richardopenai 2aff7208fe
Add a hidden HTTP/3 TCP tunnel command ( #45900 ) ...
## What changed
Add `codex tcp-tunnel` and the `codex-tcp-tunnel` crate to forward loopback TCP connections to an explicit target through a TLS-verified HTTP/3 CONNECT proxy.
- Require the proxy origin to match an approved HTTPS origin in a supplied policy file.
- Read bearer tokens and optional bounded, non-forwarding `x-` headers from stdin. Support token updates for new connections, `LISTENING` and `AUTH_UPDATED` notifications, and shutdown when the control pipe closes in token-update mode.
- Preserve the listener across proxy reconnects without replaying TCP streams, and let accepted streams continue while a proxy drains.
## Testing
Add tests for hidden CLI parsing, proxy and target validation, credential renewal, control-pipe closure, and invalid input without secret disclosure. A local HTTP/3 proxy test covers token replacement, transport recovery without stream replay, and graceful draining.
GitOrigin-RevId: c6af3025301c61e9fe90940cf5a6df0039465e69
2026-09-16 09:03:41 +00:00
2026-09-15 02:35:59 +00:00
2026-07-23 19:19:35 +00:00
2026-09-15 22:52:56 +00:00
2026-09-16 04:23:46 +00:00
2026-09-14 22:31:32 +00:00
2026-09-15 19:51:06 +00:00
2026-09-15 23:39:40 +00:00
2026-09-03 06:02:25 +00:00
2026-09-16 00:54:58 +00:00
2026-08-20 08:10:08 +00:00
2026-09-11 20:10:02 +00:00
2026-08-31 13:44:12 +00:00
2026-09-15 00:29:13 +00:00
2026-09-09 03:17:48 +00:00
2026-09-15 19:13:08 +00:00
2026-09-07 16:55:06 +00:00
2026-08-14 05:03:39 +00:00
2026-09-16 09:03:41 +00:00
2026-09-10 21:41:39 +00:00
2026-09-03 01:46:37 +00:00
2026-08-28 19:44:50 +00:00
2026-09-11 17:00:07 +00:00
2026-09-11 17:00:07 +00:00
2026-09-11 17:00:07 +00:00
2026-09-15 18:52:15 +00:00
2026-09-16 01:01:57 +00:00
2026-09-15 17:32:33 +00:00
2026-09-16 01:01:57 +00:00
2026-05-07 15:44:17 -07:00
2026-09-14 19:12:59 +00:00
2026-09-14 16:30:00 +00:00
2026-09-05 01:25:06 +00:00
2026-09-15 23:39:40 +00:00
2026-09-15 18:23:08 +00:00
2026-09-12 18:16:17 +00:00
2026-09-16 04:59:23 +00:00
2026-09-11 01:57:54 +00:00
2026-09-15 18:23:08 +00:00
2026-08-07 11:30:17 +00:00
2026-09-05 12:17:32 +00:00
2026-09-16 04:23:46 +00:00
2026-09-15 16:40:06 +00:00
2026-09-15 16:40:06 +00:00
2026-09-16 01:01:57 +00:00
2026-09-10 18:24:13 +00:00
2026-09-16 01:16:35 +00:00
2026-09-10 18:10:26 +00:00
2026-09-15 16:40:06 +00:00
2026-05-28 23:09:55 -07:00
2026-09-06 20:52:29 +00:00
2026-09-15 21:19:08 +00:00
2026-09-09 23:23:59 +00:00
2026-09-10 00:26:30 +00:00
2026-09-16 01:01:57 +00:00
2026-09-11 21:59:24 +00:00
2026-09-16 02:17:36 +00:00
2026-07-22 04:17:34 +00:00
2026-09-16 00:20:40 +00:00
2026-09-16 00:20:40 +00:00
2026-09-16 00:38:34 +00:00
2026-07-17 20:52:42 +00:00
2026-09-16 00:20:40 +00:00
2026-09-10 21:41:39 +00:00
2026-09-15 23:39:40 +00:00
2026-09-14 22:40:20 +00:00
2026-09-15 18:41:13 +00:00
2026-09-15 21:19:08 +00:00
2026-09-01 17:17:45 +00:00
2026-09-10 21:51:34 +00:00
2026-05-25 17:26:10 -03:00
2026-08-25 15:50:19 +00:00
2026-09-16 04:23:46 +00:00
2026-09-11 03:16:01 +00:00
2026-09-16 01:01:57 +00:00
2026-08-21 16:45:05 +00:00
2026-09-10 20:50:10 +00:00
2026-09-14 16:37:47 +00:00
2026-08-28 01:14:02 +00:00
2026-09-15 16:40:06 +00:00
2026-05-26 20:59:47 -07:00
2026-09-15 18:06:03 +00:00
2026-09-09 04:00:10 +00:00
2026-09-05 05:21:42 +00:00
2026-09-15 02:33:27 +00:00
2026-09-16 09:03:41 +00:00
2026-09-02 18:34:27 +00:00
2026-05-07 15:44:17 -07:00
2026-09-14 21:06:36 +00:00
2026-09-15 22:52:56 +00:00
2026-09-15 21:19:08 +00:00
2026-09-16 04:23:46 +00:00
2026-09-02 18:42:06 +00:00
2026-09-08 00:13:28 +00:00
2026-09-16 03:40:53 +00:00
2026-09-11 22:09:02 +00:00
2026-09-03 20:01:07 +00:00
2026-09-15 21:33:16 +00:00
2026-09-15 21:33:16 +00:00
2026-08-15 14:31:04 +00:00
2026-09-13 18:53:06 +00:00
2026-09-08 21:19:02 +00:00
2026-09-16 09:03:41 +00:00
2026-09-16 09:03:41 +00:00
2026-07-28 20:49:22 +00:00
2026-09-11 06:45:09 +00:00
2026-06-04 09:16:03 -07:00
2025-05-07 08:37:48 -07:00
2aff7208fe