@ai-sdk/amazon-bedrock 4.0.97 → 4.0.99

package/docs/08-amazon-bedrock.mdx

@@ -133,12 +133,10 @@ const bedrock = createAmazonBedrock({
 ```
 
 <Note>
-  The credentials settings fall back to environment variable defaults described
-  below. These may be set by your serverless environment without your awareness,
-  which can lead to merged/conflicting credential values and provider errors
-  around failed authentication. If you're experiencing issues be sure you are
-  explicitly specifying all settings (even if `undefined`) to avoid any
-  defaults.
+  Omitted options use the environment variables below. When **both**
+  `accessKeyId` and `secretAccessKey` are strings, SigV4 uses a **`sessionToken`
+  only if you pass one** - not `AWS_SESSION_TOKEN` from the environment - so static
+  keys are not mixed with workload tokens (e.g. EKS IRSA).
 </Note>
 
 You can use the following optional settings to customize the Amazon Bedrock provider instance:
@@ -160,8 +158,10 @@ You can use the following optional settings to customize the Amazon Bedrock prov
 
 - **sessionToken** _string_
 
-  Optional. The AWS session token that you want to use for the API calls.
-  It uses the `AWS_SESSION_TOKEN` environment variable by default.
+  Optional. For temporary credentials. With **both** access keys set as strings,
+  pass the token here if needed; `AWS_SESSION_TOKEN` from the environment is not
+  used. If either key is taken from the environment, omitting `sessionToken`
+  allows `AWS_SESSION_TOKEN`.
 
 - **credentialProvider** _() =&gt; Promise&lt;&#123; accessKeyId: string; secretAccessKey: string; sessionToken?: string; &#125;&gt;_
 
@@ -1359,8 +1359,10 @@ You can use the following optional settings to customize the Bedrock Anthropic p
 
 - **sessionToken** _string_
 
-  Optional. The AWS session token that you want to use for the API calls.
-  It uses the `AWS_SESSION_TOKEN` environment variable by default.
+  Optional. For temporary credentials. With **both** access keys set as strings,
+  pass the token here if needed; `AWS_SESSION_TOKEN` from the environment is not
+  used. If either key is taken from the environment, omitting `sessionToken`
+  allows `AWS_SESSION_TOKEN`.
 
 - **apiKey** _string_
 
@@ -1621,8 +1623,4 @@ The `bedrockOptions` provider setting previously available has been removed. If
 you were using the `bedrockOptions` object, you should now use the `region`,
 `accessKeyId`, `secretAccessKey`, and `sessionToken` settings directly instead.
 
-Note that you may need to set all of these explicitly, e.g. even if you're not
-using `sessionToken`, set it to `undefined`. If you're running in a serverless
-environment, there may be default environment variables set by your containing
-environment that the Amazon Bedrock provider will then pick up and could
-conflict with the ones you're intending to use.
+Static IAM user keys do not require `sessionToken`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-sdk/amazon-bedrock",
-  "version": "4.0.97",
+  "version": "4.0.99",
   "license": "Apache-2.0",
   "sideEffects": false,
   "main": "./dist/index.js",
@@ -38,16 +38,16 @@
     "@smithy/eventstream-codec": "^4.0.1",
     "@smithy/util-utf8": "^4.0.0",
     "aws4fetch": "^1.0.20",
-    "@ai-sdk/anthropic": "3.0.72",
-    "@ai-sdk/provider": "3.0.9",
-    "@ai-sdk/provider-utils": "4.0.24"
+    "@ai-sdk/anthropic": "3.0.74",
+    "@ai-sdk/provider": "3.0.10",
+    "@ai-sdk/provider-utils": "4.0.26"
   },
   "devDependencies": {
     "@types/node": "20.17.24",
     "tsup": "^8.3.0",
     "typescript": "5.8.3",
     "zod": "3.25.76",
-    "@ai-sdk/test-server": "1.0.4",
+    "@ai-sdk/test-server": "1.0.5",
     "@vercel/ai-tsconfig": "0.0.0"
   },
   "peerDependencies": {

package/src/anthropic/bedrock-anthropic-fetch.ts

@@ -1,7 +1,7 @@
 import {
   convertBase64ToUint8Array,
-  FetchFunction,
   safeParseJSON,
+  type FetchFunction,
 } from '@ai-sdk/provider-utils';
 import { z } from 'zod/v4';
 import { createBedrockEventStreamDecoder } from '../bedrock-event-stream-decoder';

package/src/anthropic/bedrock-anthropic-provider.ts

@@ -1,28 +1,28 @@
 import {
-  LanguageModelV3,
   NoSuchModelError,
-  ProviderV3,
+  type LanguageModelV3,
+  type ProviderV3,
 } from '@ai-sdk/provider';
 import {
-  FetchFunction,
   loadOptionalSetting,
   loadSetting,
-  Resolvable,
   resolve,
   withoutTrailingSlash,
   withUserAgentSuffix,
+  type FetchFunction,
+  type Resolvable,
 } from '@ai-sdk/provider-utils';
 import {
   anthropicTools,
   AnthropicMessagesLanguageModel,
 } from '@ai-sdk/anthropic/internal';
 import {
-  BedrockCredentials,
   createApiKeyFetchFunction,
   createSigV4FetchFunction,
+  type BedrockCredentials,
 } from '../bedrock-sigv4-fetch';
 import { createBedrockAnthropicFetch } from './bedrock-anthropic-fetch';
-import { BedrockAnthropicModelId } from './bedrock-anthropic-options';
+import type { BedrockAnthropicModelId } from './bedrock-anthropic-options';
 import { VERSION } from '../version';
 
 // Bedrock requires newer tool versions than the default Anthropic SDK versions

package/src/bedrock-api-types.ts

@@ -1,4 +1,4 @@
-import { JSONObject } from '@ai-sdk/provider';
+import type { JSONObject } from '@ai-sdk/provider';
 
 export interface BedrockConverseInput {
   system?: BedrockSystemMessages;

package/src/bedrock-chat-language-model.ts

@@ -1,4 +1,4 @@
-import {
+import type {
   JSONObject,
   LanguageModelV3,
   LanguageModelV3CallOptions,
@@ -13,33 +13,37 @@ import {
   SharedV3Warning,
 } from '@ai-sdk/provider';
 import {
-  FetchFunction,
-  ParseResult,
-  Resolvable,
   combineHeaders,
   createJsonErrorResponseHandler,
   createJsonResponseHandler,
   parseProviderOptions,
   postJsonToApi,
   resolve,
+  type FetchFunction,
+  type ParseResult,
+  type Resolvable,
 } from '@ai-sdk/provider-utils';
 import { z } from 'zod/v4';
 import {
   BEDROCK_STOP_REASONS,
-  BedrockConverseInput,
-  BedrockStopReason,
+  type BedrockConverseInput,
+  type BedrockStopReason,
 } from './bedrock-api-types';
 import {
-  BedrockChatModelId,
   amazonBedrockLanguageModelOptions,
+  type BedrockChatModelId,
 } from './bedrock-chat-options';
 import { BedrockErrorSchema } from './bedrock-error';
 import { createBedrockEventStreamResponseHandler } from './bedrock-event-stream-response-handler';
 import { prepareTools } from './bedrock-prepare-tools';
-import { BedrockUsage, convertBedrockUsage } from './convert-bedrock-usage';
+import {
+  convertBedrockUsage,
+  type BedrockUsage,
+} from './convert-bedrock-usage';
 import { convertToBedrockChatMessages } from './convert-to-bedrock-chat-messages';
 import { mapBedrockFinishReason } from './map-bedrock-finish-reason';
 import { isMistralModel, normalizeToolCallId } from './normalize-tool-call-id';
+import type { BedrockReasoningMetadata } from './bedrock-reasoning-metadata';
 
 type BedrockChatConfig = {
   baseUrl: () => string;
@@ -1139,11 +1143,7 @@ const BedrockStreamSchema = z.object({
   validationException: z.record(z.string(), z.unknown()).nullish(),
 });
 
-export const bedrockReasoningMetadataSchema = z.object({
-  signature: z.string().optional(),
-  redactedData: z.string().optional(),
-});
-
-export type BedrockReasoningMetadata = z.infer<
-  typeof bedrockReasoningMetadataSchema
->;
+export {
+  bedrockReasoningMetadataSchema,
+  type BedrockReasoningMetadata,
+} from './bedrock-reasoning-metadata';

package/src/bedrock-embedding-model.ts

@@ -1,20 +1,20 @@
 import {
-  EmbeddingModelV3,
   TooManyEmbeddingValuesForCallError,
+  type EmbeddingModelV3,
 } from '@ai-sdk/provider';
 import {
-  FetchFunction,
-  Resolvable,
   combineHeaders,
   createJsonErrorResponseHandler,
   createJsonResponseHandler,
   parseProviderOptions,
   postJsonToApi,
   resolve,
+  type FetchFunction,
+  type Resolvable,
 } from '@ai-sdk/provider-utils';
 import {
-  BedrockEmbeddingModelId,
   amazonBedrockEmbeddingModelOptionsSchema,
+  type BedrockEmbeddingModelId,
 } from './bedrock-embedding-options';
 import { BedrockErrorSchema } from './bedrock-error';
 import { z } from 'zod/v4';

package/src/bedrock-event-stream-response-handler.ts

@@ -1,12 +1,12 @@
 import { EmptyResponseBodyError } from '@ai-sdk/provider';
 import {
-  ParseResult,
   safeParseJSON,
   extractResponseHeaders,
-  ResponseHandler,
   safeValidateTypes,
+  type ParseResult,
+  type ResponseHandler,
 } from '@ai-sdk/provider-utils';
-import { ZodType } from 'zod/v4';
+import type { ZodType } from 'zod/v4';
 import { createBedrockEventStreamDecoder } from './bedrock-event-stream-decoder';
 
 export const createBedrockEventStreamResponseHandler =

package/src/bedrock-image-model.ts

@@ -1,21 +1,21 @@
-import {
+import type {
   ImageModelV3,
   ImageModelV3File,
   SharedV3Warning,
 } from '@ai-sdk/provider';
 import {
-  FetchFunction,
-  Resolvable,
   combineHeaders,
   convertUint8ArrayToBase64,
   createJsonErrorResponseHandler,
   createJsonResponseHandler,
   postJsonToApi,
   resolve,
+  type FetchFunction,
+  type Resolvable,
 } from '@ai-sdk/provider-utils';
 import {
-  BedrockImageModelId,
   modelMaxImagesPerCall,
+  type BedrockImageModelId,
 } from './bedrock-image-settings';
 import { BedrockErrorSchema } from './bedrock-error';
 import { z } from 'zod/v4';

package/src/bedrock-prepare-tools.ts

@@ -1,15 +1,18 @@
 import {
-  JSONObject,
-  LanguageModelV3CallOptions,
-  SharedV3Warning,
   UnsupportedFunctionalityError,
+  type JSONObject,
+  type LanguageModelV3CallOptions,
+  type SharedV3Warning,
 } from '@ai-sdk/provider';
 import { asSchema } from '@ai-sdk/provider-utils';
 import {
   anthropicTools,
   prepareTools as prepareAnthropicTools,
 } from '@ai-sdk/anthropic/internal';
-import { BedrockTool, BedrockToolConfiguration } from './bedrock-api-types';
+import type {
+  BedrockTool,
+  BedrockToolConfiguration,
+} from './bedrock-api-types';
 
 export async function prepareTools({
   tools,

package/src/bedrock-provider.ts

@@ -1,5 +1,5 @@
 import { anthropicTools } from '@ai-sdk/anthropic/internal';
-import {
+import type {
   EmbeddingModelV3,
   ImageModelV3,
   LanguageModelV3,
@@ -7,26 +7,26 @@ import {
   RerankingModelV3,
 } from '@ai-sdk/provider';
 import {
-  FetchFunction,
   generateId,
   loadOptionalSetting,
   loadSetting,
   withoutTrailingSlash,
   withUserAgentSuffix,
+  type FetchFunction,
 } from '@ai-sdk/provider-utils';
 import { BedrockChatLanguageModel } from './bedrock-chat-language-model';
-import { BedrockChatModelId } from './bedrock-chat-options';
+import type { BedrockChatModelId } from './bedrock-chat-options';
 import { BedrockEmbeddingModel } from './bedrock-embedding-model';
-import { BedrockEmbeddingModelId } from './bedrock-embedding-options';
+import type { BedrockEmbeddingModelId } from './bedrock-embedding-options';
 import { BedrockImageModel } from './bedrock-image-model';
-import { BedrockImageModelId } from './bedrock-image-settings';
+import type { BedrockImageModelId } from './bedrock-image-settings';
 import {
-  BedrockCredentials,
   createApiKeyFetchFunction,
   createSigV4FetchFunction,
+  type BedrockCredentials,
 } from './bedrock-sigv4-fetch';
 import { BedrockRerankingModel } from './reranking/bedrock-reranking-model';
-import { BedrockRerankingModelId } from './reranking/bedrock-reranking-options';
+import type { BedrockRerankingModelId } from './reranking/bedrock-reranking-options';
 import { VERSION } from './version';
 
 export interface AmazonBedrockProviderSettings {
@@ -74,8 +74,10 @@ export interface AmazonBedrockProviderSettings {
   secretAccessKey?: string;
 
   /**
-   * The AWS session token to use for the Bedrock provider. Defaults to the value of the
-   * `AWS_SESSION_TOKEN` environment variable.
+   * The AWS session token to use for the Bedrock provider. When `accessKeyId` and
+   * `secretAccessKey` are both passed explicitly as options, only this field is used
+   * If either access key field is omitted and resolved from the environment, the
+   * session token also falls back to `AWS_SESSION_TOKEN` when not set here.
    */
   sessionToken?: string;
 
@@ -221,10 +223,13 @@ export function createAmazonBedrock(
               environmentVariableName: 'AWS_SECRET_ACCESS_KEY',
               description: 'AWS secret access key',
             }),
-            sessionToken: loadOptionalSetting({
-              settingValue: options.sessionToken,
-              environmentVariableName: 'AWS_SESSION_TOKEN',
-            }),
+            sessionToken:
+              options.accessKeyId != null && options.secretAccessKey != null
+                ? options.sessionToken
+                : loadOptionalSetting({
+                    settingValue: options.sessionToken,
+                    environmentVariableName: 'AWS_SESSION_TOKEN',
+                  }),
           };
         } catch (error) {
           // Provide helpful error message for missing AWS credentials

package/src/bedrock-reasoning-metadata.ts

@@ -0,0 +1,10 @@
+import { z } from 'zod/v4';
+
+export const bedrockReasoningMetadataSchema = z.object({
+  signature: z.string().optional(),
+  redactedData: z.string().optional(),
+});
+
+export type BedrockReasoningMetadata = z.infer<
+  typeof bedrockReasoningMetadataSchema
+>;

package/src/bedrock-sigv4-fetch.ts

@@ -1,9 +1,9 @@
 import {
-  FetchFunction,
   combineHeaders,
   normalizeHeaders,
   withUserAgentSuffix,
   getRuntimeEnvironmentUserAgent,
+  type FetchFunction,
 } from '@ai-sdk/provider-utils';
 import { AwsV4Signer } from 'aws4fetch';
 import { VERSION } from './version';

package/src/convert-bedrock-usage.ts

@@ -1,4 +1,4 @@
-import { LanguageModelV3Usage } from '@ai-sdk/provider';
+import type { LanguageModelV3Usage } from '@ai-sdk/provider';
 
 export type BedrockUsage = {
   inputTokens: number;

package/src/convert-to-bedrock-chat-messages.ts

@@ -1,9 +1,9 @@
 import {
-  JSONObject,
-  LanguageModelV3Message,
-  LanguageModelV3Prompt,
-  SharedV3ProviderMetadata,
   UnsupportedFunctionalityError,
+  type JSONObject,
+  type LanguageModelV3Message,
+  type LanguageModelV3Prompt,
+  type SharedV3ProviderMetadata,
 } from '@ai-sdk/provider';
 import {
   convertToBase64,
@@ -13,17 +13,17 @@ import {
 import {
   BEDROCK_DOCUMENT_MIME_TYPES,
   BEDROCK_IMAGE_MIME_TYPES,
-  BedrockAssistantMessage,
-  BedrockCachePoint,
-  BedrockDocumentFormat,
-  BedrockDocumentMimeType,
-  BedrockImageFormat,
-  BedrockImageMimeType,
-  BedrockMessages,
-  BedrockSystemMessages,
-  BedrockUserMessage,
+  type BedrockAssistantMessage,
+  type BedrockCachePoint,
+  type BedrockDocumentFormat,
+  type BedrockDocumentMimeType,
+  type BedrockImageFormat,
+  type BedrockImageMimeType,
+  type BedrockMessages,
+  type BedrockSystemMessages,
+  type BedrockUserMessage,
 } from './bedrock-api-types';
-import { bedrockReasoningMetadataSchema } from './bedrock-chat-language-model';
+import { bedrockReasoningMetadataSchema } from './bedrock-reasoning-metadata';
 import { bedrockFilePartProviderOptions } from './bedrock-chat-options';
 import { normalizeToolCallId } from './normalize-tool-call-id';
 
@@ -309,9 +309,20 @@ export async function convertToBedrockChatMessages(
                       },
                     },
                   });
-                } else {
-                  // trim the last text part if it's the last message in the block
-                  // because Bedrock does not allow trailing whitespace
+                } else if (
+                  part.providerOptions == null ||
+                  Object.keys(part.providerOptions).every(
+                    k => k === 'bedrock' || k === 'amazonBedrock',
+                  )
+                ) {
+                  // No foreign-provider metadata — preserve text. This covers
+                  // the prefill case where the caller hand-crafts a reasoning
+                  // block without a signature. Forwarding reasoning that was
+                  // signed by a different provider (e.g. anthropic) would
+                  // cause Bedrock to reject with
+                  // `thinking.signature: Field required`, so we drop those.
+                  // trim the last text part if it's the last message in the
+                  // block because Bedrock does not allow trailing whitespace
                   // in pre-filled assistant responses
                   bedrockContent.push({
                     reasoningContent: {

package/src/map-bedrock-finish-reason.ts

@@ -1,5 +1,5 @@
-import { LanguageModelV3FinishReason } from '@ai-sdk/provider';
-import { BedrockStopReason } from './bedrock-api-types';
+import type { LanguageModelV3FinishReason } from '@ai-sdk/provider';
+import type { BedrockStopReason } from './bedrock-api-types';
 
 export function mapBedrockFinishReason(
   finishReason: BedrockStopReason,

package/src/reranking/bedrock-reranking-model.ts

@@ -1,22 +1,22 @@
-import { RerankingModelV3 } from '@ai-sdk/provider';
+import type { RerankingModelV3 } from '@ai-sdk/provider';
 import {
-  FetchFunction,
-  Resolvable,
   combineHeaders,
   createJsonErrorResponseHandler,
   createJsonResponseHandler,
   parseProviderOptions,
   postJsonToApi,
   resolve,
+  type FetchFunction,
+  type Resolvable,
 } from '@ai-sdk/provider-utils';
 import { BedrockErrorSchema } from '../bedrock-error';
 import {
-  BedrockRerankingInput,
   bedrockRerankingResponseSchema,
+  type BedrockRerankingInput,
 } from './bedrock-reranking-api';
 import {
-  BedrockRerankingModelId,
   amazonBedrockRerankingModelOptionsSchema,
+  type BedrockRerankingModelId,
 } from './bedrock-reranking-options';
 
 type BedrockRerankingConfig = {