@smithy/core

Redact sensitive fields within list items and map values in schema-based logging.

Let clients offer a service default idle timeout to the request handler through updateHttpClientConfig, taken only when the handler has none of its own.

Export the shared writeKey helper and include headers named after Object prototype properties in canonical request signatures.

Add AbstractRpcV2Protocol, a shared abstract base for the Smithy RPC v2 JSON and CBOR client protocols, deduplicating their request framing and response status handling.

Add Smithy RPC v2 JSON protocol support: client protocol and JSON codec in @smithy/core, server protocol in @smithy/server-common, and the snapshot response serializer in @smithy/snapshot-testing.

Treat any non-200 response as an error in the Smithy RPC v2 JSON and CBOR client protocols, per the specification. RpcProtocol gains a protected isErrorResponse predicate (default unchanged: status >= 300) that both RPC v2 protocols override to status !== 200.

Add event stream header size validations

Cache schema-based detection of event streams

dbdacac: Keep the JSON string serializer's buffer reservation intact after 6-byte escape sequences so that the characters and closing quote that follow are always written within the buffer.

Add JSON codec (protocols/json) with v1/v2 serializers and deserializers, reviver/replacer precision handling, benchmarks, and the client protocol.

Fix endpoint cache key collision between empty-string and absent parameters

Fix for SDK ServiceException instanceof detection relating to mangled class names

Restore a compat name-string fallback in ServiceException instanceof for clients predating shapeId stamping, gated on a class-name length of at least 6

Add per-request MetricsRecorder support through client.send(command, { metricsRecorder })

CBOR spec error handling fixes: the error identifier namespace is no longer incorrectly removed during error lookup. Code property from the body is no longer used as a fallback for error identification. Status code 500 is now classified as server fault.

Error and backpressure fixes for AWS chunked encoding streams

Add custom error classes to identify and differentiate Smithy runtime errors from other errors.

Identify AbortError as terminal

Handle exponent notation when serializing NumericValue wrappers

Switch for-in loops to guarded

Restore npm provenance attestations. No functional changes.

Fix for RPC protocol event stream initial messages

Offer the client logger to request handlers as a fallback without overwriting a handler's own logger. A NoOpLogger is not offered, so handlers keep their console-based defaults.

Switch cbor codec to use single-pass (v2) shape serializer and deserializer

Add single pass cbor serializer and deserializers

Updating errors list for clock skew errors (retryable)

Set NumericValue accepted values to Smithy RPCv2 JSON spec

Update large map threshold in cbor

Fix for event stream events - throw the specific modeled error class instead of a generic Error

Add missing service-specific endpoint features

Handle early closure of underlying stream in ChecksumStream

Add typesVersions entries for submodules so TypeScript <4.5 consumers resolve submodule types

Types updates for isolatedModules=true

Make ChecksumStream a Readable that consumes its source directly

Add internal higher order factory for Command classes

Move endpoint instructions types from core to types to fix the type of the instruction supplier static method of Command classes

Add IMDSv2 region fallback to NODE_REGION_CONFIG_OPTIONS default, consolidated with defaults-mode region inference.

Use internal checksum implementations

Add crc32 and sha256 checksum impls

Clean up ChecksumStream's source stream when destroyed.

Validates hostLabel input

CBOR performance improvements

Deferred loading for core/event-streams for use in client config initializers

Update dist-cjs output format to use plain require/exports statements

Update author URL in package.json to be more specific

Add upper bound for Retry-After delay in deprecated StandardRetryStrategy

Fix call to setTimeout in DefaultRateLimiter, browser compatibility

Update adaptive rate limiter to execute directly prior to outgoing requests & retries

Treat the Node.js DNS error code EAI_AGAIN as a transient (retryable) error

Remove and prevent circular file-level dependencies

Add bundler compatibility for tsup

Fix for browser utf8 variant not to include Buffer (Node.js)

Fix for uuid generation in Node.js 18.x

Retrieve schemas with matching shape name if unambiguous

Consolidate core/retry and related cleanup

Consolidation for core/protocols

Consolidate packages into core/serde

Reduce intermediate allocations in hot paths

Remove unnecessary shallow copy of input object and delete operations in HttpBindingProtocol.serializeRequest and RpcProtocol.serializeRequest. The body serializer is schema-driven and only reads members listed in the payload schema, making the spread and deletes redundant. This eliminates an O(n) copy and 5 delete operations per request.

schema: Add caching to NormalizedSchema.of() and translateTraits()

Apply resolved endpoint headers to final request

Fix typo in thrown error message

Default event stream body to empty byte array