didericis-claude cc0c952d0b fix(security): harden git_gate.py shell rendering with shlex.quote and name validation ...

Use shlex.quote() on name and upstream_url in git_gate_render_entrypoint()
so special characters (single quotes, spaces, semicolons) cannot break or
inject into the generated sh script.

Add _GIT_NAME_RE validation in GitEntry.from_repos_entry() to restrict
repo names to [A-Za-z0-9._-]+, making the manifest the first line of
defence and shlex.quote() the belt-and-suspenders backstop.

Closes #155

2026-06-03 04:40:21 +00:00

..

__init__.py

test: reorganize suite into unit/integration/canaries directories

2026-05-11 16:23:02 -04:00

test_agent_provider.py

feat(workspace): trust resolved project path

2026-06-02 16:57:52 +00:00

test_backend_parity.py

test: add cross-backend parity tests (PRD 0042)

2026-06-02 11:30:54 -04:00

test_backend_selection.py

fix(dashboard): stop agents in dashboard from moving during selection

2026-06-02 12:47:00 -04:00

test_bottle_state.py

feat: persist backend in BottleMetadata; use it in resume and dashboard reattach (PRD 0040)

2026-06-02 11:16:17 -04:00

test_capability_apply.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_cli_cleanup_cross_backend.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_cli_start_backend_flag.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_cli_start_settle.py

refactor(agent): use agent-neutral runtime names

2026-05-28 17:59:24 -04:00

test_codex_auth.py

fix(codex): keep dummy auth refresh timestamp valid

2026-06-02 12:40:14 -04:00

test_compose.py

test: update test suite for git-gate manifest redesign (PRD 0047)

2026-06-02 23:59:34 -04:00

test_dashboard_active_agents.py

fix(dashboard): tolerate missing manifest

2026-05-28 18:44:42 -04:00

test_dashboard_crash_logging.py

fix(dashboard): surface launch/crash failures (#100)

2026-05-28 23:49:21 -04:00

test_dashboard_detail_lines.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_dashboard_highlight.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_dashboard.py

feat(dashboard): guard capability-block approval for smolmachines bottles (PRD 0039)

2026-06-02 11:15:27 -04:00

test_docker_bottle.py

refactor(agent): use agent-neutral runtime names

2026-05-28 17:59:24 -04:00

test_docker_cleanup.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_docker_enumerate_active.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_docker_launch_teardown.py

fix: emit WARNING when Docker teardown ExitStack raises (issue #156)

2026-06-03 04:13:53 +00:00

test_docker_provision_git_user.py

test: update test suite for git-gate manifest redesign (PRD 0047)

2026-06-02 23:59:34 -04:00

test_docker_provision_provider_auth.py

feat(workspace): add shared workspace plan

2026-06-02 16:56:57 +00:00

test_docker_util_image.py

fix(workspace): include hidden cwd files in docker layer

2026-06-02 13:12:40 -04:00

test_egress_addon_core.py

test(egress): cover blocked git push fail-fast

2026-05-29 22:13:17 -04:00

test_egress_apply.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_egress_entrypoint.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_egress.py

refactor(egress): provisioned-wins merge + _route_to_yaml_fields (PRD 0031)

2026-06-02 05:45:20 +00:00

test_git_gate.py

fix(security): harden git_gate.py shell rendering with shlex.quote and name validation

2026-06-03 04:40:21 +00:00

test_git_http_backend.py

fix(git-http): log access-hook denial detail to stdout

2026-06-02 23:29:39 -04:00

test_manifest_agent_git_user.py

test: update test suite for git-gate manifest redesign (PRD 0047)

2026-06-02 23:59:34 -04:00

test_manifest_egress.py

refactor(manifest): remove codex_auth egress role

2026-06-01 22:24:17 -04:00

test_manifest_extends.py

test: update test suite for git-gate manifest redesign (PRD 0047)

2026-06-02 23:59:34 -04:00

test_manifest_git_user.py

test: update test suite for git-gate manifest redesign (PRD 0047)

2026-06-02 23:59:34 -04:00

test_manifest_git.py

fix(security): harden git_gate.py shell rendering with shlex.quote and name validation

2026-06-03 04:40:21 +00:00

test_manifest_md_load.py

refactor(manifest): split schema boundaries

2026-06-02 07:32:06 +00:00

test_manifest_runtime.py

refactor(manifest): raise ManifestError instead of die()

2026-05-29 00:15:15 -04:00

test_pipelock_allowlist.py

refactor: provision egress routes via AgentProvisionPlan

2026-06-01 22:24:17 -04:00

test_pipelock_apply.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_pipelock_yaml.py

fix(pipelock): validate yaml render config

2026-06-02 08:15:20 +00:00

test_plan_print_parity.py

feat(git-gate): remove git remote host override plumbing

2026-06-02 18:17:24 +00:00

test_print_util.py

feat(manifest): add agent_provider.auth_token for Claude OAuth via egress

2026-06-01 22:24:17 -04:00

test_provision_git.py

test: update test suite for git-gate manifest redesign (PRD 0047)

2026-06-02 23:59:34 -04:00

test_provision_supervise.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_sidecar_init.py

fix: close child stdout pipes on restart and loop convergence (PRD 0043)

2026-06-02 11:48:24 -04:00

test_smolmachines_bottle.py

fix(codex): make host-credential bottles actually authenticate

2026-06-01 22:24:17 -04:00

test_smolmachines_cleanup.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_smolmachines_launch_image.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_smolmachines_local_registry.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_smolmachines_loopback_alias.py

refactor(smolmachines): decompose launch(), add wait_exec_ready, file-lock allocate() (PRD 0032)

2026-06-02 06:23:39 +00:00

test_smolmachines_prepare.py

feat(smolmachines): resolve manifest env through resolve_env() (PRD 0038)

2026-06-02 14:38:36 +00:00

test_smolmachines_provision.py

test: update test suite for git-gate manifest redesign (PRD 0047)

2026-06-02 23:59:34 -04:00

test_smolmachines_pty_resize.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_smolmachines_sidecar_bundle.py

fix(smolmachines): build sidecar image before launch

2026-05-28 18:49:28 -04:00

test_smolmachines_smolvm.py

fix(smolmachines): raise SmolvmError instead of die() on wait_exec_ready timeout

2026-06-02 06:29:05 +00:00

test_smolmachines_util.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_supervise_server.py

fix(supervise): bound response waits

2026-06-02 08:06:45 +00:00

test_supervise.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_workspace.py

feat(workspace): port cwd across backends

2026-06-02 17:01:19 +00:00

test_yaml_subset.py

feat(git-gate): remove git remote host override plumbing

2026-06-02 18:17:24 +00:00