Anton Panasenko 1176913a6f Add stdin bearer authentication for exec-server registration (#59254) ...

## Why

Allow remote exec-server registration to use credentials independently of Codex login while retaining the usual local configuration and plugins.

## What changed

- Add `--registration-bearer-stdin` to read one newline-terminated bearer and use it for remote registration.
- Validate the bearer, require HTTPS or HTTP loopback for the registry, and disable process dumpability on Linux before reading the credential.
- Document the option and its distinction from rotating credentials via `--executor-credential-stdin`.

## Testing

Add integration coverage for registration with the supplied bearer across desktop sign-in states, rejection of non-loopback HTTP registries, and restricted process environment access on Linux. Update CLI help snapshots.

GitOrigin-RevId: da99492270c5dc6bb5e0cac41947e9c999a72b75

2026-11-03 23:22:28 +00:00

..

e2e_benches

bench: add codex help e2e macrobenchmark (#31295)

2026-07-09 17:23:44 -07:00

src

Add stdin bearer authentication for exec-server registration (#59254)

2026-11-03 23:22:28 +00:00

tests

Enable Bedrock onboarding through the local daemon (#59068)

2026-11-03 05:55:13 +00:00

BUILD.bazel

Isolate daemon package tests to reduce disk contention (#53897)

2026-10-14 07:13:22 +00:00

build.rs

Add WebRTC media transport to realtime TUI (#17058)

2026-04-08 10:26:55 -07:00

Cargo.toml

Add a standalone codex-exec-server executable (#57589)

2026-10-27 23:13:53 +00:00