feat: add API proxy sidecar for secure LLM credential management#751

Merged

Mossaka merged 17 commits intomainfrom

claude/create-sidecar-container-envoy

Feb 13, 2026

Commits on Feb 12, 2026

Initial plan
Claude
committed
feat: add envoy api proxy sidecar for credential management

Claude
and
lpcox
committed
docs: add comprehensive documentation for api proxy sidecar

Claude
and
lpcox
committed
docs: update main README with API proxy sidecar feature

Claude
and
lpcox
committed
Apply suggestion from @Copilot

lpcox
and
Copilot
authored
Apply suggestion from @Copilot

lpcox
and
Copilot
authored
Apply suggestion from @Copilot

lpcox
and
Copilot
authored
fix: implement all pr review suggestions

authored and
Claude
committed
feat: replace Envoy with Node.js proxy that routes through Squid

Claude
and
lpcox
committed
Potential fix for code scanning alert no. 613: Clear-text logging of sensitive information

lpcox
and
github-advanced-security[bot]
authored
Potential fix for code scanning alert no. 615: Unused variable, import, function or class

lpcox
and
github-advanced-security[bot]
authored
Potential fix for code scanning alert no. 616: Unused variable, import, function or class

lpcox
and
github-advanced-security[bot]
authored
fix: remove API proxy firewall exemption for Squid routing

Claude
and
lpcox
committed
Merge origin/main into claude/create-sidecar-container-envoy

Mossaka
and
claude
committed
test: extract and test API proxy validation for coverage

Mossaka
and
claude
committed
fix: redact API keys in debug config logging

Mossaka
and
claude
committed
fix: prevent API keys from flowing to logger (CodeQL)
Mossaka
committed