revert(egress-proxy): drop wildcard host support entirely

The apex-vs-subdomain question, the cert/SNI mismatch when
pipelock-passthrough hosts have wildcard certs, and the
mirror-divergence corner cases stacked up faster than the feature
earned its keep. Going back to exact-host match only.

Addon (`match_route`): single pass, case-insensitive exact match.
`*.foo.com` in a route table is now a literal string that won't
match anything — operators that want subdomains declare them
individually.

Pipelock mirror (`_pipelock_safe_hosts`): silently drops hosts
that don't fit pipelock's `[A-Za-z0-9_.-]+` charset (wildcards,
IPv6 literals, stray chars). Previously normalised wildcards to
their suffix; now just drops them, which matches egress-proxy's
behavior of not matching them either.

8 wildcard test cases removed; 2 lightweight "wildcards are not
supported" assertions retained as documentation. 386 unit pass.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

claude_bottle/backend/docker/egress_proxy_apply.py

@@ -90,34 +90,20 @@ def _hosts_in_routes(content: str) -> list[str]:
 
 
 # Pipelock's allowlist parser accepts only literal hostnames:
-# `[A-Za-z0-9_.-]+`. Wildcard hosts (e.g. `*.example.com`) that
-# egress-proxy's route table accepts get normalised here by
-# stripping the leading `*.` (so `*.example.com` → `example.com`)
-# — egress-proxy retains the wildcard for its own host matching,
-# and pipelock's allowlist gets the suffix, which still permits
-# the wildcard-matched upstream connections without expanding to
-# arbitrary subdomains. Hosts that still don't fit the pipelock
-# charset after normalisation (bare `*`, IPv6 literals, weird
-# chars) are silently skipped.
+# `[A-Za-z0-9_.-]+`. Anything else (wildcards, IPv6 literals,
+# stray characters) is silently dropped from the mirror so the
+# pipelock apply doesn't fail parse before the new yaml is even
+# written. The dropped hosts stay on egress-proxy's route table —
+# but the addon does exact-host match only, so they'll never
+# match anything either. (Wildcard host matching was removed —
+# see `match_route` in egress_proxy_addon_core for the rationale.)
 _PIPELOCK_HOST_RE = re.compile(r"^[A-Za-z0-9_.-]+$")
 
 
 def _pipelock_safe_hosts(hosts: list[str]) -> list[str]:
-    """Normalise hosts for pipelock's allowlist: strip leading
-    `*.` from wildcards, drop anything that still doesn't match
-    pipelock's allowed charset. Order preserved; duplicates that
-    arise from normalisation are de-duped (first-seen wins)."""
-    out: list[str] = []
-    seen: set[str] = set()
-    for h in hosts:
-        candidate = h[2:] if h.startswith("*.") else h
-        if not candidate or not _PIPELOCK_HOST_RE.match(candidate):
-            continue
-        if candidate in seen:
-            continue
-        seen.add(candidate)
-        out.append(candidate)
-    return out
+    """Drop any host pipelock's allowlist parser would reject.
+    Order preserved."""
+    return [h for h in hosts if _PIPELOCK_HOST_RE.match(h)]
 
 
 def _mirror_hosts_to_pipelock(slug: str, hosts: list[str]) -> None:

claude_bottle/egress_proxy_addon_core.py

@@ -169,38 +169,18 @@ def match_route(
     routes: typing.Sequence[Route],
     request_host: str,
 ) -> Route | None:
-    """Return the route whose `host` matches `request_host`.
+    """Return the first route whose `host` matches `request_host`
+    exactly (case-insensitive). DNS names are case-insensitive.
 
-    Match precedence:
-      1. Exact (case-insensitive) match on the literal hostname.
-      2. Wildcard match: a route whose host starts with `*.` is a
-         suffix pattern that covers the apex AND every subdomain.
-         `*.example.com` matches `example.com`, `foo.example.com`,
-         and `a.b.example.com`, but NOT `barexample.com` (the
-         label boundary `.` is required when matching a
-         subdomain). This is intentionally more permissive than
-         RFC 6125 TLS-wildcard semantics — an allowlist's natural
-         reading of `*.example.com` is "all of example.com",
-         apex included, and matches what the pipelock mirror does
-         (strips `*.example.com` → `example.com`).
-
-    Exact match wins over wildcard so an operator can declare a
-    specific route on top of a broader wildcard (e.g. a
-    `*.github.com` bare-pass + an `api.github.com` route with
-    auth). DNS names are case-insensitive."""
+    Wildcard hosts (`*.foo.com`) are NOT supported — they caused
+    too many edge cases (apex match? cert validation? pipelock
+    mirror mismatch?) for too little payoff. Operators that need
+    multiple subdomains declare them individually (or one common
+    parent host as a bare-pass route)."""
     target = request_host.lower()
-    # Pass 1: exact, literal hostname match.
     for r in routes:
-        host = r.host.lower()
-        if not host.startswith("*.") and host == target:
+        if r.host.lower() == target:
             return r
-    # Pass 2: wildcard match — apex + every subdomain.
-    for r in routes:
-        host = r.host.lower()
-        if host.startswith("*."):
-            suffix = host[2:]  # strip the `*.`
-            if target == suffix or target.endswith("." + suffix):
-                return r
     return None