didericis 5592edcfa7 fix(egress): name the real fault when a deny-all is not an allowlist miss ...

An unattributed bottle, an unreachable orchestrator, and an unparseable
policy all become a deny-all Config, and a deny-all is indistinguishable
from "policy loaded, host not allowed" at the decision point — both are just
"no matching route". So every one of them reported `host X is not in the
bottle's egress.routes allowlist`, which reads as a config problem and sends
the operator hunting for a route that was never missing. Diagnosing a
bricked registration cost hours for exactly this reason.

Carry the structural reason on Config and prefer it in decide(). A genuine
allowlist miss — a policy that loaded and simply lacks the host — keeps the
original wording, so the message now tells the two cases apart.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-20 22:29:53 -04:00

..

__init__.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00

_docker_bottle_plan.py

fix(tests): pyright strict — export _plan fixture, drop unused imports

2026-07-14 17:12:12 -04:00

test_agent_provider.py

fix: repair codex resume paths

2026-07-08 12:38:15 -04:00

test_backend_freezer.py

test(firecracker): satisfy pyright strict + line length in committed-rootfs tests

2026-07-17 00:36:43 -04:00

test_backend_parity.py

feat(backend): remove smolmachines; firecracker is the Linux default

2026-07-11 13:24:47 -04:00

test_backend_prepare.py

refactor: move bot_bottle_root/host_db_path to paths; kill the monkeypatch (#352)

2026-07-14 02:38:20 -04:00

test_backend_selection.py

fix(backend): fix pyright errors in lazy-load implementation

2026-07-18 05:14:27 -04:00

test_backend_setup.py

test: cover _daemon_reachable timeout path and DbStore.is_migrated

2026-07-19 02:18:07 +00:00

test_backend_terminal.py

feat(backend): remove smolmachines; firecracker is the Linux default

2026-07-11 13:24:47 -04:00

test_backend_workspace.py

refactor: move bot_bottle_root/host_db_path to paths; kill the monkeypatch (#352)

2026-07-14 02:38:20 -04:00

test_bottle_state.py

refactor: move bot_bottle_root/host_db_path to paths; kill the monkeypatch (#352)

2026-07-14 02:38:20 -04:00

test_cli_backend.py

feat(backend): add teardown() to the contract; backend teardown

2026-07-11 16:56:17 -04:00

test_cli_cleanup_cross_backend.py

feat(backend): remove smolmachines; firecracker is the Linux default

2026-07-11 13:24:47 -04:00

test_cli_commit.py

refactor: move bot_bottle_root/host_db_path to paths; kill the monkeypatch (#352)

2026-07-14 02:38:20 -04:00

test_cli_dispatch.py

fix(cli): exempt backend command from DB migration gate

2026-07-18 15:27:29 -04:00

test_cli_start_backend_flag.py

feat(backend): remove smolmachines; firecracker is the Linux default

2026-07-11 13:24:47 -04:00

test_cli_start_headless.py

test: add unit tests to pass diff-coverage gate (91%)

2026-07-09 00:19:24 -04:00

test_cli_start_selector.py

fix(tests): mock name_color_modal in test_cli_start_selector setUp

2026-07-19 02:16:10 +00:00

test_cli_start_settle.py

refactor: move bot_bottle_root/host_db_path to paths; kill the monkeypatch (#352)

2026-07-14 02:38:20 -04:00

test_cli_tui.py

feat(tui,start): space/enter split, bottle lineage, YAML preflight

2026-06-25 16:13:19 -04:00

test_codex_auth.py

refactor: move codex_auth into contrib/codex

2026-06-07 11:35:35 -04:00

test_compose.py

refactor(de-sidecar): rename sidecar_init→gateway_init, drop docker's dead per-bottle compose renderer

2026-07-14 16:46:46 -04:00

test_consolidated_compose.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00

test_consolidated_launch.py

fix(tests): annotate on_network param — pyright strict (CI lint)

2026-07-14 02:38:20 -04:00

test_contrib_claude_provider.py

fix(supervise): remove queue directory from db-backed flow

2026-07-01 19:50:38 +00:00

test_contrib_codex_provider.py

fix(codex): register supervise MCP via config.toml http_headers, not mcp add --header

2026-07-16 17:42:36 -04:00

test_contrib_gitea_deploy_key.py

fix: add explicit timeouts to subprocess and HTTP calls in git-gate paths

2026-06-25 04:12:43 -04:00

test_contrib_pi_provider.py

feat(cli): add headless launch mode for orchestrators

2026-06-30 15:08:14 -04:00

test_db_store.py

test: cover _daemon_reachable timeout path and DbStore.is_migrated

2026-07-19 02:18:07 +00:00

test_deploy_key_provisioner.py

refactor: fix unused imports, long lines, and type issues

2026-06-03 23:04:17 -04:00

test_dlp_detectors.py

perf(dlp): linearize injection proximity check; bound variant cache; dedup supervise schema

2026-06-26 23:22:18 -04:00

test_docker_bottle.py

fix: route remote control through provider startup args

2026-06-25 03:08:47 -04:00

test_docker_cleanup.py

refactor: move bot_bottle_root/host_db_path to paths; kill the monkeypatch (#352)

2026-07-14 02:38:20 -04:00

test_docker_enumerate_active.py

refactor: move bot_bottle_root/host_db_path to paths; kill the monkeypatch (#352)

2026-07-14 02:38:20 -04:00

test_docker_launch_committed_image.py

feat(firecracker): implement consolidated orchestrator launch (PRD 0070)

2026-07-16 14:36:54 -04:00

test_docker_launch_teardown.py

fix: smoke-test agent images after build, add start --no-cache

2026-07-16 14:36:54 -04:00

test_docker_provision_git_user.py

feat(cli): add headless launch mode for orchestrators

2026-06-30 15:08:14 -04:00

test_docker_test_helpers.py

test(firecracker): satisfy pyright on the new infra-VM tests

2026-07-19 01:31:06 -04:00

test_docker_util_image.py

perf: lazy-load backend modules and consolidate docker subprocess helpers

2026-07-18 05:14:27 -04:00

test_egress_addon_core.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00

test_egress_addon_log_redaction.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

test_egress_addon_request_flow.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

test_egress_apply.py

fix(tests): pyright strict — export _plan fixture, drop unused imports

2026-07-14 17:12:12 -04:00

test_egress_core_parsing.py

test(egress): ratchet egress_addon_core coverage to >=90%

2026-06-25 22:04:27 -04:00

test_egress_entrypoint.py

test(egress): set orchestrator URL for entrypoint tests; cover fail-closed guard

2026-07-17 22:34:28 -04:00

test_egress_multitenant.py

fix(egress): name the real fault when a deny-all is not an allowlist miss

2026-07-20 22:29:53 -04:00

test_egress.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00

test_firecracker_backend.py

test(firecracker): derive netpool names from config, not hardcoded defaults

2026-07-19 01:21:23 -04:00

test_firecracker_cleanup.py

refactor(de-sidecar): remove the per-bottle companion-container architecture

2026-07-14 17:02:08 -04:00

test_firecracker_helpers.py

test(firecracker): derive netpool names from config, not hardcoded defaults

2026-07-19 01:21:23 -04:00

test_firecracker_image_builder.py

fix(firecracker): fold guest init into the agent-rootfs cache key

2026-07-19 01:21:23 -04:00

test_firecracker_infra_vm.py

test(firecracker): pin INFRA_BUILD off in the default-pull test

2026-07-19 18:03:11 -04:00

test_gateway_init.py

fix(tests): resolve sleep from PATH so subprocess tests run on NixOS

2026-07-18 22:09:05 -04:00

test_gateway_net.py

feat(orchestrator): slice 13c(ii) — shared-gateway source-IP allocator

2026-07-14 02:38:20 -04:00

test_gateway_provision.py

fix(git-gate): make the gateway access-hook executable regardless of copy transport

2026-07-17 21:49:30 -04:00

test_git_gate_host_key.py

fix(tests): replace os.chmod with mock for unreadable-file tests

2026-07-09 17:35:28 +00:00

test_git_gate_provision_render.py

feat(git-gate+orchestrator): slice 13c(i) — per-bottle git-gate provisioning render

2026-07-14 02:38:20 -04:00

test_git_gate_render_provision.py

refactor(git-gate): centralize hostname qualification in globalize_slug

2026-07-16 23:07:12 -04:00

test_git_gate.py

fix(git-gate): scan $new --not --all for every push, not $old..$new

2026-07-18 16:51:31 -04:00

test_git_http_backend.py

test(git-http): wire the resolver into the access-hook-503 regression test

2026-07-17 22:34:28 -04:00

test_git_http_multitenant.py

refactor(gateway): remove the single-tenant data-plane paths (audit #400 finding 3)

2026-07-17 22:34:28 -04:00

test_infra_artifact.py

fix(ci,infra): repair post-merge publish + harden candidate handling

2026-07-20 02:07:08 -04:00

test_log.py

feat(log): add leveled severity and structured context to log wrappers

2026-06-24 15:37:57 -04:00

test_macos_consolidated_launch.py

fix(orchestrator): reap registry rows whose bottle is no longer running

2026-07-20 22:29:46 -04:00

test_macos_container_bottle.py

fix: repair codex resume paths

2026-07-08 12:38:15 -04:00

test_macos_container_cleanup.py

refactor(macos): one infra container (control plane + gateway), fixes shared-DB races

2026-07-17 04:14:14 -04:00

test_macos_container_launch_wiring.py

fix(macos): review fixes — token on plan, self-heal, symmetric digest, DHCP poll

2026-07-17 03:26:33 -04:00

test_macos_container_pty_forward.py

test(macos-container): satisfy pyright mock typing

2026-06-23 03:02:03 +00:00

test_macos_container_util.py

fix(macos): review fixes — token on plan, self-heal, symmetric digest, DHCP poll

2026-07-17 03:26:33 -04:00

test_macos_infra.py

fix(macos-container): launch gateway as a module, not /app/gateway_init.py

2026-07-20 14:37:09 -04:00

test_manifest_agent_git_user.py

fix(types): add BottleSpec.loaded_manifest to satisfy pyright on union type

2026-06-22 23:54:02 -04:00

test_manifest_bottle_merge.py

fix(types): resolve pyright errors introduced in #269 changes

2026-06-25 16:13:19 -04:00

test_manifest_egress.py

feat(provider): support startup args settings

2026-06-24 22:51:27 -04:00

test_manifest_extends.py

feat: support multiple parents in bottle extends:

2026-06-25 05:10:03 -04:00

test_manifest_git_user.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_manifest_git.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_manifest_lazy_loader.py

test(manifest): cover lazy (on-disk) loader branches

2026-06-26 21:19:27 -04:00

test_manifest_md_load.py

fix(types): add BottleSpec.loaded_manifest to satisfy pyright on union type

2026-06-22 23:54:02 -04:00

test_manifest_runtime.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_manifest_validation.py

test: add unit tests to pass diff-coverage gate (91%)

2026-07-09 00:19:24 -04:00

test_orchestrator_broker.py

feat(orchestrator): slice 2 — launch lifecycle + signed launch-broker (#352)

2026-07-14 02:38:20 -04:00

test_orchestrator_client.py

fix(orchestrator): reap registry rows whose bottle is no longer running

2026-07-20 22:29:46 -04:00

test_orchestrator_control_plane.py

fix(orchestrator): reap registry rows whose bottle is no longer running

2026-07-20 22:29:46 -04:00

test_orchestrator_docker_broker.py

feat(orchestrator): slice 3 — real Docker launch broker (#352)

2026-07-14 02:38:20 -04:00

test_orchestrator_gateway.py

refactor(gateway): fail closed without an orchestrator URL; drop stale single-tenant comments

2026-07-17 22:34:28 -04:00

test_orchestrator_lifecycle.py

fix(security): authenticate the orchestrator control plane (issue #400 Critical)

2026-07-17 05:15:16 -04:00

test_orchestrator_registration.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00

test_orchestrator_registry.py

fix(orchestrator): reap registry rows whose bottle is no longer running

2026-07-20 22:29:46 -04:00

test_orchestrator_service.py

fix(orchestrator): reap registry rows whose bottle is no longer running

2026-07-20 22:29:46 -04:00

test_plan_print_parity.py

feat(backend): remove smolmachines; firecracker is the Linux default

2026-07-11 13:24:47 -04:00

test_policy_resolver.py

fix(egress+orchestrator): inject per-bottle auth tokens in the shared gateway

2026-07-14 02:38:20 -04:00

test_print_util.py

feat(manifest): add agent_provider.auth_token for Claude OAuth via egress

2026-06-01 22:24:17 -04:00

test_provision_git.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00

test_publish_infra.py

test(infra): cover candidate release failure paths

2026-07-19 22:42:54 +00:00

test_supervise_cli_crash_logging.py

test(supervise): stub the client in cmd_supervise crash-logging tests

2026-07-16 22:44:47 -04:00

test_supervise_cli.py

feat(supervise): show the bottle's human slug, not its opaque id

2026-07-16 22:05:21 -04:00

test_supervise_edge.py

refactor: drop the vestigial bot_bottle_root/host_db_path re-exports (#352)

2026-07-14 02:38:20 -04:00

test_supervise_server.py

feat(supervise): non-blocking MCP — pending carries proposal id + check-proposal poll tool

2026-07-18 17:06:04 -04:00

test_supervise.py

refactor: drop the vestigial bot_bottle_root/host_db_path re-exports (#352)

2026-07-14 02:38:20 -04:00

test_tracker_policy.py

ci: enforce canonical issue metadata policy

2026-07-18 14:18:39 -04:00

test_yaml_subset.py

refactor(git-gate): replace regex frontmatter edit with parse→mutate→serialize

2026-07-09 17:21:57 +00:00