roleName:i,accessToken:y}))}catch(k){throw new u.CredentialsProviderError(k,{tryNextLink:E,logger:c})}let{roleCredentials:{accessKeyId:M,secretAccessKey:b,sessionToken:G,expiration:K,credentialScope:H,accountId:U}={}}=L;if(!M||!b||!G||!K)throw new u.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:E,logger:c});let N={accessKeyId:M,secretAccessKey:b,sessionToken:G,expiration:new Date(K),...H&&{credentialScope:H},...U&&{accountId:U}};return s?(0,F.setCredentialFeature)(N,"CREDENTIALS_SSO","s"):(0,F.setCredentialFeature)(N,"CREDENTIALS_SSO_LEGACY","u"),N},"resolveSSOCredentials");var Y=w(T());var $=o((e,s)=>{let{sso_start_url:t,sso_account_id:n,sso_region:i,sso_role_name:a}=e;if(!t||!n||!i||!a)throw new Y.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
|
|
19
19
|
Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:s});return e},"validateSsoProfile");var se=o((e={})=>async({callerClientConfig:s}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:t,ssoAccountId:n,ssoRegion:i,ssoRoleName:a,ssoSession:p}=e,{ssoClient:S}=e,d=(0,g.getProfileName)({profile:e.profile??s?.profile});if(!t&&!n&&!i&&!a&&!p){let r=(await(0,g.parseKnownFiles)(e))[d];if(!r)throw new g.CredentialsProviderError(`Profile ${d} was not found.`,{logger:e.logger});if(!R(r))throw new g.CredentialsProviderError(`Profile ${d} is not configured with SSO credentials.`,{logger:e.logger});if(r?.sso_session){let _=(await(0,g.loadSsoSessionData)(e))[r.sso_session],I=` configurations in profile ${d} and sso-session ${r.sso_session}`;if(i&&i!==_.sso_region)throw new g.CredentialsProviderError("Conflicting SSO region"+I,{tryNextLink:!1,logger:e.logger});if(t&&t!==_.sso_start_url)throw new g.CredentialsProviderError("Conflicting SSO start_url"+I,{tryNextLink:!1,logger:e.logger});r.sso_region=_.sso_region,r.sso_start_url=_.sso_start_url}let{sso_start_url:C,sso_account_id:O,sso_region:c,sso_role_name:m,sso_session:l}=$(r,e.logger);return D({ssoStartUrl:C,ssoSession:l,ssoAccountId:O,ssoRegion:c,ssoRoleName:m,ssoClient:S,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:d,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}else{if(!t||!n||!i||!a)throw new g.CredentialsProviderError('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});return D({ssoStartUrl:t,ssoSession:p,ssoAccountId:n,ssoRegion:i,ssoRoleName:a,ssoClient:S,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:d,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}},"fromSSO");export{R as a,$ as b,se as c};
|
|
@@ -15,5 +15,5 @@ import { dirname as __alchemyDirname } from 'node:path';
|
|
|
15
15
|
const __alchemy_filename = __alchemyFileURLToPath(import.meta.url);
|
|
16
16
|
const __alchemy_dirname = __alchemyDirname(__alchemy_filename);
|
|
17
17
|
|
|
18
|
-
import{a as w,b as x,c as h}from"./chunk-P5RLCJUV.js";import{a as t,d as a}from"./chunk-2MRHL4B2.js";var s=a((U,g)=>{"use strict";var _=Object.defineProperty,m=Object.getOwnPropertyDescriptor,E=Object.getOwnPropertyNames,j=Object.prototype.hasOwnProperty,V=t((r,e)=>{for(var n in e)_(r,n,{get:e[n],enumerable:!0})},"__export"),C=t((r,e,n,c)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of E(e))!j.call(r,o)&&o!==n&&_(r,o,{get:t(()=>e[o],"get"),enumerable:!(c=m(e,o))||c.enumerable});return r},"__copyProps"),S=t(r=>C(_({},"__esModule",{value:!0}),r),"__toCommonJS"),O={};V(O,{SYMBOL_FOR_REQ_CONTEXT:t(()=>u,"SYMBOL_FOR_REQ_CONTEXT"),getContext:t(()=>M,"getContext")});g.exports=S(O);var u=Symbol.for("@vercel/request-context");function M(){return globalThis[u]?.get?.()??{}}t(M,"getContext")});var f=a((Z,y)=>{"use strict";var p=Object.defineProperty,N=Object.getOwnPropertyDescriptor,R=Object.getOwnPropertyNames,D=Object.prototype.hasOwnProperty,q=t((r,e)=>{for(var n in e)p(r,n,{get:e[n],enumerable:!0})},"__export"),A=t((r,e,n,c)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of R(e))!D.call(r,o)&&o!==n&&p(r,o,{get:t(()=>e[o],"get"),enumerable:!(c=N(e,o))||c.enumerable});return r},"__copyProps"),F=t(r=>A(p({},"__esModule",{value:!0}),r),"__toCommonJS"),v={};q(v,{getVercelOidcToken:t(()=>J,"getVercelOidcToken"),getVercelOidcTokenSync:t(()=>i,"getVercelOidcTokenSync")});y.exports=F(v);var B=s(),L=w();async function J(r){let e="",n;try{e=i()}catch(c){n=c}try{let[{getTokenPayload:c,isExpired:o},{refreshToken:P}]=await Promise.all([await import("./token-util-
|
|
18
|
+
import{a as w,b as x,c as h}from"./chunk-P5RLCJUV.js";import{a as t,d as a}from"./chunk-2MRHL4B2.js";var s=a((U,g)=>{"use strict";var _=Object.defineProperty,m=Object.getOwnPropertyDescriptor,E=Object.getOwnPropertyNames,j=Object.prototype.hasOwnProperty,V=t((r,e)=>{for(var n in e)_(r,n,{get:e[n],enumerable:!0})},"__export"),C=t((r,e,n,c)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of E(e))!j.call(r,o)&&o!==n&&_(r,o,{get:t(()=>e[o],"get"),enumerable:!(c=m(e,o))||c.enumerable});return r},"__copyProps"),S=t(r=>C(_({},"__esModule",{value:!0}),r),"__toCommonJS"),O={};V(O,{SYMBOL_FOR_REQ_CONTEXT:t(()=>u,"SYMBOL_FOR_REQ_CONTEXT"),getContext:t(()=>M,"getContext")});g.exports=S(O);var u=Symbol.for("@vercel/request-context");function M(){return globalThis[u]?.get?.()??{}}t(M,"getContext")});var f=a((Z,y)=>{"use strict";var p=Object.defineProperty,N=Object.getOwnPropertyDescriptor,R=Object.getOwnPropertyNames,D=Object.prototype.hasOwnProperty,q=t((r,e)=>{for(var n in e)p(r,n,{get:e[n],enumerable:!0})},"__export"),A=t((r,e,n,c)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of R(e))!D.call(r,o)&&o!==n&&p(r,o,{get:t(()=>e[o],"get"),enumerable:!(c=N(e,o))||c.enumerable});return r},"__copyProps"),F=t(r=>A(p({},"__esModule",{value:!0}),r),"__toCommonJS"),v={};q(v,{getVercelOidcToken:t(()=>J,"getVercelOidcToken"),getVercelOidcTokenSync:t(()=>i,"getVercelOidcTokenSync")});y.exports=F(v);var B=s(),L=w();async function J(r){let e="",n;try{e=i()}catch(c){n=c}try{let[{getTokenPayload:c,isExpired:o},{refreshToken:P}]=await Promise.all([await import("./token-util-YGPCEEPO.js"),await import("./token-QPO3OAGS.js")]);(!e||o(c(e),r?.expirationBufferMs))&&(await P(r),e=i())}catch(c){let o=n instanceof Error?n.message:"";throw c instanceof Error&&(o=`${o}
|
|
19
19
|
${c.message}`),o?new L.VercelOidcTokenError(o):c}return e}t(J,"getVercelOidcToken");function i(){let r=(0,B.getContext)().headers?.["x-vercel-oidc-token"]??process.env.VERCEL_OIDC_TOKEN;if(!r)throw new Error("The 'x-vercel-oidc-token' header is missing from the request. Do you have the OIDC option enabled in the Vercel project settings?");return r}t(i,"getVercelOidcTokenSync")});var H=a((re,d)=>{"use strict";var l=Object.defineProperty,Q=Object.getOwnPropertyDescriptor,X=Object.getOwnPropertyNames,Y=Object.prototype.hasOwnProperty,I=t((r,e)=>{for(var n in e)l(r,n,{get:e[n],enumerable:!0})},"__export"),$=t((r,e,n,c)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of X(e))!Y.call(r,o)&&o!==n&&l(r,o,{get:t(()=>e[o],"get"),enumerable:!(c=Q(e,o))||c.enumerable});return r},"__copyProps"),K=t(r=>$(l({},"__esModule",{value:!0}),r),"__toCommonJS"),b={};I(b,{AccessTokenMissingError:t(()=>T.AccessTokenMissingError,"AccessTokenMissingError"),RefreshAccessTokenFailedError:t(()=>T.RefreshAccessTokenFailedError,"RefreshAccessTokenFailedError"),getContext:t(()=>z.getContext,"getContext"),getVercelOidcToken:t(()=>k.getVercelOidcToken,"getVercelOidcToken"),getVercelOidcTokenSync:t(()=>k.getVercelOidcTokenSync,"getVercelOidcTokenSync"),getVercelToken:t(()=>G.getVercelToken,"getVercelToken")});d.exports=K(b);var k=f(),z=s(),T=x(),G=h()});export{H as a};
|
|
@@ -15,4 +15,4 @@ import { dirname as __alchemyDirname } from 'node:path';
|
|
|
15
15
|
const __alchemy_filename = __alchemyFileURLToPath(import.meta.url);
|
|
16
16
|
const __alchemy_dirname = __alchemyDirname(__alchemy_filename);
|
|
17
17
|
|
|
18
|
-
import{c as K}from"./chunk-OCWGUTZJ.js";import{f as N,j as H}from"./chunk-CYRZU5QM.js";import{a as d,g as y}from"./chunk-2MRHL4B2.js";var F=y(K()),p=y(N());var f=y(N()),b=y(H());import{createHash as v,createPrivateKey as _,createPublicKey as B,sign as q}from"node:crypto";import{promises as D}from"node:fs";import{homedir as U}from"node:os";import{dirname as j,join as R}from"node:path";var m=class a{static{d(this,"LoginCredentialsFetcher")}profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300*1e3;constructor(e,t,s){this.profileData=e,this.init=t,this.callerClientConfig=s}async loadCredentials(){let e=await this.loadToken();if(!e)throw new f.CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let t=e.accessToken,s=Date.now();return new Date(t.expiresAt).getTime()-s<=a.REFRESH_THRESHOLD?this.refresh(e):this.toCredentials(e.accessToken)}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}toCredentials(e){return{accessKeyId:e.accessKeyId,secretAccessKey:e.secretAccessKey,sessionToken:e.sessionToken,accountId:e.accountId,expiration:new Date(e.expiresAt)}}async refresh(e){let t=await this.loadToken().catch(()=>e),s=Date.now(),r=new Date(t.accessToken.expiresAt).getTime(),i=new Date(e.accessToken.expiresAt).getTime(),o=r<=s&&i>s?e:t;if(new Date(o.accessToken.expiresAt).getTime()-Date.now()>a.REFRESH_THRESHOLD)return this.toCredentials(o.accessToken);let{SigninClient:h,CreateOAuth2TokenCommand:T}=await import("./signin-
|
|
18
|
+
import{c as K}from"./chunk-OCWGUTZJ.js";import{f as N,j as H}from"./chunk-CYRZU5QM.js";import{a as d,g as y}from"./chunk-2MRHL4B2.js";var F=y(K()),p=y(N());var f=y(N()),b=y(H());import{createHash as v,createPrivateKey as _,createPublicKey as B,sign as q}from"node:crypto";import{promises as D}from"node:fs";import{homedir as U}from"node:os";import{dirname as j,join as R}from"node:path";var m=class a{static{d(this,"LoginCredentialsFetcher")}profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300*1e3;constructor(e,t,s){this.profileData=e,this.init=t,this.callerClientConfig=s}async loadCredentials(){let e=await this.loadToken();if(!e)throw new f.CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let t=e.accessToken,s=Date.now();return new Date(t.expiresAt).getTime()-s<=a.REFRESH_THRESHOLD?this.refresh(e):this.toCredentials(e.accessToken)}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}toCredentials(e){return{accessKeyId:e.accessKeyId,secretAccessKey:e.secretAccessKey,sessionToken:e.sessionToken,accountId:e.accountId,expiration:new Date(e.expiresAt)}}async refresh(e){let t=await this.loadToken().catch(()=>e),s=Date.now(),r=new Date(t.accessToken.expiresAt).getTime(),i=new Date(e.accessToken.expiresAt).getTime(),o=r<=s&&i>s?e:t;if(new Date(o.accessToken.expiresAt).getTime()-Date.now()>a.REFRESH_THRESHOLD)return this.toCredentials(o.accessToken);let{SigninClient:h,CreateOAuth2TokenCommand:T}=await import("./signin-OCIW23YM.js"),{logger:x,userAgentAppId:E}=this.callerClientConfig??{},S=d(n=>n?.metadata?.handlerProtocol==="h2","isH2")(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,u=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,k=new h({credentials:{accessKeyId:"",secretAccessKey:""},region:u,requestHandler:S,logger:x,userAgentAppId:E,...this.init?.clientConfig});this.createDPoPInterceptor(k.middlewareStack);let I={tokenInput:{clientId:o.clientId,refreshToken:o.refreshToken,grantType:"refresh_token"}};try{let n=await k.send(new T(I)),{accessKeyId:l,secretAccessKey:w,sessionToken:g}=n.tokenOutput?.accessToken??{},{refreshToken:P,expiresIn:L}=n.tokenOutput??{};if(!l||!w||!g||!P)throw new f.CredentialsProviderError("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let O=(L??900)*1e3,$=new Date(Date.now()+O),A={...o,accessToken:{...o.accessToken,accessKeyId:l,secretAccessKey:w,sessionToken:g,expiresAt:$.toISOString()},refreshToken:P};return await this.saveToken(A),this.toCredentials(A.accessToken)}catch(n){if(n.name==="AccessDeniedException"){let w=n.error,g;switch(w){case"TOKEN_EXPIRED":g="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":g="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":g="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:g=`Failed to refresh token: ${String(n)}. Please re-authenticate using \`aws login\``}throw new f.CredentialsProviderError(g,{logger:this.logger,tryNextLink:!1})}if(new Date(o.accessToken.expiresAt).getTime()>Date.now())return this.logger?.warn?.(`Failed to refresh token: ${String(n)}. Using existing token until expiry.`),this.toCredentials(o.accessToken);throw new f.CredentialsProviderError(`Failed to refresh token: ${String(n)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let e=this.getTokenFilePath();try{let t=await D.readFile(e,"utf8"),s=JSON.parse(t),r=["accessToken","clientId","refreshToken","dpopKey"].filter(i=>!s[i]);if(s.accessToken?.accountId||r.push("accountId"),r.length>0)throw new f.CredentialsProviderError(`Token validation failed, missing fields: ${r.join(", ")}`,{logger:this.logger,tryNextLink:!1});return s}catch(t){throw new f.CredentialsProviderError(`Failed to load token from ${e}: ${String(t)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(e){let t=this.getTokenFilePath(),s=j(t);try{await D.mkdir(s,{recursive:!0})}catch{}await D.writeFile(t,JSON.stringify(e,null,2),"utf8")}getTokenFilePath(){let e=process.env.AWS_LOGIN_CACHE_DIRECTORY??R(U(),".aws","login","cache"),t=Buffer.from(this.loginSession,"utf8"),s=v("sha256").update(t).digest("hex");return R(e,`${s}.json`)}derToRawSignature(e){let t=2;if(e[t]!==2)throw new Error("Invalid DER signature");t++;let s=e[t++],r=e.subarray(t,t+s);if(t+=s,e[t]!==2)throw new Error("Invalid DER signature");t++;let i=e[t++],o=e.subarray(t,t+i);r=r[0]===0?r.subarray(1):r,o=o[0]===0?o.subarray(1):o;let c=Buffer.concat([Buffer.alloc(32-r.length),r]),h=Buffer.concat([Buffer.alloc(32-o.length),o]);return Buffer.concat([c,h])}createDPoPInterceptor(e){e.add(t=>async s=>{if(b.HttpRequest.isInstance(s.request)){let r=s.request,i=`${r.protocol}//${r.hostname}${r.port?`:${r.port}`:""}${r.path}`,o=await this.generateDpop(r.method,i);r.headers={...r.headers,DPoP:o}}return t(s)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(e="POST",t){let s=await this.loadToken();try{let r=_({key:s.dpopKey,format:"pem",type:"sec1"}),o=B(r).export({format:"der",type:"spki"}),c=-1;for(let l=0;l<o.length;l++)if(o[l]===4){c=l;break}let h=o.slice(c+1,c+33),T=o.slice(c+33,c+65),x={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:h.toString("base64url"),y:T.toString("base64url")}},E={jti:crypto.randomUUID(),htm:e,htu:t,iat:Math.floor(Date.now()/1e3)},C=Buffer.from(JSON.stringify(x)).toString("base64url"),S=Buffer.from(JSON.stringify(E)).toString("base64url"),u=`${C}.${S}`,k=q("sha256",Buffer.from(u),r),n=this.derToRawSignature(k).toString("base64url");return`${u}.${n}`}catch(r){throw new f.CredentialsProviderError(`Failed to generate Dpop proof: ${r instanceof Error?r.message:String(r)}`,{logger:this.logger,tryNextLink:!1})}}};var G=d(a=>async({callerClientConfig:e}={})=>{a?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let t=await(0,p.parseKnownFiles)(a||{}),s=(0,p.getProfileName)({profile:a?.profile??e?.profile}),r=t[s];if(!r?.login_session)throw new p.CredentialsProviderError(`Profile ${s} does not contain login_session.`,{tryNextLink:!0,logger:a?.logger});let o=await new m(r,a,e).loadCredentials();return(0,F.setCredentialFeature)(o,"CREDENTIALS_LOGIN","AD")},"fromLoginCredentials");export{G as a};
|