Test hosted diagnostics, token age, and preview safety

[RhysSullivan]

Test diagnostic redaction and authentication behavior introduced by #2112. Add a GraphQL regression test that accepts a valid response above 32 MiB and a stored-preview scenario that submits hostile markup through the API, reads back sanitized content, then verifies the gallery remains inert after reload.

Remove tests for the withdrawn request and import caps. Existing OpenAPI parser tests are unchanged.

Validation: 71 focused tests and three cloud evidence scenarios passed. The two new authentication scenarios verify a valid key in headers versus six query carriers, and a successful OAuth callback with credential-free exported diagnostics. E2E type-checking and targeted lint passed; formatting completed. The earlier full-suite run predates this revision.

Not merge-ready: the code PR still contains the deferred 24-hour token cap. Replaying the original token-compatibility tests exposed two regressions; the token assertions in this draft do not establish compatibility. Resolve this before merging.

The screenshot below uses a synthetic test identity in the local cloud environment.

[github-actions]

Cloudflare preview

Console	https://executor-preview-pr-2113.executor-e2e.workers.dev
MCP	https://executor-preview-pr-2113.executor-e2e.workers.dev/mcp
Deployed commit	85b1c16

Sign-in is Cloudflare Access (one-time PIN to an allowed email). The preview has its own database and encryption key; it is destroyed when this PR closes.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	85b1c16	Commit Preview URL Branch Preview URL	Sep 24 2026, 07:46 PM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	85b1c16	Sep 24 2026, 07:47 PM

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@2113

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@2113

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@2113

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@2113

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@2113

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@2113

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@2113

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@2113

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@2113

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@2113

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@2113

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@2113

executor

npm i https://pkg.pr.new/executor@2113

commit: 85b1c16