i/Aether
1
0
Fork 0
mirror of https://github.com/fawney19/Aether.git synced 2026-10-12 04:09:48 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat(gateway): add Codex Live and OpenAI Realtime

Browse Source 
Implement preflighted Live/Realtime WebSocket transports, protocol-aware authentication, usage auditing, UI filtering, and legacy Codex permission migration.
This commit is contained in:
ZheFox
2026-08-21 04:27:34 +08:00
parent fe38dcd294
commit 2c89202001
105 changed files with 7553 additions and 947 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/aether-provider/transport/src/codex_fingerprint.rs
+35 -6
View File
@@ -41,6 +41,8 @@ pub fn apply_codex_oauth_fingerprint_convergence(
provider_request_headers: &mut BTreeMap<String, String>,
provider_request_body: &mut Value,
) -> bool {
let is_responses = aether_ai_formats::is_openai_responses_format(provider_api_format);
let is_live = aether_ai_formats::api_format_alias_matches(provider_api_format, "codex:live");
if !transport
.provider
.provider_type
@@ -48,11 +50,12 @@ pub fn apply_codex_oauth_fingerprint_convergence(
.eq_ignore_ascii_case("codex")
|| !transport.key.auth_type.trim().eq_ignore_ascii_case("oauth")
|| crate::agent_identity::is_codex_agent_identity_transport(transport)
|| !aether_ai_formats::is_openai_responses_format(provider_api_format)
|| aether_ai_formats::openai_responses_request_operation(
provider_api_format,
provider_request_body,
) == Some(aether_ai_formats::OPENAI_RESPONSES_OPERATION_COMPACT)
|| (!is_responses && !is_live)
|| is_responses
&& aether_ai_formats::openai_responses_request_operation(
provider_api_format,
provider_request_body,
) == Some(aether_ai_formats::OPENAI_RESPONSES_OPERATION_COMPACT)
|| !codex_fingerprint_convergence_enabled(
transport.provider.provider_type.as_str(),
transport.provider.config.as_ref(),
@@ -74,7 +77,12 @@ pub fn apply_codex_oauth_fingerprint_convergence(
let fingerprint = resolve_converged_fingerprint(account_seed, original_client_session_id);
apply_converged_headers(provider_request_headers, &fingerprint);
apply_converged_client_metadata(provider_request_body, &fingerprint);
// Live uses the converged identity on the WebSocket/call-control headers.
// Its event/session payload is an independent opaque protocol and must not
// receive Responses-only `client_metadata` fields.
if is_responses {
apply_converged_client_metadata(provider_request_body, &fingerprint);
}
true
}
@@ -477,6 +485,27 @@ mod tests {
assert_ne!(first.installation_id, other_account.installation_id);
}
#[test]
fn live_convergence_sets_the_websocket_identity_without_mutating_the_payload() {
let transport = sample_transport();
let original_body = json!({"model": "gpt-live", "future_live_field": true});
let mut body = original_body.clone();
let mut headers = BTreeMap::new();
assert!(apply_codex_oauth_fingerprint_convergence(
&transport,
"codex:live",
Some("client-live-session"),
&mut headers,
&mut body,
));
assert_eq!(body, original_body);
assert_eq!(headers.get("x-session-id"), headers.get("thread-id"));
assert!(headers.contains_key("x-codex-installation-id"));
assert!(headers.contains_key("x-codex-window-id"));
}
#[test]
fn disabled_or_out_of_scope_requests_are_unchanged() {
let mut transport = sample_transport();