Container secrets: MCP relay, egress proxy with placeholders, SSH sessions, Codex login broker (P1–P4) - #113

Merged

makeitfutureDev merged 37 commits into

betafrom

feat/engine-auth-broker

Sep 26, 2026

Commits on Sep 26, 2026

feat: sign relayed remote MCP names and hold their headers daemon-side

tbiyss
and
claude
committed
8c2f58d
feat: relay header-bearing remote MCPs over the daemon socket

tbiyss
and
claude
committed
f79af57
feat: give containerized Claude runs relayed remote MCPs, not tokens

tbiyss
and
claude
committed
6792e64
feat: relay Codex's remote MCPs in containers; bundle holds only the capability

tbiyss
and
claude
committed
806bf96
feat: SSH sessions get relayed remote MCPs and a capability-only Codex bundle

tbiyss
and
claude
committed
294b58c
chore: bump the image spec to 1.6.0 for the remote-mcp bridge contract

tbiyss
and
claude
committed
63d069b
feat(egress): add placeholders, grant rules and the response scrubber

tbiyss
and
claude
committed
e8ed11b
feat(egress): add the destination policy with pinned, SSRF-checked addresses

tbiyss
and
claude
committed
f73c6bd
feat(egress): issue X.509 certificates and keep a per-deployment egress CA

tbiyss
and
claude
committed
1a9f8cb
docs: record the remote MCP relay in features, test plan and operations

tbiyss
and
claude
committed
9ee7c37
docs: name the remote MCP relay modules in the contributor contract

tbiyss
and
claude
committed
77c403c
fix: refuse an unauthorized remote-mcp hello with the fixed sentence only

tbiyss
and
claude
committed
7b0509a
feat(egress): add the TLS-terminating egress proxy core

tbiyss
and
claude
committed
e44fb5a
merge: stack the remote MCP relay (P1) under the egress proxy branch

tbiyss
and
claude
committed
583ea19
fix: route containerized Codex Composio SDK sessions through the composio-sdk service

tbiyss
and
claude
committed
c816747
fix: release relay grants with their users and drop only a bad server

tbiyss
and
claude
committed
45e70af
fix: harden remote-mcp hellos: early hang-up, dial cap, crafted fields

tbiyss
and
claude
committed
6a26d5b
fix: never forward upstream transport error text into a container

tbiyss
and
claude
committed
e5e3ed9
docs: record relay grant lifetimes, the dial cap and the new refusals

tbiyss
and
claude
committed
25362f8
feat(egress): add placeholder grants, liveness and the secret rule catalog

tbiyss
and
claude
committed
ff61180
feat: run channel containers with --network none behind the egress proxy

tbiyss
and
claude
committed
16e427d
docs: record the egress proxy, placeholders and --network none

tbiyss
and
claude
committed
068146f
merge: pick up the remote MCP relay review fixes (grant release, dial cap, hardened hellos)

tbiyss
and
claude
committed
2de6a06
feat(egress): add the cg-egress-connect SSH ProxyCommand helper

tbiyss
and
claude
committed
cd02b98
feat(ssh): run SSH and VS Code sessions on placeholders

tbiyss
and
claude
committed
fcf97fe
docs: record SSH and VS Code sessions on placeholders

tbiyss
and
claude
committed
b1ff99a
fix(egress): pin every request to the approved host and close scrub gaps

tbiyss
and
claude
committed
b21a985
fix(egress): pause personal secrets for other authors and restore listeners at boot

tbiyss
and
claude
committed
f045b11
docs: record the egress review fixes and the remaining raw engine keys

tbiyss
and
claude
committed
9ef838d
merge: pick up the egress review fixes under the SSH placeholder branch

tbiyss
and
claude
committed
86f5abf
feat(codex): relay the Codex login into containers behind the egress proxy

tbiyss
and
claude
committed
a801f0f
feat(egress): withhold unruled secrets by default on new installs

tbiyss
and
claude
committed
41e6fbc
chore: retire remote-secret-bridge and the mcp-remote runtime helper

tbiyss
and
claude
committed
f27a61e
feat(static-check): refuse secret-resolver values written under artifact dirs

tbiyss
and
claude
committed
a83c513
docs: record the Codex login relay, strict secrets and the static check

tbiyss
and
claude
committed
b41275f
merge: pick up the egress review fixes under the engine auth broker branch

tbiyss
and
claude
committed
14427c1
fix(egress): keep ab.chatgpt.com and oaiusercontent downloads reachable for Codex with the network off

tbiyss
and
claude
committed
f32b0eb