jif e742db9f7b Preserve parent routing affinity for Guardian reviews (#57710) ...

## Why

Shared routing cookies can change after a parent connection is established. Guardian reviews need the routing affinity captured with their parent response so unrelated traffic does not replace that hint.

## What changed

- Capture `__oailb` and `__cflb` cookies from successful ChatGPT WebSocket handshakes and pair them with the parent response ID.
- Retain the snapshot throughout a review and its retries, and apply it only to Guardian requests with the matching parent response. Reconnect cached reviewer sockets when the parent affinity changes.
- Preserve cookie expiry and restrict reuse to the original secure origin and endpoint path. Replace routing cookies while retaining unrelated cookies, and keep the captured affinity out of prompts, history, and serialized metadata.

## Testing

Add coverage for cookie scope, expiry, duplicate rejection, and merging; replaying a captured pin after shared cookies change or are deleted; and retaining the matching parent snapshot through compaction without exposing cookies in review prompts or metadata.

GitOrigin-RevId: d180679e6265b612a3617f20ca1f5dec89e73aa8

2026-10-28 11:48:00 +00:00

..

bin

Extract shared HTTP transport into codex-http-client (#31323)

2026-07-07 01:12:24 +00:00

outbound_proxy

Improve codex doctor network diagnostics (#38918)

2026-08-17 00:09:44 +00:00

route_aware_client_pool

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

windows_proxy_auth

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

chatgpt_cloudflare_cookies.rs

Preserve parent routing affinity for Guardian reviews (#57710)

2026-10-28 11:48:00 +00:00

chatgpt_hosts.rs

Extract shared HTTP transport into codex-http-client (#31323)

2026-07-07 01:12:24 +00:00

chatgpt_routing_affinity_tests.rs

Preserve parent routing affinity for Guardian reviews (#57710)

2026-10-28 11:48:00 +00:00

chatgpt_routing_affinity.rs

Preserve parent routing affinity for Guardian reviews (#57710)

2026-10-28 11:48:00 +00:00

client_builder_tests.rs

Upgrade hyper to 1.11.1 and test connection closure (#52608)

2026-10-09 15:13:29 +00:00

client_builder.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

client_tls.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

client.rs

Refactor HTTP client construction and request execution (#57575)

2026-10-27 22:03:01 +00:00

custom_ca_tls_tests.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

custom_ca.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

error.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

lib.rs

Preserve parent routing affinity for Guardian reviews (#57710)

2026-10-28 11:48:00 +00:00

native_roots_tests.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

native_roots.rs

Coalesce overlapping native TLS root certificate loads (#54056)

2026-10-14 17:56:24 +00:00

network_policy_tests.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

network_policy.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

openai_endpoints.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

openai_headers.rs

Integrate runtime authentication into model requests (#57171)

2026-10-26 18:06:07 +00:00

outbound_proxy_redirect_coverage_tests.rs

Resolve proxy routes for standalone web search redirects (#47204)

2026-09-22 06:24:49 +00:00

outbound_proxy_tests.rs

Avoid blocking async proxy resolution on the system proxy cache (#47852)

2026-09-24 14:50:27 +00:00

outbound_proxy.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

request_builder_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

request_builder.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

request_draft.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

request.rs

Add opt-in response body limits to the HTTP transport (#45822)

2026-09-16 01:01:57 +00:00

response.rs

Enforce application network policy across app-server requests (#47407)

2026-09-23 00:47:07 +00:00

retry_after_tests.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

retry_after.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

route_aware_client_pool_tests.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

route_aware_client_pool.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

route_aware_policy_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

route_aware_redirect_integration_tests.rs

Add revocable network policy primitives to the HTTP client (#45503)

2026-09-14 19:30:37 +00:00

route_aware_redirect_tests.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

route_aware_redirect.rs

Share runtime authentication with model providers and catalogs (#57607)

2026-10-28 00:51:29 +00:00

route_aware_tls_fallback_tests.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

tls_backend_fallback_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

tls_backend_fallback.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

transport_limit_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

transport_tests.rs

Enforce network policy throughout HTTP and WebSocket requests (#47389)

2026-09-22 23:37:39 +00:00

transport.rs

Honor Retry-After and preserve server retry deadlines (#47641)

2026-09-23 19:53:11 +00:00

windows_proxy_auth.rs

Retry proxy CONNECT challenges with Windows authentication (#56000)

2026-10-21 22:26:16 +00:00

windows_tls_tests.rs

Bundle native voice runtimes in Windows releases (#44922)

2026-09-11 21:59:24 +00:00

windows_tls.rs

Bundle native voice runtimes in Windows releases (#44922)

2026-09-11 21:59:24 +00:00