Peter Steinberger ea967be0df feat(gateway): add loopback locality controls (#115959) ...

* feat(gateway): add loopback locality controls

* fix(gateway): keep loopback auth delays enforced under concurrency

The pending-timer cap let an attacker park cheap failures in every slot and then guess without penalty. Delays now key off a per-key deadline, so parallel guesses wait out the same escalating penalty and are still bounded by the max delay.

* fix(gateway): share one loopback penalty timer per key

Concurrent failures on a key now share a single timer and deadline instead of allocating one per in-flight request. Also corrects the security doc: the delay raises the cost of repeated guessing from one source, but credentials are compared before the failure response is delayed, so it is not a defense against parallel fan-out.

* docs(gateway): record why loopback delay stays post-verification

* docs: refresh generated docs map

* docs: refresh plugin SDK API baseline

* test: update loopback locality CI expectations

2026-07-29 12:25:57 -04:00

..

security

feat(gateway): add loopback locality controls (#115959)

2026-07-29 12:25:57 -04:00

1password.md

…

audit.md

docs: retire config keys that strict validation rejects (#113956)

2026-07-25 18:24:02 -07:00

authentication.md

fix(auth): reuse Claude CLI logins natively and stop forwarding expired OAuth tokens (#115134)

2026-07-29 01:30:07 -04:00

background-process.md

fix(agents): bound completed background process retention (#115760)

2026-07-29 04:45:08 -04:00

bonjour.md

…

bridge-protocol.md

…

cli-backends.md

…

clients.md

fix: generated images do not appear in native chat (#115042)

2026-07-28 04:39:53 -04:00

cloud-workers.md

…

config-agents.md

fix(sandbox): reject and migrate browser network none (#115250)

2026-07-29 06:22:33 +08:00

config-channels.md

docs(slack): clarify group DM bot membership (#101944)

2026-07-28 14:27:09 -04:00

config-tools.md

feat(agents): default code mode to per-model auto activation (#114906)

2026-07-28 03:00:22 -04:00

configuration-examples.md

docs: retire config keys that strict validation rejects (#113956)

2026-07-25 18:24:02 -07:00

configuration-reference.md

feat(gateway): add loopback locality controls (#115959)

2026-07-29 12:25:57 -04:00

configuration.md

fix(ui): show a simple channel settings view with a flip to advanced (#114741)

2026-07-27 16:39:23 -04:00

diagnostics.md

…

discovery.md

…

doctor.md

refactor(agents): retire TOOLS.md into an AGENTS.md section with a doctor migration (#113966)

2026-07-27 03:56:30 -04:00

embedding.md

…

external-apps.md

…

gateway-lock.md

…

health.md

fix(channels): report a channel that cannot receive as unhealthy instead of connected (#115229)

2026-07-28 12:08:53 -04:00

heartbeat.md

docs(heartbeat): align retired config options with fixed runtime policies (#113455)

2026-07-25 06:52:27 -07:00

index.md

…

local-model-services.md

…

local-models.md

…

logging.md

docs: retire config keys that strict validation rejects (#113956)

2026-07-25 18:24:02 -07:00

multi-tenant-hosting.md

…

multiple-gateways.md

…

network-model.md

…

openai-http-api.md

…

openresponses-http-api.md

…

openshell.md

feat(openshell): add workspace selection (#114952)

2026-07-28 14:53:46 -04:00

opentelemetry.md

fix(diagnostics): keep internal thinking out of telemetry [AI] (#115261)

2026-07-29 14:05:45 +05:30

operator-scopes.md

fix(browser): uploads fail when the browser runs on a remote node (#115291)

2026-07-29 20:31:46 +08:00

pairing.md

feat(gateway): add loopback locality controls (#115959)

2026-07-29 12:25:57 -04:00

prometheus.md

…

protocol.md

fix(browser): uploads fail when the browser runs on a remote node (#115291)

2026-07-29 20:31:46 +08:00

remote-gateway-readme.md

…

remote.md

fix(gateway): keep configured local auth authoritative (#114462)

2026-07-27 05:43:31 -04:00

restart-recovery.md

fix(plugins): recover user turns with scoped reply hooks (#114836)

2026-07-29 17:22:16 +08:00

sandbox-vs-tool-policy-vs-elevated.md

…

sandboxing.md

fix(sandbox): scope runtimes by workspace (#115766)

2026-07-29 16:50:38 +08:00

secrets-plan-contract.md

…

secrets.md

fix(channels): keep healthy accounts' message actions when one credential SecretRef fails (#110329)

2026-07-28 01:50:51 -04:00

tailscale.md

…

tools-invoke-http-api.md

…

troubleshooting.md

…

trusted-proxy-auth.md

…