@mastra/code-sdk 1.0.3-alpha.0 → 1.1.0-alpha.2

package/dist/providers/amazon-bedrock-gateway.js

@@ -1,143 +1,152 @@
-import { existsSync } from "node:fs";
-import path from "node:path";
+import { getBedrockModelCatalog } from "./amazon-bedrock.js";
+import { existsSync } from "fs";
+import path from "path";
+import { MastraModelGateway } from "@mastra/core/llm";
 import { createAmazonBedrock } from "@ai-sdk/amazon-bedrock";
 import { fromNodeProviderChain } from "@aws-sdk/credential-providers";
-import { MastraModelGateway } from "@mastra/core/llm";
-import { getBedrockModelCatalog } from "./amazon-bedrock.js";
+//#region src/providers/amazon-bedrock-gateway.ts
 const CACHEABLE_BEDROCK_MODEL_IDS = [
-  "anthropic.claude-3-5-haiku-",
-  "anthropic.claude-3-5-sonnet-20241022-v2:0",
-  "anthropic.claude-3-7-sonnet-",
-  "anthropic.claude-fable-5",
-  "anthropic.claude-haiku-4-5-",
-  "anthropic.claude-opus-4-",
-  "anthropic.claude-sonnet-4-",
-  "anthropic.claude-sonnet-5"
+	"anthropic.claude-3-5-haiku-",
+	"anthropic.claude-3-5-sonnet-20241022-v2:0",
+	"anthropic.claude-3-7-sonnet-",
+	"anthropic.claude-fable-5",
+	"anthropic.claude-haiku-4-5-",
+	"anthropic.claude-opus-4-",
+	"anthropic.claude-sonnet-4-",
+	"anthropic.claude-sonnet-5"
 ];
 function supportsBedrockPromptCaching(modelId) {
-  return CACHEABLE_BEDROCK_MODEL_IDS.some((cacheableModelId) => modelId.includes(cacheableModelId));
+	return CACHEABLE_BEDROCK_MODEL_IDS.some((cacheableModelId) => modelId.includes(cacheableModelId));
 }
 function addBedrockCachePoints(prompt) {
-  const result = [...prompt];
-  const markCachePoint = (message) => ({
-    ...message,
-    providerOptions: {
-      ...message.providerOptions,
-      bedrock: {
-        ...message.providerOptions?.bedrock,
-        cachePoint: { type: "default" }
-      }
-    }
-  });
-  let lastSystemIndex = -1;
-  for (let index = result.length - 1; index >= 0; index--) {
-    if (result[index].role === "system") {
-      lastSystemIndex = index;
-      break;
-    }
-  }
-  if (lastSystemIndex >= 0) {
-    result[lastSystemIndex] = markCachePoint(result[lastSystemIndex]);
-  }
-  let lastNonSystemIndex = -1;
-  for (let index = result.length - 1; index >= 0; index--) {
-    if (result[index].role !== "system") {
-      lastNonSystemIndex = index;
-      break;
-    }
-  }
-  if (lastNonSystemIndex >= 0) {
-    result[lastNonSystemIndex] = markCachePoint(result[lastNonSystemIndex]);
-  }
-  return result;
+	const result = [...prompt];
+	const markCachePoint = (message) => ({
+		...message,
+		providerOptions: {
+			...message.providerOptions,
+			bedrock: {
+				...message.providerOptions?.bedrock,
+				cachePoint: { type: "default" }
+			}
+		}
+	});
+	let lastSystemIndex = -1;
+	for (let index = result.length - 1; index >= 0; index--) if (result[index].role === "system") {
+		lastSystemIndex = index;
+		break;
+	}
+	if (lastSystemIndex >= 0) result[lastSystemIndex] = markCachePoint(result[lastSystemIndex]);
+	let lastNonSystemIndex = -1;
+	for (let index = result.length - 1; index >= 0; index--) if (result[index].role !== "system") {
+		lastNonSystemIndex = index;
+		break;
+	}
+	if (lastNonSystemIndex >= 0) result[lastNonSystemIndex] = markCachePoint(result[lastNonSystemIndex]);
+	return result;
 }
 function withBedrockCache(model) {
-  return new Proxy(model, {
-    get(target, property, receiver) {
-      if (property === "doGenerate") {
-        return (options) => target.doGenerate({ ...options, prompt: addBedrockCachePoints(options.prompt) });
-      }
-      if (property === "doStream") {
-        return (options) => target.doStream({ ...options, prompt: addBedrockCachePoints(options.prompt) });
-      }
-      return Reflect.get(target, property, receiver);
-    }
-  });
+	return new Proxy(model, { get(target, property, receiver) {
+		if (property === "doGenerate") return (options) => target.doGenerate({
+			...options,
+			prompt: addBedrockCachePoints(options.prompt)
+		});
+		if (property === "doStream") return (options) => target.doStream({
+			...options,
+			prompt: addBedrockCachePoints(options.prompt)
+		});
+		return Reflect.get(target, property, receiver);
+	} });
 }
 const AMAZON_BEDROCK_GATEWAY_ID = "amazon-bedrock";
+/**
+* Whether AWS credentials look available for Bedrock.
+*
+* Amazon Bedrock authenticates with AWS SigV4 rather than a bearer API key, so
+* this only governs whether Bedrock models are offered as "authenticated" in the
+* picker. We look for the common signals (env vars, bearer token, a configured
+* profile, or a shared credentials/config file) rather than resolving
+* credentials here, since the auth checker must stay sync.
+*/
 function hasAwsCredentials() {
-  if (process.env.AWS_BEARER_TOKEN_BEDROCK || process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY || process.env.AWS_SHARED_CREDENTIALS_FILE || process.env.AWS_CONFIG_FILE || process.env.AWS_PROFILE || process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI || process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI || process.env.AWS_WEB_IDENTITY_TOKEN_FILE) {
-    return true;
-  }
-  const home = process.env.HOME || process.env.USERPROFILE;
-  if (home) {
-    const awsDir = path.join(home, ".aws");
-    const credentialsPath = process.env.AWS_SHARED_CREDENTIALS_FILE ?? path.join(awsDir, "credentials");
-    const configPath = process.env.AWS_CONFIG_FILE ?? path.join(awsDir, "config");
-    if (existsSync(credentialsPath) || existsSync(configPath)) {
-      return true;
-    }
-  }
-  return false;
+	if (process.env.AWS_BEARER_TOKEN_BEDROCK || process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY || process.env.AWS_SHARED_CREDENTIALS_FILE || process.env.AWS_CONFIG_FILE || process.env.AWS_PROFILE || process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI || process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI || process.env.AWS_WEB_IDENTITY_TOKEN_FILE) return true;
+	const home = process.env.HOME || process.env.USERPROFILE;
+	if (home) {
+		const awsDir = path.join(home, ".aws");
+		const credentialsPath = process.env.AWS_SHARED_CREDENTIALS_FILE ?? path.join(awsDir, "credentials");
+		const configPath = process.env.AWS_CONFIG_FILE ?? path.join(awsDir, "config");
+		if (existsSync(credentialsPath) || existsSync(configPath)) return true;
+	}
+	return false;
 }
+/**
+* Create an Amazon Bedrock model.
+*
+* Bedrock authenticates with AWS SigV4 rather than a bearer API key, so this
+* resolves credentials through the standard AWS provider chain
+* (`fromNodeProviderChain`): environment variables, shared `~/.aws` config and
+* SSO profiles, and container/instance roles — the same resolution order the AWS
+* CLI uses. The region falls back to `us-east-1` to match the AWS SDK default.
+*
+* When `AWS_BEARER_TOKEN_BEDROCK` is set, `@ai-sdk/amazon-bedrock` uses bearer
+* auth instead and ignores the credential provider, so we leave that path to the
+* SDK and only wire up SigV4 here.
+*/
 function bedrockProvider(modelId, headers) {
-  const region = process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || "us-east-1";
-  const bedrock = createAmazonBedrock({
-    region,
-    credentialProvider: fromNodeProviderChain(),
-    headers
-  });
-  const model = bedrock(modelId);
-  return supportsBedrockPromptCaching(modelId) ? withBedrockCache(model) : model;
-}
-class AmazonBedrockGateway extends MastraModelGateway {
-  id = AMAZON_BEDROCK_GATEWAY_ID;
-  name = "Amazon Bedrock";
-  shouldEnable() {
-    return hasAwsCredentials();
-  }
-  async fetchProviders() {
-    const providers = {};
-    try {
-      const bedrockModels = await getBedrockModelCatalog();
-      providers["amazon-bedrock"] = {
-        name: "Amazon Bedrock",
-        apiKeyEnvVar: "",
-        apiKeyHeader: "Authorization",
-        gateway: this.id,
-        models: bedrockModels.map((model) => model.id)
-      };
-    } catch (error) {
-      console.warn("Failed to load Amazon Bedrock model catalog:", error);
-    }
-    return providers;
-  }
-  buildUrl(_modelId) {
-    return void 0;
-  }
-  async getApiKey(_modelId) {
-    return hasAwsCredentials() ? "aws-credential-chain" : "";
-  }
-  resolveAuth(_request) {
-    if (hasAwsCredentials()) {
-      return { apiKey: "aws-credential-chain", source: "gateway" };
-    }
-    return void 0;
-  }
-  resolveLanguageModel(args) {
-    return bedrockProvider(args.modelId, args.headers);
-  }
+	const model = createAmazonBedrock({
+		region: process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || "us-east-1",
+		credentialProvider: fromNodeProviderChain(),
+		headers
+	})(modelId);
+	return supportsBedrockPromptCaching(modelId) ? withBedrockCache(model) : model;
 }
+/**
+* Standalone Amazon Bedrock gateway.
+*
+* Bedrock is resolved directly via AWS SigV4 (not through the model router) and
+* its models are surfaced from the public models.dev catalog. It is exposed as
+* its own gateway/provider (`amazon-bedrock/...`) rather than nested under the
+* MastraCode gateway namespace.
+*/
+var AmazonBedrockGateway = class extends MastraModelGateway {
+	id = AMAZON_BEDROCK_GATEWAY_ID;
+	name = "Amazon Bedrock";
+	shouldEnable() {
+		return hasAwsCredentials();
+	}
+	async fetchProviders() {
+		const providers = {};
+		try {
+			const bedrockModels = await getBedrockModelCatalog();
+			providers["amazon-bedrock"] = {
+				name: "Amazon Bedrock",
+				apiKeyEnvVar: "",
+				apiKeyHeader: "Authorization",
+				gateway: this.id,
+				models: bedrockModels.map((model) => model.id)
+			};
+		} catch (error) {
+			console.warn("Failed to load Amazon Bedrock model catalog:", error);
+		}
+		return providers;
+	}
+	buildUrl(_modelId) {}
+	async getApiKey(_modelId) {
+		return hasAwsCredentials() ? "aws-credential-chain" : "";
+	}
+	resolveAuth(_request) {
+		if (hasAwsCredentials()) return {
+			apiKey: "aws-credential-chain",
+			source: "gateway"
+		};
+	}
+	resolveLanguageModel(args) {
+		return bedrockProvider(args.modelId, args.headers);
+	}
+};
 function createAmazonBedrockGateway() {
-  return new AmazonBedrockGateway();
+	return new AmazonBedrockGateway();
 }
-export {
-  AMAZON_BEDROCK_GATEWAY_ID,
-  AmazonBedrockGateway,
-  addBedrockCachePoints,
-  createAmazonBedrockGateway,
-  hasAwsCredentials,
-  supportsBedrockPromptCaching,
-  withBedrockCache
-};
+//#endregion
+export { AMAZON_BEDROCK_GATEWAY_ID, AmazonBedrockGateway, addBedrockCachePoints, createAmazonBedrockGateway, hasAwsCredentials, supportsBedrockPromptCaching, withBedrockCache };
+
 //# sourceMappingURL=amazon-bedrock-gateway.js.map

package/dist/providers/amazon-bedrock-gateway.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/providers/amazon-bedrock-gateway.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\nimport path from 'node:path';\nimport { createAmazonBedrock } from '@ai-sdk/amazon-bedrock';\nimport { fromNodeProviderChain } from '@aws-sdk/credential-providers';\nimport { MastraModelGateway } from '@mastra/core/llm';\nimport type { GatewayAuthRequest, GatewayAuthResult, GatewayLanguageModel, ProviderConfig } from '@mastra/core/llm';\nimport { getBedrockModelCatalog } from './amazon-bedrock.js';\n\ntype ModelRequestHeaders = Record<string, string>;\ntype BedrockModel = ReturnType<ReturnType<typeof createAmazonBedrock>>;\ntype BedrockPrompt = Parameters<BedrockModel['doGenerate']>[0]['prompt'];\n\nconst CACHEABLE_BEDROCK_MODEL_IDS = [\n  'anthropic.claude-3-5-haiku-',\n  'anthropic.claude-3-5-sonnet-20241022-v2:0',\n  'anthropic.claude-3-7-sonnet-',\n  'anthropic.claude-fable-5',\n  'anthropic.claude-haiku-4-5-',\n  'anthropic.claude-opus-4-',\n  'anthropic.claude-sonnet-4-',\n  'anthropic.claude-sonnet-5',\n];\n\nexport function supportsBedrockPromptCaching(modelId: string): boolean {\n  return CACHEABLE_BEDROCK_MODEL_IDS.some(cacheableModelId => modelId.includes(cacheableModelId));\n}\n\nexport function addBedrockCachePoints(prompt: BedrockPrompt): BedrockPrompt {\n  const result = [...prompt];\n  const markCachePoint = (message: (typeof result)[number]) => ({\n    ...message,\n    providerOptions: {\n      ...message.providerOptions,\n      bedrock: {\n        ...message.providerOptions?.bedrock,\n        cachePoint: { type: 'default' },\n      },\n    },\n  });\n\n  let lastSystemIndex = -1;\n  for (let index = result.length - 1; index >= 0; index--) {\n    if (result[index]!.role === 'system') {\n      lastSystemIndex = index;\n      break;\n    }\n  }\n\n  if (lastSystemIndex >= 0) {\n    result[lastSystemIndex] = markCachePoint(result[lastSystemIndex]!);\n  }\n\n  let lastNonSystemIndex = -1;\n  for (let index = result.length - 1; index >= 0; index--) {\n    if (result[index]!.role !== 'system') {\n      lastNonSystemIndex = index;\n      break;\n    }\n  }\n\n  if (lastNonSystemIndex >= 0) {\n    result[lastNonSystemIndex] = markCachePoint(result[lastNonSystemIndex]!);\n  }\n\n  return result;\n}\n\nexport function withBedrockCache(model: BedrockModel): BedrockModel {\n  return new Proxy(model, {\n    get(target, property, receiver) {\n      if (property === 'doGenerate') {\n        return (options: Parameters<BedrockModel['doGenerate']>[0]) =>\n          target.doGenerate({ ...options, prompt: addBedrockCachePoints(options.prompt) });\n      }\n      if (property === 'doStream') {\n        return (options: Parameters<BedrockModel['doStream']>[0]) =>\n          target.doStream({ ...options, prompt: addBedrockCachePoints(options.prompt) });\n      }\n      return Reflect.get(target, property, receiver);\n    },\n  });\n}\n\nexport const AMAZON_BEDROCK_GATEWAY_ID = 'amazon-bedrock';\n\n/**\n * Whether AWS credentials look available for Bedrock.\n *\n * Amazon Bedrock authenticates with AWS SigV4 rather than a bearer API key, so\n * this only governs whether Bedrock models are offered as \"authenticated\" in the\n * picker. We look for the common signals (env vars, bearer token, a configured\n * profile, or a shared credentials/config file) rather than resolving\n * credentials here, since the auth checker must stay sync.\n */\nexport function hasAwsCredentials(): boolean {\n  if (\n    process.env.AWS_BEARER_TOKEN_BEDROCK ||\n    (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) ||\n    process.env.AWS_SHARED_CREDENTIALS_FILE ||\n    process.env.AWS_CONFIG_FILE ||\n    process.env.AWS_PROFILE ||\n    process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI ||\n    process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI ||\n    process.env.AWS_WEB_IDENTITY_TOKEN_FILE\n  ) {\n    return true;\n  }\n  const home = process.env.HOME || process.env.USERPROFILE;\n  if (home) {\n    const awsDir = path.join(home, '.aws');\n    const credentialsPath = process.env.AWS_SHARED_CREDENTIALS_FILE ?? path.join(awsDir, 'credentials');\n    const configPath = process.env.AWS_CONFIG_FILE ?? path.join(awsDir, 'config');\n    if (existsSync(credentialsPath) || existsSync(configPath)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Create an Amazon Bedrock model.\n *\n * Bedrock authenticates with AWS SigV4 rather than a bearer API key, so this\n * resolves credentials through the standard AWS provider chain\n * (`fromNodeProviderChain`): environment variables, shared `~/.aws` config and\n * SSO profiles, and container/instance roles — the same resolution order the AWS\n * CLI uses. The region falls back to `us-east-1` to match the AWS SDK default.\n *\n * When `AWS_BEARER_TOKEN_BEDROCK` is set, `@ai-sdk/amazon-bedrock` uses bearer\n * auth instead and ignores the credential provider, so we leave that path to the\n * SDK and only wire up SigV4 here.\n */\nfunction bedrockProvider(modelId: string, headers?: ModelRequestHeaders) {\n  const region = process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || 'us-east-1';\n  const bedrock = createAmazonBedrock({\n    region,\n    credentialProvider: fromNodeProviderChain(),\n    headers,\n  });\n  const model = bedrock(modelId);\n  return supportsBedrockPromptCaching(modelId) ? withBedrockCache(model) : model;\n}\n\n/**\n * Standalone Amazon Bedrock gateway.\n *\n * Bedrock is resolved directly via AWS SigV4 (not through the model router) and\n * its models are surfaced from the public models.dev catalog. It is exposed as\n * its own gateway/provider (`amazon-bedrock/...`) rather than nested under the\n * MastraCode gateway namespace.\n */\nexport class AmazonBedrockGateway extends MastraModelGateway {\n  readonly id = AMAZON_BEDROCK_GATEWAY_ID;\n  readonly name = 'Amazon Bedrock';\n\n  shouldEnable(): boolean {\n    return hasAwsCredentials();\n  }\n\n  async fetchProviders(): Promise<Record<string, ProviderConfig>> {\n    const providers: Record<string, ProviderConfig> = {};\n    try {\n      const bedrockModels = await getBedrockModelCatalog();\n      providers['amazon-bedrock'] = {\n        name: 'Amazon Bedrock',\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models: bedrockModels.map(model => model.id),\n      };\n    } catch (error) {\n      console.warn('Failed to load Amazon Bedrock model catalog:', error);\n    }\n    return providers;\n  }\n\n  buildUrl(_modelId: string): string | undefined {\n    return undefined;\n  }\n\n  async getApiKey(_modelId: string): Promise<string> {\n    return hasAwsCredentials() ? 'aws-credential-chain' : '';\n  }\n\n  resolveAuth(_request: GatewayAuthRequest): GatewayAuthResult | undefined {\n    // Amazon Bedrock authenticates via the AWS credential chain rather than a\n    // stored API key, so report it as authenticated whenever AWS credentials look\n    // available. The actual SigV4 signing happens inside `bedrockProvider()`.\n    if (hasAwsCredentials()) {\n      return { apiKey: 'aws-credential-chain', source: 'gateway' };\n    }\n    return undefined;\n  }\n\n  resolveLanguageModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    return bedrockProvider(args.modelId, args.headers) as unknown as GatewayLanguageModel;\n  }\n}\n\nexport function createAmazonBedrockGateway(): AmazonBedrockGateway {\n  return new AmazonBedrockGateway();\n}\n"],"mappings":"AAAA,SAAS,kBAAkB;AAC3B,OAAO,UAAU;AACjB,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AACtC,SAAS,0BAA0B;AAEnC,SAAS,8BAA8B;AAMvC,MAAM,8BAA8B;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,SAAS,6BAA6B,SAA0B;AACrE,SAAO,4BAA4B,KAAK,sBAAoB,QAAQ,SAAS,gBAAgB,CAAC;AAChG;AAEO,SAAS,sBAAsB,QAAsC;AAC1E,QAAM,SAAS,CAAC,GAAG,MAAM;AACzB,QAAM,iBAAiB,CAAC,aAAsC;AAAA,IAC5D,GAAG;AAAA,IACH,iBAAiB;AAAA,MACf,GAAG,QAAQ;AAAA,MACX,SAAS;AAAA,QACP,GAAG,QAAQ,iBAAiB;AAAA,QAC5B,YAAY,EAAE,MAAM,UAAU;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AAEA,MAAI,kBAAkB;AACtB,WAAS,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG,SAAS;AACvD,QAAI,OAAO,KAAK,EAAG,SAAS,UAAU;AACpC,wBAAkB;AAClB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,mBAAmB,GAAG;AACxB,WAAO,eAAe,IAAI,eAAe,OAAO,eAAe,CAAE;AAAA,EACnE;AAEA,MAAI,qBAAqB;AACzB,WAAS,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG,SAAS;AACvD,QAAI,OAAO,KAAK,EAAG,SAAS,UAAU;AACpC,2BAAqB;AACrB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,sBAAsB,GAAG;AAC3B,WAAO,kBAAkB,IAAI,eAAe,OAAO,kBAAkB,CAAE;AAAA,EACzE;AAEA,SAAO;AACT;AAEO,SAAS,iBAAiB,OAAmC;AAClE,SAAO,IAAI,MAAM,OAAO;AAAA,IACtB,IAAI,QAAQ,UAAU,UAAU;AAC9B,UAAI,aAAa,cAAc;AAC7B,eAAO,CAAC,YACN,OAAO,WAAW,EAAE,GAAG,SAAS,QAAQ,sBAAsB,QAAQ,MAAM,EAAE,CAAC;AAAA,MACnF;AACA,UAAI,aAAa,YAAY;AAC3B,eAAO,CAAC,YACN,OAAO,SAAS,EAAE,GAAG,SAAS,QAAQ,sBAAsB,QAAQ,MAAM,EAAE,CAAC;AAAA,MACjF;AACA,aAAO,QAAQ,IAAI,QAAQ,UAAU,QAAQ;AAAA,IAC/C;AAAA,EACF,CAAC;AACH;AAEO,MAAM,4BAA4B;AAWlC,SAAS,oBAA6B;AAC3C,MACE,QAAQ,IAAI,4BACX,QAAQ,IAAI,qBAAqB,QAAQ,IAAI,yBAC9C,QAAQ,IAAI,+BACZ,QAAQ,IAAI,mBACZ,QAAQ,IAAI,eACZ,QAAQ,IAAI,0CACZ,QAAQ,IAAI,sCACZ,QAAQ,IAAI,6BACZ;AACA,WAAO;AAAA,EACT;AACA,QAAM,OAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI;AAC7C,MAAI,MAAM;AACR,UAAM,SAAS,KAAK,KAAK,MAAM,MAAM;AACrC,UAAM,kBAAkB,QAAQ,IAAI,+BAA+B,KAAK,KAAK,QAAQ,aAAa;AAClG,UAAM,aAAa,QAAQ,IAAI,mBAAmB,KAAK,KAAK,QAAQ,QAAQ;AAC5E,QAAI,WAAW,eAAe,KAAK,WAAW,UAAU,GAAG;AACzD,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAeA,SAAS,gBAAgB,SAAiB,SAA+B;AACvE,QAAM,SAAS,QAAQ,IAAI,cAAc,QAAQ,IAAI,sBAAsB;AAC3E,QAAM,UAAU,oBAAoB;AAAA,IAClC;AAAA,IACA,oBAAoB,sBAAsB;AAAA,IAC1C;AAAA,EACF,CAAC;AACD,QAAM,QAAQ,QAAQ,OAAO;AAC7B,SAAO,6BAA6B,OAAO,IAAI,iBAAiB,KAAK,IAAI;AAC3E;AAUO,MAAM,6BAA6B,mBAAmB;AAAA,EAClD,KAAK;AAAA,EACL,OAAO;AAAA,EAEhB,eAAwB;AACtB,WAAO,kBAAkB;AAAA,EAC3B;AAAA,EAEA,MAAM,iBAA0D;AAC9D,UAAM,YAA4C,CAAC;AACnD,QAAI;AACF,YAAM,gBAAgB,MAAM,uBAAuB;AACnD,gBAAU,gBAAgB,IAAI;AAAA,QAC5B,MAAM;AAAA,QACN,cAAc;AAAA,QACd,cAAc;AAAA,QACd,SAAS,KAAK;AAAA,QACd,QAAQ,cAAc,IAAI,WAAS,MAAM,EAAE;AAAA,MAC7C;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,KAAK,gDAAgD,KAAK;AAAA,IACpE;AACA,WAAO;AAAA,EACT;AAAA,EAEA,SAAS,UAAsC;AAC7C,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,UAAU,UAAmC;AACjD,WAAO,kBAAkB,IAAI,yBAAyB;AAAA,EACxD;AAAA,EAEA,YAAY,UAA6D;AAIvE,QAAI,kBAAkB,GAAG;AACvB,aAAO,EAAE,QAAQ,wBAAwB,QAAQ,UAAU;AAAA,IAC7D;AACA,WAAO;AAAA,EACT;AAAA,EAEA,qBAAqB,MAOI;AACvB,WAAO,gBAAgB,KAAK,SAAS,KAAK,OAAO;AAAA,EACnD;AACF;AAEO,SAAS,6BAAmD;AACjE,SAAO,IAAI,qBAAqB;AAClC;","names":[]}
+{"version":3,"file":"amazon-bedrock-gateway.js","names":[],"sources":["../../src/providers/amazon-bedrock-gateway.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\nimport path from 'node:path';\nimport { createAmazonBedrock } from '@ai-sdk/amazon-bedrock';\nimport { fromNodeProviderChain } from '@aws-sdk/credential-providers';\nimport { MastraModelGateway } from '@mastra/core/llm';\nimport type { GatewayAuthRequest, GatewayAuthResult, GatewayLanguageModel, ProviderConfig } from '@mastra/core/llm';\nimport { getBedrockModelCatalog } from './amazon-bedrock.js';\n\ntype ModelRequestHeaders = Record<string, string>;\ntype BedrockModel = ReturnType<ReturnType<typeof createAmazonBedrock>>;\ntype BedrockPrompt = Parameters<BedrockModel['doGenerate']>[0]['prompt'];\n\nconst CACHEABLE_BEDROCK_MODEL_IDS = [\n  'anthropic.claude-3-5-haiku-',\n  'anthropic.claude-3-5-sonnet-20241022-v2:0',\n  'anthropic.claude-3-7-sonnet-',\n  'anthropic.claude-fable-5',\n  'anthropic.claude-haiku-4-5-',\n  'anthropic.claude-opus-4-',\n  'anthropic.claude-sonnet-4-',\n  'anthropic.claude-sonnet-5',\n];\n\nexport function supportsBedrockPromptCaching(modelId: string): boolean {\n  return CACHEABLE_BEDROCK_MODEL_IDS.some(cacheableModelId => modelId.includes(cacheableModelId));\n}\n\nexport function addBedrockCachePoints(prompt: BedrockPrompt): BedrockPrompt {\n  const result = [...prompt];\n  const markCachePoint = (message: (typeof result)[number]) => ({\n    ...message,\n    providerOptions: {\n      ...message.providerOptions,\n      bedrock: {\n        ...message.providerOptions?.bedrock,\n        cachePoint: { type: 'default' },\n      },\n    },\n  });\n\n  let lastSystemIndex = -1;\n  for (let index = result.length - 1; index >= 0; index--) {\n    if (result[index]!.role === 'system') {\n      lastSystemIndex = index;\n      break;\n    }\n  }\n\n  if (lastSystemIndex >= 0) {\n    result[lastSystemIndex] = markCachePoint(result[lastSystemIndex]!);\n  }\n\n  let lastNonSystemIndex = -1;\n  for (let index = result.length - 1; index >= 0; index--) {\n    if (result[index]!.role !== 'system') {\n      lastNonSystemIndex = index;\n      break;\n    }\n  }\n\n  if (lastNonSystemIndex >= 0) {\n    result[lastNonSystemIndex] = markCachePoint(result[lastNonSystemIndex]!);\n  }\n\n  return result;\n}\n\nexport function withBedrockCache(model: BedrockModel): BedrockModel {\n  return new Proxy(model, {\n    get(target, property, receiver) {\n      if (property === 'doGenerate') {\n        return (options: Parameters<BedrockModel['doGenerate']>[0]) =>\n          target.doGenerate({ ...options, prompt: addBedrockCachePoints(options.prompt) });\n      }\n      if (property === 'doStream') {\n        return (options: Parameters<BedrockModel['doStream']>[0]) =>\n          target.doStream({ ...options, prompt: addBedrockCachePoints(options.prompt) });\n      }\n      return Reflect.get(target, property, receiver);\n    },\n  });\n}\n\nexport const AMAZON_BEDROCK_GATEWAY_ID = 'amazon-bedrock';\n\n/**\n * Whether AWS credentials look available for Bedrock.\n *\n * Amazon Bedrock authenticates with AWS SigV4 rather than a bearer API key, so\n * this only governs whether Bedrock models are offered as \"authenticated\" in the\n * picker. We look for the common signals (env vars, bearer token, a configured\n * profile, or a shared credentials/config file) rather than resolving\n * credentials here, since the auth checker must stay sync.\n */\nexport function hasAwsCredentials(): boolean {\n  if (\n    process.env.AWS_BEARER_TOKEN_BEDROCK ||\n    (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) ||\n    process.env.AWS_SHARED_CREDENTIALS_FILE ||\n    process.env.AWS_CONFIG_FILE ||\n    process.env.AWS_PROFILE ||\n    process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI ||\n    process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI ||\n    process.env.AWS_WEB_IDENTITY_TOKEN_FILE\n  ) {\n    return true;\n  }\n  const home = process.env.HOME || process.env.USERPROFILE;\n  if (home) {\n    const awsDir = path.join(home, '.aws');\n    const credentialsPath = process.env.AWS_SHARED_CREDENTIALS_FILE ?? path.join(awsDir, 'credentials');\n    const configPath = process.env.AWS_CONFIG_FILE ?? path.join(awsDir, 'config');\n    if (existsSync(credentialsPath) || existsSync(configPath)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Create an Amazon Bedrock model.\n *\n * Bedrock authenticates with AWS SigV4 rather than a bearer API key, so this\n * resolves credentials through the standard AWS provider chain\n * (`fromNodeProviderChain`): environment variables, shared `~/.aws` config and\n * SSO profiles, and container/instance roles — the same resolution order the AWS\n * CLI uses. The region falls back to `us-east-1` to match the AWS SDK default.\n *\n * When `AWS_BEARER_TOKEN_BEDROCK` is set, `@ai-sdk/amazon-bedrock` uses bearer\n * auth instead and ignores the credential provider, so we leave that path to the\n * SDK and only wire up SigV4 here.\n */\nfunction bedrockProvider(modelId: string, headers?: ModelRequestHeaders) {\n  const region = process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || 'us-east-1';\n  const bedrock = createAmazonBedrock({\n    region,\n    credentialProvider: fromNodeProviderChain(),\n    headers,\n  });\n  const model = bedrock(modelId);\n  return supportsBedrockPromptCaching(modelId) ? withBedrockCache(model) : model;\n}\n\n/**\n * Standalone Amazon Bedrock gateway.\n *\n * Bedrock is resolved directly via AWS SigV4 (not through the model router) and\n * its models are surfaced from the public models.dev catalog. It is exposed as\n * its own gateway/provider (`amazon-bedrock/...`) rather than nested under the\n * MastraCode gateway namespace.\n */\nexport class AmazonBedrockGateway extends MastraModelGateway {\n  readonly id = AMAZON_BEDROCK_GATEWAY_ID;\n  readonly name = 'Amazon Bedrock';\n\n  shouldEnable(): boolean {\n    return hasAwsCredentials();\n  }\n\n  async fetchProviders(): Promise<Record<string, ProviderConfig>> {\n    const providers: Record<string, ProviderConfig> = {};\n    try {\n      const bedrockModels = await getBedrockModelCatalog();\n      providers['amazon-bedrock'] = {\n        name: 'Amazon Bedrock',\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models: bedrockModels.map(model => model.id),\n      };\n    } catch (error) {\n      console.warn('Failed to load Amazon Bedrock model catalog:', error);\n    }\n    return providers;\n  }\n\n  buildUrl(_modelId: string): string | undefined {\n    return undefined;\n  }\n\n  async getApiKey(_modelId: string): Promise<string> {\n    return hasAwsCredentials() ? 'aws-credential-chain' : '';\n  }\n\n  resolveAuth(_request: GatewayAuthRequest): GatewayAuthResult | undefined {\n    // Amazon Bedrock authenticates via the AWS credential chain rather than a\n    // stored API key, so report it as authenticated whenever AWS credentials look\n    // available. The actual SigV4 signing happens inside `bedrockProvider()`.\n    if (hasAwsCredentials()) {\n      return { apiKey: 'aws-credential-chain', source: 'gateway' };\n    }\n    return undefined;\n  }\n\n  resolveLanguageModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    return bedrockProvider(args.modelId, args.headers) as unknown as GatewayLanguageModel;\n  }\n}\n\nexport function createAmazonBedrockGateway(): AmazonBedrockGateway {\n  return new AmazonBedrockGateway();\n}\n"],"mappings":";;;;;;;AAYA,MAAM,8BAA8B;CAClC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,SAAgB,6BAA6B,SAA0B;CACrE,OAAO,4BAA4B,MAAK,qBAAoB,QAAQ,SAAS,gBAAgB,CAAC;AAChG;AAEA,SAAgB,sBAAsB,QAAsC;CAC1E,MAAM,SAAS,CAAC,GAAG,MAAM;CACzB,MAAM,kBAAkB,aAAsC;EAC5D,GAAG;EACH,iBAAiB;GACf,GAAG,QAAQ;GACX,SAAS;IACP,GAAG,QAAQ,iBAAiB;IAC5B,YAAY,EAAE,MAAM,UAAU;GAChC;EACF;CACF;CAEA,IAAI,kBAAkB;CACtB,KAAK,IAAI,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG,SAC9C,IAAI,OAAO,MAAM,CAAE,SAAS,UAAU;EACpC,kBAAkB;EAClB;CACF;CAGF,IAAI,mBAAmB,GACrB,OAAO,mBAAmB,eAAe,OAAO,gBAAiB;CAGnE,IAAI,qBAAqB;CACzB,KAAK,IAAI,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG,SAC9C,IAAI,OAAO,MAAM,CAAE,SAAS,UAAU;EACpC,qBAAqB;EACrB;CACF;CAGF,IAAI,sBAAsB,GACxB,OAAO,sBAAsB,eAAe,OAAO,mBAAoB;CAGzE,OAAO;AACT;AAEA,SAAgB,iBAAiB,OAAmC;CAClE,OAAO,IAAI,MAAM,OAAO,EACtB,IAAI,QAAQ,UAAU,UAAU;EAC9B,IAAI,aAAa,cACf,QAAQ,YACN,OAAO,WAAW;GAAE,GAAG;GAAS,QAAQ,sBAAsB,QAAQ,MAAM;EAAE,CAAC;EAEnF,IAAI,aAAa,YACf,QAAQ,YACN,OAAO,SAAS;GAAE,GAAG;GAAS,QAAQ,sBAAsB,QAAQ,MAAM;EAAE,CAAC;EAEjF,OAAO,QAAQ,IAAI,QAAQ,UAAU,QAAQ;CAC/C,EACF,CAAC;AACH;AAEA,MAAa,4BAA4B;;;;;;;;;;AAWzC,SAAgB,oBAA6B;CAC3C,IACE,QAAQ,IAAI,4BACX,QAAQ,IAAI,qBAAqB,QAAQ,IAAI,yBAC9C,QAAQ,IAAI,+BACZ,QAAQ,IAAI,mBACZ,QAAQ,IAAI,eACZ,QAAQ,IAAI,0CACZ,QAAQ,IAAI,sCACZ,QAAQ,IAAI,6BAEZ,OAAO;CAET,MAAM,OAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI;CAC7C,IAAI,MAAM;EACR,MAAM,SAAS,KAAK,KAAK,MAAM,MAAM;EACrC,MAAM,kBAAkB,QAAQ,IAAI,+BAA+B,KAAK,KAAK,QAAQ,aAAa;EAClG,MAAM,aAAa,QAAQ,IAAI,mBAAmB,KAAK,KAAK,QAAQ,QAAQ;EAC5E,IAAI,WAAW,eAAe,KAAK,WAAW,UAAU,GACtD,OAAO;CAEX;CACA,OAAO;AACT;;;;;;;;;;;;;;AAeA,SAAS,gBAAgB,SAAiB,SAA+B;CAOvE,MAAM,QALU,oBAAoB;EAClC,QAFa,QAAQ,IAAI,cAAc,QAAQ,IAAI,sBAAsB;EAGzE,oBAAoB,sBAAsB;EAC1C;CACF,CACoB,CAAC,CAAC,OAAO;CAC7B,OAAO,6BAA6B,OAAO,IAAI,iBAAiB,KAAK,IAAI;AAC3E;;;;;;;;;AAUA,IAAa,uBAAb,cAA0C,mBAAmB;CAC3D,KAAc;CACd,OAAgB;CAEhB,eAAwB;EACtB,OAAO,kBAAkB;CAC3B;CAEA,MAAM,iBAA0D;EAC9D,MAAM,YAA4C,CAAC;EACnD,IAAI;GACF,MAAM,gBAAgB,MAAM,uBAAuB;GACnD,UAAU,oBAAoB;IAC5B,MAAM;IACN,cAAc;IACd,cAAc;IACd,SAAS,KAAK;IACd,QAAQ,cAAc,KAAI,UAAS,MAAM,EAAE;GAC7C;EACF,SAAS,OAAO;GACd,QAAQ,KAAK,gDAAgD,KAAK;EACpE;EACA,OAAO;CACT;CAEA,SAAS,UAAsC,CAE/C;CAEA,MAAM,UAAU,UAAmC;EACjD,OAAO,kBAAkB,IAAI,yBAAyB;CACxD;CAEA,YAAY,UAA6D;EAIvE,IAAI,kBAAkB,GACpB,OAAO;GAAE,QAAQ;GAAwB,QAAQ;EAAU;CAG/D;CAEA,qBAAqB,MAOI;EACvB,OAAO,gBAAgB,KAAK,SAAS,KAAK,OAAO;CACnD;AACF;AAEA,SAAgB,6BAAmD;CACjE,OAAO,IAAI,qBAAqB;AAClC"}

package/dist/providers/amazon-bedrock.js

@@ -1,62 +1,83 @@
+//#region src/providers/amazon-bedrock.ts
+/**
+* Amazon Bedrock model catalog.
+*
+* Bedrock is not part of mastracode's gateway-synced model router (it
+* authenticates with AWS SigV4 rather than an API key / base URL, so it is
+* resolved directly in `agents/model.ts`). To still offer Bedrock models in the
+* `/models` picker and packs, we fetch the public models.dev catalog — the same
+* source the model router uses — and expose the `amazon-bedrock` provider's
+* model list. This mirrors the GitHub Copilot catalog approach.
+*/
 const MODELS_DEV_API_URL = "https://models.dev/api.json";
 const BEDROCK_PROVIDER_ID = "amazon-bedrock";
-const CATALOG_TTL_MS = 60 * 60 * 1e3;
+const CATALOG_TTL_MS = 3600 * 1e3;
 const CATALOG_FAILURE_TTL_MS = 60 * 1e3;
 const CATALOG_FETCH_TIMEOUT_MS = 5e3;
+/**
+* A small, stable fallback so Bedrock packs keep working offline or when
+* models.dev is unreachable. Intentionally minimal — the live catalog is the
+* source of truth and supersedes this within one fetch.
+*/
 const BEDROCK_FALLBACK_MODELS = [
-  { id: "us.anthropic.claude-opus-4-6-v1" },
-  { id: "us.anthropic.claude-sonnet-4-5-20250929-v1:0" },
-  { id: "us.anthropic.claude-haiku-4-5-20251001-v1:0" }
+	{ id: "us.anthropic.claude-opus-4-6-v1" },
+	{ id: "us.anthropic.claude-sonnet-4-5-20250929-v1:0" },
+	{ id: "us.anthropic.claude-haiku-4-5-20251001-v1:0" }
 ];
 let catalogCache = null;
 let inflightFetch = null;
+/** Reset the in-process Bedrock catalog cache (test seam). */
 function clearBedrockCatalogCache() {
-  catalogCache = null;
-  inflightFetch = null;
+	catalogCache = null;
+	inflightFetch = null;
 }
 async function fetchBedrockModels(signal) {
-  const response = await fetch(MODELS_DEV_API_URL, { signal });
-  if (!response.ok) {
-    throw new Error(`models.dev returned ${response.status}`);
-  }
-  const data = await response.json();
-  const provider = data[BEDROCK_PROVIDER_ID];
-  const models = provider?.models ?? {};
-  return Object.keys(models).sort().map((id) => ({ id }));
+	const response = await fetch(MODELS_DEV_API_URL, { signal });
+	if (!response.ok) throw new Error(`models.dev returned ${response.status}`);
+	const models = (await response.json())[BEDROCK_PROVIDER_ID]?.models ?? {};
+	return Object.keys(models).sort().map((id) => ({ id }));
 }
+/**
+* Return the available Amazon Bedrock models.
+*
+* - Returns the cached list when a recent fetch succeeded.
+* - On cache miss / expiry, fetches the models.dev catalog with a 5s timeout and
+*   caches it for an hour.
+* - On fetch failure, returns a small hard-coded fallback (so packs still work
+*   offline) and caches that briefly to avoid hammering the network.
+*
+* Concurrent calls during a fetch share the inflight promise.
+*/
 async function getBedrockModelCatalog() {
-  const now = Date.now();
-  if (catalogCache && now - catalogCache.fetchedAt < catalogCache.ttl) {
-    return catalogCache.models;
-  }
-  if (inflightFetch) return inflightFetch;
-  inflightFetch = (async () => {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);
-    try {
-      const models = await fetchBedrockModels(controller.signal);
-      catalogCache = { fetchedAt: Date.now(), ttl: CATALOG_TTL_MS, models };
-      return models;
-    } catch (error) {
-      catalogCache = {
-        fetchedAt: Date.now(),
-        ttl: CATALOG_FAILURE_TTL_MS,
-        models: BEDROCK_FALLBACK_MODELS
-      };
-      console.warn(
-        "Failed to fetch live Amazon Bedrock models, using fallback list:",
-        error instanceof Error ? error.message : error
-      );
-      return BEDROCK_FALLBACK_MODELS;
-    } finally {
-      clearTimeout(timer);
-      inflightFetch = null;
-    }
-  })();
-  return inflightFetch;
+	if (catalogCache && Date.now() - catalogCache.fetchedAt < catalogCache.ttl) return catalogCache.models;
+	if (inflightFetch) return inflightFetch;
+	inflightFetch = (async () => {
+		const controller = new AbortController();
+		const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);
+		try {
+			const models = await fetchBedrockModels(controller.signal);
+			catalogCache = {
+				fetchedAt: Date.now(),
+				ttl: CATALOG_TTL_MS,
+				models
+			};
+			return models;
+		} catch (error) {
+			catalogCache = {
+				fetchedAt: Date.now(),
+				ttl: CATALOG_FAILURE_TTL_MS,
+				models: BEDROCK_FALLBACK_MODELS
+			};
+			console.warn("Failed to fetch live Amazon Bedrock models, using fallback list:", error instanceof Error ? error.message : error);
+			return BEDROCK_FALLBACK_MODELS;
+		} finally {
+			clearTimeout(timer);
+			inflightFetch = null;
+		}
+	})();
+	return inflightFetch;
 }
-export {
-  clearBedrockCatalogCache,
-  getBedrockModelCatalog
-};
+//#endregion
+export { clearBedrockCatalogCache, getBedrockModelCatalog };
+
 //# sourceMappingURL=amazon-bedrock.js.map

package/dist/providers/amazon-bedrock.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/providers/amazon-bedrock.ts"],"sourcesContent":["/**\n * Amazon Bedrock model catalog.\n *\n * Bedrock is not part of mastracode's gateway-synced model router (it\n * authenticates with AWS SigV4 rather than an API key / base URL, so it is\n * resolved directly in `agents/model.ts`). To still offer Bedrock models in the\n * `/models` picker and packs, we fetch the public models.dev catalog — the same\n * source the model router uses — and expose the `amazon-bedrock` provider's\n * model list. This mirrors the GitHub Copilot catalog approach.\n */\n\nconst MODELS_DEV_API_URL = 'https://models.dev/api.json';\nconst BEDROCK_PROVIDER_ID = 'amazon-bedrock';\n\nconst CATALOG_TTL_MS = 60 * 60 * 1000;\nconst CATALOG_FAILURE_TTL_MS = 60 * 1000;\nconst CATALOG_FETCH_TIMEOUT_MS = 5_000;\n\nexport interface BedrockModelEntry {\n  id: string;\n}\n\n/**\n * A small, stable fallback so Bedrock packs keep working offline or when\n * models.dev is unreachable. Intentionally minimal — the live catalog is the\n * source of truth and supersedes this within one fetch.\n */\nconst BEDROCK_FALLBACK_MODELS: BedrockModelEntry[] = [\n  { id: 'us.anthropic.claude-opus-4-6-v1' },\n  { id: 'us.anthropic.claude-sonnet-4-5-20250929-v1:0' },\n  { id: 'us.anthropic.claude-haiku-4-5-20251001-v1:0' },\n];\n\ninterface CatalogCacheEntry {\n  fetchedAt: number;\n  ttl: number;\n  models: BedrockModelEntry[];\n}\n\nlet catalogCache: CatalogCacheEntry | null = null;\nlet inflightFetch: Promise<BedrockModelEntry[]> | null = null;\n\n/** Reset the in-process Bedrock catalog cache (test seam). */\nexport function clearBedrockCatalogCache(): void {\n  catalogCache = null;\n  inflightFetch = null;\n}\n\nasync function fetchBedrockModels(signal: AbortSignal): Promise<BedrockModelEntry[]> {\n  const response = await fetch(MODELS_DEV_API_URL, { signal });\n  if (!response.ok) {\n    throw new Error(`models.dev returned ${response.status}`);\n  }\n  const data = (await response.json()) as Record<string, { models?: Record<string, unknown> }>;\n  const provider = data[BEDROCK_PROVIDER_ID];\n  const models = provider?.models ?? {};\n  return Object.keys(models)\n    .sort()\n    .map(id => ({ id }));\n}\n\n/**\n * Return the available Amazon Bedrock models.\n *\n * - Returns the cached list when a recent fetch succeeded.\n * - On cache miss / expiry, fetches the models.dev catalog with a 5s timeout and\n *   caches it for an hour.\n * - On fetch failure, returns a small hard-coded fallback (so packs still work\n *   offline) and caches that briefly to avoid hammering the network.\n *\n * Concurrent calls during a fetch share the inflight promise.\n */\nexport async function getBedrockModelCatalog(): Promise<BedrockModelEntry[]> {\n  const now = Date.now();\n  if (catalogCache && now - catalogCache.fetchedAt < catalogCache.ttl) {\n    return catalogCache.models;\n  }\n\n  if (inflightFetch) return inflightFetch;\n\n  inflightFetch = (async (): Promise<BedrockModelEntry[]> => {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);\n    try {\n      const models = await fetchBedrockModels(controller.signal);\n      catalogCache = { fetchedAt: Date.now(), ttl: CATALOG_TTL_MS, models };\n      return models;\n    } catch (error) {\n      catalogCache = {\n        fetchedAt: Date.now(),\n        ttl: CATALOG_FAILURE_TTL_MS,\n        models: BEDROCK_FALLBACK_MODELS,\n      };\n      console.warn(\n        'Failed to fetch live Amazon Bedrock models, using fallback list:',\n        error instanceof Error ? error.message : error,\n      );\n      return BEDROCK_FALLBACK_MODELS;\n    } finally {\n      clearTimeout(timer);\n      inflightFetch = null;\n    }\n  })();\n\n  return inflightFetch;\n}\n"],"mappings":"AAWA,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAE5B,MAAM,iBAAiB,KAAK,KAAK;AACjC,MAAM,yBAAyB,KAAK;AACpC,MAAM,2BAA2B;AAWjC,MAAM,0BAA+C;AAAA,EACnD,EAAE,IAAI,kCAAkC;AAAA,EACxC,EAAE,IAAI,+CAA+C;AAAA,EACrD,EAAE,IAAI,8CAA8C;AACtD;AAQA,IAAI,eAAyC;AAC7C,IAAI,gBAAqD;AAGlD,SAAS,2BAAiC;AAC/C,iBAAe;AACf,kBAAgB;AAClB;AAEA,eAAe,mBAAmB,QAAmD;AACnF,QAAM,WAAW,MAAM,MAAM,oBAAoB,EAAE,OAAO,CAAC;AAC3D,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,MAAM,uBAAuB,SAAS,MAAM,EAAE;AAAA,EAC1D;AACA,QAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,QAAM,WAAW,KAAK,mBAAmB;AACzC,QAAM,SAAS,UAAU,UAAU,CAAC;AACpC,SAAO,OAAO,KAAK,MAAM,EACtB,KAAK,EACL,IAAI,SAAO,EAAE,GAAG,EAAE;AACvB;AAaA,eAAsB,yBAAuD;AAC3E,QAAM,MAAM,KAAK,IAAI;AACrB,MAAI,gBAAgB,MAAM,aAAa,YAAY,aAAa,KAAK;AACnE,WAAO,aAAa;AAAA,EACtB;AAEA,MAAI,cAAe,QAAO;AAE1B,mBAAiB,YAA0C;AACzD,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,wBAAwB;AAC3E,QAAI;AACF,YAAM,SAAS,MAAM,mBAAmB,WAAW,MAAM;AACzD,qBAAe,EAAE,WAAW,KAAK,IAAI,GAAG,KAAK,gBAAgB,OAAO;AACpE,aAAO;AAAA,IACT,SAAS,OAAO;AACd,qBAAe;AAAA,QACb,WAAW,KAAK,IAAI;AAAA,QACpB,KAAK;AAAA,QACL,QAAQ;AAAA,MACV;AACA,cAAQ;AAAA,QACN;AAAA,QACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC3C;AACA,aAAO;AAAA,IACT,UAAE;AACA,mBAAa,KAAK;AAClB,sBAAgB;AAAA,IAClB;AAAA,EACF,GAAG;AAEH,SAAO;AACT;","names":[]}
+{"version":3,"file":"amazon-bedrock.js","names":[],"sources":["../../src/providers/amazon-bedrock.ts"],"sourcesContent":["/**\n * Amazon Bedrock model catalog.\n *\n * Bedrock is not part of mastracode's gateway-synced model router (it\n * authenticates with AWS SigV4 rather than an API key / base URL, so it is\n * resolved directly in `agents/model.ts`). To still offer Bedrock models in the\n * `/models` picker and packs, we fetch the public models.dev catalog — the same\n * source the model router uses — and expose the `amazon-bedrock` provider's\n * model list. This mirrors the GitHub Copilot catalog approach.\n */\n\nconst MODELS_DEV_API_URL = 'https://models.dev/api.json';\nconst BEDROCK_PROVIDER_ID = 'amazon-bedrock';\n\nconst CATALOG_TTL_MS = 60 * 60 * 1000;\nconst CATALOG_FAILURE_TTL_MS = 60 * 1000;\nconst CATALOG_FETCH_TIMEOUT_MS = 5_000;\n\nexport interface BedrockModelEntry {\n  id: string;\n}\n\n/**\n * A small, stable fallback so Bedrock packs keep working offline or when\n * models.dev is unreachable. Intentionally minimal — the live catalog is the\n * source of truth and supersedes this within one fetch.\n */\nconst BEDROCK_FALLBACK_MODELS: BedrockModelEntry[] = [\n  { id: 'us.anthropic.claude-opus-4-6-v1' },\n  { id: 'us.anthropic.claude-sonnet-4-5-20250929-v1:0' },\n  { id: 'us.anthropic.claude-haiku-4-5-20251001-v1:0' },\n];\n\ninterface CatalogCacheEntry {\n  fetchedAt: number;\n  ttl: number;\n  models: BedrockModelEntry[];\n}\n\nlet catalogCache: CatalogCacheEntry | null = null;\nlet inflightFetch: Promise<BedrockModelEntry[]> | null = null;\n\n/** Reset the in-process Bedrock catalog cache (test seam). */\nexport function clearBedrockCatalogCache(): void {\n  catalogCache = null;\n  inflightFetch = null;\n}\n\nasync function fetchBedrockModels(signal: AbortSignal): Promise<BedrockModelEntry[]> {\n  const response = await fetch(MODELS_DEV_API_URL, { signal });\n  if (!response.ok) {\n    throw new Error(`models.dev returned ${response.status}`);\n  }\n  const data = (await response.json()) as Record<string, { models?: Record<string, unknown> }>;\n  const provider = data[BEDROCK_PROVIDER_ID];\n  const models = provider?.models ?? {};\n  return Object.keys(models)\n    .sort()\n    .map(id => ({ id }));\n}\n\n/**\n * Return the available Amazon Bedrock models.\n *\n * - Returns the cached list when a recent fetch succeeded.\n * - On cache miss / expiry, fetches the models.dev catalog with a 5s timeout and\n *   caches it for an hour.\n * - On fetch failure, returns a small hard-coded fallback (so packs still work\n *   offline) and caches that briefly to avoid hammering the network.\n *\n * Concurrent calls during a fetch share the inflight promise.\n */\nexport async function getBedrockModelCatalog(): Promise<BedrockModelEntry[]> {\n  const now = Date.now();\n  if (catalogCache && now - catalogCache.fetchedAt < catalogCache.ttl) {\n    return catalogCache.models;\n  }\n\n  if (inflightFetch) return inflightFetch;\n\n  inflightFetch = (async (): Promise<BedrockModelEntry[]> => {\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);\n    try {\n      const models = await fetchBedrockModels(controller.signal);\n      catalogCache = { fetchedAt: Date.now(), ttl: CATALOG_TTL_MS, models };\n      return models;\n    } catch (error) {\n      catalogCache = {\n        fetchedAt: Date.now(),\n        ttl: CATALOG_FAILURE_TTL_MS,\n        models: BEDROCK_FALLBACK_MODELS,\n      };\n      console.warn(\n        'Failed to fetch live Amazon Bedrock models, using fallback list:',\n        error instanceof Error ? error.message : error,\n      );\n      return BEDROCK_FALLBACK_MODELS;\n    } finally {\n      clearTimeout(timer);\n      inflightFetch = null;\n    }\n  })();\n\n  return inflightFetch;\n}\n"],"mappings":";;;;;;;;;;;AAWA,MAAM,qBAAqB;AAC3B,MAAM,sBAAsB;AAE5B,MAAM,iBAAiB,OAAU;AACjC,MAAM,yBAAyB,KAAK;AACpC,MAAM,2BAA2B;;;;;;AAWjC,MAAM,0BAA+C;CACnD,EAAE,IAAI,kCAAkC;CACxC,EAAE,IAAI,+CAA+C;CACrD,EAAE,IAAI,8CAA8C;AACtD;AAQA,IAAI,eAAyC;AAC7C,IAAI,gBAAqD;;AAGzD,SAAgB,2BAAiC;CAC/C,eAAe;CACf,gBAAgB;AAClB;AAEA,eAAe,mBAAmB,QAAmD;CACnF,MAAM,WAAW,MAAM,MAAM,oBAAoB,EAAE,OAAO,CAAC;CAC3D,IAAI,CAAC,SAAS,IACZ,MAAM,IAAI,MAAM,uBAAuB,SAAS,QAAQ;CAI1D,MAAM,UADW,MADG,SAAS,KAAK,EAAA,CACZ,oBACC,EAAE,UAAU,CAAC;CACpC,OAAO,OAAO,KAAK,MAAM,CAAC,CACvB,KAAK,CAAC,CACN,KAAI,QAAO,EAAE,GAAG,EAAE;AACvB;;;;;;;;;;;;AAaA,eAAsB,yBAAuD;CAE3E,IAAI,gBADQ,KAAK,IACK,IAAI,aAAa,YAAY,aAAa,KAC9D,OAAO,aAAa;CAGtB,IAAI,eAAe,OAAO;CAE1B,iBAAiB,YAA0C;EACzD,MAAM,aAAa,IAAI,gBAAgB;EACvC,MAAM,QAAQ,iBAAiB,WAAW,MAAM,GAAG,wBAAwB;EAC3E,IAAI;GACF,MAAM,SAAS,MAAM,mBAAmB,WAAW,MAAM;GACzD,eAAe;IAAE,WAAW,KAAK,IAAI;IAAG,KAAK;IAAgB;GAAO;GACpE,OAAO;EACT,SAAS,OAAO;GACd,eAAe;IACb,WAAW,KAAK,IAAI;IACpB,KAAK;IACL,QAAQ;GACV;GACA,QAAQ,KACN,oEACA,iBAAiB,QAAQ,MAAM,UAAU,KAC3C;GACA,OAAO;EACT,UAAU;GACR,aAAa,KAAK;GAClB,gBAAgB;EAClB;CACF,EAAA,CAAG;CAEH,OAAO;AACT"}