1use std::pin::Pin;
2use std::str::FromStr;
3use std::sync::Arc;
4
5use crate::ui::InstructionListItem;
6use anyhow::{Context as _, Result, anyhow};
7use aws_config::stalled_stream_protection::StalledStreamProtectionConfig;
8use aws_config::{BehaviorVersion, Region};
9use aws_credential_types::Credentials;
10use aws_http_client::AwsHttpClient;
11use bedrock::bedrock_client::Client as BedrockClient;
12use bedrock::bedrock_client::config::timeout::TimeoutConfig;
13use bedrock::bedrock_client::types::{
14 ContentBlockDelta, ContentBlockStart, ConverseStreamOutput, ReasoningContentBlockDelta,
15 StopReason,
16};
17use bedrock::{
18 BedrockAutoToolChoice, BedrockBlob, BedrockError, BedrockInnerContent, BedrockMessage,
19 BedrockModelMode, BedrockStreamingResponse, BedrockThinkingBlock, BedrockThinkingTextBlock,
20 BedrockTool, BedrockToolChoice, BedrockToolConfig, BedrockToolInputSchema,
21 BedrockToolResultBlock, BedrockToolResultContentBlock, BedrockToolResultStatus,
22 BedrockToolSpec, BedrockToolUseBlock, Model, value_to_aws_document,
23};
24use collections::{BTreeMap, HashMap};
25use credentials_provider::CredentialsProvider;
26use editor::{Editor, EditorElement, EditorStyle};
27use futures::{FutureExt, Stream, StreamExt, future::BoxFuture, stream::BoxStream};
28use gpui::{
29 AnyView, App, AsyncApp, Context, Entity, FontStyle, FontWeight, Subscription, Task, TextStyle,
30 WhiteSpace,
31};
32use gpui_tokio::Tokio;
33use http_client::HttpClient;
34use language_model::{
35 AuthenticateError, LanguageModel, LanguageModelCacheConfiguration,
36 LanguageModelCompletionError, LanguageModelCompletionEvent, LanguageModelId, LanguageModelName,
37 LanguageModelProvider, LanguageModelProviderId, LanguageModelProviderName,
38 LanguageModelProviderState, LanguageModelRequest, LanguageModelToolUse, MessageContent,
39 RateLimiter, Role, TokenUsage,
40};
41use schemars::JsonSchema;
42use serde::{Deserialize, Serialize};
43use serde_json::Value;
44use settings::{Settings, SettingsStore};
45use smol::lock::OnceCell;
46use strum::{EnumIter, IntoEnumIterator, IntoStaticStr};
47use theme::ThemeSettings;
48use tokio::runtime::Handle;
49use ui::{Icon, IconName, List, Tooltip, prelude::*};
50use util::{ResultExt, default};
51
52use crate::AllLanguageModelSettings;
53
54const PROVIDER_ID: &str = "amazon-bedrock";
55const PROVIDER_NAME: &str = "Amazon Bedrock";
56
57#[derive(Default, Clone, Deserialize, Serialize, PartialEq, Debug)]
58pub struct BedrockCredentials {
59 pub access_key_id: String,
60 pub secret_access_key: String,
61 pub session_token: Option<String>,
62 pub region: String,
63}
64
65#[derive(Default, Clone, Debug, PartialEq)]
66pub struct AmazonBedrockSettings {
67 pub available_models: Vec<AvailableModel>,
68 pub region: Option<String>,
69 pub endpoint: Option<String>,
70 pub profile_name: Option<String>,
71 pub role_arn: Option<String>,
72 pub authentication_method: Option<BedrockAuthMethod>,
73}
74
75#[derive(Clone, Debug, PartialEq, Serialize, Deserialize, EnumIter, IntoStaticStr, JsonSchema)]
76pub enum BedrockAuthMethod {
77 #[serde(rename = "named_profile")]
78 NamedProfile,
79 #[serde(rename = "static_credentials")]
80 StaticCredentials,
81 #[serde(rename = "sso")]
82 SingleSignOn,
83 /// IMDSv2, PodIdentity, env vars, etc.
84 #[serde(rename = "default")]
85 Automatic,
86}
87
88#[derive(Clone, Debug, PartialEq, Serialize, Deserialize, JsonSchema)]
89pub struct AvailableModel {
90 pub name: String,
91 pub display_name: Option<String>,
92 pub max_tokens: usize,
93 pub cache_configuration: Option<LanguageModelCacheConfiguration>,
94 pub max_output_tokens: Option<u32>,
95 pub default_temperature: Option<f32>,
96 pub mode: Option<ModelMode>,
97}
98
99#[derive(Clone, Debug, Default, PartialEq, Serialize, Deserialize, JsonSchema)]
100#[serde(tag = "type", rename_all = "lowercase")]
101pub enum ModelMode {
102 #[default]
103 Default,
104 Thinking {
105 /// The maximum number of tokens to use for reasoning. Must be lower than the model's `max_output_tokens`.
106 budget_tokens: Option<u64>,
107 },
108}
109
110impl From<ModelMode> for BedrockModelMode {
111 fn from(value: ModelMode) -> Self {
112 match value {
113 ModelMode::Default => BedrockModelMode::Default,
114 ModelMode::Thinking { budget_tokens } => BedrockModelMode::Thinking { budget_tokens },
115 }
116 }
117}
118
119impl From<BedrockModelMode> for ModelMode {
120 fn from(value: BedrockModelMode) -> Self {
121 match value {
122 BedrockModelMode::Default => ModelMode::Default,
123 BedrockModelMode::Thinking { budget_tokens } => ModelMode::Thinking { budget_tokens },
124 }
125 }
126}
127
128/// The URL of the base AWS service.
129///
130/// Right now we're just using this as the key to store the AWS credentials
131/// under in the keychain.
132const AMAZON_AWS_URL: &str = "https://amazonaws.com";
133
134// These environment variables all use a `ZED_` prefix because we don't want to overwrite the user's AWS credentials.
135const ZED_BEDROCK_ACCESS_KEY_ID_VAR: &str = "ZED_ACCESS_KEY_ID";
136const ZED_BEDROCK_SECRET_ACCESS_KEY_VAR: &str = "ZED_SECRET_ACCESS_KEY";
137const ZED_BEDROCK_SESSION_TOKEN_VAR: &str = "ZED_SESSION_TOKEN";
138const ZED_AWS_PROFILE_VAR: &str = "ZED_AWS_PROFILE";
139const ZED_BEDROCK_REGION_VAR: &str = "ZED_AWS_REGION";
140const ZED_AWS_CREDENTIALS_VAR: &str = "ZED_AWS_CREDENTIALS";
141const ZED_AWS_ENDPOINT_VAR: &str = "ZED_AWS_ENDPOINT";
142
143pub struct State {
144 credentials: Option<BedrockCredentials>,
145 settings: Option<AmazonBedrockSettings>,
146 credentials_from_env: bool,
147 _subscription: Subscription,
148}
149
150impl State {
151 fn reset_credentials(&self, cx: &mut Context<Self>) -> Task<Result<()>> {
152 let credentials_provider = <dyn CredentialsProvider>::global(cx);
153 cx.spawn(async move |this, cx| {
154 credentials_provider
155 .delete_credentials(AMAZON_AWS_URL, &cx)
156 .await
157 .log_err();
158 this.update(cx, |this, cx| {
159 this.credentials = None;
160 this.credentials_from_env = false;
161 this.settings = None;
162 cx.notify();
163 })
164 })
165 }
166
167 fn set_credentials(
168 &mut self,
169 credentials: BedrockCredentials,
170 cx: &mut Context<Self>,
171 ) -> Task<Result<()>> {
172 let credentials_provider = <dyn CredentialsProvider>::global(cx);
173 cx.spawn(async move |this, cx| {
174 credentials_provider
175 .write_credentials(
176 AMAZON_AWS_URL,
177 "Bearer",
178 &serde_json::to_vec(&credentials)?,
179 &cx,
180 )
181 .await?;
182 this.update(cx, |this, cx| {
183 this.credentials = Some(credentials);
184 cx.notify();
185 })
186 })
187 }
188
189 fn is_authenticated(&self) -> Option<String> {
190 match self
191 .settings
192 .as_ref()
193 .and_then(|s| s.authentication_method.as_ref())
194 {
195 Some(BedrockAuthMethod::StaticCredentials) => Some(String::from(
196 "You are authenticated using Static Credentials.",
197 )),
198 Some(BedrockAuthMethod::NamedProfile) | Some(BedrockAuthMethod::SingleSignOn) => {
199 match self.settings.as_ref() {
200 None => Some(String::from(
201 "You are authenticated using a Named Profile, but no profile is set.",
202 )),
203 Some(settings) => match settings.clone().profile_name {
204 None => Some(String::from(
205 "You are authenticated using a Named Profile, but no profile is set.",
206 )),
207 Some(profile_name) => Some(format!(
208 "You are authenticated using a Named Profile: {profile_name}",
209 )),
210 },
211 }
212 }
213 Some(BedrockAuthMethod::Automatic) => Some(String::from(
214 "You are authenticated using Automatic Credentials.",
215 )),
216 None => {
217 if self.credentials.is_some() {
218 Some(String::from(
219 "You are authenticated using Static Credentials.",
220 ))
221 } else {
222 None
223 }
224 }
225 }
226 }
227
228 fn authenticate(&self, cx: &mut Context<Self>) -> Task<Result<(), AuthenticateError>> {
229 if self.is_authenticated().is_some() {
230 return Task::ready(Ok(()));
231 }
232
233 let credentials_provider = <dyn CredentialsProvider>::global(cx);
234 cx.spawn(async move |this, cx| {
235 let (credentials, from_env) =
236 if let Ok(credentials) = std::env::var(ZED_AWS_CREDENTIALS_VAR) {
237 (credentials, true)
238 } else {
239 let (_, credentials) = credentials_provider
240 .read_credentials(AMAZON_AWS_URL, &cx)
241 .await?
242 .ok_or_else(|| AuthenticateError::CredentialsNotFound)?;
243 (
244 String::from_utf8(credentials)
245 .context("invalid {PROVIDER_NAME} credentials")?,
246 false,
247 )
248 };
249
250 let credentials: BedrockCredentials =
251 serde_json::from_str(&credentials).context("failed to parse credentials")?;
252
253 this.update(cx, |this, cx| {
254 this.credentials = Some(credentials);
255 this.credentials_from_env = from_env;
256 cx.notify();
257 })?;
258
259 Ok(())
260 })
261 }
262}
263
264pub struct BedrockLanguageModelProvider {
265 http_client: AwsHttpClient,
266 handler: tokio::runtime::Handle,
267 state: gpui::Entity<State>,
268}
269
270impl BedrockLanguageModelProvider {
271 pub fn new(http_client: Arc<dyn HttpClient>, cx: &mut App) -> Self {
272 let state = cx.new(|cx| State {
273 credentials: None,
274 settings: Some(AllLanguageModelSettings::get_global(cx).bedrock.clone()),
275 credentials_from_env: false,
276 _subscription: cx.observe_global::<SettingsStore>(|_, cx| {
277 cx.notify();
278 }),
279 });
280
281 let tokio_handle = Tokio::handle(cx);
282
283 let coerced_client = AwsHttpClient::new(http_client.clone(), tokio_handle.clone());
284
285 Self {
286 http_client: coerced_client,
287 handler: tokio_handle.clone(),
288 state,
289 }
290 }
291
292 fn create_language_model(&self, model: bedrock::Model) -> Arc<dyn LanguageModel> {
293 Arc::new(BedrockModel {
294 id: LanguageModelId::from(model.id().to_string()),
295 model,
296 http_client: self.http_client.clone(),
297 handler: self.handler.clone(),
298 state: self.state.clone(),
299 client: OnceCell::new(),
300 request_limiter: RateLimiter::new(4),
301 })
302 }
303}
304
305impl LanguageModelProvider for BedrockLanguageModelProvider {
306 fn id(&self) -> LanguageModelProviderId {
307 LanguageModelProviderId(PROVIDER_ID.into())
308 }
309
310 fn name(&self) -> LanguageModelProviderName {
311 LanguageModelProviderName(PROVIDER_NAME.into())
312 }
313
314 fn icon(&self) -> IconName {
315 IconName::AiBedrock
316 }
317
318 fn default_model(&self, _cx: &App) -> Option<Arc<dyn LanguageModel>> {
319 Some(self.create_language_model(bedrock::Model::default()))
320 }
321
322 fn default_fast_model(&self, _cx: &App) -> Option<Arc<dyn LanguageModel>> {
323 Some(self.create_language_model(bedrock::Model::default_fast()))
324 }
325
326 fn provided_models(&self, cx: &App) -> Vec<Arc<dyn LanguageModel>> {
327 let mut models = BTreeMap::default();
328
329 for model in bedrock::Model::iter() {
330 if !matches!(model, bedrock::Model::Custom { .. }) {
331 models.insert(model.id().to_string(), model);
332 }
333 }
334
335 // Override with available models from settings
336 for model in AllLanguageModelSettings::get_global(cx)
337 .bedrock
338 .available_models
339 .iter()
340 {
341 models.insert(
342 model.name.clone(),
343 bedrock::Model::Custom {
344 name: model.name.clone(),
345 display_name: model.display_name.clone(),
346 max_tokens: model.max_tokens,
347 max_output_tokens: model.max_output_tokens,
348 default_temperature: model.default_temperature,
349 },
350 );
351 }
352
353 models
354 .into_values()
355 .map(|model| self.create_language_model(model))
356 .collect()
357 }
358
359 fn is_authenticated(&self, cx: &App) -> bool {
360 self.state.read(cx).is_authenticated().is_some()
361 }
362
363 fn authenticate(&self, cx: &mut App) -> Task<Result<(), AuthenticateError>> {
364 self.state.update(cx, |state, cx| state.authenticate(cx))
365 }
366
367 fn configuration_view(&self, window: &mut Window, cx: &mut App) -> AnyView {
368 cx.new(|cx| ConfigurationView::new(self.state.clone(), window, cx))
369 .into()
370 }
371
372 fn reset_credentials(&self, cx: &mut App) -> Task<Result<()>> {
373 self.state
374 .update(cx, |state, cx| state.reset_credentials(cx))
375 }
376}
377
378impl LanguageModelProviderState for BedrockLanguageModelProvider {
379 type ObservableEntity = State;
380
381 fn observable_entity(&self) -> Option<gpui::Entity<Self::ObservableEntity>> {
382 Some(self.state.clone())
383 }
384}
385
386struct BedrockModel {
387 id: LanguageModelId,
388 model: Model,
389 http_client: AwsHttpClient,
390 handler: tokio::runtime::Handle,
391 client: OnceCell<BedrockClient>,
392 state: gpui::Entity<State>,
393 request_limiter: RateLimiter,
394}
395
396impl BedrockModel {
397 fn get_or_init_client(&self, cx: &AsyncApp) -> Result<&BedrockClient, anyhow::Error> {
398 self.client
399 .get_or_try_init_blocking(|| {
400 let Ok((auth_method, credentials, endpoint, region, settings)) =
401 cx.read_entity(&self.state, |state, _cx| {
402 let auth_method = state
403 .settings
404 .as_ref()
405 .and_then(|s| s.authentication_method.clone())
406 .unwrap_or(BedrockAuthMethod::Automatic);
407
408 let endpoint = state.settings.as_ref().and_then(|s| s.endpoint.clone());
409
410 let region = state
411 .settings
412 .as_ref()
413 .and_then(|s| s.region.clone())
414 .unwrap_or(String::from("us-east-1"));
415
416 (
417 auth_method,
418 state.credentials.clone(),
419 endpoint,
420 region,
421 state.settings.clone(),
422 )
423 })
424 else {
425 return Err(anyhow!("App state dropped"));
426 };
427
428 let mut config_builder = aws_config::defaults(BehaviorVersion::latest())
429 .stalled_stream_protection(StalledStreamProtectionConfig::disabled())
430 .http_client(self.http_client.clone())
431 .region(Region::new(region))
432 .timeout_config(TimeoutConfig::disabled());
433
434 if let Some(endpoint_url) = endpoint {
435 if !endpoint_url.is_empty() {
436 config_builder = config_builder.endpoint_url(endpoint_url);
437 }
438 }
439
440 match auth_method {
441 BedrockAuthMethod::StaticCredentials => {
442 if let Some(creds) = credentials {
443 let aws_creds = Credentials::new(
444 creds.access_key_id,
445 creds.secret_access_key,
446 creds.session_token,
447 None,
448 "zed-bedrock-provider",
449 );
450 config_builder = config_builder.credentials_provider(aws_creds);
451 }
452 }
453 BedrockAuthMethod::NamedProfile | BedrockAuthMethod::SingleSignOn => {
454 // Currently NamedProfile and SSO behave the same way but only the instructions change
455 // Until we support BearerAuth through SSO, this will not change.
456 let profile_name = settings
457 .and_then(|s| s.profile_name)
458 .unwrap_or_else(|| "default".to_string());
459
460 if !profile_name.is_empty() {
461 config_builder = config_builder.profile_name(profile_name);
462 }
463 }
464 BedrockAuthMethod::Automatic => {
465 // Use default credential provider chain
466 }
467 }
468
469 let config = self.handler.block_on(config_builder.load());
470 Ok(BedrockClient::new(&config))
471 })
472 .map_err(|err| anyhow!("Failed to initialize Bedrock client: {err}"))?;
473
474 self.client
475 .get()
476 .ok_or_else(|| anyhow!("Bedrock client not initialized"))
477 }
478
479 fn stream_completion(
480 &self,
481 request: bedrock::Request,
482 cx: &AsyncApp,
483 ) -> Result<
484 BoxFuture<'static, BoxStream<'static, Result<BedrockStreamingResponse, BedrockError>>>,
485 > {
486 let runtime_client = self
487 .get_or_init_client(cx)
488 .cloned()
489 .context("Bedrock client not initialized")?;
490 let owned_handle = self.handler.clone();
491
492 Ok(async move {
493 let request = bedrock::stream_completion(runtime_client, request, owned_handle);
494 request.await.unwrap_or_else(|e| {
495 futures::stream::once(async move { Err(BedrockError::ClientError(e)) }).boxed()
496 })
497 }
498 .boxed())
499 }
500}
501
502impl LanguageModel for BedrockModel {
503 fn id(&self) -> LanguageModelId {
504 self.id.clone()
505 }
506
507 fn name(&self) -> LanguageModelName {
508 LanguageModelName::from(self.model.display_name().to_string())
509 }
510
511 fn provider_id(&self) -> LanguageModelProviderId {
512 LanguageModelProviderId(PROVIDER_ID.into())
513 }
514
515 fn provider_name(&self) -> LanguageModelProviderName {
516 LanguageModelProviderName(PROVIDER_NAME.into())
517 }
518
519 fn supports_tools(&self) -> bool {
520 self.model.supports_tool_use()
521 }
522
523 fn telemetry_id(&self) -> String {
524 format!("bedrock/{}", self.model.id())
525 }
526
527 fn max_token_count(&self) -> usize {
528 self.model.max_token_count()
529 }
530
531 fn max_output_tokens(&self) -> Option<u32> {
532 Some(self.model.max_output_tokens())
533 }
534
535 fn count_tokens(
536 &self,
537 request: LanguageModelRequest,
538 cx: &App,
539 ) -> BoxFuture<'static, Result<usize>> {
540 get_bedrock_tokens(request, cx)
541 }
542
543 fn stream_completion(
544 &self,
545 request: LanguageModelRequest,
546 cx: &AsyncApp,
547 ) -> BoxFuture<
548 'static,
549 Result<
550 BoxStream<'static, Result<LanguageModelCompletionEvent, LanguageModelCompletionError>>,
551 >,
552 > {
553 let Ok(region) = cx.read_entity(&self.state, |state, _cx| {
554 // Get region - from credentials or directly from settings
555 let region = state
556 .credentials
557 .as_ref()
558 .map(|s| s.region.clone())
559 .unwrap_or(String::from("us-east-1"));
560
561 region
562 }) else {
563 return async move { Err(anyhow!("App State Dropped")) }.boxed();
564 };
565
566 let model_id = match self.model.cross_region_inference_id(®ion) {
567 Ok(s) => s,
568 Err(e) => {
569 return async move { Err(e) }.boxed();
570 }
571 };
572
573 let request = match into_bedrock(
574 request,
575 model_id,
576 self.model.default_temperature(),
577 self.model.max_output_tokens(),
578 self.model.mode(),
579 ) {
580 Ok(request) => request,
581 Err(err) => return futures::future::ready(Err(err)).boxed(),
582 };
583
584 let owned_handle = self.handler.clone();
585
586 let request = self.stream_completion(request, cx);
587 let future = self.request_limiter.stream(async move {
588 let response = request.map_err(|err| anyhow!(err))?.await;
589 Ok(map_to_language_model_completion_events(
590 response,
591 owned_handle,
592 ))
593 });
594 async move { Ok(future.await?.boxed()) }.boxed()
595 }
596
597 fn cache_configuration(&self) -> Option<LanguageModelCacheConfiguration> {
598 None
599 }
600}
601
602pub fn into_bedrock(
603 request: LanguageModelRequest,
604 model: String,
605 default_temperature: f32,
606 max_output_tokens: u32,
607 mode: BedrockModelMode,
608) -> Result<bedrock::Request> {
609 let mut new_messages: Vec<BedrockMessage> = Vec::new();
610 let mut system_message = String::new();
611
612 for message in request.messages {
613 if message.contents_empty() {
614 continue;
615 }
616
617 match message.role {
618 Role::User | Role::Assistant => {
619 let bedrock_message_content: Vec<BedrockInnerContent> = message
620 .content
621 .into_iter()
622 .filter_map(|content| match content {
623 MessageContent::Text(text) => {
624 if !text.is_empty() {
625 Some(BedrockInnerContent::Text(text))
626 } else {
627 None
628 }
629 }
630 MessageContent::Thinking { text, signature } => {
631 let thinking = BedrockThinkingTextBlock::builder()
632 .text(text)
633 .set_signature(signature)
634 .build()
635 .context("failed to build reasoning block")
636 .log_err()?;
637
638 Some(BedrockInnerContent::ReasoningContent(
639 BedrockThinkingBlock::ReasoningText(thinking),
640 ))
641 }
642 MessageContent::RedactedThinking(blob) => {
643 let redacted =
644 BedrockThinkingBlock::RedactedContent(BedrockBlob::new(blob));
645
646 Some(BedrockInnerContent::ReasoningContent(redacted))
647 }
648 MessageContent::ToolUse(tool_use) => BedrockToolUseBlock::builder()
649 .name(tool_use.name.to_string())
650 .tool_use_id(tool_use.id.to_string())
651 .input(value_to_aws_document(&tool_use.input))
652 .build()
653 .context("failed to build Bedrock tool use block")
654 .log_err()
655 .map(BedrockInnerContent::ToolUse),
656 MessageContent::ToolResult(tool_result) => {
657 BedrockToolResultBlock::builder()
658 .tool_use_id(tool_result.tool_use_id.to_string())
659 .content(BedrockToolResultContentBlock::Text(
660 tool_result.content.to_string(),
661 ))
662 .status({
663 if tool_result.is_error {
664 BedrockToolResultStatus::Error
665 } else {
666 BedrockToolResultStatus::Success
667 }
668 })
669 .build()
670 .context("failed to build Bedrock tool result block")
671 .log_err()
672 .map(BedrockInnerContent::ToolResult)
673 }
674 _ => None,
675 })
676 .collect();
677 let bedrock_role = match message.role {
678 Role::User => bedrock::BedrockRole::User,
679 Role::Assistant => bedrock::BedrockRole::Assistant,
680 Role::System => unreachable!("System role should never occur here"),
681 };
682 if let Some(last_message) = new_messages.last_mut() {
683 if last_message.role == bedrock_role {
684 last_message.content.extend(bedrock_message_content);
685 continue;
686 }
687 }
688 new_messages.push(
689 BedrockMessage::builder()
690 .role(bedrock_role)
691 .set_content(Some(bedrock_message_content))
692 .build()
693 .context("failed to build Bedrock message")?,
694 );
695 }
696 Role::System => {
697 if !system_message.is_empty() {
698 system_message.push_str("\n\n");
699 }
700 system_message.push_str(&message.string_contents());
701 }
702 }
703 }
704
705 let tool_spec: Vec<BedrockTool> = request
706 .tools
707 .iter()
708 .filter_map(|tool| {
709 Some(BedrockTool::ToolSpec(
710 BedrockToolSpec::builder()
711 .name(tool.name.clone())
712 .description(tool.description.clone())
713 .input_schema(BedrockToolInputSchema::Json(value_to_aws_document(
714 &tool.input_schema,
715 )))
716 .build()
717 .log_err()?,
718 ))
719 })
720 .collect();
721
722 let tool_config: BedrockToolConfig = BedrockToolConfig::builder()
723 .set_tools(Some(tool_spec))
724 .tool_choice(BedrockToolChoice::Auto(
725 BedrockAutoToolChoice::builder().build(),
726 ))
727 .build()?;
728
729 Ok(bedrock::Request {
730 model,
731 messages: new_messages,
732 max_tokens: max_output_tokens,
733 system: Some(system_message),
734 tools: Some(tool_config),
735 thinking: if let BedrockModelMode::Thinking { budget_tokens } = mode {
736 Some(bedrock::Thinking::Enabled { budget_tokens })
737 } else {
738 None
739 },
740 metadata: None,
741 stop_sequences: Vec::new(),
742 temperature: request.temperature.or(Some(default_temperature)),
743 top_k: None,
744 top_p: None,
745 })
746}
747
748// TODO: just call the ConverseOutput.usage() method:
749// https://docs.rs/aws-sdk-bedrockruntime/latest/aws_sdk_bedrockruntime/operation/converse/struct.ConverseOutput.html#method.output
750pub fn get_bedrock_tokens(
751 request: LanguageModelRequest,
752 cx: &App,
753) -> BoxFuture<'static, Result<usize>> {
754 cx.background_executor()
755 .spawn(async move {
756 let messages = request.messages;
757 let mut tokens_from_images = 0;
758 let mut string_messages = Vec::with_capacity(messages.len());
759
760 for message in messages {
761 use language_model::MessageContent;
762
763 let mut string_contents = String::new();
764
765 for content in message.content {
766 match content {
767 MessageContent::Text(text) | MessageContent::Thinking { text, .. } => {
768 string_contents.push_str(&text);
769 }
770 MessageContent::RedactedThinking(_) => {}
771 MessageContent::Image(image) => {
772 tokens_from_images += image.estimate_tokens();
773 }
774 MessageContent::ToolUse(_tool_use) => {
775 // TODO: Estimate token usage from tool uses.
776 }
777 MessageContent::ToolResult(tool_result) => {
778 string_contents.push_str(&tool_result.content);
779 }
780 }
781 }
782
783 if !string_contents.is_empty() {
784 string_messages.push(tiktoken_rs::ChatCompletionRequestMessage {
785 role: match message.role {
786 Role::User => "user".into(),
787 Role::Assistant => "assistant".into(),
788 Role::System => "system".into(),
789 },
790 content: Some(string_contents),
791 name: None,
792 function_call: None,
793 });
794 }
795 }
796
797 // Tiktoken doesn't yet support these models, so we manually use the
798 // same tokenizer as GPT-4.
799 tiktoken_rs::num_tokens_from_messages("gpt-4", &string_messages)
800 .map(|tokens| tokens + tokens_from_images)
801 })
802 .boxed()
803}
804
805pub fn map_to_language_model_completion_events(
806 events: Pin<Box<dyn Send + Stream<Item = Result<BedrockStreamingResponse, BedrockError>>>>,
807 handle: Handle,
808) -> impl Stream<Item = Result<LanguageModelCompletionEvent, LanguageModelCompletionError>> {
809 struct RawToolUse {
810 id: String,
811 name: String,
812 input_json: String,
813 }
814
815 struct State {
816 events: Pin<Box<dyn Send + Stream<Item = Result<BedrockStreamingResponse, BedrockError>>>>,
817 tool_uses_by_index: HashMap<i32, RawToolUse>,
818 }
819
820 futures::stream::unfold(
821 State {
822 events,
823 tool_uses_by_index: HashMap::default(),
824 },
825 move |mut state: State| {
826 let inner_handle = handle.clone();
827 async move {
828 inner_handle
829 .spawn(async {
830 while let Some(event) = state.events.next().await {
831 match event {
832 Ok(event) => match event {
833 ConverseStreamOutput::ContentBlockDelta(cb_delta) => {
834 match cb_delta.delta {
835 Some(ContentBlockDelta::Text(text_out)) => {
836 let completion_event =
837 LanguageModelCompletionEvent::Text(text_out);
838 return Some((Some(Ok(completion_event)), state));
839 }
840
841 Some(ContentBlockDelta::ToolUse(text_out)) => {
842 if let Some(tool_use) = state
843 .tool_uses_by_index
844 .get_mut(&cb_delta.content_block_index)
845 {
846 tool_use.input_json.push_str(text_out.input());
847 }
848 }
849
850 Some(ContentBlockDelta::ReasoningContent(thinking)) => {
851 match thinking {
852 ReasoningContentBlockDelta::RedactedContent(
853 redacted,
854 ) => {
855 let thinking_event =
856 LanguageModelCompletionEvent::Thinking {
857 text: String::from_utf8(
858 redacted.into_inner(),
859 )
860 .unwrap_or("REDACTED".to_string()),
861 signature: None,
862 };
863
864 return Some((
865 Some(Ok(thinking_event)),
866 state,
867 ));
868 }
869 ReasoningContentBlockDelta::Signature(
870 signature,
871 ) => {
872 return Some((
873 Some(Ok(LanguageModelCompletionEvent::Thinking {
874 text: "".to_string(),
875 signature: Some(signature)
876 })),
877 state,
878 ));
879 }
880 ReasoningContentBlockDelta::Text(thoughts) => {
881 let thinking_event =
882 LanguageModelCompletionEvent::Thinking {
883 text: thoughts.to_string(),
884 signature: None
885 };
886
887 return Some((
888 Some(Ok(thinking_event)),
889 state,
890 ));
891 }
892 _ => {}
893 }
894 }
895 _ => {}
896 }
897 }
898 ConverseStreamOutput::ContentBlockStart(cb_start) => {
899 if let Some(ContentBlockStart::ToolUse(text_out)) =
900 cb_start.start
901 {
902 let tool_use = RawToolUse {
903 id: text_out.tool_use_id,
904 name: text_out.name,
905 input_json: String::new(),
906 };
907
908 state
909 .tool_uses_by_index
910 .insert(cb_start.content_block_index, tool_use);
911 }
912 }
913 ConverseStreamOutput::ContentBlockStop(cb_stop) => {
914 if let Some(tool_use) = state
915 .tool_uses_by_index
916 .remove(&cb_stop.content_block_index)
917 {
918 let tool_use_event = LanguageModelToolUse {
919 id: tool_use.id.into(),
920 name: tool_use.name.into(),
921 is_input_complete: true,
922 raw_input: tool_use.input_json.clone(),
923 input: if tool_use.input_json.is_empty() {
924 Value::Null
925 } else {
926 serde_json::Value::from_str(
927 &tool_use.input_json,
928 )
929 .map_err(|err| anyhow!(err))
930 .unwrap()
931 },
932 };
933
934 return Some((
935 Some(Ok(LanguageModelCompletionEvent::ToolUse(
936 tool_use_event,
937 ))),
938 state,
939 ));
940 }
941 }
942
943 ConverseStreamOutput::Metadata(cb_meta) => {
944 if let Some(metadata) = cb_meta.usage {
945 let completion_event =
946 LanguageModelCompletionEvent::UsageUpdate(
947 TokenUsage {
948 input_tokens: metadata.input_tokens as u32,
949 output_tokens: metadata.output_tokens
950 as u32,
951 cache_creation_input_tokens: default(),
952 cache_read_input_tokens: default(),
953 },
954 );
955 return Some((Some(Ok(completion_event)), state));
956 }
957 }
958 ConverseStreamOutput::MessageStop(message_stop) => {
959 let reason = match message_stop.stop_reason {
960 StopReason::ContentFiltered => {
961 LanguageModelCompletionEvent::Stop(
962 language_model::StopReason::EndTurn,
963 )
964 }
965 StopReason::EndTurn => {
966 LanguageModelCompletionEvent::Stop(
967 language_model::StopReason::EndTurn,
968 )
969 }
970 StopReason::GuardrailIntervened => {
971 LanguageModelCompletionEvent::Stop(
972 language_model::StopReason::EndTurn,
973 )
974 }
975 StopReason::MaxTokens => {
976 LanguageModelCompletionEvent::Stop(
977 language_model::StopReason::EndTurn,
978 )
979 }
980 StopReason::StopSequence => {
981 LanguageModelCompletionEvent::Stop(
982 language_model::StopReason::EndTurn,
983 )
984 }
985 StopReason::ToolUse => {
986 LanguageModelCompletionEvent::Stop(
987 language_model::StopReason::ToolUse,
988 )
989 }
990 _ => LanguageModelCompletionEvent::Stop(
991 language_model::StopReason::EndTurn,
992 ),
993 };
994 return Some((Some(Ok(reason)), state));
995 }
996 _ => {}
997 },
998
999 Err(err) => return Some((Some(Err(anyhow!(err).into())), state)),
1000 }
1001 }
1002 None
1003 })
1004 .await
1005 .log_err()
1006 .flatten()
1007 }
1008 },
1009 )
1010 .filter_map(|event| async move { event })
1011}
1012
1013struct ConfigurationView {
1014 access_key_id_editor: Entity<Editor>,
1015 secret_access_key_editor: Entity<Editor>,
1016 session_token_editor: Entity<Editor>,
1017 region_editor: Entity<Editor>,
1018 state: gpui::Entity<State>,
1019 load_credentials_task: Option<Task<()>>,
1020}
1021
1022impl ConfigurationView {
1023 const PLACEHOLDER_ACCESS_KEY_ID_TEXT: &'static str = "XXXXXXXXXXXXXXXX";
1024 const PLACEHOLDER_SECRET_ACCESS_KEY_TEXT: &'static str =
1025 "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX";
1026 const PLACEHOLDER_SESSION_TOKEN_TEXT: &'static str = "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX";
1027 const PLACEHOLDER_REGION: &'static str = "us-east-1";
1028
1029 fn new(state: gpui::Entity<State>, window: &mut Window, cx: &mut Context<Self>) -> Self {
1030 cx.observe(&state, |_, _, cx| {
1031 cx.notify();
1032 })
1033 .detach();
1034
1035 let load_credentials_task = Some(cx.spawn({
1036 let state = state.clone();
1037 async move |this, cx| {
1038 if let Some(task) = state
1039 .update(cx, |state, cx| state.authenticate(cx))
1040 .log_err()
1041 {
1042 // We don't log an error, because "not signed in" is also an error.
1043 let _ = task.await;
1044 }
1045 this.update(cx, |this, cx| {
1046 this.load_credentials_task = None;
1047 cx.notify();
1048 })
1049 .log_err();
1050 }
1051 }));
1052
1053 Self {
1054 access_key_id_editor: cx.new(|cx| {
1055 let mut editor = Editor::single_line(window, cx);
1056 editor.set_placeholder_text(Self::PLACEHOLDER_ACCESS_KEY_ID_TEXT, cx);
1057 editor
1058 }),
1059 secret_access_key_editor: cx.new(|cx| {
1060 let mut editor = Editor::single_line(window, cx);
1061 editor.set_placeholder_text(Self::PLACEHOLDER_SECRET_ACCESS_KEY_TEXT, cx);
1062 editor
1063 }),
1064 session_token_editor: cx.new(|cx| {
1065 let mut editor = Editor::single_line(window, cx);
1066 editor.set_placeholder_text(Self::PLACEHOLDER_SESSION_TOKEN_TEXT, cx);
1067 editor
1068 }),
1069 region_editor: cx.new(|cx| {
1070 let mut editor = Editor::single_line(window, cx);
1071 editor.set_placeholder_text(Self::PLACEHOLDER_REGION, cx);
1072 editor
1073 }),
1074 state,
1075 load_credentials_task,
1076 }
1077 }
1078
1079 fn save_credentials(
1080 &mut self,
1081 _: &menu::Confirm,
1082 _window: &mut Window,
1083 cx: &mut Context<Self>,
1084 ) {
1085 let access_key_id = self
1086 .access_key_id_editor
1087 .read(cx)
1088 .text(cx)
1089 .to_string()
1090 .trim()
1091 .to_string();
1092 let secret_access_key = self
1093 .secret_access_key_editor
1094 .read(cx)
1095 .text(cx)
1096 .to_string()
1097 .trim()
1098 .to_string();
1099 let session_token = self
1100 .session_token_editor
1101 .read(cx)
1102 .text(cx)
1103 .to_string()
1104 .trim()
1105 .to_string();
1106 let session_token = if session_token.is_empty() {
1107 None
1108 } else {
1109 Some(session_token)
1110 };
1111 let region = self
1112 .region_editor
1113 .read(cx)
1114 .text(cx)
1115 .to_string()
1116 .trim()
1117 .to_string();
1118 let region = if region.is_empty() {
1119 "us-east-1".to_string()
1120 } else {
1121 region
1122 };
1123
1124 let state = self.state.clone();
1125 cx.spawn(async move |_, cx| {
1126 state
1127 .update(cx, |state, cx| {
1128 let credentials: BedrockCredentials = BedrockCredentials {
1129 region: region.clone(),
1130 access_key_id: access_key_id.clone(),
1131 secret_access_key: secret_access_key.clone(),
1132 session_token: session_token.clone(),
1133 };
1134
1135 state.set_credentials(credentials, cx)
1136 })?
1137 .await
1138 })
1139 .detach_and_log_err(cx);
1140 }
1141
1142 fn reset_credentials(&mut self, window: &mut Window, cx: &mut Context<Self>) {
1143 self.access_key_id_editor
1144 .update(cx, |editor, cx| editor.set_text("", window, cx));
1145 self.secret_access_key_editor
1146 .update(cx, |editor, cx| editor.set_text("", window, cx));
1147 self.session_token_editor
1148 .update(cx, |editor, cx| editor.set_text("", window, cx));
1149 self.region_editor
1150 .update(cx, |editor, cx| editor.set_text("", window, cx));
1151
1152 let state = self.state.clone();
1153 cx.spawn(async move |_, cx| {
1154 state
1155 .update(cx, |state, cx| state.reset_credentials(cx))?
1156 .await
1157 })
1158 .detach_and_log_err(cx);
1159 }
1160
1161 fn make_text_style(&self, cx: &Context<Self>) -> TextStyle {
1162 let settings = ThemeSettings::get_global(cx);
1163 TextStyle {
1164 color: cx.theme().colors().text,
1165 font_family: settings.ui_font.family.clone(),
1166 font_features: settings.ui_font.features.clone(),
1167 font_fallbacks: settings.ui_font.fallbacks.clone(),
1168 font_size: rems(0.875).into(),
1169 font_weight: settings.ui_font.weight,
1170 font_style: FontStyle::Normal,
1171 line_height: relative(1.3),
1172 background_color: None,
1173 underline: None,
1174 strikethrough: None,
1175 white_space: WhiteSpace::Normal,
1176 text_overflow: None,
1177 text_align: Default::default(),
1178 line_clamp: None,
1179 }
1180 }
1181
1182 fn make_input_styles(&self, cx: &Context<Self>) -> Div {
1183 let bg_color = cx.theme().colors().editor_background;
1184 let border_color = cx.theme().colors().border;
1185
1186 h_flex()
1187 .w_full()
1188 .px_2()
1189 .py_1()
1190 .bg(bg_color)
1191 .border_1()
1192 .border_color(border_color)
1193 .rounded_sm()
1194 }
1195
1196 fn should_render_editor(&self, cx: &mut Context<Self>) -> Option<String> {
1197 self.state.read(cx).is_authenticated()
1198 }
1199}
1200
1201impl Render for ConfigurationView {
1202 fn render(&mut self, _window: &mut Window, cx: &mut Context<Self>) -> impl IntoElement {
1203 let env_var_set = self.state.read(cx).credentials_from_env;
1204 let creds_type = self.should_render_editor(cx).is_some();
1205
1206 if self.load_credentials_task.is_some() {
1207 return div().child(Label::new("Loading credentials...")).into_any();
1208 }
1209
1210 if let Some(auth) = self.should_render_editor(cx) {
1211 return h_flex()
1212 .mt_1()
1213 .p_1()
1214 .justify_between()
1215 .rounded_md()
1216 .border_1()
1217 .border_color(cx.theme().colors().border)
1218 .bg(cx.theme().colors().background)
1219 .child(
1220 h_flex()
1221 .gap_1()
1222 .child(Icon::new(IconName::Check).color(Color::Success))
1223 .child(Label::new(if env_var_set {
1224 format!("Access Key ID is set in {ZED_BEDROCK_ACCESS_KEY_ID_VAR}, Secret Key is set in {ZED_BEDROCK_SECRET_ACCESS_KEY_VAR}, Region is set in {ZED_BEDROCK_REGION_VAR} environment variables.")
1225 } else {
1226 auth.clone()
1227 })),
1228 )
1229 .child(
1230 Button::new("reset-key", "Reset Key")
1231 .icon(Some(IconName::Trash))
1232 .icon_size(IconSize::Small)
1233 .icon_position(IconPosition::Start)
1234 // .disabled(env_var_set || creds_type)
1235 .when(env_var_set, |this| {
1236 this.tooltip(Tooltip::text(format!("To reset your credentials, unset the {ZED_BEDROCK_ACCESS_KEY_ID_VAR}, {ZED_BEDROCK_SECRET_ACCESS_KEY_VAR}, and {ZED_BEDROCK_REGION_VAR} environment variables.")))
1237 })
1238 .when(creds_type, |this| {
1239 this.tooltip(Tooltip::text("You cannot reset credentials as they're being derived, check Zed settings to understand how."))
1240 })
1241 .on_click(cx.listener(|this, _, window, cx| this.reset_credentials(window, cx))),
1242 )
1243 .into_any();
1244 }
1245
1246 v_flex()
1247 .size_full()
1248 .on_action(cx.listener(ConfigurationView::save_credentials))
1249 .child(Label::new("To use Zed's assistant with Bedrock, you can set a custom authentication strategy through the settings.json, or use static credentials."))
1250 .child(Label::new("But, to access models on AWS, you need to:").mt_1())
1251 .child(
1252 List::new()
1253 .child(
1254 InstructionListItem::new(
1255 "Grant permissions to the strategy you'll use according to the:",
1256 Some("Prerequisites"),
1257 Some("https://docs.aws.amazon.com/bedrock/latest/userguide/inference-prereq.html"),
1258 )
1259 )
1260 .child(
1261 InstructionListItem::new(
1262 "Select the models you would like access to:",
1263 Some("Bedrock Model Catalog"),
1264 Some("https://us-east-1.console.aws.amazon.com/bedrock/home?region=us-east-1#/modelaccess"),
1265 )
1266 )
1267 )
1268 .child(self.render_static_credentials_ui(cx))
1269 .child(self.render_common_fields(cx))
1270 .child(
1271 Label::new(
1272 format!("You can also assign the {ZED_BEDROCK_ACCESS_KEY_ID_VAR}, {ZED_BEDROCK_SECRET_ACCESS_KEY_VAR} AND {ZED_BEDROCK_REGION_VAR} environment variables and restart Zed."),
1273 )
1274 .size(LabelSize::Small)
1275 .color(Color::Muted)
1276 .my_1(),
1277 )
1278 .child(
1279 Label::new(
1280 format!("Optionally, if your environment uses AWS CLI profiles, you can set {ZED_AWS_PROFILE_VAR}; if it requires a custom endpoint, you can set {ZED_AWS_ENDPOINT_VAR}; and if it requires a Session Token, you can set {ZED_BEDROCK_SESSION_TOKEN_VAR}."),
1281 )
1282 .size(LabelSize::Small)
1283 .color(Color::Muted),
1284 )
1285 .into_any()
1286 }
1287}
1288
1289impl ConfigurationView {
1290 fn render_access_key_id_editor(&self, cx: &mut Context<Self>) -> impl IntoElement {
1291 let text_style = self.make_text_style(cx);
1292
1293 EditorElement::new(
1294 &self.access_key_id_editor,
1295 EditorStyle {
1296 background: cx.theme().colors().editor_background,
1297 local_player: cx.theme().players().local(),
1298 text: text_style,
1299 ..Default::default()
1300 },
1301 )
1302 }
1303
1304 fn render_secret_key_editor(&self, cx: &mut Context<Self>) -> impl IntoElement {
1305 let text_style = self.make_text_style(cx);
1306
1307 EditorElement::new(
1308 &self.secret_access_key_editor,
1309 EditorStyle {
1310 background: cx.theme().colors().editor_background,
1311 local_player: cx.theme().players().local(),
1312 text: text_style,
1313 ..Default::default()
1314 },
1315 )
1316 }
1317
1318 fn render_session_token_editor(&self, cx: &mut Context<Self>) -> impl IntoElement {
1319 let text_style = self.make_text_style(cx);
1320
1321 EditorElement::new(
1322 &self.session_token_editor,
1323 EditorStyle {
1324 background: cx.theme().colors().editor_background,
1325 local_player: cx.theme().players().local(),
1326 text: text_style,
1327 ..Default::default()
1328 },
1329 )
1330 }
1331
1332 fn render_region_editor(&self, cx: &mut Context<Self>) -> impl IntoElement {
1333 let text_style = self.make_text_style(cx);
1334
1335 EditorElement::new(
1336 &self.region_editor,
1337 EditorStyle {
1338 background: cx.theme().colors().editor_background,
1339 local_player: cx.theme().players().local(),
1340 text: text_style,
1341 ..Default::default()
1342 },
1343 )
1344 }
1345
1346 fn render_static_credentials_ui(&self, cx: &mut Context<Self>) -> AnyElement {
1347 v_flex()
1348 .my_2()
1349 .gap_1p5()
1350 .child(
1351 Label::new("Static Keys")
1352 .size(LabelSize::Default)
1353 .weight(FontWeight::BOLD),
1354 )
1355 .child(
1356 Label::new(
1357 "This method uses your AWS access key ID and secret access key directly.",
1358 )
1359 )
1360 .child(
1361 List::new()
1362 .child(InstructionListItem::new(
1363 "Create an IAM user in the AWS console with programmatic access",
1364 Some("IAM Console"),
1365 Some("https://us-east-1.console.aws.amazon.com/iam/home?region=us-east-1#/users"),
1366 ))
1367 .child(InstructionListItem::new(
1368 "Attach the necessary Bedrock permissions to this ",
1369 Some("user"),
1370 Some("https://docs.aws.amazon.com/bedrock/latest/userguide/inference-prereq.html"),
1371 ))
1372 .child(InstructionListItem::text_only(
1373 "Copy the access key ID and secret access key when provided",
1374 ))
1375 .child(InstructionListItem::text_only(
1376 "Enter these credentials below",
1377 )),
1378 )
1379 .child(
1380 v_flex()
1381 .gap_0p5()
1382 .child(Label::new("Access Key ID").size(LabelSize::Small))
1383 .child(
1384 self.make_input_styles(cx)
1385 .child(self.render_access_key_id_editor(cx)),
1386 ),
1387 )
1388 .child(
1389 v_flex()
1390 .gap_0p5()
1391 .child(Label::new("Secret Access Key").size(LabelSize::Small))
1392 .child(self.make_input_styles(cx).child(self.render_secret_key_editor(cx))),
1393 )
1394 .child(
1395 v_flex()
1396 .gap_0p5()
1397 .child(Label::new("Session Token (Optional)").size(LabelSize::Small))
1398 .child(
1399 self.make_input_styles(cx)
1400 .child(self.render_session_token_editor(cx)),
1401 ),
1402 )
1403 .into_any_element()
1404 }
1405
1406 fn render_common_fields(&self, cx: &mut Context<Self>) -> AnyElement {
1407 v_flex()
1408 .gap_0p5()
1409 .child(Label::new("Region").size(LabelSize::Small))
1410 .child(
1411 self.make_input_styles(cx)
1412 .child(self.render_region_editor(cx)),
1413 )
1414 .into_any_element()
1415 }
1416}