mirror of
https://github.com/openai/codex.git
synced 2026-08-27 13:49:27 +00:00
## Why Frame-count backpressure does not bound the amount of executor-controlled data retained in streamed HTTP response queues, and a single body delta could exceed the intended wire size. ## What changed - Limit each decoded `http/request/bodyDelta` payload to 1 MiB, split locally produced response chunks at that boundary, and reject oversized incoming deltas. - Apply a shared 16 MiB byte budget across queued HTTP response streams. Release capacity as deltas are consumed and fail a stream when the budget is exhausted. ## Testing Added coverage for rejecting an oversized delta and for failing a stream after its queued deltas exhaust the shared byte budget. GitOrigin-RevId: be9205fef44b0ec96b84b31a8e059b1cb9cd3f3b