Files
codex/codex-rs
viyatb-oai a60197d6a0 Expose canonical network proxy policy patterns (#61351)
## What changed

Add `canonical_allow_pattern`, `canonical_deny_pattern`, and
`canonical_review_pattern` to validate and normalize selectors for policy
comparisons using the domain matcher's syntax.

Treat `?*.example.com` and `*.example.com` as equivalent comparison keys.
Canonicalize unscoped IPv6 addresses for deny and review rules, and preserve
wildcard ports on local allow rules so they remain distinguishable from explicit
local grants. Deny rules continue to reject global wildcards.

Share pattern validation with the matcher and local-literal classification with
runtime policy checks.

## Testing

Add a regression test covering equivalent subdomain selectors, local wildcard
ports, and differing IPv6 comparison keys for grants and restrictions.

GitOrigin-RevId: c72262ae9f625765d5351e9da403be1f87042a47
2026-11-13 18:49:23 +00:00
..
…
…
…
…