UNPKG

@integration-app/membrane-cli

Version:

CLI tool for importing and exporting Integration.app workspace data

2 lines (1 loc) 23.5 kB
var Rt=Object.defineProperty;var s=(e,n)=>Rt(e,"name",{value:n,configurable:!0});import{v as _t,w as _e,x as bt,y as vt,A as wt,B as Tt,z as Dt,D as kt,F as Ot,t as Nt,G as Wt,J as be,K as $t,L as Ht,M as Ft,O as Ut,Q as zt,u as b,R as Lt,S as Kt,N as jt,T as qt,U as Mt,V as Gt,W as Vt,X as Bt,Y as Xt,Z as Yt,_ as Jt,$ as Qt,a0 as Zt,a1 as en,a2 as tn,a3 as nn,a4 as sn,a5 as on,a6 as rn,a7 as an,a8 as cn,a9 as ve,aa as ln,ab as dn,ac as un,ad as mn,ae as pn,af as hn,ag as fn,ah as gn,ai as En,aj as yn,ak as Sn,al as Pn,am as An,an as In,ao as Cn,ap as we,aE as Te,aF as De,H as xn,aG as Rn,aw as _n,ax as p,aH as ke,ay as v,at as bn,aI as vn,az as Y,aA as Oe,aB as Ne,aD as wn,s as J}from"./index-CNuB1luy.js";import"buffer";import"stream";import"node:stream";import"http";import"https";import"http2";import"os";import"path";import"crypto";import{p as Tn}from"./package-DbVjx5Pu.js";import{N as We}from"./noAuth-DwiTe3rT.js";import"fs";import"url";import"chalk";import"commander";import"inquirer";import"node:fs";import"node:path";import"js-yaml";import"@integration-app/sdk";import"zod";import"jsonwebtoken";import"events";import"constants";import"util";import"assert";import"node:url";import"node:fs/promises";import"node:events";import"node:string_decoder";import"zlib";import"form-data";import"async_hooks";import"process";import"@anthropic-ai/sdk";const Dn=s(async(e,n,t)=>({operation:bt(n).operation,region:await _e(e.region)()||(()=>{throw new Error("expected `region` to be configured for `aws.auth#sigv4`")})()}),"defaultSTSHttpAuthSchemeParametersProvider");function kn(e){return{schemeId:"aws.auth#sigv4",signingProperties:{name:"sts",region:e.region},propertiesExtractor:s((n,t)=>({signingProperties:{config:n,context:t}}),"propertiesExtractor")}}s(kn,"createAwsAuthSigv4HttpAuthOption");function On(e){return{schemeId:"smithy.api#noAuth"}}s(On,"createSmithyApiNoAuthHttpAuthOption");const Nn=s(e=>{const n=[];switch(e.operation){case"AssumeRoleWithWebIdentity":{n.push(On());break}default:n.push(kn(e))}return n},"defaultSTSHttpAuthSchemeProvider"),Wn=s(e=>Object.assign(e,{stsClientCtor:z}),"resolveStsAuthConfig"),$n=s(e=>{const n=Wn(e),t=_t(n);return Object.assign(t,{authSchemePreference:_e(e.authSchemePreference??[])})},"resolveHttpAuthSchemeConfig"),Hn=s(e=>Object.assign(e,{useDualstackEndpoint:e.useDualstackEndpoint??!1,useFipsEndpoint:e.useFipsEndpoint??!1,useGlobalEndpoint:e.useGlobalEndpoint??!1,defaultSigningName:"sts"}),"resolveClientEndpointParameters"),$e={UseGlobalEndpoint:{type:"builtInParams",name:"useGlobalEndpoint"},UseFIPS:{type:"builtInParams",name:"useFipsEndpoint"},Endpoint:{type:"builtInParams",name:"endpoint"},Region:{type:"builtInParams",name:"region"},UseDualStack:{type:"builtInParams",name:"useDualstackEndpoint"}},He="required",i="type",c="fn",l="argv",R="ref",Fe=!1,Q=!0,_="booleanEquals",h="stringEquals",Ue="sigv4",ze="sts",Le="us-east-1",u="endpoint",Ke="https://sts.{Region}.{PartitionResult#dnsSuffix}",A="tree",T="error",Z="getAttr",je={[He]:!1,[i]:"String"},ee={[He]:!0,default:!1,[i]:"Boolean"},qe={[R]:"Endpoint"},Me={[c]:"isSet",[l]:[{[R]:"Region"}]},f={[R]:"Region"},Ge={[c]:"aws.partition",[l]:[f],assign:"PartitionResult"},Ve={[R]:"UseFIPS"},Be={[R]:"UseDualStack"},g={url:"https://sts.amazonaws.com",properties:{authSchemes:[{name:Ue,signingName:ze,signingRegion:Le}]},headers:{}},y={},Xe={conditions:[{[c]:h,[l]:[f,"aws-global"]}],[u]:g,[i]:u},Ye={[c]:_,[l]:[Ve,!0]},Je={[c]:_,[l]:[Be,!0]},Qe={[c]:Z,[l]:[{[R]:"PartitionResult"},"supportsFIPS"]},Ze={[R]:"PartitionResult"},et={[c]:_,[l]:[!0,{[c]:Z,[l]:[Ze,"supportsDualStack"]}]},tt=[{[c]:"isSet",[l]:[qe]}],nt=[Ye],st=[Je],Fn={parameters:{Region:je,UseDualStack:ee,UseFIPS:ee,Endpoint:je,UseGlobalEndpoint:ee},rules:[{conditions:[{[c]:_,[l]:[{[R]:"UseGlobalEndpoint"},Q]},{[c]:"not",[l]:tt},Me,Ge,{[c]:_,[l]:[Ve,Fe]},{[c]:_,[l]:[Be,Fe]}],rules:[{conditions:[{[c]:h,[l]:[f,"ap-northeast-1"]}],endpoint:g,[i]:u},{conditions:[{[c]:h,[l]:[f,"ap-south-1"]}],endpoint:g,[i]:u},{conditions:[{[c]:h,[l]:[f,"ap-southeast-1"]}],endpoint:g,[i]:u},{conditions:[{[c]:h,[l]:[f,"ap-southeast-2"]}],endpoint:g,[i]:u},Xe,{conditions:[{[c]:h,[l]:[f,"ca-central-1"]}],endpoint:g,[i]:u},{conditions:[{[c]:h,[l]:[f,"eu-central-1"]}],endpoint:g,[i]:u},{conditions:[{[c]:h,[l]:[f,"eu-north-1"]}],endpoint:g,[i]:u},{conditions:[{[c]:h,[l]:[f,"eu-west-1"]}],endpoint:g,[i]:u},{conditions:[{[c]:h,[l]:[f,"eu-west-2"]}],endpoint:g,[i]:u},{conditions:[{[c]:h,[l]:[f,"eu-west-3"]}],endpoint:g,[i]:u},{conditions:[{[c]:h,[l]:[f,"sa-east-1"]}],endpoint:g,[i]:u},{conditions:[{[c]:h,[l]:[f,Le]}],endpoint:g,[i]:u},{conditions:[{[c]:h,[l]:[f,"us-east-2"]}],endpoint:g,[i]:u},{conditions:[{[c]:h,[l]:[f,"us-west-1"]}],endpoint:g,[i]:u},{conditions:[{[c]:h,[l]:[f,"us-west-2"]}],endpoint:g,[i]:u},{endpoint:{url:Ke,properties:{authSchemes:[{name:Ue,signingName:ze,signingRegion:"{Region}"}]},headers:y},[i]:u}],[i]:A},{conditions:tt,rules:[{conditions:nt,error:"Invalid Configuration: FIPS and custom endpoint are not supported",[i]:T},{conditions:st,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",[i]:T},{endpoint:{url:qe,properties:y,headers:y},[i]:u}],[i]:A},{conditions:[Me],rules:[{conditions:[Ge],rules:[{conditions:[Ye,Je],rules:[{conditions:[{[c]:_,[l]:[Q,Qe]},et],rules:[{endpoint:{url:"https://sts-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:y,headers:y},[i]:u}],[i]:A},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",[i]:T}],[i]:A},{conditions:nt,rules:[{conditions:[{[c]:_,[l]:[Qe,Q]}],rules:[{conditions:[{[c]:h,[l]:[{[c]:Z,[l]:[Ze,"name"]},"aws-us-gov"]}],endpoint:{url:"https://sts.{Region}.amazonaws.com",properties:y,headers:y},[i]:u},{endpoint:{url:"https://sts-fips.{Region}.{PartitionResult#dnsSuffix}",properties:y,headers:y},[i]:u}],[i]:A},{error:"FIPS is enabled but this partition does not support FIPS",[i]:T}],[i]:A},{conditions:st,rules:[{conditions:[et],rules:[{endpoint:{url:"https://sts.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:y,headers:y},[i]:u}],[i]:A},{error:"DualStack is enabled but this partition does not support DualStack",[i]:T}],[i]:A},Xe,{endpoint:{url:Ke,properties:y,headers:y},[i]:u}],[i]:A}],[i]:A},{error:"Invalid Configuration: Missing Region",[i]:T}]},Un=Fn,zn=new vt({size:50,params:["Endpoint","Region","UseDualStack","UseFIPS","UseGlobalEndpoint"]}),Ln=s((e,n={})=>zn.get(e,()=>Dt(Un,{endpointParams:e,logger:n.logger})),"defaultEndpointResolver");Tt.aws=wt;const Kn=s(e=>({apiVersion:"2011-06-15",base64Decoder:e?.base64Decoder??Ht,base64Encoder:e?.base64Encoder??$t,disableHostPrefix:e?.disableHostPrefix??!1,endpointProvider:e?.endpointProvider??Ln,extensions:e?.extensions??[],httpAuthSchemeProvider:e?.httpAuthSchemeProvider??Nn,httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:s(n=>n.getIdentityProvider("aws.auth#sigv4"),"identityProvider"),signer:new be},{schemeId:"smithy.api#noAuth",identityProvider:s(n=>n.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),"identityProvider"),signer:new We}],logger:e?.logger??new Wt,serviceId:e?.serviceId??"STS",urlParser:e?.urlParser??Nt,utf8Decoder:e?.utf8Decoder??Ot,utf8Encoder:e?.utf8Encoder??kt}),"getRuntimeConfig$1"),jn=s(e=>{Ft(process.version);const n=Ut(e),t=s(()=>n().then(tn),"defaultConfigProvider"),o=Kn(e);zt(process.version);const r={profile:e?.profile,logger:o.logger};return{...o,...e,runtime:"node",defaultsMode:n,authSchemePreference:e?.authSchemePreference??b(en,r),bodyLengthChecker:e?.bodyLengthChecker??Mt,defaultUserAgentProvider:e?.defaultUserAgentProvider??qt({serviceId:o.serviceId,clientVersion:Tn.version}),httpAuthSchemes:e?.httpAuthSchemes??[{schemeId:"aws.auth#sigv4",identityProvider:s(d=>d.getIdentityProvider("aws.auth#sigv4")||(async a=>await e.credentialDefaultProvider(a?.__config||{})()),"identityProvider"),signer:new be},{schemeId:"smithy.api#noAuth",identityProvider:s(d=>d.getIdentityProvider("smithy.api#noAuth")||(async()=>({})),"identityProvider"),signer:new We}],maxAttempts:e?.maxAttempts??b(Zt,e),region:e?.region??b(Qt,{...Jt,...r}),requestHandler:jt.create(e?.requestHandler??t),retryMode:e?.retryMode??b({...Xt,default:s(async()=>(await t()).retryMode||Yt,"default")},e),sha256:e?.sha256??Kt.bind(null,"sha256"),streamCollector:e?.streamCollector??Lt,useDualstackEndpoint:e?.useDualstackEndpoint??b(Bt,r),useFipsEndpoint:e?.useFipsEndpoint??b(Vt,r),userAgentAppId:e?.userAgentAppId??b(Gt,r)}},"getRuntimeConfig"),qn=s(e=>{const n=e.httpAuthSchemes;let t=e.httpAuthSchemeProvider,o=e.credentials;return{setHttpAuthScheme(r){const d=n.findIndex(a=>a.schemeId===r.schemeId);d===-1?n.push(r):n.splice(d,1,r)},httpAuthSchemes(){return n},setHttpAuthSchemeProvider(r){t=r},httpAuthSchemeProvider(){return t},setCredentials(r){o=r},credentials(){return o}}},"getHttpAuthExtensionConfiguration"),Mn=s(e=>({httpAuthSchemes:e.httpAuthSchemes(),httpAuthSchemeProvider:e.httpAuthSchemeProvider(),credentials:e.credentials()}),"resolveHttpAuthRuntimeConfig"),Gn=s((e,n)=>{const t=Object.assign(nn(e),sn(e),on(e),qn(e));return n.forEach(o=>o.configure(t)),Object.assign(e,rn(t),an(t),cn(t),Mn(t))},"resolveRuntimeExtensions");class z extends ve{static{s(this,"STSClient")}config;constructor(...[n]){const t=jn(n||{});super(t),this.initConfig=t;const o=Hn(t),r=ln(o),d=dn(r),a=un(d),E=pn(a),P=mn(E),I=$n(P),w=Gn(I,n?.extensions||[]);this.config=w,this.middlewareStack.use(hn(this.config)),this.middlewareStack.use(fn(this.config)),this.middlewareStack.use(gn(this.config)),this.middlewareStack.use(En(this.config)),this.middlewareStack.use(yn(this.config)),this.middlewareStack.use(Sn(this.config)),this.middlewareStack.use(Pn(this.config,{httpAuthSchemeParametersProvider:Dn,identityProviderConfigProvider:s(async U=>new An({"aws.auth#sigv4":U.credentials}),"identityProviderConfigProvider")})),this.middlewareStack.use(In(this.config))}destroy(){super.destroy()}}class S extends Cn{static{s(this,"STSServiceException")}constructor(n){super(n),Object.setPrototypeOf(this,S.prototype)}}const te=s(e=>({...e,...e.SecretAccessKey&&{SecretAccessKey:we}}),"CredentialsFilterSensitiveLog"),ot=s(e=>({...e,...e.Credentials&&{Credentials:te(e.Credentials)}}),"AssumeRoleResponseFilterSensitiveLog");class K extends S{static{s(this,"ExpiredTokenException")}name="ExpiredTokenException";$fault="client";constructor(n){super({name:"ExpiredTokenException",$fault:"client",...n}),Object.setPrototypeOf(this,K.prototype)}}class j extends S{static{s(this,"MalformedPolicyDocumentException")}name="MalformedPolicyDocumentException";$fault="client";constructor(n){super({name:"MalformedPolicyDocumentException",$fault:"client",...n}),Object.setPrototypeOf(this,j.prototype)}}class q extends S{static{s(this,"PackedPolicyTooLargeException")}name="PackedPolicyTooLargeException";$fault="client";constructor(n){super({name:"PackedPolicyTooLargeException",$fault:"client",...n}),Object.setPrototypeOf(this,q.prototype)}}class M extends S{static{s(this,"RegionDisabledException")}name="RegionDisabledException";$fault="client";constructor(n){super({name:"RegionDisabledException",$fault:"client",...n}),Object.setPrototypeOf(this,M.prototype)}}class G extends S{static{s(this,"IDPRejectedClaimException")}name="IDPRejectedClaimException";$fault="client";constructor(n){super({name:"IDPRejectedClaimException",$fault:"client",...n}),Object.setPrototypeOf(this,G.prototype)}}class V extends S{static{s(this,"InvalidIdentityTokenException")}name="InvalidIdentityTokenException";$fault="client";constructor(n){super({name:"InvalidIdentityTokenException",$fault:"client",...n}),Object.setPrototypeOf(this,V.prototype)}}const rt=s(e=>({...e,...e.WebIdentityToken&&{WebIdentityToken:we}}),"AssumeRoleWithWebIdentityRequestFilterSensitiveLog"),it=s(e=>({...e,...e.Credentials&&{Credentials:te(e.Credentials)}}),"AssumeRoleWithWebIdentityResponseFilterSensitiveLog");class B extends S{static{s(this,"IDPCommunicationErrorException")}name="IDPCommunicationErrorException";$fault="client";constructor(n){super({name:"IDPCommunicationErrorException",$fault:"client",...n}),Object.setPrototypeOf(this,B.prototype)}}const Vn=s(async(e,n)=>{const t=mt;let o;return o=gt({...os(e),[ht]:Is,[ft]:pt}),ut(n,t,"/",void 0,o)},"se_AssumeRoleCommand"),Bn=s(async(e,n)=>{const t=mt;let o;return o=gt({...rs(e),[ht]:Cs,[ft]:pt}),ut(n,t,"/",void 0,o)},"se_AssumeRoleWithWebIdentityCommand"),Xn=s(async(e,n)=>{if(e.statusCode>=300)return at(e,n);const t=await Te(e.body,n);let o={};return o=ms(t.AssumeRoleResult),{$metadata:C(e),...o}},"de_AssumeRoleCommand"),Yn=s(async(e,n)=>{if(e.statusCode>=300)return at(e,n);const t=await Te(e.body,n);let o={};return o=ps(t.AssumeRoleWithWebIdentityResult),{$metadata:C(e),...o}},"de_AssumeRoleWithWebIdentityCommand"),at=s(async(e,n)=>{const t={...e,body:await Rn(e.body,n)},o=xs(e,t.body);switch(o){case"ExpiredTokenException":case"com.amazonaws.sts#ExpiredTokenException":throw await Jn(t);case"MalformedPolicyDocument":case"com.amazonaws.sts#MalformedPolicyDocumentException":throw await ts(t);case"PackedPolicyTooLarge":case"com.amazonaws.sts#PackedPolicyTooLargeException":throw await ns(t);case"RegionDisabledException":case"com.amazonaws.sts#RegionDisabledException":throw await ss(t);case"IDPCommunicationError":case"com.amazonaws.sts#IDPCommunicationErrorException":throw await Qn(t);case"IDPRejectedClaim":case"com.amazonaws.sts#IDPRejectedClaimException":throw await Zn(t);case"InvalidIdentityToken":case"com.amazonaws.sts#InvalidIdentityTokenException":throw await es(t);default:const r=t.body;return As({output:e,parsedBody:r.Error,errorCode:o})}},"de_CommandError"),Jn=s(async(e,n)=>{const t=e.body,o=hs(t.Error),r=new K({$metadata:C(e),...o});return v(r,t)},"de_ExpiredTokenExceptionRes"),Qn=s(async(e,n)=>{const t=e.body,o=fs(t.Error),r=new B({$metadata:C(e),...o});return v(r,t)},"de_IDPCommunicationErrorExceptionRes"),Zn=s(async(e,n)=>{const t=e.body,o=gs(t.Error),r=new G({$metadata:C(e),...o});return v(r,t)},"de_IDPRejectedClaimExceptionRes"),es=s(async(e,n)=>{const t=e.body,o=Es(t.Error),r=new V({$metadata:C(e),...o});return v(r,t)},"de_InvalidIdentityTokenExceptionRes"),ts=s(async(e,n)=>{const t=e.body,o=ys(t.Error),r=new j({$metadata:C(e),...o});return v(r,t)},"de_MalformedPolicyDocumentExceptionRes"),ns=s(async(e,n)=>{const t=e.body,o=Ss(t.Error),r=new q({$metadata:C(e),...o});return v(r,t)},"de_PackedPolicyTooLargeExceptionRes"),ss=s(async(e,n)=>{const t=e.body,o=Ps(t.Error),r=new M({$metadata:C(e),...o});return v(r,t)},"de_RegionDisabledExceptionRes"),os=s((e,n)=>{const t={};if(e[H]!=null&&(t[H]=e[H]),e[F]!=null&&(t[F]=e[F]),e[W]!=null){const o=ct(e[W]);e[W]?.length===0&&(t.PolicyArns=[]),Object.entries(o).forEach(([r,d])=>{const a=`PolicyArns.${r}`;t[a]=d})}if(e[N]!=null&&(t[N]=e[N]),e[O]!=null&&(t[O]=e[O]),e[ye]!=null){const o=us(e[ye]);e[ye]?.length===0&&(t.Tags=[]),Object.entries(o).forEach(([r,d])=>{const a=`Tags.${r}`;t[a]=d})}if(e[Pe]!=null){const o=ds(e[Pe]);e[Pe]?.length===0&&(t.TransitiveTagKeys=[]),Object.entries(o).forEach(([r,d])=>{const a=`TransitiveTagKeys.${r}`;t[a]=d})}if(e[ce]!=null&&(t[ce]=e[ce]),e[ge]!=null&&(t[ge]=e[ge]),e[Se]!=null&&(t[Se]=e[Se]),e[x]!=null&&(t[x]=e[x]),e[ue]!=null){const o=cs(e[ue]);e[ue]?.length===0&&(t.ProvidedContexts=[]),Object.entries(o).forEach(([r,d])=>{const a=`ProvidedContexts.${r}`;t[a]=d})}return t},"se_AssumeRoleRequest"),rs=s((e,n)=>{const t={};if(e[H]!=null&&(t[H]=e[H]),e[F]!=null&&(t[F]=e[F]),e[Ie]!=null&&(t[Ie]=e[Ie]),e[me]!=null&&(t[me]=e[me]),e[W]!=null){const o=ct(e[W]);e[W]?.length===0&&(t.PolicyArns=[]),Object.entries(o).forEach(([r,d])=>{const a=`PolicyArns.${r}`;t[a]=d})}return e[N]!=null&&(t[N]=e[N]),e[O]!=null&&(t[O]=e[O]),t},"se_AssumeRoleWithWebIdentityRequest"),ct=s((e,n)=>{const t={};let o=1;for(const r of e){if(r===null)continue;const d=is(r);Object.entries(d).forEach(([a,E])=>{t[`member.${o}.${a}`]=E}),o++}return t},"se_policyDescriptorListType"),is=s((e,n)=>{const t={};return e[Ce]!=null&&(t[Ce]=e[Ce]),t},"se_PolicyDescriptorType"),as=s((e,n)=>{const t={};return e[de]!=null&&(t[de]=e[de]),e[ie]!=null&&(t[ie]=e[ie]),t},"se_ProvidedContext"),cs=s((e,n)=>{const t={};let o=1;for(const r of e){if(r===null)continue;const d=as(r);Object.entries(d).forEach(([a,E])=>{t[`member.${o}.${a}`]=E}),o++}return t},"se_ProvidedContextsListType"),ls=s((e,n)=>{const t={};return e[le]!=null&&(t[le]=e[le]),e[Ae]!=null&&(t[Ae]=e[Ae]),t},"se_Tag"),ds=s((e,n)=>{const t={};let o=1;for(const r of e)r!==null&&(t[`member.${o}`]=r,o++);return t},"se_tagKeyListType"),us=s((e,n)=>{const t={};let o=1;for(const r of e){if(r===null)continue;const d=ls(r);Object.entries(d).forEach(([a,E])=>{t[`member.${o}.${a}`]=E}),o++}return t},"se_tagListType"),lt=s((e,n)=>{const t={};return e[se]!=null&&(t[se]=p(e[se])),e[oe]!=null&&(t[oe]=p(e[oe])),t},"de_AssumedRoleUser"),ms=s((e,n)=>{const t={};return e[k]!=null&&(t[k]=dt(e[k])),e[D]!=null&&(t[D]=lt(e[D])),e[$]!=null&&(t[$]=ke(e[$])),e[x]!=null&&(t[x]=p(e[x])),t},"de_AssumeRoleResponse"),ps=s((e,n)=>{const t={};return e[k]!=null&&(t[k]=dt(e[k])),e[fe]!=null&&(t[fe]=p(e[fe])),e[D]!=null&&(t[D]=lt(e[D])),e[$]!=null&&(t[$]=ke(e[$])),e[pe]!=null&&(t[pe]=p(e[pe])),e[re]!=null&&(t[re]=p(e[re])),e[x]!=null&&(t[x]=p(e[x])),t},"de_AssumeRoleWithWebIdentityResponse"),dt=s((e,n)=>{const t={};return e[ne]!=null&&(t[ne]=p(e[ne])),e[he]!=null&&(t[he]=p(e[he])),e[Ee]!=null&&(t[Ee]=p(e[Ee])),e[ae]!=null&&(t[ae]=bn(vn(e[ae]))),t},"de_Credentials"),hs=s((e,n)=>{const t={};return e[m]!=null&&(t[m]=p(e[m])),t},"de_ExpiredTokenException"),fs=s((e,n)=>{const t={};return e[m]!=null&&(t[m]=p(e[m])),t},"de_IDPCommunicationErrorException"),gs=s((e,n)=>{const t={};return e[m]!=null&&(t[m]=p(e[m])),t},"de_IDPRejectedClaimException"),Es=s((e,n)=>{const t={};return e[m]!=null&&(t[m]=p(e[m])),t},"de_InvalidIdentityTokenException"),ys=s((e,n)=>{const t={};return e[m]!=null&&(t[m]=p(e[m])),t},"de_MalformedPolicyDocumentException"),Ss=s((e,n)=>{const t={};return e[m]!=null&&(t[m]=p(e[m])),t},"de_PackedPolicyTooLargeException"),Ps=s((e,n)=>{const t={};return e[m]!=null&&(t[m]=p(e[m])),t},"de_RegionDisabledException"),C=s(e=>({httpStatusCode:e.statusCode,requestId:e.headers["x-amzn-requestid"]??e.headers["x-amzn-request-id"]??e.headers["x-amz-request-id"],extendedRequestId:e.headers["x-amz-id-2"],cfId:e.headers["x-amz-cf-id"]}),"deserializeMetadata"),As=_n(S),ut=s(async(e,n,t,o,r)=>{const{hostname:d,protocol:a="https",port:E,path:P}=await e.endpoint(),I={protocol:a,hostname:d,port:E,method:"POST",path:P.endsWith("/")?P.slice(0,-1)+t:P+t,headers:n};return r!==void 0&&(I.body=r),new xn(I)},"buildHttpRpcRequest"),mt={"content-type":"application/x-www-form-urlencoded"},pt="2011-06-15",ht="Action",ne="AccessKeyId",Is="AssumeRole",se="AssumedRoleId",D="AssumedRoleUser",Cs="AssumeRoleWithWebIdentity",oe="Arn",re="Audience",k="Credentials",ie="ContextAssertion",O="DurationSeconds",ae="Expiration",ce="ExternalId",le="Key",N="Policy",W="PolicyArns",de="ProviderArn",ue="ProvidedContexts",me="ProviderId",$="PackedPolicySize",pe="Provider",H="RoleArn",F="RoleSessionName",he="SecretAccessKey",fe="SubjectFromWebIdentityToken",x="SourceIdentity",ge="SerialNumber",Ee="SessionToken",ye="Tags",Se="TokenCode",Pe="TransitiveTagKeys",ft="Version",Ae="Value",Ie="WebIdentityToken",Ce="arn",m="message",gt=s(e=>Object.entries(e).map(([n,t])=>De(n)+"="+De(t)).join("&"),"buildFormUrlencodedString"),xs=s((e,n)=>{if(n.Error?.Code!==void 0)return n.Error.Code;if(e.statusCode==404)return"NotFound"},"loadQueryErrorCode");class xe extends Y.classBuilder().ep($e).m(function(n,t,o,r){return[Oe(o,this.serialize,this.deserialize),Ne(o,n.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRole",{}).n("STSClient","AssumeRoleCommand").f(void 0,ot).ser(Vn).de(Xn).build(){static{s(this,"AssumeRoleCommand")}}class Re extends Y.classBuilder().ep($e).m(function(n,t,o,r){return[Oe(o,this.serialize,this.deserialize),Ne(o,n.getEndpointParameterInstructions())]}).s("AWSSecurityTokenServiceV20110615","AssumeRoleWithWebIdentity",{}).n("STSClient","AssumeRoleWithWebIdentityCommand").f(rt,it).ser(Bn).de(Yn).build(){static{s(this,"AssumeRoleWithWebIdentityCommand")}}const Rs={AssumeRoleCommand:xe,AssumeRoleWithWebIdentityCommand:Re};class Et extends z{static{s(this,"STS")}}wn(Rs,Et);const yt="us-east-1",St=s(e=>{if(typeof e?.Arn=="string"){const n=e.Arn.split(":");if(n.length>4&&n[4]!=="")return n[4]}},"getAccountIdFromAssumedRoleUser"),Pt=s(async(e,n,t)=>{const o=typeof e=="function"?await e():e,r=typeof n=="function"?await n():n;return t?.debug?.("@aws-sdk/client-sts::resolveRegion","accepting first of:",`${o} (provider)`,`${r} (parent client)`,`${yt} (STS default)`),o??r??yt},"resolveRegion"),_s=s((e,n)=>{let t,o;return async(r,d)=>{if(o=r,!t){const{logger:w=e?.parentClientConfig?.logger,region:U,requestHandler:L=e?.parentClientConfig?.requestHandler,credentialProviderLogger:X}=e,Ct=await Pt(U,e?.parentClientConfig?.region,X),xt=!At(L);t=new n({profile:e?.parentClientConfig?.profile,credentialDefaultProvider:s(()=>async()=>o,"credentialDefaultProvider"),region:Ct,requestHandler:xt?L:void 0,logger:w})}const{Credentials:a,AssumedRoleUser:E}=await t.send(new xe(d));if(!a||!a.AccessKeyId||!a.SecretAccessKey)throw new Error(`Invalid response from STS.assumeRole call with role ${d.RoleArn}`);const P=St(E),I={accessKeyId:a.AccessKeyId,secretAccessKey:a.SecretAccessKey,sessionToken:a.SessionToken,expiration:a.Expiration,...a.CredentialScope&&{credentialScope:a.CredentialScope},...P&&{accountId:P}};return J(I,"CREDENTIALS_STS_ASSUME_ROLE","i"),I}},"getDefaultRoleAssumer$1"),bs=s((e,n)=>{let t;return async o=>{if(!t){const{logger:P=e?.parentClientConfig?.logger,region:I,requestHandler:w=e?.parentClientConfig?.requestHandler,credentialProviderLogger:U}=e,L=await Pt(I,e?.parentClientConfig?.region,U),X=!At(w);t=new n({profile:e?.parentClientConfig?.profile,region:L,requestHandler:X?w:void 0,logger:P})}const{Credentials:r,AssumedRoleUser:d}=await t.send(new Re(o));if(!r||!r.AccessKeyId||!r.SecretAccessKey)throw new Error(`Invalid response from STS.assumeRoleWithWebIdentity call with role ${o.RoleArn}`);const a=St(d),E={accessKeyId:r.AccessKeyId,secretAccessKey:r.SecretAccessKey,sessionToken:r.SessionToken,expiration:r.Expiration,...r.CredentialScope&&{credentialScope:r.CredentialScope},...a&&{accountId:a}};return a&&J(E,"RESOLVED_ACCOUNT_ID","T"),J(E,"CREDENTIALS_STS_ASSUME_ROLE_WEB_ID","k"),E}},"getDefaultRoleAssumerWithWebIdentity$1"),At=s(e=>e?.metadata?.handlerProtocol==="h2","isH2"),It=s((e,n)=>n?class extends e{static{s(this,"CustomizableSTSClient")}constructor(o){super(o);for(const r of n)this.middlewareStack.use(r)}}:e,"getCustomizableStsClientCtor"),vs=s((e={},n)=>_s(e,It(z,n)),"getDefaultRoleAssumer"),ws=s((e={},n)=>bs(e,It(z,n)),"getDefaultRoleAssumerWithWebIdentity");export{Y as $Command,xe as AssumeRoleCommand,ot as AssumeRoleResponseFilterSensitiveLog,Re as AssumeRoleWithWebIdentityCommand,rt as AssumeRoleWithWebIdentityRequestFilterSensitiveLog,it as AssumeRoleWithWebIdentityResponseFilterSensitiveLog,te as CredentialsFilterSensitiveLog,K as ExpiredTokenException,B as IDPCommunicationErrorException,G as IDPRejectedClaimException,V as InvalidIdentityTokenException,j as MalformedPolicyDocumentException,q as PackedPolicyTooLargeException,M as RegionDisabledException,Et as STS,z as STSClient,S as STSServiceException,ve as __Client,vs as getDefaultRoleAssumer,ws as getDefaultRoleAssumerWithWebIdentity};