alexsong-oai 3929c99a97 Refresh expired AWS credentials for Bedrock (#39410) ...

## Why

Bedrock sessions that use the AWS SDK credential chain need a way to recover when credentials expire during a request.

## What changed

- Add `aws.auth_refresh` provider configuration with an `aws` command, arguments, and a configurable timeout.
- Run the command for refreshable Bedrock authentication failures, reload the SDK credentials, re-sign the request, and retry it.
- Share refresh state across matching provider configurations so concurrent failures invoke the command only once. Bearer tokens, command auth, and static environment credentials do not use this recovery path.

## Testing

- Add coverage for configuration validation, refreshable error classification, concurrent refresh sharing, and an end-to-end retry signed with refreshed credentials.

GitOrigin-RevId: 0302fe3aabdbc1097e7bd62a74d407ba38a3cc57

2026-08-19 04:46:58 +00:00

..

loader

Honor managed config during project discovery (#39306)

2026-08-18 22:44:28 +00:00

requirements_layers

Enforce managed authentication backend settings (#39043)

2026-08-17 18:35:54 +00:00

thread_config

Allow custom providers to opt into standalone web search (#34846)

2026-07-23 00:02:15 +00:00

auth_policy.rs

Enforce managed authentication requirements locally (#37132)

2026-08-05 18:09:26 +00:00

bedrock_runtime_tests.rs

Refresh expired AWS credentials for Bedrock (#39410)

2026-08-19 04:46:58 +00:00

cloud_config_bundle_tests.rs

Support execution-host context when resolving cloud config (#38086)

2026-08-11 23:31:26 +00:00

cloud_config_bundle.rs

Apply refreshed cloud config bundles to later sessions (#37908)

2026-08-11 01:05:48 +00:00

cloud_config_layers_tests.rs

Clarify config layer iteration APIs (#36774)

2026-08-03 17:29:42 +00:00

cloud_config_layers.rs

Switch runtime to cloud config bundle (#24622)

2026-06-02 13:18:59 -07:00

config_layer_source.rs

Support packaged defaults in config layering (#37810)

2026-08-10 11:22:55 +00:00

config_requirements.rs

Enforce managed authentication backend settings (#39043)

2026-08-17 18:35:54 +00:00

config_toml.rs

Remove the experimental thread config endpoint (#39115)

2026-08-18 00:45:00 +00:00

constraint.rs

Enforce automatic review for managed models (#37511)

2026-08-07 23:43:14 +00:00

diagnostics.rs

Support packaged defaults in config layering (#37810)

2026-08-10 11:22:55 +00:00

fingerprint.rs

Preserve multi-agent settings across config representations (#35656)

2026-07-27 18:41:09 +00:00

hook_config.rs

Generalize hook handler execution (#37644)

2026-08-09 00:57:15 +00:00

hooks_tests.rs

Generalize hook handler execution (#37644)

2026-08-09 00:57:15 +00:00

host_name.rs

perf(config): defer remote sandbox hostname lookup (#28542)

2026-06-16 11:17:41 -04:00

key_aliases.rs

Unify multi-agent settings under agents (#33550)

2026-07-16 09:00:51 +00:00

lib.rs

Move MCP policy types into codex-protocol (#39017)

2026-08-17 16:20:52 +00:00

marketplace_edit.rs

[codex] Add marketplace remove command and shared logic (#17752)

2026-04-17 21:44:47 -07:00

mcp_edit.rs

Consolidate MCP config editing in codex-core (#36359)

2026-07-31 16:28:22 +00:00

mcp_requirements_tests.rs

Move MCP policy types into codex-protocol (#39017)

2026-08-17 16:20:52 +00:00

mcp_requirements.rs

Move MCP policy types into codex-protocol (#39017)

2026-08-17 16:20:52 +00:00

mcp_types_tests.rs

Support per-server MCP OAuth callback ports (#38448)

2026-08-13 22:42:12 +00:00

mcp_types.rs

Support per-server MCP OAuth callback ports (#38448)

2026-08-13 22:42:12 +00:00

merge_tests.rs

Preserve multi-agent settings across config representations (#35656)

2026-07-27 18:41:09 +00:00

merge.rs

Preserve multi-agent settings across config representations (#35656)

2026-07-27 18:41:09 +00:00

overrides.rs

Preserve multi-agent settings across config representations (#35656)

2026-07-27 18:41:09 +00:00

permissions_toml.rs

Remove unused Rust helpers (#34345)

2026-07-20 13:45:29 +00:00

plugin_edit.rs

Move plugin out of core. (#20348)

2026-04-30 14:26:14 -07:00

profile_toml.rs

package: include zsh fork in Codex package (#23756)

2026-05-22 17:54:07 -07:00

project_root_markers.rs

Extract codex-core-skills crate (#15749)

2026-03-25 12:57:42 -07:00

requirements_exec_policy.rs

Move requirements policy ownership to execpolicy (#38899)

2026-08-16 20:27:05 +00:00

schema.rs

Make Guardian v2 risk classification configurable (#38628)

2026-08-14 19:11:41 +00:00

shell_environment_policy_tests.rs

Add keyed shell environment policy filters (#34590)

2026-07-21 18:23:26 +00:00

shell_environment_policy.rs

Add keyed shell environment policy filters (#34590)

2026-07-21 18:23:26 +00:00

skills_config_tests.rs

Honor per-directory bundled skill settings in skills/list (#37979)

2026-08-11 10:20:54 +00:00

skills_config.rs

Add a configurable skill catalog token budget (#38978)

2026-08-17 10:01:59 +00:00

state_tests.rs

Clarify config layer iteration APIs (#36774)

2026-08-03 17:29:42 +00:00

state.rs

Add an override to skip project configuration (#38647)

2026-08-14 20:53:22 +00:00

strict_config_tests.rs

Include call IDs in MCP requests and clarify metadata config (#37477)

2026-08-07 17:44:05 +00:00

strict_config.rs

Enforce strict tool name collision errors (#37020)

2026-08-05 04:00:50 +00:00

test_support_tests.rs

Switch runtime to cloud config bundle (#24622)

2026-06-02 13:18:59 -07:00

test_support.rs

Switch runtime to cloud config bundle (#24622)

2026-06-02 13:18:59 -07:00

thread_config.rs

Allow custom providers to opt into standalone web search (#34846)

2026-07-23 00:02:15 +00:00

tui_keymap_chord_tests.rs

Support two-stroke TUI key chords (#36511)

2026-08-01 17:43:03 +00:00

tui_keymap.rs

Add configurable shortcuts for the agents dashboard (#39142)

2026-08-18 05:30:11 +00:00

types_tests.rs

feat: skip memory startup when Codex rate limits are low (#19990)

2026-04-28 17:07:16 +02:00

types.rs

Add configurable shortcuts for the agents dashboard (#39142)

2026-08-18 05:30:11 +00:00