An OpenCode plugin that automatically detects AWS authentication errors and refreshes credentials via aws sso login.

Add to your opencode.json:

{
  "plugin": ["@devtheops/opencode-plugin-aws-auth-refresh"]
}

Place in .opencode/plugins/aws-auth-refresh.ts or ~/.config/opencode/plugins/.

Configure in your opencode.json:

{
  "plugin": [
    ["@devtheops/opencode-plugin-aws-auth-refresh", {
      "profile": "my-aws-profile",
      "autoRetry": true,
      "maxRetries": 1,
      "ssoLoginCommand": "aws sso login --profile my-profile --no-browser"
    }]
  ]
}

1. Hooks into tool.execute.after to inspect tool outputs
2. Detects AWS authentication error patterns:
   • ExpiredToken
   • TokenRefreshRequired
   • The security token included in the request is expired
   • Unable to locate credentials
   • And more...
3. Runs aws sso login with your configured profile
4. Optionally retries the failed command

• ExpiredToken
• TokenRefreshRequired
• The security token included in the request is expired
• credentials expired
• Unable to locate credentials
• Missing credentials
• credentials could not be found
• Error retrieving credentials
• EC2MetadataServiceError

• AWS CLI v2 installed
• Valid SSO configuration in ~/.aws/config

[aws-auth-refresh] AWS credentials expired, running: aws sso login --profile default
[aws-auth-refresh] AWS credentials refreshed successfully
[aws-auth-refresh] Retrying tool after credential refresh

Mozilla Public License 2.0