Function mergeAIProviderSettings

coderd/ai_providers.go:762–777

mergeAIProviderSettings overlays a patch onto an existing settings value. Write-only fields (Bedrock AccessKey and AccessKeySecret) use pointers so the patch can distinguish "omitted, keep existing" (nil) from "explicitly clear" (pointer to empty string) - e.g. when an admin migrates from static AWS

(existing, patch codersdk.AIProviderSettings)

// admin migrates from static AWS credentials to IAM role-based auth
// in a single PATCH.
func mergeAIProviderSettings(existing, patch codersdk.AIProviderSettings) codersdk.AIProviderSettings {
	if patch.Bedrock == nil {
		// Patch carries no type-specific data; treat as a clear.
		return codersdk.AIProviderSettings{}
	}
	merged := *patch.Bedrock
	if existing.Bedrock != nil {
		if merged.AccessKey == nil {
			merged.AccessKey = existing.Bedrock.AccessKey
		}
		if merged.AccessKeySecret == nil {
			merged.AccessKeySecret = existing.Bedrock.AccessKeySecret
		}
	}
	return codersdk.AIProviderSettings{Bedrock: &merged}
}