[codex] allow CCA image generation and web search extensions

[won-openai]

Summary

• allow the standalone image-generation and web-search extensions for the actor-authorized provider shape used by CCA
• preserve builtin image_generation and web_search for older models and existing flows
• keep ordinary non-OpenAI providers excluded from both extensions
• remove only the image extension local managed-AuthManager requirement that CCA cannot satisfy
• share actor-authorization detection through ModelProviderInfo
• keep Core tests focused on routing behavior and cover header-shape edge cases in model-provider-info
• add a Responses Lite regression that verifies both image_gen.imagegen and web.run

Why

CCA uses a provider named local with requires_openai_auth: false and a non-empty x-openai-actor-authorization header. Core accepts that provider shape, but both extension provider-name gates rejected it; image generation additionally required a Codex-managed login.

The standalone paths must coexist with existing builtin tools. New Responses Lite models can receive image_gen.imagegen and web.run, while older models continue using builtin tools.

Impact

This enables both standalone extensions for CCA once installed downstream, without removing or changing builtin-tool compatibility for older models.

Validation

• just test -p codex-core responses_lite_exposes_standalone_tools_for_actor_authorized_provider
• just test -p codex-core responses_lite_uses_standalone_web_search_and_image_generation
• just test -p codex-core hosted_tools_follow_provider_auth_model_and_config_gates
• just test -p codex-image-generation-extension
• just test -p codex-web-search-extension
• just test -p codex-model-provider-info
• just fmt
• git diff --check

[won-openai]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 7f36bad543

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Honor disabled image generation for actor providers

When an actor-authorized provider is used with a Responses Lite model and image_generation is disabled in config, this branch still makes the standalone image-generation executor available. Core's Responses Lite visibility path accepts an available image_gen.imagegen executor after provider/model checks without consulting Feature::ImageGeneration, so a configuration intended to disable image generation can still advertise and dispatch it for these providers; gate this availability on the stable feature as well.

AGENTS.md reference: AGENTS.md:L104-L110

Useful? React with 👍 / 👎.

[sayan-oai]

this true?