[Fix] Route Amazon Bedrock API keys through Mantle (#245)

* [Fix] Route Amazon Bedrock through Mantle

* [Fix] Resolve Mantle model metadata

---------

Co-authored-by: Roomote <roomote@roocode.com>

Author: mrubens

.changeset/bright-bedrock-mantle.md

@@ -0,0 +1,5 @@
+---
+'@roomote/web': patch
+---
+
+Route Amazon Bedrock API keys through the Mantle endpoint and clarify Mantle key setup in model settings.

apps/docs/environment-variables.mdx

@@ -179,8 +179,8 @@ as per-task auth tokens or workspace paths.
 | `OPENCODE_API_KEY`                     | Provider key | OpenCode Zen / Go API key.                                                                                                              |
 | `GEMINI_API_KEY`                       | Provider key | Google Gemini API key. Can also be saved from **Settings > Models**.                                                                    |
 | `GOOGLE_GENERATIVE_AI_API_KEY`         | Provider key | Alternate Google/Gemini provider key forwarded when configured or inferred.                                                             |
-| `AWS_BEARER_TOKEN_BEDROCK`             | Provider key | Amazon Bedrock API key (bearer token). Can also be saved from **Settings > Models**.                                                    |
-| `AWS_REGION`                           | Provider key | AWS region for Amazon Bedrock models. Defaults to `us-east-1` at the runtime when unset.                                                |
+| `AWS_BEARER_TOKEN_BEDROCK`             | Provider key | Amazon Bedrock Mantle API key. Can also be saved from **Settings > Models**.                                                            |
+| `AWS_REGION`                           | Provider key | AWS region where the Bedrock API key was created. Defaults to `us-east-1` at runtime when unset.                                        |
 | `GOOGLE_APPLICATION_CREDENTIALS`       | Provider key | Google Vertex AI service account credentials: a file path, or pasted JSON contents that Roomote materializes to a file for the runtime. |
 | `GOOGLE_VERTEX_PROJECT`                | Provider key | Google Cloud project ID for Vertex AI models.                                                                                           |
 | `GOOGLE_VERTEX_LOCATION`               | Provider key | Vertex AI location. Defaults to `us-central1` at the runtime when unset.                                                                |

apps/docs/models.mdx

@@ -37,6 +37,22 @@ in the setup wizard and from **Settings > Models**. You stay in control: you
 can disable or remove any of the added models, add more later, and reconnecting
 a provider never re-adds models you removed.
 
+### Amazon Bedrock
+
+Roomote connects Amazon Bedrock through the Bedrock Mantle endpoint used by
+AWS's current API-key console. Generate a short-term or long-term Bedrock API
+key in the AWS console, save it from **Settings > Models**, and set the AWS
+region where the key was created. Bedrock model IDs use the
+`bedrock-mantle/` prefix, for example:
+
+```text
+bedrock-mantle/anthropic.claude-haiku-4-5
+bedrock-mantle/anthropic.claude-sonnet-5
+```
+
+Short-term keys expire with the AWS console session (and after at most 12
+hours), so replace the saved key when it expires.
+
 ### ChatGPT subscription
 
 Roomote also supports connecting a **ChatGPT (subscription)** provider, which
@@ -82,6 +98,7 @@ openai/gpt-5.6-terra
 vercel/openai/gpt-5.6-terra
 baseten/moonshotai/Kimi-K2.7-Code
 togetherai/deepseek-ai/DeepSeek-V4-Pro
+bedrock-mantle/anthropic.claude-sonnet-5
 ```
 
 The prefix matters because two providers can expose similar model families with

apps/web/src/components/settings/InferenceProviderSection.test.tsx

@@ -321,16 +321,32 @@ function ProviderCredentialsDialog({
                     <span className="text-sm font-medium">
                       {primaryCredentialLabel}
                     </span>
-                    <Input
-                      secret
-                      className="font-mono"
-                      value={apiKey}
-                      onChange={(event) => setApiKey(event.target.value)}
-                      placeholder={`${primaryCredentialLabel} for ${selectedProvider.label}`}
-                      disabled={isSaving}
-                      aria-label={`${mode === 'edit' ? 'New ' : ''}${primaryCredentialLabel} for ${selectedProvider.label}`}
-                      data-1p-ignore
-                    />
+                    <div className="space-y-1.5">
+                      <Input
+                        secret
+                        className="font-mono"
+                        value={apiKey}
+                        onChange={(event) => setApiKey(event.target.value)}
+                        placeholder={`${primaryCredentialLabel} for ${selectedProvider.label}`}
+                        disabled={isSaving}
+                        aria-label={`${mode === 'edit' ? 'New ' : ''}${primaryCredentialLabel} for ${selectedProvider.label}`}
+                        data-1p-ignore
+                      />
+                      {selectedProvider.credentialHelp ? (
+                        <p className="text-xs text-muted-foreground">
+                          {selectedProvider.credentialHelp.text}{' '}
+                          <a
+                            className="font-medium underline underline-offset-2 hover:text-foreground"
+                            href={selectedProvider.credentialHelp.href}
+                            target="_blank"
+                            rel="noreferrer"
+                          >
+                            {selectedProvider.credentialHelp.linkLabel}
+                          </a>
+                          .
+                        </p>
+                      ) : null}
+                    </div>
                   </div>
                   {additionalEnvFields.map((field) => (
                     <div

apps/web/src/components/settings/InferenceProviderSection.tsx

@@ -5,6 +5,7 @@ import {
 } from '@roomote/types';
 
 const MODELS_DEV_CATALOG_URL = 'https://models.dev/catalog.json';
+const BEDROCK_MANTLE_PROVIDER_PREFIX = 'bedrock-mantle/';
 
 type ModelsDevModalities = {
   input?: string[];
@@ -173,6 +174,8 @@ export async function fetchModelsDevCatalog(
  * Resolves the models.dev catalog slug for a Roomote task model id.
  * Strips a leading gateway provider prefix (`openrouter/`, `vercel/`,
  * `requesty/`, `baseten/`, `togetherai/`) and any leading `~` alias marker.
+ * Mantle's `lab.model` identifiers are converted to models.dev's `lab/model`
+ * slugs so metadata continues to resolve through the underlying model lab.
  */
 export function resolveModelsDevSlug(modelId: string): string {
   let slug = modelId;
@@ -186,6 +189,13 @@ export function resolveModelsDevSlug(modelId: string): string {
   if (slug.startsWith('~')) {
     slug = slug.slice(1);
   }
+  if (slug.startsWith(BEDROCK_MANTLE_PROVIDER_PREFIX)) {
+    const mantleModelId = slug.slice(BEDROCK_MANTLE_PROVIDER_PREFIX.length);
+    const labSeparatorIndex = mantleModelId.indexOf('.');
+    if (labSeparatorIndex > 0) {
+      return `${mantleModelId.slice(0, labSeparatorIndex)}/${mantleModelId.slice(labSeparatorIndex + 1)}`;
+    }
+  }
   return slug;
 }