Dmitriy Kovalenko b91f2515f5 Ship the standalone executor in release packages (#57837) ...

## What changed

- Include `codex-exec-server` in canonical CLI and app-server packages and advertise its path through `execServer` in `codex-package.json`.
- Build and sign the executor in release workflows, preserve signed prebuilt inputs, and verify packaged signatures. Use empty entitlements for the macOS executor.
- Have installers check for the executor when package metadata advertises it, while continuing to accept older packages.
- Omit the standalone executor and its manifest entry from npm packages to stay within npm's package size limit. Keep `codex exec-server` and its runtime helpers available.

## Testing

Add package smoke tests for executor initialization, version reporting, filesystem and process sandbox enforcement, and invalid-argument/configuration parity with `codex exec-server`. Extend archive, npm staging, and macOS signing tests to cover executor contents, executable permissions, preserved bytes, and entitlement verification.

GitOrigin-RevId: bc741fe7faa6fe631d076de18d448c55247c23c7

2026-10-28 21:09:05 +00:00

..

src

Add a standalone codex-exec-server executable (#57589)

2026-10-27 23:13:53 +00:00

tests

Add a standalone codex-exec-server executable (#57589)

2026-10-27 23:13:53 +00:00

BUILD.bazel

Ship the standalone executor in release packages (#57837)

2026-10-28 21:09:05 +00:00

Cargo.toml

Add a standalone codex-exec-server executable (#57589)

2026-10-27 23:13:53 +00:00