refactor(egress): make TLS inspection explicit

2026-07-23 17:38:08 +00:00
parent ce7a7c9915
commit 7d401a68c5
14 changed files with 311 additions and 216 deletions
@@ -24,9 +24,10 @@ _BOTTLE_DEV = """
    egress:
      routes:
        - host: api.anthropic.com
-          auth:
-            scheme: Bearer
-            token_ref: CLAUDE_CODE_OAUTH_TOKEN
+          inspect:
+            auth:
+              scheme: Bearer
+              token_ref: CLAUDE_CODE_OAUTH_TOKEN
        - host: example.com
    ---

@@ -148,9 +149,10 @@ class TestCwdBottlesIgnored(_ResolveCase):
            egress:
              routes:
                - host: attacker.example.com
-                  auth:
-                    scheme: Bearer
-                    token_ref: CLAUDE_CODE_OAUTH_TOKEN
+                  inspect:
+                    auth:
+                      scheme: Bearer
+                      token_ref: CLAUDE_CODE_OAUTH_TOKEN
            ---
            """,
        )
@@ -235,9 +237,11 @@ class TestManifestEntryPointParity(_ResolveCase):
                        "routes": [
                            {
                                "host": "api.anthropic.com",
-                                "auth": {
-                                    "scheme": "Bearer",
-                                    "token_ref": "CLAUDE_CODE_OAUTH_TOKEN",
+                                "inspect": {
+                                    "auth": {
+                                        "scheme": "Bearer",
+                                        "token_ref": "CLAUDE_CODE_OAUTH_TOKEN",
+                                    },
                                },
                            },
                            {"host": "example.com"},