feat(agenstra): proxy-based web traffic filters

[me-marcel]

start a proxy sidecar container with every workspace that consumes a consolidated ruleset provided through the frontend, enforcing certain traffic flow and giving the option to explicitly allow and drop traffic to specified targets

[github-actions]

Knowledge graph blast radius

Diff: a6eb22a34b40dd5ec72fd59924793243e53fe0fd … HEAD
Changed files: 244 · Owning projects: 15 · Unmapped: 26

Touched projects

Project	Type	Files	Deps in	Deps out	Endpoints	Channels	Docs
agenstra-backend-agent-controller	app	10	1	62	0	0	8
agenstra-backend-agent-manager	app	10	1	57	0	0	11
agenstra-frontend-agent-console	app	2	1	39	0	0	10
agenstra-frontend-landingpage	app	2	0	27	0	0	1
agenstra-backend-feature-agent-controller	lib	76	1	12	223	40	187
agenstra-backend-feature-agent-manager	lib	65	2	5	80	33	86
agenstra-frontend-data-access-agent-console	lib	21	3	3	0	0	0
agenstra-frontend-feature-agent-config	lib	4	1	5	0	0	0
agenstra-frontend-feature-agent-console	lib	10	1	8	0	0	0
agenstra-frontend-feature-landingpage	lib	1	1	5	0	0	0
agenstra-shared-util-opencode-config	lib	11	4	2	0	0	0
decabill-backend-feature-billing-manager	lib	2	1	14	296	20	250
identity-backend-feature-auth	lib	1	1	1	0	0	0
shared-backend-util-queue	lib	2	4	0	0	0	0
shared-backend-util-webhook	lib	1	3	2	0	0	0

Shared dependencies

Dependencies linked to 2+ touched projects:

• shared-backend-util-otel
• shared-backend-util-dynamic-provider-registry
• shared-backend-util-http-context
• package:express
• package:rxjs
• package:socket.io-client
• sbom
• agenstra-frontend-util-configuration
• shared-shared-util-network-address
• agenstra-shared-util-opencode-mcp-servers
• shared-platform-authentication
• tool:ci
• …and 75 more

Docs to review

• docs/agenstra/README.md
• docs/agenstra/ai-agents/agent-client-protocol.md
• docs/agenstra/ai-agents/agents.md
• docs/agenstra/ai-agents/knowledge-graph.md
• docs/agenstra/api-reference/README.md
• docs/agenstra/applications/README.md
• docs/agenstra/applications/backend-agent-controller.md
• docs/agenstra/applications/backend-agent-manager.md
• docs/agenstra/applications/frontend-agent-console.md
• docs/agenstra/architecture/README.md
• docs/agenstra/architecture/components.md
• docs/agenstra/architecture/data-flow.md
• …and 73 more

Unmapped paths

• .github/workflows/pull-request-checks.yml
• .github/workflows/release.yml
• docs/agenstra/api-reference/README.md
• docs/agenstra/applications/backend-agent-controller.md
• docs/agenstra/applications/backend-agent-manager.md
• docs/agenstra/applications/frontend-agent-console.md
• docs/agenstra/architecture/components.md
• docs/agenstra/deployment/background-jobs.md
• docs/agenstra/deployment/environment-configuration.md
• docs/agenstra/deployment/system-requirements.md
• …and 16 more

Overview from nx run graph:impact.

[github-actions]

Nx coverage

Projects: 19 · Up: 7 · Down: 0

Project summary

Project	Statements	Branches	Functions	Lines	Δ statements
apps/agenstra/backend-agent-controller	77.77%	28.75%	38.46%	77.21%	+6.35%
libs/domains/agenstra/frontend/feature-agent-config	95.89%	86.88%	97.43%	96.35%	+3.36%
libs/domains/agenstra/backend/feature-agent-manager	74.23%	61.28%	74.62%	74.18%	+1.98%
libs/domains/agenstra/shared/util-opencode-config	83.29%	71.00%	89.62%	83.16%	+1.92%
libs/domains/agenstra/backend/feature-agent-controller	67.01%	48.15%	57.45%	67.13%	+0.71%
libs/domains/agenstra/frontend/data-access-agent-console	79.50%	52.19%	71.35%	79.74%	+0.25%
libs/domains/agenstra/frontend/feature-agent-console	60.37%	53.05%	63.88%	60.25%	+0.11%
apps/agenstra/backend-agent-manager	0.00%	0.00%	0.00%	0.00%	0.00%
apps/agenstra/frontend-agent-console	100.00%	100.00%	100.00%	100.00%	0.00%
apps/agenstra/frontend-landingpage	100.00%	100.00%	100.00%	100.00%	0.00%
apps/decabill/backend-billing-manager	25.46%	33.94%	10.52%	25.43%	0.00%
apps/decabill/frontend-billing-console	100.00%	100.00%	100.00%	100.00%	0.00%
libs/domains/agenstra/frontend/feature-landingpage	0.00%	0.00%	0.00%	0.00%	0.00%
libs/domains/decabill/backend/feature-billing-manager	79.24%	62.80%	67.39%	78.77%	0.00%
libs/domains/identity/backend/feature-auth	68.90%	49.11%	37.55%	67.77%	0.00%
libs/domains/shared/backend/feature-notifications	79.51%	64.42%	44.36%	79.17%	0.00%
libs/domains/shared/backend/feature-updates	65.93%	62.01%	55.17%	65.06%	0.00%
libs/domains/shared/backend/util-queue	97.60%	88.82%	100.00%	97.59%	0.00%
libs/domains/shared/backend/util-webhook	73.74%	61.17%	70.37%	73.86%	0.00%

Generated from Jest coverage-summary.json (head vs base when available).

[github-actions]

Nx tests

Projects: 21 · Passed projects: 21 · Failed projects: 0
Tests: 6397 passed · 0 failed · 6 pending

Project summary

Project	Result	Passed	Failed	Pending	Total
agenstra-backend-agent-controller	pass	12	0	0	12
agenstra-backend-agent-manager	pass	0	0	0	0
agenstra-backend-feature-agent-controller	pass	1016	0	0	1016
agenstra-backend-feature-agent-manager	pass	1306	0	6	1312
agenstra-frontend-agent-console	pass	1	0	0	1
agenstra-frontend-billing-console	pass	1	0	0	1
agenstra-frontend-data-access-agent-console	pass	1475	0	0	1475
agenstra-frontend-feature-agent-config	pass	15	0	0	15
agenstra-frontend-feature-agent-console	pass	258	0	0	258
agenstra-frontend-feature-landingpage	pass	0	0	0	0
agenstra-frontend-landingpage	pass	1	0	0	1
agenstra-shared-util-opencode-config	pass	119	0	0	119
decabill-backend-billing-manager	pass	17	0	0	17
decabill-backend-feature-billing-manager	pass	1899	0	0	1899
decabill-frontend-billing-console	pass	1	0	0	1
forepath-frontend-billing-console	pass	1	0	0	1
identity-backend-feature-auth	pass	123	0	0	123
shared-backend-feature-notifications	pass	57	0	0	57
shared-backend-feature-updates	pass	26	0	0	26
shared-backend-util-queue	pass	51	0	0	51
shared-backend-util-webhook	pass	18	0	0	18

Generated from per-project Jest summaries under test-results/.