feat: Publish a proxy-only image and support a remote upstream - #12

Merged

harshaneel merged 18 commits into

mainfrom

hg/proxy-only-image

Aug 5, 2026

Commits on Aug 4, 2026

docs: Spec the proxy-only image variant

harshaneel
and
claude
committed
e710838
docs: Add implementation plan for the proxy-only image

harshaneel
and
claude
committed
da4b1dc
feat: Add optional upstream auth header to the proxy
harshaneel
committed
8bc36e1
test: Cover upstream auth on every upstream route
harshaneel
committed
e6d33e4
test: Add coverage for all upstream-calling routes
harshaneel
committed
7e4bcb8
feat: Read upstream and auth header from the environment

harshaneel
and
claude
committed
1a9885c
feat: Add a proxy-only Dockerfile stage
harshaneel
committed
6257188
test: Exercise the built proxy image on all three protocols
harshaneel
committed
fe1c0ff
test: Assert per-protocol response shape in proxy image test
harshaneel
committed
2adc767
test: Compress the expected-key comment to one line
harshaneel
committed
6ed2c2a
ci: Publish the proxy image variant
harshaneel
committed
1db880d
docs: Document the proxy tag and its security profile
harshaneel
committed
930892d
docs: Scope proxy-inapplicable claims in Motivation and Limitations
harshaneel
committed
c126b9b
fix: Withhold the upstream credential from redirect targets

harshaneel
and
claude
committed
d28e31d
refactor: Call the shared upstream auth header predicate from main

harshaneel
and
claude
committed
7f8f0af
test: Cover PDF rendering in the proxy image, and fix doc findings

harshaneel
and
claude
committed
96a098a
docs: Correct the proxy build tag note and record the pin's limit

harshaneel
and
claude
committed
54cd22e

Commits on Aug 5, 2026

chore: Keep docs out of the repo

harshaneel
and
claude
committed
db23611