refactor: remove proxy admin endpoint (#13687)

## Summary
- delete the network proxy admin server and its runtime listener/task
plumbing
- remove the admin endpoint config, runtime, requirement, protocol,
schema, and debug-surface fields
- update proxy docs to reflect the remaining HTTP and SOCKS listeners
only

codex-rs/core/src/codex.rs

@@ -1017,7 +1017,6 @@ impl Session {
             SessionNetworkProxyRuntime {
                 http_addr: proxy.http_addr().to_string(),
                 socks_addr: proxy.socks_addr().to_string(),
-                admin_addr: proxy.admin_addr().to_string(),
             }
         };
         Ok((network_proxy, session_network_proxy))

codex-rs/core/src/config/mod.rs

@@ -2727,13 +2727,11 @@ allowed_domains = ["openai.com"]
             NetworkToml {
                 enabled: Some(true),
                 proxy_url: Some("http://127.0.0.1:43128".to_string()),
-                admin_url: None,
                 enable_socks5: Some(false),
                 socks_url: None,
                 enable_socks5_udp: None,
                 allow_upstream_proxy: Some(false),
                 dangerously_allow_non_loopback_proxy: None,
-                dangerously_allow_non_loopback_admin: None,
                 dangerously_allow_all_unix_sockets: None,
                 mode: None,
                 allowed_domains: Some(vec!["openai.com".to_string()]),

codex-rs/core/src/config/network_proxy_spec.rs

@@ -183,14 +183,6 @@ impl NetworkProxySpec {
             constraints.dangerously_allow_non_loopback_proxy =
                 Some(dangerously_allow_non_loopback_proxy);
         }
-        if let Some(dangerously_allow_non_loopback_admin) =
-            requirements.dangerously_allow_non_loopback_admin
-        {
-            config.network.dangerously_allow_non_loopback_admin =
-                dangerously_allow_non_loopback_admin;
-            constraints.dangerously_allow_non_loopback_admin =
-                Some(dangerously_allow_non_loopback_admin);
-        }
         if let Some(dangerously_allow_all_unix_sockets) =
             requirements.dangerously_allow_all_unix_sockets
         {

codex-rs/core/src/config/permissions.rs

@@ -17,13 +17,11 @@ pub struct PermissionsToml {
 pub struct NetworkToml {
     pub enabled: Option<bool>,
     pub proxy_url: Option<String>,
-    pub admin_url: Option<String>,
     pub enable_socks5: Option<bool>,
     pub socks_url: Option<String>,
     pub enable_socks5_udp: Option<bool>,
     pub allow_upstream_proxy: Option<bool>,
     pub dangerously_allow_non_loopback_proxy: Option<bool>,
-    pub dangerously_allow_non_loopback_admin: Option<bool>,
     pub dangerously_allow_all_unix_sockets: Option<bool>,
     #[schemars(with = "Option<NetworkModeSchema>")]
     pub mode: Option<NetworkMode>,
@@ -48,9 +46,6 @@ impl NetworkToml {
         if let Some(proxy_url) = self.proxy_url.as_ref() {
             config.network.proxy_url = proxy_url.clone();
         }
-        if let Some(admin_url) = self.admin_url.as_ref() {
-            config.network.admin_url = admin_url.clone();
-        }
         if let Some(enable_socks5) = self.enable_socks5 {
             config.network.enable_socks5 = enable_socks5;
         }
@@ -69,12 +64,6 @@ impl NetworkToml {
             config.network.dangerously_allow_non_loopback_proxy =
                 dangerously_allow_non_loopback_proxy;
         }
-        if let Some(dangerously_allow_non_loopback_admin) =
-            self.dangerously_allow_non_loopback_admin
-        {
-            config.network.dangerously_allow_non_loopback_admin =
-                dangerously_allow_non_loopback_admin;
-        }
         if let Some(dangerously_allow_all_unix_sockets) = self.dangerously_allow_all_unix_sockets {
             config.network.dangerously_allow_all_unix_sockets = dangerously_allow_all_unix_sockets;
         }

codex-rs/core/src/network_proxy_loader.rs

@@ -146,11 +146,6 @@ fn apply_network_constraints(network: NetworkToml, constraints: &mut NetworkProx
         constraints.dangerously_allow_non_loopback_proxy =
             Some(dangerously_allow_non_loopback_proxy);
     }
-    if let Some(dangerously_allow_non_loopback_admin) = network.dangerously_allow_non_loopback_admin
-    {
-        constraints.dangerously_allow_non_loopback_admin =
-            Some(dangerously_allow_non_loopback_admin);
-    }
     if let Some(dangerously_allow_all_unix_sockets) = network.dangerously_allow_all_unix_sockets {
         constraints.dangerously_allow_all_unix_sockets = Some(dangerously_allow_all_unix_sockets);
     }