clawsweeper[bot] 6745fe8e70 fix(doctor): warn when sandbox hides MCP tools (#84742) ...

Summary:
- This bot replacement PR adds an `openclaw doctor` warning, regression coverage, gateway docs, and a changelog entry for sandbox tool policies that hide configured MCP server tools.
- Reproducibility: yes. source-reproducible. Runtime policy inspection shows sandbox tool policy is a second g ... ed MCP tools, and the source PR supplies after-patch live `openclaw doctor` output showing the new warning.

Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(doctor): mirror sandbox policy fallback
- PR branch already contained follow-up commit before automerge: fix(doctor): preserve sandbox deny diagnostics
- PR branch already contained follow-up commit before automerge: fix(doctor): polish sandbox MCP warnings
- PR branch already contained follow-up commit before automerge: fix(doctor): warn when sandbox hides MCP tools
- PR branch already contained follow-up commit before automerge: fix(clawsweeper): address review for automerge-openclaw-openclaw-8469…

Validation:
- ClawSweeper review passed for head 79dfc3ebc8.
- Required merge gates passed before the squash merge.

Prepared head SHA: 79dfc3ebc8
Review: https://github.com/openclaw/openclaw/pull/84742#issuecomment-4503743579

Co-authored-by: David Huang <nxmxbbd@gmail.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: takhoffman
Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com>

2026-05-21 03:28:27 +00:00

..

security

feat: add native mac dashboard window

2026-05-16 23:49:18 +01:00

authentication.md

Fix gateway auth logout aborting active runs (#82346)

2026-05-15 18:36:49 -05:00

background-process.md

feat(process): show input-wait hints in log and poll

2026-05-10 04:13:07 -04:00

bonjour.md

fix(gateway): honor minimal discovery mode for wide-area DNS-SD [AI] (#80903)

2026-05-12 16:03:50 +05:30

bridge-protocol.md

refactor: move canvas to plugin surfaces

2026-05-07 09:07:18 +01:00

cli-backends.md

Remove codex-cli backend and migrate to Codex runtime

2026-05-14 10:07:18 +01:00

config-agents.md

Add OpenRouter provider routing params (#84579)

2026-05-20 23:27:34 +10:00

config-channels.md

docs(gateway): troubleshoot group @mention silent suppression (#77052)

2026-05-18 17:03:53 +00:00

config-tools.md

fix(doctor): warn when sandbox hides MCP tools (#84742)

2026-05-21 03:28:27 +00:00

configuration-examples.md

fix(messages): keep group visible replies automatic by default (#83498)

2026-05-18 09:48:58 +01:00

configuration-reference.md

feat: add native mac dashboard window

2026-05-16 23:49:18 +01:00

configuration.md

fix(messages): keep group visible replies automatic by default (#83498)

2026-05-18 09:48:58 +01:00

diagnostics.md

fix(gateway): capture opt-in memory pressure snapshots (#82674)

2026-05-16 21:52:09 +01:00

discovery.md

docs: typography hygiene + 2 in-body H1 removals across 5 pages

2026-05-05 21:01:44 -07:00

doctor.md

fix(messages): keep group visible replies automatic by default (#83498)

2026-05-18 09:48:58 +01:00

gateway-lock.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

health.md

fix(gateway): capture opt-in memory pressure snapshots (#82674)

2026-05-16 21:52:09 +01:00

heartbeat.md

Move Codex soul context to developer instructions (#84331)

2026-05-19 16:47:32 -07:00

index.md

fix(webchat): show manual compaction progress

2026-05-16 13:58:44 +01:00

local-model-services.md

docs: add ds4 provider guide

2026-05-13 14:45:34 +01:00

local-models.md

fix: clarify provider timeout ceiling

2026-05-16 01:08:07 +01:00

logging.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

multiple-gateways.md

docs: full-page sentence-case sweep across 5 worst-offender pages

2026-04-26 23:58:35 -07:00

network-model.md

docs: consolidate moved docs pages

2026-05-05 17:38:21 +01:00

openai-http-api.md

fix(gateway): allow trusted-proxy local-direct password fallback (#82953)

2026-05-17 01:35:59 -05:00

openresponses-http-api.md

fix(gateway): allow trusted-proxy local-direct password fallback (#82953)

2026-05-17 01:35:59 -05:00

openshell.md

build: externalize slack openshell vertex plugins

2026-05-14 07:46:58 +01:00

opentelemetry.md

fix: shorten stalled Codex recovery window

2026-05-15 10:19:37 +01:00

operator-scopes.md

fix(cli): retry admin device approval after ownership denial

2026-05-04 00:41:55 +01:00

pairing.md

fix(gateway): allow trusted-proxy local-direct password fallback (#82953)

2026-05-17 01:35:59 -05:00

prometheus.md

fix(diagnostics): export Talk metrics after SDK refactor

2026-05-06 02:01:52 -07:00

protocol.md

[codex] restore QR bootstrap operator handoff (#83684)

2026-05-19 20:59:09 +03:00

remote-gateway-readme.md

docs: sentence-case sweep across 4 more pages

2026-04-27 00:01:52 -07:00

remote.md

feat: add native mac dashboard window

2026-05-16 23:49:18 +01:00

sandbox-vs-tool-policy-vs-elevated.md

fix(doctor): warn when sandbox hides MCP tools (#84742)

2026-05-21 03:28:27 +00:00

sandboxing.md

fix(codex): preserve sandbox egress for app-server turns

2026-05-18 09:00:51 +01:00

secrets-plan-contract.md

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

secrets.md

fix(secrets): treat env refs as audit-safe auth values

2026-05-17 00:05:10 +01:00

tailscale.md

fix(gateway): preserve external Tailscale Funnel routes in serve mode

2026-05-08 09:28:51 -04:00

tools-invoke-http-api.md

fix(gateway): allow trusted-proxy local-direct password fallback (#82953)

2026-05-17 01:35:59 -05:00

troubleshooting.md

fix: improve gateway protocol mismatch diagnostics (#82908)

2026-05-17 06:33:34 +01:00

trusted-proxy-auth.md

fix(gateway): allow trusted-proxy local-direct password fallback (#82953)

2026-05-17 01:35:59 -05:00