fix(openclaw): bind gateway to loopback interface

go/core/pkg/sandboxbackend/openshell/openclaw/bootstrap.go

@@ -59,6 +59,7 @@ func buildCoreBootstrapDocument(mc *v1alpha2.ModelConfig, gwPort int, apiKeyEnv,
 	return bootstrapDocument{
 		Gateway: gatewaySection{
 			Mode: "local",
+			Bind: "loopback",
 			Auth: gatewayAuth{Mode: "none"},
 			Port: gwPort,
 		},

go/core/pkg/sandboxbackend/openshell/openclaw/bootstrap_test.go

@@ -100,6 +100,8 @@ func TestBuildBootstrapJSON_OpenAIAndTelegram(t *testing.T) {
 	var root map[string]any
 	require.NoError(t, json.Unmarshal(raw, &root))
 	require.Contains(t, root, "gateway")
+	gw := root["gateway"].(map[string]any)
+	require.Equal(t, "loopback", gw["bind"])
 	require.Contains(t, root, "models")
 	require.Contains(t, root, "agents")
 	models := root["models"].(map[string]any)

go/core/pkg/sandboxbackend/openshell/openclaw/types.go

@@ -13,6 +13,7 @@ type bootstrapDocument struct {
 
 type gatewaySection struct {
 	Mode string      `json:"mode"`
+	Bind string      `json:"bind"`
 	Auth gatewayAuth `json:"auth"`
 	Port int         `json:"port"`
 }