@node-llm/core 1.7.0 → 1.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (81) hide show
  1. package/README.md +9 -8
  2. package/dist/aliases.d.ts +213 -0
  3. package/dist/aliases.d.ts.map +1 -1
  4. package/dist/aliases.js +238 -25
  5. package/dist/chat/Chat.d.ts +2 -2
  6. package/dist/chat/Chat.d.ts.map +1 -1
  7. package/dist/chat/Chat.js +21 -5
  8. package/dist/chat/ChatResponse.d.ts +5 -1
  9. package/dist/chat/ChatResponse.d.ts.map +1 -1
  10. package/dist/chat/ChatResponse.js +9 -3
  11. package/dist/chat/Content.d.ts +7 -0
  12. package/dist/chat/Content.d.ts.map +1 -1
  13. package/dist/config.d.ts +28 -0
  14. package/dist/config.d.ts.map +1 -1
  15. package/dist/config.js +50 -0
  16. package/dist/llm.d.ts.map +1 -1
  17. package/dist/llm.js +3 -2
  18. package/dist/models/models.d.ts +321 -76
  19. package/dist/models/models.d.ts.map +1 -1
  20. package/dist/models/models.js +7764 -2934
  21. package/dist/providers/Provider.d.ts +5 -0
  22. package/dist/providers/Provider.d.ts.map +1 -1
  23. package/dist/providers/anthropic/Capabilities.d.ts +1 -0
  24. package/dist/providers/anthropic/Capabilities.d.ts.map +1 -1
  25. package/dist/providers/anthropic/Capabilities.js +8 -5
  26. package/dist/providers/bedrock/BedrockProvider.d.ts +53 -0
  27. package/dist/providers/bedrock/BedrockProvider.d.ts.map +1 -0
  28. package/dist/providers/bedrock/BedrockProvider.js +107 -0
  29. package/dist/providers/bedrock/Capabilities.d.ts +50 -0
  30. package/dist/providers/bedrock/Capabilities.d.ts.map +1 -0
  31. package/dist/providers/bedrock/Capabilities.js +233 -0
  32. package/dist/providers/bedrock/Chat.d.ts +26 -0
  33. package/dist/providers/bedrock/Chat.d.ts.map +1 -0
  34. package/dist/providers/bedrock/Chat.js +170 -0
  35. package/dist/providers/bedrock/Embeddings.d.ts +22 -0
  36. package/dist/providers/bedrock/Embeddings.d.ts.map +1 -0
  37. package/dist/providers/bedrock/Embeddings.js +100 -0
  38. package/dist/providers/bedrock/Image.d.ts +33 -0
  39. package/dist/providers/bedrock/Image.d.ts.map +1 -0
  40. package/dist/providers/bedrock/Image.js +154 -0
  41. package/dist/providers/bedrock/Models.d.ts +34 -0
  42. package/dist/providers/bedrock/Models.d.ts.map +1 -0
  43. package/dist/providers/bedrock/Models.js +131 -0
  44. package/dist/providers/bedrock/Moderation.d.ts +23 -0
  45. package/dist/providers/bedrock/Moderation.d.ts.map +1 -0
  46. package/dist/providers/bedrock/Moderation.js +138 -0
  47. package/dist/providers/bedrock/Streaming.d.ts +21 -0
  48. package/dist/providers/bedrock/Streaming.d.ts.map +1 -0
  49. package/dist/providers/bedrock/Streaming.js +240 -0
  50. package/dist/providers/bedrock/config.d.ts +57 -0
  51. package/dist/providers/bedrock/config.d.ts.map +1 -0
  52. package/dist/providers/bedrock/config.js +33 -0
  53. package/dist/providers/bedrock/index.d.ts +8 -0
  54. package/dist/providers/bedrock/index.d.ts.map +1 -0
  55. package/dist/providers/bedrock/index.js +30 -0
  56. package/dist/providers/bedrock/mapper.d.ts +37 -0
  57. package/dist/providers/bedrock/mapper.d.ts.map +1 -0
  58. package/dist/providers/bedrock/mapper.js +204 -0
  59. package/dist/providers/bedrock/types.d.ts +179 -0
  60. package/dist/providers/bedrock/types.d.ts.map +1 -0
  61. package/dist/providers/bedrock/types.js +7 -0
  62. package/dist/providers/deepseek/Capabilities.d.ts +3 -2
  63. package/dist/providers/deepseek/Capabilities.d.ts.map +1 -1
  64. package/dist/providers/deepseek/Capabilities.js +19 -5
  65. package/dist/providers/gemini/Capabilities.d.ts +1 -0
  66. package/dist/providers/gemini/Capabilities.d.ts.map +1 -1
  67. package/dist/providers/gemini/Capabilities.js +9 -6
  68. package/dist/providers/gemini/Chat.d.ts.map +1 -1
  69. package/dist/providers/gemini/Chat.js +6 -23
  70. package/dist/providers/ollama/Capabilities.d.ts.map +1 -1
  71. package/dist/providers/ollama/Capabilities.js +4 -1
  72. package/dist/providers/openai/Capabilities.d.ts +1 -0
  73. package/dist/providers/openai/Capabilities.d.ts.map +1 -1
  74. package/dist/providers/openai/Capabilities.js +14 -11
  75. package/dist/providers/registry.d.ts +2 -1
  76. package/dist/providers/registry.d.ts.map +1 -1
  77. package/dist/providers/registry.js +2 -1
  78. package/dist/utils/AwsSigV4.d.ts +51 -0
  79. package/dist/utils/AwsSigV4.d.ts.map +1 -0
  80. package/dist/utils/AwsSigV4.js +209 -0
  81. package/package.json +1 -1
@@ -24,19 +24,19 @@ export class Capabilities {
24
24
  return 4_096;
25
25
  }
26
26
  static supportsVision(modelId) {
27
- const model = ModelRegistry.find(modelId, "openai");
27
+ const model = this.findModel(modelId);
28
28
  if (model?.modalities?.input?.includes("image"))
29
29
  return true;
30
30
  return /gpt-4(?!-3)|o1/.test(modelId) && !/audio|realtime|voice/.test(modelId);
31
31
  }
32
32
  static supportsTools(modelId) {
33
- const model = ModelRegistry.find(modelId, "openai");
33
+ const model = this.findModel(modelId);
34
34
  if (model?.capabilities?.includes("function_calling") || model?.capabilities?.includes("tools"))
35
35
  return true;
36
36
  return !/embedding|moderation|dall-e|tts|whisper/.test(modelId);
37
37
  }
38
38
  static supportsStructuredOutput(modelId) {
39
- const model = ModelRegistry.find(modelId, "openai");
39
+ const model = this.findModel(modelId);
40
40
  if (model?.capabilities?.includes("structured_output"))
41
41
  return true;
42
42
  return /gpt-4|o1|o3/.test(modelId);
@@ -45,32 +45,32 @@ export class Capabilities {
45
45
  return this.supportsStructuredOutput(modelId);
46
46
  }
47
47
  static supportsEmbeddings(modelId) {
48
- const model = ModelRegistry.find(modelId, "openai");
48
+ const model = this.findModel(modelId);
49
49
  if (model?.modalities?.output?.includes("embeddings"))
50
50
  return true;
51
51
  return /embedding/.test(modelId);
52
52
  }
53
53
  static supportsImageGeneration(modelId) {
54
- const model = ModelRegistry.find(modelId, "openai");
54
+ const model = this.findModel(modelId);
55
55
  if (model?.capabilities?.includes("image_generation") ||
56
56
  model?.modalities?.output?.includes("image"))
57
57
  return true;
58
58
  return /dall-e|image/.test(modelId);
59
59
  }
60
60
  static supportsTranscription(modelId) {
61
- const model = ModelRegistry.find(modelId, "openai");
61
+ const model = this.findModel(modelId);
62
62
  if (model?.modalities?.input?.includes("audio"))
63
63
  return true;
64
64
  return /whisper|audio|transcribe/.test(modelId);
65
65
  }
66
66
  static supportsModeration(modelId) {
67
- const model = ModelRegistry.find(modelId, "openai");
67
+ const model = this.findModel(modelId);
68
68
  if (model?.modalities?.output?.includes("moderation"))
69
69
  return true;
70
70
  return /moderation/.test(modelId);
71
71
  }
72
72
  static supportsReasoning(modelId) {
73
- const model = ModelRegistry.find(modelId, "openai");
73
+ const model = this.findModel(modelId);
74
74
  if (model?.capabilities?.includes("reasoning"))
75
75
  return true;
76
76
  return /o\d|gpt-5/.test(modelId);
@@ -101,7 +101,7 @@ export class Capabilities {
101
101
  static getModalities(modelId) {
102
102
  const input = ["text"];
103
103
  const output = ["text"];
104
- const model = ModelRegistry.find(modelId, "openai");
104
+ const model = this.findModel(modelId);
105
105
  if (model?.modalities)
106
106
  return model.modalities;
107
107
  if (this.supportsVision(modelId))
@@ -118,7 +118,7 @@ export class Capabilities {
118
118
  }
119
119
  static getCapabilities(modelId) {
120
120
  const caps = ["streaming"];
121
- const model = ModelRegistry.find(modelId, "openai");
121
+ const model = this.findModel(modelId);
122
122
  if (model) {
123
123
  model.capabilities.forEach((c) => {
124
124
  if (!caps.includes(c))
@@ -148,7 +148,7 @@ export class Capabilities {
148
148
  return temperature;
149
149
  }
150
150
  static formatDisplayName(modelId) {
151
- const model = ModelRegistry.find(modelId, "openai");
151
+ const model = this.findModel(modelId);
152
152
  if (model?.name && model.name !== modelId)
153
153
  return model.name;
154
154
  return modelId.replace(/-/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
@@ -156,4 +156,7 @@ export class Capabilities {
156
156
  static getPricing(modelId) {
157
157
  return PricingRegistry.getPricing(modelId, "openai");
158
158
  }
159
+ static findModel(modelId) {
160
+ return ModelRegistry.find(modelId, "openai");
161
+ }
159
162
  }
@@ -5,6 +5,7 @@ import { registerGeminiProvider } from "./gemini/index.js";
5
5
  import { registerDeepSeekProvider } from "./deepseek/index.js";
6
6
  import { registerOllamaProvider } from "./ollama/index.js";
7
7
  import { registerOpenRouterProvider } from "./openrouter/index.js";
8
+ import { registerBedrockProvider } from "./bedrock/index.js";
8
9
  import { NodeLLMConfig } from "../config.js";
9
10
  type ProviderFactory = (config?: NodeLLMConfig) => Provider;
10
11
  declare class ProviderRegistry {
@@ -42,5 +43,5 @@ declare class ProviderRegistry {
42
43
  * ```
43
44
  */
44
45
  export declare const providerRegistry: ProviderRegistry;
45
- export { registerOpenAIProvider as ensureOpenAIRegistered, registerOpenAIProvider, registerAnthropicProvider, registerGeminiProvider, registerDeepSeekProvider, registerOllamaProvider, registerOpenRouterProvider };
46
+ export { registerOpenAIProvider as ensureOpenAIRegistered, registerOpenAIProvider, registerAnthropicProvider, registerGeminiProvider, registerDeepSeekProvider, registerOllamaProvider, registerOpenRouterProvider, registerBedrockProvider };
46
47
  //# sourceMappingURL=registry.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/providers/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,KAAK,eAAe,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,KAAK,QAAQ,CAAC;AAE5D,cAAM,gBAAgB;IACpB,OAAO,CAAC,SAAS,CAAsC;IAEvD;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI;IAQtD;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,QAAQ;IAUvD;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B;;OAEG;IACH,IAAI,IAAI,MAAM,EAAE;CAGjB;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,gBAAgB,kBAAyB,CAAC;AAGvD,OAAO,EACL,sBAAsB,IAAI,sBAAsB,EAChD,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,0BAA0B,EAC3B,CAAC"}
1
+ {"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/providers/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,KAAK,eAAe,GAAG,CAAC,MAAM,CAAC,EAAE,aAAa,KAAK,QAAQ,CAAC;AAE5D,cAAM,gBAAgB;IACpB,OAAO,CAAC,SAAS,CAAsC;IAEvD;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI;IAQtD;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,GAAG,QAAQ;IAUvD;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B;;OAEG;IACH,IAAI,IAAI,MAAM,EAAE;CAGjB;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,gBAAgB,kBAAyB,CAAC;AAGvD,OAAO,EACL,sBAAsB,IAAI,sBAAsB,EAChD,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACxB,CAAC"}
@@ -4,6 +4,7 @@ import { registerGeminiProvider } from "./gemini/index.js";
4
4
  import { registerDeepSeekProvider } from "./deepseek/index.js";
5
5
  import { registerOllamaProvider } from "./ollama/index.js";
6
6
  import { registerOpenRouterProvider } from "./openrouter/index.js";
7
+ import { registerBedrockProvider } from "./bedrock/index.js";
7
8
  class ProviderRegistry {
8
9
  providers = new Map();
9
10
  /**
@@ -55,4 +56,4 @@ class ProviderRegistry {
55
56
  */
56
57
  export const providerRegistry = new ProviderRegistry();
57
58
  // Exported registration functions (delegates to provider-specific index files)
58
- export { registerOpenAIProvider as ensureOpenAIRegistered, registerOpenAIProvider, registerAnthropicProvider, registerGeminiProvider, registerDeepSeekProvider, registerOllamaProvider, registerOpenRouterProvider };
59
+ export { registerOpenAIProvider as ensureOpenAIRegistered, registerOpenAIProvider, registerAnthropicProvider, registerGeminiProvider, registerDeepSeekProvider, registerOllamaProvider, registerOpenRouterProvider, registerBedrockProvider };
@@ -0,0 +1,51 @@
1
+ /**
2
+ * AWS Signature Version 4 (SigV4) Request Signing Utility
3
+ *
4
+ * This is a minimal, focused implementation for signing AWS API requests.
5
+ * It uses only Node.js native `crypto` module — no AWS SDK dependencies.
6
+ *
7
+ * Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/create-signed-request.html
8
+ */
9
+ export interface AwsCredentials {
10
+ accessKeyId: string;
11
+ secretAccessKey: string;
12
+ sessionToken?: string;
13
+ }
14
+ export interface SignRequestOptions {
15
+ method: "POST" | "GET";
16
+ url: string;
17
+ body: string;
18
+ credentials: AwsCredentials;
19
+ region: string;
20
+ service: string;
21
+ timestamp?: Date;
22
+ }
23
+ export interface SignedHeaders {
24
+ host: string;
25
+ "x-amz-date": string;
26
+ "x-amz-content-sha256": string;
27
+ authorization: string;
28
+ "x-amz-security-token"?: string;
29
+ }
30
+ /**
31
+ * Sign an AWS API request using SigV4.
32
+ *
33
+ * @param options - The request details and credentials
34
+ * @returns Headers to include in the HTTP request
35
+ *
36
+ * @example
37
+ * ```ts
38
+ * const headers = signRequest({
39
+ * method: "POST",
40
+ * url: "https://bedrock-runtime.us-east-1.amazonaws.com/model/.../converse",
41
+ * body: JSON.stringify({ messages: [...] }),
42
+ * credentials: { accessKeyId: "...", secretAccessKey: "..." },
43
+ * region: "us-east-1",
44
+ * service: "bedrock"
45
+ * });
46
+ *
47
+ * fetch(url, { headers: { ...headers, "Content-Type": "application/json" }, body });
48
+ * ```
49
+ */
50
+ export declare function signRequest(options: SignRequestOptions): SignedHeaders;
51
+ //# sourceMappingURL=AwsSigV4.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"AwsSigV4.d.ts","sourceRoot":"","sources":["../../src/utils/AwsSigV4.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,cAAc,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AA8KD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,aAAa,CAwEtE"}
@@ -0,0 +1,209 @@
1
+ /**
2
+ * AWS Signature Version 4 (SigV4) Request Signing Utility
3
+ *
4
+ * This is a minimal, focused implementation for signing AWS API requests.
5
+ * It uses only Node.js native `crypto` module — no AWS SDK dependencies.
6
+ *
7
+ * Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/create-signed-request.html
8
+ */
9
+ import { createHmac, createHash } from "node:crypto";
10
+ // ─────────────────────────────────────────────────────────────────────────────
11
+ // Constants
12
+ // ─────────────────────────────────────────────────────────────────────────────
13
+ const ALGORITHM = "AWS4-HMAC-SHA256";
14
+ const AWS4_REQUEST = "aws4_request";
15
+ // ─────────────────────────────────────────────────────────────────────────────
16
+ // Helper Functions
17
+ // ─────────────────────────────────────────────────────────────────────────────
18
+ /**
19
+ * SHA256 hash of a string, returned as hex.
20
+ */
21
+ function sha256Hex(data) {
22
+ return createHash("sha256").update(data, "utf8").digest("hex");
23
+ }
24
+ /**
25
+ * HMAC-SHA256, returns raw bytes (Buffer).
26
+ */
27
+ function hmacSha256(key, data) {
28
+ return createHmac("sha256", key).update(data, "utf8").digest();
29
+ }
30
+ /**
31
+ * HMAC-SHA256, returns hex string.
32
+ */
33
+ function hmacSha256Hex(key, data) {
34
+ return createHmac("sha256", key).update(data, "utf8").digest("hex");
35
+ }
36
+ /**
37
+ * Format a Date as AWS timestamp: YYYYMMDD'T'HHMMSS'Z'
38
+ */
39
+ function formatAmzDate(date) {
40
+ return date.toISOString().replace(/[:-]|\.\d{3}/g, "");
41
+ }
42
+ /**
43
+ * Extract just the date portion: YYYYMMDD
44
+ */
45
+ function formatDateOnly(amzDate) {
46
+ return amzDate.substring(0, 8);
47
+ }
48
+ /**
49
+ * Parse host from URL.
50
+ */
51
+ function extractHost(url) {
52
+ const parsed = new URL(url);
53
+ return parsed.host;
54
+ }
55
+ /**
56
+ * Parse path from URL (without query string).
57
+ */
58
+ function extractPath(url) {
59
+ const parsed = new URL(url);
60
+ const path = parsed.pathname || "/";
61
+ return path
62
+ .split("/")
63
+ .map((segment) => encodeURIComponent(segment))
64
+ .join("/")
65
+ .replace(/%20/g, "%20") // encodeURIComponent already does %20
66
+ .replace(/'/g, "%27") // AWS expects single quotes encoded
67
+ .replace(/\(/g, "%28")
68
+ .replace(/\)/g, "%29")
69
+ .replace(/\*/g, "%2A");
70
+ }
71
+ // ─────────────────────────────────────────────────────────────────────────────
72
+ // Core Signing Logic
73
+ // ─────────────────────────────────────────────────────────────────────────────
74
+ /**
75
+ * Step 4: Derive the signing key.
76
+ *
77
+ * kSecret = "AWS4" + secretAccessKey
78
+ * kDate = HMAC-SHA256(kSecret, dateStamp)
79
+ * kRegion = HMAC-SHA256(kDate, region)
80
+ * kService = HMAC-SHA256(kRegion, service)
81
+ * kSigning = HMAC-SHA256(kService, "aws4_request")
82
+ */
83
+ function deriveSigningKey(secretAccessKey, dateStamp, region, service) {
84
+ const kSecret = "AWS4" + secretAccessKey;
85
+ const kDate = hmacSha256(kSecret, dateStamp);
86
+ const kRegion = hmacSha256(kDate, region);
87
+ const kService = hmacSha256(kRegion, service);
88
+ const kSigning = hmacSha256(kService, AWS4_REQUEST);
89
+ return kSigning;
90
+ }
91
+ /**
92
+ * Step 2: Build the canonical request string.
93
+ *
94
+ * Format:
95
+ * HTTPMethod
96
+ * CanonicalURI
97
+ * CanonicalQueryString (empty for us)
98
+ * CanonicalHeaders
99
+ * (blank line)
100
+ * SignedHeaders
101
+ * HashedPayload
102
+ */
103
+ function buildCanonicalRequest(method, path, headers, signedHeadersList, payloadHash) {
104
+ // Sort headers alphabetically
105
+ const sortedHeaders = signedHeadersList.sort();
106
+ // Build canonical headers: each line is "lowercase-key:trimmed-value\n"
107
+ const canonicalHeaders = sortedHeaders
108
+ .map((key) => `${key}:${(headers[key] ?? "").trim()}`)
109
+ .join("\n");
110
+ // Signed headers: semicolon-separated list
111
+ const signedHeaders = sortedHeaders.join(";");
112
+ return [
113
+ method,
114
+ path,
115
+ "", // Query string (empty)
116
+ canonicalHeaders + "\n", // Must end with newline
117
+ signedHeaders,
118
+ payloadHash
119
+ ].join("\n");
120
+ }
121
+ /**
122
+ * Step 3: Build the string to sign.
123
+ *
124
+ * Format:
125
+ * Algorithm
126
+ * RequestDateTime
127
+ * CredentialScope
128
+ * HashedCanonicalRequest
129
+ */
130
+ function buildStringToSign(amzDate, credentialScope, canonicalRequest) {
131
+ const hashedCanonicalRequest = sha256Hex(canonicalRequest);
132
+ return [ALGORITHM, amzDate, credentialScope, hashedCanonicalRequest].join("\n");
133
+ }
134
+ /**
135
+ * Step 6: Build the Authorization header value.
136
+ */
137
+ function buildAuthorizationHeader(accessKeyId, credentialScope, signedHeaders, signature) {
138
+ return `${ALGORITHM} Credential=${accessKeyId}/${credentialScope}, SignedHeaders=${signedHeaders}, Signature=${signature}`;
139
+ }
140
+ // ─────────────────────────────────────────────────────────────────────────────
141
+ // Public API
142
+ // ─────────────────────────────────────────────────────────────────────────────
143
+ /**
144
+ * Sign an AWS API request using SigV4.
145
+ *
146
+ * @param options - The request details and credentials
147
+ * @returns Headers to include in the HTTP request
148
+ *
149
+ * @example
150
+ * ```ts
151
+ * const headers = signRequest({
152
+ * method: "POST",
153
+ * url: "https://bedrock-runtime.us-east-1.amazonaws.com/model/.../converse",
154
+ * body: JSON.stringify({ messages: [...] }),
155
+ * credentials: { accessKeyId: "...", secretAccessKey: "..." },
156
+ * region: "us-east-1",
157
+ * service: "bedrock"
158
+ * });
159
+ *
160
+ * fetch(url, { headers: { ...headers, "Content-Type": "application/json" }, body });
161
+ * ```
162
+ */
163
+ export function signRequest(options) {
164
+ const { method, url, body, credentials, region, service, timestamp } = options;
165
+ // Timestamps (use provided timestamp for testing, or current time)
166
+ const now = timestamp ?? new Date();
167
+ const amzDate = formatAmzDate(now);
168
+ const dateStamp = formatDateOnly(amzDate);
169
+ // Step 1: Hash the payload
170
+ const payloadHash = sha256Hex(body);
171
+ // Extract URL components
172
+ const host = extractHost(url);
173
+ const path = extractPath(url);
174
+ // Build headers to sign (sorted alphabetically)
175
+ const headersToSign = {
176
+ host: host,
177
+ "x-amz-content-sha256": payloadHash,
178
+ "x-amz-date": amzDate
179
+ };
180
+ // Add session token if present
181
+ if (credentials.sessionToken) {
182
+ headersToSign["x-amz-security-token"] = credentials.sessionToken;
183
+ }
184
+ const signedHeadersList = Object.keys(headersToSign);
185
+ // Step 2: Canonical Request
186
+ const canonicalRequest = buildCanonicalRequest(method, path, headersToSign, signedHeadersList, payloadHash);
187
+ // Credential scope: date/region/service/aws4_request
188
+ const credentialScope = `${dateStamp}/${region}/${service}/${AWS4_REQUEST}`;
189
+ // Step 3: String to Sign
190
+ const stringToSign = buildStringToSign(amzDate, credentialScope, canonicalRequest);
191
+ // Step 4: Signing Key
192
+ const signingKey = deriveSigningKey(credentials.secretAccessKey, dateStamp, region, service);
193
+ // Step 5: Signature
194
+ const signature = hmacSha256Hex(signingKey, stringToSign);
195
+ // Step 6: Authorization Header
196
+ const signedHeaders = signedHeadersList.sort().join(";");
197
+ const authorization = buildAuthorizationHeader(credentials.accessKeyId, credentialScope, signedHeaders, signature);
198
+ // Build final headers
199
+ const result = {
200
+ host: host,
201
+ "x-amz-date": amzDate,
202
+ "x-amz-content-sha256": payloadHash,
203
+ authorization: authorization
204
+ };
205
+ if (credentials.sessionToken) {
206
+ result["x-amz-security-token"] = credentials.sessionToken;
207
+ }
208
+ return result;
209
+ }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@node-llm/core",
3
- "version": "1.7.0",
3
+ "version": "1.8.0",
4
4
  "type": "module",
5
5
  "main": "./dist/index.js",
6
6
  "types": "./dist/index.d.ts",