codex

mirror of https://github.com/pchuan98/codex.git synced 2026-07-01 00:31:56 +08:00

Files

T

viyatb-oai 3c1adbabcd fix: refresh network proxy settings when sandbox mode changes (#17040 )

## Summary

Fix network proxy sessions so changing sandbox mode recomputes the
effective managed network policy and applies it to the already-running
per-session proxy.

## Root Cause

`danger_full_access_denylist_only` injects `"*"` only while building the
proxy spec for Full Access. Sessions built that spec once at startup, so
a later permission switch to Full Access left the live proxy in its
original restricted policy. Switching back needed the same recompute
path to remove the synthetic wildcard again.

## What Changed

- Preserve the original managed network proxy config/requirements so the
effective spec can be recomputed for a new sandbox policy.
- Refresh the current session proxy when sandbox settings change, then
reapply exec-policy network overlays.
- Add an in-place proxy state update path while rejecting
listener/port/SOCKS changes that cannot be hot-reloaded.
- Keep runtime proxy settings cheap to snapshot and update.
- Add regression coverage for workspace-write -> Full Access ->
workspace-write.

3c1adbabcd · 2026-04-08 03:07:55 +00:00

History

certs.rs

Apply argument comment lint across codex-rs (#14652 )

2026-03-16 16:48:15 -07:00

config.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054 )

2026-03-27 19:00:44 -07:00

http_proxy.rs

chore: clean up argument-comment lint and roll out all-target CI on macOS (#16054 )

2026-03-27 19:00:44 -07:00

lib.rs