Winston Howes 808b3411fd Cache protected shell snapshots and harden capture cleanup (#43954) ...

## Why

Credential-brokered commands rebuild shell snapshots on every invocation. Snapshot capture failures can also include credential-bearing startup output, and descendants holding output pipes need cleanup even after the shell exits.

## What changed

- Cache successful protected snapshots per environment, keyed by working directory, shell, login mode, and sandbox configuration. Rebuild missing or stale snapshots while keeping concurrent captures independently cancellable.
- Invalidate snapshots when shell settings or credential broker configuration change, and retry capture once if broker configuration changes during startup.
- Restore credentials and associated provider context while respecting environment policy filters and explicit overrides.
- Keep full-buffer capture subject to timeout and cancellation through output draining, clean up descendants on capture expiration or drain failure, and omit startup output from snapshot errors.

## Testing

Add regression coverage for snapshot reuse, invalidation, recovery after storage failure, concurrent cancellation, credential-safe errors, and descendant cleanup. Verify that successful background startup and output beyond the shell output cap remain supported.

GitOrigin-RevId: 7c7c8455bf6e3b9ca173dbb4277783469f0b45e6

2026-09-09 00:42:57 +00:00

..

connection_lifecycle

Close active network proxy connections on teardown (#43884)

2026-09-08 18:40:17 +00:00

credential_broker

Broker credential aliases in child environments (#40484)

2026-08-24 22:10:44 +00:00

proxy

Enforce environment network policies for remote execution (#39980)

2026-08-21 17:29:41 +00:00

attribution_tests.rs

Remove the network proxy config wrapper (#31767)

2026-07-09 17:33:37 +01:00

attribution.rs

…

authorization_path_tests.rs

Harden network proxy MITM authorization (#37211)

2026-08-06 03:57:10 +00:00

authorization_path.rs

Harden network proxy MITM authorization (#37211)

2026-08-06 03:57:10 +00:00

certs.rs

Honor CARGO_HTTP_CAINFO in managed proxy environments (#34478)

2026-07-21 07:12:28 +00:00

config.rs

Harden network proxy credential brokerage (#38049)

2026-08-11 18:21:34 +00:00

connect_policy.rs

Allow explicitly permitted loopback proxy targets (#34603)

2026-07-21 19:50:11 +00:00

credential_broker_tests.rs

Protect shell snapshots when credential brokerage is enabled (#43909)

2026-09-08 20:59:50 +00:00

credential_broker.rs

Cache protected shell snapshots and harden capture cleanup (#43954)

2026-09-09 00:42:57 +00:00

environment_policy.rs

Enforce environment network policies for remote execution (#39980)

2026-08-21 17:29:41 +00:00

http_proxy.rs

Close active network proxy connections on teardown (#43884)

2026-09-08 18:40:17 +00:00

lib.rs

Close active network proxy connections on teardown (#43884)

2026-09-08 18:40:17 +00:00

mitm_hook.rs

Harden network proxy MITM authorization (#37211)

2026-08-06 03:57:10 +00:00

mitm_tests.rs

Harden network proxy MITM authorization (#37211)

2026-08-06 03:57:10 +00:00

mitm.rs

Allow explicitly permitted loopback proxy targets (#34603)

2026-07-21 19:50:11 +00:00

native_certs.rs

…

network_policy.rs

Handle pending network reviews after process completion (#42746)

2026-09-04 12:08:02 +00:00

policy.rs

…

process_log_metadata.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

proxy.rs

Cache protected shell snapshots and harden capture cleanup (#43954)

2026-09-09 00:42:57 +00:00

reasons.rs

…

remote_config_tests.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

remote_config.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

request_cancellation.rs

Handle pending network reviews after process completion (#42746)

2026-09-04 12:08:02 +00:00

request_disconnect_tests.rs

Report network disconnects during approval (#39284)

2026-08-18 21:30:45 +00:00

request_disconnect.rs

Report network disconnects during approval (#39284)

2026-08-18 21:30:45 +00:00

responses.rs

…

runtime.rs

Cache protected shell snapshots and harden capture cleanup (#43954)

2026-09-09 00:42:57 +00:00

socks5.rs

Close active network proxy connections on teardown (#43884)

2026-09-08 18:40:17 +00:00

state.rs

Harden network proxy credential brokerage (#38049)

2026-08-11 18:21:34 +00:00

upstream_tests.rs

Allow explicitly permitted loopback proxy targets (#34603)

2026-07-21 19:50:11 +00:00

upstream.rs

Allow explicitly permitted loopback proxy targets (#34603)

2026-07-21 19:50:11 +00:00

windows_proxy_ingress_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

windows_proxy_ingress.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

windows_tcp_attribution_tests.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

windows_tcp_attribution.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00