feat(codex): align Search and execution protocol

apps/aether-gateway/src/state/app.rs

@@ -344,6 +344,7 @@ pub struct AppState {
     pub(crate) upstream_target_admission: Arc<crate::upstream_admission::UpstreamTargetAdmission>,
     pub(crate) distributed_request_gate: Option<Arc<RuntimeSemaphore>>,
     pub(crate) client: reqwest::Client,
+    pub(crate) owner_forward_client: reqwest::Client,
     pub(crate) auth_context_cache: Arc<AuthContextCache>,
     pub(crate) auth_snapshot_cache: Arc<AuthSnapshotCache>,
     pub(crate) user_model_capability_settings_cache: Arc<JsonValueCache<String>>,

apps/aether-gateway/src/state/core.rs

@@ -51,6 +51,7 @@ use super::super::{provider_transport, usage};
 use crate::maintenance::spawn_account_self_check_worker;
 use crate::maintenance::spawn_audit_cleanup_worker;
 use crate::maintenance::spawn_db_maintenance_worker;
+use crate::maintenance::spawn_fixed_provider_reconciliation_task;
 use crate::maintenance::spawn_gemini_file_mapping_cleanup_worker;
 use crate::maintenance::spawn_oauth_token_refresh_worker;
 use crate::maintenance::spawn_pending_cleanup_worker;
@@ -250,6 +251,11 @@ impl AppState {
             http2_adaptive_window: true,
             ..HttpClientConfig::default()
         })?;
+        let owner_forward_client = build_http_client(&HttpClientConfig {
+            connect_timeout_ms: Some(10_000),
+            http2_adaptive_window: true,
+            ..HttpClientConfig::default()
+        })?;
         let frontdoor_runtime_guards = Arc::new(FrontdoorRuntimeGuardConfig::from_env());
         Ok(Self {
             #[cfg(test)]
@@ -284,6 +290,7 @@ impl AppState {
             ),
             distributed_request_gate: None,
             client,
+            owner_forward_client,
             auth_context_cache: Arc::new(AuthContextCache::default()),
             auth_snapshot_cache: Arc::new(AuthSnapshotCache::default()),
             user_model_capability_settings_cache: Arc::new(JsonValueCache::default()),
@@ -1463,6 +1470,13 @@ impl AppState {
             record_boot(crate::task_runtime::TASK_KEY_USAGE_QUEUE_WORKER);
         }
 
+        if let Some(handle) = spawn_fixed_provider_reconciliation_task(self.clone()) {
+            supervisor.supervise_handle(
+                crate::task_runtime::TASK_KEY_FIXED_PROVIDER_RECONCILIATION,
+                handle,
+            );
+        }
+
         let mut supervise_worker =
             |task_key: &'static str, handle: Option<tokio::task::JoinHandle<()>>| {
                 if let Some(handle) = handle {