mirror of
https://github.com/openai/codex.git
synced 2026-09-11 20:36:49 +00:00
15fde8c1f2
## What changed - Add a best-effort `network/policyDecision` notification for final domain and non-domain policy decisions made by executor-local proxies. - Validate notifications against the active process on the controller and emit audit events with controller-trusted session and execution metadata. - Reserve outbound RPC capacity so audit notifications cannot block control messages, and expose valid `chatgpt-account-id` header values for audit attribution. ## Testing - Cover notification serialization, proxy decision capture, executor-to-controller delivery, trusted metadata handling, and reserved RPC capacity. GitOrigin-RevId: a39f96a6b3d9401c03d54eaef5b9a6d3fe0da78b
74 lines
2.2 KiB
Rust
74 lines
2.2 KiB
Rust
use serde::Deserialize;
|
|
use serde::Serialize;
|
|
|
|
use crate::ProcessId;
|
|
|
|
pub const NETWORK_POLICY_REQUEST_METHOD: &str = "network/policyRequest";
|
|
pub const NETWORK_POLICY_DECISION_METHOD: &str = "network/policyDecision";
|
|
pub const MAX_NETWORK_POLICY_HOST_BYTES: usize = 253;
|
|
pub const MAX_NETWORK_POLICY_PROCESS_ID_BYTES: usize = 256;
|
|
pub const MAX_NETWORK_POLICY_REASON_BYTES: usize = 1024;
|
|
|
|
#[derive(Debug, Clone, Serialize, Deserialize)]
|
|
#[serde(rename_all = "camelCase")]
|
|
pub struct NetworkPolicyRequestParams {
|
|
pub process_id: ProcessId,
|
|
pub request: ExecServerNetworkPolicyRequest,
|
|
}
|
|
|
|
#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
|
|
#[serde(rename_all = "camelCase")]
|
|
pub struct ExecServerNetworkPolicyRequest {
|
|
pub protocol: ExecServerNetworkProtocol,
|
|
pub host: String,
|
|
pub port: u16,
|
|
}
|
|
|
|
/// Reports an executor-local network policy decision to its authenticated controller.
|
|
#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
|
|
#[serde(rename_all = "camelCase")]
|
|
pub struct NetworkPolicyDecisionNotification {
|
|
pub process_id: ProcessId,
|
|
pub timestamp: String,
|
|
pub scope: String,
|
|
pub decision: String,
|
|
pub source: String,
|
|
pub reason: String,
|
|
pub protocol: ExecServerNetworkProtocol,
|
|
pub host: String,
|
|
pub port: u16,
|
|
#[serde(default, skip_serializing_if = "Option::is_none")]
|
|
pub method: Option<String>,
|
|
#[serde(default, skip_serializing_if = "Option::is_none")]
|
|
pub client: Option<String>,
|
|
#[serde(default)]
|
|
pub policy_override: bool,
|
|
}
|
|
|
|
#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
|
|
#[serde(rename_all = "snake_case")]
|
|
pub enum ExecServerNetworkProtocol {
|
|
Http,
|
|
HttpsConnect,
|
|
Socks5Tcp,
|
|
Socks5Udp,
|
|
}
|
|
|
|
#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
|
|
#[serde(rename_all = "camelCase")]
|
|
pub struct NetworkPolicyRequestResponse {
|
|
pub decision: ExecServerNetworkPolicyDecision,
|
|
}
|
|
|
|
#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
|
|
#[serde(tag = "type", rename_all = "snake_case")]
|
|
pub enum ExecServerNetworkPolicyDecision {
|
|
Allow,
|
|
Deny { reason: String },
|
|
Ask { reason: String },
|
|
}
|
|
|
|
#[cfg(test)]
|
|
#[path = "network_policy_tests.rs"]
|
|
mod tests;
|