@openclaw/amazon-bedrock-provider 2026.7.2-beta.1 → 2026.7.2-beta.2

package/dist/control-plane.js

@@ -0,0 +1,29 @@
+import { buildTimeoutAbortSignal } from "openclaw/plugin-sdk/extension-shared";
+//#region extensions/amazon-bedrock/control-plane.ts
+const BEDROCK_CONTROL_PLANE_REQUEST_TIMEOUT_MS = 3e4;
+async function loadBedrockControlPlaneSdk() {
+	const { BedrockClient, GetInferenceProfileCommand, ListFoundationModelsCommand, ListInferenceProfilesCommand } = await import("@aws-sdk/client-bedrock");
+	return {
+		createClient: (region) => new BedrockClient(region ? { region } : {}),
+		createGetInferenceProfileCommand: (input) => new GetInferenceProfileCommand(input),
+		createListFoundationModelsCommand: () => new ListFoundationModelsCommand({}),
+		createListInferenceProfilesCommand: (input) => new ListInferenceProfilesCommand(input)
+	};
+}
+async function runBedrockControlPlaneRequest(params) {
+	const { signal, cleanup } = buildTimeoutAbortSignal({
+		timeoutMs: BEDROCK_CONTROL_PLANE_REQUEST_TIMEOUT_MS,
+		signal: params.signal,
+		operation: params.operation
+	});
+	try {
+		signal?.throwIfAborted();
+		const response = await params.send({ abortSignal: signal });
+		signal?.throwIfAborted();
+		return response;
+	} finally {
+		cleanup();
+	}
+}
+//#endregion
+export { loadBedrockControlPlaneSdk, runBedrockControlPlaneRequest };

package/dist/discovery.js

@@ -1,4 +1,5 @@
 import { refreshAwsSharedConfigCacheForBedrock } from "./aws-credential-refresh.js";
+import { loadBedrockControlPlaneSdk, runBedrockControlPlaneRequest } from "./control-plane.js";
 import { resolveBedrockConfigApiKey } from "./discovery-shared.js";
 import { resolveBedrockNativeThinkingLevelMap } from "./thinking-policy.js";
 import { resolveClaudeFable5ModelIdentity, resolveClaudeModelIdentity, resolveClaudeMythos5ModelIdentity, resolveClaudeSonnet5ModelIdentity, supportsClaudeAdaptiveThinking } from "openclaw/plugin-sdk/provider-model-shared";
@@ -119,33 +120,6 @@ const DEFAULT_COST = {
 	cacheRead: 0,
 	cacheWrite: 0
 };
-async function loadBedrockDiscoverySdk() {
-	const { BedrockClient, ListFoundationModelsCommand, ListInferenceProfilesCommand } = await import("@aws-sdk/client-bedrock");
-	return {
-		createClient: (region) => new BedrockClient({ region }),
-		createListFoundationModelsCommand: () => new ListFoundationModelsCommand({}),
-		createListInferenceProfilesCommand: (input) => new ListInferenceProfilesCommand(input)
-	};
-}
-function createInjectedClientDiscoverySdk() {
-	class ListFoundationModelsCommand {
-		constructor(input = {}) {
-			this.input = input;
-		}
-	}
-	class ListInferenceProfilesCommand {
-		constructor(input = {}) {
-			this.input = input;
-		}
-	}
-	return {
-		createClient() {
-			throw new Error("clientFactory is required for injected Bedrock discovery commands");
-		},
-		createListFoundationModelsCommand: () => new ListFoundationModelsCommand({}),
-		createListInferenceProfilesCommand: (input) => new ListInferenceProfilesCommand(input)
-	};
-}
 const discoveryCache = /* @__PURE__ */ new Map();
 let hasLoggedBedrockError = false;
 function normalizeProviderFilter(filter) {
@@ -248,7 +222,11 @@ async function fetchInferenceProfileSummaries(client, createListInferenceProfile
 		const profiles = [];
 		let nextToken;
 		do {
-			const response = await client.send(createListInferenceProfilesCommand({ nextToken }));
+			const command = createListInferenceProfilesCommand({ nextToken });
+			const response = await runBedrockControlPlaneRequest({
+				operation: "Bedrock ListInferenceProfiles",
+				send: (options) => client.send(command, options)
+			});
 			for (const summary of response.inferenceProfileSummaries ?? []) profiles.push(summary);
 			nextToken = response.nextToken;
 		} while (nextToken);
@@ -328,44 +306,51 @@ async function discoverBedrockModels(params) {
 		}
 		if (cached) discoveryCache.delete(cacheKey);
 	}
-	const sdk = params.clientFactory ? createInjectedClientDiscoverySdk() : await loadBedrockDiscoverySdk();
+	const sdk = await loadBedrockControlPlaneSdk();
 	const clientFactory = params.clientFactory ?? ((region) => sdk.createClient(region));
 	if (!params.clientFactory) await refreshAwsSharedConfigCacheForBedrock();
 	const client = clientFactory(params.region);
 	const discoveryPromise = (async () => {
-		const [rawFoundationResponse, profileSummaries] = await Promise.all([client.send(sdk.createListFoundationModelsCommand()), fetchInferenceProfileSummaries(client, (input) => sdk.createListInferenceProfilesCommand(input))]);
-		const foundationResponse = rawFoundationResponse;
-		const discovered = [];
-		const seenIds = /* @__PURE__ */ new Set();
-		const foundationModels = /* @__PURE__ */ new Map();
-		for (const summary of foundationResponse.modelSummaries ?? []) {
-			if (!shouldIncludeSummary(summary, providerFilter)) continue;
-			const def = toModelDefinition(summary, {
+		try {
+			const foundationCommand = sdk.createListFoundationModelsCommand();
+			const [foundationResponse, profileSummaries] = await Promise.all([runBedrockControlPlaneRequest({
+				operation: "Bedrock ListFoundationModels",
+				send: (options) => client.send(foundationCommand, options)
+			}), fetchInferenceProfileSummaries(client, (input) => sdk.createListInferenceProfilesCommand(input))]);
+			const discovered = [];
+			const seenIds = /* @__PURE__ */ new Set();
+			const foundationModels = /* @__PURE__ */ new Map();
+			for (const summary of foundationResponse.modelSummaries ?? []) {
+				if (!shouldIncludeSummary(summary, providerFilter)) continue;
+				const def = toModelDefinition(summary, {
+					contextWindow: defaultContextWindow,
+					maxTokens: defaultMaxTokens
+				});
+				discovered.push(def);
+				const normalizedId = normalizeLowercaseStringOrEmpty(def.id);
+				seenIds.add(normalizedId);
+				foundationModels.set(normalizedId, def);
+			}
+			const inferenceProfiles = resolveInferenceProfiles(profileSummaries, {
 				contextWindow: defaultContextWindow,
 				maxTokens: defaultMaxTokens
-			});
-			discovered.push(def);
-			const normalizedId = normalizeLowercaseStringOrEmpty(def.id);
-			seenIds.add(normalizedId);
-			foundationModels.set(normalizedId, def);
-		}
-		const inferenceProfiles = resolveInferenceProfiles(profileSummaries, {
-			contextWindow: defaultContextWindow,
-			maxTokens: defaultMaxTokens
-		}, providerFilter, foundationModels);
-		for (const profile of inferenceProfiles) {
-			const normalizedId = normalizeLowercaseStringOrEmpty(profile.id);
-			if (!seenIds.has(normalizedId)) {
-				discovered.push(profile);
-				seenIds.add(normalizedId);
+			}, providerFilter, foundationModels);
+			for (const profile of inferenceProfiles) {
+				const normalizedId = normalizeLowercaseStringOrEmpty(profile.id);
+				if (!seenIds.has(normalizedId)) {
+					discovered.push(profile);
+					seenIds.add(normalizedId);
+				}
 			}
+			return discovered.toSorted((a, b) => {
+				const aGlobal = a.id.startsWith("global.") ? 0 : 1;
+				const bGlobal = b.id.startsWith("global.") ? 0 : 1;
+				if (aGlobal !== bGlobal) return aGlobal - bGlobal;
+				return a.name.localeCompare(b.name);
+			});
+		} finally {
+			client.destroy();
 		}
-		return discovered.toSorted((a, b) => {
-			const aGlobal = a.id.startsWith("global.") ? 0 : 1;
-			const bGlobal = b.id.startsWith("global.") ? 0 : 1;
-			if (aGlobal !== bGlobal) return aGlobal - bGlobal;
-			return a.name.localeCompare(b.name);
-		});
 	})();
 	if (refreshIntervalSeconds > 0) {
 		const expiresAt = resolveExpiresAtMsFromDurationSeconds(refreshIntervalSeconds, { nowMs: now });

package/dist/embedding-provider.js

@@ -216,6 +216,7 @@ const testing = {
 	parseSingle,
 	stripInferenceProfilePrefix
 };
+if (process.env.VITEST === "true") Reflect.set(globalThis, Symbol.for("openclaw.amazonBedrockEmbeddingTestApi"), testing);
 async function createBedrockEmbeddingProvider(options) {
 	const client = resolveBedrockEmbeddingClient(options);
 	const { BedrockRuntimeClient, InvokeModelCommand } = await loadSdk();
@@ -304,4 +305,4 @@ async function hasAwsCredentials(env = process.env, loadCredentialProvider = loa
 	}
 }
 //#endregion
-export { DEFAULT_BEDROCK_EMBEDDING_MODEL, testing as __testing, testing, createBedrockEmbeddingProvider, hasAwsCredentials };
+export { DEFAULT_BEDROCK_EMBEDDING_MODEL, createBedrockEmbeddingProvider, hasAwsCredentials };

package/dist/register.sync.runtime.js

@@ -1,12 +1,13 @@
 import { refreshAwsSharedConfigCacheForBedrock } from "./aws-credential-refresh.js";
 import { supportsBedrockPromptCaching } from "./bedrock-options.js";
+import { loadBedrockControlPlaneSdk, runBedrockControlPlaneRequest } from "./control-plane.js";
 import { mergeImplicitBedrockProvider, resolveBedrockConfigApiKey } from "./discovery-shared.js";
 import { bedrockMemoryEmbeddingProviderAdapter } from "./memory-embedding-adapter.js";
 import { isLatestAdaptiveBedrockModelRef, isOpus47OrNewerBedrockModelRef, resolveBedrockClaudeThinkingProfile, resolveBedrockNativeThinkingLevelMap, supportsBedrockNativeMaxEffort } from "./thinking-policy.js";
 import { streamBedrock, streamSimpleBedrock } from "./stream.runtime.js";
 import { registerApiProvider, streamSimple } from "openclaw/plugin-sdk/llm";
 import { resolvePluginConfigObject } from "openclaw/plugin-sdk/plugin-config-runtime";
-import { ANTHROPIC_BY_MODEL_REPLAY_HOOKS, normalizeProviderId, resolveClaudeFable5ModelIdentity, resolveClaudeModelIdentity, resolveClaudeMythos5ModelIdentity, resolveClaudeSonnet5ModelIdentity } from "openclaw/plugin-sdk/provider-model-shared";
+import { buildProviderReplayFamilyHooks, normalizeProviderId, resolveClaudeFable5ModelIdentity, resolveClaudeModelIdentity, resolveClaudeMythos5ModelIdentity, resolveClaudeSonnet5ModelIdentity } from "openclaw/plugin-sdk/provider-model-shared";
 import { streamWithPayloadPatch } from "openclaw/plugin-sdk/provider-stream-shared";
 //#region extensions/amazon-bedrock/register.sync.runtime.ts
 function normalizeBedrockResolvedModel({ modelId, model }) {
@@ -129,14 +130,23 @@ function resolvedModelSupportsCaching(modelArn) {
 	return supportsBedrockPromptCaching(modelArn);
 }
 const appProfileTraitsCache = /* @__PURE__ */ new Map();
-async function resolveAppProfileTraits(modelId, fallbackRegion) {
+async function resolveAppProfileTraits(modelId, fallbackRegion, signal) {
 	const cached = appProfileTraitsCache.get(modelId);
 	if (cached) return cached;
+	let client;
 	try {
+		signal?.throwIfAborted();
 		const region = extractRegionFromArn(modelId) ?? fallbackRegion;
-		await refreshAwsSharedConfigCacheForBedrock();
-		const { BedrockClient, GetInferenceProfileCommand } = await import("@aws-sdk/client-bedrock");
-		const models = (await new BedrockClient(region ? { region } : {}).send(new GetInferenceProfileCommand({ inferenceProfileIdentifier: modelId }))).models ?? [];
+		const sdk = await loadBedrockControlPlaneSdk();
+		signal?.throwIfAborted();
+		const controlPlaneClient = sdk.createClient(region);
+		client = controlPlaneClient;
+		const command = sdk.createGetInferenceProfileCommand({ inferenceProfileIdentifier: modelId });
+		const models = (await runBedrockControlPlaneRequest({
+			operation: "Bedrock GetInferenceProfile",
+			signal,
+			send: (options) => controlPlaneClient.send(command, options)
+		})).models ?? [];
 		const modelArns = models.map((model) => model.modelArn ?? "");
 		const traits = {
 			cacheEligible: models.length > 0 && modelArns.every((modelArn) => resolvedModelSupportsCaching(modelArn)),
@@ -145,10 +155,13 @@ async function resolveAppProfileTraits(modelId, fallbackRegion) {
 		appProfileTraitsCache.set(modelId, traits);
 		return traits;
 	} catch {
+		signal?.throwIfAborted();
 		return {
 			cacheEligible: isAnthropicBedrockModel(modelId),
 			omitTemperature: isOpus47OrNewerBedrockModelRef(modelId)
 		};
+	} finally {
+		client?.destroy();
 	}
 }
 function hasCachePoint(blocks) {
@@ -196,7 +209,7 @@ function registerAmazonBedrockPlugin(api) {
 		/ModelStreamErrorException.*(?:Input is too long|too many input tokens)/i
 	];
 	const deprecatedTemperatureValidationRe = /ValidationException[\s\S]*(?:invalid_request_error[\s\S]*)?temperature[\s\S]*deprecated|ValidationException[\s\S]*deprecated[\s\S]*temperature/i;
-	const anthropicByModelReplayHooks = ANTHROPIC_BY_MODEL_REPLAY_HOOKS;
+	const anthropicByModelReplayHooks = buildProviderReplayFamilyHooks({ family: "anthropic-by-model" });
 	const startupPluginConfig = api.pluginConfig ?? {};
 	registerApiProvider({
 		api: "bedrock-converse-stream",
@@ -233,7 +246,10 @@ function registerAmazonBedrockPlugin(api) {
 		return {
 			...options,
 			onPayload: async (payload, payloadModel) => {
+				const signal = options.signal;
+				signal?.throwIfAborted();
 				await refreshAwsSharedConfigCacheForBedrock();
+				signal?.throwIfAborted();
 				return originalOnPayload?.(payload, payloadModel);
 			}
 		};
@@ -347,7 +363,7 @@ function registerAmazonBedrockPlugin(api) {
 								if (shouldPatchMaxThinking) patchMaxThinkingEffort(payloadRecord);
 								if (shouldOmitTemperature) omitUnsupportedClaudePayloadTemperature(payloadRecord);
 								else if (mayNeedTemperatureTrait) {
-									if ((await resolveAppProfileTraits(modelId, region)).omitTemperature) omitUnsupportedClaudePayloadTemperature(payloadRecord);
+									if ((await resolveAppProfileTraits(modelId, region, merged.signal)).omitTemperature) omitUnsupportedClaudePayloadTemperature(payloadRecord);
 								}
 							}
 							return originalOnPayload?.(payload, payloadModel);
@@ -357,7 +373,7 @@ function registerAmazonBedrockPlugin(api) {
 				return underlying(streamModel, context, withAwsCredentialRefreshOnPayload({
 					...merged,
 					onPayload: async (payload, payloadModel) => {
-						const traits = await resolveAppProfileTraits(modelId, region);
+						const traits = await resolveAppProfileTraits(modelId, region, merged.signal);
 						if (payload && typeof payload === "object") {
 							const payloadRecord = payload;
 							if (traits.cacheEligible) injectBedrockCachePoints(payloadRecord, cacheRetention);

package/dist/stream.runtime.js

@@ -6,6 +6,7 @@ import { applyAnthropicRefusal, createDeferredEventBuffer, notifyLlmRequestActiv
 import { BedrockRuntimeClient, BedrockRuntimeServiceException, CachePointType, CacheTTL, ConversationRole, ConverseStreamCommand, ImageFormat, StopReason, ToolResultStatus } from "@aws-sdk/client-bedrock-runtime";
 import { NodeHttpHandler } from "@smithy/node-http-handler";
 import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
+import { describeToolResultMediaPlaceholder } from "openclaw/plugin-sdk/provider-transport-runtime";
 //#region extensions/amazon-bedrock/stream.runtime.ts
 /**
 * Amazon Bedrock Converse streaming runtime. It maps OpenClaw messages/tools,
@@ -474,6 +475,21 @@ function normalizeToolCallId(id) {
 	const sanitized = id.replace(/[^a-zA-Z0-9_-]/g, "_");
 	return sanitized.length > 64 ? sanitized.slice(0, 64) : sanitized;
 }
+function createBedrockToolResult(message) {
+	const content = [];
+	for (const block of message.content) {
+		if (block.type === "text") {
+			content.push({ text: sanitizeSurrogates(block.text) });
+			continue;
+		}
+		if (describeToolResultMediaPlaceholder([block])) content.push({ image: createImageBlock(block.mimeType, block.data) });
+	}
+	return { toolResult: {
+		toolUseId: message.toolCallId,
+		content: content.length > 0 ? content : [{ text: "(no output)" }],
+		status: message.isError ? ToolResultStatus.ERROR : ToolResultStatus.SUCCESS
+	} };
+}
 function convertMessages(context, model, cacheRetention) {
 	const result = [];
 	const transformedMessages = transformMessages(context.messages, model, normalizeToolCallId);
@@ -541,20 +557,12 @@ function convertMessages(context, model, cacheRetention) {
 			}
 			case "toolResult": {
 				const toolResults = [];
-				toolResults.push({ toolResult: {
-					toolUseId: m.toolCallId,
-					content: m.content.map((c) => c.type === "image" ? { image: createImageBlock(c.mimeType, c.data) } : { text: sanitizeSurrogates(c.text) }),
-					status: m.isError ? ToolResultStatus.ERROR : ToolResultStatus.SUCCESS
-				} });
+				toolResults.push(createBedrockToolResult(m));
 				let j = i + 1;
 				while (true) {
 					const nextMsg = transformedMessages.at(j);
 					if (nextMsg?.role !== "toolResult") break;
-					toolResults.push({ toolResult: {
-						toolUseId: nextMsg.toolCallId,
-						content: nextMsg.content.map((c) => c.type === "image" ? { image: createImageBlock(c.mimeType, c.data) } : { text: sanitizeSurrogates(c.text) }),
-						status: nextMsg.isError ? ToolResultStatus.ERROR : ToolResultStatus.SUCCESS
-					} });
+					toolResults.push(createBedrockToolResult(nextMsg));
 					j++;
 				}
 				i = j - 1;
@@ -704,5 +712,6 @@ const testing = {
 	resolveSimpleBedrockOptions,
 	shouldUseExplicitBedrockEndpoint
 };
+if (process.env.VITEST === "true") Reflect.set(globalThis, Symbol.for("openclaw.amazonBedrockStreamTestApi"), testing);
 //#endregion
-export { streamBedrock, streamSimpleBedrock, testing };
+export { streamBedrock, streamSimpleBedrock };

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/amazon-bedrock-provider",
-  "version": "2026.7.2-beta.1",
+  "version": "2026.7.2-beta.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/amazon-bedrock-provider",
-      "version": "2026.7.2-beta.1",
+      "version": "2026.7.2-beta.2",
       "dependencies": {
         "@aws-sdk/client-bedrock": "3.1078.0",
         "@aws-sdk/client-bedrock-runtime": "3.1078.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/amazon-bedrock-provider",
-  "version": "2026.7.2-beta.1",
+  "version": "2026.7.2-beta.2",
   "description": "OpenClaw Amazon Bedrock provider plugin with model discovery, embeddings, and guardrail support.",
   "repository": {
     "type": "git",
@@ -25,10 +25,10 @@
       "minHostVersion": ">=2026.5.12-beta.1"
     },
     "compat": {
-      "pluginApi": ">=2026.7.2-beta.1"
+      "pluginApi": ">=2026.7.2-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.7.2-beta.1",
+      "openclawVersion": "2026.7.2-beta.2",
       "bundledDist": false
     },
     "release": {
@@ -46,7 +46,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.7.2-beta.1"
+    "openclaw": ">=2026.7.2-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {