Jacob Tomlinson 6c679e5f04 Gateway: reject mixed trusted-proxy token config (#58371) ...

* Gateway: reject mixed trusted-proxy token config

Co-authored-by: boy-hack <w8ay@qq.com>

* Gateway: fail closed for loopback trusted-proxy auth

---------

Co-authored-by: boy-hack <w8ay@qq.com>

2026-03-31 17:05:03 +01:00

..

acp

refactor: move tasks behind plugin-sdk seam

2026-03-31 15:22:09 +01:00

agents

test: require Claude 4.6 for Anthropic live selection

2026-03-31 16:41:50 +01:00

auto-reply

fix: address security and review feedback

2026-03-31 20:25:09 +05:30

bindings

…

bootstrap

…

canvas-host

Canvas Host: build default status with DOM nodes (#58266)

2026-03-31 10:29:28 +01:00

channels

refactor(media): centralize outbound access plumbing

2026-04-01 00:32:53 +09:00

chat

…

cli

fix: restore ci status fast path and whatsapp tests

2026-03-31 16:21:55 +01:00

commands

fix: restore ci status fast path and whatsapp tests

2026-03-31 16:21:55 +01:00

compat

…

config

build: bump version to 2026.3.31

2026-03-31 15:48:00 +01:00

context-engine

…

cron

refactor: move tasks behind plugin-sdk seam

2026-03-31 15:22:09 +01:00

daemon

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

docs

[codex] harden clawhub plugin publishing and install (#56870)

2026-03-29 11:59:19 -07:00

flows

feat(xai): add plugin-owned x_search onboarding

2026-03-29 00:12:37 +00:00

gateway

Gateway: reject mixed trusted-proxy token config (#58371)

2026-03-31 17:05:03 +01:00

generated

refactor(plugin-sdk): remove channel-specific sdk shims

2026-03-30 01:03:24 +01:00

hooks

fix(hooks): reduce registration log noise

2026-03-31 14:59:22 +01:00

i18n

…

image-generation

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

infra

fix(media): restore whatsapp outbound compatibility

2026-04-01 01:00:27 +09:00

interactive

…

link-understanding

…

logging

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

markdown

fix(slack): restore table block mode seam (#57591)

2026-03-30 19:25:01 +09:00

mcp

test: remove gateway flake from channel mcp notifications

2026-03-31 01:40:55 +01:00

media

refactor(media): centralize outbound access plumbing

2026-04-01 00:32:53 +09:00

media-understanding

test: repair stale task and image mocks

2026-03-31 15:48:00 +01:00

node-host

fix(exec): restore strict inline-eval allow-always reuse

2026-03-31 23:45:22 +09:00

pairing

fix(pairing): scope pending request caps per account (#58239)

2026-03-31 19:45:45 +09:00

plugin-sdk

refactor(media): centralize outbound access plumbing

2026-04-01 00:32:53 +09:00

plugins

Plugins: preserve prompt build system prompt precedence (#58375)

2026-03-31 16:52:09 +01:00

process

fix(ci): restore matrix monitor import guards and windows npm exit codes

2026-03-31 22:04:35 +09:00

routing

Sessions: parse thread suffixes by channel (#58100)

2026-03-31 08:54:16 -04:00

scripts

docs: fix English link audits (#57039)

2026-03-30 01:21:00 +02:00

secrets

Secrets: hard-fail unsupported SecretRef policy and fix gateway restart token drift (#58141)

2026-03-31 02:37:31 -05:00

security

docs(security): clarify acpx yolo mode

2026-03-31 20:54:30 +09:00

sessions

Sessions: parse thread suffixes by channel (#58100)

2026-03-31 08:54:16 -04:00

shared

fix(subagents): correct duration display showing 5-6x inflated runtime (#57739)

2026-03-30 23:44:36 +08:00

terminal

…

test-helpers

fix(ci): harden Windows test cleanup

2026-03-30 18:56:29 +09:00

test-utils

refactor: move tasks behind plugin-sdk seam

2026-03-31 15:22:09 +01:00

tts

feat(tts): add structured provider diagnostics and fallback attempt analytics (#57954)

2026-03-30 22:55:28 -05:00

tui

fix(tui): stop hijacking j/k in model search

2026-03-28 19:48:00 -07:00

types

plugins: add before_install hook for install scanners

2026-03-29 12:35:01 -07:00

utils

fix: address second-round review — Latin backward compat and emoji consistency

2026-03-29 10:22:43 +09:00

web-search

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

wizard

Skills: prefer active OpenClaw paths

2026-03-30 16:10:13 +01:00

channel-web.ts

…

docker-build-cache.test.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

Docker setup: force BuildKit for local builds

2026-03-28 20:46:35 -07:00

dockerfile.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.test.ts

CLI: keep root help plugin descriptors non-activating (#57294)

2026-03-29 18:49:57 -04:00

entry.ts

CLI: keep root help plugin descriptors non-activating (#57294)

2026-03-29 18:49:57 -04:00

entry.version-fast-path.test.ts

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

extensionAPI.ts

…

global-state.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

ui-app-settings.agents-files-refresh.test.ts

Agents UI: fix effective model and file hydration

2026-03-28 21:10:39 -07:00

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…