Peter Steinberger
764cfd5552
feat: add bundled admin HTTP RPC plugin
2026-05-15 11:44:58 +01:00
Peter Steinberger
f7a14e678b
fix: keep model visibility policy internal
2026-05-10 00:50:10 -04:00
Peter Steinberger
2d78c72e5e
refactor: centralize model visibility policy
2026-05-10 00:50:10 -04:00
80mills
2e495b07f3
Preserve provider wildcard allowlist intent
2026-05-10 00:50:10 -04:00
Peter Steinberger
98efae916b
refactor: hide gateway helper internals
2026-05-02 07:25:39 +01:00
Vincent Koc
1497425b8d
fix(gateway): trim startup config imports
2026-04-27 11:34:24 -07:00
Peter Steinberger
7f3f108521
refactor(config): migrate plugin config access
2026-04-27 12:35:58 +01:00
Vincent Koc
b02cca4e00
fix(gateway): trim startup imports
2026-04-26 22:48:31 -07:00
Devin Robison
b76edc09e6
fix(gateway): reauthorize session history SSE updates ( #70237 )
...
* fix(gateway): reauthorize session history SSE updates
* docs(changelog): note session history sse reauth
* fix(gateway): use live proxy config for sse reauth
* fix(gateway): skip unrelated session sse reauth
* fix(gateway): filter sse transcript updates early, log work failures, forward-declare cleanup bindings
2026-04-22 16:11:32 -06:00
Peter Steinberger
655e0be3d7
refactor: share scoped gateway http auth
2026-04-20 14:37:05 +01:00
Peter Steinberger
3ff56020b1
refactor: dedupe gateway trimmed readers
2026-04-08 01:36:38 +01:00
Peter Steinberger
e0c5b6c280
refactor: dedupe gateway lowercase helpers
2026-04-07 13:44:42 +01:00
hcl
b8fea43bf2
fix(gateway): return default scopes when trusted HTTP request has no scope header ( #58603 )
...
resolveTrustedHttpOperatorScopes() returns [] when the x-openclaw-scopes
header is absent, even for trusted requests (--auth none). This causes
403 "missing scope: operator.write" on /v1/chat/completions.
Root cause: src/gateway/http-utils.ts:138-140. PR #57783 (f0af18672Closes #58357
Signed-off-by: HCL <chenglunhu@gmail.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-31 21:09:05 -04:00
Peter Steinberger
dc0e0b0f68
docs(security): mark shared-secret HTTP auth as designed
2026-03-31 22:58:09 +09:00
Vincent Koc
6b3f99a11f
fix(gateway): enforce trusted-proxy HTTP origin checks ( #58229 )
...
* fix(gateway): enforce trusted-proxy HTTP origin checks
* Update CHANGELOG.md
2026-03-31 19:49:26 +09:00
Peter Steinberger
0633406ff6
fix(gateway): restore compat HTTP operator auth
2026-03-31 16:49:30 +09:00
Jacob Tomlinson
f0af186726
gateway: ignore bearer-declared HTTP operator scopes ( #57783 )
...
* gateway: ignore bearer-declared HTTP operator scopes
* gateway: key HTTP bearer guards to auth mode
* gateway: refresh rebased HTTP regression expectations
* gateway: honor resolved HTTP auth method
* gateway: remove duplicate openresponses owner flags
2026-03-30 20:04:33 +01:00
Peter Steinberger
12100719b8
fix: preserve cli sessions across model changes
2026-03-26 20:25:20 +00:00
Vincent Koc
d10669629d
feat(gateway): make openai compatibility agent-first
2026-03-24 18:06:24 -07:00
Vincent Koc
eaad4ad1be
feat(gateway): add missing OpenAI-compatible endpoints (models and embeddings) ( #53992 )
...
* feat(gateway): add OpenAI-compatible models and embeddings
* docs(gateway): clarify model list and agent routing
* Update index.md
* fix(gateway): harden embeddings HTTP provider selection
* fix(gateway): validate compat model overrides
* fix(gateway): harden embeddings and response continuity
* fix(gateway): restore compat model id handling
2026-03-24 16:53:51 -07:00
Peter Steinberger
7066d5e192
refactor: extract shared sandbox and gateway plumbing
2026-03-02 23:16:47 +00:00
Peter Steinberger
b8b43175c5
style: align formatting with oxfmt 0.33
2026-02-18 01:34:35 +00:00
Peter Steinberger
31f9be126c
style: run oxfmt and fix gate failures
2026-02-18 01:29:02 +00:00
cpojer
d0cb8c19b2
chore: wtf.
2026-02-17 13:36:48 +09:00
Sebastian
ed11e93cf2
chore(format)
2026-02-16 23:20:16 -05:00
cpojer
90ef2d6bdf
chore: Update formatting.
2026-02-17 09:18:40 +09:00
cpojer
f06dd8df06
chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.
2026-02-01 10:03:47 +09:00
cpojer
5ceff756e1
chore: Enable "curly" rule to avoid single-statement if confusion/errors.
2026-01-31 16:19:20 +09:00
Peter Steinberger
9a7160786a
refactor: rename to openclaw
2026-01-30 03:16:21 +01:00
Peter Steinberger
6d16a658e5
refactor: rename clawdbot to moltbot with legacy compat
2026-01-27 12:21:02 +00:00
Peter Steinberger
bbc67f3754
fix: expand /v1/responses inputs ( #1229 ) (thanks @RyanLisse)
2026-01-20 07:37:30 +00:00
