didericis-claude e89e95a139 feat: add dlp: false passthrough option for egress routes ...

Routes with `dlp: false` skip all DLP scanning (including CRLF injection,
which cannot be disabled via `dlp.outbound_detectors: false`) and tunnel
HTTPS connections without TLS interception so the client sees the server's
real certificate. Fixes Docker image pulls, which fail when the proxy MITM's
the TLS handshake and the container doesn't trust the per-bottle CA.

Closes #462

2026-07-22 22:37:43 +00:00

..

backend

fix(macos): persist gateway CA on host

2026-07-21 15:01:38 -04:00

cli

feat(login): point the printed URL at the hosts-page modal

2026-07-21 14:25:38 -04:00

contrib

Revert "refactor(agent-images): use explicit Debian base"

2026-07-21 14:52:44 -04:00

orchestrator

fix(gateway): persist mitmproxy CA on the host, not a named volume (#450)

2026-07-21 15:01:38 -04:00

__init__.py

…

agent_provider.py

fix(firecracker): restore agent home ownership at boot

2026-07-21 14:52:44 -04:00

audit_store.py

fix(db): close SQLite connections explicitly to suppress ResourceWarning on Python 3.13

2026-07-19 02:16:10 +00:00

bottle_state.py

feat(firecracker): port freeze/migrate off host Docker (PRD 0069 / #397)

2026-07-17 00:31:00 -04:00

config_store.py

fix: correct host_db_path import and stale-check test expectations

2026-07-21 13:56:29 -04:00

constants.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

db_store.py

fix(db): close SQLite connections explicitly to suppress ResourceWarning on Python 3.13

2026-07-19 02:16:10 +00:00

deploy_key_provisioner.py

…

dlp_detectors.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

docker_cmd.py

fix(security): authenticate the orchestrator control plane (issue #400 Critical)

2026-07-17 05:15:16 -04:00

egress_addon_core.py

feat: add dlp: false passthrough option for egress routes

2026-07-22 22:37:43 +00:00

egress_addon.py

feat: add dlp: false passthrough option for egress routes

2026-07-22 22:37:43 +00:00

egress_dlp_config.py

feat: add dlp: false passthrough option for egress routes

2026-07-22 22:37:43 +00:00

egress_entrypoint.sh

refactor(gateway): fail closed without an orchestrator URL; drop stale single-tenant comments

2026-07-17 22:34:28 -04:00

egress.py

feat(egress): add preserve_auth flag to pass agent Authorization through

2026-07-21 15:01:59 -04:00

env.py

refactor(errors): introduce MissingEnvVarError for missing host env vars

2026-07-08 22:05:49 -04:00

errors.py

refactor(errors): introduce MissingEnvVarError for missing host env vars

2026-07-08 22:05:49 -04:00

gateway_init.py

fix(pyright): resolve type errors introduced by lifecycle refactor

2026-07-21 04:54:40 +00:00

git_gate_host_key.py

feat(git-gate): show bottle filename in save-host-key prompt; public API

2026-07-09 17:26:25 +00:00

git_gate_provision.py

refactor(git-gate): centralize hostname qualification in globalize_slug

2026-07-16 23:07:12 -04:00

git_gate_render.py

fix(git-gate): scan $new --not --all for every push, not $old..$new

2026-07-18 16:51:31 -04:00

git_gate.py

fix(git-gate): make the gateway access-hook executable regardless of copy transport

2026-07-17 21:49:30 -04:00

git_http_backend.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

image_cache.py

refactor(image-cache): replace warn_if_stale with StaleImageError; add launch template

2026-07-21 13:56:29 -04:00

log.py

…

manifest_agent.py

feat(claude): add forward_host_credentials support

2026-07-21 13:15:05 -04:00

manifest_bottle.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00

manifest_egress.py

feat: add dlp: false passthrough option for egress routes

2026-07-22 22:37:43 +00:00

manifest_extends.py

refactor(manifest): break import cycle by extracting ManifestBottle to a leaf module

2026-06-26 23:42:03 -04:00

manifest_git.py

…

manifest_loader.py

refactor(manifest): break import cycle by extracting ManifestBottle to a leaf module

2026-06-26 23:42:03 -04:00

manifest_schema.py

fix(skills): validate skill names and quote provisioning paths

2026-06-27 02:15:30 -04:00

manifest_util.py

…

manifest.py

refactor(manifest): break import cycle by extracting ManifestBottle to a leaf module

2026-06-26 23:42:03 -04:00

migrations.py

refactor: extract TableMigrations and DbStore base class

2026-07-02 21:04:34 +00:00

paths.py

fix(gateway): persist mitmproxy CA on the host, not a named volume (#450)

2026-07-21 15:01:38 -04:00

policy_resolver.py

refactor(gateway): replace flat-file import shims with installed package

2026-07-18 03:01:41 +00:00

queue_store.py

fix(db): close SQLite connections explicitly to suppress ResourceWarning on Python 3.13

2026-07-19 02:16:10 +00:00

store_manager.py

Add cached image quickstart

2026-07-21 13:56:29 -04:00

supervise_server.py

feat(supervise): non-blocking MCP — pending carries proposal id + check-proposal poll tool

2026-07-18 17:06:04 -04:00

supervise_types.py

feat(supervise): non-blocking MCP — pending carries proposal id + check-proposal poll tool

2026-07-18 17:06:04 -04:00

supervise.py

feat(supervise): non-blocking MCP — pending carries proposal id + check-proposal poll tool

2026-07-18 17:06:04 -04:00

util.py

refactor: consolidate read_tty_line into bot_bottle/util.py

2026-07-20 19:44:32 +00:00

workspace.py

…

yaml_subset.py

refactor(de-sidecar): purge the "sidecar" name from live code, tests, and current docs

2026-07-14 17:07:56 -04:00