mirror of
https://github.com/pchuan98/codex.git
synced 2026-07-01 00:31:56 +08:00
Anton PanasenkoandGitHub
b9dc3b7a8b
## Why Managed deployments need a reliable deny gate for remote control. Persisted enablement and explicit startup requests currently remain able to start the transport, while the removed `features.remote_control` key is intentionally only a compatibility no-op. This adds a dedicated requirement that administrators can use to force remote control off without deleting the user's persisted preference. Removing the requirement and restarting restores the prior choice. ## What Changed - Added top-level `allow_remote_control` requirements parsing, sourced layer precedence, debug output, and `configRequirements/read` exposure as `allowRemoteControl`. - Added a typed transport policy captured from the startup requirements snapshot. Managed disable forces the initial state to disabled and prevents enrollment, refresh, connection, and persisted-preference mutation. - Rejected every `remoteControl/*` RPC before parameter deserialization with JSON-RPC `-32600` and `remote control is disabled by managed requirements`. - Preserved the existing disabled status notification and the previous behavior when the requirement is `true` or omitted. - Regenerated app-server protocol schemas and documented the new requirement. ## Verification - Confirmed all remote-control RPCs, including a malformed request, return the managed-policy error while the initial status notification remains `disabled`. - Confirmed explicit ephemeral startup and persisted enablement make no backend connection and leave the SQLite preference unchanged. - Confirmed `allow_remote_control = true` does not enable or block remote control and `configRequirements/read` returns `allowRemoteControl: false` for the deny policy. Related issue: N/A (managed-policy hardening).
33 lines
1.3 KiB
Rust
33 lines
1.3 KiB
Rust
mod outgoing_message;
|
|
mod transport;
|
|
|
|
pub use outgoing_message::ConnectionId;
|
|
pub use outgoing_message::OutgoingError;
|
|
pub use outgoing_message::OutgoingMessage;
|
|
pub use outgoing_message::OutgoingResponse;
|
|
pub use outgoing_message::QueuedOutgoingMessage;
|
|
pub use transport::AppServerStartupLock;
|
|
pub use transport::AppServerTransport;
|
|
pub use transport::AppServerTransportParseError;
|
|
pub use transport::CHANNEL_CAPACITY;
|
|
pub use transport::ConnectionOrigin;
|
|
pub use transport::REMOTE_CONTROL_DISABLED_ENV_VAR;
|
|
pub use transport::RemoteControlDisabledByRequirements;
|
|
pub use transport::RemoteControlEnableError;
|
|
pub use transport::RemoteControlHandle;
|
|
pub use transport::RemoteControlPolicy;
|
|
pub use transport::RemoteControlStartConfig;
|
|
pub use transport::RemoteControlStartupMode;
|
|
pub use transport::RemoteControlUnavailable;
|
|
pub use transport::TransportEvent;
|
|
pub use transport::acquire_app_server_startup_lock;
|
|
pub use transport::app_server_control_socket_path;
|
|
pub use transport::app_server_startup_lock_path;
|
|
pub use transport::auth;
|
|
pub use transport::prepare_control_socket_path;
|
|
pub use transport::start_control_socket_acceptor;
|
|
pub use transport::start_remote_control;
|
|
pub use transport::start_stdio_connection;
|
|
pub use transport::start_websocket_acceptor;
|
|
pub use transport::take_remote_control_disabled_env;
|