acrognale-oai 973ec2942c Add revocable network policy primitives to the HTTP client (#45503) ...

## What changed

- Add `NetworkPolicyController` and `NetworkPolicy` APIs for publishing destination policies, checking access, and observing policy changes. Restricted policies permit only `https` and `wss` URLs with exact allowed hosts.
- Add revocable `NetworkPermit` values with cancellation support. Reject stale policy publications, revoke permits when access is removed, and prevent account-bound policy handles from regaining access after invalidation.
- Provide a permit API for SDK transports without destination enforcement that denies access under restricted policies.
- Let `HttpClientFactory` carry a network policy, defaulting to unmanaged access, and include policy identity in factory equality.

## Testing

Add tests for secure host matching, invalidation, stale publication, recovery after policy load failure, account isolation, and SDK permit revocation. Make accepted sockets blocking in redirect test servers to handle macOS socket inheritance, and add a missing read timeout.

GitOrigin-RevId: c79231527bc5e6954cda6581c0b9f43c90335755

2026-09-14 19:30:37 +00:00

..

bin

…

outbound_proxy

Improve codex doctor network diagnostics (#38918)

2026-08-17 00:09:44 +00:00

chatgpt_cloudflare_cookies.rs

Preserve __oailb routing cookies in ChatGPT HTTP clients (#43895)

2026-09-08 19:40:43 +00:00

chatgpt_hosts.rs

…

client_builder_tests.rs

Add a policy-aware HTTP client builder (#34630)

2026-07-21 22:40:12 +00:00

client_builder.rs

Add rustls fallback for local MCP HTTP requests (#38436)

2026-08-13 21:13:07 +00:00

client.rs

Add a policy-aware HTTP client builder (#34630)

2026-07-21 22:40:12 +00:00

custom_ca_tls_tests.rs

Bundle native voice runtimes in Windows releases (#44922)

2026-09-11 21:59:24 +00:00

custom_ca.rs

Bundle native voice runtimes in Windows releases (#44922)

2026-09-11 21:59:24 +00:00

error.rs

Keep response streams alive through connection failures (#37485)

2026-08-07 18:33:46 +00:00

lib.rs

Add revocable network policy primitives to the HTTP client (#45503)

2026-09-14 19:30:37 +00:00

network_policy_tests.rs

Add revocable network policy primitives to the HTTP client (#45503)

2026-09-14 19:30:37 +00:00

network_policy.rs

Add revocable network policy primitives to the HTTP client (#45503)

2026-09-14 19:30:37 +00:00

outbound_proxy_redirect_coverage_tests.rs

Add revocable network policy primitives to the HTTP client (#45503)

2026-09-14 19:30:37 +00:00

outbound_proxy_tests.rs

Improve codex doctor network diagnostics (#38918)

2026-08-17 00:09:44 +00:00

outbound_proxy.rs

Add revocable network policy primitives to the HTTP client (#45503)

2026-09-14 19:30:37 +00:00

request.rs

Replace Guardian tickets with parent response IDs (#43002)

2026-09-05 13:02:49 +00:00

route_aware_client_pool_tests.rs

Add revocable network policy primitives to the HTTP client (#45503)

2026-09-14 19:30:37 +00:00

route_aware_client_pool.rs

Improve codex doctor network diagnostics (#38918)

2026-08-17 00:09:44 +00:00

route_aware_redirect_integration_tests.rs

Add revocable network policy primitives to the HTTP client (#45503)

2026-09-14 19:30:37 +00:00

route_aware_redirect_tests.rs

Add route-aware redirect test coverage (#34481)

2026-07-21 07:49:06 +00:00

route_aware_redirect.rs

Add route-aware redirect test coverage (#34481)

2026-07-21 07:49:06 +00:00

route_aware_tls_fallback_tests.rs

Add rustls fallback for local MCP HTTP requests (#38436)

2026-08-13 21:13:07 +00:00

tls_backend_fallback_tests.rs

Add rustls fallback for local MCP HTTP requests (#38436)

2026-08-13 21:13:07 +00:00

tls_backend_fallback.rs

Add rustls fallback for local MCP HTTP requests (#38436)

2026-08-13 21:13:07 +00:00

transport_tests.rs

Replace Guardian tickets with parent response IDs (#43002)

2026-09-05 13:02:49 +00:00

transport.rs

Keep response streams alive through connection failures (#37485)

2026-08-07 18:33:46 +00:00

windows_tls_tests.rs

Bundle native voice runtimes in Windows releases (#44922)

2026-09-11 21:59:24 +00:00

windows_tls.rs

Bundle native voice runtimes in Windows releases (#44922)

2026-09-11 21:59:24 +00:00