viyatb-oai 16e578dd1d Add rotating stdin credentials for remote exec-server (#54434) ...

## What changed

- Add `--executor-credential-stdin` to read newline-delimited JSON credentials bound to the configured environment. Require an initial credential within 30 seconds and accept subsequent rotations.
- Reject expired credentials on each request, and stop the executor on invalid input or stdin closure. Limit credential frames to 16 KiB.
- Use scoped bearer authentication for registry requests without account credential fallback or WebSocket authentication headers. Skip workload identity loading and configured telemetry exporters in this mode.

## Testing

Add unit and integration coverage for rotation, expiry, malformed frames, environment mismatches, stdin closure, registry-only authentication, credential redaction, and telemetry exporter isolation.

GitOrigin-RevId: 30a94478165395144a765450f5ec6b3697acdd55

2026-10-15 22:32:24 +00:00

..

e2e_benches

bench: add codex help e2e macrobenchmark (#31295)

2026-07-09 17:23:44 -07:00

src

Add rotating stdin credentials for remote exec-server (#54434)

2026-10-15 22:32:24 +00:00

tests

Add rotating stdin credentials for remote exec-server (#54434)

2026-10-15 22:32:24 +00:00

BUILD.bazel

Isolate daemon package tests to reduce disk contention (#53897)

2026-10-14 07:13:22 +00:00

build.rs

Add WebRTC media transport to realtime TUI (#17058)

2026-04-08 10:26:55 -07:00

Cargo.toml

Isolate daemon package tests to reduce disk contention (#53897)

2026-10-14 07:13:22 +00:00