Remove the unused network proxy loader

codex-rs/config/src/permissions_toml.rs

@@ -453,29 +453,6 @@ impl NetworkMitmToml {
         Ok(())
     }
 
-    pub fn validate_action_references(
-        &self,
-        actions_by_name: &IndexMap<String, NetworkMitmActionToml>,
-    ) -> Result<(), String> {
-        self.validate_action_definitions()?;
-
-        let Some(hooks) = self.hooks.as_ref() else {
-            return Ok(());
-        };
-
-        for (hook_name, hook) in hooks {
-            for action_name in &hook.action {
-                if !actions_by_name.contains_key(action_name) {
-                    return Err(format!(
-                        "network.mitm.hooks.{hook_name}.action references undefined action `{action_name}`"
-                    ));
-                }
-            }
-        }
-
-        Ok(())
-    }
-
     pub fn to_runtime_hooks(
         &self,
         actions_by_name: Option<&IndexMap<String, NetworkMitmActionToml>>,

codex-rs/core/src/config/mod.rs

@@ -173,8 +173,6 @@ use permission_profile_catalog::permission_profile_catalog_from_permissions;
 use permission_profile_catalog::permission_profile_is_allowed;
 use permission_profile_catalog::validate_permission_profile_for_deny_read;
 pub(crate) use permissions::is_builtin_permission_profile_name;
-pub(crate) use permissions::reject_unknown_builtin_permission_profile;
-pub(crate) use permissions::resolve_permission_profile;
 pub use resolved_permission_profile::PermissionProfileSnapshot;
 pub(crate) use resolved_permission_profile::PermissionProfileState;
 

codex-rs/core/src/lib.rs

@@ -59,11 +59,7 @@ mod mcp_skill_dependencies;
 mod mcp_tool_approval_templates;
 mod mcp_tool_exposure;
 mod network_policy_decision;
-pub(crate) mod network_proxy_loader;
 pub use mcp::McpManager;
-pub use network_proxy_loader::MtimeConfigReloader;
-pub use network_proxy_loader::build_network_proxy_state;
-pub use network_proxy_loader::build_network_proxy_state_and_reloader;
 mod original_image_detail;
 pub use codex_mcp::CodexAppsToolsCache;
 pub use codex_mcp::SandboxState;