c3048ff90a
## Summary Persist network approval allow/deny decisions as `network_rule(...)` entries in execpolicy (not proxy config) It adds `network_rule` parsing + append support in `codex-execpolicy`, including `decision="prompt"` (parse-only; not compiled into proxy allow/deny lists) - compile execpolicy network rules into proxy allow/deny lists and update the live proxy state on approval - preserve requirements execpolicy `network_rule(...)` entries when merging with file-based execpolicy - reject broad wildcard hosts (for example `*`) for persisted `network_rule(...)`
25 lines
634 B
Rust
25 lines
634 B
Rust
pub mod amend;
|
|
pub mod decision;
|
|
pub mod error;
|
|
pub mod execpolicycheck;
|
|
pub mod parser;
|
|
pub mod policy;
|
|
pub mod rule;
|
|
|
|
pub use amend::AmendError;
|
|
pub use amend::blocking_append_allow_prefix_rule;
|
|
pub use amend::blocking_append_network_rule;
|
|
pub use decision::Decision;
|
|
pub use error::Error;
|
|
pub use error::ErrorLocation;
|
|
pub use error::Result;
|
|
pub use error::TextPosition;
|
|
pub use error::TextRange;
|
|
pub use execpolicycheck::ExecPolicyCheckCommand;
|
|
pub use parser::PolicyParser;
|
|
pub use policy::Evaluation;
|
|
pub use policy::Policy;
|
|
pub use rule::NetworkRuleProtocol;
|
|
pub use rule::Rule;
|
|
pub use rule::RuleMatch;
|
|
pub use rule::RuleRef;
|