[gjtorikian]

Summary

• Container adapters can declare optionalHostEnv: endpoint overrides forwarded into attempt containers only when set (ANTHROPIC_BASE_URL and ANTHROPIC_CUSTOM_HEADERS for claude, OPENAI_BASE_URL for codex). Unset means vendor-direct, exactly as before.
• The harness adds an override's host to the egress allowlist, retargets the preflight key probe at it, and redacts *_HEADERS from artifacts like a key; base URLs stay diagnostic in transcripts.
• The codex adapter renders OPENAI_BASE_URL into ~/.codex/config.toml as a custom model provider, because codex 0.149.1 ignores the env var for its built-in provider (verified in the pinned agent-runtime image: it still dialed api.openai.com).
• AnthropicModelClient (the diagnose analyst) honors ANTHROPIC_BASE_URL via the SDK and ANTHROPIC_CUSTOM_HEADERS via a small Name: Value parser, so diagnosis takes the same route as the agent.
• Verified live inside quickstudy/agent-runtime against a Cloudflare AI Gateway: Claude Code 2.1.215 and Codex 0.149.1 both completed a prompt through it. The README documents the contract with placeholders only; nothing vendor- or company-specific lands in the harness.

[greptile-apps]

Confidence Score: 5/5

[High impact] The PR appears safe to merge; all five previous findings are addressed.

Summary

Adds gateway endpoint overrides for Claude, Codex, and the diagnosis analyst.

• Claude and Codex can route requests through an LLM gateway.
• The diagnosis analyst can use Claude’s configured gateway route.
• Gateway header credentials stay out of saved artifacts.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  E[Host endpoint overrides] --> P[Gateway preflight probe]
  E --> M[Full endpoint URLs in run identity]
  E --> C[Attempt container environment]
  C --> A[Claude reads environment]
  C --> T[Codex config.toml]
  A --> G[LLM gateway]
  T --> G
  M --> R[Reject resume when route changes]

Loading

_{Reviews (2) · Last reviewed commit: "fix(gateway): deliver multi-line headers..." · Reviewed by Greptile}