Implement durable OAuth MCP bridge with local Codex worker and deployment guides

examples/local_env.py

@@ -0,0 +1,36 @@
+"""Generate isolated loopback credentials. Run from the repository root."""
+
+import os
+import secrets
+from pathlib import Path
+
+os.umask(0o077)
+root = Path.cwd().resolve()
+private = root / "private"
+private.mkdir(mode=0o700, exist_ok=True)
+file = private / "local.env"
+if file.exists():
+    raise SystemExit("Refusing to overwrite existing local environment")
+(root / "demo").mkdir(exist_ok=True)
+worker = secrets.token_urlsafe(48)
+mcp = secrets.token_urlsafe(48)
+file.write_text(
+    "\n".join(
+        [
+            "BRIDGE_MODE=development",
+            "BRIDGE_PUBLIC_URL=http://127.0.0.1:8000",
+            "BRIDGE_SERVER_URL=http://127.0.0.1:8000",
+            "BRIDGE_WORKER_TOKEN=" + worker,
+            "BRIDGE_DEV_MCP_TOKEN=" + mcp,
+            "BRIDGE_DATABASE=private/server.sqlite",
+            "BRIDGE_WORKER_STATE=private/worker.sqlite",
+            "BRIDGE_WORKSPACES=demo",
+            'BRIDGE_WORKSPACE_MAP=\'{"demo":"' + str(root / "demo") + "\"}'",
+            "BRIDGE_CODEX_MODEL=gpt-6-luna",
+            "BRIDGE_POLL_SECONDS=2",
+            "",
+        ]
+    )
+)
+os.chmod(file, 0o600)
+print("Generated private/local.env; tokens are not printed")