cooper-oai cf29971d93 Integrate runtime authentication into model requests (#57171) ...

## What changed

- Add opt-in runtime authentication through `ModelClient::with_runtime_auth`, requiring the provider and runtime manager to share the selected OpenAI credentials.
- Keep runtime identity, credentials, routing, and transport selection consistent for each request and its retries, signing a fresh assertion for each attempt.
- Apply authentication asynchronously to WebSocket handshakes, replace stale authentication headers, and reconnect when the runtime changes.
- Reject account, organization, or project selectors that conflict with the registered runtime, and preserve gateway OAuth composition.

## Testing

Add coverage for dual-header and assertion-only authentication, HTTP retries, runtime replacement and account switches, stale WebSocket headers, selector mismatches, gateway OAuth failures, transport revocation, and Realtime compatibility.

GitOrigin-RevId: 45b9efc2c80481406a0f6f6396a8cdd21d933c12

2026-10-26 18:06:07 +00:00

..

client

Refine enterprise MCP auth errors and request authority checks (#55691)

2026-10-20 22:33:14 +00:00

discoverV2

Integrate discovery V2 with step-scoped skill catalogs (#55322)

2026-10-19 17:02:20 +00:00

environment

Acquire and cache opt-in executor capability inventories via V2 (#53736)

2026-10-13 18:15:50 +00:00

no_follow

Fix Windows 10 drive-letter opens for no-follow filesystem operations (#51511)

2026-10-06 23:20:40 +00:00

noise_relay

Add correlated diagnostics for Noise relay handshakes (#55498)

2026-10-20 07:56:07 +00:00

proto

Propagate request trace context through exec-server relays (#38690)

2026-08-15 03:00:35 +00:00

remote

Refresh remote exec-server credentials after unauthorized responses (#55987)

2026-10-21 21:05:08 +00:00

sandbox_integrity

Add a sandbox integrity runner with outcome and timing metrics (#51842)

2026-10-07 21:52:20 +00:00

server

Acquire and cache opt-in executor capability inventories via V2 (#53736)

2026-10-13 18:15:50 +00:00

arg0_exec_helper.rs

Preserve custom arg0 for sandboxed exec-server processes (#34497)

2026-07-21 08:59:41 +00:00

capability_discovery_cache.rs

Integrate discovery V2 with step-scoped skill catalogs (#55322)

2026-10-19 17:02:20 +00:00

capability_discovery_v2_cache.rs

Acquire and cache opt-in executor capability inventories via V2 (#53736)

2026-10-13 18:15:50 +00:00

capability_discovery.rs

Add executor capability discovery V2 infrastructure (#47683)

2026-09-23 22:20:34 +00:00

client_api.rs

Support trusted headers for remote exec WebSockets (#42606)

2026-09-03 20:01:07 +00:00

client_error.rs

Add timeout-aware exec-server configuration reads (#52679)

2026-10-09 19:22:21 +00:00

client_inbound_request_limit_tests.rs

Bound inbound exec-server requests across client transports (#47362)

2026-09-22 21:07:20 +00:00

client_inbound_request_limit.rs

Bound inbound exec-server requests across client transports (#47362)

2026-09-22 21:07:20 +00:00

client_recovery_tests.rs

Retry transient registry failures during initial exec connection (#39777)

2026-08-20 18:48:17 +00:00

client_recovery.rs

Defer environment disconnect notifications until recovery fails (#55401)

2026-10-19 22:55:42 +00:00

client_refresh_tests.rs

Add correlated diagnostics for Noise relay handshakes (#55498)

2026-10-20 07:56:07 +00:00

client_refresh.rs

Add observers for initial exec-server connection attempts (#52724)

2026-10-09 23:28:38 +00:00

client_telemetry.rs

Add client-side exec-server RPC attempt metrics (#42883)

2026-09-04 23:06:00 +00:00

client_transport_tests.rs

Add correlated diagnostics for Noise relay handshakes (#55498)

2026-10-20 07:56:07 +00:00

client_transport.rs

Add correlated diagnostics for Noise relay handshakes (#55498)

2026-10-20 07:56:07 +00:00

client.rs

Add managed network review domains before allow rules (#56154)

2026-10-22 11:52:34 +00:00

connection.rs

Allow large file writes over direct exec-server WebSockets (#54135)

2026-10-15 00:00:57 +00:00

environment_bootstrap_tests.rs

Enforce required environment skills before model inference (#51157)

2026-10-05 18:54:17 +00:00

environment_bootstrap.rs

Enforce required environment skills before model inference (#51157)

2026-10-05 18:54:17 +00:00

environment_config_tests.rs

Preserve the CLI MXC preference in executor config reads (#51525)

2026-10-07 00:29:04 +00:00

environment_config.rs

Preserve the CLI MXC preference in executor config reads (#51525)

2026-10-07 00:29:04 +00:00

environment_provider.rs

Enforce required environment skills before model inference (#51157)

2026-10-05 18:54:17 +00:00

environment_registry_tests.rs

feat(exec-server): add Noise rendezvous environment (#28774)

2026-06-17 17:20:53 -07:00

environment_registry.rs

feat(exec-server): add Noise rendezvous environment (#28774)

2026-06-17 17:20:53 -07:00

environment_toml.rs

Enforce required environment skills before model inference (#51157)

2026-10-05 18:54:17 +00:00

environment.rs

Defer environment disconnect notifications until recovery fails (#55401)

2026-10-19 22:55:42 +00:00

file_handle_tests.rs

Bound in-flight file opens in exec-server (#50162)

2026-10-02 03:31:52 +00:00

file_handle.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

forward_tests.rs

Add attributed exec process lifecycle telemetry (#42373)

2026-09-02 21:58:58 +00:00

forward.rs

Add exec-server forwarding mode (#39249)

2026-08-18 18:15:21 +00:00

fs_helper_main.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

fs_helper.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

fs_sandbox_windows_tests.rs

Add opt-in history prefix preservation for full agent forks (#52535)

2026-10-09 11:08:24 +00:00

fs_sandbox.rs

Preserve SystemRoot for Windows filesystem sandbox helpers (#56468)

2026-10-23 12:42:39 +00:00

lib.rs

Enrich V2 capability discovery with resolved plugin and skill metadata (#53763)

2026-10-13 20:40:38 +00:00

local_file_system_path_uri_tests.rs

Harden unsandboxed patch filesystem access (#39659)

2026-08-20 08:10:08 +00:00

local_file_system_read_tests.rs

Make exec-server file reads cancellable between chunks (#49696)

2026-09-30 18:18:03 +00:00

local_file_system_read.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

local_file_system.rs

Add streaming file replacement to filesystem abstractions (#54505)

2026-10-16 04:42:32 +00:00

local_process.rs

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

network_policy_decisions_tests.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

network_policy_decisions.rs

Handle exec-server network policy requests in the client (#35359)

2026-07-25 16:03:00 +00:00

noise_channel_tests.rs

exec-server: default remote transport to Noise (#26245)

2026-06-15 17:39:00 -07:00

noise_channel.rs

Size Noise handshake buffers to their messages (#34544)

2026-07-21 13:39:33 +00:00

process_sandbox_tests.rs

Support configured credential providers in remote execution (#56049)

2026-10-22 01:54:51 +00:00

process_sandbox.rs

Support configured credential providers in remote execution (#56049)

2026-10-22 01:54:51 +00:00

process_telemetry.rs

Add exec-server RPC timing and process startup tracing (#47680)

2026-09-23 22:10:28 +00:00

process.rs

Wire the Windows MXC sandbox into command execution (#45176)

2026-09-13 06:07:03 +00:00

regular_file_tests.rs

Add a symlink-safe reader for sensitive files (#39200)

2026-08-18 13:36:16 +00:00

regular_file.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

relay_noise_tests.rs

Pause relay test time while inspecting handshake diagnostics (#55848)

2026-10-21 09:57:27 +00:00

relay_proto.rs

exec-server: default remote transport to Noise (#26245)

2026-06-15 17:39:00 -07:00

relay_writer_tests.rs

Bound relay connection attempts and handle pongs during blocked writes (#51502)

2026-10-06 23:07:25 +00:00

relay_writer.rs

Bound relay connection attempts and handle pongs during blocked writes (#51502)

2026-10-06 23:07:25 +00:00

relay.rs

Add correlated diagnostics for Noise relay handshakes (#55498)

2026-10-20 07:56:07 +00:00

remote_file_stream.rs

Define exec-server protocol types for streamed file writes (#49778)

2026-10-01 00:43:55 +00:00

remote_file_system_path_uri_tests.rs

Use a synchronous mutex for remote metadata request tracking (#54475)

2026-10-16 02:39:49 +00:00

remote_file_system.rs

Add streaming file replacement to filesystem abstractions (#54505)

2026-10-16 04:42:32 +00:00

remote_process.rs

Record normalized sandbox violation events (#36207)

2026-07-30 19:23:33 +00:00

remote.rs

Integrate runtime authentication into model requests (#57171)

2026-10-26 18:06:07 +00:00

resolved_capability.rs

Remove unused Rust helpers (#34345)

2026-07-20 13:45:29 +00:00

rpc_client_metrics_tests.rs

Add client-side exec-server RPC attempt metrics (#42883)

2026-09-04 23:06:00 +00:00

rpc_pending_request.rs

Clean up canceled exec-server RPC requests immediately (#49332)

2026-09-29 18:34:48 +00:00

rpc_server_requests_tests.rs

Bound inbound exec-server requests across client transports (#47362)

2026-09-22 21:07:20 +00:00

rpc_server_requests.rs

Bound inbound exec-server requests across client transports (#47362)

2026-09-22 21:07:20 +00:00

rpc_timing.rs

Add exec-server RPC timing and process startup tracing (#47680)

2026-09-23 22:10:28 +00:00

rpc.rs

Clean up canceled exec-server RPC requests immediately (#49332)

2026-09-29 18:34:48 +00:00

runtime_options.rs

Preserve the CLI MXC preference in executor config reads (#51525)

2026-10-07 00:29:04 +00:00

sandbox_selection.rs

Enable MXC selection through Windows sandbox configuration (#46271)

2026-09-17 18:20:28 +00:00

sandboxed_file_open.rs

Enable writable file streaming in exec-server (#50177)

2026-10-02 04:25:52 +00:00

sandboxed_file_system_path_uri_tests.rs

Allow exec-server to proxy permitted private IPs upstream (#48568)

2026-09-26 23:17:41 +00:00

sandboxed_file_system.rs

Run sandbox integrity checks before commands and filesystem operations (#51843)

2026-10-07 21:52:43 +00:00

server.rs

Allow exec-server to proxy permitted private IPs upstream (#48568)

2026-09-26 23:17:41 +00:00

shell_snapshot_credentials.rs

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

shell_snapshot_file_tests.rs

Replay exec-server shell snapshots through unnamed files (#48078)

2026-09-25 12:23:15 +00:00

shell_snapshot_file.rs

Replay exec-server shell snapshots through unnamed files (#48078)

2026-09-25 12:23:15 +00:00

shell_snapshot_process.rs

Clean up process groups for failed shell snapshot captures (#49782)

2026-10-01 00:48:08 +00:00

shell_snapshot_tests.rs

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

shell_snapshot.rs

Support remote credential masking with Zsh shell snapshots (#54432)

2026-10-15 22:25:58 +00:00

telemetry.rs

Measure shell snapshot use and wait time per command (#51347)

2026-10-06 11:43:45 +00:00

trace_context_tests.rs

[codex] Observe remote exec-server lifecycle (#27470)

2026-06-25 13:42:40 -07:00

trace_context.rs

Propagate caller metadata to rendezvous connections (#39073)

2026-08-17 20:36:10 +00:00

websocket_pong_watchdog_tests.rs

[codex] bound Rendezvous WebSocket liveness (#30643)

2026-07-01 14:15:34 -07:00

websocket_pong_watchdog.rs

[codex] bound Rendezvous WebSocket liveness (#30643)

2026-07-01 14:15:34 -07:00