[APP-3801] implement remote environments auth (#9331)

crates/warp_cli/src/lib.rs

@@ -61,6 +61,15 @@ pub struct ParentOpts {
     pub handle: Option<process_handle::ProcessHandle>,
 }
 
+/// Hidden worker args used to scope remote-server proxy/daemon sockets by
+/// Warp identity without exposing credentials.
+#[derive(Debug, Clone, Default, clap::Args)]
+pub struct RemoteServerIdentityArgs {
+    /// Non-secret identity partition key for the remote-server daemon.
+    #[arg(long = "identity-key", hide = true)]
+    pub identity_key: String,
+}
+
 /// Global options that apply to all CLI commands.
 #[derive(Debug, Default, Clone, clap::Args)]
 pub struct GlobalOptions {
@@ -437,14 +446,14 @@ pub enum WorkerCommand {
     /// to the daemon via a Unix domain socket.
     #[cfg(not(target_family = "wasm"))]
     #[clap(hide = true)]
-    RemoteServerProxy,
+    RemoteServerProxy(RemoteServerIdentityArgs),
 
     /// Run the long-lived remote development server daemon.
     /// Listens on a Unix domain socket and accepts multiple concurrent
     /// connections from proxy processes.
     #[cfg(not(target_family = "wasm"))]
     #[clap(hide = true)]
-    RemoteServerDaemon,
+    RemoteServerDaemon(RemoteServerIdentityArgs),
 
     /// Run a headless ripgrep search worker.
     #[cfg(not(target_family = "wasm"))]