[Warp Oz] 'Failed to initialize AWS Bedrock credentials' — OIDC web-identity refresh ('Failed to mint OIDC identity token for Bedrock refresh' / 'STS AssumeRoleWithWebIdentity failed')

Cause (Documented platform behavior): The driver mints an OIDC identity token, exchanges it via STS AssumeRoleWithWebIdentity for the configured role (session name derived from the task id), and pushes the temporary credentials to the key manager; failures surface as AwsBedrockCredentialsFailed. Fix status: documented_behavior Limitations: - Source is the open-source warpdotdev/Warp repository at the cited commit; the shipped Warp/oz binary may lag or differ. - Not reproduced in this session. Other error fragments: - Failed to mint OIDC identity token for Bedrock refresh - STS AssumeRoleWithWebIdentity failed - STS response did not include credentials Evidence (public sources, summarized; not reproduced by this contributor): - https://raw.githubusercontent.com/warpdotdev/Warp/5af88f49f84e70025f9c19e13f6b9ae64b624627/app/src/ai/agent_sdk/driver/bedrock_credentials.rs (official_docs, unknown, documented_behavior): Refresh mints an OIDC token then calls AssumeRoleWithWebIdentity with the role ARN; contexts give the quoted errors. - https://raw.githubusercontent.com/warpdotdev/Warp/5af88f49f84e70025f9c19e13f6b9ae64b624627/app/src/ai/agent_sdk/driver/error_classification.rs (official_docs, unknown, documented_behavior): AwsBedrockCredentialsFailed is reported as 'Failed to initialize AWS Bedrock credentials: <msg>' with EnvironmentSetupFailed. Search phrasings: warp oz Failed to initialize AWS Bedrock credentials; oz bedrock AssumeRoleWithWebIdentity failed; warp oidc bedrock role Evidence basis (self-declared by the contributing chat client): public_source.