Beer van der Drift feefedfb83 fix: allow docker cli container to connect to gateway (#12504) ...

* Docker: route CLI through gateway network namespace

* Tests: assert Docker Compose CLI namespace wiring

* Changelog: add Docker Compose CLI connectivity fix

* Docker: pin docker setup gateway mode and bind

* Tests: cover docker setup mode and bind sync

* Docs: clarify Docker LAN vs loopback gateway targeting

* Changelog: expand Docker #12504 targeting note

* Docker: default optional CLAUDE compose vars to empty

* Docs(Docker): document non-interactive compose runs

* Changelog: note docker compose env-noise reduction

* Docker: restore onboarding Tailscale guidance

* Docker: simplify onboarding output and clarify Tailscale

* Docker: harden shared-namespace CLI container

* Docs(Docker): document shared-namespace trust boundary

* Changelog: note docker shared-namespace hardening

---------

Co-authored-by: Vincent Koc <vincentkoc@ieee.org>

2026-03-01 17:28:35 -08:00

..

acp

ACP: carry dedupe/projector updates onto configurable acpx branch

2026-03-01 20:39:24 +01:00

agents

feat(agents): add sessions_spawn sandbox require mode

2026-03-02 01:27:34 +00:00

auto-reply

fix(auto-reply): land #31080 from @scoootscooob

2026-03-02 01:17:42 +00:00

browser

fix(browser): harden writable output paths

2026-03-01 23:25:13 +00:00

canvas-host

…

channels

fix(discord): unify reconnect watchdog and land #31025/#30530

2026-03-02 00:24:15 +00:00

cli

CLI: avoid plugin preload for health --json route (#31108)

2026-03-01 17:13:58 -08:00

commands

fix: handle CLI session expired errors gracefully instead of crashing gateway (#31090)

2026-03-02 01:11:05 +00:00

compat

…

config

fix(signal): prevent sentTranscript sync messages from bypassing loop protection (#31093)

2026-03-02 01:11:22 +00:00

cron

fix(gateway): prevent /api/* routes from returning SPA HTML when basePath is empty (#30333)

2026-03-01 22:23:54 +01:00

daemon

fix(gateway): shorten manual reinstall/restart delays

2026-02-28 20:46:11 -05:00

discord

refactor(web): split trusted and strict web tool fetch paths

2026-03-02 01:14:06 +00:00

docs

…

gateway

fix(security): harden root-scoped writes against symlink races

2026-03-02 01:27:46 +00:00

hooks

refactor: unify boundary hardening for file reads

2026-02-26 13:04:37 +01:00

imessage

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

infra

fix(security): harden root-scoped writes against symlink races

2026-03-02 01:27:46 +00:00

line

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

link-understanding

…

logging

refactor(diagnostics): hot-reload stuck warning threshold

2026-03-02 00:32:33 +00:00

markdown

fix(markdown): require paired || delimiters for spoiler detection (#26105)

2026-02-25 04:54:51 +00:00

media

fix: harden sandbox media reads against TOCTOU escapes

2026-03-02 01:04:01 +00:00

media-understanding

…

memory

fix(memory): discard stdout for qmd update/embed to prevent output cap failure (openclaw#28900) thanks @Glucksberg

2026-03-01 12:16:50 -06:00

node-host

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

pairing

refactor(channels): unify dm pairing policy flows

2026-02-26 22:36:20 +01:00

plugin-sdk

refactor(security): unify webhook guardrails across channels

2026-03-02 00:31:42 +00:00

plugins

fix(plugins): prioritize bundled duplicates in auto-discovery

2026-03-01 23:48:30 +00:00

process

test: harden flaky timeout and resolver specs

2026-03-01 21:30:07 +00:00

providers

…

routing

fix(core): unify session-key normalization and plugin boundary checks

2026-02-26 12:41:23 +00:00

scripts

…

secrets

test: harden flaky timeout and resolver specs

2026-03-01 21:30:07 +00:00

security

Fixes minor security vulnerability (#30948) (#30951)

2026-03-02 00:38:01 +00:00

sessions

TUI: sync /model status immediately

2026-02-28 14:02:56 -08:00

shared

Web UI: strip relevant-memories scaffolding

2026-02-28 13:20:50 -08:00

signal

fix(signal): prevent sentTranscript sync messages from bypassing loop protection (#31093)

2026-03-02 01:11:22 +00:00

slack

fix(channels): align command-body parsing sources

2026-03-01 23:11:48 +00:00

telegram

feat(diagnostics): add configurable stuck-session warning threshold

2026-03-02 00:07:29 +00:00

terminal

…

test-helpers

…

test-utils

diffs plugin

2026-02-28 18:38:00 -05:00

tts

fix(tts): use opus format and enable voice bubbles for feishu and whatsapp (#27366)

2026-02-27 23:41:22 -06:00

tui

TUI: guard SIGTERM shutdown against setRawMode EBADF

2026-02-28 14:56:01 -08:00

types

…

utils

fix(agents): add forward-compat fallback for google-gemini-cli gemini-3.1-pro/flash-preview (#26570)

2026-02-26 18:39:13 -05:00

web

refactor(security): enforce account-scoped pairing APIs

2026-02-26 21:57:52 +01:00

whatsapp

…

wizard

refactor(gateway): dedupe origin seeding and plugin route auth matching

2026-03-02 00:42:22 +00:00

channel-web.ts

…

docker-image-digests.test.ts

…

docker-setup.test.ts

fix: allow docker cli container to connect to gateway (#12504)

2026-03-01 17:28:35 -08:00

dockerfile.test.ts

fix(docker): harden /app/extensions permissions to 755 (#30191)

2026-03-01 15:45:21 -08:00

entry.ts

CLI: add root --help fast path and lazy channel option resolution (#30975)

2026-03-01 14:23:46 -08:00

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…