n8n-nodes-base 2.29.7 → 2.30.1

package/dist/credentials/common/aws/utils.d.ts

@@ -1,7 +1,14 @@
+import { HttpRequest } from '@smithy/protocol-http';
+import type { Request } from 'aws4';
 import { type IHttpRequestMethods, type ICredentialTestRequest, type IHttpRequestOptions } from 'n8n-workflow';
 import { type AWSRegion } from './regions';
 import type { AwsCredentialsTypeBase, AwsAssumeRoleCredentialsType, AwsSecurityHeaders } from './types';
-import type { Request } from 'aws4';
+/**
+ * AWS credentials test configuration for validating AWS credentials.
+ * Uses the STS GetCallerIdentity action to verify that the provided credentials are valid.
+ * Automatically handles both standard AWS regions and China regions with appropriate endpoints.
+ */
+export declare const awsCredentialsTest: ICredentialTestRequest;
 /**
  * Ensures the region value belongs to the supported AWS regions list before it
  * is interpolated into request URLs or signing options. Anything outside the
@@ -21,12 +28,6 @@ export declare function parseAwsUrl(url: URL): {
     region: AWSRegion | null;
     service: string;
 };
-/**
- * AWS credentials test configuration for validating AWS credentials.
- * Uses the STS GetCallerIdentity action to verify that the provided credentials are valid.
- * Automatically handles both standard AWS regions and China regions with appropriate endpoints.
- */
-export declare const awsCredentialsTest: ICredentialTestRequest;
 /**
  * Prepares AWS request options for signing by constructing the proper endpoint URL,
  * handling query parameters, and setting up the request body for AWS4 signature.
@@ -51,22 +52,26 @@ export declare function awsGetSignInOptionsAndUpdateRequest(requestOptions: IHtt
     url: string;
 };
 /**
- * Assumes an AWS IAM role using STS (Security Token Service) and returns temporary credentials.
- * This function supports two modes for providing credentials for the STS call:
- * 1. Using system credentials (environment variables, instance metadata, etc.)
- * 2. Using manually provided STS credentials
- *
- * @param credentials - The assume role credentials configuration
- * @param region - AWS region for the STS endpoint
- * @returns Promise resolving to temporary credentials for the assumed role
- * @throws {UserError | OperationalError} When credentials are invalid or STS call fails
+ * Assumes an AWS IAM role via STS and returns temporary credentials.
+ * Supports two master-credential modes: system credentials (env / IMDS / container)
+ * or an explicitly provided STS key pair.
  *
- * @see {@link https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html STS AssumeRole API}
+ * @throws {UserError} When inputs fail validation or the STS AssumeRole call is rejected.
+ * @see {@link https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html}
  */
 export declare function assumeRole(credentials: AwsAssumeRoleCredentialsType, region: AWSRegion): Promise<{
     accessKeyId: string;
     secretAccessKey: string;
     sessionToken: string;
 }>;
-export declare function signOptions(requestOptions: IHttpRequestOptions, signOpts: Request, securityHeaders: AwsSecurityHeaders, url: string, method?: IHttpRequestMethods): IHttpRequestOptions;
+export declare function splitPathAndQuery(pathWithSearch: string): {
+    path: string;
+    query: Record<string, string | string[]>;
+};
+export declare function splitHostPort(host: string): {
+    hostname: string;
+    port: number | undefined;
+};
+export declare function buildSmithyHttpRequest(signOpts: Request, method?: IHttpRequestMethods): HttpRequest;
+export declare function signOptions(requestOptions: IHttpRequestOptions, signOpts: Request, securityHeaders: AwsSecurityHeaders, url: string, method?: IHttpRequestMethods): Promise<IHttpRequestOptions>;
 //# sourceMappingURL=utils.d.ts.map

package/dist/credentials/common/aws/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../credentials/common/aws/utils.ts"],"names":[],"mappings":"AACA,OAAO,EACN,KAAK,mBAAmB,EAGxB,KAAK,sBAAsB,EAE3B,KAAK,mBAAmB,EAIxB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAyB,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAElE,OAAO,KAAK,EACX,sBAAsB,EACtB,4BAA4B,EAC5B,kBAAkB,EAClB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAuBpC;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,SAAS,CAIrF;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG;IAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAKnF;AAiCD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,sBAQhC,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mCAAmC,CAClD,cAAc,EAAE,mBAAmB,EACnC,WAAW,EAAE,sBAAsB,EACnC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,GACf;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAoHpC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,UAAU,CAC/B,WAAW,EAAE,4BAA4B,EACzC,MAAM,EAAE,SAAS,GACf,OAAO,CAAC;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACrB,CAAC,CAkID;AAED,wBAAgB,WAAW,CAC1B,cAAc,EAAE,mBAAmB,EACnC,QAAQ,EAAE,OAAO,EACjB,eAAe,EAAE,kBAAkB,EACnC,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,mBAAmB,uBAiB5B"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../credentials/common/aws/utils.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,OAAO,EACN,KAAK,mBAAmB,EAExB,KAAK,sBAAsB,EAE3B,KAAK,mBAAmB,EAGxB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAyB,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAElE,OAAO,KAAK,EACX,sBAAsB,EACtB,4BAA4B,EAC5B,kBAAkB,EAClB,MAAM,SAAS,CAAC;AA0IjB;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,sBAQhC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,SAAS,CAIrF;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,GAAG,GAAG;IAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAKnF;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,mCAAmC,CAClD,cAAc,EAAE,mBAAmB,EACnC,WAAW,EAAE,sBAAsB,EACnC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,GACf;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAwHpC;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC/B,WAAW,EAAE,4BAA4B,EACzC,MAAM,EAAE,SAAS,GACf,OAAO,CAAC;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACrB,CAAC,CAqCD;AAOD,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,MAAM,GAAG;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;CACzC,CAYA;AAKD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAY1F;AA2BD,wBAAgB,sBAAsB,CACrC,QAAQ,EAAE,OAAO,EACjB,MAAM,CAAC,EAAE,mBAAmB,GAC1B,WAAW,CAmCb;AAED,wBAAsB,WAAW,CAChC,cAAc,EAAE,mBAAmB,EACnC,QAAQ,EAAE,OAAO,EACjB,eAAe,EAAE,kBAAkB,EACnC,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,mBAAmB,GAC1B,OAAO,CAAC,mBAAmB,CAAC,CA4C9B"}

package/dist/credentials/common/aws/utils.js

@@ -1,17 +1,58 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.awsCredentialsTest = void 0;
 exports.assertSupportedAwsRegion = assertSupportedAwsRegion;
 exports.parseAwsUrl = parseAwsUrl;
 exports.awsGetSignInOptionsAndUpdateRequest = awsGetSignInOptionsAndUpdateRequest;
 exports.assumeRole = assumeRole;
+exports.splitPathAndQuery = splitPathAndQuery;
+exports.splitHostPort = splitHostPort;
+exports.buildSmithyHttpRequest = buildSmithyHttpRequest;
 exports.signOptions = signOptions;
-const transport_1 = require("@n8n/backend-network/transport");
+const sha256_js_1 = require("@aws-crypto/sha256-js");
+const proxy_1 = require("@n8n/backend-network/proxy");
+const node_http_handler_1 = require("@smithy/node-http-handler");
+const protocol_http_1 = require("@smithy/protocol-http");
+const signature_v4_1 = require("@smithy/signature-v4");
+const aws4_1 = require("aws4");
 const n8n_workflow_1 = require("n8n-workflow");
-const xml2js_1 = require("xml2js");
 const regions_1 = require("./regions");
 const system_credentials_utils_1 = require("./system-credentials-utils");
-const aws4_1 = require("aws4");
+// ── Private ──────────────────────────────────────────────────────────────────
+const SUPPORTED_AWS_REGIONS = new Set(regions_1.regions.map((r) => r.name));
 /**
  * Checks if a request body value should be JSON stringified for AWS requests.
  * Returns true for plain objects without Content-Length headers.
@@ -26,32 +67,6 @@ function shouldStringifyBody(value, headers) {
     }
     return false;
 }
-const SUPPORTED_AWS_REGIONS = new Set(regions_1.regions.map((r) => r.name));
-/**
- * Ensures the region value belongs to the supported AWS regions list before it
- * is interpolated into request URLs or signing options. Anything outside the
- * known set is rejected with a controlled error.
- */
-function assertSupportedAwsRegion(region) {
-    if (typeof region !== 'string' || !SUPPORTED_AWS_REGIONS.has(region)) {
-        throw new n8n_workflow_1.UserError('Unsupported AWS region');
-    }
-}
-/**
- * Parses an AWS service URL to extract the service name and region.
- * Some AWS services are global and don't have a region.
- *
- * @param url - The AWS service URL to parse
- * @returns Object containing the service name and region (null for global services)
- *
- * @see {@link https://docs.aws.amazon.com/general/latest/gr/rande.html#global-endpoints AWS Global Endpoints}
- */
-function parseAwsUrl(url) {
-    const hostname = url.hostname;
-    // Handle both .amazonaws.com and .amazonaws.com.cn domains
-    const [service, region] = hostname.replace(/\.amazonaws\.com.*$/, '').split('.');
-    return { service, region };
-}
 /**
  * Maps an AWS endpoint subdomain to its SigV4 signing service name.
  *
@@ -67,6 +82,13 @@ function parseAwsUrl(url) {
  * @returns The SigV4 signing service name
  */
 function getAwsSigningService(service) {
+    // Virtual-hosted-style S3 requests arrive as `<bucket>.s3` (the node builds the
+    // endpoint `<bucket>.s3.<region>.amazonaws.com`). They all sign under the `s3`
+    // signing name. aws4 derived this by inspecting the host; smithy does not, so we
+    // normalize it here.
+    if (service === 's3' || service.endsWith('.s3')) {
+        return 's3';
+    }
     switch (service) {
         // Mirror AWS SDK Bedrock signing for HTTP Request node AWS credentials:
         // these endpoint families are signed with the `bedrock` service namespace.
@@ -82,6 +104,69 @@ function getAwsSigningService(service) {
             return service;
     }
 }
+/**
+ * Validates required role fields and returns their trimmed values.
+ * `externalId` and `roleSessionName` are optional in the type and the STS API;
+ * absent values are returned as `undefined` / the STS default rather than rejected.
+ */
+function assertValidRoleCredentials(credentials) {
+    if (!credentials.roleArn || credentials.roleArn.trim() === '') {
+        throw new n8n_workflow_1.UserError('Role ARN is required when assuming a role.');
+    }
+    return {
+        roleArn: credentials.roleArn.trim(),
+        externalId: credentials.externalId?.trim() || undefined,
+        roleSessionName: credentials.roleSessionName?.trim() || 'n8n-session',
+    };
+}
+/**
+ * Returns an `AwsCredentialIdentityProvider` for the STS AssumeRole call.
+ * Uses system credentials (env / IMDS / container) when `useSystemCredentialsForRole` is set,
+ * otherwise validates and wraps the explicitly provided STS key pair.
+ */
+function buildMasterCredentials(credentials, region) {
+    if (credentials.useSystemCredentialsForRole) {
+        return async () => {
+            const sys = await (0, system_credentials_utils_1.getSystemCredentials)(region);
+            if (!sys) {
+                throw new n8n_workflow_1.UserError('System AWS credentials are required for role assumption. Please ensure AWS credentials are available via environment variables, instance metadata, or container role.');
+            }
+            return {
+                accessKeyId: sys.accessKeyId,
+                secretAccessKey: sys.secretAccessKey,
+                ...(sys.sessionToken ? { sessionToken: sys.sessionToken } : {}),
+            };
+        };
+    }
+    if (!credentials.stsAccessKeyId || credentials.stsAccessKeyId.trim() === '') {
+        throw new n8n_workflow_1.UserError('STS Access Key ID is required when not using system credentials.');
+    }
+    if (!credentials.stsSecretAccessKey || credentials.stsSecretAccessKey.trim() === '') {
+        throw new n8n_workflow_1.UserError('STS Secret Access Key is required when not using system credentials.');
+    }
+    const identity = {
+        accessKeyId: credentials.stsAccessKeyId.trim(),
+        secretAccessKey: credentials.stsSecretAccessKey.trim(),
+        ...(credentials.stsSessionToken?.trim()
+            ? { sessionToken: credentials.stsSessionToken.trim() }
+            : {}),
+    };
+    // eslint-disable-next-line @typescript-eslint/promise-function-async
+    return () => Promise.resolve(identity);
+}
+/**
+ * Returns a proxy-aware `NodeHttpHandler` for the STS client, or `undefined` when no proxy applies.
+ */
+function buildStsRequestHandler(region) {
+    const stsTarget = `https://sts.${region}.${(0, regions_1.getAwsDomain)(region)}`;
+    const proxyUrl = (0, proxy_1.resolveProxyUrl)(stsTarget);
+    if (!proxyUrl)
+        return undefined;
+    // STS is always HTTPS; one agent backs both http/https slots.
+    const proxyAgent = (0, proxy_1.createHttpsProxyAgent)(stsTarget, proxyUrl);
+    return new node_http_handler_1.NodeHttpHandler({ httpAgent: proxyAgent, httpsAgent: proxyAgent });
+}
+// ── Exports ───────────────────────────────────────────────────────────────────
 /**
  * AWS credentials test configuration for validating AWS credentials.
  * Uses the STS GetCallerIdentity action to verify that the provided credentials are valid.
@@ -96,6 +181,31 @@ exports.awsCredentialsTest = {
         method: 'POST',
     },
 };
+/**
+ * Ensures the region value belongs to the supported AWS regions list before it
+ * is interpolated into request URLs or signing options. Anything outside the
+ * known set is rejected with a controlled error.
+ */
+function assertSupportedAwsRegion(region) {
+    if (typeof region !== 'string' || !SUPPORTED_AWS_REGIONS.has(region)) {
+        throw new n8n_workflow_1.UserError('Unsupported AWS region');
+    }
+}
+/**
+ * Parses an AWS service URL to extract the service name and region.
+ * Some AWS services are global and don't have a region.
+ *
+ * @param url - The AWS service URL to parse
+ * @returns Object containing the service name and region (null for global services)
+ *
+ * @see {@link https://docs.aws.amazon.com/general/latest/gr/rande.html#global-endpoints AWS Global Endpoints}
+ */
+function parseAwsUrl(url) {
+    const hostname = url.hostname;
+    // Handle both .amazonaws.com and .amazonaws.com.cn domains
+    const [service, region] = hostname.replace(/\.amazonaws\.com.*$/, '').split('.');
+    return { service, region };
+}
 /**
  * Prepares AWS request options for signing by constructing the proper endpoint URL,
  * handling query parameters, and setting up the request body for AWS4 signature.
@@ -232,144 +342,183 @@ function awsGetSignInOptionsAndUpdateRequest(requestOptions, credentials, path,
         path,
         body: bodyContent,
         region,
-        ...(signingService !== service && { service: signingService }),
+        // Always carry the resolved signing service. The signer must not re-derive it
+        // from the hostname: virtual-hosted S3 (bucket.s3.<region>.amazonaws.com) would
+        // yield the bucket name instead of 's3', breaking the signature and the
+        // S3-specific signing rules.
+        service: signingService,
     };
     return { signOpts, url: endpoint.origin + path };
 }
 /**
- * Assumes an AWS IAM role using STS (Security Token Service) and returns temporary credentials.
- * This function supports two modes for providing credentials for the STS call:
- * 1. Using system credentials (environment variables, instance metadata, etc.)
- * 2. Using manually provided STS credentials
+ * Assumes an AWS IAM role via STS and returns temporary credentials.
+ * Supports two master-credential modes: system credentials (env / IMDS / container)
+ * or an explicitly provided STS key pair.
  *
- * @param credentials - The assume role credentials configuration
- * @param region - AWS region for the STS endpoint
- * @returns Promise resolving to temporary credentials for the assumed role
- * @throws {UserError | OperationalError} When credentials are invalid or STS call fails
- *
- * @see {@link https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html STS AssumeRole API}
+ * @throws {UserError} When inputs fail validation or the STS AssumeRole call is rejected.
+ * @see {@link https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html}
  */
 async function assumeRole(credentials, region) {
     assertSupportedAwsRegion(region);
-    if (!credentials.roleArn || credentials.roleArn.trim() === '') {
-        throw new n8n_workflow_1.UserError('Role ARN is required when assuming a role.');
+    const { roleArn, externalId, roleSessionName } = assertValidRoleCredentials(credentials);
+    const masterCredentials = buildMasterCredentials(credentials, region);
+    const requestHandler = buildStsRequestHandler(region);
+    // Lazy-load the AWS SDK so the ~1.5 MB umbrella (Cognito/SSO clients) isn't
+    // pulled in at startup for workflows that never assume an AWS role.
+    const { fromTemporaryCredentials } = await Promise.resolve().then(() => __importStar(require('@aws-sdk/credential-providers')));
+    const provider = fromTemporaryCredentials({
+        // eslint-disable-next-line @typescript-eslint/naming-convention
+        params: {
+            RoleArn: roleArn,
+            RoleSessionName: roleSessionName,
+            ...(externalId ? { ExternalId: externalId } : {}),
+        },
+        masterCredentials,
+        clientConfig: {
+            region,
+            maxAttempts: 1,
+            requestHandler: requestHandler ?? { requestTimeout: 2000, connectionTimeout: 2000 },
+        },
+    });
+    try {
+        const resolved = await provider();
+        return {
+            accessKeyId: resolved.accessKeyId,
+            secretAccessKey: resolved.secretAccessKey,
+            sessionToken: resolved.sessionToken ?? '',
+        };
     }
-    if (!credentials.externalId || credentials.externalId.trim() === '') {
-        throw new n8n_workflow_1.UserError('External ID is required when assuming a role.');
+    catch (err) {
+        if (err instanceof n8n_workflow_1.UserError)
+            throw err;
+        const message = err instanceof Error ? err.message : String(err);
+        throw new n8n_workflow_1.UserError(`STS AssumeRole failed: ${message}`);
     }
-    if (!credentials.roleSessionName || credentials.roleSessionName.trim() === '') {
-        throw new n8n_workflow_1.UserError('Role Session Name is required when assuming a role.');
+}
+// Splits a path+search string into the pathname and a query parameter map.
+// smithy's SignatureV4 requires query params as a separate object, not embedded in the path.
+// The path is sliced raw (not run through URL) to preserve exact bytes, which S3 signing
+// depends on. Query parsing uses URLSearchParams; repeated keys are kept as arrays since
+// smithy accepts string | string[].
+function splitPathAndQuery(pathWithSearch) {
+    const idx = pathWithSearch.indexOf('?');
+    if (idx === -1)
+        return { path: pathWithSearch, query: {} };
+    const query = {};
+    for (const [key, value] of new URLSearchParams(pathWithSearch.slice(idx + 1))) {
+        const existing = query[key];
+        if (existing === undefined)
+            query[key] = value;
+        else
+            query[key] = Array.isArray(existing) ? [...existing, value] : [existing, value];
     }
-    let stsCallCredentials;
-    const useSystemCredentialsForRole = credentials.useSystemCredentialsForRole ?? false;
-    if (useSystemCredentialsForRole) {
-        const systemCredentials = await (0, system_credentials_utils_1.getSystemCredentials)(region);
-        if (!systemCredentials) {
-            throw new n8n_workflow_1.UserError('System AWS credentials are required for role assumption. Please ensure AWS credentials are available via environment variables, instance metadata, or container role.');
+    return { path: pathWithSearch.slice(0, idx), query };
+}
+// Splits a `host[:port]` string into hostname and numeric port, bracket-aware for
+// IPv6 literals (e.g. `[::1]:4566`). A naive `.split(':')` would cut an IPv6
+// address at its first colon.
+function splitHostPort(host) {
+    if (host.startsWith('[')) {
+        const closeIdx = host.indexOf(']');
+        if (closeIdx !== -1) {
+            const hostname = host.slice(0, closeIdx + 1);
+            const rest = host.slice(closeIdx + 1);
+            const port = rest.startsWith(':') ? parseInt(rest.slice(1), 10) : undefined;
+            return { hostname, port };
         }
-        stsCallCredentials = systemCredentials;
     }
-    else {
-        if (!credentials.stsAccessKeyId || credentials.stsAccessKeyId.trim() === '') {
-            throw new n8n_workflow_1.UserError('STS Access Key ID is required when not using system credentials.');
+    const [hostname, portStr] = host.split(':');
+    return { hostname, port: portStr ? parseInt(portStr, 10) : undefined };
+}
+// Legacy aws4 signer, kept behind N8N_AWS_LEGACY_SIGNER as an operator rollback
+// lever. Temporary: removed together with aws4 once the smithy path has soaked.
+function signWithLegacyAws4(requestOptions, signOpts, securityHeaders, url, method) {
+    // Let signing errors propagate. Continuing with an unsigned request only yields
+    // an opaque 403 from AWS that hides the real cause.
+    (0, aws4_1.sign)(signOpts, securityHeaders);
+    return {
+        ...requestOptions,
+        headers: signOpts.headers,
+        method,
+        url,
+        body: signOpts.body,
+        qs: undefined,
+    };
+}
+// Translates n8n's aws4-shaped Request into a smithy HttpRequest: splits the query
+// out of the path, lowercases header keys (so smithy's canonical sort is stable),
+// and mirrors aws4's content-type/length injection for body requests.
+function buildSmithyHttpRequest(signOpts, method) {
+    const { path, query } = splitPathAndQuery(signOpts.path ?? '/');
+    const { hostname, port } = splitHostPort(signOpts.host ?? '');
+    // Drop host; smithy derives it from hostname.
+    const headers = { host: signOpts.host ?? hostname };
+    for (const [k, v] of Object.entries((signOpts.headers ?? {}))) {
+        const lower = k.toLowerCase();
+        if (lower !== 'host')
+            headers[lower] = v;
+    }
+    // aws4 defaults the Content-Type to 'application/x-www-form-urlencoded; charset=utf-8'
+    // (not json) and sets Content-Length for any truthy body, string or Buffer;
+    // smithy injects neither.
+    const body = signOpts.body;
+    const hasBody = (typeof body === 'string' && body.length > 0) || Buffer.isBuffer(body);
+    if (hasBody) {
+        if (!headers['content-type']) {
+            headers['content-type'] = 'application/x-www-form-urlencoded; charset=utf-8';
         }
-        if (!credentials.stsSecretAccessKey || credentials.stsSecretAccessKey.trim() === '') {
-            throw new n8n_workflow_1.UserError('STS Secret Access Key is required when not using system credentials.');
+        if (!headers['content-length']) {
+            headers['content-length'] = String(Buffer.byteLength(body));
         }
-        const sessionToken = credentials.stsSessionToken?.trim() || undefined;
-        stsCallCredentials = {
-            accessKeyId: credentials.stsAccessKeyId.trim(),
-            secretAccessKey: credentials.stsSecretAccessKey.trim(),
-            sessionToken,
-        };
     }
-    const domain = (0, regions_1.getAwsDomain)(region);
-    const stsEndpoint = `https://sts.${region}.${domain}`;
-    const assumeRoleBody = {
-        RoleArn: credentials.roleArn,
-        RoleSessionName: credentials.roleSessionName || 'n8n-session',
-        ...(credentials.externalId && { ExternalId: credentials.externalId }),
-    };
-    const params = new URLSearchParams({
-        Action: 'AssumeRole',
-        Version: '2011-06-15',
-        RoleArn: assumeRoleBody.RoleArn,
-        RoleSessionName: assumeRoleBody.RoleSessionName,
+    return new protocol_http_1.HttpRequest({
+        method: (signOpts.method ?? method ?? 'GET').toUpperCase(),
+        hostname,
+        ...(port !== undefined && { port }),
+        path: path || '/',
+        ...(Object.keys(query).length > 0 && { query }),
+        headers,
+        body: signOpts.body ?? undefined,
+        protocol: 'https:',
     });
-    if (assumeRoleBody.ExternalId) {
-        params.append('ExternalId', assumeRoleBody.ExternalId);
+}
+async function signOptions(requestOptions, signOpts, securityHeaders, url, method) {
+    if (process.env.N8N_AWS_LEGACY_SIGNER === 'true') {
+        return signWithLegacyAws4(requestOptions, signOpts, securityHeaders, url, method);
     }
-    const bodyContent = params.toString();
-    const stsUrl = new URL(stsEndpoint);
-    const signOpts = {
-        headers: {
-            'Content-Type': 'application/x-www-form-urlencoded',
+    const httpRequest = buildSmithyHttpRequest(signOpts, method);
+    // signOpts.service is set only when the signing name differs from the endpoint name
+    // (e.g. bedrock-runtime → bedrock). Fall back to the first label of the hostname.
+    const service = signOpts.service ?? httpRequest.hostname.split('.')[0];
+    const region = signOpts.region ?? 'us-east-1';
+    // S3 needs aws4-equivalent treatment that other services must not get:
+    // it requires the x-amz-content-sha256 header in the signature, and its
+    // object keys must not be path-normalized or double-encoded. aws4 special-cased
+    // S3 the same way; smithy's defaults (no checksum header, uriEscapePath: true)
+    // match aws4 only for non-S3 services.
+    const isS3 = service === 's3';
+    const signer = new signature_v4_1.SignatureV4({
+        credentials: {
+            accessKeyId: securityHeaders.accessKeyId,
+            secretAccessKey: securityHeaders.secretAccessKey,
+            ...(securityHeaders.sessionToken && { sessionToken: securityHeaders.sessionToken }),
         },
-        host: stsUrl.host,
-        method: 'POST',
-        path: '/',
-        body: bodyContent,
         region,
-    };
-    try {
-        (0, aws4_1.sign)(signOpts, stsCallCredentials);
-    }
-    catch (err) {
-        console.error('Failed to sign STS request:', err);
-        throw new n8n_workflow_1.OperationalError('Failed to sign STS request');
-    }
-    const response = await (0, transport_1.createDispatcherTransport)({ proxy: 'env' }).asCustomFetch()(stsEndpoint, {
-        method: 'POST',
-        headers: signOpts.headers,
-        body: bodyContent,
-    });
-    if (!response.ok) {
-        const errorText = await response.text();
-        throw new n8n_workflow_1.UserError(`STS AssumeRole failed: ${response.status} ${response.statusText} - ${errorText}`);
-    }
-    const responseText = await response.text();
-    const responseData = await new Promise((resolve, reject) => {
-        (0, xml2js_1.parseString)(responseText, {
-            explicitArray: false,
-            tagNameProcessors: [n8n_workflow_1.sanitizeXmlName],
-            attrNameProcessors: [n8n_workflow_1.sanitizeXmlName],
-        }, (err, data) => {
-            if (err) {
-                reject(err);
-            }
-            else {
-                resolve(data);
-            }
-        });
+        service,
+        sha256: sha256_js_1.Sha256,
+        applyChecksum: isS3,
+        uriEscapePath: !isS3,
     });
-    const assumeRoleResult = responseData.AssumeRoleResponse
-        ?.AssumeRoleResult;
-    if (!assumeRoleResult?.Credentials) {
-        throw new n8n_workflow_1.OperationalError('Invalid response from STS AssumeRole');
-    }
-    const assumedCredentials = assumeRoleResult.Credentials;
-    const securityHeaders = {
-        accessKeyId: assumedCredentials.AccessKeyId,
-        secretAccessKey: assumedCredentials.SecretAccessKey,
-        sessionToken: assumedCredentials.SessionToken,
-    };
-    return securityHeaders;
-}
-function signOptions(requestOptions, signOpts, securityHeaders, url, method) {
-    try {
-        (0, aws4_1.sign)(signOpts, securityHeaders);
-    }
-    catch (err) {
-        console.error(err);
-    }
-    const options = {
+    // Let signing errors propagate. Falling back to the unsigned request only yields
+    // an opaque 403 from AWS that hides the real cause.
+    const signedRequest = (await signer.sign(httpRequest));
+    return {
         ...requestOptions,
-        headers: signOpts.headers,
+        headers: signedRequest.headers,
         method,
         url,
         body: signOpts.body,
-        qs: undefined, // override since it's already in the url
+        qs: undefined, // already encoded in url
     };
-    return options;
 }
 //# sourceMappingURL=utils.js.map

package/dist/credentials/common/aws/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../credentials/common/aws/utils.ts"],"names":[],"mappings":";;;AAiDA,4DAIC;AAWD,kCAKC;AAmED,kFA2HC;AAeD,gCAyIC;AAED,kCAsBC;AAnbD,8DAA2E;AAC3E,+CAUsB;AACtB,mCAAqC;AAErC,uCAAkE;AAClE,yEAAkE;AAOlE,+BAA4B;AAE5B;;;GAGG;AACH,SAAS,mBAAmB,CAAI,KAAQ,EAAE,OAAoB;IAC7D,IACC,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC1B,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC1B,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EACtB,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC,iBAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAEvF;;;;GAIG;AACH,SAAgB,wBAAwB,CAAC,MAAe;IACvD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,wBAAS,CAAC,wBAAwB,CAAC,CAAC;IAC/C,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,WAAW,CAAC,GAAQ;IACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,2DAA2D;IAC3D,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,oBAAoB,CAAC,OAAe;IAC5C,QAAQ,OAAO,EAAE,CAAC;QACjB,wEAAwE;QACxE,2EAA2E;QAC3E,+FAA+F;QAC/F,6FAA6F;QAC7F,KAAK,iBAAiB,CAAC;QACvB,KAAK,eAAe,CAAC;QACrB,KAAK,uBAAuB,CAAC;QAC7B,KAAK,yBAAyB,CAAC;QAC/B,KAAK,iCAAiC;YACrC,OAAO,SAAS,CAAC;QAClB;YACC,OAAO,OAAO,CAAC;IACjB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACU,QAAA,kBAAkB,GAA2B;IACzD,OAAO,EAAE;QACR,OAAO;QACN,8EAA8E;QAC9E,yJAAyJ;QAC1J,GAAG,EAAE,8CAA8C;QACnD,MAAM,EAAE,MAAM;KACd;CACD,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,mCAAmC,CAClD,cAAmC,EACnC,WAAmC,EACnC,IAAY,EACZ,MAA0B,EAC1B,OAAe,EACf,MAAiB;IAEjB,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC;IAC/B,IAAI,QAAa,CAAC;IAClB,IAAI,KAAK,GAAG,cAAc,CAAC,EAAE,EAAE,KAAoB,CAAC;IACpD,2FAA2F;IAC3F,qEAAqE;IACrE,MAAM,cAAc,GAAG,cAA4C,CAAC;IACpE,IAAI,cAAc,CAAC,GAAG,EAAE,CAAC;QACxB,cAAc,CAAC,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC;QACxC,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC;gBACJ,IAAI,cAAc,CAAC,EAAE,EAAE,MAAM,KAAK,mBAAmB,EAAE,CAAC;oBACvD,KAAK,GAAG,cAAc,CAAC,EAAiB,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACP,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;oBACzD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;gBACpD,CAAC;YACF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACF,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACxB,CAAC;IACF,CAAC;SAAM,CAAC;QACP,IAAI,CAAC,cAAc,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;YACpD,IAAI,cAAsB,CAAC;YAC3B,IAAI,OAAO,KAAK,QAAQ,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;gBACxD,cAAc,GAAG,WAAW,CAAC,cAAc,CAAC;YAC7C,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;gBACzD,cAAc,GAAG,WAAW,CAAC,WAAW,CAAC;YAC1C,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;gBACzD,cAAc,GAAG,WAAW,CAAC,WAAW,CAAC;YAC1C,CAAC;iBAAM,IAAI,OAAO,KAAK,IAAI,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;gBACvD,cAAc,GAAG,WAAW,CAAC,UAAU,CAAC;YACzC,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;gBACzD,cAAc,GAAG,WAAW,CAAC,WAAW,CAAC;YAC1C,CAAC;iBAAM,IAAI,OAAO,KAAK,aAAa,IAAI,WAAW,CAAC,mBAAmB,EAAE,CAAC;gBACzE,cAAc,GAAG,WAAW,CAAC,mBAAmB,CAAC;YAClD,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;gBACzD,cAAc,GAAG,WAAW,CAAC,WAAW,CAAC;YAC1C,CAAC;iBAAM,IAAI,OAAO,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,MAAM,CAAC,CAAC;gBACpC,cAAc,GAAG,WAAW,OAAO,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;YAC3D,CAAC;YACD,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAe,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACP,mFAAmF;YACnF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,cAAc,CAAC,OAAQ,GAAG,cAAc,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACtC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YACzB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YACxB,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACJ,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;oBAC1D,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;gBACrD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACpB,CAAC;YACF,CAAC;YACD,QAAQ,GAAG,SAAS,CAAC;QACtB,CAAC;IACF,CAAC;IAED,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YAClC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAW,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAA,4BAAa,EAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,IAAI,GAAG,EAAE,CAAC;IACX,CAAC;IAED,IAAI,GAAG,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE3C,qFAAqF;IACrF,MAAM,eAAe,GAAG,cAA8D,CAAC;IACvF,IAAI,WAAW,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,IAAI,iBAAiB,GAAuB,SAAS,CAAC;IAEtD,IAAI,mBAAmB,CAAC,WAAW,EAAE,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACpE,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,iBAAiB,GAAG,mCAAmC,CAAC;IACzD,CAAC;IAED,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG;QAChB,GAAG,cAAc;QACjB,OAAO,EAAE;YACR,GAAG,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC;YACjC,GAAG,CAAC,iBAAiB,IAAI,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC;SAC/D;QACD,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM;QACN,IAAI;QACJ,IAAI,EAAE,WAAW;QACjB,MAAM;QACN,GAAG,CAAC,cAAc,KAAK,OAAO,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;KACxC,CAAC;IAExB,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,UAAU,CAC/B,WAAyC,EACzC,MAAiB;IAMjB,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAEjC,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,MAAM,IAAI,wBAAS,CAAC,4CAA4C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,UAAU,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrE,MAAM,IAAI,wBAAS,CAAC,+CAA+C,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,eAAe,IAAI,WAAW,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/E,MAAM,IAAI,wBAAS,CAAC,qDAAqD,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,kBAA2F,CAAC;IAEhG,MAAM,2BAA2B,GAAG,WAAW,CAAC,2BAA2B,IAAI,KAAK,CAAC;IAErF,IAAI,2BAA2B,EAAE,CAAC;QACjC,MAAM,iBAAiB,GAAG,MAAM,IAAA,+CAAoB,EAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,MAAM,IAAI,wBAAS,CAClB,uKAAuK,CACvK,CAAC;QACH,CAAC;QAED,kBAAkB,GAAG,iBAAiB,CAAC;IACxC,CAAC;SAAM,CAAC;QACP,IAAI,CAAC,WAAW,CAAC,cAAc,IAAI,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC7E,MAAM,IAAI,wBAAS,CAAC,kEAAkE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,kBAAkB,IAAI,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrF,MAAM,IAAI,wBAAS,CAAC,sEAAsE,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,YAAY,GAAG,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAEtE,kBAAkB,GAAG;YACpB,WAAW,EAAE,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE;YAC9C,eAAe,EAAE,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE;YACtD,YAAY;SACZ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,MAAM,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,eAAe,MAAM,IAAI,MAAM,EAAE,CAAC;IAEtD,MAAM,cAAc,GAAG;QACtB,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,eAAe,EAAE,WAAW,CAAC,eAAe,IAAI,aAAa;QAC7D,GAAG,CAAC,WAAW,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,CAAC;KACrE,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QAClC,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,YAAY;QACrB,OAAO,EAAE,cAAc,CAAC,OAAO;QAC/B,eAAe,EAAE,cAAc,CAAC,eAAe;KAC/C,CAAC,CAAC;IACH,IAAI,cAAc,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAEtC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG;QAChB,OAAO,EAAE;YACR,cAAc,EAAE,mCAAmC;SACnD;QACD,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG;QACT,IAAI,EAAE,WAAW;QACjB,MAAM;KACK,CAAC;IAEb,IAAI,CAAC;QACJ,IAAA,WAAI,EAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,IAAI,+BAAgB,CAAC,4BAA4B,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,IAAA,qCAAyB,EAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,WAAW,EAAE;QAC/F,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,QAAQ,CAAC,OAAiC;QACnD,IAAI,EAAE,WAAW;KACjB,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,wBAAS,CAClB,0BAA0B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CACjF,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,MAAM,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACvE,IAAA,oBAAW,EACV,YAAY,EACZ;YACC,aAAa,EAAE,KAAK;YACpB,iBAAiB,EAAE,CAAC,8BAAe,CAAC;YACpC,kBAAkB,EAAE,CAAC,8BAAe,CAAC;SACrC,EACD,CAAC,GAAQ,EAAE,IAAiB,EAAE,EAAE;YAC/B,IAAI,GAAG,EAAE,CAAC;gBACT,MAAM,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;QACF,CAAC,CACD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAI,YAAY,CAAC,kBAAkC;QACxE,EAAE,gBAA+B,CAAC;IACnC,IAAI,CAAC,gBAAgB,EAAE,WAAW,EAAE,CAAC;QACpC,MAAM,IAAI,+BAAgB,CAAC,sCAAsC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,WAA0B,CAAC;IAEvE,MAAM,eAAe,GAAG;QACvB,WAAW,EAAE,kBAAkB,CAAC,WAAqB;QACrD,eAAe,EAAE,kBAAkB,CAAC,eAAyB;QAC7D,YAAY,EAAE,kBAAkB,CAAC,YAAsB;KACvD,CAAC;IAEF,OAAO,eAAe,CAAC;AACxB,CAAC;AAED,SAAgB,WAAW,CAC1B,cAAmC,EACnC,QAAiB,EACjB,eAAmC,EACnC,GAAW,EACX,MAA4B;IAE5B,IAAI,CAAC;QACJ,IAAA,WAAI,EAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,OAAO,GAAwB;QACpC,GAAG,cAAc;QACjB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,MAAM;QACN,GAAG;QACH,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,EAAE,EAAE,SAAS,EAAE,yCAAyC;KACxD,CAAC;IAEF,OAAO,OAAO,CAAC;AAChB,CAAC"}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../../credentials/common/aws/utils.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsLA,4DAIC;AAWD,kCAKC;AAqBD,kFA+HC;AAUD,gCA4CC;AAOD,8CAeC;AAKD,sCAYC;AA2BD,wDAsCC;AAED,kCAkDC;AAhjBD,qDAA+C;AAC/C,sDAAoF;AACpF,iEAA4D;AAC5D,yDAAoD;AACpD,uDAAmD;AAGnD,+BAA4B;AAC5B,+CAQsB;AAEtB,uCAAkE;AAClE,yEAAkE;AAOlE,gFAAgF;AAEhF,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC,iBAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAEvF;;;GAGG;AACH,SAAS,mBAAmB,CAAI,KAAQ,EAAE,OAAoB;IAC7D,IACC,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC1B,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC1B,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EACtB,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,oBAAoB,CAAC,OAAe;IAC5C,gFAAgF;IAChF,+EAA+E;IAC/E,iFAAiF;IACjF,qBAAqB;IACrB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,QAAQ,OAAO,EAAE,CAAC;QACjB,wEAAwE;QACxE,2EAA2E;QAC3E,+FAA+F;QAC/F,6FAA6F;QAC7F,KAAK,iBAAiB,CAAC;QACvB,KAAK,eAAe,CAAC;QACrB,KAAK,uBAAuB,CAAC;QAC7B,KAAK,yBAAyB,CAAC;QAC/B,KAAK,iCAAiC;YACrC,OAAO,SAAS,CAAC;QAClB;YACC,OAAO,OAAO,CAAC;IACjB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,0BAA0B,CAAC,WAAyC;IAK5E,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,MAAM,IAAI,wBAAS,CAAC,4CAA4C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO;QACN,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE;QACnC,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,SAAS;QACvD,eAAe,EAAE,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,aAAa;KACrE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAC9B,WAAyC,EACzC,MAAiB;IAEjB,IAAI,WAAW,CAAC,2BAA2B,EAAE,CAAC;QAC7C,OAAO,KAAK,IAAI,EAAE;YACjB,MAAM,GAAG,GAAG,MAAM,IAAA,+CAAoB,EAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACV,MAAM,IAAI,wBAAS,CAClB,uKAAuK,CACvK,CAAC;YACH,CAAC;YACD,OAAO;gBACN,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,eAAe,EAAE,GAAG,CAAC,eAAe;gBACpC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,CAAC;QACH,CAAC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,cAAc,IAAI,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7E,MAAM,IAAI,wBAAS,CAAC,kEAAkE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,kBAAkB,IAAI,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrF,MAAM,IAAI,wBAAS,CAAC,sEAAsE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,QAAQ,GAA0B;QACvC,WAAW,EAAE,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE;QAC9C,eAAe,EAAE,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE;QACtD,GAAG,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE;YACtC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,CAAC,eAAe,CAAC,IAAI,EAAE,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;KACN,CAAC;IACF,qEAAqE;IACrE,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,MAAiB;IAChD,MAAM,SAAS,GAAG,eAAe,MAAM,IAAI,IAAA,sBAAY,EAAC,MAAM,CAAC,EAAE,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAA,uBAAe,EAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,8DAA8D;IAC9D,MAAM,UAAU,GAAG,IAAA,6BAAqB,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9D,OAAO,IAAI,mCAAe,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACU,QAAA,kBAAkB,GAA2B;IACzD,OAAO,EAAE;QACR,OAAO;QACN,8EAA8E;QAC9E,yJAAyJ;QAC1J,GAAG,EAAE,8CAA8C;QACnD,MAAM,EAAE,MAAM;KACd;CACD,CAAC;AAEF;;;;GAIG;AACH,SAAgB,wBAAwB,CAAC,MAAe;IACvD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,wBAAS,CAAC,wBAAwB,CAAC,CAAC;IAC/C,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,WAAW,CAAC,GAAQ;IACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,2DAA2D;IAC3D,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,mCAAmC,CAClD,cAAmC,EACnC,WAAmC,EACnC,IAAY,EACZ,MAA0B,EAC1B,OAAe,EACf,MAAiB;IAEjB,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC;IAC/B,IAAI,QAAa,CAAC;IAClB,IAAI,KAAK,GAAG,cAAc,CAAC,EAAE,EAAE,KAAoB,CAAC;IACpD,2FAA2F;IAC3F,qEAAqE;IACrE,MAAM,cAAc,GAAG,cAA4C,CAAC;IACpE,IAAI,cAAc,CAAC,GAAG,EAAE,CAAC;QACxB,cAAc,CAAC,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC;QACxC,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC;gBACJ,IAAI,cAAc,CAAC,EAAE,EAAE,MAAM,KAAK,mBAAmB,EAAE,CAAC;oBACvD,KAAK,GAAG,cAAc,CAAC,EAAiB,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACP,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;oBACzD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;gBACpD,CAAC;YACF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACF,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACxB,CAAC;IACF,CAAC;SAAM,CAAC;QACP,IAAI,CAAC,cAAc,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;YACpD,IAAI,cAAsB,CAAC;YAC3B,IAAI,OAAO,KAAK,QAAQ,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;gBACxD,cAAc,GAAG,WAAW,CAAC,cAAc,CAAC;YAC7C,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;gBACzD,cAAc,GAAG,WAAW,CAAC,WAAW,CAAC;YAC1C,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;gBACzD,cAAc,GAAG,WAAW,CAAC,WAAW,CAAC;YAC1C,CAAC;iBAAM,IAAI,OAAO,KAAK,IAAI,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;gBACvD,cAAc,GAAG,WAAW,CAAC,UAAU,CAAC;YACzC,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;gBACzD,cAAc,GAAG,WAAW,CAAC,WAAW,CAAC;YAC1C,CAAC;iBAAM,IAAI,OAAO,KAAK,aAAa,IAAI,WAAW,CAAC,mBAAmB,EAAE,CAAC;gBACzE,cAAc,GAAG,WAAW,CAAC,mBAAmB,CAAC;YAClD,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;gBACzD,cAAc,GAAG,WAAW,CAAC,WAAW,CAAC;YAC1C,CAAC;iBAAM,IAAI,OAAO,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,MAAM,CAAC,CAAC;gBACpC,cAAc,GAAG,WAAW,OAAO,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;YAC3D,CAAC;YACD,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAe,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACP,mFAAmF;YACnF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,cAAc,CAAC,OAAQ,GAAG,cAAc,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;YACtC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YACzB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YACxB,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACJ,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;oBAC1D,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;gBACrD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACpB,CAAC;YACF,CAAC;YACD,QAAQ,GAAG,SAAS,CAAC;QACtB,CAAC;IACF,CAAC;IAED,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YAClC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAW,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAA,4BAAa,EAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,IAAI,GAAG,EAAE,CAAC;IACX,CAAC;IAED,IAAI,GAAG,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE3C,qFAAqF;IACrF,MAAM,eAAe,GAAG,cAA8D,CAAC;IACvF,IAAI,WAAW,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,IAAI,iBAAiB,GAAuB,SAAS,CAAC;IAEtD,IAAI,mBAAmB,CAAC,WAAW,EAAE,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACpE,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,iBAAiB,GAAG,mCAAmC,CAAC;IACzD,CAAC;IAED,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG;QAChB,GAAG,cAAc;QACjB,OAAO,EAAE;YACR,GAAG,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC;YACjC,GAAG,CAAC,iBAAiB,IAAI,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC;SAC/D;QACD,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM;QACN,IAAI;QACJ,IAAI,EAAE,WAAW;QACjB,MAAM;QACN,8EAA8E;QAC9E,gFAAgF;QAChF,wEAAwE;QACxE,6BAA6B;QAC7B,OAAO,EAAE,cAAc;KACD,CAAC;IAExB,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,UAAU,CAC/B,WAAyC,EACzC,MAAiB;IAMjB,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IAEzF,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAEtD,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,EAAE,wBAAwB,EAAE,GAAG,wDAAa,+BAA+B,GAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,wBAAwB,CAAC;QACzC,gEAAgE;QAChE,MAAM,EAAE;YACP,OAAO,EAAE,OAAO;YAChB,eAAe,EAAE,eAAe;YAChC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD;QACD,iBAAiB;QACjB,YAAY,EAAE;YACb,MAAM;YACN,WAAW,EAAE,CAAC;YACd,cAAc,EAAE,cAAc,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE;SACnF;KACD,CAAC,CAAC;IAEH,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,QAAQ,EAAE,CAAC;QAClC,OAAO;YACN,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;SACzC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,YAAY,wBAAS;YAAE,MAAM,GAAG,CAAC;QACxC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,wBAAS,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;AACF,CAAC;AAED,2EAA2E;AAC3E,6FAA6F;AAC7F,yFAAyF;AACzF,yFAAyF;AACzF,oCAAoC;AACpC,SAAgB,iBAAiB,CAAC,cAAsB;IAIvD,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAE3D,MAAM,KAAK,GAAsC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;;YAC1C,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;AACtD,CAAC;AAED,kFAAkF;AAClF,6EAA6E;AAC7E,8BAA8B;AAC9B,SAAgB,aAAa,CAAC,IAAY;IACzC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;IACF,CAAC;IACD,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AACxE,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,SAAS,kBAAkB,CAC1B,cAAmC,EACnC,QAAiB,EACjB,eAAmC,EACnC,GAAW,EACX,MAA4B;IAE5B,gFAAgF;IAChF,oDAAoD;IACpD,IAAA,WAAI,EAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAChC,OAAO;QACN,GAAG,cAAc;QACjB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,MAAM;QACN,GAAG;QACH,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,EAAE,EAAE,SAAS;KACb,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,kFAAkF;AAClF,sEAAsE;AACtE,SAAgB,sBAAsB,CACrC,QAAiB,EACjB,MAA4B;IAE5B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IAChE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE9D,8CAA8C;IAC9C,MAAM,OAAO,GAA2B,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;IAC5E,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAA2B,CAAC,EAAE,CAAC;QACzF,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED,uFAAuF;IACvF,4EAA4E;IAC5E,0BAA0B;IAC1B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvF,IAAI,OAAO,EAAE,CAAC;QACb,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,cAAc,CAAC,GAAG,kDAAkD,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAuB,CAAC,CAAC,CAAC;QAChF,CAAC;IACF,CAAC;IAED,OAAO,IAAI,2BAAW,CAAC;QACtB,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE;QAC1D,QAAQ;QACR,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;QACnC,IAAI,EAAE,IAAI,IAAI,GAAG;QACjB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QAC/C,OAAO;QACP,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,SAAS;QAChC,QAAQ,EAAE,QAAQ;KAClB,CAAC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,WAAW,CAChC,cAAmC,EACnC,QAAiB,EACjB,eAAmC,EACnC,GAAW,EACX,MAA4B;IAE5B,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,MAAM,EAAE,CAAC;QAClD,OAAO,kBAAkB,CAAC,cAAc,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,WAAW,GAAG,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAE7D,oFAAoF;IACpF,kFAAkF;IAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,WAAW,CAAC;IAE9C,uEAAuE;IACvE,wEAAwE;IACxE,gFAAgF;IAChF,+EAA+E;IAC/E,uCAAuC;IACvC,MAAM,IAAI,GAAG,OAAO,KAAK,IAAI,CAAC;IAE9B,MAAM,MAAM,GAAG,IAAI,0BAAW,CAAC;QAC9B,WAAW,EAAE;YACZ,WAAW,EAAE,eAAe,CAAC,WAAW;YACxC,eAAe,EAAE,eAAe,CAAC,eAAe;YAChD,GAAG,CAAC,eAAe,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,eAAe,CAAC,YAAY,EAAE,CAAC;SACnF;QACD,MAAM;QACN,OAAO;QACP,MAAM,EAAE,kBAAM;QACd,aAAa,EAAE,IAAI;QACnB,aAAa,EAAE,CAAC,IAAI;KACpB,CAAC,CAAC;IAEH,iFAAiF;IACjF,oDAAoD;IACpD,MAAM,aAAa,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAgB,CAAC;IAEtE,OAAO;QACN,GAAG,cAAc;QACjB,OAAO,EAAE,aAAa,CAAC,OAAO;QAC9B,MAAM;QACN,GAAG;QACH,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,EAAE,EAAE,SAAS,EAAE,yBAAyB;KACxC,CAAC;AACH,CAAC"}