jif 93c54bca38 Resolve HTTP MCP bearer tokens in executor environments (#39926) ...

## Why

Executor-owned HTTP MCP servers need to read their bearer credentials from the
selected executor environment instead of the host process.

## What changed

- Preserve `bearer_token_env_var` for executor-owned HTTP MCP configurations and
  resolve it when the executor sends each request.
- Extend delegated HTTP headers with executor-local environment references while
  rejecting missing, empty, or protected credential variables.
- Keep transport-provided bearer authentication compatible with MCP redirect and
  OAuth handling without sending a placeholder authorization value.

## Testing

- Cover authenticated executor-owned MCP requests end to end.
- Cover delegated header resolution and rejection of protected variables.
- Cover parsing executor-owned bearer configuration and transport-provided bearer
  behavior.

GitOrigin-RevId: 442bf7382198ffb69eba797eb36d4c74faabda88

2026-08-21 12:50:15 +00:00

..

common

Decouple Noise relay streams from JSON-RPC processing (#39235)

2026-08-18 17:18:50 +00:00

file_system

Require filesystem backends to implement directory walks (#39749)

2026-08-20 17:16:52 +00:00

relay

Decouple Noise relay streams from JSON-RPC processing (#39235)

2026-08-18 17:18:50 +00:00

support

Initialize execution environments with the final HTTP policy (#34995)

2026-07-23 19:24:41 +00:00

accepted_websocket.rs

Support host-accepted exec-server WebSockets (#39786)

2026-08-20 19:33:48 +00:00

capability_discovery.rs

Preserve filesystem permission path conventions (#39084)

2026-08-17 21:49:30 +00:00

chatgpt_cloudflare_affinity.rs

Add opt-in concurrent exec-server request dispatch (#36987)

2026-08-04 22:28:15 +00:00

deferred_environment.rs

Consolidate deferred environment provisioning APIs (#37340)

2026-08-07 00:32:59 +00:00

environment_config.rs

Advertise environment config read support (#37654)

2026-08-09 03:05:10 +00:00

environment.rs

Recover capability discovery after executor disconnects (#38420)

2026-08-13 19:14:30 +00:00

exec_process.rs

Honor request PATH in exec-server shell snapshots (#39917)

2026-08-21 12:08:02 +00:00

file_stream.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

file_system_unix.rs

Require filesystem backends to implement directory walks (#39749)

2026-08-20 17:16:52 +00:00

file_system_windows.rs

Improve no-follow filesystem behavior across platforms (#39666)

2026-08-20 08:32:11 +00:00

forward.rs

Cache shell snapshots in the exec server (#39756)

2026-08-20 17:39:06 +00:00

health.rs

Decouple exec-server HTTP from reqwest types (#35059)

2026-07-24 00:53:05 +00:00

http_client.rs

Resolve HTTP MCP bearer tokens in executor environments (#39926)

2026-08-21 12:50:15 +00:00

http_request_logging.rs

Decouple exec-server HTTP from reqwest types (#35059)

2026-07-24 00:53:05 +00:00

http_request.rs

Resolve HTTP MCP bearer tokens in executor environments (#39926)

2026-08-21 12:50:15 +00:00

initialize.rs

Add opt-in concurrent exec-server request dispatch (#36987)

2026-08-04 22:28:15 +00:00

process.rs

Collect plugin metrics from remote executors (#38283)

2026-08-13 00:39:04 +00:00

relay.rs

Cache shell snapshots in the exec server (#39756)

2026-08-20 17:39:06 +00:00

selected_capability_roots.rs

Initialize execution environments with the final HTTP policy (#34995)

2026-07-23 19:24:41 +00:00

websocket.rs

[codex] Trace exec-server JSON-RPC requests (#27466)

2026-06-24 12:50:18 -07:00