alexsong-oai 4f6d43c267 Support managed AWS access keys for Amazon Bedrock (#40481) ...

## What changed

- Add the experimental `amazonBedrockAccessKeys` app-server login flow, persist its credentials in the configured auth store, and use them for SigV4-signed Bedrock requests.
- Report `bedrockAccessKeys` as a distinct auth mode and document access-key login alongside AWS profile and environment credential setup.
- Clear the selected Bedrock provider, AWS settings, and Bedrock-specific model on logout while leaving external AWS credentials and `.env` untouched.
- Reject managed access-key login when higher-precedence configuration would prevent its region or profile settings from taking effect.

## Testing

- Cover access-key login, storage, request signing, configuration conflicts, status reporting, and logout cleanup.

GitOrigin-RevId: bbf297887c6503d3651ceb2aad85c4d626e32723

2026-08-24 21:39:48 +00:00

..

command_migration

Load plugin skill roots through the host skills service (#37440)

2026-08-07 13:23:23 +00:00

marketplace_add

Keep marketplace upgrade state out of config (#39595)

2026-08-20 05:24:56 +00:00

marketplace_upgrade

Keep marketplace upgrade state out of config (#39595)

2026-08-20 05:24:56 +00:00

remote

Harden remote installed plugin cache reconciliation (#40015)

2026-08-21 21:28:16 +00:00

startup_sync

Honor system proxy settings for remote plugins (#34509)

2026-07-21 10:05:06 +00:00

agent_plugin_manifest_tests.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

agent_plugin_manifest.rs

Support Agent Plugins manifests (#35105)

2026-07-24 05:59:16 +00:00

agent_plugin_mcp_overlay.rs

Forward local env vars to Agent Plugin MCP servers (#40363)

2026-08-24 08:43:25 +00:00

app_mcp_routing_tests.rs

[codex] Centralize plugin auth capability filtering (#27902)

2026-06-16 00:13:27 +00:00

app_mcp_routing.rs

auth: move domain mode below app wire types (#29721)

2026-06-24 03:10:20 +00:00

artifact_operation_tests.rs

Track artifact operations from trusted plugin markers (#38057)

2026-08-11 19:26:41 +00:00

artifact_operation.rs

Track artifact operations from trusted plugin markers (#38057)

2026-08-11 19:26:41 +00:00

command_migration_tests.rs

Migrate plugin commands into skills on install (#33411)

2026-07-15 19:51:37 +00:00

command_migration.rs

Load plugin skill roots through the host skills service (#37440)

2026-08-07 13:23:23 +00:00

discoverable_tests.rs

Harden remote installed plugin cache reconciliation (#40015)

2026-08-21 21:28:16 +00:00

discoverable.rs

Move skill config rule resolution into codex-config (#37466)

2026-08-07 16:20:38 +00:00

error_subtype.rs

Improve plugin install failure analytics (#37645)

2026-08-09 01:03:34 +00:00

executor_hooks_tests.rs

Run allowlisted executor plugin stop hooks (#40009)

2026-08-21 21:01:59 +00:00

executor_hooks.rs

Run allowlisted executor plugin stop hooks (#40009)

2026-08-21 21:01:59 +00:00

git_policy.rs

Isolate automatic plugin Git operations (#39520)

2026-08-19 17:34:00 +00:00

http_client_selector.rs

Respect system proxies during plugin startup sync (#34506)

2026-07-21 09:46:00 +00:00

installed_marketplaces.rs

[plugins] Enforce marketplace source policy at runtime (#29691)

2026-06-27 15:22:05 -07:00

lib.rs

Harden remote installed plugin cache reconciliation (#40015)

2026-08-21 21:28:16 +00:00

loader_tests.rs

Strengthen Agent Plugin MCP environment overlay tests (#40410)

2026-08-24 14:37:48 +00:00

loader.rs

Forward local env vars to Agent Plugin MCP servers (#40363)

2026-08-24 08:43:25 +00:00

manager_tests.rs

Harden remote installed plugin cache reconciliation (#40015)

2026-08-21 21:28:16 +00:00

manager.rs

Harden remote installed plugin cache reconciliation (#40015)

2026-08-21 21:28:16 +00:00

manifest.rs

Enforce Agent Plugin runtime boundaries (#37027)

2026-08-05 04:54:33 +00:00

marketplace_add.rs

[plugins] Enforce marketplace source admission requirements (#29753)

2026-06-23 20:13:11 -07:00

marketplace_policy_tests.rs

Prevent marketplace identity spoofing (#39165)

2026-08-18 07:56:41 +00:00

marketplace_policy.rs

Prevent marketplace identity spoofing (#39165)

2026-08-18 07:56:41 +00:00

marketplace_remove.rs

Keep marketplace upgrade state out of config (#39595)

2026-08-20 05:24:56 +00:00

marketplace_tests.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

marketplace_upgrade_tests.rs

Keep marketplace upgrade state out of config (#39595)

2026-08-20 05:24:56 +00:00

marketplace_upgrade.rs

Keep marketplace upgrade state out of config (#39595)

2026-08-20 05:24:56 +00:00

marketplace.rs

Add Cursor support to setup import (#33426)

2026-07-15 21:03:49 +00:00

npm_source_tests.rs

[codex] Support npm marketplace plugin sources (#29375)

2026-06-26 17:24:46 -04:00

npm_source.rs

[codex] Support npm marketplace plugin sources (#29375)

2026-06-26 17:24:46 -04:00

plugin_bundle_archive_tests.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

plugin_bundle_archive.rs

Support portable Agent Plugins throughout installation (#36544)

2026-08-02 02:29:45 +00:00

plugin_metrics_sidecar_tests.rs

Collect plugin metrics from remote executors (#38283)

2026-08-13 00:39:04 +00:00

plugin_metrics_sidecar.rs

Remove private executor directory creation (#39736)

2026-08-20 16:22:45 +00:00

plugin_metrics.rs

Add manifest-defined metrics for trusted plugin scripts (#38238)

2026-08-12 19:09:48 +00:00

provider_tests.rs

Require filesystem backends to implement directory walks (#39749)

2026-08-20 17:16:52 +00:00

provider.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

recommended_plugin_install.rs

Hydrate recommended plugin metadata on selection (#39143)

2026-08-18 05:42:39 +00:00

remote_bundle.rs

Improve plugin install failure analytics (#37645)

2026-08-09 01:03:34 +00:00

remote_legacy.rs

Improve plugin install failure analytics (#37645)

2026-08-09 01:03:34 +00:00

remote_plugin_id_resolver.rs

Propagate remote plugin IDs to skill metadata (#35261)

2026-07-24 23:36:11 +00:00

remote_tests.rs

Hydrate recommended plugin metadata on selection (#39143)

2026-08-18 05:42:39 +00:00

remote.rs

Harden remote installed plugin cache reconciliation (#40015)

2026-08-21 21:28:16 +00:00

script_attribution_tests.rs

Require approval for commands with dynamic shell words (#39159)

2026-08-18 07:26:21 +00:00

script_attribution.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

skill_snapshots.rs

Unify plugin skill loading with the host skill service (#37444)

2026-08-07 13:54:24 +00:00

startup_sync_tests.rs

Test plugin sync isolation from repository Git config (#39585)

2026-08-20 04:59:20 +00:00

startup_sync.rs

Test plugin sync isolation from repository Git config (#39585)

2026-08-20 04:59:20 +00:00

store_tests.rs

Harden plugin manifest handling during installation (#39590)

2026-08-20 05:10:57 +00:00

store.rs

Harden plugin manifest handling during installation (#39590)

2026-08-20 05:10:57 +00:00

test_support.rs

Support managed AWS access keys for Amazon Bedrock (#40481)

2026-08-24 21:39:48 +00:00

toggles.rs

Extract plugin loading and marketplace logic into codex-core-plugins (#18070)

2026-04-15 23:13:17 -07:00

tool_suggest_metadata.rs

Move skill config rule resolution into codex-config (#37466)

2026-08-07 16:20:38 +00:00