jif eeded5ba1a Route Guardian requests through /responses with identifying headers (#45736) ...

## What changed

- Replace dedicated Guardian endpoints with `/responses`, sending `x-codex-guardian: reviewer` or `x-codex-guardian: classifier` for eligible Codex backend requests over HTTP and WebSocket.
- Add model-scoped thread headers, recheck backend authentication on each request attempt, and reconnect WebSockets when the applicable headers change.
- Retain `features.guardianv2.free_guardian` for configuration compatibility while removing its routing gate; the backend now controls Guardian billing.

## Testing

Update tests for reviewer and classifier headers, model and authentication scoping, HTTP fallback, WebSocket reuse, and parent-response metadata across retries.

GitOrigin-RevId: 1c2b3c458ab77fb40aae4ee6784f6d827c60e76c

2026-09-15 17:09:11 +00:00

..

clients.rs

Route Guardian requests through /responses with identifying headers (#45736)

2026-09-15 17:09:11 +00:00

models_integration.rs

Expose available access programs in model discovery (#44893)

2026-09-11 19:13:04 +00:00

realtime_websocket_e2e.rs

Reconnect WebRTC Realtime sideband transports (#39257)

2026-08-18 18:41:40 +00:00

realtime_websocket_tls.rs

Bundle native voice runtimes in Windows releases (#44922)

2026-09-11 21:59:24 +00:00

sse_end_to_end.rs

Preserve raw response usage metadata (#41980)

2026-09-01 05:17:11 +00:00