codex_sponsor_controls

Owner-defined model locks and rolling prompt limits for shared Codex quota.

The controls in this module are deliberately scoped to one validated sponsorship edge. They never constrain a beneficiary’s own linked account, and every provider attempt revalidates the live grant plus policy revision before reserving rate-limit capacity.

exception codex_sponsor_controls.CodexSponsorControlUnavailable

Bases: RuntimeError

Sponsor controls could not be read or changed safely.

class codex_sponsor_controls.SponsorPromptAuthorization(status, count=0, reservation=None)

Bases: object

Parameters:
status: Literal['allowed', 'rate_limited', 'changed', 'revoked']
count: int
reservation: SponsorPromptReservation | None
class codex_sponsor_controls.SponsorPromptReservation(rate_key, member, added)

Bases: object

A rolling-window reservation made immediately before a provider call.

Parameters:
rate_key: str
member: str
added: bool
class codex_sponsor_controls.SponsorQuotaPolicy(locks=(), rate_limits=(), revision='')

Bases: object

One generation-bound sponsor policy for one beneficiary.

Parameters:
locks: tuple[tuple[str, str], ...]
rate_limits: tuple[tuple[str, int], ...]
revision: str
lock_for(model_alias)
Return type:

str | None

Parameters:

model_alias (str)

rate_limit_for(model_alias)
Return type:

int | None

Parameters:

model_alias (str)

async codex_sponsor_controls.authorize_sponsor_prompt(redis, grant, policy, *, model_alias, turn_id, now_ms)

Revalidate policy and atomically reserve one rolling-window prompt.

Return type:

SponsorPromptAuthorization

Parameters:
codex_sponsor_controls.effort_is_allowed(policy, model_alias, effort)

Return whether one pair survives the owner’s model ceiling.

Return type:

bool

Parameters:
async codex_sponsor_controls.load_sponsor_policy(redis, grant)

Load the policy for an exact live grant generation.

A hash from an older grant generation is treated as absent. A malformed hash claiming to govern the current grant fails closed.

Return type:

SponsorQuotaPolicy

Parameters:
async codex_sponsor_controls.release_sponsor_prompt(redis, reservation)

Refund a newly-added reservation after a proven effect-free refusal.

Return type:

None

Parameters:
async codex_sponsor_controls.set_sponsor_model_lock(redis, grant, *, models, maximum_effort)
Return type:

None

Parameters:
async codex_sponsor_controls.set_sponsor_rate_limit(redis, grant, *, model, daily_limit)
Return type:

None

Parameters:
codex_sponsor_controls.sponsor_policy_redis_key(owner_subject, beneficiary_subject)
Return type:

str

Parameters:

  • owner_subject (str)

  • beneficiary_subject (str)

async codex_sponsor_controls.sponsor_prompt_usage(redis, grant, model_alias, *, now_ms)

Return the live rolling-24-hour count for one sponsored model.

Return type:

int

Parameters: