@tanstack/ai-bedrock 0.1.3 → 0.1.5

package/dist/esm/utils/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sources":["../../../src/utils/auth.ts"],"sourcesContent":["import type { AwsCredentialIdentityProvider } from '@smithy/types'\nimport type * as CredentialProviders from '@aws-sdk/credential-providers'\n\nexport type BedrockEndpoint = 'runtime' | 'mantle'\n\n/** SigV4 service name differs per endpoint. */\nexport function sigv4Service(endpoint: BedrockEndpoint): string {\n  return endpoint === 'mantle' ? 'bedrock-mantle' : 'bedrock'\n}\n\nexport type ResolvedBedrockAuth =\n  | { kind: 'bearer'; token: string }\n  | {\n      kind: 'sigv4'\n      region: string\n      service: string\n      credentials: AwsCredentialIdentityProvider\n    }\n\nconst DEFAULT_REGION = 'us-east-1'\n\nfunction readApiKeyFromEnv(): string | undefined {\n  // Bedrock is server-only (the AWS SDK is Node-only), so the key always comes\n  // from process.env. Read it directly: a property access never throws, so —\n  // unlike the previous try/catch around getApiKeyFromEnv — we no longer swallow\n  // unrelated errors as \"key not set\". Each var is blank-checked independently\n  // so a present-but-blank BEDROCK_API_KEY falls through to\n  // AWS_BEARER_TOKEN_BEDROCK (and only then to SigV4) rather than masking it.\n  const env = typeof process !== 'undefined' ? process.env : undefined\n  for (const value of [env?.BEDROCK_API_KEY, env?.AWS_BEARER_TOKEN_BEDROCK]) {\n    if (value && value.trim() !== '') return value\n  }\n  return undefined\n}\n\nexport interface BedrockAuthConfig {\n  apiKey?: string\n  region?: string\n  auth?: 'apikey' | 'sigv4' | 'auto'\n}\n\n/** apiKey -> BEDROCK_API_KEY -> AWS_BEARER_TOKEN_BEDROCK -> SigV4 (credential chain). */\nexport function resolveBedrockAuth(\n  config: BedrockAuthConfig,\n  endpoint: BedrockEndpoint,\n): ResolvedBedrockAuth {\n  const mode = config.auth ?? 'auto'\n  const region = config.region ?? DEFAULT_REGION\n\n  if (mode !== 'sigv4') {\n    const token = config.apiKey ?? readApiKeyFromEnv()\n    if (token) return { kind: 'bearer', token }\n    if (mode === 'apikey') {\n      throw new Error(\n        'No Bedrock API key found. Set BEDROCK_API_KEY (or ' +\n          'AWS_BEARER_TOKEN_BEDROCK), pass `apiKey`, or use auth: \"sigv4\".',\n      )\n    }\n  }\n\n  return {\n    kind: 'sigv4',\n    region,\n    service: sigv4Service(endpoint),\n    // Lazy credential provider: the AWS SDK is Node/server-only, so we defer the\n    // dynamic import until SigV4 actually needs to resolve credentials. The\n    // specifier is held in a variable (not a string literal) so bundler dep\n    // scanners (e.g. Vite/esbuild optimizeDeps) cannot statically discover the\n    // AWS SDK and try to pre-bundle it for the browser — it would fail on the\n    // SDK's Node-only `fromTokenFile` export chain. `typeof import(...)` is a\n    // type-only reference (erased at emit) so we keep full typing.\n    credentials: async (...args) => {\n      const mod = '@aws-sdk/credential-providers'\n      const { fromNodeProviderChain } = (await import(\n        /* @vite-ignore */ mod\n      )) as typeof CredentialProviders\n      return fromNodeProviderChain()(...args)\n    },\n  }\n}\n"],"names":[],"mappings":"AAMO,SAAS,aAAa,UAAmC;AAC9D,SAAO,aAAa,WAAW,mBAAmB;AACpD;AAWA,MAAM,iBAAiB;AAEvB,SAAS,oBAAwC;AAO/C,QAAM,MAAM,OAAO,YAAY,cAAc,QAAQ,MAAM;AAC3D,aAAW,SAAS,CAAC,KAAK,iBAAiB,KAAK,wBAAwB,GAAG;AACzE,QAAI,SAAS,MAAM,KAAA,MAAW,GAAI,QAAO;AAAA,EAC3C;AACA,SAAO;AACT;AASO,SAAS,mBACd,QACA,UACqB;AACrB,QAAM,OAAO,OAAO,QAAQ;AAC5B,QAAM,SAAS,OAAO,UAAU;AAEhC,MAAI,SAAS,SAAS;AACpB,UAAM,QAAQ,OAAO,UAAU,kBAAA;AAC/B,QAAI,MAAO,QAAO,EAAE,MAAM,UAAU,MAAA;AACpC,QAAI,SAAS,UAAU;AACrB,YAAM,IAAI;AAAA,QACR;AAAA,MAAA;AAAA,IAGJ;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,SAAS,aAAa,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQ9B,aAAa,UAAU,SAAS;AAC9B,YAAM,MAAM;AACZ,YAAM,EAAE,sBAAA,IAA2B,MAAM;AAAA;AAAA,QACpB;AAAA;AAErB,aAAO,sBAAA,EAAwB,GAAG,IAAI;AAAA,IACxC;AAAA,EAAA;AAEJ;"}
+{"version":3,"file":"auth.js","names":[],"sources":["../../../src/utils/auth.ts"],"sourcesContent":["import type { AwsCredentialIdentityProvider } from '@smithy/types'\nimport type * as CredentialProviders from '@aws-sdk/credential-providers'\n\nexport type BedrockEndpoint = 'runtime' | 'mantle'\n\n/** SigV4 service name differs per endpoint. */\nexport function sigv4Service(endpoint: BedrockEndpoint): string {\n  return endpoint === 'mantle' ? 'bedrock-mantle' : 'bedrock'\n}\n\nexport type ResolvedBedrockAuth =\n  | { kind: 'bearer'; token: string }\n  | {\n      kind: 'sigv4'\n      region: string\n      service: string\n      credentials: AwsCredentialIdentityProvider\n    }\n\nconst DEFAULT_REGION = 'us-east-1'\n\nfunction readApiKeyFromEnv(): string | undefined {\n  // Bedrock is server-only (the AWS SDK is Node-only), so the key always comes\n  // from process.env. Read it directly: a property access never throws, so —\n  // unlike the previous try/catch around getApiKeyFromEnv — we no longer swallow\n  // unrelated errors as \"key not set\". Each var is blank-checked independently\n  // so a present-but-blank BEDROCK_API_KEY falls through to\n  // AWS_BEARER_TOKEN_BEDROCK (and only then to SigV4) rather than masking it.\n  const env = typeof process !== 'undefined' ? process.env : undefined\n  for (const value of [env?.BEDROCK_API_KEY, env?.AWS_BEARER_TOKEN_BEDROCK]) {\n    if (value && value.trim() !== '') return value\n  }\n  return undefined\n}\n\nexport interface BedrockAuthConfig {\n  apiKey?: string\n  region?: string\n  auth?: 'apikey' | 'sigv4' | 'auto'\n}\n\n/** apiKey -> BEDROCK_API_KEY -> AWS_BEARER_TOKEN_BEDROCK -> SigV4 (credential chain). */\nexport function resolveBedrockAuth(\n  config: BedrockAuthConfig,\n  endpoint: BedrockEndpoint,\n): ResolvedBedrockAuth {\n  const mode = config.auth ?? 'auto'\n  const region = config.region ?? DEFAULT_REGION\n\n  if (mode !== 'sigv4') {\n    const token = config.apiKey ?? readApiKeyFromEnv()\n    if (token) return { kind: 'bearer', token }\n    if (mode === 'apikey') {\n      throw new Error(\n        'No Bedrock API key found. Set BEDROCK_API_KEY (or ' +\n          'AWS_BEARER_TOKEN_BEDROCK), pass `apiKey`, or use auth: \"sigv4\".',\n      )\n    }\n  }\n\n  return {\n    kind: 'sigv4',\n    region,\n    service: sigv4Service(endpoint),\n    // Lazy credential provider: the AWS SDK is Node/server-only, so we defer the\n    // dynamic import until SigV4 actually needs to resolve credentials. The\n    // specifier is held in a variable (not a string literal) so bundler dep\n    // scanners (e.g. Vite/esbuild optimizeDeps) cannot statically discover the\n    // AWS SDK and try to pre-bundle it for the browser — it would fail on the\n    // SDK's Node-only `fromTokenFile` export chain. `typeof import(...)` is a\n    // type-only reference (erased at emit) so we keep full typing.\n    credentials: async (...args) => {\n      const mod = '@aws-sdk/credential-providers'\n      const { fromNodeProviderChain } = (await import(\n        /* @vite-ignore */ mod\n      )) as typeof CredentialProviders\n      return fromNodeProviderChain()(...args)\n    },\n  }\n}\n"],"mappings":";;AAMA,SAAgB,aAAa,UAAmC;CAC9D,OAAO,aAAa,WAAW,mBAAmB;AACpD;AAWA,IAAM,iBAAiB;AAEvB,SAAS,oBAAwC;CAO/C,MAAM,MAAM,OAAO,YAAY,cAAc,QAAQ,MAAM,KAAA;CAC3D,KAAK,MAAM,SAAS,CAAC,KAAK,iBAAiB,KAAK,wBAAwB,GACtE,IAAI,SAAS,MAAM,KAAK,MAAM,IAAI,OAAO;AAG7C;;AASA,SAAgB,mBACd,QACA,UACqB;CACrB,MAAM,OAAO,OAAO,QAAQ;CAC5B,MAAM,SAAS,OAAO,UAAU;CAEhC,IAAI,SAAS,SAAS;EACpB,MAAM,QAAQ,OAAO,UAAU,kBAAkB;EACjD,IAAI,OAAO,OAAO;GAAE,MAAM;GAAU;EAAM;EAC1C,IAAI,SAAS,UACX,MAAM,IAAI,MACR,qHAEF;CAEJ;CAEA,OAAO;EACL,MAAM;EACN;EACA,SAAS,aAAa,QAAQ;EAQ9B,aAAa,OAAO,GAAG,SAAS;GAE9B,MAAM,EAAE,0BAA2B,MAAM;;IACpB;;GAErB,OAAO,sBAAsB,CAAC,CAAC,GAAG,IAAI;EACxC;CACF;AACF"}

package/dist/esm/utils/client.js

@@ -1,35 +1,36 @@
 import { resolveBedrockAuth } from "./auth.js";
 import { createSigV4Fetch } from "./openai-sigv4-fetch.js";
-const DEFAULT_REGION = "us-east-1";
-const SIGV4_PLACEHOLDER_KEY = "bedrock-sigv4";
+//#region src/utils/client.ts
+var DEFAULT_REGION = "us-east-1";
+/** OpenAI SDK requires a non-empty apiKey even when a signed fetch overrides Authorization. */
+var SIGV4_PLACEHOLDER_KEY = "bedrock-sigv4";
 function buildBaseURL(region, endpoint) {
-  return endpoint === "mantle" ? `https://bedrock-mantle.${region}.api.aws/v1` : `https://bedrock-runtime.${region}.amazonaws.com/openai/v1`;
+	return endpoint === "mantle" ? `https://bedrock-mantle.${region}.api.aws/v1` : `https://bedrock-runtime.${region}.amazonaws.com/openai/v1`;
 }
+/** Builds OpenAI ClientOptions for the requested endpoint. `forced` pins the endpoint (responses → 'mantle'). */
 function withBedrockDefaults(config, forced) {
-  const { region, endpoint, auth, apiKey, baseURL, fetch, ...rest } = config;
-  const resolvedRegion = region ?? DEFAULT_REGION;
-  const resolvedEndpoint = forced ?? endpoint ?? "runtime";
-  const resolved = resolveBedrockAuth(
-    { apiKey, region: resolvedRegion, auth },
-    resolvedEndpoint
-  );
-  if (resolved.kind === "bearer") {
-    return {
-      ...rest,
-      baseURL: baseURL ?? buildBaseURL(resolvedRegion, resolvedEndpoint),
-      apiKey: resolved.token,
-      ...fetch ? { fetch } : {}
-    };
-  }
-  return {
-    ...rest,
-    baseURL: baseURL ?? buildBaseURL(resolvedRegion, resolvedEndpoint),
-    apiKey: SIGV4_PLACEHOLDER_KEY,
-    fetch: fetch ?? createSigV4Fetch(resolved)
-  };
+	const { region, endpoint, auth, apiKey, baseURL, fetch, ...rest } = config;
+	const resolvedRegion = region ?? DEFAULT_REGION;
+	const resolvedEndpoint = forced ?? endpoint ?? "runtime";
+	const resolved = resolveBedrockAuth({
+		apiKey,
+		region: resolvedRegion,
+		auth
+	}, resolvedEndpoint);
+	if (resolved.kind === "bearer") return {
+		...rest,
+		baseURL: baseURL ?? buildBaseURL(resolvedRegion, resolvedEndpoint),
+		apiKey: resolved.token,
+		...fetch ? { fetch } : {}
+	};
+	return {
+		...rest,
+		baseURL: baseURL ?? buildBaseURL(resolvedRegion, resolvedEndpoint),
+		apiKey: SIGV4_PLACEHOLDER_KEY,
+		fetch: fetch ?? createSigV4Fetch(resolved)
+	};
 }
-export {
-  resolveBedrockAuth,
-  withBedrockDefaults
-};
-//# sourceMappingURL=client.js.map
+//#endregion
+export { resolveBedrockAuth, withBedrockDefaults };
+
+//# sourceMappingURL=client.js.map

package/dist/esm/utils/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sources":["../../../src/utils/client.ts"],"sourcesContent":["import { resolveBedrockAuth } from './auth'\nimport { createSigV4Fetch } from './openai-sigv4-fetch'\nimport type { ClientOptions } from 'openai'\nimport type { BedrockEndpoint } from './auth'\n\nexport type { BedrockEndpoint } from './auth'\nexport { resolveBedrockAuth } from './auth'\nexport type { ResolvedBedrockAuth } from './auth'\n\nexport interface BedrockClientConfig extends Omit<\n  ClientOptions,\n  'apiKey' | 'baseURL'\n> {\n  /** Bedrock API key (bearer). Optional — falls back to env, then SigV4. */\n  apiKey?: string\n  /** Full AWS region (e.g. 'us-east-1'). Default 'us-east-1'. */\n  region?: string\n  /** Chat adapter only; the responses adapter forces 'mantle'. Default 'runtime'. */\n  endpoint?: BedrockEndpoint\n  /** Auth strategy. Default 'auto' (apiKey → env → SigV4). */\n  auth?: 'apikey' | 'sigv4' | 'auto'\n  /** Explicit override; wins over the computed endpoint URL (used by E2E → aimock). */\n  baseURL?: string\n}\n\nconst DEFAULT_REGION = 'us-east-1'\n/** OpenAI SDK requires a non-empty apiKey even when a signed fetch overrides Authorization. */\nconst SIGV4_PLACEHOLDER_KEY = 'bedrock-sigv4'\n\nfunction buildBaseURL(region: string, endpoint: BedrockEndpoint): string {\n  return endpoint === 'mantle'\n    ? `https://bedrock-mantle.${region}.api.aws/v1`\n    : `https://bedrock-runtime.${region}.amazonaws.com/openai/v1`\n}\n\n/** Builds OpenAI ClientOptions for the requested endpoint. `forced` pins the endpoint (responses → 'mantle'). */\nexport function withBedrockDefaults(\n  config: BedrockClientConfig,\n  forced?: BedrockEndpoint,\n): ClientOptions {\n  const { region, endpoint, auth, apiKey, baseURL, fetch, ...rest } = config\n  const resolvedRegion = region ?? DEFAULT_REGION\n  const resolvedEndpoint = forced ?? endpoint ?? 'runtime'\n  const resolved = resolveBedrockAuth(\n    { apiKey, region: resolvedRegion, auth },\n    resolvedEndpoint,\n  )\n  if (resolved.kind === 'bearer') {\n    return {\n      ...rest,\n      baseURL: baseURL ?? buildBaseURL(resolvedRegion, resolvedEndpoint),\n      apiKey: resolved.token,\n      ...(fetch ? { fetch } : {}),\n    }\n  }\n  return {\n    ...rest,\n    baseURL: baseURL ?? buildBaseURL(resolvedRegion, resolvedEndpoint),\n    apiKey: SIGV4_PLACEHOLDER_KEY,\n    fetch: fetch ?? createSigV4Fetch(resolved),\n  }\n}\n"],"names":[],"mappings":";;AAyBA,MAAM,iBAAiB;AAEvB,MAAM,wBAAwB;AAE9B,SAAS,aAAa,QAAgB,UAAmC;AACvE,SAAO,aAAa,WAChB,0BAA0B,MAAM,gBAChC,2BAA2B,MAAM;AACvC;AAGO,SAAS,oBACd,QACA,QACe;AACf,QAAM,EAAE,QAAQ,UAAU,MAAM,QAAQ,SAAS,OAAO,GAAG,KAAA,IAAS;AACpE,QAAM,iBAAiB,UAAU;AACjC,QAAM,mBAAmB,UAAU,YAAY;AAC/C,QAAM,WAAW;AAAA,IACf,EAAE,QAAQ,QAAQ,gBAAgB,KAAA;AAAA,IAClC;AAAA,EAAA;AAEF,MAAI,SAAS,SAAS,UAAU;AAC9B,WAAO;AAAA,MACL,GAAG;AAAA,MACH,SAAS,WAAW,aAAa,gBAAgB,gBAAgB;AAAA,MACjE,QAAQ,SAAS;AAAA,MACjB,GAAI,QAAQ,EAAE,UAAU,CAAA;AAAA,IAAC;AAAA,EAE7B;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS,WAAW,aAAa,gBAAgB,gBAAgB;AAAA,IACjE,QAAQ;AAAA,IACR,OAAO,SAAS,iBAAiB,QAAQ;AAAA,EAAA;AAE7C;"}
+{"version":3,"file":"client.js","names":[],"sources":["../../../src/utils/client.ts"],"sourcesContent":["import { resolveBedrockAuth } from './auth'\nimport { createSigV4Fetch } from './openai-sigv4-fetch'\nimport type { ClientOptions } from 'openai'\nimport type { BedrockEndpoint } from './auth'\n\nexport type { BedrockEndpoint } from './auth'\nexport { resolveBedrockAuth } from './auth'\nexport type { ResolvedBedrockAuth } from './auth'\n\nexport interface BedrockClientConfig extends Omit<\n  ClientOptions,\n  'apiKey' | 'baseURL'\n> {\n  /** Bedrock API key (bearer). Optional — falls back to env, then SigV4. */\n  apiKey?: string\n  /** Full AWS region (e.g. 'us-east-1'). Default 'us-east-1'. */\n  region?: string\n  /** Chat adapter only; the responses adapter forces 'mantle'. Default 'runtime'. */\n  endpoint?: BedrockEndpoint\n  /** Auth strategy. Default 'auto' (apiKey → env → SigV4). */\n  auth?: 'apikey' | 'sigv4' | 'auto'\n  /** Explicit override; wins over the computed endpoint URL (used by E2E → aimock). */\n  baseURL?: string\n}\n\nconst DEFAULT_REGION = 'us-east-1'\n/** OpenAI SDK requires a non-empty apiKey even when a signed fetch overrides Authorization. */\nconst SIGV4_PLACEHOLDER_KEY = 'bedrock-sigv4'\n\nfunction buildBaseURL(region: string, endpoint: BedrockEndpoint): string {\n  return endpoint === 'mantle'\n    ? `https://bedrock-mantle.${region}.api.aws/v1`\n    : `https://bedrock-runtime.${region}.amazonaws.com/openai/v1`\n}\n\n/** Builds OpenAI ClientOptions for the requested endpoint. `forced` pins the endpoint (responses → 'mantle'). */\nexport function withBedrockDefaults(\n  config: BedrockClientConfig,\n  forced?: BedrockEndpoint,\n): ClientOptions {\n  const { region, endpoint, auth, apiKey, baseURL, fetch, ...rest } = config\n  const resolvedRegion = region ?? DEFAULT_REGION\n  const resolvedEndpoint = forced ?? endpoint ?? 'runtime'\n  const resolved = resolveBedrockAuth(\n    { apiKey, region: resolvedRegion, auth },\n    resolvedEndpoint,\n  )\n  if (resolved.kind === 'bearer') {\n    return {\n      ...rest,\n      baseURL: baseURL ?? buildBaseURL(resolvedRegion, resolvedEndpoint),\n      apiKey: resolved.token,\n      ...(fetch ? { fetch } : {}),\n    }\n  }\n  return {\n    ...rest,\n    baseURL: baseURL ?? buildBaseURL(resolvedRegion, resolvedEndpoint),\n    apiKey: SIGV4_PLACEHOLDER_KEY,\n    fetch: fetch ?? createSigV4Fetch(resolved),\n  }\n}\n"],"mappings":";;;AAyBA,IAAM,iBAAiB;;AAEvB,IAAM,wBAAwB;AAE9B,SAAS,aAAa,QAAgB,UAAmC;CACvE,OAAO,aAAa,WAChB,0BAA0B,OAAO,eACjC,2BAA2B,OAAO;AACxC;;AAGA,SAAgB,oBACd,QACA,QACe;CACf,MAAM,EAAE,QAAQ,UAAU,MAAM,QAAQ,SAAS,OAAO,GAAG,SAAS;CACpE,MAAM,iBAAiB,UAAU;CACjC,MAAM,mBAAmB,UAAU,YAAY;CAC/C,MAAM,WAAW,mBACf;EAAE;EAAQ,QAAQ;EAAgB;CAAK,GACvC,gBACF;CACA,IAAI,SAAS,SAAS,UACpB,OAAO;EACL,GAAG;EACH,SAAS,WAAW,aAAa,gBAAgB,gBAAgB;EACjE,QAAQ,SAAS;EACjB,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;CAC3B;CAEF,OAAO;EACL,GAAG;EACH,SAAS,WAAW,aAAa,gBAAgB,gBAAgB;EACjE,QAAQ;EACR,OAAO,SAAS,iBAAiB,QAAQ;CAC3C;AACF"}

package/dist/esm/utils/openai-sigv4-fetch.js

@@ -1,35 +1,40 @@
 import { SignatureV4 } from "@smithy/signature-v4";
 import { Sha256 } from "@aws-crypto/sha256-js";
+//#region src/utils/openai-sigv4-fetch.ts
+/**
+* Wraps a fetch so each request is SigV4-signed via the AWS signer that ships
+* with `@aws-sdk/client-bedrock-runtime`. Replaces the old aws-sigv4-fetch peer.
+*/
 function createSigV4Fetch(auth, baseFetch = fetch) {
-  const signer = new SignatureV4({
-    service: auth.service,
-    region: auth.region,
-    credentials: auth.credentials,
-    sha256: Sha256
-  });
-  return async (input, init) => {
-    const href = typeof input === "string" ? input : input instanceof Request ? input.url : input.toString();
-    const url = new URL(href);
-    const headers = {};
-    new Headers(init?.headers).forEach((v, k) => headers[k] = v);
-    headers["host"] = url.host;
-    const body = init?.body ?? void 0;
-    const request = {
-      method: init?.method ?? "GET",
-      protocol: url.protocol,
-      hostname: url.hostname,
-      path: url.pathname + url.search,
-      headers,
-      body
-    };
-    const signed = await signer.sign(request);
-    return baseFetch(url.toString(), {
-      ...init,
-      headers: signed.headers
-    });
-  };
+	const signer = new SignatureV4({
+		service: auth.service,
+		region: auth.region,
+		credentials: auth.credentials,
+		sha256: Sha256
+	});
+	return async (input, init) => {
+		const href = typeof input === "string" ? input : input instanceof Request ? input.url : input.toString();
+		const url = new URL(href);
+		const headers = {};
+		new Headers(init?.headers).forEach((v, k) => headers[k] = v);
+		headers["host"] = url.host;
+		const body = init?.body ?? void 0;
+		const request = {
+			method: init?.method ?? "GET",
+			protocol: url.protocol,
+			hostname: url.hostname,
+			path: url.pathname + url.search,
+			headers,
+			body
+		};
+		const signed = await signer.sign(request);
+		return baseFetch(url.toString(), {
+			...init,
+			headers: signed.headers
+		});
+	};
 }
-export {
-  createSigV4Fetch
-};
-//# sourceMappingURL=openai-sigv4-fetch.js.map
+//#endregion
+export { createSigV4Fetch };
+
+//# sourceMappingURL=openai-sigv4-fetch.js.map

package/dist/esm/utils/openai-sigv4-fetch.js.map

@@ -1 +1 @@
-{"version":3,"file":"openai-sigv4-fetch.js","sources":["../../../src/utils/openai-sigv4-fetch.ts"],"sourcesContent":["import { SignatureV4 } from '@smithy/signature-v4'\nimport { Sha256 } from '@aws-crypto/sha256-js'\nimport type { HttpRequest } from '@smithy/types'\nimport type { ResolvedBedrockAuth } from './auth'\n\ntype FetchLike = typeof fetch\n\n/**\n * Wraps a fetch so each request is SigV4-signed via the AWS signer that ships\n * with `@aws-sdk/client-bedrock-runtime`. Replaces the old aws-sigv4-fetch peer.\n */\nexport function createSigV4Fetch(\n  auth: Extract<ResolvedBedrockAuth, { kind: 'sigv4' }>,\n  baseFetch: FetchLike = fetch,\n): FetchLike {\n  const signer = new SignatureV4({\n    service: auth.service,\n    region: auth.region,\n    credentials: auth.credentials,\n    sha256: Sha256,\n  })\n\n  return async (input, init) => {\n    // Request.toString() returns '[object Request]', not the URL — use .url instead.\n    const href =\n      typeof input === 'string'\n        ? input\n        : input instanceof Request\n          ? input.url\n          : input.toString()\n    const url = new URL(href)\n    const headers: Record<string, string> = {}\n    new Headers(init?.headers).forEach((v, k) => (headers[k] = v))\n    headers['host'] = url.host\n\n    const body = init?.body ?? undefined\n\n    // Construct a plain object satisfying the @smithy/types HttpRequest interface —\n    // no @smithy/protocol-http needed.\n    const request: HttpRequest = {\n      method: init?.method ?? 'GET',\n      protocol: url.protocol,\n      hostname: url.hostname,\n      path: url.pathname + url.search,\n      headers,\n      body,\n    }\n\n    const signed = await signer.sign(request)\n    return baseFetch(url.toString(), {\n      ...init,\n      headers: signed.headers as Record<string, string>,\n    })\n  }\n}\n"],"names":[],"mappings":";;AAWO,SAAS,iBACd,MACA,YAAuB,OACZ;AACX,QAAM,SAAS,IAAI,YAAY;AAAA,IAC7B,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,aAAa,KAAK;AAAA,IAClB,QAAQ;AAAA,EAAA,CACT;AAED,SAAO,OAAO,OAAO,SAAS;AAE5B,UAAM,OACJ,OAAO,UAAU,WACb,QACA,iBAAiB,UACf,MAAM,MACN,MAAM,SAAA;AACd,UAAM,MAAM,IAAI,IAAI,IAAI;AACxB,UAAM,UAAkC,CAAA;AACxC,QAAI,QAAQ,MAAM,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAO,QAAQ,CAAC,IAAI,CAAE;AAC7D,YAAQ,MAAM,IAAI,IAAI;AAEtB,UAAM,OAAO,MAAM,QAAQ;AAI3B,UAAM,UAAuB;AAAA,MAC3B,QAAQ,MAAM,UAAU;AAAA,MACxB,UAAU,IAAI;AAAA,MACd,UAAU,IAAI;AAAA,MACd,MAAM,IAAI,WAAW,IAAI;AAAA,MACzB;AAAA,MACA;AAAA,IAAA;AAGF,UAAM,SAAS,MAAM,OAAO,KAAK,OAAO;AACxC,WAAO,UAAU,IAAI,YAAY;AAAA,MAC/B,GAAG;AAAA,MACH,SAAS,OAAO;AAAA,IAAA,CACjB;AAAA,EACH;AACF;"}
+{"version":3,"file":"openai-sigv4-fetch.js","names":[],"sources":["../../../src/utils/openai-sigv4-fetch.ts"],"sourcesContent":["import { SignatureV4 } from '@smithy/signature-v4'\nimport { Sha256 } from '@aws-crypto/sha256-js'\nimport type { HttpRequest } from '@smithy/types'\nimport type { ResolvedBedrockAuth } from './auth'\n\ntype FetchLike = typeof fetch\n\n/**\n * Wraps a fetch so each request is SigV4-signed via the AWS signer that ships\n * with `@aws-sdk/client-bedrock-runtime`. Replaces the old aws-sigv4-fetch peer.\n */\nexport function createSigV4Fetch(\n  auth: Extract<ResolvedBedrockAuth, { kind: 'sigv4' }>,\n  baseFetch: FetchLike = fetch,\n): FetchLike {\n  const signer = new SignatureV4({\n    service: auth.service,\n    region: auth.region,\n    credentials: auth.credentials,\n    sha256: Sha256,\n  })\n\n  return async (input, init) => {\n    // Request.toString() returns '[object Request]', not the URL — use .url instead.\n    const href =\n      typeof input === 'string'\n        ? input\n        : input instanceof Request\n          ? input.url\n          : input.toString()\n    const url = new URL(href)\n    const headers: Record<string, string> = {}\n    new Headers(init?.headers).forEach((v, k) => (headers[k] = v))\n    headers['host'] = url.host\n\n    const body = init?.body ?? undefined\n\n    // Construct a plain object satisfying the @smithy/types HttpRequest interface —\n    // no @smithy/protocol-http needed.\n    const request: HttpRequest = {\n      method: init?.method ?? 'GET',\n      protocol: url.protocol,\n      hostname: url.hostname,\n      path: url.pathname + url.search,\n      headers,\n      body,\n    }\n\n    const signed = await signer.sign(request)\n    return baseFetch(url.toString(), {\n      ...init,\n      headers: signed.headers as Record<string, string>,\n    })\n  }\n}\n"],"mappings":";;;;;;;AAWA,SAAgB,iBACd,MACA,YAAuB,OACZ;CACX,MAAM,SAAS,IAAI,YAAY;EAC7B,SAAS,KAAK;EACd,QAAQ,KAAK;EACb,aAAa,KAAK;EAClB,QAAQ;CACV,CAAC;CAED,OAAO,OAAO,OAAO,SAAS;EAE5B,MAAM,OACJ,OAAO,UAAU,WACb,QACA,iBAAiB,UACf,MAAM,MACN,MAAM,SAAS;EACvB,MAAM,MAAM,IAAI,IAAI,IAAI;EACxB,MAAM,UAAkC,CAAC;EACzC,IAAI,QAAQ,MAAM,OAAO,CAAC,CAAC,SAAS,GAAG,MAAO,QAAQ,KAAK,CAAE;EAC7D,QAAQ,UAAU,IAAI;EAEtB,MAAM,OAAO,MAAM,QAAQ,KAAA;EAI3B,MAAM,UAAuB;GAC3B,QAAQ,MAAM,UAAU;GACxB,UAAU,IAAI;GACd,UAAU,IAAI;GACd,MAAM,IAAI,WAAW,IAAI;GACzB;GACA;EACF;EAEA,MAAM,SAAS,MAAM,OAAO,KAAK,OAAO;EACxC,OAAO,UAAU,IAAI,SAAS,GAAG;GAC/B,GAAG;GACH,SAAS,OAAO;EAClB,CAAC;CACH;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tanstack/ai-bedrock",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "type": "module",
   "description": "Amazon Bedrock adapter for TanStack AI — OpenAI-compatible chat, responses, tools, and reasoning.",
   "author": "",
@@ -36,11 +36,11 @@
   ],
   "devDependencies": {
     "@vitest/coverage-v8": "4.0.14",
-    "vite": "^7.3.3"
+    "vite": "^8.1.4"
   },
   "peerDependencies": {
     "zod": "^4.0.0",
-    "@tanstack/ai": "0.41.0"
+    "@tanstack/ai": "0.43.0"
   },
   "dependencies": {
     "@aws-crypto/sha256-js": "^5.2.0",
@@ -49,14 +49,14 @@
     "@smithy/signature-v4": "^5.4.5",
     "@smithy/types": "^4.14.2",
     "openai": "^6.41.0",
-    "@tanstack/openai-base": "0.9.8"
+    "@tanstack/openai-base": "0.9.10"
   },
   "scripts": {
     "build": "vite build",
     "clean": "premove ./build ./dist",
-    "lint:fix": "eslint ./src --fix",
+    "lint:fix": "oxlint src --type-aware --fix",
     "test:build": "publint --strict",
-    "test:eslint": "eslint ./src",
+    "test:oxlint": "oxlint src --type-aware",
     "test:lib": "vitest run",
     "test:lib:dev": "pnpm test:lib --watch",
     "test:types": "tsc"