appos 0.1.21-0 → 0.1.23-0

package/build/exports/server.d.mts

@@ -4,7 +4,10 @@ import { DBOS as Workflow, WorkflowConfig, WorkflowHandle, WorkflowHandle as Wor
 import * as _trpc_server0 from "@trpc/server";
 import { AnyRouter, TRPCRouterRecord } from "@trpc/server";
 import * as better_auth0 from "better-auth";
-import { Session, User } from "better-auth";
+import { Session, Session as Session$1, User, User as User$1 } from "better-auth";
+import { TFunction } from "i18next";
+import { DriveManager } from "flydrive";
+import z$1, { z } from "zod";
 import * as drizzle_orm_node_postgres26 from "drizzle-orm/node-postgres";
 import * as drizzle_orm699 from "drizzle-orm";
 import { AnyRelations, EmptyRelations, RelationsBuilder } from "drizzle-orm";
@@ -12,8 +15,6 @@ import * as pg0 from "pg";
 import { Pool, PoolConfig } from "pg";
 import * as pino0 from "pino";
 import pino, { LoggerOptions } from "pino";
-import { DriveManager } from "flydrive";
-import z$1, { z } from "zod";
 import * as drizzle_orm_pg_core4262 from "drizzle-orm/pg-core";
 import * as _node_modules_i18next_index_js0 from "#node_modules/i18next/index.js";
 import * as nodemailer_lib_dkim0 from "nodemailer/lib/dkim";
@@ -74,73 +75,6 @@ declare function defineDatabase<TSchema extends Record<string, unknown> = Record
   $client: Pool;
 }>;
 //#endregion
-//#region app/.server/primitives/auth.d.ts
-
-/**
- * Authentication UI features configuration.
- *
- * This type represents the features configuration with all secrets stripped out,
- * safe to pass to the client-side for UI rendering decisions.
- */
-interface AuthUIFeatures {
-  /**
-   * Captcha is enabled.
-   */
-  captcha: boolean;
-  /**
-   * Email and password authentication is enabled.
-   */
-  emailAndPassword?: {
-    /**
-     * Email verification is required.
-     */
-    emailVerification?: boolean;
-  };
-  /**
-   * Social OAuth providers that are enabled.
-   */
-  socialProviders?: {
-    apple?: boolean;
-    discord?: boolean;
-    dropbox?: boolean;
-    facebook?: boolean;
-    github?: boolean;
-    gitlab?: boolean;
-    google?: boolean;
-    linkedin?: boolean;
-    microsoft?: boolean;
-    reddit?: boolean;
-    spotify?: boolean;
-    twitch?: boolean;
-    twitter?: boolean;
-  };
-  /**
-   * Two-factor authentication is enabled.
-   */
-  twoFactor?: boolean;
-  /**
-   * Organization and team management is enabled.
-   */
-  organization?: {
-    /**
-     * Teams are enabled within organizations.
-     */
-    teams?: boolean;
-  };
-  /**
-   * API key authentication is enabled.
-   */
-  apiKey?: boolean;
-  /**
-   * Single Sign-On (SSO) is enabled.
-   */
-  sso?: boolean;
-  /**
-   * Last login method tracking is enabled.
-   */
-  lastLoginMethod?: boolean;
-}
-//#endregion
 //#region app/.server/primitives/storage-schema.d.ts
 
 /**
@@ -5530,6 +5464,72 @@ type ExtractTableName<T> = T extends {
  */
 type TableName = ExtractTableName<(typeof schema_d_exports)[keyof typeof schema_d_exports]>;
 //#endregion
+//#region app/.server/primitives/auth.d.ts
+/**
+ * Authentication UI features configuration.
+ *
+ * This type represents the features configuration with all secrets stripped out,
+ * safe to pass to the client-side for UI rendering decisions.
+ */
+interface AuthUIFeatures {
+  /**
+   * Captcha is enabled.
+   */
+  captcha: boolean;
+  /**
+   * Email and password authentication is enabled.
+   */
+  emailAndPassword?: {
+    /**
+     * Email verification is required.
+     */
+    emailVerification?: boolean;
+  };
+  /**
+   * Social OAuth providers that are enabled.
+   */
+  socialProviders?: {
+    apple?: boolean;
+    discord?: boolean;
+    dropbox?: boolean;
+    facebook?: boolean;
+    github?: boolean;
+    gitlab?: boolean;
+    google?: boolean;
+    linkedin?: boolean;
+    microsoft?: boolean;
+    reddit?: boolean;
+    spotify?: boolean;
+    twitch?: boolean;
+    twitter?: boolean;
+  };
+  /**
+   * Two-factor authentication is enabled.
+   */
+  twoFactor?: boolean;
+  /**
+   * Organization and team management is enabled.
+   */
+  organization?: {
+    /**
+     * Teams are enabled within organizations.
+     */
+    teams?: boolean;
+  };
+  /**
+   * API key authentication is enabled.
+   */
+  apiKey?: boolean;
+  /**
+   * Single Sign-On (SSO) is enabled.
+   */
+  sso?: boolean;
+  /**
+   * Last login method tracking is enabled.
+   */
+  lastLoginMethod?: boolean;
+}
+//#endregion
 //#region app/.server/primitives/mailer.d.ts
 /**
  * The mailer payload type with React component.
@@ -5662,12 +5662,12 @@ interface NotificationsClientToServerEvents {
  * All server-to-client events across all modules.
  * Includes both built-in events and user-defined events from appos/realtime/*.ts
  */
-type ServerToClientEvents = AuthServerToClientEvents & EmailsServerToClientEvents & NotificationsServerToClientEvents & AppOS.ServerToClientEvents;
+type ServerToClientEvents = AuthServerToClientEvents & EmailsServerToClientEvents & NotificationsServerToClientEvents;
 /**
  * All client-to-server events across all modules.
  * Includes both built-in events and user-defined events from appos/realtime/*.ts
  */
-type ClientToServerEvents = AuthClientToServerEvents & EmailsClientToServerEvents & NotificationsClientToServerEvents & AppOS.ClientToServerEvents;
+type ClientToServerEvents = AuthClientToServerEvents & EmailsClientToServerEvents & NotificationsClientToServerEvents;
 /**
  * Inter-server events (for multi-server scaling).
  */
@@ -8168,6 +8168,140 @@ declare function defineContainer(): Promise<{
   storage: StorageService<"private" | "public">;
 }>;
 //#endregion
+//#region app/.server/workflows/extract-blob-metadata.d.ts
+declare function extractBlobMetadata(container: Container): WorkflowDefinition<{
+  blobId: string;
+}, any>;
+//#endregion
+//#region app/.server/workflows/generate-image-variant.d.ts
+declare function generateImageVariant(container: Container): WorkflowDefinition<{
+  blobId: string;
+  transformations: ImageTransformations;
+}, {
+  id: string;
+  createdAt: Date;
+  key: string;
+  metadata: unknown;
+  filename: string;
+  contentType: string | null;
+  serviceName: string;
+  byteSize: number;
+  checksum: string | null;
+}>;
+//#endregion
+//#region app/.server/workflows/generate-preview.d.ts
+/**
+ * Generate preview workflow. Creates preview images/thumbnails for PDFs and videos.
+ *
+ * For videos: Extracts a frame at a specified time (default: 1 second) using FFmpeg
+ * For PDFs: Generates thumbnail of first page using pdfjs-dist + canvas
+ * For images: Resizes to max 800x800 maintaining aspect ratio
+ *
+ * Preview is stored as a special variant with "preview" transformation key.
+ */
+declare function generatePreview(container: Container): WorkflowDefinition<{
+  blobId: string;
+  timeInSeconds?: number;
+}, {
+  id: string;
+  createdAt: Date;
+  key: string;
+  metadata: unknown;
+  filename: string;
+  contentType: string | null;
+  serviceName: string;
+  byteSize: number;
+  checksum: string | null;
+}>;
+//#endregion
+//#region app/.server/workflows/purge-attachment.d.ts
+/**
+ * Purge attachment workflow.
+ * Deletes attachments and their associated blobs in the background.
+ *
+ * This workflow is enqueued by `.purge_later()` calls on attachment objects.
+ */
+declare function purgeAttachment(container: Container): WorkflowDefinition<{
+  attachmentIds: string[];
+}, {
+  purgedCount: number;
+}>;
+//#endregion
+//#region app/.server/workflows/purge-unattached-blobs.d.ts
+/**
+ * Purge unattached blobs workflow.
+ * Cleans up orphaned blobs from failed uploads or abandoned forms.
+ */
+declare function purgeUnattachedBlobs(container: Container): WorkflowDefinition<{
+  olderThanHours?: number;
+}, {
+  purgedCount: number;
+}>;
+//#endregion
+//#region app/.server/workflows/send-email.d.ts
+declare function sendEmail(container: Container): WorkflowDefinition<MailerPayload, boolean>;
+declare namespace index_d_exports {
+  export { extractBlobMetadata, generateImageVariant, generatePreview, purgeAttachment, purgeUnattachedBlobs, sendEmail };
+}
+//#endregion
+//#region app/.server/lib/types.d.ts
+interface AppOSLocals {
+  /**
+   * The application container with base services and user-defined extensions.
+   */
+  container: Container;
+  /**
+   * All workflows available in the app (both base and user-defined).
+   * This merges base workflows with user workflows.
+   */
+  workflows: InferWorkflows<Container, typeof index_d_exports>;
+}
+interface AppOSRequest {
+  /**
+   * The text direction based on the detected language (e.g., 'ltr' or 'rtl').
+   */
+  dir: "ltr" | "rtl";
+  /**
+   * The detected language from the request headers.
+   */
+  language: string;
+  /**
+   * The list of languages supported by the i18n instance.
+   */
+  languages: readonly string[];
+  /**
+   * The request ID generated for tracking the request.
+   */
+  requestId: string;
+  /**
+   * The authenticated session associated with the request.
+   */
+  session?: Session$1;
+  /**
+   * The authenticated user associated with the request.
+   */
+  user?: User$1;
+  /**
+   * The i18n translation function that is attached to the request.
+   */
+  t: TFunction;
+}
+/**
+ * AppOS namespace for user-extensible types and Express augmentations.
+ */
+declare global {
+  namespace Express {
+    /**
+     * The request object extended with the application container.
+     */
+    interface Request extends AppOSRequest {}
+    /**
+     * The app.locals extended with typed workflows.
+     */
+    interface Locals extends AppOSLocals {}
+  }
+}
+//#endregion
 //#region app/.server/primitives/openapi.d.ts
 /**
  * Response marker type for Express compatibility.
@@ -8197,9 +8331,9 @@ type HandlerParams<TParams extends z.ZodSchema | undefined = undefined, TQuery e
   description: string;
   schema: z.ZodSchema;
 }>> = {
-  request: Request;
+  request: Request & AppOSRequest;
   params: TParams extends z.ZodSchema ? z.infer<TParams> : Record<string, unknown>;
-  context: Express.Locals;
+  context: Express.Locals & AppOSLocals;
   body: TBody extends z.ZodSchema ? z.infer<TBody> : unknown;
   query: TQuery extends z.ZodSchema ? z.infer<TQuery> : Record<string, unknown>;
   headers: THeaders extends z.ZodSchema ? z.infer<THeaders> : Record<string, string>;
@@ -8381,82 +8515,6 @@ declare function defineOpenAPI(config: DefineOpenAPIConfig): DefineOpenAPIReturn
  */
 declare function defineOpenAPIConfig(config: (container: Container) => DefineOpenAPIConfigInput): (container: Container) => OpenAPIObjectConfigV31;
 //#endregion
-//#region app/.server/workflows/extract-blob-metadata.d.ts
-declare function extractBlobMetadata(container: Container): WorkflowDefinition<{
-  blobId: string;
-}, any>;
-//#endregion
-//#region app/.server/workflows/generate-image-variant.d.ts
-declare function generateImageVariant(container: Container): WorkflowDefinition<{
-  blobId: string;
-  transformations: ImageTransformations;
-}, {
-  id: string;
-  createdAt: Date;
-  key: string;
-  metadata: unknown;
-  filename: string;
-  contentType: string | null;
-  serviceName: string;
-  byteSize: number;
-  checksum: string | null;
-}>;
-//#endregion
-//#region app/.server/workflows/generate-preview.d.ts
-/**
- * Generate preview workflow. Creates preview images/thumbnails for PDFs and videos.
- *
- * For videos: Extracts a frame at a specified time (default: 1 second) using FFmpeg
- * For PDFs: Generates thumbnail of first page using pdfjs-dist + canvas
- * For images: Resizes to max 800x800 maintaining aspect ratio
- *
- * Preview is stored as a special variant with "preview" transformation key.
- */
-declare function generatePreview(container: Container): WorkflowDefinition<{
-  blobId: string;
-  timeInSeconds?: number;
-}, {
-  id: string;
-  createdAt: Date;
-  key: string;
-  metadata: unknown;
-  filename: string;
-  contentType: string | null;
-  serviceName: string;
-  byteSize: number;
-  checksum: string | null;
-}>;
-//#endregion
-//#region app/.server/workflows/purge-attachment.d.ts
-/**
- * Purge attachment workflow.
- * Deletes attachments and their associated blobs in the background.
- *
- * This workflow is enqueued by `.purge_later()` calls on attachment objects.
- */
-declare function purgeAttachment(container: Container): WorkflowDefinition<{
-  attachmentIds: string[];
-}, {
-  purgedCount: number;
-}>;
-//#endregion
-//#region app/.server/workflows/purge-unattached-blobs.d.ts
-/**
- * Purge unattached blobs workflow.
- * Cleans up orphaned blobs from failed uploads or abandoned forms.
- */
-declare function purgeUnattachedBlobs(container: Container): WorkflowDefinition<{
-  olderThanHours?: number;
-}, {
-  purgedCount: number;
-}>;
-//#endregion
-//#region app/.server/workflows/send-email.d.ts
-declare function sendEmail(container: Container): WorkflowDefinition<MailerPayload, boolean>;
-declare namespace index_d_exports {
-  export { extractBlobMetadata, generateImageVariant, generatePreview, purgeAttachment, purgeUnattachedBlobs, sendEmail };
-}
-//#endregion
 //#region app/.server/primitives/trpc.d.ts
 /**
  * tRPC context type containing container and session information.
@@ -71686,4 +71744,4 @@ declare const appRouter: _trpc_server0.TRPCBuiltRouter<{
  */
 type AppOSRouter = typeof appRouter;
 //#endregion
-export { type AppOSRouter, type AuthUIFeatures, type ClientToServerEvents, type Container, type HandlerParams, type InferWorkflows, type RealtimeServer, type ServerToClientEvents, type Session, type Socket, type TRPCContext, type TRPCRouterRecord, type User, Workflow, type WorkflowHandle, adminProcedure, appRouter, createProcedure, defineOpenAPI, defineOpenAPIConfig, defineOpenAPIEndpoint, defineScheduledWorkflow, defineWorkflow, middleware, orgMemberProcedure, protectedProcedure, publicProcedure, router, index_d_exports as workflows };
+export { type AppOSLocals, type AppOSRequest, type AppOSRouter, type AuthUIFeatures, type ClientToServerEvents, type Container, type HandlerParams, type InferWorkflows, type RealtimeServer, type ServerToClientEvents, type Session, type Socket, type TRPCContext, type TRPCRouterRecord, type User, Workflow, type WorkflowHandle, adminProcedure, appRouter, createProcedure, defineOpenAPI, defineOpenAPIConfig, defineOpenAPIEndpoint, defineScheduledWorkflow, defineWorkflow, middleware, orgMemberProcedure, protectedProcedure, publicProcedure, router, index_d_exports as workflows };

package/build/exports/{sso-oidc-DMxhsWZu.mjs → sso-oidc-8bB9mMfy.mjs}

@@ -1 +1 @@
-import{n as e}from"./chunk-DQj_Q5LL.mjs";import{E as t,F as n,I as r,L as i,O as ee,P as te,t as a,w as ne}from"./dist-cjs-DBYzdOBR.mjs";import"./dist-cjs-DO06FS0-.mjs";import"./dist-cjs-8ShtoC4L.mjs";import"./dist-cjs-D9iFq61w.mjs";import{n as re,t as ie}from"./dist-cjs-CkmP5Wcr.mjs";import{C as ae,D as oe,E as se,F as ce,I as le,N as ue,O as de,P as fe,R as pe,_ as o,a as me,c as he,d as ge,f as _e,h as ve,i as ye,j as be,l as xe,m as Se,n as Ce,o as we,p as Te,r as Ee,s as De,t as Oe,u as ke,v as Ae}from"./dist-cjs-BY2gcA7W.mjs";import{t as je}from"./dist-cjs-6zIKAlZR.mjs";import{o as Me}from"./client-Cf0k1wnb.mjs";import{t as Ne}from"./package-DfozRyK6.mjs";function Pe(e){return{schemeId:`aws.auth#sigv4`,signingProperties:{name:`sso-oauth`,region:e.region},propertiesExtractor:(e,t)=>({signingProperties:{config:e,context:t}})}}function Fe(e){return{schemeId:`smithy.api#noAuth`}}var s,Ie,Le,Re,ze=e((()=>{o(),s=i(),Ie=async(e,t,n)=>({operation:(0,s.getSmithyContext)(t).operation,region:await(0,s.normalizeProvider)(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),Le=e=>{let t=[];switch(e.operation){case`CreateToken`:t.push(Fe(e));break;default:t.push(Pe(e))}return t},Re=e=>{let t=se(e);return Object.assign(t,{authSchemePreference:(0,s.normalizeProvider)(e.authSchemePreference??[])})}})),Be,Ve,He=e((()=>{Be=e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:`sso-oauth`}),Ve={UseFIPS:{type:`builtInParams`,name:`useFipsEndpoint`},Endpoint:{type:`builtInParams`,name:`endpoint`},Region:{type:`builtInParams`,name:`region`},UseDualStack:{type:`builtInParams`,name:`useDualstackEndpoint`}}})),c,l,u,d,f,p,m,h,g,_,v,y,b,x,S,C,w,T,E,D,Ue,O,k,A,We,Ge,Ke=e((()=>{c=`required`,l=`fn`,u=`argv`,d=`ref`,f=!0,p=`isSet`,m=`booleanEquals`,h=`error`,g=`endpoint`,_=`tree`,v=`PartitionResult`,y=`getAttr`,b={[c]:!1,type:`string`},x={[c]:!0,default:!1,type:`boolean`},S={[d]:`Endpoint`},C={[l]:m,[u]:[{[d]:`UseFIPS`},!0]},w={[l]:m,[u]:[{[d]:`UseDualStack`},!0]},T={},E={[l]:y,[u]:[{[d]:v},`supportsFIPS`]},D={[d]:v},Ue={[l]:m,[u]:[!0,{[l]:y,[u]:[D,`supportsDualStack`]}]},O=[C],k=[w],A=[{[d]:`Region`}],We={version:`1.0`,parameters:{Region:b,UseDualStack:x,UseFIPS:x,Endpoint:b},rules:[{conditions:[{[l]:p,[u]:[S]}],rules:[{conditions:O,error:`Invalid Configuration: FIPS and custom endpoint are not supported`,type:h},{conditions:k,error:`Invalid Configuration: Dualstack and custom endpoint are not supported`,type:h},{endpoint:{url:S,properties:T,headers:T},type:g}],type:_},{conditions:[{[l]:p,[u]:A}],rules:[{conditions:[{[l]:`aws.partition`,[u]:A,assign:v}],rules:[{conditions:[C,w],rules:[{conditions:[{[l]:m,[u]:[f,E]},Ue],rules:[{endpoint:{url:`https://oidc-fips.{Region}.{PartitionResult#dualStackDnsSuffix}`,properties:T,headers:T},type:g}],type:_},{error:`FIPS and DualStack are enabled, but this partition does not support one or both`,type:h}],type:_},{conditions:O,rules:[{conditions:[{[l]:m,[u]:[E,f]}],rules:[{conditions:[{[l]:`stringEquals`,[u]:[{[l]:y,[u]:[D,`name`]},`aws-us-gov`]}],endpoint:{url:`https://oidc.{Region}.amazonaws.com`,properties:T,headers:T},type:g},{endpoint:{url:`https://oidc-fips.{Region}.{PartitionResult#dnsSuffix}`,properties:T,headers:T},type:g}],type:_},{error:`FIPS is enabled but this partition does not support FIPS`,type:h}],type:_},{conditions:k,rules:[{conditions:[Ue],rules:[{endpoint:{url:`https://oidc.{Region}.{PartitionResult#dualStackDnsSuffix}`,properties:T,headers:T},type:g}],type:_},{error:`DualStack is enabled but this partition does not support DualStack`,type:h}],type:_},{endpoint:{url:`https://oidc.{Region}.{PartitionResult#dnsSuffix}`,properties:T,headers:T},type:g}],type:_}],type:_},{error:`Invalid Configuration: Missing Region`,type:h}]},Ge=We})),qe,j,Je,Ye,Xe=e((()=>{qe=ge(),j=_e(),Ke(),Je=new j.EndpointCache({size:50,params:[`Endpoint`,`Region`,`UseDualStack`,`UseFIPS`]}),Ye=(e,t={})=>Je.get(e,()=>(0,j.resolveEndpoint)(Ge,{endpointParams:e,logger:t.logger})),j.customEndpointFunctions.aws=qe.awsEndpointFunctions})),Ze,Qe,M,N,$e,et=e((()=>{o(),Ae(),ue(),Ze=a(),Qe=ie(),M=n(),N=je(),ze(),Xe(),$e=e=>({apiVersion:`2019-06-10`,base64Decoder:e?.base64Decoder??M.fromBase64,base64Encoder:e?.base64Encoder??M.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Ye,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Le,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:`aws.auth#sigv4`,identityProvider:e=>e.getIdentityProvider(`aws.auth#sigv4`),signer:new de},{schemeId:`smithy.api#noAuth`,identityProvider:e=>e.getIdentityProvider(`smithy.api#noAuth`)||(async()=>({})),signer:new fe}],logger:e?.logger??new Ze.NoOpLogger,protocol:e?.protocol??new ae({defaultNamespace:`com.amazonaws.ssooidc`}),serviceId:e?.serviceId??`SSO OIDC`,urlParser:e?.urlParser??Qe.parseUrl,utf8Decoder:e?.utf8Decoder??N.fromUtf8,utf8Encoder:e?.utf8Encoder??N.toUtf8})})),P,F,tt,I,L,R,nt,rt,it,at,ot,st,ct=e((()=>{o(),P=me(),F=xe(),tt=ye(),I=we(),L=re(),R=te(),nt=Ee(),rt=De(),et(),it=a(),at=Ce(),ot=a(),st=e=>{(0,ot.emitWarningIfUnsupportedVersion)(process.version);let t=(0,at.resolveDefaultsModeConfig)(e),n=()=>t().then(it.loadConfigsForDefaultMode),r=$e(e);Me(process.version);let i={profile:e?.profile,logger:r.logger};return{...r,...e,runtime:`node`,defaultsMode:t,authSchemePreference:e?.authSchemePreference??(0,L.loadConfig)(oe,i),bodyLengthChecker:e?.bodyLengthChecker??nt.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,P.createDefaultUserAgentProvider)({serviceId:r.serviceId,clientVersion:Ne}),maxAttempts:e?.maxAttempts??(0,L.loadConfig)(I.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??(0,L.loadConfig)(F.NODE_REGION_CONFIG_OPTIONS,{...F.NODE_REGION_CONFIG_FILE_OPTIONS,...i}),requestHandler:R.NodeHttpHandler.create(e?.requestHandler??n),retryMode:e?.retryMode??(0,L.loadConfig)({...I.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await n()).retryMode||rt.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??tt.Hash.bind(null,`sha256`),streamCollector:e?.streamCollector??R.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??(0,L.loadConfig)(F.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,i),useFipsEndpoint:e?.useFipsEndpoint??(0,L.loadConfig)(F.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,i),userAgentAppId:e?.userAgentAppId??(0,L.loadConfig)(P.NODE_APP_ID_CONFIG_OPTIONS,i)}}})),lt,ut,dt=e((()=>{lt=e=>{let t=e.httpAuthSchemes,n=e.httpAuthSchemeProvider,r=e.credentials;return{setHttpAuthScheme(e){let n=t.findIndex(t=>t.schemeId===e.schemeId);n===-1?t.push(e):t.splice(n,1,e)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(e){n=e},httpAuthSchemeProvider(){return n},setCredentials(e){r=e},credentials(){return r}}},ut=e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()})})),z,B,V,ft,pt=e((()=>{z=Oe(),B=r(),V=a(),dt(),ft=(e,t)=>{let n=Object.assign((0,z.getAwsRegionExtensionConfiguration)(e),(0,V.getDefaultExtensionConfiguration)(e),(0,B.getHttpHandlerExtensionConfiguration)(e),lt(e));return t.forEach(e=>e.configure(n)),Object.assign(e,(0,z.resolveAwsRegionExtensionConfiguration)(n),(0,V.resolveDefaultRuntimeConfig)(n),(0,B.resolveHttpHandlerRuntimeConfig)(n),ut(n))}})),H,mt,ht,U,gt,_t,vt,W,yt,G,bt=e((()=>{H=ve(),mt=Se(),ht=Te(),U=ke(),gt=xe(),ue(),ne(),_t=he(),vt=be(),W=we(),yt=a(),ze(),He(),ct(),pt(),G=class extends yt.Client{config;constructor(...[e]){let t=st(e||{});super(t),this.initConfig=t,this.config=ft(Re((0,vt.resolveEndpointConfig)((0,H.resolveHostHeaderConfig)((0,gt.resolveRegionConfig)((0,W.resolveRetryConfig)((0,U.resolveUserAgentConfig)(Be(t))))))),e?.extensions||[]),this.middlewareStack.use(ee(this.config)),this.middlewareStack.use((0,U.getUserAgentPlugin)(this.config)),this.middlewareStack.use((0,W.getRetryPlugin)(this.config)),this.middlewareStack.use((0,_t.getContentLengthPlugin)(this.config)),this.middlewareStack.use((0,H.getHostHeaderPlugin)(this.config)),this.middlewareStack.use((0,mt.getLoggerPlugin)(this.config)),this.middlewareStack.use((0,ht.getRecursionDetectionPlugin)(this.config)),this.middlewareStack.use(pe(this.config,{httpAuthSchemeParametersProvider:Ie,identityProviderConfigProvider:async e=>new ce({"aws.auth#sigv4":e.credentials})})),this.middlewareStack.use(le(this.config))}destroy(){super.destroy()}}})),xt,K,St=e((()=>{xt=a(),K=class e extends xt.ServiceException{constructor(t){super(t),Object.setPrototypeOf(this,e.prototype)}}})),Ct,wt,Tt,Et,Dt,Ot,kt,At,jt,Mt,Nt,Pt=e((()=>{St(),Ct=class e extends K{name=`AccessDeniedException`;$fault=`client`;error;reason;error_description;constructor(t){super({name:`AccessDeniedException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.reason=t.reason,this.error_description=t.error_description}},wt=class e extends K{name=`AuthorizationPendingException`;$fault=`client`;error;error_description;constructor(t){super({name:`AuthorizationPendingException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},Tt=class e extends K{name=`ExpiredTokenException`;$fault=`client`;error;error_description;constructor(t){super({name:`ExpiredTokenException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},Et=class e extends K{name=`InternalServerException`;$fault=`server`;error;error_description;constructor(t){super({name:`InternalServerException`,$fault:`server`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},Dt=class e extends K{name=`InvalidClientException`;$fault=`client`;error;error_description;constructor(t){super({name:`InvalidClientException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},Ot=class e extends K{name=`InvalidGrantException`;$fault=`client`;error;error_description;constructor(t){super({name:`InvalidGrantException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},kt=class e extends K{name=`InvalidRequestException`;$fault=`client`;error;reason;error_description;constructor(t){super({name:`InvalidRequestException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.reason=t.reason,this.error_description=t.error_description}},At=class e extends K{name=`InvalidScopeException`;$fault=`client`;error;error_description;constructor(t){super({name:`InvalidScopeException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},jt=class e extends K{name=`SlowDownException`;$fault=`client`;error;error_description;constructor(t){super({name:`SlowDownException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},Mt=class e extends K{name=`UnauthorizedClientException`;$fault=`client`;error;error_description;constructor(t){super({name:`UnauthorizedClientException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},Nt=class e extends K{name=`UnsupportedGrantTypeException`;$fault=`client`;error;error_description;constructor(t){super({name:`UnsupportedGrantTypeException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}}})),Ft=e((()=>{Pt()})),It,Lt,Rt,zt,Bt,Vt,Ht,Ut,Wt,Gt,Kt,qt,Jt,Yt,Xt,Zt,Qt,$t,en,tn,q,nn,rn,an,on,sn,J,cn,Y,ln,un,X,dn,Z,Q,fn,pn,mn,hn,gn,$,_n,vn,yn,bn,xn,Sn,Cn,wn,Tn,En,Dn,On,kn,An,jn,Mn,Nn,Pn,Fn,In,Ln=e((()=>{ne(),Ft(),St(),It=`AccessDeniedException`,Lt=`AuthorizationPendingException`,Rt=`AccessToken`,zt=`ClientSecret`,Bt=`CreateToken`,Vt=`CreateTokenRequest`,Ht=`CreateTokenResponse`,Ut=`CodeVerifier`,Wt=`ExpiredTokenException`,Gt=`InvalidClientException`,Kt=`InvalidGrantException`,qt=`InvalidRequestException`,Jt=`InternalServerException`,Yt=`InvalidScopeException`,Xt=`IdToken`,Zt=`RefreshToken`,Qt=`SlowDownException`,$t=`UnauthorizedClientException`,en=`UnsupportedGrantTypeException`,tn=`accessToken`,q=`client`,nn=`clientId`,rn=`clientSecret`,an=`codeVerifier`,on=`code`,sn=`deviceCode`,J=`error`,cn=`expiresIn`,Y=`error_description`,ln=`grantType`,un=`http`,X=`httpError`,dn=`idToken`,Z=`reason`,Q=`refreshToken`,fn=`redirectUri`,pn=`scope`,mn=`server`,hn=`smithy.ts.sdk.synthetic.com.amazonaws.ssooidc`,gn=`tokenType`,$=`com.amazonaws.ssooidc`,_n=[0,$,Rt,8,0],vn=[0,$,zt,8,0],yn=[0,$,Ut,8,0],bn=[0,$,Xt,8,0],xn=[0,$,Zt,8,0],Sn=[-3,$,It,{[J]:q,[X]:400},[J,Z,Y],[0,0,0]],t.for($).registerError(Sn,Ct),Cn=[-3,$,Lt,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(Cn,wt),wn=[3,$,Vt,0,[nn,rn,ln,sn,on,Q,pn,fn,an],[0,[()=>vn,0],0,0,0,[()=>xn,0],64,0,[()=>yn,0]]],Tn=[3,$,Ht,0,[tn,gn,cn,Q,dn],[[()=>_n,0],0,1,[()=>xn,0],[()=>bn,0]]],En=[-3,$,Wt,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(En,Tt),Dn=[-3,$,Jt,{[J]:mn,[X]:500},[J,Y],[0,0]],t.for($).registerError(Dn,Et),On=[-3,$,Gt,{[J]:q,[X]:401},[J,Y],[0,0]],t.for($).registerError(On,Dt),kn=[-3,$,Kt,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(kn,Ot),An=[-3,$,qt,{[J]:q,[X]:400},[J,Z,Y],[0,0,0]],t.for($).registerError(An,kt),jn=[-3,$,Yt,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(jn,At),Mn=[-3,$,Qt,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(Mn,jt),Nn=[-3,$,$t,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(Nn,Mt),Pn=[-3,$,en,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(Pn,Nt),Fn=[-3,hn,`SSOOIDCServiceException`,0,[],[]],t.for(hn).registerError(Fn,K),In=[9,$,Bt,{[un]:[`POST`,`/token`,200]},()=>wn,()=>Tn]})),Rn,zn,Bn,Vn=e((()=>{Rn=be(),zn=a(),He(),Ln(),Bn=class extends zn.Command.classBuilder().ep(Ve).m(function(e,t,n,r){return[(0,Rn.getEndpointPlugin)(n,e.getEndpointParameterInstructions())]}).s(`AWSSSOOIDCService`,`CreateToken`,{}).n(`SSOOIDCClient`,`CreateTokenCommand`).sc(In).build(){}})),Hn,Un,Wn,Gn=e((()=>{Hn=a(),Vn(),bt(),Un={CreateTokenCommand:Bn},Wn=class extends G{},(0,Hn.createAggregatedClient)(Un,Wn)})),Kn=e((()=>{Vn()}));e((()=>{bt(),Gn(),Kn(),Ft()}))();export{Bn as CreateTokenCommand,G as SSOOIDCClient};
+import{n as e}from"./chunk-DQj_Q5LL.mjs";import{E as t,F as n,I as r,L as i,O as ee,P as te,t as a,w as ne}from"./dist-cjs-DBYzdOBR.mjs";import"./dist-cjs-DO06FS0-.mjs";import"./dist-cjs-8ShtoC4L.mjs";import"./dist-cjs-D9iFq61w.mjs";import{n as re,t as ie}from"./dist-cjs-CkmP5Wcr.mjs";import{C as ae,D as oe,E as se,F as ce,I as le,N as ue,O as de,P as fe,R as pe,_ as o,a as me,c as he,d as ge,f as _e,h as ve,i as ye,j as be,l as xe,m as Se,n as Ce,o as we,p as Te,r as Ee,s as De,t as Oe,u as ke,v as Ae}from"./dist-cjs-BRgcRUXD.mjs";import{t as je}from"./dist-cjs-6zIKAlZR.mjs";import{o as Me}from"./client-Cf0k1wnb.mjs";import{t as Ne}from"./package-DfozRyK6.mjs";function Pe(e){return{schemeId:`aws.auth#sigv4`,signingProperties:{name:`sso-oauth`,region:e.region},propertiesExtractor:(e,t)=>({signingProperties:{config:e,context:t}})}}function Fe(e){return{schemeId:`smithy.api#noAuth`}}var s,Ie,Le,Re,ze=e((()=>{o(),s=i(),Ie=async(e,t,n)=>({operation:(0,s.getSmithyContext)(t).operation,region:await(0,s.normalizeProvider)(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),Le=e=>{let t=[];switch(e.operation){case`CreateToken`:t.push(Fe(e));break;default:t.push(Pe(e))}return t},Re=e=>{let t=se(e);return Object.assign(t,{authSchemePreference:(0,s.normalizeProvider)(e.authSchemePreference??[])})}})),Be,Ve,He=e((()=>{Be=e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:`sso-oauth`}),Ve={UseFIPS:{type:`builtInParams`,name:`useFipsEndpoint`},Endpoint:{type:`builtInParams`,name:`endpoint`},Region:{type:`builtInParams`,name:`region`},UseDualStack:{type:`builtInParams`,name:`useDualstackEndpoint`}}})),c,l,u,d,f,p,m,h,g,_,v,y,b,x,S,C,w,T,E,D,Ue,O,k,A,We,Ge,Ke=e((()=>{c=`required`,l=`fn`,u=`argv`,d=`ref`,f=!0,p=`isSet`,m=`booleanEquals`,h=`error`,g=`endpoint`,_=`tree`,v=`PartitionResult`,y=`getAttr`,b={[c]:!1,type:`string`},x={[c]:!0,default:!1,type:`boolean`},S={[d]:`Endpoint`},C={[l]:m,[u]:[{[d]:`UseFIPS`},!0]},w={[l]:m,[u]:[{[d]:`UseDualStack`},!0]},T={},E={[l]:y,[u]:[{[d]:v},`supportsFIPS`]},D={[d]:v},Ue={[l]:m,[u]:[!0,{[l]:y,[u]:[D,`supportsDualStack`]}]},O=[C],k=[w],A=[{[d]:`Region`}],We={version:`1.0`,parameters:{Region:b,UseDualStack:x,UseFIPS:x,Endpoint:b},rules:[{conditions:[{[l]:p,[u]:[S]}],rules:[{conditions:O,error:`Invalid Configuration: FIPS and custom endpoint are not supported`,type:h},{conditions:k,error:`Invalid Configuration: Dualstack and custom endpoint are not supported`,type:h},{endpoint:{url:S,properties:T,headers:T},type:g}],type:_},{conditions:[{[l]:p,[u]:A}],rules:[{conditions:[{[l]:`aws.partition`,[u]:A,assign:v}],rules:[{conditions:[C,w],rules:[{conditions:[{[l]:m,[u]:[f,E]},Ue],rules:[{endpoint:{url:`https://oidc-fips.{Region}.{PartitionResult#dualStackDnsSuffix}`,properties:T,headers:T},type:g}],type:_},{error:`FIPS and DualStack are enabled, but this partition does not support one or both`,type:h}],type:_},{conditions:O,rules:[{conditions:[{[l]:m,[u]:[E,f]}],rules:[{conditions:[{[l]:`stringEquals`,[u]:[{[l]:y,[u]:[D,`name`]},`aws-us-gov`]}],endpoint:{url:`https://oidc.{Region}.amazonaws.com`,properties:T,headers:T},type:g},{endpoint:{url:`https://oidc-fips.{Region}.{PartitionResult#dnsSuffix}`,properties:T,headers:T},type:g}],type:_},{error:`FIPS is enabled but this partition does not support FIPS`,type:h}],type:_},{conditions:k,rules:[{conditions:[Ue],rules:[{endpoint:{url:`https://oidc.{Region}.{PartitionResult#dualStackDnsSuffix}`,properties:T,headers:T},type:g}],type:_},{error:`DualStack is enabled but this partition does not support DualStack`,type:h}],type:_},{endpoint:{url:`https://oidc.{Region}.{PartitionResult#dnsSuffix}`,properties:T,headers:T},type:g}],type:_}],type:_},{error:`Invalid Configuration: Missing Region`,type:h}]},Ge=We})),qe,j,Je,Ye,Xe=e((()=>{qe=ge(),j=_e(),Ke(),Je=new j.EndpointCache({size:50,params:[`Endpoint`,`Region`,`UseDualStack`,`UseFIPS`]}),Ye=(e,t={})=>Je.get(e,()=>(0,j.resolveEndpoint)(Ge,{endpointParams:e,logger:t.logger})),j.customEndpointFunctions.aws=qe.awsEndpointFunctions})),Ze,Qe,M,N,$e,et=e((()=>{o(),Ae(),ue(),Ze=a(),Qe=ie(),M=n(),N=je(),ze(),Xe(),$e=e=>({apiVersion:`2019-06-10`,base64Decoder:e?.base64Decoder??M.fromBase64,base64Encoder:e?.base64Encoder??M.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Ye,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Le,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:`aws.auth#sigv4`,identityProvider:e=>e.getIdentityProvider(`aws.auth#sigv4`),signer:new de},{schemeId:`smithy.api#noAuth`,identityProvider:e=>e.getIdentityProvider(`smithy.api#noAuth`)||(async()=>({})),signer:new fe}],logger:e?.logger??new Ze.NoOpLogger,protocol:e?.protocol??new ae({defaultNamespace:`com.amazonaws.ssooidc`}),serviceId:e?.serviceId??`SSO OIDC`,urlParser:e?.urlParser??Qe.parseUrl,utf8Decoder:e?.utf8Decoder??N.fromUtf8,utf8Encoder:e?.utf8Encoder??N.toUtf8})})),P,F,tt,I,L,R,nt,rt,it,at,ot,st,ct=e((()=>{o(),P=me(),F=xe(),tt=ye(),I=we(),L=re(),R=te(),nt=Ee(),rt=De(),et(),it=a(),at=Ce(),ot=a(),st=e=>{(0,ot.emitWarningIfUnsupportedVersion)(process.version);let t=(0,at.resolveDefaultsModeConfig)(e),n=()=>t().then(it.loadConfigsForDefaultMode),r=$e(e);Me(process.version);let i={profile:e?.profile,logger:r.logger};return{...r,...e,runtime:`node`,defaultsMode:t,authSchemePreference:e?.authSchemePreference??(0,L.loadConfig)(oe,i),bodyLengthChecker:e?.bodyLengthChecker??nt.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,P.createDefaultUserAgentProvider)({serviceId:r.serviceId,clientVersion:Ne}),maxAttempts:e?.maxAttempts??(0,L.loadConfig)(I.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??(0,L.loadConfig)(F.NODE_REGION_CONFIG_OPTIONS,{...F.NODE_REGION_CONFIG_FILE_OPTIONS,...i}),requestHandler:R.NodeHttpHandler.create(e?.requestHandler??n),retryMode:e?.retryMode??(0,L.loadConfig)({...I.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await n()).retryMode||rt.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??tt.Hash.bind(null,`sha256`),streamCollector:e?.streamCollector??R.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??(0,L.loadConfig)(F.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,i),useFipsEndpoint:e?.useFipsEndpoint??(0,L.loadConfig)(F.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,i),userAgentAppId:e?.userAgentAppId??(0,L.loadConfig)(P.NODE_APP_ID_CONFIG_OPTIONS,i)}}})),lt,ut,dt=e((()=>{lt=e=>{let t=e.httpAuthSchemes,n=e.httpAuthSchemeProvider,r=e.credentials;return{setHttpAuthScheme(e){let n=t.findIndex(t=>t.schemeId===e.schemeId);n===-1?t.push(e):t.splice(n,1,e)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(e){n=e},httpAuthSchemeProvider(){return n},setCredentials(e){r=e},credentials(){return r}}},ut=e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()})})),z,B,V,ft,pt=e((()=>{z=Oe(),B=r(),V=a(),dt(),ft=(e,t)=>{let n=Object.assign((0,z.getAwsRegionExtensionConfiguration)(e),(0,V.getDefaultExtensionConfiguration)(e),(0,B.getHttpHandlerExtensionConfiguration)(e),lt(e));return t.forEach(e=>e.configure(n)),Object.assign(e,(0,z.resolveAwsRegionExtensionConfiguration)(n),(0,V.resolveDefaultRuntimeConfig)(n),(0,B.resolveHttpHandlerRuntimeConfig)(n),ut(n))}})),H,mt,ht,U,gt,_t,vt,W,yt,G,bt=e((()=>{H=ve(),mt=Se(),ht=Te(),U=ke(),gt=xe(),ue(),ne(),_t=he(),vt=be(),W=we(),yt=a(),ze(),He(),ct(),pt(),G=class extends yt.Client{config;constructor(...[e]){let t=st(e||{});super(t),this.initConfig=t,this.config=ft(Re((0,vt.resolveEndpointConfig)((0,H.resolveHostHeaderConfig)((0,gt.resolveRegionConfig)((0,W.resolveRetryConfig)((0,U.resolveUserAgentConfig)(Be(t))))))),e?.extensions||[]),this.middlewareStack.use(ee(this.config)),this.middlewareStack.use((0,U.getUserAgentPlugin)(this.config)),this.middlewareStack.use((0,W.getRetryPlugin)(this.config)),this.middlewareStack.use((0,_t.getContentLengthPlugin)(this.config)),this.middlewareStack.use((0,H.getHostHeaderPlugin)(this.config)),this.middlewareStack.use((0,mt.getLoggerPlugin)(this.config)),this.middlewareStack.use((0,ht.getRecursionDetectionPlugin)(this.config)),this.middlewareStack.use(pe(this.config,{httpAuthSchemeParametersProvider:Ie,identityProviderConfigProvider:async e=>new ce({"aws.auth#sigv4":e.credentials})})),this.middlewareStack.use(le(this.config))}destroy(){super.destroy()}}})),xt,K,St=e((()=>{xt=a(),K=class e extends xt.ServiceException{constructor(t){super(t),Object.setPrototypeOf(this,e.prototype)}}})),Ct,wt,Tt,Et,Dt,Ot,kt,At,jt,Mt,Nt,Pt=e((()=>{St(),Ct=class e extends K{name=`AccessDeniedException`;$fault=`client`;error;reason;error_description;constructor(t){super({name:`AccessDeniedException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.reason=t.reason,this.error_description=t.error_description}},wt=class e extends K{name=`AuthorizationPendingException`;$fault=`client`;error;error_description;constructor(t){super({name:`AuthorizationPendingException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},Tt=class e extends K{name=`ExpiredTokenException`;$fault=`client`;error;error_description;constructor(t){super({name:`ExpiredTokenException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},Et=class e extends K{name=`InternalServerException`;$fault=`server`;error;error_description;constructor(t){super({name:`InternalServerException`,$fault:`server`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},Dt=class e extends K{name=`InvalidClientException`;$fault=`client`;error;error_description;constructor(t){super({name:`InvalidClientException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},Ot=class e extends K{name=`InvalidGrantException`;$fault=`client`;error;error_description;constructor(t){super({name:`InvalidGrantException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},kt=class e extends K{name=`InvalidRequestException`;$fault=`client`;error;reason;error_description;constructor(t){super({name:`InvalidRequestException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.reason=t.reason,this.error_description=t.error_description}},At=class e extends K{name=`InvalidScopeException`;$fault=`client`;error;error_description;constructor(t){super({name:`InvalidScopeException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},jt=class e extends K{name=`SlowDownException`;$fault=`client`;error;error_description;constructor(t){super({name:`SlowDownException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},Mt=class e extends K{name=`UnauthorizedClientException`;$fault=`client`;error;error_description;constructor(t){super({name:`UnauthorizedClientException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},Nt=class e extends K{name=`UnsupportedGrantTypeException`;$fault=`client`;error;error_description;constructor(t){super({name:`UnsupportedGrantTypeException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}}})),Ft=e((()=>{Pt()})),It,Lt,Rt,zt,Bt,Vt,Ht,Ut,Wt,Gt,Kt,qt,Jt,Yt,Xt,Zt,Qt,$t,en,tn,q,nn,rn,an,on,sn,J,cn,Y,ln,un,X,dn,Z,Q,fn,pn,mn,hn,gn,$,_n,vn,yn,bn,xn,Sn,Cn,wn,Tn,En,Dn,On,kn,An,jn,Mn,Nn,Pn,Fn,In,Ln=e((()=>{ne(),Ft(),St(),It=`AccessDeniedException`,Lt=`AuthorizationPendingException`,Rt=`AccessToken`,zt=`ClientSecret`,Bt=`CreateToken`,Vt=`CreateTokenRequest`,Ht=`CreateTokenResponse`,Ut=`CodeVerifier`,Wt=`ExpiredTokenException`,Gt=`InvalidClientException`,Kt=`InvalidGrantException`,qt=`InvalidRequestException`,Jt=`InternalServerException`,Yt=`InvalidScopeException`,Xt=`IdToken`,Zt=`RefreshToken`,Qt=`SlowDownException`,$t=`UnauthorizedClientException`,en=`UnsupportedGrantTypeException`,tn=`accessToken`,q=`client`,nn=`clientId`,rn=`clientSecret`,an=`codeVerifier`,on=`code`,sn=`deviceCode`,J=`error`,cn=`expiresIn`,Y=`error_description`,ln=`grantType`,un=`http`,X=`httpError`,dn=`idToken`,Z=`reason`,Q=`refreshToken`,fn=`redirectUri`,pn=`scope`,mn=`server`,hn=`smithy.ts.sdk.synthetic.com.amazonaws.ssooidc`,gn=`tokenType`,$=`com.amazonaws.ssooidc`,_n=[0,$,Rt,8,0],vn=[0,$,zt,8,0],yn=[0,$,Ut,8,0],bn=[0,$,Xt,8,0],xn=[0,$,Zt,8,0],Sn=[-3,$,It,{[J]:q,[X]:400},[J,Z,Y],[0,0,0]],t.for($).registerError(Sn,Ct),Cn=[-3,$,Lt,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(Cn,wt),wn=[3,$,Vt,0,[nn,rn,ln,sn,on,Q,pn,fn,an],[0,[()=>vn,0],0,0,0,[()=>xn,0],64,0,[()=>yn,0]]],Tn=[3,$,Ht,0,[tn,gn,cn,Q,dn],[[()=>_n,0],0,1,[()=>xn,0],[()=>bn,0]]],En=[-3,$,Wt,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(En,Tt),Dn=[-3,$,Jt,{[J]:mn,[X]:500},[J,Y],[0,0]],t.for($).registerError(Dn,Et),On=[-3,$,Gt,{[J]:q,[X]:401},[J,Y],[0,0]],t.for($).registerError(On,Dt),kn=[-3,$,Kt,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(kn,Ot),An=[-3,$,qt,{[J]:q,[X]:400},[J,Z,Y],[0,0,0]],t.for($).registerError(An,kt),jn=[-3,$,Yt,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(jn,At),Mn=[-3,$,Qt,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(Mn,jt),Nn=[-3,$,$t,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(Nn,Mt),Pn=[-3,$,en,{[J]:q,[X]:400},[J,Y],[0,0]],t.for($).registerError(Pn,Nt),Fn=[-3,hn,`SSOOIDCServiceException`,0,[],[]],t.for(hn).registerError(Fn,K),In=[9,$,Bt,{[un]:[`POST`,`/token`,200]},()=>wn,()=>Tn]})),Rn,zn,Bn,Vn=e((()=>{Rn=be(),zn=a(),He(),Ln(),Bn=class extends zn.Command.classBuilder().ep(Ve).m(function(e,t,n,r){return[(0,Rn.getEndpointPlugin)(n,e.getEndpointParameterInstructions())]}).s(`AWSSSOOIDCService`,`CreateToken`,{}).n(`SSOOIDCClient`,`CreateTokenCommand`).sc(In).build(){}})),Hn,Un,Wn,Gn=e((()=>{Hn=a(),Vn(),bt(),Un={CreateTokenCommand:Bn},Wn=class extends G{},(0,Hn.createAggregatedClient)(Un,Wn)})),Kn=e((()=>{Vn()}));e((()=>{bt(),Gn(),Kn(),Ft()}))();export{Bn as CreateTokenCommand,G as SSOOIDCClient};

package/build/exports/{sts-CqD3bswo.mjs → sts-B2bNRtll.mjs}

@@ -1 +1 @@
-import{n as e,r as t}from"./chunk-DQj_Q5LL.mjs";import{F as n,I as r,L as i,P as a,t as o}from"./dist-cjs-DBYzdOBR.mjs";import{n as s,t as c}from"./dist-cjs-CkmP5Wcr.mjs";import{D as l,E as ee,F as te,I as ne,L as re,N as ie,O as ae,P as oe,R as se,_ as ce,a as le,b as ue,c as de,d as fe,f as pe,h as me,i as he,j as ge,l as _e,m as ve,n as ye,o as be,p as xe,r as Se,s as Ce,t as we,u as Te,x as Ee}from"./dist-cjs-BY2gcA7W.mjs";import{t as De}from"./dist-cjs-6zIKAlZR.mjs";import{a as Oe,n as ke,o as Ae}from"./client-Cf0k1wnb.mjs";import{t as je}from"./package-DfozRyK6.mjs";function Me(e){return{schemeId:`aws.auth#sigv4`,signingProperties:{name:`sts`,region:e.region},propertiesExtractor:(e,t)=>({signingProperties:{config:e,context:t}})}}function Ne(e){return{schemeId:`smithy.api#noAuth`}}var u,Pe,Fe,Ie,Le,Re=e((()=>{ce(),u=i(),k(),Pe=async(e,t,n)=>({operation:(0,u.getSmithyContext)(t).operation,region:await(0,u.normalizeProvider)(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),Fe=e=>{let t=[];switch(e.operation){case`AssumeRoleWithWebIdentity`:t.push(Ne(e));break;default:t.push(Me(e))}return t},Ie=e=>Object.assign(e,{stsClientCtor:O}),Le=e=>{let t=ee(Ie(e));return Object.assign(t,{authSchemePreference:(0,u.normalizeProvider)(e.authSchemePreference??[])})}})),ze,Be,Ve=e((()=>{ze=e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,useGlobalEndpoint:e.useGlobalEndpoint??!1,defaultSigningName:`sts`}),Be={UseGlobalEndpoint:{type:`builtInParams`,name:`useGlobalEndpoint`},UseFIPS:{type:`builtInParams`,name:`useFipsEndpoint`},Endpoint:{type:`builtInParams`,name:`endpoint`},Region:{type:`builtInParams`,name:`region`},UseDualStack:{type:`builtInParams`,name:`useDualstackEndpoint`}}})),He,d,f,p,m,Ue,h,g,_,We,Ge,Ke,v,qe,y,b,Je,Ye,Xe,Ze,Qe,x,$e,et,tt,S,C,nt,rt,it,at,ot,st,ct,lt,ut,dt,ft,pt=e((()=>{He=`required`,d=`type`,f=`fn`,p=`argv`,m=`ref`,Ue=!1,h=!0,g=`booleanEquals`,_=`stringEquals`,We=`sigv4`,Ge=`sts`,Ke=`us-east-1`,v=`endpoint`,qe=`https://sts.{Region}.{PartitionResult#dnsSuffix}`,y=`tree`,b=`error`,Je=`getAttr`,Ye={[He]:!1,[d]:`string`},Xe={[He]:!0,default:!1,[d]:`boolean`},Ze={[m]:`Endpoint`},Qe={[f]:`isSet`,[p]:[{[m]:`Region`}]},x={[m]:`Region`},$e={[f]:`aws.partition`,[p]:[x],assign:`PartitionResult`},et={[m]:`UseFIPS`},tt={[m]:`UseDualStack`},S={url:`https://sts.amazonaws.com`,properties:{authSchemes:[{name:We,signingName:Ge,signingRegion:Ke}]},headers:{}},C={},nt={conditions:[{[f]:_,[p]:[x,`aws-global`]}],[v]:S,[d]:v},rt={[f]:g,[p]:[et,!0]},it={[f]:g,[p]:[tt,!0]},at={[f]:Je,[p]:[{[m]:`PartitionResult`},`supportsFIPS`]},ot={[m]:`PartitionResult`},st={[f]:g,[p]:[!0,{[f]:Je,[p]:[ot,`supportsDualStack`]}]},ct=[{[f]:`isSet`,[p]:[Ze]}],lt=[rt],ut=[it],dt={version:`1.0`,parameters:{Region:Ye,UseDualStack:Xe,UseFIPS:Xe,Endpoint:Ye,UseGlobalEndpoint:Xe},rules:[{conditions:[{[f]:g,[p]:[{[m]:`UseGlobalEndpoint`},h]},{[f]:`not`,[p]:ct},Qe,$e,{[f]:g,[p]:[et,Ue]},{[f]:g,[p]:[tt,Ue]}],rules:[{conditions:[{[f]:_,[p]:[x,`ap-northeast-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`ap-south-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`ap-southeast-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`ap-southeast-2`]}],endpoint:S,[d]:v},nt,{conditions:[{[f]:_,[p]:[x,`ca-central-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`eu-central-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`eu-north-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`eu-west-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`eu-west-2`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`eu-west-3`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`sa-east-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,Ke]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`us-east-2`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`us-west-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`us-west-2`]}],endpoint:S,[d]:v},{endpoint:{url:qe,properties:{authSchemes:[{name:We,signingName:Ge,signingRegion:`{Region}`}]},headers:C},[d]:v}],[d]:y},{conditions:ct,rules:[{conditions:lt,error:`Invalid Configuration: FIPS and custom endpoint are not supported`,[d]:b},{conditions:ut,error:`Invalid Configuration: Dualstack and custom endpoint are not supported`,[d]:b},{endpoint:{url:Ze,properties:C,headers:C},[d]:v}],[d]:y},{conditions:[Qe],rules:[{conditions:[$e],rules:[{conditions:[rt,it],rules:[{conditions:[{[f]:g,[p]:[h,at]},st],rules:[{endpoint:{url:`https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}`,properties:C,headers:C},[d]:v}],[d]:y},{error:`FIPS and DualStack are enabled, but this partition does not support one or both`,[d]:b}],[d]:y},{conditions:lt,rules:[{conditions:[{[f]:g,[p]:[at,h]}],rules:[{conditions:[{[f]:_,[p]:[{[f]:Je,[p]:[ot,`name`]},`aws-us-gov`]}],endpoint:{url:`https://sts.{Region}.amazonaws.com`,properties:C,headers:C},[d]:v},{endpoint:{url:`https://sts-fips.{Region}.{PartitionResult#dnsSuffix}`,properties:C,headers:C},[d]:v}],[d]:y},{error:`FIPS is enabled but this partition does not support FIPS`,[d]:b}],[d]:y},{conditions:ut,rules:[{conditions:[st],rules:[{endpoint:{url:`https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}`,properties:C,headers:C},[d]:v}],[d]:y},{error:`DualStack is enabled but this partition does not support DualStack`,[d]:b}],[d]:y},nt,{endpoint:{url:qe,properties:C,headers:C},[d]:v}],[d]:y}],[d]:y},{error:`Invalid Configuration: Missing Region`,[d]:b}]},ft=dt})),mt,w,ht,gt,_t=e((()=>{mt=fe(),w=pe(),pt(),ht=new w.EndpointCache({size:50,params:[`Endpoint`,`Region`,`UseDualStack`,`UseFIPS`,`UseGlobalEndpoint`]}),gt=(e,t={})=>ht.get(e,()=>(0,w.resolveEndpoint)(ft,{endpointParams:e,logger:t.logger})),w.customEndpointFunctions.aws=mt.awsEndpointFunctions})),vt,yt,bt,xt,St,Ct=e((()=>{ce(),ie(),vt=o(),yt=c(),bt=n(),xt=De(),Re(),_t(),St=e=>({apiVersion:`2011-06-15`,base64Decoder:e?.base64Decoder??bt.fromBase64,base64Encoder:e?.base64Encoder??bt.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??gt,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Fe,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:`aws.auth#sigv4`,identityProvider:e=>e.getIdentityProvider(`aws.auth#sigv4`),signer:new ae},{schemeId:`smithy.api#noAuth`,identityProvider:e=>e.getIdentityProvider(`smithy.api#noAuth`)||(async()=>({})),signer:new oe}],logger:e?.logger??new vt.NoOpLogger,serviceId:e?.serviceId??`STS`,urlParser:e?.urlParser??yt.parseUrl,utf8Decoder:e?.utf8Decoder??xt.fromUtf8,utf8Encoder:e?.utf8Encoder??xt.toUtf8})})),wt,T,Tt,Et,E,Dt,Ot,kt,At,jt,Mt,Nt,Pt=e((()=>{ce(),wt=le(),T=_e(),ie(),Tt=he(),Et=be(),E=s(),Dt=a(),Ot=Se(),kt=Ce(),Ct(),At=o(),jt=ye(),Mt=o(),Nt=e=>{(0,Mt.emitWarningIfUnsupportedVersion)(process.version);let t=(0,jt.resolveDefaultsModeConfig)(e),n=()=>t().then(At.loadConfigsForDefaultMode),r=St(e);Ae(process.version);let i={profile:e?.profile,logger:r.logger};return{...r,...e,runtime:`node`,defaultsMode:t,authSchemePreference:e?.authSchemePreference??(0,E.loadConfig)(l,i),bodyLengthChecker:e?.bodyLengthChecker??Ot.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,wt.createDefaultUserAgentProvider)({serviceId:r.serviceId,clientVersion:je}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:`aws.auth#sigv4`,identityProvider:t=>t.getIdentityProvider(`aws.auth#sigv4`)||(async t=>await e.credentialDefaultProvider(t?.__config||{})()),signer:new ae},{schemeId:`smithy.api#noAuth`,identityProvider:e=>e.getIdentityProvider(`smithy.api#noAuth`)||(async()=>({})),signer:new oe}],maxAttempts:e?.maxAttempts??(0,E.loadConfig)(Et.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??(0,E.loadConfig)(T.NODE_REGION_CONFIG_OPTIONS,{...T.NODE_REGION_CONFIG_FILE_OPTIONS,...i}),requestHandler:Dt.NodeHttpHandler.create(e?.requestHandler??n),retryMode:e?.retryMode??(0,E.loadConfig)({...Et.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await n()).retryMode||kt.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??Tt.Hash.bind(null,`sha256`),streamCollector:e?.streamCollector??Dt.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??(0,E.loadConfig)(T.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,i),useFipsEndpoint:e?.useFipsEndpoint??(0,E.loadConfig)(T.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,i),userAgentAppId:e?.userAgentAppId??(0,E.loadConfig)(wt.NODE_APP_ID_CONFIG_OPTIONS,i)}}})),Ft,It,Lt=e((()=>{Ft=e=>{let t=e.httpAuthSchemes,n=e.httpAuthSchemeProvider,r=e.credentials;return{setHttpAuthScheme(e){let n=t.findIndex(t=>t.schemeId===e.schemeId);n===-1?t.push(e):t.splice(n,1,e)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(e){n=e},httpAuthSchemeProvider(){return n},setCredentials(e){r=e},credentials(){return r}}},It=e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()})})),Rt,zt,Bt,Vt,Ht=e((()=>{Rt=we(),zt=r(),Bt=o(),Lt(),Vt=(e,t)=>{let n=Object.assign((0,Rt.getAwsRegionExtensionConfiguration)(e),(0,Bt.getDefaultExtensionConfiguration)(e),(0,zt.getHttpHandlerExtensionConfiguration)(e),Ft(e));return t.forEach(e=>e.configure(n)),Object.assign(e,(0,Rt.resolveAwsRegionExtensionConfiguration)(n),(0,Bt.resolveDefaultRuntimeConfig)(n),(0,zt.resolveHttpHandlerRuntimeConfig)(n),It(n))}})),Ut,Wt,Gt,Kt,qt,Jt,Yt,Xt,D,O,k=e((()=>{Ut=me(),Wt=ve(),Gt=xe(),Kt=Te(),qt=_e(),ie(),Jt=de(),Yt=ge(),Xt=be(),D=o(),Re(),Ve(),Pt(),Ht(),O=class extends D.Client{config;constructor(...[e]){let t=Nt(e||{});super(t),this.initConfig=t,this.config=Vt(Le((0,Yt.resolveEndpointConfig)((0,Ut.resolveHostHeaderConfig)((0,qt.resolveRegionConfig)((0,Xt.resolveRetryConfig)((0,Kt.resolveUserAgentConfig)(ze(t))))))),e?.extensions||[]),this.middlewareStack.use((0,Kt.getUserAgentPlugin)(this.config)),this.middlewareStack.use((0,Xt.getRetryPlugin)(this.config)),this.middlewareStack.use((0,Jt.getContentLengthPlugin)(this.config)),this.middlewareStack.use((0,Ut.getHostHeaderPlugin)(this.config)),this.middlewareStack.use((0,Wt.getLoggerPlugin)(this.config)),this.middlewareStack.use((0,Gt.getRecursionDetectionPlugin)(this.config)),this.middlewareStack.use(se(this.config,{httpAuthSchemeParametersProvider:Pe,identityProviderConfigProvider:async e=>new te({"aws.auth#sigv4":e.credentials})})),this.middlewareStack.use(ne(this.config))}destroy(){super.destroy()}}})),Zt,A,Qt=e((()=>{Zt=o(),A=class e extends Zt.ServiceException{constructor(t){super(t),Object.setPrototypeOf(this,e.prototype)}}})),$t,j,M,N,P,F,I,L,R,en,tn,nn,rn=e((()=>{$t=o(),Qt(),j=e=>({...e,...e.SecretAccessKey&&{SecretAccessKey:$t.SENSITIVE_STRING}}),M=e=>({...e,...e.Credentials&&{Credentials:j(e.Credentials)}}),N=class e extends A{name=`ExpiredTokenException`;$fault=`client`;constructor(t){super({name:`ExpiredTokenException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}},P=class e extends A{name=`MalformedPolicyDocumentException`;$fault=`client`;constructor(t){super({name:`MalformedPolicyDocumentException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}},F=class e extends A{name=`PackedPolicyTooLargeException`;$fault=`client`;constructor(t){super({name:`PackedPolicyTooLargeException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}},I=class e extends A{name=`RegionDisabledException`;$fault=`client`;constructor(t){super({name:`RegionDisabledException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}},L=class e extends A{name=`IDPRejectedClaimException`;$fault=`client`;constructor(t){super({name:`IDPRejectedClaimException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}},R=class e extends A{name=`InvalidIdentityTokenException`;$fault=`client`;constructor(t){super({name:`InvalidIdentityTokenException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}},en=e=>({...e,...e.WebIdentityToken&&{WebIdentityToken:$t.SENSITIVE_STRING}}),tn=e=>({...e,...e.Credentials&&{Credentials:j(e.Credentials)}}),nn=class e extends A{name=`IDPCommunicationErrorException`;$fault=`client`;constructor(t){super({name:`IDPCommunicationErrorException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}}})),an,z,on,sn,cn,ln,un,dn,fn,pn,mn,hn,gn,_n,vn,yn,bn,xn,Sn,Cn,wn,Tn,En,Dn,On,kn,An,jn,Mn,Nn,Pn,Fn,In,Ln,B,Rn,zn,Bn,Vn,Hn,Un,Wn,Gn,V,Kn,qn,Jn,H,Yn,U,Xn,Zn,Qn,W,G,$n,er,tr,K,nr,q,J,rr,ir,Y,ar,or,sr,cr,lr,ur,dr,fr,X,Z,pr,mr,hr=e((()=>{ce(),an=r(),z=o(),rn(),Qt(),on=async(e,t)=>{let n=Bn,r;return r=pr({...vn(e,t),[Hn]:Wn,[ur]:Vn}),zn(t,n,`/`,void 0,r)},sn=async(e,t)=>{let n=Bn,r;return r=pr({...yn(e,t),[Hn]:Kn,[ur]:Vn}),zn(t,n,`/`,void 0,r)},cn=async(e,t)=>{if(e.statusCode>=300)return un(e,t);let n=await ue(e.body,t),r={};return r=On(n.AssumeRoleResult,t),{$metadata:B(e),...r}},ln=async(e,t)=>{if(e.statusCode>=300)return un(e,t);let n=await ue(e.body,t),r={};return r=kn(n.AssumeRoleWithWebIdentityResult,t),{$metadata:B(e),...r}},un=async(e,t)=>{let n={...e,body:await Ee(e.body,t)},r=mr(e,n.body);switch(r){case`ExpiredTokenException`:case`com.amazonaws.sts#ExpiredTokenException`:throw await dn(n,t);case`MalformedPolicyDocument`:case`com.amazonaws.sts#MalformedPolicyDocumentException`:throw await hn(n,t);case`PackedPolicyTooLarge`:case`com.amazonaws.sts#PackedPolicyTooLargeException`:throw await gn(n,t);case`RegionDisabledException`:case`com.amazonaws.sts#RegionDisabledException`:throw await _n(n,t);case`IDPCommunicationError`:case`com.amazonaws.sts#IDPCommunicationErrorException`:throw await fn(n,t);case`IDPRejectedClaim`:case`com.amazonaws.sts#IDPRejectedClaimException`:throw await pn(n,t);case`InvalidIdentityToken`:case`com.amazonaws.sts#InvalidIdentityTokenException`:throw await mn(n,t);default:let i=n.body;return Rn({output:e,parsedBody:i.Error,errorCode:r})}},dn=async(e,t)=>{let n=e.body,r=jn(n.Error,t);return(0,z.decorateServiceException)(new N({$metadata:B(e),...r}),n)},fn=async(e,t)=>{let n=e.body,r=Mn(n.Error,t);return(0,z.decorateServiceException)(new nn({$metadata:B(e),...r}),n)},pn=async(e,t)=>{let n=e.body,r=Nn(n.Error,t);return(0,z.decorateServiceException)(new L({$metadata:B(e),...r}),n)},mn=async(e,t)=>{let n=e.body,r=Pn(n.Error,t);return(0,z.decorateServiceException)(new R({$metadata:B(e),...r}),n)},hn=async(e,t)=>{let n=e.body,r=Fn(n.Error,t);return(0,z.decorateServiceException)(new P({$metadata:B(e),...r}),n)},gn=async(e,t)=>{let n=e.body,r=In(n.Error,t);return(0,z.decorateServiceException)(new F({$metadata:B(e),...r}),n)},_n=async(e,t)=>{let n=e.body,r=Ln(n.Error,t);return(0,z.decorateServiceException)(new I({$metadata:B(e),...r}),n)},vn=(e,t)=>{let n={};if(e[q]!=null&&(n[q]=e[q]),e[J]!=null&&(n[J]=e[J]),e[G]!=null){let r=bn(e[G],t);e[G]?.length===0&&(n.PolicyArns=[]),Object.entries(r).forEach(([e,t])=>{let r=`PolicyArns.${e}`;n[r]=t})}if(e[W]!=null&&(n[W]=e[W]),e[U]!=null&&(n[U]=e[U]),e[sr]!=null){let r=En(e[sr],t);e[sr]?.length===0&&(n.Tags=[]),Object.entries(r).forEach(([e,t])=>{let r=`Tags.${e}`;n[r]=t})}if(e[lr]!=null){let r=Tn(e[lr],t);e[lr]?.length===0&&(n.TransitiveTagKeys=[]),Object.entries(r).forEach(([e,t])=>{let r=`TransitiveTagKeys.${e}`;n[r]=t})}if(e[Zn]!=null&&(n[Zn]=e[Zn]),e[ar]!=null&&(n[ar]=e[ar]),e[cr]!=null&&(n[cr]=e[cr]),e[Y]!=null&&(n[Y]=e[Y]),e[er]!=null){let r=Cn(e[er],t);e[er]?.length===0&&(n.ProvidedContexts=[]),Object.entries(r).forEach(([e,t])=>{let r=`ProvidedContexts.${e}`;n[r]=t})}return n},yn=(e,t)=>{let n={};if(e[q]!=null&&(n[q]=e[q]),e[J]!=null&&(n[J]=e[J]),e[fr]!=null&&(n[fr]=e[fr]),e[tr]!=null&&(n[tr]=e[tr]),e[G]!=null){let r=bn(e[G],t);e[G]?.length===0&&(n.PolicyArns=[]),Object.entries(r).forEach(([e,t])=>{let r=`PolicyArns.${e}`;n[r]=t})}return e[W]!=null&&(n[W]=e[W]),e[U]!=null&&(n[U]=e[U]),n},bn=(e,t)=>{let n={},r=1;for(let i of e){if(i===null)continue;let e=xn(i,t);Object.entries(e).forEach(([e,t])=>{n[`member.${r}.${e}`]=t}),r++}return n},xn=(e,t)=>{let n={};return e[X]!=null&&(n[X]=e[X]),n},Sn=(e,t)=>{let n={};return e[$n]!=null&&(n[$n]=e[$n]),e[Yn]!=null&&(n[Yn]=e[Yn]),n},Cn=(e,t)=>{let n={},r=1;for(let i of e){if(i===null)continue;let e=Sn(i,t);Object.entries(e).forEach(([e,t])=>{n[`member.${r}.${e}`]=t}),r++}return n},wn=(e,t)=>{let n={};return e[Qn]!=null&&(n[Qn]=e[Qn]),e[dr]!=null&&(n[dr]=e[dr]),n},Tn=(e,t)=>{let n={},r=1;for(let t of e)t!==null&&(n[`member.${r}`]=t,r++);return n},En=(e,t)=>{let n={},r=1;for(let i of e){if(i===null)continue;let e=wn(i,t);Object.entries(e).forEach(([e,t])=>{n[`member.${r}.${e}`]=t}),r++}return n},Dn=(e,t)=>{let n={};return e[Gn]!=null&&(n[Gn]=(0,z.expectString)(e[Gn])),e[qn]!=null&&(n[qn]=(0,z.expectString)(e[qn])),n},On=(e,t)=>{let n={};return e[H]!=null&&(n[H]=An(e[H],t)),e[V]!=null&&(n[V]=Dn(e[V],t)),e[K]!=null&&(n[K]=(0,z.strictParseInt32)(e[K])),e[Y]!=null&&(n[Y]=(0,z.expectString)(e[Y])),n},kn=(e,t)=>{let n={};return e[H]!=null&&(n[H]=An(e[H],t)),e[ir]!=null&&(n[ir]=(0,z.expectString)(e[ir])),e[V]!=null&&(n[V]=Dn(e[V],t)),e[K]!=null&&(n[K]=(0,z.strictParseInt32)(e[K])),e[nr]!=null&&(n[nr]=(0,z.expectString)(e[nr])),e[Jn]!=null&&(n[Jn]=(0,z.expectString)(e[Jn])),e[Y]!=null&&(n[Y]=(0,z.expectString)(e[Y])),n},An=(e,t)=>{let n={};return e[Un]!=null&&(n[Un]=(0,z.expectString)(e[Un])),e[rr]!=null&&(n[rr]=(0,z.expectString)(e[rr])),e[or]!=null&&(n[or]=(0,z.expectString)(e[or])),e[Xn]!=null&&(n[Xn]=(0,z.expectNonNull)((0,z.parseRfc3339DateTimeWithOffset)(e[Xn]))),n},jn=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},Mn=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},Nn=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},Pn=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},Fn=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},In=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},Ln=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},B=e=>({httpStatusCode:e.statusCode,requestId:e.headers[`x-amzn-requestid`]??e.headers[`x-amzn-request-id`]??e.headers[`x-amz-request-id`],extendedRequestId:e.headers[`x-amz-id-2`],cfId:e.headers[`x-amz-cf-id`]}),Rn=(0,z.withBaseException)(A),zn=async(e,t,n,r,i)=>{let{hostname:a,protocol:o=`https`,port:s,path:c}=await e.endpoint(),l={protocol:o,hostname:a,port:s,method:`POST`,path:c.endsWith(`/`)?c.slice(0,-1)+n:c+n,headers:t};return r!==void 0&&(l.hostname=r),i!==void 0&&(l.body=i),new an.HttpRequest(l)},Bn={"content-type":`application/x-www-form-urlencoded`},Vn=`2011-06-15`,Hn=`Action`,Un=`AccessKeyId`,Wn=`AssumeRole`,Gn=`AssumedRoleId`,V=`AssumedRoleUser`,Kn=`AssumeRoleWithWebIdentity`,qn=`Arn`,Jn=`Audience`,H=`Credentials`,Yn=`ContextAssertion`,U=`DurationSeconds`,Xn=`Expiration`,Zn=`ExternalId`,Qn=`Key`,W=`Policy`,G=`PolicyArns`,$n=`ProviderArn`,er=`ProvidedContexts`,tr=`ProviderId`,K=`PackedPolicySize`,nr=`Provider`,q=`RoleArn`,J=`RoleSessionName`,rr=`SecretAccessKey`,ir=`SubjectFromWebIdentityToken`,Y=`SourceIdentity`,ar=`SerialNumber`,or=`SessionToken`,sr=`Tags`,cr=`TokenCode`,lr=`TransitiveTagKeys`,ur=`Version`,dr=`Value`,fr=`WebIdentityToken`,X=`arn`,Z=`message`,pr=e=>Object.entries(e).map(([e,t])=>(0,z.extendedEncodeURIComponent)(e)+`=`+(0,z.extendedEncodeURIComponent)(t)).join(`&`),mr=(e,t)=>{if(t.Error?.Code!==void 0)return t.Error.Code;if(e.statusCode==404)return`NotFound`}})),gr,_r,vr,Q,yr=e((()=>{gr=ge(),_r=re(),vr=o(),Ve(),rn(),hr(),Q=class extends vr.Command.classBuilder().ep(Be).m(function(e,t,n,r){return[(0,_r.getSerdePlugin)(n,this.serialize,this.deserialize),(0,gr.getEndpointPlugin)(n,e.getEndpointParameterInstructions())]}).s(`AWSSecurityTokenServiceV20110615`,`AssumeRole`,{}).n(`STSClient`,`AssumeRoleCommand`).f(void 0,M).ser(on).de(cn).build(){}})),br,xr,Sr,$,Cr=e((()=>{br=ge(),xr=re(),Sr=o(),Ve(),rn(),hr(),$=class extends Sr.Command.classBuilder().ep(Be).m(function(e,t,n,r){return[(0,xr.getSerdePlugin)(n,this.serialize,this.deserialize),(0,br.getEndpointPlugin)(n,e.getEndpointParameterInstructions())]}).s(`AWSSecurityTokenServiceV20110615`,`AssumeRoleWithWebIdentity`,{}).n(`STSClient`,`AssumeRoleWithWebIdentityCommand`).f(en,tn).ser(sn).de(ln).build(){}})),wr,Tr,Er,Dr=e((()=>{wr=o(),yr(),Cr(),k(),Tr={AssumeRoleCommand:Q,AssumeRoleWithWebIdentityCommand:$},Er=class extends O{},(0,wr.createAggregatedClient)(Tr,Er)})),Or=e((()=>{yr(),Cr()})),kr=e((()=>{rn()})),Ar,jr,Mr,Nr,Pr,Fr,Ir=e((()=>{ke(),Ar=we(),yr(),Cr(),jr=e=>{if(typeof e?.Arn==`string`){let t=e.Arn.split(`:`);if(t.length>4&&t[4]!==``)return t[4]}},Mr=async(e,t,n,r={})=>{let i=typeof e==`function`?await e():e,a=typeof t==`function`?await t():t,o=await(0,Ar.stsRegionDefaultResolver)(r)();return n?.debug?.(`@aws-sdk/client-sts::resolveRegion`,`accepting first of:`,`${i} (credential provider clientConfig)`,`${a} (contextual client)`,`${o} (STS default: AWS_REGION, profile region, or us-east-1)`),i??a??o},Nr=(e,t)=>{let n,r;return async(i,a)=>{if(r=i,!n){let{logger:i=e?.parentClientConfig?.logger,profile:a=e?.parentClientConfig?.profile,region:o,requestHandler:s=e?.parentClientConfig?.requestHandler,credentialProviderLogger:c,userAgentAppId:l=e?.parentClientConfig?.userAgentAppId}=e,ee=await Mr(o,e?.parentClientConfig?.region,c,{logger:i,profile:a}),te=!Fr(s);n=new t({...e,userAgentAppId:l,profile:a,credentialDefaultProvider:()=>async()=>r,region:ee,requestHandler:te?s:void 0,logger:i})}let{Credentials:o,AssumedRoleUser:s}=await n.send(new Q(a));if(!o||!o.AccessKeyId||!o.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${a.RoleArn}`);let c=jr(s),l={accessKeyId:o.AccessKeyId,secretAccessKey:o.SecretAccessKey,sessionToken:o.SessionToken,expiration:o.Expiration,...o.CredentialScope&&{credentialScope:o.CredentialScope},...c&&{accountId:c}};return Oe(l,`CREDENTIALS_STS_ASSUME_ROLE`,`i`),l}},Pr=(e,t)=>{let n;return async r=>{if(!n){let{logger:r=e?.parentClientConfig?.logger,profile:i=e?.parentClientConfig?.profile,region:a,requestHandler:o=e?.parentClientConfig?.requestHandler,credentialProviderLogger:s,userAgentAppId:c=e?.parentClientConfig?.userAgentAppId}=e,l=await Mr(a,e?.parentClientConfig?.region,s,{logger:r,profile:i}),ee=!Fr(o);n=new t({...e,userAgentAppId:c,profile:i,region:l,requestHandler:ee?o:void 0,logger:r})}let{Credentials:i,AssumedRoleUser:a}=await n.send(new $(r));if(!i||!i.AccessKeyId||!i.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${r.RoleArn}`);let o=jr(a),s={accessKeyId:i.AccessKeyId,secretAccessKey:i.SecretAccessKey,sessionToken:i.SessionToken,expiration:i.Expiration,...i.CredentialScope&&{credentialScope:i.CredentialScope},...o&&{accountId:o}};return o&&Oe(s,`RESOLVED_ACCOUNT_ID`,`T`),Oe(s,`CREDENTIALS_STS_ASSUME_ROLE_WEB_ID`,`k`),s}},Fr=e=>e?.metadata?.handlerProtocol===`h2`})),Lr,Rr,zr,Br,Vr=e((()=>{Ir(),k(),Lr=(e,t)=>t?class extends e{constructor(e){super(e);for(let e of t)this.middlewareStack.use(e)}}:e,Rr=(e={},t)=>Nr(e,Lr(O,t)),zr=(e={},t)=>Pr(e,Lr(O,t)),Br=e=>t=>e({roleAssumer:Rr(t),roleAssumerWithWebIdentity:zr(t),...t})})),Hr=t({AssumeRoleCommand:()=>Q,AssumeRoleResponseFilterSensitiveLog:()=>M,AssumeRoleWithWebIdentityCommand:()=>$,AssumeRoleWithWebIdentityRequestFilterSensitiveLog:()=>en,AssumeRoleWithWebIdentityResponseFilterSensitiveLog:()=>tn,CredentialsFilterSensitiveLog:()=>j,ExpiredTokenException:()=>N,IDPCommunicationErrorException:()=>nn,IDPRejectedClaimException:()=>L,InvalidIdentityTokenException:()=>R,MalformedPolicyDocumentException:()=>P,PackedPolicyTooLargeException:()=>F,RegionDisabledException:()=>I,STS:()=>Er,STSClient:()=>O,STSServiceException:()=>A,__Client:()=>D.Client,decorateDefaultCredentialProvider:()=>Br,getDefaultRoleAssumer:()=>Rr,getDefaultRoleAssumerWithWebIdentity:()=>zr}),Ur=e((()=>{k(),Dr(),Or(),kr(),Vr(),Qt()}));export{D as C,O as S,R as _,zr as a,I as b,Q as c,en as d,tn as f,L as g,nn as h,Rr as i,vr as l,N as m,Hr as n,Er as o,j as p,Br as r,$ as s,Ur as t,M as u,P as v,A as x,F as y};
+import{n as e,r as t}from"./chunk-DQj_Q5LL.mjs";import{F as n,I as r,L as i,P as a,t as o}from"./dist-cjs-DBYzdOBR.mjs";import{n as s,t as c}from"./dist-cjs-CkmP5Wcr.mjs";import{D as l,E as ee,F as te,I as ne,L as re,N as ie,O as ae,P as oe,R as se,_ as ce,a as le,b as ue,c as de,d as fe,f as pe,h as me,i as he,j as ge,l as _e,m as ve,n as ye,o as be,p as xe,r as Se,s as Ce,t as we,u as Te,x as Ee}from"./dist-cjs-BRgcRUXD.mjs";import{t as De}from"./dist-cjs-6zIKAlZR.mjs";import{a as Oe,n as ke,o as Ae}from"./client-Cf0k1wnb.mjs";import{t as je}from"./package-DfozRyK6.mjs";function Me(e){return{schemeId:`aws.auth#sigv4`,signingProperties:{name:`sts`,region:e.region},propertiesExtractor:(e,t)=>({signingProperties:{config:e,context:t}})}}function Ne(e){return{schemeId:`smithy.api#noAuth`}}var u,Pe,Fe,Ie,Le,Re=e((()=>{ce(),u=i(),k(),Pe=async(e,t,n)=>({operation:(0,u.getSmithyContext)(t).operation,region:await(0,u.normalizeProvider)(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),Fe=e=>{let t=[];switch(e.operation){case`AssumeRoleWithWebIdentity`:t.push(Ne(e));break;default:t.push(Me(e))}return t},Ie=e=>Object.assign(e,{stsClientCtor:O}),Le=e=>{let t=ee(Ie(e));return Object.assign(t,{authSchemePreference:(0,u.normalizeProvider)(e.authSchemePreference??[])})}})),ze,Be,Ve=e((()=>{ze=e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,useGlobalEndpoint:e.useGlobalEndpoint??!1,defaultSigningName:`sts`}),Be={UseGlobalEndpoint:{type:`builtInParams`,name:`useGlobalEndpoint`},UseFIPS:{type:`builtInParams`,name:`useFipsEndpoint`},Endpoint:{type:`builtInParams`,name:`endpoint`},Region:{type:`builtInParams`,name:`region`},UseDualStack:{type:`builtInParams`,name:`useDualstackEndpoint`}}})),He,d,f,p,m,Ue,h,g,_,We,Ge,Ke,v,qe,y,b,Je,Ye,Xe,Ze,Qe,x,$e,et,tt,S,C,nt,rt,it,at,ot,st,ct,lt,ut,dt,ft,pt=e((()=>{He=`required`,d=`type`,f=`fn`,p=`argv`,m=`ref`,Ue=!1,h=!0,g=`booleanEquals`,_=`stringEquals`,We=`sigv4`,Ge=`sts`,Ke=`us-east-1`,v=`endpoint`,qe=`https://sts.{Region}.{PartitionResult#dnsSuffix}`,y=`tree`,b=`error`,Je=`getAttr`,Ye={[He]:!1,[d]:`string`},Xe={[He]:!0,default:!1,[d]:`boolean`},Ze={[m]:`Endpoint`},Qe={[f]:`isSet`,[p]:[{[m]:`Region`}]},x={[m]:`Region`},$e={[f]:`aws.partition`,[p]:[x],assign:`PartitionResult`},et={[m]:`UseFIPS`},tt={[m]:`UseDualStack`},S={url:`https://sts.amazonaws.com`,properties:{authSchemes:[{name:We,signingName:Ge,signingRegion:Ke}]},headers:{}},C={},nt={conditions:[{[f]:_,[p]:[x,`aws-global`]}],[v]:S,[d]:v},rt={[f]:g,[p]:[et,!0]},it={[f]:g,[p]:[tt,!0]},at={[f]:Je,[p]:[{[m]:`PartitionResult`},`supportsFIPS`]},ot={[m]:`PartitionResult`},st={[f]:g,[p]:[!0,{[f]:Je,[p]:[ot,`supportsDualStack`]}]},ct=[{[f]:`isSet`,[p]:[Ze]}],lt=[rt],ut=[it],dt={version:`1.0`,parameters:{Region:Ye,UseDualStack:Xe,UseFIPS:Xe,Endpoint:Ye,UseGlobalEndpoint:Xe},rules:[{conditions:[{[f]:g,[p]:[{[m]:`UseGlobalEndpoint`},h]},{[f]:`not`,[p]:ct},Qe,$e,{[f]:g,[p]:[et,Ue]},{[f]:g,[p]:[tt,Ue]}],rules:[{conditions:[{[f]:_,[p]:[x,`ap-northeast-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`ap-south-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`ap-southeast-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`ap-southeast-2`]}],endpoint:S,[d]:v},nt,{conditions:[{[f]:_,[p]:[x,`ca-central-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`eu-central-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`eu-north-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`eu-west-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`eu-west-2`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`eu-west-3`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`sa-east-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,Ke]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`us-east-2`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`us-west-1`]}],endpoint:S,[d]:v},{conditions:[{[f]:_,[p]:[x,`us-west-2`]}],endpoint:S,[d]:v},{endpoint:{url:qe,properties:{authSchemes:[{name:We,signingName:Ge,signingRegion:`{Region}`}]},headers:C},[d]:v}],[d]:y},{conditions:ct,rules:[{conditions:lt,error:`Invalid Configuration: FIPS and custom endpoint are not supported`,[d]:b},{conditions:ut,error:`Invalid Configuration: Dualstack and custom endpoint are not supported`,[d]:b},{endpoint:{url:Ze,properties:C,headers:C},[d]:v}],[d]:y},{conditions:[Qe],rules:[{conditions:[$e],rules:[{conditions:[rt,it],rules:[{conditions:[{[f]:g,[p]:[h,at]},st],rules:[{endpoint:{url:`https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}`,properties:C,headers:C},[d]:v}],[d]:y},{error:`FIPS and DualStack are enabled, but this partition does not support one or both`,[d]:b}],[d]:y},{conditions:lt,rules:[{conditions:[{[f]:g,[p]:[at,h]}],rules:[{conditions:[{[f]:_,[p]:[{[f]:Je,[p]:[ot,`name`]},`aws-us-gov`]}],endpoint:{url:`https://sts.{Region}.amazonaws.com`,properties:C,headers:C},[d]:v},{endpoint:{url:`https://sts-fips.{Region}.{PartitionResult#dnsSuffix}`,properties:C,headers:C},[d]:v}],[d]:y},{error:`FIPS is enabled but this partition does not support FIPS`,[d]:b}],[d]:y},{conditions:ut,rules:[{conditions:[st],rules:[{endpoint:{url:`https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}`,properties:C,headers:C},[d]:v}],[d]:y},{error:`DualStack is enabled but this partition does not support DualStack`,[d]:b}],[d]:y},nt,{endpoint:{url:qe,properties:C,headers:C},[d]:v}],[d]:y}],[d]:y},{error:`Invalid Configuration: Missing Region`,[d]:b}]},ft=dt})),mt,w,ht,gt,_t=e((()=>{mt=fe(),w=pe(),pt(),ht=new w.EndpointCache({size:50,params:[`Endpoint`,`Region`,`UseDualStack`,`UseFIPS`,`UseGlobalEndpoint`]}),gt=(e,t={})=>ht.get(e,()=>(0,w.resolveEndpoint)(ft,{endpointParams:e,logger:t.logger})),w.customEndpointFunctions.aws=mt.awsEndpointFunctions})),vt,yt,bt,xt,St,Ct=e((()=>{ce(),ie(),vt=o(),yt=c(),bt=n(),xt=De(),Re(),_t(),St=e=>({apiVersion:`2011-06-15`,base64Decoder:e?.base64Decoder??bt.fromBase64,base64Encoder:e?.base64Encoder??bt.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??gt,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Fe,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:`aws.auth#sigv4`,identityProvider:e=>e.getIdentityProvider(`aws.auth#sigv4`),signer:new ae},{schemeId:`smithy.api#noAuth`,identityProvider:e=>e.getIdentityProvider(`smithy.api#noAuth`)||(async()=>({})),signer:new oe}],logger:e?.logger??new vt.NoOpLogger,serviceId:e?.serviceId??`STS`,urlParser:e?.urlParser??yt.parseUrl,utf8Decoder:e?.utf8Decoder??xt.fromUtf8,utf8Encoder:e?.utf8Encoder??xt.toUtf8})})),wt,T,Tt,Et,E,Dt,Ot,kt,At,jt,Mt,Nt,Pt=e((()=>{ce(),wt=le(),T=_e(),ie(),Tt=he(),Et=be(),E=s(),Dt=a(),Ot=Se(),kt=Ce(),Ct(),At=o(),jt=ye(),Mt=o(),Nt=e=>{(0,Mt.emitWarningIfUnsupportedVersion)(process.version);let t=(0,jt.resolveDefaultsModeConfig)(e),n=()=>t().then(At.loadConfigsForDefaultMode),r=St(e);Ae(process.version);let i={profile:e?.profile,logger:r.logger};return{...r,...e,runtime:`node`,defaultsMode:t,authSchemePreference:e?.authSchemePreference??(0,E.loadConfig)(l,i),bodyLengthChecker:e?.bodyLengthChecker??Ot.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,wt.createDefaultUserAgentProvider)({serviceId:r.serviceId,clientVersion:je}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:`aws.auth#sigv4`,identityProvider:t=>t.getIdentityProvider(`aws.auth#sigv4`)||(async t=>await e.credentialDefaultProvider(t?.__config||{})()),signer:new ae},{schemeId:`smithy.api#noAuth`,identityProvider:e=>e.getIdentityProvider(`smithy.api#noAuth`)||(async()=>({})),signer:new oe}],maxAttempts:e?.maxAttempts??(0,E.loadConfig)(Et.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??(0,E.loadConfig)(T.NODE_REGION_CONFIG_OPTIONS,{...T.NODE_REGION_CONFIG_FILE_OPTIONS,...i}),requestHandler:Dt.NodeHttpHandler.create(e?.requestHandler??n),retryMode:e?.retryMode??(0,E.loadConfig)({...Et.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await n()).retryMode||kt.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??Tt.Hash.bind(null,`sha256`),streamCollector:e?.streamCollector??Dt.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??(0,E.loadConfig)(T.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,i),useFipsEndpoint:e?.useFipsEndpoint??(0,E.loadConfig)(T.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,i),userAgentAppId:e?.userAgentAppId??(0,E.loadConfig)(wt.NODE_APP_ID_CONFIG_OPTIONS,i)}}})),Ft,It,Lt=e((()=>{Ft=e=>{let t=e.httpAuthSchemes,n=e.httpAuthSchemeProvider,r=e.credentials;return{setHttpAuthScheme(e){let n=t.findIndex(t=>t.schemeId===e.schemeId);n===-1?t.push(e):t.splice(n,1,e)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(e){n=e},httpAuthSchemeProvider(){return n},setCredentials(e){r=e},credentials(){return r}}},It=e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()})})),Rt,zt,Bt,Vt,Ht=e((()=>{Rt=we(),zt=r(),Bt=o(),Lt(),Vt=(e,t)=>{let n=Object.assign((0,Rt.getAwsRegionExtensionConfiguration)(e),(0,Bt.getDefaultExtensionConfiguration)(e),(0,zt.getHttpHandlerExtensionConfiguration)(e),Ft(e));return t.forEach(e=>e.configure(n)),Object.assign(e,(0,Rt.resolveAwsRegionExtensionConfiguration)(n),(0,Bt.resolveDefaultRuntimeConfig)(n),(0,zt.resolveHttpHandlerRuntimeConfig)(n),It(n))}})),Ut,Wt,Gt,Kt,qt,Jt,Yt,Xt,D,O,k=e((()=>{Ut=me(),Wt=ve(),Gt=xe(),Kt=Te(),qt=_e(),ie(),Jt=de(),Yt=ge(),Xt=be(),D=o(),Re(),Ve(),Pt(),Ht(),O=class extends D.Client{config;constructor(...[e]){let t=Nt(e||{});super(t),this.initConfig=t,this.config=Vt(Le((0,Yt.resolveEndpointConfig)((0,Ut.resolveHostHeaderConfig)((0,qt.resolveRegionConfig)((0,Xt.resolveRetryConfig)((0,Kt.resolveUserAgentConfig)(ze(t))))))),e?.extensions||[]),this.middlewareStack.use((0,Kt.getUserAgentPlugin)(this.config)),this.middlewareStack.use((0,Xt.getRetryPlugin)(this.config)),this.middlewareStack.use((0,Jt.getContentLengthPlugin)(this.config)),this.middlewareStack.use((0,Ut.getHostHeaderPlugin)(this.config)),this.middlewareStack.use((0,Wt.getLoggerPlugin)(this.config)),this.middlewareStack.use((0,Gt.getRecursionDetectionPlugin)(this.config)),this.middlewareStack.use(se(this.config,{httpAuthSchemeParametersProvider:Pe,identityProviderConfigProvider:async e=>new te({"aws.auth#sigv4":e.credentials})})),this.middlewareStack.use(ne(this.config))}destroy(){super.destroy()}}})),Zt,A,Qt=e((()=>{Zt=o(),A=class e extends Zt.ServiceException{constructor(t){super(t),Object.setPrototypeOf(this,e.prototype)}}})),$t,j,M,N,P,F,I,L,R,en,tn,nn,rn=e((()=>{$t=o(),Qt(),j=e=>({...e,...e.SecretAccessKey&&{SecretAccessKey:$t.SENSITIVE_STRING}}),M=e=>({...e,...e.Credentials&&{Credentials:j(e.Credentials)}}),N=class e extends A{name=`ExpiredTokenException`;$fault=`client`;constructor(t){super({name:`ExpiredTokenException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}},P=class e extends A{name=`MalformedPolicyDocumentException`;$fault=`client`;constructor(t){super({name:`MalformedPolicyDocumentException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}},F=class e extends A{name=`PackedPolicyTooLargeException`;$fault=`client`;constructor(t){super({name:`PackedPolicyTooLargeException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}},I=class e extends A{name=`RegionDisabledException`;$fault=`client`;constructor(t){super({name:`RegionDisabledException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}},L=class e extends A{name=`IDPRejectedClaimException`;$fault=`client`;constructor(t){super({name:`IDPRejectedClaimException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}},R=class e extends A{name=`InvalidIdentityTokenException`;$fault=`client`;constructor(t){super({name:`InvalidIdentityTokenException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}},en=e=>({...e,...e.WebIdentityToken&&{WebIdentityToken:$t.SENSITIVE_STRING}}),tn=e=>({...e,...e.Credentials&&{Credentials:j(e.Credentials)}}),nn=class e extends A{name=`IDPCommunicationErrorException`;$fault=`client`;constructor(t){super({name:`IDPCommunicationErrorException`,$fault:`client`,...t}),Object.setPrototypeOf(this,e.prototype)}}})),an,z,on,sn,cn,ln,un,dn,fn,pn,mn,hn,gn,_n,vn,yn,bn,xn,Sn,Cn,wn,Tn,En,Dn,On,kn,An,jn,Mn,Nn,Pn,Fn,In,Ln,B,Rn,zn,Bn,Vn,Hn,Un,Wn,Gn,V,Kn,qn,Jn,H,Yn,U,Xn,Zn,Qn,W,G,$n,er,tr,K,nr,q,J,rr,ir,Y,ar,or,sr,cr,lr,ur,dr,fr,X,Z,pr,mr,hr=e((()=>{ce(),an=r(),z=o(),rn(),Qt(),on=async(e,t)=>{let n=Bn,r;return r=pr({...vn(e,t),[Hn]:Wn,[ur]:Vn}),zn(t,n,`/`,void 0,r)},sn=async(e,t)=>{let n=Bn,r;return r=pr({...yn(e,t),[Hn]:Kn,[ur]:Vn}),zn(t,n,`/`,void 0,r)},cn=async(e,t)=>{if(e.statusCode>=300)return un(e,t);let n=await ue(e.body,t),r={};return r=On(n.AssumeRoleResult,t),{$metadata:B(e),...r}},ln=async(e,t)=>{if(e.statusCode>=300)return un(e,t);let n=await ue(e.body,t),r={};return r=kn(n.AssumeRoleWithWebIdentityResult,t),{$metadata:B(e),...r}},un=async(e,t)=>{let n={...e,body:await Ee(e.body,t)},r=mr(e,n.body);switch(r){case`ExpiredTokenException`:case`com.amazonaws.sts#ExpiredTokenException`:throw await dn(n,t);case`MalformedPolicyDocument`:case`com.amazonaws.sts#MalformedPolicyDocumentException`:throw await hn(n,t);case`PackedPolicyTooLarge`:case`com.amazonaws.sts#PackedPolicyTooLargeException`:throw await gn(n,t);case`RegionDisabledException`:case`com.amazonaws.sts#RegionDisabledException`:throw await _n(n,t);case`IDPCommunicationError`:case`com.amazonaws.sts#IDPCommunicationErrorException`:throw await fn(n,t);case`IDPRejectedClaim`:case`com.amazonaws.sts#IDPRejectedClaimException`:throw await pn(n,t);case`InvalidIdentityToken`:case`com.amazonaws.sts#InvalidIdentityTokenException`:throw await mn(n,t);default:let i=n.body;return Rn({output:e,parsedBody:i.Error,errorCode:r})}},dn=async(e,t)=>{let n=e.body,r=jn(n.Error,t);return(0,z.decorateServiceException)(new N({$metadata:B(e),...r}),n)},fn=async(e,t)=>{let n=e.body,r=Mn(n.Error,t);return(0,z.decorateServiceException)(new nn({$metadata:B(e),...r}),n)},pn=async(e,t)=>{let n=e.body,r=Nn(n.Error,t);return(0,z.decorateServiceException)(new L({$metadata:B(e),...r}),n)},mn=async(e,t)=>{let n=e.body,r=Pn(n.Error,t);return(0,z.decorateServiceException)(new R({$metadata:B(e),...r}),n)},hn=async(e,t)=>{let n=e.body,r=Fn(n.Error,t);return(0,z.decorateServiceException)(new P({$metadata:B(e),...r}),n)},gn=async(e,t)=>{let n=e.body,r=In(n.Error,t);return(0,z.decorateServiceException)(new F({$metadata:B(e),...r}),n)},_n=async(e,t)=>{let n=e.body,r=Ln(n.Error,t);return(0,z.decorateServiceException)(new I({$metadata:B(e),...r}),n)},vn=(e,t)=>{let n={};if(e[q]!=null&&(n[q]=e[q]),e[J]!=null&&(n[J]=e[J]),e[G]!=null){let r=bn(e[G],t);e[G]?.length===0&&(n.PolicyArns=[]),Object.entries(r).forEach(([e,t])=>{let r=`PolicyArns.${e}`;n[r]=t})}if(e[W]!=null&&(n[W]=e[W]),e[U]!=null&&(n[U]=e[U]),e[sr]!=null){let r=En(e[sr],t);e[sr]?.length===0&&(n.Tags=[]),Object.entries(r).forEach(([e,t])=>{let r=`Tags.${e}`;n[r]=t})}if(e[lr]!=null){let r=Tn(e[lr],t);e[lr]?.length===0&&(n.TransitiveTagKeys=[]),Object.entries(r).forEach(([e,t])=>{let r=`TransitiveTagKeys.${e}`;n[r]=t})}if(e[Zn]!=null&&(n[Zn]=e[Zn]),e[ar]!=null&&(n[ar]=e[ar]),e[cr]!=null&&(n[cr]=e[cr]),e[Y]!=null&&(n[Y]=e[Y]),e[er]!=null){let r=Cn(e[er],t);e[er]?.length===0&&(n.ProvidedContexts=[]),Object.entries(r).forEach(([e,t])=>{let r=`ProvidedContexts.${e}`;n[r]=t})}return n},yn=(e,t)=>{let n={};if(e[q]!=null&&(n[q]=e[q]),e[J]!=null&&(n[J]=e[J]),e[fr]!=null&&(n[fr]=e[fr]),e[tr]!=null&&(n[tr]=e[tr]),e[G]!=null){let r=bn(e[G],t);e[G]?.length===0&&(n.PolicyArns=[]),Object.entries(r).forEach(([e,t])=>{let r=`PolicyArns.${e}`;n[r]=t})}return e[W]!=null&&(n[W]=e[W]),e[U]!=null&&(n[U]=e[U]),n},bn=(e,t)=>{let n={},r=1;for(let i of e){if(i===null)continue;let e=xn(i,t);Object.entries(e).forEach(([e,t])=>{n[`member.${r}.${e}`]=t}),r++}return n},xn=(e,t)=>{let n={};return e[X]!=null&&(n[X]=e[X]),n},Sn=(e,t)=>{let n={};return e[$n]!=null&&(n[$n]=e[$n]),e[Yn]!=null&&(n[Yn]=e[Yn]),n},Cn=(e,t)=>{let n={},r=1;for(let i of e){if(i===null)continue;let e=Sn(i,t);Object.entries(e).forEach(([e,t])=>{n[`member.${r}.${e}`]=t}),r++}return n},wn=(e,t)=>{let n={};return e[Qn]!=null&&(n[Qn]=e[Qn]),e[dr]!=null&&(n[dr]=e[dr]),n},Tn=(e,t)=>{let n={},r=1;for(let t of e)t!==null&&(n[`member.${r}`]=t,r++);return n},En=(e,t)=>{let n={},r=1;for(let i of e){if(i===null)continue;let e=wn(i,t);Object.entries(e).forEach(([e,t])=>{n[`member.${r}.${e}`]=t}),r++}return n},Dn=(e,t)=>{let n={};return e[Gn]!=null&&(n[Gn]=(0,z.expectString)(e[Gn])),e[qn]!=null&&(n[qn]=(0,z.expectString)(e[qn])),n},On=(e,t)=>{let n={};return e[H]!=null&&(n[H]=An(e[H],t)),e[V]!=null&&(n[V]=Dn(e[V],t)),e[K]!=null&&(n[K]=(0,z.strictParseInt32)(e[K])),e[Y]!=null&&(n[Y]=(0,z.expectString)(e[Y])),n},kn=(e,t)=>{let n={};return e[H]!=null&&(n[H]=An(e[H],t)),e[ir]!=null&&(n[ir]=(0,z.expectString)(e[ir])),e[V]!=null&&(n[V]=Dn(e[V],t)),e[K]!=null&&(n[K]=(0,z.strictParseInt32)(e[K])),e[nr]!=null&&(n[nr]=(0,z.expectString)(e[nr])),e[Jn]!=null&&(n[Jn]=(0,z.expectString)(e[Jn])),e[Y]!=null&&(n[Y]=(0,z.expectString)(e[Y])),n},An=(e,t)=>{let n={};return e[Un]!=null&&(n[Un]=(0,z.expectString)(e[Un])),e[rr]!=null&&(n[rr]=(0,z.expectString)(e[rr])),e[or]!=null&&(n[or]=(0,z.expectString)(e[or])),e[Xn]!=null&&(n[Xn]=(0,z.expectNonNull)((0,z.parseRfc3339DateTimeWithOffset)(e[Xn]))),n},jn=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},Mn=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},Nn=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},Pn=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},Fn=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},In=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},Ln=(e,t)=>{let n={};return e[Z]!=null&&(n[Z]=(0,z.expectString)(e[Z])),n},B=e=>({httpStatusCode:e.statusCode,requestId:e.headers[`x-amzn-requestid`]??e.headers[`x-amzn-request-id`]??e.headers[`x-amz-request-id`],extendedRequestId:e.headers[`x-amz-id-2`],cfId:e.headers[`x-amz-cf-id`]}),Rn=(0,z.withBaseException)(A),zn=async(e,t,n,r,i)=>{let{hostname:a,protocol:o=`https`,port:s,path:c}=await e.endpoint(),l={protocol:o,hostname:a,port:s,method:`POST`,path:c.endsWith(`/`)?c.slice(0,-1)+n:c+n,headers:t};return r!==void 0&&(l.hostname=r),i!==void 0&&(l.body=i),new an.HttpRequest(l)},Bn={"content-type":`application/x-www-form-urlencoded`},Vn=`2011-06-15`,Hn=`Action`,Un=`AccessKeyId`,Wn=`AssumeRole`,Gn=`AssumedRoleId`,V=`AssumedRoleUser`,Kn=`AssumeRoleWithWebIdentity`,qn=`Arn`,Jn=`Audience`,H=`Credentials`,Yn=`ContextAssertion`,U=`DurationSeconds`,Xn=`Expiration`,Zn=`ExternalId`,Qn=`Key`,W=`Policy`,G=`PolicyArns`,$n=`ProviderArn`,er=`ProvidedContexts`,tr=`ProviderId`,K=`PackedPolicySize`,nr=`Provider`,q=`RoleArn`,J=`RoleSessionName`,rr=`SecretAccessKey`,ir=`SubjectFromWebIdentityToken`,Y=`SourceIdentity`,ar=`SerialNumber`,or=`SessionToken`,sr=`Tags`,cr=`TokenCode`,lr=`TransitiveTagKeys`,ur=`Version`,dr=`Value`,fr=`WebIdentityToken`,X=`arn`,Z=`message`,pr=e=>Object.entries(e).map(([e,t])=>(0,z.extendedEncodeURIComponent)(e)+`=`+(0,z.extendedEncodeURIComponent)(t)).join(`&`),mr=(e,t)=>{if(t.Error?.Code!==void 0)return t.Error.Code;if(e.statusCode==404)return`NotFound`}})),gr,_r,vr,Q,yr=e((()=>{gr=ge(),_r=re(),vr=o(),Ve(),rn(),hr(),Q=class extends vr.Command.classBuilder().ep(Be).m(function(e,t,n,r){return[(0,_r.getSerdePlugin)(n,this.serialize,this.deserialize),(0,gr.getEndpointPlugin)(n,e.getEndpointParameterInstructions())]}).s(`AWSSecurityTokenServiceV20110615`,`AssumeRole`,{}).n(`STSClient`,`AssumeRoleCommand`).f(void 0,M).ser(on).de(cn).build(){}})),br,xr,Sr,$,Cr=e((()=>{br=ge(),xr=re(),Sr=o(),Ve(),rn(),hr(),$=class extends Sr.Command.classBuilder().ep(Be).m(function(e,t,n,r){return[(0,xr.getSerdePlugin)(n,this.serialize,this.deserialize),(0,br.getEndpointPlugin)(n,e.getEndpointParameterInstructions())]}).s(`AWSSecurityTokenServiceV20110615`,`AssumeRoleWithWebIdentity`,{}).n(`STSClient`,`AssumeRoleWithWebIdentityCommand`).f(en,tn).ser(sn).de(ln).build(){}})),wr,Tr,Er,Dr=e((()=>{wr=o(),yr(),Cr(),k(),Tr={AssumeRoleCommand:Q,AssumeRoleWithWebIdentityCommand:$},Er=class extends O{},(0,wr.createAggregatedClient)(Tr,Er)})),Or=e((()=>{yr(),Cr()})),kr=e((()=>{rn()})),Ar,jr,Mr,Nr,Pr,Fr,Ir=e((()=>{ke(),Ar=we(),yr(),Cr(),jr=e=>{if(typeof e?.Arn==`string`){let t=e.Arn.split(`:`);if(t.length>4&&t[4]!==``)return t[4]}},Mr=async(e,t,n,r={})=>{let i=typeof e==`function`?await e():e,a=typeof t==`function`?await t():t,o=await(0,Ar.stsRegionDefaultResolver)(r)();return n?.debug?.(`@aws-sdk/client-sts::resolveRegion`,`accepting first of:`,`${i} (credential provider clientConfig)`,`${a} (contextual client)`,`${o} (STS default: AWS_REGION, profile region, or us-east-1)`),i??a??o},Nr=(e,t)=>{let n,r;return async(i,a)=>{if(r=i,!n){let{logger:i=e?.parentClientConfig?.logger,profile:a=e?.parentClientConfig?.profile,region:o,requestHandler:s=e?.parentClientConfig?.requestHandler,credentialProviderLogger:c,userAgentAppId:l=e?.parentClientConfig?.userAgentAppId}=e,ee=await Mr(o,e?.parentClientConfig?.region,c,{logger:i,profile:a}),te=!Fr(s);n=new t({...e,userAgentAppId:l,profile:a,credentialDefaultProvider:()=>async()=>r,region:ee,requestHandler:te?s:void 0,logger:i})}let{Credentials:o,AssumedRoleUser:s}=await n.send(new Q(a));if(!o||!o.AccessKeyId||!o.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${a.RoleArn}`);let c=jr(s),l={accessKeyId:o.AccessKeyId,secretAccessKey:o.SecretAccessKey,sessionToken:o.SessionToken,expiration:o.Expiration,...o.CredentialScope&&{credentialScope:o.CredentialScope},...c&&{accountId:c}};return Oe(l,`CREDENTIALS_STS_ASSUME_ROLE`,`i`),l}},Pr=(e,t)=>{let n;return async r=>{if(!n){let{logger:r=e?.parentClientConfig?.logger,profile:i=e?.parentClientConfig?.profile,region:a,requestHandler:o=e?.parentClientConfig?.requestHandler,credentialProviderLogger:s,userAgentAppId:c=e?.parentClientConfig?.userAgentAppId}=e,l=await Mr(a,e?.parentClientConfig?.region,s,{logger:r,profile:i}),ee=!Fr(o);n=new t({...e,userAgentAppId:c,profile:i,region:l,requestHandler:ee?o:void 0,logger:r})}let{Credentials:i,AssumedRoleUser:a}=await n.send(new $(r));if(!i||!i.AccessKeyId||!i.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${r.RoleArn}`);let o=jr(a),s={accessKeyId:i.AccessKeyId,secretAccessKey:i.SecretAccessKey,sessionToken:i.SessionToken,expiration:i.Expiration,...i.CredentialScope&&{credentialScope:i.CredentialScope},...o&&{accountId:o}};return o&&Oe(s,`RESOLVED_ACCOUNT_ID`,`T`),Oe(s,`CREDENTIALS_STS_ASSUME_ROLE_WEB_ID`,`k`),s}},Fr=e=>e?.metadata?.handlerProtocol===`h2`})),Lr,Rr,zr,Br,Vr=e((()=>{Ir(),k(),Lr=(e,t)=>t?class extends e{constructor(e){super(e);for(let e of t)this.middlewareStack.use(e)}}:e,Rr=(e={},t)=>Nr(e,Lr(O,t)),zr=(e={},t)=>Pr(e,Lr(O,t)),Br=e=>t=>e({roleAssumer:Rr(t),roleAssumerWithWebIdentity:zr(t),...t})})),Hr=t({AssumeRoleCommand:()=>Q,AssumeRoleResponseFilterSensitiveLog:()=>M,AssumeRoleWithWebIdentityCommand:()=>$,AssumeRoleWithWebIdentityRequestFilterSensitiveLog:()=>en,AssumeRoleWithWebIdentityResponseFilterSensitiveLog:()=>tn,CredentialsFilterSensitiveLog:()=>j,ExpiredTokenException:()=>N,IDPCommunicationErrorException:()=>nn,IDPRejectedClaimException:()=>L,InvalidIdentityTokenException:()=>R,MalformedPolicyDocumentException:()=>P,PackedPolicyTooLargeException:()=>F,RegionDisabledException:()=>I,STS:()=>Er,STSClient:()=>O,STSServiceException:()=>A,__Client:()=>D.Client,decorateDefaultCredentialProvider:()=>Br,getDefaultRoleAssumer:()=>Rr,getDefaultRoleAssumerWithWebIdentity:()=>zr}),Ur=e((()=>{k(),Dr(),Or(),kr(),Vr(),Qt()}));export{D as C,O as S,R as _,zr as a,I as b,Q as c,en as d,tn as f,L as g,nn as h,Rr as i,vr as l,N as m,Hr as n,Er as o,j as p,Br as r,$ as s,Ur as t,M as u,P as v,A as x,F as y};

package/build/exports/{sts-DJilo-ly.mjs → sts-DwsJEvF_.mjs}

@@ -1 +1 @@
-import"./dist-cjs-DBYzdOBR.mjs";import"./dist-cjs-DO06FS0-.mjs";import"./dist-cjs-8ShtoC4L.mjs";import"./dist-cjs-D9iFq61w.mjs";import"./dist-cjs-CkmP5Wcr.mjs";import"./dist-cjs-BY2gcA7W.mjs";import"./dist-cjs-6zIKAlZR.mjs";import"./client-Cf0k1wnb.mjs";import{C as e,S as t,_ as n,a as r,b as i,c as a,d as o,f as s,g as c,h as l,i as u,l as d,m as f,o as p,p as m,r as h,s as g,t as _,u as v,v as y,x as b,y as x}from"./sts-CqD3bswo.mjs";import"./package-DfozRyK6.mjs";_();export{u as getDefaultRoleAssumer};
+import"./dist-cjs-DBYzdOBR.mjs";import"./dist-cjs-DO06FS0-.mjs";import"./dist-cjs-8ShtoC4L.mjs";import"./dist-cjs-D9iFq61w.mjs";import"./dist-cjs-CkmP5Wcr.mjs";import"./dist-cjs-BRgcRUXD.mjs";import"./dist-cjs-6zIKAlZR.mjs";import"./client-Cf0k1wnb.mjs";import{C as e,S as t,_ as n,a as r,b as i,c as a,d as o,f as s,g as c,h as l,i as u,l as d,m as f,o as p,p as m,r as h,s as g,t as _,u as v,v as y,x as b,y as x}from"./sts-B2bNRtll.mjs";import"./package-DfozRyK6.mjs";_();export{u as getDefaultRoleAssumer};

package/build/exports/test.d.mts

@@ -6373,12 +6373,12 @@ interface NotificationsClientToServerEvents {
  * All server-to-client events across all modules.
  * Includes both built-in events and user-defined events from appos/realtime/*.ts
  */
-type ServerToClientEvents = AuthServerToClientEvents & EmailsServerToClientEvents & NotificationsServerToClientEvents & AppOS.ServerToClientEvents;
+type ServerToClientEvents = AuthServerToClientEvents & EmailsServerToClientEvents & NotificationsServerToClientEvents;
 /**
  * All client-to-server events across all modules.
  * Includes both built-in events and user-defined events from appos/realtime/*.ts
  */
-type ClientToServerEvents = AuthClientToServerEvents & EmailsClientToServerEvents & NotificationsClientToServerEvents & AppOS.ClientToServerEvents;
+type ClientToServerEvents = AuthClientToServerEvents & EmailsClientToServerEvents & NotificationsClientToServerEvents;
 /**
  * Inter-server events (for multi-server scaling).
  */
@@ -6426,7 +6426,7 @@ type Realtime = ReturnType<typeof defineRealtime>;
 declare function defineRealtime({
   container,
   redis
-}: DefineRealtimeOptions): Server<any, any, InterServerEvents, SocketData>;
+}: DefineRealtimeOptions): Server<ClientToServerEvents, ServerToClientEvents, InterServerEvents, SocketData>;
 //#endregion
 //#region app/.server/primitives/container.d.ts
 /**