didericis-claude 0693107dd6 fix(security): harden git_gate.py shell rendering with shlex.quote and name validation ...

Use shlex.quote() on name and upstream_url in git_gate_render_entrypoint()
so special characters (single quotes, spaces, semicolons) cannot break or
inject into the generated sh script.

Add _GIT_NAME_RE validation in GitEntry.from_repos_entry() to restrict
repo names to [A-Za-z0-9._-]+, making the manifest the first line of
defence and shlex.quote() the belt-and-suspenders backstop.

Closes #155

2026-06-03 04:11:27 +00:00

..

backend

feat(git-gate): remove git remote host override plumbing

2026-06-02 18:17:24 +00:00

cli

refactor: rename machine_name to instance_name in _bottle_for_slug

2026-06-02 11:16:17 -04:00

__init__.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

agent_provider.py

feat(workspace): trust resolved project path

2026-06-02 16:57:52 +00:00

codex_auth.py

fix(codex): keep dummy auth refresh timestamp valid

2026-06-02 12:40:14 -04:00

egress_addon_core.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

egress_addon.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

egress_entrypoint.sh

feat(pipelock): allow route tls passthrough policy

2026-05-28 19:19:40 -04:00

egress.py

refactor(egress): EgressRoute inherits Route from egress_addon_core

2026-06-02 05:58:59 +00:00

env.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

git_gate.py

fix(security): harden git_gate.py shell rendering with shlex.quote and name validation

2026-06-03 04:11:27 +00:00

git_http_backend.py

fix(git-http): extract peer variable to clarify access hook call convention

2026-06-02 16:08:15 +00:00

log.py

fix(dashboard): surface launch/crash failures (#100)

2026-05-28 23:49:21 -04:00

manifest_extends.py

feat(manifest): replace git key with git-gate (PRD 0047)

2026-06-03 03:49:37 +00:00

manifest_loader.py

feat(manifest): replace git key with git-gate (PRD 0047)

2026-06-03 03:49:37 +00:00

manifest_schema.py

feat(manifest): replace git key with git-gate (PRD 0047)

2026-06-03 03:49:37 +00:00

manifest.py

fix(security): harden git_gate.py shell rendering with shlex.quote and name validation

2026-06-03 04:11:27 +00:00

pipelock.py

fix(pipelock): validate yaml render config

2026-06-02 08:15:20 +00:00

sidecar_init.py

fix: close child stdout pipes on restart and loop convergence (PRD 0043)

2026-06-02 11:48:24 -04:00

supervise_server.py

fix(supervise): bound response waits

2026-06-02 08:06:45 +00:00

supervise.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

util.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

workspace.py

feat(workspace): add shared workspace plan

2026-06-02 16:56:57 +00:00

yaml_subset.py

docs: rename CLAUDE.md to AGENTS.md and rebrand provider-agnostic

2026-05-28 20:36:47 -04:00