@openclaw/amazon-bedrock-provider 2026.8.1-beta.3 → 2026.8.2

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/credential-provider-ini/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-ini",
-  "version": "3.973.6",
+  "version": "3.973.15",
   "description": "AWS credential provider that sources credentials from ~/.aws/credentials and ~/.aws/config",
   "keywords": [
     "aws",
@@ -45,18 +45,18 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.977.0",
-    "@aws-sdk/credential-provider-env": "^3.972.61",
-    "@aws-sdk/credential-provider-http": "^3.972.63",
-    "@aws-sdk/credential-provider-login": "^3.972.68",
-    "@aws-sdk/credential-provider-process": "^3.972.61",
-    "@aws-sdk/credential-provider-sso": "^3.973.5",
-    "@aws-sdk/credential-provider-web-identity": "^3.972.67",
-    "@aws-sdk/nested-clients": "^3.997.35",
-    "@aws-sdk/types": "^3.974.2",
-    "@smithy/core": "^3.29.8",
-    "@smithy/credential-provider-imds": "^4.4.13",
-    "@smithy/types": "^4.16.1",
+    "@aws-sdk/core": "^3.977.9",
+    "@aws-sdk/credential-provider-env": "^3.972.70",
+    "@aws-sdk/credential-provider-http": "^3.972.72",
+    "@aws-sdk/credential-provider-login": "^3.972.77",
+    "@aws-sdk/credential-provider-process": "^3.972.70",
+    "@aws-sdk/credential-provider-sso": "^3.973.14",
+    "@aws-sdk/credential-provider-web-identity": "^3.972.76",
+    "@aws-sdk/nested-clients": "^3.997.44",
+    "@aws-sdk/types": "^3.974.5",
+    "@smithy/core": "^3.33.3",
+    "@smithy/credential-provider-imds": "^4.4.16",
+    "@smithy/types": "^4.17.2",
     "tslib": "^2.6.2"
   },
   "devDependencies": {
@@ -65,7 +65,7 @@
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "premove": "4.0.0",
-    "typescript": "~5.8.3"
+    "typescript": "~7.0.2"
   },
   "engines": {
     "node": ">=20.0.0"

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/credential-provider-login/dist-cjs/index.js

@@ -1,5 +1,5 @@
 const { setCredentialFeature } = require("@aws-sdk/core/client");
-const { CredentialsProviderError, readFile, parseKnownFiles, getProfileName } = require("@smithy/core/config");
+const { CredentialsProviderError, parseKnownFiles, getProfileName } = require("@smithy/core/config");
 const { HttpRequest } = require("@smithy/core/protocols");
 const { createHash, createPrivateKey, createPublicKey, sign } = require("node:crypto");
 const { promises } = require("node:fs");
@@ -28,13 +28,7 @@ class LoginCredentialsFetcher {
         if (timeUntilExpiry <= LoginCredentialsFetcher.REFRESH_THRESHOLD) {
             return this.refresh(token);
         }
-        return {
-            accessKeyId: accessToken.accessKeyId,
-            secretAccessKey: accessToken.secretAccessKey,
-            sessionToken: accessToken.sessionToken,
-            accountId: accessToken.accountId,
-            expiration: new Date(accessToken.expiresAt),
-        };
+        return this.toCredentials(token.accessToken);
     }
     get logger() {
         return this.init?.logger;
@@ -42,7 +36,25 @@ class LoginCredentialsFetcher {
     get loginSession() {
         return this.profileData.login_session;
     }
+    toCredentials(token) {
+        return {
+            accessKeyId: token.accessKeyId,
+            secretAccessKey: token.secretAccessKey,
+            sessionToken: token.sessionToken,
+            accountId: token.accountId,
+            expiration: new Date(token.expiresAt),
+        };
+    }
     async refresh(token) {
+        const diskToken = await this.loadToken().catch(() => token);
+        const now = Date.now();
+        const diskExpiry = new Date(diskToken.accessToken.expiresAt).getTime();
+        const tokenExpiry = new Date(token.accessToken.expiresAt).getTime();
+        const freshToken = diskExpiry <= now && tokenExpiry > now ? token : diskToken;
+        const freshExpiry = new Date(freshToken.accessToken.expiresAt).getTime();
+        if (freshExpiry - Date.now() > LoginCredentialsFetcher.REFRESH_THRESHOLD) {
+            return this.toCredentials(freshToken.accessToken);
+        }
         const { SigninClient, CreateOAuth2TokenCommand } = require('@aws-sdk/nested-clients/signin');
         const { logger, userAgentAppId } = this.callerClientConfig ?? {};
         const isH2 = (requestHandler) => {
@@ -66,8 +78,8 @@ class LoginCredentialsFetcher {
         this.createDPoPInterceptor(client.middlewareStack);
         const commandInput = {
             tokenInput: {
-                clientId: token.clientId,
-                refreshToken: token.refreshToken,
+                clientId: freshToken.clientId,
+                refreshToken: freshToken.refreshToken,
                 grantType: "refresh_token",
             },
         };
@@ -84,9 +96,9 @@ class LoginCredentialsFetcher {
             const expiresInMs = (expiresIn ?? 900) * 1000;
             const expiration = new Date(Date.now() + expiresInMs);
             const updatedToken = {
-                ...token,
+                ...freshToken,
                 accessToken: {
-                    ...token.accessToken,
+                    ...freshToken.accessToken,
                     accessKeyId,
                     secretAccessKey,
                     sessionToken,
@@ -95,14 +107,7 @@ class LoginCredentialsFetcher {
                 refreshToken,
             };
             await this.saveToken(updatedToken);
-            const newAccessToken = updatedToken.accessToken;
-            return {
-                accessKeyId: newAccessToken.accessKeyId,
-                secretAccessKey: newAccessToken.secretAccessKey,
-                sessionToken: newAccessToken.sessionToken,
-                accountId: newAccessToken.accountId,
-                expiration,
-            };
+            return this.toCredentials(updatedToken.accessToken);
         }
         catch (error) {
             if (error.name === "AccessDeniedException") {
@@ -123,7 +128,15 @@ class LoginCredentialsFetcher {
                     default:
                         message = `Failed to refresh token: ${String(error)}. Please re-authenticate using \`aws login\``;
                 }
-                throw new CredentialsProviderError(message, { logger: this.logger, tryNextLink: false });
+                throw new CredentialsProviderError(message, {
+                    logger: this.logger,
+                    tryNextLink: false,
+                });
+            }
+            const tokenExpiry = new Date(freshToken.accessToken.expiresAt).getTime();
+            if (tokenExpiry > Date.now()) {
+                this.logger?.warn?.(`Failed to refresh token: ${String(error)}. Using existing token until expiry.`);
+                return this.toCredentials(freshToken.accessToken);
             }
             throw new CredentialsProviderError(`Failed to refresh token: ${String(error)}. Please re-authenticate using aws login`, { logger: this.logger });
         }
@@ -131,13 +144,7 @@ class LoginCredentialsFetcher {
     async loadToken() {
         const tokenFilePath = this.getTokenFilePath();
         try {
-            let tokenData;
-            try {
-                tokenData = await readFile(tokenFilePath, { ignoreCache: this.init?.ignoreCache });
-            }
-            catch {
-                tokenData = await promises.readFile(tokenFilePath, "utf8");
-            }
+            const tokenData = await promises.readFile(tokenFilePath, "utf8");
             const token = JSON.parse(tokenData);
             const missingFields = ["accessToken", "clientId", "refreshToken", "dpopKey"].filter((k) => !token[k]);
             if (!token.accessToken?.accountId) {

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/credential-provider-login/dist-es/LoginCredentialsFetcher.js

@@ -1,4 +1,4 @@
-import { CredentialsProviderError, readFile } from "@smithy/core/config";
+import { CredentialsProviderError } from "@smithy/core/config";
 import { HttpRequest } from "@smithy/core/protocols";
 import { createHash, createPrivateKey, createPublicKey, sign } from "node:crypto";
 import { promises as fs } from "node:fs";
@@ -26,13 +26,7 @@ export class LoginCredentialsFetcher {
         if (timeUntilExpiry <= LoginCredentialsFetcher.REFRESH_THRESHOLD) {
             return this.refresh(token);
         }
-        return {
-            accessKeyId: accessToken.accessKeyId,
-            secretAccessKey: accessToken.secretAccessKey,
-            sessionToken: accessToken.sessionToken,
-            accountId: accessToken.accountId,
-            expiration: new Date(accessToken.expiresAt),
-        };
+        return this.toCredentials(token.accessToken);
     }
     get logger() {
         return this.init?.logger;
@@ -40,7 +34,25 @@ export class LoginCredentialsFetcher {
     get loginSession() {
         return this.profileData.login_session;
     }
+    toCredentials(token) {
+        return {
+            accessKeyId: token.accessKeyId,
+            secretAccessKey: token.secretAccessKey,
+            sessionToken: token.sessionToken,
+            accountId: token.accountId,
+            expiration: new Date(token.expiresAt),
+        };
+    }
     async refresh(token) {
+        const diskToken = await this.loadToken().catch(() => token);
+        const now = Date.now();
+        const diskExpiry = new Date(diskToken.accessToken.expiresAt).getTime();
+        const tokenExpiry = new Date(token.accessToken.expiresAt).getTime();
+        const freshToken = diskExpiry <= now && tokenExpiry > now ? token : diskToken;
+        const freshExpiry = new Date(freshToken.accessToken.expiresAt).getTime();
+        if (freshExpiry - Date.now() > LoginCredentialsFetcher.REFRESH_THRESHOLD) {
+            return this.toCredentials(freshToken.accessToken);
+        }
         const { SigninClient, CreateOAuth2TokenCommand } = await import("@aws-sdk/nested-clients/signin");
         const { logger, userAgentAppId } = this.callerClientConfig ?? {};
         const isH2 = (requestHandler) => {
@@ -64,8 +76,8 @@ export class LoginCredentialsFetcher {
         this.createDPoPInterceptor(client.middlewareStack);
         const commandInput = {
             tokenInput: {
-                clientId: token.clientId,
-                refreshToken: token.refreshToken,
+                clientId: freshToken.clientId,
+                refreshToken: freshToken.refreshToken,
                 grantType: "refresh_token",
             },
         };
@@ -82,9 +94,9 @@ export class LoginCredentialsFetcher {
             const expiresInMs = (expiresIn ?? 900) * 1000;
             const expiration = new Date(Date.now() + expiresInMs);
             const updatedToken = {
-                ...token,
+                ...freshToken,
                 accessToken: {
-                    ...token.accessToken,
+                    ...freshToken.accessToken,
                     accessKeyId,
                     secretAccessKey,
                     sessionToken,
@@ -93,14 +105,7 @@ export class LoginCredentialsFetcher {
                 refreshToken,
             };
             await this.saveToken(updatedToken);
-            const newAccessToken = updatedToken.accessToken;
-            return {
-                accessKeyId: newAccessToken.accessKeyId,
-                secretAccessKey: newAccessToken.secretAccessKey,
-                sessionToken: newAccessToken.sessionToken,
-                accountId: newAccessToken.accountId,
-                expiration,
-            };
+            return this.toCredentials(updatedToken.accessToken);
         }
         catch (error) {
             if (error.name === "AccessDeniedException") {
@@ -121,7 +126,15 @@ export class LoginCredentialsFetcher {
                     default:
                         message = `Failed to refresh token: ${String(error)}. Please re-authenticate using \`aws login\``;
                 }
-                throw new CredentialsProviderError(message, { logger: this.logger, tryNextLink: false });
+                throw new CredentialsProviderError(message, {
+                    logger: this.logger,
+                    tryNextLink: false,
+                });
+            }
+            const tokenExpiry = new Date(freshToken.accessToken.expiresAt).getTime();
+            if (tokenExpiry > Date.now()) {
+                this.logger?.warn?.(`Failed to refresh token: ${String(error)}. Using existing token until expiry.`);
+                return this.toCredentials(freshToken.accessToken);
             }
             throw new CredentialsProviderError(`Failed to refresh token: ${String(error)}. Please re-authenticate using aws login`, { logger: this.logger });
         }
@@ -129,13 +142,7 @@ export class LoginCredentialsFetcher {
     async loadToken() {
         const tokenFilePath = this.getTokenFilePath();
         try {
-            let tokenData;
-            try {
-                tokenData = await readFile(tokenFilePath, { ignoreCache: this.init?.ignoreCache });
-            }
-            catch {
-                tokenData = await fs.readFile(tokenFilePath, "utf8");
-            }
+            const tokenData = await fs.readFile(tokenFilePath, "utf8");
             const token = JSON.parse(tokenData);
             const missingFields = ["accessToken", "clientId", "refreshToken", "dpopKey"].filter((k) => !token[k]);
             if (!token.accessToken?.accountId) {

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/credential-provider-login/dist-types/LoginCredentialsFetcher.d.ts

@@ -17,6 +17,7 @@ export declare class LoginCredentialsFetcher {
     loadCredentials(): Promise<AwsCredentialIdentity>;
     private get logger();
     private get loginSession();
+    private toCredentials;
     private refresh;
     private loadToken;
     private saveToken;

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/credential-provider-login/dist-types/ts3.4/LoginCredentialsFetcher.d.ts

@@ -14,6 +14,7 @@ export declare class LoginCredentialsFetcher {
   loadCredentials(): Promise<AwsCredentialIdentity>;
   private readonly logger: any;
   private readonly loginSession: any;
+  private toCredentials;
   private refresh;
   private loadToken;
   private saveToken;

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/credential-provider-login/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-login",
-  "version": "3.972.68",
+  "version": "3.972.77",
   "description": "AWS credential provider that sources credentials from aws login cached tokens",
   "keywords": [
     "aws",
@@ -45,11 +45,11 @@
     "test:watch": "yarn g:vitest watch"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.977.0",
-    "@aws-sdk/nested-clients": "^3.997.35",
-    "@aws-sdk/types": "^3.974.2",
-    "@smithy/core": "^3.29.8",
-    "@smithy/types": "^4.16.1",
+    "@aws-sdk/core": "^3.977.9",
+    "@aws-sdk/nested-clients": "^3.997.44",
+    "@aws-sdk/types": "^3.974.5",
+    "@smithy/core": "^3.33.3",
+    "@smithy/types": "^4.17.2",
     "tslib": "^2.6.2"
   },
   "devDependencies": {
@@ -58,7 +58,7 @@
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "premove": "4.0.0",
-    "typescript": "~5.8.3"
+    "typescript": "~7.0.2"
   },
   "engines": {
     "node": ">=20.0.0"

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/credential-provider-process/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-process",
-  "version": "3.972.61",
+  "version": "3.972.70",
   "description": "AWS credential provider that sources credential_process from ~/.aws/credentials and ~/.aws/config",
   "keywords": [
     "aws",
@@ -43,10 +43,10 @@
     "test:watch": "yarn g:vitest watch"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.977.0",
-    "@aws-sdk/types": "^3.974.2",
-    "@smithy/core": "^3.29.8",
-    "@smithy/types": "^4.16.1",
+    "@aws-sdk/core": "^3.977.9",
+    "@aws-sdk/types": "^3.974.5",
+    "@smithy/core": "^3.33.3",
+    "@smithy/types": "^4.17.2",
     "tslib": "^2.6.2"
   },
   "devDependencies": {
@@ -55,7 +55,7 @@
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "premove": "4.0.0",
-    "typescript": "~5.8.3"
+    "typescript": "~7.0.2"
   },
   "engines": {
     "node": ">=20.0.0"

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/credential-provider-sso/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-sso",
-  "version": "3.973.5",
+  "version": "3.973.14",
   "description": "AWS credential provider that exchanges a resolved SSO login token file for temporary AWS credentials",
   "keywords": [
     "aws",
@@ -45,12 +45,12 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.977.0",
-    "@aws-sdk/nested-clients": "^3.997.35",
-    "@aws-sdk/token-providers": "3.1095.0",
-    "@aws-sdk/types": "^3.974.2",
-    "@smithy/core": "^3.29.8",
-    "@smithy/types": "^4.16.1",
+    "@aws-sdk/core": "^3.977.9",
+    "@aws-sdk/nested-clients": "^3.997.44",
+    "@aws-sdk/token-providers": "3.1116.0",
+    "@aws-sdk/types": "^3.974.5",
+    "@smithy/core": "^3.33.3",
+    "@smithy/types": "^4.17.2",
     "tslib": "^2.6.2"
   },
   "devDependencies": {
@@ -59,7 +59,7 @@
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "premove": "4.0.0",
-    "typescript": "~5.8.3"
+    "typescript": "~7.0.2"
   },
   "engines": {
     "node": ">=20.0.0"

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/credential-provider-web-identity/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-web-identity",
-  "version": "3.972.67",
+  "version": "3.972.76",
   "description": "AWS credential provider that calls STS assumeRole for temporary AWS credentials",
   "keywords": [
     "aws",
@@ -50,11 +50,11 @@
     "test:watch": "yarn g:vitest watch"
   },
   "dependencies": {
-    "@aws-sdk/core": "^3.977.0",
-    "@aws-sdk/nested-clients": "^3.997.35",
-    "@aws-sdk/types": "^3.974.2",
-    "@smithy/core": "^3.29.8",
-    "@smithy/types": "^4.16.1",
+    "@aws-sdk/core": "^3.977.9",
+    "@aws-sdk/nested-clients": "^3.997.44",
+    "@aws-sdk/types": "^3.974.5",
+    "@smithy/core": "^3.33.3",
+    "@smithy/types": "^4.17.2",
     "tslib": "^2.6.2"
   },
   "devDependencies": {
@@ -63,7 +63,7 @@
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
     "premove": "4.0.0",
-    "typescript": "~5.8.3"
+    "typescript": "~7.0.2"
   },
   "engines": {
     "node": ">=20.0.0"

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/cognito-identity/index.js

@@ -83,7 +83,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.997.34";
+var version = "3.997.43";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/signin/index.js

@@ -78,7 +78,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.997.34";
+var version = "3.997.43";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso/index.js

@@ -78,7 +78,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.997.34";
+var version = "3.997.43";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/index.js

@@ -78,7 +78,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.997.34";
+var version = "3.997.43";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js

@@ -258,7 +258,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.997.34";
+var version = "3.997.43";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/credential-provider-node/node_modules/@aws-sdk/nested-clients/dist-types/submodules/cognito-identity/runtimeConfig.browser.d.ts

@@ -4,46 +4,31 @@ import type { CognitoIdentityClientConfig } from "./CognitoIdentityClient";
  * @internal
  */
 export declare const getRuntimeConfig: (config: CognitoIdentityClientConfig) => {
-    runtime: string;
-    defaultsMode: import("@smithy/types").Provider<import("@smithy/core/client").ResolvedDefaultsMode>;
-    bodyLengthChecker: import("@smithy/types").BodyLengthCalculator;
-    defaultUserAgentProvider: (config?: import("@aws-sdk/core/client").PreviouslyResolved) => Promise<import("@smithy/types").UserAgent>;
-    maxAttempts: number | import("@smithy/types").Provider<number>;
-    region: string | import("@smithy/types").Provider<any>;
-    requestHandler: import("@smithy/core/protocols").HttpHandler<any> | RequestHandler;
-    retryMode: string | import("@smithy/types").Provider<string>;
-    streamCollector: (stream: import("stream").Readable | import("stream/web").ReadableStream | ReadableStream | Blob) => Promise<Uint8Array>;
-    useDualstackEndpoint: (boolean | import("@smithy/types").Provider<boolean>) & (boolean | import("@smithy/types").Provider<boolean | undefined>);
-    useFipsEndpoint: (boolean | import("@smithy/types").Provider<boolean>) & (boolean | import("@smithy/types").Provider<boolean | undefined>);
-    cacheMiddleware?: boolean | undefined;
-    protocol: import("@smithy/types").ClientProtocol<any, any> | import("@smithy/types").ClientProtocolCtor<any, any> | typeof import("@aws-sdk/core/protocols").AwsJson1_1Protocol;
-    protocolSettings: {
-        defaultNamespace?: string;
-        [setting: string]: unknown;
-    };
-    apiVersion: string;
-    sha256: import("@smithy/types").HashConstructor;
-    urlParser: import("@smithy/types").UrlParser;
-    base64Decoder: import("@smithy/types").Decoder;
-    base64Encoder: (_input: Uint8Array | string) => string;
-    utf8Decoder: import("@smithy/types").Decoder;
-    utf8Encoder: (input: Uint8Array | string) => string;
-    disableHostPrefix: boolean;
-    serviceId: string;
-    profile?: string;
-    logger: import("@smithy/types").Logger;
-    extensions: import("./runtimeExtensions").RuntimeExtension[];
+    cacheMiddleware?: boolean;
     customUserAgent?: string | import("@smithy/types").UserAgent;
     userAgentAppId?: string | undefined | import("@smithy/types").Provider<string | undefined>;
-    retryStrategy?: import("@smithy/types").RetryStrategy | import("@smithy/types").RetryStrategyV2;
-    endpoint?: ((string | import("@smithy/types").Endpoint | import("@smithy/types").Provider<import("@smithy/types").Endpoint> | import("@smithy/types").EndpointV2 | import("@smithy/types").Provider<import("@smithy/types").EndpointV2>) & (string | import("@smithy/types").Provider<string> | import("@smithy/types").Endpoint | import("@smithy/types").Provider<import("@smithy/types").Endpoint> | import("@smithy/types").EndpointV2 | import("@smithy/types").Provider<import("@smithy/types").EndpointV2>)) | undefined;
-    endpointProvider: (endpointParams: import("./endpoint/EndpointParameters").EndpointParameters, context?: {
-        logger?: import("@smithy/types").Logger;
-    }) => import("@smithy/types").EndpointV2;
+    endpoint?: ((string | import("@smithy/types").Endpoint | import("@smithy/types").EndpointV2 | import("@smithy/types").Provider<import("@smithy/types").Endpoint> | import("@smithy/types").Provider<import("@smithy/types").EndpointV2>) & (string | import("@smithy/types").Endpoint | import("@smithy/types").EndpointV2 | import("@smithy/types").Provider<string> | import("@smithy/types").Provider<import("@smithy/types").Endpoint> | import("@smithy/types").Provider<import("@smithy/types").EndpointV2>)) | undefined;
     tls?: boolean;
     ignoreConfiguredEndpointUrls?: boolean;
     serviceConfiguredEndpoint?: never;
+    retryStrategy?: import("@smithy/types").RetryStrategy | import("@smithy/types").RetryStrategyV2;
+    credentials?: import("@smithy/types").AwsCredentialIdentity | import("@smithy/types").AwsCredentialIdentityProvider;
+    signer?: import("@smithy/types").RequestSigner | ((authScheme?: import("@smithy/types").AuthScheme) => Promise<import("@smithy/types").RequestSigner>);
+    signingEscapePath?: boolean;
+    systemClockOffset?: number;
+    signingRegion?: string;
+    signerConstructor?: new (options: import("@smithy/signature-v4").SignatureV4Init & import("@smithy/signature-v4").SignatureV4CryptoInit) => import("@smithy/types").RequestSigner;
+    disableClockSkewCorrection?: boolean | import("@smithy/types").Provider<boolean>;
     authSchemePreference?: string[] | import("@smithy/types").Provider<string[]>;
+    apiVersion: string;
+    base64Decoder: import("@smithy/types").Decoder;
+    base64Encoder: (_input: Uint8Array | string) => string;
+    disableHostPrefix: boolean;
+    endpointProvider: (params: import("./endpoint/EndpointParameters").EndpointParameters, context?: {
+        logger?: import("@smithy/types").Logger;
+    }) => import("@smithy/types").EndpointV2;
+    extensions: import("./runtimeExtensions").RuntimeExtension[];
+    httpAuthSchemeProvider: import("./auth/httpAuthSchemeProvider").CognitoIdentityHttpAuthSchemeProvider;
     httpAuthSchemes: import("@smithy/types").HttpAuthScheme[] | ({
         schemeId: string;
         identityProvider: (ipc: import("@smithy/types").IdentityProviderConfig) => import("@smithy/types").IdentityProvider<import("@smithy/types").Identity> | undefined;
@@ -53,12 +38,27 @@ export declare const getRuntimeConfig: (config: CognitoIdentityClientConfig) =>
         identityProvider: (ipc: import("@smithy/types").IdentityProviderConfig) => import("@smithy/types").IdentityProvider<import("@smithy/types").Identity> | (() => Promise<{}>);
         signer: import("@smithy/core").NoAuthSigner;
     })[];
-    httpAuthSchemeProvider: import("./auth/httpAuthSchemeProvider").CognitoIdentityHttpAuthSchemeProvider;
-    credentials?: import("@smithy/types").AwsCredentialIdentity | import("@smithy/types").AwsCredentialIdentityProvider;
-    signer?: import("@smithy/types").RequestSigner | ((authScheme?: import("@smithy/types").AuthScheme) => Promise<import("@smithy/types").RequestSigner>);
-    signingEscapePath?: boolean;
-    systemClockOffset?: number;
-    signingRegion?: string;
-    signerConstructor?: new (options: import("@smithy/signature-v4").SignatureV4Init & import("@smithy/signature-v4").SignatureV4CryptoInit) => import("@smithy/types").RequestSigner;
-    disableClockSkewCorrection?: boolean | import("@smithy/types").Provider<boolean>;
+    logger: import("@smithy/types").Logger;
+    protocol: import("@smithy/types").$ClientProtocol<any, any> | import("@smithy/types").$ClientProtocolCtor<any, any> | typeof import("@aws-sdk/core/protocols").AwsJson1_1Protocol;
+    protocolSettings: {
+        [setting: string]: unknown;
+        defaultNamespace?: string;
+    };
+    serviceId: string;
+    sha256: import("@smithy/types").HashConstructor;
+    urlParser: import("@smithy/types").UrlParser;
+    utf8Decoder: import("@smithy/types").Decoder;
+    utf8Encoder: (input: Uint8Array | string) => string;
+    profile?: string;
+    runtime: string;
+    defaultsMode: import("@smithy/types").Provider<import("@smithy/core/client").ResolvedDefaultsMode>;
+    bodyLengthChecker: import("@smithy/types").BodyLengthCalculator;
+    defaultUserAgentProvider: (config?: import("@aws-sdk/core/client").PreviouslyResolved) => Promise<import("@smithy/types").UserAgent>;
+    maxAttempts: number | import("@smithy/types").Provider<number>;
+    region: string | import("@smithy/types").Provider<any>;
+    requestHandler: RequestHandler | import("@smithy/core/protocols").HttpHandler<any>;
+    retryMode: string | import("@smithy/types").Provider<string>;
+    streamCollector: (stream: import("stream").Readable | import("stream/web").ReadableStream | ReadableStream | Blob) => Promise<Uint8Array>;
+    useDualstackEndpoint: boolean | (() => Promise<boolean>);
+    useFipsEndpoint: boolean | (() => Promise<boolean>);
 };