Ayaan Zaidi b1526f4411 fix(mcp): redact secrets from /mcp show in group chats (#103396) ...

* fix(mcp): redact secrets in /mcp show replies

Prevent owner /mcp show from dumping raw headers/env credentials into
group chats. Mark MCP env values sensitive, restore redaction sentinels
on set so show→set cannot overwrite real secrets.

Fixes #103053

* test(mcp): e2e redaction of /mcp show secrets on live gateway

Spin up an ephemeral gateway process, chat.send /mcp show with live
credential-bearing config, and prove secrets never leave the reply path.
Also prove show→set sentinel restore on disk via chat and CLI.

(cherry picked from commit 08b6996cd5)

2026-07-14 02:16:01 -07:00

..

e2e/qa-lab

fix(qa): reject duplicate gateway smoke options

2026-06-23 14:52:37 +02:00

fixtures

fix(auto-reply): align channel intro wording with chat_type (#96244)

2026-06-24 12:27:04 +08:00

helpers

test(deadcode): dedupe wizard prompter helpers

2026-06-21 19:49:46 +08:00

mocks

…

proof

…

scripts

ci: bump ClawHub package publish workflow (#97909)

2026-06-29 12:31:49 -07:00

tsconfig

…

vitest

chore(deadcode): remove stale vitest coverage excludes

2026-06-22 08:20:03 +08:00

AGENTS.md

…

appcast.test.ts

fix(release): reject unsafe Sparkle build floors

2026-06-17 00:55:54 +02:00

architecture-smells.test.ts

…

CLAUDE.md

…

cli-json-stdout.e2e.test.ts

…

extension-import-boundaries.test.ts

…

extension-package-tsc-boundary.test.ts

…

extension-test-boundary.test.ts

…

gateway.multi.e2e.test.ts

…

git-hooks-pre-commit.test.ts

fix(git-hooks): avoid precommit dependency hydration

2026-06-18 20:09:48 +02:00

global-setup.ts

…

image-generation.infer-cli.live.test.ts

…

image-generation.runtime.live.test.ts

…

mcp-show-redact.e2e.test.ts

fix(mcp): redact secrets from /mcp show in group chats (#103396)

2026-07-14 02:16:01 -07:00

non-isolated-runner.ts

…

npm-publish-plan.test.ts

…

official-channel-catalog.test.ts

chore: sync yuanbao plugin catalog to 2.15.0 (#94470)

2026-06-22 18:50:07 +00:00

openclaw-launcher.e2e.test.ts

fix(memory): preserve Windows session transcript paths

2026-06-22 23:32:06 +08:00

openclaw-npm-postpublish-verify.test.ts

fix(release): surface installed extension manifest errors

2026-06-23 10:26:10 +02:00

openclaw-npm-prepublish-verify.test.ts

fix(release): validate openclaw npm verifier args

2026-06-20 22:03:38 +02:00

openclaw-npm-release-check.test.ts

fix(release): wrap bare Windows npm execpath

2026-06-19 07:55:33 +02:00

openclaw-prepack.test.ts

…

package-manager-config.test.ts

fix(install): skip llama cpp native build by default

2026-06-23 12:58:41 +08:00

package-scripts.test.ts

fix(sdk): raise plugin SDK usage heap

2026-06-16 23:59:29 +02:00

plugin-clawhub-release.test.ts

fix(release): validate plugin clawhub publish args

2026-06-20 21:53:59 +02:00

plugin-extension-import-boundary.test.ts

…

plugin-npm-package-manifest.test.ts

fix(release): harden plugin package preflight

2026-06-15 14:23:57 +08:00

plugin-npm-release.test.ts

fix(release): guard plugin release cli values

2026-06-20 03:34:41 +02:00

plugin-npm-runtime-build.test.ts

…

qa-convex-credential-payload-validation.test.ts

…

release-check.test.ts

fix(release): reject unsafe pack tarball names

2026-06-17 02:42:56 +02:00

setup-home-isolation.test.ts

…

setup-openclaw-runtime.ts

…

setup.extensions.ts

…

setup.shared.ts

…

setup.ts

…

stable-release-closeout.test.ts

fix(release): reject zero correction tags

2026-06-20 19:30:26 +02:00

test-env.test.ts

…

test-env.ts

…

test-helper-extension-import-boundary.test.ts

…

tsconfig.json

…

ui.presenter-next-run.test.ts

…

vitest-boundary-config.test.ts

…

vitest-light-paths.test.ts

…

vitest-performance-config.test.ts

…

vitest-projects-config.test.ts

perf(ci): isolate Docker tooling tests

2026-06-11 18:13:36 +09:00

vitest-scoped-config.test.ts

test(vitest): align scoped-config expectation with usage-bar shard include

2026-06-13 15:25:14 +05:30

vitest-ui-package-config.test.ts

…

vitest-unit-config.test.ts

…

vitest-unit-fast-config.test.ts

test: route broad flow tests out of unit-fast (#95499)

2026-06-20 23:22:39 -07:00

vitest-unit-paths.test.ts

…

web-provider-boundary.test.ts

…