@tanstack/ai-bedrock 0.0.1

package/dist/esm/model-catalog.generated.js

@@ -0,0 +1,90 @@
+const GENERATED_BEDROCK_MODELS = [
+  {
+    id: "openai.gpt-oss-120b-1:0",
+    input: ["text"],
+    output: ["text"],
+    apis: { converse: true, chat: true, responses: true }
+  },
+  {
+    id: "openai.gpt-oss-20b-1:0",
+    input: ["text"],
+    output: ["text"],
+    apis: { converse: true, chat: true, responses: true }
+  },
+  {
+    id: "us.anthropic.claude-sonnet-4-5-20250929-v1:0",
+    input: ["text", "image", "document"],
+    output: ["text"],
+    apis: { converse: true, chat: false, responses: false }
+  },
+  {
+    id: "us.anthropic.claude-haiku-4-5-20251001-v1:0",
+    input: ["text", "image", "document"],
+    output: ["text"],
+    apis: { converse: true, chat: false, responses: false }
+  },
+  {
+    id: "us.anthropic.claude-3-7-sonnet-20250219-v1:0",
+    input: ["text", "image", "document"],
+    output: ["text"],
+    apis: { converse: true, chat: false, responses: false }
+  },
+  {
+    id: "us.anthropic.claude-3-5-sonnet-20241022-v2:0",
+    input: ["text", "image", "document"],
+    output: ["text"],
+    apis: { converse: true, chat: false, responses: false }
+  },
+  {
+    id: "us.anthropic.claude-3-5-haiku-20241022-v1:0",
+    input: ["text"],
+    output: ["text"],
+    apis: { converse: true, chat: false, responses: false }
+  },
+  {
+    id: "us.amazon.nova-pro-v1:0",
+    input: ["text", "image", "document"],
+    output: ["text"],
+    apis: { converse: true, chat: false, responses: false }
+  },
+  {
+    id: "us.amazon.nova-lite-v1:0",
+    input: ["text", "image", "document"],
+    output: ["text"],
+    apis: { converse: true, chat: false, responses: false }
+  },
+  {
+    id: "us.amazon.nova-micro-v1:0",
+    input: ["text"],
+    output: ["text"],
+    apis: { converse: true, chat: false, responses: false }
+  },
+  {
+    id: "us.meta.llama3-3-70b-instruct-v1:0",
+    input: ["text"],
+    output: ["text"],
+    apis: { converse: true, chat: false, responses: false }
+  },
+  {
+    id: "us.meta.llama4-maverick-17b-instruct-v1:0",
+    input: ["text", "image"],
+    output: ["text"],
+    apis: { converse: true, chat: false, responses: false }
+  },
+  {
+    id: "us.mistral.pixtral-large-2502-v1:0",
+    input: ["text", "image"],
+    output: ["text"],
+    apis: { converse: true, chat: false, responses: false }
+  },
+  {
+    id: "us.deepseek.r1-v1:0",
+    input: ["text"],
+    output: ["text"],
+    apis: { converse: true, chat: false, responses: false }
+  }
+];
+export {
+  GENERATED_BEDROCK_MODELS
+};
+//# sourceMappingURL=model-catalog.generated.js.map

package/dist/esm/model-catalog.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-catalog.generated.js","sources":["../../src/model-catalog.generated.ts"],"sourcesContent":["// GENERATED by scripts/fetch-bedrock-models.ts — do not edit by hand.\n// Refresh: AWS_REGION=us-east-1 pnpm tsx scripts/fetch-bedrock-models.ts\nexport const GENERATED_BEDROCK_MODELS = [\n  {\n    id: 'openai.gpt-oss-120b-1:0',\n    input: ['text'],\n    output: ['text'],\n    apis: { converse: true, chat: true, responses: true },\n  },\n  {\n    id: 'openai.gpt-oss-20b-1:0',\n    input: ['text'],\n    output: ['text'],\n    apis: { converse: true, chat: true, responses: true },\n  },\n  {\n    id: 'us.anthropic.claude-sonnet-4-5-20250929-v1:0',\n    input: ['text', 'image', 'document'],\n    output: ['text'],\n    apis: { converse: true, chat: false, responses: false },\n  },\n  {\n    id: 'us.anthropic.claude-haiku-4-5-20251001-v1:0',\n    input: ['text', 'image', 'document'],\n    output: ['text'],\n    apis: { converse: true, chat: false, responses: false },\n  },\n  {\n    id: 'us.anthropic.claude-3-7-sonnet-20250219-v1:0',\n    input: ['text', 'image', 'document'],\n    output: ['text'],\n    apis: { converse: true, chat: false, responses: false },\n  },\n  {\n    id: 'us.anthropic.claude-3-5-sonnet-20241022-v2:0',\n    input: ['text', 'image', 'document'],\n    output: ['text'],\n    apis: { converse: true, chat: false, responses: false },\n  },\n  {\n    id: 'us.anthropic.claude-3-5-haiku-20241022-v1:0',\n    input: ['text'],\n    output: ['text'],\n    apis: { converse: true, chat: false, responses: false },\n  },\n  {\n    id: 'us.amazon.nova-pro-v1:0',\n    input: ['text', 'image', 'document'],\n    output: ['text'],\n    apis: { converse: true, chat: false, responses: false },\n  },\n  {\n    id: 'us.amazon.nova-lite-v1:0',\n    input: ['text', 'image', 'document'],\n    output: ['text'],\n    apis: { converse: true, chat: false, responses: false },\n  },\n  {\n    id: 'us.amazon.nova-micro-v1:0',\n    input: ['text'],\n    output: ['text'],\n    apis: { converse: true, chat: false, responses: false },\n  },\n  {\n    id: 'us.meta.llama3-3-70b-instruct-v1:0',\n    input: ['text'],\n    output: ['text'],\n    apis: { converse: true, chat: false, responses: false },\n  },\n  {\n    id: 'us.meta.llama4-maverick-17b-instruct-v1:0',\n    input: ['text', 'image'],\n    output: ['text'],\n    apis: { converse: true, chat: false, responses: false },\n  },\n  {\n    id: 'us.mistral.pixtral-large-2502-v1:0',\n    input: ['text', 'image'],\n    output: ['text'],\n    apis: { converse: true, chat: false, responses: false },\n  },\n  {\n    id: 'us.deepseek.r1-v1:0',\n    input: ['text'],\n    output: ['text'],\n    apis: { converse: true, chat: false, responses: false },\n  },\n] as const\n"],"names":[],"mappings":"AAEO,MAAM,2BAA2B;AAAA,EACtC;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,MAAM;AAAA,IACd,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,MAAM,WAAW,KAAA;AAAA,EAAK;AAAA,EAEtD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,MAAM;AAAA,IACd,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,MAAM,WAAW,KAAA;AAAA,EAAK;AAAA,EAEtD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,QAAQ,SAAS,UAAU;AAAA,IACnC,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,OAAO,WAAW,MAAA;AAAA,EAAM;AAAA,EAExD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,QAAQ,SAAS,UAAU;AAAA,IACnC,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,OAAO,WAAW,MAAA;AAAA,EAAM;AAAA,EAExD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,QAAQ,SAAS,UAAU;AAAA,IACnC,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,OAAO,WAAW,MAAA;AAAA,EAAM;AAAA,EAExD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,QAAQ,SAAS,UAAU;AAAA,IACnC,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,OAAO,WAAW,MAAA;AAAA,EAAM;AAAA,EAExD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,MAAM;AAAA,IACd,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,OAAO,WAAW,MAAA;AAAA,EAAM;AAAA,EAExD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,QAAQ,SAAS,UAAU;AAAA,IACnC,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,OAAO,WAAW,MAAA;AAAA,EAAM;AAAA,EAExD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,QAAQ,SAAS,UAAU;AAAA,IACnC,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,OAAO,WAAW,MAAA;AAAA,EAAM;AAAA,EAExD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,MAAM;AAAA,IACd,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,OAAO,WAAW,MAAA;AAAA,EAAM;AAAA,EAExD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,MAAM;AAAA,IACd,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,OAAO,WAAW,MAAA;AAAA,EAAM;AAAA,EAExD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,QAAQ,OAAO;AAAA,IACvB,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,OAAO,WAAW,MAAA;AAAA,EAAM;AAAA,EAExD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,QAAQ,OAAO;AAAA,IACvB,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,OAAO,WAAW,MAAA;AAAA,EAAM;AAAA,EAExD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO,CAAC,MAAM;AAAA,IACd,QAAQ,CAAC,MAAM;AAAA,IACf,MAAM,EAAE,UAAU,MAAM,MAAM,OAAO,WAAW,MAAA;AAAA,EAAM;AAE1D;"}

package/dist/esm/model-meta.d.ts

@@ -0,0 +1,38 @@
+import { GENERATED_BEDROCK_MODELS } from './model-catalog.generated';
+import { BedrockTextProviderOptions } from './text/text-provider-options.js';
+import { BedrockConverseProviderOptions } from './converse/provider-options.js';
+type Entry = (typeof GENERATED_BEDROCK_MODELS)[number];
+/**
+ * Type-level per-API filter over the generated catalog. Because the catalog is
+ * `as const`, `Extract` preserves literal `id` unions (no widening to `string`).
+ */
+type IdsWhere<TApi extends 'converse' | 'chat' | 'responses'> = Extract<Entry, {
+    apis: Record<TApi, true>;
+}>['id'];
+export type BedrockConverseModels = IdsWhere<'converse'>;
+export type BedrockChatModels = IdsWhere<'chat'>;
+export type BedrockResponsesModels = IdsWhere<'responses'>;
+/** Runtime catalogs. Cast-free narrowing via a type predicate (the ai-bedrock pattern). */
+export declare const BEDROCK_CONVERSE_MODELS: ReadonlyArray<BedrockConverseModels>;
+export declare const BEDROCK_CHAT_MODELS: ReadonlyArray<BedrockChatModels>;
+export declare const BEDROCK_RESPONSES_MODELS: ReadonlyArray<BedrockResponsesModels>;
+/** Per-model input modalities (drives type-safe multimodal content). Covers ALL models. */
+export type BedrockModelInputModalitiesByName = {
+    [E in Entry as E['id']]: E['input'];
+};
+/** Provider options per model. Same options for every model; keyed over the full catalog. */
+export type BedrockChatModelProviderOptionsByName = {
+    [E in Entry as E['id']]: BedrockTextProviderOptions;
+};
+/** Converse provider options per model (narrower than the Chat Completions set). */
+export type BedrockConverseModelProviderOptionsByName = {
+    [E in Entry as E['id']]: BedrockConverseProviderOptions;
+};
+/** No provider-specific tools — empty tuple makes cross-provider ProviderTool a compile error. */
+export type BedrockChatModelToolCapabilitiesByName = {
+    [E in Entry as E['id']]: readonly [];
+};
+export type ResolveProviderOptions<TModel extends string> = TModel extends keyof BedrockChatModelProviderOptionsByName ? BedrockChatModelProviderOptionsByName[TModel] : BedrockTextProviderOptions;
+export type ResolveConverseProviderOptions<TModel extends string> = TModel extends keyof BedrockConverseModelProviderOptionsByName ? BedrockConverseModelProviderOptionsByName[TModel] : BedrockConverseProviderOptions;
+export type ResolveInputModalities<TModel extends string> = TModel extends keyof BedrockModelInputModalitiesByName ? BedrockModelInputModalitiesByName[TModel] : readonly ['text'];
+export {};

package/dist/esm/model-meta.js

@@ -0,0 +1,14 @@
+import { GENERATED_BEDROCK_MODELS } from "./model-catalog.generated.js";
+const BEDROCK_CONVERSE_MODELS = GENERATED_BEDROCK_MODELS.map((m) => m.id);
+const BEDROCK_CHAT_MODELS = GENERATED_BEDROCK_MODELS.filter(
+  (m) => m.apis.chat
+).map((m) => m.id);
+const BEDROCK_RESPONSES_MODELS = GENERATED_BEDROCK_MODELS.filter(
+  (m) => m.apis.responses
+).map((m) => m.id);
+export {
+  BEDROCK_CHAT_MODELS,
+  BEDROCK_CONVERSE_MODELS,
+  BEDROCK_RESPONSES_MODELS
+};
+//# sourceMappingURL=model-meta.js.map

package/dist/esm/model-meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-meta.js","sources":["../../src/model-meta.ts"],"sourcesContent":["import { GENERATED_BEDROCK_MODELS } from './model-catalog.generated'\nimport type { BedrockTextProviderOptions } from './text/text-provider-options'\nimport type { BedrockConverseProviderOptions } from './converse/provider-options'\n\ntype Entry = (typeof GENERATED_BEDROCK_MODELS)[number]\n\n/**\n * Type-level per-API filter over the generated catalog. Because the catalog is\n * `as const`, `Extract` preserves literal `id` unions (no widening to `string`).\n */\ntype IdsWhere<TApi extends 'converse' | 'chat' | 'responses'> = Extract<\n  Entry,\n  { apis: Record<TApi, true> }\n>['id']\n\nexport type BedrockConverseModels = IdsWhere<'converse'>\nexport type BedrockChatModels = IdsWhere<'chat'>\nexport type BedrockResponsesModels = IdsWhere<'responses'>\n\n/** Runtime catalogs. Cast-free narrowing via a type predicate (the ai-bedrock pattern). */\n// Every catalog entry advertises `converse: true` (Converse is the universal\n// Bedrock surface), so the id list is the full catalog — no runtime filter needed.\nexport const BEDROCK_CONVERSE_MODELS: ReadonlyArray<BedrockConverseModels> =\n  GENERATED_BEDROCK_MODELS.map((m) => m.id)\n\nexport const BEDROCK_CHAT_MODELS: ReadonlyArray<BedrockChatModels> =\n  GENERATED_BEDROCK_MODELS.filter(\n    (m): m is Extract<Entry, { apis: { chat: true } }> => m.apis.chat,\n  ).map((m) => m.id)\n\nexport const BEDROCK_RESPONSES_MODELS: ReadonlyArray<BedrockResponsesModels> =\n  GENERATED_BEDROCK_MODELS.filter(\n    (m): m is Extract<Entry, { apis: { responses: true } }> => m.apis.responses,\n  ).map((m) => m.id)\n\n/** Per-model input modalities (drives type-safe multimodal content). Covers ALL models. */\nexport type BedrockModelInputModalitiesByName = {\n  [E in Entry as E['id']]: E['input']\n}\n\n/** Provider options per model. Same options for every model; keyed over the full catalog. */\nexport type BedrockChatModelProviderOptionsByName = {\n  [E in Entry as E['id']]: BedrockTextProviderOptions\n}\n\n/** Converse provider options per model (narrower than the Chat Completions set). */\nexport type BedrockConverseModelProviderOptionsByName = {\n  [E in Entry as E['id']]: BedrockConverseProviderOptions\n}\n\n/** No provider-specific tools — empty tuple makes cross-provider ProviderTool a compile error. */\nexport type BedrockChatModelToolCapabilitiesByName = {\n  [E in Entry as E['id']]: readonly []\n}\n\nexport type ResolveProviderOptions<TModel extends string> =\n  TModel extends keyof BedrockChatModelProviderOptionsByName\n    ? BedrockChatModelProviderOptionsByName[TModel]\n    : BedrockTextProviderOptions\n\nexport type ResolveConverseProviderOptions<TModel extends string> =\n  TModel extends keyof BedrockConverseModelProviderOptionsByName\n    ? BedrockConverseModelProviderOptionsByName[TModel]\n    : BedrockConverseProviderOptions\n\nexport type ResolveInputModalities<TModel extends string> =\n  TModel extends keyof BedrockModelInputModalitiesByName\n    ? BedrockModelInputModalitiesByName[TModel]\n    : readonly ['text']\n"],"names":[],"mappings":";AAsBO,MAAM,0BACX,yBAAyB,IAAI,CAAC,MAAM,EAAE,EAAE;AAEnC,MAAM,sBACX,yBAAyB;AAAA,EACvB,CAAC,MAAqD,EAAE,KAAK;AAC/D,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;AAEZ,MAAM,2BACX,yBAAyB;AAAA,EACvB,CAAC,MAA0D,EAAE,KAAK;AACpE,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;"}

package/dist/esm/text/responses-provider-options.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Bedrock Responses API provider options. Mantle's Responses endpoint adds
+ * stateful conversation management on top of the OpenAI Responses fields.
+ *
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/bedrock-mantle.html
+ */
+export interface BedrockResponsesProviderOptions {
+    /** Continue a stored conversation from a prior response. */
+    previous_response_id?: string | null;
+    /** Whether Bedrock retains the response for 30 days (default true). Set false to opt out. */
+    store?: boolean | null;
+    metadata?: {
+        [key: string]: string;
+    } | null;
+    max_output_tokens?: number | null;
+    temperature?: number | null;
+    top_p?: number | null;
+    parallel_tool_calls?: boolean | null;
+    tool_choice?: 'none' | 'auto' | 'required' | {
+        type: 'function';
+        name: string;
+    } | null;
+    /** Reasoning controls for reasoning-capable models. */
+    reasoning?: {
+        effort?: 'low' | 'medium' | 'high';
+    } | null;
+    user?: string | null;
+}
+export type ExternalResponsesProviderOptions = BedrockResponsesProviderOptions;

package/dist/esm/text/text-provider-options.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Bedrock Chat Completions provider options. Bedrock accepts the standard
+ * OpenAI Chat Completions request fields; we surface the commonly-used ones
+ * plus `reasoning_effort` (supported by gpt-oss and reasoning models).
+ *
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/model-parameters-openai.html
+ */
+export interface BedrockTextProviderOptions {
+    frequency_penalty?: number | null;
+    presence_penalty?: number | null;
+    logit_bias?: {
+        [token: string]: number;
+    } | null;
+    logprobs?: boolean | null;
+    top_logprobs?: number | null;
+    max_completion_tokens?: number | null;
+    metadata?: {
+        [key: string]: string;
+    } | null;
+    n?: number | null;
+    parallel_tool_calls?: boolean | null;
+    /** gpt-oss / reasoning models: 'low' | 'medium' (default) | 'high'. */
+    reasoning_effort?: 'low' | 'medium' | 'high' | null;
+    seed?: number | null;
+    stop?: string | Array<string> | null;
+    temperature?: number | null;
+    tool_choice?: 'none' | 'auto' | 'required' | {
+        type: 'function';
+        function: {
+            name: string;
+        };
+    } | null;
+    top_p?: number | null;
+    user?: string | null;
+}
+export type ExternalTextProviderOptions = BedrockTextProviderOptions;

package/dist/esm/utils/auth.d.ts

@@ -0,0 +1,20 @@
+import { AwsCredentialIdentityProvider } from '@smithy/types';
+export type BedrockEndpoint = 'runtime' | 'mantle';
+/** SigV4 service name differs per endpoint. */
+export declare function sigv4Service(endpoint: BedrockEndpoint): string;
+export type ResolvedBedrockAuth = {
+    kind: 'bearer';
+    token: string;
+} | {
+    kind: 'sigv4';
+    region: string;
+    service: string;
+    credentials: AwsCredentialIdentityProvider;
+};
+export interface BedrockAuthConfig {
+    apiKey?: string;
+    region?: string;
+    auth?: 'apikey' | 'sigv4' | 'auto';
+}
+/** apiKey -> BEDROCK_API_KEY -> AWS_BEARER_TOKEN_BEDROCK -> SigV4 (credential chain). */
+export declare function resolveBedrockAuth(config: BedrockAuthConfig, endpoint: BedrockEndpoint): ResolvedBedrockAuth;

package/dist/esm/utils/auth.js

@@ -0,0 +1,49 @@
+function sigv4Service(endpoint) {
+  return endpoint === "mantle" ? "bedrock-mantle" : "bedrock";
+}
+const DEFAULT_REGION = "us-east-1";
+function readApiKeyFromEnv() {
+  const env = typeof process !== "undefined" ? process.env : void 0;
+  for (const value of [env?.BEDROCK_API_KEY, env?.AWS_BEARER_TOKEN_BEDROCK]) {
+    if (value && value.trim() !== "") return value;
+  }
+  return void 0;
+}
+function resolveBedrockAuth(config, endpoint) {
+  const mode = config.auth ?? "auto";
+  const region = config.region ?? DEFAULT_REGION;
+  if (mode !== "sigv4") {
+    const token = config.apiKey ?? readApiKeyFromEnv();
+    if (token) return { kind: "bearer", token };
+    if (mode === "apikey") {
+      throw new Error(
+        'No Bedrock API key found. Set BEDROCK_API_KEY (or AWS_BEARER_TOKEN_BEDROCK), pass `apiKey`, or use auth: "sigv4".'
+      );
+    }
+  }
+  return {
+    kind: "sigv4",
+    region,
+    service: sigv4Service(endpoint),
+    // Lazy credential provider: the AWS SDK is Node/server-only, so we defer the
+    // dynamic import until SigV4 actually needs to resolve credentials. The
+    // specifier is held in a variable (not a string literal) so bundler dep
+    // scanners (e.g. Vite/esbuild optimizeDeps) cannot statically discover the
+    // AWS SDK and try to pre-bundle it for the browser — it would fail on the
+    // SDK's Node-only `fromTokenFile` export chain. `typeof import(...)` is a
+    // type-only reference (erased at emit) so we keep full typing.
+    credentials: async (...args) => {
+      const mod = "@aws-sdk/credential-providers";
+      const { fromNodeProviderChain } = await import(
+        /* @vite-ignore */
+        mod
+      );
+      return fromNodeProviderChain()(...args);
+    }
+  };
+}
+export {
+  resolveBedrockAuth,
+  sigv4Service
+};
+//# sourceMappingURL=auth.js.map

package/dist/esm/utils/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sources":["../../../src/utils/auth.ts"],"sourcesContent":["import type { AwsCredentialIdentityProvider } from '@smithy/types'\nimport type * as CredentialProviders from '@aws-sdk/credential-providers'\n\nexport type BedrockEndpoint = 'runtime' | 'mantle'\n\n/** SigV4 service name differs per endpoint. */\nexport function sigv4Service(endpoint: BedrockEndpoint): string {\n  return endpoint === 'mantle' ? 'bedrock-mantle' : 'bedrock'\n}\n\nexport type ResolvedBedrockAuth =\n  | { kind: 'bearer'; token: string }\n  | {\n      kind: 'sigv4'\n      region: string\n      service: string\n      credentials: AwsCredentialIdentityProvider\n    }\n\nconst DEFAULT_REGION = 'us-east-1'\n\nfunction readApiKeyFromEnv(): string | undefined {\n  // Bedrock is server-only (the AWS SDK is Node-only), so the key always comes\n  // from process.env. Read it directly: a property access never throws, so —\n  // unlike the previous try/catch around getApiKeyFromEnv — we no longer swallow\n  // unrelated errors as \"key not set\". Each var is blank-checked independently\n  // so a present-but-blank BEDROCK_API_KEY falls through to\n  // AWS_BEARER_TOKEN_BEDROCK (and only then to SigV4) rather than masking it.\n  const env = typeof process !== 'undefined' ? process.env : undefined\n  for (const value of [env?.BEDROCK_API_KEY, env?.AWS_BEARER_TOKEN_BEDROCK]) {\n    if (value && value.trim() !== '') return value\n  }\n  return undefined\n}\n\nexport interface BedrockAuthConfig {\n  apiKey?: string\n  region?: string\n  auth?: 'apikey' | 'sigv4' | 'auto'\n}\n\n/** apiKey -> BEDROCK_API_KEY -> AWS_BEARER_TOKEN_BEDROCK -> SigV4 (credential chain). */\nexport function resolveBedrockAuth(\n  config: BedrockAuthConfig,\n  endpoint: BedrockEndpoint,\n): ResolvedBedrockAuth {\n  const mode = config.auth ?? 'auto'\n  const region = config.region ?? DEFAULT_REGION\n\n  if (mode !== 'sigv4') {\n    const token = config.apiKey ?? readApiKeyFromEnv()\n    if (token) return { kind: 'bearer', token }\n    if (mode === 'apikey') {\n      throw new Error(\n        'No Bedrock API key found. Set BEDROCK_API_KEY (or ' +\n          'AWS_BEARER_TOKEN_BEDROCK), pass `apiKey`, or use auth: \"sigv4\".',\n      )\n    }\n  }\n\n  return {\n    kind: 'sigv4',\n    region,\n    service: sigv4Service(endpoint),\n    // Lazy credential provider: the AWS SDK is Node/server-only, so we defer the\n    // dynamic import until SigV4 actually needs to resolve credentials. The\n    // specifier is held in a variable (not a string literal) so bundler dep\n    // scanners (e.g. Vite/esbuild optimizeDeps) cannot statically discover the\n    // AWS SDK and try to pre-bundle it for the browser — it would fail on the\n    // SDK's Node-only `fromTokenFile` export chain. `typeof import(...)` is a\n    // type-only reference (erased at emit) so we keep full typing.\n    credentials: async (...args) => {\n      const mod = '@aws-sdk/credential-providers'\n      const { fromNodeProviderChain } = (await import(\n        /* @vite-ignore */ mod\n      )) as typeof CredentialProviders\n      return fromNodeProviderChain()(...args)\n    },\n  }\n}\n"],"names":[],"mappings":"AAMO,SAAS,aAAa,UAAmC;AAC9D,SAAO,aAAa,WAAW,mBAAmB;AACpD;AAWA,MAAM,iBAAiB;AAEvB,SAAS,oBAAwC;AAO/C,QAAM,MAAM,OAAO,YAAY,cAAc,QAAQ,MAAM;AAC3D,aAAW,SAAS,CAAC,KAAK,iBAAiB,KAAK,wBAAwB,GAAG;AACzE,QAAI,SAAS,MAAM,KAAA,MAAW,GAAI,QAAO;AAAA,EAC3C;AACA,SAAO;AACT;AASO,SAAS,mBACd,QACA,UACqB;AACrB,QAAM,OAAO,OAAO,QAAQ;AAC5B,QAAM,SAAS,OAAO,UAAU;AAEhC,MAAI,SAAS,SAAS;AACpB,UAAM,QAAQ,OAAO,UAAU,kBAAA;AAC/B,QAAI,MAAO,QAAO,EAAE,MAAM,UAAU,MAAA;AACpC,QAAI,SAAS,UAAU;AACrB,YAAM,IAAI;AAAA,QACR;AAAA,MAAA;AAAA,IAGJ;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,SAAS,aAAa,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQ9B,aAAa,UAAU,SAAS;AAC9B,YAAM,MAAM;AACZ,YAAM,EAAE,sBAAA,IAA2B,MAAM;AAAA;AAAA,QACpB;AAAA;AAErB,aAAO,sBAAA,EAAwB,GAAG,IAAI;AAAA,IACxC;AAAA,EAAA;AAEJ;"}

package/dist/esm/utils/client.d.ts

@@ -0,0 +1,19 @@
+import { ClientOptions } from 'openai';
+import { BedrockEndpoint } from './auth.js';
+export type { BedrockEndpoint } from './auth.js';
+export { resolveBedrockAuth } from './auth.js';
+export type { ResolvedBedrockAuth } from './auth.js';
+export interface BedrockClientConfig extends Omit<ClientOptions, 'apiKey' | 'baseURL'> {
+    /** Bedrock API key (bearer). Optional — falls back to env, then SigV4. */
+    apiKey?: string;
+    /** Full AWS region (e.g. 'us-east-1'). Default 'us-east-1'. */
+    region?: string;
+    /** Chat adapter only; the responses adapter forces 'mantle'. Default 'runtime'. */
+    endpoint?: BedrockEndpoint;
+    /** Auth strategy. Default 'auto' (apiKey → env → SigV4). */
+    auth?: 'apikey' | 'sigv4' | 'auto';
+    /** Explicit override; wins over the computed endpoint URL (used by E2E → aimock). */
+    baseURL?: string;
+}
+/** Builds OpenAI ClientOptions for the requested endpoint. `forced` pins the endpoint (responses → 'mantle'). */
+export declare function withBedrockDefaults(config: BedrockClientConfig, forced?: BedrockEndpoint): ClientOptions;

package/dist/esm/utils/client.js

@@ -0,0 +1,35 @@
+import { resolveBedrockAuth } from "./auth.js";
+import { createSigV4Fetch } from "./openai-sigv4-fetch.js";
+const DEFAULT_REGION = "us-east-1";
+const SIGV4_PLACEHOLDER_KEY = "bedrock-sigv4";
+function buildBaseURL(region, endpoint) {
+  return endpoint === "mantle" ? `https://bedrock-mantle.${region}.api.aws/v1` : `https://bedrock-runtime.${region}.amazonaws.com/openai/v1`;
+}
+function withBedrockDefaults(config, forced) {
+  const { region, endpoint, auth, apiKey, baseURL, fetch, ...rest } = config;
+  const resolvedRegion = region ?? DEFAULT_REGION;
+  const resolvedEndpoint = forced ?? endpoint ?? "runtime";
+  const resolved = resolveBedrockAuth(
+    { apiKey, region: resolvedRegion, auth },
+    resolvedEndpoint
+  );
+  if (resolved.kind === "bearer") {
+    return {
+      ...rest,
+      baseURL: baseURL ?? buildBaseURL(resolvedRegion, resolvedEndpoint),
+      apiKey: resolved.token,
+      ...fetch ? { fetch } : {}
+    };
+  }
+  return {
+    ...rest,
+    baseURL: baseURL ?? buildBaseURL(resolvedRegion, resolvedEndpoint),
+    apiKey: SIGV4_PLACEHOLDER_KEY,
+    fetch: fetch ?? createSigV4Fetch(resolved)
+  };
+}
+export {
+  resolveBedrockAuth,
+  withBedrockDefaults
+};
+//# sourceMappingURL=client.js.map

package/dist/esm/utils/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sources":["../../../src/utils/client.ts"],"sourcesContent":["import { resolveBedrockAuth } from './auth'\nimport { createSigV4Fetch } from './openai-sigv4-fetch'\nimport type { ClientOptions } from 'openai'\nimport type { BedrockEndpoint } from './auth'\n\nexport type { BedrockEndpoint } from './auth'\nexport { resolveBedrockAuth } from './auth'\nexport type { ResolvedBedrockAuth } from './auth'\n\nexport interface BedrockClientConfig extends Omit<\n  ClientOptions,\n  'apiKey' | 'baseURL'\n> {\n  /** Bedrock API key (bearer). Optional — falls back to env, then SigV4. */\n  apiKey?: string\n  /** Full AWS region (e.g. 'us-east-1'). Default 'us-east-1'. */\n  region?: string\n  /** Chat adapter only; the responses adapter forces 'mantle'. Default 'runtime'. */\n  endpoint?: BedrockEndpoint\n  /** Auth strategy. Default 'auto' (apiKey → env → SigV4). */\n  auth?: 'apikey' | 'sigv4' | 'auto'\n  /** Explicit override; wins over the computed endpoint URL (used by E2E → aimock). */\n  baseURL?: string\n}\n\nconst DEFAULT_REGION = 'us-east-1'\n/** OpenAI SDK requires a non-empty apiKey even when a signed fetch overrides Authorization. */\nconst SIGV4_PLACEHOLDER_KEY = 'bedrock-sigv4'\n\nfunction buildBaseURL(region: string, endpoint: BedrockEndpoint): string {\n  return endpoint === 'mantle'\n    ? `https://bedrock-mantle.${region}.api.aws/v1`\n    : `https://bedrock-runtime.${region}.amazonaws.com/openai/v1`\n}\n\n/** Builds OpenAI ClientOptions for the requested endpoint. `forced` pins the endpoint (responses → 'mantle'). */\nexport function withBedrockDefaults(\n  config: BedrockClientConfig,\n  forced?: BedrockEndpoint,\n): ClientOptions {\n  const { region, endpoint, auth, apiKey, baseURL, fetch, ...rest } = config\n  const resolvedRegion = region ?? DEFAULT_REGION\n  const resolvedEndpoint = forced ?? endpoint ?? 'runtime'\n  const resolved = resolveBedrockAuth(\n    { apiKey, region: resolvedRegion, auth },\n    resolvedEndpoint,\n  )\n  if (resolved.kind === 'bearer') {\n    return {\n      ...rest,\n      baseURL: baseURL ?? buildBaseURL(resolvedRegion, resolvedEndpoint),\n      apiKey: resolved.token,\n      ...(fetch ? { fetch } : {}),\n    }\n  }\n  return {\n    ...rest,\n    baseURL: baseURL ?? buildBaseURL(resolvedRegion, resolvedEndpoint),\n    apiKey: SIGV4_PLACEHOLDER_KEY,\n    fetch: fetch ?? createSigV4Fetch(resolved),\n  }\n}\n"],"names":[],"mappings":";;AAyBA,MAAM,iBAAiB;AAEvB,MAAM,wBAAwB;AAE9B,SAAS,aAAa,QAAgB,UAAmC;AACvE,SAAO,aAAa,WAChB,0BAA0B,MAAM,gBAChC,2BAA2B,MAAM;AACvC;AAGO,SAAS,oBACd,QACA,QACe;AACf,QAAM,EAAE,QAAQ,UAAU,MAAM,QAAQ,SAAS,OAAO,GAAG,KAAA,IAAS;AACpE,QAAM,iBAAiB,UAAU;AACjC,QAAM,mBAAmB,UAAU,YAAY;AAC/C,QAAM,WAAW;AAAA,IACf,EAAE,QAAQ,QAAQ,gBAAgB,KAAA;AAAA,IAClC;AAAA,EAAA;AAEF,MAAI,SAAS,SAAS,UAAU;AAC9B,WAAO;AAAA,MACL,GAAG;AAAA,MACH,SAAS,WAAW,aAAa,gBAAgB,gBAAgB;AAAA,MACjE,QAAQ,SAAS;AAAA,MACjB,GAAI,QAAQ,EAAE,UAAU,CAAA;AAAA,IAAC;AAAA,EAE7B;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS,WAAW,aAAa,gBAAgB,gBAAgB;AAAA,IACjE,QAAQ;AAAA,IACR,OAAO,SAAS,iBAAiB,QAAQ;AAAA,EAAA;AAE7C;"}

package/dist/esm/utils/index.d.ts

@@ -0,0 +1 @@
+export { resolveBedrockAuth, withBedrockDefaults, type BedrockClientConfig, type BedrockEndpoint, type ResolvedBedrockAuth, } from './client.js';

package/dist/esm/utils/openai-sigv4-fetch.d.ts

@@ -0,0 +1,10 @@
+import { ResolvedBedrockAuth } from './auth.js';
+type FetchLike = typeof fetch;
+/**
+ * Wraps a fetch so each request is SigV4-signed via the AWS signer that ships
+ * with `@aws-sdk/client-bedrock-runtime`. Replaces the old aws-sigv4-fetch peer.
+ */
+export declare function createSigV4Fetch(auth: Extract<ResolvedBedrockAuth, {
+    kind: 'sigv4';
+}>, baseFetch?: FetchLike): FetchLike;
+export {};

package/dist/esm/utils/openai-sigv4-fetch.js

@@ -0,0 +1,35 @@
+import { SignatureV4 } from "@smithy/signature-v4";
+import { Sha256 } from "@aws-crypto/sha256-js";
+function createSigV4Fetch(auth, baseFetch = fetch) {
+  const signer = new SignatureV4({
+    service: auth.service,
+    region: auth.region,
+    credentials: auth.credentials,
+    sha256: Sha256
+  });
+  return async (input, init) => {
+    const href = typeof input === "string" ? input : input instanceof Request ? input.url : input.toString();
+    const url = new URL(href);
+    const headers = {};
+    new Headers(init?.headers).forEach((v, k) => headers[k] = v);
+    headers["host"] = url.host;
+    const body = init?.body ?? void 0;
+    const request = {
+      method: init?.method ?? "GET",
+      protocol: url.protocol,
+      hostname: url.hostname,
+      path: url.pathname + url.search,
+      headers,
+      body
+    };
+    const signed = await signer.sign(request);
+    return baseFetch(url.toString(), {
+      ...init,
+      headers: signed.headers
+    });
+  };
+}
+export {
+  createSigV4Fetch
+};
+//# sourceMappingURL=openai-sigv4-fetch.js.map

package/dist/esm/utils/openai-sigv4-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-sigv4-fetch.js","sources":["../../../src/utils/openai-sigv4-fetch.ts"],"sourcesContent":["import { SignatureV4 } from '@smithy/signature-v4'\nimport { Sha256 } from '@aws-crypto/sha256-js'\nimport type { HttpRequest } from '@smithy/types'\nimport type { ResolvedBedrockAuth } from './auth'\n\ntype FetchLike = typeof fetch\n\n/**\n * Wraps a fetch so each request is SigV4-signed via the AWS signer that ships\n * with `@aws-sdk/client-bedrock-runtime`. Replaces the old aws-sigv4-fetch peer.\n */\nexport function createSigV4Fetch(\n  auth: Extract<ResolvedBedrockAuth, { kind: 'sigv4' }>,\n  baseFetch: FetchLike = fetch,\n): FetchLike {\n  const signer = new SignatureV4({\n    service: auth.service,\n    region: auth.region,\n    credentials: auth.credentials,\n    sha256: Sha256,\n  })\n\n  return async (input, init) => {\n    // Request.toString() returns '[object Request]', not the URL — use .url instead.\n    const href =\n      typeof input === 'string'\n        ? input\n        : input instanceof Request\n          ? input.url\n          : input.toString()\n    const url = new URL(href)\n    const headers: Record<string, string> = {}\n    new Headers(init?.headers).forEach((v, k) => (headers[k] = v))\n    headers['host'] = url.host\n\n    const body = init?.body ?? undefined\n\n    // Construct a plain object satisfying the @smithy/types HttpRequest interface —\n    // no @smithy/protocol-http needed.\n    const request: HttpRequest = {\n      method: init?.method ?? 'GET',\n      protocol: url.protocol,\n      hostname: url.hostname,\n      path: url.pathname + url.search,\n      headers,\n      body,\n    }\n\n    const signed = await signer.sign(request)\n    return baseFetch(url.toString(), {\n      ...init,\n      headers: signed.headers as Record<string, string>,\n    })\n  }\n}\n"],"names":[],"mappings":";;AAWO,SAAS,iBACd,MACA,YAAuB,OACZ;AACX,QAAM,SAAS,IAAI,YAAY;AAAA,IAC7B,SAAS,KAAK;AAAA,IACd,QAAQ,KAAK;AAAA,IACb,aAAa,KAAK;AAAA,IAClB,QAAQ;AAAA,EAAA,CACT;AAED,SAAO,OAAO,OAAO,SAAS;AAE5B,UAAM,OACJ,OAAO,UAAU,WACb,QACA,iBAAiB,UACf,MAAM,MACN,MAAM,SAAA;AACd,UAAM,MAAM,IAAI,IAAI,IAAI;AACxB,UAAM,UAAkC,CAAA;AACxC,QAAI,QAAQ,MAAM,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAO,QAAQ,CAAC,IAAI,CAAE;AAC7D,YAAQ,MAAM,IAAI,IAAI;AAEtB,UAAM,OAAO,MAAM,QAAQ;AAI3B,UAAM,UAAuB;AAAA,MAC3B,QAAQ,MAAM,UAAU;AAAA,MACxB,UAAU,IAAI;AAAA,MACd,UAAU,IAAI;AAAA,MACd,MAAM,IAAI,WAAW,IAAI;AAAA,MACzB;AAAA,MACA;AAAA,IAAA;AAGF,UAAM,SAAS,MAAM,OAAO,KAAK,OAAO;AACxC,WAAO,UAAU,IAAI,YAAY;AAAA,MAC/B,GAAG;AAAA,MACH,SAAS,OAAO;AAAA,IAAA,CACjB;AAAA,EACH;AACF;"}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@tanstack/ai-bedrock",
+  "version": "0.0.1",
+  "type": "module",
+  "description": "Amazon Bedrock adapter for TanStack AI — OpenAI-compatible chat, responses, tools, and reasoning.",
+  "author": "",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/TanStack/ai.git",
+    "directory": "packages/ai-bedrock"
+  },
+  "module": "./dist/esm/index.js",
+  "types": "./dist/esm/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/esm/index.d.ts",
+      "import": "./dist/esm/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "scripts": {
+    "build": "vite build",
+    "clean": "premove ./build ./dist",
+    "lint:fix": "eslint ./src --fix",
+    "test:build": "publint --strict",
+    "test:eslint": "eslint ./src",
+    "test:lib": "vitest run",
+    "test:lib:dev": "pnpm test:lib --watch",
+    "test:types": "tsc"
+  },
+  "keywords": [
+    "ai",
+    "ai-sdk",
+    "typescript",
+    "tanstack",
+    "bedrock",
+    "aws",
+    "adapter",
+    "llm",
+    "chat",
+    "tool-calling"
+  ],
+  "devDependencies": {
+    "@vitest/coverage-v8": "4.0.14",
+    "vite": "^7.3.3"
+  },
+  "peerDependencies": {
+    "@tanstack/ai": "workspace:*",
+    "zod": "^4.0.0"
+  },
+  "dependencies": {
+    "@aws-crypto/sha256-js": "^5.2.0",
+    "@aws-sdk/client-bedrock-runtime": "^3.1057.0",
+    "@aws-sdk/credential-providers": "^3.1057.0",
+    "@smithy/signature-v4": "^5.4.5",
+    "@smithy/types": "^4.14.2",
+    "@tanstack/openai-base": "workspace:*",
+    "openai": "^6.41.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}