@openclaw/amazon-bedrock-provider 2026.7.2-beta.4 → 2026.7.2-beta.7

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-es/SignatureV4.js

@@ -0,0 +1,140 @@
+import { toHex, toUint8Array } from "@smithy/core/serde";
+import { HeaderFormatter } from "./HeaderFormatter";
+import { SignatureV4Base } from "./SignatureV4Base";
+import { ALGORITHM_IDENTIFIER, ALGORITHM_QUERY_PARAM, AMZ_DATE_HEADER, AMZ_DATE_QUERY_PARAM, AUTH_HEADER, CREDENTIAL_QUERY_PARAM, EVENT_ALGORITHM_IDENTIFIER, EXPIRES_QUERY_PARAM, MAX_PRESIGNED_TTL, SHA256_HEADER, SIGNATURE_QUERY_PARAM, SIGNED_HEADERS_QUERY_PARAM, TOKEN_HEADER, TOKEN_QUERY_PARAM, } from "./constants";
+import { createScope, getSigningKey } from "./credentialDerivation";
+import { getCanonicalHeaders } from "./getCanonicalHeaders";
+import { getPayloadHash } from "./getPayloadHash";
+import { hasHeader } from "./headerUtil";
+import { moveHeadersToQuery } from "./moveHeadersToQuery";
+import { prepareRequest } from "./prepareRequest";
+export class SignatureV4 extends SignatureV4Base {
+    headerFormatter = new HeaderFormatter();
+    constructor({ applyChecksum, credentials, region, service, sha256, uriEscapePath = true, }) {
+        super({
+            applyChecksum,
+            credentials,
+            region,
+            service,
+            sha256,
+            uriEscapePath,
+        });
+    }
+    async presign(originalRequest, options = {}) {
+        const { signingDate = new Date(), expiresIn = 3600, unsignableHeaders, unhoistableHeaders, signableHeaders, hoistableHeaders, signingRegion, signingService, } = options;
+        const credentials = await this.credentialProvider();
+        this.validateResolvedCredentials(credentials);
+        const region = signingRegion ?? (await this.regionProvider());
+        const { longDate, shortDate } = this.formatDate(signingDate);
+        if (expiresIn > MAX_PRESIGNED_TTL) {
+            return Promise.reject("Signature version 4 presigned URLs" + " must have an expiration date less than one week in" + " the future");
+        }
+        const scope = createScope(shortDate, region, signingService ?? this.service);
+        const request = moveHeadersToQuery(prepareRequest(originalRequest), { unhoistableHeaders, hoistableHeaders });
+        if (credentials.sessionToken) {
+            request.query[TOKEN_QUERY_PARAM] = credentials.sessionToken;
+        }
+        request.query[ALGORITHM_QUERY_PARAM] = ALGORITHM_IDENTIFIER;
+        request.query[CREDENTIAL_QUERY_PARAM] = `${credentials.accessKeyId}/${scope}`;
+        request.query[AMZ_DATE_QUERY_PARAM] = longDate;
+        request.query[EXPIRES_QUERY_PARAM] = expiresIn.toString(10);
+        const canonicalHeaders = getCanonicalHeaders(request, unsignableHeaders, signableHeaders);
+        request.query[SIGNED_HEADERS_QUERY_PARAM] = this.getCanonicalHeaderList(canonicalHeaders);
+        request.query[SIGNATURE_QUERY_PARAM] = await this.getSignature(longDate, scope, this.getSigningKey(credentials, region, shortDate, signingService), this.createCanonicalRequest(request, canonicalHeaders, await getPayloadHash(originalRequest, this.sha256)));
+        return request;
+    }
+    async sign(toSign, options) {
+        if (typeof toSign === "string") {
+            return this.signString(toSign, options);
+        }
+        else if (toSign.headers && toSign.payload) {
+            return this.signEvent(toSign, options);
+        }
+        else if (toSign.message) {
+            return this.signMessage(toSign, options);
+        }
+        else {
+            return this.signRequest(toSign, options);
+        }
+    }
+    async signEvent({ headers, payload }, { signingDate = new Date(), priorSignature, signingRegion, signingService, eventStreamCredentials, }) {
+        const region = signingRegion ?? (await this.regionProvider());
+        const { shortDate, longDate } = this.formatDate(signingDate);
+        const scope = createScope(shortDate, region, signingService ?? this.service);
+        const hashedPayload = await getPayloadHash({ headers: {}, body: payload }, this.sha256);
+        const hash = new this.sha256();
+        hash.update(headers);
+        const hashedHeaders = toHex(await hash.digest());
+        const stringToSign = [
+            EVENT_ALGORITHM_IDENTIFIER,
+            longDate,
+            scope,
+            priorSignature,
+            hashedHeaders,
+            hashedPayload,
+        ].join("\n");
+        return this.signString(stringToSign, {
+            signingDate,
+            signingRegion: region,
+            signingService,
+            eventStreamCredentials,
+        });
+    }
+    async signMessage(signableMessage, { signingDate = new Date(), signingRegion, signingService, eventStreamCredentials }) {
+        const promise = this.signEvent({
+            headers: this.headerFormatter.format(signableMessage.message.headers),
+            payload: signableMessage.message.body,
+        }, {
+            signingDate,
+            signingRegion,
+            signingService,
+            priorSignature: signableMessage.priorSignature,
+            eventStreamCredentials,
+        });
+        return promise.then((signature) => {
+            return { message: signableMessage.message, signature };
+        });
+    }
+    async signString(stringToSign, { signingDate = new Date(), signingRegion, signingService, eventStreamCredentials, } = {}) {
+        const credentials = eventStreamCredentials ?? (await this.credentialProvider());
+        this.validateResolvedCredentials(credentials);
+        const region = signingRegion ?? (await this.regionProvider());
+        const { shortDate } = this.formatDate(signingDate);
+        const hash = new this.sha256(await this.getSigningKey(credentials, region, shortDate, signingService));
+        hash.update(toUint8Array(stringToSign));
+        return toHex(await hash.digest());
+    }
+    async signRequest(requestToSign, { signingDate = new Date(), signableHeaders, unsignableHeaders, signingRegion, signingService, } = {}) {
+        const credentials = await this.credentialProvider();
+        this.validateResolvedCredentials(credentials);
+        const region = signingRegion ?? (await this.regionProvider());
+        const request = prepareRequest(requestToSign);
+        const { longDate, shortDate } = this.formatDate(signingDate);
+        const scope = createScope(shortDate, region, signingService ?? this.service);
+        request.headers[AMZ_DATE_HEADER] = longDate;
+        if (credentials.sessionToken) {
+            request.headers[TOKEN_HEADER] = credentials.sessionToken;
+        }
+        const payloadHash = await getPayloadHash(request, this.sha256);
+        if (!hasHeader(SHA256_HEADER, request.headers) && this.applyChecksum) {
+            request.headers[SHA256_HEADER] = payloadHash;
+        }
+        const canonicalHeaders = getCanonicalHeaders(request, unsignableHeaders, signableHeaders);
+        const signature = await this.getSignature(longDate, scope, this.getSigningKey(credentials, region, shortDate, signingService), this.createCanonicalRequest(request, canonicalHeaders, payloadHash));
+        request.headers[AUTH_HEADER] =
+            `${ALGORITHM_IDENTIFIER} ` +
+                `Credential=${credentials.accessKeyId}/${scope}, ` +
+                `SignedHeaders=${this.getCanonicalHeaderList(canonicalHeaders)}, ` +
+                `Signature=${signature}`;
+        return request;
+    }
+    async getSignature(longDate, credentialScope, keyPromise, canonicalRequest) {
+        const stringToSign = await this.createStringToSign(longDate, credentialScope, canonicalRequest, ALGORITHM_IDENTIFIER);
+        const hash = new this.sha256(await keyPromise);
+        hash.update(toUint8Array(stringToSign));
+        return toHex(await hash.digest());
+    }
+    getSigningKey(credentials, region, shortDate, service) {
+        return getSigningKey(this.sha256, credentials, shortDate, region, service || this.service);
+    }
+}

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-es/SignatureV4Base.js

@@ -0,0 +1,78 @@
+import { normalizeProvider } from "@smithy/core/client";
+import { escapeUri } from "@smithy/core/protocols";
+import { toHex, toUint8Array } from "@smithy/core/serde";
+import { getCanonicalQuery } from "./getCanonicalQuery";
+import { iso8601 } from "./utilDate";
+export class SignatureV4Base {
+    service;
+    regionProvider;
+    credentialProvider;
+    sha256;
+    uriEscapePath;
+    applyChecksum;
+    constructor({ applyChecksum, credentials, region, service, sha256, uriEscapePath = true, }) {
+        this.service = service;
+        this.sha256 = sha256;
+        this.uriEscapePath = uriEscapePath;
+        this.applyChecksum = typeof applyChecksum === "boolean" ? applyChecksum : true;
+        this.regionProvider = normalizeProvider(region);
+        this.credentialProvider = normalizeProvider(credentials);
+    }
+    createCanonicalRequest(request, canonicalHeaders, payloadHash) {
+        const sortedHeaders = Object.keys(canonicalHeaders).sort();
+        return `${request.method}
+${this.getCanonicalPath(request)}
+${getCanonicalQuery(request)}
+${sortedHeaders.map((name) => `${name}:${canonicalHeaders[name]}`).join("\n")}
+
+${sortedHeaders.join(";")}
+${payloadHash}`;
+    }
+    async createStringToSign(longDate, credentialScope, canonicalRequest, algorithmIdentifier) {
+        const hash = new this.sha256();
+        hash.update(toUint8Array(canonicalRequest));
+        const hashedRequest = await hash.digest();
+        return `${algorithmIdentifier}
+${longDate}
+${credentialScope}
+${toHex(hashedRequest)}`;
+    }
+    getCanonicalPath({ path }) {
+        if (this.uriEscapePath) {
+            const normalizedPathSegments = [];
+            for (const pathSegment of path.split("/")) {
+                if (pathSegment?.length === 0)
+                    continue;
+                if (pathSegment === ".")
+                    continue;
+                if (pathSegment === "..") {
+                    normalizedPathSegments.pop();
+                }
+                else {
+                    normalizedPathSegments.push(pathSegment);
+                }
+            }
+            const normalizedPath = `${path?.startsWith("/") ? "/" : ""}${normalizedPathSegments.join("/")}${normalizedPathSegments.length > 0 && path?.endsWith("/") ? "/" : ""}`;
+            const doubleEncoded = escapeUri(normalizedPath);
+            return doubleEncoded.replace(/%2F/g, "/");
+        }
+        return path;
+    }
+    validateResolvedCredentials(credentials) {
+        if (typeof credentials !== "object" ||
+            typeof credentials.accessKeyId !== "string" ||
+            typeof credentials.secretAccessKey !== "string") {
+            throw new Error("Resolved credential object is not valid");
+        }
+    }
+    formatDate(now) {
+        const longDate = iso8601(now).replace(/[-:]/g, "");
+        return {
+            longDate,
+            shortDate: longDate.slice(0, 8),
+        };
+    }
+    getCanonicalHeaderList(headers) {
+        return Object.keys(headers).sort().join(";");
+    }
+}

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-es/constants.js

@@ -0,0 +1,43 @@
+export const ALGORITHM_QUERY_PARAM = "X-Amz-Algorithm";
+export const CREDENTIAL_QUERY_PARAM = "X-Amz-Credential";
+export const AMZ_DATE_QUERY_PARAM = "X-Amz-Date";
+export const SIGNED_HEADERS_QUERY_PARAM = "X-Amz-SignedHeaders";
+export const EXPIRES_QUERY_PARAM = "X-Amz-Expires";
+export const SIGNATURE_QUERY_PARAM = "X-Amz-Signature";
+export const TOKEN_QUERY_PARAM = "X-Amz-Security-Token";
+export const REGION_SET_PARAM = "X-Amz-Region-Set";
+export const AUTH_HEADER = "authorization";
+export const AMZ_DATE_HEADER = AMZ_DATE_QUERY_PARAM.toLowerCase();
+export const DATE_HEADER = "date";
+export const GENERATED_HEADERS = [AUTH_HEADER, AMZ_DATE_HEADER, DATE_HEADER];
+export const SIGNATURE_HEADER = SIGNATURE_QUERY_PARAM.toLowerCase();
+export const SHA256_HEADER = "x-amz-content-sha256";
+export const TOKEN_HEADER = TOKEN_QUERY_PARAM.toLowerCase();
+export const HOST_HEADER = "host";
+export const ALWAYS_UNSIGNABLE_HEADERS = {
+    authorization: true,
+    "cache-control": true,
+    connection: true,
+    expect: true,
+    from: true,
+    "keep-alive": true,
+    "max-forwards": true,
+    pragma: true,
+    referer: true,
+    te: true,
+    trailer: true,
+    "transfer-encoding": true,
+    upgrade: true,
+    "user-agent": true,
+    "x-amzn-trace-id": true,
+};
+export const PROXY_HEADER_PATTERN = /^proxy-/;
+export const SEC_HEADER_PATTERN = /^sec-/;
+export const UNSIGNABLE_PATTERNS = [/^proxy-/i, /^sec-/i];
+export const ALGORITHM_IDENTIFIER = "AWS4-HMAC-SHA256";
+export const ALGORITHM_IDENTIFIER_V4A = "AWS4-ECDSA-P256-SHA256";
+export const EVENT_ALGORITHM_IDENTIFIER = "AWS4-HMAC-SHA256-PAYLOAD";
+export const UNSIGNED_PAYLOAD = "UNSIGNED-PAYLOAD";
+export const MAX_CACHE_SIZE = 50;
+export const KEY_TYPE_IDENTIFIER = "aws4_request";
+export const MAX_PRESIGNED_TTL = 60 * 60 * 24 * 7;

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-es/credentialDerivation.js

@@ -0,0 +1,32 @@
+import { toHex, toUint8Array } from "@smithy/core/serde";
+import { KEY_TYPE_IDENTIFIER, MAX_CACHE_SIZE } from "./constants";
+const signingKeyCache = {};
+const cacheQueue = [];
+export const createScope = (shortDate, region, service) => `${shortDate}/${region}/${service}/${KEY_TYPE_IDENTIFIER}`;
+export const getSigningKey = async (sha256Constructor, credentials, shortDate, region, service) => {
+    const credsHash = await hmac(sha256Constructor, credentials.secretAccessKey, credentials.accessKeyId);
+    const cacheKey = `${shortDate}:${region}:${service}:${toHex(credsHash)}:${credentials.sessionToken}`;
+    if (cacheKey in signingKeyCache) {
+        return signingKeyCache[cacheKey];
+    }
+    cacheQueue.push(cacheKey);
+    while (cacheQueue.length > MAX_CACHE_SIZE) {
+        delete signingKeyCache[cacheQueue.shift()];
+    }
+    let key = `AWS4${credentials.secretAccessKey}`;
+    for (const signable of [shortDate, region, service, KEY_TYPE_IDENTIFIER]) {
+        key = await hmac(sha256Constructor, key, signable);
+    }
+    return (signingKeyCache[cacheKey] = key);
+};
+export const clearCredentialCache = () => {
+    cacheQueue.length = 0;
+    Object.keys(signingKeyCache).forEach((cacheKey) => {
+        delete signingKeyCache[cacheKey];
+    });
+};
+const hmac = (ctor, secret, data) => {
+    const hash = new ctor(secret);
+    hash.update(toUint8Array(data));
+    return hash.digest();
+};

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-es/getCanonicalHeaders.js

@@ -0,0 +1,20 @@
+import { ALWAYS_UNSIGNABLE_HEADERS, PROXY_HEADER_PATTERN, SEC_HEADER_PATTERN } from "./constants";
+export const getCanonicalHeaders = ({ headers }, unsignableHeaders, signableHeaders) => {
+    const canonical = {};
+    for (const headerName of Object.keys(headers).sort()) {
+        if (headers[headerName] == undefined) {
+            continue;
+        }
+        const canonicalHeaderName = headerName.toLowerCase();
+        if (canonicalHeaderName in ALWAYS_UNSIGNABLE_HEADERS ||
+            unsignableHeaders?.has(canonicalHeaderName) ||
+            PROXY_HEADER_PATTERN.test(canonicalHeaderName) ||
+            SEC_HEADER_PATTERN.test(canonicalHeaderName)) {
+            if (!signableHeaders || (signableHeaders && !signableHeaders.has(canonicalHeaderName))) {
+                continue;
+            }
+        }
+        canonical[canonicalHeaderName] = headers[headerName].trim().replace(/\s+/g, " ");
+    }
+    return canonical;
+};

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-es/getCanonicalQuery.js

@@ -0,0 +1,29 @@
+import { escapeUri } from "@smithy/core/protocols";
+import { SIGNATURE_HEADER } from "./constants";
+export const getCanonicalQuery = ({ query = {} }) => {
+    const keys = [];
+    const serialized = {};
+    for (const key of Object.keys(query)) {
+        if (key.toLowerCase() === SIGNATURE_HEADER) {
+            continue;
+        }
+        const encodedKey = escapeUri(key);
+        keys.push(encodedKey);
+        const value = query[key];
+        if (typeof value === "string") {
+            serialized[encodedKey] = `${encodedKey}=${escapeUri(value)}`;
+        }
+        else if (Array.isArray(value)) {
+            serialized[encodedKey] = value
+                .slice(0)
+                .reduce((encoded, value) => encoded.concat([`${encodedKey}=${escapeUri(value)}`]), [])
+                .sort()
+                .join("&");
+        }
+    }
+    return keys
+        .sort()
+        .map((key) => serialized[key])
+        .filter((serialized) => serialized)
+        .join("&");
+};

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-es/getPayloadHash.js

@@ -0,0 +1,18 @@
+import { isArrayBuffer, toHex, toUint8Array } from "@smithy/core/serde";
+import { SHA256_HEADER, UNSIGNED_PAYLOAD } from "./constants";
+export const getPayloadHash = async ({ headers, body }, hashConstructor) => {
+    for (const headerName of Object.keys(headers)) {
+        if (headerName.toLowerCase() === SHA256_HEADER) {
+            return headers[headerName];
+        }
+    }
+    if (body == undefined) {
+        return "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855";
+    }
+    else if (typeof body === "string" || ArrayBuffer.isView(body) || isArrayBuffer(body)) {
+        const hashCtor = new hashConstructor();
+        hashCtor.update(toUint8Array(body));
+        return toHex(await hashCtor.digest());
+    }
+    return UNSIGNED_PAYLOAD;
+};

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-es/headerUtil.js

@@ -0,0 +1,26 @@
+export const hasHeader = (soughtHeader, headers) => {
+    soughtHeader = soughtHeader.toLowerCase();
+    for (const headerName of Object.keys(headers)) {
+        if (soughtHeader === headerName.toLowerCase()) {
+            return true;
+        }
+    }
+    return false;
+};
+export const getHeaderValue = (soughtHeader, headers) => {
+    soughtHeader = soughtHeader.toLowerCase();
+    for (const headerName of Object.keys(headers)) {
+        if (soughtHeader === headerName.toLowerCase()) {
+            return headers[headerName];
+        }
+    }
+    return undefined;
+};
+export const deleteHeader = (soughtHeader, headers) => {
+    soughtHeader = soughtHeader.toLowerCase();
+    for (const headerName of Object.keys(headers)) {
+        if (soughtHeader === headerName.toLowerCase()) {
+            delete headers[headerName];
+        }
+    }
+};

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-es/index.js

@@ -0,0 +1,11 @@
+export { SignatureV4 } from "./SignatureV4";
+export { ALGORITHM_IDENTIFIER, ALGORITHM_IDENTIFIER_V4A, ALGORITHM_QUERY_PARAM, ALWAYS_UNSIGNABLE_HEADERS, AMZ_DATE_HEADER, AMZ_DATE_QUERY_PARAM, AUTH_HEADER, CREDENTIAL_QUERY_PARAM, DATE_HEADER, EVENT_ALGORITHM_IDENTIFIER, EXPIRES_QUERY_PARAM, GENERATED_HEADERS, HOST_HEADER, KEY_TYPE_IDENTIFIER, MAX_CACHE_SIZE, MAX_PRESIGNED_TTL, PROXY_HEADER_PATTERN, REGION_SET_PARAM, SEC_HEADER_PATTERN, SHA256_HEADER, SIGNATURE_HEADER, SIGNATURE_QUERY_PARAM, SIGNED_HEADERS_QUERY_PARAM, TOKEN_HEADER, TOKEN_QUERY_PARAM, UNSIGNABLE_PATTERNS, UNSIGNED_PAYLOAD, } from "./constants";
+export { getCanonicalHeaders } from "./getCanonicalHeaders";
+export { getCanonicalQuery } from "./getCanonicalQuery";
+export { getPayloadHash } from "./getPayloadHash";
+export { moveHeadersToQuery } from "./moveHeadersToQuery";
+export { prepareRequest } from "./prepareRequest";
+export { clearCredentialCache, createScope, getSigningKey } from "./credentialDerivation";
+export { SignatureV4Base } from "./SignatureV4Base";
+export { hasHeader } from "./headerUtil";
+export { signatureV4aContainer } from "./signature-v4a-container";

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-es/moveHeadersToQuery.js

@@ -0,0 +1,17 @@
+import { HttpRequest } from "@smithy/core/protocols";
+export const moveHeadersToQuery = (request, options = {}) => {
+    const { headers, query = {} } = HttpRequest.clone(request);
+    for (const name of Object.keys(headers)) {
+        const lname = name.toLowerCase();
+        if ((lname.slice(0, 6) === "x-amz-" && !options.unhoistableHeaders?.has(lname)) ||
+            options.hoistableHeaders?.has(lname)) {
+            query[name] = headers[name];
+            delete headers[name];
+        }
+    }
+    return {
+        ...request,
+        headers,
+        query,
+    };
+};

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-es/prepareRequest.js

@@ -0,0 +1,11 @@
+import { HttpRequest } from "@smithy/core/protocols";
+import { GENERATED_HEADERS } from "./constants";
+export const prepareRequest = (request) => {
+    request = HttpRequest.clone(request);
+    for (const headerName of Object.keys(request.headers)) {
+        if (GENERATED_HEADERS.indexOf(headerName.toLowerCase()) > -1) {
+            delete request.headers[headerName];
+        }
+    }
+    return request;
+};

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-es/signature-v4a-container.js

@@ -0,0 +1,3 @@
+export const signatureV4aContainer = {
+    SignatureV4a: null,
+};

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-es/utilDate.js

@@ -0,0 +1,15 @@
+export const iso8601 = (time) => toDate(time)
+    .toISOString()
+    .replace(/\.\d{3}Z$/, "Z");
+export const toDate = (time) => {
+    if (typeof time === "number") {
+        return new Date(time * 1000);
+    }
+    if (typeof time === "string") {
+        if (Number(time)) {
+            return new Date(Number(time) * 1000);
+        }
+        return new Date(time);
+    }
+    return time;
+};

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-types/HeaderFormatter.d.ts

@@ -0,0 +1,25 @@
+import type { Int64 as IInt64, MessageHeaders } from "@smithy/types";
+/**
+ * TODO: duplicated from @smithy/eventstream-codec to break large dependency.
+ * TODO: This should be moved to its own deduped submodule in @smithy/core when submodules are implemented.
+ *
+ * @internal
+ */
+export declare class HeaderFormatter {
+    format(headers: MessageHeaders): Uint8Array;
+    private formatHeaderValue;
+}
+/**
+ * TODO: duplicated from @smithy/eventstream-codec to break large dependency.
+ * TODO: This should be moved to its own deduped submodule in @smithy/core when submodules are implemented.
+ */
+export declare class Int64 implements IInt64 {
+    readonly bytes: Uint8Array;
+    constructor(bytes: Uint8Array);
+    static fromNumber(number: number): Int64;
+    /**
+     * Called implicitly by infix arithmetic operators.
+     */
+    valueOf(): number;
+    toString(): string;
+}

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-types/SignatureV4.d.ts

@@ -0,0 +1,20 @@
+import type { EventSigner, EventSigningArguments, FormattedEvent, HttpRequest, MessageSigner, MessageSigningArguments, RequestPresigner, RequestPresigningArguments, RequestSigner, RequestSigningArguments, SignableMessage, SignedMessage, SigningArguments, StringSigner } from "@smithy/types";
+import { SignatureV4Base, type SignatureV4CryptoInit, type SignatureV4Init } from "./SignatureV4Base";
+/**
+ * @public
+ */
+export declare class SignatureV4 extends SignatureV4Base implements RequestPresigner, RequestSigner, StringSigner, EventSigner, MessageSigner {
+    private readonly headerFormatter;
+    constructor({ applyChecksum, credentials, region, service, sha256, uriEscapePath, }: SignatureV4Init & SignatureV4CryptoInit);
+    presign(originalRequest: HttpRequest, options?: RequestPresigningArguments): Promise<HttpRequest>;
+    sign(stringToSign: string, options?: SigningArguments): Promise<string>;
+    sign(event: FormattedEvent, options: EventSigningArguments): Promise<string>;
+    sign(event: SignableMessage, options: MessageSigningArguments): Promise<SignedMessage>;
+    sign(requestToSign: HttpRequest, options?: RequestSigningArguments): Promise<HttpRequest>;
+    private signEvent;
+    signMessage(signableMessage: SignableMessage, { signingDate, signingRegion, signingService, eventStreamCredentials }: MessageSigningArguments): Promise<SignedMessage>;
+    private signString;
+    private signRequest;
+    private getSignature;
+    private getSigningKey;
+}

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-types/SignatureV4Base.d.ts

@@ -0,0 +1,69 @@
+import type { AwsCredentialIdentity, ChecksumConstructor, DateInput, HashConstructor, HeaderBag, HttpRequest, Provider } from "@smithy/types";
+/**
+ * @public
+ */
+export interface SignatureV4Init {
+    /**
+     * The service signing name.
+     */
+    service: string;
+    /**
+     * The region name or a function that returns a promise that will be
+     * resolved with the region name.
+     */
+    region: string | Provider<string>;
+    /**
+     * The credentials with which the request should be signed or a function
+     * that returns a promise that will be resolved with credentials.
+     */
+    credentials: AwsCredentialIdentity | Provider<AwsCredentialIdentity>;
+    /**
+     * A constructor function for a hash object that will calculate SHA-256 HMAC
+     * checksums.
+     */
+    sha256?: ChecksumConstructor | HashConstructor;
+    /**
+     * Whether to uri-escape the request URI path as part of computing the
+     * canonical request string. This is required for every AWS service, except
+     * Amazon S3, as of late 2017.
+     *
+     * @default [true]
+     */
+    uriEscapePath?: boolean;
+    /**
+     * Whether to calculate a checksum of the request body and include it as
+     * either a request header (when signing) or as a query string parameter
+     * (when presigning). This is required for AWS Glacier and Amazon S3 and optional for
+     * every other AWS service as of late 2017.
+     *
+     * @default [true]
+     */
+    applyChecksum?: boolean;
+}
+/**
+ * @public
+ */
+export interface SignatureV4CryptoInit {
+    sha256: ChecksumConstructor | HashConstructor;
+}
+/**
+ * @internal
+ */
+export declare abstract class SignatureV4Base {
+    protected readonly service: string;
+    protected readonly regionProvider: Provider<string>;
+    protected readonly credentialProvider: Provider<AwsCredentialIdentity>;
+    protected readonly sha256: ChecksumConstructor | HashConstructor;
+    private readonly uriEscapePath;
+    protected readonly applyChecksum: boolean;
+    protected constructor({ applyChecksum, credentials, region, service, sha256, uriEscapePath, }: SignatureV4Init & SignatureV4CryptoInit);
+    protected createCanonicalRequest(request: HttpRequest, canonicalHeaders: HeaderBag, payloadHash: string): string;
+    protected createStringToSign(longDate: string, credentialScope: string, canonicalRequest: string, algorithmIdentifier: string): Promise<string>;
+    private getCanonicalPath;
+    protected validateResolvedCredentials(credentials: unknown): void;
+    protected formatDate(now: DateInput): {
+        longDate: string;
+        shortDate: string;
+    };
+    protected getCanonicalHeaderList(headers: object): string;
+}

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-types/constants.d.ts

@@ -0,0 +1,43 @@
+export declare const ALGORITHM_QUERY_PARAM = "X-Amz-Algorithm";
+export declare const CREDENTIAL_QUERY_PARAM = "X-Amz-Credential";
+export declare const AMZ_DATE_QUERY_PARAM = "X-Amz-Date";
+export declare const SIGNED_HEADERS_QUERY_PARAM = "X-Amz-SignedHeaders";
+export declare const EXPIRES_QUERY_PARAM = "X-Amz-Expires";
+export declare const SIGNATURE_QUERY_PARAM = "X-Amz-Signature";
+export declare const TOKEN_QUERY_PARAM = "X-Amz-Security-Token";
+export declare const REGION_SET_PARAM = "X-Amz-Region-Set";
+export declare const AUTH_HEADER = "authorization";
+export declare const AMZ_DATE_HEADER: string;
+export declare const DATE_HEADER = "date";
+export declare const GENERATED_HEADERS: string[];
+export declare const SIGNATURE_HEADER: string;
+export declare const SHA256_HEADER = "x-amz-content-sha256";
+export declare const TOKEN_HEADER: string;
+export declare const HOST_HEADER = "host";
+export declare const ALWAYS_UNSIGNABLE_HEADERS: {
+    authorization: boolean;
+    "cache-control": boolean;
+    connection: boolean;
+    expect: boolean;
+    from: boolean;
+    "keep-alive": boolean;
+    "max-forwards": boolean;
+    pragma: boolean;
+    referer: boolean;
+    te: boolean;
+    trailer: boolean;
+    "transfer-encoding": boolean;
+    upgrade: boolean;
+    "user-agent": boolean;
+    "x-amzn-trace-id": boolean;
+};
+export declare const PROXY_HEADER_PATTERN: RegExp;
+export declare const SEC_HEADER_PATTERN: RegExp;
+export declare const UNSIGNABLE_PATTERNS: RegExp[];
+export declare const ALGORITHM_IDENTIFIER = "AWS4-HMAC-SHA256";
+export declare const ALGORITHM_IDENTIFIER_V4A = "AWS4-ECDSA-P256-SHA256";
+export declare const EVENT_ALGORITHM_IDENTIFIER = "AWS4-HMAC-SHA256-PAYLOAD";
+export declare const UNSIGNED_PAYLOAD = "UNSIGNED-PAYLOAD";
+export declare const MAX_CACHE_SIZE = 50;
+export declare const KEY_TYPE_IDENTIFIER = "aws4_request";
+export declare const MAX_PRESIGNED_TTL: number;

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-types/credentialDerivation.d.ts

@@ -0,0 +1,30 @@
+import type { AwsCredentialIdentity, ChecksumConstructor, HashConstructor } from "@smithy/types";
+/**
+ * Create a string describing the scope of credentials used to sign a request.
+ *
+ * @internal
+ *
+ * @param shortDate - the current calendar date in the form YYYYMMDD.
+ * @param region    - the AWS region in which the service resides.
+ * @param service   - the service to which the signed request is being sent.
+ */
+export declare const createScope: (shortDate: string, region: string, service: string) => string;
+/**
+ * Derive a signing key from its composite parts.
+ *
+ * @internal
+ *
+ * @param sha256Constructor - a constructor function that can instantiate SHA-256
+ *                          hash objects.
+ * @param credentials       - the credentials with which the request will be
+ *                          signed.
+ * @param shortDate         - the current calendar date in the form YYYYMMDD.
+ * @param region            - the AWS region in which the service resides.
+ * @param service           - the service to which the signed request is being
+ *                          sent.
+ */
+export declare const getSigningKey: (sha256Constructor: ChecksumConstructor | HashConstructor, credentials: AwsCredentialIdentity, shortDate: string, region: string, service: string) => Promise<Uint8Array>;
+/**
+ * @internal
+ */
+export declare const clearCredentialCache: () => void;

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@smithy/signature-v4/dist-types/getCanonicalHeaders.d.ts

@@ -0,0 +1,5 @@
+import type { HeaderBag, HttpRequest } from "@smithy/types";
+/**
+ * @internal
+ */
+export declare const getCanonicalHeaders: ({ headers }: HttpRequest, unsignableHeaders?: Set<string>, signableHeaders?: Set<string>) => HeaderBag;