core-agent-ide/codex-rs/network-proxy/src
viyatb-oai 8d3d58f992
feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859)
## Description
- Adds MITM support (CA load/issue, TLS termination, optional body
inspection).
- Adds `codex-network-proxy init` to create
`CODEX_HOME/network_proxy/mitm`.
- Enforces limited-mode HTTPS correctly: `CONNECT` requires MITM,
otherwise blocked with `mitm_required`.
- Keeps `origin/main` layering/reload semantics (managed layers included
in reload checks).
- Centralizes block reasons (`REASON_MITM_REQUIRED`) and removes
`println!`.
- Scope is MITM-only (no SOCKS changes).

gated by `mitm=false` (default)
2026-02-24 18:15:15 +00:00
..
admin.rs feat(network-proxy): structured policy signaling and attempt correlation to core (#11662) 2026-02-13 09:01:11 +00:00
certs.rs feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859) 2026-02-24 18:15:15 +00:00
config.rs feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859) 2026-02-24 18:15:15 +00:00
http_proxy.rs feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859) 2026-02-24 18:15:15 +00:00
lib.rs feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859) 2026-02-24 18:15:15 +00:00
mitm.rs feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859) 2026-02-24 18:15:15 +00:00
mitm_tests.rs feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859) 2026-02-24 18:15:15 +00:00
network_policy.rs Refactor network approvals to host/protocol/port scope (#12140) 2026-02-20 10:39:55 -08:00
policy.rs feat: introducing a network sandbox proxy (#8442) 2026-01-23 17:47:09 -08:00
proxy.rs feat(core): persist network approvals in execpolicy (#12357) 2026-02-23 21:37:46 -08:00
reasons.rs feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859) 2026-02-24 18:15:15 +00:00
responses.rs feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859) 2026-02-24 18:15:15 +00:00
runtime.rs feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859) 2026-02-24 18:15:15 +00:00
socks5.rs Refactor network approvals to host/protocol/port scope (#12140) 2026-02-20 10:39:55 -08:00
state.rs feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859) 2026-02-24 18:15:15 +00:00
upstream.rs feat: enable premessage-deflate for websockets (#10966) 2026-02-07 17:59:34 -08:00