@node-llm/core 1.7.0 → 1.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -8
- package/dist/aliases.d.ts +213 -0
- package/dist/aliases.d.ts.map +1 -1
- package/dist/aliases.js +238 -25
- package/dist/chat/Chat.d.ts +2 -2
- package/dist/chat/Chat.d.ts.map +1 -1
- package/dist/chat/Chat.js +21 -5
- package/dist/chat/ChatResponse.d.ts +5 -1
- package/dist/chat/ChatResponse.d.ts.map +1 -1
- package/dist/chat/ChatResponse.js +9 -3
- package/dist/chat/Content.d.ts +7 -0
- package/dist/chat/Content.d.ts.map +1 -1
- package/dist/config.d.ts +28 -0
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +50 -0
- package/dist/llm.d.ts.map +1 -1
- package/dist/llm.js +3 -2
- package/dist/models/models.d.ts +321 -76
- package/dist/models/models.d.ts.map +1 -1
- package/dist/models/models.js +7764 -2934
- package/dist/providers/Provider.d.ts +5 -0
- package/dist/providers/Provider.d.ts.map +1 -1
- package/dist/providers/anthropic/Capabilities.d.ts +1 -0
- package/dist/providers/anthropic/Capabilities.d.ts.map +1 -1
- package/dist/providers/anthropic/Capabilities.js +8 -5
- package/dist/providers/bedrock/BedrockProvider.d.ts +53 -0
- package/dist/providers/bedrock/BedrockProvider.d.ts.map +1 -0
- package/dist/providers/bedrock/BedrockProvider.js +107 -0
- package/dist/providers/bedrock/Capabilities.d.ts +50 -0
- package/dist/providers/bedrock/Capabilities.d.ts.map +1 -0
- package/dist/providers/bedrock/Capabilities.js +233 -0
- package/dist/providers/bedrock/Chat.d.ts +26 -0
- package/dist/providers/bedrock/Chat.d.ts.map +1 -0
- package/dist/providers/bedrock/Chat.js +170 -0
- package/dist/providers/bedrock/Embeddings.d.ts +22 -0
- package/dist/providers/bedrock/Embeddings.d.ts.map +1 -0
- package/dist/providers/bedrock/Embeddings.js +100 -0
- package/dist/providers/bedrock/Image.d.ts +33 -0
- package/dist/providers/bedrock/Image.d.ts.map +1 -0
- package/dist/providers/bedrock/Image.js +154 -0
- package/dist/providers/bedrock/Models.d.ts +34 -0
- package/dist/providers/bedrock/Models.d.ts.map +1 -0
- package/dist/providers/bedrock/Models.js +131 -0
- package/dist/providers/bedrock/Moderation.d.ts +23 -0
- package/dist/providers/bedrock/Moderation.d.ts.map +1 -0
- package/dist/providers/bedrock/Moderation.js +138 -0
- package/dist/providers/bedrock/Streaming.d.ts +21 -0
- package/dist/providers/bedrock/Streaming.d.ts.map +1 -0
- package/dist/providers/bedrock/Streaming.js +240 -0
- package/dist/providers/bedrock/config.d.ts +57 -0
- package/dist/providers/bedrock/config.d.ts.map +1 -0
- package/dist/providers/bedrock/config.js +33 -0
- package/dist/providers/bedrock/index.d.ts +8 -0
- package/dist/providers/bedrock/index.d.ts.map +1 -0
- package/dist/providers/bedrock/index.js +30 -0
- package/dist/providers/bedrock/mapper.d.ts +37 -0
- package/dist/providers/bedrock/mapper.d.ts.map +1 -0
- package/dist/providers/bedrock/mapper.js +204 -0
- package/dist/providers/bedrock/types.d.ts +179 -0
- package/dist/providers/bedrock/types.d.ts.map +1 -0
- package/dist/providers/bedrock/types.js +7 -0
- package/dist/providers/deepseek/Capabilities.d.ts +3 -2
- package/dist/providers/deepseek/Capabilities.d.ts.map +1 -1
- package/dist/providers/deepseek/Capabilities.js +19 -5
- package/dist/providers/gemini/Capabilities.d.ts +1 -0
- package/dist/providers/gemini/Capabilities.d.ts.map +1 -1
- package/dist/providers/gemini/Capabilities.js +9 -6
- package/dist/providers/gemini/Chat.d.ts.map +1 -1
- package/dist/providers/gemini/Chat.js +6 -23
- package/dist/providers/ollama/Capabilities.d.ts.map +1 -1
- package/dist/providers/ollama/Capabilities.js +4 -1
- package/dist/providers/openai/Capabilities.d.ts +1 -0
- package/dist/providers/openai/Capabilities.d.ts.map +1 -1
- package/dist/providers/openai/Capabilities.js +14 -11
- package/dist/providers/registry.d.ts +2 -1
- package/dist/providers/registry.d.ts.map +1 -1
- package/dist/providers/registry.js +2 -1
- package/dist/utils/AwsSigV4.d.ts +51 -0
- package/dist/utils/AwsSigV4.d.ts.map +1 -0
- package/dist/utils/AwsSigV4.js +209 -0
- package/package.json +1 -1
|
@@ -24,19 +24,19 @@ export class Capabilities {
|
|
|
24
24
|
return 4_096;
|
|
25
25
|
}
|
|
26
26
|
static supportsVision(modelId) {
|
|
27
|
-
const model =
|
|
27
|
+
const model = this.findModel(modelId);
|
|
28
28
|
if (model?.modalities?.input?.includes("image"))
|
|
29
29
|
return true;
|
|
30
30
|
return /gpt-4(?!-3)|o1/.test(modelId) && !/audio|realtime|voice/.test(modelId);
|
|
31
31
|
}
|
|
32
32
|
static supportsTools(modelId) {
|
|
33
|
-
const model =
|
|
33
|
+
const model = this.findModel(modelId);
|
|
34
34
|
if (model?.capabilities?.includes("function_calling") || model?.capabilities?.includes("tools"))
|
|
35
35
|
return true;
|
|
36
36
|
return !/embedding|moderation|dall-e|tts|whisper/.test(modelId);
|
|
37
37
|
}
|
|
38
38
|
static supportsStructuredOutput(modelId) {
|
|
39
|
-
const model =
|
|
39
|
+
const model = this.findModel(modelId);
|
|
40
40
|
if (model?.capabilities?.includes("structured_output"))
|
|
41
41
|
return true;
|
|
42
42
|
return /gpt-4|o1|o3/.test(modelId);
|
|
@@ -45,32 +45,32 @@ export class Capabilities {
|
|
|
45
45
|
return this.supportsStructuredOutput(modelId);
|
|
46
46
|
}
|
|
47
47
|
static supportsEmbeddings(modelId) {
|
|
48
|
-
const model =
|
|
48
|
+
const model = this.findModel(modelId);
|
|
49
49
|
if (model?.modalities?.output?.includes("embeddings"))
|
|
50
50
|
return true;
|
|
51
51
|
return /embedding/.test(modelId);
|
|
52
52
|
}
|
|
53
53
|
static supportsImageGeneration(modelId) {
|
|
54
|
-
const model =
|
|
54
|
+
const model = this.findModel(modelId);
|
|
55
55
|
if (model?.capabilities?.includes("image_generation") ||
|
|
56
56
|
model?.modalities?.output?.includes("image"))
|
|
57
57
|
return true;
|
|
58
58
|
return /dall-e|image/.test(modelId);
|
|
59
59
|
}
|
|
60
60
|
static supportsTranscription(modelId) {
|
|
61
|
-
const model =
|
|
61
|
+
const model = this.findModel(modelId);
|
|
62
62
|
if (model?.modalities?.input?.includes("audio"))
|
|
63
63
|
return true;
|
|
64
64
|
return /whisper|audio|transcribe/.test(modelId);
|
|
65
65
|
}
|
|
66
66
|
static supportsModeration(modelId) {
|
|
67
|
-
const model =
|
|
67
|
+
const model = this.findModel(modelId);
|
|
68
68
|
if (model?.modalities?.output?.includes("moderation"))
|
|
69
69
|
return true;
|
|
70
70
|
return /moderation/.test(modelId);
|
|
71
71
|
}
|
|
72
72
|
static supportsReasoning(modelId) {
|
|
73
|
-
const model =
|
|
73
|
+
const model = this.findModel(modelId);
|
|
74
74
|
if (model?.capabilities?.includes("reasoning"))
|
|
75
75
|
return true;
|
|
76
76
|
return /o\d|gpt-5/.test(modelId);
|
|
@@ -101,7 +101,7 @@ export class Capabilities {
|
|
|
101
101
|
static getModalities(modelId) {
|
|
102
102
|
const input = ["text"];
|
|
103
103
|
const output = ["text"];
|
|
104
|
-
const model =
|
|
104
|
+
const model = this.findModel(modelId);
|
|
105
105
|
if (model?.modalities)
|
|
106
106
|
return model.modalities;
|
|
107
107
|
if (this.supportsVision(modelId))
|
|
@@ -118,7 +118,7 @@ export class Capabilities {
|
|
|
118
118
|
}
|
|
119
119
|
static getCapabilities(modelId) {
|
|
120
120
|
const caps = ["streaming"];
|
|
121
|
-
const model =
|
|
121
|
+
const model = this.findModel(modelId);
|
|
122
122
|
if (model) {
|
|
123
123
|
model.capabilities.forEach((c) => {
|
|
124
124
|
if (!caps.includes(c))
|
|
@@ -148,7 +148,7 @@ export class Capabilities {
|
|
|
148
148
|
return temperature;
|
|
149
149
|
}
|
|
150
150
|
static formatDisplayName(modelId) {
|
|
151
|
-
const model =
|
|
151
|
+
const model = this.findModel(modelId);
|
|
152
152
|
if (model?.name && model.name !== modelId)
|
|
153
153
|
return model.name;
|
|
154
154
|
return modelId.replace(/-/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
|
|
@@ -156,4 +156,7 @@ export class Capabilities {
|
|
|
156
156
|
static getPricing(modelId) {
|
|
157
157
|
return PricingRegistry.getPricing(modelId, "openai");
|
|
158
158
|
}
|
|
159
|
+
static findModel(modelId) {
|
|
160
|
+
return ModelRegistry.find(modelId, "openai");
|
|
161
|
+
}
|
|
159
162
|
}
|
|
@@ -5,6 +5,7 @@ import { registerGeminiProvider } from "./gemini/index.js";
|
|
|
5
5
|
import { registerDeepSeekProvider } from "./deepseek/index.js";
|
|
6
6
|
import { registerOllamaProvider } from "./ollama/index.js";
|
|
7
7
|
import { registerOpenRouterProvider } from "./openrouter/index.js";
|
|
8
|
+
import { registerBedrockProvider } from "./bedrock/index.js";
|
|
8
9
|
import { NodeLLMConfig } from "../config.js";
|
|
9
10
|
type ProviderFactory = (config?: NodeLLMConfig) => Provider;
|
|
10
11
|
declare class ProviderRegistry {
|
|
@@ -42,5 +43,5 @@ declare class ProviderRegistry {
|
|
|
42
43
|
* ```
|
|
43
44
|
*/
|
|
44
45
|
export declare const providerRegistry: ProviderRegistry;
|
|
45
|
-
export { registerOpenAIProvider as ensureOpenAIRegistered, registerOpenAIProvider, registerAnthropicProvider, registerGeminiProvider, registerDeepSeekProvider, registerOllamaProvider, registerOpenRouterProvider };
|
|
46
|
+
export { registerOpenAIProvider as ensureOpenAIRegistered, registerOpenAIProvider, registerAnthropicProvider, registerGeminiProvider, registerDeepSeekProvider, registerOllamaProvider, registerOpenRouterProvider, registerBedrockProvider };
|
|
46
47
|
//# sourceMappingURL=registry.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/providers/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;
|
|
1
|
+
{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/providers/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,KAAK,eAAe,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,KAAK,QAAQ,CAAC;AAE5D,cAAM,gBAAgB;IACpB,OAAO,CAAC,SAAS,CAAsC;IAEvD;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI;IAQtD;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,QAAQ;IAUvD;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B;;OAEG;IACH,IAAI,IAAI,MAAM,EAAE;CAGjB;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,gBAAgB,kBAAyB,CAAC;AAGvD,OAAO,EACL,sBAAsB,IAAI,sBAAsB,EAChD,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACxB,CAAC"}
|
|
@@ -4,6 +4,7 @@ import { registerGeminiProvider } from "./gemini/index.js";
|
|
|
4
4
|
import { registerDeepSeekProvider } from "./deepseek/index.js";
|
|
5
5
|
import { registerOllamaProvider } from "./ollama/index.js";
|
|
6
6
|
import { registerOpenRouterProvider } from "./openrouter/index.js";
|
|
7
|
+
import { registerBedrockProvider } from "./bedrock/index.js";
|
|
7
8
|
class ProviderRegistry {
|
|
8
9
|
providers = new Map();
|
|
9
10
|
/**
|
|
@@ -55,4 +56,4 @@ class ProviderRegistry {
|
|
|
55
56
|
*/
|
|
56
57
|
export const providerRegistry = new ProviderRegistry();
|
|
57
58
|
// Exported registration functions (delegates to provider-specific index files)
|
|
58
|
-
export { registerOpenAIProvider as ensureOpenAIRegistered, registerOpenAIProvider, registerAnthropicProvider, registerGeminiProvider, registerDeepSeekProvider, registerOllamaProvider, registerOpenRouterProvider };
|
|
59
|
+
export { registerOpenAIProvider as ensureOpenAIRegistered, registerOpenAIProvider, registerAnthropicProvider, registerGeminiProvider, registerDeepSeekProvider, registerOllamaProvider, registerOpenRouterProvider, registerBedrockProvider };
|
|
@@ -0,0 +1,51 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* AWS Signature Version 4 (SigV4) Request Signing Utility
|
|
3
|
+
*
|
|
4
|
+
* This is a minimal, focused implementation for signing AWS API requests.
|
|
5
|
+
* It uses only Node.js native `crypto` module — no AWS SDK dependencies.
|
|
6
|
+
*
|
|
7
|
+
* Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/create-signed-request.html
|
|
8
|
+
*/
|
|
9
|
+
export interface AwsCredentials {
|
|
10
|
+
accessKeyId: string;
|
|
11
|
+
secretAccessKey: string;
|
|
12
|
+
sessionToken?: string;
|
|
13
|
+
}
|
|
14
|
+
export interface SignRequestOptions {
|
|
15
|
+
method: "POST" | "GET";
|
|
16
|
+
url: string;
|
|
17
|
+
body: string;
|
|
18
|
+
credentials: AwsCredentials;
|
|
19
|
+
region: string;
|
|
20
|
+
service: string;
|
|
21
|
+
timestamp?: Date;
|
|
22
|
+
}
|
|
23
|
+
export interface SignedHeaders {
|
|
24
|
+
host: string;
|
|
25
|
+
"x-amz-date": string;
|
|
26
|
+
"x-amz-content-sha256": string;
|
|
27
|
+
authorization: string;
|
|
28
|
+
"x-amz-security-token"?: string;
|
|
29
|
+
}
|
|
30
|
+
/**
|
|
31
|
+
* Sign an AWS API request using SigV4.
|
|
32
|
+
*
|
|
33
|
+
* @param options - The request details and credentials
|
|
34
|
+
* @returns Headers to include in the HTTP request
|
|
35
|
+
*
|
|
36
|
+
* @example
|
|
37
|
+
* ```ts
|
|
38
|
+
* const headers = signRequest({
|
|
39
|
+
* method: "POST",
|
|
40
|
+
* url: "https://bedrock-runtime.us-east-1.amazonaws.com/model/.../converse",
|
|
41
|
+
* body: JSON.stringify({ messages: [...] }),
|
|
42
|
+
* credentials: { accessKeyId: "...", secretAccessKey: "..." },
|
|
43
|
+
* region: "us-east-1",
|
|
44
|
+
* service: "bedrock"
|
|
45
|
+
* });
|
|
46
|
+
*
|
|
47
|
+
* fetch(url, { headers: { ...headers, "Content-Type": "application/json" }, body });
|
|
48
|
+
* ```
|
|
49
|
+
*/
|
|
50
|
+
export declare function signRequest(options: SignRequestOptions): SignedHeaders;
|
|
51
|
+
//# sourceMappingURL=AwsSigV4.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"AwsSigV4.d.ts","sourceRoot":"","sources":["../../src/utils/AwsSigV4.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,cAAc,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AA8KD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,aAAa,CAwEtE"}
|
|
@@ -0,0 +1,209 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* AWS Signature Version 4 (SigV4) Request Signing Utility
|
|
3
|
+
*
|
|
4
|
+
* This is a minimal, focused implementation for signing AWS API requests.
|
|
5
|
+
* It uses only Node.js native `crypto` module — no AWS SDK dependencies.
|
|
6
|
+
*
|
|
7
|
+
* Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/create-signed-request.html
|
|
8
|
+
*/
|
|
9
|
+
import { createHmac, createHash } from "node:crypto";
|
|
10
|
+
// ─────────────────────────────────────────────────────────────────────────────
|
|
11
|
+
// Constants
|
|
12
|
+
// ─────────────────────────────────────────────────────────────────────────────
|
|
13
|
+
const ALGORITHM = "AWS4-HMAC-SHA256";
|
|
14
|
+
const AWS4_REQUEST = "aws4_request";
|
|
15
|
+
// ─────────────────────────────────────────────────────────────────────────────
|
|
16
|
+
// Helper Functions
|
|
17
|
+
// ─────────────────────────────────────────────────────────────────────────────
|
|
18
|
+
/**
|
|
19
|
+
* SHA256 hash of a string, returned as hex.
|
|
20
|
+
*/
|
|
21
|
+
function sha256Hex(data) {
|
|
22
|
+
return createHash("sha256").update(data, "utf8").digest("hex");
|
|
23
|
+
}
|
|
24
|
+
/**
|
|
25
|
+
* HMAC-SHA256, returns raw bytes (Buffer).
|
|
26
|
+
*/
|
|
27
|
+
function hmacSha256(key, data) {
|
|
28
|
+
return createHmac("sha256", key).update(data, "utf8").digest();
|
|
29
|
+
}
|
|
30
|
+
/**
|
|
31
|
+
* HMAC-SHA256, returns hex string.
|
|
32
|
+
*/
|
|
33
|
+
function hmacSha256Hex(key, data) {
|
|
34
|
+
return createHmac("sha256", key).update(data, "utf8").digest("hex");
|
|
35
|
+
}
|
|
36
|
+
/**
|
|
37
|
+
* Format a Date as AWS timestamp: YYYYMMDD'T'HHMMSS'Z'
|
|
38
|
+
*/
|
|
39
|
+
function formatAmzDate(date) {
|
|
40
|
+
return date.toISOString().replace(/[:-]|\.\d{3}/g, "");
|
|
41
|
+
}
|
|
42
|
+
/**
|
|
43
|
+
* Extract just the date portion: YYYYMMDD
|
|
44
|
+
*/
|
|
45
|
+
function formatDateOnly(amzDate) {
|
|
46
|
+
return amzDate.substring(0, 8);
|
|
47
|
+
}
|
|
48
|
+
/**
|
|
49
|
+
* Parse host from URL.
|
|
50
|
+
*/
|
|
51
|
+
function extractHost(url) {
|
|
52
|
+
const parsed = new URL(url);
|
|
53
|
+
return parsed.host;
|
|
54
|
+
}
|
|
55
|
+
/**
|
|
56
|
+
* Parse path from URL (without query string).
|
|
57
|
+
*/
|
|
58
|
+
function extractPath(url) {
|
|
59
|
+
const parsed = new URL(url);
|
|
60
|
+
const path = parsed.pathname || "/";
|
|
61
|
+
return path
|
|
62
|
+
.split("/")
|
|
63
|
+
.map((segment) => encodeURIComponent(segment))
|
|
64
|
+
.join("/")
|
|
65
|
+
.replace(/%20/g, "%20") // encodeURIComponent already does %20
|
|
66
|
+
.replace(/'/g, "%27") // AWS expects single quotes encoded
|
|
67
|
+
.replace(/\(/g, "%28")
|
|
68
|
+
.replace(/\)/g, "%29")
|
|
69
|
+
.replace(/\*/g, "%2A");
|
|
70
|
+
}
|
|
71
|
+
// ─────────────────────────────────────────────────────────────────────────────
|
|
72
|
+
// Core Signing Logic
|
|
73
|
+
// ─────────────────────────────────────────────────────────────────────────────
|
|
74
|
+
/**
|
|
75
|
+
* Step 4: Derive the signing key.
|
|
76
|
+
*
|
|
77
|
+
* kSecret = "AWS4" + secretAccessKey
|
|
78
|
+
* kDate = HMAC-SHA256(kSecret, dateStamp)
|
|
79
|
+
* kRegion = HMAC-SHA256(kDate, region)
|
|
80
|
+
* kService = HMAC-SHA256(kRegion, service)
|
|
81
|
+
* kSigning = HMAC-SHA256(kService, "aws4_request")
|
|
82
|
+
*/
|
|
83
|
+
function deriveSigningKey(secretAccessKey, dateStamp, region, service) {
|
|
84
|
+
const kSecret = "AWS4" + secretAccessKey;
|
|
85
|
+
const kDate = hmacSha256(kSecret, dateStamp);
|
|
86
|
+
const kRegion = hmacSha256(kDate, region);
|
|
87
|
+
const kService = hmacSha256(kRegion, service);
|
|
88
|
+
const kSigning = hmacSha256(kService, AWS4_REQUEST);
|
|
89
|
+
return kSigning;
|
|
90
|
+
}
|
|
91
|
+
/**
|
|
92
|
+
* Step 2: Build the canonical request string.
|
|
93
|
+
*
|
|
94
|
+
* Format:
|
|
95
|
+
* HTTPMethod
|
|
96
|
+
* CanonicalURI
|
|
97
|
+
* CanonicalQueryString (empty for us)
|
|
98
|
+
* CanonicalHeaders
|
|
99
|
+
* (blank line)
|
|
100
|
+
* SignedHeaders
|
|
101
|
+
* HashedPayload
|
|
102
|
+
*/
|
|
103
|
+
function buildCanonicalRequest(method, path, headers, signedHeadersList, payloadHash) {
|
|
104
|
+
// Sort headers alphabetically
|
|
105
|
+
const sortedHeaders = signedHeadersList.sort();
|
|
106
|
+
// Build canonical headers: each line is "lowercase-key:trimmed-value\n"
|
|
107
|
+
const canonicalHeaders = sortedHeaders
|
|
108
|
+
.map((key) => `${key}:${(headers[key] ?? "").trim()}`)
|
|
109
|
+
.join("\n");
|
|
110
|
+
// Signed headers: semicolon-separated list
|
|
111
|
+
const signedHeaders = sortedHeaders.join(";");
|
|
112
|
+
return [
|
|
113
|
+
method,
|
|
114
|
+
path,
|
|
115
|
+
"", // Query string (empty)
|
|
116
|
+
canonicalHeaders + "\n", // Must end with newline
|
|
117
|
+
signedHeaders,
|
|
118
|
+
payloadHash
|
|
119
|
+
].join("\n");
|
|
120
|
+
}
|
|
121
|
+
/**
|
|
122
|
+
* Step 3: Build the string to sign.
|
|
123
|
+
*
|
|
124
|
+
* Format:
|
|
125
|
+
* Algorithm
|
|
126
|
+
* RequestDateTime
|
|
127
|
+
* CredentialScope
|
|
128
|
+
* HashedCanonicalRequest
|
|
129
|
+
*/
|
|
130
|
+
function buildStringToSign(amzDate, credentialScope, canonicalRequest) {
|
|
131
|
+
const hashedCanonicalRequest = sha256Hex(canonicalRequest);
|
|
132
|
+
return [ALGORITHM, amzDate, credentialScope, hashedCanonicalRequest].join("\n");
|
|
133
|
+
}
|
|
134
|
+
/**
|
|
135
|
+
* Step 6: Build the Authorization header value.
|
|
136
|
+
*/
|
|
137
|
+
function buildAuthorizationHeader(accessKeyId, credentialScope, signedHeaders, signature) {
|
|
138
|
+
return `${ALGORITHM} Credential=${accessKeyId}/${credentialScope}, SignedHeaders=${signedHeaders}, Signature=${signature}`;
|
|
139
|
+
}
|
|
140
|
+
// ─────────────────────────────────────────────────────────────────────────────
|
|
141
|
+
// Public API
|
|
142
|
+
// ─────────────────────────────────────────────────────────────────────────────
|
|
143
|
+
/**
|
|
144
|
+
* Sign an AWS API request using SigV4.
|
|
145
|
+
*
|
|
146
|
+
* @param options - The request details and credentials
|
|
147
|
+
* @returns Headers to include in the HTTP request
|
|
148
|
+
*
|
|
149
|
+
* @example
|
|
150
|
+
* ```ts
|
|
151
|
+
* const headers = signRequest({
|
|
152
|
+
* method: "POST",
|
|
153
|
+
* url: "https://bedrock-runtime.us-east-1.amazonaws.com/model/.../converse",
|
|
154
|
+
* body: JSON.stringify({ messages: [...] }),
|
|
155
|
+
* credentials: { accessKeyId: "...", secretAccessKey: "..." },
|
|
156
|
+
* region: "us-east-1",
|
|
157
|
+
* service: "bedrock"
|
|
158
|
+
* });
|
|
159
|
+
*
|
|
160
|
+
* fetch(url, { headers: { ...headers, "Content-Type": "application/json" }, body });
|
|
161
|
+
* ```
|
|
162
|
+
*/
|
|
163
|
+
export function signRequest(options) {
|
|
164
|
+
const { method, url, body, credentials, region, service, timestamp } = options;
|
|
165
|
+
// Timestamps (use provided timestamp for testing, or current time)
|
|
166
|
+
const now = timestamp ?? new Date();
|
|
167
|
+
const amzDate = formatAmzDate(now);
|
|
168
|
+
const dateStamp = formatDateOnly(amzDate);
|
|
169
|
+
// Step 1: Hash the payload
|
|
170
|
+
const payloadHash = sha256Hex(body);
|
|
171
|
+
// Extract URL components
|
|
172
|
+
const host = extractHost(url);
|
|
173
|
+
const path = extractPath(url);
|
|
174
|
+
// Build headers to sign (sorted alphabetically)
|
|
175
|
+
const headersToSign = {
|
|
176
|
+
host: host,
|
|
177
|
+
"x-amz-content-sha256": payloadHash,
|
|
178
|
+
"x-amz-date": amzDate
|
|
179
|
+
};
|
|
180
|
+
// Add session token if present
|
|
181
|
+
if (credentials.sessionToken) {
|
|
182
|
+
headersToSign["x-amz-security-token"] = credentials.sessionToken;
|
|
183
|
+
}
|
|
184
|
+
const signedHeadersList = Object.keys(headersToSign);
|
|
185
|
+
// Step 2: Canonical Request
|
|
186
|
+
const canonicalRequest = buildCanonicalRequest(method, path, headersToSign, signedHeadersList, payloadHash);
|
|
187
|
+
// Credential scope: date/region/service/aws4_request
|
|
188
|
+
const credentialScope = `${dateStamp}/${region}/${service}/${AWS4_REQUEST}`;
|
|
189
|
+
// Step 3: String to Sign
|
|
190
|
+
const stringToSign = buildStringToSign(amzDate, credentialScope, canonicalRequest);
|
|
191
|
+
// Step 4: Signing Key
|
|
192
|
+
const signingKey = deriveSigningKey(credentials.secretAccessKey, dateStamp, region, service);
|
|
193
|
+
// Step 5: Signature
|
|
194
|
+
const signature = hmacSha256Hex(signingKey, stringToSign);
|
|
195
|
+
// Step 6: Authorization Header
|
|
196
|
+
const signedHeaders = signedHeadersList.sort().join(";");
|
|
197
|
+
const authorization = buildAuthorizationHeader(credentials.accessKeyId, credentialScope, signedHeaders, signature);
|
|
198
|
+
// Build final headers
|
|
199
|
+
const result = {
|
|
200
|
+
host: host,
|
|
201
|
+
"x-amz-date": amzDate,
|
|
202
|
+
"x-amz-content-sha256": payloadHash,
|
|
203
|
+
authorization: authorization
|
|
204
|
+
};
|
|
205
|
+
if (credentials.sessionToken) {
|
|
206
|
+
result["x-amz-security-token"] = credentials.sessionToken;
|
|
207
|
+
}
|
|
208
|
+
return result;
|
|
209
|
+
}
|