2 Commits

Author	SHA1	Message	Date
viyatb-oai	9a4787c240	fix: reject global wildcard network proxy domains (#13789) ... ## Summary - reject the global `*` domain pattern in proxy allow/deny lists and managed constraints introduced for testing earlier - keep exact hosts plus scoped wildcards like `*.example.com` and `**.example.com` - update docs and regression tests for the new invalid-config behavior	2026-03-06 21:06:24 +00:00
viyatb-oai	8d3d58f992	feat(network-proxy): add MITM support and gate limited-mode CONNECT (#9859) ... ## Description - Adds MITM support (CA load/issue, TLS termination, optional body inspection). - Adds `codex-network-proxy init` to create `CODEX_HOME/network_proxy/mitm`. - Enforces limited-mode HTTPS correctly: `CONNECT` requires MITM, otherwise blocked with `mitm_required`. - Keeps `origin/main` layering/reload semantics (managed layers included in reload checks). - Centralizes block reasons (`REASON_MITM_REQUIRED`) and removes `println!`. - Scope is MITM-only (no SOCKS changes). gated by `mitm=false` (default)	2026-02-24 18:15:15 +00:00