Cherry-pick: Gateway fixes and improvements #674
Description
Context
Upstream OpenClaw commits fixing gateway session handling, routing, health checks,
HTTP improvements, and WebSocket fixes.
28 commits from upstream scan window 501-1000.
Upstream Commits
| Hash | Subject |
|---|---|
a8bcad3db |
fix(gateway): canonicalize notification wake session |
6a16e7bb3 |
fix(gateway): skip heartbeat wake on deduped notifications |
d123ade0c |
fix(gateway): allow required Google Fonts origins in Control UI CSP (openclaw#29279) |
8ae1987f2 |
fix(cron): pass heartbeat target=last for main-session cron jobs (openclaw#28508) (openclaw#28583) |
81d215afa |
fix(cron): narrow agentEntry type for heartbeat merge |
62179c861 |
Update server-cron.ts |
9868d5cd8 |
Gateway: allow control-ui session deletion |
ea4f5106e |
chore(gateway): guard cron agent heartbeat type |
0929c233d |
TUI: sync /model status immediately |
2050fd753 |
Cron: preserve session scope for main-target reminders |
62a7683ce |
fix(cron): add audit logging for job create/update/remove (openclaw#25090) thanks @MoerAI |
f902697bd |
feat(cron): add payload.fallbacks for per-job model fallback override (openclaw#26120) (openclaw#26304) |
4637b90c0 |
feat(cron): configurable failure alerts for repeated job errors (openclaw#24789) thanks @0xbrak |
a28a4b1b6 |
feat: detect stale Slack sockets and auto-restart (openclaw#30153) |
c1428e8df |
fix(gateway): prevent /api/* routes from returning SPA HTML when basePath is empty (openclaw#30333) |
4c43fccb3 |
feat(agents): use structured internal completion events |
41cc46bbb |
feat(diagnostics): add configurable stuck-session warning threshold |
53d10f868 |
fix(gateway): land access/auth/config migration cluster |
0eac494db |
fix(gateway): harden node metadata policy classification |
9005e8bc0 |
refactor(gateway): unify metadata canonicalization + platform rules |
58659b931 |
fix(gateway): enforce owner boundary for agent runs |
68832f203 |
refactor(diagnostics): hot-reload stuck warning threshold |
cef5fae0a |
refactor(gateway): dedupe origin seeding and plugin route auth matching |
1636f7ff5 |
fix(gateway): support wildcard in controlUi.allowedOrigins for remote access (openclaw#31088) |
710004e01 |
fix(security): harden root-scoped writes against symlink races |
904016b7d |
fix(origin-check): honour "*" wildcard in gateway.controlUi.allowedOrigins |
c13b35b83 |
feat(telegram): improve DM topics support (openclaw#30579) (thanks @kesor) |
8e69fd80e |
Gateway: harden control-ui vs plugin HTTP precedence |
Adaptation Notes
- Gateway layer is KEEP — files exist unchanged or with rebrand modifications
- Check for
openclawreferences in new code that need rebrand