Peter Steinberger 0d14434d0e feat(secrets): add explicit protected and agent-readable access (#126088) ...

* feat(secrets): add explicit agent access modes

Distinguish protected write-only secrets from agent-readable Gateway environment values, expose policy-bound Gateway exec aliases to Codex, and activate Node environment proxy support for destination-bound egress.\n\nCloses #125975

* fix(gateway): bind lifecycle dispatch to owning instance

* test(ui): preserve mock gateway recovery state

* fix(codex): avoid unavailable gateway process guidance

* fix(harness): keep run correlation host-owned

* fix(gateway): bind restart delivery to instance

* test(codex): construct tools through test host capability

2026-08-18 22:51:15 -07:00

..

acp.md

feat(docs-ci): validate docs config examples against the schema (#121336)

2026-08-10 07:57:56 -07:00

agent.md

fix(cli): exit non-zero when an agent turn fails (#125557)

2026-08-17 21:31:25 -07:00

agents.md

fix(agents): finalize guided creation safely (#125768)

2026-08-18 08:50:01 -07:00

approvals.md

feat(cli): support --json across reporting commands (#117928)

2026-08-02 02:56:08 -07:00

attach.md

feat: continue dashboard sessions from CLI URLs (#120893)

2026-08-09 16:44:25 -07:00

audit.md

fix(gateway): bound audit and Codex backlogs (#126154)

2026-08-18 21:44:09 -07:00

backup.md

fix: restore default-profile backup archives (#123504)

2026-08-14 01:39:08 -07:00

browser.md

fix(browser): support Chrome Web Store native bootstrap (#124775)

2026-08-16 14:20:47 -07:00

channels.md

fix(cli): honor channel resolve agent ownership (#125109)

2026-08-16 23:50:52 -07:00

clawbot.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

claws.md

fix(claws): recover lifecycle state safely (#123254)

2026-08-14 20:52:45 -07:00

completion.md

docs(completion): document ZDOTDIR profile path (#125247)

2026-08-17 04:31:21 -07:00

config.md

docs(config): clarify missing unset behavior (#126036)

2026-08-18 14:55:19 -07:00

configure.md

feat(models): make per-agent allowlists explicit (#110888)

2026-07-18 21:42:05 +01:00

connect.md

feat(cli): prepare session-host onboarding (#125879)

2026-08-18 16:08:48 -07:00

crestodian.md

feat(setup): rename Crestodian to OpenClaw system agent

2026-07-14 11:03:02 -07:00

cron.md

fix(cron): required delivery failures no longer report success (#126164)

2026-08-18 22:44:33 -07:00

daemon.md

refactor(config): purge numeric tuning knobs behind built-in defaults (#111382)

2026-07-19 07:35:45 -07:00

dashboard.md

docs: document control ui owner handoff

2026-08-06 02:21:45 +01:00

devices.md

fix: make gateway token recovery usable from macOS onboarding (#118051)

2026-08-02 10:06:50 -07:00

directory.md

fix(cli): explain empty directory lookups (#124753)

2026-08-16 12:39:36 -07:00

dns.md

docs: replace retired config keys with canonical schema keys (#121330)

2026-08-09 20:30:43 -07:00

docs.md

feat(cli): support --json across reporting commands (#117928)

2026-08-02 02:56:08 -07:00

doctor.md

fix(agents): standardize image inspection as view_image (#125024)

2026-08-17 03:01:12 -07:00

fleet.md

refactor(fs): adopt fs-safe 0.5 core primitives (#113705)

2026-07-28 03:41:47 -04:00

flows.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

gateway.md

fix: model setup detects CLI logins when AI access checks time out (#125114)

2026-08-17 02:27:18 -07:00

health.md

fix(delivery): keep failed queue rows payload-free (#123642)

2026-08-14 06:22:51 -07:00

hooks.md

fix(cli): allow hook toggles to select an agent (#124761)

2026-08-16 12:11:44 -07:00

index.md

fix(cli): emit one JSON failure contract for --json invocations (#124849)

2026-08-16 15:09:58 -07:00

infer.md

fix(cli): infer provider lists respect selected agent (#123884)

2026-08-14 16:45:37 -07:00

logs.md

fix(logging): give non-default profiles their own gateway log file (#112777)

2026-07-22 19:08:41 -04:00

mcp.md

fix(gateway): reject unattributable loopback proxy traffic [AI] (#119950)

2026-08-16 21:01:20 -07:00

memory.md

fix(memory): report truthful index outcomes (#123863)

2026-08-14 17:17:16 -07:00

message.md

fix(slack): preserve original bytes for forced media (#122667)

2026-08-12 23:32:32 +08:00

migrate.md

fix(codex): guide recovery from unimported agent auth (#116807)

2026-08-01 07:08:02 -06:00

models.md

fix(models): reject unknown providers when setting a default model (#125558)

2026-08-17 21:15:45 -07:00

node.md

feat(node-host): support Cloudflare Access service tokens (#125193)

2026-08-17 04:12:27 -07:00

nodes.md

docs(gateway): clarify dynamic operator scopes (#122931)

2026-08-12 19:23:54 -07:00

onboard.md

fix(onboarding): stop printing gateway token URLs (#124687)

2026-08-17 16:23:16 -07:00

openclaw.md

feat(agents): unify agent status into a durable progress_card (#125125)

2026-08-17 09:44:04 -07:00

pairing.md

feat(ui): manage DM pairing requests in Channels (#112401)

2026-07-22 04:54:20 -07:00

path.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

plugins.md

feat(security): require acknowledgement for policy warnings (#116489)

2026-08-15 03:58:45 +10:00

policy.md

fix(policy): require --agent for explicit workspaces (#123880)

2026-08-14 16:15:17 -07:00

promos.md

feat(cli): add openclaw promos to discover and claim ClawHub promotional model offers (#100236)

2026-07-07 01:10:42 -06:00

proxy.md

feat(cli): support --json across reporting commands (#117928)

2026-08-02 02:56:08 -07:00

qr.md

fix(gateway): reject unattributable loopback proxy traffic [AI] (#119950)

2026-08-16 21:01:20 -07:00

reset.md

fix(cli): refuse live state reset and uninstall (#125253)

2026-08-17 09:44:31 -07:00

resume.md

feat: continue web sessions in the terminal (#122870)

2026-08-12 17:07:48 -07:00

sandbox.md

fix(cli): preserve explicit read-only agent targets (#123868)

2026-08-14 15:39:24 -07:00

secrets.md

feat(secrets): add explicit protected and agent-readable access (#126088)

2026-08-18 22:51:15 -07:00

security.md

fix(security): warn on main-scoped group rooms (#125054)

2026-08-17 00:37:35 -07:00

sessions.md

fix(sessions): stop max-lines compaction backup leaks (#125183)

2026-08-17 02:45:20 -07:00

setup.md

docs(google): document supported auth paths

2026-07-30 22:56:26 +08:00

skills.md

fix(cli): accept inherited flags after nested subcommands (#116587)

2026-08-15 09:52:24 -07:00

status.md

fix(status): keep explicit fleets ownerless in diagnostics (#123831)

2026-08-14 14:54:52 -07:00

system.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

tasks.md

fix: make subagent completion delivery durable

2026-08-03 02:48:34 -05:00

transcripts.md

fix(discord): bind transcript capture to source account [AI] (#118579)

2026-08-15 12:10:43 -07:00

tui.md

feat(gateway): reach a Gateway behind an identity-aware proxy from the CLI (#125700)

2026-08-18 03:29:56 -07:00

uninstall.md

fix(install): avoid success after incomplete lifecycle changes (#125992)

2026-08-18 20:50:15 -07:00

update.md

fix: stop --tag main from failing during npm pack (#125949)

2026-08-18 12:22:45 -07:00

voicecall.md

fix(voice-call): keep Funnel off occupied HTTPS ports (#125552)

2026-08-17 21:04:17 -07:00

webhooks.md

docs(security): add safe Gmail reader setup (#116041)

2026-07-29 15:07:35 -04:00

wiki.md

fix(wiki): accept --agent for agent-scoped vaults (#117943)

2026-08-02 03:33:15 -07:00

workboard.md

fix(workboard): avoid duplicate proof entries on completion (#111324)

2026-07-19 03:00:37 -07:00

worker.md

fix(worker): preserve scheduled tool authority

2026-07-24 01:24:03 -05:00