didericis-claude 451e6fc2fc feat(dlp): add 7 token patterns, Unicode normalization, CRLF injection detection (PRD 0053) ...

Token patterns: HuggingFace (hf_), Databricks (dapi), Slack (xox[baprs]-),
npm (npm_), SendGrid (SG.x.y), PyPI (pypi-), HashiCorp Vault (hvs.).

Unicode normalization (_normalize_text) applies NFKD + strips combining
marks and control chars before pattern matching, defeating fullwidth-char
and combining-mark evasion.

CRLF injection (scan_crlf_injection) detects %0d%0a in URLs and literal
\r\n header-injection patterns; runs unconditionally in scan_outbound
regardless of outbound_detectors config.

2026-06-07 23:19:11 -04:00

..

backend

feat(agents): named and labelled agents with optional ANSI color

2026-06-07 12:12:32 -04:00

cli

feat(agents): named and labelled agents with optional ANSI color

2026-06-07 12:12:32 -04:00

contrib

feat(agents): named and labelled agents with optional ANSI color

2026-06-07 12:12:32 -04:00

__init__.py

…

agent_provider.py

feat(agents): named and labelled agents with optional ANSI color

2026-06-07 12:12:32 -04:00

deploy_key_provisioner.py

feat(prd-0048): implement SSH deploy-key provisioning with contrib/gitea

2026-06-03 11:58:36 -04:00

dlp_detectors.py

feat(dlp): add 7 token patterns, Unicode normalization, CRLF injection detection (PRD 0053)

2026-06-07 23:19:11 -04:00

egress_addon_core.py

feat(dlp): add 7 token patterns, Unicode normalization, CRLF injection detection (PRD 0053)

2026-06-07 23:19:11 -04:00

egress_addon.py

feat(dlp): websocket scanning, response headers, extended encoding variants, sk-proj pattern (PRD 0053)

2026-06-07 23:19:11 -04:00

egress_entrypoint.sh

chore: remove all pipelock references from tests, docs, and non-pipelock source

2026-06-04 21:54:06 +00:00

egress.py

fix(lint): resolve pylint and pyright issues on egress-log-option

2026-06-07 20:10:32 -04:00

env.py

fix: resolve all 22 remaining pylint warnings

2026-06-04 11:42:40 -04:00

git_gate.py

chore: remove all pipelock references from tests, docs, and non-pipelock source

2026-06-04 21:54:06 +00:00

git_http_backend.py

fix: resolve all 22 remaining pylint warnings

2026-06-04 11:42:40 -04:00

log.py

…

manifest_agent.py

feat(agent-provider): user plugin discovery, Dockerfile cascade, and provider-owned ca/git provisioning

2026-06-07 11:35:35 -04:00

manifest_egress.py

feat(egress): replace log bool with integer log levels (0/1/2)

2026-06-07 14:41:27 -04:00

manifest_extends.py

refactor: address PR review feedback — de-privatize helpers and rename modules

2026-06-03 00:33:02 -04:00

manifest_git.py

fix: resolve pylint and pyright linting issues

2026-06-04 12:40:36 -04:00

manifest_loader.py

fix: resolve all 22 remaining pylint warnings

2026-06-04 11:42:40 -04:00

manifest_schema.py

fix: resolve pyright errors in manifest_schema.py

2026-06-03 23:45:20 -04:00

manifest_util.py

refactor: address PR review feedback — de-privatize helpers and rename modules

2026-06-03 00:33:02 -04:00

manifest.py

feat(egress): implement PRD 0053 — DLP addon with Gateway API matches

2026-06-05 19:53:23 +00:00

sidecar_init.py

chore: remove all pipelock references from tests, docs, and non-pipelock source

2026-06-04 21:54:06 +00:00

supervise_server.py

feat(supervise)!: remove egress-block MCP tool and runtime route-mutation

2026-06-07 09:56:39 -04:00

supervise.py

feat(supervise)!: remove egress-block MCP tool and runtime route-mutation

2026-06-07 09:56:39 -04:00

util.py

refactor: address PR review feedback — de-privatize helpers and rename modules

2026-06-03 00:33:02 -04:00

workspace.py

fix: resolve pyright type errors

2026-06-03 23:25:41 -04:00

yaml_subset.py

chore: remove all pipelock references from tests, docs, and non-pipelock source

2026-06-04 21:54:06 +00:00