From 94f5827c6e1d130edd007d9389ad39795b4da459 Mon Sep 17 00:00:00 2001 From: Vincent Koc Date: Mon, 27 Apr 2026 15:39:37 -0700 Subject: [PATCH] docs(logging): note Control UI tool payload redaction Document the redaction surface added in f3e8c50df3: custom logging.redactPatterns now apply to Control UI tool start args, partial/final result payloads, derived exec output, and patch summaries on top of the built-in defaults. --- docs/logging.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/logging.md b/docs/logging.md index 68f44e3d8e7..a782d3acaa3 100644 --- a/docs/logging.md +++ b/docs/logging.md @@ -207,10 +207,12 @@ OTEL model-call spans/metrics when diagnostics export is enabled. ### Redaction OpenClaw can redact sensitive tokens before they hit console output, file logs, -OTLP log records, or persisted session transcript text: +OTLP log records, persisted session transcript text, or Control UI tool +event payloads (tool start args, partial/final result payloads, derived +exec output, and patch summaries): - `logging.redactSensitive`: `off` | `tools` (default: `tools`) -- `logging.redactPatterns`: list of regex strings to override the default set +- `logging.redactPatterns`: list of regex strings to override the default set. Custom patterns apply on top of the built-in defaults for Control UI tool payloads, so adding a pattern never weakens redaction of values already caught by the defaults. File logs and session transcripts stay JSONL, but matching secret values are masked before the line or message is written to disk. Redaction is best-effort: