nyrn
/
openclaw
mirror of https://github.com/openclaw/openclaw.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
openclaw/src/gateway
History
Robin Waslander ebed3bbde1
fix(gateway): enforce browser origin check regardless of proxy headers 
In trusted-proxy mode, enforceOriginCheckForAnyClient was set to false
whenever proxy headers were present. This allowed browser-originated
WebSocket connections from untrusted origins to bypass origin validation
entirely, as the check only ran for control-ui and webchat client types.

An attacker serving a page from an untrusted origin could connect through
a trusted reverse proxy, inherit proxy-injected identity, and obtain
operator.admin access via the sharedAuthOk / roleCanSkipDeviceIdentity
path without any origin restriction.

Remove the hasProxyHeaders exemption so origin validation runs for all
browser-originated connections regardless of how the request arrived.

Fixes GHSA-5wcw-8jjv-m286
 		2026-03-12 01:16:52 +01:00
..
protocol fix: harden subagent control boundaries 2026-03-11 01:44:38 +00:00
server fix(gateway): enforce browser origin check regardless of proxy headers 2026-03-12 01:16:52 +01:00
server-methods Gateway/Dashboard: surface config validation issues (#42664) 2026-03-11 17:32:41 -04:00
agent-event-assistant-text.ts
…
agent-prompt.test.ts fix: harden queue retry debounce and add regression tests 2026-02-24 03:52:49 +00:00
agent-prompt.ts fix(gateway): safely extract text from content arrays in prompt builder (#24946) 2026-02-24 03:33:37 +00:00
android-node.capabilities.live.test.ts fix(android): remove mic and screen foreground services 2026-03-08 16:25:49 +05:30
assistant-identity.test.ts
…
assistant-identity.ts refactor(shared): centralize assistant identity and usage timeseries types 2026-03-02 14:36:41 +00:00
auth-config-utils.ts refactor: unify gateway SecretRef auth resolution paths 2026-03-07 23:27:50 +00:00
auth-install-policy.ts Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094) 2026-03-05 12:53:56 -06:00
auth-mode-policy.test.ts Secrets: add inline allowlist review set (#38314) 2026-03-06 19:35:26 -05:00
auth-mode-policy.ts Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094) 2026-03-05 12:53:56 -06:00
auth-rate-limit.test.ts fix(security): normalize hook auth rate-limit client keys 2026-02-22 08:40:49 +01:00
auth-rate-limit.ts refactor(security): unify hook rate-limit and hook module loading 2026-02-22 08:57:01 +01:00
auth.test.ts test(regression): cover recent landed fix paths 2026-03-07 23:07:16 +00:00
auth.ts Gateway Auth: allowlist bootstrap password references 2026-03-07 16:27:00 -08:00
boot.test.ts follow-up: align ingress, atomic paths, and channel tests with credential semantics (#33733) 2026-03-03 20:29:46 -06:00
boot.ts fix(gateway): enforce owner boundary for agent runs 2026-03-02 00:27:44 +00:00
call.test.ts Gateway: fail closed unresolved local auth SecretRefs (#42672) 2026-03-10 21:41:56 -05:00
call.ts gateway: harden shared auth resolution across systemd, discord, and node host 2026-03-07 18:28:32 -06:00
canvas-capability.ts fix(gateway): harden canvas auth with session capabilities 2026-02-19 15:51:22 +01:00
channel-health-monitor.test.ts fix(gateway): stop stale-socket restarts before first event (#38643) 2026-03-07 00:58:08 -06:00
channel-health-monitor.ts fix(gateway): skip stale-socket restarts for Telegram polling (openclaw#38405) 2026-03-07 00:20:34 -06:00
channel-health-policy.test.ts fix: restore Telegram webhook-mode health after restarts 2026-03-08 02:27:18 +00:00
channel-health-policy.ts fix: restore Telegram webhook-mode health after restarts 2026-03-08 02:27:18 +00:00
channel-status-patches.test.ts fix(gateway): stop stale-socket restarts before first event (#38643) 2026-03-07 00:58:08 -06:00
channel-status-patches.ts fix(gateway): stop stale-socket restarts before first event (#38643) 2026-03-07 00:58:08 -06:00
chat-abort.test.ts Gateway tests: cover exact do not do that stop matching 2026-02-24 18:50:53 -05:00
chat-abort.ts Auto-reply: normalize stop matching and add multilingual triggers (#25103) 2026-02-24 01:07:25 -05:00
chat-attachments.test.ts test(gateway): extract shared parse warning helper 2026-02-21 23:32:32 +00:00
chat-attachments.ts refactor(channels): dedupe transport and gateway test scaffolds 2026-02-16 14:59:31 +00:00
chat-sanitize.test.ts fix(chat): preserve sender labels in dashboard history 2026-03-08 09:17:02 +05:30
chat-sanitize.ts fix(chat): preserve sender labels in dashboard history 2026-03-08 09:17:02 +05:30
client-callsites.guard.test.ts gateway: harden shared auth resolution across systemd, discord, and node host 2026-03-07 18:28:32 -06:00
client.test.ts fix(gateway): harden token fallback/reconnect behavior and docs (#42507) 2026-03-10 17:05:57 -05:00
client.ts fix(gateway): harden token fallback/reconnect behavior and docs (#42507) 2026-03-10 17:05:57 -05:00
client.watchdog.test.ts CI: restore main detect-secrets scan (#38438) 2026-03-07 10:06:35 -08:00
config-reload-plan.ts fix(gateway): synthesize lifecycle robustness for restart and startup probes (#33831) 2026-03-03 21:31:12 -06:00
config-reload.test.ts fix(gateway): synthesize lifecycle robustness for restart and startup probes (#33831) 2026-03-03 21:31:12 -06:00
config-reload.ts feature(context): extend plugin system to support custom context management (#22201) 2026-03-06 05:31:59 -08:00
connection-auth.test.ts Gateway: fail closed unresolved local auth SecretRefs (#42672) 2026-03-10 21:41:56 -05:00
connection-auth.ts gateway: harden shared auth resolution across systemd, discord, and node host 2026-03-07 18:28:32 -06:00
control-plane-audit.ts fix: harden gateway control-plane restart protections 2026-02-19 14:30:15 +01:00
control-plane-rate-limit.ts fix(security): harden gateway command/audit guardrails 2026-02-22 08:45:48 +01:00
control-ui-contract.ts fix(gateway): pass actual version to Control UI client instead of dev (#35230) 2026-03-05 00:01:34 -06:00
control-ui-csp.test.ts fix(gateway): allow required Google Fonts origins in Control UI CSP (#29279) 2026-02-27 23:58:51 -08:00
control-ui-csp.ts fix(gateway): allow required Google Fonts origins in Control UI CSP (#29279) 2026-02-27 23:58:51 -08:00
control-ui-http-utils.ts fix(gateway): let non-GET requests fall through controlUi routing when basePath is set 2026-03-03 00:11:13 +00:00
control-ui-routing.test.ts fix(gateway): let non-GET requests fall through controlUi routing when basePath is set 2026-03-03 00:11:13 +00:00
control-ui-routing.ts fix(gateway): keep probe routes reachable with root-mounted control ui (#38199) 2026-03-06 12:13:20 -05:00
control-ui-shared.ts fix(security): harden avatar validation and size limits 2026-02-22 08:35:32 +01:00
control-ui.auto-root.http.test.ts gateway: fix global Control UI 404s for symlinked wrappers and bundled package roots (#40385) 2026-03-09 01:50:42 +01:00
control-ui.http.test.ts gateway: fix global Control UI 404s for symlinked wrappers and bundled package roots (#40385) 2026-03-09 01:50:42 +01:00
control-ui.ts gateway: fix global Control UI 404s for symlinked wrappers and bundled package roots (#40385) 2026-03-09 01:50:42 +01:00
credential-planner.ts Gateway: fail closed unresolved local auth SecretRefs (#42672) 2026-03-10 21:41:56 -05:00
credential-precedence.parity.test.ts Gateway Credentials: allowlist precedence fixtures 2026-03-07 16:27:00 -08:00
credentials.test.ts Gateway: fail closed unresolved local auth SecretRefs (#42672) 2026-03-10 21:41:56 -05:00
credentials.ts refactor: unify gateway credential planning 2026-03-11 01:37:25 +00:00
device-auth.test.ts refactor(gateway): unify v3 auth payload builders and vectors 2026-02-26 15:08:50 +01:00
device-auth.ts refactor(gateway): unify metadata canonicalization + platform rules 2026-03-02 00:26:36 +00:00
device-metadata-normalization.ts refactor(gateway): unify metadata canonicalization + platform rules 2026-03-02 00:26:36 +00:00
events.ts refactor: unify restart gating and update availability sync 2026-02-19 10:00:41 +01:00
exec-approval-manager.ts Telegram: exec approvals for OpenCode/Codex (#37233) 2026-03-09 23:04:35 -04:00
gateway-cli-backend.live.test.ts fix: code/cli acpx reliability 20260304 (#34020) 2026-03-04 01:15:28 -05:00
gateway-config-prompts.shared.ts refactor(gateway): dedupe origin seeding and plugin route auth matching 2026-03-02 00:42:22 +00:00
gateway-connection.test-mocks.ts fix(gateway): annotate connection test mocks 2026-02-23 11:47:27 +05:30
gateway-misc.test.ts fix(gateway): harden node metadata policy classification 2026-03-02 00:15:34 +00:00
gateway-models.profiles.live.test.ts refactor(core): extract shared dedup helpers 2026-03-07 10:41:05 +00:00
gateway.test.ts test: speed up heavy suites with shared fixtures 2026-03-02 21:58:35 +00:00
hooks-mapping.test.ts test: dedupe gateway browser discord and channel coverage 2026-02-22 17:11:54 +00:00
hooks-mapping.ts fix(security): block hook transform symlink escapes 2026-02-22 10:18:05 +01:00
hooks-test-helpers.ts refactor(test): extract shared gateway hook and vitest scoped config helpers 2026-03-02 14:36:41 +00:00
hooks.test.ts fix(core): unify session-key normalization and plugin boundary checks 2026-02-26 12:41:23 +00:00
hooks.ts fix(core): unify session-key normalization and plugin boundary checks 2026-02-26 12:41:23 +00:00
http-auth-helpers.test.ts refactor(test): dedupe gateway and web scaffolding 2026-02-22 20:04:51 +00:00
http-auth-helpers.ts refactor(gateway): harden proxy client ip resolution 2026-02-21 13:36:23 +01:00
http-common.test.ts feat(gateway): add Permissions-Policy header to default security headers (#30186) 2026-03-03 16:25:39 -08:00
http-common.ts feat(gateway): add Permissions-Policy header to default security headers (#30186) 2026-03-03 16:25:39 -08:00
http-endpoint-helpers.test.ts
…
http-endpoint-helpers.ts refactor(gateway): harden proxy client ip resolution 2026-02-21 13:36:23 +01:00
http-utils.request-context.test.ts refactor: extract shared sandbox and gateway plumbing 2026-03-02 23:16:47 +00:00
http-utils.ts refactor: extract shared sandbox and gateway plumbing 2026-03-02 23:16:47 +00:00
input-allowlist.ts refactor(gateway): share input allowlist normalizer 2026-03-07 17:05:23 +00:00
live-image-probe.ts
…
live-tool-probe-utils.test.ts refactor(core): extract shared dedup helpers 2026-03-07 10:41:05 +00:00
live-tool-probe-utils.ts refactor(core): extract shared dedup helpers 2026-03-07 10:41:05 +00:00
method-scopes.test.ts Gateway: add pending node work primitives (#41409) 2026-03-09 21:42:57 +01:00
method-scopes.ts Gateway: add pending node work primitives (#41409) 2026-03-09 21:42:57 +01:00
net.test.ts fix(gateway): land #39064 from @Narcooo 2026-03-07 18:52:42 +00:00
net.ts fix(gateway): land #39064 from @Narcooo 2026-03-07 18:52:42 +00:00
node-command-policy.ts refactor(gateway): unify metadata canonicalization + platform rules 2026-03-02 00:26:36 +00:00
node-invoke-sanitize.ts fix(gateway): bind node exec approvals to nodeId 2026-02-24 03:05:58 +00:00
node-invoke-system-run-approval-errors.ts refactor(gateway): centralize system.run approval context and errors 2026-02-26 22:01:16 +01:00
node-invoke-system-run-approval-match.test.ts refactor(gateway): dedupe auth and discord monitor suites 2026-03-02 21:31:36 +00:00
node-invoke-system-run-approval-match.ts refactor!: remove versioned system-run approval contract 2026-03-02 01:12:53 +00:00
node-invoke-system-run-approval.test.ts refactor(security): simplify system.run approval model 2026-03-11 01:43:06 +00:00
node-invoke-system-run-approval.ts refactor(security): simplify system.run approval model 2026-03-11 01:43:06 +00:00
node-pending-work.test.ts Gateway: tighten node pending drain semantics (#41429) 2026-03-09 21:56:00 +01:00
node-pending-work.ts Gateway: tighten node pending drain semantics (#41429) 2026-03-09 21:56:00 +01:00
node-registry.ts
…
open-responses.schema.ts Gateway: normalize HEIC input_image sources (#38122) 2026-03-06 11:19:36 -05:00
openai-http.image-budget.test.ts Gateway: follow up HEIC input image handling (#38146) 2026-03-06 11:53:59 -05:00
openai-http.message-channel.test.ts refactor(core): extract shared dedup helpers 2026-03-07 10:41:05 +00:00
openai-http.test.ts refactor(gateway): dedupe invalid image request assertions 2026-03-07 17:58:31 +00:00
openai-http.ts refactor(gateway): share input allowlist normalizer 2026-03-07 17:05:23 +00:00
openresponses-http.test.ts refactor(tests): dedupe openresponses http fixtures 2026-03-03 02:53:13 +00:00
openresponses-http.ts refactor(gateway): share input allowlist normalizer 2026-03-07 17:05:23 +00:00
openresponses-parity.test.ts Gateway: normalize HEIC input_image sources (#38122) 2026-03-06 11:19:36 -05:00
openresponses-prompt.ts test: optimize redundant suites for faster runtime 2026-02-23 13:57:34 +00:00
operator-approvals-client.ts refactor: share approval gateway client setup 2026-03-10 22:18:04 +00:00
origin-check.test.ts fix(gateway): require local client for loopback origin fallback 2026-03-02 16:37:45 +00:00
origin-check.ts fix(gateway): require local client for loopback origin fallback 2026-03-02 16:37:45 +00:00
probe-auth.test.ts fix: fail closed for unresolved local gateway auth refs 2026-03-11 01:14:06 +00:00
probe-auth.ts refactor: unify gateway credential planning 2026-03-11 01:37:25 +00:00
probe.test.ts Gateway: align pairing scope checks for read access 2026-02-20 05:12:05 +00:00
probe.ts Gateway: align pairing scope checks for read access 2026-02-20 05:12:05 +00:00
reconnect-gating.test.ts fix(gateway): harden token fallback/reconnect behavior and docs (#42507) 2026-03-10 17:05:57 -05:00
resolve-configured-secret-input-string.test.ts refactor: unify gateway SecretRef auth resolution paths 2026-03-07 23:27:50 +00:00
resolve-configured-secret-input-string.ts Gateway Secrets: allowlist unresolved secret ref label 2026-03-07 16:27:00 -08:00
role-policy.test.ts Gateway: add pending node work primitives (#41409) 2026-03-09 21:42:57 +01:00
role-policy.ts refactor(gateway): extract connect and role policy logic 2026-02-21 19:47:22 +01:00
security-path.test.ts fix(gateway): fail closed plugin auth path canonicalization 2026-03-02 15:55:32 +00:00
security-path.ts fix(gateway): fail closed plugin auth path canonicalization 2026-03-02 15:55:32 +00:00
server-broadcast.ts style: align formatting with oxfmt 0.33 2026-02-18 01:34:35 +00:00
server-browser.ts fix(gateway): start browser HTTP control server module 2026-02-24 04:06:03 +00:00
server-channels.test.ts fix: add channelRuntime regression coverage (#25462) (thanks @guxiaobo) 2026-03-03 01:34:50 +00:00
server-channels.ts feat(gateway): add channel-backed readiness probes (#38285) 2026-03-06 15:15:23 -05:00
server-chat.agent-events.test.ts fix(gateway): flush chat delta before tool-start events (#39128) 2026-03-07 19:46:04 +00:00
server-chat.ts fix(gateway): flush chat delta before tool-start events (#39128) 2026-03-07 19:46:04 +00:00
server-close.ts fix(media): retain inbound media with recursive cleanup TTL (#38292) 2026-03-06 22:06:09 -05:00
server-constants.ts fix(canvas): port remaining iOS branch stability fixes (#18228) 2026-02-16 16:42:28 +00:00
server-cron.test.ts Cron: preserve session scope for main-target reminders 2026-02-28 14:53:19 -08:00
server-cron.ts feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580) 2026-03-03 02:58:20 +00:00
server-discovery-runtime.ts
…
server-discovery.test.ts test(core): continue mock reset reductions in auth, gateway, npm install 2026-02-22 08:28:50 +00:00
server-discovery.ts
…
server-http.hooks-request-timeout.test.ts refactor(test): extract shared gateway hook and vitest scoped config helpers 2026-03-02 14:36:41 +00:00
server-http.probe.test.ts feat(gateway): add channel-backed readiness probes (#38285) 2026-03-06 15:15:23 -05:00
server-http.test-harness.ts feat(gateway): add channel-backed readiness probes (#38285) 2026-03-06 15:15:23 -05:00
server-http.ts fix(gateway): harden plugin HTTP route auth 2026-03-07 19:55:06 +00:00
server-lanes.ts style: align formatting with oxfmt 0.33 2026-02-18 01:34:35 +00:00
server-maintenance.test.ts refactor(gateway): dedupe maintenance timer test setup 2026-03-07 17:58:31 +00:00
server-maintenance.ts fix(media): retain inbound media with recursive cleanup TTL (#38292) 2026-03-06 22:06:09 -05:00
server-methods-list.ts Gateway: add pending node work primitives (#41409) 2026-03-09 21:42:57 +01:00
server-methods.control-plane-rate-limit.test.ts refactor(test): dedupe gateway and web scaffolding 2026-02-22 20:04:51 +00:00
server-methods.ts fix(gateway): propagate real gateway client into plugin subagent runtime 2026-03-11 14:17:01 +01:00
server-mobile-nodes.ts
…
server-model-catalog.ts
…
server-node-events-types.ts
…
server-node-events.test.ts Telegram: exec approvals for OpenCode/Codex (#37233) 2026-03-09 23:04:35 -04:00
server-node-events.ts Telegram: exec approvals for OpenCode/Codex (#37233) 2026-03-09 23:04:35 -04:00
server-node-subscriptions.ts
…
server-plugins.test.ts feature(context): extend plugin system to support custom context management (#22201) 2026-03-06 05:31:59 -08:00
server-plugins.ts fix(gateway): propagate real gateway client into plugin subagent runtime 2026-03-11 14:17:01 +01:00
server-reload-handlers.ts fix: align gateway and zalouser typing imports 2026-03-02 22:29:18 +00:00
server-restart-deferral.test.ts perf(test): cut gateway unit suite overhead 2026-02-16 00:18:26 +00:00
server-restart-sentinel.test.ts refactor: unify outbound session context wiring 2026-02-26 21:03:28 +01:00
server-restart-sentinel.ts refactor: unify outbound session context wiring 2026-02-26 21:03:28 +01:00
server-runtime-config.test.ts feat(gateway)!: require explicit non-loopback control-ui origins 2026-02-24 01:57:11 +00:00
server-runtime-config.ts fix(gateway): explain provider-object password bootstrap errors (#39230, thanks @ademczuk) 2026-03-07 22:44:44 +00:00
server-runtime-state.ts feat(gateway): add channel-backed readiness probes (#38285) 2026-03-06 15:15:23 -05:00
server-session-key.ts
…
server-shared.ts
…
server-startup-log.test.ts fix(gateway): unify listen startup log across bind hosts 2026-02-22 13:17:25 +01:00
server-startup-log.ts fix(gateway): unify listen startup log across bind hosts 2026-02-22 13:17:25 +01:00
server-startup-memory.test.ts refactor: deduplicate shared helpers and test setup 2026-02-23 20:40:44 +00:00
server-startup-memory.ts Memory/QMD: harden multi-collection search and embed scheduling 2026-02-20 19:41:51 -08:00
server-startup.ts feat: ACP thread-bound agents (#23580) 2026-02-26 11:00:09 +01:00
server-tailscale.ts
…
server-utils.ts
…
server-wizard-sessions.ts
…
server-ws-runtime.ts refactor(shared): dedupe protocol schema typing and session/media helpers 2026-03-02 19:57:33 +00:00
server.agent.gateway-server-agent-a.test.ts test(gateway): speed up slow e2e test setup 2026-02-24 00:59:52 +00:00
server.agent.gateway-server-agent-b.test.ts fix(gateway): split conversation reset from admin reset 2026-03-11 02:50:44 +00:00
server.agent.gateway-server-agent.mocks.ts feature(context): extend plugin system to support custom context management (#22201) 2026-03-06 05:31:59 -08:00
server.auth.browser-hardening.test.ts fix(gateway): enforce browser origin check regardless of proxy headers 2026-03-12 01:16:52 +01:00
server.auth.compat-baseline.test.ts fix(gateway): harden token fallback/reconnect behavior and docs (#42507) 2026-03-10 17:05:57 -05:00
server.auth.control-ui.suite.ts fix(gateway): harden token fallback/reconnect behavior and docs (#42507) 2026-03-10 17:05:57 -05:00
server.auth.control-ui.test.ts refactor(security): split gateway auth suites and share safe write path checks 2026-03-02 18:07:03 +00:00
server.auth.default-token.suite.ts fix: resolve live config paths in status and gateway metadata (#39952) 2026-03-08 09:59:32 -05:00
server.auth.default-token.test.ts refactor(security): split gateway auth suites and share safe write path checks 2026-03-02 18:07:03 +00:00
server.auth.modes.suite.ts Secrets: add inline allowlist review set (#38314) 2026-03-06 19:35:26 -05:00
server.auth.modes.test.ts refactor(security): split gateway auth suites and share safe write path checks 2026-03-02 18:07:03 +00:00
server.auth.shared.ts refactor: dedupe gateway config and infra flows 2026-03-03 00:15:14 +00:00
server.canvas-auth.test.ts refactor(test): dedupe gateway and web scaffolding 2026-02-22 20:04:51 +00:00
server.channels.test.ts refactor(test): dedupe gateway and web scaffolding 2026-02-22 20:04:51 +00:00
server.chat.gateway-server-chat-b.test.ts Revert "feat(ui): add chat infrastructure modules (slice 1 of dashboard-v2)" 2026-03-09 18:47:44 -05:00
server.chat.gateway-server-chat.test.ts refactor(gateway): dedupe blocked chat reply mock setup 2026-03-07 17:58:31 +00:00
server.config-apply.test.ts test: reclassify gateway local suites from e2e 2026-02-22 11:48:46 +00:00
server.config-patch.test.ts Gateway/Dashboard: surface config validation issues (#42664) 2026-03-11 17:32:41 -04:00
server.control-ui-root.test.ts gateway: fix global Control UI 404s for symlinked wrappers and bundled package roots (#40385) 2026-03-09 01:50:42 +01:00
server.cron.test.ts Cron: enforce cron-owned delivery contract (#40998) 2026-03-09 20:12:37 +01:00
server.device-token-rotate-authz.test.ts fix(gateway): enforce caller-scope subsetting in device.token.rotate 2026-03-11 14:16:59 +01:00
server.e2e-registry-helpers.ts refactor(channels): dedupe transport and gateway test scaffolds 2026-02-16 14:59:31 +00:00
server.e2e-ws-harness.ts test: reclassify gateway local suites from e2e 2026-02-22 11:48:46 +00:00
server.health.test.ts test(gateway): speed up slow e2e test setup 2026-02-24 00:59:52 +00:00
server.hooks.test.ts Cron: enforce cron-owned delivery contract (#40998) 2026-03-09 20:12:37 +01:00
server.impl.ts gateway: fix global Control UI 404s for symlinked wrappers and bundled package roots (#40385) 2026-03-09 01:50:42 +01:00
server.ios-client-id.test.ts test(gateway): speed up contract and polling suites 2026-02-24 00:31:58 +00:00
server.legacy-migration.test.ts refactor(gateway): dedupe legacy migration validation assertions 2026-03-07 17:58:31 +00:00
server.models-voicewake-misc.test.ts refactor(gateway): dedupe auth and discord monitor suites 2026-03-02 21:31:36 +00:00
server.node-invoke-approval-bypass.test.ts refactor!: remove versioned system-run approval contract 2026-03-02 01:12:53 +00:00
server.plugin-http-auth.test.ts refactor(gateway): dedupe probe route assertion loops 2026-03-07 17:58:31 +00:00
server.reload.test.ts Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370) 2026-03-10 13:45:37 -05:00
server.roles-allowlist-update.test.ts refactor(gateway): unify metadata canonicalization + platform rules 2026-03-02 00:26:36 +00:00
server.sessions-send.test.ts test(gateway): move sessions_send error paths to unit tests 2026-02-24 01:16:53 +00:00
server.sessions.gateway-server-sessions-a.test.ts Fix stale runtime model reuse on session reset (#41173) 2026-03-10 14:02:43 -07:00
server.skills-status.test.ts CI: restore main detect-secrets scan (#38438) 2026-03-07 10:06:35 -08:00
server.talk-config.test.ts fix(gateway): propagate real gateway client into plugin subagent runtime 2026-03-11 14:17:01 +01:00
server.tools-catalog.test.ts Gateway/UI: data-driven agents tools catalog with provenance (openclaw#24199) thanks @Takhoffman 2026-02-22 23:55:59 -06:00
server.ts
…
session-preview.test-helpers.ts refactor(gateway-test): share preview transcript fixture 2026-02-18 17:01:22 +00:00
session-reset-service.ts fix(gateway): split conversation reset from admin reset 2026-03-11 02:50:44 +00:00
session-utils.fs.test.ts test(gateway): dedupe transcript seed fixtures in fs session tests 2026-02-22 07:44:57 +00:00
session-utils.fs.ts refactor(core): share JSON utf8 byte counting helper 2026-03-02 05:20:19 +00:00
session-utils.test.ts fix(gateway): include disk-scanned agent IDs in listConfiguredAgentIds (#32831) 2026-03-03 21:19:18 +00:00
session-utils.ts fix(gateway): include disk-scanned agent IDs in listConfiguredAgentIds (#32831) 2026-03-03 21:19:18 +00:00
session-utils.types.ts refactor(shared): dedupe protocol schema typing and session/media helpers 2026-03-02 19:57:33 +00:00
sessions-patch.test.ts Allow ACP sessions.patch lineage fields on ACP session keys (#40995) 2026-03-09 17:08:11 +01:00
sessions-patch.ts fix: harden subagent control boundaries 2026-03-11 01:44:38 +00:00
sessions-resolve.ts
…
startup-auth.test.ts CI: restore main detect-secrets scan (#38438) 2026-03-07 10:06:35 -08:00
startup-auth.ts refactor: unify gateway SecretRef auth resolution paths 2026-03-07 23:27:50 +00:00
startup-control-ui-origins.ts refactor(gateway): dedupe origin seeding and plugin route auth matching 2026-03-02 00:42:22 +00:00
system-run-approval-binding.contract.test.ts refactor!: remove versioned system-run approval contract 2026-03-02 01:12:53 +00:00
system-run-approval-binding.test.ts refactor!: remove versioned system-run approval contract 2026-03-02 01:12:53 +00:00
test-helpers.agent-results.ts test(gateway): dedupe agent payload and stream fixtures 2026-02-19 09:22:16 +00:00
test-helpers.e2e.ts fix(gateway): pin paired reconnect metadata for node policy 2026-02-26 14:11:04 +01:00
test-helpers.mocks.ts follow-up: align ingress, atomic paths, and channel tests with credential semantics (#33733) 2026-03-03 20:29:46 -06:00
test-helpers.openai-mock.ts test(gateway): reuse shared openai timeout e2e helpers 2026-02-22 07:44:57 +00:00
test-helpers.server.ts refactor(core): extract shared dedup helpers 2026-03-07 10:41:05 +00:00
test-helpers.ts
…
test-http-response.ts refactor(channels): dedupe transport and gateway test scaffolds 2026-02-16 14:59:31 +00:00
test-openai-responses-model.ts refactor(channels): dedupe transport and gateway test scaffolds 2026-02-16 14:59:31 +00:00
test-temp-config.ts refactor(channels): dedupe transport and gateway test scaffolds 2026-02-16 14:59:31 +00:00
test-with-server.ts refactor(channels): dedupe transport and gateway test scaffolds 2026-02-16 14:59:31 +00:00
tools-invoke-http.cron-regression.test.ts test(gateway): dedupe gateway and infra test scaffolds 2026-03-02 07:13:10 +00:00
tools-invoke-http.test.ts test(gateway): widen before tool hook mock typing (#43476) 2026-03-12 00:17:03 +03:00
tools-invoke-http.ts fix(gateway): run before_tool_call for HTTP tools 2026-03-11 20:18:24 +00:00
ws-log.test.ts
…
ws-log.ts refactor(channels): dedupe transport and gateway test scaffolds 2026-02-16 14:59:31 +00:00
ws-logging.ts
…