Josh Avant 788f56f30f Secrets: hard-fail unsupported SecretRef policy and fix gateway restart token drift (#58141) ...

* Secrets: enforce C2 SecretRef policy and drift resolution

* Tests: add gateway auth startup/reload SecretRef runtime coverage

* Docs: sync C2 SecretRef policy and coverage matrix

* Config: hard-fail parent SecretRef policy writes

* Secrets: centralize unsupported SecretRef policy metadata

* Daemon: test service-env precedence for token drift refs

* Config: keep per-ref dry-run resolvability errors

* Docs: clarify config-set parent-object policy checks

* Gateway: fix drift fallback and schema-key filtering

* Gateway: align drift fallback with credential planner

* changelog

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

---------

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

2026-03-31 02:37:31 -05:00

..

acp.md

fix: harden ACP plugin tools bridge (#56867) (thanks @joe2643)

2026-03-30 05:09:59 +09:00

agent.md

Models: enforce source-managed SecretRef markers in models.json (#43759)

2026-03-12 02:22:52 -05:00

agents.md

Agents: add account-scoped bind and routing commands (#27195)

2026-02-26 02:36:56 -05:00

approvals.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

backup.md

feat: add local backup CLI (#40163)

2026-03-08 16:21:20 -04:00

browser.md

docs: clarify browser allowlist troubleshooting

2026-03-29 22:19:22 +09:00

channels.md

Docs: audit Matrix CLI and setup docs

2026-03-29 01:48:18 -04:00

clawbot.md

docs: align CLI docs and help surface

2026-02-22 20:05:01 +01:00

completion.md

docs: align CLI docs and help surface

2026-02-22 20:05:01 +01:00

config.md

Secrets: hard-fail unsupported SecretRef policy and fix gateway restart token drift (#58141)

2026-03-31 02:37:31 -05:00

configure.md

docs(xai): clarify x_search onboarding flow

2026-03-29 00:25:18 +00:00

cron.md

fix: land cron tz one-shot handling and prerelease config warnings (#53224) (thanks @RolfHegr)

2026-03-23 19:38:04 -07:00

daemon.md

Secrets: hard-fail unsupported SecretRef policy and fix gateway restart token drift (#58141)

2026-03-31 02:37:31 -05:00

dashboard.md

Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094)

2026-03-05 12:53:56 -06:00

devices.md

Hardening: refresh stale device pairing requests and pending metadata (#50695)

2026-03-19 18:26:06 -05:00

directory.md

docs: fix curly quotes, non-breaking hyphens, and remaining apostrophes in headings

2026-03-18 01:31:38 -07:00

dns.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

docs.md

!refactor(browser): remove Chrome extension path and add MCP doctor migration (#47893)

2026-03-15 23:56:08 -07:00

doctor.md

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

gateway.md

Secrets: hard-fail unsupported SecretRef policy and fix gateway restart token drift (#58141)

2026-03-31 02:37:31 -05:00

health.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

hooks.md

fix(docs): update remaining npm-spec references for ClawHub-first default

2026-03-22 15:43:15 -07:00

index.md

fix(config): harden SecretRef round-trip handling in Control UI and RPC writes (#58044)

2026-03-30 23:55:03 -05:00

logs.md

fix(cli): drop logs --localTime alias noise

2026-02-11 08:35:49 -05:00

mcp.md

docs: fix before_install finding field name, add MCP SSE transport docs, add acpx auto-install note

2026-03-30 06:53:35 +09:00

memory.md

docs(cli): improve memory command examples (#31803)

2026-03-07 19:03:23 +03:00

message.md

Docs: audit Matrix CLI and setup docs

2026-03-29 01:48:18 -04:00

models.md

docs: explain anthropic claude cli migration

2026-03-26 23:04:47 +00:00

node.md

fix(browser): enforce node browser proxy allowProfiles

2026-03-23 00:56:44 -07:00

nodes.md

docs(nodes): remove nodes.run references

2026-03-30 00:41:06 +01:00

onboard.md

docs(xai): clarify x_search onboarding flow

2026-03-29 00:25:18 +00:00

pairing.md

docs: refresh CLI and trusted-proxy docs

2026-02-25 02:40:12 +00:00

plugins.md

docs(plugins): refresh bundled plugin runtime docs

2026-03-29 09:10:39 +01:00

qr.md

fix: switch pairing setup codes to bootstrap tokens

2026-03-12 22:23:07 +00:00

reset.md

feat: add local backup CLI (#40163)

2026-03-08 16:21:20 -04:00

sandbox.md

test: expand ssh sandbox coverage and docs

2026-03-15 21:38:22 -07:00

secrets.md

Secrets: gate exec dry-run and preflight resolution behind --allow-exec (#49417)

2026-03-17 23:24:34 -05:00

security.md

fix: standardize 'MS Teams' to 'Microsoft Teams' across docs (#50863)

2026-03-19 23:54:47 -07:00

sessions.md

docs: replace stale claude-sonnet-4-5 with 4-6, normalize Node version, remove stale dates

2026-03-19 10:33:03 -07:00

setup.md

docs: rename onboarding user-facing wizard copy

2026-03-16 19:50:31 -05:00

skills.md

feat: add native clawhub install flows

2026-03-22 17:03:49 +00:00

status.md

fix(secrets): scope message SecretRef resolution and harden doctor/status paths (#48728)

2026-03-17 00:01:34 -05:00

system.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

tui.md

feat(tui): infer workspace agent when launching TUI (#39591)

2026-03-08 13:31:11 +03:00

uninstall.md

feat: add local backup CLI (#40163)

2026-03-08 16:21:20 -04:00

update.md

CLI: support package-manager installs from GitHub main (#47630)

2026-03-15 14:18:12 -07:00

voicecall.md

docs: fix voicecall expose disable example

2026-02-22 20:58:28 +01:00

webhooks.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00