didericis 25e67137f2 refactor(pipelock): allowlist-resolution helpers take a Bottle, not (manifest, name) ...

Every function in the 'Allowlist resolution' section was doing
`manifest.bottles[bottle_name].X` as its first move. Push the lookup
to the caller and have each helper take a resolved Bottle:

  pipelock_bottle_allowlist
  pipelock_bottle_ssh_hostnames
  pipelock_bottle_ssh_trusted_domains
  pipelock_bottle_ssh_ip_cidrs
  pipelock_effective_allowlist
  pipelock_allowlist_summary

PipelockProxy._build_pipelock_yaml resolves bottle once at the top
and passes it through; DockerBottleBackend.prepare already had the
bottle in scope and now uses it directly. Tests pass the resolved
bottle from each fixture.

2026-05-11 13:44:58 -04:00

..

backend

refactor(pipelock): allowlist-resolution helpers take a Bottle, not (manifest, name)

2026-05-11 13:44:58 -04:00

cli

refactor: rename platform abstraction to backend

2026-05-10 23:59:38 -04:00

__init__.py

refactor: convert project from bash to Python

2026-05-08 15:26:58 +00:00

env_resolve.py

refactor(manifest): convert TypedDict to frozen dataclasses

2026-05-10 21:20:15 -04:00

log.py

fix(types): make manifest.py clean under pyright strict

2026-05-10 21:34:03 -04:00

manifest.py

feat(bottles): implement bottle factory abstraction per PRD 0003

2026-05-10 22:15:05 -04:00

pipelock.py

refactor(pipelock): allowlist-resolution helpers take a Bottle, not (manifest, name)

2026-05-11 13:44:58 -04:00

util.py

refactor(util): move is_ipv4_literal out of pipelock.py into util.py

2026-05-11 13:37:31 -04:00