ostepanian b3f5e45cc1 Add direct SigV4 transport to exec-server (#42781) ...

## Why

Allow remote exec servers to connect directly to AWS-hosted registries that
authenticate registry requests and WebSocket handshakes with AWS SigV4.

## What changed

- Add `--remote-transport direct` with SigV4 profile, region, and service
  options while keeping Noise as the default transport.
- Register the `direct_jsonrpc_v1` transport and carry plain exec-server
  JSON-RPC messages over the authenticated WebSocket.
- Reuse direct registrations across transient disconnects, refresh them after
  a `409 Conflict`, and require TLS for non-loopback endpoints.

## Testing

- Cover CLI validation and SigV4 request signing.
- Exercise direct registration, handshake retry behavior, JSON-RPC
  interoperability, and process recovery after reconnecting.

GitOrigin-RevId: 0755df330ba3abe5db0a516fdaa49338d9bbe2d2

2026-09-04 14:49:46 +00:00

..

exec_server.rs

Add direct SigV4 transport to exec-server (#42781)

2026-09-04 14:49:46 +00:00

fake_bwrap.rs

Batch sandboxed capability root discovery (#40443)

2026-08-24 17:39:16 +00:00

mod.rs

Allow trusted symlinks beneath CODEX_HOME on macOS (#42716)

2026-09-04 10:12:03 +00:00

relay.rs

Move relay helpers into exec-server test support (#40712)

2026-08-25 21:31:40 +00:00