mirror of https://github.com/openai/codex.git synced 2026-09-17 12:23:33 +00:00

Files

sergio-oai ced02c5c38 Add opt-in response body limits to the HTTP transport (#45822 )

## Why

HTTP callers currently cannot bound response bodies. Callers accepting provider-controlled model catalogs need a size limit before decoding the response.

## What changed

- Add per-request `response_body_limit_bytes` for buffered, streaming, and error responses, leaving requests unbounded by default. Reject oversized declared lengths early and count observed bytes across chunks.
- Return a non-retryable `ResponseTooLarge` error that reports only the byte limit. Preserve HTTP status and headers when a bounded error body fails to read without exceeding the limit.
- Expose `ModelsClient::list_models_raw` to fetch bytes and an optional ETag using provider authentication and retries, with an optional body limit. Keep existing `list_models` decoding behavior.

## Testing

Add HTTP fixture tests covering size boundaries, chunked and missing-length responses, early rejection, stream termination, interrupted bodies, error text decoding, and request isolation. Add a models-client test verifying that limits survive authentication retries without affecting subsequent ordinary requests.

GitOrigin-RevId: 61b8940bc8a549588cee6865a3b5d1cff789074d

2026-09-16 01:01:57 +00:00

src

Add opt-in response body limits to the HTTP transport (#45822 )

2026-09-16 01:01:57 +00:00

BUILD.bazel

Extract shared HTTP transport into codex-http-client (#31323 )

2026-07-07 01:12:24 +00:00

Cargo.toml

Add structured telemetry for response retries (#38452 )

2026-08-13 23:13:37 +00:00

README.md

Extract shared HTTP transport into codex-http-client (#31323 )

2026-07-07 01:12:24 +00:00

README.md

codex-client

Higher-level request policy layered on codex-http-client without any Codex/OpenAI API awareness.

Provides retry utilities (RetryPolicy, RetryOn, run_with_retry, backoff) that callers plug into for unary and streaming calls.
Supplies the sse_stream helper to turn byte streams into raw SSE data: frames with idle timeouts and surfaced stream errors.
Defines the request telemetry callback used by higher-level clients.
Re-exports the low-level HTTP types temporarily so consumers can migrate to codex-http-client incrementally.