SanMar AWS MFA Notifier

Read-only VS Code extension for reviewing validated AWS MFA requests created by Secrets Broker.

Security boundary

The extension:

reads only ~/.iac/pending-unlocks/awsmfa_*.json;
requires a trusted, non-virtual workspace;
validates request ownership, mode, size, schema, filename/ID binding, account, expiry, and canonical operator command;
displays only non-secret request metadata through native VS Code prompts;
never accepts an MFA code, password, passphrase, token, or credential;
never approves or denies requests, writes broker state, starts a process, opens an external URL, manages SSH, or modifies the vault;
directs operators to run the exact vault-cli aws-mfa <id> command in their own trusted terminal.

Commands

Command	Purpose
`SanMar: Review AWS MFA Requests`	Select and review a validated request
`SanMar: Refresh AWS MFA Requests`	Refresh the bounded request snapshot

Configuration

Setting	Scope	Default	Range
`sanmarInteractions.pollIntervalMs`	Machine	`5000` ms	`1000`-`60000` ms

The request directory and operator command are fixed by the release. Workspace settings cannot redirect either path.

Operator workflow

Review requester, purpose, account, region, duration, device, and expiry.
Run the displayed command in your own trusted terminal:

/usr/local/lib/secrets-broker/current/vault-cli.sh aws-mfa awsmfa_ <review_digest>


3. Enter the MFA code only at the hidden terminal prompt.
4. Never paste an MFA code or credential into VS Code, chat, MCP, arguments,
environment variables, or files.

## Build and test

```bash
npm --prefix /workspaces/secrets-broker ci
npm --prefix /workspaces/secrets-broker run build --workspace=packages/vscode-interaction-notifier
npm --prefix /workspaces/secrets-broker run test --workspace=packages/vscode-interaction-notifier
npm --prefix /workspaces/secrets-broker run package:extension

Tagged releases are built with pinned tooling, scanned by npm audit, emitted with an SBOM and SHA-256 manifest, attested with GitHub OIDC provenance, and published through the SanMarIaC Marketplace publisher. The devcontainer installer accepts only the approved publisher and exact version; it never installs a workspace VSIX.