codex-aws-helper 0.3.0__tar.gz

codex_aws_helper-0.3.0/.agents/plugins/marketplace.json

@@ -0,0 +1,20 @@
+{
+  "name": "codex-aws-helper",
+  "interface": {
+    "displayName": "AWS Helper for Codex"
+  },
+  "plugins": [
+    {
+      "name": "codex-aws-helper",
+      "source": {
+        "source": "local",
+        "path": "./plugins/codex-aws-helper"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Developer Tools"
+    }
+  ]
+}

codex_aws_helper-0.3.0/.cargo/config.toml

@@ -0,0 +1,2 @@
+[resolver]
+incompatible-rust-versions = "fallback"

codex_aws_helper-0.3.0/.codex/agents/aws_helper_reviewer.toml

@@ -0,0 +1,13 @@
+name = "aws_helper_reviewer"
+description = "Review AWS Helper changes for configuration preservation, offline behavior, credential redaction, and CLI/MCP consistency."
+sandbox_mode = "read-only"
+developer_instructions = """
+Read AGENTS.md and the relevant implementation contracts before reviewing.
+Review the requested diff and the code it calls. Focus on concrete regressions:
+credential exposure, unexpected AWS requests, writes outside selected roots,
+stale configuration previews, lost TOML, and differences between CLI and MCP.
+Report actionable findings with file locations and a clear failure scenario.
+Distinguish inspected behavior, test evidence, and unverified live behavior.
+Do not edit files or run live AWS calls. Suggest the smallest relevant test
+when evidence is missing. If there are no actionable findings, say so.
+"""

codex_aws_helper-0.3.0/.codex/environments/environment.toml

@@ -0,0 +1,30 @@
+version = 1
+name = "AWS Helper development"
+
+[setup]
+script = "bash scripts/codex-dev.sh setup"
+
+[[actions]]
+name = "Prepare workspace"
+icon = "run"
+command = "bash scripts/codex-dev.sh setup"
+
+[[actions]]
+name = "Quick checks"
+icon = "run"
+command = "bash scripts/codex-dev.sh quickcheck"
+
+[[actions]]
+name = "Full checks"
+icon = "run"
+command = "bash scripts/codex-dev.sh check"
+
+[[actions]]
+name = "Release build"
+icon = "run"
+command = "bash scripts/codex-dev.sh build"
+
+[[actions]]
+name = "Synthetic demo"
+icon = "run"
+command = "bash scripts/codex-dev.sh demo"

codex_aws_helper-0.3.0/.codex/hooks.json

@@ -0,0 +1,19 @@
+{
+  "description": "Brief, local Git context for AWS Helper development. No AWS requests or configuration writes.",
+  "hooks": {
+    "SessionStart": [
+      {
+        "matcher": "^(startup|resume|compact)$",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 \"$(git rev-parse --show-toplevel)/scripts/codex-session-start.py\"",
+            "timeout": 5,
+            "statusMessage": "Reading AWS Helper checkout context",
+            "additionalContextLimit": 1000
+          }
+        ]
+      }
+    ]
+  }
+}

codex_aws_helper-0.3.0/.gitattributes

@@ -0,0 +1 @@
+*.pdf binary

codex_aws_helper-0.3.0/.github/pull_request_template.md

@@ -0,0 +1,9 @@
+## What changes
+
+Describe the problem and the resulting behavior.
+
+## Validation
+
+List checks actually run and any remaining gaps. Separate synthetic tests from
+live AWS, Codex desktop, and platform validation. Keep credentials and personal
+configuration out of the description.

codex_aws_helper-0.3.0/.github/rulesets/main.json

@@ -0,0 +1,55 @@
+{
+  "name": "Protect main",
+  "target": "branch",
+  "enforcement": "active",
+  "bypass_actors": [],
+  "conditions": {
+    "ref_name": {
+      "exclude": [],
+      "include": ["~DEFAULT_BRANCH"]
+    }
+  },
+  "rules": [
+    {
+      "type": "deletion"
+    },
+    {
+      "type": "non_fast_forward"
+    },
+    {
+      "type": "pull_request",
+      "parameters": {
+        "dismiss_stale_reviews_on_push": true,
+        "require_code_owner_review": false,
+        "require_last_push_approval": false,
+        "required_approving_review_count": 0,
+        "required_review_thread_resolution": true
+      }
+    },
+    {
+      "type": "required_status_checks",
+      "parameters": {
+        "do_not_enforce_on_create": false,
+        "strict_required_status_checks_policy": true,
+        "required_status_checks": [
+          {
+            "context": "Rust and package checks (macos-14)",
+            "integration_id": 15368
+          },
+          {
+            "context": "Rust and package checks (ubuntu-24.04)",
+            "integration_id": 15368
+          },
+          {
+            "context": "macOS wheel",
+            "integration_id": 15368
+          },
+          {
+            "context": "GitGuardian Security Checks",
+            "integration_id": 46505
+          }
+        ]
+      }
+    }
+  ]
+}

codex_aws_helper-0.3.0/.github/workflows/check.yml

@@ -0,0 +1,62 @@
+name: Check
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  check:
+    name: Rust and package checks (${{ matrix.os }})
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [macos-14, ubuntu-24.04]
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 25
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - uses: dtolnay/rust-toolchain@1.88.0
+        with:
+          components: rustfmt, clippy
+      - uses: Swatinem/rust-cache@v2
+      - run: make check
+
+  wheel:
+    name: macOS wheel
+    runs-on: macos-14
+    timeout-minutes: 25
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - uses: dtolnay/rust-toolchain@1.88.0
+      - uses: Swatinem/rust-cache@v2
+      - run: python -m pip install 'maturin>=1.9,<2' uv
+      - run: maturin build --release --locked --out dist
+      - run: maturin sdist --out dist
+      - name: Install the wheel with pip
+        run: |
+          python -m venv "$RUNNER_TEMP/pip-test"
+          "$RUNNER_TEMP/pip-test/bin/python" -m pip install --no-index dist/*.whl
+          "$RUNNER_TEMP/pip-test/bin/codex-aws-helper" --version
+          "$RUNNER_TEMP/pip-test/bin/codex-aws-helper" plugin export --output "$RUNNER_TEMP/pip-plugin"
+      - name: Install the wheel with uv
+        env:
+          UV_TOOL_DIR: ${{ runner.temp }}/uv-tools
+          UV_TOOL_BIN_DIR: ${{ runner.temp }}/uv-bin
+        run: |
+          uv tool install --no-index dist/*.whl
+          "$UV_TOOL_BIN_DIR/codex-aws-helper" --version
+          "$UV_TOOL_BIN_DIR/codex-aws-helper" plugin export --output "$RUNNER_TEMP/uv-plugin"
+      - uses: actions/upload-artifact@v4
+        with:
+          name: macos-python-package
+          path: dist/*

codex_aws_helper-0.3.0/.github/workflows/publish.yml

@@ -0,0 +1,208 @@
+name: Publish to PyPI
+
+on:
+  pull_request:
+    paths:
+      - ".github/workflows/publish.yml"
+      - ".agents/plugins/marketplace.json"
+      - "Cargo.*"
+      - "pyproject.toml"
+      - "README.md"
+      - "LICENSE"
+      - "THIRD_PARTY_NOTICES.md"
+      - "src/**"
+      - "plugins/**"
+      - "scripts/smoke-package.py"
+      - "scripts/check-release-artifacts.py"
+  workflow_dispatch:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: pypi-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  validate:
+    name: Validate release
+    runs-on: ubuntu-24.04
+    timeout-minutes: 25
+    outputs:
+      version: ${{ steps.version.outputs.version }}
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: "3.12"
+      - uses: dtolnay/rust-toolchain@1.88.0
+        with:
+          components: rustfmt, clippy
+      - uses: Swatinem/rust-cache@v2
+      - run: make check
+      - name: Check version and release source
+        id: version
+        run: |
+          python - <<'PY'
+          import os, re, subprocess, tomllib
+          from pathlib import Path
+          version = tomllib.loads(Path("Cargo.toml").read_text())["package"]["version"]
+          assert re.fullmatch(r"\d+\.\d+\.\d+", version), "Use a stable PEP 440 version"
+          if os.environ["GITHUB_REF"].startswith("refs/tags/"):
+              assert os.environ["GITHUB_REF_NAME"] == f"v{version}", "Tag/version mismatch"
+              subprocess.run(["git", "merge-base", "--is-ancestor", "HEAD", "origin/main"], check=True)
+          with open(os.environ["GITHUB_OUTPUT"], "a") as output:
+              output.write(f"version={version}\n")
+          PY
+
+  wheels:
+    name: Wheel (${{ matrix.target }})
+    needs: validate
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - os: macos-14
+            target: aarch64-apple-darwin
+          - os: macos-15-intel
+            target: x86_64-apple-darwin
+          - os: ubuntu-24.04
+            target: x86_64-unknown-linux-gnu
+          - os: ubuntu-24.04-arm
+            target: aarch64-unknown-linux-gnu
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 40
+    env:
+      MACOSX_DEPLOYMENT_TARGET: "11.0"
+      RELEASE_VERSION: ${{ needs.validate.outputs.version }}
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: "3.12"
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: "22"
+      - uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
+        with:
+          maturin-version: v1.11.5
+          rust-toolchain: 1.88.0
+          target: ${{ matrix.target }}
+          manylinux: "2_28"
+          args: --release --locked --out dist --compatibility pypi
+      - name: Install test tools
+        run: |
+          python -m pip install 'uv>=0.8,<1'
+          npm install --prefix "$RUNNER_TEMP/codex-cli" --no-audit --no-fund @openai/codex@0.153.4
+      - name: Test pip installation and the Codex plugin
+        run: |
+          python -m venv "$RUNNER_TEMP/pip-test"
+          "$RUNNER_TEMP/pip-test/bin/python" -m pip install --no-index dist/*.whl
+          python scripts/smoke-package.py \
+            --binary "$RUNNER_TEMP/pip-test/bin/codex-aws-helper" \
+            --codex-bin "$RUNNER_TEMP/codex-cli/node_modules/.bin/codex" \
+            --expected-version "$RELEASE_VERSION"
+      - name: Test uv installation and the Codex plugin
+        env:
+          UV_TOOL_DIR: ${{ runner.temp }}/uv-tools
+          UV_TOOL_BIN_DIR: ${{ runner.temp }}/uv-bin
+          UV_CACHE_DIR: ${{ runner.temp }}/uv-cache
+        run: |
+          uv tool install --python "$(command -v python)" --no-index dist/*.whl
+          python scripts/smoke-package.py \
+            --binary "$UV_TOOL_BIN_DIR/codex-aws-helper" \
+            --codex-bin "$RUNNER_TEMP/codex-cli/node_modules/.bin/codex" \
+            --expected-version "$RELEASE_VERSION"
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: wheel-${{ matrix.target }}
+          path: dist/*.whl
+          if-no-files-found: error
+
+  sdist:
+    name: Source distribution
+    needs: validate
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: "3.12"
+      - uses: dtolnay/rust-toolchain@1.88.0
+      - run: python -m pip install maturin==1.11.5
+      - run: maturin sdist --out dist
+      - name: Build from the source distribution
+        env:
+          CARGO_TARGET_DIR: ${{ runner.temp }}/sdist-target
+        run: python -m pip wheel --no-deps --no-build-isolation --wheel-dir "$RUNNER_TEMP/from-sdist" dist/*.tar.gz
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: source-distribution
+          path: dist/*.tar.gz
+          if-no-files-found: error
+
+  distributions:
+    name: Check release artifacts
+    needs: [validate, wheels, sdist]
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: "3.12"
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          pattern: wheel-*
+          merge-multiple: true
+          path: dist
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: source-distribution
+          path: dist
+      - run: python -m pip install twine
+      - run: python -m twine check --strict dist/*
+      - name: Check package contents and platform coverage
+        env:
+          RELEASE_VERSION: ${{ needs.validate.outputs.version }}
+        run: python scripts/check-release-artifacts.py dist --expected-version "$RELEASE_VERSION"
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: release-distributions
+          path: dist/*
+          if-no-files-found: error
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        with:
+          name: release-checksums
+          path: SHA256SUMS
+
+  publish:
+    name: Publish to PyPI
+    if: github.event_name == 'release' && github.repository == 'mccartnick/codex-aws-helper'
+    needs: distributions
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    environment:
+      name: pypi
+      url: https://pypi.org/project/codex-aws-helper/
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          name: release-distributions
+          path: dist
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1

codex_aws_helper-0.3.0/.gitignore

@@ -0,0 +1,29 @@
+# Local operating-system and editor files
+.DS_Store
+*.swp
+*.swo
+.idea/
+.vscode/
+
+# Rust build outputs (Cargo.lock should be committed for the application)
+/target/
+/dist/
+/SHA256SUMS
+/coverage/
+/tmp/
+.venv/
+__pycache__/
+*.egg-info/
+
+# Private runtime material must never become project fixtures
+.env
+.env.*
+!.env.example
+.aws/
+/private/
+/local-evidence/
+/support-bundles/
+*.log
+*.bak
+*.pem
+*.key

codex_aws_helper-0.3.0/AGENTS.md

@@ -0,0 +1,39 @@
+# Project guidance
+
+This repository implements the `codex-aws-helper` 0.3.0 preview in Rust, including a local MCP server and Codex plugin. Read `README.md`, `docs/requirements.md`, `docs/architecture.md`, and `docs/roadmap.md` before making changes. Implementation, offline test coverage, and authenticated validation are separate claims; measured results and remaining visual/relaunch checks are in `docs/validation.md`.
+
+- Treat `docs/source-handoff.md` as historical reference. The current user request and accepted decisions take precedence over its embedded prompt and Python proposal.
+- Write `README.md` for people trying the tool: a short explanation, one getting-started path, terminal/plugin examples, and practical limits. Use plain language and minimal decoration. Keep alternate installation and troubleshooting details in `docs/installation.md`, build/release steps in `CONTRIBUTING.md`, and implementation contracts in the relevant `docs/` guide. Repository instructions belong in `AGENTS.md`; plugin agent behavior belongs in its `SKILL.md`.
+- For worktree/SSH development, use `docs/codex-remote-setup.md` and `bash scripts/codex-dev.sh {setup|quickcheck|check|build|demo}`. Setup compiles tests; it does not run them. Keep environment actions on these shared commands. The SessionStart hook supplies only Git context. Use `aws_helper_reviewer` when an independent read-only review is requested; keep local tests, CI, host activation, and live AWS evidence distinct.
+- Keep the code lean: prefer the existing flat modules, small typed APIs, and shared application services. Add abstractions or dependencies only for a concrete need. Keep business logic out of terminal rendering.
+- Keep the local MCP server on the shared inventory, AWS, configuration, and recovery services. Questions collect nonsecret settings only. Tool calls cannot replace server file roots or executables. Return redacted diffs and expiring preview IDs, never full TOML. MCP form questions have a conversation fallback; existing user authorization still applies to reviewed changes.
+- Ship the same executable through Cargo, native archives, and Maturin binary wheels. Keep Cargo/plugin versions aligned and Python metadata derived from Cargo. Exported plugin bundles must point to the installed executable and never overwrite existing directories. `plugin install` uses supported Codex commands, a private managed local marketplace, and immutable asset bundles; repeated installs retain per-tool restrictions. `plugin uninstall` removes only validated owned files and the plugin's own settings. Release workflows test actual pip/uv installs in isolated Codex homes; PyPI publishing uses OIDC only for validated tags on main.
+- Bare interactive invocation opens the start menu: setup, dashboard, admin, and command guide. Direct `setup` and `dashboard` retain their shortcuts; bare noninteractive/JSON invocation remains offline status. Menu/guide entry must not inspect tools or credentials. Demo remains synthetic, including `demo menu`. Do not add an onboarding-complete flag that changes routing.
+- The walkthrough defaults to persistent desktop setup: **Save & open Codex** is the primary completion action, with Save only and Preview available. Keep review/completion concise; explicit details reveal full paths, redacted diffs, and recovery commands. Preview must show the concrete proposed changes. Setup returns to the shell after completion or cancellation, including when entered through admin.
+- Admin tools call the existing command handlers. Choose missing AWS scope locally, then confirm each network operation with its profile, region, endpoint, and model when applicable. `--offline` refuses those actions; menu browsing cannot authenticate. Direct command flags remain explicit authorization without extra menu prompts.
+- Ask how to connect before listing AWS profiles: existing profile, IAM Identity Center SSO, AWS console sign-in, or hidden access-key/session-token entry. New connections require a name and explicit metadata-only confirmation. Authentication changes already confirmed remain if the user cancels the later Codex setup. Failed catalogs offer Change AWS connection as the primary recovery.
+- Desktop workspaces persist within helper state, keyed by AWS profile name and normalized absolute AWS config/credentials file paths, never by model, region, or file timestamps. Reuse the owned Codex, desktop-data, and recovery stores in place. Old `desktop-*` workspaces require explicit adoption because they lack AWS-file provenance; retain all unselected stores and keep interrupted adoptions recoverable. Never copy or merge authentication or transcripts. Preserve applicable managed requirements and reject effective `sqlite_home` paths outside the profile workspace.
+- An unchanged profile already running returns **already open**, without launch, focus, or termination. Refuse configuration/policy changes and adoption of an older running workspace until the user quits only that profile's app. A new profile launches separately with matching `--user-data-dir` and `CODEX_ELECTRON_USER_DATA_PATH`, plus its profile `CODEX_HOME`; either desktop-data control alone is insufficient. Retain the private per-launch temporary directory. Never use a kill/restart or ordinary app-opening fallback.
+- Save & open checks launch compatibility before saving and rechecks at launch. Save-only and demo skip that inspection. Select the newest inspected, valid installed copy; an unsupported copy must not hide another compatible installation. Builds 10789/10492 passed separate process, app-server, environment, and storage-isolation checks alongside existing apps. Retain the exact build gate; static presence of isolation controls alone does not validate a new build. Visual onboarding/history and relaunch after quitting remain separate checks.
+- `Codex · <profile>` is a helper label, not a verified window/Dock title override. No per-profile desktop naming control is verified in build 8109. The built-in Codex Dock icon setting changes shared app preferences; offer optional guidance without forcing it. Do not modify signed bundles or add a launcher fork to imply cosmetic isolation.
+- Automatic selection of an existing `aws-helper` Codex profile is walkthrough-only. Other commands use their explicit context. Dashboard catalog scope must match the refresh scope, including `--both-endpoints` and expanded `--region all`.
+- Preserve the neutral, teal, mint, and amber palette, with blue and AWS-orange walkthrough accents. Use a simple colored startup title; logo artwork has been shelved following user feedback. Keep separate helper/AWS profile/region lines after connection selection, the credential-source key, and no-color/plain paths. Display labels must not change raw source codes or imply verified access. Dashboard suggestions currently display commands; do not describe them as executable actions.
+- Keep offline inspection offline. In the walkthrough, confirming a profile and region loads that scope's Mantle catalog once; disclose the request before region confirmation. Back/Help must not retry automatically. `--offline` permits only cached/manual setup and rejects explicit AWS operations. Login, STS, and inference retain their separate operation paths.
+- AWS CLI selection belongs to `aws_cli.rs`: inspect PATH and standard installation locations with bounded version-only probes, deduplicate symlinks, and choose the newest detected v2. Retry inconclusive probes once within the shared deadline; distinguish unverified versions from confirmed old versions. An explicit `--aws-bin` stays pinned. Online setup/AWS operations require v2 2.22+, console sign-in requires 2.32+, and offline inspection remains usable without them. Menu/guide/demo entry must not trigger discovery. Never change the user's PATH or install AWS CLI automatically.
+- Review offers optional Verify this setup: explicitly confirm STS, show the actual account/ARN locally, then separately confirm one bounded synthetic model request. Failed identity must prevent inference. Demo bypasses every adapter and offline setup omits verification. Changed profile, region, or model clears in-memory verification; historical receipts never prove current task settings.
+- Expired/invalid SSO or console sessions offer Sign in again and retry through the configured source. Renewal has its own scoped confirmation, uses the shared 15-minute AWS CLI login path, and retains model/region/workspace selections. Failed/cancelled renewal must not retry automatically. Successful renewal invalidates catalogs/checks. Keep SSO sign-in region separate from Bedrock inference region; unknown metadata stays unknown.
+- Describe SSO renewal as selecting a profile, not isolating its AWS token cache: other profiles sharing the same SSO session/cache can observe renewal.
+- A failed `configure sso` means profile setup did not finish; browser authorization may already have succeeded. Keep login streams inherited and unrecorded. Give conditional account/permission-set guidance without claiming to have parsed AWS's output or verified an account. Failed setup must not promote partial profile writes into a usable connection.
+- Actual STS account/ARN belong only to the local walkthrough, never serialized observations or helper receipts. Retain only the existing redacted CheckResult. Distinguish catalog listing, a passed API request, and an unverified Codex task; completion supplies a first-task prompt without claiming the app test has run.
+- AWS CLI owns profile resolution, browser login, and refresh. Explicit new-connection setup may delegate SSO/console configuration or append a new profile to the selected standard AWS credentials file. Reject existing/default destinations for new profiles; preserve other profile data. Never put credentials in command arguments, UI drafts, logs, diagnostic types, or helper state. Keep input hidden even in plain mode and restore terminal state on every exit. Do not add a separate credential store, inference proxy, Codex fork, or IAM changes.
+- Keep AWS profiles distinct from Codex profiles. Preserve exact model IDs and separate Mantle and Runtime evidence. Runtime configuration stays gated until its independent Codex integration contract is validated.
+- Catalog failures must retain their sanitized cause and next step. Distinguish credential-helper/role failures, denied listing permissions, and genuine empty results. Show known native Codex targets first; other listed models require a compatibility warning. Preserve measured, version-scoped GPT-OSS limitations and identify Safeguard classifiers. Catalog visibility never proves invocation access. STS is endpoint-independent; its result's endpoint field identifies the selected check scope.
+- Preserve the config planner's preview/apply/restore boundaries, unknown TOML, comments, policy refusal, private backups, and conflict checks. Display `ConfigPlan.diff`, never its full `proposed` contents.
+- Do not infer active credentials or settings from process presence, STS success, catalog membership, or on-disk configuration. Project trust, live overrides, MDM/cloud requirements, and existing session state can remain unknown.
+- JSON defaults to the allowlisted redacted projection. `--local-details` is an explicit local metadata view; support reports always remain redacted. Never expose secrets, raw helper output, authentication responses, or untrusted terminal controls.
+- Keep private configuration, credentials, raw logs, neighboring projects, and temporary validation artifacts out of the repository.
+- Default tests use synthetic temporary roots, stub executables, and isolated state. Respect the session's authorized scope for optional live tests; never modify the active app/session configuration as a test shortcut.
+- Reuse an existing private desktop test workspace for follow-up launch checks, keeping its AWS profile name, AWS file paths, and helper state directory stable. Create a fresh workspace only when first-run behavior, cross-profile isolation, or a separately inspected app build requires one. Explain that fresh test workspaces start without history. Never close or restart the user's open Codex apps as test cleanup.
+- Run checks appropriate to the change. `make check` runs formatting, Clippy, and locked tests; `make build` builds the release binary. `make install` uses standard locked Cargo installation; no shell startup edits. `make package` creates an unsigned host archive/checksum and does not publish. For docs, verify commands against `src/cli.rs` and `src/app.rs`, links, and status consistency.
+- Record actual validation scope and results separately from product requirements. Do not claim unrun tests, live model/region coverage, Linux support, signed releases, or publication.
+- Respect authorization already provided by the user. These guidelines do not add an approval loop for routine reversible work.

codex_aws_helper-0.3.0/CHANGELOG.md

@@ -0,0 +1,57 @@
+# Changelog
+
+## 0.3.0
+
+- Add `plugin install`: prepare the bundled plugin, register its local
+  marketplace, and install it through Codex in one command.
+- Refresh the plugin after package upgrades or executable relocation while
+  preserving existing Codex provider settings and per-tool restrictions.
+- Add `plugin uninstall` to remove the managed plugin, marketplace, and
+  source files while retaining AWS credentials, provider settings, and recovery.
+- Add a PyPI release workflow with prebuilt macOS and Linux wheels for ARM64
+  and x86-64, a buildable source distribution, and GitHub Trusted Publishing.
+- Test each wheel through pip and uv with actual Codex plugin installation,
+  repeat installation, executable relocation, an MCP handshake, and uninstall.
+- Include the reviewed and tested 0.2.1 changes below.
+
+## 0.2.1
+
+These changes were developed privately and are included in the first PyPI
+release, 0.3.0.
+
+- Retry inconclusive AWS CLI version checks within a shared deadline and
+  distinguish detection failures from a confirmed outdated installation.
+- Preserve terminal foreground handoff when a sandbox permits inherited
+  terminal access but prevents reopening `/dev/tty`.
+- Support inspected Codex desktop builds 10789 and 10492; select the newest
+  compatible installed copy while preserving separate profile workspaces.
+- Restrict MCP restoration to the server's pinned Codex home, including
+  validation of the recovery record used at apply time.
+- Add Mexico Central to Runtime region discovery and retain the selected
+  endpoint in identity-check metadata.
+- Explain measured native GPT-OSS routing limitations and identify Safeguard
+  classifiers without treating a catalog listing as verified model access.
+- Keep dashboard controls visible in narrow terminals and repeat the profile
+  and destination before saving newly entered AWS credentials.
+
+See [the validation record](docs/validation.md) for the regional inference
+matrix, native Codex results, and remaining customer SSO and desktop checks.
+
+## 0.2.0
+
+- Add a local MCP server and Codex plugin for AWS environment inspection,
+  scoped model discovery, diagnostics, and guided configuration.
+- Ask for missing nonsecret settings through MCP form elicitation, with a
+  question-tool or conversation fallback.
+- Reuse the CLI's configuration planner, conflict checks, private backups,
+  and restoration through expiring, single-use preview IDs.
+- Embed the plugin and marketplace in the executable. Export a local bundle
+  pinned to the installed executable with `plugin export`.
+- Add Python wheel/source packaging with Maturin, public setup documentation,
+  and an MIT license.
+- Include the 0.1.10 CLI improvements: automatic AWS CLI discovery, newest-v2
+  selection, explicit executable overrides, and operation-specific version
+  requirements.
+
+The terminal workflow and its existing compatibility boundaries remain.
+See [the validation record](docs/validation.md) for measured release coverage.