Summary

• repairs and finalizes fix(gateway): block internal HTTP session overrides #55789 in place, preserving @RichardCao's contribution
• rejects explicit x-openclaw-session-key overrides for reserved internal namespaces on OpenAI-compatible and OpenResponses HTTP paths
• keeps normal custom session keys and unexpected context/config failures on their existing server-error path

Credit

This continues the implementation from #55789 by @RichardCao. Related prior gateway-boundary work in #45344 by @spence27 informed the review context but is not being merged here.

Validation

• pnpm exec vitest run src/gateway/http-utils.request-context.test.ts src/gateway/openai-http.test.ts src/gateway/openresponses-http.test.ts
• pnpm check:changed
• Codex /review must pass cleanly after repair
• Include real behavior proof for the OpenAI/OpenResponses HTTP rejection path before merge

Clownfish 🐠 replacement reef notes:

• Cluster: ghcrawl-156813-autonomous-smoke
• Source PRs: fix(gateway): block internal HTTP session overrides #55789
• Credit: Repair source PR fix(gateway): block internal HTTP session overrides #55789 by @RichardCao in place; preserve author credit in the merge commit/PR finalization notes.; Mention that fix(gateway): reject unknown agent IDs on OpenAI + OpenResponses HTTP paths #45344 by @spence27 covered a related gateway HTTP boundary direction but is not the canonical fix for this session-key override cluster.; Do not reuse fix(gateway): block internal session history over HTTP #55928 or fix(gateway): allow bearer-auth session history reads #81815 as automation candidates; they are routed security-sensitive/context refs and only linked as historical session-history context.
• Validation: pnpm exec vitest run src/gateway/http-utils.request-context.test.ts src/gateway/openai-http.test.ts src/gateway/openresponses-http.test.ts; pnpm check:changed
• Repair fallback: source PR fix(gateway): block internal HTTP session overrides #55789 is a fork branch requiring rebase; use replacement branch because GitHub App pushes to contributor forks can be rejected when rebased upstream history includes workflow files

fish notes: model gpt-5.5, reasoning medium; reviewed against b18a288.