mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-19 09:01:39 -06:00
d92ebbaf72
* feat(gateway): reach a Gateway behind an identity-aware proxy from the CLI Operator CLI surfaces (tui, attach, call, probe, onboarding, and configure) can present configured gateway.remote.edgeAuth headers to an identity-aware proxy. Headers are origin-bound, WSS-only, never follow redirects, cannot set transport-owned headers, and are redacted. Identity-proxy upgrade rejections are classified and remediated instead of being reported as an unreachable gateway. * test(gateway): cover config-aware probe calls Keep status probe expectations aligned with the resolved configuration forwarded for origin-bound edge-auth resolution. * fix(gateway): preserve edge auth across wizard saves and enforce wss before secret resolution Preserve gateway.remote.edgeAuth only when the configured Gateway scope is unchanged, and reject non-WSS targets before resolving any edge-auth SecretInput.