## Summary Persist network approval allow/deny decisions as `network_rule(...)` entries in execpolicy (not proxy config) It adds `network_rule` parsing + append support in `codex-execpolicy`, including `decision="prompt"` (parse-only; not compiled into proxy allow/deny lists) - compile execpolicy network rules into proxy allow/deny lists and update the live proxy state on approval - preserve requirements execpolicy `network_rule(...)` entries when merging with file-based execpolicy - reject broad wildcard hosts (for example `*`) for persisted `network_rule(...)` |
||
|---|---|---|
| .. | ||
| admin.rs | ||
| config.rs | ||
| http_proxy.rs | ||
| lib.rs | ||
| network_policy.rs | ||
| policy.rs | ||
| proxy.rs | ||
| reasons.rs | ||
| responses.rs | ||
| runtime.rs | ||
| socks5.rs | ||
| state.rs | ||
| upstream.rs | ||