cooper-oai fb5aa093e0 Support workload identity in remote exec-server auth (#38610) ...

## Why

Remote exec-server registry requests need to refresh managed credentials before sending a request. Static auth-header resolution cannot perform the asynchronous token exchange required by workload identity.

## What changed

- Add asynchronous auth-header resolution to `AuthProvider`, with the existing static-header behavior as the default.
- Resolve fresh managed credentials for each remote environment registry request while preserving the expected account and workspace identity.
- Load the cloud configuration bundle during remote exec-server startup when workload identity is selected.

## Testing

- Update the managed-auth and environment-registry auth tests to exercise asynchronous header resolution.

GitOrigin-RevId: 5d60f1127467aaacdb5d1a8f3d92278bc4bf2e29

2026-08-14 17:32:37 +00:00

..

e2e_benches

bench: add codex help e2e macrobenchmark (#31295)

2026-07-09 17:23:44 -07:00

src

Support workload identity in remote exec-server auth (#38610)

2026-08-14 17:32:37 +00:00

tests

Honor cloud-managed requirements in feature listings (#38581)

2026-08-14 13:50:10 +00:00

BUILD.bazel

Fix Bazel test configuration for platform-specific data (#35067)

2026-07-24 01:34:56 +00:00

build.rs

Add WebRTC media transport to realtime TUI (#17058)

2026-04-08 10:26:55 -07:00

Cargo.toml

Extract persisted history types into a dedicated crate (#37871)

2026-08-10 19:26:52 +00:00