diff --git a/internal/runtime/executor/codex_continuity.go b/internal/runtime/executor/codex_continuity.go index e2fa8de0..9a0cd1b4 100644 --- a/internal/runtime/executor/codex_continuity.go +++ b/internal/runtime/executor/codex_continuity.go @@ -14,8 +14,6 @@ import ( "github.com/tidwall/sjson" ) -const codexAuthAffinityMetadataKey = "auth_affinity_key" - type codexContinuity struct { Key string Source string diff --git a/internal/runtime/executor/codex_executor_cache_test.go b/internal/runtime/executor/codex_executor_cache_test.go index 8c61a22e..f6def7ae 100644 --- a/internal/runtime/executor/codex_executor_cache_test.go +++ b/internal/runtime/executor/codex_executor_cache_test.go @@ -178,18 +178,3 @@ func TestCodexExecutorCacheHelper_ClaudePreservesCacheContinuity(t *testing.T) { t.Fatalf("session_id = %q, want %q", got, continuity.Key) } } - -func TestResolveCodexContinuity_DoesNotForwardAuthAffinityKey(t *testing.T) { - req := cliproxyexecutor.Request{Payload: []byte(`{"model":"gpt-5.4"}`)} - opts := cliproxyexecutor.Options{Metadata: map[string]any{"auth_affinity_key": "principal:raw-client-secret"}} - auth := &cliproxyauth.Auth{ID: "codex-auth-1", Provider: "codex"} - - continuity := resolveCodexContinuity(context.Background(), auth, req, opts) - - if continuity.Source != "auth_id" { - t.Fatalf("continuity.Source = %q, want %q", continuity.Source, "auth_id") - } - if continuity.Key == "principal:raw-client-secret" { - t.Fatal("continuity.Key leaked raw auth affinity key") - } -}