mirror of
https://github.com/openai/codex.git
synced 2026-10-21 17:48:44 +00:00
## What changed Add `RuntimeAuthProvider` to resolve request authentication through the runtime auth manager. Support `dual_header` mode, which sends a bearer credential alongside `x-openai-agent-assertion`, and `assertion_only` mode, which uses `Authorization: AgentAssertion …`. Replace stale authentication headers and sign a fresh assertion for each request attempt. Propagate registration failures without falling back to credential-only authentication, preserving policy errors and classifying transport failures, rate limits, and server errors as transient. Add the disabled-by-default `features.runtime_agent_instances` configuration with independent `enabled` and `mode` settings, schema support, and structured override merging. Selecting a mode alone does not enable the feature. ## Testing Add coverage for both modes with API key and ChatGPT credentials, stale header replacement, fresh assertions, credential refresh without runtime replacement, registration failures, and configuration parsing and merging. GitOrigin-RevId: 9e93d25762600f0ff592c5248fe4c8c2c8182c8d
30 lines
920 B
Rust
30 lines
920 B
Rust
//! Ephemeral OpenAI runtimes: composite registration and per-request assertions.
|
|
|
|
mod actor;
|
|
mod auth;
|
|
mod bootstrap;
|
|
mod manager;
|
|
mod registration;
|
|
mod runtime;
|
|
|
|
pub use actor::AgentHost;
|
|
pub use actor::AuthenticatedActor;
|
|
pub use auth::RuntimeAuthProvider;
|
|
pub use bootstrap::ActorInfo;
|
|
pub use bootstrap::AgentHostAuthorization;
|
|
pub use bootstrap::AuthenticatedActorAuthorization;
|
|
pub use bootstrap::RuntimeRegistrationMetadata;
|
|
pub use bootstrap::RuntimeRegistrationRequest;
|
|
pub use bootstrap::RuntimeRegistrationResponse;
|
|
pub use bootstrap::RuntimeRole;
|
|
|
|
pub use auth::RuntimeAuth;
|
|
pub use manager::RuntimeAuthError;
|
|
pub use manager::RuntimeAuthManager;
|
|
pub use registration::DEFAULT_REGISTRATION_URL;
|
|
pub use registration::RegistrationError;
|
|
pub use registration::RegistrationErrorCode;
|
|
pub use registration::RuntimeRegistrationClient;
|
|
pub use runtime::RuntimeAgentInstance;
|
|
pub use runtime::RuntimeRegistration;
|