gitframes 1.2.35

package/dist/dist-cjs--KIl7Gqy.mjs

@@ -0,0 +1,6 @@
+import "./chunk-GMkBE123.mjs";
+import { t as require_dist_cjs } from "./dist-cjs-C4b9TCXd.mjs";
+
+export default require_dist_cjs();
+
+export {  };

package/dist/dist-cjs-B-_4TVjP.mjs

@@ -0,0 +1,66 @@
+import { a as __toCommonJS, i as __require, t as __commonJSMin } from "./chunk-GMkBE123.mjs";
+import { n as init_client, t as client_exports } from "./client-Dyypr8tt.mjs";
+import { t as require_dist_cjs$1 } from "./dist-cjs-D52jYyEm.mjs";
+import { t as require_dist_cjs$2 } from "./dist-cjs-DhWYgNfa.mjs";
+
+//#region ../../node_modules/.pnpm/@aws-sdk+credential-provider-process@3.972.18/node_modules/@aws-sdk/credential-provider-process/dist-cjs/index.js
+var require_dist_cjs = /* @__PURE__ */ __commonJSMin(((exports) => {
+	var sharedIniFileLoader = require_dist_cjs$2();
+	var propertyProvider = require_dist_cjs$1();
+	var node_child_process = __require("node:child_process");
+	var node_util = __require("node:util");
+	var client = (init_client(), __toCommonJS(client_exports));
+	const getValidatedProcessCredentials = (profileName, data, profiles) => {
+		if (data.Version !== 1) throw Error(`Profile ${profileName} credential_process did not return Version 1.`);
+		if (data.AccessKeyId === void 0 || data.SecretAccessKey === void 0) throw Error(`Profile ${profileName} credential_process returned invalid credentials.`);
+		if (data.Expiration) {
+			const currentTime = /* @__PURE__ */ new Date();
+			if (new Date(data.Expiration) < currentTime) throw Error(`Profile ${profileName} credential_process returned expired credentials.`);
+		}
+		let accountId = data.AccountId;
+		if (!accountId && profiles?.[profileName]?.aws_account_id) accountId = profiles[profileName].aws_account_id;
+		const credentials = {
+			accessKeyId: data.AccessKeyId,
+			secretAccessKey: data.SecretAccessKey,
+			...data.SessionToken && { sessionToken: data.SessionToken },
+			...data.Expiration && { expiration: new Date(data.Expiration) },
+			...data.CredentialScope && { credentialScope: data.CredentialScope },
+			...accountId && { accountId }
+		};
+		client.setCredentialFeature(credentials, "CREDENTIALS_PROCESS", "w");
+		return credentials;
+	};
+	const resolveProcessCredentials = async (profileName, profiles, logger) => {
+		const profile = profiles[profileName];
+		if (profiles[profileName]) {
+			const credentialProcess = profile["credential_process"];
+			if (credentialProcess !== void 0) {
+				const execPromise = node_util.promisify(sharedIniFileLoader.externalDataInterceptor?.getTokenRecord?.().exec ?? node_child_process.exec);
+				try {
+					const { stdout } = await execPromise(credentialProcess);
+					let data;
+					try {
+						data = JSON.parse(stdout.trim());
+					} catch {
+						throw Error(`Profile ${profileName} credential_process returned invalid JSON.`);
+					}
+					return getValidatedProcessCredentials(profileName, data, profiles);
+				} catch (error) {
+					throw new propertyProvider.CredentialsProviderError(error.message, { logger });
+				}
+			} else throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} did not contain credential_process.`, { logger });
+		} else throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} could not be found in shared credentials file.`, { logger });
+	};
+	const fromProcess = (init = {}) => async ({ callerClientConfig } = {}) => {
+		init.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");
+		const profiles = await sharedIniFileLoader.parseKnownFiles(init);
+		return resolveProcessCredentials(sharedIniFileLoader.getProfileName({ profile: init.profile ?? callerClientConfig?.profile }), profiles, init.logger);
+	};
+	exports.fromProcess = fromProcess;
+}));
+
+//#endregion
+export default require_dist_cjs();
+
+export {  };
+//# sourceMappingURL=dist-cjs-B-_4TVjP.mjs.map

package/dist/dist-cjs-B-_4TVjP.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dist-cjs-B-_4TVjP.mjs","names":[],"sources":["../../../node_modules/.pnpm/@aws-sdk+credential-provider-process@3.972.18/node_modules/@aws-sdk/credential-provider-process/dist-cjs/index.js"],"sourcesContent":["'use strict';\n\nvar sharedIniFileLoader = require('@smithy/shared-ini-file-loader');\nvar propertyProvider = require('@smithy/property-provider');\nvar node_child_process = require('node:child_process');\nvar node_util = require('node:util');\nvar client = require('@aws-sdk/core/client');\n\nconst getValidatedProcessCredentials = (profileName, data, profiles) => {\n    if (data.Version !== 1) {\n        throw Error(`Profile ${profileName} credential_process did not return Version 1.`);\n    }\n    if (data.AccessKeyId === undefined || data.SecretAccessKey === undefined) {\n        throw Error(`Profile ${profileName} credential_process returned invalid credentials.`);\n    }\n    if (data.Expiration) {\n        const currentTime = new Date();\n        const expireTime = new Date(data.Expiration);\n        if (expireTime < currentTime) {\n            throw Error(`Profile ${profileName} credential_process returned expired credentials.`);\n        }\n    }\n    let accountId = data.AccountId;\n    if (!accountId && profiles?.[profileName]?.aws_account_id) {\n        accountId = profiles[profileName].aws_account_id;\n    }\n    const credentials = {\n        accessKeyId: data.AccessKeyId,\n        secretAccessKey: data.SecretAccessKey,\n        ...(data.SessionToken && { sessionToken: data.SessionToken }),\n        ...(data.Expiration && { expiration: new Date(data.Expiration) }),\n        ...(data.CredentialScope && { credentialScope: data.CredentialScope }),\n        ...(accountId && { accountId }),\n    };\n    client.setCredentialFeature(credentials, \"CREDENTIALS_PROCESS\", \"w\");\n    return credentials;\n};\n\nconst resolveProcessCredentials = async (profileName, profiles, logger) => {\n    const profile = profiles[profileName];\n    if (profiles[profileName]) {\n        const credentialProcess = profile[\"credential_process\"];\n        if (credentialProcess !== undefined) {\n            const execPromise = node_util.promisify(sharedIniFileLoader.externalDataInterceptor?.getTokenRecord?.().exec ?? node_child_process.exec);\n            try {\n                const { stdout } = await execPromise(credentialProcess);\n                let data;\n                try {\n                    data = JSON.parse(stdout.trim());\n                }\n                catch {\n                    throw Error(`Profile ${profileName} credential_process returned invalid JSON.`);\n                }\n                return getValidatedProcessCredentials(profileName, data, profiles);\n            }\n            catch (error) {\n                throw new propertyProvider.CredentialsProviderError(error.message, { logger });\n            }\n        }\n        else {\n            throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} did not contain credential_process.`, { logger });\n        }\n    }\n    else {\n        throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} could not be found in shared credentials file.`, {\n            logger,\n        });\n    }\n};\n\nconst fromProcess = (init = {}) => async ({ callerClientConfig } = {}) => {\n    init.logger?.debug(\"@aws-sdk/credential-provider-process - fromProcess\");\n    const profiles = await sharedIniFileLoader.parseKnownFiles(init);\n    return resolveProcessCredentials(sharedIniFileLoader.getProfileName({\n        profile: init.profile ?? callerClientConfig?.profile,\n    }), profiles, init.logger);\n};\n\nexports.fromProcess = fromProcess;\n"],"x_google_ignoreList":[0],"mappings":";;;;;;;CAEA,IAAI;CACJ,IAAI;CACJ,IAAI,+BAA6B,qBAAqB;CACtD,IAAI,sBAAoB,YAAY;CACpC,IAAI;CAEJ,MAAM,kCAAkC,aAAa,MAAM,aAAa;AACpE,MAAI,KAAK,YAAY,EACjB,OAAM,MAAM,WAAW,YAAY,+CAA+C;AAEtF,MAAI,KAAK,gBAAgB,UAAa,KAAK,oBAAoB,OAC3D,OAAM,MAAM,WAAW,YAAY,mDAAmD;AAE1F,MAAI,KAAK,YAAY;GACjB,MAAM,8BAAc,IAAI,MAAM;AAE9B,OADmB,IAAI,KAAK,KAAK,WAAW,GAC3B,YACb,OAAM,MAAM,WAAW,YAAY,mDAAmD;;EAG9F,IAAI,YAAY,KAAK;AACrB,MAAI,CAAC,aAAa,WAAW,cAAc,eACvC,aAAY,SAAS,aAAa;EAEtC,MAAM,cAAc;GAChB,aAAa,KAAK;GAClB,iBAAiB,KAAK;GACtB,GAAI,KAAK,gBAAgB,EAAE,cAAc,KAAK,cAAc;GAC5D,GAAI,KAAK,cAAc,EAAE,YAAY,IAAI,KAAK,KAAK,WAAW,EAAE;GAChE,GAAI,KAAK,mBAAmB,EAAE,iBAAiB,KAAK,iBAAiB;GACrE,GAAI,aAAa,EAAE,WAAW;GACjC;AACD,SAAO,qBAAqB,aAAa,uBAAuB,IAAI;AACpE,SAAO;;CAGX,MAAM,4BAA4B,OAAO,aAAa,UAAU,WAAW;EACvE,MAAM,UAAU,SAAS;AACzB,MAAI,SAAS,cAAc;GACvB,MAAM,oBAAoB,QAAQ;AAClC,OAAI,sBAAsB,QAAW;IACjC,MAAM,cAAc,UAAU,UAAU,oBAAoB,yBAAyB,kBAAkB,CAAC,QAAQ,mBAAmB,KAAK;AACxI,QAAI;KACA,MAAM,EAAE,WAAW,MAAM,YAAY,kBAAkB;KACvD,IAAI;AACJ,SAAI;AACA,aAAO,KAAK,MAAM,OAAO,MAAM,CAAC;aAE9B;AACF,YAAM,MAAM,WAAW,YAAY,4CAA4C;;AAEnF,YAAO,+BAA+B,aAAa,MAAM,SAAS;aAE/D,OAAO;AACV,WAAM,IAAI,iBAAiB,yBAAyB,MAAM,SAAS,EAAE,QAAQ,CAAC;;SAIlF,OAAM,IAAI,iBAAiB,yBAAyB,WAAW,YAAY,uCAAuC,EAAE,QAAQ,CAAC;QAIjI,OAAM,IAAI,iBAAiB,yBAAyB,WAAW,YAAY,kDAAkD,EACzH,QACH,CAAC;;CAIV,MAAM,eAAe,OAAO,EAAE,KAAK,OAAO,EAAE,uBAAuB,EAAE,KAAK;AACtE,OAAK,QAAQ,MAAM,qDAAqD;EACxE,MAAM,WAAW,MAAM,oBAAoB,gBAAgB,KAAK;AAChE,SAAO,0BAA0B,oBAAoB,eAAe,EAChE,SAAS,KAAK,WAAW,oBAAoB,SAChD,CAAC,EAAE,UAAU,KAAK,OAAO;;AAG9B,SAAQ,cAAc"}

package/dist/dist-cjs-B3TIyZ3K.mjs

@@ -0,0 +1,437 @@
+import { a as __toCommonJS, i as __require, o as __toESM, t as __commonJSMin } from "./chunk-GMkBE123.mjs";
+import { t as require_dist_cjs$2 } from "./dist-cjs-CslF8Dju.mjs";
+import { n as init_client, t as client_exports } from "./client-Dyypr8tt.mjs";
+import { t as require_dist_cjs$3 } from "./dist-cjs-D52jYyEm.mjs";
+import { t as require_dist_cjs$4 } from "./dist-cjs-DhWYgNfa.mjs";
+
+//#region ../../node_modules/.pnpm/@aws-sdk+credential-provider-login@3.972.20/node_modules/@aws-sdk/credential-provider-login/dist-cjs/index.js
+var require_dist_cjs$1 = /* @__PURE__ */ __commonJSMin(((exports) => {
+	var client = (init_client(), __toCommonJS(client_exports));
+	var propertyProvider = require_dist_cjs$3();
+	var sharedIniFileLoader = require_dist_cjs$4();
+	var protocolHttp = require_dist_cjs$2();
+	var node_crypto = __require("node:crypto");
+	var node_fs = __require("node:fs");
+	var node_os = __require("node:os");
+	var node_path = __require("node:path");
+	var LoginCredentialsFetcher = class LoginCredentialsFetcher {
+		profileData;
+		init;
+		callerClientConfig;
+		static REFRESH_THRESHOLD = 300 * 1e3;
+		constructor(profileData, init, callerClientConfig) {
+			this.profileData = profileData;
+			this.init = init;
+			this.callerClientConfig = callerClientConfig;
+		}
+		async loadCredentials() {
+			const token = await this.loadToken();
+			if (!token) throw new propertyProvider.CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`, {
+				tryNextLink: false,
+				logger: this.logger
+			});
+			const accessToken = token.accessToken;
+			const now = Date.now();
+			if (new Date(accessToken.expiresAt).getTime() - now <= LoginCredentialsFetcher.REFRESH_THRESHOLD) return this.refresh(token);
+			return {
+				accessKeyId: accessToken.accessKeyId,
+				secretAccessKey: accessToken.secretAccessKey,
+				sessionToken: accessToken.sessionToken,
+				accountId: accessToken.accountId,
+				expiration: new Date(accessToken.expiresAt)
+			};
+		}
+		get logger() {
+			return this.init?.logger;
+		}
+		get loginSession() {
+			return this.profileData.login_session;
+		}
+		async refresh(token) {
+			const { SigninClient, CreateOAuth2TokenCommand } = await import("./signin-CVUAIuED.mjs");
+			const { logger, userAgentAppId } = this.callerClientConfig ?? {};
+			const isH2 = (requestHandler$1) => {
+				return requestHandler$1?.metadata?.handlerProtocol === "h2";
+			};
+			const requestHandler = isH2(this.callerClientConfig?.requestHandler) ? void 0 : this.callerClientConfig?.requestHandler;
+			const client = new SigninClient({
+				credentials: {
+					accessKeyId: "",
+					secretAccessKey: ""
+				},
+				region: this.profileData.region ?? await this.callerClientConfig?.region?.() ?? process.env.AWS_REGION,
+				requestHandler,
+				logger,
+				userAgentAppId,
+				...this.init?.clientConfig
+			});
+			this.createDPoPInterceptor(client.middlewareStack);
+			const commandInput = { tokenInput: {
+				clientId: token.clientId,
+				refreshToken: token.refreshToken,
+				grantType: "refresh_token"
+			} };
+			try {
+				const response = await client.send(new CreateOAuth2TokenCommand(commandInput));
+				const { accessKeyId, secretAccessKey, sessionToken } = response.tokenOutput?.accessToken ?? {};
+				const { refreshToken, expiresIn } = response.tokenOutput ?? {};
+				if (!accessKeyId || !secretAccessKey || !sessionToken || !refreshToken) throw new propertyProvider.CredentialsProviderError("Token refresh response missing required fields", {
+					logger: this.logger,
+					tryNextLink: false
+				});
+				const expiresInMs = (expiresIn ?? 900) * 1e3;
+				const expiration = new Date(Date.now() + expiresInMs);
+				const updatedToken = {
+					...token,
+					accessToken: {
+						...token.accessToken,
+						accessKeyId,
+						secretAccessKey,
+						sessionToken,
+						expiresAt: expiration.toISOString()
+					},
+					refreshToken
+				};
+				await this.saveToken(updatedToken);
+				const newAccessToken = updatedToken.accessToken;
+				return {
+					accessKeyId: newAccessToken.accessKeyId,
+					secretAccessKey: newAccessToken.secretAccessKey,
+					sessionToken: newAccessToken.sessionToken,
+					accountId: newAccessToken.accountId,
+					expiration
+				};
+			} catch (error) {
+				if (error.name === "AccessDeniedException") {
+					const errorType = error.error;
+					let message;
+					switch (errorType) {
+						case "TOKEN_EXPIRED":
+							message = "Your session has expired. Please reauthenticate.";
+							break;
+						case "USER_CREDENTIALS_CHANGED":
+							message = "Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";
+							break;
+						case "INSUFFICIENT_PERMISSIONS":
+							message = "Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";
+							break;
+						default: message = `Failed to refresh token: ${String(error)}. Please re-authenticate using \`aws login\``;
+					}
+					throw new propertyProvider.CredentialsProviderError(message, {
+						logger: this.logger,
+						tryNextLink: false
+					});
+				}
+				throw new propertyProvider.CredentialsProviderError(`Failed to refresh token: ${String(error)}. Please re-authenticate using aws login`, { logger: this.logger });
+			}
+		}
+		async loadToken() {
+			const tokenFilePath = this.getTokenFilePath();
+			try {
+				let tokenData;
+				try {
+					tokenData = await sharedIniFileLoader.readFile(tokenFilePath, { ignoreCache: this.init?.ignoreCache });
+				} catch {
+					tokenData = await node_fs.promises.readFile(tokenFilePath, "utf8");
+				}
+				const token = JSON.parse(tokenData);
+				const missingFields = [
+					"accessToken",
+					"clientId",
+					"refreshToken",
+					"dpopKey"
+				].filter((k) => !token[k]);
+				if (!token.accessToken?.accountId) missingFields.push("accountId");
+				if (missingFields.length > 0) throw new propertyProvider.CredentialsProviderError(`Token validation failed, missing fields: ${missingFields.join(", ")}`, {
+					logger: this.logger,
+					tryNextLink: false
+				});
+				return token;
+			} catch (error) {
+				throw new propertyProvider.CredentialsProviderError(`Failed to load token from ${tokenFilePath}: ${String(error)}`, {
+					logger: this.logger,
+					tryNextLink: false
+				});
+			}
+		}
+		async saveToken(token) {
+			const tokenFilePath = this.getTokenFilePath();
+			const directory = node_path.dirname(tokenFilePath);
+			try {
+				await node_fs.promises.mkdir(directory, { recursive: true });
+			} catch (error) {}
+			await node_fs.promises.writeFile(tokenFilePath, JSON.stringify(token, null, 2), "utf8");
+		}
+		getTokenFilePath() {
+			const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? node_path.join(node_os.homedir(), ".aws", "login", "cache");
+			const loginSessionBytes = Buffer.from(this.loginSession, "utf8");
+			const loginSessionSha256 = node_crypto.createHash("sha256").update(loginSessionBytes).digest("hex");
+			return node_path.join(directory, `${loginSessionSha256}.json`);
+		}
+		derToRawSignature(derSignature) {
+			let offset = 2;
+			if (derSignature[offset] !== 2) throw new Error("Invalid DER signature");
+			offset++;
+			const rLength = derSignature[offset++];
+			let r = derSignature.subarray(offset, offset + rLength);
+			offset += rLength;
+			if (derSignature[offset] !== 2) throw new Error("Invalid DER signature");
+			offset++;
+			const sLength = derSignature[offset++];
+			let s = derSignature.subarray(offset, offset + sLength);
+			r = r[0] === 0 ? r.subarray(1) : r;
+			s = s[0] === 0 ? s.subarray(1) : s;
+			const rPadded = Buffer.concat([Buffer.alloc(32 - r.length), r]);
+			const sPadded = Buffer.concat([Buffer.alloc(32 - s.length), s]);
+			return Buffer.concat([rPadded, sPadded]);
+		}
+		createDPoPInterceptor(middlewareStack) {
+			middlewareStack.add((next) => async (args) => {
+				if (protocolHttp.HttpRequest.isInstance(args.request)) {
+					const request = args.request;
+					const actualEndpoint = `${request.protocol}//${request.hostname}${request.port ? `:${request.port}` : ""}${request.path}`;
+					const dpop = await this.generateDpop(request.method, actualEndpoint);
+					request.headers = {
+						...request.headers,
+						DPoP: dpop
+					};
+				}
+				return next(args);
+			}, {
+				step: "finalizeRequest",
+				name: "dpopInterceptor",
+				override: true
+			});
+		}
+		async generateDpop(method = "POST", endpoint) {
+			const token = await this.loadToken();
+			try {
+				const privateKey = node_crypto.createPrivateKey({
+					key: token.dpopKey,
+					format: "pem",
+					type: "sec1"
+				});
+				const publicDer = node_crypto.createPublicKey(privateKey).export({
+					format: "der",
+					type: "spki"
+				});
+				let pointStart = -1;
+				for (let i = 0; i < publicDer.length; i++) if (publicDer[i] === 4) {
+					pointStart = i;
+					break;
+				}
+				const x = publicDer.slice(pointStart + 1, pointStart + 33);
+				const y = publicDer.slice(pointStart + 33, pointStart + 65);
+				const header = {
+					alg: "ES256",
+					typ: "dpop+jwt",
+					jwk: {
+						kty: "EC",
+						crv: "P-256",
+						x: x.toString("base64url"),
+						y: y.toString("base64url")
+					}
+				};
+				const payload = {
+					jti: crypto.randomUUID(),
+					htm: method,
+					htu: endpoint,
+					iat: Math.floor(Date.now() / 1e3)
+				};
+				const message = `${Buffer.from(JSON.stringify(header)).toString("base64url")}.${Buffer.from(JSON.stringify(payload)).toString("base64url")}`;
+				const asn1Signature = node_crypto.sign("sha256", Buffer.from(message), privateKey);
+				return `${message}.${this.derToRawSignature(asn1Signature).toString("base64url")}`;
+			} catch (error) {
+				throw new propertyProvider.CredentialsProviderError(`Failed to generate Dpop proof: ${error instanceof Error ? error.message : String(error)}`, {
+					logger: this.logger,
+					tryNextLink: false
+				});
+			}
+		}
+	};
+	const fromLoginCredentials = (init) => async ({ callerClientConfig } = {}) => {
+		init?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");
+		const profiles = await sharedIniFileLoader.parseKnownFiles(init || {});
+		const profileName = sharedIniFileLoader.getProfileName({ profile: init?.profile ?? callerClientConfig?.profile });
+		const profile = profiles[profileName];
+		if (!profile?.login_session) throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} does not contain login_session.`, {
+			tryNextLink: true,
+			logger: init?.logger
+		});
+		const credentials = await new LoginCredentialsFetcher(profile, init, callerClientConfig).loadCredentials();
+		return client.setCredentialFeature(credentials, "CREDENTIALS_LOGIN", "AD");
+	};
+	exports.fromLoginCredentials = fromLoginCredentials;
+}));
+
+//#endregion
+//#region ../../node_modules/.pnpm/@aws-sdk+credential-provider-ini@3.972.20/node_modules/@aws-sdk/credential-provider-ini/dist-cjs/index.js
+var require_dist_cjs = /* @__PURE__ */ __commonJSMin(((exports) => {
+	var sharedIniFileLoader = require_dist_cjs$4();
+	var propertyProvider = require_dist_cjs$3();
+	var client = (init_client(), __toCommonJS(client_exports));
+	var credentialProviderLogin = require_dist_cjs$1();
+	const resolveCredentialSource = (credentialSource, profileName, logger) => {
+		const sourceProvidersMap = {
+			EcsContainer: async (options) => {
+				const { fromHttp } = await import("./dist-cjs-BuJ2FXob.mjs").then((m) => /* @__PURE__ */ __toESM(m.default));
+				const { fromContainerMetadata } = await import("./dist-cjs-b-oBQaxe.mjs").then((m) => /* @__PURE__ */ __toESM(m.default));
+				logger?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer");
+				return async () => propertyProvider.chain(fromHttp(options ?? {}), fromContainerMetadata(options))().then(setNamedProvider);
+			},
+			Ec2InstanceMetadata: async (options) => {
+				logger?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");
+				const { fromInstanceMetadata } = await import("./dist-cjs-b-oBQaxe.mjs").then((m) => /* @__PURE__ */ __toESM(m.default));
+				return async () => fromInstanceMetadata(options)().then(setNamedProvider);
+			},
+			Environment: async (options) => {
+				logger?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");
+				const { fromEnv } = await import("./dist-cjs--KIl7Gqy.mjs").then((m) => /* @__PURE__ */ __toESM(m.default));
+				return async () => fromEnv(options)().then(setNamedProvider);
+			}
+		};
+		if (credentialSource in sourceProvidersMap) return sourceProvidersMap[credentialSource];
+		else throw new propertyProvider.CredentialsProviderError(`Unsupported credential source in profile ${profileName}. Got ${credentialSource}, expected EcsContainer or Ec2InstanceMetadata or Environment.`, { logger });
+	};
+	const setNamedProvider = (creds) => client.setCredentialFeature(creds, "CREDENTIALS_PROFILE_NAMED_PROVIDER", "p");
+	const isAssumeRoleProfile = (arg, { profile = "default", logger } = {}) => {
+		return Boolean(arg) && typeof arg === "object" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1 && ["undefined", "string"].indexOf(typeof arg.external_id) > -1 && ["undefined", "string"].indexOf(typeof arg.mfa_serial) > -1 && (isAssumeRoleWithSourceProfile(arg, {
+			profile,
+			logger
+		}) || isCredentialSourceProfile(arg, {
+			profile,
+			logger
+		}));
+	};
+	const isAssumeRoleWithSourceProfile = (arg, { profile, logger }) => {
+		const withSourceProfile = typeof arg.source_profile === "string" && typeof arg.credential_source === "undefined";
+		if (withSourceProfile) logger?.debug?.(`    ${profile} isAssumeRoleWithSourceProfile source_profile=${arg.source_profile}`);
+		return withSourceProfile;
+	};
+	const isCredentialSourceProfile = (arg, { profile, logger }) => {
+		const withProviderProfile = typeof arg.credential_source === "string" && typeof arg.source_profile === "undefined";
+		if (withProviderProfile) logger?.debug?.(`    ${profile} isCredentialSourceProfile credential_source=${arg.credential_source}`);
+		return withProviderProfile;
+	};
+	const resolveAssumeRoleCredentials = async (profileName, profiles, options, callerClientConfig, visitedProfiles = {}, resolveProfileData) => {
+		options.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");
+		const profileData = profiles[profileName];
+		const { source_profile, region } = profileData;
+		if (!options.roleAssumer) {
+			const { getDefaultRoleAssumer } = await import("./sts-Bz-e3kNW.mjs");
+			options.roleAssumer = getDefaultRoleAssumer({
+				...options.clientConfig,
+				credentialProviderLogger: options.logger,
+				parentClientConfig: {
+					...callerClientConfig,
+					...options?.parentClientConfig,
+					region: region ?? options?.parentClientConfig?.region ?? callerClientConfig?.region
+				}
+			}, options.clientPlugins);
+		}
+		if (source_profile && source_profile in visitedProfiles) throw new propertyProvider.CredentialsProviderError(`Detected a cycle attempting to resolve credentials for profile ${sharedIniFileLoader.getProfileName(options)}. Profiles visited: ` + Object.keys(visitedProfiles).join(", "), { logger: options.logger });
+		options.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${source_profile ? `source_profile=[${source_profile}]` : `profile=[${profileName}]`}`);
+		const sourceCredsProvider = source_profile ? resolveProfileData(source_profile, profiles, options, callerClientConfig, {
+			...visitedProfiles,
+			[source_profile]: true
+		}, isCredentialSourceWithoutRoleArn(profiles[source_profile] ?? {})) : (await resolveCredentialSource(profileData.credential_source, profileName, options.logger)(options))();
+		if (isCredentialSourceWithoutRoleArn(profileData)) return sourceCredsProvider.then((creds) => client.setCredentialFeature(creds, "CREDENTIALS_PROFILE_SOURCE_PROFILE", "o"));
+		else {
+			const params = {
+				RoleArn: profileData.role_arn,
+				RoleSessionName: profileData.role_session_name || `aws-sdk-js-${Date.now()}`,
+				ExternalId: profileData.external_id,
+				DurationSeconds: parseInt(profileData.duration_seconds || "3600", 10)
+			};
+			const { mfa_serial } = profileData;
+			if (mfa_serial) {
+				if (!options.mfaCodeProvider) throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} requires multi-factor authentication, but no MFA code callback was provided.`, {
+					logger: options.logger,
+					tryNextLink: false
+				});
+				params.SerialNumber = mfa_serial;
+				params.TokenCode = await options.mfaCodeProvider(mfa_serial);
+			}
+			const sourceCreds = await sourceCredsProvider;
+			return options.roleAssumer(sourceCreds, params).then((creds) => client.setCredentialFeature(creds, "CREDENTIALS_PROFILE_SOURCE_PROFILE", "o"));
+		}
+	};
+	const isCredentialSourceWithoutRoleArn = (section) => {
+		return !section.role_arn && !!section.credential_source;
+	};
+	const isLoginProfile = (data) => {
+		return Boolean(data && data.login_session);
+	};
+	const resolveLoginCredentials = async (profileName, options, callerClientConfig) => {
+		const credentials = await credentialProviderLogin.fromLoginCredentials({
+			...options,
+			profile: profileName
+		})({ callerClientConfig });
+		return client.setCredentialFeature(credentials, "CREDENTIALS_PROFILE_LOGIN", "AC");
+	};
+	const isProcessProfile = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.credential_process === "string";
+	const resolveProcessCredentials = async (options, profile) => import("./dist-cjs-B-_4TVjP.mjs").then((m) => /* @__PURE__ */ __toESM(m.default)).then(({ fromProcess }) => fromProcess({
+		...options,
+		profile
+	})().then((creds) => client.setCredentialFeature(creds, "CREDENTIALS_PROFILE_PROCESS", "v")));
+	const resolveSsoCredentials = async (profile, profileData, options = {}, callerClientConfig) => {
+		const { fromSSO } = await import("./dist-cjs-C-FMsqmo.mjs").then((m) => /* @__PURE__ */ __toESM(m.default));
+		return fromSSO({
+			profile,
+			logger: options.logger,
+			parentClientConfig: options.parentClientConfig,
+			clientConfig: options.clientConfig
+		})({ callerClientConfig }).then((creds) => {
+			if (profileData.sso_session) return client.setCredentialFeature(creds, "CREDENTIALS_PROFILE_SSO", "r");
+			else return client.setCredentialFeature(creds, "CREDENTIALS_PROFILE_SSO_LEGACY", "t");
+		});
+	};
+	const isSsoProfile = (arg) => arg && (typeof arg.sso_start_url === "string" || typeof arg.sso_account_id === "string" || typeof arg.sso_session === "string" || typeof arg.sso_region === "string" || typeof arg.sso_role_name === "string");
+	const isStaticCredsProfile = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.aws_access_key_id === "string" && typeof arg.aws_secret_access_key === "string" && ["undefined", "string"].indexOf(typeof arg.aws_session_token) > -1 && ["undefined", "string"].indexOf(typeof arg.aws_account_id) > -1;
+	const resolveStaticCredentials = async (profile, options) => {
+		options?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");
+		const credentials = {
+			accessKeyId: profile.aws_access_key_id,
+			secretAccessKey: profile.aws_secret_access_key,
+			sessionToken: profile.aws_session_token,
+			...profile.aws_credential_scope && { credentialScope: profile.aws_credential_scope },
+			...profile.aws_account_id && { accountId: profile.aws_account_id }
+		};
+		return client.setCredentialFeature(credentials, "CREDENTIALS_PROFILE", "n");
+	};
+	const isWebIdentityProfile = (arg) => Boolean(arg) && typeof arg === "object" && typeof arg.web_identity_token_file === "string" && typeof arg.role_arn === "string" && ["undefined", "string"].indexOf(typeof arg.role_session_name) > -1;
+	const resolveWebIdentityCredentials = async (profile, options, callerClientConfig) => import("./dist-cjs-Du6DnSjo.mjs").then((m) => /* @__PURE__ */ __toESM(m.default)).then(({ fromTokenFile }) => fromTokenFile({
+		webIdentityTokenFile: profile.web_identity_token_file,
+		roleArn: profile.role_arn,
+		roleSessionName: profile.role_session_name,
+		roleAssumerWithWebIdentity: options.roleAssumerWithWebIdentity,
+		logger: options.logger,
+		parentClientConfig: options.parentClientConfig
+	})({ callerClientConfig }).then((creds) => client.setCredentialFeature(creds, "CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN", "q")));
+	const resolveProfileData = async (profileName, profiles, options, callerClientConfig, visitedProfiles = {}, isAssumeRoleRecursiveCall = false) => {
+		const data = profiles[profileName];
+		if (Object.keys(visitedProfiles).length > 0 && isStaticCredsProfile(data)) return resolveStaticCredentials(data, options);
+		if (isAssumeRoleRecursiveCall || isAssumeRoleProfile(data, {
+			profile: profileName,
+			logger: options.logger
+		})) return resolveAssumeRoleCredentials(profileName, profiles, options, callerClientConfig, visitedProfiles, resolveProfileData);
+		if (isStaticCredsProfile(data)) return resolveStaticCredentials(data, options);
+		if (isWebIdentityProfile(data)) return resolveWebIdentityCredentials(data, options, callerClientConfig);
+		if (isProcessProfile(data)) return resolveProcessCredentials(options, profileName);
+		if (isSsoProfile(data)) return await resolveSsoCredentials(profileName, data, options, callerClientConfig);
+		if (isLoginProfile(data)) return resolveLoginCredentials(profileName, options, callerClientConfig);
+		throw new propertyProvider.CredentialsProviderError(`Could not resolve credentials using profile: [${profileName}] in configuration/credentials file(s).`, { logger: options.logger });
+	};
+	const fromIni = (init = {}) => async ({ callerClientConfig } = {}) => {
+		init.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");
+		const profiles = await sharedIniFileLoader.parseKnownFiles(init);
+		return resolveProfileData(sharedIniFileLoader.getProfileName({ profile: init.profile ?? callerClientConfig?.profile }), profiles, init, callerClientConfig);
+	};
+	exports.fromIni = fromIni;
+}));
+
+//#endregion
+export default require_dist_cjs();
+
+export {  };
+//# sourceMappingURL=dist-cjs-B3TIyZ3K.mjs.map

package/dist/dist-cjs-B3TIyZ3K.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dist-cjs-B3TIyZ3K.mjs","names":["requestHandler"],"sources":["../../../node_modules/.pnpm/@aws-sdk+credential-provider-login@3.972.20/node_modules/@aws-sdk/credential-provider-login/dist-cjs/index.js","../../../node_modules/.pnpm/@aws-sdk+credential-provider-ini@3.972.20/node_modules/@aws-sdk/credential-provider-ini/dist-cjs/index.js"],"sourcesContent":["'use strict';\n\nvar client = require('@aws-sdk/core/client');\nvar propertyProvider = require('@smithy/property-provider');\nvar sharedIniFileLoader = require('@smithy/shared-ini-file-loader');\nvar protocolHttp = require('@smithy/protocol-http');\nvar node_crypto = require('node:crypto');\nvar node_fs = require('node:fs');\nvar node_os = require('node:os');\nvar node_path = require('node:path');\n\nclass LoginCredentialsFetcher {\n    profileData;\n    init;\n    callerClientConfig;\n    static REFRESH_THRESHOLD = 5 * 60 * 1000;\n    constructor(profileData, init, callerClientConfig) {\n        this.profileData = profileData;\n        this.init = init;\n        this.callerClientConfig = callerClientConfig;\n    }\n    async loadCredentials() {\n        const token = await this.loadToken();\n        if (!token) {\n            throw new propertyProvider.CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`, { tryNextLink: false, logger: this.logger });\n        }\n        const accessToken = token.accessToken;\n        const now = Date.now();\n        const expiryTime = new Date(accessToken.expiresAt).getTime();\n        const timeUntilExpiry = expiryTime - now;\n        if (timeUntilExpiry <= LoginCredentialsFetcher.REFRESH_THRESHOLD) {\n            return this.refresh(token);\n        }\n        return {\n            accessKeyId: accessToken.accessKeyId,\n            secretAccessKey: accessToken.secretAccessKey,\n            sessionToken: accessToken.sessionToken,\n            accountId: accessToken.accountId,\n            expiration: new Date(accessToken.expiresAt),\n        };\n    }\n    get logger() {\n        return this.init?.logger;\n    }\n    get loginSession() {\n        return this.profileData.login_session;\n    }\n    async refresh(token) {\n        const { SigninClient, CreateOAuth2TokenCommand } = await import('@aws-sdk/nested-clients/signin');\n        const { logger, userAgentAppId } = this.callerClientConfig ?? {};\n        const isH2 = (requestHandler) => {\n            return requestHandler?.metadata?.handlerProtocol === \"h2\";\n        };\n        const requestHandler = isH2(this.callerClientConfig?.requestHandler)\n            ? undefined\n            : this.callerClientConfig?.requestHandler;\n        const region = this.profileData.region ?? (await this.callerClientConfig?.region?.()) ?? process.env.AWS_REGION;\n        const client = new SigninClient({\n            credentials: {\n                accessKeyId: \"\",\n                secretAccessKey: \"\",\n            },\n            region,\n            requestHandler,\n            logger,\n            userAgentAppId,\n            ...this.init?.clientConfig,\n        });\n        this.createDPoPInterceptor(client.middlewareStack);\n        const commandInput = {\n            tokenInput: {\n                clientId: token.clientId,\n                refreshToken: token.refreshToken,\n                grantType: \"refresh_token\",\n            },\n        };\n        try {\n            const response = await client.send(new CreateOAuth2TokenCommand(commandInput));\n            const { accessKeyId, secretAccessKey, sessionToken } = response.tokenOutput?.accessToken ?? {};\n            const { refreshToken, expiresIn } = response.tokenOutput ?? {};\n            if (!accessKeyId || !secretAccessKey || !sessionToken || !refreshToken) {\n                throw new propertyProvider.CredentialsProviderError(\"Token refresh response missing required fields\", {\n                    logger: this.logger,\n                    tryNextLink: false,\n                });\n            }\n            const expiresInMs = (expiresIn ?? 900) * 1000;\n            const expiration = new Date(Date.now() + expiresInMs);\n            const updatedToken = {\n                ...token,\n                accessToken: {\n                    ...token.accessToken,\n                    accessKeyId: accessKeyId,\n                    secretAccessKey: secretAccessKey,\n                    sessionToken: sessionToken,\n                    expiresAt: expiration.toISOString(),\n                },\n                refreshToken: refreshToken,\n            };\n            await this.saveToken(updatedToken);\n            const newAccessToken = updatedToken.accessToken;\n            return {\n                accessKeyId: newAccessToken.accessKeyId,\n                secretAccessKey: newAccessToken.secretAccessKey,\n                sessionToken: newAccessToken.sessionToken,\n                accountId: newAccessToken.accountId,\n                expiration,\n            };\n        }\n        catch (error) {\n            if (error.name === \"AccessDeniedException\") {\n                const errorType = error.error;\n                let message;\n                switch (errorType) {\n                    case \"TOKEN_EXPIRED\":\n                        message = \"Your session has expired. Please reauthenticate.\";\n                        break;\n                    case \"USER_CREDENTIALS_CHANGED\":\n                        message =\n                            \"Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.\";\n                        break;\n                    case \"INSUFFICIENT_PERMISSIONS\":\n                        message =\n                            \"Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.\";\n                        break;\n                    default:\n                        message = `Failed to refresh token: ${String(error)}. Please re-authenticate using \\`aws login\\``;\n                }\n                throw new propertyProvider.CredentialsProviderError(message, { logger: this.logger, tryNextLink: false });\n            }\n            throw new propertyProvider.CredentialsProviderError(`Failed to refresh token: ${String(error)}. Please re-authenticate using aws login`, { logger: this.logger });\n        }\n    }\n    async loadToken() {\n        const tokenFilePath = this.getTokenFilePath();\n        try {\n            let tokenData;\n            try {\n                tokenData = await sharedIniFileLoader.readFile(tokenFilePath, { ignoreCache: this.init?.ignoreCache });\n            }\n            catch {\n                tokenData = await node_fs.promises.readFile(tokenFilePath, \"utf8\");\n            }\n            const token = JSON.parse(tokenData);\n            const missingFields = [\"accessToken\", \"clientId\", \"refreshToken\", \"dpopKey\"].filter((k) => !token[k]);\n            if (!token.accessToken?.accountId) {\n                missingFields.push(\"accountId\");\n            }\n            if (missingFields.length > 0) {\n                throw new propertyProvider.CredentialsProviderError(`Token validation failed, missing fields: ${missingFields.join(\", \")}`, {\n                    logger: this.logger,\n                    tryNextLink: false,\n                });\n            }\n            return token;\n        }\n        catch (error) {\n            throw new propertyProvider.CredentialsProviderError(`Failed to load token from ${tokenFilePath}: ${String(error)}`, {\n                logger: this.logger,\n                tryNextLink: false,\n            });\n        }\n    }\n    async saveToken(token) {\n        const tokenFilePath = this.getTokenFilePath();\n        const directory = node_path.dirname(tokenFilePath);\n        try {\n            await node_fs.promises.mkdir(directory, { recursive: true });\n        }\n        catch (error) {\n        }\n        await node_fs.promises.writeFile(tokenFilePath, JSON.stringify(token, null, 2), \"utf8\");\n    }\n    getTokenFilePath() {\n        const directory = process.env.AWS_LOGIN_CACHE_DIRECTORY ?? node_path.join(node_os.homedir(), \".aws\", \"login\", \"cache\");\n        const loginSessionBytes = Buffer.from(this.loginSession, \"utf8\");\n        const loginSessionSha256 = node_crypto.createHash(\"sha256\").update(loginSessionBytes).digest(\"hex\");\n        return node_path.join(directory, `${loginSessionSha256}.json`);\n    }\n    derToRawSignature(derSignature) {\n        let offset = 2;\n        if (derSignature[offset] !== 0x02) {\n            throw new Error(\"Invalid DER signature\");\n        }\n        offset++;\n        const rLength = derSignature[offset++];\n        let r = derSignature.subarray(offset, offset + rLength);\n        offset += rLength;\n        if (derSignature[offset] !== 0x02) {\n            throw new Error(\"Invalid DER signature\");\n        }\n        offset++;\n        const sLength = derSignature[offset++];\n        let s = derSignature.subarray(offset, offset + sLength);\n        r = r[0] === 0x00 ? r.subarray(1) : r;\n        s = s[0] === 0x00 ? s.subarray(1) : s;\n        const rPadded = Buffer.concat([Buffer.alloc(32 - r.length), r]);\n        const sPadded = Buffer.concat([Buffer.alloc(32 - s.length), s]);\n        return Buffer.concat([rPadded, sPadded]);\n    }\n    createDPoPInterceptor(middlewareStack) {\n        middlewareStack.add((next) => async (args) => {\n            if (protocolHttp.HttpRequest.isInstance(args.request)) {\n                const request = args.request;\n                const actualEndpoint = `${request.protocol}//${request.hostname}${request.port ? `:${request.port}` : \"\"}${request.path}`;\n                const dpop = await this.generateDpop(request.method, actualEndpoint);\n                request.headers = {\n                    ...request.headers,\n                    DPoP: dpop,\n                };\n            }\n            return next(args);\n        }, {\n            step: \"finalizeRequest\",\n            name: \"dpopInterceptor\",\n            override: true,\n        });\n    }\n    async generateDpop(method = \"POST\", endpoint) {\n        const token = await this.loadToken();\n        try {\n            const privateKey = node_crypto.createPrivateKey({\n                key: token.dpopKey,\n                format: \"pem\",\n                type: \"sec1\",\n            });\n            const publicKey = node_crypto.createPublicKey(privateKey);\n            const publicDer = publicKey.export({ format: \"der\", type: \"spki\" });\n            let pointStart = -1;\n            for (let i = 0; i < publicDer.length; i++) {\n                if (publicDer[i] === 0x04) {\n                    pointStart = i;\n                    break;\n                }\n            }\n            const x = publicDer.slice(pointStart + 1, pointStart + 33);\n            const y = publicDer.slice(pointStart + 33, pointStart + 65);\n            const header = {\n                alg: \"ES256\",\n                typ: \"dpop+jwt\",\n                jwk: {\n                    kty: \"EC\",\n                    crv: \"P-256\",\n                    x: x.toString(\"base64url\"),\n                    y: y.toString(\"base64url\"),\n                },\n            };\n            const payload = {\n                jti: crypto.randomUUID(),\n                htm: method,\n                htu: endpoint,\n                iat: Math.floor(Date.now() / 1000),\n            };\n            const headerB64 = Buffer.from(JSON.stringify(header)).toString(\"base64url\");\n            const payloadB64 = Buffer.from(JSON.stringify(payload)).toString(\"base64url\");\n            const message = `${headerB64}.${payloadB64}`;\n            const asn1Signature = node_crypto.sign(\"sha256\", Buffer.from(message), privateKey);\n            const rawSignature = this.derToRawSignature(asn1Signature);\n            const signatureB64 = rawSignature.toString(\"base64url\");\n            return `${message}.${signatureB64}`;\n        }\n        catch (error) {\n            throw new propertyProvider.CredentialsProviderError(`Failed to generate Dpop proof: ${error instanceof Error ? error.message : String(error)}`, { logger: this.logger, tryNextLink: false });\n        }\n    }\n}\n\nconst fromLoginCredentials = (init) => async ({ callerClientConfig } = {}) => {\n    init?.logger?.debug?.(\"@aws-sdk/credential-providers - fromLoginCredentials\");\n    const profiles = await sharedIniFileLoader.parseKnownFiles(init || {});\n    const profileName = sharedIniFileLoader.getProfileName({\n        profile: init?.profile ?? callerClientConfig?.profile,\n    });\n    const profile = profiles[profileName];\n    if (!profile?.login_session) {\n        throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} does not contain login_session.`, {\n            tryNextLink: true,\n            logger: init?.logger,\n        });\n    }\n    const fetcher = new LoginCredentialsFetcher(profile, init, callerClientConfig);\n    const credentials = await fetcher.loadCredentials();\n    return client.setCredentialFeature(credentials, \"CREDENTIALS_LOGIN\", \"AD\");\n};\n\nexports.fromLoginCredentials = fromLoginCredentials;\n","'use strict';\n\nvar sharedIniFileLoader = require('@smithy/shared-ini-file-loader');\nvar propertyProvider = require('@smithy/property-provider');\nvar client = require('@aws-sdk/core/client');\nvar credentialProviderLogin = require('@aws-sdk/credential-provider-login');\n\nconst resolveCredentialSource = (credentialSource, profileName, logger) => {\n    const sourceProvidersMap = {\n        EcsContainer: async (options) => {\n            const { fromHttp } = await import('@aws-sdk/credential-provider-http');\n            const { fromContainerMetadata } = await import('@smithy/credential-provider-imds');\n            logger?.debug(\"@aws-sdk/credential-provider-ini - credential_source is EcsContainer\");\n            return async () => propertyProvider.chain(fromHttp(options ?? {}), fromContainerMetadata(options))().then(setNamedProvider);\n        },\n        Ec2InstanceMetadata: async (options) => {\n            logger?.debug(\"@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata\");\n            const { fromInstanceMetadata } = await import('@smithy/credential-provider-imds');\n            return async () => fromInstanceMetadata(options)().then(setNamedProvider);\n        },\n        Environment: async (options) => {\n            logger?.debug(\"@aws-sdk/credential-provider-ini - credential_source is Environment\");\n            const { fromEnv } = await import('@aws-sdk/credential-provider-env');\n            return async () => fromEnv(options)().then(setNamedProvider);\n        },\n    };\n    if (credentialSource in sourceProvidersMap) {\n        return sourceProvidersMap[credentialSource];\n    }\n    else {\n        throw new propertyProvider.CredentialsProviderError(`Unsupported credential source in profile ${profileName}. Got ${credentialSource}, ` +\n            `expected EcsContainer or Ec2InstanceMetadata or Environment.`, { logger });\n    }\n};\nconst setNamedProvider = (creds) => client.setCredentialFeature(creds, \"CREDENTIALS_PROFILE_NAMED_PROVIDER\", \"p\");\n\nconst isAssumeRoleProfile = (arg, { profile = \"default\", logger } = {}) => {\n    return (Boolean(arg) &&\n        typeof arg === \"object\" &&\n        typeof arg.role_arn === \"string\" &&\n        [\"undefined\", \"string\"].indexOf(typeof arg.role_session_name) > -1 &&\n        [\"undefined\", \"string\"].indexOf(typeof arg.external_id) > -1 &&\n        [\"undefined\", \"string\"].indexOf(typeof arg.mfa_serial) > -1 &&\n        (isAssumeRoleWithSourceProfile(arg, { profile, logger }) || isCredentialSourceProfile(arg, { profile, logger })));\n};\nconst isAssumeRoleWithSourceProfile = (arg, { profile, logger }) => {\n    const withSourceProfile = typeof arg.source_profile === \"string\" && typeof arg.credential_source === \"undefined\";\n    if (withSourceProfile) {\n        logger?.debug?.(`    ${profile} isAssumeRoleWithSourceProfile source_profile=${arg.source_profile}`);\n    }\n    return withSourceProfile;\n};\nconst isCredentialSourceProfile = (arg, { profile, logger }) => {\n    const withProviderProfile = typeof arg.credential_source === \"string\" && typeof arg.source_profile === \"undefined\";\n    if (withProviderProfile) {\n        logger?.debug?.(`    ${profile} isCredentialSourceProfile credential_source=${arg.credential_source}`);\n    }\n    return withProviderProfile;\n};\nconst resolveAssumeRoleCredentials = async (profileName, profiles, options, callerClientConfig, visitedProfiles = {}, resolveProfileData) => {\n    options.logger?.debug(\"@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)\");\n    const profileData = profiles[profileName];\n    const { source_profile, region } = profileData;\n    if (!options.roleAssumer) {\n        const { getDefaultRoleAssumer } = await import('@aws-sdk/nested-clients/sts');\n        options.roleAssumer = getDefaultRoleAssumer({\n            ...options.clientConfig,\n            credentialProviderLogger: options.logger,\n            parentClientConfig: {\n                ...callerClientConfig,\n                ...options?.parentClientConfig,\n                region: region ?? options?.parentClientConfig?.region ?? callerClientConfig?.region,\n            },\n        }, options.clientPlugins);\n    }\n    if (source_profile && source_profile in visitedProfiles) {\n        throw new propertyProvider.CredentialsProviderError(`Detected a cycle attempting to resolve credentials for profile` +\n            ` ${sharedIniFileLoader.getProfileName(options)}. Profiles visited: ` +\n            Object.keys(visitedProfiles).join(\", \"), { logger: options.logger });\n    }\n    options.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${source_profile ? `source_profile=[${source_profile}]` : `profile=[${profileName}]`}`);\n    const sourceCredsProvider = source_profile\n        ? resolveProfileData(source_profile, profiles, options, callerClientConfig, {\n            ...visitedProfiles,\n            [source_profile]: true,\n        }, isCredentialSourceWithoutRoleArn(profiles[source_profile] ?? {}))\n        : (await resolveCredentialSource(profileData.credential_source, profileName, options.logger)(options))();\n    if (isCredentialSourceWithoutRoleArn(profileData)) {\n        return sourceCredsProvider.then((creds) => client.setCredentialFeature(creds, \"CREDENTIALS_PROFILE_SOURCE_PROFILE\", \"o\"));\n    }\n    else {\n        const params = {\n            RoleArn: profileData.role_arn,\n            RoleSessionName: profileData.role_session_name || `aws-sdk-js-${Date.now()}`,\n            ExternalId: profileData.external_id,\n            DurationSeconds: parseInt(profileData.duration_seconds || \"3600\", 10),\n        };\n        const { mfa_serial } = profileData;\n        if (mfa_serial) {\n            if (!options.mfaCodeProvider) {\n                throw new propertyProvider.CredentialsProviderError(`Profile ${profileName} requires multi-factor authentication, but no MFA code callback was provided.`, { logger: options.logger, tryNextLink: false });\n            }\n            params.SerialNumber = mfa_serial;\n            params.TokenCode = await options.mfaCodeProvider(mfa_serial);\n        }\n        const sourceCreds = await sourceCredsProvider;\n        return options.roleAssumer(sourceCreds, params).then((creds) => client.setCredentialFeature(creds, \"CREDENTIALS_PROFILE_SOURCE_PROFILE\", \"o\"));\n    }\n};\nconst isCredentialSourceWithoutRoleArn = (section) => {\n    return !section.role_arn && !!section.credential_source;\n};\n\nconst isLoginProfile = (data) => {\n    return Boolean(data && data.login_session);\n};\nconst resolveLoginCredentials = async (profileName, options, callerClientConfig) => {\n    const credentials = await credentialProviderLogin.fromLoginCredentials({\n        ...options,\n        profile: profileName,\n    })({ callerClientConfig });\n    return client.setCredentialFeature(credentials, \"CREDENTIALS_PROFILE_LOGIN\", \"AC\");\n};\n\nconst isProcessProfile = (arg) => Boolean(arg) && typeof arg === \"object\" && typeof arg.credential_process === \"string\";\nconst resolveProcessCredentials = async (options, profile) => import('@aws-sdk/credential-provider-process').then(({ fromProcess }) => fromProcess({\n    ...options,\n    profile,\n})().then((creds) => client.setCredentialFeature(creds, \"CREDENTIALS_PROFILE_PROCESS\", \"v\")));\n\nconst resolveSsoCredentials = async (profile, profileData, options = {}, callerClientConfig) => {\n    const { fromSSO } = await import('@aws-sdk/credential-provider-sso');\n    return fromSSO({\n        profile,\n        logger: options.logger,\n        parentClientConfig: options.parentClientConfig,\n        clientConfig: options.clientConfig,\n    })({\n        callerClientConfig,\n    }).then((creds) => {\n        if (profileData.sso_session) {\n            return client.setCredentialFeature(creds, \"CREDENTIALS_PROFILE_SSO\", \"r\");\n        }\n        else {\n            return client.setCredentialFeature(creds, \"CREDENTIALS_PROFILE_SSO_LEGACY\", \"t\");\n        }\n    });\n};\nconst isSsoProfile = (arg) => arg &&\n    (typeof arg.sso_start_url === \"string\" ||\n        typeof arg.sso_account_id === \"string\" ||\n        typeof arg.sso_session === \"string\" ||\n        typeof arg.sso_region === \"string\" ||\n        typeof arg.sso_role_name === \"string\");\n\nconst isStaticCredsProfile = (arg) => Boolean(arg) &&\n    typeof arg === \"object\" &&\n    typeof arg.aws_access_key_id === \"string\" &&\n    typeof arg.aws_secret_access_key === \"string\" &&\n    [\"undefined\", \"string\"].indexOf(typeof arg.aws_session_token) > -1 &&\n    [\"undefined\", \"string\"].indexOf(typeof arg.aws_account_id) > -1;\nconst resolveStaticCredentials = async (profile, options) => {\n    options?.logger?.debug(\"@aws-sdk/credential-provider-ini - resolveStaticCredentials\");\n    const credentials = {\n        accessKeyId: profile.aws_access_key_id,\n        secretAccessKey: profile.aws_secret_access_key,\n        sessionToken: profile.aws_session_token,\n        ...(profile.aws_credential_scope && { credentialScope: profile.aws_credential_scope }),\n        ...(profile.aws_account_id && { accountId: profile.aws_account_id }),\n    };\n    return client.setCredentialFeature(credentials, \"CREDENTIALS_PROFILE\", \"n\");\n};\n\nconst isWebIdentityProfile = (arg) => Boolean(arg) &&\n    typeof arg === \"object\" &&\n    typeof arg.web_identity_token_file === \"string\" &&\n    typeof arg.role_arn === \"string\" &&\n    [\"undefined\", \"string\"].indexOf(typeof arg.role_session_name) > -1;\nconst resolveWebIdentityCredentials = async (profile, options, callerClientConfig) => import('@aws-sdk/credential-provider-web-identity').then(({ fromTokenFile }) => fromTokenFile({\n    webIdentityTokenFile: profile.web_identity_token_file,\n    roleArn: profile.role_arn,\n    roleSessionName: profile.role_session_name,\n    roleAssumerWithWebIdentity: options.roleAssumerWithWebIdentity,\n    logger: options.logger,\n    parentClientConfig: options.parentClientConfig,\n})({\n    callerClientConfig,\n}).then((creds) => client.setCredentialFeature(creds, \"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN\", \"q\")));\n\nconst resolveProfileData = async (profileName, profiles, options, callerClientConfig, visitedProfiles = {}, isAssumeRoleRecursiveCall = false) => {\n    const data = profiles[profileName];\n    if (Object.keys(visitedProfiles).length > 0 && isStaticCredsProfile(data)) {\n        return resolveStaticCredentials(data, options);\n    }\n    if (isAssumeRoleRecursiveCall || isAssumeRoleProfile(data, { profile: profileName, logger: options.logger })) {\n        return resolveAssumeRoleCredentials(profileName, profiles, options, callerClientConfig, visitedProfiles, resolveProfileData);\n    }\n    if (isStaticCredsProfile(data)) {\n        return resolveStaticCredentials(data, options);\n    }\n    if (isWebIdentityProfile(data)) {\n        return resolveWebIdentityCredentials(data, options, callerClientConfig);\n    }\n    if (isProcessProfile(data)) {\n        return resolveProcessCredentials(options, profileName);\n    }\n    if (isSsoProfile(data)) {\n        return await resolveSsoCredentials(profileName, data, options, callerClientConfig);\n    }\n    if (isLoginProfile(data)) {\n        return resolveLoginCredentials(profileName, options, callerClientConfig);\n    }\n    throw new propertyProvider.CredentialsProviderError(`Could not resolve credentials using profile: [${profileName}] in configuration/credentials file(s).`, { logger: options.logger });\n};\n\nconst fromIni = (init = {}) => async ({ callerClientConfig } = {}) => {\n    init.logger?.debug(\"@aws-sdk/credential-provider-ini - fromIni\");\n    const profiles = await sharedIniFileLoader.parseKnownFiles(init);\n    return resolveProfileData(sharedIniFileLoader.getProfileName({\n        profile: init.profile ?? callerClientConfig?.profile,\n    }), profiles, init, callerClientConfig);\n};\n\nexports.fromIni = fromIni;\n"],"x_google_ignoreList":[0,1],"mappings":";;;;;;;;CAEA,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI,wBAAsB,cAAc;CACxC,IAAI,oBAAkB,UAAU;CAChC,IAAI,oBAAkB,UAAU;CAChC,IAAI,sBAAoB,YAAY;CAEpC,IAAM,0BAAN,MAAM,wBAAwB;EAC1B;EACA;EACA;EACA,OAAO,oBAAoB,MAAS;EACpC,YAAY,aAAa,MAAM,oBAAoB;AAC/C,QAAK,cAAc;AACnB,QAAK,OAAO;AACZ,QAAK,qBAAqB;;EAE9B,MAAM,kBAAkB;GACpB,MAAM,QAAQ,MAAM,KAAK,WAAW;AACpC,OAAI,CAAC,MACD,OAAM,IAAI,iBAAiB,yBAAyB,sCAAsC,KAAK,aAAa,2CAA2C;IAAE,aAAa;IAAO,QAAQ,KAAK;IAAQ,CAAC;GAEvM,MAAM,cAAc,MAAM;GAC1B,MAAM,MAAM,KAAK,KAAK;AAGtB,OAFmB,IAAI,KAAK,YAAY,UAAU,CAAC,SAAS,GACvB,OACd,wBAAwB,kBAC3C,QAAO,KAAK,QAAQ,MAAM;AAE9B,UAAO;IACH,aAAa,YAAY;IACzB,iBAAiB,YAAY;IAC7B,cAAc,YAAY;IAC1B,WAAW,YAAY;IACvB,YAAY,IAAI,KAAK,YAAY,UAAU;IAC9C;;EAEL,IAAI,SAAS;AACT,UAAO,KAAK,MAAM;;EAEtB,IAAI,eAAe;AACf,UAAO,KAAK,YAAY;;EAE5B,MAAM,QAAQ,OAAO;GACjB,MAAM,EAAE,cAAc,6BAA6B,MAAM,OAAO;GAChE,MAAM,EAAE,QAAQ,mBAAmB,KAAK,sBAAsB,EAAE;GAChE,MAAM,QAAQ,qBAAmB;AAC7B,WAAOA,kBAAgB,UAAU,oBAAoB;;GAEzD,MAAM,iBAAiB,KAAK,KAAK,oBAAoB,eAAe,GAC9D,SACA,KAAK,oBAAoB;GAE/B,MAAM,SAAS,IAAI,aAAa;IAC5B,aAAa;KACT,aAAa;KACb,iBAAiB;KACpB;IACD,QANW,KAAK,YAAY,UAAW,MAAM,KAAK,oBAAoB,UAAU,IAAK,QAAQ,IAAI;IAOjG;IACA;IACA;IACA,GAAG,KAAK,MAAM;IACjB,CAAC;AACF,QAAK,sBAAsB,OAAO,gBAAgB;GAClD,MAAM,eAAe,EACjB,YAAY;IACR,UAAU,MAAM;IAChB,cAAc,MAAM;IACpB,WAAW;IACd,EACJ;AACD,OAAI;IACA,MAAM,WAAW,MAAM,OAAO,KAAK,IAAI,yBAAyB,aAAa,CAAC;IAC9E,MAAM,EAAE,aAAa,iBAAiB,iBAAiB,SAAS,aAAa,eAAe,EAAE;IAC9F,MAAM,EAAE,cAAc,cAAc,SAAS,eAAe,EAAE;AAC9D,QAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,aACtD,OAAM,IAAI,iBAAiB,yBAAyB,kDAAkD;KAClG,QAAQ,KAAK;KACb,aAAa;KAChB,CAAC;IAEN,MAAM,eAAe,aAAa,OAAO;IACzC,MAAM,aAAa,IAAI,KAAK,KAAK,KAAK,GAAG,YAAY;IACrD,MAAM,eAAe;KACjB,GAAG;KACH,aAAa;MACT,GAAG,MAAM;MACI;MACI;MACH;MACd,WAAW,WAAW,aAAa;MACtC;KACa;KACjB;AACD,UAAM,KAAK,UAAU,aAAa;IAClC,MAAM,iBAAiB,aAAa;AACpC,WAAO;KACH,aAAa,eAAe;KAC5B,iBAAiB,eAAe;KAChC,cAAc,eAAe;KAC7B,WAAW,eAAe;KAC1B;KACH;YAEE,OAAO;AACV,QAAI,MAAM,SAAS,yBAAyB;KACxC,MAAM,YAAY,MAAM;KACxB,IAAI;AACJ,aAAQ,WAAR;MACI,KAAK;AACD,iBAAU;AACV;MACJ,KAAK;AACD,iBACI;AACJ;MACJ,KAAK;AACD,iBACI;AACJ;MACJ,QACI,WAAU,4BAA4B,OAAO,MAAM,CAAC;;AAE5D,WAAM,IAAI,iBAAiB,yBAAyB,SAAS;MAAE,QAAQ,KAAK;MAAQ,aAAa;MAAO,CAAC;;AAE7G,UAAM,IAAI,iBAAiB,yBAAyB,4BAA4B,OAAO,MAAM,CAAC,2CAA2C,EAAE,QAAQ,KAAK,QAAQ,CAAC;;;EAGzK,MAAM,YAAY;GACd,MAAM,gBAAgB,KAAK,kBAAkB;AAC7C,OAAI;IACA,IAAI;AACJ,QAAI;AACA,iBAAY,MAAM,oBAAoB,SAAS,eAAe,EAAE,aAAa,KAAK,MAAM,aAAa,CAAC;YAEpG;AACF,iBAAY,MAAM,QAAQ,SAAS,SAAS,eAAe,OAAO;;IAEtE,MAAM,QAAQ,KAAK,MAAM,UAAU;IACnC,MAAM,gBAAgB;KAAC;KAAe;KAAY;KAAgB;KAAU,CAAC,QAAQ,MAAM,CAAC,MAAM,GAAG;AACrG,QAAI,CAAC,MAAM,aAAa,UACpB,eAAc,KAAK,YAAY;AAEnC,QAAI,cAAc,SAAS,EACvB,OAAM,IAAI,iBAAiB,yBAAyB,4CAA4C,cAAc,KAAK,KAAK,IAAI;KACxH,QAAQ,KAAK;KACb,aAAa;KAChB,CAAC;AAEN,WAAO;YAEJ,OAAO;AACV,UAAM,IAAI,iBAAiB,yBAAyB,6BAA6B,cAAc,IAAI,OAAO,MAAM,IAAI;KAChH,QAAQ,KAAK;KACb,aAAa;KAChB,CAAC;;;EAGV,MAAM,UAAU,OAAO;GACnB,MAAM,gBAAgB,KAAK,kBAAkB;GAC7C,MAAM,YAAY,UAAU,QAAQ,cAAc;AAClD,OAAI;AACA,UAAM,QAAQ,SAAS,MAAM,WAAW,EAAE,WAAW,MAAM,CAAC;YAEzD,OAAO;AAEd,SAAM,QAAQ,SAAS,UAAU,eAAe,KAAK,UAAU,OAAO,MAAM,EAAE,EAAE,OAAO;;EAE3F,mBAAmB;GACf,MAAM,YAAY,QAAQ,IAAI,6BAA6B,UAAU,KAAK,QAAQ,SAAS,EAAE,QAAQ,SAAS,QAAQ;GACtH,MAAM,oBAAoB,OAAO,KAAK,KAAK,cAAc,OAAO;GAChE,MAAM,qBAAqB,YAAY,WAAW,SAAS,CAAC,OAAO,kBAAkB,CAAC,OAAO,MAAM;AACnG,UAAO,UAAU,KAAK,WAAW,GAAG,mBAAmB,OAAO;;EAElE,kBAAkB,cAAc;GAC5B,IAAI,SAAS;AACb,OAAI,aAAa,YAAY,EACzB,OAAM,IAAI,MAAM,wBAAwB;AAE5C;GACA,MAAM,UAAU,aAAa;GAC7B,IAAI,IAAI,aAAa,SAAS,QAAQ,SAAS,QAAQ;AACvD,aAAU;AACV,OAAI,aAAa,YAAY,EACzB,OAAM,IAAI,MAAM,wBAAwB;AAE5C;GACA,MAAM,UAAU,aAAa;GAC7B,IAAI,IAAI,aAAa,SAAS,QAAQ,SAAS,QAAQ;AACvD,OAAI,EAAE,OAAO,IAAO,EAAE,SAAS,EAAE,GAAG;AACpC,OAAI,EAAE,OAAO,IAAO,EAAE,SAAS,EAAE,GAAG;GACpC,MAAM,UAAU,OAAO,OAAO,CAAC,OAAO,MAAM,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;GAC/D,MAAM,UAAU,OAAO,OAAO,CAAC,OAAO,MAAM,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;AAC/D,UAAO,OAAO,OAAO,CAAC,SAAS,QAAQ,CAAC;;EAE5C,sBAAsB,iBAAiB;AACnC,mBAAgB,KAAK,SAAS,OAAO,SAAS;AAC1C,QAAI,aAAa,YAAY,WAAW,KAAK,QAAQ,EAAE;KACnD,MAAM,UAAU,KAAK;KACrB,MAAM,iBAAiB,GAAG,QAAQ,SAAS,IAAI,QAAQ,WAAW,QAAQ,OAAO,IAAI,QAAQ,SAAS,KAAK,QAAQ;KACnH,MAAM,OAAO,MAAM,KAAK,aAAa,QAAQ,QAAQ,eAAe;AACpE,aAAQ,UAAU;MACd,GAAG,QAAQ;MACX,MAAM;MACT;;AAEL,WAAO,KAAK,KAAK;MAClB;IACC,MAAM;IACN,MAAM;IACN,UAAU;IACb,CAAC;;EAEN,MAAM,aAAa,SAAS,QAAQ,UAAU;GAC1C,MAAM,QAAQ,MAAM,KAAK,WAAW;AACpC,OAAI;IACA,MAAM,aAAa,YAAY,iBAAiB;KAC5C,KAAK,MAAM;KACX,QAAQ;KACR,MAAM;KACT,CAAC;IAEF,MAAM,YADY,YAAY,gBAAgB,WAAW,CAC7B,OAAO;KAAE,QAAQ;KAAO,MAAM;KAAQ,CAAC;IACnE,IAAI,aAAa;AACjB,SAAK,IAAI,IAAI,GAAG,IAAI,UAAU,QAAQ,IAClC,KAAI,UAAU,OAAO,GAAM;AACvB,kBAAa;AACb;;IAGR,MAAM,IAAI,UAAU,MAAM,aAAa,GAAG,aAAa,GAAG;IAC1D,MAAM,IAAI,UAAU,MAAM,aAAa,IAAI,aAAa,GAAG;IAC3D,MAAM,SAAS;KACX,KAAK;KACL,KAAK;KACL,KAAK;MACD,KAAK;MACL,KAAK;MACL,GAAG,EAAE,SAAS,YAAY;MAC1B,GAAG,EAAE,SAAS,YAAY;MAC7B;KACJ;IACD,MAAM,UAAU;KACZ,KAAK,OAAO,YAAY;KACxB,KAAK;KACL,KAAK;KACL,KAAK,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;KACrC;IAGD,MAAM,UAAU,GAFE,OAAO,KAAK,KAAK,UAAU,OAAO,CAAC,CAAC,SAAS,YAAY,CAE9C,GADV,OAAO,KAAK,KAAK,UAAU,QAAQ,CAAC,CAAC,SAAS,YAAY;IAE7E,MAAM,gBAAgB,YAAY,KAAK,UAAU,OAAO,KAAK,QAAQ,EAAE,WAAW;AAGlF,WAAO,GAAG,QAAQ,GAFG,KAAK,kBAAkB,cAAc,CACxB,SAAS,YAAY;YAGpD,OAAO;AACV,UAAM,IAAI,iBAAiB,yBAAyB,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,IAAI;KAAE,QAAQ,KAAK;KAAQ,aAAa;KAAO,CAAC;;;;CAKxM,MAAM,wBAAwB,SAAS,OAAO,EAAE,uBAAuB,EAAE,KAAK;AAC1E,QAAM,QAAQ,QAAQ,uDAAuD;EAC7E,MAAM,WAAW,MAAM,oBAAoB,gBAAgB,QAAQ,EAAE,CAAC;EACtE,MAAM,cAAc,oBAAoB,eAAe,EACnD,SAAS,MAAM,WAAW,oBAAoB,SACjD,CAAC;EACF,MAAM,UAAU,SAAS;AACzB,MAAI,CAAC,SAAS,cACV,OAAM,IAAI,iBAAiB,yBAAyB,WAAW,YAAY,mCAAmC;GAC1G,aAAa;GACb,QAAQ,MAAM;GACjB,CAAC;EAGN,MAAM,cAAc,MADJ,IAAI,wBAAwB,SAAS,MAAM,mBAAmB,CAC5C,iBAAiB;AACnD,SAAO,OAAO,qBAAqB,aAAa,qBAAqB,KAAK;;AAG9E,SAAQ,uBAAuB;;;;;;CC3R/B,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,MAAM,2BAA2B,kBAAkB,aAAa,WAAW;EACvE,MAAM,qBAAqB;GACvB,cAAc,OAAO,YAAY;IAC7B,MAAM,EAAE,aAAa,MAAM,OAAO;IAClC,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,YAAQ,MAAM,uEAAuE;AACrF,WAAO,YAAY,iBAAiB,MAAM,SAAS,WAAW,EAAE,CAAC,EAAE,sBAAsB,QAAQ,CAAC,EAAE,CAAC,KAAK,iBAAiB;;GAE/H,qBAAqB,OAAO,YAAY;AACpC,YAAQ,MAAM,8EAA8E;IAC5F,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,WAAO,YAAY,qBAAqB,QAAQ,EAAE,CAAC,KAAK,iBAAiB;;GAE7E,aAAa,OAAO,YAAY;AAC5B,YAAQ,MAAM,sEAAsE;IACpF,MAAM,EAAE,YAAY,MAAM,OAAO;AACjC,WAAO,YAAY,QAAQ,QAAQ,EAAE,CAAC,KAAK,iBAAiB;;GAEnE;AACD,MAAI,oBAAoB,mBACpB,QAAO,mBAAmB;MAG1B,OAAM,IAAI,iBAAiB,yBAAyB,4CAA4C,YAAY,QAAQ,iBAAiB,iEACjE,EAAE,QAAQ,CAAC;;CAGvF,MAAM,oBAAoB,UAAU,OAAO,qBAAqB,OAAO,sCAAsC,IAAI;CAEjH,MAAM,uBAAuB,KAAK,EAAE,UAAU,WAAW,WAAW,EAAE,KAAK;AACvE,SAAQ,QAAQ,IAAI,IAChB,OAAO,QAAQ,YACf,OAAO,IAAI,aAAa,YACxB,CAAC,aAAa,SAAS,CAAC,QAAQ,OAAO,IAAI,kBAAkB,GAAG,MAChE,CAAC,aAAa,SAAS,CAAC,QAAQ,OAAO,IAAI,YAAY,GAAG,MAC1D,CAAC,aAAa,SAAS,CAAC,QAAQ,OAAO,IAAI,WAAW,GAAG,OACxD,8BAA8B,KAAK;GAAE;GAAS;GAAQ,CAAC,IAAI,0BAA0B,KAAK;GAAE;GAAS;GAAQ,CAAC;;CAEvH,MAAM,iCAAiC,KAAK,EAAE,SAAS,aAAa;EAChE,MAAM,oBAAoB,OAAO,IAAI,mBAAmB,YAAY,OAAO,IAAI,sBAAsB;AACrG,MAAI,kBACA,SAAQ,QAAQ,OAAO,QAAQ,gDAAgD,IAAI,iBAAiB;AAExG,SAAO;;CAEX,MAAM,6BAA6B,KAAK,EAAE,SAAS,aAAa;EAC5D,MAAM,sBAAsB,OAAO,IAAI,sBAAsB,YAAY,OAAO,IAAI,mBAAmB;AACvG,MAAI,oBACA,SAAQ,QAAQ,OAAO,QAAQ,+CAA+C,IAAI,oBAAoB;AAE1G,SAAO;;CAEX,MAAM,+BAA+B,OAAO,aAAa,UAAU,SAAS,oBAAoB,kBAAkB,EAAE,EAAE,uBAAuB;AACzI,UAAQ,QAAQ,MAAM,wEAAwE;EAC9F,MAAM,cAAc,SAAS;EAC7B,MAAM,EAAE,gBAAgB,WAAW;AACnC,MAAI,CAAC,QAAQ,aAAa;GACtB,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,WAAQ,cAAc,sBAAsB;IACxC,GAAG,QAAQ;IACX,0BAA0B,QAAQ;IAClC,oBAAoB;KAChB,GAAG;KACH,GAAG,SAAS;KACZ,QAAQ,UAAU,SAAS,oBAAoB,UAAU,oBAAoB;KAChF;IACJ,EAAE,QAAQ,cAAc;;AAE7B,MAAI,kBAAkB,kBAAkB,gBACpC,OAAM,IAAI,iBAAiB,yBAAyB,kEAC5C,oBAAoB,eAAe,QAAQ,CAAC,wBAChD,OAAO,KAAK,gBAAgB,CAAC,KAAK,KAAK,EAAE,EAAE,QAAQ,QAAQ,QAAQ,CAAC;AAE5E,UAAQ,QAAQ,MAAM,wEAAwE,iBAAiB,mBAAmB,eAAe,KAAK,YAAY,YAAY,KAAK;EACnL,MAAM,sBAAsB,iBACtB,mBAAmB,gBAAgB,UAAU,SAAS,oBAAoB;GACxE,GAAG;IACF,iBAAiB;GACrB,EAAE,iCAAiC,SAAS,mBAAmB,EAAE,CAAC,CAAC,IACjE,MAAM,wBAAwB,YAAY,mBAAmB,aAAa,QAAQ,OAAO,CAAC,QAAQ,GAAG;AAC5G,MAAI,iCAAiC,YAAY,CAC7C,QAAO,oBAAoB,MAAM,UAAU,OAAO,qBAAqB,OAAO,sCAAsC,IAAI,CAAC;OAExH;GACD,MAAM,SAAS;IACX,SAAS,YAAY;IACrB,iBAAiB,YAAY,qBAAqB,cAAc,KAAK,KAAK;IAC1E,YAAY,YAAY;IACxB,iBAAiB,SAAS,YAAY,oBAAoB,QAAQ,GAAG;IACxE;GACD,MAAM,EAAE,eAAe;AACvB,OAAI,YAAY;AACZ,QAAI,CAAC,QAAQ,gBACT,OAAM,IAAI,iBAAiB,yBAAyB,WAAW,YAAY,gFAAgF;KAAE,QAAQ,QAAQ;KAAQ,aAAa;KAAO,CAAC;AAE9M,WAAO,eAAe;AACtB,WAAO,YAAY,MAAM,QAAQ,gBAAgB,WAAW;;GAEhE,MAAM,cAAc,MAAM;AAC1B,UAAO,QAAQ,YAAY,aAAa,OAAO,CAAC,MAAM,UAAU,OAAO,qBAAqB,OAAO,sCAAsC,IAAI,CAAC;;;CAGtJ,MAAM,oCAAoC,YAAY;AAClD,SAAO,CAAC,QAAQ,YAAY,CAAC,CAAC,QAAQ;;CAG1C,MAAM,kBAAkB,SAAS;AAC7B,SAAO,QAAQ,QAAQ,KAAK,cAAc;;CAE9C,MAAM,0BAA0B,OAAO,aAAa,SAAS,uBAAuB;EAChF,MAAM,cAAc,MAAM,wBAAwB,qBAAqB;GACnE,GAAG;GACH,SAAS;GACZ,CAAC,CAAC,EAAE,oBAAoB,CAAC;AAC1B,SAAO,OAAO,qBAAqB,aAAa,6BAA6B,KAAK;;CAGtF,MAAM,oBAAoB,QAAQ,QAAQ,IAAI,IAAI,OAAO,QAAQ,YAAY,OAAO,IAAI,uBAAuB;CAC/G,MAAM,4BAA4B,OAAO,SAAS,YAAY,OAAO,2EAAwC,MAAM,EAAE,kBAAkB,YAAY;EAC/I,GAAG;EACH;EACH,CAAC,EAAE,CAAC,MAAM,UAAU,OAAO,qBAAqB,OAAO,+BAA+B,IAAI,CAAC,CAAC;CAE7F,MAAM,wBAAwB,OAAO,SAAS,aAAa,UAAU,EAAE,EAAE,uBAAuB;EAC5F,MAAM,EAAE,YAAY,MAAM,OAAO;AACjC,SAAO,QAAQ;GACX;GACA,QAAQ,QAAQ;GAChB,oBAAoB,QAAQ;GAC5B,cAAc,QAAQ;GACzB,CAAC,CAAC,EACC,oBACH,CAAC,CAAC,MAAM,UAAU;AACf,OAAI,YAAY,YACZ,QAAO,OAAO,qBAAqB,OAAO,2BAA2B,IAAI;OAGzE,QAAO,OAAO,qBAAqB,OAAO,kCAAkC,IAAI;IAEtF;;CAEN,MAAM,gBAAgB,QAAQ,QACzB,OAAO,IAAI,kBAAkB,YAC1B,OAAO,IAAI,mBAAmB,YAC9B,OAAO,IAAI,gBAAgB,YAC3B,OAAO,IAAI,eAAe,YAC1B,OAAO,IAAI,kBAAkB;CAErC,MAAM,wBAAwB,QAAQ,QAAQ,IAAI,IAC9C,OAAO,QAAQ,YACf,OAAO,IAAI,sBAAsB,YACjC,OAAO,IAAI,0BAA0B,YACrC,CAAC,aAAa,SAAS,CAAC,QAAQ,OAAO,IAAI,kBAAkB,GAAG,MAChE,CAAC,aAAa,SAAS,CAAC,QAAQ,OAAO,IAAI,eAAe,GAAG;CACjE,MAAM,2BAA2B,OAAO,SAAS,YAAY;AACzD,WAAS,QAAQ,MAAM,8DAA8D;EACrF,MAAM,cAAc;GAChB,aAAa,QAAQ;GACrB,iBAAiB,QAAQ;GACzB,cAAc,QAAQ;GACtB,GAAI,QAAQ,wBAAwB,EAAE,iBAAiB,QAAQ,sBAAsB;GACrF,GAAI,QAAQ,kBAAkB,EAAE,WAAW,QAAQ,gBAAgB;GACtE;AACD,SAAO,OAAO,qBAAqB,aAAa,uBAAuB,IAAI;;CAG/E,MAAM,wBAAwB,QAAQ,QAAQ,IAAI,IAC9C,OAAO,QAAQ,YACf,OAAO,IAAI,4BAA4B,YACvC,OAAO,IAAI,aAAa,YACxB,CAAC,aAAa,SAAS,CAAC,QAAQ,OAAO,IAAI,kBAAkB,GAAG;CACpE,MAAM,gCAAgC,OAAO,SAAS,SAAS,uBAAuB,OAAO,2EAA6C,MAAM,EAAE,oBAAoB,cAAc;EAChL,sBAAsB,QAAQ;EAC9B,SAAS,QAAQ;EACjB,iBAAiB,QAAQ;EACzB,4BAA4B,QAAQ;EACpC,QAAQ,QAAQ;EAChB,oBAAoB,QAAQ;EAC/B,CAAC,CAAC,EACC,oBACH,CAAC,CAAC,MAAM,UAAU,OAAO,qBAAqB,OAAO,wCAAwC,IAAI,CAAC,CAAC;CAEpG,MAAM,qBAAqB,OAAO,aAAa,UAAU,SAAS,oBAAoB,kBAAkB,EAAE,EAAE,4BAA4B,UAAU;EAC9I,MAAM,OAAO,SAAS;AACtB,MAAI,OAAO,KAAK,gBAAgB,CAAC,SAAS,KAAK,qBAAqB,KAAK,CACrE,QAAO,yBAAyB,MAAM,QAAQ;AAElD,MAAI,6BAA6B,oBAAoB,MAAM;GAAE,SAAS;GAAa,QAAQ,QAAQ;GAAQ,CAAC,CACxG,QAAO,6BAA6B,aAAa,UAAU,SAAS,oBAAoB,iBAAiB,mBAAmB;AAEhI,MAAI,qBAAqB,KAAK,CAC1B,QAAO,yBAAyB,MAAM,QAAQ;AAElD,MAAI,qBAAqB,KAAK,CAC1B,QAAO,8BAA8B,MAAM,SAAS,mBAAmB;AAE3E,MAAI,iBAAiB,KAAK,CACtB,QAAO,0BAA0B,SAAS,YAAY;AAE1D,MAAI,aAAa,KAAK,CAClB,QAAO,MAAM,sBAAsB,aAAa,MAAM,SAAS,mBAAmB;AAEtF,MAAI,eAAe,KAAK,CACpB,QAAO,wBAAwB,aAAa,SAAS,mBAAmB;AAE5E,QAAM,IAAI,iBAAiB,yBAAyB,iDAAiD,YAAY,0CAA0C,EAAE,QAAQ,QAAQ,QAAQ,CAAC;;CAG1L,MAAM,WAAW,OAAO,EAAE,KAAK,OAAO,EAAE,uBAAuB,EAAE,KAAK;AAClE,OAAK,QAAQ,MAAM,6CAA6C;EAChE,MAAM,WAAW,MAAM,oBAAoB,gBAAgB,KAAK;AAChE,SAAO,mBAAmB,oBAAoB,eAAe,EACzD,SAAS,KAAK,WAAW,oBAAoB,SAChD,CAAC,EAAE,UAAU,MAAM,mBAAmB;;AAG3C,SAAQ,UAAU"}