Henry Levy ffd3429d75 Preserve model catalog caches across header credential rotation (#54946) ...

## Why

Rotating header credentials should not discard the model catalog when a stable account ID is available.

## What changed

- Use the account ID from `CodexAuth::Headers` instead of opaque auth headers in the catalog cache identity. Provider settings remain part of the key.
- Retain credential-sensitive keys when the account ID is missing or the provider uses an explicit API key, bearer token, or command auth.
- Document that hosts using header auth must isolate model managers and cache storage by user and catalog-varying request context, since an account ID can represent a shared workspace.

## Testing

Update the auth-rotation test fixture to omit stable account metadata, preserving coverage for catalog invalidation when opaque credentials change.

GitOrigin-RevId: f96a20c5baf76b9235e131140716731da4dbee81

2026-10-17 23:22:14 +00:00

..

src

Preserve model catalog caches across header credential rotation (#54946)

2026-10-17 23:22:14 +00:00

BUILD.bazel

build: run buildifier from just fmt (#28125)

2026-06-13 21:43:39 -07:00

Cargo.toml

Centralize model-message resolution and rendering in codex-prompts (#46026)

2026-09-16 21:01:13 +00:00

models.json

Remove legacy personality template metadata (#51223)

2026-10-06 01:46:33 +00:00

prompt.md

chore(core) rm AskForApproval::OnFailure (#28418)

2026-06-23 12:13:54 -07:00