viyatb-oai 8d3d58f992 feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859) ...

## Description
- Adds MITM support (CA load/issue, TLS termination, optional body
inspection).
- Adds `codex-network-proxy init` to create
`CODEX_HOME/network_proxy/mitm`.
- Enforces limited-mode HTTPS correctly: `CONNECT` requires MITM,
otherwise blocked with `mitm_required`.
- Keeps `origin/main` layering/reload semantics (managed layers included
in reload checks).
- Centralizes block reasons (`REASON_MITM_REQUIRED`) and removes
`println!`.
- Scope is MITM-only (no SOCKS changes).

gated by `mitm=false` (default)

8d3d58f992 · 2026-02-24 18:15:15 +00:00

History

..

admin.rs

feat(network-proxy): structured policy signaling and attempt correlation to core (#11662)

2026-02-13 09:01:11 +00:00

certs.rs

feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859)

2026-02-24 18:15:15 +00:00

config.rs

feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859)

2026-02-24 18:15:15 +00:00

http_proxy.rs

feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859)

2026-02-24 18:15:15 +00:00

lib.rs

feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859)

2026-02-24 18:15:15 +00:00

mitm_tests.rs

feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859)

2026-02-24 18:15:15 +00:00

mitm.rs

feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859)

2026-02-24 18:15:15 +00:00

network_policy.rs

Refactor network approvals to host/protocol/port scope (#12140)

2026-02-20 10:39:55 -08:00

policy.rs

feat: introducing a network sandbox proxy (#8442)

2026-01-23 17:47:09 -08:00

proxy.rs

feat(core): persist network approvals in execpolicy (#12357)

2026-02-23 21:37:46 -08:00

reasons.rs

feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859)

2026-02-24 18:15:15 +00:00

responses.rs

feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859)

2026-02-24 18:15:15 +00:00

runtime.rs

feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859)

2026-02-24 18:15:15 +00:00

socks5.rs

Refactor network approvals to host/protocol/port scope (#12140)

2026-02-20 10:39:55 -08:00

state.rs

feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859)

2026-02-24 18:15:15 +00:00

upstream.rs

feat: enable premessage-deflate for websockets (#10966)

2026-02-07 17:59:34 -08:00