ewilliams28/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-12 21:53:00 -06:00
Code Issues Packages Projects Releases Wiki Activity

feat(secrets): manage team secrets in Control UI (#121724)

Browse Source 
* feat(secrets): add gateway store settings

* perf(control-ui): trim secrets startup copy

* perf(control-ui): reduce secrets startup payload

* fix(secrets): harden store mutation refresh

* perf(control-ui): meet secrets startup budget

* test(control-ui): update secrets navigation copy

* fix(ui): pluralize secret-detection count and drop duplicated dialog hint

* chore(protocol): regenerate gateway clients and SDK baseline after rebase

* fix(gateway): merge secrets store methods after project RPCs in advertised order

* chore: leave changelog to release generation

* test(gateway): retain desktop launch train coverage
This commit is contained in:
Peter Steinberger
2026-08-11 00:20:38 -07:00
committed by GitHub
parent 8e54d696eb
commit ea06d72e85
51 changed files with 2713 additions and 94 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/cli/secrets.md
+2 -2
View File
@@ -43,7 +43,7 @@ Related: [Secrets Management](/gateway/secrets) · [1Password plugin](/plugins/o
## Shared secret store
`openclaw secrets store` writes directly to the local shared state database. The store is Gateway-wide and team-scoped; this release accepts only `--scope team`. `--scope me` is rejected because identity scope arrives with the settings UI.
`openclaw secrets store` writes directly to the local shared state database. The store is Gateway-wide and team-scoped; this release accepts only `--scope team`. `--scope me` is rejected because identity scope is not supported yet.
```bash
openclaw secrets store list
@@ -117,7 +117,7 @@ op read 'op://Engineering/service-account/dotenv' | openclaw secrets store impor
The importer supports quoted values and multiline quoted values such as PEM keys. Use `--yes` to skip confirmation and `--dry-run` to inspect the import without writing. Kind detection follows the same name-based rule as `store set`.
The store commands do not accept `--url` or `--token`; Gateway RPC methods are not part of this storage layer.
The store CLI commands do not accept `--url` or `--token` and do not route through the Gateway. The Control UI uses the admin-scoped `secrets.store.*` RPC methods instead; those methods refresh the runtime automatically when a changed name is referenced by active config.
## Reload runtime snapshot