didericis f7fb691626 feat(ssh-gate): add abstract SSHGate + plan dataclass ...

First piece of PRD 0007: the per-agent SSH egress gate that will
let pipelock stop seeing SSH traffic. This commit only lands the
backend-agnostic surface — the SSHGate ABC, SSHGatePlan, the
listen-port assignment (BASE_LISTEN_PORT + index), and the
entrypoint-script renderer. Backend wiring lands in follow-up
commits.

2026-05-12 15:56:52 -04:00

..

__init__.py

test: reorganize suite into unit/integration/canaries directories

2026-05-11 16:23:02 -04:00

test_cli_start_format.py

style: pass explicit check= to every subprocess.run call

2026-05-12 10:13:56 -04:00

test_manifest_runtime.py

chore(types): add pyright strict config and fix resulting errors

2026-05-12 10:03:48 -04:00

test_pipelock_allowlist.py

test(pipelock): collapse over-decomposed allowlist helper tests

2026-05-11 16:36:04 -04:00

test_pipelock_classify.py

test: reorganize suite into unit/integration/canaries directories

2026-05-11 16:23:02 -04:00

test_pipelock_yaml.py

feat(pipelock): enable tls_interception with per-bottle ephemeral CA

2026-05-12 14:45:36 -04:00

test_ssh_gate.py

feat(ssh-gate): add abstract SSHGate + plan dataclass

2026-05-12 15:56:52 -04:00