monorise 1.0.0 → 1.1.0-dev.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (99) hide show
  1. package/dist/base/index.d.ts +84 -3
  2. package/dist/base/index.js.map +1 -1
  3. package/dist/cli/cli.js +6 -0
  4. package/dist/cli/cli.js.map +1 -1
  5. package/dist/core/chunk-QV4Q5377.js +76 -0
  6. package/dist/core/chunk-QV4Q5377.js.map +1 -0
  7. package/dist/core/index.d.ts +182 -35
  8. package/dist/core/index.js +1486 -94
  9. package/dist/core/index.js.map +1 -1
  10. package/dist/core/service.config-ZJEZ6EKA.js +13 -0
  11. package/dist/core/service.config-ZJEZ6EKA.js.map +1 -0
  12. package/dist/proxy/index.d.ts +35 -0
  13. package/dist/proxy/index.js +75 -0
  14. package/dist/proxy/index.js.map +1 -0
  15. package/dist/react/actions/websocket.action.d.ts +71 -0
  16. package/dist/react/actions/websocket.action.d.ts.map +1 -0
  17. package/dist/react/chunk-4D22OCZG.js +65 -0
  18. package/dist/react/chunk-4D22OCZG.js.map +1 -0
  19. package/dist/react/chunk-4N3P4ONH.js +588 -0
  20. package/dist/react/chunk-4N3P4ONH.js.map +1 -0
  21. package/dist/react/chunk-4Y4KWGJD.js +182 -0
  22. package/dist/react/chunk-4Y4KWGJD.js.map +1 -0
  23. package/dist/react/chunk-757E5UYA.js +893 -0
  24. package/dist/react/chunk-757E5UYA.js.map +1 -0
  25. package/dist/react/chunk-A5TI2FW3.js +13 -0
  26. package/dist/react/chunk-A5TI2FW3.js.map +1 -0
  27. package/dist/react/chunk-B3XDGUFO.js +489 -0
  28. package/dist/react/chunk-B3XDGUFO.js.map +1 -0
  29. package/dist/react/chunk-BPBCUO2Z.js +248 -0
  30. package/dist/react/chunk-BPBCUO2Z.js.map +1 -0
  31. package/dist/react/chunk-CQBOIXWK.js +142 -0
  32. package/dist/react/chunk-CQBOIXWK.js.map +1 -0
  33. package/dist/react/chunk-DRH2BB7I.js +383 -0
  34. package/dist/react/chunk-DRH2BB7I.js.map +1 -0
  35. package/dist/react/chunk-EQ3PKQ2S.js +402 -0
  36. package/dist/react/chunk-EQ3PKQ2S.js.map +1 -0
  37. package/dist/react/chunk-H64MMAL7.js +245 -0
  38. package/dist/react/chunk-H64MMAL7.js.map +1 -0
  39. package/dist/react/chunk-KJX5LOMN.js +43 -0
  40. package/dist/react/chunk-KJX5LOMN.js.map +1 -0
  41. package/dist/react/chunk-MO35V2Y7.js +172 -0
  42. package/dist/react/chunk-MO35V2Y7.js.map +1 -0
  43. package/dist/react/chunk-UC3E72G7.js +73 -0
  44. package/dist/react/chunk-UC3E72G7.js.map +1 -0
  45. package/dist/react/chunk-UHMKB3OR.js +5568 -0
  46. package/dist/react/chunk-UHMKB3OR.js.map +1 -0
  47. package/dist/react/chunk-UQPQBWEQ.js +54 -0
  48. package/dist/react/chunk-UQPQBWEQ.js.map +1 -0
  49. package/dist/react/chunk-XCDCVRJR.js +43 -0
  50. package/dist/react/chunk-XCDCVRJR.js.map +1 -0
  51. package/dist/react/chunk-XOYAZDIH.js +47 -0
  52. package/dist/react/chunk-XOYAZDIH.js.map +1 -0
  53. package/dist/react/chunk-YNFQEPO5.js +29 -0
  54. package/dist/react/chunk-YNFQEPO5.js.map +1 -0
  55. package/dist/react/dist-es-35AO47NO.js +90 -0
  56. package/dist/react/dist-es-35AO47NO.js.map +1 -0
  57. package/dist/react/dist-es-5GDBXNKQ.js +333 -0
  58. package/dist/react/dist-es-5GDBXNKQ.js.map +1 -0
  59. package/dist/react/dist-es-B3JDGWY6.js +71 -0
  60. package/dist/react/dist-es-B3JDGWY6.js.map +1 -0
  61. package/dist/react/dist-es-IWIE5JLA.js +169 -0
  62. package/dist/react/dist-es-IWIE5JLA.js.map +1 -0
  63. package/dist/react/dist-es-NRIS3TYJ.js +494 -0
  64. package/dist/react/dist-es-NRIS3TYJ.js.map +1 -0
  65. package/dist/react/dist-es-VCXAEYYN.js +22 -0
  66. package/dist/react/dist-es-VCXAEYYN.js.map +1 -0
  67. package/dist/react/dist-es-VU33JFTZ.js +379 -0
  68. package/dist/react/dist-es-VU33JFTZ.js.map +1 -0
  69. package/dist/react/event-streams-OSOTOTTP.js +277 -0
  70. package/dist/react/event-streams-OSOTOTTP.js.map +1 -0
  71. package/dist/react/index.d.ts +53 -4
  72. package/dist/react/index.d.ts.map +1 -1
  73. package/dist/react/index.js +10948 -190
  74. package/dist/react/index.js.map +1 -1
  75. package/dist/react/loadSso-ME7MKAM3.js +556 -0
  76. package/dist/react/loadSso-ME7MKAM3.js.map +1 -0
  77. package/dist/react/service.config-ZJEZ6EKA-FC2TR3GH.js +14 -0
  78. package/dist/react/service.config-ZJEZ6EKA-FC2TR3GH.js.map +1 -0
  79. package/dist/react/services/core.service.d.ts +11 -1
  80. package/dist/react/services/core.service.d.ts.map +1 -1
  81. package/dist/react/signin-LOXYIE5I.js +653 -0
  82. package/dist/react/signin-LOXYIE5I.js.map +1 -0
  83. package/dist/react/sso-oidc-X63KRRLO.js +786 -0
  84. package/dist/react/sso-oidc-X63KRRLO.js.map +1 -0
  85. package/dist/react/sts-OXBEY7HY.js +3948 -0
  86. package/dist/react/sts-OXBEY7HY.js.map +1 -0
  87. package/dist/react/websocket/WebSocketManager.d.ts +68 -0
  88. package/dist/react/websocket/WebSocketManager.d.ts.map +1 -0
  89. package/dist/react/websocket/index.d.ts +3 -0
  90. package/dist/react/websocket/index.d.ts.map +1 -0
  91. package/dist/react/websocket/optimistic.d.ts +51 -0
  92. package/dist/react/websocket/optimistic.d.ts.map +1 -0
  93. package/dist/react/websocket-QHA7SQXG.js +10 -0
  94. package/dist/react/websocket-QHA7SQXG.js.map +1 -0
  95. package/dist/sst/components/monorise-core.d.ts +10 -0
  96. package/dist/sst/components/monorise-core.d.ts.map +1 -1
  97. package/dist/sst/index.js +75 -12
  98. package/dist/sst/index.js.map +1 -1
  99. package/package.json +9 -1
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../../node_modules/@smithy/property-provider/dist-es/TokenProviderError.js","../../../node_modules/@aws-sdk/credential-provider-sso/dist-es/isSsoProfile.js","../../../node_modules/@aws-sdk/token-providers/dist-es/constants.js","../../../node_modules/@aws-sdk/token-providers/dist-es/getSsoOidcClient.js","../../../node_modules/@aws-sdk/token-providers/dist-es/getNewSsoOidcToken.js","../../../node_modules/@aws-sdk/token-providers/dist-es/validateTokenExpiry.js","../../../node_modules/@aws-sdk/token-providers/dist-es/validateTokenKey.js","../../../node_modules/@aws-sdk/token-providers/dist-es/writeSSOTokenToFile.js","../../../node_modules/@aws-sdk/token-providers/dist-es/fromSso.js","../../../node_modules/@aws-sdk/credential-provider-sso/dist-es/resolveSSOCredentials.js","../../../node_modules/@aws-sdk/credential-provider-sso/dist-es/validateSsoProfile.js","../../../node_modules/@aws-sdk/credential-provider-sso/dist-es/fromSSO.js"],"sourcesContent":["import { ProviderError } from \"./ProviderError\";\nexport class TokenProviderError extends ProviderError {\n name = \"TokenProviderError\";\n constructor(message, options = true) {\n super(message, options);\n Object.setPrototypeOf(this, TokenProviderError.prototype);\n }\n}\n","export const isSsoProfile = (arg) => arg &&\n (typeof arg.sso_start_url === \"string\" ||\n typeof arg.sso_account_id === \"string\" ||\n typeof arg.sso_session === \"string\" ||\n typeof arg.sso_region === \"string\" ||\n typeof arg.sso_role_name === \"string\");\n","export const EXPIRE_WINDOW_MS = 5 * 60 * 1000;\nexport const REFRESH_MESSAGE = `To refresh this SSO session run 'aws sso login' with the corresponding profile.`;\n","export const getSsoOidcClient = async (ssoRegion, init = {}, callerClientConfig) => {\n const { SSOOIDCClient } = await import(\"@aws-sdk/nested-clients/sso-oidc\");\n const coalesce = (prop) => init.clientConfig?.[prop] ?? init.parentClientConfig?.[prop] ?? callerClientConfig?.[prop];\n const ssoOidcClient = new SSOOIDCClient(Object.assign({}, init.clientConfig ?? {}, {\n region: ssoRegion ?? init.clientConfig?.region,\n logger: coalesce(\"logger\"),\n userAgentAppId: coalesce(\"userAgentAppId\"),\n }));\n return ssoOidcClient;\n};\n","import { getSsoOidcClient } from \"./getSsoOidcClient\";\nexport const getNewSsoOidcToken = async (ssoToken, ssoRegion, init = {}, callerClientConfig) => {\n const { CreateTokenCommand } = await import(\"@aws-sdk/nested-clients/sso-oidc\");\n const ssoOidcClient = await getSsoOidcClient(ssoRegion, init, callerClientConfig);\n return ssoOidcClient.send(new CreateTokenCommand({\n clientId: ssoToken.clientId,\n clientSecret: ssoToken.clientSecret,\n refreshToken: ssoToken.refreshToken,\n grantType: \"refresh_token\",\n }));\n};\n","import { TokenProviderError } from \"@smithy/property-provider\";\nimport { REFRESH_MESSAGE } from \"./constants\";\nexport const validateTokenExpiry = (token) => {\n if (token.expiration && token.expiration.getTime() < Date.now()) {\n throw new TokenProviderError(`Token is expired. ${REFRESH_MESSAGE}`, false);\n }\n};\n","import { TokenProviderError } from \"@smithy/property-provider\";\nimport { REFRESH_MESSAGE } from \"./constants\";\nexport const validateTokenKey = (key, value, forRefresh = false) => {\n if (typeof value === \"undefined\") {\n throw new TokenProviderError(`Value not present for '${key}' in SSO Token${forRefresh ? \". Cannot refresh\" : \"\"}. ${REFRESH_MESSAGE}`, false);\n }\n};\n","import { getSSOTokenFilepath } from \"@smithy/shared-ini-file-loader\";\nimport { promises as fsPromises } from \"node:fs\";\nconst { writeFile } = fsPromises;\nexport const writeSSOTokenToFile = (id, ssoToken) => {\n const tokenFilepath = getSSOTokenFilepath(id);\n const tokenString = JSON.stringify(ssoToken, null, 2);\n return writeFile(tokenFilepath, tokenString);\n};\n","import { TokenProviderError } from \"@smithy/property-provider\";\nimport { getProfileName, getSSOTokenFromFile, loadSsoSessionData, parseKnownFiles, } from \"@smithy/shared-ini-file-loader\";\nimport { EXPIRE_WINDOW_MS, REFRESH_MESSAGE } from \"./constants\";\nimport { getNewSsoOidcToken } from \"./getNewSsoOidcToken\";\nimport { validateTokenExpiry } from \"./validateTokenExpiry\";\nimport { validateTokenKey } from \"./validateTokenKey\";\nimport { writeSSOTokenToFile } from \"./writeSSOTokenToFile\";\nconst lastRefreshAttemptTime = new Date(0);\nexport const fromSso = (init = {}) => async ({ callerClientConfig } = {}) => {\n init.logger?.debug(\"@aws-sdk/token-providers - fromSso\");\n const profiles = await parseKnownFiles(init);\n const profileName = getProfileName({\n profile: init.profile ?? callerClientConfig?.profile,\n });\n const profile = profiles[profileName];\n if (!profile) {\n throw new TokenProviderError(`Profile '${profileName}' could not be found in shared credentials file.`, false);\n }\n else if (!profile[\"sso_session\"]) {\n throw new TokenProviderError(`Profile '${profileName}' is missing required property 'sso_session'.`);\n }\n const ssoSessionName = profile[\"sso_session\"];\n const ssoSessions = await loadSsoSessionData(init);\n const ssoSession = ssoSessions[ssoSessionName];\n if (!ssoSession) {\n throw new TokenProviderError(`Sso session '${ssoSessionName}' could not be found in shared credentials file.`, false);\n }\n for (const ssoSessionRequiredKey of [\"sso_start_url\", \"sso_region\"]) {\n if (!ssoSession[ssoSessionRequiredKey]) {\n throw new TokenProviderError(`Sso session '${ssoSessionName}' is missing required property '${ssoSessionRequiredKey}'.`, false);\n }\n }\n const ssoStartUrl = ssoSession[\"sso_start_url\"];\n const ssoRegion = ssoSession[\"sso_region\"];\n let ssoToken;\n try {\n ssoToken = await getSSOTokenFromFile(ssoSessionName);\n }\n catch (e) {\n throw new TokenProviderError(`The SSO session token associated with profile=${profileName} was not found or is invalid. ${REFRESH_MESSAGE}`, false);\n }\n validateTokenKey(\"accessToken\", ssoToken.accessToken);\n validateTokenKey(\"expiresAt\", ssoToken.expiresAt);\n const { accessToken, expiresAt } = ssoToken;\n const existingToken = { token: accessToken, expiration: new Date(expiresAt) };\n if (existingToken.expiration.getTime() - Date.now() > EXPIRE_WINDOW_MS) {\n return existingToken;\n }\n if (Date.now() - lastRefreshAttemptTime.getTime() < 30 * 1000) {\n validateTokenExpiry(existingToken);\n return existingToken;\n }\n validateTokenKey(\"clientId\", ssoToken.clientId, true);\n validateTokenKey(\"clientSecret\", ssoToken.clientSecret, true);\n validateTokenKey(\"refreshToken\", ssoToken.refreshToken, true);\n try {\n lastRefreshAttemptTime.setTime(Date.now());\n const newSsoOidcToken = await getNewSsoOidcToken(ssoToken, ssoRegion, init, callerClientConfig);\n validateTokenKey(\"accessToken\", newSsoOidcToken.accessToken);\n validateTokenKey(\"expiresIn\", newSsoOidcToken.expiresIn);\n const newTokenExpiration = new Date(Date.now() + newSsoOidcToken.expiresIn * 1000);\n try {\n await writeSSOTokenToFile(ssoSessionName, {\n ...ssoToken,\n accessToken: newSsoOidcToken.accessToken,\n expiresAt: newTokenExpiration.toISOString(),\n refreshToken: newSsoOidcToken.refreshToken,\n });\n }\n catch (error) {\n }\n return {\n token: newSsoOidcToken.accessToken,\n expiration: newTokenExpiration,\n };\n }\n catch (error) {\n validateTokenExpiry(existingToken);\n return existingToken;\n }\n};\n","import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { fromSso as getSsoTokenProvider } from \"@aws-sdk/token-providers\";\nimport { CredentialsProviderError } from \"@smithy/property-provider\";\nimport { getSSOTokenFromFile } from \"@smithy/shared-ini-file-loader\";\nconst SHOULD_FAIL_CREDENTIAL_CHAIN = false;\nexport const resolveSSOCredentials = async ({ ssoStartUrl, ssoSession, ssoAccountId, ssoRegion, ssoRoleName, ssoClient, clientConfig, parentClientConfig, callerClientConfig, profile, filepath, configFilepath, ignoreCache, logger, }) => {\n let token;\n const refreshMessage = `To refresh this SSO session run aws sso login with the corresponding profile.`;\n if (ssoSession) {\n try {\n const _token = await getSsoTokenProvider({\n profile,\n filepath,\n configFilepath,\n ignoreCache,\n })();\n token = {\n accessToken: _token.token,\n expiresAt: new Date(_token.expiration).toISOString(),\n };\n }\n catch (e) {\n throw new CredentialsProviderError(e.message, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n }\n else {\n try {\n token = await getSSOTokenFromFile(ssoStartUrl);\n }\n catch (e) {\n throw new CredentialsProviderError(`The SSO session associated with this profile is invalid. ${refreshMessage}`, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n }\n if (new Date(token.expiresAt).getTime() - Date.now() <= 0) {\n throw new CredentialsProviderError(`The SSO session associated with this profile has expired. ${refreshMessage}`, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n const { accessToken } = token;\n const { SSOClient, GetRoleCredentialsCommand } = await import(\"./loadSso\");\n const sso = ssoClient ||\n new SSOClient(Object.assign({}, clientConfig ?? {}, {\n logger: clientConfig?.logger ?? callerClientConfig?.logger ?? parentClientConfig?.logger,\n region: clientConfig?.region ?? ssoRegion,\n userAgentAppId: clientConfig?.userAgentAppId ?? callerClientConfig?.userAgentAppId ?? parentClientConfig?.userAgentAppId,\n }));\n let ssoResp;\n try {\n ssoResp = await sso.send(new GetRoleCredentialsCommand({\n accountId: ssoAccountId,\n roleName: ssoRoleName,\n accessToken,\n }));\n }\n catch (e) {\n throw new CredentialsProviderError(e, {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n const { roleCredentials: { accessKeyId, secretAccessKey, sessionToken, expiration, credentialScope, accountId } = {}, } = ssoResp;\n if (!accessKeyId || !secretAccessKey || !sessionToken || !expiration) {\n throw new CredentialsProviderError(\"SSO returns an invalid temporary credential.\", {\n tryNextLink: SHOULD_FAIL_CREDENTIAL_CHAIN,\n logger,\n });\n }\n const credentials = {\n accessKeyId,\n secretAccessKey,\n sessionToken,\n expiration: new Date(expiration),\n ...(credentialScope && { credentialScope }),\n ...(accountId && { accountId }),\n };\n if (ssoSession) {\n setCredentialFeature(credentials, \"CREDENTIALS_SSO\", \"s\");\n }\n else {\n setCredentialFeature(credentials, \"CREDENTIALS_SSO_LEGACY\", \"u\");\n }\n return credentials;\n};\n","import { CredentialsProviderError } from \"@smithy/property-provider\";\nexport const validateSsoProfile = (profile, logger) => {\n const { sso_start_url, sso_account_id, sso_region, sso_role_name } = profile;\n if (!sso_start_url || !sso_account_id || !sso_region || !sso_role_name) {\n throw new CredentialsProviderError(`Profile is configured with invalid SSO credentials. Required parameters \"sso_account_id\", ` +\n `\"sso_region\", \"sso_role_name\", \"sso_start_url\". Got ${Object.keys(profile).join(\", \")}\\nReference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`, { tryNextLink: false, logger });\n }\n return profile;\n};\n","import { CredentialsProviderError } from \"@smithy/property-provider\";\nimport { getProfileName, loadSsoSessionData, parseKnownFiles } from \"@smithy/shared-ini-file-loader\";\nimport { isSsoProfile } from \"./isSsoProfile\";\nimport { resolveSSOCredentials } from \"./resolveSSOCredentials\";\nimport { validateSsoProfile } from \"./validateSsoProfile\";\nexport const fromSSO = (init = {}) => async ({ callerClientConfig } = {}) => {\n init.logger?.debug(\"@aws-sdk/credential-provider-sso - fromSSO\");\n const { ssoStartUrl, ssoAccountId, ssoRegion, ssoRoleName, ssoSession } = init;\n const { ssoClient } = init;\n const profileName = getProfileName({\n profile: init.profile ?? callerClientConfig?.profile,\n });\n if (!ssoStartUrl && !ssoAccountId && !ssoRegion && !ssoRoleName && !ssoSession) {\n const profiles = await parseKnownFiles(init);\n const profile = profiles[profileName];\n if (!profile) {\n throw new CredentialsProviderError(`Profile ${profileName} was not found.`, { logger: init.logger });\n }\n if (!isSsoProfile(profile)) {\n throw new CredentialsProviderError(`Profile ${profileName} is not configured with SSO credentials.`, {\n logger: init.logger,\n });\n }\n if (profile?.sso_session) {\n const ssoSessions = await loadSsoSessionData(init);\n const session = ssoSessions[profile.sso_session];\n const conflictMsg = ` configurations in profile ${profileName} and sso-session ${profile.sso_session}`;\n if (ssoRegion && ssoRegion !== session.sso_region) {\n throw new CredentialsProviderError(`Conflicting SSO region` + conflictMsg, {\n tryNextLink: false,\n logger: init.logger,\n });\n }\n if (ssoStartUrl && ssoStartUrl !== session.sso_start_url) {\n throw new CredentialsProviderError(`Conflicting SSO start_url` + conflictMsg, {\n tryNextLink: false,\n logger: init.logger,\n });\n }\n profile.sso_region = session.sso_region;\n profile.sso_start_url = session.sso_start_url;\n }\n const { sso_start_url, sso_account_id, sso_region, sso_role_name, sso_session } = validateSsoProfile(profile, init.logger);\n return resolveSSOCredentials({\n ssoStartUrl: sso_start_url,\n ssoSession: sso_session,\n ssoAccountId: sso_account_id,\n ssoRegion: sso_region,\n ssoRoleName: sso_role_name,\n ssoClient: ssoClient,\n clientConfig: init.clientConfig,\n parentClientConfig: init.parentClientConfig,\n callerClientConfig: init.callerClientConfig,\n profile: profileName,\n filepath: init.filepath,\n configFilepath: init.configFilepath,\n ignoreCache: init.ignoreCache,\n logger: init.logger,\n });\n }\n else if (!ssoStartUrl || !ssoAccountId || !ssoRegion || !ssoRoleName) {\n throw new CredentialsProviderError(\"Incomplete configuration. The fromSSO() argument hash must include \" +\n '\"ssoStartUrl\", \"ssoAccountId\", \"ssoRegion\", \"ssoRoleName\"', { tryNextLink: false, logger: init.logger });\n }\n else {\n return resolveSSOCredentials({\n ssoStartUrl,\n ssoSession,\n ssoAccountId,\n ssoRegion,\n ssoRoleName,\n ssoClient,\n clientConfig: init.clientConfig,\n parentClientConfig: init.parentClientConfig,\n callerClientConfig: init.callerClientConfig,\n profile: profileName,\n filepath: init.filepath,\n configFilepath: init.configFilepath,\n ignoreCache: init.ignoreCache,\n logger: init.logger,\n });\n }\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AACO,IAAM,qBAAN,MAAM,4BAA2B,cAAc;AAAA,EAElD,YAAY,SAAS,UAAU,MAAM;AACjC,UAAM,SAAS,OAAO;AAF1B,gCAAO;AAGH,WAAO,eAAe,MAAM,oBAAmB,SAAS;AAAA,EAC5D;AACJ;;;ACPO,IAAM,eAAe,CAAC,QAAQ,QAChC,OAAO,IAAI,kBAAkB,YAC1B,OAAO,IAAI,mBAAmB,YAC9B,OAAO,IAAI,gBAAgB,YAC3B,OAAO,IAAI,eAAe,YAC1B,OAAO,IAAI,kBAAkB;;;ACL9B,IAAM,mBAAmB,IAAI,KAAK;AAClC,IAAM,kBAAkB;;;ACDxB,IAAM,mBAAmB,OAAO,WAAW,OAAO,CAAC,GAAG,uBAAuB;AAApF;AACI,QAAM,EAAE,cAAc,IAAI,MAAM,OAAO,wBAAkC;AACzE,QAAM,WAAW,CAAC,SAAM;AAF5B,QAAAA,KAAAC,KAAA;AAE+B,wBAAAD,MAAA,KAAK,iBAAL,gBAAAA,IAAoB,UAApB,aAA6BC,MAAA,KAAK,uBAAL,gBAAAA,IAA0B,UAAvD,YAAgE,yDAAqB;AAAA;AAChH,QAAM,gBAAgB,IAAI,cAAc,OAAO,OAAO,CAAC,IAAG,UAAK,iBAAL,YAAqB,CAAC,GAAG;AAAA,IAC/E,QAAQ,iCAAa,UAAK,iBAAL,mBAAmB;AAAA,IACxC,QAAQ,SAAS,QAAQ;AAAA,IACzB,gBAAgB,SAAS,gBAAgB;AAAA,EAC7C,CAAC,CAAC;AACF,SAAO;AACX;;;ACRO,IAAM,qBAAqB,OAAO,UAAU,WAAW,OAAO,CAAC,GAAG,uBAAuB;AAC5F,QAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,wBAAkC;AAC9E,QAAM,gBAAgB,MAAM,iBAAiB,WAAW,MAAM,kBAAkB;AAChF,SAAO,cAAc,KAAK,IAAI,mBAAmB;AAAA,IAC7C,UAAU,SAAS;AAAA,IACnB,cAAc,SAAS;AAAA,IACvB,cAAc,SAAS;AAAA,IACvB,WAAW;AAAA,EACf,CAAC,CAAC;AACN;;;ACRO,IAAM,sBAAsB,CAAC,UAAU;AAC1C,MAAI,MAAM,cAAc,MAAM,WAAW,QAAQ,IAAI,KAAK,IAAI,GAAG;AAC7D,UAAM,IAAI,mBAAmB,qBAAqB,eAAe,IAAI,KAAK;AAAA,EAC9E;AACJ;;;ACJO,IAAM,mBAAmB,CAAC,KAAK,OAAO,aAAa,UAAU;AAChE,MAAI,OAAO,UAAU,aAAa;AAC9B,UAAM,IAAI,mBAAmB,0BAA0B,GAAG,iBAAiB,aAAa,qBAAqB,EAAE,KAAK,eAAe,IAAI,KAAK;AAAA,EAChJ;AACJ;;;ACLA,SAAS,YAAY,kBAAkB;AACvC,IAAM,EAAE,UAAU,IAAI;AACf,IAAM,sBAAsB,CAAC,IAAI,aAAa;AACjD,QAAM,gBAAgB,oBAAoB,EAAE;AAC5C,QAAM,cAAc,KAAK,UAAU,UAAU,MAAM,CAAC;AACpD,SAAO,UAAU,eAAe,WAAW;AAC/C;;;ACAA,IAAM,yBAAyB,oBAAI,KAAK,CAAC;AAClC,IAAM,UAAU,CAAC,OAAO,CAAC,MAAM,OAAO,EAAE,mBAAmB,IAAI,CAAC,MAAM;AAR7E;AASI,aAAK,WAAL,mBAAa,MAAM;AACnB,QAAM,WAAW,MAAM,gBAAgB,IAAI;AAC3C,QAAM,cAAc,eAAe;AAAA,IAC/B,UAAS,UAAK,YAAL,YAAgB,yDAAoB;AAAA,EACjD,CAAC;AACD,QAAM,UAAU,SAAS,WAAW;AACpC,MAAI,CAAC,SAAS;AACV,UAAM,IAAI,mBAAmB,YAAY,WAAW,oDAAoD,KAAK;AAAA,EACjH,WACS,CAAC,QAAQ,aAAa,GAAG;AAC9B,UAAM,IAAI,mBAAmB,YAAY,WAAW,+CAA+C;AAAA,EACvG;AACA,QAAM,iBAAiB,QAAQ,aAAa;AAC5C,QAAM,cAAc,MAAM,mBAAmB,IAAI;AACjD,QAAM,aAAa,YAAY,cAAc;AAC7C,MAAI,CAAC,YAAY;AACb,UAAM,IAAI,mBAAmB,gBAAgB,cAAc,oDAAoD,KAAK;AAAA,EACxH;AACA,aAAW,yBAAyB,CAAC,iBAAiB,YAAY,GAAG;AACjE,QAAI,CAAC,WAAW,qBAAqB,GAAG;AACpC,YAAM,IAAI,mBAAmB,gBAAgB,cAAc,mCAAmC,qBAAqB,MAAM,KAAK;AAAA,IAClI;AAAA,EACJ;AACA,QAAM,cAAc,WAAW,eAAe;AAC9C,QAAM,YAAY,WAAW,YAAY;AACzC,MAAI;AACJ,MAAI;AACA,eAAW,MAAM,oBAAoB,cAAc;AAAA,EACvD,SACO,GAAG;AACN,UAAM,IAAI,mBAAmB,iDAAiD,WAAW,iCAAiC,eAAe,IAAI,KAAK;AAAA,EACtJ;AACA,mBAAiB,eAAe,SAAS,WAAW;AACpD,mBAAiB,aAAa,SAAS,SAAS;AAChD,QAAM,EAAE,aAAa,UAAU,IAAI;AACnC,QAAM,gBAAgB,EAAE,OAAO,aAAa,YAAY,IAAI,KAAK,SAAS,EAAE;AAC5E,MAAI,cAAc,WAAW,QAAQ,IAAI,KAAK,IAAI,IAAI,kBAAkB;AACpE,WAAO;AAAA,EACX;AACA,MAAI,KAAK,IAAI,IAAI,uBAAuB,QAAQ,IAAI,KAAK,KAAM;AAC3D,wBAAoB,aAAa;AACjC,WAAO;AAAA,EACX;AACA,mBAAiB,YAAY,SAAS,UAAU,IAAI;AACpD,mBAAiB,gBAAgB,SAAS,cAAc,IAAI;AAC5D,mBAAiB,gBAAgB,SAAS,cAAc,IAAI;AAC5D,MAAI;AACA,2BAAuB,QAAQ,KAAK,IAAI,CAAC;AACzC,UAAM,kBAAkB,MAAM,mBAAmB,UAAU,WAAW,MAAM,kBAAkB;AAC9F,qBAAiB,eAAe,gBAAgB,WAAW;AAC3D,qBAAiB,aAAa,gBAAgB,SAAS;AACvD,UAAM,qBAAqB,IAAI,KAAK,KAAK,IAAI,IAAI,gBAAgB,YAAY,GAAI;AACjF,QAAI;AACA,YAAM,oBAAoB,gBAAgB,iCACnC,WADmC;AAAA,QAEtC,aAAa,gBAAgB;AAAA,QAC7B,WAAW,mBAAmB,YAAY;AAAA,QAC1C,cAAc,gBAAgB;AAAA,MAClC,EAAC;AAAA,IACL,SACO,OAAO;AAAA,IACd;AACA,WAAO;AAAA,MACH,OAAO,gBAAgB;AAAA,MACvB,YAAY;AAAA,IAChB;AAAA,EACJ,SACO,OAAO;AACV,wBAAoB,aAAa;AACjC,WAAO;AAAA,EACX;AACJ;;;AC5EA,IAAM,+BAA+B;AAC9B,IAAM,wBAAwB,OAAO,EAAE,aAAa,YAAY,cAAc,WAAW,aAAa,WAAW,cAAc,oBAAoB,oBAAoB,SAAS,UAAU,gBAAgB,aAAa,OAAQ,MAAM;AAL5O;AAMI,MAAI;AACJ,QAAM,iBAAiB;AACvB,MAAI,YAAY;AACZ,QAAI;AACA,YAAM,SAAS,MAAM,QAAoB;AAAA,QACrC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACJ,CAAC,EAAE;AACH,cAAQ;AAAA,QACJ,aAAa,OAAO;AAAA,QACpB,WAAW,IAAI,KAAK,OAAO,UAAU,EAAE,YAAY;AAAA,MACvD;AAAA,IACJ,SACO,GAAG;AACN,YAAM,IAAI,yBAAyB,EAAE,SAAS;AAAA,QAC1C,aAAa;AAAA,QACb;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,EACJ,OACK;AACD,QAAI;AACA,cAAQ,MAAM,oBAAoB,WAAW;AAAA,IACjD,SACO,GAAG;AACN,YAAM,IAAI,yBAAyB,4DAA4D,cAAc,IAAI;AAAA,QAC7G,aAAa;AAAA,QACb;AAAA,MACJ,CAAC;AAAA,IACL;AAAA,EACJ;AACA,MAAI,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ,IAAI,KAAK,IAAI,KAAK,GAAG;AACvD,UAAM,IAAI,yBAAyB,6DAA6D,cAAc,IAAI;AAAA,MAC9G,aAAa;AAAA,MACb;AAAA,IACJ,CAAC;AAAA,EACL;AACA,QAAM,EAAE,YAAY,IAAI;AACxB,QAAM,EAAE,WAAW,0BAA0B,IAAI,MAAM,OAAO,uBAAW;AACzE,QAAM,MAAM,aACR,IAAI,UAAU,OAAO,OAAO,CAAC,GAAG,sCAAgB,CAAC,GAAG;AAAA,IAChD,SAAQ,wDAAc,WAAd,YAAwB,yDAAoB,WAA5C,YAAsD,yDAAoB;AAAA,IAClF,SAAQ,kDAAc,WAAd,YAAwB;AAAA,IAChC,iBAAgB,wDAAc,mBAAd,YAAgC,yDAAoB,mBAApD,YAAsE,yDAAoB;AAAA,EAC9G,CAAC,CAAC;AACN,MAAI;AACJ,MAAI;AACA,cAAU,MAAM,IAAI,KAAK,IAAI,0BAA0B;AAAA,MACnD,WAAW;AAAA,MACX,UAAU;AAAA,MACV;AAAA,IACJ,CAAC,CAAC;AAAA,EACN,SACO,GAAG;AACN,UAAM,IAAI,yBAAyB,GAAG;AAAA,MAClC,aAAa;AAAA,MACb;AAAA,IACJ,CAAC;AAAA,EACL;AACA,QAAM,EAAE,iBAAiB,EAAE,aAAa,iBAAiB,cAAc,YAAY,iBAAiB,UAAU,IAAI,CAAC,EAAG,IAAI;AAC1H,MAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,YAAY;AAClE,UAAM,IAAI,yBAAyB,gDAAgD;AAAA,MAC/E,aAAa;AAAA,MACb;AAAA,IACJ,CAAC;AAAA,EACL;AACA,QAAM,cAAc;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,IAAI,KAAK,UAAU;AAAA,KAC3B,mBAAmB,EAAE,gBAAgB,IACrC,aAAa,EAAE,UAAU;AAEjC,MAAI,YAAY;AACZ,yBAAqB,aAAa,mBAAmB,GAAG;AAAA,EAC5D,OACK;AACD,yBAAqB,aAAa,0BAA0B,GAAG;AAAA,EACnE;AACA,SAAO;AACX;;;ACxFO,IAAM,qBAAqB,CAAC,SAAS,WAAW;AACnD,QAAM,EAAE,eAAe,gBAAgB,YAAY,cAAc,IAAI;AACrE,MAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,cAAc,CAAC,eAAe;AACpE,UAAM,IAAI,yBAAyB,iJACwB,OAAO,KAAK,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,qFAAwF,EAAE,aAAa,OAAO,OAAO,CAAC;AAAA,EACpN;AACA,SAAO;AACX;;;ACHO,IAAM,UAAU,CAAC,OAAO,CAAC,MAAM,OAAO,EAAE,mBAAmB,IAAI,CAAC,MAAM;AAL7E;AAMI,aAAK,WAAL,mBAAa,MAAM;AACnB,QAAM,EAAE,aAAa,cAAc,WAAW,aAAa,WAAW,IAAI;AAC1E,QAAM,EAAE,UAAU,IAAI;AACtB,QAAM,cAAc,eAAe;AAAA,IAC/B,UAAS,UAAK,YAAL,YAAgB,yDAAoB;AAAA,EACjD,CAAC;AACD,MAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,aAAa,CAAC,eAAe,CAAC,YAAY;AAC5E,UAAM,WAAW,MAAM,gBAAgB,IAAI;AAC3C,UAAM,UAAU,SAAS,WAAW;AACpC,QAAI,CAAC,SAAS;AACV,YAAM,IAAI,yBAAyB,WAAW,WAAW,mBAAmB,EAAE,QAAQ,KAAK,OAAO,CAAC;AAAA,IACvG;AACA,QAAI,CAAC,aAAa,OAAO,GAAG;AACxB,YAAM,IAAI,yBAAyB,WAAW,WAAW,4CAA4C;AAAA,QACjG,QAAQ,KAAK;AAAA,MACjB,CAAC;AAAA,IACL;AACA,QAAI,mCAAS,aAAa;AACtB,YAAM,cAAc,MAAM,mBAAmB,IAAI;AACjD,YAAM,UAAU,YAAY,QAAQ,WAAW;AAC/C,YAAM,cAAc,8BAA8B,WAAW,oBAAoB,QAAQ,WAAW;AACpG,UAAI,aAAa,cAAc,QAAQ,YAAY;AAC/C,cAAM,IAAI,yBAAyB,2BAA2B,aAAa;AAAA,UACvE,aAAa;AAAA,UACb,QAAQ,KAAK;AAAA,QACjB,CAAC;AAAA,MACL;AACA,UAAI,eAAe,gBAAgB,QAAQ,eAAe;AACtD,cAAM,IAAI,yBAAyB,8BAA8B,aAAa;AAAA,UAC1E,aAAa;AAAA,UACb,QAAQ,KAAK;AAAA,QACjB,CAAC;AAAA,MACL;AACA,cAAQ,aAAa,QAAQ;AAC7B,cAAQ,gBAAgB,QAAQ;AAAA,IACpC;AACA,UAAM,EAAE,eAAe,gBAAgB,YAAY,eAAe,YAAY,IAAI,mBAAmB,SAAS,KAAK,MAAM;AACzH,WAAO,sBAAsB;AAAA,MACzB,aAAa;AAAA,MACb,YAAY;AAAA,MACZ,cAAc;AAAA,MACd,WAAW;AAAA,MACX,aAAa;AAAA,MACb;AAAA,MACA,cAAc,KAAK;AAAA,MACnB,oBAAoB,KAAK;AAAA,MACzB,oBAAoB,KAAK;AAAA,MACzB,SAAS;AAAA,MACT,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,aAAa,KAAK;AAAA,MAClB,QAAQ,KAAK;AAAA,IACjB,CAAC;AAAA,EACL,WACS,CAAC,eAAe,CAAC,gBAAgB,CAAC,aAAa,CAAC,aAAa;AAClE,UAAM,IAAI,yBAAyB,gIAC8B,EAAE,aAAa,OAAO,QAAQ,KAAK,OAAO,CAAC;AAAA,EAChH,OACK;AACD,WAAO,sBAAsB;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,cAAc,KAAK;AAAA,MACnB,oBAAoB,KAAK;AAAA,MACzB,oBAAoB,KAAK;AAAA,MACzB,SAAS;AAAA,MACT,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,MACrB,aAAa,KAAK;AAAA,MAClB,QAAQ,KAAK;AAAA,IACjB,CAAC;AAAA,EACL;AACJ;","names":["_a","_b"]}
@@ -0,0 +1,71 @@
1
+ import {
2
+ externalDataInterceptor
3
+ } from "./chunk-BPBCUO2Z.js";
4
+ import {
5
+ setCredentialFeature
6
+ } from "./chunk-A5TI2FW3.js";
7
+ import {
8
+ CredentialsProviderError
9
+ } from "./chunk-XCDCVRJR.js";
10
+ import {
11
+ __spreadProps,
12
+ __spreadValues
13
+ } from "./chunk-CQBOIXWK.js";
14
+
15
+ // ../../node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js
16
+ import { readFileSync } from "fs";
17
+
18
+ // ../../node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromWebToken.js
19
+ var fromWebToken = (init) => async (awsIdentityProperties) => {
20
+ var _a;
21
+ (_a = init.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");
22
+ const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;
23
+ let { roleAssumerWithWebIdentity } = init;
24
+ if (!roleAssumerWithWebIdentity) {
25
+ const { getDefaultRoleAssumerWithWebIdentity } = await import("./sts-OXBEY7HY.js");
26
+ roleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity(__spreadProps(__spreadValues({}, init.clientConfig), {
27
+ credentialProviderLogger: init.logger,
28
+ parentClientConfig: __spreadValues(__spreadValues({}, awsIdentityProperties == null ? void 0 : awsIdentityProperties.callerClientConfig), init.parentClientConfig)
29
+ }), init.clientPlugins);
30
+ }
31
+ return roleAssumerWithWebIdentity({
32
+ RoleArn: roleArn,
33
+ RoleSessionName: roleSessionName != null ? roleSessionName : `aws-sdk-js-session-${Date.now()}`,
34
+ WebIdentityToken: webIdentityToken,
35
+ ProviderId: providerId,
36
+ PolicyArns: policyArns,
37
+ Policy: policy,
38
+ DurationSeconds: durationSeconds
39
+ });
40
+ };
41
+
42
+ // ../../node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js
43
+ var ENV_TOKEN_FILE = "AWS_WEB_IDENTITY_TOKEN_FILE";
44
+ var ENV_ROLE_ARN = "AWS_ROLE_ARN";
45
+ var ENV_ROLE_SESSION_NAME = "AWS_ROLE_SESSION_NAME";
46
+ var fromTokenFile = (init = {}) => async (awsIdentityProperties) => {
47
+ var _a, _b, _c, _d, _e, _f, _g;
48
+ (_a = init.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");
49
+ const webIdentityTokenFile = (_b = init == null ? void 0 : init.webIdentityTokenFile) != null ? _b : process.env[ENV_TOKEN_FILE];
50
+ const roleArn = (_c = init == null ? void 0 : init.roleArn) != null ? _c : process.env[ENV_ROLE_ARN];
51
+ const roleSessionName = (_d = init == null ? void 0 : init.roleSessionName) != null ? _d : process.env[ENV_ROLE_SESSION_NAME];
52
+ if (!webIdentityTokenFile || !roleArn) {
53
+ throw new CredentialsProviderError("Web identity configuration not specified", {
54
+ logger: init.logger
55
+ });
56
+ }
57
+ const credentials = await fromWebToken(__spreadProps(__spreadValues({}, init), {
58
+ webIdentityToken: (_g = (_f = (_e = externalDataInterceptor) == null ? void 0 : _e.getTokenRecord) == null ? void 0 : _f.call(_e)[webIdentityTokenFile]) != null ? _g : readFileSync(webIdentityTokenFile, { encoding: "ascii" }),
59
+ roleArn,
60
+ roleSessionName
61
+ }))(awsIdentityProperties);
62
+ if (webIdentityTokenFile === process.env[ENV_TOKEN_FILE]) {
63
+ setCredentialFeature(credentials, "CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN", "h");
64
+ }
65
+ return credentials;
66
+ };
67
+ export {
68
+ fromTokenFile,
69
+ fromWebToken
70
+ };
71
+ //# sourceMappingURL=dist-es-B3JDGWY6.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../../node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromTokenFile.js","../../../node_modules/@aws-sdk/credential-provider-web-identity/dist-es/fromWebToken.js"],"sourcesContent":["import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { CredentialsProviderError } from \"@smithy/property-provider\";\nimport { externalDataInterceptor } from \"@smithy/shared-ini-file-loader\";\nimport { readFileSync } from \"node:fs\";\nimport { fromWebToken } from \"./fromWebToken\";\nconst ENV_TOKEN_FILE = \"AWS_WEB_IDENTITY_TOKEN_FILE\";\nconst ENV_ROLE_ARN = \"AWS_ROLE_ARN\";\nconst ENV_ROLE_SESSION_NAME = \"AWS_ROLE_SESSION_NAME\";\nexport const fromTokenFile = (init = {}) => async (awsIdentityProperties) => {\n init.logger?.debug(\"@aws-sdk/credential-provider-web-identity - fromTokenFile\");\n const webIdentityTokenFile = init?.webIdentityTokenFile ?? process.env[ENV_TOKEN_FILE];\n const roleArn = init?.roleArn ?? process.env[ENV_ROLE_ARN];\n const roleSessionName = init?.roleSessionName ?? process.env[ENV_ROLE_SESSION_NAME];\n if (!webIdentityTokenFile || !roleArn) {\n throw new CredentialsProviderError(\"Web identity configuration not specified\", {\n logger: init.logger,\n });\n }\n const credentials = await fromWebToken({\n ...init,\n webIdentityToken: externalDataInterceptor?.getTokenRecord?.()[webIdentityTokenFile] ??\n readFileSync(webIdentityTokenFile, { encoding: \"ascii\" }),\n roleArn,\n roleSessionName,\n })(awsIdentityProperties);\n if (webIdentityTokenFile === process.env[ENV_TOKEN_FILE]) {\n setCredentialFeature(credentials, \"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN\", \"h\");\n }\n return credentials;\n};\n","export const fromWebToken = (init) => async (awsIdentityProperties) => {\n init.logger?.debug(\"@aws-sdk/credential-provider-web-identity - fromWebToken\");\n const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init;\n let { roleAssumerWithWebIdentity } = init;\n if (!roleAssumerWithWebIdentity) {\n const { getDefaultRoleAssumerWithWebIdentity } = await import(\"@aws-sdk/nested-clients/sts\");\n roleAssumerWithWebIdentity = getDefaultRoleAssumerWithWebIdentity({\n ...init.clientConfig,\n credentialProviderLogger: init.logger,\n parentClientConfig: {\n ...awsIdentityProperties?.callerClientConfig,\n ...init.parentClientConfig,\n },\n }, init.clientPlugins);\n }\n return roleAssumerWithWebIdentity({\n RoleArn: roleArn,\n RoleSessionName: roleSessionName ?? `aws-sdk-js-session-${Date.now()}`,\n WebIdentityToken: webIdentityToken,\n ProviderId: providerId,\n PolicyArns: policyArns,\n Policy: policy,\n DurationSeconds: durationSeconds,\n });\n};\n"],"mappings":";;;;;;;;;;;;;;;AAGA,SAAS,oBAAoB;;;ACHtB,IAAM,eAAe,CAAC,SAAS,OAAO,0BAA0B;AAAvE;AACI,aAAK,WAAL,mBAAa,MAAM;AACnB,QAAM,EAAE,SAAS,iBAAiB,kBAAkB,YAAY,YAAY,QAAQ,gBAAgB,IAAI;AACxG,MAAI,EAAE,2BAA2B,IAAI;AACrC,MAAI,CAAC,4BAA4B;AAC7B,UAAM,EAAE,qCAAqC,IAAI,MAAM,OAAO,mBAA6B;AAC3F,iCAA6B,qCAAqC,iCAC3D,KAAK,eADsD;AAAA,MAE9D,0BAA0B,KAAK;AAAA,MAC/B,oBAAoB,kCACb,+DAAuB,qBACvB,KAAK;AAAA,IAEhB,IAAG,KAAK,aAAa;AAAA,EACzB;AACA,SAAO,2BAA2B;AAAA,IAC9B,SAAS;AAAA,IACT,iBAAiB,4CAAmB,sBAAsB,KAAK,IAAI,CAAC;AAAA,IACpE,kBAAkB;AAAA,IAClB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,iBAAiB;AAAA,EACrB,CAAC;AACL;;;ADnBA,IAAM,iBAAiB;AACvB,IAAM,eAAe;AACrB,IAAM,wBAAwB;AACvB,IAAM,gBAAgB,CAAC,OAAO,CAAC,MAAM,OAAO,0BAA0B;AAR7E;AASI,aAAK,WAAL,mBAAa,MAAM;AACnB,QAAM,wBAAuB,kCAAM,yBAAN,YAA8B,QAAQ,IAAI,cAAc;AACrF,QAAM,WAAU,kCAAM,YAAN,YAAiB,QAAQ,IAAI,YAAY;AACzD,QAAM,mBAAkB,kCAAM,oBAAN,YAAyB,QAAQ,IAAI,qBAAqB;AAClF,MAAI,CAAC,wBAAwB,CAAC,SAAS;AACnC,UAAM,IAAI,yBAAyB,4CAA4C;AAAA,MAC3E,QAAQ,KAAK;AAAA,IACjB,CAAC;AAAA,EACL;AACA,QAAM,cAAc,MAAM,aAAa,iCAChC,OADgC;AAAA,IAEnC,mBAAkB,gEAAyB,mBAAzB,4BAA4C,0BAA5C,YACd,aAAa,sBAAsB,EAAE,UAAU,QAAQ,CAAC;AAAA,IAC5D;AAAA,IACA;AAAA,EACJ,EAAC,EAAE,qBAAqB;AACxB,MAAI,yBAAyB,QAAQ,IAAI,cAAc,GAAG;AACtD,yBAAqB,aAAa,yCAAyC,GAAG;AAAA,EAClF;AACA,SAAO;AACX;","names":[]}
@@ -0,0 +1,169 @@
1
+ import {
2
+ sdkStreamMixin
3
+ } from "./chunk-4Y4KWGJD.js";
4
+ import {
5
+ NodeHttpHandler,
6
+ parseRfc3339DateTime
7
+ } from "./chunk-757E5UYA.js";
8
+ import {
9
+ HttpRequest
10
+ } from "./chunk-4D22OCZG.js";
11
+ import "./chunk-KJX5LOMN.js";
12
+ import {
13
+ setCredentialFeature
14
+ } from "./chunk-A5TI2FW3.js";
15
+ import {
16
+ CredentialsProviderError
17
+ } from "./chunk-XCDCVRJR.js";
18
+ import "./chunk-CQBOIXWK.js";
19
+
20
+ // ../../node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
21
+ import fs from "fs/promises";
22
+
23
+ // ../../node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/checkUrl.js
24
+ var ECS_CONTAINER_HOST = "169.254.170.2";
25
+ var EKS_CONTAINER_HOST_IPv4 = "169.254.170.23";
26
+ var EKS_CONTAINER_HOST_IPv6 = "[fd00:ec2::23]";
27
+ var checkUrl = (url, logger) => {
28
+ if (url.protocol === "https:") {
29
+ return;
30
+ }
31
+ if (url.hostname === ECS_CONTAINER_HOST || url.hostname === EKS_CONTAINER_HOST_IPv4 || url.hostname === EKS_CONTAINER_HOST_IPv6) {
32
+ return;
33
+ }
34
+ if (url.hostname.includes("[")) {
35
+ if (url.hostname === "[::1]" || url.hostname === "[0000:0000:0000:0000:0000:0000:0000:0001]") {
36
+ return;
37
+ }
38
+ } else {
39
+ if (url.hostname === "localhost") {
40
+ return;
41
+ }
42
+ const ipComponents = url.hostname.split(".");
43
+ const inRange = (component) => {
44
+ const num = parseInt(component, 10);
45
+ return 0 <= num && num <= 255;
46
+ };
47
+ if (ipComponents[0] === "127" && inRange(ipComponents[1]) && inRange(ipComponents[2]) && inRange(ipComponents[3]) && ipComponents.length === 4) {
48
+ return;
49
+ }
50
+ }
51
+ throw new CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:
52
+ - loopback CIDR 127.0.0.0/8 or [::1/128]
53
+ - ECS container host 169.254.170.2
54
+ - EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger });
55
+ };
56
+
57
+ // ../../node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/requestHelpers.js
58
+ function createGetRequest(url) {
59
+ return new HttpRequest({
60
+ protocol: url.protocol,
61
+ hostname: url.hostname,
62
+ port: Number(url.port),
63
+ path: url.pathname,
64
+ query: Array.from(url.searchParams.entries()).reduce((acc, [k, v]) => {
65
+ acc[k] = v;
66
+ return acc;
67
+ }, {}),
68
+ fragment: url.hash
69
+ });
70
+ }
71
+ async function getCredentials(response, logger) {
72
+ const stream = sdkStreamMixin(response.body);
73
+ const str = await stream.transformToString();
74
+ if (response.statusCode === 200) {
75
+ const parsed = JSON.parse(str);
76
+ if (typeof parsed.AccessKeyId !== "string" || typeof parsed.SecretAccessKey !== "string" || typeof parsed.Token !== "string" || typeof parsed.Expiration !== "string") {
77
+ throw new CredentialsProviderError("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }", { logger });
78
+ }
79
+ return {
80
+ accessKeyId: parsed.AccessKeyId,
81
+ secretAccessKey: parsed.SecretAccessKey,
82
+ sessionToken: parsed.Token,
83
+ expiration: parseRfc3339DateTime(parsed.Expiration)
84
+ };
85
+ }
86
+ if (response.statusCode >= 400 && response.statusCode < 500) {
87
+ let parsedBody = {};
88
+ try {
89
+ parsedBody = JSON.parse(str);
90
+ } catch (e) {
91
+ }
92
+ throw Object.assign(new CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger }), {
93
+ Code: parsedBody.Code,
94
+ Message: parsedBody.Message
95
+ });
96
+ }
97
+ throw new CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger });
98
+ }
99
+
100
+ // ../../node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/retry-wrapper.js
101
+ var retryWrapper = (toRetry, maxRetries, delayMs) => {
102
+ return async () => {
103
+ for (let i = 0; i < maxRetries; ++i) {
104
+ try {
105
+ return await toRetry();
106
+ } catch (e) {
107
+ await new Promise((resolve) => setTimeout(resolve, delayMs));
108
+ }
109
+ }
110
+ return await toRetry();
111
+ };
112
+ };
113
+
114
+ // ../../node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
115
+ var AWS_CONTAINER_CREDENTIALS_RELATIVE_URI = "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI";
116
+ var DEFAULT_LINK_LOCAL_HOST = "http://169.254.170.2";
117
+ var AWS_CONTAINER_CREDENTIALS_FULL_URI = "AWS_CONTAINER_CREDENTIALS_FULL_URI";
118
+ var AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE = "AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE";
119
+ var AWS_CONTAINER_AUTHORIZATION_TOKEN = "AWS_CONTAINER_AUTHORIZATION_TOKEN";
120
+ var fromHttp = (options = {}) => {
121
+ var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l;
122
+ (_a = options.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-http - fromHttp");
123
+ let host;
124
+ const relative = (_b = options.awsContainerCredentialsRelativeUri) != null ? _b : process.env[AWS_CONTAINER_CREDENTIALS_RELATIVE_URI];
125
+ const full = (_c = options.awsContainerCredentialsFullUri) != null ? _c : process.env[AWS_CONTAINER_CREDENTIALS_FULL_URI];
126
+ const token = (_d = options.awsContainerAuthorizationToken) != null ? _d : process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN];
127
+ const tokenFile = (_e = options.awsContainerAuthorizationTokenFile) != null ? _e : process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE];
128
+ const warn = ((_g = (_f = options.logger) == null ? void 0 : _f.constructor) == null ? void 0 : _g.name) === "NoOpLogger" || !((_h = options.logger) == null ? void 0 : _h.warn) ? console.warn : options.logger.warn.bind(options.logger);
129
+ if (relative && full) {
130
+ warn("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri.");
131
+ warn("awsContainerCredentialsFullUri will take precedence.");
132
+ }
133
+ if (token && tokenFile) {
134
+ warn("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile.");
135
+ warn("awsContainerAuthorizationToken will take precedence.");
136
+ }
137
+ if (full) {
138
+ host = full;
139
+ } else if (relative) {
140
+ host = `${DEFAULT_LINK_LOCAL_HOST}${relative}`;
141
+ } else {
142
+ throw new CredentialsProviderError(`No HTTP credential provider host provided.
143
+ Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`, { logger: options.logger });
144
+ }
145
+ const url = new URL(host);
146
+ checkUrl(url, options.logger);
147
+ const requestHandler = NodeHttpHandler.create({
148
+ requestTimeout: (_i = options.timeout) != null ? _i : 1e3,
149
+ connectionTimeout: (_j = options.timeout) != null ? _j : 1e3
150
+ });
151
+ return retryWrapper(async () => {
152
+ const request = createGetRequest(url);
153
+ if (token) {
154
+ request.headers.Authorization = token;
155
+ } else if (tokenFile) {
156
+ request.headers.Authorization = (await fs.readFile(tokenFile)).toString();
157
+ }
158
+ try {
159
+ const result = await requestHandler.handle(request);
160
+ return getCredentials(result.response).then((creds) => setCredentialFeature(creds, "CREDENTIALS_HTTP", "z"));
161
+ } catch (e) {
162
+ throw new CredentialsProviderError(String(e), { logger: options.logger });
163
+ }
164
+ }, (_k = options.maxRetries) != null ? _k : 3, (_l = options.timeout) != null ? _l : 1e3);
165
+ };
166
+ export {
167
+ fromHttp
168
+ };
169
+ //# sourceMappingURL=dist-es-IWIE5JLA.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":["../../../node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js","../../../node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/checkUrl.js","../../../node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/requestHelpers.js","../../../node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/retry-wrapper.js"],"sourcesContent":["import { setCredentialFeature } from \"@aws-sdk/core/client\";\nimport { NodeHttpHandler } from \"@smithy/node-http-handler\";\nimport { CredentialsProviderError } from \"@smithy/property-provider\";\nimport fs from \"node:fs/promises\";\nimport { checkUrl } from \"./checkUrl\";\nimport { createGetRequest, getCredentials } from \"./requestHelpers\";\nimport { retryWrapper } from \"./retry-wrapper\";\nconst AWS_CONTAINER_CREDENTIALS_RELATIVE_URI = \"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI\";\nconst DEFAULT_LINK_LOCAL_HOST = \"http://169.254.170.2\";\nconst AWS_CONTAINER_CREDENTIALS_FULL_URI = \"AWS_CONTAINER_CREDENTIALS_FULL_URI\";\nconst AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE = \"AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE\";\nconst AWS_CONTAINER_AUTHORIZATION_TOKEN = \"AWS_CONTAINER_AUTHORIZATION_TOKEN\";\nexport const fromHttp = (options = {}) => {\n options.logger?.debug(\"@aws-sdk/credential-provider-http - fromHttp\");\n let host;\n const relative = options.awsContainerCredentialsRelativeUri ?? process.env[AWS_CONTAINER_CREDENTIALS_RELATIVE_URI];\n const full = options.awsContainerCredentialsFullUri ?? process.env[AWS_CONTAINER_CREDENTIALS_FULL_URI];\n const token = options.awsContainerAuthorizationToken ?? process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN];\n const tokenFile = options.awsContainerAuthorizationTokenFile ?? process.env[AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE];\n const warn = options.logger?.constructor?.name === \"NoOpLogger\" || !options.logger?.warn\n ? console.warn\n : options.logger.warn.bind(options.logger);\n if (relative && full) {\n warn(\"@aws-sdk/credential-provider-http: \" +\n \"you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri.\");\n warn(\"awsContainerCredentialsFullUri will take precedence.\");\n }\n if (token && tokenFile) {\n warn(\"@aws-sdk/credential-provider-http: \" +\n \"you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile.\");\n warn(\"awsContainerAuthorizationToken will take precedence.\");\n }\n if (full) {\n host = full;\n }\n else if (relative) {\n host = `${DEFAULT_LINK_LOCAL_HOST}${relative}`;\n }\n else {\n throw new CredentialsProviderError(`No HTTP credential provider host provided.\nSet AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`, { logger: options.logger });\n }\n const url = new URL(host);\n checkUrl(url, options.logger);\n const requestHandler = NodeHttpHandler.create({\n requestTimeout: options.timeout ?? 1000,\n connectionTimeout: options.timeout ?? 1000,\n });\n return retryWrapper(async () => {\n const request = createGetRequest(url);\n if (token) {\n request.headers.Authorization = token;\n }\n else if (tokenFile) {\n request.headers.Authorization = (await fs.readFile(tokenFile)).toString();\n }\n try {\n const result = await requestHandler.handle(request);\n return getCredentials(result.response).then((creds) => setCredentialFeature(creds, \"CREDENTIALS_HTTP\", \"z\"));\n }\n catch (e) {\n throw new CredentialsProviderError(String(e), { logger: options.logger });\n }\n }, options.maxRetries ?? 3, options.timeout ?? 1000);\n};\n","import { CredentialsProviderError } from \"@smithy/property-provider\";\nconst LOOPBACK_CIDR_IPv4 = \"127.0.0.0/8\";\nconst LOOPBACK_CIDR_IPv6 = \"::1/128\";\nconst ECS_CONTAINER_HOST = \"169.254.170.2\";\nconst EKS_CONTAINER_HOST_IPv4 = \"169.254.170.23\";\nconst EKS_CONTAINER_HOST_IPv6 = \"[fd00:ec2::23]\";\nexport const checkUrl = (url, logger) => {\n if (url.protocol === \"https:\") {\n return;\n }\n if (url.hostname === ECS_CONTAINER_HOST ||\n url.hostname === EKS_CONTAINER_HOST_IPv4 ||\n url.hostname === EKS_CONTAINER_HOST_IPv6) {\n return;\n }\n if (url.hostname.includes(\"[\")) {\n if (url.hostname === \"[::1]\" || url.hostname === \"[0000:0000:0000:0000:0000:0000:0000:0001]\") {\n return;\n }\n }\n else {\n if (url.hostname === \"localhost\") {\n return;\n }\n const ipComponents = url.hostname.split(\".\");\n const inRange = (component) => {\n const num = parseInt(component, 10);\n return 0 <= num && num <= 255;\n };\n if (ipComponents[0] === \"127\" &&\n inRange(ipComponents[1]) &&\n inRange(ipComponents[2]) &&\n inRange(ipComponents[3]) &&\n ipComponents.length === 4) {\n return;\n }\n }\n throw new CredentialsProviderError(`URL not accepted. It must either be HTTPS or match one of the following:\n - loopback CIDR 127.0.0.0/8 or [::1/128]\n - ECS container host 169.254.170.2\n - EKS container host 169.254.170.23 or [fd00:ec2::23]`, { logger });\n};\n","import { CredentialsProviderError } from \"@smithy/property-provider\";\nimport { HttpRequest } from \"@smithy/protocol-http\";\nimport { parseRfc3339DateTime } from \"@smithy/smithy-client\";\nimport { sdkStreamMixin } from \"@smithy/util-stream\";\nexport function createGetRequest(url) {\n return new HttpRequest({\n protocol: url.protocol,\n hostname: url.hostname,\n port: Number(url.port),\n path: url.pathname,\n query: Array.from(url.searchParams.entries()).reduce((acc, [k, v]) => {\n acc[k] = v;\n return acc;\n }, {}),\n fragment: url.hash,\n });\n}\nexport async function getCredentials(response, logger) {\n const stream = sdkStreamMixin(response.body);\n const str = await stream.transformToString();\n if (response.statusCode === 200) {\n const parsed = JSON.parse(str);\n if (typeof parsed.AccessKeyId !== \"string\" ||\n typeof parsed.SecretAccessKey !== \"string\" ||\n typeof parsed.Token !== \"string\" ||\n typeof parsed.Expiration !== \"string\") {\n throw new CredentialsProviderError(\"HTTP credential provider response not of the required format, an object matching: \" +\n \"{ AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }\", { logger });\n }\n return {\n accessKeyId: parsed.AccessKeyId,\n secretAccessKey: parsed.SecretAccessKey,\n sessionToken: parsed.Token,\n expiration: parseRfc3339DateTime(parsed.Expiration),\n };\n }\n if (response.statusCode >= 400 && response.statusCode < 500) {\n let parsedBody = {};\n try {\n parsedBody = JSON.parse(str);\n }\n catch (e) { }\n throw Object.assign(new CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger }), {\n Code: parsedBody.Code,\n Message: parsedBody.Message,\n });\n }\n throw new CredentialsProviderError(`Server responded with status: ${response.statusCode}`, { logger });\n}\n","export const retryWrapper = (toRetry, maxRetries, delayMs) => {\n return async () => {\n for (let i = 0; i < maxRetries; ++i) {\n try {\n return await toRetry();\n }\n catch (e) {\n await new Promise((resolve) => setTimeout(resolve, delayMs));\n }\n }\n return await toRetry();\n };\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAGA,OAAO,QAAQ;;;ACAf,IAAM,qBAAqB;AAC3B,IAAM,0BAA0B;AAChC,IAAM,0BAA0B;AACzB,IAAM,WAAW,CAAC,KAAK,WAAW;AACrC,MAAI,IAAI,aAAa,UAAU;AAC3B;AAAA,EACJ;AACA,MAAI,IAAI,aAAa,sBACjB,IAAI,aAAa,2BACjB,IAAI,aAAa,yBAAyB;AAC1C;AAAA,EACJ;AACA,MAAI,IAAI,SAAS,SAAS,GAAG,GAAG;AAC5B,QAAI,IAAI,aAAa,WAAW,IAAI,aAAa,6CAA6C;AAC1F;AAAA,IACJ;AAAA,EACJ,OACK;AACD,QAAI,IAAI,aAAa,aAAa;AAC9B;AAAA,IACJ;AACA,UAAM,eAAe,IAAI,SAAS,MAAM,GAAG;AAC3C,UAAM,UAAU,CAAC,cAAc;AAC3B,YAAM,MAAM,SAAS,WAAW,EAAE;AAClC,aAAO,KAAK,OAAO,OAAO;AAAA,IAC9B;AACA,QAAI,aAAa,CAAC,MAAM,SACpB,QAAQ,aAAa,CAAC,CAAC,KACvB,QAAQ,aAAa,CAAC,CAAC,KACvB,QAAQ,aAAa,CAAC,CAAC,KACvB,aAAa,WAAW,GAAG;AAC3B;AAAA,IACJ;AAAA,EACJ;AACA,QAAM,IAAI,yBAAyB;AAAA;AAAA;AAAA,0DAGmB,EAAE,OAAO,CAAC;AACpE;;;ACrCO,SAAS,iBAAiB,KAAK;AAClC,SAAO,IAAI,YAAY;AAAA,IACnB,UAAU,IAAI;AAAA,IACd,UAAU,IAAI;AAAA,IACd,MAAM,OAAO,IAAI,IAAI;AAAA,IACrB,MAAM,IAAI;AAAA,IACV,OAAO,MAAM,KAAK,IAAI,aAAa,QAAQ,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM;AAClE,UAAI,CAAC,IAAI;AACT,aAAO;AAAA,IACX,GAAG,CAAC,CAAC;AAAA,IACL,UAAU,IAAI;AAAA,EAClB,CAAC;AACL;AACA,eAAsB,eAAe,UAAU,QAAQ;AACnD,QAAM,SAAS,eAAe,SAAS,IAAI;AAC3C,QAAM,MAAM,MAAM,OAAO,kBAAkB;AAC3C,MAAI,SAAS,eAAe,KAAK;AAC7B,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAI,OAAO,OAAO,gBAAgB,YAC9B,OAAO,OAAO,oBAAoB,YAClC,OAAO,OAAO,UAAU,YACxB,OAAO,OAAO,eAAe,UAAU;AACvC,YAAM,IAAI,yBAAyB,kLACiE,EAAE,OAAO,CAAC;AAAA,IAClH;AACA,WAAO;AAAA,MACH,aAAa,OAAO;AAAA,MACpB,iBAAiB,OAAO;AAAA,MACxB,cAAc,OAAO;AAAA,MACrB,YAAY,qBAAqB,OAAO,UAAU;AAAA,IACtD;AAAA,EACJ;AACA,MAAI,SAAS,cAAc,OAAO,SAAS,aAAa,KAAK;AACzD,QAAI,aAAa,CAAC;AAClB,QAAI;AACA,mBAAa,KAAK,MAAM,GAAG;AAAA,IAC/B,SACO,GAAG;AAAA,IAAE;AACZ,UAAM,OAAO,OAAO,IAAI,yBAAyB,iCAAiC,SAAS,UAAU,IAAI,EAAE,OAAO,CAAC,GAAG;AAAA,MAClH,MAAM,WAAW;AAAA,MACjB,SAAS,WAAW;AAAA,IACxB,CAAC;AAAA,EACL;AACA,QAAM,IAAI,yBAAyB,iCAAiC,SAAS,UAAU,IAAI,EAAE,OAAO,CAAC;AACzG;;;AChDO,IAAM,eAAe,CAAC,SAAS,YAAY,YAAY;AAC1D,SAAO,YAAY;AACf,aAAS,IAAI,GAAG,IAAI,YAAY,EAAE,GAAG;AACjC,UAAI;AACA,eAAO,MAAM,QAAQ;AAAA,MACzB,SACO,GAAG;AACN,cAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,OAAO,CAAC;AAAA,MAC/D;AAAA,IACJ;AACA,WAAO,MAAM,QAAQ;AAAA,EACzB;AACJ;;;AHLA,IAAM,yCAAyC;AAC/C,IAAM,0BAA0B;AAChC,IAAM,qCAAqC;AAC3C,IAAM,yCAAyC;AAC/C,IAAM,oCAAoC;AACnC,IAAM,WAAW,CAAC,UAAU,CAAC,MAAM;AAZ1C;AAaI,gBAAQ,WAAR,mBAAgB,MAAM;AACtB,MAAI;AACJ,QAAM,YAAW,aAAQ,uCAAR,YAA8C,QAAQ,IAAI,sCAAsC;AACjH,QAAM,QAAO,aAAQ,mCAAR,YAA0C,QAAQ,IAAI,kCAAkC;AACrG,QAAM,SAAQ,aAAQ,mCAAR,YAA0C,QAAQ,IAAI,iCAAiC;AACrG,QAAM,aAAY,aAAQ,uCAAR,YAA8C,QAAQ,IAAI,sCAAsC;AAClH,QAAM,SAAO,mBAAQ,WAAR,mBAAgB,gBAAhB,mBAA6B,UAAS,gBAAgB,GAAC,aAAQ,WAAR,mBAAgB,QAC9E,QAAQ,OACR,QAAQ,OAAO,KAAK,KAAK,QAAQ,MAAM;AAC7C,MAAI,YAAY,MAAM;AAClB,SAAK,6HACyF;AAC9F,SAAK,sDAAsD;AAAA,EAC/D;AACA,MAAI,SAAS,WAAW;AACpB,SAAK,6HACyF;AAC9F,SAAK,sDAAsD;AAAA,EAC/D;AACA,MAAI,MAAM;AACN,WAAO;AAAA,EACX,WACS,UAAU;AACf,WAAO,GAAG,uBAAuB,GAAG,QAAQ;AAAA,EAChD,OACK;AACD,UAAM,IAAI,yBAAyB;AAAA,oFACyC,EAAE,QAAQ,QAAQ,OAAO,CAAC;AAAA,EAC1G;AACA,QAAM,MAAM,IAAI,IAAI,IAAI;AACxB,WAAS,KAAK,QAAQ,MAAM;AAC5B,QAAM,iBAAiB,gBAAgB,OAAO;AAAA,IAC1C,iBAAgB,aAAQ,YAAR,YAAmB;AAAA,IACnC,oBAAmB,aAAQ,YAAR,YAAmB;AAAA,EAC1C,CAAC;AACD,SAAO,aAAa,YAAY;AAC5B,UAAM,UAAU,iBAAiB,GAAG;AACpC,QAAI,OAAO;AACP,cAAQ,QAAQ,gBAAgB;AAAA,IACpC,WACS,WAAW;AAChB,cAAQ,QAAQ,iBAAiB,MAAM,GAAG,SAAS,SAAS,GAAG,SAAS;AAAA,IAC5E;AACA,QAAI;AACA,YAAM,SAAS,MAAM,eAAe,OAAO,OAAO;AAClD,aAAO,eAAe,OAAO,QAAQ,EAAE,KAAK,CAAC,UAAU,qBAAqB,OAAO,oBAAoB,GAAG,CAAC;AAAA,IAC/G,SACO,GAAG;AACN,YAAM,IAAI,yBAAyB,OAAO,CAAC,GAAG,EAAE,QAAQ,QAAQ,OAAO,CAAC;AAAA,IAC5E;AAAA,EACJ,IAAG,aAAQ,eAAR,YAAsB,IAAG,aAAQ,YAAR,YAAmB,GAAI;AACvD;","names":[]}