4 Commits

Include renames

Author	SHA1	Message	Date
elky	579f2c7cc1	feat(security): harden gateway boundaries and usage policies ... Consolidate subscription usage policy enforcement, privacy-safe persistence, and gateway security hardening into one reviewable change. Includes bounded HTTP and execution envelopes, header and protocol guards, DNS and relay validation, authentication and secret projection hardening, secure backup/install paths, and regression coverage.	2026-09-04 03:45:52 +08:00
AAEE86	71b54070e8	feat(gateway): Codex/OpenAI Responses WebSocket 代理模式 ... 在 /v1/responses 上支持 WebSocket 升级，把客户端帧中继到上游 Codex / OpenAI Responses WebSocket 端点，同时保持既有的路由、鉴权、配额与用量 语义： - 路由与准入：control/route/ai.rs 识别 WebSocket 升级请求； websocket/ingress.rs 复用 API Key 鉴权、IP 规则与并发许可，并引入 独立的 WebSocket 连接许可 - 中继：websocket/responses/* 按 connection / session / turn 分层， 帧解析归一化、socket 写入有界、continuation 保持调度亲和性 - 配额：orchestration/codex_quota_breaker.rs 在账号配额耗尽时熔断并 自动恢复，不再直接断开客户端连接 - 用量：每个 turn 的终态用量落库，request_metadata 记录 websocket_mode / websocket_transport，管理端与 usage 视图暴露 is_websocket - 管理端：provider 可配置 Responses WebSocket 开关	2026-08-17 14:50:33 +08:00
elky	531cf11025	feat(gateway): harden provider request execution ... Preserve exact request payloads and model client surface and API operation explicitly. Add Anthropic compatibility profiles, bounded stream commitment, and scoped OAuth retry behavior across provider transports.	2026-07-27 09:36:31 +08:00
elky	8616fe6ee2	refactor(workspace): enforce layered crate boundaries	2026-07-15 23:47:19 +08:00