@cdk8s/awscdk-resolver 0.0.638 → 0.0.640

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/clock-skew-node-config.js

@@ -0,0 +1,8 @@
+import { booleanSelector, SelectorType } from "@smithy/core/config";
+export const ENV_DISABLE_CLOCK_SKEW_CORRECTION = "AWS_DISABLE_CLOCK_SKEW_CORRECTION";
+export const CONFIG_DISABLE_CLOCK_SKEW_CORRECTION = "disable_clock_skew_correction";
+export const NODE_DISABLE_CLOCK_SKEW_CORRECTION_CONFIG_OPTIONS = {
+    environmentVariableSelector: (env) => booleanSelector(env, ENV_DISABLE_CLOCK_SKEW_CORRECTION, SelectorType.ENV),
+    configFileSelector: (profile) => booleanSelector(profile, CONFIG_DISABLE_CLOCK_SKEW_CORRECTION, SelectorType.CONFIG),
+    default: false,
+};

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/index.js

@@ -2,4 +2,4 @@ export { AwsSdkSigV4Signer, AWSSDKSigV4Signer, validateSigningProperties } from
 export { AwsSdkSigV4ASigner } from "./AwsSdkSigV4ASigner";
 export { NODE_AUTH_SCHEME_PREFERENCE_OPTIONS } from "./NODE_AUTH_SCHEME_PREFERENCE_OPTIONS";
 export { resolveAwsSdkSigV4AConfig, NODE_SIGV4A_CONFIG_OPTIONS } from "./resolveAwsSdkSigV4AConfig";
-export { resolveAwsSdkSigV4Config, resolveAWSSDKSigV4Config } from "./resolveAwsSdkSigV4Config";
+export { bindResolveAwsSdkSigV4Config } from "./resolveAwsSdkSigV4Config";

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/aws_sdk/resolveAwsSdkSigV4Config.js

@@ -1,7 +1,7 @@
 import { setCredentialFeature } from "@aws-sdk/core/client";
 import { doesIdentityRequireRefresh, isIdentityExpired, memoizeIdentityProvider, normalizeProvider, } from "@smithy/core";
 import { SignatureV4 } from "@smithy/signature-v4";
-export const resolveAwsSdkSigV4Config = (config) => {
+export const bindResolveAwsSdkSigV4Config = (defaultDisableClockSkewCorrection) => (config) => {
     let inputCredentials = config.credentials;
     let isUserSupplied = !!config.credentials;
     let resolvedCredentials = undefined;
@@ -99,11 +99,11 @@ export const resolveAwsSdkSigV4Config = (config) => {
         systemClockOffset,
         signingEscapePath,
         signer,
+        disableClockSkewCorrection: normalizeProvider(config.disableClockSkewCorrection ?? defaultDisableClockSkewCorrection),
     });
     return resolvedConfig;
 };
-export const resolveAWSSDKSigV4Config = resolveAwsSdkSigV4Config;
-function normalizeCredentialProvider(config, { credentials, credentialDefaultProvider, }) {
+function normalizeCredentialProvider(config, { credentials, credentialDefaultProvider }) {
     let credentialsProvider;
     if (credentials) {
         if (!credentials?.memoized) {

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/index.browser.js

@@ -0,0 +1,9 @@
+const no = Symbol.for("node-only");
+export { AwsSdkSigV4Signer, AWSSDKSigV4Signer, validateSigningProperties, AwsSdkSigV4ASigner, resolveAwsSdkSigV4AConfig, } from "./aws_sdk";
+export { getBearerTokenEnvKey } from "./utils/getBearerTokenEnvKey";
+export const NODE_AUTH_SCHEME_PREFERENCE_OPTIONS = no;
+export const NODE_SIGV4A_CONFIG_OPTIONS = no;
+import { bindResolveAwsSdkSigV4Config } from "./aws_sdk";
+import { DEFAULT_DISABLE_CLOCK_SKEW_CORRECTION } from "./aws_sdk/clock-skew-defaults.browser";
+export const resolveAwsSdkSigV4Config = bindResolveAwsSdkSigV4Config(DEFAULT_DISABLE_CLOCK_SKEW_CORRECTION);
+export const resolveAWSSDKSigV4Config = resolveAwsSdkSigV4Config;

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/index.js

@@ -1,2 +1,6 @@
-export { AwsSdkSigV4Signer, AWSSDKSigV4Signer, validateSigningProperties, AwsSdkSigV4ASigner, NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, resolveAwsSdkSigV4AConfig, NODE_SIGV4A_CONFIG_OPTIONS, resolveAwsSdkSigV4Config, resolveAWSSDKSigV4Config, } from "./aws_sdk";
+export { AwsSdkSigV4Signer, AWSSDKSigV4Signer, validateSigningProperties, AwsSdkSigV4ASigner, NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, resolveAwsSdkSigV4AConfig, NODE_SIGV4A_CONFIG_OPTIONS, } from "./aws_sdk";
 export { getBearerTokenEnvKey } from "./utils/getBearerTokenEnvKey";
+import { bindResolveAwsSdkSigV4Config } from "./aws_sdk";
+import { DEFAULT_DISABLE_CLOCK_SKEW_CORRECTION } from "./aws_sdk/clock-skew-defaults";
+export const resolveAwsSdkSigV4Config = bindResolveAwsSdkSigV4Config(DEFAULT_DISABLE_CLOCK_SKEW_CORRECTION);
+export const resolveAWSSDKSigV4Config = resolveAwsSdkSigV4Config;

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/utils/getDateHeader.js

@@ -1,2 +1,3 @@
 import { HttpResponse } from "@smithy/core/protocols";
 export const getDateHeader = (response) => HttpResponse.isInstance(response) ? (response.headers?.date ?? response.headers?.Date) : undefined;
+export const getAgeHeader = (response) => HttpResponse.isInstance(response) ? (response.headers?.age ?? response.headers?.Age) : undefined;

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/utils/getUpdatedSystemClockOffset.js

@@ -1,8 +1,14 @@
-import { isClockSkewed } from "./isClockSkewed";
-export const getUpdatedSystemClockOffset = (clockTime, currentSystemClockOffset) => {
-    const clockTimeInMs = Date.parse(clockTime);
-    if (isClockSkewed(clockTimeInMs, currentSystemClockOffset)) {
-        return clockTimeInMs - Date.now();
+export const getUpdatedSystemClockOffset = (clockTime, currentSystemClockOffset, timeRequestSent, ageHeader) => {
+    if (ageHeader !== undefined) {
+        return currentSystemClockOffset;
     }
-    return currentSystemClockOffset;
+    const serverTime = Date.parse(clockTime);
+    const timeResponseReceived = Date.now();
+    if (timeRequestSent !== undefined && timeResponseReceived - timeRequestSent > 900_000) {
+        return currentSystemClockOffset;
+    }
+    const candidateSkew = timeRequestSent !== undefined
+        ? serverTime - (timeRequestSent + timeResponseReceived) / 2
+        : serverTime - timeResponseReceived;
+    return candidateSkew;
 };

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/utils/index.js

@@ -1,3 +1,4 @@
-export { getDateHeader } from "./getDateHeader";
+export { getAgeHeader, getDateHeader } from "./getDateHeader";
 export { getSkewCorrectedDate } from "./getSkewCorrectedDate";
 export { getUpdatedSystemClockOffset } from "./getUpdatedSystemClockOffset";
+export { isClockSkewed } from "./isClockSkewed";

package/node_modules/@aws-sdk/core/dist-es/submodules/httpAuthSchemes/utils/isClockSkewed.js

@@ -1,2 +1,2 @@
 import { getSkewCorrectedDate } from "./getSkewCorrectedDate";
-export const isClockSkewed = (clockTime, systemClockOffset) => Math.abs(getSkewCorrectedDate(systemClockOffset).getTime() - clockTime) >= 300000;
+export const isClockSkewed = (clockTime, systemClockOffset) => Math.abs(getSkewCorrectedDate(systemClockOffset).getTime() - clockTime) >= 240000;

package/node_modules/@aws-sdk/core/dist-es/submodules/protocols/json/JsonShapeDeserializer.js

@@ -5,7 +5,9 @@ import { fromBase64 } from "@smithy/core/serde";
 import { SerdeContextConfig } from "../ConfigurableSerdeContext";
 import { UnionSerde } from "../UnionSerde";
 import { jsonReviver } from "./jsonReviver";
+import { needsReviver } from "./needsReviver";
 import { parseJsonBody } from "./parseJsonBody";
+import { writeKey } from "../writeKey";
 export class JsonShapeDeserializer extends SerdeContextConfig {
     settings;
     constructor(settings) {
@@ -13,7 +15,8 @@ export class JsonShapeDeserializer extends SerdeContextConfig {
         this.settings = settings;
     }
     async read(schema, data) {
-        return this._read(schema, typeof data === "string" ? JSON.parse(data, jsonReviver) : await parseJsonBody(data, this.serdeContext));
+        const reviver = needsReviver(schema) ? jsonReviver : undefined;
+        return this._read(schema, typeof data === "string" ? JSON.parse(data, reviver) : await parseJsonBody(data, this.serdeContext, schema));
     }
     readObject(schema, data) {
         return this._read(schema, data);
@@ -74,6 +77,9 @@ export class JsonShapeDeserializer extends SerdeContextConfig {
                 const mapMember = ns.getValueSchema();
                 const out = {};
                 for (const _k in value) {
+                    if (_k === "__proto__") {
+                        writeKey(out);
+                    }
                     out[_k] = this._read(mapMember, value[_k]);
                 }
                 return out;
@@ -132,6 +138,9 @@ export class JsonShapeDeserializer extends SerdeContextConfig {
             if (isObject) {
                 const out = Array.isArray(value) ? [] : {};
                 for (const k in value) {
+                    if (k === "__proto__") {
+                        writeKey(out);
+                    }
                     const v = value[k];
                     if (v instanceof NumericValue) {
                         out[k] = v;

package/node_modules/@aws-sdk/core/dist-es/submodules/protocols/json/JsonShapeSerializer.js

@@ -3,6 +3,7 @@ import { NormalizedSchema } from "@smithy/core/schema";
 import { dateToUtcString, generateIdempotencyToken, LazyJsonString, NumericValue, toBase64 } from "@smithy/core/serde";
 import { SerdeContextConfig } from "../ConfigurableSerdeContext";
 import { JsonReplacer } from "./jsonReplacer";
+import { writeKey } from "../writeKey";
 export class JsonShapeSerializer extends SerdeContextConfig {
     settings;
     buffer;
@@ -64,6 +65,9 @@ export class JsonShapeSerializer extends SerdeContextConfig {
                     const { $unknown } = record;
                     if (Array.isArray($unknown)) {
                         const [k, v] = $unknown;
+                        if (k === "__proto__") {
+                            writeKey(out);
+                        }
                         out[k] = this._write(15, v);
                     }
                 }
@@ -96,6 +100,9 @@ export class JsonShapeSerializer extends SerdeContextConfig {
                 for (const _k in value) {
                     const _v = value[_k];
                     if (sparse || _v != null) {
+                        if (_k === "__proto__") {
+                            writeKey(out);
+                        }
                         out[_k] = this._write(mapMember, _v);
                     }
                 }
@@ -161,6 +168,9 @@ export class JsonShapeSerializer extends SerdeContextConfig {
                 const out = Array.isArray(value) ? [] : {};
                 for (const k in value) {
                     const v = value[k];
+                    if (k === "__proto__") {
+                        writeKey(out);
+                    }
                     if (v instanceof NumericValue) {
                         this.useReplacer = true;
                         out[k] = v;

package/node_modules/@aws-sdk/core/dist-es/submodules/protocols/json/detectBufferParsing.js

@@ -0,0 +1,18 @@
+let canParseBuffer;
+export function detectBufferParsing() {
+    if (canParseBuffer === undefined) {
+        try {
+            if (typeof Buffer !== "function") {
+                canParseBuffer = false;
+            }
+            else {
+                const result = JSON.parse(Buffer.from([0x7b, 0x7d]));
+                canParseBuffer = result !== null && typeof result === "object";
+            }
+        }
+        catch {
+            canParseBuffer = false;
+        }
+    }
+    return canParseBuffer;
+}

package/node_modules/@aws-sdk/core/dist-es/submodules/protocols/json/experimental/BufferJsonShapeDeserializer.js

@@ -4,21 +4,11 @@ import { LazyJsonString, NumericValue, parseEpochTimestamp, parseRfc3339DateTime
 import { fromBase64 } from "@smithy/core/serde";
 import { SerdeContextConfig } from "../../ConfigurableSerdeContext";
 import { UnionSerde } from "../../UnionSerde";
+import { detectBufferParsing } from "../detectBufferParsing";
 import { jsonReviver } from "../jsonReviver";
+import { needsReviver } from "../needsReviver";
 import { parseJsonBody } from "../parseJsonBody";
-let canParseBuffer;
-function detectBufferParsing() {
-    if (canParseBuffer === undefined) {
-        try {
-            const result = JSON.parse(new Uint8Array([0x7b, 0x7d]));
-            canParseBuffer = result !== null && typeof result === "object";
-        }
-        catch {
-            canParseBuffer = false;
-        }
-    }
-    return canParseBuffer;
-}
+import { writeKey } from "../../writeKey";
 export class BufferJsonShapeDeserializer extends SerdeContextConfig {
     settings;
     constructor(settings) {
@@ -26,12 +16,14 @@ export class BufferJsonShapeDeserializer extends SerdeContextConfig {
         this.settings = settings;
     }
     async read(schema, data) {
+        const reviver = needsReviver(schema) ? jsonReviver : undefined;
         let parsed;
         if (typeof data === "string") {
-            parsed = JSON.parse(data, jsonReviver);
+            parsed = JSON.parse(data, reviver);
         }
         else if (data instanceof Uint8Array && detectBufferParsing()) {
-            parsed = JSON.parse(data, jsonReviver);
+            const buf = Buffer.isBuffer(data) ? data : Buffer.from(data.buffer, data.byteOffset, data.byteLength);
+            parsed = JSON.parse(buf, reviver);
         }
         else {
             parsed = await parseJsonBody(data, this.serdeContext);
@@ -59,6 +51,9 @@ export class BufferJsonShapeDeserializer extends SerdeContextConfig {
                 const mapMember = ns.getValueSchema();
                 const map = value;
                 for (const k in map) {
+                    if (k === "__proto__") {
+                        writeKey(map);
+                    }
                     map[k] = this._read(mapMember, map[k]);
                 }
                 return map;
@@ -126,6 +121,9 @@ export class BufferJsonShapeDeserializer extends SerdeContextConfig {
                 else {
                     const doc = value;
                     for (const k in doc) {
+                        if (k === "__proto__") {
+                            writeKey(doc);
+                        }
                         const v = doc[k];
                         if (!(v instanceof NumericValue)) {
                             doc[k] = this._read(ns, v);

package/node_modules/@aws-sdk/core/dist-es/submodules/protocols/json/experimental/ByteJsonShapeSerializer.js

@@ -2,6 +2,7 @@ import { determineTimestampFormat } from "@smithy/core/protocols";
 import { NormalizedSchema } from "@smithy/core/schema";
 import { dateToUtcString, generateIdempotencyToken, LazyJsonString, NumericValue, toBase64 } from "@smithy/core/serde";
 import { SerdeContextConfig } from "../../ConfigurableSerdeContext";
+import { writeKey } from "../../writeKey";
 const encoder = new TextEncoder();
 const OPEN_BRACE = 0x7b;
 const CLOSE_BRACE = 0x7d;
@@ -36,8 +37,6 @@ export class ByteJsonShapeSerializer extends SerdeContextConfig {
     json;
     i = 0;
     rootSchema;
-    sizeHistory = new Uint32Array(20);
-    sizeHistoryIndex = 0;
     constructor(settings) {
         super();
         this.settings = settings;
@@ -86,17 +85,9 @@ export class ByteJsonShapeSerializer extends SerdeContextConfig {
         this.rootSchema = undefined;
         const finalPosition = this.i;
         this.i = 0;
-        this.sizeHistory[this.sizeHistoryIndex] = finalPosition;
-        this.sizeHistoryIndex = (this.sizeHistoryIndex + 1) % 20;
-        let max = INITIAL_BUFFER_SIZE;
-        for (let i = 0; i < 20; i++) {
-            if (this.sizeHistory[i] > max)
-                max = this.sizeHistory[i];
-        }
-        if (this.json.byteLength < max) {
-            this.json = alloc(max);
-        }
-        return this.json.slice(0, finalPosition);
+        const result = this.json.subarray(0, finalPosition);
+        this.json = alloc(INITIAL_BUFFER_SIZE);
+        return result;
     }
     ensure(byteCount) {
         const { i, json } = this;
@@ -145,8 +136,8 @@ export class ByteJsonShapeSerializer extends SerdeContextConfig {
                 if (esc !== null) {
                     this.ensure(esc.length + 1);
                     this.json[this.i++] = BACKSLASH;
-                    for (let j = 0; j < esc.length; j++) {
-                        this.json[this.i++] = esc.charCodeAt(j);
+                    for (let k = 0; k < esc.length; k++) {
+                        this.json[this.i++] = esc.charCodeAt(k);
                     }
                 }
                 else {
@@ -423,10 +414,29 @@ export class ByteJsonShapeSerializer extends SerdeContextConfig {
         this.json[this.i++] = CLOSE_BRACKET;
     }
     writeMap(ns, value, isDocument) {
-        this.ensure(2);
-        this.json[this.i++] = OPEN_BRACE;
         const sparse = !!ns.getMergedTraits().sparse;
         const valueSchema = ns.getValueSchema();
+        if (!isDocument) {
+            if (valueSchema.isStringSchema() || valueSchema.isNumericSchema() || valueSchema.isBooleanSchema()) {
+                let input = value;
+                if (sparse) {
+                    input = {};
+                    for (const k in value) {
+                        if (k === "__proto__") {
+                            writeKey(input);
+                        }
+                        input[k] = value[k] ?? null;
+                    }
+                }
+                const json = JSON.stringify(input);
+                this.ensure(json.length * 3);
+                const { written } = encoder.encodeInto(json, this.json.subarray(this.i));
+                this.i += written;
+                return;
+            }
+        }
+        this.ensure(2);
+        this.json[this.i++] = OPEN_BRACE;
         let first = true;
         for (const k in value) {
             const v = value[k];

package/node_modules/@aws-sdk/core/dist-es/submodules/protocols/json/jsonReviver.js

@@ -3,12 +3,18 @@ export function jsonReviver(key, value, context) {
     if (context?.source) {
         const numericString = context.source;
         if (typeof value === "number") {
-            if (value > Number.MAX_SAFE_INTEGER || value < Number.MIN_SAFE_INTEGER || numericString !== String(value)) {
-                const isFractional = numericString.includes(".");
-                if (isFractional) {
+            const inSafeRange = value <= Number.MAX_SAFE_INTEGER && value >= Number.MIN_SAFE_INTEGER;
+            if (!inSafeRange || numericString !== String(value)) {
+                if (inSafeRange && /[eE]/.test(numericString) && String(Number(numericString)) === String(value)) {
+                    return value;
+                }
+                if (isFractionalNumeric(numericString)) {
                     return new NumericValue(numericString, "bigDecimal");
                 }
                 else {
+                    if (/[eE]/.test(numericString)) {
+                        return BigInt(Number(numericString));
+                    }
                     return BigInt(numericString);
                 }
             }
@@ -16,3 +22,16 @@ export function jsonReviver(key, value, context) {
     }
     return value;
 }
+function isFractionalNumeric(s) {
+    const dotIndex = s.indexOf(".");
+    if (dotIndex === -1) {
+        return false;
+    }
+    const eIndex = s.search(/[eE]/);
+    if (eIndex === -1) {
+        return true;
+    }
+    const fracDigits = eIndex - dotIndex - 1;
+    const exp = parseInt(s.slice(eIndex + 1), 10);
+    return exp < fracDigits;
+}

package/node_modules/@aws-sdk/core/dist-es/submodules/protocols/json/needsReviver.js

@@ -0,0 +1,41 @@
+import { NormalizedSchema } from "@smithy/core/schema";
+const REVIVER_SYMBOL = Symbol.for("@aws-sdk/reviver");
+export function needsReviver(schema) {
+    const ns = NormalizedSchema.of(schema);
+    const raw = ns.getSchema();
+    if (Array.isArray(raw) && ns.isStructSchema()) {
+        if (REVIVER_SYMBOL in raw) {
+            return raw[REVIVER_SYMBOL];
+        }
+        const result = _check(ns, new Set());
+        raw[REVIVER_SYMBOL] = result;
+        return result;
+    }
+    return _check(ns, new Set());
+}
+function _check(ns, seen) {
+    const raw = ns.getSchema();
+    if (seen.has(raw)) {
+        return false;
+    }
+    seen.add(raw);
+    if (ns.isBigIntegerSchema() || ns.isBigDecimalSchema()) {
+        return true;
+    }
+    if (ns.isStructSchema()) {
+        for (const [, memberSchema] of ns.structIterator()) {
+            if (_check(memberSchema, seen)) {
+                return true;
+            }
+        }
+    }
+    else if (ns.isListSchema() || ns.isMapSchema()) {
+        if (_check(ns.getValueSchema(), seen)) {
+            return true;
+        }
+    }
+    else if (ns.isDocumentSchema()) {
+        return true;
+    }
+    return false;
+}

package/node_modules/@aws-sdk/core/dist-es/submodules/protocols/json/parseJsonBody.js

@@ -1,20 +1,40 @@
+import { collectBody } from "@smithy/core/protocols";
 import { collectBodyString } from "../common";
-export const parseJsonBody = (streamBody, context) => collectBodyString(streamBody, context).then((encoded) => {
-    if (encoded.length) {
-        try {
-            return JSON.parse(encoded);
-        }
-        catch (e) {
-            if (e?.name === "SyntaxError") {
-                Object.defineProperty(e, "$responseBodyText", {
-                    value: encoded,
-                });
+import { detectBufferParsing } from "./detectBufferParsing";
+import { jsonReviver } from "./jsonReviver";
+import { needsReviver } from "./needsReviver";
+export async function parseJsonBody(streamBody, context, schema) {
+    let parsingInput;
+    if (detectBufferParsing() && typeof streamBody?.[Symbol.asyncIterator] === "function") {
+        const buffer = await collectBody(streamBody, context);
+        if (typeof Buffer === "function") {
+            if (Buffer.isBuffer(buffer)) {
+                parsingInput = buffer;
+            }
+            else {
+                parsingInput = Buffer.from(buffer.buffer, buffer.byteOffset, buffer.byteLength);
             }
-            throw e;
         }
     }
-    return {};
-});
+    if (!parsingInput) {
+        parsingInput = await collectBodyString(streamBody, context);
+    }
+    if (parsingInput.length === 0) {
+        return {};
+    }
+    const reviver = schema && needsReviver(schema) ? jsonReviver : undefined;
+    try {
+        return JSON.parse(parsingInput, reviver);
+    }
+    catch (e) {
+        if (e?.name === "SyntaxError") {
+            Object.defineProperty(e, "$responseBodyText", {
+                value: typeof parsingInput === "string" ? parsingInput : parsingInput.toString("utf8"),
+            });
+        }
+        throw e;
+    }
+}
 export const parseJsonErrorBody = async (errorBody, context) => {
     const value = await parseJsonBody(errorBody, context);
     value.message = value.message ?? value.Message;

package/node_modules/@aws-sdk/core/dist-es/submodules/protocols/writeKey.js

@@ -0,0 +1,3 @@
+export function writeKey(obj) {
+    Object.defineProperty(obj, "__proto__", { value: undefined, writable: true, enumerable: true, configurable: true });
+}

package/node_modules/@aws-sdk/core/dist-es/submodules/protocols/xml/XmlShapeDeserializer.js

@@ -5,6 +5,7 @@ import { NormalizedSchema } from "@smithy/core/schema";
 import { toUtf8 } from "@smithy/core/serde";
 import { SerdeContextConfig } from "../ConfigurableSerdeContext";
 import { UnionSerde } from "../UnionSerde";
+import { writeKey } from "../writeKey";
 export class XmlShapeDeserializer extends SerdeContextConfig {
     settings;
     stringDeserializer;
@@ -85,6 +86,9 @@ export class XmlShapeDeserializer extends SerdeContextConfig {
                 for (const entry of entries) {
                     const key = entry[keyProperty];
                     const value = entry[valueProperty];
+                    if (key === "__proto__") {
+                        writeKey(buffer);
+                    }
                     buffer[key] = this.readSchema(memberNs, value);
                 }
                 return buffer;

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/aws_sdk/AwsSdkSigV4Signer.d.ts

@@ -1,4 +1,4 @@
-import type { AuthScheme, AwsCredentialIdentity, HttpRequest as IHttpRequest, HttpResponse, HttpSigner, RequestSigner } from "@smithy/types";
+import type { AuthScheme, AwsCredentialIdentity, HttpRequest as IHttpRequest, HttpResponse, HttpSigner, Provider, RequestSigner } from "@smithy/types";
 import type { AwsSdkSigV4AAuthResolvedConfig } from "./resolveAwsSdkSigV4AConfig";
 /**
  * @internal
@@ -6,6 +6,7 @@ import type { AwsSdkSigV4AAuthResolvedConfig } from "./resolveAwsSdkSigV4AConfig
 interface AwsSdkSigV4Config extends AwsSdkSigV4AAuthResolvedConfig {
     systemClockOffset: number;
     signer: (authScheme?: AuthScheme) => Promise<RequestSigner>;
+    disableClockSkewCorrection?: Provider<boolean>;
 }
 /**
  * @internal

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/aws_sdk/clock-skew-defaults.browser.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Browser default: clock skew correction enabled.
+ *
+ * @internal
+ */
+export declare const DEFAULT_DISABLE_CLOCK_SKEW_CORRECTION = false;

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/aws_sdk/clock-skew-defaults.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Node.js default: lazily reads from env var / shared config file.
+ * Browser counterpart (via index binding) exports `false`.
+ *
+ * @internal
+ */
+export declare const DEFAULT_DISABLE_CLOCK_SKEW_CORRECTION: import("@smithy/types").Provider<boolean>;

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/aws_sdk/clock-skew-node-config.d.ts

@@ -0,0 +1,13 @@
+import { type LoadedConfigSelectors } from "@smithy/core/config";
+/**
+ * @internal
+ */
+export declare const ENV_DISABLE_CLOCK_SKEW_CORRECTION = "AWS_DISABLE_CLOCK_SKEW_CORRECTION";
+/**
+ * @internal
+ */
+export declare const CONFIG_DISABLE_CLOCK_SKEW_CORRECTION = "disable_clock_skew_correction";
+/**
+ * @internal
+ */
+export declare const NODE_DISABLE_CLOCK_SKEW_CORRECTION_CONFIG_OPTIONS: LoadedConfigSelectors<boolean>;

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/aws_sdk/index.d.ts

@@ -3,5 +3,5 @@ export { AwsSdkSigV4ASigner } from "./AwsSdkSigV4ASigner";
 export { NODE_AUTH_SCHEME_PREFERENCE_OPTIONS } from "./NODE_AUTH_SCHEME_PREFERENCE_OPTIONS";
 export { resolveAwsSdkSigV4AConfig, NODE_SIGV4A_CONFIG_OPTIONS } from "./resolveAwsSdkSigV4AConfig";
 export type { AwsSdkSigV4AAuthInputConfig, AwsSdkSigV4APreviouslyResolved, AwsSdkSigV4AAuthResolvedConfig, } from "./resolveAwsSdkSigV4AConfig";
-export { resolveAwsSdkSigV4Config, resolveAWSSDKSigV4Config } from "./resolveAwsSdkSigV4Config";
+export { bindResolveAwsSdkSigV4Config } from "./resolveAwsSdkSigV4Config";
 export type { AwsSdkSigV4AuthInputConfig, AwsSdkSigV4Memoized, AwsSdkSigV4PreviouslyResolved, AwsSdkSigV4AuthResolvedConfig, AWSSDKSigV4AuthInputConfig, AWSSDKSigV4PreviouslyResolved, AWSSDKSigV4AuthResolvedConfig, } from "./resolveAwsSdkSigV4Config";

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/aws_sdk/resolveAwsSdkSigV4Config.d.ts

@@ -33,6 +33,14 @@ export interface AwsSdkSigV4AuthInputConfig {
      * @internal
      */
     signerConstructor?: new (options: SignatureV4Init & SignatureV4CryptoInit) => RequestSigner;
+    /**
+     * Whether to disable clock skew correction. When true, the SDK will not adjust
+     * the signing timestamp, will not update the client clock offset from response
+     * headers, and will not retry clock skew errors.
+     *
+     * Defaults to false (correction enabled).
+     */
+    disableClockSkewCorrection?: boolean | Provider<boolean>;
 }
 /**
  * Used to indicate whether a credential provider function was memoized by this resolver.
@@ -87,11 +95,23 @@ export interface AwsSdkSigV4AuthResolvedConfig {
      * Resolved value for input config {@link AwsSdkSigV4AuthInputConfig.systemClockOffset}
      */
     systemClockOffset: number;
+    /**
+     * Resolved value for input config {@link AwsSdkSigV4AuthInputConfig.disableClockSkewCorrection}
+     */
+    disableClockSkewCorrection: Provider<boolean>;
 }
 /**
+ * Combined input config type used internally by the resolver and helper functions.
  * @internal
  */
-export declare const resolveAwsSdkSigV4Config: <T>(config: T & AwsSdkSigV4AuthInputConfig & AwsSdkSigV4PreviouslyResolved) => T & AwsSdkSigV4AuthResolvedConfig;
+type AwsSdkSigV4ConfigInput = AwsSdkSigV4AuthInputConfig & AwsSdkSigV4PreviouslyResolved;
+/**
+ * Accepts a platform-specific default for disableClockSkewCorrection and
+ * returns the resolver function. Called from the index (node vs browser).
+ *
+ * @internal
+ */
+export declare const bindResolveAwsSdkSigV4Config: (defaultDisableClockSkewCorrection: boolean | Provider<boolean>) => <T>(config: T & AwsSdkSigV4ConfigInput) => T & AwsSdkSigV4AuthResolvedConfig;
 /**
  * @internal
  * @deprecated renamed to {@link AwsSdkSigV4AuthInputConfig}
@@ -110,8 +130,4 @@ export interface AWSSDKSigV4PreviouslyResolved extends AwsSdkSigV4PreviouslyReso
  */
 export interface AWSSDKSigV4AuthResolvedConfig extends AwsSdkSigV4AuthResolvedConfig {
 }
-/**
- * @internal
- * @deprecated renamed to {@link resolveAwsSdkSigV4Config}
- */
-export declare const resolveAWSSDKSigV4Config: <T>(config: T & AwsSdkSigV4AuthInputConfig & AwsSdkSigV4PreviouslyResolved) => T & AwsSdkSigV4AuthResolvedConfig;
+export {};

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/index.browser.d.ts

@@ -0,0 +1,11 @@
+export { AwsSdkSigV4Signer, AWSSDKSigV4Signer, validateSigningProperties, AwsSdkSigV4ASigner, resolveAwsSdkSigV4AConfig, } from "./aws_sdk";
+export type { AwsSdkSigV4AAuthInputConfig, AwsSdkSigV4APreviouslyResolved, AwsSdkSigV4AAuthResolvedConfig, AwsSdkSigV4AuthInputConfig, AwsSdkSigV4Memoized, AwsSdkSigV4PreviouslyResolved, AwsSdkSigV4AuthResolvedConfig, AWSSDKSigV4AuthInputConfig, AWSSDKSigV4PreviouslyResolved, AWSSDKSigV4AuthResolvedConfig, } from "./aws_sdk";
+export { getBearerTokenEnvKey } from "./utils/getBearerTokenEnvKey";
+export declare const NODE_AUTH_SCHEME_PREFERENCE_OPTIONS: symbol;
+export declare const NODE_SIGV4A_CONFIG_OPTIONS: symbol;
+export declare const resolveAwsSdkSigV4Config: <T>(config: T & (import("./aws_sdk").AwsSdkSigV4AuthInputConfig & import("./aws_sdk").AwsSdkSigV4PreviouslyResolved)) => T & import("./aws_sdk").AwsSdkSigV4AuthResolvedConfig;
+/**
+ * @internal
+ * @deprecated renamed to {@link resolveAwsSdkSigV4Config}
+ */
+export declare const resolveAWSSDKSigV4Config: <T>(config: T & (import("./aws_sdk").AwsSdkSigV4AuthInputConfig & import("./aws_sdk").AwsSdkSigV4PreviouslyResolved)) => T & import("./aws_sdk").AwsSdkSigV4AuthResolvedConfig;

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/index.d.ts

@@ -1,3 +1,9 @@
-export { AwsSdkSigV4Signer, AWSSDKSigV4Signer, validateSigningProperties, AwsSdkSigV4ASigner, NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, resolveAwsSdkSigV4AConfig, NODE_SIGV4A_CONFIG_OPTIONS, resolveAwsSdkSigV4Config, resolveAWSSDKSigV4Config, } from "./aws_sdk";
+export { AwsSdkSigV4Signer, AWSSDKSigV4Signer, validateSigningProperties, AwsSdkSigV4ASigner, NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, resolveAwsSdkSigV4AConfig, NODE_SIGV4A_CONFIG_OPTIONS, } from "./aws_sdk";
 export type { AwsSdkSigV4AAuthInputConfig, AwsSdkSigV4APreviouslyResolved, AwsSdkSigV4AAuthResolvedConfig, AwsSdkSigV4AuthInputConfig, AwsSdkSigV4Memoized, AwsSdkSigV4PreviouslyResolved, AwsSdkSigV4AuthResolvedConfig, AWSSDKSigV4AuthInputConfig, AWSSDKSigV4PreviouslyResolved, AWSSDKSigV4AuthResolvedConfig, } from "./aws_sdk";
 export { getBearerTokenEnvKey } from "./utils/getBearerTokenEnvKey";
+export declare const resolveAwsSdkSigV4Config: <T>(config: T & (import("./aws_sdk").AwsSdkSigV4AuthInputConfig & import("./aws_sdk").AwsSdkSigV4PreviouslyResolved)) => T & import("./aws_sdk").AwsSdkSigV4AuthResolvedConfig;
+/**
+ * @internal
+ * @deprecated renamed to {@link resolveAwsSdkSigV4Config}
+ */
+export declare const resolveAWSSDKSigV4Config: <T>(config: T & (import("./aws_sdk").AwsSdkSigV4AuthInputConfig & import("./aws_sdk").AwsSdkSigV4PreviouslyResolved)) => T & import("./aws_sdk").AwsSdkSigV4AuthResolvedConfig;

package/node_modules/@aws-sdk/core/dist-types/submodules/httpAuthSchemes/utils/getDateHeader.d.ts

@@ -2,3 +2,7 @@
  * @internal
  */
 export declare const getDateHeader: (response: unknown) => string | undefined;
+/**
+ * @internal
+ */
+export declare const getAgeHeader: (response: unknown) => string | undefined;