nebutra 0.4.1 → 0.4.2

package/dist/dist-es-5AMXVNUC.js

@@ -0,0 +1 @@
+import{w as S}from"./chunk-A3H5SUSR.js";import"./chunk-X6LE6K3W.js";import{m as _}from"./chunk-Z4YWESTY.js";import"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";var p="AWS_ACCESS_KEY_ID",A="AWS_SECRET_ACCESS_KEY",C="AWS_SESSION_TOKEN",N="AWS_CREDENTIAL_EXPIRATION",a="AWS_CREDENTIAL_SCOPE",i="AWS_ACCOUNT_ID",v=e=>async()=>{e?.logger?.debug("@aws-sdk/credential-provider-env - fromEnv");let o=process.env[p],r=process.env[A],n=process.env[C],s=process.env[N],t=process.env[a],E=process.env[i];if(o&&r){let c={accessKeyId:o,secretAccessKey:r,...n&&{sessionToken:n},...s&&{expiration:new Date(s)},...t&&{credentialScope:t},...E&&{accountId:E}};return S(c,"CREDENTIALS_ENV_VARS","g"),c}throw new _("Unable to find environment variable credentials.",{logger:e?.logger})};export{i as ENV_ACCOUNT_ID,a as ENV_CREDENTIAL_SCOPE,N as ENV_EXPIRATION,p as ENV_KEY,A as ENV_SECRET,C as ENV_SESSION,v as fromEnv};

package/dist/dist-es-5XQLJX7S.js

@@ -0,0 +1,2 @@
+import"./chunk-LDZWCNWB.js";import{w as R}from"./chunk-A3H5SUSR.js";import"./chunk-X6LE6K3W.js";import{m as c,n as S,r as O,s as K,t as y,v as E,w as A}from"./chunk-Z4YWESTY.js";import"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";var H=e=>e&&(typeof e.sso_start_url=="string"||typeof e.sso_account_id=="string"||typeof e.sso_session=="string"||typeof e.sso_region=="string"||typeof e.sso_role_name=="string");var u="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var U=async(e,o={},r)=>{let{SSOOIDCClient:t}=await import("./sso-oidc-T7YTOO4A.js"),n=f=>o.clientConfig?.[f]??o.parentClientConfig?.[f]??r?.[f];return new t(Object.assign({},o.clientConfig??{},{region:e??o.clientConfig?.region,logger:n("logger"),userAgentAppId:n("userAgentAppId")}))};var j=async(e,o,r={},t)=>{let{CreateTokenCommand:n}=await import("./sso-oidc-T7YTOO4A.js");return(await U(o,r,t)).send(new n({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))};var v=e=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new S(`Token is expired. ${u}`,!1)};var d=(e,o,r=!1)=>{if(typeof o>"u")throw new S(`Value not present for '${e}' in SSO Token${r?". Cannot refresh":""}. ${u}`,!1)};import{promises as V}from"fs";var{writeFile:Y}=V,q=(e,o)=>{let r=K(e),t=JSON.stringify(o,null,2);return Y(r,t)};var W=new Date(0),X=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let r=await A(e),t=O({profile:e.profile??o?.profile}),n=r[t];if(n){if(!n.sso_session)throw new S(`Profile '${t}' is missing required property 'sso_session'.`)}else throw new S(`Profile '${t}' could not be found in shared credentials file.`,!1);let a=n.sso_session,p=(await E(e))[a];if(!p)throw new S(`Sso session '${a}' could not be found in shared credentials file.`,!1);for(let i of["sso_start_url","sso_region"])if(!p[i])throw new S(`Sso session '${a}' is missing required property '${i}'.`,!1);let g=p.sso_start_url,C=p.sso_region,s;try{s=await y(a)}catch{throw new S(`The SSO session token associated with profile=${t} was not found or is invalid. ${u}`,!1)}d("accessToken",s.accessToken),d("expiresAt",s.expiresAt);let{accessToken:_,expiresAt:k}=s,l={token:_,expiration:new Date(k)};if(l.expiration.getTime()-Date.now()>3e5)return l;if(Date.now()-W.getTime()<30*1e3)return v(l),l;d("clientId",s.clientId,!0),d("clientSecret",s.clientSecret,!0),d("refreshToken",s.refreshToken,!0);try{W.setTime(Date.now());let i=await j(s,C,e,o);d("accessToken",i.accessToken),d("expiresIn",i.expiresIn);let m=new Date(Date.now()+i.expiresIn*1e3);try{await q(a,{...s,accessToken:i.accessToken,expiresAt:m.toISOString(),refreshToken:i.refreshToken})}catch{}return{token:i.accessToken,expiration:m}}catch{return v(l),l}};var T=!1,D=async({ssoStartUrl:e,ssoSession:o,ssoAccountId:r,ssoRegion:t,ssoRoleName:n,ssoClient:a,clientConfig:f,parentClientConfig:p,callerClientConfig:g,profile:C,filepath:s,configFilepath:_,ignoreCache:k,logger:l})=>{let i,m="To refresh this SSO session run aws sso login with the corresponding profile.";if(o)try{let w=await X({profile:C,filepath:s,configFilepath:_,ignoreCache:k})();i={accessToken:w.token,expiresAt:new Date(w.expiration).toISOString()}}catch(w){throw new c(w.message,{tryNextLink:T,logger:l})}else try{i=await y(e)}catch{throw new c(`The SSO session associated with this profile is invalid. ${m}`,{tryNextLink:T,logger:l})}if(new Date(i.expiresAt).getTime()-Date.now()<=0)throw new c(`The SSO session associated with this profile has expired. ${m}`,{tryNextLink:T,logger:l});let{accessToken:I}=i,{SSOClient:h,GetRoleCredentialsCommand:x}=await import("./loadSso-CDEOXPSD.js"),J=a||new h(Object.assign({},f??{},{logger:f?.logger??g?.logger??p?.logger,region:f?.region??t,userAgentAppId:f?.userAgentAppId??g?.userAgentAppId??p?.userAgentAppId})),F;try{F=await J.send(new x({accountId:r,roleName:n,accessToken:I}))}catch(w){throw new c(w,{tryNextLink:T,logger:l})}let{roleCredentials:{accessKeyId:P,secretAccessKey:$,sessionToken:L,expiration:M,credentialScope:b,accountId:G}={}}=F;if(!P||!$||!L||!M)throw new c("SSO returns an invalid temporary credential.",{tryNextLink:T,logger:l});let N={accessKeyId:P,secretAccessKey:$,sessionToken:L,expiration:new Date(M),...b&&{credentialScope:b},...G&&{accountId:G}};return o?R(N,"CREDENTIALS_SSO","s"):R(N,"CREDENTIALS_SSO_LEGACY","u"),N};var z=(e,o)=>{let{sso_start_url:r,sso_account_id:t,sso_region:n,sso_role_name:a}=e;if(!r||!t||!n||!a)throw new c(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
+Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:o});return e};var De=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:r,ssoAccountId:t,ssoRegion:n,ssoRoleName:a,ssoSession:f}=e,{ssoClient:p}=e,g=O({profile:e.profile??o?.profile});if(!r&&!t&&!n&&!a&&!f){let s=(await A(e))[g];if(!s)throw new c(`Profile ${g} was not found.`,{logger:e.logger});if(!H(s))throw new c(`Profile ${g} is not configured with SSO credentials.`,{logger:e.logger});if(s?.sso_session){let h=(await E(e))[s.sso_session],x=` configurations in profile ${g} and sso-session ${s.sso_session}`;if(n&&n!==h.sso_region)throw new c("Conflicting SSO region"+x,{tryNextLink:!1,logger:e.logger});if(r&&r!==h.sso_start_url)throw new c("Conflicting SSO start_url"+x,{tryNextLink:!1,logger:e.logger});s.sso_region=h.sso_region,s.sso_start_url=h.sso_start_url}let{sso_start_url:_,sso_account_id:k,sso_region:l,sso_role_name:i,sso_session:m}=z(s,e.logger);return D({ssoStartUrl:_,ssoSession:m,ssoAccountId:k,ssoRegion:l,ssoRoleName:i,ssoClient:p,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:g,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}else{if(!r||!t||!n||!a)throw new c('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});return D({ssoStartUrl:r,ssoSession:f,ssoAccountId:t,ssoRegion:n,ssoRoleName:a,ssoClient:p,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:g,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}};export{De as fromSSO,H as isSsoProfile,z as validateSsoProfile};

package/dist/dist-es-H47VUS6Q.js

@@ -0,0 +1,2 @@
+import"./chunk-X6LE6K3W.js";import"./chunk-6MSNEPUX.js";import{j as M,l as S,m as s,y as u}from"./chunk-Z4YWESTY.js";import"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";import{parse as $}from"url";import{Buffer as W}from"buffer";import{request as K}from"http";function m(e){return new Promise((t,n)=>{let o=K({method:"GET",...e,hostname:e.hostname?.replace(/^\[(.+)\]$/,"$1")});o.on("error",r=>{n(Object.assign(new S("Unable to connect to instance metadata service"),r)),o.destroy()}),o.on("timeout",()=>{n(new S("TimeoutError from instance metadata service")),o.destroy()}),o.on("response",r=>{let{statusCode:a=400}=r;(a<200||300<=a)&&(n(Object.assign(new S("Error response received from instance metadata service"),{statusCode:a})),o.destroy());let f=[];r.on("data",i=>{f.push(i)}),r.on("end",()=>{t(W.concat(f)),o.destroy()})}),o.end()})}var N=e=>!!e&&typeof e=="object"&&typeof e.AccessKeyId=="string"&&typeof e.SecretAccessKey=="string"&&typeof e.Token=="string"&&typeof e.Expiration=="string",g=e=>({accessKeyId:e.AccessKeyId,secretAccessKey:e.SecretAccessKey,sessionToken:e.Token,expiration:new Date(e.Expiration),...e.AccountId&&{accountId:e.AccountId}});var pe=1e3,me=0,h=({maxRetries:e=0,timeout:t=1e3})=>({maxRetries:e,timeout:t});var A=(e,t)=>{let n=e();for(let o=0;o<t;o++)n=n.catch(e);return n};var C="AWS_CONTAINER_CREDENTIALS_FULL_URI",O="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",y="AWS_CONTAINER_AUTHORIZATION_TOKEN",Ne=(e={})=>{let{timeout:t,maxRetries:n}=h(e);return()=>A(async()=>{let o=await j({logger:e.logger}),r=JSON.parse(await B(t,o));if(!N(r))throw new s("Invalid response received from instance metadata service.",{logger:e.logger});return g(r)},n)},B=async(e,t)=>(process.env[y]&&(t.headers={...t.headers,Authorization:process.env[y]}),(await m({...t,timeout:e})).toString()),G="169.254.170.2",q={localhost:!0,"127.0.0.1":!0},H={"http:":!0,"https:":!0},j=async({logger:e})=>{if(process.env[O])return{hostname:G,path:process.env[O]};if(process.env[C]){let t=$(process.env[C]);if(!t.hostname||!(t.hostname in q))throw new s(`${t.hostname} is not a valid container metadata service hostname`,{tryNextLink:!1,logger:e});if(!t.protocol||!(t.protocol in H))throw new s(`${t.protocol} is not a valid container metadata service protocol`,{tryNextLink:!1,logger:e});return{...t,port:t.port?parseInt(t.port,10):void 0}}throw new s(`The container metadata credential provider cannot be used unless the ${O} or ${C} environment variable is set`,{tryNextLink:!1,logger:e})};var v=class e extends s{tryNextLink;name="InstanceMetadataV1FallbackError";constructor(t,n=!0){super(t,n),this.tryNextLink=n,Object.setPrototypeOf(this,e.prototype)}};var _;(function(e){e.IPv4="http://169.254.169.254",e.IPv6="http://[fd00:ec2::254]"})(_||(_={}));var Y="AWS_EC2_METADATA_SERVICE_ENDPOINT",J="ec2_metadata_service_endpoint",P={environmentVariableSelector:e=>e[Y],configFileSelector:e=>e[J],default:void 0};var p;(function(e){e.IPv4="IPv4",e.IPv6="IPv6"})(p||(p={}));var z="AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE",X="ec2_metadata_service_endpoint_mode",R={environmentVariableSelector:e=>e[z],configFileSelector:e=>e[X],default:p.IPv4};var D=async()=>M(await Z()||await Q()),Z=async()=>u(P)(),Q=async()=>{let e=await u(R)();switch(e){case p.IPv4:return _.IPv4;case p.IPv6:return _.IPv6;default:throw new Error(`Unsupported endpoint mode: ${e}. Select from ${Object.values(p)}`)}};var ee="https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html",w=(e,t)=>{let n=300+Math.floor(Math.random()*300),o=new Date(Date.now()+n*1e3);t.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(o)}.
+For more information, please visit: `+ee);let r=e.originalExpiration??e.expiration;return{...e,...r?{originalExpiration:r}:{},expiration:o}};var b=(e,t={})=>{let n=t?.logger||console,o;return async()=>{let r;try{r=await e(),r.expiration&&r.expiration.getTime()<Date.now()&&(r=w(r,n))}catch(a){if(o)n.warn("Credential renew failed: ",a),r=w(o,n);else throw a}return o=r,r}};var k="/latest/meta-data/iam/security-credentials/",te="/latest/api/token",x="AWS_EC2_METADATA_V1_DISABLED",F="ec2_metadata_v1_disabled",L="x-aws-ec2-metadata-token",Je=(e={})=>b(oe(e),{logger:e.logger}),oe=(e={})=>{let t=!1,{logger:n,profile:o}=e,{timeout:r,maxRetries:a}=h(e),f=async(i,E)=>{if(t||E.headers?.[L]==null){let c=!1,d=!1,U=await u({environmentVariableSelector:l=>{let I=l[x];if(d=!!I&&I!=="false",I===void 0)throw new s(`${x} not set in env, checking config file next.`,{logger:e.logger});return d},configFileSelector:l=>{let I=l[F];return c=!!I&&I!=="false",c},default:!1},{profile:o})();if(e.ec2MetadataV1Disabled||U){let l=[];throw e.ec2MetadataV1Disabled&&l.push("credential provider initialization (runtime option ec2MetadataV1Disabled)"),c&&l.push(`config file profile (${F})`),d&&l.push(`process environment variable (${x})`),new v(`AWS EC2 Metadata v1 fallback has been blocked by AWS SDK configuration in the following: [${l.join(", ")}].`)}}let V=(await A(async()=>{let c;try{c=await ne(E)}catch(d){throw d.statusCode===401&&(t=!1),d}return c},i)).trim();return A(async()=>{let c;try{c=await ae(V,E,e)}catch(d){throw d.statusCode===401&&(t=!1),d}return c},i)};return async()=>{let i=await D();if(t)return n?.debug("AWS SDK Instance Metadata","using v1 fallback (no token fetch)"),f(a,{...i,timeout:r});{let E;try{E=(await re({...i,timeout:r})).toString()}catch(T){if(T?.statusCode===400)throw Object.assign(T,{message:"EC2 Metadata token request returned error"});return(T.message==="TimeoutError"||[403,404,405].includes(T.statusCode))&&(t=!0),n?.debug("AWS SDK Instance Metadata","using v1 fallback (initial)"),f(a,{...i,timeout:r})}return f(a,{...i,headers:{[L]:E},timeout:r})}}},re=async e=>m({...e,path:te,method:"PUT",headers:{"x-aws-ec2-metadata-token-ttl-seconds":"21600"}}),ne=async e=>(await m({...e,path:k})).toString(),ae=async(e,t,n)=>{let o=JSON.parse((await m({...t,path:k+e})).toString());if(!N(o))throw new s("Invalid response received from instance metadata service.",{logger:n.logger});return g(o)};export{me as DEFAULT_MAX_RETRIES,pe as DEFAULT_TIMEOUT,y as ENV_CMDS_AUTH_TOKEN,C as ENV_CMDS_FULL_URI,O as ENV_CMDS_RELATIVE_URI,_ as Endpoint,Ne as fromContainerMetadata,Je as fromInstanceMetadata,D as getInstanceMetadataEndpoint,m as httpRequest,h as providerConfigFromInit};

package/dist/dist-es-HTJP4AFM.js

@@ -0,0 +1 @@
+import"./chunk-LDZWCNWB.js";import"./chunk-TW5BOTVX.js";import{w as c}from"./chunk-A3H5SUSR.js";import"./chunk-X6LE6K3W.js";import{f as b,m as l,o as D,r as y,u as L,w as k}from"./chunk-Z4YWESTY.js";import"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";var O=(e,r,t)=>{let o={EcsContainer:async s=>{let{fromHttp:i}=await import("./dist-es-PAB65TG2.js"),{fromContainerMetadata:n}=await import("./dist-es-TCZQ4KMP.js");return t?.debug("@aws-sdk/credential-provider-ini - credential_source is EcsContainer"),async()=>D(i(s??{}),n(s))().then(I)},Ec2InstanceMetadata:async s=>{t?.debug("@aws-sdk/credential-provider-ini - credential_source is Ec2InstanceMetadata");let{fromInstanceMetadata:i}=await import("./dist-es-TCZQ4KMP.js");return async()=>i(s)().then(I)},Environment:async s=>{t?.debug("@aws-sdk/credential-provider-ini - credential_source is Environment");let{fromEnv:i}=await import("./dist-es-5AMXVNUC.js");return async()=>i(s)().then(I)}};if(e in o)return o[e];throw new l(`Unsupported credential source in profile ${r}. Got ${e}, expected EcsContainer or Ec2InstanceMetadata or Environment.`,{logger:t})},I=e=>c(e,"CREDENTIALS_PROFILE_NAMED_PROVIDER","p");var N=(e,{profile:r="default",logger:t}={})=>!!e&&typeof e=="object"&&typeof e.role_arn=="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1&&["undefined","string"].indexOf(typeof e.external_id)>-1&&["undefined","string"].indexOf(typeof e.mfa_serial)>-1&&(Y(e,{profile:r,logger:t})||z(e,{profile:r,logger:t})),Y=(e,{profile:r,logger:t})=>{let o=typeof e.source_profile=="string"&&typeof e.credential_source>"u";return o&&t?.debug?.(`    ${r} isAssumeRoleWithSourceProfile source_profile=${e.source_profile}`),o},z=(e,{profile:r,logger:t})=>{let o=typeof e.credential_source=="string"&&typeof e.source_profile>"u";return o&&t?.debug?.(`    ${r} isCredentialSourceProfile credential_source=${e.credential_source}`),o},$=async(e,r,t,o,s={},i)=>{t.logger?.debug("@aws-sdk/credential-provider-ini - resolveAssumeRoleCredentials (STS)");let n=r[e],{source_profile:a,region:p}=n;if(!t.roleAssumer){let{getDefaultRoleAssumer:u}=await import("./sts-GE4BCXER.js");t.roleAssumer=u({...t.clientConfig,credentialProviderLogger:t.logger,parentClientConfig:{...o,...t?.parentClientConfig,region:p??t?.parentClientConfig?.region??o?.region}},t.clientPlugins)}if(a&&a in s)throw new l(`Detected a cycle attempting to resolve credentials for profile ${y(t)}. Profiles visited: `+Object.keys(s).join(", "),{logger:t.logger});t.logger?.debug(`@aws-sdk/credential-provider-ini - finding credential resolver using ${a?`source_profile=[${a}]`:`profile=[${e}]`}`);let m=a?i(a,r,t,o,{...s,[a]:!0},F(r[a]??{})):(await O(n.credential_source,e,t.logger)(t))();if(F(n))return m.then(u=>c(u,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"));{let u={RoleArn:n.role_arn,RoleSessionName:n.role_session_name||`aws-sdk-js-${Date.now()}`,ExternalId:n.external_id,DurationSeconds:parseInt(n.duration_seconds||"3600",10)},{mfa_serial:d}=n;if(d){if(!t.mfaCodeProvider)throw new l(`Profile ${e} requires multi-factor authentication, but no MFA code callback was provided.`,{logger:t.logger,tryNextLink:!1});u.SerialNumber=d,u.TokenCode=await t.mfaCodeProvider(d)}let g=await m;return t.roleAssumer(g,u).then(f=>c(f,"CREDENTIALS_PROFILE_SOURCE_PROFILE","o"))}},F=e=>!e.role_arn&&!!e.credential_source;import{createHash as V,createPrivateKey as X,createPublicKey as Q,sign as Z}from"crypto";import{promises as P}from"fs";import{homedir as ee}from"os";import{dirname as te,join as K}from"path";var E=class e{profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300*1e3;constructor(r,t,o){this.profileData=r,this.init=t,this.callerClientConfig=o}async loadCredentials(){let r=await this.loadToken();if(!r)throw new l(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let t=r.accessToken,o=Date.now();return new Date(t.expiresAt).getTime()-o<=e.REFRESH_THRESHOLD?this.refresh(r):{accessKeyId:t.accessKeyId,secretAccessKey:t.secretAccessKey,sessionToken:t.sessionToken,accountId:t.accountId,expiration:new Date(t.expiresAt)}}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}async refresh(r){let{SigninClient:t,CreateOAuth2TokenCommand:o}=await import("./signin-VC4RXV33.js"),{logger:s,userAgentAppId:i}=this.callerClientConfig??{},a=(d=>d?.metadata?.handlerProtocol==="h2")(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,p=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,m=new t({credentials:{accessKeyId:"",secretAccessKey:""},region:p,requestHandler:a,logger:s,userAgentAppId:i,...this.init?.clientConfig});this.createDPoPInterceptor(m.middlewareStack);let u={tokenInput:{clientId:r.clientId,refreshToken:r.refreshToken,grantType:"refresh_token"}};try{let d=await m.send(new o(u)),{accessKeyId:g,secretAccessKey:f,sessionToken:_}=d.tokenOutput?.accessToken??{},{refreshToken:w,expiresIn:R}=d.tokenOutput??{};if(!g||!f||!_||!w)throw new l("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let S=(R??900)*1e3,h=new Date(Date.now()+S),A={...r,accessToken:{...r.accessToken,accessKeyId:g,secretAccessKey:f,sessionToken:_,expiresAt:h.toISOString()},refreshToken:w};await this.saveToken(A);let C=A.accessToken;return{accessKeyId:C.accessKeyId,secretAccessKey:C.secretAccessKey,sessionToken:C.sessionToken,accountId:C.accountId,expiration:h}}catch(d){if(d.name==="AccessDeniedException"){let g=d.error,f;switch(g){case"TOKEN_EXPIRED":f="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":f="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":f="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:f=`Failed to refresh token: ${String(d)}. Please re-authenticate using \`aws login\``}throw new l(f,{logger:this.logger,tryNextLink:!1})}throw new l(`Failed to refresh token: ${String(d)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let r=this.getTokenFilePath();try{let t;try{t=await L(r,{ignoreCache:this.init?.ignoreCache})}catch{t=await P.readFile(r,"utf8")}let o=JSON.parse(t),s=["accessToken","clientId","refreshToken","dpopKey"].filter(i=>!o[i]);if(o.accessToken?.accountId||s.push("accountId"),s.length>0)throw new l(`Token validation failed, missing fields: ${s.join(", ")}`,{logger:this.logger,tryNextLink:!1});return o}catch(t){throw new l(`Failed to load token from ${r}: ${String(t)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(r){let t=this.getTokenFilePath(),o=te(t);try{await P.mkdir(o,{recursive:!0})}catch{}await P.writeFile(t,JSON.stringify(r,null,2),"utf8")}getTokenFilePath(){let r=process.env.AWS_LOGIN_CACHE_DIRECTORY??K(ee(),".aws","login","cache"),t=Buffer.from(this.loginSession,"utf8"),o=V("sha256").update(t).digest("hex");return K(r,`${o}.json`)}derToRawSignature(r){let t=2;if(r[t]!==2)throw new Error("Invalid DER signature");t++;let o=r[t++],s=r.subarray(t,t+o);if(t+=o,r[t]!==2)throw new Error("Invalid DER signature");t++;let i=r[t++],n=r.subarray(t,t+i);s=s[0]===0?s.subarray(1):s,n=n[0]===0?n.subarray(1):n;let a=Buffer.concat([Buffer.alloc(32-s.length),s]),p=Buffer.concat([Buffer.alloc(32-n.length),n]);return Buffer.concat([a,p])}createDPoPInterceptor(r){r.add(t=>async o=>{if(b.isInstance(o.request)){let s=o.request,i=`${s.protocol}//${s.hostname}${s.port?`:${s.port}`:""}${s.path}`,n=await this.generateDpop(s.method,i);s.headers={...s.headers,DPoP:n}}return t(o)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(r="POST",t){let o=await this.loadToken();try{let s=X({key:o.dpopKey,format:"pem",type:"sec1"}),n=Q(s).export({format:"der",type:"spki"}),a=-1;for(let h=0;h<n.length;h++)if(n[h]===4){a=h;break}let p=n.slice(a+1,a+33),m=n.slice(a+33,a+65),u={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:p.toString("base64url"),y:m.toString("base64url")}},d={jti:crypto.randomUUID(),htm:r,htu:t,iat:Math.floor(Date.now()/1e3)},g=Buffer.from(JSON.stringify(u)).toString("base64url"),f=Buffer.from(JSON.stringify(d)).toString("base64url"),_=`${g}.${f}`,w=Z("sha256",Buffer.from(_),s),S=this.derToRawSignature(w).toString("base64url");return`${_}.${S}`}catch(s){throw new l(`Failed to generate Dpop proof: ${s instanceof Error?s.message:String(s)}`,{logger:this.logger,tryNextLink:!1})}}};var B=e=>async({callerClientConfig:r}={})=>{e?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let t=await k(e||{}),o=y({profile:e?.profile??r?.profile}),s=t[o];if(!s?.login_session)throw new l(`Profile ${o} does not contain login_session.`,{tryNextLink:!0,logger:e?.logger});let n=await new E(s,e,r).loadCredentials();return c(n,"CREDENTIALS_LOGIN","AD")};var H=e=>!!(e&&e.login_session),j=async(e,r,t)=>{let o=await B({...r,profile:e})({callerClientConfig:t});return c(o,"CREDENTIALS_PROFILE_LOGIN","AC")};var W=e=>!!e&&typeof e=="object"&&typeof e.credential_process=="string",q=async(e,r)=>import("./dist-es-VZPXKLZQ.js").then(({fromProcess:t})=>t({...e,profile:r})().then(o=>c(o,"CREDENTIALS_PROFILE_PROCESS","v")));var M=async(e,r,t={},o)=>{let{fromSSO:s}=await import("./dist-es-QREIURMO.js");return s({profile:e,logger:t.logger,parentClientConfig:t.parentClientConfig,clientConfig:t.clientConfig})({callerClientConfig:o}).then(i=>r.sso_session?c(i,"CREDENTIALS_PROFILE_SSO","r"):c(i,"CREDENTIALS_PROFILE_SSO_LEGACY","t"))},U=e=>e&&(typeof e.sso_start_url=="string"||typeof e.sso_account_id=="string"||typeof e.sso_session=="string"||typeof e.sso_region=="string"||typeof e.sso_role_name=="string");var T=e=>!!e&&typeof e=="object"&&typeof e.aws_access_key_id=="string"&&typeof e.aws_secret_access_key=="string"&&["undefined","string"].indexOf(typeof e.aws_session_token)>-1&&["undefined","string"].indexOf(typeof e.aws_account_id)>-1,x=async(e,r)=>{r?.logger?.debug("@aws-sdk/credential-provider-ini - resolveStaticCredentials");let t={accessKeyId:e.aws_access_key_id,secretAccessKey:e.aws_secret_access_key,sessionToken:e.aws_session_token,...e.aws_credential_scope&&{credentialScope:e.aws_credential_scope},...e.aws_account_id&&{accountId:e.aws_account_id}};return c(t,"CREDENTIALS_PROFILE","n")};var G=e=>!!e&&typeof e=="object"&&typeof e.web_identity_token_file=="string"&&typeof e.role_arn=="string"&&["undefined","string"].indexOf(typeof e.role_session_name)>-1,J=async(e,r,t)=>import("./dist-es-TDPJBG34.js").then(({fromTokenFile:o})=>o({webIdentityTokenFile:e.web_identity_token_file,roleArn:e.role_arn,roleSessionName:e.role_session_name,roleAssumerWithWebIdentity:r.roleAssumerWithWebIdentity,logger:r.logger,parentClientConfig:r.parentClientConfig})({callerClientConfig:t}).then(s=>c(s,"CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN","q")));var v=async(e,r,t,o,s={},i=!1)=>{let n=r[e];if(Object.keys(s).length>0&&T(n))return x(n,t);if(i||N(n,{profile:e,logger:t.logger}))return $(e,r,t,o,s,v);if(T(n))return x(n,t);if(G(n))return J(n,t,o);if(W(n))return q(t,e);if(U(n))return await M(e,n,t,o);if(H(n))return j(e,t,o);throw new l(`Could not resolve credentials using profile: [${e}] in configuration/credentials file(s).`,{logger:t.logger})};var Me=(e={})=>async({callerClientConfig:r}={})=>{e.logger?.debug("@aws-sdk/credential-provider-ini - fromIni");let t=await k(e);return v(y({profile:e.profile??r?.profile}),t,e,r)};export{Me as fromIni};

package/dist/dist-es-PAB65TG2.js

@@ -0,0 +1,5 @@
+import"./chunk-SYWJHPRX.js";import{a as l}from"./chunk-MGGNSWUA.js";import"./chunk-WJLTO7JW.js";import"./chunk-TW5BOTVX.js";import{w as C}from"./chunk-A3H5SUSR.js";import"./chunk-X6LE6K3W.js";import{f as A,m as a}from"./chunk-Z4YWESTY.js";import{g as T,x as h}from"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";import g from"fs/promises";var u="169.254.170.2",R="169.254.170.23",w="[fd00:ec2::23]",p=(e,o)=>{if(e.protocol!=="https:"&&!(e.hostname===u||e.hostname===R||e.hostname===w)){if(e.hostname.includes("[")){if(e.hostname==="[::1]"||e.hostname==="[0000:0000:0000:0000:0000:0000:0000:0001]")return}else{if(e.hostname==="localhost")return;let n=e.hostname.split("."),r=t=>{let s=parseInt(t,10);return 0<=s&&s<=255};if(n[0]==="127"&&r(n[1])&&r(n[2])&&r(n[3])&&n.length===4)return}throw new a(`URL not accepted. It must either be HTTPS or match one of the following:
+  - loopback CIDR 127.0.0.0/8 or [::1/128]
+  - ECS container host 169.254.170.2
+  - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:o})}};function _(e){return new A({protocol:e.protocol,hostname:e.hostname,port:Number(e.port),path:e.pathname,query:Array.from(e.searchParams.entries()).reduce((o,[n,r])=>(o[n]=r,o),{}),fragment:e.hash})}async function I(e,o){let r=await h(e.body).transformToString();if(e.statusCode===200){let t=JSON.parse(r);if(typeof t.AccessKeyId!="string"||typeof t.SecretAccessKey!="string"||typeof t.Token!="string"||typeof t.Expiration!="string")throw new a("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:o});return{accessKeyId:t.AccessKeyId,secretAccessKey:t.SecretAccessKey,sessionToken:t.Token,expiration:T(t.Expiration)}}if(e.statusCode>=400&&e.statusCode<500){let t={};try{t=JSON.parse(r)}catch{}throw Object.assign(new a(`Server responded with status: ${e.statusCode}`,{logger:o}),{Code:t.Code,Message:t.Message})}throw new a(`Server responded with status: ${e.statusCode}`,{logger:o})}var f=(e,o,n)=>async()=>{for(let r=0;r<o;++r)try{return await e()}catch{await new Promise(s=>setTimeout(s,n))}return await e()};var S="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",O="http://169.254.170.2",L="AWS_CONTAINER_CREDENTIALS_FULL_URI",y="AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",v="AWS_CONTAINER_AUTHORIZATION_TOKEN",U=(e={})=>{e.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");let o,n=e.awsContainerCredentialsRelativeUri??process.env[S],r=e.awsContainerCredentialsFullUri??process.env[L],t=e.awsContainerAuthorizationToken??process.env[v],s=e.awsContainerAuthorizationTokenFile??process.env[y],i=e.logger?.constructor?.name==="NoOpLogger"||!e.logger?.warn?console.warn:e.logger.warn.bind(e.logger);if(n&&r&&(i("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),i("awsContainerCredentialsFullUri will take precedence.")),t&&s&&(i("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),i("awsContainerAuthorizationToken will take precedence.")),r)o=r;else if(n)o=`${O}${n}`;else throw new a(`No HTTP credential provider host provided.
+Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:e.logger});let m=new URL(o);p(m,e.logger);let E=l.create({requestTimeout:e.timeout??1e3,connectionTimeout:e.timeout??1e3});return f(async()=>{let c=_(m);t?c.headers.Authorization=t:s&&(c.headers.Authorization=(await g.readFile(s)).toString());try{let d=await E.handle(c);return I(d.response).then(N=>C(N,"CREDENTIALS_HTTP","z"))}catch(d){throw new a(String(d),{logger:e.logger})}},e.maxRetries??3,e.timeout??1e3)};export{U as fromHttp};

package/dist/dist-es-QD75XXED.js

@@ -0,0 +1 @@
+import"./chunk-LDZWCNWB.js";import{w as f}from"./chunk-A3H5SUSR.js";import"./chunk-X6LE6K3W.js";import{m as c,r as l,w as p,x as a}from"./chunk-Z4YWESTY.js";import"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";import{exec as m}from"child_process";import{promisify as P}from"util";var u=(r,e,o)=>{if(e.Version!==1)throw Error(`Profile ${r} credential_process did not return Version 1.`);if(e.AccessKeyId===void 0||e.SecretAccessKey===void 0)throw Error(`Profile ${r} credential_process returned invalid credentials.`);if(e.Expiration){let i=new Date;if(new Date(e.Expiration)<i)throw Error(`Profile ${r} credential_process returned expired credentials.`)}let s=e.AccountId;!s&&o?.[r]?.aws_account_id&&(s=o[r].aws_account_id);let t={accessKeyId:e.AccessKeyId,secretAccessKey:e.SecretAccessKey,...e.SessionToken&&{sessionToken:e.SessionToken},...e.Expiration&&{expiration:new Date(e.Expiration)},...e.CredentialScope&&{credentialScope:e.CredentialScope},...s&&{accountId:s}};return f(t,"CREDENTIALS_PROCESS","w"),t};var w=async(r,e,o)=>{let s=e[r];if(e[r]){let t=s.credential_process;if(t!==void 0){let i=P(a?.getTokenRecord?.().exec??m);try{let{stdout:n}=await i(t),d;try{d=JSON.parse(n.trim())}catch{throw Error(`Profile ${r} credential_process returned invalid JSON.`)}return u(r,d,e)}catch(n){throw new c(n.message,{logger:o})}}else throw new c(`Profile ${r} did not contain credential_process.`,{logger:o})}else throw new c(`Profile ${r} could not be found in shared credentials file.`,{logger:o})};var K=(r={})=>async({callerClientConfig:e}={})=>{r.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");let o=await p(r);return w(l({profile:r.profile??e?.profile}),o,r.logger)};export{K as fromProcess};

package/dist/dist-es-QREIURMO.js

@@ -0,0 +1,2 @@
+import"./chunk-LDZWCNWB.js";import{w as R}from"./chunk-A3H5SUSR.js";import"./chunk-X6LE6K3W.js";import{m as c,n as S,r as O,s as K,t as y,v as E,w as A}from"./chunk-Z4YWESTY.js";import"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";var H=e=>e&&(typeof e.sso_start_url=="string"||typeof e.sso_account_id=="string"||typeof e.sso_session=="string"||typeof e.sso_region=="string"||typeof e.sso_role_name=="string");var u="To refresh this SSO session run 'aws sso login' with the corresponding profile.";var U=async(e,o={},r)=>{let{SSOOIDCClient:t}=await import("./sso-oidc-T7YTOO4A.js"),n=f=>o.clientConfig?.[f]??o.parentClientConfig?.[f]??r?.[f];return new t(Object.assign({},o.clientConfig??{},{region:e??o.clientConfig?.region,logger:n("logger"),userAgentAppId:n("userAgentAppId")}))};var j=async(e,o,r={},t)=>{let{CreateTokenCommand:n}=await import("./sso-oidc-T7YTOO4A.js");return(await U(o,r,t)).send(new n({clientId:e.clientId,clientSecret:e.clientSecret,refreshToken:e.refreshToken,grantType:"refresh_token"}))};var v=e=>{if(e.expiration&&e.expiration.getTime()<Date.now())throw new S(`Token is expired. ${u}`,!1)};var d=(e,o,r=!1)=>{if(typeof o>"u")throw new S(`Value not present for '${e}' in SSO Token${r?". Cannot refresh":""}. ${u}`,!1)};import{promises as V}from"fs";var{writeFile:Y}=V,q=(e,o)=>{let r=K(e),t=JSON.stringify(o,null,2);return Y(r,t)};var W=new Date(0),X=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/token-providers - fromSso");let r=await A(e),t=O({profile:e.profile??o?.profile}),n=r[t];if(n){if(!n.sso_session)throw new S(`Profile '${t}' is missing required property 'sso_session'.`)}else throw new S(`Profile '${t}' could not be found in shared credentials file.`,!1);let a=n.sso_session,p=(await E(e))[a];if(!p)throw new S(`Sso session '${a}' could not be found in shared credentials file.`,!1);for(let i of["sso_start_url","sso_region"])if(!p[i])throw new S(`Sso session '${a}' is missing required property '${i}'.`,!1);let g=p.sso_start_url,C=p.sso_region,s;try{s=await y(a)}catch{throw new S(`The SSO session token associated with profile=${t} was not found or is invalid. ${u}`,!1)}d("accessToken",s.accessToken),d("expiresAt",s.expiresAt);let{accessToken:_,expiresAt:k}=s,l={token:_,expiration:new Date(k)};if(l.expiration.getTime()-Date.now()>3e5)return l;if(Date.now()-W.getTime()<30*1e3)return v(l),l;d("clientId",s.clientId,!0),d("clientSecret",s.clientSecret,!0),d("refreshToken",s.refreshToken,!0);try{W.setTime(Date.now());let i=await j(s,C,e,o);d("accessToken",i.accessToken),d("expiresIn",i.expiresIn);let m=new Date(Date.now()+i.expiresIn*1e3);try{await q(a,{...s,accessToken:i.accessToken,expiresAt:m.toISOString(),refreshToken:i.refreshToken})}catch{}return{token:i.accessToken,expiration:m}}catch{return v(l),l}};var T=!1,D=async({ssoStartUrl:e,ssoSession:o,ssoAccountId:r,ssoRegion:t,ssoRoleName:n,ssoClient:a,clientConfig:f,parentClientConfig:p,callerClientConfig:g,profile:C,filepath:s,configFilepath:_,ignoreCache:k,logger:l})=>{let i,m="To refresh this SSO session run aws sso login with the corresponding profile.";if(o)try{let w=await X({profile:C,filepath:s,configFilepath:_,ignoreCache:k})();i={accessToken:w.token,expiresAt:new Date(w.expiration).toISOString()}}catch(w){throw new c(w.message,{tryNextLink:T,logger:l})}else try{i=await y(e)}catch{throw new c(`The SSO session associated with this profile is invalid. ${m}`,{tryNextLink:T,logger:l})}if(new Date(i.expiresAt).getTime()-Date.now()<=0)throw new c(`The SSO session associated with this profile has expired. ${m}`,{tryNextLink:T,logger:l});let{accessToken:I}=i,{SSOClient:h,GetRoleCredentialsCommand:x}=await import("./loadSso-7ASJ2L6X.js"),J=a||new h(Object.assign({},f??{},{logger:f?.logger??g?.logger??p?.logger,region:f?.region??t,userAgentAppId:f?.userAgentAppId??g?.userAgentAppId??p?.userAgentAppId})),F;try{F=await J.send(new x({accountId:r,roleName:n,accessToken:I}))}catch(w){throw new c(w,{tryNextLink:T,logger:l})}let{roleCredentials:{accessKeyId:P,secretAccessKey:$,sessionToken:L,expiration:M,credentialScope:b,accountId:G}={}}=F;if(!P||!$||!L||!M)throw new c("SSO returns an invalid temporary credential.",{tryNextLink:T,logger:l});let N={accessKeyId:P,secretAccessKey:$,sessionToken:L,expiration:new Date(M),...b&&{credentialScope:b},...G&&{accountId:G}};return o?R(N,"CREDENTIALS_SSO","s"):R(N,"CREDENTIALS_SSO_LEGACY","u"),N};var z=(e,o)=>{let{sso_start_url:r,sso_account_id:t,sso_region:n,sso_role_name:a}=e;if(!r||!t||!n||!a)throw new c(`Profile is configured with invalid SSO credentials. Required parameters "sso_account_id", "sso_region", "sso_role_name", "sso_start_url". Got ${Object.keys(e).join(", ")}
+Reference: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html`,{tryNextLink:!1,logger:o});return e};var De=(e={})=>async({callerClientConfig:o}={})=>{e.logger?.debug("@aws-sdk/credential-provider-sso - fromSSO");let{ssoStartUrl:r,ssoAccountId:t,ssoRegion:n,ssoRoleName:a,ssoSession:f}=e,{ssoClient:p}=e,g=O({profile:e.profile??o?.profile});if(!r&&!t&&!n&&!a&&!f){let s=(await A(e))[g];if(!s)throw new c(`Profile ${g} was not found.`,{logger:e.logger});if(!H(s))throw new c(`Profile ${g} is not configured with SSO credentials.`,{logger:e.logger});if(s?.sso_session){let h=(await E(e))[s.sso_session],x=` configurations in profile ${g} and sso-session ${s.sso_session}`;if(n&&n!==h.sso_region)throw new c("Conflicting SSO region"+x,{tryNextLink:!1,logger:e.logger});if(r&&r!==h.sso_start_url)throw new c("Conflicting SSO start_url"+x,{tryNextLink:!1,logger:e.logger});s.sso_region=h.sso_region,s.sso_start_url=h.sso_start_url}let{sso_start_url:_,sso_account_id:k,sso_region:l,sso_role_name:i,sso_session:m}=z(s,e.logger);return D({ssoStartUrl:_,ssoSession:m,ssoAccountId:k,ssoRegion:l,ssoRoleName:i,ssoClient:p,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:g,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}else{if(!r||!t||!n||!a)throw new c('Incomplete configuration. The fromSSO() argument hash must include "ssoStartUrl", "ssoAccountId", "ssoRegion", "ssoRoleName"',{tryNextLink:!1,logger:e.logger});return D({ssoStartUrl:r,ssoSession:f,ssoAccountId:t,ssoRegion:n,ssoRoleName:a,ssoClient:p,clientConfig:e.clientConfig,parentClientConfig:e.parentClientConfig,callerClientConfig:e.callerClientConfig,profile:g,filepath:e.filepath,configFilepath:e.configFilepath,ignoreCache:e.ignoreCache,logger:e.logger})}};export{De as fromSSO,H as isSsoProfile,z as validateSsoProfile};

package/dist/dist-es-TCZQ4KMP.js

@@ -0,0 +1,2 @@
+import{j as M,l as S,m as s,y as u}from"./chunk-Z4YWESTY.js";import"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";import{parse as K}from"url";var N=e=>!!e&&typeof e=="object"&&typeof e.AccessKeyId=="string"&&typeof e.SecretAccessKey=="string"&&typeof e.Token=="string"&&typeof e.Expiration=="string",g=e=>({accessKeyId:e.AccessKeyId,secretAccessKey:e.SecretAccessKey,sessionToken:e.Token,expiration:new Date(e.Expiration),...e.AccountId&&{accountId:e.AccountId}});var se=1e3,ie=0,h=({maxRetries:e=0,timeout:t=1e3})=>({maxRetries:e,timeout:t});import{request as W}from"http";function m(e){return new Promise((t,n)=>{let o=W({method:"GET",...e,hostname:e.hostname?.replace(/^\[(.+)\]$/,"$1")});o.on("error",r=>{n(Object.assign(new S("Unable to connect to instance metadata service"),r)),o.destroy()}),o.on("timeout",()=>{n(new S("TimeoutError from instance metadata service")),o.destroy()}),o.on("response",r=>{let{statusCode:a=400}=r;(a<200||300<=a)&&(n(Object.assign(new S("Error response received from instance metadata service"),{statusCode:a})),o.destroy());let f=[];r.on("data",i=>{f.push(i)}),r.on("end",()=>{t(Buffer.concat(f)),o.destroy()})}),o.end()})}var A=(e,t)=>{let n=e();for(let o=0;o<t;o++)n=n.catch(e);return n};var C="AWS_CONTAINER_CREDENTIALS_FULL_URI",O="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",y="AWS_CONTAINER_AUTHORIZATION_TOKEN",Ae=(e={})=>{let{timeout:t,maxRetries:n}=h(e);return()=>A(async()=>{let o=await H({logger:e.logger}),r=JSON.parse(await $(t,o));if(!N(r))throw new s("Invalid response received from instance metadata service.",{logger:e.logger});return g(r)},n)},$=async(e,t)=>(process.env[y]&&(t.headers={...t.headers,Authorization:process.env[y]}),(await m({...t,timeout:e})).toString()),B="169.254.170.2",G={localhost:!0,"127.0.0.1":!0},q={"http:":!0,"https:":!0},H=async({logger:e})=>{if(process.env[O])return{hostname:B,path:process.env[O]};if(process.env[C]){let t=K(process.env[C]);if(!t.hostname||!(t.hostname in G))throw new s(`${t.hostname} is not a valid container metadata service hostname`,{tryNextLink:!1,logger:e});if(!t.protocol||!(t.protocol in q))throw new s(`${t.protocol} is not a valid container metadata service protocol`,{tryNextLink:!1,logger:e});return{...t,port:t.port?parseInt(t.port,10):void 0}}throw new s(`The container metadata credential provider cannot be used unless the ${O} or ${C} environment variable is set`,{tryNextLink:!1,logger:e})};var v=class e extends s{tryNextLink;name="InstanceMetadataV1FallbackError";constructor(t,n=!0){super(t,n),this.tryNextLink=n,Object.setPrototypeOf(this,e.prototype)}};var _;(function(e){e.IPv4="http://169.254.169.254",e.IPv6="http://[fd00:ec2::254]"})(_||(_={}));var j="AWS_EC2_METADATA_SERVICE_ENDPOINT",Y="ec2_metadata_service_endpoint",P={environmentVariableSelector:e=>e[j],configFileSelector:e=>e[Y],default:void 0};var p;(function(e){e.IPv4="IPv4",e.IPv6="IPv6"})(p||(p={}));var J="AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE",z="ec2_metadata_service_endpoint_mode",R={environmentVariableSelector:e=>e[J],configFileSelector:e=>e[z],default:p.IPv4};var D=async()=>M(await X()||await Z()),X=async()=>u(P)(),Z=async()=>{let e=await u(R)();switch(e){case p.IPv4:return _.IPv4;case p.IPv6:return _.IPv6;default:throw new Error(`Unsupported endpoint mode: ${e}. Select from ${Object.values(p)}`)}};var Q="https://docs.aws.amazon.com/sdkref/latest/guide/feature-static-credentials.html",w=(e,t)=>{let n=300+Math.floor(Math.random()*300),o=new Date(Date.now()+n*1e3);t.warn(`Attempting credential expiration extension due to a credential service availability issue. A refresh of these credentials will be attempted after ${new Date(o)}.
+For more information, please visit: `+Q);let r=e.originalExpiration??e.expiration;return{...e,...r?{originalExpiration:r}:{},expiration:o}};var b=(e,t={})=>{let n=t?.logger||console,o;return async()=>{let r;try{r=await e(),r.expiration&&r.expiration.getTime()<Date.now()&&(r=w(r,n))}catch(a){if(o)n.warn("Credential renew failed: ",a),r=w(o,n);else throw a}return o=r,r}};var k="/latest/meta-data/iam/security-credentials/",ee="/latest/api/token",x="AWS_EC2_METADATA_V1_DISABLED",F="ec2_metadata_v1_disabled",L="x-aws-ec2-metadata-token",He=(e={})=>b(te(e),{logger:e.logger}),te=(e={})=>{let t=!1,{logger:n,profile:o}=e,{timeout:r,maxRetries:a}=h(e),f=async(i,E)=>{if(t||E.headers?.[L]==null){let c=!1,d=!1,U=await u({environmentVariableSelector:l=>{let I=l[x];if(d=!!I&&I!=="false",I===void 0)throw new s(`${x} not set in env, checking config file next.`,{logger:e.logger});return d},configFileSelector:l=>{let I=l[F];return c=!!I&&I!=="false",c},default:!1},{profile:o})();if(e.ec2MetadataV1Disabled||U){let l=[];throw e.ec2MetadataV1Disabled&&l.push("credential provider initialization (runtime option ec2MetadataV1Disabled)"),c&&l.push(`config file profile (${F})`),d&&l.push(`process environment variable (${x})`),new v(`AWS EC2 Metadata v1 fallback has been blocked by AWS SDK configuration in the following: [${l.join(", ")}].`)}}let V=(await A(async()=>{let c;try{c=await re(E)}catch(d){throw d.statusCode===401&&(t=!1),d}return c},i)).trim();return A(async()=>{let c;try{c=await ne(V,E,e)}catch(d){throw d.statusCode===401&&(t=!1),d}return c},i)};return async()=>{let i=await D();if(t)return n?.debug("AWS SDK Instance Metadata","using v1 fallback (no token fetch)"),f(a,{...i,timeout:r});{let E;try{E=(await oe({...i,timeout:r})).toString()}catch(T){if(T?.statusCode===400)throw Object.assign(T,{message:"EC2 Metadata token request returned error"});return(T.message==="TimeoutError"||[403,404,405].includes(T.statusCode))&&(t=!0),n?.debug("AWS SDK Instance Metadata","using v1 fallback (initial)"),f(a,{...i,timeout:r})}return f(a,{...i,headers:{[L]:E},timeout:r})}}},oe=async e=>m({...e,path:ee,method:"PUT",headers:{"x-aws-ec2-metadata-token-ttl-seconds":"21600"}}),re=async e=>(await m({...e,path:k})).toString(),ne=async(e,t,n)=>{let o=JSON.parse((await m({...t,path:k+e})).toString());if(!N(o))throw new s("Invalid response received from instance metadata service.",{logger:n.logger});return g(o)};export{ie as DEFAULT_MAX_RETRIES,se as DEFAULT_TIMEOUT,y as ENV_CMDS_AUTH_TOKEN,C as ENV_CMDS_FULL_URI,O as ENV_CMDS_RELATIVE_URI,_ as Endpoint,Ae as fromContainerMetadata,He as fromInstanceMetadata,D as getInstanceMetadataEndpoint,m as httpRequest,h as providerConfigFromInit};

package/dist/dist-es-TDPJBG34.js

@@ -0,0 +1 @@
+import"./chunk-LDZWCNWB.js";import{w as d}from"./chunk-A3H5SUSR.js";import"./chunk-X6LE6K3W.js";import{m as l,x as c}from"./chunk-Z4YWESTY.js";import"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";import{readFileSync as _}from"fs";var a=e=>async t=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:o,roleSessionName:r,webIdentityToken:s,providerId:n,policyArns:g,policy:p,durationSeconds:E}=e,{roleAssumerWithWebIdentity:i}=e;if(!i){let{getDefaultRoleAssumerWithWebIdentity:f}=await import("./sts-HDZNXPJY.js");i=f({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...t?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return i({RoleArn:o,RoleSessionName:r??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:s,ProviderId:n,PolicyArns:g,Policy:p,DurationSeconds:E})};var m="AWS_WEB_IDENTITY_TOKEN_FILE",S="AWS_ROLE_ARN",N="AWS_ROLE_SESSION_NAME",w=(e={})=>async t=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let o=e?.webIdentityTokenFile??process.env[m],r=e?.roleArn??process.env[S],s=e?.roleSessionName??process.env[N];if(!o||!r)throw new l("Web identity configuration not specified",{logger:e.logger});let n=await a({...e,webIdentityToken:c?.getTokenRecord?.()[o]??_(o,{encoding:"ascii"}),roleArn:r,roleSessionName:s})(t);return o===process.env[m]&&d(n,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h"),n};export{w as fromTokenFile,a as fromWebToken};

package/dist/dist-es-VD25UO4M.js

@@ -0,0 +1 @@
+import"./chunk-LDZWCNWB.js";import{w as d}from"./chunk-A3H5SUSR.js";import"./chunk-X6LE6K3W.js";import{m as l,x as c}from"./chunk-Z4YWESTY.js";import"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";import{readFileSync as _}from"fs";var a=e=>async t=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:o,roleSessionName:r,webIdentityToken:s,providerId:n,policyArns:g,policy:p,durationSeconds:E}=e,{roleAssumerWithWebIdentity:i}=e;if(!i){let{getDefaultRoleAssumerWithWebIdentity:f}=await import("./sts-GE4BCXER.js");i=f({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...t?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return i({RoleArn:o,RoleSessionName:r??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:s,ProviderId:n,PolicyArns:g,Policy:p,DurationSeconds:E})};var m="AWS_WEB_IDENTITY_TOKEN_FILE",S="AWS_ROLE_ARN",N="AWS_ROLE_SESSION_NAME",w=(e={})=>async t=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let o=e?.webIdentityTokenFile??process.env[m],r=e?.roleArn??process.env[S],s=e?.roleSessionName??process.env[N];if(!o||!r)throw new l("Web identity configuration not specified",{logger:e.logger});let n=await a({...e,webIdentityToken:c?.getTokenRecord?.()[o]??_(o,{encoding:"ascii"}),roleArn:r,roleSessionName:s})(t);return o===process.env[m]&&d(n,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h"),n};export{w as fromTokenFile,a as fromWebToken};

package/dist/dist-es-VZPXKLZQ.js

@@ -0,0 +1 @@
+import"./chunk-LDZWCNWB.js";import{w as f}from"./chunk-A3H5SUSR.js";import"./chunk-X6LE6K3W.js";import{m as c,r as l,w as p,x as a}from"./chunk-Z4YWESTY.js";import"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";import{exec as m}from"child_process";import{promisify as P}from"util";var u=(r,e,o)=>{if(e.Version!==1)throw Error(`Profile ${r} credential_process did not return Version 1.`);if(e.AccessKeyId===void 0||e.SecretAccessKey===void 0)throw Error(`Profile ${r} credential_process returned invalid credentials.`);if(e.Expiration){let i=new Date;if(new Date(e.Expiration)<i)throw Error(`Profile ${r} credential_process returned expired credentials.`)}let s=e.AccountId;!s&&o?.[r]?.aws_account_id&&(s=o[r].aws_account_id);let t={accessKeyId:e.AccessKeyId,secretAccessKey:e.SecretAccessKey,...e.SessionToken&&{sessionToken:e.SessionToken},...e.Expiration&&{expiration:new Date(e.Expiration)},...e.CredentialScope&&{credentialScope:e.CredentialScope},...s&&{accountId:s}};return f(t,"CREDENTIALS_PROCESS","w"),t};var w=async(r,e,o)=>{let s=e[r];if(e[r]){let t=s.credential_process;if(t!==void 0){let i=P(a?.getTokenRecord?.().exec??m);try{let{stdout:n}=await i(t),d;try{d=JSON.parse(n.trim())}catch{throw Error(`Profile ${r} credential_process returned invalid JSON.`)}return u(r,d,e)}catch(n){throw new c(n.message,{logger:o})}}else throw new c(`Profile ${r} did not contain credential_process.`,{logger:o})}else throw new c(`Profile ${r} could not be found in shared credentials file.`,{logger:o})};var K=(r={})=>async({callerClientConfig:e}={})=>{r.logger?.debug("@aws-sdk/credential-provider-process - fromProcess");let o=await p(r);return w(l({profile:r.profile??e?.profile}),o,r.logger)};export{K as fromProcess};

package/dist/dist-es-WOF2PBAL.js

@@ -0,0 +1,5 @@
+import"./chunk-SYWJHPRX.js";import{a as l}from"./chunk-MGGNSWUA.js";import"./chunk-WJLTO7JW.js";import"./chunk-TW5BOTVX.js";import{w as C}from"./chunk-A3H5SUSR.js";import"./chunk-X6LE6K3W.js";import{f as A,m as a}from"./chunk-Z4YWESTY.js";import{g as T,x as h}from"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";import g from"fs/promises";var u="169.254.170.2",R="169.254.170.23",w="[fd00:ec2::23]",p=(e,o)=>{if(e.protocol!=="https:"&&!(e.hostname===u||e.hostname===R||e.hostname===w)){if(e.hostname.includes("[")){if(e.hostname==="[::1]"||e.hostname==="[0000:0000:0000:0000:0000:0000:0000:0001]")return}else{if(e.hostname==="localhost")return;let n=e.hostname.split("."),r=t=>{let s=parseInt(t,10);return 0<=s&&s<=255};if(n[0]==="127"&&r(n[1])&&r(n[2])&&r(n[3])&&n.length===4)return}throw new a(`URL not accepted. It must either be HTTPS or match one of the following:
+  - loopback CIDR 127.0.0.0/8 or [::1/128]
+  - ECS container host 169.254.170.2
+  - EKS container host 169.254.170.23 or [fd00:ec2::23]`,{logger:o})}};function _(e){return new A({protocol:e.protocol,hostname:e.hostname,port:Number(e.port),path:e.pathname,query:Array.from(e.searchParams.entries()).reduce((o,[n,r])=>(o[n]=r,o),{}),fragment:e.hash})}async function I(e,o){let r=await h(e.body).transformToString();if(e.statusCode===200){let t=JSON.parse(r);if(typeof t.AccessKeyId!="string"||typeof t.SecretAccessKey!="string"||typeof t.Token!="string"||typeof t.Expiration!="string")throw new a("HTTP credential provider response not of the required format, an object matching: { AccessKeyId: string, SecretAccessKey: string, Token: string, Expiration: string(rfc3339) }",{logger:o});return{accessKeyId:t.AccessKeyId,secretAccessKey:t.SecretAccessKey,sessionToken:t.Token,expiration:T(t.Expiration)}}if(e.statusCode>=400&&e.statusCode<500){let t={};try{t=JSON.parse(r)}catch{}throw Object.assign(new a(`Server responded with status: ${e.statusCode}`,{logger:o}),{Code:t.Code,Message:t.Message})}throw new a(`Server responded with status: ${e.statusCode}`,{logger:o})}var f=(e,o,n)=>async()=>{for(let r=0;r<o;++r)try{return await e()}catch{await new Promise(s=>setTimeout(s,n))}return await e()};var S="AWS_CONTAINER_CREDENTIALS_RELATIVE_URI",O="http://169.254.170.2",L="AWS_CONTAINER_CREDENTIALS_FULL_URI",y="AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE",v="AWS_CONTAINER_AUTHORIZATION_TOKEN",U=(e={})=>{e.logger?.debug("@aws-sdk/credential-provider-http - fromHttp");let o,n=e.awsContainerCredentialsRelativeUri??process.env[S],r=e.awsContainerCredentialsFullUri??process.env[L],t=e.awsContainerAuthorizationToken??process.env[v],s=e.awsContainerAuthorizationTokenFile??process.env[y],i=e.logger?.constructor?.name==="NoOpLogger"||!e.logger?.warn?console.warn:e.logger.warn.bind(e.logger);if(n&&r&&(i("@aws-sdk/credential-provider-http: you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri."),i("awsContainerCredentialsFullUri will take precedence.")),t&&s&&(i("@aws-sdk/credential-provider-http: you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile."),i("awsContainerAuthorizationToken will take precedence.")),r)o=r;else if(n)o=`${O}${n}`;else throw new a(`No HTTP credential provider host provided.
+Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`,{logger:e.logger});let m=new URL(o);p(m,e.logger);let E=l.create({requestTimeout:e.timeout??1e3,connectionTimeout:e.timeout??1e3});return f(async()=>{let c=_(m);t?c.headers.Authorization=t:s&&(c.headers.Authorization=(await g.readFile(s)).toString());try{let d=await E.handle(c);return I(d.response).then(N=>C(N,"CREDENTIALS_HTTP","z"))}catch(d){throw new a(String(d),{logger:e.logger})}},e.maxRetries??3,e.timeout??1e3)};export{U as fromHttp};

package/dist/event-streams-TNY7XPBF.js

@@ -0,0 +1 @@
+import{c as R,e as W,s as q,t as S}from"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";var P=new Uint32Array(256);for(let s=0;s<256;++s){let e=s;for(let t=0;t<8;++t)e=e&1?3988292384^e>>>1:e>>>1;P[s]=e>>>0}var F=4294967295,G=class{digestLength=4;checksum=F;update(e){for(let t=0;t<e.length;++t)this.checksum=this.checksum>>>8^P[(this.checksum^e[t])&255]}digestSync(){return(this.checksum^F)>>>0}async digest(){let e=this.digestSync(),t=new Uint8Array(4);return new DataView(t.buffer).setUint32(0,e,!1),t}reset(){this.checksum=F}};import*as j from"zlib";var V=typeof j.crc32=="function"?j.crc32:void 0,k=V?_(V):G;function _(s){return class{digestLength=4;value=0;update(t){this.value=s(t,this.value)}digestSync(){return this.value>>>0}async digest(){let t=new Uint8Array(4);return new DataView(t.buffer).setUint32(0,this.digestSync(),!1),t}reset(){this.value=0}}}var U=class s{bytes;constructor(e){if(this.bytes=e,e.byteLength!==8)throw new Error("Int64 buffers must be exactly 8 bytes")}static fromNumber(e){if(e>9223372036854776e3||e<-9223372036854776e3)throw new Error(`${e} is too large (or, if negative, too small) to represent as an Int64`);let t=new Uint8Array(8);for(let r=7,n=Math.abs(Math.round(e));r>-1&&n>0;r--,n/=256)t[r]=n;return e<0&&Q(t),new s(t)}valueOf(){let e=this.bytes.slice(0),t=e[0]&128;return t&&Q(e),parseInt(S(e),16)*(t?-1:1)}toString(){return String(this.valueOf())}};function Q(s){for(let e=0;e<8;e++)s[e]^=255;for(let e=7;e>-1&&(s[e]++,s[e]===0);e--);}var B=class{toUtf8;fromUtf8;constructor(e,t){this.toUtf8=e,this.fromUtf8=t}format(e){let t=[];for(let a of Object.keys(e)){let i=this.fromUtf8(a);t.push(Uint8Array.from([i.byteLength]),i,this.formatHeaderValue(e[a]))}let r=new Uint8Array(t.reduce((a,i)=>a+i.byteLength,0)),n=0;for(let a of t)r.set(a,n),n+=a.byteLength;return r}formatHeaderValue(e){switch(e.type){case"boolean":return Uint8Array.from([e.value?m.boolTrue:m.boolFalse]);case"byte":return Uint8Array.from([m.byte,e.value]);case"short":let t=new DataView(new ArrayBuffer(3));return t.setUint8(0,m.short),t.setInt16(1,e.value,!1),new Uint8Array(t.buffer);case"integer":let r=new DataView(new ArrayBuffer(5));return r.setUint8(0,m.integer),r.setInt32(1,e.value,!1),new Uint8Array(r.buffer);case"long":let n=new Uint8Array(9);return n[0]=m.long,n.set(e.value.bytes,1),n;case"binary":let a=new DataView(new ArrayBuffer(3+e.value.byteLength));a.setUint8(0,m.byteArray),a.setUint16(1,e.value.byteLength,!1);let i=new Uint8Array(a.buffer);return i.set(e.value,3),i;case"string":let o=this.fromUtf8(e.value),l=new DataView(new ArrayBuffer(3+o.byteLength));l.setUint8(0,m.string),l.setUint16(1,o.byteLength,!1);let p=new Uint8Array(l.buffer);return p.set(o,3),p;case"timestamp":let h=new Uint8Array(9);return h[0]=m.timestamp,h.set(U.fromNumber(e.value.valueOf()).bytes,1),h;case"uuid":if(!ie.test(e.value))throw new Error(`Invalid UUID received: ${e.value}`);let c=new Uint8Array(17);return c[0]=m.uuid,c.set(q(e.value.replace(/-/g,"")),1),c}}parse(e){let t={},r=0;for(;r<e.byteLength;){let n=e.getUint8(r++),a=this.toUtf8(new Uint8Array(e.buffer,e.byteOffset+r,n));switch(r+=n,e.getUint8(r++)){case m.boolTrue:t[a]={type:X,value:!0};break;case m.boolFalse:t[a]={type:X,value:!1};break;case m.byte:t[a]={type:Y,value:e.getInt8(r++)};break;case m.short:t[a]={type:ee,value:e.getInt16(r,!1)},r+=2;break;case m.integer:t[a]={type:te,value:e.getInt32(r,!1)},r+=4;break;case m.long:t[a]={type:re,value:new U(new Uint8Array(e.buffer,e.byteOffset+r,8))},r+=8;break;case m.byteArray:let i=e.getUint16(r,!1);r+=2,t[a]={type:se,value:new Uint8Array(e.buffer,e.byteOffset+r,i)},r+=i;break;case m.string:let o=e.getUint16(r,!1);r+=2,t[a]={type:ne,value:this.toUtf8(new Uint8Array(e.buffer,e.byteOffset+r,o))},r+=o;break;case m.timestamp:t[a]={type:ae,value:new Date(new U(new Uint8Array(e.buffer,e.byteOffset+r,8)).valueOf())},r+=8;break;case m.uuid:let l=new Uint8Array(e.buffer,e.byteOffset+r,16);r+=16,t[a]={type:oe,value:`${S(l.subarray(0,4))}-${S(l.subarray(4,6))}-${S(l.subarray(6,8))}-${S(l.subarray(8,10))}-${S(l.subarray(10))}`};break;default:throw new Error("Unrecognized header type tag")}}return t}},m;(function(s){s[s.boolTrue=0]="boolTrue",s[s.boolFalse=1]="boolFalse",s[s.byte=2]="byte",s[s.short=3]="short",s[s.integer=4]="integer",s[s.long=5]="long",s[s.byteArray=6]="byteArray",s[s.string=7]="string",s[s.timestamp=8]="timestamp",s[s.uuid=9]="uuid"})(m||(m={}));var X="boolean",Y="byte",ee="short",te="integer",re="long",se="binary",ne="string",ae="timestamp",oe="uuid",ie=/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;var Z=4,v=Z*2,M=4,ce=v+M*2;function E({byteLength:s,byteOffset:e,buffer:t}){if(s<ce)throw new Error("Provided message too short to accommodate event stream message overhead");let r=new DataView(t,e,s),n=r.getUint32(0,!1);if(s!==n)throw new Error("Reported message length does not match received message length");let a=r.getUint32(Z,!1),i=r.getUint32(v,!1),o=r.getUint32(s-M,!1),l=new k;if(l.update(new Uint8Array(t,e,v)),i!==l.digestSync())throw new Error(`The prelude checksum specified in the message (${i}) does not match the calculated CRC32 checksum (${l.digestSync()})`);if(l.update(new Uint8Array(t,e+v,s-(v+M))),o!==l.digestSync())throw new Error(`The message checksum (${l.digestSync()}) did not match the expected value of ${o}`);return{headers:new DataView(t,e+v+M,a),body:new Uint8Array(t,e+v+M+a,n-a-(v+M+M))}}var T=class{headerMarshaller;messageBuffer;isEndOfStream;constructor(e,t){this.headerMarshaller=new B(e,t),this.messageBuffer=[],this.isEndOfStream=!1}feed(e){this.messageBuffer.push(this.decode(e))}endOfStream(){this.isEndOfStream=!0}getMessage(){let e=this.messageBuffer.pop(),t=this.isEndOfStream;return{getMessage(){return e},isEndOfStream(){return t}}}getAvailableMessages(){let e=this.messageBuffer;this.messageBuffer=[];let t=this.isEndOfStream;return{getMessages(){return e},isEndOfStream(){return t}}}encode({headers:e,body:t}){let r=this.headerMarshaller.format(e),n=r.byteLength+t.byteLength+16,a=new Uint8Array(n),i=new DataView(a.buffer,a.byteOffset,a.byteLength),o=new k;return i.setUint32(0,n,!1),i.setUint32(4,r.byteLength,!1),o.update(a.subarray(0,8)),i.setUint32(8,o.digestSync(),!1),a.set(r,12),a.set(t,r.byteLength+12),o.update(a.subarray(8,n-4)),i.setUint32(n-4,o.digestSync(),!1),a}decode(e){let{headers:t,body:r}=E(e);return{headers:this.headerMarshaller.parse(t),body:r}}formatHeaders(e){return this.headerMarshaller.format(e)}};var z=class{options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(let e of this.options.inputStream)yield this.options.decoder.decode(e)}};var N=class{options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(let e of this.options.messageStream)yield this.options.encoder.encode(e);this.options.includeEndFrame&&(yield new Uint8Array(0))}};var O=class{options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(let e of this.options.messageStream){let t=await this.options.deserializer(e);t!==void 0&&(yield t)}}};var A=class{options;constructor(e){this.options=e}[Symbol.asyncIterator](){return this.asyncIterator()}async*asyncIterator(){for await(let e of this.options.inputStream)yield this.options.serializer(e)}};import{Readable as ue}from"stream";function J(s){let e=0,t=0,r=null,n=null,a=o=>{if(typeof o!="number")throw new Error("Attempted to allocate an event message where size was not a number: "+o);e=o,t=4,r=new Uint8Array(o),new DataView(r.buffer).setUint32(0,o,!1)},i=async function*(){let o=s[Symbol.asyncIterator]();for(;;){let{value:l,done:p}=await o.next();if(p){if(e)if(e===t)yield r;else throw new Error("Truncated event message received.");else return;return}let h=l.length,c=0;for(;c<h;){if(!r){let u=h-c;n||(n=new Uint8Array(4));let d=Math.min(4-t,u);if(n.set(l.slice(c,c+d),t),t+=d,c+=d,t<4)break;a(new DataView(n.buffer).getUint32(0,!1)),n=null}let f=Math.min(e-t,h-c);r.set(l.slice(c,c+f),t),t+=f,c+=f,e&&e===t&&(yield r,r=null,e=0,t=0)}}};return{[Symbol.asyncIterator]:i}}function le(s,e){let t=$(e.deserializer,e.toUtf8);return{[Symbol.asyncIterator]:async function*(){for await(let r of s){let n=e.eventStreamCodec.decode(r),a=await t(n);a!==void 0&&(yield a)}}}}function $(s,e){return async function(t){let{value:r}=t.headers[":message-type"];if(r==="error"){let n=new Error(t.headers[":error-message"].value||"UnknownError");throw n.name=t.headers[":error-code"].value,n}else if(r==="exception"){let n=t.headers[":exception-type"].value,a={[n]:t},i=await s(a);if(i.$unknown){let o=new Error(e(t.body));throw o.name=n,o}throw i[n]}else if(r==="event"){let n={[t.headers[":event-type"].value]:t},a=await s(n);return a.$unknown?void 0:a}else throw Error(`Unrecognizable event type: ${t.headers[":event-type"].value}`)}}var C=class{eventStreamCodec;utfEncoder;constructor({utf8Encoder:e,utf8Decoder:t}){this.eventStreamCodec=new T(e,t),this.utfEncoder=e}deserialize(e,t){let r=J(e);return new O({messageStream:new z({inputStream:r,decoder:this.eventStreamCodec}),deserializer:$(t,this.utfEncoder)})}serialize(e,t){return new N({messageStream:new A({inputStream:e,serializer:t}),encoder:this.eventStreamCodec,includeEndFrame:!0})}},fe=s=>new C(s);var L=class{universalMarshaller;constructor({utf8Encoder:e,utf8Decoder:t}){this.universalMarshaller=new C({utf8Decoder:t,utf8Encoder:e})}deserialize(e,t){let r=typeof e[Symbol.asyncIterator]=="function"?e:de(e);return this.universalMarshaller.deserialize(r,t)}serialize(e,t){return ue.from(this.universalMarshaller.serialize(e,t))}},me=s=>new L(s);async function*de(s){let e=!1,t=!1,r=new Array;for(s.on("error",n=>{if(e||(e=!0),n)throw n}),s.on("data",n=>{r.push(n)}),s.on("end",()=>{e=!0});!t;){let n=await new Promise(a=>setTimeout(()=>a(r.shift()),0));n&&(yield n),t=e&&r.length===0}}var ye=s=>({[Symbol.asyncIterator]:async function*(){let e=s.getReader();try{for(;;){let{done:t,value:r}=await e.read();if(t)return;yield r}}finally{e.releaseLock()}}}),he=s=>{let e=s[Symbol.asyncIterator]();return new ReadableStream({async pull(t){let{done:r,value:n}=await e.next();if(r)return t.close();t.enqueue(n)}})};var pe=s=>Object.assign(s,{eventStreamMarshaller:s.eventStreamSerdeProvider(s)});var D=class{marshaller;serializer;deserializer;serdeContext;defaultContentType;constructor({marshaller:e,serializer:t,deserializer:r,serdeContext:n,defaultContentType:a}){this.marshaller=e,this.serializer=t,this.deserializer=r,this.serdeContext=n,this.defaultContentType=a}async serializeEventStream({eventStream:e,requestSchema:t,initialRequest:r}){let n=this.marshaller,a=t.getEventStreamMember(),i=t.getMemberSchema(a),o=this.serializer,l=this.defaultContentType,p=Symbol("initialRequestMarker"),h={async*[Symbol.asyncIterator](){if(r){let c={":event-type":{type:"string",value:"initial-request"},":message-type":{type:"string",value:"event"},":content-type":{type:"string",value:l}};o.write(t,r);let f=o.flush();yield{[p]:!0,headers:c,body:f}}for await(let c of e)yield c}};return n.serialize(h,c=>{if(c[p])return{headers:c.headers,body:c.body};let f="";for(let y in c)if(y!=="__type"){f=y;break}let{additionalHeaders:u,body:d,eventType:g,explicitPayloadContentType:b}=this.writeEventBody(f,i,c);return{headers:{":event-type":{type:"string",value:g},":message-type":{type:"string",value:"event"},":content-type":{type:"string",value:b??l},...u},body:d}})}async deserializeEventStream({response:e,responseSchema:t,initialResponseContainer:r}){let n=this.marshaller,a=t.getEventStreamMember(),o=t.getMemberSchema(a).getMemberSchemas(),l=Symbol("initialResponseMarker"),p=n.deserialize(e.body,async f=>{let u="";for(let g in f)if(g!=="__type"){u=g;break}let d=f[u].body;if(u==="initial-response"){let g=await this.deserializer.read(t,d);return delete g[a],{[l]:!0,...g}}else if(u in o){let g=o[u];if(g.isStructSchema()){let b={},w=!1;for(let[y,I]of g.structIterator()){let{eventHeader:H,eventPayload:K}=I.getMergedTraits();if(w=w||!!(H||K),K)I.isBlobSchema()?b[y]=d:I.isStringSchema()?b[y]=(this.serdeContext?.utf8Encoder??W)(d):I.isStructSchema()&&(b[y]=await this.deserializer.read(I,d));else if(H){let x=f[u].headers[y]?.value;x!=null&&(I.isNumericSchema()?x&&typeof x=="object"&&"bytes"in x?b[y]=BigInt(x.toString()):b[y]=Number(x):b[y]=x)}}if(w)return{[u]:b};if(d.byteLength===0)return{[u]:{}}}return{[u]:await this.deserializer.read(g,d)}}else return{$unknown:f}}),h=p[Symbol.asyncIterator](),c=await h.next();if(c.done)return p;if(c.value?.[l]){if(!t)throw new Error("@smithy::core/protocols - initial-response event encountered in event stream but no response schema given.");for(let f in c.value)r[f]=c.value[f]}return{async*[Symbol.asyncIterator](){for(c?.value?.[l]||(yield c.value);;){let{done:f,value:u}=await h.next();if(f)break;yield u}}}}writeEventBody(e,t,r){let n=this.serializer,a=e,i=null,o,l=t.getSchema()[4].includes(e),p={};if(l){let f=t.getMemberSchema(e);if(f.isStructSchema()){for(let[u,d]of f.structIterator()){let{eventHeader:g,eventPayload:b}=d.getMergedTraits();if(b)i=u;else if(g){let w=r[e][u],y="binary";d.isNumericSchema()?(-2)**31<=w&&w<=2**31-1?y="integer":y="long":d.isTimestampSchema()?y="timestamp":d.isStringSchema()?y="string":d.isBooleanSchema()&&(y="boolean"),w!=null&&(p[u]={type:y,value:w},delete r[e][u])}}if(i!==null){let u=f.getMemberSchema(i);u.isBlobSchema()?o="application/octet-stream":u.isStringSchema()&&(o="text/plain"),n.write(u,r[e][i])}else n.write(f,r[e])}else if(f.isUnitSchema())n.write(f,{});else throw new Error("@smithy/core/event-streams - non-struct member not supported in event stream union.")}else{let[f,u]=r[e];a=f,n.write(15,u)}let h=n.flush()??new Uint8Array;return{body:typeof h=="string"?(this.serdeContext?.utf8Decoder??R)(h):h,eventType:a,explicitPayloadContentType:o,additionalHeaders:p}}};export{T as EventStreamCodec,L as EventStreamMarshaller,D as EventStreamSerde,B as HeaderMarshaller,U as Int64,z as MessageDecoderStream,N as MessageEncoderStream,O as SmithyMessageDecoderStream,A as SmithyMessageEncoderStream,C as UniversalEventStreamMarshaller,me as eventStreamSerdeProvider,J as getChunkedStream,$ as getMessageUnmarshaller,le as getUnmarshalledStream,he as iterableToReadableStream,ye as readableStreamToIterable,pe as resolveEventStreamSerdeConfig,fe as universalEventStreamSerdeProvider};

package/dist/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{a as Cn}from"./chunk-VFAEL5BA.js";import{b as s}from"./chunk-JDX5NXDX.js";import{a as h,b as O,c as z,d as we,e as De,f as he}from"./chunk-LGUMYJ4Q.js";import{a as jo}from"./chunk-IYWUY3VA.js";import{readFileSync as bd,realpathSync as No}from"fs";import{dirname as vd,join as wd,resolve as $o}from"path";import{fileURLToPath as wn}from"url";import{Command as Rd}from"commander";import{execFileSync as Mt}from"child_process";import{promises as Pe}from"fs";import X from"path";import*as w from"@clack/prompts";import qe from"picocolors";var c={SUCCESS:0,ERROR:1,INVALID_ARGS:2,NOT_FOUND:3,PERMISSION_DENIED:4,CONFLICT:5,NETWORK_ERROR:6,TIMEOUT:7,CANCELLED:8,CONFIG_ERROR:9,DRY_RUN_OK:10,INCOMPATIBLE:11,RESOURCE_EXHAUSTED:12},En={[c.SUCCESS]:"Command completed successfully",[c.ERROR]:"General or unknown error occurred",[c.INVALID_ARGS]:"Invalid arguments or options provided",[c.NOT_FOUND]:"Requested resource not found",[c.PERMISSION_DENIED]:"Permission denied or authentication required",[c.CONFLICT]:"Resource already exists",[c.NETWORK_ERROR]:"Network or external service error (may be retryable)",[c.TIMEOUT]:"Operation timed out (may be retryable)",[c.CANCELLED]:"Operation cancelled by user",[c.CONFIG_ERROR]:"Configuration error or missing configuration",[c.DRY_RUN_OK]:"Dry-run completed successfully",[c.INCOMPATIBLE]:"Incompatible version or dependency conflict",[c.RESOURCE_EXHAUSTED]:"System resource exhausted"};import{existsSync as Lo,readdirSync as On,readFileSync as Do,statSync as Fo}from"fs";import{dirname as xn,join as Ft,parse as Bo}from"path";import{fileURLToPath as Mo}from"url";var kn={"@nebutra/ui":"^0.2.2","@nebutra/tokens":"^0.1.2","@nebutra/icons":"^0.1.2","@nebutra/brand":"^0.1.2","@nebutra/design-tokens":"^0.1.2","@nebutra/design-sync":"^0.1.2","@nebutra/identity":"^0.1.2","@nebutra/tenant":"^0.1.3","@nebutra/permissions":"^0.1.3","@nebutra/vault":"^0.1.2","@nebutra/audit":"^0.1.2","@nebutra/billing":"^0.1.3","@nebutra/contracts":"^0.1.2","@nebutra/license":"^0.1.3","@nebutra/metering":"^0.1.2","@nebutra/queue":"^0.1.3","@nebutra/search":"^0.1.2","@nebutra/cache":"^0.0.3","@nebutra/notifications":"^0.1.3","@nebutra/webhooks":"^0.1.3","@nebutra/uploads":"^0.1.2","@nebutra/email":"^0.1.2","@nebutra/agents":"^1.1.2","@nebutra/mcp":"^0.1.3","@nebutra/logger":"^0.1.2"};function ut(e){return kn[e]??null}var Go=`const featureEnvKeys = {{envKeysArray}} as const;
+import{a as Cn}from"./chunk-PA4CKDRJ.js";import{b as s}from"./chunk-JDX5NXDX.js";import{a as h,b as O,c as z,d as we,e as De,f as he}from"./chunk-LGUMYJ4Q.js";import{a as jo}from"./chunk-IYWUY3VA.js";import{readFileSync as bd,realpathSync as No}from"fs";import{dirname as vd,join as wd,resolve as $o}from"path";import{fileURLToPath as wn}from"url";import{Command as Rd}from"commander";import{execFileSync as Mt}from"child_process";import{promises as Pe}from"fs";import X from"path";import*as w from"@clack/prompts";import qe from"picocolors";var c={SUCCESS:0,ERROR:1,INVALID_ARGS:2,NOT_FOUND:3,PERMISSION_DENIED:4,CONFLICT:5,NETWORK_ERROR:6,TIMEOUT:7,CANCELLED:8,CONFIG_ERROR:9,DRY_RUN_OK:10,INCOMPATIBLE:11,RESOURCE_EXHAUSTED:12},En={[c.SUCCESS]:"Command completed successfully",[c.ERROR]:"General or unknown error occurred",[c.INVALID_ARGS]:"Invalid arguments or options provided",[c.NOT_FOUND]:"Requested resource not found",[c.PERMISSION_DENIED]:"Permission denied or authentication required",[c.CONFLICT]:"Resource already exists",[c.NETWORK_ERROR]:"Network or external service error (may be retryable)",[c.TIMEOUT]:"Operation timed out (may be retryable)",[c.CANCELLED]:"Operation cancelled by user",[c.CONFIG_ERROR]:"Configuration error or missing configuration",[c.DRY_RUN_OK]:"Dry-run completed successfully",[c.INCOMPATIBLE]:"Incompatible version or dependency conflict",[c.RESOURCE_EXHAUSTED]:"System resource exhausted"};import{existsSync as Lo,readdirSync as On,readFileSync as Do,statSync as Fo}from"fs";import{dirname as xn,join as Ft,parse as Bo}from"path";import{fileURLToPath as Mo}from"url";var kn={"@nebutra/ui":"^0.2.2","@nebutra/tokens":"^0.1.2","@nebutra/icons":"^0.1.2","@nebutra/brand":"^0.1.2","@nebutra/design-tokens":"^0.1.2","@nebutra/design-sync":"^0.1.2","@nebutra/identity":"^0.1.2","@nebutra/tenant":"^0.1.3","@nebutra/permissions":"^0.1.3","@nebutra/vault":"^0.1.2","@nebutra/audit":"^0.1.2","@nebutra/billing":"^0.1.3","@nebutra/contracts":"^0.1.2","@nebutra/license":"^0.1.3","@nebutra/metering":"^0.1.2","@nebutra/queue":"^0.1.3","@nebutra/search":"^0.1.2","@nebutra/cache":"^0.0.3","@nebutra/notifications":"^0.1.3","@nebutra/webhooks":"^0.1.3","@nebutra/uploads":"^0.1.2","@nebutra/email":"^0.1.2","@nebutra/agents":"^1.1.2","@nebutra/mcp":"^0.1.3","@nebutra/logger":"^0.1.2"};function ut(e){return kn[e]??null}var Go=`const featureEnvKeys = {{envKeysArray}} as const;
 
 export const platformFeature = {
   name: "{{feature}}",
@@ -722,7 +722,7 @@ Flags:
   --profile <name>                  Enable Docker Compose profile (search, notifications, etc.)
   --format <type>                   Output format: json, plain (default: plain, auto-json in non-TTY)
     `)}import tn from"fs";import ic from"path";import*as re from"@clack/prompts";import At from"picocolors";var cc={$schema:"https://nebutra.com/schema.json",componentsDirectory:"packages/design/ui/src/components",tailwind:{config:"tailwind.config.ts",css:"packages/design/tokens/styles.css",baseColor:"slate",cssVariables:!0},aliases:{components:"@nebutra/ui",utils:"@nebutra/ui/utils"}};function lc(){return process.stdout.isTTY===!0}function dc(e){return e.yes===!0||e.dryRun===!0||!lc()}function uc(e,t,n){return{operation:n?"update":"create",path:e,...n&&{before:n},after:t}}async function Or(e={}){let t=process.cwd(),n=ic.join(t,"nebutra.config.json"),r=tn.existsSync(n);e.ifNotExists&&r&&(s.info("nebutra.config.json already exists, skipping initialization."),process.exit(c.SUCCESS));let o=dc(e);o||re.intro(At.bgCyan(At.black(" nebutra init "))),r&&!o&&(re.log.warn("nebutra.config.json already exists in this directory."),await re.confirm({message:"Do you want to overwrite it?",initialValue:!1})||(re.outro("Operation aborted."),process.exit(c.CANCELLED)));let a={...cc};if(e.dryRun){let i=r?JSON.parse(tn.readFileSync(n,"utf-8")):void 0,l=uc(n,a,i);A(l),d("Dry-run completed. No changes made."),process.exit(c.DRY_RUN_OK)}o?s.info("Initializing Nebutra CLI configuration..."):re.spinner().start("Initializing Nebutra CLI configuration..."),tn.writeFileSync(n,JSON.stringify(a,null,2)+`
-`),o?(s.success("Configuration saved to nebutra.config.json"),s.info('Initialization complete! You can now use "nebutra add" to start injecting components.')):(await new Promise(i=>setTimeout(i,800)),re.spinner().stop(At.green("Configuration saved to nebutra.config.json")),re.outro(At.cyan('Initialization complete! You can now use "nebutra add" to start injecting components.'))),process.exit(c.SUCCESS)}import nn from"fs/promises";import gc from"os";import rn from"path";import*as I from"@clack/prompts";import oe from"picocolors";var mc="https://analytics.nebutra.com";function pc(e={}){if(e.noTelemetry===!0)return!0;let t=process.env.NEBUTRA_TELEMETRY;return t==="0"||t==="false"}function fc(){return process.env.npm_package_version??"0.0.0-dev"}function _t(e,t={}){pc(t)||(async()=>{try{let n=await import("./dist-QEDK2U3Q.js");if(typeof n.createProductAnalyticsClient!="function")return;let r=n.createProductAnalyticsClient({posthog:{apiKey:process.env.POSTHOG_KEY??process.env.NEXT_PUBLIC_POSTHOG_KEY??process.env.NEBUTRA_POSTHOG_KEY??"",host:process.env.POSTHOG_HOST??process.env.NEXT_PUBLIC_POSTHOG_HOST??process.env.NEBUTRA_POSTHOG_HOST??mc},onError:()=>{}});if(typeof r?.track!="function")return;let o=r.track("license.cli",{action:e.action,cli_version:fc(),...e.tier?{license_tier:e.tier}:{},...e.type?{license_type:e.type}:{},...e.error_code?{error_code:e.error_code}:{}});o&&typeof o.then=="function"&&await o.catch(()=>{})}catch{}})()}var Ar=process.env.NEBUTRA_LICENSE_API_URL??"https://nebutra.com";async function _r(){let e=gc.homedir(),t=rn.join(e,".config","nebutra");try{await nn.mkdir(t,{recursive:!0})}catch{}return t}async function yc(e){let t=`${Ar}/api/license/validate?key=${encodeURIComponent(e)}`,n;try{n=await fetch(t,{signal:AbortSignal.timeout(1e4)})}catch{throw new Error(`Could not reach the Nebutra license server (${Ar}). Check your internet connection or set NEBUTRA_LICENSE_API_URL.`)}if(n.status===404)throw new Error("License key not found. Please check the key and try again.");if(n.status===410)throw new Error("License key has expired. Please renew your license at nebutra.com.");if(!n.ok)throw new Error(`License validation failed (HTTP ${n.status}). Please try again later.`);let r=await n.json();if(!r.valid)throw new Error("License key is not valid. Please check the key and try again.");return{tier:r.tier??"UNKNOWN",type:r.type??"UNKNOWN"}}function hc(e){let t=e instanceof Error?e.message:String(e);return/Invalid license key format/i.test(t)?"invalid_format":/license server/i.test(t)?"network_error":/not found/i.test(t)?"not_found":/expired/i.test(t)?"expired":/not valid/i.test(t)?"invalid_key":/HTTP \d+/i.test(t)?"http_error":"unknown"}async function bc(e,t){let n=t.quiet===!0;n||I.intro(oe.bgCyan(oe.black(" Nebutra License Activation "))),_t({action:"activate_attempted"});try{if(e.length<10)throw new Error("Invalid license key format.");n||I.log.step("Validating license key with Nebutra...");let{tier:r,type:o}=await yc(e),a=await _r(),i=rn.join(a,"license.json");await nn.writeFile(i,JSON.stringify({licenseKey:e,tier:r,type:o,activatedAt:new Date().toISOString()},null,2),"utf-8"),n||(I.log.success(oe.green(`${r} license activated and saved to ${i}`)),I.outro(oe.cyan("Premium CLI capabilities are now unlocked!"))),_t({action:"activated",tier:r,type:o})}catch(r){_t({action:"failed",error_code:hc(r)}),n||(I.log.error(oe.red("Activation failed")),s.error(r instanceof Error?r.message:String(r)),I.outro("Please check your key and try again.")),process.exit(c.ERROR)}}async function vc(e){let t=e.quiet===!0;t||I.intro(oe.bgCyan(oe.black(" Nebutra License Status ")));try{let n=await _r(),r=rn.join(n,"license.json"),o=await nn.readFile(r,"utf-8"),a=JSON.parse(o);if(a.licenseKey)t||(I.log.success(oe.green("License is active!")),I.log.info(`Key:       ${a.licenseKey.substring(0,8)}...`),a.tier&&I.log.info(`Tier:      ${oe.bold(a.tier)}`),a.type&&I.log.info(`Type:      ${a.type}`),I.log.info(`Activated: ${new Date(a.activatedAt).toLocaleString()}`),I.outro(oe.cyan("You are ready to use premium features.")));else throw new Error("License key not found in config.")}catch{t||(I.log.warn(oe.yellow("No active license found locally.")),I.log.message(oe.dim("Run `nebutra license activate <key>` to unlock premium features.")),I.outro("")),process.exit(c.NOT_FOUND)}}function Pr(e){let t=e.command("license").description("Manage your Nebutra-Sailor commercial license");t.command("activate <key>").description("Activate a commercial license key for local development").option("--quiet","Suppress output").action(async(n,r)=>{await bc(n,r)}),t.command("status").description("Check the locally configured license status").option("--quiet","Suppress output").action(async n=>{await vc(n)})}import{existsSync as Ir,readFileSync as wc,writeFileSync as Rc}from"fs";import{dirname as Sc,join as Nr,parse as Cc}from"path";import*as Pt from"@clack/prompts";function Ec(e){let t=e,{root:n}=Cc(t);for(;;){if(Ir(Nr(t,"package.json")))return t;if(t===n)return null;let r=Sc(t);if(r===t)return null;t=r}}function kc(e){if(!Ir(e))return{};try{let t=JSON.parse(wc(e,"utf-8"));return t&&typeof t=="object"&&!Array.isArray(t)?t:{}}catch{return{}}}function xc(e,t){Rc(e,JSON.stringify(t,null,2)+`
+`),o?(s.success("Configuration saved to nebutra.config.json"),s.info('Initialization complete! You can now use "nebutra add" to start injecting components.')):(await new Promise(i=>setTimeout(i,800)),re.spinner().stop(At.green("Configuration saved to nebutra.config.json")),re.outro(At.cyan('Initialization complete! You can now use "nebutra add" to start injecting components.'))),process.exit(c.SUCCESS)}import nn from"fs/promises";import gc from"os";import rn from"path";import*as I from"@clack/prompts";import oe from"picocolors";var mc="https://analytics.nebutra.com";function pc(e={}){if(e.noTelemetry===!0)return!0;let t=process.env.NEBUTRA_TELEMETRY;return t==="0"||t==="false"}function fc(){return process.env.npm_package_version??"0.0.0-dev"}function _t(e,t={}){pc(t)||(async()=>{try{let n=await import("./dist-WSEDRKMF.js");if(typeof n.createProductAnalyticsClient!="function")return;let r=n.createProductAnalyticsClient({posthog:{apiKey:process.env.POSTHOG_KEY??process.env.NEXT_PUBLIC_POSTHOG_KEY??process.env.NEBUTRA_POSTHOG_KEY??"",host:process.env.POSTHOG_HOST??process.env.NEXT_PUBLIC_POSTHOG_HOST??process.env.NEBUTRA_POSTHOG_HOST??mc},onError:()=>{}});if(typeof r?.track!="function")return;let o=r.track("license.cli",{action:e.action,cli_version:fc(),...e.tier?{license_tier:e.tier}:{},...e.type?{license_type:e.type}:{},...e.error_code?{error_code:e.error_code}:{}});o&&typeof o.then=="function"&&await o.catch(()=>{})}catch{}})()}var Ar=process.env.NEBUTRA_LICENSE_API_URL??"https://nebutra.com";async function _r(){let e=gc.homedir(),t=rn.join(e,".config","nebutra");try{await nn.mkdir(t,{recursive:!0})}catch{}return t}async function yc(e){let t=`${Ar}/api/license/validate?key=${encodeURIComponent(e)}`,n;try{n=await fetch(t,{signal:AbortSignal.timeout(1e4)})}catch{throw new Error(`Could not reach the Nebutra license server (${Ar}). Check your internet connection or set NEBUTRA_LICENSE_API_URL.`)}if(n.status===404)throw new Error("License key not found. Please check the key and try again.");if(n.status===410)throw new Error("License key has expired. Please renew your license at nebutra.com.");if(!n.ok)throw new Error(`License validation failed (HTTP ${n.status}). Please try again later.`);let r=await n.json();if(!r.valid)throw new Error("License key is not valid. Please check the key and try again.");return{tier:r.tier??"UNKNOWN",type:r.type??"UNKNOWN"}}function hc(e){let t=e instanceof Error?e.message:String(e);return/Invalid license key format/i.test(t)?"invalid_format":/license server/i.test(t)?"network_error":/not found/i.test(t)?"not_found":/expired/i.test(t)?"expired":/not valid/i.test(t)?"invalid_key":/HTTP \d+/i.test(t)?"http_error":"unknown"}async function bc(e,t){let n=t.quiet===!0;n||I.intro(oe.bgCyan(oe.black(" Nebutra License Activation "))),_t({action:"activate_attempted"});try{if(e.length<10)throw new Error("Invalid license key format.");n||I.log.step("Validating license key with Nebutra...");let{tier:r,type:o}=await yc(e),a=await _r(),i=rn.join(a,"license.json");await nn.writeFile(i,JSON.stringify({licenseKey:e,tier:r,type:o,activatedAt:new Date().toISOString()},null,2),"utf-8"),n||(I.log.success(oe.green(`${r} license activated and saved to ${i}`)),I.outro(oe.cyan("Premium CLI capabilities are now unlocked!"))),_t({action:"activated",tier:r,type:o})}catch(r){_t({action:"failed",error_code:hc(r)}),n||(I.log.error(oe.red("Activation failed")),s.error(r instanceof Error?r.message:String(r)),I.outro("Please check your key and try again.")),process.exit(c.ERROR)}}async function vc(e){let t=e.quiet===!0;t||I.intro(oe.bgCyan(oe.black(" Nebutra License Status ")));try{let n=await _r(),r=rn.join(n,"license.json"),o=await nn.readFile(r,"utf-8"),a=JSON.parse(o);if(a.licenseKey)t||(I.log.success(oe.green("License is active!")),I.log.info(`Key:       ${a.licenseKey.substring(0,8)}...`),a.tier&&I.log.info(`Tier:      ${oe.bold(a.tier)}`),a.type&&I.log.info(`Type:      ${a.type}`),I.log.info(`Activated: ${new Date(a.activatedAt).toLocaleString()}`),I.outro(oe.cyan("You are ready to use premium features.")));else throw new Error("License key not found in config.")}catch{t||(I.log.warn(oe.yellow("No active license found locally.")),I.log.message(oe.dim("Run `nebutra license activate <key>` to unlock premium features.")),I.outro("")),process.exit(c.NOT_FOUND)}}function Pr(e){let t=e.command("license").description("Manage your Nebutra-Sailor commercial license");t.command("activate <key>").description("Activate a commercial license key for local development").option("--quiet","Suppress output").action(async(n,r)=>{await bc(n,r)}),t.command("status").description("Check the locally configured license status").option("--quiet","Suppress output").action(async n=>{await vc(n)})}import{existsSync as Ir,readFileSync as wc,writeFileSync as Rc}from"fs";import{dirname as Sc,join as Nr,parse as Cc}from"path";import*as Pt from"@clack/prompts";function Ec(e){let t=e,{root:n}=Cc(t);for(;;){if(Ir(Nr(t,"package.json")))return t;if(t===n)return null;let r=Sc(t);if(r===t)return null;t=r}}function kc(e){if(!Ir(e))return{};try{let t=JSON.parse(wc(e,"utf-8"));return t&&typeof t=="object"&&!Array.isArray(t)?t:{}}catch{return{}}}function xc(e,t){Rc(e,JSON.stringify(t,null,2)+`
 `)}async function Oc(e,t){let n=t.format==="json",r=Ec(process.cwd());r||(n?console.log(JSON.stringify({command:"link",success:!1,error:"No package.json found upstream"},null,2)):s.error("No package.json found in current or parent directories."),process.exit(c.NOT_FOUND));let o=e;if(!o){t.yes&&(n?console.log(JSON.stringify({command:"link",success:!1,error:"project-id required in --yes mode"},null,2)):s.error("project-id is required when running with --yes / non-interactive."),process.exit(c.INVALID_ARGS));let u=await Pt.text({message:"Project ID to link to:",placeholder:"proj_abc123",validate:m=>m&&m.trim().length>0?void 0:"Project ID cannot be empty"});Pt.isCancel(u)&&(s.warn("Cancelled"),process.exit(c.CANCELLED)),o=String(u).trim()}let a=Nr(r,"nebutra.config.json"),l={...kc(a),projectId:o};xc(a,l),n?console.log(JSON.stringify({command:"link",success:!0,projectId:o,configPath:a},null,2)):s.success(`Linked to project: ${o}`)}function $r(e){e.command("link [project-id]").description("Link the current project to a Nebutra project id").option("--format <type>","Output format: json or plain").action(async(t,n,r)=>{let o=r?.optsWithGlobals?.()||n;await Oc(t,{yes:o.yes||!1,format:n.format||o.format})})}import{existsSync as Tr,rmSync as Ac,unlinkSync as _c}from"fs";import{homedir as Ur,platform as Pc}from"os";import{join as nt}from"path";function Ic(){if(Pc()==="win32"){let t=process.env.LOCALAPPDATA||nt(Ur(),"AppData","Local");return nt(t,"nebutra")}let e=process.env.XDG_CONFIG_HOME;return e?nt(e,"nebutra"):nt(Ur(),".config","nebutra")}var Nc=["auth.json","session.json","token","credentials.json"];async function $c(e){let t=Ic(),n=e.format==="json",r=0,o=[];if(e.all){if(Tr(t))try{Ac(t,{recursive:!0,force:!0}),r=1,o.push(t)}catch(a){let i=a instanceof Error?a.message:String(a);n?console.log(JSON.stringify({command:"logout",success:!1,error:i},null,2)):s.error(`Failed to clear config directory: ${i}`),process.exit(c.PERMISSION_DENIED)}}else for(let a of Nc){let i=nt(t,a);if(Tr(i))try{_c(i),r++,o.push(i)}catch{}}r===0&&(n?console.log(JSON.stringify({command:"logout",success:!0,alreadyLoggedOut:!0,removed:[]},null,2)):s.info("Already logged out"),process.exit(c.SUCCESS)),n?console.log(JSON.stringify({command:"logout",success:!0,removed:o,clearedAll:!!e.all},null,2)):s.success(e.all?"Cleared all nebutra config":"Logged out of nebutra.com")}function jr(e){e.command("logout").description("Clear stored authentication credentials").option("--all","Clear ALL local config, not just auth tokens").option("--format <type>","Output format: json or plain").action(async(t,n)=>{let r=n?.optsWithGlobals?.()||t;await $c({all:t.all||!1,format:t.format||r.format})})}import{spawn as Tc}from"child_process";import{dirname as Uc,resolve as jc}from"path";import{fileURLToPath as Lc}from"url";import*as de from"@clack/prompts";import ve from"picocolors";var Dc=Uc(Lc(import.meta.url));function Fc(){let e=[()=>jc(Dc,"../../../mcp/dist/server/contextServer.js")];for(let t of e)try{return t()}catch(n){s.debug("MCP server binary resolution strategy failed",{error:n})}return"nebutra-mcp"}function Lr(e){e.command("mcp").description("Start the Nebutra MCP server for Cursor/Windsurf").option("--stdio","Use stdio transport (default)",!0).action(async t=>{de.intro(ve.bgCyan(ve.black(" nebutra mcp ")));try{let n=Fc();de.log.info(ve.cyan("Starting Nebutra MCP server for Cursor/Windsurf integration...")),de.log.info(ve.dim(`Press Ctrl+C to stop the server.
 `));let r=Tc(process.execPath,[n],{stdio:"inherit",env:{...process.env}});r.on("close",o=>{o===0?de.outro(ve.green("MCP server stopped gracefully.")):o===null&&de.outro(ve.yellow("MCP server terminated.")),process.exit(o??0)}),r.on("error",o=>{s.error(`
 Failed to start MCP server: ${o.message}`),o.code==="ENOENT"&&(s.warn(`
@@ -892,7 +892,7 @@ export async function publishExample(channel: string, event: string, data: unkno
   }
   return pusher.trigger(channel, event, data);
 }
-`;function dd(e){switch(e){case"inngest":return[{relPath:"workflows/inngest/example.ts",content:ad}];case"n8n":return[{relPath:"workflows/n8n/README.md",content:id},{relPath:"workflows/n8n/example.json",content:cd}];case"pusher":return[{relPath:"workflows/pusher/example.ts",content:ld}]}}async function ud(e,t={}){hn.includes(e)||(s.error(`Invalid provider: ${sd.red(e)}. Valid: ${hn.join(", ")}`),process.exit(c.INVALID_ARGS));let n=h(),r=dd(e);t.dryRun&&(A({mode:"dry-run",command:`workflow init ${e}`,files:r.map(i=>({path:yn.join(n,i.relPath)}))}),process.exit(c.DRY_RUN_OK));let o=0,a=0;for(let i of r){let l=yn.join(n,i.relPath);if(gn.existsSync(l)){s.warn(`Skipping ${i.relPath} \u2014 already exists.`),a++;continue}gn.mkdirSync(yn.dirname(l),{recursive:!0}),gn.writeFileSync(l,i.content),t.quiet||s.success(`Created ${i.relPath}`),o++}o===0&&a>0&&(s.info(`No files created \u2014 ${e} scaffold already present.`),process.exit(c.CONFLICT)),process.exit(c.SUCCESS)}var xo=e=>{e.command("workflow").description("Manage workflow provider scaffolding (inngest | n8n | pusher)").command("init <provider>").description(`Scaffold a starter workflow file for a provider (${hn.join(" | ")})`).option("--dry-run","Preview files that would be created (exit code 10)").action(async(n,r,o)=>{let a=x(r,o);await ud(n,{dryRun:!!r.dryRun,quiet:!!a.quiet})})};var it=class extends Error{code;exitCode;suggestion;retryable;context;cause;constructor(t){super(t.message),this.name="CommandError",this.code=t.code,this.exitCode=t.exitCode??c.ERROR,this.suggestion=t.suggestion,this.retryable=t.retryable??!1,this.context=t.context,this.cause=t.cause}};function md(e){return e instanceof it}function pd(e){return md(e)?at({error:e.code,message:e.message,suggestion:e.suggestion,retryable:e.retryable,exitCode:e.exitCode,context:e.context,cause:e.cause instanceof Error?e.cause:e}):e instanceof Error?at({error:"unexpected_error",message:e.message,suggestion:"Re-run with NEBUTRA_DEBUG=1 for a stack trace.",exitCode:c.ERROR,cause:e}):at({error:"unexpected_error",message:String(e),suggestion:"Re-run with NEBUTRA_DEBUG=1 for a stack trace.",exitCode:c.ERROR})}function bn(e){let t=pd(e);return ln(t),t.exitCode}async function vn(e){try{await e()}catch(t){process.exitCode=bn(t)}}import{existsSync as fd,mkdirSync as Ao,writeFileSync as _o}from"fs";import{homedir as Po,platform as gd}from"os";import{join as ct}from"path";var Oo={name:"Nebutra",nameCn:"\u4E91\u6BD3\u667A\u80FD",nameFull:"\u65E0\u9521\u4E91\u6BD3\u667A\u80FD\u79D1\u6280\u6709\u9650\u516C\u53F8",nameFullEn:"Wuxi Nebutra Intelligence Technology Co., Ltd.",tagline:"Ship AI products, not boilerplate.",taglineCn:"AI\u539F\u751F\xB7\u5FEB\u901F\u51FA\u6D77\xB7\u5373\u523B\u4EA4\u4ED8",description:"Production-ready Next.js monorepo template for AI SaaS products. Auth, billing, multi-tenancy, AI services, design system, and enterprise infrastructure \u2014 pre-configured.",descriptionCn:"\u9762\u5411AI\u521B\u4E1A\u8005\u7684\u4E00\u4F53\u5316SaaS\u57FA\u7840\u8BBE\u65BD\u6A21\u677F\uFF0C\u8986\u76D6\u8BA4\u8BC1\u3001\u8BA1\u8D39\u3001\u591A\u79DF\u6237\u3001AI\u670D\u52A1\u4E0E\u8BBE\u8BA1\u7CFB\u7EDF\uFF0C\u5F00\u7BB1\u5373\u4EA7\u54C1",story:{concept:"Logo\u4EE5\u9996\u5B57\u6BCDN\u7684\u57FA\u7840\u9020\u578B\u6982\u5FF5\u4E3A\u4E3B\u8981\u8BBE\u8BA1\u6846\u67B6\uFF0C\u901A\u8FC7\u51E0\u4F55\u6B63\u8D1F\u7A7A\u95F4\u6784\u5EFA\u9690\u5F62'N'\uFF0C\u5F62\u6210\u8FD1\u4F3C\u516D\u8FB9\u5F62\u7684\u7A33\u5B9A\u7ED3\u6784",colorMeaning:"\u84DD\u7EFF\u6E10\u53D8\u4F53\u73B0\u672A\u6765\u611F\u4E0E\u79D1\u6280\u950B\u8292\uFF0C'\u4E91'\u4EE3\u8868\u4E91\u7AEF\u5E73\u53F0\uFF0C'\u6BD3'\u5BD3\u610F\u5B55\u80B2\u4E0E\u8F6C\u5316",values:["AI Native","Ship Fast","Open by Default","Global-Ready","Enterprise-Grade"],missionStatement:"Help AI founders and SaaS teams go from idea to production 10x faster by providing the infrastructure layer they shouldn't have to build."},domains:{landing:"nebutra.com",app:"app.nebutra.com",api:"api.nebutra.com",auth:"auth.nebutra.com",sso:"sso.nebutra.com",docs:"docs.nebutra.com",studio:"studio.nebutra.com",cdn:"cdn.nebutra.com",router:"router.nebutra.com",forge:"forge.nebutra.com",design:"design.nebutra.com",status:"status.nebutra.com",admin:"admin.nebutra.com",analytics:"analytics.nebutra.com",pebble:"pebble.nebutra.com"},social:{twitter:"https://twitter.com/nebutra",github:"https://github.com/nebutra",discord:"https://discord.gg/nebutra",linkedin:"https://linkedin.com/company/nebutra"}};function yd(){if(gd()==="win32"){let t=process.env.LOCALAPPDATA||ct(Po(),"AppData","Local");return ct(t,"nebutra")}let e=process.env.XDG_CONFIG_HOME;return e?ct(e,"nebutra"):ct(Po(),".config","nebutra")}function hd(){let e=process.env.NEBUTRA_TELEMETRY;return e==="0"||e==="false"||e==="no"}function Io(){if(!process.stderr.isTTY||!process.stdin.isTTY||process.env.CI)return;let e=yd(),t=ct(e,"first-run-acked");try{if(fd(t))return}catch{return}if(hd()){try{Ao(e,{recursive:!0}),_o(t,"")}catch{}return}let n=[`\x1B[36m\u2139\x1B[0m ${Oo.name} collects anonymous usage analytics to improve the CLI.`,"  Opt out at any time:  export NEBUTRA_TELEMETRY=0",`  Privacy policy:       ${Cn("landing")}/legal/cli-analytics`,""];try{process.stderr.write(n.join(`
+`;function dd(e){switch(e){case"inngest":return[{relPath:"workflows/inngest/example.ts",content:ad}];case"n8n":return[{relPath:"workflows/n8n/README.md",content:id},{relPath:"workflows/n8n/example.json",content:cd}];case"pusher":return[{relPath:"workflows/pusher/example.ts",content:ld}]}}async function ud(e,t={}){hn.includes(e)||(s.error(`Invalid provider: ${sd.red(e)}. Valid: ${hn.join(", ")}`),process.exit(c.INVALID_ARGS));let n=h(),r=dd(e);t.dryRun&&(A({mode:"dry-run",command:`workflow init ${e}`,files:r.map(i=>({path:yn.join(n,i.relPath)}))}),process.exit(c.DRY_RUN_OK));let o=0,a=0;for(let i of r){let l=yn.join(n,i.relPath);if(gn.existsSync(l)){s.warn(`Skipping ${i.relPath} \u2014 already exists.`),a++;continue}gn.mkdirSync(yn.dirname(l),{recursive:!0}),gn.writeFileSync(l,i.content),t.quiet||s.success(`Created ${i.relPath}`),o++}o===0&&a>0&&(s.info(`No files created \u2014 ${e} scaffold already present.`),process.exit(c.CONFLICT)),process.exit(c.SUCCESS)}var xo=e=>{e.command("workflow").description("Manage workflow provider scaffolding (inngest | n8n | pusher)").command("init <provider>").description(`Scaffold a starter workflow file for a provider (${hn.join(" | ")})`).option("--dry-run","Preview files that would be created (exit code 10)").action(async(n,r,o)=>{let a=x(r,o);await ud(n,{dryRun:!!r.dryRun,quiet:!!a.quiet})})};var it=class extends Error{code;exitCode;suggestion;retryable;context;cause;constructor(t){super(t.message),this.name="CommandError",this.code=t.code,this.exitCode=t.exitCode??c.ERROR,this.suggestion=t.suggestion,this.retryable=t.retryable??!1,this.context=t.context,this.cause=t.cause}};function md(e){return e instanceof it}function pd(e){return md(e)?at({error:e.code,message:e.message,suggestion:e.suggestion,retryable:e.retryable,exitCode:e.exitCode,context:e.context,cause:e.cause instanceof Error?e.cause:e}):e instanceof Error?at({error:"unexpected_error",message:e.message,suggestion:"Re-run with NEBUTRA_DEBUG=1 for a stack trace.",exitCode:c.ERROR,cause:e}):at({error:"unexpected_error",message:String(e),suggestion:"Re-run with NEBUTRA_DEBUG=1 for a stack trace.",exitCode:c.ERROR})}function bn(e){let t=pd(e);return ln(t),t.exitCode}async function vn(e){try{await e()}catch(t){process.exitCode=bn(t)}}import{existsSync as fd,mkdirSync as Ao,writeFileSync as _o}from"fs";import{homedir as Po,platform as gd}from"os";import{join as ct}from"path";var Oo={name:"Nebutra",nameCn:"\u4E91\u6BD3\u667A\u80FD",nameFull:"\u65E0\u9521\u4E91\u6BD3\u667A\u80FD\u79D1\u6280\u6709\u9650\u516C\u53F8",nameFullEn:"Wuxi Nebutra Intelligence Technology Co., Ltd.",tagline:"Ship AI products, not boilerplate.",taglineCn:"AI\u539F\u751F\xB7\u5FEB\u901F\u51FA\u6D77\xB7\u5373\u523B\u4EA4\u4ED8",description:"Production-ready Next.js monorepo template for AI SaaS products. Auth, billing, multi-tenancy, AI services, design system, and enterprise infrastructure \u2014 pre-configured.",descriptionCn:"\u9762\u5411AI\u521B\u4E1A\u8005\u7684\u4E00\u4F53\u5316SaaS\u57FA\u7840\u8BBE\u65BD\u6A21\u677F\uFF0C\u8986\u76D6\u8BA4\u8BC1\u3001\u8BA1\u8D39\u3001\u591A\u79DF\u6237\u3001AI\u670D\u52A1\u4E0E\u8BBE\u8BA1\u7CFB\u7EDF\uFF0C\u5F00\u7BB1\u5373\u4EA7\u54C1",story:{concept:"Logo\u4EE5\u9996\u5B57\u6BCDN\u7684\u57FA\u7840\u9020\u578B\u6982\u5FF5\u4E3A\u4E3B\u8981\u8BBE\u8BA1\u6846\u67B6\uFF0C\u901A\u8FC7\u51E0\u4F55\u6B63\u8D1F\u7A7A\u95F4\u6784\u5EFA\u9690\u5F62'N'\uFF0C\u5F62\u6210\u8FD1\u4F3C\u516D\u8FB9\u5F62\u7684\u7A33\u5B9A\u7ED3\u6784",colorMeaning:"\u84DD\u7EFF\u6E10\u53D8\u4F53\u73B0\u672A\u6765\u611F\u4E0E\u79D1\u6280\u950B\u8292\uFF0C'\u4E91'\u4EE3\u8868\u4E91\u7AEF\u5E73\u53F0\uFF0C'\u6BD3'\u5BD3\u610F\u5B55\u80B2\u4E0E\u8F6C\u5316",values:["AI Native","Ship Fast","Open by Default","Global-Ready","Enterprise-Grade"],missionStatement:"Help AI founders and SaaS teams go from idea to production 10x faster by providing the infrastructure layer they shouldn't have to build."},domains:{landing:"nebutra.com",app:"app.nebutra.com",api:"api.nebutra.com",auth:"auth.nebutra.com",sso:"sso.nebutra.com",docs:"docs.nebutra.com",studio:"studio.nebutra.com",cdn:"cdn.nebutra.com",router:"router.nebutra.com",forge:"forge.nebutra.com",design:"design.nebutra.com",status:"status.nebutra.com",admin:"admin.nebutra.com",analytics:"analytics.nebutra.com",pebble:"pebble.nebutra.com",carina:"carina.nebutra.com"},social:{twitter:"https://twitter.com/nebutra",github:"https://github.com/nebutra",discord:"https://discord.gg/nebutra",linkedin:"https://linkedin.com/company/nebutra"}};function yd(){if(gd()==="win32"){let t=process.env.LOCALAPPDATA||ct(Po(),"AppData","Local");return ct(t,"nebutra")}let e=process.env.XDG_CONFIG_HOME;return e?ct(e,"nebutra"):ct(Po(),".config","nebutra")}function hd(){let e=process.env.NEBUTRA_TELEMETRY;return e==="0"||e==="false"||e==="no"}function Io(){if(!process.stderr.isTTY||!process.stdin.isTTY||process.env.CI)return;let e=yd(),t=ct(e,"first-run-acked");try{if(fd(t))return}catch{return}if(hd()){try{Ao(e,{recursive:!0}),_o(t,"")}catch{}return}let n=[`\x1B[36m\u2139\x1B[0m ${Oo.name} collects anonymous usage analytics to improve the CLI.`,"  Opt out at any time:  export NEBUTRA_TELEMETRY=0",`  Privacy policy:       ${Cn("landing")}/legal/cli-analytics`,""];try{process.stderr.write(n.join(`
 `))}catch{}try{Ao(e,{recursive:!0}),_o(t,"")}catch{}}var Sd=wd(vd(wn(import.meta.url)),"..","package.json"),To=JSON.parse(bd(Sd,"utf8")).version;function Cd(e){let t=new Rd,n=e.isInteractive??(process.stdin.isTTY!==!1&&process.stdout.isTTY!==!1);return t.name("nebutra").description("Nebutra \u2014 governance-first CLI for topology scaffolding, registry features, and platform operations").version(e.version).option("--verbose","Enable verbose output").option("--quiet","Suppress non-essential output").option("--format <type>","Output format: json, table, plain").option("--yes","Skip all interactive prompts (Agent mode)").option("--no-interactive","Alias for --yes").option("--no-color","Disable colored output"),t.command("init").description("Initialize a Nebutra project and create nebutra.config.json").option("--dry-run","Preview changes without writing files (exits with code 10)").option("--if-not-exists","Skip initialization if nebutra.config.json already exists").action(r=>vn(async()=>{let o=r.optsWithGlobals?r.optsWithGlobals():r;await Or({dryRun:r.dryRun||!1,yes:o.yes||!1,ifNotExists:r.ifNotExists||!1})})),t.command("add [components...]").description("Add a registry-backed platform feature or external UI component").option("--21st <id>","Fetch and install a component from 21st.dev").option("--v0 <url>","Fetch and install a component from v0.dev").option("--provider <id>","Specify a backend provider for a system feature (e.g. upstash)").option("--dry-run","Preview what would be installed without making changes (exit code 10)").option("--yes","Skip all interactive prompts and use defaults (Agent mode)").option("--if-not-exists","Skip installation if component already exists").action(async(r,o)=>{let a=o.optsWithGlobals?o.optsWithGlobals():o;await Ln(r,{...o,yes:a.yes||!n})}),cr(t),Lr(t),Gr(t),er(t),kr(t),xr(t),hr(t),Pr(t),zn(t),Yn(t),Qn(t),Xr(t),lr(t),Cr(t),dr(t),to(t),xo(t),Xn(t),pr(t),ao(t),ho(t),Mn(t),tr(t),Er(t),gr(t),Yr(t),Kr(t),qr(t),ir(t),jr(t),ko(t),$r(t),wo(t),t.command("doctor").description("Check your Nebutra project setup for common issues").action(()=>vn(async()=>{let{logger:r}=await import("./logger-WOLJCPZK.js"),{findMonorepoRoot:o}=await import("./delegate-7HQKV277.js"),a=await import("fs"),i=await import("path");r.info("Running project health check...");let l=!1,u=o(),m=process.version;parseInt(m.replace("v","").split(".")[0]??"0",10)<22?(r.error(`Node.js >= 22 required, found ${m}`),l=!0):r.success(`Node.js version OK (${m})`),a.existsSync(i.join(u,"nebutra.config.json"))?r.success("nebutra.config.json found"):r.warn("nebutra.config.json missing. Try running 'nebutra init'"),a.existsSync(i.join(u,"package.json"))?r.success("package.json found"):(r.error("No package.json found in root directory"),l=!0),a.existsSync(i.join(u,".env"))||a.existsSync(i.join(u,".env.local"))?r.success("Environment variables configured"):r.warn("No .env or .env.local found. Some features may not work properly.");let E=i.join(u,"apps/api-gateway");a.existsSync(E)&&r.warn("Legacy `apps/api-gateway/` present. Expected `backends/gateway/` \u2014 see CLAUDE.md for the W2.x restructure.");let D=i.join(u,"backends/gateway");a.existsSync(D)?r.success("backends/gateway/ present"):a.existsSync(i.join(u,"backends"));let F=i.join(u,"packages");if(a.existsSync(F)){let ue=new Set(["design","iam","commerce","integrations","platform","ops","ai"]);try{let _e=a.readdirSync(F,{withFileTypes:!0}),p=[];for(let B of _e){if(!B.isDirectory()||ue.has(B.name))continue;let Le=i.join(F,B.name,"package.json");a.existsSync(Le)&&p.push(B.name)}p.length>0?r.warn(`Found ${p.length} uncategorized package(s) under packages/: ${p.join(", ")}. Expected packages/<category>/<name>/ \u2014 see CLAUDE.md.`):r.success("Packages follow categorized layout")}catch{}}let q=i.join(u,".nebutra"),ye=i.join(q,"scaffold-meta.json");if(a.existsSync(ye)?r.success(".nebutra/scaffold-meta.json present (CLI-scaffolded project)"):a.existsSync(q)&&r.warn(".nebutra/ directory exists but scaffold-meta.json is missing. Harmless \u2014 the marker is provenance only and grants nothing."),l)throw new it({code:"doctor_failed",message:"Doctor found critical issues that require your attention.",suggestion:"Fix the errors above, then re-run `nebutra doctor`.",exitCode:c.CONFIG_ERROR});r.success("Doctor is happy. Your project looks healthy!")})),t.hook("preAction",r=>{let o=r.optsWithGlobals();(!n||o.noInteractive)&&(o.yes=!0)}),t.addHelpText("after",`
 Examples:
   $ nebutra init                          Initialize a new project

package/dist/loadSso-7ASJ2L6X.js

@@ -0,0 +1 @@
+import{a as Ie}from"./chunk-M3NEWJ7L.js";import{a as Pe,b as ve,c as xe,d as Re,e as Ae,f as ye,g as Oe,h as be,i as He}from"./chunk-GA44DNS2.js";import{A as Te,D as Ne,E as De,F as we,G as ke,b as se,c as ne,f as ie,g as ae,l as pe,m as fe,o as ge,t as Se,u as Ee,z as Ce}from"./chunk-UWHWNXNX.js";import{a as _e}from"./chunk-MGGNSWUA.js";import"./chunk-WJLTO7JW.js";import"./chunk-TW5BOTVX.js";import{B as ue,E as me,F as de,G as le,H as he,b as H,c as U,e as G,g as $,h as M,i as q,j as z,l as j,n as W,o as Q,p as Y,r as J,t as X,u as Z,v as ce}from"./chunk-A3H5SUSR.js";import"./chunk-6MSNEPUX.js";import{A as b,C as F,E as I,F as L,G as B,H as K,I as V,R as te,S as oe,T as re,e as D,i as A,j as w,y as p,z as k}from"./chunk-Z4YWESTY.js";import{w as ee}from"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";var Fe=async(e,t,o)=>({operation:D(t).operation,region:await A(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function ct(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:e.region},propertiesExtractor:(t,o)=>({signingProperties:{config:t,context:o}})}}function ut(e){return{schemeId:"smithy.api#noAuth"}}var Ue=e=>{let t=[];return e.operation==="GetRoleCredentials"?t.push(ut(e)):t.push(ct(e)),t},Ge=e=>{let t=Se(e);return Object.assign(t,{authSchemePreference:A(e.authSchemePreference??[])})};var $e=e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"}),Me={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var m="ref",c=-1,h=!0,qe="isSet",Be="PartitionResult",f="booleanEquals",y="getAttr",ze={[m]:"Endpoint"},O={[m]:Be},u={},je=[{[m]:"Region"}],Le={conditions:[[qe,[ze]],[qe,je],["aws.partition",je,Be],[f,[{[m]:"UseFIPS"},h]],[f,[{[m]:"UseDualStack"},h]],[f,[{fn:y,argv:[O,"supportsDualStack"]},h]],[f,[{fn:y,argv:[O,"supportsFIPS"]},h]],["stringEquals",[{fn:y,argv:[O,"name"]},"aws-us-gov"]]],results:[[c],[c,"Invalid Configuration: FIPS and custom endpoint are not supported"],[c,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[ze,u],["https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",u],[c,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://portal.sso.{Region}.amazonaws.com",u],["https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",u],[c,"FIPS is enabled but this partition does not support FIPS"],["https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",u],[c,"DualStack is enabled but this partition does not support DualStack"],["https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",u],[c,"Invalid Configuration: Missing Region"]]},mt=2,s=1e8,dt=new Int32Array([-1,1,-1,0,13,3,1,4,s+12,2,5,s+12,3,8,6,4,7,s+11,5,s+9,s+10,4,11,9,6,10,s+8,7,s+6,s+7,5,12,s+5,6,s+4,s+5,3,s+1,14,4,s+2,s+3]),Ke=W.from(dt,mt,Le.conditions,Le.results);var lt=new Q({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),Ve=(e,t={})=>lt.get(e,()=>J(Ke,{endpointParams:e,logger:t.logger}));Y.aws=pe;var a=class e extends G{constructor(t){super(t),Object.setPrototypeOf(this,e.prototype)}};var g=class e extends a{name="InvalidRequestException";$fault="client";constructor(t){super({name:"InvalidRequestException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},S=class e extends a{name="ResourceNotFoundException";$fault="client";constructor(t){super({name:"ResourceNotFoundException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},E=class e extends a{name="TooManyRequestsException";$fault="client";constructor(t){super({name:"TooManyRequestsException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},_=class e extends a{name="UnauthorizedException";$fault="client";constructor(t){super({name:"UnauthorizedException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}};var ht="AccessTokenType",ft="GetRoleCredentials",gt="GetRoleCredentialsRequest",St="GetRoleCredentialsResponse",Et="InvalidRequestException",_t="RoleCredentials",Pt="ResourceNotFoundException",vt="SecretAccessKeyType",xt="SessionTokenType",Rt="TooManyRequestsException",Ct="UnauthorizedException",At="accountId",It="accessKeyId",yt="accessToken",Ot="account_id",P="client",v="error",Tt="expiration",Nt="http",x="httpError",Dt="httpHeader",We="httpQuery",R="message",wt="roleCredentials",kt="roleName",bt="role_name",Qe="smithy.ts.sdk.synthetic.com.amazonaws.sso",Ht="secretAccessKey",Ft="sessionToken",Ut="x-amz-sso_bearer_token",i="com.amazonaws.sso",Ye=I.for(Qe),Gt=[-3,Qe,"SSOServiceException",0,[],[]];Ye.registerError(Gt,a);var d=I.for(i),$t=[-3,i,Et,{[v]:P,[x]:400},[R],[0]];d.registerError($t,g);var Mt=[-3,i,Pt,{[v]:P,[x]:404},[R],[0]];d.registerError(Mt,S);var qt=[-3,i,Rt,{[v]:P,[x]:429},[R],[0]];d.registerError(qt,E);var zt=[-3,i,Ct,{[v]:P,[x]:401},[R],[0]];d.registerError(zt,_);var Je=[Ye,d],jt=[0,i,ht,8,0],Lt=[0,i,vt,8,0],Bt=[0,i,xt,8,0],Kt=[3,i,gt,0,[kt,At,yt],[[0,{[We]:bt}],[0,{[We]:Ot}],[()=>jt,{[Dt]:Ut}]],3],Vt=[3,i,St,0,[wt],[[()=>Wt,0]]],Wt=[3,i,_t,0,[It,Ht,Ft,Tt],[0,[()=>Lt,0],[()=>Bt,0],1]],Xe=[9,i,ft,{[Nt]:["GET","/federation/credentials",200]},()=>Kt,()=>Vt];var Ze=e=>({apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??Ne,base64Encoder:e?.base64Encoder??ke,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Ve,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Ue,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:t=>t.getIdentityProvider("aws.auth#sigv4"),signer:new fe},{schemeId:"smithy.api#noAuth",identityProvider:t=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new ae}],logger:e?.logger??new j,protocol:e?.protocol??Ee,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:Je,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:e?.serviceId??"SSO",urlParser:e?.urlParser??w,utf8Decoder:e?.utf8Decoder??De,utf8Encoder:e?.utf8Encoder??we});var et=e=>{M(process.version);let t=V(e),o=()=>t().then($),n=Ze(e);ce(process.version);let r={profile:e?.profile,logger:n.logger};return{...n,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??p(ge,r),bodyLengthChecker:e?.bodyLengthChecker??Te,defaultUserAgentProvider:e?.defaultUserAgentProvider??ye({serviceId:n.serviceId,clientVersion:Ie.version}),maxAttempts:e?.maxAttempts??p(me,e),region:e?.region??p(L,{...B,...r}),requestHandler:_e.create(e?.requestHandler??o),retryMode:e?.retryMode??p({...le,default:async()=>(await o()).retryMode||ue},e),sha256:e?.sha256??ee.bind(null,"sha256"),streamCollector:e?.streamCollector??Pe,useDualstackEndpoint:e?.useDualstackEndpoint??p(k,r),useFipsEndpoint:e?.useFipsEndpoint??p(b,r),userAgentAppId:e?.userAgentAppId??p(Oe,r)}};var tt=e=>{let t=e.httpAuthSchemes,o=e.httpAuthSchemeProvider,n=e.credentials;return{setHttpAuthScheme(r){let l=t.findIndex(C=>C.schemeId===r.schemeId);l===-1?t.push(r):t.splice(l,1,r)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(r){o=r},httpAuthSchemeProvider(){return o},setCredentials(r){n=r},credentials(){return n}}},ot=e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()});var rt=(e,t)=>{let o=Object.assign(be(e),q(e),te(e),tt(e));return t.forEach(n=>n.configure(o)),Object.assign(e,He(o),z(o),oe(o),ot(o))};var T=class extends H{config;constructor(...[t]){let o=et(t||{});super(o),this.initConfig=o;let n=$e(o),r=Ce(n),l=de(r),C=K(l),st=C,nt=X(st),it=Ge(nt),at=rt(it,t?.extensions||[]);this.config=at,this.middlewareStack.use(F(this.config)),this.middlewareStack.use(Ae(this.config)),this.middlewareStack.use(he(this.config)),this.middlewareStack.use(re(this.config)),this.middlewareStack.use(ve(this.config)),this.middlewareStack.use(xe(this.config)),this.middlewareStack.use(Re(this.config)),this.middlewareStack.use(se(this.config,{httpAuthSchemeParametersProvider:Fe,identityProviderConfigProvider:async pt=>new ie({"aws.auth#sigv4":pt.credentials})})),this.middlewareStack.use(ne(this.config))}destroy(){super.destroy()}};var N=class extends U.classBuilder().ep(Me).m(function(t,o,n,r){return[Z(n,t.getEndpointParameterInstructions())]}).s("SWBPortalService","GetRoleCredentials",{}).n("SSOClient","GetRoleCredentialsCommand").sc(Xe).build(){};export{N as GetRoleCredentialsCommand,T as SSOClient};

package/dist/loadSso-CDEOXPSD.js

@@ -0,0 +1 @@
+import{a as be}from"./chunk-CVCZBECH.js";import{a as Ee,b as xe,c as _e,d as Pe,e as ye,f as Ce,g as Ae,h as De,i as ke}from"./chunk-GA44DNS2.js";import{A as Ie,D as Oe,E as Te,F as Ne,G as we,b as re,c as se,f as ne,g as ie,l as ae,m as he,o as fe,t as ge,u as Se,z as Re}from"./chunk-UWHWNXNX.js";import{a as ve}from"./chunk-MGGNSWUA.js";import"./chunk-WJLTO7JW.js";import"./chunk-TW5BOTVX.js";import{B as ce,E as ue,F as de,G as le,H as me,b as H,c as U,e as G,g as $,h as q,i as M,j as z,l as j,o as W,p as Q,s as Y,t as J,u as X,v as pe}from"./chunk-A3H5SUSR.js";import"./chunk-6MSNEPUX.js";import{A as b,C as F,E as A,F as L,G as K,H as V,I as B,R as ee,S as te,T as oe,e as w,i as C,j as D,y as u,z as k}from"./chunk-Z4YWESTY.js";import{w as Z}from"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";var He=async(e,t,o)=>({operation:w(t).operation,region:await C(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function gt(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"awsssoportal",region:e.region},propertiesExtractor:(t,o)=>({signingProperties:{config:t,context:o}})}}function St(e){return{schemeId:"smithy.api#noAuth"}}var Fe=e=>{let t=[];return e.operation==="GetRoleCredentials"?t.push(St(e)):t.push(gt(e)),t},Ue=e=>{let t=ge(e);return Object.assign(t,{authSchemePreference:C(e.authSchemePreference??[])})};var Ge=e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"awsssoportal"}),$e={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var Qe="required";var i="argv";var qe="isSet",m="booleanEquals",d="error",l="endpoint",p="tree",I="PartitionResult",O="getAttr",Me={[Qe]:!1,type:"string"},ze={[Qe]:!0,default:!1,type:"boolean"},je={ref:"Endpoint"},Ye={fn:m,[i]:[{ref:"UseFIPS"},!0]},Je={fn:m,[i]:[{ref:"UseDualStack"},!0]},n={},Le={fn:O,[i]:[{ref:I},"supportsFIPS"]},Xe={ref:I},Ke={fn:m,[i]:[!0,{fn:O,[i]:[Xe,"supportsDualStack"]}]},Ve=[Ye],Be=[Je],We=[{ref:"Region"}],vt={version:"1.0",parameters:{Region:Me,UseDualStack:ze,UseFIPS:ze,Endpoint:Me},rules:[{conditions:[{fn:qe,[i]:[je]}],rules:[{conditions:Ve,error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:d},{conditions:Be,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:d},{endpoint:{url:je,properties:n,headers:n},type:l}],type:p},{conditions:[{fn:qe,[i]:We}],rules:[{conditions:[{fn:"aws.partition",[i]:We,assign:I}],rules:[{conditions:[Ye,Je],rules:[{conditions:[{fn:m,[i]:[!0,Le]},Ke],rules:[{endpoint:{url:"https://portal.sso-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:n,headers:n},type:l}],type:p},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:d}],type:p},{conditions:Ve,rules:[{conditions:[{fn:m,[i]:[Le,!0]}],rules:[{conditions:[{fn:"stringEquals",[i]:[{fn:O,[i]:[Xe,"name"]},"aws-us-gov"]}],endpoint:{url:"https://portal.sso.{Region}.amazonaws.com",properties:n,headers:n},type:l},{endpoint:{url:"https://portal.sso-fips.{Region}.{PartitionResult#dnsSuffix}",properties:n,headers:n},type:l}],type:p},{error:"FIPS is enabled but this partition does not support FIPS",type:d}],type:p},{conditions:Be,rules:[{conditions:[Ke],rules:[{endpoint:{url:"https://portal.sso.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:n,headers:n},type:l}],type:p},{error:"DualStack is enabled but this partition does not support DualStack",type:d}],type:p},{endpoint:{url:"https://portal.sso.{Region}.{PartitionResult#dnsSuffix}",properties:n,headers:n},type:l}],type:p}],type:p},{error:"Invalid Configuration: Missing Region",type:d}]},Ze=vt;var Et=new W({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),et=(e,t={})=>Et.get(e,()=>Y(Ze,{endpointParams:e,logger:t.logger}));Q.aws=ae;var c=class e extends G{constructor(t){super(t),Object.setPrototypeOf(this,e.prototype)}};var g=class e extends c{name="InvalidRequestException";$fault="client";constructor(t){super({name:"InvalidRequestException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},S=class e extends c{name="ResourceNotFoundException";$fault="client";constructor(t){super({name:"ResourceNotFoundException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},v=class e extends c{name="TooManyRequestsException";$fault="client";constructor(t){super({name:"TooManyRequestsException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},E=class e extends c{name="UnauthorizedException";$fault="client";constructor(t){super({name:"UnauthorizedException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}};var xt="AccessTokenType",_t="GetRoleCredentials",Pt="GetRoleCredentialsRequest",Rt="GetRoleCredentialsResponse",yt="InvalidRequestException",Ct="RoleCredentials",At="ResourceNotFoundException",It="SecretAccessKeyType",Ot="SessionTokenType",Tt="TooManyRequestsException",Nt="UnauthorizedException",wt="accountId",Dt="accessKeyId",kt="accessToken",bt="account_id",x="client",_="error",Ht="expiration",Ft="http",P="httpError",Ut="httpHeader",tt="httpQuery",R="message",Gt="roleCredentials",$t="roleName",qt="role_name",ot="smithy.ts.sdk.synthetic.com.amazonaws.sso",Mt="secretAccessKey",zt="sessionToken",jt="x-amz-sso_bearer_token",a="com.amazonaws.sso",rt=A.for(ot),Lt=[-3,ot,"SSOServiceException",0,[],[]];rt.registerError(Lt,c);var h=A.for(a),Kt=[-3,a,yt,{[_]:x,[P]:400},[R],[0]];h.registerError(Kt,g);var Vt=[-3,a,At,{[_]:x,[P]:404},[R],[0]];h.registerError(Vt,S);var Bt=[-3,a,Tt,{[_]:x,[P]:429},[R],[0]];h.registerError(Bt,v);var Wt=[-3,a,Nt,{[_]:x,[P]:401},[R],[0]];h.registerError(Wt,E);var st=[rt,h],Qt=[0,a,xt,8,0],Yt=[0,a,It,8,0],Jt=[0,a,Ot,8,0],Xt=[3,a,Pt,0,[$t,wt,kt],[[0,{[tt]:qt}],[0,{[tt]:bt}],[()=>Qt,{[Ut]:jt}]],3],Zt=[3,a,Rt,0,[Gt],[[()=>eo,0]]],eo=[3,a,Ct,0,[Dt,Mt,zt,Ht],[0,[()=>Yt,0],[()=>Jt,0],1]],nt=[9,a,_t,{[Ft]:["GET","/federation/credentials",200]},()=>Xt,()=>Zt];var it=e=>({apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??Oe,base64Encoder:e?.base64Encoder??we,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??et,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Fe,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:t=>t.getIdentityProvider("aws.auth#sigv4"),signer:new he},{schemeId:"smithy.api#noAuth",identityProvider:t=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new ie}],logger:e?.logger??new j,protocol:e?.protocol??Se,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sso",errorTypeRegistries:st,version:"2019-06-10",serviceTarget:"SWBPortalService"},serviceId:e?.serviceId??"SSO",urlParser:e?.urlParser??D,utf8Decoder:e?.utf8Decoder??Te,utf8Encoder:e?.utf8Encoder??Ne});var at=e=>{q(process.version);let t=B(e),o=()=>t().then($),s=it(e);pe(process.version);let r={profile:e?.profile,logger:s.logger};return{...s,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??u(fe,r),bodyLengthChecker:e?.bodyLengthChecker??Ie,defaultUserAgentProvider:e?.defaultUserAgentProvider??Ce({serviceId:s.serviceId,clientVersion:be.version}),maxAttempts:e?.maxAttempts??u(ue,e),region:e?.region??u(L,{...K,...r}),requestHandler:ve.create(e?.requestHandler??o),retryMode:e?.retryMode??u({...le,default:async()=>(await o()).retryMode||ce},e),sha256:e?.sha256??Z.bind(null,"sha256"),streamCollector:e?.streamCollector??Ee,useDualstackEndpoint:e?.useDualstackEndpoint??u(k,r),useFipsEndpoint:e?.useFipsEndpoint??u(b,r),userAgentAppId:e?.userAgentAppId??u(Ae,r)}};var pt=e=>{let t=e.httpAuthSchemes,o=e.httpAuthSchemeProvider,s=e.credentials;return{setHttpAuthScheme(r){let f=t.findIndex(y=>y.schemeId===r.schemeId);f===-1?t.push(r):t.splice(f,1,r)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(r){o=r},httpAuthSchemeProvider(){return o},setCredentials(r){s=r},credentials(){return s}}},ct=e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()});var ut=(e,t)=>{let o=Object.assign(De(e),M(e),ee(e),pt(e));return t.forEach(s=>s.configure(o)),Object.assign(e,ke(o),z(o),te(o),ct(o))};var T=class extends H{config;constructor(...[t]){let o=at(t||{});super(o),this.initConfig=o;let s=Ge(o),r=Re(s),f=de(r),y=V(f),dt=y,lt=J(dt),mt=Ue(lt),ht=ut(mt,t?.extensions||[]);this.config=ht,this.middlewareStack.use(F(this.config)),this.middlewareStack.use(ye(this.config)),this.middlewareStack.use(me(this.config)),this.middlewareStack.use(oe(this.config)),this.middlewareStack.use(xe(this.config)),this.middlewareStack.use(_e(this.config)),this.middlewareStack.use(Pe(this.config)),this.middlewareStack.use(re(this.config,{httpAuthSchemeParametersProvider:He,identityProviderConfigProvider:async ft=>new ne({"aws.auth#sigv4":ft.credentials})})),this.middlewareStack.use(se(this.config))}destroy(){super.destroy()}};var N=class extends U.classBuilder().ep($e).m(function(t,o,s,r){return[X(s,t.getEndpointParameterInstructions())]}).s("SWBPortalService","GetRoleCredentials",{}).n("SSOClient","GetRoleCredentialsCommand").sc(nt).build(){};export{N as GetRoleCredentialsCommand,T as SSOClient};

package/dist/signin-VC4RXV33.js

@@ -0,0 +1 @@
+import{a as Ne}from"./chunk-M3NEWJ7L.js";import{a as Re,b as Oe,c as Te,d as ye,e as ke,f as we,g as He,h as Ve,i as qe}from"./chunk-GA44DNS2.js";import{A as be,D as Fe,E as Ue,F as $e,G as Me,b as me,c as ue,f as de,g as le,l as ge,m as Pe,o as ve,t as xe,u as Ie,z as De}from"./chunk-UWHWNXNX.js";import{a as Ce}from"./chunk-MGGNSWUA.js";import"./chunk-WJLTO7JW.js";import"./chunk-TW5BOTVX.js";import{B as fe,E as Ee,F as Se,G as _e,H as Ae,b as V,c as L,d as j,e as B,g as G,h as z,i as K,j as X,l as Q,n as ee,o as te,p as re,r as oe,t as ne,u as se,v as he}from"./chunk-A3H5SUSR.js";import"./chunk-6MSNEPUX.js";import{A as M,C as q,E as T,F as W,G as Y,H as J,I as Z,R as ae,S as ce,T as pe,e as F,i as O,j as U,y as p,z as $}from"./chunk-Z4YWESTY.js";import{w as ie}from"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";var Le=async(e,t,r)=>({operation:F(t).operation,region:await O(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function Rt(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"signin",region:e.region},propertiesExtractor:(t,r)=>({signingProperties:{config:t,context:r}})}}function Ot(e){return{schemeId:"smithy.api#noAuth"}}var je=e=>{let t=[];return e.operation==="CreateOAuth2Token"?t.push(Ot(e)):t.push(Rt(e)),t},Be=e=>{let t=xe(e);return Object.assign(t,{authSchemePreference:O(e.authSchemePreference??[])})};var Ge=e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"signin"}),ze={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var l="ref",d=-1,f=!0,Ke="isSet",Ye="PartitionResult",E="booleanEquals",k="getAttr",y="stringEquals",Xe={[l]:"Endpoint"},N={[l]:Ye},D={fn:k,argv:[N,"name"]},m={},Qe=[{[l]:"Region"}],We={conditions:[[Ke,[Xe]],[Ke,Qe],["aws.partition",Qe,Ye],[E,[{[l]:"UseFIPS"},f]],[E,[{[l]:"UseDualStack"},f]],[E,[{fn:k,argv:[N,"supportsDualStack"]},f]],[E,[{fn:k,argv:[N,"supportsFIPS"]},f]],[y,[D,"aws"]],[y,[D,"aws-cn"]],[y,[D,"aws-us-gov"]]],results:[[d],[d,"Invalid Configuration: FIPS and custom endpoint are not supported"],[d,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[Xe,m],["https://{Region}.signin.aws.amazon.com",m],["https://{Region}.signin.amazonaws.cn",m],["https://{Region}.signin.amazonaws-us-gov.com",m],["https://signin-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",m],[d,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://signin-fips.{Region}.{PartitionResult#dnsSuffix}",m],[d,"FIPS is enabled but this partition does not support FIPS"],["https://signin.{Region}.{PartitionResult#dualStackDnsSuffix}",m],[d,"DualStack is enabled but this partition does not support DualStack"],["https://signin.{Region}.{PartitionResult#dnsSuffix}",m],[d,"Invalid Configuration: Missing Region"]]},Tt=2,n=1e8,yt=new Int32Array([-1,1,-1,0,15,3,1,4,n+14,2,5,n+14,3,11,6,4,10,7,7,n+4,8,8,n+5,9,9,n+6,n+13,5,n+11,n+12,4,13,12,6,n+9,n+10,5,14,n+8,6,n+7,n+8,3,n+1,16,4,n+2,n+3]),Je=ee.from(yt,Tt,We.conditions,We.results);var Dt=new te({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),Ze=(e,t={})=>Dt.get(e,()=>oe(Je,{endpointParams:e,logger:t.logger}));re.aws=ge;var c=class e extends B{constructor(t){super(t),Object.setPrototypeOf(this,e.prototype)}};var S=class e extends c{name="AccessDeniedException";$fault="client";error;constructor(t){super({name:"AccessDeniedException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error}},_=class e extends c{name="InternalServerException";$fault="server";error;constructor(t){super({name:"InternalServerException",$fault:"server",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error}},A=class e extends c{name="TooManyRequestsError";$fault="client";error;constructor(t){super({name:"TooManyRequestsError",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error}},P=class e extends c{name="ValidationException";$fault="client";error;constructor(t){super({name:"ValidationException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error}};var kt="AccessDeniedException",Nt="AccessToken",wt="CreateOAuth2Token",Ht="CreateOAuth2TokenRequest",bt="CreateOAuth2TokenRequestBody",Ft="CreateOAuth2TokenResponseBody",Ut="CreateOAuth2TokenResponse",$t="InternalServerException",Mt="RefreshToken",Vt="TooManyRequestsError",qt="ValidationException",et="accessKeyId",tt="accessToken",w="client",rt="clientId",ot="codeVerifier",Lt="code",u="error",nt="expiresIn",st="grantType",jt="http",H="httpError",it="idToken",s="jsonName",x="message",v="refreshToken",at="redirectUri",ut="smithy.ts.sdk.synthetic.com.amazonaws.signin",ct="secretAccessKey",pt="sessionToken",Bt="server",Gt="tokenInput",zt="tokenOutput",mt="tokenType",a="com.amazonaws.signin",dt=T.for(ut),Kt=[-3,ut,"SigninServiceException",0,[],[]];dt.registerError(Kt,c);var g=T.for(a),Xt=[-3,a,kt,{[u]:w},[u,x],[0,0],2];g.registerError(Xt,S);var Qt=[-3,a,$t,{[u]:Bt,[H]:500},[u,x],[0,0],2];g.registerError(Qt,_);var Wt=[-3,a,Vt,{[u]:w,[H]:429},[u,x],[0,0],2];g.registerError(Wt,A);var Yt=[-3,a,qt,{[u]:w,[H]:400},[u,x],[0,0],2];g.registerError(Yt,P);var lt=[dt,g],gt=[0,a,Mt,8,0],Jt=[3,a,Nt,8,[et,ct,pt],[[0,{[s]:et}],[0,{[s]:ct}],[0,{[s]:pt}]],3],Zt=[3,a,Ht,0,[Gt],[[()=>er,16]],1],er=[3,a,bt,0,[rt,st,Lt,at,ot,v],[[0,{[s]:rt}],[0,{[s]:st}],0,[0,{[s]:at}],[0,{[s]:ot}],[()=>gt,{[s]:v}]],2],tr=[3,a,Ut,0,[zt],[[()=>rr,16]],1],rr=[3,a,Ft,0,[tt,mt,nt,v,it],[[()=>Jt,{[s]:tt}],[0,{[s]:mt}],[1,{[s]:nt}],[()=>gt,{[s]:v}],[0,{[s]:it}]],4],ht=[9,a,wt,{[jt]:["POST","/v1/token",200]},()=>Zt,()=>tr];var ft=e=>({apiVersion:"2023-01-01",base64Decoder:e?.base64Decoder??Fe,base64Encoder:e?.base64Encoder??Me,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Ze,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??je,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:t=>t.getIdentityProvider("aws.auth#sigv4"),signer:new Pe},{schemeId:"smithy.api#noAuth",identityProvider:t=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new le}],logger:e?.logger??new Q,protocol:e?.protocol??Ie,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.signin",errorTypeRegistries:lt,version:"2023-01-01",serviceTarget:"Signin"},serviceId:e?.serviceId??"Signin",urlParser:e?.urlParser??U,utf8Decoder:e?.utf8Decoder??Ue,utf8Encoder:e?.utf8Encoder??$e});var Et=e=>{z(process.version);let t=Z(e),r=()=>t().then(G),i=ft(e);he(process.version);let o={profile:e?.profile,logger:i.logger};return{...i,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??p(ve,o),bodyLengthChecker:e?.bodyLengthChecker??be,defaultUserAgentProvider:e?.defaultUserAgentProvider??we({serviceId:i.serviceId,clientVersion:Ne.version}),maxAttempts:e?.maxAttempts??p(Ee,e),region:e?.region??p(W,{...Y,...o}),requestHandler:Ce.create(e?.requestHandler??r),retryMode:e?.retryMode??p({..._e,default:async()=>(await r()).retryMode||fe},e),sha256:e?.sha256??ie.bind(null,"sha256"),streamCollector:e?.streamCollector??Re,useDualstackEndpoint:e?.useDualstackEndpoint??p($,o),useFipsEndpoint:e?.useFipsEndpoint??p(M,o),userAgentAppId:e?.userAgentAppId??p(He,o)}};var St=e=>{let t=e.httpAuthSchemes,r=e.httpAuthSchemeProvider,i=e.credentials;return{setHttpAuthScheme(o){let h=t.findIndex(R=>R.schemeId===o.schemeId);h===-1?t.push(o):t.splice(h,1,o)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(o){r=o},httpAuthSchemeProvider(){return r},setCredentials(o){i=o},credentials(){return i}}},_t=e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()});var At=(e,t)=>{let r=Object.assign(Ve(e),K(e),ae(e),St(e));return t.forEach(i=>i.configure(r)),Object.assign(e,qe(r),X(r),ce(r),_t(r))};var I=class extends V{config;constructor(...[t]){let r=Et(t||{});super(r),this.initConfig=r;let i=Ge(r),o=De(i),h=Se(o),R=J(h),Pt=R,vt=ne(Pt),xt=Be(vt),It=At(xt,t?.extensions||[]);this.config=It,this.middlewareStack.use(q(this.config)),this.middlewareStack.use(ke(this.config)),this.middlewareStack.use(Ae(this.config)),this.middlewareStack.use(pe(this.config)),this.middlewareStack.use(Oe(this.config)),this.middlewareStack.use(Te(this.config)),this.middlewareStack.use(ye(this.config)),this.middlewareStack.use(me(this.config,{httpAuthSchemeParametersProvider:Le,identityProviderConfigProvider:async Ct=>new de({"aws.auth#sigv4":Ct.credentials})})),this.middlewareStack.use(ue(this.config))}destroy(){super.destroy()}};var C=class extends L.classBuilder().ep(ze).m(function(t,r,i,o){return[se(i,t.getEndpointParameterInstructions())]}).s("Signin","CreateOAuth2Token",{}).n("SigninClient","CreateOAuth2TokenCommand").sc(ht).build(){};var or={CreateOAuth2TokenCommand:C},b=class extends I{};j(or,b);var Oo={AUTHCODE_EXPIRED:"AUTHCODE_EXPIRED",INSUFFICIENT_PERMISSIONS:"INSUFFICIENT_PERMISSIONS",INVALID_REQUEST:"INVALID_REQUEST",SERVER_ERROR:"server_error",TOKEN_EXPIRED:"TOKEN_EXPIRED",USER_CREDENTIALS_CHANGED:"USER_CREDENTIALS_CHANGED"};export{L as $Command,S as AccessDeniedException,Xt as AccessDeniedException$,Jt as AccessToken$,ht as CreateOAuth2Token$,C as CreateOAuth2TokenCommand,Zt as CreateOAuth2TokenRequest$,er as CreateOAuth2TokenRequestBody$,tr as CreateOAuth2TokenResponse$,rr as CreateOAuth2TokenResponseBody$,_ as InternalServerException,Qt as InternalServerException$,Oo as OAuth2ErrorCode,b as Signin,I as SigninClient,c as SigninServiceException,Kt as SigninServiceException$,A as TooManyRequestsError,Wt as TooManyRequestsError$,P as ValidationException,Yt as ValidationException$,V as __Client,lt as errorTypeRegistries};

package/dist/sso-oidc-T7YTOO4A.js

@@ -0,0 +1 @@
+import{a as $e}from"./chunk-M3NEWJ7L.js";import{a as Te,b as Re,c as ke,d as we,e as Ne,f as Ue,g as He,h as Ve,i as ze}from"./chunk-GA44DNS2.js";import{A as Fe,D as Me,E as Ge,F as je,G as Ke,b as le,c as he,f as fe,g as ge,l as Ee,m as Ce,o as Oe,t as Ae,u as De,z as be}from"./chunk-UWHWNXNX.js";import{a as ye}from"./chunk-MGGNSWUA.js";import"./chunk-WJLTO7JW.js";import"./chunk-TW5BOTVX.js";import{B as Se,E as _e,F as ve,G as Ie,H as Pe,b as V,c as q,d as L,e as B,g as Y,h as W,i as J,j as X,l as Q,n as oe,o as ne,p as ie,r as se,t as ce,u as ae,v as xe}from"./chunk-A3H5SUSR.js";import"./chunk-6MSNEPUX.js";import{A as K,C as z,E as $,F as Z,G as ee,H as te,I as re,R as de,S as ue,T as me,e as M,i as N,j as G,y as l,z as j}from"./chunk-Z4YWESTY.js";import{w as pe}from"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";var qe=async(e,t,n)=>({operation:M(t).operation,region:await N(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function _t(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sso-oauth",region:e.region},propertiesExtractor:(t,n)=>({signingProperties:{config:t,context:n}})}}function vt(e){return{schemeId:"smithy.api#noAuth"}}var Le=e=>{let t=[];return e.operation==="CreateToken"?t.push(vt(e)):t.push(_t(e)),t},Be=e=>{let t=Ae(e);return Object.assign(t,{authSchemePreference:N(e.authSchemePreference??[])})};var Ye=e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,defaultSigningName:"sso-oauth"}),We={UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var g="ref",h=-1,x=!0,Je="isSet",et="PartitionResult",S="booleanEquals",U="getAttr",Xe={[g]:"Endpoint"},H={[g]:et},f={},Qe=[{[g]:"Region"}],Ze={conditions:[[Je,[Xe]],[Je,Qe],["aws.partition",Qe,et],[S,[{[g]:"UseFIPS"},x]],[S,[{[g]:"UseDualStack"},x]],[S,[{fn:U,argv:[H,"supportsDualStack"]},x]],[S,[{fn:U,argv:[H,"supportsFIPS"]},x]],["stringEquals",[{fn:U,argv:[H,"name"]},"aws-us-gov"]]],results:[[h],[h,"Invalid Configuration: FIPS and custom endpoint are not supported"],[h,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[Xe,f],["https://oidc-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",f],[h,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://oidc.{Region}.amazonaws.com",f],["https://oidc-fips.{Region}.{PartitionResult#dnsSuffix}",f],[h,"FIPS is enabled but this partition does not support FIPS"],["https://oidc.{Region}.{PartitionResult#dualStackDnsSuffix}",f],[h,"DualStack is enabled but this partition does not support DualStack"],["https://oidc.{Region}.{PartitionResult#dnsSuffix}",f],[h,"Invalid Configuration: Missing Region"]]},It=2,c=1e8,Pt=new Int32Array([-1,1,-1,0,13,3,1,4,c+12,2,5,c+12,3,8,6,4,7,c+11,5,c+9,c+10,4,11,9,6,10,c+8,7,c+6,c+7,5,12,c+5,6,c+4,c+5,3,c+1,14,4,c+2,c+3]),tt=oe.from(Pt,It,Ze.conditions,Ze.results);var Ct=new ne({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS"]}),rt=(e,t={})=>Ct.get(e,()=>se(tt,{endpointParams:e,logger:t.logger}));ie.aws=Ee;var i=class e extends B{constructor(t){super(t),Object.setPrototypeOf(this,e.prototype)}};var _=class e extends i{name="AccessDeniedException";$fault="client";error;reason;error_description;constructor(t){super({name:"AccessDeniedException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.reason=t.reason,this.error_description=t.error_description}},v=class e extends i{name="AuthorizationPendingException";$fault="client";error;error_description;constructor(t){super({name:"AuthorizationPendingException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},I=class e extends i{name="ExpiredTokenException";$fault="client";error;error_description;constructor(t){super({name:"ExpiredTokenException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},P=class e extends i{name="InternalServerException";$fault="server";error;error_description;constructor(t){super({name:"InternalServerException",$fault:"server",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},C=class e extends i{name="InvalidClientException";$fault="client";error;error_description;constructor(t){super({name:"InvalidClientException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},O=class e extends i{name="InvalidGrantException";$fault="client";error;error_description;constructor(t){super({name:"InvalidGrantException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},A=class e extends i{name="InvalidRequestException";$fault="client";error;reason;error_description;constructor(t){super({name:"InvalidRequestException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.reason=t.reason,this.error_description=t.error_description}},D=class e extends i{name="InvalidScopeException";$fault="client";error;error_description;constructor(t){super({name:"InvalidScopeException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},y=class e extends i{name="SlowDownException";$fault="client";error;error_description;constructor(t){super({name:"SlowDownException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},T=class e extends i{name="UnauthorizedClientException";$fault="client";error;error_description;constructor(t){super({name:"UnauthorizedClientException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}},R=class e extends i{name="UnsupportedGrantTypeException";$fault="client";error;error_description;constructor(t){super({name:"UnsupportedGrantTypeException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype),this.error=t.error,this.error_description=t.error_description}};var Ot="AccessDeniedException",At="AuthorizationPendingException",Dt="AccessToken",yt="ClientSecret",Tt="CreateToken",Rt="CreateTokenRequest",kt="CreateTokenResponse",wt="CodeVerifier",bt="ExpiredTokenException",Nt="InvalidClientException",$t="InvalidGrantException",Ut="InvalidRequestException",Ht="InternalServerException",Ft="InvalidScopeException",Mt="IdToken",Gt="RefreshToken",jt="SlowDownException",Kt="UnauthorizedClientException",Vt="UnsupportedGrantTypeException",zt="accessToken",m="client",qt="clientId",Lt="clientSecret",Bt="codeVerifier",Yt="code",Wt="deviceCode",r="error",Jt="expiresIn",d="error_description",Xt="grantType",Qt="http",u="httpError",Zt="idToken",ot="reason",nt="refreshToken",er="redirectUri",it="smithy.ts.sdk.synthetic.com.amazonaws.ssooidc",tr="scope",rr="server",or="tokenType",o="com.amazonaws.ssooidc",st=$.for(it),nr=[-3,it,"SSOOIDCServiceException",0,[],[]];st.registerError(nr,i);var p=$.for(o),ir=[-3,o,Ot,{[r]:m,[u]:400},[r,ot,d],[0,0,0]];p.registerError(ir,_);var sr=[-3,o,At,{[r]:m,[u]:400},[r,d],[0,0]];p.registerError(sr,v);var cr=[-3,o,bt,{[r]:m,[u]:400},[r,d],[0,0]];p.registerError(cr,I);var ar=[-3,o,Ht,{[r]:rr,[u]:500},[r,d],[0,0]];p.registerError(ar,P);var pr=[-3,o,Nt,{[r]:m,[u]:401},[r,d],[0,0]];p.registerError(pr,C);var dr=[-3,o,$t,{[r]:m,[u]:400},[r,d],[0,0]];p.registerError(dr,O);var ur=[-3,o,Ut,{[r]:m,[u]:400},[r,ot,d],[0,0,0]];p.registerError(ur,A);var mr=[-3,o,Ft,{[r]:m,[u]:400},[r,d],[0,0]];p.registerError(mr,D);var lr=[-3,o,jt,{[r]:m,[u]:400},[r,d],[0,0]];p.registerError(lr,y);var hr=[-3,o,Kt,{[r]:m,[u]:400},[r,d],[0,0]];p.registerError(hr,T);var fr=[-3,o,Vt,{[r]:m,[u]:400},[r,d],[0,0]];p.registerError(fr,R);var ct=[st,p],gr=[0,o,Dt,8,0],Er=[0,o,yt,8,0],xr=[0,o,wt,8,0],Sr=[0,o,Mt,8,0],at=[0,o,Gt,8,0],_r=[3,o,Rt,0,[qt,Lt,Xt,Wt,Yt,nt,tr,er,Bt],[0,[()=>Er,0],0,0,0,[()=>at,0],64,0,[()=>xr,0]],3],vr=[3,o,kt,0,[zt,or,Jt,nt,Zt],[[()=>gr,0],0,1,[()=>at,0],[()=>Sr,0]]];var pt=[9,o,Tt,{[Qt]:["POST","/token",200]},()=>_r,()=>vr];var dt=e=>({apiVersion:"2019-06-10",base64Decoder:e?.base64Decoder??Me,base64Encoder:e?.base64Encoder??Ke,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??rt,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Le,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:t=>t.getIdentityProvider("aws.auth#sigv4"),signer:new Ce},{schemeId:"smithy.api#noAuth",identityProvider:t=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new ge}],logger:e?.logger??new Q,protocol:e?.protocol??De,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.ssooidc",errorTypeRegistries:ct,version:"2019-06-10",serviceTarget:"AWSSSOOIDCService"},serviceId:e?.serviceId??"SSO OIDC",urlParser:e?.urlParser??G,utf8Decoder:e?.utf8Decoder??Ge,utf8Encoder:e?.utf8Encoder??je});var ut=e=>{W(process.version);let t=re(e),n=()=>t().then(Y),a=dt(e);xe(process.version);let s={profile:e?.profile,logger:a.logger};return{...a,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??l(Oe,s),bodyLengthChecker:e?.bodyLengthChecker??Fe,defaultUserAgentProvider:e?.defaultUserAgentProvider??Ue({serviceId:a.serviceId,clientVersion:$e.version}),maxAttempts:e?.maxAttempts??l(_e,e),region:e?.region??l(Z,{...ee,...s}),requestHandler:ye.create(e?.requestHandler??n),retryMode:e?.retryMode??l({...Ie,default:async()=>(await n()).retryMode||Se},e),sha256:e?.sha256??pe.bind(null,"sha256"),streamCollector:e?.streamCollector??Te,useDualstackEndpoint:e?.useDualstackEndpoint??l(j,s),useFipsEndpoint:e?.useFipsEndpoint??l(K,s),userAgentAppId:e?.userAgentAppId??l(He,s)}};var mt=e=>{let t=e.httpAuthSchemes,n=e.httpAuthSchemeProvider,a=e.credentials;return{setHttpAuthScheme(s){let E=t.findIndex(b=>b.schemeId===s.schemeId);E===-1?t.push(s):t.splice(E,1,s)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(s){n=s},httpAuthSchemeProvider(){return n},setCredentials(s){a=s},credentials(){return a}}},lt=e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()});var ht=(e,t)=>{let n=Object.assign(Ve(e),J(e),de(e),mt(e));return t.forEach(a=>a.configure(n)),Object.assign(e,ze(n),X(n),ue(n),lt(n))};var k=class extends V{config;constructor(...[t]){let n=ut(t||{});super(n),this.initConfig=n;let a=Ye(n),s=be(a),E=ve(s),b=te(E),ft=b,gt=ce(ft),Et=Be(gt),xt=ht(Et,t?.extensions||[]);this.config=xt,this.middlewareStack.use(z(this.config)),this.middlewareStack.use(Ne(this.config)),this.middlewareStack.use(Pe(this.config)),this.middlewareStack.use(me(this.config)),this.middlewareStack.use(Re(this.config)),this.middlewareStack.use(ke(this.config)),this.middlewareStack.use(we(this.config)),this.middlewareStack.use(le(this.config,{httpAuthSchemeParametersProvider:qe,identityProviderConfigProvider:async St=>new fe({"aws.auth#sigv4":St.credentials})})),this.middlewareStack.use(he(this.config))}destroy(){super.destroy()}};var w=class extends q.classBuilder().ep(We).m(function(t,n,a,s){return[ae(a,t.getEndpointParameterInstructions())]}).s("AWSSSOOIDCService","CreateToken",{}).n("SSOOIDCClient","CreateTokenCommand").sc(pt).build(){};var Ir={CreateTokenCommand:w},F=class extends k{};L(Ir,F);var Lo={KMS_ACCESS_DENIED:"KMS_AccessDeniedException"},Bo={KMS_DISABLED_KEY:"KMS_DisabledException",KMS_INVALID_KEY_USAGE:"KMS_InvalidKeyUsageException",KMS_INVALID_STATE:"KMS_InvalidStateException",KMS_KEY_NOT_FOUND:"KMS_NotFoundException"};export{q as $Command,_ as AccessDeniedException,ir as AccessDeniedException$,Lo as AccessDeniedExceptionReason,v as AuthorizationPendingException,sr as AuthorizationPendingException$,pt as CreateToken$,w as CreateTokenCommand,_r as CreateTokenRequest$,vr as CreateTokenResponse$,I as ExpiredTokenException,cr as ExpiredTokenException$,P as InternalServerException,ar as InternalServerException$,C as InvalidClientException,pr as InvalidClientException$,O as InvalidGrantException,dr as InvalidGrantException$,A as InvalidRequestException,ur as InvalidRequestException$,Bo as InvalidRequestExceptionReason,D as InvalidScopeException,mr as InvalidScopeException$,F as SSOOIDC,k as SSOOIDCClient,i as SSOOIDCServiceException,nr as SSOOIDCServiceException$,y as SlowDownException,lr as SlowDownException$,T as UnauthorizedClientException,hr as UnauthorizedClientException$,R as UnsupportedGrantTypeException,fr as UnsupportedGrantTypeException$,V as __Client,ct as errorTypeRegistries};

package/dist/sts-GE4BCXER.js

@@ -0,0 +1 @@
+import{a as st}from"./chunk-AN6QWW3N.js";import{a as it}from"./chunk-CVCZBECH.js";import{a as Me,b as qe,c as Ve,d as ze,e as Be,f as Qe,g as Ye,h as rt,i as nt}from"./chunk-GA44DNS2.js";import{A as Xe,D as Ze,E as et,F as tt,G as ot,b as be,c as He,f as we,g as $,l as ke,m as F,o as Le,t as Ke,v as je,z as Je}from"./chunk-UWHWNXNX.js";import{a as Ge}from"./chunk-MGGNSWUA.js";import"./chunk-WJLTO7JW.js";import"./chunk-TW5BOTVX.js";import{B as We,E as Ne,F as $e,G as Ue,H as Fe,b as pe,c as W,d as de,e as ue,g as me,h as ge,i as fe,j as he,l as Se,o as ye,p as Ce,s as Ie,t as Re,u as N,v as Oe,w as U}from"./chunk-A3H5SUSR.js";import"./chunk-6MSNEPUX.js";import{A as ce,C as le,E as X,F as Ee,G as Pe,H as Ae,I as xe,R as _e,S as Te,T as De,e as se,i as Y,j as ie,y as P,z as ae}from"./chunk-Z4YWESTY.js";import{w as ve}from"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";var at=async(e,t,n)=>({operation:se(t).operation,region:await Y(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()});function so(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,n)=>({signingProperties:{config:t,context:n}})}}function io(e){return{schemeId:"smithy.api#noAuth"}}var ct=e=>{let t=[];return e.operation==="AssumeRoleWithWebIdentity"?t.push(io(e)):t.push(so(e)),t},ao=e=>Object.assign(e,{stsClientCtor:E}),pt=e=>{let t=ao(e),n=Ke(t);return Object.assign(n,{authSchemePreference:Y(e.authSchemePreference??[])})};var lt=e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,useGlobalEndpoint:e.useGlobalEndpoint??!1,defaultSigningName:"sts"}),L={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var xt="required",o="type";var s="argv";var A="booleanEquals",l="stringEquals",yt="sigv4";var Ct="us-east-1",a="endpoint",dt="https://sts.{Region}.{PartitionResult#dnsSuffix}",h="tree",H="error",ee="getAttr",ut={[xt]:!1,[o]:"string"},Z={[xt]:!0,default:!1,[o]:"boolean"},It={ref:"Endpoint"},mt={fn:"isSet",[s]:[{ref:"Region"}]},d={ref:"Region"},gt={fn:"aws.partition",[s]:[d],assign:"PartitionResult"},Rt={ref:"UseFIPS"},vt={ref:"UseDualStack"},m={url:"https://sts.amazonaws.com",properties:{authSchemes:[{name:yt,signingName:"sts",signingRegion:Ct}]},headers:{}},g={},ft={conditions:[{fn:l,[s]:[d,"aws-global"]}],[a]:m,[o]:a},_t={fn:A,[s]:[Rt,!0]},Tt={fn:A,[s]:[vt,!0]},ht={fn:ee,[s]:[{ref:"PartitionResult"},"supportsFIPS"]},Dt={ref:"PartitionResult"},St={fn:A,[s]:[!0,{fn:ee,[s]:[Dt,"supportsDualStack"]}]},Et=[{fn:"isSet",[s]:[It]}],Pt=[_t],At=[Tt],co={version:"1.0",parameters:{Region:ut,UseDualStack:Z,UseFIPS:Z,Endpoint:ut,UseGlobalEndpoint:Z},rules:[{conditions:[{fn:A,[s]:[{ref:"UseGlobalEndpoint"},!0]},{fn:"not",[s]:Et},mt,gt,{fn:A,[s]:[Rt,!1]},{fn:A,[s]:[vt,!1]}],rules:[{conditions:[{fn:l,[s]:[d,"ap-northeast-1"]}],endpoint:m,[o]:a},{conditions:[{fn:l,[s]:[d,"ap-south-1"]}],endpoint:m,[o]:a},{conditions:[{fn:l,[s]:[d,"ap-southeast-1"]}],endpoint:m,[o]:a},{conditions:[{fn:l,[s]:[d,"ap-southeast-2"]}],endpoint:m,[o]:a},ft,{conditions:[{fn:l,[s]:[d,"ca-central-1"]}],endpoint:m,[o]:a},{conditions:[{fn:l,[s]:[d,"eu-central-1"]}],endpoint:m,[o]:a},{conditions:[{fn:l,[s]:[d,"eu-north-1"]}],endpoint:m,[o]:a},{conditions:[{fn:l,[s]:[d,"eu-west-1"]}],endpoint:m,[o]:a},{conditions:[{fn:l,[s]:[d,"eu-west-2"]}],endpoint:m,[o]:a},{conditions:[{fn:l,[s]:[d,"eu-west-3"]}],endpoint:m,[o]:a},{conditions:[{fn:l,[s]:[d,"sa-east-1"]}],endpoint:m,[o]:a},{conditions:[{fn:l,[s]:[d,Ct]}],endpoint:m,[o]:a},{conditions:[{fn:l,[s]:[d,"us-east-2"]}],endpoint:m,[o]:a},{conditions:[{fn:l,[s]:[d,"us-west-1"]}],endpoint:m,[o]:a},{conditions:[{fn:l,[s]:[d,"us-west-2"]}],endpoint:m,[o]:a},{endpoint:{url:dt,properties:{authSchemes:[{name:yt,signingName:"sts",signingRegion:"{Region}"}]},headers:g},[o]:a}],[o]:h},{conditions:Et,rules:[{conditions:Pt,error:"Invalid Configuration: FIPS and custom endpoint are not supported",[o]:H},{conditions:At,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",[o]:H},{endpoint:{url:It,properties:g,headers:g},[o]:a}],[o]:h},{conditions:[mt],rules:[{conditions:[gt],rules:[{conditions:[_t,Tt],rules:[{conditions:[{fn:A,[s]:[!0,ht]},St],rules:[{endpoint:{url:"https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:g,headers:g},[o]:a}],[o]:h},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",[o]:H}],[o]:h},{conditions:Pt,rules:[{conditions:[{fn:A,[s]:[ht,!0]}],rules:[{conditions:[{fn:l,[s]:[{fn:ee,[s]:[Dt,"name"]},"aws-us-gov"]}],endpoint:{url:"https://sts.{Region}.amazonaws.com",properties:g,headers:g},[o]:a},{endpoint:{url:"https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",properties:g,headers:g},[o]:a}],[o]:h},{error:"FIPS is enabled but this partition does not support FIPS",[o]:H}],[o]:h},{conditions:At,rules:[{conditions:[St],rules:[{endpoint:{url:"https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:g,headers:g},[o]:a}],[o]:h},{error:"DualStack is enabled but this partition does not support DualStack",[o]:H}],[o]:h},ft,{endpoint:{url:dt,properties:g,headers:g},[o]:a}],[o]:h}],[o]:h},{error:"Invalid Configuration: Missing Region",[o]:H}]},bt=co;var po=new ye({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),Ht=(e,t={})=>po.get(e,()=>Ie(bt,{endpointParams:e,logger:t.logger}));Ce.aws=ke;var f=class e extends ue{constructor(t){super(t),Object.setPrototypeOf(this,e.prototype)}};var K=class e extends f{name="ExpiredTokenException";$fault="client";constructor(t){super({name:"ExpiredTokenException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},j=class e extends f{name="MalformedPolicyDocumentException";$fault="client";constructor(t){super({name:"MalformedPolicyDocumentException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},G=class e extends f{name="PackedPolicyTooLargeException";$fault="client";constructor(t){super({name:"PackedPolicyTooLargeException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},M=class e extends f{name="RegionDisabledException";$fault="client";constructor(t){super({name:"RegionDisabledException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},q=class e extends f{name="IDPRejectedClaimException";$fault="client";constructor(t){super({name:"IDPRejectedClaimException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},V=class e extends f{name="InvalidIdentityTokenException";$fault="client";constructor(t){super({name:"InvalidIdentityTokenException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},z=class e extends f{name="IDPCommunicationErrorException";$fault="client";constructor(t){super({name:"IDPCommunicationErrorException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}};var lo="Arn",uo="AccessKeyId",mo="AssumeRole",go="AssumedRoleId",fo="AssumeRoleRequest",ho="AssumeRoleResponse",te="AssumedRoleUser",So="AssumeRoleWithWebIdentity",Eo="AssumeRoleWithWebIdentityRequest",Po="AssumeRoleWithWebIdentityResponse",Ao="Audience",oe="Credentials",xo="ContextAssertion",wt="DurationSeconds",yo="Expiration",Co="ExternalId",Io="ExpiredTokenException",Ro="IDPCommunicationErrorException",vo="IDPRejectedClaimException",_o="InvalidIdentityTokenException",To="Key",Do="MalformedPolicyDocumentException",kt="Policy",Ot="PolicyArns",bo="ProviderArn",Ho="ProvidedContexts",wo="ProvidedContextsListType",ko="ProvidedContext",Oo="PolicyDescriptorType",Wo="ProviderId",Wt="PackedPolicySize",No="PackedPolicyTooLargeException",$o="Provider",Nt="RoleArn",Uo="RegionDisabledException",$t="RoleSessionName",Fo="SecretAccessKey",Lo="SubjectFromWebIdentityToken",re="SourceIdentity",Ko="SerialNumber",jo="SessionToken",Go="Tags",Mo="TokenCode",qo="TransitiveTagKeys",Vo="Tag",zo="Value",Jo="WebIdentityToken",Bo="arn",Qo="accessKeySecretType",R="awsQueryError",v="client",Yo="clientTokenType",_="error",T="httpError",D="message",Xo="policyDescriptorListType",Ut="smithy.ts.sdk.synthetic.com.amazonaws.sts",Zo="tagListType",c="com.amazonaws.sts",Ft=X.for(Ut),er=[-3,Ut,"STSServiceException",0,[],[]];Ft.registerError(er,f);var x=X.for(c),tr=[-3,c,Io,{[R]:["ExpiredTokenException",400],[_]:v,[T]:400},[D],[0]];x.registerError(tr,K);var or=[-3,c,Ro,{[R]:["IDPCommunicationError",400],[_]:v,[T]:400},[D],[0]];x.registerError(or,z);var rr=[-3,c,vo,{[R]:["IDPRejectedClaim",403],[_]:v,[T]:403},[D],[0]];x.registerError(rr,q);var nr=[-3,c,_o,{[R]:["InvalidIdentityToken",400],[_]:v,[T]:400},[D],[0]];x.registerError(nr,V);var sr=[-3,c,Do,{[R]:["MalformedPolicyDocument",400],[_]:v,[T]:400},[D],[0]];x.registerError(sr,j);var ir=[-3,c,No,{[R]:["PackedPolicyTooLarge",400],[_]:v,[T]:400},[D],[0]];x.registerError(ir,G);var ar=[-3,c,Uo,{[R]:["RegionDisabledException",403],[_]:v,[T]:403},[D],[0]];x.registerError(ar,M);var Lt=[Ft,x],cr=[0,c,Qo,8,0],pr=[0,c,Yo,8,0],Kt=[3,c,te,0,[go,lo],[0,0],2],lr=[3,c,fo,0,[Nt,$t,Ot,kt,wt,Go,qo,Co,Ko,Mo,re,Ho],[0,0,()=>Gt,0,1,()=>Er,64,0,0,0,0,()=>Sr],2],dr=[3,c,ho,0,[oe,te,Wt,re],[[()=>jt,0],()=>Kt,1,0]],ur=[3,c,Eo,0,[Nt,$t,Jo,Wo,Ot,kt,wt],[0,0,[()=>pr,0],0,()=>Gt,0,1],3],mr=[3,c,Po,0,[oe,Lo,te,Wt,$o,Ao,re],[[()=>jt,0],0,()=>Kt,1,0,0,0]],jt=[3,c,oe,0,[uo,Fo,jo,yo],[0,[()=>cr,0],0,4],4],gr=[3,c,Oo,0,[Bo],[0]],fr=[3,c,ko,0,[bo,xo],[0,0]],hr=[3,c,Vo,0,[To,zo],[0,0],2],Gt=[1,c,Xo,0,()=>gr],Sr=[1,c,wo,0,()=>fr];var Er=[1,c,Zo,0,()=>hr],Mt=[9,c,mo,0,()=>lr,()=>dr],qt=[9,c,So,0,()=>ur,()=>mr];var Vt=e=>({apiVersion:"2011-06-15",base64Decoder:e?.base64Decoder??Ze,base64Encoder:e?.base64Encoder??ot,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Ht,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??ct,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:t=>t.getIdentityProvider("aws.auth#sigv4"),signer:new F},{schemeId:"smithy.api#noAuth",identityProvider:t=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new $}],logger:e?.logger??new Se,protocol:e?.protocol??je,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:Lt,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:e?.serviceId??"STS",urlParser:e?.urlParser??ie,utf8Decoder:e?.utf8Decoder??et,utf8Encoder:e?.utf8Encoder??tt});var zt=e=>{ge(process.version);let t=xe(e),n=()=>t().then(me),i=Vt(e);Oe(process.version);let r={profile:e?.profile,logger:i.logger};return{...i,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??P(Le,r),bodyLengthChecker:e?.bodyLengthChecker??Xe,defaultUserAgentProvider:e?.defaultUserAgentProvider??Qe({serviceId:i.serviceId,clientVersion:it.version}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:u=>u.getIdentityProvider("aws.auth#sigv4")||(async p=>await e.credentialDefaultProvider(p?.__config||{})()),signer:new F},{schemeId:"smithy.api#noAuth",identityProvider:u=>u.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new $}],maxAttempts:e?.maxAttempts??P(Ne,e),region:e?.region??P(Ee,{...Pe,...r}),requestHandler:Ge.create(e?.requestHandler??n),retryMode:e?.retryMode??P({...Ue,default:async()=>(await n()).retryMode||We},e),sha256:e?.sha256??ve.bind(null,"sha256"),streamCollector:e?.streamCollector??Me,useDualstackEndpoint:e?.useDualstackEndpoint??P(ae,r),useFipsEndpoint:e?.useFipsEndpoint??P(ce,r),userAgentAppId:e?.userAgentAppId??P(Ye,r)}};var Jt=e=>{let t=e.httpAuthSchemes,n=e.httpAuthSchemeProvider,i=e.credentials;return{setHttpAuthScheme(r){let u=t.findIndex(p=>p.schemeId===r.schemeId);u===-1?t.push(r):t.splice(u,1,r)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(r){n=r},httpAuthSchemeProvider(){return n},setCredentials(r){i=r},credentials(){return i}}},Bt=e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()});var Qt=(e,t)=>{let n=Object.assign(rt(e),fe(e),_e(e),Jt(e));return t.forEach(i=>i.configure(n)),Object.assign(e,nt(n),he(n),Te(n),Bt(n))};var E=class extends pe{config;constructor(...[t]){let n=zt(t||{});super(n),this.initConfig=n;let i=lt(n),r=Je(i),u=$e(r),p=Ae(u),S=p,y=Re(S),C=pt(y),b=Qt(C,t?.extensions||[]);this.config=b,this.middlewareStack.use(le(this.config)),this.middlewareStack.use(Be(this.config)),this.middlewareStack.use(Fe(this.config)),this.middlewareStack.use(De(this.config)),this.middlewareStack.use(qe(this.config)),this.middlewareStack.use(Ve(this.config)),this.middlewareStack.use(ze(this.config)),this.middlewareStack.use(be(this.config,{httpAuthSchemeParametersProvider:at,identityProviderConfigProvider:async I=>new we({"aws.auth#sigv4":I.credentials})})),this.middlewareStack.use(He(this.config))}destroy(){super.destroy()}};var w=class extends W.classBuilder().ep(L).m(function(t,n,i,r){return[N(i,t.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRole",{}).n("STSClient","AssumeRoleCommand").sc(Mt).build(){};var k=class extends W.classBuilder().ep(L).m(function(t,n,i,r){return[N(i,t.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoleWithWebIdentity",{}).n("STSClient","AssumeRoleWithWebIdentityCommand").sc(qt).build(){};var Pr={AssumeRoleCommand:w,AssumeRoleWithWebIdentityCommand:k},ne=class extends E{};de(Pr,ne);var Yt=e=>{if(typeof e?.Arn=="string"){let t=e.Arn.split(":");if(t.length>4&&t[4]!=="")return t[4]}},Xt=async(e,t,n,i={})=>{let r=typeof e=="function"?await e():e,u=typeof t=="function"?await t():t,p="",S=r??u??(p=await st(i)());return n?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${r} (credential provider clientConfig)`,`${u} (contextual client)`,`${p} (STS default: AWS_REGION, profile region, or us-east-1)`),S},Zt=(e,t)=>{let n,i;return async(r,u)=>{if(i=r,!n){let{logger:b=e?.parentClientConfig?.logger,profile:I=e?.parentClientConfig?.profile,region:J,requestHandler:O=e?.parentClientConfig?.requestHandler,credentialProviderLogger:B,userAgentAppId:Q=e?.parentClientConfig?.userAgentAppId}=e,ro=await Xt(J,e?.parentClientConfig?.region,B,{logger:b,profile:I}),no=!to(O);n=new t({...e,userAgentAppId:Q,profile:I,credentialDefaultProvider:()=>async()=>i,region:ro,requestHandler:no?O:void 0,logger:b})}let{Credentials:p,AssumedRoleUser:S}=await n.send(new w(u));if(!p||!p.AccessKeyId||!p.SecretAccessKey)throw new Error(`Invalid response from STS.assumeRole call with role ${u.RoleArn}`);let y=Yt(S),C={accessKeyId:p.AccessKeyId,secretAccessKey:p.SecretAccessKey,sessionToken:p.SessionToken,expiration:p.Expiration,...p.CredentialScope&&{credentialScope:p.CredentialScope},...y&&{accountId:y}};return U(C,"CREDENTIALS_STS_ASSUME_ROLE","i"),C}},eo=(e,t)=>{let n;return async i=>{if(!n){let{logger:y=e?.parentClientConfig?.logger,profile:C=e?.parentClientConfig?.profile,region:b,requestHandler:I=e?.parentClientConfig?.requestHandler,credentialProviderLogger:J,userAgentAppId:O=e?.parentClientConfig?.userAgentAppId}=e,B=await Xt(b,e?.parentClientConfig?.region,J,{logger:y,profile:C}),Q=!to(I);n=new t({...e,userAgentAppId:O,profile:C,region:B,requestHandler:Q?I:void 0,logger:y})}let{Credentials:r,AssumedRoleUser:u}=await n.send(new k(i));if(!r||!r.AccessKeyId||!r.SecretAccessKey)throw new Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${i.RoleArn}`);let p=Yt(u),S={accessKeyId:r.AccessKeyId,secretAccessKey:r.SecretAccessKey,sessionToken:r.SessionToken,expiration:r.Expiration,...r.CredentialScope&&{credentialScope:r.CredentialScope},...p&&{accountId:p}};return p&&U(S,"RESOLVED_ACCOUNT_ID","T"),U(S,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),S}};var to=e=>e?.metadata?.handlerProtocol==="h2";var oo=(e,t)=>t?class extends e{constructor(i){super(i);for(let r of t)this.middlewareStack.use(r)}}:e,Ar=(e={},t)=>Zt(e,oo(E,t)),xr=(e={},t)=>eo(e,oo(E,t)),is=e=>t=>e({roleAssumer:Ar(t),roleAssumerWithWebIdentity:xr(t),...t});export{W as $Command,Mt as AssumeRole$,w as AssumeRoleCommand,lr as AssumeRoleRequest$,dr as AssumeRoleResponse$,qt as AssumeRoleWithWebIdentity$,k as AssumeRoleWithWebIdentityCommand,ur as AssumeRoleWithWebIdentityRequest$,mr as AssumeRoleWithWebIdentityResponse$,Kt as AssumedRoleUser$,jt as Credentials$,K as ExpiredTokenException,tr as ExpiredTokenException$,z as IDPCommunicationErrorException,or as IDPCommunicationErrorException$,q as IDPRejectedClaimException,rr as IDPRejectedClaimException$,V as InvalidIdentityTokenException,nr as InvalidIdentityTokenException$,j as MalformedPolicyDocumentException,sr as MalformedPolicyDocumentException$,G as PackedPolicyTooLargeException,ir as PackedPolicyTooLargeException$,gr as PolicyDescriptorType$,fr as ProvidedContext$,M as RegionDisabledException,ar as RegionDisabledException$,ne as STS,E as STSClient,f as STSServiceException,er as STSServiceException$,hr as Tag$,pe as __Client,is as decorateDefaultCredentialProvider,Lt as errorTypeRegistries,Ar as getDefaultRoleAssumer,xr as getDefaultRoleAssumerWithWebIdentity};

package/dist/sts-HDZNXPJY.js

@@ -0,0 +1 @@
+import{a as ut}from"./chunk-M3NEWJ7L.js";import{a as At}from"./chunk-AN6QWW3N.js";import{a as st,b as it,c as at,d as ct,e as lt,f as dt,g as mt,h as vt,i as Pt}from"./chunk-GA44DNS2.js";import{A as gt,D as ht,E as St,F as ft,G as Et,b as Ke,c as Me,f as je,g as L,l as qe,m as M,n as j,o as Je,p as Ze,q as et,r as tt,s as ie,t as rt,v as ot,z as pt}from"./chunk-UWHWNXNX.js";import{a as nt}from"./chunk-MGGNSWUA.js";import"./chunk-WJLTO7JW.js";import"./chunk-TW5BOTVX.js";import{B as Be,E as ze,F as Xe,G as Ye,H as Qe,b as ve,c as U,d as Ae,e as ye,g as xe,h as Ce,i as _e,j as Ie,l as Re,m as be,n as Oe,o as Ne,p as We,r as He,t as $e,u as F,v as Ge,w as K}from"./chunk-A3H5SUSR.js";import"./chunk-6MSNEPUX.js";import{A as Ee,C as Pe,E as se,F as we,G as Te,H as De,I as ke,R as Ue,S as Fe,T as Le,e as oe,i as ne,j as Se,y as E,z as fe}from"./chunk-Z4YWESTY.js";import{w as Ve}from"./chunk-MYIHTCRS.js";import"./chunk-IYWUY3VA.js";var q="X-Amz-S3session-Token",ae=q.toLowerCase();var W=class extends tt{async signWithCredentials(t,r,n){let o=yt(r);t.headers[ae]=r.sessionToken;let i=this;return xt(i,o),i.signRequest(t,n??{})}async presignWithCredentials(t,r,n){let o=yt(r);return delete t.headers[ae],t.headers[q]=r.sessionToken,t.query=t.query??{},t.query[q]=r.sessionToken,xt(this,o),this.presign(t,n)}};function yt(e){return{accessKeyId:e.accessKeyId,secretAccessKey:e.secretAccessKey,expiration:e.expiration}}function xt(e,t){let r=setTimeout(()=>{throw new Error("SignatureV4S3Express credential override was created but not called.")},10),n=e.credentialProvider,o=()=>(clearTimeout(r),e.credentialProvider=n,Promise.resolve(t));e.credentialProvider=o}var H={CrtSignerV4:null};var D=class{sigv4aSigner;sigv4Signer;signerOptions;static sigv4aDependency(){return typeof H.CrtSignerV4=="function"?"crt":typeof ie.SignatureV4a=="function"?"js":"none"}constructor(t){this.sigv4Signer=new W(t),this.signerOptions=t}async sign(t,r={}){return r.signingRegion==="*"?this.getSigv4aSigner().sign(t,r):this.sigv4Signer.sign(t,r)}async signWithCredentials(t,r,n={}){if(n.signingRegion==="*"){let o=this.getSigv4aSigner(),i=H.CrtSignerV4;if(i&&o instanceof i)return o.signWithCredentials(t,r,n);throw new Error(`signWithCredentials with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt`)}return this.sigv4Signer.signWithCredentials(t,r,n)}async presign(t,r={}){if(r.signingRegion==="*"){let n=this.getSigv4aSigner(),o=H.CrtSignerV4;if(o&&n instanceof o)return n.presign(t,r);throw new Error(`presign with signingRegion '*' is only supported when using the CRT dependency @aws-sdk/signature-v4-crt. Please check whether you have installed the "@aws-sdk/signature-v4-crt" package explicitly. You must also register the package by calling [require("@aws-sdk/signature-v4-crt");] or an ESM equivalent such as [import "@aws-sdk/signature-v4-crt";]. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt`)}return this.sigv4Signer.presign(t,r)}async presignWithCredentials(t,r,n={}){if(n.signingRegion==="*")throw new Error("Method presignWithCredentials is not supported for [signingRegion=*].");return this.sigv4Signer.presignWithCredentials(t,r,n)}getSigv4aSigner(){if(!this.sigv4aSigner){let t=H.CrtSignerV4,r=ie.SignatureV4a;if(this.signerOptions.runtime==="node"){if(!t&&!r)throw new Error("Neither CRT nor JS SigV4a implementation is available. Please load either @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a. For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt");if(t&&typeof t=="function")this.sigv4aSigner=new t({...this.signerOptions,signingAlgorithm:1});else if(r&&typeof r=="function")this.sigv4aSigner=new r({...this.signerOptions});else throw new Error("Available SigV4a implementation is not a valid constructor. Please ensure you've properly imported @aws-sdk/signature-v4-crt or @aws-sdk/signature-v4a.For more information please go to https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt")}else{if(!r||typeof r!="function")throw new Error("JS SigV4a implementation is not available or not a valid constructor. Please check whether you have installed the @aws-sdk/signature-v4a package explicitly. The CRT implementation is not available for browsers. You must also register the package by calling [require('@aws-sdk/signature-v4a');] or an ESM equivalent such as [import '@aws-sdk/signature-v4a';]. For more information please go to https://github.com/aws/aws-sdk-js-v3#using-javascript-non-crt-implementation-of-sigv4a");this.sigv4aSigner=new r({...this.signerOptions})}}return this.sigv4aSigner}};var b="ref",x=-1,$=!0,Ct="isSet",bt="PartitionResult",V="booleanEquals",p="stringEquals",ce="getAttr",_t="us-east-1",It="sigv4",Rt="sts",wt="https://sts.{Region}.{PartitionResult#dnsSuffix}",Tt={[b]:"Endpoint"},l={[b]:"Region"},pe={[b]:bt},k={},Dt=[l],kt={conditions:[[Ct,[Tt]],[Ct,Dt],["aws.partition",Dt,bt],[V,[{[b]:"UseFIPS"},$]],[V,[{[b]:"UseDualStack"},$]],[p,[l,"aws-global"]],[V,[{[b]:"UseGlobalEndpoint"},$]],[p,[l,"eu-central-1"]],[V,[{fn:ce,argv:[pe,"supportsDualStack"]},$]],[V,[{fn:ce,argv:[pe,"supportsFIPS"]},$]],[p,[l,"ap-south-1"]],[p,[l,"eu-north-1"]],[p,[l,"eu-west-1"]],[p,[l,"eu-west-2"]],[p,[l,"eu-west-3"]],[p,[l,"sa-east-1"]],[p,[l,_t]],[p,[l,"us-east-2"]],[p,[l,"us-west-2"]],[p,[l,"us-west-1"]],[p,[l,"ca-central-1"]],[p,[l,"ap-southeast-1"]],[p,[l,"ap-northeast-1"]],[p,[l,"ap-southeast-2"]],[p,[{fn:ce,argv:[pe,"name"]},"aws-us-gov"]]],results:[[x],["https://sts.amazonaws.com",{authSchemes:[{name:It,signingName:Rt,signingRegion:_t}]}],[wt,{authSchemes:[{name:It,signingName:Rt,signingRegion:"{Region}"}]}],[x,"Invalid Configuration: FIPS and custom endpoint are not supported"],[x,"Invalid Configuration: Dualstack and custom endpoint are not supported"],[Tt,k],["https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",k],[x,"FIPS and DualStack are enabled, but this partition does not support one or both"],["https://sts.{Region}.amazonaws.com",k],["https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",k],[x,"FIPS is enabled but this partition does not support FIPS"],["https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",k],[x,"DualStack is enabled but this partition does not support DualStack"],[wt,k],[x,"Invalid Configuration: Missing Region"]]},ur=2,s=1e8,dr=new Int32Array([-1,1,-1,0,30,3,1,4,s+14,2,5,s+14,3,25,6,4,24,7,5,s+1,8,6,9,s+13,7,s+1,10,10,s+1,11,11,s+1,12,12,s+1,13,13,s+1,14,14,s+1,15,15,s+1,16,16,s+1,17,17,s+1,18,18,s+1,19,19,s+1,20,20,s+1,21,21,s+1,22,22,s+1,23,23,s+1,s+2,8,s+11,s+12,4,28,26,9,27,s+10,24,s+8,s+9,8,29,s+7,9,s+6,s+7,3,s+3,31,4,s+4,s+5]),Ot=Oe.from(dr,ur,kt.conditions,kt.results);var mr=new Ne({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),G=(e,t={})=>mr.get(e,()=>He(Ot,{endpointParams:e,logger:t.logger}));We.aws=qe;var gr=e=>async(t,r,n)=>{if(!n)throw new Error("Could not find `input` for `defaultEndpointRuleSetHttpAuthSchemeParametersProvider`");let o=await e(t,r,n),i=oe(r)?.commandInstance?.constructor?.getEndpointParameterInstructions;if(!i)throw new Error(`getEndpointParameterInstructions() is not defined on '${r.commandName}'`);let a=await be(n,{getEndpointParameterInstructions:i},t);return Object.assign(o,a)},hr=async(e,t,r)=>({operation:oe(t).operation,region:await ne(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),Nt=gr(hr);function Wt(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,r)=>({signingProperties:{config:t,context:r}})}}function le(e){return{schemeId:"aws.auth#sigv4a",signingProperties:{name:"sts",region:e.region},propertiesExtractor:(t,r)=>({signingProperties:{config:t,context:r}})}}function Ht(e){return{schemeId:"smithy.api#noAuth"}}var Sr=(e,t,r)=>o=>{let a=e(o).properties?.authSchemes;if(!a)return t(o);let d=[];for(let S of a){let{name:m,properties:P={},...g}=S,f=m.toLowerCase();m!==f&&console.warn(`HttpAuthScheme has been normalized with lowercasing: '${m}' to '${f}'`);let h;if(f==="sigv4a"){h="aws.auth#sigv4a";let te=a.find(re=>{let he=re.name.toLowerCase();return he!=="sigv4a"&&he.startsWith("sigv4")});if(D.sigv4aDependency()==="none"&&te)continue}else if(f.startsWith("sigv4"))h="aws.auth#sigv4";else throw new Error(`Unknown HttpAuthScheme found in '@smithy.rules#endpointRuleSet': '${f}'`);let T=r[h];if(!T)throw new Error(`Could not find HttpAuthOption create function for '${h}'`);let A=T(o);A.schemeId=h,A.signingProperties={...A.signingProperties||{},...g,...P},d.push(A)}return d},fr=e=>{let t=[];return e.operation==="AssumeRoleWithWebIdentity"?(t.push(Ht(e)),t.push(le(e))):(t.push(Wt(e)),t.push(le(e))),t},$t=Sr(G,fr,{"aws.auth#sigv4":Wt,"aws.auth#sigv4a":le,"smithy.api#noAuth":Ht}),Er=e=>Object.assign(e,{stsClientCtor:v}),Vt=e=>{let t=Er(e),r=rt(t),n=Ze(r);return Object.assign(n,{authSchemePreference:ne(e.authSchemePreference??[])})};var Ut=e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,useGlobalEndpoint:e.useGlobalEndpoint??!1,defaultSigningName:"sts"}),B={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}};var u=class e extends ye{constructor(t){super(t),Object.setPrototypeOf(this,e.prototype)}};var z=class e extends u{name="ExpiredTokenException";$fault="client";constructor(t){super({name:"ExpiredTokenException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},X=class e extends u{name="MalformedPolicyDocumentException";$fault="client";constructor(t){super({name:"MalformedPolicyDocumentException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},Y=class e extends u{name="PackedPolicyTooLargeException";$fault="client";constructor(t){super({name:"PackedPolicyTooLargeException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},Q=class e extends u{name="RegionDisabledException";$fault="client";constructor(t){super({name:"RegionDisabledException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},J=class e extends u{name="IDPRejectedClaimException";$fault="client";constructor(t){super({name:"IDPRejectedClaimException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},Z=class e extends u{name="InvalidIdentityTokenException";$fault="client";constructor(t){super({name:"InvalidIdentityTokenException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}},ee=class e extends u{name="IDPCommunicationErrorException";$fault="client";$retryable={};constructor(t){super({name:"IDPCommunicationErrorException",$fault:"client",...t}),Object.setPrototypeOf(this,e.prototype)}};var vr="Arn",Pr="AccessKeyId",Ar="AssumeRole",yr="AssumedRoleId",xr="AssumeRoleRequest",Cr="AssumeRoleResponse",ue="AssumedRoleUser",_r="AssumeRoleWithWebIdentity",Ir="AssumeRoleWithWebIdentityRequest",Rr="AssumeRoleWithWebIdentityResponse",wr="Audience",de="Credentials",Tr="ContextAssertion",Ft="DurationSeconds",Dr="Expiration",kr="ExternalId",br="ExpiredTokenException",Or="IDPCommunicationErrorException",Nr="IDPRejectedClaimException",Wr="InvalidIdentityTokenException",Hr="Key",$r="MalformedPolicyDocumentException",Lt="Policy",Kt="PolicyArns",Vr="ProviderArn",Ur="ProvidedContexts",Fr="ProvidedContextsListType",Lr="ProvidedContext",Kr="PolicyDescriptorType",Mr="ProviderId",Mt="PackedPolicySize",jr="PackedPolicyTooLargeException",qr="Provider",jt="RoleArn",Gr="RegionDisabledException",qt="RoleSessionName",Br="SecretAccessKey",zr="SubjectFromWebIdentityToken",me="SourceIdentity",Xr="SerialNumber",Yr="SessionToken",Qr="Tags",Jr="TokenCode",Zr="TransitiveTagKeys",eo="Tag",to="Value",ro="WebIdentityToken",oo="arn",no="accessKeySecretType",C="awsQueryError",_="client",so="clientTokenType",I="error",R="httpError",w="message",io="policyDescriptorListType",Gt="smithy.ts.sdk.synthetic.com.amazonaws.sts",ao="tagListType",c="com.amazonaws.sts",Bt=se.for(Gt),co=[-3,Gt,"STSServiceException",0,[],[]];Bt.registerError(co,u);var y=se.for(c),po=[-3,c,br,{[C]:["ExpiredTokenException",400],[I]:_,[R]:400},[w],[0]];y.registerError(po,z);var lo=[-3,c,Or,{[C]:["IDPCommunicationError",400],[I]:_,[R]:400},[w],[0]];y.registerError(lo,ee);var uo=[-3,c,Nr,{[C]:["IDPRejectedClaim",403],[I]:_,[R]:403},[w],[0]];y.registerError(uo,J);var mo=[-3,c,Wr,{[C]:["InvalidIdentityToken",400],[I]:_,[R]:400},[w],[0]];y.registerError(mo,Z);var go=[-3,c,$r,{[C]:["MalformedPolicyDocument",400],[I]:_,[R]:400},[w],[0]];y.registerError(go,X);var ho=[-3,c,jr,{[C]:["PackedPolicyTooLarge",400],[I]:_,[R]:400},[w],[0]];y.registerError(ho,Y);var So=[-3,c,Gr,{[C]:["RegionDisabledException",403],[I]:_,[R]:403},[w],[0]];y.registerError(So,Q);var zt=[Bt,y],fo=[0,c,no,8,0],Eo=[0,c,so,8,0],Xt=[3,c,ue,0,[yr,vr],[0,0],2],vo=[3,c,xr,0,[jt,qt,Kt,Lt,Ft,Qr,Zr,kr,Xr,Jr,me,Ur],[0,0,()=>Qt,0,1,()=>Ro,64,0,0,0,0,()=>Io],2],Po=[3,c,Cr,0,[de,ue,Mt,me],[[()=>Yt,0],()=>Xt,1,0]],Ao=[3,c,Ir,0,[jt,qt,ro,Mr,Kt,Lt,Ft],[0,0,[()=>Eo,0],0,()=>Qt,0,1],3],yo=[3,c,Rr,0,[de,zr,ue,Mt,qr,wr,me],[[()=>Yt,0],0,()=>Xt,1,0,0,0]],Yt=[3,c,de,0,[Pr,Br,Yr,Dr],[0,[()=>fo,0],0,4],4],xo=[3,c,Kr,0,[oo],[0]],Co=[3,c,Lr,0,[Vr,Tr],[0,0]],_o=[3,c,eo,0,[Hr,to],[0,0],2],Qt=[1,c,io,0,()=>xo],Io=[1,c,Fr,0,()=>Co];var Ro=[1,c,ao,0,()=>_o],Jt=[9,c,Ar,0,()=>vo,()=>Po],Zt=[9,c,_r,0,()=>Ao,()=>yo];var er=e=>({apiVersion:"2011-06-15",base64Decoder:e?.base64Decoder??ht,base64Encoder:e?.base64Encoder??Et,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??G,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??$t,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:t=>t.getIdentityProvider("aws.auth#sigv4"),signer:new M},{schemeId:"aws.auth#sigv4a",identityProvider:t=>t.getIdentityProvider("aws.auth#sigv4a"),signer:new j},{schemeId:"smithy.api#noAuth",identityProvider:t=>t.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new L}],logger:e?.logger??new Re,protocol:e?.protocol??ot,protocolSettings:e?.protocolSettings??{defaultNamespace:"com.amazonaws.sts",errorTypeRegistries:zt,xmlNamespace:"https://sts.amazonaws.com/doc/2011-06-15/",version:"2011-06-15",serviceTarget:"AWSSecurityTokenServiceV20110615"},serviceId:e?.serviceId??"STS",signerConstructor:e?.signerConstructor??D,urlParser:e?.urlParser??Se,utf8Decoder:e?.utf8Decoder??St,utf8Encoder:e?.utf8Encoder??ft});var tr=e=>{Ce(process.version);let t=ke(e),r=()=>t().then(xe),n=er(e);Ge(process.version);let o={profile:e?.profile,logger:n.logger};return{...n,...e,runtime:"node",defaultsMode:t,authSchemePreference:e?.authSchemePreference??E(Je,o),bodyLengthChecker:e?.bodyLengthChecker??gt,defaultUserAgentProvider:e?.defaultUserAgentProvider??dt({serviceId:n.serviceId,clientVersion:ut.version}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:i=>i.getIdentityProvider("aws.auth#sigv4")||(async a=>await e.credentialDefaultProvider(a?.__config||{})()),signer:new M},{schemeId:"aws.auth#sigv4a",identityProvider:i=>i.getIdentityProvider("aws.auth#sigv4a"),signer:new j},{schemeId:"smithy.api#noAuth",identityProvider:i=>i.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),signer:new L}],maxAttempts:e?.maxAttempts??E(ze,e),region:e?.region??E(we,{...Te,...o}),requestHandler:nt.create(e?.requestHandler??r),retryMode:e?.retryMode??E({...Ye,default:async()=>(await r()).retryMode||Be},e),sha256:e?.sha256??Ve.bind(null,"sha256"),sigv4aSigningRegionSet:e?.sigv4aSigningRegionSet??E(et,o),streamCollector:e?.streamCollector??st,useDualstackEndpoint:e?.useDualstackEndpoint??E(fe,o),useFipsEndpoint:e?.useFipsEndpoint??E(Ee,o),userAgentAppId:e?.userAgentAppId??E(mt,o)}};var rr=e=>{let t=e.httpAuthSchemes,r=e.httpAuthSchemeProvider,n=e.credentials;return{setHttpAuthScheme(o){let i=t.findIndex(a=>a.schemeId===o.schemeId);i===-1?t.push(o):t.splice(i,1,o)},httpAuthSchemes(){return t},setHttpAuthSchemeProvider(o){r=o},httpAuthSchemeProvider(){return r},setCredentials(o){n=o},credentials(){return n}}},or=e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()});var nr=(e,t)=>{let r=Object.assign(vt(e),_e(e),Ue(e),rr(e));return t.forEach(n=>n.configure(r)),Object.assign(e,Pt(r),Ie(r),Fe(r),or(r))};var v=class extends ve{config;constructor(...[t]){let r=tr(t||{});super(r),this.initConfig=r;let n=Ut(r),o=pt(n),i=Xe(o),a=De(i),d=a,S=$e(d),m=Vt(S),P=nr(m,t?.extensions||[]);this.config=P,this.middlewareStack.use(Pe(this.config)),this.middlewareStack.use(lt(this.config)),this.middlewareStack.use(Qe(this.config)),this.middlewareStack.use(Le(this.config)),this.middlewareStack.use(it(this.config)),this.middlewareStack.use(at(this.config)),this.middlewareStack.use(ct(this.config)),this.middlewareStack.use(Ke(this.config,{httpAuthSchemeParametersProvider:Nt,identityProviderConfigProvider:async g=>new je({"aws.auth#sigv4":g.credentials,"aws.auth#sigv4a":g.credentials})})),this.middlewareStack.use(Me(this.config))}destroy(){super.destroy()}};var O=class extends U.classBuilder().ep(B).m(function(t,r,n,o){return[F(n,t.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRole",{}).n("STSClient","AssumeRoleCommand").sc(Jt).build(){};var N=class extends U.classBuilder().ep(B).m(function(t,r,n,o){return[F(n,t.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoleWithWebIdentity",{}).n("STSClient","AssumeRoleWithWebIdentityCommand").sc(Zt).build(){};var wo={AssumeRoleCommand:O,AssumeRoleWithWebIdentityCommand:N},ge=class extends v{};Ae(wo,ge);var sr=e=>{if(typeof e?.Arn=="string"){let t=e.Arn.split(":");if(t.length>4&&t[4]!=="")return t[4]}},ir=async(e,t,r,n={})=>{let o=typeof e=="function"?await e():e,i=typeof t=="function"?await t():t,a="",d=o??i??(a=await At(n)());return r?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${o} (credential provider clientConfig)`,`${i} (contextual client)`,`${a} (STS default: AWS_REGION, profile region, or us-east-1)`),d},ar=(e,t)=>{let r,n;return async(o,i)=>{if(n=o,!r){let{logger:P=e?.parentClientConfig?.logger,profile:g=e?.parentClientConfig?.profile,region:f,requestHandler:h=e?.parentClientConfig?.requestHandler,credentialProviderLogger:T,userAgentAppId:A=e?.parentClientConfig?.userAgentAppId}=e,te=await ir(f,e?.parentClientConfig?.region,T,{logger:P,profile:g}),re=!pr(h);r=new t({...e,userAgentAppId:A,profile:g,credentialDefaultProvider:()=>async()=>n,region:te,requestHandler:re?h:void 0,logger:P})}let{Credentials:a,AssumedRoleUser:d}=await r.send(new O(i));if(!a||!a.AccessKeyId||!a.SecretAccessKey)throw new Error(`Invalid response from STS.assumeRole call with role ${i.RoleArn}`);let S=sr(d),m={accessKeyId:a.AccessKeyId,secretAccessKey:a.SecretAccessKey,sessionToken:a.SessionToken,expiration:a.Expiration,...a.CredentialScope&&{credentialScope:a.CredentialScope},...S&&{accountId:S}};return K(m,"CREDENTIALS_STS_ASSUME_ROLE","i"),m}},cr=(e,t)=>{let r;return async n=>{if(!r){let{logger:S=e?.parentClientConfig?.logger,profile:m=e?.parentClientConfig?.profile,region:P,requestHandler:g=e?.parentClientConfig?.requestHandler,credentialProviderLogger:f,userAgentAppId:h=e?.parentClientConfig?.userAgentAppId}=e,T=await ir(P,e?.parentClientConfig?.region,f,{logger:S,profile:m}),A=!pr(g);r=new t({...e,userAgentAppId:h,profile:m,region:T,requestHandler:A?g:void 0,logger:S})}let{Credentials:o,AssumedRoleUser:i}=await r.send(new N(n));if(!o||!o.AccessKeyId||!o.SecretAccessKey)throw new Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${n.RoleArn}`);let a=sr(i),d={accessKeyId:o.AccessKeyId,secretAccessKey:o.SecretAccessKey,sessionToken:o.SessionToken,expiration:o.Expiration,...o.CredentialScope&&{credentialScope:o.CredentialScope},...a&&{accountId:a}};return a&&K(d,"RESOLVED_ACCOUNT_ID","T"),K(d,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),d}};var pr=e=>e?.metadata?.handlerProtocol==="h2";var lr=(e,t)=>t?class extends e{constructor(n){super(n);for(let o of t)this.middlewareStack.use(o)}}:e,To=(e={},t)=>ar(e,lr(v,t)),Do=(e={},t)=>cr(e,lr(v,t)),ks=e=>t=>e({roleAssumer:To(t),roleAssumerWithWebIdentity:Do(t),...t});export{U as $Command,Jt as AssumeRole$,O as AssumeRoleCommand,vo as AssumeRoleRequest$,Po as AssumeRoleResponse$,Zt as AssumeRoleWithWebIdentity$,N as AssumeRoleWithWebIdentityCommand,Ao as AssumeRoleWithWebIdentityRequest$,yo as AssumeRoleWithWebIdentityResponse$,Xt as AssumedRoleUser$,Yt as Credentials$,z as ExpiredTokenException,po as ExpiredTokenException$,ee as IDPCommunicationErrorException,lo as IDPCommunicationErrorException$,J as IDPRejectedClaimException,uo as IDPRejectedClaimException$,Z as InvalidIdentityTokenException,mo as InvalidIdentityTokenException$,X as MalformedPolicyDocumentException,go as MalformedPolicyDocumentException$,Y as PackedPolicyTooLargeException,ho as PackedPolicyTooLargeException$,xo as PolicyDescriptorType$,Co as ProvidedContext$,Q as RegionDisabledException,So as RegionDisabledException$,ge as STS,v as STSClient,u as STSServiceException,co as STSServiceException$,_o as Tag$,ve as __Client,ks as decorateDefaultCredentialProvider,zt as errorTypeRegistries,To as getDefaultRoleAssumer,Do as getDefaultRoleAssumerWithWebIdentity};