Method newMessagesService

aibridge/intercept/messages/base.go:211–267

newMessagesService builds the SDK service used for upstream calls. BYOK auth is set here. Centralized auth is set per-attempt by the failover loop.

(ctx context.Context, opts ...option.RequestOption)

// calls. BYOK auth is set here. Centralized auth is set
// per-attempt by the failover loop.
func (i *interceptionBase) newMessagesService(ctx context.Context, opts ...option.RequestOption) (anthropic.MessageService, error) {
	// TODO(ssncferreira): validate auth is configured per
	// https://github.com/coder/aibridge/issues/266.

	// BYOK auth.
	if i.cfg.KeyPool == nil {
		if i.cfg.BYOKBearerToken != "" {
			// BYOK Bearer: Authorization header.
			i.logger.Debug(ctx, "using byok access token auth",
				slog.F("bearer_hint", utils.MaskSecret(i.cfg.BYOKBearerToken)),
			)
			opts = append(opts, option.WithAuthToken(i.cfg.BYOKBearerToken))
		} else {
			// BYOK X-Api-Key.
			i.logger.Debug(ctx, "using api key auth",
				slog.F("api_key_hint", utils.MaskSecret(i.cfg.Key)),
			)
			opts = append(opts, option.WithAPIKey(i.cfg.Key))
		}
	}
	opts = append(opts, option.WithBaseURL(i.cfg.BaseURL))

	// Add extra headers if configured.
	// Some providers require additional headers that are not added by the SDK.
	// TODO(ssncferreira): remove as part of https://github.com/coder/aibridge/issues/192
	for key, value := range i.cfg.ExtraHeaders {
		opts = append(opts, option.WithHeader(key, value))
	}

	// Forward client headers to upstream. This middleware runs after the SDK
	// has built the request, and replaces the outgoing headers with the sanitized
	// client headers plus provider auth.
	if i.clientHeaders != nil {
		opts = append(opts, option.WithMiddleware(func(req *http.Request, next option.MiddlewareNext) (*http.Response, error) {
			req.Header = intercept.BuildUpstreamHeaders(req.Header, i.clientHeaders, i.authHeaderName)
			return next(req)
		}))
	}

	// Add API dump middleware if configured
	if mw := apidump.NewBridgeMiddleware(i.cfg.APIDumpDir, i.providerName, i.Model(), i.id, i.logger, quartz.NewReal()); mw != nil {
		opts = append(opts, option.WithMiddleware(mw))
	}

	if i.bedrockCfg != nil {
		ctx, cancel := context.WithTimeout(ctx, time.Second*30)
		defer cancel()
		bedrockOpts, err := i.withAWSBedrockOptions(ctx, i.bedrockCfg)
		if err != nil {
			return anthropic.MessageService{}, err
		}
		opts = append(opts, bedrockOpts...)
		i.augmentRequestForBedrock()
	}

	return anthropic.NewMessageService(opts...), nil
}