Kaspre fd2a9adbe6 fix(ollama): bypass managed proxy for loopback embeddings (#85707) ...

* fix(ollama): bypass proxy for local embeddings

* fix(ollama): keep managed proxy bypass loopback-only

* fix(ollama): keep proxy bypass internal

* fix(ollama): keep proxy bypass private

* fix(ollama): harden internal proxy bypass

* chore(plugin-sdk): refresh api baseline

* fix(ollama): keep internal bypass out of qa aliases

* test(ollama): keep ssrf runtime mock complete

* fix(ollama): keep dist sdk aliases public-only

* fix(ollama): keep fetch bypass out of infra runtime

* fix(ollama): preserve packaged private sdk alias

* test(ollama): harden private ssrf alias coverage

* test(ollama): cover private ssrf resolver edges

* fix(ollama): scope private sdk native aliases

* test(ollama): audit blocked loopback bypasses

* fix(plugins): keep staged sdk aliases public-only

* test(ollama): harden proxy bypass proof

* test(ollama): cover origin mismatch proxy path

* test(ollama): cover ipv6 and batch bypass paths

* fix lint findings in Ollama proxy tests

* refactor: tighten Ollama proxy bypass

* fix: widen private sdk owner registry type

* test: stabilize Ollama proxy PR checks

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>

2026-05-23 21:17:55 +01:00

..

ts-topology

fix: harden clawpatch-reported edge cases

2026-05-18 03:18:55 +01:00

arg-utils.mjs

refactor: trim internal helper exports

2026-05-02 07:18:59 +01:00

bundled-extension-manifest.ts

…

bundled-plugin-build-entries-types.d.ts

docs: complete source-backed docs sweep

2026-05-02 22:37:01 +01:00

bundled-plugin-build-entries.d.mts

…

bundled-plugin-build-entries.d.ts

…

bundled-plugin-build-entries.mjs

fix(test): avoid scanning bundled build entries

2026-05-16 09:14:07 +08:00

bundled-plugin-paths.mjs

…

bundled-plugin-source-utils.mjs

fix(test): avoid scanning bundled source metadata

2026-05-16 09:36:04 +08:00

bundled-runtime-sidecar-paths.json

build: externalize slack openshell vertex plugins

2026-05-14 07:46:58 +01:00

callsite-guard.mjs

lint: replace proxy mutation guard with opengrep

2026-05-08 01:18:04 +10:00

changed-extensions.mjs

fix(test): avoid scanning extension ids

2026-05-16 09:08:19 +08:00

channel-contract-test-plan.mjs

ci: consolidate short CI shards

2026-05-18 06:29:14 +01:00

check-timing-summary.mjs

…

ci-node-test-plan.mjs

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

codex-app-server-protocol-source.ts

fix: sync Codex app-server protocol (#77578)

2026-05-05 00:43:07 +01:00

config-boundary-guard.d.mts

…

config-boundary-guard.mjs

fix: route plugin LLM completions through Codex runtime (#81511)

2026-05-13 21:02:28 -07:00

copy-assets.ts

…

dependency-ownership.json

Adopt Proxyline for managed proxy routing

2026-05-15 22:51:36 +01:00

deprecated-config-api-guard.d.mts

…

deprecated-config-api-guard.mjs

…

dev-tooling-safety.ts

chore(scripts): harden dev tooling diagnostics

2026-05-17 17:04:18 +08:00

direct-run.mjs

fix(scripts): run Windows check commands through shims

2026-05-23 18:30:14 +02:00

docker-build.sh

ci(crabbox): harden docker hydration

2026-05-22 13:28:53 +01:00

docker-e2e-container.sh

refactor: simplify docker e2e helpers

2026-04-29 09:09:47 +01:00

docker-e2e-image.sh

refactor: extract remaining docker e2e scenarios

2026-04-29 08:56:48 +01:00

docker-e2e-logs.sh

test: harden Docker release smoke probes

2026-04-29 08:16:17 +01:00

docker-e2e-package.sh

refactor: simplify docker e2e harness scripts

2026-04-29 08:45:42 +01:00

docker-e2e-plan.mjs

fix(ci): require live docker credentials by resource

2026-05-23 12:39:02 +02:00

docker-e2e-scenarios.mjs

fix(ci): require live docker credentials by resource

2026-05-23 12:39:02 +02:00

error-format.mjs

…

extension-import-boundary-checker.mjs

build: enable additional oxlint rules

2026-05-11 03:56:34 +01:00

extension-package-boundary.ts

Add WhatsApp live QA lane (#77704)

2026-05-05 12:09:28 -07:00

extension-source-classifier.d.mts

refactor: hide script helper internals

2026-05-02 07:22:26 +01:00

extension-source-classifier.mjs

refactor: hide script helper internals

2026-05-02 07:22:26 +01:00

extension-test-plan.mjs

fix(test): avoid walking extension test plans

2026-05-16 09:02:10 +08:00

format-generated-module.mjs

…

generated-output-utils.mjs

…

guard-inventory-utils.mjs

…

import-cycle-graph.ts

refactor: hide script entrypoint helpers

2026-05-02 08:38:07 +01:00

ios-version.ts

feat: support alpha releases

2026-05-02 18:29:13 +01:00

list-test-files.mjs

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

live-docker-auth.sh

fix(scripts): repair live docker auth shellcheck

2026-05-23 11:58:16 +02:00

live-docker-stage.sh

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

local-build-metadata-paths.d.mts

fix(build): stamp runtime postbuild artifacts

2026-04-28 07:56:08 +01:00

local-build-metadata-paths.mjs

fix(build): stamp runtime postbuild artifacts

2026-04-28 07:56:08 +01:00

local-build-metadata.d.mts

refactor: trim local build metadata facade

2026-05-02 08:39:11 +01:00

local-build-metadata.mjs

refactor: trim local build metadata facade

2026-05-02 08:39:11 +01:00

local-heavy-check-runtime.mjs

chore(lint): enable no-underscore-dangle

2026-05-18 10:26:24 +01:00

managed-child-process.mjs

fix(scripts): route check stages through managed runner

2026-05-23 21:20:52 +02:00

mintlify-accordion.mjs

fix(docs): make docs formatter mintlify-safe

2026-04-28 08:13:21 +01:00

npm-pack-budget.d.mts

refactor: hide npm pack budget helpers

2026-05-02 07:38:08 +01:00

npm-pack-budget.mjs

refactor: hide npm pack budget helpers

2026-05-02 07:38:08 +01:00

npm-publish-plan.mjs

feat: support alpha releases

2026-05-02 18:29:13 +01:00

official-external-channel-catalog.json

fix: repair source-only official plugin installs (#82425)

2026-05-15 23:04:15 -05:00

official-external-plugin-catalog.json

fix: repair source-only official plugin installs (#82425)

2026-05-15 23:04:15 -05:00

official-external-provider-catalog.json

build: externalize slack openshell vertex plugins

2026-05-14 07:46:58 +01:00

openclaw-e2e-instance.sh

fix(e2e): support macOS script wrappers

2026-05-23 08:23:31 +02:00

openclaw-test-state.mjs

fix(test): isolate auth profile secrets in test state (#81393)

2026-05-13 17:34:45 +03:00

optional-bundled-clusters-types.d.ts

refactor: hide optional bundle helpers

2026-05-02 08:35:43 +01:00

optional-bundled-clusters.d.mts

…

optional-bundled-clusters.d.ts

…

optional-bundled-clusters.mjs

fix(channels): keep matrix and mattermost bundled

2026-05-02 15:32:29 -07:00

package-dist-imports.mjs

ci: speed up package tarball validation

2026-04-29 15:56:08 +01:00

package-root-args.mjs

…

pairing-guard-context.mjs

…

plugin-clawhub-release.ts

ci(release): harden clawhub plugin publish

2026-05-04 10:09:55 +01:00

plugin-contract-test-plan.mjs

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

plugin-gateway-gauntlet.mjs

test(plugins): fail gauntlet on load diagnostics

2026-05-23 08:55:44 +02:00

plugin-npm-package-manifest.mjs

ci: fix plugin npm bundled dependency install

2026-05-23 09:22:25 +01:00

plugin-npm-release.ts

fix(plugins): require npm package compatibility metadata

2026-05-16 03:08:42 +08:00

plugin-npm-runtime-build.mjs

chore: add shrinkwrap to plugin npm packages

2026-05-22 12:56:10 +01:00

plugin-package-dependencies.mjs

chore: clean up plugin dependency leftovers

2026-05-01 21:37:08 +01:00

plugin-prerelease-test-plan.mjs

test(plugins): add kitchen sink rpc docker lane

2026-05-22 14:13:21 +02:00

plugin-sdk-deprecated-barrel-subpaths.json

refactor: reduce plugin sdk surface

2026-05-10 12:37:10 +01:00

plugin-sdk-deprecated-public-subpaths.json

fix(plugin-sdk): restore memory core alias

2026-05-14 12:50:22 +08:00

plugin-sdk-doc-metadata.ts

Doctor: add health-check contract and --lint validation (#80055)

2026-05-17 12:29:57 -07:00

plugin-sdk-entries.d.mts

refactor: reduce plugin sdk surface

2026-05-10 12:37:10 +01:00

plugin-sdk-entries.mjs

refactor: reduce plugin sdk surface

2026-05-10 12:37:10 +01:00

plugin-sdk-entrypoints.json

fix(ollama): bypass managed proxy for loopback embeddings (#85707)

2026-05-23 21:17:55 +01:00

plugin-sdk-private-local-only-subpaths.json

fix(ollama): bypass managed proxy for loopback embeddings (#85707)

2026-05-23 21:17:55 +01:00

record-shared.mjs

…

release-beta-verifier.ts

ci: keep ClawHub advisory for alpha publish

2026-05-20 01:57:00 +01:00

report-cli-helpers.mjs

chore(deadcode): dedupe repeated helpers

2026-05-21 18:47:09 +08:00

rtt-harness.ts

fix(qa): preserve RTT samples with Convex credentials

2026-05-17 02:17:35 +08:00

run-extension-oxlint.mjs

…

source-file-scan-cache.mjs

…

static-extension-assets.mjs

fix(test): avoid scanning static asset metadata

2026-05-16 09:26:56 +08:00

test-group-report.mjs

test: keep slow tests under duration cap

2026-05-18 00:26:44 +01:00

ts-guard-utils.mjs

refactor: hide tooling internals

2026-05-02 08:09:14 +01:00

tsgo-sparse-guard.mjs

fix(scripts): avoid Windows shell argv warnings

2026-05-23 20:00:24 +02:00

vitest-batch-runner.mjs

chore(lint): remove underscore-dangle allow list (#83542)

2026-05-18 14:56:06 +01:00

vitest-local-scheduling.d.mts

refactor: hide script scheduling and ios internals

2026-05-02 08:43:20 +01:00

vitest-local-scheduling.mjs

refactor: hide script scheduling and ios internals

2026-05-02 08:43:20 +01:00

vitest-report-cli-utils.mjs

…

vitest-shard-timings.mjs

refactor: hide tooling internals

2026-05-02 08:09:14 +01:00

workspace-bootstrap-smoke.mjs

refactor: trim tooling helper exports

2026-05-02 07:53:12 +01:00