ei]jUdZddlZddlZddlZddlZddlmZddlmZm Z m Z m Z m Z ej eZiZe eefed<iZe eefed<dZdefd Zdefd Zd Zded efd ZdZdefdZded efdZgdZd[de e eefd e efdZd[de e eefd efdZ d[de e eefd efdZ!gdZ"ded efdZ#ded efdZ$de e d e e fdZ%d e e fdZ&de e d e e e e e e ffdZ'd ed efd!Z(d"e d efd#Z)d efd$Z* d\d efd%Z+ d]d'ede e de e e d(e,d)e e-d*e e-d+e e ed,e e d e eeffd-Z. d]ded'ede e de e e d(e,d)e e-d*e e-d+e e ed,e e d efd.Z/ d]ded'ede e de e e d(e,d)e e-d*e e-d+e e ed,e e d efd/Z0iZ1e eefed0<d1Z2d2Z3 d[ded3e e ed e e eeffd4Z4d5ed efd6Z5ded e efd7Z6ej7d8ej8ej7d9ej8ej7d:ej8gZ9ej7d;ej8ej7dej8ej7d?ej8ej7d@ej8gZ;dAed efdBZe ee,fedY<dTZ?ded e,fdZZ@dS)^uAWS Bedrock Converse API adapter for Hermes Agent. Provides native integration with Amazon Bedrock using the Converse API, bypassing the OpenAI-compatible endpoint in favor of direct AWS SDK calls. This enables full access to the Bedrock ecosystem: - **Native Converse API**: Unified interface for all Bedrock models (Claude, Nova, Llama, Mistral, etc.) with streaming support. - **AWS credential chain**: IAM roles, SSO profiles, environment variables, instance metadata — zero API key management for AWS-native environments. - **Dynamic model discovery**: Auto-discovers available foundation models and cross-region inference profiles via the Bedrock control plane. - **Guardrails support**: Optional Bedrock Guardrails configuration for content filtering and safety policies. - **Inference profiles**: Supports cross-region inference profiles (us.anthropic.claude-*, global.anthropic.claude-*) for better capacity and automatic failover. Architecture follows the same pattern as ``anthropic_adapter.py``: - All Bedrock-specific logic is isolated in this module. - Messages/tools are converted between OpenAI format and Converse format. - Responses are normalized back to OpenAI-compatible objects for the agent loop. Reference: OpenClaw's ``extensions/amazon-bedrock/`` plugin, which implements the same Converse API integration in TypeScript via ``@aws-sdk/client-bedrock``. Requires: ``boto3`` (optional dependency — only needed when using the Bedrock provider). N)SimpleNamespace)AnyDictListOptionalTuple_bedrock_runtime_client_cache_bedrock_control_client_cachecJ ddl}|S#t$rtdwxYw)z5Import boto3, raising a clear error if not installed.rNzThe 'boto3' package is required for the AWS Bedrock provider. Install it with: pip install boto3 Or install Hermes with Bedrock support: pip install -e '.[bedrock]')boto3 ImportError)r s 7/home/div/.hermes/hermes-agent/agent/bedrock_adapter.py_require_boto3r0sH       R    s"regionc|tvr-t}|d|t|<t|S)uGet or create a cached ``bedrock-runtime`` client for the given region. Uses the default AWS credential chain (env vars → profile → instance role). zbedrock-runtime region_name)r rclientrr s r_get_bedrock_runtime_clientr=sK 222  05 61=1 1 %f- ) 00c|tvr-t}|d|t|<t|S)zLGet or create a cached ``bedrock`` control-plane client for model discovery.bedrockr)r rrrs r_get_bedrock_control_clientrJsI 222  05 61=1 1 %f- ) 00rcjttdS)z?Clear cached boto3 clients. Used in tests and profile switches.N)r clearr rrreset_client_cacherTs,!'')))!'')))))rreturncN|tv}t|d|S)aEvict the cached ``bedrock-runtime`` client for a single region. Per-region counterpart to :func:`reset_client_cache`. Used by the converse call wrappers to discard clients whose underlying HTTP connection has gone stale, so the next call allocates a fresh client (with a fresh connection pool) instead of reusing a dead socket. Returns True if a cached entry was evicted, False if the region was not cached. N)r pop)rexisteds rinvalidate_runtime_clientr#Zs*55G!%%fd333 Nr)zurllib3.z botocore.zboto3.excc#Kt|dd}|3|j}|jdd}|pdV|j}|1dSdS)zJYield ``__name__``-style module strings for each frame in exc's traceback. __traceback__N__name__)getattrtb_frame f_globalsgettb_next)r$tbframemodules r_traceback_frames_modulesr1s` ot , ,B . $$Z44l Z .....rcr ddlm}m}||f}n#t$rd}YnwxYw|rt ||rdS ddlm}m}m}|||f}n#t$rd}YnwxYw|rt ||rdSt |tr5t|D]%tfdtDrdS&dS)uReturn True if ``exc`` indicates a dead/stale Bedrock HTTP connection. Matches: * ``botocore.exceptions.ConnectionError`` and subclasses (``ConnectionClosedError``, ``EndpointConnectionError``, ``ReadTimeoutError``, ``ConnectTimeoutError``). * ``urllib3.exceptions.ProtocolError`` / ``NewConnectionError`` / ``ConnectionError`` (best-effort import — urllib3 is a transitive dependency of botocore so it is always available in practice). * Bare ``AssertionError`` raised from a frame inside urllib3, botocore, or boto3. These are internal-invariant failures (typically triggered by corrupted connection-pool state after a dropped socket) and are recoverable by swapping the client. Non-library ``AssertionError``s (from application code or tests) are intentionally not matched — only library-internal asserts signal stale connection state. r)ConnectionErrorHTTPClientErrorrT) ProtocolErrorNewConnectionErrorr3c3BK|]}|VdSN) startswith).0prefixr0s r z,is_stale_connection_error..s1VV6$$V,,VVVVVVrF) botocore.exceptionsr3r4r isinstanceurllib3.exceptionsr5r6AssertionErrorr1any_STALE_LIB_MODULE_PREFIXES) r$BotoConnectionErrorr4botocore_errorsr5r6Urllib3ConnectionErrorurllib3_errorsr0s @ris_stale_connection_errorrGso.        #6!G :c?;;t          ();=ST *S.99t#~&&/44  FVVVV;UVVVVV tt  5s  A AA)AWS_BEARER_TOKEN_BEDROCKAWS_ACCESS_KEY_ID AWS_PROFILE&AWS_CONTAINER_CREDENTIALS_RELATIVE_URIAWS_WEB_IDENTITY_TOKEN_FILEenvc||n tj}|ddrdS|ddr*|ddrdS|ddrdS|ddrdS|ddrdS d dl}|j}|}||}|r |j rd Sn#t$rYnwxYwdS) uReturn the name of the AWS auth source that is active, or None. Checks environment variables first, then falls back to boto3's credential chain for implicit sources (EC2 IMDS, ECS task role, etc.). This mirrors OpenClaw's ``resolveAwsSdkEnvVarName()`` — used to detect whether the user has any AWS credentials configured without actually attempting to authenticate. NrHr(rIAWS_SECRET_ACCESS_KEYrJrKrLrziam-role) osenvironr,stripbotocore.sessionsession get_sessionget_credentialsget_frozen_credentials access_key ExceptionrMbotocorerT credentialsresolveds rresolve_aws_auth_env_varr^s##bjC ww)2..4466*)) #R((..00#/44::<<#"" ww}b!!''))} ww7<<BBDD877 ww,b117799-,,  "..00--//  ""99;;H "H/ "!z      4s AE E,+E,ct|dS ddl}|j}|}||}|r |jrdSn#t$rYnwxYwdS)a`Return True if any AWS credential source is detected. Checks environment variables first (fast, no I/O), then falls back to boto3's credential chain which covers EC2 instance roles, ECS task roles, Lambda execution roles, and other IMDS-based sources that don't set environment variables. This two-tier approach mirrors the pattern from OpenClaw PR #62673: cloud environments (EC2, ECS, Lambda) provide credentials via instance metadata, not environment variables. The env-var check is a fast path for local development; the boto3 fallback covers all cloud deployments. NTrF)r^rSrTrUrVrWrXrYrZs rhas_aws_credentialsr`s $$0t  "..00--//  ""99;;H H/ t      5sAA&& A32A3c||n tj}|ddp)|ddpdS)u}Resolve the AWS region for Bedrock API calls. Priority: AWS_REGION → AWS_DEFAULT_REGION → us-east-1 (fallback). N AWS_REGIONr(AWS_DEFAULT_REGIONz us-east-1)rPrQr,rR)rMs rresolve_bedrock_regionrd#s` ##bjC  b!!''))  77' , , 2 2 4 4  r)z deepseek.r1z deepseek-r1z stability.z cohere.embedzamazon.titan-embedmodel_idcn|tfdtD S)zReturn True if the model is expected to support tool/function calling. Models in the denylist are known to reject toolConfig in the Converse API. Unknown models default to True (assume tool support). c3 K|]}|vV dSr8r)r:pattern model_lowers rr<z+_model_supports_tool_use..Js(TTg7k)TTTTTTr)lowerrA_NON_TOOL_CALLING_PATTERNS)reris @r_model_supports_tool_userlCs; ..""KTTTT9STTTTT TTrc|}dD]0}||r|t|d}n1|dS)aReturn True if the model is an Anthropic Claude model on Bedrock. These models should use the AnthropicBedrock SDK path for full feature parity (prompt caching, thinking budgets, adaptive thinking). Non-Claude models use the Converse API path. Matches: - ``anthropic.claude-*`` (foundation model IDs) - ``us.anthropic.claude-*`` (US inference profiles) - ``global.anthropic.claude-*`` (global inference profiles) - ``eu.anthropic.claude-*`` (EU inference profiles) )zus.global.zeu.zap.zjp.Nzanthropic.claude)rjr9len)rerir;s ris_anthropic_bedrock_modelrpMsm..""K9  ! !& ) ) %c&kkll3K E   ! !"4 5 55rtoolsc |sgSg}|D]z}|di}|dd}|dd}|ddid}|d||d |id i{|S) aConvert OpenAI-format tool definitions to Bedrock Converse ``toolConfig``. OpenAI format:: {"type": "function", "function": {"name": "...", "description": "...", "parameters": {"type": "object", "properties": {...}}}} Converse format:: {"toolSpec": {"name": "...", "description": "...", "inputSchema": {"json": {"type": "object", "properties": {...}}}}} functionnamer( description parametersobject)type propertiestoolSpecjson)rtru inputSchema)r,append)rqresulttfnrtrurvs rconvert_tools_to_conversergs  F     UU:r " "vvfb!!ff]B// VVL82*N*NOO  * & 3      Mrc(|ddigSt|tr|rd|ignddigSt|trg}|D]}t|tr|d|i0t|t sF|dd}|dkr2|dd}|d|r|ndi|dkr|di}t|t r|ddnd}|dr|d \}}} d } |dr'|d d d d } | r| } |dd| vr| ddndd| idi|dd|di|r|nddigSdt|igS)uConvert OpenAI message content (string or list) to Converse content blocks. Handles: - Plain text strings → [{"text": "..."}] - Content arrays with text/image_url parts → mixed text/image blocks Filters out empty text blocks — Bedrock's Converse API rejects messages where a text content block has an empty ``text`` field (ValidationException: "text content blocks must be non-empty"). Ref: issue #9486. Ntext rxr( image_urlurlzdata:,z image/jpeg;rimage/jpegbytes)formatsourcez[Image: ]) r>strrRlistr}dictr,r9 partitionsplit) contentblockspart part_typerrrheader_data media_type mime_parts r_convert_content_to_conversersj '3K&-mmooJ!""VSM?J'4  !5 ? ?D$$$  vtn---dD)) ,,IF""xx++ vt'>>>k)) HH["55 2>'**?&)mmC&8&8OFAt!-J((113$*122J$4$4S$9$9!$< $3)2JMMCF*CTCTj&6&6s&;&;B&?&?Z`'.o""#MM6+>>4vvvsm_4 S\\ " ##rmessagesc zg}g}|D]}|dd}|d}|dkrt|tr,|r|d|int|t r|D]}t|t rE|ddkr,|d|ddi\t|tr|d|i|dkr|dd}t|tr|ntj|}d |d|igd i} |r4|d dd kr"|d d| n|d | gd |dkrg} t|tr,|r| d|in7t|t r"| t||dg} | pgD]} | di} | dd} t|trtj |n|}n#tj tf$ri}YnwxYw| d| dd| dd|di| sddig} |r4|d ddkr"|d d | n|d| d h|d kr_t|} |r4|d dd kr"|d d | n|d | d ͐|r.|ddd kr|dd ddigd |r-|d dd kr|d ddigd |r|nd|fS)uConvert OpenAI-format messages to Bedrock Converse format. Returns ``(system_prompt, converse_messages)`` where: - ``system_prompt`` is a list of system content blocks (or None) - ``converse_messages`` is the conversation in Converse format Handles: - System messages → extracted as system prompt - User messages → ``{"role": "user", "content": [...]}`` - Assistant messages → ``{"role": "assistant", "content": [...]}`` - Tool calls → ``{"toolUse": {"toolUseId": ..., "name": ..., "input": ...}}`` - Tool results → ``{"toolResult": {"toolUseId": ..., "content": [...]}}`` Converse requires strict user/assistant alternation. Consecutive messages with the same role are merged into a single message. roler(rsystemrrxtool tool_call_id toolResult) toolUseIdrruser)rr assistant tool_callsrs argumentsz{}toolUseidrt)rrtinputrrN)r,r>rrRr}rrr{dumpsextendrloadsJSONDecodeError TypeErrorinsert)r system_blocks converse_msgsmsgrrrrresult_contenttool_result_blockcontent_blocksrtcrargs_str args_dicts rconvert_messages_to_conversers&!#M "MTTwwvr""'')$$ 8  '3'' =GMMOO =$$fg%67777GT** =#==D!$--=$((62B2Bf2L2L%,,fdhhvr6J6J-KLLLL#D#..=%,,fd^<<<  6>>77>266L(27C(@(@YWWdjQXFYFYN!-!' 89!  r!26!:f!D!Db!),334EFFFF$$" 12&&  ;  N'3'' MGMMOO M%%vw&78888GT** M%%&B7&K&KLLLr22J!'R  VVJ++66+t44#8B8S8Q8Q _ 8 4 4 4W_II,i8### "III#%%%'VVD"%5%5 "vr 2 2!*  '" 1#)3- r!26!:k!I!Ib!),33NCCCC$$'-&&  6>>9'BBN r!26!:f!D!Db!),33NCCCC$$"-&&  Nq)&1V;;Qfc]O L LMMMKr*62f<<f63-IIJJJ* 4MMm DDs +J66KK stop_reasonc@ddddddd}||dS)zAMap Bedrock Converse stop reasons to OpenAI finish_reason values.stoprlengthcontent_filter)end_turn stop_sequencetool_use max_tokenscontent_filteredguardrail_intervened)r,)rmappings r_converse_stop_reason_to_openair5s8 , 0 G ;;{F + ++rresponsec|di}|di}|dg}|dd}g}g}|D]}d|vr||d"d|vr|d}|t|dd d t|d d tj|d i td|rd|nd|r|nd} |di} t| dd| dd| dd| ddz} t |} |r| dkrd} td| | } t| g| |dd S)uConvert a Bedrock Converse API response to an OpenAI-compatible object. The agent loop in ``run_agent.py`` expects responses shaped like ``openai.ChatCompletion`` — this function bridges the gap. Returns a SimpleNamespace with: - ``.choices[0].message.content`` — text response - ``.choices[0].message.tool_calls`` — tool call list (if any) - ``.choices[0].finish_reason`` — stop/tool_calls/length - ``.usage`` — token usage stats outputmessager stopReasonrrrrr(rsrtrrtrrrxrsr Nrrrusage inputTokensr outputTokens prompt_tokenscompletion_tokens total_tokensrrindexr finish_reasonmodelIdchoicesrmodel)r,r}rr{rjoinr)rrrrr text_partsrblocktur usage_datarrchoices rnormalize_converse_responserBs@\\(B ' 'FjjB''G[[B//N,,|Z88KJJ   U??   eFm , , , , %  y!B   o66+r**(++"j)<)<==     )3= *%%%!+5::   Cgr**J  nn]A66$..;; NN=! , ,z~~na/P/P P    E4K@@M%mv--$ #F ll9b))   rc t|S)uConsume a Bedrock ConverseStream event stream and build an OpenAI-compatible response. Processes the stream events in order: - ``messageStart`` — role info - ``contentBlockStart`` — new text or toolUse block - ``contentBlockDelta`` — incremental text or toolUse input - ``contentBlockStop`` — block complete - ``messageStop`` — stop reason - ``metadata`` — usage stats Returns the same shape as ``normalize_converse_response()``. )stream_converse_with_callbacks) event_streams r normalize_converse_stream_eventsrs *, 7 77rc g}g}d}g}d} d} i} |dgD]} |r |rnd| vr| ddi} d| vr{d} |r*|d |g}| dd d | dd d d d }|r||d d | vr| d di}d|vr.|d}|||r | s ||d|vr.|*|dxx|ddd z cc<6d|vrB|d}t|tr%|dd }|r |r ||~d| vr| |drt j|dni}n#t jtf$ri}YnwxYw|t|d dt|d t j |d}|r*|d |g}Ld| vr| ddd} nd| vrI| ddi}|dd|ddd} |r(|d |td|rd |nd|r|nd!}t| dd| dd| dd| ddz"}t| }|r|d#krd$}td||%}t|g|d &S)'aProcess a Bedrock ConverseStream event stream with real-time callbacks. This is the core streaming function that powers both the CLI's live token display and the gateway's progressive message updates. Args: event_stream: The boto3 ``converse_stream()`` response containing a ``stream`` key with an iterable of events. on_text_delta: Called with each text chunk as it arrives. Only fires when no tool_use blocks have been seen (same semantics as the Anthropic and chat_completions streaming paths). on_tool_start: Called with the tool name when a toolUse block begins. Lets the TUI show a spinner while tool arguments are generated. on_reasoning_delta: Called with reasoning/thinking text chunks. Bedrock surfaces thinking via ``reasoning`` content block deltas on supported models (Claude 4.6+). on_interrupt_check: Called on each event. Should return True if the agent has been interrupted and streaming should stop. Returns: An OpenAI-compatible SimpleNamespace response, identical in shape to ``normalize_converse_response()``. NFrstreamcontentBlockStartstartrTr(rrt)rrt input_jsoncontentBlockDeltadeltarrrreasoningContentcontentBlockStoprsrr messageStoprmetadatarrrr)rrrrrrrrrr) r,r}rr>rr{rrrrrr)r on_text_delta on_tool_starton_reasoning_deltaon_interrupt_checkrr current_toolcurrent_text_buffer has_tool_userreventrrr reasoning thinking_text input_dict meta_usagerrrrs rrrs<J(*J#'L%'LK!#J!!(B//DD  "4"4"6"6  E % ' '-.227B??EE!!# &-%%bgg.A&B&BCCC*,'!&y!1!5!5k2!F!F!),00<<"$   !8!M,v"6777 E ) )-.227B??EV}#**4000!((!M$'''e##+ ...% 2B2F2FwPR2S2SS...#u,,!"45 i..:$-MM&"$=$=M$:);:**=999 5 ( ('$KWXdKe!mL,F!G!G!GkmJJ,i8$$$!#JJJ$!!/#K0#,)&1"&*Z"8"8### $ $ )!!"''*=">">???&(# e # # .22<LLKK 5 z*..w;;J)~~mQ?? *~q A AJ 8"''"566777  )3= *%%%!+5::   C  nn]A66$..;; NN=! , ,z~~na/P/P P    E4K@@M%mv--$ #F    s*$GG*)G*rr temperaturetop_pstop_sequencesguardrail_configc.t|\}} || d|id} |r|| d<| || dd<| || dd<|r || dd<|rCt|} | r2t|rd | i| d <ntd ||r|| d <| S) zBuild kwargs for ``bedrock-runtime.converse()`` or ``converse_stream()``. Converts OpenAI-format inputs to Converse API parameters. maxTokens)rrinferenceConfigrNr rtopP stopSequencesrq toolConfigudModel %s does not support tool calling — tools stripped. The agent will operate in text-only mode.guardrailConfig)rrrlloggerwarning) rrrqrrrr r  system_promptconverse_messageskwargsconverse_toolss rbuild_converse_kwargsr-s (DH'M'M$M$%  F)(x3> !-0 ,1 !&)D5C !/2 2599   (.. (/'@|$$@AF 5$4 ! Mrc Jt|} t||||||||} | jdi| } n`#t$rS} t | r>t d||t| jt|d} ~ wwxYwt| S)zCall Bedrock Converse API (non-streaming) and return an OpenAI-compatible response. This is the primary entry point for the agent loop when using the Bedrock provider. rrrqrrrr r u|bedrock: stale-connection error on converse(region=%s, model=%s): %s — evicting cached client so the next call reconnects.Nr) rrconverserYrGrrrxr'r#r rrrrqrrrr r rrrr$s r call_conversergs) 0 0F "%)   F "6?,,V,,  $S ) ) . NNMtCyy1    &f - - -  'x 0 00 6 BABBc Jt|} t||||||||} | jdi| } n`#t$rS} t | r>t d||t| jt|d} ~ wwxYwt| S)zCall Bedrock ConverseStream API and return an OpenAI-compatible response. Consumes the full stream and returns the assembled response. For true streaming with delta callbacks, use ``iter_converse_stream()`` instead. rubedrock: stale-connection error on converse_stream(region=%s, model=%s): %s — evicting cached client so the next call reconnects.Nr) rrconverse_streamrYrGrrrxr'r#rrs rcall_converse_streamr!s ) 0 0F "%)   F )6)33F33  $S ) ) . NNXtCyy1    &f - - -  ,H 5 55r_discovery_cacheic8tdS)z/Clear the model discovery cache. Used in tests.N)r"rrrrreset_discovery_cacher$srprovider_filterc  ddl}|ddt|pg}t|}|r.||dz t kr|dS t |}n4#t$r'}t d|gcYd}~Sd}~wwxYwg}t}d|pgD | } | d gD]} | d pd } | s/re| d pd } d | vr-| d d nd } | vr| vr| di}|dd dkr| dds| dg}d|vr || | dp| | d pd | dg|dd|| n2#t$r%}t d|Yd}~nd}~wwxYw g}d} i}|r||d<|jd$i|} | dgD]}||| d}|sn]|D]}|dpd }|s/|ddkrI| |vr`r4|dg}t'fd|D}|s|||dp| ddgdgdd|| n2#t$r%}td |Yd}~nd}~wwxYw|d!"||d#t|<|S)%aDiscover available Bedrock foundation models and inference profiles. Returns a list of model info dicts with keys: - ``id``: Model ID (e.g. "anthropic.claude-sonnet-4-6-20250514-v1:0") - ``name``: Human-readable name - ``provider``: Model provider (e.g. "Anthropic", "Amazon", "Meta") - ``input_modalities``: List of input types (e.g. ["TEXT", "IMAGE"]) - ``output_modalities``: List of output types - ``streaming``: Whether streaming is supported Caches results for 1 hour per region to avoid repeated API calls. Mirrors OpenClaw's ``discoverBedrockModels()`` in ``extensions/amazon-bedrock/discovery.ts``. rN:r timestampmodelsz7Failed to create Bedrock client for model discovery: %sc6h|]}|Sr)rj)r:fs r z*discover_bedrock_models..s ===!''))===rmodelSummariesrr( providerName.modelLifecyclestatusACTIVEresponseStreamingSupportedFoutputModalitiesTEXT modelNameinputModalitiesT)rrtproviderinput_modalitiesoutput_modalities streamingz,Failed to list Bedrock foundation models: %s nextTokeninferenceProfileSummariesinferenceProfileIdc3K|];}t|ddvV.+s_/quuZ/D/DEEKKMMQ[[rinferenceProfileNamezinference-profilez(Skipping inference profile discovery: %sct|ddrdnd|dfS)Nrrnrrt)r9rj)rBs rz)discover_bedrock_models..?s8 tW   * *1 & r)key)r(r)r)timersortedr"r,_DISCOVERY_CACHE_TTL_SECONDSrrYrrsetlist_foundation_modelsrRrjrupperr}addlist_inference_profilesrAdebugsort)rr%rI cache_keycachedrer)seen_idsrsummaryre provider_name model_prefix lifecycle output_modsprofiles next_tokenrprofile profile_idprofile_modelsmatchesrCs @rdiscover_bedrock_modelsrbs&KKKEECHHVO,Ar%B%BCCEEI  ! !) , ,F  499;; !448TTTh,V44 PRSTTT FuuH==o&;===J"J0022||$4b99 + +G I..4";;==H  !(^!>;;;UCC !++&8"==K[(( MM [11=XDDFF$[[88>BEEGG$+KK0A2$F$F%0!     LL)) * * * *= +> JJJEqIIIIIIIIJ+D  F 1&0{#5v5????H#<<(CRHH ) )((((!k22J    - -G!++&:;;ArHHJJJ {{8$$00!!X-- !(Xr!:!:+ MM  %;<<J QQSS/%+H&,X!     LL))++ , , , ,7 -8 DDD ?CCCCCCCCD KKK YY[[##Y MsP:B B;B60B;6B;GJ;; K*K%%K*.E(Q R!RRarnc^tjd|}|r|dndS)uExtract the model provider from a Bedrock model ARN. Example: "arn:aws:bedrock:us-east-1::foundation-model/anthropic.claude-v2" → "anthropic" zfoundation-model/([^.]+)rFr()researchgroup)rcmatchs rrArAKs/ I13 7 7E" *5;;q>>>*rc8t|}d|DS)zReturn a flat list of available Bedrock model IDs for the given region. Convenience wrapper around ``discover_bedrock_models()`` for use in the model selection UI. cg|] }|d S)rr)r:rBs r z)get_bedrock_model_ids..\s $ $ $AdG $ $ $r)rb)rr)s rget_bedrock_model_idsrlUs% %V , ,F $ $V $ $ $$rzNValidationException.*(?:input is too long|max input token|input token.*exceed)zVValidationException.*(?:exceeds? the (?:maximum|max) (?:number of )?(?:input )?tokens)zFModelStreamErrorException.*(?:Input is too long|too many input tokens)ThrottlingExceptionzToo many concurrent requestsServiceQuotaExceededExceptionModelNotReadyExceptionModelTimeoutExceptionInternalServerException error_messagecDtfdtDS)zReturn True if the error indicates the input context was too large. When this returns True, the agent should compress context and retry rather than treating it as a fatal error. c3BK|]}|VdSr8rfr:prrs rr<z,is_context_overflow_error..s/JJ1qxx &&JJJJJJr)rACONTEXT_OVERFLOW_PATTERNSrrs`ris_context_overflow_errorrz|s) JJJJ0IJJJ J JJrctrdStfdtDrdStfdtDrdSdS)uCClassify a Bedrock error for retry/failover decisions. Returns: - ``"context_overflow"`` — input too long, compress and retry - ``"rate_limit"`` — throttled, backoff and retry - ``"overloaded"`` — model temporarily unavailable, retry with delay - ``"unknown"`` — unclassified error context_overflowc3BK|]}|VdSr8rurvs rr<z)classify_bedrock_error../ > >q188M " " > > > > > >r rate_limitc3BK|]}|VdSr8rurvs rr<z)classify_bedrock_error..r~r overloadedunknown)rzrATHROTTLE_PATTERNSOVERLOAD_PATTERNSrys`rclassify_bedrock_errorrsv!//"!! > > > >,= > > >>>| > > > >,= > > >>>| 9rzanthropic.claude-opus-4-6i@ zanthropic.claude-sonnet-4-6zanthropic.claude-sonnet-4-5zanthropic.claude-haiku-4-5zanthropic.claude-opus-4zanthropic.claude-sonnet-4zanthropic.claude-3-5-sonnetzanthropic.claude-3-5-haikuzanthropic.claude-3-opuszanthropic.claude-3-sonnetzanthropic.claude-3-haikuzamazon.nova-proizamazon.nova-litezamazon.nova-microizmeta.llama4-maverickzmeta.llama4-scoutzmeta.llama3-3-70b-instruct)zmistral.mistral-largez deepseek.v3BEDROCK_CONTEXT_LENGTHSc|}d}t}tD]-\}}||vr$t |t |kr|}|}.|S)zLook up the context window size for a Bedrock model. Uses substring matching so versioned IDs like ``anthropic.claude-sonnet-4-6-20250514-v1:0`` resolve correctly. r()rjBEDROCK_DEFAULT_CONTEXT_LENGTHritemsro)reribest_keybest_valrHvals rget_bedrock_context_lengthrsm ..""KH-H+1133S +  #c((S]]":":HH Orr8)NNNN)NrNNNN)A__doc__r{loggingrPretypesrtypingrrrrr getLoggerr'rr r__annotations__r rrrrboolr#rB BaseExceptionr1rG_AWS_CREDENTIAL_ENV_VARSr^r`rdrkrlrprrrrrrrintfloatrrr!r"rKr$rbrArlcompile IGNORECASErxrrrzrrrrrrrrs:  !!!!!!33333333333333  8 $ $13tCH~22202tCH~222     1 1 1 1 111111*** c d    F=5=5T5555B''(4S>":'hsm''''TXd38n5>  c3h 8 C    .UsUtUUUU6666664T$ZDJ>1$T$Z1$1$1$1$htE4jtE 8DJ d +,tEtEtEtEv , , , , , ,A$A?AAAAP 8o 8 8 8 8$ LL  LLLLl#'#'!*.'+77 74j7 DJ 7 7 % 7 E? 7T#Y'7tn7 #s(^7777|#'#'!*.'+&1&1 &1 &14j&1 DJ  &1  &1 % &1 E?&1T#Y'&1tn&1&1&1&1&1Z#'#'!*.'+'6'6 '6 '64j'6 DJ  '6  '6 % '6 E?'6T#Y''6tn'6'6'6'6'6\$&$sCx.%%%#,0AA Ad3i(A $sCx.AAAAH+C+C++++%#%$s)%%%%&BJ`bdboppBJhjljwxxBJXZ\ZghhBJ%r}55BJ. >>BJ/??BJ("-88BJ'77BJ)2=99KSKTKKKK##2+W+"W+"W + !W + W + W+"W+!W+W+ W+W+W+W+ W!+$W%+&W'+(!W)+,&-%,1+++c3h8")        r