From 5871d118ad91fcde3248e0d85f54b2090c52c3fa Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Fri, 29 May 2026 10:04:38 +0100
Subject: [PATCH] fix: restore package CI after net policy split

---
 config/knip.config.ts                 |  4 ++++
 npm-shrinkwrap.json                   | 10 ----------
 package.json                          |  1 -
 pnpm-lock.yaml                        |  3 ---
 scripts/lib/dependency-ownership.json |  5 -----
 test/vitest/vitest.shared.config.ts   | 12 ++++++++++++
 6 files changed, 16 insertions(+), 19 deletions(-)

diff --git a/config/knip.config.ts b/config/knip.config.ts
index 7b77be7572f4..6533c55e8ac6 100644
--- a/config/knip.config.ts
+++ b/config/knip.config.ts
@@ -176,6 +176,10 @@ const config = {
       entry: ["src/index.ts!", "src/schema.ts!"],
       project: ["src/**/*.ts!"],
     },
+    "packages/net-policy": {
+      entry: ["src/index.ts!", "src/ip.ts!"],
+      project: ["src/**/*.ts!"],
+    },
     "packages/speech-core": {
       entry: ["api.ts!", "runtime-api.ts!", "speaker.ts!", "voice-models.ts!"],
       project: ["**/*.ts!"],
diff --git a/npm-shrinkwrap.json b/npm-shrinkwrap.json
index 190edb58091b..7e6f5e5d90da 100644
--- a/npm-shrinkwrap.json
+++ b/npm-shrinkwrap.json
@@ -41,7 +41,6 @@
         "highlight.js": "11.11.1",
         "hosted-git-info": "9.0.3",
         "ignore": "7.0.5",
-        "ipaddr.js": "2.4.0",
         "jiti": "2.7.0",
         "json5": "2.2.3",
         "jszip": "3.10.1",
@@ -2330,15 +2329,6 @@
         "node": ">= 12"
       }
     },
-    "node_modules/ipaddr.js": {
-      "version": "2.4.0",
-      "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-2.4.0.tgz",
-      "integrity": "sha512-9VGk3HGanVE6JoZXHiCpnGy5X0jYDnN4EA4lntFPj+1vIWlFhIylq2CrrCOJH9EAhc5CYhq18F2Av2tgoAPsYQ==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 10"
-      }
-    },
     "node_modules/is-fullwidth-code-point": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
diff --git a/package.json b/package.json
index 2476f495f3e4..3df42afa8145 100644
--- a/package.json
+++ b/package.json
@@ -1849,7 +1849,6 @@
     "highlight.js": "11.11.1",
     "hosted-git-info": "9.0.3",
     "ignore": "7.0.5",
-    "ipaddr.js": "2.4.0",
     "jiti": "2.7.0",
     "json5": "2.2.3",
     "jszip": "3.10.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d952a19619b9..e324fede5ab5 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -134,9 +134,6 @@ importers:
       ignore:
         specifier: 7.0.5
         version: 7.0.5
-      ipaddr.js:
-        specifier: 2.4.0
-        version: 2.4.0
       jiti:
         specifier: 2.7.0
         version: 2.7.0
diff --git a/scripts/lib/dependency-ownership.json b/scripts/lib/dependency-ownership.json
index cf3d3748dd2a..a8ca995aa95a 100644
--- a/scripts/lib/dependency-ownership.json
+++ b/scripts/lib/dependency-ownership.json
@@ -72,11 +72,6 @@
       "class": "core-runtime",
       "risk": ["network", "proxy"]
     },
-    "ipaddr.js": {
-      "owner": "core:ssrf-guard",
-      "class": "core-runtime",
-      "risk": ["network-policy"]
-    },
     "jiti": {
       "owner": "core:plugin-loader",
       "class": "core-runtime",
diff --git a/test/vitest/vitest.shared.config.ts b/test/vitest/vitest.shared.config.ts
index 620c11d98c9e..38acfec0aa92 100644
--- a/test/vitest/vitest.shared.config.ts
+++ b/test/vitest/vitest.shared.config.ts
@@ -173,6 +173,18 @@ export const sharedVitestConfig = {
         find: "@openclaw/whatsapp/api.js",
         replacement: path.join(repoRoot, "extensions", "whatsapp", "api.ts"),
       },
+      {
+        find: "@openclaw/gateway-client/readiness",
+        replacement: path.join(repoRoot, "packages", "gateway-client", "src", "readiness.ts"),
+      },
+      {
+        find: "@openclaw/gateway-client/timeouts",
+        replacement: path.join(repoRoot, "packages", "gateway-client", "src", "timeouts.ts"),
+      },
+      {
+        find: "@openclaw/gateway-client",
+        replacement: path.join(repoRoot, "packages", "gateway-client", "src", "index.ts"),
+      },
       {
         find: "@openclaw/gateway-protocol/client-info",
         replacement: path.join(repoRoot, "packages", "gateway-protocol", "src", "client-info.ts"),