didericis-claude b5753b5921 fix(secret): authenticate bottled-secret encryption (#468) ...

The per-bottle egress-secret encryption (secret_store.py) was
unauthenticated CTR/XOR: decrypting with the WRONG ENV_VAR_SECRET
produced garbage that decrypt_value only rejected when it wasn't valid
UTF-8. For short token values that garbage is coincidentally valid UTF-8
~5% of the time, so `reprovision_from_secret` would occasionally "succeed"
with a wrong key and inject a garbage egress credential — and
test_reprovision_rejects_missing_rows_and_wrong_key failed ~5% of runs
(flaky CI, surfaced by this stack's unit job).

Switch to authenticated encrypt-then-MAC: append an HMAC-SHA256 tag over
`nonce || ciphertext`, keyed by a domain-separated MAC subkey derived from
the ENV_VAR_SECRET. decrypt_value verifies the tag (constant-time) before
returning any plaintext, so a wrong key or tampered ciphertext is rejected
deterministically. Blob format is now `nonce || ciphertext || tag`
(the stored rows are transient — re-written every launch — so no
migration is needed).

Pre-existing bug on main, unrelated to the transport work, but it blocks
this stack's CI. Tests: wrong key rejected 200/200; tampered ciphertext
rejected; round-trips unchanged. Deterministic now (was ~5% flaky).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-26 13:32:54 -04:00

..

__init__.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00

_docker_bottle_plan.py

refactor(supervise): split the supervise plane by tier; per-service store managers

2026-07-24 14:15:04 -04:00

test_agent_provider.py

feat(claude): add forward_host_credentials support

2026-07-21 13:15:05 -04:00

test_architecture_guardrails.py

chore: tighten upkeep boundaries and static checks

2026-07-26 06:55:49 +00:00

test_backend_freezer.py

test(firecracker): satisfy pyright strict + line length in committed-rootfs tests

2026-07-17 00:36:43 -04:00

test_backend_parity.py

feat(backend): remove smolmachines; firecracker is the Linux default

2026-07-11 13:24:47 -04:00

test_backend_prepare.py

feat(macos): run containers inside a bottle via guest-local podman

2026-07-21 22:54:26 -04:00

test_backend_secret_reprovision.py

fix(diagnostics): make optional failures observable and safe

2026-07-26 06:55:49 +00:00

test_backend_selection.py

refactor(backend): InfraService ABC + FirecrackerInfraService

2026-07-25 16:10:21 -04:00

test_backend_setup.py

firecracker status(): open /dev/kvm O_RDWR; check kernel, dropbear, mke2fs

2026-07-24 21:25:20 -04:00

test_backend_skip_guards.py

fix: align skip-guard tests with is_backend_ready and drop unused import

2026-07-24 21:25:20 -04:00

test_backend_terminal.py

feat(backend): remove smolmachines; firecracker is the Linux default

2026-07-11 13:24:47 -04:00

test_backend_util.py

test(backend): cover poll_ca_cert timeout paths for diff-coverage gate

2026-07-21 04:54:40 +00:00

test_backend_workspace.py

refactor: move bot_bottle_root/host_db_path to paths; kill the monkeypatch (#352)

2026-07-14 02:38:20 -04:00

test_bottle_state.py

refactor: move bot_bottle_root/host_db_path to paths; kill the monkeypatch (#352)

2026-07-14 02:38:20 -04:00

test_builtin_agent_images.py

test: update unit tests to match podman-in-nested-containers-layer change

2026-07-22 17:36:51 +00:00

test_cli_backend.py

refactor(cli): group subcommand handlers under cli/commands/

2026-07-24 17:25:25 -04:00

test_cli_cleanup_cross_backend.py

refactor(cli): group subcommand handlers under cli/commands/

2026-07-24 17:25:25 -04:00

test_cli_commit.py

refactor(cli): group subcommand handlers under cli/commands/

2026-07-24 17:25:25 -04:00

test_cli_dispatch.py

refactor(supervise): split the supervise plane by tier; per-service store managers

2026-07-24 14:15:04 -04:00

test_cli_doctor.py

fix: doctor probes backend readiness; install.sh resolves user-scripts dir

2026-07-25 22:34:25 -04:00

test_cli_login.py

refactor(cli): group subcommand handlers under cli/commands/

2026-07-24 17:25:25 -04:00

test_cli_module_entry.py

feat(cli): make bot_bottle.cli runnable with python -m

2026-07-21 14:25:38 -04:00

test_cli_start_backend_flag.py

fix: remove CLI backend assumptions and add docker fallback prompt

2026-07-20 19:13:08 +00:00

test_cli_start_headless.py

refactor(cli): group subcommand handlers under cli/commands/

2026-07-24 17:25:25 -04:00

test_cli_start_selector.py

refactor(cli): group subcommand handlers under cli/commands/

2026-07-24 17:25:25 -04:00

test_cli_start_settle.py

refactor(cli): group subcommand handlers under cli/commands/

2026-07-24 17:25:25 -04:00

test_cli_start_stale.py

refactor(cli): group subcommand handlers under cli/commands/

2026-07-24 17:25:25 -04:00

test_cli_tui.py

fix(diagnostics): make optional failures observable and safe

2026-07-26 06:55:49 +00:00

test_codex_auth.py

refactor: move codex_auth into contrib/codex

2026-06-07 11:35:35 -04:00

test_compose.py

refactor(de-sidecar): rename sidecar_init→gateway_init, drop docker's dead per-bottle compose renderer

2026-07-14 16:46:46 -04:00

test_config_store.py

refactor(supervise): split the supervise plane by tier; per-service store managers

2026-07-24 14:15:04 -04:00

test_consolidated_compose.py

test(secrets): satisfy static coverage checks

2026-07-23 21:39:07 +00:00

test_consolidated_launch.py

refactor(backend): verb-first names for the provisioning modules

2026-07-25 14:13:54 -04:00

test_contrib_claude_auth.py

feat(claude): add forward_host_credentials support

2026-07-21 13:15:05 -04:00

test_contrib_claude_provider.py

fix(claude): don't log the raw identity token in supervise MCP recovery hint

2026-07-25 22:27:18 +00:00

test_contrib_codex_provider.py

refactor(supervise): split the supervise plane by tier; per-service store managers

2026-07-24 14:15:04 -04:00

test_contrib_gitea_deploy_key.py

fix: add explicit timeouts to subprocess and HTTP calls in git-gate paths

2026-06-25 04:12:43 -04:00

test_contrib_pi_provider.py

feat(cli): add headless launch mode for orchestrators

2026-06-30 15:08:14 -04:00

test_critical_modules.py

test(ci): cover assurance gate entry points

2026-07-26 08:14:00 +00:00

test_db_store.py

refactor(store): consolidate the SQLite store family into bot_bottle.store

2026-07-24 12:53:52 -04:00

test_deploy_key_provisioner.py

refactor: fix unused imports, long lines, and type issues

2026-06-03 23:04:17 -04:00

test_dlp_detectors.py

refactor(gateway): split data-plane files into egress/supervisor/git_gate services

2026-07-24 17:00:51 -04:00

test_docker_bottle.py

fix: route remote control through provider startup args

2026-06-25 03:08:47 -04:00

test_docker_cleanup.py

refactor: move bot_bottle_root/host_db_path to paths; kill the monkeypatch (#352)

2026-07-14 02:38:20 -04:00

test_docker_enumerate_active.py

refactor: move bot_bottle_root/host_db_path to paths; kill the monkeypatch (#352)

2026-07-14 02:38:20 -04:00

test_docker_infra.py

test(ci): cover assurance gate entry points

2026-07-26 08:14:00 +00:00

test_docker_launch_committed_image.py

refactor(backend): rename teardown_consolidated -> deprovision_consolidated

2026-07-25 14:07:57 -04:00

test_docker_launch_teardown.py

refactor(backend): rename teardown_consolidated -> deprovision_consolidated

2026-07-25 14:07:57 -04:00

test_docker_orchestrator.py

fix(ci): join control planes to the runner network

2026-07-26 08:30:57 +00:00

test_docker_provision_git_user.py

test(git): cover provisioning failures

2026-07-21 14:52:44 -04:00

test_docker_util_image.py

fix(pyright): assert not None before accessing datetime attributes in tests

2026-07-21 13:56:29 -04:00

test_egress_addon_core.py

refactor(gateway): split data-plane files into egress/supervisor/git_gate services

2026-07-24 17:00:51 -04:00

test_egress_addon_log_redaction.py

refactor(gateway): split data-plane files into egress/supervisor/git_gate services

2026-07-24 17:00:51 -04:00

test_egress_addon_request_flow.py

fix(egress): run supervise propose/poll RPCs off the mitmproxy event loop

2026-07-25 23:30:12 +00:00

test_egress_apply.py

fix(tests): pyright strict — export _plan fixture, drop unused imports

2026-07-14 17:12:12 -04:00

test_egress_core_parsing.py

refactor(egress): make addon core a compatibility facade

2026-07-26 06:55:49 +00:00

test_egress_entrypoint.py

refactor(gateway): move egress entrypoint into gateway/egress

2026-07-24 17:14:26 -04:00

test_egress_multitenant.py

fix(diagnostics): make optional failures observable and safe

2026-07-26 06:55:49 +00:00

test_egress.py

refactor(gateway): split data-plane files into egress/supervisor/git_gate services

2026-07-24 17:00:51 -04:00

test_firecracker_backend.py

firecracker status(): open /dev/kvm O_RDWR; check kernel, dropbear, mke2fs

2026-07-24 21:25:20 -04:00

test_firecracker_cleanup.py

fix(secrets): recover encrypted tokens on all backends

2026-07-23 21:39:07 +00:00

test_firecracker_gateway.py

refactor(firecracker): orchestrator under the Orchestrator service ABC

2026-07-25 14:54:28 -04:00

test_firecracker_helpers.py

feat(firecracker): split orchestrator and gateway into separate VMs (PRD 0070)

2026-07-25 03:44:15 -04:00

test_firecracker_image_builder.py

fix(rebase): correct test_cached_lookup key and drop duplicate test

2026-07-21 13:56:29 -04:00

test_firecracker_infra_vm.py

Merge remote-tracking branch 'origin/fix/db-off-data-plane-469' into fix/db-off-data-plane-469

2026-07-25 18:01:49 -04:00

test_firecracker_infra.py

refactor(backend): InfraService ABC + FirecrackerInfraService

2026-07-25 16:10:21 -04:00

test_firecracker_orchestrator.py

refactor(orchestrator): uniform control-plane auth provisioning per trust domain

2026-07-26 01:32:53 +00:00

test_gateway_init.py

refactor: remove leftovers from the orchestrator/gateway consolidation

2026-07-25 15:48:16 -04:00

test_gateway_net.py

feat(orchestrator): slice 13c(ii) — shared-gateway source-IP allocator

2026-07-14 02:38:20 -04:00

test_git_gate_host_key.py

refactor(git-gate): make GitGate a service class in a git_gate package

2026-07-24 16:27:56 -04:00

test_git_gate_provision_render.py

refactor(gateway): split data-plane files into egress/supervisor/git_gate services

2026-07-24 17:00:51 -04:00

test_git_gate_render_provision.py

refactor(manifest): consolidate the manifest modules into a bot_bottle.manifest package

2026-07-24 13:04:39 -04:00

test_git_gate.py

refactor(git-gate): make GitGate a service class in a git_gate package

2026-07-24 16:27:56 -04:00

test_git_http_backend.py

refactor(gateway): split data-plane files into egress/supervisor/git_gate services

2026-07-24 17:00:51 -04:00

test_git_http_multitenant.py

refactor(gateway): split data-plane files into egress/supervisor/git_gate services

2026-07-24 17:00:51 -04:00

test_image_cache.py

fix(tests): resolve pyright errors in stale-check test files

2026-07-21 13:56:29 -04:00

test_infra_artifact.py

refactor(firecracker): split the combined rootfs into per-plane artifacts

2026-07-25 15:21:03 -04:00

test_install_script.py

fix: doctor probes backend readiness; install.sh resolves user-scripts dir

2026-07-25 22:34:25 -04:00

test_log.py

feat(log): add leveled severity and structured context to log wrappers

2026-06-24 15:37:57 -04:00

test_macos_consolidated_launch.py

refactor(backend): InfraService ABC + FirecrackerInfraService

2026-07-25 16:10:21 -04:00

test_macos_container_bottle.py

fix: repair codex resume paths

2026-07-08 12:38:15 -04:00

test_macos_container_cleanup.py

refactor: remove leftovers from the orchestrator/gateway consolidation

2026-07-25 15:48:16 -04:00

test_macos_container_launch_wiring.py

fix(secrets): recover encrypted tokens on all backends

2026-07-23 21:39:07 +00:00

test_macos_container_pty_forward.py

test(macos-container): satisfy pyright mock typing

2026-06-23 03:02:03 +00:00

test_macos_container_util.py

fix(secrets): recover encrypted tokens on all backends

2026-07-23 21:39:07 +00:00

test_macos_gateway_hosts.py

fix(macos): name the gateway instead of addressing it, so bottles survive it moving

2026-07-20 23:08:59 -04:00

test_macos_gateway.py

refactor(gateway): each backend's transport in its own gateway_transport.py

2026-07-25 13:52:31 -04:00

test_macos_infra.py

refactor(backend): InfraService ABC + FirecrackerInfraService

2026-07-25 16:10:21 -04:00

test_macos_nested_containers.py

fix: make installed wheel self-contained + harden install.sh prereqs

2026-07-25 22:34:25 -04:00

test_macos_orchestrator.py

refactor(orchestrator): uniform control-plane auth provisioning per trust domain

2026-07-26 01:32:53 +00:00

test_manifest_agent_git_user.py

fix(types): add BottleSpec.loaded_manifest to satisfy pyright on union type

2026-06-22 23:54:02 -04:00

test_manifest_bottle_merge.py

refactor(manifest): consolidate the manifest modules into a bot_bottle.manifest package

2026-07-24 13:04:39 -04:00

test_manifest_egress.py

refactor(egress): make TLS inspection explicit

2026-07-23 21:28:39 +00:00

test_manifest_extends.py

fix(manifest): preserve declared boolean fields

2026-07-22 18:35:31 +00:00

test_manifest_git_user.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_manifest_git.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_manifest_lazy_loader.py

test(manifest): cover lazy (on-disk) loader branches

2026-06-26 21:19:27 -04:00

test_manifest_md_load.py

refactor(egress): make TLS inspection explicit

2026-07-23 21:28:39 +00:00

test_manifest_runtime.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_manifest_validation.py

refactor(manifest): consolidate the manifest modules into a bot_bottle.manifest package

2026-07-24 13:04:39 -04:00

test_orchestrator_auth.py

refactor(orchestrator): uniform control-plane auth provisioning per trust domain

2026-07-26 01:32:53 +00:00

test_orchestrator_broker_client.py

fix(orchestrator): address review on host control server transport (#468)

2026-07-26 13:32:54 -04:00

test_orchestrator_broker.py

feat(orchestrator): slice 2 — launch lifecycle + signed launch-broker (#352)

2026-07-14 02:38:20 -04:00

test_orchestrator_client.py

fix(diagnostics): make optional failures observable and safe

2026-07-26 06:55:49 +00:00

test_orchestrator_config_store.py

refactor(supervise): split the supervise plane by tier; per-service store managers

2026-07-24 14:15:04 -04:00

test_orchestrator_docker_broker.py

feat(orchestrator): slice 3 — real Docker launch broker (#352)

2026-07-14 02:38:20 -04:00

test_orchestrator_gateway.py

fix(docker): configure the attributed gateway subnet

2026-07-26 08:35:37 +00:00

test_orchestrator_host_server.py

fix(orchestrator): address review on host control server transport (#468)

2026-07-26 13:32:54 -04:00

test_orchestrator_main.py

fix(orchestrator): address review on host control server transport (#468)

2026-07-26 13:32:54 -04:00

test_orchestrator_registration.py

refactor(gateway): split data-plane files into egress/supervisor/git_gate services

2026-07-24 17:00:51 -04:00

test_orchestrator_registry_store.py

refactor(orchestrator): move registry into store/registry_store

2026-07-24 18:24:20 -04:00

test_orchestrator_rotate_ca.py

refactor(docker): rename OrchestratorService -> DockerInfraService, move to backend/docker

2026-07-24 15:26:52 -04:00

test_orchestrator_secret_store.py

fix(secret): authenticate bottled-secret encryption (#468)

2026-07-26 13:32:54 -04:00

test_orchestrator_server.py

chore: tighten upkeep boundaries and static checks

2026-07-26 06:55:49 +00:00

test_orchestrator_service.py

fix(orchestrator): address review on host control server transport (#468)

2026-07-26 13:32:54 -04:00

test_plan_print_parity.py

feat(backend): remove smolmachines; firecracker is the Linux default

2026-07-11 13:24:47 -04:00

test_policy_resolver.py

refactor: unify component naming — control_plane/control_auth -> orchestrator

2026-07-24 18:17:48 -04:00

test_print_util.py

feat(manifest): add agent_provider.auth_token for Claude OAuth via egress

2026-06-01 22:24:17 -04:00

test_provision_gateway.py

refactor(backend): verb-first names for the provisioning modules

2026-07-25 14:13:54 -04:00

test_provision_git.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00

test_publish_infra.py

refactor(firecracker): split the combined rootfs into per-plane artifacts

2026-07-25 15:21:03 -04:00

test_pyproject.py

feat: add quick install script and packaging (#197)

2026-07-25 22:34:25 -04:00

test_resources.py

fix: doctor probes backend readiness; install.sh resolves user-scripts dir

2026-07-25 22:34:25 -04:00

test_stale_checks.py

fix(firecracker): honor cached image policy

2026-07-21 13:56:29 -04:00

test_supervise_cli_crash_logging.py

refactor(cli): group subcommand handlers under cli/commands/

2026-07-24 17:25:25 -04:00

test_supervise_cli.py

refactor(cli): group subcommand handlers under cli/commands/

2026-07-24 17:25:25 -04:00

test_supervise_edge.py

refactor(supervise): hash the proposed file inside Proposal.new; sha256_hex → root util

2026-07-24 15:03:37 -04:00

test_supervise_server.py

docs(prd): number merged placeholder documents

2026-07-26 06:06:04 +00:00

test_supervise.py

refactor(util): make render_diff generic (caller supplies side titles); move to root util

2026-07-24 15:09:27 -04:00

test_tracker_policy.py

ci(tracker): require one metadata owner per pull request

2026-07-26 02:54:56 -04:00

test_trust_domain.py

refactor(orchestrator): fail closed unconditionally, drop topology opt-out

2026-07-26 01:40:19 +00:00

test_unittest_gate.py

test(ci): cover assurance gate entry points

2026-07-26 08:14:00 +00:00

test_wheel_install.py

fix: make installed wheel self-contained + harden install.sh prereqs

2026-07-25 22:34:25 -04:00

test_yaml_subset.py

refactor(git-gate): replace regex frontmatter edit with parse→mutate→serialize

2026-07-09 17:21:57 +00:00