@lark-apaas/openclaw-scripts-diagnose-cli 0.1.1-alpha.31 → 0.1.1-alpha.32

package/dist/index.cjs

@@ -869,12 +869,17 @@ let GatewayRule = class GatewayRule extends DiagnoseRule {
 		_GatewayRule = this;
 	}
 	static DEFAULT_PORT = 18789;
+	static DEFAULT_MODE = "local";
+	static DEFAULT_BIND = "loopback";
 	static DEFAULT_AUTH_MODE = "token";
 	static DEFAULT_AUTH_TOKEN = {
 		source: "file",
 		provider: "miaoda-secret-provider",
 		id: "/gateway_auth_token"
 	};
+	/** Required entries in gateway.trustedProxies. Repair appends any missing
+	*  entries while preserving caller-added extras (no overwrite). */
+	static DEFAULT_TRUSTED_PROXIES = ["::1", "127.0.0.1"];
 	validate(ctx) {
 		const gateway = ctx.config.gateway;
 		if (!gateway || typeof gateway !== "object") return {
@@ -886,6 +891,14 @@ let GatewayRule = class GatewayRule extends DiagnoseRule {
 			pass: false,
 			message: "gateway.port mismatch: got " + gw.port + ", expected " + _GatewayRule.DEFAULT_PORT
 		};
+		if (gw.mode !== _GatewayRule.DEFAULT_MODE) return {
+			pass: false,
+			message: "gateway.mode mismatch: got " + gw.mode + ", expected " + _GatewayRule.DEFAULT_MODE
+		};
+		if (gw.bind !== _GatewayRule.DEFAULT_BIND) return {
+			pass: false,
+			message: "gateway.bind mismatch: got " + gw.bind + ", expected " + _GatewayRule.DEFAULT_BIND
+		};
 		const auth = gw.auth;
 		if (!auth || typeof auth !== "object") return {
 			pass: false,
@@ -920,10 +933,22 @@ let GatewayRule = class GatewayRule extends DiagnoseRule {
 			pass: false,
 			message: "gateway.controlUi.dangerouslyDisableDeviceAuth must be true, got " + controlUi.dangerouslyDisableDeviceAuth
 		};
+		const proxies = gw.trustedProxies;
+		if (!Array.isArray(proxies)) return {
+			pass: false,
+			message: "gateway.trustedProxies missing or not an array"
+		};
+		const missing = _GatewayRule.DEFAULT_TRUSTED_PROXIES.filter((p) => !proxies.includes(p));
+		if (missing.length > 0) return {
+			pass: false,
+			message: "gateway.trustedProxies missing: " + JSON.stringify(missing)
+		};
 		return { pass: true };
 	}
 	repair(ctx) {
 		setNestedValue(ctx.config, ["gateway", "port"], _GatewayRule.DEFAULT_PORT);
+		setNestedValue(ctx.config, ["gateway", "mode"], _GatewayRule.DEFAULT_MODE);
+		setNestedValue(ctx.config, ["gateway", "bind"], _GatewayRule.DEFAULT_BIND);
 		setNestedValue(ctx.config, [
 			"gateway",
 			"auth",
@@ -939,6 +964,14 @@ let GatewayRule = class GatewayRule extends DiagnoseRule {
 			"controlUi",
 			"dangerouslyDisableDeviceAuth"
 		], true);
+		const gw = ctx.config.gateway ?? {};
+		const current = Array.isArray(gw.trustedProxies) ? gw.trustedProxies.slice() : [];
+		const seen = new Set(current.map((v) => String(v)));
+		for (const p of _GatewayRule.DEFAULT_TRUSTED_PROXIES) if (!seen.has(p)) {
+			current.push(p);
+			seen.add(p);
+		}
+		setNestedValue(ctx.config, ["gateway", "trustedProxies"], current);
 	}
 };
 GatewayRule = _GatewayRule = __decorate([Rule({
@@ -2762,7 +2795,7 @@ async function runDoctor(rawCtx, opts) {
 //#region src/help.ts
 const BIN = "mclaw-diagnose";
 function versionBanner() {
-	return `v0.1.1-alpha.31`;
+	return `v0.1.1-alpha.32`;
 }
 const COMMANDS = [
 	{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/openclaw-scripts-diagnose-cli",
-  "version": "0.1.1-alpha.31",
+  "version": "0.1.1-alpha.32",
   "description": "CLI for OpenClaw config diagnose and repair with JSON5 support",
   "main": "dist/index.cjs",
   "bin": {