o `iZ @s2dZddlmZddlmZmZdZdd d ZdS)z Live Bedrock checks for call analysis (Nova via Converse). list_foundation_models succeeding does not mean InvokeModel/Converse works. Use probe_nova_converse before trusting the integration. ) annotations)AnyDictuIn AWS Console: Amazon Bedrock → Model access — enable Amazon Nova 2 Lite (or your chosen model). Then IAM: allow bedrock:InvokeModel and bedrock:Converse on the inference profile ARN in this region (e.g. arn:aws:bedrock:REGION:ACCOUNT:inference-profile/us.amazon.nova-2-lite-v1:0). Nova 2 Lite requires an inference profile id (us./eu./apac. prefix), not amazon.nova-2-lite-v1:0 alone.regionstr access_key_idsecret_access_keymodel_idreturnDict[str, Any]c Cs~d||dddd}|r |sd|d<d|d<|Sz,ddl}dd lm}|jd |||d }|j|d d digdgddddd|d<|WS|y}zR|jdi} | dd} | dt|} | |d<| |d<| pkd} | dkr{d| vr{t |d<n| dkrd|d|d<n | dkrd |d<nd|d<|WYd}~Sd}~wt y}zt||d<d!|d<|WYd}~Sd}~ww)"z3Return ok=True if a minimal Converse call succeeds.FN)okr r error_codemessagehintzAWS credentials not setrzISet AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY in dashboard-backend/.envrr) ClientErrorzbedrock-runtime) region_nameaws_access_key_idaws_secret_access_keyusertextzReply with the single word: ok)rolecontent) maxTokens temperature)modelIdmessagesinferenceConfigTr ErrorCodeMessager ValidationExceptionz not allowedAccessDeniedExceptionzzIAM denied InvokeModel/Converse. Attach a policy that allows these actions on this model or inference-profile resource in .ThrottlingExceptionzGBedrock throttled the request; retry later or request a quota increase.zQUnexpected error during Bedrock probe; check network and boto3/botocore versions.) boto3botocore.exceptionsrclientconverseresponsegetrlowerHINT_OPERATION_NOT_ALLOWED Exception) rrrr outr&rr(excerrcodemsglowr5s