Skip to content

(CODUX-216) Implement governed HTTP capability for custom nodes - #2974

Merged
numnx merged 1 commit into
feature/CODUX-216-nodes-full-integrationfrom
task/feature-codux-21-t19-codex-6f247abd-mrhlbj0x
Jul 12, 2026
Merged

(CODUX-216) Implement governed HTTP capability for custom nodes#2974
numnx merged 1 commit into
feature/CODUX-216-nodes-full-integrationfrom
task/feature-codux-21-t19-codex-6f247abd-mrhlbj0x

Conversation

@numnx

@numnx numnx commented Jul 12, 2026

Copy link
Copy Markdown
Collaborator

🧩 Task: Implement governed HTTP capability for custom nodes

Automated task PR opened by Code UX for T19.

📋 Summary

Sprint: Sprint 216 · Nodes Full Integration · Task: T19

Turn the existing project-scoped node-flow foundation and browser-local canvas into a canonical, secure, versioned automation control plane with registry-driven nodes, encrypted credentials, durable execution, governed integrations, isolated custom nodes, agent authoring, dashboard integration, and authenticated headless readiness.

🤖 Model & Provider

Provider Codex CLI
Model gpt-5.6-sol

⏱️ Timing

Started 2026-07-12 09:27:46 UTC
Finished 2026-07-12 09:42:45 UTC
Duration 14m 59s

📊 Token Usage

Metric Value
Input tokens 183,770
Cached input tokens 5,499,648
Output tokens 30,495
Total tokens 5,713,913
Invocations 1
Tool calls 64
Active time 14m 31s

Included usage estimate (subscription/local login): $4.58

✅ QA Review

⏳ QA review runs after this PR is opened. Check the task card in the dashboard for the outcome once it lands.

📝 Full Task Prompt
### Objective
Make declared custom-node HTTP capability functional through the shared egress policy boundary.

### Requirements
Replace the generated runner's unconditional context.http failure with a controlled request bridge that consumes T04 egress policy, validates HTTPS/HTTP opt-in, DNS and private-network protections, redirects, headers, response size/content type, timeout, retries, and rate limits. Keep Docker network isolation and ensure credentials remain broker-resolved and redacted.

### Verification
Add mocked custom-node tests proving allowed requests succeed and SSRF, redirects, restricted headers, oversized responses, timeouts, retries, and undeclared network access fail closed. Run custom-node security tests, backend tests, audit, typecheck, build, and the credentialed drill.
🌿 Branch Info

Base: feature/CODUX-216-nodes-full-integration
Head: task/feature-codux-21-t19-codex-6f247abd-mrhlbj0x


🤖 Generated by Code UX

@numnx
numnx merged commit d5b64b7 into feature/CODUX-216-nodes-full-integration Jul 12, 2026
20 checks passed
@numnx
numnx deleted the task/feature-codux-21-t19-codex-6f247abd-mrhlbj0x branch July 12, 2026 09:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant