Module: Legion::Extensions::Llm::Bedrock

Extended by:
Core, AutoRegistration, Logging::Helper
Defined in:
lib/legion/extensions/llm/bedrock.rb,
lib/legion/extensions/llm/bedrock/version.rb,
lib/legion/extensions/llm/bedrock/provider.rb

Overview

Amazon Bedrock provider extension namespace.

Defined Under Namespace

Classes: Provider

Constant Summary collapse

PROVIDER_FAMILY = 
:bedrock
DEFAULT_REGION = 
'us-east-2'
VERSION = 
'0.3.0'

Class Method Summary collapse

Class Method Details

.broker_aws_credentials ⇒ Object

Fetch AWS credentials from the Legion Identity Broker.



117
118
119
120
121
122
123
124
125
126
127
128
129
130
 
# File 'lib/legion/extensions/llm/bedrock.rb', line 117

def self.broker_aws_credentials
  return nil unless defined?(Legion::Identity::Broker)

  creds = Legion::Identity::Broker.credentials_for(:aws)
  return nil unless creds.is_a?(Hash)

  akid = creds[:access_key_id] || creds['access_key_id']
  return nil unless akid

  { api_key: akid, bedrock_access_key_id: akid,
    bedrock_secret_access_key: creds[:secret_access_key] || creds['secret_access_key'],
    bedrock_session_token: creds[:session_token] || creds['session_token'],
    bedrock_region: creds[:region] || creds['region'] || DEFAULT_REGION }.compact
end

.claude_env_pattern_match ⇒ Object

Scan Claude config env hash for any key containing all of AWS, BEARER, TOKEN, and BEDROCK fragments (case-insensitive).



104
105
106
107
108
109
110
111
112
113
114
 
# File 'lib/legion/extensions/llm/bedrock.rb', line 104

def self.claude_env_pattern_match
  env_hash = CredentialSources.claude_config_value(:env)
  return nil unless env_hash.is_a?(Hash)

  fragments = %w[AWS BEARER TOKEN BEDROCK]
  _key, value = env_hash.find do |k, _v|
    upper = k.to_s.upcase
    fragments.all? { |frag| upper.include?(frag) }
  end
  value
end

.default_settings ⇒ Object 



20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
 
# File 'lib/legion/extensions/llm/bedrock.rb', line 20

def self.default_settings
  {
    enabled: false,
    default_model: 'us.anthropic.claude-sonnet-4-6',
    region: DEFAULT_REGION,
    bearer_token: nil,
    api_key: nil,
    secret_key: nil,
    session_token: nil,
    model_whitelist: [],
    model_blacklist: [],
    model_cache_ttl: 3600,
    tls: { enabled: false, verify: :peer },
    instances: {}
  }
end

.discover_broker(candidates) ⇒ Object 



95
96
97
98
99
100
 
# File 'lib/legion/extensions/llm/bedrock.rb', line 95

def self.discover_broker(candidates)
  return unless defined?(Legion::Identity::Broker)

  broker_creds = broker_aws_credentials
  candidates[:broker] = broker_creds.merge(tier: :cloud) if broker_creds
end

.discover_claude_bearer(candidates) ⇒ Object 



66
67
68
69
70
71
72
73
74
75
76
 
# File 'lib/legion/extensions/llm/bedrock.rb', line 66

def self.discover_claude_bearer(candidates)
  claude_bearer = CredentialSources.claude_env_value('AWS_BEARER_TOKEN_BEDROCK')
  claude_bearer ||= claude_env_pattern_match
  return unless claude_bearer

  candidates[:claude] = {
    bearer_token: claude_bearer,
    bedrock_region: CredentialSources.claude_env_value('AWS_DEFAULT_REGION') || DEFAULT_REGION,
    tier: :cloud
  }
end

.discover_env_bearer(candidates) ⇒ Object 



55
56
57
58
59
60
61
62
63
64
 
# File 'lib/legion/extensions/llm/bedrock.rb', line 55

def self.discover_env_bearer(candidates)
  bearer = CredentialSources.env('AWS_BEARER_TOKEN_BEDROCK')
  return unless bearer

  candidates[:env_bearer] = {
    bearer_token: bearer,
    bedrock_region: CredentialSources.env('AWS_DEFAULT_REGION') || DEFAULT_REGION,
    tier: :cloud
  }
end

.discover_env_sigv4(candidates) ⇒ Object 



78
79
80
81
82
83
84
85
86
87
88
 
# File 'lib/legion/extensions/llm/bedrock.rb', line 78

def self.discover_env_sigv4(candidates)
  akid = CredentialSources.env('AWS_ACCESS_KEY_ID')
  skey = CredentialSources.env('AWS_SECRET_ACCESS_KEY')
  return unless akid && skey

  candidates[:env_sigv4] = {
    api_key: akid, bedrock_access_key_id: akid, bedrock_secret_access_key: skey,
    bedrock_session_token: CredentialSources.env('AWS_SESSION_TOKEN'),
    bedrock_region: CredentialSources.env('AWS_DEFAULT_REGION') || DEFAULT_REGION, tier: :cloud
  }.compact
end

.discover_instances ⇒ Object 



45
46
47
48
49
50
51
52
53
 
# File 'lib/legion/extensions/llm/bedrock.rb', line 45

def self.discover_instances
  candidates = {}
  discover_env_bearer(candidates)
  discover_claude_bearer(candidates)
  discover_env_sigv4(candidates)
  discover_settings(candidates)
  discover_broker(candidates)
  CredentialSources.dedup_credentials(candidates)
end

.discover_settings(candidates) ⇒ Object 



90
91
92
93
 
# File 'lib/legion/extensions/llm/bedrock.rb', line 90

def self.discover_settings(candidates)
  settings = CredentialSources.setting(:extensions, :llm, :bedrock)
  candidates[:settings] = settings.merge(tier: :cloud) if settings.is_a?(Hash) && !settings.empty?
end

.provider_class ⇒ Object 



37
38
39
 
# File 'lib/legion/extensions/llm/bedrock.rb', line 37

def self.provider_class
  Provider
end

.registry_publisher ⇒ Object 



41
42
43
 
# File 'lib/legion/extensions/llm/bedrock.rb', line 41

def self.registry_publisher
  @registry_publisher ||= Legion::Extensions::Llm::RegistryPublisher.new(provider_family: PROVIDER_FAMILY)
end