mirror of
https://github.com/openai/codex.git
synced 2026-09-11 20:36:49 +00:00
462ed19a05
## What changed - Forward remote managed-network policy requests to the controller-side decider when Guardian review is enabled. - Bound callbacks using the configured permission-hook and Guardian review timeouts, restore trusted execution attribution, and recheck live baseline policy before requesting a decision. - Cancel pending decisions when the process or execution scope ends, and propagate EOF across the sandbox proxy bridge with half-closes. ## Testing - Cover callback enablement, strict allowlist behavior, live policy updates, trusted attribution, and execution-scope cancellation. GitOrigin-RevId: 83b47657c8c4546dfe98eec8b272833e96a46b7e
45 lines
1.4 KiB
Rust
45 lines
1.4 KiB
Rust
use super::*;
|
|
|
|
pub(super) struct ExecutionScope {
|
|
pub(super) environment_id: String,
|
|
pub(super) execution_id: String,
|
|
pub(super) attribution_token: String,
|
|
// Dropping the execution scope closes this channel and cancels remote reviews.
|
|
pub(super) lifetime_tx: tokio::sync::watch::Sender<()>,
|
|
state: Arc<NetworkProxyState>,
|
|
}
|
|
|
|
impl Drop for ExecutionScope {
|
|
fn drop(&mut self) {
|
|
self.state.unregister_execution(&self.attribution_token);
|
|
}
|
|
}
|
|
|
|
impl NetworkProxy {
|
|
/// Returns a proxy that attributes trusted bridge connections to one execution.
|
|
pub fn for_execution(
|
|
&self,
|
|
environment_id: &str,
|
|
execution_id: &str,
|
|
attribution_token: String,
|
|
) -> Result<Self> {
|
|
anyhow::ensure!(
|
|
self.execution_scope.is_none(),
|
|
"cannot scope an execution-scoped network proxy"
|
|
);
|
|
self.state
|
|
.register_execution(&attribution_token, environment_id, execution_id);
|
|
|
|
let (lifetime_tx, _) = tokio::sync::watch::channel(());
|
|
let mut proxy = self.clone();
|
|
proxy.execution_scope = Some(Arc::new(ExecutionScope {
|
|
environment_id: environment_id.to_string(),
|
|
execution_id: execution_id.to_string(),
|
|
attribution_token,
|
|
lifetime_tx,
|
|
state: Arc::clone(&self.state),
|
|
}));
|
|
Ok(proxy)
|
|
}
|
|
}
|