uPjN^UdZddlZddlZddlmZmZmZddlmZddl Z ddl m Z ddl mZddlmZmZmZddlmZdd lmZdd lmZd Zeed <d Zeed<dZeed<dZeed<dZeed<ej>dZ eed<ej>dZ!eed<dZ"eed<de#dejHe#dzfdZ%e&hdZ'eed<de#de(fd Z)d!ee#e*fd"e#de#dzfd#Z+d!ee#e*fdefd$Z,d%e*de-ee#e*fd&ffd'Z.d(e*de-ee#e*fd&ffd)Z/d*e#deee#e*ffd+Z0Gd,d-eeZ1y).a Calls an Amazon Bedrock AgentCore Gateway web-search target (MCP protocol) to search the web. Web Search on Amazon Bedrock AgentCore exposes Amazon's managed web index through an AgentCore Gateway MCP endpoint. AWS docs: https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-target-connector-web-search-tool.html Authentication (matches the gateway's inbound authorizer type): - AWS_IAM gateway: the request is SigV4-signed. Credentials come from explicit params (aws_access_key_id / aws_secret_access_key / aws_session_token / aws_region_name, also settable in a proxy search_tools entry) or the standard AWS credential chain (env / profile / IRSA / assumed role) - CUSTOM_JWT gateway: pass the OAuth2 bearer token (e.g. Cognito client_credentials) as api_key, or set AGENTCORE_GATEWAY_TOKEN Setup: 1. Create an AgentCore Gateway with a web-search connector target 2. Set AGENTCORE_GATEWAY_URL (or pass api_base) to the gateway MCP endpoint, e.g. https://.gateway.bedrock-agentcore..amazonaws.com/mcp 3. AWS_IAM: ensure the credentials allow bedrock-agentcore:InvokeGateway CUSTOM_JWT: set AGENTCORE_GATEWAY_TOKEN (or pass api_key) Usage: response = litellm.search( query="latest AI developments", search_provider="agentcore", max_results=5, aws_access_key_id="...", # optional, omit to use the default chain aws_secret_access_key="...", ) N)IteratorMappingSequence)Final)LoggingBaseLLMException)BaseSearchConfigSearchResponse SearchResult) BaseAWSLLM) BedrockError)get_secret_strAGENTCORE_MAX_QUERY_LENGTH AGENTCORE_DEFAULT_MAX_RESULTSzweb-search-tool___WebSearchAGENTCORE_DEFAULT_TOOL_NAME ___WebSearchAGENTCORE_TOOL_NAME_SUFFIXz 2025-03-26&AGENTCORE_DEFAULT_MCP_PROTOCOL_VERSIONzD[a-z0-9-]+\.gateway\.bedrock-agentcore\.([a-z0-9-]+)\.amazonaws\.com_GATEWAY_HOST_PATTERNz\r?\n[ \t]*\r?\n_SSE_EVENT_SEPARATOR)zevent:data::zid:zretry:_SSE_LINE_PREFIXESapi_basereturncftjtj|jSN)r fullmatchhttpxURLhost)rs o/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/litellm/llms/bedrock/search/transformation.py_gateway_host_matchr&Vs" * *599X+>+C+C DD>::1 127.0.0.1 localhost_LOOPBACK_HOSTScrtj|}|jdk(xs|jtvS)Nhttps)r"r#schemer$r+)rurls r%_credential_safe_transportr0]s-8$C :: ?CHH$??r'itemkeysc2tfd|DdS)Nc3lK|]+}tj|xts%s(-ywr  isinstancegetstr).0keyr1values r% z _string_field..ds)T3*dhhsm-CUS"IeTs &444)next)r1r2r;s` @r% _string_fieldr>bs T$T  r'c tt|dxsdt|dxsdt|ddxsdt|dddS) Ntitler/textsnippet publishedDatedate)r@r/rCrE last_updated)r r>)r1s r%_to_search_resultrGisM D'*0b $ & ,"dFI6<" 4& 9  r'parsed.ct|tr|jddn|}t|trt|tt fryt d|DS)Nresultsc3BK|]}t|ts|ywr )r6r)r9r1s r%r<z _result_items..wsE$:dG+DEs)r6rr7rr8bytestuple)rHitemss r% _result_itemsrPssI0:670K6::i,QWE eX &*US%L*I E%E EEr'raw_textct|tsy tj|}t |S#tj$rYywxYw)z Parse one MCP text block into the search result objects it carries. A block holds either a JSON list of results or a {"results": [...]} object; anything unparseable is skipped rather than failing the whole response. rK)r6r8jsonloadsJSONDecodeErrorrP)rQrHs r%_parse_result_itemsrVzsK h $ 8,      s3A A rBc#Ktj|D]V}djd|jD}|s, t j |}t|tsS|Xy#tj $rYowxYww)a, Yield the JSON payload of each SSE event in a Streamable HTTP MCP response. Per the SSE spec an event's data is the concatenation of all its ``data:`` lines (joined with newlines), and a stream may carry several events, e.g. progress notifications before the JSON-RPC response.  c3xK|]2}|jds|tddj4yw)rN) startswithlenlstrip)r9lines r%r<z#_iter_sse_events..s3ud\`\k\kls\tDW0779us:!:N) rsplitjoin splitlinesrSrTrUr6dict)rBchunkpayloadrHs r%_iter_sse_eventsrds&++D1 ))ueFVFVFXuu  ZZ(F fd #L  ##   s0AB A2B +B 2BB BB c.eZdZddZedefdZ ddededzdedzdedef d Z d dedzd ed ee ezdzdedef d Z d ee ezd ededefdZ d deeefd eeefdeeefe eeefzdededzde eeefedzff dZededefdZededefdZdej(dededefdZdeeefdefdZedeeefde eeefdffdZedej(deeeffdZdedededefdZy)!AgentCoreSearchConfigrNcXtj|tj|yr )r __init__r )selfs r%rhzAgentCoreSearchConfig.__init__s!!$'D!r'cy)NzWeb Search on Amazon BedrockrKrKr'r%ui_friendly_namez&AgentCoreSearchConfig.ui_friendly_names-r'headersapi_keyrkwargsc 8i|ddtdxstdS)aq Set MCP transport headers. Per the MCP Streamable HTTP transport spec, the client MUST accept both application/json and text/event-stream, and declare its protocol revision with MCP-Protocol-Version. Authentication itself happens in sign_request(): bearer token for CUSTOM_JWT gateways, AWS SigV4 for AWS_IAM gateways. zapplication/jsonz#application/json, text/event-streamAGENTCORE_MCP_PROTOCOL_VERSION)z Content-TypeAcceptzMCP-Protocol-Version)rr)rirlrmrrns r%validate_environmentz*AgentCoreSearchConfig.validate_environments0  .;$23S$T%65   r'optional_paramsdatac >|xs td}|s td|S)NAGENTCORE_GATEWAY_URLzAGENTCORE_GATEWAY_URL is not set. Set it to your AgentCore Gateway MCP endpoint (https://.gateway.bedrock-agentcore..amazonaws.com/mcp) or pass api_base.)r ValueError)rirrsrtrn gateway_urls r%get_complete_urlz&AgentCoreSearchConfig.get_complete_urls1&P8O)P 8  r'queryc :t|trdj|n|}|jdxst dxst }|j tstd|dtdddd ||d t|jd td d dS)a Transform Search request to an MCP tools/call request. Args: query: Search query (string or list of strings). AgentCore only supports single string queries; lists are joined with spaces. optional_params: Optional parameters for the request - max_results: Maximum number of results (1-25), default 10 - tool_name: Override the MCP tool name of the gateway target Returns: Dict with the JSON-RPC 2.0 request body  tool_nameAGENTCORE_SEARCH_TOOL_NAMEz$Invalid AgentCore search tool_name 'z': must end with 'z]' (a web-search connector tool). Other gateway tools cannot be invoked through this provider.z2.0z tools/callN max_results)rz maxResults)name arguments)jsonrpcidmethodparams) r6listr_r7rrendswithrrwrr)rirzrsrn joined_queryr}s r%transform_search_requestz.AgentCoreSearchConfig.transform_search_requests&2> %8$A"99"$50);X :  %%7<.!9%N"4::l#;#B#B#DD D  %d.I.I(.SGzRPP ""#45A !!4#7#7#A !!,*% "  r'ctd}|sytj|jtj|jk(S)NrvF)rr"r#r$)r configureds r%rz,AgentCoreSearchConfig._is_configured_gatewayDs<*+BC yy$))UYYx-@-E-EEEr'ct|}|r|jdSddl}|jj}|r|St d|d)a Resolve the SigV4 signing region, which must match the gateway's region. Standard gateway hostnames carry it, so callers don't have to set aws_region_name to a region different from their default. For custom or private hostnames, defer to the AWS configuration chain (env vars and the shared config / profile region), and error out when that yields nothing rather than silently signing for a guessed region the gateway would reject with a confusing auth error. rrNz6Cannot derive the SigV4 signing region from api_base 'z' or the AWS configuration chain. Set aws_region_name (or AWS_DEFAULT_REGION / a profile region) to the gateway's region when using a custom hostname.)r&groupboto3Session region_namerw)rmatchrconfigured_regions r%rz%AgentCoreSearchConfig._signing_regionKs`+84 ;;q> ! #(==?#>#> $ $DXJOV V  r' raw_response logging_objc r|j|}|jd}|+t|jdk\r |jndd||jd}t |t rK|jdr:t|jdk\r |jndd |j |td |j|D}t |tr|jd nd}|xs t|} | D cgc] } t| } } t| d Scc} w)a Transform an MCP tools/call response to LiteLLM unified SearchResponse. The gateway returns JSON-RPC (as plain JSON or a single-message SSE stream) whose result.content[] text blocks contain a JSON list of {title, url, date/publishedDate, text} entries. Web-search connector 1.1.0 and later repeat that list in result.structuredContent, which is the only machine-readable copy when the text block holds prose instead. errorNizAgentCore gateway MCP error:  status_codemessageresultisErrorz!AgentCore web search tool error: c3^K|]%}t|jdD]}|'ywrBN)rVr7)r9blockr1s r%r<zBAgentCoreSearchConfig.transform_search_response..s:" K^_d_h_hio_pKq" CGD" " s+-structuredContentsearch)rJobject) _parse_mcp_bodyr7rrr6ra_tool_error_messagerN _text_blocksrrPrGr ) rirrrn response_jsonrr text_items structuredrOr1rJs r%transform_search_responsez/AgentCoreSearchConfig.transform_search_responseis? $33LA $((1  8D8P8PTW8WL44]`7w? &))(3 fd # 9(=8D8P8PTW8WL44]`;D"  @J&RY?ZFJJ':;`d !>]:%>>CDd+D1DDgh??EsD4rctfd|j|D}|rdj|Stj|j dddS)Nc3fK|](}t|jdxts%*ywrr5)r9rrBs r%r<z.s2 *UZU^U^_eUfMfThkBlD s&11r|ri)rNrr_rSrr7)rirtextsrBs @r%rz)AgentCoreSearchConfig._tool_error_messagesY "// >  #(sxxZTZZ 8I8I(8S-TUYVY-ZZr'.c|jd}t|tr|jdnd}t|trt|tt fryt d|DS)NrcontentrKc3lK|],}t|ts|jddk(s)|.yw)typerBN)r6rar7)r9rs r%r<z5AgentCoreSearchConfig._text_blocks..s+ku:eT3JuyyY_O`djOjUks 444)r7r6rarr8rMrN)rrrs r%rz"AgentCoreSearchConfig._text_blockssW%))(32.s Pu(e*;w%?OU Ps Nrz:AgentCore gateway returned SSE without a JSON data frame: rr) rBr\rZrrSrNrdr=r)rrBeventsresponse_events r%rz%AgentCoreSearchConfig._parse_mcp_bodys#''{{}''(:;$$& &.t45 $ P P !   %! ! ": PQUVZWZQ[P\]  r' error_messagerct|||S)N)rrrlr)rirrrls r%get_error_classz%AgentCoreSearchConfig.get_error_classs  #!  r')rN)NNr )__name__ __module__ __qualname__rh staticmethodr8rkrarrrrryrrNrMrboolrrr"ResponseLiteLLMLoggingObjr rrrrrint ExceptionrrKr'r%rfrfs".c.. ##   t *      6*. *T$Z$&     + T#Y+ +  +  + f# G c3hG c6k*G 3;'$tCK/@*AA G  G t G  tCH~ut|+ ,G RFFFF  # #  :)@nn)@')@ )@  )@V[f1E[#[ lGCK$8lU73PV;CWY\C\=]ll enn f9M  4          r'rf)2__doc__rSrecollections.abcrrrtypingrr"*litellm.litellm_core_utils.litellm_loggingrr)litellm.llms.base_llm.chat.transformationr +litellm.llms.base_llm.search.transformationr r r !litellm.llms.bedrock.base_aws_llmr !litellm.llms.bedrock.common_utilsrlitellm.secret_managers.mainrr__annotations__rrrrcompilerrrr8Matchr& frozensetr+rr0rr>rGrNrPrVrdrfrKr'r%rsB 77 SF 9:7%(E'(*u) &CUB %3E21=&< *rzz*qrur(bjj)<=e=EEEE#E"((3-$*>E##DEE@@@ V ,SS4ZGCK0\F&FU73;+?+D%EF !& !U73;3G3L-M ! 38GCK,@#A(i ,ji r'