Merge origin/develop into codex-integration-by-hooks

Signed-off-by: Jin Ku <jin.ku@sendbird.com>

Author: sf-jin-ku

.github/workflows/ci.yml

@@ -14,6 +14,18 @@ env:
 jobs:
   # ─── Fast gates (fail early, save CI minutes) ───
 
+  check-test-presence:
+    name: test presence
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 50
+      - name: Check filter modules have tests
+        run: |
+          git fetch origin "${{ github.base_ref }}" --depth=1 || true
+          bash scripts/check-test-presence.sh "origin/${{ github.base_ref }}"
+
   fmt:
     name: fmt
     runs-on: ubuntu-latest

CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to rtk (Rust Token Killer) will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+### Features
+
+* **aws:** expand CLI filters from 8 to 25 subcommands — CloudWatch Logs, CloudFormation events, Lambda, IAM, DynamoDB (with type unwrapping), ECS tasks, EC2 security groups, S3API objects, S3 sync/cp, EKS, SQS, Secrets Manager ([#885](https://github.com/rtk-ai/rtk/pull/885))
+* **aws:** add shared runner `run_aws_filtered()` eliminating per-handler boilerplate
+* **tee:** add `force_tee_hint()` — truncated output saves full data to file with recovery hint
+
 ## [0.34.2](https://github.com/rtk-ai/rtk/compare/v0.34.1...v0.34.2) (2026-03-30)
 
 

README.md

@@ -201,6 +201,18 @@ rtk bundle install              # Ruby gems (strip Using lines)
 rtk prisma generate             # Schema generation (no ASCII art)
 ```
 
+### AWS
+```bash
+rtk aws sts get-caller-identity # One-line identity
+rtk aws ec2 describe-instances  # Compact instance list
+rtk aws lambda list-functions   # Name/runtime/memory (strips secrets)
+rtk aws logs get-log-events     # Timestamped messages only
+rtk aws cloudformation describe-stack-events  # Failures first
+rtk aws dynamodb scan           # Unwraps type annotations
+rtk aws iam list-roles          # Strips policy documents
+rtk aws s3 ls                   # Truncated with tee recovery
+```
+
 ### Containers
 ```bash
 rtk docker ps                   # Compact container list
@@ -434,6 +446,7 @@ Blocked on upstream BeforeToolCallback support ([mistral-vibe#531](https://githu
 | `rspec` / `bundle exec rspec` | `rtk rspec` |
 | `rubocop` / `bundle exec rubocop` | `rtk rubocop` |
 | `bundle install/update` | `rtk bundle ...` |
+| `aws sts/ec2/lambda/...` | `rtk aws ...` |
 | `docker ps/images/logs` | `rtk docker ...` |
 | `kubectl get/logs` | `rtk kubectl ...` |
 | `curl` | `rtk curl` |

docs/maintainers/MAINTAINERS_APPLY.md

@@ -22,7 +22,7 @@ To apply, you should have:
 
 ### ✍️ How to Apply
 
-1. Open a discussion in [rtk-ai/rtk Maintainers Applications · Discussions · GitHub]() titled **Maintainer Application: [Your GitHub Handle]**
+1. Open a discussion in [rtk-ai/rtk Maintainers Applications · Discussions · GitHub](https://github.com/rtk-ai/rtk/discussions/categories/maintainers-applications) titled **Maintainer Application: [Your GitHub Handle]**
 2. In your application, include:
    - The ecosystem(s) you're interested in
    - Your experience with those ecosystems

scripts/check-test-presence.sh

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# check-test-presence.sh — CI guard: new/modified *_cmd.rs files must have #[cfg(test)]
+#
+# Usage:
+#   bash scripts/check-test-presence.sh [BASE_BRANCH]
+#   bash scripts/check-test-presence.sh --self-test
+#
+# BASE_BRANCH defaults to origin/develop
+
+if [ "${1:-}" = "--self-test" ]; then
+    # Self-test: create a tempfile without tests and verify the check catches it
+    TMPFILE="src/cmds/system/_rtk_check_self_test_cmd.rs"
+    echo "pub fn run() {}" > "$TMPFILE"
+    trap 'rm -f "$TMPFILE"' EXIT
+
+    if grep -q '#\[cfg(test)\]' "$TMPFILE"; then
+        echo "FAIL: self-test broken (false negative)"
+        exit 1
+    fi
+    rm "$TMPFILE"
+    trap - EXIT
+    echo "PASS: --self-test detection works correctly"
+    exit 0
+fi
+
+BASE_BRANCH="${1:-origin/develop}"
+EXIT_CODE=0
+
+# Find *_cmd.rs files that were added or modified in this PR
+CHANGED_FILES=$(git diff --name-only --diff-filter=AM --no-renames "$BASE_BRANCH"...HEAD \
+    2>/dev/null | grep -E 'src/cmds/.+_cmd\.rs$' || true)
+
+if [ -z "$CHANGED_FILES" ]; then
+    echo "check-test-presence: no *_cmd.rs changes detected — OK"
+    exit 0
+fi
+
+echo "check-test-presence: checking $(echo "$CHANGED_FILES" | wc -l | tr -d ' ') filter module(s)..."
+echo ""
+
+while IFS= read -r file; do
+    if [ ! -f "$file" ]; then
+        continue
+    fi
+
+    if grep -q '#\[cfg(test)\]' "$file"; then
+        echo "  PASS  $file"
+    else
+        echo "  FAIL  $file"
+        echo "        Missing #[cfg(test)] module."
+        echo "        Every *_cmd.rs filter must include inline unit tests."
+        echo "        Reference: src/cmds/cloud/aws_cmd.rs"
+        echo ""
+        EXIT_CODE=1
+    fi
+done <<< "$CHANGED_FILES"
+
+echo ""
+
+if [ "$EXIT_CODE" -ne 0 ]; then
+    echo "check-test-presence: FAILED — add tests before merging."
+    echo "See .claude/rules/cli-testing.md for the testing guide."
+else
+    echo "check-test-presence: all filter modules have tests — OK"
+fi
+
+exit "$EXIT_CODE"

src/cmds/cloud/README.md

@@ -4,7 +4,7 @@
 
 ## Specifics
 
-- `aws_cmd.rs` forces `--output json` for structured parsing
+- `aws_cmd.rs` — 25 specialized filters covering STS, S3, EC2, ECS, RDS, CloudFormation, CloudWatch Logs, Lambda, IAM, DynamoDB, EKS, SQS, Secrets Manager. Forces `--output json` for structured parsing, uses `force_tee_hint()` for truncation recovery, strips Lambda secrets. Shared runner `run_aws_filtered()` handles boilerplate for JSON-based filters; text-based filters (S3 ls, S3 sync/cp) have dedicated runners
 - `container.rs` handles both Docker and Kubernetes; `DockerCommands` and `KubectlCommands` sub-enums in `main.rs` route to `container::run()` -- uses passthrough for unknown subcommands
 - `curl_cmd.rs` auto-detects JSON responses and shows schema (structure without values)
 - `wget_cmd.rs` wraps wget with output filtering