Skip to content

feat: service config + host routing (Plan 6)#207

Merged
erans merged 11 commits intomainfrom
feature/plan6-service-config-routing
Apr 10, 2026
Merged

feat: service config + host routing (Plan 6)#207
erans merged 11 commits intomainfrom
feature/plan6-service-config-routing

Conversation

@erans
Copy link
Copy Markdown
Collaborator

@erans erans commented Apr 10, 2026

Summary

  • Parse providers: and services: from policy YAML with structural validation
  • ServiceMatcher resolves HTTP Host headers to service names (literal + *.suffix wildcards)
  • HeaderInjectionHook injects real credentials into outbound request headers per service
  • Extended CredsSubHook to substitute fakes in headers, URL query, and URL path (not just body)
  • LeakGuardHook now service-aware: allows matched service's own fakes, blocks cross-service leaks and unmatched hosts
  • Proxy ServeHTTP wires matcher into hook dispatch for per-service hook execution
  • Resolver bridges policy YAML types to existing secrets infrastructure (provider Registry, BootstrapCredentials)
  • End-to-end integration test covering full credential flow

Test Plan

  • go test ./... passes (87 packages, 0 failures)
  • GOOS=windows go build ./... cross-compiles clean
  • Backward compatible — nil, nil policy args preserve existing behavior
  • Integration test validates: bootstrap → matcher → substitution → header injection → scrubbing → leak guard

🤖 Generated with Claude Code

erans and others added 11 commits April 9, 2026 17:57
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…ching

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…dispatch

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
… config

Wire policy YAML providers/services into StartLLMProxy via resolver
layer that bridges YAML declarations to typed ProviderConfig values,
ServicePatterns, and InjectHeaderConfigs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…config

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@erans erans merged commit 3bd0f5b into main Apr 10, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant