Files
openclaw/docs/cli/status.md
Josh Avant a2cb81199e secrets: harden read-only SecretRef command paths and diagnostics (#47794)
* secrets: harden read-only SecretRef resolution for status and audit

* CLI: add SecretRef degrade-safe regression coverage

* Docs: align SecretRef status and daemon probe semantics

* Security audit: close SecretRef review gaps

* Security audit: preserve source auth SecretRef configuredness

* changelog

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>

---------

Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
2026-03-15 21:55:24 -05:00

1.5 KiB

summary, read_when, title
summary read_when title
CLI reference for `openclaw status` (diagnostics, probes, usage snapshots)
You want a quick diagnosis of channel health + recent session recipients
You want a pasteable “all” status for debugging
status

openclaw status

Diagnostics for channels + sessions.

openclaw status
openclaw status --all
openclaw status --deep
openclaw status --usage

Notes:

  • --deep runs live probes (WhatsApp Web + Telegram + Discord + Google Chat + Slack + Signal).
  • Output includes per-agent session stores when multiple agents are configured.
  • Overview includes Gateway + node host service install/runtime status when available.
  • Overview includes update channel + git SHA (for source checkouts).
  • Update info surfaces in the Overview; if an update is available, status prints a hint to run openclaw update (see Updating).
  • Read-only status surfaces (status, status --json, status --all) resolve supported SecretRefs for their targeted config paths when possible.
  • If a supported channel SecretRef is configured but unavailable in the current command path, status stays read-only and reports degraded output instead of crashing. Human output shows warnings such as “configured token unavailable in this command path”, and JSON output includes secretDiagnostics.
  • When command-local SecretRef resolution succeeds, status prefers the resolved snapshot and clears transient “secret unavailable” channel markers from the final output.