Anton Panasenko 1176913a6f Add stdin bearer authentication for exec-server registration (#59254) ...

## Why

Allow remote exec-server registration to use credentials independently of Codex login while retaining the usual local configuration and plugins.

## What changed

- Add `--registration-bearer-stdin` to read one newline-terminated bearer and use it for remote registration.
- Validate the bearer, require HTTPS or HTTP loopback for the registry, and disable process dumpability on Linux before reading the credential.
- Document the option and its distinction from rotating credentials via `--executor-credential-stdin`.

## Testing

Add integration coverage for registration with the supplied bearer across desktop sign-in states, rejection of non-loopback HTTP registries, and restricted process environment access on Linux. Update CLI help snapshots.

GitOrigin-RevId: da99492270c5dc6bb5e0cac41947e9c999a72b75

2026-11-03 23:22:28 +00:00

..

bin

Add managed enforcement of DELETE journaling on NFS (#57225)

2026-10-26 20:10:45 +00:00

debug_sandbox

Load cloud config for sandbox and remote exec-server commands (#57270)

2026-10-26 21:31:28 +00:00

desktop_app

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

doctor

Expose system proxy support as an experimental setting (#58157)

2026-10-29 19:16:28 +00:00

snapshots

Add stdin bearer authentication for exec-server registration (#59254)

2026-11-03 23:22:28 +00:00

app_cmd.rs

Support ChatGPT-branded Desktop app builds (#33901)

2026-07-17 20:46:18 +00:00

cloud_config.rs

Integrate config-server policies with startup and authentication (#57175)

2026-10-26 18:14:57 +00:00

config_override_args_tests.rs

Preserve config overrides across CLI subcommand boundaries (#56022)

2026-10-22 00:07:50 +00:00

config_override_args.rs

Add a standalone codex-exec-server executable (#57589)

2026-10-27 23:13:53 +00:00

daemon_install_tests.rs

Allow daemon updates to restore pinned packages to latest stable (#45780)

2026-09-15 19:51:06 +00:00

daemon_install.rs

Allow daemon updates to restore pinned packages to latest stable (#45780)

2026-09-15 19:51:06 +00:00

daemon_telemetry.rs

Record daemon startup and update telemetry with consent handling (#46126)

2026-09-17 05:26:45 +00:00

daemon_update_tests.rs

Run package updates outside the project on non-Windows platforms (#58403)

2026-10-30 18:12:10 +00:00

debug_sandbox.rs

Enforce managed MXC requirements on Windows (#52193)

2026-10-08 17:48:32 +00:00

doctor.rs

Enable uploaded audio with durable rejection recovery (#59234)

2026-11-03 21:24:16 +00:00

exec_args_tests.rs

Add per-turn Cyber access program selection to exec and the SDK (#49939)

2026-10-01 08:57:53 +00:00

exec_server_args_tests.rs

Add a standalone codex-exec-server executable (#57589)

2026-10-27 23:13:53 +00:00

exit_status.rs

feat: experimental env var: CODEX_SANDBOX_NETWORK_DISABLED (#879)

2025-05-09 18:29:34 -07:00

lib.rs

Integrate config-server policies with startup and authentication (#57175)

2026-10-26 18:14:57 +00:00

login_storage_tests.rs

Track credential storage outcomes and redact sensitive errors (#49384)

2026-09-29 22:24:09 +00:00

login.rs

Integrate config-server policies with startup and authentication (#57175)

2026-10-26 18:14:57 +00:00

main.rs

Wire shared runtime authentication through threads and API clients (#59177)

2026-11-03 15:02:57 +00:00

marketplace_cmd.rs

Report managed filesystem policy in codex doctor (#42821)

2026-09-04 18:23:10 +00:00

mcp_cmd_tests.rs

Enforce application network policy in standalone MCP commands (#52215)

2026-10-08 18:22:39 +00:00

mcp_cmd.rs

Fix enterprise MCP credential selection and reauthentication (#55859)

2026-10-21 10:40:59 +00:00

mcp_login_tests.rs

Add manual callback input to MCP OAuth login (#44629)

2026-09-10 19:51:52 +00:00

mcp_login.rs

Support client secrets for pre-registered MCP OAuth clients (#47891)

2026-09-24 17:26:18 +00:00

migrate_nfs_db.rs

Report when NFS database migration finds no databases (#57357)

2026-10-27 04:46:24 +00:00

migrate_rollouts.rs

Report thread storage changes after rollout migration (#38579)

2026-08-14 13:40:35 +00:00

plugin_cmd_tests.rs

Handle broken pipes gracefully in plugin list output (#53109)

2026-10-11 12:38:29 +00:00

plugin_cmd.rs

Handle broken pipes gracefully in plugin list output (#53109)

2026-10-11 12:38:29 +00:00

queue_cmd.rs

Reject unsupported options for codex queue (#57273)

2026-10-26 21:37:03 +00:00

remote_control_cmd.rs

Retire the daemon_auto_start feature flag (#58940)

2026-11-02 18:31:19 +00:00

sandbox_setup.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

sandbox_uninstall.rs

Add a CLI command to uninstall the legacy Windows sandbox (#50437)

2026-10-02 21:51:46 +00:00

state_db_recovery.rs

Classify SQLite corruption using typed error codes (#49710)

2026-09-30 19:00:00 +00:00

wsl_paths.rs

[codex] reduce module visibility (#16978)

2026-04-07 08:03:35 -07:00