Jacob Tomlinson 6c679e5f04 Gateway: reject mixed trusted-proxy token config (#58371) ...

* Gateway: reject mixed trusted-proxy token config

Co-authored-by: boy-hack <w8ay@qq.com>

* Gateway: fail closed for loopback trusted-proxy auth

---------

Co-authored-by: boy-hack <w8ay@qq.com>

2026-03-31 17:05:03 +01:00

..

protocol

feat(security): fail closed on dangerous skill installs

2026-03-31 23:27:20 +09:00

server

refactor(media): centralize outbound access plumbing

2026-04-01 00:32:53 +09:00

server-methods

feat(security): fail closed on dangerous skill installs

2026-03-31 23:27:20 +09:00

agent-event-assistant-text.ts

…

agent-list.ts

Status: split lightweight gateway agent list

2026-03-15 22:55:27 -07:00

agent-prompt.test.ts

fix: harden queue retry debounce and add regression tests

2026-02-24 03:52:49 +00:00

agent-prompt.ts

fix(gateway): safely extract text from content arrays in prompt builder (#24946)

2026-02-24 03:33:37 +00:00

android-node.capabilities.live.test.ts

fix: finalize android sms search (#50146) (thanks @scaryshark124)

2026-03-30 10:36:43 +05:30

android-node.capabilities.policy-config.test.ts

fix: finalize android sms search (#50146) (thanks @scaryshark124)

2026-03-30 10:36:43 +05:30

android-node.capabilities.policy-config.ts

fix: finalize android sms search (#50146) (thanks @scaryshark124)

2026-03-30 10:36:43 +05:30

android-node.capabilities.policy-source.test.ts

fix: finalize android sms search (#50146) (thanks @scaryshark124)

2026-03-30 10:36:43 +05:30

android-node.capabilities.policy-source.ts

fix: finalize android sms search (#50146) (thanks @scaryshark124)

2026-03-30 10:36:43 +05:30

assistant-identity.test.ts

…

assistant-identity.ts

refactor(shared): centralize assistant identity and usage timeseries types

2026-03-02 14:36:41 +00:00

auth-config-utils.ts

refactor: unify gateway SecretRef auth resolution paths

2026-03-07 23:27:50 +00:00

auth-install-policy.ts

refactor: split durable service env helpers

2026-03-22 22:05:56 -07:00

auth-mode-policy.test.ts

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

auth-mode-policy.ts

Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094)

2026-03-05 12:53:56 -06:00

auth-rate-limit.test.ts

test: simplify auth rate limit coverage

2026-03-13 18:12:24 +00:00

auth-rate-limit.ts

refactor(security): unify hook rate-limit and hook module loading

2026-02-22 08:57:01 +01:00

auth.test.ts

Gateway: reject mixed trusted-proxy token config (#58371)

2026-03-31 17:05:03 +01:00

auth.ts

Gateway: reject mixed trusted-proxy token config (#58371)

2026-03-31 17:05:03 +01:00

boot.test.ts

follow-up: align ingress, atomic paths, and channel tests with credential semantics (#33733)

2026-03-03 20:29:46 -06:00

boot.ts

fix(gateway): enforce owner boundary for agent runs

2026-03-02 00:27:44 +00:00

call.test.ts

test(gateway): add live docker ACP bind coverage

2026-03-28 05:23:55 +00:00

call.ts

test(gateway): add live docker ACP bind coverage

2026-03-28 05:23:55 +00:00

canvas-capability.ts

fix(gateway): harden canvas auth with session capabilities

2026-02-19 15:51:22 +01:00

channel-health-monitor.test.ts

feat(gateway): make health monitor stale threshold and max restarts configurable (openclaw#42107)

2026-03-14 21:21:56 -05:00

channel-health-monitor.ts

feat(gateway): make health monitor stale threshold and max restarts configurable (openclaw#42107)

2026-03-14 21:21:56 -05:00

channel-health-policy.test.ts

test: share channel health helpers

2026-03-14 00:30:14 +00:00

channel-health-policy.ts

fix: restore Telegram webhook-mode health after restarts

2026-03-08 02:27:18 +00:00

channel-status-patches.test.ts

fix(gateway): stop stale-socket restarts before first event (#38643)

2026-03-07 00:58:08 -06:00

channel-status-patches.ts

fix(gateway): stop stale-socket restarts before first event (#38643)

2026-03-07 00:58:08 -06:00

chat-abort.test.ts

fix: guard stale chat buffer sweep (#52428) (thanks @karanuppal)

2026-03-22 16:56:19 -07:00

chat-abort.ts

fix: guard stale chat buffer sweep (#52428) (thanks @karanuppal)

2026-03-22 16:56:19 -07:00

chat-attachments.test.ts

test(gateway): extract shared parse warning helper

2026-02-21 23:32:32 +00:00

chat-attachments.ts

fix: prevent gateway attachment offload regressions (#55513) (thanks @Syysean)

2026-03-30 20:54:40 +05:30

chat-sanitize.test.ts

fix(chat): preserve sender labels in dashboard history

2026-03-08 09:17:02 +05:30

chat-sanitize.ts

fix(chat): preserve sender labels in dashboard history

2026-03-08 09:17:02 +05:30

cli-session-history.claude.ts

refactor: split claude cli history import pipeline

2026-03-26 22:12:16 +00:00

cli-session-history.merge.ts

refactor: split claude cli history import pipeline

2026-03-26 22:12:16 +00:00

cli-session-history.test.ts

fix: unify claude cli imported tool messages

2026-03-26 22:02:26 +00:00

cli-session-history.ts

refactor: split claude cli history import pipeline

2026-03-26 22:12:16 +00:00

client-callsites.guard.test.ts

test(gateway): stabilize suite session-store config (#52193)

2026-03-22 19:18:44 +08:00

client.test.ts

test: speed up browser and gateway suites

2026-03-24 17:27:02 +00:00

client.ts

refactor: unify gateway handshake timeout wiring

2026-03-24 22:53:55 -07:00

client.watchdog.test.ts

test: share gateway authz and watchdog fixtures

2026-03-26 16:36:03 +00:00

config-reload-plan.ts

refactor: switch browser ownership to bundled plugin

2026-03-26 22:20:40 +00:00

config-reload.test.ts

refactor(gateway): dedupe self-write config reloads

2026-03-30 00:39:39 +01:00

config-reload.ts

refactor(gateway): dedupe self-write config reloads

2026-03-30 00:39:39 +01:00

connection-auth.test.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

connection-auth.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

connection-details.ts

fix(ci): align skills api and trim status startup

2026-03-27 22:24:54 +00:00

control-plane-audit.ts

fix: harden gateway control-plane restart protections

2026-02-19 14:30:15 +01:00

control-plane-rate-limit.ts

fix(security): harden gateway command/audit guardrails

2026-02-22 08:45:48 +01:00

control-ui-contract.ts

gateway: trim control UI bootstrap payload (#57727)

2026-03-30 15:08:19 +01:00

control-ui-csp.test.ts

fix: hash inline scripts with data-src attributes

2026-03-23 21:14:55 -07:00

control-ui-csp.ts

refactor: simplify provider inference and zoned parsing helpers

2026-03-23 21:22:30 -07:00

control-ui-http-utils.ts

fix(gateway): let non-GET requests fall through controlUi routing when basePath is set

2026-03-03 00:11:13 +00:00

control-ui-routing.test.ts

test: tighten gateway helper coverage

2026-03-13 17:45:21 +00:00

control-ui-routing.ts

fix(gateway): keep probe routes reachable with root-mounted control ui (#38199)

2026-03-06 12:13:20 -05:00

control-ui-shared.ts

fix(security): harden avatar validation and size limits

2026-02-22 08:35:32 +01:00

control-ui.auto-root.http.test.ts

gateway: fix global Control UI 404s for symlinked wrappers and bundled package roots (#40385)

2026-03-09 01:50:42 +01:00

control-ui.http.test.ts

gateway: trim control UI bootstrap payload (#57727)

2026-03-30 15:08:19 +01:00

control-ui.ts

gateway: trim control UI bootstrap payload (#57727)

2026-03-30 15:08:19 +01:00

credential-planner.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

credential-precedence.parity.test.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

credentials.test.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

credentials.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

device-auth.test.ts

test: refine gateway auth helper coverage

2026-03-13 17:58:28 +00:00

device-auth.ts

refactor(gateway): unify metadata canonicalization + platform rules

2026-03-02 00:26:36 +00:00

device-authz.test-helpers.ts

Pairing: forward caller scopes during approval (#55950)

2026-03-27 18:55:33 +00:00

device-metadata-normalization.ts

refactor(gateway): unify metadata canonicalization + platform rules

2026-03-02 00:26:36 +00:00

embeddings-http.test.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

embeddings-http.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

events.ts

refactor: unify restart gating and update availability sync

2026-02-19 10:00:41 +01:00

exec-approval-manager.ts

feat(hooks): add async requireApproval to before_tool_call (#55339)

2026-03-27 09:06:40 -07:00

gateway-acp-bind.live.test.ts

test(gateway): add live docker ACP bind coverage

2026-03-28 05:23:55 +00:00

gateway-cli-backend.live.test.ts

test: add docker cli-backend smoke

2026-03-26 16:49:52 +00:00

gateway-config-prompts.shared.ts

refactor(gateway): dedupe origin seeding and plugin route auth matching

2026-03-02 00:42:22 +00:00

gateway-connection.test-mocks.ts

fix(ci): restore boundary and test seams

2026-03-27 15:08:33 +00:00

gateway-misc.test.ts

fix: finalize android sms search (#50146) (thanks @scaryshark124)

2026-03-30 10:36:43 +05:30

gateway-models.profiles.live.test.ts

test: require Claude 4.6 for Anthropic live selection

2026-03-31 16:41:50 +01:00

gateway.test.ts

gateway: reuse session workspace for HTTP tool loading (#56101)

2026-03-27 23:01:43 -04:00

handshake-timeouts.test.ts

refactor: unify gateway handshake timeout wiring

2026-03-24 22:53:55 -07:00

handshake-timeouts.ts

refactor: unify gateway handshake timeout wiring

2026-03-24 22:53:55 -07:00

hooks-mapping.test.ts

test: dedupe gateway browser discord and channel coverage

2026-02-22 17:11:54 +00:00

hooks-mapping.ts

fix(security): block hook transform symlink escapes

2026-02-22 10:18:05 +01:00

hooks-policy.ts

Security: trim audit policy import surfaces

2026-03-15 22:55:26 -07:00

hooks-test-helpers.ts

fix(gateway): honor trusted proxy hook auth rate limits

2026-03-12 21:35:57 +00:00

hooks.test.ts

fix(hooks): rebind hook agent session keys to the target agent (#58225)

2026-04-01 00:16:39 +09:00

hooks.ts

fix(hooks): rebind hook agent session keys to the target agent (#58225)

2026-04-01 00:16:39 +09:00

http-auth-helpers.test.ts

fix(gateway): enforce trusted-proxy HTTP origin checks (#58229)

2026-03-31 19:49:26 +09:00

http-auth-helpers.ts

fix(gateway): enforce trusted-proxy HTTP origin checks (#58229)

2026-03-31 19:49:26 +09:00

http-common.test.ts

feat(gateway): add Permissions-Policy header to default security headers (#30186)

2026-03-03 16:25:39 -08:00

http-common.ts

feat(gateway): add Permissions-Policy header to default security headers (#30186)

2026-03-03 16:25:39 -08:00

http-endpoint-helpers.test.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

http-endpoint-helpers.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

http-utils.authorize-request.test.ts

fix(gateway): enforce trusted-proxy HTTP origin checks (#58229)

2026-03-31 19:49:26 +09:00

http-utils.model-override.test.ts

fix: preserve cli sessions across model changes

2026-03-26 20:25:20 +00:00

http-utils.request-context.test.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

http-utils.ts

docs(security): mark shared-secret HTTP auth as designed

2026-03-31 22:58:09 +09:00

input-allowlist.test.ts

docs(gateway): clarify URL allowlist semantics

2026-03-17 00:03:27 -07:00

input-allowlist.ts

docs(gateway): clarify URL allowlist semantics

2026-03-17 00:03:27 -07:00

live-image-probe.ts

…

live-tool-probe-utils.test.ts

fix: move Mistral compat into provider plugin

2026-03-28 04:08:37 +00:00

live-tool-probe-utils.ts

fix: move Mistral compat into provider plugin

2026-03-28 04:08:37 +00:00

method-scopes.test.ts

gateway: restrict node pairing approvals (#55951)

2026-03-27 19:14:16 +00:00

method-scopes.ts

gateway: restrict node pairing approvals (#55951)

2026-03-27 19:14:16 +00:00

model-pricing-cache-state.ts

fix: restore xai pricing cache fallback

2026-03-28 11:43:12 +00:00

model-pricing-cache.test.ts

fix(gateway): guard openrouter auto pricing recursion (#53055)

2026-03-23 10:43:01 -07:00

model-pricing-cache.ts

style: normalize import order and formatting

2026-03-29 16:33:22 +09:00

models-http.test.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

models-http.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

net.test.ts

test: dedupe gateway network and transcript suites

2026-03-28 00:26:55 +00:00

net.ts

refactor: split best-effort network display discovery

2026-03-22 18:35:37 -07:00

node-catalog.test.ts

refactor: centralize node identity resolution

2026-03-29 23:14:22 +01:00

node-catalog.ts

refactor: centralize node identity resolution

2026-03-29 23:14:22 +01:00

node-command-policy.ts

fix: finalize android sms search (#50146) (thanks @scaryshark124)

2026-03-30 10:36:43 +05:30

node-invoke-sanitize.ts

fix(gateway): bind node exec approvals to nodeId

2026-02-24 03:05:58 +00:00

node-invoke-system-run-approval-errors.ts

refactor(gateway): centralize system.run approval context and errors

2026-02-26 22:01:16 +01:00

node-invoke-system-run-approval-match.test.ts

refactor(gateway): dedupe auth and discord monitor suites

2026-03-02 21:31:36 +00:00

node-invoke-system-run-approval-match.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

node-invoke-system-run-approval.test.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

node-invoke-system-run-approval.ts

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

node-pending-work.test.ts

Gateway: tighten node pending drain semantics (#41429)

2026-03-09 21:56:00 +01:00

node-pending-work.ts

Gateway: tighten node pending drain semantics (#41429)

2026-03-09 21:56:00 +01:00

node-registry.ts

fix: disambiguate legacy mac node identities

2026-03-29 22:47:15 +01:00

open-responses.schema.ts

fix(gateway): /v1/responses tool schema should use flat Responses API format (#57166)

2026-03-30 09:36:54 +09:00

openai-http.image-budget.test.ts

Gateway: follow up HEIC input image handling (#38146)

2026-03-06 11:53:59 -05:00

openai-http.message-channel.test.ts

gateway: ignore bearer-declared HTTP operator scopes (#57783)

2026-03-30 20:04:33 +01:00

openai-http.test.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

openai-http.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

openresponses-http.test.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

openresponses-http.ts

fix(gateway): restore compat HTTP operator auth

2026-03-31 16:49:30 +09:00

openresponses-parity.test.ts

fix(gateway): /v1/responses tool schema should use flat Responses API format (#57166)

2026-03-30 09:36:54 +09:00

openresponses-prompt.ts

test: optimize redundant suites for faster runtime

2026-02-23 13:57:34 +00:00

operator-approvals-client.ts

refactor: share approval gateway client setup

2026-03-10 22:18:04 +00:00

origin-check.test.ts

test: tighten gateway helper coverage

2026-03-13 17:45:21 +00:00

origin-check.ts

fix(gateway): require local client for loopback origin fallback

2026-03-02 16:37:45 +00:00

probe-auth.test.ts

fix(gateway): pass process.env in status command probe auth to resolve SecretRef

2026-03-22 19:14:44 -07:00

probe-auth.ts

refactor!: drop legacy CLAWDBOT env compatibility

2026-03-22 22:13:39 -07:00

probe.auth.integration.test.ts

fix: preserve loopback gateway scopes for local auth

2026-03-16 06:22:15 +00:00

probe.test.ts

fix(daemon): surface probe close reasons (#56282)

2026-03-28 10:04:56 +01:00

probe.ts

fix(daemon): surface probe close reasons (#56282)

2026-03-28 10:04:56 +01:00

reconnect-gating.test.ts

fix: switch pairing setup codes to bootstrap tokens

2026-03-12 22:23:07 +00:00

resolve-configured-secret-input-string.test.ts

refactor: unify gateway SecretRef auth resolution paths

2026-03-07 23:27:50 +00:00

resolve-configured-secret-input-string.ts

Gateway Secrets: allowlist unresolved secret ref label

2026-03-07 16:27:00 -08:00

role-policy.test.ts

Gateway: add pending node work primitives (#41409)

2026-03-09 21:42:57 +01:00

role-policy.ts

refactor(gateway): extract connect and role policy logic

2026-02-21 19:47:22 +01:00

security-path.test.ts

fix(gateway): fail closed plugin auth path canonicalization

2026-03-02 15:55:32 +00:00

security-path.ts

fix(gateway): fail closed plugin auth path canonicalization

2026-03-02 15:55:32 +00:00

server-broadcast.ts

feat(hooks): add async requireApproval to before_tool_call (#55339)

2026-03-27 09:06:40 -07:00

server-channels.test.ts

refactor: share webhook channel status helpers

2026-03-29 02:11:22 +01:00

server-channels.ts

refactor: share webhook channel status helpers

2026-03-29 02:11:22 +01:00

server-chat.agent-events.test.ts

fix(regression): hydrate node tool event metadata

2026-03-27 21:00:46 -05:00

server-chat.ts

fix(regression): hydrate node tool event metadata

2026-03-27 21:00:46 -05:00

server-close.test.ts

refactor: switch browser ownership to bundled plugin

2026-03-26 22:20:40 +00:00

server-close.ts

refactor: switch browser ownership to bundled plugin

2026-03-26 22:20:40 +00:00

server-constants.ts

refactor: unify gateway handshake timeout wiring

2026-03-24 22:53:55 -07:00

server-cron.test.ts

Tests: share partial module mock helper

2026-03-28 02:09:43 -04:00

server-cron.ts

feat(cron): support custom session IDs and auto-bind to current session (#16511)

2026-03-14 16:48:46 +11:00

server-discovery-runtime.ts

…

server-discovery.test.ts

test(core): continue mock reset reductions in auth, gateway, npm install

2026-02-22 08:28:50 +00:00

server-discovery.ts

…

server-http.hooks-request-timeout.test.ts

refactor(test): share hook request handler fixtures

2026-03-12 21:44:58 +00:00

server-http.probe.test.ts

feat(gateway): add channel-backed readiness probes (#38285)

2026-03-06 15:15:23 -05:00

server-http.test-harness.ts

refactor(test): share hook request handler fixtures

2026-03-12 21:44:58 +00:00

server-http.ts

fix(hooks): rebind hook agent session keys to the target agent (#58225)

2026-04-01 00:16:39 +09:00

server-lanes.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

server-maintenance.test.ts

fix: guard stale chat buffer sweep (#52428) (thanks @karanuppal)

2026-03-22 16:56:19 -07:00

server-maintenance.ts

fix: guard stale chat buffer sweep (#52428) (thanks @karanuppal)

2026-03-22 16:56:19 -07:00

server-methods-list.ts

feat(hooks): add async requireApproval to before_tool_call (#55339)

2026-03-27 09:06:40 -07:00

server-methods.control-plane-rate-limit.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

server-methods.ts

refactor: switch browser ownership to bundled plugin

2026-03-26 22:20:40 +00:00

server-mobile-nodes.ts

…

server-model-catalog.ts

refactor(config): centralize runtime config state

2026-03-30 00:17:23 +01:00

server-node-events-types.ts

…

server-node-events.test.ts

fix: prevent gateway attachment offload regressions (#55513) (thanks @Syysean)

2026-03-30 20:54:40 +05:30

server-node-events.ts

fix: prevent gateway attachment offload regressions (#55513) (thanks @Syysean)

2026-03-30 20:54:40 +05:30

server-node-subscriptions.ts

…

server-plugin-bootstrap.browser-plugin.integration.test.ts

fix(ci): stabilize browser bundled integration tests

2026-03-28 08:34:18 +00:00

server-plugin-bootstrap.ts

fix: tighten gateway startup plugin loading

2026-04-01 00:20:06 +09:00

server-plugins.test.ts

fix: tighten gateway startup plugin loading

2026-04-01 00:20:06 +09:00

server-plugins.ts

fix: tighten gateway startup plugin loading

2026-04-01 00:20:06 +09:00

server-reload-handlers.ts

fix: restore ci status fast path and whatsapp tests

2026-03-31 16:21:55 +01:00

server-restart-deferral.test.ts

perf(test): cut gateway unit suite overhead

2026-02-16 00:18:26 +00:00

server-restart-sentinel.test.ts

Tests: share partial module mock helper

2026-03-28 02:09:43 -04:00

server-restart-sentinel.ts

fix(gateway): restart sentinel wakes session after restart and preserves thread routing (#53940) thanks @VACInc

2026-03-24 23:47:21 -05:00

server-runtime-config.test.ts

fix(gateway/auth): local trusted-proxy fallback to require token auth (#54536)

2026-03-29 17:05:00 +09:00

server-runtime-config.ts

fix(gateway/auth): local trusted-proxy fallback to require token auth (#54536)

2026-03-29 17:05:00 +09:00

server-runtime-state.ts

gateway: cap concurrent pre-auth websocket upgrades (#55294)

2026-03-27 09:55:27 +00:00

server-session-key.test.ts

Gateway: harden custom session-store discovery (#44176)

2026-03-12 16:44:46 +00:00

server-session-key.ts

Gateway: harden custom session-store discovery (#44176)

2026-03-12 16:44:46 +00:00

server-shared.ts

…

server-startup-log.test.ts

fix(gateway): unify listen startup log across bind hosts

2026-02-22 13:17:25 +01:00

server-startup-log.ts

fix(gateway): unify listen startup log across bind hosts

2026-02-22 13:17:25 +01:00

server-startup-matrix-migration.test.ts

test: reduce remaining clone seams

2026-03-26 20:01:01 +00:00

server-startup-matrix-migration.ts

Matrix: wire startup migration into doctor and gateway

2026-03-19 08:03:57 -04:00

server-startup-memory.test.ts

refactor: route memory runtime through memory plugin

2026-03-26 22:30:47 +00:00

server-startup-memory.ts

refactor: route memory runtime through memory plugin

2026-03-26 22:30:47 +00:00

server-startup-session-migration.test.ts

fix: add orphaned session key migration (#57217)

2026-03-30 07:36:46 +05:30

server-startup-session-migration.ts

fix: add orphaned session key migration (#57217)

2026-03-30 07:36:46 +05:30

server-startup.test.ts

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

server-startup.ts

hooks: default hooks.internal.enabled to true so bundled hooks load on fresh installs

2026-03-30 22:00:54 +05:30

server-tailscale.ts

…

server-utils.ts

…

server-wizard-sessions.ts

…

server-ws-runtime.ts

gateway: cap concurrent pre-auth websocket upgrades (#55294)

2026-03-27 09:55:27 +00:00

server.agent.gateway-server-agent-a.test.ts

fix(exec): harden async approval followup delivery in webchat-only sessions (#57359)

2026-03-29 20:54:13 -05:00

server.agent.gateway-server-agent-b.test.ts

fix(exec): harden async approval followup delivery in webchat-only sessions (#57359)

2026-03-29 20:54:13 -05:00

server.agent.gateway-server-agent.mocks.ts

refactor(gateway): centralize discovery target handling

2026-03-23 00:38:31 -07:00

server.auth.browser-hardening.test.ts

fix: keep tui out of browser origin checks

2026-03-27 10:32:13 +00:00

server.auth.compat-baseline.test.ts

Pairing: forward caller scopes during approval (#55950)

2026-03-27 18:55:33 +00:00

server.auth.control-ui.suite.ts

Pairing: forward caller scopes during approval (#55950)

2026-03-27 18:55:33 +00:00

server.auth.control-ui.test.ts

refactor(security): split gateway auth suites and share safe write path checks

2026-03-02 18:07:03 +00:00

server.auth.default-token.suite.ts

refactor: unify gateway handshake timeout wiring

2026-03-24 22:53:55 -07:00

server.auth.default-token.test.ts

refactor(security): split gateway auth suites and share safe write path checks

2026-03-02 18:07:03 +00:00

server.auth.modes.suite.ts

test: harden threaded shared-worker suites

2026-03-24 08:37:00 +00:00

server.auth.modes.test.ts

refactor(security): split gateway auth suites and share safe write path checks

2026-03-02 18:07:03 +00:00

server.auth.shared.ts

Pairing: forward caller scopes during approval (#55950)

2026-03-27 18:55:33 +00:00

server.canvas-auth.test.ts

gateway: cap concurrent pre-auth websocket upgrades (#55294)

2026-03-27 09:55:27 +00:00

server.channels.test.ts

refactor(test): dedupe gateway and web scaffolding

2026-02-22 20:04:51 +00:00

server.chat.gateway-server-chat-b.test.ts

fix: backfill claude cli chat history

2026-03-26 21:25:35 +00:00

server.chat.gateway-server-chat.test.ts

Gateway: align chat.send reset scope checks (#56009)

2026-03-27 20:36:31 +00:00

server.config-apply.test.ts

fix(config): harden SecretRef round-trip handling in Control UI and RPC writes (#58044)

2026-03-30 23:55:03 -05:00

server.config-patch.test.ts

fix(config): harden SecretRef round-trip handling in Control UI and RPC writes (#58044)

2026-03-30 23:55:03 -05:00

server.control-ui-root.test.ts

gateway: fix global Control UI 404s for symlinked wrappers and bundled package roots (#40385)

2026-03-09 01:50:42 +01:00

server.cron.test.ts

test: share gateway hook and cron helpers

2026-03-14 00:30:14 +00:00

server.device-pair-approve-authz.test.ts

test: share gateway authz and watchdog fixtures

2026-03-26 16:36:03 +00:00

server.device-pair-approve-supersede.test.ts

test: harden no-isolate gateway auth and pairing

2026-03-22 15:15:50 -07:00

server.device-token-rotate-authz.test.ts

test: share gateway authz and watchdog fixtures

2026-03-26 16:36:03 +00:00

server.e2e-registry-helpers.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

server.e2e-ws-harness.ts

test: reclassify gateway local suites from e2e

2026-02-22 11:48:46 +00:00

server.health.test.ts

test(gateway): speed up slow e2e test setup

2026-02-24 00:59:52 +00:00

server.hooks.test.ts

fix(hooks): rebind hook agent session keys to the target agent (#58225)

2026-04-01 00:16:39 +09:00

server.impl.ts

fix: restore ci status fast path and whatsapp tests

2026-03-31 16:21:55 +01:00

server.ios-client-id.test.ts

test(gateway): speed up contract and polling suites

2026-02-24 00:31:58 +00:00

server.legacy-migration.test.ts

refactor(gateway): dedupe legacy migration validation assertions

2026-03-07 17:58:31 +00:00

server.minimal-channel-pin.test.ts

fix: keep minimal gateway channel registry live (#53944) (thanks @affsantos)

2026-03-24 21:33:04 -07:00

server.models-voicewake-misc.test.ts

refactor(config): pin runtime snapshot and drop ttl cache

2026-03-29 22:57:31 +01:00

server.node-invoke-approval-bypass.test.ts

Pairing: forward caller scopes during approval (#55950)

2026-03-27 18:55:33 +00:00

server.node-pairing-authz.test.ts

gateway: restrict node pairing approvals (#55951)

2026-03-27 19:14:16 +00:00

server.openai-compatible-http-write-scope-bypass.poc.test.ts

fix(gateway): restore shared-secret HTTP tool invoke auth

2026-03-31 22:55:15 +09:00

server.plugin-http-auth.test.ts

test: share plugin http auth helpers

2026-03-14 00:30:14 +00:00

server.preauth-hardening.test.ts

gateway: cap concurrent pre-auth websocket upgrades (#55294)

2026-03-27 09:55:27 +00:00

server.reload.test.ts

refactor: switch browser ownership to bundled plugin

2026-03-26 22:20:40 +00:00

server.roles-allowlist-update.test.ts

fix(gateway): require node pairing before enabling node commands (#57777)

2026-03-30 17:29:28 +01:00

server.sessions-send.test.ts

Pairing: forward caller scopes during approval (#55950)

2026-03-27 18:55:33 +00:00

server.sessions.gateway-server-sessions-a.test.ts

fix(test): trim browser runtime gateway session mocks

2026-03-31 10:02:24 +09:00

server.silent-scope-upgrade-reconnect.poc.test.ts

gateway: require pairing for backend scope upgrades (#55286)

2026-03-26 17:36:44 +00:00

server.skills-status.test.ts

CI: restore main detect-secrets scan (#38438)

2026-03-07 10:06:35 -08:00

server.startup-matrix-migration.integration.test.ts

Matrix: wire startup migration into doctor and gateway

2026-03-19 08:03:57 -04:00

server.talk-config.test.ts

fix: restore repo-wide gate after upstream sync

2026-03-22 17:16:43 +00:00

server.tools-catalog.test.ts

Gateway/UI: data-driven agents tools catalog with provenance (openclaw#24199) thanks @Takhoffman

2026-02-22 23:55:59 -06:00

server.tools-effective.test.ts

feat: add /tools runtime availability view (#54088)

2026-03-24 21:09:51 -05:00

server.ts

…

session-archive.fs.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

session-archive.runtime.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

session-kill-http.test.ts

Gateway: require requester ownership for HTTP session kills (#55308)

2026-03-26 18:13:36 +00:00

session-kill-http.ts

Gateway: require requester ownership for HTTP session kills (#55308)

2026-03-26 18:13:36 +00:00

session-lifecycle-state.test.ts

Session management improvements and dashboard API (#50101)

2026-03-19 12:12:30 +09:00

session-lifecycle-state.ts

Session management improvements and dashboard API (#50101)

2026-03-19 12:12:30 +09:00

session-message-events.test.ts

fix(regression): preserve lifecycle session ownership metadata

2026-03-27 20:53:46 -05:00

session-preview.test-helpers.ts

refactor(gateway-test): share preview transcript fixture

2026-02-18 17:01:22 +00:00

session-reset-service.ts

fix(regression): preserve CLI bindings across session reset

2026-03-27 15:47:16 -05:00

session-subagent-reactivation.runtime.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

session-subagent-reactivation.test.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

session-subagent-reactivation.ts

perf: optimize cold import paths

2026-03-26 23:11:00 +00:00

session-transcript-files.fs.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

session-transcript-key.test.ts

fix: prefer freshest transcript session owners

2026-03-24 21:58:53 -05:00

session-transcript-key.ts

fix: prefer freshest transcript session owners

2026-03-24 21:58:53 -05:00

session-utils.fs.test.ts

test: dedupe gateway network and transcript suites

2026-03-28 00:26:55 +00:00

session-utils.fs.ts

refactor: dedupe helpers and source seams

2026-03-24 21:00:36 +00:00

session-utils.test.ts

fix: prevent gateway attachment offload regressions (#55513) (thanks @Syysean)

2026-03-30 20:54:40 +05:30

session-utils.ts

fix: prevent gateway attachment offload regressions (#55513) (thanks @Syysean)

2026-03-30 20:54:40 +05:30

session-utils.types.ts

fix(regression): preserve subagent session ownership metadata

2026-03-27 20:24:15 -05:00

sessions-history-http.test.ts

gateway: ignore bearer-declared HTTP operator scopes (#57783)

2026-03-30 20:04:33 +01:00

sessions-history-http.ts

gateway: ignore bearer-declared HTTP operator scopes (#57783)

2026-03-30 20:04:33 +01:00

sessions-patch.test.ts

Agents: fix subagent model precedence

2026-03-31 08:38:24 +05:30

sessions-patch.ts

style: apply formatter cleanups

2026-03-30 16:20:27 +01:00

sessions-resolve.test.ts

refactor: dedupe gateway session resolve visibility

2026-03-26 18:56:55 +00:00

sessions-resolve.ts

refactor: dedupe gateway session resolve visibility

2026-03-26 18:56:55 +00:00

startup-auth.test.ts

test(config): align optimistic write helpers

2026-03-30 01:02:25 +01:00

startup-auth.ts

refactor(config): use source snapshots for config mutations

2026-03-30 01:02:25 +01:00

startup-control-ui-origins.ts

refactor(gateway): dedupe origin seeding and plugin route auth matching

2026-03-02 00:42:22 +00:00

system-run-approval-binding.contract.test.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

system-run-approval-binding.test.ts

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

test-helpers.agent-results.ts

test(gateway): dedupe agent payload and stream fixtures

2026-02-19 09:22:16 +00:00

test-helpers.e2e.ts

refactor: unify gateway handshake timeout wiring

2026-03-24 22:53:55 -07:00

test-helpers.mocks.ts

fix: adapt pi model registry calls to constructor API

2026-03-31 15:28:29 +01:00

test-helpers.openai-mock.ts

test(gateway): reuse shared openai timeout e2e helpers

2026-02-22 07:44:57 +00:00

test-helpers.server.ts

refactor(config): pin runtime snapshot and drop ttl cache

2026-03-29 22:57:31 +01:00

test-helpers.ts

…

test-http-response.ts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

test-openai-responses-model.ts

Gateway tests: centralize mock responses provider setup

2026-03-16 14:36:04 +00:00

test-temp-config.ts

refactor(config): pin runtime snapshot and drop ttl cache

2026-03-29 22:57:31 +01:00

test-with-server.ts

test: continue vitest threads migration

2026-03-24 08:37:00 +00:00

tools-invoke-http.cron-regression.test.ts

fix(gateway): restore shared-secret HTTP tool invoke auth

2026-03-31 22:55:15 +09:00

tools-invoke-http.test.ts

fix(gateway): restore shared-secret HTTP tool invoke auth

2026-03-31 22:55:15 +09:00

tools-invoke-http.ts

docs(security): mark shared-secret HTTP auth as designed

2026-03-31 22:58:09 +09:00

ws-log.test.ts

test: tighten gateway helper coverage

2026-03-13 17:45:21 +00:00

ws-log.ts

Plugin SDK: route reply payload through public subpath

2026-03-18 12:01:15 -07:00

ws-logging.ts

…