openclaw/src/proxy-capture
Jesse Merhi f42a2c738c
fix: guard debug proxy CONNECT under managed proxy (#77010)
Summary:
- The PR adds a managed-proxy-aware debug proxy direct-upstream guard, a diagnostics override env var, regression tests, docs, and a changelog entry.
- Reproducibility: yes. Source inspection on current main shows direct HTTP forwarding and CONNECT net.connect() can run while managed proxy mode is active, against the documented managed-proxy egress guardrail.

Automerge notes:
- Ran the ClawSweeper repair loop before final review.
- Included post-review commit in the final squash: fix(clawsweeper): address review for automerge-openclaw-openclaw-7701…

Validation:
- ClawSweeper review passed for head aaa52a7f5f.
- Required merge gates passed before the squash merge.

Prepared head SHA: aaa52a7f5f
Review: https://github.com/openclaw/openclaw/pull/77010#issuecomment-4367600656

Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-04 03:54:18 +00:00
..
blob-store.ts
ca.ts
coverage.test.ts
coverage.ts
env.test.ts test: speed up unit hotspot routing 2026-04-28 10:42:14 +01:00
env.ts
paths.ts refactor: trim cli helper exports 2026-05-02 07:36:54 +01:00
proxy-server.managed-proxy.test.ts fix: guard debug proxy CONNECT under managed proxy (#77010) 2026-05-04 03:54:18 +00:00
proxy-server.test.ts
proxy-server.ts fix: guard debug proxy CONNECT under managed proxy (#77010) 2026-05-04 03:54:18 +00:00
runtime.test.ts test: move more runtime specs to fast lane 2026-04-28 04:23:48 +01:00
runtime.ts test: move more runtime specs to fast lane 2026-04-28 04:23:48 +01:00
store.sqlite.test.ts
store.sqlite.ts fix(sqlite): bound WAL sidecar growth 2026-04-27 12:25:10 +01:00
types.ts