cooper-oai 990218bbbd Fail closed when workload identity initialization fails (#38424) ...

## What changed

- Treat workload identity environment markers as an explicit authentication selection, even when another process credential is present.
- Return initialization errors from `AuthManager` and propagate them through commands and services instead of continuing with an unusable authentication state.
- Make `codex login status` validate workload identity, keep the TUI on an embedded app server for local workload identity, and reject workload identity in `codex mcp-server`, where it is unsupported.

## Testing

- Cover workload identity precedence and partial configuration errors.
- Verify login status reports an unreadable identity assertion and app-server routing enforces the supported workload identity topology.

GitOrigin-RevId: efc6b6b4cd4d61652617de82aaa3d7ffc75d6618

2026-08-13 19:35:22 +00:00

..

src

Fail closed when workload identity initialization fails (#38424)

2026-08-13 19:35:22 +00:00

tests

cloud-tasks: split the mock client out of cloud-tasks-client (#16456)

2026-04-01 12:09:14 -07:00

BUILD.bazel

Wire realtime WebRTC native media into Bazel (#17145)

2026-04-08 15:15:55 -07:00

Cargo.toml

Fix TUI layout for halfwidth Japanese sound marks (#35962)

2026-07-29 14:01:31 +00:00