[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"extension-cli-antkawam-claude-code-aws-gateway-zh-CN":3,"guides-for-antkawam-claude-code-aws-gateway":359,"similar-k173vk3b79twq4k95bjvkjzhj586n7k9-zh-CN":360},{"_creationTime":4,"_id":5,"children":6,"community":7,"display":9,"evaluation":15,"identity":257,"isFallback":252,"parentExtension":262,"providers":263,"relations":269,"repo":272,"tags":355,"workflow":356},1778675544105.9492,"k173vk3b79twq4k95bjvkjzhj586n7k9",[],{"reviewCount":8},0,{"description":10,"installMethods":11,"name":13,"sourceUrl":14},"用于 Claude Code 在 Amazon Bedrock 上的自托管 API 网关 — 通过团队预算、OIDC SSO 和管理门户解锁扩展思考、网络搜索和工具使用。",{"cargo":12},"ccag","Claude Code AWS Gateway (CCAG)","https://github.com/antkawam/claude-code-aws-gateway",{"_creationTime":16,"_id":17,"extensionId":5,"locale":18,"result":19,"trustSignals":238,"workflow":255},1778675544105.9495,"kn7cwvd3yff2p2q7xnh30h4pad86m735","zh-CN",{"checks":20,"evaluatedAt":198,"extensionSummary":199,"features":200,"nonGoals":206,"practices":210,"prerequisites":215,"promptVersionExtension":220,"promptVersionScoring":221,"purpose":222,"rationale":223,"score":224,"summary":225,"tags":226,"tier":232,"useCases":233},[21,26,29,32,36,39,43,47,50,53,57,61,64,68,71,74,77,80,83,86,90,94,98,102,106,109,112,115,119,122,125,128,131,134,137,141,145,149,153,157,160,163,166,169,172,175,178,181,184,187,191,194],{"category":22,"check":23,"severity":24,"summary":25},"实用性","问题相关性","pass","描述清楚地阐述了通过 Bedrock 为 Claude Code 启用完整功能的 Claude Code 的问题，并解决了管理和开发者的痛点。",{"category":22,"check":27,"severity":24,"summary":28},"独特点","该扩展独特地通过 Bedrock 为 Claude Code 启用了扩展思考、网络搜索和工具使用，这比直接使用 Bedrock 有了显著的增强。",{"category":22,"check":30,"severity":24,"summary":31},"生产就绪性","该工具提供了自托管 API 网关功能的完整解决方案，包括设置、管理和集成，使其能够投入生产。",{"category":33,"check":34,"severity":24,"summary":35},"范围","单一职责原则","该扩展专注于为 Claude Code 在 Bedrock 上提供自托管 API 网关，以及 OIDC SSO 和预算控制等相关功能，保持了连贯的范围。",{"category":33,"check":37,"severity":24,"summary":38},"描述质量","显示的描述准确地反映了扩展的功能和目的，突出了管理员、开发人员和自动化用户的关键功能。",{"category":40,"check":41,"severity":24,"summary":42},"调用","范围工具","CLI (`ccag`) 提供狭窄的动词-名词命令用于管理任务，避免使用通用执行工具。",{"category":44,"check":45,"severity":24,"summary":46},"文档","配置和参数参考","README 提供了详细的环境变量列表及其描述和默认值，并且配置指南链接到一个完整的参考。",{"category":33,"check":48,"severity":24,"summary":49},"工具命名","主要的 CLI 命令 `ccag` 具有描述性，其子命令以分层结构组织并遵循动词-名词模式。",{"category":33,"check":51,"severity":24,"summary":52},"最小 I/O 接口","CLI 的标志和参数似乎定义良好且最小化，仅请求必要数据而没有多余字段。",{"category":54,"check":55,"severity":24,"summary":56},"许可证","许可证可用性","该项目根据 MIT 许可证发布，这是一个宽松的开源许可证，在 README 和 Cargo.toml 中已明确标明。",{"category":58,"check":59,"severity":24,"summary":60},"维护","提交时效性","最近一次提交在 2026 年 5 月 10 日，远在过去 90 天内。",{"category":58,"check":62,"severity":24,"summary":63},"依赖管理","该项目使用 Cargo 并具有锁定文件（`resolver = \"3\"` 暗示存在锁定文件），表明良好的依赖管理。",{"category":65,"check":66,"severity":24,"summary":67},"安全","秘密管理","秘密通过环境变量、AWS 凭证和文件路径处理，在提供的源代码或 README 中未观察到硬编码秘密。",{"category":65,"check":69,"severity":24,"summary":70},"注入","该项目似乎不加载外部数据作为可执行代码，并且在提供的文件中未发现远程内容获取。",{"category":65,"check":72,"severity":24,"summary":73},"传递性供应链雷管","该项目似乎捆绑了所有必需的代码和依赖项，未观察到运行时脚本下载或远程代码执行。",{"category":65,"check":75,"severity":24,"summary":76},"沙箱隔离","该应用程序似乎在其指定的范围内运行，主要管理自己的数据库和 AWS 资源，没有证据表明会写入任意文件路径。",{"category":65,"check":78,"severity":24,"summary":79},"沙箱逃逸原语","在提供的源代码中未检测到分离的进程生成或拒绝工具调用周围的重试循环。",{"category":65,"check":81,"severity":24,"summary":82},"数据泄露","未发现未经用户明确操作或文档说明而读取或提交机密数据给第三方的情况。",{"category":65,"check":84,"severity":24,"summary":85},"隐藏文本技巧","捆绑内容和描述似乎没有隐藏的操纵技巧，依赖于标准的文本和 Unicode。",{"category":87,"check":88,"severity":24,"summary":89},"钩子","不透明代码执行","源代码是纯 Rust，构建过程不表明存在任何混淆或动态获取的代码执行。",{"category":91,"check":92,"severity":24,"summary":93},"可移植性","结构假设","CLI 的配置依赖于环境变量和标准的 AWS 凭证发现，最大限度地减少了对用户项目结构的假设。",{"category":95,"check":96,"severity":24,"summary":97},"信任","问题关注度","在过去 90 天内，共打开了 22 个问题，关闭了 10 个，关闭率很高，表明维护者参与度高。",{"category":99,"check":100,"severity":24,"summary":101},"版本控制","发布管理","该项目具有清晰的版本控制策略，包含 `Cargo.toml` 版本、GitHub 发布和 crates.io 存在。",{"category":103,"check":104,"severity":24,"summary":105},"代码执行","验证","代码使用了标准的 Rust 模式和 AWS SDK，这些本身就执行验证。虽然未明确提及 Zod 或 Pydantic 等特定的模式验证库，但预计会使用标准的 Rust 类型和 API 验证。",{"category":65,"check":107,"severity":24,"summary":108},"无保护的破坏性操作","基础设施部署 (`infra/`) 中的破坏性操作由 AWS CDK 管理，AWS CDK 通常会在应用前提示确认，并且 CLI 本身不公开直接的破坏性原语，除非意图明确。",{"category":103,"check":110,"severity":24,"summary":111},"错误处理","Rust 代码使用 `anyhow` 和 `thiserror` 进行健壮的错误处理，并且在 API 和 CLI 设计中体现了结构化的错误报告。",{"category":103,"check":113,"severity":24,"summary":114},"日志记录","该项目实现了结构化日志记录，具有可配置的级别和 JSON 输出，支持审计跟踪要求。",{"category":116,"check":117,"severity":24,"summary":118},"合规性","GDPR","该扩展处理 API 密钥和配置，但似乎不直接处理个人数据，除非通过 OIDC 进行明确的用户输入或同意机制。",{"category":116,"check":120,"severity":24,"summary":121},"目标市场","该扩展设计用于与不同区域的 AWS Bedrock 配合使用，并支持全球 OIDC 提供商，使其具有全球适用性。",{"category":91,"check":123,"severity":24,"summary":124},"运行时稳定性","该项目使用 Rust 和 Tokio 构建，目标是跨平台兼容性，并且似乎不像标准的 AWS SDK 行为那样依赖特定于操作系统的假设。",{"category":44,"check":126,"severity":24,"summary":127},"README","README 内容全面、结构良好，并清晰地说明了扩展的目的和功能。",{"category":33,"check":129,"severity":24,"summary":130},"工具接口大小","CLI 暴露了适量的工具和子命令，专注于网关的管理功能。",{"category":40,"check":132,"severity":24,"summary":133},"重叠的近同义工具","CLI 命令似乎是独立的且不冗余的，涵盖了特定的管理和配置任务。",{"category":44,"check":135,"severity":24,"summary":136},"幻影功能","README 中所有宣传的功能，如 API 翻译、多端点路由和用户管理，在代码和文档中都有相应的实现。",{"category":138,"check":139,"severity":24,"summary":140},"安装","安装说明","README 提供了清晰的 Docker Compose 和 AWS CDK 安装说明，以及用于 Claude Code 连接的一键式设置。",{"category":142,"check":143,"severity":24,"summary":144},"错误","可操作的错误消息","Rust 使用 `anyhow` 和 `thiserror` 进行错误处理，可确保错误定义明确，并且应用程序日志提供足够的详细信息以供诊断和修复。",{"category":146,"check":147,"severity":24,"summary":148},"执行","固定的依赖项","`Cargo.toml` 为依赖项指定了版本，并且 `resolver = \"3\"` 暗示使用了锁定文件以实现可重现的构建。",{"category":33,"check":150,"severity":151,"summary":152},"试运行预览","not_applicable","该扩展主要是 API 网关和管理工具。虽然基础设施部署通过 CDK 具有试运行能力，但核心网关操作通常不涉及需要试运行标志的状态更改命令。",{"category":154,"check":155,"severity":24,"summary":156},"协议","幂等重试和超时","应用程序使用 Tokio 进行异步操作和标准的 Rust 错误处理，支持实现超时和重试。数据库操作使用 `sqlx`，它处理连接池和重试。",{"category":116,"check":158,"severity":24,"summary":159},"遥测选择加入","遥测通过环境变量 (`OTEL_EXPORTER_OTLP_ENDPOINT`) 选择加入，并且 Prometheus 和 OTLP 的使用是标准实践。",{"category":40,"check":161,"severity":24,"summary":162},"分层可发现参数","CLI 使用分层结构 (`ccag \u003Csubcommand> \u003Caction>`) 并提供带有子命令示例的 `--help` 输出。",{"category":40,"check":164,"severity":24,"summary":165},"未知标志处理","该应用程序是使用 Rust 构建的，可能使用了 `clap` 等库进行参数解析，该库通常会通过错误和建议来处理未知标志。",{"category":65,"check":167,"severity":24,"summary":168},"秘密不在 argv 中","数据库凭证和 API 密钥等秘密通过环境变量、AWS 配置文件或数据库 URL 配置，而不是直接在命令行参数中。",{"category":40,"check":170,"severity":24,"summary":171},"可解析的 --version","`Cargo.toml` 和 GitHub 发布信息表明了清晰的版本控制方案，并且 `--version` 输出预计是单行且可解析的。",{"category":40,"check":173,"severity":24,"summary":174},"标志优先级","配置主要由环境变量驱动，这些变量遵循标准优先级规则，并提供了关于这些规则的明确文档。",{"category":40,"check":176,"severity":24,"summary":177},"模式自省","CLI 通过环境变量公开详细的帮助文本和配置选项，虽然未详细说明显式的 JSON 模式输出，但 API 端点可能提供结构化数据。",{"category":40,"check":179,"severity":24,"summary":180},"提示绕过","CLI 和服务器配置依赖于环境变量和配置文件，而不是交互式提示，使其适用于自动化。",{"category":138,"check":182,"severity":24,"summary":183},"无不必要的全局安装","推荐通过 Docker Compose 或 AWS CDK 进行安装，避免对网关本身进行全局安装。",{"category":138,"check":185,"severity":24,"summary":186},"管道到 shell 安装程序","避免使用 `curl ... | sh` 模式；安装通过 Docker Compose、AWS CDK 或直接二进制/源代码编译进行。",{"category":188,"check":189,"severity":24,"summary":190},"输出","流分离","该应用程序使用 `tracing` 进行结构化日志记录到 stderr 和 stdout 作为主要输出，遵循流分离最佳实践。",{"category":188,"check":192,"severity":24,"summary":193},"结构化输出模式","API 端点返回结构化 JSON，并且应用程序的日志记录可配置为 JSON 输出，支持机器可读性。",{"category":195,"check":196,"severity":24,"summary":197},"子进程行为","信号处理","Tokio 运行时和标准的 Rust 实践确保了正确的信号处理，包括向子进程的传播和正常关闭。",1778675494044,"这个自托管 API 网关使 Claude Code 在连接到 Amazon Bedrock 时能够使用其全部功能集（扩展思考、工具使用、网络搜索）。它将 Anthropic API 调用转换为 Bedrock 格式，并提供多账户路由、OIDC SSO、用户/预算管理和管理门户等功能。",[201,202,203,204,205],"通过 Bedrock 为 Claude Code 启用扩展思考、工具使用和网络搜索","提供从 Anthropic 到 Bedrock 格式的 API 翻译","支持多账户/区域路由和故障转移","提供 OIDC SSO、SCIM 预配和虚拟 API 密钥管理","包含带分析、预算控制和用户管理的管理门户",[207,208,209],"替换 Claude Code 或 Amazon Bedrock 基础设施","提供直接的 LLM 推理能力","管理超出网关部署要求之外的 AWS 基础设施",[211,212,213,214],"API 网关安全","IAM 和访问控制","云基础设施管理","LLM 代理",[216,217,218,219],"已启用 Bedrock 模型访问权限的 AWS 账户","已配置凭证的 AWS CLI","Docker（用于本地部署）","PostgreSQL 数据库（用于持久存储）","3.0.0","4.4.0","通过提供具有高级团队管理、安全和可观察性功能的自托管网关，解锁 Claude Code 和 Amazon Bedrock 的全部功能。","该扩展具有全面的功能集、出色的文档、强大的错误处理和强大的安全实践，没有关键或警告发现。",100,"一个生产就绪的、用于 Claude Code 在 Amazon Bedrock 上的自托管 API 网关，具有广泛的管理和安全功能。",[227,228,229,230,231],"aws","bedrock","api-gateway","claude-code","llm-proxy","verified",[234,235,236,237],"为使用 Claude Code 和其自身 AWS 基础设施的团队启用高级 AI 功能","集中管理团队使用的 Claude Code 的 API 访问和管理","为 AI 模型使用实施细粒度的预算控制和访问管理","将 Claude Code 与企业身份提供商集成以实现无缝身份验证",{"codeQuality":239,"collectedAt":241,"documentation":242,"maintenance":245,"security":251,"testCoverage":254},{"hasLockfile":240},true,1778675474201,{"descriptionLength":243,"readmeSize":244},156,15658,{"closedIssues90d":246,"forks":247,"hasChangelog":240,"openIssues90d":248,"pushedAt":249,"stars":250},10,3,2,1778451943000,12,{"hasNpmPackage":252,"license":253,"smitheryVerified":252},false,"MIT",{"hasCi":240,"hasTests":240},{"updatedAt":256},1778675544106,{"basePath":258,"githubOwner":259,"githubRepo":260,"locale":18,"slug":260,"type":261},"","antkawam","claude-code-aws-gateway","cli",null,{"evaluate":264,"extract":267},{"promptVersionExtension":220,"promptVersionScoring":221,"score":224,"tags":265,"targetMarket":266,"tier":232},[227,228,229,230,231],"global",{"commitSha":268,"license":253},"HEAD",{"repoId":270,"translatedFrom":271},"kd70nmy8c0zrge5th418x3jc5h86n04n","k17btg6bsk2ejjx1bt6tbk070x86mdwe",{"_creationTime":273,"_id":270,"identity":274,"providers":275,"workflow":351},1778675468153.0686,{"githubOwner":259,"githubRepo":260,"sourceUrl":14},{"classify":276,"discover":327,"github":330},{"commitSha":268,"extensions":277},[278,298],{"basePath":258,"installMethods":279,"rationale":280,"selectedPaths":281,"source":296,"sourceLanguage":297,"type":261},{"cargo":12},"cli ecosystem detected at /",[282,285,287,290,293],{"path":283,"priority":284},"Cargo.toml","mandatory",{"path":286,"priority":284},"README.md",{"path":288,"priority":289},"LICENSE","high",{"path":291,"priority":292},"src/main.rs","medium",{"path":294,"priority":295},"src/lib.rs","low","rule","en",{"basePath":261,"installMethods":299,"rationale":301,"selectedPaths":302,"source":296,"sourceLanguage":297,"type":261},{"cargo":300},"ccag-cli","cli ecosystem detected at cli",[303,304,305,307,309,311,313,315,317,319,321,323,325],{"path":283,"priority":284},{"path":291,"priority":292},{"path":306,"priority":295},"src/commands/config.rs",{"path":308,"priority":295},"src/commands/endpoints.rs",{"path":310,"priority":295},"src/commands/idps.rs",{"path":312,"priority":295},"src/commands/keys.rs",{"path":314,"priority":295},"src/commands/logs.rs",{"path":316,"priority":295},"src/commands/mod.rs",{"path":318,"priority":295},"src/commands/scim.rs",{"path":320,"priority":295},"src/commands/status.rs",{"path":322,"priority":295},"src/commands/teams.rs",{"path":324,"priority":295},"src/commands/update.rs",{"path":326,"priority":295},"src/commands/users.rs",{"sources":328},[329],"manual",{"closedIssues90d":246,"description":331,"forks":247,"homepage":332,"license":253,"openIssues90d":248,"pushedAt":249,"readmeSize":244,"stars":250,"topics":333},"Self-hosted API gateway for Claude Code on Amazon Bedrock — unlock extended thinking, web search & tool use with team budgets, OIDC SSO, and an admin portal","https://antkawam.github.io/claude-code-aws-gateway/",[334,229,335,230,336,231,337,338,339,340,341,342,343,344,345,346,347,348,349,350],"anthropic","claude","ecs-fargate","oidc","rust","self-hosted","api-proxy","aws-cdk","budget-management","developer-tools","docker","graviton","sso","team-management","web-search","bedrock-runtime","amazon-bedrock",{"classifiedAt":352,"discoverAt":353,"extractAt":354,"githubAt":354,"updatedAt":352},1778675472313,1778675468153,1778675470606,[229,227,228,230,231],{"evaluatedAt":357,"extractAt":358,"updatedAt":256},1778675494157,1778675472480,[],[361],{"_creationTime":362,"_id":363,"community":364,"display":365,"identity":368,"providers":369,"relations":375,"tags":377,"workflow":378},1778675537975.218,"k179yd5wq6abf6raegysjmj6qs86my4k",{"reviewCount":8},{"description":366,"installMethods":367,"name":261,"sourceUrl":14},"用于 Claude Code on Amazon Bedrock 的自托管 API 网关 — 通过团队预算、OIDC SSO 和管理员门户解锁扩展思维、网络搜索和工具使用。",{"cargo":300},{"basePath":261,"githubOwner":259,"githubRepo":260,"locale":18,"slug":261,"type":261},{"evaluate":370,"extract":374},{"promptVersionExtension":220,"promptVersionScoring":221,"score":371,"tags":372,"targetMarket":266,"tier":232},97,[227,228,230,229,261,337,346,373],"management",{"commitSha":268},{"repoId":270,"translatedFrom":376},"k17eyhpkf8v1z0kt6g3jy6hp8d86mw7q",[229,227,228,230,261,373,337,346],{"evaluatedAt":379,"extractAt":358,"updatedAt":380},1778675514685,1778675537975]