Jesse Merhi 2633b14914 feat(security): support operator-managed network proxy routing (#70044) ...

* feat: support operator-managed proxy routing

* docs: add network proxy changelog entry

* fix(proxy): restrict gateway bypass to loopback IPs

* fix(cli): harden container proxy URL checks

* docs(proxy): clarify gateway bypass scope

* docs: remove proxy changelog entry

* fix(proxy): clear startup CI guard failures

* fix(proxy): harden gateway proxy policy parsing

* fix(proxy): honor update shorthand proxy policy

* fix(cli): redact proxy URL suffixes

* test(proxy): keep gateway help off proxy startup

* fix(proxy): keep overlapping lifecycle active

* docs: add proxy changelog entry

---------

Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com>

2026-04-28 00:20:47 -05:00

..

acp

feat(security): support operator-managed network proxy routing (#70044)

2026-04-28 00:20:47 -05:00

agents

fix(agents): preserve trusted tool media metadata

2026-04-28 06:19:41 +01:00

auto-reply

fix(telegram): preserve streamed generated media

2026-04-28 06:19:41 +01:00

bindings

…

bootstrap

…

canvas-host

chore: update a2ui bundle hash

2026-04-27 11:10:12 +01:00

channels

refactor(plugin-sdk): remove unused reserved helper exports

2026-04-28 05:00:53 +01:00

chat

…

cli

feat(security): support operator-managed network proxy routing (#70044)

2026-04-28 00:20:47 -05:00

commands

fix(cli): respect replace mode in model picker

2026-04-28 05:26:25 +01:00

compat

…

config

feat(security): support operator-managed network proxy routing (#70044)

2026-04-28 00:20:47 -05:00

context-engine

…

crestodian

test: stabilize faster unit lanes

2026-04-28 04:09:41 +01:00

cron

fix: fail closed for invalid cron payload models

2026-04-28 04:12:54 +01:00

daemon

feat(security): support operator-managed network proxy routing (#70044)

2026-04-28 00:20:47 -05:00

docs

…

flows

fix(cli): respect replace mode in model picker

2026-04-28 05:26:25 +01:00

gateway

feat(security): support operator-managed network proxy routing (#70044)

2026-04-28 00:20:47 -05:00

hooks

[plugin sdk] Add generic plugin host-hook contracts (#72287)

2026-04-27 17:07:02 -07:00

i18n

test: reduce repeated test setup overhead

2026-04-27 13:33:05 +01:00

image-generation

test: speed media runtime specs

2026-04-28 04:53:57 +01:00

infra

feat(security): support operator-managed network proxy routing (#70044)

2026-04-28 00:20:47 -05:00

interactive

…

link-understanding

…

logging

fix: prevent channel login exec wedges

2026-04-28 05:16:43 +01:00

markdown

…

mcp

refactor(config): migrate plugin config access

2026-04-27 12:35:58 +01:00

media

refactor: expose SDK test helper subpaths

2026-04-28 03:28:17 +01:00

media-generation

test: move more runtime specs to fast lane

2026-04-28 04:23:48 +01:00

media-understanding

[Feat] Gateway: offload non-image attachments on chat.send (#67572)

2026-04-28 12:55:00 +08:00

memory

…

memory-host-sdk

fix: stabilize memory host ci tests

2026-04-28 06:00:21 +01:00

model-catalog

refactor(models): move suppressions to manifests

2026-04-28 02:38:31 +01:00

music-generation

test: move more runtime specs to fast lane

2026-04-28 04:23:48 +01:00

node-host

perf: lazy load hot test imports

2026-04-28 01:57:22 +01:00

pairing

refactor: expose SDK test helper subpaths

2026-04-28 03:28:17 +01:00

plugin-sdk

fix(gateway): use runtime config for secret-backed talk

2026-04-28 06:05:27 +01:00

plugins

fix: carry plugin compat into loader reports

2026-04-28 06:18:46 +01:00

process

refactor: expose SDK test helper subpaths

2026-04-28 03:28:17 +01:00

proxy-capture

test: move more runtime specs to fast lane

2026-04-28 04:23:48 +01:00

realtime-transcription

…

realtime-voice

feat: add browser realtime talk transports

2026-04-27 14:22:32 +01:00

routing

…

scripts

refactor: expose SDK test helper subpaths

2026-04-28 03:28:17 +01:00

secrets

test: cover trusted-proxy secret surfaces

2026-04-27 23:10:22 +01:00

security

fix(gateway): allow explicit loopback trusted proxy auth

2026-04-27 22:01:06 -07:00

sessions

…

shared

fix(agents): recover unclosed reasoning-only replies

2026-04-27 12:45:11 +01:00

status

…

tasks

fix(gateway): unblock sidecar startup

2026-04-27 21:34:44 +01:00

terminal

…

test-helpers

refactor: split channel target test helpers

2026-04-28 02:03:15 +01:00

test-utils

fix: surface npm plugin install errors

2026-04-28 01:18:02 +01:00

trajectory

fix: clean up trajectory sidecars

2026-04-27 20:58:28 +01:00

tts

refactor: share media provider asset helpers (#73142)

2026-04-28 02:44:18 +01:00

tui

refactor(config): migrate plugin config access

2026-04-27 12:35:58 +01:00

types

feat(security): support operator-managed network proxy routing (#70044)

2026-04-28 00:20:47 -05:00

utils

refactor(plugin-sdk): publish route helpers

2026-04-28 01:13:01 +01:00

video-generation

test: speed media runtime specs

2026-04-28 04:53:57 +01:00

web

…

web-fetch

…

web-search

…

wizard

[plugin sdk] Add generic plugin host-hook contracts (#72287)

2026-04-27 17:07:02 -07:00

browser-lifecycle-cleanup.test.ts

test: reduce repeated test setup overhead

2026-04-27 13:33:05 +01:00

browser-lifecycle-cleanup.ts

…

channel-web.ts

…

docker-build-cache.test.ts

test: cache dockerfile fixture reads

2026-04-27 12:42:29 +01:00

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

…

dockerfile.test.ts

refactor: expose SDK test helper subpaths

2026-04-28 03:28:17 +01:00

entry.compile-cache.test.ts

fix(cli): disable source checkout compile cache

2026-04-27 23:28:17 +01:00

entry.compile-cache.ts

fix(cli): disable source checkout compile cache

2026-04-27 23:28:17 +01:00

entry.respawn.test.ts

fix(cli): skip respawn for foreground gateway

2026-04-27 15:01:33 +01:00

entry.respawn.ts

…

entry.test.ts

perf(test): route more unit tests through fast lane

2026-04-27 17:01:16 +01:00

entry.ts

perf: improve gateway startup diagnostics

2026-04-28 01:48:00 +01:00

entry.version-fast-path.test.ts

…

entry.version-fast-path.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.ts

…

index.test.ts

…

index.ts

fix(gateway): ignore broken pipe crashes

2026-04-27 20:17:04 +01:00

install-sh-version.test.ts

test: reduce repeated test setup overhead

2026-04-27 13:33:05 +01:00

library.test.ts

perf(test): route more unit tests through fast lane

2026-04-27 17:01:16 +01:00

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

plugin-activation-boundary.test.ts

test: speed up plugin activation boundary test

2026-04-27 12:35:31 +01:00

poll-params.test.ts

refactor: move telegram poll visibility out of core

2026-04-27 12:25:57 +01:00

poll-params.ts

refactor: move telegram poll visibility out of core

2026-04-27 12:25:57 +01:00

polls.test.ts

…

polls.ts

test: guard plugin boundary classifications

2026-04-27 12:35:43 +01:00

runtime.ts

…

ui-app-settings.agents-files-refresh.test.ts

…

utils.test.ts

perf(test): route more unit tests through fast lane

2026-04-27 17:01:16 +01:00

utils.ts

…

version.test.ts

…

version.ts

…