Skip to content

feat: add API to serve proxy certificate#21391

Merged
ssncferreira merged 29 commits intomainfrom
dk/pub-cert-api
Dec 29, 2025
Merged

feat: add API to serve proxy certificate#21391
ssncferreira merged 29 commits intomainfrom
dk/pub-cert-api

Conversation

@dannykopping
Copy link
Contributor

@dannykopping dannykopping commented Dec 29, 2025 •
edited
Loading

@ssncferreira ssncferreira mentioned this pull request Dec 29, 2025
Merged
This was referenced Dec 29, 2025
Merged
Merged
Merged
@dannykopping Graphite App
Copy link
Contributor Author

dannykopping commented Dec 29, 2025 •
edited
Loading

This stack of pull requests is managed by Graphite. Learn more about stacking.

@dannykopping dannykopping mentioned this pull request Dec 29, 2025
Merged
ssncferreira and others added 23 commits December 29, 2025 11:03
@ssncferreira @dannykopping
feat: add core AI MITM proxy daemon
53c3f99
@ssncferreira @dannykopping
chore: address comments
7bd23d1
@ssncferreira @dannykopping
chore: rename aiproxyd to aibridgeproxyd
12b6925
@ssncferreira @dannykopping
chore: add missing aibridgeproxyd renames
428e63e
@ssncferreira @dannykopping
chore: address comments
8c8f64b
@ssncferreira @dannykopping
chore: add README
ff6308e
@ssncferreira @dannykopping
fix: use shared test CA to avoid parallel test race conditions
1134e49
@ssncferreira @dannykopping
feat: add proxy authorization to aibridgeproxyd
522322f
@ssncferreira @dannykopping
refactor: split CONNECT handling into port and auth middleware
88ab523
@ssncferreira @dannykopping
chore: update README
59d943b
@ssncferreira @dannykopping
fix: portMiddleware to distinguish between error and empty port
f989817
@ssncferreira @dannykopping
fix: downstack PR rebase
bf7d455
@ssncferreira @dannykopping
feat: route AI provider requests to aibridged
bd72a58
@ssncferreira @dannykopping
chore: address comments
ba3952b
@ssncferreira @dannykopping
chore: add TODO comment regarding selective MITM
f4ec26b
@ssncferreira @dannykopping
chore: use t.Cleanup instead of defer Close()
b501ffb
@ssncferreira @dannykopping
fix: downstack PR rebase
607eeec
@ssncferreira @dannykopping
feat: add certificate caching for AI Bridge Proxy
3f4a051
@ssncferreira @dannykopping
refactor: accept CertStore as option to improve testability
8fbdfed
@ssncferreira @dannykopping
refactor: use singleflight pattern for concurrent certificate generation
1201865
@ssncferreira @dannykopping
fix: downstack PR rebase
1b6ab44
@jakehwll @dannykopping
feat: extend biome.jsonc with "useConsistentCurlyBraces": "error" (…
d46f919 
…#21379)
@dannykopping
chore: remove experimental endpoints
fa54009 
Signed-off-by: Danny Kopping <danny@coder.com>
@dannykopping dannykopping force-pushed the dk/remove-experimental-endpoints branch from 5d9569a to fa54009 Compare December 29, 2025 09:04
@dannykopping
feat: add API to serve proxy certificate
93c1d44 
Signed-off-by: Danny Kopping <danny@coder.com>
@dannykopping dannykopping marked this pull request as ready for review December 29, 2025 09:35
ssncferreira
ssncferreira reviewed Dec 29, 2025
View reviewed changes
Copy link
Contributor

@ssncferreira ssncferreira left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, just a comment with a test where the cert file includes both the certificate and the private key (to guarantee that we never expose the private key)

@dannykopping
chore: test to validate auth middleware
99670f9 
Signed-off-by: Danny Kopping <danny@coder.com>
@dannykopping
chore: review comments
fba2023 
Signed-off-by: Danny Kopping <danny@coder.com>
ssncferreira
ssncferreira approved these changes Dec 29, 2025
View reviewed changes
Copy link
Contributor

@ssncferreira ssncferreira left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🌟

@dannykopping
chore: nit
4cddbd6 
Signed-off-by: Danny Kopping <danny@coder.com>
@dannykopping
fix: use shared CA to prevent races
22d055b 
Signed-off-by: Danny Kopping <danny@coder.com>
@ssncferreira Graphite App
Copy link
Contributor

ssncferreira commented Dec 29, 2025 •
edited
Loading

Merge activity

  • Dec 29, 3:31 PM UTC: A user started a stack merge that includes this pull request via Graphite.
  • Dec 29, 3:43 PM UTC: Graphite couldn't merge this pull request because a downstack PR feat: add proxy authorization to aibridgeproxyd #21342 failed to merge.
  • Dec 29, 3:56 PM UTC: A user started a stack merge that includes this pull request via Graphite.
  • Dec 29, 4:19 PM UTC: Graphite couldn't merge this PR because it had merge conflicts.

@ssncferreira ssncferreira changed the base branch from dk/remove-experimental-endpoints to graphite-base/21391 December 29, 2025 16:17
@ssncferreira ssncferreira changed the base branch from graphite-base/21391 to main December 29, 2025 16:17
@ssncferreira ssncferreira merged commit 733b6b7 into main Dec 29, 2025
26 checks passed
@ssncferreira ssncferreira deleted the dk/pub-cert-api branch December 29, 2025 18:00
@github-actions github-actions bot locked and limited conversation to collaborators Dec 29, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@ssncferreira ssncferreira ssncferreira approved these changes

Assignees

@dannykopping dannykopping

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

aibridge: expose certificate via API endpoint

3 participants

@dannykopping @ssncferreira @jakehwll