richardopenai 2aff7208fe Add a hidden HTTP/3 TCP tunnel command (#45900) ...

## What changed

Add `codex tcp-tunnel` and the `codex-tcp-tunnel` crate to forward loopback TCP connections to an explicit target through a TLS-verified HTTP/3 CONNECT proxy.

- Require the proxy origin to match an approved HTTPS origin in a supplied policy file.
- Read bearer tokens and optional bounded, non-forwarding `x-` headers from stdin. Support token updates for new connections, `LISTENING` and `AUTH_UPDATED` notifications, and shutdown when the control pipe closes in token-update mode.
- Preserve the listener across proxy reconnects without replaying TCP streams, and let accepted streams continue while a proxy drains.

## Testing

Add tests for hidden CLI parsing, proxy and target validation, credential renewal, control-pipe closure, and invalid input without secret disclosure. A local HTTP/3 proxy test covers token replacement, transport recovery without stream replay, and graceful draining.

GitOrigin-RevId: c6af3025301c61e9fe90940cf5a6df0039465e69

2026-09-16 09:03:41 +00:00

..

e2e_benches

bench: add codex help e2e macrobenchmark (#31295)

2026-07-09 17:23:44 -07:00

src

Add a hidden HTTP/3 TCP tunnel command (#45900)

2026-09-16 09:03:41 +00:00

tests

Allow daemon updates to restore pinned packages to latest stable (#45780)

2026-09-15 19:51:06 +00:00

BUILD.bazel

Isolate Bazel build commit metadata from Rust compilation inputs (#43304)

2026-09-06 23:49:46 +00:00

build.rs

Add WebRTC media transport to realtime TUI (#17058)

2026-04-08 10:26:55 -07:00

Cargo.toml

Add a hidden HTTP/3 TCP tunnel command (#45900)

2026-09-16 09:03:41 +00:00