riley-oai ca6fb194b6 Wire app-server user verification RPCs to the native provider (#43568) ...

## Why

The existing `userVerification/*` handlers always returned unavailability, leaving local clients unable to use the native verification provider.

## What changed

- Dispatch status, enrollment, deletion, and challenge signing through an account-scoped provider. Enrollment creates or reuses a local key; it does not register credentials with a server.
- Restrict enrollment, deletion, and signing to stdio and in-process connections, rejecting WebSocket and remote-control callers before parameter validation.
- Bound native work to one operation per service with a 120-second timeout, and propagate in-process caller cancellation. Recheck connection, cancellation, and authentication state before delivering results, including after waiting for response queue capacity.
- Add device-gated verification capability wiring for the experimental in-process `codex-tui` client, with automatic activation still disabled by default.

## Testing

Add tests for local key reuse and deletion, decoded challenge signing, cancellation, authentication changes during verification and response queuing, concurrent worker rejection, and stdio/WebSocket RPC behavior.

GitOrigin-RevId: 7eac15a5ffb049d27bf8fedcfbae19a49a3f6a3d

2026-09-07 19:34:23 +00:00

..

lib.rs

Wire app-server user verification RPCs to the native provider (#43568)

2026-09-07 19:34:23 +00:00

path.rs

[1 of 3] Support long raw TUI goal objectives (#27508)

2026-06-11 22:26:31 -07:00

remote.rs

Support the app-server daemon on Windows (#42405)

2026-09-03 01:26:35 +00:00