[codex] cover app-owned HTTP requests

[cooper-oai]

Why

Some app-owned requests bypass the shared model and backend clients covered by #26141. This routing layer attributes the remaining connection-owned work without inventing ownership for process-global background activity.

What changed

• Attribute app-server connection-owned ChatGPT helpers, extensions, connectors, plugins, threadless MCP, session helpers, and standalone realtime WebSocket requests.
• Pass HTTP-state context into Codex Apps MCP and plugin background work so attributable requests attach and rotate state.
• Derive independent per-turn surface snapshots for Apps MCP refresh and file upload. Snapshots share the store but do not alias the mutable session surface selection.
• Resolve model-turn auth with the selected surface, including proactive refresh and HTTP or WebSocket /responses 401 recovery.
• Leave process-global background requests unattributed when no initiating surface exists.

Review guide

• This is a broad but shallow attribution pass: reusable storage, protocol, lifecycle, and shared-client behavior live in earlier PRs.
• Each call site should take ownership from its initiating app-server connection or turn. It should not default unattributed work to desktop or CLI.
• The per-turn snapshot prevents a later clientInfo update from sending or rotating another surface's jar during MCP work.

Stack

This is PR 6 of 7 in the native HTTP-state stack. It depends on #26141.

1. #26137: per-surface store
2. #26138: app-server bridge
3. #26139: HTTP and WebSocket transport
4. #26140: login, refresh, logout, and remote control
5. #26141: shared model and backend clients
6. #26142: app-owned requests (this PR)
7. #26143: standalone CLI requests

Validation

• codex-app-server: 811 tests passed
• codex-core-plugins, codex-chatgpt, codex-mcp, and codex-rmcp-client: 338 tests passed; the RMCP remote harness passed after building its expected codex binary
• codex-http-state: 5 tests passed
• Focused Apps file-upload integration test passed
• just test -p codex-core response_401_refresh_preserves_native_http_state_surface
• just fix -p codex-core
• just fmt
• just bazel-lock-update produced no lockfile delta
• git diff --check

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2fdfb6f6a7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[cooper-oai]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f437c2c6af

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[cooper-oai]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a1cdb1be2f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".