@animalabs/membrane 0.5.4 → 0.5.5

package/dist/providers/bedrock.d.ts

@@ -0,0 +1,43 @@
+/**
+ * AWS Bedrock provider adapter for Anthropic Claude models
+ *
+ * Uses the Anthropic Messages API format through AWS Bedrock.
+ */
+import type { ProviderAdapter, ProviderRequest, ProviderRequestOptions, ProviderResponse, StreamCallbacks } from '../types/index.js';
+export interface BedrockAdapterConfig {
+    /** AWS access key ID */
+    accessKeyId?: string;
+    /** AWS secret access key */
+    secretAccessKey?: string;
+    /** AWS region (defaults to us-west-2) */
+    region?: string;
+    /** AWS session token (for temporary credentials) */
+    sessionToken?: string;
+    /** Default max tokens */
+    defaultMaxTokens?: number;
+    /** Anthropic API version header (defaults to 2023-06-01) */
+    anthropicVersion?: string;
+}
+export declare class BedrockAdapter implements ProviderAdapter {
+    readonly name = "bedrock";
+    private accessKeyId;
+    private secretAccessKey;
+    private sessionToken?;
+    private region;
+    private defaultMaxTokens;
+    private anthropicVersion;
+    constructor(config?: BedrockAdapterConfig);
+    supportsModel(modelId: string): boolean;
+    /**
+     * Convert a standard Claude model ID to Bedrock format if needed
+     */
+    private toBedrockModelId;
+    complete(request: ProviderRequest, options?: ProviderRequestOptions): Promise<ProviderResponse>;
+    stream(request: ProviderRequest, callbacks: StreamCallbacks, options?: ProviderRequestOptions): Promise<ProviderResponse>;
+    private buildRequest;
+    private invokeModel;
+    private invokeModelWithStream;
+    private parseResponse;
+    private handleError;
+}
+//# sourceMappingURL=bedrock.d.ts.map

package/dist/providers/bedrock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bedrock.d.ts","sourceRoot":"","sources":["../../src/providers/bedrock.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EAEhB,MAAM,mBAAmB,CAAC;AAc3B,MAAM,WAAW,oBAAoB;IACnC,wBAAwB;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,4BAA4B;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,yBAAyB;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,4DAA4D;IAC5D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AA8LD,qBAAa,cAAe,YAAW,eAAe;IACpD,QAAQ,CAAC,IAAI,aAAa;IAE1B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,gBAAgB,CAAS;gBAErB,MAAM,GAAE,oBAAyB;IAa7C,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAKvC;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAwBlB,QAAQ,CACZ,OAAO,EAAE,eAAe,EACxB,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,gBAAgB,CAAC;IActB,MAAM,CACV,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,eAAe,EAC1B,OAAO,CAAC,EAAE,sBAAsB,GAC/B,OAAO,CAAC,gBAAgB,CAAC;IAa5B,OAAO,CAAC,YAAY;YAsCN,WAAW;YA0CX,qBAAqB;IAwLnC,OAAO,CAAC,aAAa;IAsCrB,OAAO,CAAC,WAAW;CAkCpB"}

package/dist/providers/bedrock.js

@@ -0,0 +1,443 @@
+/**
+ * AWS Bedrock provider adapter for Anthropic Claude models
+ *
+ * Uses the Anthropic Messages API format through AWS Bedrock.
+ */
+import { MembraneError, rateLimitError, contextLengthError, authError, serverError, abortError, } from '../types/index.js';
+// ============================================================================
+// AWS Signature V4 Implementation
+// ============================================================================
+async function hmacSha256(key, data) {
+    const cryptoKey = await crypto.subtle.importKey('raw', key, { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+    return crypto.subtle.sign('HMAC', cryptoKey, new TextEncoder().encode(data));
+}
+async function sha256(data) {
+    const hash = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(data));
+    return Array.from(new Uint8Array(hash))
+        .map(b => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+async function getSignatureKey(secretKey, dateStamp, region, service) {
+    const kDate = await hmacSha256(new TextEncoder().encode('AWS4' + secretKey), dateStamp);
+    const kRegion = await hmacSha256(kDate, region);
+    const kService = await hmacSha256(kRegion, service);
+    return hmacSha256(kService, 'aws4_request');
+}
+function getAmzDate() {
+    const now = new Date();
+    const amzDate = now.toISOString().replace(/[:-]|\.\d{3}/g, '');
+    const dateStamp = amzDate.slice(0, 8);
+    return { amzDate, dateStamp };
+}
+async function signRequest(method, url, headers, body, accessKeyId, secretAccessKey, sessionToken, region, service) {
+    const { amzDate, dateStamp } = getAmzDate();
+    // Prepare headers for signing
+    const signedHeaders = {
+        ...headers,
+        host: url.host,
+        'x-amz-date': amzDate,
+    };
+    if (sessionToken) {
+        signedHeaders['x-amz-security-token'] = sessionToken;
+    }
+    // Create canonical request
+    const sortedHeaderKeys = Object.keys(signedHeaders).sort();
+    const canonicalHeaders = sortedHeaderKeys
+        .map(k => `${k.toLowerCase()}:${signedHeaders[k]?.trim()}`)
+        .join('\n') + '\n';
+    const signedHeadersList = sortedHeaderKeys.map(k => k.toLowerCase()).join(';');
+    const payloadHash = await sha256(body);
+    // URI-encode path components for canonical request (AWS SigV4 requirement)
+    // AWS requires double-encoding: %3A in the URL becomes %253A in the canonical request
+    // We encode each segment without decoding first to achieve double-encoding
+    const canonicalUri = url.pathname
+        .split('/')
+        .map(segment => encodeURIComponent(segment))
+        .join('/');
+    const canonicalRequest = [
+        method,
+        canonicalUri,
+        url.search.slice(1), // Remove leading '?'
+        canonicalHeaders,
+        signedHeadersList,
+        payloadHash,
+    ].join('\n');
+    // Create string to sign
+    const algorithm = 'AWS4-HMAC-SHA256';
+    const credentialScope = `${dateStamp}/${region}/${service}/aws4_request`;
+    const stringToSign = [
+        algorithm,
+        amzDate,
+        credentialScope,
+        await sha256(canonicalRequest),
+    ].join('\n');
+    // Calculate signature
+    const signingKey = await getSignatureKey(secretAccessKey, dateStamp, region, service);
+    const signatureBuffer = await hmacSha256(signingKey, stringToSign);
+    const signature = Array.from(new Uint8Array(signatureBuffer))
+        .map(b => b.toString(16).padStart(2, '0'))
+        .join('');
+    // Create authorization header
+    const authorization = `${algorithm} Credential=${accessKeyId}/${credentialScope}, SignedHeaders=${signedHeadersList}, Signature=${signature}`;
+    return {
+        ...signedHeaders,
+        authorization,
+    };
+}
+// ============================================================================
+// Bedrock Adapter
+// ============================================================================
+export class BedrockAdapter {
+    name = 'bedrock';
+    accessKeyId;
+    secretAccessKey;
+    sessionToken;
+    region;
+    defaultMaxTokens;
+    anthropicVersion;
+    constructor(config = {}) {
+        this.accessKeyId = config.accessKeyId ?? process.env.AWS_ACCESS_KEY_ID ?? '';
+        this.secretAccessKey = config.secretAccessKey ?? process.env.AWS_SECRET_ACCESS_KEY ?? '';
+        this.sessionToken = config.sessionToken ?? process.env.AWS_SESSION_TOKEN;
+        this.region = config.region ?? process.env.AWS_REGION ?? 'us-west-2';
+        this.defaultMaxTokens = config.defaultMaxTokens ?? 4096;
+        this.anthropicVersion = config.anthropicVersion ?? 'bedrock-2023-05-31';
+        if (!this.accessKeyId || !this.secretAccessKey) {
+            throw new Error('AWS credentials required: accessKeyId and secretAccessKey');
+        }
+    }
+    supportsModel(modelId) {
+        // Support both Bedrock model IDs and standard Claude model IDs
+        return modelId.includes('claude') || modelId.startsWith('anthropic.');
+    }
+    /**
+     * Convert a standard Claude model ID to Bedrock format if needed
+     */
+    toBedrockModelId(modelId) {
+        // If already in Bedrock format, use as-is
+        if (modelId.startsWith('anthropic.')) {
+            return modelId;
+        }
+        // Map common Claude model IDs to Bedrock format
+        const modelMap = {
+            'claude-3-5-sonnet-20241022': 'anthropic.claude-3-5-sonnet-20241022-v2:0',
+            'claude-3-5-sonnet-latest': 'anthropic.claude-3-5-sonnet-20241022-v2:0',
+            'claude-3-5-haiku-20241022': 'anthropic.claude-3-5-haiku-20241022-v1:0',
+            'claude-3-5-haiku-latest': 'anthropic.claude-3-5-haiku-20241022-v1:0',
+            'claude-3-opus-20240229': 'anthropic.claude-3-opus-20240229-v1:0',
+            'claude-3-sonnet-20240229': 'anthropic.claude-3-sonnet-20240229-v1:0',
+            'claude-3-haiku-20240307': 'anthropic.claude-3-haiku-20240307-v1:0',
+            'claude-sonnet-4-20250514': 'anthropic.claude-sonnet-4-20250514-v1:0',
+            'claude-opus-4-20250514': 'anthropic.claude-opus-4-20250514-v1:0',
+            // Haiku 4.5 aliases
+            'claude-haiku-4-5-20251001': 'anthropic.claude-3-5-haiku-20241022-v1:0',
+        };
+        return modelMap[modelId] ?? `anthropic.${modelId}-v1:0`;
+    }
+    async complete(request, options) {
+        const bedrockModelId = this.toBedrockModelId(request.model);
+        const bedrockRequest = this.buildRequest(request);
+        const fullRequest = { modelId: bedrockModelId, ...bedrockRequest };
+        options?.onRequest?.(fullRequest);
+        try {
+            const response = await this.invokeModel(bedrockModelId, bedrockRequest, options?.signal);
+            return this.parseResponse(response, fullRequest);
+        }
+        catch (error) {
+            throw this.handleError(error, fullRequest);
+        }
+    }
+    async stream(request, callbacks, options) {
+        const bedrockModelId = this.toBedrockModelId(request.model);
+        const bedrockRequest = this.buildRequest(request);
+        const fullRequest = { modelId: bedrockModelId, ...bedrockRequest, stream: true };
+        options?.onRequest?.(fullRequest);
+        try {
+            return await this.invokeModelWithStream(bedrockModelId, bedrockRequest, callbacks, options?.signal);
+        }
+        catch (error) {
+            throw this.handleError(error, fullRequest);
+        }
+    }
+    buildRequest(request) {
+        const params = {
+            anthropic_version: this.anthropicVersion,
+            max_tokens: request.maxTokens || this.defaultMaxTokens,
+            messages: request.messages,
+        };
+        // Handle system prompt
+        if (request.system) {
+            params.system = request.system;
+        }
+        if (request.temperature !== undefined) {
+            params.temperature = request.temperature;
+        }
+        if (request.stopSequences && request.stopSequences.length > 0) {
+            params.stop_sequences = request.stopSequences;
+        }
+        if (request.tools && request.tools.length > 0) {
+            params.tools = request.tools;
+        }
+        // Handle extended thinking
+        if (request.thinking) {
+            params.thinking = request.thinking;
+        }
+        // Apply extra params, excluding internal membrane fields
+        if (request.extra) {
+            const { normalizedMessages, prompt, ...rest } = request.extra;
+            Object.assign(params, rest);
+        }
+        return params;
+    }
+    async invokeModel(modelId, request, signal) {
+        const url = new URL(`https://bedrock-runtime.${this.region}.amazonaws.com/model/${encodeURIComponent(modelId)}/invoke`);
+        const body = JSON.stringify(request);
+        const headers = {
+            'content-type': 'application/json',
+            accept: 'application/json',
+        };
+        const signedHeaders = await signRequest('POST', url, headers, body, this.accessKeyId, this.secretAccessKey, this.sessionToken, this.region, 'bedrock');
+        const response = await fetch(url.toString(), {
+            method: 'POST',
+            headers: signedHeaders,
+            body,
+            signal,
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new BedrockError(response.status, errorText);
+        }
+        return response.json();
+    }
+    async invokeModelWithStream(modelId, request, callbacks, signal) {
+        const url = new URL(`https://bedrock-runtime.${this.region}.amazonaws.com/model/${encodeURIComponent(modelId)}/invoke-with-response-stream`);
+        const body = JSON.stringify(request);
+        const headers = {
+            'content-type': 'application/json',
+            accept: 'application/vnd.amazon.eventstream',
+        };
+        const signedHeaders = await signRequest('POST', url, headers, body, this.accessKeyId, this.secretAccessKey, this.sessionToken, this.region, 'bedrock');
+        const response = await fetch(url.toString(), {
+            method: 'POST',
+            headers: signedHeaders,
+            body,
+            signal,
+        });
+        if (!response.ok) {
+            const errorText = await response.text();
+            throw new BedrockError(response.status, errorText);
+        }
+        // Parse the binary event stream
+        const contentBlocks = [];
+        let currentBlockIndex = -1;
+        let finalMessage;
+        let inputTokens = 0;
+        let outputTokens = 0;
+        let stopReason = 'end_turn';
+        let fullText = '';
+        const reader = response.body?.getReader();
+        if (!reader) {
+            throw new Error('No response body');
+        }
+        let buffer = new Uint8Array(0);
+        try {
+            while (true) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                // Append new data to buffer
+                const newBuffer = new Uint8Array(buffer.length + value.length);
+                newBuffer.set(buffer);
+                newBuffer.set(value, buffer.length);
+                buffer = newBuffer;
+                // Parse complete events from buffer
+                while (buffer.length >= 16) {
+                    // AWS event stream format:
+                    // 4 bytes: total byte length (big-endian)
+                    // 4 bytes: headers length (big-endian)
+                    // 4 bytes: prelude CRC
+                    // headers
+                    // payload
+                    // 4 bytes: message CRC
+                    const view = new DataView(buffer.buffer, buffer.byteOffset, buffer.byteLength);
+                    const totalLength = view.getUint32(0, false);
+                    const headersLength = view.getUint32(4, false);
+                    if (buffer.length < totalLength) {
+                        // Incomplete message, wait for more data
+                        break;
+                    }
+                    // Extract payload (skip prelude, headers, and CRCs)
+                    const payloadStart = 12 + headersLength;
+                    const payloadEnd = totalLength - 4;
+                    const payloadBytes = buffer.slice(payloadStart, payloadEnd);
+                    // Parse headers to find event type
+                    let eventType = '';
+                    let headerOffset = 12;
+                    const headerEnd = 12 + headersLength;
+                    while (headerOffset < headerEnd) {
+                        const nameLength = buffer[headerOffset];
+                        headerOffset += 1;
+                        const name = new TextDecoder().decode(buffer.slice(headerOffset, headerOffset + nameLength));
+                        headerOffset += nameLength;
+                        const valueType = buffer[headerOffset];
+                        headerOffset += 1;
+                        if (valueType === 7) {
+                            // String type
+                            const valueLength = new DataView(buffer.buffer, buffer.byteOffset + headerOffset, 2).getUint16(0, false);
+                            headerOffset += 2;
+                            const value = new TextDecoder().decode(buffer.slice(headerOffset, headerOffset + valueLength));
+                            headerOffset += valueLength;
+                            if (name === ':event-type') {
+                                eventType = value;
+                            }
+                        }
+                        else {
+                            // Skip other header types
+                            break;
+                        }
+                    }
+                    // Parse the JSON payload
+                    if (eventType === 'chunk' && payloadBytes.length > 0) {
+                        try {
+                            const payloadJson = JSON.parse(new TextDecoder().decode(payloadBytes));
+                            if (payloadJson.bytes) {
+                                // Decode base64 payload
+                                const eventData = JSON.parse(atob(payloadJson.bytes));
+                                if (eventData.type === 'message_start' && eventData.message) {
+                                    inputTokens = eventData.message.usage?.input_tokens ?? 0;
+                                }
+                                else if (eventData.type === 'content_block_start') {
+                                    currentBlockIndex = eventData.index ?? 0;
+                                    contentBlocks[currentBlockIndex] = eventData.content_block;
+                                    callbacks.onContentBlock?.(currentBlockIndex, eventData.content_block);
+                                }
+                                else if (eventData.type === 'content_block_delta') {
+                                    if (eventData.delta?.type === 'text_delta' && eventData.delta.text) {
+                                        fullText += eventData.delta.text;
+                                        callbacks.onChunk(eventData.delta.text);
+                                        if (contentBlocks[currentBlockIndex]) {
+                                            contentBlocks[currentBlockIndex].text = (contentBlocks[currentBlockIndex].text ?? '') + eventData.delta.text;
+                                        }
+                                    }
+                                    else if (eventData.delta?.type === 'thinking_delta' && eventData.delta.thinking) {
+                                        callbacks.onChunk(eventData.delta.thinking);
+                                    }
+                                }
+                                else if (eventData.type === 'message_delta') {
+                                    if (eventData.usage) {
+                                        outputTokens = eventData.usage.output_tokens;
+                                    }
+                                    if (eventData.delta?.stop_reason) {
+                                        stopReason = eventData.delta.stop_reason;
+                                    }
+                                }
+                            }
+                        }
+                        catch {
+                            // Skip malformed events
+                        }
+                    }
+                    // Remove processed message from buffer
+                    buffer = buffer.slice(totalLength);
+                }
+            }
+        }
+        finally {
+            reader.releaseLock();
+        }
+        // Build response from accumulated data
+        finalMessage = {
+            id: 'msg_stream',
+            type: 'message',
+            role: 'assistant',
+            content: contentBlocks.map(b => ({
+                type: b.type,
+                text: b.text,
+            })),
+            model: modelId,
+            stop_reason: stopReason,
+            usage: {
+                input_tokens: inputTokens,
+                output_tokens: outputTokens,
+            },
+        };
+        return this.parseResponse(finalMessage, { modelId, ...request, stream: true });
+    }
+    parseResponse(response, rawRequest) {
+        const content = [];
+        for (const block of response.content) {
+            if (block.type === 'text' && block.text) {
+                content.push({ type: 'text', text: block.text });
+            }
+            else if (block.type === 'tool_use' && block.id && block.name) {
+                content.push({
+                    type: 'tool_use',
+                    id: block.id,
+                    name: block.name,
+                    input: block.input,
+                });
+            }
+            else if (block.type === 'thinking' && block.thinking) {
+                content.push({
+                    type: 'thinking',
+                    thinking: block.thinking,
+                    signature: block.signature,
+                });
+            }
+        }
+        return {
+            content,
+            stopReason: response.stop_reason ?? 'end_turn',
+            stopSequence: response.stop_sequence ?? undefined,
+            usage: {
+                inputTokens: response.usage.input_tokens,
+                outputTokens: response.usage.output_tokens,
+                cacheCreationTokens: response.usage.cache_creation_input_tokens,
+                cacheReadTokens: response.usage.cache_read_input_tokens,
+            },
+            model: response.model,
+            rawRequest,
+            raw: response,
+        };
+    }
+    handleError(error, rawRequest) {
+        if (error instanceof BedrockError) {
+            const status = error.status;
+            const message = error.message;
+            if (status === 429) {
+                return rateLimitError(message, undefined, error, rawRequest);
+            }
+            if (status === 401 || status === 403) {
+                return authError(message, error, rawRequest);
+            }
+            if (message.includes('context') || message.includes('too long') || message.includes('token')) {
+                return contextLengthError(message, error, rawRequest);
+            }
+            if (status >= 500) {
+                return serverError(message, status, error, rawRequest);
+            }
+        }
+        if (error instanceof Error && error.name === 'AbortError') {
+            return abortError(undefined, rawRequest);
+        }
+        return new MembraneError({
+            type: 'unknown',
+            message: error instanceof Error ? error.message : String(error),
+            retryable: false,
+            rawError: error,
+            rawRequest,
+        });
+    }
+}
+// ============================================================================
+// Error Class
+// ============================================================================
+class BedrockError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = 'BedrockError';
+    }
+}
+//# sourceMappingURL=bedrock.js.map

package/dist/providers/bedrock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bedrock.js","sourceRoot":"","sources":["../../src/providers/bedrock.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,OAAO,EACL,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,SAAS,EACT,WAAW,EACX,UAAU,GACX,MAAM,mBAAmB,CAAC;AA8F3B,+EAA+E;AAC/E,kCAAkC;AAClC,+EAA+E;AAE/E,KAAK,UAAU,UAAU,CAAC,GAA6B,EAAE,IAAY;IACnE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC7C,KAAK,EACL,GAAG,EACH,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACzC,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,SAAiB,EACjB,SAAiB,EACjB,MAAc,EACd,OAAe;IAEf,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,MAAc,EACd,GAAQ,EACR,OAA+B,EAC/B,IAAY,EACZ,WAAmB,EACnB,eAAuB,EACvB,YAAgC,EAChC,MAAc,EACd,OAAe;IAEf,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,CAAC;IAE5C,8BAA8B;IAC9B,MAAM,aAAa,GAA2B;QAC5C,GAAG,OAAO;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,YAAY,EAAE,OAAO;KACtB,CAAC;IAEF,IAAI,YAAY,EAAE,CAAC;QACjB,aAAa,CAAC,sBAAsB,CAAC,GAAG,YAAY,CAAC;IACvD,CAAC;IAED,2BAA2B;IAC3B,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,gBAAgB,GAAG,gBAAgB;SACtC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;SAC1D,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrB,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAEvC,2EAA2E;IAC3E,sFAAsF;IACtF,2EAA2E;IAC3E,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ;SAC9B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;SAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;IAEb,MAAM,gBAAgB,GAAG;QACvB,MAAM;QACN,YAAY;QACZ,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,qBAAqB;QAC1C,gBAAgB;QAChB,iBAAiB;QACjB,WAAW;KACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,wBAAwB;IACxB,MAAM,SAAS,GAAG,kBAAkB,CAAC;IACrC,MAAM,eAAe,GAAG,GAAG,SAAS,IAAI,MAAM,IAAI,OAAO,eAAe,CAAC;IACzE,MAAM,YAAY,GAAG;QACnB,SAAS;QACT,OAAO;QACP,eAAe;QACf,MAAM,MAAM,CAAC,gBAAgB,CAAC;KAC/B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,sBAAsB;IACtB,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACtF,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;SAC1D,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACzC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,8BAA8B;IAC9B,MAAM,aAAa,GAAG,GAAG,SAAS,eAAe,WAAW,IAAI,eAAe,mBAAmB,iBAAiB,eAAe,SAAS,EAAE,CAAC;IAE9I,OAAO;QACL,GAAG,aAAa;QAChB,aAAa;KACd,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,MAAM,OAAO,cAAc;IAChB,IAAI,GAAG,SAAS,CAAC;IAElB,WAAW,CAAS;IACpB,eAAe,CAAS;IACxB,YAAY,CAAU;IACtB,MAAM,CAAS;IACf,gBAAgB,CAAS;IACzB,gBAAgB,CAAS;IAEjC,YAAY,SAA+B,EAAE;QAC3C,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAC7E,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;QACzF,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACzE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,CAAC;QACrE,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC;QACxD,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,oBAAoB,CAAC;QAExE,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,+DAA+D;QAC/D,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,OAAe;QACtC,0CAA0C;QAC1C,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,gDAAgD;QAChD,MAAM,QAAQ,GAA2B;YACvC,4BAA4B,EAAE,2CAA2C;YACzE,0BAA0B,EAAE,2CAA2C;YACvE,2BAA2B,EAAE,0CAA0C;YACvE,yBAAyB,EAAE,0CAA0C;YACrE,wBAAwB,EAAE,uCAAuC;YACjE,0BAA0B,EAAE,yCAAyC;YACrE,yBAAyB,EAAE,wCAAwC;YACnE,0BAA0B,EAAE,yCAAyC;YACrE,wBAAwB,EAAE,uCAAuC;YACjE,oBAAoB;YACpB,2BAA2B,EAAE,0CAA0C;SACxE,CAAC;QAEF,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,aAAa,OAAO,OAAO,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,OAAwB,EACxB,OAAgC;QAEhC,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,CAAC;QACnE,OAAO,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACzF,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAwB,EACxB,SAA0B,EAC1B,OAAgC;QAEhC,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjF,OAAO,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC;QAElC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,OAAwB;QAC3C,MAAM,MAAM,GAA0B;YACpC,iBAAiB,EAAE,IAAI,CAAC,gBAAgB;YACxC,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB;YACtD,QAAQ,EAAE,OAAO,CAAC,QAA6C;SAChE,CAAC;QAEF,uBAAuB;QACvB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAyC,CAAC;QACpE,CAAC;QAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QAC3C,CAAC;QAED,IAAI,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;QAChD,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/B,CAAC;QAED,2BAA2B;QAC3B,IAAK,OAAe,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,QAAQ,GAAI,OAAe,CAAC,QAAQ,CAAC;QAC9C,CAAC;QAED,yDAAyD;QACzD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,KAAgC,CAAC;YACzF,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,OAAe,EACf,OAA8B,EAC9B,MAAoB;QAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,2BAA2B,IAAI,CAAC,MAAM,wBAAwB,kBAAkB,CAAC,OAAO,CAAC,SAAS,CACnG,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,WAAW,CACrC,MAAM,EACN,GAAG,EACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,MAAM,EACX,SAAS,CACV,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,aAAa;YACtB,IAAI;YACJ,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAqC,CAAC;IAC5D,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,OAAe,EACf,OAA8B,EAC9B,SAA0B,EAC1B,MAAoB;QAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,2BAA2B,IAAI,CAAC,MAAM,wBAAwB,kBAAkB,CAAC,OAAO,CAAC,8BAA8B,CACxH,CAAC;QAEF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,oCAAoC;SAC7C,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,WAAW,CACrC,MAAM,EACN,GAAG,EACH,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,MAAM,EACX,SAAS,CACV,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,aAAa;YACtB,IAAI;YACJ,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACrD,CAAC;QAED,gCAAgC;QAChC,MAAM,aAAa,GAA2C,EAAE,CAAC;QACjE,IAAI,iBAAiB,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,YAAgD,CAAC;QACrD,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,UAAU,GAAW,UAAU,CAAC;QACpC,IAAI,QAAQ,GAAG,EAAE,CAAC;QAElB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAE/B,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAEhB,4BAA4B;gBAC5B,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC/D,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACtB,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACpC,MAAM,GAAG,SAAS,CAAC;gBAEnB,oCAAoC;gBACpC,OAAO,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;oBAC3B,2BAA2B;oBAC3B,0CAA0C;oBAC1C,uCAAuC;oBACvC,uBAAuB;oBACvB,UAAU;oBACV,UAAU;oBACV,uBAAuB;oBACvB,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;oBAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;oBAC7C,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;oBAE/C,IAAI,MAAM,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;wBAChC,yCAAyC;wBACzC,MAAM;oBACR,CAAC;oBAED,oDAAoD;oBACpD,MAAM,YAAY,GAAG,EAAE,GAAG,aAAa,CAAC;oBACxC,MAAM,UAAU,GAAG,WAAW,GAAG,CAAC,CAAC;oBACnC,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;oBAE5D,mCAAmC;oBACnC,IAAI,SAAS,GAAG,EAAE,CAAC;oBACnB,IAAI,YAAY,GAAG,EAAE,CAAC;oBACtB,MAAM,SAAS,GAAG,EAAE,GAAG,aAAa,CAAC;oBACrC,OAAO,YAAY,GAAG,SAAS,EAAE,CAAC;wBAChC,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAE,CAAC;wBACzC,YAAY,IAAI,CAAC,CAAC;wBAClB,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC;wBAC7F,YAAY,IAAI,UAAU,CAAC;wBAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAE,CAAC;wBACxC,YAAY,IAAI,CAAC,CAAC;wBAElB,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;4BACpB,cAAc;4BACd,MAAM,WAAW,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;4BACzG,YAAY,IAAI,CAAC,CAAC;4BAClB,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC;4BAC/F,YAAY,IAAI,WAAW,CAAC;4BAE5B,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gCAC3B,SAAS,GAAG,KAAK,CAAC;4BACpB,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,0BAA0B;4BAC1B,MAAM;wBACR,CAAC;oBACH,CAAC;oBAED,yBAAyB;oBACzB,IAAI,SAAS,KAAK,OAAO,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACrD,IAAI,CAAC;4BACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;4BACvE,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;gCACtB,wBAAwB;gCACxB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAuB,CAAC;gCAE5E,IAAI,SAAS,CAAC,IAAI,KAAK,eAAe,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;oCAC5D,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,IAAI,CAAC,CAAC;gCAC3D,CAAC;qCAAM,IAAI,SAAS,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;oCACpD,iBAAiB,GAAG,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC;oCACzC,aAAa,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,aAAiC,CAAC;oCAC/E,SAAS,CAAC,cAAc,EAAE,CAAC,iBAAiB,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;gCACzE,CAAC;qCAAM,IAAI,SAAS,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;oCACpD,IAAI,SAAS,CAAC,KAAK,EAAE,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;wCACnE,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;wCACjC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wCACxC,IAAI,aAAa,CAAC,iBAAiB,CAAC,EAAE,CAAC;4CACrC,aAAa,CAAC,iBAAiB,CAAE,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,iBAAiB,CAAE,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;wCACjH,CAAC;oCACH,CAAC;yCAAM,IAAI,SAAS,CAAC,KAAK,EAAE,IAAI,KAAK,gBAAgB,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;wCAClF,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oCAC9C,CAAC;gCACH,CAAC;qCAAM,IAAI,SAAS,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oCAC9C,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;wCACpB,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC;oCAC/C,CAAC;oCACD,IAAI,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC;wCACjC,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC;oCAC3C,CAAC;gCACH,CAAC;4BACH,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC;4BACP,wBAAwB;wBAC1B,CAAC;oBACH,CAAC;oBAED,uCAAuC;oBACvC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QAED,uCAAuC;QACvC,YAAY,GAAG;YACb,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/B,IAAI,EAAE,CAAC,CAAC,IAAc;gBACtB,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;YACH,KAAK,EAAE,OAAO;YACd,WAAW,EAAE,UAAmD;YAChE,KAAK,EAAE;gBACL,YAAY,EAAE,WAAW;gBACzB,aAAa,EAAE,YAAY;aAC5B;SACF,CAAC;QAEF,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IAEO,aAAa,CAAC,QAAgC,EAAE,UAAmB;QACzE,MAAM,OAAO,GAAmB,EAAE,CAAC;QAEnC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC/D,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,UAAU;oBAChB,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK,EAAE,KAAK,CAAC,KAAgC;iBAC9C,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO;YACP,UAAU,EAAE,QAAQ,CAAC,WAAW,IAAI,UAAU;YAC9C,YAAY,EAAE,QAAQ,CAAC,aAAa,IAAI,SAAS;YACjD,KAAK,EAAE;gBACL,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY;gBACxC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;gBAC1C,mBAAmB,EAAE,QAAQ,CAAC,KAAK,CAAC,2BAA2B;gBAC/D,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,uBAAuB;aACxD;YACD,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,UAAU;YACV,GAAG,EAAE,QAAQ;SACd,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,KAAc,EAAE,UAAoB;QACtD,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAE9B,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,OAAO,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACrC,OAAO,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAC/C,CAAC;YAED,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7F,OAAO,kBAAkB,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACxD,CAAC;YAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClB,OAAO,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1D,OAAO,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,aAAa,CAAC;YACvB,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/D,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,KAAK;YACf,UAAU;SACX,CAAC,CAAC;IACL,CAAC;CACF;AAED,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,MAAM,YAAa,SAAQ,KAAK;IAErB;IADT,YACS,MAAc,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,WAAM,GAAN,MAAM,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF"}

package/dist/providers/index.d.ts

@@ -7,4 +7,5 @@ export { OpenAIAdapter, toOpenAIContent, fromOpenAIContent, type OpenAIAdapterCo
 export { OpenAICompatibleAdapter, toOpenAIMessages, fromOpenAIMessage, type OpenAICompatibleAdapterConfig, } from './openai-compatible.js';
 export { OpenAICompletionsAdapter, type OpenAICompletionsAdapterConfig, } from './openai-completions.js';
 export { MockAdapter, createEchoAdapter, createCannedAdapter, type MockAdapterConfig, } from './mock.js';
+export { BedrockAdapter, type BedrockAdapterConfig, } from './bedrock.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/providers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,sBAAsB,GAC5B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,6BAA6B,GACnC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,wBAAwB,EACxB,KAAK,8BAA8B,GACpC,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,iBAAiB,GACvB,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,sBAAsB,GAC5B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,6BAA6B,GACnC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,wBAAwB,EACxB,KAAK,8BAA8B,GACpC,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,iBAAiB,GACvB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,cAAc,EACd,KAAK,oBAAoB,GAC1B,MAAM,cAAc,CAAC"}

package/dist/providers/index.js

@@ -7,4 +7,5 @@ export { OpenAIAdapter, toOpenAIContent, fromOpenAIContent, } from './openai.js'
 export { OpenAICompatibleAdapter, toOpenAIMessages, fromOpenAIMessage, } from './openai-compatible.js';
 export { OpenAICompletionsAdapter, } from './openai-completions.js';
 export { MockAdapter, createEchoAdapter, createCannedAdapter, } from './mock.js';
+export { BedrockAdapter, } from './bedrock.js';
 //# sourceMappingURL=index.js.map

package/dist/providers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,GAErB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,aAAa,EACb,eAAe,EACf,iBAAiB,GAElB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,GAElB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,wBAAwB,GAEzB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,mBAAmB,GAEpB,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,GAErB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,aAAa,EACb,eAAe,EACf,iBAAiB,GAElB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,GAElB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,wBAAwB,GAEzB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,mBAAmB,GAEpB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,cAAc,GAEf,MAAM,cAAc,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@animalabs/membrane",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "description": "LLM middleware - a selective boundary that transforms what passes through",
   "type": "module",
   "main": "./dist/index.js",

package/src/providers/bedrock.ts

@@ -0,0 +1,675 @@
+/**
+ * AWS Bedrock provider adapter for Anthropic Claude models
+ *
+ * Uses the Anthropic Messages API format through AWS Bedrock.
+ */
+
+import type {
+  ProviderAdapter,
+  ProviderRequest,
+  ProviderRequestOptions,
+  ProviderResponse,
+  StreamCallbacks,
+  ContentBlock,
+} from '../types/index.js';
+import {
+  MembraneError,
+  rateLimitError,
+  contextLengthError,
+  authError,
+  serverError,
+  abortError,
+} from '../types/index.js';
+
+// ============================================================================
+// Adapter Configuration
+// ============================================================================
+
+export interface BedrockAdapterConfig {
+  /** AWS access key ID */
+  accessKeyId?: string;
+
+  /** AWS secret access key */
+  secretAccessKey?: string;
+
+  /** AWS region (defaults to us-west-2) */
+  region?: string;
+
+  /** AWS session token (for temporary credentials) */
+  sessionToken?: string;
+
+  /** Default max tokens */
+  defaultMaxTokens?: number;
+
+  /** Anthropic API version header (defaults to 2023-06-01) */
+  anthropicVersion?: string;
+}
+
+// ============================================================================
+// Bedrock Request/Response Types
+// ============================================================================
+
+interface BedrockMessageRequest {
+  anthropic_version: string;
+  max_tokens: number;
+  messages: Array<{
+    role: 'user' | 'assistant';
+    content: unknown;
+  }>;
+  system?: string | Array<{ type: 'text'; text: string; cache_control?: { type: 'ephemeral' } }>;
+  temperature?: number;
+  stop_sequences?: string[];
+  tools?: unknown[];
+  thinking?: { type: 'enabled'; budget_tokens: number };
+}
+
+interface BedrockMessageResponse {
+  id: string;
+  type: 'message';
+  role: 'assistant';
+  content: Array<{
+    type: 'text' | 'tool_use' | 'thinking';
+    text?: string;
+    thinking?: string;
+    signature?: string;
+    id?: string;
+    name?: string;
+    input?: unknown;
+  }>;
+  model: string;
+  stop_reason: 'end_turn' | 'max_tokens' | 'stop_sequence' | 'tool_use' | null;
+  stop_sequence?: string | null;
+  usage: {
+    input_tokens: number;
+    output_tokens: number;
+    cache_creation_input_tokens?: number;
+    cache_read_input_tokens?: number;
+  };
+}
+
+interface BedrockStreamEvent {
+  type: string;
+  index?: number;
+  content_block?: {
+    type: string;
+    text?: string;
+    thinking?: string;
+    id?: string;
+    name?: string;
+    input?: unknown;
+  };
+  delta?: {
+    type: string;
+    text?: string;
+    thinking?: string;
+    partial_json?: string;
+    stop_reason?: string;
+    stop_sequence?: string;
+  };
+  message?: BedrockMessageResponse;
+  usage?: {
+    input_tokens: number;
+    output_tokens: number;
+  };
+}
+
+// ============================================================================
+// AWS Signature V4 Implementation
+// ============================================================================
+
+async function hmacSha256(key: ArrayBuffer | Uint8Array, data: string): Promise<ArrayBuffer> {
+  const cryptoKey = await crypto.subtle.importKey(
+    'raw',
+    key,
+    { name: 'HMAC', hash: 'SHA-256' },
+    false,
+    ['sign']
+  );
+  return crypto.subtle.sign('HMAC', cryptoKey, new TextEncoder().encode(data));
+}
+
+async function sha256(data: string): Promise<string> {
+  const hash = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(data));
+  return Array.from(new Uint8Array(hash))
+    .map(b => b.toString(16).padStart(2, '0'))
+    .join('');
+}
+
+async function getSignatureKey(
+  secretKey: string,
+  dateStamp: string,
+  region: string,
+  service: string
+): Promise<ArrayBuffer> {
+  const kDate = await hmacSha256(new TextEncoder().encode('AWS4' + secretKey), dateStamp);
+  const kRegion = await hmacSha256(kDate, region);
+  const kService = await hmacSha256(kRegion, service);
+  return hmacSha256(kService, 'aws4_request');
+}
+
+function getAmzDate(): { amzDate: string; dateStamp: string } {
+  const now = new Date();
+  const amzDate = now.toISOString().replace(/[:-]|\.\d{3}/g, '');
+  const dateStamp = amzDate.slice(0, 8);
+  return { amzDate, dateStamp };
+}
+
+async function signRequest(
+  method: string,
+  url: URL,
+  headers: Record<string, string>,
+  body: string,
+  accessKeyId: string,
+  secretAccessKey: string,
+  sessionToken: string | undefined,
+  region: string,
+  service: string
+): Promise<Record<string, string>> {
+  const { amzDate, dateStamp } = getAmzDate();
+
+  // Prepare headers for signing
+  const signedHeaders: Record<string, string> = {
+    ...headers,
+    host: url.host,
+    'x-amz-date': amzDate,
+  };
+
+  if (sessionToken) {
+    signedHeaders['x-amz-security-token'] = sessionToken;
+  }
+
+  // Create canonical request
+  const sortedHeaderKeys = Object.keys(signedHeaders).sort();
+  const canonicalHeaders = sortedHeaderKeys
+    .map(k => `${k.toLowerCase()}:${signedHeaders[k]?.trim()}`)
+    .join('\n') + '\n';
+  const signedHeadersList = sortedHeaderKeys.map(k => k.toLowerCase()).join(';');
+  const payloadHash = await sha256(body);
+
+  // URI-encode path components for canonical request (AWS SigV4 requirement)
+  // AWS requires double-encoding: %3A in the URL becomes %253A in the canonical request
+  // We encode each segment without decoding first to achieve double-encoding
+  const canonicalUri = url.pathname
+    .split('/')
+    .map(segment => encodeURIComponent(segment))
+    .join('/');
+
+  const canonicalRequest = [
+    method,
+    canonicalUri,
+    url.search.slice(1), // Remove leading '?'
+    canonicalHeaders,
+    signedHeadersList,
+    payloadHash,
+  ].join('\n');
+
+  // Create string to sign
+  const algorithm = 'AWS4-HMAC-SHA256';
+  const credentialScope = `${dateStamp}/${region}/${service}/aws4_request`;
+  const stringToSign = [
+    algorithm,
+    amzDate,
+    credentialScope,
+    await sha256(canonicalRequest),
+  ].join('\n');
+
+  // Calculate signature
+  const signingKey = await getSignatureKey(secretAccessKey, dateStamp, region, service);
+  const signatureBuffer = await hmacSha256(signingKey, stringToSign);
+  const signature = Array.from(new Uint8Array(signatureBuffer))
+    .map(b => b.toString(16).padStart(2, '0'))
+    .join('');
+
+  // Create authorization header
+  const authorization = `${algorithm} Credential=${accessKeyId}/${credentialScope}, SignedHeaders=${signedHeadersList}, Signature=${signature}`;
+
+  return {
+    ...signedHeaders,
+    authorization,
+  };
+}
+
+// ============================================================================
+// Bedrock Adapter
+// ============================================================================
+
+export class BedrockAdapter implements ProviderAdapter {
+  readonly name = 'bedrock';
+
+  private accessKeyId: string;
+  private secretAccessKey: string;
+  private sessionToken?: string;
+  private region: string;
+  private defaultMaxTokens: number;
+  private anthropicVersion: string;
+
+  constructor(config: BedrockAdapterConfig = {}) {
+    this.accessKeyId = config.accessKeyId ?? process.env.AWS_ACCESS_KEY_ID ?? '';
+    this.secretAccessKey = config.secretAccessKey ?? process.env.AWS_SECRET_ACCESS_KEY ?? '';
+    this.sessionToken = config.sessionToken ?? process.env.AWS_SESSION_TOKEN;
+    this.region = config.region ?? process.env.AWS_REGION ?? 'us-west-2';
+    this.defaultMaxTokens = config.defaultMaxTokens ?? 4096;
+    this.anthropicVersion = config.anthropicVersion ?? 'bedrock-2023-05-31';
+
+    if (!this.accessKeyId || !this.secretAccessKey) {
+      throw new Error('AWS credentials required: accessKeyId and secretAccessKey');
+    }
+  }
+
+  supportsModel(modelId: string): boolean {
+    // Support both Bedrock model IDs and standard Claude model IDs
+    return modelId.includes('claude') || modelId.startsWith('anthropic.');
+  }
+
+  /**
+   * Convert a standard Claude model ID to Bedrock format if needed
+   */
+  private toBedrockModelId(modelId: string): string {
+    // If already in Bedrock format, use as-is
+    if (modelId.startsWith('anthropic.')) {
+      return modelId;
+    }
+
+    // Map common Claude model IDs to Bedrock format
+    const modelMap: Record<string, string> = {
+      'claude-3-5-sonnet-20241022': 'anthropic.claude-3-5-sonnet-20241022-v2:0',
+      'claude-3-5-sonnet-latest': 'anthropic.claude-3-5-sonnet-20241022-v2:0',
+      'claude-3-5-haiku-20241022': 'anthropic.claude-3-5-haiku-20241022-v1:0',
+      'claude-3-5-haiku-latest': 'anthropic.claude-3-5-haiku-20241022-v1:0',
+      'claude-3-opus-20240229': 'anthropic.claude-3-opus-20240229-v1:0',
+      'claude-3-sonnet-20240229': 'anthropic.claude-3-sonnet-20240229-v1:0',
+      'claude-3-haiku-20240307': 'anthropic.claude-3-haiku-20240307-v1:0',
+      'claude-sonnet-4-20250514': 'anthropic.claude-sonnet-4-20250514-v1:0',
+      'claude-opus-4-20250514': 'anthropic.claude-opus-4-20250514-v1:0',
+      // Haiku 4.5 aliases
+      'claude-haiku-4-5-20251001': 'anthropic.claude-3-5-haiku-20241022-v1:0',
+    };
+
+    return modelMap[modelId] ?? `anthropic.${modelId}-v1:0`;
+  }
+
+  async complete(
+    request: ProviderRequest,
+    options?: ProviderRequestOptions
+  ): Promise<ProviderResponse> {
+    const bedrockModelId = this.toBedrockModelId(request.model);
+    const bedrockRequest = this.buildRequest(request);
+    const fullRequest = { modelId: bedrockModelId, ...bedrockRequest };
+    options?.onRequest?.(fullRequest);
+
+    try {
+      const response = await this.invokeModel(bedrockModelId, bedrockRequest, options?.signal);
+      return this.parseResponse(response, fullRequest);
+    } catch (error) {
+      throw this.handleError(error, fullRequest);
+    }
+  }
+
+  async stream(
+    request: ProviderRequest,
+    callbacks: StreamCallbacks,
+    options?: ProviderRequestOptions
+  ): Promise<ProviderResponse> {
+    const bedrockModelId = this.toBedrockModelId(request.model);
+    const bedrockRequest = this.buildRequest(request);
+    const fullRequest = { modelId: bedrockModelId, ...bedrockRequest, stream: true };
+    options?.onRequest?.(fullRequest);
+
+    try {
+      return await this.invokeModelWithStream(bedrockModelId, bedrockRequest, callbacks, options?.signal);
+    } catch (error) {
+      throw this.handleError(error, fullRequest);
+    }
+  }
+
+  private buildRequest(request: ProviderRequest): BedrockMessageRequest {
+    const params: BedrockMessageRequest = {
+      anthropic_version: this.anthropicVersion,
+      max_tokens: request.maxTokens || this.defaultMaxTokens,
+      messages: request.messages as BedrockMessageRequest['messages'],
+    };
+
+    // Handle system prompt
+    if (request.system) {
+      params.system = request.system as BedrockMessageRequest['system'];
+    }
+
+    if (request.temperature !== undefined) {
+      params.temperature = request.temperature;
+    }
+
+    if (request.stopSequences && request.stopSequences.length > 0) {
+      params.stop_sequences = request.stopSequences;
+    }
+
+    if (request.tools && request.tools.length > 0) {
+      params.tools = request.tools;
+    }
+
+    // Handle extended thinking
+    if ((request as any).thinking) {
+      params.thinking = (request as any).thinking;
+    }
+
+    // Apply extra params, excluding internal membrane fields
+    if (request.extra) {
+      const { normalizedMessages, prompt, ...rest } = request.extra as Record<string, unknown>;
+      Object.assign(params, rest);
+    }
+
+    return params;
+  }
+
+  private async invokeModel(
+    modelId: string,
+    request: BedrockMessageRequest,
+    signal?: AbortSignal
+  ): Promise<BedrockMessageResponse> {
+    const url = new URL(
+      `https://bedrock-runtime.${this.region}.amazonaws.com/model/${encodeURIComponent(modelId)}/invoke`
+    );
+
+    const body = JSON.stringify(request);
+    const headers: Record<string, string> = {
+      'content-type': 'application/json',
+      accept: 'application/json',
+    };
+
+    const signedHeaders = await signRequest(
+      'POST',
+      url,
+      headers,
+      body,
+      this.accessKeyId,
+      this.secretAccessKey,
+      this.sessionToken,
+      this.region,
+      'bedrock'
+    );
+
+    const response = await fetch(url.toString(), {
+      method: 'POST',
+      headers: signedHeaders,
+      body,
+      signal,
+    });
+
+    if (!response.ok) {
+      const errorText = await response.text();
+      throw new BedrockError(response.status, errorText);
+    }
+
+    return response.json() as Promise<BedrockMessageResponse>;
+  }
+
+  private async invokeModelWithStream(
+    modelId: string,
+    request: BedrockMessageRequest,
+    callbacks: StreamCallbacks,
+    signal?: AbortSignal
+  ): Promise<ProviderResponse> {
+    const url = new URL(
+      `https://bedrock-runtime.${this.region}.amazonaws.com/model/${encodeURIComponent(modelId)}/invoke-with-response-stream`
+    );
+
+    const body = JSON.stringify(request);
+    const headers: Record<string, string> = {
+      'content-type': 'application/json',
+      accept: 'application/vnd.amazon.eventstream',
+    };
+
+    const signedHeaders = await signRequest(
+      'POST',
+      url,
+      headers,
+      body,
+      this.accessKeyId,
+      this.secretAccessKey,
+      this.sessionToken,
+      this.region,
+      'bedrock'
+    );
+
+    const response = await fetch(url.toString(), {
+      method: 'POST',
+      headers: signedHeaders,
+      body,
+      signal,
+    });
+
+    if (!response.ok) {
+      const errorText = await response.text();
+      throw new BedrockError(response.status, errorText);
+    }
+
+    // Parse the binary event stream
+    const contentBlocks: Array<{ type: string; text?: string }> = [];
+    let currentBlockIndex = -1;
+    let finalMessage: BedrockMessageResponse | undefined;
+    let inputTokens = 0;
+    let outputTokens = 0;
+    let stopReason: string = 'end_turn';
+    let fullText = '';
+
+    const reader = response.body?.getReader();
+    if (!reader) {
+      throw new Error('No response body');
+    }
+
+    let buffer = new Uint8Array(0);
+
+    try {
+      while (true) {
+        const { done, value } = await reader.read();
+        if (done) break;
+
+        // Append new data to buffer
+        const newBuffer = new Uint8Array(buffer.length + value.length);
+        newBuffer.set(buffer);
+        newBuffer.set(value, buffer.length);
+        buffer = newBuffer;
+
+        // Parse complete events from buffer
+        while (buffer.length >= 16) {
+          // AWS event stream format:
+          // 4 bytes: total byte length (big-endian)
+          // 4 bytes: headers length (big-endian)
+          // 4 bytes: prelude CRC
+          // headers
+          // payload
+          // 4 bytes: message CRC
+          const view = new DataView(buffer.buffer, buffer.byteOffset, buffer.byteLength);
+          const totalLength = view.getUint32(0, false);
+          const headersLength = view.getUint32(4, false);
+
+          if (buffer.length < totalLength) {
+            // Incomplete message, wait for more data
+            break;
+          }
+
+          // Extract payload (skip prelude, headers, and CRCs)
+          const payloadStart = 12 + headersLength;
+          const payloadEnd = totalLength - 4;
+          const payloadBytes = buffer.slice(payloadStart, payloadEnd);
+
+          // Parse headers to find event type
+          let eventType = '';
+          let headerOffset = 12;
+          const headerEnd = 12 + headersLength;
+          while (headerOffset < headerEnd) {
+            const nameLength = buffer[headerOffset]!;
+            headerOffset += 1;
+            const name = new TextDecoder().decode(buffer.slice(headerOffset, headerOffset + nameLength));
+            headerOffset += nameLength;
+            const valueType = buffer[headerOffset]!;
+            headerOffset += 1;
+
+            if (valueType === 7) {
+              // String type
+              const valueLength = new DataView(buffer.buffer, buffer.byteOffset + headerOffset, 2).getUint16(0, false);
+              headerOffset += 2;
+              const value = new TextDecoder().decode(buffer.slice(headerOffset, headerOffset + valueLength));
+              headerOffset += valueLength;
+
+              if (name === ':event-type') {
+                eventType = value;
+              }
+            } else {
+              // Skip other header types
+              break;
+            }
+          }
+
+          // Parse the JSON payload
+          if (eventType === 'chunk' && payloadBytes.length > 0) {
+            try {
+              const payloadJson = JSON.parse(new TextDecoder().decode(payloadBytes));
+              if (payloadJson.bytes) {
+                // Decode base64 payload
+                const eventData = JSON.parse(atob(payloadJson.bytes)) as BedrockStreamEvent;
+
+                if (eventData.type === 'message_start' && eventData.message) {
+                  inputTokens = eventData.message.usage?.input_tokens ?? 0;
+                } else if (eventData.type === 'content_block_start') {
+                  currentBlockIndex = eventData.index ?? 0;
+                  contentBlocks[currentBlockIndex] = eventData.content_block as { type: string };
+                  callbacks.onContentBlock?.(currentBlockIndex, eventData.content_block);
+                } else if (eventData.type === 'content_block_delta') {
+                  if (eventData.delta?.type === 'text_delta' && eventData.delta.text) {
+                    fullText += eventData.delta.text;
+                    callbacks.onChunk(eventData.delta.text);
+                    if (contentBlocks[currentBlockIndex]) {
+                      contentBlocks[currentBlockIndex]!.text = (contentBlocks[currentBlockIndex]!.text ?? '') + eventData.delta.text;
+                    }
+                  } else if (eventData.delta?.type === 'thinking_delta' && eventData.delta.thinking) {
+                    callbacks.onChunk(eventData.delta.thinking);
+                  }
+                } else if (eventData.type === 'message_delta') {
+                  if (eventData.usage) {
+                    outputTokens = eventData.usage.output_tokens;
+                  }
+                  if (eventData.delta?.stop_reason) {
+                    stopReason = eventData.delta.stop_reason;
+                  }
+                }
+              }
+            } catch {
+              // Skip malformed events
+            }
+          }
+
+          // Remove processed message from buffer
+          buffer = buffer.slice(totalLength);
+        }
+      }
+    } finally {
+      reader.releaseLock();
+    }
+
+    // Build response from accumulated data
+    finalMessage = {
+      id: 'msg_stream',
+      type: 'message',
+      role: 'assistant',
+      content: contentBlocks.map(b => ({
+        type: b.type as 'text',
+        text: b.text,
+      })),
+      model: modelId,
+      stop_reason: stopReason as BedrockMessageResponse['stop_reason'],
+      usage: {
+        input_tokens: inputTokens,
+        output_tokens: outputTokens,
+      },
+    };
+
+    return this.parseResponse(finalMessage, { modelId, ...request, stream: true });
+  }
+
+  private parseResponse(response: BedrockMessageResponse, rawRequest: unknown): ProviderResponse {
+    const content: ContentBlock[] = [];
+
+    for (const block of response.content) {
+      if (block.type === 'text' && block.text) {
+        content.push({ type: 'text', text: block.text });
+      } else if (block.type === 'tool_use' && block.id && block.name) {
+        content.push({
+          type: 'tool_use',
+          id: block.id,
+          name: block.name,
+          input: block.input as Record<string, unknown>,
+        });
+      } else if (block.type === 'thinking' && block.thinking) {
+        content.push({
+          type: 'thinking',
+          thinking: block.thinking,
+          signature: block.signature,
+        });
+      }
+    }
+
+    return {
+      content,
+      stopReason: response.stop_reason ?? 'end_turn',
+      stopSequence: response.stop_sequence ?? undefined,
+      usage: {
+        inputTokens: response.usage.input_tokens,
+        outputTokens: response.usage.output_tokens,
+        cacheCreationTokens: response.usage.cache_creation_input_tokens,
+        cacheReadTokens: response.usage.cache_read_input_tokens,
+      },
+      model: response.model,
+      rawRequest,
+      raw: response,
+    };
+  }
+
+  private handleError(error: unknown, rawRequest?: unknown): MembraneError {
+    if (error instanceof BedrockError) {
+      const status = error.status;
+      const message = error.message;
+
+      if (status === 429) {
+        return rateLimitError(message, undefined, error, rawRequest);
+      }
+
+      if (status === 401 || status === 403) {
+        return authError(message, error, rawRequest);
+      }
+
+      if (message.includes('context') || message.includes('too long') || message.includes('token')) {
+        return contextLengthError(message, error, rawRequest);
+      }
+
+      if (status >= 500) {
+        return serverError(message, status, error, rawRequest);
+      }
+    }
+
+    if (error instanceof Error && error.name === 'AbortError') {
+      return abortError(undefined, rawRequest);
+    }
+
+    return new MembraneError({
+      type: 'unknown',
+      message: error instanceof Error ? error.message : String(error),
+      retryable: false,
+      rawError: error,
+      rawRequest,
+    });
+  }
+}
+
+// ============================================================================
+// Error Class
+// ============================================================================
+
+class BedrockError extends Error {
+  constructor(
+    public status: number,
+    message: string
+  ) {
+    super(message);
+    this.name = 'BedrockError';
+  }
+}

package/src/providers/index.ts

@@ -41,3 +41,8 @@ export {
   createCannedAdapter,
   type MockAdapterConfig,
 } from './mock.js';
+
+export {
+  BedrockAdapter,
+  type BedrockAdapterConfig,
+} from './bedrock.js';