chore: remove proxy subcommand (#195) (#198)

The proxy subcommand is obsolete now that MCPG handles network routing.

- Delete src/proxy.rs and tests/proxy_tests.rs
- Remove Commands::Proxy variant and match arm from main.rs
- Remove mod proxy declaration and unused log::debug import
- Remove proxy CLI docs from README.md and AGENTS.md

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: jamesadevine

AGENTS.md

@@ -35,7 +35,6 @@ Alongside the correctly generated pipeline yaml, an agent file is generated from
 │   ├── configure.rs      # `configure` CLI command — detects and updates pipeline variables
 │   ├── detect.rs         # Agentic pipeline detection (helper for `configure`)
 │   ├── ndjson.rs         # NDJSON parsing utilities
-│   ├── proxy.rs          # Network proxy implementation
 │   ├── sanitize.rs       # Input sanitization for safe outputs
 │   ├── safeoutputs/      # Safe-output MCP tool implementations (Stage 1 → NDJSON → Stage 2)
 │   │   ├── mod.rs

README.md

@@ -405,7 +405,6 @@ Commands:
   mcp           Run as an MCP server (safe outputs)
   mcp-http      Run as an HTTP MCP server (for MCPG integration)
   execute       Execute safe outputs (Stage 2)
-  proxy         Start an HTTP proxy for network filtering
   configure     Detect agentic pipelines and update GITHUB_TOKEN on ADO definitions
 
 Options:

src/main.rs

@@ -8,14 +8,12 @@ mod init;
 mod logging;
 mod mcp;
 mod ndjson;
-mod proxy;
 pub mod sanitize;
 mod safeoutputs;
 mod tools;
 
 use anyhow::{Context, Result};
 use clap::{Parser, Subcommand};
-use log::debug;
 use std::path::PathBuf;
 
 use crate::safeoutputs::ExecutionContext;
@@ -64,12 +62,6 @@ enum Commands {
         #[arg(long)]
         ado_project: Option<String>,
     },
-    /// Start an HTTP proxy for network filtering
-    Proxy {
-        /// Allowed hosts (can be specified multiple times, supports wildcards like *.github.com)
-        #[arg(long = "allow")]
-        allowed_hosts: Vec<String>,
-    },
     /// Run SafeOutputs MCP server over HTTP (for MCPG integration)
     McpHttp {
         /// Port to listen on
@@ -144,7 +136,6 @@ async fn main() -> Result<()> {
         Some(Commands::Check { .. }) => "check",
         Some(Commands::Mcp { .. }) => "mcp",
         Some(Commands::Execute { .. }) => "execute",
-        Some(Commands::Proxy { .. }) => "proxy",
         Some(Commands::McpHttp { .. }) => "mcp-http",
         Some(Commands::Init { .. }) => "init",
         Some(Commands::Configure { .. }) => "configure",
@@ -275,23 +266,6 @@ async fn main() -> Result<()> {
                     std::process::exit(2);
                 }
             }
-            Commands::Proxy { allowed_hosts } => {
-                // NetworkPolicy::new() includes default hosts plus any user-specified additional hosts
-                let policy = proxy::NetworkPolicy::new(allowed_hosts);
-
-                // start_proxy prints the port and flushes stdout before spawning the listener
-                let _port = proxy::start_proxy(policy).await?;
-
-                debug!("Proxy started, waiting for termination signal");
-
-                // Keep running until terminated - the shell backgrounds this process
-                // and captures the PID for cleanup
-                #[cfg(unix)]
-                tokio::signal::ctrl_c().await?;
-
-                #[cfg(windows)]
-                std::future::pending::<()>().await;
-            }
             Commands::McpHttp {
                 port,
                 api_key,