didericis 051896ba4c feat(pipelock): auto-allowlist cred-proxy upstream hosts (PRD 0010) ...

bottle.tokens declarations contribute their upstream hosts to both
pipelock's allowlist (so cred-proxy can reach them) and
passthrough_domains (so pipelock doesn't MITM the connection —
cred-proxy validates real upstream certs with the system CA bundle).

Mapping: anthropic -> api.anthropic.com (already on defaults);
github -> api.github.com + github.com; gitea -> the entry's host;
npm -> registry.npmjs.org.

2026-05-13 16:22:44 -04:00

..

__init__.py

test: reorganize suite into unit/integration/canaries directories

2026-05-11 16:23:02 -04:00

test_cli_start_format.py

style: pass explicit check= to every subprocess.run call

2026-05-12 10:13:56 -04:00

test_cred_proxy_server.py

feat(cred_proxy): add HTTP server + sidecar image (PRD 0010)

2026-05-13 16:05:56 -04:00

test_cred_proxy.py

feat(cred_proxy): add abstract CredProxy + plan (PRD 0010)

2026-05-13 16:01:18 -04:00

test_docker_cred_proxy.py

feat(cred_proxy): add DockerCredProxy concrete lifecycle (PRD 0010)

2026-05-13 16:07:52 -04:00

test_git_gate.py

feat(git-gate): plumb ExtraHosts through to docker --add-host

2026-05-12 23:18:46 -04:00

test_manifest_git.py

test: drop ssh-gate suites and shadow-route assertions (PRD 0009)

2026-05-12 23:54:22 -04:00

test_manifest_runtime.py

chore(types): add pyright strict config and fix resulting errors

2026-05-12 10:03:48 -04:00

test_manifest_tokens.py

feat(manifest): add bottle.tokens with TokenEntry (PRD 0010)

2026-05-13 15:59:00 -04:00

test_pipelock_allowlist.py

feat(pipelock): auto-allowlist cred-proxy upstream hosts (PRD 0010)

2026-05-13 16:22:44 -04:00

test_pipelock_yaml.py

test: drop ssh-gate suites and shadow-route assertions (PRD 0009)

2026-05-12 23:54:22 -04:00

test_provision_cred_proxy.py

feat(cred_proxy): add agent-side provisioner (PRD 0010)

2026-05-13 16:11:04 -04:00

test_provision_git.py

feat(git-gate): rewrite both fetch and push via insteadOf

2026-05-12 21:38:44 -04:00