gemi 0.160.2 → 0.161.0

package/dist/{chunk-v8fx4vgq.js → chunk-89168m0z.js}

@@ -1,4 +1,4 @@
 // @bun
-import{h as ps}from"./chunk-6ytezxzj.js";import{A as ys,B as Zr,C as ro,i as Se,k as X,l as qs,m as Fs,n as Ws,p as Oo,q as Ko,r as as,s as ws,t as gt,u as Us,v as lo,w as Qt,x as ls,y as Es,z as Ps}from"./chunk-bfj2jafb.js";import{D as us}from"./chunk-6d6p0q3p.js";import{E as $o,F as Jr,H as cs,L as dt,P as k}from"./chunk-664ewdjv.js";import{Q as hs}from"./chunk-5pc21syf.js";import{R as Xr}from"./chunk-qz9n2e59.js";import"./chunk-vb73ddwz.js";import"./chunk-8z29qvvm.js";import{U as Bs}from"./chunk-7rfw4h2x.js";import"./chunk-gmeeyg19.js";import{aa as Hr}from"./chunk-jarsydtr.js";import{la as ds}from"./chunk-s0xwqcrf.js";import{zl as y}from"./chunk-egwz89ze.js";var Z=y(($e)=>{Object.defineProperty($e,"__esModule",{value:!0});$e.resolveHttpAuthSchemeConfig=$e.resolveStsAuthConfig=$e.defaultSTSHttpAuthSchemeProvider=$e.defaultSTSHttpAuthSchemeParametersProvider=void 0;var bo=X(),J=$o(),ho=C(),No=async(e,t,r)=>{return{operation:(0,J.getSmithyContext)(t).operation,region:await(0,J.normalizeProvider)(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}};$e.defaultSTSHttpAuthSchemeParametersProvider=No;function qo(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,r)=>({signingProperties:{config:t,context:r}})}}function Fo(e){return{schemeId:"smithy.api#noAuth"}}var Wo=(e)=>{let t=[];switch(e.operation){case"AssumeRoleWithWebIdentity":{t.push(Fo(e));break}default:t.push(qo(e))}return t};$e.defaultSTSHttpAuthSchemeProvider=Wo;var wo=(e)=>Object.assign(e,{stsClientCtor:ho.STSClient});$e.resolveStsAuthConfig=wo;var Uo=(e)=>{let t=$e.resolveStsAuthConfig(e),r=(0,bo.resolveAwsSdkSigV4Config)(t);return Object.assign(r,{authSchemePreference:(0,J.normalizeProvider)(e.authSchemePreference??[])})};$e.resolveHttpAuthSchemeConfig=Uo});var f=y((Ne)=>{Object.defineProperty(Ne,"__esModule",{value:!0});Ne.commonParams=Ne.resolveClientEndpointParameters=void 0;var Lo=(e)=>{return Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,useGlobalEndpoint:e.useGlobalEndpoint??!1,defaultSigningName:"sts"})};Ne.resolveClientEndpointParameters=Lo;Ne.commonParams={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}}});var et=y((Ce)=>{Object.defineProperty(Ce,"__esModule",{value:!0});Ce.ruleSet=void 0;var Ve="required",o="type",n="fn",i="argv",v="ref",Fe=!1,ee=!0,S="booleanEquals",p="stringEquals",ze="sigv4",Be="sts",ge="us-east-1",c="endpoint",We="https://sts.{Region}.{PartitionResult#dnsSuffix}",R="tree",M="error",oe="getAttr",we={[Ve]:!1,[o]:"string"},te={[Ve]:!0,default:!1,[o]:"boolean"},Qe={[v]:"Endpoint"},Ue={[n]:"isSet",[i]:[{[v]:"Region"}]},l={[v]:"Region"},Me={[n]:"aws.partition",[i]:[l],assign:"PartitionResult"},Ye={[v]:"UseFIPS"},He={[v]:"UseDualStack"},P={url:"https://sts.amazonaws.com",properties:{authSchemes:[{name:ze,signingName:Be,signingRegion:ge}]},headers:{}},_={},ke={conditions:[{[n]:p,[i]:[l,"aws-global"]}],[c]:P,[o]:c},Je={[n]:S,[i]:[Ye,!0]},Xe={[n]:S,[i]:[He,!0]},Le={[n]:oe,[i]:[{[v]:"PartitionResult"},"supportsFIPS"]},Ze={[v]:"PartitionResult"},je={[n]:S,[i]:[!0,{[n]:oe,[i]:[Ze,"supportsDualStack"]}]},Ge=[{[n]:"isSet",[i]:[Qe]}],Oe=[Je],Ke=[Xe],Go={version:"1.0",parameters:{Region:we,UseDualStack:te,UseFIPS:te,Endpoint:we,UseGlobalEndpoint:te},rules:[{conditions:[{[n]:S,[i]:[{[v]:"UseGlobalEndpoint"},ee]},{[n]:"not",[i]:Ge},Ue,Me,{[n]:S,[i]:[Ye,Fe]},{[n]:S,[i]:[He,Fe]}],rules:[{conditions:[{[n]:p,[i]:[l,"ap-northeast-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"ap-south-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"ap-southeast-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"ap-southeast-2"]}],endpoint:P,[o]:c},ke,{conditions:[{[n]:p,[i]:[l,"ca-central-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"eu-central-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"eu-north-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"eu-west-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"eu-west-2"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"eu-west-3"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"sa-east-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,ge]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"us-east-2"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"us-west-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"us-west-2"]}],endpoint:P,[o]:c},{endpoint:{url:We,properties:{authSchemes:[{name:ze,signingName:Be,signingRegion:"{Region}"}]},headers:_},[o]:c}],[o]:R},{conditions:Ge,rules:[{conditions:Oe,error:"Invalid Configuration: FIPS and custom endpoint are not supported",[o]:M},{conditions:Ke,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",[o]:M},{endpoint:{url:Qe,properties:_,headers:_},[o]:c}],[o]:R},{conditions:[Ue],rules:[{conditions:[Me],rules:[{conditions:[Je,Xe],rules:[{conditions:[{[n]:S,[i]:[ee,Le]},je],rules:[{endpoint:{url:"https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:_,headers:_},[o]:c}],[o]:R},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",[o]:M}],[o]:R},{conditions:Oe,rules:[{conditions:[{[n]:S,[i]:[Le,ee]}],rules:[{conditions:[{[n]:p,[i]:[{[n]:oe,[i]:[Ze,"name"]},"aws-us-gov"]}],endpoint:{url:"https://sts.{Region}.amazonaws.com",properties:_,headers:_},[o]:c},{endpoint:{url:"https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",properties:_,headers:_},[o]:c}],[o]:R},{error:"FIPS is enabled but this partition does not support FIPS",[o]:M}],[o]:R},{conditions:Ke,rules:[{conditions:[je],rules:[{endpoint:{url:"https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:_,headers:_},[o]:c}],[o]:R},{error:"DualStack is enabled but this partition does not support DualStack",[o]:M}],[o]:R},ke,{endpoint:{url:We,properties:_,headers:_},[o]:c}],[o]:R}],[o]:R},{error:"Invalid Configuration: Missing Region",[o]:M}]};Ce.ruleSet=Go});var rt=y((tt)=>{Object.defineProperty(tt,"__esModule",{value:!0});tt.defaultEndpointResolver=void 0;var Vo=Ko(),re=Oo(),zo=et(),Bo=new re.EndpointCache({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),go=(e,t={})=>{return Bo.get(e,()=>(0,re.resolveEndpoint)(zo.ruleSet,{endpointParams:e,logger:t.logger}))};tt.defaultEndpointResolver=go;re.customEndpointFunctions.aws=Vo.awsEndpointFunctions});var O=y((ne)=>{Object.defineProperty(ne,"__esModule",{value:!0});ne.STSServiceException=ne.__ServiceException=void 0;var st=k();Object.defineProperty(ne,"__ServiceException",{enumerable:!0,get:function(){return st.ServiceException}});class se extends st.ServiceException{constructor(e){super(e);Object.setPrototypeOf(this,se.prototype)}}ne.STSServiceException=se});var Ee=y((it)=>{Object.defineProperty(it,"__esModule",{value:!0});it.IDPCommunicationErrorException=it.InvalidIdentityTokenException=it.IDPRejectedClaimException=it.RegionDisabledException=it.PackedPolicyTooLargeException=it.MalformedPolicyDocumentException=it.ExpiredTokenException=void 0;var A=O();class ie extends A.STSServiceException{name="ExpiredTokenException";$fault="client";constructor(e){super({name:"ExpiredTokenException",$fault:"client",...e});Object.setPrototypeOf(this,ie.prototype)}}it.ExpiredTokenException=ie;class ce extends A.STSServiceException{name="MalformedPolicyDocumentException";$fault="client";constructor(e){super({name:"MalformedPolicyDocumentException",$fault:"client",...e});Object.setPrototypeOf(this,ce.prototype)}}it.MalformedPolicyDocumentException=ce;class de extends A.STSServiceException{name="PackedPolicyTooLargeException";$fault="client";constructor(e){super({name:"PackedPolicyTooLargeException",$fault:"client",...e});Object.setPrototypeOf(this,de.prototype)}}it.PackedPolicyTooLargeException=de;class ae extends A.STSServiceException{name="RegionDisabledException";$fault="client";constructor(e){super({name:"RegionDisabledException",$fault:"client",...e});Object.setPrototypeOf(this,ae.prototype)}}it.RegionDisabledException=ae;class ue extends A.STSServiceException{name="IDPRejectedClaimException";$fault="client";constructor(e){super({name:"IDPRejectedClaimException",$fault:"client",...e});Object.setPrototypeOf(this,ue.prototype)}}it.IDPRejectedClaimException=ue;class pe extends A.STSServiceException{name="InvalidIdentityTokenException";$fault="client";constructor(e){super({name:"InvalidIdentityTokenException",$fault:"client",...e});Object.setPrototypeOf(this,pe.prototype)}}it.InvalidIdentityTokenException=pe;class le extends A.STSServiceException{name="IDPCommunicationErrorException";$fault="client";constructor(e){super({name:"IDPCommunicationErrorException",$fault:"client",...e});Object.setPrototypeOf(this,le.prototype)}}it.IDPCommunicationErrorException=le});var Te=y((Tt)=>{Object.defineProperty(Tt,"__esModule",{value:!0});Tt.AssumeRoleWithWebIdentity$=Tt.AssumeRole$=Tt.Tag$=Tt.ProvidedContext$=Tt.PolicyDescriptorType$=Tt.Credentials$=Tt.AssumeRoleWithWebIdentityResponse$=Tt.AssumeRoleWithWebIdentityRequest$=Tt.AssumeRoleResponse$=Tt.AssumeRoleRequest$=Tt.AssumedRoleUser$=Tt.errorTypeRegistries=Tt.RegionDisabledException$=Tt.PackedPolicyTooLargeException$=Tt.MalformedPolicyDocumentException$=Tt.InvalidIdentityTokenException$=Tt.IDPRejectedClaimException$=Tt.IDPCommunicationErrorException$=Tt.ExpiredTokenException$=Tt.STSServiceException$=void 0;var Co="Arn",fo="AccessKeyId",er="AssumeRole",tr="AssumedRoleId",or="AssumeRoleRequest",rr="AssumeRoleResponse",Pe="AssumedRoleUser",sr="AssumeRoleWithWebIdentity",nr="AssumeRoleWithWebIdentityRequest",ir="AssumeRoleWithWebIdentityResponse",cr="Audience",ye="Credentials",dr="ContextAssertion",at="DurationSeconds",ar="Expiration",ur="ExternalId",pr="ExpiredTokenException",lr="IDPCommunicationErrorException",Er="IDPRejectedClaimException",Pr="InvalidIdentityTokenException",yr="Key",_r="MalformedPolicyDocumentException",ut="Policy",pt="PolicyArns",Ir="ProviderArn",Rr="ProvidedContexts",Tr="ProvidedContextsListType",Sr="ProvidedContext",vr="PolicyDescriptorType",xr="ProviderId",lt="PackedPolicySize",Dr="PackedPolicyTooLargeException",mr="Provider",Et="RoleArn",Ar="RegionDisabledException",Pt="RoleSessionName",$r="SecretAccessKey",br="SubjectFromWebIdentityToken",_e="SourceIdentity",hr="SerialNumber",Nr="SessionToken",qr="Tags",Fr="TokenCode",Wr="TransitiveTagKeys",wr="Tag",Ur="Value",Mr="WebIdentityToken",kr="arn",Lr="accessKeySecretType",$="awsQueryError",b="client",jr="clientTokenType",h="error",N="httpError",q="message",Gr="policyDescriptorListType",yt="smithy.ts.sdk.synthetic.com.amazonaws.sts",Or="tagListType",d="com.amazonaws.sts",_t=dt(),F=Ee(),Kr=O(),It=_t.TypeRegistry.for(yt);Tt.STSServiceException$=[-3,yt,"STSServiceException",0,[],[]];It.registerError(Tt.STSServiceException$,Kr.STSServiceException);var x=_t.TypeRegistry.for(d);Tt.ExpiredTokenException$=[-3,d,pr,{[$]:["ExpiredTokenException",400],[h]:b,[N]:400},[q],[0]];x.registerError(Tt.ExpiredTokenException$,F.ExpiredTokenException);Tt.IDPCommunicationErrorException$=[-3,d,lr,{[$]:["IDPCommunicationError",400],[h]:b,[N]:400},[q],[0]];x.registerError(Tt.IDPCommunicationErrorException$,F.IDPCommunicationErrorException);Tt.IDPRejectedClaimException$=[-3,d,Er,{[$]:["IDPRejectedClaim",403],[h]:b,[N]:403},[q],[0]];x.registerError(Tt.IDPRejectedClaimException$,F.IDPRejectedClaimException);Tt.InvalidIdentityTokenException$=[-3,d,Pr,{[$]:["InvalidIdentityToken",400],[h]:b,[N]:400},[q],[0]];x.registerError(Tt.InvalidIdentityTokenException$,F.InvalidIdentityTokenException);Tt.MalformedPolicyDocumentException$=[-3,d,_r,{[$]:["MalformedPolicyDocument",400],[h]:b,[N]:400},[q],[0]];x.registerError(Tt.MalformedPolicyDocumentException$,F.MalformedPolicyDocumentException);Tt.PackedPolicyTooLargeException$=[-3,d,Dr,{[$]:["PackedPolicyTooLarge",400],[h]:b,[N]:400},[q],[0]];x.registerError(Tt.PackedPolicyTooLargeException$,F.PackedPolicyTooLargeException);Tt.RegionDisabledException$=[-3,d,Ar,{[$]:["RegionDisabledException",403],[h]:b,[N]:403},[q],[0]];x.registerError(Tt.RegionDisabledException$,F.RegionDisabledException);Tt.errorTypeRegistries=[It,x];var Vr=[0,d,Lr,8,0],zr=[0,d,jr,8,0];Tt.AssumedRoleUser$=[3,d,Pe,0,[tr,Co],[0,0],2];Tt.AssumeRoleRequest$=[3,d,or,0,[Et,Pt,pt,ut,at,qr,Wr,ur,hr,Fr,_e,Rr],[0,0,()=>Rt,0,1,()=>gr,64,0,0,0,0,()=>Br],2];Tt.AssumeRoleResponse$=[3,d,rr,0,[ye,Pe,lt,_e],[[()=>Tt.Credentials$,0],()=>Tt.AssumedRoleUser$,1,0]];Tt.AssumeRoleWithWebIdentityRequest$=[3,d,nr,0,[Et,Pt,Mr,xr,pt,ut,at],[0,0,[()=>zr,0],0,()=>Rt,0,1],3];Tt.AssumeRoleWithWebIdentityResponse$=[3,d,ir,0,[ye,br,Pe,lt,mr,cr,_e],[[()=>Tt.Credentials$,0],0,()=>Tt.AssumedRoleUser$,1,0,0,0]];Tt.Credentials$=[3,d,ye,0,[fo,$r,Nr,ar],[0,[()=>Vr,0],0,4],4];Tt.PolicyDescriptorType$=[3,d,vr,0,[kr],[0]];Tt.ProvidedContext$=[3,d,Sr,0,[Ir,dr],[0,0]];Tt.Tag$=[3,d,wr,0,[yr,Ur],[0,0],2];var Rt=[1,d,Gr,0,()=>Tt.PolicyDescriptorType$],Br=[1,d,Tr,0,()=>Tt.ProvidedContext$],gr=[1,d,Or,0,()=>Tt.Tag$];Tt.AssumeRole$=[9,d,er,0,()=>Tt.AssumeRoleRequest$,()=>Tt.AssumeRoleResponse$];Tt.AssumeRoleWithWebIdentity$=[9,d,sr,0,()=>Tt.AssumeRoleWithWebIdentityRequest$,()=>Tt.AssumeRoleWithWebIdentityResponse$]});var Ot=y((jt)=>{Object.defineProperty(jt,"__esModule",{value:!0});jt.getRuntimeConfig=void 0;var Cr=X(),fr=Zr(),es=Se(),ts=k(),os=Xr(),kt=Jr(),Lt=Hr(),rs=Z(),ss=rt(),ns=Te(),is=(e)=>{return{apiVersion:"2011-06-15",base64Decoder:e?.base64Decoder??kt.fromBase64,base64Encoder:e?.base64Encoder??kt.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??ss.defaultEndpointResolver,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??rs.defaultSTSHttpAuthSchemeProvider,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4"),signer:new Cr.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(t)=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new es.NoAuthSigner}],logger:e?.logger??new ts.NoOpLogger,protocol:e?.protocol??fr.AwsQueryProtocol,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:ns.errorTypeRegistries,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:e?.serviceId??"STS",urlParser:e?.urlParser??os.parseUrl,utf8Decoder:e?.utf8Decoder??Lt.fromUtf8,utf8Encoder:e?.utf8Encoder??Lt.toUtf8}};jt.getRuntimeConfig=is});var Jt=y((Yt)=>{Object.defineProperty(Yt,"__esModule",{value:!0});Yt.getRuntimeConfig=void 0;var _s=ds(),Is=_s.__importDefault(ps()),ve=X(),Kt=ls(),K=gt(),Rs=Se(),Ts=Es(),Vt=Qt(),W=us(),zt=cs(),Bt=k(),Ss=Ps(),vs=ys(),xs=as(),Ds=Ot(),ms=(e)=>{(0,Bt.emitWarningIfUnsupportedVersion)(process.version);let t=(0,vs.resolveDefaultsModeConfig)(e),r=()=>t().then(Bt.loadConfigsForDefaultMode),a=(0,Ds.getRuntimeConfig)(e);(0,ve.emitWarningIfUnsupportedVersion)(process.version);let s={profile:e?.profile,logger:a.logger};return{...a,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??(0,W.loadConfig)(ve.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS,s),bodyLengthChecker:e?.bodyLengthChecker??Ss.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,Kt.createDefaultUserAgentProvider)({serviceId:a.serviceId,clientVersion:Is.default.version}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(E)=>E.getIdentityProvider("aws.auth#sigv4")||(async(u)=>await e.credentialDefaultProvider(u?.__config||{})()),signer:new ve.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(E)=>E.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new Rs.NoAuthSigner}],maxAttempts:e?.maxAttempts??(0,W.loadConfig)(Vt.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??(0,W.loadConfig)(K.NODE_REGION_CONFIG_OPTIONS,{...K.NODE_REGION_CONFIG_FILE_OPTIONS,...s}),requestHandler:zt.NodeHttpHandler.create(e?.requestHandler??r),retryMode:e?.retryMode??(0,W.loadConfig)({...Vt.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await r()).retryMode||xs.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??Ts.Hash.bind(null,"sha256"),streamCollector:e?.streamCollector??zt.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??(0,W.loadConfig)(K.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,s),useFipsEndpoint:e?.useFipsEndpoint??(0,W.loadConfig)(K.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,s),userAgentAppId:e?.userAgentAppId??(0,W.loadConfig)(Kt.NODE_APP_ID_CONFIG_OPTIONS,s)}};Yt.getRuntimeConfig=ms});var Ct=y((Xt)=>{Object.defineProperty(Xt,"__esModule",{value:!0});Xt.resolveHttpAuthRuntimeConfig=Xt.getHttpAuthExtensionConfiguration=void 0;var As=(e)=>{let{httpAuthSchemes:t,httpAuthSchemeProvider:r,credentials:a}=e;return{setHttpAuthScheme(s){let E=t.findIndex((u)=>u.schemeId===s.schemeId);if(E===-1)t.push(s);else t.splice(E,1,s)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(s){r=s},httpAuthSchemeProvider(){return r},setCredentials(s){a=s},credentials(){return a}}};Xt.getHttpAuthExtensionConfiguration=As;var $s=(e)=>{return{httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}};Xt.resolveHttpAuthRuntimeConfig=$s});var io=y((so)=>{Object.defineProperty(so,"__esModule",{value:!0});so.resolveRuntimeExtensions=void 0;var ft=ro(),eo=hs(),to=k(),oo=Ct(),Ns=(e,t)=>{let r=Object.assign((0,ft.getAwsRegionExtensionConfiguration)(e),(0,to.getDefaultExtensionConfiguration)(e),(0,eo.getHttpHandlerExtensionConfiguration)(e),(0,oo.getHttpAuthExtensionConfiguration)(e));return t.forEach((a)=>a.configure(r)),Object.assign(e,(0,ft.resolveAwsRegionExtensionConfiguration)(r),(0,to.resolveDefaultRuntimeConfig)(r),(0,eo.resolveHttpHandlerRuntimeConfig)(r),(0,oo.resolveHttpAuthRuntimeConfig)(r))};so.resolveRuntimeExtensions=Ns});var C=y((De)=>{Object.defineProperty(De,"__esModule",{value:!0});De.STSClient=De.__Client=void 0;var co=qs(),Ms=Fs(),ks=Ws(),ao=ws(),Ls=gt(),xe=Se(),js=dt(),Gs=Us(),Os=lo(),uo=Qt(),Eo=k();Object.defineProperty(De,"__Client",{enumerable:!0,get:function(){return Eo.Client}});var po=Z(),Ks=f(),Vs=Jt(),zs=io();class Po extends Eo.Client{config;constructor(...[e]){let t=(0,Vs.getRuntimeConfig)(e||{});super(t);this.initConfig=t;let r=(0,Ks.resolveClientEndpointParameters)(t),a=(0,ao.resolveUserAgentConfig)(r),s=(0,uo.resolveRetryConfig)(a),E=(0,Ls.resolveRegionConfig)(s),u=(0,co.resolveHostHeaderConfig)(E),T=(0,Os.resolveEndpointConfig)(u),D=(0,po.resolveHttpAuthSchemeConfig)(T),m=(0,zs.resolveRuntimeExtensions)(D,e?.extensions||[]);this.config=m,this.middlewareStack.use((0,js.getSchemaSerdePlugin)(this.config)),this.middlewareStack.use((0,ao.getUserAgentPlugin)(this.config)),this.middlewareStack.use((0,uo.getRetryPlugin)(this.config)),this.middlewareStack.use((0,Gs.getContentLengthPlugin)(this.config)),this.middlewareStack.use((0,co.getHostHeaderPlugin)(this.config)),this.middlewareStack.use((0,Ms.getLoggerPlugin)(this.config)),this.middlewareStack.use((0,ks.getRecursionDetectionPlugin)(this.config)),this.middlewareStack.use((0,xe.getHttpAuthSchemeEndpointRuleSetPlugin)(this.config,{httpAuthSchemeParametersProvider:po.defaultSTSHttpAuthSchemeParametersProvider,identityProviderConfigProvider:async(U)=>new xe.DefaultIdentityProviderConfig({"aws.auth#sigv4":U.credentials})})),this.middlewareStack.use((0,xe.getHttpSigningPlugin)(this.config))}destroy(){super.destroy()}}De.STSClient=Po});var nn=y((I)=>{var w=C(),z=k(),_o=lo(),Io=f(),L=Te(),V=Ee(),me=Bs(),gs=ro(),Qs=O();class B extends z.Command.classBuilder().ep(Io.commonParams).m(function(e,t,r,a){return[_o.getEndpointPlugin(r,e.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRole",{}).n("STSClient","AssumeRoleCommand").sc(L.AssumeRole$).build(){}class g extends z.Command.classBuilder().ep(Io.commonParams).m(function(e,t,r,a){return[_o.getEndpointPlugin(r,e.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoleWithWebIdentity",{}).n("STSClient","AssumeRoleWithWebIdentityCommand").sc(L.AssumeRoleWithWebIdentity$).build(){}var Ys={AssumeRoleCommand:B,AssumeRoleWithWebIdentityCommand:g};class Ae extends w.STSClient{}z.createAggregatedClient(Ys,Ae);var Ro=(e)=>{if(typeof e?.Arn==="string"){let t=e.Arn.split(":");if(t.length>4&&t[4]!=="")return t[4]}return},To=async(e,t,r,a={})=>{let s=typeof e==="function"?await e():e,E=typeof t==="function"?await t():t,u="",T=s??E??(u=await gs.stsRegionDefaultResolver(a)());return r?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${s} (credential provider clientConfig)`,`${E} (contextual client)`,`${u} (STS default: AWS_REGION, profile region, or us-east-1)`),T},Hs=(e,t)=>{let r,a;return async(s,E)=>{if(a=s,!r){let{logger:U=e?.parentClientConfig?.logger,profile:j=e?.parentClientConfig?.profile,region:Q,requestHandler:G=e?.parentClientConfig?.requestHandler,credentialProviderLogger:Y,userAgentAppId:H=e?.parentClientConfig?.userAgentAppId}=e,mo=await To(Q,e?.parentClientConfig?.region,Y,{logger:U,profile:j}),Ao=!So(G);r=new t({...e,userAgentAppId:H,profile:j,credentialDefaultProvider:()=>async()=>a,region:mo,requestHandler:Ao?G:void 0,logger:U})}let{Credentials:u,AssumedRoleUser:T}=await r.send(new B(E));if(!u||!u.AccessKeyId||!u.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${E.RoleArn}`);let D=Ro(T),m={accessKeyId:u.AccessKeyId,secretAccessKey:u.SecretAccessKey,sessionToken:u.SessionToken,expiration:u.Expiration,...u.CredentialScope&&{credentialScope:u.CredentialScope},...D&&{accountId:D}};return me.setCredentialFeature(m,"CREDENTIALS_STS_ASSUME_ROLE","i"),m}},Js=(e,t)=>{let r;return async(a)=>{if(!r){let{logger:D=e?.parentClientConfig?.logger,profile:m=e?.parentClientConfig?.profile,region:U,requestHandler:j=e?.parentClientConfig?.requestHandler,credentialProviderLogger:Q,userAgentAppId:G=e?.parentClientConfig?.userAgentAppId}=e,Y=await To(U,e?.parentClientConfig?.region,Q,{logger:D,profile:m}),H=!So(j);r=new t({...e,userAgentAppId:G,profile:m,region:Y,requestHandler:H?j:void 0,logger:D})}let{Credentials:s,AssumedRoleUser:E}=await r.send(new g(a));if(!s||!s.AccessKeyId||!s.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${a.RoleArn}`);let u=Ro(E),T={accessKeyId:s.AccessKeyId,secretAccessKey:s.SecretAccessKey,sessionToken:s.SessionToken,expiration:s.Expiration,...s.CredentialScope&&{credentialScope:s.CredentialScope},...u&&{accountId:u}};if(u)me.setCredentialFeature(T,"RESOLVED_ACCOUNT_ID","T");return me.setCredentialFeature(T,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),T}},So=(e)=>{return e?.metadata?.handlerProtocol==="h2"},vo=(e,t)=>{if(!t)return e;else return class extends e{constructor(a){super(a);for(let s of t)this.middlewareStack.use(s)}}},xo=(e={},t)=>Hs(e,vo(w.STSClient,t)),Do=(e={},t)=>Js(e,vo(w.STSClient,t)),Xs=(e)=>(t)=>e({roleAssumer:xo(t),roleAssumerWithWebIdentity:Do(t),...t});I.$Command=z.Command;I.STSServiceException=Qs.STSServiceException;I.AssumeRoleCommand=B;I.AssumeRoleWithWebIdentityCommand=g;I.STS=Ae;I.decorateDefaultCredentialProvider=Xs;I.getDefaultRoleAssumer=xo;I.getDefaultRoleAssumerWithWebIdentity=Do;Object.prototype.hasOwnProperty.call(w,"__proto__")&&!Object.prototype.hasOwnProperty.call(I,"__proto__")&&Object.defineProperty(I,"__proto__",{enumerable:!0,value:w.__proto__});Object.keys(w).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(I,e))I[e]=w[e]});Object.prototype.hasOwnProperty.call(L,"__proto__")&&!Object.prototype.hasOwnProperty.call(I,"__proto__")&&Object.defineProperty(I,"__proto__",{enumerable:!0,value:L.__proto__});Object.keys(L).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(I,e))I[e]=L[e]});Object.prototype.hasOwnProperty.call(V,"__proto__")&&!Object.prototype.hasOwnProperty.call(I,"__proto__")&&Object.defineProperty(I,"__proto__",{enumerable:!0,value:V.__proto__});Object.keys(V).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(I,e))I[e]=V[e]})});export default nn();
+import{h as ps}from"./chunk-s7w7pn80.js";import{A as ys,B as Zr,C as ro,i as Se,k as X,l as qs,m as Fs,n as Ws,p as Oo,q as Ko,r as as,s as ws,t as gt,u as Us,v as lo,w as Qt,x as ls,y as Es,z as Ps}from"./chunk-1cjr8hvc.js";import{D as us}from"./chunk-s4nqy979.js";import{E as $o,F as Jr,H as cs,L as dt,P as k}from"./chunk-dj6bw2jm.js";import{Q as hs}from"./chunk-hx8vkwsb.js";import{R as Xr}from"./chunk-k5xxwr5h.js";import"./chunk-asnk2jqn.js";import"./chunk-n6ywagxv.js";import{U as Bs}from"./chunk-95gag2pg.js";import"./chunk-g3sryyn4.js";import{ba as Hr}from"./chunk-xzkr8yck.js";import{ma as ds}from"./chunk-dkmf4eg1.js";import{Al as y}from"./chunk-wgre66wq.js";var Z=y(($e)=>{Object.defineProperty($e,"__esModule",{value:!0});$e.resolveHttpAuthSchemeConfig=$e.resolveStsAuthConfig=$e.defaultSTSHttpAuthSchemeProvider=$e.defaultSTSHttpAuthSchemeParametersProvider=void 0;var bo=X(),J=$o(),ho=C(),No=async(e,t,r)=>{return{operation:(0,J.getSmithyContext)(t).operation,region:await(0,J.normalizeProvider)(e.region)()||(()=>{throw Error("expected `region` to be configured for `aws.auth#sigv4`")})()}};$e.defaultSTSHttpAuthSchemeParametersProvider=No;function qo(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,r)=>({signingProperties:{config:t,context:r}})}}function Fo(e){return{schemeId:"smithy.api#noAuth"}}var Wo=(e)=>{let t=[];switch(e.operation){case"AssumeRoleWithWebIdentity":{t.push(Fo(e));break}default:t.push(qo(e))}return t};$e.defaultSTSHttpAuthSchemeProvider=Wo;var wo=(e)=>Object.assign(e,{stsClientCtor:ho.STSClient});$e.resolveStsAuthConfig=wo;var Uo=(e)=>{let t=$e.resolveStsAuthConfig(e),r=(0,bo.resolveAwsSdkSigV4Config)(t);return Object.assign(r,{authSchemePreference:(0,J.normalizeProvider)(e.authSchemePreference??[])})};$e.resolveHttpAuthSchemeConfig=Uo});var f=y((Ne)=>{Object.defineProperty(Ne,"__esModule",{value:!0});Ne.commonParams=Ne.resolveClientEndpointParameters=void 0;var Lo=(e)=>{return Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,useGlobalEndpoint:e.useGlobalEndpoint??!1,defaultSigningName:"sts"})};Ne.resolveClientEndpointParameters=Lo;Ne.commonParams={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}}});var et=y((Ce)=>{Object.defineProperty(Ce,"__esModule",{value:!0});Ce.ruleSet=void 0;var Ve="required",o="type",n="fn",i="argv",v="ref",Fe=!1,ee=!0,S="booleanEquals",p="stringEquals",ze="sigv4",Be="sts",ge="us-east-1",c="endpoint",We="https://sts.{Region}.{PartitionResult#dnsSuffix}",R="tree",M="error",oe="getAttr",we={[Ve]:!1,[o]:"string"},te={[Ve]:!0,default:!1,[o]:"boolean"},Qe={[v]:"Endpoint"},Ue={[n]:"isSet",[i]:[{[v]:"Region"}]},l={[v]:"Region"},Me={[n]:"aws.partition",[i]:[l],assign:"PartitionResult"},Ye={[v]:"UseFIPS"},He={[v]:"UseDualStack"},P={url:"https://sts.amazonaws.com",properties:{authSchemes:[{name:ze,signingName:Be,signingRegion:ge}]},headers:{}},_={},ke={conditions:[{[n]:p,[i]:[l,"aws-global"]}],[c]:P,[o]:c},Je={[n]:S,[i]:[Ye,!0]},Xe={[n]:S,[i]:[He,!0]},Le={[n]:oe,[i]:[{[v]:"PartitionResult"},"supportsFIPS"]},Ze={[v]:"PartitionResult"},je={[n]:S,[i]:[!0,{[n]:oe,[i]:[Ze,"supportsDualStack"]}]},Ge=[{[n]:"isSet",[i]:[Qe]}],Oe=[Je],Ke=[Xe],Go={version:"1.0",parameters:{Region:we,UseDualStack:te,UseFIPS:te,Endpoint:we,UseGlobalEndpoint:te},rules:[{conditions:[{[n]:S,[i]:[{[v]:"UseGlobalEndpoint"},ee]},{[n]:"not",[i]:Ge},Ue,Me,{[n]:S,[i]:[Ye,Fe]},{[n]:S,[i]:[He,Fe]}],rules:[{conditions:[{[n]:p,[i]:[l,"ap-northeast-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"ap-south-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"ap-southeast-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"ap-southeast-2"]}],endpoint:P,[o]:c},ke,{conditions:[{[n]:p,[i]:[l,"ca-central-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"eu-central-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"eu-north-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"eu-west-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"eu-west-2"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"eu-west-3"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"sa-east-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,ge]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"us-east-2"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"us-west-1"]}],endpoint:P,[o]:c},{conditions:[{[n]:p,[i]:[l,"us-west-2"]}],endpoint:P,[o]:c},{endpoint:{url:We,properties:{authSchemes:[{name:ze,signingName:Be,signingRegion:"{Region}"}]},headers:_},[o]:c}],[o]:R},{conditions:Ge,rules:[{conditions:Oe,error:"Invalid Configuration: FIPS and custom endpoint are not supported",[o]:M},{conditions:Ke,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",[o]:M},{endpoint:{url:Qe,properties:_,headers:_},[o]:c}],[o]:R},{conditions:[Ue],rules:[{conditions:[Me],rules:[{conditions:[Je,Xe],rules:[{conditions:[{[n]:S,[i]:[ee,Le]},je],rules:[{endpoint:{url:"https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:_,headers:_},[o]:c}],[o]:R},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",[o]:M}],[o]:R},{conditions:Oe,rules:[{conditions:[{[n]:S,[i]:[Le,ee]}],rules:[{conditions:[{[n]:p,[i]:[{[n]:oe,[i]:[Ze,"name"]},"aws-us-gov"]}],endpoint:{url:"https://sts.{Region}.amazonaws.com",properties:_,headers:_},[o]:c},{endpoint:{url:"https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",properties:_,headers:_},[o]:c}],[o]:R},{error:"FIPS is enabled but this partition does not support FIPS",[o]:M}],[o]:R},{conditions:Ke,rules:[{conditions:[je],rules:[{endpoint:{url:"https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:_,headers:_},[o]:c}],[o]:R},{error:"DualStack is enabled but this partition does not support DualStack",[o]:M}],[o]:R},ke,{endpoint:{url:We,properties:_,headers:_},[o]:c}],[o]:R}],[o]:R},{error:"Invalid Configuration: Missing Region",[o]:M}]};Ce.ruleSet=Go});var rt=y((tt)=>{Object.defineProperty(tt,"__esModule",{value:!0});tt.defaultEndpointResolver=void 0;var Vo=Ko(),re=Oo(),zo=et(),Bo=new re.EndpointCache({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),go=(e,t={})=>{return Bo.get(e,()=>(0,re.resolveEndpoint)(zo.ruleSet,{endpointParams:e,logger:t.logger}))};tt.defaultEndpointResolver=go;re.customEndpointFunctions.aws=Vo.awsEndpointFunctions});var O=y((ne)=>{Object.defineProperty(ne,"__esModule",{value:!0});ne.STSServiceException=ne.__ServiceException=void 0;var st=k();Object.defineProperty(ne,"__ServiceException",{enumerable:!0,get:function(){return st.ServiceException}});class se extends st.ServiceException{constructor(e){super(e);Object.setPrototypeOf(this,se.prototype)}}ne.STSServiceException=se});var Ee=y((it)=>{Object.defineProperty(it,"__esModule",{value:!0});it.IDPCommunicationErrorException=it.InvalidIdentityTokenException=it.IDPRejectedClaimException=it.RegionDisabledException=it.PackedPolicyTooLargeException=it.MalformedPolicyDocumentException=it.ExpiredTokenException=void 0;var A=O();class ie extends A.STSServiceException{name="ExpiredTokenException";$fault="client";constructor(e){super({name:"ExpiredTokenException",$fault:"client",...e});Object.setPrototypeOf(this,ie.prototype)}}it.ExpiredTokenException=ie;class ce extends A.STSServiceException{name="MalformedPolicyDocumentException";$fault="client";constructor(e){super({name:"MalformedPolicyDocumentException",$fault:"client",...e});Object.setPrototypeOf(this,ce.prototype)}}it.MalformedPolicyDocumentException=ce;class de extends A.STSServiceException{name="PackedPolicyTooLargeException";$fault="client";constructor(e){super({name:"PackedPolicyTooLargeException",$fault:"client",...e});Object.setPrototypeOf(this,de.prototype)}}it.PackedPolicyTooLargeException=de;class ae extends A.STSServiceException{name="RegionDisabledException";$fault="client";constructor(e){super({name:"RegionDisabledException",$fault:"client",...e});Object.setPrototypeOf(this,ae.prototype)}}it.RegionDisabledException=ae;class ue extends A.STSServiceException{name="IDPRejectedClaimException";$fault="client";constructor(e){super({name:"IDPRejectedClaimException",$fault:"client",...e});Object.setPrototypeOf(this,ue.prototype)}}it.IDPRejectedClaimException=ue;class pe extends A.STSServiceException{name="InvalidIdentityTokenException";$fault="client";constructor(e){super({name:"InvalidIdentityTokenException",$fault:"client",...e});Object.setPrototypeOf(this,pe.prototype)}}it.InvalidIdentityTokenException=pe;class le extends A.STSServiceException{name="IDPCommunicationErrorException";$fault="client";constructor(e){super({name:"IDPCommunicationErrorException",$fault:"client",...e});Object.setPrototypeOf(this,le.prototype)}}it.IDPCommunicationErrorException=le});var Te=y((Tt)=>{Object.defineProperty(Tt,"__esModule",{value:!0});Tt.AssumeRoleWithWebIdentity$=Tt.AssumeRole$=Tt.Tag$=Tt.ProvidedContext$=Tt.PolicyDescriptorType$=Tt.Credentials$=Tt.AssumeRoleWithWebIdentityResponse$=Tt.AssumeRoleWithWebIdentityRequest$=Tt.AssumeRoleResponse$=Tt.AssumeRoleRequest$=Tt.AssumedRoleUser$=Tt.errorTypeRegistries=Tt.RegionDisabledException$=Tt.PackedPolicyTooLargeException$=Tt.MalformedPolicyDocumentException$=Tt.InvalidIdentityTokenException$=Tt.IDPRejectedClaimException$=Tt.IDPCommunicationErrorException$=Tt.ExpiredTokenException$=Tt.STSServiceException$=void 0;var Co="Arn",fo="AccessKeyId",er="AssumeRole",tr="AssumedRoleId",or="AssumeRoleRequest",rr="AssumeRoleResponse",Pe="AssumedRoleUser",sr="AssumeRoleWithWebIdentity",nr="AssumeRoleWithWebIdentityRequest",ir="AssumeRoleWithWebIdentityResponse",cr="Audience",ye="Credentials",dr="ContextAssertion",at="DurationSeconds",ar="Expiration",ur="ExternalId",pr="ExpiredTokenException",lr="IDPCommunicationErrorException",Er="IDPRejectedClaimException",Pr="InvalidIdentityTokenException",yr="Key",_r="MalformedPolicyDocumentException",ut="Policy",pt="PolicyArns",Ir="ProviderArn",Rr="ProvidedContexts",Tr="ProvidedContextsListType",Sr="ProvidedContext",vr="PolicyDescriptorType",xr="ProviderId",lt="PackedPolicySize",Dr="PackedPolicyTooLargeException",mr="Provider",Et="RoleArn",Ar="RegionDisabledException",Pt="RoleSessionName",$r="SecretAccessKey",br="SubjectFromWebIdentityToken",_e="SourceIdentity",hr="SerialNumber",Nr="SessionToken",qr="Tags",Fr="TokenCode",Wr="TransitiveTagKeys",wr="Tag",Ur="Value",Mr="WebIdentityToken",kr="arn",Lr="accessKeySecretType",$="awsQueryError",b="client",jr="clientTokenType",h="error",N="httpError",q="message",Gr="policyDescriptorListType",yt="smithy.ts.sdk.synthetic.com.amazonaws.sts",Or="tagListType",d="com.amazonaws.sts",_t=dt(),F=Ee(),Kr=O(),It=_t.TypeRegistry.for(yt);Tt.STSServiceException$=[-3,yt,"STSServiceException",0,[],[]];It.registerError(Tt.STSServiceException$,Kr.STSServiceException);var x=_t.TypeRegistry.for(d);Tt.ExpiredTokenException$=[-3,d,pr,{[$]:["ExpiredTokenException",400],[h]:b,[N]:400},[q],[0]];x.registerError(Tt.ExpiredTokenException$,F.ExpiredTokenException);Tt.IDPCommunicationErrorException$=[-3,d,lr,{[$]:["IDPCommunicationError",400],[h]:b,[N]:400},[q],[0]];x.registerError(Tt.IDPCommunicationErrorException$,F.IDPCommunicationErrorException);Tt.IDPRejectedClaimException$=[-3,d,Er,{[$]:["IDPRejectedClaim",403],[h]:b,[N]:403},[q],[0]];x.registerError(Tt.IDPRejectedClaimException$,F.IDPRejectedClaimException);Tt.InvalidIdentityTokenException$=[-3,d,Pr,{[$]:["InvalidIdentityToken",400],[h]:b,[N]:400},[q],[0]];x.registerError(Tt.InvalidIdentityTokenException$,F.InvalidIdentityTokenException);Tt.MalformedPolicyDocumentException$=[-3,d,_r,{[$]:["MalformedPolicyDocument",400],[h]:b,[N]:400},[q],[0]];x.registerError(Tt.MalformedPolicyDocumentException$,F.MalformedPolicyDocumentException);Tt.PackedPolicyTooLargeException$=[-3,d,Dr,{[$]:["PackedPolicyTooLarge",400],[h]:b,[N]:400},[q],[0]];x.registerError(Tt.PackedPolicyTooLargeException$,F.PackedPolicyTooLargeException);Tt.RegionDisabledException$=[-3,d,Ar,{[$]:["RegionDisabledException",403],[h]:b,[N]:403},[q],[0]];x.registerError(Tt.RegionDisabledException$,F.RegionDisabledException);Tt.errorTypeRegistries=[It,x];var Vr=[0,d,Lr,8,0],zr=[0,d,jr,8,0];Tt.AssumedRoleUser$=[3,d,Pe,0,[tr,Co],[0,0],2];Tt.AssumeRoleRequest$=[3,d,or,0,[Et,Pt,pt,ut,at,qr,Wr,ur,hr,Fr,_e,Rr],[0,0,()=>Rt,0,1,()=>gr,64,0,0,0,0,()=>Br],2];Tt.AssumeRoleResponse$=[3,d,rr,0,[ye,Pe,lt,_e],[[()=>Tt.Credentials$,0],()=>Tt.AssumedRoleUser$,1,0]];Tt.AssumeRoleWithWebIdentityRequest$=[3,d,nr,0,[Et,Pt,Mr,xr,pt,ut,at],[0,0,[()=>zr,0],0,()=>Rt,0,1],3];Tt.AssumeRoleWithWebIdentityResponse$=[3,d,ir,0,[ye,br,Pe,lt,mr,cr,_e],[[()=>Tt.Credentials$,0],0,()=>Tt.AssumedRoleUser$,1,0,0,0]];Tt.Credentials$=[3,d,ye,0,[fo,$r,Nr,ar],[0,[()=>Vr,0],0,4],4];Tt.PolicyDescriptorType$=[3,d,vr,0,[kr],[0]];Tt.ProvidedContext$=[3,d,Sr,0,[Ir,dr],[0,0]];Tt.Tag$=[3,d,wr,0,[yr,Ur],[0,0],2];var Rt=[1,d,Gr,0,()=>Tt.PolicyDescriptorType$],Br=[1,d,Tr,0,()=>Tt.ProvidedContext$],gr=[1,d,Or,0,()=>Tt.Tag$];Tt.AssumeRole$=[9,d,er,0,()=>Tt.AssumeRoleRequest$,()=>Tt.AssumeRoleResponse$];Tt.AssumeRoleWithWebIdentity$=[9,d,sr,0,()=>Tt.AssumeRoleWithWebIdentityRequest$,()=>Tt.AssumeRoleWithWebIdentityResponse$]});var Ot=y((jt)=>{Object.defineProperty(jt,"__esModule",{value:!0});jt.getRuntimeConfig=void 0;var Cr=X(),fr=Zr(),es=Se(),ts=k(),os=Xr(),kt=Jr(),Lt=Hr(),rs=Z(),ss=rt(),ns=Te(),is=(e)=>{return{apiVersion:"2011-06-15",base64Decoder:e?.base64Decoder??kt.fromBase64,base64Encoder:e?.base64Encoder??kt.toBase64,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??ss.defaultEndpointResolver,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??rs.defaultSTSHttpAuthSchemeProvider,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(t)=>t.getIdentityProvider("aws.auth#sigv4"),signer:new Cr.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(t)=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new es.NoAuthSigner}],logger:e?.logger??new ts.NoOpLogger,protocol:e?.protocol??fr.AwsQueryProtocol,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:ns.errorTypeRegistries,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:e?.serviceId??"STS",urlParser:e?.urlParser??os.parseUrl,utf8Decoder:e?.utf8Decoder??Lt.fromUtf8,utf8Encoder:e?.utf8Encoder??Lt.toUtf8}};jt.getRuntimeConfig=is});var Jt=y((Yt)=>{Object.defineProperty(Yt,"__esModule",{value:!0});Yt.getRuntimeConfig=void 0;var _s=ds(),Is=_s.__importDefault(ps()),ve=X(),Kt=ls(),K=gt(),Rs=Se(),Ts=Es(),Vt=Qt(),W=us(),zt=cs(),Bt=k(),Ss=Ps(),vs=ys(),xs=as(),Ds=Ot(),ms=(e)=>{(0,Bt.emitWarningIfUnsupportedVersion)(process.version);let t=(0,vs.resolveDefaultsModeConfig)(e),r=()=>t().then(Bt.loadConfigsForDefaultMode),a=(0,Ds.getRuntimeConfig)(e);(0,ve.emitWarningIfUnsupportedVersion)(process.version);let s={profile:e?.profile,logger:a.logger};return{...a,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??(0,W.loadConfig)(ve.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS,s),bodyLengthChecker:e?.bodyLengthChecker??Ss.calculateBodyLength,defaultUserAgentProvider:e?.defaultUserAgentProvider??(0,Kt.createDefaultUserAgentProvider)({serviceId:a.serviceId,clientVersion:Is.default.version}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:(E)=>E.getIdentityProvider("aws.auth#sigv4")||(async(u)=>await e.credentialDefaultProvider(u?.__config||{})()),signer:new ve.AwsSdkSigV4Signer},{schemeId:"smithy.api#noAuth",identityProvider:(E)=>E.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new Rs.NoAuthSigner}],maxAttempts:e?.maxAttempts??(0,W.loadConfig)(Vt.NODE_MAX_ATTEMPT_CONFIG_OPTIONS,e),region:e?.region??(0,W.loadConfig)(K.NODE_REGION_CONFIG_OPTIONS,{...K.NODE_REGION_CONFIG_FILE_OPTIONS,...s}),requestHandler:zt.NodeHttpHandler.create(e?.requestHandler??r),retryMode:e?.retryMode??(0,W.loadConfig)({...Vt.NODE_RETRY_MODE_CONFIG_OPTIONS,default:async()=>(await r()).retryMode||xs.DEFAULT_RETRY_MODE},e),sha256:e?.sha256??Ts.Hash.bind(null,"sha256"),streamCollector:e?.streamCollector??zt.streamCollector,useDualstackEndpoint:e?.useDualstackEndpoint??(0,W.loadConfig)(K.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,s),useFipsEndpoint:e?.useFipsEndpoint??(0,W.loadConfig)(K.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,s),userAgentAppId:e?.userAgentAppId??(0,W.loadConfig)(Kt.NODE_APP_ID_CONFIG_OPTIONS,s)}};Yt.getRuntimeConfig=ms});var Ct=y((Xt)=>{Object.defineProperty(Xt,"__esModule",{value:!0});Xt.resolveHttpAuthRuntimeConfig=Xt.getHttpAuthExtensionConfiguration=void 0;var As=(e)=>{let{httpAuthSchemes:t,httpAuthSchemeProvider:r,credentials:a}=e;return{setHttpAuthScheme(s){let E=t.findIndex((u)=>u.schemeId===s.schemeId);if(E===-1)t.push(s);else t.splice(E,1,s)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(s){r=s},httpAuthSchemeProvider(){return r},setCredentials(s){a=s},credentials(){return a}}};Xt.getHttpAuthExtensionConfiguration=As;var $s=(e)=>{return{httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}};Xt.resolveHttpAuthRuntimeConfig=$s});var io=y((so)=>{Object.defineProperty(so,"__esModule",{value:!0});so.resolveRuntimeExtensions=void 0;var ft=ro(),eo=hs(),to=k(),oo=Ct(),Ns=(e,t)=>{let r=Object.assign((0,ft.getAwsRegionExtensionConfiguration)(e),(0,to.getDefaultExtensionConfiguration)(e),(0,eo.getHttpHandlerExtensionConfiguration)(e),(0,oo.getHttpAuthExtensionConfiguration)(e));return t.forEach((a)=>a.configure(r)),Object.assign(e,(0,ft.resolveAwsRegionExtensionConfiguration)(r),(0,to.resolveDefaultRuntimeConfig)(r),(0,eo.resolveHttpHandlerRuntimeConfig)(r),(0,oo.resolveHttpAuthRuntimeConfig)(r))};so.resolveRuntimeExtensions=Ns});var C=y((De)=>{Object.defineProperty(De,"__esModule",{value:!0});De.STSClient=De.__Client=void 0;var co=qs(),Ms=Fs(),ks=Ws(),ao=ws(),Ls=gt(),xe=Se(),js=dt(),Gs=Us(),Os=lo(),uo=Qt(),Eo=k();Object.defineProperty(De,"__Client",{enumerable:!0,get:function(){return Eo.Client}});var po=Z(),Ks=f(),Vs=Jt(),zs=io();class Po extends Eo.Client{config;constructor(...[e]){let t=(0,Vs.getRuntimeConfig)(e||{});super(t);this.initConfig=t;let r=(0,Ks.resolveClientEndpointParameters)(t),a=(0,ao.resolveUserAgentConfig)(r),s=(0,uo.resolveRetryConfig)(a),E=(0,Ls.resolveRegionConfig)(s),u=(0,co.resolveHostHeaderConfig)(E),T=(0,Os.resolveEndpointConfig)(u),D=(0,po.resolveHttpAuthSchemeConfig)(T),m=(0,zs.resolveRuntimeExtensions)(D,e?.extensions||[]);this.config=m,this.middlewareStack.use((0,js.getSchemaSerdePlugin)(this.config)),this.middlewareStack.use((0,ao.getUserAgentPlugin)(this.config)),this.middlewareStack.use((0,uo.getRetryPlugin)(this.config)),this.middlewareStack.use((0,Gs.getContentLengthPlugin)(this.config)),this.middlewareStack.use((0,co.getHostHeaderPlugin)(this.config)),this.middlewareStack.use((0,Ms.getLoggerPlugin)(this.config)),this.middlewareStack.use((0,ks.getRecursionDetectionPlugin)(this.config)),this.middlewareStack.use((0,xe.getHttpAuthSchemeEndpointRuleSetPlugin)(this.config,{httpAuthSchemeParametersProvider:po.defaultSTSHttpAuthSchemeParametersProvider,identityProviderConfigProvider:async(U)=>new xe.DefaultIdentityProviderConfig({"aws.auth#sigv4":U.credentials})})),this.middlewareStack.use((0,xe.getHttpSigningPlugin)(this.config))}destroy(){super.destroy()}}De.STSClient=Po});var nn=y((I)=>{var w=C(),z=k(),_o=lo(),Io=f(),L=Te(),V=Ee(),me=Bs(),gs=ro(),Qs=O();class B extends z.Command.classBuilder().ep(Io.commonParams).m(function(e,t,r,a){return[_o.getEndpointPlugin(r,e.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRole",{}).n("STSClient","AssumeRoleCommand").sc(L.AssumeRole$).build(){}class g extends z.Command.classBuilder().ep(Io.commonParams).m(function(e,t,r,a){return[_o.getEndpointPlugin(r,e.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoleWithWebIdentity",{}).n("STSClient","AssumeRoleWithWebIdentityCommand").sc(L.AssumeRoleWithWebIdentity$).build(){}var Ys={AssumeRoleCommand:B,AssumeRoleWithWebIdentityCommand:g};class Ae extends w.STSClient{}z.createAggregatedClient(Ys,Ae);var Ro=(e)=>{if(typeof e?.Arn==="string"){let t=e.Arn.split(":");if(t.length>4&&t[4]!=="")return t[4]}return},To=async(e,t,r,a={})=>{let s=typeof e==="function"?await e():e,E=typeof t==="function"?await t():t,u="",T=s??E??(u=await gs.stsRegionDefaultResolver(a)());return r?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${s} (credential provider clientConfig)`,`${E} (contextual client)`,`${u} (STS default: AWS_REGION, profile region, or us-east-1)`),T},Hs=(e,t)=>{let r,a;return async(s,E)=>{if(a=s,!r){let{logger:U=e?.parentClientConfig?.logger,profile:j=e?.parentClientConfig?.profile,region:Q,requestHandler:G=e?.parentClientConfig?.requestHandler,credentialProviderLogger:Y,userAgentAppId:H=e?.parentClientConfig?.userAgentAppId}=e,mo=await To(Q,e?.parentClientConfig?.region,Y,{logger:U,profile:j}),Ao=!So(G);r=new t({...e,userAgentAppId:H,profile:j,credentialDefaultProvider:()=>async()=>a,region:mo,requestHandler:Ao?G:void 0,logger:U})}let{Credentials:u,AssumedRoleUser:T}=await r.send(new B(E));if(!u||!u.AccessKeyId||!u.SecretAccessKey)throw Error(`Invalid response from STS.assumeRole call with role ${E.RoleArn}`);let D=Ro(T),m={accessKeyId:u.AccessKeyId,secretAccessKey:u.SecretAccessKey,sessionToken:u.SessionToken,expiration:u.Expiration,...u.CredentialScope&&{credentialScope:u.CredentialScope},...D&&{accountId:D}};return me.setCredentialFeature(m,"CREDENTIALS_STS_ASSUME_ROLE","i"),m}},Js=(e,t)=>{let r;return async(a)=>{if(!r){let{logger:D=e?.parentClientConfig?.logger,profile:m=e?.parentClientConfig?.profile,region:U,requestHandler:j=e?.parentClientConfig?.requestHandler,credentialProviderLogger:Q,userAgentAppId:G=e?.parentClientConfig?.userAgentAppId}=e,Y=await To(U,e?.parentClientConfig?.region,Q,{logger:D,profile:m}),H=!So(j);r=new t({...e,userAgentAppId:G,profile:m,region:Y,requestHandler:H?j:void 0,logger:D})}let{Credentials:s,AssumedRoleUser:E}=await r.send(new g(a));if(!s||!s.AccessKeyId||!s.SecretAccessKey)throw Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${a.RoleArn}`);let u=Ro(E),T={accessKeyId:s.AccessKeyId,secretAccessKey:s.SecretAccessKey,sessionToken:s.SessionToken,expiration:s.Expiration,...s.CredentialScope&&{credentialScope:s.CredentialScope},...u&&{accountId:u}};if(u)me.setCredentialFeature(T,"RESOLVED_ACCOUNT_ID","T");return me.setCredentialFeature(T,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),T}},So=(e)=>{return e?.metadata?.handlerProtocol==="h2"},vo=(e,t)=>{if(!t)return e;else return class extends e{constructor(a){super(a);for(let s of t)this.middlewareStack.use(s)}}},xo=(e={},t)=>Hs(e,vo(w.STSClient,t)),Do=(e={},t)=>Js(e,vo(w.STSClient,t)),Xs=(e)=>(t)=>e({roleAssumer:xo(t),roleAssumerWithWebIdentity:Do(t),...t});I.$Command=z.Command;I.STSServiceException=Qs.STSServiceException;I.AssumeRoleCommand=B;I.AssumeRoleWithWebIdentityCommand=g;I.STS=Ae;I.decorateDefaultCredentialProvider=Xs;I.getDefaultRoleAssumer=xo;I.getDefaultRoleAssumerWithWebIdentity=Do;Object.prototype.hasOwnProperty.call(w,"__proto__")&&!Object.prototype.hasOwnProperty.call(I,"__proto__")&&Object.defineProperty(I,"__proto__",{enumerable:!0,value:w.__proto__});Object.keys(w).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(I,e))I[e]=w[e]});Object.prototype.hasOwnProperty.call(L,"__proto__")&&!Object.prototype.hasOwnProperty.call(I,"__proto__")&&Object.defineProperty(I,"__proto__",{enumerable:!0,value:L.__proto__});Object.keys(L).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(I,e))I[e]=L[e]});Object.prototype.hasOwnProperty.call(V,"__proto__")&&!Object.prototype.hasOwnProperty.call(I,"__proto__")&&Object.defineProperty(I,"__proto__",{enumerable:!0,value:V.__proto__});Object.keys(V).forEach(function(e){if(e!=="default"&&!Object.prototype.hasOwnProperty.call(I,e))I[e]=V[e]})});export default nn();
 
-//# debugId=6DBDA97E3B7C824E64756E2164756E21
+//# debugId=9B1198E924ED2CF564756E2164756E21

package/dist/{chunk-v8fx4vgq.js.map → chunk-89168m0z.js.map}

@@ -17,6 +17,6 @@
     "'use strict';\n\nvar STSClient = require('./STSClient');\nvar smithyClient = require('@smithy/smithy-client');\nvar middlewareEndpoint = require('@smithy/middleware-endpoint');\nvar EndpointParameters = require('./endpoint/EndpointParameters');\nvar schemas_0 = require('./schemas/schemas_0');\nvar errors = require('./models/errors');\nvar client = require('@aws-sdk/core/client');\nvar regionConfigResolver = require('@aws-sdk/region-config-resolver');\nvar STSServiceException = require('./models/STSServiceException');\n\nclass AssumeRoleCommand extends smithyClient.Command\n    .classBuilder()\n    .ep(EndpointParameters.commonParams)\n    .m(function (Command, cs, config, o) {\n    return [middlewareEndpoint.getEndpointPlugin(config, Command.getEndpointParameterInstructions())];\n})\n    .s(\"AWSSecurityTokenServiceV20110615\", \"AssumeRole\", {})\n    .n(\"STSClient\", \"AssumeRoleCommand\")\n    .sc(schemas_0.AssumeRole$)\n    .build() {\n}\n\nclass AssumeRoleWithWebIdentityCommand extends smithyClient.Command\n    .classBuilder()\n    .ep(EndpointParameters.commonParams)\n    .m(function (Command, cs, config, o) {\n    return [middlewareEndpoint.getEndpointPlugin(config, Command.getEndpointParameterInstructions())];\n})\n    .s(\"AWSSecurityTokenServiceV20110615\", \"AssumeRoleWithWebIdentity\", {})\n    .n(\"STSClient\", \"AssumeRoleWithWebIdentityCommand\")\n    .sc(schemas_0.AssumeRoleWithWebIdentity$)\n    .build() {\n}\n\nconst commands = {\n    AssumeRoleCommand,\n    AssumeRoleWithWebIdentityCommand,\n};\nclass STS extends STSClient.STSClient {\n}\nsmithyClient.createAggregatedClient(commands, STS);\n\nconst getAccountIdFromAssumedRoleUser = (assumedRoleUser) => {\n    if (typeof assumedRoleUser?.Arn === \"string\") {\n        const arnComponents = assumedRoleUser.Arn.split(\":\");\n        if (arnComponents.length > 4 && arnComponents[4] !== \"\") {\n            return arnComponents[4];\n        }\n    }\n    return undefined;\n};\nconst resolveRegion = async (_region, _parentRegion, credentialProviderLogger, loaderConfig = {}) => {\n    const region = typeof _region === \"function\" ? await _region() : _region;\n    const parentRegion = typeof _parentRegion === \"function\" ? await _parentRegion() : _parentRegion;\n    let stsDefaultRegion = \"\";\n    const resolvedRegion = region ?? parentRegion ?? (stsDefaultRegion = await regionConfigResolver.stsRegionDefaultResolver(loaderConfig)());\n    credentialProviderLogger?.debug?.(\"@aws-sdk/client-sts::resolveRegion\", \"accepting first of:\", `${region} (credential provider clientConfig)`, `${parentRegion} (contextual client)`, `${stsDefaultRegion} (STS default: AWS_REGION, profile region, or us-east-1)`);\n    return resolvedRegion;\n};\nconst getDefaultRoleAssumer$1 = (stsOptions, STSClient) => {\n    let stsClient;\n    let closureSourceCreds;\n    return async (sourceCreds, params) => {\n        closureSourceCreds = sourceCreds;\n        if (!stsClient) {\n            const { logger = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId, } = stsOptions;\n            const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {\n                logger,\n                profile,\n            });\n            const isCompatibleRequestHandler = !isH2(requestHandler);\n            stsClient = new STSClient({\n                ...stsOptions,\n                userAgentAppId,\n                profile,\n                credentialDefaultProvider: () => async () => closureSourceCreds,\n                region: resolvedRegion,\n                requestHandler: isCompatibleRequestHandler ? requestHandler : undefined,\n                logger: logger,\n            });\n        }\n        const { Credentials, AssumedRoleUser } = await stsClient.send(new AssumeRoleCommand(params));\n        if (!Credentials || !Credentials.AccessKeyId || !Credentials.SecretAccessKey) {\n            throw new Error(`Invalid response from STS.assumeRole call with role ${params.RoleArn}`);\n        }\n        const accountId = getAccountIdFromAssumedRoleUser(AssumedRoleUser);\n        const credentials = {\n            accessKeyId: Credentials.AccessKeyId,\n            secretAccessKey: Credentials.SecretAccessKey,\n            sessionToken: Credentials.SessionToken,\n            expiration: Credentials.Expiration,\n            ...(Credentials.CredentialScope && { credentialScope: Credentials.CredentialScope }),\n            ...(accountId && { accountId }),\n        };\n        client.setCredentialFeature(credentials, \"CREDENTIALS_STS_ASSUME_ROLE\", \"i\");\n        return credentials;\n    };\n};\nconst getDefaultRoleAssumerWithWebIdentity$1 = (stsOptions, STSClient) => {\n    let stsClient;\n    return async (params) => {\n        if (!stsClient) {\n            const { logger = stsOptions?.parentClientConfig?.logger, profile = stsOptions?.parentClientConfig?.profile, region, requestHandler = stsOptions?.parentClientConfig?.requestHandler, credentialProviderLogger, userAgentAppId = stsOptions?.parentClientConfig?.userAgentAppId, } = stsOptions;\n            const resolvedRegion = await resolveRegion(region, stsOptions?.parentClientConfig?.region, credentialProviderLogger, {\n                logger,\n                profile,\n            });\n            const isCompatibleRequestHandler = !isH2(requestHandler);\n            stsClient = new STSClient({\n                ...stsOptions,\n                userAgentAppId,\n                profile,\n                region: resolvedRegion,\n                requestHandler: isCompatibleRequestHandler ? requestHandler : undefined,\n                logger: logger,\n            });\n        }\n        const { Credentials, AssumedRoleUser } = await stsClient.send(new AssumeRoleWithWebIdentityCommand(params));\n        if (!Credentials || !Credentials.AccessKeyId || !Credentials.SecretAccessKey) {\n            throw new Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${params.RoleArn}`);\n        }\n        const accountId = getAccountIdFromAssumedRoleUser(AssumedRoleUser);\n        const credentials = {\n            accessKeyId: Credentials.AccessKeyId,\n            secretAccessKey: Credentials.SecretAccessKey,\n            sessionToken: Credentials.SessionToken,\n            expiration: Credentials.Expiration,\n            ...(Credentials.CredentialScope && { credentialScope: Credentials.CredentialScope }),\n            ...(accountId && { accountId }),\n        };\n        if (accountId) {\n            client.setCredentialFeature(credentials, \"RESOLVED_ACCOUNT_ID\", \"T\");\n        }\n        client.setCredentialFeature(credentials, \"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID\", \"k\");\n        return credentials;\n    };\n};\nconst isH2 = (requestHandler) => {\n    return requestHandler?.metadata?.handlerProtocol === \"h2\";\n};\n\nconst getCustomizableStsClientCtor = (baseCtor, customizations) => {\n    if (!customizations)\n        return baseCtor;\n    else\n        return class CustomizableSTSClient extends baseCtor {\n            constructor(config) {\n                super(config);\n                for (const customization of customizations) {\n                    this.middlewareStack.use(customization);\n                }\n            }\n        };\n};\nconst getDefaultRoleAssumer = (stsOptions = {}, stsPlugins) => getDefaultRoleAssumer$1(stsOptions, getCustomizableStsClientCtor(STSClient.STSClient, stsPlugins));\nconst getDefaultRoleAssumerWithWebIdentity = (stsOptions = {}, stsPlugins) => getDefaultRoleAssumerWithWebIdentity$1(stsOptions, getCustomizableStsClientCtor(STSClient.STSClient, stsPlugins));\nconst decorateDefaultCredentialProvider = (provider) => (input) => provider({\n    roleAssumer: getDefaultRoleAssumer(input),\n    roleAssumerWithWebIdentity: getDefaultRoleAssumerWithWebIdentity(input),\n    ...input,\n});\n\nexports.$Command = smithyClient.Command;\nexports.STSServiceException = STSServiceException.STSServiceException;\nexports.AssumeRoleCommand = AssumeRoleCommand;\nexports.AssumeRoleWithWebIdentityCommand = AssumeRoleWithWebIdentityCommand;\nexports.STS = STS;\nexports.decorateDefaultCredentialProvider = decorateDefaultCredentialProvider;\nexports.getDefaultRoleAssumer = getDefaultRoleAssumer;\nexports.getDefaultRoleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity;\nObject.prototype.hasOwnProperty.call(STSClient, '__proto__') &&\n    !Object.prototype.hasOwnProperty.call(exports, '__proto__') &&\n    Object.defineProperty(exports, '__proto__', {\n        enumerable: true,\n        value: STSClient['__proto__']\n    });\n\nObject.keys(STSClient).forEach(function (k) {\n    if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) exports[k] = STSClient[k];\n});\nObject.prototype.hasOwnProperty.call(schemas_0, '__proto__') &&\n    !Object.prototype.hasOwnProperty.call(exports, '__proto__') &&\n    Object.defineProperty(exports, '__proto__', {\n        enumerable: true,\n        value: schemas_0['__proto__']\n    });\n\nObject.keys(schemas_0).forEach(function (k) {\n    if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) exports[k] = schemas_0[k];\n});\nObject.prototype.hasOwnProperty.call(errors, '__proto__') &&\n    !Object.prototype.hasOwnProperty.call(exports, '__proto__') &&\n    Object.defineProperty(exports, '__proto__', {\n        enumerable: true,\n        value: errors['__proto__']\n    });\n\nObject.keys(errors).forEach(function (k) {\n    if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) exports[k] = errors[k];\n});\n"
   ],
   "mappings": ";qvBACA,CAAO,SAAe,HAAS,OAAc,LAAE,AAAO,JAAK,LAAC,JACpD,yBAAsC,kBAA+B,8BAA2C,8CAAkD,OAC1K,IAAM,OACA,OACA,OACA,GAA6C,MAAO,EAAQ,EAAS,IAAU,CACjF,MAAO,CACH,WAAY,EAAG,EAAkB,kBAAkB,CAAO,EAAE,UAC5D,OAAS,MAAO,EAAG,EAAkB,mBAAmB,EAAO,MAAM,EAAE,IAClE,IAAM,CACH,MAAU,MAAM,yDAAyD,IAC1E,CACX,GAEI,8CAA6C,GACrD,SAAS,EAAgC,CAAC,EAAgB,CACtD,MAAO,CACH,SAAU,iBACV,kBAAmB,CACf,KAAM,MACN,OAAQ,EAAe,MAC3B,EACA,oBAAqB,CAAC,EAAQ,KAAa,CACvC,kBAAmB,CACf,SACA,SACJ,CACJ,EACJ,EAEJ,SAAS,EAAmC,CAAC,EAAgB,CACzD,MAAO,CACH,SAAU,mBACd,EAEJ,IAAM,GAAmC,CAAC,IAAmB,CACzD,IAAM,EAAU,CAAC,EACjB,OAAQ,EAAe,eACd,4BAA6B,CAC9B,EAAQ,KAAK,GAAoC,CAAc,CAAC,EAChE,KACJ,SAEI,EAAQ,KAAK,GAAiC,CAAc,CAAC,EAGrE,OAAO,GAEH,oCAAmC,GAC3C,IAAM,GAAuB,CAAC,IAAU,OAAO,OAAO,EAAO,CACzD,cAAe,GAAY,SAC/B,CAAC,EACO,wBAAuB,GAC/B,IAAM,GAA8B,CAAC,IAAW,CAC5C,IAAM,EAAuB,wBAAsB,CAAM,EACnD,GAAY,EAAG,GAAO,0BAA0B,CAAQ,EAC9D,OAAO,OAAO,OAAO,EAAU,CAC3B,sBAAuB,EAAG,EAAkB,mBAAmB,EAAO,sBAAwB,CAAC,CAAC,CACpG,CAAC,GAEG,+BAA8B,oBC5DtC,OAAO,eAAe,GAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EACpD,gBAAuB,mCAAuC,OACtE,IAAM,GAAkC,CAAC,IAAY,CACjD,OAAO,OAAO,OAAO,EAAS,CAC1B,qBAAsB,EAAQ,sBAAwB,GACtD,gBAAiB,EAAQ,iBAAmB,GAC5C,kBAAmB,EAAQ,mBAAqB,GAChD,mBAAoB,KACxB,CAAC,GAEG,mCAAkC,GAClC,gBAAe,CACnB,kBAAmB,CAAE,KAAM,gBAAiB,KAAM,mBAAoB,EACtE,QAAS,CAAE,KAAM,gBAAiB,KAAM,iBAAkB,EAC1D,SAAU,CAAE,KAAM,gBAAiB,KAAM,UAAW,EACpD,OAAQ,CAAE,KAAM,gBAAiB,KAAM,QAAS,EAChD,aAAc,CAAE,KAAM,gBAAiB,KAAM,sBAAuB,CACxE,oBCjBA,OAAO,eAAe,GAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EACpD,WAAe,OACvB,IAAM,GAAI,WAAY,EAAI,OAAQ,EAAI,KAAM,EAAI,OAAQ,EAAI,MACtD,GAAI,GAAO,GAAI,GAAM,EAAI,gBAAiB,EAAI,eAAgB,GAAI,QAAS,GAAI,MAAO,GAAI,YAAa,EAAI,WAAY,GAAI,mDAAoD,EAAI,OAAQ,EAAI,QAAS,GAAI,UAAW,GAAI,EAAG,IAAI,IAAQ,GAAI,QAAS,EAAG,GAAI,EAAG,IAAI,GAAM,QAAS,IAAQ,GAAI,SAAU,EAAG,GAAI,EAAG,GAAI,UAAW,EAAG,GAAI,EAAG,GAAI,SAAU,GAAI,CAAC,EAAG,GAAI,QAAS,CAAC,CAAE,EAAG,EAAI,EAAG,GAAI,QAAS,EAAG,GAAI,EAAG,GAAI,iBAAkB,GAAI,CAAC,CAAC,EAAG,OAAQ,iBAAkB,EAAG,GAAI,EAAG,GAAI,SAAU,EAAG,GAAI,EAAG,GAAI,cAAe,EAAG,EAAI,CAC3gB,IAAK,4BACL,WAAY,CAAE,YAAa,CAAC,CAAE,KAAM,GAAG,YAAa,GAAG,cAAe,EAAE,CAAC,CAAE,EAC3E,QAAS,CAAC,CACd,EAAG,EAAI,CAAC,EAAG,GAAI,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,YAAY,CAAE,CAAC,GAAI,GAAI,GAAI,GAAI,CAAE,EAAG,GAAI,EAAG,GAAI,GAAI,GAAI,CAAC,GAAG,EAAI,CAAE,EAAG,GAAI,EAAG,GAAI,GAAI,GAAI,CAAC,GAAG,EAAI,CAAE,EAAG,GAAI,EAAG,GAAI,IAAI,GAAI,CAAC,EAAG,GAAI,iBAAkB,EAAG,cAAc,CAAE,EAAG,GAAI,EAAG,GAAI,iBAAkB,EAAG,GAAI,EAAG,GAAI,GAAI,GAAI,CAAC,GAAM,EAAG,GAAI,IAAI,GAAI,CAAC,GAAG,mBAAmB,CAAE,CAAC,CAAE,EAAG,GAAI,CAAC,EAAG,GAAI,SAAU,GAAI,CAAC,EAAC,CAAE,CAAC,EAAG,GAAI,CAAC,EAAC,EAAG,GAAI,CAAC,EAAC,EAC3W,GAAQ,CACV,QAAS,MACT,WAAY,CAAE,OAAQ,GAAG,aAAc,GAAG,QAAS,GAAG,SAAU,GAAG,kBAAmB,EAAE,EACxF,MAAO,CACH,CACI,WAAY,CACR,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,GAAI,mBAAoB,EAAG,EAAC,CAAE,EACjD,EAAG,GAAI,OAAQ,GAAI,EAAE,EACrB,GACA,GACA,EAAG,GAAI,GAAI,GAAI,CAAC,GAAG,EAAC,CAAE,EACtB,EAAG,GAAI,GAAI,GAAI,CAAC,GAAG,EAAC,CAAE,CAC1B,EACA,MAAO,CACH,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,gBAAgB,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EAC5E,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,YAAY,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EACxE,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,gBAAgB,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EAC5E,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,gBAAgB,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EAC5E,GACA,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,cAAc,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EAC1E,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,cAAc,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EAC1E,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,YAAY,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EACxE,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,WAAW,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EACvE,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,WAAW,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EACvE,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,WAAW,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EACvE,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,WAAW,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EACvE,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,EAAC,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EAC7D,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,WAAW,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EACvE,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,WAAW,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EACvE,CAAE,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,WAAW,CAAE,CAAC,EAAG,SAAU,GAAI,GAAI,CAAE,EACvE,CACI,SAAU,CACN,IAAK,GACL,WAAY,CAAE,YAAa,CAAC,CAAE,KAAM,GAAG,YAAa,GAAG,cAAe,UAAW,CAAC,CAAE,EACpF,QAAS,CACb,GACC,GAAI,CACT,CACJ,GACC,GAAI,CACT,EACA,CACI,WAAY,GACZ,MAAO,CACH,CAAE,WAAY,GAAG,MAAO,qEAAsE,GAAI,CAAE,EACpG,CAAE,WAAY,GAAG,MAAO,0EAA2E,GAAI,CAAE,EACzG,CAAE,SAAU,CAAE,IAAK,GAAG,WAAY,EAAG,QAAS,CAAE,GAAI,GAAI,CAAE,CAC9D,GACC,GAAI,CACT,EACA,CACI,WAAY,CAAC,EAAC,EACd,MAAO,CACH,CACI,WAAY,CAAC,EAAC,EACd,MAAO,CACH,CACI,WAAY,CAAC,GAAG,EAAC,EACjB,MAAO,CACH,CACI,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,GAAG,EAAC,CAAE,EAAG,EAAC,EACvC,MAAO,CACH,CACI,SAAU,CACN,IAAK,iEACL,WAAY,EACZ,QAAS,CACb,GACC,GAAI,CACT,CACJ,GACC,GAAI,CACT,EACA,CAAE,MAAO,mFAAoF,GAAI,CAAE,CACvG,GACC,GAAI,CACT,EACA,CACI,WAAY,GACZ,MAAO,CACH,CACI,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,GAAG,EAAC,CAAE,CAAC,EACpC,MAAO,CACH,CACI,WAAY,CAAC,EAAG,GAAI,GAAI,GAAI,CAAC,EAAG,GAAI,IAAI,GAAI,CAAC,GAAG,MAAM,CAAE,EAAG,YAAY,CAAE,CAAC,EAC1E,SAAU,CAAE,IAAK,qCAAsC,WAAY,EAAG,QAAS,CAAE,GAChF,GAAI,CACT,EACA,CACI,SAAU,CACN,IAAK,wDACL,WAAY,EACZ,QAAS,CACb,GACC,GAAI,CACT,CACJ,GACC,GAAI,CACT,EACA,CAAE,MAAO,4DAA6D,GAAI,CAAE,CAChF,GACC,GAAI,CACT,EACA,CACI,WAAY,GACZ,MAAO,CACH,CACI,WAAY,CAAC,EAAC,EACd,MAAO,CACH,CACI,SAAU,CACN,IAAK,4DACL,WAAY,EACZ,QAAS,CACb,GACC,GAAI,CACT,CACJ,GACC,GAAI,CACT,EACA,CAAE,MAAO,sEAAuE,GAAI,CAAE,CAC1F,GACC,GAAI,CACT,EACA,GACA,CAAE,SAAU,CAAE,IAAK,GAAG,WAAY,EAAG,QAAS,CAAE,GAAI,GAAI,CAAE,CAC9D,GACC,GAAI,CACT,CACJ,GACC,GAAI,CACT,EACA,CAAE,MAAO,yCAA0C,GAAI,CAAE,CAC7D,CACJ,EACQ,WAAU,qBC/IlB,OAAO,eAAe,GAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EACpD,2BAA+B,OACvC,IAAM,QACA,QACA,QACA,GAAQ,IAAI,GAAiB,cAAc,CAC7C,KAAM,GACN,OAAQ,CAAC,WAAY,SAAU,eAAgB,UAAW,mBAAmB,CACjF,CAAC,EACK,GAA0B,CAAC,EAAgB,EAAU,CAAC,IAAM,CAC9D,OAAO,GAAM,IAAI,EAAgB,KAAO,EAAG,GAAiB,iBAAiB,GAAU,QAAS,CAC5F,eAAgB,EAChB,OAAQ,EAAQ,MACpB,CAAC,CAAC,GAEE,2BAA0B,GAClC,GAAiB,wBAAwB,IAAM,GAAiB,sCChBhE,OAAO,eAAe,GAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EACpD,uBAA8B,sBAA0B,OAChE,IAAM,OACN,OAAO,eAAe,GAAS,qBAAsB,CAAE,WAAY,GAAM,IAAK,QAAS,EAAG,CAAE,OAAO,GAAgB,iBAAoB,CAAC,EACxI,MAAM,WAA4B,GAAgB,gBAAiB,CAC/D,WAAW,CAAC,EAAS,CACjB,MAAM,CAAO,EACb,OAAO,eAAe,KAAM,GAAoB,SAAS,EAEjE,CACQ,uBAAsB,qBCV9B,OAAO,eAAe,GAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EACpD,kCAAyC,iCAAwC,6BAAoC,2BAAkC,iCAAwC,oCAA2C,yBAA6B,OAC/Q,IAAM,MACN,MAAM,WAA8B,EAAsB,mBAAoB,CAC1E,KAAO,wBACP,OAAS,SACT,WAAW,CAAC,EAAM,CACd,MAAM,CACF,KAAM,wBACN,OAAQ,YACL,CACP,CAAC,EACD,OAAO,eAAe,KAAM,GAAsB,SAAS,EAEnE,CACQ,yBAAwB,GAChC,MAAM,WAAyC,EAAsB,mBAAoB,CACrF,KAAO,mCACP,OAAS,SACT,WAAW,CAAC,EAAM,CACd,MAAM,CACF,KAAM,mCACN,OAAQ,YACL,CACP,CAAC,EACD,OAAO,eAAe,KAAM,GAAiC,SAAS,EAE9E,CACQ,oCAAmC,GAC3C,MAAM,WAAsC,EAAsB,mBAAoB,CAClF,KAAO,gCACP,OAAS,SACT,WAAW,CAAC,EAAM,CACd,MAAM,CACF,KAAM,gCACN,OAAQ,YACL,CACP,CAAC,EACD,OAAO,eAAe,KAAM,GAA8B,SAAS,EAE3E,CACQ,iCAAgC,GACxC,MAAM,WAAgC,EAAsB,mBAAoB,CAC5E,KAAO,0BACP,OAAS,SACT,WAAW,CAAC,EAAM,CACd,MAAM,CACF,KAAM,0BACN,OAAQ,YACL,CACP,CAAC,EACD,OAAO,eAAe,KAAM,GAAwB,SAAS,EAErE,CACQ,2BAA0B,GAClC,MAAM,WAAkC,EAAsB,mBAAoB,CAC9E,KAAO,4BACP,OAAS,SACT,WAAW,CAAC,EAAM,CACd,MAAM,CACF,KAAM,4BACN,OAAQ,YACL,CACP,CAAC,EACD,OAAO,eAAe,KAAM,GAA0B,SAAS,EAEvE,CACQ,6BAA4B,GACpC,MAAM,WAAsC,EAAsB,mBAAoB,CAClF,KAAO,gCACP,OAAS,SACT,WAAW,CAAC,EAAM,CACd,MAAM,CACF,KAAM,gCACN,OAAQ,YACL,CACP,CAAC,EACD,OAAO,eAAe,KAAM,GAA8B,SAAS,EAE3E,CACQ,iCAAgC,GACxC,MAAM,WAAuC,EAAsB,mBAAoB,CACnF,KAAO,iCACP,OAAS,SACT,WAAW,CAAC,EAAM,CACd,MAAM,CACF,KAAM,iCACN,OAAQ,YACL,CACP,CAAC,EACD,OAAO,eAAe,KAAM,GAA+B,SAAS,EAE5E,CACQ,kCAAiC,qBC7FzC,OAAO,eAAe,GAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EACpD,8BAAqC,eAAsB,QAAe,oBAA2B,yBAAgC,gBAAuB,sCAA6C,qCAA4C,uBAA8B,sBAA6B,oBAA2B,uBAA8B,4BAAmC,kCAAyC,qCAA4C,kCAAyC,8BAAqC,mCAA0C,0BAAiC,wBAA4B,OAC9pB,IAAM,GAAK,MACL,GAAO,cACP,GAAM,aACN,GAAO,gBACP,GAAO,oBACP,GAAQ,qBACR,GAAO,kBACP,GAAS,4BACT,GAAU,mCACV,GAAW,oCACX,GAAM,WACN,GAAK,cACL,GAAM,mBACN,GAAM,kBACN,GAAK,aACL,GAAM,aACN,GAAO,wBACP,GAAU,iCACV,GAAU,4BACV,GAAQ,gCACR,GAAK,MACL,GAAQ,mCACR,GAAK,SACL,GAAM,aACN,GAAO,cACP,GAAM,mBACN,GAAQ,2BACR,GAAO,kBACP,GAAO,uBACP,GAAM,aACN,GAAO,mBACP,GAAS,gCACT,GAAM,WACN,GAAM,UACN,GAAO,0BACP,GAAO,kBACP,GAAO,kBACP,GAAS,8BACT,GAAM,iBACN,GAAM,eACN,GAAM,eACN,GAAK,OACL,GAAM,YACN,GAAO,oBACP,GAAM,MACN,GAAK,QACL,GAAO,mBACP,GAAK,MACL,GAAQ,sBACR,EAAO,gBACP,EAAK,SACL,GAAO,kBACP,EAAK,QACL,EAAM,YACN,EAAK,UACL,GAAQ,2BACR,GAAK,4CACL,GAAO,cACP,EAAK,oBACL,QACA,OACA,OACA,GAAc,GAAS,aAAa,IAAI,EAAE,EACxC,wBAAuB,CAAC,GAAI,GAAI,sBAAuB,EAAG,CAAC,EAAG,CAAC,CAAC,EACxE,GAAY,cAAsB,wBAAsB,GAAsB,mBAAmB,EACjG,IAAM,EAAc,GAAS,aAAa,IAAI,CAAE,EACxC,0BAAyB,CAC7B,GACA,EACA,GACA,EAAG,GAAO,CAAC,wBAAyB,GAAG,GAAI,GAAK,GAAK,GAAM,GAAI,EAC/D,CAAC,CAAE,EACH,CAAC,CAAC,CACN,EACA,EAAY,cAAsB,0BAAwB,EAAS,qBAAqB,EAChF,mCAAkC,CACtC,GACA,EACA,GACA,EAAG,GAAO,CAAC,wBAAyB,GAAG,GAAI,GAAK,GAAK,GAAM,GAAI,EAC/D,CAAC,CAAE,EACH,CAAC,CAAC,CACN,EACA,EAAY,cAAsB,mCAAiC,EAAS,8BAA8B,EAClG,8BAA6B,CACjC,GACA,EACA,GACA,EAAG,GAAO,CAAC,mBAAoB,GAAG,GAAI,GAAK,GAAK,GAAM,GAAI,EAC1D,CAAC,CAAE,EACH,CAAC,CAAC,CACN,EACA,EAAY,cAAsB,8BAA4B,EAAS,yBAAyB,EACxF,kCAAiC,CACrC,GACA,EACA,GACA,EAAG,GAAO,CAAC,uBAAwB,GAAG,GAAI,GAAK,GAAK,GAAM,GAAI,EAC9D,CAAC,CAAE,EACH,CAAC,CAAC,CACN,EACA,EAAY,cAAsB,kCAAgC,EAAS,6BAA6B,EAChG,qCAAoC,CACxC,GACA,EACA,GACA,EAAG,GAAO,CAAC,0BAA2B,GAAG,GAAI,GAAK,GAAK,GAAM,GAAI,EACjE,CAAC,CAAE,EACH,CAAC,CAAC,CACN,EACA,EAAY,cAAsB,qCAAmC,EAAS,gCAAgC,EACtG,kCAAiC,CACrC,GACA,EACA,GACA,EAAG,GAAO,CAAC,uBAAwB,GAAG,GAAI,GAAK,GAAK,GAAM,GAAI,EAC9D,CAAC,CAAE,EACH,CAAC,CAAC,CACN,EACA,EAAY,cAAsB,kCAAgC,EAAS,6BAA6B,EAChG,4BAA2B,CAC/B,GACA,EACA,GACA,EAAG,GAAO,CAAC,0BAA2B,GAAG,GAAI,GAAK,GAAK,GAAM,GAAI,EACjE,CAAC,CAAE,EACH,CAAC,CAAC,CACN,EACA,EAAY,cAAsB,4BAA0B,EAAS,uBAAuB,EACpF,uBAAsB,CAAC,GAAa,CAAW,EACvD,IAAI,GAAsB,CAAC,EAAG,EAAI,GAAO,EAAG,CAAC,EACzC,GAAkB,CAAC,EAAG,EAAI,GAAM,EAAG,CAAC,EAChC,oBAAmB,CAAC,EAAG,EAAI,GAAM,EAAG,CAAC,GAAM,EAAE,EAAG,CAAC,EAAG,CAAC,EAAG,CAAC,EACzD,sBAAqB,CACzB,EACA,EACA,GACA,EACA,CAAC,GAAK,GAAM,GAAK,GAAI,GAAK,GAAI,GAAM,GAAK,GAAK,GAAK,GAAK,EAAG,EAC3D,CAAC,EAAG,EAAG,IAAM,GAA0B,EAAG,EAAG,IAAM,GAAa,GAAQ,EAAG,EAAG,EAAG,EAAG,IAAM,EAAwB,EAClH,CACJ,EACQ,uBAAsB,CAC1B,EACA,EACA,GACA,EACA,CAAC,GAAI,GAAM,GAAM,EAAG,EACpB,CAAC,CAAC,IAAc,gBAAc,CAAC,EAAG,IAAc,oBAAkB,EAAG,CAAC,CAC1E,EACQ,qCAAoC,CACxC,EACA,EACA,GACA,EACA,CAAC,GAAK,GAAM,GAAM,GAAK,GAAK,GAAI,EAAG,EACnC,CAAC,EAAG,EAAG,CAAC,IAAM,GAAiB,CAAC,EAAG,EAAG,IAAM,GAA0B,EAAG,CAAC,EAC1E,CACJ,EACQ,sCAAqC,CACzC,EACA,EACA,GACA,EACA,CAAC,GAAI,GAAQ,GAAM,GAAM,GAAK,GAAK,EAAG,EACtC,CAAC,CAAC,IAAc,gBAAc,CAAC,EAAG,EAAG,IAAc,oBAAkB,EAAG,EAAG,EAAG,CAAC,CACnF,EACQ,gBAAe,CACnB,EACA,EACA,GACA,EACA,CAAC,GAAM,GAAM,GAAK,EAAE,EACpB,CAAC,EAAG,CAAC,IAAM,GAAqB,CAAC,EAAG,EAAG,CAAC,EACxC,CACJ,EACQ,yBAAwB,CAAC,EAAG,EAAI,GAAM,EAAG,CAAC,EAAE,EAAG,CAAC,CAAC,CAAC,EAClD,oBAAmB,CAAC,EAAG,EAAI,GAAM,EAAG,CAAC,GAAM,EAAG,EAAG,CAAC,EAAG,CAAC,CAAC,EACvD,QAAO,CAAC,EAAG,EAAI,GAAK,EAAG,CAAC,GAAI,EAAE,EAAG,CAAC,EAAG,CAAC,EAAG,CAAC,EAClD,IAAI,GAA2B,CAAC,EAAG,EAAI,GAAO,EAAG,IAAc,wBAAqB,EAChF,GAA2B,CAAC,EAAG,EAAI,GAAO,EAAG,IAAc,mBAAgB,EAE3E,GAAc,CAAC,EAAG,EAAI,GAAM,EAAG,IAAc,OAAI,EAC7C,eAAc,CAAC,EAAG,EAAI,GAAK,EAAG,IAAc,sBAAoB,IAAc,sBAAmB,EACjG,8BAA6B,CACjC,EACA,EACA,GACA,EACA,IAAc,qCACd,IAAc,qCAClB,oBCjMA,OAAO,eAAe,GAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EACpD,oBAAwB,OAChC,IAAM,OACA,QACA,QACA,OACA,QACA,QACA,QACA,OACA,QACA,QACA,GAAmB,CAAC,IAAW,CACjC,MAAO,CACH,WAAY,aACZ,cAAe,GAAQ,eAAiB,GAAc,WACtD,cAAe,GAAQ,eAAiB,GAAc,SACtD,kBAAmB,GAAQ,mBAAqB,GAChD,iBAAkB,GAAQ,kBAAoB,GAAmB,wBACjE,WAAY,GAAQ,YAAc,CAAC,EACnC,uBAAwB,GAAQ,wBAA0B,GAAyB,iCACnF,gBAAiB,GAAQ,iBAAmB,CACxC,CACI,SAAU,iBACV,iBAAkB,CAAC,IAAQ,EAAI,oBAAoB,gBAAgB,EACnE,OAAQ,IAAI,GAAO,iBACvB,EACA,CACI,SAAU,oBACV,iBAAkB,CAAC,IAAQ,EAAI,oBAAoB,mBAAmB,IAAM,UAAa,CAAC,IAC1F,OAAQ,IAAI,GAAO,YACvB,CACJ,EACA,OAAQ,GAAQ,QAAU,IAAI,GAAgB,WAC9C,SAAU,GAAQ,UAAY,GAAY,iBAC1C,iBAAkB,GAAQ,kBAAoB,CAC1C,iBAAkB,oBAClB,oBAAqB,GAAY,oBACjC,aAAc,4CACd,QAAS,aACT,cAAe,kCACnB,EACA,UAAW,GAAQ,WAAa,MAChC,UAAW,GAAQ,WAAa,GAAa,SAC7C,YAAa,GAAQ,aAAe,GAAY,SAChD,YAAa,GAAQ,aAAe,GAAY,MACpD,GAEI,oBAAmB,qBChD3B,OAAO,eAAe,GAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EACpD,oBAAwB,OAChC,IAAM,QACA,GAAiB,GAAQ,oBAAgD,EACzE,OACA,QACA,OACA,QACA,QACA,QACA,OACA,QACA,OACA,QACA,QACA,QACA,QACA,GAAmB,CAAC,IAAW,EAChC,EAAG,GAAgB,iCAAiC,QAAQ,OAAO,EACpE,IAAM,GAAgB,EAAG,GAA0B,2BAA2B,CAAM,EAC9E,EAAwB,IAAM,EAAa,EAAE,KAAK,GAAgB,yBAAyB,EAC3F,GAAsB,EAAG,GAAuB,kBAAkB,CAAM,GAC7E,EAAG,GAAO,iCAAiC,QAAQ,OAAO,EAC3D,IAAM,EAAe,CACjB,QAAS,GAAQ,QACjB,OAAQ,EAAmB,MAC/B,EACA,MAAO,IACA,KACA,EACH,QAAS,OACT,eACA,qBAAsB,GAAQ,uBAAyB,EAAG,EAAuB,YAAY,GAAO,oCAAqC,CAAY,EACrJ,kBAAmB,GAAQ,mBAAqB,GAAwB,oBACxE,yBAA0B,GAAQ,2BAC7B,EAAG,GAAuB,gCAAgC,CAAE,UAAW,EAAmB,UAAW,cAAe,GAAe,QAAQ,OAAQ,CAAC,EACzJ,gBAAiB,GAAQ,iBAAmB,CACxC,CACI,SAAU,iBACV,iBAAkB,CAAC,IAAQ,EAAI,oBAAoB,gBAAgB,IAC9D,MAAO,IAAY,MAAM,EAAO,0BAA0B,GAAS,UAAY,CAAC,CAAC,EAAE,GACxF,OAAQ,IAAI,GAAO,iBACvB,EACA,CACI,SAAU,oBACV,iBAAkB,CAAC,IAAQ,EAAI,oBAAoB,mBAAmB,IAAM,UAAa,CAAC,IAC1F,OAAQ,IAAI,GAAO,YACvB,CACJ,EACA,YAAa,GAAQ,cAAgB,EAAG,EAAuB,YAAY,GAAmB,gCAAiC,CAAM,EACrI,OAAQ,GAAQ,SACX,EAAG,EAAuB,YAAY,EAAkB,2BAA4B,IAAK,EAAkB,mCAAoC,CAAa,CAAC,EAClK,eAAgB,GAAoB,gBAAgB,OAAO,GAAQ,gBAAkB,CAAqB,EAC1G,UAAW,GAAQ,YACd,EAAG,EAAuB,YAAY,IAChC,GAAmB,+BACtB,QAAS,UAAa,MAAM,EAAsB,GAAG,WAAa,GAAa,kBACnF,EAAG,CAAM,EACb,OAAQ,GAAQ,QAAU,GAAY,KAAK,KAAK,KAAM,QAAQ,EAC9D,gBAAiB,GAAQ,iBAAmB,GAAoB,gBAChE,qBAAsB,GAAQ,uBAAyB,EAAG,EAAuB,YAAY,EAAkB,2CAA4C,CAAY,EACvK,gBAAiB,GAAQ,kBAAoB,EAAG,EAAuB,YAAY,EAAkB,sCAAuC,CAAY,EACxJ,eAAgB,GAAQ,iBAAmB,EAAG,EAAuB,YAAY,GAAuB,2BAA4B,CAAY,CACpJ,GAEI,oBAAmB,qBCjE3B,OAAO,eAAe,GAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EACpD,gCAAuC,qCAAyC,OACxF,IAAM,GAAoC,CAAC,IAAkB,CACzD,IAAuC,gBAAjC,EACsC,uBAAxC,EAC6B,YAA7B,GAD0B,EAE9B,MAAO,CACH,iBAAiB,CAAC,EAAgB,CAC9B,IAAM,EAAQ,EAAiB,UAAU,CAAC,IAAW,EAAO,WAAa,EAAe,QAAQ,EAChG,GAAI,IAAU,GACV,EAAiB,KAAK,CAAc,EAGpC,OAAiB,OAAO,EAAO,EAAG,CAAc,GAGxD,eAAe,EAAG,CACd,OAAO,GAEX,yBAAyB,CAAC,EAAwB,CAC9C,EAA0B,GAE9B,sBAAsB,EAAG,CACrB,OAAO,GAEX,cAAc,CAAC,EAAa,CACxB,EAAe,GAEnB,WAAW,EAAG,CACV,OAAO,EAEf,GAEI,qCAAoC,GAC5C,IAAM,GAA+B,CAAC,IAAW,CAC7C,MAAO,CACH,gBAAiB,EAAO,gBAAgB,EACxC,uBAAwB,EAAO,uBAAuB,EACtD,YAAa,EAAO,YAAY,CACpC,GAEI,gCAA+B,qBCzCvC,OAAO,eAAe,GAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EACpD,4BAAgC,OACxC,IAAM,QACA,QACA,OACA,QACA,GAA2B,CAAC,EAAe,IAAe,CAC5D,IAAM,EAAyB,OAAO,QAAQ,EAAG,GAAyB,oCAAoC,CAAa,GAAI,EAAG,GAAgB,kCAAkC,CAAa,GAAI,EAAG,GAAgB,sCAAsC,CAAa,GAAI,EAAG,GAAiC,mCAAmC,CAAa,CAAC,EAEpW,OADA,EAAW,QAAQ,CAAC,IAAc,EAAU,UAAU,CAAsB,CAAC,EACtE,OAAO,OAAO,GAAgB,EAAG,GAAyB,wCAAwC,CAAsB,GAAI,EAAG,GAAgB,6BAA6B,CAAsB,GAAI,EAAG,GAAgB,iCAAiC,CAAsB,GAAI,EAAG,GAAiC,8BAA8B,CAAsB,CAAC,GAEhX,4BAA2B,oBCXnC,OAAO,eAAe,GAAS,aAAc,CAAE,MAAO,EAAK,CAAC,EACpD,aAAoB,YAAgB,OAC5C,IAAM,QACA,QACA,QACA,QACA,QACA,QACA,QACA,QACA,QACA,QACA,OACN,OAAO,eAAe,GAAS,WAAY,CAAE,WAAY,GAAM,IAAK,QAAS,EAAG,CAAE,OAAO,GAAgB,OAAU,CAAC,EACpH,IAAM,OACA,OACA,QACA,QACN,MAAM,WAAkB,GAAgB,MAAO,CAC3C,OACA,WAAW,KAAK,GAAgB,CAC5B,IAAM,GAAa,EAAG,GAAgB,kBAAkB,GAAiB,CAAC,CAAC,EAC3E,MAAM,CAAS,EACf,KAAK,WAAa,EAClB,IAAM,GAAa,EAAG,GAAqB,iCAAiC,CAAS,EAC/E,GAAa,EAAG,GAAwB,wBAAwB,CAAS,EACzE,GAAa,EAAG,GAAmB,oBAAoB,CAAS,EAChE,GAAa,EAAG,GAAkB,qBAAqB,CAAS,EAChE,GAAa,EAAG,GAAyB,yBAAyB,CAAS,EAC3E,GAAa,EAAG,GAAsB,uBAAuB,CAAS,EACtE,GAAa,EAAG,GAAyB,6BAA6B,CAAS,EAC/E,GAAa,EAAG,GAAoB,0BAA0B,EAAW,GAAe,YAAc,CAAC,CAAC,EAC9G,KAAK,OAAS,EACd,KAAK,gBAAgB,KAAK,EAAG,GAAS,sBAAsB,KAAK,MAAM,CAAC,EACxE,KAAK,gBAAgB,KAAK,EAAG,GAAwB,oBAAoB,KAAK,MAAM,CAAC,EACrF,KAAK,gBAAgB,KAAK,EAAG,GAAmB,gBAAgB,KAAK,MAAM,CAAC,EAC5E,KAAK,gBAAgB,KAAK,EAAG,GAA4B,wBAAwB,KAAK,MAAM,CAAC,EAC7F,KAAK,gBAAgB,KAAK,EAAG,GAAyB,qBAAqB,KAAK,MAAM,CAAC,EACvF,KAAK,gBAAgB,KAAK,EAAG,GAAoB,iBAAiB,KAAK,MAAM,CAAC,EAC9E,KAAK,gBAAgB,KAAK,EAAG,GAAiC,6BAA6B,KAAK,MAAM,CAAC,EACvG,KAAK,gBAAgB,KAAK,EAAG,GAAO,wCAAwC,KAAK,OAAQ,CACrF,iCAAkC,GAAyB,2CAC3D,+BAAgC,MAAO,IAAW,IAAI,GAAO,8BAA8B,CACvF,iBAAkB,EAAO,WAC7B,CAAC,CACL,CAAC,CAAC,EACF,KAAK,gBAAgB,KAAK,EAAG,GAAO,sBAAsB,KAAK,MAAM,CAAC,EAE1E,OAAO,EAAG,CACN,MAAM,QAAQ,EAEtB,CACQ,aAAY,oBCnDpB,IAAI,MACA,MACA,QACA,OACA,OACA,OACA,QACA,QACA,OAEJ,MAAM,UAA0B,EAAa,QACxC,aAAa,EACb,GAAG,GAAmB,YAAY,EAClC,EAAE,QAAS,CAAC,EAAS,EAAI,EAAQ,EAAG,CACrC,MAAO,CAAC,GAAmB,kBAAkB,EAAQ,EAAQ,iCAAiC,CAAC,CAAC,EACnG,EACI,EAAE,mCAAoC,aAAc,CAAC,CAAC,EACtD,EAAE,YAAa,mBAAmB,EAClC,GAAG,EAAU,WAAW,EACxB,MAAM,CAAE,CACb,CAEA,MAAM,UAAyC,EAAa,QACvD,aAAa,EACb,GAAG,GAAmB,YAAY,EAClC,EAAE,QAAS,CAAC,EAAS,EAAI,EAAQ,EAAG,CACrC,MAAO,CAAC,GAAmB,kBAAkB,EAAQ,EAAQ,iCAAiC,CAAC,CAAC,EACnG,EACI,EAAE,mCAAoC,4BAA6B,CAAC,CAAC,EACrE,EAAE,YAAa,kCAAkC,EACjD,GAAG,EAAU,0BAA0B,EACvC,MAAM,CAAE,CACb,CAEA,IAAM,GAAW,CACb,oBACA,kCACJ,EACA,MAAM,WAAY,EAAU,SAAU,CACtC,CACA,EAAa,uBAAuB,GAAU,EAAG,EAEjD,IAAM,GAAkC,CAAC,IAAoB,CACzD,GAAI,OAAO,GAAiB,MAAQ,SAAU,CAC1C,IAAM,EAAgB,EAAgB,IAAI,MAAM,GAAG,EACnD,GAAI,EAAc,OAAS,GAAK,EAAc,KAAO,GACjD,OAAO,EAAc,GAG7B,QAEE,GAAgB,MAAO,EAAS,EAAe,EAA0B,EAAe,CAAC,IAAM,CACjG,IAAM,EAAS,OAAO,IAAY,WAAa,MAAM,EAAQ,EAAI,EAC3D,EAAe,OAAO,IAAkB,WAAa,MAAM,EAAc,EAAI,EAC/E,EAAmB,GACjB,EAAiB,GAAU,IAAiB,EAAmB,MAAM,GAAqB,yBAAyB,CAAY,EAAE,GAEvI,OADA,GAA0B,QAAQ,qCAAsC,sBAAuB,GAAG,uCAA6C,GAAG,wBAAoC,GAAG,2DAA0E,EAC5P,GAEL,GAA0B,CAAC,EAAY,IAAc,CACvD,IAAI,EACA,EACJ,MAAO,OAAO,EAAa,IAAW,CAElC,GADA,EAAqB,EACjB,CAAC,EAAW,CACZ,IAAQ,SAAS,GAAY,oBAAoB,OAAQ,UAAU,GAAY,oBAAoB,QAAS,SAAQ,iBAAiB,GAAY,oBAAoB,eAAgB,2BAA0B,iBAAiB,GAAY,oBAAoB,gBAAoB,EAC9Q,GAAiB,MAAM,GAAc,EAAQ,GAAY,oBAAoB,OAAQ,EAA0B,CACjH,SACA,SACJ,CAAC,EACK,GAA6B,CAAC,GAAK,CAAc,EACvD,EAAY,IAAI,EAAU,IACnB,EACH,iBACA,UACA,0BAA2B,IAAM,SAAY,EAC7C,OAAQ,GACR,eAAgB,GAA6B,EAAiB,OAC9D,OAAQ,CACZ,CAAC,EAEL,IAAQ,cAAa,mBAAoB,MAAM,EAAU,KAAK,IAAI,EAAkB,CAAM,CAAC,EAC3F,GAAI,CAAC,GAAe,CAAC,EAAY,aAAe,CAAC,EAAY,gBACzD,MAAU,MAAM,uDAAuD,EAAO,SAAS,EAE3F,IAAM,EAAY,GAAgC,CAAe,EAC3D,EAAc,CAChB,YAAa,EAAY,YACzB,gBAAiB,EAAY,gBAC7B,aAAc,EAAY,aAC1B,WAAY,EAAY,cACpB,EAAY,iBAAmB,CAAE,gBAAiB,EAAY,eAAgB,KAC9E,GAAa,CAAE,WAAU,CACjC,EAEA,OADA,GAAO,qBAAqB,EAAa,8BAA+B,GAAG,EACpE,IAGT,GAAyC,CAAC,EAAY,IAAc,CACtE,IAAI,EACJ,MAAO,OAAO,IAAW,CACrB,GAAI,CAAC,EAAW,CACZ,IAAQ,SAAS,GAAY,oBAAoB,OAAQ,UAAU,GAAY,oBAAoB,QAAS,SAAQ,iBAAiB,GAAY,oBAAoB,eAAgB,2BAA0B,iBAAiB,GAAY,oBAAoB,gBAAoB,EAC9Q,EAAiB,MAAM,GAAc,EAAQ,GAAY,oBAAoB,OAAQ,EAA0B,CACjH,SACA,SACJ,CAAC,EACK,EAA6B,CAAC,GAAK,CAAc,EACvD,EAAY,IAAI,EAAU,IACnB,EACH,iBACA,UACA,OAAQ,EACR,eAAgB,EAA6B,EAAiB,OAC9D,OAAQ,CACZ,CAAC,EAEL,IAAQ,cAAa,mBAAoB,MAAM,EAAU,KAAK,IAAI,EAAiC,CAAM,CAAC,EAC1G,GAAI,CAAC,GAAe,CAAC,EAAY,aAAe,CAAC,EAAY,gBACzD,MAAU,MAAM,sEAAsE,EAAO,SAAS,EAE1G,IAAM,EAAY,GAAgC,CAAe,EAC3D,EAAc,CAChB,YAAa,EAAY,YACzB,gBAAiB,EAAY,gBAC7B,aAAc,EAAY,aAC1B,WAAY,EAAY,cACpB,EAAY,iBAAmB,CAAE,gBAAiB,EAAY,eAAgB,KAC9E,GAAa,CAAE,WAAU,CACjC,EACA,GAAI,EACA,GAAO,qBAAqB,EAAa,sBAAuB,GAAG,EAGvE,OADA,GAAO,qBAAqB,EAAa,qCAAsC,GAAG,EAC3E,IAGT,GAAO,CAAC,IAAmB,CAC7B,OAAO,GAAgB,UAAU,kBAAoB,MAGnD,GAA+B,CAAC,EAAU,IAAmB,CAC/D,GAAI,CAAC,EACD,OAAO,EAEP,YAAO,cAAoC,CAAS,CAChD,WAAW,CAAC,EAAQ,CAChB,MAAM,CAAM,EACZ,QAAW,KAAiB,EACxB,KAAK,gBAAgB,IAAI,CAAa,EAGlD,GAEF,GAAwB,CAAC,EAAa,CAAC,EAAG,IAAe,GAAwB,EAAY,GAA6B,EAAU,UAAW,CAAU,CAAC,EAC1J,GAAuC,CAAC,EAAa,CAAC,EAAG,IAAe,GAAuC,EAAY,GAA6B,EAAU,UAAW,CAAU,CAAC,EACxL,GAAoC,CAAC,IAAa,CAAC,IAAU,EAAS,CACxE,YAAa,GAAsB,CAAK,EACxC,2BAA4B,GAAqC,CAAK,KACnE,CACP,CAAC,EAEO,WAAW,EAAa,QACxB,sBAAsB,GAAoB,oBAC1C,oBAAoB,EACpB,mCAAmC,EACnC,MAAM,GACN,oCAAoC,GACpC,wBAAwB,GACxB,uCAAuC,GAC/C,OAAO,UAAU,eAAe,KAAK,EAAW,WAAW,GACvD,CAAC,OAAO,UAAU,eAAe,KAAK,EAAS,WAAW,GAC1D,OAAO,eAAe,EAAS,YAAa,CACxC,WAAY,GACZ,MAAO,EAAU,SACrB,CAAC,EAEL,OAAO,KAAK,CAAS,EAAE,QAAQ,QAAS,CAAC,EAAG,CACxC,GAAI,IAAM,WAAa,CAAC,OAAO,UAAU,eAAe,KAAK,EAAS,CAAC,EAAG,EAAQ,GAAK,EAAU,GACpG,EACD,OAAO,UAAU,eAAe,KAAK,EAAW,WAAW,GACvD,CAAC,OAAO,UAAU,eAAe,KAAK,EAAS,WAAW,GAC1D,OAAO,eAAe,EAAS,YAAa,CACxC,WAAY,GACZ,MAAO,EAAU,SACrB,CAAC,EAEL,OAAO,KAAK,CAAS,EAAE,QAAQ,QAAS,CAAC,EAAG,CACxC,GAAI,IAAM,WAAa,CAAC,OAAO,UAAU,eAAe,KAAK,EAAS,CAAC,EAAG,EAAQ,GAAK,EAAU,GACpG,EACD,OAAO,UAAU,eAAe,KAAK,EAAQ,WAAW,GACpD,CAAC,OAAO,UAAU,eAAe,KAAK,EAAS,WAAW,GAC1D,OAAO,eAAe,EAAS,YAAa,CACxC,WAAY,GACZ,MAAO,EAAO,SAClB,CAAC,EAEL,OAAO,KAAK,CAAM,EAAE,QAAQ,QAAS,CAAC,EAAG,CACrC,GAAI,IAAM,WAAa,CAAC,OAAO,UAAU,eAAe,KAAK,EAAS,CAAC,EAAG,EAAQ,GAAK,EAAO,GACjG",
-  "debugId": "6DBDA97E3B7C824E64756E2164756E21",
+  "debugId": "9B1198E924ED2CF564756E2164756E21",
   "names": []
 }

package/dist/{chunk-fcqx2t0p.js → chunk-8m9kgynj.js}

@@ -3,6 +3,6 @@ class g extends Error{constructor(h,r){super(h,r);this.name="ConsoleError"}}clas
 
     export default defineCommand("my-command")
       .handle(async ({ line }) => { line("hello") })`);let i=this.byName.get(f);if(i)throw new g(`Two commands are named "${f}": ${o(i)} and ${o(r)}. A command name is how it is run, so one of `+"them could never be reached \u2014 rename one.");this.byName.set(f,r)}}get commands(){return[...this.byName.values()]}get(h){return this.byName.get(h)}suggest(h){let r=h.toLowerCase(),f=r.includes(":")?r.split(":")[0]:void 0,i=[];for(let s of this.byName.keys()){let t=s.toLowerCase();if(t.startsWith(r)||r.startsWith(t))i.push([0,s]);else if(t.includes(r)||r.includes(t))i.push([1,s]);else if(f&&t.startsWith(`${f}:`))i.push([2,s]);else if(l(t,r)<=2)i.push([3,s])}return i.sort((s,t)=>s[0]-t[0]||(s[1]<t[1]?-1:1)).slice(0,3).map(([,s])=>s)}}function o(h){return h.name?`\`${h.name}\``:"an anonymous command class"}function l(h,r){if(h===r)return 0;if(Math.abs(h.length-r.length)>2)return 99;let f=Array.from({length:r.length+1},(i,s)=>s);for(let i=1;i<=h.length;i+=1){let s=[i];for(let t=1;t<=r.length;t+=1)s[t]=Math.min(f[t]+1,s[t-1]+1,f[t-1]+(h[i-1]===r[t-1]?0:1));f=s}return f[r.length]}
-export{g as bb,w as cb};
+export{g as cb,w as db};
 
-//# debugId=DA0F5F0EB611672D64756E2164756E21
+//# debugId=4655F069B01D379064756E2164756E21

package/dist/{chunk-fcqx2t0p.js.map → chunk-8m9kgynj.js.map}

@@ -6,6 +6,6 @@
     "import type { CommandClass } from \"./Command\";\nimport { ConsoleError } from \"./errors\";\n\n/**\n * The commands an application has, and the rules about what a command may be.\n *\n * A plain class, not a container service, and that is a decision rather than an\n * omission. `QueueManager` and `Scheduler` are bound and populated during boot\n * because the server needs them: a dispatch or a tick can arrive at any moment\n * after boot finishes. A command registry has exactly one consumer — `gemi run`,\n * which builds one, uses it, and exits. Making it a boot step would import every\n * file under `app/commands` into every `gemi dev`, every `gemi start` and every\n * deployed server process, on every start, for code no request will ever reach.\n * That is the cost `bin/check-models.ts` argues against at length, and there is\n * no benefit here to weigh against it.\n *\n * What the class is for is the rules below, and the `commands` getter — the same\n * seam `QueueManager.registeredJobs` and `Scheduler.jobs` exist to give a test:\n * what was actually taken, rather than what a walk would find if asked again.\n */\nexport class CommandRegistry {\n  private readonly byName = new Map<string, CommandClass>();\n\n  /**\n   * @throws ConsoleError naming the offending class for a command that cannot\n   * be run.\n   *\n   * Every refusal here is loud and immediate. There is a human at a terminal,\n   * and every one of these is a mistake in the application's own source that\n   * they are better off seeing now than after the command they meant to run\n   * silently did not exist.\n   *\n   * `ConsoleError` rather than a plain `Error` so the runner prints the message\n   * alone. These are sentences with the fix named in them, and burying one under\n   * `at new CommandRegistry (…)` plus the runner's own frames points the reader\n   * at framework code when the mistake is in their `app/commands`.\n   */\n  constructor(commands: CommandClass[]) {\n    for (const command of commands) {\n      const name = command.commandName;\n\n      if (!name || name === \"unset\") {\n        throw new ConsoleError(\n          `${describe(command)} does not declare a command name, so there is ` +\n            `no name to run it by. Commands are written with \\`defineCommand\\`:` +\n            `\\n\\n    export default defineCommand(\"my-command\")\\n` +\n            `      .handle(async ({ line }) => { line(\"hello\") })`,\n        );\n      }\n\n      const existing = this.byName.get(name);\n      if (existing) {\n        // Deliberately a hard error, where `QueueManager.useJobs` and\n        // `Scheduler.start` take the first and warn. Those two must keep a\n        // server booting, so running one of two identically-named jobs beats\n        // refusing to start at all. Here there is no boot to protect and a\n        // person is waiting: running the wrong one of two commands called\n        // `db:seed` is strictly worse than running neither and being told why.\n        throw new ConsoleError(\n          `Two commands are named \"${name}\": ${describe(existing)} and ` +\n            `${describe(command)}. A command name is how it is run, so one of ` +\n            `them could never be reached — rename one.`,\n        );\n      }\n\n      this.byName.set(name, command);\n    }\n  }\n\n  /** What was actually taken. */\n  get commands(): CommandClass[] {\n    return [...this.byName.values()];\n  }\n\n  get(name: string): CommandClass | undefined {\n    return this.byName.get(name);\n  }\n\n  /**\n   * The nearest names to something that did not match, for the \"did you mean\"\n   * line. Prefix matches first, then substring, then names sharing a namespace —\n   * `db:sed` should find `db:seed`, and a typo in a namespace is the common case.\n   */\n  suggest(name: string): string[] {\n    const needle = name.toLowerCase();\n    const namespace = needle.includes(\":\") ? needle.split(\":\")[0] : undefined;\n    const scored: Array<[number, string]> = [];\n\n    for (const candidate of this.byName.keys()) {\n      const haystack = candidate.toLowerCase();\n      if (haystack.startsWith(needle) || needle.startsWith(haystack)) {\n        scored.push([0, candidate]);\n      } else if (haystack.includes(needle) || needle.includes(haystack)) {\n        scored.push([1, candidate]);\n      } else if (namespace && haystack.startsWith(`${namespace}:`)) {\n        scored.push([2, candidate]);\n      } else if (editDistance(haystack, needle) <= 2) {\n        scored.push([3, candidate]);\n      }\n    }\n\n    return scored\n      .sort((a, b) => a[0] - b[0] || (a[1] < b[1] ? -1 : 1))\n      .slice(0, 3)\n      .map(([, candidate]) => candidate);\n  }\n}\n\nfunction describe(command: CommandClass): string {\n  return command.name ? `\\`${command.name}\\`` : \"an anonymous command class\";\n}\n\n/** Small enough that a dependency would cost more than it saves. */\nfunction editDistance(a: string, b: string): number {\n  if (a === b) return 0;\n  if (Math.abs(a.length - b.length) > 2) return 99;\n\n  let previous = Array.from({ length: b.length + 1 }, (_, index) => index);\n\n  for (let i = 1; i <= a.length; i += 1) {\n    const current = [i];\n    for (let j = 1; j <= b.length; j += 1) {\n      current[j] = Math.min(\n        previous[j]! + 1,\n        current[j - 1]! + 1,\n        previous[j - 1]! + (a[i - 1] === b[j - 1] ? 0 : 1),\n      );\n    }\n    previous = current;\n  }\n\n  return previous[b.length]!;\n}\n"
   ],
   "mappings": ";AAaO,MAAM,UAAqB,KAAM,CACtC,WAAW,CAAC,EAAiB,EAA+B,CAC1D,MAAM,EAAS,CAAO,EACtB,KAAK,KAAO,eAEhB,CCEO,MAAM,CAAgB,CACV,OAAS,IAAI,IAgB9B,WAAW,CAAC,EAA0B,CACpC,QAAW,KAAW,EAAU,CAC9B,IAAM,EAAO,EAAQ,YAErB,GAAI,CAAC,GAAQ,IAAS,QACpB,MAAM,IAAI,EACR,GAAG,EAAS,CAAO;AAAA;AAAA;AAAA,qDAIrB,EAGF,IAAM,EAAW,KAAK,OAAO,IAAI,CAAI,EACrC,GAAI,EAOF,MAAM,IAAI,EACR,2BAA2B,OAAU,EAAS,CAAQ,SACjD,EAAS,CAAO,iDACnB,gDACJ,EAGF,KAAK,OAAO,IAAI,EAAM,CAAO,MAK7B,SAAQ,EAAmB,CAC7B,MAAO,CAAC,GAAG,KAAK,OAAO,OAAO,CAAC,EAGjC,GAAG,CAAC,EAAwC,CAC1C,OAAO,KAAK,OAAO,IAAI,CAAI,EAQ7B,OAAO,CAAC,EAAwB,CAC9B,IAAM,EAAS,EAAK,YAAY,EAC1B,EAAY,EAAO,SAAS,GAAG,EAAI,EAAO,MAAM,GAAG,EAAE,GAAK,OAC1D,EAAkC,CAAC,EAEzC,QAAW,KAAa,KAAK,OAAO,KAAK,EAAG,CAC1C,IAAM,EAAW,EAAU,YAAY,EACvC,GAAI,EAAS,WAAW,CAAM,GAAK,EAAO,WAAW,CAAQ,EAC3D,EAAO,KAAK,CAAC,EAAG,CAAS,CAAC,EACrB,QAAI,EAAS,SAAS,CAAM,GAAK,EAAO,SAAS,CAAQ,EAC9D,EAAO,KAAK,CAAC,EAAG,CAAS,CAAC,EACrB,QAAI,GAAa,EAAS,WAAW,GAAG,IAAY,EACzD,EAAO,KAAK,CAAC,EAAG,CAAS,CAAC,EACrB,QAAI,EAAa,EAAU,CAAM,GAAK,EAC3C,EAAO,KAAK,CAAC,EAAG,CAAS,CAAC,EAI9B,OAAO,EACJ,KAAK,CAAC,EAAG,IAAM,EAAE,GAAK,EAAE,KAAO,EAAE,GAAK,EAAE,GAAK,GAAK,EAAE,EACpD,MAAM,EAAG,CAAC,EACV,IAAI,GAAI,KAAe,CAAS,EAEvC,CAEA,SAAS,CAAQ,CAAC,EAA+B,CAC/C,OAAO,EAAQ,KAAO,KAAK,EAAQ,SAAW,6BAIhD,SAAS,CAAY,CAAC,EAAW,EAAmB,CAClD,GAAI,IAAM,EAAG,MAAO,GACpB,GAAI,KAAK,IAAI,EAAE,OAAS,EAAE,MAAM,EAAI,EAAG,MAAO,IAE9C,IAAI,EAAW,MAAM,KAAK,CAAE,OAAQ,EAAE,OAAS,CAAE,EAAG,CAAC,EAAG,IAAU,CAAK,EAEvE,QAAS,EAAI,EAAG,GAAK,EAAE,OAAQ,GAAK,EAAG,CACrC,IAAM,EAAU,CAAC,CAAC,EAClB,QAAS,EAAI,EAAG,GAAK,EAAE,OAAQ,GAAK,EAClC,EAAQ,GAAK,KAAK,IAChB,EAAS,GAAM,EACf,EAAQ,EAAI,GAAM,EAClB,EAAS,EAAI,IAAO,EAAE,EAAI,KAAO,EAAE,EAAI,GAAK,EAAI,EAClD,EAEF,EAAW,EAGb,OAAO,EAAS,EAAE",
-  "debugId": "DA0F5F0EB611672D64756E2164756E21",
+  "debugId": "4655F069B01D379064756E2164756E21",
   "names": []
 }

package/dist/{chunk-m8a80sgn.js → chunk-8x0q9h0j.js}

@@ -1,9 +1,9 @@
 // @bun
-import{oa as w,pa as P,qa as R,ra as b}from"./chunk-a22h5cby.js";import{ua as K,va as _,wa as L,xa as A}from"./chunk-epvpmakp.js";import{ya as I}from"./chunk-r3v2cnrj.js";import{Aa as E,za as T}from"./chunk-9983zmhx.js";var i=["gemi","gemi/client","gemi/http","gemi/app","gemi/facades","gemi/email","gemi/kernel","gemi/services","gemi/i18n","gemi/dictionary"];function O(q){return q==="gemi"||q.startsWith("gemi/")}import{parseAstAsync as h}from"vite";var V="virtual:gemi-dict/",x="\x00virtual:gemi-dict/",f=new Set(["gemi/dictionary","gemi/client","gemi/i18n"]),y="gemi/dictionary";function B(){let q=new Map;return{name:"gemi-plugin-dictionary",enforce:"post",resolveId(H){if(H.startsWith(V))return`\x00${H}`;return null},async load(H){if(!H.startsWith(x))return null;let Q=H.slice(x.length),W=Q.lastIndexOf("/"),J=Q.slice(0,W),Y=Q.slice(W+1),$=q.get(J);if(!$){let M=g(J);if(M){try{await this.load({id:M})}catch{}$=q.get(J)}}if(!$)return this.error(`No dictionary registered for "${J}". If this persists, restart the dev server.`),null;let G=_($.translations,Y,$.locales);return`export default ${JSON.stringify(G)};
+import{pa as w,qa as P,ra as R,sa as b}from"./chunk-bwg7genv.js";import{va as K,wa as _,xa as L,ya as A}from"./chunk-mvd4mc8p.js";import{za as I}from"./chunk-7txst143.js";import{Aa as T,Ba as E}from"./chunk-zzgzz4hb.js";var i=["gemi","gemi/client","gemi/http","gemi/app","gemi/facades","gemi/email","gemi/kernel","gemi/services","gemi/i18n","gemi/dictionary"];function O(q){return q==="gemi"||q.startsWith("gemi/")}import{parseAstAsync as h}from"vite";var V="virtual:gemi-dict/",x="\x00virtual:gemi-dict/",f=new Set(["gemi/dictionary","gemi/client","gemi/i18n"]),y="gemi/dictionary";function B(){let q=new Map;return{name:"gemi-plugin-dictionary",enforce:"post",resolveId(H){if(H.startsWith(V))return`\x00${H}`;return null},async load(H){if(!H.startsWith(x))return null;let Q=H.slice(x.length),W=Q.lastIndexOf("/"),J=Q.slice(0,W),Y=Q.slice(W+1),$=q.get(J);if(!$){let M=g(J);if(M){try{await this.load({id:M})}catch{}$=q.get(J)}}if(!$)return this.error(`No dictionary registered for "${J}". If this persists, restart the dev server.`),null;let G=_($.translations,Y,$.locales);return`export default ${JSON.stringify(G)};
 `},async transform(H,Q){if(!H.includes("defineDictionary"))return null;if(Q.startsWith("\x00")||Q.includes("/node_modules/"))return null;let W=await h(H),J=new Set;for(let Z of W.body){if(Z.type!=="ImportDeclaration")continue;if(!f.has(Z.source?.value))continue;for(let z of Z.specifiers??[])if(z.type==="ImportSpecifier"&&z.imported?.name==="defineDictionary")J.add(z.local.name)}let Y=[],$=0;if(X(W,(Z)=>{if(Z.type!=="CallExpression")return;let z=Z.callee;if(z?.type==="Identifier"&&J.has(z.name)){Y.push(Z);return}if((z?.type==="Identifier"?z.name:z?.type==="MemberExpression"&&!z.computed?z.property?.name:void 0)==="defineDictionary")$++}),$>0&&p(W,"defineDictionary"))$=0;if($>0)this.warn(`${Q}: ${$} defineDictionary() call(s) could not be traced to an import of "gemi/dictionary", "gemi/client" or "gemi/i18n", so their locales were left inline and will all ship to the browser. Import defineDictionary directly by name rather than through a namespace import or a local re-export.`);if(Y.length===0)return null;let G=new T(H),M=!1;for(let Z of Y){if(Z.arguments?.length<1||Z.arguments?.length>2)this.error({message:"defineDictionary() takes an object literal and an optional options object.",pos:Z.start});let z=m(Z.arguments[0],(j)=>this.error({message:j,pos:Z.arguments[0]?.start??Z.start})),F=v(Z.arguments[1],(j)=>this.error({message:j,pos:Z.arguments[1]?.start??Z.start})),D=A(z),C=`${Buffer.from(Q).toString("base64url")}/${D}`,N=K(z,F);if(N.length===0)this.error({message:'defineDictionary() declares no locales \u2014 every key needs at least one "<locale>": "<string>" entry.',pos:Z.start});if(!F){let j=L(z);if(j)this.error({message:`defineDictionary() cannot infer a source language. Key "${j.againstKey}" lists "${j.againstFirst}" first but "${j.key}" lists "${j.first}" first, so the locale every key falls back to depends on the order `+"they are written in \u2014 moving one key would change what language a reader sees. "+'Pass { sourceLocale: "<locale>" } as the second argument to pin it.',pos:Z.start})}q.set(C,{id:D,locales:N,translations:z});let S=N.map((j)=>`${JSON.stringify(j)}:()=>import(${JSON.stringify(`${V}${C}/${j}`)})`).join(",");G.overwrite(Z.start,Z.end,`__gemi_dict__(${JSON.stringify(D)},{${S}})`),M=!0}if(!M)return null;return G.append(`
 import { __gemi_dict__ } from ${JSON.stringify(y)};
 `),{code:G.toString(),map:G.generateMap({hires:!0})}}}}function g(q){let H=q.indexOf("/");if(H===-1)return null;try{return Buffer.from(q.slice(0,H),"base64url").toString("utf8")}catch{return null}}function m(q,H){if(q?.type!=="ObjectExpression")H("defineDictionary() needs an inline object literal \u2014 it is read at build time, so a variable or spread cannot be resolved.");let Q={};for(let W of q.properties){let J=U(W);if(J===null)H("defineDictionary() keys must be plain string keys \u2014 computed keys and spreads cannot be read at build time.");if(W.value?.type!=="ObjectExpression")H(`defineDictionary() entry "${J}" must be an object of "<locale>": "<string>" pairs.`);let Y={};for(let $ of W.value.properties){let G=U($);if(G===null)H(`defineDictionary() entry "${J}" has a locale key that cannot be read at build time.`);let M=$.value;if(M?.type!=="Literal"||typeof M.value!=="string")H(`defineDictionary() entry "${J}" locale "${G}" must be a string literal. Use {{param}} interpolation instead of a template literal or a function.`);Y[G]=M.value}Q[J]=Y}return Q}function v(q,H){if(q===void 0)return;if(q.type!=="ObjectExpression")H("defineDictionary() options must be an inline object literal \u2014 it is read at build time.");for(let Q of q.properties){if(U(Q)!=="sourceLocale")continue;let W=Q.value;if(W?.type!=="Literal"||typeof W.value!=="string")H("defineDictionary() sourceLocale must be a string literal.");return W.value}return}function p(q,H){let Q=!1;return X(q,(W)=>{if(Q)return;if(W.type==="FunctionDeclaration"&&W.id?.name===H)Q=!0;if(W.type==="VariableDeclarator"&&W.id?.name===H)Q=!0}),Q}function U(q){if(q?.type!=="Property"||q.computed)return null;if(q.key?.type==="Identifier")return q.key.name;if(q.key?.type==="Literal"&&typeof q.key.value==="string")return q.key.value;return null}function X(q,H){if(q===null||typeof q!=="object")return;if(Array.isArray(q)){for(let Q of q)X(Q,H);return}if(typeof q.type==="string")H(q);for(let Q of Object.keys(q)){if(Q==="parent")continue;let W=q[Q];if(W&&typeof W==="object")X(W,H)}}import{mkdir as u,writeFile as c}from"fs/promises";import{dirname as r,join as t}from"path";function k(q){let H;return{name:"gemi-plugin-asset-base",config:(Q,W)=>W.command==="build"&&q?{base:q}:void 0,configResolved(Q){H=Q},async writeBundle(Q){if(!H||H.command!=="build"||H.build.ssr||!Q.dir)return;let W=t(Q.dir,P);await u(r(W),{recursive:!0}),await c(W,`${JSON.stringify({assetBase:d(H.base)})}
 `)}}}function d(q){return q.startsWith("/")||/^[a-z][a-z\d+.-]*:\/\//i.test(q)?R(q):w}var n=async()=>{let q=await I(process.cwd()),{plugins:H=[],...Q}=q.vite??{},W=b(q.assetBase);return[{name:"gemi-plugin-config",enforce:"pre",config:async(J,Y)=>{let $=`${process.cwd()}/app`;return{assetsInclude:["/public"],build:{manifest:!0,ssrEmitAssets:!0,sourcemap:!0,rollupOptions:{input:Array.from(JSON.parse(process.env.GEMI_INPUT??"[]")),preserveEntrySignatures:"strict",...Y.isSsrBuild?{external:O}:{}}},resolve:{alias:{"@/app":$}}}}},{name:"gemi-plugin-user-config",config:()=>Q},k(W),E(),{name:"gemi-plugin-hot-reload",handleHotUpdate({server:J,modules:Y}){if(Y?.[0]?.id?.includes("/app/http/"))return[]}},...H,B()]},Mq=n;
-export{i as ma,Mq as na};
+export{i as na,Mq as oa};
 
-//# debugId=4527C0CB7F9ACAC364756E2164756E21
+//# debugId=886201980DC0533B64756E2164756E21

package/dist/{chunk-m8a80sgn.js.map → chunk-8x0q9h0j.js.map}

@@ -8,6 +8,6 @@
     "import type { PluginOption } from \"vite\";\nimport { loadGemiConfig } from \"../config/load\";\nimport { isGemiExternal } from \"../internal/gemiExternals\";\nimport { gemiDictionaryPlugin } from \"./dictionaryPlugin\";\nimport { gemiAssetBasePlugin } from \"./assetBasePlugin\";\nimport { gemiIslandPlugin } from \"./islandPlugin\";\nimport { resolveAssetBase } from \"../config/assetBase\";\n\n// Async so it can load `gemi.config.ts` before returning the plugin list. Both\n// consumers run under Bun (the CLI's `build()` and dev's `createServer`, spawned\n// via `bun`), so the config's TypeScript imports directly. Vite accepts a\n// `Promise<PluginOption[]>` as an entry in its `plugins` array, so gemi passes\n// `plugins: [gemi()]` itself — the app's own Vite plugins (e.g. React) come from\n// `gemi.config.ts` and are appended below, so there is no `vite.config.mjs`.\nconst gemi = async (): Promise<PluginOption[]> => {\n  const userConfig = await loadGemiConfig(process.cwd());\n  const { plugins: userVitePlugins = [], ...userViteConfig } =\n    userConfig.vite ?? {};\n  // Resolved here, before any build starts, so a malformed base fails the\n  // build instead of shipping a bundle the document cannot link.\n  const assetBase = resolveAssetBase(userConfig.assetBase);\n\n  return [\n    {\n      name: \"gemi-plugin-config\",\n      enforce: \"pre\",\n      config: async (_config, env) => {\n        const appPath = `${process.cwd()}/app`;\n        return {\n          assetsInclude: [\"/public\"],\n          build: {\n            manifest: true,\n            ssrEmitAssets: true,\n            // Emit source maps for both the client and SSR view builds so\n            // browser devtools and server stack traces map back to app source.\n            sourcemap: true,\n            rollupOptions: {\n              // Island modules are not listed: `gemiIslandPlugin` emits each\n              // one (and the island runtime) as a client entry when it sees\n              // the `island()` call that uses it.\n              input: Array.from<string>(JSON.parse(process.env.GEMI_INPUT ?? \"[]\")),\n              // Each view is a build entry, but the app never imports them\n              // statically — the client router pulls them in via `import.meta.glob`\n              // (a runtime dynamic import). Rolldown's default entry-signature\n              // handling therefore sees a view's `export default` as unused and\n              // tree-shakes it. For a plain view the component is hoisted into the\n              // shared bundle so it still renders, but a view with a module-scope\n              // `lazy(() => import(...))` keeps its own chunk alive as a side\n              // effect while the \"unused\" default export is dropped — leaving a\n              // hollow chunk whose default is `undefined`. Hydration then renders\n              // `<undefined/>` → React #306 and the whole page unmounts to blank.\n              // `\"strict\"` forces every entry to preserve its exact exports (a\n              // facade chunk is emitted if needed), so every view keeps its\n              // default regardless of how the router loads it.\n              preserveEntrySignatures: \"strict\",\n              // For the SSR build, externalize `gemi` (a linked package) and all\n              // its subpaths. Otherwise the bundler compiles its own copy of\n              // gemi's module-level singletons (`RouteStateContext`,\n              // `I18nContext`, the `useLocale`/`useRouteData` hooks, ...) into a\n              // shared chunk — a *different* instance than the running server's\n              // `Root` provider — so `useRouteData()` reads the empty default and\n              // SSR crashes on `i18n.currentLocale`. Externalizing makes the\n              // built view chunks `import ... from \"gemi/*\"` at runtime, resolving\n              // to the one instance shared with the renderer. (Vite 8's\n              // `ssr.external` does not externalize for the build, so this is done\n              // at the rollup level.) Mirrors `server/httpDev.ts`'s dev config\n              // via the shared `internal/gemiExternals` source of truth.\n              ...(env.isSsrBuild ? { external: isGemiExternal } : {}),\n            },\n          },\n          resolve: {\n            alias: {\n              \"@/app\": appPath,\n            },\n          },\n        };\n      },\n    },\n    // The app's `gemi.config.ts` `vite` config (minus `plugins`, which are\n    // appended below) as its own `config` hook. Vite deep-merges every plugin's\n    // `config` result, so the app config layers cleanly on top of gemi's base\n    // without a manual merge (and without pulling `vite`'s `mergeConfig` into\n    // this bundle).\n    {\n      name: \"gemi-plugin-user-config\",\n      config: () => userViteConfig,\n    },\n    // After the app's `vite` config, so an explicit `assetBase` (or\n    // `GEMI_ASSET_BASE`) wins over a `vite.base` set there.\n    gemiAssetBasePlugin(assetBase),\n    gemiIslandPlugin(),\n    {\n      name: \"gemi-plugin-hot-reload\",\n      handleHotUpdate({ server, modules }) {\n        if (modules?.[0]?.id?.includes(\"/app/http/\")) {\n          // server.ws.send({\n          //   type: \"custom\",\n          //   event: \"http-reload\",\n          //   data: {\n          //     id: modules[0].id,\n          //   },\n          // });\n\n          return [];\n        }\n      },\n    },\n    // App-provided Vite plugins run after gemi's own.\n    ...userVitePlugins,\n    // Last, and `enforce: \"post\"` on top of that: it parses JavaScript, so TS\n    // and JSX have to be gone by the time it sees a module.\n    gemiDictionaryPlugin(),\n  ];\n};\n\nexport default gemi;\n"
   ],
   "mappings": ";8OAqBO,FAAM,JAA2B,LACtC,OACA,cACA,YACA,WACA,eACA,aACA,cACA,gBACA,YAIA,iBACF,EAIO,SAAS,CAAc,CAAC,EAAqB,CAClD,OAAO,IAAO,QAAU,EAAG,WAAW,OAAO,ECvC/C,wBAAS,aAiCT,IAAM,EAAiB,qBACjB,EAAkB,yBAGlB,EAAqB,IAAI,IAAI,CAAC,kBAAmB,cAAe,WAAW,CAAC,EAU5E,EAAiB,kBAWhB,SAAS,CAAoB,EAAW,CAU7C,IAAM,EAAY,IAAI,IAEtB,MAAO,CACL,KAAM,yBAGN,QAAS,OAET,SAAS,CAAC,EAAI,CACZ,GAAI,EAAG,WAAW,CAAc,EAC9B,MAAO,OAAK,IAEd,OAAO,WAGH,KAAI,CAAC,EAAI,CACb,GAAI,CAAC,EAAG,WAAW,CAAe,EAChC,OAAO,KAGT,IAAM,EAAO,EAAG,MAAM,EAAgB,MAAM,EACtC,EAAQ,EAAK,YAAY,GAAG,EAC5B,EAAa,EAAK,MAAM,EAAG,CAAK,EAChC,EAAS,EAAK,MAAM,EAAQ,CAAC,EAE/B,EAAQ,EAAU,IAAI,CAAU,EACpC,GAAI,CAAC,EAAO,CAIV,IAAM,EAAW,EAAe,CAAU,EAC1C,GAAI,EAAU,CACZ,GAAI,CACF,MAAM,KAAK,KAAK,CAAE,GAAI,CAAS,CAAC,EAChC,KAAM,EAGR,EAAQ,EAAU,IAAI,CAAU,GAIpC,GAAI,CAAC,EAIH,OAHA,KAAK,MACH,iCAAiC,+CACnC,EACO,KAGT,IAAM,EAAU,EAAc,EAAM,aAAc,EAAQ,EAAM,OAAO,EACvE,MAAO,kBAAkB,KAAK,UAAU,CAAO;AAAA,QAG3C,UAAS,CAAC,EAAM,EAAI,CAExB,GAAI,CAAC,EAAK,SAAS,kBAAkB,EACnC,OAAO,KAET,GAAI,EAAG,WAAW,MAAI,GAAK,EAAG,SAAS,gBAAgB,EACrD,OAAO,KAGT,IAAM,EAAM,MAAM,EAAc,CAAI,EAE9B,EAAa,IAAI,IACvB,QAAW,KAAQ,EAAI,KAAe,CACpC,GAAI,EAAK,OAAS,oBAAqB,SACvC,GAAI,CAAC,EAAmB,IAAI,EAAK,QAAQ,KAAK,EAAG,SACjD,QAAW,KAAQ,EAAK,YAAc,CAAC,EACrC,GACE,EAAK,OAAS,mBACd,EAAK,UAAU,OAAS,mBAExB,EAAW,IAAI,EAAK,MAAM,IAAI,EAIpC,IAAM,EAAe,CAAC,EAClB,EAAa,EA2BjB,GA1BA,EAAK,EAAK,CAAC,IAAS,CAClB,GAAI,EAAK,OAAS,iBAAkB,OACpC,IAAM,EAAS,EAAK,OACpB,GAAI,GAAQ,OAAS,cAAgB,EAAW,IAAI,EAAO,IAAI,EAAG,CAChE,EAAM,KAAK,CAAI,EACf,OAcF,IALE,GAAQ,OAAS,aACb,EAAO,KACP,GAAQ,OAAS,oBAAsB,CAAC,EAAO,SAC7C,EAAO,UAAU,KACjB,UACK,mBACX,IAEH,EAIG,EAAa,GAAK,EAAY,EAAK,kBAAkB,EACvD,EAAa,EAGf,GAAI,EAAa,EACf,KAAK,KACH,GAAG,MAAO,6RACZ,EAGF,GAAI,EAAM,SAAW,EACnB,OAAO,KAGT,IAAM,EAAI,IAAI,EAAY,CAAI,EAC1B,EAAU,GAEd,QAAW,KAAQ,EAAO,CACxB,GAAI,EAAK,WAAW,OAAS,GAAK,EAAK,WAAW,OAAS,EACzD,KAAK,MAAM,CACT,QAAS,6EACT,IAAK,EAAK,KACZ,CAAC,EAGH,IAAM,EAAe,EAAkB,EAAK,UAAU,GAAI,CAAC,IACzD,KAAK,MAAM,CAAE,UAAS,IAAK,EAAK,UAAU,IAAI,OAAS,EAAK,KAAM,CAAC,CACrE,EAMM,EAAe,EAAiB,EAAK,UAAU,GAAI,CAAC,IACxD,KAAK,MAAM,CAAE,UAAS,IAAK,EAAK,UAAU,IAAI,OAAS,EAAK,KAAM,CAAC,CACrE,EAEM,EAAY,EAAa,CAAY,EACrC,EAAa,GAAG,OAAO,KAAK,CAAE,EAAE,SAAS,WAAW,KAAK,IACzD,EAAU,EAAkB,EAAc,CAAY,EAE5D,GAAI,EAAQ,SAAW,EACrB,KAAK,MAAM,CACT,QAAS,2GACT,IAAK,EAAK,KACZ,CAAC,EAWH,GAAI,CAAC,EAAc,CACjB,IAAM,EAAQ,EAAuB,CAAY,EACjD,GAAI,EACF,KAAK,MAAM,CACT,QACE,2DAA2D,EAAM,sBAAsB,EAAM,4BACrF,EAAM,eAAe,EAAM,4EACnC,uFACA,sEACF,IAAK,EAAK,KACZ,CAAC,EAIL,EAAU,IAAI,EAAY,CAAE,GAAI,EAAW,UAAS,cAAa,CAAC,EAElE,IAAM,EAAU,EACb,IACC,CAAC,IACC,GAAG,KAAK,UAAU,CAAM,gBAAgB,KAAK,UAC3C,GAAG,IAAiB,KAAc,GACpC,IACJ,EACC,KAAK,GAAG,EAEX,EAAE,UACA,EAAK,MACL,EAAK,IACL,iBAAiB,KAAK,UAAU,CAAS,MAAM,KACjD,EACA,EAAU,GAGZ,GAAI,CAAC,EACH,OAAO,KAUT,OAJA,EAAE,OACA;AAAA,gCAAmC,KAAK,UAAU,CAAc;AAAA,CAClE,EAEO,CAAE,KAAM,EAAE,SAAS,EAAG,IAAK,EAAE,YAAY,CAAE,MAAO,EAAK,CAAC,CAAE,EAErE,EAOF,SAAS,CAAc,CAAC,EAAmC,CACzD,IAAM,EAAQ,EAAW,QAAQ,GAAG,EACpC,GAAI,IAAU,GAAI,OAAO,KACzB,GAAI,CACF,OAAO,OAAO,KAAK,EAAW,MAAM,EAAG,CAAK,EAAG,WAAW,EAAE,SAC1D,MACF,EACA,KAAM,CACN,OAAO,MAUX,SAAS,CAAiB,CACxB,EACA,EACwB,CACxB,GAAI,GAAM,OAAS,mBACjB,EACE,gIACF,EAGF,IAAM,EAA8B,CAAC,EACrC,QAAW,KAAQ,EAAK,WAAY,CAClC,IAAM,EAAM,EAAa,CAAI,EAC7B,GAAI,IAAQ,KACV,EACE,kHACF,EAEF,GAAI,EAAK,OAAO,OAAS,mBACvB,EACE,6BAA6B,uDAC/B,EAGF,IAAM,EAAmC,CAAC,EAC1C,QAAW,KAAc,EAAK,MAAM,WAAY,CAC9C,IAAM,EAAS,EAAa,CAAU,EACtC,GAAI,IAAW,KACb,EACE,6BAA6B,wDAC/B,EAEF,IAAM,EAAQ,EAAW,MACzB,GAAI,GAAO,OAAS,WAAa,OAAO,EAAM,QAAU,SACtD,EACE,6BAA6B,cAAgB,uGAC/C,EAEF,EAAS,GAAU,EAAM,MAE3B,EAAI,GAAO,EAEb,OAAO,EAIT,SAAS,CAAgB,CACvB,EACA,EACoB,CACpB,GAAI,IAAS,OACX,OAEF,GAAI,EAAK,OAAS,mBAChB,EACE,8FACF,EAEF,QAAW,KAAQ,EAAK,WAAY,CAClC,GAAI,EAAa,CAAI,IAAM,eAAgB,SAC3C,IAAM,EAAQ,EAAK,MACnB,GAAI,GAAO,OAAS,WAAa,OAAO,EAAM,QAAU,SACtD,EAAK,2DAA2D,EAElE,OAAO,EAAM,MAEf,OAIF,SAAS,CAAW,CAAC,EAAU,EAAuB,CACpD,IAAI,EAAQ,GAUZ,OATA,EAAK,EAAK,CAAC,IAAS,CAClB,GAAI,EAAO,OACX,GAAI,EAAK,OAAS,uBAAyB,EAAK,IAAI,OAAS,EAC3D,EAAQ,GAEV,GAAI,EAAK,OAAS,sBAAwB,EAAK,IAAI,OAAS,EAC1D,EAAQ,GAEX,EACM,EAGT,SAAS,CAAY,CAAC,EAA0B,CAC9C,GAAI,GAAM,OAAS,YAAc,EAAK,SAAU,OAAO,KACvD,GAAI,EAAK,KAAK,OAAS,aAAc,OAAO,EAAK,IAAI,KACrD,GAAI,EAAK,KAAK,OAAS,WAAa,OAAO,EAAK,IAAI,QAAU,SAC5D,OAAO,EAAK,IAAI,MAElB,OAAO,KAIT,SAAS,CAAI,CAAC,EAAW,EAA4B,CACnD,GAAI,IAAS,MAAQ,OAAO,IAAS,SAAU,OAC/C,GAAI,MAAM,QAAQ,CAAI,EAAG,CACvB,QAAW,KAAS,EAAM,EAAK,EAAO,CAAK,EAC3C,OAEF,GAAI,OAAO,EAAK,OAAS,SACvB,EAAM,CAAI,EAEZ,QAAW,KAAO,OAAO,KAAK,CAAI,EAAG,CACnC,GAAI,IAAQ,SAAU,SACtB,IAAM,EAAS,EAAa,GAC5B,GAAI,GAAS,OAAO,IAAU,SAC5B,EAAK,EAAO,CAAK,GCvZvB,gBAAS,eAAO,oBAChB,kBAAS,UAAS,aAgBX,SAAS,CAAmB,CAAC,EAAuC,CACzE,IAAI,EAEJ,MAAO,CACL,KAAM,yBACN,OAAQ,CAAC,EAAS,IAChB,EAAI,UAAY,SAAW,EAAY,CAAE,KAAM,CAAU,EAAI,OAC/D,cAAc,CAAC,EAAQ,CACrB,EAAW,QAEP,YAAW,CAAC,EAAS,CAIzB,GAAI,CAAC,GAAY,EAAS,UAAY,SAAW,EAAS,MAAM,KAAO,CAAC,EAAQ,IAC9E,OAEF,IAAM,EAAO,EAAK,EAAQ,IAAK,CAAiB,EAChD,MAAM,EAAM,EAAQ,CAAI,EAAG,CAAE,UAAW,EAAK,CAAC,EAC9C,MAAM,EAAU,EAAM,GAAG,KAAK,UAAU,CAAE,UAAW,EAAa,EAAS,IAAI,CAAE,CAAC;AAAA,CAAK,EAE3F,EAYF,SAAS,CAAY,CAAC,EAAsB,CAC1C,OAAO,EAAK,WAAW,GAAG,GAAK,0BAA0B,KAAK,CAAI,EAC9D,EAAmB,CAAI,EACvB,ECvCN,IAAM,EAAO,SAAqC,CAChD,IAAM,EAAa,MAAM,EAAe,QAAQ,IAAI,CAAC,GAC7C,QAAS,EAAkB,CAAC,KAAM,GACxC,EAAW,MAAQ,CAAC,EAGhB,EAAY,EAAiB,EAAW,SAAS,EAEvD,MAAO,CACL,CACE,KAAM,qBACN,QAAS,MACT,OAAQ,MAAO,EAAS,IAAQ,CAC9B,IAAM,EAAU,GAAG,QAAQ,IAAI,QAC/B,MAAO,CACL,cAAe,CAAC,SAAS,EACzB,MAAO,CACL,SAAU,GACV,cAAe,GAGf,UAAW,GACX,cAAe,CAIb,MAAO,MAAM,KAAa,KAAK,MAAM,QAAQ,IAAI,YAAc,IAAI,CAAC,EAcpE,wBAAyB,YAarB,EAAI,WAAa,CAAE,SAAU,CAAe,EAAI,CAAC,CACvD,CACF,EACA,QAAS,CACP,MAAO,CACL,QAAS,CACX,CACF,CACF,EAEJ,EAMA,CACE,KAAM,0BACN,OAAQ,IAAM,CAChB,EAGA,EAAoB,CAAS,EAC7B,EAAiB,EACjB,CACE,KAAM,yBACN,eAAe,EAAG,SAAQ,WAAW,CACnC,GAAI,IAAU,IAAI,IAAI,SAAS,YAAY,EASzC,MAAO,CAAC,EAGd,EAEA,GAAG,EAGH,EAAqB,CACvB,GAGa",
-  "debugId": "4527C0CB7F9ACAC364756E2164756E21",
+  "debugId": "886201980DC0533B64756E2164756E21",
   "names": []
 }

package/dist/{chunk-7rfw4h2x.js → chunk-95gag2pg.js}

@@ -1,5 +1,5 @@
 // @bun
-import{zl as n}from"./chunk-egwz89ze.js";var w=n((p)=>{var r={warningEmitted:!1},a=(e)=>{if(e&&!r.warningEmitted&&parseInt(e.substring(1,e.indexOf(".")))<20)r.warningEmitted=!0,process.emitWarning(`NodeDeprecationWarning: The AWS SDK for JavaScript (v3) will
+import{Al as n}from"./chunk-wgre66wq.js";var w=n((p)=>{var r={warningEmitted:!1},a=(e)=>{if(e&&!r.warningEmitted&&parseInt(e.substring(1,e.indexOf(".")))<20)r.warningEmitted=!0,process.emitWarning(`NodeDeprecationWarning: The AWS SDK for JavaScript (v3) will
 no longer support Node.js ${e} in January 2026.
 
 To continue receiving updates to AWS services, bug fixes, and security
@@ -8,4 +8,4 @@ updates please upgrade to a supported Node.js LTS version.
 More information can be found at: https://a.co/c895JFp`)};function o(e,t,s){if(!e.$source)e.$source={};return e.$source[t]=s,e}function u(e,t,s){if(!e.__aws_sdk_context)e.__aws_sdk_context={features:{}};else if(!e.__aws_sdk_context.features)e.__aws_sdk_context.features={};e.__aws_sdk_context.features[t]=s}function i(e,t,s){if(!e.$source)e.$source={};return e.$source[t]=s,e}p.emitWarningIfUnsupportedVersion=a;p.setCredentialFeature=o;p.setFeature=u;p.setTokenFeature=i;p.state=r});
 export{w as U};
 
-//# debugId=FDA5070B0085705564756E2164756E21
+//# debugId=79078D58A79CB8DB64756E2164756E21

package/dist/{chunk-7rfw4h2x.js.map → chunk-95gag2pg.js.map}

@@ -5,6 +5,6 @@
     "'use strict';\n\nconst state = {\n    warningEmitted: false,\n};\nconst emitWarningIfUnsupportedVersion = (version) => {\n    if (version && !state.warningEmitted && parseInt(version.substring(1, version.indexOf(\".\"))) < 20) {\n        state.warningEmitted = true;\n        process.emitWarning(`NodeDeprecationWarning: The AWS SDK for JavaScript (v3) will\nno longer support Node.js ${version} in January 2026.\n\nTo continue receiving updates to AWS services, bug fixes, and security\nupdates please upgrade to a supported Node.js LTS version.\n\nMore information can be found at: https://a.co/c895JFp`);\n    }\n};\n\nfunction setCredentialFeature(credentials, feature, value) {\n    if (!credentials.$source) {\n        credentials.$source = {};\n    }\n    credentials.$source[feature] = value;\n    return credentials;\n}\n\nfunction setFeature(context, feature, value) {\n    if (!context.__aws_sdk_context) {\n        context.__aws_sdk_context = {\n            features: {},\n        };\n    }\n    else if (!context.__aws_sdk_context.features) {\n        context.__aws_sdk_context.features = {};\n    }\n    context.__aws_sdk_context.features[feature] = value;\n}\n\nfunction setTokenFeature(token, feature, value) {\n    if (!token.$source) {\n        token.$source = {};\n    }\n    token.$source[feature] = value;\n    return token;\n}\n\nexports.emitWarningIfUnsupportedVersion = emitWarningIfUnsupportedVersion;\nexports.setCredentialFeature = setCredentialFeature;\nexports.setFeature = setFeature;\nexports.setTokenFeature = setTokenFeature;\nexports.state = state;\n"
   ],
   "mappings": ";uDAEA,IAAM,EAAQ,CACV,eAAgB,EACpB,EACM,EAAkC,CAAC,IAAY,CACjD,GAAI,GAAW,CAAC,EAAM,gBAAkB,SAAS,EAAQ,UAAU,EAAG,EAAQ,QAAQ,GAAG,CAAC,CAAC,EAAI,GAC3F,EAAM,eAAiB,GACvB,QAAQ,YAAY;AAAA,4BACA;AAAA;AAAA;AAAA;AAAA;AAAA,uDAK2B,GAIvD,SAAS,CAAoB,CAAC,EAAa,EAAS,EAAO,CACvD,GAAI,CAAC,EAAY,QACb,EAAY,QAAU,CAAC,EAG3B,OADA,EAAY,QAAQ,GAAW,EACxB,EAGX,SAAS,CAAU,CAAC,EAAS,EAAS,EAAO,CACzC,GAAI,CAAC,EAAQ,kBACT,EAAQ,kBAAoB,CACxB,SAAU,CAAC,CACf,EAEC,QAAI,CAAC,EAAQ,kBAAkB,SAChC,EAAQ,kBAAkB,SAAW,CAAC,EAE1C,EAAQ,kBAAkB,SAAS,GAAW,EAGlD,SAAS,CAAe,CAAC,EAAO,EAAS,EAAO,CAC5C,GAAI,CAAC,EAAM,QACP,EAAM,QAAU,CAAC,EAGrB,OADA,EAAM,QAAQ,GAAW,EAClB,EAGH,kCAAkC,EAClC,uBAAuB,EACvB,aAAa,EACb,kBAAkB,EAClB,QAAQ",
-  "debugId": "FDA5070B0085705564756E2164756E21",
+  "debugId": "79078D58A79CB8DB64756E2164756E21",
   "names": []
 }

package/dist/{chunk-7bc9ypbk.js → chunk-99be7vbh.js}

@@ -1,5 +1,5 @@
 // @bun
-import{kh as K,lh as L,mh as R,nh as Y,oh as M,ph as Q,qh as O,rh as y,xh as U}from"./chunk-3d8jxky6.js";import{vj as G,wj as W}from"./chunk-8tyw6faf.js";var S=/^\s*::\s*(?:text\s*::\s*)?(jsonb|json)\b(?!\s*\[)/i,I=/^\s*as\s+(jsonb|json)\s*\)/i,P=/\bcast\s*\(\s*$/i,T=new Set;function _(k,B){if(!B.typesParametersFromStatement)return{fragment:k,jsonParameters:T};let q=Y(k),z=new Set,D;for(let H=0;H<q.length-1;H++){let X=q[H+1],$=S.exec(X);if($){D??=[...q],D[H+1]=`::text::${$[1]}${X.slice($[0].length)}`,z.add(H);continue}let J=I.exec(X);if(J&&P.test((D??q)[H]))D??=[...q],D[H+1]=` as text)::${J[1]}${X.slice(J[0].length)}`,z.add(H)}if(!D)return{fragment:k,jsonParameters:z};return{fragment:M(D,k.binders),jsonParameters:z}}function C(k,B){if(k===null||k===void 0)return null;let q=U(k);if(q==="db")return null;if(q==="json")return"null";if(q==="any")throw new W(B,"DB",B,"Prisma.AnyNull is a filter operand \u2014 it asks for a SQL NULL *or* a JSON "+"null \u2014 so it has no single value to bind. Write the one you mean: "+"Prisma.DbNull for the column being NULL, Prisma.JsonNull for the JSON value.");if(typeof k==="string")return k;let z;try{z=JSON.stringify(k)}catch(D){throw new W(B,"DB",B,`A parameter cast to json could not be serialised: ${D instanceof Error?D.message:String(D)}. `+"Bind text you have serialised yourself if the value is not JSON \u2014 a "+"bigint has no JSON form, and neither does a cycle.")}if(z===void 0)throw new W(B,"DB",B,`A ${typeof k} was bound to a parameter cast to json, and has no JSON form. Bind the value it stands for.`);return z}var N=new WeakSet;function Z(k){return N.add(k),k}function V(k){return typeof k==="object"&&k!==null&&N.has(k)}function g(k,...B){if(!Array.isArray(k)||!("raw"in k))throw new G("sql","DB","sql","'sql' is a tagged template \u2014 write sql`select 1`, not sql(\"select 1\"). "+"To put text that is not a value into a statement, use 'unsafeSql', and read what it says first.");let q=[];for(let z=0;z<k.length;z++)if(q.push(L(k[z])),z<B.length)q.push(F(B[z]));return Z(Q(...q))}function m(k,B=", "){if(!Array.isArray(k))throw new W("join","DB","sql",`Expected an array of fragments or values, got ${typeof k}.`);if(k.length===0)return b;let q=k.map(F);if(V(B)){let z=[];for(let D=0;D<q.length;D++){if(D>0)z.push(B);z.push(q[D])}return Z(Q(...z))}return j(B),Z(O(q,B))}var h=/^[\s,]*$|^\s*(?:and|or)\s*$/i;function j(k){if(typeof k==="string"&&h.test(k))return;throw new W("join","DB","sql",typeof k==="string"?`A separator is written into the SQL text, so it may only be glue: whitespace, commas, or 'and' / 'or'. Got ${JSON.stringify(k)}. If that is deliberate, say so with `+"unsafeSql(...) \u2014 and never build one from anything that came from "+"outside the program.":`Expected a separator string or a fragment, got ${k===null?"null":typeof k}.`)}var b=Z(Object.freeze({text:"",binders:Object.freeze([])}));function v(k){if(typeof k!=="string")throw new W("unsafeSql","DB","sql",`Expected a string literal, got ${Array.isArray(k)?"an array":typeof k}. 'unsafeSql' is a plain call, not a tagged template \u2014 a template would `+"interpolate values into the SQL text, which is the one thing it must never do.");return Z(L(k))}function p(k,B,q="query"){if(!V(k))throw new W(q,"DB",q,`Expected a fragment built with 'sql', got ${k===null?"null":typeof k}. A plain string is not accepted here on purpose \u2014 it would be the one `+"path into the SQL text that nobody had to think about.");let z=_(k,B),D=y(z.fragment,B,{model:"DB",operation:q});return{text:D.text,values:K(D.binders)(void 0).map((H,X)=>z.jsonParameters.has(X)?C(H,q):H===null||H===void 0?H??null:B.encodeUntyped(H))}}function F(k){if(V(k))return k;return R(()=>k)}
-export{g as eh,m as fh,b as gh,v as hh,p as ih};
+import{lh as K,mh as L,nh as R,oh as Y,ph as M,qh as Q,rh as O,sh as y,yh as U}from"./chunk-n3pc62tc.js";import{wj as G,xj as W}from"./chunk-1btx3kkv.js";var S=/^\s*::\s*(?:text\s*::\s*)?(jsonb|json)\b(?!\s*\[)/i,I=/^\s*as\s+(jsonb|json)\s*\)/i,P=/\bcast\s*\(\s*$/i,T=new Set;function _(k,B){if(!B.typesParametersFromStatement)return{fragment:k,jsonParameters:T};let q=Y(k),z=new Set,D;for(let H=0;H<q.length-1;H++){let X=q[H+1],$=S.exec(X);if($){D??=[...q],D[H+1]=`::text::${$[1]}${X.slice($[0].length)}`,z.add(H);continue}let J=I.exec(X);if(J&&P.test((D??q)[H]))D??=[...q],D[H+1]=` as text)::${J[1]}${X.slice(J[0].length)}`,z.add(H)}if(!D)return{fragment:k,jsonParameters:z};return{fragment:M(D,k.binders),jsonParameters:z}}function C(k,B){if(k===null||k===void 0)return null;let q=U(k);if(q==="db")return null;if(q==="json")return"null";if(q==="any")throw new W(B,"DB",B,"Prisma.AnyNull is a filter operand \u2014 it asks for a SQL NULL *or* a JSON "+"null \u2014 so it has no single value to bind. Write the one you mean: "+"Prisma.DbNull for the column being NULL, Prisma.JsonNull for the JSON value.");if(typeof k==="string")return k;let z;try{z=JSON.stringify(k)}catch(D){throw new W(B,"DB",B,`A parameter cast to json could not be serialised: ${D instanceof Error?D.message:String(D)}. `+"Bind text you have serialised yourself if the value is not JSON \u2014 a "+"bigint has no JSON form, and neither does a cycle.")}if(z===void 0)throw new W(B,"DB",B,`A ${typeof k} was bound to a parameter cast to json, and has no JSON form. Bind the value it stands for.`);return z}var N=new WeakSet;function Z(k){return N.add(k),k}function V(k){return typeof k==="object"&&k!==null&&N.has(k)}function g(k,...B){if(!Array.isArray(k)||!("raw"in k))throw new G("sql","DB","sql","'sql' is a tagged template \u2014 write sql`select 1`, not sql(\"select 1\"). "+"To put text that is not a value into a statement, use 'unsafeSql', and read what it says first.");let q=[];for(let z=0;z<k.length;z++)if(q.push(L(k[z])),z<B.length)q.push(F(B[z]));return Z(Q(...q))}function m(k,B=", "){if(!Array.isArray(k))throw new W("join","DB","sql",`Expected an array of fragments or values, got ${typeof k}.`);if(k.length===0)return b;let q=k.map(F);if(V(B)){let z=[];for(let D=0;D<q.length;D++){if(D>0)z.push(B);z.push(q[D])}return Z(Q(...z))}return j(B),Z(O(q,B))}var h=/^[\s,]*$|^\s*(?:and|or)\s*$/i;function j(k){if(typeof k==="string"&&h.test(k))return;throw new W("join","DB","sql",typeof k==="string"?`A separator is written into the SQL text, so it may only be glue: whitespace, commas, or 'and' / 'or'. Got ${JSON.stringify(k)}. If that is deliberate, say so with `+"unsafeSql(...) \u2014 and never build one from anything that came from "+"outside the program.":`Expected a separator string or a fragment, got ${k===null?"null":typeof k}.`)}var b=Z(Object.freeze({text:"",binders:Object.freeze([])}));function v(k){if(typeof k!=="string")throw new W("unsafeSql","DB","sql",`Expected a string literal, got ${Array.isArray(k)?"an array":typeof k}. 'unsafeSql' is a plain call, not a tagged template \u2014 a template would `+"interpolate values into the SQL text, which is the one thing it must never do.");return Z(L(k))}function p(k,B,q="query"){if(!V(k))throw new W(q,"DB",q,`Expected a fragment built with 'sql', got ${k===null?"null":typeof k}. A plain string is not accepted here on purpose \u2014 it would be the one `+"path into the SQL text that nobody had to think about.");let z=_(k,B),D=y(z.fragment,B,{model:"DB",operation:q});return{text:D.text,values:K(D.binders)(void 0).map((H,X)=>z.jsonParameters.has(X)?C(H,q):H===null||H===void 0?H??null:B.encodeUntyped(H))}}function F(k){if(V(k))return k;return R(()=>k)}
+export{g as fh,m as gh,b as hh,v as ih,p as jh};
 
-//# debugId=88697C98C3425C4B64756E2164756E21
+//# debugId=AA527BE599AAA49164756E2164756E21

package/dist/{chunk-7bc9ypbk.js.map → chunk-99be7vbh.js.map}

@@ -6,6 +6,6 @@
     "import type { SqlDialect } from \"./dialect\";\nimport {\n  InvalidArgumentError,\n  UnsupportedQueryError,\n} from \"./errors\";\nimport {\n  type Fragment,\n  bindValues,\n  concat,\n  joinFragments,\n  param,\n  render,\n  sql as text,\n} from \"./compile/fragment\";\nimport { jsonTextParameter, retypeJsonParameters } from \"./json-param\";\n\n/**\n * SQL fragments as first-class values: `sql`, `join`, `empty`, and one door out.\n *\n * The ORM deliberately does not implement every SQL shape — `distinct`, cursor\n * pagination, window functions, recursive CTEs. That is the right call, but it\n * is only half a decision: the shapes it declines have to have somewhere to go,\n * and \"drop to raw SQL\" is not an answer if raw SQL cannot be *composed*.\n *\n * `DB.sql` — Bun's tagged template — covers a single self-contained statement,\n * and that is genuinely all it covers. The shape it cannot express is the common\n * one: a predicate list built conditionally, passed around as a value, and\n * interpolated into a larger statement.\n *\n * ```ts\n * const filters = []\n * if (q) filters.push(sql`name ilike ${`%${q}%`}`)\n * if (organizationId) filters.push(sql`\"organizationId\" = ${organizationId}`)\n *\n * const where = filters.length ? sql`where ${join(filters, \" and \")}` : empty\n * const rows = await DB.query(sql`select * from \"Product\" ${where} limit ${20}`)\n * ```\n *\n * ## This is the compiler's own `Fragment`, made public\n *\n * Not a parallel mechanism. `compile/fragment.ts` has held exactly this shape\n * since iteration 1 — text plus positional binders, composable, never\n * concatenating a value into the text — because that is what invariant 2 needs\n * internally. Reusing it means a public fragment binds by the same rule the\n * compiler's own SQL does, and it means the parameter ceiling, the placeholder\n * numbering and the dialect split are all already handled rather than\n * reimplemented one door down.\n *\n * **Placeholders are assigned at assembly, not at authoring.** SQLite writes\n * `?` and Postgres writes `$1`, `$2`, and a fragment does not know where in the\n * final statement it will land — so `sql` records a *position* and `render`\n * turns it into a placeholder once the whole statement exists. That is what lets\n * the same fragment be nested, reused twice in one statement, or built before\n * the dialect is even known.\n */\n\n/**\n * A composable piece of SQL. Its values are bound parameters, never text.\n *\n * Opaque on purpose: an application builds one with `sql`, combines it with\n * `join`, and hands it to `DB.query` / `DB.execute`. Reading `.text` off it is\n * not part of the contract — it holds parameter *markers* rather than the\n * dialect's placeholders, so it is not the statement that runs.\n */\nexport type SqlFragment = Fragment;\n\n/**\n * Every fragment this module has produced.\n *\n * **Identity, not shape, and the difference is a SQL injection.** `interpolate`\n * splices a fragment as text and binds everything else, so \"is this a fragment\"\n * decides whether a value reaches the statement or a parameter. Asking the\n * *shape* — a `text` string and a `binders` array — makes that decision\n * answerable by anything that can name two properties, and `{\"text\": \"…\",\n * \"binders\": []}` is two lines of JSON:\n *\n * ```ts\n * const body = await request.json()\n * await DB.query(sql`select \"email\" from \"User\" where \"email\" = ${body.email}`)\n * // body.email = { text: `'' union select \"password\" from \"User\"`, binders: [] }\n * // -> select \"email\" from \"User\" where \"email\" = '' union select \"password\" from \"User\"\n * ```\n *\n * That is the intended call site with the intended safe value, and it returned\n * the password column out of a statement selecting only `email`. The internal\n * `Fragment` never had the problem because nothing outside `compile/` could\n * construct one; making the type public is what turned \"text plus binders\" from\n * an implementation detail into a shape an attacker can name. `unsafeSql` is\n * built so that reaching for the escape hatch is a decision — a structural check\n * is a second, unmarked door beside it.\n *\n * A `WeakSet` the module owns cannot be forged: membership is granted only by\n * the constructors below. It registers the *returned* object rather than\n * stamping a property, because `concat` and `joinFragments` return fresh objects\n * — a marker property on the inputs would not survive them, and the version that\n * cannot drift is the one that brands what actually comes out.\n */\nconst FRAGMENTS = new WeakSet<object>();\n\nfunction brand(fragment: Fragment): SqlFragment {\n  FRAGMENTS.add(fragment);\n  return fragment;\n}\n\n/** Whether a value is a fragment *this module made*, so it splices rather than binds. */\nfunction isFragment(value: unknown): value is Fragment {\n  return typeof value === \"object\" && value !== null && FRAGMENTS.has(value);\n}\n\n/**\n * A SQL fragment. Every `${value}` is bound as a parameter; a `${fragment}` is\n * spliced in, carrying its own parameters with it.\n *\n * ```ts\n * sql`where \"id\" = ${id}`                       // \"id\" = $1, with id bound\n * sql`where ${sql`\"a\" = ${1}`} and ${sql`\"b\" = ${2}`}`   // nests to any depth\n * ```\n *\n * An interpolated **array** is bound as one value, not expanded — that is what\n * Postgres's `= any($1)` wants, and it is the only reading that does not depend\n * on the dialect. For a comma-separated list of placeholders, say so with\n * `join`.\n *\n * A value at a `::jsonb` cast the caller wrote is the one parameter with a type\n * behind it, and it is bound as **JSON text** so that the statement means what\n * the same statement meant under Prisma's `$executeRaw`:\n *\n * ```ts\n * sql`… set payload = payload || ${JSON.stringify(patch)}::jsonb`  // merges\n * ```\n *\n * Without that the driver would JSON-encode the string and the column would\n * hold the document as a jsonb *string* — which `||` appends as an array\n * element rather than merging. `json-param.ts` has the measurements.\n */\nexport function sql(\n  strings: TemplateStringsArray,\n  ...values: unknown[]\n): SqlFragment {\n  // A defensive check rather than a type error, because the interesting misuse\n  // is `sql(userInput)` — a plain call with a string, which would otherwise\n  // reach `strings.raw` as `undefined` and produce a fragment of `undefined`\n  // text rather than an error. It is also the shape somebody reaches for when\n  // they want the escape hatch and have not found `unsafeSql`.\n  if (!Array.isArray(strings) || !(\"raw\" in (strings as object))) {\n    throw new UnsupportedQueryError(\n      \"sql\",\n      \"DB\",\n      \"sql\",\n      `'sql' is a tagged template — write sql\\`select 1\\`, not sql(\"select 1\"). ` +\n        `To put text that is not a value into a statement, use 'unsafeSql', ` +\n        `and read what it says first.`,\n    );\n  }\n\n  const parts: Fragment[] = [];\n\n  for (let i = 0; i < strings.length; i++) {\n    parts.push(text(strings[i]));\n    if (i < values.length) parts.push(interpolate(values[i]));\n  }\n\n  return brand(concat(...parts));\n}\n\n/**\n * Fragments — or values — joined by a separator, the way `Array.join` reads.\n *\n * ```ts\n * join(filters, \" and \")            // a and b and c\n * join([sql`\"a\" asc`, sql`\"b\" desc`])   // \"a\" asc, \"b\" desc\n * join(ids)                         // $1, $2, $3 — each bound\n * ```\n *\n * An **empty list produces `empty`**, not a separator and not a syntax error, so\n * `join` composes with a list that turned out to have nothing in it. That is the\n * case a caller forgets, and it is the one that would otherwise emit `where ` and\n * fail at the database rather than here.\n *\n * ## The separator is text, so it is not a free string\n *\n * It goes between the fragments *in the statement*, which makes it the one other\n * place a string could reach the SQL — and this module's whole claim is that\n * `unsafeSql` is **the** door. So a plain-string separator has to be glue and\n * nothing else: whitespace, commas, or a boolean connective. Anything more\n * expressive is legitimate and has to say so:\n *\n * ```ts\n * join(filters, \" and \")                 // fine\n * join(parts, unsafeSql(\") and (\"))      // fine, and visibly a decision\n * join(ids, request.query.sep)           // refused\n * ```\n *\n * A **blocklist would not do**, which is why this is an allowlist. The obvious\n * one — reject quotes, semicolons and comment markers — lets this through:\n *\n *     join([1, 2], \") or 1=1 union select password from Users where 1=(1\")\n *\n * No quote, no `--`, still an injection. There is no sound way to say \"this\n * arbitrary text is safe glue\", so the rule is that glue is a small closed set\n * and everything else is a fragment somebody built on purpose.\n */\nexport function join(\n  values: readonly unknown[],\n  separator: string | SqlFragment = \", \",\n): SqlFragment {\n  if (!Array.isArray(values)) {\n    throw new InvalidArgumentError(\n      \"join\",\n      \"DB\",\n      \"sql\",\n      `Expected an array of fragments or values, got ${typeof values}.`,\n    );\n  }\n  if (values.length === 0) return empty;\n\n  const parts = values.map(interpolate);\n\n  if (isFragment(separator)) {\n    const woven: Fragment[] = [];\n    for (let i = 0; i < parts.length; i++) {\n      if (i > 0) woven.push(separator);\n      woven.push(parts[i]);\n    }\n    return brand(concat(...woven));\n  }\n\n  assertGlue(separator);\n  return brand(joinFragments(parts, separator));\n}\n\n/**\n * Whitespace and commas, or a boolean connective surrounded by whitespace.\n *\n * Deliberately small. Every separator a composed statement actually needs is in\n * here — `\", \"`, `\" and \"`, `\" or \"`, `\" \"` — and everything outside it is\n * expressive enough to change what the statement *does*, which is the property\n * that makes it a `unsafeSql` decision rather than a string argument.\n */\nconst GLUE = /^[\\s,]*$|^\\s*(?:and|or)\\s*$/i;\n\nfunction assertGlue(separator: unknown): void {\n  if (typeof separator === \"string\" && GLUE.test(separator)) return;\n\n  throw new InvalidArgumentError(\n    \"join\",\n    \"DB\",\n    \"sql\",\n    typeof separator === \"string\"\n      ? `A separator is written into the SQL text, so it may only be glue: ` +\n        `whitespace, commas, or 'and' / 'or'. Got ` +\n        `${JSON.stringify(separator)}. If that is deliberate, say so with ` +\n        `unsafeSql(...) — and never build one from anything that came from ` +\n        `outside the program.`\n      : `Expected a separator string or a fragment, got ${\n          separator === null ? \"null\" : typeof separator\n        }.`,\n  );\n}\n\n/**\n * The fragment that contributes nothing.\n *\n * The point of it is that `where ${empty}` and `where ${filter}` are the same\n * expression — a conditional predicate is a value, not a branch around the\n * statement. Frozen, because it is shared by every caller and a fragment is read\n * as immutable everywhere else.\n */\nexport const empty: SqlFragment = brand(\n  Object.freeze({ text: \"\", binders: Object.freeze([]) as [] }),\n);\n\n/**\n * **Text straight into the SQL, with no parameter around it.** The one door in\n * this ORM through which a value reaches the statement text.\n *\n * Everything else in the compiler exists to make this impossible — identifiers\n * come from the generated schema, values are bound — so reaching for it should\n * feel like reaching for it. **Never give it a value that came from a request, a\n * form, a URL, a header, a queue payload or a database row.** There is no\n * escaping here and there will not be: escaping that is \"usually right\" is worse\n * than none, because it survives review.\n *\n * ## Why it exists at all, since that is the fair question\n *\n * Plan quality can depend on *not* parameterising. A partial index declared as\n *\n * ```sql\n * create index … on \"Job\" (…) where \"name\" is distinct from 'reaper'\n * ```\n *\n * is only usable if the planner can prove the query's predicate matches the\n * index's. A bound parameter is opaque at plan time, so `where \"name\" is\n * distinct from $1` does not match — and the query falls back to a sequential\n * scan over the whole table. The constant has to be *in the text*:\n *\n * ```ts\n * const REAPER = unsafeSql(`'reaper'`)   // a literal in this file, never input\n * await DB.query(sql`\n *   select … from \"Job\" where \"name\" is distinct from ${REAPER} …\n * `)\n * ```\n *\n * A builder with no escape hatch cannot express that at any price, and the\n * workaround — hand-writing the whole statement — loses composition for every\n * other part of it.\n *\n * The same applies to the other things that cannot be parameters in SQL:\n * identifiers, a sort direction, a table name chosen from a fixed set in code.\n * All of them share the rule above — the value is written in the source file, or\n * chosen from a set written in the source file, never passed in.\n */\nexport function unsafeSql(literal: string): SqlFragment {\n  if (typeof literal !== \"string\") {\n    throw new InvalidArgumentError(\n      \"unsafeSql\",\n      \"DB\",\n      \"sql\",\n      `Expected a string literal, got ${\n        Array.isArray(literal) ? \"an array\" : typeof literal\n      }. 'unsafeSql' is a plain call, not a tagged template — a template would ` +\n        `interpolate values into the SQL text, which is the one thing it must ` +\n        `never do.`,\n    );\n  }\n  return brand(text(literal));\n}\n\n/**\n * A fragment as the statement a driver can run: the dialect's placeholders in\n * the text, and the values in the order they appear.\n *\n * Separate from the executing, and exported, because it is the half that is a\n * pure function of `(fragment, dialect)` — so a test can assert what a\n * composition emits on both dialects without a database anywhere near it, which\n * is exactly how the rest of the compiler is tested.\n *\n * `render` also applies the parameter ceiling here, which matters more for a\n * hand-built fragment than for a compiled plan: `join(ids)` over a\n * request-derived list is one placeholder per element on SQLite, and 40 000 of\n * them is a driver error rather than a clear one.\n */\nexport function renderFragment(\n  fragment: SqlFragment,\n  dialect: SqlDialect,\n  operation = \"query\",\n): { text: string; values: unknown[] } {\n  if (!isFragment(fragment)) {\n    throw new InvalidArgumentError(\n      operation,\n      \"DB\",\n      operation,\n      `Expected a fragment built with 'sql', got ${\n        fragment === null ? \"null\" : typeof fragment\n      }. A plain string is not accepted here on purpose — it would be the one ` +\n        `path into the SQL text that nobody had to think about.`,\n    );\n  }\n\n  // The one thing a raw parameter can be *told* about its type: a `::jsonb` the\n  // caller wrote onto their own placeholder. Where there is one, the parameter\n  // is retyped through `text` and its value serialised, because Bun otherwise\n  // JSON-encodes a string bound to a `jsonb` parameter and stores the document\n  // as a jsonb *string* where Prisma stored the object. See `json-param.ts` —\n  // the mechanism, the measurements, and why a string is not serialised here\n  // while `fieldParam` serialises one.\n  //\n  // The dialect is passed because this is not universal, and the reason is\n  // narrower than it looks: `::` is Postgres-only syntax, but `cast(? as json)`\n  // *parses and runs* on SQLite, where it means NUMERIC affinity — so retyping\n  // it would rewrite a working statement into `cast(? as text)::json`, which\n  // SQLite cannot parse. `typesParametersFromStatement` is false there.\n  const json = retypeJsonParameters(fragment, dialect);\n\n  const rendered = render(json.fragment, dialect, { model: \"DB\", operation });\n  return {\n    text: rendered.text,\n    // `encodeUntyped` and not `encode`: there is no field here to ask, which is\n    // the whole difference between a fragment's parameters and a compiled\n    // plan's. It normalises the two JavaScript types whose SQL form the ORM has\n    // already decided — a `Date` and a boolean — so a raw statement compares\n    // against ORM-written rows on both dialects rather than only on Postgres.\n    values: bindValues(rendered.binders)(undefined).map((value, index) =>\n      json.jsonParameters.has(index)\n        ? jsonTextParameter(value, operation)\n        : value === null || value === undefined\n          ? (value ?? null)\n          : dialect.encodeUntyped(value),\n    ),\n  };\n}\n\n/**\n * One interpolated slot: a fragment splices, anything else binds.\n *\n * The binder ignores both its arguments. A compiled plan's binders read the\n * *call's* argument tree, because one plan serves many calls; a fragment is\n * built per call and closes over the value it was given, which is the whole\n * difference between the compiler's fragments and these.\n */\nfunction interpolate(value: unknown): Fragment {\n  if (isFragment(value)) return value;\n  return param(() => value);\n}\n"
   ],
   "mappings": ";gKA0IA,FAAM,EAAgB,qDAehB,EAAgB,8BAQhB,EAAY,mBAGZ,EAA6B,IAAI,IAYhC,SAAS,CAAoB,CAClC,EACA,EAIA,CACA,GAAI,CAAC,EAAQ,6BACX,MAAO,CAAE,WAAU,eAAgB,CAAM,EAG3C,IAAM,EAAW,EAAc,CAAQ,EACjC,EAAiB,IAAI,IACvB,EAKJ,QAAS,EAAQ,EAAG,EAAQ,EAAS,OAAS,EAAG,IAAS,CACxD,IAAM,EAAQ,EAAS,EAAQ,GAEzB,EAAW,EAAc,KAAK,CAAK,EACzC,GAAI,EAAU,CACZ,IAAc,CAAC,GAAG,CAAQ,EAC1B,EAAU,EAAQ,GAChB,WAAW,EAAS,KAAK,EAAM,MAAM,EAAS,GAAG,MAAM,IACzD,EAAe,IAAI,CAAK,EACxB,SAGF,IAAM,EAAK,EAAc,KAAK,CAAK,EAKnC,GAAI,GAAM,EAAU,MAAM,GAAa,GAAU,EAAM,EACrD,IAAc,CAAC,GAAG,CAAQ,EAC1B,EAAU,EAAQ,GAAK,cAAc,EAAG,KAAK,EAAM,MAAM,EAAG,GAAG,MAAM,IACrE,EAAe,IAAI,CAAK,EAI5B,GAAI,CAAC,EAAW,MAAO,CAAE,WAAU,gBAAe,EAClD,MAAO,CACL,SAAU,EAAkB,EAAW,EAAS,OAAO,EACvD,gBACF,EAYK,SAAS,CAAiB,CAAC,EAAgB,EAA4B,CAO5E,GAAI,IAAU,MAAQ,IAAU,OAAW,OAAO,KAKlD,IAAM,EAAW,EAAa,CAAK,EACnC,GAAI,IAAa,KAAM,OAAO,KAC9B,GAAI,IAAa,OAAQ,MAAO,OAChC,GAAI,IAAa,MACf,MAAM,IAAI,EACR,EACA,KACA,EACA,gFACE,0EACA,8EAEJ,EAMF,GAAI,OAAO,IAAU,SAAU,OAAO,EAEtC,IAAI,EACJ,GAAI,CACF,EAAO,KAAK,UAAU,CAAK,EAC3B,MAAO,EAAO,CAId,MAAM,IAAI,EACR,EACA,KACA,EACA,qDACK,aAAiB,MAAQ,EAAM,QAAU,OAAO,CAAK,MACxD,4EACA,oDACJ,EAMF,GAAI,IAAS,OACX,MAAM,IAAI,EACR,EACA,KACA,EACA,KAAK,OAAO,8FAEd,EAGF,OAAO,ECxMT,IAAM,EAAY,IAAI,QAEtB,SAAS,CAAK,CAAC,EAAiC,CAE9C,OADA,EAAU,IAAI,CAAQ,EACf,EAIT,SAAS,CAAU,CAAC,EAAmC,CACrD,OAAO,OAAO,IAAU,UAAY,IAAU,MAAQ,EAAU,IAAI,CAAK,EA6BpE,SAAS,CAAG,CACjB,KACG,EACU,CAMb,GAAI,CAAC,MAAM,QAAQ,CAAO,GAAK,EAAE,QAAU,GACzC,MAAM,IAAI,EACR,MACA,KACA,MACA,iFACE,iGAEJ,EAGF,IAAM,EAAoB,CAAC,EAE3B,QAAS,EAAI,EAAG,EAAI,EAAQ,OAAQ,IAElC,GADA,EAAM,KAAK,EAAK,EAAQ,EAAE,CAAC,EACvB,EAAI,EAAO,OAAQ,EAAM,KAAK,EAAY,EAAO,EAAE,CAAC,EAG1D,OAAO,EAAM,EAAO,GAAG,CAAK,CAAC,EAwCxB,SAAS,CAAI,CAClB,EACA,EAAkC,KACrB,CACb,GAAI,CAAC,MAAM,QAAQ,CAAM,EACvB,MAAM,IAAI,EACR,OACA,KACA,MACA,iDAAiD,OAAO,IAC1D,EAEF,GAAI,EAAO,SAAW,EAAG,OAAO,EAEhC,IAAM,EAAQ,EAAO,IAAI,CAAW,EAEpC,GAAI,EAAW,CAAS,EAAG,CACzB,IAAM,EAAoB,CAAC,EAC3B,QAAS,EAAI,EAAG,EAAI,EAAM,OAAQ,IAAK,CACrC,GAAI,EAAI,EAAG,EAAM,KAAK,CAAS,EAC/B,EAAM,KAAK,EAAM,EAAE,EAErB,OAAO,EAAM,EAAO,GAAG,CAAK,CAAC,EAI/B,OADA,EAAW,CAAS,EACb,EAAM,EAAc,EAAO,CAAS,CAAC,EAW9C,IAAM,EAAO,+BAEb,SAAS,CAAU,CAAC,EAA0B,CAC5C,GAAI,OAAO,IAAc,UAAY,EAAK,KAAK,CAAS,EAAG,OAE3D,MAAM,IAAI,EACR,OACA,KACA,MACA,OAAO,IAAc,SACjB,8GAEG,KAAK,UAAU,CAAS,yCAC3B,0EACA,uBACA,kDACE,IAAc,KAAO,OAAS,OAAO,IAE7C,EAWK,IAAM,EAAqB,EAChC,OAAO,OAAO,CAAE,KAAM,GAAI,QAAS,OAAO,OAAO,CAAC,CAAC,CAAQ,CAAC,CAC9D,EA0CO,SAAS,CAAS,CAAC,EAA8B,CACtD,GAAI,OAAO,IAAY,SACrB,MAAM,IAAI,EACR,YACA,KACA,MACA,kCACE,MAAM,QAAQ,CAAO,EAAI,WAAa,OAAO,iFAE7C,gFAEJ,EAEF,OAAO,EAAM,EAAK,CAAO,CAAC,EAiBrB,SAAS,CAAc,CAC5B,EACA,EACA,EAAY,QACyB,CACrC,GAAI,CAAC,EAAW,CAAQ,EACtB,MAAM,IAAI,EACR,EACA,KACA,EACA,6CACE,IAAa,KAAO,OAAS,OAAO,gFAEpC,wDACJ,EAgBF,IAAM,EAAO,EAAqB,EAAU,CAAO,EAE7C,EAAW,EAAO,EAAK,SAAU,EAAS,CAAE,MAAO,KAAM,WAAU,CAAC,EAC1E,MAAO,CACL,KAAM,EAAS,KAMf,OAAQ,EAAW,EAAS,OAAO,EAAE,MAAS,EAAE,IAAI,CAAC,EAAO,IAC1D,EAAK,eAAe,IAAI,CAAK,EACzB,EAAkB,EAAO,CAAS,EAClC,IAAU,MAAQ,IAAU,OACzB,GAAS,KACV,EAAQ,cAAc,CAAK,CACnC,CACF,EAWF,SAAS,CAAW,CAAC,EAA0B,CAC7C,GAAI,EAAW,CAAK,EAAG,OAAO,EAC9B,OAAO,EAAM,IAAM,CAAK",
-  "debugId": "88697C98C3425C4B64756E2164756E21",
+  "debugId": "AA527BE599AAA49164756E2164756E21",
   "names": []
 }

package/dist/{chunk-kan3yz82.js → chunk-a5htej1f.js}

@@ -1,5 +1,5 @@
 // @bun
-import{S as C}from"./chunk-vb73ddwz.js";import"./chunk-8z29qvvm.js";import{U as ne}from"./chunk-7rfw4h2x.js";import{V as _}from"./chunk-gmeeyg19.js";import{Cl as F,yl as c}from"./chunk-egwz89ze.js";var x=c(_(),1),T=c(C(),1);var q=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string");var D=c(ne(),1);var u=c(_(),1),m=c(C(),1);var W=300000,h="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var j=async(e,o={},r)=>{let{SSOOIDCClient:t}=await import("./chunk-27habdva.js").then((m)=>c(m.default,1)),n=(f)=>o.clientConfig?.[f]??o.parentClientConfig?.[f]??r?.[f];return new t(Object.assign({},o.clientConfig??{},{region:e??o.clientConfig?.region,logger:n("logger"),userAgentAppId:n("userAgentAppId")}))};var X=async(e,o,r={},t)=>{let{CreateTokenCommand:n}=await import("./chunk-27habdva.js").then((m)=>c(m.default,1));return(await j(o,r,t)).send(new n({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))};var z=c(_(),1);var P=(e)=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new z.TokenProviderError(`Token is expired. ${h}`,!1)};var J=c(_(),1);var g=(e,o,r=!1)=>{if(typeof o>"u")throw new J.TokenProviderError(`Value not present for '${e}' in SSO Token${r?". Cannot refresh":""}. ${h}`,!1)};var V=c(C(),1);import{promises as re}from"fs";var{writeFile:te}=re,Y=(e,o)=>{let r=V.getSSOTokenFilepath(e),t=JSON.stringify(o,null,2);return te(r,t)};var B=new Date(0),Q=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let r=await m.parseKnownFiles(e),t=m.getProfileName({profile:e.profile??o?.profile}),n=r[t];if(!n)throw new u.TokenProviderError(`Profile '${t}' could not be found in shared credentials file.`,!1);else if(!n.sso_session)throw new u.TokenProviderError(`Profile '${t}' is missing required property 'sso_session'.`);let a=n.sso_session,p=(await m.loadSsoSessionData(e))[a];if(!p)throw new u.TokenProviderError(`Sso session '${a}' could not be found in shared credentials file.`,!1);for(let i of["sso_start_url","sso_region"])if(!p[i])throw new u.TokenProviderError(`Sso session '${a}' is missing required property '${i}'.`,!1);let{sso_start_url:S,sso_region:I}=p,s;try{s=await m.getSSOTokenFromFile(a)}catch(i){throw new u.TokenProviderError(`The SSO session token associated with profile=${t} was not found or is invalid. ${h}`,!1)}g("accessToken",s.accessToken),g("expiresAt",s.expiresAt);let{accessToken:y,expiresAt:E}=s,l={token:y,expiration:new Date(E)};if(l.expiration.getTime()-Date.now()>W)return l;if(Date.now()-B.getTime()<30000)return P(l),l;g("clientId",s.clientId,!0),g("clientSecret",s.clientSecret,!0),g("refreshToken",s.refreshToken,!0);try{B.setTime(Date.now());let i=await X(s,I,e,o);g("accessToken",i.accessToken),g("expiresIn",i.expiresIn);let O=new Date(Date.now()+i.expiresIn*1000);try{await Y(a,{...s,accessToken:i.accessToken,expiresAt:O.toISOString(),refreshToken:i.refreshToken})}catch(R){}return{token:i.accessToken,expiration:O}}catch(i){return P(l),l}};var k=c(_(),1),Z=c(C(),1),A=!1,$=async({ssoStartUrl:e,ssoSession:o,ssoAccountId:r,ssoRegion:t,ssoRoleName:n,ssoClient:a,clientConfig:f,parentClientConfig:p,callerClientConfig:S,profile:I,filepath:s,configFilepath:y,ignoreCache:E,logger:l})=>{let i,O="To refresh this SSO session run aws sso login with the corresponding profile.";if(o)try{let w=await Q({profile:I,filepath:s,configFilepath:y,ignoreCache:E})();i={accessToken:w.token,expiresAt:new Date(w.expiration).toISOString()}}catch(w){throw new k.CredentialsProviderError(w.message,{tryNextLink:A,logger:l})}else try{i=await Z.getSSOTokenFromFile(e)}catch(w){throw new k.CredentialsProviderError("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:A,logger:l})}if(new Date(i.expiresAt).getTime()-Date.now()<=0)throw new k.CredentialsProviderError("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:A,logger:l});let{accessToken:R}=i,{SSOClient:d,GetRoleCredentialsCommand:N}=await import("./chunk-ctrmztan.js"),se=a||new d(Object.assign({},f??{},{logger:f?.logger??S?.logger??p?.logger,region:f?.region??t,userAgentAppId:f?.userAgentAppId??S?.userAgentAppId??p?.userAgentAppId})),L;try{L=await se.send(new N({accountId:r,roleName:n,accessToken:R}))}catch(w){throw new k.CredentialsProviderError(w,{tryNextLink:A,logger:l})}let{roleCredentials:{accessKeyId:M,secretAccessKey:G,sessionToken:K,expiration:b,credentialScope:H,accountId:U}={}}=L;if(!M||!G||!K||!b)throw new k.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:A,logger:l});let v={accessKeyId:M,secretAccessKey:G,sessionToken:K,expiration:new Date(b),...H&&{credentialScope:H},...U&&{accountId:U}};if(o)D.setCredentialFeature(v,"CREDENTIALS_SSO","s");else D.setCredentialFeature(v,"CREDENTIALS_SSO_LEGACY","u");return v};var ee=c(_(),1),oe=(e,o)=>{let{sso_start_url:r,sso_account_id:t,sso_region:n,sso_role_name:a}=e;if(!r||!t||!n||!a)throw new ee.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
+import{S as C}from"./chunk-asnk2jqn.js";import"./chunk-n6ywagxv.js";import{U as ne}from"./chunk-95gag2pg.js";import{V as _}from"./chunk-g3sryyn4.js";import{Dl as F,zl as c}from"./chunk-wgre66wq.js";var x=c(_(),1),T=c(C(),1);var q=(e)=>e&&(typeof e.sso_start_url==="string"||typeof e.sso_account_id==="string"||typeof e.sso_session==="string"||typeof e.sso_region==="string"||typeof e.sso_role_name==="string");var D=c(ne(),1);var u=c(_(),1),m=c(C(),1);var W=300000,h="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var j=async(e,o={},r)=>{let{SSOOIDCClient:t}=await import("./chunk-04h49y2f.js").then((m)=>c(m.default,1)),n=(f)=>o.clientConfig?.[f]??o.parentClientConfig?.[f]??r?.[f];return new t(Object.assign({},o.clientConfig??{},{region:e??o.clientConfig?.region,logger:n("logger"),userAgentAppId:n("userAgentAppId")}))};var X=async(e,o,r={},t)=>{let{CreateTokenCommand:n}=await import("./chunk-04h49y2f.js").then((m)=>c(m.default,1));return(await j(o,r,t)).send(new n({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))};var z=c(_(),1);var P=(e)=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new z.TokenProviderError(`Token is expired. ${h}`,!1)};var J=c(_(),1);var g=(e,o,r=!1)=>{if(typeof o>"u")throw new J.TokenProviderError(`Value not present for '${e}' in SSO Token${r?". Cannot refresh":""}. ${h}`,!1)};var V=c(C(),1);import{promises as re}from"fs";var{writeFile:te}=re,Y=(e,o)=>{let r=V.getSSOTokenFilepath(e),t=JSON.stringify(o,null,2);return te(r,t)};var B=new Date(0),Q=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let r=await m.parseKnownFiles(e),t=m.getProfileName({profile:e.profile??o?.profile}),n=r[t];if(!n)throw new u.TokenProviderError(`Profile '${t}' could not be found in shared credentials file.`,!1);else if(!n.sso_session)throw new u.TokenProviderError(`Profile '${t}' is missing required property 'sso_session'.`);let a=n.sso_session,p=(await m.loadSsoSessionData(e))[a];if(!p)throw new u.TokenProviderError(`Sso session '${a}' could not be found in shared credentials file.`,!1);for(let i of["sso_start_url","sso_region"])if(!p[i])throw new u.TokenProviderError(`Sso session '${a}' is missing required property '${i}'.`,!1);let{sso_start_url:S,sso_region:I}=p,s;try{s=await m.getSSOTokenFromFile(a)}catch(i){throw new u.TokenProviderError(`The SSO session token associated with profile=${t} was not found or is invalid. ${h}`,!1)}g("accessToken",s.accessToken),g("expiresAt",s.expiresAt);let{accessToken:y,expiresAt:E}=s,l={token:y,expiration:new Date(E)};if(l.expiration.getTime()-Date.now()>W)return l;if(Date.now()-B.getTime()<30000)return P(l),l;g("clientId",s.clientId,!0),g("clientSecret",s.clientSecret,!0),g("refreshToken",s.refreshToken,!0);try{B.setTime(Date.now());let i=await X(s,I,e,o);g("accessToken",i.accessToken),g("expiresIn",i.expiresIn);let O=new Date(Date.now()+i.expiresIn*1000);try{await Y(a,{...s,accessToken:i.accessToken,expiresAt:O.toISOString(),refreshToken:i.refreshToken})}catch(R){}return{token:i.accessToken,expiration:O}}catch(i){return P(l),l}};var k=c(_(),1),Z=c(C(),1),A=!1,$=async({ssoStartUrl:e,ssoSession:o,ssoAccountId:r,ssoRegion:t,ssoRoleName:n,ssoClient:a,clientConfig:f,parentClientConfig:p,callerClientConfig:S,profile:I,filepath:s,configFilepath:y,ignoreCache:E,logger:l})=>{let i,O="To refresh this SSO session run aws sso login with the corresponding profile.";if(o)try{let w=await Q({profile:I,filepath:s,configFilepath:y,ignoreCache:E})();i={accessToken:w.token,expiresAt:new Date(w.expiration).toISOString()}}catch(w){throw new k.CredentialsProviderError(w.message,{tryNextLink:A,logger:l})}else try{i=await Z.getSSOTokenFromFile(e)}catch(w){throw new k.CredentialsProviderError("The SSO session associated with this profile is invalid. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:A,logger:l})}if(new Date(i.expiresAt).getTime()-Date.now()<=0)throw new k.CredentialsProviderError("The SSO session associated with this profile has expired. To refresh this SSO session run aws sso login with the corresponding profile.",{tryNextLink:A,logger:l});let{accessToken:R}=i,{SSOClient:d,GetRoleCredentialsCommand:N}=await import("./chunk-akgd3c0k.js"),se=a||new d(Object.assign({},f??{},{logger:f?.logger??S?.logger??p?.logger,region:f?.region??t,userAgentAppId:f?.userAgentAppId??S?.userAgentAppId??p?.userAgentAppId})),L;try{L=await se.send(new N({accountId:r,roleName:n,accessToken:R}))}catch(w){throw new k.CredentialsProviderError(w,{tryNextLink:A,logger:l})}let{roleCredentials:{accessKeyId:M,secretAccessKey:G,sessionToken:K,expiration:b,credentialScope:H,accountId:U}={}}=L;if(!M||!G||!K||!b)throw new k.CredentialsProviderError("SSO returns an invalid temporary credential.",{tryNextLink:A,logger:l});let v={accessKeyId:M,secretAccessKey:G,sessionToken:K,expiration:new Date(b),...H&&{credentialScope:H},...U&&{accountId:U}};if(o)D.setCredentialFeature(v,"CREDENTIALS_SSO","s");else D.setCredentialFeature(v,"CREDENTIALS_SSO_LEGACY","u");return v};var ee=c(_(),1),oe=(e,o)=>{let{sso_start_url:r,sso_account_id:t,sso_region:n,sso_role_name:a}=e;if(!r||!t||!n||!a)throw new ee.CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
 Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:o});return e};var Ce=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:r,ssoAccountId:t,ssoRegion:n,ssoRoleName:a,ssoSession:f}=e,{ssoClient:p}=e,S=T.getProfileName({profile:e.profile??o?.profile});if(!r&&!t&&!n&&!a&&!f){let s=(await T.parseKnownFiles(e))[S];if(!s)throw new x.CredentialsProviderError(`Profile ${S} was not found.`,{logger:e.logger});if(!q(s))throw new x.CredentialsProviderError(`Profile ${S} is not configured with SSO credentials.`,{logger:e.logger});if(s?.sso_session){let d=(await T.loadSsoSessionData(e))[s.sso_session],N=` configurations in profile ${S} and sso-session ${s.sso_session}`;if(n&&n!==d.sso_region)throw new x.CredentialsProviderError("Conflicting SSO region"+N,{tryNextLink:!1,logger:e.logger});if(r&&r!==d.sso_start_url)throw new x.CredentialsProviderError("Conflicting SSO start_url"+N,{tryNextLink:!1,logger:e.logger});s.sso_region=d.sso_region,s.sso_start_url=d.sso_start_url}let{sso_start_url:y,sso_account_id:E,sso_region:l,sso_role_name:i,sso_session:O}=oe(s,e.logger);return $({ssoStartUrl:y,ssoSession:O,ssoAccountId:E,ssoRegion:l,ssoRoleName:i,ssoClient:p,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:S,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}else if(!r||!t||!n||!a)throw new x.CredentialsProviderError('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});else return $({ssoStartUrl:r,ssoSession:f,ssoAccountId:t,ssoRegion:n,ssoRoleName:a,ssoClient:p,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:S,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})};export{oe as validateSsoProfile,q as isSsoProfile,Ce as fromSSO};
 
-//# debugId=41089F33F2CB963264756E2164756E21
+//# debugId=09DA56D2B4E497BB64756E2164756E21

package/dist/{chunk-kan3yz82.js.map → chunk-a5htej1f.js.map}

@@ -15,6 +15,6 @@
     "import { CredentialsProviderError } from \"@smithy/property-provider\";\nexport const validateSsoProfile = (profile, logger) => {\n    const { sso_start_url, sso_account_id, sso_region, sso_role_name } = profile;\n    if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {\n        throw new CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters \"sso_account_id\", ` +\n            `\"sso_region\", \"sso_role_name\", \"sso_start_url\". Got ${Object.keys(profile).join(\", \")}\\nReference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger });\n    }\n    return profile;\n};\n"
   ],
   "mappings": ";8NAAA,SACA,KCDO,FAAM,JAAe,CAAC,IAAQ,IAChC,OAAO,EAAI,gBAAkB,UAC1B,OAAO,EAAI,iBAAmB,UAC9B,OAAO,EAAI,cAAgB,UAC3B,OAAO,EAAI,aAAe,UAC1B,OAAO,EAAI,gBAAkB,UCLrC,gBCAA,eACA,WCDO,IAAM,EAAmB,OACnB,EAAkB,kFCDxB,IAAM,EAAmB,MAAO,EAAW,EAAO,CAAC,EAAG,IAAuB,CAChF,IAAQ,iBAAkB,KAAa,yDACjC,EAAW,CAAC,IAAS,EAAK,eAAe,IAAS,EAAK,qBAAqB,IAAS,IAAqB,GAMhH,OALsB,IAAI,EAAc,OAAO,OAAO,CAAC,EAAG,EAAK,cAAgB,CAAC,EAAG,CAC/E,OAAQ,GAAa,EAAK,cAAc,OACxC,OAAQ,EAAS,QAAQ,EACzB,eAAgB,EAAS,gBAAgB,CAC7C,CAAC,CAAC,GCNC,IAAM,EAAqB,MAAO,EAAU,EAAW,EAAO,CAAC,EAAG,IAAuB,CAC5F,IAAQ,sBAAuB,KAAa,yDAE5C,OADsB,MAAM,EAAiB,EAAW,EAAM,CAAkB,GAC3D,KAAK,IAAI,EAAmB,CAC7C,SAAU,EAAS,SACnB,aAAc,EAAS,aACvB,aAAc,EAAS,aACvB,UAAW,eACf,CAAC,CAAC,GCTN,eAEO,IAAM,EAAsB,CAAC,IAAU,CAC1C,GAAI,EAAM,YAAc,EAAM,WAAW,QAAQ,EAAI,KAAK,IAAI,EAC1D,MAAM,IAAI,qBAAmB,qBAAqB,IAAmB,EAAK,GCJlF,eAEO,IAAM,EAAmB,CAAC,EAAK,EAAO,EAAa,KAAU,CAChE,GAAI,OAAO,EAAU,IACjB,MAAM,IAAI,qBAAmB,0BAA0B,kBAAoB,EAAa,mBAAqB,OAAO,IAAmB,EAAK,GCJpJ,eACA,mBAAS,YACT,IAAQ,cAAc,GACT,EAAsB,CAAC,EAAI,IAAa,CACjD,IAAM,EAAgB,sBAAoB,CAAE,EACtC,EAAc,KAAK,UAAU,EAAU,KAAM,CAAC,EACpD,OAAO,GAAU,EAAe,CAAW,GNC/C,IAAM,EAAyB,IAAI,KAAK,CAAC,EAC5B,EAAU,CAAC,EAAO,CAAC,IAAM,OAAS,sBAAuB,CAAC,IAAM,CACzE,EAAK,QAAQ,MAAM,oCAAoC,EACvD,IAAM,EAAW,MAAM,kBAAgB,CAAI,EACrC,EAAc,iBAAe,CAC/B,QAAS,EAAK,SAAW,GAAoB,OACjD,CAAC,EACK,EAAU,EAAS,GACzB,GAAI,CAAC,EACD,MAAM,IAAI,qBAAmB,YAAY,oDAA+D,EAAK,EAE5G,QAAI,CAAC,EAAQ,YACd,MAAM,IAAI,qBAAmB,YAAY,gDAA0D,EAEvG,IAAM,EAAiB,EAAQ,YAEzB,GADc,MAAM,qBAAmB,CAAI,GAClB,GAC/B,GAAI,CAAC,EACD,MAAM,IAAI,qBAAmB,gBAAgB,oDAAkE,EAAK,EAExH,QAAW,IAAyB,CAAC,gBAAiB,YAAY,EAC9D,GAAI,CAAC,EAAW,GACZ,MAAM,IAAI,qBAAmB,gBAAgB,oCAAiD,MAA2B,EAAK,EAGtI,IAA+B,cAAzB,EACuB,WAAvB,GAAY,EACd,EACJ,GAAI,CACA,EAAW,MAAM,sBAAoB,CAAc,EAEvD,MAAO,EAAG,CACN,MAAM,IAAI,qBAAmB,iDAAiD,kCAA4C,IAAmB,EAAK,EAEtJ,EAAiB,cAAe,EAAS,WAAW,EACpD,EAAiB,YAAa,EAAS,SAAS,EAChD,IAAQ,cAAa,aAAc,EAC7B,EAAgB,CAAE,MAAO,EAAa,WAAY,IAAI,KAAK,CAAS,CAAE,EAC5E,GAAI,EAAc,WAAW,QAAQ,EAAI,KAAK,IAAI,EAAI,EAClD,OAAO,EAEX,GAAI,KAAK,IAAI,EAAI,EAAuB,QAAQ,EAAI,MAEhD,OADA,EAAoB,CAAa,EAC1B,EAEX,EAAiB,WAAY,EAAS,SAAU,EAAI,EACpD,EAAiB,eAAgB,EAAS,aAAc,EAAI,EAC5D,EAAiB,eAAgB,EAAS,aAAc,EAAI,EAC5D,GAAI,CACA,EAAuB,QAAQ,KAAK,IAAI,CAAC,EACzC,IAAM,EAAkB,MAAM,EAAmB,EAAU,EAAW,EAAM,CAAkB,EAC9F,EAAiB,cAAe,EAAgB,WAAW,EAC3D,EAAiB,YAAa,EAAgB,SAAS,EACvD,IAAM,EAAqB,IAAI,KAAK,KAAK,IAAI,EAAI,EAAgB,UAAY,IAAI,EACjF,GAAI,CACA,MAAM,EAAoB,EAAgB,IACnC,EACH,YAAa,EAAgB,YAC7B,UAAW,EAAmB,YAAY,EAC1C,aAAc,EAAgB,YAClC,CAAC,EAEL,MAAO,EAAO,EAEd,MAAO,CACH,MAAO,EAAgB,YACvB,WAAY,CAChB,EAEJ,MAAO,EAAO,CAEV,OADA,EAAoB,CAAa,EAC1B,ID5Ef,eACA,WACM,EAA+B,GACxB,EAAwB,OAAS,cAAa,aAAY,eAAc,YAAW,cAAa,YAAW,eAAc,qBAAoB,qBAAoB,UAAS,WAAU,iBAAgB,cAAa,YAAc,CACxO,IAAI,EACE,EAAiB,gFACvB,GAAI,EACA,GAAI,CACA,IAAM,EAAS,MAAM,EAAoB,CACrC,UACA,WACA,iBACA,aACJ,CAAC,EAAE,EACH,EAAQ,CACJ,YAAa,EAAO,MACpB,UAAW,IAAI,KAAK,EAAO,UAAU,EAAE,YAAY,CACvD,EAEJ,MAAO,EAAG,CACN,MAAM,IAAI,2BAAyB,EAAE,QAAS,CAC1C,YAAa,EACb,QACJ,CAAC,EAIL,QAAI,CACA,EAAQ,MAAM,sBAAoB,CAAW,EAEjD,MAAO,EAAG,CACN,MAAM,IAAI,2BAAyB,yIAA8E,CAC7G,YAAa,EACb,QACJ,CAAC,EAGT,GAAI,IAAI,KAAK,EAAM,SAAS,EAAE,QAAQ,EAAI,KAAK,IAAI,GAAK,EACpD,MAAM,IAAI,2BAAyB,0IAA+E,CAC9G,YAAa,EACb,QACJ,CAAC,EAEL,IAAQ,eAAgB,GAChB,YAAW,6BAA8B,KAAa,+BACxD,GAAM,GACR,IAAI,EAAU,OAAO,OAAO,CAAC,EAAG,GAAgB,CAAC,EAAG,CAChD,OAAQ,GAAc,QAAU,GAAoB,QAAU,GAAoB,OAClF,OAAQ,GAAc,QAAU,EAChC,eAAgB,GAAc,gBAAkB,GAAoB,gBAAkB,GAAoB,cAC9G,CAAC,CAAC,EACF,EACJ,GAAI,CACA,EAAU,MAAM,GAAI,KAAK,IAAI,EAA0B,CACnD,UAAW,EACX,SAAU,EACV,aACJ,CAAC,CAAC,EAEN,MAAO,EAAG,CACN,MAAM,IAAI,2BAAyB,EAAG,CAClC,YAAa,EACb,QACJ,CAAC,EAEL,IAAQ,iBAAmB,cAAa,kBAAiB,eAAc,aAAY,kBAAiB,aAAc,CAAC,GAAO,EAC1H,GAAI,CAAC,GAAe,CAAC,GAAmB,CAAC,GAAgB,CAAC,EACtD,MAAM,IAAI,2BAAyB,+CAAgD,CAC/E,YAAa,EACb,QACJ,CAAC,EAEL,IAAM,EAAc,CAChB,cACA,kBACA,eACA,WAAY,IAAI,KAAK,CAAU,KAC3B,GAAmB,CAAE,iBAAgB,KACrC,GAAa,CAAE,WAAU,CACjC,EACA,GAAI,EACA,uBAAqB,EAAa,kBAAmB,GAAG,EAGxD,4BAAqB,EAAa,yBAA0B,GAAG,EAEnE,OAAO,GQxFX,gBACa,GAAqB,CAAC,EAAS,IAAW,CACnD,IAAQ,gBAAe,iBAAgB,aAAY,iBAAkB,EACrE,GAAI,CAAC,GAAiB,CAAC,GAAkB,CAAC,GAAc,CAAC,EACrD,MAAM,IAAI,4BAAyB,iJACwB,OAAO,KAAK,CAAO,EAAE,KAAK,IAAI;AAAA,oFAAyF,CAAE,YAAa,GAAO,QAAO,CAAC,EAEpN,OAAO,GVFJ,IAAM,GAAU,CAAC,EAAO,CAAC,IAAM,OAAS,sBAAuB,CAAC,IAAM,CACzE,EAAK,QAAQ,MAAM,4CAA4C,EAC/D,IAAQ,cAAa,eAAc,YAAW,cAAa,cAAe,GAClE,aAAc,EAChB,EAAc,iBAAe,CAC/B,QAAS,EAAK,SAAW,GAAoB,OACjD,CAAC,EACD,GAAI,CAAC,GAAe,CAAC,GAAgB,CAAC,GAAa,CAAC,GAAe,CAAC,EAAY,CAE5E,IAAM,GADW,MAAM,kBAAgB,CAAI,GAClB,GACzB,GAAI,CAAC,EACD,MAAM,IAAI,2BAAyB,WAAW,mBAA8B,CAAE,OAAQ,EAAK,MAAO,CAAC,EAEvG,GAAI,CAAC,EAAa,CAAO,EACrB,MAAM,IAAI,2BAAyB,WAAW,4CAAuD,CACjG,OAAQ,EAAK,MACjB,CAAC,EAEL,GAAI,GAAS,YAAa,CAEtB,IAAM,GADc,MAAM,qBAAmB,CAAI,GACrB,EAAQ,aAC9B,EAAc,8BAA8B,qBAA+B,EAAQ,cACzF,GAAI,GAAa,IAAc,EAAQ,WACnC,MAAM,IAAI,2BAAyB,yBAA2B,EAAa,CACvE,YAAa,GACb,OAAQ,EAAK,MACjB,CAAC,EAEL,GAAI,GAAe,IAAgB,EAAQ,cACvC,MAAM,IAAI,2BAAyB,4BAA8B,EAAa,CAC1E,YAAa,GACb,OAAQ,EAAK,MACjB,CAAC,EAEL,EAAQ,WAAa,EAAQ,WAC7B,EAAQ,cAAgB,EAAQ,cAEpC,IAAQ,gBAAe,iBAAgB,aAAY,gBAAe,eAAgB,GAAmB,EAAS,EAAK,MAAM,EACzH,OAAO,EAAsB,CACzB,YAAa,EACb,WAAY,EACZ,aAAc,EACd,UAAW,EACX,YAAa,EACb,UAAW,EACX,aAAc,EAAK,aACnB,mBAAoB,EAAK,mBACzB,mBAAoB,EAAK,mBACzB,QAAS,EACT,SAAU,EAAK,SACf,eAAgB,EAAK,eACrB,YAAa,EAAK,YAClB,OAAQ,EAAK,MACjB,CAAC,EAEA,QAAI,CAAC,GAAe,CAAC,GAAgB,CAAC,GAAa,CAAC,EACrD,MAAM,IAAI,2BAAyB,+HAC8B,CAAE,YAAa,GAAO,OAAQ,EAAK,MAAO,CAAC,EAG5G,YAAO,EAAsB,CACzB,cACA,aACA,eACA,YACA,cACA,YACA,aAAc,EAAK,aACnB,mBAAoB,EAAK,mBACzB,mBAAoB,EAAK,mBACzB,QAAS,EACT,SAAU,EAAK,SACf,eAAgB,EAAK,eACrB,YAAa,EAAK,YAClB,OAAQ,EAAK,MACjB,CAAC",
-  "debugId": "41089F33F2CB963264756E2164756E21",
+  "debugId": "09DA56D2B4E497BB64756E2164756E21",
   "names": []
 }

package/dist/chunk-a5qn2sq8.js

@@ -0,0 +1,4 @@
+// @bun
+import{xl as J}from"./chunk-51fvpq55.js";class L{kernel;onException;constructor(f){this.kernel=new f.kernel,this.kernel.boot.call(this.kernel),this.onException=f.onException??((A)=>{console.error("Unhandled exception in App:",A)})}async waitForBoot(){await this.kernel.waitForBoot()}getComponentTree(){return this.kernel.viewRoutes().componentTree}getFlatComponentTree(){let f=new Set;for(let A of this.kernel.domains().viewDispatchers())for(let C of A.flatComponentTree)f.add(C);return Array.from(f)}getRequiredViews(){let f={};for(let A of this.kernel.domains().viewDispatchers())Object.assign(f,A.requiredViews);return f}devAllowedHosts(){let f=this.kernel.domains();if(!f.resolver)return[];return f.acceptsCustomDomains?!0:[`.${f.resolver.root}`]}sockets(){return this.kernel.sockets.call(this.kernel)}applyTrustedClientIp(f){this.kernel.domains().applyClientIp(f)}getRouteManifest(){return this.kernel.viewRoutes().routeManifest}globallyGated=new WeakMap;async withGlobalMiddleware(f,A,C){let z;try{z=await this.kernel.run.call(this.kernel,()=>this.kernel.globalMiddleware(f))}catch(F){return await C(F)}if(z.refusal)return z.refusal;return this.globallyGated.set(f,z.carried),z.apply(await A(f))}async fetch(f){let A=new URL(f.url);return this.kernel.run.call(this.kernel,async()=>{this.applyTrustedClientIp(f);let C=this.globallyGated.has(f),z=C?null:await this.kernel.globalMiddleware(f),F=C?this.globallyGated.get(f):z.carried;if(z?.refusal)return z.refusal;let H=this.kernel.mcpHttp();if(H){let B=await H.handle(f);if(B)return z?z.apply(B):B}let I=this.kernel.domains(),D=await I.ask(f)??await I.route(f);if(D instanceof Response)return z?z.apply(D):D;if(!D){let B=new Response("Unknown host",{status:404});return z?z.apply(B):B}let G=J(A.pathname)?await D.api.handleApiRequest(f,F):await D.view.handleViewRequest(f,F);if(!z)return G;if(typeof G==="function"){let B=G;return async(...M)=>z.apply(await B(...M))}return z.apply(G)})}dispatchJob(f,A){return this.kernel.run.bind(this.kernel)(()=>{return this.kernel.queue().dispatchJob(f,A)})}shutdown(f){return this.kernel.shutdown(f)}destroy(){this.kernel.destroy()}clone(){return Object.assign(Object.create(Object.getPrototypeOf(this)),this)}}export{L as Ea};
+
+//# debugId=9AA087EDDEF2E9B564756E2164756E21

package/dist/chunk-a5qn2sq8.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../app/App.ts"],
+  "sourcesContent": [
+    "import type { Kernel } from \"../kernel\";\nimport type { CarriedContext } from \"../http/requestContext\";\nimport { isApiPath } from \"../services/router/apiPath\";\nimport type { SocketHub } from \"../services/broadcast/SocketHub\";\n\n/** What the servers use of the broadcast `SocketHub`. */\nexport type SocketTransport = Pick<\n  SocketHub,\n  \"matches\" | \"upgrade\" | \"websocket\" | \"socketOptions\" | \"start\" | \"shutdown\"\n>;\n\ninterface AppParams {\n  kernel: new () => Kernel;\n  onException?: (error: Error) => void;\n}\n\nexport class App {\n  private kernel: Kernel;\n  public onException?: (error: Error) => void;\n\n  constructor(params: AppParams) {\n    this.kernel = new params.kernel();\n    this.kernel.boot.call(this.kernel);\n    this.onException =\n      params.onException ??\n      ((error: Error) => {\n        console.error(\"Unhandled exception in App:\", error);\n      });\n  }\n\n  // Every service this class touches is resolved through a `this.kernel.*`\n  // accessor rather than by importing the service class and calling `app()`\n  // here. That is deliberate: the built bin (`dist/bin/gemi.js`) bundles its own\n  // copy of gemi, while the app's Kernel is loaded from source and resolves\n  // `gemi/*` to the source modules — so the two copies have *different*\n  // `kernelContext` AsyncLocalStorage instances and different `Application`\n  // class objects. A method call on the Kernel executes in the app's copy and\n  // reads the app's container; a resolution attempted here would not. Service\n  // *tokens* still cross the boundary safely (they are plain strings), which is\n  // why `kernel.resolve()` works from either side.\n  public async waitForBoot() {\n    await this.kernel.waitForBoot();\n  }\n\n  public getComponentTree() {\n    return this.kernel.viewRoutes().componentTree;\n  }\n\n  // Every host group's views, not just the root's: the servers load these\n  // modules up front, and a view only an `admin.` group routes to still has\n  // to be among them.\n  public getFlatComponentTree() {\n    const views = new Set<string>();\n    for (const dispatcher of this.kernel.domains().viewDispatchers()) {\n      for (const view of dispatcher.flatComponentTree) {\n        views.add(view);\n      }\n    }\n    return Array.from(views);\n  }\n\n  /**\n   * The views gemi's own routes need from `app/views`, by name, with the\n   * config that requires each (#1040), for the servers' existence check.\n   */\n  public getRequiredViews(): Record<string, string> {\n    const views: Record<string, string> = {};\n    for (const dispatcher of this.kernel.domains().viewDispatchers()) {\n      Object.assign(views, dispatcher.requiredViews);\n    }\n    return views;\n  }\n\n  /**\n   * The hosts the dev server's Vite may answer: the `route.domains` root and\n   * its subdomains, or any host when custom domains are on, since those are\n   * only known to the app's resolver.\n   */\n  public devAllowedHosts(): true | string[] {\n    const domains = this.kernel.domains();\n    if (!domains.resolver) {\n      return [];\n    }\n    return domains.acceptsCustomDomains ? true : [`.${domains.resolver.root}`];\n  }\n\n  /**\n   * The broadcast WebSocket endpoint the servers wire into `Bun.serve`, or\n   * `null` when the app has no `route.channels`. Typed structurally: the hub\n   * belongs to the app's copy of gemi (see the note above).\n   */\n  public sockets(): SocketTransport | null {\n    return this.kernel.sockets.call(this.kernel);\n  }\n\n  /**\n   * Applies `route.domains.trustProxy.clientIpHeader`, or\n   * `GEMI_CLIENT_IP_HEADER` for an app without `route.domains`: on a request\n   * that carries the proxy's secret, the address that header names becomes\n   * the one in `X-Forwarded-For`. The servers call it right after settling\n   * `X-Forwarded-For` (`GEMI_TRUST_PROXY`) and before anything reads it —\n   * the socket upgrade and the global middleware included. `fetch` calls it\n   * too, for a caller that is not one of the servers. Idempotent.\n   */\n  public applyTrustedClientIp(req: Request) {\n    this.kernel.domains().applyClientIp(req);\n  }\n\n  public getRouteManifest() {\n    return this.kernel.viewRoutes().routeManifest;\n  }\n\n  // Requests `withGlobalMiddleware` already ran the global middleware for, so\n  // `fetch` inside it does not run the list a second time, and can still hand\n  // the route what the list carried. Keyed by the Request object: the servers\n  // hand `fetch` the same one they gated.\n  private globallyGated = new WeakMap<Request, CarriedContext | null>();\n\n  /**\n   * Runs the `global` middleware list, then `next` — what the servers put in\n   * front of everything they serve, so the list covers static files, which\n   * never reach `fetch`, as well as routes. A refusal is answered without\n   * calling `next`. A global middleware that throws something other than a\n   * break is answered by `onError` rather than by `next`, since a gate that\n   * failed must not let a static file through.\n   */\n  public async withGlobalMiddleware(\n    req: Request,\n    next: (req: Request) => Promise<Response>,\n    onError: (err: unknown) => Response | Promise<Response>,\n  ): Promise<Response> {\n    let outcome: Awaited<ReturnType<Kernel[\"globalMiddleware\"]>>;\n    try {\n      outcome = await this.kernel.run.call(this.kernel, () => this.kernel.globalMiddleware(req));\n    } catch (err) {\n      return await onError(err);\n    }\n    if (outcome.refusal) {\n      return outcome.refusal;\n    }\n    this.globallyGated.set(req, outcome.carried);\n    return outcome.apply(await next(req));\n  }\n\n  public async fetch(req: Request): Promise<Response> {\n    const url = new URL(req.url);\n    return this.kernel.run.call(this.kernel, async () => {\n      // Repeated from the servers, for a caller that is not one of them.\n      this.applyTrustedClientIp(req);\n      // Run here too for a caller that is not one of the servers, a test or an\n      // app's own `Bun.serve`, so the list is not skipped by calling `fetch`.\n      const gated = this.globallyGated.has(req);\n      const outcome = gated ? null : await this.kernel.globalMiddleware(req);\n      const carried = gated ? this.globallyGated.get(req) : outcome.carried;\n      if (outcome?.refusal) {\n        return outcome.refusal;\n      }\n      // The MCP endpoint, and its OAuth endpoints, on the host it is\n      // configured for. Ahead of routing, so no route can shadow it, and after\n      // the global middleware, which covers it as it covers everything.\n      const mcp = this.kernel.mcpHttp();\n      if (mcp) {\n        const answered = await mcp.handle(req);\n        if (answered) {\n          return outcome ? outcome.apply(answered) : answered;\n        }\n      }\n      const domains = this.kernel.domains();\n      const dispatchers = (await domains.ask(req)) ?? (await domains.route(req));\n      if (dispatchers instanceof Response) {\n        return outcome ? outcome.apply(dispatchers) : dispatchers;\n      }\n      if (!dispatchers) {\n        const unknown = new Response(\"Unknown host\", { status: 404 });\n        return outcome ? outcome.apply(unknown) : unknown;\n      }\n      const result = isApiPath(url.pathname)\n        ? await dispatchers.api.handleApiRequest(req, carried)\n        : await dispatchers.view.handleViewRequest(req, carried);\n      if (!outcome) {\n        return result;\n      }\n      // A document comes back as a render function the server calls with its\n      // manifests, and the Response only exists once it has.\n      if (typeof result === \"function\") {\n        const render = result as (...args: any[]) => Promise<Response>;\n        return (async (...args: any[]) => outcome.apply(await render(...args))) as any;\n      }\n      return outcome.apply(result);\n    });\n  }\n\n  public dispatchJob(jobName: string, args: string) {\n    const kernelRun = this.kernel.run.bind(this.kernel);\n    return kernelRun(() => {\n      return this.kernel.queue().dispatchJob(jobName, args);\n    });\n  }\n\n  /** Every provider's `shutdown()`; see `Kernel.shutdown`. */\n  public shutdown(options?: { timeoutMs?: number }) {\n    return this.kernel.shutdown(options);\n  }\n\n  public destroy() {\n    this.kernel.destroy();\n  }\n\n  public clone() {\n    return Object.assign(Object.create(Object.getPrototypeOf(this)), this);\n  }\n}\n\nexport type FetchHandler = InstanceType<typeof App>[\"fetch\"];\n"
+  ],
+  "mappings": ";yCAgBO,MAAM,CAAI,CACP,OACD,YAEP,WAAW,CAAC,EAAmB,CAC7B,KAAK,OAAS,IAAI,EAAO,OACzB,KAAK,OAAO,KAAK,KAAK,KAAK,MAAM,EACjC,KAAK,YACH,EAAO,cACN,CAAC,IAAiB,CACjB,QAAQ,MAAM,8BAA+B,CAAK,SAc3C,YAAW,EAAG,CACzB,MAAM,KAAK,OAAO,YAAY,EAGzB,gBAAgB,EAAG,CACxB,OAAO,KAAK,OAAO,WAAW,EAAE,cAM3B,oBAAoB,EAAG,CAC5B,IAAM,EAAQ,IAAI,IAClB,QAAW,KAAc,KAAK,OAAO,QAAQ,EAAE,gBAAgB,EAC7D,QAAW,KAAQ,EAAW,kBAC5B,EAAM,IAAI,CAAI,EAGlB,OAAO,MAAM,KAAK,CAAK,EAOlB,gBAAgB,EAA2B,CAChD,IAAM,EAAgC,CAAC,EACvC,QAAW,KAAc,KAAK,OAAO,QAAQ,EAAE,gBAAgB,EAC7D,OAAO,OAAO,EAAO,EAAW,aAAa,EAE/C,OAAO,EAQF,eAAe,EAAoB,CACxC,IAAM,EAAU,KAAK,OAAO,QAAQ,EACpC,GAAI,CAAC,EAAQ,SACX,MAAO,CAAC,EAEV,OAAO,EAAQ,qBAAuB,GAAO,CAAC,IAAI,EAAQ,SAAS,MAAM,EAQpE,OAAO,EAA2B,CACvC,OAAO,KAAK,OAAO,QAAQ,KAAK,KAAK,MAAM,EAYtC,oBAAoB,CAAC,EAAc,CACxC,KAAK,OAAO,QAAQ,EAAE,cAAc,CAAG,EAGlC,gBAAgB,EAAG,CACxB,OAAO,KAAK,OAAO,WAAW,EAAE,cAO1B,cAAgB,IAAI,aAUf,qBAAoB,CAC/B,EACA,EACA,EACmB,CACnB,IAAI,EACJ,GAAI,CACF,EAAU,MAAM,KAAK,OAAO,IAAI,KAAK,KAAK,OAAQ,IAAM,KAAK,OAAO,iBAAiB,CAAG,CAAC,EACzF,MAAO,EAAK,CACZ,OAAO,MAAM,EAAQ,CAAG,EAE1B,GAAI,EAAQ,QACV,OAAO,EAAQ,QAGjB,OADA,KAAK,cAAc,IAAI,EAAK,EAAQ,OAAO,EACpC,EAAQ,MAAM,MAAM,EAAK,CAAG,CAAC,OAGzB,MAAK,CAAC,EAAiC,CAClD,IAAM,EAAM,IAAI,IAAI,EAAI,GAAG,EAC3B,OAAO,KAAK,OAAO,IAAI,KAAK,KAAK,OAAQ,SAAY,CAEnD,KAAK,qBAAqB,CAAG,EAG7B,IAAM,EAAQ,KAAK,cAAc,IAAI,CAAG,EAClC,EAAU,EAAQ,KAAO,MAAM,KAAK,OAAO,iBAAiB,CAAG,EAC/D,EAAU,EAAQ,KAAK,cAAc,IAAI,CAAG,EAAI,EAAQ,QAC9D,GAAI,GAAS,QACX,OAAO,EAAQ,QAKjB,IAAM,EAAM,KAAK,OAAO,QAAQ,EAChC,GAAI,EAAK,CACP,IAAM,EAAW,MAAM,EAAI,OAAO,CAAG,EACrC,GAAI,EACF,OAAO,EAAU,EAAQ,MAAM,CAAQ,EAAI,EAG/C,IAAM,EAAU,KAAK,OAAO,QAAQ,EAC9B,EAAe,MAAM,EAAQ,IAAI,CAAG,GAAO,MAAM,EAAQ,MAAM,CAAG,EACxE,GAAI,aAAuB,SACzB,OAAO,EAAU,EAAQ,MAAM,CAAW,EAAI,EAEhD,GAAI,CAAC,EAAa,CAChB,IAAM,EAAU,IAAI,SAAS,eAAgB,CAAE,OAAQ,GAAI,CAAC,EAC5D,OAAO,EAAU,EAAQ,MAAM,CAAO,EAAI,EAE5C,IAAM,EAAS,EAAU,EAAI,QAAQ,EACjC,MAAM,EAAY,IAAI,iBAAiB,EAAK,CAAO,EACnD,MAAM,EAAY,KAAK,kBAAkB,EAAK,CAAO,EACzD,GAAI,CAAC,EACH,OAAO,EAIT,GAAI,OAAO,IAAW,WAAY,CAChC,IAAM,EAAS,EACf,MAAQ,UAAU,IAAgB,EAAQ,MAAM,MAAM,EAAO,GAAG,CAAI,CAAC,EAEvE,OAAO,EAAQ,MAAM,CAAM,EAC5B,EAGI,WAAW,CAAC,EAAiB,EAAc,CAEhD,OADkB,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,EACjC,IAAM,CACrB,OAAO,KAAK,OAAO,MAAM,EAAE,YAAY,EAAS,CAAI,EACrD,EAII,QAAQ,CAAC,EAAkC,CAChD,OAAO,KAAK,OAAO,SAAS,CAAO,EAG9B,OAAO,EAAG,CACf,KAAK,OAAO,QAAQ,EAGf,KAAK,EAAG,CACb,OAAO,OAAO,OAAO,OAAO,OAAO,OAAO,eAAe,IAAI,CAAC,EAAG,IAAI,EAEzE",
+  "debugId": "9AA087EDDEF2E9B564756E2164756E21",
+  "names": []
+}