ostepanian b3f5e45cc1 Add direct SigV4 transport to exec-server (#42781) ...

## Why

Allow remote exec servers to connect directly to AWS-hosted registries that
authenticate registry requests and WebSocket handshakes with AWS SigV4.

## What changed

- Add `--remote-transport direct` with SigV4 profile, region, and service
  options while keeping Noise as the default transport.
- Register the `direct_jsonrpc_v1` transport and carry plain exec-server
  JSON-RPC messages over the authenticated WebSocket.
- Reuse direct registrations across transient disconnects, refresh them after
  a `409 Conflict`, and require TLS for non-loopback endpoints.

## Testing

- Cover CLI validation and SigV4 request signing.
- Exercise direct registration, handshake retry behavior, JSON-RPC
  interoperability, and process recovery after reconnecting.

GitOrigin-RevId: 0755df330ba3abe5db0a516fdaa49338d9bbe2d2

2026-09-04 14:49:46 +00:00

..

common

Add direct SigV4 transport to exec-server (#42781)

2026-09-04 14:49:46 +00:00

file_system

Require filesystem backends to implement directory walks (#39749)

2026-08-20 17:16:52 +00:00

relay

Retry confirmed remote registration conflicts (#41219)

2026-08-27 23:24:21 +00:00

support

Move relay helpers into exec-server test support (#40712)

2026-08-25 21:31:40 +00:00

unit

Recover deferred environments after provisioning failure (#42388)

2026-09-02 23:49:29 +00:00

accepted_websocket.rs

Add direct SigV4 transport to exec-server (#42781)

2026-09-04 14:49:46 +00:00

capability_discovery.rs

Batch sandboxed capability root discovery (#40443)

2026-08-24 17:39:16 +00:00

chatgpt_cloudflare_affinity.rs

Add opt-in concurrent exec-server request dispatch (#36987)

2026-08-04 22:28:15 +00:00

deferred_environment.rs

Expose the last accepted environment ready report (#42403)

2026-09-03 01:12:36 +00:00

environment_config.rs

Propagate executor home directories into sandbox contexts (#41204)

2026-08-27 20:44:47 +00:00

environment.rs

Recover capability discovery after executor disconnects (#38420)

2026-08-13 19:14:30 +00:00

exec_process.rs

Allow trusted symlinks beneath CODEX_HOME on macOS (#42716)

2026-09-04 10:12:03 +00:00

file_stream.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

file_system_unix.rs

Batch sandboxed capability root discovery (#40443)

2026-08-24 17:39:16 +00:00

file_system_windows.rs

Improve no-follow filesystem behavior across platforms (#39666)

2026-08-20 08:32:11 +00:00

forward.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

health.rs

Decouple exec-server HTTP from reqwest types (#35059)

2026-07-24 00:53:05 +00:00

http_client.rs

Cache executor metadata from initialization (#40343)

2026-08-24 06:43:07 +00:00

http_request_logging.rs

Decouple exec-server HTTP from reqwest types (#35059)

2026-07-24 00:53:05 +00:00

http_request.rs

Resolve HTTP MCP bearer tokens in executor environments (#39926)

2026-08-21 12:50:15 +00:00

initialize.rs

Report the exec-server release version in environment info (#42270)

2026-09-02 12:07:32 +00:00

process.rs

Stabilize the detached exec-server session resume test (#42306)

2026-09-02 16:40:09 +00:00

relay.rs

Recover deferred environments after provisioning failure (#42388)

2026-09-02 23:49:29 +00:00

selected_capability_roots.rs

Initialize execution environments with the final HTTP policy (#34995)

2026-07-23 19:24:41 +00:00

websocket.rs

[codex] Trace exec-server JSON-RPC requests (#27466)

2026-06-24 12:50:18 -07:00