Summary

• Add AWS Bedrock as a supported provider in the ai-gateway-provider package
• Register URL pattern for bedrock-runtime.{region}.amazonaws.com with endpoint transform producing bedrock-runtime/{region}/{path} (matching Cloudflare AI Gateway's expected format)
• Fix amazon-bedrock.ts provider wrapper to handle Bedrock's AWS SigV4 auth model (accessKeyId/secretAccessKey) instead of the generic authWrapper which only supports apiKey
• Strip AWS SigV4 companion headers (x-amz-date, x-amz-security-token, x-amz-content-sha256) only in BYOK mode (when CF_TEMP_TOKEN is detected) — user-provided credentials are preserved
• Add ProviderConfig type for type safety across the provider registry
• Add endpoint transform tests including URL-encoded model IDs (v1%3A0)

Context

The Bedrock provider wrapper existed (providers/amazon-bedrock.ts) but requests failed with "provider not supported" because:

1. No URL regex in providers.ts matched Bedrock's bedrock-runtime.{region}.amazonaws.com URLs
2. The generic authWrapper tried to set apiKey, but Bedrock uses accessKeyId/secretAccessKey for AWS SigV4 signing
3. AWS SigV4 headers needed to be stripped before forwarding to the gateway (Cloudflare re-signs with stored credentials)

Usage

import { createAiGateway } from "ai-gateway-provider";
import { createAmazonBedrock } from "ai-gateway-provider/providers/amazon-bedrock";
import { generateText } from "ai";

// BYOK mode — Cloudflare holds the AWS credentials
const gateway = createAiGateway({
  accountId: "your-cf-account-id",
  gateway: "your-gateway",
  apiKey: "your-cf-token",
});
const bedrock = createAmazonBedrock({ region: "us-east-1" });

const { text } = await generateText({
  model: gateway(bedrock("us.anthropic.claude-sonnet-4-5-20250929-v1:0")),
  prompt: "Hello!",
});

Test plan

• Endpoint transform tests pass (15/15), including 2 new Bedrock cases (unencoded + URL-encoded model IDs)
• All existing provider tests still pass (no regressions)
• Manually verified end-to-end: request successfully routed through Cloudflare AI Gateway to Bedrock and received a valid response
• Verify with client-provided AWS credentials (non-BYOK mode)

🤖 Generated with Claude Code