opensource/coder
3
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2026-09-24 15:04:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat: capture, persist, and strip Agent Firewall correlation headers in AI Bridge (#26529)

Browse Source 
Wire the Agent Firewall correlation headers
(`X-Coder-Agent-Firewall-Session-Id` and
`X-Coder-Agent-Firewall-Sequence-Number`) through the AI Bridge
interception processor so that each interception is linked to its
originating firewall session.

Closes https://linear.app/codercom/issue/AIGOV-259

> Generated by Coder Agents on behalf of @SasSwart

**Data flow:**
`request header` → `bridge.go` reads + strips → `InterceptionRecord` →
`translator.go` → proto `RecordInterceptionRequest` →
`aibridgedserver.go` → DB
This commit is contained in:
Sas Swart
2026-06-30 14:01:27 +02:00
committed by GitHub
parent 681d77154b
commit d179266cc7
8 changed files with 369 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files
coderd/aibridge/aibridge.go
+10
View File
@@ -20,6 +20,16 @@ const HeaderCoderToken = "X-Coder-AI-Governance-Token" //nolint:gosec // This is
// request forwarded to aibridged for cross-service log correlation.
const HeaderCoderRequestID = "X-Coder-AI-Governance-Request-Id"
// HeaderAgentFirewallSessionID is injected by Agent Firewall on requests
// routed through it. It carries the firewall session UUID so that AI
// Gateway can correlate interceptions with firewall audit events.
const HeaderAgentFirewallSessionID = "X-Coder-Agent-Firewall-Session-Id"
// HeaderAgentFirewallSequenceNumber is injected alongside the session ID
// by Agent Firewall. It carries a monotonically increasing sequence
// number that orders network requests within a single firewall session.
const HeaderAgentFirewallSequenceNumber = "X-Coder-Agent-Firewall-Sequence-Number"
// Copilot provider.
const (
ProviderCopilotBusiness = "copilot-business"