lex-bedrock 0.1.2 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e12c7f82bdc05d53d867d8b29ae661f217fad0b4212d415fbae54688c004a80f
-  data.tar.gz: 7ffd2df1e9b2a9578da793a7c890573537f08c27c3d0aaf7a19cc4d5df2f3088
+  metadata.gz: fba4162f800e8419912e30cc4ce1477b5f9894f0f282bd67d3eafa3b61e74d9a
+  data.tar.gz: 2c26974438c1758108c6006c14eba339ede7feb48d6a65c157c1156de2c4dd68
 SHA512:
-  metadata.gz: d5a9f930e1a5f6f409bfd6e99effa0948f9a8a43234ec0c2be6e67c57cdf80d0712d5bdb27c60332f00555e1a73d28fb905cad21a9354593b77821d5adab766d
-  data.tar.gz: 8da2d781f1572ab1e22e7658f5d7618c4820b57db8dcfe2e78e2d4dd403b00545687614d76f8a812191cccd3d3426fa791bb4270ecfe10f4d3691401c8a78c43
+  metadata.gz: 8e3d7990c6e40d37a7ee94a58f2a792ded501d015e318e6d953589a0fe7592e1648dd631e911dc5b37b3f84d1769f7895d0fa628fc652255acb102a8c091c70b
+  data.tar.gz: 4c643c663bbcac6110209a9dcb202e04962689fee2a2268321e91e6543d76476d7bc0d14eddc7efd71e5f76e597d66e8b37f3b97a940e4e41e897f7559bc6b07

data/.github/CODEOWNERS

@@ -0,0 +1,7 @@
+# Auto-generated from team-config.yml
+# Team: ai
+#
+# To apply: scripts/apply-codeowners.sh lex-bedrock
+
+* @LegionIO/maintainers
+* @LegionIO/ai

data/.github/dependabot.yml

@@ -0,0 +1,18 @@
+version: 2
+updates:
+  - package-ecosystem: bundler
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
+    labels:
+      - "type:dependencies"
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
+    labels:
+      - "type:dependencies"

data/.github/workflows/ci.yml

@@ -3,13 +3,31 @@ on:
   push:
     branches: [main]
   pull_request:
+  schedule:
+    - cron: '0 9 * * 1'
 
 jobs:
   ci:
     uses: LegionIO/.github/.github/workflows/ci.yml@main
 
+  excluded-files:
+    uses: LegionIO/.github/.github/workflows/excluded-files.yml@main
+
+  security:
+    uses: LegionIO/.github/.github/workflows/security-scan.yml@main
+
+  version-changelog:
+    uses: LegionIO/.github/.github/workflows/version-changelog.yml@main
+
+  dependency-review:
+    uses: LegionIO/.github/.github/workflows/dependency-review.yml@main
+
+  stale:
+    if: github.event_name == 'schedule'
+    uses: LegionIO/.github/.github/workflows/stale.yml@main
+
   release:
-    needs: ci
+    needs: [ci, excluded-files]
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     uses: LegionIO/.github/.github/workflows/release.yml@main
     secrets:

data/.rubocop.yml

@@ -1,51 +1,2 @@
-AllCops:
-  TargetRubyVersion: 3.4
-  NewCops: enable
-  SuggestExtensions: false
-
-Layout/LineLength:
-  Max: 160
-
-Layout/SpaceAroundEqualsInParameterDefault:
-  EnforcedStyle: space
-
-Layout/HashAlignment:
-  EnforcedHashRocketStyle: table
-  EnforcedColonStyle: table
-
-Metrics/MethodLength:
-  Max: 50
-
-Metrics/ClassLength:
-  Max: 1500
-
-Metrics/ModuleLength:
-  Max: 1500
-
-Metrics/BlockLength:
-  Max: 40
-  Exclude:
-    - 'spec/**/*'
-    - '*.gemspec'
-
-Metrics/AbcSize:
-  Max: 60
-
-Metrics/CyclomaticComplexity:
-  Max: 15
-
-Metrics/PerceivedComplexity:
-  Max: 17
-
-Style/Documentation:
-  Enabled: false
-
-Style/SymbolArray:
-  Enabled: true
-
-Style/FrozenStringLiteralComment:
-  Enabled: true
-  EnforcedStyle: always
-
-Naming/FileName:
-  Enabled: false
+inherit_gem:
+  rubocop-legion: config/lex.yml

data/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## [0.2.0] - 2026-03-31
+
+### Added
+- `Helpers::Errors` — Bedrock exception classification (`ThrottlingException`, `AccessDeniedException`, `ModelNotReadyException`) with exponential backoff retry (`with_retry`)
+- `Helpers::Credentials` — AWS credential caching with TTL-based refresh (3000s default); falls back to SDK default provider chain when no explicit keys given
+- `Helpers::Thinking` — helpers to build `additional_model_request_fields` for extended thinking (`build_thinking_fields`, `sanitize_inference_config`)
+- `Helpers::ModelRegistry` — canonical-to-Bedrock ID mapping for 11 Anthropic models, `resolve`/`known?`/`all` API
+- `Runners::Converse#create_stream` — streaming Converse via `converse_stream` with per-event block callback and full accumulation fallback
+- `Runners::Converse#create_with_thinking` — convenience method that wires thinking betas and config into a single call
+- `Runners::Tokens#count_tokens` — token counting via `CountTokensCommand` with `anthropic_beta`/`thinking` body params
+- `Runners::Profiles` — inference profile listing, lookup, and canonical model ID resolution via `ListInferenceProfiles`/`GetInferenceProfile`
+
+### Changed
+- `Runners::Converse#create` now accepts `top_p`, `top_k`, `stop_sequences`, `tool_config`, `guardrail_config`, `additional_model_request_fields`
+- `Helpers::Client` — `bedrock_runtime_client`/`bedrock_client` now accept a pre-built `credentials:` kwarg; `access_key_id` is now optional (nil triggers SDK default provider chain)
+- `Helpers::Client` — added `region_for_model` for env-var and settings-driven per-model region routing
+- All runner calls wrapped in `Helpers::Errors.with_retry` for production reliability
+- `Legion::Extensions::Bedrock::Client` now includes `Runners::Tokens` and `Runners::Profiles`
+
+## [0.1.3] - 2026-03-30
+
+### Changed
+- update to rubocop-legion 0.1.7, resolve all offenses
+
 ## [0.1.2] - 2026-03-22
 
 ### Changed

data/CLAUDE.md

@@ -0,0 +1,60 @@
+# lex-bedrock: AWS Bedrock Integration for LegionIO
+
+**Repository Level 3 Documentation**
+- **Parent**: `/Users/miverso2/rubymine/legion/extensions-ai/CLAUDE.md`
+- **Grandparent**: `/Users/miverso2/rubymine/legion/CLAUDE.md`
+
+## Purpose
+
+Legion Extension that connects LegionIO to AWS Bedrock for foundation model inference. Provides runners for the Converse API, raw InvokeModel, and model listing using the AWS SDK (not Faraday).
+
+**GitHub**: https://github.com/LegionIO/lex-bedrock
+**License**: MIT
+**Version**: 0.1.2
+**Specs**: 38 examples
+
+## Architecture
+
+```
+Legion::Extensions::Bedrock
+├── Runners/
+│   ├── Converse       # create(model_id:, messages:, access_key_id:, secret_access_key:, ...)
+│   ├── Invoke         # invoke_model(model_id:, body:, access_key_id:, secret_access_key:, ...)
+│   └── Models         # list(access_key_id:, secret_access_key:, ...), get(model_id:, ...)
+├── Helpers/
+│   └── Client         # AWS SDK client factories (module, not Faraday)
+└── Client             # Standalone client class (includes all runners, holds @config)
+```
+
+`Helpers::Client` is a **module** with two factory methods:
+- `bedrock_runtime_client(...)` — builds `Aws::BedrockRuntime::Client` (used by Converse and Invoke runners)
+- `bedrock_client(...)` — builds `Aws::Bedrock::Client` (used by Models runner)
+
+`DEFAULT_REGION` is `'us-east-2'`. All credential kwargs (`access_key_id:`, `secret_access_key:`, `region:`, `session_token:`) are passed through to the AWS SDK constructors. `session_token:` is optional and omitted if nil.
+
+## Key Design Decisions
+
+- This is the only extension in extensions-ai that uses the AWS SDK instead of Faraday. There is no HTTP connection object — SDK clients handle transport.
+- `Invoke#invoke_model` uses `::JSON.dump` and `::JSON.parse` (stdlib, explicit `::` prefix) to avoid namespace collision with `Legion::JSON`.
+- `Converse#create` returns `{ result: response.output, usage: response.usage, stop_reason: response.stop_reason }` — three keys, unlike other runners which return only `{ result: ... }`.
+- `Models#list` returns `{ models: response.model_summaries }` and `Models#get` returns `{ model: response.model_details }`.
+- `include Legion::Extensions::Helpers::Lex` is guarded with `const_defined?` pattern.
+
+## Dependencies
+
+| Gem | Purpose |
+|-----|---------|
+| `aws-sdk-bedrock` | Bedrock management API (model listing) |
+| `aws-sdk-bedrockruntime` | Bedrock runtime API (inference) |
+
+## Testing
+
+```bash
+bundle install
+bundle exec rspec        # 38 examples
+bundle exec rubocop
+```
+
+---
+
+**Maintained By**: Matthew Iverson (@Esity)

data/Gemfile

@@ -5,3 +5,4 @@ gemspec
 
 gem 'rspec'
 gem 'rubocop'
+gem 'rubocop-legion', '~> 0.1'

data/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2021 Esity
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

data/lib/legion/extensions/bedrock/client.rb

@@ -4,6 +4,8 @@ require 'legion/extensions/bedrock/helpers/client'
 require 'legion/extensions/bedrock/runners/models'
 require 'legion/extensions/bedrock/runners/converse'
 require 'legion/extensions/bedrock/runners/invoke'
+require 'legion/extensions/bedrock/runners/tokens'
+require 'legion/extensions/bedrock/runners/profiles'
 
 module Legion
   module Extensions
@@ -12,6 +14,8 @@ module Legion
         include Legion::Extensions::Bedrock::Runners::Models
         include Legion::Extensions::Bedrock::Runners::Converse
         include Legion::Extensions::Bedrock::Runners::Invoke
+        include Legion::Extensions::Bedrock::Runners::Tokens
+        include Legion::Extensions::Bedrock::Runners::Profiles
 
         attr_reader :config
 

data/lib/legion/extensions/bedrock/helpers/client.rb

@@ -12,29 +12,53 @@ module Legion
 
           module_function
 
-          def bedrock_runtime_client(access_key_id:, secret_access_key:, region: DEFAULT_REGION,
-                                     session_token: nil, **)
-            opts = {
-              access_key_id:     access_key_id,
-              secret_access_key: secret_access_key,
-              region:            region
-            }
-            opts[:session_token] = session_token if session_token
-
-            Aws::BedrockRuntime::Client.new(**opts)
+          def bedrock_runtime_client(access_key_id: nil, secret_access_key: nil,
+                                     region: DEFAULT_REGION, session_token: nil,
+                                     credentials: nil, **)
+            Aws::BedrockRuntime::Client.new(
+              region:,
+              credentials: credentials || build_credentials(access_key_id:, secret_access_key:,
+                                                            session_token:)
+            )
           end
 
-          def bedrock_client(access_key_id:, secret_access_key:, region: DEFAULT_REGION,
-                             session_token: nil, **)
-            opts = {
-              access_key_id:     access_key_id,
-              secret_access_key: secret_access_key,
-              region:            region
-            }
-            opts[:session_token] = session_token if session_token
+          def bedrock_client(access_key_id: nil, secret_access_key: nil,
+                             region: DEFAULT_REGION, session_token: nil,
+                             credentials: nil, **)
+            Aws::Bedrock::Client.new(
+              region:,
+              credentials: credentials || build_credentials(access_key_id:, secret_access_key:,
+                                                            session_token:)
+            )
+          end
+
+          def region_for_model(model_id:, region: nil)
+            return region if region
+
+            env_key = "BEDROCK_REGION_#{model_id.upcase.gsub(/[^A-Z0-9]/, '_')}"
+            env_val = ENV.fetch(env_key, nil)
+            return env_val if env_val
+
+            settings_region = begin
+              Legion::Settings[:bedrock]&.dig(:model_regions, model_id.to_sym)
+            rescue StandardError => _e
+              nil
+            end
 
-            Aws::Bedrock::Client.new(**opts)
+            settings_region || DEFAULT_REGION
           end
+
+          def build_credentials(access_key_id:, secret_access_key:, session_token:)
+            return nil if access_key_id.nil?
+
+            if session_token
+              Aws::Credentials.new(access_key_id, secret_access_key, session_token)
+            else
+              Aws::Credentials.new(access_key_id, secret_access_key)
+            end
+          end
+
+          private_class_method :build_credentials
         end
       end
     end

data/lib/legion/extensions/bedrock/helpers/credentials.rb

@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+module Legion
+  module Extensions
+    module Bedrock
+      module Helpers
+        module Credentials
+          CREDENTIAL_TTL = 3000 # seconds — refresh before the typical 1-hour STS TTL
+
+          @credential_cache = {} # rubocop:disable ThreadSafety/MutableClassInstanceVariable
+          @cache_mutex      = ::Mutex.new
+
+          module_function
+
+          def resolve(access_key_id: nil, secret_access_key: nil,
+                      session_token: nil, region: 'us-east-2', **)
+            return default_credentials if access_key_id.nil?
+
+            cache_key = "#{access_key_id}/#{region}"
+            @cache_mutex.synchronize do
+              entry = @credential_cache[cache_key]
+              if entry.nil? || stale?(entry)
+                @credential_cache[cache_key] = {
+                  credentials: build_static(
+                    access_key_id:,
+                    secret_access_key:,
+                    session_token:
+                  ),
+                  fetched_at:  ::Process.clock_gettime(::Process::CLOCK_MONOTONIC)
+                }
+              end
+              @credential_cache[cache_key][:credentials]
+            end
+          end
+
+          def clear_cache!
+            @cache_mutex.synchronize { @credential_cache.clear }
+          end
+
+          def default_credentials
+            Aws::Credentials.new(nil, nil) # triggers SDK default chain
+          end
+
+          def build_static(access_key_id:, secret_access_key:, session_token:)
+            if session_token
+              Aws::Credentials.new(access_key_id, secret_access_key, session_token)
+            else
+              Aws::Credentials.new(access_key_id, secret_access_key)
+            end
+          end
+
+          def stale?(entry)
+            elapsed = ::Process.clock_gettime(::Process::CLOCK_MONOTONIC) - entry[:fetched_at]
+            elapsed >= CREDENTIAL_TTL
+          end
+
+          private_class_method :default_credentials, :build_static, :stale?
+        end
+      end
+    end
+  end
+end

data/lib/legion/extensions/bedrock/helpers/errors.rb

@@ -0,0 +1,65 @@
+# frozen_string_literal: true
+
+module Legion
+  module Extensions
+    module Bedrock
+      module Helpers
+        module Errors
+          THROTTLING_ERRORS = %w[
+            Aws::BedrockRuntime::Errors::ThrottlingException
+            Aws::BedrockRuntime::Errors::ServiceUnavailableException
+            Aws::Bedrock::Errors::ThrottlingException
+            Aws::Bedrock::Errors::ServiceUnavailableException
+          ].freeze
+
+          ACCESS_ERRORS = %w[
+            Aws::BedrockRuntime::Errors::AccessDeniedException
+            Aws::Bedrock::Errors::AccessDeniedException
+          ].freeze
+
+          MODEL_ERRORS = %w[
+            Aws::BedrockRuntime::Errors::ModelNotReadyException
+            Aws::BedrockRuntime::Errors::ModelTimeoutException
+            Aws::BedrockRuntime::Errors::ModelErrorException
+          ].freeze
+
+          MAX_RETRIES   = 3
+          BASE_DELAY    = 0.5  # seconds
+          MAX_DELAY     = 16.0 # seconds
+
+          module_function
+
+          def throttling_error?(exception)
+            THROTTLING_ERRORS.include?(exception.class.name)
+          end
+
+          def access_error?(exception)
+            ACCESS_ERRORS.include?(exception.class.name)
+          end
+
+          def model_error?(exception)
+            MODEL_ERRORS.include?(exception.class.name)
+          end
+
+          def retryable?(exception)
+            throttling_error?(exception)
+          end
+
+          def with_retry(max_retries: MAX_RETRIES)
+            attempts = 0
+            begin
+              yield
+            rescue StandardError => e
+              attempts += 1
+              raise unless retryable?(e) && attempts <= max_retries
+
+              delay = [BASE_DELAY * (2**(attempts - 1)), MAX_DELAY].min
+              sleep(delay)
+              retry
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/legion/extensions/bedrock/helpers/model_registry.rb

@@ -0,0 +1,47 @@
+# frozen_string_literal: true
+
+module Legion
+  module Extensions
+    module Bedrock
+      module Helpers
+        module ModelRegistry
+          # Maps canonical model names to their AWS Bedrock cross-region inference profile IDs.
+          # Use the us.* cross-region IDs for best availability.
+          MODELS = {
+            'claude-3-5-haiku-20241022'  => 'us.anthropic.claude-3-5-haiku-20241022-v1:0',
+            'claude-haiku-4-5-20251001'  => 'us.anthropic.claude-haiku-4-5-20251001-v1:0',
+            'claude-3-5-sonnet-20241022' => 'anthropic.claude-3-5-sonnet-20241022-v2:0',
+            'claude-3-7-sonnet-20250219' => 'us.anthropic.claude-3-7-sonnet-20250219-v1:0',
+            'claude-sonnet-4-20250514'   => 'us.anthropic.claude-sonnet-4-20250514-v1:0',
+            'claude-sonnet-4-5-20250929' => 'us.anthropic.claude-sonnet-4-5-20250929-v1:0',
+            'claude-sonnet-4-6'          => 'us.anthropic.claude-sonnet-4-6',
+            'claude-opus-4-20250514'     => 'us.anthropic.claude-opus-4-20250514-v1:0',
+            'claude-opus-4-1-20250805'   => 'us.anthropic.claude-opus-4-1-20250805-v1:0',
+            'claude-opus-4-5-20251101'   => 'us.anthropic.claude-opus-4-5-20251101-v1:0',
+            'claude-opus-4-6'            => 'us.anthropic.claude-opus-4-6-v1'
+          }.freeze
+
+          module_function
+
+          def resolve(model_id)
+            return model_id if bedrock_id?(model_id)
+
+            MODELS.fetch(model_id, model_id)
+          end
+
+          def known?(model_id)
+            MODELS.key?(model_id)
+          end
+
+          def all
+            MODELS.dup
+          end
+
+          def bedrock_id?(model_id)
+            model_id.include?('.') || model_id.include?(':')
+          end
+        end
+      end
+    end
+  end
+end

data/lib/legion/extensions/bedrock/helpers/thinking.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+module Legion
+  module Extensions
+    module Bedrock
+      module Helpers
+        module Thinking
+          THINKING_BETA       = 'interleaved-thinking-2025-05-14'
+          CONTEXT_1M_BETA     = 'context-1m-2025-08-07'
+          TOOL_SEARCH_BETA    = 'tool-search-tool-2025-10-19'
+
+          module_function
+
+          def build_thinking_fields(budget_tokens: nil, adaptive: false, extra_betas: [])
+            betas   = [THINKING_BETA] + Array(extra_betas)
+            fields  = { anthropic_beta: betas }
+
+            thinking = if adaptive || budget_tokens.nil?
+                         { type: 'adaptive' }
+                       else
+                         { type: 'enabled', budget_tokens: }
+                       end
+
+            fields[:thinking] = thinking
+            fields
+          end
+
+          def sanitize_inference_config(inference_config:, thinking_enabled:)
+            return inference_config unless thinking_enabled
+
+            inference_config.except(:temperature)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/legion/extensions/bedrock/runners/converse.rb

@@ -1,6 +1,8 @@
 # frozen_string_literal: true
 
 require 'legion/extensions/bedrock/helpers/client'
+require 'legion/extensions/bedrock/helpers/errors'
+require 'legion/extensions/bedrock/helpers/thinking'
 
 module Legion
   module Extensions
@@ -9,24 +11,23 @@ module Legion
         module Converse
           def create(model_id:, messages:, access_key_id:, secret_access_key:, # rubocop:disable Metrics/ParameterLists
                      system: nil, max_tokens: 1024, temperature: nil,
+                     top_p: nil, top_k: nil, stop_sequences: nil,
+                     tool_config: nil, guardrail_config: nil,
+                     additional_model_request_fields: nil,
                      region: Helpers::Client::DEFAULT_REGION, **)
             client = Helpers::Client.bedrock_runtime_client(
-              access_key_id:     access_key_id,
-              secret_access_key: secret_access_key,
-              region:            region
+              access_key_id:,
+              secret_access_key:,
+              region:
             )
 
-            inference_config = { max_tokens: max_tokens }
-            inference_config[:temperature] = temperature if temperature
-
-            request = {
-              model_id:         model_id,
-              messages:         messages,
-              inference_config: inference_config
-            }
-            request[:system] = [{ text: system }] if system
+            request = build_converse_request(
+              model_id:, messages:, system:, max_tokens:, temperature:,
+              top_p:, top_k:, stop_sequences:, tool_config:,
+              guardrail_config:, additional_model_request_fields:
+            )
 
-            response = client.converse(**request)
+            response = Helpers::Errors.with_retry { client.converse(**request) }
             {
               result:      response.output,
               usage:       response.usage,
@@ -34,8 +35,114 @@ module Legion
             }
           end
 
-          include Legion::Extensions::Helpers::Lex if Legion::Extensions.const_defined?(:Helpers) &&
-                                                      Legion::Extensions::Helpers.const_defined?(:Lex)
+          def create_stream(model_id:, messages:, access_key_id:, secret_access_key:, # rubocop:disable Metrics/ParameterLists
+                            system: nil, max_tokens: 1024, temperature: nil,
+                            top_p: nil, top_k: nil, stop_sequences: nil,
+                            tool_config: nil, guardrail_config: nil,
+                            additional_model_request_fields: nil,
+                            region: Helpers::Client::DEFAULT_REGION, **,
+                            &block)
+            client = Helpers::Client.bedrock_runtime_client(
+              access_key_id:,
+              secret_access_key:,
+              region:
+            )
+
+            request = build_converse_request(
+              model_id:, messages:, system:, max_tokens:, temperature:,
+              top_p:, top_k:, stop_sequences:, tool_config:,
+              guardrail_config:, additional_model_request_fields:
+            )
+
+            accumulated_text = +''
+            final_usage      = nil
+            final_stop       = nil
+
+            Helpers::Errors.with_retry do
+              client.converse_stream(**request) do |stream|
+                stream.on_content_block_delta_event do |event|
+                  delta = event.delta
+                  text  = delta.respond_to?(:text) ? delta.text : nil
+                  next if text.nil?
+
+                  accumulated_text << text
+                  block&.call(type: :delta, text:)
+                end
+
+                stream.on_message_stop_event do |event|
+                  final_stop = event.stop_reason
+                  block&.call(type: :stop, stop_reason: final_stop)
+                end
+
+                stream.on_metadata_event do |event|
+                  final_usage = event.usage
+                  block&.call(type: :usage, usage: final_usage)
+                end
+              end
+            end
+
+            {
+              result:      accumulated_text,
+              usage:       final_usage,
+              stop_reason: final_stop
+            }
+          end
+
+          def create_with_thinking(model_id:, messages:, access_key_id:, secret_access_key:, # rubocop:disable Metrics/ParameterLists
+                                   budget_tokens: nil, adaptive: false, extra_betas: [],
+                                   system: nil, max_tokens: 16_000,
+                                   region: Helpers::Client::DEFAULT_REGION, **opts)
+            thinking_fields = Helpers::Thinking.build_thinking_fields(
+              budget_tokens:, adaptive:, extra_betas:
+            )
+
+            # Merge with any caller-supplied additional_model_request_fields
+            amrf = opts.delete(:additional_model_request_fields) || {}
+            merged_amrf = thinking_fields.merge(amrf) do |_key, thinking_val, caller_val|
+              thinking_val.is_a?(Array) ? thinking_val | Array(caller_val) : caller_val
+            end
+
+            create(
+              model_id:, messages:, access_key_id:, secret_access_key:,
+              system:, max_tokens:, region:,
+              additional_model_request_fields: merged_amrf,
+              **opts
+            )
+          end
+
+          private
+
+          def build_converse_request(model_id:, messages:, system:, max_tokens:, # rubocop:disable Metrics/ParameterLists
+                                     temperature:, top_p:, top_k:, stop_sequences:,
+                                     tool_config:, guardrail_config:,
+                                     additional_model_request_fields:)
+            inference_config = { max_tokens: }
+            inference_config[:temperature]    = temperature    if temperature
+            inference_config[:top_p]          = top_p          if top_p
+            inference_config[:stop_sequences] = stop_sequences if stop_sequences
+
+            request = {
+              model_id:,
+              messages:,
+              inference_config:
+            }
+            request[:system]                            = [{ text: system }] if system
+            request[:tool_config]                       = tool_config                  if tool_config
+            request[:guardrail_config]                  = guardrail_config             if guardrail_config
+            request[:additional_model_request_fields]   = additional_model_request_fields \
+              if additional_model_request_fields
+
+            # top_k goes in additional_model_request_fields for Anthropic models
+            if top_k
+              request[:additional_model_request_fields] ||= {}
+              request[:additional_model_request_fields][:top_k] = top_k
+            end
+
+            request
+          end
+
+          include Legion::Extensions::Helpers::Lex if Legion::Extensions.const_defined?(:Helpers, false) &&
+                                                      Legion::Extensions::Helpers.const_defined?(:Lex, false)
         end
       end
     end

data/lib/legion/extensions/bedrock/runners/invoke.rb

@@ -8,7 +8,7 @@ module Legion
     module Bedrock
       module Runners
         module Invoke
-          def invoke_model(model_id:, body:, access_key_id:, secret_access_key:, # rubocop:disable Metrics/ParameterLists
+          def invoke_model(model_id:, body:, access_key_id:, secret_access_key:,
                            content_type: 'application/json', accept: 'application/json',
                            region: Helpers::Client::DEFAULT_REGION, **)
             client = Helpers::Client.bedrock_runtime_client(
@@ -30,8 +30,8 @@ module Legion
             }
           end
 
-          include Legion::Extensions::Helpers::Lex if Legion::Extensions.const_defined?(:Helpers) &&
-                                                      Legion::Extensions::Helpers.const_defined?(:Lex)
+          include Legion::Extensions::Helpers::Lex if Legion::Extensions.const_defined?(:Helpers, false) &&
+                                                      Legion::Extensions::Helpers.const_defined?(:Lex, false)
         end
       end
     end

data/lib/legion/extensions/bedrock/runners/models.rb

@@ -27,8 +27,8 @@ module Legion
             { model: response.model_details }
           end
 
-          include Legion::Extensions::Helpers::Lex if Legion::Extensions.const_defined?(:Helpers) &&
-                                                      Legion::Extensions::Helpers.const_defined?(:Lex)
+          include Legion::Extensions::Helpers::Lex if Legion::Extensions.const_defined?(:Helpers, false) &&
+                                                      Legion::Extensions::Helpers.const_defined?(:Lex, false)
         end
       end
     end

data/lib/legion/extensions/bedrock/runners/profiles.rb

@@ -0,0 +1,63 @@
+# frozen_string_literal: true
+
+require 'legion/extensions/bedrock/helpers/client'
+require 'legion/extensions/bedrock/helpers/errors'
+
+module Legion
+  module Extensions
+    module Bedrock
+      module Runners
+        module Profiles
+          def list_inference_profiles(access_key_id:, secret_access_key:,
+                                      profile_type: 'SYSTEM_DEFINED',
+                                      region: Helpers::Client::DEFAULT_REGION, **)
+            client = Helpers::Client.bedrock_client(
+              access_key_id:,
+              secret_access_key:,
+              region:
+            )
+
+            response = Helpers::Errors.with_retry do
+              client.list_inference_profiles(type_equals: profile_type)
+            end
+
+            { inference_profiles: response.inference_profile_summaries }
+          end
+
+          def get_inference_profile(profile_id:, access_key_id:, secret_access_key:,
+                                    region: Helpers::Client::DEFAULT_REGION, **)
+            client = Helpers::Client.bedrock_client(
+              access_key_id:,
+              secret_access_key:,
+              region:
+            )
+
+            response = Helpers::Errors.with_retry do
+              client.get_inference_profile(inference_profile_identifier: profile_id)
+            end
+
+            { inference_profile: response }
+          end
+
+          def resolve_profile_id(canonical_model_id:, access_key_id:, secret_access_key:,
+                                 region: Helpers::Client::DEFAULT_REGION, **)
+            result = list_inference_profiles(
+              access_key_id:, secret_access_key:, region:
+            )
+            profiles = result[:inference_profiles]
+
+            matched = profiles.find do |p|
+              p.respond_to?(:models) &&
+                Array(p.models).any? { |m| m.model_arn.to_s.include?(canonical_model_id) }
+            end
+
+            matched ? matched.inference_profile_id : canonical_model_id
+          end
+
+          include Legion::Extensions::Helpers::Lex if Legion::Extensions.const_defined?(:Helpers, false) &&
+                                                      Legion::Extensions::Helpers.const_defined?(:Lex, false)
+        end
+      end
+    end
+  end
+end

data/lib/legion/extensions/bedrock/runners/tokens.rb

@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+require 'legion/extensions/bedrock/helpers/client'
+require 'legion/extensions/bedrock/helpers/errors'
+
+module Legion
+  module Extensions
+    module Bedrock
+      module Runners
+        module Tokens
+          def count_tokens(model_id:, messages:, access_key_id:, secret_access_key:, # rubocop:disable Metrics/ParameterLists
+                           system: nil, tools: nil, anthropic_version: 'bedrock-2023-05-31',
+                           anthropic_beta: nil, thinking: nil,
+                           region: Helpers::Client::DEFAULT_REGION, **)
+            client = Helpers::Client.bedrock_runtime_client(
+              access_key_id:,
+              secret_access_key:,
+              region:
+            )
+
+            request = build_count_tokens_request(
+              model_id:, messages:, system:, tools:,
+              anthropic_version:, anthropic_beta:, thinking:
+            )
+
+            response = Helpers::Errors.with_retry { client.count_tokens(**request) }
+            {
+              input_token_count: response.input_tokens
+            }
+          end
+
+          private
+
+          def build_count_tokens_request(model_id:, messages:, system:, tools:,
+                                         anthropic_version:, anthropic_beta:, thinking:)
+            body_fields = { anthropic_version: }
+            body_fields[:anthropic_beta] = anthropic_beta if anthropic_beta
+            body_fields[:thinking]       = thinking if thinking
+
+            request = {
+              model_id:,
+              messages:,
+              system:                          system ? [{ text: system }] : nil,
+              additional_model_request_fields: body_fields
+            }
+            request[:tools] = tools if tools
+            request.compact
+          end
+
+          include Legion::Extensions::Helpers::Lex if Legion::Extensions.const_defined?(:Helpers, false) &&
+                                                      Legion::Extensions::Helpers.const_defined?(:Lex, false)
+        end
+      end
+    end
+  end
+end

data/lib/legion/extensions/bedrock/version.rb

@@ -3,7 +3,7 @@
 module Legion
   module Extensions
     module Bedrock
-      VERSION = '0.1.2'
+      VERSION = '0.2.0'
     end
   end
 end

data/lib/legion/extensions/bedrock.rb

@@ -2,14 +2,20 @@
 
 require 'legion/extensions/bedrock/version'
 require 'legion/extensions/bedrock/helpers/client'
+require 'legion/extensions/bedrock/helpers/errors'
+require 'legion/extensions/bedrock/helpers/credentials'
+require 'legion/extensions/bedrock/helpers/thinking'
+require 'legion/extensions/bedrock/helpers/model_registry'
 require 'legion/extensions/bedrock/runners/models'
 require 'legion/extensions/bedrock/runners/converse'
 require 'legion/extensions/bedrock/runners/invoke'
+require 'legion/extensions/bedrock/runners/tokens'
+require 'legion/extensions/bedrock/runners/profiles'
 
 module Legion
   module Extensions
     module Bedrock
-      extend Legion::Extensions::Core if Legion::Extensions.const_defined? :Core
+      extend Legion::Extensions::Core if Legion::Extensions.const_defined? :Core, false
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lex-bedrock
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.2.0
 platform: ruby
 authors:
 - Esity
@@ -142,20 +142,30 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/CODEOWNERS"
+- ".github/dependabot.yml"
 - ".github/workflows/ci.yml"
 - ".gitignore"
 - ".rspec"
 - ".rubocop.yml"
 - CHANGELOG.md
+- CLAUDE.md
 - Gemfile
+- LICENSE
 - README.md
 - lex-bedrock.gemspec
 - lib/legion/extensions/bedrock.rb
 - lib/legion/extensions/bedrock/client.rb
 - lib/legion/extensions/bedrock/helpers/client.rb
+- lib/legion/extensions/bedrock/helpers/credentials.rb
+- lib/legion/extensions/bedrock/helpers/errors.rb
+- lib/legion/extensions/bedrock/helpers/model_registry.rb
+- lib/legion/extensions/bedrock/helpers/thinking.rb
 - lib/legion/extensions/bedrock/runners/converse.rb
 - lib/legion/extensions/bedrock/runners/invoke.rb
 - lib/legion/extensions/bedrock/runners/models.rb
+- lib/legion/extensions/bedrock/runners/profiles.rb
+- lib/legion/extensions/bedrock/runners/tokens.rb
 - lib/legion/extensions/bedrock/version.rb
 homepage: https://github.com/LegionIO/lex-bedrock
 licenses: