Skip to content

fix(podman): source .env before evaluating GATEWAY_BIND#5

Merged
gambletan merged 35 commits intomainfrom
fix/38810-podman-env-bind
Mar 7, 2026
Merged

fix(podman): source .env before evaluating GATEWAY_BIND#5
gambletan merged 35 commits intomainfrom
fix/38810-podman-env-bind

Conversation

@gambletan
Copy link
Copy Markdown
Owner

The OPENCLAW_GATEWAY_BIND setting in .env was being ignored because GATEWAY_BIND was evaluated before the .env file was sourced. This caused the gateway to always start with --bind loopback regardless of the user's configuration.

Fix: Move .env sourcing to happen before GATEWAY_BIND evaluation.

Closes openclaw#38810

vincentkoc and others added 30 commits March 6, 2026 21:59
…al routes (openclaw#38418)

* fix(gateway): prevent webchat messages from cross-routing to external channels

chat.send always originates from the webchat/control-UI surface.  Previously,
channel-scoped session keys (e.g. agent:main:slack:direct:U…) caused
OriginatingChannel to inherit the session's stored external route, so the
reply dispatcher would route responses to Slack/Telegram instead of back to
the gateway connection.  Remove the route-inheritance logic from chat.send and
always set OriginatingChannel to INTERNAL_MESSAGE_CHANNEL ("webchat").

Closes openclaw#34647

Made-with: Cursor

* Gateway: preserve configured-main connect gating

* Gateway: cover connect-without-client routing

* Gateway: add chat.send session key length limit

* Gateway: cap chat.send session key schema

* Gateway: bound chat.send session key parsing

* Gateway: cover oversized chat.send session keys

* Update CHANGELOG.md

---------

Co-authored-by: SidQin-cyber <[email protected]>
…#38292)

* Config: add media retention TTL setting

* Media: recurse persisted media cleanup

* Gateway: add persisted media cleanup timer

* Media: harden retention cleanup sweep

* Media: make recursive retention cleanup opt-in

* Media: retry writes after empty-dir cleanup race
…th (openclaw#38492)

* fix(googlechat): inherit shared defaults from accounts.default

* fix(googlechat): do not inherit default enabled state

* fix(googlechat): avoid inheriting default credentials

* fix(googlechat): keep dangerous auth flags account-local
…etwork errors (openclaw#38530)

Verified:
- pnpm build
- pnpm check
- pnpm test:macmini

Co-authored-by: xinhuagu <[email protected]>
Co-authored-by: Tak Hoffman <[email protected]>
* Web: add HEIC media normalization regression

* Docs: list HEIC input_image MIME types

* Update src/web/media.test.ts

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

---------

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>
…penclaw#38422)

Verified:
- pnpm build
- pnpm check
- pnpm test:macmini

Co-authored-by: xinhuagu <[email protected]>
Co-authored-by: Tak Hoffman <[email protected]>
…w#38535)

Verified:
- pnpm install --frozen-lockfile
- pnpm build
- pnpm check
- pnpm test:macmini

Co-authored-by: yfge <[email protected]>
Co-authored-by: Tak Hoffman <[email protected]>
…aw#38405)

Verified:
- pnpm build
- pnpm check
- pnpm test:macmini

Co-authored-by: ql-wade <[email protected]>
…#38643)

* fix(gateway): guard stale-socket restarts by event liveness

* fix(gateway): centralize connect-time liveness tracking

* fix(web): apply connected status patch atomically

* fix(gateway): require active socket for stale checks

* fix(gateway): ignore inherited stale event timestamps
The nodes tool was passing rawCommand: formatExecCommand(command) to
system.run.prepare, which produced the full formatted argv string
(e.g. 'powershell -Command "echo hello"'). However,
validateSystemRunCommandConsistency() recognizes shell wrappers like
powershell/bash and extracts the inner command as the 'inferred' value
(e.g. 'echo hello'). This caused a rawCommand vs inferred mismatch,
breaking all nodes run commands with shell wrappers.

The fix removes the explicit rawCommand parameter, letting the
validation correctly infer the command text from the argv array.

Fixes openclaw#33080
obviyus and others added 5 commits March 7, 2026 17:11
The OPENCLAW_GATEWAY_BIND setting in .env was being ignored because
GATEWAY_BIND was evaluated before the .env file was sourced. This
caused the gateway to always start with --bind loopback regardless
of the user's configuration.

Fix: Move .env sourcing to happen before GATEWAY_BIND evaluation.

Closes openclaw#38810
@gambletan gambletan merged commit e56603d into main Mar 7, 2026
2 of 9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bug(podman): OPENCLAW_GATEWAY_BIND in .env ignored — gateway always starts with --bind loopback

9 participants