feat(firewall): opt-in ~ regex marker for egress path rules#400

Merged

schmitthub merged 26 commits into

mainfrom

feat/firewall-path-end-anchor

Jun 24, 2026

Commits on Jun 23, 2026

feat(firewall): opt-in ~ regex marker for egress path rules

schmitthub
and
claude
committed
fix(firewall): honor ~ regex path marker in host-proxy egress gate

schmitthub
and
claude
committed
fix(hostproxy): canonicalize dot-segment dirs to match Envoy normalize_path

schmitthub
and
claude
committed
docs(firewall): sharpen domain wildcard and regex path rule guidance

schmitthub
and
claude
committed
feat(firewall): validate literal path chars, document rule precedence

schmitthub
and
claude
committed
fix(iostreams): wrap changelog teaser, strip changelog URLs, fix flaky agent test

schmitthub
and
claude
committed
fix(hostproxy): fail egress enforcement closed like Envoy

schmitthub
and
claude
committed
refactor(controlplane): relocate test mocks to mocks/ subpackages, harden Session fake

schmitthub
and
claude
committed
chore(golanglint): added draconian linter rules
schmitthub
committed
chore(golanglint): fixed schema
schmitthub
committed
chore(golanglint): fixed schema
schmitthub
committed
chore(golang-lint): removed autofixer
schmitthub
committed
chore(docs): stale docs
schmitthub
committed
chore(golang-lint): added stable config
schmitthub
committed
chore(hooks): added git checks
schmitthub
committed
chore(hooks): hardened checks to prevent pre-commit skip var bypass
schmitthub
committed
chore(lint): removed depguard from checks
schmitthub
committed

Commits on Jun 24, 2026