didericis-codex 72e35a1343 feat(macos): spike rootless Docker inside bottles ...

Add an opt-in docker_access path that layers rootless Docker tooling onto the selected agent image, starts the daemon only after registration, and retains the existing outer network and capability boundary. Include fail-closed bootstrap checks plus a live-Mac Compose/security acceptance test.\n\nRefs #392.

2026-07-21 05:53:54 +00:00

..

backend

feat(macos): spike rootless Docker inside bottles

2026-07-21 05:53:54 +00:00

cli

fix(lint): mark read_tty_line as an explicit re-export in _common.py

2026-07-20 20:11:04 +00:00

contrib

fix(codex): register supervise MCP via config.toml http_headers, not mcp add --header

2026-07-16 17:42:36 -04:00

orchestrator

refactor(config_store): replace generic key/value table with explicit schema

2026-07-21 00:40:59 -04:00

__init__.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

agent_provider.py

feat(gateway): mandatory identity-token attribution on every data plane (PR #354 review)

2026-07-16 17:02:41 -04:00

audit_store.py

fix(db): close SQLite connections explicitly to suppress ResourceWarning on Python 3.13

2026-07-19 02:16:10 +00:00

bottle_state.py

feat(firecracker): port freeze/migrate off host Docker (PRD 0069 / #397)

2026-07-17 00:31:00 -04:00

constants.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

db_store.py

fix(db): close SQLite connections explicitly to suppress ResourceWarning on Python 3.13

2026-07-19 02:16:10 +00:00

deploy_key_provisioner.py

fix(deploy-key): raise DeployKeyCollisionError on 422 key conflicts

2026-06-25 02:23:12 +00:00

dlp_detectors.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

docker_cmd.py

fix(security): authenticate the orchestrator control plane (issue #400 Critical)

2026-07-17 05:15:16 -04:00

egress_addon_core.py

fix(egress): the unattributed message must name the token-mismatch cause too

2026-07-21 03:27:16 +00:00

egress_addon.py

fix(egress): name the real fault when a deny-all is not an allowlist miss

2026-07-21 03:27:16 +00:00

egress_dlp_config.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00

egress_entrypoint.sh

refactor(gateway): fail closed without an orchestrator URL; drop stale single-tenant comments

2026-07-17 22:34:28 -04:00

egress.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00

env.py

refactor(errors): introduce MissingEnvVarError for missing host env vars

2026-07-08 22:05:49 -04:00

errors.py

refactor(errors): introduce MissingEnvVarError for missing host env vars

2026-07-08 22:05:49 -04:00

gateway_init.py

refactor(gateway): invoke daemons via python3 -m instead of /app/ file copies

2026-07-18 07:55:38 +00:00

git_gate_host_key.py

feat(git-gate): show bottle filename in save-host-key prompt; public API

2026-07-09 17:26:25 +00:00

git_gate_provision.py

refactor(git-gate): centralize hostname qualification in globalize_slug

2026-07-16 23:07:12 -04:00

git_gate_render.py

fix(git-gate): scan $new --not --all for every push, not $old..$new

2026-07-18 16:51:31 -04:00

git_gate.py

fix(git-gate): make the gateway access-hook executable regardless of copy transport

2026-07-17 21:49:30 -04:00

git_http_backend.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

log.py

feat(log): add leveled severity and structured context to log wrappers

2026-06-24 15:37:57 -04:00

manifest_agent.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00

manifest_bottle.py

feat(macos): spike rootless Docker inside bottles

2026-07-21 05:53:54 +00:00

manifest_egress.py

Add dlp.outbound_on_match policy (block | redact | supervise)

2026-06-24 16:50:13 -04:00

manifest_extends.py

feat(macos): spike rootless Docker inside bottles

2026-07-21 05:53:54 +00:00

manifest_git.py

refactor: make static the default branch in _parse_key_config

2026-06-19 22:25:14 +00:00

manifest_loader.py

refactor(manifest): break import cycle by extracting ManifestBottle to a leaf module

2026-06-26 23:42:03 -04:00

manifest_schema.py

feat(macos): spike rootless Docker inside bottles

2026-07-21 05:53:54 +00:00

manifest_util.py

refactor: address PR review feedback — de-privatize helpers and rename modules

2026-06-03 00:33:02 -04:00

manifest.py

refactor(manifest): break import cycle by extracting ManifestBottle to a leaf module

2026-06-26 23:42:03 -04:00

migrations.py

refactor: extract TableMigrations and DbStore base class

2026-07-02 21:04:34 +00:00

paths.py

fix(security): authenticate the orchestrator control plane (issue #400 Critical)

2026-07-17 05:15:16 -04:00

policy_resolver.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

queue_store.py

fix(db): close SQLite connections explicitly to suppress ResourceWarning on Python 3.13

2026-07-19 02:16:10 +00:00

store_manager.py

refactor: move bot_bottle_root/host_db_path to paths; kill the monkeypatch (#352)

2026-07-14 02:38:20 -04:00

supervise_server.py

feat(supervise): non-blocking MCP — pending carries proposal id + check-proposal poll tool

2026-07-18 17:06:04 -04:00

supervise_types.py

feat(supervise): non-blocking MCP — pending carries proposal id + check-proposal poll tool

2026-07-18 17:06:04 -04:00

supervise.py

feat(supervise): non-blocking MCP — pending carries proposal id + check-proposal poll tool

2026-07-18 17:06:04 -04:00

util.py

refactor: consolidate read_tty_line into bot_bottle/util.py

2026-07-20 19:44:32 +00:00

workspace.py

fix: resolve pyright type errors

2026-06-03 23:25:41 -04:00

yaml_subset.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00