Merge pull request #18 from flexion/fix/bedrock-bearer-token-iam-precedence

fix: let IAM credentials take precedence over stored Bedrock API key

Author: lgarceau768

packages/opencode/src/provider/provider.ts

@@ -262,7 +262,8 @@ function custom(dep: CustomDep): Record<string, CustomLoader> {
       const awsBearerToken = iife(() => {
         const envToken = process.env.AWS_BEARER_TOKEN_BEDROCK
         if (envToken) return envToken
-        if (auth?.type === "api") {
+        // Only treat stored auth key as a bearer token when no IAM credentials exist.
+        if (auth?.type === "api" && !awsAccessKeyId && !profile) {
           process.env.AWS_BEARER_TOKEN_BEDROCK = auth.key
           return auth.key
         }