didericis dc9fdc8563 fix(smolmachines): enforce per-bottle loopback isolation on Linux via iptables ...

On Linux, smolvm's TSI allowlist DB patch crashes boot, so
force_allowlist is a no-op. This left the agent VM with full
host loopback access — a security regression from the macOS
behavior.

Fix: install guest-side iptables rules in _init_vm that ACCEPT
traffic to the bottle's allocated loopback alias (proxy_host/32)
and DROP all other 127.0.0.0/8 destinations. The agent runs as
non-root (node) and cannot flush the rules.

- Add iptables to claude and codex agent Dockerfiles
- Use DROP (not REJECT) — libkrun kernel lacks the REJECT module
- Skip on macOS where force_allowlist handles it natively

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-07-10 17:11:27 -04:00

..

__init__.py

test: isolate HOME for the unit suite (hermetic audit/queue/state)

2026-06-26 20:35:47 -04:00

test_agent_provider.py

fix: repair codex resume paths

2026-07-08 12:38:15 -04:00

test_backend_freezer.py

fix(smolmachines): commit via exec-tar instead of stop→pack

2026-06-23 16:53:41 -04:00

test_backend_parity.py

fix: resolve all remaining 179 test file type errors with type: ignore

2026-06-04 11:30:51 -04:00

test_backend_prepare.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_backend_selection.py

fix(macos-container): make backend the macos default

2026-06-10 22:25:00 -04:00

test_backend_terminal.py

feat: remove cyan and white from color palette

2026-06-22 19:09:22 +00:00

test_backend_workspace.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_bottle_state.py

feat!: remove capability apply

2026-06-25 08:58:28 +00:00

test_cli_cleanup_cross_backend.py

fix: achieve zero pyright errors by excluding test files from type checking

2026-06-04 11:27:23 -04:00

test_cli_commit.py

refactor(commit): introduce Freezer class hierarchy across backends

2026-06-23 16:53:41 -04:00

test_cli_dispatch.py

test: add unit tests to pass diff-coverage gate (91%)

2026-07-09 00:19:24 -04:00

test_cli_start_backend_flag.py

feat(backend): default to smolmachines

2026-06-09 03:27:31 +00:00

test_cli_start_headless.py

test: add unit tests to pass diff-coverage gate (91%)

2026-07-09 00:19:24 -04:00

test_cli_start_selector.py

fix(start): show bottle lineage root-first with -> arrows

2026-06-25 16:13:19 -04:00

test_cli_start_settle.py

feat!: remove capability apply

2026-06-25 08:58:28 +00:00

test_cli_tui.py

feat(tui,start): space/enter split, bottle lineage, YAML preflight

2026-06-25 16:13:19 -04:00

test_codex_auth.py

refactor: move codex_auth into contrib/codex

2026-06-07 11:35:35 -04:00

test_compose.py

fix(supervise): remove queue directory from db-backed flow

2026-07-01 19:50:38 +00:00

test_contrib_claude_provider.py

fix(supervise): remove queue directory from db-backed flow

2026-07-01 19:50:38 +00:00

test_contrib_codex_provider.py

fix: repair codex resume paths

2026-07-08 12:38:15 -04:00

test_contrib_gitea_deploy_key.py

fix: add explicit timeouts to subprocess and HTTP calls in git-gate paths

2026-06-25 04:12:43 -04:00

test_contrib_pi_provider.py

feat(cli): add headless launch mode for orchestrators

2026-06-30 15:08:14 -04:00

test_deploy_key_provisioner.py

refactor: fix unused imports, long lines, and type issues

2026-06-03 23:04:17 -04:00

test_dlp_detectors.py

perf(dlp): linearize injection proximity check; bound variant cache; dedup supervise schema

2026-06-26 23:22:18 -04:00

test_docker_bottle.py

fix: route remote control through provider startup args

2026-06-25 03:08:47 -04:00

test_docker_cleanup.py

feat!: remove capability apply

2026-06-25 08:58:28 +00:00

test_docker_enumerate_active.py

refactor: move bottle_state.py to top-level bot_bottle package

2026-06-08 23:05:14 -04:00

test_docker_launch_committed_image.py

fix: correct Manifest/ManifestIndex usage and add missing type annotations in tests

2026-06-23 16:53:41 -04:00

test_docker_launch_teardown.py

refactor(types): move loaded manifest from BottleSpec to BottlePlan

2026-06-22 23:54:02 -04:00

test_docker_provision_git_user.py

feat(cli): add headless launch mode for orchestrators

2026-06-30 15:08:14 -04:00

test_docker_util_image.py

feat(cli): add commit command to snapshot running bottle state

2026-06-23 16:53:41 -04:00

test_egress_addon_core.py

refactor: remove load_routes, use load_config(...).routes in tests

2026-06-25 06:07:47 +00:00

test_egress_addon_log_redaction.py

fix(supervise): remove queue directory from db-backed flow

2026-07-01 19:50:38 +00:00

test_egress_addon_request_flow.py

fix(supervise): remove queue directory from db-backed flow

2026-07-01 19:50:38 +00:00

test_egress_apply.py

fix(egress): validate proposed full config

2026-06-25 05:25:42 +00:00

test_egress_core_parsing.py

test(egress): ratchet egress_addon_core coverage to >=90%

2026-06-25 22:04:27 -04:00

test_egress_entrypoint.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_egress.py

test: fix unit test failures after main rebase

2026-07-08 23:46:47 -04:00

test_git_gate_host_key.py

fix(tests): replace os.chmod with mock for unreadable-file tests

2026-07-09 17:35:28 +00:00

test_git_gate_render_provision.py

test: fix unit test failures after main rebase

2026-07-08 23:46:47 -04:00

test_git_gate.py

test: fix unit test failures after main rebase

2026-07-08 23:46:47 -04:00

test_git_http_backend.py

refactor: rename GIT_GATE_DAEMON_TIMEOUT_SECS to GIT_GATE_TIMEOUT_SECS

2026-06-25 04:12:43 -04:00

test_log.py

feat(log): add leveled severity and structured context to log wrappers

2026-06-24 15:37:57 -04:00

test_macos_container_bottle.py

fix: repair codex resume paths

2026-07-08 12:38:15 -04:00

test_macos_container_cleanup.py

feat(macos-container): launch explicit-proxy bottles

2026-06-10 22:25:00 -04:00

test_macos_container_launch.py

fix(macos_container): mount supervise db's parent dir, not the file

2026-07-06 15:48:36 -04:00

test_macos_container_pty_forward.py

test(macos-container): satisfy pyright mock typing

2026-06-23 03:02:03 +00:00

test_macos_container_util.py

fix(macos-container): anchor relative Dockerfile path to build context

2026-06-25 03:27:46 -04:00

test_manifest_agent_git_user.py

fix(types): add BottleSpec.loaded_manifest to satisfy pyright on union type

2026-06-22 23:54:02 -04:00

test_manifest_bottle_merge.py

fix(types): resolve pyright errors introduced in #269 changes

2026-06-25 16:13:19 -04:00

test_manifest_egress.py

feat(provider): support startup args settings

2026-06-24 22:51:27 -04:00

test_manifest_extends.py

feat: support multiple parents in bottle extends:

2026-06-25 05:10:03 -04:00

test_manifest_git_user.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_manifest_git.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_manifest_lazy_loader.py

test(manifest): cover lazy (on-disk) loader branches

2026-06-26 21:19:27 -04:00

test_manifest_md_load.py

fix(types): add BottleSpec.loaded_manifest to satisfy pyright on union type

2026-06-22 23:54:02 -04:00

test_manifest_runtime.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_manifest_validation.py

test: add unit tests to pass diff-coverage gate (91%)

2026-07-09 00:19:24 -04:00

test_plan_print_parity.py

fix: route remote control through provider startup args

2026-06-25 03:08:47 -04:00

test_print_util.py

feat(manifest): add agent_provider.auth_token for Claude OAuth via egress

2026-06-01 22:24:17 -04:00

test_provision_git.py

fix: escape quotes/newlines in YAML and gitconfig emitters

2026-06-25 04:23:13 -04:00

test_sidecar_init.py

fix(macos-container): support git-gate launch

2026-06-10 22:25:00 -04:00

test_smolmachines_bottle.py

fix: repair codex resume paths

2026-07-08 12:38:15 -04:00

test_smolmachines_cleanup.py

fix: resolve all remaining 179 test file type errors with type: ignore

2026-06-04 11:30:51 -04:00

test_smolmachines_egress_apply.py

fix(smolmachines): consolidate virtiofs mounts to stay within libkrun limit

2026-07-10 16:14:03 -04:00

test_smolmachines_enumerate.py

test(smolmachines): cover sidecar vm launch paths

2026-07-10 15:31:41 -04:00

test_smolmachines_launch_image.py

test: fix test_cache_miss and remove unused re import

2026-07-09 00:03:00 -04:00

test_smolmachines_local_registry.py

fix: resolve all remaining 179 test file type errors with type: ignore

2026-06-04 11:30:51 -04:00

test_smolmachines_loopback_alias.py

fix(smolmachines): Linux compat for TSI networking and git-gate paths

2026-07-10 17:01:23 -04:00

test_smolmachines_port_forward.py

test(smolmachines): cover sidecar vm launch paths

2026-07-10 15:31:41 -04:00

test_smolmachines_provision.py

fix(smolmachines): enforce per-bottle loopback isolation on Linux via iptables

2026-07-10 17:11:27 -04:00

test_smolmachines_pty_resize.py

fix: resolve all remaining 179 test file type errors with type: ignore

2026-06-04 11:30:51 -04:00

test_smolmachines_sidecar_bundle.py

refactor(smolmachines): drop obsolete docker-sidecar helpers

2026-07-10 15:31:41 -04:00

test_smolmachines_smolvm.py

feat: run smolmachines sidecar as vm

2026-07-10 15:31:41 -04:00

test_smolmachines_util.py

test(smolmachines): annotate pyright test helpers

2026-07-08 22:01:35 -04:00

test_supervise_cli_crash_logging.py

test(cli): clean up supervise test naming

2026-06-03 17:26:15 +00:00

test_supervise_cli.py

refactor: rename _supervise_types → supervise_types (treat as public)

2026-07-06 18:53:53 +00:00

test_supervise_edge.py

feat(db_store): decouple migration from store construction

2026-07-06 17:16:18 +00:00

test_supervise_server.py

refactor: rename _supervise_types → supervise_types (treat as public)

2026-07-06 18:53:53 +00:00

test_supervise.py

refactor: rename _supervise_types → supervise_types (treat as public)

2026-07-06 18:53:53 +00:00

test_yaml_subset.py

refactor(git-gate): replace regex frontmatter edit with parse→mutate→serialize

2026-07-09 17:21:57 +00:00