4 Commits

Author	SHA1	Message	Date
didericis-claude	726713d081	feat(egress): implement PRD 0053 — DLP addon with Gateway API matches ... Replace path_allowlist with Gateway API HTTPRoute match vocabulary (paths, methods, headers with AND/OR semantics) and add DLP scanning to the egress proxy: - Token pattern detection (AWS, GitHub, Anthropic, OpenAI, Stripe, JWT) - Known secret detection (EGRESS_TOKEN_* with base64/URL/hex variants) - Naive prompt injection detection (disclosure + credential, jailbreak) - Per-route DLP configuration via manifest dlp block - Inbound response scanning with block/warn severity Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-05 19:53:23 +00:00
didericis-claude	bbd6ec85ac	chore: strip pipelock from Docker backend ... - Remove pipelock_state_dir, _PIPELOCK_SUBDIR from bottle_state.py - Remove proxy_plan: PipelockProxyPlan from DockerBottlePlan - Remove EGRESS_PIPELOCK_CA_IN_CONTAINER from docker/egress.py - Remove pipelock TLS init and proxy_plan population from launch.py - Remove PipelockProxy import and pipelock_dir setup from prepare.py - Remove pipelock volumes, daemon entry, and network alias from compose.py - Remove pipelock mirroring entirely from egress_apply.py - Agent HTTP_PROXY now always points at egress (no pipelock fallback)	2026-06-04 21:20:07 +00:00
didericis	570cd42532	fix: resolve pyright errors in bottle_state.py and most of egress_apply.py ... - Add cast import and use for dict.get() results in bottle_state.py - Fix JSON metadata loading with proper dict type casting - Apply same pattern to egress_apply.py for YAML routes parsing - Cast routes list after isinstance check - Properly type proposed_paths and existing_paths after validation - Fixes 35 pyright errors across both files Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>	2026-06-03 23:40:14 -04:00
didericis-codex	c08b09dc9f	refactor!: rename project to bot-bottle ... Assisted-by: Codex	2026-05-28 17:56:14 -04:00