mirror of https://github.com/openai/codex.git synced 2026-10-21 07:42:01 +00:00

Files

T

Celia Chen 1ee8f49175 Route exec-server HTTP through configured proxy policy (#35023 )

## Why

Delegated HTTP requests need to honor the same outbound proxy policy as the
Codex process that starts the exec server.

## What changed

- Pass the configured `HttpClientFactory` through local and remote exec-server
  startup and use route-aware client pools for delegated HTTP and local MCP
  requests.
- Preserve per-request timeouts and follow-or-stop redirect behavior while
  keeping request URLs and sensitive response headers out of diagnostics.

## Testing

- Cover configured system-proxy routing across the exec-server transport.
- Cover both redirect policies and verify that success and failure logs do not
  expose request or response secrets.

GitOrigin-RevId: 4af6aec1d265c4db62dfcb6e1fb076fb31736137

2026-07-23 22:39:28 +00:00

.cargo

fix: address quick-xml security advisories (#30941 )

2026-07-02 10:59:00 -07:00

.config

[codex] Speed up local nextest runs (#26479 )

2026-06-09 12:48:04 -07:00

agent-graph-store

Honor the configured SQLite home across state consumers (#34994 )

2026-07-23 19:19:35 +00:00

agent-identity

Migrate agent identity to the shared HTTP client (#34631 )

2026-07-21 22:44:43 +00:00

analytics

Attribute command executions to trusted plugin scripts (#35020 )

2026-07-23 22:31:53 +00:00

ansi-escape

…

app-server

Route exec-server HTTP through configured proxy policy (#35023 )

2026-07-23 22:39:28 +00:00

app-server-client

Flush analytics before in-process app server shutdown (#34831 )

2026-07-22 21:35:16 +00:00

app-server-daemon

Honor system proxy settings in the daemon updater (#34495 )

2026-07-21 08:50:21 +00:00

app-server-protocol

Attribute command executions to trusted plugin scripts (#35020 )

2026-07-23 22:31:53 +00:00

app-server-test-client

Add persisted thread pinning to the app server (#34840 )

2026-07-22 22:54:28 +00:00

app-server-transport

Honor the configured SQLite home across state consumers (#34994 )

2026-07-23 19:19:35 +00:00

apply-patch

Render turn diffs for foreign environment paths (#34654 )

2026-07-22 02:19:45 +00:00

arg0

Preserve custom arg0 for sandboxed exec-server processes (#34497 )

2026-07-21 08:59:41 +00:00

async-utils

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

aws-auth

…

backend-client

Add backend client support for Codex user settings (#34559 )

2026-07-21 15:00:18 +00:00

bwrap

build: run buildifier from just fmt (#28125 )

2026-06-13 21:43:39 -07:00

chatgpt

Use batch metadata for plugin app summaries (#34851 )

2026-07-23 01:00:35 +00:00

cli

Route exec-server HTTP through configured proxy policy (#35023 )

2026-07-23 22:39:28 +00:00

cloud-config

Honor configured proxy routes for auth refreshes (#34655 )

2026-07-22 02:26:16 +00:00

cloud-tasks

Require auth managers to receive routing configuration (#34650 )

2026-07-22 01:35:06 +00:00

cloud-tasks-client

Route backend requests through the HTTP client factory (#34490 )

2026-07-21 08:28:51 +00:00

cloud-tasks-mock-client

[codex] Remove async_trait from first-party code (#27475 )

2026-06-11 18:16:39 -07:00

code-mode

Add audio output support to dynamic tools and code mode (#34080 )

2026-07-18 23:22:13 +00:00

code-mode-host

fix: update crossbeam-epoch for RUSTSEC-2026-0204 (#31308 )

2026-07-06 16:26:56 -07:00

code-mode-protocol

Add buffered code-mode exec yields (#34441 )

2026-07-21 02:07:13 +00:00

codex-api

Separate Codex error details from retry metadata (#34996 )

2026-07-23 19:32:26 +00:00

codex-backend-openapi-models

[1/5] [codex] sync managed-layer bundle schema (#31285 )

2026-07-07 13:00:44 -07:00

codex-client

Extract shared HTTP transport into codex-http-client (#31323 )

2026-07-07 01:12:24 +00:00

codex-experimental-api-macros

…

codex-home

[codex] Bind shell snapshots to retained thread environments (#28421 )

2026-06-15 20:10:53 -07:00

codex-mcp

Route exec-server HTTP through configured proxy policy (#35023 )

2026-07-23 22:39:28 +00:00

collaboration-mode-templates

[prompting] updated plan mode prompt (#29301 )

2026-06-21 13:35:25 -07:00

config

Keep side conversations open when switching threads (#35011 )

2026-07-23 21:03:40 +00:00

connectors

Use batch metadata for plugin app summaries (#34851 )

2026-07-23 01:00:35 +00:00

context-fragments

core: rename metadata -> internal_chat_message_metadata_passthrough (#28968 )

2026-06-22 11:11:25 -07:00

core

Attribute command executions to trusted plugin scripts (#35020 )

2026-07-23 22:31:53 +00:00

core-api

Honor the configured SQLite home across state consumers (#34994 )

2026-07-23 19:19:35 +00:00

core-plugins

Attribute command executions to trusted plugin scripts (#35020 )

2026-07-23 22:31:53 +00:00

core-skills

Migrate login HTTP construction to HttpClient (#34643 )

2026-07-22 00:50:28 +00:00

docs

protocol: remove submission-side serde from Op (#26674 )

2026-06-05 15:41:13 -07:00

exec

Attribute command executions to trusted plugin scripts (#35020 )

2026-07-23 22:31:53 +00:00

exec-server

Route exec-server HTTP through configured proxy policy (#35023 )

2026-07-23 22:39:28 +00:00

exec-server-protocol

Add exec-server network policy callback types (#34620 )

2026-07-21 21:54:31 +00:00

execpolicy

Migrate legacy exec policy allow rules (#34271 )

2026-07-20 06:13:29 +00:00

ext

Warn when skill catalogs exceed their context budget (#34997 )

2026-07-23 19:44:12 +00:00

external-agent-migration

Infer the bundled Claude Code plugin marketplace (#34979 )

2026-07-23 17:51:12 +00:00

features

Allow omitting MCP tool prefixes per server (#34991 )

2026-07-23 18:54:55 +00:00

feedback

Avoid unnecessary post-sampling token estimates (#34789 )

2026-07-22 16:50:09 +00:00

file-search

…

file-system

Skip missing paths in filesystem sandbox entries (#34598 )

2026-07-21 19:17:18 +00:00

file-watcher

Fix fs/watch debounce batching (#24716 )

2026-05-28 23:09:55 -07:00

git-utils

Render turn diffs for foreign environment paths (#34654 )

2026-07-22 02:19:45 +00:00

hooks

Update tests for history and hook API changes (#34403 )

2026-07-20 20:06:58 +00:00

http-client

Route exec-server HTTP through configured proxy policy (#35023 )

2026-07-23 22:39:28 +00:00

install-context

Detect Codex installs managed by pnpm (#31503 )

2026-07-08 12:17:58 -04:00

keyring-store

feat: add auth-specific encrypted secret namespaces (#27535 )

2026-06-12 19:52:49 +00:00

linux-sandbox

Separate Codex error details from retry metadata (#34996 )

2026-07-23 19:32:26 +00:00

lmstudio

Route LM Studio requests through the shared HTTP client (#34678 )

2026-07-22 04:17:34 +00:00

Allow custom providers to opt into standalone web search (#34846 )

2026-07-23 00:02:15 +00:00

mcp-server

Initialize execution environments with the final HTTP policy (#34995 )

2026-07-23 19:24:41 +00:00

memories

Honor the configured SQLite home across state consumers (#34994 )

2026-07-23 19:19:35 +00:00

message-history

Add bounded batch lookups for message history (#33902 )

2026-07-17 20:52:42 +00:00

model-provider

Separate Codex error details from retry metadata (#34996 )

2026-07-23 19:32:26 +00:00

model-provider-info

Allow custom providers to opt into standalone web search (#34846 )

2026-07-23 00:02:15 +00:00

models-manager

Configure Codex Auto Review model metadata (#34687 )

2026-07-22 06:09:10 +00:00

network-proxy

Harden managed proxy setup for sandboxed executions (#34641 )

2026-07-22 00:31:30 +00:00

ollama

Optimize unbounded byte scans with memchr (#26265 )

2026-06-04 09:53:08 -04:00

otel

Extend second-based latency histogram buckets (#34375 )

2026-07-20 16:25:57 +00:00

plugin

Make selected plugin roots URI-native (#28918 )

2026-06-23 22:51:19 +01:00

process-hardening

fix(process-hardening): preserve macos malloc diagnostics (#24479 )

2026-05-25 17:26:10 -03:00

prompts

Fix network access rendering in sandbox prompts (#34811 )

2026-07-22 19:14:11 +00:00

protocol

Attribute command executions to trusted plugin scripts (#35020 )

2026-07-23 22:31:53 +00:00

response-debug-context

…

responses-api-proxy

…

rmcp-client

Route exec-server HTTP through configured proxy policy (#35023 )

2026-07-23 22:39:28 +00:00

rollout

Honor the configured SQLite home across state consumers (#34994 )

2026-07-23 19:19:35 +00:00

rollout-trace

Attribute command executions to trusted plugin scripts (#35020 )

2026-07-23 22:31:53 +00:00

sandboxing

Route Windows sandbox proxy traffic by restricting SID (#34613 )

2026-07-21 21:06:04 +00:00

scripts

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

secrets

feat: add auth-specific encrypted secret namespaces (#27535 )

2026-06-12 19:52:49 +00:00

shell-command

Add trusted plugin script attribution (#35016 )

2026-07-23 21:50:17 +00:00

shell-escalation

release: publish standalone zsh artifacts (#30114 )

2026-06-25 13:56:08 -07:00

skills

Move shared skill models into codex-skills (#34429 )

2026-07-20 23:22:48 +00:00

state

Support incremental replay of updated thread items (#35013 )

2026-07-23 21:17:45 +00:00

stdio-to-uds

…

terminal-detection

feat(cli): add codex doctor diagnostics (#22336 )

2026-05-13 21:23:19 +00:00

test-binary-support

…

thread-manager-sample

Initialize execution environments with the final HTTP policy (#34995 )

2026-07-23 19:24:41 +00:00

thread-store

Support incremental replay of updated thread items (#35013 )

2026-07-23 21:17:45 +00:00

tools

Reduce cloning when building Responses requests (#34825 )

2026-07-22 21:00:01 +00:00

tui

Adapt keyboard event reporting to the terminal (#35021 )

2026-07-23 22:35:23 +00:00

uds

…

utils

Render turn diffs for foreign environment paths (#34654 )

2026-07-22 02:19:45 +00:00

v8-poc

Upgrade Bazel Rust and LLVM dependencies (#34781 )

2026-07-22 16:18:08 +00:00

vendor

build: run buildifier from just fmt (#28125 )

2026-06-13 21:43:39 -07:00

websocket-client

Resolve outbound proxy routes explicitly (#34435 )

2026-07-21 00:33:04 +00:00

windows-sandbox-rs

Harden Windows elevated sandbox startup (#34629 )

2026-07-21 22:36:18 +00:00

.gitignore

…

BUILD.bazel

bench: add e2e benchmark entrypoints (#31428 )

2026-07-09 17:31:44 -07:00

Cargo.lock

Route exec-server HTTP through configured proxy policy (#35023 )

2026-07-23 22:39:28 +00:00

Cargo.toml

Initialize execution environments with the final HTTP policy (#34995 )

2026-07-23 19:24:41 +00:00

clippy.toml

…

config.md

Use canonical links in the moved config notice (#32326 )

2026-07-11 03:27:51 +00:00

default.nix

…

deny.toml

Route LM Studio requests through the shared HTTP client (#34678 )

2026-07-22 04:17:34 +00:00

README.md

Simplify Codex CLI README (#26313 )

2026-06-04 09:16:03 -07:00

rust-toolchain.toml

Uprev Rust toolchain pins to 1.95.0 (#24684 )

2026-05-26 20:59:47 -07:00

rustfmt.toml

…

README.md

Codex CLI

Codex CLI Documentation