@cdklabs/cdk-ssm-documents 0.0.57 → 0.0.59

package/node_modules/@nodable/entities/src/entityTries.js

@@ -0,0 +1,49 @@
+// entityTries.js
+// Builds integer-keyed tries so the decoder never allocates a string object
+// during lookup — every key is a plain charCode number.
+//
+// trie1: Map<code0, entity>
+// trie2: Map<code0, Map<code1, entity>>
+// trie3: Map<code0, Map<code1, Map<code2, entity>>>
+
+import { ALL_ENTITIES } from './entities.js';
+
+// Reverse map: character sequence → "&name;"
+const CHAR_TO_ENTITY = new Map();
+for (const [name, chars] of Object.entries(ALL_ENTITIES)) {
+  CHAR_TO_ENTITY.set(chars, `&${name};`);
+}
+
+export const trie1 = new Map();   // code0          → entity string
+export const trie2 = new Map();   // code0 → Map    → entity string
+export const trie3 = new Map();   // code0 → Map → Map → entity string
+
+for (const [chars, entity] of CHAR_TO_ENTITY) {
+  const len = chars.length;
+
+  if (len === 1) {
+    const c0 = chars.charCodeAt(0);
+    // Keep shortest match only if no longer match already claimed this code
+    // (longer matches are inserted in the same pass so we just overwrite —
+    //  trie1 is only consulted after trie2/trie3 both miss, so no conflict)
+    trie1.set(c0, entity);
+
+  } else if (len === 2) {
+    const c0 = chars.charCodeAt(0);
+    const c1 = chars.charCodeAt(1);
+    let inner = trie2.get(c0);
+    if (inner === undefined) { inner = new Map(); trie2.set(c0, inner); }
+    inner.set(c1, entity);
+
+  } else if (len === 3) {
+    const c0 = chars.charCodeAt(0);
+    const c1 = chars.charCodeAt(1);
+    const c2 = chars.charCodeAt(2);
+    let mid = trie3.get(c0);
+    if (mid === undefined) { mid = new Map(); trie3.set(c0, mid); }
+    let inner = mid.get(c1);
+    if (inner === undefined) { inner = new Map(); mid.set(c1, inner); }
+    inner.set(c2, entity);
+  }
+  // HTML5 has no named entity whose character sequence is longer than 3 chars
+}

package/node_modules/@nodable/entities/src/index.d.ts

@@ -0,0 +1,264 @@
+// ---------------------------------------------------------------------------
+// @nodable/entities — TypeScript declarations
+// ---------------------------------------------------------------------------
+
+/** A function-based entity replacement value (used for numeric refs). */
+export type EntityValFn = (match: string, captured: string, ...rest: unknown[]) => string;
+
+// ---------------------------------------------------------------------------
+// Encoder options
+// ---------------------------------------------------------------------------
+
+export interface EntityEncoderOptions {
+  /**
+   * Whether to encode XML unsafe characters: `&`, `<`, `>`, `"`, `'`.
+   * @default true
+   */
+  encodeXmlSafe?: boolean;
+
+  /**
+   * Whether to encode non‑ASCII characters (e.g. `é` → `&eacute;`) using the
+   * built‑in named entity trie.
+   * @default true
+   */
+  encodeAllNamed?: boolean;
+
+  /**
+   * Maximum number of replacements performed **cumulatively** across all
+   * `encode()` calls. `0` means unlimited.
+   *
+   * Use `reset()` to reset the internal counter.
+   * @default 0
+   */
+  maxReplacements?: number;
+}
+
+// ---------------------------------------------------------------------------
+// EntityEncoder class
+// ---------------------------------------------------------------------------
+
+/**
+ * High‑performance encoder that replaces characters with XML/HTML entities.
+ *
+ * - Escapes XML unsafe characters (`&`, `<`, `>`, `"`, `'`) when `encodeXmlSafe` is true.
+ * - Replaces non‑ASCII characters (e.g. `é`, `©`) with named entities using
+ *   a compact trie‑based lookup when `encodeAllNamed` is true.
+ * - Supports a cumulative replacement limit (`maxReplacements`) that persists
+ *   across multiple `encode()` calls until `reset()` is called.
+ *
+ * @example
+ * const encoder = new EntityEncoder({ encodeXmlSafe: true, encodeAllNamed: true });
+ * encoder.encode('<foo>');   // "&lt;foo&gt;"
+ * encoder.encode('© 2025');  // "&copy; 2025"
+ *
+ * // With limit
+ * const limited = new EntityEncoder({ maxReplacements: 2 });
+ * limited.encode('<>&');     // "&lt;&gt;&"  (third replacement omitted)
+ * limited.reset();           // reset counter
+ */
+export class EntityEncoder {
+  constructor(options?: EntityEncoderOptions);
+
+  /**
+   * Encode a string by replacing XML‑unsafe characters and (optionally)
+   * non‑ASCII characters with named entities.
+   *
+   * If `maxReplacements` is set and the cumulative limit has been reached,
+   * the input string is returned unchanged.
+   *
+   * @returns Encoded string (may be identical to input if no replacements needed
+   *          or the limit has been exhausted).
+   */
+  encode(str: string): string;
+
+  /**
+   * Reset the internal replacement counter.
+   * Does **not** change `encodeXmlSafe`, `encodeAllNamed`, or `maxReplacements`.
+   */
+  reset(): void;
+}
+
+// ---------------------------------------------------------------------------
+// Constructor options for EntityDecoder (existing)
+// ---------------------------------------------------------------------------
+
+/**
+ * Controls which entity categories count toward the expansion limits.
+ *
+ * - `'external'` — only untrusted / injected entities (default)
+ * - `'base'`     — only built‑in XML entities + user‑supplied `namedEntities`
+ * - `'all'`      — all entities regardless of tier
+ * - `string[]`   — explicit combination, e.g. `['external', 'base']`
+ */
+export type ApplyLimitsTo = 'external' | 'base' | 'all' | Array<'external' | 'base'>;
+
+export interface EntityDecoderLimitOptions {
+  /**
+   * Maximum number of entity references expanded **per document**.
+   * `0` means unlimited.
+   * @default 0
+   */
+  maxTotalExpansions?: number;
+
+  /**
+   * Maximum number of characters **added** by entity expansion per document.
+   * `0` means unlimited.
+   * @default 0
+   */
+  maxExpandedLength?: number;
+
+  /**
+   * Which entity tiers count toward the expansion limits.
+   *
+   * - `'external'` (default) – only input/runtime + persistent external entities
+   * - `'base'`               – only built‑in XML + `namedEntities`
+   * - `'all'`                – every entity regardless of tier
+   * - `string[]`             – explicit combination, e.g. `['external', 'base']`
+   *
+   * @default 'external'
+   */
+  applyLimitsTo?: ApplyLimitsTo;
+}
+
+export interface EntityDecoderNCROptions {
+  /**
+   * XML version used for NCR classification.
+   * @default 1.0
+   */
+  xmlVersion?: 1.0 | 1.1;
+
+  /**
+   * Base action for all numeric references.
+   * @default 'allow'
+   */
+  onNCR?: 'allow' | 'leave' | 'remove' | 'throw';
+
+  /**
+   * Action for null NCR (U+0000).
+   * @default 'remove'
+   */
+  nullNCR?: 'remove' | 'throw';
+}
+
+export interface EntityDecoderOptions {
+  /**
+   * Extra named entities merged into the **base map** (trusted, counts as `'base'` tier).
+   * These are combined with the built‑in XML entities (`lt`, `gt`, `quot`, `apos`).
+   * Values containing `&` are silently skipped to prevent recursive expansion.
+   *
+   * @default null
+   */
+  namedEntities?: Record<string, string | { regex: RegExp; val: string | EntityValFn }> | null;
+
+
+  /**
+   * Hook called once on the fully decoded string (after all replacements).
+   *
+   * - Receives `(resolved, original)` and **must return a string**.
+   * - To reject expansion, return `original`.
+   * - To sanitize, return a cleaned version of `resolved`.
+   *
+   * @example
+   * postCheck: (resolved, original) =>
+   *   /<[a-z]/i.test(resolved) ? original : resolved
+   */
+  postCheck?: ((resolved: string, original: string) => string) | null;
+
+  /**
+   * Whether numeric character references (`&#NNN;`, `&#xHH;`) are allowed.
+   * @default true
+   */
+  numericAllowed?: boolean;
+
+  /**
+   * Array of entity names or numeric references to leave unexpanded.
+   * @default []
+   */
+  leave?: string[];
+
+  /**
+   * Array of entity names or numeric references to remove.
+   * @default []
+   */
+  remove?: string[];
+
+  /**
+   * Security limits for entity expansion.
+   */
+  limit?: EntityDecoderLimitOptions;
+
+  /**
+   * Numeric Character Reference (NCR) policy.
+   */
+  ncr?: EntityDecoderNCROptions;
+}
+
+// ---------------------------------------------------------------------------
+// EntityDecoder class (default export)
+// ---------------------------------------------------------------------------
+
+/**
+ * Single‑pass, zero‑regex entity decoder for XML/HTML content.
+ *
+ * ## Entity lookup priority (highest → lowest)
+ * 1. **input / runtime** – injected via `addInputEntities()` (DOCTYPE per document)
+ * 2. **persistent external** – set via `setExternalEntities()` / `addExternalEntity()`
+ * 3. **base map** – built‑in XML entities + user‑supplied `namedEntities`
+ *
+ * Numeric references (`&#NNN;`, `&#xHH;`) are resolved directly and count as the `'base'` tier.
+ *
+ * @example
+ * const decoder = new EntityDecoder({
+ *   namedEntities: COMMON_HTML,
+ *   maxTotalExpansions: 100
+ * });
+ * decoder.setExternalEntities({ brand: 'Acme' });
+ *
+ * decoder.addInputEntities({ version: '1.0' });
+ * decoder.decode('&brand; v&version; &lt;'); // 'Acme v1.0 <'
+ *
+ * decoder.reset(); // clears input entities + counters, keeps external entities
+ */
+export default class EntityDecoder {
+  constructor(options?: EntityDecoderOptions);
+
+  setExternalEntities(
+    map: Record<string, string | { regex: RegExp; val: string | EntityValFn }>
+  ): void;
+
+  addExternalEntity(key: string, value: string): void;
+
+  addInputEntities(
+    map: Record<
+      string,
+      | string
+      | { regx: RegExp; val: string | EntityValFn }
+      | { regex: RegExp; val: string | EntityValFn }
+    >
+  ): void;
+
+  reset(): this;
+
+  decode(str: string): string;
+}
+
+// ---------------------------------------------------------------------------
+// Named entity group exports (for use with `namedEntities` option)
+// ---------------------------------------------------------------------------
+
+export const COMMON_HTML: Record<string, string>;
+export const ALL_ENTITIES: Record<string, string>;
+export const XML: Record<string, string>;
+export const BASIC_LATIN: Record<string, string>;
+export const LATIN_ACCENTS: Record<string, string>;
+export const LATIN_EXTENDED: Record<string, string>;
+export const GREEK: Record<string, string>;
+export const CYRILLIC: Record<string, string>;
+export const MATH: Record<string, string>;
+export const MATH_ADVANCED: Record<string, string>;
+export const ARROWS: Record<string, string>;
+export const SHAPES: Record<string, string>;
+export const PUNCTUATION: Record<string, string>;
+export const CURRENCY: Record<string, string>;
+export const FRACTIONS: Record<string, string>;
+export const MISC_SYMBOLS: Record<string, string>;

package/node_modules/@nodable/entities/src/index.js

@@ -0,0 +1,29 @@
+/**
+ * @nodable/entities
+ *
+ * Standalone, zero-dependency XML/HTML entity replacement.
+ *
+
+ */
+
+export { default as EntityDecoder } from './EntityDecoder.js';
+export {
+  COMMON_HTML,
+  XML,
+  ALL_ENTITIES,
+  ARROWS,
+  BASIC_LATIN,
+  CURRENCY,
+  MATH,
+  MATH_ADVANCED,
+  CYRILLIC,
+  FRACTIONS,
+  GREEK,
+  LATIN_ACCENTS,
+  LATIN_EXTENDED,
+  MISC_SYMBOLS,
+  PUNCTUATION,
+  SHAPES,
+} from './entities.js';
+
+export { default as EntityEncoder } from './EntityEncoder.js';

package/node_modules/@smithy/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/core",
-  "version": "3.23.16",
+  "version": "3.23.17",
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es:cjs'",
     "build:es:cjs": "yarn g:tsc -p tsconfig.es.json && node ../../scripts/inline core",
@@ -91,7 +91,7 @@
     "@smithy/util-base64": "^4.3.2",
     "@smithy/util-body-length-browser": "^4.2.2",
     "@smithy/util-middleware": "^4.2.14",
-    "@smithy/util-stream": "^4.5.24",
+    "@smithy/util-stream": "^4.5.25",
     "@smithy/util-utf8": "^4.2.2",
     "@smithy/uuid": "^1.1.2",
     "tslib": "^2.6.2"

package/node_modules/@smithy/middleware-compression/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/middleware-compression",
-  "version": "4.3.45",
+  "version": "4.3.46",
   "description": "Middleware and Plugin for request compression.",
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es:cjs'",
@@ -15,7 +15,7 @@
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
   "dependencies": {
-    "@smithy/core": "^3.23.16",
+    "@smithy/core": "^3.23.17",
     "@smithy/is-array-buffer": "^4.2.2",
     "@smithy/node-config-provider": "^4.3.14",
     "@smithy/protocol-http": "^5.3.14",

package/node_modules/@smithy/middleware-endpoint/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/middleware-endpoint",
-  "version": "4.4.31",
+  "version": "4.4.32",
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es:cjs'",
     "build:es:cjs": "yarn g:tsc -p tsconfig.es.json && node ../../scripts/inline middleware-endpoint",
@@ -24,8 +24,8 @@
   "license": "Apache-2.0",
   "sideEffects": false,
   "dependencies": {
-    "@smithy/core": "^3.23.16",
-    "@smithy/middleware-serde": "^4.2.19",
+    "@smithy/core": "^3.23.17",
+    "@smithy/middleware-serde": "^4.2.20",
     "@smithy/node-config-provider": "^4.3.14",
     "@smithy/shared-ini-file-loader": "^4.4.9",
     "@smithy/types": "^4.14.1",

package/node_modules/@smithy/middleware-retry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/middleware-retry",
-  "version": "4.5.4",
+  "version": "4.5.7",
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es:cjs'",
     "build:es:cjs": "yarn g:tsc -p tsconfig.es.json && node ../../scripts/inline middleware-retry",
@@ -33,14 +33,14 @@
   "license": "Apache-2.0",
   "sideEffects": false,
   "dependencies": {
-    "@smithy/core": "^3.23.16",
+    "@smithy/core": "^3.23.17",
     "@smithy/node-config-provider": "^4.3.14",
     "@smithy/protocol-http": "^5.3.14",
-    "@smithy/service-error-classification": "^4.3.0",
-    "@smithy/smithy-client": "^4.12.12",
+    "@smithy/service-error-classification": "^4.3.1",
+    "@smithy/smithy-client": "^4.12.13",
     "@smithy/types": "^4.14.1",
     "@smithy/util-middleware": "^4.2.14",
-    "@smithy/util-retry": "^4.3.3",
+    "@smithy/util-retry": "^4.3.6",
     "@smithy/uuid": "^1.1.2",
     "tslib": "^2.6.2"
   },

package/node_modules/@smithy/middleware-serde/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/middleware-serde",
-  "version": "4.2.19",
+  "version": "4.2.20",
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es:cjs'",
     "build:es:cjs": "yarn g:tsc -p tsconfig.es.json && node ../../scripts/inline middleware-serde",
@@ -25,7 +25,7 @@
   "license": "Apache-2.0",
   "sideEffects": false,
   "dependencies": {
-    "@smithy/core": "^3.23.16",
+    "@smithy/core": "^3.23.17",
     "@smithy/protocol-http": "^5.3.14",
     "@smithy/types": "^4.14.1",
     "tslib": "^2.6.2"

package/node_modules/@smithy/node-http-handler/dist-cjs/index.js

@@ -460,6 +460,11 @@ class ClientHttp2SessionRef {
     deref() {
         return this.session;
     }
+    close() {
+        if (!this.session.closed) {
+            this.session.close();
+        }
+    }
     destroy() {
         this.refs = 0;
         if (!this.session.destroyed) {
@@ -548,16 +553,18 @@ class NodeHttp2ConnectionManager {
                 }
             });
         }
-        const destroySessionCb = () => {
-            session.destroy();
-            this.removeFromPool(url, ref);
+        const graceful = () => {
+            this.removeFromPoolAndClose(url, ref);
+        };
+        const ensureDestroyed = () => {
+            this.removeFromPoolAndCheckedDestroy(url, ref);
         };
-        session.on("goaway", destroySessionCb);
-        session.on("error", destroySessionCb);
-        session.on("frameError", destroySessionCb);
-        session.on("close", () => this.removeFromPool(url, ref));
+        session.on("goaway", graceful);
+        session.on("error", ensureDestroyed);
+        session.on("frameError", ensureDestroyed);
+        session.on("close", ensureDestroyed);
         if (connectionConfiguration.requestTimeout) {
-            session.setTimeout(connectionConfiguration.requestTimeout, destroySessionCb);
+            session.setTimeout(connectionConfiguration.requestTimeout, ensureDestroyed);
         }
         pool.offerLast(ref);
         ref.retain();
@@ -571,15 +578,14 @@ class NodeHttp2ConnectionManager {
         const ref = new ClientHttp2SessionRef(http2.connect(url));
         const session = ref.deref();
         session.settings({ maxConcurrentStreams: 1 });
-        const destroySession = () => {
-            session.destroy();
+        const ensureDestroyed = () => {
+            ref.destroy();
         };
-        session.on("goaway", destroySession);
-        session.on("error", destroySession);
-        session.on("frameError", destroySession);
-        session.on("close", destroySession);
+        session.on("error", ensureDestroyed);
+        session.on("frameError", ensureDestroyed);
+        session.on("close", ensureDestroyed);
         if (connectionConfiguration.requestTimeout) {
-            session.setTimeout(connectionConfiguration.requestTimeout, destroySession);
+            session.setTimeout(connectionConfiguration.requestTimeout, ensureDestroyed);
         }
         ref.retain();
         return ref;
@@ -620,8 +626,13 @@ class NodeHttp2ConnectionManager {
         }
         return pools;
     }
-    removeFromPool(authority, ref) {
+    removeFromPoolAndClose(authority, ref) {
         this.connectionPools.get(authority)?.remove(ref);
+        ref.close();
+    }
+    removeFromPoolAndCheckedDestroy(authority, ref) {
+        this.connectionPools.get(authority)?.remove(ref);
+        ref.destroy();
     }
     getPool(url) {
         if (!this.connectionPools.has(url)) {

package/node_modules/@smithy/node-http-handler/dist-es/http2/ClientHttp2SessionRef.js

@@ -33,6 +33,11 @@ export class ClientHttp2SessionRef {
     deref() {
         return this.session;
     }
+    close() {
+        if (!this.session.closed) {
+            this.session.close();
+        }
+    }
     destroy() {
         this.refs = 0;
         if (!this.session.destroyed) {

package/node_modules/@smithy/node-http-handler/dist-es/node-http2-connection-manager.js

@@ -32,16 +32,18 @@ export class NodeHttp2ConnectionManager {
                 }
             });
         }
-        const destroySessionCb = () => {
-            session.destroy();
-            this.removeFromPool(url, ref);
+        const graceful = () => {
+            this.removeFromPoolAndClose(url, ref);
         };
-        session.on("goaway", destroySessionCb);
-        session.on("error", destroySessionCb);
-        session.on("frameError", destroySessionCb);
-        session.on("close", () => this.removeFromPool(url, ref));
+        const ensureDestroyed = () => {
+            this.removeFromPoolAndCheckedDestroy(url, ref);
+        };
+        session.on("goaway", graceful);
+        session.on("error", ensureDestroyed);
+        session.on("frameError", ensureDestroyed);
+        session.on("close", ensureDestroyed);
         if (connectionConfiguration.requestTimeout) {
-            session.setTimeout(connectionConfiguration.requestTimeout, destroySessionCb);
+            session.setTimeout(connectionConfiguration.requestTimeout, ensureDestroyed);
         }
         pool.offerLast(ref);
         ref.retain();
@@ -55,15 +57,14 @@ export class NodeHttp2ConnectionManager {
         const ref = new ClientHttp2SessionRef(http2.connect(url));
         const session = ref.deref();
         session.settings({ maxConcurrentStreams: 1 });
-        const destroySession = () => {
-            session.destroy();
+        const ensureDestroyed = () => {
+            ref.destroy();
         };
-        session.on("goaway", destroySession);
-        session.on("error", destroySession);
-        session.on("frameError", destroySession);
-        session.on("close", destroySession);
+        session.on("error", ensureDestroyed);
+        session.on("frameError", ensureDestroyed);
+        session.on("close", ensureDestroyed);
         if (connectionConfiguration.requestTimeout) {
-            session.setTimeout(connectionConfiguration.requestTimeout, destroySession);
+            session.setTimeout(connectionConfiguration.requestTimeout, ensureDestroyed);
         }
         ref.retain();
         return ref;
@@ -104,8 +105,13 @@ export class NodeHttp2ConnectionManager {
         }
         return pools;
     }
-    removeFromPool(authority, ref) {
+    removeFromPoolAndClose(authority, ref) {
+        this.connectionPools.get(authority)?.remove(ref);
+        ref.close();
+    }
+    removeFromPoolAndCheckedDestroy(authority, ref) {
         this.connectionPools.get(authority)?.remove(ref);
+        ref.destroy();
     }
     getPool(url) {
         if (!this.connectionPools.has(url)) {

package/node_modules/@smithy/node-http-handler/dist-types/http2/ClientHttp2SessionRef.d.ts

@@ -34,6 +34,10 @@ export declare class ClientHttp2SessionRef {
      * Access the session (don't call ref/unref on it).
      */
     deref(): ClientHttp2Session;
+    /**
+     * Allow open refs to free on their own.
+     */
+    close(): void;
     destroy(): void;
     /**
      * @returns the current number of active references (in-flight requests).

package/node_modules/@smithy/node-http-handler/dist-types/node-http2-connection-manager.d.ts

@@ -35,10 +35,8 @@ export declare class NodeHttp2ConnectionManager implements ConnectionManager<Cli
      * @returns a snapshot of the state of all connection pools and their sessions.
      */
     debug(): Record<string, any>;
-    /**
-     * Remove a session from the pools. Does not destroy it.
-     */
-    private removeFromPool;
+    private removeFromPoolAndClose;
+    private removeFromPoolAndCheckedDestroy;
     private getPool;
     private getUrlString;
 }

package/node_modules/@smithy/node-http-handler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/node-http-handler",
-  "version": "4.6.0",
+  "version": "4.6.1",
   "description": "Provides a way to make requests",
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es:cjs'",

package/node_modules/@smithy/service-error-classification/dist-cjs/index.js

@@ -51,6 +51,7 @@ const isThrottlingError = (error) => error.$metadata?.httpStatusCode === 429 ||
     error.$retryable?.throttling == true;
 const isTransientError = (error, depth = 0) => isRetryableByTrait(error) ||
     isClockSkewCorrectedError(error) ||
+    (error.name === "InvalidSignatureException" && error.message?.includes("Signature expired")) ||
     TRANSIENT_ERROR_CODES.includes(error.name) ||
     NODEJS_TIMEOUT_ERROR_CODES.includes(error?.code || "") ||
     NODEJS_NETWORK_ERROR_CODES.includes(error?.code || "") ||

package/node_modules/@smithy/service-error-classification/dist-es/index.js

@@ -21,6 +21,7 @@ export const isThrottlingError = (error) => error.$metadata?.httpStatusCode ===
     error.$retryable?.throttling == true;
 export const isTransientError = (error, depth = 0) => isRetryableByTrait(error) ||
     isClockSkewCorrectedError(error) ||
+    (error.name === "InvalidSignatureException" && error.message?.includes("Signature expired")) ||
     TRANSIENT_ERROR_CODES.includes(error.name) ||
     NODEJS_TIMEOUT_ERROR_CODES.includes(error?.code || "") ||
     NODEJS_NETWORK_ERROR_CODES.includes(error?.code || "") ||

package/node_modules/@smithy/service-error-classification/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/service-error-classification",
-  "version": "4.3.0",
+  "version": "4.3.1",
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es:cjs'",
     "build:es:cjs": "yarn g:tsc -p tsconfig.es.json && node ../../scripts/inline service-error-classification",