codex

mirror of https://github.com/openai/codex.git synced 2026-04-24 22:54:54 +00:00

Files

viyatb-oai 77222492f9 feat: introducing a network sandbox proxy (#8442 )

This add a new crate, `codex-network-proxy`, a local network proxy
service used by Codex to enforce fine-grained network policy (domain
allow/deny) and to surface blocked network events for interactive
approvals.

- New crate: `codex-rs/network-proxy/` (`codex-network-proxy` binary +
library)
- Core capabilities:
  - HTTP proxy support (including CONNECT tunneling)
  - SOCKS5 proxy support (in the later PR)
- policy evaluation (allowed/denied domain lists; denylist wins;
wildcard support)
  - small admin API for polling/reload/mode changes
- optional MITM support for HTTPS CONNECT to enforce “limited mode”
method restrictions (later PR)

Will follow up integration with codex in subsequent PRs.

## Testing

- `cd codex-rs && cargo build -p codex-network-proxy`
- `cd codex-rs && cargo run -p codex-network-proxy -- proxy`

2026-01-23 17:47:09 -08:00

bazel.yml

Upgrade GitHub Actions for Node 24 compatibility (#9722 )

2026-01-23 12:06:04 -08:00

cargo-deny.yml

bump cargo-deny-action ver (#8345 )

2025-12-19 15:23:02 -08:00

ci.bazelrc

fix: support remote arm64 builds, as well (#9018 )

2026-01-10 18:41:08 -08:00

ci.yml

use mainline version as baseline in ci (#8271 )