Add the credential-injecting proxy for Claude and Codex (#411)#417

Open

hbrodin wants to merge 16 commits into

mainfrom

issue-411-proxy-jail

Commits on Jul 22, 2026

Add host-side credential-injecting proxy for Anthropic (#411)

hbrodin
and
claude
committed
Add `coop proxy setup` credential wizard (#411)

hbrodin
and
claude
committed
Run the credential proxy on both backends via loopback + `ssh -R` (#411)

hbrodin
and
claude
committed
Fail closed when the proxy reverse tunnel doesn't establish (#411)
hbrodin
committed
Add OpenAI (Codex) support and per-VM overrides to the credential proxy

hbrodin
and
claude
committed
Document Codex proxy support and per-VM overrides

hbrodin
and
claude
committed
Add the /v1 prefix to the Codex proxy base_url

hbrodin
and
claude
committed
Add proxy integration phase and fix post_start token in proxy mode

hbrodin
and
claude
committed
Build and ship coop-proxy for the integration suite

hbrodin
and
claude
committed
Build coop-proxy natively on the remote when cross-build is unavailable

hbrodin
and
claude
committed
Jail the host-side coop-proxy with Landlock and Seatbelt

hbrodin
and
claude
committed
Simplify proxy_state resolution and drop unused hyper-util feature

hbrodin
and
claude
committed
Close credential-exposure gaps and add missing proxy coverage

hbrodin
and
claude
committed
Document coop proxy and fix design-doc drift

hbrodin
and
claude
committed
Address self-review findings

hbrodin
and
claude
committed
Fix exec-transition race in firecracker process-detection tests

hbrodin
and
claude
committed