Skip to content

Use AgentAssertion downstream behind use_agent_identity#15590

Closed
adrian-openai wants to merge 4 commits into
dev/adrian/codex/agent-identity-register-taskfrom
dev/adrian/codex/agent-identity-use-assertion
Closed

Use AgentAssertion downstream behind use_agent_identity#15590
adrian-openai wants to merge 4 commits into
dev/adrian/codex/agent-identity-register-taskfrom
dev/adrian/codex/agent-identity-use-assertion

Conversation

@adrian-openai

@adrian-openai adrian-openai commented Mar 24, 2026

Copy link
Copy Markdown
Contributor

Stack

Summary

  • build Authorization: AgentAssertion ... headers from the registered agent identity and per-thread task
  • use that assertion for downstream Responses HTTP and websocket calls, skipping the bearer prewarm path when a task is active
  • align the downstream assertion shape with the current authapi contract in openai/openai#756783 and latest master

Testing

  • cargo +1.93.1 test -p codex-core authorization_header_for_task
  • cargo +1.93.1 test -p codex-core responses_http_uses_agent_assertion_when_agent_task_is_present (outside sandbox so localhost mock server could bind)
  • cargo +1.93.1 test -p codex-core websocket_agent_task_bypasses_cached_bearer_prewarm (outside sandbox so localhost websocket server could bind)
  • just fix -p codex-core
  • just fmt
  • just argument-comment-lint could not be completed from this shell because the prebuilt linter resolution is currently picking an unsupported platform artifact

@adrian-openai adrian-openai force-pushed the dev/adrian/codex/agent-identity-use-assertion branch from ca44a90 to 4c7bf51 Compare March 24, 2026 02:25
@adrian-openai adrian-openai force-pushed the dev/adrian/codex/agent-identity-register-task branch from 5ba35d6 to 362e93a Compare March 24, 2026 02:25
@adrian-openai adrian-openai force-pushed the dev/adrian/codex/agent-identity-register-task branch from 362e93a to 7f37509 Compare March 24, 2026 04:16
@adrian-openai adrian-openai force-pushed the dev/adrian/codex/agent-identity-use-assertion branch from 4c7bf51 to 346def9 Compare March 24, 2026 04:17
@etraut-openai etraut-openai added the oai PRs contributed by OpenAI employees label Mar 24, 2026
@adrian-openai adrian-openai force-pushed the dev/adrian/codex/agent-identity-register-task branch from 7f37509 to 92d4b68 Compare March 24, 2026 18:55
@adrian-openai adrian-openai force-pushed the dev/adrian/codex/agent-identity-use-assertion branch from 346def9 to 446e043 Compare March 24, 2026 19:11
@adrian-openai adrian-openai force-pushed the dev/adrian/codex/agent-identity-use-assertion branch from 446e043 to ef4e4e4 Compare March 25, 2026 00:30
@github-actions

github-actions Bot commented Apr 8, 2026

Copy link
Copy Markdown
Contributor

Closing this pull request because it has had no updates for more than 14 days. If you plan to continue working on it, feel free to reopen or open a new PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

oai PRs contributed by OpenAI employees

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants