@openclaw/amazon-bedrock-provider 2026.7.1 → 2026.7.2-beta.1

package/dist/aws-credential-refresh.js

@@ -1,4 +1,8 @@
 //#region extensions/amazon-bedrock/aws-credential-refresh.ts
+/**
+* AWS shared config cache refresh helpers for Bedrock. They nudge the AWS SDK
+* to re-read profile/SSO config when no static credentials are present.
+*/
 function hasStaticAwsCredentialEnv(env) {
 	return Boolean(env.AWS_ACCESS_KEY_ID && env.AWS_SECRET_ACCESS_KEY);
 }
@@ -7,13 +11,11 @@ function shouldRefreshAwsSharedConfigCacheForBedrock(env) {
 	if (env.AWS_BEDROCK_SKIP_AUTH === "1" || env.AWS_BEARER_TOKEN_BEDROCK) return false;
 	return !hasStaticAwsCredentialEnv(env);
 }
-async function loadSharedIniFileLoader() {
-	return await import("@smithy/shared-ini-file-loader");
-}
 /** Refresh Smithy shared config files when Bedrock needs default-chain credentials. */
 async function refreshAwsSharedConfigCacheForBedrock(env = process.env) {
 	if (!shouldRefreshAwsSharedConfigCacheForBedrock(env)) return;
-	await (await loadSharedIniFileLoader()).loadSharedConfigFiles({ ignoreCache: true });
+	const { loadSharedConfigFiles } = await import("@smithy/shared-ini-file-loader");
+	await loadSharedConfigFiles({ ignoreCache: true });
 }
 //#endregion
 export { refreshAwsSharedConfigCacheForBedrock };

package/dist/embedding-provider.js

@@ -104,25 +104,18 @@ function inferFamily(modelId) {
 	if (id.startsWith("twelvelabs.")) return "twelvelabs";
 	return "titan-v1";
 }
-let sdkCache = null;
-let credentialProviderSdkCache;
+let sdkPromise = null;
+let credentialProviderPromise = null;
 async function loadSdk() {
-	if (sdkCache) return sdkCache;
 	try {
-		sdkCache = await import("@aws-sdk/client-bedrock-runtime");
-		return sdkCache;
+		return await (sdkPromise ??= import("@aws-sdk/client-bedrock-runtime"));
 	} catch {
+		sdkPromise = null;
 		throw new Error("No API key found for provider bedrock: @aws-sdk/client-bedrock-runtime is not installed. Install it with: npm install @aws-sdk/client-bedrock-runtime");
 	}
 }
-async function loadCredentialProviderSdk() {
-	if (credentialProviderSdkCache !== void 0) return credentialProviderSdkCache;
-	try {
-		credentialProviderSdkCache = await import("@aws-sdk/credential-provider-node");
-	} catch {
-		credentialProviderSdkCache = null;
-	}
-	return credentialProviderSdkCache;
+function loadDefaultCredentialProvider() {
+	return credentialProviderPromise ??= import("@aws-sdk/credential-provider-node").then(({ defaultProvider }) => defaultProvider).catch(() => null);
 }
 const MODEL_PREFIX_RE = /^(?:bedrock|amazon-bedrock|aws)\//;
 const REGION_RE = /bedrock-runtime\.([a-z0-9-]+)\./;
@@ -295,13 +288,13 @@ function resolveBedrockEmbeddingClient(options) {
 		dimensions
 	};
 }
-async function hasAwsCredentials(env = process.env, loadCredentialProvider = loadCredentialProviderSdk) {
+async function hasAwsCredentials(env = process.env, loadCredentialProvider = loadDefaultCredentialProvider) {
 	if (env.AWS_ACCESS_KEY_ID?.trim() && env.AWS_SECRET_ACCESS_KEY?.trim()) return true;
 	if (env.AWS_BEARER_TOKEN_BEDROCK?.trim()) return true;
-	const credentialProviderSdk = await loadCredentialProvider();
-	if (!credentialProviderSdk) return false;
+	const defaultProvider = await loadCredentialProvider();
+	if (!defaultProvider) return false;
 	try {
-		const credentials = await credentialProviderSdk.defaultProvider({
+		const credentials = await defaultProvider({
 			timeout: 1e3,
 			maxRetries: 0
 		})();

package/dist/register.sync.runtime.js

@@ -129,18 +129,15 @@ function resolvedModelSupportsCaching(modelArn) {
 	return supportsBedrockPromptCaching(modelArn);
 }
 const appProfileTraitsCache = /* @__PURE__ */ new Map();
-async function createBedrockControlPlane(region) {
-	await refreshAwsSharedConfigCacheForBedrock();
-	const { BedrockClient, GetInferenceProfileCommand } = await import("@aws-sdk/client-bedrock");
-	const client = new BedrockClient(region ? { region } : {});
-	return { getInferenceProfile: async (input) => await client.send(new GetInferenceProfileCommand(input)) };
-}
 async function resolveAppProfileTraits(modelId, fallbackRegion) {
 	const cached = appProfileTraitsCache.get(modelId);
 	if (cached) return cached;
 	try {
-		const models = (await (await createBedrockControlPlane(extractRegionFromArn(modelId) ?? fallbackRegion)).getInferenceProfile({ inferenceProfileIdentifier: modelId })).models ?? [];
-		const modelArns = models.map((m) => m.modelArn ?? "");
+		const region = extractRegionFromArn(modelId) ?? fallbackRegion;
+		await refreshAwsSharedConfigCacheForBedrock();
+		const { BedrockClient, GetInferenceProfileCommand } = await import("@aws-sdk/client-bedrock");
+		const models = (await new BedrockClient(region ? { region } : {}).send(new GetInferenceProfileCommand({ inferenceProfileIdentifier: modelId }))).models ?? [];
+		const modelArns = models.map((model) => model.modelArn ?? "");
 		const traits = {
 			cacheEligible: models.length > 0 && modelArns.every((modelArn) => resolvedModelSupportsCaching(modelArn)),
 			omitTemperature: modelArns.some(isOpus47OrNewerBedrockModelRef)
@@ -173,9 +170,8 @@ function injectBedrockCachePoints(payload, cacheRetention) {
 	const system = payload.system;
 	if (Array.isArray(system) && system.length > 0 && !hasCachePoint(system)) system.push(point);
 	const messages = payload.messages;
-	if (Array.isArray(messages) && messages.length > 0) for (let i = messages.length - 1; i >= 0; i--) {
-		const msg = messages[i];
-		if (msg.role === "user" && Array.isArray(msg.content)) {
+	if (Array.isArray(messages) && messages.length > 0) {
+		for (const msg of messages.toReversed()) if (msg.role === "user" && Array.isArray(msg.content)) {
 			if (!hasCachePoint(msg.content)) msg.content.push(point);
 			break;
 		}

package/dist/stream.runtime.js

@@ -5,6 +5,7 @@ import { requiresClaudeMandatoryAdaptiveThinking, resolveClaudeFable5ModelIdenti
 import { applyAnthropicRefusal, createDeferredEventBuffer, notifyLlmRequestActivity } from "openclaw/plugin-sdk/provider-stream-shared";
 import { BedrockRuntimeClient, BedrockRuntimeServiceException, CachePointType, CacheTTL, ConversationRole, ConverseStreamCommand, ImageFormat, StopReason, ToolResultStatus } from "@aws-sdk/client-bedrock-runtime";
 import { NodeHttpHandler } from "@smithy/node-http-handler";
+import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 //#region extensions/amazon-bedrock/stream.runtime.ts
 /**
 * Amazon Bedrock Converse streaming runtime. It maps OpenClaw messages/tools,
@@ -284,7 +285,7 @@ function handleContentBlockDelta(event, blocks, output, stream) {
 			};
 			output.content.push(newBlock);
 			index = blocks.length - 1;
-			block = blocks[index];
+			block = newBlock;
 			stream.push({
 				type: "text_start",
 				contentIndex: index,
@@ -375,7 +376,6 @@ function handleContentBlockStop(event, blocks, output, stream) {
 			});
 			break;
 		case "toolCall":
-			block.arguments = parseStreamingJson(block.partialJson);
 			delete block.partialJson;
 			stream.push({
 				type: "toolcall_end",
@@ -478,7 +478,7 @@ function convertMessages(context, model, cacheRetention) {
 	const result = [];
 	const transformedMessages = transformMessages(context.messages, model, normalizeToolCallId);
 	for (let i = 0; i < transformedMessages.length; i++) {
-		const m = transformedMessages[i];
+		const m = expectDefined(transformedMessages[i], "message conversion index is in bounds");
 		switch (m.role) {
 			case "user": {
 				const content = [];
@@ -547,8 +547,9 @@ function convertMessages(context, model, cacheRetention) {
 					status: m.isError ? ToolResultStatus.ERROR : ToolResultStatus.SUCCESS
 				} });
 				let j = i + 1;
-				while (j < transformedMessages.length && transformedMessages[j].role === "toolResult") {
-					const nextMsg = transformedMessages[j];
+				while (true) {
+					const nextMsg = transformedMessages.at(j);
+					if (nextMsg?.role !== "toolResult") break;
 					toolResults.push({ toolResult: {
 						toolUseId: nextMsg.toolCallId,
 						content: nextMsg.content.map((c) => c.type === "image" ? { image: createImageBlock(c.mimeType, c.data) } : { text: sanitizeSurrogates(c.text) }),
@@ -567,7 +568,7 @@ function convertMessages(context, model, cacheRetention) {
 		}
 	}
 	if (cacheRetention !== "none" && supportsPromptCaching(model) && result.length > 0) {
-		const lastMessage = result[result.length - 1];
+		const lastMessage = expectDefined(result.at(-1), "non-empty converted message list");
 		if (lastMessage.role === ConversationRole.USER && lastMessage.content) lastMessage.content.push({ cachePoint: {
 			type: CachePointType.DEFAULT,
 			...cacheRetention === "long" ? { ttl: CacheTTL.ONE_HOUR } : {}

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/amazon-bedrock-provider",
-  "version": "2026.7.1",
+  "version": "2026.7.2-beta.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/amazon-bedrock-provider",
-      "version": "2026.7.1",
+      "version": "2026.7.2-beta.1",
       "dependencies": {
         "@aws-sdk/client-bedrock": "3.1078.0",
         "@aws-sdk/client-bedrock-runtime": "3.1078.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/amazon-bedrock-provider",
-  "version": "2026.7.1",
+  "version": "2026.7.2-beta.1",
   "description": "OpenClaw Amazon Bedrock provider plugin with model discovery, embeddings, and guardrail support.",
   "repository": {
     "type": "git",
@@ -25,10 +25,10 @@
       "minHostVersion": ">=2026.5.12-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.7.1"
+      "pluginApi": ">=2026.7.2-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.7.1",
+      "openclawVersion": "2026.7.2-beta.1",
       "bundledDist": false
     },
     "release": {
@@ -46,7 +46,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.7.1"
+    "openclaw": ">=2026.7.2-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {