didericis-claude bf8ff91b31 fix(manifest): presence-aware runtime merge for nested_containers ...

The runtime merge (merge_bottles_runtime / _fold_two_bottles) was using
OR semantics for nested_containers, which meant `nested_containers: false`
in a later bottle could never override an earlier `true`.

Fix: add `nested_containers_explicit: bool` to ManifestBottle, set to
True only when the key is present in the source dict. The runtime merge
functions now use the override's value only when it was explicitly
supplied; otherwise the base's value is preserved. This matches the
documented last-wins / presence-aware semantics used by supervise and
agent_provider, and aligns with _merge_bottles (the file-based extends
path) which already did presence checks via `"nested_containers" in
child_raw`.

Tests: rename existing test to clarify the preserved-when-omitted case,
add explicit-false-overrides-true and explicit-true-overrides-false cases.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-22 17:58:00 +00:00

..

backend

review: remove security-boundary note, move podman into nested-containers layer

2026-07-22 17:30:58 +00:00

cli

fix(manifest): OR nested_containers across composed bottles

2026-07-21 22:54:26 -04:00

contrib

review: remove security-boundary note, move podman into nested-containers layer

2026-07-22 17:30:58 +00:00

orchestrator

fix(gateway): persist mitmproxy CA on the host, not a named volume (#450)

2026-07-21 15:01:38 -04:00

__init__.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

agent_provider.py

fix(firecracker): restore agent home ownership at boot

2026-07-21 14:52:44 -04:00

audit_store.py

fix(db): close SQLite connections explicitly to suppress ResourceWarning on Python 3.13

2026-07-19 02:16:10 +00:00

bottle_state.py

feat(firecracker): port freeze/migrate off host Docker (PRD 0069 / #397)

2026-07-17 00:31:00 -04:00

config_store.py

fix: correct host_db_path import and stale-check test expectations

2026-07-21 13:56:29 -04:00

constants.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

db_store.py

fix(db): close SQLite connections explicitly to suppress ResourceWarning on Python 3.13

2026-07-19 02:16:10 +00:00

deploy_key_provisioner.py

fix(deploy-key): raise DeployKeyCollisionError on 422 key conflicts

2026-06-25 02:23:12 +00:00

dlp_detectors.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

docker_cmd.py

fix(security): authenticate the orchestrator control plane (issue #400 Critical)

2026-07-17 05:15:16 -04:00

egress_addon_core.py

feat(egress): add preserve_auth flag to pass agent Authorization through

2026-07-21 15:01:59 -04:00

egress_addon.py

feat(egress): add preserve_auth flag to pass agent Authorization through

2026-07-21 15:01:59 -04:00

egress_dlp_config.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00

egress_entrypoint.sh

refactor(gateway): fail closed without an orchestrator URL; drop stale single-tenant comments

2026-07-17 22:34:28 -04:00

egress.py

fix(egress): emit preserve_auth into the generated routes

2026-07-21 22:54:26 -04:00

env.py

refactor(errors): introduce MissingEnvVarError for missing host env vars

2026-07-08 22:05:49 -04:00

errors.py

refactor(errors): introduce MissingEnvVarError for missing host env vars

2026-07-08 22:05:49 -04:00

gateway_init.py

fix(pyright): resolve type errors introduced by lifecycle refactor

2026-07-21 04:54:40 +00:00

git_gate_host_key.py

feat(git-gate): show bottle filename in save-host-key prompt; public API

2026-07-09 17:26:25 +00:00

git_gate_provision.py

refactor(git-gate): centralize hostname qualification in globalize_slug

2026-07-16 23:07:12 -04:00

git_gate_render.py

fix(git-gate): scan $new --not --all for every push, not $old..$new

2026-07-18 16:51:31 -04:00

git_gate.py

fix(git-gate): make the gateway access-hook executable regardless of copy transport

2026-07-17 21:49:30 -04:00

git_http_backend.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

image_cache.py

refactor(image-cache): replace warn_if_stale with StaleImageError; add launch template

2026-07-21 13:56:29 -04:00

log.py

feat(log): add leveled severity and structured context to log wrappers

2026-06-24 15:37:57 -04:00

manifest_agent.py

feat(claude): add forward_host_credentials support

2026-07-21 13:15:05 -04:00

manifest_bottle.py

fix(manifest): presence-aware runtime merge for nested_containers

2026-07-22 17:58:00 +00:00

manifest_egress.py

feat(egress): add preserve_auth flag to pass agent Authorization through

2026-07-21 15:01:59 -04:00

manifest_extends.py

fix(manifest): presence-aware runtime merge for nested_containers

2026-07-22 17:58:00 +00:00

manifest_git.py

refactor: make static the default branch in _parse_key_config

2026-06-19 22:25:14 +00:00

manifest_loader.py

refactor(manifest): break import cycle by extracting ManifestBottle to a leaf module

2026-06-26 23:42:03 -04:00

manifest_schema.py

feat(macos): run containers inside a bottle via guest-local podman

2026-07-21 22:54:26 -04:00

manifest_util.py

refactor: address PR review feedback — de-privatize helpers and rename modules

2026-06-03 00:33:02 -04:00

manifest.py

fix(manifest): OR nested_containers across composed bottles

2026-07-21 22:54:26 -04:00

migrations.py

refactor: extract TableMigrations and DbStore base class

2026-07-02 21:04:34 +00:00

paths.py

fix(gateway): persist mitmproxy CA on the host, not a named volume (#450)

2026-07-21 15:01:38 -04:00

policy_resolver.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

queue_store.py

fix(db): close SQLite connections explicitly to suppress ResourceWarning on Python 3.13

2026-07-19 02:16:10 +00:00

store_manager.py

Add cached image quickstart

2026-07-21 13:56:29 -04:00

supervise_server.py

feat(supervise): non-blocking MCP — pending carries proposal id + check-proposal poll tool

2026-07-18 17:06:04 -04:00

supervise_types.py

feat(supervise): non-blocking MCP — pending carries proposal id + check-proposal poll tool

2026-07-18 17:06:04 -04:00

supervise.py

feat(supervise): non-blocking MCP — pending carries proposal id + check-proposal poll tool

2026-07-18 17:06:04 -04:00

util.py

refactor: consolidate read_tty_line into bot_bottle/util.py

2026-07-20 19:44:32 +00:00

workspace.py

fix: resolve pyright type errors

2026-06-03 23:25:41 -04:00

yaml_subset.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00