fix(web-search): bound search replay ownership, reset replacement answers, and sidecar sends - #5575

Merged

lidge-jun merged 19 commits into

devfrom

codex/260922-next-search-retry

Sep 22, 2026

Commits on Sep 22, 2026

fix(web-search): combine replay-cache isolation with deadline-safe quota evidence

luvs01
authored and
lidge-jun
committed
01dbf42
fix(web-search): scope replay cells to key-resolved loopback principals

luvs01
authored and
lidge-jun
committed
31c9d01
fix(retries): refuse transient 5xx after an operator-authorized reset replacement

luvs01
authored and
lidge-jun
committed
07d1341
fix(retries): word the replay refusal for the post-response path too

luvs01
authored and
lidge-jun
committed
94df9e2
test(responses): keep the inline-document role fixture on its dev contract
lidge-jun
committed
c66ddc1
fix(web-search): fail closed when a replay caller has no principal

lidge-jun
and
luvs01
committed
808fd7d
fix(retries): keep every resend-inducing answer under replay suppression

lidge-jun
and
luvs01
committed
fce93a6
fix(web-search): clear a stale replay principal and document its absence

lidge-jun
and
luvs01
committed
b3c6993
fix(retries): refuse a redirect that would resend a spent replacement

lidge-jun
and
luvs01
committed
118d5c5
fix(web-search): share one physical-send budget across sidecar reset and 429 recovery

lidge-jun
and
luvs01
committed
47a6712
docs(structure): record replay ownership, the sidecar send budget, and the replacement fence

lidge-jun
and
luvs01
committed
52c1778
fix(codex): keep a non-replayable 400 out of the gated-model account retry

lidge-jun
and
luvs01
committed
211dbfa
fix(combos): stop on a spent replacement's answer instead of hopping

lidge-jun
and
luvs01
committed
26ed40a
fix(errors): match the whole replay refusal sentence

lidge-jun
and
luvs01
committed
58105e5
docs: state that bridged-search replay needs a caller key

lidge-jun
and
luvs01
committed
2a4eb57
docs(structure): add 413 and the combo stop to the replacement fence

lidge-jun
and
luvs01
committed
e7f0820
Merge remote-tracking branch 'origin/dev' into codex/260922-next-search-retry
lidge-jun
committed
f05b4be
Merge remote-tracking branch 'origin/dev' into codex/260922-next-search-retry
lidge-jun
committed
9c0ac49
Merge remote-tracking branch 'origin/dev' into codex/260922-next-search-retry
lidge-jun
committed
8a78611

Navigation Menu

fix(web-search): bound search replay ownership, reset replacement answers, and sidecar sends - #5575

fix(web-search): bound search replay ownership, reset replacement answers, and sidecar sends#5575
lidge-jun merged 19 commits into
devfrom
codex/260922-next-search-retry

Commits on Sep 22, 2026

fix(web-search): combine replay-cache isolation with deadline-safe quota evidence

fix(web-search): scope replay cells to key-resolved loopback principals

fix(retries): refuse transient 5xx after an operator-authorized reset replacement

fix(retries): word the replay refusal for the post-response path too

test(responses): keep the inline-document role fixture on its dev contract

fix(web-search): fail closed when a replay caller has no principal

fix(retries): keep every resend-inducing answer under replay suppression

fix(web-search): clear a stale replay principal and document its absence

fix(retries): refuse a redirect that would resend a spent replacement

fix(web-search): share one physical-send budget across sidecar reset and 429 recovery

docs(structure): record replay ownership, the sidecar send budget, and the replacement fence

fix(codex): keep a non-replayable 400 out of the gated-model account retry

fix(combos): stop on a spent replacement's answer instead of hopping

fix(errors): match the whole replay refusal sentence

docs: state that bridged-search replay needs a caller key

docs(structure): add 413 and the combo stop to the replacement fence

Merge remote-tracking branch 'origin/dev' into codex/260922-next-search-retry

Merge remote-tracking branch 'origin/dev' into codex/260922-next-search-retry

Merge remote-tracking branch 'origin/dev' into codex/260922-next-search-retry