jackz d570b3632b Enforce application network policy for daemon updates (#52223) ...

## Why

Daemon updates must honor application network restrictions and stop when their configuration cannot be loaded.

## What changed

Activate the configured application network policy before creating the HTTP client for daemon updates and the PID update loop. Propagate configuration errors instead of falling back to a default HTTP client.

## Testing

Add tests for configuration error propagation and managed network requirements, covering denied and unlisted destinations as well as an allowed destination. Retain coverage for `features.respect_system_proxy`.

GitOrigin-RevId: 960485c7c57f34654402d7316cab9e0f66f24af3

2026-10-08 18:53:17 +00:00

..

bin

Honor the configured SQLite home in the logs client (#35695)

2026-07-28 01:17:52 +00:00

debug_sandbox

Fail closed when workload identity initialization fails (#38424)

2026-08-13 19:35:22 +00:00

desktop_app

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

doctor

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

snapshots

Track credential storage outcomes and redact sensitive errors (#49384)

2026-09-29 22:24:09 +00:00

app_cmd.rs

Support ChatGPT-branded Desktop app builds (#33901)

2026-07-17 20:46:18 +00:00

cloud_config.rs

Enforce application network policy in standalone MCP commands (#52215)

2026-10-08 18:22:39 +00:00

daemon_install_tests.rs

Allow daemon updates to restore pinned packages to latest stable (#45780)

2026-09-15 19:51:06 +00:00

daemon_install.rs

Allow daemon updates to restore pinned packages to latest stable (#45780)

2026-09-15 19:51:06 +00:00

daemon_telemetry.rs

Record daemon startup and update telemetry with consent handling (#46126)

2026-09-17 05:26:45 +00:00

daemon_update_tests.rs

Use descriptor-safe helpers for executable test fixtures (#50018)

2026-10-01 15:57:03 +00:00

debug_sandbox.rs

Enforce managed MXC requirements on Windows (#52193)

2026-10-08 17:48:32 +00:00

doctor.rs

Remove the patched zsh shell execution backend (#52160)

2026-10-08 16:19:09 +00:00

exec_args_tests.rs

Add per-turn Cyber access program selection to exec and the SDK (#49939)

2026-10-01 08:57:53 +00:00

exec_server_args_tests.rs

Allow exec-server to proxy permitted private IPs upstream (#48568)

2026-09-26 23:17:41 +00:00

exec_server_auth_tests.rs

Enforce application network policy for AWS auth and telemetry (#47408)

2026-09-23 00:47:34 +00:00

exec_server_auth.rs

Enforce application network policy for AWS auth and telemetry (#47408)

2026-09-23 00:47:34 +00:00

exec_server_command.rs

Preserve the CLI MXC preference in executor config reads (#51525)

2026-10-07 00:29:04 +00:00

exec_server_telemetry_tests.rs

Tie remote exec servers to their parent stdin (#35843)

2026-07-28 23:27:46 +00:00

exec_server_telemetry.rs

Tie remote exec servers to their parent stdin (#35843)

2026-07-28 23:27:46 +00:00

exit_status.rs

feat: experimental env var: CODEX_SANDBOX_NETWORK_DISABLED (#879)

2025-05-09 18:29:34 -07:00

lib.rs

cli: rename sandbox permission profile flag (#30095)

2026-06-25 11:25:19 -07:00

login_storage_tests.rs

Track credential storage outcomes and redact sensitive errors (#49384)

2026-09-29 22:24:09 +00:00

login.rs

Track credential storage outcomes and redact sensitive errors (#49384)

2026-09-29 22:24:09 +00:00

main.rs

Enforce application network policy for daemon updates (#52223)

2026-10-08 18:53:17 +00:00

marketplace_cmd.rs

Report managed filesystem policy in codex doctor (#42821)

2026-09-04 18:23:10 +00:00

mcp_cmd_tests.rs

Enforce application network policy in standalone MCP commands (#52215)

2026-10-08 18:22:39 +00:00

mcp_cmd.rs

Enforce application network policy in standalone MCP commands (#52215)

2026-10-08 18:22:39 +00:00

mcp_login_tests.rs

Add manual callback input to MCP OAuth login (#44629)

2026-09-10 19:51:52 +00:00

mcp_login.rs

Support client secrets for pre-registered MCP OAuth clients (#47891)

2026-09-24 17:26:18 +00:00

migrate_rollouts.rs

Report thread storage changes after rollout migration (#38579)

2026-08-14 13:40:35 +00:00

plugin_cmd.rs

Replace Sites migration state with a runtime compatibility guard (#46108)

2026-09-17 04:23:45 +00:00

queue_cmd.rs

Add managed worktrees to codex exec (#42652)

2026-09-04 01:56:38 +00:00

remote_control_cmd.rs

Use the managed daemon for eligible remote-control launches (#50803)

2026-10-04 06:28:20 +00:00

sandbox_setup.rs

Route Windows sandbox proxy traffic by restricting SID (#34613)

2026-07-21 21:06:04 +00:00

sandbox_uninstall.rs

Add a CLI command to uninstall the legacy Windows sandbox (#50437)

2026-10-02 21:51:46 +00:00

state_db_recovery.rs

Classify SQLite corruption using typed error codes (#49710)

2026-09-30 19:00:00 +00:00

wsl_paths.rs

[codex] reduce module visibility (#16978)

2026-04-07 08:03:35 -07:00