create-sailor 1.9.1 → 1.9.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (71) hide show
  1. package/dist/aws-kms-FFRN23DK.js +1 -0
  2. package/dist/bowser-2VXD6AQS.js +11 -0
  3. package/dist/chunk-6MSNEPUX.js +0 -0
  4. package/dist/chunk-A3H5SUSR.js +8 -0
  5. package/dist/chunk-AN6QWW3N.js +1 -0
  6. package/dist/chunk-CVCZBECH.js +1 -0
  7. package/dist/chunk-GA44DNS2.js +1 -0
  8. package/dist/chunk-LDZWCNWB.js +0 -0
  9. package/dist/chunk-M3NEWJ7L.js +1 -0
  10. package/dist/{chunk-P2WEIQRQ.js → chunk-MGGNSWUA.js} +1 -1
  11. package/dist/chunk-MYIHTCRS.js +4 -0
  12. package/dist/chunk-PA4CKDRJ.js +1 -0
  13. package/dist/chunk-SYWJHPRX.js +0 -0
  14. package/dist/chunk-UWHWNXNX.js +19 -0
  15. package/dist/chunk-X6LE6K3W.js +0 -0
  16. package/dist/chunk-Z4YWESTY.js +2 -0
  17. package/dist/chunk-ZJ3BTCD6.js +17 -0
  18. package/dist/{credits-OHCRPX6E.js → credits-UUPQKRQZ.js} +2 -2
  19. package/dist/dist-23KDUT4O.js +1 -0
  20. package/dist/{dist-NHX3PJTW.js → dist-ZZCU5PKC.js} +2 -2
  21. package/dist/dist-es-7HF5URFJ.js +1 -0
  22. package/dist/dist-es-BORZTE76.js +1 -0
  23. package/dist/dist-es-CN2GMFBK.js +1 -0
  24. package/dist/dist-es-FQ6CEUEU.js +1 -0
  25. package/dist/dist-es-FSE4MSDA.js +5 -0
  26. package/dist/dist-es-H47VUS6Q.js +2 -0
  27. package/dist/dist-es-JCIK4C4M.js +2 -0
  28. package/dist/dist-es-MFZXYPBY.js +1 -0
  29. package/dist/dist-es-PREZ4TU2.js +1 -0
  30. package/dist/dist-es-TCZQ4KMP.js +2 -0
  31. package/dist/dist-es-Y7VP7FI6.js +2 -0
  32. package/dist/dist-es-YN4LRIZR.js +5 -0
  33. package/dist/event-streams-TNY7XPBF.js +1 -0
  34. package/dist/index.js +71 -71
  35. package/dist/loadSso-2XZQIDZP.js +1 -0
  36. package/dist/loadSso-FBBI5PDJ.js +1 -0
  37. package/dist/signin-CJMG23UU.js +1 -0
  38. package/dist/sso-oidc-26OCCRMC.js +1 -0
  39. package/dist/sts-4U2U3ZK4.js +1 -0
  40. package/dist/sts-CP4OREEC.js +1 -0
  41. package/package.json +14 -15
  42. package/dist/aws-kms-3GX7ZOSJ.js +0 -1
  43. package/dist/chunk-FNDUJLS6.js +0 -1
  44. package/dist/chunk-HGJYEXMU.js +0 -1
  45. package/dist/chunk-HX3EZBGO.js +0 -30
  46. package/dist/chunk-JTXBZ2SU.js +0 -1
  47. package/dist/chunk-KRX2KWWT.js +0 -1
  48. package/dist/chunk-OIQB5F6Y.js +0 -1
  49. package/dist/chunk-RH2FFVSB.js +0 -1
  50. package/dist/chunk-SPHQRDN5.js +0 -1
  51. package/dist/chunk-STX7THHW.js +0 -21
  52. package/dist/chunk-TX7AAHER.js +0 -1
  53. package/dist/chunk-VFREGXHN.js +0 -1
  54. package/dist/chunk-W5TBFCWY.js +0 -4
  55. package/dist/chunk-WU3IV4WF.js +0 -1
  56. package/dist/chunk-XB6R2VIU.js +0 -1
  57. package/dist/chunk-ZCWB3HFB.js +0 -1
  58. package/dist/dist-UXDXDLES.js +0 -1
  59. package/dist/dist-es-B5M7V6O6.js +0 -1
  60. package/dist/dist-es-FU66ZQS5.js +0 -1
  61. package/dist/dist-es-KE65J6GC.js +0 -1
  62. package/dist/dist-es-PFLN3FTL.js +0 -5
  63. package/dist/dist-es-U3NYQORW.js +0 -1
  64. package/dist/dist-es-VG3XXJ7M.js +0 -2
  65. package/dist/dist-es-WAHVDQ3F.js +0 -2
  66. package/dist/event-streams-BXAP5G2H.js +0 -1
  67. package/dist/event-streams-SGW54BDO.js +0 -1
  68. package/dist/loadSso-WRXP2HXL.js +0 -1
  69. package/dist/signin-JB7STGTR.js +0 -1
  70. package/dist/sso-oidc-LTNOJMPI.js +0 -1
  71. package/dist/sts-RKUL4Q47.js +0 -5
@@ -1,4 +0,0 @@
1
- var B=e=>{if(e!=null){if(typeof e=="string"){let t=parseFloat(e);if(!Number.isNaN(t))return String(t)!==String(e)&&ye.warn(le(`Expected number but observed string: ${e}`)),t}if(typeof e=="number")return e;throw new TypeError(`Expected number, got ${typeof e}: ${e}`)}},de=Math.ceil(34028234663852886e22),V=e=>{let t=B(e);if(t!==void 0&&!Number.isNaN(t)&&t!==1/0&&t!==-1/0&&Math.abs(t)>de)throw new TypeError(`Expected 32-bit float, got ${e}`);return t},pe=e=>{if(e!=null){if(Number.isInteger(e)&&!Number.isNaN(e))return e;throw new TypeError(`Expected integer, got ${typeof e}: ${e}`)}};var G=e=>j(e,16),Z=e=>j(e,8),j=(e,t)=>{let r=pe(e);if(r!==void 0&&ue(r,t)!==r)throw new TypeError(`Expected ${t}-bit integer, got ${e}`);return r},ue=(e,t)=>{switch(t){case 32:return Int32Array.of(e)[0];case 16:return Int16Array.of(e)[0];case 8:return Int8Array.of(e)[0]}};var X=e=>B(typeof e=="string"?N(e):e);var q=e=>V(typeof e=="string"?N(e):e),me=/(-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?)|(-?Infinity)|(NaN)/g,N=e=>{let t=e.match(me);if(t===null||t[0].length!==e.length)throw new TypeError("Expected real number, got implicit NaN");return parseFloat(e)};var b=e=>G(typeof e=="string"?N(e):e),K=e=>Z(typeof e=="string"?N(e):e),le=e=>String(new TypeError(e).stack||e).split(`
2
- `).slice(0,5).filter(t=>!t.includes("stackTraceWarning")).join(`
3
- `),ye={warn:console.warn};var he=["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],U=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"];function ge(e){let t=e.getUTCFullYear(),r=e.getUTCMonth(),n=e.getUTCDay(),o=e.getUTCDate(),i=e.getUTCHours(),s=e.getUTCMinutes(),f=e.getUTCSeconds(),a=o<10?`0${o}`:`${o}`,c=i<10?`0${i}`:`${i}`,p=s<10?`0${s}`:`${s}`,y=f<10?`0${f}`:`${f}`;return`${he[n]}, ${a} ${U[r]} ${t} ${c}:${p}:${y} GMT`}var be=new RegExp(/^(\d{4})-(\d{2})-(\d{2})[tT](\d{2}):(\d{2}):(\d{2})(?:\.(\d+))?[zZ]$/),xe=e=>{if(e==null)return;if(typeof e!="string")throw new TypeError("RFC-3339 date-times must be expressed as strings");let t=be.exec(e);if(!t)throw new TypeError("Invalid RFC-3339 date-time value");let[r,n,o,i,s,f,a,c]=t,p=b(x(n)),y=u(o,"month",1,12),T=u(i,"day",1,31);return E(p,y,T,{hours:s,minutes:f,seconds:a,fractionalMilliseconds:c})},we=new RegExp(/^(\d{4})-(\d{2})-(\d{2})[tT](\d{2}):(\d{2}):(\d{2})(?:\.(\d+))?(([-+]\d{2}\:\d{2})|[zZ])$/),Te=e=>{if(e==null)return;if(typeof e!="string")throw new TypeError("RFC-3339 date-times must be expressed as strings");let t=we.exec(e);if(!t)throw new TypeError("Invalid RFC-3339 date-time value");let[r,n,o,i,s,f,a,c,p]=t,y=b(x(n)),T=u(o,"month",1,12),M=u(i,"day",1,31),S=E(y,T,M,{hours:s,minutes:f,seconds:a,fractionalMilliseconds:c});return p.toUpperCase()!="Z"&&S.setTime(S.getTime()-De(p)),S},Se=new RegExp(/^(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun), (\d{2}) (Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) (\d{4}) (\d{1,2}):(\d{2}):(\d{2})(?:\.(\d+))? GMT$/),Ee=new RegExp(/^(?:Monday|Tuesday|Wednesday|Thursday|Friday|Saturday|Sunday), (\d{2})-(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)-(\d{2}) (\d{1,2}):(\d{2}):(\d{2})(?:\.(\d+))? GMT$/),$e=new RegExp(/^(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun) (Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) ( [1-9]|\d{2}) (\d{1,2}):(\d{2}):(\d{2})(?:\.(\d+))? (\d{4})$/),Ae=e=>{if(e==null)return;if(typeof e!="string")throw new TypeError("RFC-7231 date-times must be expressed as strings");let t=Se.exec(e);if(t){let[r,n,o,i,s,f,a,c]=t;return E(b(x(i)),I(o),u(n,"day",1,31),{hours:s,minutes:f,seconds:a,fractionalMilliseconds:c})}if(t=Ee.exec(e),t){let[r,n,o,i,s,f,a,c]=t;return Be(E(Ne(i),I(o),u(n,"day",1,31),{hours:s,minutes:f,seconds:a,fractionalMilliseconds:c}))}if(t=$e.exec(e),t){let[r,n,o,i,s,f,a,c]=t;return E(b(x(c)),I(n),u(o.trimLeft(),"day",1,31),{hours:i,minutes:s,seconds:f,fractionalMilliseconds:a})}throw new TypeError("Invalid RFC-7231 date-time value")},Re=e=>{if(e==null)return;let t;if(typeof e=="number")t=e;else if(typeof e=="string")t=X(e);else if(typeof e=="object"&&e.tag===1)t=e.value;else throw new TypeError("Epoch timestamps must be expressed as floating point numbers or their string representation");if(Number.isNaN(t)||t===1/0||t===-1/0)throw new TypeError("Epoch timestamps must be valid, non-Infinite, non-NaN numerics");return new Date(Math.round(t*1e3))},E=(e,t,r,n)=>{let o=t-1;return Ue(e,o,r),new Date(Date.UTC(e,o,r,u(n.hours,"hour",0,23),u(n.minutes,"minute",0,59),u(n.seconds,"seconds",0,60),Oe(n.fractionalMilliseconds)))},Ne=e=>{let t=new Date().getUTCFullYear(),r=Math.floor(t/100)*100+b(x(e));return r<t?r+100:r},Me=50*365*24*60*60*1e3,Be=e=>e.getTime()-new Date().getTime()>Me?new Date(Date.UTC(e.getUTCFullYear()-100,e.getUTCMonth(),e.getUTCDate(),e.getUTCHours(),e.getUTCMinutes(),e.getUTCSeconds(),e.getUTCMilliseconds())):e,I=e=>{let t=U.indexOf(e);if(t<0)throw new TypeError(`Invalid month: ${e}`);return t+1},Ie=[31,28,31,30,31,30,31,31,30,31,30,31],Ue=(e,t,r)=>{let n=Ie[t];if(t===1&&Fe(e)&&(n=29),r>n)throw new TypeError(`Invalid day for ${U[t]} in ${e}: ${r}`)},Fe=e=>e%4===0&&(e%100!==0||e%400===0),u=(e,t,r,n)=>{let o=K(x(e));if(o<r||o>n)throw new TypeError(`${t} must be between ${r} and ${n}, inclusive`);return o},Oe=e=>e==null?0:q("0."+e)*1e3,De=e=>{let t=e[0],r=1;if(t=="+")r=1;else if(t=="-")r=-1;else throw new TypeError(`Offset direction, ${t}, must be "+" or "-"`);let n=Number(e.substring(1,3)),o=Number(e.substring(4,6));return r*(n*60+o)*60*1e3},x=e=>{let t=0;for(;t<e.length-1&&e.charAt(t)==="0";)t++;return t===0?e:e.slice(t)};var h=function(t){return Object.assign(new String(t),{deserializeJSON(){return JSON.parse(String(t))},toString(){return String(t)},toJSON(){return String(t)}})};h.from=e=>e&&typeof e=="object"&&(e instanceof h||"deserializeJSON"in e)?e:typeof e=="string"||Object.getPrototypeOf(e)===String.prototype?h(String(e)):h(JSON.stringify(e));h.fromObject=h.from;function _e(e){return(e.includes(",")||e.includes('"'))&&(e=`"${e.replace(/"/g,'\\"')}"`),e}var F="(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun)(?:[ne|u?r]?s?day)?",O="(Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)",D="(\\d?\\d):(\\d{2}):(\\d{2})(?:\\.(\\d+))?",Q="(\\d?\\d)",v="(\\d{4})",Ce=new RegExp(/^(\d{4})-(\d\d)-(\d\d)[tT](\d\d):(\d\d):(\d\d)(\.(\d+))?(([-+]\d\d:\d\d)|[zZ])$/),Pe=new RegExp(`^${F}, ${Q} ${O} ${v} ${D} GMT$`),Le=new RegExp(`^${F}, ${Q}-${O}-(\\d\\d) ${D} GMT$`),He=new RegExp(`^${F} ${O} ( [1-9]|\\d\\d) ${D} ${v}$`),Je=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],ze=e=>{if(e==null)return;let t=NaN;if(typeof e=="number")t=e;else if(typeof e=="string"){if(!/^-?\d*\.?\d+$/.test(e))throw new TypeError("parseEpochTimestamp - numeric string invalid.");t=Number.parseFloat(e)}else typeof e=="object"&&e.tag===1&&(t=e.value);if(isNaN(t)||Math.abs(t)===1/0)throw new TypeError("Epoch timestamps must be valid finite numbers.");return new Date(Math.round(t*1e3))},ke=e=>{if(e==null)return;if(typeof e!="string")throw new TypeError("RFC3339 timestamps must be strings");let t=Ce.exec(e);if(!t)throw new TypeError(`Invalid RFC3339 timestamp format ${e}`);let[,r,n,o,i,s,f,,a,c]=t;m(n,1,12),m(o,1,31),m(i,0,23),m(s,0,59),m(f,0,60);let p=new Date(Date.UTC(Number(r),Number(n)-1,Number(o),Number(i),Number(s),Number(f),Number(a)?Math.round(parseFloat(`0.${a}`)*1e3):0));if(p.setUTCFullYear(Number(r)),c.toUpperCase()!="Z"){let[,y,T,M]=/([+-])(\d\d):(\d\d)/.exec(c)||[void 0,"+",0,0],S=y==="-"?1:-1;p.setTime(p.getTime()+S*(Number(T)*60*60*1e3+Number(M)*60*1e3))}return p},We=e=>{if(e==null)return;if(typeof e!="string")throw new TypeError("RFC7231 timestamps must be strings.");let t,r,n,o,i,s,f,a;if((a=Pe.exec(e))?[,t,r,n,o,i,s,f]=a:(a=Le.exec(e))?([,t,r,n,o,i,s,f]=a,n=(Number(n)+1900).toString()):(a=He.exec(e))&&([,r,t,o,i,s,f,n]=a),n&&s){let c=Date.UTC(Number(n),Je.indexOf(r),Number(t),Number(o),Number(i),Number(s),f?Math.round(parseFloat(`0.${f}`)*1e3):0);m(t,1,31),m(o,0,23),m(i,0,59),m(s,0,60);let p=new Date(c);return p.setUTCFullYear(Number(n)),p}throw new TypeError(`Invalid RFC7231 date-time value ${e}.`)};function m(e,t,r){let n=Number(e);if(n<t||n>r)throw new Error(`Value ${n} out of range [${t}, ${r}]`)}function Ye(e,t,r){if(r<=0||!Number.isInteger(r))throw new Error("Invalid number of delimiters ("+r+") for splitEvery.");let n=e.split(t);if(r===1)return n;let o=[],i="";for(let s=0;s<n.length;s++)i===""?i=n[s]:i+=t+n[s],(s+1)%r===0&&(o.push(i),i="");return i!==""&&o.push(i),o}var Ve=e=>{let t=e.length,r=[],n=!1,o,i=0;for(let s=0;s<t;++s){let f=e[s];switch(f){case'"':o!=="\\"&&(n=!n);break;case",":n||(r.push(e.slice(i,s)),i=s+1);break;default:}o=f}return r.push(e.slice(i)),r.map(s=>{s=s.trim();let f=s.length;return f<2?s:(s[0]==='"'&&s[f-1]==='"'&&(s=s.slice(1,f-1)),s.replace(/\\"/g,'"'))})};var ee=/^-?\d*(\.\d+)?$/,_=class e{string;type;constructor(t,r){if(this.string=t,this.type=r,!ee.test(t))throw new Error('@smithy/core/serde - NumericValue must only contain [0-9], at most one decimal point ".", and an optional negation prefix "-".')}toString(){return this.string}static[Symbol.hasInstance](t){if(!t||typeof t!="object")return!1;let r=t;return e.prototype.isPrototypeOf(t)||r.type==="bigDecimal"&&ee.test(r.string)}};var te={},C={};for(let e=0;e<256;e++){let t=e.toString(16).toLowerCase();t.length===1&&(t=`0${t}`),te[e]=t,C[t]=e}function Ge(e){if(e.length%2!==0)throw new Error("Hex encoded strings must have an even number length");let t=new Uint8Array(e.length/2);for(let r=0;r<e.length;r+=2){let n=e.slice(r,r+2).toLowerCase();if(n in C)t[r/2]=C[n];else throw new Error(`Cannot decode unrecognized sequence ${n} as hexadecimal`)}return t}function P(e){let t="";for(let r=0;r<e.byteLength;r++)t+=te[e[r]];return t}var L=e=>typeof ArrayBuffer=="function"&&e instanceof ArrayBuffer||Object.prototype.toString.call(e)==="[object ArrayBuffer]";var l=(e,t=0,r=e.byteLength-t)=>{if(!L(e))throw new TypeError(`The "input" argument must be ArrayBuffer. Received type ${typeof e} (${e})`);return Buffer.from(e,t,r)},w=(e,t)=>{if(typeof e!="string")throw new TypeError(`The "input" argument must be of type string. Received type ${typeof e} (${e})`);return t?Buffer.from(e,t):Buffer.from(e)};var g=e=>{let t=w(e,"utf8");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength/Uint8Array.BYTES_PER_ELEMENT)};var $=e=>{if(typeof e=="string")return e;if(typeof e!="object"||typeof e.byteOffset!="number"||typeof e.byteLength!="number")throw new Error("@smithy/util-utf8: toUtf8 encoder function only accepts string | Uint8Array.");return l(e.buffer,e.byteOffset,e.byteLength).toString("utf8")};import{getRandomValues as ot}from"crypto";var d=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,"0"));function re(e){return typeof crypto<"u"&&typeof crypto.randomUUID=="function"?()=>crypto.randomUUID():()=>{let t=new Uint8Array(16);return e(t),t[6]=t[6]&15|64,t[8]=t[8]&63|128,d[t[0]]+d[t[1]]+d[t[2]]+d[t[3]]+"-"+d[t[4]]+d[t[5]]+"-"+d[t[6]]+d[t[7]]+"-"+d[t[8]]+d[t[9]]+"-"+d[t[10]]+d[t[11]]+d[t[12]]+d[t[13]]+d[t[14]]+d[t[15]]}}var Ze=/^[A-Za-z0-9+/]*={0,2}$/,A=e=>{if(e.length*3%4!==0)throw new TypeError("Incorrect padding on base64 string.");if(!Ze.exec(e))throw new TypeError("Invalid base64 string.");let t=w(e,"base64");return new Uint8Array(t.buffer,t.byteOffset,t.byteLength)};var R=e=>{let t;if(typeof e=="string"?t=g(e):t=e,typeof t!="object"||typeof t.byteOffset!="number"||typeof t.byteLength!="number")throw new Error("@smithy/util-base64: toBase64 encoder function only accepts string | Uint8Array.");return l(t.buffer,t.byteOffset,t.byteLength).toString("base64")};var H=e=>typeof e=="string"?g(e):ArrayBuffer.isView(e)?new Uint8Array(e.buffer,e.byteOffset,e.byteLength/Uint8Array.BYTES_PER_ELEMENT):new Uint8Array(e);var je={name:"serializerMiddleware",step:"serialize",tags:["SERIALIZER"],override:!0};import{createHash as Xe,createHmac as qe}from"crypto";var J=class{algorithmIdentifier;secret;hash;constructor(t,r){this.algorithmIdentifier=t,this.secret=r,this.reset()}update(t,r){this.hash.update(H(ne(t,r)))}digest(){return Promise.resolve(this.hash.digest())}reset(){this.hash=this.secret?qe(this.algorithmIdentifier,ne(this.secret)):Xe(this.algorithmIdentifier)}};function ne(e,t){return Buffer.isBuffer(e)?e:typeof e=="string"?w(e,t):ArrayBuffer.isView(e)?l(e.buffer,e.byteOffset,e.byteLength):l(e)}var z=class e extends Uint8Array{static fromString(t,r="utf-8"){if(typeof t=="string")return r==="base64"?e.mutate(A(t)):e.mutate(g(t));throw new Error(`Unsupported conversion from ${typeof t} to Uint8ArrayBlobAdapter.`)}static mutate(t){return Object.setPrototypeOf(t,e.prototype),t}transformToString(t="utf-8"){return t==="base64"?R(this):$(this)}};var k=e=>typeof ReadableStream=="function"&&(e?.constructor?.name===ReadableStream.name||e instanceof ReadableStream);import{Readable as Y}from"stream";var oe=async e=>typeof Blob=="function"&&e instanceof Blob||e.constructor?.name==="Blob"?Blob.prototype.arrayBuffer!==void 0?new Uint8Array(await e.arrayBuffer()):Ke(e):Qe(e);async function Ke(e){let t=await ve(e),r=A(t);return new Uint8Array(r)}async function Qe(e){let t=[],r=e.getReader(),n=!1,o=0;for(;!n;){let{done:f,value:a}=await r.read();a&&(t.push(a),o+=a.length),n=f}let i=new Uint8Array(o),s=0;for(let f of t)i.set(f,s),s+=f.length;return i}function ve(e){return new Promise((t,r)=>{let n=new FileReader;n.onloadend=()=>{if(n.readyState!==2)return r(new Error("Reader aborted too early"));let o=n.result??"",i=o.indexOf(","),s=i>-1?i+1:o.length;t(o.substring(s))},n.onabort=()=>r(new Error("Read aborted")),n.onerror=()=>r(n.error),n.readAsDataURL(e)})}var se="The stream has already been transformed.",fe=e=>{if(!ie(e)&&!k(e)){let o=e?.__proto__?.constructor?.name||e;throw new Error(`Unexpected stream implementation, expect Blob or ReadableStream, got ${o}`)}let t=!1,r=async()=>{if(t)throw new Error(se);return t=!0,await oe(e)},n=o=>{if(typeof o.stream!="function")throw new Error(`Cannot transform payload Blob to web stream. Please make sure the Blob.stream() is polyfilled.
4
- If you are using React Native, this API is not yet supported, see: https://react-native.canny.io/feature-requests/p/fetch-streaming-body`);return o.stream()};return Object.assign(e,{transformToByteArray:r,transformToString:async o=>{let i=await r();if(o==="base64")return R(i);if(o==="hex")return P(i);if(o===void 0||o==="utf8"||o==="utf-8")return $(i);if(typeof TextDecoder=="function")return new TextDecoder(o).decode(i);throw new Error("TextDecoder is not available, please make sure polyfill is provided.")},transformToWebStream:()=>{if(t)throw new Error(se);if(t=!0,ie(e))return n(e);if(k(e))return e;throw new Error(`Cannot transform payload to web stream, got ${e}`)}})},ie=e=>typeof Blob=="function"&&e instanceof Blob;import{Writable as et}from"stream";var W=class extends et{bufferedBytes=[];_write(t,r,n){this.bufferedBytes.push(t),n()}},tt=e=>typeof ReadableStream=="function"&&e instanceof ReadableStream;async function rt(e){let t=[],r=e.getReader(),n=!1,o=0;for(;!n;){let{done:f,value:a}=await r.read();a&&(t.push(a),o+=a.length),n=f}let i=new Uint8Array(o),s=0;for(let f of t)i.set(f,s),s+=f.length;return i}var ae=e=>tt(e)?rt(e):new Promise((t,r)=>{let n=new W;e.pipe(n),e.on("error",o=>{n.end(),r(o)}),n.on("error",r),n.on("finish",function(){let o=new Uint8Array(Buffer.concat(this.bufferedBytes));t(o)})});var ce="The stream has already been transformed.",nt=e=>{if(!(e instanceof Y))try{return fe(e)}catch{let o=e?.__proto__?.constructor?.name||e;throw new Error(`Unexpected stream implementation, expect Stream.Readable instance, got ${o}`)}let t=!1,r=async()=>{if(t)throw new Error(ce);return t=!0,await ae(e)};return Object.assign(e,{transformToByteArray:r,transformToString:async n=>{let o=await r();return n===void 0||Buffer.isEncoding(n)?l(o.buffer,o.byteOffset,o.byteLength).toString(n):new TextDecoder(n).decode(o)},transformToWebStream:()=>{if(t)throw new Error(ce);if(e.readableFlowing!==null)throw new Error("The stream has been consumed by other callbacks.");if(typeof Y.toWeb!="function")throw new Error("Readable.toWeb() is not supported. Please ensure a polyfill is available.");return t=!0,Y.toWeb(e)}})};var st=ot,it=re(st),cr=it;export{ge as a,xe as b,Te as c,Ae as d,Re as e,h as f,_e as g,ze as h,ke as i,We as j,Ye as k,Ve as l,_ as m,Ge as n,P as o,L as p,A as q,g as r,R as s,H as t,$ as u,je as v,J as w,z as x,nt as y,it as z,cr as A};
@@ -1 +0,0 @@
1
- import{a as f}from"./chunk-JTXBZ2SU.js";var A="AWS_PROFILE",N="default",q=e=>e.profile||process.env[A]||N;import{join as L}from"path";import{homedir as w}from"os";import{sep as H}from"path";var S={},b=()=>process&&process.geteuid?`${process.geteuid()}`:"DEFAULT",c=()=>{let{HOME:e,USERPROFILE:t,HOMEPATH:o,HOMEDRIVE:r=`C:${H}`}=process.env;if(e)return e;if(t)return t;if(o)return`${r}${o}`;let i=b();return S[i]||(S[i]=w()),S[i]};var j="AWS_CONFIG_FILE",F=()=>process.env[j]||L(c(),".aws","config");import{join as C}from"path";var E=e=>Object.entries(e).filter(([t])=>{let o=t.indexOf(".");return o===-1?!1:Object.values(f).includes(t.substring(0,o))}).reduce((t,[o,r])=>{let i=o.indexOf("."),n=o.substring(0,i)===f.PROFILE?o.substring(i+1):o;return t[n]=r,t},{...e.default&&{default:e.default}});import{join as v}from"path";var k="AWS_SHARED_CREDENTIALS_FILE",I=()=>process.env[k]||v(c(),".aws","credentials");var y=/^([\w-]+)\s(["'])?([\w-@\+\.%:/]+)\2$/,$=["__proto__","profile __proto__"],g=e=>{let t={},o,r;for(let i of e.split(/\r?\n/)){let n=i.split(/(^|\s)[;#]/)[0].trim();if(n[0]==="["&&n[n.length-1]==="]"){o=void 0,r=void 0;let s=n.substring(1,n.length-1),p=y.exec(s);if(p){let[,a,,h]=p;Object.values(f).includes(a)&&(o=[a,h].join("."))}else o=s;if($.includes(s))throw new Error(`Found invalid profile name "${s}"`)}else if(o){let s=n.indexOf("=");if(![0,-1].includes(s)){let[p,a]=[n.substring(0,s).trim(),n.substring(s+1).trim()];if(a==="")r=p;else{r&&i.trimStart()===i&&(r=void 0),t[o]=t[o]||{};let h=r?[r,p].join("."):p;t[o][h]=a}}}}return t};import{readFile as G}from"fs/promises";var O={},d={},m=(e,t)=>d[e]!==void 0?d[e]:((!O[e]||t?.ignoreCache)&&(O[e]=G(e,"utf8")),O[e]);var _=()=>({}),R=async(e={})=>{let{filepath:t=I(),configFilepath:o=F()}=e,r=c(),i="~/",n=t;t.startsWith(i)&&(n=C(r,t.slice(2)));let x=o;o.startsWith(i)&&(x=C(r,o.slice(2)));let s=await Promise.all([m(x,{ignoreCache:e.ignoreCache}).then(g).then(E).catch(_),m(n,{ignoreCache:e.ignoreCache}).then(g).catch(_)]);return{configFile:s[0],credentialsFile:s[1]}};var D=e=>Object.entries(e).filter(([t])=>t.startsWith(f.SSO_SESSION+".")).reduce((t,[o,r])=>({...t,[o.substring(o.indexOf(".")+1)]:r}),{});var W=()=>({}),_e=async(e={})=>m(e.configFilepath??F()).then(g).then(D).catch(W);var T=(...e)=>{let t={};for(let o of e)for(let[r,i]of Object.entries(o))t[r]!==void 0?Object.assign(t[r],i):t[r]=i;return t};var Ae=async e=>{let t=await R(e);return T(t.configFile,t.credentialsFile)};import{readFile as X}from"fs/promises";import{createHash as K}from"crypto";import{join as V}from"path";var P=e=>{let o=K("sha1").update(e).digest("hex");return V(c(),".aws","sso","cache",`${o}.json`)};var u={},M=async e=>{if(u[e])return u[e];let t=P(e),o=await X(t,"utf8");return JSON.parse(o)};var U={getFileRecord(){return d},interceptFile(e,t){d[e]=Promise.resolve(t)},getTokenRecord(){return u},interceptToken(e,t){u[e]=t}};export{A as a,q as b,P as c,M as d,m as e,R as f,_e as g,Ae as h,U as i};
@@ -1 +0,0 @@
1
- var f=r=>typeof ArrayBuffer=="function"&&r instanceof ArrayBuffer||Object.prototype.toString.call(r)==="[object ArrayBuffer]";import{Buffer as t}from"buffer";var o=(r,e=0,n=r.byteLength-e)=>{if(!f(r))throw new TypeError(`The "input" argument must be ArrayBuffer. Received type ${typeof r} (${r})`);return t.from(r,e,n)},y=(r,e)=>{if(typeof r!="string")throw new TypeError(`The "input" argument must be of type string. Received type ${typeof r} (${r})`);return e?t.from(r,e):t.from(r)};var a=r=>{let e=y(r,"utf8");return new Uint8Array(e.buffer,e.byteOffset,e.byteLength/Uint8Array.BYTES_PER_ELEMENT)};var p=r=>{if(typeof r=="string")return r;if(typeof r!="object"||typeof r.byteOffset!="number"||typeof r.byteLength!="number")throw new Error("@smithy/util-utf8: toUtf8 encoder function only accepts string | Uint8Array.");return o(r.buffer,r.byteOffset,r.byteLength).toString("utf8")};export{f as a,o as b,y as c,a as d,p as e};
@@ -1 +0,0 @@
1
- import{a as e}from"./chunk-TX7AAHER.js";var c=(...t)=>async()=>{if(t.length===0)throw new e("No providers in chain");let o;for(let n of t)try{return await n()}catch(r){if(o=r,r?.tryNextLink)continue;throw r}throw o};export{c as a};
@@ -1 +0,0 @@
1
- import{a as v}from"./chunk-HX3EZBGO.js";import{a as A}from"./chunk-5ECPN42W.js";import{a as l,b as u,c as f,d as y,e as m,f as g,g as S}from"./chunk-QSLKOXQ6.js";import{a as d}from"./chunk-ZIBRKYXP.js";import{a as e}from"./chunk-XE3I3HCZ.js";import"./chunk-VFREGXHN.js";import"./chunk-ZCWB3HFB.js";import"./chunk-WU3IV4WF.js";import"./chunk-XB6R2VIU.js";import"./chunk-KRX2KWWT.js";import"./chunk-OIQB5F6Y.js";import"./chunk-JTXBZ2SU.js";import"./chunk-WJLTO7JW.js";import"./chunk-TW5BOTVX.js";import"./chunk-SPHQRDN5.js";import"./chunk-FNDUJLS6.js";import"./chunk-HGJYEXMU.js";import"./chunk-W5TBFCWY.js";import"./chunk-TX7AAHER.js";import"./chunk-IYWUY3VA.js";var i=null;function _(){if(process.env.AWS_KMS_KEY_ID||process.env.AWS_KMS_KEY_ARN)return"aws-kms";if(process.env.VAULT_LOCAL_MASTER_KEY||process.env.VAULT_MASTER_KEY)return"local";throw new Error("No vault provider detected. Set AWS_KMS_KEY_ID/AWS_KMS_KEY_ARN (for AWS KMS) or VAULT_LOCAL_MASTER_KEY/VAULT_MASTER_KEY (for local). Or pass explicit config to createVault().")}async function p(n){let r=n?.provider??process.env.VAULT_PROVIDER??_();switch(d.info("[vault] Creating provider",{provider:r}),r){case"aws-kms":{let{AWSKMSProvider:o}=await import("./aws-kms-3GX7ZOSJ.js"),t=n;return new o({provider:"aws-kms",...t?.keyId!==void 0?{keyId:t.keyId}:{},...t?.region!==void 0?{region:t.region}:{},...t?.credentials!==void 0?{credentials:t.credentials}:{},...t?.keyVersion!==void 0?{keyVersion:t.keyVersion}:{}})}case"local":{let{LocalProvider:o}=await import("./local-6WWVOMA7.js"),t=n;return new o({provider:"local",...t?.masterKey!==void 0?{masterKey:t.masterKey}:{},...t?.salt!==void 0?{salt:t.salt}:{},...t?.keyVersion!==void 0?{keyVersion:t.keyVersion}:{}})}default:throw new Error(`Unknown vault provider: ${r}`)}}async function s(){return i||(i=await p()),i}function k(n){i=n}async function V(){i&&(await i.close(),i=null)}async function x(n,r={}){let o=JSON.stringify(n);if(o===void 0)throw new Error("[vault] Cannot encrypt undefined \u2014 value must be JSON-serializable");let t=await s(),c=r.context?.tenantId,a=r.context?.kind;return t.encrypt(o,{...r.id!==void 0?{id:r.id}:{},...c!==void 0?{tenantId:c}:{},metadata:{name:a??"json",type:"credential"}})}async function E(n,r={}){let o=await s(),t=r.context?.tenantId,c=await o.decrypt(n,t!==void 0?{tenantId:t}:void 0);try{return JSON.parse(c)}catch(a){throw new Error(`[vault] decryptJSON: failed to parse decrypted payload as JSON: ${a instanceof Error?a.message:String(a)}`)}}function w(n){if(!n||typeof n!="object")return!1;let r=n;return typeof r.ciphertext=="string"&&typeof r.encryptedDek=="string"&&typeof r.iv=="string"&&typeof r.authTag=="string"&&typeof r.keyVersion=="number"&&r.algorithm==="aes-256-gcm"}var K=e.object({id:e.string(),ciphertext:e.string(),encryptedDek:e.string(),iv:e.string(),authTag:e.string(),dekIv:e.string().optional(),dekAuthTag:e.string().optional(),keyVersion:e.number().int().min(1),envelopeVersion:e.literal(2).optional(),algorithm:e.literal("aes-256-gcm"),tenantId:e.string().optional(),metadata:e.object({name:e.string(),type:e.enum(["api_key","oauth_token","credential","certificate","generic"]),expiresAt:e.string().datetime().optional()}).optional(),createdAt:e.string().datetime(),rotatedAt:e.string().datetime().optional()}),h=e.object({id:e.string(),name:e.string(),tenantId:e.string().optional(),type:e.enum(["api_key","oauth_token","credential","certificate","generic"]),createdAt:e.string().datetime(),rotatedAt:e.string().datetime().optional(),expiresAt:e.string().datetime().optional()});export{v as AWSKMSProvider,K as EncryptedSecretSchema,A as LocalProvider,h as SecretMetadataSchema,u as aesDecrypt,l as aesEncrypt,V as closeVault,p as createVault,E as decryptJSON,f as deriveKey,x as encryptJSON,S as fromBase64,m as generateIv,y as generateKey,s as getVault,w as isEncryptedSecret,k as setVault,g as toBase64};
@@ -1 +0,0 @@
1
- import{a as L}from"./chunk-ZCWB3HFB.js";import{b as y,e as D,h as k}from"./chunk-WU3IV4WF.js";import"./chunk-JTXBZ2SU.js";import"./chunk-TW5BOTVX.js";import{a as c}from"./chunk-SPHQRDN5.js";import{f as b}from"./chunk-HGJYEXMU.js";import"./chunk-W5TBFCWY.js";import{b as l}from"./chunk-TX7AAHER.js";import"./chunk-IYWUY3VA.js";var O=(e,r,t)=>{let o={EcsContainer:async s=>{let{fromHttp:i}=await import("./dist-es-PFLN3FTL.js"),{fromContainerMetadata:n}=await import("./dist-es-VG3XXJ7M.js");return t?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>L(i(s??{}),n(s))().then(I)},Ec2InstanceMetadata:async s=>{t?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");let{fromInstanceMetadata:i}=await import("./dist-es-VG3XXJ7M.js");return async()=>i(s)().then(I)},Environment:async s=>{t?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");let{fromEnv:i}=await import("./dist-es-FU66ZQS5.js");return async()=>i(s)().then(I)}};if(e in o)return o[e];throw new l(`Unsupported credential source in profile ${r}. Got ${e}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:t})},I=e=>c(e,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p");var N=(e,{profile:r="default",logger:t}={})=>!!e&&typeof e=="object"&&typeof e.role_arn=="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1&&["undefined","string"].indexOf(typeof e.external_id)>-1&&["undefined","string"].indexOf(typeof e.mfa_serial)>-1&&(Y(e,{profile:r,logger:t})||z(e,{profile:r,logger:t})),Y=(e,{profile:r,logger:t})=>{let o=typeof e.source_profile=="string"&&typeof e.credential_source>"u";return o&&t?.debug?.(` ${r} isAssumeRoleWithSourceProfile source_profile=${e.source_profile}`),o},z=(e,{profile:r,logger:t})=>{let o=typeof e.credential_source=="string"&&typeof e.source_profile>"u";return o&&t?.debug?.(` ${r} isCredentialSourceProfile credential_source=${e.credential_source}`),o},$=async(e,r,t,o,s={},i)=>{t.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");let n=r[e],{source_profile:a,region:p}=n;if(!t.roleAssumer){let{getDefaultRoleAssumer:u}=await import("./sts-RKUL4Q47.js");t.roleAssumer=u({...t.clientConfig,credentialProviderLogger:t.logger,parentClientConfig:{...o,...t?.parentClientConfig,region:p??t?.parentClientConfig?.region??o?.region}},t.clientPlugins)}if(a&&a in s)throw new l(`Detected a cycle attempting to resolve credentials for profile ${y(t)}. Profiles visited: `+Object.keys(s).join(", "),{logger:t.logger});t.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${a?`source_profile=[${a}]`:`profile=[${e}]`}`);let m=a?i(a,r,t,o,{...s,[a]:!0},F(r[a]??{})):(await O(n.credential_source,e,t.logger)(t))();if(F(n))return m.then(u=>c(u,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));{let u={RoleArn:n.role_arn,RoleSessionName:n.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:n.external_id,DurationSeconds:parseInt(n.duration_seconds||"3600",10)},{mfa_serial:d}=n;if(d){if(!t.mfaCodeProvider)throw new l(`Profile ${e} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:t.logger,tryNextLink:!1});u.SerialNumber=d,u.TokenCode=await t.mfaCodeProvider(d)}let g=await m;return t.roleAssumer(g,u).then(f=>c(f,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},F=e=>!e.role_arn&&!!e.credential_source;import{createHash as V,createPrivateKey as X,createPublicKey as Q,sign as Z}from"crypto";import{promises as P}from"fs";import{homedir as ee}from"os";import{dirname as te,join as K}from"path";var E=class e{profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300*1e3;constructor(r,t,o){this.profileData=r,this.init=t,this.callerClientConfig=o}async loadCredentials(){let r=await this.loadToken();if(!r)throw new l(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let t=r.accessToken,o=Date.now();return new Date(t.expiresAt).getTime()-o<=e.REFRESH_THRESHOLD?this.refresh(r):{accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,accountId:t.accountId,expiration:new Date(t.expiresAt)}}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}async refresh(r){let{SigninClient:t,CreateOAuth2TokenCommand:o}=await import("./signin-JB7STGTR.js"),{logger:s,userAgentAppId:i}=this.callerClientConfig??{},a=(d=>d?.metadata?.handlerProtocol==="h2")(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,p=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,m=new t({credentials:{accessKeyId:"",secretAccessKey:""},region:p,requestHandler:a,logger:s,userAgentAppId:i,...this.init?.clientConfig});this.createDPoPInterceptor(m.middlewareStack);let u={tokenInput:{clientId:r.clientId,refreshToken:r.refreshToken,grantType:"refresh_token"}};try{let d=await m.send(new o(u)),{accessKeyId:g,secretAccessKey:f,sessionToken:_}=d.tokenOutput?.accessToken??{},{refreshToken:w,expiresIn:R}=d.tokenOutput??{};if(!g||!f||!_||!w)throw new l("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let S=(R??900)*1e3,h=new Date(Date.now()+S),A={...r,accessToken:{...r.accessToken,accessKeyId:g,secretAccessKey:f,sessionToken:_,expiresAt:h.toISOString()},refreshToken:w};await this.saveToken(A);let C=A.accessToken;return{accessKeyId:C.accessKeyId,secretAccessKey:C.secretAccessKey,sessionToken:C.sessionToken,accountId:C.accountId,expiration:h}}catch(d){if(d.name==="AccessDeniedException"){let g=d.error,f;switch(g){case"TOKEN_EXPIRED":f="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":f="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":f="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:f=`Failed to refresh token: ${String(d)}. Please re-authenticate using \`aws login\``}throw new l(f,{logger:this.logger,tryNextLink:!1})}throw new l(`Failed to refresh token: ${String(d)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let r=this.getTokenFilePath();try{let t;try{t=await D(r,{ignoreCache:this.init?.ignoreCache})}catch{t=await P.readFile(r,"utf8")}let o=JSON.parse(t),s=["accessToken","clientId","refreshToken","dpopKey"].filter(i=>!o[i]);if(o.accessToken?.accountId||s.push("accountId"),s.length>0)throw new l(`Token validation failed, missing fields: ${s.join(", ")}`,{logger:this.logger,tryNextLink:!1});return o}catch(t){throw new l(`Failed to load token from ${r}: ${String(t)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(r){let t=this.getTokenFilePath(),o=te(t);try{await P.mkdir(o,{recursive:!0})}catch{}await P.writeFile(t,JSON.stringify(r,null,2),"utf8")}getTokenFilePath(){let r=process.env.AWS_LOGIN_CACHE_DIRECTORY??K(ee(),".aws","login","cache"),t=Buffer.from(this.loginSession,"utf8"),o=V("sha256").update(t).digest("hex");return K(r,`${o}.json`)}derToRawSignature(r){let t=2;if(r[t]!==2)throw new Error("Invalid DER signature");t++;let o=r[t++],s=r.subarray(t,t+o);if(t+=o,r[t]!==2)throw new Error("Invalid DER signature");t++;let i=r[t++],n=r.subarray(t,t+i);s=s[0]===0?s.subarray(1):s,n=n[0]===0?n.subarray(1):n;let a=Buffer.concat([Buffer.alloc(32-s.length),s]),p=Buffer.concat([Buffer.alloc(32-n.length),n]);return Buffer.concat([a,p])}createDPoPInterceptor(r){r.add(t=>async o=>{if(b.isInstance(o.request)){let s=o.request,i=`${s.protocol}//${s.hostname}${s.port?`:${s.port}`:""}${s.path}`,n=await this.generateDpop(s.method,i);s.headers={...s.headers,DPoP:n}}return t(o)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(r="POST",t){let o=await this.loadToken();try{let s=X({key:o.dpopKey,format:"pem",type:"sec1"}),n=Q(s).export({format:"der",type:"spki"}),a=-1;for(let h=0;h<n.length;h++)if(n[h]===4){a=h;break}let p=n.slice(a+1,a+33),m=n.slice(a+33,a+65),u={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:p.toString("base64url"),y:m.toString("base64url")}},d={jti:crypto.randomUUID(),htm:r,htu:t,iat:Math.floor(Date.now()/1e3)},g=Buffer.from(JSON.stringify(u)).toString("base64url"),f=Buffer.from(JSON.stringify(d)).toString("base64url"),_=`${g}.${f}`,w=Z("sha256",Buffer.from(_),s),S=this.derToRawSignature(w).toString("base64url");return`${_}.${S}`}catch(s){throw new l(`Failed to generate Dpop proof: ${s instanceof Error?s.message:String(s)}`,{logger:this.logger,tryNextLink:!1})}}};var B=e=>async({callerClientConfig:r}={})=>{e?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let t=await k(e||{}),o=y({profile:e?.profile??r?.profile}),s=t[o];if(!s?.login_session)throw new l(`Profile ${o} does not contain login_session.`,{tryNextLink:!0,logger:e?.logger});let n=await new E(s,e,r).loadCredentials();return c(n,"CREDENTIALS_LOGIN","AD")};var H=e=>!!(e&&e.login_session),j=async(e,r,t)=>{let o=await B({...r,profile:e})({callerClientConfig:t});return c(o,"CREDENTIALS_PROFILE_LOGIN","AC")};var W=e=>!!e&&typeof e=="object"&&typeof e.credential_process=="string",q=async(e,r)=>import("./dist-es-KE65J6GC.js").then(({fromProcess:t})=>t({...e,profile:r})().then(o=>c(o,"CREDENTIALS_PROFILE_PROCESS","v")));var M=async(e,r,t={},o)=>{let{fromSSO:s}=await import("./dist-es-WAHVDQ3F.js");return s({profile:e,logger:t.logger,parentClientConfig:t.parentClientConfig,clientConfig:t.clientConfig})({callerClientConfig:o}).then(i=>r.sso_session?c(i,"CREDENTIALS_PROFILE_SSO","r"):c(i,"CREDENTIALS_PROFILE_SSO_LEGACY","t"))},U=e=>e&&(typeof e.sso_start_url=="string"||typeof e.sso_account_id=="string"||typeof e.sso_session=="string"||typeof e.sso_region=="string"||typeof e.sso_role_name=="string");var T=e=>!!e&&typeof e=="object"&&typeof e.aws_access_key_id=="string"&&typeof e.aws_secret_access_key=="string"&&["undefined","string"].indexOf(typeof e.aws_session_token)>-1&&["undefined","string"].indexOf(typeof e.aws_account_id)>-1,x=async(e,r)=>{r?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");let t={accessKeyId:e.aws_access_key_id,secretAccessKey:e.aws_secret_access_key,sessionToken:e.aws_session_token,...e.aws_credential_scope&&{credentialScope:e.aws_credential_scope},...e.aws_account_id&&{accountId:e.aws_account_id}};return c(t,"CREDENTIALS_PROFILE","n")};var G=e=>!!e&&typeof e=="object"&&typeof e.web_identity_token_file=="string"&&typeof e.role_arn=="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1,J=async(e,r,t)=>import("./dist-es-U3NYQORW.js").then(({fromTokenFile:o})=>o({webIdentityTokenFile:e.web_identity_token_file,roleArn:e.role_arn,roleSessionName:e.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})({callerClientConfig:t}).then(s=>c(s,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q")));var v=async(e,r,t,o,s={},i=!1)=>{let n=r[e];if(Object.keys(s).length>0&&T(n))return x(n,t);if(i||N(n,{profile:e,logger:t.logger}))return $(e,r,t,o,s,v);if(T(n))return x(n,t);if(G(n))return J(n,t,o);if(W(n))return q(t,e);if(U(n))return await M(e,n,t,o);if(H(n))return j(e,t,o);throw new l(`Could not resolve credentials using profile: [${e}] in configuration/credentials file(s).`,{logger:t.logger})};var Me=(e={})=>async({callerClientConfig:r}={})=>{e.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");let t=await k(e);return v(y({profile:e.profile??r?.profile}),t,e,r)};export{Me as fromIni};
@@ -1 +0,0 @@
1
- import{a,b,c,d,e,f,g}from"./chunk-KRX2KWWT.js";import"./chunk-SPHQRDN5.js";import"./chunk-TX7AAHER.js";import"./chunk-IYWUY3VA.js";export{f as ENV_ACCOUNT_ID,e as ENV_CREDENTIAL_SCOPE,d as ENV_EXPIRATION,a as ENV_KEY,b as ENV_SECRET,c as ENV_SESSION,g as fromEnv};
@@ -1 +0,0 @@
1
- import{b as p,h as a,i as f}from"./chunk-WU3IV4WF.js";import"./chunk-JTXBZ2SU.js";import{a as l}from"./chunk-SPHQRDN5.js";import{b as c}from"./chunk-TX7AAHER.js";import"./chunk-IYWUY3VA.js";import{exec as m}from"child_process";import{promisify as P}from"util";var u=(r,e,o)=>{if(e.Version!==1)throw Error(`Profile ${r} credential_process did not return Version 1.`);if(e.AccessKeyId===void 0||e.SecretAccessKey===void 0)throw Error(`Profile ${r} credential_process returned invalid credentials.`);if(e.Expiration){let i=new Date;if(new Date(e.Expiration)<i)throw Error(`Profile ${r} credential_process returned expired credentials.`)}let s=e.AccountId;!s&&o?.[r]?.aws_account_id&&(s=o[r].aws_account_id);let t={accessKeyId:e.AccessKeyId,secretAccessKey:e.SecretAccessKey,...e.SessionToken&&{sessionToken:e.SessionToken},...e.Expiration&&{expiration:new Date(e.Expiration)},...e.CredentialScope&&{credentialScope:e.CredentialScope},...s&&{accountId:s}};return l(t,"CREDENTIALS_PROCESS","w"),t};var w=async(r,e,o)=>{let s=e[r];if(e[r]){let t=s.credential_process;if(t!==void 0){let i=P(f?.getTokenRecord?.().exec??m);try{let{stdout:n}=await i(t),d;try{d=JSON.parse(n.trim())}catch{throw Error(`Profile ${r} credential_process returned invalid JSON.`)}return u(r,d,e)}catch(n){throw new c(n.message,{logger:o})}}else throw new c(`Profile ${r} did not contain credential_process.`,{logger:o})}else throw new c(`Profile ${r} could not be found in shared credentials file.`,{logger:o})};var K=(r={})=>async({callerClientConfig:e}={})=>{r.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");let o=await a(r);return w(p({profile:r.profile??e?.profile}),o,r.logger)};export{K as fromProcess};
@@ -1,5 +0,0 @@
1
- import{a as C}from"./chunk-P2WEIQRQ.js";import"./chunk-WJLTO7JW.js";import"./chunk-TW5BOTVX.js";import{a as l}from"./chunk-SPHQRDN5.js";import"./chunk-FNDUJLS6.js";import{f as T}from"./chunk-HGJYEXMU.js";import{b as A,y as m}from"./chunk-W5TBFCWY.js";import{b as s}from"./chunk-TX7AAHER.js";import"./chunk-IYWUY3VA.js";import w from"fs/promises";var N="169.254.170.2",R="169.254.170.23",S="[fd00:ec2::23]",p=(e,o)=>{if(e.protocol!=="https:"&&!(e.hostname===N||e.hostname===R||e.hostname===S)){if(e.hostname.includes("[")){if(e.hostname==="[::1]"||e.hostname==="[0000:0000:0000:0000:0000:0000:0000:0001]")return}else{if(e.hostname==="localhost")return;let n=e.hostname.split("."),r=t=>{let a=parseInt(t,10);return 0<=a&&a<=255};if(n[0]==="127"&&r(n[1])&&r(n[2])&&r(n[3])&&n.length===4)return}throw new s(`URL not accepted. It must either be HTTPS or match one of the following:
2
- - loopback CIDR 127.0.0.0/8 or [::1/128]
3
- - ECS container host 169.254.170.2
4
- - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:o})}};function f(e){return new T({protocol:e.protocol,hostname:e.hostname,port:Number(e.port),path:e.pathname,query:Array.from(e.searchParams.entries()).reduce((o,[n,r])=>(o[n]=r,o),{}),fragment:e.hash})}async function _(e,o){let r=await m(e.body).transformToString();if(e.statusCode===200){let t=JSON.parse(r);if(typeof t.AccessKeyId!="string"||typeof t.SecretAccessKey!="string"||typeof t.Token!="string"||typeof t.Expiration!="string")throw new s("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:o});return{accessKeyId:t.AccessKeyId,secretAccessKey:t.SecretAccessKey,sessionToken:t.Token,expiration:A(t.Expiration)}}if(e.statusCode>=400&&e.statusCode<500){let t={};try{t=JSON.parse(r)}catch{}throw Object.assign(new s(`Server responded with status: ${e.statusCode}`,{logger:o}),{Code:t.Code,Message:t.Message})}throw new s(`Server responded with status: ${e.statusCode}`,{logger:o})}var I=(e,o,n)=>async()=>{for(let r=0;r<o;++r)try{return await e()}catch{await new Promise(a=>setTimeout(a,n))}return await e()};var g="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",O="http://169.254.170.2",L="AWS_CONTAINER_CREDENTIALS_FULL_URI",y="AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",k="AWS_CONTAINER_AUTHORIZATION_TOKEN",v=(e={})=>{e.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");let o,n=e.awsContainerCredentialsRelativeUri??process.env[g],r=e.awsContainerCredentialsFullUri??process.env[L],t=e.awsContainerAuthorizationToken??process.env[k],a=e.awsContainerAuthorizationTokenFile??process.env[y],i=e.logger?.constructor?.name==="NoOpLogger"||!e.logger?.warn?console.warn:e.logger.warn.bind(e.logger);if(n&&r&&(i("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),i("awsContainerCredentialsFullUri will take precedence.")),t&&a&&(i("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),i("awsContainerAuthorizationToken will take precedence.")),r)o=r;else if(n)o=`${O}${n}`;else throw new s(`No HTTP credential provider host provided.
5
- Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:e.logger});let h=new URL(o);p(h,e.logger);let E=C.create({requestTimeout:e.timeout??1e3,connectionTimeout:e.timeout??1e3});return I(async()=>{let c=f(h);t?c.headers.Authorization=t:a&&(c.headers.Authorization=(await w.readFile(a)).toString());try{let d=await E.handle(c);return _(d.response).then(u=>l(u,"CREDENTIALS_HTTP","z"))}catch(d){throw new s(String(d),{logger:e.logger})}},e.maxRetries??3,e.timeout??1e3)};export{v as fromHttp};
@@ -1 +0,0 @@
1
- import{i as c}from"./chunk-WU3IV4WF.js";import"./chunk-JTXBZ2SU.js";import{a as l}from"./chunk-SPHQRDN5.js";import{b as d}from"./chunk-TX7AAHER.js";import"./chunk-IYWUY3VA.js";import{readFileSync as _}from"fs";var a=e=>async t=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:o,roleSessionName:r,webIdentityToken:s,providerId:n,policyArns:g,policy:p,durationSeconds:E}=e,{roleAssumerWithWebIdentity:i}=e;if(!i){let{getDefaultRoleAssumerWithWebIdentity:f}=await import("./sts-RKUL4Q47.js");i=f({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...t?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return i({RoleArn:o,RoleSessionName:r??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:s,ProviderId:n,PolicyArns:g,Policy:p,DurationSeconds:E})};var m="AWS_WEB_IDENTITY_TOKEN_FILE",S="AWS_ROLE_ARN",N="AWS_ROLE_SESSION_NAME",w=(e={})=>async t=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let o=e?.webIdentityTokenFile??process.env[m],r=e?.roleArn??process.env[S],s=e?.roleSessionName??process.env[N];if(!o||!r)throw new d("Web identity configuration not specified",{logger:e.logger});let n=await a({...e,webIdentityToken:c?.getTokenRecord?.()[o]??_(o,{encoding:"ascii"}),roleArn:r,roleSessionName:s})(t);return o===process.env[m]&&l(n,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h"),n};export{w as fromTokenFile,a as fromWebToken};
@@ -1,2 +0,0 @@
1
- import{b as u}from"./chunk-OIQB5F6Y.js";import"./chunk-JTXBZ2SU.js";import"./chunk-FNDUJLS6.js";import{s as M}from"./chunk-HGJYEXMU.js";import"./chunk-W5TBFCWY.js";import{a as S,b as s}from"./chunk-TX7AAHER.js";import"./chunk-IYWUY3VA.js";import{parse as $}from"url";import{Buffer as W}from"buffer";import{request as K}from"http";function m(e){return new Promise((t,n)=>{let o=K({method:"GET",...e,hostname:e.hostname?.replace(/^\[(.+)\]$/,"$1")});o.on("error",r=>{n(Object.assign(new S("Unable to connect to instance metadata service"),r)),o.destroy()}),o.on("timeout",()=>{n(new S("TimeoutError from instance metadata service")),o.destroy()}),o.on("response",r=>{let{statusCode:a=400}=r;(a<200||300<=a)&&(n(Object.assign(new S("Error response received from instance metadata service"),{statusCode:a})),o.destroy());let f=[];r.on("data",i=>{f.push(i)}),r.on("end",()=>{t(W.concat(f)),o.destroy()})}),o.end()})}var N=e=>!!e&&typeof e=="object"&&typeof e.AccessKeyId=="string"&&typeof e.SecretAccessKey=="string"&&typeof e.Token=="string"&&typeof e.Expiration=="string",g=e=>({accessKeyId:e.AccessKeyId,secretAccessKey:e.SecretAccessKey,sessionToken:e.Token,expiration:new Date(e.Expiration),...e.AccountId&&{accountId:e.AccountId}});var pe=1e3,me=0,h=({maxRetries:e=0,timeout:t=1e3})=>({maxRetries:e,timeout:t});var A=(e,t)=>{let n=e();for(let o=0;o<t;o++)n=n.catch(e);return n};var C="AWS_CONTAINER_CREDENTIALS_FULL_URI",O="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",y="AWS_CONTAINER_AUTHORIZATION_TOKEN",Ne=(e={})=>{let{timeout:t,maxRetries:n}=h(e);return()=>A(async()=>{let o=await j({logger:e.logger}),r=JSON.parse(await B(t,o));if(!N(r))throw new s("Invalid response received from instance metadata service.",{logger:e.logger});return g(r)},n)},B=async(e,t)=>(process.env[y]&&(t.headers={...t.headers,Authorization:process.env[y]}),(await m({...t,timeout:e})).toString()),G="169.254.170.2",q={localhost:!0,"127.0.0.1":!0},H={"http:":!0,"https:":!0},j=async({logger:e})=>{if(process.env[O])return{hostname:G,path:process.env[O]};if(process.env[C]){let t=$(process.env[C]);if(!t.hostname||!(t.hostname in q))throw new s(`${t.hostname} is not a valid container metadata service hostname`,{tryNextLink:!1,logger:e});if(!t.protocol||!(t.protocol in H))throw new s(`${t.protocol} is not a valid container metadata service protocol`,{tryNextLink:!1,logger:e});return{...t,port:t.port?parseInt(t.port,10):void 0}}throw new s(`The container metadata credential provider cannot be used unless the ${O} or ${C} environment variable is set`,{tryNextLink:!1,logger:e})};var v=class e extends s{tryNextLink;name="InstanceMetadataV1FallbackError";constructor(t,n=!0){super(t,n),this.tryNextLink=n,Object.setPrototypeOf(this,e.prototype)}};var _;(function(e){e.IPv4="http://169.254.169.254",e.IPv6="http://[fd00:ec2::254]"})(_||(_={}));var Y="AWS_EC2_METADATA_SERVICE_ENDPOINT",J="ec2_metadata_service_endpoint",P={environmentVariableSelector:e=>e[Y],configFileSelector:e=>e[J],default:void 0};var p;(function(e){e.IPv4="IPv4",e.IPv6="IPv6"})(p||(p={}));var z="AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE",X="ec2_metadata_service_endpoint_mode",R={environmentVariableSelector:e=>e[z],configFileSelector:e=>e[X],default:p.IPv4};var D=async()=>M(await Z()||await Q()),Z=async()=>u(P)(),Q=async()=>{let e=await u(R)();switch(e){case p.IPv4:return _.IPv4;case p.IPv6:return _.IPv6;default:throw new Error(`Unsupported endpoint mode: ${e}. Select from ${Object.values(p)}`)}};var ee="https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html",w=(e,t)=>{let n=300+Math.floor(Math.random()*300),o=new Date(Date.now()+n*1e3);t.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(o)}.
2
- For more information, please visit: `+ee);let r=e.originalExpiration??e.expiration;return{...e,...r?{originalExpiration:r}:{},expiration:o}};var b=(e,t={})=>{let n=t?.logger||console,o;return async()=>{let r;try{r=await e(),r.expiration&&r.expiration.getTime()<Date.now()&&(r=w(r,n))}catch(a){if(o)n.warn("Credential renew failed: ",a),r=w(o,n);else throw a}return o=r,r}};var k="/latest/meta-data/iam/security-credentials/",te="/latest/api/token",x="AWS_EC2_METADATA_V1_DISABLED",F="ec2_metadata_v1_disabled",L="x-aws-ec2-metadata-token",Je=(e={})=>b(oe(e),{logger:e.logger}),oe=(e={})=>{let t=!1,{logger:n,profile:o}=e,{timeout:r,maxRetries:a}=h(e),f=async(i,E)=>{if(t||E.headers?.[L]==null){let c=!1,d=!1,U=await u({environmentVariableSelector:l=>{let I=l[x];if(d=!!I&&I!=="false",I===void 0)throw new s(`${x} not set in env, checking config file next.`,{logger:e.logger});return d},configFileSelector:l=>{let I=l[F];return c=!!I&&I!=="false",c},default:!1},{profile:o})();if(e.ec2MetadataV1Disabled||U){let l=[];throw e.ec2MetadataV1Disabled&&l.push("credential provider initialization (runtime option ec2MetadataV1Disabled)"),c&&l.push(`config file profile (${F})`),d&&l.push(`process environment variable (${x})`),new v(`AWS EC2 Metadata v1 fallback has been blocked by AWS SDK configuration in the following: [${l.join(", ")}].`)}}let V=(await A(async()=>{let c;try{c=await ne(E)}catch(d){throw d.statusCode===401&&(t=!1),d}return c},i)).trim();return A(async()=>{let c;try{c=await ae(V,E,e)}catch(d){throw d.statusCode===401&&(t=!1),d}return c},i)};return async()=>{let i=await D();if(t)return n?.debug("AWS SDK Instance Metadata","using v1 fallback (no token fetch)"),f(a,{...i,timeout:r});{let E;try{E=(await re({...i,timeout:r})).toString()}catch(T){if(T?.statusCode===400)throw Object.assign(T,{message:"EC2 Metadata token request returned error"});return(T.message==="TimeoutError"||[403,404,405].includes(T.statusCode))&&(t=!0),n?.debug("AWS SDK Instance Metadata","using v1 fallback (initial)"),f(a,{...i,timeout:r})}return f(a,{...i,headers:{[L]:E},timeout:r})}}},re=async e=>m({...e,path:te,method:"PUT",headers:{"x-aws-ec2-metadata-token-ttl-seconds":"21600"}}),ne=async e=>(await m({...e,path:k})).toString(),ae=async(e,t,n)=>{let o=JSON.parse((await m({...t,path:k+e})).toString());if(!N(o))throw new s("Invalid response received from instance metadata service.",{logger:n.logger});return g(o)};export{me as DEFAULT_MAX_RETRIES,pe as DEFAULT_TIMEOUT,y as ENV_CMDS_AUTH_TOKEN,C as ENV_CMDS_FULL_URI,O as ENV_CMDS_RELATIVE_URI,_ as Endpoint,Ne as fromContainerMetadata,Je as fromInstanceMetadata,D as getInstanceMetadataEndpoint,m as httpRequest,h as providerConfigFromInit};
@@ -1,2 +0,0 @@
1
- import{b as O,c as K,d as y,g as E,h as A}from"./chunk-WU3IV4WF.js";import"./chunk-JTXBZ2SU.js";import{a as R}from"./chunk-SPHQRDN5.js";import{a as H,b as c}from"./chunk-TX7AAHER.js";import"./chunk-IYWUY3VA.js";var p=class e extends H{name="TokenProviderError";constructor(o,s=!0){super(o,s),Object.setPrototypeOf(this,e.prototype)}};var j=e=>e&&(typeof e.sso_start_url=="string"||typeof e.sso_account_id=="string"||typeof e.sso_session=="string"||typeof e.sso_region=="string"||typeof e.sso_role_name=="string");var u="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var U=async(e,o={},s)=>{let{SSOOIDCClient:t}=await import("./sso-oidc-LTNOJMPI.js"),n=f=>o.clientConfig?.[f]??o.parentClientConfig?.[f]??s?.[f];return new t(Object.assign({},o.clientConfig??{},{region:e??o.clientConfig?.region,logger:n("logger"),userAgentAppId:n("userAgentAppId")}))};var q=async(e,o,s={},t)=>{let{CreateTokenCommand:n}=await import("./sso-oidc-LTNOJMPI.js");return(await U(o,s,t)).send(new n({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))};var P=e=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new p(`Token is expired. ${u}`,!1)};var d=(e,o,s=!1)=>{if(typeof o>"u")throw new p(`Value not present for '${e}' in SSO Token${s?". Cannot refresh":""}. ${u}`,!1)};import{promises as Y}from"fs";var{writeFile:B}=Y,W=(e,o)=>{let s=K(e),t=JSON.stringify(o,null,2);return B(s,t)};var X=new Date(0),z=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let s=await A(e),t=O({profile:e.profile??o?.profile}),n=s[t];if(n){if(!n.sso_session)throw new p(`Profile '${t}' is missing required property 'sso_session'.`)}else throw new p(`Profile '${t}' could not be found in shared credentials file.`,!1);let a=n.sso_session,g=(await E(e))[a];if(!g)throw new p(`Sso session '${a}' could not be found in shared credentials file.`,!1);for(let i of["sso_start_url","sso_region"])if(!g[i])throw new p(`Sso session '${a}' is missing required property '${i}'.`,!1);let S=g.sso_start_url,x=g.sso_region,r;try{r=await y(a)}catch{throw new p(`The SSO session token associated with profile=${t} was not found or is invalid. ${u}`,!1)}d("accessToken",r.accessToken),d("expiresAt",r.expiresAt);let{accessToken:_,expiresAt:k}=r,l={token:_,expiration:new Date(k)};if(l.expiration.getTime()-Date.now()>3e5)return l;if(Date.now()-X.getTime()<30*1e3)return P(l),l;d("clientId",r.clientId,!0),d("clientSecret",r.clientSecret,!0),d("refreshToken",r.refreshToken,!0);try{X.setTime(Date.now());let i=await q(r,x,e,o);d("accessToken",i.accessToken),d("expiresIn",i.expiresIn);let m=new Date(Date.now()+i.expiresIn*1e3);try{await W(a,{...r,accessToken:i.accessToken,expiresAt:m.toISOString(),refreshToken:i.refreshToken})}catch{}return{token:i.accessToken,expiration:m}}catch{return P(l),l}};var T=!1,v=async({ssoStartUrl:e,ssoSession:o,ssoAccountId:s,ssoRegion:t,ssoRoleName:n,ssoClient:a,clientConfig:f,parentClientConfig:g,callerClientConfig:S,profile:x,filepath:r,configFilepath:_,ignoreCache:k,logger:l})=>{let i,m="To refresh this SSO session run aws sso login with the corresponding profile.";if(o)try{let w=await z({profile:x,filepath:r,configFilepath:_,ignoreCache:k})();i={accessToken:w.token,expiresAt:new Date(w.expiration).toISOString()}}catch(w){throw new c(w.message,{tryNextLink:T,logger:l})}else try{i=await y(e)}catch{throw new c(`The SSO session associated with this profile is invalid. ${m}`,{tryNextLink:T,logger:l})}if(new Date(i.expiresAt).getTime()-Date.now()<=0)throw new c(`The SSO session associated with this profile has expired. ${m}`,{tryNextLink:T,logger:l});let{accessToken:I}=i,{SSOClient:h,GetRoleCredentialsCommand:C}=await import("./loadSso-WRXP2HXL.js"),V=a||new h(Object.assign({},f??{},{logger:f?.logger??S?.logger??g?.logger,region:f?.region??t,userAgentAppId:f?.userAgentAppId??S?.userAgentAppId??g?.userAgentAppId})),D;try{D=await V.send(new C({accountId:s,roleName:n,accessToken:I}))}catch(w){throw new c(w,{tryNextLink:T,logger:l})}let{roleCredentials:{accessKeyId:F,secretAccessKey:$,sessionToken:L,expiration:b,credentialScope:M,accountId:G}={}}=D;if(!F||!$||!L||!b)throw new c("SSO returns an invalid temporary credential.",{tryNextLink:T,logger:l});let N={accessKeyId:F,secretAccessKey:$,sessionToken:L,expiration:new Date(b),...M&&{credentialScope:M},...G&&{accountId:G}};return o?R(N,"CREDENTIALS_SSO","s"):R(N,"CREDENTIALS_SSO_LEGACY","u"),N};var J=(e,o)=>{let{sso_start_url:s,sso_account_id:t,sso_region:n,sso_role_name:a}=e;if(!s||!t||!n||!a)throw new c(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
2
- Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:o});return e};var $e=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:s,ssoAccountId:t,ssoRegion:n,ssoRoleName:a,ssoSession:f}=e,{ssoClient:g}=e,S=O({profile:e.profile??o?.profile});if(!s&&!t&&!n&&!a&&!f){let r=(await A(e))[S];if(!r)throw new c(`Profile ${S} was not found.`,{logger:e.logger});if(!j(r))throw new c(`Profile ${S} is not configured with SSO credentials.`,{logger:e.logger});if(r?.sso_session){let h=(await E(e))[r.sso_session],C=` configurations in profile ${S} and sso-session ${r.sso_session}`;if(n&&n!==h.sso_region)throw new c("Conflicting SSO region"+C,{tryNextLink:!1,logger:e.logger});if(s&&s!==h.sso_start_url)throw new c("Conflicting SSO start_url"+C,{tryNextLink:!1,logger:e.logger});r.sso_region=h.sso_region,r.sso_start_url=h.sso_start_url}let{sso_start_url:_,sso_account_id:k,sso_region:l,sso_role_name:i,sso_session:m}=J(r,e.logger);return v({ssoStartUrl:_,ssoSession:m,ssoAccountId:k,ssoRegion:l,ssoRoleName:i,ssoClient:g,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:S,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}else{if(!s||!t||!n||!a)throw new c('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});return v({ssoStartUrl:s,ssoSession:f,ssoAccountId:t,ssoRegion:n,ssoRoleName:a,ssoClient:g,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:S,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}};export{$e as fromSSO,j as isSsoProfile,J as validateSsoProfile};
@@ -1 +0,0 @@
1
- import{d as z,e as x}from"./chunk-XB6R2VIU.js";import"./chunk-IYWUY3VA.js";var M=class{marshaller;serializer;deserializer;serdeContext;defaultContentType;constructor({marshaller:i,serializer:n,deserializer:o,serdeContext:c,defaultContentType:y}){this.marshaller=i,this.serializer=n,this.deserializer=o,this.serdeContext=c,this.defaultContentType=y}async serializeEventStream({eventStream:i,requestSchema:n,initialRequest:o}){let c=this.marshaller,y=n.getEventStreamMember(),S=n.getMemberSchema(y),d=this.serializer,u=this.defaultContentType,h=Symbol("initialRequestMarker"),p={async*[Symbol.asyncIterator](){if(o){let r={":event-type":{type:"string",value:"initial-request"},":message-type":{type:"string",value:"event"},":content-type":{type:"string",value:u}};d.write(n,o);let t=d.flush();yield{[h]:!0,headers:r,body:t}}for await(let r of i)yield r}};return c.serialize(p,r=>{if(r[h])return{headers:r.headers,body:r.body};let t=Object.keys(r).find(s=>s!=="__type")??"",{additionalHeaders:e,body:a,eventType:l,explicitPayloadContentType:m}=this.writeEventBody(t,S,r);return{headers:{":event-type":{type:"string",value:l},":message-type":{type:"string",value:"event"},":content-type":{type:"string",value:m??u},...e},body:a}})}async deserializeEventStream({response:i,responseSchema:n,initialResponseContainer:o}){let c=this.marshaller,y=n.getEventStreamMember(),d=n.getMemberSchema(y).getMemberSchemas(),u=Symbol("initialResponseMarker"),h=c.deserialize(i.body,async t=>{let e=Object.keys(t).find(l=>l!=="__type")??"",a=t[e].body;if(e==="initial-response"){let l=await this.deserializer.read(n,a);return delete l[y],{[u]:!0,...l}}else if(e in d){let l=d[e];if(l.isStructSchema()){let m={},f=!1;for(let[s,g]of l.structIterator()){let{eventHeader:v,eventPayload:w}=g.getMergedTraits();if(f=f||!!(v||w),w)g.isBlobSchema()?m[s]=a:g.isStringSchema()?m[s]=(this.serdeContext?.utf8Encoder??x)(a):g.isStructSchema()&&(m[s]=await this.deserializer.read(g,a));else if(v){let b=t[e].headers[s]?.value;b!=null&&(g.isNumericSchema()?b&&typeof b=="object"&&"bytes"in b?m[s]=BigInt(b.toString()):m[s]=Number(b):m[s]=b)}}if(f)return{[e]:m};if(a.byteLength===0)return{[e]:{}}}return{[e]:await this.deserializer.read(l,a)}}else return{$unknown:t}}),p=h[Symbol.asyncIterator](),r=await p.next();if(r.done)return h;if(r.value?.[u]){if(!n)throw new Error("@smithy::core/protocols - initial-response event encountered in event stream but no response schema given.");for(let[t,e]of Object.entries(r.value))o[t]=e}return{async*[Symbol.asyncIterator](){for(r?.value?.[u]||(yield r.value);;){let{done:t,value:e}=await p.next();if(t)break;yield e}}}}writeEventBody(i,n,o){let c=this.serializer,y=i,S=null,d,u=n.getSchema()[4].includes(i),h={};if(u){let t=n.getMemberSchema(i);if(t.isStructSchema()){for(let[e,a]of t.structIterator()){let{eventHeader:l,eventPayload:m}=a.getMergedTraits();if(m)S=e;else if(l){let f=o[i][e],s="binary";a.isNumericSchema()?(-2)**31<=f&&f<=2**31-1?s="integer":s="long":a.isTimestampSchema()?s="timestamp":a.isStringSchema()?s="string":a.isBooleanSchema()&&(s="boolean"),f!=null&&(h[e]={type:s,value:f},delete o[i][e])}}if(S!==null){let e=t.getMemberSchema(S);e.isBlobSchema()?d="application/octet-stream":e.isStringSchema()&&(d="text/plain"),c.write(e,o[i][S])}else c.write(t,o[i])}else if(t.isUnitSchema())c.write(t,{});else throw new Error("@smithy/core/event-streams - non-struct member not supported in event stream union.")}else{let[t,e]=o[i];y=t,c.write(15,e)}let p=c.flush()??new Uint8Array;return{body:typeof p=="string"?(this.serdeContext?.utf8Decoder??z)(p):p,eventType:y,explicitPayloadContentType:d,additionalHeaders:h}}};export{M as EventStreamSerde};
@@ -1 +0,0 @@
1
- import{n as K,o as b,r as V,u as q}from"./chunk-W5TBFCWY.js";import"./chunk-IYWUY3VA.js";function W(r,e,t,n){function s(o){return o instanceof t?o:new t(function(i){i(o)})}return new(t||(t=Promise))(function(o,i){function f(l){try{a(n.next(l))}catch(c){i(c)}}function u(l){try{a(n.throw(l))}catch(c){i(c)}}function a(l){l.done?o(l.value):s(l.value).then(f,u)}a((n=n.apply(r,e||[])).next())})}function J(r,e){var t={label:0,sent:function(){if(o[0]&1)throw o[1];return o[1]},trys:[],ops:[]},n,s,o,i=Object.create((typeof Iterator=="function"?Iterator:Object).prototype);return i.next=f(0),i.throw=f(1),i.return=f(2),typeof Symbol=="function"&&(i[Symbol.iterator]=function(){return this}),i;function f(a){return function(l){return u([a,l])}}function u(a){if(n)throw new TypeError("Generator is already executing.");for(;i&&(i=0,a[0]&&(t=0)),t;)try{if(n=1,s&&(o=a[0]&2?s.return:a[0]?s.throw||((o=s.return)&&o.call(s),0):s.next)&&!(o=o.call(s,a[1])).done)return o;switch(s=0,o&&(a=[a[0]&2,o.value]),a[0]){case 0:case 1:o=a;break;case 4:return t.label++,{value:a[1],done:!1};case 5:t.label++,s=a[1],a=[0];continue;case 7:a=t.ops.pop(),t.trys.pop();continue;default:if(o=t.trys,!(o=o.length>0&&o[o.length-1])&&(a[0]===6||a[0]===2)){t=0;continue}if(a[0]===3&&(!o||a[1]>o[0]&&a[1]<o[3])){t.label=a[1];break}if(a[0]===6&&t.label<o[1]){t.label=o[1],o=a;break}if(o&&t.label<o[2]){t.label=o[2],t.ops.push(a);break}o[2]&&t.ops.pop(),t.trys.pop();continue}a=e.call(r,t)}catch(l){a=[6,l],s=0}finally{n=o=0}if(a[0]&5)throw a[1];return{value:a[0]?a[1]:void 0,done:!0}}}function Q(r){var e=typeof Symbol=="function"&&Symbol.iterator,t=e&&r[e],n=0;if(t)return t.call(r);if(r&&typeof r.length=="number")return{next:function(){return r&&n>=r.length&&(r=void 0),{value:r&&r[n++],done:!r}}};throw new TypeError(e?"Object is not iterable.":"Symbol.iterator is not defined.")}import{Buffer as X}from"buffer";var Z=(r,e)=>{if(typeof r!="string")throw new TypeError(`The "input" argument must be of type string. Received type ${typeof r} (${r})`);return e?X.from(r,e):X.from(r)};var j=r=>{let e=Z(r,"utf8");return new Uint8Array(e.buffer,e.byteOffset,e.byteLength/Uint8Array.BYTES_PER_ELEMENT)};var ne=typeof Buffer<"u"&&Buffer.from?function(r){return Buffer.from(r,"utf8")}:j;function k(r){return r instanceof Uint8Array?r:typeof r=="string"?ne(r):ArrayBuffer.isView(r)?new Uint8Array(r.buffer,r.byteOffset,r.byteLength/Uint8Array.BYTES_PER_ELEMENT):new Uint8Array(r)}function P(r){return typeof r=="string"?r.length===0:r.byteLength===0}function z(r){return new Uint8Array([(r&4278190080)>>24,(r&16711680)>>16,(r&65280)>>8,r&255])}function N(r){if(!Uint32Array.from){for(var e=new Uint32Array(r.length),t=0;t<r.length;)e[t]=r[t],t+=1;return e}return Uint32Array.from(r)}var oe=(function(){function r(){this.crc32=new v}return r.prototype.update=function(e){P(e)||this.crc32.update(k(e))},r.prototype.digest=function(){return W(this,void 0,void 0,function(){return J(this,function(e){return[2,z(this.crc32.digest())]})})},r.prototype.reset=function(){this.crc32=new v},r})();var v=(function(){function r(){this.checksum=4294967295}return r.prototype.update=function(e){var t,n;try{for(var s=Q(e),o=s.next();!o.done;o=s.next()){var i=o.value;this.checksum=this.checksum>>>8^ae[(this.checksum^i)&255]}}catch(f){t={error:f}}finally{try{o&&!o.done&&(n=s.return)&&n.call(s)}finally{if(t)throw t.error}}return this},r.prototype.digest=function(){return(this.checksum^4294967295)>>>0},r})();var se=[0,1996959894,3993919788,2567524794,124634137,1886057615,3915621685,2657392035,249268274,2044508324,3772115230,2547177864,162941995,2125561021,3887607047,2428444049,498536548,1789927666,4089016648,2227061214,450548861,1843258603,4107580753,2211677639,325883990,1684777152,4251122042,2321926636,335633487,1661365465,4195302755,2366115317,997073096,1281953886,3579855332,2724688242,1006888145,1258607687,3524101629,2768942443,901097722,1119000684,3686517206,2898065728,853044451,1172266101,3705015759,2882616665,651767980,1373503546,3369554304,3218104598,565507253,1454621731,3485111705,3099436303,671266974,1594198024,3322730930,2970347812,795835527,1483230225,3244367275,3060149565,1994146192,31158534,2563907772,4023717930,1907459465,112637215,2680153253,3904427059,2013776290,251722036,2517215374,3775830040,2137656763,141376813,2439277719,3865271297,1802195444,476864866,2238001368,4066508878,1812370925,453092731,2181625025,4111451223,1706088902,314042704,2344532202,4240017532,1658658271,366619977,2362670323,4224994405,1303535960,984961486,2747007092,3569037538,1256170817,1037604311,2765210733,3554079995,1131014506,879679996,2909243462,3663771856,1141124467,855842277,2852801631,3708648649,1342533948,654459306,3188396048,3373015174,1466479909,544179635,3110523913,3462522015,1591671054,702138776,2966460450,3352799412,1504918807,783551873,3082640443,3233442989,3988292384,2596254646,62317068,1957810842,3939845945,2647816111,81470997,1943803523,3814918930,2489596804,225274430,2053790376,3826175755,2466906013,167816743,2097651377,4027552580,2265490386,503444072,1762050814,4150417245,2154129355,426522225,1852507879,4275313526,2312317920,282753626,1742555852,4189708143,2394877945,397917763,1622183637,3604390888,2714866558,953729732,1340076626,3518719985,2797360999,1068828381,1219638859,3624741850,2936675148,906185462,1090812512,3747672003,2825379669,829329135,1181335161,3412177804,3160834842,628085408,1382605366,3423369109,3138078467,570562233,1426400815,3317316542,2998733608,733239954,1555261956,3268935591,3050360625,752459403,1541320221,2607071920,3965973030,1969922972,40735498,2617837225,3943577151,1913087877,83908371,2512341634,3803740692,2075208622,213261112,2463272603,3855990285,2094854071,198958881,2262029012,4057260610,1759359992,534414190,2176718541,4139329115,1873836001,414664567,2282248934,4279200368,1711684554,285281116,2405801727,4167216745,1634467795,376229701,2685067896,3608007406,1308918612,956543938,2808555105,3495958263,1231636301,1047427035,2932959818,3654703836,1088359270,936918e3,2847714899,3736837829,1202900863,817233897,3183342108,3401237130,1404277552,615818150,3134207493,3453421203,1423857449,601450431,3009837614,3294710456,1567103746,711928724,3020668471,3272380065,1510334235,755167117],ae=N(se);var D=class r{bytes;constructor(e){if(this.bytes=e,e.byteLength!==8)throw new Error("Int64 buffers must be exactly 8 bytes")}static fromNumber(e){if(e>9223372036854776e3||e<-9223372036854776e3)throw new Error(`${e} is too large (or, if negative, too small) to represent as an Int64`);let t=new Uint8Array(8);for(let n=7,s=Math.abs(Math.round(e));n>-1&&s>0;n--,s/=256)t[n]=s;return e<0&&H(t),new r(t)}valueOf(){let e=this.bytes.slice(0),t=e[0]&128;return t&&H(e),parseInt(b(e),16)*(t?-1:1)}toString(){return String(this.valueOf())}};function H(r){for(let e=0;e<8;e++)r[e]^=255;for(let e=7;e>-1&&(r[e]++,r[e]===0);e--);}var C=class{toUtf8;fromUtf8;constructor(e,t){this.toUtf8=e,this.fromUtf8=t}format(e){let t=[];for(let o of Object.keys(e)){let i=this.fromUtf8(o);t.push(Uint8Array.from([i.byteLength]),i,this.formatHeaderValue(e[o]))}let n=new Uint8Array(t.reduce((o,i)=>o+i.byteLength,0)),s=0;for(let o of t)n.set(o,s),s+=o.byteLength;return n}formatHeaderValue(e){switch(e.type){case"boolean":return Uint8Array.from([e.value?0:1]);case"byte":return Uint8Array.from([2,e.value]);case"short":let t=new DataView(new ArrayBuffer(3));return t.setUint8(0,3),t.setInt16(1,e.value,!1),new Uint8Array(t.buffer);case"integer":let n=new DataView(new ArrayBuffer(5));return n.setUint8(0,4),n.setInt32(1,e.value,!1),new Uint8Array(n.buffer);case"long":let s=new Uint8Array(9);return s[0]=5,s.set(e.value.bytes,1),s;case"binary":let o=new DataView(new ArrayBuffer(3+e.value.byteLength));o.setUint8(0,6),o.setUint16(1,e.value.byteLength,!1);let i=new Uint8Array(o.buffer);return i.set(e.value,3),i;case"string":let f=this.fromUtf8(e.value),u=new DataView(new ArrayBuffer(3+f.byteLength));u.setUint8(0,7),u.setUint16(1,f.byteLength,!1);let a=new Uint8Array(u.buffer);return a.set(f,3),a;case"timestamp":let l=new Uint8Array(9);return l[0]=8,l.set(D.fromNumber(e.value.valueOf()).bytes,1),l;case"uuid":if(!xe.test(e.value))throw new Error(`Invalid UUID received: ${e.value}`);let c=new Uint8Array(17);return c[0]=9,c.set(K(e.value.replace(/\-/g,"")),1),c}}parse(e){let t={},n=0;for(;n<e.byteLength;){let s=e.getUint8(n++),o=this.toUtf8(new Uint8Array(e.buffer,e.byteOffset+n,s));switch(n+=s,e.getUint8(n++)){case 0:t[o]={type:ee,value:!0};break;case 1:t[o]={type:ee,value:!1};break;case 2:t[o]={type:ie,value:e.getInt8(n++)};break;case 3:t[o]={type:fe,value:e.getInt16(n,!1)},n+=2;break;case 4:t[o]={type:ce,value:e.getInt32(n,!1)},n+=4;break;case 5:t[o]={type:ue,value:new D(new Uint8Array(e.buffer,e.byteOffset+n,8))},n+=8;break;case 6:let i=e.getUint16(n,!1);n+=2,t[o]={type:le,value:new Uint8Array(e.buffer,e.byteOffset+n,i)},n+=i;break;case 7:let f=e.getUint16(n,!1);n+=2,t[o]={type:ye,value:this.toUtf8(new Uint8Array(e.buffer,e.byteOffset+n,f))},n+=f;break;case 8:t[o]={type:me,value:new Date(new D(new Uint8Array(e.buffer,e.byteOffset+n,8)).valueOf())},n+=8;break;case 9:let u=new Uint8Array(e.buffer,e.byteOffset+n,16);n+=16,t[o]={type:pe,value:`${b(u.subarray(0,4))}-${b(u.subarray(4,6))}-${b(u.subarray(6,8))}-${b(u.subarray(8,10))}-${b(u.subarray(10))}`};break;default:throw new Error("Unrecognized header type tag")}}return t}},Y;(function(r){r[r.boolTrue=0]="boolTrue",r[r.boolFalse=1]="boolFalse",r[r.byte=2]="byte",r[r.short=3]="short",r[r.integer=4]="integer",r[r.long=5]="long",r[r.byteArray=6]="byteArray",r[r.string=7]="string",r[r.timestamp=8]="timestamp",r[r.uuid=9]="uuid"})(Y||(Y={}));var ee="boolean",ie="byte",fe="short",ce="integer",ue="long",le="binary",ye="string",me="timestamp",pe="uuid",xe=/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;var te=4,g=te*2,A=4,he=g+A*2;function re({byteLength:r,byteOffset:e,buffer:t}){if(r<he)throw new Error("Provided message too short to accommodate event stream message overhead");let n=new DataView(t,e,r),s=n.getUint32(0,!1);if(r!==s)throw new Error("Reported message length does not match received message length");let o=n.getUint32(te,!1),i=n.getUint32(g,!1),f=n.getUint32(r-A,!1),u=new v().update(new Uint8Array(t,e,g));if(i!==u.digest())throw new Error(`The prelude checksum specified in the message (${i}) does not match the calculated CRC32 checksum (${u.digest()})`);if(u.update(new Uint8Array(t,e+g,r-(g+A))),f!==u.digest())throw new Error(`The message checksum (${u.digest()}) did not match the expected value of ${f}`);return{headers:new DataView(t,e+g+A,o),body:new Uint8Array(t,e+g+A+o,s-o-(g+A+A))}}var F=class{headerMarshaller;messageBuffer;isEndOfStream;constructor(e,t){this.headerMarshaller=new C(e,t),this.messageBuffer=[],this.isEndOfStream=!1}feed(e){this.messageBuffer.push(this.decode(e))}endOfStream(){this.isEndOfStream=!0}getMessage(){let e=this.messageBuffer.pop(),t=this.isEndOfStream;return{getMessage(){return e},isEndOfStream(){return t}}}getAvailableMessages(){let e=this.messageBuffer;this.messageBuffer=[];let t=this.isEndOfStream;return{getMessages(){return e},isEndOfStream(){return t}}}encode({headers:e,body:t}){let n=this.headerMarshaller.format(e),s=n.byteLength+t.byteLength+16,o=new Uint8Array(s),i=new DataView(o.buffer,o.byteOffset,o.byteLength),f=new v;return i.setUint32(0,s,!1),i.setUint32(4,n.byteLength,!1),i.setUint32(8,f.update(o.subarray(0,8)).digest(),!1),o.set(n,12),o.set(t,n.byteLength+12),i.setUint32(s-4,f.update(o.subarray(8,s-4)).digest(),!1),o}decode(e){let{headers:t,body:n}=re(e);return{headers:this.headerMarshaller.parse(t),body:n}}formatHeaders(e){return this.headerMarshaller.format(e)}};var U=class{options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(let e of this.options.inputStream)yield this.options.decoder.decode(e)}};var _=class{options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(let e of this.options.messageStream)yield this.options.encoder.encode(e);this.options.includeEndFrame&&(yield new Uint8Array(0))}};var O=class{options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(let e of this.options.messageStream){let t=await this.options.deserializer(e);t!==void 0&&(yield t)}}};var M=class{options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(let e of this.options.inputStream)yield this.options.serializer(e)}};import{Readable as be}from"stream";function L(r){let e=0,t=0,n=null,s=null,o=f=>{if(typeof f!="number")throw new Error("Attempted to allocate an event message where size was not a number: "+f);e=f,t=4,n=new Uint8Array(f),new DataView(n.buffer).setUint32(0,f,!1)},i=async function*(){let f=r[Symbol.asyncIterator]();for(;;){let{value:u,done:a}=await f.next();if(a){if(e)if(e===t)yield n;else throw new Error("Truncated event message received.");else return;return}let l=u.length,c=0;for(;c<l;){if(!n){let m=l-c;s||(s=new Uint8Array(4));let p=Math.min(4-t,m);if(s.set(u.slice(c,c+p),t),t+=p,c+=p,t<4)break;o(new DataView(s.buffer).getUint32(0,!1)),s=null}let y=Math.min(e-t,l-c);n.set(u.slice(c,c+y),t),t+=y,c+=y,e&&e===t&&(yield n,n=null,e=0,t=0)}}};return{[Symbol.asyncIterator]:i}}function de(r,e){let t=T(e.deserializer,e.toUtf8);return{[Symbol.asyncIterator]:async function*(){for await(let n of r){let s=e.eventStreamCodec.decode(n),o=await t(s);o!==void 0&&(yield o)}}}}function T(r,e){return async function(t){let{value:n}=t.headers[":message-type"];if(n==="error"){let s=new Error(t.headers[":error-message"].value||"UnknownError");throw s.name=t.headers[":error-code"].value,s}else if(n==="exception"){let s=t.headers[":exception-type"].value,o={[s]:t},i=await r(o);if(i.$unknown){let f=new Error(e(t.body));throw f.name=s,f}throw i[s]}else if(n==="event"){let s={[t.headers[":event-type"].value]:t},o=await r(s);return o.$unknown?void 0:o}else throw Error(`Unrecognizable event type: ${t.headers[":event-type"].value}`)}}var E=class{eventStreamCodec;utfEncoder;constructor({utf8Encoder:e,utf8Decoder:t}){this.eventStreamCodec=new F(e,t),this.utfEncoder=e}deserialize(e,t){let n=L(e);return new O({messageStream:new U({inputStream:n,decoder:this.eventStreamCodec}),deserializer:T(t,this.utfEncoder)})}serialize(e,t){return new _({messageStream:new M({inputStream:e,serializer:t}),encoder:this.eventStreamCodec,includeEndFrame:!0})}},we=r=>new E(r);var I=class{universalMarshaller;constructor({utf8Encoder:e,utf8Decoder:t}){this.universalMarshaller=new E({utf8Decoder:t,utf8Encoder:e})}deserialize(e,t){let n=typeof e[Symbol.asyncIterator]=="function"?e:Be(e);return this.universalMarshaller.deserialize(n,t)}serialize(e,t){return be.from(this.universalMarshaller.serialize(e,t))}},ge=r=>new I(r);async function*Be(r){let e=!1,t=!1,n=new Array;for(r.on("error",s=>{if(e||(e=!0),s)throw s}),r.on("data",s=>{n.push(s)}),r.on("end",()=>{e=!0});!t;){let s=await new Promise(o=>setTimeout(()=>o(n.shift()),0));s&&(yield s),t=e&&n.length===0}}var ve=r=>({[Symbol.asyncIterator]:async function*(){let e=r.getReader();try{for(;;){let{done:t,value:n}=await e.read();if(t)return;yield n}}finally{e.releaseLock()}}}),De=r=>{let e=r[Symbol.asyncIterator]();return new ReadableStream({async pull(t){let{done:n,value:s}=await e.next();if(n)return t.close();t.enqueue(s)}})};var Ae=r=>Object.assign(r,{eventStreamMarshaller:r.eventStreamSerdeProvider(r)});var $=class{marshaller;serializer;deserializer;serdeContext;defaultContentType;constructor({marshaller:e,serializer:t,deserializer:n,serdeContext:s,defaultContentType:o}){this.marshaller=e,this.serializer=t,this.deserializer=n,this.serdeContext=s,this.defaultContentType=o}async serializeEventStream({eventStream:e,requestSchema:t,initialRequest:n}){let s=this.marshaller,o=t.getEventStreamMember(),i=t.getMemberSchema(o),f=this.serializer,u=this.defaultContentType,a=Symbol("initialRequestMarker"),l={async*[Symbol.asyncIterator](){if(n){let c={":event-type":{type:"string",value:"initial-request"},":message-type":{type:"string",value:"event"},":content-type":{type:"string",value:u}};f.write(t,n);let y=f.flush();yield{[a]:!0,headers:c,body:y}}for await(let c of e)yield c}};return s.serialize(l,c=>{if(c[a])return{headers:c.headers,body:c.body};let y="";for(let x in c)if(x!=="__type"){y=x;break}let{additionalHeaders:m,body:p,eventType:h,explicitPayloadContentType:d}=this.writeEventBody(y,i,c);return{headers:{":event-type":{type:"string",value:h},":message-type":{type:"string",value:"event"},":content-type":{type:"string",value:d??u},...m},body:p}})}async deserializeEventStream({response:e,responseSchema:t,initialResponseContainer:n}){let s=this.marshaller,o=t.getEventStreamMember(),f=t.getMemberSchema(o).getMemberSchemas(),u=Symbol("initialResponseMarker"),a=s.deserialize(e.body,async y=>{let m="";for(let h in y)if(h!=="__type"){m=h;break}let p=y[m].body;if(m==="initial-response"){let h=await this.deserializer.read(t,p);return delete h[o],{[u]:!0,...h}}else if(m in f){let h=f[m];if(h.isStructSchema()){let d={},w=!1;for(let[x,S]of h.structIterator()){let{eventHeader:G,eventPayload:R}=S.getMergedTraits();if(w=w||!!(G||R),R)S.isBlobSchema()?d[x]=p:S.isStringSchema()?d[x]=(this.serdeContext?.utf8Encoder??q)(p):S.isStructSchema()&&(d[x]=await this.deserializer.read(S,p));else if(G){let B=y[m].headers[x]?.value;B!=null&&(S.isNumericSchema()?B&&typeof B=="object"&&"bytes"in B?d[x]=BigInt(B.toString()):d[x]=Number(B):d[x]=B)}}if(w)return{[m]:d};if(p.byteLength===0)return{[m]:{}}}return{[m]:await this.deserializer.read(h,p)}}else return{$unknown:y}}),l=a[Symbol.asyncIterator](),c=await l.next();if(c.done)return a;if(c.value?.[u]){if(!t)throw new Error("@smithy::core/protocols - initial-response event encountered in event stream but no response schema given.");for(let y in c.value)n[y]=c.value[y]}return{async*[Symbol.asyncIterator](){for(c?.value?.[u]||(yield c.value);;){let{done:y,value:m}=await l.next();if(y)break;yield m}}}}writeEventBody(e,t,n){let s=this.serializer,o=e,i=null,f,u=t.getSchema()[4].includes(e),a={};if(u){let y=t.getMemberSchema(e);if(y.isStructSchema()){for(let[m,p]of y.structIterator()){let{eventHeader:h,eventPayload:d}=p.getMergedTraits();if(d)i=m;else if(h){let w=n[e][m],x="binary";p.isNumericSchema()?(-2)**31<=w&&w<=2**31-1?x="integer":x="long":p.isTimestampSchema()?x="timestamp":p.isStringSchema()?x="string":p.isBooleanSchema()&&(x="boolean"),w!=null&&(a[m]={type:x,value:w},delete n[e][m])}}if(i!==null){let m=y.getMemberSchema(i);m.isBlobSchema()?f="application/octet-stream":m.isStringSchema()&&(f="text/plain"),s.write(m,n[e][i])}else s.write(y,n[e])}else if(y.isUnitSchema())s.write(y,{});else throw new Error("@smithy/core/event-streams - non-struct member not supported in event stream union.")}else{let[y,m]=n[e];o=y,s.write(15,m)}let l=s.flush()??new Uint8Array;return{body:typeof l=="string"?(this.serdeContext?.utf8Decoder??V)(l):l,eventType:o,explicitPayloadContentType:f,additionalHeaders:a}}};export{F as EventStreamCodec,I as EventStreamMarshaller,$ as EventStreamSerde,C as HeaderMarshaller,D as Int64,U as MessageDecoderStream,_ as MessageEncoderStream,O as SmithyMessageDecoderStream,M as SmithyMessageEncoderStream,E as UniversalEventStreamMarshaller,ge as eventStreamSerdeProvider,L as getChunkedStream,T as getMessageUnmarshaller,de as getUnmarshalledStream,De as iterableToReadableStream,ve as readableStreamToIterable,Ae as resolveEventStreamSerdeConfig,we as universalEventStreamSerdeProvider};
@@ -1 +0,0 @@
1
- import{a as _e}from"./chunk-RH2FFVSB.js";import{a as H,b as re,c as se,d as ne,e as ie,f as pe,g as he,h as fe,i as ge,m as Re,n as ye,o as Ce,p as Ae,q as Oe,r as Te,s as Ne,t as we,u as ke,v as be}from"./chunk-STX7THHW.js";import{g as ae,l as ce,o as ue,p as de,q as le,r as me,t as Se,u as xe,y as Ie,z as De}from"./chunk-VFREGXHN.js";import{d as ve,e as Ee}from"./chunk-XB6R2VIU.js";import{b as u,c as w,d as D,e as j,f as L,g as K,h as V,j as B,k as W,n as Q,o as Y,p as J}from"./chunk-OIQB5F6Y.js";import"./chunk-JTXBZ2SU.js";import{a as Pe}from"./chunk-P2WEIQRQ.js";import"./chunk-WJLTO7JW.js";import"./chunk-TW5BOTVX.js";import"./chunk-SPHQRDN5.js";import{d as k,e as C,f as b,g as F,i as U,k as G,l as $,m as q,n as M,p as z}from"./chunk-FNDUJLS6.js";import{c as A,n as Z,o as ee,p as te,s as oe}from"./chunk-HGJYEXMU.js";import{w as X}from"./chunk-W5TBFCWY.js";import"./chunk-IYWUY3VA.js";var He=async(e,t,o)=>({operation:k(t).operation,region:await C(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function gt(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:e.region},propertiesExtractor:(t,o)=>({signingProperties:{config:t,context:o}})}}function St(e){return{schemeId:"smithy.api#noAuth"}}var Fe=e=>{let t=[];return e.operation==="GetRoleCredentials"?t.push(St(e)):t.push(gt(e)),t},Ue=e=>{let t=ge(e);return Object.assign(t,{authSchemePreference:C(e.authSchemePreference??[])})};var Ge=e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"}),$e={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var Qe="required";var i="argv";var qe="isSet",m="booleanEquals",d="error",l="endpoint",p="tree",I="PartitionResult",O="getAttr",Me={[Qe]:!1,type:"string"},ze={[Qe]:!0,default:!1,type:"boolean"},je={ref:"Endpoint"},Ye={fn:m,[i]:[{ref:"UseFIPS"},!0]},Je={fn:m,[i]:[{ref:"UseDualStack"},!0]},n={},Le={fn:O,[i]:[{ref:I},"supportsFIPS"]},Xe={ref:I},Ke={fn:m,[i]:[!0,{fn:O,[i]:[Xe,"supportsDualStack"]}]},Ve=[Ye],Be=[Je],We=[{ref:"Region"}],vt={version:"1.0",parameters:{Region:Me,UseDualStack:ze,UseFIPS:ze,Endpoint:Me},rules:[{conditions:[{fn:qe,[i]:[je]}],rules:[{conditions:Ve,error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:d},{conditions:Be,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:d},{endpoint:{url:je,properties:n,headers:n},type:l}],type:p},{conditions:[{fn:qe,[i]:We}],rules:[{conditions:[{fn:"aws.partition",[i]:We,assign:I}],rules:[{conditions:[Ye,Je],rules:[{conditions:[{fn:m,[i]:[!0,Le]},Ke],rules:[{endpoint:{url:"https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:n,headers:n},type:l}],type:p},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:d}],type:p},{conditions:Ve,rules:[{conditions:[{fn:m,[i]:[Le,!0]}],rules:[{conditions:[{fn:"stringEquals",[i]:[{fn:O,[i]:[Xe,"name"]},"aws-us-gov"]}],endpoint:{url:"https://portal.sso.{Region}.amazonaws.com",properties:n,headers:n},type:l},{endpoint:{url:"https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",properties:n,headers:n},type:l}],type:p},{error:"FIPS is enabled but this partition does not support FIPS",type:d}],type:p},{conditions:Be,rules:[{conditions:[Ke],rules:[{endpoint:{url:"https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:n,headers:n},type:l}],type:p},{error:"DualStack is enabled but this partition does not support DualStack",type:d}],type:p},{endpoint:{url:"https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",properties:n,headers:n},type:l}],type:p}],type:p},{error:"Invalid Configuration: Missing Region",type:d}]},Ze=vt;var Et=new B({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),et=(e,t={})=>Et.get(e,()=>Q(Ze,{endpointParams:e,logger:t.logger}));W.aws=ae;var c=class e extends U{constructor(t){super(t),Object.setPrototypeOf(this,e.prototype)}};var g=class e extends c{name="InvalidRequestException";$fault="client";constructor(t){super({name:"InvalidRequestException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},S=class e extends c{name="ResourceNotFoundException";$fault="client";constructor(t){super({name:"ResourceNotFoundException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},v=class e extends c{name="TooManyRequestsException";$fault="client";constructor(t){super({name:"TooManyRequestsException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},E=class e extends c{name="UnauthorizedException";$fault="client";constructor(t){super({name:"UnauthorizedException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}};var xt="AccessTokenType",_t="GetRoleCredentials",Pt="GetRoleCredentialsRequest",Rt="GetRoleCredentialsResponse",yt="InvalidRequestException",Ct="RoleCredentials",At="ResourceNotFoundException",It="SecretAccessKeyType",Ot="SessionTokenType",Tt="TooManyRequestsException",Nt="UnauthorizedException",wt="accountId",Dt="accessKeyId",kt="accessToken",bt="account_id",x="client",_="error",Ht="expiration",Ft="http",P="httpError",Ut="httpHeader",tt="httpQuery",R="message",Gt="roleCredentials",$t="roleName",qt="role_name",ot="smithy.ts.sdk.synthetic.com.amazonaws.sso",Mt="secretAccessKey",zt="sessionToken",jt="x-amz-sso_bearer_token",a="com.amazonaws.sso",rt=A.for(ot),Lt=[-3,ot,"SSOServiceException",0,[],[]];rt.registerError(Lt,c);var h=A.for(a),Kt=[-3,a,yt,{[_]:x,[P]:400},[R],[0]];h.registerError(Kt,g);var Vt=[-3,a,At,{[_]:x,[P]:404},[R],[0]];h.registerError(Vt,S);var Bt=[-3,a,Tt,{[_]:x,[P]:429},[R],[0]];h.registerError(Bt,v);var Wt=[-3,a,Nt,{[_]:x,[P]:401},[R],[0]];h.registerError(Wt,E);var st=[rt,h],Qt=[0,a,xt,8,0],Yt=[0,a,It,8,0],Jt=[0,a,Ot,8,0],Xt=[3,a,Pt,0,[$t,wt,kt],[[0,{[tt]:qt}],[0,{[tt]:bt}],[()=>Qt,{[Ut]:jt}]],3],Zt=[3,a,Rt,0,[Gt],[[()=>eo,0]]],eo=[3,a,Ct,0,[Dt,Mt,zt,Ht],[0,[()=>Yt,0],[()=>Jt,0],1]],nt=[9,a,_t,{[Ft]:["GET","/federation/credentials",200]},()=>Xt,()=>Zt];var it=e=>({apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??Se,base64Encoder:e?.base64Encoder??xe,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??et,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Fe,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:t=>t.getIdentityProvider("aws.auth#sigv4"),signer:new he},{schemeId:"smithy.api#noAuth",identityProvider:t=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new ie}],logger:e?.logger??new z,protocol:e?.protocol??_e,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:st,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:e?.serviceId??"SSO",urlParser:e?.urlParser??oe,utf8Decoder:e?.utf8Decoder??ve,utf8Encoder:e?.utf8Encoder??Ee});var at=e=>{$(process.version);let t=V(e),o=()=>t().then(G),s=it(e);pe(process.version);let r={profile:e?.profile,logger:s.logger};return{...s,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??u(fe,r),bodyLengthChecker:e?.bodyLengthChecker??De,defaultUserAgentProvider:e?.defaultUserAgentProvider??Ne({serviceId:s.serviceId,clientVersion:Te.version}),maxAttempts:e?.maxAttempts??u(ue,e),region:e?.region??u(j,{...L,...r}),requestHandler:Pe.create(e?.requestHandler??o),retryMode:e?.retryMode??u({...le,default:async()=>(await o()).retryMode||ce},e),sha256:e?.sha256??X.bind(null,"sha256"),streamCollector:e?.streamCollector??Re,useDualstackEndpoint:e?.useDualstackEndpoint??u(w,r),useFipsEndpoint:e?.useFipsEndpoint??u(D,r),userAgentAppId:e?.userAgentAppId??u(we,r)}};var pt=e=>{let t=e.httpAuthSchemes,o=e.httpAuthSchemeProvider,s=e.credentials;return{setHttpAuthScheme(r){let f=t.findIndex(y=>y.schemeId===r.schemeId);f===-1?t.push(r):t.splice(f,1,r)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(r){o=r},httpAuthSchemeProvider(){return o},setCredentials(r){s=r},credentials(){return s}}},ct=e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()});var ut=(e,t)=>{let o=Object.assign(ke(e),q(e),Z(e),pt(e));return t.forEach(s=>s.configure(o)),Object.assign(e,be(o),M(o),ee(o),ct(o))};var T=class extends b{config;constructor(...[t]){let o=at(t||{});super(o),this.initConfig=o;let s=Ge(o),r=Ie(s),f=de(r),y=K(f),dt=y,lt=Y(dt),mt=Ue(lt),ht=ut(mt,t?.extensions||[]);this.config=ht,this.middlewareStack.use(H(this.config)),this.middlewareStack.use(Oe(this.config)),this.middlewareStack.use(me(this.config)),this.middlewareStack.use(te(this.config)),this.middlewareStack.use(ye(this.config)),this.middlewareStack.use(Ce(this.config)),this.middlewareStack.use(Ae(this.config)),this.middlewareStack.use(re(this.config,{httpAuthSchemeParametersProvider:He,identityProviderConfigProvider:async ft=>new ne({"aws.auth#sigv4":ft.credentials})})),this.middlewareStack.use(se(this.config))}destroy(){super.destroy()}};var N=class extends F.classBuilder().ep($e).m(function(t,o,s,r){return[J(s,t.getEndpointParameterInstructions())]}).s("SWBPortalService","GetRoleCredentials",{}).n("SSOClient","GetRoleCredentialsCommand").sc(nt).build(){};export{N as GetRoleCredentialsCommand,T as SSOClient};
@@ -1 +0,0 @@
1
- import{a as ke}from"./chunk-RH2FFVSB.js";import{a as j,b as de,c as le,d as he,e as ge,f as Ee,g as Pe,h as Ie,i as Ce,m as Ne,n as we,o as He,p as be,q as Fe,r as $e,s as Me,t as Ve,u as Le,v as je}from"./chunk-STX7THHW.js";import{g as fe,l as Se,o as ve,p as _e,q as xe,r as Ae,t as Re,u as Te,y as Ue,z as qe}from"./chunk-VFREGXHN.js";import{d as ye,e as Oe}from"./chunk-XB6R2VIU.js";import{b as m,c as M,d as V,e as J,f as Z,g as ee,h as te,j as re,k as oe,n as ne,o as se,p as ie}from"./chunk-OIQB5F6Y.js";import"./chunk-JTXBZ2SU.js";import{a as De}from"./chunk-P2WEIQRQ.js";import"./chunk-WJLTO7JW.js";import"./chunk-TW5BOTVX.js";import"./chunk-SPHQRDN5.js";import{d as q,e as k,f as L,g as B,h as G,i as z,k as K,l as X,m as Q,n as W,p as Y}from"./chunk-FNDUJLS6.js";import{c as D,n as pe,o as ce,p as ue,s as me}from"./chunk-HGJYEXMU.js";import{w as ae}from"./chunk-W5TBFCWY.js";import"./chunk-IYWUY3VA.js";var Be=async(e,t,r)=>({operation:q(t).operation,region:await k(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function Dt(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"signin",region:e.region},propertiesExtractor:(t,r)=>({signingProperties:{config:t,context:r}})}}function Nt(e){return{schemeId:"smithy.api#noAuth"}}var Ge=e=>{let t=[];return e.operation==="CreateOAuth2Token"?t.push(Nt(e)):t.push(Dt(e)),t},ze=e=>{let t=Ce(e);return Object.assign(t,{authSchemePreference:k(e.authSchemePreference??[])})};var Ke=e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"signin"}),Xe={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var rt="required";var s="argv";var Qe="isSet",h="booleanEquals",g="error",d="endpoint",c="tree",_="PartitionResult",N="stringEquals",We={[rt]:!0,default:!1,type:"boolean"},Ye={[rt]:!1,type:"string"},Je={ref:"Endpoint"},w={fn:h,[s]:[{ref:"UseFIPS"},!0]},H={fn:h,[s]:[{ref:"UseDualStack"},!0]},n={},b={fn:"getAttr",[s]:[{ref:_},"name"]},S={fn:h,[s]:[{ref:"UseFIPS"},!1]},v={fn:h,[s]:[{ref:"UseDualStack"},!1]},Ze={fn:"getAttr",[s]:[{ref:_},"supportsFIPS"]},et={fn:h,[s]:[!0,{fn:"getAttr",[s]:[{ref:_},"supportsDualStack"]}]},tt=[{ref:"Region"}],wt={version:"1.0",parameters:{UseDualStack:We,UseFIPS:We,Endpoint:Ye,Region:Ye},rules:[{conditions:[{fn:Qe,[s]:[Je]}],rules:[{conditions:[w],error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:g},{rules:[{conditions:[H],error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:g},{endpoint:{url:Je,properties:n,headers:n},type:d}],type:c}],type:c},{rules:[{conditions:[{fn:Qe,[s]:tt}],rules:[{conditions:[{fn:"aws.partition",[s]:tt,assign:_}],rules:[{conditions:[{fn:N,[s]:[b,"aws"]},S,v],endpoint:{url:"https://{Region}.signin.aws.amazon.com",properties:n,headers:n},type:d},{conditions:[{fn:N,[s]:[b,"aws-cn"]},S,v],endpoint:{url:"https://{Region}.signin.amazonaws.cn",properties:n,headers:n},type:d},{conditions:[{fn:N,[s]:[b,"aws-us-gov"]},S,v],endpoint:{url:"https://{Region}.signin.amazonaws-us-gov.com",properties:n,headers:n},type:d},{conditions:[w,H],rules:[{conditions:[{fn:h,[s]:[!0,Ze]},et],rules:[{endpoint:{url:"https://signin-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:n,headers:n},type:d}],type:c},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:g}],type:c},{conditions:[w,v],rules:[{conditions:[{fn:h,[s]:[Ze,!0]}],rules:[{endpoint:{url:"https://signin-fips.{Region}.{PartitionResult#dnsSuffix}",properties:n,headers:n},type:d}],type:c},{error:"FIPS is enabled but this partition does not support FIPS",type:g}],type:c},{conditions:[S,H],rules:[{conditions:[et],rules:[{endpoint:{url:"https://signin.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:n,headers:n},type:d}],type:c},{error:"DualStack is enabled but this partition does not support DualStack",type:g}],type:c},{endpoint:{url:"https://signin.{Region}.{PartitionResult#dnsSuffix}",properties:n,headers:n},type:d}],type:c}],type:c},{error:"Invalid Configuration: Missing Region",type:g}],type:c}]},ot=wt;var Ht=new re({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),nt=(e,t={})=>Ht.get(e,()=>ne(ot,{endpointParams:e,logger:t.logger}));oe.aws=fe;var u=class e extends z{constructor(t){super(t),Object.setPrototypeOf(this,e.prototype)}};var x=class e extends u{name="AccessDeniedException";$fault="client";error;constructor(t){super({name:"AccessDeniedException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error}},A=class e extends u{name="InternalServerException";$fault="server";error;constructor(t){super({name:"InternalServerException",$fault:"server",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error}},P=class e extends u{name="TooManyRequestsError";$fault="client";error;constructor(t){super({name:"TooManyRequestsError",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error}},I=class e extends u{name="ValidationException";$fault="client";error;constructor(t){super({name:"ValidationException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error}};var bt="AccessDeniedException",Ut="AccessToken",Ft="CreateOAuth2Token",$t="CreateOAuth2TokenRequest",Mt="CreateOAuth2TokenRequestBody",Vt="CreateOAuth2TokenResponseBody",qt="CreateOAuth2TokenResponse",Lt="InternalServerException",jt="RefreshToken",Bt="TooManyRequestsError",Gt="ValidationException",st="accessKeyId",it="accessToken",U="client",at="clientId",pt="codeVerifier",zt="code",l="error",ct="expiresIn",ut="grantType",Kt="http",F="httpError",mt="idToken",i="jsonName",R="message",C="refreshToken",dt="redirectUri",ft="smithy.ts.sdk.synthetic.com.amazonaws.signin",lt="secretAccessKey",ht="sessionToken",Xt="server",Qt="tokenInput",Wt="tokenOutput",gt="tokenType",p="com.amazonaws.signin",Et=D.for(ft),Yt=[-3,ft,"SigninServiceException",0,[],[]];Et.registerError(Yt,u);var f=D.for(p),Jt=[-3,p,bt,{[l]:U},[l,R],[0,0],2];f.registerError(Jt,x);var Zt=[-3,p,Lt,{[l]:Xt,[F]:500},[l,R],[0,0],2];f.registerError(Zt,A);var er=[-3,p,Bt,{[l]:U,[F]:429},[l,R],[0,0],2];f.registerError(er,P);var tr=[-3,p,Gt,{[l]:U,[F]:400},[l,R],[0,0],2];f.registerError(tr,I);var St=[Et,f],vt=[0,p,jt,8,0],rr=[3,p,Ut,8,[st,lt,ht],[[0,{[i]:st}],[0,{[i]:lt}],[0,{[i]:ht}]],3],or=[3,p,$t,0,[Qt],[[()=>nr,16]],1],nr=[3,p,Mt,0,[at,ut,zt,dt,pt,C],[[0,{[i]:at}],[0,{[i]:ut}],0,[0,{[i]:dt}],[0,{[i]:pt}],[()=>vt,{[i]:C}]],2],sr=[3,p,qt,0,[Wt],[[()=>ir,16]],1],ir=[3,p,Vt,0,[it,gt,ct,C,mt],[[()=>rr,{[i]:it}],[0,{[i]:gt}],[1,{[i]:ct}],[()=>vt,{[i]:C}],[0,{[i]:mt}]],4],_t=[9,p,Ft,{[Kt]:["POST","/v1/token",200]},()=>or,()=>sr];var xt=e=>({apiVersion:"2023-01-01",base64Decoder:e?.base64Decoder??Re,base64Encoder:e?.base64Encoder??Te,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??nt,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Ge,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:t=>t.getIdentityProvider("aws.auth#sigv4"),signer:new Pe},{schemeId:"smithy.api#noAuth",identityProvider:t=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new ge}],logger:e?.logger??new Y,protocol:e?.protocol??ke,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.signin",errorTypeRegistries:St,version:"2023-01-01",serviceTarget:"Signin"},serviceId:e?.serviceId??"Signin",urlParser:e?.urlParser??me,utf8Decoder:e?.utf8Decoder??ye,utf8Encoder:e?.utf8Encoder??Oe});var At=e=>{X(process.version);let t=te(e),r=()=>t().then(K),a=xt(e);Ee(process.version);let o={profile:e?.profile,logger:a.logger};return{...a,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??m(Ie,o),bodyLengthChecker:e?.bodyLengthChecker??qe,defaultUserAgentProvider:e?.defaultUserAgentProvider??Me({serviceId:a.serviceId,clientVersion:$e.version}),maxAttempts:e?.maxAttempts??m(ve,e),region:e?.region??m(J,{...Z,...o}),requestHandler:De.create(e?.requestHandler??r),retryMode:e?.retryMode??m({...xe,default:async()=>(await r()).retryMode||Se},e),sha256:e?.sha256??ae.bind(null,"sha256"),streamCollector:e?.streamCollector??Ne,useDualstackEndpoint:e?.useDualstackEndpoint??m(M,o),useFipsEndpoint:e?.useFipsEndpoint??m(V,o),userAgentAppId:e?.userAgentAppId??m(Ve,o)}};var Pt=e=>{let t=e.httpAuthSchemes,r=e.httpAuthSchemeProvider,a=e.credentials;return{setHttpAuthScheme(o){let E=t.findIndex(T=>T.schemeId===o.schemeId);E===-1?t.push(o):t.splice(E,1,o)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(o){r=o},httpAuthSchemeProvider(){return r},setCredentials(o){a=o},credentials(){return a}}},It=e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()});var Ct=(e,t)=>{let r=Object.assign(Le(e),Q(e),pe(e),Pt(e));return t.forEach(a=>a.configure(r)),Object.assign(e,je(r),W(r),ce(r),It(r))};var y=class extends L{config;constructor(...[t]){let r=At(t||{});super(r),this.initConfig=r;let a=Ke(r),o=Ue(a),E=_e(o),T=ee(E),Rt=T,yt=se(Rt),Ot=ze(yt),Tt=Ct(Ot,t?.extensions||[]);this.config=Tt,this.middlewareStack.use(j(this.config)),this.middlewareStack.use(Fe(this.config)),this.middlewareStack.use(Ae(this.config)),this.middlewareStack.use(ue(this.config)),this.middlewareStack.use(we(this.config)),this.middlewareStack.use(He(this.config)),this.middlewareStack.use(be(this.config)),this.middlewareStack.use(de(this.config,{httpAuthSchemeParametersProvider:Be,identityProviderConfigProvider:async kt=>new he({"aws.auth#sigv4":kt.credentials})})),this.middlewareStack.use(le(this.config))}destroy(){super.destroy()}};var O=class extends B.classBuilder().ep(Xe).m(function(t,r,a,o){return[ie(a,t.getEndpointParameterInstructions())]}).s("Signin","CreateOAuth2Token",{}).n("SigninClient","CreateOAuth2TokenCommand").sc(_t).build(){};var ar={CreateOAuth2TokenCommand:O},$=class extends y{};G(ar,$);var ko={AUTHCODE_EXPIRED:"AUTHCODE_EXPIRED",INSUFFICIENT_PERMISSIONS:"INSUFFICIENT_PERMISSIONS",INVALID_REQUEST:"INVALID_REQUEST",SERVER_ERROR:"server_error",TOKEN_EXPIRED:"TOKEN_EXPIRED",USER_CREDENTIALS_CHANGED:"USER_CREDENTIALS_CHANGED"};export{B as $Command,x as AccessDeniedException,Jt as AccessDeniedException$,rr as AccessToken$,_t as CreateOAuth2Token$,O as CreateOAuth2TokenCommand,or as CreateOAuth2TokenRequest$,nr as CreateOAuth2TokenRequestBody$,sr as CreateOAuth2TokenResponse$,ir as CreateOAuth2TokenResponseBody$,A as InternalServerException,Zt as InternalServerException$,ko as OAuth2ErrorCode,$ as Signin,y as SigninClient,u as SigninServiceException,Yt as SigninServiceException$,P as TooManyRequestsError,er as TooManyRequestsError$,I as ValidationException,tr as ValidationException$,L as __Client,St as errorTypeRegistries};
@@ -1 +0,0 @@
1
- import{a as Re}from"./chunk-RH2FFVSB.js";import{a as V,b as le,c as me,d as he,e as fe,f as Ee,g as Pe,h as Ce,i as Oe,m as we,n as be,o as Ne,p as $e,q as He,r as Fe,s as Me,t as Ge,u as Ke,v as Ve}from"./chunk-STX7THHW.js";import{g as ge,l as xe,o as Se,p as _e,q as ve,r as Ie,t as ye,u as Te,y as Ue,z as je}from"./chunk-VFREGXHN.js";import{d as Ae,e as De}from"./chunk-XB6R2VIU.js";import{b as f,c as M,d as G,e as Q,f as Z,g as ee,h as te,j as re,k as oe,n as ne,o as ie,p as se}from"./chunk-OIQB5F6Y.js";import"./chunk-JTXBZ2SU.js";import{a as ke}from"./chunk-P2WEIQRQ.js";import"./chunk-WJLTO7JW.js";import"./chunk-TW5BOTVX.js";import"./chunk-SPHQRDN5.js";import{d as j,e as N,f as K,g as q,h as z,i as L,k as B,l as Y,m as W,n as J,p as X}from"./chunk-FNDUJLS6.js";import{c as $,n as ce,o as ae,p as de,s as ue}from"./chunk-HGJYEXMU.js";import{w as pe}from"./chunk-W5TBFCWY.js";import"./chunk-IYWUY3VA.js";var qe=async(e,t,n)=>({operation:j(t).operation,region:await N(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function At(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sso-oauth",region:e.region},propertiesExtractor:(t,n)=>({signingProperties:{config:t,context:n}})}}function Dt(e){return{schemeId:"smithy.api#noAuth"}}var ze=e=>{let t=[];return e.operation==="CreateToken"?t.push(Dt(e)):t.push(At(e)),t},Le=e=>{let t=Oe(e);return Object.assign(t,{authSchemePreference:N(e.authSchemePreference??[])})};var Be=e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"sso-oauth"}),Ye={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var nt="required";var a="argv";var We="isSet",x="booleanEquals",g="error",E="endpoint",h="tree",U="PartitionResult",H="getAttr",Je={[nt]:!1,type:"string"},Xe={[nt]:!0,default:!1,type:"boolean"},Qe={ref:"Endpoint"},it={fn:x,[a]:[{ref:"UseFIPS"},!0]},st={fn:x,[a]:[{ref:"UseDualStack"},!0]},c={},Ze={fn:H,[a]:[{ref:U},"supportsFIPS"]},pt={ref:U},et={fn:x,[a]:[!0,{fn:H,[a]:[pt,"supportsDualStack"]}]},tt=[it],rt=[st],ot=[{ref:"Region"}],Tt={version:"1.0",parameters:{Region:Je,UseDualStack:Xe,UseFIPS:Xe,Endpoint:Je},rules:[{conditions:[{fn:We,[a]:[Qe]}],rules:[{conditions:tt,error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:g},{conditions:rt,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:g},{endpoint:{url:Qe,properties:c,headers:c},type:E}],type:h},{conditions:[{fn:We,[a]:ot}],rules:[{conditions:[{fn:"aws.partition",[a]:ot,assign:U}],rules:[{conditions:[it,st],rules:[{conditions:[{fn:x,[a]:[!0,Ze]},et],rules:[{endpoint:{url:"https://oidc-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:c,headers:c},type:E}],type:h},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:g}],type:h},{conditions:tt,rules:[{conditions:[{fn:x,[a]:[Ze,!0]}],rules:[{conditions:[{fn:"stringEquals",[a]:[{fn:H,[a]:[pt,"name"]},"aws-us-gov"]}],endpoint:{url:"https://oidc.{Region}.amazonaws.com",properties:c,headers:c},type:E},{endpoint:{url:"https://oidc-fips.{Region}.{PartitionResult#dnsSuffix}",properties:c,headers:c},type:E}],type:h},{error:"FIPS is enabled but this partition does not support FIPS",type:g}],type:h},{conditions:rt,rules:[{conditions:[et],rules:[{endpoint:{url:"https://oidc.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:c,headers:c},type:E}],type:h},{error:"DualStack is enabled but this partition does not support DualStack",type:g}],type:h},{endpoint:{url:"https://oidc.{Region}.{PartitionResult#dnsSuffix}",properties:c,headers:c},type:E}],type:h}],type:h},{error:"Invalid Configuration: Missing Region",type:g}]},ct=Tt;var Rt=new re({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),at=(e,t={})=>Rt.get(e,()=>ne(ct,{endpointParams:e,logger:t.logger}));oe.aws=ge;var i=class e extends L{constructor(t){super(t),Object.setPrototypeOf(this,e.prototype)}};var _=class e extends i{name="AccessDeniedException";$fault="client";error;reason;error_description;constructor(t){super({name:"AccessDeniedException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.reason=t.reason,this.error_description=t.error_description}},v=class e extends i{name="AuthorizationPendingException";$fault="client";error;error_description;constructor(t){super({name:"AuthorizationPendingException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},I=class e extends i{name="ExpiredTokenException";$fault="client";error;error_description;constructor(t){super({name:"ExpiredTokenException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},P=class e extends i{name="InternalServerException";$fault="server";error;error_description;constructor(t){super({name:"InternalServerException",$fault:"server",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},C=class e extends i{name="InvalidClientException";$fault="client";error;error_description;constructor(t){super({name:"InvalidClientException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},O=class e extends i{name="InvalidGrantException";$fault="client";error;error_description;constructor(t){super({name:"InvalidGrantException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},y=class e extends i{name="InvalidRequestException";$fault="client";error;reason;error_description;constructor(t){super({name:"InvalidRequestException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.reason=t.reason,this.error_description=t.error_description}},A=class e extends i{name="InvalidScopeException";$fault="client";error;error_description;constructor(t){super({name:"InvalidScopeException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},D=class e extends i{name="SlowDownException";$fault="client";error;error_description;constructor(t){super({name:"SlowDownException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},T=class e extends i{name="UnauthorizedClientException";$fault="client";error;error_description;constructor(t){super({name:"UnauthorizedClientException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},R=class e extends i{name="UnsupportedGrantTypeException";$fault="client";error;error_description;constructor(t){super({name:"UnsupportedGrantTypeException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}};var kt="AccessDeniedException",wt="AuthorizationPendingException",bt="AccessToken",Nt="ClientSecret",$t="CreateToken",Ut="CreateTokenRequest",Ht="CreateTokenResponse",Ft="CodeVerifier",Mt="ExpiredTokenException",Gt="InvalidClientException",jt="InvalidGrantException",Kt="InvalidRequestException",Vt="InternalServerException",qt="InvalidScopeException",zt="IdToken",Lt="RefreshToken",Bt="SlowDownException",Yt="UnauthorizedClientException",Wt="UnsupportedGrantTypeException",Jt="accessToken",m="client",Xt="clientId",Qt="clientSecret",Zt="codeVerifier",er="code",tr="deviceCode",r="error",rr="expiresIn",u="error_description",or="grantType",nr="http",l="httpError",ir="idToken",dt="reason",ut="refreshToken",sr="redirectUri",lt="smithy.ts.sdk.synthetic.com.amazonaws.ssooidc",pr="scope",cr="server",ar="tokenType",o="com.amazonaws.ssooidc",mt=$.for(lt),dr=[-3,lt,"SSOOIDCServiceException",0,[],[]];mt.registerError(dr,i);var d=$.for(o),ur=[-3,o,kt,{[r]:m,[l]:400},[r,dt,u],[0,0,0]];d.registerError(ur,_);var lr=[-3,o,wt,{[r]:m,[l]:400},[r,u],[0,0]];d.registerError(lr,v);var mr=[-3,o,Mt,{[r]:m,[l]:400},[r,u],[0,0]];d.registerError(mr,I);var hr=[-3,o,Vt,{[r]:cr,[l]:500},[r,u],[0,0]];d.registerError(hr,P);var fr=[-3,o,Gt,{[r]:m,[l]:401},[r,u],[0,0]];d.registerError(fr,C);var gr=[-3,o,jt,{[r]:m,[l]:400},[r,u],[0,0]];d.registerError(gr,O);var Er=[-3,o,Kt,{[r]:m,[l]:400},[r,dt,u],[0,0,0]];d.registerError(Er,y);var xr=[-3,o,qt,{[r]:m,[l]:400},[r,u],[0,0]];d.registerError(xr,A);var Sr=[-3,o,Bt,{[r]:m,[l]:400},[r,u],[0,0]];d.registerError(Sr,D);var _r=[-3,o,Yt,{[r]:m,[l]:400},[r,u],[0,0]];d.registerError(_r,T);var vr=[-3,o,Wt,{[r]:m,[l]:400},[r,u],[0,0]];d.registerError(vr,R);var ht=[mt,d],Ir=[0,o,bt,8,0],Pr=[0,o,Nt,8,0],Cr=[0,o,Ft,8,0],Or=[0,o,zt,8,0],ft=[0,o,Lt,8,0],yr=[3,o,Ut,0,[Xt,Qt,or,tr,er,ut,pr,sr,Zt],[0,[()=>Pr,0],0,0,0,[()=>ft,0],64,0,[()=>Cr,0]],3],Ar=[3,o,Ht,0,[Jt,ar,rr,ut,ir],[[()=>Ir,0],0,1,[()=>ft,0],[()=>Or,0]]];var gt=[9,o,$t,{[nr]:["POST","/token",200]},()=>yr,()=>Ar];var Et=e=>({apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??ye,base64Encoder:e?.base64Encoder??Te,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??at,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??ze,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:t=>t.getIdentityProvider("aws.auth#sigv4"),signer:new Pe},{schemeId:"smithy.api#noAuth",identityProvider:t=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new fe}],logger:e?.logger??new X,protocol:e?.protocol??Re,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.ssooidc",errorTypeRegistries:ht,version:"2019-06-10",serviceTarget:"AWSSSOOIDCService"},serviceId:e?.serviceId??"SSO OIDC",urlParser:e?.urlParser??ue,utf8Decoder:e?.utf8Decoder??Ae,utf8Encoder:e?.utf8Encoder??De});var xt=e=>{Y(process.version);let t=te(e),n=()=>t().then(B),p=Et(e);Ee(process.version);let s={profile:e?.profile,logger:p.logger};return{...p,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??f(Ce,s),bodyLengthChecker:e?.bodyLengthChecker??je,defaultUserAgentProvider:e?.defaultUserAgentProvider??Me({serviceId:p.serviceId,clientVersion:Fe.version}),maxAttempts:e?.maxAttempts??f(Se,e),region:e?.region??f(Q,{...Z,...s}),requestHandler:ke.create(e?.requestHandler??n),retryMode:e?.retryMode??f({...ve,default:async()=>(await n()).retryMode||xe},e),sha256:e?.sha256??pe.bind(null,"sha256"),streamCollector:e?.streamCollector??we,useDualstackEndpoint:e?.useDualstackEndpoint??f(M,s),useFipsEndpoint:e?.useFipsEndpoint??f(G,s),userAgentAppId:e?.userAgentAppId??f(Ge,s)}};var St=e=>{let t=e.httpAuthSchemes,n=e.httpAuthSchemeProvider,p=e.credentials;return{setHttpAuthScheme(s){let S=t.findIndex(b=>b.schemeId===s.schemeId);S===-1?t.push(s):t.splice(S,1,s)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(s){n=s},httpAuthSchemeProvider(){return n},setCredentials(s){p=s},credentials(){return p}}},_t=e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()});var vt=(e,t)=>{let n=Object.assign(Ke(e),W(e),ce(e),St(e));return t.forEach(p=>p.configure(n)),Object.assign(e,Ve(n),J(n),ae(n),_t(n))};var k=class extends K{config;constructor(...[t]){let n=xt(t||{});super(n),this.initConfig=n;let p=Be(n),s=Ue(p),S=_e(s),b=ee(S),It=b,Pt=ie(It),Ct=Le(Pt),Ot=vt(Ct,t?.extensions||[]);this.config=Ot,this.middlewareStack.use(V(this.config)),this.middlewareStack.use(He(this.config)),this.middlewareStack.use(Ie(this.config)),this.middlewareStack.use(de(this.config)),this.middlewareStack.use(be(this.config)),this.middlewareStack.use(Ne(this.config)),this.middlewareStack.use($e(this.config)),this.middlewareStack.use(le(this.config,{httpAuthSchemeParametersProvider:qe,identityProviderConfigProvider:async yt=>new he({"aws.auth#sigv4":yt.credentials})})),this.middlewareStack.use(me(this.config))}destroy(){super.destroy()}};var w=class extends q.classBuilder().ep(Ye).m(function(t,n,p,s){return[se(p,t.getEndpointParameterInstructions())]}).s("AWSSSOOIDCService","CreateToken",{}).n("SSOOIDCClient","CreateTokenCommand").sc(gt).build(){};var Dr={CreateTokenCommand:w},F=class extends k{};z(Dr,F);var Xo={KMS_ACCESS_DENIED:"KMS_AccessDeniedException"},Qo={KMS_DISABLED_KEY:"KMS_DisabledException",KMS_INVALID_KEY_USAGE:"KMS_InvalidKeyUsageException",KMS_INVALID_STATE:"KMS_InvalidStateException",KMS_KEY_NOT_FOUND:"KMS_NotFoundException"};export{q as $Command,_ as AccessDeniedException,ur as AccessDeniedException$,Xo as AccessDeniedExceptionReason,v as AuthorizationPendingException,lr as AuthorizationPendingException$,gt as CreateToken$,w as CreateTokenCommand,yr as CreateTokenRequest$,Ar as CreateTokenResponse$,I as ExpiredTokenException,mr as ExpiredTokenException$,P as InternalServerException,hr as InternalServerException$,C as InvalidClientException,fr as InvalidClientException$,O as InvalidGrantException,gr as InvalidGrantException$,y as InvalidRequestException,Er as InvalidRequestException$,Qo as InvalidRequestExceptionReason,A as InvalidScopeException,xr as InvalidScopeException$,F as SSOOIDC,k as SSOOIDCClient,i as SSOOIDCServiceException,dr as SSOOIDCServiceException$,D as SlowDownException,Sr as SlowDownException$,T as UnauthorizedClientException,_r as UnauthorizedClientException$,R as UnsupportedGrantTypeException,vr as UnsupportedGrantTypeException$,K as __Client,ht as errorTypeRegistries};