Stop asking for CODEX_HOME when adding a Codex plugin

[RhysSullivan]

Adding a Codex plugin could put you in front of a masked credential field for CODEX_HOME — a path the scanner already resolved off your own machine.

The cause is that addServer had one env channel, and it makes every variable a credential: the value is declared as a stdio_env method and the user is asked to type it at the connect step. Right for an API key, wrong for a machine-derived path.

Stdio integrations can now carry non-secret environment as static configuration (staticEnv), stored on the integration and injected at spawn, and never declared as auth. The Codex plugins use it.

Before / after, adding Computer Use:

	before	after
authenticationTemplate	[{ stdio_env, vars: [CODEX_HOME] }]	[{ none }]
connection	default (template env, holding a "secret")	default (template none)
user is asked for	CODEX_HOME	nothing

Verified on a clean instance: the integration declares no auth, its connection is created for it, 11 tools sync, and a live list_apps call returns real data — so the static env still reaches the spawn.

Also removes a failure mode rather than just a form: with no secret, there is nothing that can go missing and leave the integration unusable.

🤖 Generated with Claude Code

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	cc57ac5	Aug 30 2026, 12:57 AM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	cc57ac5	Commit Preview URL Branch Preview URL	Aug 30 2026, 12:56 AM

[github-actions]

Cloudflare preview

Torn down — the PR is closed.

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1863

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1863

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1863

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1863

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1863

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1863

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1863

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1863

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1863

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1863

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1863

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1863

executor

npm i https://pkg.pr.new/executor@1863

commit: cc57ac5