Remove pipelock #193

Merged

didericis merged 6 commits from remove-pipelock into main 2026-06-04 20:22:06 -04:00

Conversation 0 Commits 6 Files Changed 77

+350 -3911

didericis-claude commented 2026-06-04 17:11:30 -04:00

Collaborator

Copy Link

Copy Source

Summary

• Delete bot_bottle/pipelock.py, backend/docker/pipelock.py, backend/docker/pipelock_apply.py and all pipelock tests
• Strip PipelockRoutePolicy from the manifest layer; remove the pipelock key from egress.routes[] entries
• Remove pipelock sidecar from sidecar_init.py daemon list and SIGUSR1 restart handler
• Remove TOOL_PIPELOCK_BLOCK from the supervise plane (server + CLI + supervise.py constants)
• Remove pipelock from EgressPlan (pipelock_ca_host_path, pipelock_proxy_url), EgressRoute.tls_passthrough, and all egress-apply mirroring
• Remove pipelock TLS init, proxy_plan/PipelockProxyPlan from both Docker and smolmachines backends
• Remove pipelock from compose renderer, DockerBottlePlan, bottle_state.py (pipelock_state_dir), and sidecar bundle configs

DIP will be added directly to mitmproxy in a follow-up. See full migration plan here

## Summary - Delete `bot_bottle/pipelock.py`, `backend/docker/pipelock.py`, `backend/docker/pipelock_apply.py` and all pipelock tests - Strip `PipelockRoutePolicy` from the manifest layer; remove the `pipelock` key from `egress.routes[]` entries - Remove pipelock sidecar from `sidecar_init.py` daemon list and SIGUSR1 restart handler - Remove `TOOL_PIPELOCK_BLOCK` from the supervise plane (server + CLI + supervise.py constants) - Remove pipelock from `EgressPlan` (`pipelock_ca_host_path`, `pipelock_proxy_url`), `EgressRoute.tls_passthrough`, and all egress-apply mirroring - Remove pipelock TLS init, `proxy_plan`/`PipelockProxyPlan` from both Docker and smolmachines backends - Remove pipelock from compose renderer, `DockerBottlePlan`, `bottle_state.py` (`pipelock_state_dir`), and sidecar bundle configs DIP will be added directly to mitmproxy in a follow-up. See full migration plan [here](https://gitea.dideric.is/didericis/bot-bottle/pulls/192)

didericis-claude added 1 commit 2026-06-04 17:11:32 -04:00

chore: delete pipelock files and strip from manifest layer ... 9eb5eef676

- Delete bot_bottle/pipelock.py, backend/docker/pipelock.py,
  backend/docker/pipelock_apply.py
- Delete all pipelock unit/integration/canary tests
- Remove PipelockRoutePolicy from manifest_egress.py; drop the
  Pipelock field from EgressRoute and the 'pipelock' key from
  EgressRoute.from_dict
- Remove PipelockRoutePolicy re-export from manifest.py __all__

didericis added 1 commit 2026-06-04 17:15:45 -04:00

chore: remove pipelock from supervise plane and egress layer ... ce8cb5f0f1

- Remove TOOL_PIPELOCK_BLOCK from supervise.py constants and TOOLS tuple
- Remove pipelock-block tool definition from supervise_server.py
- Remove _apply_pipelock_url and pipelock imports from cli/supervise.py
- Strip pipelock fields (pipelock_ca_host_path, pipelock_proxy_url,
  tls_passthrough) from egress.py EgressPlan/EgressRoute
- Remove pipelock daemon from sidecar_init.py _DAEMONS and SIGUSR1 handler

didericis added 1 commit 2026-06-04 17:20:16 -04:00

chore: strip pipelock from Docker backend ... bbd6ec85ac

- Remove pipelock_state_dir, _PIPELOCK_SUBDIR from bottle_state.py
- Remove proxy_plan: PipelockProxyPlan from DockerBottlePlan
- Remove EGRESS_PIPELOCK_CA_IN_CONTAINER from docker/egress.py
- Remove pipelock TLS init and proxy_plan population from launch.py
- Remove PipelockProxy import and pipelock_dir setup from prepare.py
- Remove pipelock volumes, daemon entry, and network alias from compose.py
- Remove pipelock mirroring entirely from egress_apply.py
- Agent HTTP_PROXY now always points at egress (no pipelock fallback)

didericis added 1 commit 2026-06-04 17:54:14 -04:00

chore: remove all pipelock references from tests, docs, and non-pipelock source ... a59da9921e

- Strip pipelock from all unit and integration test fixtures:
  proxy_plan fields removed from DockerBottlePlan/SmolmachinesBottlePlan
  constructors; pipelock-specific test classes deleted or renamed
- Update test_sidecar_init: remove test_pipelock_loses_egress_tokens,
  rename "pipelock" daemon fixtures to "git-gate" throughout
- Remove test_pipelock_binary_present_and_versioned from integration test
- Remove test_pipelock_answers_on_bundle_ip from smolmachines launch test
- Update _SANDBOX_BLOCK_MARKERS: remove "pipelock" marker (egress blocks)
- Dockerfile.sidecars: remove pipelock build stage and COPY; update layout
  comments and port table
- egress_entrypoint.sh: update comments now that egress is sole proxy
- Clean up pipelock references in comments/docstrings across backend,
  network, manifest, supervise, git_gate, yaml_subset, agent_provider,
  sidecar_bundle, sidecar_init, egress_addon_core modules

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

didericis added 1 commit 2026-06-04 17:58:43 -04:00

fix: remove remaining pipelock references missed in prior pass ... 05b12b41b6

- test_supervise.py: drop TOOL_PIPELOCK_BLOCK import; update TOOLS
  assertion to match the 3-item tuple (egress, capability, list-egress)
- test_supervise_server.py: remove pipelock from tools-list assertion,
  fix test_rejected_response_sets_isError to use capability-block
- contrib/claude and contrib/codex: remove tls_passthrough=True from
  EgressRoute constructors (field removed with pipelock)
- test_egress.py: drop tls_passthrough parameter from _provider_route,
  remove tls_passthrough-only tests, fix EgressRoute constructions
- test_agent_provider.py: drop route.tls_passthrough assertions

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

didericis added 1 commit 2026-06-04 20:05:34 -04:00

fix(supervise_server): remove unused urllib.parse import ... e6ad7ae10e

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

didericis merged commit e6ad7ae10e into main 2026-06-04 20:22:06 -04:00

didericis deleted branch remove-pipelock 2026-06-04 20:22:06 -04:00

didericis-claude referenced this pull request 2026-06-04 20:33:35 -04:00

Egress DLP addon: token detection, secret detection, and prompt injection scanning #195

didericis-claude referenced this pull request 2026-06-04 20:35:30 -04:00

PRD 0053: Egress DLP addon #196

didericis referenced this issue from a commit 2026-06-06 01:09:03 -04:00

docs: remove pipelock references from README, examples, and test docs

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

Compat/Breaking

Breaking change that won't be backward compatible

Kind/Bug

Something is not working

Kind/Documentation

Documentation changes

Kind/Enhancement

Improve existing functionality

Kind/Feature

New functionality

Kind/Security

This is security issue

Kind/Testing

Issue or pull request related to testing

Priority

Critical

1

The priority is critical

Priority

High

2

The priority is high

Priority

Low

4

The priority is low

Priority

Medium

3

The priority is medium

Reviewed

Confirmed

1

Issue has been confirmed

Reviewed

Duplicate

2

This issue or pull request already exists

Reviewed

Invalid

3

Invalid issue

Reviewed

Won't Fix

3

This issue won't be fixed

Status

Abandoned

3

Somebody has started to work on this but abandoned work

Status

Blocked

1

Something is blocking this issue or pull request

Status

Need More Info

2

Feedback is required to reproduce issue or to continue work

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

didericis-claude (didericis (claude)) didericis-codex (didericis (codex)) didericis-gemma (gemma) didericis

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: didericis/bot-bottle#193