mirror of
https://github.com/openai/codex.git
synced 2026-09-10 20:26:47 +00:00
c4ea7294b9
## What changed - Add a Windows sandbox service validator that loads managed configuration while impersonating the provisioning client. - Reject elevated sandbox or network settings that conflict with managed requirements, including local binding and HTTP or SOCKS proxy-port restrictions. - Add a one-shot cloud configuration loader that bypasses the disk cache so policy checks use a fresh backend response without modifying cached configuration. - Keep the provisioning integration disabled until authenticated transport can supply the policy inputs. ## Testing - Cover elevated sandbox restrictions, disabled networking, local binding, proxy-port classification, malformed policy, impersonation failure, and cache bypass behavior. GitOrigin-RevId: b76aa8959c515c6507c2eaf61af768efa1305253
16 lines
477 B
Rust
16 lines
477 B
Rust
//! Cloud-hosted configuration data for Codex.
|
|
//!
|
|
//! This crate owns transport, caching, and refresh behavior for cloud-delivered
|
|
//! config data. Parsing and composition remain in `codex-config`.
|
|
|
|
mod backend;
|
|
mod bundle_loader;
|
|
mod cache;
|
|
mod metrics;
|
|
mod service;
|
|
mod validation;
|
|
|
|
pub use bundle_loader::cloud_config_bundle_loader;
|
|
pub use bundle_loader::cloud_config_bundle_loader_for_storage;
|
|
pub use bundle_loader::cloud_config_bundle_loader_for_storage_without_cache;
|