Support Amazon Bedrock model IDs and authentication (#125)

Accept anthropic.* model IDs without warning in CLI and config validation.
AWS env vars (ACCESS_KEY, SECRET_KEY, SESSION_TOKEN, REGION) passed through
to agent processes via process.env spread. Updated .env.example and README.

Generated by thinktank Opus (5 agents, 3 pass, Copeland: +2).

Closes #122

Co-authored-by: unknown <that-github-user@github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: 3 people

.env.example

@@ -1,3 +1,12 @@
 # Required: Anthropic API key (used by Claude Code CLI)
 # Get one at https://console.anthropic.com/
 ANTHROPIC_API_KEY=sk-ant-...
+
+# Optional: Amazon Bedrock credentials (use instead of ANTHROPIC_API_KEY)
+# Set these to route Claude requests through AWS Bedrock.
+# Use --model with a Bedrock model ID, e.g. anthropic.claude-opus-4-6-v1
+# AWS_ACCESS_KEY_ID=AKIA...
+# AWS_SECRET_ACCESS_KEY=...
+# AWS_SESSION_TOKEN=...
+# AWS_REGION=us-east-1
+# AWS_DEFAULT_REGION=us-east-1

README.md

@@ -46,6 +46,8 @@ Requires [Claude Code CLI](https://docs.anthropic.com/en/docs/claude-code) insta
 
 Use `--model` to select a Claude model: `sonnet` (default), `opus`, `haiku`, or a full model ID like `claude-opus-4-6`.
 
+**Amazon Bedrock**: Pass a Bedrock model ID such as `anthropic.claude-opus-4-6-v1` and set the standard AWS environment variables (`AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, `AWS_REGION`, etc.). See `.env.example` for details.
+
 ## How it works
 
 ```

src/cli.test.ts

@@ -0,0 +1,44 @@
+import assert from "node:assert/strict";
+import { describe, it } from "node:test";
+
+/**
+ * Tests for CLI model ID validation logic.
+ * The CLI accepts: known aliases, claude-* prefixed, and anthropic.* prefixed model IDs.
+ */
+describe("CLI model validation", () => {
+  function isKnownModel(model: string): boolean {
+    const knownModels = ["sonnet", "opus", "haiku"];
+    return (
+      knownModels.includes(model) || model.startsWith("claude-") || model.startsWith("anthropic.")
+    );
+  }
+
+  it("accepts known alias 'sonnet'", () => {
+    assert.equal(isKnownModel("sonnet"), true);
+  });
+
+  it("accepts known alias 'opus'", () => {
+    assert.equal(isKnownModel("opus"), true);
+  });
+
+  it("accepts known alias 'haiku'", () => {
+    assert.equal(isKnownModel("haiku"), true);
+  });
+
+  it("accepts claude- prefixed model IDs", () => {
+    assert.equal(isKnownModel("claude-opus-4-6"), true);
+    assert.equal(isKnownModel("claude-sonnet-4-6"), true);
+  });
+
+  it("accepts anthropic. prefixed Bedrock model IDs", () => {
+    assert.equal(isKnownModel("anthropic.claude-opus-4-6-v1"), true);
+    assert.equal(isKnownModel("anthropic.claude-sonnet-4-6-v1"), true);
+    assert.equal(isKnownModel("anthropic.claude-v2"), true);
+  });
+
+  it("rejects unknown model IDs", () => {
+    assert.equal(isKnownModel("gpt-4"), false);
+    assert.equal(isKnownModel("gemini-pro"), false);
+    assert.equal(isKnownModel("unknown"), false);
+  });
+});

src/cli.ts

@@ -115,7 +115,11 @@ program
     }
 
     const knownModels = ["sonnet", "opus", "haiku"];
-    if (!knownModels.includes(opts.model) && !opts.model.startsWith("claude-")) {
+    if (
+      !knownModels.includes(opts.model) &&
+      !opts.model.startsWith("claude-") &&
+      !opts.model.startsWith("anthropic.")
+    ) {
       console.warn(
         `Warning: unknown model "${opts.model}" — known models: ${knownModels.join(", ")}`,
       );

src/runners/claude-code.test.ts

@@ -0,0 +1,33 @@
+import assert from "node:assert/strict";
+import { describe, it } from "node:test";
+
+describe("claude-code runner", () => {
+  describe("AWS environment variable passthrough", () => {
+    const awsVars = [
+      "AWS_ACCESS_KEY_ID",
+      "AWS_SECRET_ACCESS_KEY",
+      "AWS_SESSION_TOKEN",
+      "AWS_REGION",
+      "AWS_DEFAULT_REGION",
+    ];
+
+    for (const varName of awsVars) {
+      it(`passes ${varName} through to spawned process via process.env`, () => {
+        // The runner uses { ...process.env } as the spawn env.
+        // Verify that setting a process.env var makes it available in the spread.
+        const original = process.env[varName];
+        try {
+          process.env[varName] = "test-value";
+          const env = { ...process.env };
+          assert.equal(env[varName], "test-value");
+        } finally {
+          if (original === undefined) {
+            delete process.env[varName];
+          } else {
+            process.env[varName] = original;
+          }
+        }
+      });
+    }
+  });
+});