feat: proxy pre-agent gh CLI calls through DIFC gateway#2294

Merged

lpcox merged 19 commits intomainfrom

feat/proxy-pre-agent-gh-calls

Mar 22, 2026

Commits on Mar 22, 2026

fix: use -R flag on gh commands to bypass remote resolution

lpcox
and
Copilot
committed
fix: recognize /api/graphql path in proxy for GHES-style gh CLI

lpcox
and
Copilot
committed
debug: build local container for proxy to pick up /api/graphql fix

lpcox
and
Copilot
committed
fix: extract WASM guard from published image before local build

lpcox
and
Copilot
committed
fix: build WASM guard from source instead of extracting from image

lpcox
and
Copilot
committed
debug: log blocked GraphQL query body and dump proxy logs

lpcox
and
Copilot
committed
debug: add DEBUG=* to proxy container and fix log file path

lpcox
and
Copilot
committed
fix: passthrough GraphQL introspection queries (__type, __schema)

lpcox
and
Copilot
committed
fix: preserve original GraphQL response format in proxy DIFC pipeline

lpcox
and
Copilot
committed
fix: return valid empty GraphQL response when DIFC filters all items

lpcox
and
Copilot
committed
fix: graceful fallback when DIFC proxy filters gh CLI data

lpcox
and
Copilot
committed
chore: change min-integrity from merged to approved

lpcox
and
Copilot
committed
fix: add 'github-actions' (without [bot]) to trusted first-party bots

lpcox
and
Copilot
committed
fix: add 'app/github-actions' to trusted first-party bots

lpcox
and
Copilot
committed
chore: remove local container build, bump to mcpg v0.1.23

lpcox
and
Copilot
committed