Josh Avant 0ffcc308f2 Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417) ...

* Secrets: gate exec dry-run resolution behind --allow-exec

* Secrets: fix dry-run completeness and skipped exec audit semantics

* Secrets: require --allow-exec for exec-containing apply writes

* Docs: align secrets exec consent behavior

* Changelog: note secrets exec consent gating

2026-03-17 23:24:34 -05:00

..

acp.md

docs: fix "a OpenClaw" → "an OpenClaw" grammar across docs

2026-03-17 20:43:18 -07:00

agent.md

Models: enforce source-managed SecretRef markers in models.json (#43759)

2026-03-12 02:22:52 -05:00

agents.md

Agents: add account-scoped bind and routing commands (#27195)

2026-02-26 02:36:56 -05:00

approvals.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

backup.md

feat: add local backup CLI (#40163)

2026-03-08 16:21:20 -04:00

browser.md

Browser: support non-Chrome existing-session profiles via userDataDir (#48170)

2026-03-16 14:21:22 +01:00

channels.md

feat: add nostr setup and unify channel setup discovery

2026-03-15 19:58:22 -07:00

clawbot.md

docs: align CLI docs and help surface

2026-02-22 20:05:01 +01:00

completion.md

docs: align CLI docs and help surface

2026-02-22 20:05:01 +01:00

config.md

CLI: skip exec SecretRef dry-run resolution unless explicitly allowed (#49322)

2026-03-17 20:20:11 -05:00

configure.md

Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094)

2026-03-05 12:53:56 -06:00

cron.md

Cron: enforce cron-owned delivery contract (#40998)

2026-03-09 20:12:37 +01:00

daemon.md

secrets: harden read-only SecretRef command paths and diagnostics (#47794)

2026-03-15 21:55:24 -05:00

dashboard.md

Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094)

2026-03-05 12:53:56 -06:00

devices.md

fix(gateway): harden token fallback/reconnect behavior and docs (#42507)

2026-03-10 17:05:57 -05:00

directory.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

dns.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

docs.md

!refactor(browser): remove Chrome extension path and add MCP doctor migration (#47893)

2026-03-15 23:56:08 -07:00

doctor.md

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

gateway.md

secrets: harden read-only SecretRef command paths and diagnostics (#47794)

2026-03-15 21:55:24 -05:00

health.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

hooks.md

Infra: require explicit opt-in for prerelease npm installs (#38117)

2026-03-06 11:13:30 -05:00

index.md

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

logs.md

fix(cli): drop logs --localTime alias noise

2026-02-11 08:35:49 -05:00

memory.md

docs(cli): improve memory command examples (#31803)

2026-03-07 19:03:23 +03:00

message.md

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

models.md

Secrets: harden SecretRef-safe models.json persistence (#38955)

2026-03-07 11:28:39 -06:00

node.md

Gateway: fail closed unresolved local auth SecretRefs (#42672)

2026-03-10 21:41:56 -05:00

nodes.md

fix(gateway): clarify pairing and node auth guidance

2026-02-22 19:50:29 +01:00

onboard.md

docs: rename onboarding user-facing wizard copy

2026-03-16 19:50:31 -05:00

pairing.md

docs: refresh CLI and trusted-proxy docs

2026-02-25 02:40:12 +00:00

plugins.md

docs(plugins): deduplicate and cross-reference plugin capability docs

2026-03-17 20:43:18 -07:00

qr.md

fix: switch pairing setup codes to bootstrap tokens

2026-03-12 22:23:07 +00:00

reset.md

feat: add local backup CLI (#40163)

2026-03-08 16:21:20 -04:00

sandbox.md

test: expand ssh sandbox coverage and docs

2026-03-15 21:38:22 -07:00

secrets.md

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

security.md

docs(hooks): clarify trust model and audit guidance

2026-03-17 09:54:30 -07:00

sessions.md

docs: fix session key :dm: → :direct (#26506)

2026-03-13 14:28:33 +05:30

setup.md

docs: rename onboarding user-facing wizard copy

2026-03-16 19:50:31 -05:00

skills.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

status.md

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

system.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

tui.md

feat(tui): infer workspace agent when launching TUI (#39591)

2026-03-08 13:31:11 +03:00

uninstall.md

feat: add local backup CLI (#40163)

2026-03-08 16:21:20 -04:00

update.md

CLI: support package-manager installs from GitHub main (#47630)

2026-03-15 14:18:12 -07:00

voicecall.md

docs: fix voicecall expose disable example

2026-02-22 20:58:28 +01:00

webhooks.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00