didericis-claude 83aa6768fc feat: add dlp: false passthrough option for egress routes ...

Routes with `dlp: false` skip all DLP scanning (including CRLF injection,
which cannot be disabled via `dlp.outbound_detectors: false`) and tunnel
HTTPS connections without TLS interception so the client sees the server's
real certificate. Fixes Docker image pulls, which fail when the proxy MITM's
the TLS handshake and the container doesn't trust the per-bottle CA.

Closes #462

2026-07-23 21:28:22 +00:00

..

backend

review: remove security-boundary note, move podman into nested-containers layer

2026-07-22 17:30:58 +00:00

cli

fix(manifest): OR nested_containers across composed bottles

2026-07-21 22:54:26 -04:00

contrib

review: remove security-boundary note, move podman into nested-containers layer

2026-07-22 17:30:58 +00:00

orchestrator

fix(gateway): persist mitmproxy CA on the host, not a named volume (#450)

2026-07-21 15:01:38 -04:00

__init__.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

agent_provider.py

fix(firecracker): restore agent home ownership at boot

2026-07-21 14:52:44 -04:00

audit_store.py

fix(db): close SQLite connections explicitly to suppress ResourceWarning on Python 3.13

2026-07-19 02:16:10 +00:00

bottle_state.py

feat(firecracker): port freeze/migrate off host Docker (PRD 0069 / #397)

2026-07-17 00:31:00 -04:00

config_store.py

fix: correct host_db_path import and stale-check test expectations

2026-07-21 13:56:29 -04:00

constants.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

db_store.py

fix(db): close SQLite connections explicitly to suppress ResourceWarning on Python 3.13

2026-07-19 02:16:10 +00:00

deploy_key_provisioner.py

fix(deploy-key): raise DeployKeyCollisionError on 422 key conflicts

2026-06-25 02:23:12 +00:00

dlp_detectors.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

docker_cmd.py

fix(security): authenticate the orchestrator control plane (issue #400 Critical)

2026-07-17 05:15:16 -04:00

egress_addon_core.py

feat: add dlp: false passthrough option for egress routes

2026-07-23 21:28:22 +00:00

egress_addon.py

feat: add dlp: false passthrough option for egress routes

2026-07-23 21:28:22 +00:00

egress_dlp_config.py

feat: add dlp: false passthrough option for egress routes

2026-07-23 21:28:22 +00:00

egress_entrypoint.sh

refactor(gateway): fail closed without an orchestrator URL; drop stale single-tenant comments

2026-07-17 22:34:28 -04:00

egress.py

fix(egress): emit preserve_auth into the generated routes

2026-07-21 22:54:26 -04:00

env.py

refactor(errors): introduce MissingEnvVarError for missing host env vars

2026-07-08 22:05:49 -04:00

errors.py

refactor(errors): introduce MissingEnvVarError for missing host env vars

2026-07-08 22:05:49 -04:00

gateway_init.py

fix(pyright): resolve type errors introduced by lifecycle refactor

2026-07-21 04:54:40 +00:00

git_gate_host_key.py

feat(git-gate): show bottle filename in save-host-key prompt; public API

2026-07-09 17:26:25 +00:00

git_gate_provision.py

refactor(git-gate): centralize hostname qualification in globalize_slug

2026-07-16 23:07:12 -04:00

git_gate_render.py

fix(git-gate): scan $new --not --all for every push, not $old..$new

2026-07-18 16:51:31 -04:00

git_gate.py

fix(git-gate): make the gateway access-hook executable regardless of copy transport

2026-07-17 21:49:30 -04:00

git_http_backend.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

image_cache.py

refactor(image-cache): replace warn_if_stale with StaleImageError; add launch template

2026-07-21 13:56:29 -04:00

log.py

feat(log): add leveled severity and structured context to log wrappers

2026-06-24 15:37:57 -04:00

manifest_agent.py

feat(claude): add forward_host_credentials support

2026-07-21 13:15:05 -04:00

manifest_bottle.py

fix(manifest): preserve declared boolean fields

2026-07-22 18:35:31 +00:00

manifest_egress.py

feat: add dlp: false passthrough option for egress routes

2026-07-23 21:28:22 +00:00

manifest_extends.py

fix(manifest): preserve declared boolean fields

2026-07-22 18:35:31 +00:00

manifest_git.py

refactor: make static the default branch in _parse_key_config

2026-06-19 22:25:14 +00:00

manifest_loader.py

refactor(manifest): break import cycle by extracting ManifestBottle to a leaf module

2026-06-26 23:42:03 -04:00

manifest_schema.py

feat(macos): run containers inside a bottle via guest-local podman

2026-07-21 22:54:26 -04:00

manifest_util.py

refactor: address PR review feedback — de-privatize helpers and rename modules

2026-06-03 00:33:02 -04:00

manifest.py

fix(manifest): OR nested_containers across composed bottles

2026-07-21 22:54:26 -04:00

migrations.py

refactor: extract TableMigrations and DbStore base class

2026-07-02 21:04:34 +00:00

paths.py

fix(gateway): persist mitmproxy CA on the host, not a named volume (#450)

2026-07-21 15:01:38 -04:00

policy_resolver.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

queue_store.py

fix(db): close SQLite connections explicitly to suppress ResourceWarning on Python 3.13

2026-07-19 02:16:10 +00:00

store_manager.py

Add cached image quickstart

2026-07-21 13:56:29 -04:00

supervise_server.py

feat(supervise): non-blocking MCP — pending carries proposal id + check-proposal poll tool

2026-07-18 17:06:04 -04:00

supervise_types.py

feat(supervise): non-blocking MCP — pending carries proposal id + check-proposal poll tool

2026-07-18 17:06:04 -04:00

supervise.py

feat(supervise): non-blocking MCP — pending carries proposal id + check-proposal poll tool

2026-07-18 17:06:04 -04:00

util.py

refactor: consolidate read_tty_line into bot_bottle/util.py

2026-07-20 19:44:32 +00:00

workspace.py

fix: resolve pyright type errors

2026-06-03 23:25:41 -04:00

yaml_subset.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00