Peter Steinberger f274f1bc95 fix: prevent CLI MCP children from widening sandbox tools (#103822) ...

* fix(gateway): bind CLI MCP grants to context

* chore: leave release changelog ownership intact

(cherry picked from commit 5c260940bd)

2026-07-14 02:18:05 -07:00

..

security

fix(security): audit open dm tool exposure (#92883)

2026-06-16 14:38:39 +08:00

authentication.md

docs: clarify legacy openai-codex auth (#90028)

2026-06-03 16:18:51 -07:00

background-process.md

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

bonjour.md

fix(gateway): honor minimal discovery mode for wide-area DNS-SD [AI] (#80903)

2026-05-12 16:03:50 +05:30

bridge-protocol.md

fix: stop denied exec followups (#85194)

2026-05-22 08:48:19 +01:00

cli-backends.md

fix: prevent CLI MCP children from widening sandbox tools (#103822)

2026-07-14 02:18:05 -07:00

config-agents.md

docs: document local avatar file size limit (#78884)

2026-06-23 02:17:04 +00:00

config-channels.md

feat(channels): add directUserId support for per-DM model override (#95120)

2026-06-22 17:26:01 +00:00

config-tools.md

feat(plugins): externalize official provider batch

2026-06-19 01:05:52 +08:00

configuration-examples.md

fix: gate Skill Workshop symlink writes

2026-06-11 15:20:38 +01:00

configuration-reference.md

docs(diagnostics): document blocked-tool recovery floor

2026-07-14 01:48:48 -07:00

configuration.md

feat: harden ios app store push release mode

2026-06-23 00:01:20 -05:00

diagnostics.md

fix(gateway): capture opt-in memory pressure snapshots (#82674)

2026-05-16 21:52:09 +01:00

discovery.md

docs: typography hygiene + 2 in-body H1 removals across 5 pages

2026-05-05 21:01:44 -07:00

doctor.md

fix(imessage): keep split-send coalescing opt-in (#93143)

2026-06-21 17:12:21 -07:00

external-apps.md

docs: clarify external app integration path

2026-06-09 14:56:17 +09:00

gateway-lock.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

health.md

docs(gateway): add uptime monitoring guidance to health check docs (fixes #55768) (#92608)

2026-06-13 02:59:18 -05:00

heartbeat.md

fix(auto-reply): skip commented heartbeat scaffolding

2026-06-04 17:03:40 -07:00

index.md

fix(daemon): keep systemd gateway running after child OOM (#93585)

2026-06-22 18:54:21 +00:00

local-model-services.md

docs: add ds4 provider guide

2026-05-13 14:45:34 +01:00

local-models.md

fix(agents): compact lean local tool catalogs

2026-06-08 10:33:41 +09:00

logging.md

refactor: unify OpenAI provider identity

2026-05-30 11:48:41 +02:00

multiple-gateways.md

fix(gateway): dedupe probe warnings by gateway identity (#85791)

2026-06-05 10:23:12 -07:00

network-model.md

docs: consolidate moved docs pages

2026-05-05 17:38:21 +01:00

openai-http-api.md

fix(gateway): block internal HTTP session overrides

2026-06-16 09:30:27 +08:00

openresponses-http-api.md

fix(gateway): enforce OpenAI tool_choice contracts

2026-05-31 15:02:29 +01:00

openshell.md

build: externalize slack openshell vertex plugins

2026-05-14 07:46:58 +01:00

opentelemetry.md

Add stdout diagnostics OTEL log exporter

2026-06-19 16:06:37 +10:00

operator-scopes.md

fix(gateway): require admin for device role approvals (#87146)

2026-05-27 08:08:51 -07:00

pairing.md

fix(gateway): remove device-backed node pairings (#90373)

2026-06-19 22:04:16 +01:00

prometheus.md

fix(diagnostics): expose missing telemetry signals (#86682)

2026-05-26 01:10:59 +01:00

protocol.md

feat: forward-port fast talks auto mode (#85104)

2026-06-22 09:37:09 +08:00

remote-gateway-readme.md

docs: sentence-case sweep across 4 more pages

2026-04-27 00:01:52 -07:00

remote.md

feat: add native mac dashboard window

2026-05-16 23:49:18 +01:00

sandbox-vs-tool-policy-vs-elevated.md

fix(agents): audit tool policy blocks (#85673)

2026-05-23 16:43:29 +08:00

sandboxing.md

fix: make sandbox skills readable in writable sandboxes

2026-06-07 13:47:56 -07:00

secrets-plan-contract.md

docs: document secrets provider plan fields

2026-05-22 17:59:05 +01:00

secrets.md

fix(secrets): explicitly pass BWS_SERVER_URL to resolver for self-hosted instances (#93929)

2026-06-17 22:04:48 +08:00

tailscale.md

feat(gateway): support Tailscale Serve service names

2026-05-31 20:05:02 +01:00

tools-invoke-http-api.md

fix: gate owner-only HTTP tools (#90261)

2026-06-07 17:26:12 -05:00

troubleshooting.md

docs: fix two broken cross-reference anchors (#93941)

2026-06-19 20:27:25 +01:00

trusted-proxy-auth.md

docs: clarify trusted-proxy websocket scopes (#85950)

2026-06-09 12:40:12 -07:00